<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="2188">
<package pkgid="9030262703dce30ad2742b0c9fe183d058b85dd1435a0d6b608db5858a1bfd19" name="AusweisApp2" arch="aarch64">
  <version epoch="0" ver="1.26.2" rel="bp154.2.3.1"/>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1579348800">- Add Requires on libqt5-qtgraphicaleffects and libqt5-qtquickcontrols2
  This is required for the new default QML interface to work.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1593000000">- New upstream release
  + Version 1.20.1
  * Password-protected proxy servers can now also be used from
    the new user interface.
  * A new option for mobile devices now allows switching between
    portrait and landscape viewing mode.
  * On Android, canceling the authentication process should now
    be faster and the previously occurring crash was fixed.
  * On Windows, a progress bar is now also shown during the
    authentication process when using the new user interface.
  * Small bug fixes.
  * Enterprise installations using the MSI package have gained the possibility
    to enable on-site-readout and providing a proxy configuration.
  * The mobile app now allows enabling and disabling debug mode when retrieving
    one's own personal ID data by tapping the magnifier icon ten times.
  * Also in the mobile app, tapping the version number in the about dialog
    ten times will now activate the advanced settings dialog which allows
    one to enable the on-site-readout.
- Drop patches for issues fixed upstream
  + 0001-disable-vendor-name.patch
  + 0002-fix-desktop-icon-path.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1599134400">- New upstream release
  + Version 1.20.2
  * It is now possible to paste a PIN/CAN/PUK using the common methods of
    the operating system in use, enabling the use of password managers.
  * Fixed an issue on Android 9 and older which prevented switching the
    screen to the WiFi settings on some devices.
  * Some help texts have been improved.
  * A tooltip has been added to the Windows installer for the firewall settings.
  * Search performance in the provider screen has been improved.
  * Fixed an issue on Android where an error message was shown incorrectly when
    the ID card was presented to the card reader before starting authentication.
  * Display fonts have been improved on OnePlus devices.
  * On macOS, the app will now use the integrated graphics adapter if possible.
  * Small bug fixes.
  * Support for Android NDK 21.3 and SDK cmdline-tools 2.1 has been added.
  * Fixed a compatibility issue with Qt 5.10.
  * Fixed an issue where an incorrect text was shown in comfort mode when using
    a smartphone with the CAN-allowed function.
  * Fixed an issue on Android where the feedback screen was incorrectly shown
    after using the external SDK.
  * Documentation for the integrated SDK on Android has been extended to include
    logging facilities and App Bundles.
  * Use of more inclusive terminology, the terms "blacklist" and "suppressions"
    have been removed or renamed.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1606910400">- New upstream release
  + Version 1.22.0
  * PIN management has been revised.
  * App navigation on iOS and Android harmonized. The sidebar on Android has
    been removed and replaced with a bar at the bottom of the screen.
  * The "Help" area has been revised and restructured on all platforms.
    The software licenses can now be viewed within the application.
  * A new start page has been added on Android and iOS.
  * A function test can now be carried out on Android and iOS via the
    entry "Check device and ID card" on the start page.
  * Auxiliary animations have been added to Android and iOS to
    clarify possible positions for placing the ID card.
  * The one-off notice that the transport PIN must be changed
    has been added to Android and iOS.
  * Option entry and query for the permission "local network access" has been
    added on iOS 14. This is necessary for using a smartphone as a card reader.
  * AusweisAppp2 can now be installed on macOS via the App Store. Updates that
    appear in the future can be obtained automatically through the store.
  * The update mechanism on Windows has been revised. The download of the update
    and the start of the installation are now carried out automatically when an
    update is started.
  * Support for the German eID card for Union citizens has been added.
  * Support for macOS Sierra 10.12 has been discontinued.
  * Support for Bluetooth card readers has been discontinued.
  * Minor bug fixes.
  * The SDK now supports changing the PIN.
  * The SDK now supports displaying the permissions "PinManagement" and "CanAllowed".
  * Update of OpenSSL to version 1.1.1h.
  * Update of Qt to version 5.15.2.
- Add libQt5QuickTemplates2-devel to BuildRequires
- Add manpage to %files section
- Add patch to fix manpage installation path
  + 0001-fix-manpage-path.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1615896000">- New upstream release
  + Version 1.22.1
  * The release notes are now displayed within the app.
  * Improvements have been made to the display and reporting
    of error messages within the mobile app.
  * Fixed possible freezing of the app when checking the ID.
  * The pairing of a smartphone can now be started directly.
  * The mobile app now starts with the SaK view if this was
    the last setting used.
  * The smartphone function as a card reader can now always be
    activated on iOS.
  * Animations on iOS have been improved.
  * Minor bug fixes.
  * In the SDK for iOS, the handleInterrupt parameter was added to
    RUN_AUTH and RUN_CHANGE_PIN. Like the associated INTERRUPT command.
  * In the SDK for iOS, parameters have been added for RUN_AUTH and
    RUN_CHANGE_PIN, which allow messages to be displayed in the system
    scan dialog.
  * The following error is now returned in the SDK for an expired ID
    card: DocumentValidityVerificationFailed
  * Added support for the new protocol version for smartphones as card
    readers in accordance with the supplement to BSI TR-03112 Part 6.
  * A crash on Windows when pairing PersoSim has been fixed.
  * Added support for PersoSim for Android with host card emulation.
  * A possible infinite loop in the SDK for Android has been fixed.
  * Update of OpenSSL to version 1.1.1j.
- Drop patches for issues fixed upstream
  + 0001-fix-manpage-path.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1617192000">- New upstream release
  + Version 1.22.2
  * CyberJack RFID basis reader is working again on Windows.
  * Automatic start of the setup wizard when running AusweisApp2
    for the first time on desktop systems is working again now.
  * Fixed a bug in the self-idenfication dialog.
  * Fixed some crashes.
  * The Android SDK is now also made available on Maven Central
    as JCenter has been discontinued.
  * Support for authorization certificates with PIN management.
  * Update of OpenSSL to version 1.1.1k.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1642680000">- New upstream release
  + Version 1.22.3
  * Added references to the PIN reset letter in suitable places.
  * The expiration date is now shown in the self-identification dialog.
  * Fixed Youtube links.
  * Removed unneccessary Qt clipboard access on Android.
  * Fixed some dialogs being shown in the language of the operating system
    instead of the language set in the app's preferences on macOS.
  * Fixed crashes and incorrect behavior on Android 11.
  * More information is displayed on a queried password when using
    one of the Reiner SCT "komfort" series of card readers.
  * Add support for macOS 12.
  * Small fixes and improved accessibility.
  * Added the "developerMode" parameter to the RUN_AUTH variable.
  * Fixed a crash when using the --no-logfile and --keep options.
  * The ShowUI parameter is now displayed on mobile devices.
  * Update of OpenSSL to version 1.1.1m.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1645185600">- New upstream release
  + Version 1.22.4
  * Fixed a random startup crash on Windows.
  * The reminder to change the transport PIN is no longer
    displayed for the PIN reset service or on-site readout.
  * Fixed the "Report a bug" feature on Android 12.
  * Fixed an issue where the iOS NFC dialog was displayed
    longer than necessary.
  * Under certain conditions it was possible that a workflow
    could not be started because a previous workflow had not
    been completed.
  * Minor bug fixes and optimizations.
  * If AusweisApp2 was started just as an SDK on Windows, the
    path of the AutoStart entry in the registry was rewritten
    nevertheless. This has been fixed.
  * The libraries can now be built with MSVC 2022.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1650024000">- New upstream release
  + Version 1.22.5
  * Update of the release notes has been corrected.
  * On Windows 10, the window size is no longer
    changed after a language change.
  * Minor bug fixes and optimizations.
  * Under certain circumstances it was possible that
    the SDK did not send an INSERT_CARD message.
  * Update of OpenSSL to version 1.1.1n.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1653134400">- New upstream release
  + Version 1.22.6
  * Problems with card communication when using the "Smartphone as
    card reader" function in Comfort mode have been fixed.
  * Starting with macOS 10.14, system notifications are now being used.
  * On macOS, the tray icon is now disabled by default.
    This can be re-enabled in the preferences.
  * On iOS, a new NFC scan was not possible under certain
    circumstances. This has been fixed.
  * When canceling an authentication, the app sometimes crashed
    on iOS. This has been fixed.
  * Minor bug fixes and optimizations.
  * Updated OpenSSL to version 1.1.1o.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1653739200">- New upstream release
  + Version 1.22.7
  * Fixed a crash with the new system notifications on macOS 10.14+.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1660824000">- New upstream release
  + Version 1.24.0
  * Technical overhaul of the "Smartphone as card reader" function.
    The use of an ID card app2 older than 1.22.1 is no longer possible
    in combination with 1.24.0.
  * Various optimizations with regards to accessibility.
  * Support for "IPv6 only" home networks.
  * AusweisApp2 is now provided as a 64-bit application on Windows.
  * Official support for Windows 11.
  * Support for Windows 7 and Windows 8.1 has been discontinued.
  * Support for macOS 10.13 and 10.14 has been discontinued.
  * Support for Android 5 and 6 and has been discontinued.
  * Added an integrated ID card simulator for testing.
  * An automatic mode for authentication for tests is now possible.
  * AusweisApp2 is now available as a container SDK or Docker image. This
    can be controlled using WebSocket or the new automatic authentication.
  * Command line parameters can now be passed in the iOS SDK.
  * Support for SHA224 and SECP224 has been discontinued.
  * The partially-embedded SDK on Android has been discontinued.
  * The SDK now uses API level v2.
  * Updated OpenSSL to version 3.0.5.
  * Updated Qt to version 6.3.1.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1662379200">- New upstream release
  + Version 1.24.1
  * Support for the Russian and Ukrainian languages has been added.
  * Fixed some issues with regards to PersoSim.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1662552000">- New upstream release
  + Version 1.24.2
  * Fixed crashes on Android.
  * Fixed a bug with changing the transport PIN on desktop systems.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1667044800">- New upstream release
  + Version 1.24.3
  * Fixed crashes on Android.
  * Disabled (cloud) backup on Android and iOS.
  * Fixed the A11y display of the SaK pairing code on Android and iOS.
  * Blocked installation on unsupported versions of Windows 10.
  * Fixed compatibility with Qt 6.4.
  * Enabled the simulator in the Android and iOS SDK.
- Upgrade Qt build and runtime dependencies for Qt6
  + Add Qt6 packages to BuildRequires
  * qt6-concurrent-devel
  * qt6-core-devel
  * qt6-linguist-devel
  * qt6-network-devel
  * qt6-qml-devel
  * qt6-qmlworkerscript-devel
  * qt6-quick-devel
  * qt6-quickcontrols2-devel
  * qt6-shadertools-devel
  * qt6-statemachine-devel
  * qt6-svg-devel
  * qt6-websockets-devel
  + Drop all Qt5 packages from BuildRequires and Requires
- Run spec-cleaner</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1667390400">- New upstream release
  + Version 1.24.4
  * Fixed potential crashes due to OpenSSL (denial of service).
  * Updated OpenSSL to version 3.0.7.</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1667995200">- Add BuildRequires, so it can also build for Leap &gt;= 15.4.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1671364800">- New upstream release
  + Version 1.26.1
  - Fixed the loss of settings on Android.
  - Fixed the use of non-public or deprecated APIs
    on macOS to comply with App Store Guidelines.
  + from version 1.26.0
  - Support for macOS 13.
  - Support for Windows Server 2016 (version 1607).
  - Support for Windows Server 2019.
  - Support for Windows Server 2022.
  - A proxy service is now available for multi-user operation in terminal
    server environments. Details can be found in the document "Guide To
    Installation In Corporate Networks".
  - Fixed crashes on Android.
  - The iOS SDK now supports the arm64 simulator.
  - Updated OpenSSL to version 3.0.7.
  - Updated Qt to version 6.4.1.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1674475200">- New upstream release
  + Version 1.26.2
  - Fixed notification when another application is running on the port in use.
  - Fixed crashes on Android.
  - Optimization of forwarding to "CommunicationErrorAddress" on iOS.
  - Improved installation of the proxy service for terminal server environments.
  - Fixed the setting for the setup wizard when installing in corporate networks.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1675598400">- switch to generic openssl-devel to allow openssl-3</changelog>
</package>
<package pkgid="9f3a6056a876167dfa5739183390edd19fd0e3b9d670c3b140d24291b27e2500" name="AusweisApp2" arch="ppc64le">
  <version epoch="0" ver="1.26.2" rel="bp154.2.3.1"/>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1579348800">- Add Requires on libqt5-qtgraphicaleffects and libqt5-qtquickcontrols2
  This is required for the new default QML interface to work.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1593000000">- New upstream release
  + Version 1.20.1
  * Password-protected proxy servers can now also be used from
    the new user interface.
  * A new option for mobile devices now allows switching between
    portrait and landscape viewing mode.
  * On Android, canceling the authentication process should now
    be faster and the previously occurring crash was fixed.
  * On Windows, a progress bar is now also shown during the
    authentication process when using the new user interface.
  * Small bug fixes.
  * Enterprise installations using the MSI package have gained the possibility
    to enable on-site-readout and providing a proxy configuration.
  * The mobile app now allows enabling and disabling debug mode when retrieving
    one's own personal ID data by tapping the magnifier icon ten times.
  * Also in the mobile app, tapping the version number in the about dialog
    ten times will now activate the advanced settings dialog which allows
    one to enable the on-site-readout.
- Drop patches for issues fixed upstream
  + 0001-disable-vendor-name.patch
  + 0002-fix-desktop-icon-path.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1599134400">- New upstream release
  + Version 1.20.2
  * It is now possible to paste a PIN/CAN/PUK using the common methods of
    the operating system in use, enabling the use of password managers.
  * Fixed an issue on Android 9 and older which prevented switching the
    screen to the WiFi settings on some devices.
  * Some help texts have been improved.
  * A tooltip has been added to the Windows installer for the firewall settings.
  * Search performance in the provider screen has been improved.
  * Fixed an issue on Android where an error message was shown incorrectly when
    the ID card was presented to the card reader before starting authentication.
  * Display fonts have been improved on OnePlus devices.
  * On macOS, the app will now use the integrated graphics adapter if possible.
  * Small bug fixes.
  * Support for Android NDK 21.3 and SDK cmdline-tools 2.1 has been added.
  * Fixed a compatibility issue with Qt 5.10.
  * Fixed an issue where an incorrect text was shown in comfort mode when using
    a smartphone with the CAN-allowed function.
  * Fixed an issue on Android where the feedback screen was incorrectly shown
    after using the external SDK.
  * Documentation for the integrated SDK on Android has been extended to include
    logging facilities and App Bundles.
  * Use of more inclusive terminology, the terms "blacklist" and "suppressions"
    have been removed or renamed.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1606910400">- New upstream release
  + Version 1.22.0
  * PIN management has been revised.
  * App navigation on iOS and Android harmonized. The sidebar on Android has
    been removed and replaced with a bar at the bottom of the screen.
  * The "Help" area has been revised and restructured on all platforms.
    The software licenses can now be viewed within the application.
  * A new start page has been added on Android and iOS.
  * A function test can now be carried out on Android and iOS via the
    entry "Check device and ID card" on the start page.
  * Auxiliary animations have been added to Android and iOS to
    clarify possible positions for placing the ID card.
  * The one-off notice that the transport PIN must be changed
    has been added to Android and iOS.
  * Option entry and query for the permission "local network access" has been
    added on iOS 14. This is necessary for using a smartphone as a card reader.
  * AusweisAppp2 can now be installed on macOS via the App Store. Updates that
    appear in the future can be obtained automatically through the store.
  * The update mechanism on Windows has been revised. The download of the update
    and the start of the installation are now carried out automatically when an
    update is started.
  * Support for the German eID card for Union citizens has been added.
  * Support for macOS Sierra 10.12 has been discontinued.
  * Support for Bluetooth card readers has been discontinued.
  * Minor bug fixes.
  * The SDK now supports changing the PIN.
  * The SDK now supports displaying the permissions "PinManagement" and "CanAllowed".
  * Update of OpenSSL to version 1.1.1h.
  * Update of Qt to version 5.15.2.
- Add libQt5QuickTemplates2-devel to BuildRequires
- Add manpage to %files section
- Add patch to fix manpage installation path
  + 0001-fix-manpage-path.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1615896000">- New upstream release
  + Version 1.22.1
  * The release notes are now displayed within the app.
  * Improvements have been made to the display and reporting
    of error messages within the mobile app.
  * Fixed possible freezing of the app when checking the ID.
  * The pairing of a smartphone can now be started directly.
  * The mobile app now starts with the SaK view if this was
    the last setting used.
  * The smartphone function as a card reader can now always be
    activated on iOS.
  * Animations on iOS have been improved.
  * Minor bug fixes.
  * In the SDK for iOS, the handleInterrupt parameter was added to
    RUN_AUTH and RUN_CHANGE_PIN. Like the associated INTERRUPT command.
  * In the SDK for iOS, parameters have been added for RUN_AUTH and
    RUN_CHANGE_PIN, which allow messages to be displayed in the system
    scan dialog.
  * The following error is now returned in the SDK for an expired ID
    card: DocumentValidityVerificationFailed
  * Added support for the new protocol version for smartphones as card
    readers in accordance with the supplement to BSI TR-03112 Part 6.
  * A crash on Windows when pairing PersoSim has been fixed.
  * Added support for PersoSim for Android with host card emulation.
  * A possible infinite loop in the SDK for Android has been fixed.
  * Update of OpenSSL to version 1.1.1j.
- Drop patches for issues fixed upstream
  + 0001-fix-manpage-path.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1617192000">- New upstream release
  + Version 1.22.2
  * CyberJack RFID basis reader is working again on Windows.
  * Automatic start of the setup wizard when running AusweisApp2
    for the first time on desktop systems is working again now.
  * Fixed a bug in the self-idenfication dialog.
  * Fixed some crashes.
  * The Android SDK is now also made available on Maven Central
    as JCenter has been discontinued.
  * Support for authorization certificates with PIN management.
  * Update of OpenSSL to version 1.1.1k.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1642680000">- New upstream release
  + Version 1.22.3
  * Added references to the PIN reset letter in suitable places.
  * The expiration date is now shown in the self-identification dialog.
  * Fixed Youtube links.
  * Removed unneccessary Qt clipboard access on Android.
  * Fixed some dialogs being shown in the language of the operating system
    instead of the language set in the app's preferences on macOS.
  * Fixed crashes and incorrect behavior on Android 11.
  * More information is displayed on a queried password when using
    one of the Reiner SCT "komfort" series of card readers.
  * Add support for macOS 12.
  * Small fixes and improved accessibility.
  * Added the "developerMode" parameter to the RUN_AUTH variable.
  * Fixed a crash when using the --no-logfile and --keep options.
  * The ShowUI parameter is now displayed on mobile devices.
  * Update of OpenSSL to version 1.1.1m.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1645185600">- New upstream release
  + Version 1.22.4
  * Fixed a random startup crash on Windows.
  * The reminder to change the transport PIN is no longer
    displayed for the PIN reset service or on-site readout.
  * Fixed the "Report a bug" feature on Android 12.
  * Fixed an issue where the iOS NFC dialog was displayed
    longer than necessary.
  * Under certain conditions it was possible that a workflow
    could not be started because a previous workflow had not
    been completed.
  * Minor bug fixes and optimizations.
  * If AusweisApp2 was started just as an SDK on Windows, the
    path of the AutoStart entry in the registry was rewritten
    nevertheless. This has been fixed.
  * The libraries can now be built with MSVC 2022.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1650024000">- New upstream release
  + Version 1.22.5
  * Update of the release notes has been corrected.
  * On Windows 10, the window size is no longer
    changed after a language change.
  * Minor bug fixes and optimizations.
  * Under certain circumstances it was possible that
    the SDK did not send an INSERT_CARD message.
  * Update of OpenSSL to version 1.1.1n.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1653134400">- New upstream release
  + Version 1.22.6
  * Problems with card communication when using the "Smartphone as
    card reader" function in Comfort mode have been fixed.
  * Starting with macOS 10.14, system notifications are now being used.
  * On macOS, the tray icon is now disabled by default.
    This can be re-enabled in the preferences.
  * On iOS, a new NFC scan was not possible under certain
    circumstances. This has been fixed.
  * When canceling an authentication, the app sometimes crashed
    on iOS. This has been fixed.
  * Minor bug fixes and optimizations.
  * Updated OpenSSL to version 1.1.1o.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1653739200">- New upstream release
  + Version 1.22.7
  * Fixed a crash with the new system notifications on macOS 10.14+.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1660824000">- New upstream release
  + Version 1.24.0
  * Technical overhaul of the "Smartphone as card reader" function.
    The use of an ID card app2 older than 1.22.1 is no longer possible
    in combination with 1.24.0.
  * Various optimizations with regards to accessibility.
  * Support for "IPv6 only" home networks.
  * AusweisApp2 is now provided as a 64-bit application on Windows.
  * Official support for Windows 11.
  * Support for Windows 7 and Windows 8.1 has been discontinued.
  * Support for macOS 10.13 and 10.14 has been discontinued.
  * Support for Android 5 and 6 and has been discontinued.
  * Added an integrated ID card simulator for testing.
  * An automatic mode for authentication for tests is now possible.
  * AusweisApp2 is now available as a container SDK or Docker image. This
    can be controlled using WebSocket or the new automatic authentication.
  * Command line parameters can now be passed in the iOS SDK.
  * Support for SHA224 and SECP224 has been discontinued.
  * The partially-embedded SDK on Android has been discontinued.
  * The SDK now uses API level v2.
  * Updated OpenSSL to version 3.0.5.
  * Updated Qt to version 6.3.1.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1662379200">- New upstream release
  + Version 1.24.1
  * Support for the Russian and Ukrainian languages has been added.
  * Fixed some issues with regards to PersoSim.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1662552000">- New upstream release
  + Version 1.24.2
  * Fixed crashes on Android.
  * Fixed a bug with changing the transport PIN on desktop systems.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1667044800">- New upstream release
  + Version 1.24.3
  * Fixed crashes on Android.
  * Disabled (cloud) backup on Android and iOS.
  * Fixed the A11y display of the SaK pairing code on Android and iOS.
  * Blocked installation on unsupported versions of Windows 10.
  * Fixed compatibility with Qt 6.4.
  * Enabled the simulator in the Android and iOS SDK.
- Upgrade Qt build and runtime dependencies for Qt6
  + Add Qt6 packages to BuildRequires
  * qt6-concurrent-devel
  * qt6-core-devel
  * qt6-linguist-devel
  * qt6-network-devel
  * qt6-qml-devel
  * qt6-qmlworkerscript-devel
  * qt6-quick-devel
  * qt6-quickcontrols2-devel
  * qt6-shadertools-devel
  * qt6-statemachine-devel
  * qt6-svg-devel
  * qt6-websockets-devel
  + Drop all Qt5 packages from BuildRequires and Requires
- Run spec-cleaner</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1667390400">- New upstream release
  + Version 1.24.4
  * Fixed potential crashes due to OpenSSL (denial of service).
  * Updated OpenSSL to version 3.0.7.</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1667995200">- Add BuildRequires, so it can also build for Leap &gt;= 15.4.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1671364800">- New upstream release
  + Version 1.26.1
  - Fixed the loss of settings on Android.
  - Fixed the use of non-public or deprecated APIs
    on macOS to comply with App Store Guidelines.
  + from version 1.26.0
  - Support for macOS 13.
  - Support for Windows Server 2016 (version 1607).
  - Support for Windows Server 2019.
  - Support for Windows Server 2022.
  - A proxy service is now available for multi-user operation in terminal
    server environments. Details can be found in the document "Guide To
    Installation In Corporate Networks".
  - Fixed crashes on Android.
  - The iOS SDK now supports the arm64 simulator.
  - Updated OpenSSL to version 3.0.7.
  - Updated Qt to version 6.4.1.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1674475200">- New upstream release
  + Version 1.26.2
  - Fixed notification when another application is running on the port in use.
  - Fixed crashes on Android.
  - Optimization of forwarding to "CommunicationErrorAddress" on iOS.
  - Improved installation of the proxy service for terminal server environments.
  - Fixed the setting for the setup wizard when installing in corporate networks.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1675598400">- switch to generic openssl-devel to allow openssl-3</changelog>
</package>
<package pkgid="acf1b899ed46c63dae069bb93e7b16390f010893cfd4916eb1e99665f0498402" name="AusweisApp2" arch="s390x">
  <version epoch="0" ver="1.26.2" rel="bp154.2.3.1"/>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1579348800">- Add Requires on libqt5-qtgraphicaleffects and libqt5-qtquickcontrols2
  This is required for the new default QML interface to work.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1593000000">- New upstream release
  + Version 1.20.1
  * Password-protected proxy servers can now also be used from
    the new user interface.
  * A new option for mobile devices now allows switching between
    portrait and landscape viewing mode.
  * On Android, canceling the authentication process should now
    be faster and the previously occurring crash was fixed.
  * On Windows, a progress bar is now also shown during the
    authentication process when using the new user interface.
  * Small bug fixes.
  * Enterprise installations using the MSI package have gained the possibility
    to enable on-site-readout and providing a proxy configuration.
  * The mobile app now allows enabling and disabling debug mode when retrieving
    one's own personal ID data by tapping the magnifier icon ten times.
  * Also in the mobile app, tapping the version number in the about dialog
    ten times will now activate the advanced settings dialog which allows
    one to enable the on-site-readout.
- Drop patches for issues fixed upstream
  + 0001-disable-vendor-name.patch
  + 0002-fix-desktop-icon-path.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1599134400">- New upstream release
  + Version 1.20.2
  * It is now possible to paste a PIN/CAN/PUK using the common methods of
    the operating system in use, enabling the use of password managers.
  * Fixed an issue on Android 9 and older which prevented switching the
    screen to the WiFi settings on some devices.
  * Some help texts have been improved.
  * A tooltip has been added to the Windows installer for the firewall settings.
  * Search performance in the provider screen has been improved.
  * Fixed an issue on Android where an error message was shown incorrectly when
    the ID card was presented to the card reader before starting authentication.
  * Display fonts have been improved on OnePlus devices.
  * On macOS, the app will now use the integrated graphics adapter if possible.
  * Small bug fixes.
  * Support for Android NDK 21.3 and SDK cmdline-tools 2.1 has been added.
  * Fixed a compatibility issue with Qt 5.10.
  * Fixed an issue where an incorrect text was shown in comfort mode when using
    a smartphone with the CAN-allowed function.
  * Fixed an issue on Android where the feedback screen was incorrectly shown
    after using the external SDK.
  * Documentation for the integrated SDK on Android has been extended to include
    logging facilities and App Bundles.
  * Use of more inclusive terminology, the terms "blacklist" and "suppressions"
    have been removed or renamed.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1606910400">- New upstream release
  + Version 1.22.0
  * PIN management has been revised.
  * App navigation on iOS and Android harmonized. The sidebar on Android has
    been removed and replaced with a bar at the bottom of the screen.
  * The "Help" area has been revised and restructured on all platforms.
    The software licenses can now be viewed within the application.
  * A new start page has been added on Android and iOS.
  * A function test can now be carried out on Android and iOS via the
    entry "Check device and ID card" on the start page.
  * Auxiliary animations have been added to Android and iOS to
    clarify possible positions for placing the ID card.
  * The one-off notice that the transport PIN must be changed
    has been added to Android and iOS.
  * Option entry and query for the permission "local network access" has been
    added on iOS 14. This is necessary for using a smartphone as a card reader.
  * AusweisAppp2 can now be installed on macOS via the App Store. Updates that
    appear in the future can be obtained automatically through the store.
  * The update mechanism on Windows has been revised. The download of the update
    and the start of the installation are now carried out automatically when an
    update is started.
  * Support for the German eID card for Union citizens has been added.
  * Support for macOS Sierra 10.12 has been discontinued.
  * Support for Bluetooth card readers has been discontinued.
  * Minor bug fixes.
  * The SDK now supports changing the PIN.
  * The SDK now supports displaying the permissions "PinManagement" and "CanAllowed".
  * Update of OpenSSL to version 1.1.1h.
  * Update of Qt to version 5.15.2.
- Add libQt5QuickTemplates2-devel to BuildRequires
- Add manpage to %files section
- Add patch to fix manpage installation path
  + 0001-fix-manpage-path.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1615896000">- New upstream release
  + Version 1.22.1
  * The release notes are now displayed within the app.
  * Improvements have been made to the display and reporting
    of error messages within the mobile app.
  * Fixed possible freezing of the app when checking the ID.
  * The pairing of a smartphone can now be started directly.
  * The mobile app now starts with the SaK view if this was
    the last setting used.
  * The smartphone function as a card reader can now always be
    activated on iOS.
  * Animations on iOS have been improved.
  * Minor bug fixes.
  * In the SDK for iOS, the handleInterrupt parameter was added to
    RUN_AUTH and RUN_CHANGE_PIN. Like the associated INTERRUPT command.
  * In the SDK for iOS, parameters have been added for RUN_AUTH and
    RUN_CHANGE_PIN, which allow messages to be displayed in the system
    scan dialog.
  * The following error is now returned in the SDK for an expired ID
    card: DocumentValidityVerificationFailed
  * Added support for the new protocol version for smartphones as card
    readers in accordance with the supplement to BSI TR-03112 Part 6.
  * A crash on Windows when pairing PersoSim has been fixed.
  * Added support for PersoSim for Android with host card emulation.
  * A possible infinite loop in the SDK for Android has been fixed.
  * Update of OpenSSL to version 1.1.1j.
- Drop patches for issues fixed upstream
  + 0001-fix-manpage-path.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1617192000">- New upstream release
  + Version 1.22.2
  * CyberJack RFID basis reader is working again on Windows.
  * Automatic start of the setup wizard when running AusweisApp2
    for the first time on desktop systems is working again now.
  * Fixed a bug in the self-idenfication dialog.
  * Fixed some crashes.
  * The Android SDK is now also made available on Maven Central
    as JCenter has been discontinued.
  * Support for authorization certificates with PIN management.
  * Update of OpenSSL to version 1.1.1k.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1642680000">- New upstream release
  + Version 1.22.3
  * Added references to the PIN reset letter in suitable places.
  * The expiration date is now shown in the self-identification dialog.
  * Fixed Youtube links.
  * Removed unneccessary Qt clipboard access on Android.
  * Fixed some dialogs being shown in the language of the operating system
    instead of the language set in the app's preferences on macOS.
  * Fixed crashes and incorrect behavior on Android 11.
  * More information is displayed on a queried password when using
    one of the Reiner SCT "komfort" series of card readers.
  * Add support for macOS 12.
  * Small fixes and improved accessibility.
  * Added the "developerMode" parameter to the RUN_AUTH variable.
  * Fixed a crash when using the --no-logfile and --keep options.
  * The ShowUI parameter is now displayed on mobile devices.
  * Update of OpenSSL to version 1.1.1m.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1645185600">- New upstream release
  + Version 1.22.4
  * Fixed a random startup crash on Windows.
  * The reminder to change the transport PIN is no longer
    displayed for the PIN reset service or on-site readout.
  * Fixed the "Report a bug" feature on Android 12.
  * Fixed an issue where the iOS NFC dialog was displayed
    longer than necessary.
  * Under certain conditions it was possible that a workflow
    could not be started because a previous workflow had not
    been completed.
  * Minor bug fixes and optimizations.
  * If AusweisApp2 was started just as an SDK on Windows, the
    path of the AutoStart entry in the registry was rewritten
    nevertheless. This has been fixed.
  * The libraries can now be built with MSVC 2022.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1650024000">- New upstream release
  + Version 1.22.5
  * Update of the release notes has been corrected.
  * On Windows 10, the window size is no longer
    changed after a language change.
  * Minor bug fixes and optimizations.
  * Under certain circumstances it was possible that
    the SDK did not send an INSERT_CARD message.
  * Update of OpenSSL to version 1.1.1n.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1653134400">- New upstream release
  + Version 1.22.6
  * Problems with card communication when using the "Smartphone as
    card reader" function in Comfort mode have been fixed.
  * Starting with macOS 10.14, system notifications are now being used.
  * On macOS, the tray icon is now disabled by default.
    This can be re-enabled in the preferences.
  * On iOS, a new NFC scan was not possible under certain
    circumstances. This has been fixed.
  * When canceling an authentication, the app sometimes crashed
    on iOS. This has been fixed.
  * Minor bug fixes and optimizations.
  * Updated OpenSSL to version 1.1.1o.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1653739200">- New upstream release
  + Version 1.22.7
  * Fixed a crash with the new system notifications on macOS 10.14+.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1660824000">- New upstream release
  + Version 1.24.0
  * Technical overhaul of the "Smartphone as card reader" function.
    The use of an ID card app2 older than 1.22.1 is no longer possible
    in combination with 1.24.0.
  * Various optimizations with regards to accessibility.
  * Support for "IPv6 only" home networks.
  * AusweisApp2 is now provided as a 64-bit application on Windows.
  * Official support for Windows 11.
  * Support for Windows 7 and Windows 8.1 has been discontinued.
  * Support for macOS 10.13 and 10.14 has been discontinued.
  * Support for Android 5 and 6 and has been discontinued.
  * Added an integrated ID card simulator for testing.
  * An automatic mode for authentication for tests is now possible.
  * AusweisApp2 is now available as a container SDK or Docker image. This
    can be controlled using WebSocket or the new automatic authentication.
  * Command line parameters can now be passed in the iOS SDK.
  * Support for SHA224 and SECP224 has been discontinued.
  * The partially-embedded SDK on Android has been discontinued.
  * The SDK now uses API level v2.
  * Updated OpenSSL to version 3.0.5.
  * Updated Qt to version 6.3.1.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1662379200">- New upstream release
  + Version 1.24.1
  * Support for the Russian and Ukrainian languages has been added.
  * Fixed some issues with regards to PersoSim.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1662552000">- New upstream release
  + Version 1.24.2
  * Fixed crashes on Android.
  * Fixed a bug with changing the transport PIN on desktop systems.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1667044800">- New upstream release
  + Version 1.24.3
  * Fixed crashes on Android.
  * Disabled (cloud) backup on Android and iOS.
  * Fixed the A11y display of the SaK pairing code on Android and iOS.
  * Blocked installation on unsupported versions of Windows 10.
  * Fixed compatibility with Qt 6.4.
  * Enabled the simulator in the Android and iOS SDK.
- Upgrade Qt build and runtime dependencies for Qt6
  + Add Qt6 packages to BuildRequires
  * qt6-concurrent-devel
  * qt6-core-devel
  * qt6-linguist-devel
  * qt6-network-devel
  * qt6-qml-devel
  * qt6-qmlworkerscript-devel
  * qt6-quick-devel
  * qt6-quickcontrols2-devel
  * qt6-shadertools-devel
  * qt6-statemachine-devel
  * qt6-svg-devel
  * qt6-websockets-devel
  + Drop all Qt5 packages from BuildRequires and Requires
- Run spec-cleaner</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1667390400">- New upstream release
  + Version 1.24.4
  * Fixed potential crashes due to OpenSSL (denial of service).
  * Updated OpenSSL to version 3.0.7.</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1667995200">- Add BuildRequires, so it can also build for Leap &gt;= 15.4.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1671364800">- New upstream release
  + Version 1.26.1
  - Fixed the loss of settings on Android.
  - Fixed the use of non-public or deprecated APIs
    on macOS to comply with App Store Guidelines.
  + from version 1.26.0
  - Support for macOS 13.
  - Support for Windows Server 2016 (version 1607).
  - Support for Windows Server 2019.
  - Support for Windows Server 2022.
  - A proxy service is now available for multi-user operation in terminal
    server environments. Details can be found in the document "Guide To
    Installation In Corporate Networks".
  - Fixed crashes on Android.
  - The iOS SDK now supports the arm64 simulator.
  - Updated OpenSSL to version 3.0.7.
  - Updated Qt to version 6.4.1.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1674475200">- New upstream release
  + Version 1.26.2
  - Fixed notification when another application is running on the port in use.
  - Fixed crashes on Android.
  - Optimization of forwarding to "CommunicationErrorAddress" on iOS.
  - Improved installation of the proxy service for terminal server environments.
  - Fixed the setting for the setup wizard when installing in corporate networks.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1675598400">- switch to generic openssl-devel to allow openssl-3</changelog>
</package>
<package pkgid="d1a4a3abd1f8c4fde67411d6b76e0cf7332938de5ca2f2292b8136bcc0bbf06b" name="AusweisApp2" arch="src">
  <version epoch="0" ver="1.26.2" rel="bp154.2.3.1"/>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1579348800">- Add Requires on libqt5-qtgraphicaleffects and libqt5-qtquickcontrols2
  This is required for the new default QML interface to work.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1593000000">- New upstream release
  + Version 1.20.1
  * Password-protected proxy servers can now also be used from
    the new user interface.
  * A new option for mobile devices now allows switching between
    portrait and landscape viewing mode.
  * On Android, canceling the authentication process should now
    be faster and the previously occurring crash was fixed.
  * On Windows, a progress bar is now also shown during the
    authentication process when using the new user interface.
  * Small bug fixes.
  * Enterprise installations using the MSI package have gained the possibility
    to enable on-site-readout and providing a proxy configuration.
  * The mobile app now allows enabling and disabling debug mode when retrieving
    one's own personal ID data by tapping the magnifier icon ten times.
  * Also in the mobile app, tapping the version number in the about dialog
    ten times will now activate the advanced settings dialog which allows
    one to enable the on-site-readout.
- Drop patches for issues fixed upstream
  + 0001-disable-vendor-name.patch
  + 0002-fix-desktop-icon-path.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1599134400">- New upstream release
  + Version 1.20.2
  * It is now possible to paste a PIN/CAN/PUK using the common methods of
    the operating system in use, enabling the use of password managers.
  * Fixed an issue on Android 9 and older which prevented switching the
    screen to the WiFi settings on some devices.
  * Some help texts have been improved.
  * A tooltip has been added to the Windows installer for the firewall settings.
  * Search performance in the provider screen has been improved.
  * Fixed an issue on Android where an error message was shown incorrectly when
    the ID card was presented to the card reader before starting authentication.
  * Display fonts have been improved on OnePlus devices.
  * On macOS, the app will now use the integrated graphics adapter if possible.
  * Small bug fixes.
  * Support for Android NDK 21.3 and SDK cmdline-tools 2.1 has been added.
  * Fixed a compatibility issue with Qt 5.10.
  * Fixed an issue where an incorrect text was shown in comfort mode when using
    a smartphone with the CAN-allowed function.
  * Fixed an issue on Android where the feedback screen was incorrectly shown
    after using the external SDK.
  * Documentation for the integrated SDK on Android has been extended to include
    logging facilities and App Bundles.
  * Use of more inclusive terminology, the terms "blacklist" and "suppressions"
    have been removed or renamed.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1606910400">- New upstream release
  + Version 1.22.0
  * PIN management has been revised.
  * App navigation on iOS and Android harmonized. The sidebar on Android has
    been removed and replaced with a bar at the bottom of the screen.
  * The "Help" area has been revised and restructured on all platforms.
    The software licenses can now be viewed within the application.
  * A new start page has been added on Android and iOS.
  * A function test can now be carried out on Android and iOS via the
    entry "Check device and ID card" on the start page.
  * Auxiliary animations have been added to Android and iOS to
    clarify possible positions for placing the ID card.
  * The one-off notice that the transport PIN must be changed
    has been added to Android and iOS.
  * Option entry and query for the permission "local network access" has been
    added on iOS 14. This is necessary for using a smartphone as a card reader.
  * AusweisAppp2 can now be installed on macOS via the App Store. Updates that
    appear in the future can be obtained automatically through the store.
  * The update mechanism on Windows has been revised. The download of the update
    and the start of the installation are now carried out automatically when an
    update is started.
  * Support for the German eID card for Union citizens has been added.
  * Support for macOS Sierra 10.12 has been discontinued.
  * Support for Bluetooth card readers has been discontinued.
  * Minor bug fixes.
  * The SDK now supports changing the PIN.
  * The SDK now supports displaying the permissions "PinManagement" and "CanAllowed".
  * Update of OpenSSL to version 1.1.1h.
  * Update of Qt to version 5.15.2.
- Add libQt5QuickTemplates2-devel to BuildRequires
- Add manpage to %files section
- Add patch to fix manpage installation path
  + 0001-fix-manpage-path.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1615896000">- New upstream release
  + Version 1.22.1
  * The release notes are now displayed within the app.
  * Improvements have been made to the display and reporting
    of error messages within the mobile app.
  * Fixed possible freezing of the app when checking the ID.
  * The pairing of a smartphone can now be started directly.
  * The mobile app now starts with the SaK view if this was
    the last setting used.
  * The smartphone function as a card reader can now always be
    activated on iOS.
  * Animations on iOS have been improved.
  * Minor bug fixes.
  * In the SDK for iOS, the handleInterrupt parameter was added to
    RUN_AUTH and RUN_CHANGE_PIN. Like the associated INTERRUPT command.
  * In the SDK for iOS, parameters have been added for RUN_AUTH and
    RUN_CHANGE_PIN, which allow messages to be displayed in the system
    scan dialog.
  * The following error is now returned in the SDK for an expired ID
    card: DocumentValidityVerificationFailed
  * Added support for the new protocol version for smartphones as card
    readers in accordance with the supplement to BSI TR-03112 Part 6.
  * A crash on Windows when pairing PersoSim has been fixed.
  * Added support for PersoSim for Android with host card emulation.
  * A possible infinite loop in the SDK for Android has been fixed.
  * Update of OpenSSL to version 1.1.1j.
- Drop patches for issues fixed upstream
  + 0001-fix-manpage-path.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1617192000">- New upstream release
  + Version 1.22.2
  * CyberJack RFID basis reader is working again on Windows.
  * Automatic start of the setup wizard when running AusweisApp2
    for the first time on desktop systems is working again now.
  * Fixed a bug in the self-idenfication dialog.
  * Fixed some crashes.
  * The Android SDK is now also made available on Maven Central
    as JCenter has been discontinued.
  * Support for authorization certificates with PIN management.
  * Update of OpenSSL to version 1.1.1k.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1642680000">- New upstream release
  + Version 1.22.3
  * Added references to the PIN reset letter in suitable places.
  * The expiration date is now shown in the self-identification dialog.
  * Fixed Youtube links.
  * Removed unneccessary Qt clipboard access on Android.
  * Fixed some dialogs being shown in the language of the operating system
    instead of the language set in the app's preferences on macOS.
  * Fixed crashes and incorrect behavior on Android 11.
  * More information is displayed on a queried password when using
    one of the Reiner SCT "komfort" series of card readers.
  * Add support for macOS 12.
  * Small fixes and improved accessibility.
  * Added the "developerMode" parameter to the RUN_AUTH variable.
  * Fixed a crash when using the --no-logfile and --keep options.
  * The ShowUI parameter is now displayed on mobile devices.
  * Update of OpenSSL to version 1.1.1m.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1645185600">- New upstream release
  + Version 1.22.4
  * Fixed a random startup crash on Windows.
  * The reminder to change the transport PIN is no longer
    displayed for the PIN reset service or on-site readout.
  * Fixed the "Report a bug" feature on Android 12.
  * Fixed an issue where the iOS NFC dialog was displayed
    longer than necessary.
  * Under certain conditions it was possible that a workflow
    could not be started because a previous workflow had not
    been completed.
  * Minor bug fixes and optimizations.
  * If AusweisApp2 was started just as an SDK on Windows, the
    path of the AutoStart entry in the registry was rewritten
    nevertheless. This has been fixed.
  * The libraries can now be built with MSVC 2022.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1650024000">- New upstream release
  + Version 1.22.5
  * Update of the release notes has been corrected.
  * On Windows 10, the window size is no longer
    changed after a language change.
  * Minor bug fixes and optimizations.
  * Under certain circumstances it was possible that
    the SDK did not send an INSERT_CARD message.
  * Update of OpenSSL to version 1.1.1n.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1653134400">- New upstream release
  + Version 1.22.6
  * Problems with card communication when using the "Smartphone as
    card reader" function in Comfort mode have been fixed.
  * Starting with macOS 10.14, system notifications are now being used.
  * On macOS, the tray icon is now disabled by default.
    This can be re-enabled in the preferences.
  * On iOS, a new NFC scan was not possible under certain
    circumstances. This has been fixed.
  * When canceling an authentication, the app sometimes crashed
    on iOS. This has been fixed.
  * Minor bug fixes and optimizations.
  * Updated OpenSSL to version 1.1.1o.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1653739200">- New upstream release
  + Version 1.22.7
  * Fixed a crash with the new system notifications on macOS 10.14+.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1660824000">- New upstream release
  + Version 1.24.0
  * Technical overhaul of the "Smartphone as card reader" function.
    The use of an ID card app2 older than 1.22.1 is no longer possible
    in combination with 1.24.0.
  * Various optimizations with regards to accessibility.
  * Support for "IPv6 only" home networks.
  * AusweisApp2 is now provided as a 64-bit application on Windows.
  * Official support for Windows 11.
  * Support for Windows 7 and Windows 8.1 has been discontinued.
  * Support for macOS 10.13 and 10.14 has been discontinued.
  * Support for Android 5 and 6 and has been discontinued.
  * Added an integrated ID card simulator for testing.
  * An automatic mode for authentication for tests is now possible.
  * AusweisApp2 is now available as a container SDK or Docker image. This
    can be controlled using WebSocket or the new automatic authentication.
  * Command line parameters can now be passed in the iOS SDK.
  * Support for SHA224 and SECP224 has been discontinued.
  * The partially-embedded SDK on Android has been discontinued.
  * The SDK now uses API level v2.
  * Updated OpenSSL to version 3.0.5.
  * Updated Qt to version 6.3.1.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1662379200">- New upstream release
  + Version 1.24.1
  * Support for the Russian and Ukrainian languages has been added.
  * Fixed some issues with regards to PersoSim.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1662552000">- New upstream release
  + Version 1.24.2
  * Fixed crashes on Android.
  * Fixed a bug with changing the transport PIN on desktop systems.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1667044800">- New upstream release
  + Version 1.24.3
  * Fixed crashes on Android.
  * Disabled (cloud) backup on Android and iOS.
  * Fixed the A11y display of the SaK pairing code on Android and iOS.
  * Blocked installation on unsupported versions of Windows 10.
  * Fixed compatibility with Qt 6.4.
  * Enabled the simulator in the Android and iOS SDK.
- Upgrade Qt build and runtime dependencies for Qt6
  + Add Qt6 packages to BuildRequires
  * qt6-concurrent-devel
  * qt6-core-devel
  * qt6-linguist-devel
  * qt6-network-devel
  * qt6-qml-devel
  * qt6-qmlworkerscript-devel
  * qt6-quick-devel
  * qt6-quickcontrols2-devel
  * qt6-shadertools-devel
  * qt6-statemachine-devel
  * qt6-svg-devel
  * qt6-websockets-devel
  + Drop all Qt5 packages from BuildRequires and Requires
- Run spec-cleaner</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1667390400">- New upstream release
  + Version 1.24.4
  * Fixed potential crashes due to OpenSSL (denial of service).
  * Updated OpenSSL to version 3.0.7.</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1667995200">- Add BuildRequires, so it can also build for Leap &gt;= 15.4.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1671364800">- New upstream release
  + Version 1.26.1
  - Fixed the loss of settings on Android.
  - Fixed the use of non-public or deprecated APIs
    on macOS to comply with App Store Guidelines.
  + from version 1.26.0
  - Support for macOS 13.
  - Support for Windows Server 2016 (version 1607).
  - Support for Windows Server 2019.
  - Support for Windows Server 2022.
  - A proxy service is now available for multi-user operation in terminal
    server environments. Details can be found in the document "Guide To
    Installation In Corporate Networks".
  - Fixed crashes on Android.
  - The iOS SDK now supports the arm64 simulator.
  - Updated OpenSSL to version 3.0.7.
  - Updated Qt to version 6.4.1.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1674475200">- New upstream release
  + Version 1.26.2
  - Fixed notification when another application is running on the port in use.
  - Fixed crashes on Android.
  - Optimization of forwarding to "CommunicationErrorAddress" on iOS.
  - Improved installation of the proxy service for terminal server environments.
  - Fixed the setting for the setup wizard when installing in corporate networks.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1675598400">- switch to generic openssl-devel to allow openssl-3</changelog>
</package>
<package pkgid="c1d0e01015a0c403396094b54b975a70bd04052f6419bf8ca75dbb0fbaddbffa" name="AusweisApp2" arch="x86_64">
  <version epoch="0" ver="1.26.2" rel="bp154.2.3.1"/>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1579348800">- Add Requires on libqt5-qtgraphicaleffects and libqt5-qtquickcontrols2
  This is required for the new default QML interface to work.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1593000000">- New upstream release
  + Version 1.20.1
  * Password-protected proxy servers can now also be used from
    the new user interface.
  * A new option for mobile devices now allows switching between
    portrait and landscape viewing mode.
  * On Android, canceling the authentication process should now
    be faster and the previously occurring crash was fixed.
  * On Windows, a progress bar is now also shown during the
    authentication process when using the new user interface.
  * Small bug fixes.
  * Enterprise installations using the MSI package have gained the possibility
    to enable on-site-readout and providing a proxy configuration.
  * The mobile app now allows enabling and disabling debug mode when retrieving
    one's own personal ID data by tapping the magnifier icon ten times.
  * Also in the mobile app, tapping the version number in the about dialog
    ten times will now activate the advanced settings dialog which allows
    one to enable the on-site-readout.
- Drop patches for issues fixed upstream
  + 0001-disable-vendor-name.patch
  + 0002-fix-desktop-icon-path.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1599134400">- New upstream release
  + Version 1.20.2
  * It is now possible to paste a PIN/CAN/PUK using the common methods of
    the operating system in use, enabling the use of password managers.
  * Fixed an issue on Android 9 and older which prevented switching the
    screen to the WiFi settings on some devices.
  * Some help texts have been improved.
  * A tooltip has been added to the Windows installer for the firewall settings.
  * Search performance in the provider screen has been improved.
  * Fixed an issue on Android where an error message was shown incorrectly when
    the ID card was presented to the card reader before starting authentication.
  * Display fonts have been improved on OnePlus devices.
  * On macOS, the app will now use the integrated graphics adapter if possible.
  * Small bug fixes.
  * Support for Android NDK 21.3 and SDK cmdline-tools 2.1 has been added.
  * Fixed a compatibility issue with Qt 5.10.
  * Fixed an issue where an incorrect text was shown in comfort mode when using
    a smartphone with the CAN-allowed function.
  * Fixed an issue on Android where the feedback screen was incorrectly shown
    after using the external SDK.
  * Documentation for the integrated SDK on Android has been extended to include
    logging facilities and App Bundles.
  * Use of more inclusive terminology, the terms "blacklist" and "suppressions"
    have been removed or renamed.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1606910400">- New upstream release
  + Version 1.22.0
  * PIN management has been revised.
  * App navigation on iOS and Android harmonized. The sidebar on Android has
    been removed and replaced with a bar at the bottom of the screen.
  * The "Help" area has been revised and restructured on all platforms.
    The software licenses can now be viewed within the application.
  * A new start page has been added on Android and iOS.
  * A function test can now be carried out on Android and iOS via the
    entry "Check device and ID card" on the start page.
  * Auxiliary animations have been added to Android and iOS to
    clarify possible positions for placing the ID card.
  * The one-off notice that the transport PIN must be changed
    has been added to Android and iOS.
  * Option entry and query for the permission "local network access" has been
    added on iOS 14. This is necessary for using a smartphone as a card reader.
  * AusweisAppp2 can now be installed on macOS via the App Store. Updates that
    appear in the future can be obtained automatically through the store.
  * The update mechanism on Windows has been revised. The download of the update
    and the start of the installation are now carried out automatically when an
    update is started.
  * Support for the German eID card for Union citizens has been added.
  * Support for macOS Sierra 10.12 has been discontinued.
  * Support for Bluetooth card readers has been discontinued.
  * Minor bug fixes.
  * The SDK now supports changing the PIN.
  * The SDK now supports displaying the permissions "PinManagement" and "CanAllowed".
  * Update of OpenSSL to version 1.1.1h.
  * Update of Qt to version 5.15.2.
- Add libQt5QuickTemplates2-devel to BuildRequires
- Add manpage to %files section
- Add patch to fix manpage installation path
  + 0001-fix-manpage-path.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1615896000">- New upstream release
  + Version 1.22.1
  * The release notes are now displayed within the app.
  * Improvements have been made to the display and reporting
    of error messages within the mobile app.
  * Fixed possible freezing of the app when checking the ID.
  * The pairing of a smartphone can now be started directly.
  * The mobile app now starts with the SaK view if this was
    the last setting used.
  * The smartphone function as a card reader can now always be
    activated on iOS.
  * Animations on iOS have been improved.
  * Minor bug fixes.
  * In the SDK for iOS, the handleInterrupt parameter was added to
    RUN_AUTH and RUN_CHANGE_PIN. Like the associated INTERRUPT command.
  * In the SDK for iOS, parameters have been added for RUN_AUTH and
    RUN_CHANGE_PIN, which allow messages to be displayed in the system
    scan dialog.
  * The following error is now returned in the SDK for an expired ID
    card: DocumentValidityVerificationFailed
  * Added support for the new protocol version for smartphones as card
    readers in accordance with the supplement to BSI TR-03112 Part 6.
  * A crash on Windows when pairing PersoSim has been fixed.
  * Added support for PersoSim for Android with host card emulation.
  * A possible infinite loop in the SDK for Android has been fixed.
  * Update of OpenSSL to version 1.1.1j.
- Drop patches for issues fixed upstream
  + 0001-fix-manpage-path.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1617192000">- New upstream release
  + Version 1.22.2
  * CyberJack RFID basis reader is working again on Windows.
  * Automatic start of the setup wizard when running AusweisApp2
    for the first time on desktop systems is working again now.
  * Fixed a bug in the self-idenfication dialog.
  * Fixed some crashes.
  * The Android SDK is now also made available on Maven Central
    as JCenter has been discontinued.
  * Support for authorization certificates with PIN management.
  * Update of OpenSSL to version 1.1.1k.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1642680000">- New upstream release
  + Version 1.22.3
  * Added references to the PIN reset letter in suitable places.
  * The expiration date is now shown in the self-identification dialog.
  * Fixed Youtube links.
  * Removed unneccessary Qt clipboard access on Android.
  * Fixed some dialogs being shown in the language of the operating system
    instead of the language set in the app's preferences on macOS.
  * Fixed crashes and incorrect behavior on Android 11.
  * More information is displayed on a queried password when using
    one of the Reiner SCT "komfort" series of card readers.
  * Add support for macOS 12.
  * Small fixes and improved accessibility.
  * Added the "developerMode" parameter to the RUN_AUTH variable.
  * Fixed a crash when using the --no-logfile and --keep options.
  * The ShowUI parameter is now displayed on mobile devices.
  * Update of OpenSSL to version 1.1.1m.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1645185600">- New upstream release
  + Version 1.22.4
  * Fixed a random startup crash on Windows.
  * The reminder to change the transport PIN is no longer
    displayed for the PIN reset service or on-site readout.
  * Fixed the "Report a bug" feature on Android 12.
  * Fixed an issue where the iOS NFC dialog was displayed
    longer than necessary.
  * Under certain conditions it was possible that a workflow
    could not be started because a previous workflow had not
    been completed.
  * Minor bug fixes and optimizations.
  * If AusweisApp2 was started just as an SDK on Windows, the
    path of the AutoStart entry in the registry was rewritten
    nevertheless. This has been fixed.
  * The libraries can now be built with MSVC 2022.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1650024000">- New upstream release
  + Version 1.22.5
  * Update of the release notes has been corrected.
  * On Windows 10, the window size is no longer
    changed after a language change.
  * Minor bug fixes and optimizations.
  * Under certain circumstances it was possible that
    the SDK did not send an INSERT_CARD message.
  * Update of OpenSSL to version 1.1.1n.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1653134400">- New upstream release
  + Version 1.22.6
  * Problems with card communication when using the "Smartphone as
    card reader" function in Comfort mode have been fixed.
  * Starting with macOS 10.14, system notifications are now being used.
  * On macOS, the tray icon is now disabled by default.
    This can be re-enabled in the preferences.
  * On iOS, a new NFC scan was not possible under certain
    circumstances. This has been fixed.
  * When canceling an authentication, the app sometimes crashed
    on iOS. This has been fixed.
  * Minor bug fixes and optimizations.
  * Updated OpenSSL to version 1.1.1o.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1653739200">- New upstream release
  + Version 1.22.7
  * Fixed a crash with the new system notifications on macOS 10.14+.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1660824000">- New upstream release
  + Version 1.24.0
  * Technical overhaul of the "Smartphone as card reader" function.
    The use of an ID card app2 older than 1.22.1 is no longer possible
    in combination with 1.24.0.
  * Various optimizations with regards to accessibility.
  * Support for "IPv6 only" home networks.
  * AusweisApp2 is now provided as a 64-bit application on Windows.
  * Official support for Windows 11.
  * Support for Windows 7 and Windows 8.1 has been discontinued.
  * Support for macOS 10.13 and 10.14 has been discontinued.
  * Support for Android 5 and 6 and has been discontinued.
  * Added an integrated ID card simulator for testing.
  * An automatic mode for authentication for tests is now possible.
  * AusweisApp2 is now available as a container SDK or Docker image. This
    can be controlled using WebSocket or the new automatic authentication.
  * Command line parameters can now be passed in the iOS SDK.
  * Support for SHA224 and SECP224 has been discontinued.
  * The partially-embedded SDK on Android has been discontinued.
  * The SDK now uses API level v2.
  * Updated OpenSSL to version 3.0.5.
  * Updated Qt to version 6.3.1.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1662379200">- New upstream release
  + Version 1.24.1
  * Support for the Russian and Ukrainian languages has been added.
  * Fixed some issues with regards to PersoSim.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1662552000">- New upstream release
  + Version 1.24.2
  * Fixed crashes on Android.
  * Fixed a bug with changing the transport PIN on desktop systems.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1667044800">- New upstream release
  + Version 1.24.3
  * Fixed crashes on Android.
  * Disabled (cloud) backup on Android and iOS.
  * Fixed the A11y display of the SaK pairing code on Android and iOS.
  * Blocked installation on unsupported versions of Windows 10.
  * Fixed compatibility with Qt 6.4.
  * Enabled the simulator in the Android and iOS SDK.
- Upgrade Qt build and runtime dependencies for Qt6
  + Add Qt6 packages to BuildRequires
  * qt6-concurrent-devel
  * qt6-core-devel
  * qt6-linguist-devel
  * qt6-network-devel
  * qt6-qml-devel
  * qt6-qmlworkerscript-devel
  * qt6-quick-devel
  * qt6-quickcontrols2-devel
  * qt6-shadertools-devel
  * qt6-statemachine-devel
  * qt6-svg-devel
  * qt6-websockets-devel
  + Drop all Qt5 packages from BuildRequires and Requires
- Run spec-cleaner</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1667390400">- New upstream release
  + Version 1.24.4
  * Fixed potential crashes due to OpenSSL (denial of service).
  * Updated OpenSSL to version 3.0.7.</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1667995200">- Add BuildRequires, so it can also build for Leap &gt;= 15.4.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1671364800">- New upstream release
  + Version 1.26.1
  - Fixed the loss of settings on Android.
  - Fixed the use of non-public or deprecated APIs
    on macOS to comply with App Store Guidelines.
  + from version 1.26.0
  - Support for macOS 13.
  - Support for Windows Server 2016 (version 1607).
  - Support for Windows Server 2019.
  - Support for Windows Server 2022.
  - A proxy service is now available for multi-user operation in terminal
    server environments. Details can be found in the document "Guide To
    Installation In Corporate Networks".
  - Fixed crashes on Android.
  - The iOS SDK now supports the arm64 simulator.
  - Updated OpenSSL to version 3.0.7.
  - Updated Qt to version 6.4.1.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1674475200">- New upstream release
  + Version 1.26.2
  - Fixed notification when another application is running on the port in use.
  - Fixed crashes on Android.
  - Optimization of forwarding to "CommunicationErrorAddress" on iOS.
  - Improved installation of the proxy service for terminal server environments.
  - Fixed the setting for the setup wizard when installing in corporate networks.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1675598400">- switch to generic openssl-devel to allow openssl-3</changelog>
</package>
<package pkgid="b9196d09b3c90be9dbca87815afedac34cbb1cd08ddacbb136bc754429fe7d73" name="Botan" arch="aarch64">
  <version epoch="0" ver="2.18.2" rel="bp154.2.3.1"/>
  <changelog author="adam.majer@suse.de" date="1518436800">- Don't drop -fstack-clash-protection for openSUSE 42.3 - we just
  need the Update repository present.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1518609600">- change group of libbotan-%{version_suffix} to 'System/Libraries' as
  requested on review</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1518782400">- drop explicit package requirements
- split binary package and documentation from dynamic library package
  and make documentation package noarch
- merge back Botan2 package to Botan with changelog history
- drop Botan patches
    aarch64-support.patch - doesn't seem to be required anymore
    Botan-fix_install_paths.patch - doesn't seem to be required
    no-cpuid-header.patch - SLE11 not target anymore
    Botan-fix_pkgconfig.patch - this seem to be wrong
    Botan-no-buildtime.patch - not needed anymore
    dont-set-mach-value.diff - doesn't apply, unclear and undocumented why it is there
    Botan-inttypes.patch - not required
    Botan-ull_constants.patch.bz2 - no reason anymore</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1522756800">- Update to Botan 2.5
  * Fix error in certificate wildcard matching (CVE-2018-9127), where a
    wildcard cert for b*.example.com would be accepted as a match for any host
    with name *b*.example.com (GH #1519)
  * Add support for RSA-PSS signatures in TLS (GH #1285)
  * Ed25519 certificates are now supported (GH #1501)
  * Many optimizations in ECC operations. ECDSA signatures are 8-10 times
    faster. ECDSA verification is about twice as fast. ECDH key agreement is
    3-4 times faster. (GH #1457 #1478)
  * Implement product scanning Montgomery reduction, which improves
    Diffie-Hellman and RSA performance by 10 to 20% on most platforms. (GH
    [#1472])
  * DSA signing and verification performance has improved by 30-50%.
  * Add a new Credentials_Manager callback that specifies which CAs the server
    has indicated it trusts (GH #1395 fixing #1261)
  * Add new TLS::Callbacks methods that allow creating or removing extensions,
    as well as examining extensions sent by the peer (GH #1394 #1186)
  * Add new TLS::Callbacks methods that allow an application to negotiate use
    of custom elliptic curves. (GH #1448)
  * Add ability to create custom elliptic curves (GH #1441 #1444)
  * Add support for POWER8 AES instructions (GH #1459 #1393 #1206)
  * Fix DSA/ECDSA handling of hashes longer than the group order (GH #1502
    [#986])
  * The default encoding of ECC public keys has changed from compressed to
    uncompressed point representation. This improves compatability with some
    common software packages including Golang?s standard library. (GH #1480
    [#1483])
  * It is now possible to create DNs with custom components. (GH #1490 #1492)
  * It is now possible to specify the serial number of created certificates,
    instead of using the default 128-bit random integer. (GH #1489 #1491)
  * Change DL_Group and EC_Group to store their data as shared_ptr for fast
    copying. Also both classes precompute additional useful values (eg for
    modular reductions). (GH #1435 #1454)
  * Make it possible for PKCS10 requests to include custom extensions. This
    also makes it possible to use muliple SubjectAlternativeNames of a single
    type in a request, which was previously not possible. (GH #1429 #1428)
  * Add new optimized interface for FE1 format preserving encryption. By
    caching a number of values computed in the course of the FPE calculation,
    it provides a 6-7x speedup versus the old API. (GH #1469)
  * Add DSA and ElGamal keygen functions to FFI (#1426)
  * Add Pipe::prepend_filter to replace Pipe::prepend (GH #1402)
  * Fix a memory leak in the OpenSSL block cipher integration, introduced in
  * 2.2.0
  * Use an improved algorithm for generating safe primes which is several tens
    of times faster. Also, fix a bug in the prime sieving algorithm which
    caused standard prime generation (like for RSA keys) to be slower than
    necessary. (GH #1413 #1411)
  * Correct the return value of PK_Encryptor::maximum_input_size which reported
    a much too small value (GH #1410)
  * Remove use of CPU specific optimization flags, instead the user should set
    these via CXXFLAGS if desired. (GH #1392)
  * Resolve an issue that would cause a crash in the tests if they were run on
    a machine without SSE2/NEON/VMX instructions. (GH #1495)
  * The Python module now tries to load DLLs from a list of names and uses the
    first one which successfully loads and indicates it supports the desired
    API level. (GH #1497)
  * Various minor optimizations for SHA-3 (GH #1433 #1434)
  * The output of botan --help has been improved (GH #1387)
  * Add --der-format flag to command line utils, making it possible verify
    DSA/ECDSA signatures generated by OpenSSL command line (GH #1409)
  * Add support for --library-suffix option to configure.py (GH #1405 #1404)
  * Use feature flags to enable/disable system specific code (GH #1378)
  * Add --msvc-runtime option to allow using static runtime (GH #1499 #210)
  * Add ?enable-sanitizers= option to allow specifying which sanitizers to
    enable. The existing --with-sanitizers option just enables some default set
    which is known to work with the minimum required compiler versions.
  * Use either rst2man or rst2man.py for generating man page as distributions
    differ on where this program is installed (GH #1516)
  * The threefish module has been renamed threefish_512 since that is the
    algorithm it provides. (GH #1477)
  * The Perl XS based wrapper has been removed, as it was unmaintained and
    broken. (GH #1412)
  * The sqlite3 encryption patch under contrib has been removed. It is still
    maintained by the original author at
    https://github.com/OlivierJG/botansqlite3</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1523361600">- Update to Botan 2.6
  * CVE-2018-9860 Fix a bug decrypting TLS CBC ciphertexts which could for a
    malformed ciphertext cause the decryptor to read and HMAC an additional 64K
    bytes of data which is not part of the record. This could cause a crash if
    the read went into unmapped memory. No information leak or out of bounds
    write occurs.
  * Add support for OAEP labels (GH #1508)
  * RSA signing is about 15% faster (GH #1523) and RSA verification is about 50% faster.
  * Add exponent blinding to RSA (GH #1523)
  * Add Cipher_Mode::create and AEAD_Mode::create (GH #1527)
  * Fix bug in TLS server introduced in 2.5 which caused connection to fail if
    the client offered any signature algorithm not known to the server (for
    example RSA/SHA-224).
  * Fix a bug in inline asm that would with GCC 7.3 cause incorrect
    computations and an infinite loop during the tests. (GH #1524 #1529)</changelog>
  <changelog author="kasimir_@outlook.de" date="1523534400">- fixed to build on armv6 and armv7</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1531224000">- Update to Botan 2.7
  * CVE-2018-12435 Avoid a side channel in ECDSA signature generation (GH
    [#1604])
  * Avoid a side channel in RSA key generation due to use of a non-constant
    time gcd algorithm. (GH #1542 #1556)
  * Optimize prime generation, especially improving RSA key generation. (GH
    [#1542])
  * Make Karatsuba multiplication, Montgomery field operations, Barrett
    reduction and Montgomery exponentiation const time (GH #1540 #1606 #1609
    [#1610])
  * Optimizations for elliptic curve operations especially improving reductions
    and inversions modulo NIST primes (GH #1534 #1538 #1545 #1546 #1547 #1550)
  * Add 24 word wide Comba multiplication, improving 3072-bit RSA and DH by
    ~25%. (GH #1564)
  * Unroll Montgomery reduction for specific sizes (GH #1603)
  * Improved performance of signature verification in ECGDSA, ECKCDSA, SM2 and
    GOST by 10-15%.
  * XMSS optimizations (GH #1583 #1585)
  * Fix an error that meant XMSS would only sign half as many signatures as is
    allowed (GH #1582)
  * Add support for base32 encoding/decoding (GH #1541)
  * Add BMI2 optimized version of SHA-256, 40% faster on Skylake (GH #1584)
  * Allow the year to be up to 2200 in ASN.1 time objects. Previously this was
    limited to 2100. (GH #1536)
  * Add support for Scrypt password hashing (GH #1570)
  * Add support for using Scrypt for private key encryption (GH #1574)
  * Optimizations for DES/3DES, approx 50% faster when used in certain modes
    such as CBC decrypt or CTR.
  * XMSS signature verification did not check that the signature was of the
    expected length which could lead to a crash. (GH #1537)
  * The bcrypt variants 2b and 2y are now supported.
  * Support for 192-bit Suite B TLS profile is now implemented, as the 128-bit
    Suite B is since 2015 not allowed anymore.
  * Previously botan allowed GCM to be used with an empty nonce, which is not
    allowed by the specification. Now such nonces are rejected.
  * Avoid problems on Windows when compiling in Unicode mode (GH #1615 #1616)
  * Previously for ASN.1 encoded signatures (eg ECDSA) Botan would accept any
    valid BER encoding. Now only the single valid DER encoding is accepted.
  * Correct an error that could in rare cases cause an internal error exception
    when doing computations with the P-224 curve.
  * Optimizations to reduce allocations/copies during DER encoding and BER
    decoding (GH #1571 #1572 #1600)
  * Botan generates X.509 subject key IDs by hashing the public key with
    whatever hash function is being used to sign the certificate. However
    especially for SHA-512 this caused SKIDs that were far longer than
    necessary. Now all SKIDs are truncated to 192 bits.
  * In the test suite use mkstemp to create temporary files instead of creating
    them in the current working directory. (GH #1533 #1530)
  * It is now possible to safely override CXX when invoking make in addition to
    when configure.py is run. (GH #1579)
  * OIDs for Camellia and SM4 in CBC and GCM mode are now defined, making it
    possible to use this algorithms for private key encryption.
  * Avoid creating symlinks to the shared object on OpenBSD (#1535)
  * The factor command runs much faster on larger inputs now.
  * Support for Windows Phone/UWP was deprecated starting in 2.5. This
    deprecation has been reversed as it seems UWP is still actively used. (GH
    [#1586] #1587)
  * Support for Visual C++ 2013 is deprecated, and will be removed in Jan 2019.
  * Added support for GCC?s ?sysroot option to configure.py for
    cross-compiling.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1533038400">- Fix version in baselibs.conf</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1547121600">- Update to Botan 2.9
  * Bump SONAME
  * CVE-2018-20187 Address a side channel during ECC key generation, which used an
    unblinded Montgomery ladder. As a result, a timing attack can reveal
    information about the high bits of the secret key.
  * Fix bugs in TLS which caused negotiation failures when the client used an
    unknown signature algorithm or version (GH #1711 #1709 #1708)
  * Fix bug affecting GCM, EAX and ChaCha20Poly1305 where if the associated data
    was set after starting a message, the new AD was not reflected in the produced
    tag. Now with these modes setting an AD after beginning a message throws an
    exception.
  * Use a smaller sieve which improves performance of prime generation.
  * Fixed a bug that caused ChaCha to produce incorrect output after encrypting 256
    GB. (GH #1728)
  * Add NEON and AltiVec implementations of ChaCha (GH #1719 #1728 #1729)
  * Optimize AVX2 ChaCha (GH #1730)
  * Many more operations in BigInt, ECC and RSA code paths are either fully const
    time or avoid problematic branches that could potentially be exploited in a
    side channel attack. (GH #1738 #1750 #1754 #1755 #1757 #1758 #1759 #1762 #1765
    [#1770] #1773 #1774 #1779 #1780 #1794 #1795 #1796 #1797)
  * Several optimizations for BigInt and ECC, improving ECDSA performance by as
    much as 30%. (GH #1734 #1737 #1777 #1750 #1737 #1788)
  * Support recovering an ECDSA public key from a message/signature pair (GH #664
    [#1784])
  * Add base58 encoding/decoding functions (GH #1783)
  * In the command line interface, add support for reading passphrases from the
    terminal with echo disabled (GH #1756)
  * Add CT::Mask type to simplify const-time programming (GH #1751)
  * Add new configure options --disable-bmi2, --disable-rdrand, and
  - -disable-rdseed to prevent use of those instruction sets.
  * Add error_type and error_code functions to Exception type (GH #1744)
  * Now on POSIX systems posix_memalign is used instead of mmap for allocating the
    page-locked memory pool. This avoids issues with fork. (GH #602 #1798)
  * When available, use RDRAND to generate the additional data in
    Stateful_RNG::randomize_with_ts_input
  * Use vzeroall/vzeroupper intrinsics to avoid AVX2/SSE transition penalties.
  * Support for Visual C++ 2013 has been removed (GH #1557 #1697)
  * Resolve a memory leak when verifying ECDSA signatures with versions of OpenSSL
    before 1.1.0 (GH #1698)
  * Resolve a memory leak using ECDH via OpenSSL (GH #1767)
  * Fix an error in XTS which prohibited encrypting values which were exactly the
    same length as the underlying block size. Messages of this size are allowed by
    the standard and other XTS implementations. (GH #1706)
  * Resolve a bug in TSS which resulted in it using an incorrect length field in
    the shares. Now the correct length is encoded, but either correct or buggy
    lengths are accepted when decoding. (GH #1722)
  * Correct a bug when reducing a negative BigInt modulo a small power of 2. (GH
    [#1755])
  * Add CLI utils for threshold secret splitting. (GH #1722)
  * Fix a bug introduced in 2.8.0 that caused compilation failure if using a single
    amalgamation file with AVX2 enabled. (GH #1700)
  * Add an explicit OS target for Emscripten and improve support for it. (GH #1702)
  * Fix small issues when building for QNX
  * Switch the Travis CI build to using Ubuntu 16.04 (GH #1767)
  * Add options to configure.py to disable generation of pkg-config file, and (for
    systems where pkg-config support defaults to off, like Windows), to enable
    generating it. (GH #1268)
  * Modify configure.py to accept empty lists or trailing/extra commas. (GH #1705)
- Update to Botan 2.8
  * Add support for using Apple CommonCrypto library for hashing (GH #1667),
    cipher modes (GH #1674) and block ciphers (GH #1673).
  * Support for negotiating TLS versions 1.0 and 1.1 is disabled in the default
    TLS policy. In addition, support for negotiating TLS ciphersuites using CBC
    or CCM mode is disabled by default. Applications which need to interop with
    old peers must enable these in their TLS policy object. (GH #1651)
  * During primality testing, use a Lucas test in addition to Miller-Rabin. It
    is possible to construct a composite integer which passes n Miller-Rabin
    tests with probability (1/4)^n. So for a incautious verifier using a small
    number of tests (under 16 or so) it is possible if unlikely they would
    accept such a composite as prime. Adding a Lucas test precludes such an
    attack. (GH #1636)
  * Add XChaCha and XChaCha20Poly1305 (GH #1640)
  * Add AVX2 implementations of ChaCha (GH #1662) and Serpent (GH #1660)
  * Add a new password hashing interface in pwdhash.h (GH #1670)
  * C binding improvements. Added functions to get name and supported
    keylengths of cipher, hash and MAC objects, support for FE1 format
    preserving encryption (GH #1625 #1646), functions to load and save RSA keys
    in PKCS #1 format (GH #1621), HOTP and TOTP algorithms, scrypt, certificate
    verification (GH #1647), functions to get the output length of public key
    operations (GH #1642), and functions for loading and serializing X25519
    keys (GH #1681)
  * Support for building with BOTAN_MP_WORD_BITS set to 8 or 16 has been removed.
  * Previously SM2 had two distinct key types, one for signatures and another
    for encryption. They have now been merged into a single key type since in
    practice it seems the same key is at times used for both operations. (GH
    [#1637])
  * The Cipher_Mode class now derives from SymmetricAlgorithm (GH #1639)
  * Add support for using the ARMv8 instructions for SM4 encryption (GH #1622)
  * The entropy source using SecRandomCopyBytes has been removed as it was
    redundant with other entropy sources (GH #1668)
  * The Python module has much better error checking and reporting, and offers
    new functionality such as scrypt, MPI and FPE. (GH #1643 #1646)
  * Fixed a bug that caused CCM to fail with an exception when used with L=8 (GH #1631 #1632)
  * The default bcrypt work factor has been increased from 10 to 12.
  * The default algorithm used in passhash9 has changed from SHA-256 to
    SHA-512, and the default work factor increased from 10 to 15.
  * In ECC private keys, include the public key data for compatibility with GnuTLS (GH #1634 #1635)
  * Add support for using Linux getrandom syscall to access the system PRNG.
    This is disabled by default, use --with-os-feature=getrandom to enable.
  * It is now possible to encrypt private keys using SIV mode.
  * The FFI function botan_privkey_load now ignores its rng argument.
  * Resolve a problem when building under Visual C++ 15.8 (GH #1624)
  * Fix a bug in XSalsa20 (192-bit Salsa nonces) where if set_iv was called
    twice without calling set_key, the resulting encryption was incorrect. (GH
    [#1640])
  * Handle an error seen when verifying invalid ECDSA signatures using LibreSSL
    on non x86-64 platforms (GH #1627 #1628)
  * Fix bugs in PKCS7 and X9.23 CBC padding schemes, which would ignore the
    first byte in the event the padding took up the entire block. (GH #1690)
  * Correct bugs which would cause CFB, OCB, and GCM modes to crash when they
    were used in an unkeyed state. (GH #1639)
  * Optimizations for SM4 and Poly1305
  * Avoid a cache side channel in the AES key schedule
  * Add pk_encrypt and pk_decrypt CLI operations
  * Now asn1print CLI defaults to printing context-specific fields.
  * Use codec_base for Base64, which matches how Base32 is implemented (GH #1597)
  * The cast module has been split up into cast128 and cast256 (GH #1685)
  * When building under Visual C++ 2013, the user must acknowledge the upcoming
    removal of support using the configure.py flag --ack-vc2013-deprecated (GH
    [#1557])</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1554206400">- Update to Botan 2.10
  * Bump SONAME
  * Warning: XMSS currently implements draft-06 which is not compatible with
    the final RFC 8391 specification. A PR is open to fix this, however it will
    break all current uses of XMSS. If you are currently using XMSS please
    comment at https://github.com/randombit/botan/pull/1858. Otherwise the PR
    will be merged and support for draft-06 will be removed starting in 2.11.
  * Added a new certificate store implementation that can access the MacOS
    keychain certificate store. (GH #1830)
  * Redesigned Memory_Pool class, which services allocations out of a set of
    pages locked into memory (using mlock/VirtualLock). It is now faster and
    with improved exploit mitigations. (GH #1800)
  * Add BMI2 implementations of SHA-512 and SHA-3 which improve performance by
    25-35% on common CPUs. (GH #1815)
  * Unroll SHA-3 computation improving performance by 10-12% (GH #1838)
  * Add a Thread_Pool class. It is now possible to run the tests in multiple
    threads with --test-threads=N flag to select the number of threads to use.
    Use --test-threads=0 to run with as many CPU cores as are available on the
    current system. The default remains single threaded. (GH #1819)
  * XMSS signatures now uses a global thread pool instead of spawning new
    threads for each usage. This improves signature generation performance by
    between 10% and 60% depending on architecture and core count. (GH #1864)
  * Some functions related to encoding and decoding BigInts have been
    deprecated. (GH #1817)
  * Binary encoding and decoding of BigInts has been optimized by performing
    word-size operations when possible. (GH #1817)
  * Rename the exception Integrity_Failure to Invalid_Authentication_Tag to
    make its meaning and usage more clear. The old name remains as a typedef.
    (GH #1816)
  * Support for using Boost filesystem and MSVC?s std::filesystem have been
    removed, since already POSIX and Win32 versions had to be maintained for
    portability. (GH #1814)
  * Newly generated McEliece and XMSS keys now default to being encrypted using
    SIV mode, support for which was added in 2.8.0. Previously GCM was used by
    default for these algorithms.
  * Use arc4random on Android systems (GH #1851)
  * Fix the encoding of PGP-S2K iteration counts (GH #1853 #1854)
  * Add a facility for sandboxing the command line util. Currently FreeBSD
    (Capsicum) and OpenBSD (pledge) sandboxes are supported. (GH #1808)
  * Use if constexpr when available.
  * Disable building shared libs on iOS as it was broken and it is not clear
    shared libraries are ever useful on iOS (GH #1865)
  * Renamed the darwin build target to macos. This should not cause any
    user-visible change. (GH #1866)
  * Add support for using sccache to cache the Windows CI build (GH #1807)
  * Add --extra-cxxflags option which allows adding compilation flags without
    overriding the default set. (GH #1826)
  * Add --format= option to the hash cli which allows formatting the output as
    base64 or base58, default output remains hex.
  * Add base58_enc and base58_dec cli utils for base58 encoding/decoding. (GH #1848)
  * Enable getentropy by default on macOS (GH #1862)
  * Avoid using -momit-leaf-frame-pointer flags, since -fomit-frame-pointer is
    already the default with recent versions of GCC.
  * Fix XLC sanitizer flags.
  * Rename Blake2b class to BLAKE2b to match the official name. There is a typedef for compat.
  * Fix a bug where loading a raw Ed25519_PublicKey of incorrect length would
    lead to a crash. (GH #1850)
  * Fix a bug that caused compilation problems using CryptoNG PRNG. (GH #1832)
  * Extended SHAKE-128 cipher to support any key between 1 and 160 bytes,
    instead of only multiples of 8 bytes.
  * Minor HMAC optimizations.
  * Build fixes for GNU/Hurd.
  * Fix a bug that prevented generating or verifying Ed25519 signatures in the
    CLI (GH #1828 #1829)
  * Fix a compilation error when building the amalgamation outside of the
    original source directory when AVX2 was enabled. (GH #1812)
  * Fix a crash when creating the amalgamation if a header file was edited on
    Windows but then the amalgamation was built on Linux (GH #1763)</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1586347200">- Update to Botan 2.14:
  * Add support for using POWER8+ VPSUMD instruction to accelerate GCM (GH #2247)
  * Optimize the vector permute AES implementation, especially improving
    performance on ARMv7, Aarch64, and POWER. (GH #2243)
  * Use a new algorithm for modular inversions which is both faster
    and more resistant to side channel attacks. (GH #2287 #2296 #2301)
  * Address an issue in CBC padding which would leak the length of the plaintext
    which was being padded. Unpadding during decryption was not affected.
  * Optimize NIST prime field reductions, improving ECDSA by 3-9% (GH #2295)
  * Increase the size of the ECC blinding mask and scale it based on the
    size of the group order. (GH #880 #893 #2308)
  * Add server side support for the TLS asio wrapper. (GH #2229)
  * Add support for using Windows certificate store on MinGW (GH #2280)
  * Add a CLI utility cpu_clock which estimates the speed of the processor cycle counter.
  * Add Roughtime client (GH #2143 #1842)
  * Add support for XMSS X.509 certificates (GH #2172)
  * Add support for X.509 CRLs in FFI layer and Python wrapper (GH #2213)
  * Add AVX2 implementation of SHACAL2 (GH #2196)
  * Support more functionality for X.509 in the Python API (GH #2165)
  * Add generic CPU target useful when building for some new or unusual platform.
  * Disable MD5 in BSI or NIST modes (GH #2188)
  * Many currently public headers are being deprecated. If any such header is included by
    an application, a warning is issued at compile time.
    Headers issuing this warning will be made internal in a future major release.
  * RSA signature performance improvements (GH #2068 #2070)
  * Performance improvements for GCM (GH #2024 #2099 #2119), OCB (#2122), XTS (#2123) and
    ChaCha20Poly1305 (GH #2117), especially for small messages.
  * Add support for constant time AES using NEON and AltiVec (GH #2093 #2095 #2100)
  * Improve performance of POWER8 AES instructions (GH #2096)
  * Add support for the POWER9 hardware random number generator (GH #2026)
  * Add support for 64-bit version of RDRAND, doubling performance on x86-64 (GH #934 #2022)
  * In DTLS server, support a client crashing and then reconnecting from the same
    source port, as described in RFC 6347 sec 4.2.8 (GH #2029)
  * Optimize DTLS MTU splitting to split precisely to the set MTU (GH #2042)
  * Add support for the TLS v1.3 downgrade indicator. (GH #2027)
  * Add Argon2 PBKDF and password hash (GH #459 #1981 #1987)
  * Add Bcrypt-PBKDF (GH #1990)
  * Add server side support for issuing DTLS HelloVerifyRequest messages (GH #1999)
  * Add support for the TLS v1.3 supported_versions extension. (GH #1976)
  * Add Ed25519ph compatible with RFC 8032 (GH #1699 #2000)
  * Add support for OCSP stapling on server side. (GH #1703 #1967)
  * Add a boost::asio TLS stream compatible with boost::asio::ssl. (GH #1839 #1927 #1992)
  * Add a certificate store for Linux/Unix systems. (GH #1885 #1936)
  * Various Fixes</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597579200">- update to 2.15:
  Fix a bug where the name constraint extension did not constrain the alternative
  DN field which can be included in a subject alternative name. This would allow
  a corrupted sub-CA which was otherwise constrained by a name constraint to
  issue a certificate with a prohibited DN.
  Fix a bug in the TLS server during client authentication where where if a
  (disabled by default) static RSA ciphersuite was selected, then no certificate
  request would be sent. This would have an equivalent effect to a client which
  simply replied with an empty Certificate message. (GH #2367)
  Replace the T-Tables implementation of AES with a 32-bit bitsliced version. As
  a result AES is now constant time on all processors. (GH #2346 #2348 #2353
  [#2329] #2355)
  In TLS, enforce that the key usage given in the server certificate allows the
  operation being performed in the ciphersuite. (GH #2367)
  In X.509 certificates, verify that the algorithm parameters are the expected
  NULL or empty. (GH #2367)
  Change the HMAC key schedule to attempt to reduce the information leaked from
  the key schedule with regards to the length of the key, as this is at times (as
  for example in PBKDF2) sensitive information. (GH #2362)
  Add Processor_RNG which wraps RDRAND or the POWER DARN RNG instructions. The
  previous RDRAND_RNG interface is deprecated. (GH #2352)
  The documentation claimed that mlocked pages were created with a guard page
  both before and after. However only a trailing guard page was used. Add a
  leading guard page. (GH #2334)
  Add support for generating and verifying DER-encoded ECDSA signatures in the C
  and Python interfaces. (GH #2357 #2356)
  Workaround a bug in GCC?s UbSan which triggered on a code sequence in XMSS (GH
  [#2322])
  When building documentation using Sphinx avoid parallel builds with version 3.0
  due to a bug in that version (GH #2326 #2324)
  Fix a memory leak in the CommonCrypto block cipher calls (GH #2371)
  Fix a flaky test that would occasionally fail when running the tests with a
  large number of threads. (GH #2325 #2197)
  Additional algorithms are now deprecated: XTEA, GOST, and Tiger. They will be
  removed in a future major release.</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1603800000">- Update to 2.16.0:
  * Now userspace PRNG objects (such as AutoSeeded_RNG and HMAC_DRBG)
    use an internal lock, which allows safe concurrent use. This
    however is purely a precaution in case of accidental sharing of
    such RNG objects; for performance reasons it is always preferable
    to use a RNG per thread if a userspace RNG is needed.
  * DL_Group and EC_Group objects now track if they were created
    from a known trusted group (such as P-256 or an IPsec DH
    parameter). If so, then verification tests can be relaxed, as
    compared to parameters which may have been maliciously
    constructed in order to pass primality checks.
  * RandomNumberGenerator::add_entropy_T assumed its input was a POD
    type but did not verify this.
  * Support OCSP responders that live on a non-standard port.
  * Add support for Solaris sandbox.
  * Support suffixes on release numbers for alpha/beta releases.
  * Fix a bug in EAX which allowed requesting a 0 length tag, which
    had the effect of using a full length tag. Instead omit the
    length field, or request the full tag length explicitly.
  * Fix a memory leak in GCM where if passed an unsuitable block
    cipher (eg not 128 bit) it would throw an exception and leak
    the cipher object.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1604750400">- Botan 2.17.1:
  * Fix bugs in ECDSA signature generation and verifications under
    specific circumstances
  * developer visible changes, including deprecation with warnings
  * optimization in the non-hardware assisted AES key generation
  * Add more detection logic for AVX-512 features
  * Fix a bug parsing deeply nested cipher names
  * Prevent requesting DER encoding of signatures when the
    algorithm did not support it</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1605268800">- Botan 2.17.2:
  * Fix build problem on ppc64
  * Resolve an issue in the modular square root algorithm</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1608724800">- Botan 2.17.3:
  * Harden against side-channels from decoding secret values by
    changing the base64, base58, base32, and hex encoding and
    decoding opearations to run in constant time</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1618574400">- Botan 2.18.0
  * Add support for implementing custom RNG objects through the FFI
    interface
  * Improve safegcd bounds, improving runtime performance
  * Reject non-TLS messages as quickly as possible without waiting
    for a full record.
  * Fixes for TLS::Stream::async_shutdown
- Removed unneeded GNU MP build requirement, support was dropped
  with version 1.11.10
- Enabled check target, verify integrity of build library</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1620648000">- Botan 2.18.1:
  * Fix a build regression in 2.18.0 which caused linker flags
    which contain -l within them (such as -fuse-linker-plugin)
    to be misinterpreted
  * Fix a bug which caused decoding a certificate which contained
    more than one name in a single RDN
  * Fix a bug which caused OID lookup failures when run in a locale
    which uses thousands separators (pt_BR was reported as having
    this issue)
  * DNS names in name constraints were compared with case
    sensitivity, which could cause valid certificates to be
    rejected
  * X.509 name constraint extensions were rejected if non-critical.
    RFC 5280 requires conforming CAs issue such extensions as
    critical, but not all certificates are compliant, and all other
    known implementations do not require this
  * X.509 name constraints were incorrectly applied to the
    certificate which included the constraint
- build with lzma compression support
- build with SQLite support
- build with TPM support
- fix SLE 12 build</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1637755200">- update to 2.18.2:
  * Avoid using short exponents when encrypting in ElGamal, as some PGP
    implementations generate keys with parameters that are weak when
    short exponents are used CVE-2021-40529 boo#1190244
  * Fix a low risk OAEP decryption side channel
  * Work around a miscompilation of SHA-3 caused by a bug in Clang 12
    and XCode 13
  * Remove support in OpenSSL provider for algorithms which are
    disabled by default in OpenSSL 3.0
  * Add CI based on GitHub actions to replace Travis CI
  * Fix the online OCSP test, as the certificate involved had expired.
  * Fix some test failures induced by the expiration of the trust root
    "DST Root CA X3"</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1668686400">- Fixed [CVE-2022-43705,bsc#1205509]
  * Added Botan-CVE-2022-43705.patch
  * Added Botan-CVE-2022-43705-certs.tgz
  * validate that an embedded certificate was issued by the end-entity
    issuing certificate authority when checking OCSP responses.</changelog>
</package>
<package pkgid="19628b84f20e889cad8fd03140a0a149f2fd335e6e0232b0db3576b0f4e5f43b" name="Botan" arch="i586">
  <version epoch="0" ver="2.18.2" rel="bp154.2.3.1"/>
  <changelog author="adam.majer@suse.de" date="1518436800">- Don't drop -fstack-clash-protection for openSUSE 42.3 - we just
  need the Update repository present.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1518609600">- change group of libbotan-%{version_suffix} to 'System/Libraries' as
  requested on review</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1518782400">- drop explicit package requirements
- split binary package and documentation from dynamic library package
  and make documentation package noarch
- merge back Botan2 package to Botan with changelog history
- drop Botan patches
    aarch64-support.patch - doesn't seem to be required anymore
    Botan-fix_install_paths.patch - doesn't seem to be required
    no-cpuid-header.patch - SLE11 not target anymore
    Botan-fix_pkgconfig.patch - this seem to be wrong
    Botan-no-buildtime.patch - not needed anymore
    dont-set-mach-value.diff - doesn't apply, unclear and undocumented why it is there
    Botan-inttypes.patch - not required
    Botan-ull_constants.patch.bz2 - no reason anymore</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1522756800">- Update to Botan 2.5
  * Fix error in certificate wildcard matching (CVE-2018-9127), where a
    wildcard cert for b*.example.com would be accepted as a match for any host
    with name *b*.example.com (GH #1519)
  * Add support for RSA-PSS signatures in TLS (GH #1285)
  * Ed25519 certificates are now supported (GH #1501)
  * Many optimizations in ECC operations. ECDSA signatures are 8-10 times
    faster. ECDSA verification is about twice as fast. ECDH key agreement is
    3-4 times faster. (GH #1457 #1478)
  * Implement product scanning Montgomery reduction, which improves
    Diffie-Hellman and RSA performance by 10 to 20% on most platforms. (GH
    [#1472])
  * DSA signing and verification performance has improved by 30-50%.
  * Add a new Credentials_Manager callback that specifies which CAs the server
    has indicated it trusts (GH #1395 fixing #1261)
  * Add new TLS::Callbacks methods that allow creating or removing extensions,
    as well as examining extensions sent by the peer (GH #1394 #1186)
  * Add new TLS::Callbacks methods that allow an application to negotiate use
    of custom elliptic curves. (GH #1448)
  * Add ability to create custom elliptic curves (GH #1441 #1444)
  * Add support for POWER8 AES instructions (GH #1459 #1393 #1206)
  * Fix DSA/ECDSA handling of hashes longer than the group order (GH #1502
    [#986])
  * The default encoding of ECC public keys has changed from compressed to
    uncompressed point representation. This improves compatability with some
    common software packages including Golang?s standard library. (GH #1480
    [#1483])
  * It is now possible to create DNs with custom components. (GH #1490 #1492)
  * It is now possible to specify the serial number of created certificates,
    instead of using the default 128-bit random integer. (GH #1489 #1491)
  * Change DL_Group and EC_Group to store their data as shared_ptr for fast
    copying. Also both classes precompute additional useful values (eg for
    modular reductions). (GH #1435 #1454)
  * Make it possible for PKCS10 requests to include custom extensions. This
    also makes it possible to use muliple SubjectAlternativeNames of a single
    type in a request, which was previously not possible. (GH #1429 #1428)
  * Add new optimized interface for FE1 format preserving encryption. By
    caching a number of values computed in the course of the FPE calculation,
    it provides a 6-7x speedup versus the old API. (GH #1469)
  * Add DSA and ElGamal keygen functions to FFI (#1426)
  * Add Pipe::prepend_filter to replace Pipe::prepend (GH #1402)
  * Fix a memory leak in the OpenSSL block cipher integration, introduced in
  * 2.2.0
  * Use an improved algorithm for generating safe primes which is several tens
    of times faster. Also, fix a bug in the prime sieving algorithm which
    caused standard prime generation (like for RSA keys) to be slower than
    necessary. (GH #1413 #1411)
  * Correct the return value of PK_Encryptor::maximum_input_size which reported
    a much too small value (GH #1410)
  * Remove use of CPU specific optimization flags, instead the user should set
    these via CXXFLAGS if desired. (GH #1392)
  * Resolve an issue that would cause a crash in the tests if they were run on
    a machine without SSE2/NEON/VMX instructions. (GH #1495)
  * The Python module now tries to load DLLs from a list of names and uses the
    first one which successfully loads and indicates it supports the desired
    API level. (GH #1497)
  * Various minor optimizations for SHA-3 (GH #1433 #1434)
  * The output of botan --help has been improved (GH #1387)
  * Add --der-format flag to command line utils, making it possible verify
    DSA/ECDSA signatures generated by OpenSSL command line (GH #1409)
  * Add support for --library-suffix option to configure.py (GH #1405 #1404)
  * Use feature flags to enable/disable system specific code (GH #1378)
  * Add --msvc-runtime option to allow using static runtime (GH #1499 #210)
  * Add ?enable-sanitizers= option to allow specifying which sanitizers to
    enable. The existing --with-sanitizers option just enables some default set
    which is known to work with the minimum required compiler versions.
  * Use either rst2man or rst2man.py for generating man page as distributions
    differ on where this program is installed (GH #1516)
  * The threefish module has been renamed threefish_512 since that is the
    algorithm it provides. (GH #1477)
  * The Perl XS based wrapper has been removed, as it was unmaintained and
    broken. (GH #1412)
  * The sqlite3 encryption patch under contrib has been removed. It is still
    maintained by the original author at
    https://github.com/OlivierJG/botansqlite3</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1523361600">- Update to Botan 2.6
  * CVE-2018-9860 Fix a bug decrypting TLS CBC ciphertexts which could for a
    malformed ciphertext cause the decryptor to read and HMAC an additional 64K
    bytes of data which is not part of the record. This could cause a crash if
    the read went into unmapped memory. No information leak or out of bounds
    write occurs.
  * Add support for OAEP labels (GH #1508)
  * RSA signing is about 15% faster (GH #1523) and RSA verification is about 50% faster.
  * Add exponent blinding to RSA (GH #1523)
  * Add Cipher_Mode::create and AEAD_Mode::create (GH #1527)
  * Fix bug in TLS server introduced in 2.5 which caused connection to fail if
    the client offered any signature algorithm not known to the server (for
    example RSA/SHA-224).
  * Fix a bug in inline asm that would with GCC 7.3 cause incorrect
    computations and an infinite loop during the tests. (GH #1524 #1529)</changelog>
  <changelog author="kasimir_@outlook.de" date="1523534400">- fixed to build on armv6 and armv7</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1531224000">- Update to Botan 2.7
  * CVE-2018-12435 Avoid a side channel in ECDSA signature generation (GH
    [#1604])
  * Avoid a side channel in RSA key generation due to use of a non-constant
    time gcd algorithm. (GH #1542 #1556)
  * Optimize prime generation, especially improving RSA key generation. (GH
    [#1542])
  * Make Karatsuba multiplication, Montgomery field operations, Barrett
    reduction and Montgomery exponentiation const time (GH #1540 #1606 #1609
    [#1610])
  * Optimizations for elliptic curve operations especially improving reductions
    and inversions modulo NIST primes (GH #1534 #1538 #1545 #1546 #1547 #1550)
  * Add 24 word wide Comba multiplication, improving 3072-bit RSA and DH by
    ~25%. (GH #1564)
  * Unroll Montgomery reduction for specific sizes (GH #1603)
  * Improved performance of signature verification in ECGDSA, ECKCDSA, SM2 and
    GOST by 10-15%.
  * XMSS optimizations (GH #1583 #1585)
  * Fix an error that meant XMSS would only sign half as many signatures as is
    allowed (GH #1582)
  * Add support for base32 encoding/decoding (GH #1541)
  * Add BMI2 optimized version of SHA-256, 40% faster on Skylake (GH #1584)
  * Allow the year to be up to 2200 in ASN.1 time objects. Previously this was
    limited to 2100. (GH #1536)
  * Add support for Scrypt password hashing (GH #1570)
  * Add support for using Scrypt for private key encryption (GH #1574)
  * Optimizations for DES/3DES, approx 50% faster when used in certain modes
    such as CBC decrypt or CTR.
  * XMSS signature verification did not check that the signature was of the
    expected length which could lead to a crash. (GH #1537)
  * The bcrypt variants 2b and 2y are now supported.
  * Support for 192-bit Suite B TLS profile is now implemented, as the 128-bit
    Suite B is since 2015 not allowed anymore.
  * Previously botan allowed GCM to be used with an empty nonce, which is not
    allowed by the specification. Now such nonces are rejected.
  * Avoid problems on Windows when compiling in Unicode mode (GH #1615 #1616)
  * Previously for ASN.1 encoded signatures (eg ECDSA) Botan would accept any
    valid BER encoding. Now only the single valid DER encoding is accepted.
  * Correct an error that could in rare cases cause an internal error exception
    when doing computations with the P-224 curve.
  * Optimizations to reduce allocations/copies during DER encoding and BER
    decoding (GH #1571 #1572 #1600)
  * Botan generates X.509 subject key IDs by hashing the public key with
    whatever hash function is being used to sign the certificate. However
    especially for SHA-512 this caused SKIDs that were far longer than
    necessary. Now all SKIDs are truncated to 192 bits.
  * In the test suite use mkstemp to create temporary files instead of creating
    them in the current working directory. (GH #1533 #1530)
  * It is now possible to safely override CXX when invoking make in addition to
    when configure.py is run. (GH #1579)
  * OIDs for Camellia and SM4 in CBC and GCM mode are now defined, making it
    possible to use this algorithms for private key encryption.
  * Avoid creating symlinks to the shared object on OpenBSD (#1535)
  * The factor command runs much faster on larger inputs now.
  * Support for Windows Phone/UWP was deprecated starting in 2.5. This
    deprecation has been reversed as it seems UWP is still actively used. (GH
    [#1586] #1587)
  * Support for Visual C++ 2013 is deprecated, and will be removed in Jan 2019.
  * Added support for GCC?s ?sysroot option to configure.py for
    cross-compiling.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1533038400">- Fix version in baselibs.conf</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1547121600">- Update to Botan 2.9
  * Bump SONAME
  * CVE-2018-20187 Address a side channel during ECC key generation, which used an
    unblinded Montgomery ladder. As a result, a timing attack can reveal
    information about the high bits of the secret key.
  * Fix bugs in TLS which caused negotiation failures when the client used an
    unknown signature algorithm or version (GH #1711 #1709 #1708)
  * Fix bug affecting GCM, EAX and ChaCha20Poly1305 where if the associated data
    was set after starting a message, the new AD was not reflected in the produced
    tag. Now with these modes setting an AD after beginning a message throws an
    exception.
  * Use a smaller sieve which improves performance of prime generation.
  * Fixed a bug that caused ChaCha to produce incorrect output after encrypting 256
    GB. (GH #1728)
  * Add NEON and AltiVec implementations of ChaCha (GH #1719 #1728 #1729)
  * Optimize AVX2 ChaCha (GH #1730)
  * Many more operations in BigInt, ECC and RSA code paths are either fully const
    time or avoid problematic branches that could potentially be exploited in a
    side channel attack. (GH #1738 #1750 #1754 #1755 #1757 #1758 #1759 #1762 #1765
    [#1770] #1773 #1774 #1779 #1780 #1794 #1795 #1796 #1797)
  * Several optimizations for BigInt and ECC, improving ECDSA performance by as
    much as 30%. (GH #1734 #1737 #1777 #1750 #1737 #1788)
  * Support recovering an ECDSA public key from a message/signature pair (GH #664
    [#1784])
  * Add base58 encoding/decoding functions (GH #1783)
  * In the command line interface, add support for reading passphrases from the
    terminal with echo disabled (GH #1756)
  * Add CT::Mask type to simplify const-time programming (GH #1751)
  * Add new configure options --disable-bmi2, --disable-rdrand, and
  - -disable-rdseed to prevent use of those instruction sets.
  * Add error_type and error_code functions to Exception type (GH #1744)
  * Now on POSIX systems posix_memalign is used instead of mmap for allocating the
    page-locked memory pool. This avoids issues with fork. (GH #602 #1798)
  * When available, use RDRAND to generate the additional data in
    Stateful_RNG::randomize_with_ts_input
  * Use vzeroall/vzeroupper intrinsics to avoid AVX2/SSE transition penalties.
  * Support for Visual C++ 2013 has been removed (GH #1557 #1697)
  * Resolve a memory leak when verifying ECDSA signatures with versions of OpenSSL
    before 1.1.0 (GH #1698)
  * Resolve a memory leak using ECDH via OpenSSL (GH #1767)
  * Fix an error in XTS which prohibited encrypting values which were exactly the
    same length as the underlying block size. Messages of this size are allowed by
    the standard and other XTS implementations. (GH #1706)
  * Resolve a bug in TSS which resulted in it using an incorrect length field in
    the shares. Now the correct length is encoded, but either correct or buggy
    lengths are accepted when decoding. (GH #1722)
  * Correct a bug when reducing a negative BigInt modulo a small power of 2. (GH
    [#1755])
  * Add CLI utils for threshold secret splitting. (GH #1722)
  * Fix a bug introduced in 2.8.0 that caused compilation failure if using a single
    amalgamation file with AVX2 enabled. (GH #1700)
  * Add an explicit OS target for Emscripten and improve support for it. (GH #1702)
  * Fix small issues when building for QNX
  * Switch the Travis CI build to using Ubuntu 16.04 (GH #1767)
  * Add options to configure.py to disable generation of pkg-config file, and (for
    systems where pkg-config support defaults to off, like Windows), to enable
    generating it. (GH #1268)
  * Modify configure.py to accept empty lists or trailing/extra commas. (GH #1705)
- Update to Botan 2.8
  * Add support for using Apple CommonCrypto library for hashing (GH #1667),
    cipher modes (GH #1674) and block ciphers (GH #1673).
  * Support for negotiating TLS versions 1.0 and 1.1 is disabled in the default
    TLS policy. In addition, support for negotiating TLS ciphersuites using CBC
    or CCM mode is disabled by default. Applications which need to interop with
    old peers must enable these in their TLS policy object. (GH #1651)
  * During primality testing, use a Lucas test in addition to Miller-Rabin. It
    is possible to construct a composite integer which passes n Miller-Rabin
    tests with probability (1/4)^n. So for a incautious verifier using a small
    number of tests (under 16 or so) it is possible if unlikely they would
    accept such a composite as prime. Adding a Lucas test precludes such an
    attack. (GH #1636)
  * Add XChaCha and XChaCha20Poly1305 (GH #1640)
  * Add AVX2 implementations of ChaCha (GH #1662) and Serpent (GH #1660)
  * Add a new password hashing interface in pwdhash.h (GH #1670)
  * C binding improvements. Added functions to get name and supported
    keylengths of cipher, hash and MAC objects, support for FE1 format
    preserving encryption (GH #1625 #1646), functions to load and save RSA keys
    in PKCS #1 format (GH #1621), HOTP and TOTP algorithms, scrypt, certificate
    verification (GH #1647), functions to get the output length of public key
    operations (GH #1642), and functions for loading and serializing X25519
    keys (GH #1681)
  * Support for building with BOTAN_MP_WORD_BITS set to 8 or 16 has been removed.
  * Previously SM2 had two distinct key types, one for signatures and another
    for encryption. They have now been merged into a single key type since in
    practice it seems the same key is at times used for both operations. (GH
    [#1637])
  * The Cipher_Mode class now derives from SymmetricAlgorithm (GH #1639)
  * Add support for using the ARMv8 instructions for SM4 encryption (GH #1622)
  * The entropy source using SecRandomCopyBytes has been removed as it was
    redundant with other entropy sources (GH #1668)
  * The Python module has much better error checking and reporting, and offers
    new functionality such as scrypt, MPI and FPE. (GH #1643 #1646)
  * Fixed a bug that caused CCM to fail with an exception when used with L=8 (GH #1631 #1632)
  * The default bcrypt work factor has been increased from 10 to 12.
  * The default algorithm used in passhash9 has changed from SHA-256 to
    SHA-512, and the default work factor increased from 10 to 15.
  * In ECC private keys, include the public key data for compatibility with GnuTLS (GH #1634 #1635)
  * Add support for using Linux getrandom syscall to access the system PRNG.
    This is disabled by default, use --with-os-feature=getrandom to enable.
  * It is now possible to encrypt private keys using SIV mode.
  * The FFI function botan_privkey_load now ignores its rng argument.
  * Resolve a problem when building under Visual C++ 15.8 (GH #1624)
  * Fix a bug in XSalsa20 (192-bit Salsa nonces) where if set_iv was called
    twice without calling set_key, the resulting encryption was incorrect. (GH
    [#1640])
  * Handle an error seen when verifying invalid ECDSA signatures using LibreSSL
    on non x86-64 platforms (GH #1627 #1628)
  * Fix bugs in PKCS7 and X9.23 CBC padding schemes, which would ignore the
    first byte in the event the padding took up the entire block. (GH #1690)
  * Correct bugs which would cause CFB, OCB, and GCM modes to crash when they
    were used in an unkeyed state. (GH #1639)
  * Optimizations for SM4 and Poly1305
  * Avoid a cache side channel in the AES key schedule
  * Add pk_encrypt and pk_decrypt CLI operations
  * Now asn1print CLI defaults to printing context-specific fields.
  * Use codec_base for Base64, which matches how Base32 is implemented (GH #1597)
  * The cast module has been split up into cast128 and cast256 (GH #1685)
  * When building under Visual C++ 2013, the user must acknowledge the upcoming
    removal of support using the configure.py flag --ack-vc2013-deprecated (GH
    [#1557])</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1554206400">- Update to Botan 2.10
  * Bump SONAME
  * Warning: XMSS currently implements draft-06 which is not compatible with
    the final RFC 8391 specification. A PR is open to fix this, however it will
    break all current uses of XMSS. If you are currently using XMSS please
    comment at https://github.com/randombit/botan/pull/1858. Otherwise the PR
    will be merged and support for draft-06 will be removed starting in 2.11.
  * Added a new certificate store implementation that can access the MacOS
    keychain certificate store. (GH #1830)
  * Redesigned Memory_Pool class, which services allocations out of a set of
    pages locked into memory (using mlock/VirtualLock). It is now faster and
    with improved exploit mitigations. (GH #1800)
  * Add BMI2 implementations of SHA-512 and SHA-3 which improve performance by
    25-35% on common CPUs. (GH #1815)
  * Unroll SHA-3 computation improving performance by 10-12% (GH #1838)
  * Add a Thread_Pool class. It is now possible to run the tests in multiple
    threads with --test-threads=N flag to select the number of threads to use.
    Use --test-threads=0 to run with as many CPU cores as are available on the
    current system. The default remains single threaded. (GH #1819)
  * XMSS signatures now uses a global thread pool instead of spawning new
    threads for each usage. This improves signature generation performance by
    between 10% and 60% depending on architecture and core count. (GH #1864)
  * Some functions related to encoding and decoding BigInts have been
    deprecated. (GH #1817)
  * Binary encoding and decoding of BigInts has been optimized by performing
    word-size operations when possible. (GH #1817)
  * Rename the exception Integrity_Failure to Invalid_Authentication_Tag to
    make its meaning and usage more clear. The old name remains as a typedef.
    (GH #1816)
  * Support for using Boost filesystem and MSVC?s std::filesystem have been
    removed, since already POSIX and Win32 versions had to be maintained for
    portability. (GH #1814)
  * Newly generated McEliece and XMSS keys now default to being encrypted using
    SIV mode, support for which was added in 2.8.0. Previously GCM was used by
    default for these algorithms.
  * Use arc4random on Android systems (GH #1851)
  * Fix the encoding of PGP-S2K iteration counts (GH #1853 #1854)
  * Add a facility for sandboxing the command line util. Currently FreeBSD
    (Capsicum) and OpenBSD (pledge) sandboxes are supported. (GH #1808)
  * Use if constexpr when available.
  * Disable building shared libs on iOS as it was broken and it is not clear
    shared libraries are ever useful on iOS (GH #1865)
  * Renamed the darwin build target to macos. This should not cause any
    user-visible change. (GH #1866)
  * Add support for using sccache to cache the Windows CI build (GH #1807)
  * Add --extra-cxxflags option which allows adding compilation flags without
    overriding the default set. (GH #1826)
  * Add --format= option to the hash cli which allows formatting the output as
    base64 or base58, default output remains hex.
  * Add base58_enc and base58_dec cli utils for base58 encoding/decoding. (GH #1848)
  * Enable getentropy by default on macOS (GH #1862)
  * Avoid using -momit-leaf-frame-pointer flags, since -fomit-frame-pointer is
    already the default with recent versions of GCC.
  * Fix XLC sanitizer flags.
  * Rename Blake2b class to BLAKE2b to match the official name. There is a typedef for compat.
  * Fix a bug where loading a raw Ed25519_PublicKey of incorrect length would
    lead to a crash. (GH #1850)
  * Fix a bug that caused compilation problems using CryptoNG PRNG. (GH #1832)
  * Extended SHAKE-128 cipher to support any key between 1 and 160 bytes,
    instead of only multiples of 8 bytes.
  * Minor HMAC optimizations.
  * Build fixes for GNU/Hurd.
  * Fix a bug that prevented generating or verifying Ed25519 signatures in the
    CLI (GH #1828 #1829)
  * Fix a compilation error when building the amalgamation outside of the
    original source directory when AVX2 was enabled. (GH #1812)
  * Fix a crash when creating the amalgamation if a header file was edited on
    Windows but then the amalgamation was built on Linux (GH #1763)</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1586347200">- Update to Botan 2.14:
  * Add support for using POWER8+ VPSUMD instruction to accelerate GCM (GH #2247)
  * Optimize the vector permute AES implementation, especially improving
    performance on ARMv7, Aarch64, and POWER. (GH #2243)
  * Use a new algorithm for modular inversions which is both faster
    and more resistant to side channel attacks. (GH #2287 #2296 #2301)
  * Address an issue in CBC padding which would leak the length of the plaintext
    which was being padded. Unpadding during decryption was not affected.
  * Optimize NIST prime field reductions, improving ECDSA by 3-9% (GH #2295)
  * Increase the size of the ECC blinding mask and scale it based on the
    size of the group order. (GH #880 #893 #2308)
  * Add server side support for the TLS asio wrapper. (GH #2229)
  * Add support for using Windows certificate store on MinGW (GH #2280)
  * Add a CLI utility cpu_clock which estimates the speed of the processor cycle counter.
  * Add Roughtime client (GH #2143 #1842)
  * Add support for XMSS X.509 certificates (GH #2172)
  * Add support for X.509 CRLs in FFI layer and Python wrapper (GH #2213)
  * Add AVX2 implementation of SHACAL2 (GH #2196)
  * Support more functionality for X.509 in the Python API (GH #2165)
  * Add generic CPU target useful when building for some new or unusual platform.
  * Disable MD5 in BSI or NIST modes (GH #2188)
  * Many currently public headers are being deprecated. If any such header is included by
    an application, a warning is issued at compile time.
    Headers issuing this warning will be made internal in a future major release.
  * RSA signature performance improvements (GH #2068 #2070)
  * Performance improvements for GCM (GH #2024 #2099 #2119), OCB (#2122), XTS (#2123) and
    ChaCha20Poly1305 (GH #2117), especially for small messages.
  * Add support for constant time AES using NEON and AltiVec (GH #2093 #2095 #2100)
  * Improve performance of POWER8 AES instructions (GH #2096)
  * Add support for the POWER9 hardware random number generator (GH #2026)
  * Add support for 64-bit version of RDRAND, doubling performance on x86-64 (GH #934 #2022)
  * In DTLS server, support a client crashing and then reconnecting from the same
    source port, as described in RFC 6347 sec 4.2.8 (GH #2029)
  * Optimize DTLS MTU splitting to split precisely to the set MTU (GH #2042)
  * Add support for the TLS v1.3 downgrade indicator. (GH #2027)
  * Add Argon2 PBKDF and password hash (GH #459 #1981 #1987)
  * Add Bcrypt-PBKDF (GH #1990)
  * Add server side support for issuing DTLS HelloVerifyRequest messages (GH #1999)
  * Add support for the TLS v1.3 supported_versions extension. (GH #1976)
  * Add Ed25519ph compatible with RFC 8032 (GH #1699 #2000)
  * Add support for OCSP stapling on server side. (GH #1703 #1967)
  * Add a boost::asio TLS stream compatible with boost::asio::ssl. (GH #1839 #1927 #1992)
  * Add a certificate store for Linux/Unix systems. (GH #1885 #1936)
  * Various Fixes</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597579200">- update to 2.15:
  Fix a bug where the name constraint extension did not constrain the alternative
  DN field which can be included in a subject alternative name. This would allow
  a corrupted sub-CA which was otherwise constrained by a name constraint to
  issue a certificate with a prohibited DN.
  Fix a bug in the TLS server during client authentication where where if a
  (disabled by default) static RSA ciphersuite was selected, then no certificate
  request would be sent. This would have an equivalent effect to a client which
  simply replied with an empty Certificate message. (GH #2367)
  Replace the T-Tables implementation of AES with a 32-bit bitsliced version. As
  a result AES is now constant time on all processors. (GH #2346 #2348 #2353
  [#2329] #2355)
  In TLS, enforce that the key usage given in the server certificate allows the
  operation being performed in the ciphersuite. (GH #2367)
  In X.509 certificates, verify that the algorithm parameters are the expected
  NULL or empty. (GH #2367)
  Change the HMAC key schedule to attempt to reduce the information leaked from
  the key schedule with regards to the length of the key, as this is at times (as
  for example in PBKDF2) sensitive information. (GH #2362)
  Add Processor_RNG which wraps RDRAND or the POWER DARN RNG instructions. The
  previous RDRAND_RNG interface is deprecated. (GH #2352)
  The documentation claimed that mlocked pages were created with a guard page
  both before and after. However only a trailing guard page was used. Add a
  leading guard page. (GH #2334)
  Add support for generating and verifying DER-encoded ECDSA signatures in the C
  and Python interfaces. (GH #2357 #2356)
  Workaround a bug in GCC?s UbSan which triggered on a code sequence in XMSS (GH
  [#2322])
  When building documentation using Sphinx avoid parallel builds with version 3.0
  due to a bug in that version (GH #2326 #2324)
  Fix a memory leak in the CommonCrypto block cipher calls (GH #2371)
  Fix a flaky test that would occasionally fail when running the tests with a
  large number of threads. (GH #2325 #2197)
  Additional algorithms are now deprecated: XTEA, GOST, and Tiger. They will be
  removed in a future major release.</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1603800000">- Update to 2.16.0:
  * Now userspace PRNG objects (such as AutoSeeded_RNG and HMAC_DRBG)
    use an internal lock, which allows safe concurrent use. This
    however is purely a precaution in case of accidental sharing of
    such RNG objects; for performance reasons it is always preferable
    to use a RNG per thread if a userspace RNG is needed.
  * DL_Group and EC_Group objects now track if they were created
    from a known trusted group (such as P-256 or an IPsec DH
    parameter). If so, then verification tests can be relaxed, as
    compared to parameters which may have been maliciously
    constructed in order to pass primality checks.
  * RandomNumberGenerator::add_entropy_T assumed its input was a POD
    type but did not verify this.
  * Support OCSP responders that live on a non-standard port.
  * Add support for Solaris sandbox.
  * Support suffixes on release numbers for alpha/beta releases.
  * Fix a bug in EAX which allowed requesting a 0 length tag, which
    had the effect of using a full length tag. Instead omit the
    length field, or request the full tag length explicitly.
  * Fix a memory leak in GCM where if passed an unsuitable block
    cipher (eg not 128 bit) it would throw an exception and leak
    the cipher object.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1604750400">- Botan 2.17.1:
  * Fix bugs in ECDSA signature generation and verifications under
    specific circumstances
  * developer visible changes, including deprecation with warnings
  * optimization in the non-hardware assisted AES key generation
  * Add more detection logic for AVX-512 features
  * Fix a bug parsing deeply nested cipher names
  * Prevent requesting DER encoding of signatures when the
    algorithm did not support it</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1605268800">- Botan 2.17.2:
  * Fix build problem on ppc64
  * Resolve an issue in the modular square root algorithm</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1608724800">- Botan 2.17.3:
  * Harden against side-channels from decoding secret values by
    changing the base64, base58, base32, and hex encoding and
    decoding opearations to run in constant time</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1618574400">- Botan 2.18.0
  * Add support for implementing custom RNG objects through the FFI
    interface
  * Improve safegcd bounds, improving runtime performance
  * Reject non-TLS messages as quickly as possible without waiting
    for a full record.
  * Fixes for TLS::Stream::async_shutdown
- Removed unneeded GNU MP build requirement, support was dropped
  with version 1.11.10
- Enabled check target, verify integrity of build library</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1620648000">- Botan 2.18.1:
  * Fix a build regression in 2.18.0 which caused linker flags
    which contain -l within them (such as -fuse-linker-plugin)
    to be misinterpreted
  * Fix a bug which caused decoding a certificate which contained
    more than one name in a single RDN
  * Fix a bug which caused OID lookup failures when run in a locale
    which uses thousands separators (pt_BR was reported as having
    this issue)
  * DNS names in name constraints were compared with case
    sensitivity, which could cause valid certificates to be
    rejected
  * X.509 name constraint extensions were rejected if non-critical.
    RFC 5280 requires conforming CAs issue such extensions as
    critical, but not all certificates are compliant, and all other
    known implementations do not require this
  * X.509 name constraints were incorrectly applied to the
    certificate which included the constraint
- build with lzma compression support
- build with SQLite support
- build with TPM support
- fix SLE 12 build</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1637755200">- update to 2.18.2:
  * Avoid using short exponents when encrypting in ElGamal, as some PGP
    implementations generate keys with parameters that are weak when
    short exponents are used CVE-2021-40529 boo#1190244
  * Fix a low risk OAEP decryption side channel
  * Work around a miscompilation of SHA-3 caused by a bug in Clang 12
    and XCode 13
  * Remove support in OpenSSL provider for algorithms which are
    disabled by default in OpenSSL 3.0
  * Add CI based on GitHub actions to replace Travis CI
  * Fix the online OCSP test, as the certificate involved had expired.
  * Fix some test failures induced by the expiration of the trust root
    "DST Root CA X3"</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1668686400">- Fixed [CVE-2022-43705,bsc#1205509]
  * Added Botan-CVE-2022-43705.patch
  * Added Botan-CVE-2022-43705-certs.tgz
  * validate that an embedded certificate was issued by the end-entity
    issuing certificate authority when checking OCSP responses.</changelog>
</package>
<package pkgid="b30aa7bafe470d763d358af82fe66b6d4b40bb68f577d65ae83d708f24326935" name="Botan" arch="s390x">
  <version epoch="0" ver="2.18.2" rel="bp154.2.3.1"/>
  <changelog author="adam.majer@suse.de" date="1518436800">- Don't drop -fstack-clash-protection for openSUSE 42.3 - we just
  need the Update repository present.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1518609600">- change group of libbotan-%{version_suffix} to 'System/Libraries' as
  requested on review</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1518782400">- drop explicit package requirements
- split binary package and documentation from dynamic library package
  and make documentation package noarch
- merge back Botan2 package to Botan with changelog history
- drop Botan patches
    aarch64-support.patch - doesn't seem to be required anymore
    Botan-fix_install_paths.patch - doesn't seem to be required
    no-cpuid-header.patch - SLE11 not target anymore
    Botan-fix_pkgconfig.patch - this seem to be wrong
    Botan-no-buildtime.patch - not needed anymore
    dont-set-mach-value.diff - doesn't apply, unclear and undocumented why it is there
    Botan-inttypes.patch - not required
    Botan-ull_constants.patch.bz2 - no reason anymore</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1522756800">- Update to Botan 2.5
  * Fix error in certificate wildcard matching (CVE-2018-9127), where a
    wildcard cert for b*.example.com would be accepted as a match for any host
    with name *b*.example.com (GH #1519)
  * Add support for RSA-PSS signatures in TLS (GH #1285)
  * Ed25519 certificates are now supported (GH #1501)
  * Many optimizations in ECC operations. ECDSA signatures are 8-10 times
    faster. ECDSA verification is about twice as fast. ECDH key agreement is
    3-4 times faster. (GH #1457 #1478)
  * Implement product scanning Montgomery reduction, which improves
    Diffie-Hellman and RSA performance by 10 to 20% on most platforms. (GH
    [#1472])
  * DSA signing and verification performance has improved by 30-50%.
  * Add a new Credentials_Manager callback that specifies which CAs the server
    has indicated it trusts (GH #1395 fixing #1261)
  * Add new TLS::Callbacks methods that allow creating or removing extensions,
    as well as examining extensions sent by the peer (GH #1394 #1186)
  * Add new TLS::Callbacks methods that allow an application to negotiate use
    of custom elliptic curves. (GH #1448)
  * Add ability to create custom elliptic curves (GH #1441 #1444)
  * Add support for POWER8 AES instructions (GH #1459 #1393 #1206)
  * Fix DSA/ECDSA handling of hashes longer than the group order (GH #1502
    [#986])
  * The default encoding of ECC public keys has changed from compressed to
    uncompressed point representation. This improves compatability with some
    common software packages including Golang?s standard library. (GH #1480
    [#1483])
  * It is now possible to create DNs with custom components. (GH #1490 #1492)
  * It is now possible to specify the serial number of created certificates,
    instead of using the default 128-bit random integer. (GH #1489 #1491)
  * Change DL_Group and EC_Group to store their data as shared_ptr for fast
    copying. Also both classes precompute additional useful values (eg for
    modular reductions). (GH #1435 #1454)
  * Make it possible for PKCS10 requests to include custom extensions. This
    also makes it possible to use muliple SubjectAlternativeNames of a single
    type in a request, which was previously not possible. (GH #1429 #1428)
  * Add new optimized interface for FE1 format preserving encryption. By
    caching a number of values computed in the course of the FPE calculation,
    it provides a 6-7x speedup versus the old API. (GH #1469)
  * Add DSA and ElGamal keygen functions to FFI (#1426)
  * Add Pipe::prepend_filter to replace Pipe::prepend (GH #1402)
  * Fix a memory leak in the OpenSSL block cipher integration, introduced in
  * 2.2.0
  * Use an improved algorithm for generating safe primes which is several tens
    of times faster. Also, fix a bug in the prime sieving algorithm which
    caused standard prime generation (like for RSA keys) to be slower than
    necessary. (GH #1413 #1411)
  * Correct the return value of PK_Encryptor::maximum_input_size which reported
    a much too small value (GH #1410)
  * Remove use of CPU specific optimization flags, instead the user should set
    these via CXXFLAGS if desired. (GH #1392)
  * Resolve an issue that would cause a crash in the tests if they were run on
    a machine without SSE2/NEON/VMX instructions. (GH #1495)
  * The Python module now tries to load DLLs from a list of names and uses the
    first one which successfully loads and indicates it supports the desired
    API level. (GH #1497)
  * Various minor optimizations for SHA-3 (GH #1433 #1434)
  * The output of botan --help has been improved (GH #1387)
  * Add --der-format flag to command line utils, making it possible verify
    DSA/ECDSA signatures generated by OpenSSL command line (GH #1409)
  * Add support for --library-suffix option to configure.py (GH #1405 #1404)
  * Use feature flags to enable/disable system specific code (GH #1378)
  * Add --msvc-runtime option to allow using static runtime (GH #1499 #210)
  * Add ?enable-sanitizers= option to allow specifying which sanitizers to
    enable. The existing --with-sanitizers option just enables some default set
    which is known to work with the minimum required compiler versions.
  * Use either rst2man or rst2man.py for generating man page as distributions
    differ on where this program is installed (GH #1516)
  * The threefish module has been renamed threefish_512 since that is the
    algorithm it provides. (GH #1477)
  * The Perl XS based wrapper has been removed, as it was unmaintained and
    broken. (GH #1412)
  * The sqlite3 encryption patch under contrib has been removed. It is still
    maintained by the original author at
    https://github.com/OlivierJG/botansqlite3</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1523361600">- Update to Botan 2.6
  * CVE-2018-9860 Fix a bug decrypting TLS CBC ciphertexts which could for a
    malformed ciphertext cause the decryptor to read and HMAC an additional 64K
    bytes of data which is not part of the record. This could cause a crash if
    the read went into unmapped memory. No information leak or out of bounds
    write occurs.
  * Add support for OAEP labels (GH #1508)
  * RSA signing is about 15% faster (GH #1523) and RSA verification is about 50% faster.
  * Add exponent blinding to RSA (GH #1523)
  * Add Cipher_Mode::create and AEAD_Mode::create (GH #1527)
  * Fix bug in TLS server introduced in 2.5 which caused connection to fail if
    the client offered any signature algorithm not known to the server (for
    example RSA/SHA-224).
  * Fix a bug in inline asm that would with GCC 7.3 cause incorrect
    computations and an infinite loop during the tests. (GH #1524 #1529)</changelog>
  <changelog author="kasimir_@outlook.de" date="1523534400">- fixed to build on armv6 and armv7</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1531224000">- Update to Botan 2.7
  * CVE-2018-12435 Avoid a side channel in ECDSA signature generation (GH
    [#1604])
  * Avoid a side channel in RSA key generation due to use of a non-constant
    time gcd algorithm. (GH #1542 #1556)
  * Optimize prime generation, especially improving RSA key generation. (GH
    [#1542])
  * Make Karatsuba multiplication, Montgomery field operations, Barrett
    reduction and Montgomery exponentiation const time (GH #1540 #1606 #1609
    [#1610])
  * Optimizations for elliptic curve operations especially improving reductions
    and inversions modulo NIST primes (GH #1534 #1538 #1545 #1546 #1547 #1550)
  * Add 24 word wide Comba multiplication, improving 3072-bit RSA and DH by
    ~25%. (GH #1564)
  * Unroll Montgomery reduction for specific sizes (GH #1603)
  * Improved performance of signature verification in ECGDSA, ECKCDSA, SM2 and
    GOST by 10-15%.
  * XMSS optimizations (GH #1583 #1585)
  * Fix an error that meant XMSS would only sign half as many signatures as is
    allowed (GH #1582)
  * Add support for base32 encoding/decoding (GH #1541)
  * Add BMI2 optimized version of SHA-256, 40% faster on Skylake (GH #1584)
  * Allow the year to be up to 2200 in ASN.1 time objects. Previously this was
    limited to 2100. (GH #1536)
  * Add support for Scrypt password hashing (GH #1570)
  * Add support for using Scrypt for private key encryption (GH #1574)
  * Optimizations for DES/3DES, approx 50% faster when used in certain modes
    such as CBC decrypt or CTR.
  * XMSS signature verification did not check that the signature was of the
    expected length which could lead to a crash. (GH #1537)
  * The bcrypt variants 2b and 2y are now supported.
  * Support for 192-bit Suite B TLS profile is now implemented, as the 128-bit
    Suite B is since 2015 not allowed anymore.
  * Previously botan allowed GCM to be used with an empty nonce, which is not
    allowed by the specification. Now such nonces are rejected.
  * Avoid problems on Windows when compiling in Unicode mode (GH #1615 #1616)
  * Previously for ASN.1 encoded signatures (eg ECDSA) Botan would accept any
    valid BER encoding. Now only the single valid DER encoding is accepted.
  * Correct an error that could in rare cases cause an internal error exception
    when doing computations with the P-224 curve.
  * Optimizations to reduce allocations/copies during DER encoding and BER
    decoding (GH #1571 #1572 #1600)
  * Botan generates X.509 subject key IDs by hashing the public key with
    whatever hash function is being used to sign the certificate. However
    especially for SHA-512 this caused SKIDs that were far longer than
    necessary. Now all SKIDs are truncated to 192 bits.
  * In the test suite use mkstemp to create temporary files instead of creating
    them in the current working directory. (GH #1533 #1530)
  * It is now possible to safely override CXX when invoking make in addition to
    when configure.py is run. (GH #1579)
  * OIDs for Camellia and SM4 in CBC and GCM mode are now defined, making it
    possible to use this algorithms for private key encryption.
  * Avoid creating symlinks to the shared object on OpenBSD (#1535)
  * The factor command runs much faster on larger inputs now.
  * Support for Windows Phone/UWP was deprecated starting in 2.5. This
    deprecation has been reversed as it seems UWP is still actively used. (GH
    [#1586] #1587)
  * Support for Visual C++ 2013 is deprecated, and will be removed in Jan 2019.
  * Added support for GCC?s ?sysroot option to configure.py for
    cross-compiling.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1533038400">- Fix version in baselibs.conf</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1547121600">- Update to Botan 2.9
  * Bump SONAME
  * CVE-2018-20187 Address a side channel during ECC key generation, which used an
    unblinded Montgomery ladder. As a result, a timing attack can reveal
    information about the high bits of the secret key.
  * Fix bugs in TLS which caused negotiation failures when the client used an
    unknown signature algorithm or version (GH #1711 #1709 #1708)
  * Fix bug affecting GCM, EAX and ChaCha20Poly1305 where if the associated data
    was set after starting a message, the new AD was not reflected in the produced
    tag. Now with these modes setting an AD after beginning a message throws an
    exception.
  * Use a smaller sieve which improves performance of prime generation.
  * Fixed a bug that caused ChaCha to produce incorrect output after encrypting 256
    GB. (GH #1728)
  * Add NEON and AltiVec implementations of ChaCha (GH #1719 #1728 #1729)
  * Optimize AVX2 ChaCha (GH #1730)
  * Many more operations in BigInt, ECC and RSA code paths are either fully const
    time or avoid problematic branches that could potentially be exploited in a
    side channel attack. (GH #1738 #1750 #1754 #1755 #1757 #1758 #1759 #1762 #1765
    [#1770] #1773 #1774 #1779 #1780 #1794 #1795 #1796 #1797)
  * Several optimizations for BigInt and ECC, improving ECDSA performance by as
    much as 30%. (GH #1734 #1737 #1777 #1750 #1737 #1788)
  * Support recovering an ECDSA public key from a message/signature pair (GH #664
    [#1784])
  * Add base58 encoding/decoding functions (GH #1783)
  * In the command line interface, add support for reading passphrases from the
    terminal with echo disabled (GH #1756)
  * Add CT::Mask type to simplify const-time programming (GH #1751)
  * Add new configure options --disable-bmi2, --disable-rdrand, and
  - -disable-rdseed to prevent use of those instruction sets.
  * Add error_type and error_code functions to Exception type (GH #1744)
  * Now on POSIX systems posix_memalign is used instead of mmap for allocating the
    page-locked memory pool. This avoids issues with fork. (GH #602 #1798)
  * When available, use RDRAND to generate the additional data in
    Stateful_RNG::randomize_with_ts_input
  * Use vzeroall/vzeroupper intrinsics to avoid AVX2/SSE transition penalties.
  * Support for Visual C++ 2013 has been removed (GH #1557 #1697)
  * Resolve a memory leak when verifying ECDSA signatures with versions of OpenSSL
    before 1.1.0 (GH #1698)
  * Resolve a memory leak using ECDH via OpenSSL (GH #1767)
  * Fix an error in XTS which prohibited encrypting values which were exactly the
    same length as the underlying block size. Messages of this size are allowed by
    the standard and other XTS implementations. (GH #1706)
  * Resolve a bug in TSS which resulted in it using an incorrect length field in
    the shares. Now the correct length is encoded, but either correct or buggy
    lengths are accepted when decoding. (GH #1722)
  * Correct a bug when reducing a negative BigInt modulo a small power of 2. (GH
    [#1755])
  * Add CLI utils for threshold secret splitting. (GH #1722)
  * Fix a bug introduced in 2.8.0 that caused compilation failure if using a single
    amalgamation file with AVX2 enabled. (GH #1700)
  * Add an explicit OS target for Emscripten and improve support for it. (GH #1702)
  * Fix small issues when building for QNX
  * Switch the Travis CI build to using Ubuntu 16.04 (GH #1767)
  * Add options to configure.py to disable generation of pkg-config file, and (for
    systems where pkg-config support defaults to off, like Windows), to enable
    generating it. (GH #1268)
  * Modify configure.py to accept empty lists or trailing/extra commas. (GH #1705)
- Update to Botan 2.8
  * Add support for using Apple CommonCrypto library for hashing (GH #1667),
    cipher modes (GH #1674) and block ciphers (GH #1673).
  * Support for negotiating TLS versions 1.0 and 1.1 is disabled in the default
    TLS policy. In addition, support for negotiating TLS ciphersuites using CBC
    or CCM mode is disabled by default. Applications which need to interop with
    old peers must enable these in their TLS policy object. (GH #1651)
  * During primality testing, use a Lucas test in addition to Miller-Rabin. It
    is possible to construct a composite integer which passes n Miller-Rabin
    tests with probability (1/4)^n. So for a incautious verifier using a small
    number of tests (under 16 or so) it is possible if unlikely they would
    accept such a composite as prime. Adding a Lucas test precludes such an
    attack. (GH #1636)
  * Add XChaCha and XChaCha20Poly1305 (GH #1640)
  * Add AVX2 implementations of ChaCha (GH #1662) and Serpent (GH #1660)
  * Add a new password hashing interface in pwdhash.h (GH #1670)
  * C binding improvements. Added functions to get name and supported
    keylengths of cipher, hash and MAC objects, support for FE1 format
    preserving encryption (GH #1625 #1646), functions to load and save RSA keys
    in PKCS #1 format (GH #1621), HOTP and TOTP algorithms, scrypt, certificate
    verification (GH #1647), functions to get the output length of public key
    operations (GH #1642), and functions for loading and serializing X25519
    keys (GH #1681)
  * Support for building with BOTAN_MP_WORD_BITS set to 8 or 16 has been removed.
  * Previously SM2 had two distinct key types, one for signatures and another
    for encryption. They have now been merged into a single key type since in
    practice it seems the same key is at times used for both operations. (GH
    [#1637])
  * The Cipher_Mode class now derives from SymmetricAlgorithm (GH #1639)
  * Add support for using the ARMv8 instructions for SM4 encryption (GH #1622)
  * The entropy source using SecRandomCopyBytes has been removed as it was
    redundant with other entropy sources (GH #1668)
  * The Python module has much better error checking and reporting, and offers
    new functionality such as scrypt, MPI and FPE. (GH #1643 #1646)
  * Fixed a bug that caused CCM to fail with an exception when used with L=8 (GH #1631 #1632)
  * The default bcrypt work factor has been increased from 10 to 12.
  * The default algorithm used in passhash9 has changed from SHA-256 to
    SHA-512, and the default work factor increased from 10 to 15.
  * In ECC private keys, include the public key data for compatibility with GnuTLS (GH #1634 #1635)
  * Add support for using Linux getrandom syscall to access the system PRNG.
    This is disabled by default, use --with-os-feature=getrandom to enable.
  * It is now possible to encrypt private keys using SIV mode.
  * The FFI function botan_privkey_load now ignores its rng argument.
  * Resolve a problem when building under Visual C++ 15.8 (GH #1624)
  * Fix a bug in XSalsa20 (192-bit Salsa nonces) where if set_iv was called
    twice without calling set_key, the resulting encryption was incorrect. (GH
    [#1640])
  * Handle an error seen when verifying invalid ECDSA signatures using LibreSSL
    on non x86-64 platforms (GH #1627 #1628)
  * Fix bugs in PKCS7 and X9.23 CBC padding schemes, which would ignore the
    first byte in the event the padding took up the entire block. (GH #1690)
  * Correct bugs which would cause CFB, OCB, and GCM modes to crash when they
    were used in an unkeyed state. (GH #1639)
  * Optimizations for SM4 and Poly1305
  * Avoid a cache side channel in the AES key schedule
  * Add pk_encrypt and pk_decrypt CLI operations
  * Now asn1print CLI defaults to printing context-specific fields.
  * Use codec_base for Base64, which matches how Base32 is implemented (GH #1597)
  * The cast module has been split up into cast128 and cast256 (GH #1685)
  * When building under Visual C++ 2013, the user must acknowledge the upcoming
    removal of support using the configure.py flag --ack-vc2013-deprecated (GH
    [#1557])</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1554206400">- Update to Botan 2.10
  * Bump SONAME
  * Warning: XMSS currently implements draft-06 which is not compatible with
    the final RFC 8391 specification. A PR is open to fix this, however it will
    break all current uses of XMSS. If you are currently using XMSS please
    comment at https://github.com/randombit/botan/pull/1858. Otherwise the PR
    will be merged and support for draft-06 will be removed starting in 2.11.
  * Added a new certificate store implementation that can access the MacOS
    keychain certificate store. (GH #1830)
  * Redesigned Memory_Pool class, which services allocations out of a set of
    pages locked into memory (using mlock/VirtualLock). It is now faster and
    with improved exploit mitigations. (GH #1800)
  * Add BMI2 implementations of SHA-512 and SHA-3 which improve performance by
    25-35% on common CPUs. (GH #1815)
  * Unroll SHA-3 computation improving performance by 10-12% (GH #1838)
  * Add a Thread_Pool class. It is now possible to run the tests in multiple
    threads with --test-threads=N flag to select the number of threads to use.
    Use --test-threads=0 to run with as many CPU cores as are available on the
    current system. The default remains single threaded. (GH #1819)
  * XMSS signatures now uses a global thread pool instead of spawning new
    threads for each usage. This improves signature generation performance by
    between 10% and 60% depending on architecture and core count. (GH #1864)
  * Some functions related to encoding and decoding BigInts have been
    deprecated. (GH #1817)
  * Binary encoding and decoding of BigInts has been optimized by performing
    word-size operations when possible. (GH #1817)
  * Rename the exception Integrity_Failure to Invalid_Authentication_Tag to
    make its meaning and usage more clear. The old name remains as a typedef.
    (GH #1816)
  * Support for using Boost filesystem and MSVC?s std::filesystem have been
    removed, since already POSIX and Win32 versions had to be maintained for
    portability. (GH #1814)
  * Newly generated McEliece and XMSS keys now default to being encrypted using
    SIV mode, support for which was added in 2.8.0. Previously GCM was used by
    default for these algorithms.
  * Use arc4random on Android systems (GH #1851)
  * Fix the encoding of PGP-S2K iteration counts (GH #1853 #1854)
  * Add a facility for sandboxing the command line util. Currently FreeBSD
    (Capsicum) and OpenBSD (pledge) sandboxes are supported. (GH #1808)
  * Use if constexpr when available.
  * Disable building shared libs on iOS as it was broken and it is not clear
    shared libraries are ever useful on iOS (GH #1865)
  * Renamed the darwin build target to macos. This should not cause any
    user-visible change. (GH #1866)
  * Add support for using sccache to cache the Windows CI build (GH #1807)
  * Add --extra-cxxflags option which allows adding compilation flags without
    overriding the default set. (GH #1826)
  * Add --format= option to the hash cli which allows formatting the output as
    base64 or base58, default output remains hex.
  * Add base58_enc and base58_dec cli utils for base58 encoding/decoding. (GH #1848)
  * Enable getentropy by default on macOS (GH #1862)
  * Avoid using -momit-leaf-frame-pointer flags, since -fomit-frame-pointer is
    already the default with recent versions of GCC.
  * Fix XLC sanitizer flags.
  * Rename Blake2b class to BLAKE2b to match the official name. There is a typedef for compat.
  * Fix a bug where loading a raw Ed25519_PublicKey of incorrect length would
    lead to a crash. (GH #1850)
  * Fix a bug that caused compilation problems using CryptoNG PRNG. (GH #1832)
  * Extended SHAKE-128 cipher to support any key between 1 and 160 bytes,
    instead of only multiples of 8 bytes.
  * Minor HMAC optimizations.
  * Build fixes for GNU/Hurd.
  * Fix a bug that prevented generating or verifying Ed25519 signatures in the
    CLI (GH #1828 #1829)
  * Fix a compilation error when building the amalgamation outside of the
    original source directory when AVX2 was enabled. (GH #1812)
  * Fix a crash when creating the amalgamation if a header file was edited on
    Windows but then the amalgamation was built on Linux (GH #1763)</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1586347200">- Update to Botan 2.14:
  * Add support for using POWER8+ VPSUMD instruction to accelerate GCM (GH #2247)
  * Optimize the vector permute AES implementation, especially improving
    performance on ARMv7, Aarch64, and POWER. (GH #2243)
  * Use a new algorithm for modular inversions which is both faster
    and more resistant to side channel attacks. (GH #2287 #2296 #2301)
  * Address an issue in CBC padding which would leak the length of the plaintext
    which was being padded. Unpadding during decryption was not affected.
  * Optimize NIST prime field reductions, improving ECDSA by 3-9% (GH #2295)
  * Increase the size of the ECC blinding mask and scale it based on the
    size of the group order. (GH #880 #893 #2308)
  * Add server side support for the TLS asio wrapper. (GH #2229)
  * Add support for using Windows certificate store on MinGW (GH #2280)
  * Add a CLI utility cpu_clock which estimates the speed of the processor cycle counter.
  * Add Roughtime client (GH #2143 #1842)
  * Add support for XMSS X.509 certificates (GH #2172)
  * Add support for X.509 CRLs in FFI layer and Python wrapper (GH #2213)
  * Add AVX2 implementation of SHACAL2 (GH #2196)
  * Support more functionality for X.509 in the Python API (GH #2165)
  * Add generic CPU target useful when building for some new or unusual platform.
  * Disable MD5 in BSI or NIST modes (GH #2188)
  * Many currently public headers are being deprecated. If any such header is included by
    an application, a warning is issued at compile time.
    Headers issuing this warning will be made internal in a future major release.
  * RSA signature performance improvements (GH #2068 #2070)
  * Performance improvements for GCM (GH #2024 #2099 #2119), OCB (#2122), XTS (#2123) and
    ChaCha20Poly1305 (GH #2117), especially for small messages.
  * Add support for constant time AES using NEON and AltiVec (GH #2093 #2095 #2100)
  * Improve performance of POWER8 AES instructions (GH #2096)
  * Add support for the POWER9 hardware random number generator (GH #2026)
  * Add support for 64-bit version of RDRAND, doubling performance on x86-64 (GH #934 #2022)
  * In DTLS server, support a client crashing and then reconnecting from the same
    source port, as described in RFC 6347 sec 4.2.8 (GH #2029)
  * Optimize DTLS MTU splitting to split precisely to the set MTU (GH #2042)
  * Add support for the TLS v1.3 downgrade indicator. (GH #2027)
  * Add Argon2 PBKDF and password hash (GH #459 #1981 #1987)
  * Add Bcrypt-PBKDF (GH #1990)
  * Add server side support for issuing DTLS HelloVerifyRequest messages (GH #1999)
  * Add support for the TLS v1.3 supported_versions extension. (GH #1976)
  * Add Ed25519ph compatible with RFC 8032 (GH #1699 #2000)
  * Add support for OCSP stapling on server side. (GH #1703 #1967)
  * Add a boost::asio TLS stream compatible with boost::asio::ssl. (GH #1839 #1927 #1992)
  * Add a certificate store for Linux/Unix systems. (GH #1885 #1936)
  * Various Fixes</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597579200">- update to 2.15:
  Fix a bug where the name constraint extension did not constrain the alternative
  DN field which can be included in a subject alternative name. This would allow
  a corrupted sub-CA which was otherwise constrained by a name constraint to
  issue a certificate with a prohibited DN.
  Fix a bug in the TLS server during client authentication where where if a
  (disabled by default) static RSA ciphersuite was selected, then no certificate
  request would be sent. This would have an equivalent effect to a client which
  simply replied with an empty Certificate message. (GH #2367)
  Replace the T-Tables implementation of AES with a 32-bit bitsliced version. As
  a result AES is now constant time on all processors. (GH #2346 #2348 #2353
  [#2329] #2355)
  In TLS, enforce that the key usage given in the server certificate allows the
  operation being performed in the ciphersuite. (GH #2367)
  In X.509 certificates, verify that the algorithm parameters are the expected
  NULL or empty. (GH #2367)
  Change the HMAC key schedule to attempt to reduce the information leaked from
  the key schedule with regards to the length of the key, as this is at times (as
  for example in PBKDF2) sensitive information. (GH #2362)
  Add Processor_RNG which wraps RDRAND or the POWER DARN RNG instructions. The
  previous RDRAND_RNG interface is deprecated. (GH #2352)
  The documentation claimed that mlocked pages were created with a guard page
  both before and after. However only a trailing guard page was used. Add a
  leading guard page. (GH #2334)
  Add support for generating and verifying DER-encoded ECDSA signatures in the C
  and Python interfaces. (GH #2357 #2356)
  Workaround a bug in GCC?s UbSan which triggered on a code sequence in XMSS (GH
  [#2322])
  When building documentation using Sphinx avoid parallel builds with version 3.0
  due to a bug in that version (GH #2326 #2324)
  Fix a memory leak in the CommonCrypto block cipher calls (GH #2371)
  Fix a flaky test that would occasionally fail when running the tests with a
  large number of threads. (GH #2325 #2197)
  Additional algorithms are now deprecated: XTEA, GOST, and Tiger. They will be
  removed in a future major release.</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1603800000">- Update to 2.16.0:
  * Now userspace PRNG objects (such as AutoSeeded_RNG and HMAC_DRBG)
    use an internal lock, which allows safe concurrent use. This
    however is purely a precaution in case of accidental sharing of
    such RNG objects; for performance reasons it is always preferable
    to use a RNG per thread if a userspace RNG is needed.
  * DL_Group and EC_Group objects now track if they were created
    from a known trusted group (such as P-256 or an IPsec DH
    parameter). If so, then verification tests can be relaxed, as
    compared to parameters which may have been maliciously
    constructed in order to pass primality checks.
  * RandomNumberGenerator::add_entropy_T assumed its input was a POD
    type but did not verify this.
  * Support OCSP responders that live on a non-standard port.
  * Add support for Solaris sandbox.
  * Support suffixes on release numbers for alpha/beta releases.
  * Fix a bug in EAX which allowed requesting a 0 length tag, which
    had the effect of using a full length tag. Instead omit the
    length field, or request the full tag length explicitly.
  * Fix a memory leak in GCM where if passed an unsuitable block
    cipher (eg not 128 bit) it would throw an exception and leak
    the cipher object.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1604750400">- Botan 2.17.1:
  * Fix bugs in ECDSA signature generation and verifications under
    specific circumstances
  * developer visible changes, including deprecation with warnings
  * optimization in the non-hardware assisted AES key generation
  * Add more detection logic for AVX-512 features
  * Fix a bug parsing deeply nested cipher names
  * Prevent requesting DER encoding of signatures when the
    algorithm did not support it</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1605268800">- Botan 2.17.2:
  * Fix build problem on ppc64
  * Resolve an issue in the modular square root algorithm</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1608724800">- Botan 2.17.3:
  * Harden against side-channels from decoding secret values by
    changing the base64, base58, base32, and hex encoding and
    decoding opearations to run in constant time</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1618574400">- Botan 2.18.0
  * Add support for implementing custom RNG objects through the FFI
    interface
  * Improve safegcd bounds, improving runtime performance
  * Reject non-TLS messages as quickly as possible without waiting
    for a full record.
  * Fixes for TLS::Stream::async_shutdown
- Removed unneeded GNU MP build requirement, support was dropped
  with version 1.11.10
- Enabled check target, verify integrity of build library</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1620648000">- Botan 2.18.1:
  * Fix a build regression in 2.18.0 which caused linker flags
    which contain -l within them (such as -fuse-linker-plugin)
    to be misinterpreted
  * Fix a bug which caused decoding a certificate which contained
    more than one name in a single RDN
  * Fix a bug which caused OID lookup failures when run in a locale
    which uses thousands separators (pt_BR was reported as having
    this issue)
  * DNS names in name constraints were compared with case
    sensitivity, which could cause valid certificates to be
    rejected
  * X.509 name constraint extensions were rejected if non-critical.
    RFC 5280 requires conforming CAs issue such extensions as
    critical, but not all certificates are compliant, and all other
    known implementations do not require this
  * X.509 name constraints were incorrectly applied to the
    certificate which included the constraint
- build with lzma compression support
- build with SQLite support
- build with TPM support
- fix SLE 12 build</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1637755200">- update to 2.18.2:
  * Avoid using short exponents when encrypting in ElGamal, as some PGP
    implementations generate keys with parameters that are weak when
    short exponents are used CVE-2021-40529 boo#1190244
  * Fix a low risk OAEP decryption side channel
  * Work around a miscompilation of SHA-3 caused by a bug in Clang 12
    and XCode 13
  * Remove support in OpenSSL provider for algorithms which are
    disabled by default in OpenSSL 3.0
  * Add CI based on GitHub actions to replace Travis CI
  * Fix the online OCSP test, as the certificate involved had expired.
  * Fix some test failures induced by the expiration of the trust root
    "DST Root CA X3"</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1668686400">- Fixed [CVE-2022-43705,bsc#1205509]
  * Added Botan-CVE-2022-43705.patch
  * Added Botan-CVE-2022-43705-certs.tgz
  * validate that an embedded certificate was issued by the end-entity
    issuing certificate authority when checking OCSP responses.</changelog>
</package>
<package pkgid="8304ded8c96d82fbb2b81aa355b0867c3a52cf80d3333d58794a8a8bd3ad8063" name="Botan" arch="src">
  <version epoch="0" ver="2.18.2" rel="bp154.2.3.1"/>
  <changelog author="adam.majer@suse.de" date="1518436800">- Don't drop -fstack-clash-protection for openSUSE 42.3 - we just
  need the Update repository present.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1518609600">- change group of libbotan-%{version_suffix} to 'System/Libraries' as
  requested on review</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1518782400">- drop explicit package requirements
- split binary package and documentation from dynamic library package
  and make documentation package noarch
- merge back Botan2 package to Botan with changelog history
- drop Botan patches
    aarch64-support.patch - doesn't seem to be required anymore
    Botan-fix_install_paths.patch - doesn't seem to be required
    no-cpuid-header.patch - SLE11 not target anymore
    Botan-fix_pkgconfig.patch - this seem to be wrong
    Botan-no-buildtime.patch - not needed anymore
    dont-set-mach-value.diff - doesn't apply, unclear and undocumented why it is there
    Botan-inttypes.patch - not required
    Botan-ull_constants.patch.bz2 - no reason anymore</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1522756800">- Update to Botan 2.5
  * Fix error in certificate wildcard matching (CVE-2018-9127), where a
    wildcard cert for b*.example.com would be accepted as a match for any host
    with name *b*.example.com (GH #1519)
  * Add support for RSA-PSS signatures in TLS (GH #1285)
  * Ed25519 certificates are now supported (GH #1501)
  * Many optimizations in ECC operations. ECDSA signatures are 8-10 times
    faster. ECDSA verification is about twice as fast. ECDH key agreement is
    3-4 times faster. (GH #1457 #1478)
  * Implement product scanning Montgomery reduction, which improves
    Diffie-Hellman and RSA performance by 10 to 20% on most platforms. (GH
    [#1472])
  * DSA signing and verification performance has improved by 30-50%.
  * Add a new Credentials_Manager callback that specifies which CAs the server
    has indicated it trusts (GH #1395 fixing #1261)
  * Add new TLS::Callbacks methods that allow creating or removing extensions,
    as well as examining extensions sent by the peer (GH #1394 #1186)
  * Add new TLS::Callbacks methods that allow an application to negotiate use
    of custom elliptic curves. (GH #1448)
  * Add ability to create custom elliptic curves (GH #1441 #1444)
  * Add support for POWER8 AES instructions (GH #1459 #1393 #1206)
  * Fix DSA/ECDSA handling of hashes longer than the group order (GH #1502
    [#986])
  * The default encoding of ECC public keys has changed from compressed to
    uncompressed point representation. This improves compatability with some
    common software packages including Golang?s standard library. (GH #1480
    [#1483])
  * It is now possible to create DNs with custom components. (GH #1490 #1492)
  * It is now possible to specify the serial number of created certificates,
    instead of using the default 128-bit random integer. (GH #1489 #1491)
  * Change DL_Group and EC_Group to store their data as shared_ptr for fast
    copying. Also both classes precompute additional useful values (eg for
    modular reductions). (GH #1435 #1454)
  * Make it possible for PKCS10 requests to include custom extensions. This
    also makes it possible to use muliple SubjectAlternativeNames of a single
    type in a request, which was previously not possible. (GH #1429 #1428)
  * Add new optimized interface for FE1 format preserving encryption. By
    caching a number of values computed in the course of the FPE calculation,
    it provides a 6-7x speedup versus the old API. (GH #1469)
  * Add DSA and ElGamal keygen functions to FFI (#1426)
  * Add Pipe::prepend_filter to replace Pipe::prepend (GH #1402)
  * Fix a memory leak in the OpenSSL block cipher integration, introduced in
  * 2.2.0
  * Use an improved algorithm for generating safe primes which is several tens
    of times faster. Also, fix a bug in the prime sieving algorithm which
    caused standard prime generation (like for RSA keys) to be slower than
    necessary. (GH #1413 #1411)
  * Correct the return value of PK_Encryptor::maximum_input_size which reported
    a much too small value (GH #1410)
  * Remove use of CPU specific optimization flags, instead the user should set
    these via CXXFLAGS if desired. (GH #1392)
  * Resolve an issue that would cause a crash in the tests if they were run on
    a machine without SSE2/NEON/VMX instructions. (GH #1495)
  * The Python module now tries to load DLLs from a list of names and uses the
    first one which successfully loads and indicates it supports the desired
    API level. (GH #1497)
  * Various minor optimizations for SHA-3 (GH #1433 #1434)
  * The output of botan --help has been improved (GH #1387)
  * Add --der-format flag to command line utils, making it possible verify
    DSA/ECDSA signatures generated by OpenSSL command line (GH #1409)
  * Add support for --library-suffix option to configure.py (GH #1405 #1404)
  * Use feature flags to enable/disable system specific code (GH #1378)
  * Add --msvc-runtime option to allow using static runtime (GH #1499 #210)
  * Add ?enable-sanitizers= option to allow specifying which sanitizers to
    enable. The existing --with-sanitizers option just enables some default set
    which is known to work with the minimum required compiler versions.
  * Use either rst2man or rst2man.py for generating man page as distributions
    differ on where this program is installed (GH #1516)
  * The threefish module has been renamed threefish_512 since that is the
    algorithm it provides. (GH #1477)
  * The Perl XS based wrapper has been removed, as it was unmaintained and
    broken. (GH #1412)
  * The sqlite3 encryption patch under contrib has been removed. It is still
    maintained by the original author at
    https://github.com/OlivierJG/botansqlite3</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1523361600">- Update to Botan 2.6
  * CVE-2018-9860 Fix a bug decrypting TLS CBC ciphertexts which could for a
    malformed ciphertext cause the decryptor to read and HMAC an additional 64K
    bytes of data which is not part of the record. This could cause a crash if
    the read went into unmapped memory. No information leak or out of bounds
    write occurs.
  * Add support for OAEP labels (GH #1508)
  * RSA signing is about 15% faster (GH #1523) and RSA verification is about 50% faster.
  * Add exponent blinding to RSA (GH #1523)
  * Add Cipher_Mode::create and AEAD_Mode::create (GH #1527)
  * Fix bug in TLS server introduced in 2.5 which caused connection to fail if
    the client offered any signature algorithm not known to the server (for
    example RSA/SHA-224).
  * Fix a bug in inline asm that would with GCC 7.3 cause incorrect
    computations and an infinite loop during the tests. (GH #1524 #1529)</changelog>
  <changelog author="kasimir_@outlook.de" date="1523534400">- fixed to build on armv6 and armv7</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1531224000">- Update to Botan 2.7
  * CVE-2018-12435 Avoid a side channel in ECDSA signature generation (GH
    [#1604])
  * Avoid a side channel in RSA key generation due to use of a non-constant
    time gcd algorithm. (GH #1542 #1556)
  * Optimize prime generation, especially improving RSA key generation. (GH
    [#1542])
  * Make Karatsuba multiplication, Montgomery field operations, Barrett
    reduction and Montgomery exponentiation const time (GH #1540 #1606 #1609
    [#1610])
  * Optimizations for elliptic curve operations especially improving reductions
    and inversions modulo NIST primes (GH #1534 #1538 #1545 #1546 #1547 #1550)
  * Add 24 word wide Comba multiplication, improving 3072-bit RSA and DH by
    ~25%. (GH #1564)
  * Unroll Montgomery reduction for specific sizes (GH #1603)
  * Improved performance of signature verification in ECGDSA, ECKCDSA, SM2 and
    GOST by 10-15%.
  * XMSS optimizations (GH #1583 #1585)
  * Fix an error that meant XMSS would only sign half as many signatures as is
    allowed (GH #1582)
  * Add support for base32 encoding/decoding (GH #1541)
  * Add BMI2 optimized version of SHA-256, 40% faster on Skylake (GH #1584)
  * Allow the year to be up to 2200 in ASN.1 time objects. Previously this was
    limited to 2100. (GH #1536)
  * Add support for Scrypt password hashing (GH #1570)
  * Add support for using Scrypt for private key encryption (GH #1574)
  * Optimizations for DES/3DES, approx 50% faster when used in certain modes
    such as CBC decrypt or CTR.
  * XMSS signature verification did not check that the signature was of the
    expected length which could lead to a crash. (GH #1537)
  * The bcrypt variants 2b and 2y are now supported.
  * Support for 192-bit Suite B TLS profile is now implemented, as the 128-bit
    Suite B is since 2015 not allowed anymore.
  * Previously botan allowed GCM to be used with an empty nonce, which is not
    allowed by the specification. Now such nonces are rejected.
  * Avoid problems on Windows when compiling in Unicode mode (GH #1615 #1616)
  * Previously for ASN.1 encoded signatures (eg ECDSA) Botan would accept any
    valid BER encoding. Now only the single valid DER encoding is accepted.
  * Correct an error that could in rare cases cause an internal error exception
    when doing computations with the P-224 curve.
  * Optimizations to reduce allocations/copies during DER encoding and BER
    decoding (GH #1571 #1572 #1600)
  * Botan generates X.509 subject key IDs by hashing the public key with
    whatever hash function is being used to sign the certificate. However
    especially for SHA-512 this caused SKIDs that were far longer than
    necessary. Now all SKIDs are truncated to 192 bits.
  * In the test suite use mkstemp to create temporary files instead of creating
    them in the current working directory. (GH #1533 #1530)
  * It is now possible to safely override CXX when invoking make in addition to
    when configure.py is run. (GH #1579)
  * OIDs for Camellia and SM4 in CBC and GCM mode are now defined, making it
    possible to use this algorithms for private key encryption.
  * Avoid creating symlinks to the shared object on OpenBSD (#1535)
  * The factor command runs much faster on larger inputs now.
  * Support for Windows Phone/UWP was deprecated starting in 2.5. This
    deprecation has been reversed as it seems UWP is still actively used. (GH
    [#1586] #1587)
  * Support for Visual C++ 2013 is deprecated, and will be removed in Jan 2019.
  * Added support for GCC?s ?sysroot option to configure.py for
    cross-compiling.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1533038400">- Fix version in baselibs.conf</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1547121600">- Update to Botan 2.9
  * Bump SONAME
  * CVE-2018-20187 Address a side channel during ECC key generation, which used an
    unblinded Montgomery ladder. As a result, a timing attack can reveal
    information about the high bits of the secret key.
  * Fix bugs in TLS which caused negotiation failures when the client used an
    unknown signature algorithm or version (GH #1711 #1709 #1708)
  * Fix bug affecting GCM, EAX and ChaCha20Poly1305 where if the associated data
    was set after starting a message, the new AD was not reflected in the produced
    tag. Now with these modes setting an AD after beginning a message throws an
    exception.
  * Use a smaller sieve which improves performance of prime generation.
  * Fixed a bug that caused ChaCha to produce incorrect output after encrypting 256
    GB. (GH #1728)
  * Add NEON and AltiVec implementations of ChaCha (GH #1719 #1728 #1729)
  * Optimize AVX2 ChaCha (GH #1730)
  * Many more operations in BigInt, ECC and RSA code paths are either fully const
    time or avoid problematic branches that could potentially be exploited in a
    side channel attack. (GH #1738 #1750 #1754 #1755 #1757 #1758 #1759 #1762 #1765
    [#1770] #1773 #1774 #1779 #1780 #1794 #1795 #1796 #1797)
  * Several optimizations for BigInt and ECC, improving ECDSA performance by as
    much as 30%. (GH #1734 #1737 #1777 #1750 #1737 #1788)
  * Support recovering an ECDSA public key from a message/signature pair (GH #664
    [#1784])
  * Add base58 encoding/decoding functions (GH #1783)
  * In the command line interface, add support for reading passphrases from the
    terminal with echo disabled (GH #1756)
  * Add CT::Mask type to simplify const-time programming (GH #1751)
  * Add new configure options --disable-bmi2, --disable-rdrand, and
  - -disable-rdseed to prevent use of those instruction sets.
  * Add error_type and error_code functions to Exception type (GH #1744)
  * Now on POSIX systems posix_memalign is used instead of mmap for allocating the
    page-locked memory pool. This avoids issues with fork. (GH #602 #1798)
  * When available, use RDRAND to generate the additional data in
    Stateful_RNG::randomize_with_ts_input
  * Use vzeroall/vzeroupper intrinsics to avoid AVX2/SSE transition penalties.
  * Support for Visual C++ 2013 has been removed (GH #1557 #1697)
  * Resolve a memory leak when verifying ECDSA signatures with versions of OpenSSL
    before 1.1.0 (GH #1698)
  * Resolve a memory leak using ECDH via OpenSSL (GH #1767)
  * Fix an error in XTS which prohibited encrypting values which were exactly the
    same length as the underlying block size. Messages of this size are allowed by
    the standard and other XTS implementations. (GH #1706)
  * Resolve a bug in TSS which resulted in it using an incorrect length field in
    the shares. Now the correct length is encoded, but either correct or buggy
    lengths are accepted when decoding. (GH #1722)
  * Correct a bug when reducing a negative BigInt modulo a small power of 2. (GH
    [#1755])
  * Add CLI utils for threshold secret splitting. (GH #1722)
  * Fix a bug introduced in 2.8.0 that caused compilation failure if using a single
    amalgamation file with AVX2 enabled. (GH #1700)
  * Add an explicit OS target for Emscripten and improve support for it. (GH #1702)
  * Fix small issues when building for QNX
  * Switch the Travis CI build to using Ubuntu 16.04 (GH #1767)
  * Add options to configure.py to disable generation of pkg-config file, and (for
    systems where pkg-config support defaults to off, like Windows), to enable
    generating it. (GH #1268)
  * Modify configure.py to accept empty lists or trailing/extra commas. (GH #1705)
- Update to Botan 2.8
  * Add support for using Apple CommonCrypto library for hashing (GH #1667),
    cipher modes (GH #1674) and block ciphers (GH #1673).
  * Support for negotiating TLS versions 1.0 and 1.1 is disabled in the default
    TLS policy. In addition, support for negotiating TLS ciphersuites using CBC
    or CCM mode is disabled by default. Applications which need to interop with
    old peers must enable these in their TLS policy object. (GH #1651)
  * During primality testing, use a Lucas test in addition to Miller-Rabin. It
    is possible to construct a composite integer which passes n Miller-Rabin
    tests with probability (1/4)^n. So for a incautious verifier using a small
    number of tests (under 16 or so) it is possible if unlikely they would
    accept such a composite as prime. Adding a Lucas test precludes such an
    attack. (GH #1636)
  * Add XChaCha and XChaCha20Poly1305 (GH #1640)
  * Add AVX2 implementations of ChaCha (GH #1662) and Serpent (GH #1660)
  * Add a new password hashing interface in pwdhash.h (GH #1670)
  * C binding improvements. Added functions to get name and supported
    keylengths of cipher, hash and MAC objects, support for FE1 format
    preserving encryption (GH #1625 #1646), functions to load and save RSA keys
    in PKCS #1 format (GH #1621), HOTP and TOTP algorithms, scrypt, certificate
    verification (GH #1647), functions to get the output length of public key
    operations (GH #1642), and functions for loading and serializing X25519
    keys (GH #1681)
  * Support for building with BOTAN_MP_WORD_BITS set to 8 or 16 has been removed.
  * Previously SM2 had two distinct key types, one for signatures and another
    for encryption. They have now been merged into a single key type since in
    practice it seems the same key is at times used for both operations. (GH
    [#1637])
  * The Cipher_Mode class now derives from SymmetricAlgorithm (GH #1639)
  * Add support for using the ARMv8 instructions for SM4 encryption (GH #1622)
  * The entropy source using SecRandomCopyBytes has been removed as it was
    redundant with other entropy sources (GH #1668)
  * The Python module has much better error checking and reporting, and offers
    new functionality such as scrypt, MPI and FPE. (GH #1643 #1646)
  * Fixed a bug that caused CCM to fail with an exception when used with L=8 (GH #1631 #1632)
  * The default bcrypt work factor has been increased from 10 to 12.
  * The default algorithm used in passhash9 has changed from SHA-256 to
    SHA-512, and the default work factor increased from 10 to 15.
  * In ECC private keys, include the public key data for compatibility with GnuTLS (GH #1634 #1635)
  * Add support for using Linux getrandom syscall to access the system PRNG.
    This is disabled by default, use --with-os-feature=getrandom to enable.
  * It is now possible to encrypt private keys using SIV mode.
  * The FFI function botan_privkey_load now ignores its rng argument.
  * Resolve a problem when building under Visual C++ 15.8 (GH #1624)
  * Fix a bug in XSalsa20 (192-bit Salsa nonces) where if set_iv was called
    twice without calling set_key, the resulting encryption was incorrect. (GH
    [#1640])
  * Handle an error seen when verifying invalid ECDSA signatures using LibreSSL
    on non x86-64 platforms (GH #1627 #1628)
  * Fix bugs in PKCS7 and X9.23 CBC padding schemes, which would ignore the
    first byte in the event the padding took up the entire block. (GH #1690)
  * Correct bugs which would cause CFB, OCB, and GCM modes to crash when they
    were used in an unkeyed state. (GH #1639)
  * Optimizations for SM4 and Poly1305
  * Avoid a cache side channel in the AES key schedule
  * Add pk_encrypt and pk_decrypt CLI operations
  * Now asn1print CLI defaults to printing context-specific fields.
  * Use codec_base for Base64, which matches how Base32 is implemented (GH #1597)
  * The cast module has been split up into cast128 and cast256 (GH #1685)
  * When building under Visual C++ 2013, the user must acknowledge the upcoming
    removal of support using the configure.py flag --ack-vc2013-deprecated (GH
    [#1557])</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1554206400">- Update to Botan 2.10
  * Bump SONAME
  * Warning: XMSS currently implements draft-06 which is not compatible with
    the final RFC 8391 specification. A PR is open to fix this, however it will
    break all current uses of XMSS. If you are currently using XMSS please
    comment at https://github.com/randombit/botan/pull/1858. Otherwise the PR
    will be merged and support for draft-06 will be removed starting in 2.11.
  * Added a new certificate store implementation that can access the MacOS
    keychain certificate store. (GH #1830)
  * Redesigned Memory_Pool class, which services allocations out of a set of
    pages locked into memory (using mlock/VirtualLock). It is now faster and
    with improved exploit mitigations. (GH #1800)
  * Add BMI2 implementations of SHA-512 and SHA-3 which improve performance by
    25-35% on common CPUs. (GH #1815)
  * Unroll SHA-3 computation improving performance by 10-12% (GH #1838)
  * Add a Thread_Pool class. It is now possible to run the tests in multiple
    threads with --test-threads=N flag to select the number of threads to use.
    Use --test-threads=0 to run with as many CPU cores as are available on the
    current system. The default remains single threaded. (GH #1819)
  * XMSS signatures now uses a global thread pool instead of spawning new
    threads for each usage. This improves signature generation performance by
    between 10% and 60% depending on architecture and core count. (GH #1864)
  * Some functions related to encoding and decoding BigInts have been
    deprecated. (GH #1817)
  * Binary encoding and decoding of BigInts has been optimized by performing
    word-size operations when possible. (GH #1817)
  * Rename the exception Integrity_Failure to Invalid_Authentication_Tag to
    make its meaning and usage more clear. The old name remains as a typedef.
    (GH #1816)
  * Support for using Boost filesystem and MSVC?s std::filesystem have been
    removed, since already POSIX and Win32 versions had to be maintained for
    portability. (GH #1814)
  * Newly generated McEliece and XMSS keys now default to being encrypted using
    SIV mode, support for which was added in 2.8.0. Previously GCM was used by
    default for these algorithms.
  * Use arc4random on Android systems (GH #1851)
  * Fix the encoding of PGP-S2K iteration counts (GH #1853 #1854)
  * Add a facility for sandboxing the command line util. Currently FreeBSD
    (Capsicum) and OpenBSD (pledge) sandboxes are supported. (GH #1808)
  * Use if constexpr when available.
  * Disable building shared libs on iOS as it was broken and it is not clear
    shared libraries are ever useful on iOS (GH #1865)
  * Renamed the darwin build target to macos. This should not cause any
    user-visible change. (GH #1866)
  * Add support for using sccache to cache the Windows CI build (GH #1807)
  * Add --extra-cxxflags option which allows adding compilation flags without
    overriding the default set. (GH #1826)
  * Add --format= option to the hash cli which allows formatting the output as
    base64 or base58, default output remains hex.
  * Add base58_enc and base58_dec cli utils for base58 encoding/decoding. (GH #1848)
  * Enable getentropy by default on macOS (GH #1862)
  * Avoid using -momit-leaf-frame-pointer flags, since -fomit-frame-pointer is
    already the default with recent versions of GCC.
  * Fix XLC sanitizer flags.
  * Rename Blake2b class to BLAKE2b to match the official name. There is a typedef for compat.
  * Fix a bug where loading a raw Ed25519_PublicKey of incorrect length would
    lead to a crash. (GH #1850)
  * Fix a bug that caused compilation problems using CryptoNG PRNG. (GH #1832)
  * Extended SHAKE-128 cipher to support any key between 1 and 160 bytes,
    instead of only multiples of 8 bytes.
  * Minor HMAC optimizations.
  * Build fixes for GNU/Hurd.
  * Fix a bug that prevented generating or verifying Ed25519 signatures in the
    CLI (GH #1828 #1829)
  * Fix a compilation error when building the amalgamation outside of the
    original source directory when AVX2 was enabled. (GH #1812)
  * Fix a crash when creating the amalgamation if a header file was edited on
    Windows but then the amalgamation was built on Linux (GH #1763)</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1586347200">- Update to Botan 2.14:
  * Add support for using POWER8+ VPSUMD instruction to accelerate GCM (GH #2247)
  * Optimize the vector permute AES implementation, especially improving
    performance on ARMv7, Aarch64, and POWER. (GH #2243)
  * Use a new algorithm for modular inversions which is both faster
    and more resistant to side channel attacks. (GH #2287 #2296 #2301)
  * Address an issue in CBC padding which would leak the length of the plaintext
    which was being padded. Unpadding during decryption was not affected.
  * Optimize NIST prime field reductions, improving ECDSA by 3-9% (GH #2295)
  * Increase the size of the ECC blinding mask and scale it based on the
    size of the group order. (GH #880 #893 #2308)
  * Add server side support for the TLS asio wrapper. (GH #2229)
  * Add support for using Windows certificate store on MinGW (GH #2280)
  * Add a CLI utility cpu_clock which estimates the speed of the processor cycle counter.
  * Add Roughtime client (GH #2143 #1842)
  * Add support for XMSS X.509 certificates (GH #2172)
  * Add support for X.509 CRLs in FFI layer and Python wrapper (GH #2213)
  * Add AVX2 implementation of SHACAL2 (GH #2196)
  * Support more functionality for X.509 in the Python API (GH #2165)
  * Add generic CPU target useful when building for some new or unusual platform.
  * Disable MD5 in BSI or NIST modes (GH #2188)
  * Many currently public headers are being deprecated. If any such header is included by
    an application, a warning is issued at compile time.
    Headers issuing this warning will be made internal in a future major release.
  * RSA signature performance improvements (GH #2068 #2070)
  * Performance improvements for GCM (GH #2024 #2099 #2119), OCB (#2122), XTS (#2123) and
    ChaCha20Poly1305 (GH #2117), especially for small messages.
  * Add support for constant time AES using NEON and AltiVec (GH #2093 #2095 #2100)
  * Improve performance of POWER8 AES instructions (GH #2096)
  * Add support for the POWER9 hardware random number generator (GH #2026)
  * Add support for 64-bit version of RDRAND, doubling performance on x86-64 (GH #934 #2022)
  * In DTLS server, support a client crashing and then reconnecting from the same
    source port, as described in RFC 6347 sec 4.2.8 (GH #2029)
  * Optimize DTLS MTU splitting to split precisely to the set MTU (GH #2042)
  * Add support for the TLS v1.3 downgrade indicator. (GH #2027)
  * Add Argon2 PBKDF and password hash (GH #459 #1981 #1987)
  * Add Bcrypt-PBKDF (GH #1990)
  * Add server side support for issuing DTLS HelloVerifyRequest messages (GH #1999)
  * Add support for the TLS v1.3 supported_versions extension. (GH #1976)
  * Add Ed25519ph compatible with RFC 8032 (GH #1699 #2000)
  * Add support for OCSP stapling on server side. (GH #1703 #1967)
  * Add a boost::asio TLS stream compatible with boost::asio::ssl. (GH #1839 #1927 #1992)
  * Add a certificate store for Linux/Unix systems. (GH #1885 #1936)
  * Various Fixes</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597579200">- update to 2.15:
  Fix a bug where the name constraint extension did not constrain the alternative
  DN field which can be included in a subject alternative name. This would allow
  a corrupted sub-CA which was otherwise constrained by a name constraint to
  issue a certificate with a prohibited DN.
  Fix a bug in the TLS server during client authentication where where if a
  (disabled by default) static RSA ciphersuite was selected, then no certificate
  request would be sent. This would have an equivalent effect to a client which
  simply replied with an empty Certificate message. (GH #2367)
  Replace the T-Tables implementation of AES with a 32-bit bitsliced version. As
  a result AES is now constant time on all processors. (GH #2346 #2348 #2353
  [#2329] #2355)
  In TLS, enforce that the key usage given in the server certificate allows the
  operation being performed in the ciphersuite. (GH #2367)
  In X.509 certificates, verify that the algorithm parameters are the expected
  NULL or empty. (GH #2367)
  Change the HMAC key schedule to attempt to reduce the information leaked from
  the key schedule with regards to the length of the key, as this is at times (as
  for example in PBKDF2) sensitive information. (GH #2362)
  Add Processor_RNG which wraps RDRAND or the POWER DARN RNG instructions. The
  previous RDRAND_RNG interface is deprecated. (GH #2352)
  The documentation claimed that mlocked pages were created with a guard page
  both before and after. However only a trailing guard page was used. Add a
  leading guard page. (GH #2334)
  Add support for generating and verifying DER-encoded ECDSA signatures in the C
  and Python interfaces. (GH #2357 #2356)
  Workaround a bug in GCC?s UbSan which triggered on a code sequence in XMSS (GH
  [#2322])
  When building documentation using Sphinx avoid parallel builds with version 3.0
  due to a bug in that version (GH #2326 #2324)
  Fix a memory leak in the CommonCrypto block cipher calls (GH #2371)
  Fix a flaky test that would occasionally fail when running the tests with a
  large number of threads. (GH #2325 #2197)
  Additional algorithms are now deprecated: XTEA, GOST, and Tiger. They will be
  removed in a future major release.</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1603800000">- Update to 2.16.0:
  * Now userspace PRNG objects (such as AutoSeeded_RNG and HMAC_DRBG)
    use an internal lock, which allows safe concurrent use. This
    however is purely a precaution in case of accidental sharing of
    such RNG objects; for performance reasons it is always preferable
    to use a RNG per thread if a userspace RNG is needed.
  * DL_Group and EC_Group objects now track if they were created
    from a known trusted group (such as P-256 or an IPsec DH
    parameter). If so, then verification tests can be relaxed, as
    compared to parameters which may have been maliciously
    constructed in order to pass primality checks.
  * RandomNumberGenerator::add_entropy_T assumed its input was a POD
    type but did not verify this.
  * Support OCSP responders that live on a non-standard port.
  * Add support for Solaris sandbox.
  * Support suffixes on release numbers for alpha/beta releases.
  * Fix a bug in EAX which allowed requesting a 0 length tag, which
    had the effect of using a full length tag. Instead omit the
    length field, or request the full tag length explicitly.
  * Fix a memory leak in GCM where if passed an unsuitable block
    cipher (eg not 128 bit) it would throw an exception and leak
    the cipher object.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1604750400">- Botan 2.17.1:
  * Fix bugs in ECDSA signature generation and verifications under
    specific circumstances
  * developer visible changes, including deprecation with warnings
  * optimization in the non-hardware assisted AES key generation
  * Add more detection logic for AVX-512 features
  * Fix a bug parsing deeply nested cipher names
  * Prevent requesting DER encoding of signatures when the
    algorithm did not support it</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1605268800">- Botan 2.17.2:
  * Fix build problem on ppc64
  * Resolve an issue in the modular square root algorithm</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1608724800">- Botan 2.17.3:
  * Harden against side-channels from decoding secret values by
    changing the base64, base58, base32, and hex encoding and
    decoding opearations to run in constant time</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1618574400">- Botan 2.18.0
  * Add support for implementing custom RNG objects through the FFI
    interface
  * Improve safegcd bounds, improving runtime performance
  * Reject non-TLS messages as quickly as possible without waiting
    for a full record.
  * Fixes for TLS::Stream::async_shutdown
- Removed unneeded GNU MP build requirement, support was dropped
  with version 1.11.10
- Enabled check target, verify integrity of build library</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1620648000">- Botan 2.18.1:
  * Fix a build regression in 2.18.0 which caused linker flags
    which contain -l within them (such as -fuse-linker-plugin)
    to be misinterpreted
  * Fix a bug which caused decoding a certificate which contained
    more than one name in a single RDN
  * Fix a bug which caused OID lookup failures when run in a locale
    which uses thousands separators (pt_BR was reported as having
    this issue)
  * DNS names in name constraints were compared with case
    sensitivity, which could cause valid certificates to be
    rejected
  * X.509 name constraint extensions were rejected if non-critical.
    RFC 5280 requires conforming CAs issue such extensions as
    critical, but not all certificates are compliant, and all other
    known implementations do not require this
  * X.509 name constraints were incorrectly applied to the
    certificate which included the constraint
- build with lzma compression support
- build with SQLite support
- build with TPM support
- fix SLE 12 build</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1637755200">- update to 2.18.2:
  * Avoid using short exponents when encrypting in ElGamal, as some PGP
    implementations generate keys with parameters that are weak when
    short exponents are used CVE-2021-40529 boo#1190244
  * Fix a low risk OAEP decryption side channel
  * Work around a miscompilation of SHA-3 caused by a bug in Clang 12
    and XCode 13
  * Remove support in OpenSSL provider for algorithms which are
    disabled by default in OpenSSL 3.0
  * Add CI based on GitHub actions to replace Travis CI
  * Fix the online OCSP test, as the certificate involved had expired.
  * Fix some test failures induced by the expiration of the trust root
    "DST Root CA X3"</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1668686400">- Fixed [CVE-2022-43705,bsc#1205509]
  * Added Botan-CVE-2022-43705.patch
  * Added Botan-CVE-2022-43705-certs.tgz
  * validate that an embedded certificate was issued by the end-entity
    issuing certificate authority when checking OCSP responses.</changelog>
</package>
<package pkgid="7d2809073ebf97de4f6fdeceb0503da12483c3db5f65535fd9fecd8c329f0ded" name="Botan" arch="x86_64">
  <version epoch="0" ver="2.18.2" rel="bp154.2.3.1"/>
  <changelog author="adam.majer@suse.de" date="1518436800">- Don't drop -fstack-clash-protection for openSUSE 42.3 - we just
  need the Update repository present.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1518609600">- change group of libbotan-%{version_suffix} to 'System/Libraries' as
  requested on review</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1518782400">- drop explicit package requirements
- split binary package and documentation from dynamic library package
  and make documentation package noarch
- merge back Botan2 package to Botan with changelog history
- drop Botan patches
    aarch64-support.patch - doesn't seem to be required anymore
    Botan-fix_install_paths.patch - doesn't seem to be required
    no-cpuid-header.patch - SLE11 not target anymore
    Botan-fix_pkgconfig.patch - this seem to be wrong
    Botan-no-buildtime.patch - not needed anymore
    dont-set-mach-value.diff - doesn't apply, unclear and undocumented why it is there
    Botan-inttypes.patch - not required
    Botan-ull_constants.patch.bz2 - no reason anymore</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1522756800">- Update to Botan 2.5
  * Fix error in certificate wildcard matching (CVE-2018-9127), where a
    wildcard cert for b*.example.com would be accepted as a match for any host
    with name *b*.example.com (GH #1519)
  * Add support for RSA-PSS signatures in TLS (GH #1285)
  * Ed25519 certificates are now supported (GH #1501)
  * Many optimizations in ECC operations. ECDSA signatures are 8-10 times
    faster. ECDSA verification is about twice as fast. ECDH key agreement is
    3-4 times faster. (GH #1457 #1478)
  * Implement product scanning Montgomery reduction, which improves
    Diffie-Hellman and RSA performance by 10 to 20% on most platforms. (GH
    [#1472])
  * DSA signing and verification performance has improved by 30-50%.
  * Add a new Credentials_Manager callback that specifies which CAs the server
    has indicated it trusts (GH #1395 fixing #1261)
  * Add new TLS::Callbacks methods that allow creating or removing extensions,
    as well as examining extensions sent by the peer (GH #1394 #1186)
  * Add new TLS::Callbacks methods that allow an application to negotiate use
    of custom elliptic curves. (GH #1448)
  * Add ability to create custom elliptic curves (GH #1441 #1444)
  * Add support for POWER8 AES instructions (GH #1459 #1393 #1206)
  * Fix DSA/ECDSA handling of hashes longer than the group order (GH #1502
    [#986])
  * The default encoding of ECC public keys has changed from compressed to
    uncompressed point representation. This improves compatability with some
    common software packages including Golang?s standard library. (GH #1480
    [#1483])
  * It is now possible to create DNs with custom components. (GH #1490 #1492)
  * It is now possible to specify the serial number of created certificates,
    instead of using the default 128-bit random integer. (GH #1489 #1491)
  * Change DL_Group and EC_Group to store their data as shared_ptr for fast
    copying. Also both classes precompute additional useful values (eg for
    modular reductions). (GH #1435 #1454)
  * Make it possible for PKCS10 requests to include custom extensions. This
    also makes it possible to use muliple SubjectAlternativeNames of a single
    type in a request, which was previously not possible. (GH #1429 #1428)
  * Add new optimized interface for FE1 format preserving encryption. By
    caching a number of values computed in the course of the FPE calculation,
    it provides a 6-7x speedup versus the old API. (GH #1469)
  * Add DSA and ElGamal keygen functions to FFI (#1426)
  * Add Pipe::prepend_filter to replace Pipe::prepend (GH #1402)
  * Fix a memory leak in the OpenSSL block cipher integration, introduced in
  * 2.2.0
  * Use an improved algorithm for generating safe primes which is several tens
    of times faster. Also, fix a bug in the prime sieving algorithm which
    caused standard prime generation (like for RSA keys) to be slower than
    necessary. (GH #1413 #1411)
  * Correct the return value of PK_Encryptor::maximum_input_size which reported
    a much too small value (GH #1410)
  * Remove use of CPU specific optimization flags, instead the user should set
    these via CXXFLAGS if desired. (GH #1392)
  * Resolve an issue that would cause a crash in the tests if they were run on
    a machine without SSE2/NEON/VMX instructions. (GH #1495)
  * The Python module now tries to load DLLs from a list of names and uses the
    first one which successfully loads and indicates it supports the desired
    API level. (GH #1497)
  * Various minor optimizations for SHA-3 (GH #1433 #1434)
  * The output of botan --help has been improved (GH #1387)
  * Add --der-format flag to command line utils, making it possible verify
    DSA/ECDSA signatures generated by OpenSSL command line (GH #1409)
  * Add support for --library-suffix option to configure.py (GH #1405 #1404)
  * Use feature flags to enable/disable system specific code (GH #1378)
  * Add --msvc-runtime option to allow using static runtime (GH #1499 #210)
  * Add ?enable-sanitizers= option to allow specifying which sanitizers to
    enable. The existing --with-sanitizers option just enables some default set
    which is known to work with the minimum required compiler versions.
  * Use either rst2man or rst2man.py for generating man page as distributions
    differ on where this program is installed (GH #1516)
  * The threefish module has been renamed threefish_512 since that is the
    algorithm it provides. (GH #1477)
  * The Perl XS based wrapper has been removed, as it was unmaintained and
    broken. (GH #1412)
  * The sqlite3 encryption patch under contrib has been removed. It is still
    maintained by the original author at
    https://github.com/OlivierJG/botansqlite3</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1523361600">- Update to Botan 2.6
  * CVE-2018-9860 Fix a bug decrypting TLS CBC ciphertexts which could for a
    malformed ciphertext cause the decryptor to read and HMAC an additional 64K
    bytes of data which is not part of the record. This could cause a crash if
    the read went into unmapped memory. No information leak or out of bounds
    write occurs.
  * Add support for OAEP labels (GH #1508)
  * RSA signing is about 15% faster (GH #1523) and RSA verification is about 50% faster.
  * Add exponent blinding to RSA (GH #1523)
  * Add Cipher_Mode::create and AEAD_Mode::create (GH #1527)
  * Fix bug in TLS server introduced in 2.5 which caused connection to fail if
    the client offered any signature algorithm not known to the server (for
    example RSA/SHA-224).
  * Fix a bug in inline asm that would with GCC 7.3 cause incorrect
    computations and an infinite loop during the tests. (GH #1524 #1529)</changelog>
  <changelog author="kasimir_@outlook.de" date="1523534400">- fixed to build on armv6 and armv7</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1531224000">- Update to Botan 2.7
  * CVE-2018-12435 Avoid a side channel in ECDSA signature generation (GH
    [#1604])
  * Avoid a side channel in RSA key generation due to use of a non-constant
    time gcd algorithm. (GH #1542 #1556)
  * Optimize prime generation, especially improving RSA key generation. (GH
    [#1542])
  * Make Karatsuba multiplication, Montgomery field operations, Barrett
    reduction and Montgomery exponentiation const time (GH #1540 #1606 #1609
    [#1610])
  * Optimizations for elliptic curve operations especially improving reductions
    and inversions modulo NIST primes (GH #1534 #1538 #1545 #1546 #1547 #1550)
  * Add 24 word wide Comba multiplication, improving 3072-bit RSA and DH by
    ~25%. (GH #1564)
  * Unroll Montgomery reduction for specific sizes (GH #1603)
  * Improved performance of signature verification in ECGDSA, ECKCDSA, SM2 and
    GOST by 10-15%.
  * XMSS optimizations (GH #1583 #1585)
  * Fix an error that meant XMSS would only sign half as many signatures as is
    allowed (GH #1582)
  * Add support for base32 encoding/decoding (GH #1541)
  * Add BMI2 optimized version of SHA-256, 40% faster on Skylake (GH #1584)
  * Allow the year to be up to 2200 in ASN.1 time objects. Previously this was
    limited to 2100. (GH #1536)
  * Add support for Scrypt password hashing (GH #1570)
  * Add support for using Scrypt for private key encryption (GH #1574)
  * Optimizations for DES/3DES, approx 50% faster when used in certain modes
    such as CBC decrypt or CTR.
  * XMSS signature verification did not check that the signature was of the
    expected length which could lead to a crash. (GH #1537)
  * The bcrypt variants 2b and 2y are now supported.
  * Support for 192-bit Suite B TLS profile is now implemented, as the 128-bit
    Suite B is since 2015 not allowed anymore.
  * Previously botan allowed GCM to be used with an empty nonce, which is not
    allowed by the specification. Now such nonces are rejected.
  * Avoid problems on Windows when compiling in Unicode mode (GH #1615 #1616)
  * Previously for ASN.1 encoded signatures (eg ECDSA) Botan would accept any
    valid BER encoding. Now only the single valid DER encoding is accepted.
  * Correct an error that could in rare cases cause an internal error exception
    when doing computations with the P-224 curve.
  * Optimizations to reduce allocations/copies during DER encoding and BER
    decoding (GH #1571 #1572 #1600)
  * Botan generates X.509 subject key IDs by hashing the public key with
    whatever hash function is being used to sign the certificate. However
    especially for SHA-512 this caused SKIDs that were far longer than
    necessary. Now all SKIDs are truncated to 192 bits.
  * In the test suite use mkstemp to create temporary files instead of creating
    them in the current working directory. (GH #1533 #1530)
  * It is now possible to safely override CXX when invoking make in addition to
    when configure.py is run. (GH #1579)
  * OIDs for Camellia and SM4 in CBC and GCM mode are now defined, making it
    possible to use this algorithms for private key encryption.
  * Avoid creating symlinks to the shared object on OpenBSD (#1535)
  * The factor command runs much faster on larger inputs now.
  * Support for Windows Phone/UWP was deprecated starting in 2.5. This
    deprecation has been reversed as it seems UWP is still actively used. (GH
    [#1586] #1587)
  * Support for Visual C++ 2013 is deprecated, and will be removed in Jan 2019.
  * Added support for GCC?s ?sysroot option to configure.py for
    cross-compiling.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1533038400">- Fix version in baselibs.conf</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1547121600">- Update to Botan 2.9
  * Bump SONAME
  * CVE-2018-20187 Address a side channel during ECC key generation, which used an
    unblinded Montgomery ladder. As a result, a timing attack can reveal
    information about the high bits of the secret key.
  * Fix bugs in TLS which caused negotiation failures when the client used an
    unknown signature algorithm or version (GH #1711 #1709 #1708)
  * Fix bug affecting GCM, EAX and ChaCha20Poly1305 where if the associated data
    was set after starting a message, the new AD was not reflected in the produced
    tag. Now with these modes setting an AD after beginning a message throws an
    exception.
  * Use a smaller sieve which improves performance of prime generation.
  * Fixed a bug that caused ChaCha to produce incorrect output after encrypting 256
    GB. (GH #1728)
  * Add NEON and AltiVec implementations of ChaCha (GH #1719 #1728 #1729)
  * Optimize AVX2 ChaCha (GH #1730)
  * Many more operations in BigInt, ECC and RSA code paths are either fully const
    time or avoid problematic branches that could potentially be exploited in a
    side channel attack. (GH #1738 #1750 #1754 #1755 #1757 #1758 #1759 #1762 #1765
    [#1770] #1773 #1774 #1779 #1780 #1794 #1795 #1796 #1797)
  * Several optimizations for BigInt and ECC, improving ECDSA performance by as
    much as 30%. (GH #1734 #1737 #1777 #1750 #1737 #1788)
  * Support recovering an ECDSA public key from a message/signature pair (GH #664
    [#1784])
  * Add base58 encoding/decoding functions (GH #1783)
  * In the command line interface, add support for reading passphrases from the
    terminal with echo disabled (GH #1756)
  * Add CT::Mask type to simplify const-time programming (GH #1751)
  * Add new configure options --disable-bmi2, --disable-rdrand, and
  - -disable-rdseed to prevent use of those instruction sets.
  * Add error_type and error_code functions to Exception type (GH #1744)
  * Now on POSIX systems posix_memalign is used instead of mmap for allocating the
    page-locked memory pool. This avoids issues with fork. (GH #602 #1798)
  * When available, use RDRAND to generate the additional data in
    Stateful_RNG::randomize_with_ts_input
  * Use vzeroall/vzeroupper intrinsics to avoid AVX2/SSE transition penalties.
  * Support for Visual C++ 2013 has been removed (GH #1557 #1697)
  * Resolve a memory leak when verifying ECDSA signatures with versions of OpenSSL
    before 1.1.0 (GH #1698)
  * Resolve a memory leak using ECDH via OpenSSL (GH #1767)
  * Fix an error in XTS which prohibited encrypting values which were exactly the
    same length as the underlying block size. Messages of this size are allowed by
    the standard and other XTS implementations. (GH #1706)
  * Resolve a bug in TSS which resulted in it using an incorrect length field in
    the shares. Now the correct length is encoded, but either correct or buggy
    lengths are accepted when decoding. (GH #1722)
  * Correct a bug when reducing a negative BigInt modulo a small power of 2. (GH
    [#1755])
  * Add CLI utils for threshold secret splitting. (GH #1722)
  * Fix a bug introduced in 2.8.0 that caused compilation failure if using a single
    amalgamation file with AVX2 enabled. (GH #1700)
  * Add an explicit OS target for Emscripten and improve support for it. (GH #1702)
  * Fix small issues when building for QNX
  * Switch the Travis CI build to using Ubuntu 16.04 (GH #1767)
  * Add options to configure.py to disable generation of pkg-config file, and (for
    systems where pkg-config support defaults to off, like Windows), to enable
    generating it. (GH #1268)
  * Modify configure.py to accept empty lists or trailing/extra commas. (GH #1705)
- Update to Botan 2.8
  * Add support for using Apple CommonCrypto library for hashing (GH #1667),
    cipher modes (GH #1674) and block ciphers (GH #1673).
  * Support for negotiating TLS versions 1.0 and 1.1 is disabled in the default
    TLS policy. In addition, support for negotiating TLS ciphersuites using CBC
    or CCM mode is disabled by default. Applications which need to interop with
    old peers must enable these in their TLS policy object. (GH #1651)
  * During primality testing, use a Lucas test in addition to Miller-Rabin. It
    is possible to construct a composite integer which passes n Miller-Rabin
    tests with probability (1/4)^n. So for a incautious verifier using a small
    number of tests (under 16 or so) it is possible if unlikely they would
    accept such a composite as prime. Adding a Lucas test precludes such an
    attack. (GH #1636)
  * Add XChaCha and XChaCha20Poly1305 (GH #1640)
  * Add AVX2 implementations of ChaCha (GH #1662) and Serpent (GH #1660)
  * Add a new password hashing interface in pwdhash.h (GH #1670)
  * C binding improvements. Added functions to get name and supported
    keylengths of cipher, hash and MAC objects, support for FE1 format
    preserving encryption (GH #1625 #1646), functions to load and save RSA keys
    in PKCS #1 format (GH #1621), HOTP and TOTP algorithms, scrypt, certificate
    verification (GH #1647), functions to get the output length of public key
    operations (GH #1642), and functions for loading and serializing X25519
    keys (GH #1681)
  * Support for building with BOTAN_MP_WORD_BITS set to 8 or 16 has been removed.
  * Previously SM2 had two distinct key types, one for signatures and another
    for encryption. They have now been merged into a single key type since in
    practice it seems the same key is at times used for both operations. (GH
    [#1637])
  * The Cipher_Mode class now derives from SymmetricAlgorithm (GH #1639)
  * Add support for using the ARMv8 instructions for SM4 encryption (GH #1622)
  * The entropy source using SecRandomCopyBytes has been removed as it was
    redundant with other entropy sources (GH #1668)
  * The Python module has much better error checking and reporting, and offers
    new functionality such as scrypt, MPI and FPE. (GH #1643 #1646)
  * Fixed a bug that caused CCM to fail with an exception when used with L=8 (GH #1631 #1632)
  * The default bcrypt work factor has been increased from 10 to 12.
  * The default algorithm used in passhash9 has changed from SHA-256 to
    SHA-512, and the default work factor increased from 10 to 15.
  * In ECC private keys, include the public key data for compatibility with GnuTLS (GH #1634 #1635)
  * Add support for using Linux getrandom syscall to access the system PRNG.
    This is disabled by default, use --with-os-feature=getrandom to enable.
  * It is now possible to encrypt private keys using SIV mode.
  * The FFI function botan_privkey_load now ignores its rng argument.
  * Resolve a problem when building under Visual C++ 15.8 (GH #1624)
  * Fix a bug in XSalsa20 (192-bit Salsa nonces) where if set_iv was called
    twice without calling set_key, the resulting encryption was incorrect. (GH
    [#1640])
  * Handle an error seen when verifying invalid ECDSA signatures using LibreSSL
    on non x86-64 platforms (GH #1627 #1628)
  * Fix bugs in PKCS7 and X9.23 CBC padding schemes, which would ignore the
    first byte in the event the padding took up the entire block. (GH #1690)
  * Correct bugs which would cause CFB, OCB, and GCM modes to crash when they
    were used in an unkeyed state. (GH #1639)
  * Optimizations for SM4 and Poly1305
  * Avoid a cache side channel in the AES key schedule
  * Add pk_encrypt and pk_decrypt CLI operations
  * Now asn1print CLI defaults to printing context-specific fields.
  * Use codec_base for Base64, which matches how Base32 is implemented (GH #1597)
  * The cast module has been split up into cast128 and cast256 (GH #1685)
  * When building under Visual C++ 2013, the user must acknowledge the upcoming
    removal of support using the configure.py flag --ack-vc2013-deprecated (GH
    [#1557])</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1554206400">- Update to Botan 2.10
  * Bump SONAME
  * Warning: XMSS currently implements draft-06 which is not compatible with
    the final RFC 8391 specification. A PR is open to fix this, however it will
    break all current uses of XMSS. If you are currently using XMSS please
    comment at https://github.com/randombit/botan/pull/1858. Otherwise the PR
    will be merged and support for draft-06 will be removed starting in 2.11.
  * Added a new certificate store implementation that can access the MacOS
    keychain certificate store. (GH #1830)
  * Redesigned Memory_Pool class, which services allocations out of a set of
    pages locked into memory (using mlock/VirtualLock). It is now faster and
    with improved exploit mitigations. (GH #1800)
  * Add BMI2 implementations of SHA-512 and SHA-3 which improve performance by
    25-35% on common CPUs. (GH #1815)
  * Unroll SHA-3 computation improving performance by 10-12% (GH #1838)
  * Add a Thread_Pool class. It is now possible to run the tests in multiple
    threads with --test-threads=N flag to select the number of threads to use.
    Use --test-threads=0 to run with as many CPU cores as are available on the
    current system. The default remains single threaded. (GH #1819)
  * XMSS signatures now uses a global thread pool instead of spawning new
    threads for each usage. This improves signature generation performance by
    between 10% and 60% depending on architecture and core count. (GH #1864)
  * Some functions related to encoding and decoding BigInts have been
    deprecated. (GH #1817)
  * Binary encoding and decoding of BigInts has been optimized by performing
    word-size operations when possible. (GH #1817)
  * Rename the exception Integrity_Failure to Invalid_Authentication_Tag to
    make its meaning and usage more clear. The old name remains as a typedef.
    (GH #1816)
  * Support for using Boost filesystem and MSVC?s std::filesystem have been
    removed, since already POSIX and Win32 versions had to be maintained for
    portability. (GH #1814)
  * Newly generated McEliece and XMSS keys now default to being encrypted using
    SIV mode, support for which was added in 2.8.0. Previously GCM was used by
    default for these algorithms.
  * Use arc4random on Android systems (GH #1851)
  * Fix the encoding of PGP-S2K iteration counts (GH #1853 #1854)
  * Add a facility for sandboxing the command line util. Currently FreeBSD
    (Capsicum) and OpenBSD (pledge) sandboxes are supported. (GH #1808)
  * Use if constexpr when available.
  * Disable building shared libs on iOS as it was broken and it is not clear
    shared libraries are ever useful on iOS (GH #1865)
  * Renamed the darwin build target to macos. This should not cause any
    user-visible change. (GH #1866)
  * Add support for using sccache to cache the Windows CI build (GH #1807)
  * Add --extra-cxxflags option which allows adding compilation flags without
    overriding the default set. (GH #1826)
  * Add --format= option to the hash cli which allows formatting the output as
    base64 or base58, default output remains hex.
  * Add base58_enc and base58_dec cli utils for base58 encoding/decoding. (GH #1848)
  * Enable getentropy by default on macOS (GH #1862)
  * Avoid using -momit-leaf-frame-pointer flags, since -fomit-frame-pointer is
    already the default with recent versions of GCC.
  * Fix XLC sanitizer flags.
  * Rename Blake2b class to BLAKE2b to match the official name. There is a typedef for compat.
  * Fix a bug where loading a raw Ed25519_PublicKey of incorrect length would
    lead to a crash. (GH #1850)
  * Fix a bug that caused compilation problems using CryptoNG PRNG. (GH #1832)
  * Extended SHAKE-128 cipher to support any key between 1 and 160 bytes,
    instead of only multiples of 8 bytes.
  * Minor HMAC optimizations.
  * Build fixes for GNU/Hurd.
  * Fix a bug that prevented generating or verifying Ed25519 signatures in the
    CLI (GH #1828 #1829)
  * Fix a compilation error when building the amalgamation outside of the
    original source directory when AVX2 was enabled. (GH #1812)
  * Fix a crash when creating the amalgamation if a header file was edited on
    Windows but then the amalgamation was built on Linux (GH #1763)</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1586347200">- Update to Botan 2.14:
  * Add support for using POWER8+ VPSUMD instruction to accelerate GCM (GH #2247)
  * Optimize the vector permute AES implementation, especially improving
    performance on ARMv7, Aarch64, and POWER. (GH #2243)
  * Use a new algorithm for modular inversions which is both faster
    and more resistant to side channel attacks. (GH #2287 #2296 #2301)
  * Address an issue in CBC padding which would leak the length of the plaintext
    which was being padded. Unpadding during decryption was not affected.
  * Optimize NIST prime field reductions, improving ECDSA by 3-9% (GH #2295)
  * Increase the size of the ECC blinding mask and scale it based on the
    size of the group order. (GH #880 #893 #2308)
  * Add server side support for the TLS asio wrapper. (GH #2229)
  * Add support for using Windows certificate store on MinGW (GH #2280)
  * Add a CLI utility cpu_clock which estimates the speed of the processor cycle counter.
  * Add Roughtime client (GH #2143 #1842)
  * Add support for XMSS X.509 certificates (GH #2172)
  * Add support for X.509 CRLs in FFI layer and Python wrapper (GH #2213)
  * Add AVX2 implementation of SHACAL2 (GH #2196)
  * Support more functionality for X.509 in the Python API (GH #2165)
  * Add generic CPU target useful when building for some new or unusual platform.
  * Disable MD5 in BSI or NIST modes (GH #2188)
  * Many currently public headers are being deprecated. If any such header is included by
    an application, a warning is issued at compile time.
    Headers issuing this warning will be made internal in a future major release.
  * RSA signature performance improvements (GH #2068 #2070)
  * Performance improvements for GCM (GH #2024 #2099 #2119), OCB (#2122), XTS (#2123) and
    ChaCha20Poly1305 (GH #2117), especially for small messages.
  * Add support for constant time AES using NEON and AltiVec (GH #2093 #2095 #2100)
  * Improve performance of POWER8 AES instructions (GH #2096)
  * Add support for the POWER9 hardware random number generator (GH #2026)
  * Add support for 64-bit version of RDRAND, doubling performance on x86-64 (GH #934 #2022)
  * In DTLS server, support a client crashing and then reconnecting from the same
    source port, as described in RFC 6347 sec 4.2.8 (GH #2029)
  * Optimize DTLS MTU splitting to split precisely to the set MTU (GH #2042)
  * Add support for the TLS v1.3 downgrade indicator. (GH #2027)
  * Add Argon2 PBKDF and password hash (GH #459 #1981 #1987)
  * Add Bcrypt-PBKDF (GH #1990)
  * Add server side support for issuing DTLS HelloVerifyRequest messages (GH #1999)
  * Add support for the TLS v1.3 supported_versions extension. (GH #1976)
  * Add Ed25519ph compatible with RFC 8032 (GH #1699 #2000)
  * Add support for OCSP stapling on server side. (GH #1703 #1967)
  * Add a boost::asio TLS stream compatible with boost::asio::ssl. (GH #1839 #1927 #1992)
  * Add a certificate store for Linux/Unix systems. (GH #1885 #1936)
  * Various Fixes</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597579200">- update to 2.15:
  Fix a bug where the name constraint extension did not constrain the alternative
  DN field which can be included in a subject alternative name. This would allow
  a corrupted sub-CA which was otherwise constrained by a name constraint to
  issue a certificate with a prohibited DN.
  Fix a bug in the TLS server during client authentication where where if a
  (disabled by default) static RSA ciphersuite was selected, then no certificate
  request would be sent. This would have an equivalent effect to a client which
  simply replied with an empty Certificate message. (GH #2367)
  Replace the T-Tables implementation of AES with a 32-bit bitsliced version. As
  a result AES is now constant time on all processors. (GH #2346 #2348 #2353
  [#2329] #2355)
  In TLS, enforce that the key usage given in the server certificate allows the
  operation being performed in the ciphersuite. (GH #2367)
  In X.509 certificates, verify that the algorithm parameters are the expected
  NULL or empty. (GH #2367)
  Change the HMAC key schedule to attempt to reduce the information leaked from
  the key schedule with regards to the length of the key, as this is at times (as
  for example in PBKDF2) sensitive information. (GH #2362)
  Add Processor_RNG which wraps RDRAND or the POWER DARN RNG instructions. The
  previous RDRAND_RNG interface is deprecated. (GH #2352)
  The documentation claimed that mlocked pages were created with a guard page
  both before and after. However only a trailing guard page was used. Add a
  leading guard page. (GH #2334)
  Add support for generating and verifying DER-encoded ECDSA signatures in the C
  and Python interfaces. (GH #2357 #2356)
  Workaround a bug in GCC?s UbSan which triggered on a code sequence in XMSS (GH
  [#2322])
  When building documentation using Sphinx avoid parallel builds with version 3.0
  due to a bug in that version (GH #2326 #2324)
  Fix a memory leak in the CommonCrypto block cipher calls (GH #2371)
  Fix a flaky test that would occasionally fail when running the tests with a
  large number of threads. (GH #2325 #2197)
  Additional algorithms are now deprecated: XTEA, GOST, and Tiger. They will be
  removed in a future major release.</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1603800000">- Update to 2.16.0:
  * Now userspace PRNG objects (such as AutoSeeded_RNG and HMAC_DRBG)
    use an internal lock, which allows safe concurrent use. This
    however is purely a precaution in case of accidental sharing of
    such RNG objects; for performance reasons it is always preferable
    to use a RNG per thread if a userspace RNG is needed.
  * DL_Group and EC_Group objects now track if they were created
    from a known trusted group (such as P-256 or an IPsec DH
    parameter). If so, then verification tests can be relaxed, as
    compared to parameters which may have been maliciously
    constructed in order to pass primality checks.
  * RandomNumberGenerator::add_entropy_T assumed its input was a POD
    type but did not verify this.
  * Support OCSP responders that live on a non-standard port.
  * Add support for Solaris sandbox.
  * Support suffixes on release numbers for alpha/beta releases.
  * Fix a bug in EAX which allowed requesting a 0 length tag, which
    had the effect of using a full length tag. Instead omit the
    length field, or request the full tag length explicitly.
  * Fix a memory leak in GCM where if passed an unsuitable block
    cipher (eg not 128 bit) it would throw an exception and leak
    the cipher object.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1604750400">- Botan 2.17.1:
  * Fix bugs in ECDSA signature generation and verifications under
    specific circumstances
  * developer visible changes, including deprecation with warnings
  * optimization in the non-hardware assisted AES key generation
  * Add more detection logic for AVX-512 features
  * Fix a bug parsing deeply nested cipher names
  * Prevent requesting DER encoding of signatures when the
    algorithm did not support it</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1605268800">- Botan 2.17.2:
  * Fix build problem on ppc64
  * Resolve an issue in the modular square root algorithm</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1608724800">- Botan 2.17.3:
  * Harden against side-channels from decoding secret values by
    changing the base64, base58, base32, and hex encoding and
    decoding opearations to run in constant time</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1618574400">- Botan 2.18.0
  * Add support for implementing custom RNG objects through the FFI
    interface
  * Improve safegcd bounds, improving runtime performance
  * Reject non-TLS messages as quickly as possible without waiting
    for a full record.
  * Fixes for TLS::Stream::async_shutdown
- Removed unneeded GNU MP build requirement, support was dropped
  with version 1.11.10
- Enabled check target, verify integrity of build library</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1620648000">- Botan 2.18.1:
  * Fix a build regression in 2.18.0 which caused linker flags
    which contain -l within them (such as -fuse-linker-plugin)
    to be misinterpreted
  * Fix a bug which caused decoding a certificate which contained
    more than one name in a single RDN
  * Fix a bug which caused OID lookup failures when run in a locale
    which uses thousands separators (pt_BR was reported as having
    this issue)
  * DNS names in name constraints were compared with case
    sensitivity, which could cause valid certificates to be
    rejected
  * X.509 name constraint extensions were rejected if non-critical.
    RFC 5280 requires conforming CAs issue such extensions as
    critical, but not all certificates are compliant, and all other
    known implementations do not require this
  * X.509 name constraints were incorrectly applied to the
    certificate which included the constraint
- build with lzma compression support
- build with SQLite support
- build with TPM support
- fix SLE 12 build</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1637755200">- update to 2.18.2:
  * Avoid using short exponents when encrypting in ElGamal, as some PGP
    implementations generate keys with parameters that are weak when
    short exponents are used CVE-2021-40529 boo#1190244
  * Fix a low risk OAEP decryption side channel
  * Work around a miscompilation of SHA-3 caused by a bug in Clang 12
    and XCode 13
  * Remove support in OpenSSL provider for algorithms which are
    disabled by default in OpenSSL 3.0
  * Add CI based on GitHub actions to replace Travis CI
  * Fix the online OCSP test, as the certificate involved had expired.
  * Fix some test failures induced by the expiration of the trust root
    "DST Root CA X3"</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1668686400">- Fixed [CVE-2022-43705,bsc#1205509]
  * Added Botan-CVE-2022-43705.patch
  * Added Botan-CVE-2022-43705-certs.tgz
  * validate that an embedded certificate was issued by the end-entity
    issuing certificate authority when checking OCSP responses.</changelog>
</package>
<package pkgid="272f1e634fe1b21d3b112bd85fb89db908ba0bb4f081258e6f2bef224b63e114" name="Botan-doc" arch="noarch">
  <version epoch="0" ver="2.18.2" rel="bp154.2.3.1"/>
  <changelog author="adam.majer@suse.de" date="1518436800">- Don't drop -fstack-clash-protection for openSUSE 42.3 - we just
  need the Update repository present.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1518609600">- change group of libbotan-%{version_suffix} to 'System/Libraries' as
  requested on review</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1518782400">- drop explicit package requirements
- split binary package and documentation from dynamic library package
  and make documentation package noarch
- merge back Botan2 package to Botan with changelog history
- drop Botan patches
    aarch64-support.patch - doesn't seem to be required anymore
    Botan-fix_install_paths.patch - doesn't seem to be required
    no-cpuid-header.patch - SLE11 not target anymore
    Botan-fix_pkgconfig.patch - this seem to be wrong
    Botan-no-buildtime.patch - not needed anymore
    dont-set-mach-value.diff - doesn't apply, unclear and undocumented why it is there
    Botan-inttypes.patch - not required
    Botan-ull_constants.patch.bz2 - no reason anymore</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1522756800">- Update to Botan 2.5
  * Fix error in certificate wildcard matching (CVE-2018-9127), where a
    wildcard cert for b*.example.com would be accepted as a match for any host
    with name *b*.example.com (GH #1519)
  * Add support for RSA-PSS signatures in TLS (GH #1285)
  * Ed25519 certificates are now supported (GH #1501)
  * Many optimizations in ECC operations. ECDSA signatures are 8-10 times
    faster. ECDSA verification is about twice as fast. ECDH key agreement is
    3-4 times faster. (GH #1457 #1478)
  * Implement product scanning Montgomery reduction, which improves
    Diffie-Hellman and RSA performance by 10 to 20% on most platforms. (GH
    [#1472])
  * DSA signing and verification performance has improved by 30-50%.
  * Add a new Credentials_Manager callback that specifies which CAs the server
    has indicated it trusts (GH #1395 fixing #1261)
  * Add new TLS::Callbacks methods that allow creating or removing extensions,
    as well as examining extensions sent by the peer (GH #1394 #1186)
  * Add new TLS::Callbacks methods that allow an application to negotiate use
    of custom elliptic curves. (GH #1448)
  * Add ability to create custom elliptic curves (GH #1441 #1444)
  * Add support for POWER8 AES instructions (GH #1459 #1393 #1206)
  * Fix DSA/ECDSA handling of hashes longer than the group order (GH #1502
    [#986])
  * The default encoding of ECC public keys has changed from compressed to
    uncompressed point representation. This improves compatability with some
    common software packages including Golang?s standard library. (GH #1480
    [#1483])
  * It is now possible to create DNs with custom components. (GH #1490 #1492)
  * It is now possible to specify the serial number of created certificates,
    instead of using the default 128-bit random integer. (GH #1489 #1491)
  * Change DL_Group and EC_Group to store their data as shared_ptr for fast
    copying. Also both classes precompute additional useful values (eg for
    modular reductions). (GH #1435 #1454)
  * Make it possible for PKCS10 requests to include custom extensions. This
    also makes it possible to use muliple SubjectAlternativeNames of a single
    type in a request, which was previously not possible. (GH #1429 #1428)
  * Add new optimized interface for FE1 format preserving encryption. By
    caching a number of values computed in the course of the FPE calculation,
    it provides a 6-7x speedup versus the old API. (GH #1469)
  * Add DSA and ElGamal keygen functions to FFI (#1426)
  * Add Pipe::prepend_filter to replace Pipe::prepend (GH #1402)
  * Fix a memory leak in the OpenSSL block cipher integration, introduced in
  * 2.2.0
  * Use an improved algorithm for generating safe primes which is several tens
    of times faster. Also, fix a bug in the prime sieving algorithm which
    caused standard prime generation (like for RSA keys) to be slower than
    necessary. (GH #1413 #1411)
  * Correct the return value of PK_Encryptor::maximum_input_size which reported
    a much too small value (GH #1410)
  * Remove use of CPU specific optimization flags, instead the user should set
    these via CXXFLAGS if desired. (GH #1392)
  * Resolve an issue that would cause a crash in the tests if they were run on
    a machine without SSE2/NEON/VMX instructions. (GH #1495)
  * The Python module now tries to load DLLs from a list of names and uses the
    first one which successfully loads and indicates it supports the desired
    API level. (GH #1497)
  * Various minor optimizations for SHA-3 (GH #1433 #1434)
  * The output of botan --help has been improved (GH #1387)
  * Add --der-format flag to command line utils, making it possible verify
    DSA/ECDSA signatures generated by OpenSSL command line (GH #1409)
  * Add support for --library-suffix option to configure.py (GH #1405 #1404)
  * Use feature flags to enable/disable system specific code (GH #1378)
  * Add --msvc-runtime option to allow using static runtime (GH #1499 #210)
  * Add ?enable-sanitizers= option to allow specifying which sanitizers to
    enable. The existing --with-sanitizers option just enables some default set
    which is known to work with the minimum required compiler versions.
  * Use either rst2man or rst2man.py for generating man page as distributions
    differ on where this program is installed (GH #1516)
  * The threefish module has been renamed threefish_512 since that is the
    algorithm it provides. (GH #1477)
  * The Perl XS based wrapper has been removed, as it was unmaintained and
    broken. (GH #1412)
  * The sqlite3 encryption patch under contrib has been removed. It is still
    maintained by the original author at
    https://github.com/OlivierJG/botansqlite3</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1523361600">- Update to Botan 2.6
  * CVE-2018-9860 Fix a bug decrypting TLS CBC ciphertexts which could for a
    malformed ciphertext cause the decryptor to read and HMAC an additional 64K
    bytes of data which is not part of the record. This could cause a crash if
    the read went into unmapped memory. No information leak or out of bounds
    write occurs.
  * Add support for OAEP labels (GH #1508)
  * RSA signing is about 15% faster (GH #1523) and RSA verification is about 50% faster.
  * Add exponent blinding to RSA (GH #1523)
  * Add Cipher_Mode::create and AEAD_Mode::create (GH #1527)
  * Fix bug in TLS server introduced in 2.5 which caused connection to fail if
    the client offered any signature algorithm not known to the server (for
    example RSA/SHA-224).
  * Fix a bug in inline asm that would with GCC 7.3 cause incorrect
    computations and an infinite loop during the tests. (GH #1524 #1529)</changelog>
  <changelog author="kasimir_@outlook.de" date="1523534400">- fixed to build on armv6 and armv7</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1531224000">- Update to Botan 2.7
  * CVE-2018-12435 Avoid a side channel in ECDSA signature generation (GH
    [#1604])
  * Avoid a side channel in RSA key generation due to use of a non-constant
    time gcd algorithm. (GH #1542 #1556)
  * Optimize prime generation, especially improving RSA key generation. (GH
    [#1542])
  * Make Karatsuba multiplication, Montgomery field operations, Barrett
    reduction and Montgomery exponentiation const time (GH #1540 #1606 #1609
    [#1610])
  * Optimizations for elliptic curve operations especially improving reductions
    and inversions modulo NIST primes (GH #1534 #1538 #1545 #1546 #1547 #1550)
  * Add 24 word wide Comba multiplication, improving 3072-bit RSA and DH by
    ~25%. (GH #1564)
  * Unroll Montgomery reduction for specific sizes (GH #1603)
  * Improved performance of signature verification in ECGDSA, ECKCDSA, SM2 and
    GOST by 10-15%.
  * XMSS optimizations (GH #1583 #1585)
  * Fix an error that meant XMSS would only sign half as many signatures as is
    allowed (GH #1582)
  * Add support for base32 encoding/decoding (GH #1541)
  * Add BMI2 optimized version of SHA-256, 40% faster on Skylake (GH #1584)
  * Allow the year to be up to 2200 in ASN.1 time objects. Previously this was
    limited to 2100. (GH #1536)
  * Add support for Scrypt password hashing (GH #1570)
  * Add support for using Scrypt for private key encryption (GH #1574)
  * Optimizations for DES/3DES, approx 50% faster when used in certain modes
    such as CBC decrypt or CTR.
  * XMSS signature verification did not check that the signature was of the
    expected length which could lead to a crash. (GH #1537)
  * The bcrypt variants 2b and 2y are now supported.
  * Support for 192-bit Suite B TLS profile is now implemented, as the 128-bit
    Suite B is since 2015 not allowed anymore.
  * Previously botan allowed GCM to be used with an empty nonce, which is not
    allowed by the specification. Now such nonces are rejected.
  * Avoid problems on Windows when compiling in Unicode mode (GH #1615 #1616)
  * Previously for ASN.1 encoded signatures (eg ECDSA) Botan would accept any
    valid BER encoding. Now only the single valid DER encoding is accepted.
  * Correct an error that could in rare cases cause an internal error exception
    when doing computations with the P-224 curve.
  * Optimizations to reduce allocations/copies during DER encoding and BER
    decoding (GH #1571 #1572 #1600)
  * Botan generates X.509 subject key IDs by hashing the public key with
    whatever hash function is being used to sign the certificate. However
    especially for SHA-512 this caused SKIDs that were far longer than
    necessary. Now all SKIDs are truncated to 192 bits.
  * In the test suite use mkstemp to create temporary files instead of creating
    them in the current working directory. (GH #1533 #1530)
  * It is now possible to safely override CXX when invoking make in addition to
    when configure.py is run. (GH #1579)
  * OIDs for Camellia and SM4 in CBC and GCM mode are now defined, making it
    possible to use this algorithms for private key encryption.
  * Avoid creating symlinks to the shared object on OpenBSD (#1535)
  * The factor command runs much faster on larger inputs now.
  * Support for Windows Phone/UWP was deprecated starting in 2.5. This
    deprecation has been reversed as it seems UWP is still actively used. (GH
    [#1586] #1587)
  * Support for Visual C++ 2013 is deprecated, and will be removed in Jan 2019.
  * Added support for GCC?s ?sysroot option to configure.py for
    cross-compiling.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1533038400">- Fix version in baselibs.conf</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1547121600">- Update to Botan 2.9
  * Bump SONAME
  * CVE-2018-20187 Address a side channel during ECC key generation, which used an
    unblinded Montgomery ladder. As a result, a timing attack can reveal
    information about the high bits of the secret key.
  * Fix bugs in TLS which caused negotiation failures when the client used an
    unknown signature algorithm or version (GH #1711 #1709 #1708)
  * Fix bug affecting GCM, EAX and ChaCha20Poly1305 where if the associated data
    was set after starting a message, the new AD was not reflected in the produced
    tag. Now with these modes setting an AD after beginning a message throws an
    exception.
  * Use a smaller sieve which improves performance of prime generation.
  * Fixed a bug that caused ChaCha to produce incorrect output after encrypting 256
    GB. (GH #1728)
  * Add NEON and AltiVec implementations of ChaCha (GH #1719 #1728 #1729)
  * Optimize AVX2 ChaCha (GH #1730)
  * Many more operations in BigInt, ECC and RSA code paths are either fully const
    time or avoid problematic branches that could potentially be exploited in a
    side channel attack. (GH #1738 #1750 #1754 #1755 #1757 #1758 #1759 #1762 #1765
    [#1770] #1773 #1774 #1779 #1780 #1794 #1795 #1796 #1797)
  * Several optimizations for BigInt and ECC, improving ECDSA performance by as
    much as 30%. (GH #1734 #1737 #1777 #1750 #1737 #1788)
  * Support recovering an ECDSA public key from a message/signature pair (GH #664
    [#1784])
  * Add base58 encoding/decoding functions (GH #1783)
  * In the command line interface, add support for reading passphrases from the
    terminal with echo disabled (GH #1756)
  * Add CT::Mask type to simplify const-time programming (GH #1751)
  * Add new configure options --disable-bmi2, --disable-rdrand, and
  - -disable-rdseed to prevent use of those instruction sets.
  * Add error_type and error_code functions to Exception type (GH #1744)
  * Now on POSIX systems posix_memalign is used instead of mmap for allocating the
    page-locked memory pool. This avoids issues with fork. (GH #602 #1798)
  * When available, use RDRAND to generate the additional data in
    Stateful_RNG::randomize_with_ts_input
  * Use vzeroall/vzeroupper intrinsics to avoid AVX2/SSE transition penalties.
  * Support for Visual C++ 2013 has been removed (GH #1557 #1697)
  * Resolve a memory leak when verifying ECDSA signatures with versions of OpenSSL
    before 1.1.0 (GH #1698)
  * Resolve a memory leak using ECDH via OpenSSL (GH #1767)
  * Fix an error in XTS which prohibited encrypting values which were exactly the
    same length as the underlying block size. Messages of this size are allowed by
    the standard and other XTS implementations. (GH #1706)
  * Resolve a bug in TSS which resulted in it using an incorrect length field in
    the shares. Now the correct length is encoded, but either correct or buggy
    lengths are accepted when decoding. (GH #1722)
  * Correct a bug when reducing a negative BigInt modulo a small power of 2. (GH
    [#1755])
  * Add CLI utils for threshold secret splitting. (GH #1722)
  * Fix a bug introduced in 2.8.0 that caused compilation failure if using a single
    amalgamation file with AVX2 enabled. (GH #1700)
  * Add an explicit OS target for Emscripten and improve support for it. (GH #1702)
  * Fix small issues when building for QNX
  * Switch the Travis CI build to using Ubuntu 16.04 (GH #1767)
  * Add options to configure.py to disable generation of pkg-config file, and (for
    systems where pkg-config support defaults to off, like Windows), to enable
    generating it. (GH #1268)
  * Modify configure.py to accept empty lists or trailing/extra commas. (GH #1705)
- Update to Botan 2.8
  * Add support for using Apple CommonCrypto library for hashing (GH #1667),
    cipher modes (GH #1674) and block ciphers (GH #1673).
  * Support for negotiating TLS versions 1.0 and 1.1 is disabled in the default
    TLS policy. In addition, support for negotiating TLS ciphersuites using CBC
    or CCM mode is disabled by default. Applications which need to interop with
    old peers must enable these in their TLS policy object. (GH #1651)
  * During primality testing, use a Lucas test in addition to Miller-Rabin. It
    is possible to construct a composite integer which passes n Miller-Rabin
    tests with probability (1/4)^n. So for a incautious verifier using a small
    number of tests (under 16 or so) it is possible if unlikely they would
    accept such a composite as prime. Adding a Lucas test precludes such an
    attack. (GH #1636)
  * Add XChaCha and XChaCha20Poly1305 (GH #1640)
  * Add AVX2 implementations of ChaCha (GH #1662) and Serpent (GH #1660)
  * Add a new password hashing interface in pwdhash.h (GH #1670)
  * C binding improvements. Added functions to get name and supported
    keylengths of cipher, hash and MAC objects, support for FE1 format
    preserving encryption (GH #1625 #1646), functions to load and save RSA keys
    in PKCS #1 format (GH #1621), HOTP and TOTP algorithms, scrypt, certificate
    verification (GH #1647), functions to get the output length of public key
    operations (GH #1642), and functions for loading and serializing X25519
    keys (GH #1681)
  * Support for building with BOTAN_MP_WORD_BITS set to 8 or 16 has been removed.
  * Previously SM2 had two distinct key types, one for signatures and another
    for encryption. They have now been merged into a single key type since in
    practice it seems the same key is at times used for both operations. (GH
    [#1637])
  * The Cipher_Mode class now derives from SymmetricAlgorithm (GH #1639)
  * Add support for using the ARMv8 instructions for SM4 encryption (GH #1622)
  * The entropy source using SecRandomCopyBytes has been removed as it was
    redundant with other entropy sources (GH #1668)
  * The Python module has much better error checking and reporting, and offers
    new functionality such as scrypt, MPI and FPE. (GH #1643 #1646)
  * Fixed a bug that caused CCM to fail with an exception when used with L=8 (GH #1631 #1632)
  * The default bcrypt work factor has been increased from 10 to 12.
  * The default algorithm used in passhash9 has changed from SHA-256 to
    SHA-512, and the default work factor increased from 10 to 15.
  * In ECC private keys, include the public key data for compatibility with GnuTLS (GH #1634 #1635)
  * Add support for using Linux getrandom syscall to access the system PRNG.
    This is disabled by default, use --with-os-feature=getrandom to enable.
  * It is now possible to encrypt private keys using SIV mode.
  * The FFI function botan_privkey_load now ignores its rng argument.
  * Resolve a problem when building under Visual C++ 15.8 (GH #1624)
  * Fix a bug in XSalsa20 (192-bit Salsa nonces) where if set_iv was called
    twice without calling set_key, the resulting encryption was incorrect. (GH
    [#1640])
  * Handle an error seen when verifying invalid ECDSA signatures using LibreSSL
    on non x86-64 platforms (GH #1627 #1628)
  * Fix bugs in PKCS7 and X9.23 CBC padding schemes, which would ignore the
    first byte in the event the padding took up the entire block. (GH #1690)
  * Correct bugs which would cause CFB, OCB, and GCM modes to crash when they
    were used in an unkeyed state. (GH #1639)
  * Optimizations for SM4 and Poly1305
  * Avoid a cache side channel in the AES key schedule
  * Add pk_encrypt and pk_decrypt CLI operations
  * Now asn1print CLI defaults to printing context-specific fields.
  * Use codec_base for Base64, which matches how Base32 is implemented (GH #1597)
  * The cast module has been split up into cast128 and cast256 (GH #1685)
  * When building under Visual C++ 2013, the user must acknowledge the upcoming
    removal of support using the configure.py flag --ack-vc2013-deprecated (GH
    [#1557])</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1554206400">- Update to Botan 2.10
  * Bump SONAME
  * Warning: XMSS currently implements draft-06 which is not compatible with
    the final RFC 8391 specification. A PR is open to fix this, however it will
    break all current uses of XMSS. If you are currently using XMSS please
    comment at https://github.com/randombit/botan/pull/1858. Otherwise the PR
    will be merged and support for draft-06 will be removed starting in 2.11.
  * Added a new certificate store implementation that can access the MacOS
    keychain certificate store. (GH #1830)
  * Redesigned Memory_Pool class, which services allocations out of a set of
    pages locked into memory (using mlock/VirtualLock). It is now faster and
    with improved exploit mitigations. (GH #1800)
  * Add BMI2 implementations of SHA-512 and SHA-3 which improve performance by
    25-35% on common CPUs. (GH #1815)
  * Unroll SHA-3 computation improving performance by 10-12% (GH #1838)
  * Add a Thread_Pool class. It is now possible to run the tests in multiple
    threads with --test-threads=N flag to select the number of threads to use.
    Use --test-threads=0 to run with as many CPU cores as are available on the
    current system. The default remains single threaded. (GH #1819)
  * XMSS signatures now uses a global thread pool instead of spawning new
    threads for each usage. This improves signature generation performance by
    between 10% and 60% depending on architecture and core count. (GH #1864)
  * Some functions related to encoding and decoding BigInts have been
    deprecated. (GH #1817)
  * Binary encoding and decoding of BigInts has been optimized by performing
    word-size operations when possible. (GH #1817)
  * Rename the exception Integrity_Failure to Invalid_Authentication_Tag to
    make its meaning and usage more clear. The old name remains as a typedef.
    (GH #1816)
  * Support for using Boost filesystem and MSVC?s std::filesystem have been
    removed, since already POSIX and Win32 versions had to be maintained for
    portability. (GH #1814)
  * Newly generated McEliece and XMSS keys now default to being encrypted using
    SIV mode, support for which was added in 2.8.0. Previously GCM was used by
    default for these algorithms.
  * Use arc4random on Android systems (GH #1851)
  * Fix the encoding of PGP-S2K iteration counts (GH #1853 #1854)
  * Add a facility for sandboxing the command line util. Currently FreeBSD
    (Capsicum) and OpenBSD (pledge) sandboxes are supported. (GH #1808)
  * Use if constexpr when available.
  * Disable building shared libs on iOS as it was broken and it is not clear
    shared libraries are ever useful on iOS (GH #1865)
  * Renamed the darwin build target to macos. This should not cause any
    user-visible change. (GH #1866)
  * Add support for using sccache to cache the Windows CI build (GH #1807)
  * Add --extra-cxxflags option which allows adding compilation flags without
    overriding the default set. (GH #1826)
  * Add --format= option to the hash cli which allows formatting the output as
    base64 or base58, default output remains hex.
  * Add base58_enc and base58_dec cli utils for base58 encoding/decoding. (GH #1848)
  * Enable getentropy by default on macOS (GH #1862)
  * Avoid using -momit-leaf-frame-pointer flags, since -fomit-frame-pointer is
    already the default with recent versions of GCC.
  * Fix XLC sanitizer flags.
  * Rename Blake2b class to BLAKE2b to match the official name. There is a typedef for compat.
  * Fix a bug where loading a raw Ed25519_PublicKey of incorrect length would
    lead to a crash. (GH #1850)
  * Fix a bug that caused compilation problems using CryptoNG PRNG. (GH #1832)
  * Extended SHAKE-128 cipher to support any key between 1 and 160 bytes,
    instead of only multiples of 8 bytes.
  * Minor HMAC optimizations.
  * Build fixes for GNU/Hurd.
  * Fix a bug that prevented generating or verifying Ed25519 signatures in the
    CLI (GH #1828 #1829)
  * Fix a compilation error when building the amalgamation outside of the
    original source directory when AVX2 was enabled. (GH #1812)
  * Fix a crash when creating the amalgamation if a header file was edited on
    Windows but then the amalgamation was built on Linux (GH #1763)</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1586347200">- Update to Botan 2.14:
  * Add support for using POWER8+ VPSUMD instruction to accelerate GCM (GH #2247)
  * Optimize the vector permute AES implementation, especially improving
    performance on ARMv7, Aarch64, and POWER. (GH #2243)
  * Use a new algorithm for modular inversions which is both faster
    and more resistant to side channel attacks. (GH #2287 #2296 #2301)
  * Address an issue in CBC padding which would leak the length of the plaintext
    which was being padded. Unpadding during decryption was not affected.
  * Optimize NIST prime field reductions, improving ECDSA by 3-9% (GH #2295)
  * Increase the size of the ECC blinding mask and scale it based on the
    size of the group order. (GH #880 #893 #2308)
  * Add server side support for the TLS asio wrapper. (GH #2229)
  * Add support for using Windows certificate store on MinGW (GH #2280)
  * Add a CLI utility cpu_clock which estimates the speed of the processor cycle counter.
  * Add Roughtime client (GH #2143 #1842)
  * Add support for XMSS X.509 certificates (GH #2172)
  * Add support for X.509 CRLs in FFI layer and Python wrapper (GH #2213)
  * Add AVX2 implementation of SHACAL2 (GH #2196)
  * Support more functionality for X.509 in the Python API (GH #2165)
  * Add generic CPU target useful when building for some new or unusual platform.
  * Disable MD5 in BSI or NIST modes (GH #2188)
  * Many currently public headers are being deprecated. If any such header is included by
    an application, a warning is issued at compile time.
    Headers issuing this warning will be made internal in a future major release.
  * RSA signature performance improvements (GH #2068 #2070)
  * Performance improvements for GCM (GH #2024 #2099 #2119), OCB (#2122), XTS (#2123) and
    ChaCha20Poly1305 (GH #2117), especially for small messages.
  * Add support for constant time AES using NEON and AltiVec (GH #2093 #2095 #2100)
  * Improve performance of POWER8 AES instructions (GH #2096)
  * Add support for the POWER9 hardware random number generator (GH #2026)
  * Add support for 64-bit version of RDRAND, doubling performance on x86-64 (GH #934 #2022)
  * In DTLS server, support a client crashing and then reconnecting from the same
    source port, as described in RFC 6347 sec 4.2.8 (GH #2029)
  * Optimize DTLS MTU splitting to split precisely to the set MTU (GH #2042)
  * Add support for the TLS v1.3 downgrade indicator. (GH #2027)
  * Add Argon2 PBKDF and password hash (GH #459 #1981 #1987)
  * Add Bcrypt-PBKDF (GH #1990)
  * Add server side support for issuing DTLS HelloVerifyRequest messages (GH #1999)
  * Add support for the TLS v1.3 supported_versions extension. (GH #1976)
  * Add Ed25519ph compatible with RFC 8032 (GH #1699 #2000)
  * Add support for OCSP stapling on server side. (GH #1703 #1967)
  * Add a boost::asio TLS stream compatible with boost::asio::ssl. (GH #1839 #1927 #1992)
  * Add a certificate store for Linux/Unix systems. (GH #1885 #1936)
  * Various Fixes</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597579200">- update to 2.15:
  Fix a bug where the name constraint extension did not constrain the alternative
  DN field which can be included in a subject alternative name. This would allow
  a corrupted sub-CA which was otherwise constrained by a name constraint to
  issue a certificate with a prohibited DN.
  Fix a bug in the TLS server during client authentication where where if a
  (disabled by default) static RSA ciphersuite was selected, then no certificate
  request would be sent. This would have an equivalent effect to a client which
  simply replied with an empty Certificate message. (GH #2367)
  Replace the T-Tables implementation of AES with a 32-bit bitsliced version. As
  a result AES is now constant time on all processors. (GH #2346 #2348 #2353
  [#2329] #2355)
  In TLS, enforce that the key usage given in the server certificate allows the
  operation being performed in the ciphersuite. (GH #2367)
  In X.509 certificates, verify that the algorithm parameters are the expected
  NULL or empty. (GH #2367)
  Change the HMAC key schedule to attempt to reduce the information leaked from
  the key schedule with regards to the length of the key, as this is at times (as
  for example in PBKDF2) sensitive information. (GH #2362)
  Add Processor_RNG which wraps RDRAND or the POWER DARN RNG instructions. The
  previous RDRAND_RNG interface is deprecated. (GH #2352)
  The documentation claimed that mlocked pages were created with a guard page
  both before and after. However only a trailing guard page was used. Add a
  leading guard page. (GH #2334)
  Add support for generating and verifying DER-encoded ECDSA signatures in the C
  and Python interfaces. (GH #2357 #2356)
  Workaround a bug in GCC?s UbSan which triggered on a code sequence in XMSS (GH
  [#2322])
  When building documentation using Sphinx avoid parallel builds with version 3.0
  due to a bug in that version (GH #2326 #2324)
  Fix a memory leak in the CommonCrypto block cipher calls (GH #2371)
  Fix a flaky test that would occasionally fail when running the tests with a
  large number of threads. (GH #2325 #2197)
  Additional algorithms are now deprecated: XTEA, GOST, and Tiger. They will be
  removed in a future major release.</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1603800000">- Update to 2.16.0:
  * Now userspace PRNG objects (such as AutoSeeded_RNG and HMAC_DRBG)
    use an internal lock, which allows safe concurrent use. This
    however is purely a precaution in case of accidental sharing of
    such RNG objects; for performance reasons it is always preferable
    to use a RNG per thread if a userspace RNG is needed.
  * DL_Group and EC_Group objects now track if they were created
    from a known trusted group (such as P-256 or an IPsec DH
    parameter). If so, then verification tests can be relaxed, as
    compared to parameters which may have been maliciously
    constructed in order to pass primality checks.
  * RandomNumberGenerator::add_entropy_T assumed its input was a POD
    type but did not verify this.
  * Support OCSP responders that live on a non-standard port.
  * Add support for Solaris sandbox.
  * Support suffixes on release numbers for alpha/beta releases.
  * Fix a bug in EAX which allowed requesting a 0 length tag, which
    had the effect of using a full length tag. Instead omit the
    length field, or request the full tag length explicitly.
  * Fix a memory leak in GCM where if passed an unsuitable block
    cipher (eg not 128 bit) it would throw an exception and leak
    the cipher object.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1604750400">- Botan 2.17.1:
  * Fix bugs in ECDSA signature generation and verifications under
    specific circumstances
  * developer visible changes, including deprecation with warnings
  * optimization in the non-hardware assisted AES key generation
  * Add more detection logic for AVX-512 features
  * Fix a bug parsing deeply nested cipher names
  * Prevent requesting DER encoding of signatures when the
    algorithm did not support it</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1605268800">- Botan 2.17.2:
  * Fix build problem on ppc64
  * Resolve an issue in the modular square root algorithm</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1608724800">- Botan 2.17.3:
  * Harden against side-channels from decoding secret values by
    changing the base64, base58, base32, and hex encoding and
    decoding opearations to run in constant time</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1618574400">- Botan 2.18.0
  * Add support for implementing custom RNG objects through the FFI
    interface
  * Improve safegcd bounds, improving runtime performance
  * Reject non-TLS messages as quickly as possible without waiting
    for a full record.
  * Fixes for TLS::Stream::async_shutdown
- Removed unneeded GNU MP build requirement, support was dropped
  with version 1.11.10
- Enabled check target, verify integrity of build library</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1620648000">- Botan 2.18.1:
  * Fix a build regression in 2.18.0 which caused linker flags
    which contain -l within them (such as -fuse-linker-plugin)
    to be misinterpreted
  * Fix a bug which caused decoding a certificate which contained
    more than one name in a single RDN
  * Fix a bug which caused OID lookup failures when run in a locale
    which uses thousands separators (pt_BR was reported as having
    this issue)
  * DNS names in name constraints were compared with case
    sensitivity, which could cause valid certificates to be
    rejected
  * X.509 name constraint extensions were rejected if non-critical.
    RFC 5280 requires conforming CAs issue such extensions as
    critical, but not all certificates are compliant, and all other
    known implementations do not require this
  * X.509 name constraints were incorrectly applied to the
    certificate which included the constraint
- build with lzma compression support
- build with SQLite support
- build with TPM support
- fix SLE 12 build</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1637755200">- update to 2.18.2:
  * Avoid using short exponents when encrypting in ElGamal, as some PGP
    implementations generate keys with parameters that are weak when
    short exponents are used CVE-2021-40529 boo#1190244
  * Fix a low risk OAEP decryption side channel
  * Work around a miscompilation of SHA-3 caused by a bug in Clang 12
    and XCode 13
  * Remove support in OpenSSL provider for algorithms which are
    disabled by default in OpenSSL 3.0
  * Add CI based on GitHub actions to replace Travis CI
  * Fix the online OCSP test, as the certificate involved had expired.
  * Fix some test failures induced by the expiration of the trust root
    "DST Root CA X3"</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1668686400">- Fixed [CVE-2022-43705,bsc#1205509]
  * Added Botan-CVE-2022-43705.patch
  * Added Botan-CVE-2022-43705-certs.tgz
  * validate that an embedded certificate was issued by the end-entity
    issuing certificate authority when checking OCSP responses.</changelog>
</package>
<package pkgid="c887abf5a77ce14d0fe7a9b92ff4b08d1b32065453924af69b6cbbd3c7e19c7f" name="EternalTerminal" arch="aarch64">
  <version epoch="0" ver="6.2.1" rel="bp154.2.3.1"/>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1581940800">- Update to 6.0.6:
  * Generate passkeys on server (#280)</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1583323200">- Update to 6.0.7:
  * Add Match Host support to ssh config</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1593000000">- Build with DISABLE_CRASH_LOG=ON to prevent segfault upon abort
  See https://github.com/MisterTea/EternalTerminal/issues/324</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1596110400">- Update to 6.0.8:
  * TSAN/ASAN fixes
  * Parse named socket port forwards (#293)
  * Fix input for forward tunnels (#319)
  * Revert back to write/read instead of send/recv on unix (#323, #322)
  * Handle SIGINT manually (#333, #324)
- Build with DISABLE_CRASH_LOG=OFF since SIGINT is now not handled
  by easylogging++ anymore, thus ctrl+c won't lead to crash</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1596196800">- Update to 6.0.9:
  * TSAN fixes
  * Pass errno correctly from ::read</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1596456000">- Update to 6.0.10:
  * Fix --help and --version flags</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1596456001">- Update to 6.0.11:
  * Fix version number</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1605787200">- Update to 6.0.13:
  * Fix warning by systemctl (#346)
  * Import UST
  * Several documentation fixes</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1614945600">- Update to 6.1.0:
  * Build using vcpkg
  * Monitor crashes
  * Fix some race conditions
  * Add --ssh-option argument for passing arguments to ssh
  * Android support</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1615204800">- Update to 6.1.3:
  * Fixes for various OSes and build systems
  * Allow older cmake versions on non-windows platforms
  * Fix for older cmake versions</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1615723200">- Update to 6.1.4:
  * Add stack trace on unhandled exception</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1617796800">- Update to 6.1.5:
  * Fixes for various OSes
  * Update sentry version</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1617796801">- Update to 6.1.6:
  * Fix crash on exit.
  * Fix ARM build.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1617796802">- Update to 6.1.7:
  * Fix race condition in connection test
  * Reduce debug object size
  * Move deployment scripts to deployment branch
  * Do not install files from PlatformFolders project</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1622462400">- Update to 6.1.8:
  * ssh config fixes
- Add et-limits.patch:
  Fix build by patching in-tree sentry.
  See https://github.com/MisterTea/EternalTerminal/issues/412
  and https://github.com/getsentry/sentry-native/issues/501</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1636027200">- Update to 6.1.9:
  * Security &amp; Compatibility fixes</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1642075200">- Update to 6.1.11:
  * Compile fixes for later versions of gcc
- Remove et-limits.patch: upstreamed</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1651752000">- Update to 6.2.0:
  * Several security and stability improvements.
  * CVE-2022-24949 [bsc#1202435]
  * CVE-2022-24950 [bsc#1202434]
  * CVE-2022-24951 [bsc#1202433]
  * CVE-2022-24952 [bsc#1202432]
- Add EternalTerminal-6.2.0-return.patch
  See https://github.com/MisterTea/EternalTerminal/pull/518
- Add EternalTerminal-6.2.0-optional.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1651838400">- Update to 6.2.1:
  * Fix build issues
- Remove upstreamed patches:
  * EternalTerminal-6.2.0-return.patch
  * EternalTerminal-6.2.0-optional.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1660824000">- Require gcc-c++ instead of gcc12-c++ in most cases
  This will be gcc12-c++ on TW by default
  In Leap 15.3/15.4 hard-require gcc10-c++ since the build fails with
  older versions</changelog>
</package>
<package pkgid="b88e1e2ac51f188105359214d3d401b304b4fb05ea83c93f4f0ba384324ef455" name="EternalTerminal" arch="src">
  <version epoch="0" ver="6.2.1" rel="bp154.2.3.1"/>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1581940800">- Update to 6.0.6:
  * Generate passkeys on server (#280)</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1583323200">- Update to 6.0.7:
  * Add Match Host support to ssh config</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1593000000">- Build with DISABLE_CRASH_LOG=ON to prevent segfault upon abort
  See https://github.com/MisterTea/EternalTerminal/issues/324</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1596110400">- Update to 6.0.8:
  * TSAN/ASAN fixes
  * Parse named socket port forwards (#293)
  * Fix input for forward tunnels (#319)
  * Revert back to write/read instead of send/recv on unix (#323, #322)
  * Handle SIGINT manually (#333, #324)
- Build with DISABLE_CRASH_LOG=OFF since SIGINT is now not handled
  by easylogging++ anymore, thus ctrl+c won't lead to crash</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1596196800">- Update to 6.0.9:
  * TSAN fixes
  * Pass errno correctly from ::read</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1596456000">- Update to 6.0.10:
  * Fix --help and --version flags</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1596456001">- Update to 6.0.11:
  * Fix version number</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1605787200">- Update to 6.0.13:
  * Fix warning by systemctl (#346)
  * Import UST
  * Several documentation fixes</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1614945600">- Update to 6.1.0:
  * Build using vcpkg
  * Monitor crashes
  * Fix some race conditions
  * Add --ssh-option argument for passing arguments to ssh
  * Android support</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1615204800">- Update to 6.1.3:
  * Fixes for various OSes and build systems
  * Allow older cmake versions on non-windows platforms
  * Fix for older cmake versions</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1615723200">- Update to 6.1.4:
  * Add stack trace on unhandled exception</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1617796800">- Update to 6.1.5:
  * Fixes for various OSes
  * Update sentry version</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1617796801">- Update to 6.1.6:
  * Fix crash on exit.
  * Fix ARM build.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1617796802">- Update to 6.1.7:
  * Fix race condition in connection test
  * Reduce debug object size
  * Move deployment scripts to deployment branch
  * Do not install files from PlatformFolders project</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1622462400">- Update to 6.1.8:
  * ssh config fixes
- Add et-limits.patch:
  Fix build by patching in-tree sentry.
  See https://github.com/MisterTea/EternalTerminal/issues/412
  and https://github.com/getsentry/sentry-native/issues/501</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1636027200">- Update to 6.1.9:
  * Security &amp; Compatibility fixes</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1642075200">- Update to 6.1.11:
  * Compile fixes for later versions of gcc
- Remove et-limits.patch: upstreamed</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1651752000">- Update to 6.2.0:
  * Several security and stability improvements.
  * CVE-2022-24949 [bsc#1202435]
  * CVE-2022-24950 [bsc#1202434]
  * CVE-2022-24951 [bsc#1202433]
  * CVE-2022-24952 [bsc#1202432]
- Add EternalTerminal-6.2.0-return.patch
  See https://github.com/MisterTea/EternalTerminal/pull/518
- Add EternalTerminal-6.2.0-optional.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1651838400">- Update to 6.2.1:
  * Fix build issues
- Remove upstreamed patches:
  * EternalTerminal-6.2.0-return.patch
  * EternalTerminal-6.2.0-optional.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1660824000">- Require gcc-c++ instead of gcc12-c++ in most cases
  This will be gcc12-c++ on TW by default
  In Leap 15.3/15.4 hard-require gcc10-c++ since the build fails with
  older versions</changelog>
</package>
<package pkgid="9e3954c3726ee9932eecc2eace8e98a03c77c16ef74cdab9ed41ff7a58a82c6b" name="EternalTerminal" arch="x86_64">
  <version epoch="0" ver="6.2.1" rel="bp154.2.3.1"/>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1581940800">- Update to 6.0.6:
  * Generate passkeys on server (#280)</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1583323200">- Update to 6.0.7:
  * Add Match Host support to ssh config</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1593000000">- Build with DISABLE_CRASH_LOG=ON to prevent segfault upon abort
  See https://github.com/MisterTea/EternalTerminal/issues/324</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1596110400">- Update to 6.0.8:
  * TSAN/ASAN fixes
  * Parse named socket port forwards (#293)
  * Fix input for forward tunnels (#319)
  * Revert back to write/read instead of send/recv on unix (#323, #322)
  * Handle SIGINT manually (#333, #324)
- Build with DISABLE_CRASH_LOG=OFF since SIGINT is now not handled
  by easylogging++ anymore, thus ctrl+c won't lead to crash</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1596196800">- Update to 6.0.9:
  * TSAN fixes
  * Pass errno correctly from ::read</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1596456000">- Update to 6.0.10:
  * Fix --help and --version flags</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1596456001">- Update to 6.0.11:
  * Fix version number</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1605787200">- Update to 6.0.13:
  * Fix warning by systemctl (#346)
  * Import UST
  * Several documentation fixes</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1614945600">- Update to 6.1.0:
  * Build using vcpkg
  * Monitor crashes
  * Fix some race conditions
  * Add --ssh-option argument for passing arguments to ssh
  * Android support</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1615204800">- Update to 6.1.3:
  * Fixes for various OSes and build systems
  * Allow older cmake versions on non-windows platforms
  * Fix for older cmake versions</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1615723200">- Update to 6.1.4:
  * Add stack trace on unhandled exception</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1617796800">- Update to 6.1.5:
  * Fixes for various OSes
  * Update sentry version</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1617796801">- Update to 6.1.6:
  * Fix crash on exit.
  * Fix ARM build.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1617796802">- Update to 6.1.7:
  * Fix race condition in connection test
  * Reduce debug object size
  * Move deployment scripts to deployment branch
  * Do not install files from PlatformFolders project</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1622462400">- Update to 6.1.8:
  * ssh config fixes
- Add et-limits.patch:
  Fix build by patching in-tree sentry.
  See https://github.com/MisterTea/EternalTerminal/issues/412
  and https://github.com/getsentry/sentry-native/issues/501</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1636027200">- Update to 6.1.9:
  * Security &amp; Compatibility fixes</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1642075200">- Update to 6.1.11:
  * Compile fixes for later versions of gcc
- Remove et-limits.patch: upstreamed</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1651752000">- Update to 6.2.0:
  * Several security and stability improvements.
  * CVE-2022-24949 [bsc#1202435]
  * CVE-2022-24950 [bsc#1202434]
  * CVE-2022-24951 [bsc#1202433]
  * CVE-2022-24952 [bsc#1202432]
- Add EternalTerminal-6.2.0-return.patch
  See https://github.com/MisterTea/EternalTerminal/pull/518
- Add EternalTerminal-6.2.0-optional.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1651838400">- Update to 6.2.1:
  * Fix build issues
- Remove upstreamed patches:
  * EternalTerminal-6.2.0-return.patch
  * EternalTerminal-6.2.0-optional.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1660824000">- Require gcc-c++ instead of gcc12-c++ in most cases
  This will be gcc12-c++ on TW by default
  In Leap 15.3/15.4 hard-require gcc10-c++ since the build fails with
  older versions</changelog>
</package>
<package pkgid="cda94446e5645e67094885a73a11478c62d077b8f732f4bf92ee350690730afd" name="EternalTerminal" arch="aarch64">
  <version epoch="0" ver="6.2.4" rel="bp154.2.6.1"/>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1593000000">- Build with DISABLE_CRASH_LOG=ON to prevent segfault upon abort
  See https://github.com/MisterTea/EternalTerminal/issues/324</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1596110400">- Update to 6.0.8:
  * TSAN/ASAN fixes
  * Parse named socket port forwards (#293)
  * Fix input for forward tunnels (#319)
  * Revert back to write/read instead of send/recv on unix (#323, #322)
  * Handle SIGINT manually (#333, #324)
- Build with DISABLE_CRASH_LOG=OFF since SIGINT is now not handled
  by easylogging++ anymore, thus ctrl+c won't lead to crash</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1596196800">- Update to 6.0.9:
  * TSAN fixes
  * Pass errno correctly from ::read</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1596456000">- Update to 6.0.10:
  * Fix --help and --version flags</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1596456001">- Update to 6.0.11:
  * Fix version number</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1605787200">- Update to 6.0.13:
  * Fix warning by systemctl (#346)
  * Import UST
  * Several documentation fixes</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1614945600">- Update to 6.1.0:
  * Build using vcpkg
  * Monitor crashes
  * Fix some race conditions
  * Add --ssh-option argument for passing arguments to ssh
  * Android support</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1615204800">- Update to 6.1.3:
  * Fixes for various OSes and build systems
  * Allow older cmake versions on non-windows platforms
  * Fix for older cmake versions</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1615723200">- Update to 6.1.4:
  * Add stack trace on unhandled exception</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1617796800">- Update to 6.1.5:
  * Fixes for various OSes
  * Update sentry version</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1617796801">- Update to 6.1.6:
  * Fix crash on exit.
  * Fix ARM build.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1617796802">- Update to 6.1.7:
  * Fix race condition in connection test
  * Reduce debug object size
  * Move deployment scripts to deployment branch
  * Do not install files from PlatformFolders project</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1622462400">- Update to 6.1.8:
  * ssh config fixes
- Add et-limits.patch:
  Fix build by patching in-tree sentry.
  See https://github.com/MisterTea/EternalTerminal/issues/412
  and https://github.com/getsentry/sentry-native/issues/501</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1636027200">- Update to 6.1.9:
  * Security &amp; Compatibility fixes</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1642075200">- Update to 6.1.11:
  * Compile fixes for later versions of gcc
- Remove et-limits.patch: upstreamed</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1651752000">- Update to 6.2.0:
  * Several security and stability improvements.
  * CVE-2022-24949 [bsc#1202435]
  * CVE-2022-24950 [bsc#1202434]
  * CVE-2022-24951 [bsc#1202433]
  * CVE-2022-24952 [bsc#1202432]
- Add EternalTerminal-6.2.0-return.patch
  See https://github.com/MisterTea/EternalTerminal/pull/518
- Add EternalTerminal-6.2.0-optional.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1651838400">- Update to 6.2.1:
  * Fix build issues
- Remove upstreamed patches:
  * EternalTerminal-6.2.0-return.patch
  * EternalTerminal-6.2.0-optional.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1660824000">- Require gcc-c++ instead of gcc12-c++ in most cases
  This will be gcc12-c++ on TW by default
  In Leap 15.3/15.4 hard-require gcc10-c++ since the build fails with
  older versions</changelog>
  <changelog author="Max Lin &lt;mlin@suse.com&gt;" date="1667822400">- Hard buildrequires gcc10-c++ in Leap 15.5</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1674216000">- Update to 6.2.4:
  * CVE-2022-48257, CVE-2022-48258 remedied
  * fix readme regarding port forwarding #522
  * Fix test failures that started appearing in CI #526
  * Add documentation for the EternalTerminal protocol #523
  * ssh-et: apply upstream updates #527
  * docs: write gpg key to trusted.gpg.d for APT #530
  * Support for ipv6 addresses (with or without port specified) #536
  * ipv6 abbreviated address support #539
  * Fix launchd plist config to remove daemonization. #540
  * Explicitly set verbosity from cxxopts value. #542
  * Remove daemon flag in systemd config #549
  * Format all source with clang-format. #552
  * Fix tunnel parsing exception handling. #550
  * Fix SIGTERM behavior that causes systemd control of etserver to timeout. #554
  * Parse telemetry ini config as boolean and make telemetry opt-in. #553
  * Logfile open mode and permission plus location configurability. #556
- bsc#1207123 (CVE-2022-48257) Fix predictable logfile names in /tmp
- bsc#1207124 (CVE-2022-48258) Fix etserver and etclient have world-readable logfiles
- Note: Upstream released 6.2.2 with fixes then 6.2.4 and later removed 6.2.2
  and redid 6.2.4</changelog>
</package>
<package pkgid="6532c56226288e4d66c7fba313bbcb65f5bb8858896a4f9d2b3ddc805784554c" name="EternalTerminal" arch="src">
  <version epoch="0" ver="6.2.4" rel="bp154.2.6.1"/>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1593000000">- Build with DISABLE_CRASH_LOG=ON to prevent segfault upon abort
  See https://github.com/MisterTea/EternalTerminal/issues/324</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1596110400">- Update to 6.0.8:
  * TSAN/ASAN fixes
  * Parse named socket port forwards (#293)
  * Fix input for forward tunnels (#319)
  * Revert back to write/read instead of send/recv on unix (#323, #322)
  * Handle SIGINT manually (#333, #324)
- Build with DISABLE_CRASH_LOG=OFF since SIGINT is now not handled
  by easylogging++ anymore, thus ctrl+c won't lead to crash</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1596196800">- Update to 6.0.9:
  * TSAN fixes
  * Pass errno correctly from ::read</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1596456000">- Update to 6.0.10:
  * Fix --help and --version flags</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1596456001">- Update to 6.0.11:
  * Fix version number</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1605787200">- Update to 6.0.13:
  * Fix warning by systemctl (#346)
  * Import UST
  * Several documentation fixes</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1614945600">- Update to 6.1.0:
  * Build using vcpkg
  * Monitor crashes
  * Fix some race conditions
  * Add --ssh-option argument for passing arguments to ssh
  * Android support</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1615204800">- Update to 6.1.3:
  * Fixes for various OSes and build systems
  * Allow older cmake versions on non-windows platforms
  * Fix for older cmake versions</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1615723200">- Update to 6.1.4:
  * Add stack trace on unhandled exception</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1617796800">- Update to 6.1.5:
  * Fixes for various OSes
  * Update sentry version</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1617796801">- Update to 6.1.6:
  * Fix crash on exit.
  * Fix ARM build.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1617796802">- Update to 6.1.7:
  * Fix race condition in connection test
  * Reduce debug object size
  * Move deployment scripts to deployment branch
  * Do not install files from PlatformFolders project</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1622462400">- Update to 6.1.8:
  * ssh config fixes
- Add et-limits.patch:
  Fix build by patching in-tree sentry.
  See https://github.com/MisterTea/EternalTerminal/issues/412
  and https://github.com/getsentry/sentry-native/issues/501</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1636027200">- Update to 6.1.9:
  * Security &amp; Compatibility fixes</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1642075200">- Update to 6.1.11:
  * Compile fixes for later versions of gcc
- Remove et-limits.patch: upstreamed</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1651752000">- Update to 6.2.0:
  * Several security and stability improvements.
  * CVE-2022-24949 [bsc#1202435]
  * CVE-2022-24950 [bsc#1202434]
  * CVE-2022-24951 [bsc#1202433]
  * CVE-2022-24952 [bsc#1202432]
- Add EternalTerminal-6.2.0-return.patch
  See https://github.com/MisterTea/EternalTerminal/pull/518
- Add EternalTerminal-6.2.0-optional.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1651838400">- Update to 6.2.1:
  * Fix build issues
- Remove upstreamed patches:
  * EternalTerminal-6.2.0-return.patch
  * EternalTerminal-6.2.0-optional.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1660824000">- Require gcc-c++ instead of gcc12-c++ in most cases
  This will be gcc12-c++ on TW by default
  In Leap 15.3/15.4 hard-require gcc10-c++ since the build fails with
  older versions</changelog>
  <changelog author="Max Lin &lt;mlin@suse.com&gt;" date="1667822400">- Hard buildrequires gcc10-c++ in Leap 15.5</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1674216000">- Update to 6.2.4:
  * CVE-2022-48257, CVE-2022-48258 remedied
  * fix readme regarding port forwarding #522
  * Fix test failures that started appearing in CI #526
  * Add documentation for the EternalTerminal protocol #523
  * ssh-et: apply upstream updates #527
  * docs: write gpg key to trusted.gpg.d for APT #530
  * Support for ipv6 addresses (with or without port specified) #536
  * ipv6 abbreviated address support #539
  * Fix launchd plist config to remove daemonization. #540
  * Explicitly set verbosity from cxxopts value. #542
  * Remove daemon flag in systemd config #549
  * Format all source with clang-format. #552
  * Fix tunnel parsing exception handling. #550
  * Fix SIGTERM behavior that causes systemd control of etserver to timeout. #554
  * Parse telemetry ini config as boolean and make telemetry opt-in. #553
  * Logfile open mode and permission plus location configurability. #556
- bsc#1207123 (CVE-2022-48257) Fix predictable logfile names in /tmp
- bsc#1207124 (CVE-2022-48258) Fix etserver and etclient have world-readable logfiles
- Note: Upstream released 6.2.2 with fixes then 6.2.4 and later removed 6.2.2
  and redid 6.2.4</changelog>
</package>
<package pkgid="1215bba26044e9a376d43c911fea1ea7f7d2c346fbde736301328d578366324b" name="EternalTerminal" arch="x86_64">
  <version epoch="0" ver="6.2.4" rel="bp154.2.6.1"/>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1593000000">- Build with DISABLE_CRASH_LOG=ON to prevent segfault upon abort
  See https://github.com/MisterTea/EternalTerminal/issues/324</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1596110400">- Update to 6.0.8:
  * TSAN/ASAN fixes
  * Parse named socket port forwards (#293)
  * Fix input for forward tunnels (#319)
  * Revert back to write/read instead of send/recv on unix (#323, #322)
  * Handle SIGINT manually (#333, #324)
- Build with DISABLE_CRASH_LOG=OFF since SIGINT is now not handled
  by easylogging++ anymore, thus ctrl+c won't lead to crash</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1596196800">- Update to 6.0.9:
  * TSAN fixes
  * Pass errno correctly from ::read</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1596456000">- Update to 6.0.10:
  * Fix --help and --version flags</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1596456001">- Update to 6.0.11:
  * Fix version number</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1605787200">- Update to 6.0.13:
  * Fix warning by systemctl (#346)
  * Import UST
  * Several documentation fixes</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1614945600">- Update to 6.1.0:
  * Build using vcpkg
  * Monitor crashes
  * Fix some race conditions
  * Add --ssh-option argument for passing arguments to ssh
  * Android support</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1615204800">- Update to 6.1.3:
  * Fixes for various OSes and build systems
  * Allow older cmake versions on non-windows platforms
  * Fix for older cmake versions</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1615723200">- Update to 6.1.4:
  * Add stack trace on unhandled exception</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1617796800">- Update to 6.1.5:
  * Fixes for various OSes
  * Update sentry version</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1617796801">- Update to 6.1.6:
  * Fix crash on exit.
  * Fix ARM build.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1617796802">- Update to 6.1.7:
  * Fix race condition in connection test
  * Reduce debug object size
  * Move deployment scripts to deployment branch
  * Do not install files from PlatformFolders project</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1622462400">- Update to 6.1.8:
  * ssh config fixes
- Add et-limits.patch:
  Fix build by patching in-tree sentry.
  See https://github.com/MisterTea/EternalTerminal/issues/412
  and https://github.com/getsentry/sentry-native/issues/501</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1636027200">- Update to 6.1.9:
  * Security &amp; Compatibility fixes</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1642075200">- Update to 6.1.11:
  * Compile fixes for later versions of gcc
- Remove et-limits.patch: upstreamed</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1651752000">- Update to 6.2.0:
  * Several security and stability improvements.
  * CVE-2022-24949 [bsc#1202435]
  * CVE-2022-24950 [bsc#1202434]
  * CVE-2022-24951 [bsc#1202433]
  * CVE-2022-24952 [bsc#1202432]
- Add EternalTerminal-6.2.0-return.patch
  See https://github.com/MisterTea/EternalTerminal/pull/518
- Add EternalTerminal-6.2.0-optional.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1651838400">- Update to 6.2.1:
  * Fix build issues
- Remove upstreamed patches:
  * EternalTerminal-6.2.0-return.patch
  * EternalTerminal-6.2.0-optional.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1660824000">- Require gcc-c++ instead of gcc12-c++ in most cases
  This will be gcc12-c++ on TW by default
  In Leap 15.3/15.4 hard-require gcc10-c++ since the build fails with
  older versions</changelog>
  <changelog author="Max Lin &lt;mlin@suse.com&gt;" date="1667822400">- Hard buildrequires gcc10-c++ in Leap 15.5</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1674216000">- Update to 6.2.4:
  * CVE-2022-48257, CVE-2022-48258 remedied
  * fix readme regarding port forwarding #522
  * Fix test failures that started appearing in CI #526
  * Add documentation for the EternalTerminal protocol #523
  * ssh-et: apply upstream updates #527
  * docs: write gpg key to trusted.gpg.d for APT #530
  * Support for ipv6 addresses (with or without port specified) #536
  * ipv6 abbreviated address support #539
  * Fix launchd plist config to remove daemonization. #540
  * Explicitly set verbosity from cxxopts value. #542
  * Remove daemon flag in systemd config #549
  * Format all source with clang-format. #552
  * Fix tunnel parsing exception handling. #550
  * Fix SIGTERM behavior that causes systemd control of etserver to timeout. #554
  * Parse telemetry ini config as boolean and make telemetry opt-in. #553
  * Logfile open mode and permission plus location configurability. #556
- bsc#1207123 (CVE-2022-48257) Fix predictable logfile names in /tmp
- bsc#1207124 (CVE-2022-48258) Fix etserver and etclient have world-readable logfiles
- Note: Upstream released 6.2.2 with fixes then 6.2.4 and later removed 6.2.2
  and redid 6.2.4</changelog>
</package>
<package pkgid="d94e14150658b9ea76ccba71b4c8cd9f1088faa7ee361563b8630f008d64eb56" name="FreeCAD" arch="aarch64">
  <version epoch="0" ver="0.20" rel="bp154.2.3.1"/>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1584187200">- Fix build with Python 3.8:
  Add update-swigpyrunin-for-python-3.8.patch
- Spec file cleanup
  * Drop xpm FreeCAD icon
  * Install PNGs/SVG icons in correct paths
  * Remove obsolete update_mime_database calls in %post
  * Remove obsolete conditionals for Leap 42.x</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1584273600">- Fix runtime errors with Python 3.8:
  * 0001-fem-use-time.process_time-instead-of-removed-time.cl.patch
- Fix last python2 she-bang remainders, fix imports:
  * fix_unittestgui_tkinter_py3.patch
- Remove unnecessary opencv build dependency
- update to current 0.18 branch:
  * Fem: fix segmentation fault when opening contraint transform
    panel. Fix Python code
  * Part: the number of domains returned by TopoShape::getDomains
    must match with number of faces
  * apply fixes from master when building with occt 7.4
    + Drop 0002-fix-compile.patch</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1584360000">- More spec file cleanup, removed duplicate files
- Use upstream provided desktop files, mimeinfo, etc</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1584532800">- Allow install with lowercase package name: zypper install freecad</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1591531200">- Fix build with Qt 5.15, add fix_qt_5.15_build.patch</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1595505600">- temporary disable FEM module until VTK 9 support arrives</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1600516800">- Fix build with boost 1.73 and later, add
  0001-boost-1.73.0-The-practice-of-declaring-the-Bind-plac.patch
- Cleanup some build dependencies.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1606564800">- Update to version 0.18.5:
  * Fix addon manager to adapt to GitHub infrastructure changes.
  * Add 0001-Fix-ODR-violation-correct-Ui_TaskSketcherGeneral-nam.patch
  * Rebase 0001-boost-1.73.0-The-practice-of-declaring-the-Bind-plac.patch
- Reenable workbenches dependent on Mesher (e.g. Path, FEM):
  * Add fix-smesh-vtk9.patch</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1609761600">- Fix build with latest GCC, add 0001-Gui-skip-ci-fix-Wodr.patch
- Force-enable C++17, Boost 1.75 requires C++14 at least</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1614081600">- Fix build and tests with OCCT 7.5, add
  0001-Part-Import-skip-ci-disable-use-of-Message_ProgressI.patch
  0001-import-Hotfix-for-build-failure-from-bad-debug-code.patch
  0001-partdesign-fix-failing-tapered-hole-test.patch
- Add 0001-add-missing-std-namespace-to-build-on-Debian-10.patch
- Cleanup specfile:
  * Use system PyCXX, drop unused libboost_python3
  * Drop some unused dependencies
  * Remove ChangeLog.txt, not updated since version 0.14</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1616414400">- Update to version 0.19.1:
  * Lots of new features, bug fixes and improvements, see
    https://wiki.freecadweb.org/Release_notes_0.19
- Drop upstream patches:
  * 0001-Fix-build-with-pyside2-shiboken2-5.12.1.patch
  * 0003-qt-5.14.patch
  * update-swigpyrunin-for-python-3.8.patch
  * 0001-fem-use-time.process_time-instead-of-removed-time.cl.patch
  * fix_qt_5.15_build.patch
  * 0001-boost-1.73.0-The-practice-of-declaring-the-Bind-plac.patch
  * 0001-Fix-ODR-violation-correct-Ui_TaskSketcherGeneral-nam.patch
  * 0001-Gui-skip-ci-fix-Wodr.patch
  * 0001-Part-Import-skip-ci-disable-use-of-Message_ProgressI.patch
  * 0001-import-Hotfix-for-build-failure-from-bad-debug-code.patch
  * 0001-partdesign-fix-failing-tapered-hole-test.patch
  * 0001-add-missing-std-namespace-to-build-on-Debian-10.patch
- Rebase fix-smesh-vtk9.patch</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1619524800">- Update to version 0.19.2:
  * Various bug fixes, no changelog provided</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1624795200">- Replace the QtWebKit build dependency with QtWebEngine.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1642161600">- Update to version 0.19.3:
  * Lots of bugfixes, for details see
    https://github.com/FreeCAD/FreeCAD/releases/tag/0.19.3</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1644148800">- Pre-generate parsetab.py for ply.yacc in OpenSCAD and FEM Mods:
  https://tracker.freecadweb.org/view.php?id=4840</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1646308800">- Update to version 0.19.4:
  * Lots of bugfixes, for details see
    https://github.com/FreeCAD/FreeCAD/releases/tag/0.19.4</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1646395200">- Add some unit test fixes:
  * 0001-Test-remove-not-needed-u-before-py3-unicode-string.patch
  * 0001-Test-fix-exception-handling-in-tests-for-units.patch
  * 0001-Test-Provide-more-useful-information-when-unit-trans.patch
  * 0002-Base-Fix-wrong-character-encoding-for-micro-siemens.patch</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1646913600">- Use current Coin4 instead of Coin (3).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1647432000">- Remove VTK::Java/java-devel dependency, add
  0001-improve-search-for-VTK-9.patch</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1655208000">- Update to version 0.20:
  * Lots of bugfixes and new features, for details see
    https://wiki.freecad.org/Release_notes_0.20 and
    https://github.com/FreeCAD/FreeCAD/releases/tag/0.20
- Drop upstream patches:
  * fix_unittestgui_tkinter_py3.patch
  * fix-smesh-vtk9.patch
  * 0001-Test-remove-not-needed-u-before-py3-unicode-string.patch
  * 0001-Test-fix-exception-handling-in-tests-for-units.patch
  * 0001-Test-Provide-more-useful-information-when-unit-trans.patch
  * 0002-Base-Fix-wrong-character-encoding-for-micro-siemens.patch
  * 0001-improve-search-for-VTK-9.patch
- Add 0001-Gui-Quarter-Add-missing-OpenGL-includes.patch
- Add 0001-Avoid-catching-SIGSEGV-defer-to-system-services.patch</changelog>
</package>
<package pkgid="94306a36782a2294a6ddf6f2861a68bbe0ab6dddc5f835863e8182c6c51aa03f" name="FreeCAD" arch="src">
  <version epoch="0" ver="0.20" rel="bp154.2.3.1"/>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1584187200">- Fix build with Python 3.8:
  Add update-swigpyrunin-for-python-3.8.patch
- Spec file cleanup
  * Drop xpm FreeCAD icon
  * Install PNGs/SVG icons in correct paths
  * Remove obsolete update_mime_database calls in %post
  * Remove obsolete conditionals for Leap 42.x</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1584273600">- Fix runtime errors with Python 3.8:
  * 0001-fem-use-time.process_time-instead-of-removed-time.cl.patch
- Fix last python2 she-bang remainders, fix imports:
  * fix_unittestgui_tkinter_py3.patch
- Remove unnecessary opencv build dependency
- update to current 0.18 branch:
  * Fem: fix segmentation fault when opening contraint transform
    panel. Fix Python code
  * Part: the number of domains returned by TopoShape::getDomains
    must match with number of faces
  * apply fixes from master when building with occt 7.4
    + Drop 0002-fix-compile.patch</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1584360000">- More spec file cleanup, removed duplicate files
- Use upstream provided desktop files, mimeinfo, etc</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1584532800">- Allow install with lowercase package name: zypper install freecad</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1591531200">- Fix build with Qt 5.15, add fix_qt_5.15_build.patch</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1595505600">- temporary disable FEM module until VTK 9 support arrives</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1600516800">- Fix build with boost 1.73 and later, add
  0001-boost-1.73.0-The-practice-of-declaring-the-Bind-plac.patch
- Cleanup some build dependencies.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1606564800">- Update to version 0.18.5:
  * Fix addon manager to adapt to GitHub infrastructure changes.
  * Add 0001-Fix-ODR-violation-correct-Ui_TaskSketcherGeneral-nam.patch
  * Rebase 0001-boost-1.73.0-The-practice-of-declaring-the-Bind-plac.patch
- Reenable workbenches dependent on Mesher (e.g. Path, FEM):
  * Add fix-smesh-vtk9.patch</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1609761600">- Fix build with latest GCC, add 0001-Gui-skip-ci-fix-Wodr.patch
- Force-enable C++17, Boost 1.75 requires C++14 at least</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1614081600">- Fix build and tests with OCCT 7.5, add
  0001-Part-Import-skip-ci-disable-use-of-Message_ProgressI.patch
  0001-import-Hotfix-for-build-failure-from-bad-debug-code.patch
  0001-partdesign-fix-failing-tapered-hole-test.patch
- Add 0001-add-missing-std-namespace-to-build-on-Debian-10.patch
- Cleanup specfile:
  * Use system PyCXX, drop unused libboost_python3
  * Drop some unused dependencies
  * Remove ChangeLog.txt, not updated since version 0.14</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1616414400">- Update to version 0.19.1:
  * Lots of new features, bug fixes and improvements, see
    https://wiki.freecadweb.org/Release_notes_0.19
- Drop upstream patches:
  * 0001-Fix-build-with-pyside2-shiboken2-5.12.1.patch
  * 0003-qt-5.14.patch
  * update-swigpyrunin-for-python-3.8.patch
  * 0001-fem-use-time.process_time-instead-of-removed-time.cl.patch
  * fix_qt_5.15_build.patch
  * 0001-boost-1.73.0-The-practice-of-declaring-the-Bind-plac.patch
  * 0001-Fix-ODR-violation-correct-Ui_TaskSketcherGeneral-nam.patch
  * 0001-Gui-skip-ci-fix-Wodr.patch
  * 0001-Part-Import-skip-ci-disable-use-of-Message_ProgressI.patch
  * 0001-import-Hotfix-for-build-failure-from-bad-debug-code.patch
  * 0001-partdesign-fix-failing-tapered-hole-test.patch
  * 0001-add-missing-std-namespace-to-build-on-Debian-10.patch
- Rebase fix-smesh-vtk9.patch</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1619524800">- Update to version 0.19.2:
  * Various bug fixes, no changelog provided</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1624795200">- Replace the QtWebKit build dependency with QtWebEngine.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1642161600">- Update to version 0.19.3:
  * Lots of bugfixes, for details see
    https://github.com/FreeCAD/FreeCAD/releases/tag/0.19.3</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1644148800">- Pre-generate parsetab.py for ply.yacc in OpenSCAD and FEM Mods:
  https://tracker.freecadweb.org/view.php?id=4840</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1646308800">- Update to version 0.19.4:
  * Lots of bugfixes, for details see
    https://github.com/FreeCAD/FreeCAD/releases/tag/0.19.4</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1646395200">- Add some unit test fixes:
  * 0001-Test-remove-not-needed-u-before-py3-unicode-string.patch
  * 0001-Test-fix-exception-handling-in-tests-for-units.patch
  * 0001-Test-Provide-more-useful-information-when-unit-trans.patch
  * 0002-Base-Fix-wrong-character-encoding-for-micro-siemens.patch</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1646913600">- Use current Coin4 instead of Coin (3).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1647432000">- Remove VTK::Java/java-devel dependency, add
  0001-improve-search-for-VTK-9.patch</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1655208000">- Update to version 0.20:
  * Lots of bugfixes and new features, for details see
    https://wiki.freecad.org/Release_notes_0.20 and
    https://github.com/FreeCAD/FreeCAD/releases/tag/0.20
- Drop upstream patches:
  * fix_unittestgui_tkinter_py3.patch
  * fix-smesh-vtk9.patch
  * 0001-Test-remove-not-needed-u-before-py3-unicode-string.patch
  * 0001-Test-fix-exception-handling-in-tests-for-units.patch
  * 0001-Test-Provide-more-useful-information-when-unit-trans.patch
  * 0002-Base-Fix-wrong-character-encoding-for-micro-siemens.patch
  * 0001-improve-search-for-VTK-9.patch
- Add 0001-Gui-Quarter-Add-missing-OpenGL-includes.patch
- Add 0001-Avoid-catching-SIGSEGV-defer-to-system-services.patch</changelog>
</package>
<package pkgid="8f08021fc338b8ef80c6b97cc19ff61317346907e84c89d01e906cfa706008d6" name="FreeCAD" arch="x86_64">
  <version epoch="0" ver="0.20" rel="bp154.2.3.1"/>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1584187200">- Fix build with Python 3.8:
  Add update-swigpyrunin-for-python-3.8.patch
- Spec file cleanup
  * Drop xpm FreeCAD icon
  * Install PNGs/SVG icons in correct paths
  * Remove obsolete update_mime_database calls in %post
  * Remove obsolete conditionals for Leap 42.x</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1584273600">- Fix runtime errors with Python 3.8:
  * 0001-fem-use-time.process_time-instead-of-removed-time.cl.patch
- Fix last python2 she-bang remainders, fix imports:
  * fix_unittestgui_tkinter_py3.patch
- Remove unnecessary opencv build dependency
- update to current 0.18 branch:
  * Fem: fix segmentation fault when opening contraint transform
    panel. Fix Python code
  * Part: the number of domains returned by TopoShape::getDomains
    must match with number of faces
  * apply fixes from master when building with occt 7.4
    + Drop 0002-fix-compile.patch</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1584360000">- More spec file cleanup, removed duplicate files
- Use upstream provided desktop files, mimeinfo, etc</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1584532800">- Allow install with lowercase package name: zypper install freecad</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1591531200">- Fix build with Qt 5.15, add fix_qt_5.15_build.patch</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1595505600">- temporary disable FEM module until VTK 9 support arrives</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1600516800">- Fix build with boost 1.73 and later, add
  0001-boost-1.73.0-The-practice-of-declaring-the-Bind-plac.patch
- Cleanup some build dependencies.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1606564800">- Update to version 0.18.5:
  * Fix addon manager to adapt to GitHub infrastructure changes.
  * Add 0001-Fix-ODR-violation-correct-Ui_TaskSketcherGeneral-nam.patch
  * Rebase 0001-boost-1.73.0-The-practice-of-declaring-the-Bind-plac.patch
- Reenable workbenches dependent on Mesher (e.g. Path, FEM):
  * Add fix-smesh-vtk9.patch</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1609761600">- Fix build with latest GCC, add 0001-Gui-skip-ci-fix-Wodr.patch
- Force-enable C++17, Boost 1.75 requires C++14 at least</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1614081600">- Fix build and tests with OCCT 7.5, add
  0001-Part-Import-skip-ci-disable-use-of-Message_ProgressI.patch
  0001-import-Hotfix-for-build-failure-from-bad-debug-code.patch
  0001-partdesign-fix-failing-tapered-hole-test.patch
- Add 0001-add-missing-std-namespace-to-build-on-Debian-10.patch
- Cleanup specfile:
  * Use system PyCXX, drop unused libboost_python3
  * Drop some unused dependencies
  * Remove ChangeLog.txt, not updated since version 0.14</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1616414400">- Update to version 0.19.1:
  * Lots of new features, bug fixes and improvements, see
    https://wiki.freecadweb.org/Release_notes_0.19
- Drop upstream patches:
  * 0001-Fix-build-with-pyside2-shiboken2-5.12.1.patch
  * 0003-qt-5.14.patch
  * update-swigpyrunin-for-python-3.8.patch
  * 0001-fem-use-time.process_time-instead-of-removed-time.cl.patch
  * fix_qt_5.15_build.patch
  * 0001-boost-1.73.0-The-practice-of-declaring-the-Bind-plac.patch
  * 0001-Fix-ODR-violation-correct-Ui_TaskSketcherGeneral-nam.patch
  * 0001-Gui-skip-ci-fix-Wodr.patch
  * 0001-Part-Import-skip-ci-disable-use-of-Message_ProgressI.patch
  * 0001-import-Hotfix-for-build-failure-from-bad-debug-code.patch
  * 0001-partdesign-fix-failing-tapered-hole-test.patch
  * 0001-add-missing-std-namespace-to-build-on-Debian-10.patch
- Rebase fix-smesh-vtk9.patch</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1619524800">- Update to version 0.19.2:
  * Various bug fixes, no changelog provided</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1624795200">- Replace the QtWebKit build dependency with QtWebEngine.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1642161600">- Update to version 0.19.3:
  * Lots of bugfixes, for details see
    https://github.com/FreeCAD/FreeCAD/releases/tag/0.19.3</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1644148800">- Pre-generate parsetab.py for ply.yacc in OpenSCAD and FEM Mods:
  https://tracker.freecadweb.org/view.php?id=4840</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1646308800">- Update to version 0.19.4:
  * Lots of bugfixes, for details see
    https://github.com/FreeCAD/FreeCAD/releases/tag/0.19.4</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1646395200">- Add some unit test fixes:
  * 0001-Test-remove-not-needed-u-before-py3-unicode-string.patch
  * 0001-Test-fix-exception-handling-in-tests-for-units.patch
  * 0001-Test-Provide-more-useful-information-when-unit-trans.patch
  * 0002-Base-Fix-wrong-character-encoding-for-micro-siemens.patch</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1646913600">- Use current Coin4 instead of Coin (3).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1647432000">- Remove VTK::Java/java-devel dependency, add
  0001-improve-search-for-VTK-9.patch</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1655208000">- Update to version 0.20:
  * Lots of bugfixes and new features, for details see
    https://wiki.freecad.org/Release_notes_0.20 and
    https://github.com/FreeCAD/FreeCAD/releases/tag/0.20
- Drop upstream patches:
  * fix_unittestgui_tkinter_py3.patch
  * fix-smesh-vtk9.patch
  * 0001-Test-remove-not-needed-u-before-py3-unicode-string.patch
  * 0001-Test-fix-exception-handling-in-tests-for-units.patch
  * 0001-Test-Provide-more-useful-information-when-unit-trans.patch
  * 0002-Base-Fix-wrong-character-encoding-for-micro-siemens.patch
  * 0001-improve-search-for-VTK-9.patch
- Add 0001-Gui-Quarter-Add-missing-OpenGL-includes.patch
- Add 0001-Avoid-catching-SIGSEGV-defer-to-system-services.patch</changelog>
</package>
<package pkgid="4d0e2335354130e26a1279625c934212d4d417db3b5aac162b63c934ae54422e" name="PTL" arch="src">
  <version epoch="0" ver="2.3.3" rel="bp154.2.1"/>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1613217600">- Initial package.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1613217601">- Ensure neutrality of description; mention base thread library
  used.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1638446400">- Update to version 2.2.0:
  * New/improved support for initialization and finalization
    routines in ThreadPool.
- Changes from version 2.1.0:
  * Fix C++20 warnings from GCC 11.2.0.
  * Removed timemory.
  * Springclean CMake scripts and developer/client build/use
    interfaces.
- Changes from version 2.0.0:
  * Fixed memory leak issues in VUserTaskQueue.
  * removed VTaskGroup.
  * merged TaskGroup and TBBTaskGroup:
  - TBBTaskGroup is just an alias now.
  - TaskGroup will handle determine whether ThreadPool is TBB
    and submit tasks accordingly.
  * use tbb::task_arena in order to enable master/worker paradigm:
    full support for ThreadPool::execute_on_all_threads,
    ThreadPool::execute_on_specific_threads in TBB mode.
  * renamed many functions/fields to "main" instead of "master".
  * VTask no longer holds a pointer to task group: this was
    causing a data-race issue.
  * cmake option PTL_USE_LOCKS to enable mutex locking in
    scheduler instead of lock-free scheme.
  * removed unused numActThreads.
  * wait() member function for tasks.
- Add PTL-incorrect-pthread-requires-in-pkgconfig.patch to drop
  an incorrect Requires on pthread in the pkgconfig file that
  causes pkgconfig to automatically add unresolvable Requires to
  the %{name}-devel rpm package [gh#jrmadsen/PTL#21].
- Update location of packaged cmake and pkgconfig files in keeping
  with upstream fixes.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1638532800">- Update to version 2.2.1:
  * ThreadPool.h: fix typo by @stephanlachnit
    [gh#jrmadsen/PTL#20].
  * pkgconfig: Use Libs.private for "-pthread" flag by @badshah400
    [gh#jrmadsen/PTL#22].
- Drop PTL-incorrect-pthread-requires-in-pkgconfig.patch:
  incorporated upstream.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1638619200">- Update to version 2.3.0:
  * ThreadPool::Config [gh#jrmadsen/PTL#23].
  * Formatting updates [gh#jrmadsen/PTL#24].</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1642334400">- Update to version 2.3.1:
  * Threading: Fix GetNumberOfPhysicalCpus, it should never return
    zero [gh#jrmadsen/PTL#26].</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1652443200">- Update to version 2.3.3:
  * Fixed message which did not honor verbosity level.
- Change from version 2.3.2:
  * Support for BUILD_OBJECT_LIBS.</changelog>
</package>
<package pkgid="89f5d1b4148926d598f7db64d6ff3da550cb3adc449714a684311381c16a5773" name="PlayOnLinux" arch="noarch">
  <version epoch="0" ver="4.4.0" rel="bp154.2.3.1"/>
  <changelog author="ecsos@opensuse.org" date="1425124800">- update to 4.2.6
  - Use $ POL_TERM more Consistently, allow POL_TERM global
    configuration override. Beware, the carrier must terminal -T
    and -e options, so gnome-terminal Does not Qualify
    (gnome-terminal.wrapper Does though)
  - Add a function to compute a hash of a POL_Wine_VersionSignature
    Wine Package
  - Python version string extraction hardening (# 4895)
  - POL_System_PartInfo APPROBATION thru mount filesystems point
    INSTEAD of device (Btrfs subvolumes compatibility)
  - Modify bash / document_reader to pass extra arguments Unchanged
  - Remove "skipped lines" messages When The debugger gets the
    focus back
  - POL_Shortcut: do not overwrite $ binary logging to Improve
  - mainwindow: make boxen alert child of the main window So They
    can not get lost behind --other windows
  - Prevent POL_Download_Resource clobbering $ APP_ANSWER
  - Critical error: wget throwing SSL error when Install Components
    uses wget (bug 5002)</changelog>
  <changelog author="ecsos@opensuse.org" date="1429531200">- update to 4.2.7
  * Detect and abort scripts when trying to run 64bit programs with
    32bit Wine
  * POL_DetectVideoCards: list VGA compatible controllers and
    3D controllers (#5012)
  * Add support for several other value types than REG_SZ to
    registry updating statements (#5013)
  * POL_Wine_SelectPrefix: abort if no prefix name is provided
  * Sort install scripts lists case insensitively (iTunes)
  * Fix "hash-bang" line in shortcuts so they're actually
    executable
  * Deprecate the usage of $REPERTOIRE in PlayOnLinux own code
  * Translate remaining french comments and identifiers in
    Bash code
  * Improve POL_Wine_PrefixDelete to remove ancillary resources
    (shortcuts, icons,...)
  * Wine versions manager: attributes tell apart used versions
    instead of unused versions; Add an extra warning when about
    to remove a version in use
  * Avoid Python detection loops
  * Display wx version found
  * Fix Settings &gt; Internet menu (#4989, thanks to rupert)
  * Workaround for Wine bug #37575 (#5023)
  * Improve find_binary function and make it public as
    POL_System_find_file
  * Add support for .lnk, .bat and .cmd files to POL_Shortcut and
    POL_SetupWindow_shortcut_creator
  * Added an icon to open the debugger from the installation wizard
    when POL_Debug_Init has been called (#4948)
  * Implement POL_SetupWindow_notice to display important messages,
    but allow the user to acknowledge them once and for all
    ("Don't remind me") (#2036)
  * POL_OpenShell (Configure &gt; Misc &gt; Open a shell) bug fixes
  * Add a warning when OpenGL autotests are missing (user support)
  * Make sure "Install non-listed application" link is always
    visible in install window
  * POL_SetupWindow_cdrom: don't suggest "*" when no CDROM has been
    found
  * Remove use of remaining os.system() calls (less overhead, less
    quoting nightmare)
  * Use os.kill() instead of shell command
  * Use of "exec" to avoid some useless extra Bash processes
  * polconfigurator interface cleanup
    (no risk of translation breakage)</changelog>
  <changelog author="ecsos@opensuse.org" date="1431518400">- update to 4.2.8
  * Feature freeze has been declared for POL 4.x, so this changelog
    should contain only bug fixes
  * checkVersionUse(): don't assume cfg files have any order
  * manual installation: component installation bugfix
    ($IFS not restored correctly)
  * POL_OpenShell: call POL_Wine_AutoSetVersionEnv in all cases,
    to set $PATH (#5062)
  * Fix consecutive shortcut creations
  * POL_Wine_SetVideoDriver bugfix, device IDs were not inserted as
    DWORDs</changelog>
  <changelog author="ecsos@opensuse.org" date="1441886400">- update to 4.2.9
  * Fixed a bug in the user agent used in urllib that would make it
    look like an attack to paranoid eyes (and filters) (#5072)
  * Try to improve general installation instructions
  * Update About's copyright years span (let's make it look like
    we're still working on the project ;) ) Many more could be
    updated though
  * POL_Download_Resource: don't test hash of missing file
    (one less spurious warning message)
  * Adding some visual clue while virtual drives are being removed
  * Fix "debbuger" typo
  * POL_System_find_file: really pick the shallowest file
  * fix "debbuger" typo
  * POL_SetupWindow_VMS: mention that the expected answer units are
    megabytes
  * Try to make instructions to rerun a program in debug mode more
    obvious (#5104)
  * Some GetRegValue fixing/hardening
  * Remove spurious .lnk files from user desktop for all
    architectures during POL_Shortcut calls (#4200)
  * Add waiting messages to POL_System_unzip &amp; friends
  * Deprecate Set_WineWindowTitle that no longer works with
    Wine 1.5.16+, and breaks Set_Desktop (#5118)
  * Fix playonlinux-pkg -b (broken since PlayOnLinux 4.0)
  * MacOS 10.11 support</changelog>
  <changelog author="ecsos@opensuse.org" date="1451822400">- update to 4.2.10
  * Silence POL_Notice_IsAck when ack_notices file doesn't exist
  * Allow Set_SoundDriver '' to disable sound
  * Add in the wineprefix configuration tab for Wine: Control panel
  * Remove in the wineprefix configuration tab for Wine: Wine
    Uninstaller
  * Add support for Wine-staging DLL redirects
    (POL_Wine_RedirectDLL, POL_Wine_DelRedirectDLL,
    POL_Wine_RedirectDLL_App, POL_Wine_DelRedirectDLL_App) (#5163)
  * Fix POL_System_cpmv log message
  * Reimplement deprecated functions POL_SetupWindow_make_shortcut
    and POL_SetupWindow_auto_shortcut using POL_Shortcut for
    consistency</changelog>
  <changelog author="jacobwinski@gmail.com" date="1452686400">- Fix wrong PlayOnLinux_4.2.10.tar.gz file
  * Current file is outdated dev version (file hash does not match)
  * Replace outdated file with the real release file version</changelog>
  <changelog author="ecsos@opensuse.org" date="1497355200">- update to 4.2.11
  * Fix POL_SetupWindow_download clobbering $FILENAME
  * Fix small typo in first use "send report" message</changelog>
  <changelog author="ecsos@opensuse.org" date="1497441600">- add patch PlayOnLinux-BrokenMiscButtons.patch
  fix issue 5522</changelog>
  <changelog author="ecsos@opensuse.org" date="1499774400">- update to 4.2.12
  * no changelog from upstream
- remove patch PlayOnLinux-BrokenMiscButtons.patch because now in
  upstream</changelog>
  <changelog author="ecsos@opensuse.org" date="1507032000">- add patch PlayOnLinux-https.patch to fix boo#1051248</changelog>
  <changelog author="kstreitova@suse.com" date="1530273600">- require p7zip-full for TW as 7z binary needed by PlayOnLinux was
  moved to this package (see bsc#899627 for more details about
  this change)</changelog>
  <changelog author="ecsos@opensuse.org" date="1543320000">- Update to 4.3.3
  * Linux: Fix HDPI support
  * Compatibility with OSX &lt; Mojave
- Changes from 4.3
  * Various fix on OSX
  * Phoenicis (POL 5) winebuild compatibility. POL 4 winebuilds
    will be deprecated.
    (See https://github.com/PhoenicisOrg/phoenicis-winebuild)</changelog>
  <changelog author="ecsos@opensuse.org" date="1545825600">- Update to 4.3.4
  * Fixed some bugs in the wineversion process
  * Begining of code cleaning and refactoring
  * Begining of using wx box sizers instead of absolute
    positioning. Most of the windows are now resizable.
    This should solve display issues on many cases: HDPI and
    alternative windows manager:
    (see https://www.playonlinux.com/en/topic-16188-Visual_error_with_KDE.html)
  * macOS: Remove XQuartz installation
  * macOS: Bundle an up-to-date wine version
  * macOS: Use native terminal instead of xterm
  * macOS: Fix localization
- Add PlayOnLinux-fix_media_dir.patch to fix variable MEDIA_DIR to
  correct location.</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1599480000">- Update to 4.4.0
  - Update Variables.py
- Switch source from playonlinux.com to github.
- Run spec-cleaner.</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1599480001">- PlayOnLinux requires now python3 and pyton3-wxPython.</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1654689600">- Remove required python2 package dbus-1-python from spec.</changelog>
</package>
<package pkgid="be034b0bc015be0aeb11772435af7a274ef474649dd0f59977df583866ec0767" name="PlayOnLinux" arch="src">
  <version epoch="0" ver="4.4.0" rel="bp154.2.3.1"/>
  <changelog author="stefan@fam-elser.de" date="1405512000">- update to 4.2.4
  * New support and feedback system, easier to use
  * Links to social networks
  * 4.2.3 regresion fixed in run_exe module</changelog>
  <changelog author="ecsos@opensuse.org" date="1410177600">- update to 4.2.5
  * Fix reading/writing values containing '=' symbol in
    configuration files (#4834)
  * Make POL_Wine_InstallFonts preserve current directory
    (regression since 4.2.3)
  * Disable "Install" component button until a component is selected
  * Compatibility with wxpython 3.0
  * Compatibility with Debian 8
  * Compatibility with Mac OS 10.10
  * Mention URL in POL_Download and POL_Download_Resource error messages
    (should help with user support)
  * Add POL_Config_Win16 to check if the host can run win16 programs,
    see http://linux-kernel.2935.n7.nabble.com/tip-x86-urgent-x86-64-modify-ldt-
    Ban-16-bit-segments-on-64-bit-kernels-td838675i120.html</changelog>
  <changelog author="nemysis@gmx.ch" date="1411646400">- Change PlayOnLinux-desktop.patch not needed more changes with
  %suse_update_desktop_file
- Change description
- Simplify installation handling
- Change playonlinux.sh</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1411819200">- Generic spec cleanup
- Fix broken playonlinux.sh</changelog>
  <changelog author="ecsos@opensuse.org" date="1425124800">- update to 4.2.6
  - Use $ POL_TERM more Consistently, allow POL_TERM global
    configuration override. Beware, the carrier must terminal -T
    and -e options, so gnome-terminal Does not Qualify
    (gnome-terminal.wrapper Does though)
  - Add a function to compute a hash of a POL_Wine_VersionSignature
    Wine Package
  - Python version string extraction hardening (# 4895)
  - POL_System_PartInfo APPROBATION thru mount filesystems point
    INSTEAD of device (Btrfs subvolumes compatibility)
  - Modify bash / document_reader to pass extra arguments Unchanged
  - Remove "skipped lines" messages When The debugger gets the
    focus back
  - POL_Shortcut: do not overwrite $ binary logging to Improve
  - mainwindow: make boxen alert child of the main window So They
    can not get lost behind --other windows
  - Prevent POL_Download_Resource clobbering $ APP_ANSWER
  - Critical error: wget throwing SSL error when Install Components
    uses wget (bug 5002)</changelog>
  <changelog author="ecsos@opensuse.org" date="1429531200">- update to 4.2.7
  * Detect and abort scripts when trying to run 64bit programs with
    32bit Wine
  * POL_DetectVideoCards: list VGA compatible controllers and
    3D controllers (#5012)
  * Add support for several other value types than REG_SZ to
    registry updating statements (#5013)
  * POL_Wine_SelectPrefix: abort if no prefix name is provided
  * Sort install scripts lists case insensitively (iTunes)
  * Fix "hash-bang" line in shortcuts so they're actually
    executable
  * Deprecate the usage of $REPERTOIRE in PlayOnLinux own code
  * Translate remaining french comments and identifiers in
    Bash code
  * Improve POL_Wine_PrefixDelete to remove ancillary resources
    (shortcuts, icons,...)
  * Wine versions manager: attributes tell apart used versions
    instead of unused versions; Add an extra warning when about
    to remove a version in use
  * Avoid Python detection loops
  * Display wx version found
  * Fix Settings &gt; Internet menu (#4989, thanks to rupert)
  * Workaround for Wine bug #37575 (#5023)
  * Improve find_binary function and make it public as
    POL_System_find_file
  * Add support for .lnk, .bat and .cmd files to POL_Shortcut and
    POL_SetupWindow_shortcut_creator
  * Added an icon to open the debugger from the installation wizard
    when POL_Debug_Init has been called (#4948)
  * Implement POL_SetupWindow_notice to display important messages,
    but allow the user to acknowledge them once and for all
    ("Don't remind me") (#2036)
  * POL_OpenShell (Configure &gt; Misc &gt; Open a shell) bug fixes
  * Add a warning when OpenGL autotests are missing (user support)
  * Make sure "Install non-listed application" link is always
    visible in install window
  * POL_SetupWindow_cdrom: don't suggest "*" when no CDROM has been
    found
  * Remove use of remaining os.system() calls (less overhead, less
    quoting nightmare)
  * Use os.kill() instead of shell command
  * Use of "exec" to avoid some useless extra Bash processes
  * polconfigurator interface cleanup
    (no risk of translation breakage)</changelog>
  <changelog author="ecsos@opensuse.org" date="1431518400">- update to 4.2.8
  * Feature freeze has been declared for POL 4.x, so this changelog
    should contain only bug fixes
  * checkVersionUse(): don't assume cfg files have any order
  * manual installation: component installation bugfix
    ($IFS not restored correctly)
  * POL_OpenShell: call POL_Wine_AutoSetVersionEnv in all cases,
    to set $PATH (#5062)
  * Fix consecutive shortcut creations
  * POL_Wine_SetVideoDriver bugfix, device IDs were not inserted as
    DWORDs</changelog>
  <changelog author="ecsos@opensuse.org" date="1441886400">- update to 4.2.9
  * Fixed a bug in the user agent used in urllib that would make it
    look like an attack to paranoid eyes (and filters) (#5072)
  * Try to improve general installation instructions
  * Update About's copyright years span (let's make it look like
    we're still working on the project ;) ) Many more could be
    updated though
  * POL_Download_Resource: don't test hash of missing file
    (one less spurious warning message)
  * Adding some visual clue while virtual drives are being removed
  * Fix "debbuger" typo
  * POL_System_find_file: really pick the shallowest file
  * fix "debbuger" typo
  * POL_SetupWindow_VMS: mention that the expected answer units are
    megabytes
  * Try to make instructions to rerun a program in debug mode more
    obvious (#5104)
  * Some GetRegValue fixing/hardening
  * Remove spurious .lnk files from user desktop for all
    architectures during POL_Shortcut calls (#4200)
  * Add waiting messages to POL_System_unzip &amp; friends
  * Deprecate Set_WineWindowTitle that no longer works with
    Wine 1.5.16+, and breaks Set_Desktop (#5118)
  * Fix playonlinux-pkg -b (broken since PlayOnLinux 4.0)
  * MacOS 10.11 support</changelog>
  <changelog author="ecsos@opensuse.org" date="1451822400">- update to 4.2.10
  * Silence POL_Notice_IsAck when ack_notices file doesn't exist
  * Allow Set_SoundDriver '' to disable sound
  * Add in the wineprefix configuration tab for Wine: Control panel
  * Remove in the wineprefix configuration tab for Wine: Wine
    Uninstaller
  * Add support for Wine-staging DLL redirects
    (POL_Wine_RedirectDLL, POL_Wine_DelRedirectDLL,
    POL_Wine_RedirectDLL_App, POL_Wine_DelRedirectDLL_App) (#5163)
  * Fix POL_System_cpmv log message
  * Reimplement deprecated functions POL_SetupWindow_make_shortcut
    and POL_SetupWindow_auto_shortcut using POL_Shortcut for
    consistency</changelog>
  <changelog author="jacobwinski@gmail.com" date="1452686400">- Fix wrong PlayOnLinux_4.2.10.tar.gz file
  * Current file is outdated dev version (file hash does not match)
  * Replace outdated file with the real release file version</changelog>
  <changelog author="ecsos@opensuse.org" date="1497355200">- update to 4.2.11
  * Fix POL_SetupWindow_download clobbering $FILENAME
  * Fix small typo in first use "send report" message</changelog>
  <changelog author="ecsos@opensuse.org" date="1497441600">- add patch PlayOnLinux-BrokenMiscButtons.patch
  fix issue 5522</changelog>
  <changelog author="ecsos@opensuse.org" date="1499774400">- update to 4.2.12
  * no changelog from upstream
- remove patch PlayOnLinux-BrokenMiscButtons.patch because now in
  upstream</changelog>
  <changelog author="ecsos@opensuse.org" date="1507032000">- add patch PlayOnLinux-https.patch to fix boo#1051248</changelog>
  <changelog author="kstreitova@suse.com" date="1530273600">- require p7zip-full for TW as 7z binary needed by PlayOnLinux was
  moved to this package (see bsc#899627 for more details about
  this change)</changelog>
  <changelog author="ecsos@opensuse.org" date="1543320000">- Update to 4.3.3
  * Linux: Fix HDPI support
  * Compatibility with OSX &lt; Mojave
- Changes from 4.3
  * Various fix on OSX
  * Phoenicis (POL 5) winebuild compatibility. POL 4 winebuilds
    will be deprecated.
    (See https://github.com/PhoenicisOrg/phoenicis-winebuild)</changelog>
  <changelog author="ecsos@opensuse.org" date="1545825600">- Update to 4.3.4
  * Fixed some bugs in the wineversion process
  * Begining of code cleaning and refactoring
  * Begining of using wx box sizers instead of absolute
    positioning. Most of the windows are now resizable.
    This should solve display issues on many cases: HDPI and
    alternative windows manager:
    (see https://www.playonlinux.com/en/topic-16188-Visual_error_with_KDE.html)
  * macOS: Remove XQuartz installation
  * macOS: Bundle an up-to-date wine version
  * macOS: Use native terminal instead of xterm
  * macOS: Fix localization
- Add PlayOnLinux-fix_media_dir.patch to fix variable MEDIA_DIR to
  correct location.</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1599480000">- Update to 4.4.0
  - Update Variables.py
- Switch source from playonlinux.com to github.
- Run spec-cleaner.</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1599480001">- PlayOnLinux requires now python3 and pyton3-wxPython.</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1654689600">- Remove required python2 package dbus-1-python from spec.</changelog>
</package>
<package pkgid="5c9ffa1f73ef7926846a9207e821c8248e35278c0125b3a5eb99faa82ef6df64" name="SoQt" arch="src">
  <version epoch="0" ver="1.6.0" rel="bp154.2.3.1"/>
  <changelog author="mvyskocil@suse.cz" date="1195387200">- First release for OpenSuse Build Service</changelog>
  <changelog author="andrea@links2linux.de" date="1222603200">- complete spec rewrite</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1288872000">- Spec file clean up
- Patches redone</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1288872001">- Fix Requires for devel package</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1288958400">- Spec file fixes based on rpmlint report</changelog>
  <changelog author="adrian@suse.de" date="1467720000">- update to version 1.5.0
- use Qt4 instead of Qt3 ....</changelog>
  <changelog author="jengelh@inai.de" date="1470225600">- Rectify RPM groups. Use smp_mflags for parallel building.
  Drop redundant export CFLAGS lines. Rename %soname to %sover
  because it did not contain the soname.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1539086400">- Cleanup spec file:
  - move soqt-default.cfg to devel package, it is only used by soqt-config
  - make doc subpackage noarch
  - use %_docdir</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1557144000">- update to current snapshot
- fix URL, old coin3d.org site has been shut down
- using cmake build system now</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1557748800">- Run spec-cleaner
- Install the license file
- Add 0001-Use-a-Find-module-to-find-older-Coin-versions.patch
  This will allow using the stable Coin package to build the SoQt
  snapshot.
- Drop fix-cmake-install.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1557748801">- Drop invalid requires of doc sub package</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1574683200">- Fix invalid Requires: in pkgconfig file, replace Qt(4) with Qt5.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1615204800">- update to final 1.6.0:
  * see https://raw.githubusercontent.com/coin3d/soqt/SoQt-1.6.0/NEWS</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1645531200">- Adapt for Coin4, remove
  0001-Use-a-Find-module-to-find-older-Coin-versions.patch
- Fix License, SoQt since 1.6.0 is BSD-3-Clause
- Drop irrelevant SoQt-man3.patch</changelog>
</package>
<package pkgid="d222f835a52dd17854f111edbed6c3cd8e8c773b55223012bf3cbb2d0eb33fd6" name="SoQt-devel" arch="aarch64">
  <version epoch="0" ver="1.6.0" rel="bp154.2.3.1"/>
  <changelog author="malcolmlewis@opensuse.org" date="1288958400">- Spec file fixes based on rpmlint report</changelog>
  <changelog author="adrian@suse.de" date="1467720000">- update to version 1.5.0
- use Qt4 instead of Qt3 ....</changelog>
  <changelog author="jengelh@inai.de" date="1470225600">- Rectify RPM groups. Use smp_mflags for parallel building.
  Drop redundant export CFLAGS lines. Rename %soname to %sover
  because it did not contain the soname.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1539086400">- Cleanup spec file:
  - move soqt-default.cfg to devel package, it is only used by soqt-config
  - make doc subpackage noarch
  - use %_docdir</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1557144000">- update to current snapshot
- fix URL, old coin3d.org site has been shut down
- using cmake build system now</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1557748800">- Run spec-cleaner
- Install the license file
- Add 0001-Use-a-Find-module-to-find-older-Coin-versions.patch
  This will allow using the stable Coin package to build the SoQt
  snapshot.
- Drop fix-cmake-install.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1557748801">- Drop invalid requires of doc sub package</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1574683200">- Fix invalid Requires: in pkgconfig file, replace Qt(4) with Qt5.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1615204800">- update to final 1.6.0:
  * see https://raw.githubusercontent.com/coin3d/soqt/SoQt-1.6.0/NEWS</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1645531200">- Adapt for Coin4, remove
  0001-Use-a-Find-module-to-find-older-Coin-versions.patch
- Fix License, SoQt since 1.6.0 is BSD-3-Clause
- Drop irrelevant SoQt-man3.patch</changelog>
</package>
<package pkgid="d31b7e50cb8ae099ac433e336f83e1fb36ff98ccff49be2bcbb9364191fd274c" name="SoQt-devel" arch="ppc64le">
  <version epoch="0" ver="1.6.0" rel="bp154.2.3.1"/>
  <changelog author="malcolmlewis@opensuse.org" date="1288958400">- Spec file fixes based on rpmlint report</changelog>
  <changelog author="adrian@suse.de" date="1467720000">- update to version 1.5.0
- use Qt4 instead of Qt3 ....</changelog>
  <changelog author="jengelh@inai.de" date="1470225600">- Rectify RPM groups. Use smp_mflags for parallel building.
  Drop redundant export CFLAGS lines. Rename %soname to %sover
  because it did not contain the soname.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1539086400">- Cleanup spec file:
  - move soqt-default.cfg to devel package, it is only used by soqt-config
  - make doc subpackage noarch
  - use %_docdir</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1557144000">- update to current snapshot
- fix URL, old coin3d.org site has been shut down
- using cmake build system now</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1557748800">- Run spec-cleaner
- Install the license file
- Add 0001-Use-a-Find-module-to-find-older-Coin-versions.patch
  This will allow using the stable Coin package to build the SoQt
  snapshot.
- Drop fix-cmake-install.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1557748801">- Drop invalid requires of doc sub package</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1574683200">- Fix invalid Requires: in pkgconfig file, replace Qt(4) with Qt5.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1615204800">- update to final 1.6.0:
  * see https://raw.githubusercontent.com/coin3d/soqt/SoQt-1.6.0/NEWS</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1645531200">- Adapt for Coin4, remove
  0001-Use-a-Find-module-to-find-older-Coin-versions.patch
- Fix License, SoQt since 1.6.0 is BSD-3-Clause
- Drop irrelevant SoQt-man3.patch</changelog>
</package>
<package pkgid="9a04bc20400afef6fb307a76f6a45bd10ff935aa6fc15edaf3d5eb86e4ef2be3" name="SoQt-devel" arch="s390x">
  <version epoch="0" ver="1.6.0" rel="bp154.2.3.1"/>
  <changelog author="malcolmlewis@opensuse.org" date="1288958400">- Spec file fixes based on rpmlint report</changelog>
  <changelog author="adrian@suse.de" date="1467720000">- update to version 1.5.0
- use Qt4 instead of Qt3 ....</changelog>
  <changelog author="jengelh@inai.de" date="1470225600">- Rectify RPM groups. Use smp_mflags for parallel building.
  Drop redundant export CFLAGS lines. Rename %soname to %sover
  because it did not contain the soname.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1539086400">- Cleanup spec file:
  - move soqt-default.cfg to devel package, it is only used by soqt-config
  - make doc subpackage noarch
  - use %_docdir</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1557144000">- update to current snapshot
- fix URL, old coin3d.org site has been shut down
- using cmake build system now</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1557748800">- Run spec-cleaner
- Install the license file
- Add 0001-Use-a-Find-module-to-find-older-Coin-versions.patch
  This will allow using the stable Coin package to build the SoQt
  snapshot.
- Drop fix-cmake-install.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1557748801">- Drop invalid requires of doc sub package</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1574683200">- Fix invalid Requires: in pkgconfig file, replace Qt(4) with Qt5.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1615204800">- update to final 1.6.0:
  * see https://raw.githubusercontent.com/coin3d/soqt/SoQt-1.6.0/NEWS</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1645531200">- Adapt for Coin4, remove
  0001-Use-a-Find-module-to-find-older-Coin-versions.patch
- Fix License, SoQt since 1.6.0 is BSD-3-Clause
- Drop irrelevant SoQt-man3.patch</changelog>
</package>
<package pkgid="e71bfc186624fa979b7c8f675210d9d620076ccc7da1aebefcf8fe4e9b1d7fff" name="SoQt-devel" arch="x86_64">
  <version epoch="0" ver="1.6.0" rel="bp154.2.3.1"/>
  <changelog author="malcolmlewis@opensuse.org" date="1288958400">- Spec file fixes based on rpmlint report</changelog>
  <changelog author="adrian@suse.de" date="1467720000">- update to version 1.5.0
- use Qt4 instead of Qt3 ....</changelog>
  <changelog author="jengelh@inai.de" date="1470225600">- Rectify RPM groups. Use smp_mflags for parallel building.
  Drop redundant export CFLAGS lines. Rename %soname to %sover
  because it did not contain the soname.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1539086400">- Cleanup spec file:
  - move soqt-default.cfg to devel package, it is only used by soqt-config
  - make doc subpackage noarch
  - use %_docdir</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1557144000">- update to current snapshot
- fix URL, old coin3d.org site has been shut down
- using cmake build system now</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1557748800">- Run spec-cleaner
- Install the license file
- Add 0001-Use-a-Find-module-to-find-older-Coin-versions.patch
  This will allow using the stable Coin package to build the SoQt
  snapshot.
- Drop fix-cmake-install.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1557748801">- Drop invalid requires of doc sub package</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1574683200">- Fix invalid Requires: in pkgconfig file, replace Qt(4) with Qt5.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1615204800">- update to final 1.6.0:
  * see https://raw.githubusercontent.com/coin3d/soqt/SoQt-1.6.0/NEWS</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1645531200">- Adapt for Coin4, remove
  0001-Use-a-Find-module-to-find-older-Coin-versions.patch
- Fix License, SoQt since 1.6.0 is BSD-3-Clause
- Drop irrelevant SoQt-man3.patch</changelog>
</package>
<package pkgid="e2c4466b1ee7ba2aa7aea59882fc745fcdaf55bd58a8d8ec62d2cd009863f226" name="SoQt-doc" arch="noarch">
  <version epoch="0" ver="1.6.0" rel="bp154.2.3.1"/>
  <changelog author="malcolmlewis@opensuse.org" date="1288958400">- Spec file fixes based on rpmlint report</changelog>
  <changelog author="adrian@suse.de" date="1467720000">- update to version 1.5.0
- use Qt4 instead of Qt3 ....</changelog>
  <changelog author="jengelh@inai.de" date="1470225600">- Rectify RPM groups. Use smp_mflags for parallel building.
  Drop redundant export CFLAGS lines. Rename %soname to %sover
  because it did not contain the soname.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1539086400">- Cleanup spec file:
  - move soqt-default.cfg to devel package, it is only used by soqt-config
  - make doc subpackage noarch
  - use %_docdir</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1557144000">- update to current snapshot
- fix URL, old coin3d.org site has been shut down
- using cmake build system now</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1557748800">- Run spec-cleaner
- Install the license file
- Add 0001-Use-a-Find-module-to-find-older-Coin-versions.patch
  This will allow using the stable Coin package to build the SoQt
  snapshot.
- Drop fix-cmake-install.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1557748801">- Drop invalid requires of doc sub package</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1574683200">- Fix invalid Requires: in pkgconfig file, replace Qt(4) with Qt5.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1615204800">- update to final 1.6.0:
  * see https://raw.githubusercontent.com/coin3d/soqt/SoQt-1.6.0/NEWS</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1645531200">- Adapt for Coin4, remove
  0001-Use-a-Find-module-to-find-older-Coin-versions.patch
- Fix License, SoQt since 1.6.0 is BSD-3-Clause
- Drop irrelevant SoQt-man3.patch</changelog>
</package>
<package pkgid="38c4796a3967f938be43c171aec766fd32132f9a31516c556c41b205fe40fa62" name="akonadi-server" arch="aarch64">
  <version epoch="0" ver="21.12.3" rel="bp154.2.3.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1617969600">- Update to 21.03.90
  * New feature release
- No code change since 21.03.80</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1618574400">- Update to 21.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/21.04
- No code change since 21.03.90</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1620820800">- Update to 21.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/21.04.1
- No code change since 21.04.0</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1622721600">- Install AppArmor profiles (as -apparmor subpackage)
- add akonadi-apparmor-opensuse.diff to adjust the profiles to
  openSUSE paths, and to add 'abi' rules to the profiles</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1623153600">- Update to 21.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.04.2
- No code change since 21.04.1</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1625659200">- Update to 21.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.04.3
- No code change since 21.04.2</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1626004800">- update akonadi-apparmor-opensuse.diff: add openSUSE Postgresql
  path in AppArmor profiles (and make it a variable to keep the
  profiles readable) and some more rules for Postgresql</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1626523200">- Update to 21.07.80
  * New feature release
- Changes since 21.04.3:
  * Make sure that we don't cancel dialog
  * Use KSharedConfig::openStateConfig
  * Allow to exclude unified folder
  * Add roleNames to AgentTypeModel for easier interfacing with QML
  * USe QStringView here
  * Fix some clazy warning
  * Add support for subquery as table expression
  * Modernize code
  * Remove references to innodb_additional_mem_pool_size
  * use forward declaration here
  * AgentServer: remove unnecessary QWidgets import
  * kde4 Migration code will be removed in kf6
  * Remove the std::auto_ptr and std::unique_ptr payload checks
  * Make the recently accessed folder list globally accessible
  * Fix Clazy exclusion for 'old-style-connect', causes CI to fail
  * It will create mem leak here too I think
  * Fix memory leak detected by ASAN, by passing qApp as parent to QTranslator.
  * [favoriteproxytest] Link against KConfig
  * StandardActionManager is now based on QAction
  * CMake: replace most include_directories calls
  * CMake: use target_compile_definitions when possible
  * Add trailing comma to enums
- Only install the license files once</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1627646400">- Update to 21.07.90
  * New feature release
- No code change since 21.07.80</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1628251200">- Update to 21.08.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/21.08.0
- No code change since 21.07.90</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1630497600">- Update to 21.08.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.08.1
- Changes since 21.08.0:
  * Add a missing static storage class</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1633435200">- Update to 21.08.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1635854400">- Update to 21.08.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.08.3/
- No code change since 21.08.2</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1636804800">- Update to 21.11.80
  * New feature release
- Too many changes to list here.
- Drop upstream patch:
  * akonadi-apparmor-opensuse.diff</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638014400">- Update to 21.11.90
  * New feature release
- No code change since 21.11.80</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638532800">- Update to 21.12.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/21.12.0/
- Changes since 21.11.90:
  * Enable new GitLab CI on stable branch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1641297600">- Update to 21.12.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.12.1/
- Changes since 21.12.0:
  * Fix min required libaccounts-qt version</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1643716800">- Update to 21.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.12.2/
- Changes since 21.12.1:
  * Use all interface include dirs needed for LibXml2 (unbreak Windows build)
  * Fix build with GCC 12 (standard attributes in middle of decl-specifiers)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1646136000">- Update to 21.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.12.3/
- Changes since 21.12.2:
  * Use exec variable
  * Check executables exist in PATH before passing them to QProcess</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1666094400">- In SLE-15-SP3 we had patches that made akonadi fall back to
  sqlite if the mysql backend is not available. Those patches were
  already merged by upstream so we can let the package Recommend
  mysql instead of Require it, since it's not available in SLED.
  The Requires are set unless branding-SLE is installed so the
  requirements are used in Leap/TW but not in SLE where it's only
  a Recommends and an alternate Requirements is used in that case
  where the sqlite backend is installed if mysql is not available.</changelog>
</package>
<package pkgid="b86ee9afdd8415b04cd2489651502360cfc0465f82a5755e3e9218e9d891d6c3" name="akonadi-server" arch="ppc64le">
  <version epoch="0" ver="21.12.3" rel="bp154.2.3.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1617969600">- Update to 21.03.90
  * New feature release
- No code change since 21.03.80</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1618574400">- Update to 21.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/21.04
- No code change since 21.03.90</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1620820800">- Update to 21.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/21.04.1
- No code change since 21.04.0</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1622721600">- Install AppArmor profiles (as -apparmor subpackage)
- add akonadi-apparmor-opensuse.diff to adjust the profiles to
  openSUSE paths, and to add 'abi' rules to the profiles</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1623153600">- Update to 21.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.04.2
- No code change since 21.04.1</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1625659200">- Update to 21.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.04.3
- No code change since 21.04.2</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1626004800">- update akonadi-apparmor-opensuse.diff: add openSUSE Postgresql
  path in AppArmor profiles (and make it a variable to keep the
  profiles readable) and some more rules for Postgresql</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1626523200">- Update to 21.07.80
  * New feature release
- Changes since 21.04.3:
  * Make sure that we don't cancel dialog
  * Use KSharedConfig::openStateConfig
  * Allow to exclude unified folder
  * Add roleNames to AgentTypeModel for easier interfacing with QML
  * USe QStringView here
  * Fix some clazy warning
  * Add support for subquery as table expression
  * Modernize code
  * Remove references to innodb_additional_mem_pool_size
  * use forward declaration here
  * AgentServer: remove unnecessary QWidgets import
  * kde4 Migration code will be removed in kf6
  * Remove the std::auto_ptr and std::unique_ptr payload checks
  * Make the recently accessed folder list globally accessible
  * Fix Clazy exclusion for 'old-style-connect', causes CI to fail
  * It will create mem leak here too I think
  * Fix memory leak detected by ASAN, by passing qApp as parent to QTranslator.
  * [favoriteproxytest] Link against KConfig
  * StandardActionManager is now based on QAction
  * CMake: replace most include_directories calls
  * CMake: use target_compile_definitions when possible
  * Add trailing comma to enums
- Only install the license files once</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1627646400">- Update to 21.07.90
  * New feature release
- No code change since 21.07.80</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1628251200">- Update to 21.08.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/21.08.0
- No code change since 21.07.90</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1630497600">- Update to 21.08.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.08.1
- Changes since 21.08.0:
  * Add a missing static storage class</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1633435200">- Update to 21.08.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1635854400">- Update to 21.08.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.08.3/
- No code change since 21.08.2</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1636804800">- Update to 21.11.80
  * New feature release
- Too many changes to list here.
- Drop upstream patch:
  * akonadi-apparmor-opensuse.diff</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638014400">- Update to 21.11.90
  * New feature release
- No code change since 21.11.80</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638532800">- Update to 21.12.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/21.12.0/
- Changes since 21.11.90:
  * Enable new GitLab CI on stable branch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1641297600">- Update to 21.12.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.12.1/
- Changes since 21.12.0:
  * Fix min required libaccounts-qt version</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1643716800">- Update to 21.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.12.2/
- Changes since 21.12.1:
  * Use all interface include dirs needed for LibXml2 (unbreak Windows build)
  * Fix build with GCC 12 (standard attributes in middle of decl-specifiers)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1646136000">- Update to 21.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.12.3/
- Changes since 21.12.2:
  * Use exec variable
  * Check executables exist in PATH before passing them to QProcess</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1666094400">- In SLE-15-SP3 we had patches that made akonadi fall back to
  sqlite if the mysql backend is not available. Those patches were
  already merged by upstream so we can let the package Recommend
  mysql instead of Require it, since it's not available in SLED.
  The Requires are set unless branding-SLE is installed so the
  requirements are used in Leap/TW but not in SLE where it's only
  a Recommends and an alternate Requirements is used in that case
  where the sqlite backend is installed if mysql is not available.</changelog>
</package>
<package pkgid="aa05ad998898e4e0a62a9fd8cfa8012ad640cfc7f85637dcb9b28816673d3505" name="akonadi-server" arch="s390x">
  <version epoch="0" ver="21.12.3" rel="bp154.2.3.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1617969600">- Update to 21.03.90
  * New feature release
- No code change since 21.03.80</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1618574400">- Update to 21.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/21.04
- No code change since 21.03.90</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1620820800">- Update to 21.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/21.04.1
- No code change since 21.04.0</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1622721600">- Install AppArmor profiles (as -apparmor subpackage)
- add akonadi-apparmor-opensuse.diff to adjust the profiles to
  openSUSE paths, and to add 'abi' rules to the profiles</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1623153600">- Update to 21.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.04.2
- No code change since 21.04.1</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1625659200">- Update to 21.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.04.3
- No code change since 21.04.2</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1626004800">- update akonadi-apparmor-opensuse.diff: add openSUSE Postgresql
  path in AppArmor profiles (and make it a variable to keep the
  profiles readable) and some more rules for Postgresql</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1626523200">- Update to 21.07.80
  * New feature release
- Changes since 21.04.3:
  * Make sure that we don't cancel dialog
  * Use KSharedConfig::openStateConfig
  * Allow to exclude unified folder
  * Add roleNames to AgentTypeModel for easier interfacing with QML
  * USe QStringView here
  * Fix some clazy warning
  * Add support for subquery as table expression
  * Modernize code
  * Remove references to innodb_additional_mem_pool_size
  * use forward declaration here
  * AgentServer: remove unnecessary QWidgets import
  * kde4 Migration code will be removed in kf6
  * Remove the std::auto_ptr and std::unique_ptr payload checks
  * Make the recently accessed folder list globally accessible
  * Fix Clazy exclusion for 'old-style-connect', causes CI to fail
  * It will create mem leak here too I think
  * Fix memory leak detected by ASAN, by passing qApp as parent to QTranslator.
  * [favoriteproxytest] Link against KConfig
  * StandardActionManager is now based on QAction
  * CMake: replace most include_directories calls
  * CMake: use target_compile_definitions when possible
  * Add trailing comma to enums
- Only install the license files once</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1627646400">- Update to 21.07.90
  * New feature release
- No code change since 21.07.80</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1628251200">- Update to 21.08.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/21.08.0
- No code change since 21.07.90</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1630497600">- Update to 21.08.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.08.1
- Changes since 21.08.0:
  * Add a missing static storage class</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1633435200">- Update to 21.08.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1635854400">- Update to 21.08.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.08.3/
- No code change since 21.08.2</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1636804800">- Update to 21.11.80
  * New feature release
- Too many changes to list here.
- Drop upstream patch:
  * akonadi-apparmor-opensuse.diff</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638014400">- Update to 21.11.90
  * New feature release
- No code change since 21.11.80</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638532800">- Update to 21.12.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/21.12.0/
- Changes since 21.11.90:
  * Enable new GitLab CI on stable branch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1641297600">- Update to 21.12.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.12.1/
- Changes since 21.12.0:
  * Fix min required libaccounts-qt version</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1643716800">- Update to 21.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.12.2/
- Changes since 21.12.1:
  * Use all interface include dirs needed for LibXml2 (unbreak Windows build)
  * Fix build with GCC 12 (standard attributes in middle of decl-specifiers)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1646136000">- Update to 21.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.12.3/
- Changes since 21.12.2:
  * Use exec variable
  * Check executables exist in PATH before passing them to QProcess</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1666094400">- In SLE-15-SP3 we had patches that made akonadi fall back to
  sqlite if the mysql backend is not available. Those patches were
  already merged by upstream so we can let the package Recommend
  mysql instead of Require it, since it's not available in SLED.
  The Requires are set unless branding-SLE is installed so the
  requirements are used in Leap/TW but not in SLE where it's only
  a Recommends and an alternate Requirements is used in that case
  where the sqlite backend is installed if mysql is not available.</changelog>
</package>
<package pkgid="0ec62b10e0e16766a2256a1b63303c9150f5df1046753bc19214ac734052c4d4" name="akonadi-server" arch="src">
  <version epoch="0" ver="21.12.3" rel="bp154.2.3.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1617969600">- Update to 21.03.90
  * New feature release
- No code change since 21.03.80</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1618574400">- Update to 21.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/21.04
- No code change since 21.03.90</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1620820800">- Update to 21.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/21.04.1
- No code change since 21.04.0</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1622721600">- Install AppArmor profiles (as -apparmor subpackage)
- add akonadi-apparmor-opensuse.diff to adjust the profiles to
  openSUSE paths, and to add 'abi' rules to the profiles</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1623153600">- Update to 21.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.04.2
- No code change since 21.04.1</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1625659200">- Update to 21.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.04.3
- No code change since 21.04.2</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1626004800">- update akonadi-apparmor-opensuse.diff: add openSUSE Postgresql
  path in AppArmor profiles (and make it a variable to keep the
  profiles readable) and some more rules for Postgresql</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1626523200">- Update to 21.07.80
  * New feature release
- Changes since 21.04.3:
  * Make sure that we don't cancel dialog
  * Use KSharedConfig::openStateConfig
  * Allow to exclude unified folder
  * Add roleNames to AgentTypeModel for easier interfacing with QML
  * USe QStringView here
  * Fix some clazy warning
  * Add support for subquery as table expression
  * Modernize code
  * Remove references to innodb_additional_mem_pool_size
  * use forward declaration here
  * AgentServer: remove unnecessary QWidgets import
  * kde4 Migration code will be removed in kf6
  * Remove the std::auto_ptr and std::unique_ptr payload checks
  * Make the recently accessed folder list globally accessible
  * Fix Clazy exclusion for 'old-style-connect', causes CI to fail
  * It will create mem leak here too I think
  * Fix memory leak detected by ASAN, by passing qApp as parent to QTranslator.
  * [favoriteproxytest] Link against KConfig
  * StandardActionManager is now based on QAction
  * CMake: replace most include_directories calls
  * CMake: use target_compile_definitions when possible
  * Add trailing comma to enums
- Only install the license files once</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1627646400">- Update to 21.07.90
  * New feature release
- No code change since 21.07.80</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1628251200">- Update to 21.08.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/21.08.0
- No code change since 21.07.90</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1630497600">- Update to 21.08.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.08.1
- Changes since 21.08.0:
  * Add a missing static storage class</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1633435200">- Update to 21.08.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1635854400">- Update to 21.08.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.08.3/
- No code change since 21.08.2</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1636804800">- Update to 21.11.80
  * New feature release
- Too many changes to list here.
- Drop upstream patch:
  * akonadi-apparmor-opensuse.diff</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638014400">- Update to 21.11.90
  * New feature release
- No code change since 21.11.80</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638532800">- Update to 21.12.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/21.12.0/
- Changes since 21.11.90:
  * Enable new GitLab CI on stable branch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1641297600">- Update to 21.12.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.12.1/
- Changes since 21.12.0:
  * Fix min required libaccounts-qt version</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1643716800">- Update to 21.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.12.2/
- Changes since 21.12.1:
  * Use all interface include dirs needed for LibXml2 (unbreak Windows build)
  * Fix build with GCC 12 (standard attributes in middle of decl-specifiers)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1646136000">- Update to 21.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.12.3/
- Changes since 21.12.2:
  * Use exec variable
  * Check executables exist in PATH before passing them to QProcess</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1666094400">- In SLE-15-SP3 we had patches that made akonadi fall back to
  sqlite if the mysql backend is not available. Those patches were
  already merged by upstream so we can let the package Recommend
  mysql instead of Require it, since it's not available in SLED.
  The Requires are set unless branding-SLE is installed so the
  requirements are used in Leap/TW but not in SLE where it's only
  a Recommends and an alternate Requirements is used in that case
  where the sqlite backend is installed if mysql is not available.</changelog>
</package>
<package pkgid="f6c0fbc45f738a376e6892283ee03444bd0038c5d9e6073d43247efe1e39a3d1" name="akonadi-server" arch="x86_64">
  <version epoch="0" ver="21.12.3" rel="bp154.2.3.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1617969600">- Update to 21.03.90
  * New feature release
- No code change since 21.03.80</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1618574400">- Update to 21.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/21.04
- No code change since 21.03.90</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1620820800">- Update to 21.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/21.04.1
- No code change since 21.04.0</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1622721600">- Install AppArmor profiles (as -apparmor subpackage)
- add akonadi-apparmor-opensuse.diff to adjust the profiles to
  openSUSE paths, and to add 'abi' rules to the profiles</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1623153600">- Update to 21.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.04.2
- No code change since 21.04.1</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1625659200">- Update to 21.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.04.3
- No code change since 21.04.2</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1626004800">- update akonadi-apparmor-opensuse.diff: add openSUSE Postgresql
  path in AppArmor profiles (and make it a variable to keep the
  profiles readable) and some more rules for Postgresql</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1626523200">- Update to 21.07.80
  * New feature release
- Changes since 21.04.3:
  * Make sure that we don't cancel dialog
  * Use KSharedConfig::openStateConfig
  * Allow to exclude unified folder
  * Add roleNames to AgentTypeModel for easier interfacing with QML
  * USe QStringView here
  * Fix some clazy warning
  * Add support for subquery as table expression
  * Modernize code
  * Remove references to innodb_additional_mem_pool_size
  * use forward declaration here
  * AgentServer: remove unnecessary QWidgets import
  * kde4 Migration code will be removed in kf6
  * Remove the std::auto_ptr and std::unique_ptr payload checks
  * Make the recently accessed folder list globally accessible
  * Fix Clazy exclusion for 'old-style-connect', causes CI to fail
  * It will create mem leak here too I think
  * Fix memory leak detected by ASAN, by passing qApp as parent to QTranslator.
  * [favoriteproxytest] Link against KConfig
  * StandardActionManager is now based on QAction
  * CMake: replace most include_directories calls
  * CMake: use target_compile_definitions when possible
  * Add trailing comma to enums
- Only install the license files once</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1627646400">- Update to 21.07.90
  * New feature release
- No code change since 21.07.80</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1628251200">- Update to 21.08.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/21.08.0
- No code change since 21.07.90</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1630497600">- Update to 21.08.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.08.1
- Changes since 21.08.0:
  * Add a missing static storage class</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1633435200">- Update to 21.08.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1635854400">- Update to 21.08.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.08.3/
- No code change since 21.08.2</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1636804800">- Update to 21.11.80
  * New feature release
- Too many changes to list here.
- Drop upstream patch:
  * akonadi-apparmor-opensuse.diff</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638014400">- Update to 21.11.90
  * New feature release
- No code change since 21.11.80</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638532800">- Update to 21.12.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/21.12.0/
- Changes since 21.11.90:
  * Enable new GitLab CI on stable branch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1641297600">- Update to 21.12.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.12.1/
- Changes since 21.12.0:
  * Fix min required libaccounts-qt version</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1643716800">- Update to 21.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.12.2/
- Changes since 21.12.1:
  * Use all interface include dirs needed for LibXml2 (unbreak Windows build)
  * Fix build with GCC 12 (standard attributes in middle of decl-specifiers)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1646136000">- Update to 21.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.12.3/
- Changes since 21.12.2:
  * Use exec variable
  * Check executables exist in PATH before passing them to QProcess</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1666094400">- In SLE-15-SP3 we had patches that made akonadi fall back to
  sqlite if the mysql backend is not available. Those patches were
  already merged by upstream so we can let the package Recommend
  mysql instead of Require it, since it's not available in SLED.
  The Requires are set unless branding-SLE is installed so the
  requirements are used in Leap/TW but not in SLE where it's only
  a Recommends and an alternate Requirements is used in that case
  where the sqlite backend is installed if mysql is not available.</changelog>
</package>
<package pkgid="cf81fd597873477879c6860c85004e4b2fa46b8c59c57edc96b37a24f9f3acef" name="akonadi-server-apparmor" arch="aarch64">
  <version epoch="0" ver="21.12.3" rel="bp154.2.3.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1617969600">- Update to 21.03.90
  * New feature release
- No code change since 21.03.80</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1618574400">- Update to 21.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/21.04
- No code change since 21.03.90</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1620820800">- Update to 21.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/21.04.1
- No code change since 21.04.0</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1622721600">- Install AppArmor profiles (as -apparmor subpackage)
- add akonadi-apparmor-opensuse.diff to adjust the profiles to
  openSUSE paths, and to add 'abi' rules to the profiles</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1623153600">- Update to 21.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.04.2
- No code change since 21.04.1</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1625659200">- Update to 21.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.04.3
- No code change since 21.04.2</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1626004800">- update akonadi-apparmor-opensuse.diff: add openSUSE Postgresql
  path in AppArmor profiles (and make it a variable to keep the
  profiles readable) and some more rules for Postgresql</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1626523200">- Update to 21.07.80
  * New feature release
- Changes since 21.04.3:
  * Make sure that we don't cancel dialog
  * Use KSharedConfig::openStateConfig
  * Allow to exclude unified folder
  * Add roleNames to AgentTypeModel for easier interfacing with QML
  * USe QStringView here
  * Fix some clazy warning
  * Add support for subquery as table expression
  * Modernize code
  * Remove references to innodb_additional_mem_pool_size
  * use forward declaration here
  * AgentServer: remove unnecessary QWidgets import
  * kde4 Migration code will be removed in kf6
  * Remove the std::auto_ptr and std::unique_ptr payload checks
  * Make the recently accessed folder list globally accessible
  * Fix Clazy exclusion for 'old-style-connect', causes CI to fail
  * It will create mem leak here too I think
  * Fix memory leak detected by ASAN, by passing qApp as parent to QTranslator.
  * [favoriteproxytest] Link against KConfig
  * StandardActionManager is now based on QAction
  * CMake: replace most include_directories calls
  * CMake: use target_compile_definitions when possible
  * Add trailing comma to enums
- Only install the license files once</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1627646400">- Update to 21.07.90
  * New feature release
- No code change since 21.07.80</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1628251200">- Update to 21.08.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/21.08.0
- No code change since 21.07.90</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1630497600">- Update to 21.08.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.08.1
- Changes since 21.08.0:
  * Add a missing static storage class</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1633435200">- Update to 21.08.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1635854400">- Update to 21.08.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.08.3/
- No code change since 21.08.2</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1636804800">- Update to 21.11.80
  * New feature release
- Too many changes to list here.
- Drop upstream patch:
  * akonadi-apparmor-opensuse.diff</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638014400">- Update to 21.11.90
  * New feature release
- No code change since 21.11.80</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638532800">- Update to 21.12.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/21.12.0/
- Changes since 21.11.90:
  * Enable new GitLab CI on stable branch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1641297600">- Update to 21.12.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.12.1/
- Changes since 21.12.0:
  * Fix min required libaccounts-qt version</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1643716800">- Update to 21.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.12.2/
- Changes since 21.12.1:
  * Use all interface include dirs needed for LibXml2 (unbreak Windows build)
  * Fix build with GCC 12 (standard attributes in middle of decl-specifiers)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1646136000">- Update to 21.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.12.3/
- Changes since 21.12.2:
  * Use exec variable
  * Check executables exist in PATH before passing them to QProcess</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1666094400">- In SLE-15-SP3 we had patches that made akonadi fall back to
  sqlite if the mysql backend is not available. Those patches were
  already merged by upstream so we can let the package Recommend
  mysql instead of Require it, since it's not available in SLED.
  The Requires are set unless branding-SLE is installed so the
  requirements are used in Leap/TW but not in SLE where it's only
  a Recommends and an alternate Requirements is used in that case
  where the sqlite backend is installed if mysql is not available.</changelog>
</package>
<package pkgid="f34f001dc00d6529ee5c1b4588ba10de667e3bf0713820efe302f6918757d3bf" name="akonadi-server-apparmor" arch="ppc64le">
  <version epoch="0" ver="21.12.3" rel="bp154.2.3.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1617969600">- Update to 21.03.90
  * New feature release
- No code change since 21.03.80</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1618574400">- Update to 21.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/21.04
- No code change since 21.03.90</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1620820800">- Update to 21.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/21.04.1
- No code change since 21.04.0</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1622721600">- Install AppArmor profiles (as -apparmor subpackage)
- add akonadi-apparmor-opensuse.diff to adjust the profiles to
  openSUSE paths, and to add 'abi' rules to the profiles</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1623153600">- Update to 21.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.04.2
- No code change since 21.04.1</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1625659200">- Update to 21.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.04.3
- No code change since 21.04.2</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1626004800">- update akonadi-apparmor-opensuse.diff: add openSUSE Postgresql
  path in AppArmor profiles (and make it a variable to keep the
  profiles readable) and some more rules for Postgresql</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1626523200">- Update to 21.07.80
  * New feature release
- Changes since 21.04.3:
  * Make sure that we don't cancel dialog
  * Use KSharedConfig::openStateConfig
  * Allow to exclude unified folder
  * Add roleNames to AgentTypeModel for easier interfacing with QML
  * USe QStringView here
  * Fix some clazy warning
  * Add support for subquery as table expression
  * Modernize code
  * Remove references to innodb_additional_mem_pool_size
  * use forward declaration here
  * AgentServer: remove unnecessary QWidgets import
  * kde4 Migration code will be removed in kf6
  * Remove the std::auto_ptr and std::unique_ptr payload checks
  * Make the recently accessed folder list globally accessible
  * Fix Clazy exclusion for 'old-style-connect', causes CI to fail
  * It will create mem leak here too I think
  * Fix memory leak detected by ASAN, by passing qApp as parent to QTranslator.
  * [favoriteproxytest] Link against KConfig
  * StandardActionManager is now based on QAction
  * CMake: replace most include_directories calls
  * CMake: use target_compile_definitions when possible
  * Add trailing comma to enums
- Only install the license files once</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1627646400">- Update to 21.07.90
  * New feature release
- No code change since 21.07.80</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1628251200">- Update to 21.08.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/21.08.0
- No code change since 21.07.90</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1630497600">- Update to 21.08.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.08.1
- Changes since 21.08.0:
  * Add a missing static storage class</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1633435200">- Update to 21.08.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1635854400">- Update to 21.08.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.08.3/
- No code change since 21.08.2</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1636804800">- Update to 21.11.80
  * New feature release
- Too many changes to list here.
- Drop upstream patch:
  * akonadi-apparmor-opensuse.diff</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638014400">- Update to 21.11.90
  * New feature release
- No code change since 21.11.80</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638532800">- Update to 21.12.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/21.12.0/
- Changes since 21.11.90:
  * Enable new GitLab CI on stable branch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1641297600">- Update to 21.12.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.12.1/
- Changes since 21.12.0:
  * Fix min required libaccounts-qt version</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1643716800">- Update to 21.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.12.2/
- Changes since 21.12.1:
  * Use all interface include dirs needed for LibXml2 (unbreak Windows build)
  * Fix build with GCC 12 (standard attributes in middle of decl-specifiers)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1646136000">- Update to 21.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.12.3/
- Changes since 21.12.2:
  * Use exec variable
  * Check executables exist in PATH before passing them to QProcess</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1666094400">- In SLE-15-SP3 we had patches that made akonadi fall back to
  sqlite if the mysql backend is not available. Those patches were
  already merged by upstream so we can let the package Recommend
  mysql instead of Require it, since it's not available in SLED.
  The Requires are set unless branding-SLE is installed so the
  requirements are used in Leap/TW but not in SLE where it's only
  a Recommends and an alternate Requirements is used in that case
  where the sqlite backend is installed if mysql is not available.</changelog>
</package>
<package pkgid="dc65b41dd92bdae91a0a41d75c54f875624827eededf4762c173faee0fd6b443" name="akonadi-server-apparmor" arch="s390x">
  <version epoch="0" ver="21.12.3" rel="bp154.2.3.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1617969600">- Update to 21.03.90
  * New feature release
- No code change since 21.03.80</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1618574400">- Update to 21.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/21.04
- No code change since 21.03.90</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1620820800">- Update to 21.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/21.04.1
- No code change since 21.04.0</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1622721600">- Install AppArmor profiles (as -apparmor subpackage)
- add akonadi-apparmor-opensuse.diff to adjust the profiles to
  openSUSE paths, and to add 'abi' rules to the profiles</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1623153600">- Update to 21.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.04.2
- No code change since 21.04.1</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1625659200">- Update to 21.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.04.3
- No code change since 21.04.2</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1626004800">- update akonadi-apparmor-opensuse.diff: add openSUSE Postgresql
  path in AppArmor profiles (and make it a variable to keep the
  profiles readable) and some more rules for Postgresql</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1626523200">- Update to 21.07.80
  * New feature release
- Changes since 21.04.3:
  * Make sure that we don't cancel dialog
  * Use KSharedConfig::openStateConfig
  * Allow to exclude unified folder
  * Add roleNames to AgentTypeModel for easier interfacing with QML
  * USe QStringView here
  * Fix some clazy warning
  * Add support for subquery as table expression
  * Modernize code
  * Remove references to innodb_additional_mem_pool_size
  * use forward declaration here
  * AgentServer: remove unnecessary QWidgets import
  * kde4 Migration code will be removed in kf6
  * Remove the std::auto_ptr and std::unique_ptr payload checks
  * Make the recently accessed folder list globally accessible
  * Fix Clazy exclusion for 'old-style-connect', causes CI to fail
  * It will create mem leak here too I think
  * Fix memory leak detected by ASAN, by passing qApp as parent to QTranslator.
  * [favoriteproxytest] Link against KConfig
  * StandardActionManager is now based on QAction
  * CMake: replace most include_directories calls
  * CMake: use target_compile_definitions when possible
  * Add trailing comma to enums
- Only install the license files once</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1627646400">- Update to 21.07.90
  * New feature release
- No code change since 21.07.80</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1628251200">- Update to 21.08.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/21.08.0
- No code change since 21.07.90</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1630497600">- Update to 21.08.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.08.1
- Changes since 21.08.0:
  * Add a missing static storage class</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1633435200">- Update to 21.08.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1635854400">- Update to 21.08.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.08.3/
- No code change since 21.08.2</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1636804800">- Update to 21.11.80
  * New feature release
- Too many changes to list here.
- Drop upstream patch:
  * akonadi-apparmor-opensuse.diff</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638014400">- Update to 21.11.90
  * New feature release
- No code change since 21.11.80</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638532800">- Update to 21.12.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/21.12.0/
- Changes since 21.11.90:
  * Enable new GitLab CI on stable branch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1641297600">- Update to 21.12.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.12.1/
- Changes since 21.12.0:
  * Fix min required libaccounts-qt version</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1643716800">- Update to 21.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.12.2/
- Changes since 21.12.1:
  * Use all interface include dirs needed for LibXml2 (unbreak Windows build)
  * Fix build with GCC 12 (standard attributes in middle of decl-specifiers)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1646136000">- Update to 21.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.12.3/
- Changes since 21.12.2:
  * Use exec variable
  * Check executables exist in PATH before passing them to QProcess</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1666094400">- In SLE-15-SP3 we had patches that made akonadi fall back to
  sqlite if the mysql backend is not available. Those patches were
  already merged by upstream so we can let the package Recommend
  mysql instead of Require it, since it's not available in SLED.
  The Requires are set unless branding-SLE is installed so the
  requirements are used in Leap/TW but not in SLE where it's only
  a Recommends and an alternate Requirements is used in that case
  where the sqlite backend is installed if mysql is not available.</changelog>
</package>
<package pkgid="02d4a8884a437df3cde7ae8a521fb46a8ed7829315d2bee1364d853796bc9c81" name="akonadi-server-apparmor" arch="x86_64">
  <version epoch="0" ver="21.12.3" rel="bp154.2.3.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1617969600">- Update to 21.03.90
  * New feature release
- No code change since 21.03.80</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1618574400">- Update to 21.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/21.04
- No code change since 21.03.90</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1620820800">- Update to 21.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/21.04.1
- No code change since 21.04.0</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1622721600">- Install AppArmor profiles (as -apparmor subpackage)
- add akonadi-apparmor-opensuse.diff to adjust the profiles to
  openSUSE paths, and to add 'abi' rules to the profiles</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1623153600">- Update to 21.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.04.2
- No code change since 21.04.1</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1625659200">- Update to 21.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.04.3
- No code change since 21.04.2</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1626004800">- update akonadi-apparmor-opensuse.diff: add openSUSE Postgresql
  path in AppArmor profiles (and make it a variable to keep the
  profiles readable) and some more rules for Postgresql</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1626523200">- Update to 21.07.80
  * New feature release
- Changes since 21.04.3:
  * Make sure that we don't cancel dialog
  * Use KSharedConfig::openStateConfig
  * Allow to exclude unified folder
  * Add roleNames to AgentTypeModel for easier interfacing with QML
  * USe QStringView here
  * Fix some clazy warning
  * Add support for subquery as table expression
  * Modernize code
  * Remove references to innodb_additional_mem_pool_size
  * use forward declaration here
  * AgentServer: remove unnecessary QWidgets import
  * kde4 Migration code will be removed in kf6
  * Remove the std::auto_ptr and std::unique_ptr payload checks
  * Make the recently accessed folder list globally accessible
  * Fix Clazy exclusion for 'old-style-connect', causes CI to fail
  * It will create mem leak here too I think
  * Fix memory leak detected by ASAN, by passing qApp as parent to QTranslator.
  * [favoriteproxytest] Link against KConfig
  * StandardActionManager is now based on QAction
  * CMake: replace most include_directories calls
  * CMake: use target_compile_definitions when possible
  * Add trailing comma to enums
- Only install the license files once</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1627646400">- Update to 21.07.90
  * New feature release
- No code change since 21.07.80</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1628251200">- Update to 21.08.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/21.08.0
- No code change since 21.07.90</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1630497600">- Update to 21.08.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.08.1
- Changes since 21.08.0:
  * Add a missing static storage class</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1633435200">- Update to 21.08.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1635854400">- Update to 21.08.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.08.3/
- No code change since 21.08.2</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1636804800">- Update to 21.11.80
  * New feature release
- Too many changes to list here.
- Drop upstream patch:
  * akonadi-apparmor-opensuse.diff</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638014400">- Update to 21.11.90
  * New feature release
- No code change since 21.11.80</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638532800">- Update to 21.12.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/21.12.0/
- Changes since 21.11.90:
  * Enable new GitLab CI on stable branch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1641297600">- Update to 21.12.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.12.1/
- Changes since 21.12.0:
  * Fix min required libaccounts-qt version</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1643716800">- Update to 21.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.12.2/
- Changes since 21.12.1:
  * Use all interface include dirs needed for LibXml2 (unbreak Windows build)
  * Fix build with GCC 12 (standard attributes in middle of decl-specifiers)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1646136000">- Update to 21.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.12.3/
- Changes since 21.12.2:
  * Use exec variable
  * Check executables exist in PATH before passing them to QProcess</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1666094400">- In SLE-15-SP3 we had patches that made akonadi fall back to
  sqlite if the mysql backend is not available. Those patches were
  already merged by upstream so we can let the package Recommend
  mysql instead of Require it, since it's not available in SLED.
  The Requires are set unless branding-SLE is installed so the
  requirements are used in Leap/TW but not in SLE where it's only
  a Recommends and an alternate Requirements is used in that case
  where the sqlite backend is installed if mysql is not available.</changelog>
</package>
<package pkgid="a6c7ee03391298c3ee8fe5c2ea94cd1ef7e9213526fe94158a8aa8e71d48260e" name="akonadi-server-devel" arch="aarch64">
  <version epoch="0" ver="21.12.3" rel="bp154.2.3.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1617969600">- Update to 21.03.90
  * New feature release
- No code change since 21.03.80</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1618574400">- Update to 21.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/21.04
- No code change since 21.03.90</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1620820800">- Update to 21.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/21.04.1
- No code change since 21.04.0</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1622721600">- Install AppArmor profiles (as -apparmor subpackage)
- add akonadi-apparmor-opensuse.diff to adjust the profiles to
  openSUSE paths, and to add 'abi' rules to the profiles</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1623153600">- Update to 21.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.04.2
- No code change since 21.04.1</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1625659200">- Update to 21.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.04.3
- No code change since 21.04.2</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1626004800">- update akonadi-apparmor-opensuse.diff: add openSUSE Postgresql
  path in AppArmor profiles (and make it a variable to keep the
  profiles readable) and some more rules for Postgresql</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1626523200">- Update to 21.07.80
  * New feature release
- Changes since 21.04.3:
  * Make sure that we don't cancel dialog
  * Use KSharedConfig::openStateConfig
  * Allow to exclude unified folder
  * Add roleNames to AgentTypeModel for easier interfacing with QML
  * USe QStringView here
  * Fix some clazy warning
  * Add support for subquery as table expression
  * Modernize code
  * Remove references to innodb_additional_mem_pool_size
  * use forward declaration here
  * AgentServer: remove unnecessary QWidgets import
  * kde4 Migration code will be removed in kf6
  * Remove the std::auto_ptr and std::unique_ptr payload checks
  * Make the recently accessed folder list globally accessible
  * Fix Clazy exclusion for 'old-style-connect', causes CI to fail
  * It will create mem leak here too I think
  * Fix memory leak detected by ASAN, by passing qApp as parent to QTranslator.
  * [favoriteproxytest] Link against KConfig
  * StandardActionManager is now based on QAction
  * CMake: replace most include_directories calls
  * CMake: use target_compile_definitions when possible
  * Add trailing comma to enums
- Only install the license files once</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1627646400">- Update to 21.07.90
  * New feature release
- No code change since 21.07.80</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1628251200">- Update to 21.08.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/21.08.0
- No code change since 21.07.90</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1630497600">- Update to 21.08.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.08.1
- Changes since 21.08.0:
  * Add a missing static storage class</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1633435200">- Update to 21.08.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1635854400">- Update to 21.08.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.08.3/
- No code change since 21.08.2</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1636804800">- Update to 21.11.80
  * New feature release
- Too many changes to list here.
- Drop upstream patch:
  * akonadi-apparmor-opensuse.diff</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638014400">- Update to 21.11.90
  * New feature release
- No code change since 21.11.80</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638532800">- Update to 21.12.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/21.12.0/
- Changes since 21.11.90:
  * Enable new GitLab CI on stable branch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1641297600">- Update to 21.12.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.12.1/
- Changes since 21.12.0:
  * Fix min required libaccounts-qt version</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1643716800">- Update to 21.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.12.2/
- Changes since 21.12.1:
  * Use all interface include dirs needed for LibXml2 (unbreak Windows build)
  * Fix build with GCC 12 (standard attributes in middle of decl-specifiers)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1646136000">- Update to 21.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.12.3/
- Changes since 21.12.2:
  * Use exec variable
  * Check executables exist in PATH before passing them to QProcess</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1666094400">- In SLE-15-SP3 we had patches that made akonadi fall back to
  sqlite if the mysql backend is not available. Those patches were
  already merged by upstream so we can let the package Recommend
  mysql instead of Require it, since it's not available in SLED.
  The Requires are set unless branding-SLE is installed so the
  requirements are used in Leap/TW but not in SLE where it's only
  a Recommends and an alternate Requirements is used in that case
  where the sqlite backend is installed if mysql is not available.</changelog>
</package>
<package pkgid="c298751c265a8ded58b9cc58a36e679be3e37e1e2c04c667e4bf62d6763b8f50" name="akonadi-server-devel" arch="ppc64le">
  <version epoch="0" ver="21.12.3" rel="bp154.2.3.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1617969600">- Update to 21.03.90
  * New feature release
- No code change since 21.03.80</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1618574400">- Update to 21.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/21.04
- No code change since 21.03.90</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1620820800">- Update to 21.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/21.04.1
- No code change since 21.04.0</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1622721600">- Install AppArmor profiles (as -apparmor subpackage)
- add akonadi-apparmor-opensuse.diff to adjust the profiles to
  openSUSE paths, and to add 'abi' rules to the profiles</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1623153600">- Update to 21.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.04.2
- No code change since 21.04.1</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1625659200">- Update to 21.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.04.3
- No code change since 21.04.2</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1626004800">- update akonadi-apparmor-opensuse.diff: add openSUSE Postgresql
  path in AppArmor profiles (and make it a variable to keep the
  profiles readable) and some more rules for Postgresql</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1626523200">- Update to 21.07.80
  * New feature release
- Changes since 21.04.3:
  * Make sure that we don't cancel dialog
  * Use KSharedConfig::openStateConfig
  * Allow to exclude unified folder
  * Add roleNames to AgentTypeModel for easier interfacing with QML
  * USe QStringView here
  * Fix some clazy warning
  * Add support for subquery as table expression
  * Modernize code
  * Remove references to innodb_additional_mem_pool_size
  * use forward declaration here
  * AgentServer: remove unnecessary QWidgets import
  * kde4 Migration code will be removed in kf6
  * Remove the std::auto_ptr and std::unique_ptr payload checks
  * Make the recently accessed folder list globally accessible
  * Fix Clazy exclusion for 'old-style-connect', causes CI to fail
  * It will create mem leak here too I think
  * Fix memory leak detected by ASAN, by passing qApp as parent to QTranslator.
  * [favoriteproxytest] Link against KConfig
  * StandardActionManager is now based on QAction
  * CMake: replace most include_directories calls
  * CMake: use target_compile_definitions when possible
  * Add trailing comma to enums
- Only install the license files once</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1627646400">- Update to 21.07.90
  * New feature release
- No code change since 21.07.80</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1628251200">- Update to 21.08.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/21.08.0
- No code change since 21.07.90</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1630497600">- Update to 21.08.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.08.1
- Changes since 21.08.0:
  * Add a missing static storage class</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1633435200">- Update to 21.08.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1635854400">- Update to 21.08.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.08.3/
- No code change since 21.08.2</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1636804800">- Update to 21.11.80
  * New feature release
- Too many changes to list here.
- Drop upstream patch:
  * akonadi-apparmor-opensuse.diff</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638014400">- Update to 21.11.90
  * New feature release
- No code change since 21.11.80</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638532800">- Update to 21.12.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/21.12.0/
- Changes since 21.11.90:
  * Enable new GitLab CI on stable branch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1641297600">- Update to 21.12.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.12.1/
- Changes since 21.12.0:
  * Fix min required libaccounts-qt version</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1643716800">- Update to 21.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.12.2/
- Changes since 21.12.1:
  * Use all interface include dirs needed for LibXml2 (unbreak Windows build)
  * Fix build with GCC 12 (standard attributes in middle of decl-specifiers)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1646136000">- Update to 21.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.12.3/
- Changes since 21.12.2:
  * Use exec variable
  * Check executables exist in PATH before passing them to QProcess</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1666094400">- In SLE-15-SP3 we had patches that made akonadi fall back to
  sqlite if the mysql backend is not available. Those patches were
  already merged by upstream so we can let the package Recommend
  mysql instead of Require it, since it's not available in SLED.
  The Requires are set unless branding-SLE is installed so the
  requirements are used in Leap/TW but not in SLE where it's only
  a Recommends and an alternate Requirements is used in that case
  where the sqlite backend is installed if mysql is not available.</changelog>
</package>
<package pkgid="86d9d2867da74342775d5af6c1a257238bc8da483f8418bd1d773338b6e709aa" name="akonadi-server-devel" arch="s390x">
  <version epoch="0" ver="21.12.3" rel="bp154.2.3.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1617969600">- Update to 21.03.90
  * New feature release
- No code change since 21.03.80</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1618574400">- Update to 21.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/21.04
- No code change since 21.03.90</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1620820800">- Update to 21.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/21.04.1
- No code change since 21.04.0</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1622721600">- Install AppArmor profiles (as -apparmor subpackage)
- add akonadi-apparmor-opensuse.diff to adjust the profiles to
  openSUSE paths, and to add 'abi' rules to the profiles</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1623153600">- Update to 21.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.04.2
- No code change since 21.04.1</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1625659200">- Update to 21.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.04.3
- No code change since 21.04.2</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1626004800">- update akonadi-apparmor-opensuse.diff: add openSUSE Postgresql
  path in AppArmor profiles (and make it a variable to keep the
  profiles readable) and some more rules for Postgresql</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1626523200">- Update to 21.07.80
  * New feature release
- Changes since 21.04.3:
  * Make sure that we don't cancel dialog
  * Use KSharedConfig::openStateConfig
  * Allow to exclude unified folder
  * Add roleNames to AgentTypeModel for easier interfacing with QML
  * USe QStringView here
  * Fix some clazy warning
  * Add support for subquery as table expression
  * Modernize code
  * Remove references to innodb_additional_mem_pool_size
  * use forward declaration here
  * AgentServer: remove unnecessary QWidgets import
  * kde4 Migration code will be removed in kf6
  * Remove the std::auto_ptr and std::unique_ptr payload checks
  * Make the recently accessed folder list globally accessible
  * Fix Clazy exclusion for 'old-style-connect', causes CI to fail
  * It will create mem leak here too I think
  * Fix memory leak detected by ASAN, by passing qApp as parent to QTranslator.
  * [favoriteproxytest] Link against KConfig
  * StandardActionManager is now based on QAction
  * CMake: replace most include_directories calls
  * CMake: use target_compile_definitions when possible
  * Add trailing comma to enums
- Only install the license files once</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1627646400">- Update to 21.07.90
  * New feature release
- No code change since 21.07.80</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1628251200">- Update to 21.08.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/21.08.0
- No code change since 21.07.90</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1630497600">- Update to 21.08.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.08.1
- Changes since 21.08.0:
  * Add a missing static storage class</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1633435200">- Update to 21.08.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1635854400">- Update to 21.08.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.08.3/
- No code change since 21.08.2</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1636804800">- Update to 21.11.80
  * New feature release
- Too many changes to list here.
- Drop upstream patch:
  * akonadi-apparmor-opensuse.diff</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638014400">- Update to 21.11.90
  * New feature release
- No code change since 21.11.80</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638532800">- Update to 21.12.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/21.12.0/
- Changes since 21.11.90:
  * Enable new GitLab CI on stable branch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1641297600">- Update to 21.12.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.12.1/
- Changes since 21.12.0:
  * Fix min required libaccounts-qt version</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1643716800">- Update to 21.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.12.2/
- Changes since 21.12.1:
  * Use all interface include dirs needed for LibXml2 (unbreak Windows build)
  * Fix build with GCC 12 (standard attributes in middle of decl-specifiers)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1646136000">- Update to 21.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.12.3/
- Changes since 21.12.2:
  * Use exec variable
  * Check executables exist in PATH before passing them to QProcess</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1666094400">- In SLE-15-SP3 we had patches that made akonadi fall back to
  sqlite if the mysql backend is not available. Those patches were
  already merged by upstream so we can let the package Recommend
  mysql instead of Require it, since it's not available in SLED.
  The Requires are set unless branding-SLE is installed so the
  requirements are used in Leap/TW but not in SLE where it's only
  a Recommends and an alternate Requirements is used in that case
  where the sqlite backend is installed if mysql is not available.</changelog>
</package>
<package pkgid="f3bff29bb740e68bd044099143d152a9ab06e4618854f7b89ac4d77106db77b2" name="akonadi-server-devel" arch="x86_64">
  <version epoch="0" ver="21.12.3" rel="bp154.2.3.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1617969600">- Update to 21.03.90
  * New feature release
- No code change since 21.03.80</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1618574400">- Update to 21.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/21.04
- No code change since 21.03.90</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1620820800">- Update to 21.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/21.04.1
- No code change since 21.04.0</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1622721600">- Install AppArmor profiles (as -apparmor subpackage)
- add akonadi-apparmor-opensuse.diff to adjust the profiles to
  openSUSE paths, and to add 'abi' rules to the profiles</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1623153600">- Update to 21.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.04.2
- No code change since 21.04.1</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1625659200">- Update to 21.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.04.3
- No code change since 21.04.2</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1626004800">- update akonadi-apparmor-opensuse.diff: add openSUSE Postgresql
  path in AppArmor profiles (and make it a variable to keep the
  profiles readable) and some more rules for Postgresql</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1626523200">- Update to 21.07.80
  * New feature release
- Changes since 21.04.3:
  * Make sure that we don't cancel dialog
  * Use KSharedConfig::openStateConfig
  * Allow to exclude unified folder
  * Add roleNames to AgentTypeModel for easier interfacing with QML
  * USe QStringView here
  * Fix some clazy warning
  * Add support for subquery as table expression
  * Modernize code
  * Remove references to innodb_additional_mem_pool_size
  * use forward declaration here
  * AgentServer: remove unnecessary QWidgets import
  * kde4 Migration code will be removed in kf6
  * Remove the std::auto_ptr and std::unique_ptr payload checks
  * Make the recently accessed folder list globally accessible
  * Fix Clazy exclusion for 'old-style-connect', causes CI to fail
  * It will create mem leak here too I think
  * Fix memory leak detected by ASAN, by passing qApp as parent to QTranslator.
  * [favoriteproxytest] Link against KConfig
  * StandardActionManager is now based on QAction
  * CMake: replace most include_directories calls
  * CMake: use target_compile_definitions when possible
  * Add trailing comma to enums
- Only install the license files once</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1627646400">- Update to 21.07.90
  * New feature release
- No code change since 21.07.80</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1628251200">- Update to 21.08.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/21.08.0
- No code change since 21.07.90</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1630497600">- Update to 21.08.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.08.1
- Changes since 21.08.0:
  * Add a missing static storage class</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1633435200">- Update to 21.08.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1635854400">- Update to 21.08.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.08.3/
- No code change since 21.08.2</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1636804800">- Update to 21.11.80
  * New feature release
- Too many changes to list here.
- Drop upstream patch:
  * akonadi-apparmor-opensuse.diff</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638014400">- Update to 21.11.90
  * New feature release
- No code change since 21.11.80</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638532800">- Update to 21.12.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/21.12.0/
- Changes since 21.11.90:
  * Enable new GitLab CI on stable branch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1641297600">- Update to 21.12.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.12.1/
- Changes since 21.12.0:
  * Fix min required libaccounts-qt version</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1643716800">- Update to 21.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.12.2/
- Changes since 21.12.1:
  * Use all interface include dirs needed for LibXml2 (unbreak Windows build)
  * Fix build with GCC 12 (standard attributes in middle of decl-specifiers)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1646136000">- Update to 21.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.12.3/
- Changes since 21.12.2:
  * Use exec variable
  * Check executables exist in PATH before passing them to QProcess</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1666094400">- In SLE-15-SP3 we had patches that made akonadi fall back to
  sqlite if the mysql backend is not available. Those patches were
  already merged by upstream so we can let the package Recommend
  mysql instead of Require it, since it's not available in SLED.
  The Requires are set unless branding-SLE is installed so the
  requirements are used in Leap/TW but not in SLE where it's only
  a Recommends and an alternate Requirements is used in that case
  where the sqlite backend is installed if mysql is not available.</changelog>
</package>
<package pkgid="1c003ef84030855839df42b293aa117861a70bb1c40bf64f7d88da16358f7a3b" name="akonadi-server-lang" arch="noarch">
  <version epoch="0" ver="21.12.3" rel="bp154.2.3.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1617969600">- Update to 21.03.90
  * New feature release
- No code change since 21.03.80</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1618574400">- Update to 21.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/21.04
- No code change since 21.03.90</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1620820800">- Update to 21.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/21.04.1
- No code change since 21.04.0</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1622721600">- Install AppArmor profiles (as -apparmor subpackage)
- add akonadi-apparmor-opensuse.diff to adjust the profiles to
  openSUSE paths, and to add 'abi' rules to the profiles</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1623153600">- Update to 21.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.04.2
- No code change since 21.04.1</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1625659200">- Update to 21.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.04.3
- No code change since 21.04.2</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1626004800">- update akonadi-apparmor-opensuse.diff: add openSUSE Postgresql
  path in AppArmor profiles (and make it a variable to keep the
  profiles readable) and some more rules for Postgresql</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1626523200">- Update to 21.07.80
  * New feature release
- Changes since 21.04.3:
  * Make sure that we don't cancel dialog
  * Use KSharedConfig::openStateConfig
  * Allow to exclude unified folder
  * Add roleNames to AgentTypeModel for easier interfacing with QML
  * USe QStringView here
  * Fix some clazy warning
  * Add support for subquery as table expression
  * Modernize code
  * Remove references to innodb_additional_mem_pool_size
  * use forward declaration here
  * AgentServer: remove unnecessary QWidgets import
  * kde4 Migration code will be removed in kf6
  * Remove the std::auto_ptr and std::unique_ptr payload checks
  * Make the recently accessed folder list globally accessible
  * Fix Clazy exclusion for 'old-style-connect', causes CI to fail
  * It will create mem leak here too I think
  * Fix memory leak detected by ASAN, by passing qApp as parent to QTranslator.
  * [favoriteproxytest] Link against KConfig
  * StandardActionManager is now based on QAction
  * CMake: replace most include_directories calls
  * CMake: use target_compile_definitions when possible
  * Add trailing comma to enums
- Only install the license files once</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1627646400">- Update to 21.07.90
  * New feature release
- No code change since 21.07.80</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1628251200">- Update to 21.08.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/21.08.0
- No code change since 21.07.90</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1630497600">- Update to 21.08.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.08.1
- Changes since 21.08.0:
  * Add a missing static storage class</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1633435200">- Update to 21.08.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1635854400">- Update to 21.08.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.08.3/
- No code change since 21.08.2</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1636804800">- Update to 21.11.80
  * New feature release
- Too many changes to list here.
- Drop upstream patch:
  * akonadi-apparmor-opensuse.diff</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638014400">- Update to 21.11.90
  * New feature release
- No code change since 21.11.80</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638532800">- Update to 21.12.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/21.12.0/
- Changes since 21.11.90:
  * Enable new GitLab CI on stable branch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1641297600">- Update to 21.12.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.12.1/
- Changes since 21.12.0:
  * Fix min required libaccounts-qt version</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1643716800">- Update to 21.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.12.2/
- Changes since 21.12.1:
  * Use all interface include dirs needed for LibXml2 (unbreak Windows build)
  * Fix build with GCC 12 (standard attributes in middle of decl-specifiers)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1646136000">- Update to 21.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.12.3/
- Changes since 21.12.2:
  * Use exec variable
  * Check executables exist in PATH before passing them to QProcess</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1666094400">- In SLE-15-SP3 we had patches that made akonadi fall back to
  sqlite if the mysql backend is not available. Those patches were
  already merged by upstream so we can let the package Recommend
  mysql instead of Require it, since it's not available in SLED.
  The Requires are set unless branding-SLE is installed so the
  requirements are used in Leap/TW but not in SLE where it's only
  a Recommends and an alternate Requirements is used in that case
  where the sqlite backend is installed if mysql is not available.</changelog>
</package>
<package pkgid="c57140d0dcbea2892aa174ec32ac03f0d73963afe265703a3171063704c886eb" name="akonadi-server-sqlite" arch="aarch64">
  <version epoch="0" ver="21.12.3" rel="bp154.2.3.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1617969600">- Update to 21.03.90
  * New feature release
- No code change since 21.03.80</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1618574400">- Update to 21.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/21.04
- No code change since 21.03.90</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1620820800">- Update to 21.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/21.04.1
- No code change since 21.04.0</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1622721600">- Install AppArmor profiles (as -apparmor subpackage)
- add akonadi-apparmor-opensuse.diff to adjust the profiles to
  openSUSE paths, and to add 'abi' rules to the profiles</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1623153600">- Update to 21.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.04.2
- No code change since 21.04.1</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1625659200">- Update to 21.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.04.3
- No code change since 21.04.2</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1626004800">- update akonadi-apparmor-opensuse.diff: add openSUSE Postgresql
  path in AppArmor profiles (and make it a variable to keep the
  profiles readable) and some more rules for Postgresql</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1626523200">- Update to 21.07.80
  * New feature release
- Changes since 21.04.3:
  * Make sure that we don't cancel dialog
  * Use KSharedConfig::openStateConfig
  * Allow to exclude unified folder
  * Add roleNames to AgentTypeModel for easier interfacing with QML
  * USe QStringView here
  * Fix some clazy warning
  * Add support for subquery as table expression
  * Modernize code
  * Remove references to innodb_additional_mem_pool_size
  * use forward declaration here
  * AgentServer: remove unnecessary QWidgets import
  * kde4 Migration code will be removed in kf6
  * Remove the std::auto_ptr and std::unique_ptr payload checks
  * Make the recently accessed folder list globally accessible
  * Fix Clazy exclusion for 'old-style-connect', causes CI to fail
  * It will create mem leak here too I think
  * Fix memory leak detected by ASAN, by passing qApp as parent to QTranslator.
  * [favoriteproxytest] Link against KConfig
  * StandardActionManager is now based on QAction
  * CMake: replace most include_directories calls
  * CMake: use target_compile_definitions when possible
  * Add trailing comma to enums
- Only install the license files once</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1627646400">- Update to 21.07.90
  * New feature release
- No code change since 21.07.80</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1628251200">- Update to 21.08.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/21.08.0
- No code change since 21.07.90</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1630497600">- Update to 21.08.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.08.1
- Changes since 21.08.0:
  * Add a missing static storage class</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1633435200">- Update to 21.08.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1635854400">- Update to 21.08.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.08.3/
- No code change since 21.08.2</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1636804800">- Update to 21.11.80
  * New feature release
- Too many changes to list here.
- Drop upstream patch:
  * akonadi-apparmor-opensuse.diff</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638014400">- Update to 21.11.90
  * New feature release
- No code change since 21.11.80</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638532800">- Update to 21.12.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/21.12.0/
- Changes since 21.11.90:
  * Enable new GitLab CI on stable branch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1641297600">- Update to 21.12.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.12.1/
- Changes since 21.12.0:
  * Fix min required libaccounts-qt version</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1643716800">- Update to 21.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.12.2/
- Changes since 21.12.1:
  * Use all interface include dirs needed for LibXml2 (unbreak Windows build)
  * Fix build with GCC 12 (standard attributes in middle of decl-specifiers)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1646136000">- Update to 21.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.12.3/
- Changes since 21.12.2:
  * Use exec variable
  * Check executables exist in PATH before passing them to QProcess</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1666094400">- In SLE-15-SP3 we had patches that made akonadi fall back to
  sqlite if the mysql backend is not available. Those patches were
  already merged by upstream so we can let the package Recommend
  mysql instead of Require it, since it's not available in SLED.
  The Requires are set unless branding-SLE is installed so the
  requirements are used in Leap/TW but not in SLE where it's only
  a Recommends and an alternate Requirements is used in that case
  where the sqlite backend is installed if mysql is not available.</changelog>
</package>
<package pkgid="834a3456182cf490b696ecf3b869c3f3da3124ca66d38567b2961df56d3592f6" name="akonadi-server-sqlite" arch="ppc64le">
  <version epoch="0" ver="21.12.3" rel="bp154.2.3.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1617969600">- Update to 21.03.90
  * New feature release
- No code change since 21.03.80</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1618574400">- Update to 21.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/21.04
- No code change since 21.03.90</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1620820800">- Update to 21.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/21.04.1
- No code change since 21.04.0</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1622721600">- Install AppArmor profiles (as -apparmor subpackage)
- add akonadi-apparmor-opensuse.diff to adjust the profiles to
  openSUSE paths, and to add 'abi' rules to the profiles</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1623153600">- Update to 21.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.04.2
- No code change since 21.04.1</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1625659200">- Update to 21.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.04.3
- No code change since 21.04.2</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1626004800">- update akonadi-apparmor-opensuse.diff: add openSUSE Postgresql
  path in AppArmor profiles (and make it a variable to keep the
  profiles readable) and some more rules for Postgresql</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1626523200">- Update to 21.07.80
  * New feature release
- Changes since 21.04.3:
  * Make sure that we don't cancel dialog
  * Use KSharedConfig::openStateConfig
  * Allow to exclude unified folder
  * Add roleNames to AgentTypeModel for easier interfacing with QML
  * USe QStringView here
  * Fix some clazy warning
  * Add support for subquery as table expression
  * Modernize code
  * Remove references to innodb_additional_mem_pool_size
  * use forward declaration here
  * AgentServer: remove unnecessary QWidgets import
  * kde4 Migration code will be removed in kf6
  * Remove the std::auto_ptr and std::unique_ptr payload checks
  * Make the recently accessed folder list globally accessible
  * Fix Clazy exclusion for 'old-style-connect', causes CI to fail
  * It will create mem leak here too I think
  * Fix memory leak detected by ASAN, by passing qApp as parent to QTranslator.
  * [favoriteproxytest] Link against KConfig
  * StandardActionManager is now based on QAction
  * CMake: replace most include_directories calls
  * CMake: use target_compile_definitions when possible
  * Add trailing comma to enums
- Only install the license files once</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1627646400">- Update to 21.07.90
  * New feature release
- No code change since 21.07.80</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1628251200">- Update to 21.08.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/21.08.0
- No code change since 21.07.90</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1630497600">- Update to 21.08.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.08.1
- Changes since 21.08.0:
  * Add a missing static storage class</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1633435200">- Update to 21.08.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1635854400">- Update to 21.08.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.08.3/
- No code change since 21.08.2</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1636804800">- Update to 21.11.80
  * New feature release
- Too many changes to list here.
- Drop upstream patch:
  * akonadi-apparmor-opensuse.diff</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638014400">- Update to 21.11.90
  * New feature release
- No code change since 21.11.80</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638532800">- Update to 21.12.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/21.12.0/
- Changes since 21.11.90:
  * Enable new GitLab CI on stable branch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1641297600">- Update to 21.12.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.12.1/
- Changes since 21.12.0:
  * Fix min required libaccounts-qt version</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1643716800">- Update to 21.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.12.2/
- Changes since 21.12.1:
  * Use all interface include dirs needed for LibXml2 (unbreak Windows build)
  * Fix build with GCC 12 (standard attributes in middle of decl-specifiers)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1646136000">- Update to 21.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.12.3/
- Changes since 21.12.2:
  * Use exec variable
  * Check executables exist in PATH before passing them to QProcess</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1666094400">- In SLE-15-SP3 we had patches that made akonadi fall back to
  sqlite if the mysql backend is not available. Those patches were
  already merged by upstream so we can let the package Recommend
  mysql instead of Require it, since it's not available in SLED.
  The Requires are set unless branding-SLE is installed so the
  requirements are used in Leap/TW but not in SLE where it's only
  a Recommends and an alternate Requirements is used in that case
  where the sqlite backend is installed if mysql is not available.</changelog>
</package>
<package pkgid="6f068b9c4df2e55e133674c43aca706d4ccaa1c7debae11e63930660aa144358" name="akonadi-server-sqlite" arch="s390x">
  <version epoch="0" ver="21.12.3" rel="bp154.2.3.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1617969600">- Update to 21.03.90
  * New feature release
- No code change since 21.03.80</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1618574400">- Update to 21.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/21.04
- No code change since 21.03.90</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1620820800">- Update to 21.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/21.04.1
- No code change since 21.04.0</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1622721600">- Install AppArmor profiles (as -apparmor subpackage)
- add akonadi-apparmor-opensuse.diff to adjust the profiles to
  openSUSE paths, and to add 'abi' rules to the profiles</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1623153600">- Update to 21.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.04.2
- No code change since 21.04.1</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1625659200">- Update to 21.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.04.3
- No code change since 21.04.2</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1626004800">- update akonadi-apparmor-opensuse.diff: add openSUSE Postgresql
  path in AppArmor profiles (and make it a variable to keep the
  profiles readable) and some more rules for Postgresql</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1626523200">- Update to 21.07.80
  * New feature release
- Changes since 21.04.3:
  * Make sure that we don't cancel dialog
  * Use KSharedConfig::openStateConfig
  * Allow to exclude unified folder
  * Add roleNames to AgentTypeModel for easier interfacing with QML
  * USe QStringView here
  * Fix some clazy warning
  * Add support for subquery as table expression
  * Modernize code
  * Remove references to innodb_additional_mem_pool_size
  * use forward declaration here
  * AgentServer: remove unnecessary QWidgets import
  * kde4 Migration code will be removed in kf6
  * Remove the std::auto_ptr and std::unique_ptr payload checks
  * Make the recently accessed folder list globally accessible
  * Fix Clazy exclusion for 'old-style-connect', causes CI to fail
  * It will create mem leak here too I think
  * Fix memory leak detected by ASAN, by passing qApp as parent to QTranslator.
  * [favoriteproxytest] Link against KConfig
  * StandardActionManager is now based on QAction
  * CMake: replace most include_directories calls
  * CMake: use target_compile_definitions when possible
  * Add trailing comma to enums
- Only install the license files once</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1627646400">- Update to 21.07.90
  * New feature release
- No code change since 21.07.80</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1628251200">- Update to 21.08.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/21.08.0
- No code change since 21.07.90</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1630497600">- Update to 21.08.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.08.1
- Changes since 21.08.0:
  * Add a missing static storage class</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1633435200">- Update to 21.08.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1635854400">- Update to 21.08.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.08.3/
- No code change since 21.08.2</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1636804800">- Update to 21.11.80
  * New feature release
- Too many changes to list here.
- Drop upstream patch:
  * akonadi-apparmor-opensuse.diff</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638014400">- Update to 21.11.90
  * New feature release
- No code change since 21.11.80</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638532800">- Update to 21.12.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/21.12.0/
- Changes since 21.11.90:
  * Enable new GitLab CI on stable branch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1641297600">- Update to 21.12.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.12.1/
- Changes since 21.12.0:
  * Fix min required libaccounts-qt version</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1643716800">- Update to 21.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.12.2/
- Changes since 21.12.1:
  * Use all interface include dirs needed for LibXml2 (unbreak Windows build)
  * Fix build with GCC 12 (standard attributes in middle of decl-specifiers)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1646136000">- Update to 21.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.12.3/
- Changes since 21.12.2:
  * Use exec variable
  * Check executables exist in PATH before passing them to QProcess</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1666094400">- In SLE-15-SP3 we had patches that made akonadi fall back to
  sqlite if the mysql backend is not available. Those patches were
  already merged by upstream so we can let the package Recommend
  mysql instead of Require it, since it's not available in SLED.
  The Requires are set unless branding-SLE is installed so the
  requirements are used in Leap/TW but not in SLE where it's only
  a Recommends and an alternate Requirements is used in that case
  where the sqlite backend is installed if mysql is not available.</changelog>
</package>
<package pkgid="ee0bc230cf85b37cd141ed4fb565147501e52597da2da9a8102ed513bb5290b8" name="akonadi-server-sqlite" arch="x86_64">
  <version epoch="0" ver="21.12.3" rel="bp154.2.3.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1617969600">- Update to 21.03.90
  * New feature release
- No code change since 21.03.80</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1618574400">- Update to 21.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/21.04
- No code change since 21.03.90</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1620820800">- Update to 21.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/21.04.1
- No code change since 21.04.0</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1622721600">- Install AppArmor profiles (as -apparmor subpackage)
- add akonadi-apparmor-opensuse.diff to adjust the profiles to
  openSUSE paths, and to add 'abi' rules to the profiles</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1623153600">- Update to 21.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.04.2
- No code change since 21.04.1</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1625659200">- Update to 21.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.04.3
- No code change since 21.04.2</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1626004800">- update akonadi-apparmor-opensuse.diff: add openSUSE Postgresql
  path in AppArmor profiles (and make it a variable to keep the
  profiles readable) and some more rules for Postgresql</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1626523200">- Update to 21.07.80
  * New feature release
- Changes since 21.04.3:
  * Make sure that we don't cancel dialog
  * Use KSharedConfig::openStateConfig
  * Allow to exclude unified folder
  * Add roleNames to AgentTypeModel for easier interfacing with QML
  * USe QStringView here
  * Fix some clazy warning
  * Add support for subquery as table expression
  * Modernize code
  * Remove references to innodb_additional_mem_pool_size
  * use forward declaration here
  * AgentServer: remove unnecessary QWidgets import
  * kde4 Migration code will be removed in kf6
  * Remove the std::auto_ptr and std::unique_ptr payload checks
  * Make the recently accessed folder list globally accessible
  * Fix Clazy exclusion for 'old-style-connect', causes CI to fail
  * It will create mem leak here too I think
  * Fix memory leak detected by ASAN, by passing qApp as parent to QTranslator.
  * [favoriteproxytest] Link against KConfig
  * StandardActionManager is now based on QAction
  * CMake: replace most include_directories calls
  * CMake: use target_compile_definitions when possible
  * Add trailing comma to enums
- Only install the license files once</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1627646400">- Update to 21.07.90
  * New feature release
- No code change since 21.07.80</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1628251200">- Update to 21.08.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/21.08.0
- No code change since 21.07.90</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1630497600">- Update to 21.08.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.08.1
- Changes since 21.08.0:
  * Add a missing static storage class</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1633435200">- Update to 21.08.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1635854400">- Update to 21.08.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.08.3/
- No code change since 21.08.2</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1636804800">- Update to 21.11.80
  * New feature release
- Too many changes to list here.
- Drop upstream patch:
  * akonadi-apparmor-opensuse.diff</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638014400">- Update to 21.11.90
  * New feature release
- No code change since 21.11.80</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638532800">- Update to 21.12.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/21.12.0/
- Changes since 21.11.90:
  * Enable new GitLab CI on stable branch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1641297600">- Update to 21.12.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.12.1/
- Changes since 21.12.0:
  * Fix min required libaccounts-qt version</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1643716800">- Update to 21.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.12.2/
- Changes since 21.12.1:
  * Use all interface include dirs needed for LibXml2 (unbreak Windows build)
  * Fix build with GCC 12 (standard attributes in middle of decl-specifiers)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1646136000">- Update to 21.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.12.3/
- Changes since 21.12.2:
  * Use exec variable
  * Check executables exist in PATH before passing them to QProcess</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1666094400">- In SLE-15-SP3 we had patches that made akonadi fall back to
  sqlite if the mysql backend is not available. Those patches were
  already merged by upstream so we can let the package Recommend
  mysql instead of Require it, since it's not available in SLED.
  The Requires are set unless branding-SLE is installed so the
  requirements are used in Leap/TW but not in SLE where it's only
  a Recommends and an alternate Requirements is used in that case
  where the sqlite backend is installed if mysql is not available.</changelog>
</package>
<package pkgid="d0f907b456f6eaa7b5aae05d6de47105747266edb545fb0c517eb99c2548e9d8" name="amarok" arch="aarch64">
  <version epoch="0" ver="2.9.75git.20220614T014846~dc55a00143" rel="bp154.2.3.1"/>
  <changelog author="wbauer@tmo.at" date="1559044800">- Add back gstreamer-plugins-ugly Recommends (if
  phonon4qt5-backend-gstreamer is installed) to make mp3 playback
  work out of the box
- Require libqt5-qtquickcontrols instead of libqt5-qtquickcontrols2
  as the former is used/needed too and the latter is required by
  kirigami2 anyway</changelog>
  <changelog author="christophe@krop.fr" date="1560513600">- Update to version 2.9.70git.20190614T140058~cea336303a:
  * Fix passing local file paths on the command line</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1563278400">- Remove the taglib runtime Requires, these are just examples and
  are not used, the automatic library dependencies are sufficient.</changelog>
  <changelog author="christophe@krop.fr" date="1566388800">- Update to version 2.9.70git.20190820T023444~600806141d:
  * Fix the CI build
  * Use identical internet-services icon</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1566388801">- Add 0001-Fix-a-crash-when-running-amarok-l-path-to-file.patch (kde#410870)</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1568980800">- Update to version 2.9.70git.20190920T110913~b986f52d1d:
  * Don't delete whole folder when deleting a track (kde#411760)
  * [TagDialog] Really enable "Open in filemanager" button for local files
  * Fix a crash when running 'amarok -l /path/to/file' (kde#410870)
- Drop 0001-Fix-a-crash-when-running-amarok-l-path-to-file.patch,
  merged upstream</changelog>
  <changelog author="christophe@krop.fr" date="1570708800">- Update to version 2.9.70git.20191004T143525~5ed62f9a08:
  * Register Play/Pause as global shortcut again (boo#1152751, kde#373590)
  * Fix missing directory separators when saving podcasts to disk</changelog>
  <changelog author="christophe@krop.fr" date="1581163200">- Update to version 2.9.70git.20200131T110159~195748144f:
  * Use safe hardcoded value for ProvidersUrl</changelog>
  <changelog author="christophe@krop.fr" date="1582718400">- Update to version 2.9.70git.20200225T224218~2084224e4c:
  * Fix error of Wikipedia entering in an infinite recursion of page loading
  * Fix metainfo generation for Amarok applets
  * Fix loading of lyrics from lyrics.wikia.com
  * Removed obsolete PackagePath role from AppletModel</changelog>
  <changelog author="christophe@krop.fr" date="1589025600">- Update to version 2.9.70git.20200505T221221~fd05592cd8:
  * fix compilation on FreeBSD where --libmysql-libs does not exist
  * Fix the define used to distinguish MariaDB from Mysql
  * Add override identifiers
  * Remove MPRIS1 support
  * Use desktop entry spec compliant X-KDE-ServiceTypes keys
  * Set StartupWMClass in desktop file
  * Make icons look sharp with HiDPI
  * Port from {from,to}Time_t to {from,to}SecsSinceEpoch
  * Use currentDateTimeUtc().toTime_t()
  * Add more override markers
  * Remove Phabricator's .arcconfig
  * Remove nepmukcollection
  * Add more override markers
  * Conclude porting of Last.fm to Amarok KF5
  * Fix copying and moving files to collection
  * Fix dangling string pointers
  * Add more override markers
  * build: remove extra CMakeLists.txt
  * build: re-enable the documentation
  * Fix compatibility with modern MySQL
  * DiagnosticDialog: Use QStringLiteral
  * Fix a crash when trying to open the DiagnosticDialog
  * Fix duplicate include guard
  * Add more override markers
  * PHAACG2.py: fix comparison with literal
  * appdata: improve URLs
- Update translations
- Rebase amarok_mariadb.patch
- Rebase 0001-Work-around-QTBUG-75797-for-openQA.patch</changelog>
  <changelog author="wbauer@tmo.at" date="1592395200">- Update to version 2.9.70git.20200617T113036~a69c9418b4:
  * Fix activeTrackChanged connect in playlist navigators
    (kde#418643,kde#389138)
  * Fix Increase/Decrease Volume shortcuts (boo#1152751)
  * Extract messages from QML
  * Make include compatible with mariadb</changelog>
  <changelog author="christophe@krop.fr" date="1596801600">- Update to version 2.9.70git.20200731T193253~4ae108506f:
  * Fix breadcrumb widget for left menu
  * Fix crash when closing dialog to edit filter (kde#421456)
  * qVariantFromValue() -&gt; QVariant::fromValue()
  * Drop old copy of Qt modeltest
  * Use https for bugs.kde.org</changelog>
  <changelog author="christophe@krop.fr" date="1601467200">- Update to version 2.9.70git.20200930T124856~3973278a68:
  * Replace qtscript with qjs engine
  * Drop superfluous ZLIB linking
  * Add FindMariaDB.cmake module and use it if MySQL is not found
  * FindMySQL.cmake: Split out MySQL Embedded detection into FindMySQLe.cmake
  * Port Amarok Script Engine from deprecated QScriptEngine to QJSEngine
  * Update stylesheet to QT5
  * Replace deprecated Phonon module with PulseAudio
  * cmake: install amarok.knsrc in newer ECM 5.58.0+ location
  * appdata: use canonical help URL
- Drop amarok_mariadb.patch
- Update translations</changelog>
  <changelog author="christophe@krop.fr" date="1608638400">- Update to version 2.9.70git.20201222T022603~89d13c15ad:
  * Fix last context applet missing from toolbar on program startup
  * Changing KStatusNotifier's ToolTipTitle to 'Now playing'
    and the rich text track details to ToolTipSubTitle instead
  * Update org.kde.amarok.appdata.xml
  * Remove button to move to the system sound settings
- Update translations</changelog>
  <changelog author="christophe@krop.fr" date="1614168000">- Update to version 2.9.70git.20210220T172242~b94c362c1d:
  * replace QModelIndex.child to remove deprecated functions from Qt 5.8
  * Replace functions deprecated in Qt 5.7 and earlier
  * Properly use KLocalizedString for dynamic placeholder replacement
  * typo fixes
  * Use more secure URL
  * Don't use deprecated headers
  * Add CMake module used by release script
  * Bump plugin version to 74 in preparation for 2.9.71
  * Add multiplier 2 to the size of generated play-pause
    button and volume dial pixmaps.
  * Smoothen the rendering of play/pause button, volume
    dial and main toolbar's previous and next buttons on scaled UIs
- Update translations</changelog>
  <changelog author="christophe@krop.fr" date="1625227200">- Update to version 2.9.75git.20210626T134054~59b22189f6:
  * Scan history of played tracks till find a playble track (kde#438651)
  * Prevent Signal from kRichTextEdit during deletion
  * Prevent Amarok from stalling if the standard playing mode is used
    and next (or previous) file does not exist
  * Update IRC network
  * Drop unused KF5NotifyConfig
  * Fix crash when reloading scriptable services
  * Replace deprecated toList() with values()
  * Add .gitlab-ci.yml
  * Drop all the amarok-neon packaging bits
  * Fix disambiguation found by gettext 0.21</changelog>
  <changelog author="christophe@krop.fr" date="1631102400">- Update to version 2.9.75git.20210830T182443~10309f00af:
  * Set Attributes before constructing the Application
  * Port away from KRandom, bump Qt req. ver. to 5.10
- Rebase 0001-Work-around-QTBUG-75797-for-openQA.patch
- Update translations</changelog>
  <changelog author="christophe@krop.fr" date="1641470400">- Update to version 2.9.75git.20220102T131246~92aa01de32:
  * cmake: drop the recently removed upnpcollection
  * Remove upnpcollection plugin
  * Add -DQT_NO_CAST_TO_ASCII and fix compilation
  * Fixed non-resuming playback on startup
  * Enable new Gitlab CI
  * Add include of algorithm for std::sort and std::stable_sort
  * Replace functions deprecated in Qt 5.9 and earlier
  * Update Readme</changelog>
  <changelog author="christophe@krop.fr" date="1645704000">- Update to version 2.9.75git.20220224T114455~9300034c57:
  * Add DBus service file to actually make it activatable (boo#1200767)
  * No need to link to KF5::KIONTLM</changelog>
  <changelog author="christophe@krop.fr" date="1655985600">- Update to version 2.9.75git.20220614T014846~dc55a00143:
  * Mark Amarok as a single main window program
- Update translations
- Rebase flac_mimetype_bnc671581.diff</changelog>
</package>
<package pkgid="19a25f94ac79634c2cc65a62f0b883d3f550f2cea18be693c5dfbb0b12ab82d9" name="amarok" arch="src">
  <version epoch="0" ver="2.9.75git.20220614T014846~dc55a00143" rel="bp154.2.3.1"/>
  <changelog author="wbauer@tmo.at" date="1559044800">- Add back gstreamer-plugins-ugly Recommends (if
  phonon4qt5-backend-gstreamer is installed) to make mp3 playback
  work out of the box
- Require libqt5-qtquickcontrols instead of libqt5-qtquickcontrols2
  as the former is used/needed too and the latter is required by
  kirigami2 anyway</changelog>
  <changelog author="christophe@krop.fr" date="1560513600">- Update to version 2.9.70git.20190614T140058~cea336303a:
  * Fix passing local file paths on the command line</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1563278400">- Remove the taglib runtime Requires, these are just examples and
  are not used, the automatic library dependencies are sufficient.</changelog>
  <changelog author="christophe@krop.fr" date="1566388800">- Update to version 2.9.70git.20190820T023444~600806141d:
  * Fix the CI build
  * Use identical internet-services icon</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1566388801">- Add 0001-Fix-a-crash-when-running-amarok-l-path-to-file.patch (kde#410870)</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1568980800">- Update to version 2.9.70git.20190920T110913~b986f52d1d:
  * Don't delete whole folder when deleting a track (kde#411760)
  * [TagDialog] Really enable "Open in filemanager" button for local files
  * Fix a crash when running 'amarok -l /path/to/file' (kde#410870)
- Drop 0001-Fix-a-crash-when-running-amarok-l-path-to-file.patch,
  merged upstream</changelog>
  <changelog author="christophe@krop.fr" date="1570708800">- Update to version 2.9.70git.20191004T143525~5ed62f9a08:
  * Register Play/Pause as global shortcut again (boo#1152751, kde#373590)
  * Fix missing directory separators when saving podcasts to disk</changelog>
  <changelog author="christophe@krop.fr" date="1581163200">- Update to version 2.9.70git.20200131T110159~195748144f:
  * Use safe hardcoded value for ProvidersUrl</changelog>
  <changelog author="christophe@krop.fr" date="1582718400">- Update to version 2.9.70git.20200225T224218~2084224e4c:
  * Fix error of Wikipedia entering in an infinite recursion of page loading
  * Fix metainfo generation for Amarok applets
  * Fix loading of lyrics from lyrics.wikia.com
  * Removed obsolete PackagePath role from AppletModel</changelog>
  <changelog author="christophe@krop.fr" date="1589025600">- Update to version 2.9.70git.20200505T221221~fd05592cd8:
  * fix compilation on FreeBSD where --libmysql-libs does not exist
  * Fix the define used to distinguish MariaDB from Mysql
  * Add override identifiers
  * Remove MPRIS1 support
  * Use desktop entry spec compliant X-KDE-ServiceTypes keys
  * Set StartupWMClass in desktop file
  * Make icons look sharp with HiDPI
  * Port from {from,to}Time_t to {from,to}SecsSinceEpoch
  * Use currentDateTimeUtc().toTime_t()
  * Add more override markers
  * Remove Phabricator's .arcconfig
  * Remove nepmukcollection
  * Add more override markers
  * Conclude porting of Last.fm to Amarok KF5
  * Fix copying and moving files to collection
  * Fix dangling string pointers
  * Add more override markers
  * build: remove extra CMakeLists.txt
  * build: re-enable the documentation
  * Fix compatibility with modern MySQL
  * DiagnosticDialog: Use QStringLiteral
  * Fix a crash when trying to open the DiagnosticDialog
  * Fix duplicate include guard
  * Add more override markers
  * PHAACG2.py: fix comparison with literal
  * appdata: improve URLs
- Update translations
- Rebase amarok_mariadb.patch
- Rebase 0001-Work-around-QTBUG-75797-for-openQA.patch</changelog>
  <changelog author="wbauer@tmo.at" date="1592395200">- Update to version 2.9.70git.20200617T113036~a69c9418b4:
  * Fix activeTrackChanged connect in playlist navigators
    (kde#418643,kde#389138)
  * Fix Increase/Decrease Volume shortcuts (boo#1152751)
  * Extract messages from QML
  * Make include compatible with mariadb</changelog>
  <changelog author="christophe@krop.fr" date="1596801600">- Update to version 2.9.70git.20200731T193253~4ae108506f:
  * Fix breadcrumb widget for left menu
  * Fix crash when closing dialog to edit filter (kde#421456)
  * qVariantFromValue() -&gt; QVariant::fromValue()
  * Drop old copy of Qt modeltest
  * Use https for bugs.kde.org</changelog>
  <changelog author="christophe@krop.fr" date="1601467200">- Update to version 2.9.70git.20200930T124856~3973278a68:
  * Replace qtscript with qjs engine
  * Drop superfluous ZLIB linking
  * Add FindMariaDB.cmake module and use it if MySQL is not found
  * FindMySQL.cmake: Split out MySQL Embedded detection into FindMySQLe.cmake
  * Port Amarok Script Engine from deprecated QScriptEngine to QJSEngine
  * Update stylesheet to QT5
  * Replace deprecated Phonon module with PulseAudio
  * cmake: install amarok.knsrc in newer ECM 5.58.0+ location
  * appdata: use canonical help URL
- Drop amarok_mariadb.patch
- Update translations</changelog>
  <changelog author="christophe@krop.fr" date="1608638400">- Update to version 2.9.70git.20201222T022603~89d13c15ad:
  * Fix last context applet missing from toolbar on program startup
  * Changing KStatusNotifier's ToolTipTitle to 'Now playing'
    and the rich text track details to ToolTipSubTitle instead
  * Update org.kde.amarok.appdata.xml
  * Remove button to move to the system sound settings
- Update translations</changelog>
  <changelog author="christophe@krop.fr" date="1614168000">- Update to version 2.9.70git.20210220T172242~b94c362c1d:
  * replace QModelIndex.child to remove deprecated functions from Qt 5.8
  * Replace functions deprecated in Qt 5.7 and earlier
  * Properly use KLocalizedString for dynamic placeholder replacement
  * typo fixes
  * Use more secure URL
  * Don't use deprecated headers
  * Add CMake module used by release script
  * Bump plugin version to 74 in preparation for 2.9.71
  * Add multiplier 2 to the size of generated play-pause
    button and volume dial pixmaps.
  * Smoothen the rendering of play/pause button, volume
    dial and main toolbar's previous and next buttons on scaled UIs
- Update translations</changelog>
  <changelog author="christophe@krop.fr" date="1625227200">- Update to version 2.9.75git.20210626T134054~59b22189f6:
  * Scan history of played tracks till find a playble track (kde#438651)
  * Prevent Signal from kRichTextEdit during deletion
  * Prevent Amarok from stalling if the standard playing mode is used
    and next (or previous) file does not exist
  * Update IRC network
  * Drop unused KF5NotifyConfig
  * Fix crash when reloading scriptable services
  * Replace deprecated toList() with values()
  * Add .gitlab-ci.yml
  * Drop all the amarok-neon packaging bits
  * Fix disambiguation found by gettext 0.21</changelog>
  <changelog author="christophe@krop.fr" date="1631102400">- Update to version 2.9.75git.20210830T182443~10309f00af:
  * Set Attributes before constructing the Application
  * Port away from KRandom, bump Qt req. ver. to 5.10
- Rebase 0001-Work-around-QTBUG-75797-for-openQA.patch
- Update translations</changelog>
  <changelog author="christophe@krop.fr" date="1641470400">- Update to version 2.9.75git.20220102T131246~92aa01de32:
  * cmake: drop the recently removed upnpcollection
  * Remove upnpcollection plugin
  * Add -DQT_NO_CAST_TO_ASCII and fix compilation
  * Fixed non-resuming playback on startup
  * Enable new Gitlab CI
  * Add include of algorithm for std::sort and std::stable_sort
  * Replace functions deprecated in Qt 5.9 and earlier
  * Update Readme</changelog>
  <changelog author="christophe@krop.fr" date="1645704000">- Update to version 2.9.75git.20220224T114455~9300034c57:
  * Add DBus service file to actually make it activatable (boo#1200767)
  * No need to link to KF5::KIONTLM</changelog>
  <changelog author="christophe@krop.fr" date="1655985600">- Update to version 2.9.75git.20220614T014846~dc55a00143:
  * Mark Amarok as a single main window program
- Update translations
- Rebase flac_mimetype_bnc671581.diff</changelog>
</package>
<package pkgid="f1c000ab178e11d8cf37ac2bf270fd5b7318c3522fcd27fcb5ff1a8c5ceb69b7" name="amarok" arch="x86_64">
  <version epoch="0" ver="2.9.75git.20220614T014846~dc55a00143" rel="bp154.2.3.1"/>
  <changelog author="wbauer@tmo.at" date="1559044800">- Add back gstreamer-plugins-ugly Recommends (if
  phonon4qt5-backend-gstreamer is installed) to make mp3 playback
  work out of the box
- Require libqt5-qtquickcontrols instead of libqt5-qtquickcontrols2
  as the former is used/needed too and the latter is required by
  kirigami2 anyway</changelog>
  <changelog author="christophe@krop.fr" date="1560513600">- Update to version 2.9.70git.20190614T140058~cea336303a:
  * Fix passing local file paths on the command line</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1563278400">- Remove the taglib runtime Requires, these are just examples and
  are not used, the automatic library dependencies are sufficient.</changelog>
  <changelog author="christophe@krop.fr" date="1566388800">- Update to version 2.9.70git.20190820T023444~600806141d:
  * Fix the CI build
  * Use identical internet-services icon</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1566388801">- Add 0001-Fix-a-crash-when-running-amarok-l-path-to-file.patch (kde#410870)</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1568980800">- Update to version 2.9.70git.20190920T110913~b986f52d1d:
  * Don't delete whole folder when deleting a track (kde#411760)
  * [TagDialog] Really enable "Open in filemanager" button for local files
  * Fix a crash when running 'amarok -l /path/to/file' (kde#410870)
- Drop 0001-Fix-a-crash-when-running-amarok-l-path-to-file.patch,
  merged upstream</changelog>
  <changelog author="christophe@krop.fr" date="1570708800">- Update to version 2.9.70git.20191004T143525~5ed62f9a08:
  * Register Play/Pause as global shortcut again (boo#1152751, kde#373590)
  * Fix missing directory separators when saving podcasts to disk</changelog>
  <changelog author="christophe@krop.fr" date="1581163200">- Update to version 2.9.70git.20200131T110159~195748144f:
  * Use safe hardcoded value for ProvidersUrl</changelog>
  <changelog author="christophe@krop.fr" date="1582718400">- Update to version 2.9.70git.20200225T224218~2084224e4c:
  * Fix error of Wikipedia entering in an infinite recursion of page loading
  * Fix metainfo generation for Amarok applets
  * Fix loading of lyrics from lyrics.wikia.com
  * Removed obsolete PackagePath role from AppletModel</changelog>
  <changelog author="christophe@krop.fr" date="1589025600">- Update to version 2.9.70git.20200505T221221~fd05592cd8:
  * fix compilation on FreeBSD where --libmysql-libs does not exist
  * Fix the define used to distinguish MariaDB from Mysql
  * Add override identifiers
  * Remove MPRIS1 support
  * Use desktop entry spec compliant X-KDE-ServiceTypes keys
  * Set StartupWMClass in desktop file
  * Make icons look sharp with HiDPI
  * Port from {from,to}Time_t to {from,to}SecsSinceEpoch
  * Use currentDateTimeUtc().toTime_t()
  * Add more override markers
  * Remove Phabricator's .arcconfig
  * Remove nepmukcollection
  * Add more override markers
  * Conclude porting of Last.fm to Amarok KF5
  * Fix copying and moving files to collection
  * Fix dangling string pointers
  * Add more override markers
  * build: remove extra CMakeLists.txt
  * build: re-enable the documentation
  * Fix compatibility with modern MySQL
  * DiagnosticDialog: Use QStringLiteral
  * Fix a crash when trying to open the DiagnosticDialog
  * Fix duplicate include guard
  * Add more override markers
  * PHAACG2.py: fix comparison with literal
  * appdata: improve URLs
- Update translations
- Rebase amarok_mariadb.patch
- Rebase 0001-Work-around-QTBUG-75797-for-openQA.patch</changelog>
  <changelog author="wbauer@tmo.at" date="1592395200">- Update to version 2.9.70git.20200617T113036~a69c9418b4:
  * Fix activeTrackChanged connect in playlist navigators
    (kde#418643,kde#389138)
  * Fix Increase/Decrease Volume shortcuts (boo#1152751)
  * Extract messages from QML
  * Make include compatible with mariadb</changelog>
  <changelog author="christophe@krop.fr" date="1596801600">- Update to version 2.9.70git.20200731T193253~4ae108506f:
  * Fix breadcrumb widget for left menu
  * Fix crash when closing dialog to edit filter (kde#421456)
  * qVariantFromValue() -&gt; QVariant::fromValue()
  * Drop old copy of Qt modeltest
  * Use https for bugs.kde.org</changelog>
  <changelog author="christophe@krop.fr" date="1601467200">- Update to version 2.9.70git.20200930T124856~3973278a68:
  * Replace qtscript with qjs engine
  * Drop superfluous ZLIB linking
  * Add FindMariaDB.cmake module and use it if MySQL is not found
  * FindMySQL.cmake: Split out MySQL Embedded detection into FindMySQLe.cmake
  * Port Amarok Script Engine from deprecated QScriptEngine to QJSEngine
  * Update stylesheet to QT5
  * Replace deprecated Phonon module with PulseAudio
  * cmake: install amarok.knsrc in newer ECM 5.58.0+ location
  * appdata: use canonical help URL
- Drop amarok_mariadb.patch
- Update translations</changelog>
  <changelog author="christophe@krop.fr" date="1608638400">- Update to version 2.9.70git.20201222T022603~89d13c15ad:
  * Fix last context applet missing from toolbar on program startup
  * Changing KStatusNotifier's ToolTipTitle to 'Now playing'
    and the rich text track details to ToolTipSubTitle instead
  * Update org.kde.amarok.appdata.xml
  * Remove button to move to the system sound settings
- Update translations</changelog>
  <changelog author="christophe@krop.fr" date="1614168000">- Update to version 2.9.70git.20210220T172242~b94c362c1d:
  * replace QModelIndex.child to remove deprecated functions from Qt 5.8
  * Replace functions deprecated in Qt 5.7 and earlier
  * Properly use KLocalizedString for dynamic placeholder replacement
  * typo fixes
  * Use more secure URL
  * Don't use deprecated headers
  * Add CMake module used by release script
  * Bump plugin version to 74 in preparation for 2.9.71
  * Add multiplier 2 to the size of generated play-pause
    button and volume dial pixmaps.
  * Smoothen the rendering of play/pause button, volume
    dial and main toolbar's previous and next buttons on scaled UIs
- Update translations</changelog>
  <changelog author="christophe@krop.fr" date="1625227200">- Update to version 2.9.75git.20210626T134054~59b22189f6:
  * Scan history of played tracks till find a playble track (kde#438651)
  * Prevent Signal from kRichTextEdit during deletion
  * Prevent Amarok from stalling if the standard playing mode is used
    and next (or previous) file does not exist
  * Update IRC network
  * Drop unused KF5NotifyConfig
  * Fix crash when reloading scriptable services
  * Replace deprecated toList() with values()
  * Add .gitlab-ci.yml
  * Drop all the amarok-neon packaging bits
  * Fix disambiguation found by gettext 0.21</changelog>
  <changelog author="christophe@krop.fr" date="1631102400">- Update to version 2.9.75git.20210830T182443~10309f00af:
  * Set Attributes before constructing the Application
  * Port away from KRandom, bump Qt req. ver. to 5.10
- Rebase 0001-Work-around-QTBUG-75797-for-openQA.patch
- Update translations</changelog>
  <changelog author="christophe@krop.fr" date="1641470400">- Update to version 2.9.75git.20220102T131246~92aa01de32:
  * cmake: drop the recently removed upnpcollection
  * Remove upnpcollection plugin
  * Add -DQT_NO_CAST_TO_ASCII and fix compilation
  * Fixed non-resuming playback on startup
  * Enable new Gitlab CI
  * Add include of algorithm for std::sort and std::stable_sort
  * Replace functions deprecated in Qt 5.9 and earlier
  * Update Readme</changelog>
  <changelog author="christophe@krop.fr" date="1645704000">- Update to version 2.9.75git.20220224T114455~9300034c57:
  * Add DBus service file to actually make it activatable (boo#1200767)
  * No need to link to KF5::KIONTLM</changelog>
  <changelog author="christophe@krop.fr" date="1655985600">- Update to version 2.9.75git.20220614T014846~dc55a00143:
  * Mark Amarok as a single main window program
- Update translations
- Rebase flac_mimetype_bnc671581.diff</changelog>
</package>
<package pkgid="c4e22a9276f353f15ed90ed3cc162013a463ee19499979e565ec13f960e93b9f" name="amarok-lang" arch="noarch">
  <version epoch="0" ver="2.9.75git.20220614T014846~dc55a00143" rel="bp154.2.3.1"/>
  <changelog author="wbauer@tmo.at" date="1559044800">- Add back gstreamer-plugins-ugly Recommends (if
  phonon4qt5-backend-gstreamer is installed) to make mp3 playback
  work out of the box
- Require libqt5-qtquickcontrols instead of libqt5-qtquickcontrols2
  as the former is used/needed too and the latter is required by
  kirigami2 anyway</changelog>
  <changelog author="christophe@krop.fr" date="1560513600">- Update to version 2.9.70git.20190614T140058~cea336303a:
  * Fix passing local file paths on the command line</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1563278400">- Remove the taglib runtime Requires, these are just examples and
  are not used, the automatic library dependencies are sufficient.</changelog>
  <changelog author="christophe@krop.fr" date="1566388800">- Update to version 2.9.70git.20190820T023444~600806141d:
  * Fix the CI build
  * Use identical internet-services icon</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1566388801">- Add 0001-Fix-a-crash-when-running-amarok-l-path-to-file.patch (kde#410870)</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1568980800">- Update to version 2.9.70git.20190920T110913~b986f52d1d:
  * Don't delete whole folder when deleting a track (kde#411760)
  * [TagDialog] Really enable "Open in filemanager" button for local files
  * Fix a crash when running 'amarok -l /path/to/file' (kde#410870)
- Drop 0001-Fix-a-crash-when-running-amarok-l-path-to-file.patch,
  merged upstream</changelog>
  <changelog author="christophe@krop.fr" date="1570708800">- Update to version 2.9.70git.20191004T143525~5ed62f9a08:
  * Register Play/Pause as global shortcut again (boo#1152751, kde#373590)
  * Fix missing directory separators when saving podcasts to disk</changelog>
  <changelog author="christophe@krop.fr" date="1581163200">- Update to version 2.9.70git.20200131T110159~195748144f:
  * Use safe hardcoded value for ProvidersUrl</changelog>
  <changelog author="christophe@krop.fr" date="1582718400">- Update to version 2.9.70git.20200225T224218~2084224e4c:
  * Fix error of Wikipedia entering in an infinite recursion of page loading
  * Fix metainfo generation for Amarok applets
  * Fix loading of lyrics from lyrics.wikia.com
  * Removed obsolete PackagePath role from AppletModel</changelog>
  <changelog author="christophe@krop.fr" date="1589025600">- Update to version 2.9.70git.20200505T221221~fd05592cd8:
  * fix compilation on FreeBSD where --libmysql-libs does not exist
  * Fix the define used to distinguish MariaDB from Mysql
  * Add override identifiers
  * Remove MPRIS1 support
  * Use desktop entry spec compliant X-KDE-ServiceTypes keys
  * Set StartupWMClass in desktop file
  * Make icons look sharp with HiDPI
  * Port from {from,to}Time_t to {from,to}SecsSinceEpoch
  * Use currentDateTimeUtc().toTime_t()
  * Add more override markers
  * Remove Phabricator's .arcconfig
  * Remove nepmukcollection
  * Add more override markers
  * Conclude porting of Last.fm to Amarok KF5
  * Fix copying and moving files to collection
  * Fix dangling string pointers
  * Add more override markers
  * build: remove extra CMakeLists.txt
  * build: re-enable the documentation
  * Fix compatibility with modern MySQL
  * DiagnosticDialog: Use QStringLiteral
  * Fix a crash when trying to open the DiagnosticDialog
  * Fix duplicate include guard
  * Add more override markers
  * PHAACG2.py: fix comparison with literal
  * appdata: improve URLs
- Update translations
- Rebase amarok_mariadb.patch
- Rebase 0001-Work-around-QTBUG-75797-for-openQA.patch</changelog>
  <changelog author="wbauer@tmo.at" date="1592395200">- Update to version 2.9.70git.20200617T113036~a69c9418b4:
  * Fix activeTrackChanged connect in playlist navigators
    (kde#418643,kde#389138)
  * Fix Increase/Decrease Volume shortcuts (boo#1152751)
  * Extract messages from QML
  * Make include compatible with mariadb</changelog>
  <changelog author="christophe@krop.fr" date="1596801600">- Update to version 2.9.70git.20200731T193253~4ae108506f:
  * Fix breadcrumb widget for left menu
  * Fix crash when closing dialog to edit filter (kde#421456)
  * qVariantFromValue() -&gt; QVariant::fromValue()
  * Drop old copy of Qt modeltest
  * Use https for bugs.kde.org</changelog>
  <changelog author="christophe@krop.fr" date="1601467200">- Update to version 2.9.70git.20200930T124856~3973278a68:
  * Replace qtscript with qjs engine
  * Drop superfluous ZLIB linking
  * Add FindMariaDB.cmake module and use it if MySQL is not found
  * FindMySQL.cmake: Split out MySQL Embedded detection into FindMySQLe.cmake
  * Port Amarok Script Engine from deprecated QScriptEngine to QJSEngine
  * Update stylesheet to QT5
  * Replace deprecated Phonon module with PulseAudio
  * cmake: install amarok.knsrc in newer ECM 5.58.0+ location
  * appdata: use canonical help URL
- Drop amarok_mariadb.patch
- Update translations</changelog>
  <changelog author="christophe@krop.fr" date="1608638400">- Update to version 2.9.70git.20201222T022603~89d13c15ad:
  * Fix last context applet missing from toolbar on program startup
  * Changing KStatusNotifier's ToolTipTitle to 'Now playing'
    and the rich text track details to ToolTipSubTitle instead
  * Update org.kde.amarok.appdata.xml
  * Remove button to move to the system sound settings
- Update translations</changelog>
  <changelog author="christophe@krop.fr" date="1614168000">- Update to version 2.9.70git.20210220T172242~b94c362c1d:
  * replace QModelIndex.child to remove deprecated functions from Qt 5.8
  * Replace functions deprecated in Qt 5.7 and earlier
  * Properly use KLocalizedString for dynamic placeholder replacement
  * typo fixes
  * Use more secure URL
  * Don't use deprecated headers
  * Add CMake module used by release script
  * Bump plugin version to 74 in preparation for 2.9.71
  * Add multiplier 2 to the size of generated play-pause
    button and volume dial pixmaps.
  * Smoothen the rendering of play/pause button, volume
    dial and main toolbar's previous and next buttons on scaled UIs
- Update translations</changelog>
  <changelog author="christophe@krop.fr" date="1625227200">- Update to version 2.9.75git.20210626T134054~59b22189f6:
  * Scan history of played tracks till find a playble track (kde#438651)
  * Prevent Signal from kRichTextEdit during deletion
  * Prevent Amarok from stalling if the standard playing mode is used
    and next (or previous) file does not exist
  * Update IRC network
  * Drop unused KF5NotifyConfig
  * Fix crash when reloading scriptable services
  * Replace deprecated toList() with values()
  * Add .gitlab-ci.yml
  * Drop all the amarok-neon packaging bits
  * Fix disambiguation found by gettext 0.21</changelog>
  <changelog author="christophe@krop.fr" date="1631102400">- Update to version 2.9.75git.20210830T182443~10309f00af:
  * Set Attributes before constructing the Application
  * Port away from KRandom, bump Qt req. ver. to 5.10
- Rebase 0001-Work-around-QTBUG-75797-for-openQA.patch
- Update translations</changelog>
  <changelog author="christophe@krop.fr" date="1641470400">- Update to version 2.9.75git.20220102T131246~92aa01de32:
  * cmake: drop the recently removed upnpcollection
  * Remove upnpcollection plugin
  * Add -DQT_NO_CAST_TO_ASCII and fix compilation
  * Fixed non-resuming playback on startup
  * Enable new Gitlab CI
  * Add include of algorithm for std::sort and std::stable_sort
  * Replace functions deprecated in Qt 5.9 and earlier
  * Update Readme</changelog>
  <changelog author="christophe@krop.fr" date="1645704000">- Update to version 2.9.75git.20220224T114455~9300034c57:
  * Add DBus service file to actually make it activatable (boo#1200767)
  * No need to link to KF5::KIONTLM</changelog>
  <changelog author="christophe@krop.fr" date="1655985600">- Update to version 2.9.75git.20220614T014846~dc55a00143:
  * Mark Amarok as a single main window program
- Update translations
- Rebase flac_mimetype_bnc671581.diff</changelog>
</package>
<package pkgid="ccec81caadd4d4a8e26487cde623056deb9c0706d1cfdee1bb6ade45428944d9" name="apache2-mod_auth_kerb" arch="aarch64">
  <version epoch="0" ver="5.4" rel="bp154.2.1"/>
  <changelog author="draht@suse.de" date="1396008000">- sles12 submission:
  * mod_auth_kerb.apache22.patch -&gt; mod_auth_kerb.apache22+.patch
    make apache 2.2 modifications unconditional, as they are
    required by apache 2.4, too.
    This immediately means that compiling this package against
    apache 2.0 would not work.
  * rework mod_auth_kerb-5.4-apache24.patch into
    mod_auth_kerb-api_changes_apache24.patch: adaption to apache
    2.4 API, in particular logging and remote IP reference struct
    members.</changelog>
  <changelog author="pgajdos@suse.com" date="1414756800">- call spec-cleaner
- use apache rpm macros</changelog>
  <changelog author="hguo@suse.com" date="1431345600">- Introduce upstream patches:
  * Support s4u2proxy operation.
  * Fix an issue that causes loss of delegation after first request on the connection.
  * Fix an issue that causes HTTP 500 error when user account name is longer than Kerberos principal name.
  * Consider authentication request successful when GSS_S_CONTINUE_NEEDED (multiple-exchange-request) is encountered.
  The existing patch for Apache2.4 compatibility has been re-aligned with the introduction of new patches.</changelog>
  <changelog author="kstreitova@suse.com" date="1432641600">- add new licenses:
  * MIT - for mit-internals.h file
  * ASL 2.0 - for 0101-mod_auth_kerb-5.4-s4u2proxy.patch</changelog>
  <changelog author="hguo@suse.com" date="1433332800">- Clean up of spec file:
  * Fix unrecognised license name (Apache 2.0).
  * Remove build dependencies and macros for building on unsupported SUSE distros.
  * Remove expired macro "debug_package".
  * Fix URL link of the package.
  * Remove unnecessary "INSTALL" document file from file list.</changelog>
  <changelog author="pgajdos@suse.com" date="1437048000">- Requries: %{apache_suse_maintenance_mmn}
  This will pull this module to the update (in released distribution)
  when apache maintainer thinks it is good (due api/abi changes).</changelog>
  <changelog author="pgajdos@suse.com" date="1443009600">- test module with %apache_test_module_load</changelog>
  <changelog author="pgajdos@suse.com" date="1443787200">- fix build for 11sp3 (add BuildRoot:)</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1563969600">- add mod_auth_kerb-5.4-auth_segfault.patch to fix a segmentation
  fault in function authenticate_user_krb5pwd() when credentials
  are supplied using basic authentication [bsc#1142545]</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1643889600">- Fix build with Kerberos 1.19; (bsc#1195445); Add patches:
  * 0106-mod_auth_kerb-5.4-rcopshack.patch
  * 0107-Always-use-NONE-replay-cache-type.patch</changelog>
</package>
<package pkgid="36f3b0f5e07d178142e182eaab349d1f8013a1874a5153b8a3dc687f4e5ae29b" name="apache2-mod_auth_kerb" arch="i586">
  <version epoch="0" ver="5.4" rel="bp154.2.1"/>
  <changelog author="draht@suse.de" date="1396008000">- sles12 submission:
  * mod_auth_kerb.apache22.patch -&gt; mod_auth_kerb.apache22+.patch
    make apache 2.2 modifications unconditional, as they are
    required by apache 2.4, too.
    This immediately means that compiling this package against
    apache 2.0 would not work.
  * rework mod_auth_kerb-5.4-apache24.patch into
    mod_auth_kerb-api_changes_apache24.patch: adaption to apache
    2.4 API, in particular logging and remote IP reference struct
    members.</changelog>
  <changelog author="pgajdos@suse.com" date="1414756800">- call spec-cleaner
- use apache rpm macros</changelog>
  <changelog author="hguo@suse.com" date="1431345600">- Introduce upstream patches:
  * Support s4u2proxy operation.
  * Fix an issue that causes loss of delegation after first request on the connection.
  * Fix an issue that causes HTTP 500 error when user account name is longer than Kerberos principal name.
  * Consider authentication request successful when GSS_S_CONTINUE_NEEDED (multiple-exchange-request) is encountered.
  The existing patch for Apache2.4 compatibility has been re-aligned with the introduction of new patches.</changelog>
  <changelog author="kstreitova@suse.com" date="1432641600">- add new licenses:
  * MIT - for mit-internals.h file
  * ASL 2.0 - for 0101-mod_auth_kerb-5.4-s4u2proxy.patch</changelog>
  <changelog author="hguo@suse.com" date="1433332800">- Clean up of spec file:
  * Fix unrecognised license name (Apache 2.0).
  * Remove build dependencies and macros for building on unsupported SUSE distros.
  * Remove expired macro "debug_package".
  * Fix URL link of the package.
  * Remove unnecessary "INSTALL" document file from file list.</changelog>
  <changelog author="pgajdos@suse.com" date="1437048000">- Requries: %{apache_suse_maintenance_mmn}
  This will pull this module to the update (in released distribution)
  when apache maintainer thinks it is good (due api/abi changes).</changelog>
  <changelog author="pgajdos@suse.com" date="1443009600">- test module with %apache_test_module_load</changelog>
  <changelog author="pgajdos@suse.com" date="1443787200">- fix build for 11sp3 (add BuildRoot:)</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1563969600">- add mod_auth_kerb-5.4-auth_segfault.patch to fix a segmentation
  fault in function authenticate_user_krb5pwd() when credentials
  are supplied using basic authentication [bsc#1142545]</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1643889600">- Fix build with Kerberos 1.19; (bsc#1195445); Add patches:
  * 0106-mod_auth_kerb-5.4-rcopshack.patch
  * 0107-Always-use-NONE-replay-cache-type.patch</changelog>
</package>
<package pkgid="8c41cebc005d7f2f2e0bdab0fb749c34dae798fd19cf10be08fdf32dfc037a8f" name="apache2-mod_auth_kerb" arch="ppc64le">
  <version epoch="0" ver="5.4" rel="bp154.2.1"/>
  <changelog author="draht@suse.de" date="1396008000">- sles12 submission:
  * mod_auth_kerb.apache22.patch -&gt; mod_auth_kerb.apache22+.patch
    make apache 2.2 modifications unconditional, as they are
    required by apache 2.4, too.
    This immediately means that compiling this package against
    apache 2.0 would not work.
  * rework mod_auth_kerb-5.4-apache24.patch into
    mod_auth_kerb-api_changes_apache24.patch: adaption to apache
    2.4 API, in particular logging and remote IP reference struct
    members.</changelog>
  <changelog author="pgajdos@suse.com" date="1414756800">- call spec-cleaner
- use apache rpm macros</changelog>
  <changelog author="hguo@suse.com" date="1431345600">- Introduce upstream patches:
  * Support s4u2proxy operation.
  * Fix an issue that causes loss of delegation after first request on the connection.
  * Fix an issue that causes HTTP 500 error when user account name is longer than Kerberos principal name.
  * Consider authentication request successful when GSS_S_CONTINUE_NEEDED (multiple-exchange-request) is encountered.
  The existing patch for Apache2.4 compatibility has been re-aligned with the introduction of new patches.</changelog>
  <changelog author="kstreitova@suse.com" date="1432641600">- add new licenses:
  * MIT - for mit-internals.h file
  * ASL 2.0 - for 0101-mod_auth_kerb-5.4-s4u2proxy.patch</changelog>
  <changelog author="hguo@suse.com" date="1433332800">- Clean up of spec file:
  * Fix unrecognised license name (Apache 2.0).
  * Remove build dependencies and macros for building on unsupported SUSE distros.
  * Remove expired macro "debug_package".
  * Fix URL link of the package.
  * Remove unnecessary "INSTALL" document file from file list.</changelog>
  <changelog author="pgajdos@suse.com" date="1437048000">- Requries: %{apache_suse_maintenance_mmn}
  This will pull this module to the update (in released distribution)
  when apache maintainer thinks it is good (due api/abi changes).</changelog>
  <changelog author="pgajdos@suse.com" date="1443009600">- test module with %apache_test_module_load</changelog>
  <changelog author="pgajdos@suse.com" date="1443787200">- fix build for 11sp3 (add BuildRoot:)</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1563969600">- add mod_auth_kerb-5.4-auth_segfault.patch to fix a segmentation
  fault in function authenticate_user_krb5pwd() when credentials
  are supplied using basic authentication [bsc#1142545]</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1643889600">- Fix build with Kerberos 1.19; (bsc#1195445); Add patches:
  * 0106-mod_auth_kerb-5.4-rcopshack.patch
  * 0107-Always-use-NONE-replay-cache-type.patch</changelog>
</package>
<package pkgid="80e5142661727fc4d2f5cb3c57a2f23e8ab52384cd2a68a4db932c07e5bc6480" name="apache2-mod_auth_kerb" arch="s390x">
  <version epoch="0" ver="5.4" rel="bp154.2.1"/>
  <changelog author="draht@suse.de" date="1396008000">- sles12 submission:
  * mod_auth_kerb.apache22.patch -&gt; mod_auth_kerb.apache22+.patch
    make apache 2.2 modifications unconditional, as they are
    required by apache 2.4, too.
    This immediately means that compiling this package against
    apache 2.0 would not work.
  * rework mod_auth_kerb-5.4-apache24.patch into
    mod_auth_kerb-api_changes_apache24.patch: adaption to apache
    2.4 API, in particular logging and remote IP reference struct
    members.</changelog>
  <changelog author="pgajdos@suse.com" date="1414756800">- call spec-cleaner
- use apache rpm macros</changelog>
  <changelog author="hguo@suse.com" date="1431345600">- Introduce upstream patches:
  * Support s4u2proxy operation.
  * Fix an issue that causes loss of delegation after first request on the connection.
  * Fix an issue that causes HTTP 500 error when user account name is longer than Kerberos principal name.
  * Consider authentication request successful when GSS_S_CONTINUE_NEEDED (multiple-exchange-request) is encountered.
  The existing patch for Apache2.4 compatibility has been re-aligned with the introduction of new patches.</changelog>
  <changelog author="kstreitova@suse.com" date="1432641600">- add new licenses:
  * MIT - for mit-internals.h file
  * ASL 2.0 - for 0101-mod_auth_kerb-5.4-s4u2proxy.patch</changelog>
  <changelog author="hguo@suse.com" date="1433332800">- Clean up of spec file:
  * Fix unrecognised license name (Apache 2.0).
  * Remove build dependencies and macros for building on unsupported SUSE distros.
  * Remove expired macro "debug_package".
  * Fix URL link of the package.
  * Remove unnecessary "INSTALL" document file from file list.</changelog>
  <changelog author="pgajdos@suse.com" date="1437048000">- Requries: %{apache_suse_maintenance_mmn}
  This will pull this module to the update (in released distribution)
  when apache maintainer thinks it is good (due api/abi changes).</changelog>
  <changelog author="pgajdos@suse.com" date="1443009600">- test module with %apache_test_module_load</changelog>
  <changelog author="pgajdos@suse.com" date="1443787200">- fix build for 11sp3 (add BuildRoot:)</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1563969600">- add mod_auth_kerb-5.4-auth_segfault.patch to fix a segmentation
  fault in function authenticate_user_krb5pwd() when credentials
  are supplied using basic authentication [bsc#1142545]</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1643889600">- Fix build with Kerberos 1.19; (bsc#1195445); Add patches:
  * 0106-mod_auth_kerb-5.4-rcopshack.patch
  * 0107-Always-use-NONE-replay-cache-type.patch</changelog>
</package>
<package pkgid="a211468cee6cb6c38f6e74b0d9411916387d478312522d11337a868976e104ef" name="apache2-mod_auth_kerb" arch="src">
  <version epoch="0" ver="5.4" rel="bp154.2.1"/>
  <changelog author="mc@suse.de" date="1158667200">- update to version 5.1</changelog>
  <changelog author="mc@suse.de" date="1166529600">- update to version 5.3</changelog>
  <changelog author="mc@suse.de" date="1189425600">- add mod_auth_kerb-init_creds_opt.dif</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1238155200">- update to 5.4:
  * implemented KrbServiceName Any to deal with multiple keytab
    entries for various browsers
  * implemented KrbLocalUserMapping i.e. to strip @REALM from
    username for further use
  * implemented already_succeeded function to avoid hammering the
    KDC with same auth requests in single connection
  * fixed threading issues
  * improved configure and Makefile scripts (mainly for BSD users)
  * fixed minor issues
- minor spec file style fixes
- added patch to fix compiler warnings
- removed mod_auth_kerb-init_creds_opt.dif, has been merged
  upstream</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1238500800">- build against heimdal on SLE 9
- added missing %changelog in spec file</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1238587200">- fixed warning fixing patch that was causing a "undefined symbol:
  cmp_gss_type" error at runtime</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1247832000">- add per-connection authentication caching, based on
  https://sourceforge.net/tracker/?func=detail&amp;aid=1891230&amp;group_id=51775&amp;atid=464526
  by &lt;jorgensen@lowtechsolutions.net&gt;, but made it configurable
  through the KrbCacheAuthentication directive (that is disabled
  by default, as it is to be seen as experimental)</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1247832001">- add mod_auth_kerb.apache22.patch that adds Apache 2.2 authn
  provider support (authn_kerberos):
  https://sourceforge.net/tracker/?func=detail&amp;aid=2782088&amp;group_id=51775&amp;atid=464526</changelog>
  <changelog author="draht@suse.de" date="1342094400">- preparation of the package for submission against sle11-sp1,
  review of source and patches/changes, compilation warnings,
  licence and packaging. This is (FATE#313165) (ECO-FATE#313165)
  and [bnc#771265].</changelog>
  <changelog author="mc@suse.com" date="1365249600">- add support for apache 2.4
  mod_auth_kerb-5.4-apache24.patch
  http://sourceforge.net/tracker/?func=detail&amp;aid=3521787&amp;group_id=51775&amp;atid=464526
- new format for License</changelog>
  <changelog author="draht@suse.de" date="1396008000">- sles12 submission:
  * mod_auth_kerb.apache22.patch -&gt; mod_auth_kerb.apache22+.patch
    make apache 2.2 modifications unconditional, as they are
    required by apache 2.4, too.
    This immediately means that compiling this package against
    apache 2.0 would not work.
  * rework mod_auth_kerb-5.4-apache24.patch into
    mod_auth_kerb-api_changes_apache24.patch: adaption to apache
    2.4 API, in particular logging and remote IP reference struct
    members.</changelog>
  <changelog author="pgajdos@suse.com" date="1414756800">- call spec-cleaner
- use apache rpm macros</changelog>
  <changelog author="hguo@suse.com" date="1431345600">- Introduce upstream patches:
  * Support s4u2proxy operation.
  * Fix an issue that causes loss of delegation after first request on the connection.
  * Fix an issue that causes HTTP 500 error when user account name is longer than Kerberos principal name.
  * Consider authentication request successful when GSS_S_CONTINUE_NEEDED (multiple-exchange-request) is encountered.
  The existing patch for Apache2.4 compatibility has been re-aligned with the introduction of new patches.</changelog>
  <changelog author="kstreitova@suse.com" date="1432641600">- add new licenses:
  * MIT - for mit-internals.h file
  * ASL 2.0 - for 0101-mod_auth_kerb-5.4-s4u2proxy.patch</changelog>
  <changelog author="hguo@suse.com" date="1433332800">- Clean up of spec file:
  * Fix unrecognised license name (Apache 2.0).
  * Remove build dependencies and macros for building on unsupported SUSE distros.
  * Remove expired macro "debug_package".
  * Fix URL link of the package.
  * Remove unnecessary "INSTALL" document file from file list.</changelog>
  <changelog author="pgajdos@suse.com" date="1437048000">- Requries: %{apache_suse_maintenance_mmn}
  This will pull this module to the update (in released distribution)
  when apache maintainer thinks it is good (due api/abi changes).</changelog>
  <changelog author="pgajdos@suse.com" date="1443009600">- test module with %apache_test_module_load</changelog>
  <changelog author="pgajdos@suse.com" date="1443787200">- fix build for 11sp3 (add BuildRoot:)</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1563969600">- add mod_auth_kerb-5.4-auth_segfault.patch to fix a segmentation
  fault in function authenticate_user_krb5pwd() when credentials
  are supplied using basic authentication [bsc#1142545]</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1643889600">- Fix build with Kerberos 1.19; (bsc#1195445); Add patches:
  * 0106-mod_auth_kerb-5.4-rcopshack.patch
  * 0107-Always-use-NONE-replay-cache-type.patch</changelog>
</package>
<package pkgid="083435b33a3d0989f4dff7e5d731f5f1d742a7b057030b94f512e2888ef753ed" name="apache2-mod_auth_kerb" arch="x86_64">
  <version epoch="0" ver="5.4" rel="bp154.2.1"/>
  <changelog author="draht@suse.de" date="1396008000">- sles12 submission:
  * mod_auth_kerb.apache22.patch -&gt; mod_auth_kerb.apache22+.patch
    make apache 2.2 modifications unconditional, as they are
    required by apache 2.4, too.
    This immediately means that compiling this package against
    apache 2.0 would not work.
  * rework mod_auth_kerb-5.4-apache24.patch into
    mod_auth_kerb-api_changes_apache24.patch: adaption to apache
    2.4 API, in particular logging and remote IP reference struct
    members.</changelog>
  <changelog author="pgajdos@suse.com" date="1414756800">- call spec-cleaner
- use apache rpm macros</changelog>
  <changelog author="hguo@suse.com" date="1431345600">- Introduce upstream patches:
  * Support s4u2proxy operation.
  * Fix an issue that causes loss of delegation after first request on the connection.
  * Fix an issue that causes HTTP 500 error when user account name is longer than Kerberos principal name.
  * Consider authentication request successful when GSS_S_CONTINUE_NEEDED (multiple-exchange-request) is encountered.
  The existing patch for Apache2.4 compatibility has been re-aligned with the introduction of new patches.</changelog>
  <changelog author="kstreitova@suse.com" date="1432641600">- add new licenses:
  * MIT - for mit-internals.h file
  * ASL 2.0 - for 0101-mod_auth_kerb-5.4-s4u2proxy.patch</changelog>
  <changelog author="hguo@suse.com" date="1433332800">- Clean up of spec file:
  * Fix unrecognised license name (Apache 2.0).
  * Remove build dependencies and macros for building on unsupported SUSE distros.
  * Remove expired macro "debug_package".
  * Fix URL link of the package.
  * Remove unnecessary "INSTALL" document file from file list.</changelog>
  <changelog author="pgajdos@suse.com" date="1437048000">- Requries: %{apache_suse_maintenance_mmn}
  This will pull this module to the update (in released distribution)
  when apache maintainer thinks it is good (due api/abi changes).</changelog>
  <changelog author="pgajdos@suse.com" date="1443009600">- test module with %apache_test_module_load</changelog>
  <changelog author="pgajdos@suse.com" date="1443787200">- fix build for 11sp3 (add BuildRoot:)</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1563969600">- add mod_auth_kerb-5.4-auth_segfault.patch to fix a segmentation
  fault in function authenticate_user_krb5pwd() when credentials
  are supplied using basic authentication [bsc#1142545]</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1643889600">- Fix build with Kerberos 1.19; (bsc#1195445); Add patches:
  * 0106-mod_auth_kerb-5.4-rcopshack.patch
  * 0107-Always-use-NONE-replay-cache-type.patch</changelog>
</package>
<package pkgid="f8484ae99c5054f7966a1601b4738b49d3a0b97ee8ba0d44839b3a41b04c7e9b" name="atheme" arch="aarch64">
  <version epoch="0" ver="7.2.12" rel="bp154.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1417694400">- Update to new upstream release 7.2.1
  * NickServ:
  * Make `VHOST` set cloak assigner and timestamp the same way HostServ does
  * Make `INFO` call the `user_info_noexist` hook for queries that don't match an account
  * Make `REGAIN` log you in if successful.
  * Allow implementing custom filters for `LIST`
  * nickserv/multimark: new module which allows multiple MARK entries per nickname.
  * ChanServ:
  * Add a `$server:` exttarget accepting server masks
  * Add `PUBACL` flag which allows the channel access to be public.
  * Don't allow `DEOP` or `KICK` of a services bot.
  * Don't try to expand extbans in various commands.
  * Allow users with +O or +V flags to op/voice themselves, since they can regain op/voice
  by cycling the channel anyway.
  * chanserv/clear_akicks: new module providing a `CLEAR AKICKS` command.</changelog>
  <changelog author="jengelh@inai.de" date="1428062400">- Update to new upstream release 7.2.5
  * pbkdf2v2: Newer module implementing PBKDF2-HMAC digest scheme</changelog>
  <changelog author="jengelh@inai.de" date="1462276800">- Update to new upstream release 7.2.6
  * avoid potential NULL dereference in language code
  * Add NOPASSWORD criterion to nickserv/list helpfile
  * new nickserv/list criterion VACATION
- Add 0001-Do-not-copy-more-bytes-than-were-allocated.patch
  [CVE-2016-4478]
- Add 0001-chanserv-flags-make-Anope-FLAGS-compatibility-an-opt.patch
  [CVE-2014-9773, boo#978170]
- Add atheme-serno.diff, a build fix</changelog>
  <changelog author="jengelh@inai.de" date="1479643200">- Update to new upstream release 7.2.7
  * NickServ:
  * Make `VHOST` set cloak assigner and timestamp the same way
    HostServ does
  * Make `INFO` call the `user_info_noexist` hook for queries
    that don't match an account
  * Make `REGAIN` log you in if successful.
  * ChanServ:
  * Add a `$server:` exttarget accepting server masks
  * Add `PUBACL` flag which allows the channel access to be public.
  * Don't allow `DEOP` or `KICK` of a services bot.
  * Don't try to expand extbans in various commands.
  * Allow users with +O or +V flags to op/voice themselves, since
    they can regain op/voice by cycling the channel anyway.
- +e added to chanserv{} templates and founder_flags
- Remove 0001-Do-not-copy-more-bytes-than-were-allocated.patch
  and 0001-chanserv-flags-make-Anope-FLAGS-compatibility-an-opt.patch
  (applied upstream)
- Abort installation if user/group cannot be created</changelog>
  <changelog author="jengelh@inai.de" date="1490875200">- Update to new upstream release 7.2.8
  * Close a memory leak that could be exploited by attackers to
    potentially cause a denial of service.
    [CVE-2017-6384, boo#1027614]
- Update to new upstream release 7.2.9
  * Fixing use after free that could potentially be used by an
    attacker already having the privilege to use SASL impersonation
    to cause a denial of service.</changelog>
  <changelog author="jengelh@inai.de" date="1509710400">- Rename the tools dbverify and ecdsakeygen with an "atheme-"
  prefix. This is possible since they do not appear to get invoked
  by the server, but only by the user.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566388800">- Update to new upstream release 7.2.10.r2
  * Fix potential NULL dereference in modules/crypto/posix.
  * Bump E-Mail address maximum length to 254 characters.
  * Use flags setter information in modules/chanserv/access &amp;
    modules/chanserv/flags.
  * Fix issue where modules/misc/httpd was not closing its
    listening socket on deinit.
  * Fix GroupServ data loss issue when a group was the founder of
    another group.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1600084800">- Fix misuse of %_libexecdir for /usr/lib/tmpfiles
  [boo#1174075]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1614513600">- Update to release 7.2.11
  * Add a preliminary Turkish translation
  * Add HMAC-MD5 verify-only support to crypto/pbkdf2v2
  * modules/chanserv/akick: fix unload crash with akicks that
    have timeouts
  * modules/nickserv/multimark: use IRC case canonicalisation
    for restored nicks
  * modules/nickserv/multimark: forbid unloading due to the
    potential for data loss
  * CA_ constants: include CA_EXEMPT (+e) where appropriate
- Drop atheme-serno.diff (no longer applies)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1615118400">- Redownload atheme-services-v7.2.11.tar.xz
  because they changed it</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1643630400">- Update to release 7.2.12
  * Fix CVE-2022-24976 [boo#1195989]
  * Track SASL login EID</changelog>
</package>
<package pkgid="58384d893c329b0c38f8a75c49e841b879522dc8e40502ed1b64f087817a5ffc" name="atheme" arch="i586">
  <version epoch="0" ver="7.2.12" rel="bp154.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1417694400">- Update to new upstream release 7.2.1
  * NickServ:
  * Make `VHOST` set cloak assigner and timestamp the same way HostServ does
  * Make `INFO` call the `user_info_noexist` hook for queries that don't match an account
  * Make `REGAIN` log you in if successful.
  * Allow implementing custom filters for `LIST`
  * nickserv/multimark: new module which allows multiple MARK entries per nickname.
  * ChanServ:
  * Add a `$server:` exttarget accepting server masks
  * Add `PUBACL` flag which allows the channel access to be public.
  * Don't allow `DEOP` or `KICK` of a services bot.
  * Don't try to expand extbans in various commands.
  * Allow users with +O or +V flags to op/voice themselves, since they can regain op/voice
  by cycling the channel anyway.
  * chanserv/clear_akicks: new module providing a `CLEAR AKICKS` command.</changelog>
  <changelog author="jengelh@inai.de" date="1428062400">- Update to new upstream release 7.2.5
  * pbkdf2v2: Newer module implementing PBKDF2-HMAC digest scheme</changelog>
  <changelog author="jengelh@inai.de" date="1462276800">- Update to new upstream release 7.2.6
  * avoid potential NULL dereference in language code
  * Add NOPASSWORD criterion to nickserv/list helpfile
  * new nickserv/list criterion VACATION
- Add 0001-Do-not-copy-more-bytes-than-were-allocated.patch
  [CVE-2016-4478]
- Add 0001-chanserv-flags-make-Anope-FLAGS-compatibility-an-opt.patch
  [CVE-2014-9773, boo#978170]
- Add atheme-serno.diff, a build fix</changelog>
  <changelog author="jengelh@inai.de" date="1479643200">- Update to new upstream release 7.2.7
  * NickServ:
  * Make `VHOST` set cloak assigner and timestamp the same way
    HostServ does
  * Make `INFO` call the `user_info_noexist` hook for queries
    that don't match an account
  * Make `REGAIN` log you in if successful.
  * ChanServ:
  * Add a `$server:` exttarget accepting server masks
  * Add `PUBACL` flag which allows the channel access to be public.
  * Don't allow `DEOP` or `KICK` of a services bot.
  * Don't try to expand extbans in various commands.
  * Allow users with +O or +V flags to op/voice themselves, since
    they can regain op/voice by cycling the channel anyway.
- +e added to chanserv{} templates and founder_flags
- Remove 0001-Do-not-copy-more-bytes-than-were-allocated.patch
  and 0001-chanserv-flags-make-Anope-FLAGS-compatibility-an-opt.patch
  (applied upstream)
- Abort installation if user/group cannot be created</changelog>
  <changelog author="jengelh@inai.de" date="1490875200">- Update to new upstream release 7.2.8
  * Close a memory leak that could be exploited by attackers to
    potentially cause a denial of service.
    [CVE-2017-6384, boo#1027614]
- Update to new upstream release 7.2.9
  * Fixing use after free that could potentially be used by an
    attacker already having the privilege to use SASL impersonation
    to cause a denial of service.</changelog>
  <changelog author="jengelh@inai.de" date="1509710400">- Rename the tools dbverify and ecdsakeygen with an "atheme-"
  prefix. This is possible since they do not appear to get invoked
  by the server, but only by the user.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566388800">- Update to new upstream release 7.2.10.r2
  * Fix potential NULL dereference in modules/crypto/posix.
  * Bump E-Mail address maximum length to 254 characters.
  * Use flags setter information in modules/chanserv/access &amp;
    modules/chanserv/flags.
  * Fix issue where modules/misc/httpd was not closing its
    listening socket on deinit.
  * Fix GroupServ data loss issue when a group was the founder of
    another group.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1600084800">- Fix misuse of %_libexecdir for /usr/lib/tmpfiles
  [boo#1174075]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1614513600">- Update to release 7.2.11
  * Add a preliminary Turkish translation
  * Add HMAC-MD5 verify-only support to crypto/pbkdf2v2
  * modules/chanserv/akick: fix unload crash with akicks that
    have timeouts
  * modules/nickserv/multimark: use IRC case canonicalisation
    for restored nicks
  * modules/nickserv/multimark: forbid unloading due to the
    potential for data loss
  * CA_ constants: include CA_EXEMPT (+e) where appropriate
- Drop atheme-serno.diff (no longer applies)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1615118400">- Redownload atheme-services-v7.2.11.tar.xz
  because they changed it</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1643630400">- Update to release 7.2.12
  * Fix CVE-2022-24976 [boo#1195989]
  * Track SASL login EID</changelog>
</package>
<package pkgid="4707b694341c8381513579b57893238a8cf578250f4c4c4e1d8d34a42d02ef13" name="atheme" arch="ppc64le">
  <version epoch="0" ver="7.2.12" rel="bp154.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1417694400">- Update to new upstream release 7.2.1
  * NickServ:
  * Make `VHOST` set cloak assigner and timestamp the same way HostServ does
  * Make `INFO` call the `user_info_noexist` hook for queries that don't match an account
  * Make `REGAIN` log you in if successful.
  * Allow implementing custom filters for `LIST`
  * nickserv/multimark: new module which allows multiple MARK entries per nickname.
  * ChanServ:
  * Add a `$server:` exttarget accepting server masks
  * Add `PUBACL` flag which allows the channel access to be public.
  * Don't allow `DEOP` or `KICK` of a services bot.
  * Don't try to expand extbans in various commands.
  * Allow users with +O or +V flags to op/voice themselves, since they can regain op/voice
  by cycling the channel anyway.
  * chanserv/clear_akicks: new module providing a `CLEAR AKICKS` command.</changelog>
  <changelog author="jengelh@inai.de" date="1428062400">- Update to new upstream release 7.2.5
  * pbkdf2v2: Newer module implementing PBKDF2-HMAC digest scheme</changelog>
  <changelog author="jengelh@inai.de" date="1462276800">- Update to new upstream release 7.2.6
  * avoid potential NULL dereference in language code
  * Add NOPASSWORD criterion to nickserv/list helpfile
  * new nickserv/list criterion VACATION
- Add 0001-Do-not-copy-more-bytes-than-were-allocated.patch
  [CVE-2016-4478]
- Add 0001-chanserv-flags-make-Anope-FLAGS-compatibility-an-opt.patch
  [CVE-2014-9773, boo#978170]
- Add atheme-serno.diff, a build fix</changelog>
  <changelog author="jengelh@inai.de" date="1479643200">- Update to new upstream release 7.2.7
  * NickServ:
  * Make `VHOST` set cloak assigner and timestamp the same way
    HostServ does
  * Make `INFO` call the `user_info_noexist` hook for queries
    that don't match an account
  * Make `REGAIN` log you in if successful.
  * ChanServ:
  * Add a `$server:` exttarget accepting server masks
  * Add `PUBACL` flag which allows the channel access to be public.
  * Don't allow `DEOP` or `KICK` of a services bot.
  * Don't try to expand extbans in various commands.
  * Allow users with +O or +V flags to op/voice themselves, since
    they can regain op/voice by cycling the channel anyway.
- +e added to chanserv{} templates and founder_flags
- Remove 0001-Do-not-copy-more-bytes-than-were-allocated.patch
  and 0001-chanserv-flags-make-Anope-FLAGS-compatibility-an-opt.patch
  (applied upstream)
- Abort installation if user/group cannot be created</changelog>
  <changelog author="jengelh@inai.de" date="1490875200">- Update to new upstream release 7.2.8
  * Close a memory leak that could be exploited by attackers to
    potentially cause a denial of service.
    [CVE-2017-6384, boo#1027614]
- Update to new upstream release 7.2.9
  * Fixing use after free that could potentially be used by an
    attacker already having the privilege to use SASL impersonation
    to cause a denial of service.</changelog>
  <changelog author="jengelh@inai.de" date="1509710400">- Rename the tools dbverify and ecdsakeygen with an "atheme-"
  prefix. This is possible since they do not appear to get invoked
  by the server, but only by the user.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566388800">- Update to new upstream release 7.2.10.r2
  * Fix potential NULL dereference in modules/crypto/posix.
  * Bump E-Mail address maximum length to 254 characters.
  * Use flags setter information in modules/chanserv/access &amp;
    modules/chanserv/flags.
  * Fix issue where modules/misc/httpd was not closing its
    listening socket on deinit.
  * Fix GroupServ data loss issue when a group was the founder of
    another group.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1600084800">- Fix misuse of %_libexecdir for /usr/lib/tmpfiles
  [boo#1174075]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1614513600">- Update to release 7.2.11
  * Add a preliminary Turkish translation
  * Add HMAC-MD5 verify-only support to crypto/pbkdf2v2
  * modules/chanserv/akick: fix unload crash with akicks that
    have timeouts
  * modules/nickserv/multimark: use IRC case canonicalisation
    for restored nicks
  * modules/nickserv/multimark: forbid unloading due to the
    potential for data loss
  * CA_ constants: include CA_EXEMPT (+e) where appropriate
- Drop atheme-serno.diff (no longer applies)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1615118400">- Redownload atheme-services-v7.2.11.tar.xz
  because they changed it</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1643630400">- Update to release 7.2.12
  * Fix CVE-2022-24976 [boo#1195989]
  * Track SASL login EID</changelog>
</package>
<package pkgid="13d8d624c98b06393d7124b5ae24554bb57dd6f4556c1d53c0dcd780b2e24440" name="atheme" arch="s390x">
  <version epoch="0" ver="7.2.12" rel="bp154.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1417694400">- Update to new upstream release 7.2.1
  * NickServ:
  * Make `VHOST` set cloak assigner and timestamp the same way HostServ does
  * Make `INFO` call the `user_info_noexist` hook for queries that don't match an account
  * Make `REGAIN` log you in if successful.
  * Allow implementing custom filters for `LIST`
  * nickserv/multimark: new module which allows multiple MARK entries per nickname.
  * ChanServ:
  * Add a `$server:` exttarget accepting server masks
  * Add `PUBACL` flag which allows the channel access to be public.
  * Don't allow `DEOP` or `KICK` of a services bot.
  * Don't try to expand extbans in various commands.
  * Allow users with +O or +V flags to op/voice themselves, since they can regain op/voice
  by cycling the channel anyway.
  * chanserv/clear_akicks: new module providing a `CLEAR AKICKS` command.</changelog>
  <changelog author="jengelh@inai.de" date="1428062400">- Update to new upstream release 7.2.5
  * pbkdf2v2: Newer module implementing PBKDF2-HMAC digest scheme</changelog>
  <changelog author="jengelh@inai.de" date="1462276800">- Update to new upstream release 7.2.6
  * avoid potential NULL dereference in language code
  * Add NOPASSWORD criterion to nickserv/list helpfile
  * new nickserv/list criterion VACATION
- Add 0001-Do-not-copy-more-bytes-than-were-allocated.patch
  [CVE-2016-4478]
- Add 0001-chanserv-flags-make-Anope-FLAGS-compatibility-an-opt.patch
  [CVE-2014-9773, boo#978170]
- Add atheme-serno.diff, a build fix</changelog>
  <changelog author="jengelh@inai.de" date="1479643200">- Update to new upstream release 7.2.7
  * NickServ:
  * Make `VHOST` set cloak assigner and timestamp the same way
    HostServ does
  * Make `INFO` call the `user_info_noexist` hook for queries
    that don't match an account
  * Make `REGAIN` log you in if successful.
  * ChanServ:
  * Add a `$server:` exttarget accepting server masks
  * Add `PUBACL` flag which allows the channel access to be public.
  * Don't allow `DEOP` or `KICK` of a services bot.
  * Don't try to expand extbans in various commands.
  * Allow users with +O or +V flags to op/voice themselves, since
    they can regain op/voice by cycling the channel anyway.
- +e added to chanserv{} templates and founder_flags
- Remove 0001-Do-not-copy-more-bytes-than-were-allocated.patch
  and 0001-chanserv-flags-make-Anope-FLAGS-compatibility-an-opt.patch
  (applied upstream)
- Abort installation if user/group cannot be created</changelog>
  <changelog author="jengelh@inai.de" date="1490875200">- Update to new upstream release 7.2.8
  * Close a memory leak that could be exploited by attackers to
    potentially cause a denial of service.
    [CVE-2017-6384, boo#1027614]
- Update to new upstream release 7.2.9
  * Fixing use after free that could potentially be used by an
    attacker already having the privilege to use SASL impersonation
    to cause a denial of service.</changelog>
  <changelog author="jengelh@inai.de" date="1509710400">- Rename the tools dbverify and ecdsakeygen with an "atheme-"
  prefix. This is possible since they do not appear to get invoked
  by the server, but only by the user.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566388800">- Update to new upstream release 7.2.10.r2
  * Fix potential NULL dereference in modules/crypto/posix.
  * Bump E-Mail address maximum length to 254 characters.
  * Use flags setter information in modules/chanserv/access &amp;
    modules/chanserv/flags.
  * Fix issue where modules/misc/httpd was not closing its
    listening socket on deinit.
  * Fix GroupServ data loss issue when a group was the founder of
    another group.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1600084800">- Fix misuse of %_libexecdir for /usr/lib/tmpfiles
  [boo#1174075]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1614513600">- Update to release 7.2.11
  * Add a preliminary Turkish translation
  * Add HMAC-MD5 verify-only support to crypto/pbkdf2v2
  * modules/chanserv/akick: fix unload crash with akicks that
    have timeouts
  * modules/nickserv/multimark: use IRC case canonicalisation
    for restored nicks
  * modules/nickserv/multimark: forbid unloading due to the
    potential for data loss
  * CA_ constants: include CA_EXEMPT (+e) where appropriate
- Drop atheme-serno.diff (no longer applies)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1615118400">- Redownload atheme-services-v7.2.11.tar.xz
  because they changed it</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1643630400">- Update to release 7.2.12
  * Fix CVE-2022-24976 [boo#1195989]
  * Track SASL login EID</changelog>
</package>
<package pkgid="ff751309ad4dc9813b829089ed6698240df5285875366c6f5dc66b0f56f84a6e" name="atheme" arch="src">
  <version epoch="0" ver="7.2.12" rel="bp154.2.3.1"/>
  <changelog author="jengelh@medozas.de" date="1329566400">- Update to new upstream release 6.0.9
  * ircd/inspircd: Fix end-of-burst detection.
  * ircd/ts6: Mark +S services as UF_IMMUNE.
  * ircd/p10: Recognize umode +k as providing kick immunity.
  * ircd/plexus: Fix real hostname showing up as vhost.
  * backend/opensex: Cleanly handle no OpenSEX DB existing on startup</changelog>
  <changelog author="simone.tolotti@gmail.com" date="1334145600">- Update to new upstream release 6.0.10
  * ircd/charybdis: send messages to channels even if we're not on it from the bots themselves.
  * ircd/unrealircd: reset +x if a vhost is removed.
  * ircd/inspircd: reset +x if a vhost is removed and track whether or not m_cloaking is loaded.
  * nickserv: ensure certfp resources are released when an account object is destroyed
  * bugs fixed in this release - SRV-148, SRV-160, SRV-166</changelog>
  <changelog author="jengelh@inai.de" date="1338465600">- Update to new upstream release 7.0.2
  * new "dbverify" utility to perform extensive and complicated
  consistency checks on the object store
  * channel locking updates for inspircd and charybdis
  * SASL support for unrealircd
  * many more changes, see "NEWS" file in the package</changelog>
  <changelog author="dimstar@opensuse.org" date="1353326400">- Fix useradd invocation: -o is useless without -u and newer
  versions of pwdutils/shadowutils fail on this now.</changelog>
  <changelog author="jengelh@inai.de" date="1353499200">- Update to new upstream release 7.0.5
  * ircd/unreal: fix memory corruption caused by strlcpy() against
  a strshare-managed string
  * ircd/ircd-seven: support charybdis's extension channel modes
  * chanserv/sync: sync a channel on account registration. This
  allows exttargets like $registered to react to new account
  registrations.
  * chanserv/main: send MLOCK after a TS change, otherwise it
  will be lost.
  * chanserv/flags: allow users with +f and +o (+v) to set +/-O and
  +/-V on themselves.
  * chanserv/main: respect founder_flags config setting during
  channel succession
- Add atheme-nodate.diff which removes __DATE__ from source</changelog>
  <changelog author="jengelh@inai.de" date="1380542400">- Update to new upstream release 7.0.6
  * chanfix: Restrict registering scored channels
  * memoserv/delete: Only accept numeric indexes
- Add 0001-build-resolve-compile-warning-in-servtree.c.patch</changelog>
  <changelog author="jengelh@inai.de" date="1393848000">- Update to new upstream release 7.0.7
  * saslserv/{dh-aes,dh-blowfish}: avoid possible buffer overflow
  with untrusted input size
  * saslserv/dh-blowfish: generate a new keypair (but not a new
  prime) for each authentication session
  * saslserv/dh-blowfish: avoid generating DH parameters on each
  mech_start().
  * Use hostname for flood klines if IP isn't set, for example on
  auth-spoofed users</changelog>
  <changelog author="jengelh@inai.de" date="1405857600">- Update to new upstream release 7.1.0
  * ngircd: New protocol module.
  * nefarious: Add Nefarious 2 SASL support.
  * nefarious: Send account timestamp in svslogin.
  * elemental-ircd: New protocol module.
  * dreamforge: Remove protocol module.
  * inspircd: Add support for server-side MLOCK and TOPICLOCK enforcement
  * inspircd: Add support for matching extbans modifying matching logic
  * inspircd: Add +H to channel modes
  * inspircd: Add +X and +w to list-like mode list
  * ircd-seven: Support charybdis extension cmodes on ircd-seven as well.
  * ts6-generic: Add support for serverinfo::hidden
  * unreal: Add support for extbans.
  * unreal: Add cmode +P for permanent channel.
- Remove 0001-build-resolve-compile-warning-in-servtree.c.patch
  (merged upstream)
- Delete sysvinit support (keeping the `rcatheme` shortcut, though)</changelog>
  <changelog author="jengelh@inai.de" date="1412856000">- Remove atheme-config.diff and provide a fresh minimal config
  instead. Update the config to match charybdis's.</changelog>
  <changelog author="jengelh@inai.de" date="1417694400">- Update to new upstream release 7.2.1
  * NickServ:
  * Make `VHOST` set cloak assigner and timestamp the same way HostServ does
  * Make `INFO` call the `user_info_noexist` hook for queries that don't match an account
  * Make `REGAIN` log you in if successful.
  * Allow implementing custom filters for `LIST`
  * nickserv/multimark: new module which allows multiple MARK entries per nickname.
  * ChanServ:
  * Add a `$server:` exttarget accepting server masks
  * Add `PUBACL` flag which allows the channel access to be public.
  * Don't allow `DEOP` or `KICK` of a services bot.
  * Don't try to expand extbans in various commands.
  * Allow users with +O or +V flags to op/voice themselves, since they can regain op/voice
  by cycling the channel anyway.
  * chanserv/clear_akicks: new module providing a `CLEAR AKICKS` command.</changelog>
  <changelog author="jengelh@inai.de" date="1428062400">- Update to new upstream release 7.2.5
  * pbkdf2v2: Newer module implementing PBKDF2-HMAC digest scheme</changelog>
  <changelog author="jengelh@inai.de" date="1462276800">- Update to new upstream release 7.2.6
  * avoid potential NULL dereference in language code
  * Add NOPASSWORD criterion to nickserv/list helpfile
  * new nickserv/list criterion VACATION
- Add 0001-Do-not-copy-more-bytes-than-were-allocated.patch
  [CVE-2016-4478]
- Add 0001-chanserv-flags-make-Anope-FLAGS-compatibility-an-opt.patch
  [CVE-2014-9773, boo#978170]
- Add atheme-serno.diff, a build fix</changelog>
  <changelog author="jengelh@inai.de" date="1479643200">- Update to new upstream release 7.2.7
  * NickServ:
  * Make `VHOST` set cloak assigner and timestamp the same way
    HostServ does
  * Make `INFO` call the `user_info_noexist` hook for queries
    that don't match an account
  * Make `REGAIN` log you in if successful.
  * ChanServ:
  * Add a `$server:` exttarget accepting server masks
  * Add `PUBACL` flag which allows the channel access to be public.
  * Don't allow `DEOP` or `KICK` of a services bot.
  * Don't try to expand extbans in various commands.
  * Allow users with +O or +V flags to op/voice themselves, since
    they can regain op/voice by cycling the channel anyway.
- +e added to chanserv{} templates and founder_flags
- Remove 0001-Do-not-copy-more-bytes-than-were-allocated.patch
  and 0001-chanserv-flags-make-Anope-FLAGS-compatibility-an-opt.patch
  (applied upstream)
- Abort installation if user/group cannot be created</changelog>
  <changelog author="jengelh@inai.de" date="1490875200">- Update to new upstream release 7.2.8
  * Close a memory leak that could be exploited by attackers to
    potentially cause a denial of service.
    [CVE-2017-6384, boo#1027614]
- Update to new upstream release 7.2.9
  * Fixing use after free that could potentially be used by an
    attacker already having the privilege to use SASL impersonation
    to cause a denial of service.</changelog>
  <changelog author="jengelh@inai.de" date="1509710400">- Rename the tools dbverify and ecdsakeygen with an "atheme-"
  prefix. This is possible since they do not appear to get invoked
  by the server, but only by the user.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566388800">- Update to new upstream release 7.2.10.r2
  * Fix potential NULL dereference in modules/crypto/posix.
  * Bump E-Mail address maximum length to 254 characters.
  * Use flags setter information in modules/chanserv/access &amp;
    modules/chanserv/flags.
  * Fix issue where modules/misc/httpd was not closing its
    listening socket on deinit.
  * Fix GroupServ data loss issue when a group was the founder of
    another group.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1600084800">- Fix misuse of %_libexecdir for /usr/lib/tmpfiles
  [boo#1174075]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1614513600">- Update to release 7.2.11
  * Add a preliminary Turkish translation
  * Add HMAC-MD5 verify-only support to crypto/pbkdf2v2
  * modules/chanserv/akick: fix unload crash with akicks that
    have timeouts
  * modules/nickserv/multimark: use IRC case canonicalisation
    for restored nicks
  * modules/nickserv/multimark: forbid unloading due to the
    potential for data loss
  * CA_ constants: include CA_EXEMPT (+e) where appropriate
- Drop atheme-serno.diff (no longer applies)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1615118400">- Redownload atheme-services-v7.2.11.tar.xz
  because they changed it</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1643630400">- Update to release 7.2.12
  * Fix CVE-2022-24976 [boo#1195989]
  * Track SASL login EID</changelog>
</package>
<package pkgid="4ba08ea62dd26d01fb4010de147ac43ed97193894cebf149ce593961186e3bde" name="atheme" arch="x86_64">
  <version epoch="0" ver="7.2.12" rel="bp154.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1417694400">- Update to new upstream release 7.2.1
  * NickServ:
  * Make `VHOST` set cloak assigner and timestamp the same way HostServ does
  * Make `INFO` call the `user_info_noexist` hook for queries that don't match an account
  * Make `REGAIN` log you in if successful.
  * Allow implementing custom filters for `LIST`
  * nickserv/multimark: new module which allows multiple MARK entries per nickname.
  * ChanServ:
  * Add a `$server:` exttarget accepting server masks
  * Add `PUBACL` flag which allows the channel access to be public.
  * Don't allow `DEOP` or `KICK` of a services bot.
  * Don't try to expand extbans in various commands.
  * Allow users with +O or +V flags to op/voice themselves, since they can regain op/voice
  by cycling the channel anyway.
  * chanserv/clear_akicks: new module providing a `CLEAR AKICKS` command.</changelog>
  <changelog author="jengelh@inai.de" date="1428062400">- Update to new upstream release 7.2.5
  * pbkdf2v2: Newer module implementing PBKDF2-HMAC digest scheme</changelog>
  <changelog author="jengelh@inai.de" date="1462276800">- Update to new upstream release 7.2.6
  * avoid potential NULL dereference in language code
  * Add NOPASSWORD criterion to nickserv/list helpfile
  * new nickserv/list criterion VACATION
- Add 0001-Do-not-copy-more-bytes-than-were-allocated.patch
  [CVE-2016-4478]
- Add 0001-chanserv-flags-make-Anope-FLAGS-compatibility-an-opt.patch
  [CVE-2014-9773, boo#978170]
- Add atheme-serno.diff, a build fix</changelog>
  <changelog author="jengelh@inai.de" date="1479643200">- Update to new upstream release 7.2.7
  * NickServ:
  * Make `VHOST` set cloak assigner and timestamp the same way
    HostServ does
  * Make `INFO` call the `user_info_noexist` hook for queries
    that don't match an account
  * Make `REGAIN` log you in if successful.
  * ChanServ:
  * Add a `$server:` exttarget accepting server masks
  * Add `PUBACL` flag which allows the channel access to be public.
  * Don't allow `DEOP` or `KICK` of a services bot.
  * Don't try to expand extbans in various commands.
  * Allow users with +O or +V flags to op/voice themselves, since
    they can regain op/voice by cycling the channel anyway.
- +e added to chanserv{} templates and founder_flags
- Remove 0001-Do-not-copy-more-bytes-than-were-allocated.patch
  and 0001-chanserv-flags-make-Anope-FLAGS-compatibility-an-opt.patch
  (applied upstream)
- Abort installation if user/group cannot be created</changelog>
  <changelog author="jengelh@inai.de" date="1490875200">- Update to new upstream release 7.2.8
  * Close a memory leak that could be exploited by attackers to
    potentially cause a denial of service.
    [CVE-2017-6384, boo#1027614]
- Update to new upstream release 7.2.9
  * Fixing use after free that could potentially be used by an
    attacker already having the privilege to use SASL impersonation
    to cause a denial of service.</changelog>
  <changelog author="jengelh@inai.de" date="1509710400">- Rename the tools dbverify and ecdsakeygen with an "atheme-"
  prefix. This is possible since they do not appear to get invoked
  by the server, but only by the user.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566388800">- Update to new upstream release 7.2.10.r2
  * Fix potential NULL dereference in modules/crypto/posix.
  * Bump E-Mail address maximum length to 254 characters.
  * Use flags setter information in modules/chanserv/access &amp;
    modules/chanserv/flags.
  * Fix issue where modules/misc/httpd was not closing its
    listening socket on deinit.
  * Fix GroupServ data loss issue when a group was the founder of
    another group.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1600084800">- Fix misuse of %_libexecdir for /usr/lib/tmpfiles
  [boo#1174075]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1614513600">- Update to release 7.2.11
  * Add a preliminary Turkish translation
  * Add HMAC-MD5 verify-only support to crypto/pbkdf2v2
  * modules/chanserv/akick: fix unload crash with akicks that
    have timeouts
  * modules/nickserv/multimark: use IRC case canonicalisation
    for restored nicks
  * modules/nickserv/multimark: forbid unloading due to the
    potential for data loss
  * CA_ constants: include CA_EXEMPT (+e) where appropriate
- Drop atheme-serno.diff (no longer applies)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1615118400">- Redownload atheme-services-v7.2.11.tar.xz
  because they changed it</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1643630400">- Update to release 7.2.12
  * Fix CVE-2022-24976 [boo#1195989]
  * Track SASL login EID</changelog>
</package>
<package pkgid="99d4537997a8be8dbab4c8a923759ed654bd4d9d1713c51b3affeaec6d1ac69f" name="atheme-devel" arch="aarch64">
  <version epoch="0" ver="7.2.12" rel="bp154.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1417694400">- Update to new upstream release 7.2.1
  * NickServ:
  * Make `VHOST` set cloak assigner and timestamp the same way HostServ does
  * Make `INFO` call the `user_info_noexist` hook for queries that don't match an account
  * Make `REGAIN` log you in if successful.
  * Allow implementing custom filters for `LIST`
  * nickserv/multimark: new module which allows multiple MARK entries per nickname.
  * ChanServ:
  * Add a `$server:` exttarget accepting server masks
  * Add `PUBACL` flag which allows the channel access to be public.
  * Don't allow `DEOP` or `KICK` of a services bot.
  * Don't try to expand extbans in various commands.
  * Allow users with +O or +V flags to op/voice themselves, since they can regain op/voice
  by cycling the channel anyway.
  * chanserv/clear_akicks: new module providing a `CLEAR AKICKS` command.</changelog>
  <changelog author="jengelh@inai.de" date="1428062400">- Update to new upstream release 7.2.5
  * pbkdf2v2: Newer module implementing PBKDF2-HMAC digest scheme</changelog>
  <changelog author="jengelh@inai.de" date="1462276800">- Update to new upstream release 7.2.6
  * avoid potential NULL dereference in language code
  * Add NOPASSWORD criterion to nickserv/list helpfile
  * new nickserv/list criterion VACATION
- Add 0001-Do-not-copy-more-bytes-than-were-allocated.patch
  [CVE-2016-4478]
- Add 0001-chanserv-flags-make-Anope-FLAGS-compatibility-an-opt.patch
  [CVE-2014-9773, boo#978170]
- Add atheme-serno.diff, a build fix</changelog>
  <changelog author="jengelh@inai.de" date="1479643200">- Update to new upstream release 7.2.7
  * NickServ:
  * Make `VHOST` set cloak assigner and timestamp the same way
    HostServ does
  * Make `INFO` call the `user_info_noexist` hook for queries
    that don't match an account
  * Make `REGAIN` log you in if successful.
  * ChanServ:
  * Add a `$server:` exttarget accepting server masks
  * Add `PUBACL` flag which allows the channel access to be public.
  * Don't allow `DEOP` or `KICK` of a services bot.
  * Don't try to expand extbans in various commands.
  * Allow users with +O or +V flags to op/voice themselves, since
    they can regain op/voice by cycling the channel anyway.
- +e added to chanserv{} templates and founder_flags
- Remove 0001-Do-not-copy-more-bytes-than-were-allocated.patch
  and 0001-chanserv-flags-make-Anope-FLAGS-compatibility-an-opt.patch
  (applied upstream)
- Abort installation if user/group cannot be created</changelog>
  <changelog author="jengelh@inai.de" date="1490875200">- Update to new upstream release 7.2.8
  * Close a memory leak that could be exploited by attackers to
    potentially cause a denial of service.
    [CVE-2017-6384, boo#1027614]
- Update to new upstream release 7.2.9
  * Fixing use after free that could potentially be used by an
    attacker already having the privilege to use SASL impersonation
    to cause a denial of service.</changelog>
  <changelog author="jengelh@inai.de" date="1509710400">- Rename the tools dbverify and ecdsakeygen with an "atheme-"
  prefix. This is possible since they do not appear to get invoked
  by the server, but only by the user.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566388800">- Update to new upstream release 7.2.10.r2
  * Fix potential NULL dereference in modules/crypto/posix.
  * Bump E-Mail address maximum length to 254 characters.
  * Use flags setter information in modules/chanserv/access &amp;
    modules/chanserv/flags.
  * Fix issue where modules/misc/httpd was not closing its
    listening socket on deinit.
  * Fix GroupServ data loss issue when a group was the founder of
    another group.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1600084800">- Fix misuse of %_libexecdir for /usr/lib/tmpfiles
  [boo#1174075]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1614513600">- Update to release 7.2.11
  * Add a preliminary Turkish translation
  * Add HMAC-MD5 verify-only support to crypto/pbkdf2v2
  * modules/chanserv/akick: fix unload crash with akicks that
    have timeouts
  * modules/nickserv/multimark: use IRC case canonicalisation
    for restored nicks
  * modules/nickserv/multimark: forbid unloading due to the
    potential for data loss
  * CA_ constants: include CA_EXEMPT (+e) where appropriate
- Drop atheme-serno.diff (no longer applies)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1615118400">- Redownload atheme-services-v7.2.11.tar.xz
  because they changed it</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1643630400">- Update to release 7.2.12
  * Fix CVE-2022-24976 [boo#1195989]
  * Track SASL login EID</changelog>
</package>
<package pkgid="5a10313083c352d6ca67a8f84b745167de2a6d22cc263cdbf25dda2e45569c8f" name="atheme-devel" arch="i586">
  <version epoch="0" ver="7.2.12" rel="bp154.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1417694400">- Update to new upstream release 7.2.1
  * NickServ:
  * Make `VHOST` set cloak assigner and timestamp the same way HostServ does
  * Make `INFO` call the `user_info_noexist` hook for queries that don't match an account
  * Make `REGAIN` log you in if successful.
  * Allow implementing custom filters for `LIST`
  * nickserv/multimark: new module which allows multiple MARK entries per nickname.
  * ChanServ:
  * Add a `$server:` exttarget accepting server masks
  * Add `PUBACL` flag which allows the channel access to be public.
  * Don't allow `DEOP` or `KICK` of a services bot.
  * Don't try to expand extbans in various commands.
  * Allow users with +O or +V flags to op/voice themselves, since they can regain op/voice
  by cycling the channel anyway.
  * chanserv/clear_akicks: new module providing a `CLEAR AKICKS` command.</changelog>
  <changelog author="jengelh@inai.de" date="1428062400">- Update to new upstream release 7.2.5
  * pbkdf2v2: Newer module implementing PBKDF2-HMAC digest scheme</changelog>
  <changelog author="jengelh@inai.de" date="1462276800">- Update to new upstream release 7.2.6
  * avoid potential NULL dereference in language code
  * Add NOPASSWORD criterion to nickserv/list helpfile
  * new nickserv/list criterion VACATION
- Add 0001-Do-not-copy-more-bytes-than-were-allocated.patch
  [CVE-2016-4478]
- Add 0001-chanserv-flags-make-Anope-FLAGS-compatibility-an-opt.patch
  [CVE-2014-9773, boo#978170]
- Add atheme-serno.diff, a build fix</changelog>
  <changelog author="jengelh@inai.de" date="1479643200">- Update to new upstream release 7.2.7
  * NickServ:
  * Make `VHOST` set cloak assigner and timestamp the same way
    HostServ does
  * Make `INFO` call the `user_info_noexist` hook for queries
    that don't match an account
  * Make `REGAIN` log you in if successful.
  * ChanServ:
  * Add a `$server:` exttarget accepting server masks
  * Add `PUBACL` flag which allows the channel access to be public.
  * Don't allow `DEOP` or `KICK` of a services bot.
  * Don't try to expand extbans in various commands.
  * Allow users with +O or +V flags to op/voice themselves, since
    they can regain op/voice by cycling the channel anyway.
- +e added to chanserv{} templates and founder_flags
- Remove 0001-Do-not-copy-more-bytes-than-were-allocated.patch
  and 0001-chanserv-flags-make-Anope-FLAGS-compatibility-an-opt.patch
  (applied upstream)
- Abort installation if user/group cannot be created</changelog>
  <changelog author="jengelh@inai.de" date="1490875200">- Update to new upstream release 7.2.8
  * Close a memory leak that could be exploited by attackers to
    potentially cause a denial of service.
    [CVE-2017-6384, boo#1027614]
- Update to new upstream release 7.2.9
  * Fixing use after free that could potentially be used by an
    attacker already having the privilege to use SASL impersonation
    to cause a denial of service.</changelog>
  <changelog author="jengelh@inai.de" date="1509710400">- Rename the tools dbverify and ecdsakeygen with an "atheme-"
  prefix. This is possible since they do not appear to get invoked
  by the server, but only by the user.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566388800">- Update to new upstream release 7.2.10.r2
  * Fix potential NULL dereference in modules/crypto/posix.
  * Bump E-Mail address maximum length to 254 characters.
  * Use flags setter information in modules/chanserv/access &amp;
    modules/chanserv/flags.
  * Fix issue where modules/misc/httpd was not closing its
    listening socket on deinit.
  * Fix GroupServ data loss issue when a group was the founder of
    another group.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1600084800">- Fix misuse of %_libexecdir for /usr/lib/tmpfiles
  [boo#1174075]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1614513600">- Update to release 7.2.11
  * Add a preliminary Turkish translation
  * Add HMAC-MD5 verify-only support to crypto/pbkdf2v2
  * modules/chanserv/akick: fix unload crash with akicks that
    have timeouts
  * modules/nickserv/multimark: use IRC case canonicalisation
    for restored nicks
  * modules/nickserv/multimark: forbid unloading due to the
    potential for data loss
  * CA_ constants: include CA_EXEMPT (+e) where appropriate
- Drop atheme-serno.diff (no longer applies)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1615118400">- Redownload atheme-services-v7.2.11.tar.xz
  because they changed it</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1643630400">- Update to release 7.2.12
  * Fix CVE-2022-24976 [boo#1195989]
  * Track SASL login EID</changelog>
</package>
<package pkgid="e02258ac0b886532dced44ea92cbc34e7392c7279aa9dc968c1e9bbbfadb4a7c" name="atheme-devel" arch="ppc64le">
  <version epoch="0" ver="7.2.12" rel="bp154.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1417694400">- Update to new upstream release 7.2.1
  * NickServ:
  * Make `VHOST` set cloak assigner and timestamp the same way HostServ does
  * Make `INFO` call the `user_info_noexist` hook for queries that don't match an account
  * Make `REGAIN` log you in if successful.
  * Allow implementing custom filters for `LIST`
  * nickserv/multimark: new module which allows multiple MARK entries per nickname.
  * ChanServ:
  * Add a `$server:` exttarget accepting server masks
  * Add `PUBACL` flag which allows the channel access to be public.
  * Don't allow `DEOP` or `KICK` of a services bot.
  * Don't try to expand extbans in various commands.
  * Allow users with +O or +V flags to op/voice themselves, since they can regain op/voice
  by cycling the channel anyway.
  * chanserv/clear_akicks: new module providing a `CLEAR AKICKS` command.</changelog>
  <changelog author="jengelh@inai.de" date="1428062400">- Update to new upstream release 7.2.5
  * pbkdf2v2: Newer module implementing PBKDF2-HMAC digest scheme</changelog>
  <changelog author="jengelh@inai.de" date="1462276800">- Update to new upstream release 7.2.6
  * avoid potential NULL dereference in language code
  * Add NOPASSWORD criterion to nickserv/list helpfile
  * new nickserv/list criterion VACATION
- Add 0001-Do-not-copy-more-bytes-than-were-allocated.patch
  [CVE-2016-4478]
- Add 0001-chanserv-flags-make-Anope-FLAGS-compatibility-an-opt.patch
  [CVE-2014-9773, boo#978170]
- Add atheme-serno.diff, a build fix</changelog>
  <changelog author="jengelh@inai.de" date="1479643200">- Update to new upstream release 7.2.7
  * NickServ:
  * Make `VHOST` set cloak assigner and timestamp the same way
    HostServ does
  * Make `INFO` call the `user_info_noexist` hook for queries
    that don't match an account
  * Make `REGAIN` log you in if successful.
  * ChanServ:
  * Add a `$server:` exttarget accepting server masks
  * Add `PUBACL` flag which allows the channel access to be public.
  * Don't allow `DEOP` or `KICK` of a services bot.
  * Don't try to expand extbans in various commands.
  * Allow users with +O or +V flags to op/voice themselves, since
    they can regain op/voice by cycling the channel anyway.
- +e added to chanserv{} templates and founder_flags
- Remove 0001-Do-not-copy-more-bytes-than-were-allocated.patch
  and 0001-chanserv-flags-make-Anope-FLAGS-compatibility-an-opt.patch
  (applied upstream)
- Abort installation if user/group cannot be created</changelog>
  <changelog author="jengelh@inai.de" date="1490875200">- Update to new upstream release 7.2.8
  * Close a memory leak that could be exploited by attackers to
    potentially cause a denial of service.
    [CVE-2017-6384, boo#1027614]
- Update to new upstream release 7.2.9
  * Fixing use after free that could potentially be used by an
    attacker already having the privilege to use SASL impersonation
    to cause a denial of service.</changelog>
  <changelog author="jengelh@inai.de" date="1509710400">- Rename the tools dbverify and ecdsakeygen with an "atheme-"
  prefix. This is possible since they do not appear to get invoked
  by the server, but only by the user.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566388800">- Update to new upstream release 7.2.10.r2
  * Fix potential NULL dereference in modules/crypto/posix.
  * Bump E-Mail address maximum length to 254 characters.
  * Use flags setter information in modules/chanserv/access &amp;
    modules/chanserv/flags.
  * Fix issue where modules/misc/httpd was not closing its
    listening socket on deinit.
  * Fix GroupServ data loss issue when a group was the founder of
    another group.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1600084800">- Fix misuse of %_libexecdir for /usr/lib/tmpfiles
  [boo#1174075]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1614513600">- Update to release 7.2.11
  * Add a preliminary Turkish translation
  * Add HMAC-MD5 verify-only support to crypto/pbkdf2v2
  * modules/chanserv/akick: fix unload crash with akicks that
    have timeouts
  * modules/nickserv/multimark: use IRC case canonicalisation
    for restored nicks
  * modules/nickserv/multimark: forbid unloading due to the
    potential for data loss
  * CA_ constants: include CA_EXEMPT (+e) where appropriate
- Drop atheme-serno.diff (no longer applies)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1615118400">- Redownload atheme-services-v7.2.11.tar.xz
  because they changed it</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1643630400">- Update to release 7.2.12
  * Fix CVE-2022-24976 [boo#1195989]
  * Track SASL login EID</changelog>
</package>
<package pkgid="f4941dd726c5c79d3547e8acf710519087a6d86a1fd1a7874f2991e16d2583f1" name="atheme-devel" arch="s390x">
  <version epoch="0" ver="7.2.12" rel="bp154.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1417694400">- Update to new upstream release 7.2.1
  * NickServ:
  * Make `VHOST` set cloak assigner and timestamp the same way HostServ does
  * Make `INFO` call the `user_info_noexist` hook for queries that don't match an account
  * Make `REGAIN` log you in if successful.
  * Allow implementing custom filters for `LIST`
  * nickserv/multimark: new module which allows multiple MARK entries per nickname.
  * ChanServ:
  * Add a `$server:` exttarget accepting server masks
  * Add `PUBACL` flag which allows the channel access to be public.
  * Don't allow `DEOP` or `KICK` of a services bot.
  * Don't try to expand extbans in various commands.
  * Allow users with +O or +V flags to op/voice themselves, since they can regain op/voice
  by cycling the channel anyway.
  * chanserv/clear_akicks: new module providing a `CLEAR AKICKS` command.</changelog>
  <changelog author="jengelh@inai.de" date="1428062400">- Update to new upstream release 7.2.5
  * pbkdf2v2: Newer module implementing PBKDF2-HMAC digest scheme</changelog>
  <changelog author="jengelh@inai.de" date="1462276800">- Update to new upstream release 7.2.6
  * avoid potential NULL dereference in language code
  * Add NOPASSWORD criterion to nickserv/list helpfile
  * new nickserv/list criterion VACATION
- Add 0001-Do-not-copy-more-bytes-than-were-allocated.patch
  [CVE-2016-4478]
- Add 0001-chanserv-flags-make-Anope-FLAGS-compatibility-an-opt.patch
  [CVE-2014-9773, boo#978170]
- Add atheme-serno.diff, a build fix</changelog>
  <changelog author="jengelh@inai.de" date="1479643200">- Update to new upstream release 7.2.7
  * NickServ:
  * Make `VHOST` set cloak assigner and timestamp the same way
    HostServ does
  * Make `INFO` call the `user_info_noexist` hook for queries
    that don't match an account
  * Make `REGAIN` log you in if successful.
  * ChanServ:
  * Add a `$server:` exttarget accepting server masks
  * Add `PUBACL` flag which allows the channel access to be public.
  * Don't allow `DEOP` or `KICK` of a services bot.
  * Don't try to expand extbans in various commands.
  * Allow users with +O or +V flags to op/voice themselves, since
    they can regain op/voice by cycling the channel anyway.
- +e added to chanserv{} templates and founder_flags
- Remove 0001-Do-not-copy-more-bytes-than-were-allocated.patch
  and 0001-chanserv-flags-make-Anope-FLAGS-compatibility-an-opt.patch
  (applied upstream)
- Abort installation if user/group cannot be created</changelog>
  <changelog author="jengelh@inai.de" date="1490875200">- Update to new upstream release 7.2.8
  * Close a memory leak that could be exploited by attackers to
    potentially cause a denial of service.
    [CVE-2017-6384, boo#1027614]
- Update to new upstream release 7.2.9
  * Fixing use after free that could potentially be used by an
    attacker already having the privilege to use SASL impersonation
    to cause a denial of service.</changelog>
  <changelog author="jengelh@inai.de" date="1509710400">- Rename the tools dbverify and ecdsakeygen with an "atheme-"
  prefix. This is possible since they do not appear to get invoked
  by the server, but only by the user.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566388800">- Update to new upstream release 7.2.10.r2
  * Fix potential NULL dereference in modules/crypto/posix.
  * Bump E-Mail address maximum length to 254 characters.
  * Use flags setter information in modules/chanserv/access &amp;
    modules/chanserv/flags.
  * Fix issue where modules/misc/httpd was not closing its
    listening socket on deinit.
  * Fix GroupServ data loss issue when a group was the founder of
    another group.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1600084800">- Fix misuse of %_libexecdir for /usr/lib/tmpfiles
  [boo#1174075]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1614513600">- Update to release 7.2.11
  * Add a preliminary Turkish translation
  * Add HMAC-MD5 verify-only support to crypto/pbkdf2v2
  * modules/chanserv/akick: fix unload crash with akicks that
    have timeouts
  * modules/nickserv/multimark: use IRC case canonicalisation
    for restored nicks
  * modules/nickserv/multimark: forbid unloading due to the
    potential for data loss
  * CA_ constants: include CA_EXEMPT (+e) where appropriate
- Drop atheme-serno.diff (no longer applies)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1615118400">- Redownload atheme-services-v7.2.11.tar.xz
  because they changed it</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1643630400">- Update to release 7.2.12
  * Fix CVE-2022-24976 [boo#1195989]
  * Track SASL login EID</changelog>
</package>
<package pkgid="9220091a051e4379ebe0d41148cedee33fd14586e7c77863c7220946db77dd59" name="atheme-devel" arch="x86_64">
  <version epoch="0" ver="7.2.12" rel="bp154.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1417694400">- Update to new upstream release 7.2.1
  * NickServ:
  * Make `VHOST` set cloak assigner and timestamp the same way HostServ does
  * Make `INFO` call the `user_info_noexist` hook for queries that don't match an account
  * Make `REGAIN` log you in if successful.
  * Allow implementing custom filters for `LIST`
  * nickserv/multimark: new module which allows multiple MARK entries per nickname.
  * ChanServ:
  * Add a `$server:` exttarget accepting server masks
  * Add `PUBACL` flag which allows the channel access to be public.
  * Don't allow `DEOP` or `KICK` of a services bot.
  * Don't try to expand extbans in various commands.
  * Allow users with +O or +V flags to op/voice themselves, since they can regain op/voice
  by cycling the channel anyway.
  * chanserv/clear_akicks: new module providing a `CLEAR AKICKS` command.</changelog>
  <changelog author="jengelh@inai.de" date="1428062400">- Update to new upstream release 7.2.5
  * pbkdf2v2: Newer module implementing PBKDF2-HMAC digest scheme</changelog>
  <changelog author="jengelh@inai.de" date="1462276800">- Update to new upstream release 7.2.6
  * avoid potential NULL dereference in language code
  * Add NOPASSWORD criterion to nickserv/list helpfile
  * new nickserv/list criterion VACATION
- Add 0001-Do-not-copy-more-bytes-than-were-allocated.patch
  [CVE-2016-4478]
- Add 0001-chanserv-flags-make-Anope-FLAGS-compatibility-an-opt.patch
  [CVE-2014-9773, boo#978170]
- Add atheme-serno.diff, a build fix</changelog>
  <changelog author="jengelh@inai.de" date="1479643200">- Update to new upstream release 7.2.7
  * NickServ:
  * Make `VHOST` set cloak assigner and timestamp the same way
    HostServ does
  * Make `INFO` call the `user_info_noexist` hook for queries
    that don't match an account
  * Make `REGAIN` log you in if successful.
  * ChanServ:
  * Add a `$server:` exttarget accepting server masks
  * Add `PUBACL` flag which allows the channel access to be public.
  * Don't allow `DEOP` or `KICK` of a services bot.
  * Don't try to expand extbans in various commands.
  * Allow users with +O or +V flags to op/voice themselves, since
    they can regain op/voice by cycling the channel anyway.
- +e added to chanserv{} templates and founder_flags
- Remove 0001-Do-not-copy-more-bytes-than-were-allocated.patch
  and 0001-chanserv-flags-make-Anope-FLAGS-compatibility-an-opt.patch
  (applied upstream)
- Abort installation if user/group cannot be created</changelog>
  <changelog author="jengelh@inai.de" date="1490875200">- Update to new upstream release 7.2.8
  * Close a memory leak that could be exploited by attackers to
    potentially cause a denial of service.
    [CVE-2017-6384, boo#1027614]
- Update to new upstream release 7.2.9
  * Fixing use after free that could potentially be used by an
    attacker already having the privilege to use SASL impersonation
    to cause a denial of service.</changelog>
  <changelog author="jengelh@inai.de" date="1509710400">- Rename the tools dbverify and ecdsakeygen with an "atheme-"
  prefix. This is possible since they do not appear to get invoked
  by the server, but only by the user.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566388800">- Update to new upstream release 7.2.10.r2
  * Fix potential NULL dereference in modules/crypto/posix.
  * Bump E-Mail address maximum length to 254 characters.
  * Use flags setter information in modules/chanserv/access &amp;
    modules/chanserv/flags.
  * Fix issue where modules/misc/httpd was not closing its
    listening socket on deinit.
  * Fix GroupServ data loss issue when a group was the founder of
    another group.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1600084800">- Fix misuse of %_libexecdir for /usr/lib/tmpfiles
  [boo#1174075]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1614513600">- Update to release 7.2.11
  * Add a preliminary Turkish translation
  * Add HMAC-MD5 verify-only support to crypto/pbkdf2v2
  * modules/chanserv/akick: fix unload crash with akicks that
    have timeouts
  * modules/nickserv/multimark: use IRC case canonicalisation
    for restored nicks
  * modules/nickserv/multimark: forbid unloading due to the
    potential for data loss
  * CA_ constants: include CA_EXEMPT (+e) where appropriate
- Drop atheme-serno.diff (no longer applies)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1615118400">- Redownload atheme-services-v7.2.11.tar.xz
  because they changed it</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1643630400">- Update to release 7.2.12
  * Fix CVE-2022-24976 [boo#1195989]
  * Track SASL login EID</changelog>
</package>
<package pkgid="9b19acf18b426e8bd785fa0ce6212ff0ca48b7e8a18e67234f8c9cadd7caeaa5" name="atop" arch="aarch64">
  <version epoch="0" ver="2.7.1" rel="bp154.2.3.1"/>
  <changelog author="pascal.bleser@opensuse.org" date="1413633600">- update to 2.1:
  * OpenVZ support: virtual environment identifier per process (envID)
  * Bug solution: when the screen-width is larger than the total number of
    columns to be printed, empty columns are added, however one column too many
  * Removed useless empty column for memory statistics
  * Introduce the 'G' key to suppress showing/accumulating exited processes
    in the output
  * Support CPU frequencies for systems with Intel P-state driver
  * Introduction of new daemon atopacctd. This daemon switches on process
    accounting and transfers every accounting record to an accounting shadow
    file. The source accounting file will regularly be truncated, while the
    shadow files are written with a limited size in a queued way. Non-used
    shadow files are deleted regularly.
  * Bug-solution: segmentation fault when one of the process names in the
    system contains a newline
  * Introduce configurable colors: in the atoprc file, colors can be defined
    for information messages (default green), threads (default yellow), almost
    critical resources (default cyan) and critical resources (default red).
  * Limit the names of network interfaces to six characters max
  * Introduction of proportional memory size (PSIZE) per process. For the
    resident memory parts used by a process that are shared with other
    processes, only a proportional part (shared memory part divided by the
    number of sharers) is accounted to the process. Since the gathering of this
    value is rather time-consuming (reading the smaps file of every process),
    it is optional ('R' key or '-R' flag).
  * Increased number of LVMs and disks supported
  * Support for huge pages (total and in use).</changelog>
  <changelog author="coolo@suse.com" date="1479816000">- update to 2.2:
  * Modifications for atop:
    a. New keys for process selection:
    '/' to select processes containing a particular search string in the command line arguments.
    'I' to select processes running with particular PIDs.
    b. New counters for NFS activity:
    On system level, counters are maintained about NFS traffic. Three new labels are introduced for this purpose:
    'NFS' for NFS server statistics (overall).
    'NFC' for NFS client statistics (overall).
    'NFM' for NFS client statistics per mounted NFS filesystem (so multiple lines possible).
    c. New counters for OpenVZ containers:
    CPU consumption and memory occupation are shown per container on system level (label 'CON').
    Container ID and virtual PID are shown on process level (when using key 'v' or 's').
    d. Bug fixes:
    The maximum transfer rate larger than 1 Gbit for ethernet interfaces is now correctly shown.
    The maximum transfer rate for wifi connections is now shown.
    For interfaces in general, the maximum transfer rate is shown as a separate column ('sp').
    Counters about virtual disk type 'xvd[a-z]' are shown.
    Several minor bugs have been solved.
  * Modifications for atopacct:
    a. Avoid that process accounting is reactivated too frequently (and unnecessary).
  * Modifications for atopsar:
    a. Add flags for NFS traffic ('-n' for NFS mounts, '-j' for overall NFS
    client activity and '-J' for overall NFS server activity).
  * General:
    a. Support for systemd-based distributions has been added.
    b. The format of the raw file is incompatible with earlier versions. However,
    the earlier version of atop is automatically activated when accessing an
    older raw file.
- cleanup spec file - remove support for &lt; 12.1</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1528632000">- Update to 2.3:
  * Modifications for atop:
    + Support for Docker containers.
    + Improved gathering of process data.
    + Improved memory figures for processes.
    + Variable width for PID column.
    + Better handling when started via sudo (not entering stopped
    + state).
    + Handling of disk drives starting with 'xvd...'.
  * Modifications for atopacct:
    + Better error handling of Netlink interface.
    + Immediate reaction when receiving SIGTERM signal.
    + Bypass for kernel bug 190711 (Netlink interface not
    available).
    + Bypass for kernel bug 190271 (process accounting does not
    always start).
  * Modifications for atopsar:
    + Top-3 of resource consuming processes only shows active
    processes now.
  * General:
    + The format of the raw file is upward compatible with version
    2.2-3.
- Clean with spec-cleaner.</changelog>
  <changelog author="rbrown@suse.com" date="1529928000">- Correct copyright attribution</changelog>
  <changelog author="Matthias Eliasson &lt;matthias.eliasson@gmail.com&gt;" date="1550404800">- Update to 2.4.0
  * Modifications for atop:
    + Support for Nvidia GPU statistics:
    A separate daemon atopgpud has been developed to maintain statistics of
  Nvidia GPUs in the system. When this daemon is running, atop will
  connect to this daemon and will get/show the GPU statistics with every
  interval on system level and process level (key 'e').
    The atopgpud daemon will only be active when it is explicitly enabled
  (see man pages for more info).
    + Support for Infiniband statistics:
    Counters showing the bandwidth utilization of Infiniband ports
  (system level) are added.
    + Support for Pressure Stall Information (PSI):
    The average pressure percentages of CPU, memory and I/O are reported
  for the last 10, 60 and 300 seconds. These percentage are provided from
  kernel 4.20 onwards.
    + Faster startup of atop:
    The allocation strategy for processes and threads has been improved,
  which will specifically be noticable on larger systems with lots of
  multi-threaded processes.
    + Configurable options for atop running in the background:
    Default options of script atop.daily can be overruled by
  /etc/default/atop file.
    + CPU Instructions Per Cycle (IPC):
    For every CPU, the average number of instructions per CPU cycle is
  shown as 'ipc'. Besides, a column is shown with the number of cycles
  executed per second as `cycl` (shown as effective Hz frequency).
    + Various fixes:
    Various NFS counters corrected.
    Recognition of nvme and nbd disks.
    Recognition of DEADLINE scheduling policy.
    Proper handling of memory locking (improper handling caused malloc
  failures in previous versions).
  * New program atopconvert:
    + This program can be used to convert the layout of older raw files to
  newer raw files. Raw files from atop 2.0 onwards can be converted to
  the newest version (now: 2.4).
  * Modifications for atopsar:
    + Reports can be printed now about the utilization of GPUs and Infiniband,
  and about the PSI percentages.
  * General:
    + The format of the raw file is incompatible with earlier versions.
  However, old raw files can be converted now by the program atopconvert
  to be read or extended by newer atop versions.
- Clean with spec-cleaner
- Refresh atop-makefile.patch</changelog>
  <changelog author="kukuk@suse.de" date="1566302400">- Package /etc/cron.d, as this is now part of cron which we don't
  want to require</changelog>
  <changelog author="Matthias Eliasson &lt;elimat@opensuse.org&gt;" date="1596196800">- Update to version 2.5.0
  Modifications for atop:
  * Avoid using perf counters in VM
    New option 'perfevents' in the atoprc file to define if the Instructions
  Per Cycle (IPC) should be retrieved via the 'perf' counters. Specify
  value 'auto' (default), 'enable' or 'disable'. In case of 'auto', the
  Instructions Per Cycle counter will not be retrieved on VMs due to the
  overhead of reading this counter in a guest.
  * Improve daily rotation of logfile for systemd-based systems.
    Exchange the files /etc/cron.d/atop, /etc/logrotate.d/psaccs_atop,
  /etc/logrotate.d/psaccu_atop, /usr/share/atop/atop.daily,
  /var/log/atop/dummy_after and /var/log/atop/dummy_before by
  atop-rotate.service and atop-rotate.timer.
  * Bug fixes:
    Correction of PSI value 'io full'.
    Use smaps_rollup (if present) instead of smaps for better performance.
    Use writev instead of 3 single writes to avoid logfile corruption.
    Modified handling of error messages (remain visible after window is
  closed).
    Correct CID for containers created by Kubernetes.
    Allow reading a logfile via a named pipe (non-seekable).
  Modifications for atopconvert:
  * Show version of input file (even if only one parameter specified).
  General:
  * The format of the raw file is compatible with version 2.4.
- Run spec-cleaner
- Remove requires for cron and logrotate now that there is systemd service
  and timers handling logrotation
- Remove Requires(post) for permissions since atop does not use cron files anymore
- Refresh patch:
  * atop-makefile.patch
- Add atop defaults in /etc/default/atop</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1618315200">- Update to version 2.6.0
  * Sort threads within process.
  * Individual threads within a process (key 'y') are shown in the
    order of their TID. With the additional key 'Y' threads within
    a process are sorted based on the current sort criterium.
  * Show the WCHAN per thread.
  * With the key 'W' is active, the wait channel is determined per
    thread and shown with the scheduling information (key 's').
  * Show runqueue delay per thread/process.
  * For every process (cumulated) and every thread the time spent
    waiting on the runqueue is shown as value 'RDELAY'.
  * Show other modified/new metrics:
    + PSI pressure during interval time is shown
    + Counter 'avio' (average I/O time) for fast disks in
    microseconds or nanoseconds
    + Counter 'zfarc' showing the current size of the ARC (cache)
    for ZFSonlinux
    + Counter 'swcac' showing the current size of the swap cache
    + Counter LOCKSZ showing the virtual locked memory size
  * Avoid crash with very high load average values.
  * Fix errors in reading InfiniBand states.
  * Support of rawlog files spanning multiple days.
  * The time specification to define the begin time (-b flag)
    and end time (-e flag) of both atop and atopsar is
    [YYYYMMDD]hhmm now
  * This also applies to the branch key ('b') when using atop
    interactively.
  * Support reading rawlog from a pipe.
  * Rawlog data can be read from a pipe by atop and atopsar with
    the option '-r -'. In this way, concatenated rawlog data from
    the command atopcat can be directly processed.
  * New program atopcat, the program atopcat concatenates rawlog
    files and writes this data to stdout. The output can be
    redirected to a new rawlog file or to atop/atopsar directly
    via a pipe (see option '-r -' of these commands).
    In this way e.g. weekly or monthly reports or extractions
    can be created.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1628683200">- Added hardening to systemd service(s). Added patch(es):
  * harden_atop-rotate.service.patch
  * harden_atop.service.patch
  * harden_atopacct.service.patch
  * harden_atopgpu.service.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1641556800">- Update to 2.7.0:
  * Describe (un)restricted view in first screen
  * Cosmetic change
  * Determine (un)restricted view by verifying suid instead of euid.
  * Do not ignore unknown network interface
  * Parseable output: optionally exchange spaces in command
  * No setuid by default
  * Correct conversion to 2.7 raw files
  * Corrected type
  * Only show per-node NUMA stats when more than 1 node
  * Prepare man pages for version 2.7
  * Prepare atopconvert for version 2.7
  * Detect logrotation for process accounting with psacct/acct
  * Speed and duplex mode not correctly filled for interface
  * Bug solution related to discards
  * Support discard counter for disks and skip unused disks
  * ifprop.c: fix ioctl parameter after handshaking with kernel
  * Show gigabits/sec instead of megabits/sec for Infiniband #131
  * CVE: use execvp with a specified path to avoid PATH hijacking
  * Correct memory busy logic in atopsar
  * Add parseable output for per-node NUMA counters
  * Additions to NUMA counters Table overflow checks
  * Gather and show per numa cpu related statistics
  * Gather and show per numa memory related statistics
  * Correction in handling of zswap and ksm counters
  * Support containers created by podman
  * Cleanup old messages
  * Do not change owner to root in Makefile (#76)
  * Support process accounting log /var/log/account/pacct (#138)
  * Polish do_perfevents when atop built with NOPERFEVENT
  * Do not use doconvert funtion to validate counter (#160)
  * New counter for number of NUMA pages migrated
  * Modify field order and priority of paging counters
  * Small text modification for migrated counter
  * Avoid non-initialized prestat by introducing extra pointer
  * Function 'calcdiff' (deviate.c) used uninitialized prestat struct
  * Reserver space for future counters.
  * Clean up ignored files
  * Variable number of positions for sortitem
  * Adapt man page of atop for state selection (add state 'I').
  * Allow thread state 'I' with state selection (key 'Q')
  * Count idle threads as non-interruptible threads
  * Uninitialized index might cause segmentation fault.
  * Support NVMe multipath disk statistics
  * Support page migration counter
  * photosyst.c: fix build on musl
  * Use of struct ethtool_link_settings should be conditional
  * Cosmetic change (source code layout)
  * Various bug fixes and in general add 'thread' to all messages
  * Properly define if interface is virtual or physical
  * Add license info to various include files (solves issue #144)
  * HTTP statistics modified from -h flag to -o flag (#152)
  * Possible buffer overflow with huge number of seconds Number
    of seconds will be limited to 5 positions.
  * Possible buffer overflow with average disk I/O
  * Allow process selection based on specific process states.
  * Correct definition of environment variable LOGOPTS
  * Switch to using curses vw_printw as vwprintw is deprecated
  * Support multiple counters 'allocstall_' in /proc/vmstat.
  * Avoid integer overflow when calculating PSI percentages.
  * Suppress irrelevant counters (solves issue #148)
  * Add the number of OOM kills to the -s report
  * Record the number of process stalls to run memory compaction
  * Make clean removes atopsar now (issue 145)
  * Add counter for the number of OOM kills to the PAG line
  * Add counters for zswap and KSM.
  * ifprop.c: fix build with kernel &lt; 4.6
  * Fix initifprop() when obtaining properties of all interfaces
  * Fixed rounding problems in the average-per-second mode.
- Refresh atop-makefile.patch
- Refresh harden_atop.service.patch
- Call make install instead of make systemdinstall
  Default is systemd now</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1646049600">- Update to 2.7.1:
  * Correct disk stats in atopsar (#182)
  * Explicit type definition in atop.service (#180)</changelog>
</package>
<package pkgid="1adb1f8db8a98aee94c7481464041a6067a68de2d8be7744b197d58908cbe021" name="atop" arch="i586">
  <version epoch="0" ver="2.7.1" rel="bp154.2.3.1"/>
  <changelog author="pascal.bleser@opensuse.org" date="1413633600">- update to 2.1:
  * OpenVZ support: virtual environment identifier per process (envID)
  * Bug solution: when the screen-width is larger than the total number of
    columns to be printed, empty columns are added, however one column too many
  * Removed useless empty column for memory statistics
  * Introduce the 'G' key to suppress showing/accumulating exited processes
    in the output
  * Support CPU frequencies for systems with Intel P-state driver
  * Introduction of new daemon atopacctd. This daemon switches on process
    accounting and transfers every accounting record to an accounting shadow
    file. The source accounting file will regularly be truncated, while the
    shadow files are written with a limited size in a queued way. Non-used
    shadow files are deleted regularly.
  * Bug-solution: segmentation fault when one of the process names in the
    system contains a newline
  * Introduce configurable colors: in the atoprc file, colors can be defined
    for information messages (default green), threads (default yellow), almost
    critical resources (default cyan) and critical resources (default red).
  * Limit the names of network interfaces to six characters max
  * Introduction of proportional memory size (PSIZE) per process. For the
    resident memory parts used by a process that are shared with other
    processes, only a proportional part (shared memory part divided by the
    number of sharers) is accounted to the process. Since the gathering of this
    value is rather time-consuming (reading the smaps file of every process),
    it is optional ('R' key or '-R' flag).
  * Increased number of LVMs and disks supported
  * Support for huge pages (total and in use).</changelog>
  <changelog author="coolo@suse.com" date="1479816000">- update to 2.2:
  * Modifications for atop:
    a. New keys for process selection:
    '/' to select processes containing a particular search string in the command line arguments.
    'I' to select processes running with particular PIDs.
    b. New counters for NFS activity:
    On system level, counters are maintained about NFS traffic. Three new labels are introduced for this purpose:
    'NFS' for NFS server statistics (overall).
    'NFC' for NFS client statistics (overall).
    'NFM' for NFS client statistics per mounted NFS filesystem (so multiple lines possible).
    c. New counters for OpenVZ containers:
    CPU consumption and memory occupation are shown per container on system level (label 'CON').
    Container ID and virtual PID are shown on process level (when using key 'v' or 's').
    d. Bug fixes:
    The maximum transfer rate larger than 1 Gbit for ethernet interfaces is now correctly shown.
    The maximum transfer rate for wifi connections is now shown.
    For interfaces in general, the maximum transfer rate is shown as a separate column ('sp').
    Counters about virtual disk type 'xvd[a-z]' are shown.
    Several minor bugs have been solved.
  * Modifications for atopacct:
    a. Avoid that process accounting is reactivated too frequently (and unnecessary).
  * Modifications for atopsar:
    a. Add flags for NFS traffic ('-n' for NFS mounts, '-j' for overall NFS
    client activity and '-J' for overall NFS server activity).
  * General:
    a. Support for systemd-based distributions has been added.
    b. The format of the raw file is incompatible with earlier versions. However,
    the earlier version of atop is automatically activated when accessing an
    older raw file.
- cleanup spec file - remove support for &lt; 12.1</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1528632000">- Update to 2.3:
  * Modifications for atop:
    + Support for Docker containers.
    + Improved gathering of process data.
    + Improved memory figures for processes.
    + Variable width for PID column.
    + Better handling when started via sudo (not entering stopped
    + state).
    + Handling of disk drives starting with 'xvd...'.
  * Modifications for atopacct:
    + Better error handling of Netlink interface.
    + Immediate reaction when receiving SIGTERM signal.
    + Bypass for kernel bug 190711 (Netlink interface not
    available).
    + Bypass for kernel bug 190271 (process accounting does not
    always start).
  * Modifications for atopsar:
    + Top-3 of resource consuming processes only shows active
    processes now.
  * General:
    + The format of the raw file is upward compatible with version
    2.2-3.
- Clean with spec-cleaner.</changelog>
  <changelog author="rbrown@suse.com" date="1529928000">- Correct copyright attribution</changelog>
  <changelog author="Matthias Eliasson &lt;matthias.eliasson@gmail.com&gt;" date="1550404800">- Update to 2.4.0
  * Modifications for atop:
    + Support for Nvidia GPU statistics:
    A separate daemon atopgpud has been developed to maintain statistics of
  Nvidia GPUs in the system. When this daemon is running, atop will
  connect to this daemon and will get/show the GPU statistics with every
  interval on system level and process level (key 'e').
    The atopgpud daemon will only be active when it is explicitly enabled
  (see man pages for more info).
    + Support for Infiniband statistics:
    Counters showing the bandwidth utilization of Infiniband ports
  (system level) are added.
    + Support for Pressure Stall Information (PSI):
    The average pressure percentages of CPU, memory and I/O are reported
  for the last 10, 60 and 300 seconds. These percentage are provided from
  kernel 4.20 onwards.
    + Faster startup of atop:
    The allocation strategy for processes and threads has been improved,
  which will specifically be noticable on larger systems with lots of
  multi-threaded processes.
    + Configurable options for atop running in the background:
    Default options of script atop.daily can be overruled by
  /etc/default/atop file.
    + CPU Instructions Per Cycle (IPC):
    For every CPU, the average number of instructions per CPU cycle is
  shown as 'ipc'. Besides, a column is shown with the number of cycles
  executed per second as `cycl` (shown as effective Hz frequency).
    + Various fixes:
    Various NFS counters corrected.
    Recognition of nvme and nbd disks.
    Recognition of DEADLINE scheduling policy.
    Proper handling of memory locking (improper handling caused malloc
  failures in previous versions).
  * New program atopconvert:
    + This program can be used to convert the layout of older raw files to
  newer raw files. Raw files from atop 2.0 onwards can be converted to
  the newest version (now: 2.4).
  * Modifications for atopsar:
    + Reports can be printed now about the utilization of GPUs and Infiniband,
  and about the PSI percentages.
  * General:
    + The format of the raw file is incompatible with earlier versions.
  However, old raw files can be converted now by the program atopconvert
  to be read or extended by newer atop versions.
- Clean with spec-cleaner
- Refresh atop-makefile.patch</changelog>
  <changelog author="kukuk@suse.de" date="1566302400">- Package /etc/cron.d, as this is now part of cron which we don't
  want to require</changelog>
  <changelog author="Matthias Eliasson &lt;elimat@opensuse.org&gt;" date="1596196800">- Update to version 2.5.0
  Modifications for atop:
  * Avoid using perf counters in VM
    New option 'perfevents' in the atoprc file to define if the Instructions
  Per Cycle (IPC) should be retrieved via the 'perf' counters. Specify
  value 'auto' (default), 'enable' or 'disable'. In case of 'auto', the
  Instructions Per Cycle counter will not be retrieved on VMs due to the
  overhead of reading this counter in a guest.
  * Improve daily rotation of logfile for systemd-based systems.
    Exchange the files /etc/cron.d/atop, /etc/logrotate.d/psaccs_atop,
  /etc/logrotate.d/psaccu_atop, /usr/share/atop/atop.daily,
  /var/log/atop/dummy_after and /var/log/atop/dummy_before by
  atop-rotate.service and atop-rotate.timer.
  * Bug fixes:
    Correction of PSI value 'io full'.
    Use smaps_rollup (if present) instead of smaps for better performance.
    Use writev instead of 3 single writes to avoid logfile corruption.
    Modified handling of error messages (remain visible after window is
  closed).
    Correct CID for containers created by Kubernetes.
    Allow reading a logfile via a named pipe (non-seekable).
  Modifications for atopconvert:
  * Show version of input file (even if only one parameter specified).
  General:
  * The format of the raw file is compatible with version 2.4.
- Run spec-cleaner
- Remove requires for cron and logrotate now that there is systemd service
  and timers handling logrotation
- Remove Requires(post) for permissions since atop does not use cron files anymore
- Refresh patch:
  * atop-makefile.patch
- Add atop defaults in /etc/default/atop</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1618315200">- Update to version 2.6.0
  * Sort threads within process.
  * Individual threads within a process (key 'y') are shown in the
    order of their TID. With the additional key 'Y' threads within
    a process are sorted based on the current sort criterium.
  * Show the WCHAN per thread.
  * With the key 'W' is active, the wait channel is determined per
    thread and shown with the scheduling information (key 's').
  * Show runqueue delay per thread/process.
  * For every process (cumulated) and every thread the time spent
    waiting on the runqueue is shown as value 'RDELAY'.
  * Show other modified/new metrics:
    + PSI pressure during interval time is shown
    + Counter 'avio' (average I/O time) for fast disks in
    microseconds or nanoseconds
    + Counter 'zfarc' showing the current size of the ARC (cache)
    for ZFSonlinux
    + Counter 'swcac' showing the current size of the swap cache
    + Counter LOCKSZ showing the virtual locked memory size
  * Avoid crash with very high load average values.
  * Fix errors in reading InfiniBand states.
  * Support of rawlog files spanning multiple days.
  * The time specification to define the begin time (-b flag)
    and end time (-e flag) of both atop and atopsar is
    [YYYYMMDD]hhmm now
  * This also applies to the branch key ('b') when using atop
    interactively.
  * Support reading rawlog from a pipe.
  * Rawlog data can be read from a pipe by atop and atopsar with
    the option '-r -'. In this way, concatenated rawlog data from
    the command atopcat can be directly processed.
  * New program atopcat, the program atopcat concatenates rawlog
    files and writes this data to stdout. The output can be
    redirected to a new rawlog file or to atop/atopsar directly
    via a pipe (see option '-r -' of these commands).
    In this way e.g. weekly or monthly reports or extractions
    can be created.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1628683200">- Added hardening to systemd service(s). Added patch(es):
  * harden_atop-rotate.service.patch
  * harden_atop.service.patch
  * harden_atopacct.service.patch
  * harden_atopgpu.service.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1641556800">- Update to 2.7.0:
  * Describe (un)restricted view in first screen
  * Cosmetic change
  * Determine (un)restricted view by verifying suid instead of euid.
  * Do not ignore unknown network interface
  * Parseable output: optionally exchange spaces in command
  * No setuid by default
  * Correct conversion to 2.7 raw files
  * Corrected type
  * Only show per-node NUMA stats when more than 1 node
  * Prepare man pages for version 2.7
  * Prepare atopconvert for version 2.7
  * Detect logrotation for process accounting with psacct/acct
  * Speed and duplex mode not correctly filled for interface
  * Bug solution related to discards
  * Support discard counter for disks and skip unused disks
  * ifprop.c: fix ioctl parameter after handshaking with kernel
  * Show gigabits/sec instead of megabits/sec for Infiniband #131
  * CVE: use execvp with a specified path to avoid PATH hijacking
  * Correct memory busy logic in atopsar
  * Add parseable output for per-node NUMA counters
  * Additions to NUMA counters Table overflow checks
  * Gather and show per numa cpu related statistics
  * Gather and show per numa memory related statistics
  * Correction in handling of zswap and ksm counters
  * Support containers created by podman
  * Cleanup old messages
  * Do not change owner to root in Makefile (#76)
  * Support process accounting log /var/log/account/pacct (#138)
  * Polish do_perfevents when atop built with NOPERFEVENT
  * Do not use doconvert funtion to validate counter (#160)
  * New counter for number of NUMA pages migrated
  * Modify field order and priority of paging counters
  * Small text modification for migrated counter
  * Avoid non-initialized prestat by introducing extra pointer
  * Function 'calcdiff' (deviate.c) used uninitialized prestat struct
  * Reserver space for future counters.
  * Clean up ignored files
  * Variable number of positions for sortitem
  * Adapt man page of atop for state selection (add state 'I').
  * Allow thread state 'I' with state selection (key 'Q')
  * Count idle threads as non-interruptible threads
  * Uninitialized index might cause segmentation fault.
  * Support NVMe multipath disk statistics
  * Support page migration counter
  * photosyst.c: fix build on musl
  * Use of struct ethtool_link_settings should be conditional
  * Cosmetic change (source code layout)
  * Various bug fixes and in general add 'thread' to all messages
  * Properly define if interface is virtual or physical
  * Add license info to various include files (solves issue #144)
  * HTTP statistics modified from -h flag to -o flag (#152)
  * Possible buffer overflow with huge number of seconds Number
    of seconds will be limited to 5 positions.
  * Possible buffer overflow with average disk I/O
  * Allow process selection based on specific process states.
  * Correct definition of environment variable LOGOPTS
  * Switch to using curses vw_printw as vwprintw is deprecated
  * Support multiple counters 'allocstall_' in /proc/vmstat.
  * Avoid integer overflow when calculating PSI percentages.
  * Suppress irrelevant counters (solves issue #148)
  * Add the number of OOM kills to the -s report
  * Record the number of process stalls to run memory compaction
  * Make clean removes atopsar now (issue 145)
  * Add counter for the number of OOM kills to the PAG line
  * Add counters for zswap and KSM.
  * ifprop.c: fix build with kernel &lt; 4.6
  * Fix initifprop() when obtaining properties of all interfaces
  * Fixed rounding problems in the average-per-second mode.
- Refresh atop-makefile.patch
- Refresh harden_atop.service.patch
- Call make install instead of make systemdinstall
  Default is systemd now</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1646049600">- Update to 2.7.1:
  * Correct disk stats in atopsar (#182)
  * Explicit type definition in atop.service (#180)</changelog>
</package>
<package pkgid="e6438e955dffe0f96c6c0319b8d93fbe1c3a10ea6c0127d53d541fe38d9c384e" name="atop" arch="ppc64le">
  <version epoch="0" ver="2.7.1" rel="bp154.2.3.1"/>
  <changelog author="pascal.bleser@opensuse.org" date="1413633600">- update to 2.1:
  * OpenVZ support: virtual environment identifier per process (envID)
  * Bug solution: when the screen-width is larger than the total number of
    columns to be printed, empty columns are added, however one column too many
  * Removed useless empty column for memory statistics
  * Introduce the 'G' key to suppress showing/accumulating exited processes
    in the output
  * Support CPU frequencies for systems with Intel P-state driver
  * Introduction of new daemon atopacctd. This daemon switches on process
    accounting and transfers every accounting record to an accounting shadow
    file. The source accounting file will regularly be truncated, while the
    shadow files are written with a limited size in a queued way. Non-used
    shadow files are deleted regularly.
  * Bug-solution: segmentation fault when one of the process names in the
    system contains a newline
  * Introduce configurable colors: in the atoprc file, colors can be defined
    for information messages (default green), threads (default yellow), almost
    critical resources (default cyan) and critical resources (default red).
  * Limit the names of network interfaces to six characters max
  * Introduction of proportional memory size (PSIZE) per process. For the
    resident memory parts used by a process that are shared with other
    processes, only a proportional part (shared memory part divided by the
    number of sharers) is accounted to the process. Since the gathering of this
    value is rather time-consuming (reading the smaps file of every process),
    it is optional ('R' key or '-R' flag).
  * Increased number of LVMs and disks supported
  * Support for huge pages (total and in use).</changelog>
  <changelog author="coolo@suse.com" date="1479816000">- update to 2.2:
  * Modifications for atop:
    a. New keys for process selection:
    '/' to select processes containing a particular search string in the command line arguments.
    'I' to select processes running with particular PIDs.
    b. New counters for NFS activity:
    On system level, counters are maintained about NFS traffic. Three new labels are introduced for this purpose:
    'NFS' for NFS server statistics (overall).
    'NFC' for NFS client statistics (overall).
    'NFM' for NFS client statistics per mounted NFS filesystem (so multiple lines possible).
    c. New counters for OpenVZ containers:
    CPU consumption and memory occupation are shown per container on system level (label 'CON').
    Container ID and virtual PID are shown on process level (when using key 'v' or 's').
    d. Bug fixes:
    The maximum transfer rate larger than 1 Gbit for ethernet interfaces is now correctly shown.
    The maximum transfer rate for wifi connections is now shown.
    For interfaces in general, the maximum transfer rate is shown as a separate column ('sp').
    Counters about virtual disk type 'xvd[a-z]' are shown.
    Several minor bugs have been solved.
  * Modifications for atopacct:
    a. Avoid that process accounting is reactivated too frequently (and unnecessary).
  * Modifications for atopsar:
    a. Add flags for NFS traffic ('-n' for NFS mounts, '-j' for overall NFS
    client activity and '-J' for overall NFS server activity).
  * General:
    a. Support for systemd-based distributions has been added.
    b. The format of the raw file is incompatible with earlier versions. However,
    the earlier version of atop is automatically activated when accessing an
    older raw file.
- cleanup spec file - remove support for &lt; 12.1</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1528632000">- Update to 2.3:
  * Modifications for atop:
    + Support for Docker containers.
    + Improved gathering of process data.
    + Improved memory figures for processes.
    + Variable width for PID column.
    + Better handling when started via sudo (not entering stopped
    + state).
    + Handling of disk drives starting with 'xvd...'.
  * Modifications for atopacct:
    + Better error handling of Netlink interface.
    + Immediate reaction when receiving SIGTERM signal.
    + Bypass for kernel bug 190711 (Netlink interface not
    available).
    + Bypass for kernel bug 190271 (process accounting does not
    always start).
  * Modifications for atopsar:
    + Top-3 of resource consuming processes only shows active
    processes now.
  * General:
    + The format of the raw file is upward compatible with version
    2.2-3.
- Clean with spec-cleaner.</changelog>
  <changelog author="rbrown@suse.com" date="1529928000">- Correct copyright attribution</changelog>
  <changelog author="Matthias Eliasson &lt;matthias.eliasson@gmail.com&gt;" date="1550404800">- Update to 2.4.0
  * Modifications for atop:
    + Support for Nvidia GPU statistics:
    A separate daemon atopgpud has been developed to maintain statistics of
  Nvidia GPUs in the system. When this daemon is running, atop will
  connect to this daemon and will get/show the GPU statistics with every
  interval on system level and process level (key 'e').
    The atopgpud daemon will only be active when it is explicitly enabled
  (see man pages for more info).
    + Support for Infiniband statistics:
    Counters showing the bandwidth utilization of Infiniband ports
  (system level) are added.
    + Support for Pressure Stall Information (PSI):
    The average pressure percentages of CPU, memory and I/O are reported
  for the last 10, 60 and 300 seconds. These percentage are provided from
  kernel 4.20 onwards.
    + Faster startup of atop:
    The allocation strategy for processes and threads has been improved,
  which will specifically be noticable on larger systems with lots of
  multi-threaded processes.
    + Configurable options for atop running in the background:
    Default options of script atop.daily can be overruled by
  /etc/default/atop file.
    + CPU Instructions Per Cycle (IPC):
    For every CPU, the average number of instructions per CPU cycle is
  shown as 'ipc'. Besides, a column is shown with the number of cycles
  executed per second as `cycl` (shown as effective Hz frequency).
    + Various fixes:
    Various NFS counters corrected.
    Recognition of nvme and nbd disks.
    Recognition of DEADLINE scheduling policy.
    Proper handling of memory locking (improper handling caused malloc
  failures in previous versions).
  * New program atopconvert:
    + This program can be used to convert the layout of older raw files to
  newer raw files. Raw files from atop 2.0 onwards can be converted to
  the newest version (now: 2.4).
  * Modifications for atopsar:
    + Reports can be printed now about the utilization of GPUs and Infiniband,
  and about the PSI percentages.
  * General:
    + The format of the raw file is incompatible with earlier versions.
  However, old raw files can be converted now by the program atopconvert
  to be read or extended by newer atop versions.
- Clean with spec-cleaner
- Refresh atop-makefile.patch</changelog>
  <changelog author="kukuk@suse.de" date="1566302400">- Package /etc/cron.d, as this is now part of cron which we don't
  want to require</changelog>
  <changelog author="Matthias Eliasson &lt;elimat@opensuse.org&gt;" date="1596196800">- Update to version 2.5.0
  Modifications for atop:
  * Avoid using perf counters in VM
    New option 'perfevents' in the atoprc file to define if the Instructions
  Per Cycle (IPC) should be retrieved via the 'perf' counters. Specify
  value 'auto' (default), 'enable' or 'disable'. In case of 'auto', the
  Instructions Per Cycle counter will not be retrieved on VMs due to the
  overhead of reading this counter in a guest.
  * Improve daily rotation of logfile for systemd-based systems.
    Exchange the files /etc/cron.d/atop, /etc/logrotate.d/psaccs_atop,
  /etc/logrotate.d/psaccu_atop, /usr/share/atop/atop.daily,
  /var/log/atop/dummy_after and /var/log/atop/dummy_before by
  atop-rotate.service and atop-rotate.timer.
  * Bug fixes:
    Correction of PSI value 'io full'.
    Use smaps_rollup (if present) instead of smaps for better performance.
    Use writev instead of 3 single writes to avoid logfile corruption.
    Modified handling of error messages (remain visible after window is
  closed).
    Correct CID for containers created by Kubernetes.
    Allow reading a logfile via a named pipe (non-seekable).
  Modifications for atopconvert:
  * Show version of input file (even if only one parameter specified).
  General:
  * The format of the raw file is compatible with version 2.4.
- Run spec-cleaner
- Remove requires for cron and logrotate now that there is systemd service
  and timers handling logrotation
- Remove Requires(post) for permissions since atop does not use cron files anymore
- Refresh patch:
  * atop-makefile.patch
- Add atop defaults in /etc/default/atop</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1618315200">- Update to version 2.6.0
  * Sort threads within process.
  * Individual threads within a process (key 'y') are shown in the
    order of their TID. With the additional key 'Y' threads within
    a process are sorted based on the current sort criterium.
  * Show the WCHAN per thread.
  * With the key 'W' is active, the wait channel is determined per
    thread and shown with the scheduling information (key 's').
  * Show runqueue delay per thread/process.
  * For every process (cumulated) and every thread the time spent
    waiting on the runqueue is shown as value 'RDELAY'.
  * Show other modified/new metrics:
    + PSI pressure during interval time is shown
    + Counter 'avio' (average I/O time) for fast disks in
    microseconds or nanoseconds
    + Counter 'zfarc' showing the current size of the ARC (cache)
    for ZFSonlinux
    + Counter 'swcac' showing the current size of the swap cache
    + Counter LOCKSZ showing the virtual locked memory size
  * Avoid crash with very high load average values.
  * Fix errors in reading InfiniBand states.
  * Support of rawlog files spanning multiple days.
  * The time specification to define the begin time (-b flag)
    and end time (-e flag) of both atop and atopsar is
    [YYYYMMDD]hhmm now
  * This also applies to the branch key ('b') when using atop
    interactively.
  * Support reading rawlog from a pipe.
  * Rawlog data can be read from a pipe by atop and atopsar with
    the option '-r -'. In this way, concatenated rawlog data from
    the command atopcat can be directly processed.
  * New program atopcat, the program atopcat concatenates rawlog
    files and writes this data to stdout. The output can be
    redirected to a new rawlog file or to atop/atopsar directly
    via a pipe (see option '-r -' of these commands).
    In this way e.g. weekly or monthly reports or extractions
    can be created.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1628683200">- Added hardening to systemd service(s). Added patch(es):
  * harden_atop-rotate.service.patch
  * harden_atop.service.patch
  * harden_atopacct.service.patch
  * harden_atopgpu.service.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1641556800">- Update to 2.7.0:
  * Describe (un)restricted view in first screen
  * Cosmetic change
  * Determine (un)restricted view by verifying suid instead of euid.
  * Do not ignore unknown network interface
  * Parseable output: optionally exchange spaces in command
  * No setuid by default
  * Correct conversion to 2.7 raw files
  * Corrected type
  * Only show per-node NUMA stats when more than 1 node
  * Prepare man pages for version 2.7
  * Prepare atopconvert for version 2.7
  * Detect logrotation for process accounting with psacct/acct
  * Speed and duplex mode not correctly filled for interface
  * Bug solution related to discards
  * Support discard counter for disks and skip unused disks
  * ifprop.c: fix ioctl parameter after handshaking with kernel
  * Show gigabits/sec instead of megabits/sec for Infiniband #131
  * CVE: use execvp with a specified path to avoid PATH hijacking
  * Correct memory busy logic in atopsar
  * Add parseable output for per-node NUMA counters
  * Additions to NUMA counters Table overflow checks
  * Gather and show per numa cpu related statistics
  * Gather and show per numa memory related statistics
  * Correction in handling of zswap and ksm counters
  * Support containers created by podman
  * Cleanup old messages
  * Do not change owner to root in Makefile (#76)
  * Support process accounting log /var/log/account/pacct (#138)
  * Polish do_perfevents when atop built with NOPERFEVENT
  * Do not use doconvert funtion to validate counter (#160)
  * New counter for number of NUMA pages migrated
  * Modify field order and priority of paging counters
  * Small text modification for migrated counter
  * Avoid non-initialized prestat by introducing extra pointer
  * Function 'calcdiff' (deviate.c) used uninitialized prestat struct
  * Reserver space for future counters.
  * Clean up ignored files
  * Variable number of positions for sortitem
  * Adapt man page of atop for state selection (add state 'I').
  * Allow thread state 'I' with state selection (key 'Q')
  * Count idle threads as non-interruptible threads
  * Uninitialized index might cause segmentation fault.
  * Support NVMe multipath disk statistics
  * Support page migration counter
  * photosyst.c: fix build on musl
  * Use of struct ethtool_link_settings should be conditional
  * Cosmetic change (source code layout)
  * Various bug fixes and in general add 'thread' to all messages
  * Properly define if interface is virtual or physical
  * Add license info to various include files (solves issue #144)
  * HTTP statistics modified from -h flag to -o flag (#152)
  * Possible buffer overflow with huge number of seconds Number
    of seconds will be limited to 5 positions.
  * Possible buffer overflow with average disk I/O
  * Allow process selection based on specific process states.
  * Correct definition of environment variable LOGOPTS
  * Switch to using curses vw_printw as vwprintw is deprecated
  * Support multiple counters 'allocstall_' in /proc/vmstat.
  * Avoid integer overflow when calculating PSI percentages.
  * Suppress irrelevant counters (solves issue #148)
  * Add the number of OOM kills to the -s report
  * Record the number of process stalls to run memory compaction
  * Make clean removes atopsar now (issue 145)
  * Add counter for the number of OOM kills to the PAG line
  * Add counters for zswap and KSM.
  * ifprop.c: fix build with kernel &lt; 4.6
  * Fix initifprop() when obtaining properties of all interfaces
  * Fixed rounding problems in the average-per-second mode.
- Refresh atop-makefile.patch
- Refresh harden_atop.service.patch
- Call make install instead of make systemdinstall
  Default is systemd now</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1646049600">- Update to 2.7.1:
  * Correct disk stats in atopsar (#182)
  * Explicit type definition in atop.service (#180)</changelog>
</package>
<package pkgid="00ccfd996b1acd5826596faa7cfa16af3816a195d2320134694f5079d371c024" name="atop" arch="s390x">
  <version epoch="0" ver="2.7.1" rel="bp154.2.3.1"/>
  <changelog author="pascal.bleser@opensuse.org" date="1413633600">- update to 2.1:
  * OpenVZ support: virtual environment identifier per process (envID)
  * Bug solution: when the screen-width is larger than the total number of
    columns to be printed, empty columns are added, however one column too many
  * Removed useless empty column for memory statistics
  * Introduce the 'G' key to suppress showing/accumulating exited processes
    in the output
  * Support CPU frequencies for systems with Intel P-state driver
  * Introduction of new daemon atopacctd. This daemon switches on process
    accounting and transfers every accounting record to an accounting shadow
    file. The source accounting file will regularly be truncated, while the
    shadow files are written with a limited size in a queued way. Non-used
    shadow files are deleted regularly.
  * Bug-solution: segmentation fault when one of the process names in the
    system contains a newline
  * Introduce configurable colors: in the atoprc file, colors can be defined
    for information messages (default green), threads (default yellow), almost
    critical resources (default cyan) and critical resources (default red).
  * Limit the names of network interfaces to six characters max
  * Introduction of proportional memory size (PSIZE) per process. For the
    resident memory parts used by a process that are shared with other
    processes, only a proportional part (shared memory part divided by the
    number of sharers) is accounted to the process. Since the gathering of this
    value is rather time-consuming (reading the smaps file of every process),
    it is optional ('R' key or '-R' flag).
  * Increased number of LVMs and disks supported
  * Support for huge pages (total and in use).</changelog>
  <changelog author="coolo@suse.com" date="1479816000">- update to 2.2:
  * Modifications for atop:
    a. New keys for process selection:
    '/' to select processes containing a particular search string in the command line arguments.
    'I' to select processes running with particular PIDs.
    b. New counters for NFS activity:
    On system level, counters are maintained about NFS traffic. Three new labels are introduced for this purpose:
    'NFS' for NFS server statistics (overall).
    'NFC' for NFS client statistics (overall).
    'NFM' for NFS client statistics per mounted NFS filesystem (so multiple lines possible).
    c. New counters for OpenVZ containers:
    CPU consumption and memory occupation are shown per container on system level (label 'CON').
    Container ID and virtual PID are shown on process level (when using key 'v' or 's').
    d. Bug fixes:
    The maximum transfer rate larger than 1 Gbit for ethernet interfaces is now correctly shown.
    The maximum transfer rate for wifi connections is now shown.
    For interfaces in general, the maximum transfer rate is shown as a separate column ('sp').
    Counters about virtual disk type 'xvd[a-z]' are shown.
    Several minor bugs have been solved.
  * Modifications for atopacct:
    a. Avoid that process accounting is reactivated too frequently (and unnecessary).
  * Modifications for atopsar:
    a. Add flags for NFS traffic ('-n' for NFS mounts, '-j' for overall NFS
    client activity and '-J' for overall NFS server activity).
  * General:
    a. Support for systemd-based distributions has been added.
    b. The format of the raw file is incompatible with earlier versions. However,
    the earlier version of atop is automatically activated when accessing an
    older raw file.
- cleanup spec file - remove support for &lt; 12.1</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1528632000">- Update to 2.3:
  * Modifications for atop:
    + Support for Docker containers.
    + Improved gathering of process data.
    + Improved memory figures for processes.
    + Variable width for PID column.
    + Better handling when started via sudo (not entering stopped
    + state).
    + Handling of disk drives starting with 'xvd...'.
  * Modifications for atopacct:
    + Better error handling of Netlink interface.
    + Immediate reaction when receiving SIGTERM signal.
    + Bypass for kernel bug 190711 (Netlink interface not
    available).
    + Bypass for kernel bug 190271 (process accounting does not
    always start).
  * Modifications for atopsar:
    + Top-3 of resource consuming processes only shows active
    processes now.
  * General:
    + The format of the raw file is upward compatible with version
    2.2-3.
- Clean with spec-cleaner.</changelog>
  <changelog author="rbrown@suse.com" date="1529928000">- Correct copyright attribution</changelog>
  <changelog author="Matthias Eliasson &lt;matthias.eliasson@gmail.com&gt;" date="1550404800">- Update to 2.4.0
  * Modifications for atop:
    + Support for Nvidia GPU statistics:
    A separate daemon atopgpud has been developed to maintain statistics of
  Nvidia GPUs in the system. When this daemon is running, atop will
  connect to this daemon and will get/show the GPU statistics with every
  interval on system level and process level (key 'e').
    The atopgpud daemon will only be active when it is explicitly enabled
  (see man pages for more info).
    + Support for Infiniband statistics:
    Counters showing the bandwidth utilization of Infiniband ports
  (system level) are added.
    + Support for Pressure Stall Information (PSI):
    The average pressure percentages of CPU, memory and I/O are reported
  for the last 10, 60 and 300 seconds. These percentage are provided from
  kernel 4.20 onwards.
    + Faster startup of atop:
    The allocation strategy for processes and threads has been improved,
  which will specifically be noticable on larger systems with lots of
  multi-threaded processes.
    + Configurable options for atop running in the background:
    Default options of script atop.daily can be overruled by
  /etc/default/atop file.
    + CPU Instructions Per Cycle (IPC):
    For every CPU, the average number of instructions per CPU cycle is
  shown as 'ipc'. Besides, a column is shown with the number of cycles
  executed per second as `cycl` (shown as effective Hz frequency).
    + Various fixes:
    Various NFS counters corrected.
    Recognition of nvme and nbd disks.
    Recognition of DEADLINE scheduling policy.
    Proper handling of memory locking (improper handling caused malloc
  failures in previous versions).
  * New program atopconvert:
    + This program can be used to convert the layout of older raw files to
  newer raw files. Raw files from atop 2.0 onwards can be converted to
  the newest version (now: 2.4).
  * Modifications for atopsar:
    + Reports can be printed now about the utilization of GPUs and Infiniband,
  and about the PSI percentages.
  * General:
    + The format of the raw file is incompatible with earlier versions.
  However, old raw files can be converted now by the program atopconvert
  to be read or extended by newer atop versions.
- Clean with spec-cleaner
- Refresh atop-makefile.patch</changelog>
  <changelog author="kukuk@suse.de" date="1566302400">- Package /etc/cron.d, as this is now part of cron which we don't
  want to require</changelog>
  <changelog author="Matthias Eliasson &lt;elimat@opensuse.org&gt;" date="1596196800">- Update to version 2.5.0
  Modifications for atop:
  * Avoid using perf counters in VM
    New option 'perfevents' in the atoprc file to define if the Instructions
  Per Cycle (IPC) should be retrieved via the 'perf' counters. Specify
  value 'auto' (default), 'enable' or 'disable'. In case of 'auto', the
  Instructions Per Cycle counter will not be retrieved on VMs due to the
  overhead of reading this counter in a guest.
  * Improve daily rotation of logfile for systemd-based systems.
    Exchange the files /etc/cron.d/atop, /etc/logrotate.d/psaccs_atop,
  /etc/logrotate.d/psaccu_atop, /usr/share/atop/atop.daily,
  /var/log/atop/dummy_after and /var/log/atop/dummy_before by
  atop-rotate.service and atop-rotate.timer.
  * Bug fixes:
    Correction of PSI value 'io full'.
    Use smaps_rollup (if present) instead of smaps for better performance.
    Use writev instead of 3 single writes to avoid logfile corruption.
    Modified handling of error messages (remain visible after window is
  closed).
    Correct CID for containers created by Kubernetes.
    Allow reading a logfile via a named pipe (non-seekable).
  Modifications for atopconvert:
  * Show version of input file (even if only one parameter specified).
  General:
  * The format of the raw file is compatible with version 2.4.
- Run spec-cleaner
- Remove requires for cron and logrotate now that there is systemd service
  and timers handling logrotation
- Remove Requires(post) for permissions since atop does not use cron files anymore
- Refresh patch:
  * atop-makefile.patch
- Add atop defaults in /etc/default/atop</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1618315200">- Update to version 2.6.0
  * Sort threads within process.
  * Individual threads within a process (key 'y') are shown in the
    order of their TID. With the additional key 'Y' threads within
    a process are sorted based on the current sort criterium.
  * Show the WCHAN per thread.
  * With the key 'W' is active, the wait channel is determined per
    thread and shown with the scheduling information (key 's').
  * Show runqueue delay per thread/process.
  * For every process (cumulated) and every thread the time spent
    waiting on the runqueue is shown as value 'RDELAY'.
  * Show other modified/new metrics:
    + PSI pressure during interval time is shown
    + Counter 'avio' (average I/O time) for fast disks in
    microseconds or nanoseconds
    + Counter 'zfarc' showing the current size of the ARC (cache)
    for ZFSonlinux
    + Counter 'swcac' showing the current size of the swap cache
    + Counter LOCKSZ showing the virtual locked memory size
  * Avoid crash with very high load average values.
  * Fix errors in reading InfiniBand states.
  * Support of rawlog files spanning multiple days.
  * The time specification to define the begin time (-b flag)
    and end time (-e flag) of both atop and atopsar is
    [YYYYMMDD]hhmm now
  * This also applies to the branch key ('b') when using atop
    interactively.
  * Support reading rawlog from a pipe.
  * Rawlog data can be read from a pipe by atop and atopsar with
    the option '-r -'. In this way, concatenated rawlog data from
    the command atopcat can be directly processed.
  * New program atopcat, the program atopcat concatenates rawlog
    files and writes this data to stdout. The output can be
    redirected to a new rawlog file or to atop/atopsar directly
    via a pipe (see option '-r -' of these commands).
    In this way e.g. weekly or monthly reports or extractions
    can be created.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1628683200">- Added hardening to systemd service(s). Added patch(es):
  * harden_atop-rotate.service.patch
  * harden_atop.service.patch
  * harden_atopacct.service.patch
  * harden_atopgpu.service.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1641556800">- Update to 2.7.0:
  * Describe (un)restricted view in first screen
  * Cosmetic change
  * Determine (un)restricted view by verifying suid instead of euid.
  * Do not ignore unknown network interface
  * Parseable output: optionally exchange spaces in command
  * No setuid by default
  * Correct conversion to 2.7 raw files
  * Corrected type
  * Only show per-node NUMA stats when more than 1 node
  * Prepare man pages for version 2.7
  * Prepare atopconvert for version 2.7
  * Detect logrotation for process accounting with psacct/acct
  * Speed and duplex mode not correctly filled for interface
  * Bug solution related to discards
  * Support discard counter for disks and skip unused disks
  * ifprop.c: fix ioctl parameter after handshaking with kernel
  * Show gigabits/sec instead of megabits/sec for Infiniband #131
  * CVE: use execvp with a specified path to avoid PATH hijacking
  * Correct memory busy logic in atopsar
  * Add parseable output for per-node NUMA counters
  * Additions to NUMA counters Table overflow checks
  * Gather and show per numa cpu related statistics
  * Gather and show per numa memory related statistics
  * Correction in handling of zswap and ksm counters
  * Support containers created by podman
  * Cleanup old messages
  * Do not change owner to root in Makefile (#76)
  * Support process accounting log /var/log/account/pacct (#138)
  * Polish do_perfevents when atop built with NOPERFEVENT
  * Do not use doconvert funtion to validate counter (#160)
  * New counter for number of NUMA pages migrated
  * Modify field order and priority of paging counters
  * Small text modification for migrated counter
  * Avoid non-initialized prestat by introducing extra pointer
  * Function 'calcdiff' (deviate.c) used uninitialized prestat struct
  * Reserver space for future counters.
  * Clean up ignored files
  * Variable number of positions for sortitem
  * Adapt man page of atop for state selection (add state 'I').
  * Allow thread state 'I' with state selection (key 'Q')
  * Count idle threads as non-interruptible threads
  * Uninitialized index might cause segmentation fault.
  * Support NVMe multipath disk statistics
  * Support page migration counter
  * photosyst.c: fix build on musl
  * Use of struct ethtool_link_settings should be conditional
  * Cosmetic change (source code layout)
  * Various bug fixes and in general add 'thread' to all messages
  * Properly define if interface is virtual or physical
  * Add license info to various include files (solves issue #144)
  * HTTP statistics modified from -h flag to -o flag (#152)
  * Possible buffer overflow with huge number of seconds Number
    of seconds will be limited to 5 positions.
  * Possible buffer overflow with average disk I/O
  * Allow process selection based on specific process states.
  * Correct definition of environment variable LOGOPTS
  * Switch to using curses vw_printw as vwprintw is deprecated
  * Support multiple counters 'allocstall_' in /proc/vmstat.
  * Avoid integer overflow when calculating PSI percentages.
  * Suppress irrelevant counters (solves issue #148)
  * Add the number of OOM kills to the -s report
  * Record the number of process stalls to run memory compaction
  * Make clean removes atopsar now (issue 145)
  * Add counter for the number of OOM kills to the PAG line
  * Add counters for zswap and KSM.
  * ifprop.c: fix build with kernel &lt; 4.6
  * Fix initifprop() when obtaining properties of all interfaces
  * Fixed rounding problems in the average-per-second mode.
- Refresh atop-makefile.patch
- Refresh harden_atop.service.patch
- Call make install instead of make systemdinstall
  Default is systemd now</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1646049600">- Update to 2.7.1:
  * Correct disk stats in atopsar (#182)
  * Explicit type definition in atop.service (#180)</changelog>
</package>
<package pkgid="eec218d2d3eda37e16130e344d842fff854f70c7da8879de82ed725af9982835" name="atop" arch="src">
  <version epoch="0" ver="2.7.1" rel="bp154.2.3.1"/>
  <changelog author="guru@unixtech.be" date="1187611200">- update to 1.21</changelog>
  <changelog author="guru@unixtech.be" date="1195646400">- update to 1.22</changelog>
  <changelog author="guru@unixtech.be" date="1204804800">- update to 1.23</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1264507200">- update to 1.24:
  * the screen interface has been redesigned completely with
    support for a variable number of columns depending on the
    window size
  * it is now possible to define your own output line with
    process-level statistics
  * a system-wide configuration file was introduced for atop and
    atopsar
  * handling of log files was improved and additional counters are
    maintained</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1272888000">- update to 1.25:
  * disk I/O statistics are maintained on level of logical volume
    (LVM) and MD device
  * log files are properly switched in case of suspend/hibernate
  * layout of lines with system-level statistics can be redefined
  * previous atop versions are automatically activated for older
    log files</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1300190400">- update to 1.26:
  * an additional value is shown for the current frequency and the current
    scaling percentage of the CPU
  * additional system-level counters are shown for the total number of threads
    that are running, sleeping interruptible, and sleeping uninterruptible
  * when the number of lines in a window is too small for the amount of
    system-level lines, the number of variable resources (like disks,
    interfaces, etc.) is limited automatically to be able to continue
  * the signal SIGUSR2 can be sent to atop to take one more sample and
    terminate (e.g. used to speed up suspend/hibernate)
  * support for the disk type 'mmcblk'</changelog>
  <changelog author="graham@andtech.eu" date="1326110400">- change License: and %if statement in .spec</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1326110401">- remove licenses package mumbo-jumbo altogether
- use pristine upstream tarball instead of recompressing as bz2
- added Recommends for logrotate and cron in the -daemon subpackage</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1343304000">- update to 1.27-3:
  * service file for systemd
  * solved division-by-zero when maxfreq=0 and more precise coloring of
    concerning CPU-values when CPU overloaded
  * if setuid-root is set for atop, root-privileges are regained when reading
    /proc/pid/io (nowadays only readable for root) to obtain the disk stats per
    process
  * added EMC Power device recognition
  * better recognition of version of process accounting file
  * improved error handling when not enough columns or lines
  * suppress sorting of system resources by key F or flag -F (toggle)
  * create unique /tmp name for decompressed raw file
  * numerous cosmetic changes and man-page updates
  * improved screen handling
  * limited maximum file-size for process accounting file (200 MiB)
  * improved handling of process accounting
  * new key 'S' to make selections of system resources like logical volumes,
    disks and network interfaces (regular expression)
  * use of arrow-keys and PgUp/PgDown for vertical scroll
  * use of -&gt; and &lt;- keys for horizontal scroll of command line
  * support statistics for virtio disks (vd*)
  * fetching and displaying of individual threads
  * add various details about the memory usage of processes, like stack size,
    data size, shared library size and size used on swap
  * show new value about swap space usage per process
  * colors are shown now for separate system-level counters instead of for the
    entire line with counters
  * enhanced security: improved dropping of root privileges</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1413633600">- update to 2.1:
  * OpenVZ support: virtual environment identifier per process (envID)
  * Bug solution: when the screen-width is larger than the total number of
    columns to be printed, empty columns are added, however one column too many
  * Removed useless empty column for memory statistics
  * Introduce the 'G' key to suppress showing/accumulating exited processes
    in the output
  * Support CPU frequencies for systems with Intel P-state driver
  * Introduction of new daemon atopacctd. This daemon switches on process
    accounting and transfers every accounting record to an accounting shadow
    file. The source accounting file will regularly be truncated, while the
    shadow files are written with a limited size in a queued way. Non-used
    shadow files are deleted regularly.
  * Bug-solution: segmentation fault when one of the process names in the
    system contains a newline
  * Introduce configurable colors: in the atoprc file, colors can be defined
    for information messages (default green), threads (default yellow), almost
    critical resources (default cyan) and critical resources (default red).
  * Limit the names of network interfaces to six characters max
  * Introduction of proportional memory size (PSIZE) per process. For the
    resident memory parts used by a process that are shared with other
    processes, only a proportional part (shared memory part divided by the
    number of sharers) is accounted to the process. Since the gathering of this
    value is rather time-consuming (reading the smaps file of every process),
    it is optional ('R' key or '-R' flag).
  * Increased number of LVMs and disks supported
  * Support for huge pages (total and in use).</changelog>
  <changelog author="coolo@suse.com" date="1479816000">- update to 2.2:
  * Modifications for atop:
    a. New keys for process selection:
    '/' to select processes containing a particular search string in the command line arguments.
    'I' to select processes running with particular PIDs.
    b. New counters for NFS activity:
    On system level, counters are maintained about NFS traffic. Three new labels are introduced for this purpose:
    'NFS' for NFS server statistics (overall).
    'NFC' for NFS client statistics (overall).
    'NFM' for NFS client statistics per mounted NFS filesystem (so multiple lines possible).
    c. New counters for OpenVZ containers:
    CPU consumption and memory occupation are shown per container on system level (label 'CON').
    Container ID and virtual PID are shown on process level (when using key 'v' or 's').
    d. Bug fixes:
    The maximum transfer rate larger than 1 Gbit for ethernet interfaces is now correctly shown.
    The maximum transfer rate for wifi connections is now shown.
    For interfaces in general, the maximum transfer rate is shown as a separate column ('sp').
    Counters about virtual disk type 'xvd[a-z]' are shown.
    Several minor bugs have been solved.
  * Modifications for atopacct:
    a. Avoid that process accounting is reactivated too frequently (and unnecessary).
  * Modifications for atopsar:
    a. Add flags for NFS traffic ('-n' for NFS mounts, '-j' for overall NFS
    client activity and '-J' for overall NFS server activity).
  * General:
    a. Support for systemd-based distributions has been added.
    b. The format of the raw file is incompatible with earlier versions. However,
    the earlier version of atop is automatically activated when accessing an
    older raw file.
- cleanup spec file - remove support for &lt; 12.1</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1528632000">- Update to 2.3:
  * Modifications for atop:
    + Support for Docker containers.
    + Improved gathering of process data.
    + Improved memory figures for processes.
    + Variable width for PID column.
    + Better handling when started via sudo (not entering stopped
    + state).
    + Handling of disk drives starting with 'xvd...'.
  * Modifications for atopacct:
    + Better error handling of Netlink interface.
    + Immediate reaction when receiving SIGTERM signal.
    + Bypass for kernel bug 190711 (Netlink interface not
    available).
    + Bypass for kernel bug 190271 (process accounting does not
    always start).
  * Modifications for atopsar:
    + Top-3 of resource consuming processes only shows active
    processes now.
  * General:
    + The format of the raw file is upward compatible with version
    2.2-3.
- Clean with spec-cleaner.</changelog>
  <changelog author="rbrown@suse.com" date="1529928000">- Correct copyright attribution</changelog>
  <changelog author="Matthias Eliasson &lt;matthias.eliasson@gmail.com&gt;" date="1550404800">- Update to 2.4.0
  * Modifications for atop:
    + Support for Nvidia GPU statistics:
    A separate daemon atopgpud has been developed to maintain statistics of
  Nvidia GPUs in the system. When this daemon is running, atop will
  connect to this daemon and will get/show the GPU statistics with every
  interval on system level and process level (key 'e').
    The atopgpud daemon will only be active when it is explicitly enabled
  (see man pages for more info).
    + Support for Infiniband statistics:
    Counters showing the bandwidth utilization of Infiniband ports
  (system level) are added.
    + Support for Pressure Stall Information (PSI):
    The average pressure percentages of CPU, memory and I/O are reported
  for the last 10, 60 and 300 seconds. These percentage are provided from
  kernel 4.20 onwards.
    + Faster startup of atop:
    The allocation strategy for processes and threads has been improved,
  which will specifically be noticable on larger systems with lots of
  multi-threaded processes.
    + Configurable options for atop running in the background:
    Default options of script atop.daily can be overruled by
  /etc/default/atop file.
    + CPU Instructions Per Cycle (IPC):
    For every CPU, the average number of instructions per CPU cycle is
  shown as 'ipc'. Besides, a column is shown with the number of cycles
  executed per second as `cycl` (shown as effective Hz frequency).
    + Various fixes:
    Various NFS counters corrected.
    Recognition of nvme and nbd disks.
    Recognition of DEADLINE scheduling policy.
    Proper handling of memory locking (improper handling caused malloc
  failures in previous versions).
  * New program atopconvert:
    + This program can be used to convert the layout of older raw files to
  newer raw files. Raw files from atop 2.0 onwards can be converted to
  the newest version (now: 2.4).
  * Modifications for atopsar:
    + Reports can be printed now about the utilization of GPUs and Infiniband,
  and about the PSI percentages.
  * General:
    + The format of the raw file is incompatible with earlier versions.
  However, old raw files can be converted now by the program atopconvert
  to be read or extended by newer atop versions.
- Clean with spec-cleaner
- Refresh atop-makefile.patch</changelog>
  <changelog author="kukuk@suse.de" date="1566302400">- Package /etc/cron.d, as this is now part of cron which we don't
  want to require</changelog>
  <changelog author="Matthias Eliasson &lt;elimat@opensuse.org&gt;" date="1596196800">- Update to version 2.5.0
  Modifications for atop:
  * Avoid using perf counters in VM
    New option 'perfevents' in the atoprc file to define if the Instructions
  Per Cycle (IPC) should be retrieved via the 'perf' counters. Specify
  value 'auto' (default), 'enable' or 'disable'. In case of 'auto', the
  Instructions Per Cycle counter will not be retrieved on VMs due to the
  overhead of reading this counter in a guest.
  * Improve daily rotation of logfile for systemd-based systems.
    Exchange the files /etc/cron.d/atop, /etc/logrotate.d/psaccs_atop,
  /etc/logrotate.d/psaccu_atop, /usr/share/atop/atop.daily,
  /var/log/atop/dummy_after and /var/log/atop/dummy_before by
  atop-rotate.service and atop-rotate.timer.
  * Bug fixes:
    Correction of PSI value 'io full'.
    Use smaps_rollup (if present) instead of smaps for better performance.
    Use writev instead of 3 single writes to avoid logfile corruption.
    Modified handling of error messages (remain visible after window is
  closed).
    Correct CID for containers created by Kubernetes.
    Allow reading a logfile via a named pipe (non-seekable).
  Modifications for atopconvert:
  * Show version of input file (even if only one parameter specified).
  General:
  * The format of the raw file is compatible with version 2.4.
- Run spec-cleaner
- Remove requires for cron and logrotate now that there is systemd service
  and timers handling logrotation
- Remove Requires(post) for permissions since atop does not use cron files anymore
- Refresh patch:
  * atop-makefile.patch
- Add atop defaults in /etc/default/atop</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1618315200">- Update to version 2.6.0
  * Sort threads within process.
  * Individual threads within a process (key 'y') are shown in the
    order of their TID. With the additional key 'Y' threads within
    a process are sorted based on the current sort criterium.
  * Show the WCHAN per thread.
  * With the key 'W' is active, the wait channel is determined per
    thread and shown with the scheduling information (key 's').
  * Show runqueue delay per thread/process.
  * For every process (cumulated) and every thread the time spent
    waiting on the runqueue is shown as value 'RDELAY'.
  * Show other modified/new metrics:
    + PSI pressure during interval time is shown
    + Counter 'avio' (average I/O time) for fast disks in
    microseconds or nanoseconds
    + Counter 'zfarc' showing the current size of the ARC (cache)
    for ZFSonlinux
    + Counter 'swcac' showing the current size of the swap cache
    + Counter LOCKSZ showing the virtual locked memory size
  * Avoid crash with very high load average values.
  * Fix errors in reading InfiniBand states.
  * Support of rawlog files spanning multiple days.
  * The time specification to define the begin time (-b flag)
    and end time (-e flag) of both atop and atopsar is
    [YYYYMMDD]hhmm now
  * This also applies to the branch key ('b') when using atop
    interactively.
  * Support reading rawlog from a pipe.
  * Rawlog data can be read from a pipe by atop and atopsar with
    the option '-r -'. In this way, concatenated rawlog data from
    the command atopcat can be directly processed.
  * New program atopcat, the program atopcat concatenates rawlog
    files and writes this data to stdout. The output can be
    redirected to a new rawlog file or to atop/atopsar directly
    via a pipe (see option '-r -' of these commands).
    In this way e.g. weekly or monthly reports or extractions
    can be created.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1628683200">- Added hardening to systemd service(s). Added patch(es):
  * harden_atop-rotate.service.patch
  * harden_atop.service.patch
  * harden_atopacct.service.patch
  * harden_atopgpu.service.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1641556800">- Update to 2.7.0:
  * Describe (un)restricted view in first screen
  * Cosmetic change
  * Determine (un)restricted view by verifying suid instead of euid.
  * Do not ignore unknown network interface
  * Parseable output: optionally exchange spaces in command
  * No setuid by default
  * Correct conversion to 2.7 raw files
  * Corrected type
  * Only show per-node NUMA stats when more than 1 node
  * Prepare man pages for version 2.7
  * Prepare atopconvert for version 2.7
  * Detect logrotation for process accounting with psacct/acct
  * Speed and duplex mode not correctly filled for interface
  * Bug solution related to discards
  * Support discard counter for disks and skip unused disks
  * ifprop.c: fix ioctl parameter after handshaking with kernel
  * Show gigabits/sec instead of megabits/sec for Infiniband #131
  * CVE: use execvp with a specified path to avoid PATH hijacking
  * Correct memory busy logic in atopsar
  * Add parseable output for per-node NUMA counters
  * Additions to NUMA counters Table overflow checks
  * Gather and show per numa cpu related statistics
  * Gather and show per numa memory related statistics
  * Correction in handling of zswap and ksm counters
  * Support containers created by podman
  * Cleanup old messages
  * Do not change owner to root in Makefile (#76)
  * Support process accounting log /var/log/account/pacct (#138)
  * Polish do_perfevents when atop built with NOPERFEVENT
  * Do not use doconvert funtion to validate counter (#160)
  * New counter for number of NUMA pages migrated
  * Modify field order and priority of paging counters
  * Small text modification for migrated counter
  * Avoid non-initialized prestat by introducing extra pointer
  * Function 'calcdiff' (deviate.c) used uninitialized prestat struct
  * Reserver space for future counters.
  * Clean up ignored files
  * Variable number of positions for sortitem
  * Adapt man page of atop for state selection (add state 'I').
  * Allow thread state 'I' with state selection (key 'Q')
  * Count idle threads as non-interruptible threads
  * Uninitialized index might cause segmentation fault.
  * Support NVMe multipath disk statistics
  * Support page migration counter
  * photosyst.c: fix build on musl
  * Use of struct ethtool_link_settings should be conditional
  * Cosmetic change (source code layout)
  * Various bug fixes and in general add 'thread' to all messages
  * Properly define if interface is virtual or physical
  * Add license info to various include files (solves issue #144)
  * HTTP statistics modified from -h flag to -o flag (#152)
  * Possible buffer overflow with huge number of seconds Number
    of seconds will be limited to 5 positions.
  * Possible buffer overflow with average disk I/O
  * Allow process selection based on specific process states.
  * Correct definition of environment variable LOGOPTS
  * Switch to using curses vw_printw as vwprintw is deprecated
  * Support multiple counters 'allocstall_' in /proc/vmstat.
  * Avoid integer overflow when calculating PSI percentages.
  * Suppress irrelevant counters (solves issue #148)
  * Add the number of OOM kills to the -s report
  * Record the number of process stalls to run memory compaction
  * Make clean removes atopsar now (issue 145)
  * Add counter for the number of OOM kills to the PAG line
  * Add counters for zswap and KSM.
  * ifprop.c: fix build with kernel &lt; 4.6
  * Fix initifprop() when obtaining properties of all interfaces
  * Fixed rounding problems in the average-per-second mode.
- Refresh atop-makefile.patch
- Refresh harden_atop.service.patch
- Call make install instead of make systemdinstall
  Default is systemd now</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1646049600">- Update to 2.7.1:
  * Correct disk stats in atopsar (#182)
  * Explicit type definition in atop.service (#180)</changelog>
</package>
<package pkgid="671dfe0b858753a8e13fadb17842b20cf0f674a1526d56213a60290da38dd1a2" name="atop" arch="x86_64">
  <version epoch="0" ver="2.7.1" rel="bp154.2.3.1"/>
  <changelog author="pascal.bleser@opensuse.org" date="1413633600">- update to 2.1:
  * OpenVZ support: virtual environment identifier per process (envID)
  * Bug solution: when the screen-width is larger than the total number of
    columns to be printed, empty columns are added, however one column too many
  * Removed useless empty column for memory statistics
  * Introduce the 'G' key to suppress showing/accumulating exited processes
    in the output
  * Support CPU frequencies for systems with Intel P-state driver
  * Introduction of new daemon atopacctd. This daemon switches on process
    accounting and transfers every accounting record to an accounting shadow
    file. The source accounting file will regularly be truncated, while the
    shadow files are written with a limited size in a queued way. Non-used
    shadow files are deleted regularly.
  * Bug-solution: segmentation fault when one of the process names in the
    system contains a newline
  * Introduce configurable colors: in the atoprc file, colors can be defined
    for information messages (default green), threads (default yellow), almost
    critical resources (default cyan) and critical resources (default red).
  * Limit the names of network interfaces to six characters max
  * Introduction of proportional memory size (PSIZE) per process. For the
    resident memory parts used by a process that are shared with other
    processes, only a proportional part (shared memory part divided by the
    number of sharers) is accounted to the process. Since the gathering of this
    value is rather time-consuming (reading the smaps file of every process),
    it is optional ('R' key or '-R' flag).
  * Increased number of LVMs and disks supported
  * Support for huge pages (total and in use).</changelog>
  <changelog author="coolo@suse.com" date="1479816000">- update to 2.2:
  * Modifications for atop:
    a. New keys for process selection:
    '/' to select processes containing a particular search string in the command line arguments.
    'I' to select processes running with particular PIDs.
    b. New counters for NFS activity:
    On system level, counters are maintained about NFS traffic. Three new labels are introduced for this purpose:
    'NFS' for NFS server statistics (overall).
    'NFC' for NFS client statistics (overall).
    'NFM' for NFS client statistics per mounted NFS filesystem (so multiple lines possible).
    c. New counters for OpenVZ containers:
    CPU consumption and memory occupation are shown per container on system level (label 'CON').
    Container ID and virtual PID are shown on process level (when using key 'v' or 's').
    d. Bug fixes:
    The maximum transfer rate larger than 1 Gbit for ethernet interfaces is now correctly shown.
    The maximum transfer rate for wifi connections is now shown.
    For interfaces in general, the maximum transfer rate is shown as a separate column ('sp').
    Counters about virtual disk type 'xvd[a-z]' are shown.
    Several minor bugs have been solved.
  * Modifications for atopacct:
    a. Avoid that process accounting is reactivated too frequently (and unnecessary).
  * Modifications for atopsar:
    a. Add flags for NFS traffic ('-n' for NFS mounts, '-j' for overall NFS
    client activity and '-J' for overall NFS server activity).
  * General:
    a. Support for systemd-based distributions has been added.
    b. The format of the raw file is incompatible with earlier versions. However,
    the earlier version of atop is automatically activated when accessing an
    older raw file.
- cleanup spec file - remove support for &lt; 12.1</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1528632000">- Update to 2.3:
  * Modifications for atop:
    + Support for Docker containers.
    + Improved gathering of process data.
    + Improved memory figures for processes.
    + Variable width for PID column.
    + Better handling when started via sudo (not entering stopped
    + state).
    + Handling of disk drives starting with 'xvd...'.
  * Modifications for atopacct:
    + Better error handling of Netlink interface.
    + Immediate reaction when receiving SIGTERM signal.
    + Bypass for kernel bug 190711 (Netlink interface not
    available).
    + Bypass for kernel bug 190271 (process accounting does not
    always start).
  * Modifications for atopsar:
    + Top-3 of resource consuming processes only shows active
    processes now.
  * General:
    + The format of the raw file is upward compatible with version
    2.2-3.
- Clean with spec-cleaner.</changelog>
  <changelog author="rbrown@suse.com" date="1529928000">- Correct copyright attribution</changelog>
  <changelog author="Matthias Eliasson &lt;matthias.eliasson@gmail.com&gt;" date="1550404800">- Update to 2.4.0
  * Modifications for atop:
    + Support for Nvidia GPU statistics:
    A separate daemon atopgpud has been developed to maintain statistics of
  Nvidia GPUs in the system. When this daemon is running, atop will
  connect to this daemon and will get/show the GPU statistics with every
  interval on system level and process level (key 'e').
    The atopgpud daemon will only be active when it is explicitly enabled
  (see man pages for more info).
    + Support for Infiniband statistics:
    Counters showing the bandwidth utilization of Infiniband ports
  (system level) are added.
    + Support for Pressure Stall Information (PSI):
    The average pressure percentages of CPU, memory and I/O are reported
  for the last 10, 60 and 300 seconds. These percentage are provided from
  kernel 4.20 onwards.
    + Faster startup of atop:
    The allocation strategy for processes and threads has been improved,
  which will specifically be noticable on larger systems with lots of
  multi-threaded processes.
    + Configurable options for atop running in the background:
    Default options of script atop.daily can be overruled by
  /etc/default/atop file.
    + CPU Instructions Per Cycle (IPC):
    For every CPU, the average number of instructions per CPU cycle is
  shown as 'ipc'. Besides, a column is shown with the number of cycles
  executed per second as `cycl` (shown as effective Hz frequency).
    + Various fixes:
    Various NFS counters corrected.
    Recognition of nvme and nbd disks.
    Recognition of DEADLINE scheduling policy.
    Proper handling of memory locking (improper handling caused malloc
  failures in previous versions).
  * New program atopconvert:
    + This program can be used to convert the layout of older raw files to
  newer raw files. Raw files from atop 2.0 onwards can be converted to
  the newest version (now: 2.4).
  * Modifications for atopsar:
    + Reports can be printed now about the utilization of GPUs and Infiniband,
  and about the PSI percentages.
  * General:
    + The format of the raw file is incompatible with earlier versions.
  However, old raw files can be converted now by the program atopconvert
  to be read or extended by newer atop versions.
- Clean with spec-cleaner
- Refresh atop-makefile.patch</changelog>
  <changelog author="kukuk@suse.de" date="1566302400">- Package /etc/cron.d, as this is now part of cron which we don't
  want to require</changelog>
  <changelog author="Matthias Eliasson &lt;elimat@opensuse.org&gt;" date="1596196800">- Update to version 2.5.0
  Modifications for atop:
  * Avoid using perf counters in VM
    New option 'perfevents' in the atoprc file to define if the Instructions
  Per Cycle (IPC) should be retrieved via the 'perf' counters. Specify
  value 'auto' (default), 'enable' or 'disable'. In case of 'auto', the
  Instructions Per Cycle counter will not be retrieved on VMs due to the
  overhead of reading this counter in a guest.
  * Improve daily rotation of logfile for systemd-based systems.
    Exchange the files /etc/cron.d/atop, /etc/logrotate.d/psaccs_atop,
  /etc/logrotate.d/psaccu_atop, /usr/share/atop/atop.daily,
  /var/log/atop/dummy_after and /var/log/atop/dummy_before by
  atop-rotate.service and atop-rotate.timer.
  * Bug fixes:
    Correction of PSI value 'io full'.
    Use smaps_rollup (if present) instead of smaps for better performance.
    Use writev instead of 3 single writes to avoid logfile corruption.
    Modified handling of error messages (remain visible after window is
  closed).
    Correct CID for containers created by Kubernetes.
    Allow reading a logfile via a named pipe (non-seekable).
  Modifications for atopconvert:
  * Show version of input file (even if only one parameter specified).
  General:
  * The format of the raw file is compatible with version 2.4.
- Run spec-cleaner
- Remove requires for cron and logrotate now that there is systemd service
  and timers handling logrotation
- Remove Requires(post) for permissions since atop does not use cron files anymore
- Refresh patch:
  * atop-makefile.patch
- Add atop defaults in /etc/default/atop</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1618315200">- Update to version 2.6.0
  * Sort threads within process.
  * Individual threads within a process (key 'y') are shown in the
    order of their TID. With the additional key 'Y' threads within
    a process are sorted based on the current sort criterium.
  * Show the WCHAN per thread.
  * With the key 'W' is active, the wait channel is determined per
    thread and shown with the scheduling information (key 's').
  * Show runqueue delay per thread/process.
  * For every process (cumulated) and every thread the time spent
    waiting on the runqueue is shown as value 'RDELAY'.
  * Show other modified/new metrics:
    + PSI pressure during interval time is shown
    + Counter 'avio' (average I/O time) for fast disks in
    microseconds or nanoseconds
    + Counter 'zfarc' showing the current size of the ARC (cache)
    for ZFSonlinux
    + Counter 'swcac' showing the current size of the swap cache
    + Counter LOCKSZ showing the virtual locked memory size
  * Avoid crash with very high load average values.
  * Fix errors in reading InfiniBand states.
  * Support of rawlog files spanning multiple days.
  * The time specification to define the begin time (-b flag)
    and end time (-e flag) of both atop and atopsar is
    [YYYYMMDD]hhmm now
  * This also applies to the branch key ('b') when using atop
    interactively.
  * Support reading rawlog from a pipe.
  * Rawlog data can be read from a pipe by atop and atopsar with
    the option '-r -'. In this way, concatenated rawlog data from
    the command atopcat can be directly processed.
  * New program atopcat, the program atopcat concatenates rawlog
    files and writes this data to stdout. The output can be
    redirected to a new rawlog file or to atop/atopsar directly
    via a pipe (see option '-r -' of these commands).
    In this way e.g. weekly or monthly reports or extractions
    can be created.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1628683200">- Added hardening to systemd service(s). Added patch(es):
  * harden_atop-rotate.service.patch
  * harden_atop.service.patch
  * harden_atopacct.service.patch
  * harden_atopgpu.service.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1641556800">- Update to 2.7.0:
  * Describe (un)restricted view in first screen
  * Cosmetic change
  * Determine (un)restricted view by verifying suid instead of euid.
  * Do not ignore unknown network interface
  * Parseable output: optionally exchange spaces in command
  * No setuid by default
  * Correct conversion to 2.7 raw files
  * Corrected type
  * Only show per-node NUMA stats when more than 1 node
  * Prepare man pages for version 2.7
  * Prepare atopconvert for version 2.7
  * Detect logrotation for process accounting with psacct/acct
  * Speed and duplex mode not correctly filled for interface
  * Bug solution related to discards
  * Support discard counter for disks and skip unused disks
  * ifprop.c: fix ioctl parameter after handshaking with kernel
  * Show gigabits/sec instead of megabits/sec for Infiniband #131
  * CVE: use execvp with a specified path to avoid PATH hijacking
  * Correct memory busy logic in atopsar
  * Add parseable output for per-node NUMA counters
  * Additions to NUMA counters Table overflow checks
  * Gather and show per numa cpu related statistics
  * Gather and show per numa memory related statistics
  * Correction in handling of zswap and ksm counters
  * Support containers created by podman
  * Cleanup old messages
  * Do not change owner to root in Makefile (#76)
  * Support process accounting log /var/log/account/pacct (#138)
  * Polish do_perfevents when atop built with NOPERFEVENT
  * Do not use doconvert funtion to validate counter (#160)
  * New counter for number of NUMA pages migrated
  * Modify field order and priority of paging counters
  * Small text modification for migrated counter
  * Avoid non-initialized prestat by introducing extra pointer
  * Function 'calcdiff' (deviate.c) used uninitialized prestat struct
  * Reserver space for future counters.
  * Clean up ignored files
  * Variable number of positions for sortitem
  * Adapt man page of atop for state selection (add state 'I').
  * Allow thread state 'I' with state selection (key 'Q')
  * Count idle threads as non-interruptible threads
  * Uninitialized index might cause segmentation fault.
  * Support NVMe multipath disk statistics
  * Support page migration counter
  * photosyst.c: fix build on musl
  * Use of struct ethtool_link_settings should be conditional
  * Cosmetic change (source code layout)
  * Various bug fixes and in general add 'thread' to all messages
  * Properly define if interface is virtual or physical
  * Add license info to various include files (solves issue #144)
  * HTTP statistics modified from -h flag to -o flag (#152)
  * Possible buffer overflow with huge number of seconds Number
    of seconds will be limited to 5 positions.
  * Possible buffer overflow with average disk I/O
  * Allow process selection based on specific process states.
  * Correct definition of environment variable LOGOPTS
  * Switch to using curses vw_printw as vwprintw is deprecated
  * Support multiple counters 'allocstall_' in /proc/vmstat.
  * Avoid integer overflow when calculating PSI percentages.
  * Suppress irrelevant counters (solves issue #148)
  * Add the number of OOM kills to the -s report
  * Record the number of process stalls to run memory compaction
  * Make clean removes atopsar now (issue 145)
  * Add counter for the number of OOM kills to the PAG line
  * Add counters for zswap and KSM.
  * ifprop.c: fix build with kernel &lt; 4.6
  * Fix initifprop() when obtaining properties of all interfaces
  * Fixed rounding problems in the average-per-second mode.
- Refresh atop-makefile.patch
- Refresh harden_atop.service.patch
- Call make install instead of make systemdinstall
  Default is systemd now</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1646049600">- Update to 2.7.1:
  * Correct disk stats in atopsar (#182)
  * Explicit type definition in atop.service (#180)</changelog>
</package>
<package pkgid="f3b43f2132824018b78430afb99146d39f316878b5405b128365d5e00765a5ac" name="atop-daemon" arch="aarch64">
  <version epoch="0" ver="2.7.1" rel="bp154.2.3.1"/>
  <changelog author="pascal.bleser@opensuse.org" date="1413633600">- update to 2.1:
  * OpenVZ support: virtual environment identifier per process (envID)
  * Bug solution: when the screen-width is larger than the total number of
    columns to be printed, empty columns are added, however one column too many
  * Removed useless empty column for memory statistics
  * Introduce the 'G' key to suppress showing/accumulating exited processes
    in the output
  * Support CPU frequencies for systems with Intel P-state driver
  * Introduction of new daemon atopacctd. This daemon switches on process
    accounting and transfers every accounting record to an accounting shadow
    file. The source accounting file will regularly be truncated, while the
    shadow files are written with a limited size in a queued way. Non-used
    shadow files are deleted regularly.
  * Bug-solution: segmentation fault when one of the process names in the
    system contains a newline
  * Introduce configurable colors: in the atoprc file, colors can be defined
    for information messages (default green), threads (default yellow), almost
    critical resources (default cyan) and critical resources (default red).
  * Limit the names of network interfaces to six characters max
  * Introduction of proportional memory size (PSIZE) per process. For the
    resident memory parts used by a process that are shared with other
    processes, only a proportional part (shared memory part divided by the
    number of sharers) is accounted to the process. Since the gathering of this
    value is rather time-consuming (reading the smaps file of every process),
    it is optional ('R' key or '-R' flag).
  * Increased number of LVMs and disks supported
  * Support for huge pages (total and in use).</changelog>
  <changelog author="coolo@suse.com" date="1479816000">- update to 2.2:
  * Modifications for atop:
    a. New keys for process selection:
    '/' to select processes containing a particular search string in the command line arguments.
    'I' to select processes running with particular PIDs.
    b. New counters for NFS activity:
    On system level, counters are maintained about NFS traffic. Three new labels are introduced for this purpose:
    'NFS' for NFS server statistics (overall).
    'NFC' for NFS client statistics (overall).
    'NFM' for NFS client statistics per mounted NFS filesystem (so multiple lines possible).
    c. New counters for OpenVZ containers:
    CPU consumption and memory occupation are shown per container on system level (label 'CON').
    Container ID and virtual PID are shown on process level (when using key 'v' or 's').
    d. Bug fixes:
    The maximum transfer rate larger than 1 Gbit for ethernet interfaces is now correctly shown.
    The maximum transfer rate for wifi connections is now shown.
    For interfaces in general, the maximum transfer rate is shown as a separate column ('sp').
    Counters about virtual disk type 'xvd[a-z]' are shown.
    Several minor bugs have been solved.
  * Modifications for atopacct:
    a. Avoid that process accounting is reactivated too frequently (and unnecessary).
  * Modifications for atopsar:
    a. Add flags for NFS traffic ('-n' for NFS mounts, '-j' for overall NFS
    client activity and '-J' for overall NFS server activity).
  * General:
    a. Support for systemd-based distributions has been added.
    b. The format of the raw file is incompatible with earlier versions. However,
    the earlier version of atop is automatically activated when accessing an
    older raw file.
- cleanup spec file - remove support for &lt; 12.1</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1528632000">- Update to 2.3:
  * Modifications for atop:
    + Support for Docker containers.
    + Improved gathering of process data.
    + Improved memory figures for processes.
    + Variable width for PID column.
    + Better handling when started via sudo (not entering stopped
    + state).
    + Handling of disk drives starting with 'xvd...'.
  * Modifications for atopacct:
    + Better error handling of Netlink interface.
    + Immediate reaction when receiving SIGTERM signal.
    + Bypass for kernel bug 190711 (Netlink interface not
    available).
    + Bypass for kernel bug 190271 (process accounting does not
    always start).
  * Modifications for atopsar:
    + Top-3 of resource consuming processes only shows active
    processes now.
  * General:
    + The format of the raw file is upward compatible with version
    2.2-3.
- Clean with spec-cleaner.</changelog>
  <changelog author="rbrown@suse.com" date="1529928000">- Correct copyright attribution</changelog>
  <changelog author="Matthias Eliasson &lt;matthias.eliasson@gmail.com&gt;" date="1550404800">- Update to 2.4.0
  * Modifications for atop:
    + Support for Nvidia GPU statistics:
    A separate daemon atopgpud has been developed to maintain statistics of
  Nvidia GPUs in the system. When this daemon is running, atop will
  connect to this daemon and will get/show the GPU statistics with every
  interval on system level and process level (key 'e').
    The atopgpud daemon will only be active when it is explicitly enabled
  (see man pages for more info).
    + Support for Infiniband statistics:
    Counters showing the bandwidth utilization of Infiniband ports
  (system level) are added.
    + Support for Pressure Stall Information (PSI):
    The average pressure percentages of CPU, memory and I/O are reported
  for the last 10, 60 and 300 seconds. These percentage are provided from
  kernel 4.20 onwards.
    + Faster startup of atop:
    The allocation strategy for processes and threads has been improved,
  which will specifically be noticable on larger systems with lots of
  multi-threaded processes.
    + Configurable options for atop running in the background:
    Default options of script atop.daily can be overruled by
  /etc/default/atop file.
    + CPU Instructions Per Cycle (IPC):
    For every CPU, the average number of instructions per CPU cycle is
  shown as 'ipc'. Besides, a column is shown with the number of cycles
  executed per second as `cycl` (shown as effective Hz frequency).
    + Various fixes:
    Various NFS counters corrected.
    Recognition of nvme and nbd disks.
    Recognition of DEADLINE scheduling policy.
    Proper handling of memory locking (improper handling caused malloc
  failures in previous versions).
  * New program atopconvert:
    + This program can be used to convert the layout of older raw files to
  newer raw files. Raw files from atop 2.0 onwards can be converted to
  the newest version (now: 2.4).
  * Modifications for atopsar:
    + Reports can be printed now about the utilization of GPUs and Infiniband,
  and about the PSI percentages.
  * General:
    + The format of the raw file is incompatible with earlier versions.
  However, old raw files can be converted now by the program atopconvert
  to be read or extended by newer atop versions.
- Clean with spec-cleaner
- Refresh atop-makefile.patch</changelog>
  <changelog author="kukuk@suse.de" date="1566302400">- Package /etc/cron.d, as this is now part of cron which we don't
  want to require</changelog>
  <changelog author="Matthias Eliasson &lt;elimat@opensuse.org&gt;" date="1596196800">- Update to version 2.5.0
  Modifications for atop:
  * Avoid using perf counters in VM
    New option 'perfevents' in the atoprc file to define if the Instructions
  Per Cycle (IPC) should be retrieved via the 'perf' counters. Specify
  value 'auto' (default), 'enable' or 'disable'. In case of 'auto', the
  Instructions Per Cycle counter will not be retrieved on VMs due to the
  overhead of reading this counter in a guest.
  * Improve daily rotation of logfile for systemd-based systems.
    Exchange the files /etc/cron.d/atop, /etc/logrotate.d/psaccs_atop,
  /etc/logrotate.d/psaccu_atop, /usr/share/atop/atop.daily,
  /var/log/atop/dummy_after and /var/log/atop/dummy_before by
  atop-rotate.service and atop-rotate.timer.
  * Bug fixes:
    Correction of PSI value 'io full'.
    Use smaps_rollup (if present) instead of smaps for better performance.
    Use writev instead of 3 single writes to avoid logfile corruption.
    Modified handling of error messages (remain visible after window is
  closed).
    Correct CID for containers created by Kubernetes.
    Allow reading a logfile via a named pipe (non-seekable).
  Modifications for atopconvert:
  * Show version of input file (even if only one parameter specified).
  General:
  * The format of the raw file is compatible with version 2.4.
- Run spec-cleaner
- Remove requires for cron and logrotate now that there is systemd service
  and timers handling logrotation
- Remove Requires(post) for permissions since atop does not use cron files anymore
- Refresh patch:
  * atop-makefile.patch
- Add atop defaults in /etc/default/atop</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1618315200">- Update to version 2.6.0
  * Sort threads within process.
  * Individual threads within a process (key 'y') are shown in the
    order of their TID. With the additional key 'Y' threads within
    a process are sorted based on the current sort criterium.
  * Show the WCHAN per thread.
  * With the key 'W' is active, the wait channel is determined per
    thread and shown with the scheduling information (key 's').
  * Show runqueue delay per thread/process.
  * For every process (cumulated) and every thread the time spent
    waiting on the runqueue is shown as value 'RDELAY'.
  * Show other modified/new metrics:
    + PSI pressure during interval time is shown
    + Counter 'avio' (average I/O time) for fast disks in
    microseconds or nanoseconds
    + Counter 'zfarc' showing the current size of the ARC (cache)
    for ZFSonlinux
    + Counter 'swcac' showing the current size of the swap cache
    + Counter LOCKSZ showing the virtual locked memory size
  * Avoid crash with very high load average values.
  * Fix errors in reading InfiniBand states.
  * Support of rawlog files spanning multiple days.
  * The time specification to define the begin time (-b flag)
    and end time (-e flag) of both atop and atopsar is
    [YYYYMMDD]hhmm now
  * This also applies to the branch key ('b') when using atop
    interactively.
  * Support reading rawlog from a pipe.
  * Rawlog data can be read from a pipe by atop and atopsar with
    the option '-r -'. In this way, concatenated rawlog data from
    the command atopcat can be directly processed.
  * New program atopcat, the program atopcat concatenates rawlog
    files and writes this data to stdout. The output can be
    redirected to a new rawlog file or to atop/atopsar directly
    via a pipe (see option '-r -' of these commands).
    In this way e.g. weekly or monthly reports or extractions
    can be created.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1628683200">- Added hardening to systemd service(s). Added patch(es):
  * harden_atop-rotate.service.patch
  * harden_atop.service.patch
  * harden_atopacct.service.patch
  * harden_atopgpu.service.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1641556800">- Update to 2.7.0:
  * Describe (un)restricted view in first screen
  * Cosmetic change
  * Determine (un)restricted view by verifying suid instead of euid.
  * Do not ignore unknown network interface
  * Parseable output: optionally exchange spaces in command
  * No setuid by default
  * Correct conversion to 2.7 raw files
  * Corrected type
  * Only show per-node NUMA stats when more than 1 node
  * Prepare man pages for version 2.7
  * Prepare atopconvert for version 2.7
  * Detect logrotation for process accounting with psacct/acct
  * Speed and duplex mode not correctly filled for interface
  * Bug solution related to discards
  * Support discard counter for disks and skip unused disks
  * ifprop.c: fix ioctl parameter after handshaking with kernel
  * Show gigabits/sec instead of megabits/sec for Infiniband #131
  * CVE: use execvp with a specified path to avoid PATH hijacking
  * Correct memory busy logic in atopsar
  * Add parseable output for per-node NUMA counters
  * Additions to NUMA counters Table overflow checks
  * Gather and show per numa cpu related statistics
  * Gather and show per numa memory related statistics
  * Correction in handling of zswap and ksm counters
  * Support containers created by podman
  * Cleanup old messages
  * Do not change owner to root in Makefile (#76)
  * Support process accounting log /var/log/account/pacct (#138)
  * Polish do_perfevents when atop built with NOPERFEVENT
  * Do not use doconvert funtion to validate counter (#160)
  * New counter for number of NUMA pages migrated
  * Modify field order and priority of paging counters
  * Small text modification for migrated counter
  * Avoid non-initialized prestat by introducing extra pointer
  * Function 'calcdiff' (deviate.c) used uninitialized prestat struct
  * Reserver space for future counters.
  * Clean up ignored files
  * Variable number of positions for sortitem
  * Adapt man page of atop for state selection (add state 'I').
  * Allow thread state 'I' with state selection (key 'Q')
  * Count idle threads as non-interruptible threads
  * Uninitialized index might cause segmentation fault.
  * Support NVMe multipath disk statistics
  * Support page migration counter
  * photosyst.c: fix build on musl
  * Use of struct ethtool_link_settings should be conditional
  * Cosmetic change (source code layout)
  * Various bug fixes and in general add 'thread' to all messages
  * Properly define if interface is virtual or physical
  * Add license info to various include files (solves issue #144)
  * HTTP statistics modified from -h flag to -o flag (#152)
  * Possible buffer overflow with huge number of seconds Number
    of seconds will be limited to 5 positions.
  * Possible buffer overflow with average disk I/O
  * Allow process selection based on specific process states.
  * Correct definition of environment variable LOGOPTS
  * Switch to using curses vw_printw as vwprintw is deprecated
  * Support multiple counters 'allocstall_' in /proc/vmstat.
  * Avoid integer overflow when calculating PSI percentages.
  * Suppress irrelevant counters (solves issue #148)
  * Add the number of OOM kills to the -s report
  * Record the number of process stalls to run memory compaction
  * Make clean removes atopsar now (issue 145)
  * Add counter for the number of OOM kills to the PAG line
  * Add counters for zswap and KSM.
  * ifprop.c: fix build with kernel &lt; 4.6
  * Fix initifprop() when obtaining properties of all interfaces
  * Fixed rounding problems in the average-per-second mode.
- Refresh atop-makefile.patch
- Refresh harden_atop.service.patch
- Call make install instead of make systemdinstall
  Default is systemd now</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1646049600">- Update to 2.7.1:
  * Correct disk stats in atopsar (#182)
  * Explicit type definition in atop.service (#180)</changelog>
</package>
<package pkgid="68f96f75997b45a16637e3580c16d48d118e568500ce72f86001b5917cc4cc10" name="atop-daemon" arch="i586">
  <version epoch="0" ver="2.7.1" rel="bp154.2.3.1"/>
  <changelog author="pascal.bleser@opensuse.org" date="1413633600">- update to 2.1:
  * OpenVZ support: virtual environment identifier per process (envID)
  * Bug solution: when the screen-width is larger than the total number of
    columns to be printed, empty columns are added, however one column too many
  * Removed useless empty column for memory statistics
  * Introduce the 'G' key to suppress showing/accumulating exited processes
    in the output
  * Support CPU frequencies for systems with Intel P-state driver
  * Introduction of new daemon atopacctd. This daemon switches on process
    accounting and transfers every accounting record to an accounting shadow
    file. The source accounting file will regularly be truncated, while the
    shadow files are written with a limited size in a queued way. Non-used
    shadow files are deleted regularly.
  * Bug-solution: segmentation fault when one of the process names in the
    system contains a newline
  * Introduce configurable colors: in the atoprc file, colors can be defined
    for information messages (default green), threads (default yellow), almost
    critical resources (default cyan) and critical resources (default red).
  * Limit the names of network interfaces to six characters max
  * Introduction of proportional memory size (PSIZE) per process. For the
    resident memory parts used by a process that are shared with other
    processes, only a proportional part (shared memory part divided by the
    number of sharers) is accounted to the process. Since the gathering of this
    value is rather time-consuming (reading the smaps file of every process),
    it is optional ('R' key or '-R' flag).
  * Increased number of LVMs and disks supported
  * Support for huge pages (total and in use).</changelog>
  <changelog author="coolo@suse.com" date="1479816000">- update to 2.2:
  * Modifications for atop:
    a. New keys for process selection:
    '/' to select processes containing a particular search string in the command line arguments.
    'I' to select processes running with particular PIDs.
    b. New counters for NFS activity:
    On system level, counters are maintained about NFS traffic. Three new labels are introduced for this purpose:
    'NFS' for NFS server statistics (overall).
    'NFC' for NFS client statistics (overall).
    'NFM' for NFS client statistics per mounted NFS filesystem (so multiple lines possible).
    c. New counters for OpenVZ containers:
    CPU consumption and memory occupation are shown per container on system level (label 'CON').
    Container ID and virtual PID are shown on process level (when using key 'v' or 's').
    d. Bug fixes:
    The maximum transfer rate larger than 1 Gbit for ethernet interfaces is now correctly shown.
    The maximum transfer rate for wifi connections is now shown.
    For interfaces in general, the maximum transfer rate is shown as a separate column ('sp').
    Counters about virtual disk type 'xvd[a-z]' are shown.
    Several minor bugs have been solved.
  * Modifications for atopacct:
    a. Avoid that process accounting is reactivated too frequently (and unnecessary).
  * Modifications for atopsar:
    a. Add flags for NFS traffic ('-n' for NFS mounts, '-j' for overall NFS
    client activity and '-J' for overall NFS server activity).
  * General:
    a. Support for systemd-based distributions has been added.
    b. The format of the raw file is incompatible with earlier versions. However,
    the earlier version of atop is automatically activated when accessing an
    older raw file.
- cleanup spec file - remove support for &lt; 12.1</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1528632000">- Update to 2.3:
  * Modifications for atop:
    + Support for Docker containers.
    + Improved gathering of process data.
    + Improved memory figures for processes.
    + Variable width for PID column.
    + Better handling when started via sudo (not entering stopped
    + state).
    + Handling of disk drives starting with 'xvd...'.
  * Modifications for atopacct:
    + Better error handling of Netlink interface.
    + Immediate reaction when receiving SIGTERM signal.
    + Bypass for kernel bug 190711 (Netlink interface not
    available).
    + Bypass for kernel bug 190271 (process accounting does not
    always start).
  * Modifications for atopsar:
    + Top-3 of resource consuming processes only shows active
    processes now.
  * General:
    + The format of the raw file is upward compatible with version
    2.2-3.
- Clean with spec-cleaner.</changelog>
  <changelog author="rbrown@suse.com" date="1529928000">- Correct copyright attribution</changelog>
  <changelog author="Matthias Eliasson &lt;matthias.eliasson@gmail.com&gt;" date="1550404800">- Update to 2.4.0
  * Modifications for atop:
    + Support for Nvidia GPU statistics:
    A separate daemon atopgpud has been developed to maintain statistics of
  Nvidia GPUs in the system. When this daemon is running, atop will
  connect to this daemon and will get/show the GPU statistics with every
  interval on system level and process level (key 'e').
    The atopgpud daemon will only be active when it is explicitly enabled
  (see man pages for more info).
    + Support for Infiniband statistics:
    Counters showing the bandwidth utilization of Infiniband ports
  (system level) are added.
    + Support for Pressure Stall Information (PSI):
    The average pressure percentages of CPU, memory and I/O are reported
  for the last 10, 60 and 300 seconds. These percentage are provided from
  kernel 4.20 onwards.
    + Faster startup of atop:
    The allocation strategy for processes and threads has been improved,
  which will specifically be noticable on larger systems with lots of
  multi-threaded processes.
    + Configurable options for atop running in the background:
    Default options of script atop.daily can be overruled by
  /etc/default/atop file.
    + CPU Instructions Per Cycle (IPC):
    For every CPU, the average number of instructions per CPU cycle is
  shown as 'ipc'. Besides, a column is shown with the number of cycles
  executed per second as `cycl` (shown as effective Hz frequency).
    + Various fixes:
    Various NFS counters corrected.
    Recognition of nvme and nbd disks.
    Recognition of DEADLINE scheduling policy.
    Proper handling of memory locking (improper handling caused malloc
  failures in previous versions).
  * New program atopconvert:
    + This program can be used to convert the layout of older raw files to
  newer raw files. Raw files from atop 2.0 onwards can be converted to
  the newest version (now: 2.4).
  * Modifications for atopsar:
    + Reports can be printed now about the utilization of GPUs and Infiniband,
  and about the PSI percentages.
  * General:
    + The format of the raw file is incompatible with earlier versions.
  However, old raw files can be converted now by the program atopconvert
  to be read or extended by newer atop versions.
- Clean with spec-cleaner
- Refresh atop-makefile.patch</changelog>
  <changelog author="kukuk@suse.de" date="1566302400">- Package /etc/cron.d, as this is now part of cron which we don't
  want to require</changelog>
  <changelog author="Matthias Eliasson &lt;elimat@opensuse.org&gt;" date="1596196800">- Update to version 2.5.0
  Modifications for atop:
  * Avoid using perf counters in VM
    New option 'perfevents' in the atoprc file to define if the Instructions
  Per Cycle (IPC) should be retrieved via the 'perf' counters. Specify
  value 'auto' (default), 'enable' or 'disable'. In case of 'auto', the
  Instructions Per Cycle counter will not be retrieved on VMs due to the
  overhead of reading this counter in a guest.
  * Improve daily rotation of logfile for systemd-based systems.
    Exchange the files /etc/cron.d/atop, /etc/logrotate.d/psaccs_atop,
  /etc/logrotate.d/psaccu_atop, /usr/share/atop/atop.daily,
  /var/log/atop/dummy_after and /var/log/atop/dummy_before by
  atop-rotate.service and atop-rotate.timer.
  * Bug fixes:
    Correction of PSI value 'io full'.
    Use smaps_rollup (if present) instead of smaps for better performance.
    Use writev instead of 3 single writes to avoid logfile corruption.
    Modified handling of error messages (remain visible after window is
  closed).
    Correct CID for containers created by Kubernetes.
    Allow reading a logfile via a named pipe (non-seekable).
  Modifications for atopconvert:
  * Show version of input file (even if only one parameter specified).
  General:
  * The format of the raw file is compatible with version 2.4.
- Run spec-cleaner
- Remove requires for cron and logrotate now that there is systemd service
  and timers handling logrotation
- Remove Requires(post) for permissions since atop does not use cron files anymore
- Refresh patch:
  * atop-makefile.patch
- Add atop defaults in /etc/default/atop</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1618315200">- Update to version 2.6.0
  * Sort threads within process.
  * Individual threads within a process (key 'y') are shown in the
    order of their TID. With the additional key 'Y' threads within
    a process are sorted based on the current sort criterium.
  * Show the WCHAN per thread.
  * With the key 'W' is active, the wait channel is determined per
    thread and shown with the scheduling information (key 's').
  * Show runqueue delay per thread/process.
  * For every process (cumulated) and every thread the time spent
    waiting on the runqueue is shown as value 'RDELAY'.
  * Show other modified/new metrics:
    + PSI pressure during interval time is shown
    + Counter 'avio' (average I/O time) for fast disks in
    microseconds or nanoseconds
    + Counter 'zfarc' showing the current size of the ARC (cache)
    for ZFSonlinux
    + Counter 'swcac' showing the current size of the swap cache
    + Counter LOCKSZ showing the virtual locked memory size
  * Avoid crash with very high load average values.
  * Fix errors in reading InfiniBand states.
  * Support of rawlog files spanning multiple days.
  * The time specification to define the begin time (-b flag)
    and end time (-e flag) of both atop and atopsar is
    [YYYYMMDD]hhmm now
  * This also applies to the branch key ('b') when using atop
    interactively.
  * Support reading rawlog from a pipe.
  * Rawlog data can be read from a pipe by atop and atopsar with
    the option '-r -'. In this way, concatenated rawlog data from
    the command atopcat can be directly processed.
  * New program atopcat, the program atopcat concatenates rawlog
    files and writes this data to stdout. The output can be
    redirected to a new rawlog file or to atop/atopsar directly
    via a pipe (see option '-r -' of these commands).
    In this way e.g. weekly or monthly reports or extractions
    can be created.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1628683200">- Added hardening to systemd service(s). Added patch(es):
  * harden_atop-rotate.service.patch
  * harden_atop.service.patch
  * harden_atopacct.service.patch
  * harden_atopgpu.service.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1641556800">- Update to 2.7.0:
  * Describe (un)restricted view in first screen
  * Cosmetic change
  * Determine (un)restricted view by verifying suid instead of euid.
  * Do not ignore unknown network interface
  * Parseable output: optionally exchange spaces in command
  * No setuid by default
  * Correct conversion to 2.7 raw files
  * Corrected type
  * Only show per-node NUMA stats when more than 1 node
  * Prepare man pages for version 2.7
  * Prepare atopconvert for version 2.7
  * Detect logrotation for process accounting with psacct/acct
  * Speed and duplex mode not correctly filled for interface
  * Bug solution related to discards
  * Support discard counter for disks and skip unused disks
  * ifprop.c: fix ioctl parameter after handshaking with kernel
  * Show gigabits/sec instead of megabits/sec for Infiniband #131
  * CVE: use execvp with a specified path to avoid PATH hijacking
  * Correct memory busy logic in atopsar
  * Add parseable output for per-node NUMA counters
  * Additions to NUMA counters Table overflow checks
  * Gather and show per numa cpu related statistics
  * Gather and show per numa memory related statistics
  * Correction in handling of zswap and ksm counters
  * Support containers created by podman
  * Cleanup old messages
  * Do not change owner to root in Makefile (#76)
  * Support process accounting log /var/log/account/pacct (#138)
  * Polish do_perfevents when atop built with NOPERFEVENT
  * Do not use doconvert funtion to validate counter (#160)
  * New counter for number of NUMA pages migrated
  * Modify field order and priority of paging counters
  * Small text modification for migrated counter
  * Avoid non-initialized prestat by introducing extra pointer
  * Function 'calcdiff' (deviate.c) used uninitialized prestat struct
  * Reserver space for future counters.
  * Clean up ignored files
  * Variable number of positions for sortitem
  * Adapt man page of atop for state selection (add state 'I').
  * Allow thread state 'I' with state selection (key 'Q')
  * Count idle threads as non-interruptible threads
  * Uninitialized index might cause segmentation fault.
  * Support NVMe multipath disk statistics
  * Support page migration counter
  * photosyst.c: fix build on musl
  * Use of struct ethtool_link_settings should be conditional
  * Cosmetic change (source code layout)
  * Various bug fixes and in general add 'thread' to all messages
  * Properly define if interface is virtual or physical
  * Add license info to various include files (solves issue #144)
  * HTTP statistics modified from -h flag to -o flag (#152)
  * Possible buffer overflow with huge number of seconds Number
    of seconds will be limited to 5 positions.
  * Possible buffer overflow with average disk I/O
  * Allow process selection based on specific process states.
  * Correct definition of environment variable LOGOPTS
  * Switch to using curses vw_printw as vwprintw is deprecated
  * Support multiple counters 'allocstall_' in /proc/vmstat.
  * Avoid integer overflow when calculating PSI percentages.
  * Suppress irrelevant counters (solves issue #148)
  * Add the number of OOM kills to the -s report
  * Record the number of process stalls to run memory compaction
  * Make clean removes atopsar now (issue 145)
  * Add counter for the number of OOM kills to the PAG line
  * Add counters for zswap and KSM.
  * ifprop.c: fix build with kernel &lt; 4.6
  * Fix initifprop() when obtaining properties of all interfaces
  * Fixed rounding problems in the average-per-second mode.
- Refresh atop-makefile.patch
- Refresh harden_atop.service.patch
- Call make install instead of make systemdinstall
  Default is systemd now</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1646049600">- Update to 2.7.1:
  * Correct disk stats in atopsar (#182)
  * Explicit type definition in atop.service (#180)</changelog>
</package>
<package pkgid="4650d7e9c4f276cf884cd069aa946c7a45dd4bd7e0ffc3a54dceef82193cbef1" name="atop-daemon" arch="ppc64le">
  <version epoch="0" ver="2.7.1" rel="bp154.2.3.1"/>
  <changelog author="pascal.bleser@opensuse.org" date="1413633600">- update to 2.1:
  * OpenVZ support: virtual environment identifier per process (envID)
  * Bug solution: when the screen-width is larger than the total number of
    columns to be printed, empty columns are added, however one column too many
  * Removed useless empty column for memory statistics
  * Introduce the 'G' key to suppress showing/accumulating exited processes
    in the output
  * Support CPU frequencies for systems with Intel P-state driver
  * Introduction of new daemon atopacctd. This daemon switches on process
    accounting and transfers every accounting record to an accounting shadow
    file. The source accounting file will regularly be truncated, while the
    shadow files are written with a limited size in a queued way. Non-used
    shadow files are deleted regularly.
  * Bug-solution: segmentation fault when one of the process names in the
    system contains a newline
  * Introduce configurable colors: in the atoprc file, colors can be defined
    for information messages (default green), threads (default yellow), almost
    critical resources (default cyan) and critical resources (default red).
  * Limit the names of network interfaces to six characters max
  * Introduction of proportional memory size (PSIZE) per process. For the
    resident memory parts used by a process that are shared with other
    processes, only a proportional part (shared memory part divided by the
    number of sharers) is accounted to the process. Since the gathering of this
    value is rather time-consuming (reading the smaps file of every process),
    it is optional ('R' key or '-R' flag).
  * Increased number of LVMs and disks supported
  * Support for huge pages (total and in use).</changelog>
  <changelog author="coolo@suse.com" date="1479816000">- update to 2.2:
  * Modifications for atop:
    a. New keys for process selection:
    '/' to select processes containing a particular search string in the command line arguments.
    'I' to select processes running with particular PIDs.
    b. New counters for NFS activity:
    On system level, counters are maintained about NFS traffic. Three new labels are introduced for this purpose:
    'NFS' for NFS server statistics (overall).
    'NFC' for NFS client statistics (overall).
    'NFM' for NFS client statistics per mounted NFS filesystem (so multiple lines possible).
    c. New counters for OpenVZ containers:
    CPU consumption and memory occupation are shown per container on system level (label 'CON').
    Container ID and virtual PID are shown on process level (when using key 'v' or 's').
    d. Bug fixes:
    The maximum transfer rate larger than 1 Gbit for ethernet interfaces is now correctly shown.
    The maximum transfer rate for wifi connections is now shown.
    For interfaces in general, the maximum transfer rate is shown as a separate column ('sp').
    Counters about virtual disk type 'xvd[a-z]' are shown.
    Several minor bugs have been solved.
  * Modifications for atopacct:
    a. Avoid that process accounting is reactivated too frequently (and unnecessary).
  * Modifications for atopsar:
    a. Add flags for NFS traffic ('-n' for NFS mounts, '-j' for overall NFS
    client activity and '-J' for overall NFS server activity).
  * General:
    a. Support for systemd-based distributions has been added.
    b. The format of the raw file is incompatible with earlier versions. However,
    the earlier version of atop is automatically activated when accessing an
    older raw file.
- cleanup spec file - remove support for &lt; 12.1</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1528632000">- Update to 2.3:
  * Modifications for atop:
    + Support for Docker containers.
    + Improved gathering of process data.
    + Improved memory figures for processes.
    + Variable width for PID column.
    + Better handling when started via sudo (not entering stopped
    + state).
    + Handling of disk drives starting with 'xvd...'.
  * Modifications for atopacct:
    + Better error handling of Netlink interface.
    + Immediate reaction when receiving SIGTERM signal.
    + Bypass for kernel bug 190711 (Netlink interface not
    available).
    + Bypass for kernel bug 190271 (process accounting does not
    always start).
  * Modifications for atopsar:
    + Top-3 of resource consuming processes only shows active
    processes now.
  * General:
    + The format of the raw file is upward compatible with version
    2.2-3.
- Clean with spec-cleaner.</changelog>
  <changelog author="rbrown@suse.com" date="1529928000">- Correct copyright attribution</changelog>
  <changelog author="Matthias Eliasson &lt;matthias.eliasson@gmail.com&gt;" date="1550404800">- Update to 2.4.0
  * Modifications for atop:
    + Support for Nvidia GPU statistics:
    A separate daemon atopgpud has been developed to maintain statistics of
  Nvidia GPUs in the system. When this daemon is running, atop will
  connect to this daemon and will get/show the GPU statistics with every
  interval on system level and process level (key 'e').
    The atopgpud daemon will only be active when it is explicitly enabled
  (see man pages for more info).
    + Support for Infiniband statistics:
    Counters showing the bandwidth utilization of Infiniband ports
  (system level) are added.
    + Support for Pressure Stall Information (PSI):
    The average pressure percentages of CPU, memory and I/O are reported
  for the last 10, 60 and 300 seconds. These percentage are provided from
  kernel 4.20 onwards.
    + Faster startup of atop:
    The allocation strategy for processes and threads has been improved,
  which will specifically be noticable on larger systems with lots of
  multi-threaded processes.
    + Configurable options for atop running in the background:
    Default options of script atop.daily can be overruled by
  /etc/default/atop file.
    + CPU Instructions Per Cycle (IPC):
    For every CPU, the average number of instructions per CPU cycle is
  shown as 'ipc'. Besides, a column is shown with the number of cycles
  executed per second as `cycl` (shown as effective Hz frequency).
    + Various fixes:
    Various NFS counters corrected.
    Recognition of nvme and nbd disks.
    Recognition of DEADLINE scheduling policy.
    Proper handling of memory locking (improper handling caused malloc
  failures in previous versions).
  * New program atopconvert:
    + This program can be used to convert the layout of older raw files to
  newer raw files. Raw files from atop 2.0 onwards can be converted to
  the newest version (now: 2.4).
  * Modifications for atopsar:
    + Reports can be printed now about the utilization of GPUs and Infiniband,
  and about the PSI percentages.
  * General:
    + The format of the raw file is incompatible with earlier versions.
  However, old raw files can be converted now by the program atopconvert
  to be read or extended by newer atop versions.
- Clean with spec-cleaner
- Refresh atop-makefile.patch</changelog>
  <changelog author="kukuk@suse.de" date="1566302400">- Package /etc/cron.d, as this is now part of cron which we don't
  want to require</changelog>
  <changelog author="Matthias Eliasson &lt;elimat@opensuse.org&gt;" date="1596196800">- Update to version 2.5.0
  Modifications for atop:
  * Avoid using perf counters in VM
    New option 'perfevents' in the atoprc file to define if the Instructions
  Per Cycle (IPC) should be retrieved via the 'perf' counters. Specify
  value 'auto' (default), 'enable' or 'disable'. In case of 'auto', the
  Instructions Per Cycle counter will not be retrieved on VMs due to the
  overhead of reading this counter in a guest.
  * Improve daily rotation of logfile for systemd-based systems.
    Exchange the files /etc/cron.d/atop, /etc/logrotate.d/psaccs_atop,
  /etc/logrotate.d/psaccu_atop, /usr/share/atop/atop.daily,
  /var/log/atop/dummy_after and /var/log/atop/dummy_before by
  atop-rotate.service and atop-rotate.timer.
  * Bug fixes:
    Correction of PSI value 'io full'.
    Use smaps_rollup (if present) instead of smaps for better performance.
    Use writev instead of 3 single writes to avoid logfile corruption.
    Modified handling of error messages (remain visible after window is
  closed).
    Correct CID for containers created by Kubernetes.
    Allow reading a logfile via a named pipe (non-seekable).
  Modifications for atopconvert:
  * Show version of input file (even if only one parameter specified).
  General:
  * The format of the raw file is compatible with version 2.4.
- Run spec-cleaner
- Remove requires for cron and logrotate now that there is systemd service
  and timers handling logrotation
- Remove Requires(post) for permissions since atop does not use cron files anymore
- Refresh patch:
  * atop-makefile.patch
- Add atop defaults in /etc/default/atop</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1618315200">- Update to version 2.6.0
  * Sort threads within process.
  * Individual threads within a process (key 'y') are shown in the
    order of their TID. With the additional key 'Y' threads within
    a process are sorted based on the current sort criterium.
  * Show the WCHAN per thread.
  * With the key 'W' is active, the wait channel is determined per
    thread and shown with the scheduling information (key 's').
  * Show runqueue delay per thread/process.
  * For every process (cumulated) and every thread the time spent
    waiting on the runqueue is shown as value 'RDELAY'.
  * Show other modified/new metrics:
    + PSI pressure during interval time is shown
    + Counter 'avio' (average I/O time) for fast disks in
    microseconds or nanoseconds
    + Counter 'zfarc' showing the current size of the ARC (cache)
    for ZFSonlinux
    + Counter 'swcac' showing the current size of the swap cache
    + Counter LOCKSZ showing the virtual locked memory size
  * Avoid crash with very high load average values.
  * Fix errors in reading InfiniBand states.
  * Support of rawlog files spanning multiple days.
  * The time specification to define the begin time (-b flag)
    and end time (-e flag) of both atop and atopsar is
    [YYYYMMDD]hhmm now
  * This also applies to the branch key ('b') when using atop
    interactively.
  * Support reading rawlog from a pipe.
  * Rawlog data can be read from a pipe by atop and atopsar with
    the option '-r -'. In this way, concatenated rawlog data from
    the command atopcat can be directly processed.
  * New program atopcat, the program atopcat concatenates rawlog
    files and writes this data to stdout. The output can be
    redirected to a new rawlog file or to atop/atopsar directly
    via a pipe (see option '-r -' of these commands).
    In this way e.g. weekly or monthly reports or extractions
    can be created.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1628683200">- Added hardening to systemd service(s). Added patch(es):
  * harden_atop-rotate.service.patch
  * harden_atop.service.patch
  * harden_atopacct.service.patch
  * harden_atopgpu.service.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1641556800">- Update to 2.7.0:
  * Describe (un)restricted view in first screen
  * Cosmetic change
  * Determine (un)restricted view by verifying suid instead of euid.
  * Do not ignore unknown network interface
  * Parseable output: optionally exchange spaces in command
  * No setuid by default
  * Correct conversion to 2.7 raw files
  * Corrected type
  * Only show per-node NUMA stats when more than 1 node
  * Prepare man pages for version 2.7
  * Prepare atopconvert for version 2.7
  * Detect logrotation for process accounting with psacct/acct
  * Speed and duplex mode not correctly filled for interface
  * Bug solution related to discards
  * Support discard counter for disks and skip unused disks
  * ifprop.c: fix ioctl parameter after handshaking with kernel
  * Show gigabits/sec instead of megabits/sec for Infiniband #131
  * CVE: use execvp with a specified path to avoid PATH hijacking
  * Correct memory busy logic in atopsar
  * Add parseable output for per-node NUMA counters
  * Additions to NUMA counters Table overflow checks
  * Gather and show per numa cpu related statistics
  * Gather and show per numa memory related statistics
  * Correction in handling of zswap and ksm counters
  * Support containers created by podman
  * Cleanup old messages
  * Do not change owner to root in Makefile (#76)
  * Support process accounting log /var/log/account/pacct (#138)
  * Polish do_perfevents when atop built with NOPERFEVENT
  * Do not use doconvert funtion to validate counter (#160)
  * New counter for number of NUMA pages migrated
  * Modify field order and priority of paging counters
  * Small text modification for migrated counter
  * Avoid non-initialized prestat by introducing extra pointer
  * Function 'calcdiff' (deviate.c) used uninitialized prestat struct
  * Reserver space for future counters.
  * Clean up ignored files
  * Variable number of positions for sortitem
  * Adapt man page of atop for state selection (add state 'I').
  * Allow thread state 'I' with state selection (key 'Q')
  * Count idle threads as non-interruptible threads
  * Uninitialized index might cause segmentation fault.
  * Support NVMe multipath disk statistics
  * Support page migration counter
  * photosyst.c: fix build on musl
  * Use of struct ethtool_link_settings should be conditional
  * Cosmetic change (source code layout)
  * Various bug fixes and in general add 'thread' to all messages
  * Properly define if interface is virtual or physical
  * Add license info to various include files (solves issue #144)
  * HTTP statistics modified from -h flag to -o flag (#152)
  * Possible buffer overflow with huge number of seconds Number
    of seconds will be limited to 5 positions.
  * Possible buffer overflow with average disk I/O
  * Allow process selection based on specific process states.
  * Correct definition of environment variable LOGOPTS
  * Switch to using curses vw_printw as vwprintw is deprecated
  * Support multiple counters 'allocstall_' in /proc/vmstat.
  * Avoid integer overflow when calculating PSI percentages.
  * Suppress irrelevant counters (solves issue #148)
  * Add the number of OOM kills to the -s report
  * Record the number of process stalls to run memory compaction
  * Make clean removes atopsar now (issue 145)
  * Add counter for the number of OOM kills to the PAG line
  * Add counters for zswap and KSM.
  * ifprop.c: fix build with kernel &lt; 4.6
  * Fix initifprop() when obtaining properties of all interfaces
  * Fixed rounding problems in the average-per-second mode.
- Refresh atop-makefile.patch
- Refresh harden_atop.service.patch
- Call make install instead of make systemdinstall
  Default is systemd now</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1646049600">- Update to 2.7.1:
  * Correct disk stats in atopsar (#182)
  * Explicit type definition in atop.service (#180)</changelog>
</package>
<package pkgid="0f442a899138c695d06e461ef4933fa012f7b75c7373e5a5d4e166fe200fb861" name="atop-daemon" arch="s390x">
  <version epoch="0" ver="2.7.1" rel="bp154.2.3.1"/>
  <changelog author="pascal.bleser@opensuse.org" date="1413633600">- update to 2.1:
  * OpenVZ support: virtual environment identifier per process (envID)
  * Bug solution: when the screen-width is larger than the total number of
    columns to be printed, empty columns are added, however one column too many
  * Removed useless empty column for memory statistics
  * Introduce the 'G' key to suppress showing/accumulating exited processes
    in the output
  * Support CPU frequencies for systems with Intel P-state driver
  * Introduction of new daemon atopacctd. This daemon switches on process
    accounting and transfers every accounting record to an accounting shadow
    file. The source accounting file will regularly be truncated, while the
    shadow files are written with a limited size in a queued way. Non-used
    shadow files are deleted regularly.
  * Bug-solution: segmentation fault when one of the process names in the
    system contains a newline
  * Introduce configurable colors: in the atoprc file, colors can be defined
    for information messages (default green), threads (default yellow), almost
    critical resources (default cyan) and critical resources (default red).
  * Limit the names of network interfaces to six characters max
  * Introduction of proportional memory size (PSIZE) per process. For the
    resident memory parts used by a process that are shared with other
    processes, only a proportional part (shared memory part divided by the
    number of sharers) is accounted to the process. Since the gathering of this
    value is rather time-consuming (reading the smaps file of every process),
    it is optional ('R' key or '-R' flag).
  * Increased number of LVMs and disks supported
  * Support for huge pages (total and in use).</changelog>
  <changelog author="coolo@suse.com" date="1479816000">- update to 2.2:
  * Modifications for atop:
    a. New keys for process selection:
    '/' to select processes containing a particular search string in the command line arguments.
    'I' to select processes running with particular PIDs.
    b. New counters for NFS activity:
    On system level, counters are maintained about NFS traffic. Three new labels are introduced for this purpose:
    'NFS' for NFS server statistics (overall).
    'NFC' for NFS client statistics (overall).
    'NFM' for NFS client statistics per mounted NFS filesystem (so multiple lines possible).
    c. New counters for OpenVZ containers:
    CPU consumption and memory occupation are shown per container on system level (label 'CON').
    Container ID and virtual PID are shown on process level (when using key 'v' or 's').
    d. Bug fixes:
    The maximum transfer rate larger than 1 Gbit for ethernet interfaces is now correctly shown.
    The maximum transfer rate for wifi connections is now shown.
    For interfaces in general, the maximum transfer rate is shown as a separate column ('sp').
    Counters about virtual disk type 'xvd[a-z]' are shown.
    Several minor bugs have been solved.
  * Modifications for atopacct:
    a. Avoid that process accounting is reactivated too frequently (and unnecessary).
  * Modifications for atopsar:
    a. Add flags for NFS traffic ('-n' for NFS mounts, '-j' for overall NFS
    client activity and '-J' for overall NFS server activity).
  * General:
    a. Support for systemd-based distributions has been added.
    b. The format of the raw file is incompatible with earlier versions. However,
    the earlier version of atop is automatically activated when accessing an
    older raw file.
- cleanup spec file - remove support for &lt; 12.1</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1528632000">- Update to 2.3:
  * Modifications for atop:
    + Support for Docker containers.
    + Improved gathering of process data.
    + Improved memory figures for processes.
    + Variable width for PID column.
    + Better handling when started via sudo (not entering stopped
    + state).
    + Handling of disk drives starting with 'xvd...'.
  * Modifications for atopacct:
    + Better error handling of Netlink interface.
    + Immediate reaction when receiving SIGTERM signal.
    + Bypass for kernel bug 190711 (Netlink interface not
    available).
    + Bypass for kernel bug 190271 (process accounting does not
    always start).
  * Modifications for atopsar:
    + Top-3 of resource consuming processes only shows active
    processes now.
  * General:
    + The format of the raw file is upward compatible with version
    2.2-3.
- Clean with spec-cleaner.</changelog>
  <changelog author="rbrown@suse.com" date="1529928000">- Correct copyright attribution</changelog>
  <changelog author="Matthias Eliasson &lt;matthias.eliasson@gmail.com&gt;" date="1550404800">- Update to 2.4.0
  * Modifications for atop:
    + Support for Nvidia GPU statistics:
    A separate daemon atopgpud has been developed to maintain statistics of
  Nvidia GPUs in the system. When this daemon is running, atop will
  connect to this daemon and will get/show the GPU statistics with every
  interval on system level and process level (key 'e').
    The atopgpud daemon will only be active when it is explicitly enabled
  (see man pages for more info).
    + Support for Infiniband statistics:
    Counters showing the bandwidth utilization of Infiniband ports
  (system level) are added.
    + Support for Pressure Stall Information (PSI):
    The average pressure percentages of CPU, memory and I/O are reported
  for the last 10, 60 and 300 seconds. These percentage are provided from
  kernel 4.20 onwards.
    + Faster startup of atop:
    The allocation strategy for processes and threads has been improved,
  which will specifically be noticable on larger systems with lots of
  multi-threaded processes.
    + Configurable options for atop running in the background:
    Default options of script atop.daily can be overruled by
  /etc/default/atop file.
    + CPU Instructions Per Cycle (IPC):
    For every CPU, the average number of instructions per CPU cycle is
  shown as 'ipc'. Besides, a column is shown with the number of cycles
  executed per second as `cycl` (shown as effective Hz frequency).
    + Various fixes:
    Various NFS counters corrected.
    Recognition of nvme and nbd disks.
    Recognition of DEADLINE scheduling policy.
    Proper handling of memory locking (improper handling caused malloc
  failures in previous versions).
  * New program atopconvert:
    + This program can be used to convert the layout of older raw files to
  newer raw files. Raw files from atop 2.0 onwards can be converted to
  the newest version (now: 2.4).
  * Modifications for atopsar:
    + Reports can be printed now about the utilization of GPUs and Infiniband,
  and about the PSI percentages.
  * General:
    + The format of the raw file is incompatible with earlier versions.
  However, old raw files can be converted now by the program atopconvert
  to be read or extended by newer atop versions.
- Clean with spec-cleaner
- Refresh atop-makefile.patch</changelog>
  <changelog author="kukuk@suse.de" date="1566302400">- Package /etc/cron.d, as this is now part of cron which we don't
  want to require</changelog>
  <changelog author="Matthias Eliasson &lt;elimat@opensuse.org&gt;" date="1596196800">- Update to version 2.5.0
  Modifications for atop:
  * Avoid using perf counters in VM
    New option 'perfevents' in the atoprc file to define if the Instructions
  Per Cycle (IPC) should be retrieved via the 'perf' counters. Specify
  value 'auto' (default), 'enable' or 'disable'. In case of 'auto', the
  Instructions Per Cycle counter will not be retrieved on VMs due to the
  overhead of reading this counter in a guest.
  * Improve daily rotation of logfile for systemd-based systems.
    Exchange the files /etc/cron.d/atop, /etc/logrotate.d/psaccs_atop,
  /etc/logrotate.d/psaccu_atop, /usr/share/atop/atop.daily,
  /var/log/atop/dummy_after and /var/log/atop/dummy_before by
  atop-rotate.service and atop-rotate.timer.
  * Bug fixes:
    Correction of PSI value 'io full'.
    Use smaps_rollup (if present) instead of smaps for better performance.
    Use writev instead of 3 single writes to avoid logfile corruption.
    Modified handling of error messages (remain visible after window is
  closed).
    Correct CID for containers created by Kubernetes.
    Allow reading a logfile via a named pipe (non-seekable).
  Modifications for atopconvert:
  * Show version of input file (even if only one parameter specified).
  General:
  * The format of the raw file is compatible with version 2.4.
- Run spec-cleaner
- Remove requires for cron and logrotate now that there is systemd service
  and timers handling logrotation
- Remove Requires(post) for permissions since atop does not use cron files anymore
- Refresh patch:
  * atop-makefile.patch
- Add atop defaults in /etc/default/atop</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1618315200">- Update to version 2.6.0
  * Sort threads within process.
  * Individual threads within a process (key 'y') are shown in the
    order of their TID. With the additional key 'Y' threads within
    a process are sorted based on the current sort criterium.
  * Show the WCHAN per thread.
  * With the key 'W' is active, the wait channel is determined per
    thread and shown with the scheduling information (key 's').
  * Show runqueue delay per thread/process.
  * For every process (cumulated) and every thread the time spent
    waiting on the runqueue is shown as value 'RDELAY'.
  * Show other modified/new metrics:
    + PSI pressure during interval time is shown
    + Counter 'avio' (average I/O time) for fast disks in
    microseconds or nanoseconds
    + Counter 'zfarc' showing the current size of the ARC (cache)
    for ZFSonlinux
    + Counter 'swcac' showing the current size of the swap cache
    + Counter LOCKSZ showing the virtual locked memory size
  * Avoid crash with very high load average values.
  * Fix errors in reading InfiniBand states.
  * Support of rawlog files spanning multiple days.
  * The time specification to define the begin time (-b flag)
    and end time (-e flag) of both atop and atopsar is
    [YYYYMMDD]hhmm now
  * This also applies to the branch key ('b') when using atop
    interactively.
  * Support reading rawlog from a pipe.
  * Rawlog data can be read from a pipe by atop and atopsar with
    the option '-r -'. In this way, concatenated rawlog data from
    the command atopcat can be directly processed.
  * New program atopcat, the program atopcat concatenates rawlog
    files and writes this data to stdout. The output can be
    redirected to a new rawlog file or to atop/atopsar directly
    via a pipe (see option '-r -' of these commands).
    In this way e.g. weekly or monthly reports or extractions
    can be created.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1628683200">- Added hardening to systemd service(s). Added patch(es):
  * harden_atop-rotate.service.patch
  * harden_atop.service.patch
  * harden_atopacct.service.patch
  * harden_atopgpu.service.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1641556800">- Update to 2.7.0:
  * Describe (un)restricted view in first screen
  * Cosmetic change
  * Determine (un)restricted view by verifying suid instead of euid.
  * Do not ignore unknown network interface
  * Parseable output: optionally exchange spaces in command
  * No setuid by default
  * Correct conversion to 2.7 raw files
  * Corrected type
  * Only show per-node NUMA stats when more than 1 node
  * Prepare man pages for version 2.7
  * Prepare atopconvert for version 2.7
  * Detect logrotation for process accounting with psacct/acct
  * Speed and duplex mode not correctly filled for interface
  * Bug solution related to discards
  * Support discard counter for disks and skip unused disks
  * ifprop.c: fix ioctl parameter after handshaking with kernel
  * Show gigabits/sec instead of megabits/sec for Infiniband #131
  * CVE: use execvp with a specified path to avoid PATH hijacking
  * Correct memory busy logic in atopsar
  * Add parseable output for per-node NUMA counters
  * Additions to NUMA counters Table overflow checks
  * Gather and show per numa cpu related statistics
  * Gather and show per numa memory related statistics
  * Correction in handling of zswap and ksm counters
  * Support containers created by podman
  * Cleanup old messages
  * Do not change owner to root in Makefile (#76)
  * Support process accounting log /var/log/account/pacct (#138)
  * Polish do_perfevents when atop built with NOPERFEVENT
  * Do not use doconvert funtion to validate counter (#160)
  * New counter for number of NUMA pages migrated
  * Modify field order and priority of paging counters
  * Small text modification for migrated counter
  * Avoid non-initialized prestat by introducing extra pointer
  * Function 'calcdiff' (deviate.c) used uninitialized prestat struct
  * Reserver space for future counters.
  * Clean up ignored files
  * Variable number of positions for sortitem
  * Adapt man page of atop for state selection (add state 'I').
  * Allow thread state 'I' with state selection (key 'Q')
  * Count idle threads as non-interruptible threads
  * Uninitialized index might cause segmentation fault.
  * Support NVMe multipath disk statistics
  * Support page migration counter
  * photosyst.c: fix build on musl
  * Use of struct ethtool_link_settings should be conditional
  * Cosmetic change (source code layout)
  * Various bug fixes and in general add 'thread' to all messages
  * Properly define if interface is virtual or physical
  * Add license info to various include files (solves issue #144)
  * HTTP statistics modified from -h flag to -o flag (#152)
  * Possible buffer overflow with huge number of seconds Number
    of seconds will be limited to 5 positions.
  * Possible buffer overflow with average disk I/O
  * Allow process selection based on specific process states.
  * Correct definition of environment variable LOGOPTS
  * Switch to using curses vw_printw as vwprintw is deprecated
  * Support multiple counters 'allocstall_' in /proc/vmstat.
  * Avoid integer overflow when calculating PSI percentages.
  * Suppress irrelevant counters (solves issue #148)
  * Add the number of OOM kills to the -s report
  * Record the number of process stalls to run memory compaction
  * Make clean removes atopsar now (issue 145)
  * Add counter for the number of OOM kills to the PAG line
  * Add counters for zswap and KSM.
  * ifprop.c: fix build with kernel &lt; 4.6
  * Fix initifprop() when obtaining properties of all interfaces
  * Fixed rounding problems in the average-per-second mode.
- Refresh atop-makefile.patch
- Refresh harden_atop.service.patch
- Call make install instead of make systemdinstall
  Default is systemd now</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1646049600">- Update to 2.7.1:
  * Correct disk stats in atopsar (#182)
  * Explicit type definition in atop.service (#180)</changelog>
</package>
<package pkgid="6c57d14d00490d9b9773caf38b51a56c0078db6ba205c70e16d3128b92475816" name="atop-daemon" arch="x86_64">
  <version epoch="0" ver="2.7.1" rel="bp154.2.3.1"/>
  <changelog author="pascal.bleser@opensuse.org" date="1413633600">- update to 2.1:
  * OpenVZ support: virtual environment identifier per process (envID)
  * Bug solution: when the screen-width is larger than the total number of
    columns to be printed, empty columns are added, however one column too many
  * Removed useless empty column for memory statistics
  * Introduce the 'G' key to suppress showing/accumulating exited processes
    in the output
  * Support CPU frequencies for systems with Intel P-state driver
  * Introduction of new daemon atopacctd. This daemon switches on process
    accounting and transfers every accounting record to an accounting shadow
    file. The source accounting file will regularly be truncated, while the
    shadow files are written with a limited size in a queued way. Non-used
    shadow files are deleted regularly.
  * Bug-solution: segmentation fault when one of the process names in the
    system contains a newline
  * Introduce configurable colors: in the atoprc file, colors can be defined
    for information messages (default green), threads (default yellow), almost
    critical resources (default cyan) and critical resources (default red).
  * Limit the names of network interfaces to six characters max
  * Introduction of proportional memory size (PSIZE) per process. For the
    resident memory parts used by a process that are shared with other
    processes, only a proportional part (shared memory part divided by the
    number of sharers) is accounted to the process. Since the gathering of this
    value is rather time-consuming (reading the smaps file of every process),
    it is optional ('R' key or '-R' flag).
  * Increased number of LVMs and disks supported
  * Support for huge pages (total and in use).</changelog>
  <changelog author="coolo@suse.com" date="1479816000">- update to 2.2:
  * Modifications for atop:
    a. New keys for process selection:
    '/' to select processes containing a particular search string in the command line arguments.
    'I' to select processes running with particular PIDs.
    b. New counters for NFS activity:
    On system level, counters are maintained about NFS traffic. Three new labels are introduced for this purpose:
    'NFS' for NFS server statistics (overall).
    'NFC' for NFS client statistics (overall).
    'NFM' for NFS client statistics per mounted NFS filesystem (so multiple lines possible).
    c. New counters for OpenVZ containers:
    CPU consumption and memory occupation are shown per container on system level (label 'CON').
    Container ID and virtual PID are shown on process level (when using key 'v' or 's').
    d. Bug fixes:
    The maximum transfer rate larger than 1 Gbit for ethernet interfaces is now correctly shown.
    The maximum transfer rate for wifi connections is now shown.
    For interfaces in general, the maximum transfer rate is shown as a separate column ('sp').
    Counters about virtual disk type 'xvd[a-z]' are shown.
    Several minor bugs have been solved.
  * Modifications for atopacct:
    a. Avoid that process accounting is reactivated too frequently (and unnecessary).
  * Modifications for atopsar:
    a. Add flags for NFS traffic ('-n' for NFS mounts, '-j' for overall NFS
    client activity and '-J' for overall NFS server activity).
  * General:
    a. Support for systemd-based distributions has been added.
    b. The format of the raw file is incompatible with earlier versions. However,
    the earlier version of atop is automatically activated when accessing an
    older raw file.
- cleanup spec file - remove support for &lt; 12.1</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1528632000">- Update to 2.3:
  * Modifications for atop:
    + Support for Docker containers.
    + Improved gathering of process data.
    + Improved memory figures for processes.
    + Variable width for PID column.
    + Better handling when started via sudo (not entering stopped
    + state).
    + Handling of disk drives starting with 'xvd...'.
  * Modifications for atopacct:
    + Better error handling of Netlink interface.
    + Immediate reaction when receiving SIGTERM signal.
    + Bypass for kernel bug 190711 (Netlink interface not
    available).
    + Bypass for kernel bug 190271 (process accounting does not
    always start).
  * Modifications for atopsar:
    + Top-3 of resource consuming processes only shows active
    processes now.
  * General:
    + The format of the raw file is upward compatible with version
    2.2-3.
- Clean with spec-cleaner.</changelog>
  <changelog author="rbrown@suse.com" date="1529928000">- Correct copyright attribution</changelog>
  <changelog author="Matthias Eliasson &lt;matthias.eliasson@gmail.com&gt;" date="1550404800">- Update to 2.4.0
  * Modifications for atop:
    + Support for Nvidia GPU statistics:
    A separate daemon atopgpud has been developed to maintain statistics of
  Nvidia GPUs in the system. When this daemon is running, atop will
  connect to this daemon and will get/show the GPU statistics with every
  interval on system level and process level (key 'e').
    The atopgpud daemon will only be active when it is explicitly enabled
  (see man pages for more info).
    + Support for Infiniband statistics:
    Counters showing the bandwidth utilization of Infiniband ports
  (system level) are added.
    + Support for Pressure Stall Information (PSI):
    The average pressure percentages of CPU, memory and I/O are reported
  for the last 10, 60 and 300 seconds. These percentage are provided from
  kernel 4.20 onwards.
    + Faster startup of atop:
    The allocation strategy for processes and threads has been improved,
  which will specifically be noticable on larger systems with lots of
  multi-threaded processes.
    + Configurable options for atop running in the background:
    Default options of script atop.daily can be overruled by
  /etc/default/atop file.
    + CPU Instructions Per Cycle (IPC):
    For every CPU, the average number of instructions per CPU cycle is
  shown as 'ipc'. Besides, a column is shown with the number of cycles
  executed per second as `cycl` (shown as effective Hz frequency).
    + Various fixes:
    Various NFS counters corrected.
    Recognition of nvme and nbd disks.
    Recognition of DEADLINE scheduling policy.
    Proper handling of memory locking (improper handling caused malloc
  failures in previous versions).
  * New program atopconvert:
    + This program can be used to convert the layout of older raw files to
  newer raw files. Raw files from atop 2.0 onwards can be converted to
  the newest version (now: 2.4).
  * Modifications for atopsar:
    + Reports can be printed now about the utilization of GPUs and Infiniband,
  and about the PSI percentages.
  * General:
    + The format of the raw file is incompatible with earlier versions.
  However, old raw files can be converted now by the program atopconvert
  to be read or extended by newer atop versions.
- Clean with spec-cleaner
- Refresh atop-makefile.patch</changelog>
  <changelog author="kukuk@suse.de" date="1566302400">- Package /etc/cron.d, as this is now part of cron which we don't
  want to require</changelog>
  <changelog author="Matthias Eliasson &lt;elimat@opensuse.org&gt;" date="1596196800">- Update to version 2.5.0
  Modifications for atop:
  * Avoid using perf counters in VM
    New option 'perfevents' in the atoprc file to define if the Instructions
  Per Cycle (IPC) should be retrieved via the 'perf' counters. Specify
  value 'auto' (default), 'enable' or 'disable'. In case of 'auto', the
  Instructions Per Cycle counter will not be retrieved on VMs due to the
  overhead of reading this counter in a guest.
  * Improve daily rotation of logfile for systemd-based systems.
    Exchange the files /etc/cron.d/atop, /etc/logrotate.d/psaccs_atop,
  /etc/logrotate.d/psaccu_atop, /usr/share/atop/atop.daily,
  /var/log/atop/dummy_after and /var/log/atop/dummy_before by
  atop-rotate.service and atop-rotate.timer.
  * Bug fixes:
    Correction of PSI value 'io full'.
    Use smaps_rollup (if present) instead of smaps for better performance.
    Use writev instead of 3 single writes to avoid logfile corruption.
    Modified handling of error messages (remain visible after window is
  closed).
    Correct CID for containers created by Kubernetes.
    Allow reading a logfile via a named pipe (non-seekable).
  Modifications for atopconvert:
  * Show version of input file (even if only one parameter specified).
  General:
  * The format of the raw file is compatible with version 2.4.
- Run spec-cleaner
- Remove requires for cron and logrotate now that there is systemd service
  and timers handling logrotation
- Remove Requires(post) for permissions since atop does not use cron files anymore
- Refresh patch:
  * atop-makefile.patch
- Add atop defaults in /etc/default/atop</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1618315200">- Update to version 2.6.0
  * Sort threads within process.
  * Individual threads within a process (key 'y') are shown in the
    order of their TID. With the additional key 'Y' threads within
    a process are sorted based on the current sort criterium.
  * Show the WCHAN per thread.
  * With the key 'W' is active, the wait channel is determined per
    thread and shown with the scheduling information (key 's').
  * Show runqueue delay per thread/process.
  * For every process (cumulated) and every thread the time spent
    waiting on the runqueue is shown as value 'RDELAY'.
  * Show other modified/new metrics:
    + PSI pressure during interval time is shown
    + Counter 'avio' (average I/O time) for fast disks in
    microseconds or nanoseconds
    + Counter 'zfarc' showing the current size of the ARC (cache)
    for ZFSonlinux
    + Counter 'swcac' showing the current size of the swap cache
    + Counter LOCKSZ showing the virtual locked memory size
  * Avoid crash with very high load average values.
  * Fix errors in reading InfiniBand states.
  * Support of rawlog files spanning multiple days.
  * The time specification to define the begin time (-b flag)
    and end time (-e flag) of both atop and atopsar is
    [YYYYMMDD]hhmm now
  * This also applies to the branch key ('b') when using atop
    interactively.
  * Support reading rawlog from a pipe.
  * Rawlog data can be read from a pipe by atop and atopsar with
    the option '-r -'. In this way, concatenated rawlog data from
    the command atopcat can be directly processed.
  * New program atopcat, the program atopcat concatenates rawlog
    files and writes this data to stdout. The output can be
    redirected to a new rawlog file or to atop/atopsar directly
    via a pipe (see option '-r -' of these commands).
    In this way e.g. weekly or monthly reports or extractions
    can be created.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1628683200">- Added hardening to systemd service(s). Added patch(es):
  * harden_atop-rotate.service.patch
  * harden_atop.service.patch
  * harden_atopacct.service.patch
  * harden_atopgpu.service.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1641556800">- Update to 2.7.0:
  * Describe (un)restricted view in first screen
  * Cosmetic change
  * Determine (un)restricted view by verifying suid instead of euid.
  * Do not ignore unknown network interface
  * Parseable output: optionally exchange spaces in command
  * No setuid by default
  * Correct conversion to 2.7 raw files
  * Corrected type
  * Only show per-node NUMA stats when more than 1 node
  * Prepare man pages for version 2.7
  * Prepare atopconvert for version 2.7
  * Detect logrotation for process accounting with psacct/acct
  * Speed and duplex mode not correctly filled for interface
  * Bug solution related to discards
  * Support discard counter for disks and skip unused disks
  * ifprop.c: fix ioctl parameter after handshaking with kernel
  * Show gigabits/sec instead of megabits/sec for Infiniband #131
  * CVE: use execvp with a specified path to avoid PATH hijacking
  * Correct memory busy logic in atopsar
  * Add parseable output for per-node NUMA counters
  * Additions to NUMA counters Table overflow checks
  * Gather and show per numa cpu related statistics
  * Gather and show per numa memory related statistics
  * Correction in handling of zswap and ksm counters
  * Support containers created by podman
  * Cleanup old messages
  * Do not change owner to root in Makefile (#76)
  * Support process accounting log /var/log/account/pacct (#138)
  * Polish do_perfevents when atop built with NOPERFEVENT
  * Do not use doconvert funtion to validate counter (#160)
  * New counter for number of NUMA pages migrated
  * Modify field order and priority of paging counters
  * Small text modification for migrated counter
  * Avoid non-initialized prestat by introducing extra pointer
  * Function 'calcdiff' (deviate.c) used uninitialized prestat struct
  * Reserver space for future counters.
  * Clean up ignored files
  * Variable number of positions for sortitem
  * Adapt man page of atop for state selection (add state 'I').
  * Allow thread state 'I' with state selection (key 'Q')
  * Count idle threads as non-interruptible threads
  * Uninitialized index might cause segmentation fault.
  * Support NVMe multipath disk statistics
  * Support page migration counter
  * photosyst.c: fix build on musl
  * Use of struct ethtool_link_settings should be conditional
  * Cosmetic change (source code layout)
  * Various bug fixes and in general add 'thread' to all messages
  * Properly define if interface is virtual or physical
  * Add license info to various include files (solves issue #144)
  * HTTP statistics modified from -h flag to -o flag (#152)
  * Possible buffer overflow with huge number of seconds Number
    of seconds will be limited to 5 positions.
  * Possible buffer overflow with average disk I/O
  * Allow process selection based on specific process states.
  * Correct definition of environment variable LOGOPTS
  * Switch to using curses vw_printw as vwprintw is deprecated
  * Support multiple counters 'allocstall_' in /proc/vmstat.
  * Avoid integer overflow when calculating PSI percentages.
  * Suppress irrelevant counters (solves issue #148)
  * Add the number of OOM kills to the -s report
  * Record the number of process stalls to run memory compaction
  * Make clean removes atopsar now (issue 145)
  * Add counter for the number of OOM kills to the PAG line
  * Add counters for zswap and KSM.
  * ifprop.c: fix build with kernel &lt; 4.6
  * Fix initifprop() when obtaining properties of all interfaces
  * Fixed rounding problems in the average-per-second mode.
- Refresh atop-makefile.patch
- Refresh harden_atop.service.patch
- Call make install instead of make systemdinstall
  Default is systemd now</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1646049600">- Update to 2.7.1:
  * Correct disk stats in atopsar (#182)
  * Explicit type definition in atop.service (#180)</changelog>
</package>
<package pkgid="e0a864c7f724ce636f5283eeb0e5ab360f45b585c4874542300473a35ea4fa4d" name="autotrace" arch="aarch64">
  <version epoch="0" ver="0.31.1" rel="bp154.3.3.1"/>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="crrodriguez@suse.de" date="1240315200">- remove static libraries and "la" files
- cleanup spec file a bit</changelog>
  <changelog author="mls@suse.de" date="1251288000">- make patch0 usage consistent</changelog>
  <changelog author="meissner@suse.de" date="1292846400">- libexif does not seem to be directly required</changelog>
  <changelog author="sbrabec@suse.cz" date="1299499200">- Split according to shared library packaging rules.
- Enabled ImageMagick support.</changelog>
  <changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="coolo@suse.com" date="1362052800">- update license to new format</changelog>
  <changelog author="sfalken@opensuse.org" date="1407844800">- Add 0001-fix_input_png.patch:  Corrects build failure against libpng15
- Updated .spec file to use %make_install macro</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1652443200">- biWidth*biBitCnt integer overflow fix (bsc#1182158,
  CVE-2019-19004, CVE-2019-19004.patch).
- Bitmap double free fix (bsc1182159, CVE-2019-19005,
  CVE-2017-9182, CVE-2017-9190, CVE-2019-19005.patch).</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1667908800">- Added CVE-2022-32323.patch
  * [bsc#1201529, CVE-2022-32323]
  * Fixes Heap overflow in ReadImage()</changelog>
</package>
<package pkgid="97c12c992041cb0ea4bd6777019f276c72f38b44e3cfc40d10d1c658e21b851e" name="autotrace" arch="i586">
  <version epoch="0" ver="0.31.1" rel="bp154.3.3.1"/>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="crrodriguez@suse.de" date="1240315200">- remove static libraries and "la" files
- cleanup spec file a bit</changelog>
  <changelog author="mls@suse.de" date="1251288000">- make patch0 usage consistent</changelog>
  <changelog author="meissner@suse.de" date="1292846400">- libexif does not seem to be directly required</changelog>
  <changelog author="sbrabec@suse.cz" date="1299499200">- Split according to shared library packaging rules.
- Enabled ImageMagick support.</changelog>
  <changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="coolo@suse.com" date="1362052800">- update license to new format</changelog>
  <changelog author="sfalken@opensuse.org" date="1407844800">- Add 0001-fix_input_png.patch:  Corrects build failure against libpng15
- Updated .spec file to use %make_install macro</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1652443200">- biWidth*biBitCnt integer overflow fix (bsc#1182158,
  CVE-2019-19004, CVE-2019-19004.patch).
- Bitmap double free fix (bsc1182159, CVE-2019-19005,
  CVE-2017-9182, CVE-2017-9190, CVE-2019-19005.patch).</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1667908800">- Added CVE-2022-32323.patch
  * [bsc#1201529, CVE-2022-32323]
  * Fixes Heap overflow in ReadImage()</changelog>
</package>
<package pkgid="0efdab31c38c34d5874ddd66d5629fa43d50858ecd9b2d471d2605ca48058e4d" name="autotrace" arch="ppc64le">
  <version epoch="0" ver="0.31.1" rel="bp154.3.3.1"/>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="crrodriguez@suse.de" date="1240315200">- remove static libraries and "la" files
- cleanup spec file a bit</changelog>
  <changelog author="mls@suse.de" date="1251288000">- make patch0 usage consistent</changelog>
  <changelog author="meissner@suse.de" date="1292846400">- libexif does not seem to be directly required</changelog>
  <changelog author="sbrabec@suse.cz" date="1299499200">- Split according to shared library packaging rules.
- Enabled ImageMagick support.</changelog>
  <changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="coolo@suse.com" date="1362052800">- update license to new format</changelog>
  <changelog author="sfalken@opensuse.org" date="1407844800">- Add 0001-fix_input_png.patch:  Corrects build failure against libpng15
- Updated .spec file to use %make_install macro</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1652443200">- biWidth*biBitCnt integer overflow fix (bsc#1182158,
  CVE-2019-19004, CVE-2019-19004.patch).
- Bitmap double free fix (bsc1182159, CVE-2019-19005,
  CVE-2017-9182, CVE-2017-9190, CVE-2019-19005.patch).</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1667908800">- Added CVE-2022-32323.patch
  * [bsc#1201529, CVE-2022-32323]
  * Fixes Heap overflow in ReadImage()</changelog>
</package>
<package pkgid="60b0132ad4d5972ac0f110c453c635d9f3afb729b7197f2066028431cafd0e68" name="autotrace" arch="s390x">
  <version epoch="0" ver="0.31.1" rel="bp154.3.3.1"/>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="crrodriguez@suse.de" date="1240315200">- remove static libraries and "la" files
- cleanup spec file a bit</changelog>
  <changelog author="mls@suse.de" date="1251288000">- make patch0 usage consistent</changelog>
  <changelog author="meissner@suse.de" date="1292846400">- libexif does not seem to be directly required</changelog>
  <changelog author="sbrabec@suse.cz" date="1299499200">- Split according to shared library packaging rules.
- Enabled ImageMagick support.</changelog>
  <changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="coolo@suse.com" date="1362052800">- update license to new format</changelog>
  <changelog author="sfalken@opensuse.org" date="1407844800">- Add 0001-fix_input_png.patch:  Corrects build failure against libpng15
- Updated .spec file to use %make_install macro</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1652443200">- biWidth*biBitCnt integer overflow fix (bsc#1182158,
  CVE-2019-19004, CVE-2019-19004.patch).
- Bitmap double free fix (bsc1182159, CVE-2019-19005,
  CVE-2017-9182, CVE-2017-9190, CVE-2019-19005.patch).</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1667908800">- Added CVE-2022-32323.patch
  * [bsc#1201529, CVE-2022-32323]
  * Fixes Heap overflow in ReadImage()</changelog>
</package>
<package pkgid="91542e3079e50ac0fd6c891c34d8717975c8a7e858024ccc7595ba124a863151" name="autotrace" arch="src">
  <version epoch="0" ver="0.31.1" rel="bp154.3.3.1"/>
  <changelog author="sbrabec@suse.cz" date="1037880000">- Added new package.
- Libtool updates, otherwise cannot create shared   library (autoreconf
  needs extra macro in pstoedit.m4).</changelog>
  <changelog author="ro@suse.de" date="1040904000">- added liblcms-devel to neededforbuild</changelog>
  <changelog author="schwab@suse.de" date="1052568000">- Force libtool update.</changelog>
  <changelog author="ro@suse.de" date="1053950400">- add manpage to filelist</changelog>
  <changelog author="meissner@suse.de" date="1059393600">- added libexif to nfb</changelog>
  <changelog author="adrian@suse.de" date="1073736000">- add %run_ldconfig</changelog>
  <changelog author="ro@suse.de" date="1082894400">- added no-strict-aliasing</changelog>
  <changelog author="ro@suse.de" date="1088424000">- added libjpeg,libtiff to neededforbuild</changelog>
  <changelog author="pth@suse.de" date="1102420800">- Fix AC_DEFUN quoting</changelog>
  <changelog author="sbrabec@suse.cz" date="1105012800">- Provide bitmap_tracing virtual.</changelog>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="crrodriguez@suse.de" date="1240315200">- remove static libraries and "la" files
- cleanup spec file a bit</changelog>
  <changelog author="mls@suse.de" date="1251288000">- make patch0 usage consistent</changelog>
  <changelog author="meissner@suse.de" date="1292846400">- libexif does not seem to be directly required</changelog>
  <changelog author="sbrabec@suse.cz" date="1299499200">- Split according to shared library packaging rules.
- Enabled ImageMagick support.</changelog>
  <changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="coolo@suse.com" date="1362052800">- update license to new format</changelog>
  <changelog author="sfalken@opensuse.org" date="1407844800">- Add 0001-fix_input_png.patch:  Corrects build failure against libpng15
- Updated .spec file to use %make_install macro</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1652443200">- biWidth*biBitCnt integer overflow fix (bsc#1182158,
  CVE-2019-19004, CVE-2019-19004.patch).
- Bitmap double free fix (bsc1182159, CVE-2019-19005,
  CVE-2017-9182, CVE-2017-9190, CVE-2019-19005.patch).</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1667908800">- Added CVE-2022-32323.patch
  * [bsc#1201529, CVE-2022-32323]
  * Fixes Heap overflow in ReadImage()</changelog>
</package>
<package pkgid="d503814b56e94bac28752a2332e9fdd7f51be338c324f6f7794a590d9635e73a" name="autotrace" arch="x86_64">
  <version epoch="0" ver="0.31.1" rel="bp154.3.3.1"/>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="crrodriguez@suse.de" date="1240315200">- remove static libraries and "la" files
- cleanup spec file a bit</changelog>
  <changelog author="mls@suse.de" date="1251288000">- make patch0 usage consistent</changelog>
  <changelog author="meissner@suse.de" date="1292846400">- libexif does not seem to be directly required</changelog>
  <changelog author="sbrabec@suse.cz" date="1299499200">- Split according to shared library packaging rules.
- Enabled ImageMagick support.</changelog>
  <changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="coolo@suse.com" date="1362052800">- update license to new format</changelog>
  <changelog author="sfalken@opensuse.org" date="1407844800">- Add 0001-fix_input_png.patch:  Corrects build failure against libpng15
- Updated .spec file to use %make_install macro</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1652443200">- biWidth*biBitCnt integer overflow fix (bsc#1182158,
  CVE-2019-19004, CVE-2019-19004.patch).
- Bitmap double free fix (bsc1182159, CVE-2019-19005,
  CVE-2017-9182, CVE-2017-9190, CVE-2019-19005.patch).</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1667908800">- Added CVE-2022-32323.patch
  * [bsc#1201529, CVE-2022-32323]
  * Fixes Heap overflow in ReadImage()</changelog>
</package>
<package pkgid="f135752ab17e1731beabd7afeb4cb8efca38e173c9b473e9ab21583e58944339" name="autotrace-devel" arch="aarch64">
  <version epoch="0" ver="0.31.1" rel="bp154.3.3.1"/>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="crrodriguez@suse.de" date="1240315200">- remove static libraries and "la" files
- cleanup spec file a bit</changelog>
  <changelog author="mls@suse.de" date="1251288000">- make patch0 usage consistent</changelog>
  <changelog author="meissner@suse.de" date="1292846400">- libexif does not seem to be directly required</changelog>
  <changelog author="sbrabec@suse.cz" date="1299499200">- Split according to shared library packaging rules.
- Enabled ImageMagick support.</changelog>
  <changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="coolo@suse.com" date="1362052800">- update license to new format</changelog>
  <changelog author="sfalken@opensuse.org" date="1407844800">- Add 0001-fix_input_png.patch:  Corrects build failure against libpng15
- Updated .spec file to use %make_install macro</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1652443200">- biWidth*biBitCnt integer overflow fix (bsc#1182158,
  CVE-2019-19004, CVE-2019-19004.patch).
- Bitmap double free fix (bsc1182159, CVE-2019-19005,
  CVE-2017-9182, CVE-2017-9190, CVE-2019-19005.patch).</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1667908800">- Added CVE-2022-32323.patch
  * [bsc#1201529, CVE-2022-32323]
  * Fixes Heap overflow in ReadImage()</changelog>
</package>
<package pkgid="78a3940a35e4ea5679c67c3e21667f0d930d7da1e21c0fb750498381b2e56b3a" name="autotrace-devel" arch="i586">
  <version epoch="0" ver="0.31.1" rel="bp154.3.3.1"/>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="crrodriguez@suse.de" date="1240315200">- remove static libraries and "la" files
- cleanup spec file a bit</changelog>
  <changelog author="mls@suse.de" date="1251288000">- make patch0 usage consistent</changelog>
  <changelog author="meissner@suse.de" date="1292846400">- libexif does not seem to be directly required</changelog>
  <changelog author="sbrabec@suse.cz" date="1299499200">- Split according to shared library packaging rules.
- Enabled ImageMagick support.</changelog>
  <changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="coolo@suse.com" date="1362052800">- update license to new format</changelog>
  <changelog author="sfalken@opensuse.org" date="1407844800">- Add 0001-fix_input_png.patch:  Corrects build failure against libpng15
- Updated .spec file to use %make_install macro</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1652443200">- biWidth*biBitCnt integer overflow fix (bsc#1182158,
  CVE-2019-19004, CVE-2019-19004.patch).
- Bitmap double free fix (bsc1182159, CVE-2019-19005,
  CVE-2017-9182, CVE-2017-9190, CVE-2019-19005.patch).</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1667908800">- Added CVE-2022-32323.patch
  * [bsc#1201529, CVE-2022-32323]
  * Fixes Heap overflow in ReadImage()</changelog>
</package>
<package pkgid="ef98ec870269410e17bddab5ac7c045909fd804669645c846faaf711a6e8fcd2" name="autotrace-devel" arch="ppc64le">
  <version epoch="0" ver="0.31.1" rel="bp154.3.3.1"/>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="crrodriguez@suse.de" date="1240315200">- remove static libraries and "la" files
- cleanup spec file a bit</changelog>
  <changelog author="mls@suse.de" date="1251288000">- make patch0 usage consistent</changelog>
  <changelog author="meissner@suse.de" date="1292846400">- libexif does not seem to be directly required</changelog>
  <changelog author="sbrabec@suse.cz" date="1299499200">- Split according to shared library packaging rules.
- Enabled ImageMagick support.</changelog>
  <changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="coolo@suse.com" date="1362052800">- update license to new format</changelog>
  <changelog author="sfalken@opensuse.org" date="1407844800">- Add 0001-fix_input_png.patch:  Corrects build failure against libpng15
- Updated .spec file to use %make_install macro</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1652443200">- biWidth*biBitCnt integer overflow fix (bsc#1182158,
  CVE-2019-19004, CVE-2019-19004.patch).
- Bitmap double free fix (bsc1182159, CVE-2019-19005,
  CVE-2017-9182, CVE-2017-9190, CVE-2019-19005.patch).</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1667908800">- Added CVE-2022-32323.patch
  * [bsc#1201529, CVE-2022-32323]
  * Fixes Heap overflow in ReadImage()</changelog>
</package>
<package pkgid="218bd6057d14011e26341b6571bda4aa879b2c28ef03ae13ca861a0ce4fabeea" name="autotrace-devel" arch="s390x">
  <version epoch="0" ver="0.31.1" rel="bp154.3.3.1"/>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="crrodriguez@suse.de" date="1240315200">- remove static libraries and "la" files
- cleanup spec file a bit</changelog>
  <changelog author="mls@suse.de" date="1251288000">- make patch0 usage consistent</changelog>
  <changelog author="meissner@suse.de" date="1292846400">- libexif does not seem to be directly required</changelog>
  <changelog author="sbrabec@suse.cz" date="1299499200">- Split according to shared library packaging rules.
- Enabled ImageMagick support.</changelog>
  <changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="coolo@suse.com" date="1362052800">- update license to new format</changelog>
  <changelog author="sfalken@opensuse.org" date="1407844800">- Add 0001-fix_input_png.patch:  Corrects build failure against libpng15
- Updated .spec file to use %make_install macro</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1652443200">- biWidth*biBitCnt integer overflow fix (bsc#1182158,
  CVE-2019-19004, CVE-2019-19004.patch).
- Bitmap double free fix (bsc1182159, CVE-2019-19005,
  CVE-2017-9182, CVE-2017-9190, CVE-2019-19005.patch).</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1667908800">- Added CVE-2022-32323.patch
  * [bsc#1201529, CVE-2022-32323]
  * Fixes Heap overflow in ReadImage()</changelog>
</package>
<package pkgid="08ef307273f6e3ed7cad27bb9b317c4967456122f1b6bda812bf37ac4c4dd475" name="autotrace-devel" arch="x86_64">
  <version epoch="0" ver="0.31.1" rel="bp154.3.3.1"/>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="crrodriguez@suse.de" date="1240315200">- remove static libraries and "la" files
- cleanup spec file a bit</changelog>
  <changelog author="mls@suse.de" date="1251288000">- make patch0 usage consistent</changelog>
  <changelog author="meissner@suse.de" date="1292846400">- libexif does not seem to be directly required</changelog>
  <changelog author="sbrabec@suse.cz" date="1299499200">- Split according to shared library packaging rules.
- Enabled ImageMagick support.</changelog>
  <changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="coolo@suse.com" date="1362052800">- update license to new format</changelog>
  <changelog author="sfalken@opensuse.org" date="1407844800">- Add 0001-fix_input_png.patch:  Corrects build failure against libpng15
- Updated .spec file to use %make_install macro</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1652443200">- biWidth*biBitCnt integer overflow fix (bsc#1182158,
  CVE-2019-19004, CVE-2019-19004.patch).
- Bitmap double free fix (bsc1182159, CVE-2019-19005,
  CVE-2017-9182, CVE-2017-9190, CVE-2019-19005.patch).</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1667908800">- Added CVE-2022-32323.patch
  * [bsc#1201529, CVE-2022-32323]
  * Fixes Heap overflow in ReadImage()</changelog>
</package>
<package pkgid="56dea2ed524509fad9b3192d5473b8102366b8454283552f3131bc04641f2b67" name="cacti" arch="noarch">
  <version epoch="0" ver="1.2.22" rel="bp154.2.3.1"/>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1567425600">-Build version 1.2.6
  - issue#2794: Graph template not saved on graph edit
  - issue#2825: "innodb_doublewrite = off" possibly dangerous recommendation
  - issue#2829: PHP recommendations always see memory limit as unlimited
  - issue#2830: Disabled Top/Bottom external links should not be displayed
  - issue#2832: Install/Upgrade log does not show anything
  - issue#2833: Undefined index can occur when data source does not have an
    snmp_index
  - issue#2834: Boost performance drops on very large systems
  - issue#2835: When creating graphs and inneficient query is causing long
    creation times
  - issue#2837: Sunrise theme does not render checkboxes 100% correctly
  - issue#2838: jQueryMultiselect does not match upstream due to forking
  - issue#2839: Non regular expression search filters don't support international
    characters
  - issue#2841: Total count is wrong after searching for External Link pages
  - issue#2843: DSStats reruns Daily Aggregation every minute
  - issue#2844: Autocomplete settings for passwords are not properly defined
  - issue#2845: Data Template can't be edited when it is in use
  - issue#2846: Allow tooltips for section headers with 'question' icon
  - issue#2847: Permanently convert an Aggregate to a regular graph
  - issue#2848: Aggregate graphs get clipped due to incorrect date range
  - issue#2856: Aggregate issues with very long RRDtool command lines
  - issue#2857: When trying to find the best index to use, a 'must implement
    Countable' warning appears
  - issue#2860: When testing remote poller connections during install, undefined
    variable warning can occur
  - issue#2862: Automation does not calculate network information correctly for
    single hosts
  - issue#2866: Add poller ID to subject for admin notifications
  - issue#2869: When creating aggregates from Graphs, JavaScript issues can occur
  - issue#2872: Add support for MySQL 8 and use of grouping as name for a column
  - issue#2875: Undefined variable when removing spikes in some cases
  - issue#2877: When attempting to send report, undefined function 'get_tinespan' messages appear
  - issue#2878: Function get_magic_quotes_gpc() is now deprecated in PHP 7.4
  - issue#2879: Switching from authPriv to authNoPriv produces error when saving
  - issue#2884: Replication continues to occur when poller has been disabled by sysres-dev
  - issue#2891: Script server script ss_fping.php generates error when not called
    by script server
  - issue#2895: Percentile calculation is incorrect on Graphs with multiple Data
    Sources from different RRDs
  - issue#2901: Poller overrun warning message is badly worded
  - issue#2902: Mailer incorrectly reports it is sending to noone
  - issue#2903: PHP recommendations can generate a warning causing JSON issues
  - issue#2905: Sorting plugins by version can lead to unexpected ordering
  - issue#2907: SSL column for multiple pollers can be incorrectly set causing SQL errors
  - issue#2908: When URL_PATH is blank, it should assume that it is '/'
  - issue#2909: Correct usage of affect vs effect in strings
  - issue#2910: Can not show user menu when in portrait mode on mobile devices
  - issue#2911: Graph variables are not always encoded to JSON properly resulting in warnings
  - issue#2912: Navigation cache can sometimes be corrupted resulting in a non-array value
  - issue#2913: When adding new graphs, the type of graph is not remembered
  - issue#2917: Action icons next to graphs can sometimes become unselectable due to zoom
  - issue#2919: When refreshing menu, selected items are sometimes lost and submenu
    items can become hidden</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1569844800">-Build version 1.2.7
  - security#2964: CVE-2019-16723 Security issue allows to view all graphs
  - issue#1181: When opening the Scheduler, it may appear off screen when
    opened near the bottom of a window
  - issue#2894: When using Remote Data Collectors, database information and
    recommendations may show Incorrect values
  - issue#2895: When using data sources from different RRDs, Percentile
    calculation may be incorrect
  - issue#2899: When displaying a form, variable substitution may not always
    work as expected
  - issue#2922: When running a data query, the result may come back as undefined
  - issue#2925: When using consolidation functions, retrieving the first step
    can cause errors
  - issue#2926: When editing a graph, variable validation errors may prevent
    changes from being saved
  - issue#2929: Boost performance may become poor even in single server mode
  - issue#2930: RRDtool can generate errors to standard output which can corrupt images
  - issue#2932: When RRDTool generates an error creating an image, it is not
    always reportedly properly
  - issue#2936: Installer will loop when number of tables exceeds PHP's max_input_vars limit
  - issue#2938: Under CentOS packages, upgrade_database.php script uses incorrect
    location for DB upgrade scripts
  - issue#2940: Images are not always properly sized until the page size changes
  - issue#2949: Order icons may not be properly aligned
  - issue#2951: Allow legends to be modified for Aggregate Graphs
  - issue#2958: Drop down autocomplete lists do not always open as expected
  - issue#2961: When syncing device templates, undefined function may be raised
  - issue#2963: When running ss_cpoller script, avgTime incorrect returns maxTime
  - issue#2966: Realtime popup windows do not always honor settings
  - issue#2967: When using Spikekill, gap and range fill are not operating as expected
  - issue#2970: When a user edits their profile, buttons may appear as unusable whilst
    still being enabled
  - issue#2973: User menu does not always display properly on mobile devices
  - issue#2974: Script Server can raise unexpected warnings when 'arg_num_indexes'
    set but not found in data source
  - issue#2975: Datasource Debug does not properly handle European numbers in
    certain circumstances
  - issue#2976: Boost messages should be stored in their own log file
  - issue#2977: Data updates with past timestamps can cause boost errors
  - issue#2978: Moving hosts between data collectors is slow
  - issue#2979: Multi Output Fields are not parsed correctly
  - issue#2984: When checking SQL fields, value was not always primed
  - issue#2986: Selecting 'Devices' menu pick closes 'Management' menu
  - feature#2943: Allow all Data Queries of a device to be re-indexed at once
  - feature#2952: If device is down or threshold breached, highlight in tree view
  - feature#2985: Update phpseclib to 2.0.23</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- cacti 1.2.8:
  * CVE-2019-17357: When viewing graphs, some input variables were
    not properly checked (SQL injection possible) [boo#1158990]
  * CVE-2019-17358: Unsafe deserialisation of data [boo#1158992]
  * When using HTTPS, secure cookie to prevent potential weakness
  * various bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1581768000">- cacti 1.2.9:
  * CVE-2020-7106: Lack of escaping on some pages could lead to XSS
    exposure (boo#1161297)
  * CVE-2020-7237: Remote Code Execution due to input validation
    failure in Performance Boost Debug Log (boo#1161297)
  * many bug fixes</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1584273600">- cacti 1.2.10:
  * CVE-2020-8813: when guest users have access to realtime graphs,
    remote code could be executed (boo#1164675)
  * When using User Domains, global template user is used instead of
    the configured domain template user
  * Unix timestamps after Sep 13 2020 are rejected as graph start/end
    arguments
  * many bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586606400">- cacti 1.2.11:
  * security fixes and hardening (boo#1169215)
    + Add SameSite support for cookies
    + Cookie should be properly verified against password
    + CSRF at Admin Email
    + Improper Access Control on disabling a user
    + Update to jQuery 3.4.1 to resolve XSS issues with jQuery 3.3.1
  * a number of bug fixes
  * feature additions
    + Allow system uptime to be a variable for use with graphs
    + Add Refresh Interval to Data Collectors display
    + Add Location based filtering
    + Allow for Purging of Data Source Statistics from the GUI
    + Restore ability to duplicate a data profile
    + Enhance table navigation bars to support systems with larger number of items
    + Increase length of Graph Item 'value' field to support pango-markup better
    + Allow Basic Auth Accounts to be mapped by CSV file
    + Make form elements under checkbox_groups flow using flex grid style
    + Set the domain attribute to secure cookies for the 'remember me' option
    + Enhance the "Graph Debug Mode" to display RRDtool Command lengths and excess warnings</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1588852800">- cacti 1.2.12:
  * CVE-2020-7106: Lack of escaping of color items can lead to XSS
    exposure (boo#1163749)
  * Fix multiple graphing bugs and web UI issues
  * Fix multiple warnings, PHP Exceptions and errors
  * Content-Security-Policy prevents External Links from being opened
  * Prevent runtime memory issues by increasing memory limit
  * Improve SNMPv3 handling</changelog>
  <changelog author="Lars Vogdt &lt;lars@linux-schulserver.de&gt;" date="1589198400">- switch from cron to systemd timers (boo#1115436):
  + cacti-cron.timer
  + cacti-cron.service
- introduce rpmlintrc for obvious false positives from rpmlint
  + cacti-rpmlintrc
- use fdupes to reduce amount of needed/wasted space
- re-introduce RPM Group to avoid huge rpmlint complains on 15.1
- remove .gitignore and .gitattributes files (not needed)
- avoid potential root escalation on systems with fs.protected_hardlinks=0
  (boo#1154087): handle directory permissions in file section instead
  of using chown during post installation
- rewrote apache configuration to get rid of .htaccess files and
  explicitely disable directory permissions per default
  (only allow a limited, well-known set of directories)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1594728000">- cacti 1.2.13:
  * Query XSS vulnerabilities require vendor package update
    (CVE-2020-11022 / CVE-2020-11023)
  * Lack of escaping on some pages can lead to XSS exposure
  * Update PHPMailer to 6.1.6 (CVE-2020-13625)
  * SQL Injection vulnerability due to input validation failure when
    editing colors (CVE-2020-14295, boo#1173090)
  * Lack of escaping on template import can lead to XSS exposure</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1596456000">- cacti 1.2.14:
  * Poller keeps using old IP address for a device
  * poller bug fixes and various display fixes
  * Fix XSS vulnerability due to improper escaping of error message
    during template import preview (boo#1174850, CVE-2020-25706)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1605096000">- cacti 1.2.15, fixing the following bugs:
  * When editing Maximum OIDs Per Get Request, blank value can cause errors
  * Boost may run more often than it should
  * Recache Event Loop can cause Interface Graphs to show gaps
  * When searching Graph Tree's, non matching devices remain visible
  * Page validation errors may occur when opening real time graphs
  * External Links do not always open if they are still open from previous usage
  * Cultural changes to various word usage
  * Replicate deleted device status instead of poller sync
  * Description field allows more characters entered than is stored
  * When installing or upgrading, LDAP functions may not always be included properly
  * Unable to remove discovered device
  * When installing or upgrading, PHP recommendations may not always return a valid value
  * Graph Templates has duplicate SQL delete statement
  * When syncing to remote poller, missing function errors may occur
  * When removing devices from remote pollers, devices may reappear without details
  * When removing devices, array errors may sometimes be recorded
  * Variable injection does not always work as expected
  * Editing Data Queries with multiple data templates can give errors about Suggested values
  * Progress bar does not provide enough visual information during long page loads
  * Some themes do not allow for a way to see which user is currently signed in
  * When viewing tables, allow users to force all columns to be visible
  * Column sizing is being lost between pages refreshes
  * When viewing input methods table, no ID is shown to help identify which method is being viewed
  * Filters do not always respect using keyboard to initiate searching
  * When exporting a data query, an invalid column name error can sometimes be shown
  * When checking if a view is allowed, having no session can result in errors
  * When removing devices via the CLI, undefined variable errors may be seen
  * Real Time Graphs may cause invalid index errors
  * On newer versions of MySQL/MariaDB, 'system' keyword can cause issues
  * Plugin setup can generate errors when reading options via system function
  * Plugin version numbers can be unexpectedly truncated
  * When PHP Session is set to autostart, an error can be reported as Cacti attempts to start it
  * When removing multiple items, selection process does not always work
  * When exporting colors, the indicator is not always removed upon completion
  * Unable to pass tree and leaf ID to 'graph_button' hook
  * When performing maintenance, various errors may sometimes be seen
  * When Guest User setting is active, current user is not always properly set
  * When installing Cacti, minor errors in text can be seen
  * Numbers are not always formatted properly when there are no decimal places
  * When viewing Real Time Graphs, an undefined index error may be recorded
  * Minor memory leaks and refresh issues when zooming on graphs
  * Real Time Graphs may sometimes fail due to folder permissions
  * Navigation can sometimes occur unexpectedly due to background timers
  * Trees management screen not reporting correct number of trees
  * Tree sequences can sometimes skip numbers during resorting
  * Guest user selection should not allow setting the currently logged in user
  * Links in Table Headers do not show clearly when in modern theme
  * Under some cases tree logic leads to undefined index errors
  * Cacti Data Debug can show errors if the Data Source is damaged or has been removed
  * When importing a data query, an invalid column name error can sometimes be shown
  * When using shift functions on graphs, negative values are not allowed
  * Correct issue when file is unreadable reporting no file was specified
  * Orphaned Plugins have no option to be removed
  * Update MySQL recommendations for Character Set and Colation
  * Correct sorting of IP addresses to be numeric not alpha by JamesTilt
  * Saving a device should not always repopulate the poller cache</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1606996800">- cacti 1.2.16:
  * When generating a report, the Cascade to Branches function does not as expected
  * When viewing graphs, automatic refresh so not always work as expected
  * Realtime graph pop up counter bug
  * Undefined variable errors may occur when creating a new datasource
  * The cli-based installer does not exit with a non-zero exit code when error occurs
  * When an export is complete, sometimes the progress bar remains
  * When enabling many devices, a threshold can be reached causing a slowdown in the process
  * When performing actions against Devices, replicated device information could sometimes be lost
  * When using API to rename a tree node, backtrace may be incorrectly shown
  * When searching, valid pages can sometimes be shown as empty by ddb4github
  * When exporting data from graphs, not all data was properly included
  * Graph Templates filter is not updated after new graph created by ddb4github
  * Username and password on the login page is not visible in Classic theme
  * Improve wording of concurrent process and thread settings
  * Location filter should remove blank entries by ddb4github
  * When syncing data collectors, a reindex event may be triggered unnecessarily
  * Automation Networks allows discovery of invalid IP addresses
  * When changing permissions of the current user, they don't take effect immediately
  * When reindexing a device, an incorrect page was sometimes displayed
  * When repairing database, audit_database.php does not add missing columns
  * Log page should not be empty if no log info exists
  * During upgrade, there are times when realms can be duplicated leading to SQL errors
  * When using ping.php, UDP response times are not interpreted properly by hypnotoad
  * Improve warning you get when attempting to view a log file you don't have access to
  * When replicating files, scripts are not marked as executable
  * When creating plugin tables, collation is not set properly
  * Update c3.js to version 0.7.20
  * Update Chart.js to version 2.9.4
  * Update phpseclib to version 2.0.29
  * Update PHPMailer to version 6.1.8
  * Use LSB shebang notation for cli scripts
  * Add support for cactid daemon based launcher
  * Add ability to hide the Graph Drilldown icons by datatecuk
  * Add hooks for plugins to show custom Graph Source and custom Template URL (List View)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1608292800">- fix httpd startup errors due to mismatched configuration
  directives boo#1175314</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1620216000">- cacti 1.2.17:
  * Fix incorrect handling of fields led to potential XSS issues
  * CVE-2020-35701: Fix SQL Injection vulnerability (boo#1180804)
  * Fix various XSS issues with HTML Forms handling
  * Fix handling of Daylight Saving Time changes
  * Multiple fixes and extensions to plugins
  * Fix multiple display, export, and input validation issues
  * SNMPv3 Password field was not correctly limited
  * Improved regular expression handling for searcu
  * Improved support for RRDproxy
  * Improved behavior on large systems
  * MariaDB/MysQL: Support persistent connections and improve
    multiple operations and options
  * Add Theme 'Midwinter'
  * Modify automation to test for data before creating graphs
  * Add hooks for plugins to show customize graph source and customize
    template url
  * Allow CSRF security key to be refreshed at command line
  * Allow remote pollers statistics to be cleared
  * Allow user to be automatically logged out after admin defined
    period
  * When replicating, ensure Cacti can detect and verify replica
    servers</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1625918400">- cacti 1.2.18:
  * CVE-2020-14424: Lack of escaping on template import can lead to
    XSS exposure under 'midwinter' theme (boo#1188188)
  * Real time graphs can expose XSS issue</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1636200000">- cacti 1.2.19:
  * Further fixes for grave character security protection (boo#1192408)
  * Fix Over aggressive escaping causing menu visibility issues on Create Device page
  * Add SHA256 and AES256 security levels for SNMP polling
  * Import graph template(Preview Only) show color_id new value as a blank area
  * Fix Editing graphs errors due to missing sequence
  * Fix 2hen hovering over a Tree Graph, row shows same highlighting as Graph Edit screen
  * Fix 2hen RealTime is not active, console errors may appear
  * Fix race conditions may occur when multiple RRDtool processes are running
  * Fix errors creating graphs from templates
  * Fix errors when duplicating reports
  * Fix Boost may be blocked by overflowing poller_output table
  * Fix Template import may be blocked due to unmet dependency warnings with snmp ports
  * Fix Newer MySQL versions may error if committing a transaction when not in one
  * Fix SNMP Agent may not find a cache item
  * Fix Correct issues running under PHP 8.x
  * Fix When polling is disabled, boost may crash and creates many arch tables
  * Fix When poller runs, memory tables may not always be present
  * Fix Timezones may sometimes be incorrectly calculated
  * Fix Allow monitoring IPv6 with interface graphs
  * Fix When a data source uses a Data Input Method, those without a mapping should be flagged
  * Fix When RRDfile is not yet created, errors may appear when displaying the graph
  * Fix Cacti missing key indexes that result in Preset pages slowdowns
  * Fix Data Sources page shows no name when Data Source has no name cache
  * Fix db_update_table function can not alter table from signed to unsigned
  * Fix data remains in poller_output table even if it's flushed to rrd files
  * Fix Parameter list for lib/database.php:db_connect_real() is not correct in 3 places
  * Fix Offset is a reserved word in MariaDB 10.6 affecting Report
  * Fix Rendering large trees slowed due to lack of permission caching
  * Fix Error on interpretation of snmpUtime, when to big
  * Fix Applying right axis formatting creates an error-image
  * Fix Unable to Save Graph Settings from the Graphs pages
  * Fix Graph Template Cache is nullified too often when Graph Automation is running
  * Fix When Adding a Data Query to a Device, no Progress Spinner is shown
  * Fix New Browser Breaks Plugins that depend on non UTC date time data
  * Fix errors when testing remote poller connectivity
  * Fix errors when renaming poller
  * Fix Removing spikes by Variance does not appear to be working beyond the first RRA
  * Fix LDAP API lacks timeout options leading to bad login experiences
  * Add a normal/wrap class for general use
  * Limit File Types available for Template Import operations
  * Fix Cacti does not provide an option of providing a client side certificate for LDAP/AD authentication
  * Support Stronger Encryption Available Starting in Net-SNMP v5.8
  * Allow Cacti to use multiple possible LDAP servers
  * Add a 15 minute polling/sampling interval
  * Provide additional admin email notifications
  * Add warnings for undesired changes to plugin hook return values
  * When creating a Graph, make testing the Data Sources optional by Template
  * Update phpseclib to 2.0.33
  * Update jstree.js to 3.3.12
  * Improve performance of Cacti poller on heavily loaded systems
  * MariaDB recommendations need some tuning for recent updates</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1650628800">- Update to 1.2.20
  * Security fix for CVE-2022-0730, boo#1196692
    Under certain ldap conditions, Cacti authentication can be
    bypassed with certain credential types.
  * Security fix: Device, Graph, Graph Template,
    and Graph Items may be vulnerable to XSS issues
  * Security fix: Lockout policies are not properly applied to LDAP
    and Domain Users
  * Security fix: When using 'remember me' option, incorrect realm
    may be selected
  * Security fix: User and Group maintenance are vulnerable to SQL attacks
  * Security fix: Color Templates are vulnerable to XSS attack
  * Features:
  * When creating a Data Source Profile, allow additional choices for Heartbeat
  * Change select all options to use Font Awesome icons
  * Improve spine performance by storing the total number of system snmp_ports in use
  * Prevent Template User Accounts from being Removed
  * When managing by users, allow filtering by Realm
  * Allow plugins to supply template account names
  * When viewing logs, additional message types should be filterable
  * When creating a Graph Template Item, allow filtering by Data Template
  * Allow language handler to be selected via UI
  * Updated Device packages for Synology, Citrix NetScaler, Cisco ASA/Cisco
  * Add Advanced Ping Graph Template to initial Installable templates
  * Add LDAP Debug Mode option
  * Allow Reports to include devices not on a Tree
  * Allow Basic Authentication to display custom failure message
  * Fix: When replicating data during installation/upgrade,
    system may appear to hang
  * Fix: Graph Template Items may have duplicated entries
  * Fix: Unable to Save Graph Settings
  * Fix: Script Server may crash if an OID is missing or unavailable
  * Fix: When system-wide polling is disabled,
    remote pollers may fail to sync changed settings
  * Fix: When updating poller name, duplicate name protection may be over zealous
  * Fix: Titles may show "Missing Datasource" incorectly
  * Fix: Checking for MIB Cache can cause crashes
  * Fix: Polling cycles may not always complete as expected
  * Fix: When viewing graph data, non-numeric values may appear
  * Fix: Utilities view has calculation errors when there are no data sources
  * Fix: When editing Reports, drag and drop may not function as intended
  * Fix: When data drive is full, viewing a Graph can result in errors
  * Various other bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1653825600">- cacti 1.2.21:
  * Add a CLI script to install/enable/disable/uninstall plugins
  * Add log message when purging DS stats and poller repopulate
  * A collection of bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1664712000">- cacti 1.2.22, providing one security fix, a number of bug fixes
  and a collection of improvements:
  * When creating new graphs, cross site injection is possible
    (boo#1203952)
  * When creating user from template, multiple Domain FullName and
    Mail are not propagated
  * Nectar Aggregate 95th emailed report broken
  * Boost may not find archive tables correctly
  * Users may be unable to change their password when forced during
    a login
  * Net-SNMP Memory Graph Template has Wrong GPRINT
  * Search in tree view unusable on larger installations
  * Increased bulk insert size to avoid partial inserts and potential
    data loss.
  * Call to undefined function boost_debug in Cacti log
  * When no guest template is set, login cookies are not properly set
  * Later RRDtool releases do not need to check last_update time
  * Regex filters are not always long enough
  * Domains based LDAP and AD Fullname and Email not auto-populated
  * Cacti polling and boost report the wrong number of Data Sources
    when Devices are disabled
  * When editing Graph Template Items there are cases where VDEF's
    are hidden when they should be shown
  * Database SSL setting lacks default value
  * Update default path cacti under *BSD by xmacan
  * Web Basic authentication not creating template user
  * Unable to change the Heartbeat of a Data Source Profile
  * Tree Search Does Not Properly Search All Trees
  * When structured paths are setup, RRDfiles may not always be
    created when possible
  * When parsing the logs, caching would help speed up processing
  * Deprecation warnings when attempting real-time Graphs with PHP8.1
  * Custom Timespan is lost when clicking other tree branches
  * Non device based Data Sources not being polled
  * When Resource XML file inproperly formatted, graph creation can
    fail with errors
  * Update code style to support PHP 8 requirements
  * None" shows all graphs
  * Realtime popup window experiences issues on some browsers
  * Auth settings do not always properly reflect the options selected
    by ddb4github
  * MySQL can cause cacti to become stalled due to locking issues
  * Boost process can get hung under rare conditions until the poller
    times out
  * Exporting graphs under PHP 8 can cause errors
  * Host table has wrong default for disabled and deleted columns
  * RRD storage paths do not scale properly
  * When importing, make it possible to only import certain
    components
  * Update change_device script to include new features by
    bmfmancini
  * Make help pages use latest online version wherever possible
  * Cacti should show PHP INI locations during install
  * Detect PHP INI values that are different in the INI vs running
    config
  * Added Gradient Color support for AREA charts by thurban
  * Update CDEF functions for RRDtool
  * When boost is running, it's not clear which processes are
    running and how long they have to complete</changelog>
</package>
<package pkgid="fce26d638fe92d0ff95e21a3b1452e41e29c73a8f6982baa4ab5c3c1d08dc3f1" name="cacti" arch="src">
  <version epoch="0" ver="1.2.22" rel="bp154.2.3.1"/>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1567425600">-Build version 1.2.6
  - issue#2794: Graph template not saved on graph edit
  - issue#2825: "innodb_doublewrite = off" possibly dangerous recommendation
  - issue#2829: PHP recommendations always see memory limit as unlimited
  - issue#2830: Disabled Top/Bottom external links should not be displayed
  - issue#2832: Install/Upgrade log does not show anything
  - issue#2833: Undefined index can occur when data source does not have an
    snmp_index
  - issue#2834: Boost performance drops on very large systems
  - issue#2835: When creating graphs and inneficient query is causing long
    creation times
  - issue#2837: Sunrise theme does not render checkboxes 100% correctly
  - issue#2838: jQueryMultiselect does not match upstream due to forking
  - issue#2839: Non regular expression search filters don't support international
    characters
  - issue#2841: Total count is wrong after searching for External Link pages
  - issue#2843: DSStats reruns Daily Aggregation every minute
  - issue#2844: Autocomplete settings for passwords are not properly defined
  - issue#2845: Data Template can't be edited when it is in use
  - issue#2846: Allow tooltips for section headers with 'question' icon
  - issue#2847: Permanently convert an Aggregate to a regular graph
  - issue#2848: Aggregate graphs get clipped due to incorrect date range
  - issue#2856: Aggregate issues with very long RRDtool command lines
  - issue#2857: When trying to find the best index to use, a 'must implement
    Countable' warning appears
  - issue#2860: When testing remote poller connections during install, undefined
    variable warning can occur
  - issue#2862: Automation does not calculate network information correctly for
    single hosts
  - issue#2866: Add poller ID to subject for admin notifications
  - issue#2869: When creating aggregates from Graphs, JavaScript issues can occur
  - issue#2872: Add support for MySQL 8 and use of grouping as name for a column
  - issue#2875: Undefined variable when removing spikes in some cases
  - issue#2877: When attempting to send report, undefined function 'get_tinespan' messages appear
  - issue#2878: Function get_magic_quotes_gpc() is now deprecated in PHP 7.4
  - issue#2879: Switching from authPriv to authNoPriv produces error when saving
  - issue#2884: Replication continues to occur when poller has been disabled by sysres-dev
  - issue#2891: Script server script ss_fping.php generates error when not called
    by script server
  - issue#2895: Percentile calculation is incorrect on Graphs with multiple Data
    Sources from different RRDs
  - issue#2901: Poller overrun warning message is badly worded
  - issue#2902: Mailer incorrectly reports it is sending to noone
  - issue#2903: PHP recommendations can generate a warning causing JSON issues
  - issue#2905: Sorting plugins by version can lead to unexpected ordering
  - issue#2907: SSL column for multiple pollers can be incorrectly set causing SQL errors
  - issue#2908: When URL_PATH is blank, it should assume that it is '/'
  - issue#2909: Correct usage of affect vs effect in strings
  - issue#2910: Can not show user menu when in portrait mode on mobile devices
  - issue#2911: Graph variables are not always encoded to JSON properly resulting in warnings
  - issue#2912: Navigation cache can sometimes be corrupted resulting in a non-array value
  - issue#2913: When adding new graphs, the type of graph is not remembered
  - issue#2917: Action icons next to graphs can sometimes become unselectable due to zoom
  - issue#2919: When refreshing menu, selected items are sometimes lost and submenu
    items can become hidden</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1569844800">-Build version 1.2.7
  - security#2964: CVE-2019-16723 Security issue allows to view all graphs
  - issue#1181: When opening the Scheduler, it may appear off screen when
    opened near the bottom of a window
  - issue#2894: When using Remote Data Collectors, database information and
    recommendations may show Incorrect values
  - issue#2895: When using data sources from different RRDs, Percentile
    calculation may be incorrect
  - issue#2899: When displaying a form, variable substitution may not always
    work as expected
  - issue#2922: When running a data query, the result may come back as undefined
  - issue#2925: When using consolidation functions, retrieving the first step
    can cause errors
  - issue#2926: When editing a graph, variable validation errors may prevent
    changes from being saved
  - issue#2929: Boost performance may become poor even in single server mode
  - issue#2930: RRDtool can generate errors to standard output which can corrupt images
  - issue#2932: When RRDTool generates an error creating an image, it is not
    always reportedly properly
  - issue#2936: Installer will loop when number of tables exceeds PHP's max_input_vars limit
  - issue#2938: Under CentOS packages, upgrade_database.php script uses incorrect
    location for DB upgrade scripts
  - issue#2940: Images are not always properly sized until the page size changes
  - issue#2949: Order icons may not be properly aligned
  - issue#2951: Allow legends to be modified for Aggregate Graphs
  - issue#2958: Drop down autocomplete lists do not always open as expected
  - issue#2961: When syncing device templates, undefined function may be raised
  - issue#2963: When running ss_cpoller script, avgTime incorrect returns maxTime
  - issue#2966: Realtime popup windows do not always honor settings
  - issue#2967: When using Spikekill, gap and range fill are not operating as expected
  - issue#2970: When a user edits their profile, buttons may appear as unusable whilst
    still being enabled
  - issue#2973: User menu does not always display properly on mobile devices
  - issue#2974: Script Server can raise unexpected warnings when 'arg_num_indexes'
    set but not found in data source
  - issue#2975: Datasource Debug does not properly handle European numbers in
    certain circumstances
  - issue#2976: Boost messages should be stored in their own log file
  - issue#2977: Data updates with past timestamps can cause boost errors
  - issue#2978: Moving hosts between data collectors is slow
  - issue#2979: Multi Output Fields are not parsed correctly
  - issue#2984: When checking SQL fields, value was not always primed
  - issue#2986: Selecting 'Devices' menu pick closes 'Management' menu
  - feature#2943: Allow all Data Queries of a device to be re-indexed at once
  - feature#2952: If device is down or threshold breached, highlight in tree view
  - feature#2985: Update phpseclib to 2.0.23</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- cacti 1.2.8:
  * CVE-2019-17357: When viewing graphs, some input variables were
    not properly checked (SQL injection possible) [boo#1158990]
  * CVE-2019-17358: Unsafe deserialisation of data [boo#1158992]
  * When using HTTPS, secure cookie to prevent potential weakness
  * various bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1581768000">- cacti 1.2.9:
  * CVE-2020-7106: Lack of escaping on some pages could lead to XSS
    exposure (boo#1161297)
  * CVE-2020-7237: Remote Code Execution due to input validation
    failure in Performance Boost Debug Log (boo#1161297)
  * many bug fixes</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1584273600">- cacti 1.2.10:
  * CVE-2020-8813: when guest users have access to realtime graphs,
    remote code could be executed (boo#1164675)
  * When using User Domains, global template user is used instead of
    the configured domain template user
  * Unix timestamps after Sep 13 2020 are rejected as graph start/end
    arguments
  * many bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586606400">- cacti 1.2.11:
  * security fixes and hardening (boo#1169215)
    + Add SameSite support for cookies
    + Cookie should be properly verified against password
    + CSRF at Admin Email
    + Improper Access Control on disabling a user
    + Update to jQuery 3.4.1 to resolve XSS issues with jQuery 3.3.1
  * a number of bug fixes
  * feature additions
    + Allow system uptime to be a variable for use with graphs
    + Add Refresh Interval to Data Collectors display
    + Add Location based filtering
    + Allow for Purging of Data Source Statistics from the GUI
    + Restore ability to duplicate a data profile
    + Enhance table navigation bars to support systems with larger number of items
    + Increase length of Graph Item 'value' field to support pango-markup better
    + Allow Basic Auth Accounts to be mapped by CSV file
    + Make form elements under checkbox_groups flow using flex grid style
    + Set the domain attribute to secure cookies for the 'remember me' option
    + Enhance the "Graph Debug Mode" to display RRDtool Command lengths and excess warnings</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1588852800">- cacti 1.2.12:
  * CVE-2020-7106: Lack of escaping of color items can lead to XSS
    exposure (boo#1163749)
  * Fix multiple graphing bugs and web UI issues
  * Fix multiple warnings, PHP Exceptions and errors
  * Content-Security-Policy prevents External Links from being opened
  * Prevent runtime memory issues by increasing memory limit
  * Improve SNMPv3 handling</changelog>
  <changelog author="Lars Vogdt &lt;lars@linux-schulserver.de&gt;" date="1589198400">- switch from cron to systemd timers (boo#1115436):
  + cacti-cron.timer
  + cacti-cron.service
- introduce rpmlintrc for obvious false positives from rpmlint
  + cacti-rpmlintrc
- use fdupes to reduce amount of needed/wasted space
- re-introduce RPM Group to avoid huge rpmlint complains on 15.1
- remove .gitignore and .gitattributes files (not needed)
- avoid potential root escalation on systems with fs.protected_hardlinks=0
  (boo#1154087): handle directory permissions in file section instead
  of using chown during post installation
- rewrote apache configuration to get rid of .htaccess files and
  explicitely disable directory permissions per default
  (only allow a limited, well-known set of directories)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1594728000">- cacti 1.2.13:
  * Query XSS vulnerabilities require vendor package update
    (CVE-2020-11022 / CVE-2020-11023)
  * Lack of escaping on some pages can lead to XSS exposure
  * Update PHPMailer to 6.1.6 (CVE-2020-13625)
  * SQL Injection vulnerability due to input validation failure when
    editing colors (CVE-2020-14295, boo#1173090)
  * Lack of escaping on template import can lead to XSS exposure</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1596456000">- cacti 1.2.14:
  * Poller keeps using old IP address for a device
  * poller bug fixes and various display fixes
  * Fix XSS vulnerability due to improper escaping of error message
    during template import preview (boo#1174850, CVE-2020-25706)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1605096000">- cacti 1.2.15, fixing the following bugs:
  * When editing Maximum OIDs Per Get Request, blank value can cause errors
  * Boost may run more often than it should
  * Recache Event Loop can cause Interface Graphs to show gaps
  * When searching Graph Tree's, non matching devices remain visible
  * Page validation errors may occur when opening real time graphs
  * External Links do not always open if they are still open from previous usage
  * Cultural changes to various word usage
  * Replicate deleted device status instead of poller sync
  * Description field allows more characters entered than is stored
  * When installing or upgrading, LDAP functions may not always be included properly
  * Unable to remove discovered device
  * When installing or upgrading, PHP recommendations may not always return a valid value
  * Graph Templates has duplicate SQL delete statement
  * When syncing to remote poller, missing function errors may occur
  * When removing devices from remote pollers, devices may reappear without details
  * When removing devices, array errors may sometimes be recorded
  * Variable injection does not always work as expected
  * Editing Data Queries with multiple data templates can give errors about Suggested values
  * Progress bar does not provide enough visual information during long page loads
  * Some themes do not allow for a way to see which user is currently signed in
  * When viewing tables, allow users to force all columns to be visible
  * Column sizing is being lost between pages refreshes
  * When viewing input methods table, no ID is shown to help identify which method is being viewed
  * Filters do not always respect using keyboard to initiate searching
  * When exporting a data query, an invalid column name error can sometimes be shown
  * When checking if a view is allowed, having no session can result in errors
  * When removing devices via the CLI, undefined variable errors may be seen
  * Real Time Graphs may cause invalid index errors
  * On newer versions of MySQL/MariaDB, 'system' keyword can cause issues
  * Plugin setup can generate errors when reading options via system function
  * Plugin version numbers can be unexpectedly truncated
  * When PHP Session is set to autostart, an error can be reported as Cacti attempts to start it
  * When removing multiple items, selection process does not always work
  * When exporting colors, the indicator is not always removed upon completion
  * Unable to pass tree and leaf ID to 'graph_button' hook
  * When performing maintenance, various errors may sometimes be seen
  * When Guest User setting is active, current user is not always properly set
  * When installing Cacti, minor errors in text can be seen
  * Numbers are not always formatted properly when there are no decimal places
  * When viewing Real Time Graphs, an undefined index error may be recorded
  * Minor memory leaks and refresh issues when zooming on graphs
  * Real Time Graphs may sometimes fail due to folder permissions
  * Navigation can sometimes occur unexpectedly due to background timers
  * Trees management screen not reporting correct number of trees
  * Tree sequences can sometimes skip numbers during resorting
  * Guest user selection should not allow setting the currently logged in user
  * Links in Table Headers do not show clearly when in modern theme
  * Under some cases tree logic leads to undefined index errors
  * Cacti Data Debug can show errors if the Data Source is damaged or has been removed
  * When importing a data query, an invalid column name error can sometimes be shown
  * When using shift functions on graphs, negative values are not allowed
  * Correct issue when file is unreadable reporting no file was specified
  * Orphaned Plugins have no option to be removed
  * Update MySQL recommendations for Character Set and Colation
  * Correct sorting of IP addresses to be numeric not alpha by JamesTilt
  * Saving a device should not always repopulate the poller cache</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1606996800">- cacti 1.2.16:
  * When generating a report, the Cascade to Branches function does not as expected
  * When viewing graphs, automatic refresh so not always work as expected
  * Realtime graph pop up counter bug
  * Undefined variable errors may occur when creating a new datasource
  * The cli-based installer does not exit with a non-zero exit code when error occurs
  * When an export is complete, sometimes the progress bar remains
  * When enabling many devices, a threshold can be reached causing a slowdown in the process
  * When performing actions against Devices, replicated device information could sometimes be lost
  * When using API to rename a tree node, backtrace may be incorrectly shown
  * When searching, valid pages can sometimes be shown as empty by ddb4github
  * When exporting data from graphs, not all data was properly included
  * Graph Templates filter is not updated after new graph created by ddb4github
  * Username and password on the login page is not visible in Classic theme
  * Improve wording of concurrent process and thread settings
  * Location filter should remove blank entries by ddb4github
  * When syncing data collectors, a reindex event may be triggered unnecessarily
  * Automation Networks allows discovery of invalid IP addresses
  * When changing permissions of the current user, they don't take effect immediately
  * When reindexing a device, an incorrect page was sometimes displayed
  * When repairing database, audit_database.php does not add missing columns
  * Log page should not be empty if no log info exists
  * During upgrade, there are times when realms can be duplicated leading to SQL errors
  * When using ping.php, UDP response times are not interpreted properly by hypnotoad
  * Improve warning you get when attempting to view a log file you don't have access to
  * When replicating files, scripts are not marked as executable
  * When creating plugin tables, collation is not set properly
  * Update c3.js to version 0.7.20
  * Update Chart.js to version 2.9.4
  * Update phpseclib to version 2.0.29
  * Update PHPMailer to version 6.1.8
  * Use LSB shebang notation for cli scripts
  * Add support for cactid daemon based launcher
  * Add ability to hide the Graph Drilldown icons by datatecuk
  * Add hooks for plugins to show custom Graph Source and custom Template URL (List View)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1608292800">- fix httpd startup errors due to mismatched configuration
  directives boo#1175314</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1620216000">- cacti 1.2.17:
  * Fix incorrect handling of fields led to potential XSS issues
  * CVE-2020-35701: Fix SQL Injection vulnerability (boo#1180804)
  * Fix various XSS issues with HTML Forms handling
  * Fix handling of Daylight Saving Time changes
  * Multiple fixes and extensions to plugins
  * Fix multiple display, export, and input validation issues
  * SNMPv3 Password field was not correctly limited
  * Improved regular expression handling for searcu
  * Improved support for RRDproxy
  * Improved behavior on large systems
  * MariaDB/MysQL: Support persistent connections and improve
    multiple operations and options
  * Add Theme 'Midwinter'
  * Modify automation to test for data before creating graphs
  * Add hooks for plugins to show customize graph source and customize
    template url
  * Allow CSRF security key to be refreshed at command line
  * Allow remote pollers statistics to be cleared
  * Allow user to be automatically logged out after admin defined
    period
  * When replicating, ensure Cacti can detect and verify replica
    servers</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1625918400">- cacti 1.2.18:
  * CVE-2020-14424: Lack of escaping on template import can lead to
    XSS exposure under 'midwinter' theme (boo#1188188)
  * Real time graphs can expose XSS issue</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1636200000">- cacti 1.2.19:
  * Further fixes for grave character security protection (boo#1192408)
  * Fix Over aggressive escaping causing menu visibility issues on Create Device page
  * Add SHA256 and AES256 security levels for SNMP polling
  * Import graph template(Preview Only) show color_id new value as a blank area
  * Fix Editing graphs errors due to missing sequence
  * Fix 2hen hovering over a Tree Graph, row shows same highlighting as Graph Edit screen
  * Fix 2hen RealTime is not active, console errors may appear
  * Fix race conditions may occur when multiple RRDtool processes are running
  * Fix errors creating graphs from templates
  * Fix errors when duplicating reports
  * Fix Boost may be blocked by overflowing poller_output table
  * Fix Template import may be blocked due to unmet dependency warnings with snmp ports
  * Fix Newer MySQL versions may error if committing a transaction when not in one
  * Fix SNMP Agent may not find a cache item
  * Fix Correct issues running under PHP 8.x
  * Fix When polling is disabled, boost may crash and creates many arch tables
  * Fix When poller runs, memory tables may not always be present
  * Fix Timezones may sometimes be incorrectly calculated
  * Fix Allow monitoring IPv6 with interface graphs
  * Fix When a data source uses a Data Input Method, those without a mapping should be flagged
  * Fix When RRDfile is not yet created, errors may appear when displaying the graph
  * Fix Cacti missing key indexes that result in Preset pages slowdowns
  * Fix Data Sources page shows no name when Data Source has no name cache
  * Fix db_update_table function can not alter table from signed to unsigned
  * Fix data remains in poller_output table even if it's flushed to rrd files
  * Fix Parameter list for lib/database.php:db_connect_real() is not correct in 3 places
  * Fix Offset is a reserved word in MariaDB 10.6 affecting Report
  * Fix Rendering large trees slowed due to lack of permission caching
  * Fix Error on interpretation of snmpUtime, when to big
  * Fix Applying right axis formatting creates an error-image
  * Fix Unable to Save Graph Settings from the Graphs pages
  * Fix Graph Template Cache is nullified too often when Graph Automation is running
  * Fix When Adding a Data Query to a Device, no Progress Spinner is shown
  * Fix New Browser Breaks Plugins that depend on non UTC date time data
  * Fix errors when testing remote poller connectivity
  * Fix errors when renaming poller
  * Fix Removing spikes by Variance does not appear to be working beyond the first RRA
  * Fix LDAP API lacks timeout options leading to bad login experiences
  * Add a normal/wrap class for general use
  * Limit File Types available for Template Import operations
  * Fix Cacti does not provide an option of providing a client side certificate for LDAP/AD authentication
  * Support Stronger Encryption Available Starting in Net-SNMP v5.8
  * Allow Cacti to use multiple possible LDAP servers
  * Add a 15 minute polling/sampling interval
  * Provide additional admin email notifications
  * Add warnings for undesired changes to plugin hook return values
  * When creating a Graph, make testing the Data Sources optional by Template
  * Update phpseclib to 2.0.33
  * Update jstree.js to 3.3.12
  * Improve performance of Cacti poller on heavily loaded systems
  * MariaDB recommendations need some tuning for recent updates</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1650628800">- Update to 1.2.20
  * Security fix for CVE-2022-0730, boo#1196692
    Under certain ldap conditions, Cacti authentication can be
    bypassed with certain credential types.
  * Security fix: Device, Graph, Graph Template,
    and Graph Items may be vulnerable to XSS issues
  * Security fix: Lockout policies are not properly applied to LDAP
    and Domain Users
  * Security fix: When using 'remember me' option, incorrect realm
    may be selected
  * Security fix: User and Group maintenance are vulnerable to SQL attacks
  * Security fix: Color Templates are vulnerable to XSS attack
  * Features:
  * When creating a Data Source Profile, allow additional choices for Heartbeat
  * Change select all options to use Font Awesome icons
  * Improve spine performance by storing the total number of system snmp_ports in use
  * Prevent Template User Accounts from being Removed
  * When managing by users, allow filtering by Realm
  * Allow plugins to supply template account names
  * When viewing logs, additional message types should be filterable
  * When creating a Graph Template Item, allow filtering by Data Template
  * Allow language handler to be selected via UI
  * Updated Device packages for Synology, Citrix NetScaler, Cisco ASA/Cisco
  * Add Advanced Ping Graph Template to initial Installable templates
  * Add LDAP Debug Mode option
  * Allow Reports to include devices not on a Tree
  * Allow Basic Authentication to display custom failure message
  * Fix: When replicating data during installation/upgrade,
    system may appear to hang
  * Fix: Graph Template Items may have duplicated entries
  * Fix: Unable to Save Graph Settings
  * Fix: Script Server may crash if an OID is missing or unavailable
  * Fix: When system-wide polling is disabled,
    remote pollers may fail to sync changed settings
  * Fix: When updating poller name, duplicate name protection may be over zealous
  * Fix: Titles may show "Missing Datasource" incorectly
  * Fix: Checking for MIB Cache can cause crashes
  * Fix: Polling cycles may not always complete as expected
  * Fix: When viewing graph data, non-numeric values may appear
  * Fix: Utilities view has calculation errors when there are no data sources
  * Fix: When editing Reports, drag and drop may not function as intended
  * Fix: When data drive is full, viewing a Graph can result in errors
  * Various other bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1653825600">- cacti 1.2.21:
  * Add a CLI script to install/enable/disable/uninstall plugins
  * Add log message when purging DS stats and poller repopulate
  * A collection of bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1664712000">- cacti 1.2.22, providing one security fix, a number of bug fixes
  and a collection of improvements:
  * When creating new graphs, cross site injection is possible
    (boo#1203952)
  * When creating user from template, multiple Domain FullName and
    Mail are not propagated
  * Nectar Aggregate 95th emailed report broken
  * Boost may not find archive tables correctly
  * Users may be unable to change their password when forced during
    a login
  * Net-SNMP Memory Graph Template has Wrong GPRINT
  * Search in tree view unusable on larger installations
  * Increased bulk insert size to avoid partial inserts and potential
    data loss.
  * Call to undefined function boost_debug in Cacti log
  * When no guest template is set, login cookies are not properly set
  * Later RRDtool releases do not need to check last_update time
  * Regex filters are not always long enough
  * Domains based LDAP and AD Fullname and Email not auto-populated
  * Cacti polling and boost report the wrong number of Data Sources
    when Devices are disabled
  * When editing Graph Template Items there are cases where VDEF's
    are hidden when they should be shown
  * Database SSL setting lacks default value
  * Update default path cacti under *BSD by xmacan
  * Web Basic authentication not creating template user
  * Unable to change the Heartbeat of a Data Source Profile
  * Tree Search Does Not Properly Search All Trees
  * When structured paths are setup, RRDfiles may not always be
    created when possible
  * When parsing the logs, caching would help speed up processing
  * Deprecation warnings when attempting real-time Graphs with PHP8.1
  * Custom Timespan is lost when clicking other tree branches
  * Non device based Data Sources not being polled
  * When Resource XML file inproperly formatted, graph creation can
    fail with errors
  * Update code style to support PHP 8 requirements
  * None" shows all graphs
  * Realtime popup window experiences issues on some browsers
  * Auth settings do not always properly reflect the options selected
    by ddb4github
  * MySQL can cause cacti to become stalled due to locking issues
  * Boost process can get hung under rare conditions until the poller
    times out
  * Exporting graphs under PHP 8 can cause errors
  * Host table has wrong default for disabled and deleted columns
  * RRD storage paths do not scale properly
  * When importing, make it possible to only import certain
    components
  * Update change_device script to include new features by
    bmfmancini
  * Make help pages use latest online version wherever possible
  * Cacti should show PHP INI locations during install
  * Detect PHP INI values that are different in the INI vs running
    config
  * Added Gradient Color support for AREA charts by thurban
  * Update CDEF functions for RRDtool
  * When boost is running, it's not clear which processes are
    running and how long they have to complete</changelog>
</package>
<package pkgid="6df949a0e5776749f7ce8fa6bc05bd901f39b055765400c87503a76bd9572763" name="cacti" arch="noarch">
  <version epoch="0" ver="1.2.23" rel="bp154.2.6.1"/>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1569844800">-Build version 1.2.7
  - security#2964: CVE-2019-16723 Security issue allows to view all graphs
  - issue#1181: When opening the Scheduler, it may appear off screen when
    opened near the bottom of a window
  - issue#2894: When using Remote Data Collectors, database information and
    recommendations may show Incorrect values
  - issue#2895: When using data sources from different RRDs, Percentile
    calculation may be incorrect
  - issue#2899: When displaying a form, variable substitution may not always
    work as expected
  - issue#2922: When running a data query, the result may come back as undefined
  - issue#2925: When using consolidation functions, retrieving the first step
    can cause errors
  - issue#2926: When editing a graph, variable validation errors may prevent
    changes from being saved
  - issue#2929: Boost performance may become poor even in single server mode
  - issue#2930: RRDtool can generate errors to standard output which can corrupt images
  - issue#2932: When RRDTool generates an error creating an image, it is not
    always reportedly properly
  - issue#2936: Installer will loop when number of tables exceeds PHP's max_input_vars limit
  - issue#2938: Under CentOS packages, upgrade_database.php script uses incorrect
    location for DB upgrade scripts
  - issue#2940: Images are not always properly sized until the page size changes
  - issue#2949: Order icons may not be properly aligned
  - issue#2951: Allow legends to be modified for Aggregate Graphs
  - issue#2958: Drop down autocomplete lists do not always open as expected
  - issue#2961: When syncing device templates, undefined function may be raised
  - issue#2963: When running ss_cpoller script, avgTime incorrect returns maxTime
  - issue#2966: Realtime popup windows do not always honor settings
  - issue#2967: When using Spikekill, gap and range fill are not operating as expected
  - issue#2970: When a user edits their profile, buttons may appear as unusable whilst
    still being enabled
  - issue#2973: User menu does not always display properly on mobile devices
  - issue#2974: Script Server can raise unexpected warnings when 'arg_num_indexes'
    set but not found in data source
  - issue#2975: Datasource Debug does not properly handle European numbers in
    certain circumstances
  - issue#2976: Boost messages should be stored in their own log file
  - issue#2977: Data updates with past timestamps can cause boost errors
  - issue#2978: Moving hosts between data collectors is slow
  - issue#2979: Multi Output Fields are not parsed correctly
  - issue#2984: When checking SQL fields, value was not always primed
  - issue#2986: Selecting 'Devices' menu pick closes 'Management' menu
  - feature#2943: Allow all Data Queries of a device to be re-indexed at once
  - feature#2952: If device is down or threshold breached, highlight in tree view
  - feature#2985: Update phpseclib to 2.0.23</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- cacti 1.2.8:
  * CVE-2019-17357: When viewing graphs, some input variables were
    not properly checked (SQL injection possible) [boo#1158990]
  * CVE-2019-17358: Unsafe deserialisation of data [boo#1158992]
  * When using HTTPS, secure cookie to prevent potential weakness
  * various bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1581768000">- cacti 1.2.9:
  * CVE-2020-7106: Lack of escaping on some pages could lead to XSS
    exposure (boo#1161297)
  * CVE-2020-7237: Remote Code Execution due to input validation
    failure in Performance Boost Debug Log (boo#1161297)
  * many bug fixes</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1584273600">- cacti 1.2.10:
  * CVE-2020-8813: when guest users have access to realtime graphs,
    remote code could be executed (boo#1164675)
  * When using User Domains, global template user is used instead of
    the configured domain template user
  * Unix timestamps after Sep 13 2020 are rejected as graph start/end
    arguments
  * many bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586606400">- cacti 1.2.11:
  * security fixes and hardening (boo#1169215)
    + Add SameSite support for cookies
    + Cookie should be properly verified against password
    + CSRF at Admin Email
    + Improper Access Control on disabling a user
    + Update to jQuery 3.4.1 to resolve XSS issues with jQuery 3.3.1
  * a number of bug fixes
  * feature additions
    + Allow system uptime to be a variable for use with graphs
    + Add Refresh Interval to Data Collectors display
    + Add Location based filtering
    + Allow for Purging of Data Source Statistics from the GUI
    + Restore ability to duplicate a data profile
    + Enhance table navigation bars to support systems with larger number of items
    + Increase length of Graph Item 'value' field to support pango-markup better
    + Allow Basic Auth Accounts to be mapped by CSV file
    + Make form elements under checkbox_groups flow using flex grid style
    + Set the domain attribute to secure cookies for the 'remember me' option
    + Enhance the "Graph Debug Mode" to display RRDtool Command lengths and excess warnings</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1588852800">- cacti 1.2.12:
  * CVE-2020-7106: Lack of escaping of color items can lead to XSS
    exposure (boo#1163749)
  * Fix multiple graphing bugs and web UI issues
  * Fix multiple warnings, PHP Exceptions and errors
  * Content-Security-Policy prevents External Links from being opened
  * Prevent runtime memory issues by increasing memory limit
  * Improve SNMPv3 handling</changelog>
  <changelog author="Lars Vogdt &lt;lars@linux-schulserver.de&gt;" date="1589198400">- switch from cron to systemd timers (boo#1115436):
  + cacti-cron.timer
  + cacti-cron.service
- introduce rpmlintrc for obvious false positives from rpmlint
  + cacti-rpmlintrc
- use fdupes to reduce amount of needed/wasted space
- re-introduce RPM Group to avoid huge rpmlint complains on 15.1
- remove .gitignore and .gitattributes files (not needed)
- avoid potential root escalation on systems with fs.protected_hardlinks=0
  (boo#1154087): handle directory permissions in file section instead
  of using chown during post installation
- rewrote apache configuration to get rid of .htaccess files and
  explicitely disable directory permissions per default
  (only allow a limited, well-known set of directories)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1594728000">- cacti 1.2.13:
  * Query XSS vulnerabilities require vendor package update
    (CVE-2020-11022 / CVE-2020-11023)
  * Lack of escaping on some pages can lead to XSS exposure
  * Update PHPMailer to 6.1.6 (CVE-2020-13625)
  * SQL Injection vulnerability due to input validation failure when
    editing colors (CVE-2020-14295, boo#1173090)
  * Lack of escaping on template import can lead to XSS exposure</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1596456000">- cacti 1.2.14:
  * Poller keeps using old IP address for a device
  * poller bug fixes and various display fixes
  * Fix XSS vulnerability due to improper escaping of error message
    during template import preview (boo#1174850, CVE-2020-25706)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1605096000">- cacti 1.2.15, fixing the following bugs:
  * When editing Maximum OIDs Per Get Request, blank value can cause errors
  * Boost may run more often than it should
  * Recache Event Loop can cause Interface Graphs to show gaps
  * When searching Graph Tree's, non matching devices remain visible
  * Page validation errors may occur when opening real time graphs
  * External Links do not always open if they are still open from previous usage
  * Cultural changes to various word usage
  * Replicate deleted device status instead of poller sync
  * Description field allows more characters entered than is stored
  * When installing or upgrading, LDAP functions may not always be included properly
  * Unable to remove discovered device
  * When installing or upgrading, PHP recommendations may not always return a valid value
  * Graph Templates has duplicate SQL delete statement
  * When syncing to remote poller, missing function errors may occur
  * When removing devices from remote pollers, devices may reappear without details
  * When removing devices, array errors may sometimes be recorded
  * Variable injection does not always work as expected
  * Editing Data Queries with multiple data templates can give errors about Suggested values
  * Progress bar does not provide enough visual information during long page loads
  * Some themes do not allow for a way to see which user is currently signed in
  * When viewing tables, allow users to force all columns to be visible
  * Column sizing is being lost between pages refreshes
  * When viewing input methods table, no ID is shown to help identify which method is being viewed
  * Filters do not always respect using keyboard to initiate searching
  * When exporting a data query, an invalid column name error can sometimes be shown
  * When checking if a view is allowed, having no session can result in errors
  * When removing devices via the CLI, undefined variable errors may be seen
  * Real Time Graphs may cause invalid index errors
  * On newer versions of MySQL/MariaDB, 'system' keyword can cause issues
  * Plugin setup can generate errors when reading options via system function
  * Plugin version numbers can be unexpectedly truncated
  * When PHP Session is set to autostart, an error can be reported as Cacti attempts to start it
  * When removing multiple items, selection process does not always work
  * When exporting colors, the indicator is not always removed upon completion
  * Unable to pass tree and leaf ID to 'graph_button' hook
  * When performing maintenance, various errors may sometimes be seen
  * When Guest User setting is active, current user is not always properly set
  * When installing Cacti, minor errors in text can be seen
  * Numbers are not always formatted properly when there are no decimal places
  * When viewing Real Time Graphs, an undefined index error may be recorded
  * Minor memory leaks and refresh issues when zooming on graphs
  * Real Time Graphs may sometimes fail due to folder permissions
  * Navigation can sometimes occur unexpectedly due to background timers
  * Trees management screen not reporting correct number of trees
  * Tree sequences can sometimes skip numbers during resorting
  * Guest user selection should not allow setting the currently logged in user
  * Links in Table Headers do not show clearly when in modern theme
  * Under some cases tree logic leads to undefined index errors
  * Cacti Data Debug can show errors if the Data Source is damaged or has been removed
  * When importing a data query, an invalid column name error can sometimes be shown
  * When using shift functions on graphs, negative values are not allowed
  * Correct issue when file is unreadable reporting no file was specified
  * Orphaned Plugins have no option to be removed
  * Update MySQL recommendations for Character Set and Colation
  * Correct sorting of IP addresses to be numeric not alpha by JamesTilt
  * Saving a device should not always repopulate the poller cache</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1606996800">- cacti 1.2.16:
  * When generating a report, the Cascade to Branches function does not as expected
  * When viewing graphs, automatic refresh so not always work as expected
  * Realtime graph pop up counter bug
  * Undefined variable errors may occur when creating a new datasource
  * The cli-based installer does not exit with a non-zero exit code when error occurs
  * When an export is complete, sometimes the progress bar remains
  * When enabling many devices, a threshold can be reached causing a slowdown in the process
  * When performing actions against Devices, replicated device information could sometimes be lost
  * When using API to rename a tree node, backtrace may be incorrectly shown
  * When searching, valid pages can sometimes be shown as empty by ddb4github
  * When exporting data from graphs, not all data was properly included
  * Graph Templates filter is not updated after new graph created by ddb4github
  * Username and password on the login page is not visible in Classic theme
  * Improve wording of concurrent process and thread settings
  * Location filter should remove blank entries by ddb4github
  * When syncing data collectors, a reindex event may be triggered unnecessarily
  * Automation Networks allows discovery of invalid IP addresses
  * When changing permissions of the current user, they don't take effect immediately
  * When reindexing a device, an incorrect page was sometimes displayed
  * When repairing database, audit_database.php does not add missing columns
  * Log page should not be empty if no log info exists
  * During upgrade, there are times when realms can be duplicated leading to SQL errors
  * When using ping.php, UDP response times are not interpreted properly by hypnotoad
  * Improve warning you get when attempting to view a log file you don't have access to
  * When replicating files, scripts are not marked as executable
  * When creating plugin tables, collation is not set properly
  * Update c3.js to version 0.7.20
  * Update Chart.js to version 2.9.4
  * Update phpseclib to version 2.0.29
  * Update PHPMailer to version 6.1.8
  * Use LSB shebang notation for cli scripts
  * Add support for cactid daemon based launcher
  * Add ability to hide the Graph Drilldown icons by datatecuk
  * Add hooks for plugins to show custom Graph Source and custom Template URL (List View)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1608292800">- fix httpd startup errors due to mismatched configuration
  directives boo#1175314</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1620216000">- cacti 1.2.17:
  * Fix incorrect handling of fields led to potential XSS issues
  * CVE-2020-35701: Fix SQL Injection vulnerability (boo#1180804)
  * Fix various XSS issues with HTML Forms handling
  * Fix handling of Daylight Saving Time changes
  * Multiple fixes and extensions to plugins
  * Fix multiple display, export, and input validation issues
  * SNMPv3 Password field was not correctly limited
  * Improved regular expression handling for searcu
  * Improved support for RRDproxy
  * Improved behavior on large systems
  * MariaDB/MysQL: Support persistent connections and improve
    multiple operations and options
  * Add Theme 'Midwinter'
  * Modify automation to test for data before creating graphs
  * Add hooks for plugins to show customize graph source and customize
    template url
  * Allow CSRF security key to be refreshed at command line
  * Allow remote pollers statistics to be cleared
  * Allow user to be automatically logged out after admin defined
    period
  * When replicating, ensure Cacti can detect and verify replica
    servers</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1625918400">- cacti 1.2.18:
  * CVE-2020-14424: Lack of escaping on template import can lead to
    XSS exposure under 'midwinter' theme (boo#1188188)
  * Real time graphs can expose XSS issue</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1636200000">- cacti 1.2.19:
  * Further fixes for grave character security protection (boo#1192408)
  * Fix Over aggressive escaping causing menu visibility issues on Create Device page
  * Add SHA256 and AES256 security levels for SNMP polling
  * Import graph template(Preview Only) show color_id new value as a blank area
  * Fix Editing graphs errors due to missing sequence
  * Fix 2hen hovering over a Tree Graph, row shows same highlighting as Graph Edit screen
  * Fix 2hen RealTime is not active, console errors may appear
  * Fix race conditions may occur when multiple RRDtool processes are running
  * Fix errors creating graphs from templates
  * Fix errors when duplicating reports
  * Fix Boost may be blocked by overflowing poller_output table
  * Fix Template import may be blocked due to unmet dependency warnings with snmp ports
  * Fix Newer MySQL versions may error if committing a transaction when not in one
  * Fix SNMP Agent may not find a cache item
  * Fix Correct issues running under PHP 8.x
  * Fix When polling is disabled, boost may crash and creates many arch tables
  * Fix When poller runs, memory tables may not always be present
  * Fix Timezones may sometimes be incorrectly calculated
  * Fix Allow monitoring IPv6 with interface graphs
  * Fix When a data source uses a Data Input Method, those without a mapping should be flagged
  * Fix When RRDfile is not yet created, errors may appear when displaying the graph
  * Fix Cacti missing key indexes that result in Preset pages slowdowns
  * Fix Data Sources page shows no name when Data Source has no name cache
  * Fix db_update_table function can not alter table from signed to unsigned
  * Fix data remains in poller_output table even if it's flushed to rrd files
  * Fix Parameter list for lib/database.php:db_connect_real() is not correct in 3 places
  * Fix Offset is a reserved word in MariaDB 10.6 affecting Report
  * Fix Rendering large trees slowed due to lack of permission caching
  * Fix Error on interpretation of snmpUtime, when to big
  * Fix Applying right axis formatting creates an error-image
  * Fix Unable to Save Graph Settings from the Graphs pages
  * Fix Graph Template Cache is nullified too often when Graph Automation is running
  * Fix When Adding a Data Query to a Device, no Progress Spinner is shown
  * Fix New Browser Breaks Plugins that depend on non UTC date time data
  * Fix errors when testing remote poller connectivity
  * Fix errors when renaming poller
  * Fix Removing spikes by Variance does not appear to be working beyond the first RRA
  * Fix LDAP API lacks timeout options leading to bad login experiences
  * Add a normal/wrap class for general use
  * Limit File Types available for Template Import operations
  * Fix Cacti does not provide an option of providing a client side certificate for LDAP/AD authentication
  * Support Stronger Encryption Available Starting in Net-SNMP v5.8
  * Allow Cacti to use multiple possible LDAP servers
  * Add a 15 minute polling/sampling interval
  * Provide additional admin email notifications
  * Add warnings for undesired changes to plugin hook return values
  * When creating a Graph, make testing the Data Sources optional by Template
  * Update phpseclib to 2.0.33
  * Update jstree.js to 3.3.12
  * Improve performance of Cacti poller on heavily loaded systems
  * MariaDB recommendations need some tuning for recent updates</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1650628800">- Update to 1.2.20
  * Security fix for CVE-2022-0730, boo#1196692
    Under certain ldap conditions, Cacti authentication can be
    bypassed with certain credential types.
  * Security fix: Device, Graph, Graph Template,
    and Graph Items may be vulnerable to XSS issues
  * Security fix: Lockout policies are not properly applied to LDAP
    and Domain Users
  * Security fix: When using 'remember me' option, incorrect realm
    may be selected
  * Security fix: User and Group maintenance are vulnerable to SQL attacks
  * Security fix: Color Templates are vulnerable to XSS attack
  * Features:
  * When creating a Data Source Profile, allow additional choices for Heartbeat
  * Change select all options to use Font Awesome icons
  * Improve spine performance by storing the total number of system snmp_ports in use
  * Prevent Template User Accounts from being Removed
  * When managing by users, allow filtering by Realm
  * Allow plugins to supply template account names
  * When viewing logs, additional message types should be filterable
  * When creating a Graph Template Item, allow filtering by Data Template
  * Allow language handler to be selected via UI
  * Updated Device packages for Synology, Citrix NetScaler, Cisco ASA/Cisco
  * Add Advanced Ping Graph Template to initial Installable templates
  * Add LDAP Debug Mode option
  * Allow Reports to include devices not on a Tree
  * Allow Basic Authentication to display custom failure message
  * Fix: When replicating data during installation/upgrade,
    system may appear to hang
  * Fix: Graph Template Items may have duplicated entries
  * Fix: Unable to Save Graph Settings
  * Fix: Script Server may crash if an OID is missing or unavailable
  * Fix: When system-wide polling is disabled,
    remote pollers may fail to sync changed settings
  * Fix: When updating poller name, duplicate name protection may be over zealous
  * Fix: Titles may show "Missing Datasource" incorectly
  * Fix: Checking for MIB Cache can cause crashes
  * Fix: Polling cycles may not always complete as expected
  * Fix: When viewing graph data, non-numeric values may appear
  * Fix: Utilities view has calculation errors when there are no data sources
  * Fix: When editing Reports, drag and drop may not function as intended
  * Fix: When data drive is full, viewing a Graph can result in errors
  * Various other bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1653825600">- cacti 1.2.21:
  * Add a CLI script to install/enable/disable/uninstall plugins
  * Add log message when purging DS stats and poller repopulate
  * A collection of bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1664712000">- cacti 1.2.22, providing one security fix, a number of bug fixes
  and a collection of improvements:
  * When creating new graphs, cross site injection is possible
    (boo#1203952)
  * When creating user from template, multiple Domain FullName and
    Mail are not propagated
  * Nectar Aggregate 95th emailed report broken
  * Boost may not find archive tables correctly
  * Users may be unable to change their password when forced during
    a login
  * Net-SNMP Memory Graph Template has Wrong GPRINT
  * Search in tree view unusable on larger installations
  * Increased bulk insert size to avoid partial inserts and potential
    data loss.
  * Call to undefined function boost_debug in Cacti log
  * When no guest template is set, login cookies are not properly set
  * Later RRDtool releases do not need to check last_update time
  * Regex filters are not always long enough
  * Domains based LDAP and AD Fullname and Email not auto-populated
  * Cacti polling and boost report the wrong number of Data Sources
    when Devices are disabled
  * When editing Graph Template Items there are cases where VDEF's
    are hidden when they should be shown
  * Database SSL setting lacks default value
  * Update default path cacti under *BSD by xmacan
  * Web Basic authentication not creating template user
  * Unable to change the Heartbeat of a Data Source Profile
  * Tree Search Does Not Properly Search All Trees
  * When structured paths are setup, RRDfiles may not always be
    created when possible
  * When parsing the logs, caching would help speed up processing
  * Deprecation warnings when attempting real-time Graphs with PHP8.1
  * Custom Timespan is lost when clicking other tree branches
  * Non device based Data Sources not being polled
  * When Resource XML file inproperly formatted, graph creation can
    fail with errors
  * Update code style to support PHP 8 requirements
  * None" shows all graphs
  * Realtime popup window experiences issues on some browsers
  * Auth settings do not always properly reflect the options selected
    by ddb4github
  * MySQL can cause cacti to become stalled due to locking issues
  * Boost process can get hung under rare conditions until the poller
    times out
  * Exporting graphs under PHP 8 can cause errors
  * Host table has wrong default for disabled and deleted columns
  * RRD storage paths do not scale properly
  * When importing, make it possible to only import certain
    components
  * Update change_device script to include new features by
    bmfmancini
  * Make help pages use latest online version wherever possible
  * Cacti should show PHP INI locations during install
  * Detect PHP INI values that are different in the INI vs running
    config
  * Added Gradient Color support for AREA charts by thurban
  * Update CDEF functions for RRDtool
  * When boost is running, it's not clear which processes are
    running and how long they have to complete</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1672660800">- cacti 1.2.23, providing security fixes, feature improvements and
  bug fixes:
  * CVE-2022-46169: Unauthenticated Command Injection in Remote
    Agent (boo#1206185)
  * Security: Add .htaccess file to scripts folder
  * When using Single Sign-on Frameworks, revocation was not always
    detected in callbacks
  * Fixes to the installer, and compatibility with PHP and MySQL
  * Performance improvements for certain conditions
  * Various UI fixes
  * Bug fixes related to SNMP, RRDtools, and agents</changelog>
</package>
<package pkgid="f8ca0a08563a2d6445825ad3f13140e76e196e908972f27ce19a441bb75e7890" name="cacti" arch="src">
  <version epoch="0" ver="1.2.23" rel="bp154.2.6.1"/>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1569844800">-Build version 1.2.7
  - security#2964: CVE-2019-16723 Security issue allows to view all graphs
  - issue#1181: When opening the Scheduler, it may appear off screen when
    opened near the bottom of a window
  - issue#2894: When using Remote Data Collectors, database information and
    recommendations may show Incorrect values
  - issue#2895: When using data sources from different RRDs, Percentile
    calculation may be incorrect
  - issue#2899: When displaying a form, variable substitution may not always
    work as expected
  - issue#2922: When running a data query, the result may come back as undefined
  - issue#2925: When using consolidation functions, retrieving the first step
    can cause errors
  - issue#2926: When editing a graph, variable validation errors may prevent
    changes from being saved
  - issue#2929: Boost performance may become poor even in single server mode
  - issue#2930: RRDtool can generate errors to standard output which can corrupt images
  - issue#2932: When RRDTool generates an error creating an image, it is not
    always reportedly properly
  - issue#2936: Installer will loop when number of tables exceeds PHP's max_input_vars limit
  - issue#2938: Under CentOS packages, upgrade_database.php script uses incorrect
    location for DB upgrade scripts
  - issue#2940: Images are not always properly sized until the page size changes
  - issue#2949: Order icons may not be properly aligned
  - issue#2951: Allow legends to be modified for Aggregate Graphs
  - issue#2958: Drop down autocomplete lists do not always open as expected
  - issue#2961: When syncing device templates, undefined function may be raised
  - issue#2963: When running ss_cpoller script, avgTime incorrect returns maxTime
  - issue#2966: Realtime popup windows do not always honor settings
  - issue#2967: When using Spikekill, gap and range fill are not operating as expected
  - issue#2970: When a user edits their profile, buttons may appear as unusable whilst
    still being enabled
  - issue#2973: User menu does not always display properly on mobile devices
  - issue#2974: Script Server can raise unexpected warnings when 'arg_num_indexes'
    set but not found in data source
  - issue#2975: Datasource Debug does not properly handle European numbers in
    certain circumstances
  - issue#2976: Boost messages should be stored in their own log file
  - issue#2977: Data updates with past timestamps can cause boost errors
  - issue#2978: Moving hosts between data collectors is slow
  - issue#2979: Multi Output Fields are not parsed correctly
  - issue#2984: When checking SQL fields, value was not always primed
  - issue#2986: Selecting 'Devices' menu pick closes 'Management' menu
  - feature#2943: Allow all Data Queries of a device to be re-indexed at once
  - feature#2952: If device is down or threshold breached, highlight in tree view
  - feature#2985: Update phpseclib to 2.0.23</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- cacti 1.2.8:
  * CVE-2019-17357: When viewing graphs, some input variables were
    not properly checked (SQL injection possible) [boo#1158990]
  * CVE-2019-17358: Unsafe deserialisation of data [boo#1158992]
  * When using HTTPS, secure cookie to prevent potential weakness
  * various bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1581768000">- cacti 1.2.9:
  * CVE-2020-7106: Lack of escaping on some pages could lead to XSS
    exposure (boo#1161297)
  * CVE-2020-7237: Remote Code Execution due to input validation
    failure in Performance Boost Debug Log (boo#1161297)
  * many bug fixes</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1584273600">- cacti 1.2.10:
  * CVE-2020-8813: when guest users have access to realtime graphs,
    remote code could be executed (boo#1164675)
  * When using User Domains, global template user is used instead of
    the configured domain template user
  * Unix timestamps after Sep 13 2020 are rejected as graph start/end
    arguments
  * many bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586606400">- cacti 1.2.11:
  * security fixes and hardening (boo#1169215)
    + Add SameSite support for cookies
    + Cookie should be properly verified against password
    + CSRF at Admin Email
    + Improper Access Control on disabling a user
    + Update to jQuery 3.4.1 to resolve XSS issues with jQuery 3.3.1
  * a number of bug fixes
  * feature additions
    + Allow system uptime to be a variable for use with graphs
    + Add Refresh Interval to Data Collectors display
    + Add Location based filtering
    + Allow for Purging of Data Source Statistics from the GUI
    + Restore ability to duplicate a data profile
    + Enhance table navigation bars to support systems with larger number of items
    + Increase length of Graph Item 'value' field to support pango-markup better
    + Allow Basic Auth Accounts to be mapped by CSV file
    + Make form elements under checkbox_groups flow using flex grid style
    + Set the domain attribute to secure cookies for the 'remember me' option
    + Enhance the "Graph Debug Mode" to display RRDtool Command lengths and excess warnings</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1588852800">- cacti 1.2.12:
  * CVE-2020-7106: Lack of escaping of color items can lead to XSS
    exposure (boo#1163749)
  * Fix multiple graphing bugs and web UI issues
  * Fix multiple warnings, PHP Exceptions and errors
  * Content-Security-Policy prevents External Links from being opened
  * Prevent runtime memory issues by increasing memory limit
  * Improve SNMPv3 handling</changelog>
  <changelog author="Lars Vogdt &lt;lars@linux-schulserver.de&gt;" date="1589198400">- switch from cron to systemd timers (boo#1115436):
  + cacti-cron.timer
  + cacti-cron.service
- introduce rpmlintrc for obvious false positives from rpmlint
  + cacti-rpmlintrc
- use fdupes to reduce amount of needed/wasted space
- re-introduce RPM Group to avoid huge rpmlint complains on 15.1
- remove .gitignore and .gitattributes files (not needed)
- avoid potential root escalation on systems with fs.protected_hardlinks=0
  (boo#1154087): handle directory permissions in file section instead
  of using chown during post installation
- rewrote apache configuration to get rid of .htaccess files and
  explicitely disable directory permissions per default
  (only allow a limited, well-known set of directories)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1594728000">- cacti 1.2.13:
  * Query XSS vulnerabilities require vendor package update
    (CVE-2020-11022 / CVE-2020-11023)
  * Lack of escaping on some pages can lead to XSS exposure
  * Update PHPMailer to 6.1.6 (CVE-2020-13625)
  * SQL Injection vulnerability due to input validation failure when
    editing colors (CVE-2020-14295, boo#1173090)
  * Lack of escaping on template import can lead to XSS exposure</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1596456000">- cacti 1.2.14:
  * Poller keeps using old IP address for a device
  * poller bug fixes and various display fixes
  * Fix XSS vulnerability due to improper escaping of error message
    during template import preview (boo#1174850, CVE-2020-25706)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1605096000">- cacti 1.2.15, fixing the following bugs:
  * When editing Maximum OIDs Per Get Request, blank value can cause errors
  * Boost may run more often than it should
  * Recache Event Loop can cause Interface Graphs to show gaps
  * When searching Graph Tree's, non matching devices remain visible
  * Page validation errors may occur when opening real time graphs
  * External Links do not always open if they are still open from previous usage
  * Cultural changes to various word usage
  * Replicate deleted device status instead of poller sync
  * Description field allows more characters entered than is stored
  * When installing or upgrading, LDAP functions may not always be included properly
  * Unable to remove discovered device
  * When installing or upgrading, PHP recommendations may not always return a valid value
  * Graph Templates has duplicate SQL delete statement
  * When syncing to remote poller, missing function errors may occur
  * When removing devices from remote pollers, devices may reappear without details
  * When removing devices, array errors may sometimes be recorded
  * Variable injection does not always work as expected
  * Editing Data Queries with multiple data templates can give errors about Suggested values
  * Progress bar does not provide enough visual information during long page loads
  * Some themes do not allow for a way to see which user is currently signed in
  * When viewing tables, allow users to force all columns to be visible
  * Column sizing is being lost between pages refreshes
  * When viewing input methods table, no ID is shown to help identify which method is being viewed
  * Filters do not always respect using keyboard to initiate searching
  * When exporting a data query, an invalid column name error can sometimes be shown
  * When checking if a view is allowed, having no session can result in errors
  * When removing devices via the CLI, undefined variable errors may be seen
  * Real Time Graphs may cause invalid index errors
  * On newer versions of MySQL/MariaDB, 'system' keyword can cause issues
  * Plugin setup can generate errors when reading options via system function
  * Plugin version numbers can be unexpectedly truncated
  * When PHP Session is set to autostart, an error can be reported as Cacti attempts to start it
  * When removing multiple items, selection process does not always work
  * When exporting colors, the indicator is not always removed upon completion
  * Unable to pass tree and leaf ID to 'graph_button' hook
  * When performing maintenance, various errors may sometimes be seen
  * When Guest User setting is active, current user is not always properly set
  * When installing Cacti, minor errors in text can be seen
  * Numbers are not always formatted properly when there are no decimal places
  * When viewing Real Time Graphs, an undefined index error may be recorded
  * Minor memory leaks and refresh issues when zooming on graphs
  * Real Time Graphs may sometimes fail due to folder permissions
  * Navigation can sometimes occur unexpectedly due to background timers
  * Trees management screen not reporting correct number of trees
  * Tree sequences can sometimes skip numbers during resorting
  * Guest user selection should not allow setting the currently logged in user
  * Links in Table Headers do not show clearly when in modern theme
  * Under some cases tree logic leads to undefined index errors
  * Cacti Data Debug can show errors if the Data Source is damaged or has been removed
  * When importing a data query, an invalid column name error can sometimes be shown
  * When using shift functions on graphs, negative values are not allowed
  * Correct issue when file is unreadable reporting no file was specified
  * Orphaned Plugins have no option to be removed
  * Update MySQL recommendations for Character Set and Colation
  * Correct sorting of IP addresses to be numeric not alpha by JamesTilt
  * Saving a device should not always repopulate the poller cache</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1606996800">- cacti 1.2.16:
  * When generating a report, the Cascade to Branches function does not as expected
  * When viewing graphs, automatic refresh so not always work as expected
  * Realtime graph pop up counter bug
  * Undefined variable errors may occur when creating a new datasource
  * The cli-based installer does not exit with a non-zero exit code when error occurs
  * When an export is complete, sometimes the progress bar remains
  * When enabling many devices, a threshold can be reached causing a slowdown in the process
  * When performing actions against Devices, replicated device information could sometimes be lost
  * When using API to rename a tree node, backtrace may be incorrectly shown
  * When searching, valid pages can sometimes be shown as empty by ddb4github
  * When exporting data from graphs, not all data was properly included
  * Graph Templates filter is not updated after new graph created by ddb4github
  * Username and password on the login page is not visible in Classic theme
  * Improve wording of concurrent process and thread settings
  * Location filter should remove blank entries by ddb4github
  * When syncing data collectors, a reindex event may be triggered unnecessarily
  * Automation Networks allows discovery of invalid IP addresses
  * When changing permissions of the current user, they don't take effect immediately
  * When reindexing a device, an incorrect page was sometimes displayed
  * When repairing database, audit_database.php does not add missing columns
  * Log page should not be empty if no log info exists
  * During upgrade, there are times when realms can be duplicated leading to SQL errors
  * When using ping.php, UDP response times are not interpreted properly by hypnotoad
  * Improve warning you get when attempting to view a log file you don't have access to
  * When replicating files, scripts are not marked as executable
  * When creating plugin tables, collation is not set properly
  * Update c3.js to version 0.7.20
  * Update Chart.js to version 2.9.4
  * Update phpseclib to version 2.0.29
  * Update PHPMailer to version 6.1.8
  * Use LSB shebang notation for cli scripts
  * Add support for cactid daemon based launcher
  * Add ability to hide the Graph Drilldown icons by datatecuk
  * Add hooks for plugins to show custom Graph Source and custom Template URL (List View)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1608292800">- fix httpd startup errors due to mismatched configuration
  directives boo#1175314</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1620216000">- cacti 1.2.17:
  * Fix incorrect handling of fields led to potential XSS issues
  * CVE-2020-35701: Fix SQL Injection vulnerability (boo#1180804)
  * Fix various XSS issues with HTML Forms handling
  * Fix handling of Daylight Saving Time changes
  * Multiple fixes and extensions to plugins
  * Fix multiple display, export, and input validation issues
  * SNMPv3 Password field was not correctly limited
  * Improved regular expression handling for searcu
  * Improved support for RRDproxy
  * Improved behavior on large systems
  * MariaDB/MysQL: Support persistent connections and improve
    multiple operations and options
  * Add Theme 'Midwinter'
  * Modify automation to test for data before creating graphs
  * Add hooks for plugins to show customize graph source and customize
    template url
  * Allow CSRF security key to be refreshed at command line
  * Allow remote pollers statistics to be cleared
  * Allow user to be automatically logged out after admin defined
    period
  * When replicating, ensure Cacti can detect and verify replica
    servers</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1625918400">- cacti 1.2.18:
  * CVE-2020-14424: Lack of escaping on template import can lead to
    XSS exposure under 'midwinter' theme (boo#1188188)
  * Real time graphs can expose XSS issue</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1636200000">- cacti 1.2.19:
  * Further fixes for grave character security protection (boo#1192408)
  * Fix Over aggressive escaping causing menu visibility issues on Create Device page
  * Add SHA256 and AES256 security levels for SNMP polling
  * Import graph template(Preview Only) show color_id new value as a blank area
  * Fix Editing graphs errors due to missing sequence
  * Fix 2hen hovering over a Tree Graph, row shows same highlighting as Graph Edit screen
  * Fix 2hen RealTime is not active, console errors may appear
  * Fix race conditions may occur when multiple RRDtool processes are running
  * Fix errors creating graphs from templates
  * Fix errors when duplicating reports
  * Fix Boost may be blocked by overflowing poller_output table
  * Fix Template import may be blocked due to unmet dependency warnings with snmp ports
  * Fix Newer MySQL versions may error if committing a transaction when not in one
  * Fix SNMP Agent may not find a cache item
  * Fix Correct issues running under PHP 8.x
  * Fix When polling is disabled, boost may crash and creates many arch tables
  * Fix When poller runs, memory tables may not always be present
  * Fix Timezones may sometimes be incorrectly calculated
  * Fix Allow monitoring IPv6 with interface graphs
  * Fix When a data source uses a Data Input Method, those without a mapping should be flagged
  * Fix When RRDfile is not yet created, errors may appear when displaying the graph
  * Fix Cacti missing key indexes that result in Preset pages slowdowns
  * Fix Data Sources page shows no name when Data Source has no name cache
  * Fix db_update_table function can not alter table from signed to unsigned
  * Fix data remains in poller_output table even if it's flushed to rrd files
  * Fix Parameter list for lib/database.php:db_connect_real() is not correct in 3 places
  * Fix Offset is a reserved word in MariaDB 10.6 affecting Report
  * Fix Rendering large trees slowed due to lack of permission caching
  * Fix Error on interpretation of snmpUtime, when to big
  * Fix Applying right axis formatting creates an error-image
  * Fix Unable to Save Graph Settings from the Graphs pages
  * Fix Graph Template Cache is nullified too often when Graph Automation is running
  * Fix When Adding a Data Query to a Device, no Progress Spinner is shown
  * Fix New Browser Breaks Plugins that depend on non UTC date time data
  * Fix errors when testing remote poller connectivity
  * Fix errors when renaming poller
  * Fix Removing spikes by Variance does not appear to be working beyond the first RRA
  * Fix LDAP API lacks timeout options leading to bad login experiences
  * Add a normal/wrap class for general use
  * Limit File Types available for Template Import operations
  * Fix Cacti does not provide an option of providing a client side certificate for LDAP/AD authentication
  * Support Stronger Encryption Available Starting in Net-SNMP v5.8
  * Allow Cacti to use multiple possible LDAP servers
  * Add a 15 minute polling/sampling interval
  * Provide additional admin email notifications
  * Add warnings for undesired changes to plugin hook return values
  * When creating a Graph, make testing the Data Sources optional by Template
  * Update phpseclib to 2.0.33
  * Update jstree.js to 3.3.12
  * Improve performance of Cacti poller on heavily loaded systems
  * MariaDB recommendations need some tuning for recent updates</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1650628800">- Update to 1.2.20
  * Security fix for CVE-2022-0730, boo#1196692
    Under certain ldap conditions, Cacti authentication can be
    bypassed with certain credential types.
  * Security fix: Device, Graph, Graph Template,
    and Graph Items may be vulnerable to XSS issues
  * Security fix: Lockout policies are not properly applied to LDAP
    and Domain Users
  * Security fix: When using 'remember me' option, incorrect realm
    may be selected
  * Security fix: User and Group maintenance are vulnerable to SQL attacks
  * Security fix: Color Templates are vulnerable to XSS attack
  * Features:
  * When creating a Data Source Profile, allow additional choices for Heartbeat
  * Change select all options to use Font Awesome icons
  * Improve spine performance by storing the total number of system snmp_ports in use
  * Prevent Template User Accounts from being Removed
  * When managing by users, allow filtering by Realm
  * Allow plugins to supply template account names
  * When viewing logs, additional message types should be filterable
  * When creating a Graph Template Item, allow filtering by Data Template
  * Allow language handler to be selected via UI
  * Updated Device packages for Synology, Citrix NetScaler, Cisco ASA/Cisco
  * Add Advanced Ping Graph Template to initial Installable templates
  * Add LDAP Debug Mode option
  * Allow Reports to include devices not on a Tree
  * Allow Basic Authentication to display custom failure message
  * Fix: When replicating data during installation/upgrade,
    system may appear to hang
  * Fix: Graph Template Items may have duplicated entries
  * Fix: Unable to Save Graph Settings
  * Fix: Script Server may crash if an OID is missing or unavailable
  * Fix: When system-wide polling is disabled,
    remote pollers may fail to sync changed settings
  * Fix: When updating poller name, duplicate name protection may be over zealous
  * Fix: Titles may show "Missing Datasource" incorectly
  * Fix: Checking for MIB Cache can cause crashes
  * Fix: Polling cycles may not always complete as expected
  * Fix: When viewing graph data, non-numeric values may appear
  * Fix: Utilities view has calculation errors when there are no data sources
  * Fix: When editing Reports, drag and drop may not function as intended
  * Fix: When data drive is full, viewing a Graph can result in errors
  * Various other bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1653825600">- cacti 1.2.21:
  * Add a CLI script to install/enable/disable/uninstall plugins
  * Add log message when purging DS stats and poller repopulate
  * A collection of bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1664712000">- cacti 1.2.22, providing one security fix, a number of bug fixes
  and a collection of improvements:
  * When creating new graphs, cross site injection is possible
    (boo#1203952)
  * When creating user from template, multiple Domain FullName and
    Mail are not propagated
  * Nectar Aggregate 95th emailed report broken
  * Boost may not find archive tables correctly
  * Users may be unable to change their password when forced during
    a login
  * Net-SNMP Memory Graph Template has Wrong GPRINT
  * Search in tree view unusable on larger installations
  * Increased bulk insert size to avoid partial inserts and potential
    data loss.
  * Call to undefined function boost_debug in Cacti log
  * When no guest template is set, login cookies are not properly set
  * Later RRDtool releases do not need to check last_update time
  * Regex filters are not always long enough
  * Domains based LDAP and AD Fullname and Email not auto-populated
  * Cacti polling and boost report the wrong number of Data Sources
    when Devices are disabled
  * When editing Graph Template Items there are cases where VDEF's
    are hidden when they should be shown
  * Database SSL setting lacks default value
  * Update default path cacti under *BSD by xmacan
  * Web Basic authentication not creating template user
  * Unable to change the Heartbeat of a Data Source Profile
  * Tree Search Does Not Properly Search All Trees
  * When structured paths are setup, RRDfiles may not always be
    created when possible
  * When parsing the logs, caching would help speed up processing
  * Deprecation warnings when attempting real-time Graphs with PHP8.1
  * Custom Timespan is lost when clicking other tree branches
  * Non device based Data Sources not being polled
  * When Resource XML file inproperly formatted, graph creation can
    fail with errors
  * Update code style to support PHP 8 requirements
  * None" shows all graphs
  * Realtime popup window experiences issues on some browsers
  * Auth settings do not always properly reflect the options selected
    by ddb4github
  * MySQL can cause cacti to become stalled due to locking issues
  * Boost process can get hung under rare conditions until the poller
    times out
  * Exporting graphs under PHP 8 can cause errors
  * Host table has wrong default for disabled and deleted columns
  * RRD storage paths do not scale properly
  * When importing, make it possible to only import certain
    components
  * Update change_device script to include new features by
    bmfmancini
  * Make help pages use latest online version wherever possible
  * Cacti should show PHP INI locations during install
  * Detect PHP INI values that are different in the INI vs running
    config
  * Added Gradient Color support for AREA charts by thurban
  * Update CDEF functions for RRDtool
  * When boost is running, it's not clear which processes are
    running and how long they have to complete</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1672660800">- cacti 1.2.23, providing security fixes, feature improvements and
  bug fixes:
  * CVE-2022-46169: Unauthenticated Command Injection in Remote
    Agent (boo#1206185)
  * Security: Add .htaccess file to scripts folder
  * When using Single Sign-on Frameworks, revocation was not always
    detected in callbacks
  * Fixes to the installer, and compatibility with PHP and MySQL
  * Performance improvements for certain conditions
  * Various UI fixes
  * Bug fixes related to SNMP, RRDtools, and agents</changelog>
</package>
<package pkgid="a341ab0fe19f4beaf81f84311917f3d2cc100f22e7dc76618abace37ade032e7" name="cacti-spine" arch="aarch64">
  <version epoch="0" ver="1.2.22" rel="bp154.2.3.1"/>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1554120000">-Update to version 1.2.3
  * issue#76: Spine unhandled exception signal
  * issue: More recent versions of MariaDB require different client library</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1560427200">-Update to version 1.2.4
  * issue#92: Add Data Source ID to "Empty result' error messages
  * issue#94: Increase default 'results_buffer' size to 2048 and MySQL
    max buffer to 131072 bytes</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1563278400">-Update to version 1.2.5
  - issue: Improve detection of MySQL vs. MariaDB client library requirement
  - issue#98: Checking type in poller.c causes compiler error</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1567425600">-Update to version 1.2.6
  - issue#101: MySQL 8 has retired 'my_bool' type
  - issue#104: Spine should report which threads are outstanding
  - issue#105: Spine should include 'Process[&lt;id&gt;]' in standard logging
  - issue#107: Log Buffer is too small to handle some output
  - issue#108: Once an SNMP timeout is reached, snmp_get does not honor
    include_host
  - issue#109: Initial declarations inside for loop cause compile errors
  - issue#110: When compiling, 'directive output may be truncated'
    messages can appear
  - issue#112: INSTALL instructions have typo in bootstrap command</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1569844800">-Update to version 1.2.7
  - issue#113: spine1.2.6 couldn't open directory `m4'</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- cacti-spine 1.2.8:
  * works with cacti 1.2.8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1581768000">- cacti-spine 1.2.9:
  * works with cacti 1.2.9
  * Improve logging of snmp multiple OID get function
  * PCOMMAND Device[XXXX] WARNING: Recache Event Detected for Device
  * Segmentation Fault triggered by a lot of errors
  * Replace function gethostbyname with thread safe getaddrinfo
  * removed strip_alpha for "Wrong-Type" SNMP-Answer</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586606400">- cacti-spine 1.2.11:
  * fix warnings due to 'Recache Event Detected for Device'
  * Fix database, network and polling errors</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1588852800">- cacti-spine 1.2.12:
  * Failed host lookup causes spine to crash</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1594728000">- cacti-spine 1.2.13:
  * works with cacti 1.2.13</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1596456000">- cacti-spine 1.2.14:
  * fix spine not updating rrd_next_step</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1605096000">- cacti-spine 1.2.15:
  * Special characters may not always be ignored properly</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1607342400">- cacti-spine 1.2.16:
  * Some developer debug log messages falsely labeled as WARNINGS
  * Remove the need of the dos2unix program
  * Fix Spine experiencing MySQL socket error 2002 under load
  * Under heavy load MySQL/MariaDB return 2006 and 2013 errors on query
  * Add backtrace output to stderr for signals
  * Add Data Source turnaround time to debug output</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1620216000">- cacti-spine 1.2.17:
  * Avoid triggering DDos detection in firewalls on large systems
  * Use mysql reconnect option properly
  * Fix possible creashes in various operations
  * Fix remote data collectors pushing too much data to main when
    performing diagnostics
  * Make spine more responsive when remote connection is down
  * Fix various MySQL issues
  * Make spine immune to DST changes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1629547200">- cacti-spine 1.2.18:
  * Fix missing time parameter on FROM_UNIXTIME function
- add cacti-spine-1.2.18-Fix-non-void-return.patch to fix the same</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1636200000">- cacti-spine 1.2.19:
  * Fix 1ssues with polling loop may skip some datasources
  * Fix ping no longer works due to hostname changes
  * Fix RRD steps are not always calculated correctly
  * Fix unable to build when DES no longer supported
  * Fix IPv6 devices are not properly parsed
  * Reduce a number of compiler warnings
  * Fix compiler warnings due to lack of return in thread_mutex_trylock
  * Fix Spine will not look at non-timetics uptime when sysUpTimeInstance overflows
  * Improve performance of Cacti poller on heavily loaded systems
- drop cacti-spine-1.2.18-Fix-non-void-return.patch, upstream</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1650628800">- cacti-spine 1.2.20:
  * Add support for newer versions of MySQL/MariaDB
  * When checking for uptime of device, don't assume a non-response
    is always fatal
  * Fix description and command trunctation issues
  * Improve spine performance when only one snmp agent port is in
    use</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1653825600">- cacti-spine 1.2.21:
  * Disable DES if Net-SNMP doesn't have it</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1664712000">- cacti-spine 1.2.22, delivering a number of bug fixes:
  * When polling time is exceed, spine does not always exit as expected
  * Spine logging at `-V 5` includes an extra line feed
  * Incorrect SNMP responses can cause spine to crash
  * Properly handle devices that timeout responding to the Extended Uptime
  * MariaDB can cause spine to abort prematurely despite error handling
  * Spine should log the error time when exiting via signal</changelog>
</package>
<package pkgid="7268aa6b46ec45d173103cb36e47c0b924acf9da56c7ab88b608cada5afdeec2" name="cacti-spine" arch="i586">
  <version epoch="0" ver="1.2.22" rel="bp154.2.3.1"/>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1554120000">-Update to version 1.2.3
  * issue#76: Spine unhandled exception signal
  * issue: More recent versions of MariaDB require different client library</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1560427200">-Update to version 1.2.4
  * issue#92: Add Data Source ID to "Empty result' error messages
  * issue#94: Increase default 'results_buffer' size to 2048 and MySQL
    max buffer to 131072 bytes</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1563278400">-Update to version 1.2.5
  - issue: Improve detection of MySQL vs. MariaDB client library requirement
  - issue#98: Checking type in poller.c causes compiler error</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1567425600">-Update to version 1.2.6
  - issue#101: MySQL 8 has retired 'my_bool' type
  - issue#104: Spine should report which threads are outstanding
  - issue#105: Spine should include 'Process[&lt;id&gt;]' in standard logging
  - issue#107: Log Buffer is too small to handle some output
  - issue#108: Once an SNMP timeout is reached, snmp_get does not honor
    include_host
  - issue#109: Initial declarations inside for loop cause compile errors
  - issue#110: When compiling, 'directive output may be truncated'
    messages can appear
  - issue#112: INSTALL instructions have typo in bootstrap command</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1569844800">-Update to version 1.2.7
  - issue#113: spine1.2.6 couldn't open directory `m4'</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- cacti-spine 1.2.8:
  * works with cacti 1.2.8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1581768000">- cacti-spine 1.2.9:
  * works with cacti 1.2.9
  * Improve logging of snmp multiple OID get function
  * PCOMMAND Device[XXXX] WARNING: Recache Event Detected for Device
  * Segmentation Fault triggered by a lot of errors
  * Replace function gethostbyname with thread safe getaddrinfo
  * removed strip_alpha for "Wrong-Type" SNMP-Answer</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586606400">- cacti-spine 1.2.11:
  * fix warnings due to 'Recache Event Detected for Device'
  * Fix database, network and polling errors</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1588852800">- cacti-spine 1.2.12:
  * Failed host lookup causes spine to crash</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1594728000">- cacti-spine 1.2.13:
  * works with cacti 1.2.13</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1596456000">- cacti-spine 1.2.14:
  * fix spine not updating rrd_next_step</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1605096000">- cacti-spine 1.2.15:
  * Special characters may not always be ignored properly</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1607342400">- cacti-spine 1.2.16:
  * Some developer debug log messages falsely labeled as WARNINGS
  * Remove the need of the dos2unix program
  * Fix Spine experiencing MySQL socket error 2002 under load
  * Under heavy load MySQL/MariaDB return 2006 and 2013 errors on query
  * Add backtrace output to stderr for signals
  * Add Data Source turnaround time to debug output</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1620216000">- cacti-spine 1.2.17:
  * Avoid triggering DDos detection in firewalls on large systems
  * Use mysql reconnect option properly
  * Fix possible creashes in various operations
  * Fix remote data collectors pushing too much data to main when
    performing diagnostics
  * Make spine more responsive when remote connection is down
  * Fix various MySQL issues
  * Make spine immune to DST changes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1629547200">- cacti-spine 1.2.18:
  * Fix missing time parameter on FROM_UNIXTIME function
- add cacti-spine-1.2.18-Fix-non-void-return.patch to fix the same</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1636200000">- cacti-spine 1.2.19:
  * Fix 1ssues with polling loop may skip some datasources
  * Fix ping no longer works due to hostname changes
  * Fix RRD steps are not always calculated correctly
  * Fix unable to build when DES no longer supported
  * Fix IPv6 devices are not properly parsed
  * Reduce a number of compiler warnings
  * Fix compiler warnings due to lack of return in thread_mutex_trylock
  * Fix Spine will not look at non-timetics uptime when sysUpTimeInstance overflows
  * Improve performance of Cacti poller on heavily loaded systems
- drop cacti-spine-1.2.18-Fix-non-void-return.patch, upstream</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1650628800">- cacti-spine 1.2.20:
  * Add support for newer versions of MySQL/MariaDB
  * When checking for uptime of device, don't assume a non-response
    is always fatal
  * Fix description and command trunctation issues
  * Improve spine performance when only one snmp agent port is in
    use</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1653825600">- cacti-spine 1.2.21:
  * Disable DES if Net-SNMP doesn't have it</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1664712000">- cacti-spine 1.2.22, delivering a number of bug fixes:
  * When polling time is exceed, spine does not always exit as expected
  * Spine logging at `-V 5` includes an extra line feed
  * Incorrect SNMP responses can cause spine to crash
  * Properly handle devices that timeout responding to the Extended Uptime
  * MariaDB can cause spine to abort prematurely despite error handling
  * Spine should log the error time when exiting via signal</changelog>
</package>
<package pkgid="96b9ded78a6f8a9cc07c00453b9038037bf186f5517c51c078620f23e14bb7f0" name="cacti-spine" arch="ppc64le">
  <version epoch="0" ver="1.2.22" rel="bp154.2.3.1"/>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1554120000">-Update to version 1.2.3
  * issue#76: Spine unhandled exception signal
  * issue: More recent versions of MariaDB require different client library</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1560427200">-Update to version 1.2.4
  * issue#92: Add Data Source ID to "Empty result' error messages
  * issue#94: Increase default 'results_buffer' size to 2048 and MySQL
    max buffer to 131072 bytes</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1563278400">-Update to version 1.2.5
  - issue: Improve detection of MySQL vs. MariaDB client library requirement
  - issue#98: Checking type in poller.c causes compiler error</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1567425600">-Update to version 1.2.6
  - issue#101: MySQL 8 has retired 'my_bool' type
  - issue#104: Spine should report which threads are outstanding
  - issue#105: Spine should include 'Process[&lt;id&gt;]' in standard logging
  - issue#107: Log Buffer is too small to handle some output
  - issue#108: Once an SNMP timeout is reached, snmp_get does not honor
    include_host
  - issue#109: Initial declarations inside for loop cause compile errors
  - issue#110: When compiling, 'directive output may be truncated'
    messages can appear
  - issue#112: INSTALL instructions have typo in bootstrap command</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1569844800">-Update to version 1.2.7
  - issue#113: spine1.2.6 couldn't open directory `m4'</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- cacti-spine 1.2.8:
  * works with cacti 1.2.8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1581768000">- cacti-spine 1.2.9:
  * works with cacti 1.2.9
  * Improve logging of snmp multiple OID get function
  * PCOMMAND Device[XXXX] WARNING: Recache Event Detected for Device
  * Segmentation Fault triggered by a lot of errors
  * Replace function gethostbyname with thread safe getaddrinfo
  * removed strip_alpha for "Wrong-Type" SNMP-Answer</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586606400">- cacti-spine 1.2.11:
  * fix warnings due to 'Recache Event Detected for Device'
  * Fix database, network and polling errors</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1588852800">- cacti-spine 1.2.12:
  * Failed host lookup causes spine to crash</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1594728000">- cacti-spine 1.2.13:
  * works with cacti 1.2.13</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1596456000">- cacti-spine 1.2.14:
  * fix spine not updating rrd_next_step</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1605096000">- cacti-spine 1.2.15:
  * Special characters may not always be ignored properly</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1607342400">- cacti-spine 1.2.16:
  * Some developer debug log messages falsely labeled as WARNINGS
  * Remove the need of the dos2unix program
  * Fix Spine experiencing MySQL socket error 2002 under load
  * Under heavy load MySQL/MariaDB return 2006 and 2013 errors on query
  * Add backtrace output to stderr for signals
  * Add Data Source turnaround time to debug output</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1620216000">- cacti-spine 1.2.17:
  * Avoid triggering DDos detection in firewalls on large systems
  * Use mysql reconnect option properly
  * Fix possible creashes in various operations
  * Fix remote data collectors pushing too much data to main when
    performing diagnostics
  * Make spine more responsive when remote connection is down
  * Fix various MySQL issues
  * Make spine immune to DST changes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1629547200">- cacti-spine 1.2.18:
  * Fix missing time parameter on FROM_UNIXTIME function
- add cacti-spine-1.2.18-Fix-non-void-return.patch to fix the same</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1636200000">- cacti-spine 1.2.19:
  * Fix 1ssues with polling loop may skip some datasources
  * Fix ping no longer works due to hostname changes
  * Fix RRD steps are not always calculated correctly
  * Fix unable to build when DES no longer supported
  * Fix IPv6 devices are not properly parsed
  * Reduce a number of compiler warnings
  * Fix compiler warnings due to lack of return in thread_mutex_trylock
  * Fix Spine will not look at non-timetics uptime when sysUpTimeInstance overflows
  * Improve performance of Cacti poller on heavily loaded systems
- drop cacti-spine-1.2.18-Fix-non-void-return.patch, upstream</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1650628800">- cacti-spine 1.2.20:
  * Add support for newer versions of MySQL/MariaDB
  * When checking for uptime of device, don't assume a non-response
    is always fatal
  * Fix description and command trunctation issues
  * Improve spine performance when only one snmp agent port is in
    use</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1653825600">- cacti-spine 1.2.21:
  * Disable DES if Net-SNMP doesn't have it</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1664712000">- cacti-spine 1.2.22, delivering a number of bug fixes:
  * When polling time is exceed, spine does not always exit as expected
  * Spine logging at `-V 5` includes an extra line feed
  * Incorrect SNMP responses can cause spine to crash
  * Properly handle devices that timeout responding to the Extended Uptime
  * MariaDB can cause spine to abort prematurely despite error handling
  * Spine should log the error time when exiting via signal</changelog>
</package>
<package pkgid="53b4d1d0e306b8797115e86fe14b8432d1d7b0edb389296631ec0705a3056de3" name="cacti-spine" arch="s390x">
  <version epoch="0" ver="1.2.22" rel="bp154.2.3.1"/>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1554120000">-Update to version 1.2.3
  * issue#76: Spine unhandled exception signal
  * issue: More recent versions of MariaDB require different client library</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1560427200">-Update to version 1.2.4
  * issue#92: Add Data Source ID to "Empty result' error messages
  * issue#94: Increase default 'results_buffer' size to 2048 and MySQL
    max buffer to 131072 bytes</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1563278400">-Update to version 1.2.5
  - issue: Improve detection of MySQL vs. MariaDB client library requirement
  - issue#98: Checking type in poller.c causes compiler error</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1567425600">-Update to version 1.2.6
  - issue#101: MySQL 8 has retired 'my_bool' type
  - issue#104: Spine should report which threads are outstanding
  - issue#105: Spine should include 'Process[&lt;id&gt;]' in standard logging
  - issue#107: Log Buffer is too small to handle some output
  - issue#108: Once an SNMP timeout is reached, snmp_get does not honor
    include_host
  - issue#109: Initial declarations inside for loop cause compile errors
  - issue#110: When compiling, 'directive output may be truncated'
    messages can appear
  - issue#112: INSTALL instructions have typo in bootstrap command</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1569844800">-Update to version 1.2.7
  - issue#113: spine1.2.6 couldn't open directory `m4'</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- cacti-spine 1.2.8:
  * works with cacti 1.2.8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1581768000">- cacti-spine 1.2.9:
  * works with cacti 1.2.9
  * Improve logging of snmp multiple OID get function
  * PCOMMAND Device[XXXX] WARNING: Recache Event Detected for Device
  * Segmentation Fault triggered by a lot of errors
  * Replace function gethostbyname with thread safe getaddrinfo
  * removed strip_alpha for "Wrong-Type" SNMP-Answer</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586606400">- cacti-spine 1.2.11:
  * fix warnings due to 'Recache Event Detected for Device'
  * Fix database, network and polling errors</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1588852800">- cacti-spine 1.2.12:
  * Failed host lookup causes spine to crash</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1594728000">- cacti-spine 1.2.13:
  * works with cacti 1.2.13</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1596456000">- cacti-spine 1.2.14:
  * fix spine not updating rrd_next_step</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1605096000">- cacti-spine 1.2.15:
  * Special characters may not always be ignored properly</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1607342400">- cacti-spine 1.2.16:
  * Some developer debug log messages falsely labeled as WARNINGS
  * Remove the need of the dos2unix program
  * Fix Spine experiencing MySQL socket error 2002 under load
  * Under heavy load MySQL/MariaDB return 2006 and 2013 errors on query
  * Add backtrace output to stderr for signals
  * Add Data Source turnaround time to debug output</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1620216000">- cacti-spine 1.2.17:
  * Avoid triggering DDos detection in firewalls on large systems
  * Use mysql reconnect option properly
  * Fix possible creashes in various operations
  * Fix remote data collectors pushing too much data to main when
    performing diagnostics
  * Make spine more responsive when remote connection is down
  * Fix various MySQL issues
  * Make spine immune to DST changes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1629547200">- cacti-spine 1.2.18:
  * Fix missing time parameter on FROM_UNIXTIME function
- add cacti-spine-1.2.18-Fix-non-void-return.patch to fix the same</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1636200000">- cacti-spine 1.2.19:
  * Fix 1ssues with polling loop may skip some datasources
  * Fix ping no longer works due to hostname changes
  * Fix RRD steps are not always calculated correctly
  * Fix unable to build when DES no longer supported
  * Fix IPv6 devices are not properly parsed
  * Reduce a number of compiler warnings
  * Fix compiler warnings due to lack of return in thread_mutex_trylock
  * Fix Spine will not look at non-timetics uptime when sysUpTimeInstance overflows
  * Improve performance of Cacti poller on heavily loaded systems
- drop cacti-spine-1.2.18-Fix-non-void-return.patch, upstream</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1650628800">- cacti-spine 1.2.20:
  * Add support for newer versions of MySQL/MariaDB
  * When checking for uptime of device, don't assume a non-response
    is always fatal
  * Fix description and command trunctation issues
  * Improve spine performance when only one snmp agent port is in
    use</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1653825600">- cacti-spine 1.2.21:
  * Disable DES if Net-SNMP doesn't have it</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1664712000">- cacti-spine 1.2.22, delivering a number of bug fixes:
  * When polling time is exceed, spine does not always exit as expected
  * Spine logging at `-V 5` includes an extra line feed
  * Incorrect SNMP responses can cause spine to crash
  * Properly handle devices that timeout responding to the Extended Uptime
  * MariaDB can cause spine to abort prematurely despite error handling
  * Spine should log the error time when exiting via signal</changelog>
</package>
<package pkgid="6acde15192c58251f5d9065e16c388ecff6515ca3ba126e36da8e72d75743de6" name="cacti-spine" arch="src">
  <version epoch="0" ver="1.2.22" rel="bp154.2.3.1"/>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1554120000">-Update to version 1.2.3
  * issue#76: Spine unhandled exception signal
  * issue: More recent versions of MariaDB require different client library</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1560427200">-Update to version 1.2.4
  * issue#92: Add Data Source ID to "Empty result' error messages
  * issue#94: Increase default 'results_buffer' size to 2048 and MySQL
    max buffer to 131072 bytes</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1563278400">-Update to version 1.2.5
  - issue: Improve detection of MySQL vs. MariaDB client library requirement
  - issue#98: Checking type in poller.c causes compiler error</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1567425600">-Update to version 1.2.6
  - issue#101: MySQL 8 has retired 'my_bool' type
  - issue#104: Spine should report which threads are outstanding
  - issue#105: Spine should include 'Process[&lt;id&gt;]' in standard logging
  - issue#107: Log Buffer is too small to handle some output
  - issue#108: Once an SNMP timeout is reached, snmp_get does not honor
    include_host
  - issue#109: Initial declarations inside for loop cause compile errors
  - issue#110: When compiling, 'directive output may be truncated'
    messages can appear
  - issue#112: INSTALL instructions have typo in bootstrap command</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1569844800">-Update to version 1.2.7
  - issue#113: spine1.2.6 couldn't open directory `m4'</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- cacti-spine 1.2.8:
  * works with cacti 1.2.8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1581768000">- cacti-spine 1.2.9:
  * works with cacti 1.2.9
  * Improve logging of snmp multiple OID get function
  * PCOMMAND Device[XXXX] WARNING: Recache Event Detected for Device
  * Segmentation Fault triggered by a lot of errors
  * Replace function gethostbyname with thread safe getaddrinfo
  * removed strip_alpha for "Wrong-Type" SNMP-Answer</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586606400">- cacti-spine 1.2.11:
  * fix warnings due to 'Recache Event Detected for Device'
  * Fix database, network and polling errors</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1588852800">- cacti-spine 1.2.12:
  * Failed host lookup causes spine to crash</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1594728000">- cacti-spine 1.2.13:
  * works with cacti 1.2.13</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1596456000">- cacti-spine 1.2.14:
  * fix spine not updating rrd_next_step</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1605096000">- cacti-spine 1.2.15:
  * Special characters may not always be ignored properly</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1607342400">- cacti-spine 1.2.16:
  * Some developer debug log messages falsely labeled as WARNINGS
  * Remove the need of the dos2unix program
  * Fix Spine experiencing MySQL socket error 2002 under load
  * Under heavy load MySQL/MariaDB return 2006 and 2013 errors on query
  * Add backtrace output to stderr for signals
  * Add Data Source turnaround time to debug output</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1620216000">- cacti-spine 1.2.17:
  * Avoid triggering DDos detection in firewalls on large systems
  * Use mysql reconnect option properly
  * Fix possible creashes in various operations
  * Fix remote data collectors pushing too much data to main when
    performing diagnostics
  * Make spine more responsive when remote connection is down
  * Fix various MySQL issues
  * Make spine immune to DST changes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1629547200">- cacti-spine 1.2.18:
  * Fix missing time parameter on FROM_UNIXTIME function
- add cacti-spine-1.2.18-Fix-non-void-return.patch to fix the same</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1636200000">- cacti-spine 1.2.19:
  * Fix 1ssues with polling loop may skip some datasources
  * Fix ping no longer works due to hostname changes
  * Fix RRD steps are not always calculated correctly
  * Fix unable to build when DES no longer supported
  * Fix IPv6 devices are not properly parsed
  * Reduce a number of compiler warnings
  * Fix compiler warnings due to lack of return in thread_mutex_trylock
  * Fix Spine will not look at non-timetics uptime when sysUpTimeInstance overflows
  * Improve performance of Cacti poller on heavily loaded systems
- drop cacti-spine-1.2.18-Fix-non-void-return.patch, upstream</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1650628800">- cacti-spine 1.2.20:
  * Add support for newer versions of MySQL/MariaDB
  * When checking for uptime of device, don't assume a non-response
    is always fatal
  * Fix description and command trunctation issues
  * Improve spine performance when only one snmp agent port is in
    use</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1653825600">- cacti-spine 1.2.21:
  * Disable DES if Net-SNMP doesn't have it</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1664712000">- cacti-spine 1.2.22, delivering a number of bug fixes:
  * When polling time is exceed, spine does not always exit as expected
  * Spine logging at `-V 5` includes an extra line feed
  * Incorrect SNMP responses can cause spine to crash
  * Properly handle devices that timeout responding to the Extended Uptime
  * MariaDB can cause spine to abort prematurely despite error handling
  * Spine should log the error time when exiting via signal</changelog>
</package>
<package pkgid="a7a66359b0b0ebc58e4836477649c85632c2a19381c8e4d9a702f2201615a6ff" name="cacti-spine" arch="x86_64">
  <version epoch="0" ver="1.2.22" rel="bp154.2.3.1"/>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1554120000">-Update to version 1.2.3
  * issue#76: Spine unhandled exception signal
  * issue: More recent versions of MariaDB require different client library</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1560427200">-Update to version 1.2.4
  * issue#92: Add Data Source ID to "Empty result' error messages
  * issue#94: Increase default 'results_buffer' size to 2048 and MySQL
    max buffer to 131072 bytes</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1563278400">-Update to version 1.2.5
  - issue: Improve detection of MySQL vs. MariaDB client library requirement
  - issue#98: Checking type in poller.c causes compiler error</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1567425600">-Update to version 1.2.6
  - issue#101: MySQL 8 has retired 'my_bool' type
  - issue#104: Spine should report which threads are outstanding
  - issue#105: Spine should include 'Process[&lt;id&gt;]' in standard logging
  - issue#107: Log Buffer is too small to handle some output
  - issue#108: Once an SNMP timeout is reached, snmp_get does not honor
    include_host
  - issue#109: Initial declarations inside for loop cause compile errors
  - issue#110: When compiling, 'directive output may be truncated'
    messages can appear
  - issue#112: INSTALL instructions have typo in bootstrap command</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1569844800">-Update to version 1.2.7
  - issue#113: spine1.2.6 couldn't open directory `m4'</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- cacti-spine 1.2.8:
  * works with cacti 1.2.8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1581768000">- cacti-spine 1.2.9:
  * works with cacti 1.2.9
  * Improve logging of snmp multiple OID get function
  * PCOMMAND Device[XXXX] WARNING: Recache Event Detected for Device
  * Segmentation Fault triggered by a lot of errors
  * Replace function gethostbyname with thread safe getaddrinfo
  * removed strip_alpha for "Wrong-Type" SNMP-Answer</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586606400">- cacti-spine 1.2.11:
  * fix warnings due to 'Recache Event Detected for Device'
  * Fix database, network and polling errors</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1588852800">- cacti-spine 1.2.12:
  * Failed host lookup causes spine to crash</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1594728000">- cacti-spine 1.2.13:
  * works with cacti 1.2.13</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1596456000">- cacti-spine 1.2.14:
  * fix spine not updating rrd_next_step</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1605096000">- cacti-spine 1.2.15:
  * Special characters may not always be ignored properly</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1607342400">- cacti-spine 1.2.16:
  * Some developer debug log messages falsely labeled as WARNINGS
  * Remove the need of the dos2unix program
  * Fix Spine experiencing MySQL socket error 2002 under load
  * Under heavy load MySQL/MariaDB return 2006 and 2013 errors on query
  * Add backtrace output to stderr for signals
  * Add Data Source turnaround time to debug output</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1620216000">- cacti-spine 1.2.17:
  * Avoid triggering DDos detection in firewalls on large systems
  * Use mysql reconnect option properly
  * Fix possible creashes in various operations
  * Fix remote data collectors pushing too much data to main when
    performing diagnostics
  * Make spine more responsive when remote connection is down
  * Fix various MySQL issues
  * Make spine immune to DST changes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1629547200">- cacti-spine 1.2.18:
  * Fix missing time parameter on FROM_UNIXTIME function
- add cacti-spine-1.2.18-Fix-non-void-return.patch to fix the same</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1636200000">- cacti-spine 1.2.19:
  * Fix 1ssues with polling loop may skip some datasources
  * Fix ping no longer works due to hostname changes
  * Fix RRD steps are not always calculated correctly
  * Fix unable to build when DES no longer supported
  * Fix IPv6 devices are not properly parsed
  * Reduce a number of compiler warnings
  * Fix compiler warnings due to lack of return in thread_mutex_trylock
  * Fix Spine will not look at non-timetics uptime when sysUpTimeInstance overflows
  * Improve performance of Cacti poller on heavily loaded systems
- drop cacti-spine-1.2.18-Fix-non-void-return.patch, upstream</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1650628800">- cacti-spine 1.2.20:
  * Add support for newer versions of MySQL/MariaDB
  * When checking for uptime of device, don't assume a non-response
    is always fatal
  * Fix description and command trunctation issues
  * Improve spine performance when only one snmp agent port is in
    use</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1653825600">- cacti-spine 1.2.21:
  * Disable DES if Net-SNMP doesn't have it</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1664712000">- cacti-spine 1.2.22, delivering a number of bug fixes:
  * When polling time is exceed, spine does not always exit as expected
  * Spine logging at `-V 5` includes an extra line feed
  * Incorrect SNMP responses can cause spine to crash
  * Properly handle devices that timeout responding to the Extended Uptime
  * MariaDB can cause spine to abort prematurely despite error handling
  * Spine should log the error time when exiting via signal</changelog>
</package>
<package pkgid="6e27d0e8d6e1355cf57f212f2e65c791fc030f77f52f8ee25319dce91f93cc1c" name="cacti-spine" arch="aarch64">
  <version epoch="0" ver="1.2.23" rel="bp154.2.6.1"/>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1560427200">-Update to version 1.2.4
  * issue#92: Add Data Source ID to "Empty result' error messages
  * issue#94: Increase default 'results_buffer' size to 2048 and MySQL
    max buffer to 131072 bytes</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1563278400">-Update to version 1.2.5
  - issue: Improve detection of MySQL vs. MariaDB client library requirement
  - issue#98: Checking type in poller.c causes compiler error</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1567425600">-Update to version 1.2.6
  - issue#101: MySQL 8 has retired 'my_bool' type
  - issue#104: Spine should report which threads are outstanding
  - issue#105: Spine should include 'Process[&lt;id&gt;]' in standard logging
  - issue#107: Log Buffer is too small to handle some output
  - issue#108: Once an SNMP timeout is reached, snmp_get does not honor
    include_host
  - issue#109: Initial declarations inside for loop cause compile errors
  - issue#110: When compiling, 'directive output may be truncated'
    messages can appear
  - issue#112: INSTALL instructions have typo in bootstrap command</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1569844800">-Update to version 1.2.7
  - issue#113: spine1.2.6 couldn't open directory `m4'</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- cacti-spine 1.2.8:
  * works with cacti 1.2.8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1581768000">- cacti-spine 1.2.9:
  * works with cacti 1.2.9
  * Improve logging of snmp multiple OID get function
  * PCOMMAND Device[XXXX] WARNING: Recache Event Detected for Device
  * Segmentation Fault triggered by a lot of errors
  * Replace function gethostbyname with thread safe getaddrinfo
  * removed strip_alpha for "Wrong-Type" SNMP-Answer</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586606400">- cacti-spine 1.2.11:
  * fix warnings due to 'Recache Event Detected for Device'
  * Fix database, network and polling errors</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1588852800">- cacti-spine 1.2.12:
  * Failed host lookup causes spine to crash</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1594728000">- cacti-spine 1.2.13:
  * works with cacti 1.2.13</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1596456000">- cacti-spine 1.2.14:
  * fix spine not updating rrd_next_step</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1605096000">- cacti-spine 1.2.15:
  * Special characters may not always be ignored properly</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1607342400">- cacti-spine 1.2.16:
  * Some developer debug log messages falsely labeled as WARNINGS
  * Remove the need of the dos2unix program
  * Fix Spine experiencing MySQL socket error 2002 under load
  * Under heavy load MySQL/MariaDB return 2006 and 2013 errors on query
  * Add backtrace output to stderr for signals
  * Add Data Source turnaround time to debug output</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1620216000">- cacti-spine 1.2.17:
  * Avoid triggering DDos detection in firewalls on large systems
  * Use mysql reconnect option properly
  * Fix possible creashes in various operations
  * Fix remote data collectors pushing too much data to main when
    performing diagnostics
  * Make spine more responsive when remote connection is down
  * Fix various MySQL issues
  * Make spine immune to DST changes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1629547200">- cacti-spine 1.2.18:
  * Fix missing time parameter on FROM_UNIXTIME function
- add cacti-spine-1.2.18-Fix-non-void-return.patch to fix the same</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1636200000">- cacti-spine 1.2.19:
  * Fix 1ssues with polling loop may skip some datasources
  * Fix ping no longer works due to hostname changes
  * Fix RRD steps are not always calculated correctly
  * Fix unable to build when DES no longer supported
  * Fix IPv6 devices are not properly parsed
  * Reduce a number of compiler warnings
  * Fix compiler warnings due to lack of return in thread_mutex_trylock
  * Fix Spine will not look at non-timetics uptime when sysUpTimeInstance overflows
  * Improve performance of Cacti poller on heavily loaded systems
- drop cacti-spine-1.2.18-Fix-non-void-return.patch, upstream</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1650628800">- cacti-spine 1.2.20:
  * Add support for newer versions of MySQL/MariaDB
  * When checking for uptime of device, don't assume a non-response
    is always fatal
  * Fix description and command trunctation issues
  * Improve spine performance when only one snmp agent port is in
    use</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1653825600">- cacti-spine 1.2.21:
  * Disable DES if Net-SNMP doesn't have it</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1664712000">- cacti-spine 1.2.22, delivering a number of bug fixes:
  * When polling time is exceed, spine does not always exit as expected
  * Spine logging at `-V 5` includes an extra line feed
  * Incorrect SNMP responses can cause spine to crash
  * Properly handle devices that timeout responding to the Extended Uptime
  * MariaDB can cause spine to abort prematurely despite error handling
  * Spine should log the error time when exiting via signal</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1672660800">- cacti-spine 1.2.23:
  * Fix unexpected reindexing when using uptime as the reindex
    method
  * Spine should prevent the script server from connecting to remote
    when offline
  * Improve Script Server Timeout Logging
  * Add SQL_NO_CACHE to Spine Queries</changelog>
</package>
<package pkgid="569f0b3b130c545ac14805e5a0b3e67c150edda5bdd05c472f63446964e71d7e" name="cacti-spine" arch="i586">
  <version epoch="0" ver="1.2.23" rel="bp154.2.6.1"/>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1560427200">-Update to version 1.2.4
  * issue#92: Add Data Source ID to "Empty result' error messages
  * issue#94: Increase default 'results_buffer' size to 2048 and MySQL
    max buffer to 131072 bytes</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1563278400">-Update to version 1.2.5
  - issue: Improve detection of MySQL vs. MariaDB client library requirement
  - issue#98: Checking type in poller.c causes compiler error</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1567425600">-Update to version 1.2.6
  - issue#101: MySQL 8 has retired 'my_bool' type
  - issue#104: Spine should report which threads are outstanding
  - issue#105: Spine should include 'Process[&lt;id&gt;]' in standard logging
  - issue#107: Log Buffer is too small to handle some output
  - issue#108: Once an SNMP timeout is reached, snmp_get does not honor
    include_host
  - issue#109: Initial declarations inside for loop cause compile errors
  - issue#110: When compiling, 'directive output may be truncated'
    messages can appear
  - issue#112: INSTALL instructions have typo in bootstrap command</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1569844800">-Update to version 1.2.7
  - issue#113: spine1.2.6 couldn't open directory `m4'</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- cacti-spine 1.2.8:
  * works with cacti 1.2.8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1581768000">- cacti-spine 1.2.9:
  * works with cacti 1.2.9
  * Improve logging of snmp multiple OID get function
  * PCOMMAND Device[XXXX] WARNING: Recache Event Detected for Device
  * Segmentation Fault triggered by a lot of errors
  * Replace function gethostbyname with thread safe getaddrinfo
  * removed strip_alpha for "Wrong-Type" SNMP-Answer</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586606400">- cacti-spine 1.2.11:
  * fix warnings due to 'Recache Event Detected for Device'
  * Fix database, network and polling errors</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1588852800">- cacti-spine 1.2.12:
  * Failed host lookup causes spine to crash</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1594728000">- cacti-spine 1.2.13:
  * works with cacti 1.2.13</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1596456000">- cacti-spine 1.2.14:
  * fix spine not updating rrd_next_step</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1605096000">- cacti-spine 1.2.15:
  * Special characters may not always be ignored properly</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1607342400">- cacti-spine 1.2.16:
  * Some developer debug log messages falsely labeled as WARNINGS
  * Remove the need of the dos2unix program
  * Fix Spine experiencing MySQL socket error 2002 under load
  * Under heavy load MySQL/MariaDB return 2006 and 2013 errors on query
  * Add backtrace output to stderr for signals
  * Add Data Source turnaround time to debug output</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1620216000">- cacti-spine 1.2.17:
  * Avoid triggering DDos detection in firewalls on large systems
  * Use mysql reconnect option properly
  * Fix possible creashes in various operations
  * Fix remote data collectors pushing too much data to main when
    performing diagnostics
  * Make spine more responsive when remote connection is down
  * Fix various MySQL issues
  * Make spine immune to DST changes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1629547200">- cacti-spine 1.2.18:
  * Fix missing time parameter on FROM_UNIXTIME function
- add cacti-spine-1.2.18-Fix-non-void-return.patch to fix the same</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1636200000">- cacti-spine 1.2.19:
  * Fix 1ssues with polling loop may skip some datasources
  * Fix ping no longer works due to hostname changes
  * Fix RRD steps are not always calculated correctly
  * Fix unable to build when DES no longer supported
  * Fix IPv6 devices are not properly parsed
  * Reduce a number of compiler warnings
  * Fix compiler warnings due to lack of return in thread_mutex_trylock
  * Fix Spine will not look at non-timetics uptime when sysUpTimeInstance overflows
  * Improve performance of Cacti poller on heavily loaded systems
- drop cacti-spine-1.2.18-Fix-non-void-return.patch, upstream</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1650628800">- cacti-spine 1.2.20:
  * Add support for newer versions of MySQL/MariaDB
  * When checking for uptime of device, don't assume a non-response
    is always fatal
  * Fix description and command trunctation issues
  * Improve spine performance when only one snmp agent port is in
    use</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1653825600">- cacti-spine 1.2.21:
  * Disable DES if Net-SNMP doesn't have it</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1664712000">- cacti-spine 1.2.22, delivering a number of bug fixes:
  * When polling time is exceed, spine does not always exit as expected
  * Spine logging at `-V 5` includes an extra line feed
  * Incorrect SNMP responses can cause spine to crash
  * Properly handle devices that timeout responding to the Extended Uptime
  * MariaDB can cause spine to abort prematurely despite error handling
  * Spine should log the error time when exiting via signal</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1672660800">- cacti-spine 1.2.23:
  * Fix unexpected reindexing when using uptime as the reindex
    method
  * Spine should prevent the script server from connecting to remote
    when offline
  * Improve Script Server Timeout Logging
  * Add SQL_NO_CACHE to Spine Queries</changelog>
</package>
<package pkgid="b930b87cea8eae235cf24a5efb219708a59b84036ee3aceac9ca6c60d53d8774" name="cacti-spine" arch="ppc64le">
  <version epoch="0" ver="1.2.23" rel="bp154.2.6.1"/>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1560427200">-Update to version 1.2.4
  * issue#92: Add Data Source ID to "Empty result' error messages
  * issue#94: Increase default 'results_buffer' size to 2048 and MySQL
    max buffer to 131072 bytes</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1563278400">-Update to version 1.2.5
  - issue: Improve detection of MySQL vs. MariaDB client library requirement
  - issue#98: Checking type in poller.c causes compiler error</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1567425600">-Update to version 1.2.6
  - issue#101: MySQL 8 has retired 'my_bool' type
  - issue#104: Spine should report which threads are outstanding
  - issue#105: Spine should include 'Process[&lt;id&gt;]' in standard logging
  - issue#107: Log Buffer is too small to handle some output
  - issue#108: Once an SNMP timeout is reached, snmp_get does not honor
    include_host
  - issue#109: Initial declarations inside for loop cause compile errors
  - issue#110: When compiling, 'directive output may be truncated'
    messages can appear
  - issue#112: INSTALL instructions have typo in bootstrap command</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1569844800">-Update to version 1.2.7
  - issue#113: spine1.2.6 couldn't open directory `m4'</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- cacti-spine 1.2.8:
  * works with cacti 1.2.8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1581768000">- cacti-spine 1.2.9:
  * works with cacti 1.2.9
  * Improve logging of snmp multiple OID get function
  * PCOMMAND Device[XXXX] WARNING: Recache Event Detected for Device
  * Segmentation Fault triggered by a lot of errors
  * Replace function gethostbyname with thread safe getaddrinfo
  * removed strip_alpha for "Wrong-Type" SNMP-Answer</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586606400">- cacti-spine 1.2.11:
  * fix warnings due to 'Recache Event Detected for Device'
  * Fix database, network and polling errors</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1588852800">- cacti-spine 1.2.12:
  * Failed host lookup causes spine to crash</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1594728000">- cacti-spine 1.2.13:
  * works with cacti 1.2.13</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1596456000">- cacti-spine 1.2.14:
  * fix spine not updating rrd_next_step</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1605096000">- cacti-spine 1.2.15:
  * Special characters may not always be ignored properly</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1607342400">- cacti-spine 1.2.16:
  * Some developer debug log messages falsely labeled as WARNINGS
  * Remove the need of the dos2unix program
  * Fix Spine experiencing MySQL socket error 2002 under load
  * Under heavy load MySQL/MariaDB return 2006 and 2013 errors on query
  * Add backtrace output to stderr for signals
  * Add Data Source turnaround time to debug output</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1620216000">- cacti-spine 1.2.17:
  * Avoid triggering DDos detection in firewalls on large systems
  * Use mysql reconnect option properly
  * Fix possible creashes in various operations
  * Fix remote data collectors pushing too much data to main when
    performing diagnostics
  * Make spine more responsive when remote connection is down
  * Fix various MySQL issues
  * Make spine immune to DST changes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1629547200">- cacti-spine 1.2.18:
  * Fix missing time parameter on FROM_UNIXTIME function
- add cacti-spine-1.2.18-Fix-non-void-return.patch to fix the same</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1636200000">- cacti-spine 1.2.19:
  * Fix 1ssues with polling loop may skip some datasources
  * Fix ping no longer works due to hostname changes
  * Fix RRD steps are not always calculated correctly
  * Fix unable to build when DES no longer supported
  * Fix IPv6 devices are not properly parsed
  * Reduce a number of compiler warnings
  * Fix compiler warnings due to lack of return in thread_mutex_trylock
  * Fix Spine will not look at non-timetics uptime when sysUpTimeInstance overflows
  * Improve performance of Cacti poller on heavily loaded systems
- drop cacti-spine-1.2.18-Fix-non-void-return.patch, upstream</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1650628800">- cacti-spine 1.2.20:
  * Add support for newer versions of MySQL/MariaDB
  * When checking for uptime of device, don't assume a non-response
    is always fatal
  * Fix description and command trunctation issues
  * Improve spine performance when only one snmp agent port is in
    use</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1653825600">- cacti-spine 1.2.21:
  * Disable DES if Net-SNMP doesn't have it</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1664712000">- cacti-spine 1.2.22, delivering a number of bug fixes:
  * When polling time is exceed, spine does not always exit as expected
  * Spine logging at `-V 5` includes an extra line feed
  * Incorrect SNMP responses can cause spine to crash
  * Properly handle devices that timeout responding to the Extended Uptime
  * MariaDB can cause spine to abort prematurely despite error handling
  * Spine should log the error time when exiting via signal</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1672660800">- cacti-spine 1.2.23:
  * Fix unexpected reindexing when using uptime as the reindex
    method
  * Spine should prevent the script server from connecting to remote
    when offline
  * Improve Script Server Timeout Logging
  * Add SQL_NO_CACHE to Spine Queries</changelog>
</package>
<package pkgid="0709060767ca851d76fadd50d0e8c34f900a1ce0b0401a41a39744028a412fd2" name="cacti-spine" arch="s390x">
  <version epoch="0" ver="1.2.23" rel="bp154.2.6.1"/>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1560427200">-Update to version 1.2.4
  * issue#92: Add Data Source ID to "Empty result' error messages
  * issue#94: Increase default 'results_buffer' size to 2048 and MySQL
    max buffer to 131072 bytes</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1563278400">-Update to version 1.2.5
  - issue: Improve detection of MySQL vs. MariaDB client library requirement
  - issue#98: Checking type in poller.c causes compiler error</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1567425600">-Update to version 1.2.6
  - issue#101: MySQL 8 has retired 'my_bool' type
  - issue#104: Spine should report which threads are outstanding
  - issue#105: Spine should include 'Process[&lt;id&gt;]' in standard logging
  - issue#107: Log Buffer is too small to handle some output
  - issue#108: Once an SNMP timeout is reached, snmp_get does not honor
    include_host
  - issue#109: Initial declarations inside for loop cause compile errors
  - issue#110: When compiling, 'directive output may be truncated'
    messages can appear
  - issue#112: INSTALL instructions have typo in bootstrap command</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1569844800">-Update to version 1.2.7
  - issue#113: spine1.2.6 couldn't open directory `m4'</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- cacti-spine 1.2.8:
  * works with cacti 1.2.8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1581768000">- cacti-spine 1.2.9:
  * works with cacti 1.2.9
  * Improve logging of snmp multiple OID get function
  * PCOMMAND Device[XXXX] WARNING: Recache Event Detected for Device
  * Segmentation Fault triggered by a lot of errors
  * Replace function gethostbyname with thread safe getaddrinfo
  * removed strip_alpha for "Wrong-Type" SNMP-Answer</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586606400">- cacti-spine 1.2.11:
  * fix warnings due to 'Recache Event Detected for Device'
  * Fix database, network and polling errors</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1588852800">- cacti-spine 1.2.12:
  * Failed host lookup causes spine to crash</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1594728000">- cacti-spine 1.2.13:
  * works with cacti 1.2.13</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1596456000">- cacti-spine 1.2.14:
  * fix spine not updating rrd_next_step</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1605096000">- cacti-spine 1.2.15:
  * Special characters may not always be ignored properly</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1607342400">- cacti-spine 1.2.16:
  * Some developer debug log messages falsely labeled as WARNINGS
  * Remove the need of the dos2unix program
  * Fix Spine experiencing MySQL socket error 2002 under load
  * Under heavy load MySQL/MariaDB return 2006 and 2013 errors on query
  * Add backtrace output to stderr for signals
  * Add Data Source turnaround time to debug output</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1620216000">- cacti-spine 1.2.17:
  * Avoid triggering DDos detection in firewalls on large systems
  * Use mysql reconnect option properly
  * Fix possible creashes in various operations
  * Fix remote data collectors pushing too much data to main when
    performing diagnostics
  * Make spine more responsive when remote connection is down
  * Fix various MySQL issues
  * Make spine immune to DST changes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1629547200">- cacti-spine 1.2.18:
  * Fix missing time parameter on FROM_UNIXTIME function
- add cacti-spine-1.2.18-Fix-non-void-return.patch to fix the same</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1636200000">- cacti-spine 1.2.19:
  * Fix 1ssues with polling loop may skip some datasources
  * Fix ping no longer works due to hostname changes
  * Fix RRD steps are not always calculated correctly
  * Fix unable to build when DES no longer supported
  * Fix IPv6 devices are not properly parsed
  * Reduce a number of compiler warnings
  * Fix compiler warnings due to lack of return in thread_mutex_trylock
  * Fix Spine will not look at non-timetics uptime when sysUpTimeInstance overflows
  * Improve performance of Cacti poller on heavily loaded systems
- drop cacti-spine-1.2.18-Fix-non-void-return.patch, upstream</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1650628800">- cacti-spine 1.2.20:
  * Add support for newer versions of MySQL/MariaDB
  * When checking for uptime of device, don't assume a non-response
    is always fatal
  * Fix description and command trunctation issues
  * Improve spine performance when only one snmp agent port is in
    use</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1653825600">- cacti-spine 1.2.21:
  * Disable DES if Net-SNMP doesn't have it</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1664712000">- cacti-spine 1.2.22, delivering a number of bug fixes:
  * When polling time is exceed, spine does not always exit as expected
  * Spine logging at `-V 5` includes an extra line feed
  * Incorrect SNMP responses can cause spine to crash
  * Properly handle devices that timeout responding to the Extended Uptime
  * MariaDB can cause spine to abort prematurely despite error handling
  * Spine should log the error time when exiting via signal</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1672660800">- cacti-spine 1.2.23:
  * Fix unexpected reindexing when using uptime as the reindex
    method
  * Spine should prevent the script server from connecting to remote
    when offline
  * Improve Script Server Timeout Logging
  * Add SQL_NO_CACHE to Spine Queries</changelog>
</package>
<package pkgid="de3d83931f1fc4b8a233a506903e1a08255168d0775a087700ecd8372a11a1db" name="cacti-spine" arch="src">
  <version epoch="0" ver="1.2.23" rel="bp154.2.6.1"/>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1560427200">-Update to version 1.2.4
  * issue#92: Add Data Source ID to "Empty result' error messages
  * issue#94: Increase default 'results_buffer' size to 2048 and MySQL
    max buffer to 131072 bytes</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1563278400">-Update to version 1.2.5
  - issue: Improve detection of MySQL vs. MariaDB client library requirement
  - issue#98: Checking type in poller.c causes compiler error</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1567425600">-Update to version 1.2.6
  - issue#101: MySQL 8 has retired 'my_bool' type
  - issue#104: Spine should report which threads are outstanding
  - issue#105: Spine should include 'Process[&lt;id&gt;]' in standard logging
  - issue#107: Log Buffer is too small to handle some output
  - issue#108: Once an SNMP timeout is reached, snmp_get does not honor
    include_host
  - issue#109: Initial declarations inside for loop cause compile errors
  - issue#110: When compiling, 'directive output may be truncated'
    messages can appear
  - issue#112: INSTALL instructions have typo in bootstrap command</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1569844800">-Update to version 1.2.7
  - issue#113: spine1.2.6 couldn't open directory `m4'</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- cacti-spine 1.2.8:
  * works with cacti 1.2.8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1581768000">- cacti-spine 1.2.9:
  * works with cacti 1.2.9
  * Improve logging of snmp multiple OID get function
  * PCOMMAND Device[XXXX] WARNING: Recache Event Detected for Device
  * Segmentation Fault triggered by a lot of errors
  * Replace function gethostbyname with thread safe getaddrinfo
  * removed strip_alpha for "Wrong-Type" SNMP-Answer</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586606400">- cacti-spine 1.2.11:
  * fix warnings due to 'Recache Event Detected for Device'
  * Fix database, network and polling errors</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1588852800">- cacti-spine 1.2.12:
  * Failed host lookup causes spine to crash</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1594728000">- cacti-spine 1.2.13:
  * works with cacti 1.2.13</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1596456000">- cacti-spine 1.2.14:
  * fix spine not updating rrd_next_step</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1605096000">- cacti-spine 1.2.15:
  * Special characters may not always be ignored properly</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1607342400">- cacti-spine 1.2.16:
  * Some developer debug log messages falsely labeled as WARNINGS
  * Remove the need of the dos2unix program
  * Fix Spine experiencing MySQL socket error 2002 under load
  * Under heavy load MySQL/MariaDB return 2006 and 2013 errors on query
  * Add backtrace output to stderr for signals
  * Add Data Source turnaround time to debug output</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1620216000">- cacti-spine 1.2.17:
  * Avoid triggering DDos detection in firewalls on large systems
  * Use mysql reconnect option properly
  * Fix possible creashes in various operations
  * Fix remote data collectors pushing too much data to main when
    performing diagnostics
  * Make spine more responsive when remote connection is down
  * Fix various MySQL issues
  * Make spine immune to DST changes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1629547200">- cacti-spine 1.2.18:
  * Fix missing time parameter on FROM_UNIXTIME function
- add cacti-spine-1.2.18-Fix-non-void-return.patch to fix the same</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1636200000">- cacti-spine 1.2.19:
  * Fix 1ssues with polling loop may skip some datasources
  * Fix ping no longer works due to hostname changes
  * Fix RRD steps are not always calculated correctly
  * Fix unable to build when DES no longer supported
  * Fix IPv6 devices are not properly parsed
  * Reduce a number of compiler warnings
  * Fix compiler warnings due to lack of return in thread_mutex_trylock
  * Fix Spine will not look at non-timetics uptime when sysUpTimeInstance overflows
  * Improve performance of Cacti poller on heavily loaded systems
- drop cacti-spine-1.2.18-Fix-non-void-return.patch, upstream</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1650628800">- cacti-spine 1.2.20:
  * Add support for newer versions of MySQL/MariaDB
  * When checking for uptime of device, don't assume a non-response
    is always fatal
  * Fix description and command trunctation issues
  * Improve spine performance when only one snmp agent port is in
    use</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1653825600">- cacti-spine 1.2.21:
  * Disable DES if Net-SNMP doesn't have it</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1664712000">- cacti-spine 1.2.22, delivering a number of bug fixes:
  * When polling time is exceed, spine does not always exit as expected
  * Spine logging at `-V 5` includes an extra line feed
  * Incorrect SNMP responses can cause spine to crash
  * Properly handle devices that timeout responding to the Extended Uptime
  * MariaDB can cause spine to abort prematurely despite error handling
  * Spine should log the error time when exiting via signal</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1672660800">- cacti-spine 1.2.23:
  * Fix unexpected reindexing when using uptime as the reindex
    method
  * Spine should prevent the script server from connecting to remote
    when offline
  * Improve Script Server Timeout Logging
  * Add SQL_NO_CACHE to Spine Queries</changelog>
</package>
<package pkgid="29837483e591290f18fdb6f5bb0d34b35ee406dcd42d76804b6a0e89444bbd19" name="cacti-spine" arch="x86_64">
  <version epoch="0" ver="1.2.23" rel="bp154.2.6.1"/>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1560427200">-Update to version 1.2.4
  * issue#92: Add Data Source ID to "Empty result' error messages
  * issue#94: Increase default 'results_buffer' size to 2048 and MySQL
    max buffer to 131072 bytes</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1563278400">-Update to version 1.2.5
  - issue: Improve detection of MySQL vs. MariaDB client library requirement
  - issue#98: Checking type in poller.c causes compiler error</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1567425600">-Update to version 1.2.6
  - issue#101: MySQL 8 has retired 'my_bool' type
  - issue#104: Spine should report which threads are outstanding
  - issue#105: Spine should include 'Process[&lt;id&gt;]' in standard logging
  - issue#107: Log Buffer is too small to handle some output
  - issue#108: Once an SNMP timeout is reached, snmp_get does not honor
    include_host
  - issue#109: Initial declarations inside for loop cause compile errors
  - issue#110: When compiling, 'directive output may be truncated'
    messages can appear
  - issue#112: INSTALL instructions have typo in bootstrap command</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1569844800">-Update to version 1.2.7
  - issue#113: spine1.2.6 couldn't open directory `m4'</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- cacti-spine 1.2.8:
  * works with cacti 1.2.8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1581768000">- cacti-spine 1.2.9:
  * works with cacti 1.2.9
  * Improve logging of snmp multiple OID get function
  * PCOMMAND Device[XXXX] WARNING: Recache Event Detected for Device
  * Segmentation Fault triggered by a lot of errors
  * Replace function gethostbyname with thread safe getaddrinfo
  * removed strip_alpha for "Wrong-Type" SNMP-Answer</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586606400">- cacti-spine 1.2.11:
  * fix warnings due to 'Recache Event Detected for Device'
  * Fix database, network and polling errors</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1588852800">- cacti-spine 1.2.12:
  * Failed host lookup causes spine to crash</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1594728000">- cacti-spine 1.2.13:
  * works with cacti 1.2.13</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1596456000">- cacti-spine 1.2.14:
  * fix spine not updating rrd_next_step</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1605096000">- cacti-spine 1.2.15:
  * Special characters may not always be ignored properly</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1607342400">- cacti-spine 1.2.16:
  * Some developer debug log messages falsely labeled as WARNINGS
  * Remove the need of the dos2unix program
  * Fix Spine experiencing MySQL socket error 2002 under load
  * Under heavy load MySQL/MariaDB return 2006 and 2013 errors on query
  * Add backtrace output to stderr for signals
  * Add Data Source turnaround time to debug output</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1620216000">- cacti-spine 1.2.17:
  * Avoid triggering DDos detection in firewalls on large systems
  * Use mysql reconnect option properly
  * Fix possible creashes in various operations
  * Fix remote data collectors pushing too much data to main when
    performing diagnostics
  * Make spine more responsive when remote connection is down
  * Fix various MySQL issues
  * Make spine immune to DST changes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1629547200">- cacti-spine 1.2.18:
  * Fix missing time parameter on FROM_UNIXTIME function
- add cacti-spine-1.2.18-Fix-non-void-return.patch to fix the same</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1636200000">- cacti-spine 1.2.19:
  * Fix 1ssues with polling loop may skip some datasources
  * Fix ping no longer works due to hostname changes
  * Fix RRD steps are not always calculated correctly
  * Fix unable to build when DES no longer supported
  * Fix IPv6 devices are not properly parsed
  * Reduce a number of compiler warnings
  * Fix compiler warnings due to lack of return in thread_mutex_trylock
  * Fix Spine will not look at non-timetics uptime when sysUpTimeInstance overflows
  * Improve performance of Cacti poller on heavily loaded systems
- drop cacti-spine-1.2.18-Fix-non-void-return.patch, upstream</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1650628800">- cacti-spine 1.2.20:
  * Add support for newer versions of MySQL/MariaDB
  * When checking for uptime of device, don't assume a non-response
    is always fatal
  * Fix description and command trunctation issues
  * Improve spine performance when only one snmp agent port is in
    use</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1653825600">- cacti-spine 1.2.21:
  * Disable DES if Net-SNMP doesn't have it</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1664712000">- cacti-spine 1.2.22, delivering a number of bug fixes:
  * When polling time is exceed, spine does not always exit as expected
  * Spine logging at `-V 5` includes an extra line feed
  * Incorrect SNMP responses can cause spine to crash
  * Properly handle devices that timeout responding to the Extended Uptime
  * MariaDB can cause spine to abort prematurely despite error handling
  * Spine should log the error time when exiting via signal</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1672660800">- cacti-spine 1.2.23:
  * Fix unexpected reindexing when using uptime as the reindex
    method
  * Spine should prevent the script server from connecting to remote
    when offline
  * Improve Script Server Timeout Logging
  * Add SQL_NO_CACHE to Spine Queries</changelog>
</package>
<package pkgid="3d98888988311a5e08b8d758f07921a2512035aa2816c5adfb116b3726f00511" name="caddy" arch="aarch64">
  <version epoch="0" ver="2.5.1" rel="bp154.2.5.1"/>
  <changelog author="Alexandre Vicenzi &lt;alexandre.vicenzi@suse.com&gt;" date="1619611200">- Create Caddy package</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1621857600">- Update to version 2.4.1:
  * logging: Implement dial timeout for net writer (fix #4083) (#4172)
  * admin: Reinstate internal redirect for /id/ requests
  * caddyfile: Add parse error on site address with trailing `{` (#4163)
  * reverseproxy: Set the headers in the replacer before `handle_response` (#4165)
  * ci: Run CI on PRs targeting minor version branches (#4164)
  * cmd: upgrade: inherit the permissions of the original executable (#4160)
  * httpcaddyfile: Fix automation policy consolidation again (fix #4161)
  * caddyfile: Fix `caddy fmt` nesting not decrementing (#4157)
  * encode: Drop `prefer` from Caddyfile (#4156)
  * encode: Default to order the formats are enabled for `prefer` in Caddyfile (#4151)
  * caddytls: Run replacer on ask URL, for env vars (#4154)
  * httpcaddyfile: Add `grace_period` global option (#4152)
  * caddyhttp: Fix fallback for the error handler chain (#4131)
  * reverseproxy: Minor logging improvements
  * fileserver: Fix `file` matcher with empty `try_files` (#4147)
  * go.mod: CertMagic v0.13.1
  * reverseproxy: Add `handle_response` blocks to `reverse_proxy` (#3710) (#4021)
  * cmd: Add --envfile flag to `start` command (#4141)
  * httpcaddyfile: Add `auto_https ignore_loaded_certs` (#4077)
  * httpcaddyfile: Add global option for `storage_clean_interval` (#4134)
  * caddyhttp: performance improvement in HeaderRE Matcher (#4143)
  * fileserver: Share template logic for both `templates` and `file_server browse` (#4093)
  * caddytls: Implement remote IP connection matcher (#4123)
  * httpcaddyfile: Fix unexpectedly removed policy (#4128)
  * reverseproxy: fix hash selection policy (#4137)
  * fileserver: Better handling of HTTP status override (#4132)
  * caddyfile: Fix `import` replacing unrelated placeholders (#4129)
  * caddytls: Add `load_storage` module (#4055)
  * reverseproxy: Admin endpoint for reporting upstream statuses (#4125)
  * caddyhttp: Implement better logic for inserting the HTTP-&gt;HTTPS redirs (#4033)
  * httpcaddyfile: Take into account host scheme/port (fix #4113)
  * fuzz: fix the FuzzFormat comparison (#4117)
  * caddytls: Disable OCSP stapling for manual certs (#4064)
  * caddytls: Configurable storage clean interval
  * caddyfile: reject cyclic imports (#4022)
  * ci: fuzz: add 4 more fuzzing targets (#4105)
  * fileserver: Add status code override (#4076)
  * notify: Send all sd_notify signals from main caddy process (#4060)
  * go.mod: Update quic-go to v0.20.1 (#4075)
  * httpcaddyfile: Fix panic in automation policy consolidation (#4104)
  * caddyfile: Normalize line endings before comparing fmt result (#4103)
  * ci: accommodate go1.16 changes to go mod (#4102)
  * Minor tweaks
  * go.mod: Use latest CertMagic
  * Use 600 instead of 644 for UUID file
  * Change os to ioutil for now
  * reverseproxy: Set cookie path to `/` when using cookie lb_policy (#4096)
  * caddy: Add InstanceID() method
  * encode,staticfiles: Content negotiation, precompressed files (#4045)
  * reverseproxy: Implement health_uri, deprecate health_path, supports query (#4050)
  * go.mod: Migrate to golang.org/x/term (#4073)
  * caddyhttp: improve grammar of comment for AllowH2C (#4072)
  * sigtrap_posix: add missing comma to SIGTERM info (#4078)
  * cmd: Use formatted logger for config adapter warnings (#4080)
  * cmd: main: fix minor doc typos (#4082)
  * headers: Fix Caddyfile parsing for `request_header` with matchers (#4085)
  * .gitignore: add IDE files (#4087)
  * fileserver: Add a few more debug lines (#4063)
  * fileserver: Browse listing supports dark mode (#4066)
  * CONTRIBUTING: fix spelling (#4070)
  * httpcaddyfile: Add `error` directive for the existing handler (#4034)
  * logging: add replace filter for static value replacement (#4029)
  * caddyconfig: add global option for configuring loggers (#4028)
  * map: Accept regex substitution in outputs (#3991)
  * reverseproxy: Fix upstreams with placeholders with no port (#4046)
  * rewrite: Implement regex path replacements
  * fileserver: Don't replace in request paths (fix #4027)
  * caddypki: Add SignWithRoot option for ACME server
  * reverseproxy: Fix round robin data race (#4038)
  * Update docs; commit setcap.sh
  * go.mod: Latest CertMagic (updated libdns conventions)
  * core: Initialize logging before admin
  * caddytls: Remove old asset migration code (close #3894)
  * reverseproxy: Add duration/latency placeholders (close #4012) (#4013)
  * httpcaddyfile: Fix catch-all site block sorting
  * ci: Build and test on Go 1.16, bump minimum to 1.15 (#4024)
  * caddy: Support SetReadBuffer and SyscallConn for QUIC (fix #3998)
  * Improve security warnings
  * httpcaddyfile: Configure other apps from global options (#3990)
  * cmd: Clean up `build-info` and `upgrade` output
  * caddyhttp: Support placeholders in header matcher values (close #3916)
  * caddytls: Save email with account if not already specified
  * reverseproxy: Response buffering &amp; configurable buffer size
  * httpcaddyfile: Fix automation policies
  * ci: deflake integration tests (#3966)
  * httpcaddyfile: Add resolvers subdir of tls (close #4008)
  * acmeserver: Support custom CAs from Caddyfile
  * caddyhttp: Check for invalid subdirectives of static_response
  * httpcaddyfile: Fix default issuers when email provided
  * cmd: Add --force flag to reload command (close #4005)
  * httpcaddyfile: Warn if site address uses unspecified IP (close #4004)
  * httpcaddyfile: Sort catch-all site blocks properly (fix #4003)
  * ci: update the command to run tests on the s390x machine (#3995)
  * caddyhttp: Fix redir html status code, improve flow (#3987)
  * caddyhttp: Implement handler abort; new 'abort' directive (close #3871) (#3983)
  * admin: Identity management, remote admin, config loaders (#3994)
  * caddycmd: Add upgrade command (#3972)
  * Revert "requestbody: Allow overwriting remote address"
  * caddytest: Update Caddyfile tests for formatting, HTTP-only blocks
  * httpcaddyfile: Skip TLS APs for HTTP-only hosts (fix #3977)
  * cmd: Print more detailed version with --environ
  * map: Add missing json struct tag
  * tests: use actual admin port value in error message (#3973)
  * cmd: Implement sd_notify() to notify systemd about readiness (#3963)
  * templates: Add fileExists and httpError template actions
  * requestbody: Allow overwriting remote address
  * rewrite: Use RawPath instead of Path (fix #3596) (#3918)
  * Update docs
  * caddytls: Configurable OCSP stapling; global option (closes #3714)
  * logging: Remove logfmt encoder (close #3575)
  * httpcaddyfile: Support repeated use of cert_issuer global option
  * caddytls: add 'key_type' subdirective (#3956)
  * caddyfile: Refactor unmarshaling of module tokens
  * go.mod: Update CertMagic and acmez (improved IDN support)
  * reverseproxy: Caddyfile health check headers, host header support (#3948)
  * httpcaddyfile: Adjust iterator when removing AP (fix #3953)
  * cmd: Organize list-modules output; --packages flag (#3925)
  * caddyfile: Introduce basic linting and fmt check (#3923)</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1629892800">- Added hardening to systemd service(s). Modified:
  * caddy.service</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1630584000">- Update to version 2.4.4:
  * acmeserver: Don't set host for directory links by default
  * acmeserver: Trim slashes from path prefix
  * admin: Implement load_interval to pull config on a timer
  * admin: Replace admin cert cache when reloading
  * admin: Sync server variables
  * caddyfile: Better error message for missing site block braces
  * caddyfile: Error on invalid site addresses containing comma
  * caddyfile: keep error chain info in Dispenser.Errf
  * caddyhttp: Fix edgecase with auto HTTP-&gt;HTTPS logic
  * caddyhttp: Fix incorrect determination of gRPC protocol
  * caddyhttp: Refactor and export SanitizedPathJoin for use in fastcgi
  * caddyhttp: Updated the documentation for MatchQuery
  * caddytls: Add Caddyfile support for propagation_timeout
  * caddytls: Remove "IssuerRaw" field
  * cmd: Fix paths when using an env file
  * cmd: New add-package and remove-package commands
  * cmd: use net.ErrClosed for matching returned error
  * core: Unix ns and Unix ms time placeholders
  * encode: Tweak compression settings
  * fileserver: Add disable_canonical_uris Caddyfile subdirective
  * fileserver: Clarify docs about canonicalization
  * fileserver: Don't persist parsed template
  * fileserver: Fix browse name_dir_first sorting
  * fileserver: Fix browse not redirecting query parameters
  * fileserver: Only redirect if filename not rewritten
  * fileserver: Redirect within the original URL
  * go.mod: Update dependencies
  * httpcaddyfile: Add preferred_chains global option and issuer subdirective
  * httpcaddyfile: Add shortcut for proxy hostport placeholder
  * httpcaddyfile: Add skip_install_trust global option
  * httpcaddyfile: Don't add HTTP hosts to TLS APs
  * httpcaddyfile: Don't put localhost in public APs
  * httpcaddyfile: Ensure hosts to skip for logs can always be collected
  * httpcaddyfile: Improve unrecognized directive errors
  * httpcaddyfile: Reorder some directives
  * logging: Actually use level_key
  * logging: Add missing interface guards for replace filter
  * logging: Prep for common_log removal
  * logging: Warn for deprecated single_field encoder
  * metrics: use buildinfo collector from new collectors pkg
  * reverseproxy: Adjust test related to #4201
  * reverseproxy: Always remove hop-by-hop headers
  * reverseproxy: Fix overwriting of max_idle_conns_per_host
  * reverseproxy: Incorporate latest proxy changes from stdlib
  * reverseproxy: Keep path to unix socket as dial address
  * reverseproxy: Remove redundant flushing</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1634904000">- Update to version 2.4.5:
  * Hotfix for a regression introduced in 2.4.4 related to
    combining the encode and reverse_proxy directives.
  * cmd: export CaddyVersion(), Commands()
  * encode: ignore flushing until after first write
  * go.mod: Update CertMagic</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1648209600">- Update to version 2.4.6:
  * caddycmd: Add `--keep-backup` to upgrade commands (#4387)
  * caddycmd: Add `--skip-standard` to `list-modules` command, quieter output (#4386)
  * caddycmd: fix caddy validate/fmt help message (#4377)
  * caddyhttp: Add support for triggering errors from `try_files` (#4346)
  * caddyhttp: Placeholder for client cert in DER + base64 format (#4241)
  * caddyhttp: reverseproxy: clarify warning for -insecure (#4379)
  * caddyhttp: Sanitize the path before evaluating path matchers (#4407)
  * caddytls: Mark storage clean timestamp at end of routine (#4401)
  * docs: General minor improvements
  * fastcgi: Fix Caddyfile parsing when `handle_response` is used (#4342)
  * fastcgi: Implement `try_files` override in Caddyfile directive (#4347)
  * fileserver: Fix compression breaks using httpInclude (#4352) (#4358)
  * fileserver: Fix displayed file size if it is symlink (#4354)
  * fileserver: Make file listing links purple once visited (#4356)
  * fileserver: Prevent focusing filter from scrolling on page load (#4393)
  * fileserver: properly handle escaped/non-ascii paths (#4332)
  * headers: Canonicalize case in replace (fix #4330)
  * httpcaddyfile: Empty tls policy for internal http localhost (#4398)
  * httpcaddyfile: Preserve IPv6 addresses through normalization (fix #4381)
  * map: Fix 95c03506 (avoid repeated expansions)
  * map: Fix regex mappings
  * reverseproxy: Log error at error level (fix #4360)
  * reverseproxy: Prevent copying the response if a response handler ran (#4388)
  * reverseproxy: Sanitize scheme and host on incoming requests (#4237)
  * templates: Add 'import' action (#4321)
  * templates: Add tests for funcInclude and funcImport (#4357)
  * templates: Propagate httpError to HTTP response</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1653307200">- Update to version 2.5.1:
  * Fixed regression in Unix socket admin endpoints.
  * Fixed regression in caddy trust commands.
  * Hash-based load balancing policies (ip_hash, uri_hash, header, and cookie)
    use an improved highest-random-weight (HRW) algorithm for increased
    consistency.
  * Dynamic upstreams, which is the ability to get the list of upstreams at
    every request (more specifically, every iteration in the proxy loop of
    every request) rather than just once at config-load time.
  * Caddy will automatically try to get relevant certificates from the local
    Tailscale instance.
  * New OpenTelemetry integration.
  * Added new endpoints /pki/ca/&lt;id&gt; and /pki/ca/&lt;id&gt;/certificates for
    getting information about Caddy's managed CAs.
  * Rename _caddy to zsh-completion
  * Fix MatchPath sanitizing [bsc#1200279, CVE-2022-29718]</changelog>
</package>
<package pkgid="08eff5f2428191d55590f4c1b3478346c841df8151eafda418b8147de022adee" name="caddy" arch="i586">
  <version epoch="0" ver="2.5.1" rel="bp154.2.5.1"/>
  <changelog author="Alexandre Vicenzi &lt;alexandre.vicenzi@suse.com&gt;" date="1619611200">- Create Caddy package</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1621857600">- Update to version 2.4.1:
  * logging: Implement dial timeout for net writer (fix #4083) (#4172)
  * admin: Reinstate internal redirect for /id/ requests
  * caddyfile: Add parse error on site address with trailing `{` (#4163)
  * reverseproxy: Set the headers in the replacer before `handle_response` (#4165)
  * ci: Run CI on PRs targeting minor version branches (#4164)
  * cmd: upgrade: inherit the permissions of the original executable (#4160)
  * httpcaddyfile: Fix automation policy consolidation again (fix #4161)
  * caddyfile: Fix `caddy fmt` nesting not decrementing (#4157)
  * encode: Drop `prefer` from Caddyfile (#4156)
  * encode: Default to order the formats are enabled for `prefer` in Caddyfile (#4151)
  * caddytls: Run replacer on ask URL, for env vars (#4154)
  * httpcaddyfile: Add `grace_period` global option (#4152)
  * caddyhttp: Fix fallback for the error handler chain (#4131)
  * reverseproxy: Minor logging improvements
  * fileserver: Fix `file` matcher with empty `try_files` (#4147)
  * go.mod: CertMagic v0.13.1
  * reverseproxy: Add `handle_response` blocks to `reverse_proxy` (#3710) (#4021)
  * cmd: Add --envfile flag to `start` command (#4141)
  * httpcaddyfile: Add `auto_https ignore_loaded_certs` (#4077)
  * httpcaddyfile: Add global option for `storage_clean_interval` (#4134)
  * caddyhttp: performance improvement in HeaderRE Matcher (#4143)
  * fileserver: Share template logic for both `templates` and `file_server browse` (#4093)
  * caddytls: Implement remote IP connection matcher (#4123)
  * httpcaddyfile: Fix unexpectedly removed policy (#4128)
  * reverseproxy: fix hash selection policy (#4137)
  * fileserver: Better handling of HTTP status override (#4132)
  * caddyfile: Fix `import` replacing unrelated placeholders (#4129)
  * caddytls: Add `load_storage` module (#4055)
  * reverseproxy: Admin endpoint for reporting upstream statuses (#4125)
  * caddyhttp: Implement better logic for inserting the HTTP-&gt;HTTPS redirs (#4033)
  * httpcaddyfile: Take into account host scheme/port (fix #4113)
  * fuzz: fix the FuzzFormat comparison (#4117)
  * caddytls: Disable OCSP stapling for manual certs (#4064)
  * caddytls: Configurable storage clean interval
  * caddyfile: reject cyclic imports (#4022)
  * ci: fuzz: add 4 more fuzzing targets (#4105)
  * fileserver: Add status code override (#4076)
  * notify: Send all sd_notify signals from main caddy process (#4060)
  * go.mod: Update quic-go to v0.20.1 (#4075)
  * httpcaddyfile: Fix panic in automation policy consolidation (#4104)
  * caddyfile: Normalize line endings before comparing fmt result (#4103)
  * ci: accommodate go1.16 changes to go mod (#4102)
  * Minor tweaks
  * go.mod: Use latest CertMagic
  * Use 600 instead of 644 for UUID file
  * Change os to ioutil for now
  * reverseproxy: Set cookie path to `/` when using cookie lb_policy (#4096)
  * caddy: Add InstanceID() method
  * encode,staticfiles: Content negotiation, precompressed files (#4045)
  * reverseproxy: Implement health_uri, deprecate health_path, supports query (#4050)
  * go.mod: Migrate to golang.org/x/term (#4073)
  * caddyhttp: improve grammar of comment for AllowH2C (#4072)
  * sigtrap_posix: add missing comma to SIGTERM info (#4078)
  * cmd: Use formatted logger for config adapter warnings (#4080)
  * cmd: main: fix minor doc typos (#4082)
  * headers: Fix Caddyfile parsing for `request_header` with matchers (#4085)
  * .gitignore: add IDE files (#4087)
  * fileserver: Add a few more debug lines (#4063)
  * fileserver: Browse listing supports dark mode (#4066)
  * CONTRIBUTING: fix spelling (#4070)
  * httpcaddyfile: Add `error` directive for the existing handler (#4034)
  * logging: add replace filter for static value replacement (#4029)
  * caddyconfig: add global option for configuring loggers (#4028)
  * map: Accept regex substitution in outputs (#3991)
  * reverseproxy: Fix upstreams with placeholders with no port (#4046)
  * rewrite: Implement regex path replacements
  * fileserver: Don't replace in request paths (fix #4027)
  * caddypki: Add SignWithRoot option for ACME server
  * reverseproxy: Fix round robin data race (#4038)
  * Update docs; commit setcap.sh
  * go.mod: Latest CertMagic (updated libdns conventions)
  * core: Initialize logging before admin
  * caddytls: Remove old asset migration code (close #3894)
  * reverseproxy: Add duration/latency placeholders (close #4012) (#4013)
  * httpcaddyfile: Fix catch-all site block sorting
  * ci: Build and test on Go 1.16, bump minimum to 1.15 (#4024)
  * caddy: Support SetReadBuffer and SyscallConn for QUIC (fix #3998)
  * Improve security warnings
  * httpcaddyfile: Configure other apps from global options (#3990)
  * cmd: Clean up `build-info` and `upgrade` output
  * caddyhttp: Support placeholders in header matcher values (close #3916)
  * caddytls: Save email with account if not already specified
  * reverseproxy: Response buffering &amp; configurable buffer size
  * httpcaddyfile: Fix automation policies
  * ci: deflake integration tests (#3966)
  * httpcaddyfile: Add resolvers subdir of tls (close #4008)
  * acmeserver: Support custom CAs from Caddyfile
  * caddyhttp: Check for invalid subdirectives of static_response
  * httpcaddyfile: Fix default issuers when email provided
  * cmd: Add --force flag to reload command (close #4005)
  * httpcaddyfile: Warn if site address uses unspecified IP (close #4004)
  * httpcaddyfile: Sort catch-all site blocks properly (fix #4003)
  * ci: update the command to run tests on the s390x machine (#3995)
  * caddyhttp: Fix redir html status code, improve flow (#3987)
  * caddyhttp: Implement handler abort; new 'abort' directive (close #3871) (#3983)
  * admin: Identity management, remote admin, config loaders (#3994)
  * caddycmd: Add upgrade command (#3972)
  * Revert "requestbody: Allow overwriting remote address"
  * caddytest: Update Caddyfile tests for formatting, HTTP-only blocks
  * httpcaddyfile: Skip TLS APs for HTTP-only hosts (fix #3977)
  * cmd: Print more detailed version with --environ
  * map: Add missing json struct tag
  * tests: use actual admin port value in error message (#3973)
  * cmd: Implement sd_notify() to notify systemd about readiness (#3963)
  * templates: Add fileExists and httpError template actions
  * requestbody: Allow overwriting remote address
  * rewrite: Use RawPath instead of Path (fix #3596) (#3918)
  * Update docs
  * caddytls: Configurable OCSP stapling; global option (closes #3714)
  * logging: Remove logfmt encoder (close #3575)
  * httpcaddyfile: Support repeated use of cert_issuer global option
  * caddytls: add 'key_type' subdirective (#3956)
  * caddyfile: Refactor unmarshaling of module tokens
  * go.mod: Update CertMagic and acmez (improved IDN support)
  * reverseproxy: Caddyfile health check headers, host header support (#3948)
  * httpcaddyfile: Adjust iterator when removing AP (fix #3953)
  * cmd: Organize list-modules output; --packages flag (#3925)
  * caddyfile: Introduce basic linting and fmt check (#3923)</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1629892800">- Added hardening to systemd service(s). Modified:
  * caddy.service</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1630584000">- Update to version 2.4.4:
  * acmeserver: Don't set host for directory links by default
  * acmeserver: Trim slashes from path prefix
  * admin: Implement load_interval to pull config on a timer
  * admin: Replace admin cert cache when reloading
  * admin: Sync server variables
  * caddyfile: Better error message for missing site block braces
  * caddyfile: Error on invalid site addresses containing comma
  * caddyfile: keep error chain info in Dispenser.Errf
  * caddyhttp: Fix edgecase with auto HTTP-&gt;HTTPS logic
  * caddyhttp: Fix incorrect determination of gRPC protocol
  * caddyhttp: Refactor and export SanitizedPathJoin for use in fastcgi
  * caddyhttp: Updated the documentation for MatchQuery
  * caddytls: Add Caddyfile support for propagation_timeout
  * caddytls: Remove "IssuerRaw" field
  * cmd: Fix paths when using an env file
  * cmd: New add-package and remove-package commands
  * cmd: use net.ErrClosed for matching returned error
  * core: Unix ns and Unix ms time placeholders
  * encode: Tweak compression settings
  * fileserver: Add disable_canonical_uris Caddyfile subdirective
  * fileserver: Clarify docs about canonicalization
  * fileserver: Don't persist parsed template
  * fileserver: Fix browse name_dir_first sorting
  * fileserver: Fix browse not redirecting query parameters
  * fileserver: Only redirect if filename not rewritten
  * fileserver: Redirect within the original URL
  * go.mod: Update dependencies
  * httpcaddyfile: Add preferred_chains global option and issuer subdirective
  * httpcaddyfile: Add shortcut for proxy hostport placeholder
  * httpcaddyfile: Add skip_install_trust global option
  * httpcaddyfile: Don't add HTTP hosts to TLS APs
  * httpcaddyfile: Don't put localhost in public APs
  * httpcaddyfile: Ensure hosts to skip for logs can always be collected
  * httpcaddyfile: Improve unrecognized directive errors
  * httpcaddyfile: Reorder some directives
  * logging: Actually use level_key
  * logging: Add missing interface guards for replace filter
  * logging: Prep for common_log removal
  * logging: Warn for deprecated single_field encoder
  * metrics: use buildinfo collector from new collectors pkg
  * reverseproxy: Adjust test related to #4201
  * reverseproxy: Always remove hop-by-hop headers
  * reverseproxy: Fix overwriting of max_idle_conns_per_host
  * reverseproxy: Incorporate latest proxy changes from stdlib
  * reverseproxy: Keep path to unix socket as dial address
  * reverseproxy: Remove redundant flushing</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1634904000">- Update to version 2.4.5:
  * Hotfix for a regression introduced in 2.4.4 related to
    combining the encode and reverse_proxy directives.
  * cmd: export CaddyVersion(), Commands()
  * encode: ignore flushing until after first write
  * go.mod: Update CertMagic</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1648209600">- Update to version 2.4.6:
  * caddycmd: Add `--keep-backup` to upgrade commands (#4387)
  * caddycmd: Add `--skip-standard` to `list-modules` command, quieter output (#4386)
  * caddycmd: fix caddy validate/fmt help message (#4377)
  * caddyhttp: Add support for triggering errors from `try_files` (#4346)
  * caddyhttp: Placeholder for client cert in DER + base64 format (#4241)
  * caddyhttp: reverseproxy: clarify warning for -insecure (#4379)
  * caddyhttp: Sanitize the path before evaluating path matchers (#4407)
  * caddytls: Mark storage clean timestamp at end of routine (#4401)
  * docs: General minor improvements
  * fastcgi: Fix Caddyfile parsing when `handle_response` is used (#4342)
  * fastcgi: Implement `try_files` override in Caddyfile directive (#4347)
  * fileserver: Fix compression breaks using httpInclude (#4352) (#4358)
  * fileserver: Fix displayed file size if it is symlink (#4354)
  * fileserver: Make file listing links purple once visited (#4356)
  * fileserver: Prevent focusing filter from scrolling on page load (#4393)
  * fileserver: properly handle escaped/non-ascii paths (#4332)
  * headers: Canonicalize case in replace (fix #4330)
  * httpcaddyfile: Empty tls policy for internal http localhost (#4398)
  * httpcaddyfile: Preserve IPv6 addresses through normalization (fix #4381)
  * map: Fix 95c03506 (avoid repeated expansions)
  * map: Fix regex mappings
  * reverseproxy: Log error at error level (fix #4360)
  * reverseproxy: Prevent copying the response if a response handler ran (#4388)
  * reverseproxy: Sanitize scheme and host on incoming requests (#4237)
  * templates: Add 'import' action (#4321)
  * templates: Add tests for funcInclude and funcImport (#4357)
  * templates: Propagate httpError to HTTP response</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1653307200">- Update to version 2.5.1:
  * Fixed regression in Unix socket admin endpoints.
  * Fixed regression in caddy trust commands.
  * Hash-based load balancing policies (ip_hash, uri_hash, header, and cookie)
    use an improved highest-random-weight (HRW) algorithm for increased
    consistency.
  * Dynamic upstreams, which is the ability to get the list of upstreams at
    every request (more specifically, every iteration in the proxy loop of
    every request) rather than just once at config-load time.
  * Caddy will automatically try to get relevant certificates from the local
    Tailscale instance.
  * New OpenTelemetry integration.
  * Added new endpoints /pki/ca/&lt;id&gt; and /pki/ca/&lt;id&gt;/certificates for
    getting information about Caddy's managed CAs.
  * Rename _caddy to zsh-completion
  * Fix MatchPath sanitizing [bsc#1200279, CVE-2022-29718]</changelog>
</package>
<package pkgid="8f71a9dfee10084a4582fabfd6a8b7385f276bbc7941e871db7af20b840308d1" name="caddy" arch="ppc64le">
  <version epoch="0" ver="2.5.1" rel="bp154.2.5.1"/>
  <changelog author="Alexandre Vicenzi &lt;alexandre.vicenzi@suse.com&gt;" date="1619611200">- Create Caddy package</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1621857600">- Update to version 2.4.1:
  * logging: Implement dial timeout for net writer (fix #4083) (#4172)
  * admin: Reinstate internal redirect for /id/ requests
  * caddyfile: Add parse error on site address with trailing `{` (#4163)
  * reverseproxy: Set the headers in the replacer before `handle_response` (#4165)
  * ci: Run CI on PRs targeting minor version branches (#4164)
  * cmd: upgrade: inherit the permissions of the original executable (#4160)
  * httpcaddyfile: Fix automation policy consolidation again (fix #4161)
  * caddyfile: Fix `caddy fmt` nesting not decrementing (#4157)
  * encode: Drop `prefer` from Caddyfile (#4156)
  * encode: Default to order the formats are enabled for `prefer` in Caddyfile (#4151)
  * caddytls: Run replacer on ask URL, for env vars (#4154)
  * httpcaddyfile: Add `grace_period` global option (#4152)
  * caddyhttp: Fix fallback for the error handler chain (#4131)
  * reverseproxy: Minor logging improvements
  * fileserver: Fix `file` matcher with empty `try_files` (#4147)
  * go.mod: CertMagic v0.13.1
  * reverseproxy: Add `handle_response` blocks to `reverse_proxy` (#3710) (#4021)
  * cmd: Add --envfile flag to `start` command (#4141)
  * httpcaddyfile: Add `auto_https ignore_loaded_certs` (#4077)
  * httpcaddyfile: Add global option for `storage_clean_interval` (#4134)
  * caddyhttp: performance improvement in HeaderRE Matcher (#4143)
  * fileserver: Share template logic for both `templates` and `file_server browse` (#4093)
  * caddytls: Implement remote IP connection matcher (#4123)
  * httpcaddyfile: Fix unexpectedly removed policy (#4128)
  * reverseproxy: fix hash selection policy (#4137)
  * fileserver: Better handling of HTTP status override (#4132)
  * caddyfile: Fix `import` replacing unrelated placeholders (#4129)
  * caddytls: Add `load_storage` module (#4055)
  * reverseproxy: Admin endpoint for reporting upstream statuses (#4125)
  * caddyhttp: Implement better logic for inserting the HTTP-&gt;HTTPS redirs (#4033)
  * httpcaddyfile: Take into account host scheme/port (fix #4113)
  * fuzz: fix the FuzzFormat comparison (#4117)
  * caddytls: Disable OCSP stapling for manual certs (#4064)
  * caddytls: Configurable storage clean interval
  * caddyfile: reject cyclic imports (#4022)
  * ci: fuzz: add 4 more fuzzing targets (#4105)
  * fileserver: Add status code override (#4076)
  * notify: Send all sd_notify signals from main caddy process (#4060)
  * go.mod: Update quic-go to v0.20.1 (#4075)
  * httpcaddyfile: Fix panic in automation policy consolidation (#4104)
  * caddyfile: Normalize line endings before comparing fmt result (#4103)
  * ci: accommodate go1.16 changes to go mod (#4102)
  * Minor tweaks
  * go.mod: Use latest CertMagic
  * Use 600 instead of 644 for UUID file
  * Change os to ioutil for now
  * reverseproxy: Set cookie path to `/` when using cookie lb_policy (#4096)
  * caddy: Add InstanceID() method
  * encode,staticfiles: Content negotiation, precompressed files (#4045)
  * reverseproxy: Implement health_uri, deprecate health_path, supports query (#4050)
  * go.mod: Migrate to golang.org/x/term (#4073)
  * caddyhttp: improve grammar of comment for AllowH2C (#4072)
  * sigtrap_posix: add missing comma to SIGTERM info (#4078)
  * cmd: Use formatted logger for config adapter warnings (#4080)
  * cmd: main: fix minor doc typos (#4082)
  * headers: Fix Caddyfile parsing for `request_header` with matchers (#4085)
  * .gitignore: add IDE files (#4087)
  * fileserver: Add a few more debug lines (#4063)
  * fileserver: Browse listing supports dark mode (#4066)
  * CONTRIBUTING: fix spelling (#4070)
  * httpcaddyfile: Add `error` directive for the existing handler (#4034)
  * logging: add replace filter for static value replacement (#4029)
  * caddyconfig: add global option for configuring loggers (#4028)
  * map: Accept regex substitution in outputs (#3991)
  * reverseproxy: Fix upstreams with placeholders with no port (#4046)
  * rewrite: Implement regex path replacements
  * fileserver: Don't replace in request paths (fix #4027)
  * caddypki: Add SignWithRoot option for ACME server
  * reverseproxy: Fix round robin data race (#4038)
  * Update docs; commit setcap.sh
  * go.mod: Latest CertMagic (updated libdns conventions)
  * core: Initialize logging before admin
  * caddytls: Remove old asset migration code (close #3894)
  * reverseproxy: Add duration/latency placeholders (close #4012) (#4013)
  * httpcaddyfile: Fix catch-all site block sorting
  * ci: Build and test on Go 1.16, bump minimum to 1.15 (#4024)
  * caddy: Support SetReadBuffer and SyscallConn for QUIC (fix #3998)
  * Improve security warnings
  * httpcaddyfile: Configure other apps from global options (#3990)
  * cmd: Clean up `build-info` and `upgrade` output
  * caddyhttp: Support placeholders in header matcher values (close #3916)
  * caddytls: Save email with account if not already specified
  * reverseproxy: Response buffering &amp; configurable buffer size
  * httpcaddyfile: Fix automation policies
  * ci: deflake integration tests (#3966)
  * httpcaddyfile: Add resolvers subdir of tls (close #4008)
  * acmeserver: Support custom CAs from Caddyfile
  * caddyhttp: Check for invalid subdirectives of static_response
  * httpcaddyfile: Fix default issuers when email provided
  * cmd: Add --force flag to reload command (close #4005)
  * httpcaddyfile: Warn if site address uses unspecified IP (close #4004)
  * httpcaddyfile: Sort catch-all site blocks properly (fix #4003)
  * ci: update the command to run tests on the s390x machine (#3995)
  * caddyhttp: Fix redir html status code, improve flow (#3987)
  * caddyhttp: Implement handler abort; new 'abort' directive (close #3871) (#3983)
  * admin: Identity management, remote admin, config loaders (#3994)
  * caddycmd: Add upgrade command (#3972)
  * Revert "requestbody: Allow overwriting remote address"
  * caddytest: Update Caddyfile tests for formatting, HTTP-only blocks
  * httpcaddyfile: Skip TLS APs for HTTP-only hosts (fix #3977)
  * cmd: Print more detailed version with --environ
  * map: Add missing json struct tag
  * tests: use actual admin port value in error message (#3973)
  * cmd: Implement sd_notify() to notify systemd about readiness (#3963)
  * templates: Add fileExists and httpError template actions
  * requestbody: Allow overwriting remote address
  * rewrite: Use RawPath instead of Path (fix #3596) (#3918)
  * Update docs
  * caddytls: Configurable OCSP stapling; global option (closes #3714)
  * logging: Remove logfmt encoder (close #3575)
  * httpcaddyfile: Support repeated use of cert_issuer global option
  * caddytls: add 'key_type' subdirective (#3956)
  * caddyfile: Refactor unmarshaling of module tokens
  * go.mod: Update CertMagic and acmez (improved IDN support)
  * reverseproxy: Caddyfile health check headers, host header support (#3948)
  * httpcaddyfile: Adjust iterator when removing AP (fix #3953)
  * cmd: Organize list-modules output; --packages flag (#3925)
  * caddyfile: Introduce basic linting and fmt check (#3923)</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1629892800">- Added hardening to systemd service(s). Modified:
  * caddy.service</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1630584000">- Update to version 2.4.4:
  * acmeserver: Don't set host for directory links by default
  * acmeserver: Trim slashes from path prefix
  * admin: Implement load_interval to pull config on a timer
  * admin: Replace admin cert cache when reloading
  * admin: Sync server variables
  * caddyfile: Better error message for missing site block braces
  * caddyfile: Error on invalid site addresses containing comma
  * caddyfile: keep error chain info in Dispenser.Errf
  * caddyhttp: Fix edgecase with auto HTTP-&gt;HTTPS logic
  * caddyhttp: Fix incorrect determination of gRPC protocol
  * caddyhttp: Refactor and export SanitizedPathJoin for use in fastcgi
  * caddyhttp: Updated the documentation for MatchQuery
  * caddytls: Add Caddyfile support for propagation_timeout
  * caddytls: Remove "IssuerRaw" field
  * cmd: Fix paths when using an env file
  * cmd: New add-package and remove-package commands
  * cmd: use net.ErrClosed for matching returned error
  * core: Unix ns and Unix ms time placeholders
  * encode: Tweak compression settings
  * fileserver: Add disable_canonical_uris Caddyfile subdirective
  * fileserver: Clarify docs about canonicalization
  * fileserver: Don't persist parsed template
  * fileserver: Fix browse name_dir_first sorting
  * fileserver: Fix browse not redirecting query parameters
  * fileserver: Only redirect if filename not rewritten
  * fileserver: Redirect within the original URL
  * go.mod: Update dependencies
  * httpcaddyfile: Add preferred_chains global option and issuer subdirective
  * httpcaddyfile: Add shortcut for proxy hostport placeholder
  * httpcaddyfile: Add skip_install_trust global option
  * httpcaddyfile: Don't add HTTP hosts to TLS APs
  * httpcaddyfile: Don't put localhost in public APs
  * httpcaddyfile: Ensure hosts to skip for logs can always be collected
  * httpcaddyfile: Improve unrecognized directive errors
  * httpcaddyfile: Reorder some directives
  * logging: Actually use level_key
  * logging: Add missing interface guards for replace filter
  * logging: Prep for common_log removal
  * logging: Warn for deprecated single_field encoder
  * metrics: use buildinfo collector from new collectors pkg
  * reverseproxy: Adjust test related to #4201
  * reverseproxy: Always remove hop-by-hop headers
  * reverseproxy: Fix overwriting of max_idle_conns_per_host
  * reverseproxy: Incorporate latest proxy changes from stdlib
  * reverseproxy: Keep path to unix socket as dial address
  * reverseproxy: Remove redundant flushing</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1634904000">- Update to version 2.4.5:
  * Hotfix for a regression introduced in 2.4.4 related to
    combining the encode and reverse_proxy directives.
  * cmd: export CaddyVersion(), Commands()
  * encode: ignore flushing until after first write
  * go.mod: Update CertMagic</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1648209600">- Update to version 2.4.6:
  * caddycmd: Add `--keep-backup` to upgrade commands (#4387)
  * caddycmd: Add `--skip-standard` to `list-modules` command, quieter output (#4386)
  * caddycmd: fix caddy validate/fmt help message (#4377)
  * caddyhttp: Add support for triggering errors from `try_files` (#4346)
  * caddyhttp: Placeholder for client cert in DER + base64 format (#4241)
  * caddyhttp: reverseproxy: clarify warning for -insecure (#4379)
  * caddyhttp: Sanitize the path before evaluating path matchers (#4407)
  * caddytls: Mark storage clean timestamp at end of routine (#4401)
  * docs: General minor improvements
  * fastcgi: Fix Caddyfile parsing when `handle_response` is used (#4342)
  * fastcgi: Implement `try_files` override in Caddyfile directive (#4347)
  * fileserver: Fix compression breaks using httpInclude (#4352) (#4358)
  * fileserver: Fix displayed file size if it is symlink (#4354)
  * fileserver: Make file listing links purple once visited (#4356)
  * fileserver: Prevent focusing filter from scrolling on page load (#4393)
  * fileserver: properly handle escaped/non-ascii paths (#4332)
  * headers: Canonicalize case in replace (fix #4330)
  * httpcaddyfile: Empty tls policy for internal http localhost (#4398)
  * httpcaddyfile: Preserve IPv6 addresses through normalization (fix #4381)
  * map: Fix 95c03506 (avoid repeated expansions)
  * map: Fix regex mappings
  * reverseproxy: Log error at error level (fix #4360)
  * reverseproxy: Prevent copying the response if a response handler ran (#4388)
  * reverseproxy: Sanitize scheme and host on incoming requests (#4237)
  * templates: Add 'import' action (#4321)
  * templates: Add tests for funcInclude and funcImport (#4357)
  * templates: Propagate httpError to HTTP response</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1653307200">- Update to version 2.5.1:
  * Fixed regression in Unix socket admin endpoints.
  * Fixed regression in caddy trust commands.
  * Hash-based load balancing policies (ip_hash, uri_hash, header, and cookie)
    use an improved highest-random-weight (HRW) algorithm for increased
    consistency.
  * Dynamic upstreams, which is the ability to get the list of upstreams at
    every request (more specifically, every iteration in the proxy loop of
    every request) rather than just once at config-load time.
  * Caddy will automatically try to get relevant certificates from the local
    Tailscale instance.
  * New OpenTelemetry integration.
  * Added new endpoints /pki/ca/&lt;id&gt; and /pki/ca/&lt;id&gt;/certificates for
    getting information about Caddy's managed CAs.
  * Rename _caddy to zsh-completion
  * Fix MatchPath sanitizing [bsc#1200279, CVE-2022-29718]</changelog>
</package>
<package pkgid="9c1a6a79cc8966bd4792b637f59c331c06009ea5915aee0f54ce8cd225552e13" name="caddy" arch="s390x">
  <version epoch="0" ver="2.5.1" rel="bp154.2.5.1"/>
  <changelog author="Alexandre Vicenzi &lt;alexandre.vicenzi@suse.com&gt;" date="1619611200">- Create Caddy package</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1621857600">- Update to version 2.4.1:
  * logging: Implement dial timeout for net writer (fix #4083) (#4172)
  * admin: Reinstate internal redirect for /id/ requests
  * caddyfile: Add parse error on site address with trailing `{` (#4163)
  * reverseproxy: Set the headers in the replacer before `handle_response` (#4165)
  * ci: Run CI on PRs targeting minor version branches (#4164)
  * cmd: upgrade: inherit the permissions of the original executable (#4160)
  * httpcaddyfile: Fix automation policy consolidation again (fix #4161)
  * caddyfile: Fix `caddy fmt` nesting not decrementing (#4157)
  * encode: Drop `prefer` from Caddyfile (#4156)
  * encode: Default to order the formats are enabled for `prefer` in Caddyfile (#4151)
  * caddytls: Run replacer on ask URL, for env vars (#4154)
  * httpcaddyfile: Add `grace_period` global option (#4152)
  * caddyhttp: Fix fallback for the error handler chain (#4131)
  * reverseproxy: Minor logging improvements
  * fileserver: Fix `file` matcher with empty `try_files` (#4147)
  * go.mod: CertMagic v0.13.1
  * reverseproxy: Add `handle_response` blocks to `reverse_proxy` (#3710) (#4021)
  * cmd: Add --envfile flag to `start` command (#4141)
  * httpcaddyfile: Add `auto_https ignore_loaded_certs` (#4077)
  * httpcaddyfile: Add global option for `storage_clean_interval` (#4134)
  * caddyhttp: performance improvement in HeaderRE Matcher (#4143)
  * fileserver: Share template logic for both `templates` and `file_server browse` (#4093)
  * caddytls: Implement remote IP connection matcher (#4123)
  * httpcaddyfile: Fix unexpectedly removed policy (#4128)
  * reverseproxy: fix hash selection policy (#4137)
  * fileserver: Better handling of HTTP status override (#4132)
  * caddyfile: Fix `import` replacing unrelated placeholders (#4129)
  * caddytls: Add `load_storage` module (#4055)
  * reverseproxy: Admin endpoint for reporting upstream statuses (#4125)
  * caddyhttp: Implement better logic for inserting the HTTP-&gt;HTTPS redirs (#4033)
  * httpcaddyfile: Take into account host scheme/port (fix #4113)
  * fuzz: fix the FuzzFormat comparison (#4117)
  * caddytls: Disable OCSP stapling for manual certs (#4064)
  * caddytls: Configurable storage clean interval
  * caddyfile: reject cyclic imports (#4022)
  * ci: fuzz: add 4 more fuzzing targets (#4105)
  * fileserver: Add status code override (#4076)
  * notify: Send all sd_notify signals from main caddy process (#4060)
  * go.mod: Update quic-go to v0.20.1 (#4075)
  * httpcaddyfile: Fix panic in automation policy consolidation (#4104)
  * caddyfile: Normalize line endings before comparing fmt result (#4103)
  * ci: accommodate go1.16 changes to go mod (#4102)
  * Minor tweaks
  * go.mod: Use latest CertMagic
  * Use 600 instead of 644 for UUID file
  * Change os to ioutil for now
  * reverseproxy: Set cookie path to `/` when using cookie lb_policy (#4096)
  * caddy: Add InstanceID() method
  * encode,staticfiles: Content negotiation, precompressed files (#4045)
  * reverseproxy: Implement health_uri, deprecate health_path, supports query (#4050)
  * go.mod: Migrate to golang.org/x/term (#4073)
  * caddyhttp: improve grammar of comment for AllowH2C (#4072)
  * sigtrap_posix: add missing comma to SIGTERM info (#4078)
  * cmd: Use formatted logger for config adapter warnings (#4080)
  * cmd: main: fix minor doc typos (#4082)
  * headers: Fix Caddyfile parsing for `request_header` with matchers (#4085)
  * .gitignore: add IDE files (#4087)
  * fileserver: Add a few more debug lines (#4063)
  * fileserver: Browse listing supports dark mode (#4066)
  * CONTRIBUTING: fix spelling (#4070)
  * httpcaddyfile: Add `error` directive for the existing handler (#4034)
  * logging: add replace filter for static value replacement (#4029)
  * caddyconfig: add global option for configuring loggers (#4028)
  * map: Accept regex substitution in outputs (#3991)
  * reverseproxy: Fix upstreams with placeholders with no port (#4046)
  * rewrite: Implement regex path replacements
  * fileserver: Don't replace in request paths (fix #4027)
  * caddypki: Add SignWithRoot option for ACME server
  * reverseproxy: Fix round robin data race (#4038)
  * Update docs; commit setcap.sh
  * go.mod: Latest CertMagic (updated libdns conventions)
  * core: Initialize logging before admin
  * caddytls: Remove old asset migration code (close #3894)
  * reverseproxy: Add duration/latency placeholders (close #4012) (#4013)
  * httpcaddyfile: Fix catch-all site block sorting
  * ci: Build and test on Go 1.16, bump minimum to 1.15 (#4024)
  * caddy: Support SetReadBuffer and SyscallConn for QUIC (fix #3998)
  * Improve security warnings
  * httpcaddyfile: Configure other apps from global options (#3990)
  * cmd: Clean up `build-info` and `upgrade` output
  * caddyhttp: Support placeholders in header matcher values (close #3916)
  * caddytls: Save email with account if not already specified
  * reverseproxy: Response buffering &amp; configurable buffer size
  * httpcaddyfile: Fix automation policies
  * ci: deflake integration tests (#3966)
  * httpcaddyfile: Add resolvers subdir of tls (close #4008)
  * acmeserver: Support custom CAs from Caddyfile
  * caddyhttp: Check for invalid subdirectives of static_response
  * httpcaddyfile: Fix default issuers when email provided
  * cmd: Add --force flag to reload command (close #4005)
  * httpcaddyfile: Warn if site address uses unspecified IP (close #4004)
  * httpcaddyfile: Sort catch-all site blocks properly (fix #4003)
  * ci: update the command to run tests on the s390x machine (#3995)
  * caddyhttp: Fix redir html status code, improve flow (#3987)
  * caddyhttp: Implement handler abort; new 'abort' directive (close #3871) (#3983)
  * admin: Identity management, remote admin, config loaders (#3994)
  * caddycmd: Add upgrade command (#3972)
  * Revert "requestbody: Allow overwriting remote address"
  * caddytest: Update Caddyfile tests for formatting, HTTP-only blocks
  * httpcaddyfile: Skip TLS APs for HTTP-only hosts (fix #3977)
  * cmd: Print more detailed version with --environ
  * map: Add missing json struct tag
  * tests: use actual admin port value in error message (#3973)
  * cmd: Implement sd_notify() to notify systemd about readiness (#3963)
  * templates: Add fileExists and httpError template actions
  * requestbody: Allow overwriting remote address
  * rewrite: Use RawPath instead of Path (fix #3596) (#3918)
  * Update docs
  * caddytls: Configurable OCSP stapling; global option (closes #3714)
  * logging: Remove logfmt encoder (close #3575)
  * httpcaddyfile: Support repeated use of cert_issuer global option
  * caddytls: add 'key_type' subdirective (#3956)
  * caddyfile: Refactor unmarshaling of module tokens
  * go.mod: Update CertMagic and acmez (improved IDN support)
  * reverseproxy: Caddyfile health check headers, host header support (#3948)
  * httpcaddyfile: Adjust iterator when removing AP (fix #3953)
  * cmd: Organize list-modules output; --packages flag (#3925)
  * caddyfile: Introduce basic linting and fmt check (#3923)</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1629892800">- Added hardening to systemd service(s). Modified:
  * caddy.service</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1630584000">- Update to version 2.4.4:
  * acmeserver: Don't set host for directory links by default
  * acmeserver: Trim slashes from path prefix
  * admin: Implement load_interval to pull config on a timer
  * admin: Replace admin cert cache when reloading
  * admin: Sync server variables
  * caddyfile: Better error message for missing site block braces
  * caddyfile: Error on invalid site addresses containing comma
  * caddyfile: keep error chain info in Dispenser.Errf
  * caddyhttp: Fix edgecase with auto HTTP-&gt;HTTPS logic
  * caddyhttp: Fix incorrect determination of gRPC protocol
  * caddyhttp: Refactor and export SanitizedPathJoin for use in fastcgi
  * caddyhttp: Updated the documentation for MatchQuery
  * caddytls: Add Caddyfile support for propagation_timeout
  * caddytls: Remove "IssuerRaw" field
  * cmd: Fix paths when using an env file
  * cmd: New add-package and remove-package commands
  * cmd: use net.ErrClosed for matching returned error
  * core: Unix ns and Unix ms time placeholders
  * encode: Tweak compression settings
  * fileserver: Add disable_canonical_uris Caddyfile subdirective
  * fileserver: Clarify docs about canonicalization
  * fileserver: Don't persist parsed template
  * fileserver: Fix browse name_dir_first sorting
  * fileserver: Fix browse not redirecting query parameters
  * fileserver: Only redirect if filename not rewritten
  * fileserver: Redirect within the original URL
  * go.mod: Update dependencies
  * httpcaddyfile: Add preferred_chains global option and issuer subdirective
  * httpcaddyfile: Add shortcut for proxy hostport placeholder
  * httpcaddyfile: Add skip_install_trust global option
  * httpcaddyfile: Don't add HTTP hosts to TLS APs
  * httpcaddyfile: Don't put localhost in public APs
  * httpcaddyfile: Ensure hosts to skip for logs can always be collected
  * httpcaddyfile: Improve unrecognized directive errors
  * httpcaddyfile: Reorder some directives
  * logging: Actually use level_key
  * logging: Add missing interface guards for replace filter
  * logging: Prep for common_log removal
  * logging: Warn for deprecated single_field encoder
  * metrics: use buildinfo collector from new collectors pkg
  * reverseproxy: Adjust test related to #4201
  * reverseproxy: Always remove hop-by-hop headers
  * reverseproxy: Fix overwriting of max_idle_conns_per_host
  * reverseproxy: Incorporate latest proxy changes from stdlib
  * reverseproxy: Keep path to unix socket as dial address
  * reverseproxy: Remove redundant flushing</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1634904000">- Update to version 2.4.5:
  * Hotfix for a regression introduced in 2.4.4 related to
    combining the encode and reverse_proxy directives.
  * cmd: export CaddyVersion(), Commands()
  * encode: ignore flushing until after first write
  * go.mod: Update CertMagic</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1648209600">- Update to version 2.4.6:
  * caddycmd: Add `--keep-backup` to upgrade commands (#4387)
  * caddycmd: Add `--skip-standard` to `list-modules` command, quieter output (#4386)
  * caddycmd: fix caddy validate/fmt help message (#4377)
  * caddyhttp: Add support for triggering errors from `try_files` (#4346)
  * caddyhttp: Placeholder for client cert in DER + base64 format (#4241)
  * caddyhttp: reverseproxy: clarify warning for -insecure (#4379)
  * caddyhttp: Sanitize the path before evaluating path matchers (#4407)
  * caddytls: Mark storage clean timestamp at end of routine (#4401)
  * docs: General minor improvements
  * fastcgi: Fix Caddyfile parsing when `handle_response` is used (#4342)
  * fastcgi: Implement `try_files` override in Caddyfile directive (#4347)
  * fileserver: Fix compression breaks using httpInclude (#4352) (#4358)
  * fileserver: Fix displayed file size if it is symlink (#4354)
  * fileserver: Make file listing links purple once visited (#4356)
  * fileserver: Prevent focusing filter from scrolling on page load (#4393)
  * fileserver: properly handle escaped/non-ascii paths (#4332)
  * headers: Canonicalize case in replace (fix #4330)
  * httpcaddyfile: Empty tls policy for internal http localhost (#4398)
  * httpcaddyfile: Preserve IPv6 addresses through normalization (fix #4381)
  * map: Fix 95c03506 (avoid repeated expansions)
  * map: Fix regex mappings
  * reverseproxy: Log error at error level (fix #4360)
  * reverseproxy: Prevent copying the response if a response handler ran (#4388)
  * reverseproxy: Sanitize scheme and host on incoming requests (#4237)
  * templates: Add 'import' action (#4321)
  * templates: Add tests for funcInclude and funcImport (#4357)
  * templates: Propagate httpError to HTTP response</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1653307200">- Update to version 2.5.1:
  * Fixed regression in Unix socket admin endpoints.
  * Fixed regression in caddy trust commands.
  * Hash-based load balancing policies (ip_hash, uri_hash, header, and cookie)
    use an improved highest-random-weight (HRW) algorithm for increased
    consistency.
  * Dynamic upstreams, which is the ability to get the list of upstreams at
    every request (more specifically, every iteration in the proxy loop of
    every request) rather than just once at config-load time.
  * Caddy will automatically try to get relevant certificates from the local
    Tailscale instance.
  * New OpenTelemetry integration.
  * Added new endpoints /pki/ca/&lt;id&gt; and /pki/ca/&lt;id&gt;/certificates for
    getting information about Caddy's managed CAs.
  * Rename _caddy to zsh-completion
  * Fix MatchPath sanitizing [bsc#1200279, CVE-2022-29718]</changelog>
</package>
<package pkgid="2b4335989d3ffdc7c559af37c5a11c85476a745a39816e4249a953ff1e5004e1" name="caddy" arch="src">
  <version epoch="0" ver="2.5.1" rel="bp154.2.5.1"/>
  <changelog author="Alexandre Vicenzi &lt;alexandre.vicenzi@suse.com&gt;" date="1619611200">- Create Caddy package</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1621857600">- Update to version 2.4.1:
  * logging: Implement dial timeout for net writer (fix #4083) (#4172)
  * admin: Reinstate internal redirect for /id/ requests
  * caddyfile: Add parse error on site address with trailing `{` (#4163)
  * reverseproxy: Set the headers in the replacer before `handle_response` (#4165)
  * ci: Run CI on PRs targeting minor version branches (#4164)
  * cmd: upgrade: inherit the permissions of the original executable (#4160)
  * httpcaddyfile: Fix automation policy consolidation again (fix #4161)
  * caddyfile: Fix `caddy fmt` nesting not decrementing (#4157)
  * encode: Drop `prefer` from Caddyfile (#4156)
  * encode: Default to order the formats are enabled for `prefer` in Caddyfile (#4151)
  * caddytls: Run replacer on ask URL, for env vars (#4154)
  * httpcaddyfile: Add `grace_period` global option (#4152)
  * caddyhttp: Fix fallback for the error handler chain (#4131)
  * reverseproxy: Minor logging improvements
  * fileserver: Fix `file` matcher with empty `try_files` (#4147)
  * go.mod: CertMagic v0.13.1
  * reverseproxy: Add `handle_response` blocks to `reverse_proxy` (#3710) (#4021)
  * cmd: Add --envfile flag to `start` command (#4141)
  * httpcaddyfile: Add `auto_https ignore_loaded_certs` (#4077)
  * httpcaddyfile: Add global option for `storage_clean_interval` (#4134)
  * caddyhttp: performance improvement in HeaderRE Matcher (#4143)
  * fileserver: Share template logic for both `templates` and `file_server browse` (#4093)
  * caddytls: Implement remote IP connection matcher (#4123)
  * httpcaddyfile: Fix unexpectedly removed policy (#4128)
  * reverseproxy: fix hash selection policy (#4137)
  * fileserver: Better handling of HTTP status override (#4132)
  * caddyfile: Fix `import` replacing unrelated placeholders (#4129)
  * caddytls: Add `load_storage` module (#4055)
  * reverseproxy: Admin endpoint for reporting upstream statuses (#4125)
  * caddyhttp: Implement better logic for inserting the HTTP-&gt;HTTPS redirs (#4033)
  * httpcaddyfile: Take into account host scheme/port (fix #4113)
  * fuzz: fix the FuzzFormat comparison (#4117)
  * caddytls: Disable OCSP stapling for manual certs (#4064)
  * caddytls: Configurable storage clean interval
  * caddyfile: reject cyclic imports (#4022)
  * ci: fuzz: add 4 more fuzzing targets (#4105)
  * fileserver: Add status code override (#4076)
  * notify: Send all sd_notify signals from main caddy process (#4060)
  * go.mod: Update quic-go to v0.20.1 (#4075)
  * httpcaddyfile: Fix panic in automation policy consolidation (#4104)
  * caddyfile: Normalize line endings before comparing fmt result (#4103)
  * ci: accommodate go1.16 changes to go mod (#4102)
  * Minor tweaks
  * go.mod: Use latest CertMagic
  * Use 600 instead of 644 for UUID file
  * Change os to ioutil for now
  * reverseproxy: Set cookie path to `/` when using cookie lb_policy (#4096)
  * caddy: Add InstanceID() method
  * encode,staticfiles: Content negotiation, precompressed files (#4045)
  * reverseproxy: Implement health_uri, deprecate health_path, supports query (#4050)
  * go.mod: Migrate to golang.org/x/term (#4073)
  * caddyhttp: improve grammar of comment for AllowH2C (#4072)
  * sigtrap_posix: add missing comma to SIGTERM info (#4078)
  * cmd: Use formatted logger for config adapter warnings (#4080)
  * cmd: main: fix minor doc typos (#4082)
  * headers: Fix Caddyfile parsing for `request_header` with matchers (#4085)
  * .gitignore: add IDE files (#4087)
  * fileserver: Add a few more debug lines (#4063)
  * fileserver: Browse listing supports dark mode (#4066)
  * CONTRIBUTING: fix spelling (#4070)
  * httpcaddyfile: Add `error` directive for the existing handler (#4034)
  * logging: add replace filter for static value replacement (#4029)
  * caddyconfig: add global option for configuring loggers (#4028)
  * map: Accept regex substitution in outputs (#3991)
  * reverseproxy: Fix upstreams with placeholders with no port (#4046)
  * rewrite: Implement regex path replacements
  * fileserver: Don't replace in request paths (fix #4027)
  * caddypki: Add SignWithRoot option for ACME server
  * reverseproxy: Fix round robin data race (#4038)
  * Update docs; commit setcap.sh
  * go.mod: Latest CertMagic (updated libdns conventions)
  * core: Initialize logging before admin
  * caddytls: Remove old asset migration code (close #3894)
  * reverseproxy: Add duration/latency placeholders (close #4012) (#4013)
  * httpcaddyfile: Fix catch-all site block sorting
  * ci: Build and test on Go 1.16, bump minimum to 1.15 (#4024)
  * caddy: Support SetReadBuffer and SyscallConn for QUIC (fix #3998)
  * Improve security warnings
  * httpcaddyfile: Configure other apps from global options (#3990)
  * cmd: Clean up `build-info` and `upgrade` output
  * caddyhttp: Support placeholders in header matcher values (close #3916)
  * caddytls: Save email with account if not already specified
  * reverseproxy: Response buffering &amp; configurable buffer size
  * httpcaddyfile: Fix automation policies
  * ci: deflake integration tests (#3966)
  * httpcaddyfile: Add resolvers subdir of tls (close #4008)
  * acmeserver: Support custom CAs from Caddyfile
  * caddyhttp: Check for invalid subdirectives of static_response
  * httpcaddyfile: Fix default issuers when email provided
  * cmd: Add --force flag to reload command (close #4005)
  * httpcaddyfile: Warn if site address uses unspecified IP (close #4004)
  * httpcaddyfile: Sort catch-all site blocks properly (fix #4003)
  * ci: update the command to run tests on the s390x machine (#3995)
  * caddyhttp: Fix redir html status code, improve flow (#3987)
  * caddyhttp: Implement handler abort; new 'abort' directive (close #3871) (#3983)
  * admin: Identity management, remote admin, config loaders (#3994)
  * caddycmd: Add upgrade command (#3972)
  * Revert "requestbody: Allow overwriting remote address"
  * caddytest: Update Caddyfile tests for formatting, HTTP-only blocks
  * httpcaddyfile: Skip TLS APs for HTTP-only hosts (fix #3977)
  * cmd: Print more detailed version with --environ
  * map: Add missing json struct tag
  * tests: use actual admin port value in error message (#3973)
  * cmd: Implement sd_notify() to notify systemd about readiness (#3963)
  * templates: Add fileExists and httpError template actions
  * requestbody: Allow overwriting remote address
  * rewrite: Use RawPath instead of Path (fix #3596) (#3918)
  * Update docs
  * caddytls: Configurable OCSP stapling; global option (closes #3714)
  * logging: Remove logfmt encoder (close #3575)
  * httpcaddyfile: Support repeated use of cert_issuer global option
  * caddytls: add 'key_type' subdirective (#3956)
  * caddyfile: Refactor unmarshaling of module tokens
  * go.mod: Update CertMagic and acmez (improved IDN support)
  * reverseproxy: Caddyfile health check headers, host header support (#3948)
  * httpcaddyfile: Adjust iterator when removing AP (fix #3953)
  * cmd: Organize list-modules output; --packages flag (#3925)
  * caddyfile: Introduce basic linting and fmt check (#3923)</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1629892800">- Added hardening to systemd service(s). Modified:
  * caddy.service</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1630584000">- Update to version 2.4.4:
  * acmeserver: Don't set host for directory links by default
  * acmeserver: Trim slashes from path prefix
  * admin: Implement load_interval to pull config on a timer
  * admin: Replace admin cert cache when reloading
  * admin: Sync server variables
  * caddyfile: Better error message for missing site block braces
  * caddyfile: Error on invalid site addresses containing comma
  * caddyfile: keep error chain info in Dispenser.Errf
  * caddyhttp: Fix edgecase with auto HTTP-&gt;HTTPS logic
  * caddyhttp: Fix incorrect determination of gRPC protocol
  * caddyhttp: Refactor and export SanitizedPathJoin for use in fastcgi
  * caddyhttp: Updated the documentation for MatchQuery
  * caddytls: Add Caddyfile support for propagation_timeout
  * caddytls: Remove "IssuerRaw" field
  * cmd: Fix paths when using an env file
  * cmd: New add-package and remove-package commands
  * cmd: use net.ErrClosed for matching returned error
  * core: Unix ns and Unix ms time placeholders
  * encode: Tweak compression settings
  * fileserver: Add disable_canonical_uris Caddyfile subdirective
  * fileserver: Clarify docs about canonicalization
  * fileserver: Don't persist parsed template
  * fileserver: Fix browse name_dir_first sorting
  * fileserver: Fix browse not redirecting query parameters
  * fileserver: Only redirect if filename not rewritten
  * fileserver: Redirect within the original URL
  * go.mod: Update dependencies
  * httpcaddyfile: Add preferred_chains global option and issuer subdirective
  * httpcaddyfile: Add shortcut for proxy hostport placeholder
  * httpcaddyfile: Add skip_install_trust global option
  * httpcaddyfile: Don't add HTTP hosts to TLS APs
  * httpcaddyfile: Don't put localhost in public APs
  * httpcaddyfile: Ensure hosts to skip for logs can always be collected
  * httpcaddyfile: Improve unrecognized directive errors
  * httpcaddyfile: Reorder some directives
  * logging: Actually use level_key
  * logging: Add missing interface guards for replace filter
  * logging: Prep for common_log removal
  * logging: Warn for deprecated single_field encoder
  * metrics: use buildinfo collector from new collectors pkg
  * reverseproxy: Adjust test related to #4201
  * reverseproxy: Always remove hop-by-hop headers
  * reverseproxy: Fix overwriting of max_idle_conns_per_host
  * reverseproxy: Incorporate latest proxy changes from stdlib
  * reverseproxy: Keep path to unix socket as dial address
  * reverseproxy: Remove redundant flushing</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1634904000">- Update to version 2.4.5:
  * Hotfix for a regression introduced in 2.4.4 related to
    combining the encode and reverse_proxy directives.
  * cmd: export CaddyVersion(), Commands()
  * encode: ignore flushing until after first write
  * go.mod: Update CertMagic</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1648209600">- Update to version 2.4.6:
  * caddycmd: Add `--keep-backup` to upgrade commands (#4387)
  * caddycmd: Add `--skip-standard` to `list-modules` command, quieter output (#4386)
  * caddycmd: fix caddy validate/fmt help message (#4377)
  * caddyhttp: Add support for triggering errors from `try_files` (#4346)
  * caddyhttp: Placeholder for client cert in DER + base64 format (#4241)
  * caddyhttp: reverseproxy: clarify warning for -insecure (#4379)
  * caddyhttp: Sanitize the path before evaluating path matchers (#4407)
  * caddytls: Mark storage clean timestamp at end of routine (#4401)
  * docs: General minor improvements
  * fastcgi: Fix Caddyfile parsing when `handle_response` is used (#4342)
  * fastcgi: Implement `try_files` override in Caddyfile directive (#4347)
  * fileserver: Fix compression breaks using httpInclude (#4352) (#4358)
  * fileserver: Fix displayed file size if it is symlink (#4354)
  * fileserver: Make file listing links purple once visited (#4356)
  * fileserver: Prevent focusing filter from scrolling on page load (#4393)
  * fileserver: properly handle escaped/non-ascii paths (#4332)
  * headers: Canonicalize case in replace (fix #4330)
  * httpcaddyfile: Empty tls policy for internal http localhost (#4398)
  * httpcaddyfile: Preserve IPv6 addresses through normalization (fix #4381)
  * map: Fix 95c03506 (avoid repeated expansions)
  * map: Fix regex mappings
  * reverseproxy: Log error at error level (fix #4360)
  * reverseproxy: Prevent copying the response if a response handler ran (#4388)
  * reverseproxy: Sanitize scheme and host on incoming requests (#4237)
  * templates: Add 'import' action (#4321)
  * templates: Add tests for funcInclude and funcImport (#4357)
  * templates: Propagate httpError to HTTP response</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1653307200">- Update to version 2.5.1:
  * Fixed regression in Unix socket admin endpoints.
  * Fixed regression in caddy trust commands.
  * Hash-based load balancing policies (ip_hash, uri_hash, header, and cookie)
    use an improved highest-random-weight (HRW) algorithm for increased
    consistency.
  * Dynamic upstreams, which is the ability to get the list of upstreams at
    every request (more specifically, every iteration in the proxy loop of
    every request) rather than just once at config-load time.
  * Caddy will automatically try to get relevant certificates from the local
    Tailscale instance.
  * New OpenTelemetry integration.
  * Added new endpoints /pki/ca/&lt;id&gt; and /pki/ca/&lt;id&gt;/certificates for
    getting information about Caddy's managed CAs.
  * Rename _caddy to zsh-completion
  * Fix MatchPath sanitizing [bsc#1200279, CVE-2022-29718]</changelog>
</package>
<package pkgid="84eff9aa14a9ea9ed7ad9ebe29fce32f422980e962016841933e2330c1487483" name="caddy" arch="x86_64">
  <version epoch="0" ver="2.5.1" rel="bp154.2.5.1"/>
  <changelog author="Alexandre Vicenzi &lt;alexandre.vicenzi@suse.com&gt;" date="1619611200">- Create Caddy package</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1621857600">- Update to version 2.4.1:
  * logging: Implement dial timeout for net writer (fix #4083) (#4172)
  * admin: Reinstate internal redirect for /id/ requests
  * caddyfile: Add parse error on site address with trailing `{` (#4163)
  * reverseproxy: Set the headers in the replacer before `handle_response` (#4165)
  * ci: Run CI on PRs targeting minor version branches (#4164)
  * cmd: upgrade: inherit the permissions of the original executable (#4160)
  * httpcaddyfile: Fix automation policy consolidation again (fix #4161)
  * caddyfile: Fix `caddy fmt` nesting not decrementing (#4157)
  * encode: Drop `prefer` from Caddyfile (#4156)
  * encode: Default to order the formats are enabled for `prefer` in Caddyfile (#4151)
  * caddytls: Run replacer on ask URL, for env vars (#4154)
  * httpcaddyfile: Add `grace_period` global option (#4152)
  * caddyhttp: Fix fallback for the error handler chain (#4131)
  * reverseproxy: Minor logging improvements
  * fileserver: Fix `file` matcher with empty `try_files` (#4147)
  * go.mod: CertMagic v0.13.1
  * reverseproxy: Add `handle_response` blocks to `reverse_proxy` (#3710) (#4021)
  * cmd: Add --envfile flag to `start` command (#4141)
  * httpcaddyfile: Add `auto_https ignore_loaded_certs` (#4077)
  * httpcaddyfile: Add global option for `storage_clean_interval` (#4134)
  * caddyhttp: performance improvement in HeaderRE Matcher (#4143)
  * fileserver: Share template logic for both `templates` and `file_server browse` (#4093)
  * caddytls: Implement remote IP connection matcher (#4123)
  * httpcaddyfile: Fix unexpectedly removed policy (#4128)
  * reverseproxy: fix hash selection policy (#4137)
  * fileserver: Better handling of HTTP status override (#4132)
  * caddyfile: Fix `import` replacing unrelated placeholders (#4129)
  * caddytls: Add `load_storage` module (#4055)
  * reverseproxy: Admin endpoint for reporting upstream statuses (#4125)
  * caddyhttp: Implement better logic for inserting the HTTP-&gt;HTTPS redirs (#4033)
  * httpcaddyfile: Take into account host scheme/port (fix #4113)
  * fuzz: fix the FuzzFormat comparison (#4117)
  * caddytls: Disable OCSP stapling for manual certs (#4064)
  * caddytls: Configurable storage clean interval
  * caddyfile: reject cyclic imports (#4022)
  * ci: fuzz: add 4 more fuzzing targets (#4105)
  * fileserver: Add status code override (#4076)
  * notify: Send all sd_notify signals from main caddy process (#4060)
  * go.mod: Update quic-go to v0.20.1 (#4075)
  * httpcaddyfile: Fix panic in automation policy consolidation (#4104)
  * caddyfile: Normalize line endings before comparing fmt result (#4103)
  * ci: accommodate go1.16 changes to go mod (#4102)
  * Minor tweaks
  * go.mod: Use latest CertMagic
  * Use 600 instead of 644 for UUID file
  * Change os to ioutil for now
  * reverseproxy: Set cookie path to `/` when using cookie lb_policy (#4096)
  * caddy: Add InstanceID() method
  * encode,staticfiles: Content negotiation, precompressed files (#4045)
  * reverseproxy: Implement health_uri, deprecate health_path, supports query (#4050)
  * go.mod: Migrate to golang.org/x/term (#4073)
  * caddyhttp: improve grammar of comment for AllowH2C (#4072)
  * sigtrap_posix: add missing comma to SIGTERM info (#4078)
  * cmd: Use formatted logger for config adapter warnings (#4080)
  * cmd: main: fix minor doc typos (#4082)
  * headers: Fix Caddyfile parsing for `request_header` with matchers (#4085)
  * .gitignore: add IDE files (#4087)
  * fileserver: Add a few more debug lines (#4063)
  * fileserver: Browse listing supports dark mode (#4066)
  * CONTRIBUTING: fix spelling (#4070)
  * httpcaddyfile: Add `error` directive for the existing handler (#4034)
  * logging: add replace filter for static value replacement (#4029)
  * caddyconfig: add global option for configuring loggers (#4028)
  * map: Accept regex substitution in outputs (#3991)
  * reverseproxy: Fix upstreams with placeholders with no port (#4046)
  * rewrite: Implement regex path replacements
  * fileserver: Don't replace in request paths (fix #4027)
  * caddypki: Add SignWithRoot option for ACME server
  * reverseproxy: Fix round robin data race (#4038)
  * Update docs; commit setcap.sh
  * go.mod: Latest CertMagic (updated libdns conventions)
  * core: Initialize logging before admin
  * caddytls: Remove old asset migration code (close #3894)
  * reverseproxy: Add duration/latency placeholders (close #4012) (#4013)
  * httpcaddyfile: Fix catch-all site block sorting
  * ci: Build and test on Go 1.16, bump minimum to 1.15 (#4024)
  * caddy: Support SetReadBuffer and SyscallConn for QUIC (fix #3998)
  * Improve security warnings
  * httpcaddyfile: Configure other apps from global options (#3990)
  * cmd: Clean up `build-info` and `upgrade` output
  * caddyhttp: Support placeholders in header matcher values (close #3916)
  * caddytls: Save email with account if not already specified
  * reverseproxy: Response buffering &amp; configurable buffer size
  * httpcaddyfile: Fix automation policies
  * ci: deflake integration tests (#3966)
  * httpcaddyfile: Add resolvers subdir of tls (close #4008)
  * acmeserver: Support custom CAs from Caddyfile
  * caddyhttp: Check for invalid subdirectives of static_response
  * httpcaddyfile: Fix default issuers when email provided
  * cmd: Add --force flag to reload command (close #4005)
  * httpcaddyfile: Warn if site address uses unspecified IP (close #4004)
  * httpcaddyfile: Sort catch-all site blocks properly (fix #4003)
  * ci: update the command to run tests on the s390x machine (#3995)
  * caddyhttp: Fix redir html status code, improve flow (#3987)
  * caddyhttp: Implement handler abort; new 'abort' directive (close #3871) (#3983)
  * admin: Identity management, remote admin, config loaders (#3994)
  * caddycmd: Add upgrade command (#3972)
  * Revert "requestbody: Allow overwriting remote address"
  * caddytest: Update Caddyfile tests for formatting, HTTP-only blocks
  * httpcaddyfile: Skip TLS APs for HTTP-only hosts (fix #3977)
  * cmd: Print more detailed version with --environ
  * map: Add missing json struct tag
  * tests: use actual admin port value in error message (#3973)
  * cmd: Implement sd_notify() to notify systemd about readiness (#3963)
  * templates: Add fileExists and httpError template actions
  * requestbody: Allow overwriting remote address
  * rewrite: Use RawPath instead of Path (fix #3596) (#3918)
  * Update docs
  * caddytls: Configurable OCSP stapling; global option (closes #3714)
  * logging: Remove logfmt encoder (close #3575)
  * httpcaddyfile: Support repeated use of cert_issuer global option
  * caddytls: add 'key_type' subdirective (#3956)
  * caddyfile: Refactor unmarshaling of module tokens
  * go.mod: Update CertMagic and acmez (improved IDN support)
  * reverseproxy: Caddyfile health check headers, host header support (#3948)
  * httpcaddyfile: Adjust iterator when removing AP (fix #3953)
  * cmd: Organize list-modules output; --packages flag (#3925)
  * caddyfile: Introduce basic linting and fmt check (#3923)</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1629892800">- Added hardening to systemd service(s). Modified:
  * caddy.service</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1630584000">- Update to version 2.4.4:
  * acmeserver: Don't set host for directory links by default
  * acmeserver: Trim slashes from path prefix
  * admin: Implement load_interval to pull config on a timer
  * admin: Replace admin cert cache when reloading
  * admin: Sync server variables
  * caddyfile: Better error message for missing site block braces
  * caddyfile: Error on invalid site addresses containing comma
  * caddyfile: keep error chain info in Dispenser.Errf
  * caddyhttp: Fix edgecase with auto HTTP-&gt;HTTPS logic
  * caddyhttp: Fix incorrect determination of gRPC protocol
  * caddyhttp: Refactor and export SanitizedPathJoin for use in fastcgi
  * caddyhttp: Updated the documentation for MatchQuery
  * caddytls: Add Caddyfile support for propagation_timeout
  * caddytls: Remove "IssuerRaw" field
  * cmd: Fix paths when using an env file
  * cmd: New add-package and remove-package commands
  * cmd: use net.ErrClosed for matching returned error
  * core: Unix ns and Unix ms time placeholders
  * encode: Tweak compression settings
  * fileserver: Add disable_canonical_uris Caddyfile subdirective
  * fileserver: Clarify docs about canonicalization
  * fileserver: Don't persist parsed template
  * fileserver: Fix browse name_dir_first sorting
  * fileserver: Fix browse not redirecting query parameters
  * fileserver: Only redirect if filename not rewritten
  * fileserver: Redirect within the original URL
  * go.mod: Update dependencies
  * httpcaddyfile: Add preferred_chains global option and issuer subdirective
  * httpcaddyfile: Add shortcut for proxy hostport placeholder
  * httpcaddyfile: Add skip_install_trust global option
  * httpcaddyfile: Don't add HTTP hosts to TLS APs
  * httpcaddyfile: Don't put localhost in public APs
  * httpcaddyfile: Ensure hosts to skip for logs can always be collected
  * httpcaddyfile: Improve unrecognized directive errors
  * httpcaddyfile: Reorder some directives
  * logging: Actually use level_key
  * logging: Add missing interface guards for replace filter
  * logging: Prep for common_log removal
  * logging: Warn for deprecated single_field encoder
  * metrics: use buildinfo collector from new collectors pkg
  * reverseproxy: Adjust test related to #4201
  * reverseproxy: Always remove hop-by-hop headers
  * reverseproxy: Fix overwriting of max_idle_conns_per_host
  * reverseproxy: Incorporate latest proxy changes from stdlib
  * reverseproxy: Keep path to unix socket as dial address
  * reverseproxy: Remove redundant flushing</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1634904000">- Update to version 2.4.5:
  * Hotfix for a regression introduced in 2.4.4 related to
    combining the encode and reverse_proxy directives.
  * cmd: export CaddyVersion(), Commands()
  * encode: ignore flushing until after first write
  * go.mod: Update CertMagic</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1648209600">- Update to version 2.4.6:
  * caddycmd: Add `--keep-backup` to upgrade commands (#4387)
  * caddycmd: Add `--skip-standard` to `list-modules` command, quieter output (#4386)
  * caddycmd: fix caddy validate/fmt help message (#4377)
  * caddyhttp: Add support for triggering errors from `try_files` (#4346)
  * caddyhttp: Placeholder for client cert in DER + base64 format (#4241)
  * caddyhttp: reverseproxy: clarify warning for -insecure (#4379)
  * caddyhttp: Sanitize the path before evaluating path matchers (#4407)
  * caddytls: Mark storage clean timestamp at end of routine (#4401)
  * docs: General minor improvements
  * fastcgi: Fix Caddyfile parsing when `handle_response` is used (#4342)
  * fastcgi: Implement `try_files` override in Caddyfile directive (#4347)
  * fileserver: Fix compression breaks using httpInclude (#4352) (#4358)
  * fileserver: Fix displayed file size if it is symlink (#4354)
  * fileserver: Make file listing links purple once visited (#4356)
  * fileserver: Prevent focusing filter from scrolling on page load (#4393)
  * fileserver: properly handle escaped/non-ascii paths (#4332)
  * headers: Canonicalize case in replace (fix #4330)
  * httpcaddyfile: Empty tls policy for internal http localhost (#4398)
  * httpcaddyfile: Preserve IPv6 addresses through normalization (fix #4381)
  * map: Fix 95c03506 (avoid repeated expansions)
  * map: Fix regex mappings
  * reverseproxy: Log error at error level (fix #4360)
  * reverseproxy: Prevent copying the response if a response handler ran (#4388)
  * reverseproxy: Sanitize scheme and host on incoming requests (#4237)
  * templates: Add 'import' action (#4321)
  * templates: Add tests for funcInclude and funcImport (#4357)
  * templates: Propagate httpError to HTTP response</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1653307200">- Update to version 2.5.1:
  * Fixed regression in Unix socket admin endpoints.
  * Fixed regression in caddy trust commands.
  * Hash-based load balancing policies (ip_hash, uri_hash, header, and cookie)
    use an improved highest-random-weight (HRW) algorithm for increased
    consistency.
  * Dynamic upstreams, which is the ability to get the list of upstreams at
    every request (more specifically, every iteration in the proxy loop of
    every request) rather than just once at config-load time.
  * Caddy will automatically try to get relevant certificates from the local
    Tailscale instance.
  * New OpenTelemetry integration.
  * Added new endpoints /pki/ca/&lt;id&gt; and /pki/ca/&lt;id&gt;/certificates for
    getting information about Caddy's managed CAs.
  * Rename _caddy to zsh-completion
  * Fix MatchPath sanitizing [bsc#1200279, CVE-2022-29718]</changelog>
</package>
<package pkgid="f7eb8644fe8b44d18b2799ae027365951f353e53504297984442d926ace9fa37" name="caddy" arch="aarch64">
  <version epoch="0" ver="2.5.2" rel="bp154.2.8.1"/>
  <changelog author="Alexandre Vicenzi &lt;alexandre.vicenzi@suse.com&gt;" date="1619611200">- Create Caddy package</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1621857600">- Update to version 2.4.1:
  * logging: Implement dial timeout for net writer (fix #4083) (#4172)
  * admin: Reinstate internal redirect for /id/ requests
  * caddyfile: Add parse error on site address with trailing `{` (#4163)
  * reverseproxy: Set the headers in the replacer before `handle_response` (#4165)
  * ci: Run CI on PRs targeting minor version branches (#4164)
  * cmd: upgrade: inherit the permissions of the original executable (#4160)
  * httpcaddyfile: Fix automation policy consolidation again (fix #4161)
  * caddyfile: Fix `caddy fmt` nesting not decrementing (#4157)
  * encode: Drop `prefer` from Caddyfile (#4156)
  * encode: Default to order the formats are enabled for `prefer` in Caddyfile (#4151)
  * caddytls: Run replacer on ask URL, for env vars (#4154)
  * httpcaddyfile: Add `grace_period` global option (#4152)
  * caddyhttp: Fix fallback for the error handler chain (#4131)
  * reverseproxy: Minor logging improvements
  * fileserver: Fix `file` matcher with empty `try_files` (#4147)
  * go.mod: CertMagic v0.13.1
  * reverseproxy: Add `handle_response` blocks to `reverse_proxy` (#3710) (#4021)
  * cmd: Add --envfile flag to `start` command (#4141)
  * httpcaddyfile: Add `auto_https ignore_loaded_certs` (#4077)
  * httpcaddyfile: Add global option for `storage_clean_interval` (#4134)
  * caddyhttp: performance improvement in HeaderRE Matcher (#4143)
  * fileserver: Share template logic for both `templates` and `file_server browse` (#4093)
  * caddytls: Implement remote IP connection matcher (#4123)
  * httpcaddyfile: Fix unexpectedly removed policy (#4128)
  * reverseproxy: fix hash selection policy (#4137)
  * fileserver: Better handling of HTTP status override (#4132)
  * caddyfile: Fix `import` replacing unrelated placeholders (#4129)
  * caddytls: Add `load_storage` module (#4055)
  * reverseproxy: Admin endpoint for reporting upstream statuses (#4125)
  * caddyhttp: Implement better logic for inserting the HTTP-&gt;HTTPS redirs (#4033)
  * httpcaddyfile: Take into account host scheme/port (fix #4113)
  * fuzz: fix the FuzzFormat comparison (#4117)
  * caddytls: Disable OCSP stapling for manual certs (#4064)
  * caddytls: Configurable storage clean interval
  * caddyfile: reject cyclic imports (#4022)
  * ci: fuzz: add 4 more fuzzing targets (#4105)
  * fileserver: Add status code override (#4076)
  * notify: Send all sd_notify signals from main caddy process (#4060)
  * go.mod: Update quic-go to v0.20.1 (#4075)
  * httpcaddyfile: Fix panic in automation policy consolidation (#4104)
  * caddyfile: Normalize line endings before comparing fmt result (#4103)
  * ci: accommodate go1.16 changes to go mod (#4102)
  * Minor tweaks
  * go.mod: Use latest CertMagic
  * Use 600 instead of 644 for UUID file
  * Change os to ioutil for now
  * reverseproxy: Set cookie path to `/` when using cookie lb_policy (#4096)
  * caddy: Add InstanceID() method
  * encode,staticfiles: Content negotiation, precompressed files (#4045)
  * reverseproxy: Implement health_uri, deprecate health_path, supports query (#4050)
  * go.mod: Migrate to golang.org/x/term (#4073)
  * caddyhttp: improve grammar of comment for AllowH2C (#4072)
  * sigtrap_posix: add missing comma to SIGTERM info (#4078)
  * cmd: Use formatted logger for config adapter warnings (#4080)
  * cmd: main: fix minor doc typos (#4082)
  * headers: Fix Caddyfile parsing for `request_header` with matchers (#4085)
  * .gitignore: add IDE files (#4087)
  * fileserver: Add a few more debug lines (#4063)
  * fileserver: Browse listing supports dark mode (#4066)
  * CONTRIBUTING: fix spelling (#4070)
  * httpcaddyfile: Add `error` directive for the existing handler (#4034)
  * logging: add replace filter for static value replacement (#4029)
  * caddyconfig: add global option for configuring loggers (#4028)
  * map: Accept regex substitution in outputs (#3991)
  * reverseproxy: Fix upstreams with placeholders with no port (#4046)
  * rewrite: Implement regex path replacements
  * fileserver: Don't replace in request paths (fix #4027)
  * caddypki: Add SignWithRoot option for ACME server
  * reverseproxy: Fix round robin data race (#4038)
  * Update docs; commit setcap.sh
  * go.mod: Latest CertMagic (updated libdns conventions)
  * core: Initialize logging before admin
  * caddytls: Remove old asset migration code (close #3894)
  * reverseproxy: Add duration/latency placeholders (close #4012) (#4013)
  * httpcaddyfile: Fix catch-all site block sorting
  * ci: Build and test on Go 1.16, bump minimum to 1.15 (#4024)
  * caddy: Support SetReadBuffer and SyscallConn for QUIC (fix #3998)
  * Improve security warnings
  * httpcaddyfile: Configure other apps from global options (#3990)
  * cmd: Clean up `build-info` and `upgrade` output
  * caddyhttp: Support placeholders in header matcher values (close #3916)
  * caddytls: Save email with account if not already specified
  * reverseproxy: Response buffering &amp; configurable buffer size
  * httpcaddyfile: Fix automation policies
  * ci: deflake integration tests (#3966)
  * httpcaddyfile: Add resolvers subdir of tls (close #4008)
  * acmeserver: Support custom CAs from Caddyfile
  * caddyhttp: Check for invalid subdirectives of static_response
  * httpcaddyfile: Fix default issuers when email provided
  * cmd: Add --force flag to reload command (close #4005)
  * httpcaddyfile: Warn if site address uses unspecified IP (close #4004)
  * httpcaddyfile: Sort catch-all site blocks properly (fix #4003)
  * ci: update the command to run tests on the s390x machine (#3995)
  * caddyhttp: Fix redir html status code, improve flow (#3987)
  * caddyhttp: Implement handler abort; new 'abort' directive (close #3871) (#3983)
  * admin: Identity management, remote admin, config loaders (#3994)
  * caddycmd: Add upgrade command (#3972)
  * Revert "requestbody: Allow overwriting remote address"
  * caddytest: Update Caddyfile tests for formatting, HTTP-only blocks
  * httpcaddyfile: Skip TLS APs for HTTP-only hosts (fix #3977)
  * cmd: Print more detailed version with --environ
  * map: Add missing json struct tag
  * tests: use actual admin port value in error message (#3973)
  * cmd: Implement sd_notify() to notify systemd about readiness (#3963)
  * templates: Add fileExists and httpError template actions
  * requestbody: Allow overwriting remote address
  * rewrite: Use RawPath instead of Path (fix #3596) (#3918)
  * Update docs
  * caddytls: Configurable OCSP stapling; global option (closes #3714)
  * logging: Remove logfmt encoder (close #3575)
  * httpcaddyfile: Support repeated use of cert_issuer global option
  * caddytls: add 'key_type' subdirective (#3956)
  * caddyfile: Refactor unmarshaling of module tokens
  * go.mod: Update CertMagic and acmez (improved IDN support)
  * reverseproxy: Caddyfile health check headers, host header support (#3948)
  * httpcaddyfile: Adjust iterator when removing AP (fix #3953)
  * cmd: Organize list-modules output; --packages flag (#3925)
  * caddyfile: Introduce basic linting and fmt check (#3923)</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1629892800">- Added hardening to systemd service(s). Modified:
  * caddy.service</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1630584000">- Update to version 2.4.4:
  * acmeserver: Don't set host for directory links by default
  * acmeserver: Trim slashes from path prefix
  * admin: Implement load_interval to pull config on a timer
  * admin: Replace admin cert cache when reloading
  * admin: Sync server variables
  * caddyfile: Better error message for missing site block braces
  * caddyfile: Error on invalid site addresses containing comma
  * caddyfile: keep error chain info in Dispenser.Errf
  * caddyhttp: Fix edgecase with auto HTTP-&gt;HTTPS logic
  * caddyhttp: Fix incorrect determination of gRPC protocol
  * caddyhttp: Refactor and export SanitizedPathJoin for use in fastcgi
  * caddyhttp: Updated the documentation for MatchQuery
  * caddytls: Add Caddyfile support for propagation_timeout
  * caddytls: Remove "IssuerRaw" field
  * cmd: Fix paths when using an env file
  * cmd: New add-package and remove-package commands
  * cmd: use net.ErrClosed for matching returned error
  * core: Unix ns and Unix ms time placeholders
  * encode: Tweak compression settings
  * fileserver: Add disable_canonical_uris Caddyfile subdirective
  * fileserver: Clarify docs about canonicalization
  * fileserver: Don't persist parsed template
  * fileserver: Fix browse name_dir_first sorting
  * fileserver: Fix browse not redirecting query parameters
  * fileserver: Only redirect if filename not rewritten
  * fileserver: Redirect within the original URL
  * go.mod: Update dependencies
  * httpcaddyfile: Add preferred_chains global option and issuer subdirective
  * httpcaddyfile: Add shortcut for proxy hostport placeholder
  * httpcaddyfile: Add skip_install_trust global option
  * httpcaddyfile: Don't add HTTP hosts to TLS APs
  * httpcaddyfile: Don't put localhost in public APs
  * httpcaddyfile: Ensure hosts to skip for logs can always be collected
  * httpcaddyfile: Improve unrecognized directive errors
  * httpcaddyfile: Reorder some directives
  * logging: Actually use level_key
  * logging: Add missing interface guards for replace filter
  * logging: Prep for common_log removal
  * logging: Warn for deprecated single_field encoder
  * metrics: use buildinfo collector from new collectors pkg
  * reverseproxy: Adjust test related to #4201
  * reverseproxy: Always remove hop-by-hop headers
  * reverseproxy: Fix overwriting of max_idle_conns_per_host
  * reverseproxy: Incorporate latest proxy changes from stdlib
  * reverseproxy: Keep path to unix socket as dial address
  * reverseproxy: Remove redundant flushing</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1634904000">- Update to version 2.4.5:
  * Hotfix for a regression introduced in 2.4.4 related to
    combining the encode and reverse_proxy directives.
  * cmd: export CaddyVersion(), Commands()
  * encode: ignore flushing until after first write
  * go.mod: Update CertMagic</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1648209600">- Update to version 2.4.6:
  * caddycmd: Add `--keep-backup` to upgrade commands (#4387)
  * caddycmd: Add `--skip-standard` to `list-modules` command, quieter output (#4386)
  * caddycmd: fix caddy validate/fmt help message (#4377)
  * caddyhttp: Add support for triggering errors from `try_files` (#4346)
  * caddyhttp: Placeholder for client cert in DER + base64 format (#4241)
  * caddyhttp: reverseproxy: clarify warning for -insecure (#4379)
  * caddyhttp: Sanitize the path before evaluating path matchers (#4407)
  * caddytls: Mark storage clean timestamp at end of routine (#4401)
  * docs: General minor improvements
  * fastcgi: Fix Caddyfile parsing when `handle_response` is used (#4342)
  * fastcgi: Implement `try_files` override in Caddyfile directive (#4347)
  * fileserver: Fix compression breaks using httpInclude (#4352) (#4358)
  * fileserver: Fix displayed file size if it is symlink (#4354)
  * fileserver: Make file listing links purple once visited (#4356)
  * fileserver: Prevent focusing filter from scrolling on page load (#4393)
  * fileserver: properly handle escaped/non-ascii paths (#4332)
  * headers: Canonicalize case in replace (fix #4330)
  * httpcaddyfile: Empty tls policy for internal http localhost (#4398)
  * httpcaddyfile: Preserve IPv6 addresses through normalization (fix #4381)
  * map: Fix 95c03506 (avoid repeated expansions)
  * map: Fix regex mappings
  * reverseproxy: Log error at error level (fix #4360)
  * reverseproxy: Prevent copying the response if a response handler ran (#4388)
  * reverseproxy: Sanitize scheme and host on incoming requests (#4237)
  * templates: Add 'import' action (#4321)
  * templates: Add tests for funcInclude and funcImport (#4357)
  * templates: Propagate httpError to HTTP response</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1653307200">- Update to version 2.5.1:
  * Fixed regression in Unix socket admin endpoints.
  * Fixed regression in caddy trust commands.
  * Hash-based load balancing policies (ip_hash, uri_hash, header, and cookie)
    use an improved highest-random-weight (HRW) algorithm for increased
    consistency.
  * Dynamic upstreams, which is the ability to get the list of upstreams at
    every request (more specifically, every iteration in the proxy loop of
    every request) rather than just once at config-load time.
  * Caddy will automatically try to get relevant certificates from the local
    Tailscale instance.
  * New OpenTelemetry integration.
  * Added new endpoints /pki/ca/&lt;id&gt; and /pki/ca/&lt;id&gt;/certificates for
    getting information about Caddy's managed CAs.
  * Rename _caddy to zsh-completion
  * Fix MatchPath sanitizing [bsc#1200279, CVE-2022-29718]</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1657886400">- Update to version 2.5.2:
  * admin: expect quoted ETags (#4879)
  * headers: Only replace known placeholders (#4880)
  * reverseproxy: Err 503 if all upstreams unavailable
  * reverseproxy: Adjust new TLS Caddyfile directive names (#4872)
  * fileserver: Use safe redirects in file browser
  * admin: support ETag on config endpoints (#4579)
  * go.mod: Bump up quic-go to v0.28.0, fixes for BC breaks (#4867)
  * caddytls: Reuse issuer between PreCheck and Issue (#4866)
  * admin: Implement /adapt endpoint (close #4465) (#4846)
  * forwardauth: Fix case when `copy_headers` is omitted (#4856)
  * Expose several Caddy HTTP Matchers to the CEL Matcher (#4715)
  * reverseproxy: Fix double headers in response handlers (#4847)
  * reverseproxy: Fix panic when TLS is not configured (#4848)
  * reverseproxy: Skip TLS for certain configured ports (#4843)
  * go.mod: Update some dependencies
  * forwardauth: Support renaming copied headers, block support (#4783)
  * Add comment about xcaddy to main
  * headers: Support wildcards for delete ops (close #4830) (#4831)
  * reverseproxy: Dynamic ServerName for TLS upstreams (#4836)
  * reverseproxy: Make TLS renegotiation optional
  * reverseproxy: Add renegotiation param in TLS client (#4784)
  * caddyhttp: Log error from CEL evaluation (fix #4832)
  * reverseproxy: Correct the `tls_server_name` docs (#4827)
  * reverseproxy: HTTP 504 for upstream timeouts (#4824)
  * caddytls: Make peer certificate verification pluggable (#4389)
  * reverseproxy: api: Remove misleading 'healthy' value
  * go.mod: Update go-yaml to v3
  * Fix #4822 and fix #4779
  * reverseproxy: Add --internal-certs CLI flag #3589 (#4817)
  * ci: Fix build caching on Windows (#4811)
  * templates: Add `humanize` function (#4767)
  * core: Micro-optim in run() (#4810)
  * go.mod: Upgrade some dependencies
  * httpcaddyfile: Add `{err.*}` placeholder shortcut (#4798)
  * templates: Documentation consistency (#4796)
  * chore: Bump quic-go to v0.27.0 (#4782)
  * reverseproxy: Support http1.1&gt;h2c (close #4777) (#4778)
  * rewrite: Handle fragment before query (fix #4775) [bsc#1201822, CVE-2022-34037]
  * httpcaddyfile: Support multiple values for `default_bind` (#4774)</changelog>
</package>
<package pkgid="c7f3b05bddcd55a27f2b878fb7752e389158de425267a9379504d1222e57c4b8" name="caddy" arch="i586">
  <version epoch="0" ver="2.5.2" rel="bp154.2.8.1"/>
  <changelog author="Alexandre Vicenzi &lt;alexandre.vicenzi@suse.com&gt;" date="1619611200">- Create Caddy package</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1621857600">- Update to version 2.4.1:
  * logging: Implement dial timeout for net writer (fix #4083) (#4172)
  * admin: Reinstate internal redirect for /id/ requests
  * caddyfile: Add parse error on site address with trailing `{` (#4163)
  * reverseproxy: Set the headers in the replacer before `handle_response` (#4165)
  * ci: Run CI on PRs targeting minor version branches (#4164)
  * cmd: upgrade: inherit the permissions of the original executable (#4160)
  * httpcaddyfile: Fix automation policy consolidation again (fix #4161)
  * caddyfile: Fix `caddy fmt` nesting not decrementing (#4157)
  * encode: Drop `prefer` from Caddyfile (#4156)
  * encode: Default to order the formats are enabled for `prefer` in Caddyfile (#4151)
  * caddytls: Run replacer on ask URL, for env vars (#4154)
  * httpcaddyfile: Add `grace_period` global option (#4152)
  * caddyhttp: Fix fallback for the error handler chain (#4131)
  * reverseproxy: Minor logging improvements
  * fileserver: Fix `file` matcher with empty `try_files` (#4147)
  * go.mod: CertMagic v0.13.1
  * reverseproxy: Add `handle_response` blocks to `reverse_proxy` (#3710) (#4021)
  * cmd: Add --envfile flag to `start` command (#4141)
  * httpcaddyfile: Add `auto_https ignore_loaded_certs` (#4077)
  * httpcaddyfile: Add global option for `storage_clean_interval` (#4134)
  * caddyhttp: performance improvement in HeaderRE Matcher (#4143)
  * fileserver: Share template logic for both `templates` and `file_server browse` (#4093)
  * caddytls: Implement remote IP connection matcher (#4123)
  * httpcaddyfile: Fix unexpectedly removed policy (#4128)
  * reverseproxy: fix hash selection policy (#4137)
  * fileserver: Better handling of HTTP status override (#4132)
  * caddyfile: Fix `import` replacing unrelated placeholders (#4129)
  * caddytls: Add `load_storage` module (#4055)
  * reverseproxy: Admin endpoint for reporting upstream statuses (#4125)
  * caddyhttp: Implement better logic for inserting the HTTP-&gt;HTTPS redirs (#4033)
  * httpcaddyfile: Take into account host scheme/port (fix #4113)
  * fuzz: fix the FuzzFormat comparison (#4117)
  * caddytls: Disable OCSP stapling for manual certs (#4064)
  * caddytls: Configurable storage clean interval
  * caddyfile: reject cyclic imports (#4022)
  * ci: fuzz: add 4 more fuzzing targets (#4105)
  * fileserver: Add status code override (#4076)
  * notify: Send all sd_notify signals from main caddy process (#4060)
  * go.mod: Update quic-go to v0.20.1 (#4075)
  * httpcaddyfile: Fix panic in automation policy consolidation (#4104)
  * caddyfile: Normalize line endings before comparing fmt result (#4103)
  * ci: accommodate go1.16 changes to go mod (#4102)
  * Minor tweaks
  * go.mod: Use latest CertMagic
  * Use 600 instead of 644 for UUID file
  * Change os to ioutil for now
  * reverseproxy: Set cookie path to `/` when using cookie lb_policy (#4096)
  * caddy: Add InstanceID() method
  * encode,staticfiles: Content negotiation, precompressed files (#4045)
  * reverseproxy: Implement health_uri, deprecate health_path, supports query (#4050)
  * go.mod: Migrate to golang.org/x/term (#4073)
  * caddyhttp: improve grammar of comment for AllowH2C (#4072)
  * sigtrap_posix: add missing comma to SIGTERM info (#4078)
  * cmd: Use formatted logger for config adapter warnings (#4080)
  * cmd: main: fix minor doc typos (#4082)
  * headers: Fix Caddyfile parsing for `request_header` with matchers (#4085)
  * .gitignore: add IDE files (#4087)
  * fileserver: Add a few more debug lines (#4063)
  * fileserver: Browse listing supports dark mode (#4066)
  * CONTRIBUTING: fix spelling (#4070)
  * httpcaddyfile: Add `error` directive for the existing handler (#4034)
  * logging: add replace filter for static value replacement (#4029)
  * caddyconfig: add global option for configuring loggers (#4028)
  * map: Accept regex substitution in outputs (#3991)
  * reverseproxy: Fix upstreams with placeholders with no port (#4046)
  * rewrite: Implement regex path replacements
  * fileserver: Don't replace in request paths (fix #4027)
  * caddypki: Add SignWithRoot option for ACME server
  * reverseproxy: Fix round robin data race (#4038)
  * Update docs; commit setcap.sh
  * go.mod: Latest CertMagic (updated libdns conventions)
  * core: Initialize logging before admin
  * caddytls: Remove old asset migration code (close #3894)
  * reverseproxy: Add duration/latency placeholders (close #4012) (#4013)
  * httpcaddyfile: Fix catch-all site block sorting
  * ci: Build and test on Go 1.16, bump minimum to 1.15 (#4024)
  * caddy: Support SetReadBuffer and SyscallConn for QUIC (fix #3998)
  * Improve security warnings
  * httpcaddyfile: Configure other apps from global options (#3990)
  * cmd: Clean up `build-info` and `upgrade` output
  * caddyhttp: Support placeholders in header matcher values (close #3916)
  * caddytls: Save email with account if not already specified
  * reverseproxy: Response buffering &amp; configurable buffer size
  * httpcaddyfile: Fix automation policies
  * ci: deflake integration tests (#3966)
  * httpcaddyfile: Add resolvers subdir of tls (close #4008)
  * acmeserver: Support custom CAs from Caddyfile
  * caddyhttp: Check for invalid subdirectives of static_response
  * httpcaddyfile: Fix default issuers when email provided
  * cmd: Add --force flag to reload command (close #4005)
  * httpcaddyfile: Warn if site address uses unspecified IP (close #4004)
  * httpcaddyfile: Sort catch-all site blocks properly (fix #4003)
  * ci: update the command to run tests on the s390x machine (#3995)
  * caddyhttp: Fix redir html status code, improve flow (#3987)
  * caddyhttp: Implement handler abort; new 'abort' directive (close #3871) (#3983)
  * admin: Identity management, remote admin, config loaders (#3994)
  * caddycmd: Add upgrade command (#3972)
  * Revert "requestbody: Allow overwriting remote address"
  * caddytest: Update Caddyfile tests for formatting, HTTP-only blocks
  * httpcaddyfile: Skip TLS APs for HTTP-only hosts (fix #3977)
  * cmd: Print more detailed version with --environ
  * map: Add missing json struct tag
  * tests: use actual admin port value in error message (#3973)
  * cmd: Implement sd_notify() to notify systemd about readiness (#3963)
  * templates: Add fileExists and httpError template actions
  * requestbody: Allow overwriting remote address
  * rewrite: Use RawPath instead of Path (fix #3596) (#3918)
  * Update docs
  * caddytls: Configurable OCSP stapling; global option (closes #3714)
  * logging: Remove logfmt encoder (close #3575)
  * httpcaddyfile: Support repeated use of cert_issuer global option
  * caddytls: add 'key_type' subdirective (#3956)
  * caddyfile: Refactor unmarshaling of module tokens
  * go.mod: Update CertMagic and acmez (improved IDN support)
  * reverseproxy: Caddyfile health check headers, host header support (#3948)
  * httpcaddyfile: Adjust iterator when removing AP (fix #3953)
  * cmd: Organize list-modules output; --packages flag (#3925)
  * caddyfile: Introduce basic linting and fmt check (#3923)</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1629892800">- Added hardening to systemd service(s). Modified:
  * caddy.service</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1630584000">- Update to version 2.4.4:
  * acmeserver: Don't set host for directory links by default
  * acmeserver: Trim slashes from path prefix
  * admin: Implement load_interval to pull config on a timer
  * admin: Replace admin cert cache when reloading
  * admin: Sync server variables
  * caddyfile: Better error message for missing site block braces
  * caddyfile: Error on invalid site addresses containing comma
  * caddyfile: keep error chain info in Dispenser.Errf
  * caddyhttp: Fix edgecase with auto HTTP-&gt;HTTPS logic
  * caddyhttp: Fix incorrect determination of gRPC protocol
  * caddyhttp: Refactor and export SanitizedPathJoin for use in fastcgi
  * caddyhttp: Updated the documentation for MatchQuery
  * caddytls: Add Caddyfile support for propagation_timeout
  * caddytls: Remove "IssuerRaw" field
  * cmd: Fix paths when using an env file
  * cmd: New add-package and remove-package commands
  * cmd: use net.ErrClosed for matching returned error
  * core: Unix ns and Unix ms time placeholders
  * encode: Tweak compression settings
  * fileserver: Add disable_canonical_uris Caddyfile subdirective
  * fileserver: Clarify docs about canonicalization
  * fileserver: Don't persist parsed template
  * fileserver: Fix browse name_dir_first sorting
  * fileserver: Fix browse not redirecting query parameters
  * fileserver: Only redirect if filename not rewritten
  * fileserver: Redirect within the original URL
  * go.mod: Update dependencies
  * httpcaddyfile: Add preferred_chains global option and issuer subdirective
  * httpcaddyfile: Add shortcut for proxy hostport placeholder
  * httpcaddyfile: Add skip_install_trust global option
  * httpcaddyfile: Don't add HTTP hosts to TLS APs
  * httpcaddyfile: Don't put localhost in public APs
  * httpcaddyfile: Ensure hosts to skip for logs can always be collected
  * httpcaddyfile: Improve unrecognized directive errors
  * httpcaddyfile: Reorder some directives
  * logging: Actually use level_key
  * logging: Add missing interface guards for replace filter
  * logging: Prep for common_log removal
  * logging: Warn for deprecated single_field encoder
  * metrics: use buildinfo collector from new collectors pkg
  * reverseproxy: Adjust test related to #4201
  * reverseproxy: Always remove hop-by-hop headers
  * reverseproxy: Fix overwriting of max_idle_conns_per_host
  * reverseproxy: Incorporate latest proxy changes from stdlib
  * reverseproxy: Keep path to unix socket as dial address
  * reverseproxy: Remove redundant flushing</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1634904000">- Update to version 2.4.5:
  * Hotfix for a regression introduced in 2.4.4 related to
    combining the encode and reverse_proxy directives.
  * cmd: export CaddyVersion(), Commands()
  * encode: ignore flushing until after first write
  * go.mod: Update CertMagic</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1648209600">- Update to version 2.4.6:
  * caddycmd: Add `--keep-backup` to upgrade commands (#4387)
  * caddycmd: Add `--skip-standard` to `list-modules` command, quieter output (#4386)
  * caddycmd: fix caddy validate/fmt help message (#4377)
  * caddyhttp: Add support for triggering errors from `try_files` (#4346)
  * caddyhttp: Placeholder for client cert in DER + base64 format (#4241)
  * caddyhttp: reverseproxy: clarify warning for -insecure (#4379)
  * caddyhttp: Sanitize the path before evaluating path matchers (#4407)
  * caddytls: Mark storage clean timestamp at end of routine (#4401)
  * docs: General minor improvements
  * fastcgi: Fix Caddyfile parsing when `handle_response` is used (#4342)
  * fastcgi: Implement `try_files` override in Caddyfile directive (#4347)
  * fileserver: Fix compression breaks using httpInclude (#4352) (#4358)
  * fileserver: Fix displayed file size if it is symlink (#4354)
  * fileserver: Make file listing links purple once visited (#4356)
  * fileserver: Prevent focusing filter from scrolling on page load (#4393)
  * fileserver: properly handle escaped/non-ascii paths (#4332)
  * headers: Canonicalize case in replace (fix #4330)
  * httpcaddyfile: Empty tls policy for internal http localhost (#4398)
  * httpcaddyfile: Preserve IPv6 addresses through normalization (fix #4381)
  * map: Fix 95c03506 (avoid repeated expansions)
  * map: Fix regex mappings
  * reverseproxy: Log error at error level (fix #4360)
  * reverseproxy: Prevent copying the response if a response handler ran (#4388)
  * reverseproxy: Sanitize scheme and host on incoming requests (#4237)
  * templates: Add 'import' action (#4321)
  * templates: Add tests for funcInclude and funcImport (#4357)
  * templates: Propagate httpError to HTTP response</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1653307200">- Update to version 2.5.1:
  * Fixed regression in Unix socket admin endpoints.
  * Fixed regression in caddy trust commands.
  * Hash-based load balancing policies (ip_hash, uri_hash, header, and cookie)
    use an improved highest-random-weight (HRW) algorithm for increased
    consistency.
  * Dynamic upstreams, which is the ability to get the list of upstreams at
    every request (more specifically, every iteration in the proxy loop of
    every request) rather than just once at config-load time.
  * Caddy will automatically try to get relevant certificates from the local
    Tailscale instance.
  * New OpenTelemetry integration.
  * Added new endpoints /pki/ca/&lt;id&gt; and /pki/ca/&lt;id&gt;/certificates for
    getting information about Caddy's managed CAs.
  * Rename _caddy to zsh-completion
  * Fix MatchPath sanitizing [bsc#1200279, CVE-2022-29718]</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1657886400">- Update to version 2.5.2:
  * admin: expect quoted ETags (#4879)
  * headers: Only replace known placeholders (#4880)
  * reverseproxy: Err 503 if all upstreams unavailable
  * reverseproxy: Adjust new TLS Caddyfile directive names (#4872)
  * fileserver: Use safe redirects in file browser
  * admin: support ETag on config endpoints (#4579)
  * go.mod: Bump up quic-go to v0.28.0, fixes for BC breaks (#4867)
  * caddytls: Reuse issuer between PreCheck and Issue (#4866)
  * admin: Implement /adapt endpoint (close #4465) (#4846)
  * forwardauth: Fix case when `copy_headers` is omitted (#4856)
  * Expose several Caddy HTTP Matchers to the CEL Matcher (#4715)
  * reverseproxy: Fix double headers in response handlers (#4847)
  * reverseproxy: Fix panic when TLS is not configured (#4848)
  * reverseproxy: Skip TLS for certain configured ports (#4843)
  * go.mod: Update some dependencies
  * forwardauth: Support renaming copied headers, block support (#4783)
  * Add comment about xcaddy to main
  * headers: Support wildcards for delete ops (close #4830) (#4831)
  * reverseproxy: Dynamic ServerName for TLS upstreams (#4836)
  * reverseproxy: Make TLS renegotiation optional
  * reverseproxy: Add renegotiation param in TLS client (#4784)
  * caddyhttp: Log error from CEL evaluation (fix #4832)
  * reverseproxy: Correct the `tls_server_name` docs (#4827)
  * reverseproxy: HTTP 504 for upstream timeouts (#4824)
  * caddytls: Make peer certificate verification pluggable (#4389)
  * reverseproxy: api: Remove misleading 'healthy' value
  * go.mod: Update go-yaml to v3
  * Fix #4822 and fix #4779
  * reverseproxy: Add --internal-certs CLI flag #3589 (#4817)
  * ci: Fix build caching on Windows (#4811)
  * templates: Add `humanize` function (#4767)
  * core: Micro-optim in run() (#4810)
  * go.mod: Upgrade some dependencies
  * httpcaddyfile: Add `{err.*}` placeholder shortcut (#4798)
  * templates: Documentation consistency (#4796)
  * chore: Bump quic-go to v0.27.0 (#4782)
  * reverseproxy: Support http1.1&gt;h2c (close #4777) (#4778)
  * rewrite: Handle fragment before query (fix #4775) [bsc#1201822, CVE-2022-34037]
  * httpcaddyfile: Support multiple values for `default_bind` (#4774)</changelog>
</package>
<package pkgid="416235f61e96725a52ebb41a8bdf5ff166cba348c7b1bd3ec84aa9d1b2b2ad7d" name="caddy" arch="ppc64le">
  <version epoch="0" ver="2.5.2" rel="bp154.2.8.1"/>
  <changelog author="Alexandre Vicenzi &lt;alexandre.vicenzi@suse.com&gt;" date="1619611200">- Create Caddy package</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1621857600">- Update to version 2.4.1:
  * logging: Implement dial timeout for net writer (fix #4083) (#4172)
  * admin: Reinstate internal redirect for /id/ requests
  * caddyfile: Add parse error on site address with trailing `{` (#4163)
  * reverseproxy: Set the headers in the replacer before `handle_response` (#4165)
  * ci: Run CI on PRs targeting minor version branches (#4164)
  * cmd: upgrade: inherit the permissions of the original executable (#4160)
  * httpcaddyfile: Fix automation policy consolidation again (fix #4161)
  * caddyfile: Fix `caddy fmt` nesting not decrementing (#4157)
  * encode: Drop `prefer` from Caddyfile (#4156)
  * encode: Default to order the formats are enabled for `prefer` in Caddyfile (#4151)
  * caddytls: Run replacer on ask URL, for env vars (#4154)
  * httpcaddyfile: Add `grace_period` global option (#4152)
  * caddyhttp: Fix fallback for the error handler chain (#4131)
  * reverseproxy: Minor logging improvements
  * fileserver: Fix `file` matcher with empty `try_files` (#4147)
  * go.mod: CertMagic v0.13.1
  * reverseproxy: Add `handle_response` blocks to `reverse_proxy` (#3710) (#4021)
  * cmd: Add --envfile flag to `start` command (#4141)
  * httpcaddyfile: Add `auto_https ignore_loaded_certs` (#4077)
  * httpcaddyfile: Add global option for `storage_clean_interval` (#4134)
  * caddyhttp: performance improvement in HeaderRE Matcher (#4143)
  * fileserver: Share template logic for both `templates` and `file_server browse` (#4093)
  * caddytls: Implement remote IP connection matcher (#4123)
  * httpcaddyfile: Fix unexpectedly removed policy (#4128)
  * reverseproxy: fix hash selection policy (#4137)
  * fileserver: Better handling of HTTP status override (#4132)
  * caddyfile: Fix `import` replacing unrelated placeholders (#4129)
  * caddytls: Add `load_storage` module (#4055)
  * reverseproxy: Admin endpoint for reporting upstream statuses (#4125)
  * caddyhttp: Implement better logic for inserting the HTTP-&gt;HTTPS redirs (#4033)
  * httpcaddyfile: Take into account host scheme/port (fix #4113)
  * fuzz: fix the FuzzFormat comparison (#4117)
  * caddytls: Disable OCSP stapling for manual certs (#4064)
  * caddytls: Configurable storage clean interval
  * caddyfile: reject cyclic imports (#4022)
  * ci: fuzz: add 4 more fuzzing targets (#4105)
  * fileserver: Add status code override (#4076)
  * notify: Send all sd_notify signals from main caddy process (#4060)
  * go.mod: Update quic-go to v0.20.1 (#4075)
  * httpcaddyfile: Fix panic in automation policy consolidation (#4104)
  * caddyfile: Normalize line endings before comparing fmt result (#4103)
  * ci: accommodate go1.16 changes to go mod (#4102)
  * Minor tweaks
  * go.mod: Use latest CertMagic
  * Use 600 instead of 644 for UUID file
  * Change os to ioutil for now
  * reverseproxy: Set cookie path to `/` when using cookie lb_policy (#4096)
  * caddy: Add InstanceID() method
  * encode,staticfiles: Content negotiation, precompressed files (#4045)
  * reverseproxy: Implement health_uri, deprecate health_path, supports query (#4050)
  * go.mod: Migrate to golang.org/x/term (#4073)
  * caddyhttp: improve grammar of comment for AllowH2C (#4072)
  * sigtrap_posix: add missing comma to SIGTERM info (#4078)
  * cmd: Use formatted logger for config adapter warnings (#4080)
  * cmd: main: fix minor doc typos (#4082)
  * headers: Fix Caddyfile parsing for `request_header` with matchers (#4085)
  * .gitignore: add IDE files (#4087)
  * fileserver: Add a few more debug lines (#4063)
  * fileserver: Browse listing supports dark mode (#4066)
  * CONTRIBUTING: fix spelling (#4070)
  * httpcaddyfile: Add `error` directive for the existing handler (#4034)
  * logging: add replace filter for static value replacement (#4029)
  * caddyconfig: add global option for configuring loggers (#4028)
  * map: Accept regex substitution in outputs (#3991)
  * reverseproxy: Fix upstreams with placeholders with no port (#4046)
  * rewrite: Implement regex path replacements
  * fileserver: Don't replace in request paths (fix #4027)
  * caddypki: Add SignWithRoot option for ACME server
  * reverseproxy: Fix round robin data race (#4038)
  * Update docs; commit setcap.sh
  * go.mod: Latest CertMagic (updated libdns conventions)
  * core: Initialize logging before admin
  * caddytls: Remove old asset migration code (close #3894)
  * reverseproxy: Add duration/latency placeholders (close #4012) (#4013)
  * httpcaddyfile: Fix catch-all site block sorting
  * ci: Build and test on Go 1.16, bump minimum to 1.15 (#4024)
  * caddy: Support SetReadBuffer and SyscallConn for QUIC (fix #3998)
  * Improve security warnings
  * httpcaddyfile: Configure other apps from global options (#3990)
  * cmd: Clean up `build-info` and `upgrade` output
  * caddyhttp: Support placeholders in header matcher values (close #3916)
  * caddytls: Save email with account if not already specified
  * reverseproxy: Response buffering &amp; configurable buffer size
  * httpcaddyfile: Fix automation policies
  * ci: deflake integration tests (#3966)
  * httpcaddyfile: Add resolvers subdir of tls (close #4008)
  * acmeserver: Support custom CAs from Caddyfile
  * caddyhttp: Check for invalid subdirectives of static_response
  * httpcaddyfile: Fix default issuers when email provided
  * cmd: Add --force flag to reload command (close #4005)
  * httpcaddyfile: Warn if site address uses unspecified IP (close #4004)
  * httpcaddyfile: Sort catch-all site blocks properly (fix #4003)
  * ci: update the command to run tests on the s390x machine (#3995)
  * caddyhttp: Fix redir html status code, improve flow (#3987)
  * caddyhttp: Implement handler abort; new 'abort' directive (close #3871) (#3983)
  * admin: Identity management, remote admin, config loaders (#3994)
  * caddycmd: Add upgrade command (#3972)
  * Revert "requestbody: Allow overwriting remote address"
  * caddytest: Update Caddyfile tests for formatting, HTTP-only blocks
  * httpcaddyfile: Skip TLS APs for HTTP-only hosts (fix #3977)
  * cmd: Print more detailed version with --environ
  * map: Add missing json struct tag
  * tests: use actual admin port value in error message (#3973)
  * cmd: Implement sd_notify() to notify systemd about readiness (#3963)
  * templates: Add fileExists and httpError template actions
  * requestbody: Allow overwriting remote address
  * rewrite: Use RawPath instead of Path (fix #3596) (#3918)
  * Update docs
  * caddytls: Configurable OCSP stapling; global option (closes #3714)
  * logging: Remove logfmt encoder (close #3575)
  * httpcaddyfile: Support repeated use of cert_issuer global option
  * caddytls: add 'key_type' subdirective (#3956)
  * caddyfile: Refactor unmarshaling of module tokens
  * go.mod: Update CertMagic and acmez (improved IDN support)
  * reverseproxy: Caddyfile health check headers, host header support (#3948)
  * httpcaddyfile: Adjust iterator when removing AP (fix #3953)
  * cmd: Organize list-modules output; --packages flag (#3925)
  * caddyfile: Introduce basic linting and fmt check (#3923)</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1629892800">- Added hardening to systemd service(s). Modified:
  * caddy.service</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1630584000">- Update to version 2.4.4:
  * acmeserver: Don't set host for directory links by default
  * acmeserver: Trim slashes from path prefix
  * admin: Implement load_interval to pull config on a timer
  * admin: Replace admin cert cache when reloading
  * admin: Sync server variables
  * caddyfile: Better error message for missing site block braces
  * caddyfile: Error on invalid site addresses containing comma
  * caddyfile: keep error chain info in Dispenser.Errf
  * caddyhttp: Fix edgecase with auto HTTP-&gt;HTTPS logic
  * caddyhttp: Fix incorrect determination of gRPC protocol
  * caddyhttp: Refactor and export SanitizedPathJoin for use in fastcgi
  * caddyhttp: Updated the documentation for MatchQuery
  * caddytls: Add Caddyfile support for propagation_timeout
  * caddytls: Remove "IssuerRaw" field
  * cmd: Fix paths when using an env file
  * cmd: New add-package and remove-package commands
  * cmd: use net.ErrClosed for matching returned error
  * core: Unix ns and Unix ms time placeholders
  * encode: Tweak compression settings
  * fileserver: Add disable_canonical_uris Caddyfile subdirective
  * fileserver: Clarify docs about canonicalization
  * fileserver: Don't persist parsed template
  * fileserver: Fix browse name_dir_first sorting
  * fileserver: Fix browse not redirecting query parameters
  * fileserver: Only redirect if filename not rewritten
  * fileserver: Redirect within the original URL
  * go.mod: Update dependencies
  * httpcaddyfile: Add preferred_chains global option and issuer subdirective
  * httpcaddyfile: Add shortcut for proxy hostport placeholder
  * httpcaddyfile: Add skip_install_trust global option
  * httpcaddyfile: Don't add HTTP hosts to TLS APs
  * httpcaddyfile: Don't put localhost in public APs
  * httpcaddyfile: Ensure hosts to skip for logs can always be collected
  * httpcaddyfile: Improve unrecognized directive errors
  * httpcaddyfile: Reorder some directives
  * logging: Actually use level_key
  * logging: Add missing interface guards for replace filter
  * logging: Prep for common_log removal
  * logging: Warn for deprecated single_field encoder
  * metrics: use buildinfo collector from new collectors pkg
  * reverseproxy: Adjust test related to #4201
  * reverseproxy: Always remove hop-by-hop headers
  * reverseproxy: Fix overwriting of max_idle_conns_per_host
  * reverseproxy: Incorporate latest proxy changes from stdlib
  * reverseproxy: Keep path to unix socket as dial address
  * reverseproxy: Remove redundant flushing</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1634904000">- Update to version 2.4.5:
  * Hotfix for a regression introduced in 2.4.4 related to
    combining the encode and reverse_proxy directives.
  * cmd: export CaddyVersion(), Commands()
  * encode: ignore flushing until after first write
  * go.mod: Update CertMagic</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1648209600">- Update to version 2.4.6:
  * caddycmd: Add `--keep-backup` to upgrade commands (#4387)
  * caddycmd: Add `--skip-standard` to `list-modules` command, quieter output (#4386)
  * caddycmd: fix caddy validate/fmt help message (#4377)
  * caddyhttp: Add support for triggering errors from `try_files` (#4346)
  * caddyhttp: Placeholder for client cert in DER + base64 format (#4241)
  * caddyhttp: reverseproxy: clarify warning for -insecure (#4379)
  * caddyhttp: Sanitize the path before evaluating path matchers (#4407)
  * caddytls: Mark storage clean timestamp at end of routine (#4401)
  * docs: General minor improvements
  * fastcgi: Fix Caddyfile parsing when `handle_response` is used (#4342)
  * fastcgi: Implement `try_files` override in Caddyfile directive (#4347)
  * fileserver: Fix compression breaks using httpInclude (#4352) (#4358)
  * fileserver: Fix displayed file size if it is symlink (#4354)
  * fileserver: Make file listing links purple once visited (#4356)
  * fileserver: Prevent focusing filter from scrolling on page load (#4393)
  * fileserver: properly handle escaped/non-ascii paths (#4332)
  * headers: Canonicalize case in replace (fix #4330)
  * httpcaddyfile: Empty tls policy for internal http localhost (#4398)
  * httpcaddyfile: Preserve IPv6 addresses through normalization (fix #4381)
  * map: Fix 95c03506 (avoid repeated expansions)
  * map: Fix regex mappings
  * reverseproxy: Log error at error level (fix #4360)
  * reverseproxy: Prevent copying the response if a response handler ran (#4388)
  * reverseproxy: Sanitize scheme and host on incoming requests (#4237)
  * templates: Add 'import' action (#4321)
  * templates: Add tests for funcInclude and funcImport (#4357)
  * templates: Propagate httpError to HTTP response</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1653307200">- Update to version 2.5.1:
  * Fixed regression in Unix socket admin endpoints.
  * Fixed regression in caddy trust commands.
  * Hash-based load balancing policies (ip_hash, uri_hash, header, and cookie)
    use an improved highest-random-weight (HRW) algorithm for increased
    consistency.
  * Dynamic upstreams, which is the ability to get the list of upstreams at
    every request (more specifically, every iteration in the proxy loop of
    every request) rather than just once at config-load time.
  * Caddy will automatically try to get relevant certificates from the local
    Tailscale instance.
  * New OpenTelemetry integration.
  * Added new endpoints /pki/ca/&lt;id&gt; and /pki/ca/&lt;id&gt;/certificates for
    getting information about Caddy's managed CAs.
  * Rename _caddy to zsh-completion
  * Fix MatchPath sanitizing [bsc#1200279, CVE-2022-29718]</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1657886400">- Update to version 2.5.2:
  * admin: expect quoted ETags (#4879)
  * headers: Only replace known placeholders (#4880)
  * reverseproxy: Err 503 if all upstreams unavailable
  * reverseproxy: Adjust new TLS Caddyfile directive names (#4872)
  * fileserver: Use safe redirects in file browser
  * admin: support ETag on config endpoints (#4579)
  * go.mod: Bump up quic-go to v0.28.0, fixes for BC breaks (#4867)
  * caddytls: Reuse issuer between PreCheck and Issue (#4866)
  * admin: Implement /adapt endpoint (close #4465) (#4846)
  * forwardauth: Fix case when `copy_headers` is omitted (#4856)
  * Expose several Caddy HTTP Matchers to the CEL Matcher (#4715)
  * reverseproxy: Fix double headers in response handlers (#4847)
  * reverseproxy: Fix panic when TLS is not configured (#4848)
  * reverseproxy: Skip TLS for certain configured ports (#4843)
  * go.mod: Update some dependencies
  * forwardauth: Support renaming copied headers, block support (#4783)
  * Add comment about xcaddy to main
  * headers: Support wildcards for delete ops (close #4830) (#4831)
  * reverseproxy: Dynamic ServerName for TLS upstreams (#4836)
  * reverseproxy: Make TLS renegotiation optional
  * reverseproxy: Add renegotiation param in TLS client (#4784)
  * caddyhttp: Log error from CEL evaluation (fix #4832)
  * reverseproxy: Correct the `tls_server_name` docs (#4827)
  * reverseproxy: HTTP 504 for upstream timeouts (#4824)
  * caddytls: Make peer certificate verification pluggable (#4389)
  * reverseproxy: api: Remove misleading 'healthy' value
  * go.mod: Update go-yaml to v3
  * Fix #4822 and fix #4779
  * reverseproxy: Add --internal-certs CLI flag #3589 (#4817)
  * ci: Fix build caching on Windows (#4811)
  * templates: Add `humanize` function (#4767)
  * core: Micro-optim in run() (#4810)
  * go.mod: Upgrade some dependencies
  * httpcaddyfile: Add `{err.*}` placeholder shortcut (#4798)
  * templates: Documentation consistency (#4796)
  * chore: Bump quic-go to v0.27.0 (#4782)
  * reverseproxy: Support http1.1&gt;h2c (close #4777) (#4778)
  * rewrite: Handle fragment before query (fix #4775) [bsc#1201822, CVE-2022-34037]
  * httpcaddyfile: Support multiple values for `default_bind` (#4774)</changelog>
</package>
<package pkgid="5bb36d4de32c73f817c9f5b3c176efe00df5ff0ad2454341078b39186a01cc11" name="caddy" arch="s390x">
  <version epoch="0" ver="2.5.2" rel="bp154.2.8.1"/>
  <changelog author="Alexandre Vicenzi &lt;alexandre.vicenzi@suse.com&gt;" date="1619611200">- Create Caddy package</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1621857600">- Update to version 2.4.1:
  * logging: Implement dial timeout for net writer (fix #4083) (#4172)
  * admin: Reinstate internal redirect for /id/ requests
  * caddyfile: Add parse error on site address with trailing `{` (#4163)
  * reverseproxy: Set the headers in the replacer before `handle_response` (#4165)
  * ci: Run CI on PRs targeting minor version branches (#4164)
  * cmd: upgrade: inherit the permissions of the original executable (#4160)
  * httpcaddyfile: Fix automation policy consolidation again (fix #4161)
  * caddyfile: Fix `caddy fmt` nesting not decrementing (#4157)
  * encode: Drop `prefer` from Caddyfile (#4156)
  * encode: Default to order the formats are enabled for `prefer` in Caddyfile (#4151)
  * caddytls: Run replacer on ask URL, for env vars (#4154)
  * httpcaddyfile: Add `grace_period` global option (#4152)
  * caddyhttp: Fix fallback for the error handler chain (#4131)
  * reverseproxy: Minor logging improvements
  * fileserver: Fix `file` matcher with empty `try_files` (#4147)
  * go.mod: CertMagic v0.13.1
  * reverseproxy: Add `handle_response` blocks to `reverse_proxy` (#3710) (#4021)
  * cmd: Add --envfile flag to `start` command (#4141)
  * httpcaddyfile: Add `auto_https ignore_loaded_certs` (#4077)
  * httpcaddyfile: Add global option for `storage_clean_interval` (#4134)
  * caddyhttp: performance improvement in HeaderRE Matcher (#4143)
  * fileserver: Share template logic for both `templates` and `file_server browse` (#4093)
  * caddytls: Implement remote IP connection matcher (#4123)
  * httpcaddyfile: Fix unexpectedly removed policy (#4128)
  * reverseproxy: fix hash selection policy (#4137)
  * fileserver: Better handling of HTTP status override (#4132)
  * caddyfile: Fix `import` replacing unrelated placeholders (#4129)
  * caddytls: Add `load_storage` module (#4055)
  * reverseproxy: Admin endpoint for reporting upstream statuses (#4125)
  * caddyhttp: Implement better logic for inserting the HTTP-&gt;HTTPS redirs (#4033)
  * httpcaddyfile: Take into account host scheme/port (fix #4113)
  * fuzz: fix the FuzzFormat comparison (#4117)
  * caddytls: Disable OCSP stapling for manual certs (#4064)
  * caddytls: Configurable storage clean interval
  * caddyfile: reject cyclic imports (#4022)
  * ci: fuzz: add 4 more fuzzing targets (#4105)
  * fileserver: Add status code override (#4076)
  * notify: Send all sd_notify signals from main caddy process (#4060)
  * go.mod: Update quic-go to v0.20.1 (#4075)
  * httpcaddyfile: Fix panic in automation policy consolidation (#4104)
  * caddyfile: Normalize line endings before comparing fmt result (#4103)
  * ci: accommodate go1.16 changes to go mod (#4102)
  * Minor tweaks
  * go.mod: Use latest CertMagic
  * Use 600 instead of 644 for UUID file
  * Change os to ioutil for now
  * reverseproxy: Set cookie path to `/` when using cookie lb_policy (#4096)
  * caddy: Add InstanceID() method
  * encode,staticfiles: Content negotiation, precompressed files (#4045)
  * reverseproxy: Implement health_uri, deprecate health_path, supports query (#4050)
  * go.mod: Migrate to golang.org/x/term (#4073)
  * caddyhttp: improve grammar of comment for AllowH2C (#4072)
  * sigtrap_posix: add missing comma to SIGTERM info (#4078)
  * cmd: Use formatted logger for config adapter warnings (#4080)
  * cmd: main: fix minor doc typos (#4082)
  * headers: Fix Caddyfile parsing for `request_header` with matchers (#4085)
  * .gitignore: add IDE files (#4087)
  * fileserver: Add a few more debug lines (#4063)
  * fileserver: Browse listing supports dark mode (#4066)
  * CONTRIBUTING: fix spelling (#4070)
  * httpcaddyfile: Add `error` directive for the existing handler (#4034)
  * logging: add replace filter for static value replacement (#4029)
  * caddyconfig: add global option for configuring loggers (#4028)
  * map: Accept regex substitution in outputs (#3991)
  * reverseproxy: Fix upstreams with placeholders with no port (#4046)
  * rewrite: Implement regex path replacements
  * fileserver: Don't replace in request paths (fix #4027)
  * caddypki: Add SignWithRoot option for ACME server
  * reverseproxy: Fix round robin data race (#4038)
  * Update docs; commit setcap.sh
  * go.mod: Latest CertMagic (updated libdns conventions)
  * core: Initialize logging before admin
  * caddytls: Remove old asset migration code (close #3894)
  * reverseproxy: Add duration/latency placeholders (close #4012) (#4013)
  * httpcaddyfile: Fix catch-all site block sorting
  * ci: Build and test on Go 1.16, bump minimum to 1.15 (#4024)
  * caddy: Support SetReadBuffer and SyscallConn for QUIC (fix #3998)
  * Improve security warnings
  * httpcaddyfile: Configure other apps from global options (#3990)
  * cmd: Clean up `build-info` and `upgrade` output
  * caddyhttp: Support placeholders in header matcher values (close #3916)
  * caddytls: Save email with account if not already specified
  * reverseproxy: Response buffering &amp; configurable buffer size
  * httpcaddyfile: Fix automation policies
  * ci: deflake integration tests (#3966)
  * httpcaddyfile: Add resolvers subdir of tls (close #4008)
  * acmeserver: Support custom CAs from Caddyfile
  * caddyhttp: Check for invalid subdirectives of static_response
  * httpcaddyfile: Fix default issuers when email provided
  * cmd: Add --force flag to reload command (close #4005)
  * httpcaddyfile: Warn if site address uses unspecified IP (close #4004)
  * httpcaddyfile: Sort catch-all site blocks properly (fix #4003)
  * ci: update the command to run tests on the s390x machine (#3995)
  * caddyhttp: Fix redir html status code, improve flow (#3987)
  * caddyhttp: Implement handler abort; new 'abort' directive (close #3871) (#3983)
  * admin: Identity management, remote admin, config loaders (#3994)
  * caddycmd: Add upgrade command (#3972)
  * Revert "requestbody: Allow overwriting remote address"
  * caddytest: Update Caddyfile tests for formatting, HTTP-only blocks
  * httpcaddyfile: Skip TLS APs for HTTP-only hosts (fix #3977)
  * cmd: Print more detailed version with --environ
  * map: Add missing json struct tag
  * tests: use actual admin port value in error message (#3973)
  * cmd: Implement sd_notify() to notify systemd about readiness (#3963)
  * templates: Add fileExists and httpError template actions
  * requestbody: Allow overwriting remote address
  * rewrite: Use RawPath instead of Path (fix #3596) (#3918)
  * Update docs
  * caddytls: Configurable OCSP stapling; global option (closes #3714)
  * logging: Remove logfmt encoder (close #3575)
  * httpcaddyfile: Support repeated use of cert_issuer global option
  * caddytls: add 'key_type' subdirective (#3956)
  * caddyfile: Refactor unmarshaling of module tokens
  * go.mod: Update CertMagic and acmez (improved IDN support)
  * reverseproxy: Caddyfile health check headers, host header support (#3948)
  * httpcaddyfile: Adjust iterator when removing AP (fix #3953)
  * cmd: Organize list-modules output; --packages flag (#3925)
  * caddyfile: Introduce basic linting and fmt check (#3923)</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1629892800">- Added hardening to systemd service(s). Modified:
  * caddy.service</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1630584000">- Update to version 2.4.4:
  * acmeserver: Don't set host for directory links by default
  * acmeserver: Trim slashes from path prefix
  * admin: Implement load_interval to pull config on a timer
  * admin: Replace admin cert cache when reloading
  * admin: Sync server variables
  * caddyfile: Better error message for missing site block braces
  * caddyfile: Error on invalid site addresses containing comma
  * caddyfile: keep error chain info in Dispenser.Errf
  * caddyhttp: Fix edgecase with auto HTTP-&gt;HTTPS logic
  * caddyhttp: Fix incorrect determination of gRPC protocol
  * caddyhttp: Refactor and export SanitizedPathJoin for use in fastcgi
  * caddyhttp: Updated the documentation for MatchQuery
  * caddytls: Add Caddyfile support for propagation_timeout
  * caddytls: Remove "IssuerRaw" field
  * cmd: Fix paths when using an env file
  * cmd: New add-package and remove-package commands
  * cmd: use net.ErrClosed for matching returned error
  * core: Unix ns and Unix ms time placeholders
  * encode: Tweak compression settings
  * fileserver: Add disable_canonical_uris Caddyfile subdirective
  * fileserver: Clarify docs about canonicalization
  * fileserver: Don't persist parsed template
  * fileserver: Fix browse name_dir_first sorting
  * fileserver: Fix browse not redirecting query parameters
  * fileserver: Only redirect if filename not rewritten
  * fileserver: Redirect within the original URL
  * go.mod: Update dependencies
  * httpcaddyfile: Add preferred_chains global option and issuer subdirective
  * httpcaddyfile: Add shortcut for proxy hostport placeholder
  * httpcaddyfile: Add skip_install_trust global option
  * httpcaddyfile: Don't add HTTP hosts to TLS APs
  * httpcaddyfile: Don't put localhost in public APs
  * httpcaddyfile: Ensure hosts to skip for logs can always be collected
  * httpcaddyfile: Improve unrecognized directive errors
  * httpcaddyfile: Reorder some directives
  * logging: Actually use level_key
  * logging: Add missing interface guards for replace filter
  * logging: Prep for common_log removal
  * logging: Warn for deprecated single_field encoder
  * metrics: use buildinfo collector from new collectors pkg
  * reverseproxy: Adjust test related to #4201
  * reverseproxy: Always remove hop-by-hop headers
  * reverseproxy: Fix overwriting of max_idle_conns_per_host
  * reverseproxy: Incorporate latest proxy changes from stdlib
  * reverseproxy: Keep path to unix socket as dial address
  * reverseproxy: Remove redundant flushing</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1634904000">- Update to version 2.4.5:
  * Hotfix for a regression introduced in 2.4.4 related to
    combining the encode and reverse_proxy directives.
  * cmd: export CaddyVersion(), Commands()
  * encode: ignore flushing until after first write
  * go.mod: Update CertMagic</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1648209600">- Update to version 2.4.6:
  * caddycmd: Add `--keep-backup` to upgrade commands (#4387)
  * caddycmd: Add `--skip-standard` to `list-modules` command, quieter output (#4386)
  * caddycmd: fix caddy validate/fmt help message (#4377)
  * caddyhttp: Add support for triggering errors from `try_files` (#4346)
  * caddyhttp: Placeholder for client cert in DER + base64 format (#4241)
  * caddyhttp: reverseproxy: clarify warning for -insecure (#4379)
  * caddyhttp: Sanitize the path before evaluating path matchers (#4407)
  * caddytls: Mark storage clean timestamp at end of routine (#4401)
  * docs: General minor improvements
  * fastcgi: Fix Caddyfile parsing when `handle_response` is used (#4342)
  * fastcgi: Implement `try_files` override in Caddyfile directive (#4347)
  * fileserver: Fix compression breaks using httpInclude (#4352) (#4358)
  * fileserver: Fix displayed file size if it is symlink (#4354)
  * fileserver: Make file listing links purple once visited (#4356)
  * fileserver: Prevent focusing filter from scrolling on page load (#4393)
  * fileserver: properly handle escaped/non-ascii paths (#4332)
  * headers: Canonicalize case in replace (fix #4330)
  * httpcaddyfile: Empty tls policy for internal http localhost (#4398)
  * httpcaddyfile: Preserve IPv6 addresses through normalization (fix #4381)
  * map: Fix 95c03506 (avoid repeated expansions)
  * map: Fix regex mappings
  * reverseproxy: Log error at error level (fix #4360)
  * reverseproxy: Prevent copying the response if a response handler ran (#4388)
  * reverseproxy: Sanitize scheme and host on incoming requests (#4237)
  * templates: Add 'import' action (#4321)
  * templates: Add tests for funcInclude and funcImport (#4357)
  * templates: Propagate httpError to HTTP response</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1653307200">- Update to version 2.5.1:
  * Fixed regression in Unix socket admin endpoints.
  * Fixed regression in caddy trust commands.
  * Hash-based load balancing policies (ip_hash, uri_hash, header, and cookie)
    use an improved highest-random-weight (HRW) algorithm for increased
    consistency.
  * Dynamic upstreams, which is the ability to get the list of upstreams at
    every request (more specifically, every iteration in the proxy loop of
    every request) rather than just once at config-load time.
  * Caddy will automatically try to get relevant certificates from the local
    Tailscale instance.
  * New OpenTelemetry integration.
  * Added new endpoints /pki/ca/&lt;id&gt; and /pki/ca/&lt;id&gt;/certificates for
    getting information about Caddy's managed CAs.
  * Rename _caddy to zsh-completion
  * Fix MatchPath sanitizing [bsc#1200279, CVE-2022-29718]</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1657886400">- Update to version 2.5.2:
  * admin: expect quoted ETags (#4879)
  * headers: Only replace known placeholders (#4880)
  * reverseproxy: Err 503 if all upstreams unavailable
  * reverseproxy: Adjust new TLS Caddyfile directive names (#4872)
  * fileserver: Use safe redirects in file browser
  * admin: support ETag on config endpoints (#4579)
  * go.mod: Bump up quic-go to v0.28.0, fixes for BC breaks (#4867)
  * caddytls: Reuse issuer between PreCheck and Issue (#4866)
  * admin: Implement /adapt endpoint (close #4465) (#4846)
  * forwardauth: Fix case when `copy_headers` is omitted (#4856)
  * Expose several Caddy HTTP Matchers to the CEL Matcher (#4715)
  * reverseproxy: Fix double headers in response handlers (#4847)
  * reverseproxy: Fix panic when TLS is not configured (#4848)
  * reverseproxy: Skip TLS for certain configured ports (#4843)
  * go.mod: Update some dependencies
  * forwardauth: Support renaming copied headers, block support (#4783)
  * Add comment about xcaddy to main
  * headers: Support wildcards for delete ops (close #4830) (#4831)
  * reverseproxy: Dynamic ServerName for TLS upstreams (#4836)
  * reverseproxy: Make TLS renegotiation optional
  * reverseproxy: Add renegotiation param in TLS client (#4784)
  * caddyhttp: Log error from CEL evaluation (fix #4832)
  * reverseproxy: Correct the `tls_server_name` docs (#4827)
  * reverseproxy: HTTP 504 for upstream timeouts (#4824)
  * caddytls: Make peer certificate verification pluggable (#4389)
  * reverseproxy: api: Remove misleading 'healthy' value
  * go.mod: Update go-yaml to v3
  * Fix #4822 and fix #4779
  * reverseproxy: Add --internal-certs CLI flag #3589 (#4817)
  * ci: Fix build caching on Windows (#4811)
  * templates: Add `humanize` function (#4767)
  * core: Micro-optim in run() (#4810)
  * go.mod: Upgrade some dependencies
  * httpcaddyfile: Add `{err.*}` placeholder shortcut (#4798)
  * templates: Documentation consistency (#4796)
  * chore: Bump quic-go to v0.27.0 (#4782)
  * reverseproxy: Support http1.1&gt;h2c (close #4777) (#4778)
  * rewrite: Handle fragment before query (fix #4775) [bsc#1201822, CVE-2022-34037]
  * httpcaddyfile: Support multiple values for `default_bind` (#4774)</changelog>
</package>
<package pkgid="00194a87767662301258457043e2048505d44e57b33ff665df47cf6253259a47" name="caddy" arch="src">
  <version epoch="0" ver="2.5.2" rel="bp154.2.8.1"/>
  <changelog author="Alexandre Vicenzi &lt;alexandre.vicenzi@suse.com&gt;" date="1619611200">- Create Caddy package</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1621857600">- Update to version 2.4.1:
  * logging: Implement dial timeout for net writer (fix #4083) (#4172)
  * admin: Reinstate internal redirect for /id/ requests
  * caddyfile: Add parse error on site address with trailing `{` (#4163)
  * reverseproxy: Set the headers in the replacer before `handle_response` (#4165)
  * ci: Run CI on PRs targeting minor version branches (#4164)
  * cmd: upgrade: inherit the permissions of the original executable (#4160)
  * httpcaddyfile: Fix automation policy consolidation again (fix #4161)
  * caddyfile: Fix `caddy fmt` nesting not decrementing (#4157)
  * encode: Drop `prefer` from Caddyfile (#4156)
  * encode: Default to order the formats are enabled for `prefer` in Caddyfile (#4151)
  * caddytls: Run replacer on ask URL, for env vars (#4154)
  * httpcaddyfile: Add `grace_period` global option (#4152)
  * caddyhttp: Fix fallback for the error handler chain (#4131)
  * reverseproxy: Minor logging improvements
  * fileserver: Fix `file` matcher with empty `try_files` (#4147)
  * go.mod: CertMagic v0.13.1
  * reverseproxy: Add `handle_response` blocks to `reverse_proxy` (#3710) (#4021)
  * cmd: Add --envfile flag to `start` command (#4141)
  * httpcaddyfile: Add `auto_https ignore_loaded_certs` (#4077)
  * httpcaddyfile: Add global option for `storage_clean_interval` (#4134)
  * caddyhttp: performance improvement in HeaderRE Matcher (#4143)
  * fileserver: Share template logic for both `templates` and `file_server browse` (#4093)
  * caddytls: Implement remote IP connection matcher (#4123)
  * httpcaddyfile: Fix unexpectedly removed policy (#4128)
  * reverseproxy: fix hash selection policy (#4137)
  * fileserver: Better handling of HTTP status override (#4132)
  * caddyfile: Fix `import` replacing unrelated placeholders (#4129)
  * caddytls: Add `load_storage` module (#4055)
  * reverseproxy: Admin endpoint for reporting upstream statuses (#4125)
  * caddyhttp: Implement better logic for inserting the HTTP-&gt;HTTPS redirs (#4033)
  * httpcaddyfile: Take into account host scheme/port (fix #4113)
  * fuzz: fix the FuzzFormat comparison (#4117)
  * caddytls: Disable OCSP stapling for manual certs (#4064)
  * caddytls: Configurable storage clean interval
  * caddyfile: reject cyclic imports (#4022)
  * ci: fuzz: add 4 more fuzzing targets (#4105)
  * fileserver: Add status code override (#4076)
  * notify: Send all sd_notify signals from main caddy process (#4060)
  * go.mod: Update quic-go to v0.20.1 (#4075)
  * httpcaddyfile: Fix panic in automation policy consolidation (#4104)
  * caddyfile: Normalize line endings before comparing fmt result (#4103)
  * ci: accommodate go1.16 changes to go mod (#4102)
  * Minor tweaks
  * go.mod: Use latest CertMagic
  * Use 600 instead of 644 for UUID file
  * Change os to ioutil for now
  * reverseproxy: Set cookie path to `/` when using cookie lb_policy (#4096)
  * caddy: Add InstanceID() method
  * encode,staticfiles: Content negotiation, precompressed files (#4045)
  * reverseproxy: Implement health_uri, deprecate health_path, supports query (#4050)
  * go.mod: Migrate to golang.org/x/term (#4073)
  * caddyhttp: improve grammar of comment for AllowH2C (#4072)
  * sigtrap_posix: add missing comma to SIGTERM info (#4078)
  * cmd: Use formatted logger for config adapter warnings (#4080)
  * cmd: main: fix minor doc typos (#4082)
  * headers: Fix Caddyfile parsing for `request_header` with matchers (#4085)
  * .gitignore: add IDE files (#4087)
  * fileserver: Add a few more debug lines (#4063)
  * fileserver: Browse listing supports dark mode (#4066)
  * CONTRIBUTING: fix spelling (#4070)
  * httpcaddyfile: Add `error` directive for the existing handler (#4034)
  * logging: add replace filter for static value replacement (#4029)
  * caddyconfig: add global option for configuring loggers (#4028)
  * map: Accept regex substitution in outputs (#3991)
  * reverseproxy: Fix upstreams with placeholders with no port (#4046)
  * rewrite: Implement regex path replacements
  * fileserver: Don't replace in request paths (fix #4027)
  * caddypki: Add SignWithRoot option for ACME server
  * reverseproxy: Fix round robin data race (#4038)
  * Update docs; commit setcap.sh
  * go.mod: Latest CertMagic (updated libdns conventions)
  * core: Initialize logging before admin
  * caddytls: Remove old asset migration code (close #3894)
  * reverseproxy: Add duration/latency placeholders (close #4012) (#4013)
  * httpcaddyfile: Fix catch-all site block sorting
  * ci: Build and test on Go 1.16, bump minimum to 1.15 (#4024)
  * caddy: Support SetReadBuffer and SyscallConn for QUIC (fix #3998)
  * Improve security warnings
  * httpcaddyfile: Configure other apps from global options (#3990)
  * cmd: Clean up `build-info` and `upgrade` output
  * caddyhttp: Support placeholders in header matcher values (close #3916)
  * caddytls: Save email with account if not already specified
  * reverseproxy: Response buffering &amp; configurable buffer size
  * httpcaddyfile: Fix automation policies
  * ci: deflake integration tests (#3966)
  * httpcaddyfile: Add resolvers subdir of tls (close #4008)
  * acmeserver: Support custom CAs from Caddyfile
  * caddyhttp: Check for invalid subdirectives of static_response
  * httpcaddyfile: Fix default issuers when email provided
  * cmd: Add --force flag to reload command (close #4005)
  * httpcaddyfile: Warn if site address uses unspecified IP (close #4004)
  * httpcaddyfile: Sort catch-all site blocks properly (fix #4003)
  * ci: update the command to run tests on the s390x machine (#3995)
  * caddyhttp: Fix redir html status code, improve flow (#3987)
  * caddyhttp: Implement handler abort; new 'abort' directive (close #3871) (#3983)
  * admin: Identity management, remote admin, config loaders (#3994)
  * caddycmd: Add upgrade command (#3972)
  * Revert "requestbody: Allow overwriting remote address"
  * caddytest: Update Caddyfile tests for formatting, HTTP-only blocks
  * httpcaddyfile: Skip TLS APs for HTTP-only hosts (fix #3977)
  * cmd: Print more detailed version with --environ
  * map: Add missing json struct tag
  * tests: use actual admin port value in error message (#3973)
  * cmd: Implement sd_notify() to notify systemd about readiness (#3963)
  * templates: Add fileExists and httpError template actions
  * requestbody: Allow overwriting remote address
  * rewrite: Use RawPath instead of Path (fix #3596) (#3918)
  * Update docs
  * caddytls: Configurable OCSP stapling; global option (closes #3714)
  * logging: Remove logfmt encoder (close #3575)
  * httpcaddyfile: Support repeated use of cert_issuer global option
  * caddytls: add 'key_type' subdirective (#3956)
  * caddyfile: Refactor unmarshaling of module tokens
  * go.mod: Update CertMagic and acmez (improved IDN support)
  * reverseproxy: Caddyfile health check headers, host header support (#3948)
  * httpcaddyfile: Adjust iterator when removing AP (fix #3953)
  * cmd: Organize list-modules output; --packages flag (#3925)
  * caddyfile: Introduce basic linting and fmt check (#3923)</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1629892800">- Added hardening to systemd service(s). Modified:
  * caddy.service</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1630584000">- Update to version 2.4.4:
  * acmeserver: Don't set host for directory links by default
  * acmeserver: Trim slashes from path prefix
  * admin: Implement load_interval to pull config on a timer
  * admin: Replace admin cert cache when reloading
  * admin: Sync server variables
  * caddyfile: Better error message for missing site block braces
  * caddyfile: Error on invalid site addresses containing comma
  * caddyfile: keep error chain info in Dispenser.Errf
  * caddyhttp: Fix edgecase with auto HTTP-&gt;HTTPS logic
  * caddyhttp: Fix incorrect determination of gRPC protocol
  * caddyhttp: Refactor and export SanitizedPathJoin for use in fastcgi
  * caddyhttp: Updated the documentation for MatchQuery
  * caddytls: Add Caddyfile support for propagation_timeout
  * caddytls: Remove "IssuerRaw" field
  * cmd: Fix paths when using an env file
  * cmd: New add-package and remove-package commands
  * cmd: use net.ErrClosed for matching returned error
  * core: Unix ns and Unix ms time placeholders
  * encode: Tweak compression settings
  * fileserver: Add disable_canonical_uris Caddyfile subdirective
  * fileserver: Clarify docs about canonicalization
  * fileserver: Don't persist parsed template
  * fileserver: Fix browse name_dir_first sorting
  * fileserver: Fix browse not redirecting query parameters
  * fileserver: Only redirect if filename not rewritten
  * fileserver: Redirect within the original URL
  * go.mod: Update dependencies
  * httpcaddyfile: Add preferred_chains global option and issuer subdirective
  * httpcaddyfile: Add shortcut for proxy hostport placeholder
  * httpcaddyfile: Add skip_install_trust global option
  * httpcaddyfile: Don't add HTTP hosts to TLS APs
  * httpcaddyfile: Don't put localhost in public APs
  * httpcaddyfile: Ensure hosts to skip for logs can always be collected
  * httpcaddyfile: Improve unrecognized directive errors
  * httpcaddyfile: Reorder some directives
  * logging: Actually use level_key
  * logging: Add missing interface guards for replace filter
  * logging: Prep for common_log removal
  * logging: Warn for deprecated single_field encoder
  * metrics: use buildinfo collector from new collectors pkg
  * reverseproxy: Adjust test related to #4201
  * reverseproxy: Always remove hop-by-hop headers
  * reverseproxy: Fix overwriting of max_idle_conns_per_host
  * reverseproxy: Incorporate latest proxy changes from stdlib
  * reverseproxy: Keep path to unix socket as dial address
  * reverseproxy: Remove redundant flushing</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1634904000">- Update to version 2.4.5:
  * Hotfix for a regression introduced in 2.4.4 related to
    combining the encode and reverse_proxy directives.
  * cmd: export CaddyVersion(), Commands()
  * encode: ignore flushing until after first write
  * go.mod: Update CertMagic</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1648209600">- Update to version 2.4.6:
  * caddycmd: Add `--keep-backup` to upgrade commands (#4387)
  * caddycmd: Add `--skip-standard` to `list-modules` command, quieter output (#4386)
  * caddycmd: fix caddy validate/fmt help message (#4377)
  * caddyhttp: Add support for triggering errors from `try_files` (#4346)
  * caddyhttp: Placeholder for client cert in DER + base64 format (#4241)
  * caddyhttp: reverseproxy: clarify warning for -insecure (#4379)
  * caddyhttp: Sanitize the path before evaluating path matchers (#4407)
  * caddytls: Mark storage clean timestamp at end of routine (#4401)
  * docs: General minor improvements
  * fastcgi: Fix Caddyfile parsing when `handle_response` is used (#4342)
  * fastcgi: Implement `try_files` override in Caddyfile directive (#4347)
  * fileserver: Fix compression breaks using httpInclude (#4352) (#4358)
  * fileserver: Fix displayed file size if it is symlink (#4354)
  * fileserver: Make file listing links purple once visited (#4356)
  * fileserver: Prevent focusing filter from scrolling on page load (#4393)
  * fileserver: properly handle escaped/non-ascii paths (#4332)
  * headers: Canonicalize case in replace (fix #4330)
  * httpcaddyfile: Empty tls policy for internal http localhost (#4398)
  * httpcaddyfile: Preserve IPv6 addresses through normalization (fix #4381)
  * map: Fix 95c03506 (avoid repeated expansions)
  * map: Fix regex mappings
  * reverseproxy: Log error at error level (fix #4360)
  * reverseproxy: Prevent copying the response if a response handler ran (#4388)
  * reverseproxy: Sanitize scheme and host on incoming requests (#4237)
  * templates: Add 'import' action (#4321)
  * templates: Add tests for funcInclude and funcImport (#4357)
  * templates: Propagate httpError to HTTP response</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1653307200">- Update to version 2.5.1:
  * Fixed regression in Unix socket admin endpoints.
  * Fixed regression in caddy trust commands.
  * Hash-based load balancing policies (ip_hash, uri_hash, header, and cookie)
    use an improved highest-random-weight (HRW) algorithm for increased
    consistency.
  * Dynamic upstreams, which is the ability to get the list of upstreams at
    every request (more specifically, every iteration in the proxy loop of
    every request) rather than just once at config-load time.
  * Caddy will automatically try to get relevant certificates from the local
    Tailscale instance.
  * New OpenTelemetry integration.
  * Added new endpoints /pki/ca/&lt;id&gt; and /pki/ca/&lt;id&gt;/certificates for
    getting information about Caddy's managed CAs.
  * Rename _caddy to zsh-completion
  * Fix MatchPath sanitizing [bsc#1200279, CVE-2022-29718]</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1657886400">- Update to version 2.5.2:
  * admin: expect quoted ETags (#4879)
  * headers: Only replace known placeholders (#4880)
  * reverseproxy: Err 503 if all upstreams unavailable
  * reverseproxy: Adjust new TLS Caddyfile directive names (#4872)
  * fileserver: Use safe redirects in file browser
  * admin: support ETag on config endpoints (#4579)
  * go.mod: Bump up quic-go to v0.28.0, fixes for BC breaks (#4867)
  * caddytls: Reuse issuer between PreCheck and Issue (#4866)
  * admin: Implement /adapt endpoint (close #4465) (#4846)
  * forwardauth: Fix case when `copy_headers` is omitted (#4856)
  * Expose several Caddy HTTP Matchers to the CEL Matcher (#4715)
  * reverseproxy: Fix double headers in response handlers (#4847)
  * reverseproxy: Fix panic when TLS is not configured (#4848)
  * reverseproxy: Skip TLS for certain configured ports (#4843)
  * go.mod: Update some dependencies
  * forwardauth: Support renaming copied headers, block support (#4783)
  * Add comment about xcaddy to main
  * headers: Support wildcards for delete ops (close #4830) (#4831)
  * reverseproxy: Dynamic ServerName for TLS upstreams (#4836)
  * reverseproxy: Make TLS renegotiation optional
  * reverseproxy: Add renegotiation param in TLS client (#4784)
  * caddyhttp: Log error from CEL evaluation (fix #4832)
  * reverseproxy: Correct the `tls_server_name` docs (#4827)
  * reverseproxy: HTTP 504 for upstream timeouts (#4824)
  * caddytls: Make peer certificate verification pluggable (#4389)
  * reverseproxy: api: Remove misleading 'healthy' value
  * go.mod: Update go-yaml to v3
  * Fix #4822 and fix #4779
  * reverseproxy: Add --internal-certs CLI flag #3589 (#4817)
  * ci: Fix build caching on Windows (#4811)
  * templates: Add `humanize` function (#4767)
  * core: Micro-optim in run() (#4810)
  * go.mod: Upgrade some dependencies
  * httpcaddyfile: Add `{err.*}` placeholder shortcut (#4798)
  * templates: Documentation consistency (#4796)
  * chore: Bump quic-go to v0.27.0 (#4782)
  * reverseproxy: Support http1.1&gt;h2c (close #4777) (#4778)
  * rewrite: Handle fragment before query (fix #4775) [bsc#1201822, CVE-2022-34037]
  * httpcaddyfile: Support multiple values for `default_bind` (#4774)</changelog>
</package>
<package pkgid="0c313f8420f2855874e2a8120ece8a7a0c34f0a9d3a0ed7cd0d0db0a58297a45" name="caddy" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="bp154.2.8.1"/>
  <changelog author="Alexandre Vicenzi &lt;alexandre.vicenzi@suse.com&gt;" date="1619611200">- Create Caddy package</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1621857600">- Update to version 2.4.1:
  * logging: Implement dial timeout for net writer (fix #4083) (#4172)
  * admin: Reinstate internal redirect for /id/ requests
  * caddyfile: Add parse error on site address with trailing `{` (#4163)
  * reverseproxy: Set the headers in the replacer before `handle_response` (#4165)
  * ci: Run CI on PRs targeting minor version branches (#4164)
  * cmd: upgrade: inherit the permissions of the original executable (#4160)
  * httpcaddyfile: Fix automation policy consolidation again (fix #4161)
  * caddyfile: Fix `caddy fmt` nesting not decrementing (#4157)
  * encode: Drop `prefer` from Caddyfile (#4156)
  * encode: Default to order the formats are enabled for `prefer` in Caddyfile (#4151)
  * caddytls: Run replacer on ask URL, for env vars (#4154)
  * httpcaddyfile: Add `grace_period` global option (#4152)
  * caddyhttp: Fix fallback for the error handler chain (#4131)
  * reverseproxy: Minor logging improvements
  * fileserver: Fix `file` matcher with empty `try_files` (#4147)
  * go.mod: CertMagic v0.13.1
  * reverseproxy: Add `handle_response` blocks to `reverse_proxy` (#3710) (#4021)
  * cmd: Add --envfile flag to `start` command (#4141)
  * httpcaddyfile: Add `auto_https ignore_loaded_certs` (#4077)
  * httpcaddyfile: Add global option for `storage_clean_interval` (#4134)
  * caddyhttp: performance improvement in HeaderRE Matcher (#4143)
  * fileserver: Share template logic for both `templates` and `file_server browse` (#4093)
  * caddytls: Implement remote IP connection matcher (#4123)
  * httpcaddyfile: Fix unexpectedly removed policy (#4128)
  * reverseproxy: fix hash selection policy (#4137)
  * fileserver: Better handling of HTTP status override (#4132)
  * caddyfile: Fix `import` replacing unrelated placeholders (#4129)
  * caddytls: Add `load_storage` module (#4055)
  * reverseproxy: Admin endpoint for reporting upstream statuses (#4125)
  * caddyhttp: Implement better logic for inserting the HTTP-&gt;HTTPS redirs (#4033)
  * httpcaddyfile: Take into account host scheme/port (fix #4113)
  * fuzz: fix the FuzzFormat comparison (#4117)
  * caddytls: Disable OCSP stapling for manual certs (#4064)
  * caddytls: Configurable storage clean interval
  * caddyfile: reject cyclic imports (#4022)
  * ci: fuzz: add 4 more fuzzing targets (#4105)
  * fileserver: Add status code override (#4076)
  * notify: Send all sd_notify signals from main caddy process (#4060)
  * go.mod: Update quic-go to v0.20.1 (#4075)
  * httpcaddyfile: Fix panic in automation policy consolidation (#4104)
  * caddyfile: Normalize line endings before comparing fmt result (#4103)
  * ci: accommodate go1.16 changes to go mod (#4102)
  * Minor tweaks
  * go.mod: Use latest CertMagic
  * Use 600 instead of 644 for UUID file
  * Change os to ioutil for now
  * reverseproxy: Set cookie path to `/` when using cookie lb_policy (#4096)
  * caddy: Add InstanceID() method
  * encode,staticfiles: Content negotiation, precompressed files (#4045)
  * reverseproxy: Implement health_uri, deprecate health_path, supports query (#4050)
  * go.mod: Migrate to golang.org/x/term (#4073)
  * caddyhttp: improve grammar of comment for AllowH2C (#4072)
  * sigtrap_posix: add missing comma to SIGTERM info (#4078)
  * cmd: Use formatted logger for config adapter warnings (#4080)
  * cmd: main: fix minor doc typos (#4082)
  * headers: Fix Caddyfile parsing for `request_header` with matchers (#4085)
  * .gitignore: add IDE files (#4087)
  * fileserver: Add a few more debug lines (#4063)
  * fileserver: Browse listing supports dark mode (#4066)
  * CONTRIBUTING: fix spelling (#4070)
  * httpcaddyfile: Add `error` directive for the existing handler (#4034)
  * logging: add replace filter for static value replacement (#4029)
  * caddyconfig: add global option for configuring loggers (#4028)
  * map: Accept regex substitution in outputs (#3991)
  * reverseproxy: Fix upstreams with placeholders with no port (#4046)
  * rewrite: Implement regex path replacements
  * fileserver: Don't replace in request paths (fix #4027)
  * caddypki: Add SignWithRoot option for ACME server
  * reverseproxy: Fix round robin data race (#4038)
  * Update docs; commit setcap.sh
  * go.mod: Latest CertMagic (updated libdns conventions)
  * core: Initialize logging before admin
  * caddytls: Remove old asset migration code (close #3894)
  * reverseproxy: Add duration/latency placeholders (close #4012) (#4013)
  * httpcaddyfile: Fix catch-all site block sorting
  * ci: Build and test on Go 1.16, bump minimum to 1.15 (#4024)
  * caddy: Support SetReadBuffer and SyscallConn for QUIC (fix #3998)
  * Improve security warnings
  * httpcaddyfile: Configure other apps from global options (#3990)
  * cmd: Clean up `build-info` and `upgrade` output
  * caddyhttp: Support placeholders in header matcher values (close #3916)
  * caddytls: Save email with account if not already specified
  * reverseproxy: Response buffering &amp; configurable buffer size
  * httpcaddyfile: Fix automation policies
  * ci: deflake integration tests (#3966)
  * httpcaddyfile: Add resolvers subdir of tls (close #4008)
  * acmeserver: Support custom CAs from Caddyfile
  * caddyhttp: Check for invalid subdirectives of static_response
  * httpcaddyfile: Fix default issuers when email provided
  * cmd: Add --force flag to reload command (close #4005)
  * httpcaddyfile: Warn if site address uses unspecified IP (close #4004)
  * httpcaddyfile: Sort catch-all site blocks properly (fix #4003)
  * ci: update the command to run tests on the s390x machine (#3995)
  * caddyhttp: Fix redir html status code, improve flow (#3987)
  * caddyhttp: Implement handler abort; new 'abort' directive (close #3871) (#3983)
  * admin: Identity management, remote admin, config loaders (#3994)
  * caddycmd: Add upgrade command (#3972)
  * Revert "requestbody: Allow overwriting remote address"
  * caddytest: Update Caddyfile tests for formatting, HTTP-only blocks
  * httpcaddyfile: Skip TLS APs for HTTP-only hosts (fix #3977)
  * cmd: Print more detailed version with --environ
  * map: Add missing json struct tag
  * tests: use actual admin port value in error message (#3973)
  * cmd: Implement sd_notify() to notify systemd about readiness (#3963)
  * templates: Add fileExists and httpError template actions
  * requestbody: Allow overwriting remote address
  * rewrite: Use RawPath instead of Path (fix #3596) (#3918)
  * Update docs
  * caddytls: Configurable OCSP stapling; global option (closes #3714)
  * logging: Remove logfmt encoder (close #3575)
  * httpcaddyfile: Support repeated use of cert_issuer global option
  * caddytls: add 'key_type' subdirective (#3956)
  * caddyfile: Refactor unmarshaling of module tokens
  * go.mod: Update CertMagic and acmez (improved IDN support)
  * reverseproxy: Caddyfile health check headers, host header support (#3948)
  * httpcaddyfile: Adjust iterator when removing AP (fix #3953)
  * cmd: Organize list-modules output; --packages flag (#3925)
  * caddyfile: Introduce basic linting and fmt check (#3923)</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1629892800">- Added hardening to systemd service(s). Modified:
  * caddy.service</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1630584000">- Update to version 2.4.4:
  * acmeserver: Don't set host for directory links by default
  * acmeserver: Trim slashes from path prefix
  * admin: Implement load_interval to pull config on a timer
  * admin: Replace admin cert cache when reloading
  * admin: Sync server variables
  * caddyfile: Better error message for missing site block braces
  * caddyfile: Error on invalid site addresses containing comma
  * caddyfile: keep error chain info in Dispenser.Errf
  * caddyhttp: Fix edgecase with auto HTTP-&gt;HTTPS logic
  * caddyhttp: Fix incorrect determination of gRPC protocol
  * caddyhttp: Refactor and export SanitizedPathJoin for use in fastcgi
  * caddyhttp: Updated the documentation for MatchQuery
  * caddytls: Add Caddyfile support for propagation_timeout
  * caddytls: Remove "IssuerRaw" field
  * cmd: Fix paths when using an env file
  * cmd: New add-package and remove-package commands
  * cmd: use net.ErrClosed for matching returned error
  * core: Unix ns and Unix ms time placeholders
  * encode: Tweak compression settings
  * fileserver: Add disable_canonical_uris Caddyfile subdirective
  * fileserver: Clarify docs about canonicalization
  * fileserver: Don't persist parsed template
  * fileserver: Fix browse name_dir_first sorting
  * fileserver: Fix browse not redirecting query parameters
  * fileserver: Only redirect if filename not rewritten
  * fileserver: Redirect within the original URL
  * go.mod: Update dependencies
  * httpcaddyfile: Add preferred_chains global option and issuer subdirective
  * httpcaddyfile: Add shortcut for proxy hostport placeholder
  * httpcaddyfile: Add skip_install_trust global option
  * httpcaddyfile: Don't add HTTP hosts to TLS APs
  * httpcaddyfile: Don't put localhost in public APs
  * httpcaddyfile: Ensure hosts to skip for logs can always be collected
  * httpcaddyfile: Improve unrecognized directive errors
  * httpcaddyfile: Reorder some directives
  * logging: Actually use level_key
  * logging: Add missing interface guards for replace filter
  * logging: Prep for common_log removal
  * logging: Warn for deprecated single_field encoder
  * metrics: use buildinfo collector from new collectors pkg
  * reverseproxy: Adjust test related to #4201
  * reverseproxy: Always remove hop-by-hop headers
  * reverseproxy: Fix overwriting of max_idle_conns_per_host
  * reverseproxy: Incorporate latest proxy changes from stdlib
  * reverseproxy: Keep path to unix socket as dial address
  * reverseproxy: Remove redundant flushing</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1634904000">- Update to version 2.4.5:
  * Hotfix for a regression introduced in 2.4.4 related to
    combining the encode and reverse_proxy directives.
  * cmd: export CaddyVersion(), Commands()
  * encode: ignore flushing until after first write
  * go.mod: Update CertMagic</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1648209600">- Update to version 2.4.6:
  * caddycmd: Add `--keep-backup` to upgrade commands (#4387)
  * caddycmd: Add `--skip-standard` to `list-modules` command, quieter output (#4386)
  * caddycmd: fix caddy validate/fmt help message (#4377)
  * caddyhttp: Add support for triggering errors from `try_files` (#4346)
  * caddyhttp: Placeholder for client cert in DER + base64 format (#4241)
  * caddyhttp: reverseproxy: clarify warning for -insecure (#4379)
  * caddyhttp: Sanitize the path before evaluating path matchers (#4407)
  * caddytls: Mark storage clean timestamp at end of routine (#4401)
  * docs: General minor improvements
  * fastcgi: Fix Caddyfile parsing when `handle_response` is used (#4342)
  * fastcgi: Implement `try_files` override in Caddyfile directive (#4347)
  * fileserver: Fix compression breaks using httpInclude (#4352) (#4358)
  * fileserver: Fix displayed file size if it is symlink (#4354)
  * fileserver: Make file listing links purple once visited (#4356)
  * fileserver: Prevent focusing filter from scrolling on page load (#4393)
  * fileserver: properly handle escaped/non-ascii paths (#4332)
  * headers: Canonicalize case in replace (fix #4330)
  * httpcaddyfile: Empty tls policy for internal http localhost (#4398)
  * httpcaddyfile: Preserve IPv6 addresses through normalization (fix #4381)
  * map: Fix 95c03506 (avoid repeated expansions)
  * map: Fix regex mappings
  * reverseproxy: Log error at error level (fix #4360)
  * reverseproxy: Prevent copying the response if a response handler ran (#4388)
  * reverseproxy: Sanitize scheme and host on incoming requests (#4237)
  * templates: Add 'import' action (#4321)
  * templates: Add tests for funcInclude and funcImport (#4357)
  * templates: Propagate httpError to HTTP response</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1653307200">- Update to version 2.5.1:
  * Fixed regression in Unix socket admin endpoints.
  * Fixed regression in caddy trust commands.
  * Hash-based load balancing policies (ip_hash, uri_hash, header, and cookie)
    use an improved highest-random-weight (HRW) algorithm for increased
    consistency.
  * Dynamic upstreams, which is the ability to get the list of upstreams at
    every request (more specifically, every iteration in the proxy loop of
    every request) rather than just once at config-load time.
  * Caddy will automatically try to get relevant certificates from the local
    Tailscale instance.
  * New OpenTelemetry integration.
  * Added new endpoints /pki/ca/&lt;id&gt; and /pki/ca/&lt;id&gt;/certificates for
    getting information about Caddy's managed CAs.
  * Rename _caddy to zsh-completion
  * Fix MatchPath sanitizing [bsc#1200279, CVE-2022-29718]</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1657886400">- Update to version 2.5.2:
  * admin: expect quoted ETags (#4879)
  * headers: Only replace known placeholders (#4880)
  * reverseproxy: Err 503 if all upstreams unavailable
  * reverseproxy: Adjust new TLS Caddyfile directive names (#4872)
  * fileserver: Use safe redirects in file browser
  * admin: support ETag on config endpoints (#4579)
  * go.mod: Bump up quic-go to v0.28.0, fixes for BC breaks (#4867)
  * caddytls: Reuse issuer between PreCheck and Issue (#4866)
  * admin: Implement /adapt endpoint (close #4465) (#4846)
  * forwardauth: Fix case when `copy_headers` is omitted (#4856)
  * Expose several Caddy HTTP Matchers to the CEL Matcher (#4715)
  * reverseproxy: Fix double headers in response handlers (#4847)
  * reverseproxy: Fix panic when TLS is not configured (#4848)
  * reverseproxy: Skip TLS for certain configured ports (#4843)
  * go.mod: Update some dependencies
  * forwardauth: Support renaming copied headers, block support (#4783)
  * Add comment about xcaddy to main
  * headers: Support wildcards for delete ops (close #4830) (#4831)
  * reverseproxy: Dynamic ServerName for TLS upstreams (#4836)
  * reverseproxy: Make TLS renegotiation optional
  * reverseproxy: Add renegotiation param in TLS client (#4784)
  * caddyhttp: Log error from CEL evaluation (fix #4832)
  * reverseproxy: Correct the `tls_server_name` docs (#4827)
  * reverseproxy: HTTP 504 for upstream timeouts (#4824)
  * caddytls: Make peer certificate verification pluggable (#4389)
  * reverseproxy: api: Remove misleading 'healthy' value
  * go.mod: Update go-yaml to v3
  * Fix #4822 and fix #4779
  * reverseproxy: Add --internal-certs CLI flag #3589 (#4817)
  * ci: Fix build caching on Windows (#4811)
  * templates: Add `humanize` function (#4767)
  * core: Micro-optim in run() (#4810)
  * go.mod: Upgrade some dependencies
  * httpcaddyfile: Add `{err.*}` placeholder shortcut (#4798)
  * templates: Documentation consistency (#4796)
  * chore: Bump quic-go to v0.27.0 (#4782)
  * reverseproxy: Support http1.1&gt;h2c (close #4777) (#4778)
  * rewrite: Handle fragment before query (fix #4775) [bsc#1201822, CVE-2022-34037]
  * httpcaddyfile: Support multiple values for `default_bind` (#4774)</changelog>
</package>
<package pkgid="a2782344386f2635ba85becf1f11c0ff2e3fa049e1cb230c79e797b3c114748a" name="canna" arch="aarch64">
  <version epoch="0" ver="3.7p3" rel="bp154.3.3.1"/>
  <changelog author="dvaleev@suse.com" date="1401105600">- add canna user for systemd-tmpfiles (bnc#878691)</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashism in postun script</changelog>
  <changelog author="i@marguerite.su" date="1415620800">- add baselibs.conf to Source99</changelog>
  <changelog author="ftake@geeko.jp" date="1420200000">- Fix boo#910933 Canna cannot start
  + roll back the fix for bnc#878691
  + use wnn user instead of canna
  + fix the command line options in canna.service
  + use /bin/rm instead of cannakill in canna.service</changelog>
  <changelog author="ftake@geeko.jp" date="1424347200">- Fix the insufficient fix for boo#910933
  + fix /tmp/.iroha_unix is not removed at service start</changelog>
  <changelog author="i@marguerite.su" date="1488888000">- Fix factory build, remove unrecognized RPM_SOURCE_DIR</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041600">- BuildRequires imake not xorg-x11-devel</changelog>
  <changelog author="Marguerite Su &lt;i@marguerite.su&gt;" date="1573300800">- ran spec-cleaner
- do not install static archive into -devel package
- put devel file lib*.so in -devel package</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1629892800">- Added hardening to systemd service(s). Modified:
  * canna.service</changelog>
  <changelog author="Matthias Gerstner &lt;matthias.gerstner@suse.com&gt;" date="1651838400">- add safe-sockdir.patch: move UNIX socket dir from /tmp to /run to avoid
  local attackers being able to place bogus directories in its stead. Use
  systemd-tmpfiles for cleaning old sockets (bsc#1199280).</changelog>
</package>
<package pkgid="14c0f1c5a0eb4bbed6ef1cc056defb76ca61f3c26add88f7f18496726be2f1e0" name="canna" arch="i586">
  <version epoch="0" ver="3.7p3" rel="bp154.3.3.1"/>
  <changelog author="dvaleev@suse.com" date="1401105600">- add canna user for systemd-tmpfiles (bnc#878691)</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashism in postun script</changelog>
  <changelog author="i@marguerite.su" date="1415620800">- add baselibs.conf to Source99</changelog>
  <changelog author="ftake@geeko.jp" date="1420200000">- Fix boo#910933 Canna cannot start
  + roll back the fix for bnc#878691
  + use wnn user instead of canna
  + fix the command line options in canna.service
  + use /bin/rm instead of cannakill in canna.service</changelog>
  <changelog author="ftake@geeko.jp" date="1424347200">- Fix the insufficient fix for boo#910933
  + fix /tmp/.iroha_unix is not removed at service start</changelog>
  <changelog author="i@marguerite.su" date="1488888000">- Fix factory build, remove unrecognized RPM_SOURCE_DIR</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041600">- BuildRequires imake not xorg-x11-devel</changelog>
  <changelog author="Marguerite Su &lt;i@marguerite.su&gt;" date="1573300800">- ran spec-cleaner
- do not install static archive into -devel package
- put devel file lib*.so in -devel package</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1629892800">- Added hardening to systemd service(s). Modified:
  * canna.service</changelog>
  <changelog author="Matthias Gerstner &lt;matthias.gerstner@suse.com&gt;" date="1651838400">- add safe-sockdir.patch: move UNIX socket dir from /tmp to /run to avoid
  local attackers being able to place bogus directories in its stead. Use
  systemd-tmpfiles for cleaning old sockets (bsc#1199280).</changelog>
</package>
<package pkgid="402de3597e3975bbf975f0beca9433e41d4a8196abc5890a4fa72b308762ad5a" name="canna" arch="ppc64le">
  <version epoch="0" ver="3.7p3" rel="bp154.3.3.1"/>
  <changelog author="dvaleev@suse.com" date="1401105600">- add canna user for systemd-tmpfiles (bnc#878691)</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashism in postun script</changelog>
  <changelog author="i@marguerite.su" date="1415620800">- add baselibs.conf to Source99</changelog>
  <changelog author="ftake@geeko.jp" date="1420200000">- Fix boo#910933 Canna cannot start
  + roll back the fix for bnc#878691
  + use wnn user instead of canna
  + fix the command line options in canna.service
  + use /bin/rm instead of cannakill in canna.service</changelog>
  <changelog author="ftake@geeko.jp" date="1424347200">- Fix the insufficient fix for boo#910933
  + fix /tmp/.iroha_unix is not removed at service start</changelog>
  <changelog author="i@marguerite.su" date="1488888000">- Fix factory build, remove unrecognized RPM_SOURCE_DIR</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041600">- BuildRequires imake not xorg-x11-devel</changelog>
  <changelog author="Marguerite Su &lt;i@marguerite.su&gt;" date="1573300800">- ran spec-cleaner
- do not install static archive into -devel package
- put devel file lib*.so in -devel package</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1629892800">- Added hardening to systemd service(s). Modified:
  * canna.service</changelog>
  <changelog author="Matthias Gerstner &lt;matthias.gerstner@suse.com&gt;" date="1651838400">- add safe-sockdir.patch: move UNIX socket dir from /tmp to /run to avoid
  local attackers being able to place bogus directories in its stead. Use
  systemd-tmpfiles for cleaning old sockets (bsc#1199280).</changelog>
</package>
<package pkgid="49e49d6a5e6a70542c581479ab836b86c891f460ecc5446875e2c7bd8736f7e6" name="canna" arch="s390x">
  <version epoch="0" ver="3.7p3" rel="bp154.3.3.1"/>
  <changelog author="dvaleev@suse.com" date="1401105600">- add canna user for systemd-tmpfiles (bnc#878691)</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashism in postun script</changelog>
  <changelog author="i@marguerite.su" date="1415620800">- add baselibs.conf to Source99</changelog>
  <changelog author="ftake@geeko.jp" date="1420200000">- Fix boo#910933 Canna cannot start
  + roll back the fix for bnc#878691
  + use wnn user instead of canna
  + fix the command line options in canna.service
  + use /bin/rm instead of cannakill in canna.service</changelog>
  <changelog author="ftake@geeko.jp" date="1424347200">- Fix the insufficient fix for boo#910933
  + fix /tmp/.iroha_unix is not removed at service start</changelog>
  <changelog author="i@marguerite.su" date="1488888000">- Fix factory build, remove unrecognized RPM_SOURCE_DIR</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041600">- BuildRequires imake not xorg-x11-devel</changelog>
  <changelog author="Marguerite Su &lt;i@marguerite.su&gt;" date="1573300800">- ran spec-cleaner
- do not install static archive into -devel package
- put devel file lib*.so in -devel package</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1629892800">- Added hardening to systemd service(s). Modified:
  * canna.service</changelog>
  <changelog author="Matthias Gerstner &lt;matthias.gerstner@suse.com&gt;" date="1651838400">- add safe-sockdir.patch: move UNIX socket dir from /tmp to /run to avoid
  local attackers being able to place bogus directories in its stead. Use
  systemd-tmpfiles for cleaning old sockets (bsc#1199280).</changelog>
</package>
<package pkgid="c2eb1cbb1d670591b05a968f575f4d74bbfe88bbf636530d361001790e7c35ba" name="canna" arch="src">
  <version epoch="0" ver="3.7p3" rel="bp154.3.3.1"/>
  <changelog author="coolo@novell.com" date="1291723200">- prereq init script network</changelog>
  <changelog author="coolo@suse.com" date="1324382400">- remove call to suse_update_config (very old work around)</changelog>
  <changelog author="dvaleev@suse.com" date="1331812800">- copy config.guess, as the stock one is too old and not able to
  guess ppc64</changelog>
  <changelog author="puzel@suse.com" date="1338292800">- fix build with automake-1.12</changelog>
  <changelog author="jengelh@inai.de" date="1338292801">- Enable parallel build
- Adjust directory name to source config.guess/sub from
  to be a /little/ more future proof.</changelog>
  <changelog author="i@marguerite.su" date="1338638400">- fix sles builds.</changelog>
  <changelog author="ftake@geeko.jp" date="1373198400">- remove locale(ja) and not installed by default because most users
  do not use this package anymore
- fix source URL</changelog>
  <changelog author="bkbin005@rinku.zaq.ne.jp" date="1374062400">- Remove obsoleted authors section .
  Please see also
  http://lists.opensuse.org/opensuse-ja/2013-07/msg00099.html</changelog>
  <changelog author="p.drouand@gmail.com" date="1382788800">- Improve systemd support for openSUSE &gt;= 12.3
- Remove sysconfig and %fillup_prereq PreReq; package doesn't contain
  any sysconfig file, these macros are useless
- Don't provide INSTALL and INSTALL.jp in documentation; it describes
  how do build from source have nothing to do in package</changelog>
  <changelog author="meissner@suse.com" date="1400068800">- add %service_add_pre to %pre section</changelog>
  <changelog author="dvaleev@suse.com" date="1401105600">- add canna user for systemd-tmpfiles (bnc#878691)</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashism in postun script</changelog>
  <changelog author="i@marguerite.su" date="1415620800">- add baselibs.conf to Source99</changelog>
  <changelog author="ftake@geeko.jp" date="1420200000">- Fix boo#910933 Canna cannot start
  + roll back the fix for bnc#878691
  + use wnn user instead of canna
  + fix the command line options in canna.service
  + use /bin/rm instead of cannakill in canna.service</changelog>
  <changelog author="ftake@geeko.jp" date="1424347200">- Fix the insufficient fix for boo#910933
  + fix /tmp/.iroha_unix is not removed at service start</changelog>
  <changelog author="i@marguerite.su" date="1488888000">- Fix factory build, remove unrecognized RPM_SOURCE_DIR</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041600">- BuildRequires imake not xorg-x11-devel</changelog>
  <changelog author="Marguerite Su &lt;i@marguerite.su&gt;" date="1573300800">- ran spec-cleaner
- do not install static archive into -devel package
- put devel file lib*.so in -devel package</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1629892800">- Added hardening to systemd service(s). Modified:
  * canna.service</changelog>
  <changelog author="Matthias Gerstner &lt;matthias.gerstner@suse.com&gt;" date="1651838400">- add safe-sockdir.patch: move UNIX socket dir from /tmp to /run to avoid
  local attackers being able to place bogus directories in its stead. Use
  systemd-tmpfiles for cleaning old sockets (bsc#1199280).</changelog>
</package>
<package pkgid="8df97a3e48bc1bb673c85e2ab22aa5596427820ed801f73b040271c6a0d18d22" name="canna" arch="x86_64">
  <version epoch="0" ver="3.7p3" rel="bp154.3.3.1"/>
  <changelog author="dvaleev@suse.com" date="1401105600">- add canna user for systemd-tmpfiles (bnc#878691)</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashism in postun script</changelog>
  <changelog author="i@marguerite.su" date="1415620800">- add baselibs.conf to Source99</changelog>
  <changelog author="ftake@geeko.jp" date="1420200000">- Fix boo#910933 Canna cannot start
  + roll back the fix for bnc#878691
  + use wnn user instead of canna
  + fix the command line options in canna.service
  + use /bin/rm instead of cannakill in canna.service</changelog>
  <changelog author="ftake@geeko.jp" date="1424347200">- Fix the insufficient fix for boo#910933
  + fix /tmp/.iroha_unix is not removed at service start</changelog>
  <changelog author="i@marguerite.su" date="1488888000">- Fix factory build, remove unrecognized RPM_SOURCE_DIR</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041600">- BuildRequires imake not xorg-x11-devel</changelog>
  <changelog author="Marguerite Su &lt;i@marguerite.su&gt;" date="1573300800">- ran spec-cleaner
- do not install static archive into -devel package
- put devel file lib*.so in -devel package</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1629892800">- Added hardening to systemd service(s). Modified:
  * canna.service</changelog>
  <changelog author="Matthias Gerstner &lt;matthias.gerstner@suse.com&gt;" date="1651838400">- add safe-sockdir.patch: move UNIX socket dir from /tmp to /run to avoid
  local attackers being able to place bogus directories in its stead. Use
  systemd-tmpfiles for cleaning old sockets (bsc#1199280).</changelog>
</package>
<package pkgid="9fd338bcc0c738b05e14ea776814cd12e462ddfe4910a5695529e68f73af06c6" name="canna-devel" arch="aarch64">
  <version epoch="0" ver="3.7p3" rel="bp154.3.3.1"/>
  <changelog author="dvaleev@suse.com" date="1401105600">- add canna user for systemd-tmpfiles (bnc#878691)</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashism in postun script</changelog>
  <changelog author="i@marguerite.su" date="1415620800">- add baselibs.conf to Source99</changelog>
  <changelog author="ftake@geeko.jp" date="1420200000">- Fix boo#910933 Canna cannot start
  + roll back the fix for bnc#878691
  + use wnn user instead of canna
  + fix the command line options in canna.service
  + use /bin/rm instead of cannakill in canna.service</changelog>
  <changelog author="ftake@geeko.jp" date="1424347200">- Fix the insufficient fix for boo#910933
  + fix /tmp/.iroha_unix is not removed at service start</changelog>
  <changelog author="i@marguerite.su" date="1488888000">- Fix factory build, remove unrecognized RPM_SOURCE_DIR</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041600">- BuildRequires imake not xorg-x11-devel</changelog>
  <changelog author="Marguerite Su &lt;i@marguerite.su&gt;" date="1573300800">- ran spec-cleaner
- do not install static archive into -devel package
- put devel file lib*.so in -devel package</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1629892800">- Added hardening to systemd service(s). Modified:
  * canna.service</changelog>
  <changelog author="Matthias Gerstner &lt;matthias.gerstner@suse.com&gt;" date="1651838400">- add safe-sockdir.patch: move UNIX socket dir from /tmp to /run to avoid
  local attackers being able to place bogus directories in its stead. Use
  systemd-tmpfiles for cleaning old sockets (bsc#1199280).</changelog>
</package>
<package pkgid="90543cb7c5d6eb01917437756fd33655f6e86eae6997aa96a2524b194af197ab" name="canna-devel" arch="i586">
  <version epoch="0" ver="3.7p3" rel="bp154.3.3.1"/>
  <changelog author="dvaleev@suse.com" date="1401105600">- add canna user for systemd-tmpfiles (bnc#878691)</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashism in postun script</changelog>
  <changelog author="i@marguerite.su" date="1415620800">- add baselibs.conf to Source99</changelog>
  <changelog author="ftake@geeko.jp" date="1420200000">- Fix boo#910933 Canna cannot start
  + roll back the fix for bnc#878691
  + use wnn user instead of canna
  + fix the command line options in canna.service
  + use /bin/rm instead of cannakill in canna.service</changelog>
  <changelog author="ftake@geeko.jp" date="1424347200">- Fix the insufficient fix for boo#910933
  + fix /tmp/.iroha_unix is not removed at service start</changelog>
  <changelog author="i@marguerite.su" date="1488888000">- Fix factory build, remove unrecognized RPM_SOURCE_DIR</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041600">- BuildRequires imake not xorg-x11-devel</changelog>
  <changelog author="Marguerite Su &lt;i@marguerite.su&gt;" date="1573300800">- ran spec-cleaner
- do not install static archive into -devel package
- put devel file lib*.so in -devel package</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1629892800">- Added hardening to systemd service(s). Modified:
  * canna.service</changelog>
  <changelog author="Matthias Gerstner &lt;matthias.gerstner@suse.com&gt;" date="1651838400">- add safe-sockdir.patch: move UNIX socket dir from /tmp to /run to avoid
  local attackers being able to place bogus directories in its stead. Use
  systemd-tmpfiles for cleaning old sockets (bsc#1199280).</changelog>
</package>
<package pkgid="915900b6946f0c94f320e3e18354f6bc528bc6a8ed85c5db351bdde72df4ba54" name="canna-devel" arch="ppc64le">
  <version epoch="0" ver="3.7p3" rel="bp154.3.3.1"/>
  <changelog author="dvaleev@suse.com" date="1401105600">- add canna user for systemd-tmpfiles (bnc#878691)</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashism in postun script</changelog>
  <changelog author="i@marguerite.su" date="1415620800">- add baselibs.conf to Source99</changelog>
  <changelog author="ftake@geeko.jp" date="1420200000">- Fix boo#910933 Canna cannot start
  + roll back the fix for bnc#878691
  + use wnn user instead of canna
  + fix the command line options in canna.service
  + use /bin/rm instead of cannakill in canna.service</changelog>
  <changelog author="ftake@geeko.jp" date="1424347200">- Fix the insufficient fix for boo#910933
  + fix /tmp/.iroha_unix is not removed at service start</changelog>
  <changelog author="i@marguerite.su" date="1488888000">- Fix factory build, remove unrecognized RPM_SOURCE_DIR</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041600">- BuildRequires imake not xorg-x11-devel</changelog>
  <changelog author="Marguerite Su &lt;i@marguerite.su&gt;" date="1573300800">- ran spec-cleaner
- do not install static archive into -devel package
- put devel file lib*.so in -devel package</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1629892800">- Added hardening to systemd service(s). Modified:
  * canna.service</changelog>
  <changelog author="Matthias Gerstner &lt;matthias.gerstner@suse.com&gt;" date="1651838400">- add safe-sockdir.patch: move UNIX socket dir from /tmp to /run to avoid
  local attackers being able to place bogus directories in its stead. Use
  systemd-tmpfiles for cleaning old sockets (bsc#1199280).</changelog>
</package>
<package pkgid="85a24073717598474c59d3c0fb1db2d0d3367235787df3036d463bed6e7e5c16" name="canna-devel" arch="s390x">
  <version epoch="0" ver="3.7p3" rel="bp154.3.3.1"/>
  <changelog author="dvaleev@suse.com" date="1401105600">- add canna user for systemd-tmpfiles (bnc#878691)</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashism in postun script</changelog>
  <changelog author="i@marguerite.su" date="1415620800">- add baselibs.conf to Source99</changelog>
  <changelog author="ftake@geeko.jp" date="1420200000">- Fix boo#910933 Canna cannot start
  + roll back the fix for bnc#878691
  + use wnn user instead of canna
  + fix the command line options in canna.service
  + use /bin/rm instead of cannakill in canna.service</changelog>
  <changelog author="ftake@geeko.jp" date="1424347200">- Fix the insufficient fix for boo#910933
  + fix /tmp/.iroha_unix is not removed at service start</changelog>
  <changelog author="i@marguerite.su" date="1488888000">- Fix factory build, remove unrecognized RPM_SOURCE_DIR</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041600">- BuildRequires imake not xorg-x11-devel</changelog>
  <changelog author="Marguerite Su &lt;i@marguerite.su&gt;" date="1573300800">- ran spec-cleaner
- do not install static archive into -devel package
- put devel file lib*.so in -devel package</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1629892800">- Added hardening to systemd service(s). Modified:
  * canna.service</changelog>
  <changelog author="Matthias Gerstner &lt;matthias.gerstner@suse.com&gt;" date="1651838400">- add safe-sockdir.patch: move UNIX socket dir from /tmp to /run to avoid
  local attackers being able to place bogus directories in its stead. Use
  systemd-tmpfiles for cleaning old sockets (bsc#1199280).</changelog>
</package>
<package pkgid="2e633c9608642ac03633c59ce44d0fcd4a7b95d4478800f283c7e68e47b819c7" name="canna-devel" arch="x86_64">
  <version epoch="0" ver="3.7p3" rel="bp154.3.3.1"/>
  <changelog author="dvaleev@suse.com" date="1401105600">- add canna user for systemd-tmpfiles (bnc#878691)</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashism in postun script</changelog>
  <changelog author="i@marguerite.su" date="1415620800">- add baselibs.conf to Source99</changelog>
  <changelog author="ftake@geeko.jp" date="1420200000">- Fix boo#910933 Canna cannot start
  + roll back the fix for bnc#878691
  + use wnn user instead of canna
  + fix the command line options in canna.service
  + use /bin/rm instead of cannakill in canna.service</changelog>
  <changelog author="ftake@geeko.jp" date="1424347200">- Fix the insufficient fix for boo#910933
  + fix /tmp/.iroha_unix is not removed at service start</changelog>
  <changelog author="i@marguerite.su" date="1488888000">- Fix factory build, remove unrecognized RPM_SOURCE_DIR</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041600">- BuildRequires imake not xorg-x11-devel</changelog>
  <changelog author="Marguerite Su &lt;i@marguerite.su&gt;" date="1573300800">- ran spec-cleaner
- do not install static archive into -devel package
- put devel file lib*.so in -devel package</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1629892800">- Added hardening to systemd service(s). Modified:
  * canna.service</changelog>
  <changelog author="Matthias Gerstner &lt;matthias.gerstner@suse.com&gt;" date="1651838400">- add safe-sockdir.patch: move UNIX socket dir from /tmp to /run to avoid
  local attackers being able to place bogus directories in its stead. Use
  systemd-tmpfiles for cleaning old sockets (bsc#1199280).</changelog>
</package>
<package pkgid="c9a6dc38dfe45912f34e10a3f7c5345353f21f8a162137034600dac878e47f35" name="canna-libs" arch="aarch64">
  <version epoch="0" ver="3.7p3" rel="bp154.3.3.1"/>
  <changelog author="dvaleev@suse.com" date="1401105600">- add canna user for systemd-tmpfiles (bnc#878691)</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashism in postun script</changelog>
  <changelog author="i@marguerite.su" date="1415620800">- add baselibs.conf to Source99</changelog>
  <changelog author="ftake@geeko.jp" date="1420200000">- Fix boo#910933 Canna cannot start
  + roll back the fix for bnc#878691
  + use wnn user instead of canna
  + fix the command line options in canna.service
  + use /bin/rm instead of cannakill in canna.service</changelog>
  <changelog author="ftake@geeko.jp" date="1424347200">- Fix the insufficient fix for boo#910933
  + fix /tmp/.iroha_unix is not removed at service start</changelog>
  <changelog author="i@marguerite.su" date="1488888000">- Fix factory build, remove unrecognized RPM_SOURCE_DIR</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041600">- BuildRequires imake not xorg-x11-devel</changelog>
  <changelog author="Marguerite Su &lt;i@marguerite.su&gt;" date="1573300800">- ran spec-cleaner
- do not install static archive into -devel package
- put devel file lib*.so in -devel package</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1629892800">- Added hardening to systemd service(s). Modified:
  * canna.service</changelog>
  <changelog author="Matthias Gerstner &lt;matthias.gerstner@suse.com&gt;" date="1651838400">- add safe-sockdir.patch: move UNIX socket dir from /tmp to /run to avoid
  local attackers being able to place bogus directories in its stead. Use
  systemd-tmpfiles for cleaning old sockets (bsc#1199280).</changelog>
</package>
<package pkgid="46982269c7086617ea4330b471932590d087439a91f05f545b3bb83baaa70837" name="canna-libs" arch="i586">
  <version epoch="0" ver="3.7p3" rel="bp154.3.3.1"/>
  <changelog author="dvaleev@suse.com" date="1401105600">- add canna user for systemd-tmpfiles (bnc#878691)</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashism in postun script</changelog>
  <changelog author="i@marguerite.su" date="1415620800">- add baselibs.conf to Source99</changelog>
  <changelog author="ftake@geeko.jp" date="1420200000">- Fix boo#910933 Canna cannot start
  + roll back the fix for bnc#878691
  + use wnn user instead of canna
  + fix the command line options in canna.service
  + use /bin/rm instead of cannakill in canna.service</changelog>
  <changelog author="ftake@geeko.jp" date="1424347200">- Fix the insufficient fix for boo#910933
  + fix /tmp/.iroha_unix is not removed at service start</changelog>
  <changelog author="i@marguerite.su" date="1488888000">- Fix factory build, remove unrecognized RPM_SOURCE_DIR</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041600">- BuildRequires imake not xorg-x11-devel</changelog>
  <changelog author="Marguerite Su &lt;i@marguerite.su&gt;" date="1573300800">- ran spec-cleaner
- do not install static archive into -devel package
- put devel file lib*.so in -devel package</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1629892800">- Added hardening to systemd service(s). Modified:
  * canna.service</changelog>
  <changelog author="Matthias Gerstner &lt;matthias.gerstner@suse.com&gt;" date="1651838400">- add safe-sockdir.patch: move UNIX socket dir from /tmp to /run to avoid
  local attackers being able to place bogus directories in its stead. Use
  systemd-tmpfiles for cleaning old sockets (bsc#1199280).</changelog>
</package>
<package pkgid="65d9e44b25b2f69d846081a5686a87e2d94532a7d43de1e3ecce0910abdff019" name="canna-libs" arch="ppc64le">
  <version epoch="0" ver="3.7p3" rel="bp154.3.3.1"/>
  <changelog author="dvaleev@suse.com" date="1401105600">- add canna user for systemd-tmpfiles (bnc#878691)</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashism in postun script</changelog>
  <changelog author="i@marguerite.su" date="1415620800">- add baselibs.conf to Source99</changelog>
  <changelog author="ftake@geeko.jp" date="1420200000">- Fix boo#910933 Canna cannot start
  + roll back the fix for bnc#878691
  + use wnn user instead of canna
  + fix the command line options in canna.service
  + use /bin/rm instead of cannakill in canna.service</changelog>
  <changelog author="ftake@geeko.jp" date="1424347200">- Fix the insufficient fix for boo#910933
  + fix /tmp/.iroha_unix is not removed at service start</changelog>
  <changelog author="i@marguerite.su" date="1488888000">- Fix factory build, remove unrecognized RPM_SOURCE_DIR</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041600">- BuildRequires imake not xorg-x11-devel</changelog>
  <changelog author="Marguerite Su &lt;i@marguerite.su&gt;" date="1573300800">- ran spec-cleaner
- do not install static archive into -devel package
- put devel file lib*.so in -devel package</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1629892800">- Added hardening to systemd service(s). Modified:
  * canna.service</changelog>
  <changelog author="Matthias Gerstner &lt;matthias.gerstner@suse.com&gt;" date="1651838400">- add safe-sockdir.patch: move UNIX socket dir from /tmp to /run to avoid
  local attackers being able to place bogus directories in its stead. Use
  systemd-tmpfiles for cleaning old sockets (bsc#1199280).</changelog>
</package>
<package pkgid="2d526c121ff10a14a898832fc32534f9d36b2d92ecbaeb206bdb04de83bebad0" name="canna-libs" arch="s390x">
  <version epoch="0" ver="3.7p3" rel="bp154.3.3.1"/>
  <changelog author="dvaleev@suse.com" date="1401105600">- add canna user for systemd-tmpfiles (bnc#878691)</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashism in postun script</changelog>
  <changelog author="i@marguerite.su" date="1415620800">- add baselibs.conf to Source99</changelog>
  <changelog author="ftake@geeko.jp" date="1420200000">- Fix boo#910933 Canna cannot start
  + roll back the fix for bnc#878691
  + use wnn user instead of canna
  + fix the command line options in canna.service
  + use /bin/rm instead of cannakill in canna.service</changelog>
  <changelog author="ftake@geeko.jp" date="1424347200">- Fix the insufficient fix for boo#910933
  + fix /tmp/.iroha_unix is not removed at service start</changelog>
  <changelog author="i@marguerite.su" date="1488888000">- Fix factory build, remove unrecognized RPM_SOURCE_DIR</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041600">- BuildRequires imake not xorg-x11-devel</changelog>
  <changelog author="Marguerite Su &lt;i@marguerite.su&gt;" date="1573300800">- ran spec-cleaner
- do not install static archive into -devel package
- put devel file lib*.so in -devel package</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1629892800">- Added hardening to systemd service(s). Modified:
  * canna.service</changelog>
  <changelog author="Matthias Gerstner &lt;matthias.gerstner@suse.com&gt;" date="1651838400">- add safe-sockdir.patch: move UNIX socket dir from /tmp to /run to avoid
  local attackers being able to place bogus directories in its stead. Use
  systemd-tmpfiles for cleaning old sockets (bsc#1199280).</changelog>
</package>
<package pkgid="1fd131f29318f8791f86c93f0eb9f5da492b81879a7862d818418e822bfe3394" name="canna-libs" arch="x86_64">
  <version epoch="0" ver="3.7p3" rel="bp154.3.3.1"/>
  <changelog author="dvaleev@suse.com" date="1401105600">- add canna user for systemd-tmpfiles (bnc#878691)</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashism in postun script</changelog>
  <changelog author="i@marguerite.su" date="1415620800">- add baselibs.conf to Source99</changelog>
  <changelog author="ftake@geeko.jp" date="1420200000">- Fix boo#910933 Canna cannot start
  + roll back the fix for bnc#878691
  + use wnn user instead of canna
  + fix the command line options in canna.service
  + use /bin/rm instead of cannakill in canna.service</changelog>
  <changelog author="ftake@geeko.jp" date="1424347200">- Fix the insufficient fix for boo#910933
  + fix /tmp/.iroha_unix is not removed at service start</changelog>
  <changelog author="i@marguerite.su" date="1488888000">- Fix factory build, remove unrecognized RPM_SOURCE_DIR</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041600">- BuildRequires imake not xorg-x11-devel</changelog>
  <changelog author="Marguerite Su &lt;i@marguerite.su&gt;" date="1573300800">- ran spec-cleaner
- do not install static archive into -devel package
- put devel file lib*.so in -devel package</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1629892800">- Added hardening to systemd service(s). Modified:
  * canna.service</changelog>
  <changelog author="Matthias Gerstner &lt;matthias.gerstner@suse.com&gt;" date="1651838400">- add safe-sockdir.patch: move UNIX socket dir from /tmp to /run to avoid
  local attackers being able to place bogus directories in its stead. Use
  systemd-tmpfiles for cleaning old sockets (bsc#1199280).</changelog>
</package>
<package pkgid="2095b0678d73135cce47c31f52bfa02dbc90abe80a984b0592a0a123ad55e2c2" name="canna-libs-32bit" arch="x86_64">
  <version epoch="0" ver="3.7p3" rel="bp154.3.3.1"/>
  <changelog author="dvaleev@suse.com" date="1401105600">- add canna user for systemd-tmpfiles (bnc#878691)</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashism in postun script</changelog>
  <changelog author="i@marguerite.su" date="1415620800">- add baselibs.conf to Source99</changelog>
  <changelog author="ftake@geeko.jp" date="1420200000">- Fix boo#910933 Canna cannot start
  + roll back the fix for bnc#878691
  + use wnn user instead of canna
  + fix the command line options in canna.service
  + use /bin/rm instead of cannakill in canna.service</changelog>
  <changelog author="ftake@geeko.jp" date="1424347200">- Fix the insufficient fix for boo#910933
  + fix /tmp/.iroha_unix is not removed at service start</changelog>
  <changelog author="i@marguerite.su" date="1488888000">- Fix factory build, remove unrecognized RPM_SOURCE_DIR</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041600">- BuildRequires imake not xorg-x11-devel</changelog>
  <changelog author="Marguerite Su &lt;i@marguerite.su&gt;" date="1573300800">- ran spec-cleaner
- do not install static archive into -devel package
- put devel file lib*.so in -devel package</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1629892800">- Added hardening to systemd service(s). Modified:
  * canna.service</changelog>
  <changelog author="Matthias Gerstner &lt;matthias.gerstner@suse.com&gt;" date="1651838400">- add safe-sockdir.patch: move UNIX socket dir from /tmp to /run to avoid
  local attackers being able to place bogus directories in its stead. Use
  systemd-tmpfiles for cleaning old sockets (bsc#1199280).</changelog>
</package>
<package pkgid="acdb30277f23d0ac7f181e96dbefa871dd0b897d77eda67ff217a1687133d63e" name="canna-libs-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="3.7p3" rel="bp154.3.3.1"/>
  <changelog author="dvaleev@suse.com" date="1401105600">- add canna user for systemd-tmpfiles (bnc#878691)</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashism in postun script</changelog>
  <changelog author="i@marguerite.su" date="1415620800">- add baselibs.conf to Source99</changelog>
  <changelog author="ftake@geeko.jp" date="1420200000">- Fix boo#910933 Canna cannot start
  + roll back the fix for bnc#878691
  + use wnn user instead of canna
  + fix the command line options in canna.service
  + use /bin/rm instead of cannakill in canna.service</changelog>
  <changelog author="ftake@geeko.jp" date="1424347200">- Fix the insufficient fix for boo#910933
  + fix /tmp/.iroha_unix is not removed at service start</changelog>
  <changelog author="i@marguerite.su" date="1488888000">- Fix factory build, remove unrecognized RPM_SOURCE_DIR</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041600">- BuildRequires imake not xorg-x11-devel</changelog>
  <changelog author="Marguerite Su &lt;i@marguerite.su&gt;" date="1573300800">- ran spec-cleaner
- do not install static archive into -devel package
- put devel file lib*.so in -devel package</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1629892800">- Added hardening to systemd service(s). Modified:
  * canna.service</changelog>
  <changelog author="Matthias Gerstner &lt;matthias.gerstner@suse.com&gt;" date="1651838400">- add safe-sockdir.patch: move UNIX socket dir from /tmp to /run to avoid
  local attackers being able to place bogus directories in its stead. Use
  systemd-tmpfiles for cleaning old sockets (bsc#1199280).</changelog>
</package>
<package pkgid="723ef5a7901158267dba63b119f2e31a8d24968cea8b6b4c9b18c6bea847020d" name="certbot-systemd-timer" arch="noarch">
  <version epoch="0" ver="0.0" rel="bp154.2.1"/>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1536148800">- optional systemd timer to handle certbot certificate renewals
  borrowed from Fedora</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1538740800">- specfile now respects SUSE installation process</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553256000">- Use noun phrase in summary.
- Add systemd-rpm-macros BuildRequirement for %service_*.
- Add systemd as a runtime dependency, as the package's main
  purpose is the timer unit.</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1583236800">- Require the python3 certbot package instead of the python2 one.</changelog>
</package>
<package pkgid="4dc54266f1d2efc6a1f8941506043a5de7bcf831c8b8406716f4aa0c9ab64d49" name="certbot-systemd-timer" arch="src">
  <version epoch="0" ver="0.0" rel="bp154.2.1"/>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1536148800">- optional systemd timer to handle certbot certificate renewals
  borrowed from Fedora</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1538740800">- specfile now respects SUSE installation process</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553256000">- Use noun phrase in summary.
- Add systemd-rpm-macros BuildRequirement for %service_*.
- Add systemd as a runtime dependency, as the package's main
  purpose is the timer unit.</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1583236800">- Require the python3 certbot package instead of the python2 one.</changelog>
</package>
<package pkgid="e514372734d761b53261b70ac5a8dff824a24e8fb6486b6db4844986a941ef1e" name="chafa" arch="aarch64">
  <version epoch="0" ver="1.8.0" rel="bp154.3.3.1"/>
  <changelog author="mvetter@suse.com" date="1549627200">- Initial package chafa 1.0.1 for openSUSE</changelog>
  <changelog author="mvetter@suse.com" date="1565006400">- Update to 1.2.0:
  * Added --dither, --dither-grain and --dither-intensity options.
    These allow for sub-cell dithering in quantized modes (none,
    2, 16, 240 and 256). Especially beneficial when used with
  - p off.
  * Added API for ordered and diffusion-based dithering in quantization.
  * Added API support for multiple 8bpc pixel modes: RGB, BGR, RGBA,
    BGRA, ARGB, ABGR with either premultiplied or unassociated alpha channels.
  * Smooth scaling is now done internally, meaning libchafa
    consumers no longer need to prescale images.
  * Implemented a machine learning tool that can generate custom
    fonts for efficient image reproduction from a provided dataset.
    This is left uninstalled since it's still experimental
  * Throughput improvements:
    + GIF animations now start playing instantly.
    + GIF CPU overhead reduced by 75%, peak memory use down 95%-99% (!).
    + XWD common case CPU overhead down 60-70%, peak memory down 70%.
    + Additional halving of CPU overhead in 240- and 256-color modes.
    + Streamlined pixel pipeline for better parallelization.
  * Installation instructions:
    + New: Guix (Guy Fleury Iteriteka).
    + New: openSUSE (@jubalh).
  * Bug fixes:
    + [unfiled] Certain SVGs had transparency replaced with a white background (nemo).
    + [unfiled] -lm dependency belongs in libchafa, not frontend.</changelog>
  <changelog author="mvetter@suse.com" date="1566302400">- Update to 1.2.1:
  * Detect kitty and mlterm virtual terminals and apply optimal
    defaults accordingly
  * Make Automake build more strict and fix a few compatibility nits
  * Fix #30 - Failed to build on hurd-i386
  * Fix crash on certain broken GIFs</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566648000">- Update descriptions.
- Avoid double-shipping documentation, and make docs noarch.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1583323200">- Update to 1.2.2:
  * Fix #34 Cannot compile example</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1585828800">- Update to 1.4.0:
  * Added sixel graphics support. Chafa will automatically produce sixels
    if the connected terminal supports it. It can also be forced using the
    new -f or --format flag. This is a new implementation written from the
    ground up to maximize throughput.
  * Added the --glyph-file option, which loads glyph-symbol mappings from
    any file format supported by FreeType (TTF, PCF, etc). This allows for
    custom font support and improved symbol selection.
  * Added the --speed option specifying animation speed. It accepts a
    unitless multiplier, a specific number of frames per second, or max
    for maximum throughput.
  * There are now two ways to assign colors to symbol cells. Formerly,
    this was done based on the average color of the covered area. The new
    default is to use the median color, which produces sharper edges,
    but is slightly more prone to high-frequency noise. The new option
  - -color-extractor selects the method to employ.
  * When displaying multiple files, the default delay between files has
    been changed from three seconds to zero. Animations will still play
    through once. This can be overridden on the chafa command line with -d
    or --duration.
  * Minor tweaks to built-in symbols.
  Performance improvements:
  * Halved pixel storage requirements from 64 bits to 32 bits,
    resulting in significant memory savings.
  * Now builds with -ffast-math, yielding a big speedup for DIN99d.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1586692800">- Update to 1.4.1:
  * Added configure option --disable-rpath. This allows packagers to
    prevent the hard-coded library search path from being embedded in
    the chafa command-line tool (Mo Zhou, #39).
  * Added defaults for the yaft terminal.
  Bug fixes:
  * #40 - Fails to build on hurd-i386 + other i386 (reported by Mo
    Zhou).
  * [unfiled] - Rare failed assert with mostly transparent sixel image
    (reported by Reddit user spryfigure).
  * [unfiled] - Minor typo in function docstring.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1610712000">- Update to 1.6.0:
  * Added support for fullwidth symbols that take up two character
    cells. These are common in East Asian scripts. Single-cell and
    double-cell symbols can be mixed, and -f symbols mode will use
    both if possible.
  * New symbol tags: alpha, digit, alnum, narrow, wide, ambiguous,
    ugly, bad. "Ambiguous" symbols have uncertain widths and may
    render poorly in some terminals. "Ugly" denotes symbols that
    are unsuitable for Chafa's cell-based graphics (multicolor
    emoji, ideographic descriptors, etc). "Bad" is a superset of
    these two categories. Bad symbols are always excluded unless
    explicitly enabled with e.g. CHAFA_SYMBOL_TAG_BAD (--symbols
    +bad in the frontend).
  * The font loader (--glyph-file option) now does a better job
    with proportional fonts.
  * Added options for controlling lossless optimization of output.
    Currently, attribute reuse and character repetition (REP
    sequence) are implemented.
  * Added -O option to the frontend. This controls the optimization
    level.
  * Added a simple abstraction layer for terminal control sequences
    (ChafaTermInfo and ChafaTermDb). This allows for improved
    terminal support.
  * FbTerm is now supported with TERM=fbterm in the environment.
  * Bug fixes:
  - #43 Fix signal handler.
  - [unfiled] Crash when invalid font paths were passed on command line.
  - [unfiled] Small typo in fontgen's READM).
  - [unfiled] Bad contrast adjustment in images with transparency.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1623067200">- Update to 1.6.1:
  * Add NOCONFIGURE variable to autogen.sh to skip configure
  Bug fixes:
  * #50 SIGBUS while loading huge GIFs
  * #52 Produces small glitches in output with some images
  * #54 Haiku port fails on 32bit
  * [unfiled] Exclude RTL code points that could break the output.
  * [unfiled] Apple Terminal lacks truecolor support, so make it
    default to 256 colors
  * [unfiled] Fix typo affecting middle dot symbol.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1630497600">- Update to 1.8.0:
  * Added basic support for the Kitty and iTerm2 graphics protocols.
    These are enabled automatically when corresponding terminal support
    is detected, or manually with -f kitty or -f iterm.
  * Implemented an 8-color mode, selectable with -c 8
  * Implemented a foreground-only switch, --fg-only. This produces
    character art using foreground colors only, and will avoid
    modifying or resetting the background color. Looks best with
    non-contiguous symbols (e.g. ascii).
  * Added builtins for Japanese kana fullwidth symbols. These can
    now be used without loading any external fonts (try -c none --symbols wide).
  * Added builtins for legacy computer symbols (mainly wedges and
    sextant blocks). These were widely used in PETSCII and Teletext,
    and can be enabled using --symbols or --fill with their respective
    tags: legacy, wedge and sextant (@hodefoting).
  * Since there is a growing number of builtin symbols that may not
    be available everywhere, the default selection has been restricted
    to the widely supported block and border sets.
  * If possible, we now select a visually blank character from the
    specified symbol/fill sets instead of hardcoding ASCII space for
    featureless cells. One practical upshot of this is that the constant-width
    braille range can be used to produce consistent images even in contexts
    with variable-width fonts. U+2800 (BRAILLE PATTERN BLANK) will then be used in blank cells.
  * Improved terminal size detection when used with pipelines and redirection.
    This should now produce an image properly sized for your terminal:
    curl https://i.imgur.com/WFDEFVg.jpeg | chafa - | tee out
  * ChafaCanvas gained API functions for programmatically getting and
    setting character cell contents. These are used in a new example
    in tests/ncurses.c demonstrating ncurses integration.
  * Made --disable-rpath the default in order to simplify packaging.
  * Added a HACKING file featuring a much needed release checklist.
  * Improved terminal support:
    + Ctx will now use optimizing REP sequences at high -O levels.
    + foot now defaults to sixels.
    + iTerm2 now defaults to the iTerm2 protocol.
    + Kitty now defaults to the Kitty protocol.
    + st now defaults to truecolor symbols.
  * Bug fixes:
    + #44 Missing error handling on stdout writes.
    + [unfiled] Solid symbols erroneously replaced by fill in FGBG mode.
    + [unfiled] Integer formatter was not using fast path for 8-bit values.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1651147200">- bsc#1198965 (CVE-2022-1507): Fix NULL pointer deref in gif_internal_decode_frame
  * Add chafa-CVE-2022-1507.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1655294400">- bsc#1200510 (CVE-2022-2061): Fix heap based buffer overflow
  in lzw_decode
  * Add chafa-CVE-2022-2061.patch</changelog>
</package>
<package pkgid="dbd2efefc597253328804d5cd6bba9640a490f5e39d777b84426ab4e6f755b3b" name="chafa" arch="i586">
  <version epoch="0" ver="1.8.0" rel="bp154.3.3.1"/>
  <changelog author="mvetter@suse.com" date="1549627200">- Initial package chafa 1.0.1 for openSUSE</changelog>
  <changelog author="mvetter@suse.com" date="1565006400">- Update to 1.2.0:
  * Added --dither, --dither-grain and --dither-intensity options.
    These allow for sub-cell dithering in quantized modes (none,
    2, 16, 240 and 256). Especially beneficial when used with
  - p off.
  * Added API for ordered and diffusion-based dithering in quantization.
  * Added API support for multiple 8bpc pixel modes: RGB, BGR, RGBA,
    BGRA, ARGB, ABGR with either premultiplied or unassociated alpha channels.
  * Smooth scaling is now done internally, meaning libchafa
    consumers no longer need to prescale images.
  * Implemented a machine learning tool that can generate custom
    fonts for efficient image reproduction from a provided dataset.
    This is left uninstalled since it's still experimental
  * Throughput improvements:
    + GIF animations now start playing instantly.
    + GIF CPU overhead reduced by 75%, peak memory use down 95%-99% (!).
    + XWD common case CPU overhead down 60-70%, peak memory down 70%.
    + Additional halving of CPU overhead in 240- and 256-color modes.
    + Streamlined pixel pipeline for better parallelization.
  * Installation instructions:
    + New: Guix (Guy Fleury Iteriteka).
    + New: openSUSE (@jubalh).
  * Bug fixes:
    + [unfiled] Certain SVGs had transparency replaced with a white background (nemo).
    + [unfiled] -lm dependency belongs in libchafa, not frontend.</changelog>
  <changelog author="mvetter@suse.com" date="1566302400">- Update to 1.2.1:
  * Detect kitty and mlterm virtual terminals and apply optimal
    defaults accordingly
  * Make Automake build more strict and fix a few compatibility nits
  * Fix #30 - Failed to build on hurd-i386
  * Fix crash on certain broken GIFs</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566648000">- Update descriptions.
- Avoid double-shipping documentation, and make docs noarch.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1583323200">- Update to 1.2.2:
  * Fix #34 Cannot compile example</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1585828800">- Update to 1.4.0:
  * Added sixel graphics support. Chafa will automatically produce sixels
    if the connected terminal supports it. It can also be forced using the
    new -f or --format flag. This is a new implementation written from the
    ground up to maximize throughput.
  * Added the --glyph-file option, which loads glyph-symbol mappings from
    any file format supported by FreeType (TTF, PCF, etc). This allows for
    custom font support and improved symbol selection.
  * Added the --speed option specifying animation speed. It accepts a
    unitless multiplier, a specific number of frames per second, or max
    for maximum throughput.
  * There are now two ways to assign colors to symbol cells. Formerly,
    this was done based on the average color of the covered area. The new
    default is to use the median color, which produces sharper edges,
    but is slightly more prone to high-frequency noise. The new option
  - -color-extractor selects the method to employ.
  * When displaying multiple files, the default delay between files has
    been changed from three seconds to zero. Animations will still play
    through once. This can be overridden on the chafa command line with -d
    or --duration.
  * Minor tweaks to built-in symbols.
  Performance improvements:
  * Halved pixel storage requirements from 64 bits to 32 bits,
    resulting in significant memory savings.
  * Now builds with -ffast-math, yielding a big speedup for DIN99d.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1586692800">- Update to 1.4.1:
  * Added configure option --disable-rpath. This allows packagers to
    prevent the hard-coded library search path from being embedded in
    the chafa command-line tool (Mo Zhou, #39).
  * Added defaults for the yaft terminal.
  Bug fixes:
  * #40 - Fails to build on hurd-i386 + other i386 (reported by Mo
    Zhou).
  * [unfiled] - Rare failed assert with mostly transparent sixel image
    (reported by Reddit user spryfigure).
  * [unfiled] - Minor typo in function docstring.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1610712000">- Update to 1.6.0:
  * Added support for fullwidth symbols that take up two character
    cells. These are common in East Asian scripts. Single-cell and
    double-cell symbols can be mixed, and -f symbols mode will use
    both if possible.
  * New symbol tags: alpha, digit, alnum, narrow, wide, ambiguous,
    ugly, bad. "Ambiguous" symbols have uncertain widths and may
    render poorly in some terminals. "Ugly" denotes symbols that
    are unsuitable for Chafa's cell-based graphics (multicolor
    emoji, ideographic descriptors, etc). "Bad" is a superset of
    these two categories. Bad symbols are always excluded unless
    explicitly enabled with e.g. CHAFA_SYMBOL_TAG_BAD (--symbols
    +bad in the frontend).
  * The font loader (--glyph-file option) now does a better job
    with proportional fonts.
  * Added options for controlling lossless optimization of output.
    Currently, attribute reuse and character repetition (REP
    sequence) are implemented.
  * Added -O option to the frontend. This controls the optimization
    level.
  * Added a simple abstraction layer for terminal control sequences
    (ChafaTermInfo and ChafaTermDb). This allows for improved
    terminal support.
  * FbTerm is now supported with TERM=fbterm in the environment.
  * Bug fixes:
  - #43 Fix signal handler.
  - [unfiled] Crash when invalid font paths were passed on command line.
  - [unfiled] Small typo in fontgen's READM).
  - [unfiled] Bad contrast adjustment in images with transparency.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1623067200">- Update to 1.6.1:
  * Add NOCONFIGURE variable to autogen.sh to skip configure
  Bug fixes:
  * #50 SIGBUS while loading huge GIFs
  * #52 Produces small glitches in output with some images
  * #54 Haiku port fails on 32bit
  * [unfiled] Exclude RTL code points that could break the output.
  * [unfiled] Apple Terminal lacks truecolor support, so make it
    default to 256 colors
  * [unfiled] Fix typo affecting middle dot symbol.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1630497600">- Update to 1.8.0:
  * Added basic support for the Kitty and iTerm2 graphics protocols.
    These are enabled automatically when corresponding terminal support
    is detected, or manually with -f kitty or -f iterm.
  * Implemented an 8-color mode, selectable with -c 8
  * Implemented a foreground-only switch, --fg-only. This produces
    character art using foreground colors only, and will avoid
    modifying or resetting the background color. Looks best with
    non-contiguous symbols (e.g. ascii).
  * Added builtins for Japanese kana fullwidth symbols. These can
    now be used without loading any external fonts (try -c none --symbols wide).
  * Added builtins for legacy computer symbols (mainly wedges and
    sextant blocks). These were widely used in PETSCII and Teletext,
    and can be enabled using --symbols or --fill with their respective
    tags: legacy, wedge and sextant (@hodefoting).
  * Since there is a growing number of builtin symbols that may not
    be available everywhere, the default selection has been restricted
    to the widely supported block and border sets.
  * If possible, we now select a visually blank character from the
    specified symbol/fill sets instead of hardcoding ASCII space for
    featureless cells. One practical upshot of this is that the constant-width
    braille range can be used to produce consistent images even in contexts
    with variable-width fonts. U+2800 (BRAILLE PATTERN BLANK) will then be used in blank cells.
  * Improved terminal size detection when used with pipelines and redirection.
    This should now produce an image properly sized for your terminal:
    curl https://i.imgur.com/WFDEFVg.jpeg | chafa - | tee out
  * ChafaCanvas gained API functions for programmatically getting and
    setting character cell contents. These are used in a new example
    in tests/ncurses.c demonstrating ncurses integration.
  * Made --disable-rpath the default in order to simplify packaging.
  * Added a HACKING file featuring a much needed release checklist.
  * Improved terminal support:
    + Ctx will now use optimizing REP sequences at high -O levels.
    + foot now defaults to sixels.
    + iTerm2 now defaults to the iTerm2 protocol.
    + Kitty now defaults to the Kitty protocol.
    + st now defaults to truecolor symbols.
  * Bug fixes:
    + #44 Missing error handling on stdout writes.
    + [unfiled] Solid symbols erroneously replaced by fill in FGBG mode.
    + [unfiled] Integer formatter was not using fast path for 8-bit values.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1651147200">- bsc#1198965 (CVE-2022-1507): Fix NULL pointer deref in gif_internal_decode_frame
  * Add chafa-CVE-2022-1507.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1655294400">- bsc#1200510 (CVE-2022-2061): Fix heap based buffer overflow
  in lzw_decode
  * Add chafa-CVE-2022-2061.patch</changelog>
</package>
<package pkgid="597f54e6a8e8191139edbbc60ee64b25ed2de752d1793278a9e41eec03df3c60" name="chafa" arch="ppc64le">
  <version epoch="0" ver="1.8.0" rel="bp154.3.3.1"/>
  <changelog author="mvetter@suse.com" date="1549627200">- Initial package chafa 1.0.1 for openSUSE</changelog>
  <changelog author="mvetter@suse.com" date="1565006400">- Update to 1.2.0:
  * Added --dither, --dither-grain and --dither-intensity options.
    These allow for sub-cell dithering in quantized modes (none,
    2, 16, 240 and 256). Especially beneficial when used with
  - p off.
  * Added API for ordered and diffusion-based dithering in quantization.
  * Added API support for multiple 8bpc pixel modes: RGB, BGR, RGBA,
    BGRA, ARGB, ABGR with either premultiplied or unassociated alpha channels.
  * Smooth scaling is now done internally, meaning libchafa
    consumers no longer need to prescale images.
  * Implemented a machine learning tool that can generate custom
    fonts for efficient image reproduction from a provided dataset.
    This is left uninstalled since it's still experimental
  * Throughput improvements:
    + GIF animations now start playing instantly.
    + GIF CPU overhead reduced by 75%, peak memory use down 95%-99% (!).
    + XWD common case CPU overhead down 60-70%, peak memory down 70%.
    + Additional halving of CPU overhead in 240- and 256-color modes.
    + Streamlined pixel pipeline for better parallelization.
  * Installation instructions:
    + New: Guix (Guy Fleury Iteriteka).
    + New: openSUSE (@jubalh).
  * Bug fixes:
    + [unfiled] Certain SVGs had transparency replaced with a white background (nemo).
    + [unfiled] -lm dependency belongs in libchafa, not frontend.</changelog>
  <changelog author="mvetter@suse.com" date="1566302400">- Update to 1.2.1:
  * Detect kitty and mlterm virtual terminals and apply optimal
    defaults accordingly
  * Make Automake build more strict and fix a few compatibility nits
  * Fix #30 - Failed to build on hurd-i386
  * Fix crash on certain broken GIFs</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566648000">- Update descriptions.
- Avoid double-shipping documentation, and make docs noarch.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1583323200">- Update to 1.2.2:
  * Fix #34 Cannot compile example</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1585828800">- Update to 1.4.0:
  * Added sixel graphics support. Chafa will automatically produce sixels
    if the connected terminal supports it. It can also be forced using the
    new -f or --format flag. This is a new implementation written from the
    ground up to maximize throughput.
  * Added the --glyph-file option, which loads glyph-symbol mappings from
    any file format supported by FreeType (TTF, PCF, etc). This allows for
    custom font support and improved symbol selection.
  * Added the --speed option specifying animation speed. It accepts a
    unitless multiplier, a specific number of frames per second, or max
    for maximum throughput.
  * There are now two ways to assign colors to symbol cells. Formerly,
    this was done based on the average color of the covered area. The new
    default is to use the median color, which produces sharper edges,
    but is slightly more prone to high-frequency noise. The new option
  - -color-extractor selects the method to employ.
  * When displaying multiple files, the default delay between files has
    been changed from three seconds to zero. Animations will still play
    through once. This can be overridden on the chafa command line with -d
    or --duration.
  * Minor tweaks to built-in symbols.
  Performance improvements:
  * Halved pixel storage requirements from 64 bits to 32 bits,
    resulting in significant memory savings.
  * Now builds with -ffast-math, yielding a big speedup for DIN99d.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1586692800">- Update to 1.4.1:
  * Added configure option --disable-rpath. This allows packagers to
    prevent the hard-coded library search path from being embedded in
    the chafa command-line tool (Mo Zhou, #39).
  * Added defaults for the yaft terminal.
  Bug fixes:
  * #40 - Fails to build on hurd-i386 + other i386 (reported by Mo
    Zhou).
  * [unfiled] - Rare failed assert with mostly transparent sixel image
    (reported by Reddit user spryfigure).
  * [unfiled] - Minor typo in function docstring.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1610712000">- Update to 1.6.0:
  * Added support for fullwidth symbols that take up two character
    cells. These are common in East Asian scripts. Single-cell and
    double-cell symbols can be mixed, and -f symbols mode will use
    both if possible.
  * New symbol tags: alpha, digit, alnum, narrow, wide, ambiguous,
    ugly, bad. "Ambiguous" symbols have uncertain widths and may
    render poorly in some terminals. "Ugly" denotes symbols that
    are unsuitable for Chafa's cell-based graphics (multicolor
    emoji, ideographic descriptors, etc). "Bad" is a superset of
    these two categories. Bad symbols are always excluded unless
    explicitly enabled with e.g. CHAFA_SYMBOL_TAG_BAD (--symbols
    +bad in the frontend).
  * The font loader (--glyph-file option) now does a better job
    with proportional fonts.
  * Added options for controlling lossless optimization of output.
    Currently, attribute reuse and character repetition (REP
    sequence) are implemented.
  * Added -O option to the frontend. This controls the optimization
    level.
  * Added a simple abstraction layer for terminal control sequences
    (ChafaTermInfo and ChafaTermDb). This allows for improved
    terminal support.
  * FbTerm is now supported with TERM=fbterm in the environment.
  * Bug fixes:
  - #43 Fix signal handler.
  - [unfiled] Crash when invalid font paths were passed on command line.
  - [unfiled] Small typo in fontgen's READM).
  - [unfiled] Bad contrast adjustment in images with transparency.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1623067200">- Update to 1.6.1:
  * Add NOCONFIGURE variable to autogen.sh to skip configure
  Bug fixes:
  * #50 SIGBUS while loading huge GIFs
  * #52 Produces small glitches in output with some images
  * #54 Haiku port fails on 32bit
  * [unfiled] Exclude RTL code points that could break the output.
  * [unfiled] Apple Terminal lacks truecolor support, so make it
    default to 256 colors
  * [unfiled] Fix typo affecting middle dot symbol.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1630497600">- Update to 1.8.0:
  * Added basic support for the Kitty and iTerm2 graphics protocols.
    These are enabled automatically when corresponding terminal support
    is detected, or manually with -f kitty or -f iterm.
  * Implemented an 8-color mode, selectable with -c 8
  * Implemented a foreground-only switch, --fg-only. This produces
    character art using foreground colors only, and will avoid
    modifying or resetting the background color. Looks best with
    non-contiguous symbols (e.g. ascii).
  * Added builtins for Japanese kana fullwidth symbols. These can
    now be used without loading any external fonts (try -c none --symbols wide).
  * Added builtins for legacy computer symbols (mainly wedges and
    sextant blocks). These were widely used in PETSCII and Teletext,
    and can be enabled using --symbols or --fill with their respective
    tags: legacy, wedge and sextant (@hodefoting).
  * Since there is a growing number of builtin symbols that may not
    be available everywhere, the default selection has been restricted
    to the widely supported block and border sets.
  * If possible, we now select a visually blank character from the
    specified symbol/fill sets instead of hardcoding ASCII space for
    featureless cells. One practical upshot of this is that the constant-width
    braille range can be used to produce consistent images even in contexts
    with variable-width fonts. U+2800 (BRAILLE PATTERN BLANK) will then be used in blank cells.
  * Improved terminal size detection when used with pipelines and redirection.
    This should now produce an image properly sized for your terminal:
    curl https://i.imgur.com/WFDEFVg.jpeg | chafa - | tee out
  * ChafaCanvas gained API functions for programmatically getting and
    setting character cell contents. These are used in a new example
    in tests/ncurses.c demonstrating ncurses integration.
  * Made --disable-rpath the default in order to simplify packaging.
  * Added a HACKING file featuring a much needed release checklist.
  * Improved terminal support:
    + Ctx will now use optimizing REP sequences at high -O levels.
    + foot now defaults to sixels.
    + iTerm2 now defaults to the iTerm2 protocol.
    + Kitty now defaults to the Kitty protocol.
    + st now defaults to truecolor symbols.
  * Bug fixes:
    + #44 Missing error handling on stdout writes.
    + [unfiled] Solid symbols erroneously replaced by fill in FGBG mode.
    + [unfiled] Integer formatter was not using fast path for 8-bit values.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1651147200">- bsc#1198965 (CVE-2022-1507): Fix NULL pointer deref in gif_internal_decode_frame
  * Add chafa-CVE-2022-1507.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1655294400">- bsc#1200510 (CVE-2022-2061): Fix heap based buffer overflow
  in lzw_decode
  * Add chafa-CVE-2022-2061.patch</changelog>
</package>
<package pkgid="410bd8c036def99bd559cfd9afeac7bc5054af9c5cc818bc96020a67415e8138" name="chafa" arch="s390x">
  <version epoch="0" ver="1.8.0" rel="bp154.3.3.1"/>
  <changelog author="mvetter@suse.com" date="1549627200">- Initial package chafa 1.0.1 for openSUSE</changelog>
  <changelog author="mvetter@suse.com" date="1565006400">- Update to 1.2.0:
  * Added --dither, --dither-grain and --dither-intensity options.
    These allow for sub-cell dithering in quantized modes (none,
    2, 16, 240 and 256). Especially beneficial when used with
  - p off.
  * Added API for ordered and diffusion-based dithering in quantization.
  * Added API support for multiple 8bpc pixel modes: RGB, BGR, RGBA,
    BGRA, ARGB, ABGR with either premultiplied or unassociated alpha channels.
  * Smooth scaling is now done internally, meaning libchafa
    consumers no longer need to prescale images.
  * Implemented a machine learning tool that can generate custom
    fonts for efficient image reproduction from a provided dataset.
    This is left uninstalled since it's still experimental
  * Throughput improvements:
    + GIF animations now start playing instantly.
    + GIF CPU overhead reduced by 75%, peak memory use down 95%-99% (!).
    + XWD common case CPU overhead down 60-70%, peak memory down 70%.
    + Additional halving of CPU overhead in 240- and 256-color modes.
    + Streamlined pixel pipeline for better parallelization.
  * Installation instructions:
    + New: Guix (Guy Fleury Iteriteka).
    + New: openSUSE (@jubalh).
  * Bug fixes:
    + [unfiled] Certain SVGs had transparency replaced with a white background (nemo).
    + [unfiled] -lm dependency belongs in libchafa, not frontend.</changelog>
  <changelog author="mvetter@suse.com" date="1566302400">- Update to 1.2.1:
  * Detect kitty and mlterm virtual terminals and apply optimal
    defaults accordingly
  * Make Automake build more strict and fix a few compatibility nits
  * Fix #30 - Failed to build on hurd-i386
  * Fix crash on certain broken GIFs</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566648000">- Update descriptions.
- Avoid double-shipping documentation, and make docs noarch.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1583323200">- Update to 1.2.2:
  * Fix #34 Cannot compile example</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1585828800">- Update to 1.4.0:
  * Added sixel graphics support. Chafa will automatically produce sixels
    if the connected terminal supports it. It can also be forced using the
    new -f or --format flag. This is a new implementation written from the
    ground up to maximize throughput.
  * Added the --glyph-file option, which loads glyph-symbol mappings from
    any file format supported by FreeType (TTF, PCF, etc). This allows for
    custom font support and improved symbol selection.
  * Added the --speed option specifying animation speed. It accepts a
    unitless multiplier, a specific number of frames per second, or max
    for maximum throughput.
  * There are now two ways to assign colors to symbol cells. Formerly,
    this was done based on the average color of the covered area. The new
    default is to use the median color, which produces sharper edges,
    but is slightly more prone to high-frequency noise. The new option
  - -color-extractor selects the method to employ.
  * When displaying multiple files, the default delay between files has
    been changed from three seconds to zero. Animations will still play
    through once. This can be overridden on the chafa command line with -d
    or --duration.
  * Minor tweaks to built-in symbols.
  Performance improvements:
  * Halved pixel storage requirements from 64 bits to 32 bits,
    resulting in significant memory savings.
  * Now builds with -ffast-math, yielding a big speedup for DIN99d.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1586692800">- Update to 1.4.1:
  * Added configure option --disable-rpath. This allows packagers to
    prevent the hard-coded library search path from being embedded in
    the chafa command-line tool (Mo Zhou, #39).
  * Added defaults for the yaft terminal.
  Bug fixes:
  * #40 - Fails to build on hurd-i386 + other i386 (reported by Mo
    Zhou).
  * [unfiled] - Rare failed assert with mostly transparent sixel image
    (reported by Reddit user spryfigure).
  * [unfiled] - Minor typo in function docstring.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1610712000">- Update to 1.6.0:
  * Added support for fullwidth symbols that take up two character
    cells. These are common in East Asian scripts. Single-cell and
    double-cell symbols can be mixed, and -f symbols mode will use
    both if possible.
  * New symbol tags: alpha, digit, alnum, narrow, wide, ambiguous,
    ugly, bad. "Ambiguous" symbols have uncertain widths and may
    render poorly in some terminals. "Ugly" denotes symbols that
    are unsuitable for Chafa's cell-based graphics (multicolor
    emoji, ideographic descriptors, etc). "Bad" is a superset of
    these two categories. Bad symbols are always excluded unless
    explicitly enabled with e.g. CHAFA_SYMBOL_TAG_BAD (--symbols
    +bad in the frontend).
  * The font loader (--glyph-file option) now does a better job
    with proportional fonts.
  * Added options for controlling lossless optimization of output.
    Currently, attribute reuse and character repetition (REP
    sequence) are implemented.
  * Added -O option to the frontend. This controls the optimization
    level.
  * Added a simple abstraction layer for terminal control sequences
    (ChafaTermInfo and ChafaTermDb). This allows for improved
    terminal support.
  * FbTerm is now supported with TERM=fbterm in the environment.
  * Bug fixes:
  - #43 Fix signal handler.
  - [unfiled] Crash when invalid font paths were passed on command line.
  - [unfiled] Small typo in fontgen's READM).
  - [unfiled] Bad contrast adjustment in images with transparency.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1623067200">- Update to 1.6.1:
  * Add NOCONFIGURE variable to autogen.sh to skip configure
  Bug fixes:
  * #50 SIGBUS while loading huge GIFs
  * #52 Produces small glitches in output with some images
  * #54 Haiku port fails on 32bit
  * [unfiled] Exclude RTL code points that could break the output.
  * [unfiled] Apple Terminal lacks truecolor support, so make it
    default to 256 colors
  * [unfiled] Fix typo affecting middle dot symbol.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1630497600">- Update to 1.8.0:
  * Added basic support for the Kitty and iTerm2 graphics protocols.
    These are enabled automatically when corresponding terminal support
    is detected, or manually with -f kitty or -f iterm.
  * Implemented an 8-color mode, selectable with -c 8
  * Implemented a foreground-only switch, --fg-only. This produces
    character art using foreground colors only, and will avoid
    modifying or resetting the background color. Looks best with
    non-contiguous symbols (e.g. ascii).
  * Added builtins for Japanese kana fullwidth symbols. These can
    now be used without loading any external fonts (try -c none --symbols wide).
  * Added builtins for legacy computer symbols (mainly wedges and
    sextant blocks). These were widely used in PETSCII and Teletext,
    and can be enabled using --symbols or --fill with their respective
    tags: legacy, wedge and sextant (@hodefoting).
  * Since there is a growing number of builtin symbols that may not
    be available everywhere, the default selection has been restricted
    to the widely supported block and border sets.
  * If possible, we now select a visually blank character from the
    specified symbol/fill sets instead of hardcoding ASCII space for
    featureless cells. One practical upshot of this is that the constant-width
    braille range can be used to produce consistent images even in contexts
    with variable-width fonts. U+2800 (BRAILLE PATTERN BLANK) will then be used in blank cells.
  * Improved terminal size detection when used with pipelines and redirection.
    This should now produce an image properly sized for your terminal:
    curl https://i.imgur.com/WFDEFVg.jpeg | chafa - | tee out
  * ChafaCanvas gained API functions for programmatically getting and
    setting character cell contents. These are used in a new example
    in tests/ncurses.c demonstrating ncurses integration.
  * Made --disable-rpath the default in order to simplify packaging.
  * Added a HACKING file featuring a much needed release checklist.
  * Improved terminal support:
    + Ctx will now use optimizing REP sequences at high -O levels.
    + foot now defaults to sixels.
    + iTerm2 now defaults to the iTerm2 protocol.
    + Kitty now defaults to the Kitty protocol.
    + st now defaults to truecolor symbols.
  * Bug fixes:
    + #44 Missing error handling on stdout writes.
    + [unfiled] Solid symbols erroneously replaced by fill in FGBG mode.
    + [unfiled] Integer formatter was not using fast path for 8-bit values.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1651147200">- bsc#1198965 (CVE-2022-1507): Fix NULL pointer deref in gif_internal_decode_frame
  * Add chafa-CVE-2022-1507.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1655294400">- bsc#1200510 (CVE-2022-2061): Fix heap based buffer overflow
  in lzw_decode
  * Add chafa-CVE-2022-2061.patch</changelog>
</package>
<package pkgid="3073c1e3570df71325059ed90c2d644af1ec03bae1dbde1d266404b140533db9" name="chafa" arch="src">
  <version epoch="0" ver="1.8.0" rel="bp154.3.3.1"/>
  <changelog author="mvetter@suse.com" date="1549627200">- Initial package chafa 1.0.1 for openSUSE</changelog>
  <changelog author="mvetter@suse.com" date="1565006400">- Update to 1.2.0:
  * Added --dither, --dither-grain and --dither-intensity options.
    These allow for sub-cell dithering in quantized modes (none,
    2, 16, 240 and 256). Especially beneficial when used with
  - p off.
  * Added API for ordered and diffusion-based dithering in quantization.
  * Added API support for multiple 8bpc pixel modes: RGB, BGR, RGBA,
    BGRA, ARGB, ABGR with either premultiplied or unassociated alpha channels.
  * Smooth scaling is now done internally, meaning libchafa
    consumers no longer need to prescale images.
  * Implemented a machine learning tool that can generate custom
    fonts for efficient image reproduction from a provided dataset.
    This is left uninstalled since it's still experimental
  * Throughput improvements:
    + GIF animations now start playing instantly.
    + GIF CPU overhead reduced by 75%, peak memory use down 95%-99% (!).
    + XWD common case CPU overhead down 60-70%, peak memory down 70%.
    + Additional halving of CPU overhead in 240- and 256-color modes.
    + Streamlined pixel pipeline for better parallelization.
  * Installation instructions:
    + New: Guix (Guy Fleury Iteriteka).
    + New: openSUSE (@jubalh).
  * Bug fixes:
    + [unfiled] Certain SVGs had transparency replaced with a white background (nemo).
    + [unfiled] -lm dependency belongs in libchafa, not frontend.</changelog>
  <changelog author="mvetter@suse.com" date="1566302400">- Update to 1.2.1:
  * Detect kitty and mlterm virtual terminals and apply optimal
    defaults accordingly
  * Make Automake build more strict and fix a few compatibility nits
  * Fix #30 - Failed to build on hurd-i386
  * Fix crash on certain broken GIFs</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566648000">- Update descriptions.
- Avoid double-shipping documentation, and make docs noarch.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1583323200">- Update to 1.2.2:
  * Fix #34 Cannot compile example</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1585828800">- Update to 1.4.0:
  * Added sixel graphics support. Chafa will automatically produce sixels
    if the connected terminal supports it. It can also be forced using the
    new -f or --format flag. This is a new implementation written from the
    ground up to maximize throughput.
  * Added the --glyph-file option, which loads glyph-symbol mappings from
    any file format supported by FreeType (TTF, PCF, etc). This allows for
    custom font support and improved symbol selection.
  * Added the --speed option specifying animation speed. It accepts a
    unitless multiplier, a specific number of frames per second, or max
    for maximum throughput.
  * There are now two ways to assign colors to symbol cells. Formerly,
    this was done based on the average color of the covered area. The new
    default is to use the median color, which produces sharper edges,
    but is slightly more prone to high-frequency noise. The new option
  - -color-extractor selects the method to employ.
  * When displaying multiple files, the default delay between files has
    been changed from three seconds to zero. Animations will still play
    through once. This can be overridden on the chafa command line with -d
    or --duration.
  * Minor tweaks to built-in symbols.
  Performance improvements:
  * Halved pixel storage requirements from 64 bits to 32 bits,
    resulting in significant memory savings.
  * Now builds with -ffast-math, yielding a big speedup for DIN99d.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1586692800">- Update to 1.4.1:
  * Added configure option --disable-rpath. This allows packagers to
    prevent the hard-coded library search path from being embedded in
    the chafa command-line tool (Mo Zhou, #39).
  * Added defaults for the yaft terminal.
  Bug fixes:
  * #40 - Fails to build on hurd-i386 + other i386 (reported by Mo
    Zhou).
  * [unfiled] - Rare failed assert with mostly transparent sixel image
    (reported by Reddit user spryfigure).
  * [unfiled] - Minor typo in function docstring.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1610712000">- Update to 1.6.0:
  * Added support for fullwidth symbols that take up two character
    cells. These are common in East Asian scripts. Single-cell and
    double-cell symbols can be mixed, and -f symbols mode will use
    both if possible.
  * New symbol tags: alpha, digit, alnum, narrow, wide, ambiguous,
    ugly, bad. "Ambiguous" symbols have uncertain widths and may
    render poorly in some terminals. "Ugly" denotes symbols that
    are unsuitable for Chafa's cell-based graphics (multicolor
    emoji, ideographic descriptors, etc). "Bad" is a superset of
    these two categories. Bad symbols are always excluded unless
    explicitly enabled with e.g. CHAFA_SYMBOL_TAG_BAD (--symbols
    +bad in the frontend).
  * The font loader (--glyph-file option) now does a better job
    with proportional fonts.
  * Added options for controlling lossless optimization of output.
    Currently, attribute reuse and character repetition (REP
    sequence) are implemented.
  * Added -O option to the frontend. This controls the optimization
    level.
  * Added a simple abstraction layer for terminal control sequences
    (ChafaTermInfo and ChafaTermDb). This allows for improved
    terminal support.
  * FbTerm is now supported with TERM=fbterm in the environment.
  * Bug fixes:
  - #43 Fix signal handler.
  - [unfiled] Crash when invalid font paths were passed on command line.
  - [unfiled] Small typo in fontgen's READM).
  - [unfiled] Bad contrast adjustment in images with transparency.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1623067200">- Update to 1.6.1:
  * Add NOCONFIGURE variable to autogen.sh to skip configure
  Bug fixes:
  * #50 SIGBUS while loading huge GIFs
  * #52 Produces small glitches in output with some images
  * #54 Haiku port fails on 32bit
  * [unfiled] Exclude RTL code points that could break the output.
  * [unfiled] Apple Terminal lacks truecolor support, so make it
    default to 256 colors
  * [unfiled] Fix typo affecting middle dot symbol.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1630497600">- Update to 1.8.0:
  * Added basic support for the Kitty and iTerm2 graphics protocols.
    These are enabled automatically when corresponding terminal support
    is detected, or manually with -f kitty or -f iterm.
  * Implemented an 8-color mode, selectable with -c 8
  * Implemented a foreground-only switch, --fg-only. This produces
    character art using foreground colors only, and will avoid
    modifying or resetting the background color. Looks best with
    non-contiguous symbols (e.g. ascii).
  * Added builtins for Japanese kana fullwidth symbols. These can
    now be used without loading any external fonts (try -c none --symbols wide).
  * Added builtins for legacy computer symbols (mainly wedges and
    sextant blocks). These were widely used in PETSCII and Teletext,
    and can be enabled using --symbols or --fill with their respective
    tags: legacy, wedge and sextant (@hodefoting).
  * Since there is a growing number of builtin symbols that may not
    be available everywhere, the default selection has been restricted
    to the widely supported block and border sets.
  * If possible, we now select a visually blank character from the
    specified symbol/fill sets instead of hardcoding ASCII space for
    featureless cells. One practical upshot of this is that the constant-width
    braille range can be used to produce consistent images even in contexts
    with variable-width fonts. U+2800 (BRAILLE PATTERN BLANK) will then be used in blank cells.
  * Improved terminal size detection when used with pipelines and redirection.
    This should now produce an image properly sized for your terminal:
    curl https://i.imgur.com/WFDEFVg.jpeg | chafa - | tee out
  * ChafaCanvas gained API functions for programmatically getting and
    setting character cell contents. These are used in a new example
    in tests/ncurses.c demonstrating ncurses integration.
  * Made --disable-rpath the default in order to simplify packaging.
  * Added a HACKING file featuring a much needed release checklist.
  * Improved terminal support:
    + Ctx will now use optimizing REP sequences at high -O levels.
    + foot now defaults to sixels.
    + iTerm2 now defaults to the iTerm2 protocol.
    + Kitty now defaults to the Kitty protocol.
    + st now defaults to truecolor symbols.
  * Bug fixes:
    + #44 Missing error handling on stdout writes.
    + [unfiled] Solid symbols erroneously replaced by fill in FGBG mode.
    + [unfiled] Integer formatter was not using fast path for 8-bit values.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1651147200">- bsc#1198965 (CVE-2022-1507): Fix NULL pointer deref in gif_internal_decode_frame
  * Add chafa-CVE-2022-1507.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1655294400">- bsc#1200510 (CVE-2022-2061): Fix heap based buffer overflow
  in lzw_decode
  * Add chafa-CVE-2022-2061.patch</changelog>
</package>
<package pkgid="aaff96ab3ccd49f664ee8de4e83bf1cd9f7ebdb9d0fd942f08358e1a0553dc83" name="chafa" arch="x86_64">
  <version epoch="0" ver="1.8.0" rel="bp154.3.3.1"/>
  <changelog author="mvetter@suse.com" date="1549627200">- Initial package chafa 1.0.1 for openSUSE</changelog>
  <changelog author="mvetter@suse.com" date="1565006400">- Update to 1.2.0:
  * Added --dither, --dither-grain and --dither-intensity options.
    These allow for sub-cell dithering in quantized modes (none,
    2, 16, 240 and 256). Especially beneficial when used with
  - p off.
  * Added API for ordered and diffusion-based dithering in quantization.
  * Added API support for multiple 8bpc pixel modes: RGB, BGR, RGBA,
    BGRA, ARGB, ABGR with either premultiplied or unassociated alpha channels.
  * Smooth scaling is now done internally, meaning libchafa
    consumers no longer need to prescale images.
  * Implemented a machine learning tool that can generate custom
    fonts for efficient image reproduction from a provided dataset.
    This is left uninstalled since it's still experimental
  * Throughput improvements:
    + GIF animations now start playing instantly.
    + GIF CPU overhead reduced by 75%, peak memory use down 95%-99% (!).
    + XWD common case CPU overhead down 60-70%, peak memory down 70%.
    + Additional halving of CPU overhead in 240- and 256-color modes.
    + Streamlined pixel pipeline for better parallelization.
  * Installation instructions:
    + New: Guix (Guy Fleury Iteriteka).
    + New: openSUSE (@jubalh).
  * Bug fixes:
    + [unfiled] Certain SVGs had transparency replaced with a white background (nemo).
    + [unfiled] -lm dependency belongs in libchafa, not frontend.</changelog>
  <changelog author="mvetter@suse.com" date="1566302400">- Update to 1.2.1:
  * Detect kitty and mlterm virtual terminals and apply optimal
    defaults accordingly
  * Make Automake build more strict and fix a few compatibility nits
  * Fix #30 - Failed to build on hurd-i386
  * Fix crash on certain broken GIFs</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566648000">- Update descriptions.
- Avoid double-shipping documentation, and make docs noarch.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1583323200">- Update to 1.2.2:
  * Fix #34 Cannot compile example</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1585828800">- Update to 1.4.0:
  * Added sixel graphics support. Chafa will automatically produce sixels
    if the connected terminal supports it. It can also be forced using the
    new -f or --format flag. This is a new implementation written from the
    ground up to maximize throughput.
  * Added the --glyph-file option, which loads glyph-symbol mappings from
    any file format supported by FreeType (TTF, PCF, etc). This allows for
    custom font support and improved symbol selection.
  * Added the --speed option specifying animation speed. It accepts a
    unitless multiplier, a specific number of frames per second, or max
    for maximum throughput.
  * There are now two ways to assign colors to symbol cells. Formerly,
    this was done based on the average color of the covered area. The new
    default is to use the median color, which produces sharper edges,
    but is slightly more prone to high-frequency noise. The new option
  - -color-extractor selects the method to employ.
  * When displaying multiple files, the default delay between files has
    been changed from three seconds to zero. Animations will still play
    through once. This can be overridden on the chafa command line with -d
    or --duration.
  * Minor tweaks to built-in symbols.
  Performance improvements:
  * Halved pixel storage requirements from 64 bits to 32 bits,
    resulting in significant memory savings.
  * Now builds with -ffast-math, yielding a big speedup for DIN99d.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1586692800">- Update to 1.4.1:
  * Added configure option --disable-rpath. This allows packagers to
    prevent the hard-coded library search path from being embedded in
    the chafa command-line tool (Mo Zhou, #39).
  * Added defaults for the yaft terminal.
  Bug fixes:
  * #40 - Fails to build on hurd-i386 + other i386 (reported by Mo
    Zhou).
  * [unfiled] - Rare failed assert with mostly transparent sixel image
    (reported by Reddit user spryfigure).
  * [unfiled] - Minor typo in function docstring.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1610712000">- Update to 1.6.0:
  * Added support for fullwidth symbols that take up two character
    cells. These are common in East Asian scripts. Single-cell and
    double-cell symbols can be mixed, and -f symbols mode will use
    both if possible.
  * New symbol tags: alpha, digit, alnum, narrow, wide, ambiguous,
    ugly, bad. "Ambiguous" symbols have uncertain widths and may
    render poorly in some terminals. "Ugly" denotes symbols that
    are unsuitable for Chafa's cell-based graphics (multicolor
    emoji, ideographic descriptors, etc). "Bad" is a superset of
    these two categories. Bad symbols are always excluded unless
    explicitly enabled with e.g. CHAFA_SYMBOL_TAG_BAD (--symbols
    +bad in the frontend).
  * The font loader (--glyph-file option) now does a better job
    with proportional fonts.
  * Added options for controlling lossless optimization of output.
    Currently, attribute reuse and character repetition (REP
    sequence) are implemented.
  * Added -O option to the frontend. This controls the optimization
    level.
  * Added a simple abstraction layer for terminal control sequences
    (ChafaTermInfo and ChafaTermDb). This allows for improved
    terminal support.
  * FbTerm is now supported with TERM=fbterm in the environment.
  * Bug fixes:
  - #43 Fix signal handler.
  - [unfiled] Crash when invalid font paths were passed on command line.
  - [unfiled] Small typo in fontgen's READM).
  - [unfiled] Bad contrast adjustment in images with transparency.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1623067200">- Update to 1.6.1:
  * Add NOCONFIGURE variable to autogen.sh to skip configure
  Bug fixes:
  * #50 SIGBUS while loading huge GIFs
  * #52 Produces small glitches in output with some images
  * #54 Haiku port fails on 32bit
  * [unfiled] Exclude RTL code points that could break the output.
  * [unfiled] Apple Terminal lacks truecolor support, so make it
    default to 256 colors
  * [unfiled] Fix typo affecting middle dot symbol.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1630497600">- Update to 1.8.0:
  * Added basic support for the Kitty and iTerm2 graphics protocols.
    These are enabled automatically when corresponding terminal support
    is detected, or manually with -f kitty or -f iterm.
  * Implemented an 8-color mode, selectable with -c 8
  * Implemented a foreground-only switch, --fg-only. This produces
    character art using foreground colors only, and will avoid
    modifying or resetting the background color. Looks best with
    non-contiguous symbols (e.g. ascii).
  * Added builtins for Japanese kana fullwidth symbols. These can
    now be used without loading any external fonts (try -c none --symbols wide).
  * Added builtins for legacy computer symbols (mainly wedges and
    sextant blocks). These were widely used in PETSCII and Teletext,
    and can be enabled using --symbols or --fill with their respective
    tags: legacy, wedge and sextant (@hodefoting).
  * Since there is a growing number of builtin symbols that may not
    be available everywhere, the default selection has been restricted
    to the widely supported block and border sets.
  * If possible, we now select a visually blank character from the
    specified symbol/fill sets instead of hardcoding ASCII space for
    featureless cells. One practical upshot of this is that the constant-width
    braille range can be used to produce consistent images even in contexts
    with variable-width fonts. U+2800 (BRAILLE PATTERN BLANK) will then be used in blank cells.
  * Improved terminal size detection when used with pipelines and redirection.
    This should now produce an image properly sized for your terminal:
    curl https://i.imgur.com/WFDEFVg.jpeg | chafa - | tee out
  * ChafaCanvas gained API functions for programmatically getting and
    setting character cell contents. These are used in a new example
    in tests/ncurses.c demonstrating ncurses integration.
  * Made --disable-rpath the default in order to simplify packaging.
  * Added a HACKING file featuring a much needed release checklist.
  * Improved terminal support:
    + Ctx will now use optimizing REP sequences at high -O levels.
    + foot now defaults to sixels.
    + iTerm2 now defaults to the iTerm2 protocol.
    + Kitty now defaults to the Kitty protocol.
    + st now defaults to truecolor symbols.
  * Bug fixes:
    + #44 Missing error handling on stdout writes.
    + [unfiled] Solid symbols erroneously replaced by fill in FGBG mode.
    + [unfiled] Integer formatter was not using fast path for 8-bit values.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1651147200">- bsc#1198965 (CVE-2022-1507): Fix NULL pointer deref in gif_internal_decode_frame
  * Add chafa-CVE-2022-1507.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1655294400">- bsc#1200510 (CVE-2022-2061): Fix heap based buffer overflow
  in lzw_decode
  * Add chafa-CVE-2022-2061.patch</changelog>
</package>
<package pkgid="1042e5a805567bf94441085058efc7e423313b6aafde273d8b360ec6a1321fbb" name="chafa" arch="aarch64">
  <version epoch="0" ver="1.8.0" rel="bp154.3.8.1"/>
  <changelog author="mvetter@suse.com" date="1549627200">- Initial package chafa 1.0.1 for openSUSE</changelog>
  <changelog author="mvetter@suse.com" date="1565006400">- Update to 1.2.0:
  * Added --dither, --dither-grain and --dither-intensity options.
    These allow for sub-cell dithering in quantized modes (none,
    2, 16, 240 and 256). Especially beneficial when used with
  - p off.
  * Added API for ordered and diffusion-based dithering in quantization.
  * Added API support for multiple 8bpc pixel modes: RGB, BGR, RGBA,
    BGRA, ARGB, ABGR with either premultiplied or unassociated alpha channels.
  * Smooth scaling is now done internally, meaning libchafa
    consumers no longer need to prescale images.
  * Implemented a machine learning tool that can generate custom
    fonts for efficient image reproduction from a provided dataset.
    This is left uninstalled since it's still experimental
  * Throughput improvements:
    + GIF animations now start playing instantly.
    + GIF CPU overhead reduced by 75%, peak memory use down 95%-99% (!).
    + XWD common case CPU overhead down 60-70%, peak memory down 70%.
    + Additional halving of CPU overhead in 240- and 256-color modes.
    + Streamlined pixel pipeline for better parallelization.
  * Installation instructions:
    + New: Guix (Guy Fleury Iteriteka).
    + New: openSUSE (@jubalh).
  * Bug fixes:
    + [unfiled] Certain SVGs had transparency replaced with a white background (nemo).
    + [unfiled] -lm dependency belongs in libchafa, not frontend.</changelog>
  <changelog author="mvetter@suse.com" date="1566302400">- Update to 1.2.1:
  * Detect kitty and mlterm virtual terminals and apply optimal
    defaults accordingly
  * Make Automake build more strict and fix a few compatibility nits
  * Fix #30 - Failed to build on hurd-i386
  * Fix crash on certain broken GIFs</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566648000">- Update descriptions.
- Avoid double-shipping documentation, and make docs noarch.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1583323200">- Update to 1.2.2:
  * Fix #34 Cannot compile example</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1585828800">- Update to 1.4.0:
  * Added sixel graphics support. Chafa will automatically produce sixels
    if the connected terminal supports it. It can also be forced using the
    new -f or --format flag. This is a new implementation written from the
    ground up to maximize throughput.
  * Added the --glyph-file option, which loads glyph-symbol mappings from
    any file format supported by FreeType (TTF, PCF, etc). This allows for
    custom font support and improved symbol selection.
  * Added the --speed option specifying animation speed. It accepts a
    unitless multiplier, a specific number of frames per second, or max
    for maximum throughput.
  * There are now two ways to assign colors to symbol cells. Formerly,
    this was done based on the average color of the covered area. The new
    default is to use the median color, which produces sharper edges,
    but is slightly more prone to high-frequency noise. The new option
  - -color-extractor selects the method to employ.
  * When displaying multiple files, the default delay between files has
    been changed from three seconds to zero. Animations will still play
    through once. This can be overridden on the chafa command line with -d
    or --duration.
  * Minor tweaks to built-in symbols.
  Performance improvements:
  * Halved pixel storage requirements from 64 bits to 32 bits,
    resulting in significant memory savings.
  * Now builds with -ffast-math, yielding a big speedup for DIN99d.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1586692800">- Update to 1.4.1:
  * Added configure option --disable-rpath. This allows packagers to
    prevent the hard-coded library search path from being embedded in
    the chafa command-line tool (Mo Zhou, #39).
  * Added defaults for the yaft terminal.
  Bug fixes:
  * #40 - Fails to build on hurd-i386 + other i386 (reported by Mo
    Zhou).
  * [unfiled] - Rare failed assert with mostly transparent sixel image
    (reported by Reddit user spryfigure).
  * [unfiled] - Minor typo in function docstring.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1610712000">- Update to 1.6.0:
  * Added support for fullwidth symbols that take up two character
    cells. These are common in East Asian scripts. Single-cell and
    double-cell symbols can be mixed, and -f symbols mode will use
    both if possible.
  * New symbol tags: alpha, digit, alnum, narrow, wide, ambiguous,
    ugly, bad. "Ambiguous" symbols have uncertain widths and may
    render poorly in some terminals. "Ugly" denotes symbols that
    are unsuitable for Chafa's cell-based graphics (multicolor
    emoji, ideographic descriptors, etc). "Bad" is a superset of
    these two categories. Bad symbols are always excluded unless
    explicitly enabled with e.g. CHAFA_SYMBOL_TAG_BAD (--symbols
    +bad in the frontend).
  * The font loader (--glyph-file option) now does a better job
    with proportional fonts.
  * Added options for controlling lossless optimization of output.
    Currently, attribute reuse and character repetition (REP
    sequence) are implemented.
  * Added -O option to the frontend. This controls the optimization
    level.
  * Added a simple abstraction layer for terminal control sequences
    (ChafaTermInfo and ChafaTermDb). This allows for improved
    terminal support.
  * FbTerm is now supported with TERM=fbterm in the environment.
  * Bug fixes:
  - #43 Fix signal handler.
  - [unfiled] Crash when invalid font paths were passed on command line.
  - [unfiled] Small typo in fontgen's READM).
  - [unfiled] Bad contrast adjustment in images with transparency.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1623067200">- Update to 1.6.1:
  * Add NOCONFIGURE variable to autogen.sh to skip configure
  Bug fixes:
  * #50 SIGBUS while loading huge GIFs
  * #52 Produces small glitches in output with some images
  * #54 Haiku port fails on 32bit
  * [unfiled] Exclude RTL code points that could break the output.
  * [unfiled] Apple Terminal lacks truecolor support, so make it
    default to 256 colors
  * [unfiled] Fix typo affecting middle dot symbol.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1630497600">- Update to 1.8.0:
  * Added basic support for the Kitty and iTerm2 graphics protocols.
    These are enabled automatically when corresponding terminal support
    is detected, or manually with -f kitty or -f iterm.
  * Implemented an 8-color mode, selectable with -c 8
  * Implemented a foreground-only switch, --fg-only. This produces
    character art using foreground colors only, and will avoid
    modifying or resetting the background color. Looks best with
    non-contiguous symbols (e.g. ascii).
  * Added builtins for Japanese kana fullwidth symbols. These can
    now be used without loading any external fonts (try -c none --symbols wide).
  * Added builtins for legacy computer symbols (mainly wedges and
    sextant blocks). These were widely used in PETSCII and Teletext,
    and can be enabled using --symbols or --fill with their respective
    tags: legacy, wedge and sextant (@hodefoting).
  * Since there is a growing number of builtin symbols that may not
    be available everywhere, the default selection has been restricted
    to the widely supported block and border sets.
  * If possible, we now select a visually blank character from the
    specified symbol/fill sets instead of hardcoding ASCII space for
    featureless cells. One practical upshot of this is that the constant-width
    braille range can be used to produce consistent images even in contexts
    with variable-width fonts. U+2800 (BRAILLE PATTERN BLANK) will then be used in blank cells.
  * Improved terminal size detection when used with pipelines and redirection.
    This should now produce an image properly sized for your terminal:
    curl https://i.imgur.com/WFDEFVg.jpeg | chafa - | tee out
  * ChafaCanvas gained API functions for programmatically getting and
    setting character cell contents. These are used in a new example
    in tests/ncurses.c demonstrating ncurses integration.
  * Made --disable-rpath the default in order to simplify packaging.
  * Added a HACKING file featuring a much needed release checklist.
  * Improved terminal support:
    + Ctx will now use optimizing REP sequences at high -O levels.
    + foot now defaults to sixels.
    + iTerm2 now defaults to the iTerm2 protocol.
    + Kitty now defaults to the Kitty protocol.
    + st now defaults to truecolor symbols.
  * Bug fixes:
    + #44 Missing error handling on stdout writes.
    + [unfiled] Solid symbols erroneously replaced by fill in FGBG mode.
    + [unfiled] Integer formatter was not using fast path for 8-bit values.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1651147200">- bsc#1198965 (CVE-2022-1507): Fix NULL pointer deref in gif_internal_decode_frame
  * Add chafa-CVE-2022-1507.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1655294400">- bsc#1200510 (CVE-2022-2061): Fix heap based buffer overflow
  in lzw_decode
  * Add chafa-CVE-2022-2061.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1657022400">- bsc#1201211 (CVE-2022-2301): Fix buffer over-read
  * Add chafa-CVE-2022-2301.patch</changelog>
</package>
<package pkgid="8d98eac14a6ee0ced422027977bfbacc262cc55cdbccc72c5240a6317f54fdb5" name="chafa" arch="i586">
  <version epoch="0" ver="1.8.0" rel="bp154.3.8.1"/>
  <changelog author="mvetter@suse.com" date="1549627200">- Initial package chafa 1.0.1 for openSUSE</changelog>
  <changelog author="mvetter@suse.com" date="1565006400">- Update to 1.2.0:
  * Added --dither, --dither-grain and --dither-intensity options.
    These allow for sub-cell dithering in quantized modes (none,
    2, 16, 240 and 256). Especially beneficial when used with
  - p off.
  * Added API for ordered and diffusion-based dithering in quantization.
  * Added API support for multiple 8bpc pixel modes: RGB, BGR, RGBA,
    BGRA, ARGB, ABGR with either premultiplied or unassociated alpha channels.
  * Smooth scaling is now done internally, meaning libchafa
    consumers no longer need to prescale images.
  * Implemented a machine learning tool that can generate custom
    fonts for efficient image reproduction from a provided dataset.
    This is left uninstalled since it's still experimental
  * Throughput improvements:
    + GIF animations now start playing instantly.
    + GIF CPU overhead reduced by 75%, peak memory use down 95%-99% (!).
    + XWD common case CPU overhead down 60-70%, peak memory down 70%.
    + Additional halving of CPU overhead in 240- and 256-color modes.
    + Streamlined pixel pipeline for better parallelization.
  * Installation instructions:
    + New: Guix (Guy Fleury Iteriteka).
    + New: openSUSE (@jubalh).
  * Bug fixes:
    + [unfiled] Certain SVGs had transparency replaced with a white background (nemo).
    + [unfiled] -lm dependency belongs in libchafa, not frontend.</changelog>
  <changelog author="mvetter@suse.com" date="1566302400">- Update to 1.2.1:
  * Detect kitty and mlterm virtual terminals and apply optimal
    defaults accordingly
  * Make Automake build more strict and fix a few compatibility nits
  * Fix #30 - Failed to build on hurd-i386
  * Fix crash on certain broken GIFs</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566648000">- Update descriptions.
- Avoid double-shipping documentation, and make docs noarch.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1583323200">- Update to 1.2.2:
  * Fix #34 Cannot compile example</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1585828800">- Update to 1.4.0:
  * Added sixel graphics support. Chafa will automatically produce sixels
    if the connected terminal supports it. It can also be forced using the
    new -f or --format flag. This is a new implementation written from the
    ground up to maximize throughput.
  * Added the --glyph-file option, which loads glyph-symbol mappings from
    any file format supported by FreeType (TTF, PCF, etc). This allows for
    custom font support and improved symbol selection.
  * Added the --speed option specifying animation speed. It accepts a
    unitless multiplier, a specific number of frames per second, or max
    for maximum throughput.
  * There are now two ways to assign colors to symbol cells. Formerly,
    this was done based on the average color of the covered area. The new
    default is to use the median color, which produces sharper edges,
    but is slightly more prone to high-frequency noise. The new option
  - -color-extractor selects the method to employ.
  * When displaying multiple files, the default delay between files has
    been changed from three seconds to zero. Animations will still play
    through once. This can be overridden on the chafa command line with -d
    or --duration.
  * Minor tweaks to built-in symbols.
  Performance improvements:
  * Halved pixel storage requirements from 64 bits to 32 bits,
    resulting in significant memory savings.
  * Now builds with -ffast-math, yielding a big speedup for DIN99d.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1586692800">- Update to 1.4.1:
  * Added configure option --disable-rpath. This allows packagers to
    prevent the hard-coded library search path from being embedded in
    the chafa command-line tool (Mo Zhou, #39).
  * Added defaults for the yaft terminal.
  Bug fixes:
  * #40 - Fails to build on hurd-i386 + other i386 (reported by Mo
    Zhou).
  * [unfiled] - Rare failed assert with mostly transparent sixel image
    (reported by Reddit user spryfigure).
  * [unfiled] - Minor typo in function docstring.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1610712000">- Update to 1.6.0:
  * Added support for fullwidth symbols that take up two character
    cells. These are common in East Asian scripts. Single-cell and
    double-cell symbols can be mixed, and -f symbols mode will use
    both if possible.
  * New symbol tags: alpha, digit, alnum, narrow, wide, ambiguous,
    ugly, bad. "Ambiguous" symbols have uncertain widths and may
    render poorly in some terminals. "Ugly" denotes symbols that
    are unsuitable for Chafa's cell-based graphics (multicolor
    emoji, ideographic descriptors, etc). "Bad" is a superset of
    these two categories. Bad symbols are always excluded unless
    explicitly enabled with e.g. CHAFA_SYMBOL_TAG_BAD (--symbols
    +bad in the frontend).
  * The font loader (--glyph-file option) now does a better job
    with proportional fonts.
  * Added options for controlling lossless optimization of output.
    Currently, attribute reuse and character repetition (REP
    sequence) are implemented.
  * Added -O option to the frontend. This controls the optimization
    level.
  * Added a simple abstraction layer for terminal control sequences
    (ChafaTermInfo and ChafaTermDb). This allows for improved
    terminal support.
  * FbTerm is now supported with TERM=fbterm in the environment.
  * Bug fixes:
  - #43 Fix signal handler.
  - [unfiled] Crash when invalid font paths were passed on command line.
  - [unfiled] Small typo in fontgen's READM).
  - [unfiled] Bad contrast adjustment in images with transparency.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1623067200">- Update to 1.6.1:
  * Add NOCONFIGURE variable to autogen.sh to skip configure
  Bug fixes:
  * #50 SIGBUS while loading huge GIFs
  * #52 Produces small glitches in output with some images
  * #54 Haiku port fails on 32bit
  * [unfiled] Exclude RTL code points that could break the output.
  * [unfiled] Apple Terminal lacks truecolor support, so make it
    default to 256 colors
  * [unfiled] Fix typo affecting middle dot symbol.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1630497600">- Update to 1.8.0:
  * Added basic support for the Kitty and iTerm2 graphics protocols.
    These are enabled automatically when corresponding terminal support
    is detected, or manually with -f kitty or -f iterm.
  * Implemented an 8-color mode, selectable with -c 8
  * Implemented a foreground-only switch, --fg-only. This produces
    character art using foreground colors only, and will avoid
    modifying or resetting the background color. Looks best with
    non-contiguous symbols (e.g. ascii).
  * Added builtins for Japanese kana fullwidth symbols. These can
    now be used without loading any external fonts (try -c none --symbols wide).
  * Added builtins for legacy computer symbols (mainly wedges and
    sextant blocks). These were widely used in PETSCII and Teletext,
    and can be enabled using --symbols or --fill with their respective
    tags: legacy, wedge and sextant (@hodefoting).
  * Since there is a growing number of builtin symbols that may not
    be available everywhere, the default selection has been restricted
    to the widely supported block and border sets.
  * If possible, we now select a visually blank character from the
    specified symbol/fill sets instead of hardcoding ASCII space for
    featureless cells. One practical upshot of this is that the constant-width
    braille range can be used to produce consistent images even in contexts
    with variable-width fonts. U+2800 (BRAILLE PATTERN BLANK) will then be used in blank cells.
  * Improved terminal size detection when used with pipelines and redirection.
    This should now produce an image properly sized for your terminal:
    curl https://i.imgur.com/WFDEFVg.jpeg | chafa - | tee out
  * ChafaCanvas gained API functions for programmatically getting and
    setting character cell contents. These are used in a new example
    in tests/ncurses.c demonstrating ncurses integration.
  * Made --disable-rpath the default in order to simplify packaging.
  * Added a HACKING file featuring a much needed release checklist.
  * Improved terminal support:
    + Ctx will now use optimizing REP sequences at high -O levels.
    + foot now defaults to sixels.
    + iTerm2 now defaults to the iTerm2 protocol.
    + Kitty now defaults to the Kitty protocol.
    + st now defaults to truecolor symbols.
  * Bug fixes:
    + #44 Missing error handling on stdout writes.
    + [unfiled] Solid symbols erroneously replaced by fill in FGBG mode.
    + [unfiled] Integer formatter was not using fast path for 8-bit values.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1651147200">- bsc#1198965 (CVE-2022-1507): Fix NULL pointer deref in gif_internal_decode_frame
  * Add chafa-CVE-2022-1507.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1655294400">- bsc#1200510 (CVE-2022-2061): Fix heap based buffer overflow
  in lzw_decode
  * Add chafa-CVE-2022-2061.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1657022400">- bsc#1201211 (CVE-2022-2301): Fix buffer over-read
  * Add chafa-CVE-2022-2301.patch</changelog>
</package>
<package pkgid="617323cb97247ecbd30f2831f8f835f78c71112eac020f41799214ae34d9145e" name="chafa" arch="ppc64le">
  <version epoch="0" ver="1.8.0" rel="bp154.3.8.1"/>
  <changelog author="mvetter@suse.com" date="1549627200">- Initial package chafa 1.0.1 for openSUSE</changelog>
  <changelog author="mvetter@suse.com" date="1565006400">- Update to 1.2.0:
  * Added --dither, --dither-grain and --dither-intensity options.
    These allow for sub-cell dithering in quantized modes (none,
    2, 16, 240 and 256). Especially beneficial when used with
  - p off.
  * Added API for ordered and diffusion-based dithering in quantization.
  * Added API support for multiple 8bpc pixel modes: RGB, BGR, RGBA,
    BGRA, ARGB, ABGR with either premultiplied or unassociated alpha channels.
  * Smooth scaling is now done internally, meaning libchafa
    consumers no longer need to prescale images.
  * Implemented a machine learning tool that can generate custom
    fonts for efficient image reproduction from a provided dataset.
    This is left uninstalled since it's still experimental
  * Throughput improvements:
    + GIF animations now start playing instantly.
    + GIF CPU overhead reduced by 75%, peak memory use down 95%-99% (!).
    + XWD common case CPU overhead down 60-70%, peak memory down 70%.
    + Additional halving of CPU overhead in 240- and 256-color modes.
    + Streamlined pixel pipeline for better parallelization.
  * Installation instructions:
    + New: Guix (Guy Fleury Iteriteka).
    + New: openSUSE (@jubalh).
  * Bug fixes:
    + [unfiled] Certain SVGs had transparency replaced with a white background (nemo).
    + [unfiled] -lm dependency belongs in libchafa, not frontend.</changelog>
  <changelog author="mvetter@suse.com" date="1566302400">- Update to 1.2.1:
  * Detect kitty and mlterm virtual terminals and apply optimal
    defaults accordingly
  * Make Automake build more strict and fix a few compatibility nits
  * Fix #30 - Failed to build on hurd-i386
  * Fix crash on certain broken GIFs</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566648000">- Update descriptions.
- Avoid double-shipping documentation, and make docs noarch.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1583323200">- Update to 1.2.2:
  * Fix #34 Cannot compile example</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1585828800">- Update to 1.4.0:
  * Added sixel graphics support. Chafa will automatically produce sixels
    if the connected terminal supports it. It can also be forced using the
    new -f or --format flag. This is a new implementation written from the
    ground up to maximize throughput.
  * Added the --glyph-file option, which loads glyph-symbol mappings from
    any file format supported by FreeType (TTF, PCF, etc). This allows for
    custom font support and improved symbol selection.
  * Added the --speed option specifying animation speed. It accepts a
    unitless multiplier, a specific number of frames per second, or max
    for maximum throughput.
  * There are now two ways to assign colors to symbol cells. Formerly,
    this was done based on the average color of the covered area. The new
    default is to use the median color, which produces sharper edges,
    but is slightly more prone to high-frequency noise. The new option
  - -color-extractor selects the method to employ.
  * When displaying multiple files, the default delay between files has
    been changed from three seconds to zero. Animations will still play
    through once. This can be overridden on the chafa command line with -d
    or --duration.
  * Minor tweaks to built-in symbols.
  Performance improvements:
  * Halved pixel storage requirements from 64 bits to 32 bits,
    resulting in significant memory savings.
  * Now builds with -ffast-math, yielding a big speedup for DIN99d.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1586692800">- Update to 1.4.1:
  * Added configure option --disable-rpath. This allows packagers to
    prevent the hard-coded library search path from being embedded in
    the chafa command-line tool (Mo Zhou, #39).
  * Added defaults for the yaft terminal.
  Bug fixes:
  * #40 - Fails to build on hurd-i386 + other i386 (reported by Mo
    Zhou).
  * [unfiled] - Rare failed assert with mostly transparent sixel image
    (reported by Reddit user spryfigure).
  * [unfiled] - Minor typo in function docstring.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1610712000">- Update to 1.6.0:
  * Added support for fullwidth symbols that take up two character
    cells. These are common in East Asian scripts. Single-cell and
    double-cell symbols can be mixed, and -f symbols mode will use
    both if possible.
  * New symbol tags: alpha, digit, alnum, narrow, wide, ambiguous,
    ugly, bad. "Ambiguous" symbols have uncertain widths and may
    render poorly in some terminals. "Ugly" denotes symbols that
    are unsuitable for Chafa's cell-based graphics (multicolor
    emoji, ideographic descriptors, etc). "Bad" is a superset of
    these two categories. Bad symbols are always excluded unless
    explicitly enabled with e.g. CHAFA_SYMBOL_TAG_BAD (--symbols
    +bad in the frontend).
  * The font loader (--glyph-file option) now does a better job
    with proportional fonts.
  * Added options for controlling lossless optimization of output.
    Currently, attribute reuse and character repetition (REP
    sequence) are implemented.
  * Added -O option to the frontend. This controls the optimization
    level.
  * Added a simple abstraction layer for terminal control sequences
    (ChafaTermInfo and ChafaTermDb). This allows for improved
    terminal support.
  * FbTerm is now supported with TERM=fbterm in the environment.
  * Bug fixes:
  - #43 Fix signal handler.
  - [unfiled] Crash when invalid font paths were passed on command line.
  - [unfiled] Small typo in fontgen's READM).
  - [unfiled] Bad contrast adjustment in images with transparency.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1623067200">- Update to 1.6.1:
  * Add NOCONFIGURE variable to autogen.sh to skip configure
  Bug fixes:
  * #50 SIGBUS while loading huge GIFs
  * #52 Produces small glitches in output with some images
  * #54 Haiku port fails on 32bit
  * [unfiled] Exclude RTL code points that could break the output.
  * [unfiled] Apple Terminal lacks truecolor support, so make it
    default to 256 colors
  * [unfiled] Fix typo affecting middle dot symbol.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1630497600">- Update to 1.8.0:
  * Added basic support for the Kitty and iTerm2 graphics protocols.
    These are enabled automatically when corresponding terminal support
    is detected, or manually with -f kitty or -f iterm.
  * Implemented an 8-color mode, selectable with -c 8
  * Implemented a foreground-only switch, --fg-only. This produces
    character art using foreground colors only, and will avoid
    modifying or resetting the background color. Looks best with
    non-contiguous symbols (e.g. ascii).
  * Added builtins for Japanese kana fullwidth symbols. These can
    now be used without loading any external fonts (try -c none --symbols wide).
  * Added builtins for legacy computer symbols (mainly wedges and
    sextant blocks). These were widely used in PETSCII and Teletext,
    and can be enabled using --symbols or --fill with their respective
    tags: legacy, wedge and sextant (@hodefoting).
  * Since there is a growing number of builtin symbols that may not
    be available everywhere, the default selection has been restricted
    to the widely supported block and border sets.
  * If possible, we now select a visually blank character from the
    specified symbol/fill sets instead of hardcoding ASCII space for
    featureless cells. One practical upshot of this is that the constant-width
    braille range can be used to produce consistent images even in contexts
    with variable-width fonts. U+2800 (BRAILLE PATTERN BLANK) will then be used in blank cells.
  * Improved terminal size detection when used with pipelines and redirection.
    This should now produce an image properly sized for your terminal:
    curl https://i.imgur.com/WFDEFVg.jpeg | chafa - | tee out
  * ChafaCanvas gained API functions for programmatically getting and
    setting character cell contents. These are used in a new example
    in tests/ncurses.c demonstrating ncurses integration.
  * Made --disable-rpath the default in order to simplify packaging.
  * Added a HACKING file featuring a much needed release checklist.
  * Improved terminal support:
    + Ctx will now use optimizing REP sequences at high -O levels.
    + foot now defaults to sixels.
    + iTerm2 now defaults to the iTerm2 protocol.
    + Kitty now defaults to the Kitty protocol.
    + st now defaults to truecolor symbols.
  * Bug fixes:
    + #44 Missing error handling on stdout writes.
    + [unfiled] Solid symbols erroneously replaced by fill in FGBG mode.
    + [unfiled] Integer formatter was not using fast path for 8-bit values.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1651147200">- bsc#1198965 (CVE-2022-1507): Fix NULL pointer deref in gif_internal_decode_frame
  * Add chafa-CVE-2022-1507.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1655294400">- bsc#1200510 (CVE-2022-2061): Fix heap based buffer overflow
  in lzw_decode
  * Add chafa-CVE-2022-2061.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1657022400">- bsc#1201211 (CVE-2022-2301): Fix buffer over-read
  * Add chafa-CVE-2022-2301.patch</changelog>
</package>
<package pkgid="c2d189c9e2bf7d1466f83979bae205220cadc7065fd7506cc6bcffe93a9c8eda" name="chafa" arch="s390x">
  <version epoch="0" ver="1.8.0" rel="bp154.3.8.1"/>
  <changelog author="mvetter@suse.com" date="1549627200">- Initial package chafa 1.0.1 for openSUSE</changelog>
  <changelog author="mvetter@suse.com" date="1565006400">- Update to 1.2.0:
  * Added --dither, --dither-grain and --dither-intensity options.
    These allow for sub-cell dithering in quantized modes (none,
    2, 16, 240 and 256). Especially beneficial when used with
  - p off.
  * Added API for ordered and diffusion-based dithering in quantization.
  * Added API support for multiple 8bpc pixel modes: RGB, BGR, RGBA,
    BGRA, ARGB, ABGR with either premultiplied or unassociated alpha channels.
  * Smooth scaling is now done internally, meaning libchafa
    consumers no longer need to prescale images.
  * Implemented a machine learning tool that can generate custom
    fonts for efficient image reproduction from a provided dataset.
    This is left uninstalled since it's still experimental
  * Throughput improvements:
    + GIF animations now start playing instantly.
    + GIF CPU overhead reduced by 75%, peak memory use down 95%-99% (!).
    + XWD common case CPU overhead down 60-70%, peak memory down 70%.
    + Additional halving of CPU overhead in 240- and 256-color modes.
    + Streamlined pixel pipeline for better parallelization.
  * Installation instructions:
    + New: Guix (Guy Fleury Iteriteka).
    + New: openSUSE (@jubalh).
  * Bug fixes:
    + [unfiled] Certain SVGs had transparency replaced with a white background (nemo).
    + [unfiled] -lm dependency belongs in libchafa, not frontend.</changelog>
  <changelog author="mvetter@suse.com" date="1566302400">- Update to 1.2.1:
  * Detect kitty and mlterm virtual terminals and apply optimal
    defaults accordingly
  * Make Automake build more strict and fix a few compatibility nits
  * Fix #30 - Failed to build on hurd-i386
  * Fix crash on certain broken GIFs</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566648000">- Update descriptions.
- Avoid double-shipping documentation, and make docs noarch.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1583323200">- Update to 1.2.2:
  * Fix #34 Cannot compile example</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1585828800">- Update to 1.4.0:
  * Added sixel graphics support. Chafa will automatically produce sixels
    if the connected terminal supports it. It can also be forced using the
    new -f or --format flag. This is a new implementation written from the
    ground up to maximize throughput.
  * Added the --glyph-file option, which loads glyph-symbol mappings from
    any file format supported by FreeType (TTF, PCF, etc). This allows for
    custom font support and improved symbol selection.
  * Added the --speed option specifying animation speed. It accepts a
    unitless multiplier, a specific number of frames per second, or max
    for maximum throughput.
  * There are now two ways to assign colors to symbol cells. Formerly,
    this was done based on the average color of the covered area. The new
    default is to use the median color, which produces sharper edges,
    but is slightly more prone to high-frequency noise. The new option
  - -color-extractor selects the method to employ.
  * When displaying multiple files, the default delay between files has
    been changed from three seconds to zero. Animations will still play
    through once. This can be overridden on the chafa command line with -d
    or --duration.
  * Minor tweaks to built-in symbols.
  Performance improvements:
  * Halved pixel storage requirements from 64 bits to 32 bits,
    resulting in significant memory savings.
  * Now builds with -ffast-math, yielding a big speedup for DIN99d.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1586692800">- Update to 1.4.1:
  * Added configure option --disable-rpath. This allows packagers to
    prevent the hard-coded library search path from being embedded in
    the chafa command-line tool (Mo Zhou, #39).
  * Added defaults for the yaft terminal.
  Bug fixes:
  * #40 - Fails to build on hurd-i386 + other i386 (reported by Mo
    Zhou).
  * [unfiled] - Rare failed assert with mostly transparent sixel image
    (reported by Reddit user spryfigure).
  * [unfiled] - Minor typo in function docstring.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1610712000">- Update to 1.6.0:
  * Added support for fullwidth symbols that take up two character
    cells. These are common in East Asian scripts. Single-cell and
    double-cell symbols can be mixed, and -f symbols mode will use
    both if possible.
  * New symbol tags: alpha, digit, alnum, narrow, wide, ambiguous,
    ugly, bad. "Ambiguous" symbols have uncertain widths and may
    render poorly in some terminals. "Ugly" denotes symbols that
    are unsuitable for Chafa's cell-based graphics (multicolor
    emoji, ideographic descriptors, etc). "Bad" is a superset of
    these two categories. Bad symbols are always excluded unless
    explicitly enabled with e.g. CHAFA_SYMBOL_TAG_BAD (--symbols
    +bad in the frontend).
  * The font loader (--glyph-file option) now does a better job
    with proportional fonts.
  * Added options for controlling lossless optimization of output.
    Currently, attribute reuse and character repetition (REP
    sequence) are implemented.
  * Added -O option to the frontend. This controls the optimization
    level.
  * Added a simple abstraction layer for terminal control sequences
    (ChafaTermInfo and ChafaTermDb). This allows for improved
    terminal support.
  * FbTerm is now supported with TERM=fbterm in the environment.
  * Bug fixes:
  - #43 Fix signal handler.
  - [unfiled] Crash when invalid font paths were passed on command line.
  - [unfiled] Small typo in fontgen's READM).
  - [unfiled] Bad contrast adjustment in images with transparency.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1623067200">- Update to 1.6.1:
  * Add NOCONFIGURE variable to autogen.sh to skip configure
  Bug fixes:
  * #50 SIGBUS while loading huge GIFs
  * #52 Produces small glitches in output with some images
  * #54 Haiku port fails on 32bit
  * [unfiled] Exclude RTL code points that could break the output.
  * [unfiled] Apple Terminal lacks truecolor support, so make it
    default to 256 colors
  * [unfiled] Fix typo affecting middle dot symbol.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1630497600">- Update to 1.8.0:
  * Added basic support for the Kitty and iTerm2 graphics protocols.
    These are enabled automatically when corresponding terminal support
    is detected, or manually with -f kitty or -f iterm.
  * Implemented an 8-color mode, selectable with -c 8
  * Implemented a foreground-only switch, --fg-only. This produces
    character art using foreground colors only, and will avoid
    modifying or resetting the background color. Looks best with
    non-contiguous symbols (e.g. ascii).
  * Added builtins for Japanese kana fullwidth symbols. These can
    now be used without loading any external fonts (try -c none --symbols wide).
  * Added builtins for legacy computer symbols (mainly wedges and
    sextant blocks). These were widely used in PETSCII and Teletext,
    and can be enabled using --symbols or --fill with their respective
    tags: legacy, wedge and sextant (@hodefoting).
  * Since there is a growing number of builtin symbols that may not
    be available everywhere, the default selection has been restricted
    to the widely supported block and border sets.
  * If possible, we now select a visually blank character from the
    specified symbol/fill sets instead of hardcoding ASCII space for
    featureless cells. One practical upshot of this is that the constant-width
    braille range can be used to produce consistent images even in contexts
    with variable-width fonts. U+2800 (BRAILLE PATTERN BLANK) will then be used in blank cells.
  * Improved terminal size detection when used with pipelines and redirection.
    This should now produce an image properly sized for your terminal:
    curl https://i.imgur.com/WFDEFVg.jpeg | chafa - | tee out
  * ChafaCanvas gained API functions for programmatically getting and
    setting character cell contents. These are used in a new example
    in tests/ncurses.c demonstrating ncurses integration.
  * Made --disable-rpath the default in order to simplify packaging.
  * Added a HACKING file featuring a much needed release checklist.
  * Improved terminal support:
    + Ctx will now use optimizing REP sequences at high -O levels.
    + foot now defaults to sixels.
    + iTerm2 now defaults to the iTerm2 protocol.
    + Kitty now defaults to the Kitty protocol.
    + st now defaults to truecolor symbols.
  * Bug fixes:
    + #44 Missing error handling on stdout writes.
    + [unfiled] Solid symbols erroneously replaced by fill in FGBG mode.
    + [unfiled] Integer formatter was not using fast path for 8-bit values.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1651147200">- bsc#1198965 (CVE-2022-1507): Fix NULL pointer deref in gif_internal_decode_frame
  * Add chafa-CVE-2022-1507.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1655294400">- bsc#1200510 (CVE-2022-2061): Fix heap based buffer overflow
  in lzw_decode
  * Add chafa-CVE-2022-2061.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1657022400">- bsc#1201211 (CVE-2022-2301): Fix buffer over-read
  * Add chafa-CVE-2022-2301.patch</changelog>
</package>
<package pkgid="39576be5559dadd895ff1b14015144a8d2fd1c32580cf702e9fd287e057b9949" name="chafa" arch="src">
  <version epoch="0" ver="1.8.0" rel="bp154.3.8.1"/>
  <changelog author="mvetter@suse.com" date="1549627200">- Initial package chafa 1.0.1 for openSUSE</changelog>
  <changelog author="mvetter@suse.com" date="1565006400">- Update to 1.2.0:
  * Added --dither, --dither-grain and --dither-intensity options.
    These allow for sub-cell dithering in quantized modes (none,
    2, 16, 240 and 256). Especially beneficial when used with
  - p off.
  * Added API for ordered and diffusion-based dithering in quantization.
  * Added API support for multiple 8bpc pixel modes: RGB, BGR, RGBA,
    BGRA, ARGB, ABGR with either premultiplied or unassociated alpha channels.
  * Smooth scaling is now done internally, meaning libchafa
    consumers no longer need to prescale images.
  * Implemented a machine learning tool that can generate custom
    fonts for efficient image reproduction from a provided dataset.
    This is left uninstalled since it's still experimental
  * Throughput improvements:
    + GIF animations now start playing instantly.
    + GIF CPU overhead reduced by 75%, peak memory use down 95%-99% (!).
    + XWD common case CPU overhead down 60-70%, peak memory down 70%.
    + Additional halving of CPU overhead in 240- and 256-color modes.
    + Streamlined pixel pipeline for better parallelization.
  * Installation instructions:
    + New: Guix (Guy Fleury Iteriteka).
    + New: openSUSE (@jubalh).
  * Bug fixes:
    + [unfiled] Certain SVGs had transparency replaced with a white background (nemo).
    + [unfiled] -lm dependency belongs in libchafa, not frontend.</changelog>
  <changelog author="mvetter@suse.com" date="1566302400">- Update to 1.2.1:
  * Detect kitty and mlterm virtual terminals and apply optimal
    defaults accordingly
  * Make Automake build more strict and fix a few compatibility nits
  * Fix #30 - Failed to build on hurd-i386
  * Fix crash on certain broken GIFs</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566648000">- Update descriptions.
- Avoid double-shipping documentation, and make docs noarch.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1583323200">- Update to 1.2.2:
  * Fix #34 Cannot compile example</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1585828800">- Update to 1.4.0:
  * Added sixel graphics support. Chafa will automatically produce sixels
    if the connected terminal supports it. It can also be forced using the
    new -f or --format flag. This is a new implementation written from the
    ground up to maximize throughput.
  * Added the --glyph-file option, which loads glyph-symbol mappings from
    any file format supported by FreeType (TTF, PCF, etc). This allows for
    custom font support and improved symbol selection.
  * Added the --speed option specifying animation speed. It accepts a
    unitless multiplier, a specific number of frames per second, or max
    for maximum throughput.
  * There are now two ways to assign colors to symbol cells. Formerly,
    this was done based on the average color of the covered area. The new
    default is to use the median color, which produces sharper edges,
    but is slightly more prone to high-frequency noise. The new option
  - -color-extractor selects the method to employ.
  * When displaying multiple files, the default delay between files has
    been changed from three seconds to zero. Animations will still play
    through once. This can be overridden on the chafa command line with -d
    or --duration.
  * Minor tweaks to built-in symbols.
  Performance improvements:
  * Halved pixel storage requirements from 64 bits to 32 bits,
    resulting in significant memory savings.
  * Now builds with -ffast-math, yielding a big speedup for DIN99d.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1586692800">- Update to 1.4.1:
  * Added configure option --disable-rpath. This allows packagers to
    prevent the hard-coded library search path from being embedded in
    the chafa command-line tool (Mo Zhou, #39).
  * Added defaults for the yaft terminal.
  Bug fixes:
  * #40 - Fails to build on hurd-i386 + other i386 (reported by Mo
    Zhou).
  * [unfiled] - Rare failed assert with mostly transparent sixel image
    (reported by Reddit user spryfigure).
  * [unfiled] - Minor typo in function docstring.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1610712000">- Update to 1.6.0:
  * Added support for fullwidth symbols that take up two character
    cells. These are common in East Asian scripts. Single-cell and
    double-cell symbols can be mixed, and -f symbols mode will use
    both if possible.
  * New symbol tags: alpha, digit, alnum, narrow, wide, ambiguous,
    ugly, bad. "Ambiguous" symbols have uncertain widths and may
    render poorly in some terminals. "Ugly" denotes symbols that
    are unsuitable for Chafa's cell-based graphics (multicolor
    emoji, ideographic descriptors, etc). "Bad" is a superset of
    these two categories. Bad symbols are always excluded unless
    explicitly enabled with e.g. CHAFA_SYMBOL_TAG_BAD (--symbols
    +bad in the frontend).
  * The font loader (--glyph-file option) now does a better job
    with proportional fonts.
  * Added options for controlling lossless optimization of output.
    Currently, attribute reuse and character repetition (REP
    sequence) are implemented.
  * Added -O option to the frontend. This controls the optimization
    level.
  * Added a simple abstraction layer for terminal control sequences
    (ChafaTermInfo and ChafaTermDb). This allows for improved
    terminal support.
  * FbTerm is now supported with TERM=fbterm in the environment.
  * Bug fixes:
  - #43 Fix signal handler.
  - [unfiled] Crash when invalid font paths were passed on command line.
  - [unfiled] Small typo in fontgen's READM).
  - [unfiled] Bad contrast adjustment in images with transparency.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1623067200">- Update to 1.6.1:
  * Add NOCONFIGURE variable to autogen.sh to skip configure
  Bug fixes:
  * #50 SIGBUS while loading huge GIFs
  * #52 Produces small glitches in output with some images
  * #54 Haiku port fails on 32bit
  * [unfiled] Exclude RTL code points that could break the output.
  * [unfiled] Apple Terminal lacks truecolor support, so make it
    default to 256 colors
  * [unfiled] Fix typo affecting middle dot symbol.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1630497600">- Update to 1.8.0:
  * Added basic support for the Kitty and iTerm2 graphics protocols.
    These are enabled automatically when corresponding terminal support
    is detected, or manually with -f kitty or -f iterm.
  * Implemented an 8-color mode, selectable with -c 8
  * Implemented a foreground-only switch, --fg-only. This produces
    character art using foreground colors only, and will avoid
    modifying or resetting the background color. Looks best with
    non-contiguous symbols (e.g. ascii).
  * Added builtins for Japanese kana fullwidth symbols. These can
    now be used without loading any external fonts (try -c none --symbols wide).
  * Added builtins for legacy computer symbols (mainly wedges and
    sextant blocks). These were widely used in PETSCII and Teletext,
    and can be enabled using --symbols or --fill with their respective
    tags: legacy, wedge and sextant (@hodefoting).
  * Since there is a growing number of builtin symbols that may not
    be available everywhere, the default selection has been restricted
    to the widely supported block and border sets.
  * If possible, we now select a visually blank character from the
    specified symbol/fill sets instead of hardcoding ASCII space for
    featureless cells. One practical upshot of this is that the constant-width
    braille range can be used to produce consistent images even in contexts
    with variable-width fonts. U+2800 (BRAILLE PATTERN BLANK) will then be used in blank cells.
  * Improved terminal size detection when used with pipelines and redirection.
    This should now produce an image properly sized for your terminal:
    curl https://i.imgur.com/WFDEFVg.jpeg | chafa - | tee out
  * ChafaCanvas gained API functions for programmatically getting and
    setting character cell contents. These are used in a new example
    in tests/ncurses.c demonstrating ncurses integration.
  * Made --disable-rpath the default in order to simplify packaging.
  * Added a HACKING file featuring a much needed release checklist.
  * Improved terminal support:
    + Ctx will now use optimizing REP sequences at high -O levels.
    + foot now defaults to sixels.
    + iTerm2 now defaults to the iTerm2 protocol.
    + Kitty now defaults to the Kitty protocol.
    + st now defaults to truecolor symbols.
  * Bug fixes:
    + #44 Missing error handling on stdout writes.
    + [unfiled] Solid symbols erroneously replaced by fill in FGBG mode.
    + [unfiled] Integer formatter was not using fast path for 8-bit values.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1651147200">- bsc#1198965 (CVE-2022-1507): Fix NULL pointer deref in gif_internal_decode_frame
  * Add chafa-CVE-2022-1507.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1655294400">- bsc#1200510 (CVE-2022-2061): Fix heap based buffer overflow
  in lzw_decode
  * Add chafa-CVE-2022-2061.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1657022400">- bsc#1201211 (CVE-2022-2301): Fix buffer over-read
  * Add chafa-CVE-2022-2301.patch</changelog>
</package>
<package pkgid="008f566b3219345784cdbbd8e16dcdab693b20e26523ab4dbc8ded2597c6c0a8" name="chafa" arch="x86_64">
  <version epoch="0" ver="1.8.0" rel="bp154.3.8.1"/>
  <changelog author="mvetter@suse.com" date="1549627200">- Initial package chafa 1.0.1 for openSUSE</changelog>
  <changelog author="mvetter@suse.com" date="1565006400">- Update to 1.2.0:
  * Added --dither, --dither-grain and --dither-intensity options.
    These allow for sub-cell dithering in quantized modes (none,
    2, 16, 240 and 256). Especially beneficial when used with
  - p off.
  * Added API for ordered and diffusion-based dithering in quantization.
  * Added API support for multiple 8bpc pixel modes: RGB, BGR, RGBA,
    BGRA, ARGB, ABGR with either premultiplied or unassociated alpha channels.
  * Smooth scaling is now done internally, meaning libchafa
    consumers no longer need to prescale images.
  * Implemented a machine learning tool that can generate custom
    fonts for efficient image reproduction from a provided dataset.
    This is left uninstalled since it's still experimental
  * Throughput improvements:
    + GIF animations now start playing instantly.
    + GIF CPU overhead reduced by 75%, peak memory use down 95%-99% (!).
    + XWD common case CPU overhead down 60-70%, peak memory down 70%.
    + Additional halving of CPU overhead in 240- and 256-color modes.
    + Streamlined pixel pipeline for better parallelization.
  * Installation instructions:
    + New: Guix (Guy Fleury Iteriteka).
    + New: openSUSE (@jubalh).
  * Bug fixes:
    + [unfiled] Certain SVGs had transparency replaced with a white background (nemo).
    + [unfiled] -lm dependency belongs in libchafa, not frontend.</changelog>
  <changelog author="mvetter@suse.com" date="1566302400">- Update to 1.2.1:
  * Detect kitty and mlterm virtual terminals and apply optimal
    defaults accordingly
  * Make Automake build more strict and fix a few compatibility nits
  * Fix #30 - Failed to build on hurd-i386
  * Fix crash on certain broken GIFs</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566648000">- Update descriptions.
- Avoid double-shipping documentation, and make docs noarch.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1583323200">- Update to 1.2.2:
  * Fix #34 Cannot compile example</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1585828800">- Update to 1.4.0:
  * Added sixel graphics support. Chafa will automatically produce sixels
    if the connected terminal supports it. It can also be forced using the
    new -f or --format flag. This is a new implementation written from the
    ground up to maximize throughput.
  * Added the --glyph-file option, which loads glyph-symbol mappings from
    any file format supported by FreeType (TTF, PCF, etc). This allows for
    custom font support and improved symbol selection.
  * Added the --speed option specifying animation speed. It accepts a
    unitless multiplier, a specific number of frames per second, or max
    for maximum throughput.
  * There are now two ways to assign colors to symbol cells. Formerly,
    this was done based on the average color of the covered area. The new
    default is to use the median color, which produces sharper edges,
    but is slightly more prone to high-frequency noise. The new option
  - -color-extractor selects the method to employ.
  * When displaying multiple files, the default delay between files has
    been changed from three seconds to zero. Animations will still play
    through once. This can be overridden on the chafa command line with -d
    or --duration.
  * Minor tweaks to built-in symbols.
  Performance improvements:
  * Halved pixel storage requirements from 64 bits to 32 bits,
    resulting in significant memory savings.
  * Now builds with -ffast-math, yielding a big speedup for DIN99d.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1586692800">- Update to 1.4.1:
  * Added configure option --disable-rpath. This allows packagers to
    prevent the hard-coded library search path from being embedded in
    the chafa command-line tool (Mo Zhou, #39).
  * Added defaults for the yaft terminal.
  Bug fixes:
  * #40 - Fails to build on hurd-i386 + other i386 (reported by Mo
    Zhou).
  * [unfiled] - Rare failed assert with mostly transparent sixel image
    (reported by Reddit user spryfigure).
  * [unfiled] - Minor typo in function docstring.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1610712000">- Update to 1.6.0:
  * Added support for fullwidth symbols that take up two character
    cells. These are common in East Asian scripts. Single-cell and
    double-cell symbols can be mixed, and -f symbols mode will use
    both if possible.
  * New symbol tags: alpha, digit, alnum, narrow, wide, ambiguous,
    ugly, bad. "Ambiguous" symbols have uncertain widths and may
    render poorly in some terminals. "Ugly" denotes symbols that
    are unsuitable for Chafa's cell-based graphics (multicolor
    emoji, ideographic descriptors, etc). "Bad" is a superset of
    these two categories. Bad symbols are always excluded unless
    explicitly enabled with e.g. CHAFA_SYMBOL_TAG_BAD (--symbols
    +bad in the frontend).
  * The font loader (--glyph-file option) now does a better job
    with proportional fonts.
  * Added options for controlling lossless optimization of output.
    Currently, attribute reuse and character repetition (REP
    sequence) are implemented.
  * Added -O option to the frontend. This controls the optimization
    level.
  * Added a simple abstraction layer for terminal control sequences
    (ChafaTermInfo and ChafaTermDb). This allows for improved
    terminal support.
  * FbTerm is now supported with TERM=fbterm in the environment.
  * Bug fixes:
  - #43 Fix signal handler.
  - [unfiled] Crash when invalid font paths were passed on command line.
  - [unfiled] Small typo in fontgen's READM).
  - [unfiled] Bad contrast adjustment in images with transparency.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1623067200">- Update to 1.6.1:
  * Add NOCONFIGURE variable to autogen.sh to skip configure
  Bug fixes:
  * #50 SIGBUS while loading huge GIFs
  * #52 Produces small glitches in output with some images
  * #54 Haiku port fails on 32bit
  * [unfiled] Exclude RTL code points that could break the output.
  * [unfiled] Apple Terminal lacks truecolor support, so make it
    default to 256 colors
  * [unfiled] Fix typo affecting middle dot symbol.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1630497600">- Update to 1.8.0:
  * Added basic support for the Kitty and iTerm2 graphics protocols.
    These are enabled automatically when corresponding terminal support
    is detected, or manually with -f kitty or -f iterm.
  * Implemented an 8-color mode, selectable with -c 8
  * Implemented a foreground-only switch, --fg-only. This produces
    character art using foreground colors only, and will avoid
    modifying or resetting the background color. Looks best with
    non-contiguous symbols (e.g. ascii).
  * Added builtins for Japanese kana fullwidth symbols. These can
    now be used without loading any external fonts (try -c none --symbols wide).
  * Added builtins for legacy computer symbols (mainly wedges and
    sextant blocks). These were widely used in PETSCII and Teletext,
    and can be enabled using --symbols or --fill with their respective
    tags: legacy, wedge and sextant (@hodefoting).
  * Since there is a growing number of builtin symbols that may not
    be available everywhere, the default selection has been restricted
    to the widely supported block and border sets.
  * If possible, we now select a visually blank character from the
    specified symbol/fill sets instead of hardcoding ASCII space for
    featureless cells. One practical upshot of this is that the constant-width
    braille range can be used to produce consistent images even in contexts
    with variable-width fonts. U+2800 (BRAILLE PATTERN BLANK) will then be used in blank cells.
  * Improved terminal size detection when used with pipelines and redirection.
    This should now produce an image properly sized for your terminal:
    curl https://i.imgur.com/WFDEFVg.jpeg | chafa - | tee out
  * ChafaCanvas gained API functions for programmatically getting and
    setting character cell contents. These are used in a new example
    in tests/ncurses.c demonstrating ncurses integration.
  * Made --disable-rpath the default in order to simplify packaging.
  * Added a HACKING file featuring a much needed release checklist.
  * Improved terminal support:
    + Ctx will now use optimizing REP sequences at high -O levels.
    + foot now defaults to sixels.
    + iTerm2 now defaults to the iTerm2 protocol.
    + Kitty now defaults to the Kitty protocol.
    + st now defaults to truecolor symbols.
  * Bug fixes:
    + #44 Missing error handling on stdout writes.
    + [unfiled] Solid symbols erroneously replaced by fill in FGBG mode.
    + [unfiled] Integer formatter was not using fast path for 8-bit values.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1651147200">- bsc#1198965 (CVE-2022-1507): Fix NULL pointer deref in gif_internal_decode_frame
  * Add chafa-CVE-2022-1507.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1655294400">- bsc#1200510 (CVE-2022-2061): Fix heap based buffer overflow
  in lzw_decode
  * Add chafa-CVE-2022-2061.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1657022400">- bsc#1201211 (CVE-2022-2301): Fix buffer over-read
  * Add chafa-CVE-2022-2301.patch</changelog>
</package>
<package pkgid="858974c0f0a43dfb0e9646cc015105933384341e49084955ae8382c04c86d3a2" name="chafa-devel" arch="aarch64">
  <version epoch="0" ver="1.8.0" rel="bp154.3.3.1"/>
  <changelog author="mvetter@suse.com" date="1549627200">- Initial package chafa 1.0.1 for openSUSE</changelog>
  <changelog author="mvetter@suse.com" date="1565006400">- Update to 1.2.0:
  * Added --dither, --dither-grain and --dither-intensity options.
    These allow for sub-cell dithering in quantized modes (none,
    2, 16, 240 and 256). Especially beneficial when used with
  - p off.
  * Added API for ordered and diffusion-based dithering in quantization.
  * Added API support for multiple 8bpc pixel modes: RGB, BGR, RGBA,
    BGRA, ARGB, ABGR with either premultiplied or unassociated alpha channels.
  * Smooth scaling is now done internally, meaning libchafa
    consumers no longer need to prescale images.
  * Implemented a machine learning tool that can generate custom
    fonts for efficient image reproduction from a provided dataset.
    This is left uninstalled since it's still experimental
  * Throughput improvements:
    + GIF animations now start playing instantly.
    + GIF CPU overhead reduced by 75%, peak memory use down 95%-99% (!).
    + XWD common case CPU overhead down 60-70%, peak memory down 70%.
    + Additional halving of CPU overhead in 240- and 256-color modes.
    + Streamlined pixel pipeline for better parallelization.
  * Installation instructions:
    + New: Guix (Guy Fleury Iteriteka).
    + New: openSUSE (@jubalh).
  * Bug fixes:
    + [unfiled] Certain SVGs had transparency replaced with a white background (nemo).
    + [unfiled] -lm dependency belongs in libchafa, not frontend.</changelog>
  <changelog author="mvetter@suse.com" date="1566302400">- Update to 1.2.1:
  * Detect kitty and mlterm virtual terminals and apply optimal
    defaults accordingly
  * Make Automake build more strict and fix a few compatibility nits
  * Fix #30 - Failed to build on hurd-i386
  * Fix crash on certain broken GIFs</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566648000">- Update descriptions.
- Avoid double-shipping documentation, and make docs noarch.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1583323200">- Update to 1.2.2:
  * Fix #34 Cannot compile example</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1585828800">- Update to 1.4.0:
  * Added sixel graphics support. Chafa will automatically produce sixels
    if the connected terminal supports it. It can also be forced using the
    new -f or --format flag. This is a new implementation written from the
    ground up to maximize throughput.
  * Added the --glyph-file option, which loads glyph-symbol mappings from
    any file format supported by FreeType (TTF, PCF, etc). This allows for
    custom font support and improved symbol selection.
  * Added the --speed option specifying animation speed. It accepts a
    unitless multiplier, a specific number of frames per second, or max
    for maximum throughput.
  * There are now two ways to assign colors to symbol cells. Formerly,
    this was done based on the average color of the covered area. The new
    default is to use the median color, which produces sharper edges,
    but is slightly more prone to high-frequency noise. The new option
  - -color-extractor selects the method to employ.
  * When displaying multiple files, the default delay between files has
    been changed from three seconds to zero. Animations will still play
    through once. This can be overridden on the chafa command line with -d
    or --duration.
  * Minor tweaks to built-in symbols.
  Performance improvements:
  * Halved pixel storage requirements from 64 bits to 32 bits,
    resulting in significant memory savings.
  * Now builds with -ffast-math, yielding a big speedup for DIN99d.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1586692800">- Update to 1.4.1:
  * Added configure option --disable-rpath. This allows packagers to
    prevent the hard-coded library search path from being embedded in
    the chafa command-line tool (Mo Zhou, #39).
  * Added defaults for the yaft terminal.
  Bug fixes:
  * #40 - Fails to build on hurd-i386 + other i386 (reported by Mo
    Zhou).
  * [unfiled] - Rare failed assert with mostly transparent sixel image
    (reported by Reddit user spryfigure).
  * [unfiled] - Minor typo in function docstring.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1610712000">- Update to 1.6.0:
  * Added support for fullwidth symbols that take up two character
    cells. These are common in East Asian scripts. Single-cell and
    double-cell symbols can be mixed, and -f symbols mode will use
    both if possible.
  * New symbol tags: alpha, digit, alnum, narrow, wide, ambiguous,
    ugly, bad. "Ambiguous" symbols have uncertain widths and may
    render poorly in some terminals. "Ugly" denotes symbols that
    are unsuitable for Chafa's cell-based graphics (multicolor
    emoji, ideographic descriptors, etc). "Bad" is a superset of
    these two categories. Bad symbols are always excluded unless
    explicitly enabled with e.g. CHAFA_SYMBOL_TAG_BAD (--symbols
    +bad in the frontend).
  * The font loader (--glyph-file option) now does a better job
    with proportional fonts.
  * Added options for controlling lossless optimization of output.
    Currently, attribute reuse and character repetition (REP
    sequence) are implemented.
  * Added -O option to the frontend. This controls the optimization
    level.
  * Added a simple abstraction layer for terminal control sequences
    (ChafaTermInfo and ChafaTermDb). This allows for improved
    terminal support.
  * FbTerm is now supported with TERM=fbterm in the environment.
  * Bug fixes:
  - #43 Fix signal handler.
  - [unfiled] Crash when invalid font paths were passed on command line.
  - [unfiled] Small typo in fontgen's READM).
  - [unfiled] Bad contrast adjustment in images with transparency.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1623067200">- Update to 1.6.1:
  * Add NOCONFIGURE variable to autogen.sh to skip configure
  Bug fixes:
  * #50 SIGBUS while loading huge GIFs
  * #52 Produces small glitches in output with some images
  * #54 Haiku port fails on 32bit
  * [unfiled] Exclude RTL code points that could break the output.
  * [unfiled] Apple Terminal lacks truecolor support, so make it
    default to 256 colors
  * [unfiled] Fix typo affecting middle dot symbol.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1630497600">- Update to 1.8.0:
  * Added basic support for the Kitty and iTerm2 graphics protocols.
    These are enabled automatically when corresponding terminal support
    is detected, or manually with -f kitty or -f iterm.
  * Implemented an 8-color mode, selectable with -c 8
  * Implemented a foreground-only switch, --fg-only. This produces
    character art using foreground colors only, and will avoid
    modifying or resetting the background color. Looks best with
    non-contiguous symbols (e.g. ascii).
  * Added builtins for Japanese kana fullwidth symbols. These can
    now be used without loading any external fonts (try -c none --symbols wide).
  * Added builtins for legacy computer symbols (mainly wedges and
    sextant blocks). These were widely used in PETSCII and Teletext,
    and can be enabled using --symbols or --fill with their respective
    tags: legacy, wedge and sextant (@hodefoting).
  * Since there is a growing number of builtin symbols that may not
    be available everywhere, the default selection has been restricted
    to the widely supported block and border sets.
  * If possible, we now select a visually blank character from the
    specified symbol/fill sets instead of hardcoding ASCII space for
    featureless cells. One practical upshot of this is that the constant-width
    braille range can be used to produce consistent images even in contexts
    with variable-width fonts. U+2800 (BRAILLE PATTERN BLANK) will then be used in blank cells.
  * Improved terminal size detection when used with pipelines and redirection.
    This should now produce an image properly sized for your terminal:
    curl https://i.imgur.com/WFDEFVg.jpeg | chafa - | tee out
  * ChafaCanvas gained API functions for programmatically getting and
    setting character cell contents. These are used in a new example
    in tests/ncurses.c demonstrating ncurses integration.
  * Made --disable-rpath the default in order to simplify packaging.
  * Added a HACKING file featuring a much needed release checklist.
  * Improved terminal support:
    + Ctx will now use optimizing REP sequences at high -O levels.
    + foot now defaults to sixels.
    + iTerm2 now defaults to the iTerm2 protocol.
    + Kitty now defaults to the Kitty protocol.
    + st now defaults to truecolor symbols.
  * Bug fixes:
    + #44 Missing error handling on stdout writes.
    + [unfiled] Solid symbols erroneously replaced by fill in FGBG mode.
    + [unfiled] Integer formatter was not using fast path for 8-bit values.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1651147200">- bsc#1198965 (CVE-2022-1507): Fix NULL pointer deref in gif_internal_decode_frame
  * Add chafa-CVE-2022-1507.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1655294400">- bsc#1200510 (CVE-2022-2061): Fix heap based buffer overflow
  in lzw_decode
  * Add chafa-CVE-2022-2061.patch</changelog>
</package>
<package pkgid="f2550eb2e80be1fd562a9f631d6f3a406ec84ec13f50ea62d719e099f73d6316" name="chafa-devel" arch="i586">
  <version epoch="0" ver="1.8.0" rel="bp154.3.3.1"/>
  <changelog author="mvetter@suse.com" date="1549627200">- Initial package chafa 1.0.1 for openSUSE</changelog>
  <changelog author="mvetter@suse.com" date="1565006400">- Update to 1.2.0:
  * Added --dither, --dither-grain and --dither-intensity options.
    These allow for sub-cell dithering in quantized modes (none,
    2, 16, 240 and 256). Especially beneficial when used with
  - p off.
  * Added API for ordered and diffusion-based dithering in quantization.
  * Added API support for multiple 8bpc pixel modes: RGB, BGR, RGBA,
    BGRA, ARGB, ABGR with either premultiplied or unassociated alpha channels.
  * Smooth scaling is now done internally, meaning libchafa
    consumers no longer need to prescale images.
  * Implemented a machine learning tool that can generate custom
    fonts for efficient image reproduction from a provided dataset.
    This is left uninstalled since it's still experimental
  * Throughput improvements:
    + GIF animations now start playing instantly.
    + GIF CPU overhead reduced by 75%, peak memory use down 95%-99% (!).
    + XWD common case CPU overhead down 60-70%, peak memory down 70%.
    + Additional halving of CPU overhead in 240- and 256-color modes.
    + Streamlined pixel pipeline for better parallelization.
  * Installation instructions:
    + New: Guix (Guy Fleury Iteriteka).
    + New: openSUSE (@jubalh).
  * Bug fixes:
    + [unfiled] Certain SVGs had transparency replaced with a white background (nemo).
    + [unfiled] -lm dependency belongs in libchafa, not frontend.</changelog>
  <changelog author="mvetter@suse.com" date="1566302400">- Update to 1.2.1:
  * Detect kitty and mlterm virtual terminals and apply optimal
    defaults accordingly
  * Make Automake build more strict and fix a few compatibility nits
  * Fix #30 - Failed to build on hurd-i386
  * Fix crash on certain broken GIFs</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566648000">- Update descriptions.
- Avoid double-shipping documentation, and make docs noarch.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1583323200">- Update to 1.2.2:
  * Fix #34 Cannot compile example</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1585828800">- Update to 1.4.0:
  * Added sixel graphics support. Chafa will automatically produce sixels
    if the connected terminal supports it. It can also be forced using the
    new -f or --format flag. This is a new implementation written from the
    ground up to maximize throughput.
  * Added the --glyph-file option, which loads glyph-symbol mappings from
    any file format supported by FreeType (TTF, PCF, etc). This allows for
    custom font support and improved symbol selection.
  * Added the --speed option specifying animation speed. It accepts a
    unitless multiplier, a specific number of frames per second, or max
    for maximum throughput.
  * There are now two ways to assign colors to symbol cells. Formerly,
    this was done based on the average color of the covered area. The new
    default is to use the median color, which produces sharper edges,
    but is slightly more prone to high-frequency noise. The new option
  - -color-extractor selects the method to employ.
  * When displaying multiple files, the default delay between files has
    been changed from three seconds to zero. Animations will still play
    through once. This can be overridden on the chafa command line with -d
    or --duration.
  * Minor tweaks to built-in symbols.
  Performance improvements:
  * Halved pixel storage requirements from 64 bits to 32 bits,
    resulting in significant memory savings.
  * Now builds with -ffast-math, yielding a big speedup for DIN99d.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1586692800">- Update to 1.4.1:
  * Added configure option --disable-rpath. This allows packagers to
    prevent the hard-coded library search path from being embedded in
    the chafa command-line tool (Mo Zhou, #39).
  * Added defaults for the yaft terminal.
  Bug fixes:
  * #40 - Fails to build on hurd-i386 + other i386 (reported by Mo
    Zhou).
  * [unfiled] - Rare failed assert with mostly transparent sixel image
    (reported by Reddit user spryfigure).
  * [unfiled] - Minor typo in function docstring.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1610712000">- Update to 1.6.0:
  * Added support for fullwidth symbols that take up two character
    cells. These are common in East Asian scripts. Single-cell and
    double-cell symbols can be mixed, and -f symbols mode will use
    both if possible.
  * New symbol tags: alpha, digit, alnum, narrow, wide, ambiguous,
    ugly, bad. "Ambiguous" symbols have uncertain widths and may
    render poorly in some terminals. "Ugly" denotes symbols that
    are unsuitable for Chafa's cell-based graphics (multicolor
    emoji, ideographic descriptors, etc). "Bad" is a superset of
    these two categories. Bad symbols are always excluded unless
    explicitly enabled with e.g. CHAFA_SYMBOL_TAG_BAD (--symbols
    +bad in the frontend).
  * The font loader (--glyph-file option) now does a better job
    with proportional fonts.
  * Added options for controlling lossless optimization of output.
    Currently, attribute reuse and character repetition (REP
    sequence) are implemented.
  * Added -O option to the frontend. This controls the optimization
    level.
  * Added a simple abstraction layer for terminal control sequences
    (ChafaTermInfo and ChafaTermDb). This allows for improved
    terminal support.
  * FbTerm is now supported with TERM=fbterm in the environment.
  * Bug fixes:
  - #43 Fix signal handler.
  - [unfiled] Crash when invalid font paths were passed on command line.
  - [unfiled] Small typo in fontgen's READM).
  - [unfiled] Bad contrast adjustment in images with transparency.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1623067200">- Update to 1.6.1:
  * Add NOCONFIGURE variable to autogen.sh to skip configure
  Bug fixes:
  * #50 SIGBUS while loading huge GIFs
  * #52 Produces small glitches in output with some images
  * #54 Haiku port fails on 32bit
  * [unfiled] Exclude RTL code points that could break the output.
  * [unfiled] Apple Terminal lacks truecolor support, so make it
    default to 256 colors
  * [unfiled] Fix typo affecting middle dot symbol.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1630497600">- Update to 1.8.0:
  * Added basic support for the Kitty and iTerm2 graphics protocols.
    These are enabled automatically when corresponding terminal support
    is detected, or manually with -f kitty or -f iterm.
  * Implemented an 8-color mode, selectable with -c 8
  * Implemented a foreground-only switch, --fg-only. This produces
    character art using foreground colors only, and will avoid
    modifying or resetting the background color. Looks best with
    non-contiguous symbols (e.g. ascii).
  * Added builtins for Japanese kana fullwidth symbols. These can
    now be used without loading any external fonts (try -c none --symbols wide).
  * Added builtins for legacy computer symbols (mainly wedges and
    sextant blocks). These were widely used in PETSCII and Teletext,
    and can be enabled using --symbols or --fill with their respective
    tags: legacy, wedge and sextant (@hodefoting).
  * Since there is a growing number of builtin symbols that may not
    be available everywhere, the default selection has been restricted
    to the widely supported block and border sets.
  * If possible, we now select a visually blank character from the
    specified symbol/fill sets instead of hardcoding ASCII space for
    featureless cells. One practical upshot of this is that the constant-width
    braille range can be used to produce consistent images even in contexts
    with variable-width fonts. U+2800 (BRAILLE PATTERN BLANK) will then be used in blank cells.
  * Improved terminal size detection when used with pipelines and redirection.
    This should now produce an image properly sized for your terminal:
    curl https://i.imgur.com/WFDEFVg.jpeg | chafa - | tee out
  * ChafaCanvas gained API functions for programmatically getting and
    setting character cell contents. These are used in a new example
    in tests/ncurses.c demonstrating ncurses integration.
  * Made --disable-rpath the default in order to simplify packaging.
  * Added a HACKING file featuring a much needed release checklist.
  * Improved terminal support:
    + Ctx will now use optimizing REP sequences at high -O levels.
    + foot now defaults to sixels.
    + iTerm2 now defaults to the iTerm2 protocol.
    + Kitty now defaults to the Kitty protocol.
    + st now defaults to truecolor symbols.
  * Bug fixes:
    + #44 Missing error handling on stdout writes.
    + [unfiled] Solid symbols erroneously replaced by fill in FGBG mode.
    + [unfiled] Integer formatter was not using fast path for 8-bit values.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1651147200">- bsc#1198965 (CVE-2022-1507): Fix NULL pointer deref in gif_internal_decode_frame
  * Add chafa-CVE-2022-1507.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1655294400">- bsc#1200510 (CVE-2022-2061): Fix heap based buffer overflow
  in lzw_decode
  * Add chafa-CVE-2022-2061.patch</changelog>
</package>
<package pkgid="1dba4e51111913a428ee16c1676f28b9aeb02189c17979b4e4bd09cac5940c22" name="chafa-devel" arch="ppc64le">
  <version epoch="0" ver="1.8.0" rel="bp154.3.3.1"/>
  <changelog author="mvetter@suse.com" date="1549627200">- Initial package chafa 1.0.1 for openSUSE</changelog>
  <changelog author="mvetter@suse.com" date="1565006400">- Update to 1.2.0:
  * Added --dither, --dither-grain and --dither-intensity options.
    These allow for sub-cell dithering in quantized modes (none,
    2, 16, 240 and 256). Especially beneficial when used with
  - p off.
  * Added API for ordered and diffusion-based dithering in quantization.
  * Added API support for multiple 8bpc pixel modes: RGB, BGR, RGBA,
    BGRA, ARGB, ABGR with either premultiplied or unassociated alpha channels.
  * Smooth scaling is now done internally, meaning libchafa
    consumers no longer need to prescale images.
  * Implemented a machine learning tool that can generate custom
    fonts for efficient image reproduction from a provided dataset.
    This is left uninstalled since it's still experimental
  * Throughput improvements:
    + GIF animations now start playing instantly.
    + GIF CPU overhead reduced by 75%, peak memory use down 95%-99% (!).
    + XWD common case CPU overhead down 60-70%, peak memory down 70%.
    + Additional halving of CPU overhead in 240- and 256-color modes.
    + Streamlined pixel pipeline for better parallelization.
  * Installation instructions:
    + New: Guix (Guy Fleury Iteriteka).
    + New: openSUSE (@jubalh).
  * Bug fixes:
    + [unfiled] Certain SVGs had transparency replaced with a white background (nemo).
    + [unfiled] -lm dependency belongs in libchafa, not frontend.</changelog>
  <changelog author="mvetter@suse.com" date="1566302400">- Update to 1.2.1:
  * Detect kitty and mlterm virtual terminals and apply optimal
    defaults accordingly
  * Make Automake build more strict and fix a few compatibility nits
  * Fix #30 - Failed to build on hurd-i386
  * Fix crash on certain broken GIFs</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566648000">- Update descriptions.
- Avoid double-shipping documentation, and make docs noarch.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1583323200">- Update to 1.2.2:
  * Fix #34 Cannot compile example</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1585828800">- Update to 1.4.0:
  * Added sixel graphics support. Chafa will automatically produce sixels
    if the connected terminal supports it. It can also be forced using the
    new -f or --format flag. This is a new implementation written from the
    ground up to maximize throughput.
  * Added the --glyph-file option, which loads glyph-symbol mappings from
    any file format supported by FreeType (TTF, PCF, etc). This allows for
    custom font support and improved symbol selection.
  * Added the --speed option specifying animation speed. It accepts a
    unitless multiplier, a specific number of frames per second, or max
    for maximum throughput.
  * There are now two ways to assign colors to symbol cells. Formerly,
    this was done based on the average color of the covered area. The new
    default is to use the median color, which produces sharper edges,
    but is slightly more prone to high-frequency noise. The new option
  - -color-extractor selects the method to employ.
  * When displaying multiple files, the default delay between files has
    been changed from three seconds to zero. Animations will still play
    through once. This can be overridden on the chafa command line with -d
    or --duration.
  * Minor tweaks to built-in symbols.
  Performance improvements:
  * Halved pixel storage requirements from 64 bits to 32 bits,
    resulting in significant memory savings.
  * Now builds with -ffast-math, yielding a big speedup for DIN99d.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1586692800">- Update to 1.4.1:
  * Added configure option --disable-rpath. This allows packagers to
    prevent the hard-coded library search path from being embedded in
    the chafa command-line tool (Mo Zhou, #39).
  * Added defaults for the yaft terminal.
  Bug fixes:
  * #40 - Fails to build on hurd-i386 + other i386 (reported by Mo
    Zhou).
  * [unfiled] - Rare failed assert with mostly transparent sixel image
    (reported by Reddit user spryfigure).
  * [unfiled] - Minor typo in function docstring.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1610712000">- Update to 1.6.0:
  * Added support for fullwidth symbols that take up two character
    cells. These are common in East Asian scripts. Single-cell and
    double-cell symbols can be mixed, and -f symbols mode will use
    both if possible.
  * New symbol tags: alpha, digit, alnum, narrow, wide, ambiguous,
    ugly, bad. "Ambiguous" symbols have uncertain widths and may
    render poorly in some terminals. "Ugly" denotes symbols that
    are unsuitable for Chafa's cell-based graphics (multicolor
    emoji, ideographic descriptors, etc). "Bad" is a superset of
    these two categories. Bad symbols are always excluded unless
    explicitly enabled with e.g. CHAFA_SYMBOL_TAG_BAD (--symbols
    +bad in the frontend).
  * The font loader (--glyph-file option) now does a better job
    with proportional fonts.
  * Added options for controlling lossless optimization of output.
    Currently, attribute reuse and character repetition (REP
    sequence) are implemented.
  * Added -O option to the frontend. This controls the optimization
    level.
  * Added a simple abstraction layer for terminal control sequences
    (ChafaTermInfo and ChafaTermDb). This allows for improved
    terminal support.
  * FbTerm is now supported with TERM=fbterm in the environment.
  * Bug fixes:
  - #43 Fix signal handler.
  - [unfiled] Crash when invalid font paths were passed on command line.
  - [unfiled] Small typo in fontgen's READM).
  - [unfiled] Bad contrast adjustment in images with transparency.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1623067200">- Update to 1.6.1:
  * Add NOCONFIGURE variable to autogen.sh to skip configure
  Bug fixes:
  * #50 SIGBUS while loading huge GIFs
  * #52 Produces small glitches in output with some images
  * #54 Haiku port fails on 32bit
  * [unfiled] Exclude RTL code points that could break the output.
  * [unfiled] Apple Terminal lacks truecolor support, so make it
    default to 256 colors
  * [unfiled] Fix typo affecting middle dot symbol.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1630497600">- Update to 1.8.0:
  * Added basic support for the Kitty and iTerm2 graphics protocols.
    These are enabled automatically when corresponding terminal support
    is detected, or manually with -f kitty or -f iterm.
  * Implemented an 8-color mode, selectable with -c 8
  * Implemented a foreground-only switch, --fg-only. This produces
    character art using foreground colors only, and will avoid
    modifying or resetting the background color. Looks best with
    non-contiguous symbols (e.g. ascii).
  * Added builtins for Japanese kana fullwidth symbols. These can
    now be used without loading any external fonts (try -c none --symbols wide).
  * Added builtins for legacy computer symbols (mainly wedges and
    sextant blocks). These were widely used in PETSCII and Teletext,
    and can be enabled using --symbols or --fill with their respective
    tags: legacy, wedge and sextant (@hodefoting).
  * Since there is a growing number of builtin symbols that may not
    be available everywhere, the default selection has been restricted
    to the widely supported block and border sets.
  * If possible, we now select a visually blank character from the
    specified symbol/fill sets instead of hardcoding ASCII space for
    featureless cells. One practical upshot of this is that the constant-width
    braille range can be used to produce consistent images even in contexts
    with variable-width fonts. U+2800 (BRAILLE PATTERN BLANK) will then be used in blank cells.
  * Improved terminal size detection when used with pipelines and redirection.
    This should now produce an image properly sized for your terminal:
    curl https://i.imgur.com/WFDEFVg.jpeg | chafa - | tee out
  * ChafaCanvas gained API functions for programmatically getting and
    setting character cell contents. These are used in a new example
    in tests/ncurses.c demonstrating ncurses integration.
  * Made --disable-rpath the default in order to simplify packaging.
  * Added a HACKING file featuring a much needed release checklist.
  * Improved terminal support:
    + Ctx will now use optimizing REP sequences at high -O levels.
    + foot now defaults to sixels.
    + iTerm2 now defaults to the iTerm2 protocol.
    + Kitty now defaults to the Kitty protocol.
    + st now defaults to truecolor symbols.
  * Bug fixes:
    + #44 Missing error handling on stdout writes.
    + [unfiled] Solid symbols erroneously replaced by fill in FGBG mode.
    + [unfiled] Integer formatter was not using fast path for 8-bit values.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1651147200">- bsc#1198965 (CVE-2022-1507): Fix NULL pointer deref in gif_internal_decode_frame
  * Add chafa-CVE-2022-1507.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1655294400">- bsc#1200510 (CVE-2022-2061): Fix heap based buffer overflow
  in lzw_decode
  * Add chafa-CVE-2022-2061.patch</changelog>
</package>
<package pkgid="9bdfe93ed43775a1183ed559907ee52d75adc89013e667bac13a96ad4f731281" name="chafa-devel" arch="s390x">
  <version epoch="0" ver="1.8.0" rel="bp154.3.3.1"/>
  <changelog author="mvetter@suse.com" date="1549627200">- Initial package chafa 1.0.1 for openSUSE</changelog>
  <changelog author="mvetter@suse.com" date="1565006400">- Update to 1.2.0:
  * Added --dither, --dither-grain and --dither-intensity options.
    These allow for sub-cell dithering in quantized modes (none,
    2, 16, 240 and 256). Especially beneficial when used with
  - p off.
  * Added API for ordered and diffusion-based dithering in quantization.
  * Added API support for multiple 8bpc pixel modes: RGB, BGR, RGBA,
    BGRA, ARGB, ABGR with either premultiplied or unassociated alpha channels.
  * Smooth scaling is now done internally, meaning libchafa
    consumers no longer need to prescale images.
  * Implemented a machine learning tool that can generate custom
    fonts for efficient image reproduction from a provided dataset.
    This is left uninstalled since it's still experimental
  * Throughput improvements:
    + GIF animations now start playing instantly.
    + GIF CPU overhead reduced by 75%, peak memory use down 95%-99% (!).
    + XWD common case CPU overhead down 60-70%, peak memory down 70%.
    + Additional halving of CPU overhead in 240- and 256-color modes.
    + Streamlined pixel pipeline for better parallelization.
  * Installation instructions:
    + New: Guix (Guy Fleury Iteriteka).
    + New: openSUSE (@jubalh).
  * Bug fixes:
    + [unfiled] Certain SVGs had transparency replaced with a white background (nemo).
    + [unfiled] -lm dependency belongs in libchafa, not frontend.</changelog>
  <changelog author="mvetter@suse.com" date="1566302400">- Update to 1.2.1:
  * Detect kitty and mlterm virtual terminals and apply optimal
    defaults accordingly
  * Make Automake build more strict and fix a few compatibility nits
  * Fix #30 - Failed to build on hurd-i386
  * Fix crash on certain broken GIFs</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566648000">- Update descriptions.
- Avoid double-shipping documentation, and make docs noarch.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1583323200">- Update to 1.2.2:
  * Fix #34 Cannot compile example</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1585828800">- Update to 1.4.0:
  * Added sixel graphics support. Chafa will automatically produce sixels
    if the connected terminal supports it. It can also be forced using the
    new -f or --format flag. This is a new implementation written from the
    ground up to maximize throughput.
  * Added the --glyph-file option, which loads glyph-symbol mappings from
    any file format supported by FreeType (TTF, PCF, etc). This allows for
    custom font support and improved symbol selection.
  * Added the --speed option specifying animation speed. It accepts a
    unitless multiplier, a specific number of frames per second, or max
    for maximum throughput.
  * There are now two ways to assign colors to symbol cells. Formerly,
    this was done based on the average color of the covered area. The new
    default is to use the median color, which produces sharper edges,
    but is slightly more prone to high-frequency noise. The new option
  - -color-extractor selects the method to employ.
  * When displaying multiple files, the default delay between files has
    been changed from three seconds to zero. Animations will still play
    through once. This can be overridden on the chafa command line with -d
    or --duration.
  * Minor tweaks to built-in symbols.
  Performance improvements:
  * Halved pixel storage requirements from 64 bits to 32 bits,
    resulting in significant memory savings.
  * Now builds with -ffast-math, yielding a big speedup for DIN99d.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1586692800">- Update to 1.4.1:
  * Added configure option --disable-rpath. This allows packagers to
    prevent the hard-coded library search path from being embedded in
    the chafa command-line tool (Mo Zhou, #39).
  * Added defaults for the yaft terminal.
  Bug fixes:
  * #40 - Fails to build on hurd-i386 + other i386 (reported by Mo
    Zhou).
  * [unfiled] - Rare failed assert with mostly transparent sixel image
    (reported by Reddit user spryfigure).
  * [unfiled] - Minor typo in function docstring.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1610712000">- Update to 1.6.0:
  * Added support for fullwidth symbols that take up two character
    cells. These are common in East Asian scripts. Single-cell and
    double-cell symbols can be mixed, and -f symbols mode will use
    both if possible.
  * New symbol tags: alpha, digit, alnum, narrow, wide, ambiguous,
    ugly, bad. "Ambiguous" symbols have uncertain widths and may
    render poorly in some terminals. "Ugly" denotes symbols that
    are unsuitable for Chafa's cell-based graphics (multicolor
    emoji, ideographic descriptors, etc). "Bad" is a superset of
    these two categories. Bad symbols are always excluded unless
    explicitly enabled with e.g. CHAFA_SYMBOL_TAG_BAD (--symbols
    +bad in the frontend).
  * The font loader (--glyph-file option) now does a better job
    with proportional fonts.
  * Added options for controlling lossless optimization of output.
    Currently, attribute reuse and character repetition (REP
    sequence) are implemented.
  * Added -O option to the frontend. This controls the optimization
    level.
  * Added a simple abstraction layer for terminal control sequences
    (ChafaTermInfo and ChafaTermDb). This allows for improved
    terminal support.
  * FbTerm is now supported with TERM=fbterm in the environment.
  * Bug fixes:
  - #43 Fix signal handler.
  - [unfiled] Crash when invalid font paths were passed on command line.
  - [unfiled] Small typo in fontgen's READM).
  - [unfiled] Bad contrast adjustment in images with transparency.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1623067200">- Update to 1.6.1:
  * Add NOCONFIGURE variable to autogen.sh to skip configure
  Bug fixes:
  * #50 SIGBUS while loading huge GIFs
  * #52 Produces small glitches in output with some images
  * #54 Haiku port fails on 32bit
  * [unfiled] Exclude RTL code points that could break the output.
  * [unfiled] Apple Terminal lacks truecolor support, so make it
    default to 256 colors
  * [unfiled] Fix typo affecting middle dot symbol.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1630497600">- Update to 1.8.0:
  * Added basic support for the Kitty and iTerm2 graphics protocols.
    These are enabled automatically when corresponding terminal support
    is detected, or manually with -f kitty or -f iterm.
  * Implemented an 8-color mode, selectable with -c 8
  * Implemented a foreground-only switch, --fg-only. This produces
    character art using foreground colors only, and will avoid
    modifying or resetting the background color. Looks best with
    non-contiguous symbols (e.g. ascii).
  * Added builtins for Japanese kana fullwidth symbols. These can
    now be used without loading any external fonts (try -c none --symbols wide).
  * Added builtins for legacy computer symbols (mainly wedges and
    sextant blocks). These were widely used in PETSCII and Teletext,
    and can be enabled using --symbols or --fill with their respective
    tags: legacy, wedge and sextant (@hodefoting).
  * Since there is a growing number of builtin symbols that may not
    be available everywhere, the default selection has been restricted
    to the widely supported block and border sets.
  * If possible, we now select a visually blank character from the
    specified symbol/fill sets instead of hardcoding ASCII space for
    featureless cells. One practical upshot of this is that the constant-width
    braille range can be used to produce consistent images even in contexts
    with variable-width fonts. U+2800 (BRAILLE PATTERN BLANK) will then be used in blank cells.
  * Improved terminal size detection when used with pipelines and redirection.
    This should now produce an image properly sized for your terminal:
    curl https://i.imgur.com/WFDEFVg.jpeg | chafa - | tee out
  * ChafaCanvas gained API functions for programmatically getting and
    setting character cell contents. These are used in a new example
    in tests/ncurses.c demonstrating ncurses integration.
  * Made --disable-rpath the default in order to simplify packaging.
  * Added a HACKING file featuring a much needed release checklist.
  * Improved terminal support:
    + Ctx will now use optimizing REP sequences at high -O levels.
    + foot now defaults to sixels.
    + iTerm2 now defaults to the iTerm2 protocol.
    + Kitty now defaults to the Kitty protocol.
    + st now defaults to truecolor symbols.
  * Bug fixes:
    + #44 Missing error handling on stdout writes.
    + [unfiled] Solid symbols erroneously replaced by fill in FGBG mode.
    + [unfiled] Integer formatter was not using fast path for 8-bit values.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1651147200">- bsc#1198965 (CVE-2022-1507): Fix NULL pointer deref in gif_internal_decode_frame
  * Add chafa-CVE-2022-1507.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1655294400">- bsc#1200510 (CVE-2022-2061): Fix heap based buffer overflow
  in lzw_decode
  * Add chafa-CVE-2022-2061.patch</changelog>
</package>
<package pkgid="a299f12a2cfbea158a18577eb85e679bf4d4910c6c59bbe1355b0193ba7f994a" name="chafa-devel" arch="x86_64">
  <version epoch="0" ver="1.8.0" rel="bp154.3.3.1"/>
  <changelog author="mvetter@suse.com" date="1549627200">- Initial package chafa 1.0.1 for openSUSE</changelog>
  <changelog author="mvetter@suse.com" date="1565006400">- Update to 1.2.0:
  * Added --dither, --dither-grain and --dither-intensity options.
    These allow for sub-cell dithering in quantized modes (none,
    2, 16, 240 and 256). Especially beneficial when used with
  - p off.
  * Added API for ordered and diffusion-based dithering in quantization.
  * Added API support for multiple 8bpc pixel modes: RGB, BGR, RGBA,
    BGRA, ARGB, ABGR with either premultiplied or unassociated alpha channels.
  * Smooth scaling is now done internally, meaning libchafa
    consumers no longer need to prescale images.
  * Implemented a machine learning tool that can generate custom
    fonts for efficient image reproduction from a provided dataset.
    This is left uninstalled since it's still experimental
  * Throughput improvements:
    + GIF animations now start playing instantly.
    + GIF CPU overhead reduced by 75%, peak memory use down 95%-99% (!).
    + XWD common case CPU overhead down 60-70%, peak memory down 70%.
    + Additional halving of CPU overhead in 240- and 256-color modes.
    + Streamlined pixel pipeline for better parallelization.
  * Installation instructions:
    + New: Guix (Guy Fleury Iteriteka).
    + New: openSUSE (@jubalh).
  * Bug fixes:
    + [unfiled] Certain SVGs had transparency replaced with a white background (nemo).
    + [unfiled] -lm dependency belongs in libchafa, not frontend.</changelog>
  <changelog author="mvetter@suse.com" date="1566302400">- Update to 1.2.1:
  * Detect kitty and mlterm virtual terminals and apply optimal
    defaults accordingly
  * Make Automake build more strict and fix a few compatibility nits
  * Fix #30 - Failed to build on hurd-i386
  * Fix crash on certain broken GIFs</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566648000">- Update descriptions.
- Avoid double-shipping documentation, and make docs noarch.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1583323200">- Update to 1.2.2:
  * Fix #34 Cannot compile example</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1585828800">- Update to 1.4.0:
  * Added sixel graphics support. Chafa will automatically produce sixels
    if the connected terminal supports it. It can also be forced using the
    new -f or --format flag. This is a new implementation written from the
    ground up to maximize throughput.
  * Added the --glyph-file option, which loads glyph-symbol mappings from
    any file format supported by FreeType (TTF, PCF, etc). This allows for
    custom font support and improved symbol selection.
  * Added the --speed option specifying animation speed. It accepts a
    unitless multiplier, a specific number of frames per second, or max
    for maximum throughput.
  * There are now two ways to assign colors to symbol cells. Formerly,
    this was done based on the average color of the covered area. The new
    default is to use the median color, which produces sharper edges,
    but is slightly more prone to high-frequency noise. The new option
  - -color-extractor selects the method to employ.
  * When displaying multiple files, the default delay between files has
    been changed from three seconds to zero. Animations will still play
    through once. This can be overridden on the chafa command line with -d
    or --duration.
  * Minor tweaks to built-in symbols.
  Performance improvements:
  * Halved pixel storage requirements from 64 bits to 32 bits,
    resulting in significant memory savings.
  * Now builds with -ffast-math, yielding a big speedup for DIN99d.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1586692800">- Update to 1.4.1:
  * Added configure option --disable-rpath. This allows packagers to
    prevent the hard-coded library search path from being embedded in
    the chafa command-line tool (Mo Zhou, #39).
  * Added defaults for the yaft terminal.
  Bug fixes:
  * #40 - Fails to build on hurd-i386 + other i386 (reported by Mo
    Zhou).
  * [unfiled] - Rare failed assert with mostly transparent sixel image
    (reported by Reddit user spryfigure).
  * [unfiled] - Minor typo in function docstring.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1610712000">- Update to 1.6.0:
  * Added support for fullwidth symbols that take up two character
    cells. These are common in East Asian scripts. Single-cell and
    double-cell symbols can be mixed, and -f symbols mode will use
    both if possible.
  * New symbol tags: alpha, digit, alnum, narrow, wide, ambiguous,
    ugly, bad. "Ambiguous" symbols have uncertain widths and may
    render poorly in some terminals. "Ugly" denotes symbols that
    are unsuitable for Chafa's cell-based graphics (multicolor
    emoji, ideographic descriptors, etc). "Bad" is a superset of
    these two categories. Bad symbols are always excluded unless
    explicitly enabled with e.g. CHAFA_SYMBOL_TAG_BAD (--symbols
    +bad in the frontend).
  * The font loader (--glyph-file option) now does a better job
    with proportional fonts.
  * Added options for controlling lossless optimization of output.
    Currently, attribute reuse and character repetition (REP
    sequence) are implemented.
  * Added -O option to the frontend. This controls the optimization
    level.
  * Added a simple abstraction layer for terminal control sequences
    (ChafaTermInfo and ChafaTermDb). This allows for improved
    terminal support.
  * FbTerm is now supported with TERM=fbterm in the environment.
  * Bug fixes:
  - #43 Fix signal handler.
  - [unfiled] Crash when invalid font paths were passed on command line.
  - [unfiled] Small typo in fontgen's READM).
  - [unfiled] Bad contrast adjustment in images with transparency.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1623067200">- Update to 1.6.1:
  * Add NOCONFIGURE variable to autogen.sh to skip configure
  Bug fixes:
  * #50 SIGBUS while loading huge GIFs
  * #52 Produces small glitches in output with some images
  * #54 Haiku port fails on 32bit
  * [unfiled] Exclude RTL code points that could break the output.
  * [unfiled] Apple Terminal lacks truecolor support, so make it
    default to 256 colors
  * [unfiled] Fix typo affecting middle dot symbol.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1630497600">- Update to 1.8.0:
  * Added basic support for the Kitty and iTerm2 graphics protocols.
    These are enabled automatically when corresponding terminal support
    is detected, or manually with -f kitty or -f iterm.
  * Implemented an 8-color mode, selectable with -c 8
  * Implemented a foreground-only switch, --fg-only. This produces
    character art using foreground colors only, and will avoid
    modifying or resetting the background color. Looks best with
    non-contiguous symbols (e.g. ascii).
  * Added builtins for Japanese kana fullwidth symbols. These can
    now be used without loading any external fonts (try -c none --symbols wide).
  * Added builtins for legacy computer symbols (mainly wedges and
    sextant blocks). These were widely used in PETSCII and Teletext,
    and can be enabled using --symbols or --fill with their respective
    tags: legacy, wedge and sextant (@hodefoting).
  * Since there is a growing number of builtin symbols that may not
    be available everywhere, the default selection has been restricted
    to the widely supported block and border sets.
  * If possible, we now select a visually blank character from the
    specified symbol/fill sets instead of hardcoding ASCII space for
    featureless cells. One practical upshot of this is that the constant-width
    braille range can be used to produce consistent images even in contexts
    with variable-width fonts. U+2800 (BRAILLE PATTERN BLANK) will then be used in blank cells.
  * Improved terminal size detection when used with pipelines and redirection.
    This should now produce an image properly sized for your terminal:
    curl https://i.imgur.com/WFDEFVg.jpeg | chafa - | tee out
  * ChafaCanvas gained API functions for programmatically getting and
    setting character cell contents. These are used in a new example
    in tests/ncurses.c demonstrating ncurses integration.
  * Made --disable-rpath the default in order to simplify packaging.
  * Added a HACKING file featuring a much needed release checklist.
  * Improved terminal support:
    + Ctx will now use optimizing REP sequences at high -O levels.
    + foot now defaults to sixels.
    + iTerm2 now defaults to the iTerm2 protocol.
    + Kitty now defaults to the Kitty protocol.
    + st now defaults to truecolor symbols.
  * Bug fixes:
    + #44 Missing error handling on stdout writes.
    + [unfiled] Solid symbols erroneously replaced by fill in FGBG mode.
    + [unfiled] Integer formatter was not using fast path for 8-bit values.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1651147200">- bsc#1198965 (CVE-2022-1507): Fix NULL pointer deref in gif_internal_decode_frame
  * Add chafa-CVE-2022-1507.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1655294400">- bsc#1200510 (CVE-2022-2061): Fix heap based buffer overflow
  in lzw_decode
  * Add chafa-CVE-2022-2061.patch</changelog>
</package>
<package pkgid="2dc1a85496d58dd49913355ed57afe1027affb4d82487f478e8f5978771858c8" name="chafa-devel" arch="aarch64">
  <version epoch="0" ver="1.8.0" rel="bp154.3.8.1"/>
  <changelog author="mvetter@suse.com" date="1549627200">- Initial package chafa 1.0.1 for openSUSE</changelog>
  <changelog author="mvetter@suse.com" date="1565006400">- Update to 1.2.0:
  * Added --dither, --dither-grain and --dither-intensity options.
    These allow for sub-cell dithering in quantized modes (none,
    2, 16, 240 and 256). Especially beneficial when used with
  - p off.
  * Added API for ordered and diffusion-based dithering in quantization.
  * Added API support for multiple 8bpc pixel modes: RGB, BGR, RGBA,
    BGRA, ARGB, ABGR with either premultiplied or unassociated alpha channels.
  * Smooth scaling is now done internally, meaning libchafa
    consumers no longer need to prescale images.
  * Implemented a machine learning tool that can generate custom
    fonts for efficient image reproduction from a provided dataset.
    This is left uninstalled since it's still experimental
  * Throughput improvements:
    + GIF animations now start playing instantly.
    + GIF CPU overhead reduced by 75%, peak memory use down 95%-99% (!).
    + XWD common case CPU overhead down 60-70%, peak memory down 70%.
    + Additional halving of CPU overhead in 240- and 256-color modes.
    + Streamlined pixel pipeline for better parallelization.
  * Installation instructions:
    + New: Guix (Guy Fleury Iteriteka).
    + New: openSUSE (@jubalh).
  * Bug fixes:
    + [unfiled] Certain SVGs had transparency replaced with a white background (nemo).
    + [unfiled] -lm dependency belongs in libchafa, not frontend.</changelog>
  <changelog author="mvetter@suse.com" date="1566302400">- Update to 1.2.1:
  * Detect kitty and mlterm virtual terminals and apply optimal
    defaults accordingly
  * Make Automake build more strict and fix a few compatibility nits
  * Fix #30 - Failed to build on hurd-i386
  * Fix crash on certain broken GIFs</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566648000">- Update descriptions.
- Avoid double-shipping documentation, and make docs noarch.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1583323200">- Update to 1.2.2:
  * Fix #34 Cannot compile example</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1585828800">- Update to 1.4.0:
  * Added sixel graphics support. Chafa will automatically produce sixels
    if the connected terminal supports it. It can also be forced using the
    new -f or --format flag. This is a new implementation written from the
    ground up to maximize throughput.
  * Added the --glyph-file option, which loads glyph-symbol mappings from
    any file format supported by FreeType (TTF, PCF, etc). This allows for
    custom font support and improved symbol selection.
  * Added the --speed option specifying animation speed. It accepts a
    unitless multiplier, a specific number of frames per second, or max
    for maximum throughput.
  * There are now two ways to assign colors to symbol cells. Formerly,
    this was done based on the average color of the covered area. The new
    default is to use the median color, which produces sharper edges,
    but is slightly more prone to high-frequency noise. The new option
  - -color-extractor selects the method to employ.
  * When displaying multiple files, the default delay between files has
    been changed from three seconds to zero. Animations will still play
    through once. This can be overridden on the chafa command line with -d
    or --duration.
  * Minor tweaks to built-in symbols.
  Performance improvements:
  * Halved pixel storage requirements from 64 bits to 32 bits,
    resulting in significant memory savings.
  * Now builds with -ffast-math, yielding a big speedup for DIN99d.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1586692800">- Update to 1.4.1:
  * Added configure option --disable-rpath. This allows packagers to
    prevent the hard-coded library search path from being embedded in
    the chafa command-line tool (Mo Zhou, #39).
  * Added defaults for the yaft terminal.
  Bug fixes:
  * #40 - Fails to build on hurd-i386 + other i386 (reported by Mo
    Zhou).
  * [unfiled] - Rare failed assert with mostly transparent sixel image
    (reported by Reddit user spryfigure).
  * [unfiled] - Minor typo in function docstring.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1610712000">- Update to 1.6.0:
  * Added support for fullwidth symbols that take up two character
    cells. These are common in East Asian scripts. Single-cell and
    double-cell symbols can be mixed, and -f symbols mode will use
    both if possible.
  * New symbol tags: alpha, digit, alnum, narrow, wide, ambiguous,
    ugly, bad. "Ambiguous" symbols have uncertain widths and may
    render poorly in some terminals. "Ugly" denotes symbols that
    are unsuitable for Chafa's cell-based graphics (multicolor
    emoji, ideographic descriptors, etc). "Bad" is a superset of
    these two categories. Bad symbols are always excluded unless
    explicitly enabled with e.g. CHAFA_SYMBOL_TAG_BAD (--symbols
    +bad in the frontend).
  * The font loader (--glyph-file option) now does a better job
    with proportional fonts.
  * Added options for controlling lossless optimization of output.
    Currently, attribute reuse and character repetition (REP
    sequence) are implemented.
  * Added -O option to the frontend. This controls the optimization
    level.
  * Added a simple abstraction layer for terminal control sequences
    (ChafaTermInfo and ChafaTermDb). This allows for improved
    terminal support.
  * FbTerm is now supported with TERM=fbterm in the environment.
  * Bug fixes:
  - #43 Fix signal handler.
  - [unfiled] Crash when invalid font paths were passed on command line.
  - [unfiled] Small typo in fontgen's READM).
  - [unfiled] Bad contrast adjustment in images with transparency.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1623067200">- Update to 1.6.1:
  * Add NOCONFIGURE variable to autogen.sh to skip configure
  Bug fixes:
  * #50 SIGBUS while loading huge GIFs
  * #52 Produces small glitches in output with some images
  * #54 Haiku port fails on 32bit
  * [unfiled] Exclude RTL code points that could break the output.
  * [unfiled] Apple Terminal lacks truecolor support, so make it
    default to 256 colors
  * [unfiled] Fix typo affecting middle dot symbol.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1630497600">- Update to 1.8.0:
  * Added basic support for the Kitty and iTerm2 graphics protocols.
    These are enabled automatically when corresponding terminal support
    is detected, or manually with -f kitty or -f iterm.
  * Implemented an 8-color mode, selectable with -c 8
  * Implemented a foreground-only switch, --fg-only. This produces
    character art using foreground colors only, and will avoid
    modifying or resetting the background color. Looks best with
    non-contiguous symbols (e.g. ascii).
  * Added builtins for Japanese kana fullwidth symbols. These can
    now be used without loading any external fonts (try -c none --symbols wide).
  * Added builtins for legacy computer symbols (mainly wedges and
    sextant blocks). These were widely used in PETSCII and Teletext,
    and can be enabled using --symbols or --fill with their respective
    tags: legacy, wedge and sextant (@hodefoting).
  * Since there is a growing number of builtin symbols that may not
    be available everywhere, the default selection has been restricted
    to the widely supported block and border sets.
  * If possible, we now select a visually blank character from the
    specified symbol/fill sets instead of hardcoding ASCII space for
    featureless cells. One practical upshot of this is that the constant-width
    braille range can be used to produce consistent images even in contexts
    with variable-width fonts. U+2800 (BRAILLE PATTERN BLANK) will then be used in blank cells.
  * Improved terminal size detection when used with pipelines and redirection.
    This should now produce an image properly sized for your terminal:
    curl https://i.imgur.com/WFDEFVg.jpeg | chafa - | tee out
  * ChafaCanvas gained API functions for programmatically getting and
    setting character cell contents. These are used in a new example
    in tests/ncurses.c demonstrating ncurses integration.
  * Made --disable-rpath the default in order to simplify packaging.
  * Added a HACKING file featuring a much needed release checklist.
  * Improved terminal support:
    + Ctx will now use optimizing REP sequences at high -O levels.
    + foot now defaults to sixels.
    + iTerm2 now defaults to the iTerm2 protocol.
    + Kitty now defaults to the Kitty protocol.
    + st now defaults to truecolor symbols.
  * Bug fixes:
    + #44 Missing error handling on stdout writes.
    + [unfiled] Solid symbols erroneously replaced by fill in FGBG mode.
    + [unfiled] Integer formatter was not using fast path for 8-bit values.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1651147200">- bsc#1198965 (CVE-2022-1507): Fix NULL pointer deref in gif_internal_decode_frame
  * Add chafa-CVE-2022-1507.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1655294400">- bsc#1200510 (CVE-2022-2061): Fix heap based buffer overflow
  in lzw_decode
  * Add chafa-CVE-2022-2061.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1657022400">- bsc#1201211 (CVE-2022-2301): Fix buffer over-read
  * Add chafa-CVE-2022-2301.patch</changelog>
</package>
<package pkgid="63e47d68200b6e8805655ee270d1851f64b4064073955856f373f04020cdb7ef" name="chafa-devel" arch="i586">
  <version epoch="0" ver="1.8.0" rel="bp154.3.8.1"/>
  <changelog author="mvetter@suse.com" date="1549627200">- Initial package chafa 1.0.1 for openSUSE</changelog>
  <changelog author="mvetter@suse.com" date="1565006400">- Update to 1.2.0:
  * Added --dither, --dither-grain and --dither-intensity options.
    These allow for sub-cell dithering in quantized modes (none,
    2, 16, 240 and 256). Especially beneficial when used with
  - p off.
  * Added API for ordered and diffusion-based dithering in quantization.
  * Added API support for multiple 8bpc pixel modes: RGB, BGR, RGBA,
    BGRA, ARGB, ABGR with either premultiplied or unassociated alpha channels.
  * Smooth scaling is now done internally, meaning libchafa
    consumers no longer need to prescale images.
  * Implemented a machine learning tool that can generate custom
    fonts for efficient image reproduction from a provided dataset.
    This is left uninstalled since it's still experimental
  * Throughput improvements:
    + GIF animations now start playing instantly.
    + GIF CPU overhead reduced by 75%, peak memory use down 95%-99% (!).
    + XWD common case CPU overhead down 60-70%, peak memory down 70%.
    + Additional halving of CPU overhead in 240- and 256-color modes.
    + Streamlined pixel pipeline for better parallelization.
  * Installation instructions:
    + New: Guix (Guy Fleury Iteriteka).
    + New: openSUSE (@jubalh).
  * Bug fixes:
    + [unfiled] Certain SVGs had transparency replaced with a white background (nemo).
    + [unfiled] -lm dependency belongs in libchafa, not frontend.</changelog>
  <changelog author="mvetter@suse.com" date="1566302400">- Update to 1.2.1:
  * Detect kitty and mlterm virtual terminals and apply optimal
    defaults accordingly
  * Make Automake build more strict and fix a few compatibility nits
  * Fix #30 - Failed to build on hurd-i386
  * Fix crash on certain broken GIFs</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566648000">- Update descriptions.
- Avoid double-shipping documentation, and make docs noarch.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1583323200">- Update to 1.2.2:
  * Fix #34 Cannot compile example</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1585828800">- Update to 1.4.0:
  * Added sixel graphics support. Chafa will automatically produce sixels
    if the connected terminal supports it. It can also be forced using the
    new -f or --format flag. This is a new implementation written from the
    ground up to maximize throughput.
  * Added the --glyph-file option, which loads glyph-symbol mappings from
    any file format supported by FreeType (TTF, PCF, etc). This allows for
    custom font support and improved symbol selection.
  * Added the --speed option specifying animation speed. It accepts a
    unitless multiplier, a specific number of frames per second, or max
    for maximum throughput.
  * There are now two ways to assign colors to symbol cells. Formerly,
    this was done based on the average color of the covered area. The new
    default is to use the median color, which produces sharper edges,
    but is slightly more prone to high-frequency noise. The new option
  - -color-extractor selects the method to employ.
  * When displaying multiple files, the default delay between files has
    been changed from three seconds to zero. Animations will still play
    through once. This can be overridden on the chafa command line with -d
    or --duration.
  * Minor tweaks to built-in symbols.
  Performance improvements:
  * Halved pixel storage requirements from 64 bits to 32 bits,
    resulting in significant memory savings.
  * Now builds with -ffast-math, yielding a big speedup for DIN99d.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1586692800">- Update to 1.4.1:
  * Added configure option --disable-rpath. This allows packagers to
    prevent the hard-coded library search path from being embedded in
    the chafa command-line tool (Mo Zhou, #39).
  * Added defaults for the yaft terminal.
  Bug fixes:
  * #40 - Fails to build on hurd-i386 + other i386 (reported by Mo
    Zhou).
  * [unfiled] - Rare failed assert with mostly transparent sixel image
    (reported by Reddit user spryfigure).
  * [unfiled] - Minor typo in function docstring.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1610712000">- Update to 1.6.0:
  * Added support for fullwidth symbols that take up two character
    cells. These are common in East Asian scripts. Single-cell and
    double-cell symbols can be mixed, and -f symbols mode will use
    both if possible.
  * New symbol tags: alpha, digit, alnum, narrow, wide, ambiguous,
    ugly, bad. "Ambiguous" symbols have uncertain widths and may
    render poorly in some terminals. "Ugly" denotes symbols that
    are unsuitable for Chafa's cell-based graphics (multicolor
    emoji, ideographic descriptors, etc). "Bad" is a superset of
    these two categories. Bad symbols are always excluded unless
    explicitly enabled with e.g. CHAFA_SYMBOL_TAG_BAD (--symbols
    +bad in the frontend).
  * The font loader (--glyph-file option) now does a better job
    with proportional fonts.
  * Added options for controlling lossless optimization of output.
    Currently, attribute reuse and character repetition (REP
    sequence) are implemented.
  * Added -O option to the frontend. This controls the optimization
    level.
  * Added a simple abstraction layer for terminal control sequences
    (ChafaTermInfo and ChafaTermDb). This allows for improved
    terminal support.
  * FbTerm is now supported with TERM=fbterm in the environment.
  * Bug fixes:
  - #43 Fix signal handler.
  - [unfiled] Crash when invalid font paths were passed on command line.
  - [unfiled] Small typo in fontgen's READM).
  - [unfiled] Bad contrast adjustment in images with transparency.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1623067200">- Update to 1.6.1:
  * Add NOCONFIGURE variable to autogen.sh to skip configure
  Bug fixes:
  * #50 SIGBUS while loading huge GIFs
  * #52 Produces small glitches in output with some images
  * #54 Haiku port fails on 32bit
  * [unfiled] Exclude RTL code points that could break the output.
  * [unfiled] Apple Terminal lacks truecolor support, so make it
    default to 256 colors
  * [unfiled] Fix typo affecting middle dot symbol.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1630497600">- Update to 1.8.0:
  * Added basic support for the Kitty and iTerm2 graphics protocols.
    These are enabled automatically when corresponding terminal support
    is detected, or manually with -f kitty or -f iterm.
  * Implemented an 8-color mode, selectable with -c 8
  * Implemented a foreground-only switch, --fg-only. This produces
    character art using foreground colors only, and will avoid
    modifying or resetting the background color. Looks best with
    non-contiguous symbols (e.g. ascii).
  * Added builtins for Japanese kana fullwidth symbols. These can
    now be used without loading any external fonts (try -c none --symbols wide).
  * Added builtins for legacy computer symbols (mainly wedges and
    sextant blocks). These were widely used in PETSCII and Teletext,
    and can be enabled using --symbols or --fill with their respective
    tags: legacy, wedge and sextant (@hodefoting).
  * Since there is a growing number of builtin symbols that may not
    be available everywhere, the default selection has been restricted
    to the widely supported block and border sets.
  * If possible, we now select a visually blank character from the
    specified symbol/fill sets instead of hardcoding ASCII space for
    featureless cells. One practical upshot of this is that the constant-width
    braille range can be used to produce consistent images even in contexts
    with variable-width fonts. U+2800 (BRAILLE PATTERN BLANK) will then be used in blank cells.
  * Improved terminal size detection when used with pipelines and redirection.
    This should now produce an image properly sized for your terminal:
    curl https://i.imgur.com/WFDEFVg.jpeg | chafa - | tee out
  * ChafaCanvas gained API functions for programmatically getting and
    setting character cell contents. These are used in a new example
    in tests/ncurses.c demonstrating ncurses integration.
  * Made --disable-rpath the default in order to simplify packaging.
  * Added a HACKING file featuring a much needed release checklist.
  * Improved terminal support:
    + Ctx will now use optimizing REP sequences at high -O levels.
    + foot now defaults to sixels.
    + iTerm2 now defaults to the iTerm2 protocol.
    + Kitty now defaults to the Kitty protocol.
    + st now defaults to truecolor symbols.
  * Bug fixes:
    + #44 Missing error handling on stdout writes.
    + [unfiled] Solid symbols erroneously replaced by fill in FGBG mode.
    + [unfiled] Integer formatter was not using fast path for 8-bit values.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1651147200">- bsc#1198965 (CVE-2022-1507): Fix NULL pointer deref in gif_internal_decode_frame
  * Add chafa-CVE-2022-1507.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1655294400">- bsc#1200510 (CVE-2022-2061): Fix heap based buffer overflow
  in lzw_decode
  * Add chafa-CVE-2022-2061.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1657022400">- bsc#1201211 (CVE-2022-2301): Fix buffer over-read
  * Add chafa-CVE-2022-2301.patch</changelog>
</package>
<package pkgid="190523cf4280e1e921585d9708972ec4501a28c26e7abbe133fdda3c5da0f936" name="chafa-devel" arch="ppc64le">
  <version epoch="0" ver="1.8.0" rel="bp154.3.8.1"/>
  <changelog author="mvetter@suse.com" date="1549627200">- Initial package chafa 1.0.1 for openSUSE</changelog>
  <changelog author="mvetter@suse.com" date="1565006400">- Update to 1.2.0:
  * Added --dither, --dither-grain and --dither-intensity options.
    These allow for sub-cell dithering in quantized modes (none,
    2, 16, 240 and 256). Especially beneficial when used with
  - p off.
  * Added API for ordered and diffusion-based dithering in quantization.
  * Added API support for multiple 8bpc pixel modes: RGB, BGR, RGBA,
    BGRA, ARGB, ABGR with either premultiplied or unassociated alpha channels.
  * Smooth scaling is now done internally, meaning libchafa
    consumers no longer need to prescale images.
  * Implemented a machine learning tool that can generate custom
    fonts for efficient image reproduction from a provided dataset.
    This is left uninstalled since it's still experimental
  * Throughput improvements:
    + GIF animations now start playing instantly.
    + GIF CPU overhead reduced by 75%, peak memory use down 95%-99% (!).
    + XWD common case CPU overhead down 60-70%, peak memory down 70%.
    + Additional halving of CPU overhead in 240- and 256-color modes.
    + Streamlined pixel pipeline for better parallelization.
  * Installation instructions:
    + New: Guix (Guy Fleury Iteriteka).
    + New: openSUSE (@jubalh).
  * Bug fixes:
    + [unfiled] Certain SVGs had transparency replaced with a white background (nemo).
    + [unfiled] -lm dependency belongs in libchafa, not frontend.</changelog>
  <changelog author="mvetter@suse.com" date="1566302400">- Update to 1.2.1:
  * Detect kitty and mlterm virtual terminals and apply optimal
    defaults accordingly
  * Make Automake build more strict and fix a few compatibility nits
  * Fix #30 - Failed to build on hurd-i386
  * Fix crash on certain broken GIFs</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566648000">- Update descriptions.
- Avoid double-shipping documentation, and make docs noarch.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1583323200">- Update to 1.2.2:
  * Fix #34 Cannot compile example</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1585828800">- Update to 1.4.0:
  * Added sixel graphics support. Chafa will automatically produce sixels
    if the connected terminal supports it. It can also be forced using the
    new -f or --format flag. This is a new implementation written from the
    ground up to maximize throughput.
  * Added the --glyph-file option, which loads glyph-symbol mappings from
    any file format supported by FreeType (TTF, PCF, etc). This allows for
    custom font support and improved symbol selection.
  * Added the --speed option specifying animation speed. It accepts a
    unitless multiplier, a specific number of frames per second, or max
    for maximum throughput.
  * There are now two ways to assign colors to symbol cells. Formerly,
    this was done based on the average color of the covered area. The new
    default is to use the median color, which produces sharper edges,
    but is slightly more prone to high-frequency noise. The new option
  - -color-extractor selects the method to employ.
  * When displaying multiple files, the default delay between files has
    been changed from three seconds to zero. Animations will still play
    through once. This can be overridden on the chafa command line with -d
    or --duration.
  * Minor tweaks to built-in symbols.
  Performance improvements:
  * Halved pixel storage requirements from 64 bits to 32 bits,
    resulting in significant memory savings.
  * Now builds with -ffast-math, yielding a big speedup for DIN99d.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1586692800">- Update to 1.4.1:
  * Added configure option --disable-rpath. This allows packagers to
    prevent the hard-coded library search path from being embedded in
    the chafa command-line tool (Mo Zhou, #39).
  * Added defaults for the yaft terminal.
  Bug fixes:
  * #40 - Fails to build on hurd-i386 + other i386 (reported by Mo
    Zhou).
  * [unfiled] - Rare failed assert with mostly transparent sixel image
    (reported by Reddit user spryfigure).
  * [unfiled] - Minor typo in function docstring.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1610712000">- Update to 1.6.0:
  * Added support for fullwidth symbols that take up two character
    cells. These are common in East Asian scripts. Single-cell and
    double-cell symbols can be mixed, and -f symbols mode will use
    both if possible.
  * New symbol tags: alpha, digit, alnum, narrow, wide, ambiguous,
    ugly, bad. "Ambiguous" symbols have uncertain widths and may
    render poorly in some terminals. "Ugly" denotes symbols that
    are unsuitable for Chafa's cell-based graphics (multicolor
    emoji, ideographic descriptors, etc). "Bad" is a superset of
    these two categories. Bad symbols are always excluded unless
    explicitly enabled with e.g. CHAFA_SYMBOL_TAG_BAD (--symbols
    +bad in the frontend).
  * The font loader (--glyph-file option) now does a better job
    with proportional fonts.
  * Added options for controlling lossless optimization of output.
    Currently, attribute reuse and character repetition (REP
    sequence) are implemented.
  * Added -O option to the frontend. This controls the optimization
    level.
  * Added a simple abstraction layer for terminal control sequences
    (ChafaTermInfo and ChafaTermDb). This allows for improved
    terminal support.
  * FbTerm is now supported with TERM=fbterm in the environment.
  * Bug fixes:
  - #43 Fix signal handler.
  - [unfiled] Crash when invalid font paths were passed on command line.
  - [unfiled] Small typo in fontgen's READM).
  - [unfiled] Bad contrast adjustment in images with transparency.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1623067200">- Update to 1.6.1:
  * Add NOCONFIGURE variable to autogen.sh to skip configure
  Bug fixes:
  * #50 SIGBUS while loading huge GIFs
  * #52 Produces small glitches in output with some images
  * #54 Haiku port fails on 32bit
  * [unfiled] Exclude RTL code points that could break the output.
  * [unfiled] Apple Terminal lacks truecolor support, so make it
    default to 256 colors
  * [unfiled] Fix typo affecting middle dot symbol.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1630497600">- Update to 1.8.0:
  * Added basic support for the Kitty and iTerm2 graphics protocols.
    These are enabled automatically when corresponding terminal support
    is detected, or manually with -f kitty or -f iterm.
  * Implemented an 8-color mode, selectable with -c 8
  * Implemented a foreground-only switch, --fg-only. This produces
    character art using foreground colors only, and will avoid
    modifying or resetting the background color. Looks best with
    non-contiguous symbols (e.g. ascii).
  * Added builtins for Japanese kana fullwidth symbols. These can
    now be used without loading any external fonts (try -c none --symbols wide).
  * Added builtins for legacy computer symbols (mainly wedges and
    sextant blocks). These were widely used in PETSCII and Teletext,
    and can be enabled using --symbols or --fill with their respective
    tags: legacy, wedge and sextant (@hodefoting).
  * Since there is a growing number of builtin symbols that may not
    be available everywhere, the default selection has been restricted
    to the widely supported block and border sets.
  * If possible, we now select a visually blank character from the
    specified symbol/fill sets instead of hardcoding ASCII space for
    featureless cells. One practical upshot of this is that the constant-width
    braille range can be used to produce consistent images even in contexts
    with variable-width fonts. U+2800 (BRAILLE PATTERN BLANK) will then be used in blank cells.
  * Improved terminal size detection when used with pipelines and redirection.
    This should now produce an image properly sized for your terminal:
    curl https://i.imgur.com/WFDEFVg.jpeg | chafa - | tee out
  * ChafaCanvas gained API functions for programmatically getting and
    setting character cell contents. These are used in a new example
    in tests/ncurses.c demonstrating ncurses integration.
  * Made --disable-rpath the default in order to simplify packaging.
  * Added a HACKING file featuring a much needed release checklist.
  * Improved terminal support:
    + Ctx will now use optimizing REP sequences at high -O levels.
    + foot now defaults to sixels.
    + iTerm2 now defaults to the iTerm2 protocol.
    + Kitty now defaults to the Kitty protocol.
    + st now defaults to truecolor symbols.
  * Bug fixes:
    + #44 Missing error handling on stdout writes.
    + [unfiled] Solid symbols erroneously replaced by fill in FGBG mode.
    + [unfiled] Integer formatter was not using fast path for 8-bit values.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1651147200">- bsc#1198965 (CVE-2022-1507): Fix NULL pointer deref in gif_internal_decode_frame
  * Add chafa-CVE-2022-1507.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1655294400">- bsc#1200510 (CVE-2022-2061): Fix heap based buffer overflow
  in lzw_decode
  * Add chafa-CVE-2022-2061.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1657022400">- bsc#1201211 (CVE-2022-2301): Fix buffer over-read
  * Add chafa-CVE-2022-2301.patch</changelog>
</package>
<package pkgid="36440688496e02ef1e9b22e88cffca04673637667b483090afb049b3d1b21c88" name="chafa-devel" arch="s390x">
  <version epoch="0" ver="1.8.0" rel="bp154.3.8.1"/>
  <changelog author="mvetter@suse.com" date="1549627200">- Initial package chafa 1.0.1 for openSUSE</changelog>
  <changelog author="mvetter@suse.com" date="1565006400">- Update to 1.2.0:
  * Added --dither, --dither-grain and --dither-intensity options.
    These allow for sub-cell dithering in quantized modes (none,
    2, 16, 240 and 256). Especially beneficial when used with
  - p off.
  * Added API for ordered and diffusion-based dithering in quantization.
  * Added API support for multiple 8bpc pixel modes: RGB, BGR, RGBA,
    BGRA, ARGB, ABGR with either premultiplied or unassociated alpha channels.
  * Smooth scaling is now done internally, meaning libchafa
    consumers no longer need to prescale images.
  * Implemented a machine learning tool that can generate custom
    fonts for efficient image reproduction from a provided dataset.
    This is left uninstalled since it's still experimental
  * Throughput improvements:
    + GIF animations now start playing instantly.
    + GIF CPU overhead reduced by 75%, peak memory use down 95%-99% (!).
    + XWD common case CPU overhead down 60-70%, peak memory down 70%.
    + Additional halving of CPU overhead in 240- and 256-color modes.
    + Streamlined pixel pipeline for better parallelization.
  * Installation instructions:
    + New: Guix (Guy Fleury Iteriteka).
    + New: openSUSE (@jubalh).
  * Bug fixes:
    + [unfiled] Certain SVGs had transparency replaced with a white background (nemo).
    + [unfiled] -lm dependency belongs in libchafa, not frontend.</changelog>
  <changelog author="mvetter@suse.com" date="1566302400">- Update to 1.2.1:
  * Detect kitty and mlterm virtual terminals and apply optimal
    defaults accordingly
  * Make Automake build more strict and fix a few compatibility nits
  * Fix #30 - Failed to build on hurd-i386
  * Fix crash on certain broken GIFs</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566648000">- Update descriptions.
- Avoid double-shipping documentation, and make docs noarch.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1583323200">- Update to 1.2.2:
  * Fix #34 Cannot compile example</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1585828800">- Update to 1.4.0:
  * Added sixel graphics support. Chafa will automatically produce sixels
    if the connected terminal supports it. It can also be forced using the
    new -f or --format flag. This is a new implementation written from the
    ground up to maximize throughput.
  * Added the --glyph-file option, which loads glyph-symbol mappings from
    any file format supported by FreeType (TTF, PCF, etc). This allows for
    custom font support and improved symbol selection.
  * Added the --speed option specifying animation speed. It accepts a
    unitless multiplier, a specific number of frames per second, or max
    for maximum throughput.
  * There are now two ways to assign colors to symbol cells. Formerly,
    this was done based on the average color of the covered area. The new
    default is to use the median color, which produces sharper edges,
    but is slightly more prone to high-frequency noise. The new option
  - -color-extractor selects the method to employ.
  * When displaying multiple files, the default delay between files has
    been changed from three seconds to zero. Animations will still play
    through once. This can be overridden on the chafa command line with -d
    or --duration.
  * Minor tweaks to built-in symbols.
  Performance improvements:
  * Halved pixel storage requirements from 64 bits to 32 bits,
    resulting in significant memory savings.
  * Now builds with -ffast-math, yielding a big speedup for DIN99d.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1586692800">- Update to 1.4.1:
  * Added configure option --disable-rpath. This allows packagers to
    prevent the hard-coded library search path from being embedded in
    the chafa command-line tool (Mo Zhou, #39).
  * Added defaults for the yaft terminal.
  Bug fixes:
  * #40 - Fails to build on hurd-i386 + other i386 (reported by Mo
    Zhou).
  * [unfiled] - Rare failed assert with mostly transparent sixel image
    (reported by Reddit user spryfigure).
  * [unfiled] - Minor typo in function docstring.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1610712000">- Update to 1.6.0:
  * Added support for fullwidth symbols that take up two character
    cells. These are common in East Asian scripts. Single-cell and
    double-cell symbols can be mixed, and -f symbols mode will use
    both if possible.
  * New symbol tags: alpha, digit, alnum, narrow, wide, ambiguous,
    ugly, bad. "Ambiguous" symbols have uncertain widths and may
    render poorly in some terminals. "Ugly" denotes symbols that
    are unsuitable for Chafa's cell-based graphics (multicolor
    emoji, ideographic descriptors, etc). "Bad" is a superset of
    these two categories. Bad symbols are always excluded unless
    explicitly enabled with e.g. CHAFA_SYMBOL_TAG_BAD (--symbols
    +bad in the frontend).
  * The font loader (--glyph-file option) now does a better job
    with proportional fonts.
  * Added options for controlling lossless optimization of output.
    Currently, attribute reuse and character repetition (REP
    sequence) are implemented.
  * Added -O option to the frontend. This controls the optimization
    level.
  * Added a simple abstraction layer for terminal control sequences
    (ChafaTermInfo and ChafaTermDb). This allows for improved
    terminal support.
  * FbTerm is now supported with TERM=fbterm in the environment.
  * Bug fixes:
  - #43 Fix signal handler.
  - [unfiled] Crash when invalid font paths were passed on command line.
  - [unfiled] Small typo in fontgen's READM).
  - [unfiled] Bad contrast adjustment in images with transparency.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1623067200">- Update to 1.6.1:
  * Add NOCONFIGURE variable to autogen.sh to skip configure
  Bug fixes:
  * #50 SIGBUS while loading huge GIFs
  * #52 Produces small glitches in output with some images
  * #54 Haiku port fails on 32bit
  * [unfiled] Exclude RTL code points that could break the output.
  * [unfiled] Apple Terminal lacks truecolor support, so make it
    default to 256 colors
  * [unfiled] Fix typo affecting middle dot symbol.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1630497600">- Update to 1.8.0:
  * Added basic support for the Kitty and iTerm2 graphics protocols.
    These are enabled automatically when corresponding terminal support
    is detected, or manually with -f kitty or -f iterm.
  * Implemented an 8-color mode, selectable with -c 8
  * Implemented a foreground-only switch, --fg-only. This produces
    character art using foreground colors only, and will avoid
    modifying or resetting the background color. Looks best with
    non-contiguous symbols (e.g. ascii).
  * Added builtins for Japanese kana fullwidth symbols. These can
    now be used without loading any external fonts (try -c none --symbols wide).
  * Added builtins for legacy computer symbols (mainly wedges and
    sextant blocks). These were widely used in PETSCII and Teletext,
    and can be enabled using --symbols or --fill with their respective
    tags: legacy, wedge and sextant (@hodefoting).
  * Since there is a growing number of builtin symbols that may not
    be available everywhere, the default selection has been restricted
    to the widely supported block and border sets.
  * If possible, we now select a visually blank character from the
    specified symbol/fill sets instead of hardcoding ASCII space for
    featureless cells. One practical upshot of this is that the constant-width
    braille range can be used to produce consistent images even in contexts
    with variable-width fonts. U+2800 (BRAILLE PATTERN BLANK) will then be used in blank cells.
  * Improved terminal size detection when used with pipelines and redirection.
    This should now produce an image properly sized for your terminal:
    curl https://i.imgur.com/WFDEFVg.jpeg | chafa - | tee out
  * ChafaCanvas gained API functions for programmatically getting and
    setting character cell contents. These are used in a new example
    in tests/ncurses.c demonstrating ncurses integration.
  * Made --disable-rpath the default in order to simplify packaging.
  * Added a HACKING file featuring a much needed release checklist.
  * Improved terminal support:
    + Ctx will now use optimizing REP sequences at high -O levels.
    + foot now defaults to sixels.
    + iTerm2 now defaults to the iTerm2 protocol.
    + Kitty now defaults to the Kitty protocol.
    + st now defaults to truecolor symbols.
  * Bug fixes:
    + #44 Missing error handling on stdout writes.
    + [unfiled] Solid symbols erroneously replaced by fill in FGBG mode.
    + [unfiled] Integer formatter was not using fast path for 8-bit values.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1651147200">- bsc#1198965 (CVE-2022-1507): Fix NULL pointer deref in gif_internal_decode_frame
  * Add chafa-CVE-2022-1507.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1655294400">- bsc#1200510 (CVE-2022-2061): Fix heap based buffer overflow
  in lzw_decode
  * Add chafa-CVE-2022-2061.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1657022400">- bsc#1201211 (CVE-2022-2301): Fix buffer over-read
  * Add chafa-CVE-2022-2301.patch</changelog>
</package>
<package pkgid="c58ce5923fdda9600d068df674b28875846411e3300d60673d6cb8bcf568be73" name="chafa-devel" arch="x86_64">
  <version epoch="0" ver="1.8.0" rel="bp154.3.8.1"/>
  <changelog author="mvetter@suse.com" date="1549627200">- Initial package chafa 1.0.1 for openSUSE</changelog>
  <changelog author="mvetter@suse.com" date="1565006400">- Update to 1.2.0:
  * Added --dither, --dither-grain and --dither-intensity options.
    These allow for sub-cell dithering in quantized modes (none,
    2, 16, 240 and 256). Especially beneficial when used with
  - p off.
  * Added API for ordered and diffusion-based dithering in quantization.
  * Added API support for multiple 8bpc pixel modes: RGB, BGR, RGBA,
    BGRA, ARGB, ABGR with either premultiplied or unassociated alpha channels.
  * Smooth scaling is now done internally, meaning libchafa
    consumers no longer need to prescale images.
  * Implemented a machine learning tool that can generate custom
    fonts for efficient image reproduction from a provided dataset.
    This is left uninstalled since it's still experimental
  * Throughput improvements:
    + GIF animations now start playing instantly.
    + GIF CPU overhead reduced by 75%, peak memory use down 95%-99% (!).
    + XWD common case CPU overhead down 60-70%, peak memory down 70%.
    + Additional halving of CPU overhead in 240- and 256-color modes.
    + Streamlined pixel pipeline for better parallelization.
  * Installation instructions:
    + New: Guix (Guy Fleury Iteriteka).
    + New: openSUSE (@jubalh).
  * Bug fixes:
    + [unfiled] Certain SVGs had transparency replaced with a white background (nemo).
    + [unfiled] -lm dependency belongs in libchafa, not frontend.</changelog>
  <changelog author="mvetter@suse.com" date="1566302400">- Update to 1.2.1:
  * Detect kitty and mlterm virtual terminals and apply optimal
    defaults accordingly
  * Make Automake build more strict and fix a few compatibility nits
  * Fix #30 - Failed to build on hurd-i386
  * Fix crash on certain broken GIFs</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566648000">- Update descriptions.
- Avoid double-shipping documentation, and make docs noarch.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1583323200">- Update to 1.2.2:
  * Fix #34 Cannot compile example</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1585828800">- Update to 1.4.0:
  * Added sixel graphics support. Chafa will automatically produce sixels
    if the connected terminal supports it. It can also be forced using the
    new -f or --format flag. This is a new implementation written from the
    ground up to maximize throughput.
  * Added the --glyph-file option, which loads glyph-symbol mappings from
    any file format supported by FreeType (TTF, PCF, etc). This allows for
    custom font support and improved symbol selection.
  * Added the --speed option specifying animation speed. It accepts a
    unitless multiplier, a specific number of frames per second, or max
    for maximum throughput.
  * There are now two ways to assign colors to symbol cells. Formerly,
    this was done based on the average color of the covered area. The new
    default is to use the median color, which produces sharper edges,
    but is slightly more prone to high-frequency noise. The new option
  - -color-extractor selects the method to employ.
  * When displaying multiple files, the default delay between files has
    been changed from three seconds to zero. Animations will still play
    through once. This can be overridden on the chafa command line with -d
    or --duration.
  * Minor tweaks to built-in symbols.
  Performance improvements:
  * Halved pixel storage requirements from 64 bits to 32 bits,
    resulting in significant memory savings.
  * Now builds with -ffast-math, yielding a big speedup for DIN99d.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1586692800">- Update to 1.4.1:
  * Added configure option --disable-rpath. This allows packagers to
    prevent the hard-coded library search path from being embedded in
    the chafa command-line tool (Mo Zhou, #39).
  * Added defaults for the yaft terminal.
  Bug fixes:
  * #40 - Fails to build on hurd-i386 + other i386 (reported by Mo
    Zhou).
  * [unfiled] - Rare failed assert with mostly transparent sixel image
    (reported by Reddit user spryfigure).
  * [unfiled] - Minor typo in function docstring.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1610712000">- Update to 1.6.0:
  * Added support for fullwidth symbols that take up two character
    cells. These are common in East Asian scripts. Single-cell and
    double-cell symbols can be mixed, and -f symbols mode will use
    both if possible.
  * New symbol tags: alpha, digit, alnum, narrow, wide, ambiguous,
    ugly, bad. "Ambiguous" symbols have uncertain widths and may
    render poorly in some terminals. "Ugly" denotes symbols that
    are unsuitable for Chafa's cell-based graphics (multicolor
    emoji, ideographic descriptors, etc). "Bad" is a superset of
    these two categories. Bad symbols are always excluded unless
    explicitly enabled with e.g. CHAFA_SYMBOL_TAG_BAD (--symbols
    +bad in the frontend).
  * The font loader (--glyph-file option) now does a better job
    with proportional fonts.
  * Added options for controlling lossless optimization of output.
    Currently, attribute reuse and character repetition (REP
    sequence) are implemented.
  * Added -O option to the frontend. This controls the optimization
    level.
  * Added a simple abstraction layer for terminal control sequences
    (ChafaTermInfo and ChafaTermDb). This allows for improved
    terminal support.
  * FbTerm is now supported with TERM=fbterm in the environment.
  * Bug fixes:
  - #43 Fix signal handler.
  - [unfiled] Crash when invalid font paths were passed on command line.
  - [unfiled] Small typo in fontgen's READM).
  - [unfiled] Bad contrast adjustment in images with transparency.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1623067200">- Update to 1.6.1:
  * Add NOCONFIGURE variable to autogen.sh to skip configure
  Bug fixes:
  * #50 SIGBUS while loading huge GIFs
  * #52 Produces small glitches in output with some images
  * #54 Haiku port fails on 32bit
  * [unfiled] Exclude RTL code points that could break the output.
  * [unfiled] Apple Terminal lacks truecolor support, so make it
    default to 256 colors
  * [unfiled] Fix typo affecting middle dot symbol.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1630497600">- Update to 1.8.0:
  * Added basic support for the Kitty and iTerm2 graphics protocols.
    These are enabled automatically when corresponding terminal support
    is detected, or manually with -f kitty or -f iterm.
  * Implemented an 8-color mode, selectable with -c 8
  * Implemented a foreground-only switch, --fg-only. This produces
    character art using foreground colors only, and will avoid
    modifying or resetting the background color. Looks best with
    non-contiguous symbols (e.g. ascii).
  * Added builtins for Japanese kana fullwidth symbols. These can
    now be used without loading any external fonts (try -c none --symbols wide).
  * Added builtins for legacy computer symbols (mainly wedges and
    sextant blocks). These were widely used in PETSCII and Teletext,
    and can be enabled using --symbols or --fill with their respective
    tags: legacy, wedge and sextant (@hodefoting).
  * Since there is a growing number of builtin symbols that may not
    be available everywhere, the default selection has been restricted
    to the widely supported block and border sets.
  * If possible, we now select a visually blank character from the
    specified symbol/fill sets instead of hardcoding ASCII space for
    featureless cells. One practical upshot of this is that the constant-width
    braille range can be used to produce consistent images even in contexts
    with variable-width fonts. U+2800 (BRAILLE PATTERN BLANK) will then be used in blank cells.
  * Improved terminal size detection when used with pipelines and redirection.
    This should now produce an image properly sized for your terminal:
    curl https://i.imgur.com/WFDEFVg.jpeg | chafa - | tee out
  * ChafaCanvas gained API functions for programmatically getting and
    setting character cell contents. These are used in a new example
    in tests/ncurses.c demonstrating ncurses integration.
  * Made --disable-rpath the default in order to simplify packaging.
  * Added a HACKING file featuring a much needed release checklist.
  * Improved terminal support:
    + Ctx will now use optimizing REP sequences at high -O levels.
    + foot now defaults to sixels.
    + iTerm2 now defaults to the iTerm2 protocol.
    + Kitty now defaults to the Kitty protocol.
    + st now defaults to truecolor symbols.
  * Bug fixes:
    + #44 Missing error handling on stdout writes.
    + [unfiled] Solid symbols erroneously replaced by fill in FGBG mode.
    + [unfiled] Integer formatter was not using fast path for 8-bit values.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1651147200">- bsc#1198965 (CVE-2022-1507): Fix NULL pointer deref in gif_internal_decode_frame
  * Add chafa-CVE-2022-1507.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1655294400">- bsc#1200510 (CVE-2022-2061): Fix heap based buffer overflow
  in lzw_decode
  * Add chafa-CVE-2022-2061.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1657022400">- bsc#1201211 (CVE-2022-2301): Fix buffer over-read
  * Add chafa-CVE-2022-2301.patch</changelog>
</package>
<package pkgid="20b3f508199b1c1d448645242fdca44d54415a930f08d5daa0e5afc66a397561" name="chafa-doc" arch="noarch">
  <version epoch="0" ver="1.8.0" rel="bp154.3.3.1"/>
  <changelog author="mvetter@suse.com" date="1549627200">- Initial package chafa 1.0.1 for openSUSE</changelog>
  <changelog author="mvetter@suse.com" date="1565006400">- Update to 1.2.0:
  * Added --dither, --dither-grain and --dither-intensity options.
    These allow for sub-cell dithering in quantized modes (none,
    2, 16, 240 and 256). Especially beneficial when used with
  - p off.
  * Added API for ordered and diffusion-based dithering in quantization.
  * Added API support for multiple 8bpc pixel modes: RGB, BGR, RGBA,
    BGRA, ARGB, ABGR with either premultiplied or unassociated alpha channels.
  * Smooth scaling is now done internally, meaning libchafa
    consumers no longer need to prescale images.
  * Implemented a machine learning tool that can generate custom
    fonts for efficient image reproduction from a provided dataset.
    This is left uninstalled since it's still experimental
  * Throughput improvements:
    + GIF animations now start playing instantly.
    + GIF CPU overhead reduced by 75%, peak memory use down 95%-99% (!).
    + XWD common case CPU overhead down 60-70%, peak memory down 70%.
    + Additional halving of CPU overhead in 240- and 256-color modes.
    + Streamlined pixel pipeline for better parallelization.
  * Installation instructions:
    + New: Guix (Guy Fleury Iteriteka).
    + New: openSUSE (@jubalh).
  * Bug fixes:
    + [unfiled] Certain SVGs had transparency replaced with a white background (nemo).
    + [unfiled] -lm dependency belongs in libchafa, not frontend.</changelog>
  <changelog author="mvetter@suse.com" date="1566302400">- Update to 1.2.1:
  * Detect kitty and mlterm virtual terminals and apply optimal
    defaults accordingly
  * Make Automake build more strict and fix a few compatibility nits
  * Fix #30 - Failed to build on hurd-i386
  * Fix crash on certain broken GIFs</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566648000">- Update descriptions.
- Avoid double-shipping documentation, and make docs noarch.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1583323200">- Update to 1.2.2:
  * Fix #34 Cannot compile example</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1585828800">- Update to 1.4.0:
  * Added sixel graphics support. Chafa will automatically produce sixels
    if the connected terminal supports it. It can also be forced using the
    new -f or --format flag. This is a new implementation written from the
    ground up to maximize throughput.
  * Added the --glyph-file option, which loads glyph-symbol mappings from
    any file format supported by FreeType (TTF, PCF, etc). This allows for
    custom font support and improved symbol selection.
  * Added the --speed option specifying animation speed. It accepts a
    unitless multiplier, a specific number of frames per second, or max
    for maximum throughput.
  * There are now two ways to assign colors to symbol cells. Formerly,
    this was done based on the average color of the covered area. The new
    default is to use the median color, which produces sharper edges,
    but is slightly more prone to high-frequency noise. The new option
  - -color-extractor selects the method to employ.
  * When displaying multiple files, the default delay between files has
    been changed from three seconds to zero. Animations will still play
    through once. This can be overridden on the chafa command line with -d
    or --duration.
  * Minor tweaks to built-in symbols.
  Performance improvements:
  * Halved pixel storage requirements from 64 bits to 32 bits,
    resulting in significant memory savings.
  * Now builds with -ffast-math, yielding a big speedup for DIN99d.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1586692800">- Update to 1.4.1:
  * Added configure option --disable-rpath. This allows packagers to
    prevent the hard-coded library search path from being embedded in
    the chafa command-line tool (Mo Zhou, #39).
  * Added defaults for the yaft terminal.
  Bug fixes:
  * #40 - Fails to build on hurd-i386 + other i386 (reported by Mo
    Zhou).
  * [unfiled] - Rare failed assert with mostly transparent sixel image
    (reported by Reddit user spryfigure).
  * [unfiled] - Minor typo in function docstring.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1610712000">- Update to 1.6.0:
  * Added support for fullwidth symbols that take up two character
    cells. These are common in East Asian scripts. Single-cell and
    double-cell symbols can be mixed, and -f symbols mode will use
    both if possible.
  * New symbol tags: alpha, digit, alnum, narrow, wide, ambiguous,
    ugly, bad. "Ambiguous" symbols have uncertain widths and may
    render poorly in some terminals. "Ugly" denotes symbols that
    are unsuitable for Chafa's cell-based graphics (multicolor
    emoji, ideographic descriptors, etc). "Bad" is a superset of
    these two categories. Bad symbols are always excluded unless
    explicitly enabled with e.g. CHAFA_SYMBOL_TAG_BAD (--symbols
    +bad in the frontend).
  * The font loader (--glyph-file option) now does a better job
    with proportional fonts.
  * Added options for controlling lossless optimization of output.
    Currently, attribute reuse and character repetition (REP
    sequence) are implemented.
  * Added -O option to the frontend. This controls the optimization
    level.
  * Added a simple abstraction layer for terminal control sequences
    (ChafaTermInfo and ChafaTermDb). This allows for improved
    terminal support.
  * FbTerm is now supported with TERM=fbterm in the environment.
  * Bug fixes:
  - #43 Fix signal handler.
  - [unfiled] Crash when invalid font paths were passed on command line.
  - [unfiled] Small typo in fontgen's READM).
  - [unfiled] Bad contrast adjustment in images with transparency.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1623067200">- Update to 1.6.1:
  * Add NOCONFIGURE variable to autogen.sh to skip configure
  Bug fixes:
  * #50 SIGBUS while loading huge GIFs
  * #52 Produces small glitches in output with some images
  * #54 Haiku port fails on 32bit
  * [unfiled] Exclude RTL code points that could break the output.
  * [unfiled] Apple Terminal lacks truecolor support, so make it
    default to 256 colors
  * [unfiled] Fix typo affecting middle dot symbol.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1630497600">- Update to 1.8.0:
  * Added basic support for the Kitty and iTerm2 graphics protocols.
    These are enabled automatically when corresponding terminal support
    is detected, or manually with -f kitty or -f iterm.
  * Implemented an 8-color mode, selectable with -c 8
  * Implemented a foreground-only switch, --fg-only. This produces
    character art using foreground colors only, and will avoid
    modifying or resetting the background color. Looks best with
    non-contiguous symbols (e.g. ascii).
  * Added builtins for Japanese kana fullwidth symbols. These can
    now be used without loading any external fonts (try -c none --symbols wide).
  * Added builtins for legacy computer symbols (mainly wedges and
    sextant blocks). These were widely used in PETSCII and Teletext,
    and can be enabled using --symbols or --fill with their respective
    tags: legacy, wedge and sextant (@hodefoting).
  * Since there is a growing number of builtin symbols that may not
    be available everywhere, the default selection has been restricted
    to the widely supported block and border sets.
  * If possible, we now select a visually blank character from the
    specified symbol/fill sets instead of hardcoding ASCII space for
    featureless cells. One practical upshot of this is that the constant-width
    braille range can be used to produce consistent images even in contexts
    with variable-width fonts. U+2800 (BRAILLE PATTERN BLANK) will then be used in blank cells.
  * Improved terminal size detection when used with pipelines and redirection.
    This should now produce an image properly sized for your terminal:
    curl https://i.imgur.com/WFDEFVg.jpeg | chafa - | tee out
  * ChafaCanvas gained API functions for programmatically getting and
    setting character cell contents. These are used in a new example
    in tests/ncurses.c demonstrating ncurses integration.
  * Made --disable-rpath the default in order to simplify packaging.
  * Added a HACKING file featuring a much needed release checklist.
  * Improved terminal support:
    + Ctx will now use optimizing REP sequences at high -O levels.
    + foot now defaults to sixels.
    + iTerm2 now defaults to the iTerm2 protocol.
    + Kitty now defaults to the Kitty protocol.
    + st now defaults to truecolor symbols.
  * Bug fixes:
    + #44 Missing error handling on stdout writes.
    + [unfiled] Solid symbols erroneously replaced by fill in FGBG mode.
    + [unfiled] Integer formatter was not using fast path for 8-bit values.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1651147200">- bsc#1198965 (CVE-2022-1507): Fix NULL pointer deref in gif_internal_decode_frame
  * Add chafa-CVE-2022-1507.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1655294400">- bsc#1200510 (CVE-2022-2061): Fix heap based buffer overflow
  in lzw_decode
  * Add chafa-CVE-2022-2061.patch</changelog>
</package>
<package pkgid="95b589e6bf682e5cf6878d6a0960ba218d08c48c145cd452d0469de27bd7f7fd" name="chafa-doc" arch="noarch">
  <version epoch="0" ver="1.8.0" rel="bp154.3.8.1"/>
  <changelog author="mvetter@suse.com" date="1549627200">- Initial package chafa 1.0.1 for openSUSE</changelog>
  <changelog author="mvetter@suse.com" date="1565006400">- Update to 1.2.0:
  * Added --dither, --dither-grain and --dither-intensity options.
    These allow for sub-cell dithering in quantized modes (none,
    2, 16, 240 and 256). Especially beneficial when used with
  - p off.
  * Added API for ordered and diffusion-based dithering in quantization.
  * Added API support for multiple 8bpc pixel modes: RGB, BGR, RGBA,
    BGRA, ARGB, ABGR with either premultiplied or unassociated alpha channels.
  * Smooth scaling is now done internally, meaning libchafa
    consumers no longer need to prescale images.
  * Implemented a machine learning tool that can generate custom
    fonts for efficient image reproduction from a provided dataset.
    This is left uninstalled since it's still experimental
  * Throughput improvements:
    + GIF animations now start playing instantly.
    + GIF CPU overhead reduced by 75%, peak memory use down 95%-99% (!).
    + XWD common case CPU overhead down 60-70%, peak memory down 70%.
    + Additional halving of CPU overhead in 240- and 256-color modes.
    + Streamlined pixel pipeline for better parallelization.
  * Installation instructions:
    + New: Guix (Guy Fleury Iteriteka).
    + New: openSUSE (@jubalh).
  * Bug fixes:
    + [unfiled] Certain SVGs had transparency replaced with a white background (nemo).
    + [unfiled] -lm dependency belongs in libchafa, not frontend.</changelog>
  <changelog author="mvetter@suse.com" date="1566302400">- Update to 1.2.1:
  * Detect kitty and mlterm virtual terminals and apply optimal
    defaults accordingly
  * Make Automake build more strict and fix a few compatibility nits
  * Fix #30 - Failed to build on hurd-i386
  * Fix crash on certain broken GIFs</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566648000">- Update descriptions.
- Avoid double-shipping documentation, and make docs noarch.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1583323200">- Update to 1.2.2:
  * Fix #34 Cannot compile example</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1585828800">- Update to 1.4.0:
  * Added sixel graphics support. Chafa will automatically produce sixels
    if the connected terminal supports it. It can also be forced using the
    new -f or --format flag. This is a new implementation written from the
    ground up to maximize throughput.
  * Added the --glyph-file option, which loads glyph-symbol mappings from
    any file format supported by FreeType (TTF, PCF, etc). This allows for
    custom font support and improved symbol selection.
  * Added the --speed option specifying animation speed. It accepts a
    unitless multiplier, a specific number of frames per second, or max
    for maximum throughput.
  * There are now two ways to assign colors to symbol cells. Formerly,
    this was done based on the average color of the covered area. The new
    default is to use the median color, which produces sharper edges,
    but is slightly more prone to high-frequency noise. The new option
  - -color-extractor selects the method to employ.
  * When displaying multiple files, the default delay between files has
    been changed from three seconds to zero. Animations will still play
    through once. This can be overridden on the chafa command line with -d
    or --duration.
  * Minor tweaks to built-in symbols.
  Performance improvements:
  * Halved pixel storage requirements from 64 bits to 32 bits,
    resulting in significant memory savings.
  * Now builds with -ffast-math, yielding a big speedup for DIN99d.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1586692800">- Update to 1.4.1:
  * Added configure option --disable-rpath. This allows packagers to
    prevent the hard-coded library search path from being embedded in
    the chafa command-line tool (Mo Zhou, #39).
  * Added defaults for the yaft terminal.
  Bug fixes:
  * #40 - Fails to build on hurd-i386 + other i386 (reported by Mo
    Zhou).
  * [unfiled] - Rare failed assert with mostly transparent sixel image
    (reported by Reddit user spryfigure).
  * [unfiled] - Minor typo in function docstring.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1610712000">- Update to 1.6.0:
  * Added support for fullwidth symbols that take up two character
    cells. These are common in East Asian scripts. Single-cell and
    double-cell symbols can be mixed, and -f symbols mode will use
    both if possible.
  * New symbol tags: alpha, digit, alnum, narrow, wide, ambiguous,
    ugly, bad. "Ambiguous" symbols have uncertain widths and may
    render poorly in some terminals. "Ugly" denotes symbols that
    are unsuitable for Chafa's cell-based graphics (multicolor
    emoji, ideographic descriptors, etc). "Bad" is a superset of
    these two categories. Bad symbols are always excluded unless
    explicitly enabled with e.g. CHAFA_SYMBOL_TAG_BAD (--symbols
    +bad in the frontend).
  * The font loader (--glyph-file option) now does a better job
    with proportional fonts.
  * Added options for controlling lossless optimization of output.
    Currently, attribute reuse and character repetition (REP
    sequence) are implemented.
  * Added -O option to the frontend. This controls the optimization
    level.
  * Added a simple abstraction layer for terminal control sequences
    (ChafaTermInfo and ChafaTermDb). This allows for improved
    terminal support.
  * FbTerm is now supported with TERM=fbterm in the environment.
  * Bug fixes:
  - #43 Fix signal handler.
  - [unfiled] Crash when invalid font paths were passed on command line.
  - [unfiled] Small typo in fontgen's READM).
  - [unfiled] Bad contrast adjustment in images with transparency.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1623067200">- Update to 1.6.1:
  * Add NOCONFIGURE variable to autogen.sh to skip configure
  Bug fixes:
  * #50 SIGBUS while loading huge GIFs
  * #52 Produces small glitches in output with some images
  * #54 Haiku port fails on 32bit
  * [unfiled] Exclude RTL code points that could break the output.
  * [unfiled] Apple Terminal lacks truecolor support, so make it
    default to 256 colors
  * [unfiled] Fix typo affecting middle dot symbol.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1630497600">- Update to 1.8.0:
  * Added basic support for the Kitty and iTerm2 graphics protocols.
    These are enabled automatically when corresponding terminal support
    is detected, or manually with -f kitty or -f iterm.
  * Implemented an 8-color mode, selectable with -c 8
  * Implemented a foreground-only switch, --fg-only. This produces
    character art using foreground colors only, and will avoid
    modifying or resetting the background color. Looks best with
    non-contiguous symbols (e.g. ascii).
  * Added builtins for Japanese kana fullwidth symbols. These can
    now be used without loading any external fonts (try -c none --symbols wide).
  * Added builtins for legacy computer symbols (mainly wedges and
    sextant blocks). These were widely used in PETSCII and Teletext,
    and can be enabled using --symbols or --fill with their respective
    tags: legacy, wedge and sextant (@hodefoting).
  * Since there is a growing number of builtin symbols that may not
    be available everywhere, the default selection has been restricted
    to the widely supported block and border sets.
  * If possible, we now select a visually blank character from the
    specified symbol/fill sets instead of hardcoding ASCII space for
    featureless cells. One practical upshot of this is that the constant-width
    braille range can be used to produce consistent images even in contexts
    with variable-width fonts. U+2800 (BRAILLE PATTERN BLANK) will then be used in blank cells.
  * Improved terminal size detection when used with pipelines and redirection.
    This should now produce an image properly sized for your terminal:
    curl https://i.imgur.com/WFDEFVg.jpeg | chafa - | tee out
  * ChafaCanvas gained API functions for programmatically getting and
    setting character cell contents. These are used in a new example
    in tests/ncurses.c demonstrating ncurses integration.
  * Made --disable-rpath the default in order to simplify packaging.
  * Added a HACKING file featuring a much needed release checklist.
  * Improved terminal support:
    + Ctx will now use optimizing REP sequences at high -O levels.
    + foot now defaults to sixels.
    + iTerm2 now defaults to the iTerm2 protocol.
    + Kitty now defaults to the Kitty protocol.
    + st now defaults to truecolor symbols.
  * Bug fixes:
    + #44 Missing error handling on stdout writes.
    + [unfiled] Solid symbols erroneously replaced by fill in FGBG mode.
    + [unfiled] Integer formatter was not using fast path for 8-bit values.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1651147200">- bsc#1198965 (CVE-2022-1507): Fix NULL pointer deref in gif_internal_decode_frame
  * Add chafa-CVE-2022-1507.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1655294400">- bsc#1200510 (CVE-2022-2061): Fix heap based buffer overflow
  in lzw_decode
  * Add chafa-CVE-2022-2061.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1657022400">- bsc#1201211 (CVE-2022-2301): Fix buffer over-read
  * Add chafa-CVE-2022-2301.patch</changelog>
</package>
<package pkgid="f353cc60567f5b83998f4688ba51f260a58eacc12607d8cec0f16020d9d14233" name="cherrytree" arch="aarch64">
  <version epoch="0" ver="0.99.49+3" rel="bp154.2.3.2"/>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1606824000">- Update _service:
  + Change to @PARENT_TAG@+@TAG_OFFSET@ version scheme comonly used
    by the GNOME Team (with +0 being stripped when detected).</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1607515200">- Update to version 0.99.25:
  * Fixed unit test.
  * Icon theme update, (gh#giuspen/cherrytree#1408).
  * Debugging too slow large tables...
  * Added missing tooltips on the bookmarks handle dialog,
    (gh#giuspen/cherrytree#1403).
  * Fix spell-check language selection from right click menu was
    not saved to preferences.
  * Fix spell-check language selection from poreferences dialog not
    working (but ok from right click menu),
    (gh#giuspen/cherrytree#1400).
  * Fix TOC generation when existing anchor but wrong name,
    (gh#giuspen/cherrytree#1382).
  * Allow to override build date with SOURCE_DATE_EPOCH,
    (gh#giuspen/cherrytree#1401).
  * Improved command line switch --new-window,
    (gh#giuspen/cherrytree#1339).
  * Export to plain text do not alter node name case and prefix
    with a # per node level, (gh#giuspen/cherrytree#1385).
  * Fix the cherrytree shebang, (gh#giuspen/cherrytree#1396).
  * Translation updates.</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1608552000">- Update to version 0.99.26+2:
  * Fix select text with keyboard not working,
    (gh#giuspen/cherrytree#1441).
  * Fix crash when trying to paste invalid image in clipboard,
    (gh#giuspen/cherrytree#1440).
  * Fix open folder link not working when non ASCII path,
    (gh#giuspen/cherrytree#1423).
  * Fix recent documents list does't show undescores,
    (gh#giuspen/cherrytree#1435).
  * Keyboard shortcut to delete a node becomes Ctrl+Delete since
    this action now works also with focus on the text/while editing
    text, (gh#giuspen/cherrytree#1412).
  * Icon theme fixes/improvements, (gh#giuspen/cherrytree#1426,
    gh#giuspen/cherrytree#1414).
  * Fix find function adds empty lines to blank nodes,
    (gh#giuspen/cherrytree#1428).
  * Removed code duplications for open file and folder link,
    (gh#giuspen/cherrytree#1423).
  * Fix crash trying to open a bookmarked node that was deleted,
    (gh#giuspen/cherrytree#1430).
  * Fix wrongly detecting being run from the sorces directory build
    folder, (gh#giuspen/cherrytree#1422).
  * Fix non working keyboard shorcuts Alt+Left/Right to go to
    previous/next visited nodes, (gh#giuspen/cherrytree#1412).
  * Fix tree drag n drop freezing issue,
    (gh#giuspen/cherrytree#1377).
  * Fix table keyboard shortcut Ctrl+comma (add row) and
    Ctrl+Alt+comma (delete row), (gh#giuspen/cherrytree#1417).
  * When (re)generating TOC do not remove anchors created from the
    user, (gh#giuspen/cherrytree#1382).
  * Translation updates.</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1609070400">- Update to version 0.99.27+13:
  * Fix using fmt always unbundled from spdlog,
    (gh#giuspen/cherrytree#1458).
  * Using fmt always unbundled from spdlog,
    (gh#giuspen/cherrytree#1458).
  * Fix time filter for find in nodes names and tags,
    (gh#giuspen/cherrytree#1453).
  * Fix color for selected item in tree not consistent with
    selected item in menu, (gh#giuspen/cherrytree#1456).
  * Do not bundle spdlog but use as external library,
    (gh#giuspen/cherrytree#1199 and gh#giuspen/cherrytree#1433).
  * Fix failed zim import, (gh#giuspen/cherrytree#1273).
  * Changed GPG signature to detached,
    (gh#giuspen/cherrytree#1433).
  * Icon theme new save and other improvements.
  * More GCC11 fixes. (gh#giuspen/cherrytree#1450).
  * Translation updates.
- Add pkgconfig(spdlog) and pkgconfig(fmt) to build requires
  since no longer bundled.</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1609675200">- Update to version 0.99.28:
  * Improved sanitisation from bad characters at xml parse time,
    (gh#giuspen/cherrytree#1465).
  * Fix config.cfg re-created when symlinked,
    (gh#giuspen/cherrytree#1464).
  * Found better workaround for visualisation glitches,
    (gh#giuspen/cherrytree#1416, gh#giuspen/cherrytree#1427,
    gh#giuspen/cherrytree#1446 and gh#giuspen/cherrytree#1447).
  * Fix regression speeding up tables.
  * Support for sqlite document generated with old version of
    cherrytree, alter only at write time.
  * Isolating and trying to find alternative to
    WORKAROUND_ANCHORED_TEXT_VISUAL_GLITCHES.
  * Working on tables poor performance.</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1610193600">- Update to version 0.99.29:
  * Fix unable to open sqlite document created with old document
    version, (gh#giuspen/cherrytree#1471).
  * Add meta modifier shortcut key support,
    (gh#giuspen/cherrytree#1467).</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1612094400">- Update to version 0.99.30+7:
  * Fixed misleading command line argument export to pdf name - the
    user is expected to pass a directory path, not a file path.
  * Updated tests/googletest to current master HEAD to get rid of
    cmake warnings.
  * Replaced few Gio::File with g_file because of unit tests
    issues.
  * Moved a couple of types to proper header and fixed a unit test.
  * Insert link dialog to remember/repropose last selection,
    (gh#giuspen/cherrytree#1413).
  * Fix export to pdf crash.
  * Improved language selection in preferences dialog,
    (gh#giuspen/cherrytree#1496).
  * Moved top menu items 'Edit'-&gt;'Preferences' and 'Tree'-&gt;'Tree
    Info' to 'File' menu, (gh#giuspen/cherrytree#1497).
  * Cmake option to not automatically run the unit tests
  - DAUTO_RUN_TESTING='', (gh#giuspen/cherrytree#1433).
  * Versioning 48px variant of the icons, not currenlty in use,
  (gh#giuspen/cherrytree#1451).
  * New ct_code.svg, (gh#giuspen/cherrytree#1451).
  * Fix when creating new node/subnode not proposing syntax
    highlighting of selected node, (gh#giuspen/cherrytree#1481).
  * Update README.md - Added build description,
    (gh#giuspen/cherrytree#1488).
  * Fix Table of Contents not saving, (gh#giuspen/cherrytree#1484).
  * Fix crash when importing CSV file,
    (gh#giuspen/cherrytree#1476).</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1614340800">- Update to version 0.99.31+1:
  * Fix for building with ninja/cmake generator for ninja
    (-GNinja).
  * Amsys2 script to prepare standalone folder added user-style.xml
    required for user custom styles(themes).
  * Added few more icons as selectable for custom node icon,
  (gh#giuspen/cherrytree#1514).
  * Preferences dialog menu languages added flags,
    (gh#giuspen/cherrytree#1511)
  * Fixed import from keepnote missing images,
    (gh#giuspen/cherrytree#1516).
  * Added button to reset the two user style schemes to the default
    palettes.
  * Fix cmake install target, (gh#giuspen/cherrytree#1521).
  * Two user style schemes, one with a light default and one with
    a dark default.
  * Reworked pref dialog tab themes to make room for second user
    style scheme.
  * Independent style scheme for plain text and code.
  * Working on user theme editor, (gh#giuspen/cherrytree#1362).
  * Split pref dlg source file for upcoming work on theme editor.
  * Removed default global shortcut Ctrl+Delete to delete tree node
    because overrides text editor standard,
    (gh#giuspen/cherrytree#1513).
  * Insert special symbols chenged from submenu items to dialog,
    (gh#giuspen/cherrytree#1503).
  * Renamed filesystem path methods .string_native() and
    .string_unix().
  * New unit test for export to html.
  * New unit test for export to pdf.
    + unit test for export to txt; unit tests now in 3 binaries
    'run_tests_no_x', 'run_tests_with_x_1', 'run_tests_with_x_2'.
  * Implemented 'format clone' at cursor which can be applied with
    existing 'format latest', (gh#giuspen/cherrytree#600).
  * Translation updates.</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1615809600">- Update to version 0.99.32:
  * Fix crash regression of latest changes to restor excat vertical
    scrolling of text.
  * Remember last inserted special character and focus it at next
    special char insert time.
  * Improved restoring of exact vertical scroll position,
    (gh#giuspen/cherrytree#1151).
  * Fix iterated find dialog position issue.
  * Non rich text is to use the standard gtk undo/redo.
  * Fix iterated find/replace dialog disappearing after first
    button click.
  * Improved dialog to select an item in the list focusing the item
    that is currently in use.
  * Fixed issue with tree on right side restore tree width;
    splitted ct_main_win.cc, (gh#giuspen/cherrytree#1534).
  * Updated ct_node_no_icon.svg.
  * Close image resize dialog when pressing enter; dialog.cc split,
    (gh#giuspen/cherrytree#1547).
  * More node icons (gh#giuspen/cherrytree#1514).
  * Fix copy as plain text not working in table cell,
    (gh#giuspen/cherrytree#1528).
  * Cycle cherries colors in nodes levels rather than use the
    latest level for all exceeding number of colors,
    (gh#giuspen/cherrytree#692).
  * Added support for language 'elixir',
    (gh#giuspen/cherrytree#1541).
  * Update README.md, (gh#giuspen/cherrytree#1536).</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1616932800">- Update to version 0.99.33+5:
  * Modified main menu, (gh#giuspen/cherrytree#1573).
  * Added automatic syntax highlighting for the Dart language,
    (gh#giuspen/cherrytree#1569).
  * Fix changing codebox width of codeboxes with width in
    percentage, (gh#giuspen/cherrytree#1556).
  * Correct the FSF's postal address, (gh#giuspen/cherrytree#1566).
  * Fix import from cherrytree file missing dialog asking for
    parent node, (gh#giuspen/cherrytree#1562).
  * Treat equally return key press and numeric keypad enter key
    press, (gh#giuspen/cherrytree#1547).
  * Translation updates.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1618574400">- Update to 0.99.35:
  * Fix issue in 0.99.34 H1/H2/H3/H4/H5/H6/small
    not working for certain locale.
  * Fix issue with bookmarks in tree right click menu.
  * Implementation of configurable h1,h2,h3,small + (now supported)
    h4,h5,h6.
  * Reorganised the main menu.
  * Fix undo/redo state machine vertical scrollbar position
    and cursor position.
  * Fix crash when importing text/html files with non ascii
    file name on windows.
  * Fix links to file/folder on windows with UNC path.
  * Detect system shutdown to save config .
  * Improved recognition of web link as you type in case of
    start with ({[, end with ,;.)}].
  * Fixed wheel click on file link (to open parent folder).
  * Fix zooming text/tree font not being properly enforced like
    preferences dialog does.
  * Enabled logging to config folder, max size 5MB.</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1621598400">- Update to version 0.99.37:
  * Fix crashing Glib::convert_with_fallback(),
    (gh#giuspen/cherrytree#1593).
  * Fix after undo, redo jumps to the top of the document,
    (gh#giuspen/cherrytree#1151).
  * Assigned keyboard shortcut to move table columns Left/Right:
    Ctrl+{ and Ctrl+}.
  * Assigned keyboard shortcut to move table rows Up/Down: Ctrl+[
    and Ctrl+], (gh#giuspen/cherrytree#1626).
  * Ctrl+Arrows in tables disconnected from cells navigation,
    Ctrl+( and Ctrl+) to navigate Up/Down; Tab and Shift+Tab for
    navigate Right/Left, (gh#giuspen/cherrytree#194).
  * Help--Open Preferences Directory moved under File--Preferences.
  * Fix content in the table can be modified while the node is read
    only, (gh#giuspen/cherrytree#1674).
  * Preferences file export complete.
  * Adding preferences file import/export.
  * ct_menu_actions.cc just splitted too long lines.
  * Added dialog listing all available symbols auto replacements,
    (gh#giuspen/cherrytree#1659).
  * Preserve print page setup settings,
    (gh#giuspen/cherrytree#1664).
  * Fix URL detection doesn't recognize TAB as a delimiter,
    (gh#giuspen/cherrytree#1654).
  * Added configurable option to show the full path in the node
    name header, (gh#giuspen/cherrytree#1399).
  * Preferences dialog language selection explicit label
    'System Default' in place of '-'.
  * Fixed import of text files with extension not .txt on linux,
    (gh#giuspen/cherrytree#1656).
  * Reinstating Gtk::FileFilter::add_mime_type for importing text
    files, (gh#giuspen/cherrytree#1656).
  * Configurability of log enable/disable + directory in
    preferences dialog, tab miscellaneous,
    (gh#giuspen/cherrytree#1614).
  * Preferences dialog, custom backup directory simplified using
    Gtk::FileChooserButton.
  * Configurability of log enable/disable + directory,
    (gh#giuspen/cherrytree#1614).
  * Spell check enabled also for plain text,
    (gh#giuspen/cherrytree#1651).
  * Fix [gtk] [critical] gtk_widget_set_visible: assertion
    'GTK_IS_WIDGET (widget)' failed after,
    (gh#giuspen/cherrytree#1643).
  * Move config.cfg.tmp to config.cfg if not shutting down,
    (gh#giuspen/cherrytree#1614).
  * Added added configurable option to have bookmarks under
    dedicated menu in top menu bar, (gh#giuspen/cherrytree#1643).
  * New configurable scalable tags allow partial
    bold/italic/underline when not on by default,
    (gh#giuspen/cherrytree#1633).
  * Fix SHIFT+ENTER Able to Modify Locked Notes with Lists,
    (gh#giuspen/cherrytree#1640).
  * Translation updates.
- Changes from version 0.99.36:
  * Fix segfault on startup when configured to start on systray,
    (gh#giuspen/cherrytree#1610).
  * Translation updates.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1625745600">- Update to version 0.99.38:
  * Fix crash visiting node with a corrupted/invalid utf-8 character.
  * Fix crash when trying to insert image from file with format not
    supported from Glib such as .webp.
  * Fix unwanted characters found after copy/paste.
  * Fix status icon missing / bad rendered in tray.
  * Fixed tree node visibility issue when starting minimised
    on system tray.
  * Fix link markdown paste broken link.
  * Fix issues with spell check enabled and no languages available.
  * Improved web link recognition.</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1628510400">- Update to version 0.99.40:
  * Just renaming/polishing code of preferences dialog, tab fonts.
  * Fixed blacklist of action that cannot be part of the
    configurable toolbar; removed duplicated exec code action.
  * Translation updates.
- Changes from version 0.99.39:
  * When system tray and start hidden on system tray are enabled,
    load document only after the user click the systray icon to
    show cherrytree, (gh#giuspen/cherrytree#1751).
  * Fix codebox plain text wrongly using code font instead of plain
    text font.
  * Fix TODO lists not working in table cells,
    (gh#giuspen/cherrytree#194).
  * Fix File links in exported PDF do not work when path isn't
    relative, (gh#giuspen/cherrytree#1749).
  * Fixed 'Menu element icons are not always visible',
    (gh#giuspen/cherrytree#1410).
  * Fixed unit test breoken on windows with new utf-8 characters in
    filepath.
  * Unit tests data file use non utf-8 (cyrillic) characters for
    the paths.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1634904000">- Update to version 0.99.42:
  * Unified search in nodes name+tags and search in nodes content.
  * Fixed search in multiple nodes with the option first from
    selection/first in all range.
  * Fixed issue with password protected data extraction on windows
    and non ascii paths.
  * Link to node insert/edit dialog, added search for anchor
    name in the tree.
  * Implemented node property to exclude node and/or
    subnodes from search.
  * Applying a colour to foreground/background of text
    to use default gtk3 palette.
  * Added in preferenced dialog, tab theme, possibility
    to choose 2 new icon themes.
  * Added option to hide the status bar.
  * Added configurability of selected node's background/foreground
    colour in the tree.
  * Tree explorer added view option to show lines connecting
    the nodes parent-children.
  * Added syntax highlighting for AutoHotkey.
  * Added in preferences dialog, tab fonts, buttons to reset the
    fonts to default values.
  * At F8/current day node do not visit year/month if already
    existing, only day.
  * Support for portable mode in non-windows os looking for
    config/config.cfg beside cherrytree binary executable.
  * Tree sorting menu items: moved siblings only sorting first
    and after separator sorting whole tree.
  * Added experimantal option menubar_in_titlebar that can be
    activated in config.cfg, but off by default.
  * Added flip image buttons to image properties dialog.
  * Rich text tag monospace: added configurability of the
    foreground colour.
  * Fix incorrect insertion from plain text clipboard of
    link with pipe char.
  * Fix apply link to image via toolbar button rather than
    right click.
  * Fix after unmaximise main window, close, reopen -&gt; still
    maximised.
  * Fix fullscreen expands the width of tree explorer rather
    than the editing frame when tree on the right.
  * Fix segfault/crash from exporting imported markdown file
    with a table.
  * Fix todo lists in ubuntu 18.04 not cycling through
    available mark choices.
  * Fix print/export to pdf of table columns widths.
  * Print/export to pdf of scalable tags (h1..h6,small) and
    monospace use configured properties.
  * Node name header font size/family to follow the tree font.
  * Improved table sorting to use not only first column.
  * Improved import from markdown of a table with or without
    pre/post text.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1643716800">- Update to version 0.99.45+10:
  * added language Arabic
  * fixed time created/modified filter on searches for node name and tags
  * just ninja build debug print
  * added strip trailing spaces action to rich text right click menu
  * minor improvement to previous commit
  * fixed copy fromm codebox and pasting to rich text unwanted additional characters</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1647950400">- Update to version 0.99.46+6:
  * Fixed time created/modified filter on searches for node name and tags.
  * Changed default keyboard shortcuts using Ctrl+Period to Ctrl+Backslash
    for clash with latest linux desktops.
  * Fixed restore window position on Windows and dual screen.
  * Added strip trailing spaces action to rich text right click menu.
  * Fixed issue restoring hpaned tree/text position with tree on the right.
  * Added command line option to pass the password to open an encrypted document.</changelog>
  <changelog author="info@paolostivanin.com" date="1650542400">- Update to version 0.99.47+2:
  * Added support for latex math equations.
  * Added copy/paste of tree nodes and subnodes between multiple opened files.
  * Restored support for drag and drop of text selection.
    Now rich text content is preserved.
  * Added syntax highlighting for HCL.
  * Fixed issue at reset toolbar in preferences dialog when menubar in titlebar.
  * Added command line option (-S/--secondary_session) to run in isolation
    from a possibly already running main instance.
  * Updated flatpak script.</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1656504000">- Update to version 0.99.48:
  * Added support for right to left languages in export to html and
    pdf (gh#giuspen/cherrytree#2044, gh#giuspen/cherrytree#1668
    and gh#giuspen/cherrytree# #698).
  * In order to support the right to left languages in export to
    html, the resulting html text lines are no longer LINE&lt;br/&gt; but
    &lt;p&gt;LINE&lt;/p&gt;.
  * Fixed in export to pdf the link to node+anchor with non ascii
    anchor name.
  * Improved detection of missing executables required for
    rendering LatexBoxes. These dependencies are no longer
    mandatory (gh#giuspen/cherrytree#2033).
  * Added help to the user to show again a hidden menubar
    (gh#giuspen/cherrytree#1927 and gh#giuspen/cherrytree#2054).
  * Pressing Tab on the very latest table cell now adds a new table
    line and moves to its first cell.
  * Fixed issue with relative links to files and folders and
    documents moved between linux and windows.
  * In export to html and txt multiple files, now appending the
    node id to the file names to support multiple nodes with the
    same name.
  * Added syntax highlight support for solidity
    (gh#giuspen/cherrytree#2030).
  * After issues with the domain giuspen.com, the domain changed to
    giuspen.net and giuspen.com will eventually go.</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1663243200">- Update to version 0.99.49+3:
  * Legacy_canonicalize_filename: manage empty filename,
    (gh#giuspen/cherrytree#2118)
  * added command line option '--anchor AnchorName' that in
    addition to existing '--node NodeName' allows to open a
    document focusing an anchor in a node.
  * Changed non configurable keyboard shortcuts for codebox width
    and table column width to use parenthesis open instead of
    backslash, (gh#giuspen/cherrytree#2113).
  * Fixed crash on double exit from systray icon right click menu,
    (gh#giuspen/cherrytree#2114).
  * Added keyboard shortcuts to toolbar tooltips,
    (gh#giuspen/cherrytree#2106).
  * Fixed export to HTML crash, (gh#giuspen/cherrytree#2109).
  * Force turning off portal usage since it does not work on all
    distros, (gh#giuspen/cherrytree#2111).
  * Improved dialog confirmation before executing the code.
  * Additonal changes for core22, (gh#giuspen/cherrytree#2110).
  * Allow to disable the dialog asking for confirmation before
    executing the code.
  * Fixed bulleted list unindent (Shift+Tab) crash,
    (gh#giuspen/cherrytree#2103).
  * Add home plug, (gh#giuspen/cherrytree#2101 and
    gh#giuspen/cherrytree#2102).
  * Linux menu launcher run cherrytree in a new instance,
    (gh#giuspen/cherrytree#2077).
  * Fixed crash on print/export as pdf of a sequence of characters
    without spaces longer that the page width, such as a very long
    URL, (gh#giuspen/cherrytree#2045).
  * Fixed wrongly entering column mode when using keyboard
    shortcuts with &lt;Ctrl&gt;&lt;Alt&gt; such as insert codebox,
    (gh#giuspen/cherrytree#2075).
  * Added syntax highlighting support for GDScript.
  * Fixed tooltip and cursor not reset after hovering link and then
    navigating to non rich text node.
  * Support for accent insensitive search - added letters with
    subordinate dots, (gh#giuspen/cherrytree#1981).
  * Translation updates.
- Fix duplicate file warnings, add fdupes build requires and macro.
- Developer advised fixed cross-site scripting (XSS) vulnerability
  that allows attackers to execute arbitrary web scripts or HTML
  via a crafted payload injected into the Name text field when
  creating a node, (#boo1202513, gh#giuspen/cherrytree#2099 and
  CVE-2022-35133).</changelog>
</package>
<package pkgid="7bc4dc23cc4c3e35101f7a88e4ae336e55118d5bd5dc9ffadd52e62a930b33b1" name="cherrytree" arch="s390x">
  <version epoch="0" ver="0.99.49+3" rel="bp154.2.3.2"/>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1606824000">- Update _service:
  + Change to @PARENT_TAG@+@TAG_OFFSET@ version scheme comonly used
    by the GNOME Team (with +0 being stripped when detected).</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1607515200">- Update to version 0.99.25:
  * Fixed unit test.
  * Icon theme update, (gh#giuspen/cherrytree#1408).
  * Debugging too slow large tables...
  * Added missing tooltips on the bookmarks handle dialog,
    (gh#giuspen/cherrytree#1403).
  * Fix spell-check language selection from right click menu was
    not saved to preferences.
  * Fix spell-check language selection from poreferences dialog not
    working (but ok from right click menu),
    (gh#giuspen/cherrytree#1400).
  * Fix TOC generation when existing anchor but wrong name,
    (gh#giuspen/cherrytree#1382).
  * Allow to override build date with SOURCE_DATE_EPOCH,
    (gh#giuspen/cherrytree#1401).
  * Improved command line switch --new-window,
    (gh#giuspen/cherrytree#1339).
  * Export to plain text do not alter node name case and prefix
    with a # per node level, (gh#giuspen/cherrytree#1385).
  * Fix the cherrytree shebang, (gh#giuspen/cherrytree#1396).
  * Translation updates.</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1608552000">- Update to version 0.99.26+2:
  * Fix select text with keyboard not working,
    (gh#giuspen/cherrytree#1441).
  * Fix crash when trying to paste invalid image in clipboard,
    (gh#giuspen/cherrytree#1440).
  * Fix open folder link not working when non ASCII path,
    (gh#giuspen/cherrytree#1423).
  * Fix recent documents list does't show undescores,
    (gh#giuspen/cherrytree#1435).
  * Keyboard shortcut to delete a node becomes Ctrl+Delete since
    this action now works also with focus on the text/while editing
    text, (gh#giuspen/cherrytree#1412).
  * Icon theme fixes/improvements, (gh#giuspen/cherrytree#1426,
    gh#giuspen/cherrytree#1414).
  * Fix find function adds empty lines to blank nodes,
    (gh#giuspen/cherrytree#1428).
  * Removed code duplications for open file and folder link,
    (gh#giuspen/cherrytree#1423).
  * Fix crash trying to open a bookmarked node that was deleted,
    (gh#giuspen/cherrytree#1430).
  * Fix wrongly detecting being run from the sorces directory build
    folder, (gh#giuspen/cherrytree#1422).
  * Fix non working keyboard shorcuts Alt+Left/Right to go to
    previous/next visited nodes, (gh#giuspen/cherrytree#1412).
  * Fix tree drag n drop freezing issue,
    (gh#giuspen/cherrytree#1377).
  * Fix table keyboard shortcut Ctrl+comma (add row) and
    Ctrl+Alt+comma (delete row), (gh#giuspen/cherrytree#1417).
  * When (re)generating TOC do not remove anchors created from the
    user, (gh#giuspen/cherrytree#1382).
  * Translation updates.</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1609070400">- Update to version 0.99.27+13:
  * Fix using fmt always unbundled from spdlog,
    (gh#giuspen/cherrytree#1458).
  * Using fmt always unbundled from spdlog,
    (gh#giuspen/cherrytree#1458).
  * Fix time filter for find in nodes names and tags,
    (gh#giuspen/cherrytree#1453).
  * Fix color for selected item in tree not consistent with
    selected item in menu, (gh#giuspen/cherrytree#1456).
  * Do not bundle spdlog but use as external library,
    (gh#giuspen/cherrytree#1199 and gh#giuspen/cherrytree#1433).
  * Fix failed zim import, (gh#giuspen/cherrytree#1273).
  * Changed GPG signature to detached,
    (gh#giuspen/cherrytree#1433).
  * Icon theme new save and other improvements.
  * More GCC11 fixes. (gh#giuspen/cherrytree#1450).
  * Translation updates.
- Add pkgconfig(spdlog) and pkgconfig(fmt) to build requires
  since no longer bundled.</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1609675200">- Update to version 0.99.28:
  * Improved sanitisation from bad characters at xml parse time,
    (gh#giuspen/cherrytree#1465).
  * Fix config.cfg re-created when symlinked,
    (gh#giuspen/cherrytree#1464).
  * Found better workaround for visualisation glitches,
    (gh#giuspen/cherrytree#1416, gh#giuspen/cherrytree#1427,
    gh#giuspen/cherrytree#1446 and gh#giuspen/cherrytree#1447).
  * Fix regression speeding up tables.
  * Support for sqlite document generated with old version of
    cherrytree, alter only at write time.
  * Isolating and trying to find alternative to
    WORKAROUND_ANCHORED_TEXT_VISUAL_GLITCHES.
  * Working on tables poor performance.</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1610193600">- Update to version 0.99.29:
  * Fix unable to open sqlite document created with old document
    version, (gh#giuspen/cherrytree#1471).
  * Add meta modifier shortcut key support,
    (gh#giuspen/cherrytree#1467).</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1612094400">- Update to version 0.99.30+7:
  * Fixed misleading command line argument export to pdf name - the
    user is expected to pass a directory path, not a file path.
  * Updated tests/googletest to current master HEAD to get rid of
    cmake warnings.
  * Replaced few Gio::File with g_file because of unit tests
    issues.
  * Moved a couple of types to proper header and fixed a unit test.
  * Insert link dialog to remember/repropose last selection,
    (gh#giuspen/cherrytree#1413).
  * Fix export to pdf crash.
  * Improved language selection in preferences dialog,
    (gh#giuspen/cherrytree#1496).
  * Moved top menu items 'Edit'-&gt;'Preferences' and 'Tree'-&gt;'Tree
    Info' to 'File' menu, (gh#giuspen/cherrytree#1497).
  * Cmake option to not automatically run the unit tests
  - DAUTO_RUN_TESTING='', (gh#giuspen/cherrytree#1433).
  * Versioning 48px variant of the icons, not currenlty in use,
  (gh#giuspen/cherrytree#1451).
  * New ct_code.svg, (gh#giuspen/cherrytree#1451).
  * Fix when creating new node/subnode not proposing syntax
    highlighting of selected node, (gh#giuspen/cherrytree#1481).
  * Update README.md - Added build description,
    (gh#giuspen/cherrytree#1488).
  * Fix Table of Contents not saving, (gh#giuspen/cherrytree#1484).
  * Fix crash when importing CSV file,
    (gh#giuspen/cherrytree#1476).</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1614340800">- Update to version 0.99.31+1:
  * Fix for building with ninja/cmake generator for ninja
    (-GNinja).
  * Amsys2 script to prepare standalone folder added user-style.xml
    required for user custom styles(themes).
  * Added few more icons as selectable for custom node icon,
  (gh#giuspen/cherrytree#1514).
  * Preferences dialog menu languages added flags,
    (gh#giuspen/cherrytree#1511)
  * Fixed import from keepnote missing images,
    (gh#giuspen/cherrytree#1516).
  * Added button to reset the two user style schemes to the default
    palettes.
  * Fix cmake install target, (gh#giuspen/cherrytree#1521).
  * Two user style schemes, one with a light default and one with
    a dark default.
  * Reworked pref dialog tab themes to make room for second user
    style scheme.
  * Independent style scheme for plain text and code.
  * Working on user theme editor, (gh#giuspen/cherrytree#1362).
  * Split pref dlg source file for upcoming work on theme editor.
  * Removed default global shortcut Ctrl+Delete to delete tree node
    because overrides text editor standard,
    (gh#giuspen/cherrytree#1513).
  * Insert special symbols chenged from submenu items to dialog,
    (gh#giuspen/cherrytree#1503).
  * Renamed filesystem path methods .string_native() and
    .string_unix().
  * New unit test for export to html.
  * New unit test for export to pdf.
    + unit test for export to txt; unit tests now in 3 binaries
    'run_tests_no_x', 'run_tests_with_x_1', 'run_tests_with_x_2'.
  * Implemented 'format clone' at cursor which can be applied with
    existing 'format latest', (gh#giuspen/cherrytree#600).
  * Translation updates.</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1615809600">- Update to version 0.99.32:
  * Fix crash regression of latest changes to restor excat vertical
    scrolling of text.
  * Remember last inserted special character and focus it at next
    special char insert time.
  * Improved restoring of exact vertical scroll position,
    (gh#giuspen/cherrytree#1151).
  * Fix iterated find dialog position issue.
  * Non rich text is to use the standard gtk undo/redo.
  * Fix iterated find/replace dialog disappearing after first
    button click.
  * Improved dialog to select an item in the list focusing the item
    that is currently in use.
  * Fixed issue with tree on right side restore tree width;
    splitted ct_main_win.cc, (gh#giuspen/cherrytree#1534).
  * Updated ct_node_no_icon.svg.
  * Close image resize dialog when pressing enter; dialog.cc split,
    (gh#giuspen/cherrytree#1547).
  * More node icons (gh#giuspen/cherrytree#1514).
  * Fix copy as plain text not working in table cell,
    (gh#giuspen/cherrytree#1528).
  * Cycle cherries colors in nodes levels rather than use the
    latest level for all exceeding number of colors,
    (gh#giuspen/cherrytree#692).
  * Added support for language 'elixir',
    (gh#giuspen/cherrytree#1541).
  * Update README.md, (gh#giuspen/cherrytree#1536).</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1616932800">- Update to version 0.99.33+5:
  * Modified main menu, (gh#giuspen/cherrytree#1573).
  * Added automatic syntax highlighting for the Dart language,
    (gh#giuspen/cherrytree#1569).
  * Fix changing codebox width of codeboxes with width in
    percentage, (gh#giuspen/cherrytree#1556).
  * Correct the FSF's postal address, (gh#giuspen/cherrytree#1566).
  * Fix import from cherrytree file missing dialog asking for
    parent node, (gh#giuspen/cherrytree#1562).
  * Treat equally return key press and numeric keypad enter key
    press, (gh#giuspen/cherrytree#1547).
  * Translation updates.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1618574400">- Update to 0.99.35:
  * Fix issue in 0.99.34 H1/H2/H3/H4/H5/H6/small
    not working for certain locale.
  * Fix issue with bookmarks in tree right click menu.
  * Implementation of configurable h1,h2,h3,small + (now supported)
    h4,h5,h6.
  * Reorganised the main menu.
  * Fix undo/redo state machine vertical scrollbar position
    and cursor position.
  * Fix crash when importing text/html files with non ascii
    file name on windows.
  * Fix links to file/folder on windows with UNC path.
  * Detect system shutdown to save config .
  * Improved recognition of web link as you type in case of
    start with ({[, end with ,;.)}].
  * Fixed wheel click on file link (to open parent folder).
  * Fix zooming text/tree font not being properly enforced like
    preferences dialog does.
  * Enabled logging to config folder, max size 5MB.</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1621598400">- Update to version 0.99.37:
  * Fix crashing Glib::convert_with_fallback(),
    (gh#giuspen/cherrytree#1593).
  * Fix after undo, redo jumps to the top of the document,
    (gh#giuspen/cherrytree#1151).
  * Assigned keyboard shortcut to move table columns Left/Right:
    Ctrl+{ and Ctrl+}.
  * Assigned keyboard shortcut to move table rows Up/Down: Ctrl+[
    and Ctrl+], (gh#giuspen/cherrytree#1626).
  * Ctrl+Arrows in tables disconnected from cells navigation,
    Ctrl+( and Ctrl+) to navigate Up/Down; Tab and Shift+Tab for
    navigate Right/Left, (gh#giuspen/cherrytree#194).
  * Help--Open Preferences Directory moved under File--Preferences.
  * Fix content in the table can be modified while the node is read
    only, (gh#giuspen/cherrytree#1674).
  * Preferences file export complete.
  * Adding preferences file import/export.
  * ct_menu_actions.cc just splitted too long lines.
  * Added dialog listing all available symbols auto replacements,
    (gh#giuspen/cherrytree#1659).
  * Preserve print page setup settings,
    (gh#giuspen/cherrytree#1664).
  * Fix URL detection doesn't recognize TAB as a delimiter,
    (gh#giuspen/cherrytree#1654).
  * Added configurable option to show the full path in the node
    name header, (gh#giuspen/cherrytree#1399).
  * Preferences dialog language selection explicit label
    'System Default' in place of '-'.
  * Fixed import of text files with extension not .txt on linux,
    (gh#giuspen/cherrytree#1656).
  * Reinstating Gtk::FileFilter::add_mime_type for importing text
    files, (gh#giuspen/cherrytree#1656).
  * Configurability of log enable/disable + directory in
    preferences dialog, tab miscellaneous,
    (gh#giuspen/cherrytree#1614).
  * Preferences dialog, custom backup directory simplified using
    Gtk::FileChooserButton.
  * Configurability of log enable/disable + directory,
    (gh#giuspen/cherrytree#1614).
  * Spell check enabled also for plain text,
    (gh#giuspen/cherrytree#1651).
  * Fix [gtk] [critical] gtk_widget_set_visible: assertion
    'GTK_IS_WIDGET (widget)' failed after,
    (gh#giuspen/cherrytree#1643).
  * Move config.cfg.tmp to config.cfg if not shutting down,
    (gh#giuspen/cherrytree#1614).
  * Added added configurable option to have bookmarks under
    dedicated menu in top menu bar, (gh#giuspen/cherrytree#1643).
  * New configurable scalable tags allow partial
    bold/italic/underline when not on by default,
    (gh#giuspen/cherrytree#1633).
  * Fix SHIFT+ENTER Able to Modify Locked Notes with Lists,
    (gh#giuspen/cherrytree#1640).
  * Translation updates.
- Changes from version 0.99.36:
  * Fix segfault on startup when configured to start on systray,
    (gh#giuspen/cherrytree#1610).
  * Translation updates.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1625745600">- Update to version 0.99.38:
  * Fix crash visiting node with a corrupted/invalid utf-8 character.
  * Fix crash when trying to insert image from file with format not
    supported from Glib such as .webp.
  * Fix unwanted characters found after copy/paste.
  * Fix status icon missing / bad rendered in tray.
  * Fixed tree node visibility issue when starting minimised
    on system tray.
  * Fix link markdown paste broken link.
  * Fix issues with spell check enabled and no languages available.
  * Improved web link recognition.</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1628510400">- Update to version 0.99.40:
  * Just renaming/polishing code of preferences dialog, tab fonts.
  * Fixed blacklist of action that cannot be part of the
    configurable toolbar; removed duplicated exec code action.
  * Translation updates.
- Changes from version 0.99.39:
  * When system tray and start hidden on system tray are enabled,
    load document only after the user click the systray icon to
    show cherrytree, (gh#giuspen/cherrytree#1751).
  * Fix codebox plain text wrongly using code font instead of plain
    text font.
  * Fix TODO lists not working in table cells,
    (gh#giuspen/cherrytree#194).
  * Fix File links in exported PDF do not work when path isn't
    relative, (gh#giuspen/cherrytree#1749).
  * Fixed 'Menu element icons are not always visible',
    (gh#giuspen/cherrytree#1410).
  * Fixed unit test breoken on windows with new utf-8 characters in
    filepath.
  * Unit tests data file use non utf-8 (cyrillic) characters for
    the paths.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1634904000">- Update to version 0.99.42:
  * Unified search in nodes name+tags and search in nodes content.
  * Fixed search in multiple nodes with the option first from
    selection/first in all range.
  * Fixed issue with password protected data extraction on windows
    and non ascii paths.
  * Link to node insert/edit dialog, added search for anchor
    name in the tree.
  * Implemented node property to exclude node and/or
    subnodes from search.
  * Applying a colour to foreground/background of text
    to use default gtk3 palette.
  * Added in preferenced dialog, tab theme, possibility
    to choose 2 new icon themes.
  * Added option to hide the status bar.
  * Added configurability of selected node's background/foreground
    colour in the tree.
  * Tree explorer added view option to show lines connecting
    the nodes parent-children.
  * Added syntax highlighting for AutoHotkey.
  * Added in preferences dialog, tab fonts, buttons to reset the
    fonts to default values.
  * At F8/current day node do not visit year/month if already
    existing, only day.
  * Support for portable mode in non-windows os looking for
    config/config.cfg beside cherrytree binary executable.
  * Tree sorting menu items: moved siblings only sorting first
    and after separator sorting whole tree.
  * Added experimantal option menubar_in_titlebar that can be
    activated in config.cfg, but off by default.
  * Added flip image buttons to image properties dialog.
  * Rich text tag monospace: added configurability of the
    foreground colour.
  * Fix incorrect insertion from plain text clipboard of
    link with pipe char.
  * Fix apply link to image via toolbar button rather than
    right click.
  * Fix after unmaximise main window, close, reopen -&gt; still
    maximised.
  * Fix fullscreen expands the width of tree explorer rather
    than the editing frame when tree on the right.
  * Fix segfault/crash from exporting imported markdown file
    with a table.
  * Fix todo lists in ubuntu 18.04 not cycling through
    available mark choices.
  * Fix print/export to pdf of table columns widths.
  * Print/export to pdf of scalable tags (h1..h6,small) and
    monospace use configured properties.
  * Node name header font size/family to follow the tree font.
  * Improved table sorting to use not only first column.
  * Improved import from markdown of a table with or without
    pre/post text.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1643716800">- Update to version 0.99.45+10:
  * added language Arabic
  * fixed time created/modified filter on searches for node name and tags
  * just ninja build debug print
  * added strip trailing spaces action to rich text right click menu
  * minor improvement to previous commit
  * fixed copy fromm codebox and pasting to rich text unwanted additional characters</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1647950400">- Update to version 0.99.46+6:
  * Fixed time created/modified filter on searches for node name and tags.
  * Changed default keyboard shortcuts using Ctrl+Period to Ctrl+Backslash
    for clash with latest linux desktops.
  * Fixed restore window position on Windows and dual screen.
  * Added strip trailing spaces action to rich text right click menu.
  * Fixed issue restoring hpaned tree/text position with tree on the right.
  * Added command line option to pass the password to open an encrypted document.</changelog>
  <changelog author="info@paolostivanin.com" date="1650542400">- Update to version 0.99.47+2:
  * Added support for latex math equations.
  * Added copy/paste of tree nodes and subnodes between multiple opened files.
  * Restored support for drag and drop of text selection.
    Now rich text content is preserved.
  * Added syntax highlighting for HCL.
  * Fixed issue at reset toolbar in preferences dialog when menubar in titlebar.
  * Added command line option (-S/--secondary_session) to run in isolation
    from a possibly already running main instance.
  * Updated flatpak script.</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1656504000">- Update to version 0.99.48:
  * Added support for right to left languages in export to html and
    pdf (gh#giuspen/cherrytree#2044, gh#giuspen/cherrytree#1668
    and gh#giuspen/cherrytree# #698).
  * In order to support the right to left languages in export to
    html, the resulting html text lines are no longer LINE&lt;br/&gt; but
    &lt;p&gt;LINE&lt;/p&gt;.
  * Fixed in export to pdf the link to node+anchor with non ascii
    anchor name.
  * Improved detection of missing executables required for
    rendering LatexBoxes. These dependencies are no longer
    mandatory (gh#giuspen/cherrytree#2033).
  * Added help to the user to show again a hidden menubar
    (gh#giuspen/cherrytree#1927 and gh#giuspen/cherrytree#2054).
  * Pressing Tab on the very latest table cell now adds a new table
    line and moves to its first cell.
  * Fixed issue with relative links to files and folders and
    documents moved between linux and windows.
  * In export to html and txt multiple files, now appending the
    node id to the file names to support multiple nodes with the
    same name.
  * Added syntax highlight support for solidity
    (gh#giuspen/cherrytree#2030).
  * After issues with the domain giuspen.com, the domain changed to
    giuspen.net and giuspen.com will eventually go.</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1663243200">- Update to version 0.99.49+3:
  * Legacy_canonicalize_filename: manage empty filename,
    (gh#giuspen/cherrytree#2118)
  * added command line option '--anchor AnchorName' that in
    addition to existing '--node NodeName' allows to open a
    document focusing an anchor in a node.
  * Changed non configurable keyboard shortcuts for codebox width
    and table column width to use parenthesis open instead of
    backslash, (gh#giuspen/cherrytree#2113).
  * Fixed crash on double exit from systray icon right click menu,
    (gh#giuspen/cherrytree#2114).
  * Added keyboard shortcuts to toolbar tooltips,
    (gh#giuspen/cherrytree#2106).
  * Fixed export to HTML crash, (gh#giuspen/cherrytree#2109).
  * Force turning off portal usage since it does not work on all
    distros, (gh#giuspen/cherrytree#2111).
  * Improved dialog confirmation before executing the code.
  * Additonal changes for core22, (gh#giuspen/cherrytree#2110).
  * Allow to disable the dialog asking for confirmation before
    executing the code.
  * Fixed bulleted list unindent (Shift+Tab) crash,
    (gh#giuspen/cherrytree#2103).
  * Add home plug, (gh#giuspen/cherrytree#2101 and
    gh#giuspen/cherrytree#2102).
  * Linux menu launcher run cherrytree in a new instance,
    (gh#giuspen/cherrytree#2077).
  * Fixed crash on print/export as pdf of a sequence of characters
    without spaces longer that the page width, such as a very long
    URL, (gh#giuspen/cherrytree#2045).
  * Fixed wrongly entering column mode when using keyboard
    shortcuts with &lt;Ctrl&gt;&lt;Alt&gt; such as insert codebox,
    (gh#giuspen/cherrytree#2075).
  * Added syntax highlighting support for GDScript.
  * Fixed tooltip and cursor not reset after hovering link and then
    navigating to non rich text node.
  * Support for accent insensitive search - added letters with
    subordinate dots, (gh#giuspen/cherrytree#1981).
  * Translation updates.
- Fix duplicate file warnings, add fdupes build requires and macro.
- Developer advised fixed cross-site scripting (XSS) vulnerability
  that allows attackers to execute arbitrary web scripts or HTML
  via a crafted payload injected into the Name text field when
  creating a node, (#boo1202513, gh#giuspen/cherrytree#2099 and
  CVE-2022-35133).</changelog>
</package>
<package pkgid="4089631a61f40c522dff1e21c0e77666839104b098b2cdfb143afbc00147dee0" name="cherrytree" arch="src">
  <version epoch="0" ver="0.99.49+3" rel="bp154.2.3.2"/>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1606824000">- Update _service:
  + Change to @PARENT_TAG@+@TAG_OFFSET@ version scheme comonly used
    by the GNOME Team (with +0 being stripped when detected).</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1607515200">- Update to version 0.99.25:
  * Fixed unit test.
  * Icon theme update, (gh#giuspen/cherrytree#1408).
  * Debugging too slow large tables...
  * Added missing tooltips on the bookmarks handle dialog,
    (gh#giuspen/cherrytree#1403).
  * Fix spell-check language selection from right click menu was
    not saved to preferences.
  * Fix spell-check language selection from poreferences dialog not
    working (but ok from right click menu),
    (gh#giuspen/cherrytree#1400).
  * Fix TOC generation when existing anchor but wrong name,
    (gh#giuspen/cherrytree#1382).
  * Allow to override build date with SOURCE_DATE_EPOCH,
    (gh#giuspen/cherrytree#1401).
  * Improved command line switch --new-window,
    (gh#giuspen/cherrytree#1339).
  * Export to plain text do not alter node name case and prefix
    with a # per node level, (gh#giuspen/cherrytree#1385).
  * Fix the cherrytree shebang, (gh#giuspen/cherrytree#1396).
  * Translation updates.</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1608552000">- Update to version 0.99.26+2:
  * Fix select text with keyboard not working,
    (gh#giuspen/cherrytree#1441).
  * Fix crash when trying to paste invalid image in clipboard,
    (gh#giuspen/cherrytree#1440).
  * Fix open folder link not working when non ASCII path,
    (gh#giuspen/cherrytree#1423).
  * Fix recent documents list does't show undescores,
    (gh#giuspen/cherrytree#1435).
  * Keyboard shortcut to delete a node becomes Ctrl+Delete since
    this action now works also with focus on the text/while editing
    text, (gh#giuspen/cherrytree#1412).
  * Icon theme fixes/improvements, (gh#giuspen/cherrytree#1426,
    gh#giuspen/cherrytree#1414).
  * Fix find function adds empty lines to blank nodes,
    (gh#giuspen/cherrytree#1428).
  * Removed code duplications for open file and folder link,
    (gh#giuspen/cherrytree#1423).
  * Fix crash trying to open a bookmarked node that was deleted,
    (gh#giuspen/cherrytree#1430).
  * Fix wrongly detecting being run from the sorces directory build
    folder, (gh#giuspen/cherrytree#1422).
  * Fix non working keyboard shorcuts Alt+Left/Right to go to
    previous/next visited nodes, (gh#giuspen/cherrytree#1412).
  * Fix tree drag n drop freezing issue,
    (gh#giuspen/cherrytree#1377).
  * Fix table keyboard shortcut Ctrl+comma (add row) and
    Ctrl+Alt+comma (delete row), (gh#giuspen/cherrytree#1417).
  * When (re)generating TOC do not remove anchors created from the
    user, (gh#giuspen/cherrytree#1382).
  * Translation updates.</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1609070400">- Update to version 0.99.27+13:
  * Fix using fmt always unbundled from spdlog,
    (gh#giuspen/cherrytree#1458).
  * Using fmt always unbundled from spdlog,
    (gh#giuspen/cherrytree#1458).
  * Fix time filter for find in nodes names and tags,
    (gh#giuspen/cherrytree#1453).
  * Fix color for selected item in tree not consistent with
    selected item in menu, (gh#giuspen/cherrytree#1456).
  * Do not bundle spdlog but use as external library,
    (gh#giuspen/cherrytree#1199 and gh#giuspen/cherrytree#1433).
  * Fix failed zim import, (gh#giuspen/cherrytree#1273).
  * Changed GPG signature to detached,
    (gh#giuspen/cherrytree#1433).
  * Icon theme new save and other improvements.
  * More GCC11 fixes. (gh#giuspen/cherrytree#1450).
  * Translation updates.
- Add pkgconfig(spdlog) and pkgconfig(fmt) to build requires
  since no longer bundled.</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1609675200">- Update to version 0.99.28:
  * Improved sanitisation from bad characters at xml parse time,
    (gh#giuspen/cherrytree#1465).
  * Fix config.cfg re-created when symlinked,
    (gh#giuspen/cherrytree#1464).
  * Found better workaround for visualisation glitches,
    (gh#giuspen/cherrytree#1416, gh#giuspen/cherrytree#1427,
    gh#giuspen/cherrytree#1446 and gh#giuspen/cherrytree#1447).
  * Fix regression speeding up tables.
  * Support for sqlite document generated with old version of
    cherrytree, alter only at write time.
  * Isolating and trying to find alternative to
    WORKAROUND_ANCHORED_TEXT_VISUAL_GLITCHES.
  * Working on tables poor performance.</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1610193600">- Update to version 0.99.29:
  * Fix unable to open sqlite document created with old document
    version, (gh#giuspen/cherrytree#1471).
  * Add meta modifier shortcut key support,
    (gh#giuspen/cherrytree#1467).</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1612094400">- Update to version 0.99.30+7:
  * Fixed misleading command line argument export to pdf name - the
    user is expected to pass a directory path, not a file path.
  * Updated tests/googletest to current master HEAD to get rid of
    cmake warnings.
  * Replaced few Gio::File with g_file because of unit tests
    issues.
  * Moved a couple of types to proper header and fixed a unit test.
  * Insert link dialog to remember/repropose last selection,
    (gh#giuspen/cherrytree#1413).
  * Fix export to pdf crash.
  * Improved language selection in preferences dialog,
    (gh#giuspen/cherrytree#1496).
  * Moved top menu items 'Edit'-&gt;'Preferences' and 'Tree'-&gt;'Tree
    Info' to 'File' menu, (gh#giuspen/cherrytree#1497).
  * Cmake option to not automatically run the unit tests
  - DAUTO_RUN_TESTING='', (gh#giuspen/cherrytree#1433).
  * Versioning 48px variant of the icons, not currenlty in use,
  (gh#giuspen/cherrytree#1451).
  * New ct_code.svg, (gh#giuspen/cherrytree#1451).
  * Fix when creating new node/subnode not proposing syntax
    highlighting of selected node, (gh#giuspen/cherrytree#1481).
  * Update README.md - Added build description,
    (gh#giuspen/cherrytree#1488).
  * Fix Table of Contents not saving, (gh#giuspen/cherrytree#1484).
  * Fix crash when importing CSV file,
    (gh#giuspen/cherrytree#1476).</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1614340800">- Update to version 0.99.31+1:
  * Fix for building with ninja/cmake generator for ninja
    (-GNinja).
  * Amsys2 script to prepare standalone folder added user-style.xml
    required for user custom styles(themes).
  * Added few more icons as selectable for custom node icon,
  (gh#giuspen/cherrytree#1514).
  * Preferences dialog menu languages added flags,
    (gh#giuspen/cherrytree#1511)
  * Fixed import from keepnote missing images,
    (gh#giuspen/cherrytree#1516).
  * Added button to reset the two user style schemes to the default
    palettes.
  * Fix cmake install target, (gh#giuspen/cherrytree#1521).
  * Two user style schemes, one with a light default and one with
    a dark default.
  * Reworked pref dialog tab themes to make room for second user
    style scheme.
  * Independent style scheme for plain text and code.
  * Working on user theme editor, (gh#giuspen/cherrytree#1362).
  * Split pref dlg source file for upcoming work on theme editor.
  * Removed default global shortcut Ctrl+Delete to delete tree node
    because overrides text editor standard,
    (gh#giuspen/cherrytree#1513).
  * Insert special symbols chenged from submenu items to dialog,
    (gh#giuspen/cherrytree#1503).
  * Renamed filesystem path methods .string_native() and
    .string_unix().
  * New unit test for export to html.
  * New unit test for export to pdf.
    + unit test for export to txt; unit tests now in 3 binaries
    'run_tests_no_x', 'run_tests_with_x_1', 'run_tests_with_x_2'.
  * Implemented 'format clone' at cursor which can be applied with
    existing 'format latest', (gh#giuspen/cherrytree#600).
  * Translation updates.</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1615809600">- Update to version 0.99.32:
  * Fix crash regression of latest changes to restor excat vertical
    scrolling of text.
  * Remember last inserted special character and focus it at next
    special char insert time.
  * Improved restoring of exact vertical scroll position,
    (gh#giuspen/cherrytree#1151).
  * Fix iterated find dialog position issue.
  * Non rich text is to use the standard gtk undo/redo.
  * Fix iterated find/replace dialog disappearing after first
    button click.
  * Improved dialog to select an item in the list focusing the item
    that is currently in use.
  * Fixed issue with tree on right side restore tree width;
    splitted ct_main_win.cc, (gh#giuspen/cherrytree#1534).
  * Updated ct_node_no_icon.svg.
  * Close image resize dialog when pressing enter; dialog.cc split,
    (gh#giuspen/cherrytree#1547).
  * More node icons (gh#giuspen/cherrytree#1514).
  * Fix copy as plain text not working in table cell,
    (gh#giuspen/cherrytree#1528).
  * Cycle cherries colors in nodes levels rather than use the
    latest level for all exceeding number of colors,
    (gh#giuspen/cherrytree#692).
  * Added support for language 'elixir',
    (gh#giuspen/cherrytree#1541).
  * Update README.md, (gh#giuspen/cherrytree#1536).</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1616932800">- Update to version 0.99.33+5:
  * Modified main menu, (gh#giuspen/cherrytree#1573).
  * Added automatic syntax highlighting for the Dart language,
    (gh#giuspen/cherrytree#1569).
  * Fix changing codebox width of codeboxes with width in
    percentage, (gh#giuspen/cherrytree#1556).
  * Correct the FSF's postal address, (gh#giuspen/cherrytree#1566).
  * Fix import from cherrytree file missing dialog asking for
    parent node, (gh#giuspen/cherrytree#1562).
  * Treat equally return key press and numeric keypad enter key
    press, (gh#giuspen/cherrytree#1547).
  * Translation updates.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1618574400">- Update to 0.99.35:
  * Fix issue in 0.99.34 H1/H2/H3/H4/H5/H6/small
    not working for certain locale.
  * Fix issue with bookmarks in tree right click menu.
  * Implementation of configurable h1,h2,h3,small + (now supported)
    h4,h5,h6.
  * Reorganised the main menu.
  * Fix undo/redo state machine vertical scrollbar position
    and cursor position.
  * Fix crash when importing text/html files with non ascii
    file name on windows.
  * Fix links to file/folder on windows with UNC path.
  * Detect system shutdown to save config .
  * Improved recognition of web link as you type in case of
    start with ({[, end with ,;.)}].
  * Fixed wheel click on file link (to open parent folder).
  * Fix zooming text/tree font not being properly enforced like
    preferences dialog does.
  * Enabled logging to config folder, max size 5MB.</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1621598400">- Update to version 0.99.37:
  * Fix crashing Glib::convert_with_fallback(),
    (gh#giuspen/cherrytree#1593).
  * Fix after undo, redo jumps to the top of the document,
    (gh#giuspen/cherrytree#1151).
  * Assigned keyboard shortcut to move table columns Left/Right:
    Ctrl+{ and Ctrl+}.
  * Assigned keyboard shortcut to move table rows Up/Down: Ctrl+[
    and Ctrl+], (gh#giuspen/cherrytree#1626).
  * Ctrl+Arrows in tables disconnected from cells navigation,
    Ctrl+( and Ctrl+) to navigate Up/Down; Tab and Shift+Tab for
    navigate Right/Left, (gh#giuspen/cherrytree#194).
  * Help--Open Preferences Directory moved under File--Preferences.
  * Fix content in the table can be modified while the node is read
    only, (gh#giuspen/cherrytree#1674).
  * Preferences file export complete.
  * Adding preferences file import/export.
  * ct_menu_actions.cc just splitted too long lines.
  * Added dialog listing all available symbols auto replacements,
    (gh#giuspen/cherrytree#1659).
  * Preserve print page setup settings,
    (gh#giuspen/cherrytree#1664).
  * Fix URL detection doesn't recognize TAB as a delimiter,
    (gh#giuspen/cherrytree#1654).
  * Added configurable option to show the full path in the node
    name header, (gh#giuspen/cherrytree#1399).
  * Preferences dialog language selection explicit label
    'System Default' in place of '-'.
  * Fixed import of text files with extension not .txt on linux,
    (gh#giuspen/cherrytree#1656).
  * Reinstating Gtk::FileFilter::add_mime_type for importing text
    files, (gh#giuspen/cherrytree#1656).
  * Configurability of log enable/disable + directory in
    preferences dialog, tab miscellaneous,
    (gh#giuspen/cherrytree#1614).
  * Preferences dialog, custom backup directory simplified using
    Gtk::FileChooserButton.
  * Configurability of log enable/disable + directory,
    (gh#giuspen/cherrytree#1614).
  * Spell check enabled also for plain text,
    (gh#giuspen/cherrytree#1651).
  * Fix [gtk] [critical] gtk_widget_set_visible: assertion
    'GTK_IS_WIDGET (widget)' failed after,
    (gh#giuspen/cherrytree#1643).
  * Move config.cfg.tmp to config.cfg if not shutting down,
    (gh#giuspen/cherrytree#1614).
  * Added added configurable option to have bookmarks under
    dedicated menu in top menu bar, (gh#giuspen/cherrytree#1643).
  * New configurable scalable tags allow partial
    bold/italic/underline when not on by default,
    (gh#giuspen/cherrytree#1633).
  * Fix SHIFT+ENTER Able to Modify Locked Notes with Lists,
    (gh#giuspen/cherrytree#1640).
  * Translation updates.
- Changes from version 0.99.36:
  * Fix segfault on startup when configured to start on systray,
    (gh#giuspen/cherrytree#1610).
  * Translation updates.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1625745600">- Update to version 0.99.38:
  * Fix crash visiting node with a corrupted/invalid utf-8 character.
  * Fix crash when trying to insert image from file with format not
    supported from Glib such as .webp.
  * Fix unwanted characters found after copy/paste.
  * Fix status icon missing / bad rendered in tray.
  * Fixed tree node visibility issue when starting minimised
    on system tray.
  * Fix link markdown paste broken link.
  * Fix issues with spell check enabled and no languages available.
  * Improved web link recognition.</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1628510400">- Update to version 0.99.40:
  * Just renaming/polishing code of preferences dialog, tab fonts.
  * Fixed blacklist of action that cannot be part of the
    configurable toolbar; removed duplicated exec code action.
  * Translation updates.
- Changes from version 0.99.39:
  * When system tray and start hidden on system tray are enabled,
    load document only after the user click the systray icon to
    show cherrytree, (gh#giuspen/cherrytree#1751).
  * Fix codebox plain text wrongly using code font instead of plain
    text font.
  * Fix TODO lists not working in table cells,
    (gh#giuspen/cherrytree#194).
  * Fix File links in exported PDF do not work when path isn't
    relative, (gh#giuspen/cherrytree#1749).
  * Fixed 'Menu element icons are not always visible',
    (gh#giuspen/cherrytree#1410).
  * Fixed unit test breoken on windows with new utf-8 characters in
    filepath.
  * Unit tests data file use non utf-8 (cyrillic) characters for
    the paths.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1634904000">- Update to version 0.99.42:
  * Unified search in nodes name+tags and search in nodes content.
  * Fixed search in multiple nodes with the option first from
    selection/first in all range.
  * Fixed issue with password protected data extraction on windows
    and non ascii paths.
  * Link to node insert/edit dialog, added search for anchor
    name in the tree.
  * Implemented node property to exclude node and/or
    subnodes from search.
  * Applying a colour to foreground/background of text
    to use default gtk3 palette.
  * Added in preferenced dialog, tab theme, possibility
    to choose 2 new icon themes.
  * Added option to hide the status bar.
  * Added configurability of selected node's background/foreground
    colour in the tree.
  * Tree explorer added view option to show lines connecting
    the nodes parent-children.
  * Added syntax highlighting for AutoHotkey.
  * Added in preferences dialog, tab fonts, buttons to reset the
    fonts to default values.
  * At F8/current day node do not visit year/month if already
    existing, only day.
  * Support for portable mode in non-windows os looking for
    config/config.cfg beside cherrytree binary executable.
  * Tree sorting menu items: moved siblings only sorting first
    and after separator sorting whole tree.
  * Added experimantal option menubar_in_titlebar that can be
    activated in config.cfg, but off by default.
  * Added flip image buttons to image properties dialog.
  * Rich text tag monospace: added configurability of the
    foreground colour.
  * Fix incorrect insertion from plain text clipboard of
    link with pipe char.
  * Fix apply link to image via toolbar button rather than
    right click.
  * Fix after unmaximise main window, close, reopen -&gt; still
    maximised.
  * Fix fullscreen expands the width of tree explorer rather
    than the editing frame when tree on the right.
  * Fix segfault/crash from exporting imported markdown file
    with a table.
  * Fix todo lists in ubuntu 18.04 not cycling through
    available mark choices.
  * Fix print/export to pdf of table columns widths.
  * Print/export to pdf of scalable tags (h1..h6,small) and
    monospace use configured properties.
  * Node name header font size/family to follow the tree font.
  * Improved table sorting to use not only first column.
  * Improved import from markdown of a table with or without
    pre/post text.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1643716800">- Update to version 0.99.45+10:
  * added language Arabic
  * fixed time created/modified filter on searches for node name and tags
  * just ninja build debug print
  * added strip trailing spaces action to rich text right click menu
  * minor improvement to previous commit
  * fixed copy fromm codebox and pasting to rich text unwanted additional characters</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1647950400">- Update to version 0.99.46+6:
  * Fixed time created/modified filter on searches for node name and tags.
  * Changed default keyboard shortcuts using Ctrl+Period to Ctrl+Backslash
    for clash with latest linux desktops.
  * Fixed restore window position on Windows and dual screen.
  * Added strip trailing spaces action to rich text right click menu.
  * Fixed issue restoring hpaned tree/text position with tree on the right.
  * Added command line option to pass the password to open an encrypted document.</changelog>
  <changelog author="info@paolostivanin.com" date="1650542400">- Update to version 0.99.47+2:
  * Added support for latex math equations.
  * Added copy/paste of tree nodes and subnodes between multiple opened files.
  * Restored support for drag and drop of text selection.
    Now rich text content is preserved.
  * Added syntax highlighting for HCL.
  * Fixed issue at reset toolbar in preferences dialog when menubar in titlebar.
  * Added command line option (-S/--secondary_session) to run in isolation
    from a possibly already running main instance.
  * Updated flatpak script.</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1656504000">- Update to version 0.99.48:
  * Added support for right to left languages in export to html and
    pdf (gh#giuspen/cherrytree#2044, gh#giuspen/cherrytree#1668
    and gh#giuspen/cherrytree# #698).
  * In order to support the right to left languages in export to
    html, the resulting html text lines are no longer LINE&lt;br/&gt; but
    &lt;p&gt;LINE&lt;/p&gt;.
  * Fixed in export to pdf the link to node+anchor with non ascii
    anchor name.
  * Improved detection of missing executables required for
    rendering LatexBoxes. These dependencies are no longer
    mandatory (gh#giuspen/cherrytree#2033).
  * Added help to the user to show again a hidden menubar
    (gh#giuspen/cherrytree#1927 and gh#giuspen/cherrytree#2054).
  * Pressing Tab on the very latest table cell now adds a new table
    line and moves to its first cell.
  * Fixed issue with relative links to files and folders and
    documents moved between linux and windows.
  * In export to html and txt multiple files, now appending the
    node id to the file names to support multiple nodes with the
    same name.
  * Added syntax highlight support for solidity
    (gh#giuspen/cherrytree#2030).
  * After issues with the domain giuspen.com, the domain changed to
    giuspen.net and giuspen.com will eventually go.</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1663243200">- Update to version 0.99.49+3:
  * Legacy_canonicalize_filename: manage empty filename,
    (gh#giuspen/cherrytree#2118)
  * added command line option '--anchor AnchorName' that in
    addition to existing '--node NodeName' allows to open a
    document focusing an anchor in a node.
  * Changed non configurable keyboard shortcuts for codebox width
    and table column width to use parenthesis open instead of
    backslash, (gh#giuspen/cherrytree#2113).
  * Fixed crash on double exit from systray icon right click menu,
    (gh#giuspen/cherrytree#2114).
  * Added keyboard shortcuts to toolbar tooltips,
    (gh#giuspen/cherrytree#2106).
  * Fixed export to HTML crash, (gh#giuspen/cherrytree#2109).
  * Force turning off portal usage since it does not work on all
    distros, (gh#giuspen/cherrytree#2111).
  * Improved dialog confirmation before executing the code.
  * Additonal changes for core22, (gh#giuspen/cherrytree#2110).
  * Allow to disable the dialog asking for confirmation before
    executing the code.
  * Fixed bulleted list unindent (Shift+Tab) crash,
    (gh#giuspen/cherrytree#2103).
  * Add home plug, (gh#giuspen/cherrytree#2101 and
    gh#giuspen/cherrytree#2102).
  * Linux menu launcher run cherrytree in a new instance,
    (gh#giuspen/cherrytree#2077).
  * Fixed crash on print/export as pdf of a sequence of characters
    without spaces longer that the page width, such as a very long
    URL, (gh#giuspen/cherrytree#2045).
  * Fixed wrongly entering column mode when using keyboard
    shortcuts with &lt;Ctrl&gt;&lt;Alt&gt; such as insert codebox,
    (gh#giuspen/cherrytree#2075).
  * Added syntax highlighting support for GDScript.
  * Fixed tooltip and cursor not reset after hovering link and then
    navigating to non rich text node.
  * Support for accent insensitive search - added letters with
    subordinate dots, (gh#giuspen/cherrytree#1981).
  * Translation updates.
- Fix duplicate file warnings, add fdupes build requires and macro.
- Developer advised fixed cross-site scripting (XSS) vulnerability
  that allows attackers to execute arbitrary web scripts or HTML
  via a crafted payload injected into the Name text field when
  creating a node, (#boo1202513, gh#giuspen/cherrytree#2099 and
  CVE-2022-35133).</changelog>
</package>
<package pkgid="b00522b9f532c15a66b75096b25a4a8e59047defef14fd06ca563640cccf5583" name="cherrytree" arch="x86_64">
  <version epoch="0" ver="0.99.49+3" rel="bp154.2.3.2"/>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1606824000">- Update _service:
  + Change to @PARENT_TAG@+@TAG_OFFSET@ version scheme comonly used
    by the GNOME Team (with +0 being stripped when detected).</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1607515200">- Update to version 0.99.25:
  * Fixed unit test.
  * Icon theme update, (gh#giuspen/cherrytree#1408).
  * Debugging too slow large tables...
  * Added missing tooltips on the bookmarks handle dialog,
    (gh#giuspen/cherrytree#1403).
  * Fix spell-check language selection from right click menu was
    not saved to preferences.
  * Fix spell-check language selection from poreferences dialog not
    working (but ok from right click menu),
    (gh#giuspen/cherrytree#1400).
  * Fix TOC generation when existing anchor but wrong name,
    (gh#giuspen/cherrytree#1382).
  * Allow to override build date with SOURCE_DATE_EPOCH,
    (gh#giuspen/cherrytree#1401).
  * Improved command line switch --new-window,
    (gh#giuspen/cherrytree#1339).
  * Export to plain text do not alter node name case and prefix
    with a # per node level, (gh#giuspen/cherrytree#1385).
  * Fix the cherrytree shebang, (gh#giuspen/cherrytree#1396).
  * Translation updates.</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1608552000">- Update to version 0.99.26+2:
  * Fix select text with keyboard not working,
    (gh#giuspen/cherrytree#1441).
  * Fix crash when trying to paste invalid image in clipboard,
    (gh#giuspen/cherrytree#1440).
  * Fix open folder link not working when non ASCII path,
    (gh#giuspen/cherrytree#1423).
  * Fix recent documents list does't show undescores,
    (gh#giuspen/cherrytree#1435).
  * Keyboard shortcut to delete a node becomes Ctrl+Delete since
    this action now works also with focus on the text/while editing
    text, (gh#giuspen/cherrytree#1412).
  * Icon theme fixes/improvements, (gh#giuspen/cherrytree#1426,
    gh#giuspen/cherrytree#1414).
  * Fix find function adds empty lines to blank nodes,
    (gh#giuspen/cherrytree#1428).
  * Removed code duplications for open file and folder link,
    (gh#giuspen/cherrytree#1423).
  * Fix crash trying to open a bookmarked node that was deleted,
    (gh#giuspen/cherrytree#1430).
  * Fix wrongly detecting being run from the sorces directory build
    folder, (gh#giuspen/cherrytree#1422).
  * Fix non working keyboard shorcuts Alt+Left/Right to go to
    previous/next visited nodes, (gh#giuspen/cherrytree#1412).
  * Fix tree drag n drop freezing issue,
    (gh#giuspen/cherrytree#1377).
  * Fix table keyboard shortcut Ctrl+comma (add row) and
    Ctrl+Alt+comma (delete row), (gh#giuspen/cherrytree#1417).
  * When (re)generating TOC do not remove anchors created from the
    user, (gh#giuspen/cherrytree#1382).
  * Translation updates.</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1609070400">- Update to version 0.99.27+13:
  * Fix using fmt always unbundled from spdlog,
    (gh#giuspen/cherrytree#1458).
  * Using fmt always unbundled from spdlog,
    (gh#giuspen/cherrytree#1458).
  * Fix time filter for find in nodes names and tags,
    (gh#giuspen/cherrytree#1453).
  * Fix color for selected item in tree not consistent with
    selected item in menu, (gh#giuspen/cherrytree#1456).
  * Do not bundle spdlog but use as external library,
    (gh#giuspen/cherrytree#1199 and gh#giuspen/cherrytree#1433).
  * Fix failed zim import, (gh#giuspen/cherrytree#1273).
  * Changed GPG signature to detached,
    (gh#giuspen/cherrytree#1433).
  * Icon theme new save and other improvements.
  * More GCC11 fixes. (gh#giuspen/cherrytree#1450).
  * Translation updates.
- Add pkgconfig(spdlog) and pkgconfig(fmt) to build requires
  since no longer bundled.</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1609675200">- Update to version 0.99.28:
  * Improved sanitisation from bad characters at xml parse time,
    (gh#giuspen/cherrytree#1465).
  * Fix config.cfg re-created when symlinked,
    (gh#giuspen/cherrytree#1464).
  * Found better workaround for visualisation glitches,
    (gh#giuspen/cherrytree#1416, gh#giuspen/cherrytree#1427,
    gh#giuspen/cherrytree#1446 and gh#giuspen/cherrytree#1447).
  * Fix regression speeding up tables.
  * Support for sqlite document generated with old version of
    cherrytree, alter only at write time.
  * Isolating and trying to find alternative to
    WORKAROUND_ANCHORED_TEXT_VISUAL_GLITCHES.
  * Working on tables poor performance.</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1610193600">- Update to version 0.99.29:
  * Fix unable to open sqlite document created with old document
    version, (gh#giuspen/cherrytree#1471).
  * Add meta modifier shortcut key support,
    (gh#giuspen/cherrytree#1467).</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1612094400">- Update to version 0.99.30+7:
  * Fixed misleading command line argument export to pdf name - the
    user is expected to pass a directory path, not a file path.
  * Updated tests/googletest to current master HEAD to get rid of
    cmake warnings.
  * Replaced few Gio::File with g_file because of unit tests
    issues.
  * Moved a couple of types to proper header and fixed a unit test.
  * Insert link dialog to remember/repropose last selection,
    (gh#giuspen/cherrytree#1413).
  * Fix export to pdf crash.
  * Improved language selection in preferences dialog,
    (gh#giuspen/cherrytree#1496).
  * Moved top menu items 'Edit'-&gt;'Preferences' and 'Tree'-&gt;'Tree
    Info' to 'File' menu, (gh#giuspen/cherrytree#1497).
  * Cmake option to not automatically run the unit tests
  - DAUTO_RUN_TESTING='', (gh#giuspen/cherrytree#1433).
  * Versioning 48px variant of the icons, not currenlty in use,
  (gh#giuspen/cherrytree#1451).
  * New ct_code.svg, (gh#giuspen/cherrytree#1451).
  * Fix when creating new node/subnode not proposing syntax
    highlighting of selected node, (gh#giuspen/cherrytree#1481).
  * Update README.md - Added build description,
    (gh#giuspen/cherrytree#1488).
  * Fix Table of Contents not saving, (gh#giuspen/cherrytree#1484).
  * Fix crash when importing CSV file,
    (gh#giuspen/cherrytree#1476).</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1614340800">- Update to version 0.99.31+1:
  * Fix for building with ninja/cmake generator for ninja
    (-GNinja).
  * Amsys2 script to prepare standalone folder added user-style.xml
    required for user custom styles(themes).
  * Added few more icons as selectable for custom node icon,
  (gh#giuspen/cherrytree#1514).
  * Preferences dialog menu languages added flags,
    (gh#giuspen/cherrytree#1511)
  * Fixed import from keepnote missing images,
    (gh#giuspen/cherrytree#1516).
  * Added button to reset the two user style schemes to the default
    palettes.
  * Fix cmake install target, (gh#giuspen/cherrytree#1521).
  * Two user style schemes, one with a light default and one with
    a dark default.
  * Reworked pref dialog tab themes to make room for second user
    style scheme.
  * Independent style scheme for plain text and code.
  * Working on user theme editor, (gh#giuspen/cherrytree#1362).
  * Split pref dlg source file for upcoming work on theme editor.
  * Removed default global shortcut Ctrl+Delete to delete tree node
    because overrides text editor standard,
    (gh#giuspen/cherrytree#1513).
  * Insert special symbols chenged from submenu items to dialog,
    (gh#giuspen/cherrytree#1503).
  * Renamed filesystem path methods .string_native() and
    .string_unix().
  * New unit test for export to html.
  * New unit test for export to pdf.
    + unit test for export to txt; unit tests now in 3 binaries
    'run_tests_no_x', 'run_tests_with_x_1', 'run_tests_with_x_2'.
  * Implemented 'format clone' at cursor which can be applied with
    existing 'format latest', (gh#giuspen/cherrytree#600).
  * Translation updates.</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1615809600">- Update to version 0.99.32:
  * Fix crash regression of latest changes to restor excat vertical
    scrolling of text.
  * Remember last inserted special character and focus it at next
    special char insert time.
  * Improved restoring of exact vertical scroll position,
    (gh#giuspen/cherrytree#1151).
  * Fix iterated find dialog position issue.
  * Non rich text is to use the standard gtk undo/redo.
  * Fix iterated find/replace dialog disappearing after first
    button click.
  * Improved dialog to select an item in the list focusing the item
    that is currently in use.
  * Fixed issue with tree on right side restore tree width;
    splitted ct_main_win.cc, (gh#giuspen/cherrytree#1534).
  * Updated ct_node_no_icon.svg.
  * Close image resize dialog when pressing enter; dialog.cc split,
    (gh#giuspen/cherrytree#1547).
  * More node icons (gh#giuspen/cherrytree#1514).
  * Fix copy as plain text not working in table cell,
    (gh#giuspen/cherrytree#1528).
  * Cycle cherries colors in nodes levels rather than use the
    latest level for all exceeding number of colors,
    (gh#giuspen/cherrytree#692).
  * Added support for language 'elixir',
    (gh#giuspen/cherrytree#1541).
  * Update README.md, (gh#giuspen/cherrytree#1536).</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1616932800">- Update to version 0.99.33+5:
  * Modified main menu, (gh#giuspen/cherrytree#1573).
  * Added automatic syntax highlighting for the Dart language,
    (gh#giuspen/cherrytree#1569).
  * Fix changing codebox width of codeboxes with width in
    percentage, (gh#giuspen/cherrytree#1556).
  * Correct the FSF's postal address, (gh#giuspen/cherrytree#1566).
  * Fix import from cherrytree file missing dialog asking for
    parent node, (gh#giuspen/cherrytree#1562).
  * Treat equally return key press and numeric keypad enter key
    press, (gh#giuspen/cherrytree#1547).
  * Translation updates.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1618574400">- Update to 0.99.35:
  * Fix issue in 0.99.34 H1/H2/H3/H4/H5/H6/small
    not working for certain locale.
  * Fix issue with bookmarks in tree right click menu.
  * Implementation of configurable h1,h2,h3,small + (now supported)
    h4,h5,h6.
  * Reorganised the main menu.
  * Fix undo/redo state machine vertical scrollbar position
    and cursor position.
  * Fix crash when importing text/html files with non ascii
    file name on windows.
  * Fix links to file/folder on windows with UNC path.
  * Detect system shutdown to save config .
  * Improved recognition of web link as you type in case of
    start with ({[, end with ,;.)}].
  * Fixed wheel click on file link (to open parent folder).
  * Fix zooming text/tree font not being properly enforced like
    preferences dialog does.
  * Enabled logging to config folder, max size 5MB.</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1621598400">- Update to version 0.99.37:
  * Fix crashing Glib::convert_with_fallback(),
    (gh#giuspen/cherrytree#1593).
  * Fix after undo, redo jumps to the top of the document,
    (gh#giuspen/cherrytree#1151).
  * Assigned keyboard shortcut to move table columns Left/Right:
    Ctrl+{ and Ctrl+}.
  * Assigned keyboard shortcut to move table rows Up/Down: Ctrl+[
    and Ctrl+], (gh#giuspen/cherrytree#1626).
  * Ctrl+Arrows in tables disconnected from cells navigation,
    Ctrl+( and Ctrl+) to navigate Up/Down; Tab and Shift+Tab for
    navigate Right/Left, (gh#giuspen/cherrytree#194).
  * Help--Open Preferences Directory moved under File--Preferences.
  * Fix content in the table can be modified while the node is read
    only, (gh#giuspen/cherrytree#1674).
  * Preferences file export complete.
  * Adding preferences file import/export.
  * ct_menu_actions.cc just splitted too long lines.
  * Added dialog listing all available symbols auto replacements,
    (gh#giuspen/cherrytree#1659).
  * Preserve print page setup settings,
    (gh#giuspen/cherrytree#1664).
  * Fix URL detection doesn't recognize TAB as a delimiter,
    (gh#giuspen/cherrytree#1654).
  * Added configurable option to show the full path in the node
    name header, (gh#giuspen/cherrytree#1399).
  * Preferences dialog language selection explicit label
    'System Default' in place of '-'.
  * Fixed import of text files with extension not .txt on linux,
    (gh#giuspen/cherrytree#1656).
  * Reinstating Gtk::FileFilter::add_mime_type for importing text
    files, (gh#giuspen/cherrytree#1656).
  * Configurability of log enable/disable + directory in
    preferences dialog, tab miscellaneous,
    (gh#giuspen/cherrytree#1614).
  * Preferences dialog, custom backup directory simplified using
    Gtk::FileChooserButton.
  * Configurability of log enable/disable + directory,
    (gh#giuspen/cherrytree#1614).
  * Spell check enabled also for plain text,
    (gh#giuspen/cherrytree#1651).
  * Fix [gtk] [critical] gtk_widget_set_visible: assertion
    'GTK_IS_WIDGET (widget)' failed after,
    (gh#giuspen/cherrytree#1643).
  * Move config.cfg.tmp to config.cfg if not shutting down,
    (gh#giuspen/cherrytree#1614).
  * Added added configurable option to have bookmarks under
    dedicated menu in top menu bar, (gh#giuspen/cherrytree#1643).
  * New configurable scalable tags allow partial
    bold/italic/underline when not on by default,
    (gh#giuspen/cherrytree#1633).
  * Fix SHIFT+ENTER Able to Modify Locked Notes with Lists,
    (gh#giuspen/cherrytree#1640).
  * Translation updates.
- Changes from version 0.99.36:
  * Fix segfault on startup when configured to start on systray,
    (gh#giuspen/cherrytree#1610).
  * Translation updates.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1625745600">- Update to version 0.99.38:
  * Fix crash visiting node with a corrupted/invalid utf-8 character.
  * Fix crash when trying to insert image from file with format not
    supported from Glib such as .webp.
  * Fix unwanted characters found after copy/paste.
  * Fix status icon missing / bad rendered in tray.
  * Fixed tree node visibility issue when starting minimised
    on system tray.
  * Fix link markdown paste broken link.
  * Fix issues with spell check enabled and no languages available.
  * Improved web link recognition.</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1628510400">- Update to version 0.99.40:
  * Just renaming/polishing code of preferences dialog, tab fonts.
  * Fixed blacklist of action that cannot be part of the
    configurable toolbar; removed duplicated exec code action.
  * Translation updates.
- Changes from version 0.99.39:
  * When system tray and start hidden on system tray are enabled,
    load document only after the user click the systray icon to
    show cherrytree, (gh#giuspen/cherrytree#1751).
  * Fix codebox plain text wrongly using code font instead of plain
    text font.
  * Fix TODO lists not working in table cells,
    (gh#giuspen/cherrytree#194).
  * Fix File links in exported PDF do not work when path isn't
    relative, (gh#giuspen/cherrytree#1749).
  * Fixed 'Menu element icons are not always visible',
    (gh#giuspen/cherrytree#1410).
  * Fixed unit test breoken on windows with new utf-8 characters in
    filepath.
  * Unit tests data file use non utf-8 (cyrillic) characters for
    the paths.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1634904000">- Update to version 0.99.42:
  * Unified search in nodes name+tags and search in nodes content.
  * Fixed search in multiple nodes with the option first from
    selection/first in all range.
  * Fixed issue with password protected data extraction on windows
    and non ascii paths.
  * Link to node insert/edit dialog, added search for anchor
    name in the tree.
  * Implemented node property to exclude node and/or
    subnodes from search.
  * Applying a colour to foreground/background of text
    to use default gtk3 palette.
  * Added in preferenced dialog, tab theme, possibility
    to choose 2 new icon themes.
  * Added option to hide the status bar.
  * Added configurability of selected node's background/foreground
    colour in the tree.
  * Tree explorer added view option to show lines connecting
    the nodes parent-children.
  * Added syntax highlighting for AutoHotkey.
  * Added in preferences dialog, tab fonts, buttons to reset the
    fonts to default values.
  * At F8/current day node do not visit year/month if already
    existing, only day.
  * Support for portable mode in non-windows os looking for
    config/config.cfg beside cherrytree binary executable.
  * Tree sorting menu items: moved siblings only sorting first
    and after separator sorting whole tree.
  * Added experimantal option menubar_in_titlebar that can be
    activated in config.cfg, but off by default.
  * Added flip image buttons to image properties dialog.
  * Rich text tag monospace: added configurability of the
    foreground colour.
  * Fix incorrect insertion from plain text clipboard of
    link with pipe char.
  * Fix apply link to image via toolbar button rather than
    right click.
  * Fix after unmaximise main window, close, reopen -&gt; still
    maximised.
  * Fix fullscreen expands the width of tree explorer rather
    than the editing frame when tree on the right.
  * Fix segfault/crash from exporting imported markdown file
    with a table.
  * Fix todo lists in ubuntu 18.04 not cycling through
    available mark choices.
  * Fix print/export to pdf of table columns widths.
  * Print/export to pdf of scalable tags (h1..h6,small) and
    monospace use configured properties.
  * Node name header font size/family to follow the tree font.
  * Improved table sorting to use not only first column.
  * Improved import from markdown of a table with or without
    pre/post text.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1643716800">- Update to version 0.99.45+10:
  * added language Arabic
  * fixed time created/modified filter on searches for node name and tags
  * just ninja build debug print
  * added strip trailing spaces action to rich text right click menu
  * minor improvement to previous commit
  * fixed copy fromm codebox and pasting to rich text unwanted additional characters</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1647950400">- Update to version 0.99.46+6:
  * Fixed time created/modified filter on searches for node name and tags.
  * Changed default keyboard shortcuts using Ctrl+Period to Ctrl+Backslash
    for clash with latest linux desktops.
  * Fixed restore window position on Windows and dual screen.
  * Added strip trailing spaces action to rich text right click menu.
  * Fixed issue restoring hpaned tree/text position with tree on the right.
  * Added command line option to pass the password to open an encrypted document.</changelog>
  <changelog author="info@paolostivanin.com" date="1650542400">- Update to version 0.99.47+2:
  * Added support for latex math equations.
  * Added copy/paste of tree nodes and subnodes between multiple opened files.
  * Restored support for drag and drop of text selection.
    Now rich text content is preserved.
  * Added syntax highlighting for HCL.
  * Fixed issue at reset toolbar in preferences dialog when menubar in titlebar.
  * Added command line option (-S/--secondary_session) to run in isolation
    from a possibly already running main instance.
  * Updated flatpak script.</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1656504000">- Update to version 0.99.48:
  * Added support for right to left languages in export to html and
    pdf (gh#giuspen/cherrytree#2044, gh#giuspen/cherrytree#1668
    and gh#giuspen/cherrytree# #698).
  * In order to support the right to left languages in export to
    html, the resulting html text lines are no longer LINE&lt;br/&gt; but
    &lt;p&gt;LINE&lt;/p&gt;.
  * Fixed in export to pdf the link to node+anchor with non ascii
    anchor name.
  * Improved detection of missing executables required for
    rendering LatexBoxes. These dependencies are no longer
    mandatory (gh#giuspen/cherrytree#2033).
  * Added help to the user to show again a hidden menubar
    (gh#giuspen/cherrytree#1927 and gh#giuspen/cherrytree#2054).
  * Pressing Tab on the very latest table cell now adds a new table
    line and moves to its first cell.
  * Fixed issue with relative links to files and folders and
    documents moved between linux and windows.
  * In export to html and txt multiple files, now appending the
    node id to the file names to support multiple nodes with the
    same name.
  * Added syntax highlight support for solidity
    (gh#giuspen/cherrytree#2030).
  * After issues with the domain giuspen.com, the domain changed to
    giuspen.net and giuspen.com will eventually go.</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1663243200">- Update to version 0.99.49+3:
  * Legacy_canonicalize_filename: manage empty filename,
    (gh#giuspen/cherrytree#2118)
  * added command line option '--anchor AnchorName' that in
    addition to existing '--node NodeName' allows to open a
    document focusing an anchor in a node.
  * Changed non configurable keyboard shortcuts for codebox width
    and table column width to use parenthesis open instead of
    backslash, (gh#giuspen/cherrytree#2113).
  * Fixed crash on double exit from systray icon right click menu,
    (gh#giuspen/cherrytree#2114).
  * Added keyboard shortcuts to toolbar tooltips,
    (gh#giuspen/cherrytree#2106).
  * Fixed export to HTML crash, (gh#giuspen/cherrytree#2109).
  * Force turning off portal usage since it does not work on all
    distros, (gh#giuspen/cherrytree#2111).
  * Improved dialog confirmation before executing the code.
  * Additonal changes for core22, (gh#giuspen/cherrytree#2110).
  * Allow to disable the dialog asking for confirmation before
    executing the code.
  * Fixed bulleted list unindent (Shift+Tab) crash,
    (gh#giuspen/cherrytree#2103).
  * Add home plug, (gh#giuspen/cherrytree#2101 and
    gh#giuspen/cherrytree#2102).
  * Linux menu launcher run cherrytree in a new instance,
    (gh#giuspen/cherrytree#2077).
  * Fixed crash on print/export as pdf of a sequence of characters
    without spaces longer that the page width, such as a very long
    URL, (gh#giuspen/cherrytree#2045).
  * Fixed wrongly entering column mode when using keyboard
    shortcuts with &lt;Ctrl&gt;&lt;Alt&gt; such as insert codebox,
    (gh#giuspen/cherrytree#2075).
  * Added syntax highlighting support for GDScript.
  * Fixed tooltip and cursor not reset after hovering link and then
    navigating to non rich text node.
  * Support for accent insensitive search - added letters with
    subordinate dots, (gh#giuspen/cherrytree#1981).
  * Translation updates.
- Fix duplicate file warnings, add fdupes build requires and macro.
- Developer advised fixed cross-site scripting (XSS) vulnerability
  that allows attackers to execute arbitrary web scripts or HTML
  via a crafted payload injected into the Name text field when
  creating a node, (#boo1202513, gh#giuspen/cherrytree#2099 and
  CVE-2022-35133).</changelog>
</package>
<package pkgid="15f4c092519647bf3719af22747602118206daa2ff730169b64b58d49f33800b" name="cherrytree-lang" arch="noarch">
  <version epoch="0" ver="0.99.49+3" rel="bp154.2.3.2"/>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1606824000">- Update _service:
  + Change to @PARENT_TAG@+@TAG_OFFSET@ version scheme comonly used
    by the GNOME Team (with +0 being stripped when detected).</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1607515200">- Update to version 0.99.25:
  * Fixed unit test.
  * Icon theme update, (gh#giuspen/cherrytree#1408).
  * Debugging too slow large tables...
  * Added missing tooltips on the bookmarks handle dialog,
    (gh#giuspen/cherrytree#1403).
  * Fix spell-check language selection from right click menu was
    not saved to preferences.
  * Fix spell-check language selection from poreferences dialog not
    working (but ok from right click menu),
    (gh#giuspen/cherrytree#1400).
  * Fix TOC generation when existing anchor but wrong name,
    (gh#giuspen/cherrytree#1382).
  * Allow to override build date with SOURCE_DATE_EPOCH,
    (gh#giuspen/cherrytree#1401).
  * Improved command line switch --new-window,
    (gh#giuspen/cherrytree#1339).
  * Export to plain text do not alter node name case and prefix
    with a # per node level, (gh#giuspen/cherrytree#1385).
  * Fix the cherrytree shebang, (gh#giuspen/cherrytree#1396).
  * Translation updates.</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1608552000">- Update to version 0.99.26+2:
  * Fix select text with keyboard not working,
    (gh#giuspen/cherrytree#1441).
  * Fix crash when trying to paste invalid image in clipboard,
    (gh#giuspen/cherrytree#1440).
  * Fix open folder link not working when non ASCII path,
    (gh#giuspen/cherrytree#1423).
  * Fix recent documents list does't show undescores,
    (gh#giuspen/cherrytree#1435).
  * Keyboard shortcut to delete a node becomes Ctrl+Delete since
    this action now works also with focus on the text/while editing
    text, (gh#giuspen/cherrytree#1412).
  * Icon theme fixes/improvements, (gh#giuspen/cherrytree#1426,
    gh#giuspen/cherrytree#1414).
  * Fix find function adds empty lines to blank nodes,
    (gh#giuspen/cherrytree#1428).
  * Removed code duplications for open file and folder link,
    (gh#giuspen/cherrytree#1423).
  * Fix crash trying to open a bookmarked node that was deleted,
    (gh#giuspen/cherrytree#1430).
  * Fix wrongly detecting being run from the sorces directory build
    folder, (gh#giuspen/cherrytree#1422).
  * Fix non working keyboard shorcuts Alt+Left/Right to go to
    previous/next visited nodes, (gh#giuspen/cherrytree#1412).
  * Fix tree drag n drop freezing issue,
    (gh#giuspen/cherrytree#1377).
  * Fix table keyboard shortcut Ctrl+comma (add row) and
    Ctrl+Alt+comma (delete row), (gh#giuspen/cherrytree#1417).
  * When (re)generating TOC do not remove anchors created from the
    user, (gh#giuspen/cherrytree#1382).
  * Translation updates.</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1609070400">- Update to version 0.99.27+13:
  * Fix using fmt always unbundled from spdlog,
    (gh#giuspen/cherrytree#1458).
  * Using fmt always unbundled from spdlog,
    (gh#giuspen/cherrytree#1458).
  * Fix time filter for find in nodes names and tags,
    (gh#giuspen/cherrytree#1453).
  * Fix color for selected item in tree not consistent with
    selected item in menu, (gh#giuspen/cherrytree#1456).
  * Do not bundle spdlog but use as external library,
    (gh#giuspen/cherrytree#1199 and gh#giuspen/cherrytree#1433).
  * Fix failed zim import, (gh#giuspen/cherrytree#1273).
  * Changed GPG signature to detached,
    (gh#giuspen/cherrytree#1433).
  * Icon theme new save and other improvements.
  * More GCC11 fixes. (gh#giuspen/cherrytree#1450).
  * Translation updates.
- Add pkgconfig(spdlog) and pkgconfig(fmt) to build requires
  since no longer bundled.</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1609675200">- Update to version 0.99.28:
  * Improved sanitisation from bad characters at xml parse time,
    (gh#giuspen/cherrytree#1465).
  * Fix config.cfg re-created when symlinked,
    (gh#giuspen/cherrytree#1464).
  * Found better workaround for visualisation glitches,
    (gh#giuspen/cherrytree#1416, gh#giuspen/cherrytree#1427,
    gh#giuspen/cherrytree#1446 and gh#giuspen/cherrytree#1447).
  * Fix regression speeding up tables.
  * Support for sqlite document generated with old version of
    cherrytree, alter only at write time.
  * Isolating and trying to find alternative to
    WORKAROUND_ANCHORED_TEXT_VISUAL_GLITCHES.
  * Working on tables poor performance.</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1610193600">- Update to version 0.99.29:
  * Fix unable to open sqlite document created with old document
    version, (gh#giuspen/cherrytree#1471).
  * Add meta modifier shortcut key support,
    (gh#giuspen/cherrytree#1467).</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1612094400">- Update to version 0.99.30+7:
  * Fixed misleading command line argument export to pdf name - the
    user is expected to pass a directory path, not a file path.
  * Updated tests/googletest to current master HEAD to get rid of
    cmake warnings.
  * Replaced few Gio::File with g_file because of unit tests
    issues.
  * Moved a couple of types to proper header and fixed a unit test.
  * Insert link dialog to remember/repropose last selection,
    (gh#giuspen/cherrytree#1413).
  * Fix export to pdf crash.
  * Improved language selection in preferences dialog,
    (gh#giuspen/cherrytree#1496).
  * Moved top menu items 'Edit'-&gt;'Preferences' and 'Tree'-&gt;'Tree
    Info' to 'File' menu, (gh#giuspen/cherrytree#1497).
  * Cmake option to not automatically run the unit tests
  - DAUTO_RUN_TESTING='', (gh#giuspen/cherrytree#1433).
  * Versioning 48px variant of the icons, not currenlty in use,
  (gh#giuspen/cherrytree#1451).
  * New ct_code.svg, (gh#giuspen/cherrytree#1451).
  * Fix when creating new node/subnode not proposing syntax
    highlighting of selected node, (gh#giuspen/cherrytree#1481).
  * Update README.md - Added build description,
    (gh#giuspen/cherrytree#1488).
  * Fix Table of Contents not saving, (gh#giuspen/cherrytree#1484).
  * Fix crash when importing CSV file,
    (gh#giuspen/cherrytree#1476).</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1614340800">- Update to version 0.99.31+1:
  * Fix for building with ninja/cmake generator for ninja
    (-GNinja).
  * Amsys2 script to prepare standalone folder added user-style.xml
    required for user custom styles(themes).
  * Added few more icons as selectable for custom node icon,
  (gh#giuspen/cherrytree#1514).
  * Preferences dialog menu languages added flags,
    (gh#giuspen/cherrytree#1511)
  * Fixed import from keepnote missing images,
    (gh#giuspen/cherrytree#1516).
  * Added button to reset the two user style schemes to the default
    palettes.
  * Fix cmake install target, (gh#giuspen/cherrytree#1521).
  * Two user style schemes, one with a light default and one with
    a dark default.
  * Reworked pref dialog tab themes to make room for second user
    style scheme.
  * Independent style scheme for plain text and code.
  * Working on user theme editor, (gh#giuspen/cherrytree#1362).
  * Split pref dlg source file for upcoming work on theme editor.
  * Removed default global shortcut Ctrl+Delete to delete tree node
    because overrides text editor standard,
    (gh#giuspen/cherrytree#1513).
  * Insert special symbols chenged from submenu items to dialog,
    (gh#giuspen/cherrytree#1503).
  * Renamed filesystem path methods .string_native() and
    .string_unix().
  * New unit test for export to html.
  * New unit test for export to pdf.
    + unit test for export to txt; unit tests now in 3 binaries
    'run_tests_no_x', 'run_tests_with_x_1', 'run_tests_with_x_2'.
  * Implemented 'format clone' at cursor which can be applied with
    existing 'format latest', (gh#giuspen/cherrytree#600).
  * Translation updates.</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1615809600">- Update to version 0.99.32:
  * Fix crash regression of latest changes to restor excat vertical
    scrolling of text.
  * Remember last inserted special character and focus it at next
    special char insert time.
  * Improved restoring of exact vertical scroll position,
    (gh#giuspen/cherrytree#1151).
  * Fix iterated find dialog position issue.
  * Non rich text is to use the standard gtk undo/redo.
  * Fix iterated find/replace dialog disappearing after first
    button click.
  * Improved dialog to select an item in the list focusing the item
    that is currently in use.
  * Fixed issue with tree on right side restore tree width;
    splitted ct_main_win.cc, (gh#giuspen/cherrytree#1534).
  * Updated ct_node_no_icon.svg.
  * Close image resize dialog when pressing enter; dialog.cc split,
    (gh#giuspen/cherrytree#1547).
  * More node icons (gh#giuspen/cherrytree#1514).
  * Fix copy as plain text not working in table cell,
    (gh#giuspen/cherrytree#1528).
  * Cycle cherries colors in nodes levels rather than use the
    latest level for all exceeding number of colors,
    (gh#giuspen/cherrytree#692).
  * Added support for language 'elixir',
    (gh#giuspen/cherrytree#1541).
  * Update README.md, (gh#giuspen/cherrytree#1536).</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1616932800">- Update to version 0.99.33+5:
  * Modified main menu, (gh#giuspen/cherrytree#1573).
  * Added automatic syntax highlighting for the Dart language,
    (gh#giuspen/cherrytree#1569).
  * Fix changing codebox width of codeboxes with width in
    percentage, (gh#giuspen/cherrytree#1556).
  * Correct the FSF's postal address, (gh#giuspen/cherrytree#1566).
  * Fix import from cherrytree file missing dialog asking for
    parent node, (gh#giuspen/cherrytree#1562).
  * Treat equally return key press and numeric keypad enter key
    press, (gh#giuspen/cherrytree#1547).
  * Translation updates.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1618574400">- Update to 0.99.35:
  * Fix issue in 0.99.34 H1/H2/H3/H4/H5/H6/small
    not working for certain locale.
  * Fix issue with bookmarks in tree right click menu.
  * Implementation of configurable h1,h2,h3,small + (now supported)
    h4,h5,h6.
  * Reorganised the main menu.
  * Fix undo/redo state machine vertical scrollbar position
    and cursor position.
  * Fix crash when importing text/html files with non ascii
    file name on windows.
  * Fix links to file/folder on windows with UNC path.
  * Detect system shutdown to save config .
  * Improved recognition of web link as you type in case of
    start with ({[, end with ,;.)}].
  * Fixed wheel click on file link (to open parent folder).
  * Fix zooming text/tree font not being properly enforced like
    preferences dialog does.
  * Enabled logging to config folder, max size 5MB.</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1621598400">- Update to version 0.99.37:
  * Fix crashing Glib::convert_with_fallback(),
    (gh#giuspen/cherrytree#1593).
  * Fix after undo, redo jumps to the top of the document,
    (gh#giuspen/cherrytree#1151).
  * Assigned keyboard shortcut to move table columns Left/Right:
    Ctrl+{ and Ctrl+}.
  * Assigned keyboard shortcut to move table rows Up/Down: Ctrl+[
    and Ctrl+], (gh#giuspen/cherrytree#1626).
  * Ctrl+Arrows in tables disconnected from cells navigation,
    Ctrl+( and Ctrl+) to navigate Up/Down; Tab and Shift+Tab for
    navigate Right/Left, (gh#giuspen/cherrytree#194).
  * Help--Open Preferences Directory moved under File--Preferences.
  * Fix content in the table can be modified while the node is read
    only, (gh#giuspen/cherrytree#1674).
  * Preferences file export complete.
  * Adding preferences file import/export.
  * ct_menu_actions.cc just splitted too long lines.
  * Added dialog listing all available symbols auto replacements,
    (gh#giuspen/cherrytree#1659).
  * Preserve print page setup settings,
    (gh#giuspen/cherrytree#1664).
  * Fix URL detection doesn't recognize TAB as a delimiter,
    (gh#giuspen/cherrytree#1654).
  * Added configurable option to show the full path in the node
    name header, (gh#giuspen/cherrytree#1399).
  * Preferences dialog language selection explicit label
    'System Default' in place of '-'.
  * Fixed import of text files with extension not .txt on linux,
    (gh#giuspen/cherrytree#1656).
  * Reinstating Gtk::FileFilter::add_mime_type for importing text
    files, (gh#giuspen/cherrytree#1656).
  * Configurability of log enable/disable + directory in
    preferences dialog, tab miscellaneous,
    (gh#giuspen/cherrytree#1614).
  * Preferences dialog, custom backup directory simplified using
    Gtk::FileChooserButton.
  * Configurability of log enable/disable + directory,
    (gh#giuspen/cherrytree#1614).
  * Spell check enabled also for plain text,
    (gh#giuspen/cherrytree#1651).
  * Fix [gtk] [critical] gtk_widget_set_visible: assertion
    'GTK_IS_WIDGET (widget)' failed after,
    (gh#giuspen/cherrytree#1643).
  * Move config.cfg.tmp to config.cfg if not shutting down,
    (gh#giuspen/cherrytree#1614).
  * Added added configurable option to have bookmarks under
    dedicated menu in top menu bar, (gh#giuspen/cherrytree#1643).
  * New configurable scalable tags allow partial
    bold/italic/underline when not on by default,
    (gh#giuspen/cherrytree#1633).
  * Fix SHIFT+ENTER Able to Modify Locked Notes with Lists,
    (gh#giuspen/cherrytree#1640).
  * Translation updates.
- Changes from version 0.99.36:
  * Fix segfault on startup when configured to start on systray,
    (gh#giuspen/cherrytree#1610).
  * Translation updates.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1625745600">- Update to version 0.99.38:
  * Fix crash visiting node with a corrupted/invalid utf-8 character.
  * Fix crash when trying to insert image from file with format not
    supported from Glib such as .webp.
  * Fix unwanted characters found after copy/paste.
  * Fix status icon missing / bad rendered in tray.
  * Fixed tree node visibility issue when starting minimised
    on system tray.
  * Fix link markdown paste broken link.
  * Fix issues with spell check enabled and no languages available.
  * Improved web link recognition.</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1628510400">- Update to version 0.99.40:
  * Just renaming/polishing code of preferences dialog, tab fonts.
  * Fixed blacklist of action that cannot be part of the
    configurable toolbar; removed duplicated exec code action.
  * Translation updates.
- Changes from version 0.99.39:
  * When system tray and start hidden on system tray are enabled,
    load document only after the user click the systray icon to
    show cherrytree, (gh#giuspen/cherrytree#1751).
  * Fix codebox plain text wrongly using code font instead of plain
    text font.
  * Fix TODO lists not working in table cells,
    (gh#giuspen/cherrytree#194).
  * Fix File links in exported PDF do not work when path isn't
    relative, (gh#giuspen/cherrytree#1749).
  * Fixed 'Menu element icons are not always visible',
    (gh#giuspen/cherrytree#1410).
  * Fixed unit test breoken on windows with new utf-8 characters in
    filepath.
  * Unit tests data file use non utf-8 (cyrillic) characters for
    the paths.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1634904000">- Update to version 0.99.42:
  * Unified search in nodes name+tags and search in nodes content.
  * Fixed search in multiple nodes with the option first from
    selection/first in all range.
  * Fixed issue with password protected data extraction on windows
    and non ascii paths.
  * Link to node insert/edit dialog, added search for anchor
    name in the tree.
  * Implemented node property to exclude node and/or
    subnodes from search.
  * Applying a colour to foreground/background of text
    to use default gtk3 palette.
  * Added in preferenced dialog, tab theme, possibility
    to choose 2 new icon themes.
  * Added option to hide the status bar.
  * Added configurability of selected node's background/foreground
    colour in the tree.
  * Tree explorer added view option to show lines connecting
    the nodes parent-children.
  * Added syntax highlighting for AutoHotkey.
  * Added in preferences dialog, tab fonts, buttons to reset the
    fonts to default values.
  * At F8/current day node do not visit year/month if already
    existing, only day.
  * Support for portable mode in non-windows os looking for
    config/config.cfg beside cherrytree binary executable.
  * Tree sorting menu items: moved siblings only sorting first
    and after separator sorting whole tree.
  * Added experimantal option menubar_in_titlebar that can be
    activated in config.cfg, but off by default.
  * Added flip image buttons to image properties dialog.
  * Rich text tag monospace: added configurability of the
    foreground colour.
  * Fix incorrect insertion from plain text clipboard of
    link with pipe char.
  * Fix apply link to image via toolbar button rather than
    right click.
  * Fix after unmaximise main window, close, reopen -&gt; still
    maximised.
  * Fix fullscreen expands the width of tree explorer rather
    than the editing frame when tree on the right.
  * Fix segfault/crash from exporting imported markdown file
    with a table.
  * Fix todo lists in ubuntu 18.04 not cycling through
    available mark choices.
  * Fix print/export to pdf of table columns widths.
  * Print/export to pdf of scalable tags (h1..h6,small) and
    monospace use configured properties.
  * Node name header font size/family to follow the tree font.
  * Improved table sorting to use not only first column.
  * Improved import from markdown of a table with or without
    pre/post text.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1643716800">- Update to version 0.99.45+10:
  * added language Arabic
  * fixed time created/modified filter on searches for node name and tags
  * just ninja build debug print
  * added strip trailing spaces action to rich text right click menu
  * minor improvement to previous commit
  * fixed copy fromm codebox and pasting to rich text unwanted additional characters</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1647950400">- Update to version 0.99.46+6:
  * Fixed time created/modified filter on searches for node name and tags.
  * Changed default keyboard shortcuts using Ctrl+Period to Ctrl+Backslash
    for clash with latest linux desktops.
  * Fixed restore window position on Windows and dual screen.
  * Added strip trailing spaces action to rich text right click menu.
  * Fixed issue restoring hpaned tree/text position with tree on the right.
  * Added command line option to pass the password to open an encrypted document.</changelog>
  <changelog author="info@paolostivanin.com" date="1650542400">- Update to version 0.99.47+2:
  * Added support for latex math equations.
  * Added copy/paste of tree nodes and subnodes between multiple opened files.
  * Restored support for drag and drop of text selection.
    Now rich text content is preserved.
  * Added syntax highlighting for HCL.
  * Fixed issue at reset toolbar in preferences dialog when menubar in titlebar.
  * Added command line option (-S/--secondary_session) to run in isolation
    from a possibly already running main instance.
  * Updated flatpak script.</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1656504000">- Update to version 0.99.48:
  * Added support for right to left languages in export to html and
    pdf (gh#giuspen/cherrytree#2044, gh#giuspen/cherrytree#1668
    and gh#giuspen/cherrytree# #698).
  * In order to support the right to left languages in export to
    html, the resulting html text lines are no longer LINE&lt;br/&gt; but
    &lt;p&gt;LINE&lt;/p&gt;.
  * Fixed in export to pdf the link to node+anchor with non ascii
    anchor name.
  * Improved detection of missing executables required for
    rendering LatexBoxes. These dependencies are no longer
    mandatory (gh#giuspen/cherrytree#2033).
  * Added help to the user to show again a hidden menubar
    (gh#giuspen/cherrytree#1927 and gh#giuspen/cherrytree#2054).
  * Pressing Tab on the very latest table cell now adds a new table
    line and moves to its first cell.
  * Fixed issue with relative links to files and folders and
    documents moved between linux and windows.
  * In export to html and txt multiple files, now appending the
    node id to the file names to support multiple nodes with the
    same name.
  * Added syntax highlight support for solidity
    (gh#giuspen/cherrytree#2030).
  * After issues with the domain giuspen.com, the domain changed to
    giuspen.net and giuspen.com will eventually go.</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1663243200">- Update to version 0.99.49+3:
  * Legacy_canonicalize_filename: manage empty filename,
    (gh#giuspen/cherrytree#2118)
  * added command line option '--anchor AnchorName' that in
    addition to existing '--node NodeName' allows to open a
    document focusing an anchor in a node.
  * Changed non configurable keyboard shortcuts for codebox width
    and table column width to use parenthesis open instead of
    backslash, (gh#giuspen/cherrytree#2113).
  * Fixed crash on double exit from systray icon right click menu,
    (gh#giuspen/cherrytree#2114).
  * Added keyboard shortcuts to toolbar tooltips,
    (gh#giuspen/cherrytree#2106).
  * Fixed export to HTML crash, (gh#giuspen/cherrytree#2109).
  * Force turning off portal usage since it does not work on all
    distros, (gh#giuspen/cherrytree#2111).
  * Improved dialog confirmation before executing the code.
  * Additonal changes for core22, (gh#giuspen/cherrytree#2110).
  * Allow to disable the dialog asking for confirmation before
    executing the code.
  * Fixed bulleted list unindent (Shift+Tab) crash,
    (gh#giuspen/cherrytree#2103).
  * Add home plug, (gh#giuspen/cherrytree#2101 and
    gh#giuspen/cherrytree#2102).
  * Linux menu launcher run cherrytree in a new instance,
    (gh#giuspen/cherrytree#2077).
  * Fixed crash on print/export as pdf of a sequence of characters
    without spaces longer that the page width, such as a very long
    URL, (gh#giuspen/cherrytree#2045).
  * Fixed wrongly entering column mode when using keyboard
    shortcuts with &lt;Ctrl&gt;&lt;Alt&gt; such as insert codebox,
    (gh#giuspen/cherrytree#2075).
  * Added syntax highlighting support for GDScript.
  * Fixed tooltip and cursor not reset after hovering link and then
    navigating to non rich text node.
  * Support for accent insensitive search - added letters with
    subordinate dots, (gh#giuspen/cherrytree#1981).
  * Translation updates.
- Fix duplicate file warnings, add fdupes build requires and macro.
- Developer advised fixed cross-site scripting (XSS) vulnerability
  that allows attackers to execute arbitrary web scripts or HTML
  via a crafted payload injected into the Name text field when
  creating a node, (#boo1202513, gh#giuspen/cherrytree#2099 and
  CVE-2022-35133).</changelog>
</package>
<package pkgid="cb8f516aa5bf9f6f3e84e641086498c57ae341a0b5dbe5592e5e3711b6bbee18" name="chromedriver" arch="aarch64">
  <version epoch="0" ver="102.0.5005.115" rel="bp154.2.8.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1643889600">- Chromium 98.0.4758.80 (boo#1195420)
  * CVE-2022-0452: Use after free in Safe Browsing
  * CVE-2022-0453: Use after free in Reader Mode
  * CVE-2022-0454: Heap buffer overflow in ANGLE
  * CVE-2022-0455: Inappropriate implementation in Full Screen Mode
  * CVE-2022-0456: Use after free in Web Search
  * CVE-2022-0457: Type Confusion in V8
  * CVE-2022-0459: Use after free in Screen Capture
  * CVE-2022-0460: Use after free in Window Dialog
  * CVE-2022-0461: Policy bypass in COOP
  * CVE-2022-0462: Inappropriate implementation in Scroll
  * CVE-2022-0463: Use after free in Accessibility
  * CVE-2022-0464: Use after free in Accessibility
  * CVE-2022-0465: Use after free in Extensions
  * CVE-2022-0466: Inappropriate implementation in Extensions Platform
  * CVE-2022-0467: Inappropriate implementation in Pointer Lock
  * CVE-2022-0468: Use after free in Payments
  * CVE-2022-0469: Use after free in Cast
  * CVE-2022-0470: Out of bounds memory access in V8
  * Various fixes from internal audits, fuzzing and other initiatives
- drop upstreamed patches:
  * chromium-97-Point-constexpr.patch
- add patches:
  * chromium-98-MiraclePtr-gcc-ice.patch
  * chromium-98-WaylandFrameManager-check.patch
- change chromium-97-compiler.patch to chromium-98-compiler.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1644926400">- Chromium 98.0.4758.102 (boo#1195986)
  * CVE-2022-0603: Use after free in File Manager
  * CVE-2022-0604: Heap buffer overflow in Tab Groups
  * CVE-2022-0605: Use after free in Webstore API
  * CVE-2022-0606: Use after free in ANGLE
  * CVE-2022-0607: Use after free in GPU
  * CVE-2022-0608: Integer overflow in Mojo
  * CVE-2022-0609: Use after free in Animation
  * CVE-2022-0610: Inappropriate implementation in Gamepad API
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1646395200">- Chromium 99.0.4844.51 (boo#1196641)
  * CVE-2022-0789: Heap buffer overflow in ANGLE
  * CVE-2022-0790: Use after free in Cast UI
  * CVE-2022-0791: Use after free in Omnibox
  * CVE-2022-0792: Out of bounds read in ANGLE
  * CVE-2022-0793: Use after free in Views
  * CVE-2022-0794: Use after free in WebShare
  * CVE-2022-0795: Type Confusion in Blink Layout
  * CVE-2022-0796: Use after free in Media
  * CVE-2022-0797: Out of bounds memory access in Mojo
  * CVE-2022-0798: Use after free in MediaStream
  * CVE-2022-0799: Insufficient policy enforcement in Installer
  * CVE-2022-0800: Heap buffer overflow in Cast UI
  * CVE-2022-0801: Inappropriate implementation in HTML parser
  * CVE-2022-0802: Inappropriate implementation in Full screen mode
  * CVE-2022-0803: Inappropriate implementation in Permissions
  * CVE-2022-0804: Inappropriate implementation in Full screen mode
  * CVE-2022-0805: Use after free in Browser Switcher
  * CVE-2022-0806: Data leak in Canvas
  * CVE-2022-0807: Inappropriate implementation in Autofill
  * CVE-2022-0808: Use after free in Chrome OS Shell
  * CVE-2022-0809: Out of bounds memory access in WebXR
- Removed patches:
  * chromium-96-EnumTable-crash.patch
  * chromium-89-missing-cstring-header.patch
  * chromium-95-libyuv-aarch64.patch
  * chromium-95-libyuv-arm.patch
  * chromium-98-MiraclePtr-gcc-ice.patch
  * chromium-98-WaylandFrameManager-check.patch
- Added patches:
  * chromium-97-arm-tflite-cast.patch
  * chromium-98-gtk4-build.patch
  * chromium-99-AutofillAssistantModelExecutor-NoDestructor.patch
  * chromium-98-EnumTable-crash.patch
  * chromium-third_party-symbolize-missing-include.patch
  * chromium-v8-missing-utility-include.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1647432000">- Chromium 99.0.4844.74 (boo#1197163)
  * CVE-2022-0971: Use after free in Blink Layout
  * CVE-2022-0972: Use after free in Extensions
  * CVE-2022-0973: Use after free in Safe Browsing
  * CVE-2022-0974: Use after free in Splitscreen
  * CVE-2022-0975: Use after free in ANGLE
  * CVE-2022-0976: Heap buffer overflow in GPU
  * CVE-2022-0977: Use after free in Browser UI
  * CVE-2022-0978: Use after free in ANGLE
  * CVE-2022-0979: Use after free in Safe Browsing
  * CVE-2022-0980: Use after free in New Tab Page
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1647864000">- Chromium 99.0.4844.82:
  * Fix potential problem in Hangouts (boo#1197332)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1648296000">- Chromium 99.0.4844.84:
  * CVE-2022-1096: Type Confusion in V8 (boo#1197552)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1648555200">- Update disk constraints</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1648641600">- Chromium 100.0.4896.60 (boo#1197680)
  * CVE-2022-1125: Use after free in Portals
  * CVE-2022-1127: Use after free in QR Code Generator
  * CVE-2022-1128: Inappropriate implementation in Web Share API
  * CVE-2022-1129: Inappropriate implementation in Full Screen Mode
  * CVE-2022-1130: Insufficient validation of untrusted input in WebOTP
  * CVE-2022-1131: Use after free in Cast UI
  * CVE-2022-1132: Inappropriate implementation in Virtual Keyboard
  * CVE-2022-1133: Use after free in WebRTC
  * CVE-2022-1134: Type Confusion in V8
  * CVE-2022-1135: Use after free in Shopping Cart
  * CVE-2022-1136: Use after free in Tab Strip
  * CVE-2022-1137: Inappropriate implementation in Extensions
  * CVE-2022-1138: Inappropriate implementation in Web Cursor
  * CVE-2022-1139: Inappropriate implementation in Background Fetch API
  * CVE-2022-1141: Use after free in File Manager
  * CVE-2022-1142: Heap buffer overflow in WebUI
  * CVE-2022-1143: Heap buffer overflow in WebUI
  * CVE-2022-1144: Use after free in WebUI
  * CVE-2022-1145: Use after free in Extensions
  * CVE-2022-1146: Inappropriate implementation in Resource Timing
- Added patches:
  * chromium-100-compiler.patch
  * chromium-100-GLImplementationParts-constexpr.patch
  * chromium-100-InMilliseconds-constexpr.patch
  * chromium-100-SCTHashdanceMetadata-move.patch
  * chromium-100-macro-typo.patch
- Removed patches:
  * chromium-98-compiler.patch
  * chromium-86-nearby-explicit.patch
  * chromium-glibc-2.34.patch
  * chromium-v8-missing-utility-include.patch
  * chromium-99-AutofillAssistantModelExecutor-NoDestructor.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1649160000">- Chromium 100.0.4896.75:
  * CVE-2022-1232: Type Confusion in V8 (boo#1198053)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1649592000">- Patches for GCC 12:
  * chromium-fix-swiftshader-template.patch
  * chromium-missing-include-tuple.patch
  * chromium-webrtc-stats-missing-vector.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1649764800">- Chromium 100.0.4896.88 (boo#1198361)
  * CVE-2022-1305: Use after free in storage
  * CVE-2022-1306: Inappropriate implementation in compositing
  * CVE-2022-1307: Inappropriate implementation in full screen
  * CVE-2022-1308: Use after free in BFCache
  * CVE-2022-1309: Insufficient policy enforcement in developer tools
  * CVE-2022-1310: Use after free in regular expressions
  * CVE-2022-1311: Use after free in Chrome OS shell
  * CVE-2022-1312: Use after free in storage
  * CVE-2022-1313: Use after free in tab groups
  * CVE-2022-1314: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1650024000">- Chromium 100.0.4896.127 (boo#1198509)
  * CVE-2022-1364: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1650542400">- Fixes for go 1.18</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1651665600">- Chromium 101.0.4951.54 (boo#1199118)
- Chromium 101.0.4951.41 (boo#1198917)
  * CVE-2022-1477: Use after free in Vulkan
  * CVE-2022-1478: Use after free in SwiftShader
  * CVE-2022-1479: Use after free in ANGLE
  * CVE-2022-1480: Use after free in Device API
  * CVE-2022-1481: Use after free in Sharing
  * CVE-2022-1482: Inappropriate implementation in WebGL
  * CVE-2022-1483: Heap buffer overflow in WebGPU
  * CVE-2022-1484: Heap buffer overflow in Web UI Settings
  * CVE-2022-1485: Use after free in File System API
  * CVE-2022-1486: Type Confusion in V8
  * CVE-2022-1487: Use after free in Ozone
  * CVE-2022-1488: Inappropriate implementation in Extensions API
  * CVE-2022-1489: Out of bounds memory access in UI Shelf
  * CVE-2022-1490: Use after free in Browser Switcher
  * CVE-2022-1491: Use after free in Bookmarks
  * CVE-2022-1492: Insufficient data validation in Blink Editing
  * CVE-2022-1493: Use after free in Dev Tools
  * CVE-2022-1494: Insufficient data validation in Trusted Types
  * CVE-2022-1495: Incorrect security UI in Downloads
  * CVE-2022-1496: Use after free in File Manager
  * CVE-2022-1497: Inappropriate implementation in Input
  * CVE-2022-1498: Inappropriate implementation in HTML Parser
  * CVE-2022-1499: Inappropriate implementation in WebAuthentication
  * CVE-2022-1500: Insufficient data validation in Dev Tools
  * CVE-2022-1501: Inappropriate implementation in iframe
- Added patches:
  * chromium-101-libxml-unbundle.patch
  * chromium-101-segmentation_platform-type.patch
- Removed patches:
  * chromium-100-SCTHashdanceMetadata-move.patch
  * chromium-100-GLImplementationParts-constexpr.patch
  * chromium-100-macro-typo.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1652270400">- Chromium 101.0.4951.64 (boo#1199409)
  * CVE-2022-1633: Use after free in Sharesheet
  * CVE-2022-1634: Use after free in Browser UI
  * CVE-2022-1635: Use after free in Permission Prompts
  * CVE-2022-1636: Use after free in Performance APIs
  * CVE-2022-1637: Inappropriate implementation in Web Contents
  * CVE-2022-1638: Heap buffer overflow in V8 Internationalization
  * CVE-2022-1639: Use after free in ANGLE
  * CVE-2022-1640: Use after free in Sharing
  * CVE-2022-1641: Use after free in Web UI Diagnostics</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1652616000">- Chromium 101.0.4951.67
  * fixes for other platforms</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1653652800">- Chromium 102.0.5001.61 (boo#1199893)
  * CVE-2022-1853: Use after free in Indexed DB
  * CVE-2022-1854: Use after free in ANGLE
  * CVE-2022-1855: Use after free in Messaging
  * CVE-2022-1856: Use after free in User Education
  * CVE-2022-1857: Insufficient policy enforcement in File System API
  * CVE-2022-1858: Out of bounds read in DevTools
  * CVE-2022-1859: Use after free in Performance Manager
  * CVE-2022-1860: Use after free in UI Foundations
  * CVE-2022-1861: Use after free in Sharing
  * CVE-2022-1862: Inappropriate implementation in Extensions
  * CVE-2022-1863: Use after free in Tab Groups
  * CVE-2022-1864: Use after free in WebApp Installs
  * CVE-2022-1865: Use after free in Bookmarks
  * CVE-2022-1866: Use after free in Tablet Mode
  * CVE-2022-1867: Insufficient validation of untrusted input in Data Transfer
  * CVE-2022-1868: Inappropriate implementation in Extensions API
  * CVE-2022-1869: Type Confusion in V8
  * CVE-2022-1870: Use after free in App Service
  * CVE-2022-1871: Insufficient policy enforcement in File System API
  * CVE-2022-1872: Insufficient policy enforcement in Extensions API
  * CVE-2022-1873: Insufficient policy enforcement in COOP
  * CVE-2022-1874: Insufficient policy enforcement in Safe Browsing
  * CVE-2022-1875: Inappropriate implementation in PDF
  * CVE-2022-1876: Heap buffer overflow in DevTools
- Added patches:
  * chromium-102-compiler.patch
  * chromium-102-fenced_frame_utils-include.patch
  * chromium-102-regex_pattern-array.patch
  * chromium-102-swiftshader-template-instantiation.patch
  * chromium-102-symbolize-include.patch
  * ffmpeg-new-channel-layout.patch
- Removed patches:
  * chromium-100-compiler.patch
  * chromium-80-QuicStreamSendBuffer-deleted-move-constructor.patch
  * chromium-95-quiche-include.patch
  * chromium-fix-swiftshader-template.patch
  * chromium-missing-include-tuple.patch
  * chromium-webrtc-stats-missing-vector.patch
  * chromium-101-segmentation_platform-type.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654084800">- Disable ARM control flow integrity, it causes build issues
  at the moment
- Try a different SVG (black logo on GNOME)
- Removed patches:
  * chromium-third_party-symbolize-missing-include.patch
  (replaced by chromium-102-symbolize-include.patch)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654689600">- Switch to GTK4 on TW and Leap 15.4+ (boo#1200139)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1654862400">- Chromium 102.0.5005.115 (boo#1200423)
  * CVE-2022-2007: Use after free in WebGPU
  * CVE-2022-2008: Out of bounds memory access in WebGL
  * CVE-2022-2010: Out of bounds read in compositing
  * CVE-2022-2011: Use after free in ANGLE</changelog>
</package>
<package pkgid="590114c27f468bb20bc7f2a8bd4560fee4c8a282d86ebbc770c744790871ed09" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="102.0.5005.115" rel="bp154.2.8.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1643889600">- Chromium 98.0.4758.80 (boo#1195420)
  * CVE-2022-0452: Use after free in Safe Browsing
  * CVE-2022-0453: Use after free in Reader Mode
  * CVE-2022-0454: Heap buffer overflow in ANGLE
  * CVE-2022-0455: Inappropriate implementation in Full Screen Mode
  * CVE-2022-0456: Use after free in Web Search
  * CVE-2022-0457: Type Confusion in V8
  * CVE-2022-0459: Use after free in Screen Capture
  * CVE-2022-0460: Use after free in Window Dialog
  * CVE-2022-0461: Policy bypass in COOP
  * CVE-2022-0462: Inappropriate implementation in Scroll
  * CVE-2022-0463: Use after free in Accessibility
  * CVE-2022-0464: Use after free in Accessibility
  * CVE-2022-0465: Use after free in Extensions
  * CVE-2022-0466: Inappropriate implementation in Extensions Platform
  * CVE-2022-0467: Inappropriate implementation in Pointer Lock
  * CVE-2022-0468: Use after free in Payments
  * CVE-2022-0469: Use after free in Cast
  * CVE-2022-0470: Out of bounds memory access in V8
  * Various fixes from internal audits, fuzzing and other initiatives
- drop upstreamed patches:
  * chromium-97-Point-constexpr.patch
- add patches:
  * chromium-98-MiraclePtr-gcc-ice.patch
  * chromium-98-WaylandFrameManager-check.patch
- change chromium-97-compiler.patch to chromium-98-compiler.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1644926400">- Chromium 98.0.4758.102 (boo#1195986)
  * CVE-2022-0603: Use after free in File Manager
  * CVE-2022-0604: Heap buffer overflow in Tab Groups
  * CVE-2022-0605: Use after free in Webstore API
  * CVE-2022-0606: Use after free in ANGLE
  * CVE-2022-0607: Use after free in GPU
  * CVE-2022-0608: Integer overflow in Mojo
  * CVE-2022-0609: Use after free in Animation
  * CVE-2022-0610: Inappropriate implementation in Gamepad API
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1646395200">- Chromium 99.0.4844.51 (boo#1196641)
  * CVE-2022-0789: Heap buffer overflow in ANGLE
  * CVE-2022-0790: Use after free in Cast UI
  * CVE-2022-0791: Use after free in Omnibox
  * CVE-2022-0792: Out of bounds read in ANGLE
  * CVE-2022-0793: Use after free in Views
  * CVE-2022-0794: Use after free in WebShare
  * CVE-2022-0795: Type Confusion in Blink Layout
  * CVE-2022-0796: Use after free in Media
  * CVE-2022-0797: Out of bounds memory access in Mojo
  * CVE-2022-0798: Use after free in MediaStream
  * CVE-2022-0799: Insufficient policy enforcement in Installer
  * CVE-2022-0800: Heap buffer overflow in Cast UI
  * CVE-2022-0801: Inappropriate implementation in HTML parser
  * CVE-2022-0802: Inappropriate implementation in Full screen mode
  * CVE-2022-0803: Inappropriate implementation in Permissions
  * CVE-2022-0804: Inappropriate implementation in Full screen mode
  * CVE-2022-0805: Use after free in Browser Switcher
  * CVE-2022-0806: Data leak in Canvas
  * CVE-2022-0807: Inappropriate implementation in Autofill
  * CVE-2022-0808: Use after free in Chrome OS Shell
  * CVE-2022-0809: Out of bounds memory access in WebXR
- Removed patches:
  * chromium-96-EnumTable-crash.patch
  * chromium-89-missing-cstring-header.patch
  * chromium-95-libyuv-aarch64.patch
  * chromium-95-libyuv-arm.patch
  * chromium-98-MiraclePtr-gcc-ice.patch
  * chromium-98-WaylandFrameManager-check.patch
- Added patches:
  * chromium-97-arm-tflite-cast.patch
  * chromium-98-gtk4-build.patch
  * chromium-99-AutofillAssistantModelExecutor-NoDestructor.patch
  * chromium-98-EnumTable-crash.patch
  * chromium-third_party-symbolize-missing-include.patch
  * chromium-v8-missing-utility-include.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1647432000">- Chromium 99.0.4844.74 (boo#1197163)
  * CVE-2022-0971: Use after free in Blink Layout
  * CVE-2022-0972: Use after free in Extensions
  * CVE-2022-0973: Use after free in Safe Browsing
  * CVE-2022-0974: Use after free in Splitscreen
  * CVE-2022-0975: Use after free in ANGLE
  * CVE-2022-0976: Heap buffer overflow in GPU
  * CVE-2022-0977: Use after free in Browser UI
  * CVE-2022-0978: Use after free in ANGLE
  * CVE-2022-0979: Use after free in Safe Browsing
  * CVE-2022-0980: Use after free in New Tab Page
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1647864000">- Chromium 99.0.4844.82:
  * Fix potential problem in Hangouts (boo#1197332)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1648296000">- Chromium 99.0.4844.84:
  * CVE-2022-1096: Type Confusion in V8 (boo#1197552)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1648555200">- Update disk constraints</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1648641600">- Chromium 100.0.4896.60 (boo#1197680)
  * CVE-2022-1125: Use after free in Portals
  * CVE-2022-1127: Use after free in QR Code Generator
  * CVE-2022-1128: Inappropriate implementation in Web Share API
  * CVE-2022-1129: Inappropriate implementation in Full Screen Mode
  * CVE-2022-1130: Insufficient validation of untrusted input in WebOTP
  * CVE-2022-1131: Use after free in Cast UI
  * CVE-2022-1132: Inappropriate implementation in Virtual Keyboard
  * CVE-2022-1133: Use after free in WebRTC
  * CVE-2022-1134: Type Confusion in V8
  * CVE-2022-1135: Use after free in Shopping Cart
  * CVE-2022-1136: Use after free in Tab Strip
  * CVE-2022-1137: Inappropriate implementation in Extensions
  * CVE-2022-1138: Inappropriate implementation in Web Cursor
  * CVE-2022-1139: Inappropriate implementation in Background Fetch API
  * CVE-2022-1141: Use after free in File Manager
  * CVE-2022-1142: Heap buffer overflow in WebUI
  * CVE-2022-1143: Heap buffer overflow in WebUI
  * CVE-2022-1144: Use after free in WebUI
  * CVE-2022-1145: Use after free in Extensions
  * CVE-2022-1146: Inappropriate implementation in Resource Timing
- Added patches:
  * chromium-100-compiler.patch
  * chromium-100-GLImplementationParts-constexpr.patch
  * chromium-100-InMilliseconds-constexpr.patch
  * chromium-100-SCTHashdanceMetadata-move.patch
  * chromium-100-macro-typo.patch
- Removed patches:
  * chromium-98-compiler.patch
  * chromium-86-nearby-explicit.patch
  * chromium-glibc-2.34.patch
  * chromium-v8-missing-utility-include.patch
  * chromium-99-AutofillAssistantModelExecutor-NoDestructor.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1649160000">- Chromium 100.0.4896.75:
  * CVE-2022-1232: Type Confusion in V8 (boo#1198053)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1649592000">- Patches for GCC 12:
  * chromium-fix-swiftshader-template.patch
  * chromium-missing-include-tuple.patch
  * chromium-webrtc-stats-missing-vector.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1649764800">- Chromium 100.0.4896.88 (boo#1198361)
  * CVE-2022-1305: Use after free in storage
  * CVE-2022-1306: Inappropriate implementation in compositing
  * CVE-2022-1307: Inappropriate implementation in full screen
  * CVE-2022-1308: Use after free in BFCache
  * CVE-2022-1309: Insufficient policy enforcement in developer tools
  * CVE-2022-1310: Use after free in regular expressions
  * CVE-2022-1311: Use after free in Chrome OS shell
  * CVE-2022-1312: Use after free in storage
  * CVE-2022-1313: Use after free in tab groups
  * CVE-2022-1314: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1650024000">- Chromium 100.0.4896.127 (boo#1198509)
  * CVE-2022-1364: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1650542400">- Fixes for go 1.18</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1651665600">- Chromium 101.0.4951.54 (boo#1199118)
- Chromium 101.0.4951.41 (boo#1198917)
  * CVE-2022-1477: Use after free in Vulkan
  * CVE-2022-1478: Use after free in SwiftShader
  * CVE-2022-1479: Use after free in ANGLE
  * CVE-2022-1480: Use after free in Device API
  * CVE-2022-1481: Use after free in Sharing
  * CVE-2022-1482: Inappropriate implementation in WebGL
  * CVE-2022-1483: Heap buffer overflow in WebGPU
  * CVE-2022-1484: Heap buffer overflow in Web UI Settings
  * CVE-2022-1485: Use after free in File System API
  * CVE-2022-1486: Type Confusion in V8
  * CVE-2022-1487: Use after free in Ozone
  * CVE-2022-1488: Inappropriate implementation in Extensions API
  * CVE-2022-1489: Out of bounds memory access in UI Shelf
  * CVE-2022-1490: Use after free in Browser Switcher
  * CVE-2022-1491: Use after free in Bookmarks
  * CVE-2022-1492: Insufficient data validation in Blink Editing
  * CVE-2022-1493: Use after free in Dev Tools
  * CVE-2022-1494: Insufficient data validation in Trusted Types
  * CVE-2022-1495: Incorrect security UI in Downloads
  * CVE-2022-1496: Use after free in File Manager
  * CVE-2022-1497: Inappropriate implementation in Input
  * CVE-2022-1498: Inappropriate implementation in HTML Parser
  * CVE-2022-1499: Inappropriate implementation in WebAuthentication
  * CVE-2022-1500: Insufficient data validation in Dev Tools
  * CVE-2022-1501: Inappropriate implementation in iframe
- Added patches:
  * chromium-101-libxml-unbundle.patch
  * chromium-101-segmentation_platform-type.patch
- Removed patches:
  * chromium-100-SCTHashdanceMetadata-move.patch
  * chromium-100-GLImplementationParts-constexpr.patch
  * chromium-100-macro-typo.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1652270400">- Chromium 101.0.4951.64 (boo#1199409)
  * CVE-2022-1633: Use after free in Sharesheet
  * CVE-2022-1634: Use after free in Browser UI
  * CVE-2022-1635: Use after free in Permission Prompts
  * CVE-2022-1636: Use after free in Performance APIs
  * CVE-2022-1637: Inappropriate implementation in Web Contents
  * CVE-2022-1638: Heap buffer overflow in V8 Internationalization
  * CVE-2022-1639: Use after free in ANGLE
  * CVE-2022-1640: Use after free in Sharing
  * CVE-2022-1641: Use after free in Web UI Diagnostics</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1652616000">- Chromium 101.0.4951.67
  * fixes for other platforms</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1653652800">- Chromium 102.0.5001.61 (boo#1199893)
  * CVE-2022-1853: Use after free in Indexed DB
  * CVE-2022-1854: Use after free in ANGLE
  * CVE-2022-1855: Use after free in Messaging
  * CVE-2022-1856: Use after free in User Education
  * CVE-2022-1857: Insufficient policy enforcement in File System API
  * CVE-2022-1858: Out of bounds read in DevTools
  * CVE-2022-1859: Use after free in Performance Manager
  * CVE-2022-1860: Use after free in UI Foundations
  * CVE-2022-1861: Use after free in Sharing
  * CVE-2022-1862: Inappropriate implementation in Extensions
  * CVE-2022-1863: Use after free in Tab Groups
  * CVE-2022-1864: Use after free in WebApp Installs
  * CVE-2022-1865: Use after free in Bookmarks
  * CVE-2022-1866: Use after free in Tablet Mode
  * CVE-2022-1867: Insufficient validation of untrusted input in Data Transfer
  * CVE-2022-1868: Inappropriate implementation in Extensions API
  * CVE-2022-1869: Type Confusion in V8
  * CVE-2022-1870: Use after free in App Service
  * CVE-2022-1871: Insufficient policy enforcement in File System API
  * CVE-2022-1872: Insufficient policy enforcement in Extensions API
  * CVE-2022-1873: Insufficient policy enforcement in COOP
  * CVE-2022-1874: Insufficient policy enforcement in Safe Browsing
  * CVE-2022-1875: Inappropriate implementation in PDF
  * CVE-2022-1876: Heap buffer overflow in DevTools
- Added patches:
  * chromium-102-compiler.patch
  * chromium-102-fenced_frame_utils-include.patch
  * chromium-102-regex_pattern-array.patch
  * chromium-102-swiftshader-template-instantiation.patch
  * chromium-102-symbolize-include.patch
  * ffmpeg-new-channel-layout.patch
- Removed patches:
  * chromium-100-compiler.patch
  * chromium-80-QuicStreamSendBuffer-deleted-move-constructor.patch
  * chromium-95-quiche-include.patch
  * chromium-fix-swiftshader-template.patch
  * chromium-missing-include-tuple.patch
  * chromium-webrtc-stats-missing-vector.patch
  * chromium-101-segmentation_platform-type.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654084800">- Disable ARM control flow integrity, it causes build issues
  at the moment
- Try a different SVG (black logo on GNOME)
- Removed patches:
  * chromium-third_party-symbolize-missing-include.patch
  (replaced by chromium-102-symbolize-include.patch)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654689600">- Switch to GTK4 on TW and Leap 15.4+ (boo#1200139)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1654862400">- Chromium 102.0.5005.115 (boo#1200423)
  * CVE-2022-2007: Use after free in WebGPU
  * CVE-2022-2008: Out of bounds memory access in WebGL
  * CVE-2022-2010: Out of bounds read in compositing
  * CVE-2022-2011: Use after free in ANGLE</changelog>
</package>
<package pkgid="4a448744d42332140f38aa69d7d9cf4669776d34ec857a285973e1c7abe54ea4" name="chromedriver" arch="aarch64">
  <version epoch="0" ver="102.0.5005.61" rel="bp154.2.5.3"/>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1642680000">- Revert chromium-94-ffmpeg-roll.patch on TW: fix moved to
  FFmpeg</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642766400">- Chromium 97.0.4692.99 (boo#1194919):
  * CVE-2022-0289: Use after free in Safe browsing
  * CVE-2022-0290: Use after free in Site isolation
  * CVE-2022-0291: Inappropriate implementation in Storage
  * CVE-2022-0292: Inappropriate implementation in Fenced Frames
  * CVE-2022-0293: Use after free in Web packaging
  * CVE-2022-0294: Inappropriate implementation in Push messaging
  * CVE-2022-0295: Use after free in Omnibox
  * CVE-2022-0296: Use after free in Printing
  * CVE-2022-0297: Use after free in Vulkan
  * CVE-2022-0298: Use after free in Scheduling
  * CVE-2022-0300: Use after free in Text Input Method Editor
  * CVE-2022-0301: Heap buffer overflow in DevTools
  * CVE-2022-0302: Use after free in Omnibox
  * CVE-2022-0303: Race in GPU Watchdog
  * CVE-2022-0304: Use after free in Bookmarks
  * CVE-2022-0305: Inappropriate implementation in Service Worker API
  * CVE-2022-0306: Heap buffer overflow in PDFium
  * CVE-2022-0307: Use after free in Optimization Guide
  * CVE-2022-0308: Use after free in Data Transfer
  * CVE-2022-0309: Inappropriate implementation in Autofill
  * CVE-2022-0310: Heap buffer overflow in Task Manager
  * CVE-2022-0311: Heap buffer overflow in Task Manager
  * Various fixes from internal audits, fuzzing and other initiatives
- drop upstreamed patches:
  * fix-tag-dragging-in-Mutter.patch
  * fix-tag-dragging-in-KWin.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1643889600">- Chromium 98.0.4758.80 (boo#1195420)
  * CVE-2022-0452: Use after free in Safe Browsing
  * CVE-2022-0453: Use after free in Reader Mode
  * CVE-2022-0454: Heap buffer overflow in ANGLE
  * CVE-2022-0455: Inappropriate implementation in Full Screen Mode
  * CVE-2022-0456: Use after free in Web Search
  * CVE-2022-0457: Type Confusion in V8
  * CVE-2022-0459: Use after free in Screen Capture
  * CVE-2022-0460: Use after free in Window Dialog
  * CVE-2022-0461: Policy bypass in COOP
  * CVE-2022-0462: Inappropriate implementation in Scroll
  * CVE-2022-0463: Use after free in Accessibility
  * CVE-2022-0464: Use after free in Accessibility
  * CVE-2022-0465: Use after free in Extensions
  * CVE-2022-0466: Inappropriate implementation in Extensions Platform
  * CVE-2022-0467: Inappropriate implementation in Pointer Lock
  * CVE-2022-0468: Use after free in Payments
  * CVE-2022-0469: Use after free in Cast
  * CVE-2022-0470: Out of bounds memory access in V8
  * Various fixes from internal audits, fuzzing and other initiatives
- drop upstreamed patches:
  * chromium-97-Point-constexpr.patch
- add patches:
  * chromium-98-MiraclePtr-gcc-ice.patch
  * chromium-98-WaylandFrameManager-check.patch
- change chromium-97-compiler.patch to chromium-98-compiler.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1644926400">- Chromium 98.0.4758.102 (boo#1195986)
  * CVE-2022-0603: Use after free in File Manager
  * CVE-2022-0604: Heap buffer overflow in Tab Groups
  * CVE-2022-0605: Use after free in Webstore API
  * CVE-2022-0606: Use after free in ANGLE
  * CVE-2022-0607: Use after free in GPU
  * CVE-2022-0608: Integer overflow in Mojo
  * CVE-2022-0609: Use after free in Animation
  * CVE-2022-0610: Inappropriate implementation in Gamepad API
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1646395200">- Chromium 99.0.4844.51 (boo#1196641)
  * CVE-2022-0789: Heap buffer overflow in ANGLE
  * CVE-2022-0790: Use after free in Cast UI
  * CVE-2022-0791: Use after free in Omnibox
  * CVE-2022-0792: Out of bounds read in ANGLE
  * CVE-2022-0793: Use after free in Views
  * CVE-2022-0794: Use after free in WebShare
  * CVE-2022-0795: Type Confusion in Blink Layout
  * CVE-2022-0796: Use after free in Media
  * CVE-2022-0797: Out of bounds memory access in Mojo
  * CVE-2022-0798: Use after free in MediaStream
  * CVE-2022-0799: Insufficient policy enforcement in Installer
  * CVE-2022-0800: Heap buffer overflow in Cast UI
  * CVE-2022-0801: Inappropriate implementation in HTML parser
  * CVE-2022-0802: Inappropriate implementation in Full screen mode
  * CVE-2022-0803: Inappropriate implementation in Permissions
  * CVE-2022-0804: Inappropriate implementation in Full screen mode
  * CVE-2022-0805: Use after free in Browser Switcher
  * CVE-2022-0806: Data leak in Canvas
  * CVE-2022-0807: Inappropriate implementation in Autofill
  * CVE-2022-0808: Use after free in Chrome OS Shell
  * CVE-2022-0809: Out of bounds memory access in WebXR
- Removed patches:
  * chromium-96-EnumTable-crash.patch
  * chromium-89-missing-cstring-header.patch
  * chromium-95-libyuv-aarch64.patch
  * chromium-95-libyuv-arm.patch
  * chromium-98-MiraclePtr-gcc-ice.patch
  * chromium-98-WaylandFrameManager-check.patch
- Added patches:
  * chromium-97-arm-tflite-cast.patch
  * chromium-98-gtk4-build.patch
  * chromium-99-AutofillAssistantModelExecutor-NoDestructor.patch
  * chromium-98-EnumTable-crash.patch
  * chromium-third_party-symbolize-missing-include.patch
  * chromium-v8-missing-utility-include.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1647432000">- Chromium 99.0.4844.74 (boo#1197163)
  * CVE-2022-0971: Use after free in Blink Layout
  * CVE-2022-0972: Use after free in Extensions
  * CVE-2022-0973: Use after free in Safe Browsing
  * CVE-2022-0974: Use after free in Splitscreen
  * CVE-2022-0975: Use after free in ANGLE
  * CVE-2022-0976: Heap buffer overflow in GPU
  * CVE-2022-0977: Use after free in Browser UI
  * CVE-2022-0978: Use after free in ANGLE
  * CVE-2022-0979: Use after free in Safe Browsing
  * CVE-2022-0980: Use after free in New Tab Page
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1647864000">- Chromium 99.0.4844.82:
  * Fix potential problem in Hangouts (boo#1197332)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1648296000">- Chromium 99.0.4844.84:
  * CVE-2022-1096: Type Confusion in V8 (boo#1197552)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1648555200">- Update disk constraints</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1648641600">- Chromium 100.0.4896.60 (boo#1197680)
  * CVE-2022-1125: Use after free in Portals
  * CVE-2022-1127: Use after free in QR Code Generator
  * CVE-2022-1128: Inappropriate implementation in Web Share API
  * CVE-2022-1129: Inappropriate implementation in Full Screen Mode
  * CVE-2022-1130: Insufficient validation of untrusted input in WebOTP
  * CVE-2022-1131: Use after free in Cast UI
  * CVE-2022-1132: Inappropriate implementation in Virtual Keyboard
  * CVE-2022-1133: Use after free in WebRTC
  * CVE-2022-1134: Type Confusion in V8
  * CVE-2022-1135: Use after free in Shopping Cart
  * CVE-2022-1136: Use after free in Tab Strip
  * CVE-2022-1137: Inappropriate implementation in Extensions
  * CVE-2022-1138: Inappropriate implementation in Web Cursor
  * CVE-2022-1139: Inappropriate implementation in Background Fetch API
  * CVE-2022-1141: Use after free in File Manager
  * CVE-2022-1142: Heap buffer overflow in WebUI
  * CVE-2022-1143: Heap buffer overflow in WebUI
  * CVE-2022-1144: Use after free in WebUI
  * CVE-2022-1145: Use after free in Extensions
  * CVE-2022-1146: Inappropriate implementation in Resource Timing
- Added patches:
  * chromium-100-compiler.patch
  * chromium-100-GLImplementationParts-constexpr.patch
  * chromium-100-InMilliseconds-constexpr.patch
  * chromium-100-SCTHashdanceMetadata-move.patch
  * chromium-100-macro-typo.patch
- Removed patches:
  * chromium-98-compiler.patch
  * chromium-86-nearby-explicit.patch
  * chromium-glibc-2.34.patch
  * chromium-v8-missing-utility-include.patch
  * chromium-99-AutofillAssistantModelExecutor-NoDestructor.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1649160000">- Chromium 100.0.4896.75:
  * CVE-2022-1232: Type Confusion in V8 (boo#1198053)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1649592000">- Patches for GCC 12:
  * chromium-fix-swiftshader-template.patch
  * chromium-missing-include-tuple.patch
  * chromium-webrtc-stats-missing-vector.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1649764800">- Chromium 100.0.4896.88 (boo#1198361)
  * CVE-2022-1305: Use after free in storage
  * CVE-2022-1306: Inappropriate implementation in compositing
  * CVE-2022-1307: Inappropriate implementation in full screen
  * CVE-2022-1308: Use after free in BFCache
  * CVE-2022-1309: Insufficient policy enforcement in developer tools
  * CVE-2022-1310: Use after free in regular expressions
  * CVE-2022-1311: Use after free in Chrome OS shell
  * CVE-2022-1312: Use after free in storage
  * CVE-2022-1313: Use after free in tab groups
  * CVE-2022-1314: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1650024000">- Chromium 100.0.4896.127 (boo#1198509)
  * CVE-2022-1364: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1650542400">- Fixes for go 1.18</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1651665600">- Chromium 101.0.4951.54 (boo#1199118)
- Chromium 101.0.4951.41 (boo#1198917)
  * CVE-2022-1477: Use after free in Vulkan
  * CVE-2022-1478: Use after free in SwiftShader
  * CVE-2022-1479: Use after free in ANGLE
  * CVE-2022-1480: Use after free in Device API
  * CVE-2022-1481: Use after free in Sharing
  * CVE-2022-1482: Inappropriate implementation in WebGL
  * CVE-2022-1483: Heap buffer overflow in WebGPU
  * CVE-2022-1484: Heap buffer overflow in Web UI Settings
  * CVE-2022-1485: Use after free in File System API
  * CVE-2022-1486: Type Confusion in V8
  * CVE-2022-1487: Use after free in Ozone
  * CVE-2022-1488: Inappropriate implementation in Extensions API
  * CVE-2022-1489: Out of bounds memory access in UI Shelf
  * CVE-2022-1490: Use after free in Browser Switcher
  * CVE-2022-1491: Use after free in Bookmarks
  * CVE-2022-1492: Insufficient data validation in Blink Editing
  * CVE-2022-1493: Use after free in Dev Tools
  * CVE-2022-1494: Insufficient data validation in Trusted Types
  * CVE-2022-1495: Incorrect security UI in Downloads
  * CVE-2022-1496: Use after free in File Manager
  * CVE-2022-1497: Inappropriate implementation in Input
  * CVE-2022-1498: Inappropriate implementation in HTML Parser
  * CVE-2022-1499: Inappropriate implementation in WebAuthentication
  * CVE-2022-1500: Insufficient data validation in Dev Tools
  * CVE-2022-1501: Inappropriate implementation in iframe
- Added patches:
  * chromium-101-libxml-unbundle.patch
  * chromium-101-segmentation_platform-type.patch
- Removed patches:
  * chromium-100-SCTHashdanceMetadata-move.patch
  * chromium-100-GLImplementationParts-constexpr.patch
  * chromium-100-macro-typo.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1652270400">- Chromium 101.0.4951.64 (boo#1199409)
  * CVE-2022-1633: Use after free in Sharesheet
  * CVE-2022-1634: Use after free in Browser UI
  * CVE-2022-1635: Use after free in Permission Prompts
  * CVE-2022-1636: Use after free in Performance APIs
  * CVE-2022-1637: Inappropriate implementation in Web Contents
  * CVE-2022-1638: Heap buffer overflow in V8 Internationalization
  * CVE-2022-1639: Use after free in ANGLE
  * CVE-2022-1640: Use after free in Sharing
  * CVE-2022-1641: Use after free in Web UI Diagnostics</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1652616000">- Chromium 101.0.4951.67
  * fixes for other platforms</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1653652800">- Chromium 102.0.5001.61 (boo#1199893)
  * CVE-2022-1853: Use after free in Indexed DB
  * CVE-2022-1854: Use after free in ANGLE
  * CVE-2022-1855: Use after free in Messaging
  * CVE-2022-1856: Use after free in User Education
  * CVE-2022-1857: Insufficient policy enforcement in File System API
  * CVE-2022-1858: Out of bounds read in DevTools
  * CVE-2022-1859: Use after free in Performance Manager
  * CVE-2022-1860: Use after free in UI Foundations
  * CVE-2022-1861: Use after free in Sharing
  * CVE-2022-1862: Inappropriate implementation in Extensions
  * CVE-2022-1863: Use after free in Tab Groups
  * CVE-2022-1864: Use after free in WebApp Installs
  * CVE-2022-1865: Use after free in Bookmarks
  * CVE-2022-1866: Use after free in Tablet Mode
  * CVE-2022-1867: Insufficient validation of untrusted input in Data Transfer
  * CVE-2022-1868: Inappropriate implementation in Extensions API
  * CVE-2022-1869: Type Confusion in V8
  * CVE-2022-1870: Use after free in App Service
  * CVE-2022-1871: Insufficient policy enforcement in File System API
  * CVE-2022-1872: Insufficient policy enforcement in Extensions API
  * CVE-2022-1873: Insufficient policy enforcement in COOP
  * CVE-2022-1874: Insufficient policy enforcement in Safe Browsing
  * CVE-2022-1875: Inappropriate implementation in PDF
  * CVE-2022-1876: Heap buffer overflow in DevTools
- Added patches:
  * chromium-102-compiler.patch
  * chromium-102-fenced_frame_utils-include.patch
  * chromium-102-regex_pattern-array.patch
  * chromium-102-swiftshader-template-instantiation.patch
  * chromium-102-symbolize-include.patch
  * ffmpeg-new-channel-layout.patch
- Removed patches:
  * chromium-100-compiler.patch
  * chromium-80-QuicStreamSendBuffer-deleted-move-constructor.patch
  * chromium-95-quiche-include.patch
  * chromium-fix-swiftshader-template.patch
  * chromium-missing-include-tuple.patch
  * chromium-webrtc-stats-missing-vector.patch
  * chromium-101-segmentation_platform-type.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654084800">- Disable ARM control flow integrity, it causes build issues
  at the moment
- Try a different SVG (black logo on GNOME)
- Removed patches:
  * chromium-third_party-symbolize-missing-include.patch
  (replaced by chromium-102-symbolize-include.patch)</changelog>
</package>
<package pkgid="65f0646b2a616729bca0147bfa369423ea7a99bbdd28924c32e21606efc401b6" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="102.0.5005.61" rel="bp154.2.5.3"/>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1642680000">- Revert chromium-94-ffmpeg-roll.patch on TW: fix moved to
  FFmpeg</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642766400">- Chromium 97.0.4692.99 (boo#1194919):
  * CVE-2022-0289: Use after free in Safe browsing
  * CVE-2022-0290: Use after free in Site isolation
  * CVE-2022-0291: Inappropriate implementation in Storage
  * CVE-2022-0292: Inappropriate implementation in Fenced Frames
  * CVE-2022-0293: Use after free in Web packaging
  * CVE-2022-0294: Inappropriate implementation in Push messaging
  * CVE-2022-0295: Use after free in Omnibox
  * CVE-2022-0296: Use after free in Printing
  * CVE-2022-0297: Use after free in Vulkan
  * CVE-2022-0298: Use after free in Scheduling
  * CVE-2022-0300: Use after free in Text Input Method Editor
  * CVE-2022-0301: Heap buffer overflow in DevTools
  * CVE-2022-0302: Use after free in Omnibox
  * CVE-2022-0303: Race in GPU Watchdog
  * CVE-2022-0304: Use after free in Bookmarks
  * CVE-2022-0305: Inappropriate implementation in Service Worker API
  * CVE-2022-0306: Heap buffer overflow in PDFium
  * CVE-2022-0307: Use after free in Optimization Guide
  * CVE-2022-0308: Use after free in Data Transfer
  * CVE-2022-0309: Inappropriate implementation in Autofill
  * CVE-2022-0310: Heap buffer overflow in Task Manager
  * CVE-2022-0311: Heap buffer overflow in Task Manager
  * Various fixes from internal audits, fuzzing and other initiatives
- drop upstreamed patches:
  * fix-tag-dragging-in-Mutter.patch
  * fix-tag-dragging-in-KWin.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1643889600">- Chromium 98.0.4758.80 (boo#1195420)
  * CVE-2022-0452: Use after free in Safe Browsing
  * CVE-2022-0453: Use after free in Reader Mode
  * CVE-2022-0454: Heap buffer overflow in ANGLE
  * CVE-2022-0455: Inappropriate implementation in Full Screen Mode
  * CVE-2022-0456: Use after free in Web Search
  * CVE-2022-0457: Type Confusion in V8
  * CVE-2022-0459: Use after free in Screen Capture
  * CVE-2022-0460: Use after free in Window Dialog
  * CVE-2022-0461: Policy bypass in COOP
  * CVE-2022-0462: Inappropriate implementation in Scroll
  * CVE-2022-0463: Use after free in Accessibility
  * CVE-2022-0464: Use after free in Accessibility
  * CVE-2022-0465: Use after free in Extensions
  * CVE-2022-0466: Inappropriate implementation in Extensions Platform
  * CVE-2022-0467: Inappropriate implementation in Pointer Lock
  * CVE-2022-0468: Use after free in Payments
  * CVE-2022-0469: Use after free in Cast
  * CVE-2022-0470: Out of bounds memory access in V8
  * Various fixes from internal audits, fuzzing and other initiatives
- drop upstreamed patches:
  * chromium-97-Point-constexpr.patch
- add patches:
  * chromium-98-MiraclePtr-gcc-ice.patch
  * chromium-98-WaylandFrameManager-check.patch
- change chromium-97-compiler.patch to chromium-98-compiler.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1644926400">- Chromium 98.0.4758.102 (boo#1195986)
  * CVE-2022-0603: Use after free in File Manager
  * CVE-2022-0604: Heap buffer overflow in Tab Groups
  * CVE-2022-0605: Use after free in Webstore API
  * CVE-2022-0606: Use after free in ANGLE
  * CVE-2022-0607: Use after free in GPU
  * CVE-2022-0608: Integer overflow in Mojo
  * CVE-2022-0609: Use after free in Animation
  * CVE-2022-0610: Inappropriate implementation in Gamepad API
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1646395200">- Chromium 99.0.4844.51 (boo#1196641)
  * CVE-2022-0789: Heap buffer overflow in ANGLE
  * CVE-2022-0790: Use after free in Cast UI
  * CVE-2022-0791: Use after free in Omnibox
  * CVE-2022-0792: Out of bounds read in ANGLE
  * CVE-2022-0793: Use after free in Views
  * CVE-2022-0794: Use after free in WebShare
  * CVE-2022-0795: Type Confusion in Blink Layout
  * CVE-2022-0796: Use after free in Media
  * CVE-2022-0797: Out of bounds memory access in Mojo
  * CVE-2022-0798: Use after free in MediaStream
  * CVE-2022-0799: Insufficient policy enforcement in Installer
  * CVE-2022-0800: Heap buffer overflow in Cast UI
  * CVE-2022-0801: Inappropriate implementation in HTML parser
  * CVE-2022-0802: Inappropriate implementation in Full screen mode
  * CVE-2022-0803: Inappropriate implementation in Permissions
  * CVE-2022-0804: Inappropriate implementation in Full screen mode
  * CVE-2022-0805: Use after free in Browser Switcher
  * CVE-2022-0806: Data leak in Canvas
  * CVE-2022-0807: Inappropriate implementation in Autofill
  * CVE-2022-0808: Use after free in Chrome OS Shell
  * CVE-2022-0809: Out of bounds memory access in WebXR
- Removed patches:
  * chromium-96-EnumTable-crash.patch
  * chromium-89-missing-cstring-header.patch
  * chromium-95-libyuv-aarch64.patch
  * chromium-95-libyuv-arm.patch
  * chromium-98-MiraclePtr-gcc-ice.patch
  * chromium-98-WaylandFrameManager-check.patch
- Added patches:
  * chromium-97-arm-tflite-cast.patch
  * chromium-98-gtk4-build.patch
  * chromium-99-AutofillAssistantModelExecutor-NoDestructor.patch
  * chromium-98-EnumTable-crash.patch
  * chromium-third_party-symbolize-missing-include.patch
  * chromium-v8-missing-utility-include.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1647432000">- Chromium 99.0.4844.74 (boo#1197163)
  * CVE-2022-0971: Use after free in Blink Layout
  * CVE-2022-0972: Use after free in Extensions
  * CVE-2022-0973: Use after free in Safe Browsing
  * CVE-2022-0974: Use after free in Splitscreen
  * CVE-2022-0975: Use after free in ANGLE
  * CVE-2022-0976: Heap buffer overflow in GPU
  * CVE-2022-0977: Use after free in Browser UI
  * CVE-2022-0978: Use after free in ANGLE
  * CVE-2022-0979: Use after free in Safe Browsing
  * CVE-2022-0980: Use after free in New Tab Page
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1647864000">- Chromium 99.0.4844.82:
  * Fix potential problem in Hangouts (boo#1197332)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1648296000">- Chromium 99.0.4844.84:
  * CVE-2022-1096: Type Confusion in V8 (boo#1197552)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1648555200">- Update disk constraints</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1648641600">- Chromium 100.0.4896.60 (boo#1197680)
  * CVE-2022-1125: Use after free in Portals
  * CVE-2022-1127: Use after free in QR Code Generator
  * CVE-2022-1128: Inappropriate implementation in Web Share API
  * CVE-2022-1129: Inappropriate implementation in Full Screen Mode
  * CVE-2022-1130: Insufficient validation of untrusted input in WebOTP
  * CVE-2022-1131: Use after free in Cast UI
  * CVE-2022-1132: Inappropriate implementation in Virtual Keyboard
  * CVE-2022-1133: Use after free in WebRTC
  * CVE-2022-1134: Type Confusion in V8
  * CVE-2022-1135: Use after free in Shopping Cart
  * CVE-2022-1136: Use after free in Tab Strip
  * CVE-2022-1137: Inappropriate implementation in Extensions
  * CVE-2022-1138: Inappropriate implementation in Web Cursor
  * CVE-2022-1139: Inappropriate implementation in Background Fetch API
  * CVE-2022-1141: Use after free in File Manager
  * CVE-2022-1142: Heap buffer overflow in WebUI
  * CVE-2022-1143: Heap buffer overflow in WebUI
  * CVE-2022-1144: Use after free in WebUI
  * CVE-2022-1145: Use after free in Extensions
  * CVE-2022-1146: Inappropriate implementation in Resource Timing
- Added patches:
  * chromium-100-compiler.patch
  * chromium-100-GLImplementationParts-constexpr.patch
  * chromium-100-InMilliseconds-constexpr.patch
  * chromium-100-SCTHashdanceMetadata-move.patch
  * chromium-100-macro-typo.patch
- Removed patches:
  * chromium-98-compiler.patch
  * chromium-86-nearby-explicit.patch
  * chromium-glibc-2.34.patch
  * chromium-v8-missing-utility-include.patch
  * chromium-99-AutofillAssistantModelExecutor-NoDestructor.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1649160000">- Chromium 100.0.4896.75:
  * CVE-2022-1232: Type Confusion in V8 (boo#1198053)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1649592000">- Patches for GCC 12:
  * chromium-fix-swiftshader-template.patch
  * chromium-missing-include-tuple.patch
  * chromium-webrtc-stats-missing-vector.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1649764800">- Chromium 100.0.4896.88 (boo#1198361)
  * CVE-2022-1305: Use after free in storage
  * CVE-2022-1306: Inappropriate implementation in compositing
  * CVE-2022-1307: Inappropriate implementation in full screen
  * CVE-2022-1308: Use after free in BFCache
  * CVE-2022-1309: Insufficient policy enforcement in developer tools
  * CVE-2022-1310: Use after free in regular expressions
  * CVE-2022-1311: Use after free in Chrome OS shell
  * CVE-2022-1312: Use after free in storage
  * CVE-2022-1313: Use after free in tab groups
  * CVE-2022-1314: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1650024000">- Chromium 100.0.4896.127 (boo#1198509)
  * CVE-2022-1364: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1650542400">- Fixes for go 1.18</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1651665600">- Chromium 101.0.4951.54 (boo#1199118)
- Chromium 101.0.4951.41 (boo#1198917)
  * CVE-2022-1477: Use after free in Vulkan
  * CVE-2022-1478: Use after free in SwiftShader
  * CVE-2022-1479: Use after free in ANGLE
  * CVE-2022-1480: Use after free in Device API
  * CVE-2022-1481: Use after free in Sharing
  * CVE-2022-1482: Inappropriate implementation in WebGL
  * CVE-2022-1483: Heap buffer overflow in WebGPU
  * CVE-2022-1484: Heap buffer overflow in Web UI Settings
  * CVE-2022-1485: Use after free in File System API
  * CVE-2022-1486: Type Confusion in V8
  * CVE-2022-1487: Use after free in Ozone
  * CVE-2022-1488: Inappropriate implementation in Extensions API
  * CVE-2022-1489: Out of bounds memory access in UI Shelf
  * CVE-2022-1490: Use after free in Browser Switcher
  * CVE-2022-1491: Use after free in Bookmarks
  * CVE-2022-1492: Insufficient data validation in Blink Editing
  * CVE-2022-1493: Use after free in Dev Tools
  * CVE-2022-1494: Insufficient data validation in Trusted Types
  * CVE-2022-1495: Incorrect security UI in Downloads
  * CVE-2022-1496: Use after free in File Manager
  * CVE-2022-1497: Inappropriate implementation in Input
  * CVE-2022-1498: Inappropriate implementation in HTML Parser
  * CVE-2022-1499: Inappropriate implementation in WebAuthentication
  * CVE-2022-1500: Insufficient data validation in Dev Tools
  * CVE-2022-1501: Inappropriate implementation in iframe
- Added patches:
  * chromium-101-libxml-unbundle.patch
  * chromium-101-segmentation_platform-type.patch
- Removed patches:
  * chromium-100-SCTHashdanceMetadata-move.patch
  * chromium-100-GLImplementationParts-constexpr.patch
  * chromium-100-macro-typo.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1652270400">- Chromium 101.0.4951.64 (boo#1199409)
  * CVE-2022-1633: Use after free in Sharesheet
  * CVE-2022-1634: Use after free in Browser UI
  * CVE-2022-1635: Use after free in Permission Prompts
  * CVE-2022-1636: Use after free in Performance APIs
  * CVE-2022-1637: Inappropriate implementation in Web Contents
  * CVE-2022-1638: Heap buffer overflow in V8 Internationalization
  * CVE-2022-1639: Use after free in ANGLE
  * CVE-2022-1640: Use after free in Sharing
  * CVE-2022-1641: Use after free in Web UI Diagnostics</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1652616000">- Chromium 101.0.4951.67
  * fixes for other platforms</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1653652800">- Chromium 102.0.5001.61 (boo#1199893)
  * CVE-2022-1853: Use after free in Indexed DB
  * CVE-2022-1854: Use after free in ANGLE
  * CVE-2022-1855: Use after free in Messaging
  * CVE-2022-1856: Use after free in User Education
  * CVE-2022-1857: Insufficient policy enforcement in File System API
  * CVE-2022-1858: Out of bounds read in DevTools
  * CVE-2022-1859: Use after free in Performance Manager
  * CVE-2022-1860: Use after free in UI Foundations
  * CVE-2022-1861: Use after free in Sharing
  * CVE-2022-1862: Inappropriate implementation in Extensions
  * CVE-2022-1863: Use after free in Tab Groups
  * CVE-2022-1864: Use after free in WebApp Installs
  * CVE-2022-1865: Use after free in Bookmarks
  * CVE-2022-1866: Use after free in Tablet Mode
  * CVE-2022-1867: Insufficient validation of untrusted input in Data Transfer
  * CVE-2022-1868: Inappropriate implementation in Extensions API
  * CVE-2022-1869: Type Confusion in V8
  * CVE-2022-1870: Use after free in App Service
  * CVE-2022-1871: Insufficient policy enforcement in File System API
  * CVE-2022-1872: Insufficient policy enforcement in Extensions API
  * CVE-2022-1873: Insufficient policy enforcement in COOP
  * CVE-2022-1874: Insufficient policy enforcement in Safe Browsing
  * CVE-2022-1875: Inappropriate implementation in PDF
  * CVE-2022-1876: Heap buffer overflow in DevTools
- Added patches:
  * chromium-102-compiler.patch
  * chromium-102-fenced_frame_utils-include.patch
  * chromium-102-regex_pattern-array.patch
  * chromium-102-swiftshader-template-instantiation.patch
  * chromium-102-symbolize-include.patch
  * ffmpeg-new-channel-layout.patch
- Removed patches:
  * chromium-100-compiler.patch
  * chromium-80-QuicStreamSendBuffer-deleted-move-constructor.patch
  * chromium-95-quiche-include.patch
  * chromium-fix-swiftshader-template.patch
  * chromium-missing-include-tuple.patch
  * chromium-webrtc-stats-missing-vector.patch
  * chromium-101-segmentation_platform-type.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654084800">- Disable ARM control flow integrity, it causes build issues
  at the moment
- Try a different SVG (black logo on GNOME)
- Removed patches:
  * chromium-third_party-symbolize-missing-include.patch
  (replaced by chromium-102-symbolize-include.patch)</changelog>
</package>
<package pkgid="7b3d7bea8643d9ca6d457a0c4ab6e0bb18e4f444058bd67b7181dd3e1182c737" name="chromedriver" arch="aarch64">
  <version epoch="0" ver="103.0.5060.114" rel="bp154.2.14.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1647432000">- Chromium 99.0.4844.74 (boo#1197163)
  * CVE-2022-0971: Use after free in Blink Layout
  * CVE-2022-0972: Use after free in Extensions
  * CVE-2022-0973: Use after free in Safe Browsing
  * CVE-2022-0974: Use after free in Splitscreen
  * CVE-2022-0975: Use after free in ANGLE
  * CVE-2022-0976: Heap buffer overflow in GPU
  * CVE-2022-0977: Use after free in Browser UI
  * CVE-2022-0978: Use after free in ANGLE
  * CVE-2022-0979: Use after free in Safe Browsing
  * CVE-2022-0980: Use after free in New Tab Page
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1647864000">- Chromium 99.0.4844.82:
  * Fix potential problem in Hangouts (boo#1197332)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1648296000">- Chromium 99.0.4844.84:
  * CVE-2022-1096: Type Confusion in V8 (boo#1197552)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1648555200">- Update disk constraints</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1648641600">- Chromium 100.0.4896.60 (boo#1197680)
  * CVE-2022-1125: Use after free in Portals
  * CVE-2022-1127: Use after free in QR Code Generator
  * CVE-2022-1128: Inappropriate implementation in Web Share API
  * CVE-2022-1129: Inappropriate implementation in Full Screen Mode
  * CVE-2022-1130: Insufficient validation of untrusted input in WebOTP
  * CVE-2022-1131: Use after free in Cast UI
  * CVE-2022-1132: Inappropriate implementation in Virtual Keyboard
  * CVE-2022-1133: Use after free in WebRTC
  * CVE-2022-1134: Type Confusion in V8
  * CVE-2022-1135: Use after free in Shopping Cart
  * CVE-2022-1136: Use after free in Tab Strip
  * CVE-2022-1137: Inappropriate implementation in Extensions
  * CVE-2022-1138: Inappropriate implementation in Web Cursor
  * CVE-2022-1139: Inappropriate implementation in Background Fetch API
  * CVE-2022-1141: Use after free in File Manager
  * CVE-2022-1142: Heap buffer overflow in WebUI
  * CVE-2022-1143: Heap buffer overflow in WebUI
  * CVE-2022-1144: Use after free in WebUI
  * CVE-2022-1145: Use after free in Extensions
  * CVE-2022-1146: Inappropriate implementation in Resource Timing
- Added patches:
  * chromium-100-compiler.patch
  * chromium-100-GLImplementationParts-constexpr.patch
  * chromium-100-InMilliseconds-constexpr.patch
  * chromium-100-SCTHashdanceMetadata-move.patch
  * chromium-100-macro-typo.patch
- Removed patches:
  * chromium-98-compiler.patch
  * chromium-86-nearby-explicit.patch
  * chromium-glibc-2.34.patch
  * chromium-v8-missing-utility-include.patch
  * chromium-99-AutofillAssistantModelExecutor-NoDestructor.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1649160000">- Chromium 100.0.4896.75:
  * CVE-2022-1232: Type Confusion in V8 (boo#1198053)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1649592000">- Patches for GCC 12:
  * chromium-fix-swiftshader-template.patch
  * chromium-missing-include-tuple.patch
  * chromium-webrtc-stats-missing-vector.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1649764800">- Chromium 100.0.4896.88 (boo#1198361)
  * CVE-2022-1305: Use after free in storage
  * CVE-2022-1306: Inappropriate implementation in compositing
  * CVE-2022-1307: Inappropriate implementation in full screen
  * CVE-2022-1308: Use after free in BFCache
  * CVE-2022-1309: Insufficient policy enforcement in developer tools
  * CVE-2022-1310: Use after free in regular expressions
  * CVE-2022-1311: Use after free in Chrome OS shell
  * CVE-2022-1312: Use after free in storage
  * CVE-2022-1313: Use after free in tab groups
  * CVE-2022-1314: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1650024000">- Chromium 100.0.4896.127 (boo#1198509)
  * CVE-2022-1364: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1650542400">- Fixes for go 1.18</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1651665600">- Chromium 101.0.4951.54 (boo#1199118)
- Chromium 101.0.4951.41 (boo#1198917)
  * CVE-2022-1477: Use after free in Vulkan
  * CVE-2022-1478: Use after free in SwiftShader
  * CVE-2022-1479: Use after free in ANGLE
  * CVE-2022-1480: Use after free in Device API
  * CVE-2022-1481: Use after free in Sharing
  * CVE-2022-1482: Inappropriate implementation in WebGL
  * CVE-2022-1483: Heap buffer overflow in WebGPU
  * CVE-2022-1484: Heap buffer overflow in Web UI Settings
  * CVE-2022-1485: Use after free in File System API
  * CVE-2022-1486: Type Confusion in V8
  * CVE-2022-1487: Use after free in Ozone
  * CVE-2022-1488: Inappropriate implementation in Extensions API
  * CVE-2022-1489: Out of bounds memory access in UI Shelf
  * CVE-2022-1490: Use after free in Browser Switcher
  * CVE-2022-1491: Use after free in Bookmarks
  * CVE-2022-1492: Insufficient data validation in Blink Editing
  * CVE-2022-1493: Use after free in Dev Tools
  * CVE-2022-1494: Insufficient data validation in Trusted Types
  * CVE-2022-1495: Incorrect security UI in Downloads
  * CVE-2022-1496: Use after free in File Manager
  * CVE-2022-1497: Inappropriate implementation in Input
  * CVE-2022-1498: Inappropriate implementation in HTML Parser
  * CVE-2022-1499: Inappropriate implementation in WebAuthentication
  * CVE-2022-1500: Insufficient data validation in Dev Tools
  * CVE-2022-1501: Inappropriate implementation in iframe
- Added patches:
  * chromium-101-libxml-unbundle.patch
  * chromium-101-segmentation_platform-type.patch
- Removed patches:
  * chromium-100-SCTHashdanceMetadata-move.patch
  * chromium-100-GLImplementationParts-constexpr.patch
  * chromium-100-macro-typo.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1652270400">- Chromium 101.0.4951.64 (boo#1199409)
  * CVE-2022-1633: Use after free in Sharesheet
  * CVE-2022-1634: Use after free in Browser UI
  * CVE-2022-1635: Use after free in Permission Prompts
  * CVE-2022-1636: Use after free in Performance APIs
  * CVE-2022-1637: Inappropriate implementation in Web Contents
  * CVE-2022-1638: Heap buffer overflow in V8 Internationalization
  * CVE-2022-1639: Use after free in ANGLE
  * CVE-2022-1640: Use after free in Sharing
  * CVE-2022-1641: Use after free in Web UI Diagnostics</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1652616000">- Chromium 101.0.4951.67
  * fixes for other platforms</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1653652800">- Chromium 102.0.5001.61 (boo#1199893)
  * CVE-2022-1853: Use after free in Indexed DB
  * CVE-2022-1854: Use after free in ANGLE
  * CVE-2022-1855: Use after free in Messaging
  * CVE-2022-1856: Use after free in User Education
  * CVE-2022-1857: Insufficient policy enforcement in File System API
  * CVE-2022-1858: Out of bounds read in DevTools
  * CVE-2022-1859: Use after free in Performance Manager
  * CVE-2022-1860: Use after free in UI Foundations
  * CVE-2022-1861: Use after free in Sharing
  * CVE-2022-1862: Inappropriate implementation in Extensions
  * CVE-2022-1863: Use after free in Tab Groups
  * CVE-2022-1864: Use after free in WebApp Installs
  * CVE-2022-1865: Use after free in Bookmarks
  * CVE-2022-1866: Use after free in Tablet Mode
  * CVE-2022-1867: Insufficient validation of untrusted input in Data Transfer
  * CVE-2022-1868: Inappropriate implementation in Extensions API
  * CVE-2022-1869: Type Confusion in V8
  * CVE-2022-1870: Use after free in App Service
  * CVE-2022-1871: Insufficient policy enforcement in File System API
  * CVE-2022-1872: Insufficient policy enforcement in Extensions API
  * CVE-2022-1873: Insufficient policy enforcement in COOP
  * CVE-2022-1874: Insufficient policy enforcement in Safe Browsing
  * CVE-2022-1875: Inappropriate implementation in PDF
  * CVE-2022-1876: Heap buffer overflow in DevTools
- Added patches:
  * chromium-102-compiler.patch
  * chromium-102-fenced_frame_utils-include.patch
  * chromium-102-regex_pattern-array.patch
  * chromium-102-swiftshader-template-instantiation.patch
  * chromium-102-symbolize-include.patch
  * ffmpeg-new-channel-layout.patch
- Removed patches:
  * chromium-100-compiler.patch
  * chromium-80-QuicStreamSendBuffer-deleted-move-constructor.patch
  * chromium-95-quiche-include.patch
  * chromium-fix-swiftshader-template.patch
  * chromium-missing-include-tuple.patch
  * chromium-webrtc-stats-missing-vector.patch
  * chromium-101-segmentation_platform-type.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654084800">- Disable ARM control flow integrity, it causes build issues
  at the moment
- Try a different SVG (black logo on GNOME)
- Removed patches:
  * chromium-third_party-symbolize-missing-include.patch
  (replaced by chromium-102-symbolize-include.patch)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654689600">- Switch to GTK4 on TW and Leap 15.4+ (boo#1200139)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1654862400">- Chromium 102.0.5005.115 (boo#1200423)
  * CVE-2022-2007: Use after free in WebGPU
  * CVE-2022-2008: Out of bounds memory access in WebGL
  * CVE-2022-2010: Out of bounds read in compositing
  * CVE-2022-2011: Use after free in ANGLE</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1656158400">- Chromium 103.0.5060.53 (boo#1200783)
  * CVE-2022-2156: Use after free in Base
  * CVE-2022-2157: Use after free in Interest groups
  * CVE-2022-2158: Type Confusion in V8
  * CVE-2022-2160: Insufficient policy enforcement in DevTools
  * CVE-2022-2161: Use after free in WebApp Provider
  * CVE-2022-2162: Insufficient policy enforcement in File System API
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * CVE-2022-2164: Inappropriate implementation in Extensions API
  * CVE-2022-2165: Insufficient data validation in URL formatting
- Added patches:
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-VirtualCursor-std-layout.patch
  * chromium-103-compiler.patch
- Removed patches:
  * chromium-102-compiler.patch
  * chromium-91-sql-standard-layout-type.patch
  * chromium-101-libxml-unbundle.patch
  * chromium-102-fenced_frame_utils-include.patch
  * chromium-102-swiftshader-template-instantiation.patch
  * chromium-102-symbolize-include.patch
  * chromium-97-arm-tflite-cast.patch
  * chromium-97-ScrollView-reference.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657195200">- Chromium 103.0.5060.66
  * no upstream release notes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657368000">- Chromium 103.0.5060.114 (boo#1201216)
  * CVE-2022-2294: Heap buffer overflow in WebRTC
  * CVE-2022-2295: Type Confusion in V8
  * CVE-2022-2296: Use after free in Chrome OS Shell</changelog>
</package>
<package pkgid="b9892b2fe1227e01d10de454c5265fb7e8bf153b0f3e04e373f247723ce31611" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="103.0.5060.114" rel="bp154.2.14.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1647432000">- Chromium 99.0.4844.74 (boo#1197163)
  * CVE-2022-0971: Use after free in Blink Layout
  * CVE-2022-0972: Use after free in Extensions
  * CVE-2022-0973: Use after free in Safe Browsing
  * CVE-2022-0974: Use after free in Splitscreen
  * CVE-2022-0975: Use after free in ANGLE
  * CVE-2022-0976: Heap buffer overflow in GPU
  * CVE-2022-0977: Use after free in Browser UI
  * CVE-2022-0978: Use after free in ANGLE
  * CVE-2022-0979: Use after free in Safe Browsing
  * CVE-2022-0980: Use after free in New Tab Page
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1647864000">- Chromium 99.0.4844.82:
  * Fix potential problem in Hangouts (boo#1197332)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1648296000">- Chromium 99.0.4844.84:
  * CVE-2022-1096: Type Confusion in V8 (boo#1197552)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1648555200">- Update disk constraints</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1648641600">- Chromium 100.0.4896.60 (boo#1197680)
  * CVE-2022-1125: Use after free in Portals
  * CVE-2022-1127: Use after free in QR Code Generator
  * CVE-2022-1128: Inappropriate implementation in Web Share API
  * CVE-2022-1129: Inappropriate implementation in Full Screen Mode
  * CVE-2022-1130: Insufficient validation of untrusted input in WebOTP
  * CVE-2022-1131: Use after free in Cast UI
  * CVE-2022-1132: Inappropriate implementation in Virtual Keyboard
  * CVE-2022-1133: Use after free in WebRTC
  * CVE-2022-1134: Type Confusion in V8
  * CVE-2022-1135: Use after free in Shopping Cart
  * CVE-2022-1136: Use after free in Tab Strip
  * CVE-2022-1137: Inappropriate implementation in Extensions
  * CVE-2022-1138: Inappropriate implementation in Web Cursor
  * CVE-2022-1139: Inappropriate implementation in Background Fetch API
  * CVE-2022-1141: Use after free in File Manager
  * CVE-2022-1142: Heap buffer overflow in WebUI
  * CVE-2022-1143: Heap buffer overflow in WebUI
  * CVE-2022-1144: Use after free in WebUI
  * CVE-2022-1145: Use after free in Extensions
  * CVE-2022-1146: Inappropriate implementation in Resource Timing
- Added patches:
  * chromium-100-compiler.patch
  * chromium-100-GLImplementationParts-constexpr.patch
  * chromium-100-InMilliseconds-constexpr.patch
  * chromium-100-SCTHashdanceMetadata-move.patch
  * chromium-100-macro-typo.patch
- Removed patches:
  * chromium-98-compiler.patch
  * chromium-86-nearby-explicit.patch
  * chromium-glibc-2.34.patch
  * chromium-v8-missing-utility-include.patch
  * chromium-99-AutofillAssistantModelExecutor-NoDestructor.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1649160000">- Chromium 100.0.4896.75:
  * CVE-2022-1232: Type Confusion in V8 (boo#1198053)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1649592000">- Patches for GCC 12:
  * chromium-fix-swiftshader-template.patch
  * chromium-missing-include-tuple.patch
  * chromium-webrtc-stats-missing-vector.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1649764800">- Chromium 100.0.4896.88 (boo#1198361)
  * CVE-2022-1305: Use after free in storage
  * CVE-2022-1306: Inappropriate implementation in compositing
  * CVE-2022-1307: Inappropriate implementation in full screen
  * CVE-2022-1308: Use after free in BFCache
  * CVE-2022-1309: Insufficient policy enforcement in developer tools
  * CVE-2022-1310: Use after free in regular expressions
  * CVE-2022-1311: Use after free in Chrome OS shell
  * CVE-2022-1312: Use after free in storage
  * CVE-2022-1313: Use after free in tab groups
  * CVE-2022-1314: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1650024000">- Chromium 100.0.4896.127 (boo#1198509)
  * CVE-2022-1364: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1650542400">- Fixes for go 1.18</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1651665600">- Chromium 101.0.4951.54 (boo#1199118)
- Chromium 101.0.4951.41 (boo#1198917)
  * CVE-2022-1477: Use after free in Vulkan
  * CVE-2022-1478: Use after free in SwiftShader
  * CVE-2022-1479: Use after free in ANGLE
  * CVE-2022-1480: Use after free in Device API
  * CVE-2022-1481: Use after free in Sharing
  * CVE-2022-1482: Inappropriate implementation in WebGL
  * CVE-2022-1483: Heap buffer overflow in WebGPU
  * CVE-2022-1484: Heap buffer overflow in Web UI Settings
  * CVE-2022-1485: Use after free in File System API
  * CVE-2022-1486: Type Confusion in V8
  * CVE-2022-1487: Use after free in Ozone
  * CVE-2022-1488: Inappropriate implementation in Extensions API
  * CVE-2022-1489: Out of bounds memory access in UI Shelf
  * CVE-2022-1490: Use after free in Browser Switcher
  * CVE-2022-1491: Use after free in Bookmarks
  * CVE-2022-1492: Insufficient data validation in Blink Editing
  * CVE-2022-1493: Use after free in Dev Tools
  * CVE-2022-1494: Insufficient data validation in Trusted Types
  * CVE-2022-1495: Incorrect security UI in Downloads
  * CVE-2022-1496: Use after free in File Manager
  * CVE-2022-1497: Inappropriate implementation in Input
  * CVE-2022-1498: Inappropriate implementation in HTML Parser
  * CVE-2022-1499: Inappropriate implementation in WebAuthentication
  * CVE-2022-1500: Insufficient data validation in Dev Tools
  * CVE-2022-1501: Inappropriate implementation in iframe
- Added patches:
  * chromium-101-libxml-unbundle.patch
  * chromium-101-segmentation_platform-type.patch
- Removed patches:
  * chromium-100-SCTHashdanceMetadata-move.patch
  * chromium-100-GLImplementationParts-constexpr.patch
  * chromium-100-macro-typo.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1652270400">- Chromium 101.0.4951.64 (boo#1199409)
  * CVE-2022-1633: Use after free in Sharesheet
  * CVE-2022-1634: Use after free in Browser UI
  * CVE-2022-1635: Use after free in Permission Prompts
  * CVE-2022-1636: Use after free in Performance APIs
  * CVE-2022-1637: Inappropriate implementation in Web Contents
  * CVE-2022-1638: Heap buffer overflow in V8 Internationalization
  * CVE-2022-1639: Use after free in ANGLE
  * CVE-2022-1640: Use after free in Sharing
  * CVE-2022-1641: Use after free in Web UI Diagnostics</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1652616000">- Chromium 101.0.4951.67
  * fixes for other platforms</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1653652800">- Chromium 102.0.5001.61 (boo#1199893)
  * CVE-2022-1853: Use after free in Indexed DB
  * CVE-2022-1854: Use after free in ANGLE
  * CVE-2022-1855: Use after free in Messaging
  * CVE-2022-1856: Use after free in User Education
  * CVE-2022-1857: Insufficient policy enforcement in File System API
  * CVE-2022-1858: Out of bounds read in DevTools
  * CVE-2022-1859: Use after free in Performance Manager
  * CVE-2022-1860: Use after free in UI Foundations
  * CVE-2022-1861: Use after free in Sharing
  * CVE-2022-1862: Inappropriate implementation in Extensions
  * CVE-2022-1863: Use after free in Tab Groups
  * CVE-2022-1864: Use after free in WebApp Installs
  * CVE-2022-1865: Use after free in Bookmarks
  * CVE-2022-1866: Use after free in Tablet Mode
  * CVE-2022-1867: Insufficient validation of untrusted input in Data Transfer
  * CVE-2022-1868: Inappropriate implementation in Extensions API
  * CVE-2022-1869: Type Confusion in V8
  * CVE-2022-1870: Use after free in App Service
  * CVE-2022-1871: Insufficient policy enforcement in File System API
  * CVE-2022-1872: Insufficient policy enforcement in Extensions API
  * CVE-2022-1873: Insufficient policy enforcement in COOP
  * CVE-2022-1874: Insufficient policy enforcement in Safe Browsing
  * CVE-2022-1875: Inappropriate implementation in PDF
  * CVE-2022-1876: Heap buffer overflow in DevTools
- Added patches:
  * chromium-102-compiler.patch
  * chromium-102-fenced_frame_utils-include.patch
  * chromium-102-regex_pattern-array.patch
  * chromium-102-swiftshader-template-instantiation.patch
  * chromium-102-symbolize-include.patch
  * ffmpeg-new-channel-layout.patch
- Removed patches:
  * chromium-100-compiler.patch
  * chromium-80-QuicStreamSendBuffer-deleted-move-constructor.patch
  * chromium-95-quiche-include.patch
  * chromium-fix-swiftshader-template.patch
  * chromium-missing-include-tuple.patch
  * chromium-webrtc-stats-missing-vector.patch
  * chromium-101-segmentation_platform-type.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654084800">- Disable ARM control flow integrity, it causes build issues
  at the moment
- Try a different SVG (black logo on GNOME)
- Removed patches:
  * chromium-third_party-symbolize-missing-include.patch
  (replaced by chromium-102-symbolize-include.patch)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654689600">- Switch to GTK4 on TW and Leap 15.4+ (boo#1200139)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1654862400">- Chromium 102.0.5005.115 (boo#1200423)
  * CVE-2022-2007: Use after free in WebGPU
  * CVE-2022-2008: Out of bounds memory access in WebGL
  * CVE-2022-2010: Out of bounds read in compositing
  * CVE-2022-2011: Use after free in ANGLE</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1656158400">- Chromium 103.0.5060.53 (boo#1200783)
  * CVE-2022-2156: Use after free in Base
  * CVE-2022-2157: Use after free in Interest groups
  * CVE-2022-2158: Type Confusion in V8
  * CVE-2022-2160: Insufficient policy enforcement in DevTools
  * CVE-2022-2161: Use after free in WebApp Provider
  * CVE-2022-2162: Insufficient policy enforcement in File System API
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * CVE-2022-2164: Inappropriate implementation in Extensions API
  * CVE-2022-2165: Insufficient data validation in URL formatting
- Added patches:
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-VirtualCursor-std-layout.patch
  * chromium-103-compiler.patch
- Removed patches:
  * chromium-102-compiler.patch
  * chromium-91-sql-standard-layout-type.patch
  * chromium-101-libxml-unbundle.patch
  * chromium-102-fenced_frame_utils-include.patch
  * chromium-102-swiftshader-template-instantiation.patch
  * chromium-102-symbolize-include.patch
  * chromium-97-arm-tflite-cast.patch
  * chromium-97-ScrollView-reference.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657195200">- Chromium 103.0.5060.66
  * no upstream release notes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657368000">- Chromium 103.0.5060.114 (boo#1201216)
  * CVE-2022-2294: Heap buffer overflow in WebRTC
  * CVE-2022-2295: Type Confusion in V8
  * CVE-2022-2296: Use after free in Chrome OS Shell</changelog>
</package>
<package pkgid="7ee27e0ed377522918e4c6bfa434e6236a3b2dec062bc4a66233db2955da2a7d" name="chromedriver" arch="aarch64">
  <version epoch="0" ver="103.0.5060.134" rel="bp154.2.17.2"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1647864000">- Chromium 99.0.4844.82:
  * Fix potential problem in Hangouts (boo#1197332)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1648296000">- Chromium 99.0.4844.84:
  * CVE-2022-1096: Type Confusion in V8 (boo#1197552)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1648555200">- Update disk constraints</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1648641600">- Chromium 100.0.4896.60 (boo#1197680)
  * CVE-2022-1125: Use after free in Portals
  * CVE-2022-1127: Use after free in QR Code Generator
  * CVE-2022-1128: Inappropriate implementation in Web Share API
  * CVE-2022-1129: Inappropriate implementation in Full Screen Mode
  * CVE-2022-1130: Insufficient validation of untrusted input in WebOTP
  * CVE-2022-1131: Use after free in Cast UI
  * CVE-2022-1132: Inappropriate implementation in Virtual Keyboard
  * CVE-2022-1133: Use after free in WebRTC
  * CVE-2022-1134: Type Confusion in V8
  * CVE-2022-1135: Use after free in Shopping Cart
  * CVE-2022-1136: Use after free in Tab Strip
  * CVE-2022-1137: Inappropriate implementation in Extensions
  * CVE-2022-1138: Inappropriate implementation in Web Cursor
  * CVE-2022-1139: Inappropriate implementation in Background Fetch API
  * CVE-2022-1141: Use after free in File Manager
  * CVE-2022-1142: Heap buffer overflow in WebUI
  * CVE-2022-1143: Heap buffer overflow in WebUI
  * CVE-2022-1144: Use after free in WebUI
  * CVE-2022-1145: Use after free in Extensions
  * CVE-2022-1146: Inappropriate implementation in Resource Timing
- Added patches:
  * chromium-100-compiler.patch
  * chromium-100-GLImplementationParts-constexpr.patch
  * chromium-100-InMilliseconds-constexpr.patch
  * chromium-100-SCTHashdanceMetadata-move.patch
  * chromium-100-macro-typo.patch
- Removed patches:
  * chromium-98-compiler.patch
  * chromium-86-nearby-explicit.patch
  * chromium-glibc-2.34.patch
  * chromium-v8-missing-utility-include.patch
  * chromium-99-AutofillAssistantModelExecutor-NoDestructor.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1649160000">- Chromium 100.0.4896.75:
  * CVE-2022-1232: Type Confusion in V8 (boo#1198053)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1649592000">- Patches for GCC 12:
  * chromium-fix-swiftshader-template.patch
  * chromium-missing-include-tuple.patch
  * chromium-webrtc-stats-missing-vector.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1649764800">- Chromium 100.0.4896.88 (boo#1198361)
  * CVE-2022-1305: Use after free in storage
  * CVE-2022-1306: Inappropriate implementation in compositing
  * CVE-2022-1307: Inappropriate implementation in full screen
  * CVE-2022-1308: Use after free in BFCache
  * CVE-2022-1309: Insufficient policy enforcement in developer tools
  * CVE-2022-1310: Use after free in regular expressions
  * CVE-2022-1311: Use after free in Chrome OS shell
  * CVE-2022-1312: Use after free in storage
  * CVE-2022-1313: Use after free in tab groups
  * CVE-2022-1314: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1650024000">- Chromium 100.0.4896.127 (boo#1198509)
  * CVE-2022-1364: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1650542400">- Fixes for go 1.18</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1651665600">- Chromium 101.0.4951.54 (boo#1199118)
- Chromium 101.0.4951.41 (boo#1198917)
  * CVE-2022-1477: Use after free in Vulkan
  * CVE-2022-1478: Use after free in SwiftShader
  * CVE-2022-1479: Use after free in ANGLE
  * CVE-2022-1480: Use after free in Device API
  * CVE-2022-1481: Use after free in Sharing
  * CVE-2022-1482: Inappropriate implementation in WebGL
  * CVE-2022-1483: Heap buffer overflow in WebGPU
  * CVE-2022-1484: Heap buffer overflow in Web UI Settings
  * CVE-2022-1485: Use after free in File System API
  * CVE-2022-1486: Type Confusion in V8
  * CVE-2022-1487: Use after free in Ozone
  * CVE-2022-1488: Inappropriate implementation in Extensions API
  * CVE-2022-1489: Out of bounds memory access in UI Shelf
  * CVE-2022-1490: Use after free in Browser Switcher
  * CVE-2022-1491: Use after free in Bookmarks
  * CVE-2022-1492: Insufficient data validation in Blink Editing
  * CVE-2022-1493: Use after free in Dev Tools
  * CVE-2022-1494: Insufficient data validation in Trusted Types
  * CVE-2022-1495: Incorrect security UI in Downloads
  * CVE-2022-1496: Use after free in File Manager
  * CVE-2022-1497: Inappropriate implementation in Input
  * CVE-2022-1498: Inappropriate implementation in HTML Parser
  * CVE-2022-1499: Inappropriate implementation in WebAuthentication
  * CVE-2022-1500: Insufficient data validation in Dev Tools
  * CVE-2022-1501: Inappropriate implementation in iframe
- Added patches:
  * chromium-101-libxml-unbundle.patch
  * chromium-101-segmentation_platform-type.patch
- Removed patches:
  * chromium-100-SCTHashdanceMetadata-move.patch
  * chromium-100-GLImplementationParts-constexpr.patch
  * chromium-100-macro-typo.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1652270400">- Chromium 101.0.4951.64 (boo#1199409)
  * CVE-2022-1633: Use after free in Sharesheet
  * CVE-2022-1634: Use after free in Browser UI
  * CVE-2022-1635: Use after free in Permission Prompts
  * CVE-2022-1636: Use after free in Performance APIs
  * CVE-2022-1637: Inappropriate implementation in Web Contents
  * CVE-2022-1638: Heap buffer overflow in V8 Internationalization
  * CVE-2022-1639: Use after free in ANGLE
  * CVE-2022-1640: Use after free in Sharing
  * CVE-2022-1641: Use after free in Web UI Diagnostics</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1652616000">- Chromium 101.0.4951.67
  * fixes for other platforms</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1653652800">- Chromium 102.0.5001.61 (boo#1199893)
  * CVE-2022-1853: Use after free in Indexed DB
  * CVE-2022-1854: Use after free in ANGLE
  * CVE-2022-1855: Use after free in Messaging
  * CVE-2022-1856: Use after free in User Education
  * CVE-2022-1857: Insufficient policy enforcement in File System API
  * CVE-2022-1858: Out of bounds read in DevTools
  * CVE-2022-1859: Use after free in Performance Manager
  * CVE-2022-1860: Use after free in UI Foundations
  * CVE-2022-1861: Use after free in Sharing
  * CVE-2022-1862: Inappropriate implementation in Extensions
  * CVE-2022-1863: Use after free in Tab Groups
  * CVE-2022-1864: Use after free in WebApp Installs
  * CVE-2022-1865: Use after free in Bookmarks
  * CVE-2022-1866: Use after free in Tablet Mode
  * CVE-2022-1867: Insufficient validation of untrusted input in Data Transfer
  * CVE-2022-1868: Inappropriate implementation in Extensions API
  * CVE-2022-1869: Type Confusion in V8
  * CVE-2022-1870: Use after free in App Service
  * CVE-2022-1871: Insufficient policy enforcement in File System API
  * CVE-2022-1872: Insufficient policy enforcement in Extensions API
  * CVE-2022-1873: Insufficient policy enforcement in COOP
  * CVE-2022-1874: Insufficient policy enforcement in Safe Browsing
  * CVE-2022-1875: Inappropriate implementation in PDF
  * CVE-2022-1876: Heap buffer overflow in DevTools
- Added patches:
  * chromium-102-compiler.patch
  * chromium-102-fenced_frame_utils-include.patch
  * chromium-102-regex_pattern-array.patch
  * chromium-102-swiftshader-template-instantiation.patch
  * chromium-102-symbolize-include.patch
  * ffmpeg-new-channel-layout.patch
- Removed patches:
  * chromium-100-compiler.patch
  * chromium-80-QuicStreamSendBuffer-deleted-move-constructor.patch
  * chromium-95-quiche-include.patch
  * chromium-fix-swiftshader-template.patch
  * chromium-missing-include-tuple.patch
  * chromium-webrtc-stats-missing-vector.patch
  * chromium-101-segmentation_platform-type.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654084800">- Disable ARM control flow integrity, it causes build issues
  at the moment
- Try a different SVG (black logo on GNOME)
- Removed patches:
  * chromium-third_party-symbolize-missing-include.patch
  (replaced by chromium-102-symbolize-include.patch)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654689600">- Switch to GTK4 on TW and Leap 15.4+ (boo#1200139)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1654862400">- Chromium 102.0.5005.115 (boo#1200423)
  * CVE-2022-2007: Use after free in WebGPU
  * CVE-2022-2008: Out of bounds memory access in WebGL
  * CVE-2022-2010: Out of bounds read in compositing
  * CVE-2022-2011: Use after free in ANGLE</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1656158400">- Chromium 103.0.5060.53 (boo#1200783)
  * CVE-2022-2156: Use after free in Base
  * CVE-2022-2157: Use after free in Interest groups
  * CVE-2022-2158: Type Confusion in V8
  * CVE-2022-2160: Insufficient policy enforcement in DevTools
  * CVE-2022-2161: Use after free in WebApp Provider
  * CVE-2022-2162: Insufficient policy enforcement in File System API
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * CVE-2022-2164: Inappropriate implementation in Extensions API
  * CVE-2022-2165: Insufficient data validation in URL formatting
- Added patches:
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-VirtualCursor-std-layout.patch
  * chromium-103-compiler.patch
- Removed patches:
  * chromium-102-compiler.patch
  * chromium-91-sql-standard-layout-type.patch
  * chromium-101-libxml-unbundle.patch
  * chromium-102-fenced_frame_utils-include.patch
  * chromium-102-swiftshader-template-instantiation.patch
  * chromium-102-symbolize-include.patch
  * chromium-97-arm-tflite-cast.patch
  * chromium-97-ScrollView-reference.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657195200">- Chromium 103.0.5060.66
  * no upstream release notes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657368000">- Chromium 103.0.5060.114 (boo#1201216)
  * CVE-2022-2294: Heap buffer overflow in WebRTC
  * CVE-2022-2295: Type Confusion in V8
  * CVE-2022-2296: Use after free in Chrome OS Shell</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1658318400">- Chromium 103.0.5060.134 (boo#1201679):
  * CVE-2022-2477 : Use after free in Guest View
  * CVE-2022-2478 : Use after free in PDF
  * CVE-2022-2479 : Insufficient validation of untrusted input in File
  * CVE-2022-2480 : Use after free in Service Worker API
  * CVE-2022-2481: Use after free in Views
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
</package>
<package pkgid="1fbd82d1b1d5273bfe8fb1d2781595faa0d6ea4b983a38cdcbefdc1ca337372d" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="103.0.5060.134" rel="bp154.2.17.2"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1647864000">- Chromium 99.0.4844.82:
  * Fix potential problem in Hangouts (boo#1197332)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1648296000">- Chromium 99.0.4844.84:
  * CVE-2022-1096: Type Confusion in V8 (boo#1197552)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1648555200">- Update disk constraints</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1648641600">- Chromium 100.0.4896.60 (boo#1197680)
  * CVE-2022-1125: Use after free in Portals
  * CVE-2022-1127: Use after free in QR Code Generator
  * CVE-2022-1128: Inappropriate implementation in Web Share API
  * CVE-2022-1129: Inappropriate implementation in Full Screen Mode
  * CVE-2022-1130: Insufficient validation of untrusted input in WebOTP
  * CVE-2022-1131: Use after free in Cast UI
  * CVE-2022-1132: Inappropriate implementation in Virtual Keyboard
  * CVE-2022-1133: Use after free in WebRTC
  * CVE-2022-1134: Type Confusion in V8
  * CVE-2022-1135: Use after free in Shopping Cart
  * CVE-2022-1136: Use after free in Tab Strip
  * CVE-2022-1137: Inappropriate implementation in Extensions
  * CVE-2022-1138: Inappropriate implementation in Web Cursor
  * CVE-2022-1139: Inappropriate implementation in Background Fetch API
  * CVE-2022-1141: Use after free in File Manager
  * CVE-2022-1142: Heap buffer overflow in WebUI
  * CVE-2022-1143: Heap buffer overflow in WebUI
  * CVE-2022-1144: Use after free in WebUI
  * CVE-2022-1145: Use after free in Extensions
  * CVE-2022-1146: Inappropriate implementation in Resource Timing
- Added patches:
  * chromium-100-compiler.patch
  * chromium-100-GLImplementationParts-constexpr.patch
  * chromium-100-InMilliseconds-constexpr.patch
  * chromium-100-SCTHashdanceMetadata-move.patch
  * chromium-100-macro-typo.patch
- Removed patches:
  * chromium-98-compiler.patch
  * chromium-86-nearby-explicit.patch
  * chromium-glibc-2.34.patch
  * chromium-v8-missing-utility-include.patch
  * chromium-99-AutofillAssistantModelExecutor-NoDestructor.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1649160000">- Chromium 100.0.4896.75:
  * CVE-2022-1232: Type Confusion in V8 (boo#1198053)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1649592000">- Patches for GCC 12:
  * chromium-fix-swiftshader-template.patch
  * chromium-missing-include-tuple.patch
  * chromium-webrtc-stats-missing-vector.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1649764800">- Chromium 100.0.4896.88 (boo#1198361)
  * CVE-2022-1305: Use after free in storage
  * CVE-2022-1306: Inappropriate implementation in compositing
  * CVE-2022-1307: Inappropriate implementation in full screen
  * CVE-2022-1308: Use after free in BFCache
  * CVE-2022-1309: Insufficient policy enforcement in developer tools
  * CVE-2022-1310: Use after free in regular expressions
  * CVE-2022-1311: Use after free in Chrome OS shell
  * CVE-2022-1312: Use after free in storage
  * CVE-2022-1313: Use after free in tab groups
  * CVE-2022-1314: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1650024000">- Chromium 100.0.4896.127 (boo#1198509)
  * CVE-2022-1364: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1650542400">- Fixes for go 1.18</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1651665600">- Chromium 101.0.4951.54 (boo#1199118)
- Chromium 101.0.4951.41 (boo#1198917)
  * CVE-2022-1477: Use after free in Vulkan
  * CVE-2022-1478: Use after free in SwiftShader
  * CVE-2022-1479: Use after free in ANGLE
  * CVE-2022-1480: Use after free in Device API
  * CVE-2022-1481: Use after free in Sharing
  * CVE-2022-1482: Inappropriate implementation in WebGL
  * CVE-2022-1483: Heap buffer overflow in WebGPU
  * CVE-2022-1484: Heap buffer overflow in Web UI Settings
  * CVE-2022-1485: Use after free in File System API
  * CVE-2022-1486: Type Confusion in V8
  * CVE-2022-1487: Use after free in Ozone
  * CVE-2022-1488: Inappropriate implementation in Extensions API
  * CVE-2022-1489: Out of bounds memory access in UI Shelf
  * CVE-2022-1490: Use after free in Browser Switcher
  * CVE-2022-1491: Use after free in Bookmarks
  * CVE-2022-1492: Insufficient data validation in Blink Editing
  * CVE-2022-1493: Use after free in Dev Tools
  * CVE-2022-1494: Insufficient data validation in Trusted Types
  * CVE-2022-1495: Incorrect security UI in Downloads
  * CVE-2022-1496: Use after free in File Manager
  * CVE-2022-1497: Inappropriate implementation in Input
  * CVE-2022-1498: Inappropriate implementation in HTML Parser
  * CVE-2022-1499: Inappropriate implementation in WebAuthentication
  * CVE-2022-1500: Insufficient data validation in Dev Tools
  * CVE-2022-1501: Inappropriate implementation in iframe
- Added patches:
  * chromium-101-libxml-unbundle.patch
  * chromium-101-segmentation_platform-type.patch
- Removed patches:
  * chromium-100-SCTHashdanceMetadata-move.patch
  * chromium-100-GLImplementationParts-constexpr.patch
  * chromium-100-macro-typo.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1652270400">- Chromium 101.0.4951.64 (boo#1199409)
  * CVE-2022-1633: Use after free in Sharesheet
  * CVE-2022-1634: Use after free in Browser UI
  * CVE-2022-1635: Use after free in Permission Prompts
  * CVE-2022-1636: Use after free in Performance APIs
  * CVE-2022-1637: Inappropriate implementation in Web Contents
  * CVE-2022-1638: Heap buffer overflow in V8 Internationalization
  * CVE-2022-1639: Use after free in ANGLE
  * CVE-2022-1640: Use after free in Sharing
  * CVE-2022-1641: Use after free in Web UI Diagnostics</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1652616000">- Chromium 101.0.4951.67
  * fixes for other platforms</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1653652800">- Chromium 102.0.5001.61 (boo#1199893)
  * CVE-2022-1853: Use after free in Indexed DB
  * CVE-2022-1854: Use after free in ANGLE
  * CVE-2022-1855: Use after free in Messaging
  * CVE-2022-1856: Use after free in User Education
  * CVE-2022-1857: Insufficient policy enforcement in File System API
  * CVE-2022-1858: Out of bounds read in DevTools
  * CVE-2022-1859: Use after free in Performance Manager
  * CVE-2022-1860: Use after free in UI Foundations
  * CVE-2022-1861: Use after free in Sharing
  * CVE-2022-1862: Inappropriate implementation in Extensions
  * CVE-2022-1863: Use after free in Tab Groups
  * CVE-2022-1864: Use after free in WebApp Installs
  * CVE-2022-1865: Use after free in Bookmarks
  * CVE-2022-1866: Use after free in Tablet Mode
  * CVE-2022-1867: Insufficient validation of untrusted input in Data Transfer
  * CVE-2022-1868: Inappropriate implementation in Extensions API
  * CVE-2022-1869: Type Confusion in V8
  * CVE-2022-1870: Use after free in App Service
  * CVE-2022-1871: Insufficient policy enforcement in File System API
  * CVE-2022-1872: Insufficient policy enforcement in Extensions API
  * CVE-2022-1873: Insufficient policy enforcement in COOP
  * CVE-2022-1874: Insufficient policy enforcement in Safe Browsing
  * CVE-2022-1875: Inappropriate implementation in PDF
  * CVE-2022-1876: Heap buffer overflow in DevTools
- Added patches:
  * chromium-102-compiler.patch
  * chromium-102-fenced_frame_utils-include.patch
  * chromium-102-regex_pattern-array.patch
  * chromium-102-swiftshader-template-instantiation.patch
  * chromium-102-symbolize-include.patch
  * ffmpeg-new-channel-layout.patch
- Removed patches:
  * chromium-100-compiler.patch
  * chromium-80-QuicStreamSendBuffer-deleted-move-constructor.patch
  * chromium-95-quiche-include.patch
  * chromium-fix-swiftshader-template.patch
  * chromium-missing-include-tuple.patch
  * chromium-webrtc-stats-missing-vector.patch
  * chromium-101-segmentation_platform-type.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654084800">- Disable ARM control flow integrity, it causes build issues
  at the moment
- Try a different SVG (black logo on GNOME)
- Removed patches:
  * chromium-third_party-symbolize-missing-include.patch
  (replaced by chromium-102-symbolize-include.patch)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654689600">- Switch to GTK4 on TW and Leap 15.4+ (boo#1200139)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1654862400">- Chromium 102.0.5005.115 (boo#1200423)
  * CVE-2022-2007: Use after free in WebGPU
  * CVE-2022-2008: Out of bounds memory access in WebGL
  * CVE-2022-2010: Out of bounds read in compositing
  * CVE-2022-2011: Use after free in ANGLE</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1656158400">- Chromium 103.0.5060.53 (boo#1200783)
  * CVE-2022-2156: Use after free in Base
  * CVE-2022-2157: Use after free in Interest groups
  * CVE-2022-2158: Type Confusion in V8
  * CVE-2022-2160: Insufficient policy enforcement in DevTools
  * CVE-2022-2161: Use after free in WebApp Provider
  * CVE-2022-2162: Insufficient policy enforcement in File System API
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * CVE-2022-2164: Inappropriate implementation in Extensions API
  * CVE-2022-2165: Insufficient data validation in URL formatting
- Added patches:
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-VirtualCursor-std-layout.patch
  * chromium-103-compiler.patch
- Removed patches:
  * chromium-102-compiler.patch
  * chromium-91-sql-standard-layout-type.patch
  * chromium-101-libxml-unbundle.patch
  * chromium-102-fenced_frame_utils-include.patch
  * chromium-102-swiftshader-template-instantiation.patch
  * chromium-102-symbolize-include.patch
  * chromium-97-arm-tflite-cast.patch
  * chromium-97-ScrollView-reference.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657195200">- Chromium 103.0.5060.66
  * no upstream release notes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657368000">- Chromium 103.0.5060.114 (boo#1201216)
  * CVE-2022-2294: Heap buffer overflow in WebRTC
  * CVE-2022-2295: Type Confusion in V8
  * CVE-2022-2296: Use after free in Chrome OS Shell</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1658318400">- Chromium 103.0.5060.134 (boo#1201679):
  * CVE-2022-2477 : Use after free in Guest View
  * CVE-2022-2478 : Use after free in PDF
  * CVE-2022-2479 : Insufficient validation of untrusted input in File
  * CVE-2022-2480 : Use after free in Service Worker API
  * CVE-2022-2481: Use after free in Views
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
</package>
<package pkgid="1a26e2c6cd5332f6d1e44780a137e496d71e2316b982fe712fcaccac38012790" name="chromedriver" arch="aarch64">
  <version epoch="0" ver="103.0.5060.53" rel="bp154.2.11.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1644926400">- Chromium 98.0.4758.102 (boo#1195986)
  * CVE-2022-0603: Use after free in File Manager
  * CVE-2022-0604: Heap buffer overflow in Tab Groups
  * CVE-2022-0605: Use after free in Webstore API
  * CVE-2022-0606: Use after free in ANGLE
  * CVE-2022-0607: Use after free in GPU
  * CVE-2022-0608: Integer overflow in Mojo
  * CVE-2022-0609: Use after free in Animation
  * CVE-2022-0610: Inappropriate implementation in Gamepad API
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1646395200">- Chromium 99.0.4844.51 (boo#1196641)
  * CVE-2022-0789: Heap buffer overflow in ANGLE
  * CVE-2022-0790: Use after free in Cast UI
  * CVE-2022-0791: Use after free in Omnibox
  * CVE-2022-0792: Out of bounds read in ANGLE
  * CVE-2022-0793: Use after free in Views
  * CVE-2022-0794: Use after free in WebShare
  * CVE-2022-0795: Type Confusion in Blink Layout
  * CVE-2022-0796: Use after free in Media
  * CVE-2022-0797: Out of bounds memory access in Mojo
  * CVE-2022-0798: Use after free in MediaStream
  * CVE-2022-0799: Insufficient policy enforcement in Installer
  * CVE-2022-0800: Heap buffer overflow in Cast UI
  * CVE-2022-0801: Inappropriate implementation in HTML parser
  * CVE-2022-0802: Inappropriate implementation in Full screen mode
  * CVE-2022-0803: Inappropriate implementation in Permissions
  * CVE-2022-0804: Inappropriate implementation in Full screen mode
  * CVE-2022-0805: Use after free in Browser Switcher
  * CVE-2022-0806: Data leak in Canvas
  * CVE-2022-0807: Inappropriate implementation in Autofill
  * CVE-2022-0808: Use after free in Chrome OS Shell
  * CVE-2022-0809: Out of bounds memory access in WebXR
- Removed patches:
  * chromium-96-EnumTable-crash.patch
  * chromium-89-missing-cstring-header.patch
  * chromium-95-libyuv-aarch64.patch
  * chromium-95-libyuv-arm.patch
  * chromium-98-MiraclePtr-gcc-ice.patch
  * chromium-98-WaylandFrameManager-check.patch
- Added patches:
  * chromium-97-arm-tflite-cast.patch
  * chromium-98-gtk4-build.patch
  * chromium-99-AutofillAssistantModelExecutor-NoDestructor.patch
  * chromium-98-EnumTable-crash.patch
  * chromium-third_party-symbolize-missing-include.patch
  * chromium-v8-missing-utility-include.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1647432000">- Chromium 99.0.4844.74 (boo#1197163)
  * CVE-2022-0971: Use after free in Blink Layout
  * CVE-2022-0972: Use after free in Extensions
  * CVE-2022-0973: Use after free in Safe Browsing
  * CVE-2022-0974: Use after free in Splitscreen
  * CVE-2022-0975: Use after free in ANGLE
  * CVE-2022-0976: Heap buffer overflow in GPU
  * CVE-2022-0977: Use after free in Browser UI
  * CVE-2022-0978: Use after free in ANGLE
  * CVE-2022-0979: Use after free in Safe Browsing
  * CVE-2022-0980: Use after free in New Tab Page
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1647864000">- Chromium 99.0.4844.82:
  * Fix potential problem in Hangouts (boo#1197332)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1648296000">- Chromium 99.0.4844.84:
  * CVE-2022-1096: Type Confusion in V8 (boo#1197552)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1648555200">- Update disk constraints</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1648641600">- Chromium 100.0.4896.60 (boo#1197680)
  * CVE-2022-1125: Use after free in Portals
  * CVE-2022-1127: Use after free in QR Code Generator
  * CVE-2022-1128: Inappropriate implementation in Web Share API
  * CVE-2022-1129: Inappropriate implementation in Full Screen Mode
  * CVE-2022-1130: Insufficient validation of untrusted input in WebOTP
  * CVE-2022-1131: Use after free in Cast UI
  * CVE-2022-1132: Inappropriate implementation in Virtual Keyboard
  * CVE-2022-1133: Use after free in WebRTC
  * CVE-2022-1134: Type Confusion in V8
  * CVE-2022-1135: Use after free in Shopping Cart
  * CVE-2022-1136: Use after free in Tab Strip
  * CVE-2022-1137: Inappropriate implementation in Extensions
  * CVE-2022-1138: Inappropriate implementation in Web Cursor
  * CVE-2022-1139: Inappropriate implementation in Background Fetch API
  * CVE-2022-1141: Use after free in File Manager
  * CVE-2022-1142: Heap buffer overflow in WebUI
  * CVE-2022-1143: Heap buffer overflow in WebUI
  * CVE-2022-1144: Use after free in WebUI
  * CVE-2022-1145: Use after free in Extensions
  * CVE-2022-1146: Inappropriate implementation in Resource Timing
- Added patches:
  * chromium-100-compiler.patch
  * chromium-100-GLImplementationParts-constexpr.patch
  * chromium-100-InMilliseconds-constexpr.patch
  * chromium-100-SCTHashdanceMetadata-move.patch
  * chromium-100-macro-typo.patch
- Removed patches:
  * chromium-98-compiler.patch
  * chromium-86-nearby-explicit.patch
  * chromium-glibc-2.34.patch
  * chromium-v8-missing-utility-include.patch
  * chromium-99-AutofillAssistantModelExecutor-NoDestructor.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1649160000">- Chromium 100.0.4896.75:
  * CVE-2022-1232: Type Confusion in V8 (boo#1198053)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1649592000">- Patches for GCC 12:
  * chromium-fix-swiftshader-template.patch
  * chromium-missing-include-tuple.patch
  * chromium-webrtc-stats-missing-vector.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1649764800">- Chromium 100.0.4896.88 (boo#1198361)
  * CVE-2022-1305: Use after free in storage
  * CVE-2022-1306: Inappropriate implementation in compositing
  * CVE-2022-1307: Inappropriate implementation in full screen
  * CVE-2022-1308: Use after free in BFCache
  * CVE-2022-1309: Insufficient policy enforcement in developer tools
  * CVE-2022-1310: Use after free in regular expressions
  * CVE-2022-1311: Use after free in Chrome OS shell
  * CVE-2022-1312: Use after free in storage
  * CVE-2022-1313: Use after free in tab groups
  * CVE-2022-1314: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1650024000">- Chromium 100.0.4896.127 (boo#1198509)
  * CVE-2022-1364: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1650542400">- Fixes for go 1.18</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1651665600">- Chromium 101.0.4951.54 (boo#1199118)
- Chromium 101.0.4951.41 (boo#1198917)
  * CVE-2022-1477: Use after free in Vulkan
  * CVE-2022-1478: Use after free in SwiftShader
  * CVE-2022-1479: Use after free in ANGLE
  * CVE-2022-1480: Use after free in Device API
  * CVE-2022-1481: Use after free in Sharing
  * CVE-2022-1482: Inappropriate implementation in WebGL
  * CVE-2022-1483: Heap buffer overflow in WebGPU
  * CVE-2022-1484: Heap buffer overflow in Web UI Settings
  * CVE-2022-1485: Use after free in File System API
  * CVE-2022-1486: Type Confusion in V8
  * CVE-2022-1487: Use after free in Ozone
  * CVE-2022-1488: Inappropriate implementation in Extensions API
  * CVE-2022-1489: Out of bounds memory access in UI Shelf
  * CVE-2022-1490: Use after free in Browser Switcher
  * CVE-2022-1491: Use after free in Bookmarks
  * CVE-2022-1492: Insufficient data validation in Blink Editing
  * CVE-2022-1493: Use after free in Dev Tools
  * CVE-2022-1494: Insufficient data validation in Trusted Types
  * CVE-2022-1495: Incorrect security UI in Downloads
  * CVE-2022-1496: Use after free in File Manager
  * CVE-2022-1497: Inappropriate implementation in Input
  * CVE-2022-1498: Inappropriate implementation in HTML Parser
  * CVE-2022-1499: Inappropriate implementation in WebAuthentication
  * CVE-2022-1500: Insufficient data validation in Dev Tools
  * CVE-2022-1501: Inappropriate implementation in iframe
- Added patches:
  * chromium-101-libxml-unbundle.patch
  * chromium-101-segmentation_platform-type.patch
- Removed patches:
  * chromium-100-SCTHashdanceMetadata-move.patch
  * chromium-100-GLImplementationParts-constexpr.patch
  * chromium-100-macro-typo.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1652270400">- Chromium 101.0.4951.64 (boo#1199409)
  * CVE-2022-1633: Use after free in Sharesheet
  * CVE-2022-1634: Use after free in Browser UI
  * CVE-2022-1635: Use after free in Permission Prompts
  * CVE-2022-1636: Use after free in Performance APIs
  * CVE-2022-1637: Inappropriate implementation in Web Contents
  * CVE-2022-1638: Heap buffer overflow in V8 Internationalization
  * CVE-2022-1639: Use after free in ANGLE
  * CVE-2022-1640: Use after free in Sharing
  * CVE-2022-1641: Use after free in Web UI Diagnostics</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1652616000">- Chromium 101.0.4951.67
  * fixes for other platforms</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1653652800">- Chromium 102.0.5001.61 (boo#1199893)
  * CVE-2022-1853: Use after free in Indexed DB
  * CVE-2022-1854: Use after free in ANGLE
  * CVE-2022-1855: Use after free in Messaging
  * CVE-2022-1856: Use after free in User Education
  * CVE-2022-1857: Insufficient policy enforcement in File System API
  * CVE-2022-1858: Out of bounds read in DevTools
  * CVE-2022-1859: Use after free in Performance Manager
  * CVE-2022-1860: Use after free in UI Foundations
  * CVE-2022-1861: Use after free in Sharing
  * CVE-2022-1862: Inappropriate implementation in Extensions
  * CVE-2022-1863: Use after free in Tab Groups
  * CVE-2022-1864: Use after free in WebApp Installs
  * CVE-2022-1865: Use after free in Bookmarks
  * CVE-2022-1866: Use after free in Tablet Mode
  * CVE-2022-1867: Insufficient validation of untrusted input in Data Transfer
  * CVE-2022-1868: Inappropriate implementation in Extensions API
  * CVE-2022-1869: Type Confusion in V8
  * CVE-2022-1870: Use after free in App Service
  * CVE-2022-1871: Insufficient policy enforcement in File System API
  * CVE-2022-1872: Insufficient policy enforcement in Extensions API
  * CVE-2022-1873: Insufficient policy enforcement in COOP
  * CVE-2022-1874: Insufficient policy enforcement in Safe Browsing
  * CVE-2022-1875: Inappropriate implementation in PDF
  * CVE-2022-1876: Heap buffer overflow in DevTools
- Added patches:
  * chromium-102-compiler.patch
  * chromium-102-fenced_frame_utils-include.patch
  * chromium-102-regex_pattern-array.patch
  * chromium-102-swiftshader-template-instantiation.patch
  * chromium-102-symbolize-include.patch
  * ffmpeg-new-channel-layout.patch
- Removed patches:
  * chromium-100-compiler.patch
  * chromium-80-QuicStreamSendBuffer-deleted-move-constructor.patch
  * chromium-95-quiche-include.patch
  * chromium-fix-swiftshader-template.patch
  * chromium-missing-include-tuple.patch
  * chromium-webrtc-stats-missing-vector.patch
  * chromium-101-segmentation_platform-type.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654084800">- Disable ARM control flow integrity, it causes build issues
  at the moment
- Try a different SVG (black logo on GNOME)
- Removed patches:
  * chromium-third_party-symbolize-missing-include.patch
  (replaced by chromium-102-symbolize-include.patch)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654689600">- Switch to GTK4 on TW and Leap 15.4+ (boo#1200139)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1654862400">- Chromium 102.0.5005.115 (boo#1200423)
  * CVE-2022-2007: Use after free in WebGPU
  * CVE-2022-2008: Out of bounds memory access in WebGL
  * CVE-2022-2010: Out of bounds read in compositing
  * CVE-2022-2011: Use after free in ANGLE</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1656158400">- Chromium 103.0.5060.53 (boo#1200783)
  * CVE-2022-2156: Use after free in Base
  * CVE-2022-2157: Use after free in Interest groups
  * CVE-2022-2158: Type Confusion in V8
  * CVE-2022-2160: Insufficient policy enforcement in DevTools
  * CVE-2022-2161: Use after free in WebApp Provider
  * CVE-2022-2162: Insufficient policy enforcement in File System API
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * CVE-2022-2164: Inappropriate implementation in Extensions API
  * CVE-2022-2165: Insufficient data validation in URL formatting
- Added patches:
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-VirtualCursor-std-layout.patch
  * chromium-103-compiler.patch
- Removed patches:
  * chromium-102-compiler.patch
  * chromium-91-sql-standard-layout-type.patch
  * chromium-101-libxml-unbundle.patch
  * chromium-102-fenced_frame_utils-include.patch
  * chromium-102-swiftshader-template-instantiation.patch
  * chromium-102-symbolize-include.patch
  * chromium-97-arm-tflite-cast.patch
  * chromium-97-ScrollView-reference.patch</changelog>
</package>
<package pkgid="216ff5fc144f33d75e49300b6c5821b2870376edbc1678f1ac0a505434c8d262" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="103.0.5060.53" rel="bp154.2.11.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1644926400">- Chromium 98.0.4758.102 (boo#1195986)
  * CVE-2022-0603: Use after free in File Manager
  * CVE-2022-0604: Heap buffer overflow in Tab Groups
  * CVE-2022-0605: Use after free in Webstore API
  * CVE-2022-0606: Use after free in ANGLE
  * CVE-2022-0607: Use after free in GPU
  * CVE-2022-0608: Integer overflow in Mojo
  * CVE-2022-0609: Use after free in Animation
  * CVE-2022-0610: Inappropriate implementation in Gamepad API
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1646395200">- Chromium 99.0.4844.51 (boo#1196641)
  * CVE-2022-0789: Heap buffer overflow in ANGLE
  * CVE-2022-0790: Use after free in Cast UI
  * CVE-2022-0791: Use after free in Omnibox
  * CVE-2022-0792: Out of bounds read in ANGLE
  * CVE-2022-0793: Use after free in Views
  * CVE-2022-0794: Use after free in WebShare
  * CVE-2022-0795: Type Confusion in Blink Layout
  * CVE-2022-0796: Use after free in Media
  * CVE-2022-0797: Out of bounds memory access in Mojo
  * CVE-2022-0798: Use after free in MediaStream
  * CVE-2022-0799: Insufficient policy enforcement in Installer
  * CVE-2022-0800: Heap buffer overflow in Cast UI
  * CVE-2022-0801: Inappropriate implementation in HTML parser
  * CVE-2022-0802: Inappropriate implementation in Full screen mode
  * CVE-2022-0803: Inappropriate implementation in Permissions
  * CVE-2022-0804: Inappropriate implementation in Full screen mode
  * CVE-2022-0805: Use after free in Browser Switcher
  * CVE-2022-0806: Data leak in Canvas
  * CVE-2022-0807: Inappropriate implementation in Autofill
  * CVE-2022-0808: Use after free in Chrome OS Shell
  * CVE-2022-0809: Out of bounds memory access in WebXR
- Removed patches:
  * chromium-96-EnumTable-crash.patch
  * chromium-89-missing-cstring-header.patch
  * chromium-95-libyuv-aarch64.patch
  * chromium-95-libyuv-arm.patch
  * chromium-98-MiraclePtr-gcc-ice.patch
  * chromium-98-WaylandFrameManager-check.patch
- Added patches:
  * chromium-97-arm-tflite-cast.patch
  * chromium-98-gtk4-build.patch
  * chromium-99-AutofillAssistantModelExecutor-NoDestructor.patch
  * chromium-98-EnumTable-crash.patch
  * chromium-third_party-symbolize-missing-include.patch
  * chromium-v8-missing-utility-include.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1647432000">- Chromium 99.0.4844.74 (boo#1197163)
  * CVE-2022-0971: Use after free in Blink Layout
  * CVE-2022-0972: Use after free in Extensions
  * CVE-2022-0973: Use after free in Safe Browsing
  * CVE-2022-0974: Use after free in Splitscreen
  * CVE-2022-0975: Use after free in ANGLE
  * CVE-2022-0976: Heap buffer overflow in GPU
  * CVE-2022-0977: Use after free in Browser UI
  * CVE-2022-0978: Use after free in ANGLE
  * CVE-2022-0979: Use after free in Safe Browsing
  * CVE-2022-0980: Use after free in New Tab Page
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1647864000">- Chromium 99.0.4844.82:
  * Fix potential problem in Hangouts (boo#1197332)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1648296000">- Chromium 99.0.4844.84:
  * CVE-2022-1096: Type Confusion in V8 (boo#1197552)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1648555200">- Update disk constraints</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1648641600">- Chromium 100.0.4896.60 (boo#1197680)
  * CVE-2022-1125: Use after free in Portals
  * CVE-2022-1127: Use after free in QR Code Generator
  * CVE-2022-1128: Inappropriate implementation in Web Share API
  * CVE-2022-1129: Inappropriate implementation in Full Screen Mode
  * CVE-2022-1130: Insufficient validation of untrusted input in WebOTP
  * CVE-2022-1131: Use after free in Cast UI
  * CVE-2022-1132: Inappropriate implementation in Virtual Keyboard
  * CVE-2022-1133: Use after free in WebRTC
  * CVE-2022-1134: Type Confusion in V8
  * CVE-2022-1135: Use after free in Shopping Cart
  * CVE-2022-1136: Use after free in Tab Strip
  * CVE-2022-1137: Inappropriate implementation in Extensions
  * CVE-2022-1138: Inappropriate implementation in Web Cursor
  * CVE-2022-1139: Inappropriate implementation in Background Fetch API
  * CVE-2022-1141: Use after free in File Manager
  * CVE-2022-1142: Heap buffer overflow in WebUI
  * CVE-2022-1143: Heap buffer overflow in WebUI
  * CVE-2022-1144: Use after free in WebUI
  * CVE-2022-1145: Use after free in Extensions
  * CVE-2022-1146: Inappropriate implementation in Resource Timing
- Added patches:
  * chromium-100-compiler.patch
  * chromium-100-GLImplementationParts-constexpr.patch
  * chromium-100-InMilliseconds-constexpr.patch
  * chromium-100-SCTHashdanceMetadata-move.patch
  * chromium-100-macro-typo.patch
- Removed patches:
  * chromium-98-compiler.patch
  * chromium-86-nearby-explicit.patch
  * chromium-glibc-2.34.patch
  * chromium-v8-missing-utility-include.patch
  * chromium-99-AutofillAssistantModelExecutor-NoDestructor.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1649160000">- Chromium 100.0.4896.75:
  * CVE-2022-1232: Type Confusion in V8 (boo#1198053)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1649592000">- Patches for GCC 12:
  * chromium-fix-swiftshader-template.patch
  * chromium-missing-include-tuple.patch
  * chromium-webrtc-stats-missing-vector.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1649764800">- Chromium 100.0.4896.88 (boo#1198361)
  * CVE-2022-1305: Use after free in storage
  * CVE-2022-1306: Inappropriate implementation in compositing
  * CVE-2022-1307: Inappropriate implementation in full screen
  * CVE-2022-1308: Use after free in BFCache
  * CVE-2022-1309: Insufficient policy enforcement in developer tools
  * CVE-2022-1310: Use after free in regular expressions
  * CVE-2022-1311: Use after free in Chrome OS shell
  * CVE-2022-1312: Use after free in storage
  * CVE-2022-1313: Use after free in tab groups
  * CVE-2022-1314: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1650024000">- Chromium 100.0.4896.127 (boo#1198509)
  * CVE-2022-1364: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1650542400">- Fixes for go 1.18</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1651665600">- Chromium 101.0.4951.54 (boo#1199118)
- Chromium 101.0.4951.41 (boo#1198917)
  * CVE-2022-1477: Use after free in Vulkan
  * CVE-2022-1478: Use after free in SwiftShader
  * CVE-2022-1479: Use after free in ANGLE
  * CVE-2022-1480: Use after free in Device API
  * CVE-2022-1481: Use after free in Sharing
  * CVE-2022-1482: Inappropriate implementation in WebGL
  * CVE-2022-1483: Heap buffer overflow in WebGPU
  * CVE-2022-1484: Heap buffer overflow in Web UI Settings
  * CVE-2022-1485: Use after free in File System API
  * CVE-2022-1486: Type Confusion in V8
  * CVE-2022-1487: Use after free in Ozone
  * CVE-2022-1488: Inappropriate implementation in Extensions API
  * CVE-2022-1489: Out of bounds memory access in UI Shelf
  * CVE-2022-1490: Use after free in Browser Switcher
  * CVE-2022-1491: Use after free in Bookmarks
  * CVE-2022-1492: Insufficient data validation in Blink Editing
  * CVE-2022-1493: Use after free in Dev Tools
  * CVE-2022-1494: Insufficient data validation in Trusted Types
  * CVE-2022-1495: Incorrect security UI in Downloads
  * CVE-2022-1496: Use after free in File Manager
  * CVE-2022-1497: Inappropriate implementation in Input
  * CVE-2022-1498: Inappropriate implementation in HTML Parser
  * CVE-2022-1499: Inappropriate implementation in WebAuthentication
  * CVE-2022-1500: Insufficient data validation in Dev Tools
  * CVE-2022-1501: Inappropriate implementation in iframe
- Added patches:
  * chromium-101-libxml-unbundle.patch
  * chromium-101-segmentation_platform-type.patch
- Removed patches:
  * chromium-100-SCTHashdanceMetadata-move.patch
  * chromium-100-GLImplementationParts-constexpr.patch
  * chromium-100-macro-typo.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1652270400">- Chromium 101.0.4951.64 (boo#1199409)
  * CVE-2022-1633: Use after free in Sharesheet
  * CVE-2022-1634: Use after free in Browser UI
  * CVE-2022-1635: Use after free in Permission Prompts
  * CVE-2022-1636: Use after free in Performance APIs
  * CVE-2022-1637: Inappropriate implementation in Web Contents
  * CVE-2022-1638: Heap buffer overflow in V8 Internationalization
  * CVE-2022-1639: Use after free in ANGLE
  * CVE-2022-1640: Use after free in Sharing
  * CVE-2022-1641: Use after free in Web UI Diagnostics</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1652616000">- Chromium 101.0.4951.67
  * fixes for other platforms</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1653652800">- Chromium 102.0.5001.61 (boo#1199893)
  * CVE-2022-1853: Use after free in Indexed DB
  * CVE-2022-1854: Use after free in ANGLE
  * CVE-2022-1855: Use after free in Messaging
  * CVE-2022-1856: Use after free in User Education
  * CVE-2022-1857: Insufficient policy enforcement in File System API
  * CVE-2022-1858: Out of bounds read in DevTools
  * CVE-2022-1859: Use after free in Performance Manager
  * CVE-2022-1860: Use after free in UI Foundations
  * CVE-2022-1861: Use after free in Sharing
  * CVE-2022-1862: Inappropriate implementation in Extensions
  * CVE-2022-1863: Use after free in Tab Groups
  * CVE-2022-1864: Use after free in WebApp Installs
  * CVE-2022-1865: Use after free in Bookmarks
  * CVE-2022-1866: Use after free in Tablet Mode
  * CVE-2022-1867: Insufficient validation of untrusted input in Data Transfer
  * CVE-2022-1868: Inappropriate implementation in Extensions API
  * CVE-2022-1869: Type Confusion in V8
  * CVE-2022-1870: Use after free in App Service
  * CVE-2022-1871: Insufficient policy enforcement in File System API
  * CVE-2022-1872: Insufficient policy enforcement in Extensions API
  * CVE-2022-1873: Insufficient policy enforcement in COOP
  * CVE-2022-1874: Insufficient policy enforcement in Safe Browsing
  * CVE-2022-1875: Inappropriate implementation in PDF
  * CVE-2022-1876: Heap buffer overflow in DevTools
- Added patches:
  * chromium-102-compiler.patch
  * chromium-102-fenced_frame_utils-include.patch
  * chromium-102-regex_pattern-array.patch
  * chromium-102-swiftshader-template-instantiation.patch
  * chromium-102-symbolize-include.patch
  * ffmpeg-new-channel-layout.patch
- Removed patches:
  * chromium-100-compiler.patch
  * chromium-80-QuicStreamSendBuffer-deleted-move-constructor.patch
  * chromium-95-quiche-include.patch
  * chromium-fix-swiftshader-template.patch
  * chromium-missing-include-tuple.patch
  * chromium-webrtc-stats-missing-vector.patch
  * chromium-101-segmentation_platform-type.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654084800">- Disable ARM control flow integrity, it causes build issues
  at the moment
- Try a different SVG (black logo on GNOME)
- Removed patches:
  * chromium-third_party-symbolize-missing-include.patch
  (replaced by chromium-102-symbolize-include.patch)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654689600">- Switch to GTK4 on TW and Leap 15.4+ (boo#1200139)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1654862400">- Chromium 102.0.5005.115 (boo#1200423)
  * CVE-2022-2007: Use after free in WebGPU
  * CVE-2022-2008: Out of bounds memory access in WebGL
  * CVE-2022-2010: Out of bounds read in compositing
  * CVE-2022-2011: Use after free in ANGLE</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1656158400">- Chromium 103.0.5060.53 (boo#1200783)
  * CVE-2022-2156: Use after free in Base
  * CVE-2022-2157: Use after free in Interest groups
  * CVE-2022-2158: Type Confusion in V8
  * CVE-2022-2160: Insufficient policy enforcement in DevTools
  * CVE-2022-2161: Use after free in WebApp Provider
  * CVE-2022-2162: Insufficient policy enforcement in File System API
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * CVE-2022-2164: Inappropriate implementation in Extensions API
  * CVE-2022-2165: Insufficient data validation in URL formatting
- Added patches:
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-VirtualCursor-std-layout.patch
  * chromium-103-compiler.patch
- Removed patches:
  * chromium-102-compiler.patch
  * chromium-91-sql-standard-layout-type.patch
  * chromium-101-libxml-unbundle.patch
  * chromium-102-fenced_frame_utils-include.patch
  * chromium-102-swiftshader-template-instantiation.patch
  * chromium-102-symbolize-include.patch
  * chromium-97-arm-tflite-cast.patch
  * chromium-97-ScrollView-reference.patch</changelog>
</package>
<package pkgid="fc6b252b0d5e87492354a604893e0fd30c03acef435fcef0bbde55b560b2a05f" name="chromedriver" arch="aarch64">
  <version epoch="0" ver="104.0.5112.101" rel="bp154.2.23.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1649160000">- Chromium 100.0.4896.75:
  * CVE-2022-1232: Type Confusion in V8 (boo#1198053)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1649592000">- Patches for GCC 12:
  * chromium-fix-swiftshader-template.patch
  * chromium-missing-include-tuple.patch
  * chromium-webrtc-stats-missing-vector.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1649764800">- Chromium 100.0.4896.88 (boo#1198361)
  * CVE-2022-1305: Use after free in storage
  * CVE-2022-1306: Inappropriate implementation in compositing
  * CVE-2022-1307: Inappropriate implementation in full screen
  * CVE-2022-1308: Use after free in BFCache
  * CVE-2022-1309: Insufficient policy enforcement in developer tools
  * CVE-2022-1310: Use after free in regular expressions
  * CVE-2022-1311: Use after free in Chrome OS shell
  * CVE-2022-1312: Use after free in storage
  * CVE-2022-1313: Use after free in tab groups
  * CVE-2022-1314: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1650024000">- Chromium 100.0.4896.127 (boo#1198509)
  * CVE-2022-1364: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1650542400">- Fixes for go 1.18</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1651665600">- Chromium 101.0.4951.54 (boo#1199118)
- Chromium 101.0.4951.41 (boo#1198917)
  * CVE-2022-1477: Use after free in Vulkan
  * CVE-2022-1478: Use after free in SwiftShader
  * CVE-2022-1479: Use after free in ANGLE
  * CVE-2022-1480: Use after free in Device API
  * CVE-2022-1481: Use after free in Sharing
  * CVE-2022-1482: Inappropriate implementation in WebGL
  * CVE-2022-1483: Heap buffer overflow in WebGPU
  * CVE-2022-1484: Heap buffer overflow in Web UI Settings
  * CVE-2022-1485: Use after free in File System API
  * CVE-2022-1486: Type Confusion in V8
  * CVE-2022-1487: Use after free in Ozone
  * CVE-2022-1488: Inappropriate implementation in Extensions API
  * CVE-2022-1489: Out of bounds memory access in UI Shelf
  * CVE-2022-1490: Use after free in Browser Switcher
  * CVE-2022-1491: Use after free in Bookmarks
  * CVE-2022-1492: Insufficient data validation in Blink Editing
  * CVE-2022-1493: Use after free in Dev Tools
  * CVE-2022-1494: Insufficient data validation in Trusted Types
  * CVE-2022-1495: Incorrect security UI in Downloads
  * CVE-2022-1496: Use after free in File Manager
  * CVE-2022-1497: Inappropriate implementation in Input
  * CVE-2022-1498: Inappropriate implementation in HTML Parser
  * CVE-2022-1499: Inappropriate implementation in WebAuthentication
  * CVE-2022-1500: Insufficient data validation in Dev Tools
  * CVE-2022-1501: Inappropriate implementation in iframe
- Added patches:
  * chromium-101-libxml-unbundle.patch
  * chromium-101-segmentation_platform-type.patch
- Removed patches:
  * chromium-100-SCTHashdanceMetadata-move.patch
  * chromium-100-GLImplementationParts-constexpr.patch
  * chromium-100-macro-typo.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1652270400">- Chromium 101.0.4951.64 (boo#1199409)
  * CVE-2022-1633: Use after free in Sharesheet
  * CVE-2022-1634: Use after free in Browser UI
  * CVE-2022-1635: Use after free in Permission Prompts
  * CVE-2022-1636: Use after free in Performance APIs
  * CVE-2022-1637: Inappropriate implementation in Web Contents
  * CVE-2022-1638: Heap buffer overflow in V8 Internationalization
  * CVE-2022-1639: Use after free in ANGLE
  * CVE-2022-1640: Use after free in Sharing
  * CVE-2022-1641: Use after free in Web UI Diagnostics</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1652616000">- Chromium 101.0.4951.67
  * fixes for other platforms</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1653652800">- Chromium 102.0.5001.61 (boo#1199893)
  * CVE-2022-1853: Use after free in Indexed DB
  * CVE-2022-1854: Use after free in ANGLE
  * CVE-2022-1855: Use after free in Messaging
  * CVE-2022-1856: Use after free in User Education
  * CVE-2022-1857: Insufficient policy enforcement in File System API
  * CVE-2022-1858: Out of bounds read in DevTools
  * CVE-2022-1859: Use after free in Performance Manager
  * CVE-2022-1860: Use after free in UI Foundations
  * CVE-2022-1861: Use after free in Sharing
  * CVE-2022-1862: Inappropriate implementation in Extensions
  * CVE-2022-1863: Use after free in Tab Groups
  * CVE-2022-1864: Use after free in WebApp Installs
  * CVE-2022-1865: Use after free in Bookmarks
  * CVE-2022-1866: Use after free in Tablet Mode
  * CVE-2022-1867: Insufficient validation of untrusted input in Data Transfer
  * CVE-2022-1868: Inappropriate implementation in Extensions API
  * CVE-2022-1869: Type Confusion in V8
  * CVE-2022-1870: Use after free in App Service
  * CVE-2022-1871: Insufficient policy enforcement in File System API
  * CVE-2022-1872: Insufficient policy enforcement in Extensions API
  * CVE-2022-1873: Insufficient policy enforcement in COOP
  * CVE-2022-1874: Insufficient policy enforcement in Safe Browsing
  * CVE-2022-1875: Inappropriate implementation in PDF
  * CVE-2022-1876: Heap buffer overflow in DevTools
- Added patches:
  * chromium-102-compiler.patch
  * chromium-102-fenced_frame_utils-include.patch
  * chromium-102-regex_pattern-array.patch
  * chromium-102-swiftshader-template-instantiation.patch
  * chromium-102-symbolize-include.patch
  * ffmpeg-new-channel-layout.patch
- Removed patches:
  * chromium-100-compiler.patch
  * chromium-80-QuicStreamSendBuffer-deleted-move-constructor.patch
  * chromium-95-quiche-include.patch
  * chromium-fix-swiftshader-template.patch
  * chromium-missing-include-tuple.patch
  * chromium-webrtc-stats-missing-vector.patch
  * chromium-101-segmentation_platform-type.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654084800">- Disable ARM control flow integrity, it causes build issues
  at the moment
- Try a different SVG (black logo on GNOME)
- Removed patches:
  * chromium-third_party-symbolize-missing-include.patch
  (replaced by chromium-102-symbolize-include.patch)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654689600">- Switch to GTK4 on TW and Leap 15.4+ (boo#1200139)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1654862400">- Chromium 102.0.5005.115 (boo#1200423)
  * CVE-2022-2007: Use after free in WebGPU
  * CVE-2022-2008: Out of bounds memory access in WebGL
  * CVE-2022-2010: Out of bounds read in compositing
  * CVE-2022-2011: Use after free in ANGLE</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1656158400">- Chromium 103.0.5060.53 (boo#1200783)
  * CVE-2022-2156: Use after free in Base
  * CVE-2022-2157: Use after free in Interest groups
  * CVE-2022-2158: Type Confusion in V8
  * CVE-2022-2160: Insufficient policy enforcement in DevTools
  * CVE-2022-2161: Use after free in WebApp Provider
  * CVE-2022-2162: Insufficient policy enforcement in File System API
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * CVE-2022-2164: Inappropriate implementation in Extensions API
  * CVE-2022-2165: Insufficient data validation in URL formatting
- Added patches:
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-VirtualCursor-std-layout.patch
  * chromium-103-compiler.patch
- Removed patches:
  * chromium-102-compiler.patch
  * chromium-91-sql-standard-layout-type.patch
  * chromium-101-libxml-unbundle.patch
  * chromium-102-fenced_frame_utils-include.patch
  * chromium-102-swiftshader-template-instantiation.patch
  * chromium-102-symbolize-include.patch
  * chromium-97-arm-tflite-cast.patch
  * chromium-97-ScrollView-reference.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657195200">- Chromium 103.0.5060.66
  * no upstream release notes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657368000">- Chromium 103.0.5060.114 (boo#1201216)
  * CVE-2022-2294: Heap buffer overflow in WebRTC
  * CVE-2022-2295: Type Confusion in V8
  * CVE-2022-2296: Use after free in Chrome OS Shell</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1658318400">- Chromium 103.0.5060.134 (boo#1201679):
  * CVE-2022-2477 : Use after free in Guest View
  * CVE-2022-2478 : Use after free in PDF
  * CVE-2022-2479 : Insufficient validation of untrusted input in File
  * CVE-2022-2480 : Use after free in Service Worker API
  * CVE-2022-2481: Use after free in Views
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1658577600">- Switch back to Clang so that we can use BTI on aarch64
  * Gold is too old - doesn't understand BTI
  * LD crashes on aarch64
- Re-enable LTO
- Prepare move to FFmpeg 5 for new channel layout
  (requires 5.1+)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660046400">- Chromium 104.0.5112.79 (boo#1202075)
  * CVE-2022-2603: Use after free in Omnibox
  * CVE-2022-2604: Use after free in Safe Browsing
  * CVE-2022-2605: Out of bounds read in Dawn
  * CVE-2022-2606: Use after free in Managed devices API
  * CVE-2022-2607: Use after free in Tab Strip
  * CVE-2022-2608: Use after free in Overview Mode
  * CVE-2022-2609: Use after free in Nearby Share
  * CVE-2022-2610: Insufficient policy enforcement in Background Fetch
  * CVE-2022-2611: Inappropriate implementation in Fullscreen API
  * CVE-2022-2612: Side-channel information leakage in Keyboard input
  * CVE-2022-2613: Use after free in Input
  * CVE-2022-2614: Use after free in Sign-In Flow
  * CVE-2022-2615: Insufficient policy enforcement in Cookies
  * CVE-2022-2616: Inappropriate implementation in Extensions API
  * CVE-2022-2617: Use after free in Extensions API
  * CVE-2022-2618: Insufficient validation of untrusted input in Internals
  * CVE-2022-2619: Insufficient validation of untrusted input in Settings
  * CVE-2022-2620: Use after free in WebUI
  * CVE-2022-2621: Use after free in Extensions
  * CVE-2022-2622: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-2623: Use after free in Offline
  * CVE-2022-2624: Heap buffer overflow in PDF
- Added patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-104-tflite-system-zlib.patch
- Removed patches:
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-compiler.patch
- Use FFmpeg 5.1 on TW</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660651200">- Re-enable our version of chrome-wrapper
- Set no sandbox if root is being used (https://crbug.com/638180)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660824000">- Chromium 104.0.5112.101 (boo#1202509):
  * CVE-2022-2852: Use after free in FedCM
  * CVE-2022-2854: Use after free in SwiftShader
  * CVE-2022-2855: Use after free in ANGLE
  * CVE-2022-2857: Use after free in Blink
  * CVE-2022-2858: Use after free in Sign-In Flow
  * CVE-2022-2853: Heap buffer overflow in Downloads
  * CVE-2022-2856: Insufficient validation of untrusted input in Intents
  * CVE-2022-2859: Use after free in Chrome OS Shell
  * CVE-2022-2860: Insufficient policy enforcement in Cookies
  * CVE-2022-2861: Inappropriate implementation in Extensions API</changelog>
</package>
<package pkgid="ecc9e6be05198bd8a0cb2f99f218b310c5482d86fb3bd4eef82c01ee8e58571a" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="104.0.5112.101" rel="bp154.2.23.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1649160000">- Chromium 100.0.4896.75:
  * CVE-2022-1232: Type Confusion in V8 (boo#1198053)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1649592000">- Patches for GCC 12:
  * chromium-fix-swiftshader-template.patch
  * chromium-missing-include-tuple.patch
  * chromium-webrtc-stats-missing-vector.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1649764800">- Chromium 100.0.4896.88 (boo#1198361)
  * CVE-2022-1305: Use after free in storage
  * CVE-2022-1306: Inappropriate implementation in compositing
  * CVE-2022-1307: Inappropriate implementation in full screen
  * CVE-2022-1308: Use after free in BFCache
  * CVE-2022-1309: Insufficient policy enforcement in developer tools
  * CVE-2022-1310: Use after free in regular expressions
  * CVE-2022-1311: Use after free in Chrome OS shell
  * CVE-2022-1312: Use after free in storage
  * CVE-2022-1313: Use after free in tab groups
  * CVE-2022-1314: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1650024000">- Chromium 100.0.4896.127 (boo#1198509)
  * CVE-2022-1364: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1650542400">- Fixes for go 1.18</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1651665600">- Chromium 101.0.4951.54 (boo#1199118)
- Chromium 101.0.4951.41 (boo#1198917)
  * CVE-2022-1477: Use after free in Vulkan
  * CVE-2022-1478: Use after free in SwiftShader
  * CVE-2022-1479: Use after free in ANGLE
  * CVE-2022-1480: Use after free in Device API
  * CVE-2022-1481: Use after free in Sharing
  * CVE-2022-1482: Inappropriate implementation in WebGL
  * CVE-2022-1483: Heap buffer overflow in WebGPU
  * CVE-2022-1484: Heap buffer overflow in Web UI Settings
  * CVE-2022-1485: Use after free in File System API
  * CVE-2022-1486: Type Confusion in V8
  * CVE-2022-1487: Use after free in Ozone
  * CVE-2022-1488: Inappropriate implementation in Extensions API
  * CVE-2022-1489: Out of bounds memory access in UI Shelf
  * CVE-2022-1490: Use after free in Browser Switcher
  * CVE-2022-1491: Use after free in Bookmarks
  * CVE-2022-1492: Insufficient data validation in Blink Editing
  * CVE-2022-1493: Use after free in Dev Tools
  * CVE-2022-1494: Insufficient data validation in Trusted Types
  * CVE-2022-1495: Incorrect security UI in Downloads
  * CVE-2022-1496: Use after free in File Manager
  * CVE-2022-1497: Inappropriate implementation in Input
  * CVE-2022-1498: Inappropriate implementation in HTML Parser
  * CVE-2022-1499: Inappropriate implementation in WebAuthentication
  * CVE-2022-1500: Insufficient data validation in Dev Tools
  * CVE-2022-1501: Inappropriate implementation in iframe
- Added patches:
  * chromium-101-libxml-unbundle.patch
  * chromium-101-segmentation_platform-type.patch
- Removed patches:
  * chromium-100-SCTHashdanceMetadata-move.patch
  * chromium-100-GLImplementationParts-constexpr.patch
  * chromium-100-macro-typo.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1652270400">- Chromium 101.0.4951.64 (boo#1199409)
  * CVE-2022-1633: Use after free in Sharesheet
  * CVE-2022-1634: Use after free in Browser UI
  * CVE-2022-1635: Use after free in Permission Prompts
  * CVE-2022-1636: Use after free in Performance APIs
  * CVE-2022-1637: Inappropriate implementation in Web Contents
  * CVE-2022-1638: Heap buffer overflow in V8 Internationalization
  * CVE-2022-1639: Use after free in ANGLE
  * CVE-2022-1640: Use after free in Sharing
  * CVE-2022-1641: Use after free in Web UI Diagnostics</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1652616000">- Chromium 101.0.4951.67
  * fixes for other platforms</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1653652800">- Chromium 102.0.5001.61 (boo#1199893)
  * CVE-2022-1853: Use after free in Indexed DB
  * CVE-2022-1854: Use after free in ANGLE
  * CVE-2022-1855: Use after free in Messaging
  * CVE-2022-1856: Use after free in User Education
  * CVE-2022-1857: Insufficient policy enforcement in File System API
  * CVE-2022-1858: Out of bounds read in DevTools
  * CVE-2022-1859: Use after free in Performance Manager
  * CVE-2022-1860: Use after free in UI Foundations
  * CVE-2022-1861: Use after free in Sharing
  * CVE-2022-1862: Inappropriate implementation in Extensions
  * CVE-2022-1863: Use after free in Tab Groups
  * CVE-2022-1864: Use after free in WebApp Installs
  * CVE-2022-1865: Use after free in Bookmarks
  * CVE-2022-1866: Use after free in Tablet Mode
  * CVE-2022-1867: Insufficient validation of untrusted input in Data Transfer
  * CVE-2022-1868: Inappropriate implementation in Extensions API
  * CVE-2022-1869: Type Confusion in V8
  * CVE-2022-1870: Use after free in App Service
  * CVE-2022-1871: Insufficient policy enforcement in File System API
  * CVE-2022-1872: Insufficient policy enforcement in Extensions API
  * CVE-2022-1873: Insufficient policy enforcement in COOP
  * CVE-2022-1874: Insufficient policy enforcement in Safe Browsing
  * CVE-2022-1875: Inappropriate implementation in PDF
  * CVE-2022-1876: Heap buffer overflow in DevTools
- Added patches:
  * chromium-102-compiler.patch
  * chromium-102-fenced_frame_utils-include.patch
  * chromium-102-regex_pattern-array.patch
  * chromium-102-swiftshader-template-instantiation.patch
  * chromium-102-symbolize-include.patch
  * ffmpeg-new-channel-layout.patch
- Removed patches:
  * chromium-100-compiler.patch
  * chromium-80-QuicStreamSendBuffer-deleted-move-constructor.patch
  * chromium-95-quiche-include.patch
  * chromium-fix-swiftshader-template.patch
  * chromium-missing-include-tuple.patch
  * chromium-webrtc-stats-missing-vector.patch
  * chromium-101-segmentation_platform-type.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654084800">- Disable ARM control flow integrity, it causes build issues
  at the moment
- Try a different SVG (black logo on GNOME)
- Removed patches:
  * chromium-third_party-symbolize-missing-include.patch
  (replaced by chromium-102-symbolize-include.patch)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654689600">- Switch to GTK4 on TW and Leap 15.4+ (boo#1200139)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1654862400">- Chromium 102.0.5005.115 (boo#1200423)
  * CVE-2022-2007: Use after free in WebGPU
  * CVE-2022-2008: Out of bounds memory access in WebGL
  * CVE-2022-2010: Out of bounds read in compositing
  * CVE-2022-2011: Use after free in ANGLE</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1656158400">- Chromium 103.0.5060.53 (boo#1200783)
  * CVE-2022-2156: Use after free in Base
  * CVE-2022-2157: Use after free in Interest groups
  * CVE-2022-2158: Type Confusion in V8
  * CVE-2022-2160: Insufficient policy enforcement in DevTools
  * CVE-2022-2161: Use after free in WebApp Provider
  * CVE-2022-2162: Insufficient policy enforcement in File System API
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * CVE-2022-2164: Inappropriate implementation in Extensions API
  * CVE-2022-2165: Insufficient data validation in URL formatting
- Added patches:
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-VirtualCursor-std-layout.patch
  * chromium-103-compiler.patch
- Removed patches:
  * chromium-102-compiler.patch
  * chromium-91-sql-standard-layout-type.patch
  * chromium-101-libxml-unbundle.patch
  * chromium-102-fenced_frame_utils-include.patch
  * chromium-102-swiftshader-template-instantiation.patch
  * chromium-102-symbolize-include.patch
  * chromium-97-arm-tflite-cast.patch
  * chromium-97-ScrollView-reference.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657195200">- Chromium 103.0.5060.66
  * no upstream release notes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657368000">- Chromium 103.0.5060.114 (boo#1201216)
  * CVE-2022-2294: Heap buffer overflow in WebRTC
  * CVE-2022-2295: Type Confusion in V8
  * CVE-2022-2296: Use after free in Chrome OS Shell</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1658318400">- Chromium 103.0.5060.134 (boo#1201679):
  * CVE-2022-2477 : Use after free in Guest View
  * CVE-2022-2478 : Use after free in PDF
  * CVE-2022-2479 : Insufficient validation of untrusted input in File
  * CVE-2022-2480 : Use after free in Service Worker API
  * CVE-2022-2481: Use after free in Views
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1658577600">- Switch back to Clang so that we can use BTI on aarch64
  * Gold is too old - doesn't understand BTI
  * LD crashes on aarch64
- Re-enable LTO
- Prepare move to FFmpeg 5 for new channel layout
  (requires 5.1+)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660046400">- Chromium 104.0.5112.79 (boo#1202075)
  * CVE-2022-2603: Use after free in Omnibox
  * CVE-2022-2604: Use after free in Safe Browsing
  * CVE-2022-2605: Out of bounds read in Dawn
  * CVE-2022-2606: Use after free in Managed devices API
  * CVE-2022-2607: Use after free in Tab Strip
  * CVE-2022-2608: Use after free in Overview Mode
  * CVE-2022-2609: Use after free in Nearby Share
  * CVE-2022-2610: Insufficient policy enforcement in Background Fetch
  * CVE-2022-2611: Inappropriate implementation in Fullscreen API
  * CVE-2022-2612: Side-channel information leakage in Keyboard input
  * CVE-2022-2613: Use after free in Input
  * CVE-2022-2614: Use after free in Sign-In Flow
  * CVE-2022-2615: Insufficient policy enforcement in Cookies
  * CVE-2022-2616: Inappropriate implementation in Extensions API
  * CVE-2022-2617: Use after free in Extensions API
  * CVE-2022-2618: Insufficient validation of untrusted input in Internals
  * CVE-2022-2619: Insufficient validation of untrusted input in Settings
  * CVE-2022-2620: Use after free in WebUI
  * CVE-2022-2621: Use after free in Extensions
  * CVE-2022-2622: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-2623: Use after free in Offline
  * CVE-2022-2624: Heap buffer overflow in PDF
- Added patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-104-tflite-system-zlib.patch
- Removed patches:
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-compiler.patch
- Use FFmpeg 5.1 on TW</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660651200">- Re-enable our version of chrome-wrapper
- Set no sandbox if root is being used (https://crbug.com/638180)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660824000">- Chromium 104.0.5112.101 (boo#1202509):
  * CVE-2022-2852: Use after free in FedCM
  * CVE-2022-2854: Use after free in SwiftShader
  * CVE-2022-2855: Use after free in ANGLE
  * CVE-2022-2857: Use after free in Blink
  * CVE-2022-2858: Use after free in Sign-In Flow
  * CVE-2022-2853: Heap buffer overflow in Downloads
  * CVE-2022-2856: Insufficient validation of untrusted input in Intents
  * CVE-2022-2859: Use after free in Chrome OS Shell
  * CVE-2022-2860: Insufficient policy enforcement in Cookies
  * CVE-2022-2861: Inappropriate implementation in Extensions API</changelog>
</package>
<package pkgid="af644f1f275ed4ec10c7bcf59ea2ba45ab2bb008bc82f8da352b4973fea3119e" name="chromedriver" arch="aarch64">
  <version epoch="0" ver="104.0.5112.79" rel="bp154.2.20.1"/>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1648555200">- Update disk constraints</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1648641600">- Chromium 100.0.4896.60 (boo#1197680)
  * CVE-2022-1125: Use after free in Portals
  * CVE-2022-1127: Use after free in QR Code Generator
  * CVE-2022-1128: Inappropriate implementation in Web Share API
  * CVE-2022-1129: Inappropriate implementation in Full Screen Mode
  * CVE-2022-1130: Insufficient validation of untrusted input in WebOTP
  * CVE-2022-1131: Use after free in Cast UI
  * CVE-2022-1132: Inappropriate implementation in Virtual Keyboard
  * CVE-2022-1133: Use after free in WebRTC
  * CVE-2022-1134: Type Confusion in V8
  * CVE-2022-1135: Use after free in Shopping Cart
  * CVE-2022-1136: Use after free in Tab Strip
  * CVE-2022-1137: Inappropriate implementation in Extensions
  * CVE-2022-1138: Inappropriate implementation in Web Cursor
  * CVE-2022-1139: Inappropriate implementation in Background Fetch API
  * CVE-2022-1141: Use after free in File Manager
  * CVE-2022-1142: Heap buffer overflow in WebUI
  * CVE-2022-1143: Heap buffer overflow in WebUI
  * CVE-2022-1144: Use after free in WebUI
  * CVE-2022-1145: Use after free in Extensions
  * CVE-2022-1146: Inappropriate implementation in Resource Timing
- Added patches:
  * chromium-100-compiler.patch
  * chromium-100-GLImplementationParts-constexpr.patch
  * chromium-100-InMilliseconds-constexpr.patch
  * chromium-100-SCTHashdanceMetadata-move.patch
  * chromium-100-macro-typo.patch
- Removed patches:
  * chromium-98-compiler.patch
  * chromium-86-nearby-explicit.patch
  * chromium-glibc-2.34.patch
  * chromium-v8-missing-utility-include.patch
  * chromium-99-AutofillAssistantModelExecutor-NoDestructor.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1649160000">- Chromium 100.0.4896.75:
  * CVE-2022-1232: Type Confusion in V8 (boo#1198053)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1649592000">- Patches for GCC 12:
  * chromium-fix-swiftshader-template.patch
  * chromium-missing-include-tuple.patch
  * chromium-webrtc-stats-missing-vector.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1649764800">- Chromium 100.0.4896.88 (boo#1198361)
  * CVE-2022-1305: Use after free in storage
  * CVE-2022-1306: Inappropriate implementation in compositing
  * CVE-2022-1307: Inappropriate implementation in full screen
  * CVE-2022-1308: Use after free in BFCache
  * CVE-2022-1309: Insufficient policy enforcement in developer tools
  * CVE-2022-1310: Use after free in regular expressions
  * CVE-2022-1311: Use after free in Chrome OS shell
  * CVE-2022-1312: Use after free in storage
  * CVE-2022-1313: Use after free in tab groups
  * CVE-2022-1314: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1650024000">- Chromium 100.0.4896.127 (boo#1198509)
  * CVE-2022-1364: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1650542400">- Fixes for go 1.18</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1651665600">- Chromium 101.0.4951.54 (boo#1199118)
- Chromium 101.0.4951.41 (boo#1198917)
  * CVE-2022-1477: Use after free in Vulkan
  * CVE-2022-1478: Use after free in SwiftShader
  * CVE-2022-1479: Use after free in ANGLE
  * CVE-2022-1480: Use after free in Device API
  * CVE-2022-1481: Use after free in Sharing
  * CVE-2022-1482: Inappropriate implementation in WebGL
  * CVE-2022-1483: Heap buffer overflow in WebGPU
  * CVE-2022-1484: Heap buffer overflow in Web UI Settings
  * CVE-2022-1485: Use after free in File System API
  * CVE-2022-1486: Type Confusion in V8
  * CVE-2022-1487: Use after free in Ozone
  * CVE-2022-1488: Inappropriate implementation in Extensions API
  * CVE-2022-1489: Out of bounds memory access in UI Shelf
  * CVE-2022-1490: Use after free in Browser Switcher
  * CVE-2022-1491: Use after free in Bookmarks
  * CVE-2022-1492: Insufficient data validation in Blink Editing
  * CVE-2022-1493: Use after free in Dev Tools
  * CVE-2022-1494: Insufficient data validation in Trusted Types
  * CVE-2022-1495: Incorrect security UI in Downloads
  * CVE-2022-1496: Use after free in File Manager
  * CVE-2022-1497: Inappropriate implementation in Input
  * CVE-2022-1498: Inappropriate implementation in HTML Parser
  * CVE-2022-1499: Inappropriate implementation in WebAuthentication
  * CVE-2022-1500: Insufficient data validation in Dev Tools
  * CVE-2022-1501: Inappropriate implementation in iframe
- Added patches:
  * chromium-101-libxml-unbundle.patch
  * chromium-101-segmentation_platform-type.patch
- Removed patches:
  * chromium-100-SCTHashdanceMetadata-move.patch
  * chromium-100-GLImplementationParts-constexpr.patch
  * chromium-100-macro-typo.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1652270400">- Chromium 101.0.4951.64 (boo#1199409)
  * CVE-2022-1633: Use after free in Sharesheet
  * CVE-2022-1634: Use after free in Browser UI
  * CVE-2022-1635: Use after free in Permission Prompts
  * CVE-2022-1636: Use after free in Performance APIs
  * CVE-2022-1637: Inappropriate implementation in Web Contents
  * CVE-2022-1638: Heap buffer overflow in V8 Internationalization
  * CVE-2022-1639: Use after free in ANGLE
  * CVE-2022-1640: Use after free in Sharing
  * CVE-2022-1641: Use after free in Web UI Diagnostics</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1652616000">- Chromium 101.0.4951.67
  * fixes for other platforms</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1653652800">- Chromium 102.0.5001.61 (boo#1199893)
  * CVE-2022-1853: Use after free in Indexed DB
  * CVE-2022-1854: Use after free in ANGLE
  * CVE-2022-1855: Use after free in Messaging
  * CVE-2022-1856: Use after free in User Education
  * CVE-2022-1857: Insufficient policy enforcement in File System API
  * CVE-2022-1858: Out of bounds read in DevTools
  * CVE-2022-1859: Use after free in Performance Manager
  * CVE-2022-1860: Use after free in UI Foundations
  * CVE-2022-1861: Use after free in Sharing
  * CVE-2022-1862: Inappropriate implementation in Extensions
  * CVE-2022-1863: Use after free in Tab Groups
  * CVE-2022-1864: Use after free in WebApp Installs
  * CVE-2022-1865: Use after free in Bookmarks
  * CVE-2022-1866: Use after free in Tablet Mode
  * CVE-2022-1867: Insufficient validation of untrusted input in Data Transfer
  * CVE-2022-1868: Inappropriate implementation in Extensions API
  * CVE-2022-1869: Type Confusion in V8
  * CVE-2022-1870: Use after free in App Service
  * CVE-2022-1871: Insufficient policy enforcement in File System API
  * CVE-2022-1872: Insufficient policy enforcement in Extensions API
  * CVE-2022-1873: Insufficient policy enforcement in COOP
  * CVE-2022-1874: Insufficient policy enforcement in Safe Browsing
  * CVE-2022-1875: Inappropriate implementation in PDF
  * CVE-2022-1876: Heap buffer overflow in DevTools
- Added patches:
  * chromium-102-compiler.patch
  * chromium-102-fenced_frame_utils-include.patch
  * chromium-102-regex_pattern-array.patch
  * chromium-102-swiftshader-template-instantiation.patch
  * chromium-102-symbolize-include.patch
  * ffmpeg-new-channel-layout.patch
- Removed patches:
  * chromium-100-compiler.patch
  * chromium-80-QuicStreamSendBuffer-deleted-move-constructor.patch
  * chromium-95-quiche-include.patch
  * chromium-fix-swiftshader-template.patch
  * chromium-missing-include-tuple.patch
  * chromium-webrtc-stats-missing-vector.patch
  * chromium-101-segmentation_platform-type.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654084800">- Disable ARM control flow integrity, it causes build issues
  at the moment
- Try a different SVG (black logo on GNOME)
- Removed patches:
  * chromium-third_party-symbolize-missing-include.patch
  (replaced by chromium-102-symbolize-include.patch)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654689600">- Switch to GTK4 on TW and Leap 15.4+ (boo#1200139)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1654862400">- Chromium 102.0.5005.115 (boo#1200423)
  * CVE-2022-2007: Use after free in WebGPU
  * CVE-2022-2008: Out of bounds memory access in WebGL
  * CVE-2022-2010: Out of bounds read in compositing
  * CVE-2022-2011: Use after free in ANGLE</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1656158400">- Chromium 103.0.5060.53 (boo#1200783)
  * CVE-2022-2156: Use after free in Base
  * CVE-2022-2157: Use after free in Interest groups
  * CVE-2022-2158: Type Confusion in V8
  * CVE-2022-2160: Insufficient policy enforcement in DevTools
  * CVE-2022-2161: Use after free in WebApp Provider
  * CVE-2022-2162: Insufficient policy enforcement in File System API
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * CVE-2022-2164: Inappropriate implementation in Extensions API
  * CVE-2022-2165: Insufficient data validation in URL formatting
- Added patches:
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-VirtualCursor-std-layout.patch
  * chromium-103-compiler.patch
- Removed patches:
  * chromium-102-compiler.patch
  * chromium-91-sql-standard-layout-type.patch
  * chromium-101-libxml-unbundle.patch
  * chromium-102-fenced_frame_utils-include.patch
  * chromium-102-swiftshader-template-instantiation.patch
  * chromium-102-symbolize-include.patch
  * chromium-97-arm-tflite-cast.patch
  * chromium-97-ScrollView-reference.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657195200">- Chromium 103.0.5060.66
  * no upstream release notes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657368000">- Chromium 103.0.5060.114 (boo#1201216)
  * CVE-2022-2294: Heap buffer overflow in WebRTC
  * CVE-2022-2295: Type Confusion in V8
  * CVE-2022-2296: Use after free in Chrome OS Shell</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1658318400">- Chromium 103.0.5060.134 (boo#1201679):
  * CVE-2022-2477 : Use after free in Guest View
  * CVE-2022-2478 : Use after free in PDF
  * CVE-2022-2479 : Insufficient validation of untrusted input in File
  * CVE-2022-2480 : Use after free in Service Worker API
  * CVE-2022-2481: Use after free in Views
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1658577600">- Switch back to Clang so that we can use BTI on aarch64
  * Gold is too old - doesn't understand BTI
  * LD crashes on aarch64
- Re-enable LTO
- Prepare move to FFmpeg 5 for new channel layout
  (requires 5.1+)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660046400">- Chromium 104.0.5112.79 (boo#1202075)
  * CVE-2022-2603: Use after free in Omnibox
  * CVE-2022-2604: Use after free in Safe Browsing
  * CVE-2022-2605: Out of bounds read in Dawn
  * CVE-2022-2606: Use after free in Managed devices API
  * CVE-2022-2607: Use after free in Tab Strip
  * CVE-2022-2608: Use after free in Overview Mode
  * CVE-2022-2609: Use after free in Nearby Share
  * CVE-2022-2610: Insufficient policy enforcement in Background Fetch
  * CVE-2022-2611: Inappropriate implementation in Fullscreen API
  * CVE-2022-2612: Side-channel information leakage in Keyboard input
  * CVE-2022-2613: Use after free in Input
  * CVE-2022-2614: Use after free in Sign-In Flow
  * CVE-2022-2615: Insufficient policy enforcement in Cookies
  * CVE-2022-2616: Inappropriate implementation in Extensions API
  * CVE-2022-2617: Use after free in Extensions API
  * CVE-2022-2618: Insufficient validation of untrusted input in Internals
  * CVE-2022-2619: Insufficient validation of untrusted input in Settings
  * CVE-2022-2620: Use after free in WebUI
  * CVE-2022-2621: Use after free in Extensions
  * CVE-2022-2622: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-2623: Use after free in Offline
  * CVE-2022-2624: Heap buffer overflow in PDF
- Added patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-104-tflite-system-zlib.patch
- Removed patches:
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-compiler.patch
- Use FFmpeg 5.1 on TW</changelog>
</package>
<package pkgid="6088fa01d781b99bf8cfdc5647ded899f1525044fbd648b266a224711d29ce99" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="104.0.5112.79" rel="bp154.2.20.1"/>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1648555200">- Update disk constraints</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1648641600">- Chromium 100.0.4896.60 (boo#1197680)
  * CVE-2022-1125: Use after free in Portals
  * CVE-2022-1127: Use after free in QR Code Generator
  * CVE-2022-1128: Inappropriate implementation in Web Share API
  * CVE-2022-1129: Inappropriate implementation in Full Screen Mode
  * CVE-2022-1130: Insufficient validation of untrusted input in WebOTP
  * CVE-2022-1131: Use after free in Cast UI
  * CVE-2022-1132: Inappropriate implementation in Virtual Keyboard
  * CVE-2022-1133: Use after free in WebRTC
  * CVE-2022-1134: Type Confusion in V8
  * CVE-2022-1135: Use after free in Shopping Cart
  * CVE-2022-1136: Use after free in Tab Strip
  * CVE-2022-1137: Inappropriate implementation in Extensions
  * CVE-2022-1138: Inappropriate implementation in Web Cursor
  * CVE-2022-1139: Inappropriate implementation in Background Fetch API
  * CVE-2022-1141: Use after free in File Manager
  * CVE-2022-1142: Heap buffer overflow in WebUI
  * CVE-2022-1143: Heap buffer overflow in WebUI
  * CVE-2022-1144: Use after free in WebUI
  * CVE-2022-1145: Use after free in Extensions
  * CVE-2022-1146: Inappropriate implementation in Resource Timing
- Added patches:
  * chromium-100-compiler.patch
  * chromium-100-GLImplementationParts-constexpr.patch
  * chromium-100-InMilliseconds-constexpr.patch
  * chromium-100-SCTHashdanceMetadata-move.patch
  * chromium-100-macro-typo.patch
- Removed patches:
  * chromium-98-compiler.patch
  * chromium-86-nearby-explicit.patch
  * chromium-glibc-2.34.patch
  * chromium-v8-missing-utility-include.patch
  * chromium-99-AutofillAssistantModelExecutor-NoDestructor.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1649160000">- Chromium 100.0.4896.75:
  * CVE-2022-1232: Type Confusion in V8 (boo#1198053)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1649592000">- Patches for GCC 12:
  * chromium-fix-swiftshader-template.patch
  * chromium-missing-include-tuple.patch
  * chromium-webrtc-stats-missing-vector.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1649764800">- Chromium 100.0.4896.88 (boo#1198361)
  * CVE-2022-1305: Use after free in storage
  * CVE-2022-1306: Inappropriate implementation in compositing
  * CVE-2022-1307: Inappropriate implementation in full screen
  * CVE-2022-1308: Use after free in BFCache
  * CVE-2022-1309: Insufficient policy enforcement in developer tools
  * CVE-2022-1310: Use after free in regular expressions
  * CVE-2022-1311: Use after free in Chrome OS shell
  * CVE-2022-1312: Use after free in storage
  * CVE-2022-1313: Use after free in tab groups
  * CVE-2022-1314: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1650024000">- Chromium 100.0.4896.127 (boo#1198509)
  * CVE-2022-1364: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1650542400">- Fixes for go 1.18</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1651665600">- Chromium 101.0.4951.54 (boo#1199118)
- Chromium 101.0.4951.41 (boo#1198917)
  * CVE-2022-1477: Use after free in Vulkan
  * CVE-2022-1478: Use after free in SwiftShader
  * CVE-2022-1479: Use after free in ANGLE
  * CVE-2022-1480: Use after free in Device API
  * CVE-2022-1481: Use after free in Sharing
  * CVE-2022-1482: Inappropriate implementation in WebGL
  * CVE-2022-1483: Heap buffer overflow in WebGPU
  * CVE-2022-1484: Heap buffer overflow in Web UI Settings
  * CVE-2022-1485: Use after free in File System API
  * CVE-2022-1486: Type Confusion in V8
  * CVE-2022-1487: Use after free in Ozone
  * CVE-2022-1488: Inappropriate implementation in Extensions API
  * CVE-2022-1489: Out of bounds memory access in UI Shelf
  * CVE-2022-1490: Use after free in Browser Switcher
  * CVE-2022-1491: Use after free in Bookmarks
  * CVE-2022-1492: Insufficient data validation in Blink Editing
  * CVE-2022-1493: Use after free in Dev Tools
  * CVE-2022-1494: Insufficient data validation in Trusted Types
  * CVE-2022-1495: Incorrect security UI in Downloads
  * CVE-2022-1496: Use after free in File Manager
  * CVE-2022-1497: Inappropriate implementation in Input
  * CVE-2022-1498: Inappropriate implementation in HTML Parser
  * CVE-2022-1499: Inappropriate implementation in WebAuthentication
  * CVE-2022-1500: Insufficient data validation in Dev Tools
  * CVE-2022-1501: Inappropriate implementation in iframe
- Added patches:
  * chromium-101-libxml-unbundle.patch
  * chromium-101-segmentation_platform-type.patch
- Removed patches:
  * chromium-100-SCTHashdanceMetadata-move.patch
  * chromium-100-GLImplementationParts-constexpr.patch
  * chromium-100-macro-typo.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1652270400">- Chromium 101.0.4951.64 (boo#1199409)
  * CVE-2022-1633: Use after free in Sharesheet
  * CVE-2022-1634: Use after free in Browser UI
  * CVE-2022-1635: Use after free in Permission Prompts
  * CVE-2022-1636: Use after free in Performance APIs
  * CVE-2022-1637: Inappropriate implementation in Web Contents
  * CVE-2022-1638: Heap buffer overflow in V8 Internationalization
  * CVE-2022-1639: Use after free in ANGLE
  * CVE-2022-1640: Use after free in Sharing
  * CVE-2022-1641: Use after free in Web UI Diagnostics</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1652616000">- Chromium 101.0.4951.67
  * fixes for other platforms</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1653652800">- Chromium 102.0.5001.61 (boo#1199893)
  * CVE-2022-1853: Use after free in Indexed DB
  * CVE-2022-1854: Use after free in ANGLE
  * CVE-2022-1855: Use after free in Messaging
  * CVE-2022-1856: Use after free in User Education
  * CVE-2022-1857: Insufficient policy enforcement in File System API
  * CVE-2022-1858: Out of bounds read in DevTools
  * CVE-2022-1859: Use after free in Performance Manager
  * CVE-2022-1860: Use after free in UI Foundations
  * CVE-2022-1861: Use after free in Sharing
  * CVE-2022-1862: Inappropriate implementation in Extensions
  * CVE-2022-1863: Use after free in Tab Groups
  * CVE-2022-1864: Use after free in WebApp Installs
  * CVE-2022-1865: Use after free in Bookmarks
  * CVE-2022-1866: Use after free in Tablet Mode
  * CVE-2022-1867: Insufficient validation of untrusted input in Data Transfer
  * CVE-2022-1868: Inappropriate implementation in Extensions API
  * CVE-2022-1869: Type Confusion in V8
  * CVE-2022-1870: Use after free in App Service
  * CVE-2022-1871: Insufficient policy enforcement in File System API
  * CVE-2022-1872: Insufficient policy enforcement in Extensions API
  * CVE-2022-1873: Insufficient policy enforcement in COOP
  * CVE-2022-1874: Insufficient policy enforcement in Safe Browsing
  * CVE-2022-1875: Inappropriate implementation in PDF
  * CVE-2022-1876: Heap buffer overflow in DevTools
- Added patches:
  * chromium-102-compiler.patch
  * chromium-102-fenced_frame_utils-include.patch
  * chromium-102-regex_pattern-array.patch
  * chromium-102-swiftshader-template-instantiation.patch
  * chromium-102-symbolize-include.patch
  * ffmpeg-new-channel-layout.patch
- Removed patches:
  * chromium-100-compiler.patch
  * chromium-80-QuicStreamSendBuffer-deleted-move-constructor.patch
  * chromium-95-quiche-include.patch
  * chromium-fix-swiftshader-template.patch
  * chromium-missing-include-tuple.patch
  * chromium-webrtc-stats-missing-vector.patch
  * chromium-101-segmentation_platform-type.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654084800">- Disable ARM control flow integrity, it causes build issues
  at the moment
- Try a different SVG (black logo on GNOME)
- Removed patches:
  * chromium-third_party-symbolize-missing-include.patch
  (replaced by chromium-102-symbolize-include.patch)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654689600">- Switch to GTK4 on TW and Leap 15.4+ (boo#1200139)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1654862400">- Chromium 102.0.5005.115 (boo#1200423)
  * CVE-2022-2007: Use after free in WebGPU
  * CVE-2022-2008: Out of bounds memory access in WebGL
  * CVE-2022-2010: Out of bounds read in compositing
  * CVE-2022-2011: Use after free in ANGLE</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1656158400">- Chromium 103.0.5060.53 (boo#1200783)
  * CVE-2022-2156: Use after free in Base
  * CVE-2022-2157: Use after free in Interest groups
  * CVE-2022-2158: Type Confusion in V8
  * CVE-2022-2160: Insufficient policy enforcement in DevTools
  * CVE-2022-2161: Use after free in WebApp Provider
  * CVE-2022-2162: Insufficient policy enforcement in File System API
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * CVE-2022-2164: Inappropriate implementation in Extensions API
  * CVE-2022-2165: Insufficient data validation in URL formatting
- Added patches:
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-VirtualCursor-std-layout.patch
  * chromium-103-compiler.patch
- Removed patches:
  * chromium-102-compiler.patch
  * chromium-91-sql-standard-layout-type.patch
  * chromium-101-libxml-unbundle.patch
  * chromium-102-fenced_frame_utils-include.patch
  * chromium-102-swiftshader-template-instantiation.patch
  * chromium-102-symbolize-include.patch
  * chromium-97-arm-tflite-cast.patch
  * chromium-97-ScrollView-reference.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657195200">- Chromium 103.0.5060.66
  * no upstream release notes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657368000">- Chromium 103.0.5060.114 (boo#1201216)
  * CVE-2022-2294: Heap buffer overflow in WebRTC
  * CVE-2022-2295: Type Confusion in V8
  * CVE-2022-2296: Use after free in Chrome OS Shell</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1658318400">- Chromium 103.0.5060.134 (boo#1201679):
  * CVE-2022-2477 : Use after free in Guest View
  * CVE-2022-2478 : Use after free in PDF
  * CVE-2022-2479 : Insufficient validation of untrusted input in File
  * CVE-2022-2480 : Use after free in Service Worker API
  * CVE-2022-2481: Use after free in Views
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1658577600">- Switch back to Clang so that we can use BTI on aarch64
  * Gold is too old - doesn't understand BTI
  * LD crashes on aarch64
- Re-enable LTO
- Prepare move to FFmpeg 5 for new channel layout
  (requires 5.1+)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660046400">- Chromium 104.0.5112.79 (boo#1202075)
  * CVE-2022-2603: Use after free in Omnibox
  * CVE-2022-2604: Use after free in Safe Browsing
  * CVE-2022-2605: Out of bounds read in Dawn
  * CVE-2022-2606: Use after free in Managed devices API
  * CVE-2022-2607: Use after free in Tab Strip
  * CVE-2022-2608: Use after free in Overview Mode
  * CVE-2022-2609: Use after free in Nearby Share
  * CVE-2022-2610: Insufficient policy enforcement in Background Fetch
  * CVE-2022-2611: Inappropriate implementation in Fullscreen API
  * CVE-2022-2612: Side-channel information leakage in Keyboard input
  * CVE-2022-2613: Use after free in Input
  * CVE-2022-2614: Use after free in Sign-In Flow
  * CVE-2022-2615: Insufficient policy enforcement in Cookies
  * CVE-2022-2616: Inappropriate implementation in Extensions API
  * CVE-2022-2617: Use after free in Extensions API
  * CVE-2022-2618: Insufficient validation of untrusted input in Internals
  * CVE-2022-2619: Insufficient validation of untrusted input in Settings
  * CVE-2022-2620: Use after free in WebUI
  * CVE-2022-2621: Use after free in Extensions
  * CVE-2022-2622: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-2623: Use after free in Offline
  * CVE-2022-2624: Heap buffer overflow in PDF
- Added patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-104-tflite-system-zlib.patch
- Removed patches:
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-compiler.patch
- Use FFmpeg 5.1 on TW</changelog>
</package>
<package pkgid="59f03aa13865281cf6db572a9a375978d82cc82c95d4a78b46a4ee98810dafee" name="chromedriver" arch="aarch64">
  <version epoch="0" ver="105.0.5195.102" rel="bp154.2.26.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1650024000">- Chromium 100.0.4896.127 (boo#1198509)
  * CVE-2022-1364: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1650542400">- Fixes for go 1.18</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1651665600">- Chromium 101.0.4951.54 (boo#1199118)
- Chromium 101.0.4951.41 (boo#1198917)
  * CVE-2022-1477: Use after free in Vulkan
  * CVE-2022-1478: Use after free in SwiftShader
  * CVE-2022-1479: Use after free in ANGLE
  * CVE-2022-1480: Use after free in Device API
  * CVE-2022-1481: Use after free in Sharing
  * CVE-2022-1482: Inappropriate implementation in WebGL
  * CVE-2022-1483: Heap buffer overflow in WebGPU
  * CVE-2022-1484: Heap buffer overflow in Web UI Settings
  * CVE-2022-1485: Use after free in File System API
  * CVE-2022-1486: Type Confusion in V8
  * CVE-2022-1487: Use after free in Ozone
  * CVE-2022-1488: Inappropriate implementation in Extensions API
  * CVE-2022-1489: Out of bounds memory access in UI Shelf
  * CVE-2022-1490: Use after free in Browser Switcher
  * CVE-2022-1491: Use after free in Bookmarks
  * CVE-2022-1492: Insufficient data validation in Blink Editing
  * CVE-2022-1493: Use after free in Dev Tools
  * CVE-2022-1494: Insufficient data validation in Trusted Types
  * CVE-2022-1495: Incorrect security UI in Downloads
  * CVE-2022-1496: Use after free in File Manager
  * CVE-2022-1497: Inappropriate implementation in Input
  * CVE-2022-1498: Inappropriate implementation in HTML Parser
  * CVE-2022-1499: Inappropriate implementation in WebAuthentication
  * CVE-2022-1500: Insufficient data validation in Dev Tools
  * CVE-2022-1501: Inappropriate implementation in iframe
- Added patches:
  * chromium-101-libxml-unbundle.patch
  * chromium-101-segmentation_platform-type.patch
- Removed patches:
  * chromium-100-SCTHashdanceMetadata-move.patch
  * chromium-100-GLImplementationParts-constexpr.patch
  * chromium-100-macro-typo.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1652270400">- Chromium 101.0.4951.64 (boo#1199409)
  * CVE-2022-1633: Use after free in Sharesheet
  * CVE-2022-1634: Use after free in Browser UI
  * CVE-2022-1635: Use after free in Permission Prompts
  * CVE-2022-1636: Use after free in Performance APIs
  * CVE-2022-1637: Inappropriate implementation in Web Contents
  * CVE-2022-1638: Heap buffer overflow in V8 Internationalization
  * CVE-2022-1639: Use after free in ANGLE
  * CVE-2022-1640: Use after free in Sharing
  * CVE-2022-1641: Use after free in Web UI Diagnostics</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1652616000">- Chromium 101.0.4951.67
  * fixes for other platforms</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1653652800">- Chromium 102.0.5001.61 (boo#1199893)
  * CVE-2022-1853: Use after free in Indexed DB
  * CVE-2022-1854: Use after free in ANGLE
  * CVE-2022-1855: Use after free in Messaging
  * CVE-2022-1856: Use after free in User Education
  * CVE-2022-1857: Insufficient policy enforcement in File System API
  * CVE-2022-1858: Out of bounds read in DevTools
  * CVE-2022-1859: Use after free in Performance Manager
  * CVE-2022-1860: Use after free in UI Foundations
  * CVE-2022-1861: Use after free in Sharing
  * CVE-2022-1862: Inappropriate implementation in Extensions
  * CVE-2022-1863: Use after free in Tab Groups
  * CVE-2022-1864: Use after free in WebApp Installs
  * CVE-2022-1865: Use after free in Bookmarks
  * CVE-2022-1866: Use after free in Tablet Mode
  * CVE-2022-1867: Insufficient validation of untrusted input in Data Transfer
  * CVE-2022-1868: Inappropriate implementation in Extensions API
  * CVE-2022-1869: Type Confusion in V8
  * CVE-2022-1870: Use after free in App Service
  * CVE-2022-1871: Insufficient policy enforcement in File System API
  * CVE-2022-1872: Insufficient policy enforcement in Extensions API
  * CVE-2022-1873: Insufficient policy enforcement in COOP
  * CVE-2022-1874: Insufficient policy enforcement in Safe Browsing
  * CVE-2022-1875: Inappropriate implementation in PDF
  * CVE-2022-1876: Heap buffer overflow in DevTools
- Added patches:
  * chromium-102-compiler.patch
  * chromium-102-fenced_frame_utils-include.patch
  * chromium-102-regex_pattern-array.patch
  * chromium-102-swiftshader-template-instantiation.patch
  * chromium-102-symbolize-include.patch
  * ffmpeg-new-channel-layout.patch
- Removed patches:
  * chromium-100-compiler.patch
  * chromium-80-QuicStreamSendBuffer-deleted-move-constructor.patch
  * chromium-95-quiche-include.patch
  * chromium-fix-swiftshader-template.patch
  * chromium-missing-include-tuple.patch
  * chromium-webrtc-stats-missing-vector.patch
  * chromium-101-segmentation_platform-type.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654084800">- Disable ARM control flow integrity, it causes build issues
  at the moment
- Try a different SVG (black logo on GNOME)
- Removed patches:
  * chromium-third_party-symbolize-missing-include.patch
  (replaced by chromium-102-symbolize-include.patch)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654689600">- Switch to GTK4 on TW and Leap 15.4+ (boo#1200139)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1654862400">- Chromium 102.0.5005.115 (boo#1200423)
  * CVE-2022-2007: Use after free in WebGPU
  * CVE-2022-2008: Out of bounds memory access in WebGL
  * CVE-2022-2010: Out of bounds read in compositing
  * CVE-2022-2011: Use after free in ANGLE</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1656158400">- Chromium 103.0.5060.53 (boo#1200783)
  * CVE-2022-2156: Use after free in Base
  * CVE-2022-2157: Use after free in Interest groups
  * CVE-2022-2158: Type Confusion in V8
  * CVE-2022-2160: Insufficient policy enforcement in DevTools
  * CVE-2022-2161: Use after free in WebApp Provider
  * CVE-2022-2162: Insufficient policy enforcement in File System API
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * CVE-2022-2164: Inappropriate implementation in Extensions API
  * CVE-2022-2165: Insufficient data validation in URL formatting
- Added patches:
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-VirtualCursor-std-layout.patch
  * chromium-103-compiler.patch
- Removed patches:
  * chromium-102-compiler.patch
  * chromium-91-sql-standard-layout-type.patch
  * chromium-101-libxml-unbundle.patch
  * chromium-102-fenced_frame_utils-include.patch
  * chromium-102-swiftshader-template-instantiation.patch
  * chromium-102-symbolize-include.patch
  * chromium-97-arm-tflite-cast.patch
  * chromium-97-ScrollView-reference.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657195200">- Chromium 103.0.5060.66
  * no upstream release notes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657368000">- Chromium 103.0.5060.114 (boo#1201216)
  * CVE-2022-2294: Heap buffer overflow in WebRTC
  * CVE-2022-2295: Type Confusion in V8
  * CVE-2022-2296: Use after free in Chrome OS Shell</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1658318400">- Chromium 103.0.5060.134 (boo#1201679):
  * CVE-2022-2477 : Use after free in Guest View
  * CVE-2022-2478 : Use after free in PDF
  * CVE-2022-2479 : Insufficient validation of untrusted input in File
  * CVE-2022-2480 : Use after free in Service Worker API
  * CVE-2022-2481: Use after free in Views
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1658577600">- Switch back to Clang so that we can use BTI on aarch64
  * Gold is too old - doesn't understand BTI
  * LD crashes on aarch64
- Re-enable LTO
- Prepare move to FFmpeg 5 for new channel layout
  (requires 5.1+)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660046400">- Chromium 104.0.5112.79 (boo#1202075)
  * CVE-2022-2603: Use after free in Omnibox
  * CVE-2022-2604: Use after free in Safe Browsing
  * CVE-2022-2605: Out of bounds read in Dawn
  * CVE-2022-2606: Use after free in Managed devices API
  * CVE-2022-2607: Use after free in Tab Strip
  * CVE-2022-2608: Use after free in Overview Mode
  * CVE-2022-2609: Use after free in Nearby Share
  * CVE-2022-2610: Insufficient policy enforcement in Background Fetch
  * CVE-2022-2611: Inappropriate implementation in Fullscreen API
  * CVE-2022-2612: Side-channel information leakage in Keyboard input
  * CVE-2022-2613: Use after free in Input
  * CVE-2022-2614: Use after free in Sign-In Flow
  * CVE-2022-2615: Insufficient policy enforcement in Cookies
  * CVE-2022-2616: Inappropriate implementation in Extensions API
  * CVE-2022-2617: Use after free in Extensions API
  * CVE-2022-2618: Insufficient validation of untrusted input in Internals
  * CVE-2022-2619: Insufficient validation of untrusted input in Settings
  * CVE-2022-2620: Use after free in WebUI
  * CVE-2022-2621: Use after free in Extensions
  * CVE-2022-2622: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-2623: Use after free in Offline
  * CVE-2022-2624: Heap buffer overflow in PDF
- Added patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-104-tflite-system-zlib.patch
- Removed patches:
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-compiler.patch
- Use FFmpeg 5.1 on TW</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660651200">- Re-enable our version of chrome-wrapper
- Set no sandbox if root is being used (https://crbug.com/638180)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660824000">- Chromium 104.0.5112.101 (boo#1202509):
  * CVE-2022-2852: Use after free in FedCM
  * CVE-2022-2854: Use after free in SwiftShader
  * CVE-2022-2855: Use after free in ANGLE
  * CVE-2022-2857: Use after free in Blink
  * CVE-2022-2858: Use after free in Sign-In Flow
  * CVE-2022-2853: Heap buffer overflow in Downloads
  * CVE-2022-2856: Insufficient validation of untrusted input in Intents
  * CVE-2022-2859: Use after free in Chrome OS Shell
  * CVE-2022-2860: Insufficient policy enforcement in Cookies
  * CVE-2022-2861: Inappropriate implementation in Extensions API</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1661169600">- Fix quoting in chrome-wrapper, don't put cwd on LD_LIBRARY_PATH</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1662033600">- Update chromium-symbolic.svg: this fixes bsc#1202403.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1662638400">- Chromium 105.0.5195.102 (boo#1203102):
  * CVE-2022-3075: Insufficient data validation in Mojo
- Chromium 105.0.5195.52 (boo#1202964):
  * CVE-2022-3038: Use after free in Network Service
  * CVE-2022-3039: Use after free in WebSQL
  * CVE-2022-3040: Use after free in Layout
  * CVE-2022-3041: Use after free in WebSQL
  * CVE-2022-3042: Use after free in PhoneHub
  * CVE-2022-3043: Heap buffer overflow in Screen Capture
  * CVE-2022-3044: Inappropriate implementation in Site Isolation
  * CVE-2022-3045: Insufficient validation of untrusted input in V8
  * CVE-2022-3046: Use after free in Browser Tag
  * CVE-2022-3071: Use after free in Tab Strip
  * CVE-2022-3047: Insufficient policy enforcement in Extensions API
  * CVE-2022-3048: Inappropriate implementation in Chrome OS lockscreen
  * CVE-2022-3049: Use after free in SplitScreen
  * CVE-2022-3050: Heap buffer overflow in WebUI
  * CVE-2022-3051: Heap buffer overflow in Exosphere
  * CVE-2022-3052: Heap buffer overflow in Window Manager
  * CVE-2022-3053: Inappropriate implementation in Pointer Lock
  * CVE-2022-3054: Insufficient policy enforcement in DevTools
  * CVE-2022-3055: Use after free in Passwords
  * CVE-2022-3056: Insufficient policy enforcement in Content Security Policy
  * CVE-2022-3057: Inappropriate implementation in iframe Sandbox
  * CVE-2022-3058: Use after free in Sign-In Flow
- Added patches:
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Bitmap-include.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-wayland-1.20.patch
  * chromium-105-compiler.patch
- Removed patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-78-protobuf-RepeatedPtrField-export.patch</changelog>
</package>
<package pkgid="63193398ec5d4a6226d81fe62e525fec5b60ed60dbd118dfa0fb8dff1c193547" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="105.0.5195.102" rel="bp154.2.26.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1650024000">- Chromium 100.0.4896.127 (boo#1198509)
  * CVE-2022-1364: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1650542400">- Fixes for go 1.18</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1651665600">- Chromium 101.0.4951.54 (boo#1199118)
- Chromium 101.0.4951.41 (boo#1198917)
  * CVE-2022-1477: Use after free in Vulkan
  * CVE-2022-1478: Use after free in SwiftShader
  * CVE-2022-1479: Use after free in ANGLE
  * CVE-2022-1480: Use after free in Device API
  * CVE-2022-1481: Use after free in Sharing
  * CVE-2022-1482: Inappropriate implementation in WebGL
  * CVE-2022-1483: Heap buffer overflow in WebGPU
  * CVE-2022-1484: Heap buffer overflow in Web UI Settings
  * CVE-2022-1485: Use after free in File System API
  * CVE-2022-1486: Type Confusion in V8
  * CVE-2022-1487: Use after free in Ozone
  * CVE-2022-1488: Inappropriate implementation in Extensions API
  * CVE-2022-1489: Out of bounds memory access in UI Shelf
  * CVE-2022-1490: Use after free in Browser Switcher
  * CVE-2022-1491: Use after free in Bookmarks
  * CVE-2022-1492: Insufficient data validation in Blink Editing
  * CVE-2022-1493: Use after free in Dev Tools
  * CVE-2022-1494: Insufficient data validation in Trusted Types
  * CVE-2022-1495: Incorrect security UI in Downloads
  * CVE-2022-1496: Use after free in File Manager
  * CVE-2022-1497: Inappropriate implementation in Input
  * CVE-2022-1498: Inappropriate implementation in HTML Parser
  * CVE-2022-1499: Inappropriate implementation in WebAuthentication
  * CVE-2022-1500: Insufficient data validation in Dev Tools
  * CVE-2022-1501: Inappropriate implementation in iframe
- Added patches:
  * chromium-101-libxml-unbundle.patch
  * chromium-101-segmentation_platform-type.patch
- Removed patches:
  * chromium-100-SCTHashdanceMetadata-move.patch
  * chromium-100-GLImplementationParts-constexpr.patch
  * chromium-100-macro-typo.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1652270400">- Chromium 101.0.4951.64 (boo#1199409)
  * CVE-2022-1633: Use after free in Sharesheet
  * CVE-2022-1634: Use after free in Browser UI
  * CVE-2022-1635: Use after free in Permission Prompts
  * CVE-2022-1636: Use after free in Performance APIs
  * CVE-2022-1637: Inappropriate implementation in Web Contents
  * CVE-2022-1638: Heap buffer overflow in V8 Internationalization
  * CVE-2022-1639: Use after free in ANGLE
  * CVE-2022-1640: Use after free in Sharing
  * CVE-2022-1641: Use after free in Web UI Diagnostics</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1652616000">- Chromium 101.0.4951.67
  * fixes for other platforms</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1653652800">- Chromium 102.0.5001.61 (boo#1199893)
  * CVE-2022-1853: Use after free in Indexed DB
  * CVE-2022-1854: Use after free in ANGLE
  * CVE-2022-1855: Use after free in Messaging
  * CVE-2022-1856: Use after free in User Education
  * CVE-2022-1857: Insufficient policy enforcement in File System API
  * CVE-2022-1858: Out of bounds read in DevTools
  * CVE-2022-1859: Use after free in Performance Manager
  * CVE-2022-1860: Use after free in UI Foundations
  * CVE-2022-1861: Use after free in Sharing
  * CVE-2022-1862: Inappropriate implementation in Extensions
  * CVE-2022-1863: Use after free in Tab Groups
  * CVE-2022-1864: Use after free in WebApp Installs
  * CVE-2022-1865: Use after free in Bookmarks
  * CVE-2022-1866: Use after free in Tablet Mode
  * CVE-2022-1867: Insufficient validation of untrusted input in Data Transfer
  * CVE-2022-1868: Inappropriate implementation in Extensions API
  * CVE-2022-1869: Type Confusion in V8
  * CVE-2022-1870: Use after free in App Service
  * CVE-2022-1871: Insufficient policy enforcement in File System API
  * CVE-2022-1872: Insufficient policy enforcement in Extensions API
  * CVE-2022-1873: Insufficient policy enforcement in COOP
  * CVE-2022-1874: Insufficient policy enforcement in Safe Browsing
  * CVE-2022-1875: Inappropriate implementation in PDF
  * CVE-2022-1876: Heap buffer overflow in DevTools
- Added patches:
  * chromium-102-compiler.patch
  * chromium-102-fenced_frame_utils-include.patch
  * chromium-102-regex_pattern-array.patch
  * chromium-102-swiftshader-template-instantiation.patch
  * chromium-102-symbolize-include.patch
  * ffmpeg-new-channel-layout.patch
- Removed patches:
  * chromium-100-compiler.patch
  * chromium-80-QuicStreamSendBuffer-deleted-move-constructor.patch
  * chromium-95-quiche-include.patch
  * chromium-fix-swiftshader-template.patch
  * chromium-missing-include-tuple.patch
  * chromium-webrtc-stats-missing-vector.patch
  * chromium-101-segmentation_platform-type.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654084800">- Disable ARM control flow integrity, it causes build issues
  at the moment
- Try a different SVG (black logo on GNOME)
- Removed patches:
  * chromium-third_party-symbolize-missing-include.patch
  (replaced by chromium-102-symbolize-include.patch)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654689600">- Switch to GTK4 on TW and Leap 15.4+ (boo#1200139)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1654862400">- Chromium 102.0.5005.115 (boo#1200423)
  * CVE-2022-2007: Use after free in WebGPU
  * CVE-2022-2008: Out of bounds memory access in WebGL
  * CVE-2022-2010: Out of bounds read in compositing
  * CVE-2022-2011: Use after free in ANGLE</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1656158400">- Chromium 103.0.5060.53 (boo#1200783)
  * CVE-2022-2156: Use after free in Base
  * CVE-2022-2157: Use after free in Interest groups
  * CVE-2022-2158: Type Confusion in V8
  * CVE-2022-2160: Insufficient policy enforcement in DevTools
  * CVE-2022-2161: Use after free in WebApp Provider
  * CVE-2022-2162: Insufficient policy enforcement in File System API
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * CVE-2022-2164: Inappropriate implementation in Extensions API
  * CVE-2022-2165: Insufficient data validation in URL formatting
- Added patches:
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-VirtualCursor-std-layout.patch
  * chromium-103-compiler.patch
- Removed patches:
  * chromium-102-compiler.patch
  * chromium-91-sql-standard-layout-type.patch
  * chromium-101-libxml-unbundle.patch
  * chromium-102-fenced_frame_utils-include.patch
  * chromium-102-swiftshader-template-instantiation.patch
  * chromium-102-symbolize-include.patch
  * chromium-97-arm-tflite-cast.patch
  * chromium-97-ScrollView-reference.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657195200">- Chromium 103.0.5060.66
  * no upstream release notes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657368000">- Chromium 103.0.5060.114 (boo#1201216)
  * CVE-2022-2294: Heap buffer overflow in WebRTC
  * CVE-2022-2295: Type Confusion in V8
  * CVE-2022-2296: Use after free in Chrome OS Shell</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1658318400">- Chromium 103.0.5060.134 (boo#1201679):
  * CVE-2022-2477 : Use after free in Guest View
  * CVE-2022-2478 : Use after free in PDF
  * CVE-2022-2479 : Insufficient validation of untrusted input in File
  * CVE-2022-2480 : Use after free in Service Worker API
  * CVE-2022-2481: Use after free in Views
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1658577600">- Switch back to Clang so that we can use BTI on aarch64
  * Gold is too old - doesn't understand BTI
  * LD crashes on aarch64
- Re-enable LTO
- Prepare move to FFmpeg 5 for new channel layout
  (requires 5.1+)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660046400">- Chromium 104.0.5112.79 (boo#1202075)
  * CVE-2022-2603: Use after free in Omnibox
  * CVE-2022-2604: Use after free in Safe Browsing
  * CVE-2022-2605: Out of bounds read in Dawn
  * CVE-2022-2606: Use after free in Managed devices API
  * CVE-2022-2607: Use after free in Tab Strip
  * CVE-2022-2608: Use after free in Overview Mode
  * CVE-2022-2609: Use after free in Nearby Share
  * CVE-2022-2610: Insufficient policy enforcement in Background Fetch
  * CVE-2022-2611: Inappropriate implementation in Fullscreen API
  * CVE-2022-2612: Side-channel information leakage in Keyboard input
  * CVE-2022-2613: Use after free in Input
  * CVE-2022-2614: Use after free in Sign-In Flow
  * CVE-2022-2615: Insufficient policy enforcement in Cookies
  * CVE-2022-2616: Inappropriate implementation in Extensions API
  * CVE-2022-2617: Use after free in Extensions API
  * CVE-2022-2618: Insufficient validation of untrusted input in Internals
  * CVE-2022-2619: Insufficient validation of untrusted input in Settings
  * CVE-2022-2620: Use after free in WebUI
  * CVE-2022-2621: Use after free in Extensions
  * CVE-2022-2622: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-2623: Use after free in Offline
  * CVE-2022-2624: Heap buffer overflow in PDF
- Added patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-104-tflite-system-zlib.patch
- Removed patches:
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-compiler.patch
- Use FFmpeg 5.1 on TW</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660651200">- Re-enable our version of chrome-wrapper
- Set no sandbox if root is being used (https://crbug.com/638180)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660824000">- Chromium 104.0.5112.101 (boo#1202509):
  * CVE-2022-2852: Use after free in FedCM
  * CVE-2022-2854: Use after free in SwiftShader
  * CVE-2022-2855: Use after free in ANGLE
  * CVE-2022-2857: Use after free in Blink
  * CVE-2022-2858: Use after free in Sign-In Flow
  * CVE-2022-2853: Heap buffer overflow in Downloads
  * CVE-2022-2856: Insufficient validation of untrusted input in Intents
  * CVE-2022-2859: Use after free in Chrome OS Shell
  * CVE-2022-2860: Insufficient policy enforcement in Cookies
  * CVE-2022-2861: Inappropriate implementation in Extensions API</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1661169600">- Fix quoting in chrome-wrapper, don't put cwd on LD_LIBRARY_PATH</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1662033600">- Update chromium-symbolic.svg: this fixes bsc#1202403.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1662638400">- Chromium 105.0.5195.102 (boo#1203102):
  * CVE-2022-3075: Insufficient data validation in Mojo
- Chromium 105.0.5195.52 (boo#1202964):
  * CVE-2022-3038: Use after free in Network Service
  * CVE-2022-3039: Use after free in WebSQL
  * CVE-2022-3040: Use after free in Layout
  * CVE-2022-3041: Use after free in WebSQL
  * CVE-2022-3042: Use after free in PhoneHub
  * CVE-2022-3043: Heap buffer overflow in Screen Capture
  * CVE-2022-3044: Inappropriate implementation in Site Isolation
  * CVE-2022-3045: Insufficient validation of untrusted input in V8
  * CVE-2022-3046: Use after free in Browser Tag
  * CVE-2022-3071: Use after free in Tab Strip
  * CVE-2022-3047: Insufficient policy enforcement in Extensions API
  * CVE-2022-3048: Inappropriate implementation in Chrome OS lockscreen
  * CVE-2022-3049: Use after free in SplitScreen
  * CVE-2022-3050: Heap buffer overflow in WebUI
  * CVE-2022-3051: Heap buffer overflow in Exosphere
  * CVE-2022-3052: Heap buffer overflow in Window Manager
  * CVE-2022-3053: Inappropriate implementation in Pointer Lock
  * CVE-2022-3054: Insufficient policy enforcement in DevTools
  * CVE-2022-3055: Use after free in Passwords
  * CVE-2022-3056: Insufficient policy enforcement in Content Security Policy
  * CVE-2022-3057: Inappropriate implementation in iframe Sandbox
  * CVE-2022-3058: Use after free in Sign-In Flow
- Added patches:
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Bitmap-include.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-wayland-1.20.patch
  * chromium-105-compiler.patch
- Removed patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-78-protobuf-RepeatedPtrField-export.patch</changelog>
</package>
<package pkgid="b853407fa433fcf7f568dedd544d1e1ce244107b458731c7ed6ecfce7f0d1a9b" name="chromedriver" arch="aarch64">
  <version epoch="0" ver="105.0.5195.127" rel="bp154.2.29.1"/>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1650542400">- Fixes for go 1.18</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1651665600">- Chromium 101.0.4951.54 (boo#1199118)
- Chromium 101.0.4951.41 (boo#1198917)
  * CVE-2022-1477: Use after free in Vulkan
  * CVE-2022-1478: Use after free in SwiftShader
  * CVE-2022-1479: Use after free in ANGLE
  * CVE-2022-1480: Use after free in Device API
  * CVE-2022-1481: Use after free in Sharing
  * CVE-2022-1482: Inappropriate implementation in WebGL
  * CVE-2022-1483: Heap buffer overflow in WebGPU
  * CVE-2022-1484: Heap buffer overflow in Web UI Settings
  * CVE-2022-1485: Use after free in File System API
  * CVE-2022-1486: Type Confusion in V8
  * CVE-2022-1487: Use after free in Ozone
  * CVE-2022-1488: Inappropriate implementation in Extensions API
  * CVE-2022-1489: Out of bounds memory access in UI Shelf
  * CVE-2022-1490: Use after free in Browser Switcher
  * CVE-2022-1491: Use after free in Bookmarks
  * CVE-2022-1492: Insufficient data validation in Blink Editing
  * CVE-2022-1493: Use after free in Dev Tools
  * CVE-2022-1494: Insufficient data validation in Trusted Types
  * CVE-2022-1495: Incorrect security UI in Downloads
  * CVE-2022-1496: Use after free in File Manager
  * CVE-2022-1497: Inappropriate implementation in Input
  * CVE-2022-1498: Inappropriate implementation in HTML Parser
  * CVE-2022-1499: Inappropriate implementation in WebAuthentication
  * CVE-2022-1500: Insufficient data validation in Dev Tools
  * CVE-2022-1501: Inappropriate implementation in iframe
- Added patches:
  * chromium-101-libxml-unbundle.patch
  * chromium-101-segmentation_platform-type.patch
- Removed patches:
  * chromium-100-SCTHashdanceMetadata-move.patch
  * chromium-100-GLImplementationParts-constexpr.patch
  * chromium-100-macro-typo.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1652270400">- Chromium 101.0.4951.64 (boo#1199409)
  * CVE-2022-1633: Use after free in Sharesheet
  * CVE-2022-1634: Use after free in Browser UI
  * CVE-2022-1635: Use after free in Permission Prompts
  * CVE-2022-1636: Use after free in Performance APIs
  * CVE-2022-1637: Inappropriate implementation in Web Contents
  * CVE-2022-1638: Heap buffer overflow in V8 Internationalization
  * CVE-2022-1639: Use after free in ANGLE
  * CVE-2022-1640: Use after free in Sharing
  * CVE-2022-1641: Use after free in Web UI Diagnostics</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1652616000">- Chromium 101.0.4951.67
  * fixes for other platforms</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1653652800">- Chromium 102.0.5001.61 (boo#1199893)
  * CVE-2022-1853: Use after free in Indexed DB
  * CVE-2022-1854: Use after free in ANGLE
  * CVE-2022-1855: Use after free in Messaging
  * CVE-2022-1856: Use after free in User Education
  * CVE-2022-1857: Insufficient policy enforcement in File System API
  * CVE-2022-1858: Out of bounds read in DevTools
  * CVE-2022-1859: Use after free in Performance Manager
  * CVE-2022-1860: Use after free in UI Foundations
  * CVE-2022-1861: Use after free in Sharing
  * CVE-2022-1862: Inappropriate implementation in Extensions
  * CVE-2022-1863: Use after free in Tab Groups
  * CVE-2022-1864: Use after free in WebApp Installs
  * CVE-2022-1865: Use after free in Bookmarks
  * CVE-2022-1866: Use after free in Tablet Mode
  * CVE-2022-1867: Insufficient validation of untrusted input in Data Transfer
  * CVE-2022-1868: Inappropriate implementation in Extensions API
  * CVE-2022-1869: Type Confusion in V8
  * CVE-2022-1870: Use after free in App Service
  * CVE-2022-1871: Insufficient policy enforcement in File System API
  * CVE-2022-1872: Insufficient policy enforcement in Extensions API
  * CVE-2022-1873: Insufficient policy enforcement in COOP
  * CVE-2022-1874: Insufficient policy enforcement in Safe Browsing
  * CVE-2022-1875: Inappropriate implementation in PDF
  * CVE-2022-1876: Heap buffer overflow in DevTools
- Added patches:
  * chromium-102-compiler.patch
  * chromium-102-fenced_frame_utils-include.patch
  * chromium-102-regex_pattern-array.patch
  * chromium-102-swiftshader-template-instantiation.patch
  * chromium-102-symbolize-include.patch
  * ffmpeg-new-channel-layout.patch
- Removed patches:
  * chromium-100-compiler.patch
  * chromium-80-QuicStreamSendBuffer-deleted-move-constructor.patch
  * chromium-95-quiche-include.patch
  * chromium-fix-swiftshader-template.patch
  * chromium-missing-include-tuple.patch
  * chromium-webrtc-stats-missing-vector.patch
  * chromium-101-segmentation_platform-type.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654084800">- Disable ARM control flow integrity, it causes build issues
  at the moment
- Try a different SVG (black logo on GNOME)
- Removed patches:
  * chromium-third_party-symbolize-missing-include.patch
  (replaced by chromium-102-symbolize-include.patch)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654689600">- Switch to GTK4 on TW and Leap 15.4+ (boo#1200139)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1654862400">- Chromium 102.0.5005.115 (boo#1200423)
  * CVE-2022-2007: Use after free in WebGPU
  * CVE-2022-2008: Out of bounds memory access in WebGL
  * CVE-2022-2010: Out of bounds read in compositing
  * CVE-2022-2011: Use after free in ANGLE</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1656158400">- Chromium 103.0.5060.53 (boo#1200783)
  * CVE-2022-2156: Use after free in Base
  * CVE-2022-2157: Use after free in Interest groups
  * CVE-2022-2158: Type Confusion in V8
  * CVE-2022-2160: Insufficient policy enforcement in DevTools
  * CVE-2022-2161: Use after free in WebApp Provider
  * CVE-2022-2162: Insufficient policy enforcement in File System API
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * CVE-2022-2164: Inappropriate implementation in Extensions API
  * CVE-2022-2165: Insufficient data validation in URL formatting
- Added patches:
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-VirtualCursor-std-layout.patch
  * chromium-103-compiler.patch
- Removed patches:
  * chromium-102-compiler.patch
  * chromium-91-sql-standard-layout-type.patch
  * chromium-101-libxml-unbundle.patch
  * chromium-102-fenced_frame_utils-include.patch
  * chromium-102-swiftshader-template-instantiation.patch
  * chromium-102-symbolize-include.patch
  * chromium-97-arm-tflite-cast.patch
  * chromium-97-ScrollView-reference.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657195200">- Chromium 103.0.5060.66
  * no upstream release notes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657368000">- Chromium 103.0.5060.114 (boo#1201216)
  * CVE-2022-2294: Heap buffer overflow in WebRTC
  * CVE-2022-2295: Type Confusion in V8
  * CVE-2022-2296: Use after free in Chrome OS Shell</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1658318400">- Chromium 103.0.5060.134 (boo#1201679):
  * CVE-2022-2477 : Use after free in Guest View
  * CVE-2022-2478 : Use after free in PDF
  * CVE-2022-2479 : Insufficient validation of untrusted input in File
  * CVE-2022-2480 : Use after free in Service Worker API
  * CVE-2022-2481: Use after free in Views
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1658577600">- Switch back to Clang so that we can use BTI on aarch64
  * Gold is too old - doesn't understand BTI
  * LD crashes on aarch64
- Re-enable LTO
- Prepare move to FFmpeg 5 for new channel layout
  (requires 5.1+)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660046400">- Chromium 104.0.5112.79 (boo#1202075)
  * CVE-2022-2603: Use after free in Omnibox
  * CVE-2022-2604: Use after free in Safe Browsing
  * CVE-2022-2605: Out of bounds read in Dawn
  * CVE-2022-2606: Use after free in Managed devices API
  * CVE-2022-2607: Use after free in Tab Strip
  * CVE-2022-2608: Use after free in Overview Mode
  * CVE-2022-2609: Use after free in Nearby Share
  * CVE-2022-2610: Insufficient policy enforcement in Background Fetch
  * CVE-2022-2611: Inappropriate implementation in Fullscreen API
  * CVE-2022-2612: Side-channel information leakage in Keyboard input
  * CVE-2022-2613: Use after free in Input
  * CVE-2022-2614: Use after free in Sign-In Flow
  * CVE-2022-2615: Insufficient policy enforcement in Cookies
  * CVE-2022-2616: Inappropriate implementation in Extensions API
  * CVE-2022-2617: Use after free in Extensions API
  * CVE-2022-2618: Insufficient validation of untrusted input in Internals
  * CVE-2022-2619: Insufficient validation of untrusted input in Settings
  * CVE-2022-2620: Use after free in WebUI
  * CVE-2022-2621: Use after free in Extensions
  * CVE-2022-2622: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-2623: Use after free in Offline
  * CVE-2022-2624: Heap buffer overflow in PDF
- Added patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-104-tflite-system-zlib.patch
- Removed patches:
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-compiler.patch
- Use FFmpeg 5.1 on TW</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660651200">- Re-enable our version of chrome-wrapper
- Set no sandbox if root is being used (https://crbug.com/638180)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660824000">- Chromium 104.0.5112.101 (boo#1202509):
  * CVE-2022-2852: Use after free in FedCM
  * CVE-2022-2854: Use after free in SwiftShader
  * CVE-2022-2855: Use after free in ANGLE
  * CVE-2022-2857: Use after free in Blink
  * CVE-2022-2858: Use after free in Sign-In Flow
  * CVE-2022-2853: Heap buffer overflow in Downloads
  * CVE-2022-2856: Insufficient validation of untrusted input in Intents
  * CVE-2022-2859: Use after free in Chrome OS Shell
  * CVE-2022-2860: Insufficient policy enforcement in Cookies
  * CVE-2022-2861: Inappropriate implementation in Extensions API</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1661169600">- Fix quoting in chrome-wrapper, don't put cwd on LD_LIBRARY_PATH</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1662033600">- Update chromium-symbolic.svg: this fixes bsc#1202403.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1662638400">- Chromium 105.0.5195.102 (boo#1203102):
  * CVE-2022-3075: Insufficient data validation in Mojo
- Chromium 105.0.5195.52 (boo#1202964):
  * CVE-2022-3038: Use after free in Network Service
  * CVE-2022-3039: Use after free in WebSQL
  * CVE-2022-3040: Use after free in Layout
  * CVE-2022-3041: Use after free in WebSQL
  * CVE-2022-3042: Use after free in PhoneHub
  * CVE-2022-3043: Heap buffer overflow in Screen Capture
  * CVE-2022-3044: Inappropriate implementation in Site Isolation
  * CVE-2022-3045: Insufficient validation of untrusted input in V8
  * CVE-2022-3046: Use after free in Browser Tag
  * CVE-2022-3071: Use after free in Tab Strip
  * CVE-2022-3047: Insufficient policy enforcement in Extensions API
  * CVE-2022-3048: Inappropriate implementation in Chrome OS lockscreen
  * CVE-2022-3049: Use after free in SplitScreen
  * CVE-2022-3050: Heap buffer overflow in WebUI
  * CVE-2022-3051: Heap buffer overflow in Exosphere
  * CVE-2022-3052: Heap buffer overflow in Window Manager
  * CVE-2022-3053: Inappropriate implementation in Pointer Lock
  * CVE-2022-3054: Insufficient policy enforcement in DevTools
  * CVE-2022-3055: Use after free in Passwords
  * CVE-2022-3056: Insufficient policy enforcement in Content Security Policy
  * CVE-2022-3057: Inappropriate implementation in iframe Sandbox
  * CVE-2022-3058: Use after free in Sign-In Flow
- Added patches:
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Bitmap-include.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-wayland-1.20.patch
  * chromium-105-compiler.patch
- Removed patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-78-protobuf-RepeatedPtrField-export.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663156800">- Chromium 105.0.5195.127 (boo#1203419):
  * CVE-2022-3195: Out of bounds write in Storage
  * CVE-2022-3196: Use after free in PDF
  * CVE-2022-3197: Use after free in PDF
  * CVE-2022-3198: Use after free in PDF
  * CVE-2022-3199: Use after free in Frames
  * CVE-2022-3200: Heap buffer overflow in Internals
  * CVE-2022-3201: Insufficient validation of untrusted input in DevTools
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
</package>
<package pkgid="83657ee3bd7d21eedb03dd82721a03a1f286404d6bf7c9d62e254f7fec0fd398" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="105.0.5195.127" rel="bp154.2.29.1"/>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1650542400">- Fixes for go 1.18</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1651665600">- Chromium 101.0.4951.54 (boo#1199118)
- Chromium 101.0.4951.41 (boo#1198917)
  * CVE-2022-1477: Use after free in Vulkan
  * CVE-2022-1478: Use after free in SwiftShader
  * CVE-2022-1479: Use after free in ANGLE
  * CVE-2022-1480: Use after free in Device API
  * CVE-2022-1481: Use after free in Sharing
  * CVE-2022-1482: Inappropriate implementation in WebGL
  * CVE-2022-1483: Heap buffer overflow in WebGPU
  * CVE-2022-1484: Heap buffer overflow in Web UI Settings
  * CVE-2022-1485: Use after free in File System API
  * CVE-2022-1486: Type Confusion in V8
  * CVE-2022-1487: Use after free in Ozone
  * CVE-2022-1488: Inappropriate implementation in Extensions API
  * CVE-2022-1489: Out of bounds memory access in UI Shelf
  * CVE-2022-1490: Use after free in Browser Switcher
  * CVE-2022-1491: Use after free in Bookmarks
  * CVE-2022-1492: Insufficient data validation in Blink Editing
  * CVE-2022-1493: Use after free in Dev Tools
  * CVE-2022-1494: Insufficient data validation in Trusted Types
  * CVE-2022-1495: Incorrect security UI in Downloads
  * CVE-2022-1496: Use after free in File Manager
  * CVE-2022-1497: Inappropriate implementation in Input
  * CVE-2022-1498: Inappropriate implementation in HTML Parser
  * CVE-2022-1499: Inappropriate implementation in WebAuthentication
  * CVE-2022-1500: Insufficient data validation in Dev Tools
  * CVE-2022-1501: Inappropriate implementation in iframe
- Added patches:
  * chromium-101-libxml-unbundle.patch
  * chromium-101-segmentation_platform-type.patch
- Removed patches:
  * chromium-100-SCTHashdanceMetadata-move.patch
  * chromium-100-GLImplementationParts-constexpr.patch
  * chromium-100-macro-typo.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1652270400">- Chromium 101.0.4951.64 (boo#1199409)
  * CVE-2022-1633: Use after free in Sharesheet
  * CVE-2022-1634: Use after free in Browser UI
  * CVE-2022-1635: Use after free in Permission Prompts
  * CVE-2022-1636: Use after free in Performance APIs
  * CVE-2022-1637: Inappropriate implementation in Web Contents
  * CVE-2022-1638: Heap buffer overflow in V8 Internationalization
  * CVE-2022-1639: Use after free in ANGLE
  * CVE-2022-1640: Use after free in Sharing
  * CVE-2022-1641: Use after free in Web UI Diagnostics</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1652616000">- Chromium 101.0.4951.67
  * fixes for other platforms</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1653652800">- Chromium 102.0.5001.61 (boo#1199893)
  * CVE-2022-1853: Use after free in Indexed DB
  * CVE-2022-1854: Use after free in ANGLE
  * CVE-2022-1855: Use after free in Messaging
  * CVE-2022-1856: Use after free in User Education
  * CVE-2022-1857: Insufficient policy enforcement in File System API
  * CVE-2022-1858: Out of bounds read in DevTools
  * CVE-2022-1859: Use after free in Performance Manager
  * CVE-2022-1860: Use after free in UI Foundations
  * CVE-2022-1861: Use after free in Sharing
  * CVE-2022-1862: Inappropriate implementation in Extensions
  * CVE-2022-1863: Use after free in Tab Groups
  * CVE-2022-1864: Use after free in WebApp Installs
  * CVE-2022-1865: Use after free in Bookmarks
  * CVE-2022-1866: Use after free in Tablet Mode
  * CVE-2022-1867: Insufficient validation of untrusted input in Data Transfer
  * CVE-2022-1868: Inappropriate implementation in Extensions API
  * CVE-2022-1869: Type Confusion in V8
  * CVE-2022-1870: Use after free in App Service
  * CVE-2022-1871: Insufficient policy enforcement in File System API
  * CVE-2022-1872: Insufficient policy enforcement in Extensions API
  * CVE-2022-1873: Insufficient policy enforcement in COOP
  * CVE-2022-1874: Insufficient policy enforcement in Safe Browsing
  * CVE-2022-1875: Inappropriate implementation in PDF
  * CVE-2022-1876: Heap buffer overflow in DevTools
- Added patches:
  * chromium-102-compiler.patch
  * chromium-102-fenced_frame_utils-include.patch
  * chromium-102-regex_pattern-array.patch
  * chromium-102-swiftshader-template-instantiation.patch
  * chromium-102-symbolize-include.patch
  * ffmpeg-new-channel-layout.patch
- Removed patches:
  * chromium-100-compiler.patch
  * chromium-80-QuicStreamSendBuffer-deleted-move-constructor.patch
  * chromium-95-quiche-include.patch
  * chromium-fix-swiftshader-template.patch
  * chromium-missing-include-tuple.patch
  * chromium-webrtc-stats-missing-vector.patch
  * chromium-101-segmentation_platform-type.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654084800">- Disable ARM control flow integrity, it causes build issues
  at the moment
- Try a different SVG (black logo on GNOME)
- Removed patches:
  * chromium-third_party-symbolize-missing-include.patch
  (replaced by chromium-102-symbolize-include.patch)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654689600">- Switch to GTK4 on TW and Leap 15.4+ (boo#1200139)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1654862400">- Chromium 102.0.5005.115 (boo#1200423)
  * CVE-2022-2007: Use after free in WebGPU
  * CVE-2022-2008: Out of bounds memory access in WebGL
  * CVE-2022-2010: Out of bounds read in compositing
  * CVE-2022-2011: Use after free in ANGLE</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1656158400">- Chromium 103.0.5060.53 (boo#1200783)
  * CVE-2022-2156: Use after free in Base
  * CVE-2022-2157: Use after free in Interest groups
  * CVE-2022-2158: Type Confusion in V8
  * CVE-2022-2160: Insufficient policy enforcement in DevTools
  * CVE-2022-2161: Use after free in WebApp Provider
  * CVE-2022-2162: Insufficient policy enforcement in File System API
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * CVE-2022-2164: Inappropriate implementation in Extensions API
  * CVE-2022-2165: Insufficient data validation in URL formatting
- Added patches:
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-VirtualCursor-std-layout.patch
  * chromium-103-compiler.patch
- Removed patches:
  * chromium-102-compiler.patch
  * chromium-91-sql-standard-layout-type.patch
  * chromium-101-libxml-unbundle.patch
  * chromium-102-fenced_frame_utils-include.patch
  * chromium-102-swiftshader-template-instantiation.patch
  * chromium-102-symbolize-include.patch
  * chromium-97-arm-tflite-cast.patch
  * chromium-97-ScrollView-reference.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657195200">- Chromium 103.0.5060.66
  * no upstream release notes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657368000">- Chromium 103.0.5060.114 (boo#1201216)
  * CVE-2022-2294: Heap buffer overflow in WebRTC
  * CVE-2022-2295: Type Confusion in V8
  * CVE-2022-2296: Use after free in Chrome OS Shell</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1658318400">- Chromium 103.0.5060.134 (boo#1201679):
  * CVE-2022-2477 : Use after free in Guest View
  * CVE-2022-2478 : Use after free in PDF
  * CVE-2022-2479 : Insufficient validation of untrusted input in File
  * CVE-2022-2480 : Use after free in Service Worker API
  * CVE-2022-2481: Use after free in Views
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1658577600">- Switch back to Clang so that we can use BTI on aarch64
  * Gold is too old - doesn't understand BTI
  * LD crashes on aarch64
- Re-enable LTO
- Prepare move to FFmpeg 5 for new channel layout
  (requires 5.1+)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660046400">- Chromium 104.0.5112.79 (boo#1202075)
  * CVE-2022-2603: Use after free in Omnibox
  * CVE-2022-2604: Use after free in Safe Browsing
  * CVE-2022-2605: Out of bounds read in Dawn
  * CVE-2022-2606: Use after free in Managed devices API
  * CVE-2022-2607: Use after free in Tab Strip
  * CVE-2022-2608: Use after free in Overview Mode
  * CVE-2022-2609: Use after free in Nearby Share
  * CVE-2022-2610: Insufficient policy enforcement in Background Fetch
  * CVE-2022-2611: Inappropriate implementation in Fullscreen API
  * CVE-2022-2612: Side-channel information leakage in Keyboard input
  * CVE-2022-2613: Use after free in Input
  * CVE-2022-2614: Use after free in Sign-In Flow
  * CVE-2022-2615: Insufficient policy enforcement in Cookies
  * CVE-2022-2616: Inappropriate implementation in Extensions API
  * CVE-2022-2617: Use after free in Extensions API
  * CVE-2022-2618: Insufficient validation of untrusted input in Internals
  * CVE-2022-2619: Insufficient validation of untrusted input in Settings
  * CVE-2022-2620: Use after free in WebUI
  * CVE-2022-2621: Use after free in Extensions
  * CVE-2022-2622: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-2623: Use after free in Offline
  * CVE-2022-2624: Heap buffer overflow in PDF
- Added patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-104-tflite-system-zlib.patch
- Removed patches:
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-compiler.patch
- Use FFmpeg 5.1 on TW</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660651200">- Re-enable our version of chrome-wrapper
- Set no sandbox if root is being used (https://crbug.com/638180)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660824000">- Chromium 104.0.5112.101 (boo#1202509):
  * CVE-2022-2852: Use after free in FedCM
  * CVE-2022-2854: Use after free in SwiftShader
  * CVE-2022-2855: Use after free in ANGLE
  * CVE-2022-2857: Use after free in Blink
  * CVE-2022-2858: Use after free in Sign-In Flow
  * CVE-2022-2853: Heap buffer overflow in Downloads
  * CVE-2022-2856: Insufficient validation of untrusted input in Intents
  * CVE-2022-2859: Use after free in Chrome OS Shell
  * CVE-2022-2860: Insufficient policy enforcement in Cookies
  * CVE-2022-2861: Inappropriate implementation in Extensions API</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1661169600">- Fix quoting in chrome-wrapper, don't put cwd on LD_LIBRARY_PATH</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1662033600">- Update chromium-symbolic.svg: this fixes bsc#1202403.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1662638400">- Chromium 105.0.5195.102 (boo#1203102):
  * CVE-2022-3075: Insufficient data validation in Mojo
- Chromium 105.0.5195.52 (boo#1202964):
  * CVE-2022-3038: Use after free in Network Service
  * CVE-2022-3039: Use after free in WebSQL
  * CVE-2022-3040: Use after free in Layout
  * CVE-2022-3041: Use after free in WebSQL
  * CVE-2022-3042: Use after free in PhoneHub
  * CVE-2022-3043: Heap buffer overflow in Screen Capture
  * CVE-2022-3044: Inappropriate implementation in Site Isolation
  * CVE-2022-3045: Insufficient validation of untrusted input in V8
  * CVE-2022-3046: Use after free in Browser Tag
  * CVE-2022-3071: Use after free in Tab Strip
  * CVE-2022-3047: Insufficient policy enforcement in Extensions API
  * CVE-2022-3048: Inappropriate implementation in Chrome OS lockscreen
  * CVE-2022-3049: Use after free in SplitScreen
  * CVE-2022-3050: Heap buffer overflow in WebUI
  * CVE-2022-3051: Heap buffer overflow in Exosphere
  * CVE-2022-3052: Heap buffer overflow in Window Manager
  * CVE-2022-3053: Inappropriate implementation in Pointer Lock
  * CVE-2022-3054: Insufficient policy enforcement in DevTools
  * CVE-2022-3055: Use after free in Passwords
  * CVE-2022-3056: Insufficient policy enforcement in Content Security Policy
  * CVE-2022-3057: Inappropriate implementation in iframe Sandbox
  * CVE-2022-3058: Use after free in Sign-In Flow
- Added patches:
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Bitmap-include.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-wayland-1.20.patch
  * chromium-105-compiler.patch
- Removed patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-78-protobuf-RepeatedPtrField-export.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663156800">- Chromium 105.0.5195.127 (boo#1203419):
  * CVE-2022-3195: Out of bounds write in Storage
  * CVE-2022-3196: Use after free in PDF
  * CVE-2022-3197: Use after free in PDF
  * CVE-2022-3198: Use after free in PDF
  * CVE-2022-3199: Use after free in Frames
  * CVE-2022-3200: Heap buffer overflow in Internals
  * CVE-2022-3201: Insufficient validation of untrusted input in DevTools
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
</package>
<package pkgid="d6cfa8525383a6b5a7c3d7055b5e62f27dedc75b03edfb9c8932c80ef3dba5be" name="chromedriver" arch="aarch64">
  <version epoch="0" ver="106.0.5249.119" rel="bp154.2.35.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1652616000">- Chromium 101.0.4951.67
  * fixes for other platforms</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1653652800">- Chromium 102.0.5001.61 (boo#1199893)
  * CVE-2022-1853: Use after free in Indexed DB
  * CVE-2022-1854: Use after free in ANGLE
  * CVE-2022-1855: Use after free in Messaging
  * CVE-2022-1856: Use after free in User Education
  * CVE-2022-1857: Insufficient policy enforcement in File System API
  * CVE-2022-1858: Out of bounds read in DevTools
  * CVE-2022-1859: Use after free in Performance Manager
  * CVE-2022-1860: Use after free in UI Foundations
  * CVE-2022-1861: Use after free in Sharing
  * CVE-2022-1862: Inappropriate implementation in Extensions
  * CVE-2022-1863: Use after free in Tab Groups
  * CVE-2022-1864: Use after free in WebApp Installs
  * CVE-2022-1865: Use after free in Bookmarks
  * CVE-2022-1866: Use after free in Tablet Mode
  * CVE-2022-1867: Insufficient validation of untrusted input in Data Transfer
  * CVE-2022-1868: Inappropriate implementation in Extensions API
  * CVE-2022-1869: Type Confusion in V8
  * CVE-2022-1870: Use after free in App Service
  * CVE-2022-1871: Insufficient policy enforcement in File System API
  * CVE-2022-1872: Insufficient policy enforcement in Extensions API
  * CVE-2022-1873: Insufficient policy enforcement in COOP
  * CVE-2022-1874: Insufficient policy enforcement in Safe Browsing
  * CVE-2022-1875: Inappropriate implementation in PDF
  * CVE-2022-1876: Heap buffer overflow in DevTools
- Added patches:
  * chromium-102-compiler.patch
  * chromium-102-fenced_frame_utils-include.patch
  * chromium-102-regex_pattern-array.patch
  * chromium-102-swiftshader-template-instantiation.patch
  * chromium-102-symbolize-include.patch
  * ffmpeg-new-channel-layout.patch
- Removed patches:
  * chromium-100-compiler.patch
  * chromium-80-QuicStreamSendBuffer-deleted-move-constructor.patch
  * chromium-95-quiche-include.patch
  * chromium-fix-swiftshader-template.patch
  * chromium-missing-include-tuple.patch
  * chromium-webrtc-stats-missing-vector.patch
  * chromium-101-segmentation_platform-type.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654084800">- Disable ARM control flow integrity, it causes build issues
  at the moment
- Try a different SVG (black logo on GNOME)
- Removed patches:
  * chromium-third_party-symbolize-missing-include.patch
  (replaced by chromium-102-symbolize-include.patch)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654689600">- Switch to GTK4 on TW and Leap 15.4+ (boo#1200139)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1654862400">- Chromium 102.0.5005.115 (boo#1200423)
  * CVE-2022-2007: Use after free in WebGPU
  * CVE-2022-2008: Out of bounds memory access in WebGL
  * CVE-2022-2010: Out of bounds read in compositing
  * CVE-2022-2011: Use after free in ANGLE</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1656158400">- Chromium 103.0.5060.53 (boo#1200783)
  * CVE-2022-2156: Use after free in Base
  * CVE-2022-2157: Use after free in Interest groups
  * CVE-2022-2158: Type Confusion in V8
  * CVE-2022-2160: Insufficient policy enforcement in DevTools
  * CVE-2022-2161: Use after free in WebApp Provider
  * CVE-2022-2162: Insufficient policy enforcement in File System API
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * CVE-2022-2164: Inappropriate implementation in Extensions API
  * CVE-2022-2165: Insufficient data validation in URL formatting
- Added patches:
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-VirtualCursor-std-layout.patch
  * chromium-103-compiler.patch
- Removed patches:
  * chromium-102-compiler.patch
  * chromium-91-sql-standard-layout-type.patch
  * chromium-101-libxml-unbundle.patch
  * chromium-102-fenced_frame_utils-include.patch
  * chromium-102-swiftshader-template-instantiation.patch
  * chromium-102-symbolize-include.patch
  * chromium-97-arm-tflite-cast.patch
  * chromium-97-ScrollView-reference.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657195200">- Chromium 103.0.5060.66
  * no upstream release notes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657368000">- Chromium 103.0.5060.114 (boo#1201216)
  * CVE-2022-2294: Heap buffer overflow in WebRTC
  * CVE-2022-2295: Type Confusion in V8
  * CVE-2022-2296: Use after free in Chrome OS Shell</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1658318400">- Chromium 103.0.5060.134 (boo#1201679):
  * CVE-2022-2477 : Use after free in Guest View
  * CVE-2022-2478 : Use after free in PDF
  * CVE-2022-2479 : Insufficient validation of untrusted input in File
  * CVE-2022-2480 : Use after free in Service Worker API
  * CVE-2022-2481: Use after free in Views
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1658577600">- Switch back to Clang so that we can use BTI on aarch64
  * Gold is too old - doesn't understand BTI
  * LD crashes on aarch64
- Re-enable LTO
- Prepare move to FFmpeg 5 for new channel layout
  (requires 5.1+)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660046400">- Chromium 104.0.5112.79 (boo#1202075)
  * CVE-2022-2603: Use after free in Omnibox
  * CVE-2022-2604: Use after free in Safe Browsing
  * CVE-2022-2605: Out of bounds read in Dawn
  * CVE-2022-2606: Use after free in Managed devices API
  * CVE-2022-2607: Use after free in Tab Strip
  * CVE-2022-2608: Use after free in Overview Mode
  * CVE-2022-2609: Use after free in Nearby Share
  * CVE-2022-2610: Insufficient policy enforcement in Background Fetch
  * CVE-2022-2611: Inappropriate implementation in Fullscreen API
  * CVE-2022-2612: Side-channel information leakage in Keyboard input
  * CVE-2022-2613: Use after free in Input
  * CVE-2022-2614: Use after free in Sign-In Flow
  * CVE-2022-2615: Insufficient policy enforcement in Cookies
  * CVE-2022-2616: Inappropriate implementation in Extensions API
  * CVE-2022-2617: Use after free in Extensions API
  * CVE-2022-2618: Insufficient validation of untrusted input in Internals
  * CVE-2022-2619: Insufficient validation of untrusted input in Settings
  * CVE-2022-2620: Use after free in WebUI
  * CVE-2022-2621: Use after free in Extensions
  * CVE-2022-2622: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-2623: Use after free in Offline
  * CVE-2022-2624: Heap buffer overflow in PDF
- Added patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-104-tflite-system-zlib.patch
- Removed patches:
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-compiler.patch
- Use FFmpeg 5.1 on TW</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660651200">- Re-enable our version of chrome-wrapper
- Set no sandbox if root is being used (https://crbug.com/638180)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660824000">- Chromium 104.0.5112.101 (boo#1202509):
  * CVE-2022-2852: Use after free in FedCM
  * CVE-2022-2854: Use after free in SwiftShader
  * CVE-2022-2855: Use after free in ANGLE
  * CVE-2022-2857: Use after free in Blink
  * CVE-2022-2858: Use after free in Sign-In Flow
  * CVE-2022-2853: Heap buffer overflow in Downloads
  * CVE-2022-2856: Insufficient validation of untrusted input in Intents
  * CVE-2022-2859: Use after free in Chrome OS Shell
  * CVE-2022-2860: Insufficient policy enforcement in Cookies
  * CVE-2022-2861: Inappropriate implementation in Extensions API</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1661169600">- Fix quoting in chrome-wrapper, don't put cwd on LD_LIBRARY_PATH</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1662033600">- Update chromium-symbolic.svg: this fixes bsc#1202403.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1662638400">- Chromium 105.0.5195.102 (boo#1203102):
  * CVE-2022-3075: Insufficient data validation in Mojo
- Chromium 105.0.5195.52 (boo#1202964):
  * CVE-2022-3038: Use after free in Network Service
  * CVE-2022-3039: Use after free in WebSQL
  * CVE-2022-3040: Use after free in Layout
  * CVE-2022-3041: Use after free in WebSQL
  * CVE-2022-3042: Use after free in PhoneHub
  * CVE-2022-3043: Heap buffer overflow in Screen Capture
  * CVE-2022-3044: Inappropriate implementation in Site Isolation
  * CVE-2022-3045: Insufficient validation of untrusted input in V8
  * CVE-2022-3046: Use after free in Browser Tag
  * CVE-2022-3071: Use after free in Tab Strip
  * CVE-2022-3047: Insufficient policy enforcement in Extensions API
  * CVE-2022-3048: Inappropriate implementation in Chrome OS lockscreen
  * CVE-2022-3049: Use after free in SplitScreen
  * CVE-2022-3050: Heap buffer overflow in WebUI
  * CVE-2022-3051: Heap buffer overflow in Exosphere
  * CVE-2022-3052: Heap buffer overflow in Window Manager
  * CVE-2022-3053: Inappropriate implementation in Pointer Lock
  * CVE-2022-3054: Insufficient policy enforcement in DevTools
  * CVE-2022-3055: Use after free in Passwords
  * CVE-2022-3056: Insufficient policy enforcement in Content Security Policy
  * CVE-2022-3057: Inappropriate implementation in iframe Sandbox
  * CVE-2022-3058: Use after free in Sign-In Flow
- Added patches:
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Bitmap-include.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-wayland-1.20.patch
  * chromium-105-compiler.patch
- Removed patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-78-protobuf-RepeatedPtrField-export.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663156800">- Chromium 105.0.5195.127 (boo#1203419):
  * CVE-2022-3195: Out of bounds write in Storage
  * CVE-2022-3196: Use after free in PDF
  * CVE-2022-3197: Use after free in PDF
  * CVE-2022-3198: Use after free in PDF
  * CVE-2022-3199: Use after free in Frames
  * CVE-2022-3200: Heap buffer overflow in Internals
  * CVE-2022-3201: Insufficient validation of untrusted input in DevTools
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1664625600">- Chromium 106.0.5249.91 (boo#1203808):
  * CVE-2022-3370: Use after free in Custom Elements
  * CVE-2022-3373: Out of bounds write in V8
- includes changes from 106.0.5249.61:
  * CVE-2022-3304: Use after free in CSS
  * CVE-2022-3201: Insufficient validation of untrusted input in Developer Tools
  * CVE-2022-3305: Use after free in Survey
  * CVE-2022-3306: Use after free in Survey
  * CVE-2022-3307: Use after free in Media
  * CVE-2022-3308: Insufficient policy enforcement in Developer Tools
  * CVE-2022-3309: Use after free in Assistant
  * CVE-2022-3310: Insufficient policy enforcement in Custom Tabs
  * CVE-2022-3311: Use after free in Import
  * CVE-2022-3312: Insufficient validation of untrusted input in VPN
  * CVE-2022-3313: Incorrect security UI in Full Screen
  * CVE-2022-3314: Use after free in Logging
  * CVE-2022-3315: Type confusion in Blink
  * CVE-2022-3316: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-3317: Insufficient validation of untrusted input in Intents
  * CVE-2022-3318: Use after free in ChromeOS Notifications
- drop patches:
  * chromium-104-tflite-system-zlib.patch
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
- add patches
  * chromium-106-ffmpeg-duration.patch
  * chromium-106-AutofillPopupControllerImpl-namespace.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1665057600">- Chromium 106.0.5249.103:
  * fix possible cache manager deadlock
  * Fix right-click menu appearing unexpectedly affecting screen
    readers</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1665576000">- Chromium 106.0.5249.119 (boo#1204223)
  * CVE-2022-3445: Use after free in Skia
  * CVE-2022-3446: Heap buffer overflow in WebSQL
  * CVE-2022-3447: Inappropriate implementation in Custom Tabs
  * CVE-2022-3448: Use after free in Permissions API
  * CVE-2022-3449: Use after free in Safe Browsing
  * CVE-2022-3450: Use after free in Peer Connection</changelog>
</package>
<package pkgid="9289cbe6b593053a38e89ed61ee682ece728d073ff27955bc03f68b136f96374" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="106.0.5249.119" rel="bp154.2.35.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1652616000">- Chromium 101.0.4951.67
  * fixes for other platforms</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1653652800">- Chromium 102.0.5001.61 (boo#1199893)
  * CVE-2022-1853: Use after free in Indexed DB
  * CVE-2022-1854: Use after free in ANGLE
  * CVE-2022-1855: Use after free in Messaging
  * CVE-2022-1856: Use after free in User Education
  * CVE-2022-1857: Insufficient policy enforcement in File System API
  * CVE-2022-1858: Out of bounds read in DevTools
  * CVE-2022-1859: Use after free in Performance Manager
  * CVE-2022-1860: Use after free in UI Foundations
  * CVE-2022-1861: Use after free in Sharing
  * CVE-2022-1862: Inappropriate implementation in Extensions
  * CVE-2022-1863: Use after free in Tab Groups
  * CVE-2022-1864: Use after free in WebApp Installs
  * CVE-2022-1865: Use after free in Bookmarks
  * CVE-2022-1866: Use after free in Tablet Mode
  * CVE-2022-1867: Insufficient validation of untrusted input in Data Transfer
  * CVE-2022-1868: Inappropriate implementation in Extensions API
  * CVE-2022-1869: Type Confusion in V8
  * CVE-2022-1870: Use after free in App Service
  * CVE-2022-1871: Insufficient policy enforcement in File System API
  * CVE-2022-1872: Insufficient policy enforcement in Extensions API
  * CVE-2022-1873: Insufficient policy enforcement in COOP
  * CVE-2022-1874: Insufficient policy enforcement in Safe Browsing
  * CVE-2022-1875: Inappropriate implementation in PDF
  * CVE-2022-1876: Heap buffer overflow in DevTools
- Added patches:
  * chromium-102-compiler.patch
  * chromium-102-fenced_frame_utils-include.patch
  * chromium-102-regex_pattern-array.patch
  * chromium-102-swiftshader-template-instantiation.patch
  * chromium-102-symbolize-include.patch
  * ffmpeg-new-channel-layout.patch
- Removed patches:
  * chromium-100-compiler.patch
  * chromium-80-QuicStreamSendBuffer-deleted-move-constructor.patch
  * chromium-95-quiche-include.patch
  * chromium-fix-swiftshader-template.patch
  * chromium-missing-include-tuple.patch
  * chromium-webrtc-stats-missing-vector.patch
  * chromium-101-segmentation_platform-type.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654084800">- Disable ARM control flow integrity, it causes build issues
  at the moment
- Try a different SVG (black logo on GNOME)
- Removed patches:
  * chromium-third_party-symbolize-missing-include.patch
  (replaced by chromium-102-symbolize-include.patch)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654689600">- Switch to GTK4 on TW and Leap 15.4+ (boo#1200139)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1654862400">- Chromium 102.0.5005.115 (boo#1200423)
  * CVE-2022-2007: Use after free in WebGPU
  * CVE-2022-2008: Out of bounds memory access in WebGL
  * CVE-2022-2010: Out of bounds read in compositing
  * CVE-2022-2011: Use after free in ANGLE</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1656158400">- Chromium 103.0.5060.53 (boo#1200783)
  * CVE-2022-2156: Use after free in Base
  * CVE-2022-2157: Use after free in Interest groups
  * CVE-2022-2158: Type Confusion in V8
  * CVE-2022-2160: Insufficient policy enforcement in DevTools
  * CVE-2022-2161: Use after free in WebApp Provider
  * CVE-2022-2162: Insufficient policy enforcement in File System API
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * CVE-2022-2164: Inappropriate implementation in Extensions API
  * CVE-2022-2165: Insufficient data validation in URL formatting
- Added patches:
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-VirtualCursor-std-layout.patch
  * chromium-103-compiler.patch
- Removed patches:
  * chromium-102-compiler.patch
  * chromium-91-sql-standard-layout-type.patch
  * chromium-101-libxml-unbundle.patch
  * chromium-102-fenced_frame_utils-include.patch
  * chromium-102-swiftshader-template-instantiation.patch
  * chromium-102-symbolize-include.patch
  * chromium-97-arm-tflite-cast.patch
  * chromium-97-ScrollView-reference.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657195200">- Chromium 103.0.5060.66
  * no upstream release notes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657368000">- Chromium 103.0.5060.114 (boo#1201216)
  * CVE-2022-2294: Heap buffer overflow in WebRTC
  * CVE-2022-2295: Type Confusion in V8
  * CVE-2022-2296: Use after free in Chrome OS Shell</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1658318400">- Chromium 103.0.5060.134 (boo#1201679):
  * CVE-2022-2477 : Use after free in Guest View
  * CVE-2022-2478 : Use after free in PDF
  * CVE-2022-2479 : Insufficient validation of untrusted input in File
  * CVE-2022-2480 : Use after free in Service Worker API
  * CVE-2022-2481: Use after free in Views
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1658577600">- Switch back to Clang so that we can use BTI on aarch64
  * Gold is too old - doesn't understand BTI
  * LD crashes on aarch64
- Re-enable LTO
- Prepare move to FFmpeg 5 for new channel layout
  (requires 5.1+)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660046400">- Chromium 104.0.5112.79 (boo#1202075)
  * CVE-2022-2603: Use after free in Omnibox
  * CVE-2022-2604: Use after free in Safe Browsing
  * CVE-2022-2605: Out of bounds read in Dawn
  * CVE-2022-2606: Use after free in Managed devices API
  * CVE-2022-2607: Use after free in Tab Strip
  * CVE-2022-2608: Use after free in Overview Mode
  * CVE-2022-2609: Use after free in Nearby Share
  * CVE-2022-2610: Insufficient policy enforcement in Background Fetch
  * CVE-2022-2611: Inappropriate implementation in Fullscreen API
  * CVE-2022-2612: Side-channel information leakage in Keyboard input
  * CVE-2022-2613: Use after free in Input
  * CVE-2022-2614: Use after free in Sign-In Flow
  * CVE-2022-2615: Insufficient policy enforcement in Cookies
  * CVE-2022-2616: Inappropriate implementation in Extensions API
  * CVE-2022-2617: Use after free in Extensions API
  * CVE-2022-2618: Insufficient validation of untrusted input in Internals
  * CVE-2022-2619: Insufficient validation of untrusted input in Settings
  * CVE-2022-2620: Use after free in WebUI
  * CVE-2022-2621: Use after free in Extensions
  * CVE-2022-2622: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-2623: Use after free in Offline
  * CVE-2022-2624: Heap buffer overflow in PDF
- Added patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-104-tflite-system-zlib.patch
- Removed patches:
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-compiler.patch
- Use FFmpeg 5.1 on TW</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660651200">- Re-enable our version of chrome-wrapper
- Set no sandbox if root is being used (https://crbug.com/638180)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660824000">- Chromium 104.0.5112.101 (boo#1202509):
  * CVE-2022-2852: Use after free in FedCM
  * CVE-2022-2854: Use after free in SwiftShader
  * CVE-2022-2855: Use after free in ANGLE
  * CVE-2022-2857: Use after free in Blink
  * CVE-2022-2858: Use after free in Sign-In Flow
  * CVE-2022-2853: Heap buffer overflow in Downloads
  * CVE-2022-2856: Insufficient validation of untrusted input in Intents
  * CVE-2022-2859: Use after free in Chrome OS Shell
  * CVE-2022-2860: Insufficient policy enforcement in Cookies
  * CVE-2022-2861: Inappropriate implementation in Extensions API</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1661169600">- Fix quoting in chrome-wrapper, don't put cwd on LD_LIBRARY_PATH</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1662033600">- Update chromium-symbolic.svg: this fixes bsc#1202403.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1662638400">- Chromium 105.0.5195.102 (boo#1203102):
  * CVE-2022-3075: Insufficient data validation in Mojo
- Chromium 105.0.5195.52 (boo#1202964):
  * CVE-2022-3038: Use after free in Network Service
  * CVE-2022-3039: Use after free in WebSQL
  * CVE-2022-3040: Use after free in Layout
  * CVE-2022-3041: Use after free in WebSQL
  * CVE-2022-3042: Use after free in PhoneHub
  * CVE-2022-3043: Heap buffer overflow in Screen Capture
  * CVE-2022-3044: Inappropriate implementation in Site Isolation
  * CVE-2022-3045: Insufficient validation of untrusted input in V8
  * CVE-2022-3046: Use after free in Browser Tag
  * CVE-2022-3071: Use after free in Tab Strip
  * CVE-2022-3047: Insufficient policy enforcement in Extensions API
  * CVE-2022-3048: Inappropriate implementation in Chrome OS lockscreen
  * CVE-2022-3049: Use after free in SplitScreen
  * CVE-2022-3050: Heap buffer overflow in WebUI
  * CVE-2022-3051: Heap buffer overflow in Exosphere
  * CVE-2022-3052: Heap buffer overflow in Window Manager
  * CVE-2022-3053: Inappropriate implementation in Pointer Lock
  * CVE-2022-3054: Insufficient policy enforcement in DevTools
  * CVE-2022-3055: Use after free in Passwords
  * CVE-2022-3056: Insufficient policy enforcement in Content Security Policy
  * CVE-2022-3057: Inappropriate implementation in iframe Sandbox
  * CVE-2022-3058: Use after free in Sign-In Flow
- Added patches:
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Bitmap-include.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-wayland-1.20.patch
  * chromium-105-compiler.patch
- Removed patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-78-protobuf-RepeatedPtrField-export.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663156800">- Chromium 105.0.5195.127 (boo#1203419):
  * CVE-2022-3195: Out of bounds write in Storage
  * CVE-2022-3196: Use after free in PDF
  * CVE-2022-3197: Use after free in PDF
  * CVE-2022-3198: Use after free in PDF
  * CVE-2022-3199: Use after free in Frames
  * CVE-2022-3200: Heap buffer overflow in Internals
  * CVE-2022-3201: Insufficient validation of untrusted input in DevTools
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1664625600">- Chromium 106.0.5249.91 (boo#1203808):
  * CVE-2022-3370: Use after free in Custom Elements
  * CVE-2022-3373: Out of bounds write in V8
- includes changes from 106.0.5249.61:
  * CVE-2022-3304: Use after free in CSS
  * CVE-2022-3201: Insufficient validation of untrusted input in Developer Tools
  * CVE-2022-3305: Use after free in Survey
  * CVE-2022-3306: Use after free in Survey
  * CVE-2022-3307: Use after free in Media
  * CVE-2022-3308: Insufficient policy enforcement in Developer Tools
  * CVE-2022-3309: Use after free in Assistant
  * CVE-2022-3310: Insufficient policy enforcement in Custom Tabs
  * CVE-2022-3311: Use after free in Import
  * CVE-2022-3312: Insufficient validation of untrusted input in VPN
  * CVE-2022-3313: Incorrect security UI in Full Screen
  * CVE-2022-3314: Use after free in Logging
  * CVE-2022-3315: Type confusion in Blink
  * CVE-2022-3316: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-3317: Insufficient validation of untrusted input in Intents
  * CVE-2022-3318: Use after free in ChromeOS Notifications
- drop patches:
  * chromium-104-tflite-system-zlib.patch
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
- add patches
  * chromium-106-ffmpeg-duration.patch
  * chromium-106-AutofillPopupControllerImpl-namespace.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1665057600">- Chromium 106.0.5249.103:
  * fix possible cache manager deadlock
  * Fix right-click menu appearing unexpectedly affecting screen
    readers</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1665576000">- Chromium 106.0.5249.119 (boo#1204223)
  * CVE-2022-3445: Use after free in Skia
  * CVE-2022-3446: Heap buffer overflow in WebSQL
  * CVE-2022-3447: Inappropriate implementation in Custom Tabs
  * CVE-2022-3448: Use after free in Permissions API
  * CVE-2022-3449: Use after free in Safe Browsing
  * CVE-2022-3450: Use after free in Peer Connection</changelog>
</package>
<package pkgid="fd8ce09fc885e9f0fdc796a346aaf0ffdb16b4cf8350b80ef5ff718eb5ce07dd" name="chromedriver" arch="aarch64">
  <version epoch="0" ver="106.0.5249.91" rel="bp154.2.32.1"/>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1651665600">- Chromium 101.0.4951.54 (boo#1199118)
- Chromium 101.0.4951.41 (boo#1198917)
  * CVE-2022-1477: Use after free in Vulkan
  * CVE-2022-1478: Use after free in SwiftShader
  * CVE-2022-1479: Use after free in ANGLE
  * CVE-2022-1480: Use after free in Device API
  * CVE-2022-1481: Use after free in Sharing
  * CVE-2022-1482: Inappropriate implementation in WebGL
  * CVE-2022-1483: Heap buffer overflow in WebGPU
  * CVE-2022-1484: Heap buffer overflow in Web UI Settings
  * CVE-2022-1485: Use after free in File System API
  * CVE-2022-1486: Type Confusion in V8
  * CVE-2022-1487: Use after free in Ozone
  * CVE-2022-1488: Inappropriate implementation in Extensions API
  * CVE-2022-1489: Out of bounds memory access in UI Shelf
  * CVE-2022-1490: Use after free in Browser Switcher
  * CVE-2022-1491: Use after free in Bookmarks
  * CVE-2022-1492: Insufficient data validation in Blink Editing
  * CVE-2022-1493: Use after free in Dev Tools
  * CVE-2022-1494: Insufficient data validation in Trusted Types
  * CVE-2022-1495: Incorrect security UI in Downloads
  * CVE-2022-1496: Use after free in File Manager
  * CVE-2022-1497: Inappropriate implementation in Input
  * CVE-2022-1498: Inappropriate implementation in HTML Parser
  * CVE-2022-1499: Inappropriate implementation in WebAuthentication
  * CVE-2022-1500: Insufficient data validation in Dev Tools
  * CVE-2022-1501: Inappropriate implementation in iframe
- Added patches:
  * chromium-101-libxml-unbundle.patch
  * chromium-101-segmentation_platform-type.patch
- Removed patches:
  * chromium-100-SCTHashdanceMetadata-move.patch
  * chromium-100-GLImplementationParts-constexpr.patch
  * chromium-100-macro-typo.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1652270400">- Chromium 101.0.4951.64 (boo#1199409)
  * CVE-2022-1633: Use after free in Sharesheet
  * CVE-2022-1634: Use after free in Browser UI
  * CVE-2022-1635: Use after free in Permission Prompts
  * CVE-2022-1636: Use after free in Performance APIs
  * CVE-2022-1637: Inappropriate implementation in Web Contents
  * CVE-2022-1638: Heap buffer overflow in V8 Internationalization
  * CVE-2022-1639: Use after free in ANGLE
  * CVE-2022-1640: Use after free in Sharing
  * CVE-2022-1641: Use after free in Web UI Diagnostics</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1652616000">- Chromium 101.0.4951.67
  * fixes for other platforms</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1653652800">- Chromium 102.0.5001.61 (boo#1199893)
  * CVE-2022-1853: Use after free in Indexed DB
  * CVE-2022-1854: Use after free in ANGLE
  * CVE-2022-1855: Use after free in Messaging
  * CVE-2022-1856: Use after free in User Education
  * CVE-2022-1857: Insufficient policy enforcement in File System API
  * CVE-2022-1858: Out of bounds read in DevTools
  * CVE-2022-1859: Use after free in Performance Manager
  * CVE-2022-1860: Use after free in UI Foundations
  * CVE-2022-1861: Use after free in Sharing
  * CVE-2022-1862: Inappropriate implementation in Extensions
  * CVE-2022-1863: Use after free in Tab Groups
  * CVE-2022-1864: Use after free in WebApp Installs
  * CVE-2022-1865: Use after free in Bookmarks
  * CVE-2022-1866: Use after free in Tablet Mode
  * CVE-2022-1867: Insufficient validation of untrusted input in Data Transfer
  * CVE-2022-1868: Inappropriate implementation in Extensions API
  * CVE-2022-1869: Type Confusion in V8
  * CVE-2022-1870: Use after free in App Service
  * CVE-2022-1871: Insufficient policy enforcement in File System API
  * CVE-2022-1872: Insufficient policy enforcement in Extensions API
  * CVE-2022-1873: Insufficient policy enforcement in COOP
  * CVE-2022-1874: Insufficient policy enforcement in Safe Browsing
  * CVE-2022-1875: Inappropriate implementation in PDF
  * CVE-2022-1876: Heap buffer overflow in DevTools
- Added patches:
  * chromium-102-compiler.patch
  * chromium-102-fenced_frame_utils-include.patch
  * chromium-102-regex_pattern-array.patch
  * chromium-102-swiftshader-template-instantiation.patch
  * chromium-102-symbolize-include.patch
  * ffmpeg-new-channel-layout.patch
- Removed patches:
  * chromium-100-compiler.patch
  * chromium-80-QuicStreamSendBuffer-deleted-move-constructor.patch
  * chromium-95-quiche-include.patch
  * chromium-fix-swiftshader-template.patch
  * chromium-missing-include-tuple.patch
  * chromium-webrtc-stats-missing-vector.patch
  * chromium-101-segmentation_platform-type.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654084800">- Disable ARM control flow integrity, it causes build issues
  at the moment
- Try a different SVG (black logo on GNOME)
- Removed patches:
  * chromium-third_party-symbolize-missing-include.patch
  (replaced by chromium-102-symbolize-include.patch)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654689600">- Switch to GTK4 on TW and Leap 15.4+ (boo#1200139)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1654862400">- Chromium 102.0.5005.115 (boo#1200423)
  * CVE-2022-2007: Use after free in WebGPU
  * CVE-2022-2008: Out of bounds memory access in WebGL
  * CVE-2022-2010: Out of bounds read in compositing
  * CVE-2022-2011: Use after free in ANGLE</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1656158400">- Chromium 103.0.5060.53 (boo#1200783)
  * CVE-2022-2156: Use after free in Base
  * CVE-2022-2157: Use after free in Interest groups
  * CVE-2022-2158: Type Confusion in V8
  * CVE-2022-2160: Insufficient policy enforcement in DevTools
  * CVE-2022-2161: Use after free in WebApp Provider
  * CVE-2022-2162: Insufficient policy enforcement in File System API
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * CVE-2022-2164: Inappropriate implementation in Extensions API
  * CVE-2022-2165: Insufficient data validation in URL formatting
- Added patches:
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-VirtualCursor-std-layout.patch
  * chromium-103-compiler.patch
- Removed patches:
  * chromium-102-compiler.patch
  * chromium-91-sql-standard-layout-type.patch
  * chromium-101-libxml-unbundle.patch
  * chromium-102-fenced_frame_utils-include.patch
  * chromium-102-swiftshader-template-instantiation.patch
  * chromium-102-symbolize-include.patch
  * chromium-97-arm-tflite-cast.patch
  * chromium-97-ScrollView-reference.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657195200">- Chromium 103.0.5060.66
  * no upstream release notes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657368000">- Chromium 103.0.5060.114 (boo#1201216)
  * CVE-2022-2294: Heap buffer overflow in WebRTC
  * CVE-2022-2295: Type Confusion in V8
  * CVE-2022-2296: Use after free in Chrome OS Shell</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1658318400">- Chromium 103.0.5060.134 (boo#1201679):
  * CVE-2022-2477 : Use after free in Guest View
  * CVE-2022-2478 : Use after free in PDF
  * CVE-2022-2479 : Insufficient validation of untrusted input in File
  * CVE-2022-2480 : Use after free in Service Worker API
  * CVE-2022-2481: Use after free in Views
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1658577600">- Switch back to Clang so that we can use BTI on aarch64
  * Gold is too old - doesn't understand BTI
  * LD crashes on aarch64
- Re-enable LTO
- Prepare move to FFmpeg 5 for new channel layout
  (requires 5.1+)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660046400">- Chromium 104.0.5112.79 (boo#1202075)
  * CVE-2022-2603: Use after free in Omnibox
  * CVE-2022-2604: Use after free in Safe Browsing
  * CVE-2022-2605: Out of bounds read in Dawn
  * CVE-2022-2606: Use after free in Managed devices API
  * CVE-2022-2607: Use after free in Tab Strip
  * CVE-2022-2608: Use after free in Overview Mode
  * CVE-2022-2609: Use after free in Nearby Share
  * CVE-2022-2610: Insufficient policy enforcement in Background Fetch
  * CVE-2022-2611: Inappropriate implementation in Fullscreen API
  * CVE-2022-2612: Side-channel information leakage in Keyboard input
  * CVE-2022-2613: Use after free in Input
  * CVE-2022-2614: Use after free in Sign-In Flow
  * CVE-2022-2615: Insufficient policy enforcement in Cookies
  * CVE-2022-2616: Inappropriate implementation in Extensions API
  * CVE-2022-2617: Use after free in Extensions API
  * CVE-2022-2618: Insufficient validation of untrusted input in Internals
  * CVE-2022-2619: Insufficient validation of untrusted input in Settings
  * CVE-2022-2620: Use after free in WebUI
  * CVE-2022-2621: Use after free in Extensions
  * CVE-2022-2622: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-2623: Use after free in Offline
  * CVE-2022-2624: Heap buffer overflow in PDF
- Added patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-104-tflite-system-zlib.patch
- Removed patches:
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-compiler.patch
- Use FFmpeg 5.1 on TW</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660651200">- Re-enable our version of chrome-wrapper
- Set no sandbox if root is being used (https://crbug.com/638180)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660824000">- Chromium 104.0.5112.101 (boo#1202509):
  * CVE-2022-2852: Use after free in FedCM
  * CVE-2022-2854: Use after free in SwiftShader
  * CVE-2022-2855: Use after free in ANGLE
  * CVE-2022-2857: Use after free in Blink
  * CVE-2022-2858: Use after free in Sign-In Flow
  * CVE-2022-2853: Heap buffer overflow in Downloads
  * CVE-2022-2856: Insufficient validation of untrusted input in Intents
  * CVE-2022-2859: Use after free in Chrome OS Shell
  * CVE-2022-2860: Insufficient policy enforcement in Cookies
  * CVE-2022-2861: Inappropriate implementation in Extensions API</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1661169600">- Fix quoting in chrome-wrapper, don't put cwd on LD_LIBRARY_PATH</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1662033600">- Update chromium-symbolic.svg: this fixes bsc#1202403.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1662638400">- Chromium 105.0.5195.102 (boo#1203102):
  * CVE-2022-3075: Insufficient data validation in Mojo
- Chromium 105.0.5195.52 (boo#1202964):
  * CVE-2022-3038: Use after free in Network Service
  * CVE-2022-3039: Use after free in WebSQL
  * CVE-2022-3040: Use after free in Layout
  * CVE-2022-3041: Use after free in WebSQL
  * CVE-2022-3042: Use after free in PhoneHub
  * CVE-2022-3043: Heap buffer overflow in Screen Capture
  * CVE-2022-3044: Inappropriate implementation in Site Isolation
  * CVE-2022-3045: Insufficient validation of untrusted input in V8
  * CVE-2022-3046: Use after free in Browser Tag
  * CVE-2022-3071: Use after free in Tab Strip
  * CVE-2022-3047: Insufficient policy enforcement in Extensions API
  * CVE-2022-3048: Inappropriate implementation in Chrome OS lockscreen
  * CVE-2022-3049: Use after free in SplitScreen
  * CVE-2022-3050: Heap buffer overflow in WebUI
  * CVE-2022-3051: Heap buffer overflow in Exosphere
  * CVE-2022-3052: Heap buffer overflow in Window Manager
  * CVE-2022-3053: Inappropriate implementation in Pointer Lock
  * CVE-2022-3054: Insufficient policy enforcement in DevTools
  * CVE-2022-3055: Use after free in Passwords
  * CVE-2022-3056: Insufficient policy enforcement in Content Security Policy
  * CVE-2022-3057: Inappropriate implementation in iframe Sandbox
  * CVE-2022-3058: Use after free in Sign-In Flow
- Added patches:
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Bitmap-include.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-wayland-1.20.patch
  * chromium-105-compiler.patch
- Removed patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-78-protobuf-RepeatedPtrField-export.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663156800">- Chromium 105.0.5195.127 (boo#1203419):
  * CVE-2022-3195: Out of bounds write in Storage
  * CVE-2022-3196: Use after free in PDF
  * CVE-2022-3197: Use after free in PDF
  * CVE-2022-3198: Use after free in PDF
  * CVE-2022-3199: Use after free in Frames
  * CVE-2022-3200: Heap buffer overflow in Internals
  * CVE-2022-3201: Insufficient validation of untrusted input in DevTools
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1664625600">- Chromium 106.0.5249.91 (boo#1203808):
  * CVE-2022-3370: Use after free in Custom Elements
  * CVE-2022-3373: Out of bounds write in V8
- includes changes from 106.0.5249.61:
  * CVE-2022-3304: Use after free in CSS
  * CVE-2022-3201: Insufficient validation of untrusted input in Developer Tools
  * CVE-2022-3305: Use after free in Survey
  * CVE-2022-3306: Use after free in Survey
  * CVE-2022-3307: Use after free in Media
  * CVE-2022-3308: Insufficient policy enforcement in Developer Tools
  * CVE-2022-3309: Use after free in Assistant
  * CVE-2022-3310: Insufficient policy enforcement in Custom Tabs
  * CVE-2022-3311: Use after free in Import
  * CVE-2022-3312: Insufficient validation of untrusted input in VPN
  * CVE-2022-3313: Incorrect security UI in Full Screen
  * CVE-2022-3314: Use after free in Logging
  * CVE-2022-3315: Type confusion in Blink
  * CVE-2022-3316: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-3317: Insufficient validation of untrusted input in Intents
  * CVE-2022-3318: Use after free in ChromeOS Notifications
- drop patches:
  * chromium-104-tflite-system-zlib.patch
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
- add patches
  * chromium-106-ffmpeg-duration.patch
  * chromium-106-AutofillPopupControllerImpl-namespace.patch</changelog>
</package>
<package pkgid="b6a4f1c1926d582756d97f9c487b1b6bc965e7c247c36298023e4f4c22555ee2" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="106.0.5249.91" rel="bp154.2.32.1"/>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1651665600">- Chromium 101.0.4951.54 (boo#1199118)
- Chromium 101.0.4951.41 (boo#1198917)
  * CVE-2022-1477: Use after free in Vulkan
  * CVE-2022-1478: Use after free in SwiftShader
  * CVE-2022-1479: Use after free in ANGLE
  * CVE-2022-1480: Use after free in Device API
  * CVE-2022-1481: Use after free in Sharing
  * CVE-2022-1482: Inappropriate implementation in WebGL
  * CVE-2022-1483: Heap buffer overflow in WebGPU
  * CVE-2022-1484: Heap buffer overflow in Web UI Settings
  * CVE-2022-1485: Use after free in File System API
  * CVE-2022-1486: Type Confusion in V8
  * CVE-2022-1487: Use after free in Ozone
  * CVE-2022-1488: Inappropriate implementation in Extensions API
  * CVE-2022-1489: Out of bounds memory access in UI Shelf
  * CVE-2022-1490: Use after free in Browser Switcher
  * CVE-2022-1491: Use after free in Bookmarks
  * CVE-2022-1492: Insufficient data validation in Blink Editing
  * CVE-2022-1493: Use after free in Dev Tools
  * CVE-2022-1494: Insufficient data validation in Trusted Types
  * CVE-2022-1495: Incorrect security UI in Downloads
  * CVE-2022-1496: Use after free in File Manager
  * CVE-2022-1497: Inappropriate implementation in Input
  * CVE-2022-1498: Inappropriate implementation in HTML Parser
  * CVE-2022-1499: Inappropriate implementation in WebAuthentication
  * CVE-2022-1500: Insufficient data validation in Dev Tools
  * CVE-2022-1501: Inappropriate implementation in iframe
- Added patches:
  * chromium-101-libxml-unbundle.patch
  * chromium-101-segmentation_platform-type.patch
- Removed patches:
  * chromium-100-SCTHashdanceMetadata-move.patch
  * chromium-100-GLImplementationParts-constexpr.patch
  * chromium-100-macro-typo.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1652270400">- Chromium 101.0.4951.64 (boo#1199409)
  * CVE-2022-1633: Use after free in Sharesheet
  * CVE-2022-1634: Use after free in Browser UI
  * CVE-2022-1635: Use after free in Permission Prompts
  * CVE-2022-1636: Use after free in Performance APIs
  * CVE-2022-1637: Inappropriate implementation in Web Contents
  * CVE-2022-1638: Heap buffer overflow in V8 Internationalization
  * CVE-2022-1639: Use after free in ANGLE
  * CVE-2022-1640: Use after free in Sharing
  * CVE-2022-1641: Use after free in Web UI Diagnostics</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1652616000">- Chromium 101.0.4951.67
  * fixes for other platforms</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1653652800">- Chromium 102.0.5001.61 (boo#1199893)
  * CVE-2022-1853: Use after free in Indexed DB
  * CVE-2022-1854: Use after free in ANGLE
  * CVE-2022-1855: Use after free in Messaging
  * CVE-2022-1856: Use after free in User Education
  * CVE-2022-1857: Insufficient policy enforcement in File System API
  * CVE-2022-1858: Out of bounds read in DevTools
  * CVE-2022-1859: Use after free in Performance Manager
  * CVE-2022-1860: Use after free in UI Foundations
  * CVE-2022-1861: Use after free in Sharing
  * CVE-2022-1862: Inappropriate implementation in Extensions
  * CVE-2022-1863: Use after free in Tab Groups
  * CVE-2022-1864: Use after free in WebApp Installs
  * CVE-2022-1865: Use after free in Bookmarks
  * CVE-2022-1866: Use after free in Tablet Mode
  * CVE-2022-1867: Insufficient validation of untrusted input in Data Transfer
  * CVE-2022-1868: Inappropriate implementation in Extensions API
  * CVE-2022-1869: Type Confusion in V8
  * CVE-2022-1870: Use after free in App Service
  * CVE-2022-1871: Insufficient policy enforcement in File System API
  * CVE-2022-1872: Insufficient policy enforcement in Extensions API
  * CVE-2022-1873: Insufficient policy enforcement in COOP
  * CVE-2022-1874: Insufficient policy enforcement in Safe Browsing
  * CVE-2022-1875: Inappropriate implementation in PDF
  * CVE-2022-1876: Heap buffer overflow in DevTools
- Added patches:
  * chromium-102-compiler.patch
  * chromium-102-fenced_frame_utils-include.patch
  * chromium-102-regex_pattern-array.patch
  * chromium-102-swiftshader-template-instantiation.patch
  * chromium-102-symbolize-include.patch
  * ffmpeg-new-channel-layout.patch
- Removed patches:
  * chromium-100-compiler.patch
  * chromium-80-QuicStreamSendBuffer-deleted-move-constructor.patch
  * chromium-95-quiche-include.patch
  * chromium-fix-swiftshader-template.patch
  * chromium-missing-include-tuple.patch
  * chromium-webrtc-stats-missing-vector.patch
  * chromium-101-segmentation_platform-type.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654084800">- Disable ARM control flow integrity, it causes build issues
  at the moment
- Try a different SVG (black logo on GNOME)
- Removed patches:
  * chromium-third_party-symbolize-missing-include.patch
  (replaced by chromium-102-symbolize-include.patch)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654689600">- Switch to GTK4 on TW and Leap 15.4+ (boo#1200139)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1654862400">- Chromium 102.0.5005.115 (boo#1200423)
  * CVE-2022-2007: Use after free in WebGPU
  * CVE-2022-2008: Out of bounds memory access in WebGL
  * CVE-2022-2010: Out of bounds read in compositing
  * CVE-2022-2011: Use after free in ANGLE</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1656158400">- Chromium 103.0.5060.53 (boo#1200783)
  * CVE-2022-2156: Use after free in Base
  * CVE-2022-2157: Use after free in Interest groups
  * CVE-2022-2158: Type Confusion in V8
  * CVE-2022-2160: Insufficient policy enforcement in DevTools
  * CVE-2022-2161: Use after free in WebApp Provider
  * CVE-2022-2162: Insufficient policy enforcement in File System API
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * CVE-2022-2164: Inappropriate implementation in Extensions API
  * CVE-2022-2165: Insufficient data validation in URL formatting
- Added patches:
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-VirtualCursor-std-layout.patch
  * chromium-103-compiler.patch
- Removed patches:
  * chromium-102-compiler.patch
  * chromium-91-sql-standard-layout-type.patch
  * chromium-101-libxml-unbundle.patch
  * chromium-102-fenced_frame_utils-include.patch
  * chromium-102-swiftshader-template-instantiation.patch
  * chromium-102-symbolize-include.patch
  * chromium-97-arm-tflite-cast.patch
  * chromium-97-ScrollView-reference.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657195200">- Chromium 103.0.5060.66
  * no upstream release notes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657368000">- Chromium 103.0.5060.114 (boo#1201216)
  * CVE-2022-2294: Heap buffer overflow in WebRTC
  * CVE-2022-2295: Type Confusion in V8
  * CVE-2022-2296: Use after free in Chrome OS Shell</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1658318400">- Chromium 103.0.5060.134 (boo#1201679):
  * CVE-2022-2477 : Use after free in Guest View
  * CVE-2022-2478 : Use after free in PDF
  * CVE-2022-2479 : Insufficient validation of untrusted input in File
  * CVE-2022-2480 : Use after free in Service Worker API
  * CVE-2022-2481: Use after free in Views
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1658577600">- Switch back to Clang so that we can use BTI on aarch64
  * Gold is too old - doesn't understand BTI
  * LD crashes on aarch64
- Re-enable LTO
- Prepare move to FFmpeg 5 for new channel layout
  (requires 5.1+)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660046400">- Chromium 104.0.5112.79 (boo#1202075)
  * CVE-2022-2603: Use after free in Omnibox
  * CVE-2022-2604: Use after free in Safe Browsing
  * CVE-2022-2605: Out of bounds read in Dawn
  * CVE-2022-2606: Use after free in Managed devices API
  * CVE-2022-2607: Use after free in Tab Strip
  * CVE-2022-2608: Use after free in Overview Mode
  * CVE-2022-2609: Use after free in Nearby Share
  * CVE-2022-2610: Insufficient policy enforcement in Background Fetch
  * CVE-2022-2611: Inappropriate implementation in Fullscreen API
  * CVE-2022-2612: Side-channel information leakage in Keyboard input
  * CVE-2022-2613: Use after free in Input
  * CVE-2022-2614: Use after free in Sign-In Flow
  * CVE-2022-2615: Insufficient policy enforcement in Cookies
  * CVE-2022-2616: Inappropriate implementation in Extensions API
  * CVE-2022-2617: Use after free in Extensions API
  * CVE-2022-2618: Insufficient validation of untrusted input in Internals
  * CVE-2022-2619: Insufficient validation of untrusted input in Settings
  * CVE-2022-2620: Use after free in WebUI
  * CVE-2022-2621: Use after free in Extensions
  * CVE-2022-2622: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-2623: Use after free in Offline
  * CVE-2022-2624: Heap buffer overflow in PDF
- Added patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-104-tflite-system-zlib.patch
- Removed patches:
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-compiler.patch
- Use FFmpeg 5.1 on TW</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660651200">- Re-enable our version of chrome-wrapper
- Set no sandbox if root is being used (https://crbug.com/638180)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660824000">- Chromium 104.0.5112.101 (boo#1202509):
  * CVE-2022-2852: Use after free in FedCM
  * CVE-2022-2854: Use after free in SwiftShader
  * CVE-2022-2855: Use after free in ANGLE
  * CVE-2022-2857: Use after free in Blink
  * CVE-2022-2858: Use after free in Sign-In Flow
  * CVE-2022-2853: Heap buffer overflow in Downloads
  * CVE-2022-2856: Insufficient validation of untrusted input in Intents
  * CVE-2022-2859: Use after free in Chrome OS Shell
  * CVE-2022-2860: Insufficient policy enforcement in Cookies
  * CVE-2022-2861: Inappropriate implementation in Extensions API</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1661169600">- Fix quoting in chrome-wrapper, don't put cwd on LD_LIBRARY_PATH</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1662033600">- Update chromium-symbolic.svg: this fixes bsc#1202403.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1662638400">- Chromium 105.0.5195.102 (boo#1203102):
  * CVE-2022-3075: Insufficient data validation in Mojo
- Chromium 105.0.5195.52 (boo#1202964):
  * CVE-2022-3038: Use after free in Network Service
  * CVE-2022-3039: Use after free in WebSQL
  * CVE-2022-3040: Use after free in Layout
  * CVE-2022-3041: Use after free in WebSQL
  * CVE-2022-3042: Use after free in PhoneHub
  * CVE-2022-3043: Heap buffer overflow in Screen Capture
  * CVE-2022-3044: Inappropriate implementation in Site Isolation
  * CVE-2022-3045: Insufficient validation of untrusted input in V8
  * CVE-2022-3046: Use after free in Browser Tag
  * CVE-2022-3071: Use after free in Tab Strip
  * CVE-2022-3047: Insufficient policy enforcement in Extensions API
  * CVE-2022-3048: Inappropriate implementation in Chrome OS lockscreen
  * CVE-2022-3049: Use after free in SplitScreen
  * CVE-2022-3050: Heap buffer overflow in WebUI
  * CVE-2022-3051: Heap buffer overflow in Exosphere
  * CVE-2022-3052: Heap buffer overflow in Window Manager
  * CVE-2022-3053: Inappropriate implementation in Pointer Lock
  * CVE-2022-3054: Insufficient policy enforcement in DevTools
  * CVE-2022-3055: Use after free in Passwords
  * CVE-2022-3056: Insufficient policy enforcement in Content Security Policy
  * CVE-2022-3057: Inappropriate implementation in iframe Sandbox
  * CVE-2022-3058: Use after free in Sign-In Flow
- Added patches:
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Bitmap-include.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-wayland-1.20.patch
  * chromium-105-compiler.patch
- Removed patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-78-protobuf-RepeatedPtrField-export.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663156800">- Chromium 105.0.5195.127 (boo#1203419):
  * CVE-2022-3195: Out of bounds write in Storage
  * CVE-2022-3196: Use after free in PDF
  * CVE-2022-3197: Use after free in PDF
  * CVE-2022-3198: Use after free in PDF
  * CVE-2022-3199: Use after free in Frames
  * CVE-2022-3200: Heap buffer overflow in Internals
  * CVE-2022-3201: Insufficient validation of untrusted input in DevTools
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1664625600">- Chromium 106.0.5249.91 (boo#1203808):
  * CVE-2022-3370: Use after free in Custom Elements
  * CVE-2022-3373: Out of bounds write in V8
- includes changes from 106.0.5249.61:
  * CVE-2022-3304: Use after free in CSS
  * CVE-2022-3201: Insufficient validation of untrusted input in Developer Tools
  * CVE-2022-3305: Use after free in Survey
  * CVE-2022-3306: Use after free in Survey
  * CVE-2022-3307: Use after free in Media
  * CVE-2022-3308: Insufficient policy enforcement in Developer Tools
  * CVE-2022-3309: Use after free in Assistant
  * CVE-2022-3310: Insufficient policy enforcement in Custom Tabs
  * CVE-2022-3311: Use after free in Import
  * CVE-2022-3312: Insufficient validation of untrusted input in VPN
  * CVE-2022-3313: Incorrect security UI in Full Screen
  * CVE-2022-3314: Use after free in Logging
  * CVE-2022-3315: Type confusion in Blink
  * CVE-2022-3316: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-3317: Insufficient validation of untrusted input in Intents
  * CVE-2022-3318: Use after free in ChromeOS Notifications
- drop patches:
  * chromium-104-tflite-system-zlib.patch
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
- add patches
  * chromium-106-ffmpeg-duration.patch
  * chromium-106-AutofillPopupControllerImpl-namespace.patch</changelog>
</package>
<package pkgid="6aa6fe9f3af80bcca3269e14df4ad753926a9174e7dc30bd5070be67f88e335d" name="chromedriver" arch="aarch64">
  <version epoch="0" ver="107.0.5304.110" rel="bp154.2.43.1"/>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654689600">- Switch to GTK4 on TW and Leap 15.4+ (boo#1200139)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1654862400">- Chromium 102.0.5005.115 (boo#1200423)
  * CVE-2022-2007: Use after free in WebGPU
  * CVE-2022-2008: Out of bounds memory access in WebGL
  * CVE-2022-2010: Out of bounds read in compositing
  * CVE-2022-2011: Use after free in ANGLE</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1656158400">- Chromium 103.0.5060.53 (boo#1200783)
  * CVE-2022-2156: Use after free in Base
  * CVE-2022-2157: Use after free in Interest groups
  * CVE-2022-2158: Type Confusion in V8
  * CVE-2022-2160: Insufficient policy enforcement in DevTools
  * CVE-2022-2161: Use after free in WebApp Provider
  * CVE-2022-2162: Insufficient policy enforcement in File System API
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * CVE-2022-2164: Inappropriate implementation in Extensions API
  * CVE-2022-2165: Insufficient data validation in URL formatting
- Added patches:
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-VirtualCursor-std-layout.patch
  * chromium-103-compiler.patch
- Removed patches:
  * chromium-102-compiler.patch
  * chromium-91-sql-standard-layout-type.patch
  * chromium-101-libxml-unbundle.patch
  * chromium-102-fenced_frame_utils-include.patch
  * chromium-102-swiftshader-template-instantiation.patch
  * chromium-102-symbolize-include.patch
  * chromium-97-arm-tflite-cast.patch
  * chromium-97-ScrollView-reference.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657195200">- Chromium 103.0.5060.66
  * no upstream release notes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657368000">- Chromium 103.0.5060.114 (boo#1201216)
  * CVE-2022-2294: Heap buffer overflow in WebRTC
  * CVE-2022-2295: Type Confusion in V8
  * CVE-2022-2296: Use after free in Chrome OS Shell</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1658318400">- Chromium 103.0.5060.134 (boo#1201679):
  * CVE-2022-2477 : Use after free in Guest View
  * CVE-2022-2478 : Use after free in PDF
  * CVE-2022-2479 : Insufficient validation of untrusted input in File
  * CVE-2022-2480 : Use after free in Service Worker API
  * CVE-2022-2481: Use after free in Views
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1658577600">- Switch back to Clang so that we can use BTI on aarch64
  * Gold is too old - doesn't understand BTI
  * LD crashes on aarch64
- Re-enable LTO
- Prepare move to FFmpeg 5 for new channel layout
  (requires 5.1+)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660046400">- Chromium 104.0.5112.79 (boo#1202075)
  * CVE-2022-2603: Use after free in Omnibox
  * CVE-2022-2604: Use after free in Safe Browsing
  * CVE-2022-2605: Out of bounds read in Dawn
  * CVE-2022-2606: Use after free in Managed devices API
  * CVE-2022-2607: Use after free in Tab Strip
  * CVE-2022-2608: Use after free in Overview Mode
  * CVE-2022-2609: Use after free in Nearby Share
  * CVE-2022-2610: Insufficient policy enforcement in Background Fetch
  * CVE-2022-2611: Inappropriate implementation in Fullscreen API
  * CVE-2022-2612: Side-channel information leakage in Keyboard input
  * CVE-2022-2613: Use after free in Input
  * CVE-2022-2614: Use after free in Sign-In Flow
  * CVE-2022-2615: Insufficient policy enforcement in Cookies
  * CVE-2022-2616: Inappropriate implementation in Extensions API
  * CVE-2022-2617: Use after free in Extensions API
  * CVE-2022-2618: Insufficient validation of untrusted input in Internals
  * CVE-2022-2619: Insufficient validation of untrusted input in Settings
  * CVE-2022-2620: Use after free in WebUI
  * CVE-2022-2621: Use after free in Extensions
  * CVE-2022-2622: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-2623: Use after free in Offline
  * CVE-2022-2624: Heap buffer overflow in PDF
- Added patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-104-tflite-system-zlib.patch
- Removed patches:
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-compiler.patch
- Use FFmpeg 5.1 on TW</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660651200">- Re-enable our version of chrome-wrapper
- Set no sandbox if root is being used (https://crbug.com/638180)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660824000">- Chromium 104.0.5112.101 (boo#1202509):
  * CVE-2022-2852: Use after free in FedCM
  * CVE-2022-2854: Use after free in SwiftShader
  * CVE-2022-2855: Use after free in ANGLE
  * CVE-2022-2857: Use after free in Blink
  * CVE-2022-2858: Use after free in Sign-In Flow
  * CVE-2022-2853: Heap buffer overflow in Downloads
  * CVE-2022-2856: Insufficient validation of untrusted input in Intents
  * CVE-2022-2859: Use after free in Chrome OS Shell
  * CVE-2022-2860: Insufficient policy enforcement in Cookies
  * CVE-2022-2861: Inappropriate implementation in Extensions API</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1661169600">- Fix quoting in chrome-wrapper, don't put cwd on LD_LIBRARY_PATH</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1662033600">- Update chromium-symbolic.svg: this fixes bsc#1202403.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1662638400">- Chromium 105.0.5195.102 (boo#1203102):
  * CVE-2022-3075: Insufficient data validation in Mojo
- Chromium 105.0.5195.52 (boo#1202964):
  * CVE-2022-3038: Use after free in Network Service
  * CVE-2022-3039: Use after free in WebSQL
  * CVE-2022-3040: Use after free in Layout
  * CVE-2022-3041: Use after free in WebSQL
  * CVE-2022-3042: Use after free in PhoneHub
  * CVE-2022-3043: Heap buffer overflow in Screen Capture
  * CVE-2022-3044: Inappropriate implementation in Site Isolation
  * CVE-2022-3045: Insufficient validation of untrusted input in V8
  * CVE-2022-3046: Use after free in Browser Tag
  * CVE-2022-3071: Use after free in Tab Strip
  * CVE-2022-3047: Insufficient policy enforcement in Extensions API
  * CVE-2022-3048: Inappropriate implementation in Chrome OS lockscreen
  * CVE-2022-3049: Use after free in SplitScreen
  * CVE-2022-3050: Heap buffer overflow in WebUI
  * CVE-2022-3051: Heap buffer overflow in Exosphere
  * CVE-2022-3052: Heap buffer overflow in Window Manager
  * CVE-2022-3053: Inappropriate implementation in Pointer Lock
  * CVE-2022-3054: Insufficient policy enforcement in DevTools
  * CVE-2022-3055: Use after free in Passwords
  * CVE-2022-3056: Insufficient policy enforcement in Content Security Policy
  * CVE-2022-3057: Inappropriate implementation in iframe Sandbox
  * CVE-2022-3058: Use after free in Sign-In Flow
- Added patches:
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Bitmap-include.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-wayland-1.20.patch
  * chromium-105-compiler.patch
- Removed patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-78-protobuf-RepeatedPtrField-export.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663156800">- Chromium 105.0.5195.127 (boo#1203419):
  * CVE-2022-3195: Out of bounds write in Storage
  * CVE-2022-3196: Use after free in PDF
  * CVE-2022-3197: Use after free in PDF
  * CVE-2022-3198: Use after free in PDF
  * CVE-2022-3199: Use after free in Frames
  * CVE-2022-3200: Heap buffer overflow in Internals
  * CVE-2022-3201: Insufficient validation of untrusted input in DevTools
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1664625600">- Chromium 106.0.5249.91 (boo#1203808):
  * CVE-2022-3370: Use after free in Custom Elements
  * CVE-2022-3373: Out of bounds write in V8
- includes changes from 106.0.5249.61:
  * CVE-2022-3304: Use after free in CSS
  * CVE-2022-3201: Insufficient validation of untrusted input in Developer Tools
  * CVE-2022-3305: Use after free in Survey
  * CVE-2022-3306: Use after free in Survey
  * CVE-2022-3307: Use after free in Media
  * CVE-2022-3308: Insufficient policy enforcement in Developer Tools
  * CVE-2022-3309: Use after free in Assistant
  * CVE-2022-3310: Insufficient policy enforcement in Custom Tabs
  * CVE-2022-3311: Use after free in Import
  * CVE-2022-3312: Insufficient validation of untrusted input in VPN
  * CVE-2022-3313: Incorrect security UI in Full Screen
  * CVE-2022-3314: Use after free in Logging
  * CVE-2022-3315: Type confusion in Blink
  * CVE-2022-3316: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-3317: Insufficient validation of untrusted input in Intents
  * CVE-2022-3318: Use after free in ChromeOS Notifications
- drop patches:
  * chromium-104-tflite-system-zlib.patch
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
- add patches
  * chromium-106-ffmpeg-duration.patch
  * chromium-106-AutofillPopupControllerImpl-namespace.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1665057600">- Chromium 106.0.5249.103:
  * fix possible cache manager deadlock
  * Fix right-click menu appearing unexpectedly affecting screen
    readers</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1665576000">- Chromium 106.0.5249.119 (boo#1204223)
  * CVE-2022-3445: Use after free in Skia
  * CVE-2022-3446: Heap buffer overflow in WebSQL
  * CVE-2022-3447: Inappropriate implementation in Custom Tabs
  * CVE-2022-3448: Use after free in Permissions API
  * CVE-2022-3449: Use after free in Safe Browsing
  * CVE-2022-3450: Use after free in Peer Connection</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1666872000">- Chromium 107.0.5304.68 (boo#1204732)
  * CVE-2022-3652: Type Confusion in V8
  * CVE-2022-3653: Heap buffer overflow in Vulkan
  * CVE-2022-3654: Use after free in Layout
  * CVE-2022-3655: Heap buffer overflow in Media Galleries
  * CVE-2022-3656: Insufficient data validation in File System
  * CVE-2022-3657: Use after free in Extensions
  * CVE-2022-3658: Use after free in Feedback service on Chrome OS
  * CVE-2022-3659: Use after free in Accessibility
  * CVE-2022-3660: Inappropriate implementation in Full screen mode
  * CVE-2022-3661: Insufficient data validation in Extensions
- Added patches:
  * chromium-107-compiler.patch
  * chromium-107-system-zlib.patch
- Removed patches:
  * chromium-105-compiler.patch
  * chromium-105-Bitmap-include.patch
  * chromium-106-AutofillPopupControllerImpl-namespace.patch
- Unbundle libyuv and libavif on TW
- Prepare 15.5
- Use qt on 15.4+ (15.3 too old)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1666958400">- Chromium 107.0.5304.87 (boo#1204819)
  * CVE-2022-3723: Type Confusion in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1667995200">- Chromium 107.0.5304.110 (boo#1205221)
  * CVE-2022-3885: Use after free in V8
  * CVE-2022-3886: Use after free in Speech Recognition
  * CVE-2022-3887: Use after free in Web Workers
  * CVE-2022-3888: Use after free in WebCodecs
  * CVE-2022-3889: Type Confusion in V8
  * CVE-2022-3890: Heap buffer overflow in Crashpad</changelog>
</package>
<package pkgid="ecae1fce3cef9e7583fad7d091a6bf757bbe47d023922000d06c06ceaba5cfd1" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="107.0.5304.110" rel="bp154.2.43.1"/>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654689600">- Switch to GTK4 on TW and Leap 15.4+ (boo#1200139)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1654862400">- Chromium 102.0.5005.115 (boo#1200423)
  * CVE-2022-2007: Use after free in WebGPU
  * CVE-2022-2008: Out of bounds memory access in WebGL
  * CVE-2022-2010: Out of bounds read in compositing
  * CVE-2022-2011: Use after free in ANGLE</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1656158400">- Chromium 103.0.5060.53 (boo#1200783)
  * CVE-2022-2156: Use after free in Base
  * CVE-2022-2157: Use after free in Interest groups
  * CVE-2022-2158: Type Confusion in V8
  * CVE-2022-2160: Insufficient policy enforcement in DevTools
  * CVE-2022-2161: Use after free in WebApp Provider
  * CVE-2022-2162: Insufficient policy enforcement in File System API
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * CVE-2022-2164: Inappropriate implementation in Extensions API
  * CVE-2022-2165: Insufficient data validation in URL formatting
- Added patches:
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-VirtualCursor-std-layout.patch
  * chromium-103-compiler.patch
- Removed patches:
  * chromium-102-compiler.patch
  * chromium-91-sql-standard-layout-type.patch
  * chromium-101-libxml-unbundle.patch
  * chromium-102-fenced_frame_utils-include.patch
  * chromium-102-swiftshader-template-instantiation.patch
  * chromium-102-symbolize-include.patch
  * chromium-97-arm-tflite-cast.patch
  * chromium-97-ScrollView-reference.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657195200">- Chromium 103.0.5060.66
  * no upstream release notes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657368000">- Chromium 103.0.5060.114 (boo#1201216)
  * CVE-2022-2294: Heap buffer overflow in WebRTC
  * CVE-2022-2295: Type Confusion in V8
  * CVE-2022-2296: Use after free in Chrome OS Shell</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1658318400">- Chromium 103.0.5060.134 (boo#1201679):
  * CVE-2022-2477 : Use after free in Guest View
  * CVE-2022-2478 : Use after free in PDF
  * CVE-2022-2479 : Insufficient validation of untrusted input in File
  * CVE-2022-2480 : Use after free in Service Worker API
  * CVE-2022-2481: Use after free in Views
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1658577600">- Switch back to Clang so that we can use BTI on aarch64
  * Gold is too old - doesn't understand BTI
  * LD crashes on aarch64
- Re-enable LTO
- Prepare move to FFmpeg 5 for new channel layout
  (requires 5.1+)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660046400">- Chromium 104.0.5112.79 (boo#1202075)
  * CVE-2022-2603: Use after free in Omnibox
  * CVE-2022-2604: Use after free in Safe Browsing
  * CVE-2022-2605: Out of bounds read in Dawn
  * CVE-2022-2606: Use after free in Managed devices API
  * CVE-2022-2607: Use after free in Tab Strip
  * CVE-2022-2608: Use after free in Overview Mode
  * CVE-2022-2609: Use after free in Nearby Share
  * CVE-2022-2610: Insufficient policy enforcement in Background Fetch
  * CVE-2022-2611: Inappropriate implementation in Fullscreen API
  * CVE-2022-2612: Side-channel information leakage in Keyboard input
  * CVE-2022-2613: Use after free in Input
  * CVE-2022-2614: Use after free in Sign-In Flow
  * CVE-2022-2615: Insufficient policy enforcement in Cookies
  * CVE-2022-2616: Inappropriate implementation in Extensions API
  * CVE-2022-2617: Use after free in Extensions API
  * CVE-2022-2618: Insufficient validation of untrusted input in Internals
  * CVE-2022-2619: Insufficient validation of untrusted input in Settings
  * CVE-2022-2620: Use after free in WebUI
  * CVE-2022-2621: Use after free in Extensions
  * CVE-2022-2622: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-2623: Use after free in Offline
  * CVE-2022-2624: Heap buffer overflow in PDF
- Added patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-104-tflite-system-zlib.patch
- Removed patches:
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-compiler.patch
- Use FFmpeg 5.1 on TW</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660651200">- Re-enable our version of chrome-wrapper
- Set no sandbox if root is being used (https://crbug.com/638180)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660824000">- Chromium 104.0.5112.101 (boo#1202509):
  * CVE-2022-2852: Use after free in FedCM
  * CVE-2022-2854: Use after free in SwiftShader
  * CVE-2022-2855: Use after free in ANGLE
  * CVE-2022-2857: Use after free in Blink
  * CVE-2022-2858: Use after free in Sign-In Flow
  * CVE-2022-2853: Heap buffer overflow in Downloads
  * CVE-2022-2856: Insufficient validation of untrusted input in Intents
  * CVE-2022-2859: Use after free in Chrome OS Shell
  * CVE-2022-2860: Insufficient policy enforcement in Cookies
  * CVE-2022-2861: Inappropriate implementation in Extensions API</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1661169600">- Fix quoting in chrome-wrapper, don't put cwd on LD_LIBRARY_PATH</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1662033600">- Update chromium-symbolic.svg: this fixes bsc#1202403.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1662638400">- Chromium 105.0.5195.102 (boo#1203102):
  * CVE-2022-3075: Insufficient data validation in Mojo
- Chromium 105.0.5195.52 (boo#1202964):
  * CVE-2022-3038: Use after free in Network Service
  * CVE-2022-3039: Use after free in WebSQL
  * CVE-2022-3040: Use after free in Layout
  * CVE-2022-3041: Use after free in WebSQL
  * CVE-2022-3042: Use after free in PhoneHub
  * CVE-2022-3043: Heap buffer overflow in Screen Capture
  * CVE-2022-3044: Inappropriate implementation in Site Isolation
  * CVE-2022-3045: Insufficient validation of untrusted input in V8
  * CVE-2022-3046: Use after free in Browser Tag
  * CVE-2022-3071: Use after free in Tab Strip
  * CVE-2022-3047: Insufficient policy enforcement in Extensions API
  * CVE-2022-3048: Inappropriate implementation in Chrome OS lockscreen
  * CVE-2022-3049: Use after free in SplitScreen
  * CVE-2022-3050: Heap buffer overflow in WebUI
  * CVE-2022-3051: Heap buffer overflow in Exosphere
  * CVE-2022-3052: Heap buffer overflow in Window Manager
  * CVE-2022-3053: Inappropriate implementation in Pointer Lock
  * CVE-2022-3054: Insufficient policy enforcement in DevTools
  * CVE-2022-3055: Use after free in Passwords
  * CVE-2022-3056: Insufficient policy enforcement in Content Security Policy
  * CVE-2022-3057: Inappropriate implementation in iframe Sandbox
  * CVE-2022-3058: Use after free in Sign-In Flow
- Added patches:
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Bitmap-include.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-wayland-1.20.patch
  * chromium-105-compiler.patch
- Removed patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-78-protobuf-RepeatedPtrField-export.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663156800">- Chromium 105.0.5195.127 (boo#1203419):
  * CVE-2022-3195: Out of bounds write in Storage
  * CVE-2022-3196: Use after free in PDF
  * CVE-2022-3197: Use after free in PDF
  * CVE-2022-3198: Use after free in PDF
  * CVE-2022-3199: Use after free in Frames
  * CVE-2022-3200: Heap buffer overflow in Internals
  * CVE-2022-3201: Insufficient validation of untrusted input in DevTools
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1664625600">- Chromium 106.0.5249.91 (boo#1203808):
  * CVE-2022-3370: Use after free in Custom Elements
  * CVE-2022-3373: Out of bounds write in V8
- includes changes from 106.0.5249.61:
  * CVE-2022-3304: Use after free in CSS
  * CVE-2022-3201: Insufficient validation of untrusted input in Developer Tools
  * CVE-2022-3305: Use after free in Survey
  * CVE-2022-3306: Use after free in Survey
  * CVE-2022-3307: Use after free in Media
  * CVE-2022-3308: Insufficient policy enforcement in Developer Tools
  * CVE-2022-3309: Use after free in Assistant
  * CVE-2022-3310: Insufficient policy enforcement in Custom Tabs
  * CVE-2022-3311: Use after free in Import
  * CVE-2022-3312: Insufficient validation of untrusted input in VPN
  * CVE-2022-3313: Incorrect security UI in Full Screen
  * CVE-2022-3314: Use after free in Logging
  * CVE-2022-3315: Type confusion in Blink
  * CVE-2022-3316: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-3317: Insufficient validation of untrusted input in Intents
  * CVE-2022-3318: Use after free in ChromeOS Notifications
- drop patches:
  * chromium-104-tflite-system-zlib.patch
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
- add patches
  * chromium-106-ffmpeg-duration.patch
  * chromium-106-AutofillPopupControllerImpl-namespace.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1665057600">- Chromium 106.0.5249.103:
  * fix possible cache manager deadlock
  * Fix right-click menu appearing unexpectedly affecting screen
    readers</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1665576000">- Chromium 106.0.5249.119 (boo#1204223)
  * CVE-2022-3445: Use after free in Skia
  * CVE-2022-3446: Heap buffer overflow in WebSQL
  * CVE-2022-3447: Inappropriate implementation in Custom Tabs
  * CVE-2022-3448: Use after free in Permissions API
  * CVE-2022-3449: Use after free in Safe Browsing
  * CVE-2022-3450: Use after free in Peer Connection</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1666872000">- Chromium 107.0.5304.68 (boo#1204732)
  * CVE-2022-3652: Type Confusion in V8
  * CVE-2022-3653: Heap buffer overflow in Vulkan
  * CVE-2022-3654: Use after free in Layout
  * CVE-2022-3655: Heap buffer overflow in Media Galleries
  * CVE-2022-3656: Insufficient data validation in File System
  * CVE-2022-3657: Use after free in Extensions
  * CVE-2022-3658: Use after free in Feedback service on Chrome OS
  * CVE-2022-3659: Use after free in Accessibility
  * CVE-2022-3660: Inappropriate implementation in Full screen mode
  * CVE-2022-3661: Insufficient data validation in Extensions
- Added patches:
  * chromium-107-compiler.patch
  * chromium-107-system-zlib.patch
- Removed patches:
  * chromium-105-compiler.patch
  * chromium-105-Bitmap-include.patch
  * chromium-106-AutofillPopupControllerImpl-namespace.patch
- Unbundle libyuv and libavif on TW
- Prepare 15.5
- Use qt on 15.4+ (15.3 too old)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1666958400">- Chromium 107.0.5304.87 (boo#1204819)
  * CVE-2022-3723: Type Confusion in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1667995200">- Chromium 107.0.5304.110 (boo#1205221)
  * CVE-2022-3885: Use after free in V8
  * CVE-2022-3886: Use after free in Speech Recognition
  * CVE-2022-3887: Use after free in Web Workers
  * CVE-2022-3888: Use after free in WebCodecs
  * CVE-2022-3889: Type Confusion in V8
  * CVE-2022-3890: Heap buffer overflow in Crashpad</changelog>
</package>
<package pkgid="9dad0d3f16766071450c6c06307f4c43986c6f2e296af3793fb897eecdddcdc7" name="chromedriver" arch="aarch64">
  <version epoch="0" ver="107.0.5304.121" rel="bp154.2.46.1"/>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1656158400">- Chromium 103.0.5060.53 (boo#1200783)
  * CVE-2022-2156: Use after free in Base
  * CVE-2022-2157: Use after free in Interest groups
  * CVE-2022-2158: Type Confusion in V8
  * CVE-2022-2160: Insufficient policy enforcement in DevTools
  * CVE-2022-2161: Use after free in WebApp Provider
  * CVE-2022-2162: Insufficient policy enforcement in File System API
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * CVE-2022-2164: Inappropriate implementation in Extensions API
  * CVE-2022-2165: Insufficient data validation in URL formatting
- Added patches:
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-VirtualCursor-std-layout.patch
  * chromium-103-compiler.patch
- Removed patches:
  * chromium-102-compiler.patch
  * chromium-91-sql-standard-layout-type.patch
  * chromium-101-libxml-unbundle.patch
  * chromium-102-fenced_frame_utils-include.patch
  * chromium-102-swiftshader-template-instantiation.patch
  * chromium-102-symbolize-include.patch
  * chromium-97-arm-tflite-cast.patch
  * chromium-97-ScrollView-reference.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657195200">- Chromium 103.0.5060.66
  * no upstream release notes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657368000">- Chromium 103.0.5060.114 (boo#1201216)
  * CVE-2022-2294: Heap buffer overflow in WebRTC
  * CVE-2022-2295: Type Confusion in V8
  * CVE-2022-2296: Use after free in Chrome OS Shell</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1658318400">- Chromium 103.0.5060.134 (boo#1201679):
  * CVE-2022-2477 : Use after free in Guest View
  * CVE-2022-2478 : Use after free in PDF
  * CVE-2022-2479 : Insufficient validation of untrusted input in File
  * CVE-2022-2480 : Use after free in Service Worker API
  * CVE-2022-2481: Use after free in Views
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1658577600">- Switch back to Clang so that we can use BTI on aarch64
  * Gold is too old - doesn't understand BTI
  * LD crashes on aarch64
- Re-enable LTO
- Prepare move to FFmpeg 5 for new channel layout
  (requires 5.1+)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660046400">- Chromium 104.0.5112.79 (boo#1202075)
  * CVE-2022-2603: Use after free in Omnibox
  * CVE-2022-2604: Use after free in Safe Browsing
  * CVE-2022-2605: Out of bounds read in Dawn
  * CVE-2022-2606: Use after free in Managed devices API
  * CVE-2022-2607: Use after free in Tab Strip
  * CVE-2022-2608: Use after free in Overview Mode
  * CVE-2022-2609: Use after free in Nearby Share
  * CVE-2022-2610: Insufficient policy enforcement in Background Fetch
  * CVE-2022-2611: Inappropriate implementation in Fullscreen API
  * CVE-2022-2612: Side-channel information leakage in Keyboard input
  * CVE-2022-2613: Use after free in Input
  * CVE-2022-2614: Use after free in Sign-In Flow
  * CVE-2022-2615: Insufficient policy enforcement in Cookies
  * CVE-2022-2616: Inappropriate implementation in Extensions API
  * CVE-2022-2617: Use after free in Extensions API
  * CVE-2022-2618: Insufficient validation of untrusted input in Internals
  * CVE-2022-2619: Insufficient validation of untrusted input in Settings
  * CVE-2022-2620: Use after free in WebUI
  * CVE-2022-2621: Use after free in Extensions
  * CVE-2022-2622: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-2623: Use after free in Offline
  * CVE-2022-2624: Heap buffer overflow in PDF
- Added patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-104-tflite-system-zlib.patch
- Removed patches:
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-compiler.patch
- Use FFmpeg 5.1 on TW</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660651200">- Re-enable our version of chrome-wrapper
- Set no sandbox if root is being used (https://crbug.com/638180)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660824000">- Chromium 104.0.5112.101 (boo#1202509):
  * CVE-2022-2852: Use after free in FedCM
  * CVE-2022-2854: Use after free in SwiftShader
  * CVE-2022-2855: Use after free in ANGLE
  * CVE-2022-2857: Use after free in Blink
  * CVE-2022-2858: Use after free in Sign-In Flow
  * CVE-2022-2853: Heap buffer overflow in Downloads
  * CVE-2022-2856: Insufficient validation of untrusted input in Intents
  * CVE-2022-2859: Use after free in Chrome OS Shell
  * CVE-2022-2860: Insufficient policy enforcement in Cookies
  * CVE-2022-2861: Inappropriate implementation in Extensions API</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1661169600">- Fix quoting in chrome-wrapper, don't put cwd on LD_LIBRARY_PATH</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1662033600">- Update chromium-symbolic.svg: this fixes bsc#1202403.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1662638400">- Chromium 105.0.5195.102 (boo#1203102):
  * CVE-2022-3075: Insufficient data validation in Mojo
- Chromium 105.0.5195.52 (boo#1202964):
  * CVE-2022-3038: Use after free in Network Service
  * CVE-2022-3039: Use after free in WebSQL
  * CVE-2022-3040: Use after free in Layout
  * CVE-2022-3041: Use after free in WebSQL
  * CVE-2022-3042: Use after free in PhoneHub
  * CVE-2022-3043: Heap buffer overflow in Screen Capture
  * CVE-2022-3044: Inappropriate implementation in Site Isolation
  * CVE-2022-3045: Insufficient validation of untrusted input in V8
  * CVE-2022-3046: Use after free in Browser Tag
  * CVE-2022-3071: Use after free in Tab Strip
  * CVE-2022-3047: Insufficient policy enforcement in Extensions API
  * CVE-2022-3048: Inappropriate implementation in Chrome OS lockscreen
  * CVE-2022-3049: Use after free in SplitScreen
  * CVE-2022-3050: Heap buffer overflow in WebUI
  * CVE-2022-3051: Heap buffer overflow in Exosphere
  * CVE-2022-3052: Heap buffer overflow in Window Manager
  * CVE-2022-3053: Inappropriate implementation in Pointer Lock
  * CVE-2022-3054: Insufficient policy enforcement in DevTools
  * CVE-2022-3055: Use after free in Passwords
  * CVE-2022-3056: Insufficient policy enforcement in Content Security Policy
  * CVE-2022-3057: Inappropriate implementation in iframe Sandbox
  * CVE-2022-3058: Use after free in Sign-In Flow
- Added patches:
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Bitmap-include.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-wayland-1.20.patch
  * chromium-105-compiler.patch
- Removed patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-78-protobuf-RepeatedPtrField-export.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663156800">- Chromium 105.0.5195.127 (boo#1203419):
  * CVE-2022-3195: Out of bounds write in Storage
  * CVE-2022-3196: Use after free in PDF
  * CVE-2022-3197: Use after free in PDF
  * CVE-2022-3198: Use after free in PDF
  * CVE-2022-3199: Use after free in Frames
  * CVE-2022-3200: Heap buffer overflow in Internals
  * CVE-2022-3201: Insufficient validation of untrusted input in DevTools
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1664625600">- Chromium 106.0.5249.91 (boo#1203808):
  * CVE-2022-3370: Use after free in Custom Elements
  * CVE-2022-3373: Out of bounds write in V8
- includes changes from 106.0.5249.61:
  * CVE-2022-3304: Use after free in CSS
  * CVE-2022-3201: Insufficient validation of untrusted input in Developer Tools
  * CVE-2022-3305: Use after free in Survey
  * CVE-2022-3306: Use after free in Survey
  * CVE-2022-3307: Use after free in Media
  * CVE-2022-3308: Insufficient policy enforcement in Developer Tools
  * CVE-2022-3309: Use after free in Assistant
  * CVE-2022-3310: Insufficient policy enforcement in Custom Tabs
  * CVE-2022-3311: Use after free in Import
  * CVE-2022-3312: Insufficient validation of untrusted input in VPN
  * CVE-2022-3313: Incorrect security UI in Full Screen
  * CVE-2022-3314: Use after free in Logging
  * CVE-2022-3315: Type confusion in Blink
  * CVE-2022-3316: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-3317: Insufficient validation of untrusted input in Intents
  * CVE-2022-3318: Use after free in ChromeOS Notifications
- drop patches:
  * chromium-104-tflite-system-zlib.patch
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
- add patches
  * chromium-106-ffmpeg-duration.patch
  * chromium-106-AutofillPopupControllerImpl-namespace.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1665057600">- Chromium 106.0.5249.103:
  * fix possible cache manager deadlock
  * Fix right-click menu appearing unexpectedly affecting screen
    readers</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1665576000">- Chromium 106.0.5249.119 (boo#1204223)
  * CVE-2022-3445: Use after free in Skia
  * CVE-2022-3446: Heap buffer overflow in WebSQL
  * CVE-2022-3447: Inappropriate implementation in Custom Tabs
  * CVE-2022-3448: Use after free in Permissions API
  * CVE-2022-3449: Use after free in Safe Browsing
  * CVE-2022-3450: Use after free in Peer Connection</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1666872000">- Chromium 107.0.5304.68 (boo#1204732)
  * CVE-2022-3652: Type Confusion in V8
  * CVE-2022-3653: Heap buffer overflow in Vulkan
  * CVE-2022-3654: Use after free in Layout
  * CVE-2022-3655: Heap buffer overflow in Media Galleries
  * CVE-2022-3656: Insufficient data validation in File System
  * CVE-2022-3657: Use after free in Extensions
  * CVE-2022-3658: Use after free in Feedback service on Chrome OS
  * CVE-2022-3659: Use after free in Accessibility
  * CVE-2022-3660: Inappropriate implementation in Full screen mode
  * CVE-2022-3661: Insufficient data validation in Extensions
- Added patches:
  * chromium-107-compiler.patch
  * chromium-107-system-zlib.patch
- Removed patches:
  * chromium-105-compiler.patch
  * chromium-105-Bitmap-include.patch
  * chromium-106-AutofillPopupControllerImpl-namespace.patch
- Unbundle libyuv and libavif on TW
- Prepare 15.5
- Use qt on 15.4+ (15.3 too old)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1666958400">- Chromium 107.0.5304.87 (boo#1204819)
  * CVE-2022-3723: Type Confusion in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1667995200">- Chromium 107.0.5304.110 (boo#1205221)
  * CVE-2022-3885: Use after free in V8
  * CVE-2022-3886: Use after free in Speech Recognition
  * CVE-2022-3887: Use after free in Web Workers
  * CVE-2022-3888: Use after free in WebCodecs
  * CVE-2022-3889: Type Confusion in V8
  * CVE-2022-3890: Heap buffer overflow in Crashpad</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1668686400">- Build with llvm15 on openSUSE:Backports:SLE-15-SP5 and up</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1669291200">- Chromium 107.0.5304.121 (boo#1205736)
  * CVE-2022-4135: Heap buffer overflow in GPU</changelog>
</package>
<package pkgid="1d2af7b0413ba276b33860557b6add39a5b87d53bd59a4d1d88bbb5e0a891887" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="107.0.5304.121" rel="bp154.2.46.1"/>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1656158400">- Chromium 103.0.5060.53 (boo#1200783)
  * CVE-2022-2156: Use after free in Base
  * CVE-2022-2157: Use after free in Interest groups
  * CVE-2022-2158: Type Confusion in V8
  * CVE-2022-2160: Insufficient policy enforcement in DevTools
  * CVE-2022-2161: Use after free in WebApp Provider
  * CVE-2022-2162: Insufficient policy enforcement in File System API
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * CVE-2022-2164: Inappropriate implementation in Extensions API
  * CVE-2022-2165: Insufficient data validation in URL formatting
- Added patches:
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-VirtualCursor-std-layout.patch
  * chromium-103-compiler.patch
- Removed patches:
  * chromium-102-compiler.patch
  * chromium-91-sql-standard-layout-type.patch
  * chromium-101-libxml-unbundle.patch
  * chromium-102-fenced_frame_utils-include.patch
  * chromium-102-swiftshader-template-instantiation.patch
  * chromium-102-symbolize-include.patch
  * chromium-97-arm-tflite-cast.patch
  * chromium-97-ScrollView-reference.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657195200">- Chromium 103.0.5060.66
  * no upstream release notes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657368000">- Chromium 103.0.5060.114 (boo#1201216)
  * CVE-2022-2294: Heap buffer overflow in WebRTC
  * CVE-2022-2295: Type Confusion in V8
  * CVE-2022-2296: Use after free in Chrome OS Shell</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1658318400">- Chromium 103.0.5060.134 (boo#1201679):
  * CVE-2022-2477 : Use after free in Guest View
  * CVE-2022-2478 : Use after free in PDF
  * CVE-2022-2479 : Insufficient validation of untrusted input in File
  * CVE-2022-2480 : Use after free in Service Worker API
  * CVE-2022-2481: Use after free in Views
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1658577600">- Switch back to Clang so that we can use BTI on aarch64
  * Gold is too old - doesn't understand BTI
  * LD crashes on aarch64
- Re-enable LTO
- Prepare move to FFmpeg 5 for new channel layout
  (requires 5.1+)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660046400">- Chromium 104.0.5112.79 (boo#1202075)
  * CVE-2022-2603: Use after free in Omnibox
  * CVE-2022-2604: Use after free in Safe Browsing
  * CVE-2022-2605: Out of bounds read in Dawn
  * CVE-2022-2606: Use after free in Managed devices API
  * CVE-2022-2607: Use after free in Tab Strip
  * CVE-2022-2608: Use after free in Overview Mode
  * CVE-2022-2609: Use after free in Nearby Share
  * CVE-2022-2610: Insufficient policy enforcement in Background Fetch
  * CVE-2022-2611: Inappropriate implementation in Fullscreen API
  * CVE-2022-2612: Side-channel information leakage in Keyboard input
  * CVE-2022-2613: Use after free in Input
  * CVE-2022-2614: Use after free in Sign-In Flow
  * CVE-2022-2615: Insufficient policy enforcement in Cookies
  * CVE-2022-2616: Inappropriate implementation in Extensions API
  * CVE-2022-2617: Use after free in Extensions API
  * CVE-2022-2618: Insufficient validation of untrusted input in Internals
  * CVE-2022-2619: Insufficient validation of untrusted input in Settings
  * CVE-2022-2620: Use after free in WebUI
  * CVE-2022-2621: Use after free in Extensions
  * CVE-2022-2622: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-2623: Use after free in Offline
  * CVE-2022-2624: Heap buffer overflow in PDF
- Added patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-104-tflite-system-zlib.patch
- Removed patches:
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-compiler.patch
- Use FFmpeg 5.1 on TW</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660651200">- Re-enable our version of chrome-wrapper
- Set no sandbox if root is being used (https://crbug.com/638180)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660824000">- Chromium 104.0.5112.101 (boo#1202509):
  * CVE-2022-2852: Use after free in FedCM
  * CVE-2022-2854: Use after free in SwiftShader
  * CVE-2022-2855: Use after free in ANGLE
  * CVE-2022-2857: Use after free in Blink
  * CVE-2022-2858: Use after free in Sign-In Flow
  * CVE-2022-2853: Heap buffer overflow in Downloads
  * CVE-2022-2856: Insufficient validation of untrusted input in Intents
  * CVE-2022-2859: Use after free in Chrome OS Shell
  * CVE-2022-2860: Insufficient policy enforcement in Cookies
  * CVE-2022-2861: Inappropriate implementation in Extensions API</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1661169600">- Fix quoting in chrome-wrapper, don't put cwd on LD_LIBRARY_PATH</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1662033600">- Update chromium-symbolic.svg: this fixes bsc#1202403.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1662638400">- Chromium 105.0.5195.102 (boo#1203102):
  * CVE-2022-3075: Insufficient data validation in Mojo
- Chromium 105.0.5195.52 (boo#1202964):
  * CVE-2022-3038: Use after free in Network Service
  * CVE-2022-3039: Use after free in WebSQL
  * CVE-2022-3040: Use after free in Layout
  * CVE-2022-3041: Use after free in WebSQL
  * CVE-2022-3042: Use after free in PhoneHub
  * CVE-2022-3043: Heap buffer overflow in Screen Capture
  * CVE-2022-3044: Inappropriate implementation in Site Isolation
  * CVE-2022-3045: Insufficient validation of untrusted input in V8
  * CVE-2022-3046: Use after free in Browser Tag
  * CVE-2022-3071: Use after free in Tab Strip
  * CVE-2022-3047: Insufficient policy enforcement in Extensions API
  * CVE-2022-3048: Inappropriate implementation in Chrome OS lockscreen
  * CVE-2022-3049: Use after free in SplitScreen
  * CVE-2022-3050: Heap buffer overflow in WebUI
  * CVE-2022-3051: Heap buffer overflow in Exosphere
  * CVE-2022-3052: Heap buffer overflow in Window Manager
  * CVE-2022-3053: Inappropriate implementation in Pointer Lock
  * CVE-2022-3054: Insufficient policy enforcement in DevTools
  * CVE-2022-3055: Use after free in Passwords
  * CVE-2022-3056: Insufficient policy enforcement in Content Security Policy
  * CVE-2022-3057: Inappropriate implementation in iframe Sandbox
  * CVE-2022-3058: Use after free in Sign-In Flow
- Added patches:
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Bitmap-include.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-wayland-1.20.patch
  * chromium-105-compiler.patch
- Removed patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-78-protobuf-RepeatedPtrField-export.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663156800">- Chromium 105.0.5195.127 (boo#1203419):
  * CVE-2022-3195: Out of bounds write in Storage
  * CVE-2022-3196: Use after free in PDF
  * CVE-2022-3197: Use after free in PDF
  * CVE-2022-3198: Use after free in PDF
  * CVE-2022-3199: Use after free in Frames
  * CVE-2022-3200: Heap buffer overflow in Internals
  * CVE-2022-3201: Insufficient validation of untrusted input in DevTools
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1664625600">- Chromium 106.0.5249.91 (boo#1203808):
  * CVE-2022-3370: Use after free in Custom Elements
  * CVE-2022-3373: Out of bounds write in V8
- includes changes from 106.0.5249.61:
  * CVE-2022-3304: Use after free in CSS
  * CVE-2022-3201: Insufficient validation of untrusted input in Developer Tools
  * CVE-2022-3305: Use after free in Survey
  * CVE-2022-3306: Use after free in Survey
  * CVE-2022-3307: Use after free in Media
  * CVE-2022-3308: Insufficient policy enforcement in Developer Tools
  * CVE-2022-3309: Use after free in Assistant
  * CVE-2022-3310: Insufficient policy enforcement in Custom Tabs
  * CVE-2022-3311: Use after free in Import
  * CVE-2022-3312: Insufficient validation of untrusted input in VPN
  * CVE-2022-3313: Incorrect security UI in Full Screen
  * CVE-2022-3314: Use after free in Logging
  * CVE-2022-3315: Type confusion in Blink
  * CVE-2022-3316: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-3317: Insufficient validation of untrusted input in Intents
  * CVE-2022-3318: Use after free in ChromeOS Notifications
- drop patches:
  * chromium-104-tflite-system-zlib.patch
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
- add patches
  * chromium-106-ffmpeg-duration.patch
  * chromium-106-AutofillPopupControllerImpl-namespace.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1665057600">- Chromium 106.0.5249.103:
  * fix possible cache manager deadlock
  * Fix right-click menu appearing unexpectedly affecting screen
    readers</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1665576000">- Chromium 106.0.5249.119 (boo#1204223)
  * CVE-2022-3445: Use after free in Skia
  * CVE-2022-3446: Heap buffer overflow in WebSQL
  * CVE-2022-3447: Inappropriate implementation in Custom Tabs
  * CVE-2022-3448: Use after free in Permissions API
  * CVE-2022-3449: Use after free in Safe Browsing
  * CVE-2022-3450: Use after free in Peer Connection</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1666872000">- Chromium 107.0.5304.68 (boo#1204732)
  * CVE-2022-3652: Type Confusion in V8
  * CVE-2022-3653: Heap buffer overflow in Vulkan
  * CVE-2022-3654: Use after free in Layout
  * CVE-2022-3655: Heap buffer overflow in Media Galleries
  * CVE-2022-3656: Insufficient data validation in File System
  * CVE-2022-3657: Use after free in Extensions
  * CVE-2022-3658: Use after free in Feedback service on Chrome OS
  * CVE-2022-3659: Use after free in Accessibility
  * CVE-2022-3660: Inappropriate implementation in Full screen mode
  * CVE-2022-3661: Insufficient data validation in Extensions
- Added patches:
  * chromium-107-compiler.patch
  * chromium-107-system-zlib.patch
- Removed patches:
  * chromium-105-compiler.patch
  * chromium-105-Bitmap-include.patch
  * chromium-106-AutofillPopupControllerImpl-namespace.patch
- Unbundle libyuv and libavif on TW
- Prepare 15.5
- Use qt on 15.4+ (15.3 too old)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1666958400">- Chromium 107.0.5304.87 (boo#1204819)
  * CVE-2022-3723: Type Confusion in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1667995200">- Chromium 107.0.5304.110 (boo#1205221)
  * CVE-2022-3885: Use after free in V8
  * CVE-2022-3886: Use after free in Speech Recognition
  * CVE-2022-3887: Use after free in Web Workers
  * CVE-2022-3888: Use after free in WebCodecs
  * CVE-2022-3889: Type Confusion in V8
  * CVE-2022-3890: Heap buffer overflow in Crashpad</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1668686400">- Build with llvm15 on openSUSE:Backports:SLE-15-SP5 and up</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1669291200">- Chromium 107.0.5304.121 (boo#1205736)
  * CVE-2022-4135: Heap buffer overflow in GPU</changelog>
</package>
<package pkgid="fe0aa89cb578b6ab019b7a104a9e0f24ef224bc49df2a3229aa6f2a2b79faf2f" name="chromedriver" arch="aarch64">
  <version epoch="0" ver="107.0.5304.87" rel="bp154.2.40.1"/>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654084800">- Disable ARM control flow integrity, it causes build issues
  at the moment
- Try a different SVG (black logo on GNOME)
- Removed patches:
  * chromium-third_party-symbolize-missing-include.patch
  (replaced by chromium-102-symbolize-include.patch)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654689600">- Switch to GTK4 on TW and Leap 15.4+ (boo#1200139)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1654862400">- Chromium 102.0.5005.115 (boo#1200423)
  * CVE-2022-2007: Use after free in WebGPU
  * CVE-2022-2008: Out of bounds memory access in WebGL
  * CVE-2022-2010: Out of bounds read in compositing
  * CVE-2022-2011: Use after free in ANGLE</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1656158400">- Chromium 103.0.5060.53 (boo#1200783)
  * CVE-2022-2156: Use after free in Base
  * CVE-2022-2157: Use after free in Interest groups
  * CVE-2022-2158: Type Confusion in V8
  * CVE-2022-2160: Insufficient policy enforcement in DevTools
  * CVE-2022-2161: Use after free in WebApp Provider
  * CVE-2022-2162: Insufficient policy enforcement in File System API
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * CVE-2022-2164: Inappropriate implementation in Extensions API
  * CVE-2022-2165: Insufficient data validation in URL formatting
- Added patches:
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-VirtualCursor-std-layout.patch
  * chromium-103-compiler.patch
- Removed patches:
  * chromium-102-compiler.patch
  * chromium-91-sql-standard-layout-type.patch
  * chromium-101-libxml-unbundle.patch
  * chromium-102-fenced_frame_utils-include.patch
  * chromium-102-swiftshader-template-instantiation.patch
  * chromium-102-symbolize-include.patch
  * chromium-97-arm-tflite-cast.patch
  * chromium-97-ScrollView-reference.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657195200">- Chromium 103.0.5060.66
  * no upstream release notes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657368000">- Chromium 103.0.5060.114 (boo#1201216)
  * CVE-2022-2294: Heap buffer overflow in WebRTC
  * CVE-2022-2295: Type Confusion in V8
  * CVE-2022-2296: Use after free in Chrome OS Shell</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1658318400">- Chromium 103.0.5060.134 (boo#1201679):
  * CVE-2022-2477 : Use after free in Guest View
  * CVE-2022-2478 : Use after free in PDF
  * CVE-2022-2479 : Insufficient validation of untrusted input in File
  * CVE-2022-2480 : Use after free in Service Worker API
  * CVE-2022-2481: Use after free in Views
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1658577600">- Switch back to Clang so that we can use BTI on aarch64
  * Gold is too old - doesn't understand BTI
  * LD crashes on aarch64
- Re-enable LTO
- Prepare move to FFmpeg 5 for new channel layout
  (requires 5.1+)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660046400">- Chromium 104.0.5112.79 (boo#1202075)
  * CVE-2022-2603: Use after free in Omnibox
  * CVE-2022-2604: Use after free in Safe Browsing
  * CVE-2022-2605: Out of bounds read in Dawn
  * CVE-2022-2606: Use after free in Managed devices API
  * CVE-2022-2607: Use after free in Tab Strip
  * CVE-2022-2608: Use after free in Overview Mode
  * CVE-2022-2609: Use after free in Nearby Share
  * CVE-2022-2610: Insufficient policy enforcement in Background Fetch
  * CVE-2022-2611: Inappropriate implementation in Fullscreen API
  * CVE-2022-2612: Side-channel information leakage in Keyboard input
  * CVE-2022-2613: Use after free in Input
  * CVE-2022-2614: Use after free in Sign-In Flow
  * CVE-2022-2615: Insufficient policy enforcement in Cookies
  * CVE-2022-2616: Inappropriate implementation in Extensions API
  * CVE-2022-2617: Use after free in Extensions API
  * CVE-2022-2618: Insufficient validation of untrusted input in Internals
  * CVE-2022-2619: Insufficient validation of untrusted input in Settings
  * CVE-2022-2620: Use after free in WebUI
  * CVE-2022-2621: Use after free in Extensions
  * CVE-2022-2622: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-2623: Use after free in Offline
  * CVE-2022-2624: Heap buffer overflow in PDF
- Added patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-104-tflite-system-zlib.patch
- Removed patches:
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-compiler.patch
- Use FFmpeg 5.1 on TW</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660651200">- Re-enable our version of chrome-wrapper
- Set no sandbox if root is being used (https://crbug.com/638180)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660824000">- Chromium 104.0.5112.101 (boo#1202509):
  * CVE-2022-2852: Use after free in FedCM
  * CVE-2022-2854: Use after free in SwiftShader
  * CVE-2022-2855: Use after free in ANGLE
  * CVE-2022-2857: Use after free in Blink
  * CVE-2022-2858: Use after free in Sign-In Flow
  * CVE-2022-2853: Heap buffer overflow in Downloads
  * CVE-2022-2856: Insufficient validation of untrusted input in Intents
  * CVE-2022-2859: Use after free in Chrome OS Shell
  * CVE-2022-2860: Insufficient policy enforcement in Cookies
  * CVE-2022-2861: Inappropriate implementation in Extensions API</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1661169600">- Fix quoting in chrome-wrapper, don't put cwd on LD_LIBRARY_PATH</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1662033600">- Update chromium-symbolic.svg: this fixes bsc#1202403.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1662638400">- Chromium 105.0.5195.102 (boo#1203102):
  * CVE-2022-3075: Insufficient data validation in Mojo
- Chromium 105.0.5195.52 (boo#1202964):
  * CVE-2022-3038: Use after free in Network Service
  * CVE-2022-3039: Use after free in WebSQL
  * CVE-2022-3040: Use after free in Layout
  * CVE-2022-3041: Use after free in WebSQL
  * CVE-2022-3042: Use after free in PhoneHub
  * CVE-2022-3043: Heap buffer overflow in Screen Capture
  * CVE-2022-3044: Inappropriate implementation in Site Isolation
  * CVE-2022-3045: Insufficient validation of untrusted input in V8
  * CVE-2022-3046: Use after free in Browser Tag
  * CVE-2022-3071: Use after free in Tab Strip
  * CVE-2022-3047: Insufficient policy enforcement in Extensions API
  * CVE-2022-3048: Inappropriate implementation in Chrome OS lockscreen
  * CVE-2022-3049: Use after free in SplitScreen
  * CVE-2022-3050: Heap buffer overflow in WebUI
  * CVE-2022-3051: Heap buffer overflow in Exosphere
  * CVE-2022-3052: Heap buffer overflow in Window Manager
  * CVE-2022-3053: Inappropriate implementation in Pointer Lock
  * CVE-2022-3054: Insufficient policy enforcement in DevTools
  * CVE-2022-3055: Use after free in Passwords
  * CVE-2022-3056: Insufficient policy enforcement in Content Security Policy
  * CVE-2022-3057: Inappropriate implementation in iframe Sandbox
  * CVE-2022-3058: Use after free in Sign-In Flow
- Added patches:
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Bitmap-include.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-wayland-1.20.patch
  * chromium-105-compiler.patch
- Removed patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-78-protobuf-RepeatedPtrField-export.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663156800">- Chromium 105.0.5195.127 (boo#1203419):
  * CVE-2022-3195: Out of bounds write in Storage
  * CVE-2022-3196: Use after free in PDF
  * CVE-2022-3197: Use after free in PDF
  * CVE-2022-3198: Use after free in PDF
  * CVE-2022-3199: Use after free in Frames
  * CVE-2022-3200: Heap buffer overflow in Internals
  * CVE-2022-3201: Insufficient validation of untrusted input in DevTools
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1664625600">- Chromium 106.0.5249.91 (boo#1203808):
  * CVE-2022-3370: Use after free in Custom Elements
  * CVE-2022-3373: Out of bounds write in V8
- includes changes from 106.0.5249.61:
  * CVE-2022-3304: Use after free in CSS
  * CVE-2022-3201: Insufficient validation of untrusted input in Developer Tools
  * CVE-2022-3305: Use after free in Survey
  * CVE-2022-3306: Use after free in Survey
  * CVE-2022-3307: Use after free in Media
  * CVE-2022-3308: Insufficient policy enforcement in Developer Tools
  * CVE-2022-3309: Use after free in Assistant
  * CVE-2022-3310: Insufficient policy enforcement in Custom Tabs
  * CVE-2022-3311: Use after free in Import
  * CVE-2022-3312: Insufficient validation of untrusted input in VPN
  * CVE-2022-3313: Incorrect security UI in Full Screen
  * CVE-2022-3314: Use after free in Logging
  * CVE-2022-3315: Type confusion in Blink
  * CVE-2022-3316: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-3317: Insufficient validation of untrusted input in Intents
  * CVE-2022-3318: Use after free in ChromeOS Notifications
- drop patches:
  * chromium-104-tflite-system-zlib.patch
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
- add patches
  * chromium-106-ffmpeg-duration.patch
  * chromium-106-AutofillPopupControllerImpl-namespace.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1665057600">- Chromium 106.0.5249.103:
  * fix possible cache manager deadlock
  * Fix right-click menu appearing unexpectedly affecting screen
    readers</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1665576000">- Chromium 106.0.5249.119 (boo#1204223)
  * CVE-2022-3445: Use after free in Skia
  * CVE-2022-3446: Heap buffer overflow in WebSQL
  * CVE-2022-3447: Inappropriate implementation in Custom Tabs
  * CVE-2022-3448: Use after free in Permissions API
  * CVE-2022-3449: Use after free in Safe Browsing
  * CVE-2022-3450: Use after free in Peer Connection</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1666872000">- Chromium 107.0.5304.68 (boo#1204732)
  * CVE-2022-3652: Type Confusion in V8
  * CVE-2022-3653: Heap buffer overflow in Vulkan
  * CVE-2022-3654: Use after free in Layout
  * CVE-2022-3655: Heap buffer overflow in Media Galleries
  * CVE-2022-3656: Insufficient data validation in File System
  * CVE-2022-3657: Use after free in Extensions
  * CVE-2022-3658: Use after free in Feedback service on Chrome OS
  * CVE-2022-3659: Use after free in Accessibility
  * CVE-2022-3660: Inappropriate implementation in Full screen mode
  * CVE-2022-3661: Insufficient data validation in Extensions
- Added patches:
  * chromium-107-compiler.patch
  * chromium-107-system-zlib.patch
- Removed patches:
  * chromium-105-compiler.patch
  * chromium-105-Bitmap-include.patch
  * chromium-106-AutofillPopupControllerImpl-namespace.patch
- Unbundle libyuv and libavif on TW
- Prepare 15.5
- Use qt on 15.4+ (15.3 too old)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1666958400">- Chromium 107.0.5304.87 (boo#1204819)
  * CVE-2022-3723: Type Confusion in V8</changelog>
</package>
<package pkgid="01995e220f04d468addd50dc176fb0842035f7bf376102ed99735c403159d3c1" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="107.0.5304.87" rel="bp154.2.40.1"/>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654084800">- Disable ARM control flow integrity, it causes build issues
  at the moment
- Try a different SVG (black logo on GNOME)
- Removed patches:
  * chromium-third_party-symbolize-missing-include.patch
  (replaced by chromium-102-symbolize-include.patch)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654689600">- Switch to GTK4 on TW and Leap 15.4+ (boo#1200139)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1654862400">- Chromium 102.0.5005.115 (boo#1200423)
  * CVE-2022-2007: Use after free in WebGPU
  * CVE-2022-2008: Out of bounds memory access in WebGL
  * CVE-2022-2010: Out of bounds read in compositing
  * CVE-2022-2011: Use after free in ANGLE</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1656158400">- Chromium 103.0.5060.53 (boo#1200783)
  * CVE-2022-2156: Use after free in Base
  * CVE-2022-2157: Use after free in Interest groups
  * CVE-2022-2158: Type Confusion in V8
  * CVE-2022-2160: Insufficient policy enforcement in DevTools
  * CVE-2022-2161: Use after free in WebApp Provider
  * CVE-2022-2162: Insufficient policy enforcement in File System API
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * CVE-2022-2164: Inappropriate implementation in Extensions API
  * CVE-2022-2165: Insufficient data validation in URL formatting
- Added patches:
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-VirtualCursor-std-layout.patch
  * chromium-103-compiler.patch
- Removed patches:
  * chromium-102-compiler.patch
  * chromium-91-sql-standard-layout-type.patch
  * chromium-101-libxml-unbundle.patch
  * chromium-102-fenced_frame_utils-include.patch
  * chromium-102-swiftshader-template-instantiation.patch
  * chromium-102-symbolize-include.patch
  * chromium-97-arm-tflite-cast.patch
  * chromium-97-ScrollView-reference.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657195200">- Chromium 103.0.5060.66
  * no upstream release notes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657368000">- Chromium 103.0.5060.114 (boo#1201216)
  * CVE-2022-2294: Heap buffer overflow in WebRTC
  * CVE-2022-2295: Type Confusion in V8
  * CVE-2022-2296: Use after free in Chrome OS Shell</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1658318400">- Chromium 103.0.5060.134 (boo#1201679):
  * CVE-2022-2477 : Use after free in Guest View
  * CVE-2022-2478 : Use after free in PDF
  * CVE-2022-2479 : Insufficient validation of untrusted input in File
  * CVE-2022-2480 : Use after free in Service Worker API
  * CVE-2022-2481: Use after free in Views
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1658577600">- Switch back to Clang so that we can use BTI on aarch64
  * Gold is too old - doesn't understand BTI
  * LD crashes on aarch64
- Re-enable LTO
- Prepare move to FFmpeg 5 for new channel layout
  (requires 5.1+)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660046400">- Chromium 104.0.5112.79 (boo#1202075)
  * CVE-2022-2603: Use after free in Omnibox
  * CVE-2022-2604: Use after free in Safe Browsing
  * CVE-2022-2605: Out of bounds read in Dawn
  * CVE-2022-2606: Use after free in Managed devices API
  * CVE-2022-2607: Use after free in Tab Strip
  * CVE-2022-2608: Use after free in Overview Mode
  * CVE-2022-2609: Use after free in Nearby Share
  * CVE-2022-2610: Insufficient policy enforcement in Background Fetch
  * CVE-2022-2611: Inappropriate implementation in Fullscreen API
  * CVE-2022-2612: Side-channel information leakage in Keyboard input
  * CVE-2022-2613: Use after free in Input
  * CVE-2022-2614: Use after free in Sign-In Flow
  * CVE-2022-2615: Insufficient policy enforcement in Cookies
  * CVE-2022-2616: Inappropriate implementation in Extensions API
  * CVE-2022-2617: Use after free in Extensions API
  * CVE-2022-2618: Insufficient validation of untrusted input in Internals
  * CVE-2022-2619: Insufficient validation of untrusted input in Settings
  * CVE-2022-2620: Use after free in WebUI
  * CVE-2022-2621: Use after free in Extensions
  * CVE-2022-2622: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-2623: Use after free in Offline
  * CVE-2022-2624: Heap buffer overflow in PDF
- Added patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-104-tflite-system-zlib.patch
- Removed patches:
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-compiler.patch
- Use FFmpeg 5.1 on TW</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660651200">- Re-enable our version of chrome-wrapper
- Set no sandbox if root is being used (https://crbug.com/638180)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660824000">- Chromium 104.0.5112.101 (boo#1202509):
  * CVE-2022-2852: Use after free in FedCM
  * CVE-2022-2854: Use after free in SwiftShader
  * CVE-2022-2855: Use after free in ANGLE
  * CVE-2022-2857: Use after free in Blink
  * CVE-2022-2858: Use after free in Sign-In Flow
  * CVE-2022-2853: Heap buffer overflow in Downloads
  * CVE-2022-2856: Insufficient validation of untrusted input in Intents
  * CVE-2022-2859: Use after free in Chrome OS Shell
  * CVE-2022-2860: Insufficient policy enforcement in Cookies
  * CVE-2022-2861: Inappropriate implementation in Extensions API</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1661169600">- Fix quoting in chrome-wrapper, don't put cwd on LD_LIBRARY_PATH</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1662033600">- Update chromium-symbolic.svg: this fixes bsc#1202403.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1662638400">- Chromium 105.0.5195.102 (boo#1203102):
  * CVE-2022-3075: Insufficient data validation in Mojo
- Chromium 105.0.5195.52 (boo#1202964):
  * CVE-2022-3038: Use after free in Network Service
  * CVE-2022-3039: Use after free in WebSQL
  * CVE-2022-3040: Use after free in Layout
  * CVE-2022-3041: Use after free in WebSQL
  * CVE-2022-3042: Use after free in PhoneHub
  * CVE-2022-3043: Heap buffer overflow in Screen Capture
  * CVE-2022-3044: Inappropriate implementation in Site Isolation
  * CVE-2022-3045: Insufficient validation of untrusted input in V8
  * CVE-2022-3046: Use after free in Browser Tag
  * CVE-2022-3071: Use after free in Tab Strip
  * CVE-2022-3047: Insufficient policy enforcement in Extensions API
  * CVE-2022-3048: Inappropriate implementation in Chrome OS lockscreen
  * CVE-2022-3049: Use after free in SplitScreen
  * CVE-2022-3050: Heap buffer overflow in WebUI
  * CVE-2022-3051: Heap buffer overflow in Exosphere
  * CVE-2022-3052: Heap buffer overflow in Window Manager
  * CVE-2022-3053: Inappropriate implementation in Pointer Lock
  * CVE-2022-3054: Insufficient policy enforcement in DevTools
  * CVE-2022-3055: Use after free in Passwords
  * CVE-2022-3056: Insufficient policy enforcement in Content Security Policy
  * CVE-2022-3057: Inappropriate implementation in iframe Sandbox
  * CVE-2022-3058: Use after free in Sign-In Flow
- Added patches:
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Bitmap-include.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-wayland-1.20.patch
  * chromium-105-compiler.patch
- Removed patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-78-protobuf-RepeatedPtrField-export.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663156800">- Chromium 105.0.5195.127 (boo#1203419):
  * CVE-2022-3195: Out of bounds write in Storage
  * CVE-2022-3196: Use after free in PDF
  * CVE-2022-3197: Use after free in PDF
  * CVE-2022-3198: Use after free in PDF
  * CVE-2022-3199: Use after free in Frames
  * CVE-2022-3200: Heap buffer overflow in Internals
  * CVE-2022-3201: Insufficient validation of untrusted input in DevTools
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1664625600">- Chromium 106.0.5249.91 (boo#1203808):
  * CVE-2022-3370: Use after free in Custom Elements
  * CVE-2022-3373: Out of bounds write in V8
- includes changes from 106.0.5249.61:
  * CVE-2022-3304: Use after free in CSS
  * CVE-2022-3201: Insufficient validation of untrusted input in Developer Tools
  * CVE-2022-3305: Use after free in Survey
  * CVE-2022-3306: Use after free in Survey
  * CVE-2022-3307: Use after free in Media
  * CVE-2022-3308: Insufficient policy enforcement in Developer Tools
  * CVE-2022-3309: Use after free in Assistant
  * CVE-2022-3310: Insufficient policy enforcement in Custom Tabs
  * CVE-2022-3311: Use after free in Import
  * CVE-2022-3312: Insufficient validation of untrusted input in VPN
  * CVE-2022-3313: Incorrect security UI in Full Screen
  * CVE-2022-3314: Use after free in Logging
  * CVE-2022-3315: Type confusion in Blink
  * CVE-2022-3316: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-3317: Insufficient validation of untrusted input in Intents
  * CVE-2022-3318: Use after free in ChromeOS Notifications
- drop patches:
  * chromium-104-tflite-system-zlib.patch
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
- add patches
  * chromium-106-ffmpeg-duration.patch
  * chromium-106-AutofillPopupControllerImpl-namespace.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1665057600">- Chromium 106.0.5249.103:
  * fix possible cache manager deadlock
  * Fix right-click menu appearing unexpectedly affecting screen
    readers</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1665576000">- Chromium 106.0.5249.119 (boo#1204223)
  * CVE-2022-3445: Use after free in Skia
  * CVE-2022-3446: Heap buffer overflow in WebSQL
  * CVE-2022-3447: Inappropriate implementation in Custom Tabs
  * CVE-2022-3448: Use after free in Permissions API
  * CVE-2022-3449: Use after free in Safe Browsing
  * CVE-2022-3450: Use after free in Peer Connection</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1666872000">- Chromium 107.0.5304.68 (boo#1204732)
  * CVE-2022-3652: Type Confusion in V8
  * CVE-2022-3653: Heap buffer overflow in Vulkan
  * CVE-2022-3654: Use after free in Layout
  * CVE-2022-3655: Heap buffer overflow in Media Galleries
  * CVE-2022-3656: Insufficient data validation in File System
  * CVE-2022-3657: Use after free in Extensions
  * CVE-2022-3658: Use after free in Feedback service on Chrome OS
  * CVE-2022-3659: Use after free in Accessibility
  * CVE-2022-3660: Inappropriate implementation in Full screen mode
  * CVE-2022-3661: Insufficient data validation in Extensions
- Added patches:
  * chromium-107-compiler.patch
  * chromium-107-system-zlib.patch
- Removed patches:
  * chromium-105-compiler.patch
  * chromium-105-Bitmap-include.patch
  * chromium-106-AutofillPopupControllerImpl-namespace.patch
- Unbundle libyuv and libavif on TW
- Prepare 15.5
- Use qt on 15.4+ (15.3 too old)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1666958400">- Chromium 107.0.5304.87 (boo#1204819)
  * CVE-2022-3723: Type Confusion in V8</changelog>
</package>
<package pkgid="4c99195c899d21a78ad9ccbaa8c48126d8215839b29c25585005a6371e4f46a3" name="chromedriver" arch="aarch64">
  <version epoch="0" ver="108.0.5359.124" rel="bp154.2.55.1"/>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1658577600">- Switch back to Clang so that we can use BTI on aarch64
  * Gold is too old - doesn't understand BTI
  * LD crashes on aarch64
- Re-enable LTO
- Prepare move to FFmpeg 5 for new channel layout
  (requires 5.1+)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660046400">- Chromium 104.0.5112.79 (boo#1202075)
  * CVE-2022-2603: Use after free in Omnibox
  * CVE-2022-2604: Use after free in Safe Browsing
  * CVE-2022-2605: Out of bounds read in Dawn
  * CVE-2022-2606: Use after free in Managed devices API
  * CVE-2022-2607: Use after free in Tab Strip
  * CVE-2022-2608: Use after free in Overview Mode
  * CVE-2022-2609: Use after free in Nearby Share
  * CVE-2022-2610: Insufficient policy enforcement in Background Fetch
  * CVE-2022-2611: Inappropriate implementation in Fullscreen API
  * CVE-2022-2612: Side-channel information leakage in Keyboard input
  * CVE-2022-2613: Use after free in Input
  * CVE-2022-2614: Use after free in Sign-In Flow
  * CVE-2022-2615: Insufficient policy enforcement in Cookies
  * CVE-2022-2616: Inappropriate implementation in Extensions API
  * CVE-2022-2617: Use after free in Extensions API
  * CVE-2022-2618: Insufficient validation of untrusted input in Internals
  * CVE-2022-2619: Insufficient validation of untrusted input in Settings
  * CVE-2022-2620: Use after free in WebUI
  * CVE-2022-2621: Use after free in Extensions
  * CVE-2022-2622: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-2623: Use after free in Offline
  * CVE-2022-2624: Heap buffer overflow in PDF
- Added patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-104-tflite-system-zlib.patch
- Removed patches:
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-compiler.patch
- Use FFmpeg 5.1 on TW</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660651200">- Re-enable our version of chrome-wrapper
- Set no sandbox if root is being used (https://crbug.com/638180)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660824000">- Chromium 104.0.5112.101 (boo#1202509):
  * CVE-2022-2852: Use after free in FedCM
  * CVE-2022-2854: Use after free in SwiftShader
  * CVE-2022-2855: Use after free in ANGLE
  * CVE-2022-2857: Use after free in Blink
  * CVE-2022-2858: Use after free in Sign-In Flow
  * CVE-2022-2853: Heap buffer overflow in Downloads
  * CVE-2022-2856: Insufficient validation of untrusted input in Intents
  * CVE-2022-2859: Use after free in Chrome OS Shell
  * CVE-2022-2860: Insufficient policy enforcement in Cookies
  * CVE-2022-2861: Inappropriate implementation in Extensions API</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1661169600">- Fix quoting in chrome-wrapper, don't put cwd on LD_LIBRARY_PATH</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1662033600">- Update chromium-symbolic.svg: this fixes bsc#1202403.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1662638400">- Chromium 105.0.5195.102 (boo#1203102):
  * CVE-2022-3075: Insufficient data validation in Mojo
- Chromium 105.0.5195.52 (boo#1202964):
  * CVE-2022-3038: Use after free in Network Service
  * CVE-2022-3039: Use after free in WebSQL
  * CVE-2022-3040: Use after free in Layout
  * CVE-2022-3041: Use after free in WebSQL
  * CVE-2022-3042: Use after free in PhoneHub
  * CVE-2022-3043: Heap buffer overflow in Screen Capture
  * CVE-2022-3044: Inappropriate implementation in Site Isolation
  * CVE-2022-3045: Insufficient validation of untrusted input in V8
  * CVE-2022-3046: Use after free in Browser Tag
  * CVE-2022-3071: Use after free in Tab Strip
  * CVE-2022-3047: Insufficient policy enforcement in Extensions API
  * CVE-2022-3048: Inappropriate implementation in Chrome OS lockscreen
  * CVE-2022-3049: Use after free in SplitScreen
  * CVE-2022-3050: Heap buffer overflow in WebUI
  * CVE-2022-3051: Heap buffer overflow in Exosphere
  * CVE-2022-3052: Heap buffer overflow in Window Manager
  * CVE-2022-3053: Inappropriate implementation in Pointer Lock
  * CVE-2022-3054: Insufficient policy enforcement in DevTools
  * CVE-2022-3055: Use after free in Passwords
  * CVE-2022-3056: Insufficient policy enforcement in Content Security Policy
  * CVE-2022-3057: Inappropriate implementation in iframe Sandbox
  * CVE-2022-3058: Use after free in Sign-In Flow
- Added patches:
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Bitmap-include.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-wayland-1.20.patch
  * chromium-105-compiler.patch
- Removed patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-78-protobuf-RepeatedPtrField-export.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663156800">- Chromium 105.0.5195.127 (boo#1203419):
  * CVE-2022-3195: Out of bounds write in Storage
  * CVE-2022-3196: Use after free in PDF
  * CVE-2022-3197: Use after free in PDF
  * CVE-2022-3198: Use after free in PDF
  * CVE-2022-3199: Use after free in Frames
  * CVE-2022-3200: Heap buffer overflow in Internals
  * CVE-2022-3201: Insufficient validation of untrusted input in DevTools
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1664625600">- Chromium 106.0.5249.91 (boo#1203808):
  * CVE-2022-3370: Use after free in Custom Elements
  * CVE-2022-3373: Out of bounds write in V8
- includes changes from 106.0.5249.61:
  * CVE-2022-3304: Use after free in CSS
  * CVE-2022-3201: Insufficient validation of untrusted input in Developer Tools
  * CVE-2022-3305: Use after free in Survey
  * CVE-2022-3306: Use after free in Survey
  * CVE-2022-3307: Use after free in Media
  * CVE-2022-3308: Insufficient policy enforcement in Developer Tools
  * CVE-2022-3309: Use after free in Assistant
  * CVE-2022-3310: Insufficient policy enforcement in Custom Tabs
  * CVE-2022-3311: Use after free in Import
  * CVE-2022-3312: Insufficient validation of untrusted input in VPN
  * CVE-2022-3313: Incorrect security UI in Full Screen
  * CVE-2022-3314: Use after free in Logging
  * CVE-2022-3315: Type confusion in Blink
  * CVE-2022-3316: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-3317: Insufficient validation of untrusted input in Intents
  * CVE-2022-3318: Use after free in ChromeOS Notifications
- drop patches:
  * chromium-104-tflite-system-zlib.patch
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
- add patches
  * chromium-106-ffmpeg-duration.patch
  * chromium-106-AutofillPopupControllerImpl-namespace.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1665057600">- Chromium 106.0.5249.103:
  * fix possible cache manager deadlock
  * Fix right-click menu appearing unexpectedly affecting screen
    readers</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1665576000">- Chromium 106.0.5249.119 (boo#1204223)
  * CVE-2022-3445: Use after free in Skia
  * CVE-2022-3446: Heap buffer overflow in WebSQL
  * CVE-2022-3447: Inappropriate implementation in Custom Tabs
  * CVE-2022-3448: Use after free in Permissions API
  * CVE-2022-3449: Use after free in Safe Browsing
  * CVE-2022-3450: Use after free in Peer Connection</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1666872000">- Chromium 107.0.5304.68 (boo#1204732)
  * CVE-2022-3652: Type Confusion in V8
  * CVE-2022-3653: Heap buffer overflow in Vulkan
  * CVE-2022-3654: Use after free in Layout
  * CVE-2022-3655: Heap buffer overflow in Media Galleries
  * CVE-2022-3656: Insufficient data validation in File System
  * CVE-2022-3657: Use after free in Extensions
  * CVE-2022-3658: Use after free in Feedback service on Chrome OS
  * CVE-2022-3659: Use after free in Accessibility
  * CVE-2022-3660: Inappropriate implementation in Full screen mode
  * CVE-2022-3661: Insufficient data validation in Extensions
- Added patches:
  * chromium-107-compiler.patch
  * chromium-107-system-zlib.patch
- Removed patches:
  * chromium-105-compiler.patch
  * chromium-105-Bitmap-include.patch
  * chromium-106-AutofillPopupControllerImpl-namespace.patch
- Unbundle libyuv and libavif on TW
- Prepare 15.5
- Use qt on 15.4+ (15.3 too old)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1666958400">- Chromium 107.0.5304.87 (boo#1204819)
  * CVE-2022-3723: Type Confusion in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1667995200">- Chromium 107.0.5304.110 (boo#1205221)
  * CVE-2022-3885: Use after free in V8
  * CVE-2022-3886: Use after free in Speech Recognition
  * CVE-2022-3887: Use after free in Web Workers
  * CVE-2022-3888: Use after free in WebCodecs
  * CVE-2022-3889: Type Confusion in V8
  * CVE-2022-3890: Heap buffer overflow in Crashpad</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1668686400">- Build with llvm15 on openSUSE:Backports:SLE-15-SP5 and up</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1669291200">- Chromium 107.0.5304.121 (boo#1205736)
  * CVE-2022-4135: Heap buffer overflow in GPU</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1669809600">- Chromium 108.0.5359.71 (boo#1205871):
  * CVE-2022-4174: Type Confusion in V8
  * CVE-2022-4175: Use after free in Camera Capture
  * CVE-2022-4176: Out of bounds write in Lacros Graphics
  * CVE-2022-4177: Use after free in Extensions
  * CVE-2022-4178: Use after free in Mojo
  * CVE-2022-4179: Use after free in Audio
  * CVE-2022-4180: Use after free in Mojo
  * CVE-2022-4181: Use after free in Forms
  * CVE-2022-4182: Inappropriate implementation in Fenced Frames
  * CVE-2022-4183: Insufficient policy enforcement in Popup Blocker
  * CVE-2022-4184: Insufficient policy enforcement in Autofill
  * CVE-2022-4185: Inappropriate implementation in Navigation
  * CVE-2022-4186: Insufficient validation of untrusted input in Downloads
  * CVE-2022-4187: Insufficient policy enforcement in DevTools
  * CVE-2022-4188: Insufficient validation of untrusted input in CORS
  * CVE-2022-4189: Insufficient policy enforcement in DevTools
  * CVE-2022-4190: Insufficient data validation in Directory
  * CVE-2022-4191: Use after free in Sign-In
  * CVE-2022-4192: Use after free in Live Caption
  * CVE-2022-4193: Insufficient policy enforcement in File System API
  * CVE-2022-4194: Use after free in Accessibility
  * CVE-2022-4195: Insufficient policy enforcement in Safe Browsing
- drop chromium-105-wayland-1.20.patch, upstream
- drop chromium-107-compiler.patch
- add chromium-108-compiler.patch
- drop chromium-98-EnumTable-crash.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1670068800">- Chromium 108.0.5359.94:
  * CVE-2022-4262: Type Confusion in V8 (boo#1205999)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1670414400">- Chromium 108.0.5359.98
  * Fix regression in computing &lt;select&gt; visibility</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1671019200">- Chromium 108.0.5359.124:
  * CVE-2022-4436: Use after free in Blink Media
  * CVE-2022-4437: Use after free in Mojo IPC
  * CVE-2022-4438: Use after free in Blink Frames
  * CVE-2022-4439: Use after free in Aura
  * CVE-2022-4440: Use after free in Profiles</changelog>
</package>
<package pkgid="098a3e28308da04ef47b5f087bac34078a7b8e4c1f62a7aaa366eb3bf1d958de" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="108.0.5359.124" rel="bp154.2.55.1"/>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1658577600">- Switch back to Clang so that we can use BTI on aarch64
  * Gold is too old - doesn't understand BTI
  * LD crashes on aarch64
- Re-enable LTO
- Prepare move to FFmpeg 5 for new channel layout
  (requires 5.1+)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660046400">- Chromium 104.0.5112.79 (boo#1202075)
  * CVE-2022-2603: Use after free in Omnibox
  * CVE-2022-2604: Use after free in Safe Browsing
  * CVE-2022-2605: Out of bounds read in Dawn
  * CVE-2022-2606: Use after free in Managed devices API
  * CVE-2022-2607: Use after free in Tab Strip
  * CVE-2022-2608: Use after free in Overview Mode
  * CVE-2022-2609: Use after free in Nearby Share
  * CVE-2022-2610: Insufficient policy enforcement in Background Fetch
  * CVE-2022-2611: Inappropriate implementation in Fullscreen API
  * CVE-2022-2612: Side-channel information leakage in Keyboard input
  * CVE-2022-2613: Use after free in Input
  * CVE-2022-2614: Use after free in Sign-In Flow
  * CVE-2022-2615: Insufficient policy enforcement in Cookies
  * CVE-2022-2616: Inappropriate implementation in Extensions API
  * CVE-2022-2617: Use after free in Extensions API
  * CVE-2022-2618: Insufficient validation of untrusted input in Internals
  * CVE-2022-2619: Insufficient validation of untrusted input in Settings
  * CVE-2022-2620: Use after free in WebUI
  * CVE-2022-2621: Use after free in Extensions
  * CVE-2022-2622: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-2623: Use after free in Offline
  * CVE-2022-2624: Heap buffer overflow in PDF
- Added patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-104-tflite-system-zlib.patch
- Removed patches:
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-compiler.patch
- Use FFmpeg 5.1 on TW</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660651200">- Re-enable our version of chrome-wrapper
- Set no sandbox if root is being used (https://crbug.com/638180)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660824000">- Chromium 104.0.5112.101 (boo#1202509):
  * CVE-2022-2852: Use after free in FedCM
  * CVE-2022-2854: Use after free in SwiftShader
  * CVE-2022-2855: Use after free in ANGLE
  * CVE-2022-2857: Use after free in Blink
  * CVE-2022-2858: Use after free in Sign-In Flow
  * CVE-2022-2853: Heap buffer overflow in Downloads
  * CVE-2022-2856: Insufficient validation of untrusted input in Intents
  * CVE-2022-2859: Use after free in Chrome OS Shell
  * CVE-2022-2860: Insufficient policy enforcement in Cookies
  * CVE-2022-2861: Inappropriate implementation in Extensions API</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1661169600">- Fix quoting in chrome-wrapper, don't put cwd on LD_LIBRARY_PATH</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1662033600">- Update chromium-symbolic.svg: this fixes bsc#1202403.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1662638400">- Chromium 105.0.5195.102 (boo#1203102):
  * CVE-2022-3075: Insufficient data validation in Mojo
- Chromium 105.0.5195.52 (boo#1202964):
  * CVE-2022-3038: Use after free in Network Service
  * CVE-2022-3039: Use after free in WebSQL
  * CVE-2022-3040: Use after free in Layout
  * CVE-2022-3041: Use after free in WebSQL
  * CVE-2022-3042: Use after free in PhoneHub
  * CVE-2022-3043: Heap buffer overflow in Screen Capture
  * CVE-2022-3044: Inappropriate implementation in Site Isolation
  * CVE-2022-3045: Insufficient validation of untrusted input in V8
  * CVE-2022-3046: Use after free in Browser Tag
  * CVE-2022-3071: Use after free in Tab Strip
  * CVE-2022-3047: Insufficient policy enforcement in Extensions API
  * CVE-2022-3048: Inappropriate implementation in Chrome OS lockscreen
  * CVE-2022-3049: Use after free in SplitScreen
  * CVE-2022-3050: Heap buffer overflow in WebUI
  * CVE-2022-3051: Heap buffer overflow in Exosphere
  * CVE-2022-3052: Heap buffer overflow in Window Manager
  * CVE-2022-3053: Inappropriate implementation in Pointer Lock
  * CVE-2022-3054: Insufficient policy enforcement in DevTools
  * CVE-2022-3055: Use after free in Passwords
  * CVE-2022-3056: Insufficient policy enforcement in Content Security Policy
  * CVE-2022-3057: Inappropriate implementation in iframe Sandbox
  * CVE-2022-3058: Use after free in Sign-In Flow
- Added patches:
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Bitmap-include.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-wayland-1.20.patch
  * chromium-105-compiler.patch
- Removed patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-78-protobuf-RepeatedPtrField-export.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663156800">- Chromium 105.0.5195.127 (boo#1203419):
  * CVE-2022-3195: Out of bounds write in Storage
  * CVE-2022-3196: Use after free in PDF
  * CVE-2022-3197: Use after free in PDF
  * CVE-2022-3198: Use after free in PDF
  * CVE-2022-3199: Use after free in Frames
  * CVE-2022-3200: Heap buffer overflow in Internals
  * CVE-2022-3201: Insufficient validation of untrusted input in DevTools
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1664625600">- Chromium 106.0.5249.91 (boo#1203808):
  * CVE-2022-3370: Use after free in Custom Elements
  * CVE-2022-3373: Out of bounds write in V8
- includes changes from 106.0.5249.61:
  * CVE-2022-3304: Use after free in CSS
  * CVE-2022-3201: Insufficient validation of untrusted input in Developer Tools
  * CVE-2022-3305: Use after free in Survey
  * CVE-2022-3306: Use after free in Survey
  * CVE-2022-3307: Use after free in Media
  * CVE-2022-3308: Insufficient policy enforcement in Developer Tools
  * CVE-2022-3309: Use after free in Assistant
  * CVE-2022-3310: Insufficient policy enforcement in Custom Tabs
  * CVE-2022-3311: Use after free in Import
  * CVE-2022-3312: Insufficient validation of untrusted input in VPN
  * CVE-2022-3313: Incorrect security UI in Full Screen
  * CVE-2022-3314: Use after free in Logging
  * CVE-2022-3315: Type confusion in Blink
  * CVE-2022-3316: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-3317: Insufficient validation of untrusted input in Intents
  * CVE-2022-3318: Use after free in ChromeOS Notifications
- drop patches:
  * chromium-104-tflite-system-zlib.patch
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
- add patches
  * chromium-106-ffmpeg-duration.patch
  * chromium-106-AutofillPopupControllerImpl-namespace.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1665057600">- Chromium 106.0.5249.103:
  * fix possible cache manager deadlock
  * Fix right-click menu appearing unexpectedly affecting screen
    readers</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1665576000">- Chromium 106.0.5249.119 (boo#1204223)
  * CVE-2022-3445: Use after free in Skia
  * CVE-2022-3446: Heap buffer overflow in WebSQL
  * CVE-2022-3447: Inappropriate implementation in Custom Tabs
  * CVE-2022-3448: Use after free in Permissions API
  * CVE-2022-3449: Use after free in Safe Browsing
  * CVE-2022-3450: Use after free in Peer Connection</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1666872000">- Chromium 107.0.5304.68 (boo#1204732)
  * CVE-2022-3652: Type Confusion in V8
  * CVE-2022-3653: Heap buffer overflow in Vulkan
  * CVE-2022-3654: Use after free in Layout
  * CVE-2022-3655: Heap buffer overflow in Media Galleries
  * CVE-2022-3656: Insufficient data validation in File System
  * CVE-2022-3657: Use after free in Extensions
  * CVE-2022-3658: Use after free in Feedback service on Chrome OS
  * CVE-2022-3659: Use after free in Accessibility
  * CVE-2022-3660: Inappropriate implementation in Full screen mode
  * CVE-2022-3661: Insufficient data validation in Extensions
- Added patches:
  * chromium-107-compiler.patch
  * chromium-107-system-zlib.patch
- Removed patches:
  * chromium-105-compiler.patch
  * chromium-105-Bitmap-include.patch
  * chromium-106-AutofillPopupControllerImpl-namespace.patch
- Unbundle libyuv and libavif on TW
- Prepare 15.5
- Use qt on 15.4+ (15.3 too old)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1666958400">- Chromium 107.0.5304.87 (boo#1204819)
  * CVE-2022-3723: Type Confusion in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1667995200">- Chromium 107.0.5304.110 (boo#1205221)
  * CVE-2022-3885: Use after free in V8
  * CVE-2022-3886: Use after free in Speech Recognition
  * CVE-2022-3887: Use after free in Web Workers
  * CVE-2022-3888: Use after free in WebCodecs
  * CVE-2022-3889: Type Confusion in V8
  * CVE-2022-3890: Heap buffer overflow in Crashpad</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1668686400">- Build with llvm15 on openSUSE:Backports:SLE-15-SP5 and up</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1669291200">- Chromium 107.0.5304.121 (boo#1205736)
  * CVE-2022-4135: Heap buffer overflow in GPU</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1669809600">- Chromium 108.0.5359.71 (boo#1205871):
  * CVE-2022-4174: Type Confusion in V8
  * CVE-2022-4175: Use after free in Camera Capture
  * CVE-2022-4176: Out of bounds write in Lacros Graphics
  * CVE-2022-4177: Use after free in Extensions
  * CVE-2022-4178: Use after free in Mojo
  * CVE-2022-4179: Use after free in Audio
  * CVE-2022-4180: Use after free in Mojo
  * CVE-2022-4181: Use after free in Forms
  * CVE-2022-4182: Inappropriate implementation in Fenced Frames
  * CVE-2022-4183: Insufficient policy enforcement in Popup Blocker
  * CVE-2022-4184: Insufficient policy enforcement in Autofill
  * CVE-2022-4185: Inappropriate implementation in Navigation
  * CVE-2022-4186: Insufficient validation of untrusted input in Downloads
  * CVE-2022-4187: Insufficient policy enforcement in DevTools
  * CVE-2022-4188: Insufficient validation of untrusted input in CORS
  * CVE-2022-4189: Insufficient policy enforcement in DevTools
  * CVE-2022-4190: Insufficient data validation in Directory
  * CVE-2022-4191: Use after free in Sign-In
  * CVE-2022-4192: Use after free in Live Caption
  * CVE-2022-4193: Insufficient policy enforcement in File System API
  * CVE-2022-4194: Use after free in Accessibility
  * CVE-2022-4195: Insufficient policy enforcement in Safe Browsing
- drop chromium-105-wayland-1.20.patch, upstream
- drop chromium-107-compiler.patch
- add chromium-108-compiler.patch
- drop chromium-98-EnumTable-crash.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1670068800">- Chromium 108.0.5359.94:
  * CVE-2022-4262: Type Confusion in V8 (boo#1205999)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1670414400">- Chromium 108.0.5359.98
  * Fix regression in computing &lt;select&gt; visibility</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1671019200">- Chromium 108.0.5359.124:
  * CVE-2022-4436: Use after free in Blink Media
  * CVE-2022-4437: Use after free in Mojo IPC
  * CVE-2022-4438: Use after free in Blink Frames
  * CVE-2022-4439: Use after free in Aura
  * CVE-2022-4440: Use after free in Profiles</changelog>
</package>
<package pkgid="d2e3860f3cda46320cbdff5b160468db7423b24e160e8e87421e016ee228b13d" name="chromedriver" arch="aarch64">
  <version epoch="0" ver="108.0.5359.71" rel="bp154.2.49.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657195200">- Chromium 103.0.5060.66
  * no upstream release notes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657368000">- Chromium 103.0.5060.114 (boo#1201216)
  * CVE-2022-2294: Heap buffer overflow in WebRTC
  * CVE-2022-2295: Type Confusion in V8
  * CVE-2022-2296: Use after free in Chrome OS Shell</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1658318400">- Chromium 103.0.5060.134 (boo#1201679):
  * CVE-2022-2477 : Use after free in Guest View
  * CVE-2022-2478 : Use after free in PDF
  * CVE-2022-2479 : Insufficient validation of untrusted input in File
  * CVE-2022-2480 : Use after free in Service Worker API
  * CVE-2022-2481: Use after free in Views
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1658577600">- Switch back to Clang so that we can use BTI on aarch64
  * Gold is too old - doesn't understand BTI
  * LD crashes on aarch64
- Re-enable LTO
- Prepare move to FFmpeg 5 for new channel layout
  (requires 5.1+)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660046400">- Chromium 104.0.5112.79 (boo#1202075)
  * CVE-2022-2603: Use after free in Omnibox
  * CVE-2022-2604: Use after free in Safe Browsing
  * CVE-2022-2605: Out of bounds read in Dawn
  * CVE-2022-2606: Use after free in Managed devices API
  * CVE-2022-2607: Use after free in Tab Strip
  * CVE-2022-2608: Use after free in Overview Mode
  * CVE-2022-2609: Use after free in Nearby Share
  * CVE-2022-2610: Insufficient policy enforcement in Background Fetch
  * CVE-2022-2611: Inappropriate implementation in Fullscreen API
  * CVE-2022-2612: Side-channel information leakage in Keyboard input
  * CVE-2022-2613: Use after free in Input
  * CVE-2022-2614: Use after free in Sign-In Flow
  * CVE-2022-2615: Insufficient policy enforcement in Cookies
  * CVE-2022-2616: Inappropriate implementation in Extensions API
  * CVE-2022-2617: Use after free in Extensions API
  * CVE-2022-2618: Insufficient validation of untrusted input in Internals
  * CVE-2022-2619: Insufficient validation of untrusted input in Settings
  * CVE-2022-2620: Use after free in WebUI
  * CVE-2022-2621: Use after free in Extensions
  * CVE-2022-2622: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-2623: Use after free in Offline
  * CVE-2022-2624: Heap buffer overflow in PDF
- Added patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-104-tflite-system-zlib.patch
- Removed patches:
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-compiler.patch
- Use FFmpeg 5.1 on TW</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660651200">- Re-enable our version of chrome-wrapper
- Set no sandbox if root is being used (https://crbug.com/638180)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660824000">- Chromium 104.0.5112.101 (boo#1202509):
  * CVE-2022-2852: Use after free in FedCM
  * CVE-2022-2854: Use after free in SwiftShader
  * CVE-2022-2855: Use after free in ANGLE
  * CVE-2022-2857: Use after free in Blink
  * CVE-2022-2858: Use after free in Sign-In Flow
  * CVE-2022-2853: Heap buffer overflow in Downloads
  * CVE-2022-2856: Insufficient validation of untrusted input in Intents
  * CVE-2022-2859: Use after free in Chrome OS Shell
  * CVE-2022-2860: Insufficient policy enforcement in Cookies
  * CVE-2022-2861: Inappropriate implementation in Extensions API</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1661169600">- Fix quoting in chrome-wrapper, don't put cwd on LD_LIBRARY_PATH</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1662033600">- Update chromium-symbolic.svg: this fixes bsc#1202403.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1662638400">- Chromium 105.0.5195.102 (boo#1203102):
  * CVE-2022-3075: Insufficient data validation in Mojo
- Chromium 105.0.5195.52 (boo#1202964):
  * CVE-2022-3038: Use after free in Network Service
  * CVE-2022-3039: Use after free in WebSQL
  * CVE-2022-3040: Use after free in Layout
  * CVE-2022-3041: Use after free in WebSQL
  * CVE-2022-3042: Use after free in PhoneHub
  * CVE-2022-3043: Heap buffer overflow in Screen Capture
  * CVE-2022-3044: Inappropriate implementation in Site Isolation
  * CVE-2022-3045: Insufficient validation of untrusted input in V8
  * CVE-2022-3046: Use after free in Browser Tag
  * CVE-2022-3071: Use after free in Tab Strip
  * CVE-2022-3047: Insufficient policy enforcement in Extensions API
  * CVE-2022-3048: Inappropriate implementation in Chrome OS lockscreen
  * CVE-2022-3049: Use after free in SplitScreen
  * CVE-2022-3050: Heap buffer overflow in WebUI
  * CVE-2022-3051: Heap buffer overflow in Exosphere
  * CVE-2022-3052: Heap buffer overflow in Window Manager
  * CVE-2022-3053: Inappropriate implementation in Pointer Lock
  * CVE-2022-3054: Insufficient policy enforcement in DevTools
  * CVE-2022-3055: Use after free in Passwords
  * CVE-2022-3056: Insufficient policy enforcement in Content Security Policy
  * CVE-2022-3057: Inappropriate implementation in iframe Sandbox
  * CVE-2022-3058: Use after free in Sign-In Flow
- Added patches:
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Bitmap-include.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-wayland-1.20.patch
  * chromium-105-compiler.patch
- Removed patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-78-protobuf-RepeatedPtrField-export.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663156800">- Chromium 105.0.5195.127 (boo#1203419):
  * CVE-2022-3195: Out of bounds write in Storage
  * CVE-2022-3196: Use after free in PDF
  * CVE-2022-3197: Use after free in PDF
  * CVE-2022-3198: Use after free in PDF
  * CVE-2022-3199: Use after free in Frames
  * CVE-2022-3200: Heap buffer overflow in Internals
  * CVE-2022-3201: Insufficient validation of untrusted input in DevTools
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1664625600">- Chromium 106.0.5249.91 (boo#1203808):
  * CVE-2022-3370: Use after free in Custom Elements
  * CVE-2022-3373: Out of bounds write in V8
- includes changes from 106.0.5249.61:
  * CVE-2022-3304: Use after free in CSS
  * CVE-2022-3201: Insufficient validation of untrusted input in Developer Tools
  * CVE-2022-3305: Use after free in Survey
  * CVE-2022-3306: Use after free in Survey
  * CVE-2022-3307: Use after free in Media
  * CVE-2022-3308: Insufficient policy enforcement in Developer Tools
  * CVE-2022-3309: Use after free in Assistant
  * CVE-2022-3310: Insufficient policy enforcement in Custom Tabs
  * CVE-2022-3311: Use after free in Import
  * CVE-2022-3312: Insufficient validation of untrusted input in VPN
  * CVE-2022-3313: Incorrect security UI in Full Screen
  * CVE-2022-3314: Use after free in Logging
  * CVE-2022-3315: Type confusion in Blink
  * CVE-2022-3316: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-3317: Insufficient validation of untrusted input in Intents
  * CVE-2022-3318: Use after free in ChromeOS Notifications
- drop patches:
  * chromium-104-tflite-system-zlib.patch
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
- add patches
  * chromium-106-ffmpeg-duration.patch
  * chromium-106-AutofillPopupControllerImpl-namespace.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1665057600">- Chromium 106.0.5249.103:
  * fix possible cache manager deadlock
  * Fix right-click menu appearing unexpectedly affecting screen
    readers</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1665576000">- Chromium 106.0.5249.119 (boo#1204223)
  * CVE-2022-3445: Use after free in Skia
  * CVE-2022-3446: Heap buffer overflow in WebSQL
  * CVE-2022-3447: Inappropriate implementation in Custom Tabs
  * CVE-2022-3448: Use after free in Permissions API
  * CVE-2022-3449: Use after free in Safe Browsing
  * CVE-2022-3450: Use after free in Peer Connection</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1666872000">- Chromium 107.0.5304.68 (boo#1204732)
  * CVE-2022-3652: Type Confusion in V8
  * CVE-2022-3653: Heap buffer overflow in Vulkan
  * CVE-2022-3654: Use after free in Layout
  * CVE-2022-3655: Heap buffer overflow in Media Galleries
  * CVE-2022-3656: Insufficient data validation in File System
  * CVE-2022-3657: Use after free in Extensions
  * CVE-2022-3658: Use after free in Feedback service on Chrome OS
  * CVE-2022-3659: Use after free in Accessibility
  * CVE-2022-3660: Inappropriate implementation in Full screen mode
  * CVE-2022-3661: Insufficient data validation in Extensions
- Added patches:
  * chromium-107-compiler.patch
  * chromium-107-system-zlib.patch
- Removed patches:
  * chromium-105-compiler.patch
  * chromium-105-Bitmap-include.patch
  * chromium-106-AutofillPopupControllerImpl-namespace.patch
- Unbundle libyuv and libavif on TW
- Prepare 15.5
- Use qt on 15.4+ (15.3 too old)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1666958400">- Chromium 107.0.5304.87 (boo#1204819)
  * CVE-2022-3723: Type Confusion in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1667995200">- Chromium 107.0.5304.110 (boo#1205221)
  * CVE-2022-3885: Use after free in V8
  * CVE-2022-3886: Use after free in Speech Recognition
  * CVE-2022-3887: Use after free in Web Workers
  * CVE-2022-3888: Use after free in WebCodecs
  * CVE-2022-3889: Type Confusion in V8
  * CVE-2022-3890: Heap buffer overflow in Crashpad</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1668686400">- Build with llvm15 on openSUSE:Backports:SLE-15-SP5 and up</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1669291200">- Chromium 107.0.5304.121 (boo#1205736)
  * CVE-2022-4135: Heap buffer overflow in GPU</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1669809600">- Chromium 108.0.5359.71 (boo#1205871):
  * CVE-2022-4174: Type Confusion in V8
  * CVE-2022-4175: Use after free in Camera Capture
  * CVE-2022-4176: Out of bounds write in Lacros Graphics
  * CVE-2022-4177: Use after free in Extensions
  * CVE-2022-4178: Use after free in Mojo
  * CVE-2022-4179: Use after free in Audio
  * CVE-2022-4180: Use after free in Mojo
  * CVE-2022-4181: Use after free in Forms
  * CVE-2022-4182: Inappropriate implementation in Fenced Frames
  * CVE-2022-4183: Insufficient policy enforcement in Popup Blocker
  * CVE-2022-4184: Insufficient policy enforcement in Autofill
  * CVE-2022-4185: Inappropriate implementation in Navigation
  * CVE-2022-4186: Insufficient validation of untrusted input in Downloads
  * CVE-2022-4187: Insufficient policy enforcement in DevTools
  * CVE-2022-4188: Insufficient validation of untrusted input in CORS
  * CVE-2022-4189: Insufficient policy enforcement in DevTools
  * CVE-2022-4190: Insufficient data validation in Directory
  * CVE-2022-4191: Use after free in Sign-In
  * CVE-2022-4192: Use after free in Live Caption
  * CVE-2022-4193: Insufficient policy enforcement in File System API
  * CVE-2022-4194: Use after free in Accessibility
  * CVE-2022-4195: Insufficient policy enforcement in Safe Browsing
- drop chromium-105-wayland-1.20.patch, upstream
- drop chromium-107-compiler.patch
- add chromium-108-compiler.patch
- drop chromium-98-EnumTable-crash.patch</changelog>
</package>
<package pkgid="63209d2ea8907ee579fbe6d1c92c9b15f1c50adbba4c35c5f17ee317621727dc" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="108.0.5359.71" rel="bp154.2.49.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657195200">- Chromium 103.0.5060.66
  * no upstream release notes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657368000">- Chromium 103.0.5060.114 (boo#1201216)
  * CVE-2022-2294: Heap buffer overflow in WebRTC
  * CVE-2022-2295: Type Confusion in V8
  * CVE-2022-2296: Use after free in Chrome OS Shell</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1658318400">- Chromium 103.0.5060.134 (boo#1201679):
  * CVE-2022-2477 : Use after free in Guest View
  * CVE-2022-2478 : Use after free in PDF
  * CVE-2022-2479 : Insufficient validation of untrusted input in File
  * CVE-2022-2480 : Use after free in Service Worker API
  * CVE-2022-2481: Use after free in Views
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1658577600">- Switch back to Clang so that we can use BTI on aarch64
  * Gold is too old - doesn't understand BTI
  * LD crashes on aarch64
- Re-enable LTO
- Prepare move to FFmpeg 5 for new channel layout
  (requires 5.1+)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660046400">- Chromium 104.0.5112.79 (boo#1202075)
  * CVE-2022-2603: Use after free in Omnibox
  * CVE-2022-2604: Use after free in Safe Browsing
  * CVE-2022-2605: Out of bounds read in Dawn
  * CVE-2022-2606: Use after free in Managed devices API
  * CVE-2022-2607: Use after free in Tab Strip
  * CVE-2022-2608: Use after free in Overview Mode
  * CVE-2022-2609: Use after free in Nearby Share
  * CVE-2022-2610: Insufficient policy enforcement in Background Fetch
  * CVE-2022-2611: Inappropriate implementation in Fullscreen API
  * CVE-2022-2612: Side-channel information leakage in Keyboard input
  * CVE-2022-2613: Use after free in Input
  * CVE-2022-2614: Use after free in Sign-In Flow
  * CVE-2022-2615: Insufficient policy enforcement in Cookies
  * CVE-2022-2616: Inappropriate implementation in Extensions API
  * CVE-2022-2617: Use after free in Extensions API
  * CVE-2022-2618: Insufficient validation of untrusted input in Internals
  * CVE-2022-2619: Insufficient validation of untrusted input in Settings
  * CVE-2022-2620: Use after free in WebUI
  * CVE-2022-2621: Use after free in Extensions
  * CVE-2022-2622: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-2623: Use after free in Offline
  * CVE-2022-2624: Heap buffer overflow in PDF
- Added patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-104-tflite-system-zlib.patch
- Removed patches:
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-compiler.patch
- Use FFmpeg 5.1 on TW</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660651200">- Re-enable our version of chrome-wrapper
- Set no sandbox if root is being used (https://crbug.com/638180)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660824000">- Chromium 104.0.5112.101 (boo#1202509):
  * CVE-2022-2852: Use after free in FedCM
  * CVE-2022-2854: Use after free in SwiftShader
  * CVE-2022-2855: Use after free in ANGLE
  * CVE-2022-2857: Use after free in Blink
  * CVE-2022-2858: Use after free in Sign-In Flow
  * CVE-2022-2853: Heap buffer overflow in Downloads
  * CVE-2022-2856: Insufficient validation of untrusted input in Intents
  * CVE-2022-2859: Use after free in Chrome OS Shell
  * CVE-2022-2860: Insufficient policy enforcement in Cookies
  * CVE-2022-2861: Inappropriate implementation in Extensions API</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1661169600">- Fix quoting in chrome-wrapper, don't put cwd on LD_LIBRARY_PATH</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1662033600">- Update chromium-symbolic.svg: this fixes bsc#1202403.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1662638400">- Chromium 105.0.5195.102 (boo#1203102):
  * CVE-2022-3075: Insufficient data validation in Mojo
- Chromium 105.0.5195.52 (boo#1202964):
  * CVE-2022-3038: Use after free in Network Service
  * CVE-2022-3039: Use after free in WebSQL
  * CVE-2022-3040: Use after free in Layout
  * CVE-2022-3041: Use after free in WebSQL
  * CVE-2022-3042: Use after free in PhoneHub
  * CVE-2022-3043: Heap buffer overflow in Screen Capture
  * CVE-2022-3044: Inappropriate implementation in Site Isolation
  * CVE-2022-3045: Insufficient validation of untrusted input in V8
  * CVE-2022-3046: Use after free in Browser Tag
  * CVE-2022-3071: Use after free in Tab Strip
  * CVE-2022-3047: Insufficient policy enforcement in Extensions API
  * CVE-2022-3048: Inappropriate implementation in Chrome OS lockscreen
  * CVE-2022-3049: Use after free in SplitScreen
  * CVE-2022-3050: Heap buffer overflow in WebUI
  * CVE-2022-3051: Heap buffer overflow in Exosphere
  * CVE-2022-3052: Heap buffer overflow in Window Manager
  * CVE-2022-3053: Inappropriate implementation in Pointer Lock
  * CVE-2022-3054: Insufficient policy enforcement in DevTools
  * CVE-2022-3055: Use after free in Passwords
  * CVE-2022-3056: Insufficient policy enforcement in Content Security Policy
  * CVE-2022-3057: Inappropriate implementation in iframe Sandbox
  * CVE-2022-3058: Use after free in Sign-In Flow
- Added patches:
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Bitmap-include.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-wayland-1.20.patch
  * chromium-105-compiler.patch
- Removed patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-78-protobuf-RepeatedPtrField-export.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663156800">- Chromium 105.0.5195.127 (boo#1203419):
  * CVE-2022-3195: Out of bounds write in Storage
  * CVE-2022-3196: Use after free in PDF
  * CVE-2022-3197: Use after free in PDF
  * CVE-2022-3198: Use after free in PDF
  * CVE-2022-3199: Use after free in Frames
  * CVE-2022-3200: Heap buffer overflow in Internals
  * CVE-2022-3201: Insufficient validation of untrusted input in DevTools
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1664625600">- Chromium 106.0.5249.91 (boo#1203808):
  * CVE-2022-3370: Use after free in Custom Elements
  * CVE-2022-3373: Out of bounds write in V8
- includes changes from 106.0.5249.61:
  * CVE-2022-3304: Use after free in CSS
  * CVE-2022-3201: Insufficient validation of untrusted input in Developer Tools
  * CVE-2022-3305: Use after free in Survey
  * CVE-2022-3306: Use after free in Survey
  * CVE-2022-3307: Use after free in Media
  * CVE-2022-3308: Insufficient policy enforcement in Developer Tools
  * CVE-2022-3309: Use after free in Assistant
  * CVE-2022-3310: Insufficient policy enforcement in Custom Tabs
  * CVE-2022-3311: Use after free in Import
  * CVE-2022-3312: Insufficient validation of untrusted input in VPN
  * CVE-2022-3313: Incorrect security UI in Full Screen
  * CVE-2022-3314: Use after free in Logging
  * CVE-2022-3315: Type confusion in Blink
  * CVE-2022-3316: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-3317: Insufficient validation of untrusted input in Intents
  * CVE-2022-3318: Use after free in ChromeOS Notifications
- drop patches:
  * chromium-104-tflite-system-zlib.patch
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
- add patches
  * chromium-106-ffmpeg-duration.patch
  * chromium-106-AutofillPopupControllerImpl-namespace.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1665057600">- Chromium 106.0.5249.103:
  * fix possible cache manager deadlock
  * Fix right-click menu appearing unexpectedly affecting screen
    readers</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1665576000">- Chromium 106.0.5249.119 (boo#1204223)
  * CVE-2022-3445: Use after free in Skia
  * CVE-2022-3446: Heap buffer overflow in WebSQL
  * CVE-2022-3447: Inappropriate implementation in Custom Tabs
  * CVE-2022-3448: Use after free in Permissions API
  * CVE-2022-3449: Use after free in Safe Browsing
  * CVE-2022-3450: Use after free in Peer Connection</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1666872000">- Chromium 107.0.5304.68 (boo#1204732)
  * CVE-2022-3652: Type Confusion in V8
  * CVE-2022-3653: Heap buffer overflow in Vulkan
  * CVE-2022-3654: Use after free in Layout
  * CVE-2022-3655: Heap buffer overflow in Media Galleries
  * CVE-2022-3656: Insufficient data validation in File System
  * CVE-2022-3657: Use after free in Extensions
  * CVE-2022-3658: Use after free in Feedback service on Chrome OS
  * CVE-2022-3659: Use after free in Accessibility
  * CVE-2022-3660: Inappropriate implementation in Full screen mode
  * CVE-2022-3661: Insufficient data validation in Extensions
- Added patches:
  * chromium-107-compiler.patch
  * chromium-107-system-zlib.patch
- Removed patches:
  * chromium-105-compiler.patch
  * chromium-105-Bitmap-include.patch
  * chromium-106-AutofillPopupControllerImpl-namespace.patch
- Unbundle libyuv and libavif on TW
- Prepare 15.5
- Use qt on 15.4+ (15.3 too old)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1666958400">- Chromium 107.0.5304.87 (boo#1204819)
  * CVE-2022-3723: Type Confusion in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1667995200">- Chromium 107.0.5304.110 (boo#1205221)
  * CVE-2022-3885: Use after free in V8
  * CVE-2022-3886: Use after free in Speech Recognition
  * CVE-2022-3887: Use after free in Web Workers
  * CVE-2022-3888: Use after free in WebCodecs
  * CVE-2022-3889: Type Confusion in V8
  * CVE-2022-3890: Heap buffer overflow in Crashpad</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1668686400">- Build with llvm15 on openSUSE:Backports:SLE-15-SP5 and up</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1669291200">- Chromium 107.0.5304.121 (boo#1205736)
  * CVE-2022-4135: Heap buffer overflow in GPU</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1669809600">- Chromium 108.0.5359.71 (boo#1205871):
  * CVE-2022-4174: Type Confusion in V8
  * CVE-2022-4175: Use after free in Camera Capture
  * CVE-2022-4176: Out of bounds write in Lacros Graphics
  * CVE-2022-4177: Use after free in Extensions
  * CVE-2022-4178: Use after free in Mojo
  * CVE-2022-4179: Use after free in Audio
  * CVE-2022-4180: Use after free in Mojo
  * CVE-2022-4181: Use after free in Forms
  * CVE-2022-4182: Inappropriate implementation in Fenced Frames
  * CVE-2022-4183: Insufficient policy enforcement in Popup Blocker
  * CVE-2022-4184: Insufficient policy enforcement in Autofill
  * CVE-2022-4185: Inappropriate implementation in Navigation
  * CVE-2022-4186: Insufficient validation of untrusted input in Downloads
  * CVE-2022-4187: Insufficient policy enforcement in DevTools
  * CVE-2022-4188: Insufficient validation of untrusted input in CORS
  * CVE-2022-4189: Insufficient policy enforcement in DevTools
  * CVE-2022-4190: Insufficient data validation in Directory
  * CVE-2022-4191: Use after free in Sign-In
  * CVE-2022-4192: Use after free in Live Caption
  * CVE-2022-4193: Insufficient policy enforcement in File System API
  * CVE-2022-4194: Use after free in Accessibility
  * CVE-2022-4195: Insufficient policy enforcement in Safe Browsing
- drop chromium-105-wayland-1.20.patch, upstream
- drop chromium-107-compiler.patch
- add chromium-108-compiler.patch
- drop chromium-98-EnumTable-crash.patch</changelog>
</package>
<package pkgid="9994c2dc984fd13ec1d464b38593682ae9a549254e67e98dd95b6d966f95c498" name="chromedriver" arch="aarch64">
  <version epoch="0" ver="108.0.5359.94" rel="bp154.2.52.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657368000">- Chromium 103.0.5060.114 (boo#1201216)
  * CVE-2022-2294: Heap buffer overflow in WebRTC
  * CVE-2022-2295: Type Confusion in V8
  * CVE-2022-2296: Use after free in Chrome OS Shell</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1658318400">- Chromium 103.0.5060.134 (boo#1201679):
  * CVE-2022-2477 : Use after free in Guest View
  * CVE-2022-2478 : Use after free in PDF
  * CVE-2022-2479 : Insufficient validation of untrusted input in File
  * CVE-2022-2480 : Use after free in Service Worker API
  * CVE-2022-2481: Use after free in Views
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1658577600">- Switch back to Clang so that we can use BTI on aarch64
  * Gold is too old - doesn't understand BTI
  * LD crashes on aarch64
- Re-enable LTO
- Prepare move to FFmpeg 5 for new channel layout
  (requires 5.1+)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660046400">- Chromium 104.0.5112.79 (boo#1202075)
  * CVE-2022-2603: Use after free in Omnibox
  * CVE-2022-2604: Use after free in Safe Browsing
  * CVE-2022-2605: Out of bounds read in Dawn
  * CVE-2022-2606: Use after free in Managed devices API
  * CVE-2022-2607: Use after free in Tab Strip
  * CVE-2022-2608: Use after free in Overview Mode
  * CVE-2022-2609: Use after free in Nearby Share
  * CVE-2022-2610: Insufficient policy enforcement in Background Fetch
  * CVE-2022-2611: Inappropriate implementation in Fullscreen API
  * CVE-2022-2612: Side-channel information leakage in Keyboard input
  * CVE-2022-2613: Use after free in Input
  * CVE-2022-2614: Use after free in Sign-In Flow
  * CVE-2022-2615: Insufficient policy enforcement in Cookies
  * CVE-2022-2616: Inappropriate implementation in Extensions API
  * CVE-2022-2617: Use after free in Extensions API
  * CVE-2022-2618: Insufficient validation of untrusted input in Internals
  * CVE-2022-2619: Insufficient validation of untrusted input in Settings
  * CVE-2022-2620: Use after free in WebUI
  * CVE-2022-2621: Use after free in Extensions
  * CVE-2022-2622: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-2623: Use after free in Offline
  * CVE-2022-2624: Heap buffer overflow in PDF
- Added patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-104-tflite-system-zlib.patch
- Removed patches:
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-compiler.patch
- Use FFmpeg 5.1 on TW</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660651200">- Re-enable our version of chrome-wrapper
- Set no sandbox if root is being used (https://crbug.com/638180)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660824000">- Chromium 104.0.5112.101 (boo#1202509):
  * CVE-2022-2852: Use after free in FedCM
  * CVE-2022-2854: Use after free in SwiftShader
  * CVE-2022-2855: Use after free in ANGLE
  * CVE-2022-2857: Use after free in Blink
  * CVE-2022-2858: Use after free in Sign-In Flow
  * CVE-2022-2853: Heap buffer overflow in Downloads
  * CVE-2022-2856: Insufficient validation of untrusted input in Intents
  * CVE-2022-2859: Use after free in Chrome OS Shell
  * CVE-2022-2860: Insufficient policy enforcement in Cookies
  * CVE-2022-2861: Inappropriate implementation in Extensions API</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1661169600">- Fix quoting in chrome-wrapper, don't put cwd on LD_LIBRARY_PATH</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1662033600">- Update chromium-symbolic.svg: this fixes bsc#1202403.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1662638400">- Chromium 105.0.5195.102 (boo#1203102):
  * CVE-2022-3075: Insufficient data validation in Mojo
- Chromium 105.0.5195.52 (boo#1202964):
  * CVE-2022-3038: Use after free in Network Service
  * CVE-2022-3039: Use after free in WebSQL
  * CVE-2022-3040: Use after free in Layout
  * CVE-2022-3041: Use after free in WebSQL
  * CVE-2022-3042: Use after free in PhoneHub
  * CVE-2022-3043: Heap buffer overflow in Screen Capture
  * CVE-2022-3044: Inappropriate implementation in Site Isolation
  * CVE-2022-3045: Insufficient validation of untrusted input in V8
  * CVE-2022-3046: Use after free in Browser Tag
  * CVE-2022-3071: Use after free in Tab Strip
  * CVE-2022-3047: Insufficient policy enforcement in Extensions API
  * CVE-2022-3048: Inappropriate implementation in Chrome OS lockscreen
  * CVE-2022-3049: Use after free in SplitScreen
  * CVE-2022-3050: Heap buffer overflow in WebUI
  * CVE-2022-3051: Heap buffer overflow in Exosphere
  * CVE-2022-3052: Heap buffer overflow in Window Manager
  * CVE-2022-3053: Inappropriate implementation in Pointer Lock
  * CVE-2022-3054: Insufficient policy enforcement in DevTools
  * CVE-2022-3055: Use after free in Passwords
  * CVE-2022-3056: Insufficient policy enforcement in Content Security Policy
  * CVE-2022-3057: Inappropriate implementation in iframe Sandbox
  * CVE-2022-3058: Use after free in Sign-In Flow
- Added patches:
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Bitmap-include.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-wayland-1.20.patch
  * chromium-105-compiler.patch
- Removed patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-78-protobuf-RepeatedPtrField-export.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663156800">- Chromium 105.0.5195.127 (boo#1203419):
  * CVE-2022-3195: Out of bounds write in Storage
  * CVE-2022-3196: Use after free in PDF
  * CVE-2022-3197: Use after free in PDF
  * CVE-2022-3198: Use after free in PDF
  * CVE-2022-3199: Use after free in Frames
  * CVE-2022-3200: Heap buffer overflow in Internals
  * CVE-2022-3201: Insufficient validation of untrusted input in DevTools
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1664625600">- Chromium 106.0.5249.91 (boo#1203808):
  * CVE-2022-3370: Use after free in Custom Elements
  * CVE-2022-3373: Out of bounds write in V8
- includes changes from 106.0.5249.61:
  * CVE-2022-3304: Use after free in CSS
  * CVE-2022-3201: Insufficient validation of untrusted input in Developer Tools
  * CVE-2022-3305: Use after free in Survey
  * CVE-2022-3306: Use after free in Survey
  * CVE-2022-3307: Use after free in Media
  * CVE-2022-3308: Insufficient policy enforcement in Developer Tools
  * CVE-2022-3309: Use after free in Assistant
  * CVE-2022-3310: Insufficient policy enforcement in Custom Tabs
  * CVE-2022-3311: Use after free in Import
  * CVE-2022-3312: Insufficient validation of untrusted input in VPN
  * CVE-2022-3313: Incorrect security UI in Full Screen
  * CVE-2022-3314: Use after free in Logging
  * CVE-2022-3315: Type confusion in Blink
  * CVE-2022-3316: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-3317: Insufficient validation of untrusted input in Intents
  * CVE-2022-3318: Use after free in ChromeOS Notifications
- drop patches:
  * chromium-104-tflite-system-zlib.patch
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
- add patches
  * chromium-106-ffmpeg-duration.patch
  * chromium-106-AutofillPopupControllerImpl-namespace.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1665057600">- Chromium 106.0.5249.103:
  * fix possible cache manager deadlock
  * Fix right-click menu appearing unexpectedly affecting screen
    readers</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1665576000">- Chromium 106.0.5249.119 (boo#1204223)
  * CVE-2022-3445: Use after free in Skia
  * CVE-2022-3446: Heap buffer overflow in WebSQL
  * CVE-2022-3447: Inappropriate implementation in Custom Tabs
  * CVE-2022-3448: Use after free in Permissions API
  * CVE-2022-3449: Use after free in Safe Browsing
  * CVE-2022-3450: Use after free in Peer Connection</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1666872000">- Chromium 107.0.5304.68 (boo#1204732)
  * CVE-2022-3652: Type Confusion in V8
  * CVE-2022-3653: Heap buffer overflow in Vulkan
  * CVE-2022-3654: Use after free in Layout
  * CVE-2022-3655: Heap buffer overflow in Media Galleries
  * CVE-2022-3656: Insufficient data validation in File System
  * CVE-2022-3657: Use after free in Extensions
  * CVE-2022-3658: Use after free in Feedback service on Chrome OS
  * CVE-2022-3659: Use after free in Accessibility
  * CVE-2022-3660: Inappropriate implementation in Full screen mode
  * CVE-2022-3661: Insufficient data validation in Extensions
- Added patches:
  * chromium-107-compiler.patch
  * chromium-107-system-zlib.patch
- Removed patches:
  * chromium-105-compiler.patch
  * chromium-105-Bitmap-include.patch
  * chromium-106-AutofillPopupControllerImpl-namespace.patch
- Unbundle libyuv and libavif on TW
- Prepare 15.5
- Use qt on 15.4+ (15.3 too old)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1666958400">- Chromium 107.0.5304.87 (boo#1204819)
  * CVE-2022-3723: Type Confusion in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1667995200">- Chromium 107.0.5304.110 (boo#1205221)
  * CVE-2022-3885: Use after free in V8
  * CVE-2022-3886: Use after free in Speech Recognition
  * CVE-2022-3887: Use after free in Web Workers
  * CVE-2022-3888: Use after free in WebCodecs
  * CVE-2022-3889: Type Confusion in V8
  * CVE-2022-3890: Heap buffer overflow in Crashpad</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1668686400">- Build with llvm15 on openSUSE:Backports:SLE-15-SP5 and up</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1669291200">- Chromium 107.0.5304.121 (boo#1205736)
  * CVE-2022-4135: Heap buffer overflow in GPU</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1669809600">- Chromium 108.0.5359.71 (boo#1205871):
  * CVE-2022-4174: Type Confusion in V8
  * CVE-2022-4175: Use after free in Camera Capture
  * CVE-2022-4176: Out of bounds write in Lacros Graphics
  * CVE-2022-4177: Use after free in Extensions
  * CVE-2022-4178: Use after free in Mojo
  * CVE-2022-4179: Use after free in Audio
  * CVE-2022-4180: Use after free in Mojo
  * CVE-2022-4181: Use after free in Forms
  * CVE-2022-4182: Inappropriate implementation in Fenced Frames
  * CVE-2022-4183: Insufficient policy enforcement in Popup Blocker
  * CVE-2022-4184: Insufficient policy enforcement in Autofill
  * CVE-2022-4185: Inappropriate implementation in Navigation
  * CVE-2022-4186: Insufficient validation of untrusted input in Downloads
  * CVE-2022-4187: Insufficient policy enforcement in DevTools
  * CVE-2022-4188: Insufficient validation of untrusted input in CORS
  * CVE-2022-4189: Insufficient policy enforcement in DevTools
  * CVE-2022-4190: Insufficient data validation in Directory
  * CVE-2022-4191: Use after free in Sign-In
  * CVE-2022-4192: Use after free in Live Caption
  * CVE-2022-4193: Insufficient policy enforcement in File System API
  * CVE-2022-4194: Use after free in Accessibility
  * CVE-2022-4195: Insufficient policy enforcement in Safe Browsing
- drop chromium-105-wayland-1.20.patch, upstream
- drop chromium-107-compiler.patch
- add chromium-108-compiler.patch
- drop chromium-98-EnumTable-crash.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1670068800">- Chromium 108.0.5359.94:
  * CVE-2022-4262: Type Confusion in V8 (boo#1205999)</changelog>
</package>
<package pkgid="b6e7a0503b6d1aac7ba189753c6f68a55d3b305cdfd4d6f10ac846e7a7d9f9a0" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="108.0.5359.94" rel="bp154.2.52.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657368000">- Chromium 103.0.5060.114 (boo#1201216)
  * CVE-2022-2294: Heap buffer overflow in WebRTC
  * CVE-2022-2295: Type Confusion in V8
  * CVE-2022-2296: Use after free in Chrome OS Shell</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1658318400">- Chromium 103.0.5060.134 (boo#1201679):
  * CVE-2022-2477 : Use after free in Guest View
  * CVE-2022-2478 : Use after free in PDF
  * CVE-2022-2479 : Insufficient validation of untrusted input in File
  * CVE-2022-2480 : Use after free in Service Worker API
  * CVE-2022-2481: Use after free in Views
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1658577600">- Switch back to Clang so that we can use BTI on aarch64
  * Gold is too old - doesn't understand BTI
  * LD crashes on aarch64
- Re-enable LTO
- Prepare move to FFmpeg 5 for new channel layout
  (requires 5.1+)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660046400">- Chromium 104.0.5112.79 (boo#1202075)
  * CVE-2022-2603: Use after free in Omnibox
  * CVE-2022-2604: Use after free in Safe Browsing
  * CVE-2022-2605: Out of bounds read in Dawn
  * CVE-2022-2606: Use after free in Managed devices API
  * CVE-2022-2607: Use after free in Tab Strip
  * CVE-2022-2608: Use after free in Overview Mode
  * CVE-2022-2609: Use after free in Nearby Share
  * CVE-2022-2610: Insufficient policy enforcement in Background Fetch
  * CVE-2022-2611: Inappropriate implementation in Fullscreen API
  * CVE-2022-2612: Side-channel information leakage in Keyboard input
  * CVE-2022-2613: Use after free in Input
  * CVE-2022-2614: Use after free in Sign-In Flow
  * CVE-2022-2615: Insufficient policy enforcement in Cookies
  * CVE-2022-2616: Inappropriate implementation in Extensions API
  * CVE-2022-2617: Use after free in Extensions API
  * CVE-2022-2618: Insufficient validation of untrusted input in Internals
  * CVE-2022-2619: Insufficient validation of untrusted input in Settings
  * CVE-2022-2620: Use after free in WebUI
  * CVE-2022-2621: Use after free in Extensions
  * CVE-2022-2622: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-2623: Use after free in Offline
  * CVE-2022-2624: Heap buffer overflow in PDF
- Added patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-104-tflite-system-zlib.patch
- Removed patches:
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-compiler.patch
- Use FFmpeg 5.1 on TW</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660651200">- Re-enable our version of chrome-wrapper
- Set no sandbox if root is being used (https://crbug.com/638180)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660824000">- Chromium 104.0.5112.101 (boo#1202509):
  * CVE-2022-2852: Use after free in FedCM
  * CVE-2022-2854: Use after free in SwiftShader
  * CVE-2022-2855: Use after free in ANGLE
  * CVE-2022-2857: Use after free in Blink
  * CVE-2022-2858: Use after free in Sign-In Flow
  * CVE-2022-2853: Heap buffer overflow in Downloads
  * CVE-2022-2856: Insufficient validation of untrusted input in Intents
  * CVE-2022-2859: Use after free in Chrome OS Shell
  * CVE-2022-2860: Insufficient policy enforcement in Cookies
  * CVE-2022-2861: Inappropriate implementation in Extensions API</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1661169600">- Fix quoting in chrome-wrapper, don't put cwd on LD_LIBRARY_PATH</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1662033600">- Update chromium-symbolic.svg: this fixes bsc#1202403.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1662638400">- Chromium 105.0.5195.102 (boo#1203102):
  * CVE-2022-3075: Insufficient data validation in Mojo
- Chromium 105.0.5195.52 (boo#1202964):
  * CVE-2022-3038: Use after free in Network Service
  * CVE-2022-3039: Use after free in WebSQL
  * CVE-2022-3040: Use after free in Layout
  * CVE-2022-3041: Use after free in WebSQL
  * CVE-2022-3042: Use after free in PhoneHub
  * CVE-2022-3043: Heap buffer overflow in Screen Capture
  * CVE-2022-3044: Inappropriate implementation in Site Isolation
  * CVE-2022-3045: Insufficient validation of untrusted input in V8
  * CVE-2022-3046: Use after free in Browser Tag
  * CVE-2022-3071: Use after free in Tab Strip
  * CVE-2022-3047: Insufficient policy enforcement in Extensions API
  * CVE-2022-3048: Inappropriate implementation in Chrome OS lockscreen
  * CVE-2022-3049: Use after free in SplitScreen
  * CVE-2022-3050: Heap buffer overflow in WebUI
  * CVE-2022-3051: Heap buffer overflow in Exosphere
  * CVE-2022-3052: Heap buffer overflow in Window Manager
  * CVE-2022-3053: Inappropriate implementation in Pointer Lock
  * CVE-2022-3054: Insufficient policy enforcement in DevTools
  * CVE-2022-3055: Use after free in Passwords
  * CVE-2022-3056: Insufficient policy enforcement in Content Security Policy
  * CVE-2022-3057: Inappropriate implementation in iframe Sandbox
  * CVE-2022-3058: Use after free in Sign-In Flow
- Added patches:
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Bitmap-include.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-wayland-1.20.patch
  * chromium-105-compiler.patch
- Removed patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-78-protobuf-RepeatedPtrField-export.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663156800">- Chromium 105.0.5195.127 (boo#1203419):
  * CVE-2022-3195: Out of bounds write in Storage
  * CVE-2022-3196: Use after free in PDF
  * CVE-2022-3197: Use after free in PDF
  * CVE-2022-3198: Use after free in PDF
  * CVE-2022-3199: Use after free in Frames
  * CVE-2022-3200: Heap buffer overflow in Internals
  * CVE-2022-3201: Insufficient validation of untrusted input in DevTools
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1664625600">- Chromium 106.0.5249.91 (boo#1203808):
  * CVE-2022-3370: Use after free in Custom Elements
  * CVE-2022-3373: Out of bounds write in V8
- includes changes from 106.0.5249.61:
  * CVE-2022-3304: Use after free in CSS
  * CVE-2022-3201: Insufficient validation of untrusted input in Developer Tools
  * CVE-2022-3305: Use after free in Survey
  * CVE-2022-3306: Use after free in Survey
  * CVE-2022-3307: Use after free in Media
  * CVE-2022-3308: Insufficient policy enforcement in Developer Tools
  * CVE-2022-3309: Use after free in Assistant
  * CVE-2022-3310: Insufficient policy enforcement in Custom Tabs
  * CVE-2022-3311: Use after free in Import
  * CVE-2022-3312: Insufficient validation of untrusted input in VPN
  * CVE-2022-3313: Incorrect security UI in Full Screen
  * CVE-2022-3314: Use after free in Logging
  * CVE-2022-3315: Type confusion in Blink
  * CVE-2022-3316: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-3317: Insufficient validation of untrusted input in Intents
  * CVE-2022-3318: Use after free in ChromeOS Notifications
- drop patches:
  * chromium-104-tflite-system-zlib.patch
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
- add patches
  * chromium-106-ffmpeg-duration.patch
  * chromium-106-AutofillPopupControllerImpl-namespace.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1665057600">- Chromium 106.0.5249.103:
  * fix possible cache manager deadlock
  * Fix right-click menu appearing unexpectedly affecting screen
    readers</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1665576000">- Chromium 106.0.5249.119 (boo#1204223)
  * CVE-2022-3445: Use after free in Skia
  * CVE-2022-3446: Heap buffer overflow in WebSQL
  * CVE-2022-3447: Inappropriate implementation in Custom Tabs
  * CVE-2022-3448: Use after free in Permissions API
  * CVE-2022-3449: Use after free in Safe Browsing
  * CVE-2022-3450: Use after free in Peer Connection</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1666872000">- Chromium 107.0.5304.68 (boo#1204732)
  * CVE-2022-3652: Type Confusion in V8
  * CVE-2022-3653: Heap buffer overflow in Vulkan
  * CVE-2022-3654: Use after free in Layout
  * CVE-2022-3655: Heap buffer overflow in Media Galleries
  * CVE-2022-3656: Insufficient data validation in File System
  * CVE-2022-3657: Use after free in Extensions
  * CVE-2022-3658: Use after free in Feedback service on Chrome OS
  * CVE-2022-3659: Use after free in Accessibility
  * CVE-2022-3660: Inappropriate implementation in Full screen mode
  * CVE-2022-3661: Insufficient data validation in Extensions
- Added patches:
  * chromium-107-compiler.patch
  * chromium-107-system-zlib.patch
- Removed patches:
  * chromium-105-compiler.patch
  * chromium-105-Bitmap-include.patch
  * chromium-106-AutofillPopupControllerImpl-namespace.patch
- Unbundle libyuv and libavif on TW
- Prepare 15.5
- Use qt on 15.4+ (15.3 too old)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1666958400">- Chromium 107.0.5304.87 (boo#1204819)
  * CVE-2022-3723: Type Confusion in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1667995200">- Chromium 107.0.5304.110 (boo#1205221)
  * CVE-2022-3885: Use after free in V8
  * CVE-2022-3886: Use after free in Speech Recognition
  * CVE-2022-3887: Use after free in Web Workers
  * CVE-2022-3888: Use after free in WebCodecs
  * CVE-2022-3889: Type Confusion in V8
  * CVE-2022-3890: Heap buffer overflow in Crashpad</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1668686400">- Build with llvm15 on openSUSE:Backports:SLE-15-SP5 and up</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1669291200">- Chromium 107.0.5304.121 (boo#1205736)
  * CVE-2022-4135: Heap buffer overflow in GPU</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1669809600">- Chromium 108.0.5359.71 (boo#1205871):
  * CVE-2022-4174: Type Confusion in V8
  * CVE-2022-4175: Use after free in Camera Capture
  * CVE-2022-4176: Out of bounds write in Lacros Graphics
  * CVE-2022-4177: Use after free in Extensions
  * CVE-2022-4178: Use after free in Mojo
  * CVE-2022-4179: Use after free in Audio
  * CVE-2022-4180: Use after free in Mojo
  * CVE-2022-4181: Use after free in Forms
  * CVE-2022-4182: Inappropriate implementation in Fenced Frames
  * CVE-2022-4183: Insufficient policy enforcement in Popup Blocker
  * CVE-2022-4184: Insufficient policy enforcement in Autofill
  * CVE-2022-4185: Inappropriate implementation in Navigation
  * CVE-2022-4186: Insufficient validation of untrusted input in Downloads
  * CVE-2022-4187: Insufficient policy enforcement in DevTools
  * CVE-2022-4188: Insufficient validation of untrusted input in CORS
  * CVE-2022-4189: Insufficient policy enforcement in DevTools
  * CVE-2022-4190: Insufficient data validation in Directory
  * CVE-2022-4191: Use after free in Sign-In
  * CVE-2022-4192: Use after free in Live Caption
  * CVE-2022-4193: Insufficient policy enforcement in File System API
  * CVE-2022-4194: Use after free in Accessibility
  * CVE-2022-4195: Insufficient policy enforcement in Safe Browsing
- drop chromium-105-wayland-1.20.patch, upstream
- drop chromium-107-compiler.patch
- add chromium-108-compiler.patch
- drop chromium-98-EnumTable-crash.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1670068800">- Chromium 108.0.5359.94:
  * CVE-2022-4262: Type Confusion in V8 (boo#1205999)</changelog>
</package>
<package pkgid="96888624cdf1af03a0420fb145b9ace03aae1b82662786b9be38f339305356b6" name="chromedriver" arch="aarch64">
  <version epoch="0" ver="109.0.5414.119" rel="bp154.2.64.1"/>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1661169600">- Fix quoting in chrome-wrapper, don't put cwd on LD_LIBRARY_PATH</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1662033600">- Update chromium-symbolic.svg: this fixes bsc#1202403.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1662638400">- Chromium 105.0.5195.102 (boo#1203102):
  * CVE-2022-3075: Insufficient data validation in Mojo
- Chromium 105.0.5195.52 (boo#1202964):
  * CVE-2022-3038: Use after free in Network Service
  * CVE-2022-3039: Use after free in WebSQL
  * CVE-2022-3040: Use after free in Layout
  * CVE-2022-3041: Use after free in WebSQL
  * CVE-2022-3042: Use after free in PhoneHub
  * CVE-2022-3043: Heap buffer overflow in Screen Capture
  * CVE-2022-3044: Inappropriate implementation in Site Isolation
  * CVE-2022-3045: Insufficient validation of untrusted input in V8
  * CVE-2022-3046: Use after free in Browser Tag
  * CVE-2022-3071: Use after free in Tab Strip
  * CVE-2022-3047: Insufficient policy enforcement in Extensions API
  * CVE-2022-3048: Inappropriate implementation in Chrome OS lockscreen
  * CVE-2022-3049: Use after free in SplitScreen
  * CVE-2022-3050: Heap buffer overflow in WebUI
  * CVE-2022-3051: Heap buffer overflow in Exosphere
  * CVE-2022-3052: Heap buffer overflow in Window Manager
  * CVE-2022-3053: Inappropriate implementation in Pointer Lock
  * CVE-2022-3054: Insufficient policy enforcement in DevTools
  * CVE-2022-3055: Use after free in Passwords
  * CVE-2022-3056: Insufficient policy enforcement in Content Security Policy
  * CVE-2022-3057: Inappropriate implementation in iframe Sandbox
  * CVE-2022-3058: Use after free in Sign-In Flow
- Added patches:
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Bitmap-include.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-wayland-1.20.patch
  * chromium-105-compiler.patch
- Removed patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-78-protobuf-RepeatedPtrField-export.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663156800">- Chromium 105.0.5195.127 (boo#1203419):
  * CVE-2022-3195: Out of bounds write in Storage
  * CVE-2022-3196: Use after free in PDF
  * CVE-2022-3197: Use after free in PDF
  * CVE-2022-3198: Use after free in PDF
  * CVE-2022-3199: Use after free in Frames
  * CVE-2022-3200: Heap buffer overflow in Internals
  * CVE-2022-3201: Insufficient validation of untrusted input in DevTools
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1664625600">- Chromium 106.0.5249.91 (boo#1203808):
  * CVE-2022-3370: Use after free in Custom Elements
  * CVE-2022-3373: Out of bounds write in V8
- includes changes from 106.0.5249.61:
  * CVE-2022-3304: Use after free in CSS
  * CVE-2022-3201: Insufficient validation of untrusted input in Developer Tools
  * CVE-2022-3305: Use after free in Survey
  * CVE-2022-3306: Use after free in Survey
  * CVE-2022-3307: Use after free in Media
  * CVE-2022-3308: Insufficient policy enforcement in Developer Tools
  * CVE-2022-3309: Use after free in Assistant
  * CVE-2022-3310: Insufficient policy enforcement in Custom Tabs
  * CVE-2022-3311: Use after free in Import
  * CVE-2022-3312: Insufficient validation of untrusted input in VPN
  * CVE-2022-3313: Incorrect security UI in Full Screen
  * CVE-2022-3314: Use after free in Logging
  * CVE-2022-3315: Type confusion in Blink
  * CVE-2022-3316: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-3317: Insufficient validation of untrusted input in Intents
  * CVE-2022-3318: Use after free in ChromeOS Notifications
- drop patches:
  * chromium-104-tflite-system-zlib.patch
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
- add patches
  * chromium-106-ffmpeg-duration.patch
  * chromium-106-AutofillPopupControllerImpl-namespace.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1665057600">- Chromium 106.0.5249.103:
  * fix possible cache manager deadlock
  * Fix right-click menu appearing unexpectedly affecting screen
    readers</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1665576000">- Chromium 106.0.5249.119 (boo#1204223)
  * CVE-2022-3445: Use after free in Skia
  * CVE-2022-3446: Heap buffer overflow in WebSQL
  * CVE-2022-3447: Inappropriate implementation in Custom Tabs
  * CVE-2022-3448: Use after free in Permissions API
  * CVE-2022-3449: Use after free in Safe Browsing
  * CVE-2022-3450: Use after free in Peer Connection</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1666872000">- Chromium 107.0.5304.68 (boo#1204732)
  * CVE-2022-3652: Type Confusion in V8
  * CVE-2022-3653: Heap buffer overflow in Vulkan
  * CVE-2022-3654: Use after free in Layout
  * CVE-2022-3655: Heap buffer overflow in Media Galleries
  * CVE-2022-3656: Insufficient data validation in File System
  * CVE-2022-3657: Use after free in Extensions
  * CVE-2022-3658: Use after free in Feedback service on Chrome OS
  * CVE-2022-3659: Use after free in Accessibility
  * CVE-2022-3660: Inappropriate implementation in Full screen mode
  * CVE-2022-3661: Insufficient data validation in Extensions
- Added patches:
  * chromium-107-compiler.patch
  * chromium-107-system-zlib.patch
- Removed patches:
  * chromium-105-compiler.patch
  * chromium-105-Bitmap-include.patch
  * chromium-106-AutofillPopupControllerImpl-namespace.patch
- Unbundle libyuv and libavif on TW
- Prepare 15.5
- Use qt on 15.4+ (15.3 too old)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1666958400">- Chromium 107.0.5304.87 (boo#1204819)
  * CVE-2022-3723: Type Confusion in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1667995200">- Chromium 107.0.5304.110 (boo#1205221)
  * CVE-2022-3885: Use after free in V8
  * CVE-2022-3886: Use after free in Speech Recognition
  * CVE-2022-3887: Use after free in Web Workers
  * CVE-2022-3888: Use after free in WebCodecs
  * CVE-2022-3889: Type Confusion in V8
  * CVE-2022-3890: Heap buffer overflow in Crashpad</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1668686400">- Build with llvm15 on openSUSE:Backports:SLE-15-SP5 and up</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1669291200">- Chromium 107.0.5304.121 (boo#1205736)
  * CVE-2022-4135: Heap buffer overflow in GPU</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1669809600">- Chromium 108.0.5359.71 (boo#1205871):
  * CVE-2022-4174: Type Confusion in V8
  * CVE-2022-4175: Use after free in Camera Capture
  * CVE-2022-4176: Out of bounds write in Lacros Graphics
  * CVE-2022-4177: Use after free in Extensions
  * CVE-2022-4178: Use after free in Mojo
  * CVE-2022-4179: Use after free in Audio
  * CVE-2022-4180: Use after free in Mojo
  * CVE-2022-4181: Use after free in Forms
  * CVE-2022-4182: Inappropriate implementation in Fenced Frames
  * CVE-2022-4183: Insufficient policy enforcement in Popup Blocker
  * CVE-2022-4184: Insufficient policy enforcement in Autofill
  * CVE-2022-4185: Inappropriate implementation in Navigation
  * CVE-2022-4186: Insufficient validation of untrusted input in Downloads
  * CVE-2022-4187: Insufficient policy enforcement in DevTools
  * CVE-2022-4188: Insufficient validation of untrusted input in CORS
  * CVE-2022-4189: Insufficient policy enforcement in DevTools
  * CVE-2022-4190: Insufficient data validation in Directory
  * CVE-2022-4191: Use after free in Sign-In
  * CVE-2022-4192: Use after free in Live Caption
  * CVE-2022-4193: Insufficient policy enforcement in File System API
  * CVE-2022-4194: Use after free in Accessibility
  * CVE-2022-4195: Insufficient policy enforcement in Safe Browsing
- drop chromium-105-wayland-1.20.patch, upstream
- drop chromium-107-compiler.patch
- add chromium-108-compiler.patch
- drop chromium-98-EnumTable-crash.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1670068800">- Chromium 108.0.5359.94:
  * CVE-2022-4262: Type Confusion in V8 (boo#1205999)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1670414400">- Chromium 108.0.5359.98
  * Fix regression in computing &lt;select&gt; visibility</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1671019200">- Chromium 108.0.5359.124 (boo#1206403):
  * CVE-2022-4436: Use after free in Blink Media
  * CVE-2022-4437: Use after free in Mojo IPC
  * CVE-2022-4438: Use after free in Blink Frames
  * CVE-2022-4439: Use after free in Aura
  * CVE-2022-4440: Use after free in Profiles</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1671364800">- Add chromium-disable-GlobalMediaControlsCastStartStop.patch:
  disable GlobalMediaControlsCastStartStop to fix crashes
  occurring when interacting with the Media UI (bsc#1198124)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1673352000">- Chromium 109.0.5414.74:
  * Add support for MathML Core
  * CSS: Auto range support for font descriptors inside @font-face
    rule
  * CSS: Add lh length unit
  * CSS: Add hyphenate-limit-chars property
  * CSS: Snap border, outline and column-rule widths before layout
  * API: Improved screen sharing and web conferencing: hints for
    suppressing local audio playback, and Conditional Focus
  * API: HTTP response status code in the Resource Timing API
  * API: Same-site cross-origin prerendering triggered by the
    speculation rules API
  * Remove Event.path API
  * CVE-2023-0128: Use after free in Overview Mode
  * CVE-2023-0129: Heap buffer overflow in Network Service
  * CVE-2023-0130: Inappropriate implementation in Fullscreen API
  * CVE-2023-0131: Inappropriate implementation in iframe Sandbox
  * CVE-2023-0132: Inappropriate implementation in Permission prompts
  * CVE-2023-0133: Inappropriate implementation in Permission prompts
  * CVE-2023-0134: Use after free in Cart
  * CVE-2023-0135: Use after free in Cart
  * CVE-2023-0136: Inappropriate implementation in Fullscreen API
  * CVE-2023-0137: Heap buffer overflow in Platform Apps
  * CVE-2023-0138: Heap buffer overflow in libphonenumber
  * CVE-2023-0139: Insufficient validation of untrusted input in Downloads
  * CVE-2023-0140: Inappropriate implementation in File System API
  * CVE-2023-0141: Insufficient policy enforcement in CORS
  * Various fixes from internal audits, fuzzing and other initiatives
- drop patches:
  * chromium-gcc11.patch - not needed
  * chromium-107-system-zlib.patch - upstream
  * chromium-108-compiler.patch
- add patches:
  * chromium-109-compiler.patch
  * chromium-109-clang-lp154.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1673956800">- Added patches:
  * chromium-icu72-1.patch: ensure TextCodecCJK doesn't conflict
    with system icu (bsc#1207147)
  * chromium-icu72-2.patch: align default characters for old icu
    with that of ICU 72
  * chromium-icu72-3.patch: make V8 aware of space in ICU 72 time
    format</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1674648000">- Chromium 109.0.5414.119 (boo#1207512):
  * CVE-2023-0471: Use after free in WebTransport
  * CVE-2023-0472: Use after free in WebRTC
  * CVE-2023-0473: Type Confusion in ServiceWorker API
  * CVE-2023-0474: Use after free in GuestView
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
</package>
<package pkgid="6ab882c389c5f5d8ad2138f7b3304bd870e6117f7e2dacc5ef4298b537ab3785" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="109.0.5414.119" rel="bp154.2.64.1"/>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1661169600">- Fix quoting in chrome-wrapper, don't put cwd on LD_LIBRARY_PATH</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1662033600">- Update chromium-symbolic.svg: this fixes bsc#1202403.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1662638400">- Chromium 105.0.5195.102 (boo#1203102):
  * CVE-2022-3075: Insufficient data validation in Mojo
- Chromium 105.0.5195.52 (boo#1202964):
  * CVE-2022-3038: Use after free in Network Service
  * CVE-2022-3039: Use after free in WebSQL
  * CVE-2022-3040: Use after free in Layout
  * CVE-2022-3041: Use after free in WebSQL
  * CVE-2022-3042: Use after free in PhoneHub
  * CVE-2022-3043: Heap buffer overflow in Screen Capture
  * CVE-2022-3044: Inappropriate implementation in Site Isolation
  * CVE-2022-3045: Insufficient validation of untrusted input in V8
  * CVE-2022-3046: Use after free in Browser Tag
  * CVE-2022-3071: Use after free in Tab Strip
  * CVE-2022-3047: Insufficient policy enforcement in Extensions API
  * CVE-2022-3048: Inappropriate implementation in Chrome OS lockscreen
  * CVE-2022-3049: Use after free in SplitScreen
  * CVE-2022-3050: Heap buffer overflow in WebUI
  * CVE-2022-3051: Heap buffer overflow in Exosphere
  * CVE-2022-3052: Heap buffer overflow in Window Manager
  * CVE-2022-3053: Inappropriate implementation in Pointer Lock
  * CVE-2022-3054: Insufficient policy enforcement in DevTools
  * CVE-2022-3055: Use after free in Passwords
  * CVE-2022-3056: Insufficient policy enforcement in Content Security Policy
  * CVE-2022-3057: Inappropriate implementation in iframe Sandbox
  * CVE-2022-3058: Use after free in Sign-In Flow
- Added patches:
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Bitmap-include.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-wayland-1.20.patch
  * chromium-105-compiler.patch
- Removed patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-78-protobuf-RepeatedPtrField-export.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663156800">- Chromium 105.0.5195.127 (boo#1203419):
  * CVE-2022-3195: Out of bounds write in Storage
  * CVE-2022-3196: Use after free in PDF
  * CVE-2022-3197: Use after free in PDF
  * CVE-2022-3198: Use after free in PDF
  * CVE-2022-3199: Use after free in Frames
  * CVE-2022-3200: Heap buffer overflow in Internals
  * CVE-2022-3201: Insufficient validation of untrusted input in DevTools
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1664625600">- Chromium 106.0.5249.91 (boo#1203808):
  * CVE-2022-3370: Use after free in Custom Elements
  * CVE-2022-3373: Out of bounds write in V8
- includes changes from 106.0.5249.61:
  * CVE-2022-3304: Use after free in CSS
  * CVE-2022-3201: Insufficient validation of untrusted input in Developer Tools
  * CVE-2022-3305: Use after free in Survey
  * CVE-2022-3306: Use after free in Survey
  * CVE-2022-3307: Use after free in Media
  * CVE-2022-3308: Insufficient policy enforcement in Developer Tools
  * CVE-2022-3309: Use after free in Assistant
  * CVE-2022-3310: Insufficient policy enforcement in Custom Tabs
  * CVE-2022-3311: Use after free in Import
  * CVE-2022-3312: Insufficient validation of untrusted input in VPN
  * CVE-2022-3313: Incorrect security UI in Full Screen
  * CVE-2022-3314: Use after free in Logging
  * CVE-2022-3315: Type confusion in Blink
  * CVE-2022-3316: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-3317: Insufficient validation of untrusted input in Intents
  * CVE-2022-3318: Use after free in ChromeOS Notifications
- drop patches:
  * chromium-104-tflite-system-zlib.patch
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
- add patches
  * chromium-106-ffmpeg-duration.patch
  * chromium-106-AutofillPopupControllerImpl-namespace.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1665057600">- Chromium 106.0.5249.103:
  * fix possible cache manager deadlock
  * Fix right-click menu appearing unexpectedly affecting screen
    readers</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1665576000">- Chromium 106.0.5249.119 (boo#1204223)
  * CVE-2022-3445: Use after free in Skia
  * CVE-2022-3446: Heap buffer overflow in WebSQL
  * CVE-2022-3447: Inappropriate implementation in Custom Tabs
  * CVE-2022-3448: Use after free in Permissions API
  * CVE-2022-3449: Use after free in Safe Browsing
  * CVE-2022-3450: Use after free in Peer Connection</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1666872000">- Chromium 107.0.5304.68 (boo#1204732)
  * CVE-2022-3652: Type Confusion in V8
  * CVE-2022-3653: Heap buffer overflow in Vulkan
  * CVE-2022-3654: Use after free in Layout
  * CVE-2022-3655: Heap buffer overflow in Media Galleries
  * CVE-2022-3656: Insufficient data validation in File System
  * CVE-2022-3657: Use after free in Extensions
  * CVE-2022-3658: Use after free in Feedback service on Chrome OS
  * CVE-2022-3659: Use after free in Accessibility
  * CVE-2022-3660: Inappropriate implementation in Full screen mode
  * CVE-2022-3661: Insufficient data validation in Extensions
- Added patches:
  * chromium-107-compiler.patch
  * chromium-107-system-zlib.patch
- Removed patches:
  * chromium-105-compiler.patch
  * chromium-105-Bitmap-include.patch
  * chromium-106-AutofillPopupControllerImpl-namespace.patch
- Unbundle libyuv and libavif on TW
- Prepare 15.5
- Use qt on 15.4+ (15.3 too old)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1666958400">- Chromium 107.0.5304.87 (boo#1204819)
  * CVE-2022-3723: Type Confusion in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1667995200">- Chromium 107.0.5304.110 (boo#1205221)
  * CVE-2022-3885: Use after free in V8
  * CVE-2022-3886: Use after free in Speech Recognition
  * CVE-2022-3887: Use after free in Web Workers
  * CVE-2022-3888: Use after free in WebCodecs
  * CVE-2022-3889: Type Confusion in V8
  * CVE-2022-3890: Heap buffer overflow in Crashpad</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1668686400">- Build with llvm15 on openSUSE:Backports:SLE-15-SP5 and up</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1669291200">- Chromium 107.0.5304.121 (boo#1205736)
  * CVE-2022-4135: Heap buffer overflow in GPU</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1669809600">- Chromium 108.0.5359.71 (boo#1205871):
  * CVE-2022-4174: Type Confusion in V8
  * CVE-2022-4175: Use after free in Camera Capture
  * CVE-2022-4176: Out of bounds write in Lacros Graphics
  * CVE-2022-4177: Use after free in Extensions
  * CVE-2022-4178: Use after free in Mojo
  * CVE-2022-4179: Use after free in Audio
  * CVE-2022-4180: Use after free in Mojo
  * CVE-2022-4181: Use after free in Forms
  * CVE-2022-4182: Inappropriate implementation in Fenced Frames
  * CVE-2022-4183: Insufficient policy enforcement in Popup Blocker
  * CVE-2022-4184: Insufficient policy enforcement in Autofill
  * CVE-2022-4185: Inappropriate implementation in Navigation
  * CVE-2022-4186: Insufficient validation of untrusted input in Downloads
  * CVE-2022-4187: Insufficient policy enforcement in DevTools
  * CVE-2022-4188: Insufficient validation of untrusted input in CORS
  * CVE-2022-4189: Insufficient policy enforcement in DevTools
  * CVE-2022-4190: Insufficient data validation in Directory
  * CVE-2022-4191: Use after free in Sign-In
  * CVE-2022-4192: Use after free in Live Caption
  * CVE-2022-4193: Insufficient policy enforcement in File System API
  * CVE-2022-4194: Use after free in Accessibility
  * CVE-2022-4195: Insufficient policy enforcement in Safe Browsing
- drop chromium-105-wayland-1.20.patch, upstream
- drop chromium-107-compiler.patch
- add chromium-108-compiler.patch
- drop chromium-98-EnumTable-crash.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1670068800">- Chromium 108.0.5359.94:
  * CVE-2022-4262: Type Confusion in V8 (boo#1205999)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1670414400">- Chromium 108.0.5359.98
  * Fix regression in computing &lt;select&gt; visibility</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1671019200">- Chromium 108.0.5359.124 (boo#1206403):
  * CVE-2022-4436: Use after free in Blink Media
  * CVE-2022-4437: Use after free in Mojo IPC
  * CVE-2022-4438: Use after free in Blink Frames
  * CVE-2022-4439: Use after free in Aura
  * CVE-2022-4440: Use after free in Profiles</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1671364800">- Add chromium-disable-GlobalMediaControlsCastStartStop.patch:
  disable GlobalMediaControlsCastStartStop to fix crashes
  occurring when interacting with the Media UI (bsc#1198124)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1673352000">- Chromium 109.0.5414.74:
  * Add support for MathML Core
  * CSS: Auto range support for font descriptors inside @font-face
    rule
  * CSS: Add lh length unit
  * CSS: Add hyphenate-limit-chars property
  * CSS: Snap border, outline and column-rule widths before layout
  * API: Improved screen sharing and web conferencing: hints for
    suppressing local audio playback, and Conditional Focus
  * API: HTTP response status code in the Resource Timing API
  * API: Same-site cross-origin prerendering triggered by the
    speculation rules API
  * Remove Event.path API
  * CVE-2023-0128: Use after free in Overview Mode
  * CVE-2023-0129: Heap buffer overflow in Network Service
  * CVE-2023-0130: Inappropriate implementation in Fullscreen API
  * CVE-2023-0131: Inappropriate implementation in iframe Sandbox
  * CVE-2023-0132: Inappropriate implementation in Permission prompts
  * CVE-2023-0133: Inappropriate implementation in Permission prompts
  * CVE-2023-0134: Use after free in Cart
  * CVE-2023-0135: Use after free in Cart
  * CVE-2023-0136: Inappropriate implementation in Fullscreen API
  * CVE-2023-0137: Heap buffer overflow in Platform Apps
  * CVE-2023-0138: Heap buffer overflow in libphonenumber
  * CVE-2023-0139: Insufficient validation of untrusted input in Downloads
  * CVE-2023-0140: Inappropriate implementation in File System API
  * CVE-2023-0141: Insufficient policy enforcement in CORS
  * Various fixes from internal audits, fuzzing and other initiatives
- drop patches:
  * chromium-gcc11.patch - not needed
  * chromium-107-system-zlib.patch - upstream
  * chromium-108-compiler.patch
- add patches:
  * chromium-109-compiler.patch
  * chromium-109-clang-lp154.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1673956800">- Added patches:
  * chromium-icu72-1.patch: ensure TextCodecCJK doesn't conflict
    with system icu (bsc#1207147)
  * chromium-icu72-2.patch: align default characters for old icu
    with that of ICU 72
  * chromium-icu72-3.patch: make V8 aware of space in ICU 72 time
    format</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1674648000">- Chromium 109.0.5414.119 (boo#1207512):
  * CVE-2023-0471: Use after free in WebTransport
  * CVE-2023-0472: Use after free in WebRTC
  * CVE-2023-0473: Type Confusion in ServiceWorker API
  * CVE-2023-0474: Use after free in GuestView
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
</package>
<package pkgid="c685965da96204d1edfc88da3bb3d0409d1d00eccb6f92bd5f52f8722493d402" name="chromedriver" arch="aarch64">
  <version epoch="0" ver="109.0.5414.74" rel="bp154.2.58.1"/>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660651200">- Re-enable our version of chrome-wrapper
- Set no sandbox if root is being used (https://crbug.com/638180)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660824000">- Chromium 104.0.5112.101 (boo#1202509):
  * CVE-2022-2852: Use after free in FedCM
  * CVE-2022-2854: Use after free in SwiftShader
  * CVE-2022-2855: Use after free in ANGLE
  * CVE-2022-2857: Use after free in Blink
  * CVE-2022-2858: Use after free in Sign-In Flow
  * CVE-2022-2853: Heap buffer overflow in Downloads
  * CVE-2022-2856: Insufficient validation of untrusted input in Intents
  * CVE-2022-2859: Use after free in Chrome OS Shell
  * CVE-2022-2860: Insufficient policy enforcement in Cookies
  * CVE-2022-2861: Inappropriate implementation in Extensions API</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1661169600">- Fix quoting in chrome-wrapper, don't put cwd on LD_LIBRARY_PATH</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1662033600">- Update chromium-symbolic.svg: this fixes bsc#1202403.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1662638400">- Chromium 105.0.5195.102 (boo#1203102):
  * CVE-2022-3075: Insufficient data validation in Mojo
- Chromium 105.0.5195.52 (boo#1202964):
  * CVE-2022-3038: Use after free in Network Service
  * CVE-2022-3039: Use after free in WebSQL
  * CVE-2022-3040: Use after free in Layout
  * CVE-2022-3041: Use after free in WebSQL
  * CVE-2022-3042: Use after free in PhoneHub
  * CVE-2022-3043: Heap buffer overflow in Screen Capture
  * CVE-2022-3044: Inappropriate implementation in Site Isolation
  * CVE-2022-3045: Insufficient validation of untrusted input in V8
  * CVE-2022-3046: Use after free in Browser Tag
  * CVE-2022-3071: Use after free in Tab Strip
  * CVE-2022-3047: Insufficient policy enforcement in Extensions API
  * CVE-2022-3048: Inappropriate implementation in Chrome OS lockscreen
  * CVE-2022-3049: Use after free in SplitScreen
  * CVE-2022-3050: Heap buffer overflow in WebUI
  * CVE-2022-3051: Heap buffer overflow in Exosphere
  * CVE-2022-3052: Heap buffer overflow in Window Manager
  * CVE-2022-3053: Inappropriate implementation in Pointer Lock
  * CVE-2022-3054: Insufficient policy enforcement in DevTools
  * CVE-2022-3055: Use after free in Passwords
  * CVE-2022-3056: Insufficient policy enforcement in Content Security Policy
  * CVE-2022-3057: Inappropriate implementation in iframe Sandbox
  * CVE-2022-3058: Use after free in Sign-In Flow
- Added patches:
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Bitmap-include.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-wayland-1.20.patch
  * chromium-105-compiler.patch
- Removed patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-78-protobuf-RepeatedPtrField-export.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663156800">- Chromium 105.0.5195.127 (boo#1203419):
  * CVE-2022-3195: Out of bounds write in Storage
  * CVE-2022-3196: Use after free in PDF
  * CVE-2022-3197: Use after free in PDF
  * CVE-2022-3198: Use after free in PDF
  * CVE-2022-3199: Use after free in Frames
  * CVE-2022-3200: Heap buffer overflow in Internals
  * CVE-2022-3201: Insufficient validation of untrusted input in DevTools
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1664625600">- Chromium 106.0.5249.91 (boo#1203808):
  * CVE-2022-3370: Use after free in Custom Elements
  * CVE-2022-3373: Out of bounds write in V8
- includes changes from 106.0.5249.61:
  * CVE-2022-3304: Use after free in CSS
  * CVE-2022-3201: Insufficient validation of untrusted input in Developer Tools
  * CVE-2022-3305: Use after free in Survey
  * CVE-2022-3306: Use after free in Survey
  * CVE-2022-3307: Use after free in Media
  * CVE-2022-3308: Insufficient policy enforcement in Developer Tools
  * CVE-2022-3309: Use after free in Assistant
  * CVE-2022-3310: Insufficient policy enforcement in Custom Tabs
  * CVE-2022-3311: Use after free in Import
  * CVE-2022-3312: Insufficient validation of untrusted input in VPN
  * CVE-2022-3313: Incorrect security UI in Full Screen
  * CVE-2022-3314: Use after free in Logging
  * CVE-2022-3315: Type confusion in Blink
  * CVE-2022-3316: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-3317: Insufficient validation of untrusted input in Intents
  * CVE-2022-3318: Use after free in ChromeOS Notifications
- drop patches:
  * chromium-104-tflite-system-zlib.patch
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
- add patches
  * chromium-106-ffmpeg-duration.patch
  * chromium-106-AutofillPopupControllerImpl-namespace.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1665057600">- Chromium 106.0.5249.103:
  * fix possible cache manager deadlock
  * Fix right-click menu appearing unexpectedly affecting screen
    readers</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1665576000">- Chromium 106.0.5249.119 (boo#1204223)
  * CVE-2022-3445: Use after free in Skia
  * CVE-2022-3446: Heap buffer overflow in WebSQL
  * CVE-2022-3447: Inappropriate implementation in Custom Tabs
  * CVE-2022-3448: Use after free in Permissions API
  * CVE-2022-3449: Use after free in Safe Browsing
  * CVE-2022-3450: Use after free in Peer Connection</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1666872000">- Chromium 107.0.5304.68 (boo#1204732)
  * CVE-2022-3652: Type Confusion in V8
  * CVE-2022-3653: Heap buffer overflow in Vulkan
  * CVE-2022-3654: Use after free in Layout
  * CVE-2022-3655: Heap buffer overflow in Media Galleries
  * CVE-2022-3656: Insufficient data validation in File System
  * CVE-2022-3657: Use after free in Extensions
  * CVE-2022-3658: Use after free in Feedback service on Chrome OS
  * CVE-2022-3659: Use after free in Accessibility
  * CVE-2022-3660: Inappropriate implementation in Full screen mode
  * CVE-2022-3661: Insufficient data validation in Extensions
- Added patches:
  * chromium-107-compiler.patch
  * chromium-107-system-zlib.patch
- Removed patches:
  * chromium-105-compiler.patch
  * chromium-105-Bitmap-include.patch
  * chromium-106-AutofillPopupControllerImpl-namespace.patch
- Unbundle libyuv and libavif on TW
- Prepare 15.5
- Use qt on 15.4+ (15.3 too old)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1666958400">- Chromium 107.0.5304.87 (boo#1204819)
  * CVE-2022-3723: Type Confusion in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1667995200">- Chromium 107.0.5304.110 (boo#1205221)
  * CVE-2022-3885: Use after free in V8
  * CVE-2022-3886: Use after free in Speech Recognition
  * CVE-2022-3887: Use after free in Web Workers
  * CVE-2022-3888: Use after free in WebCodecs
  * CVE-2022-3889: Type Confusion in V8
  * CVE-2022-3890: Heap buffer overflow in Crashpad</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1668686400">- Build with llvm15 on openSUSE:Backports:SLE-15-SP5 and up</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1669291200">- Chromium 107.0.5304.121 (boo#1205736)
  * CVE-2022-4135: Heap buffer overflow in GPU</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1669809600">- Chromium 108.0.5359.71 (boo#1205871):
  * CVE-2022-4174: Type Confusion in V8
  * CVE-2022-4175: Use after free in Camera Capture
  * CVE-2022-4176: Out of bounds write in Lacros Graphics
  * CVE-2022-4177: Use after free in Extensions
  * CVE-2022-4178: Use after free in Mojo
  * CVE-2022-4179: Use after free in Audio
  * CVE-2022-4180: Use after free in Mojo
  * CVE-2022-4181: Use after free in Forms
  * CVE-2022-4182: Inappropriate implementation in Fenced Frames
  * CVE-2022-4183: Insufficient policy enforcement in Popup Blocker
  * CVE-2022-4184: Insufficient policy enforcement in Autofill
  * CVE-2022-4185: Inappropriate implementation in Navigation
  * CVE-2022-4186: Insufficient validation of untrusted input in Downloads
  * CVE-2022-4187: Insufficient policy enforcement in DevTools
  * CVE-2022-4188: Insufficient validation of untrusted input in CORS
  * CVE-2022-4189: Insufficient policy enforcement in DevTools
  * CVE-2022-4190: Insufficient data validation in Directory
  * CVE-2022-4191: Use after free in Sign-In
  * CVE-2022-4192: Use after free in Live Caption
  * CVE-2022-4193: Insufficient policy enforcement in File System API
  * CVE-2022-4194: Use after free in Accessibility
  * CVE-2022-4195: Insufficient policy enforcement in Safe Browsing
- drop chromium-105-wayland-1.20.patch, upstream
- drop chromium-107-compiler.patch
- add chromium-108-compiler.patch
- drop chromium-98-EnumTable-crash.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1670068800">- Chromium 108.0.5359.94:
  * CVE-2022-4262: Type Confusion in V8 (boo#1205999)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1670414400">- Chromium 108.0.5359.98
  * Fix regression in computing &lt;select&gt; visibility</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1671019200">- Chromium 108.0.5359.124 (boo#1206403):
  * CVE-2022-4436: Use after free in Blink Media
  * CVE-2022-4437: Use after free in Mojo IPC
  * CVE-2022-4438: Use after free in Blink Frames
  * CVE-2022-4439: Use after free in Aura
  * CVE-2022-4440: Use after free in Profiles</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1671364800">- Add chromium-disable-GlobalMediaControlsCastStartStop.patch:
  disable GlobalMediaControlsCastStartStop to fix crashes
  occurring when interacting with the Media UI (bsc#1198124)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1673352000">- Chromium 109.0.5414.74:
  * Add support for MathML Core
  * CSS: Auto range support for font descriptors inside @font-face
    rule
  * CSS: Add lh length unit
  * CSS: Add hyphenate-limit-chars property
  * CSS: Snap border, outline and column-rule widths before layout
  * API: Improved screen sharing and web conferencing: hints for
    suppressing local audio playback, and Conditional Focus
  * API: HTTP response status code in the Resource Timing API
  * API: Same-site cross-origin prerendering triggered by the
    speculation rules API
  * Remove Event.path API
  * CVE-2023-0128: Use after free in Overview Mode
  * CVE-2023-0129: Heap buffer overflow in Network Service
  * CVE-2023-0130: Inappropriate implementation in Fullscreen API
  * CVE-2023-0131: Inappropriate implementation in iframe Sandbox
  * CVE-2023-0132: Inappropriate implementation in Permission prompts
  * CVE-2023-0133: Inappropriate implementation in Permission prompts
  * CVE-2023-0134: Use after free in Cart
  * CVE-2023-0135: Use after free in Cart
  * CVE-2023-0136: Inappropriate implementation in Fullscreen API
  * CVE-2023-0137: Heap buffer overflow in Platform Apps
  * CVE-2023-0138: Heap buffer overflow in libphonenumber
  * CVE-2023-0139: Insufficient validation of untrusted input in Downloads
  * CVE-2023-0140: Inappropriate implementation in File System API
  * CVE-2023-0141: Insufficient policy enforcement in CORS
  * Various fixes from internal audits, fuzzing and other initiatives
- drop patches:
  * chromium-gcc11.patch - not needed
  * chromium-107-system-zlib.patch - upstream
  * chromium-108-compiler.patch
- add patches:
  * chromium-109-compiler.patch
  * chromium-109-clang-lp154.patch</changelog>
</package>
<package pkgid="0e22ac90d9c756d6142c423bde782663d18d028559d5676520508fd7032f8762" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="109.0.5414.74" rel="bp154.2.58.1"/>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660651200">- Re-enable our version of chrome-wrapper
- Set no sandbox if root is being used (https://crbug.com/638180)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660824000">- Chromium 104.0.5112.101 (boo#1202509):
  * CVE-2022-2852: Use after free in FedCM
  * CVE-2022-2854: Use after free in SwiftShader
  * CVE-2022-2855: Use after free in ANGLE
  * CVE-2022-2857: Use after free in Blink
  * CVE-2022-2858: Use after free in Sign-In Flow
  * CVE-2022-2853: Heap buffer overflow in Downloads
  * CVE-2022-2856: Insufficient validation of untrusted input in Intents
  * CVE-2022-2859: Use after free in Chrome OS Shell
  * CVE-2022-2860: Insufficient policy enforcement in Cookies
  * CVE-2022-2861: Inappropriate implementation in Extensions API</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1661169600">- Fix quoting in chrome-wrapper, don't put cwd on LD_LIBRARY_PATH</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1662033600">- Update chromium-symbolic.svg: this fixes bsc#1202403.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1662638400">- Chromium 105.0.5195.102 (boo#1203102):
  * CVE-2022-3075: Insufficient data validation in Mojo
- Chromium 105.0.5195.52 (boo#1202964):
  * CVE-2022-3038: Use after free in Network Service
  * CVE-2022-3039: Use after free in WebSQL
  * CVE-2022-3040: Use after free in Layout
  * CVE-2022-3041: Use after free in WebSQL
  * CVE-2022-3042: Use after free in PhoneHub
  * CVE-2022-3043: Heap buffer overflow in Screen Capture
  * CVE-2022-3044: Inappropriate implementation in Site Isolation
  * CVE-2022-3045: Insufficient validation of untrusted input in V8
  * CVE-2022-3046: Use after free in Browser Tag
  * CVE-2022-3071: Use after free in Tab Strip
  * CVE-2022-3047: Insufficient policy enforcement in Extensions API
  * CVE-2022-3048: Inappropriate implementation in Chrome OS lockscreen
  * CVE-2022-3049: Use after free in SplitScreen
  * CVE-2022-3050: Heap buffer overflow in WebUI
  * CVE-2022-3051: Heap buffer overflow in Exosphere
  * CVE-2022-3052: Heap buffer overflow in Window Manager
  * CVE-2022-3053: Inappropriate implementation in Pointer Lock
  * CVE-2022-3054: Insufficient policy enforcement in DevTools
  * CVE-2022-3055: Use after free in Passwords
  * CVE-2022-3056: Insufficient policy enforcement in Content Security Policy
  * CVE-2022-3057: Inappropriate implementation in iframe Sandbox
  * CVE-2022-3058: Use after free in Sign-In Flow
- Added patches:
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Bitmap-include.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-wayland-1.20.patch
  * chromium-105-compiler.patch
- Removed patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-78-protobuf-RepeatedPtrField-export.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663156800">- Chromium 105.0.5195.127 (boo#1203419):
  * CVE-2022-3195: Out of bounds write in Storage
  * CVE-2022-3196: Use after free in PDF
  * CVE-2022-3197: Use after free in PDF
  * CVE-2022-3198: Use after free in PDF
  * CVE-2022-3199: Use after free in Frames
  * CVE-2022-3200: Heap buffer overflow in Internals
  * CVE-2022-3201: Insufficient validation of untrusted input in DevTools
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1664625600">- Chromium 106.0.5249.91 (boo#1203808):
  * CVE-2022-3370: Use after free in Custom Elements
  * CVE-2022-3373: Out of bounds write in V8
- includes changes from 106.0.5249.61:
  * CVE-2022-3304: Use after free in CSS
  * CVE-2022-3201: Insufficient validation of untrusted input in Developer Tools
  * CVE-2022-3305: Use after free in Survey
  * CVE-2022-3306: Use after free in Survey
  * CVE-2022-3307: Use after free in Media
  * CVE-2022-3308: Insufficient policy enforcement in Developer Tools
  * CVE-2022-3309: Use after free in Assistant
  * CVE-2022-3310: Insufficient policy enforcement in Custom Tabs
  * CVE-2022-3311: Use after free in Import
  * CVE-2022-3312: Insufficient validation of untrusted input in VPN
  * CVE-2022-3313: Incorrect security UI in Full Screen
  * CVE-2022-3314: Use after free in Logging
  * CVE-2022-3315: Type confusion in Blink
  * CVE-2022-3316: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-3317: Insufficient validation of untrusted input in Intents
  * CVE-2022-3318: Use after free in ChromeOS Notifications
- drop patches:
  * chromium-104-tflite-system-zlib.patch
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
- add patches
  * chromium-106-ffmpeg-duration.patch
  * chromium-106-AutofillPopupControllerImpl-namespace.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1665057600">- Chromium 106.0.5249.103:
  * fix possible cache manager deadlock
  * Fix right-click menu appearing unexpectedly affecting screen
    readers</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1665576000">- Chromium 106.0.5249.119 (boo#1204223)
  * CVE-2022-3445: Use after free in Skia
  * CVE-2022-3446: Heap buffer overflow in WebSQL
  * CVE-2022-3447: Inappropriate implementation in Custom Tabs
  * CVE-2022-3448: Use after free in Permissions API
  * CVE-2022-3449: Use after free in Safe Browsing
  * CVE-2022-3450: Use after free in Peer Connection</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1666872000">- Chromium 107.0.5304.68 (boo#1204732)
  * CVE-2022-3652: Type Confusion in V8
  * CVE-2022-3653: Heap buffer overflow in Vulkan
  * CVE-2022-3654: Use after free in Layout
  * CVE-2022-3655: Heap buffer overflow in Media Galleries
  * CVE-2022-3656: Insufficient data validation in File System
  * CVE-2022-3657: Use after free in Extensions
  * CVE-2022-3658: Use after free in Feedback service on Chrome OS
  * CVE-2022-3659: Use after free in Accessibility
  * CVE-2022-3660: Inappropriate implementation in Full screen mode
  * CVE-2022-3661: Insufficient data validation in Extensions
- Added patches:
  * chromium-107-compiler.patch
  * chromium-107-system-zlib.patch
- Removed patches:
  * chromium-105-compiler.patch
  * chromium-105-Bitmap-include.patch
  * chromium-106-AutofillPopupControllerImpl-namespace.patch
- Unbundle libyuv and libavif on TW
- Prepare 15.5
- Use qt on 15.4+ (15.3 too old)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1666958400">- Chromium 107.0.5304.87 (boo#1204819)
  * CVE-2022-3723: Type Confusion in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1667995200">- Chromium 107.0.5304.110 (boo#1205221)
  * CVE-2022-3885: Use after free in V8
  * CVE-2022-3886: Use after free in Speech Recognition
  * CVE-2022-3887: Use after free in Web Workers
  * CVE-2022-3888: Use after free in WebCodecs
  * CVE-2022-3889: Type Confusion in V8
  * CVE-2022-3890: Heap buffer overflow in Crashpad</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1668686400">- Build with llvm15 on openSUSE:Backports:SLE-15-SP5 and up</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1669291200">- Chromium 107.0.5304.121 (boo#1205736)
  * CVE-2022-4135: Heap buffer overflow in GPU</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1669809600">- Chromium 108.0.5359.71 (boo#1205871):
  * CVE-2022-4174: Type Confusion in V8
  * CVE-2022-4175: Use after free in Camera Capture
  * CVE-2022-4176: Out of bounds write in Lacros Graphics
  * CVE-2022-4177: Use after free in Extensions
  * CVE-2022-4178: Use after free in Mojo
  * CVE-2022-4179: Use after free in Audio
  * CVE-2022-4180: Use after free in Mojo
  * CVE-2022-4181: Use after free in Forms
  * CVE-2022-4182: Inappropriate implementation in Fenced Frames
  * CVE-2022-4183: Insufficient policy enforcement in Popup Blocker
  * CVE-2022-4184: Insufficient policy enforcement in Autofill
  * CVE-2022-4185: Inappropriate implementation in Navigation
  * CVE-2022-4186: Insufficient validation of untrusted input in Downloads
  * CVE-2022-4187: Insufficient policy enforcement in DevTools
  * CVE-2022-4188: Insufficient validation of untrusted input in CORS
  * CVE-2022-4189: Insufficient policy enforcement in DevTools
  * CVE-2022-4190: Insufficient data validation in Directory
  * CVE-2022-4191: Use after free in Sign-In
  * CVE-2022-4192: Use after free in Live Caption
  * CVE-2022-4193: Insufficient policy enforcement in File System API
  * CVE-2022-4194: Use after free in Accessibility
  * CVE-2022-4195: Insufficient policy enforcement in Safe Browsing
- drop chromium-105-wayland-1.20.patch, upstream
- drop chromium-107-compiler.patch
- add chromium-108-compiler.patch
- drop chromium-98-EnumTable-crash.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1670068800">- Chromium 108.0.5359.94:
  * CVE-2022-4262: Type Confusion in V8 (boo#1205999)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1670414400">- Chromium 108.0.5359.98
  * Fix regression in computing &lt;select&gt; visibility</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1671019200">- Chromium 108.0.5359.124 (boo#1206403):
  * CVE-2022-4436: Use after free in Blink Media
  * CVE-2022-4437: Use after free in Mojo IPC
  * CVE-2022-4438: Use after free in Blink Frames
  * CVE-2022-4439: Use after free in Aura
  * CVE-2022-4440: Use after free in Profiles</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1671364800">- Add chromium-disable-GlobalMediaControlsCastStartStop.patch:
  disable GlobalMediaControlsCastStartStop to fix crashes
  occurring when interacting with the Media UI (bsc#1198124)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1673352000">- Chromium 109.0.5414.74:
  * Add support for MathML Core
  * CSS: Auto range support for font descriptors inside @font-face
    rule
  * CSS: Add lh length unit
  * CSS: Add hyphenate-limit-chars property
  * CSS: Snap border, outline and column-rule widths before layout
  * API: Improved screen sharing and web conferencing: hints for
    suppressing local audio playback, and Conditional Focus
  * API: HTTP response status code in the Resource Timing API
  * API: Same-site cross-origin prerendering triggered by the
    speculation rules API
  * Remove Event.path API
  * CVE-2023-0128: Use after free in Overview Mode
  * CVE-2023-0129: Heap buffer overflow in Network Service
  * CVE-2023-0130: Inappropriate implementation in Fullscreen API
  * CVE-2023-0131: Inappropriate implementation in iframe Sandbox
  * CVE-2023-0132: Inappropriate implementation in Permission prompts
  * CVE-2023-0133: Inappropriate implementation in Permission prompts
  * CVE-2023-0134: Use after free in Cart
  * CVE-2023-0135: Use after free in Cart
  * CVE-2023-0136: Inappropriate implementation in Fullscreen API
  * CVE-2023-0137: Heap buffer overflow in Platform Apps
  * CVE-2023-0138: Heap buffer overflow in libphonenumber
  * CVE-2023-0139: Insufficient validation of untrusted input in Downloads
  * CVE-2023-0140: Inappropriate implementation in File System API
  * CVE-2023-0141: Insufficient policy enforcement in CORS
  * Various fixes from internal audits, fuzzing and other initiatives
- drop patches:
  * chromium-gcc11.patch - not needed
  * chromium-107-system-zlib.patch - upstream
  * chromium-108-compiler.patch
- add patches:
  * chromium-109-compiler.patch
  * chromium-109-clang-lp154.patch</changelog>
</package>
<package pkgid="6b774bd46c8960340120084203616c98f30ff72e47854f73f6552dec61905937" name="chromedriver" arch="aarch64">
  <version epoch="0" ver="109.0.5414.74" rel="bp154.2.61.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660824000">- Chromium 104.0.5112.101 (boo#1202509):
  * CVE-2022-2852: Use after free in FedCM
  * CVE-2022-2854: Use after free in SwiftShader
  * CVE-2022-2855: Use after free in ANGLE
  * CVE-2022-2857: Use after free in Blink
  * CVE-2022-2858: Use after free in Sign-In Flow
  * CVE-2022-2853: Heap buffer overflow in Downloads
  * CVE-2022-2856: Insufficient validation of untrusted input in Intents
  * CVE-2022-2859: Use after free in Chrome OS Shell
  * CVE-2022-2860: Insufficient policy enforcement in Cookies
  * CVE-2022-2861: Inappropriate implementation in Extensions API</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1661169600">- Fix quoting in chrome-wrapper, don't put cwd on LD_LIBRARY_PATH</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1662033600">- Update chromium-symbolic.svg: this fixes bsc#1202403.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1662638400">- Chromium 105.0.5195.102 (boo#1203102):
  * CVE-2022-3075: Insufficient data validation in Mojo
- Chromium 105.0.5195.52 (boo#1202964):
  * CVE-2022-3038: Use after free in Network Service
  * CVE-2022-3039: Use after free in WebSQL
  * CVE-2022-3040: Use after free in Layout
  * CVE-2022-3041: Use after free in WebSQL
  * CVE-2022-3042: Use after free in PhoneHub
  * CVE-2022-3043: Heap buffer overflow in Screen Capture
  * CVE-2022-3044: Inappropriate implementation in Site Isolation
  * CVE-2022-3045: Insufficient validation of untrusted input in V8
  * CVE-2022-3046: Use after free in Browser Tag
  * CVE-2022-3071: Use after free in Tab Strip
  * CVE-2022-3047: Insufficient policy enforcement in Extensions API
  * CVE-2022-3048: Inappropriate implementation in Chrome OS lockscreen
  * CVE-2022-3049: Use after free in SplitScreen
  * CVE-2022-3050: Heap buffer overflow in WebUI
  * CVE-2022-3051: Heap buffer overflow in Exosphere
  * CVE-2022-3052: Heap buffer overflow in Window Manager
  * CVE-2022-3053: Inappropriate implementation in Pointer Lock
  * CVE-2022-3054: Insufficient policy enforcement in DevTools
  * CVE-2022-3055: Use after free in Passwords
  * CVE-2022-3056: Insufficient policy enforcement in Content Security Policy
  * CVE-2022-3057: Inappropriate implementation in iframe Sandbox
  * CVE-2022-3058: Use after free in Sign-In Flow
- Added patches:
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Bitmap-include.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-wayland-1.20.patch
  * chromium-105-compiler.patch
- Removed patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-78-protobuf-RepeatedPtrField-export.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663156800">- Chromium 105.0.5195.127 (boo#1203419):
  * CVE-2022-3195: Out of bounds write in Storage
  * CVE-2022-3196: Use after free in PDF
  * CVE-2022-3197: Use after free in PDF
  * CVE-2022-3198: Use after free in PDF
  * CVE-2022-3199: Use after free in Frames
  * CVE-2022-3200: Heap buffer overflow in Internals
  * CVE-2022-3201: Insufficient validation of untrusted input in DevTools
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1664625600">- Chromium 106.0.5249.91 (boo#1203808):
  * CVE-2022-3370: Use after free in Custom Elements
  * CVE-2022-3373: Out of bounds write in V8
- includes changes from 106.0.5249.61:
  * CVE-2022-3304: Use after free in CSS
  * CVE-2022-3201: Insufficient validation of untrusted input in Developer Tools
  * CVE-2022-3305: Use after free in Survey
  * CVE-2022-3306: Use after free in Survey
  * CVE-2022-3307: Use after free in Media
  * CVE-2022-3308: Insufficient policy enforcement in Developer Tools
  * CVE-2022-3309: Use after free in Assistant
  * CVE-2022-3310: Insufficient policy enforcement in Custom Tabs
  * CVE-2022-3311: Use after free in Import
  * CVE-2022-3312: Insufficient validation of untrusted input in VPN
  * CVE-2022-3313: Incorrect security UI in Full Screen
  * CVE-2022-3314: Use after free in Logging
  * CVE-2022-3315: Type confusion in Blink
  * CVE-2022-3316: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-3317: Insufficient validation of untrusted input in Intents
  * CVE-2022-3318: Use after free in ChromeOS Notifications
- drop patches:
  * chromium-104-tflite-system-zlib.patch
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
- add patches
  * chromium-106-ffmpeg-duration.patch
  * chromium-106-AutofillPopupControllerImpl-namespace.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1665057600">- Chromium 106.0.5249.103:
  * fix possible cache manager deadlock
  * Fix right-click menu appearing unexpectedly affecting screen
    readers</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1665576000">- Chromium 106.0.5249.119 (boo#1204223)
  * CVE-2022-3445: Use after free in Skia
  * CVE-2022-3446: Heap buffer overflow in WebSQL
  * CVE-2022-3447: Inappropriate implementation in Custom Tabs
  * CVE-2022-3448: Use after free in Permissions API
  * CVE-2022-3449: Use after free in Safe Browsing
  * CVE-2022-3450: Use after free in Peer Connection</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1666872000">- Chromium 107.0.5304.68 (boo#1204732)
  * CVE-2022-3652: Type Confusion in V8
  * CVE-2022-3653: Heap buffer overflow in Vulkan
  * CVE-2022-3654: Use after free in Layout
  * CVE-2022-3655: Heap buffer overflow in Media Galleries
  * CVE-2022-3656: Insufficient data validation in File System
  * CVE-2022-3657: Use after free in Extensions
  * CVE-2022-3658: Use after free in Feedback service on Chrome OS
  * CVE-2022-3659: Use after free in Accessibility
  * CVE-2022-3660: Inappropriate implementation in Full screen mode
  * CVE-2022-3661: Insufficient data validation in Extensions
- Added patches:
  * chromium-107-compiler.patch
  * chromium-107-system-zlib.patch
- Removed patches:
  * chromium-105-compiler.patch
  * chromium-105-Bitmap-include.patch
  * chromium-106-AutofillPopupControllerImpl-namespace.patch
- Unbundle libyuv and libavif on TW
- Prepare 15.5
- Use qt on 15.4+ (15.3 too old)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1666958400">- Chromium 107.0.5304.87 (boo#1204819)
  * CVE-2022-3723: Type Confusion in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1667995200">- Chromium 107.0.5304.110 (boo#1205221)
  * CVE-2022-3885: Use after free in V8
  * CVE-2022-3886: Use after free in Speech Recognition
  * CVE-2022-3887: Use after free in Web Workers
  * CVE-2022-3888: Use after free in WebCodecs
  * CVE-2022-3889: Type Confusion in V8
  * CVE-2022-3890: Heap buffer overflow in Crashpad</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1668686400">- Build with llvm15 on openSUSE:Backports:SLE-15-SP5 and up</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1669291200">- Chromium 107.0.5304.121 (boo#1205736)
  * CVE-2022-4135: Heap buffer overflow in GPU</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1669809600">- Chromium 108.0.5359.71 (boo#1205871):
  * CVE-2022-4174: Type Confusion in V8
  * CVE-2022-4175: Use after free in Camera Capture
  * CVE-2022-4176: Out of bounds write in Lacros Graphics
  * CVE-2022-4177: Use after free in Extensions
  * CVE-2022-4178: Use after free in Mojo
  * CVE-2022-4179: Use after free in Audio
  * CVE-2022-4180: Use after free in Mojo
  * CVE-2022-4181: Use after free in Forms
  * CVE-2022-4182: Inappropriate implementation in Fenced Frames
  * CVE-2022-4183: Insufficient policy enforcement in Popup Blocker
  * CVE-2022-4184: Insufficient policy enforcement in Autofill
  * CVE-2022-4185: Inappropriate implementation in Navigation
  * CVE-2022-4186: Insufficient validation of untrusted input in Downloads
  * CVE-2022-4187: Insufficient policy enforcement in DevTools
  * CVE-2022-4188: Insufficient validation of untrusted input in CORS
  * CVE-2022-4189: Insufficient policy enforcement in DevTools
  * CVE-2022-4190: Insufficient data validation in Directory
  * CVE-2022-4191: Use after free in Sign-In
  * CVE-2022-4192: Use after free in Live Caption
  * CVE-2022-4193: Insufficient policy enforcement in File System API
  * CVE-2022-4194: Use after free in Accessibility
  * CVE-2022-4195: Insufficient policy enforcement in Safe Browsing
- drop chromium-105-wayland-1.20.patch, upstream
- drop chromium-107-compiler.patch
- add chromium-108-compiler.patch
- drop chromium-98-EnumTable-crash.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1670068800">- Chromium 108.0.5359.94:
  * CVE-2022-4262: Type Confusion in V8 (boo#1205999)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1670414400">- Chromium 108.0.5359.98
  * Fix regression in computing &lt;select&gt; visibility</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1671019200">- Chromium 108.0.5359.124 (boo#1206403):
  * CVE-2022-4436: Use after free in Blink Media
  * CVE-2022-4437: Use after free in Mojo IPC
  * CVE-2022-4438: Use after free in Blink Frames
  * CVE-2022-4439: Use after free in Aura
  * CVE-2022-4440: Use after free in Profiles</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1671364800">- Add chromium-disable-GlobalMediaControlsCastStartStop.patch:
  disable GlobalMediaControlsCastStartStop to fix crashes
  occurring when interacting with the Media UI (bsc#1198124)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1673352000">- Chromium 109.0.5414.74:
  * Add support for MathML Core
  * CSS: Auto range support for font descriptors inside @font-face
    rule
  * CSS: Add lh length unit
  * CSS: Add hyphenate-limit-chars property
  * CSS: Snap border, outline and column-rule widths before layout
  * API: Improved screen sharing and web conferencing: hints for
    suppressing local audio playback, and Conditional Focus
  * API: HTTP response status code in the Resource Timing API
  * API: Same-site cross-origin prerendering triggered by the
    speculation rules API
  * Remove Event.path API
  * CVE-2023-0128: Use after free in Overview Mode
  * CVE-2023-0129: Heap buffer overflow in Network Service
  * CVE-2023-0130: Inappropriate implementation in Fullscreen API
  * CVE-2023-0131: Inappropriate implementation in iframe Sandbox
  * CVE-2023-0132: Inappropriate implementation in Permission prompts
  * CVE-2023-0133: Inappropriate implementation in Permission prompts
  * CVE-2023-0134: Use after free in Cart
  * CVE-2023-0135: Use after free in Cart
  * CVE-2023-0136: Inappropriate implementation in Fullscreen API
  * CVE-2023-0137: Heap buffer overflow in Platform Apps
  * CVE-2023-0138: Heap buffer overflow in libphonenumber
  * CVE-2023-0139: Insufficient validation of untrusted input in Downloads
  * CVE-2023-0140: Inappropriate implementation in File System API
  * CVE-2023-0141: Insufficient policy enforcement in CORS
  * Various fixes from internal audits, fuzzing and other initiatives
- drop patches:
  * chromium-gcc11.patch - not needed
  * chromium-107-system-zlib.patch - upstream
  * chromium-108-compiler.patch
- add patches:
  * chromium-109-compiler.patch
  * chromium-109-clang-lp154.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1673956800">- Added patches:
  * chromium-icu72-1.patch: ensure TextCodecCJK doesn't conflict
    with system icu (bsc#1207147)
  * chromium-icu72-2.patch: align default characters for old icu
    with that of ICU 72
  * chromium-icu72-3.patch: make V8 aware of space in ICU 72 time
    format</changelog>
</package>
<package pkgid="a80b4ca304541427e7d6b61c00ab35a2ed29b2b0f2e38565a724fa33cb862c24" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="109.0.5414.74" rel="bp154.2.61.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660824000">- Chromium 104.0.5112.101 (boo#1202509):
  * CVE-2022-2852: Use after free in FedCM
  * CVE-2022-2854: Use after free in SwiftShader
  * CVE-2022-2855: Use after free in ANGLE
  * CVE-2022-2857: Use after free in Blink
  * CVE-2022-2858: Use after free in Sign-In Flow
  * CVE-2022-2853: Heap buffer overflow in Downloads
  * CVE-2022-2856: Insufficient validation of untrusted input in Intents
  * CVE-2022-2859: Use after free in Chrome OS Shell
  * CVE-2022-2860: Insufficient policy enforcement in Cookies
  * CVE-2022-2861: Inappropriate implementation in Extensions API</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1661169600">- Fix quoting in chrome-wrapper, don't put cwd on LD_LIBRARY_PATH</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1662033600">- Update chromium-symbolic.svg: this fixes bsc#1202403.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1662638400">- Chromium 105.0.5195.102 (boo#1203102):
  * CVE-2022-3075: Insufficient data validation in Mojo
- Chromium 105.0.5195.52 (boo#1202964):
  * CVE-2022-3038: Use after free in Network Service
  * CVE-2022-3039: Use after free in WebSQL
  * CVE-2022-3040: Use after free in Layout
  * CVE-2022-3041: Use after free in WebSQL
  * CVE-2022-3042: Use after free in PhoneHub
  * CVE-2022-3043: Heap buffer overflow in Screen Capture
  * CVE-2022-3044: Inappropriate implementation in Site Isolation
  * CVE-2022-3045: Insufficient validation of untrusted input in V8
  * CVE-2022-3046: Use after free in Browser Tag
  * CVE-2022-3071: Use after free in Tab Strip
  * CVE-2022-3047: Insufficient policy enforcement in Extensions API
  * CVE-2022-3048: Inappropriate implementation in Chrome OS lockscreen
  * CVE-2022-3049: Use after free in SplitScreen
  * CVE-2022-3050: Heap buffer overflow in WebUI
  * CVE-2022-3051: Heap buffer overflow in Exosphere
  * CVE-2022-3052: Heap buffer overflow in Window Manager
  * CVE-2022-3053: Inappropriate implementation in Pointer Lock
  * CVE-2022-3054: Insufficient policy enforcement in DevTools
  * CVE-2022-3055: Use after free in Passwords
  * CVE-2022-3056: Insufficient policy enforcement in Content Security Policy
  * CVE-2022-3057: Inappropriate implementation in iframe Sandbox
  * CVE-2022-3058: Use after free in Sign-In Flow
- Added patches:
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Bitmap-include.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-wayland-1.20.patch
  * chromium-105-compiler.patch
- Removed patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-78-protobuf-RepeatedPtrField-export.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663156800">- Chromium 105.0.5195.127 (boo#1203419):
  * CVE-2022-3195: Out of bounds write in Storage
  * CVE-2022-3196: Use after free in PDF
  * CVE-2022-3197: Use after free in PDF
  * CVE-2022-3198: Use after free in PDF
  * CVE-2022-3199: Use after free in Frames
  * CVE-2022-3200: Heap buffer overflow in Internals
  * CVE-2022-3201: Insufficient validation of untrusted input in DevTools
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1664625600">- Chromium 106.0.5249.91 (boo#1203808):
  * CVE-2022-3370: Use after free in Custom Elements
  * CVE-2022-3373: Out of bounds write in V8
- includes changes from 106.0.5249.61:
  * CVE-2022-3304: Use after free in CSS
  * CVE-2022-3201: Insufficient validation of untrusted input in Developer Tools
  * CVE-2022-3305: Use after free in Survey
  * CVE-2022-3306: Use after free in Survey
  * CVE-2022-3307: Use after free in Media
  * CVE-2022-3308: Insufficient policy enforcement in Developer Tools
  * CVE-2022-3309: Use after free in Assistant
  * CVE-2022-3310: Insufficient policy enforcement in Custom Tabs
  * CVE-2022-3311: Use after free in Import
  * CVE-2022-3312: Insufficient validation of untrusted input in VPN
  * CVE-2022-3313: Incorrect security UI in Full Screen
  * CVE-2022-3314: Use after free in Logging
  * CVE-2022-3315: Type confusion in Blink
  * CVE-2022-3316: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-3317: Insufficient validation of untrusted input in Intents
  * CVE-2022-3318: Use after free in ChromeOS Notifications
- drop patches:
  * chromium-104-tflite-system-zlib.patch
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
- add patches
  * chromium-106-ffmpeg-duration.patch
  * chromium-106-AutofillPopupControllerImpl-namespace.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1665057600">- Chromium 106.0.5249.103:
  * fix possible cache manager deadlock
  * Fix right-click menu appearing unexpectedly affecting screen
    readers</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1665576000">- Chromium 106.0.5249.119 (boo#1204223)
  * CVE-2022-3445: Use after free in Skia
  * CVE-2022-3446: Heap buffer overflow in WebSQL
  * CVE-2022-3447: Inappropriate implementation in Custom Tabs
  * CVE-2022-3448: Use after free in Permissions API
  * CVE-2022-3449: Use after free in Safe Browsing
  * CVE-2022-3450: Use after free in Peer Connection</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1666872000">- Chromium 107.0.5304.68 (boo#1204732)
  * CVE-2022-3652: Type Confusion in V8
  * CVE-2022-3653: Heap buffer overflow in Vulkan
  * CVE-2022-3654: Use after free in Layout
  * CVE-2022-3655: Heap buffer overflow in Media Galleries
  * CVE-2022-3656: Insufficient data validation in File System
  * CVE-2022-3657: Use after free in Extensions
  * CVE-2022-3658: Use after free in Feedback service on Chrome OS
  * CVE-2022-3659: Use after free in Accessibility
  * CVE-2022-3660: Inappropriate implementation in Full screen mode
  * CVE-2022-3661: Insufficient data validation in Extensions
- Added patches:
  * chromium-107-compiler.patch
  * chromium-107-system-zlib.patch
- Removed patches:
  * chromium-105-compiler.patch
  * chromium-105-Bitmap-include.patch
  * chromium-106-AutofillPopupControllerImpl-namespace.patch
- Unbundle libyuv and libavif on TW
- Prepare 15.5
- Use qt on 15.4+ (15.3 too old)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1666958400">- Chromium 107.0.5304.87 (boo#1204819)
  * CVE-2022-3723: Type Confusion in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1667995200">- Chromium 107.0.5304.110 (boo#1205221)
  * CVE-2022-3885: Use after free in V8
  * CVE-2022-3886: Use after free in Speech Recognition
  * CVE-2022-3887: Use after free in Web Workers
  * CVE-2022-3888: Use after free in WebCodecs
  * CVE-2022-3889: Type Confusion in V8
  * CVE-2022-3890: Heap buffer overflow in Crashpad</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1668686400">- Build with llvm15 on openSUSE:Backports:SLE-15-SP5 and up</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1669291200">- Chromium 107.0.5304.121 (boo#1205736)
  * CVE-2022-4135: Heap buffer overflow in GPU</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1669809600">- Chromium 108.0.5359.71 (boo#1205871):
  * CVE-2022-4174: Type Confusion in V8
  * CVE-2022-4175: Use after free in Camera Capture
  * CVE-2022-4176: Out of bounds write in Lacros Graphics
  * CVE-2022-4177: Use after free in Extensions
  * CVE-2022-4178: Use after free in Mojo
  * CVE-2022-4179: Use after free in Audio
  * CVE-2022-4180: Use after free in Mojo
  * CVE-2022-4181: Use after free in Forms
  * CVE-2022-4182: Inappropriate implementation in Fenced Frames
  * CVE-2022-4183: Insufficient policy enforcement in Popup Blocker
  * CVE-2022-4184: Insufficient policy enforcement in Autofill
  * CVE-2022-4185: Inappropriate implementation in Navigation
  * CVE-2022-4186: Insufficient validation of untrusted input in Downloads
  * CVE-2022-4187: Insufficient policy enforcement in DevTools
  * CVE-2022-4188: Insufficient validation of untrusted input in CORS
  * CVE-2022-4189: Insufficient policy enforcement in DevTools
  * CVE-2022-4190: Insufficient data validation in Directory
  * CVE-2022-4191: Use after free in Sign-In
  * CVE-2022-4192: Use after free in Live Caption
  * CVE-2022-4193: Insufficient policy enforcement in File System API
  * CVE-2022-4194: Use after free in Accessibility
  * CVE-2022-4195: Insufficient policy enforcement in Safe Browsing
- drop chromium-105-wayland-1.20.patch, upstream
- drop chromium-107-compiler.patch
- add chromium-108-compiler.patch
- drop chromium-98-EnumTable-crash.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1670068800">- Chromium 108.0.5359.94:
  * CVE-2022-4262: Type Confusion in V8 (boo#1205999)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1670414400">- Chromium 108.0.5359.98
  * Fix regression in computing &lt;select&gt; visibility</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1671019200">- Chromium 108.0.5359.124 (boo#1206403):
  * CVE-2022-4436: Use after free in Blink Media
  * CVE-2022-4437: Use after free in Mojo IPC
  * CVE-2022-4438: Use after free in Blink Frames
  * CVE-2022-4439: Use after free in Aura
  * CVE-2022-4440: Use after free in Profiles</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1671364800">- Add chromium-disable-GlobalMediaControlsCastStartStop.patch:
  disable GlobalMediaControlsCastStartStop to fix crashes
  occurring when interacting with the Media UI (bsc#1198124)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1673352000">- Chromium 109.0.5414.74:
  * Add support for MathML Core
  * CSS: Auto range support for font descriptors inside @font-face
    rule
  * CSS: Add lh length unit
  * CSS: Add hyphenate-limit-chars property
  * CSS: Snap border, outline and column-rule widths before layout
  * API: Improved screen sharing and web conferencing: hints for
    suppressing local audio playback, and Conditional Focus
  * API: HTTP response status code in the Resource Timing API
  * API: Same-site cross-origin prerendering triggered by the
    speculation rules API
  * Remove Event.path API
  * CVE-2023-0128: Use after free in Overview Mode
  * CVE-2023-0129: Heap buffer overflow in Network Service
  * CVE-2023-0130: Inappropriate implementation in Fullscreen API
  * CVE-2023-0131: Inappropriate implementation in iframe Sandbox
  * CVE-2023-0132: Inappropriate implementation in Permission prompts
  * CVE-2023-0133: Inappropriate implementation in Permission prompts
  * CVE-2023-0134: Use after free in Cart
  * CVE-2023-0135: Use after free in Cart
  * CVE-2023-0136: Inappropriate implementation in Fullscreen API
  * CVE-2023-0137: Heap buffer overflow in Platform Apps
  * CVE-2023-0138: Heap buffer overflow in libphonenumber
  * CVE-2023-0139: Insufficient validation of untrusted input in Downloads
  * CVE-2023-0140: Inappropriate implementation in File System API
  * CVE-2023-0141: Insufficient policy enforcement in CORS
  * Various fixes from internal audits, fuzzing and other initiatives
- drop patches:
  * chromium-gcc11.patch - not needed
  * chromium-107-system-zlib.patch - upstream
  * chromium-108-compiler.patch
- add patches:
  * chromium-109-compiler.patch
  * chromium-109-clang-lp154.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1673956800">- Added patches:
  * chromium-icu72-1.patch: ensure TextCodecCJK doesn't conflict
    with system icu (bsc#1207147)
  * chromium-icu72-2.patch: align default characters for old icu
    with that of ICU 72
  * chromium-icu72-3.patch: make V8 aware of space in ICU 72 time
    format</changelog>
</package>
<package pkgid="6f43b8bfc4a0c475d4cd5126f1b04d77be7b1aafa69825220ac3f4073111def7" name="chromedriver" arch="aarch64">
  <version epoch="0" ver="110.0.5481.77" rel="bp154.2.67.1"/>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1662033600">- Update chromium-symbolic.svg: this fixes bsc#1202403.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1662638400">- Chromium 105.0.5195.102 (boo#1203102):
  * CVE-2022-3075: Insufficient data validation in Mojo
- Chromium 105.0.5195.52 (boo#1202964):
  * CVE-2022-3038: Use after free in Network Service
  * CVE-2022-3039: Use after free in WebSQL
  * CVE-2022-3040: Use after free in Layout
  * CVE-2022-3041: Use after free in WebSQL
  * CVE-2022-3042: Use after free in PhoneHub
  * CVE-2022-3043: Heap buffer overflow in Screen Capture
  * CVE-2022-3044: Inappropriate implementation in Site Isolation
  * CVE-2022-3045: Insufficient validation of untrusted input in V8
  * CVE-2022-3046: Use after free in Browser Tag
  * CVE-2022-3071: Use after free in Tab Strip
  * CVE-2022-3047: Insufficient policy enforcement in Extensions API
  * CVE-2022-3048: Inappropriate implementation in Chrome OS lockscreen
  * CVE-2022-3049: Use after free in SplitScreen
  * CVE-2022-3050: Heap buffer overflow in WebUI
  * CVE-2022-3051: Heap buffer overflow in Exosphere
  * CVE-2022-3052: Heap buffer overflow in Window Manager
  * CVE-2022-3053: Inappropriate implementation in Pointer Lock
  * CVE-2022-3054: Insufficient policy enforcement in DevTools
  * CVE-2022-3055: Use after free in Passwords
  * CVE-2022-3056: Insufficient policy enforcement in Content Security Policy
  * CVE-2022-3057: Inappropriate implementation in iframe Sandbox
  * CVE-2022-3058: Use after free in Sign-In Flow
- Added patches:
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Bitmap-include.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-wayland-1.20.patch
  * chromium-105-compiler.patch
- Removed patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-78-protobuf-RepeatedPtrField-export.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663156800">- Chromium 105.0.5195.127 (boo#1203419):
  * CVE-2022-3195: Out of bounds write in Storage
  * CVE-2022-3196: Use after free in PDF
  * CVE-2022-3197: Use after free in PDF
  * CVE-2022-3198: Use after free in PDF
  * CVE-2022-3199: Use after free in Frames
  * CVE-2022-3200: Heap buffer overflow in Internals
  * CVE-2022-3201: Insufficient validation of untrusted input in DevTools
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1664625600">- Chromium 106.0.5249.91 (boo#1203808):
  * CVE-2022-3370: Use after free in Custom Elements
  * CVE-2022-3373: Out of bounds write in V8
- includes changes from 106.0.5249.61:
  * CVE-2022-3304: Use after free in CSS
  * CVE-2022-3201: Insufficient validation of untrusted input in Developer Tools
  * CVE-2022-3305: Use after free in Survey
  * CVE-2022-3306: Use after free in Survey
  * CVE-2022-3307: Use after free in Media
  * CVE-2022-3308: Insufficient policy enforcement in Developer Tools
  * CVE-2022-3309: Use after free in Assistant
  * CVE-2022-3310: Insufficient policy enforcement in Custom Tabs
  * CVE-2022-3311: Use after free in Import
  * CVE-2022-3312: Insufficient validation of untrusted input in VPN
  * CVE-2022-3313: Incorrect security UI in Full Screen
  * CVE-2022-3314: Use after free in Logging
  * CVE-2022-3315: Type confusion in Blink
  * CVE-2022-3316: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-3317: Insufficient validation of untrusted input in Intents
  * CVE-2022-3318: Use after free in ChromeOS Notifications
- drop patches:
  * chromium-104-tflite-system-zlib.patch
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
- add patches
  * chromium-106-ffmpeg-duration.patch
  * chromium-106-AutofillPopupControllerImpl-namespace.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1665057600">- Chromium 106.0.5249.103:
  * fix possible cache manager deadlock
  * Fix right-click menu appearing unexpectedly affecting screen
    readers</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1665576000">- Chromium 106.0.5249.119 (boo#1204223)
  * CVE-2022-3445: Use after free in Skia
  * CVE-2022-3446: Heap buffer overflow in WebSQL
  * CVE-2022-3447: Inappropriate implementation in Custom Tabs
  * CVE-2022-3448: Use after free in Permissions API
  * CVE-2022-3449: Use after free in Safe Browsing
  * CVE-2022-3450: Use after free in Peer Connection</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1666872000">- Chromium 107.0.5304.68 (boo#1204732)
  * CVE-2022-3652: Type Confusion in V8
  * CVE-2022-3653: Heap buffer overflow in Vulkan
  * CVE-2022-3654: Use after free in Layout
  * CVE-2022-3655: Heap buffer overflow in Media Galleries
  * CVE-2022-3656: Insufficient data validation in File System
  * CVE-2022-3657: Use after free in Extensions
  * CVE-2022-3658: Use after free in Feedback service on Chrome OS
  * CVE-2022-3659: Use after free in Accessibility
  * CVE-2022-3660: Inappropriate implementation in Full screen mode
  * CVE-2022-3661: Insufficient data validation in Extensions
- Added patches:
  * chromium-107-compiler.patch
  * chromium-107-system-zlib.patch
- Removed patches:
  * chromium-105-compiler.patch
  * chromium-105-Bitmap-include.patch
  * chromium-106-AutofillPopupControllerImpl-namespace.patch
- Unbundle libyuv and libavif on TW
- Prepare 15.5
- Use qt on 15.4+ (15.3 too old)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1666958400">- Chromium 107.0.5304.87 (boo#1204819)
  * CVE-2022-3723: Type Confusion in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1667995200">- Chromium 107.0.5304.110 (boo#1205221)
  * CVE-2022-3885: Use after free in V8
  * CVE-2022-3886: Use after free in Speech Recognition
  * CVE-2022-3887: Use after free in Web Workers
  * CVE-2022-3888: Use after free in WebCodecs
  * CVE-2022-3889: Type Confusion in V8
  * CVE-2022-3890: Heap buffer overflow in Crashpad</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1668686400">- Build with llvm15 on openSUSE:Backports:SLE-15-SP5 and up</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1669291200">- Chromium 107.0.5304.121 (boo#1205736)
  * CVE-2022-4135: Heap buffer overflow in GPU</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1669809600">- Chromium 108.0.5359.71 (boo#1205871):
  * CVE-2022-4174: Type Confusion in V8
  * CVE-2022-4175: Use after free in Camera Capture
  * CVE-2022-4176: Out of bounds write in Lacros Graphics
  * CVE-2022-4177: Use after free in Extensions
  * CVE-2022-4178: Use after free in Mojo
  * CVE-2022-4179: Use after free in Audio
  * CVE-2022-4180: Use after free in Mojo
  * CVE-2022-4181: Use after free in Forms
  * CVE-2022-4182: Inappropriate implementation in Fenced Frames
  * CVE-2022-4183: Insufficient policy enforcement in Popup Blocker
  * CVE-2022-4184: Insufficient policy enforcement in Autofill
  * CVE-2022-4185: Inappropriate implementation in Navigation
  * CVE-2022-4186: Insufficient validation of untrusted input in Downloads
  * CVE-2022-4187: Insufficient policy enforcement in DevTools
  * CVE-2022-4188: Insufficient validation of untrusted input in CORS
  * CVE-2022-4189: Insufficient policy enforcement in DevTools
  * CVE-2022-4190: Insufficient data validation in Directory
  * CVE-2022-4191: Use after free in Sign-In
  * CVE-2022-4192: Use after free in Live Caption
  * CVE-2022-4193: Insufficient policy enforcement in File System API
  * CVE-2022-4194: Use after free in Accessibility
  * CVE-2022-4195: Insufficient policy enforcement in Safe Browsing
- drop chromium-105-wayland-1.20.patch, upstream
- drop chromium-107-compiler.patch
- add chromium-108-compiler.patch
- drop chromium-98-EnumTable-crash.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1670068800">- Chromium 108.0.5359.94:
  * CVE-2022-4262: Type Confusion in V8 (boo#1205999)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1670414400">- Chromium 108.0.5359.98
  * Fix regression in computing &lt;select&gt; visibility</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1671019200">- Chromium 108.0.5359.124 (boo#1206403):
  * CVE-2022-4436: Use after free in Blink Media
  * CVE-2022-4437: Use after free in Mojo IPC
  * CVE-2022-4438: Use after free in Blink Frames
  * CVE-2022-4439: Use after free in Aura
  * CVE-2022-4440: Use after free in Profiles</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1671364800">- Add chromium-disable-GlobalMediaControlsCastStartStop.patch:
  disable GlobalMediaControlsCastStartStop to fix crashes
  occurring when interacting with the Media UI (bsc#1198124)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1673352000">- Chromium 109.0.5414.74:
  * Add support for MathML Core
  * CSS: Auto range support for font descriptors inside @font-face
    rule
  * CSS: Add lh length unit
  * CSS: Add hyphenate-limit-chars property
  * CSS: Snap border, outline and column-rule widths before layout
  * API: Improved screen sharing and web conferencing: hints for
    suppressing local audio playback, and Conditional Focus
  * API: HTTP response status code in the Resource Timing API
  * API: Same-site cross-origin prerendering triggered by the
    speculation rules API
  * Remove Event.path API
  * CVE-2023-0128: Use after free in Overview Mode
  * CVE-2023-0129: Heap buffer overflow in Network Service
  * CVE-2023-0130: Inappropriate implementation in Fullscreen API
  * CVE-2023-0131: Inappropriate implementation in iframe Sandbox
  * CVE-2023-0132: Inappropriate implementation in Permission prompts
  * CVE-2023-0133: Inappropriate implementation in Permission prompts
  * CVE-2023-0134: Use after free in Cart
  * CVE-2023-0135: Use after free in Cart
  * CVE-2023-0136: Inappropriate implementation in Fullscreen API
  * CVE-2023-0137: Heap buffer overflow in Platform Apps
  * CVE-2023-0138: Heap buffer overflow in libphonenumber
  * CVE-2023-0139: Insufficient validation of untrusted input in Downloads
  * CVE-2023-0140: Inappropriate implementation in File System API
  * CVE-2023-0141: Insufficient policy enforcement in CORS
  * Various fixes from internal audits, fuzzing and other initiatives
- drop patches:
  * chromium-gcc11.patch - not needed
  * chromium-107-system-zlib.patch - upstream
  * chromium-108-compiler.patch
- add patches:
  * chromium-109-compiler.patch
  * chromium-109-clang-lp154.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1673956800">- Added patches:
  * chromium-icu72-1.patch: ensure TextCodecCJK doesn't conflict
    with system icu (bsc#1207147)
  * chromium-icu72-2.patch: align default characters for old icu
    with that of ICU 72
  * chromium-icu72-3.patch: make V8 aware of space in ICU 72 time
    format</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1674648000">- Chromium 109.0.5414.119 (boo#1207512):
  * CVE-2023-0471: Use after free in WebTransport
  * CVE-2023-0472: Use after free in WebRTC
  * CVE-2023-0473: Type Confusion in ServiceWorker API
  * CVE-2023-0474: Use after free in GuestView
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1675857600">- Chromium 110.0.5481.77 (boo#1208029):
  * CVE-2023-0696: Type Confusion in V8
  * CVE-2023-0697: Inappropriate implementation in Full screen mode
  * CVE-2023-0698: Out of bounds read in WebRTC
  * CVE-2023-0699: Use after free in GPU
  * CVE-2023-0700: Inappropriate implementation in Download
  * CVE-2023-0701: Heap buffer overflow in WebUI
  * CVE-2023-0702: Type Confusion in Data Transfer
  * CVE-2023-0703: Type Confusion in DevTools
  * CVE-2023-0704: Insufficient policy enforcement in DevTools
  * CVE-2023-0705: Integer overflow in Core
  * Various fixes from internal audits, fuzzing and other initiatives
- build with bundled libavif
- dropped patches:
  * chromium-109-compiler.patch
  * chromium-icu72-3.patch
- added patches:
  * chromium-110-compiler.patch
  * chromium-110-system-libffi.patch
  * chromium-110-NativeThemeBase-fabs.patch
  * chromium-110-CredentialUIEntry-const.patch
  * chromium-110-DarkModeLABColorSpace-pow.patch
  * v8-move-the-Stack-object-from-ThreadLocalTop.patch</changelog>
</package>
<package pkgid="493210dd7a6fe33b8166055efc9f5d38688c0d325b9626d15a46e78c5e86213b" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="110.0.5481.77" rel="bp154.2.67.1"/>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1662033600">- Update chromium-symbolic.svg: this fixes bsc#1202403.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1662638400">- Chromium 105.0.5195.102 (boo#1203102):
  * CVE-2022-3075: Insufficient data validation in Mojo
- Chromium 105.0.5195.52 (boo#1202964):
  * CVE-2022-3038: Use after free in Network Service
  * CVE-2022-3039: Use after free in WebSQL
  * CVE-2022-3040: Use after free in Layout
  * CVE-2022-3041: Use after free in WebSQL
  * CVE-2022-3042: Use after free in PhoneHub
  * CVE-2022-3043: Heap buffer overflow in Screen Capture
  * CVE-2022-3044: Inappropriate implementation in Site Isolation
  * CVE-2022-3045: Insufficient validation of untrusted input in V8
  * CVE-2022-3046: Use after free in Browser Tag
  * CVE-2022-3071: Use after free in Tab Strip
  * CVE-2022-3047: Insufficient policy enforcement in Extensions API
  * CVE-2022-3048: Inappropriate implementation in Chrome OS lockscreen
  * CVE-2022-3049: Use after free in SplitScreen
  * CVE-2022-3050: Heap buffer overflow in WebUI
  * CVE-2022-3051: Heap buffer overflow in Exosphere
  * CVE-2022-3052: Heap buffer overflow in Window Manager
  * CVE-2022-3053: Inappropriate implementation in Pointer Lock
  * CVE-2022-3054: Insufficient policy enforcement in DevTools
  * CVE-2022-3055: Use after free in Passwords
  * CVE-2022-3056: Insufficient policy enforcement in Content Security Policy
  * CVE-2022-3057: Inappropriate implementation in iframe Sandbox
  * CVE-2022-3058: Use after free in Sign-In Flow
- Added patches:
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Bitmap-include.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-wayland-1.20.patch
  * chromium-105-compiler.patch
- Removed patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-78-protobuf-RepeatedPtrField-export.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663156800">- Chromium 105.0.5195.127 (boo#1203419):
  * CVE-2022-3195: Out of bounds write in Storage
  * CVE-2022-3196: Use after free in PDF
  * CVE-2022-3197: Use after free in PDF
  * CVE-2022-3198: Use after free in PDF
  * CVE-2022-3199: Use after free in Frames
  * CVE-2022-3200: Heap buffer overflow in Internals
  * CVE-2022-3201: Insufficient validation of untrusted input in DevTools
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1664625600">- Chromium 106.0.5249.91 (boo#1203808):
  * CVE-2022-3370: Use after free in Custom Elements
  * CVE-2022-3373: Out of bounds write in V8
- includes changes from 106.0.5249.61:
  * CVE-2022-3304: Use after free in CSS
  * CVE-2022-3201: Insufficient validation of untrusted input in Developer Tools
  * CVE-2022-3305: Use after free in Survey
  * CVE-2022-3306: Use after free in Survey
  * CVE-2022-3307: Use after free in Media
  * CVE-2022-3308: Insufficient policy enforcement in Developer Tools
  * CVE-2022-3309: Use after free in Assistant
  * CVE-2022-3310: Insufficient policy enforcement in Custom Tabs
  * CVE-2022-3311: Use after free in Import
  * CVE-2022-3312: Insufficient validation of untrusted input in VPN
  * CVE-2022-3313: Incorrect security UI in Full Screen
  * CVE-2022-3314: Use after free in Logging
  * CVE-2022-3315: Type confusion in Blink
  * CVE-2022-3316: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-3317: Insufficient validation of untrusted input in Intents
  * CVE-2022-3318: Use after free in ChromeOS Notifications
- drop patches:
  * chromium-104-tflite-system-zlib.patch
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
- add patches
  * chromium-106-ffmpeg-duration.patch
  * chromium-106-AutofillPopupControllerImpl-namespace.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1665057600">- Chromium 106.0.5249.103:
  * fix possible cache manager deadlock
  * Fix right-click menu appearing unexpectedly affecting screen
    readers</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1665576000">- Chromium 106.0.5249.119 (boo#1204223)
  * CVE-2022-3445: Use after free in Skia
  * CVE-2022-3446: Heap buffer overflow in WebSQL
  * CVE-2022-3447: Inappropriate implementation in Custom Tabs
  * CVE-2022-3448: Use after free in Permissions API
  * CVE-2022-3449: Use after free in Safe Browsing
  * CVE-2022-3450: Use after free in Peer Connection</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1666872000">- Chromium 107.0.5304.68 (boo#1204732)
  * CVE-2022-3652: Type Confusion in V8
  * CVE-2022-3653: Heap buffer overflow in Vulkan
  * CVE-2022-3654: Use after free in Layout
  * CVE-2022-3655: Heap buffer overflow in Media Galleries
  * CVE-2022-3656: Insufficient data validation in File System
  * CVE-2022-3657: Use after free in Extensions
  * CVE-2022-3658: Use after free in Feedback service on Chrome OS
  * CVE-2022-3659: Use after free in Accessibility
  * CVE-2022-3660: Inappropriate implementation in Full screen mode
  * CVE-2022-3661: Insufficient data validation in Extensions
- Added patches:
  * chromium-107-compiler.patch
  * chromium-107-system-zlib.patch
- Removed patches:
  * chromium-105-compiler.patch
  * chromium-105-Bitmap-include.patch
  * chromium-106-AutofillPopupControllerImpl-namespace.patch
- Unbundle libyuv and libavif on TW
- Prepare 15.5
- Use qt on 15.4+ (15.3 too old)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1666958400">- Chromium 107.0.5304.87 (boo#1204819)
  * CVE-2022-3723: Type Confusion in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1667995200">- Chromium 107.0.5304.110 (boo#1205221)
  * CVE-2022-3885: Use after free in V8
  * CVE-2022-3886: Use after free in Speech Recognition
  * CVE-2022-3887: Use after free in Web Workers
  * CVE-2022-3888: Use after free in WebCodecs
  * CVE-2022-3889: Type Confusion in V8
  * CVE-2022-3890: Heap buffer overflow in Crashpad</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1668686400">- Build with llvm15 on openSUSE:Backports:SLE-15-SP5 and up</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1669291200">- Chromium 107.0.5304.121 (boo#1205736)
  * CVE-2022-4135: Heap buffer overflow in GPU</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1669809600">- Chromium 108.0.5359.71 (boo#1205871):
  * CVE-2022-4174: Type Confusion in V8
  * CVE-2022-4175: Use after free in Camera Capture
  * CVE-2022-4176: Out of bounds write in Lacros Graphics
  * CVE-2022-4177: Use after free in Extensions
  * CVE-2022-4178: Use after free in Mojo
  * CVE-2022-4179: Use after free in Audio
  * CVE-2022-4180: Use after free in Mojo
  * CVE-2022-4181: Use after free in Forms
  * CVE-2022-4182: Inappropriate implementation in Fenced Frames
  * CVE-2022-4183: Insufficient policy enforcement in Popup Blocker
  * CVE-2022-4184: Insufficient policy enforcement in Autofill
  * CVE-2022-4185: Inappropriate implementation in Navigation
  * CVE-2022-4186: Insufficient validation of untrusted input in Downloads
  * CVE-2022-4187: Insufficient policy enforcement in DevTools
  * CVE-2022-4188: Insufficient validation of untrusted input in CORS
  * CVE-2022-4189: Insufficient policy enforcement in DevTools
  * CVE-2022-4190: Insufficient data validation in Directory
  * CVE-2022-4191: Use after free in Sign-In
  * CVE-2022-4192: Use after free in Live Caption
  * CVE-2022-4193: Insufficient policy enforcement in File System API
  * CVE-2022-4194: Use after free in Accessibility
  * CVE-2022-4195: Insufficient policy enforcement in Safe Browsing
- drop chromium-105-wayland-1.20.patch, upstream
- drop chromium-107-compiler.patch
- add chromium-108-compiler.patch
- drop chromium-98-EnumTable-crash.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1670068800">- Chromium 108.0.5359.94:
  * CVE-2022-4262: Type Confusion in V8 (boo#1205999)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1670414400">- Chromium 108.0.5359.98
  * Fix regression in computing &lt;select&gt; visibility</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1671019200">- Chromium 108.0.5359.124 (boo#1206403):
  * CVE-2022-4436: Use after free in Blink Media
  * CVE-2022-4437: Use after free in Mojo IPC
  * CVE-2022-4438: Use after free in Blink Frames
  * CVE-2022-4439: Use after free in Aura
  * CVE-2022-4440: Use after free in Profiles</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1671364800">- Add chromium-disable-GlobalMediaControlsCastStartStop.patch:
  disable GlobalMediaControlsCastStartStop to fix crashes
  occurring when interacting with the Media UI (bsc#1198124)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1673352000">- Chromium 109.0.5414.74:
  * Add support for MathML Core
  * CSS: Auto range support for font descriptors inside @font-face
    rule
  * CSS: Add lh length unit
  * CSS: Add hyphenate-limit-chars property
  * CSS: Snap border, outline and column-rule widths before layout
  * API: Improved screen sharing and web conferencing: hints for
    suppressing local audio playback, and Conditional Focus
  * API: HTTP response status code in the Resource Timing API
  * API: Same-site cross-origin prerendering triggered by the
    speculation rules API
  * Remove Event.path API
  * CVE-2023-0128: Use after free in Overview Mode
  * CVE-2023-0129: Heap buffer overflow in Network Service
  * CVE-2023-0130: Inappropriate implementation in Fullscreen API
  * CVE-2023-0131: Inappropriate implementation in iframe Sandbox
  * CVE-2023-0132: Inappropriate implementation in Permission prompts
  * CVE-2023-0133: Inappropriate implementation in Permission prompts
  * CVE-2023-0134: Use after free in Cart
  * CVE-2023-0135: Use after free in Cart
  * CVE-2023-0136: Inappropriate implementation in Fullscreen API
  * CVE-2023-0137: Heap buffer overflow in Platform Apps
  * CVE-2023-0138: Heap buffer overflow in libphonenumber
  * CVE-2023-0139: Insufficient validation of untrusted input in Downloads
  * CVE-2023-0140: Inappropriate implementation in File System API
  * CVE-2023-0141: Insufficient policy enforcement in CORS
  * Various fixes from internal audits, fuzzing and other initiatives
- drop patches:
  * chromium-gcc11.patch - not needed
  * chromium-107-system-zlib.patch - upstream
  * chromium-108-compiler.patch
- add patches:
  * chromium-109-compiler.patch
  * chromium-109-clang-lp154.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1673956800">- Added patches:
  * chromium-icu72-1.patch: ensure TextCodecCJK doesn't conflict
    with system icu (bsc#1207147)
  * chromium-icu72-2.patch: align default characters for old icu
    with that of ICU 72
  * chromium-icu72-3.patch: make V8 aware of space in ICU 72 time
    format</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1674648000">- Chromium 109.0.5414.119 (boo#1207512):
  * CVE-2023-0471: Use after free in WebTransport
  * CVE-2023-0472: Use after free in WebRTC
  * CVE-2023-0473: Type Confusion in ServiceWorker API
  * CVE-2023-0474: Use after free in GuestView
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1675857600">- Chromium 110.0.5481.77 (boo#1208029):
  * CVE-2023-0696: Type Confusion in V8
  * CVE-2023-0697: Inappropriate implementation in Full screen mode
  * CVE-2023-0698: Out of bounds read in WebRTC
  * CVE-2023-0699: Use after free in GPU
  * CVE-2023-0700: Inappropriate implementation in Download
  * CVE-2023-0701: Heap buffer overflow in WebUI
  * CVE-2023-0702: Type Confusion in Data Transfer
  * CVE-2023-0703: Type Confusion in DevTools
  * CVE-2023-0704: Insufficient policy enforcement in DevTools
  * CVE-2023-0705: Integer overflow in Core
  * Various fixes from internal audits, fuzzing and other initiatives
- build with bundled libavif
- dropped patches:
  * chromium-109-compiler.patch
  * chromium-icu72-3.patch
- added patches:
  * chromium-110-compiler.patch
  * chromium-110-system-libffi.patch
  * chromium-110-NativeThemeBase-fabs.patch
  * chromium-110-CredentialUIEntry-const.patch
  * chromium-110-DarkModeLABColorSpace-pow.patch
  * v8-move-the-Stack-object-from-ThreadLocalTop.patch</changelog>
</package>
<package pkgid="04ac22e1eba380710c55c0927bdb6b616f728885f21cb8d29ecc81a63d6d45d0" name="chromium" arch="aarch64">
  <version epoch="0" ver="102.0.5005.115" rel="bp154.2.8.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1643889600">- Chromium 98.0.4758.80 (boo#1195420)
  * CVE-2022-0452: Use after free in Safe Browsing
  * CVE-2022-0453: Use after free in Reader Mode
  * CVE-2022-0454: Heap buffer overflow in ANGLE
  * CVE-2022-0455: Inappropriate implementation in Full Screen Mode
  * CVE-2022-0456: Use after free in Web Search
  * CVE-2022-0457: Type Confusion in V8
  * CVE-2022-0459: Use after free in Screen Capture
  * CVE-2022-0460: Use after free in Window Dialog
  * CVE-2022-0461: Policy bypass in COOP
  * CVE-2022-0462: Inappropriate implementation in Scroll
  * CVE-2022-0463: Use after free in Accessibility
  * CVE-2022-0464: Use after free in Accessibility
  * CVE-2022-0465: Use after free in Extensions
  * CVE-2022-0466: Inappropriate implementation in Extensions Platform
  * CVE-2022-0467: Inappropriate implementation in Pointer Lock
  * CVE-2022-0468: Use after free in Payments
  * CVE-2022-0469: Use after free in Cast
  * CVE-2022-0470: Out of bounds memory access in V8
  * Various fixes from internal audits, fuzzing and other initiatives
- drop upstreamed patches:
  * chromium-97-Point-constexpr.patch
- add patches:
  * chromium-98-MiraclePtr-gcc-ice.patch
  * chromium-98-WaylandFrameManager-check.patch
- change chromium-97-compiler.patch to chromium-98-compiler.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1644926400">- Chromium 98.0.4758.102 (boo#1195986)
  * CVE-2022-0603: Use after free in File Manager
  * CVE-2022-0604: Heap buffer overflow in Tab Groups
  * CVE-2022-0605: Use after free in Webstore API
  * CVE-2022-0606: Use after free in ANGLE
  * CVE-2022-0607: Use after free in GPU
  * CVE-2022-0608: Integer overflow in Mojo
  * CVE-2022-0609: Use after free in Animation
  * CVE-2022-0610: Inappropriate implementation in Gamepad API
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1646395200">- Chromium 99.0.4844.51 (boo#1196641)
  * CVE-2022-0789: Heap buffer overflow in ANGLE
  * CVE-2022-0790: Use after free in Cast UI
  * CVE-2022-0791: Use after free in Omnibox
  * CVE-2022-0792: Out of bounds read in ANGLE
  * CVE-2022-0793: Use after free in Views
  * CVE-2022-0794: Use after free in WebShare
  * CVE-2022-0795: Type Confusion in Blink Layout
  * CVE-2022-0796: Use after free in Media
  * CVE-2022-0797: Out of bounds memory access in Mojo
  * CVE-2022-0798: Use after free in MediaStream
  * CVE-2022-0799: Insufficient policy enforcement in Installer
  * CVE-2022-0800: Heap buffer overflow in Cast UI
  * CVE-2022-0801: Inappropriate implementation in HTML parser
  * CVE-2022-0802: Inappropriate implementation in Full screen mode
  * CVE-2022-0803: Inappropriate implementation in Permissions
  * CVE-2022-0804: Inappropriate implementation in Full screen mode
  * CVE-2022-0805: Use after free in Browser Switcher
  * CVE-2022-0806: Data leak in Canvas
  * CVE-2022-0807: Inappropriate implementation in Autofill
  * CVE-2022-0808: Use after free in Chrome OS Shell
  * CVE-2022-0809: Out of bounds memory access in WebXR
- Removed patches:
  * chromium-96-EnumTable-crash.patch
  * chromium-89-missing-cstring-header.patch
  * chromium-95-libyuv-aarch64.patch
  * chromium-95-libyuv-arm.patch
  * chromium-98-MiraclePtr-gcc-ice.patch
  * chromium-98-WaylandFrameManager-check.patch
- Added patches:
  * chromium-97-arm-tflite-cast.patch
  * chromium-98-gtk4-build.patch
  * chromium-99-AutofillAssistantModelExecutor-NoDestructor.patch
  * chromium-98-EnumTable-crash.patch
  * chromium-third_party-symbolize-missing-include.patch
  * chromium-v8-missing-utility-include.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1647432000">- Chromium 99.0.4844.74 (boo#1197163)
  * CVE-2022-0971: Use after free in Blink Layout
  * CVE-2022-0972: Use after free in Extensions
  * CVE-2022-0973: Use after free in Safe Browsing
  * CVE-2022-0974: Use after free in Splitscreen
  * CVE-2022-0975: Use after free in ANGLE
  * CVE-2022-0976: Heap buffer overflow in GPU
  * CVE-2022-0977: Use after free in Browser UI
  * CVE-2022-0978: Use after free in ANGLE
  * CVE-2022-0979: Use after free in Safe Browsing
  * CVE-2022-0980: Use after free in New Tab Page
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1647864000">- Chromium 99.0.4844.82:
  * Fix potential problem in Hangouts (boo#1197332)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1648296000">- Chromium 99.0.4844.84:
  * CVE-2022-1096: Type Confusion in V8 (boo#1197552)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1648555200">- Update disk constraints</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1648641600">- Chromium 100.0.4896.60 (boo#1197680)
  * CVE-2022-1125: Use after free in Portals
  * CVE-2022-1127: Use after free in QR Code Generator
  * CVE-2022-1128: Inappropriate implementation in Web Share API
  * CVE-2022-1129: Inappropriate implementation in Full Screen Mode
  * CVE-2022-1130: Insufficient validation of untrusted input in WebOTP
  * CVE-2022-1131: Use after free in Cast UI
  * CVE-2022-1132: Inappropriate implementation in Virtual Keyboard
  * CVE-2022-1133: Use after free in WebRTC
  * CVE-2022-1134: Type Confusion in V8
  * CVE-2022-1135: Use after free in Shopping Cart
  * CVE-2022-1136: Use after free in Tab Strip
  * CVE-2022-1137: Inappropriate implementation in Extensions
  * CVE-2022-1138: Inappropriate implementation in Web Cursor
  * CVE-2022-1139: Inappropriate implementation in Background Fetch API
  * CVE-2022-1141: Use after free in File Manager
  * CVE-2022-1142: Heap buffer overflow in WebUI
  * CVE-2022-1143: Heap buffer overflow in WebUI
  * CVE-2022-1144: Use after free in WebUI
  * CVE-2022-1145: Use after free in Extensions
  * CVE-2022-1146: Inappropriate implementation in Resource Timing
- Added patches:
  * chromium-100-compiler.patch
  * chromium-100-GLImplementationParts-constexpr.patch
  * chromium-100-InMilliseconds-constexpr.patch
  * chromium-100-SCTHashdanceMetadata-move.patch
  * chromium-100-macro-typo.patch
- Removed patches:
  * chromium-98-compiler.patch
  * chromium-86-nearby-explicit.patch
  * chromium-glibc-2.34.patch
  * chromium-v8-missing-utility-include.patch
  * chromium-99-AutofillAssistantModelExecutor-NoDestructor.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1649160000">- Chromium 100.0.4896.75:
  * CVE-2022-1232: Type Confusion in V8 (boo#1198053)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1649592000">- Patches for GCC 12:
  * chromium-fix-swiftshader-template.patch
  * chromium-missing-include-tuple.patch
  * chromium-webrtc-stats-missing-vector.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1649764800">- Chromium 100.0.4896.88 (boo#1198361)
  * CVE-2022-1305: Use after free in storage
  * CVE-2022-1306: Inappropriate implementation in compositing
  * CVE-2022-1307: Inappropriate implementation in full screen
  * CVE-2022-1308: Use after free in BFCache
  * CVE-2022-1309: Insufficient policy enforcement in developer tools
  * CVE-2022-1310: Use after free in regular expressions
  * CVE-2022-1311: Use after free in Chrome OS shell
  * CVE-2022-1312: Use after free in storage
  * CVE-2022-1313: Use after free in tab groups
  * CVE-2022-1314: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1650024000">- Chromium 100.0.4896.127 (boo#1198509)
  * CVE-2022-1364: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1650542400">- Fixes for go 1.18</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1651665600">- Chromium 101.0.4951.54 (boo#1199118)
- Chromium 101.0.4951.41 (boo#1198917)
  * CVE-2022-1477: Use after free in Vulkan
  * CVE-2022-1478: Use after free in SwiftShader
  * CVE-2022-1479: Use after free in ANGLE
  * CVE-2022-1480: Use after free in Device API
  * CVE-2022-1481: Use after free in Sharing
  * CVE-2022-1482: Inappropriate implementation in WebGL
  * CVE-2022-1483: Heap buffer overflow in WebGPU
  * CVE-2022-1484: Heap buffer overflow in Web UI Settings
  * CVE-2022-1485: Use after free in File System API
  * CVE-2022-1486: Type Confusion in V8
  * CVE-2022-1487: Use after free in Ozone
  * CVE-2022-1488: Inappropriate implementation in Extensions API
  * CVE-2022-1489: Out of bounds memory access in UI Shelf
  * CVE-2022-1490: Use after free in Browser Switcher
  * CVE-2022-1491: Use after free in Bookmarks
  * CVE-2022-1492: Insufficient data validation in Blink Editing
  * CVE-2022-1493: Use after free in Dev Tools
  * CVE-2022-1494: Insufficient data validation in Trusted Types
  * CVE-2022-1495: Incorrect security UI in Downloads
  * CVE-2022-1496: Use after free in File Manager
  * CVE-2022-1497: Inappropriate implementation in Input
  * CVE-2022-1498: Inappropriate implementation in HTML Parser
  * CVE-2022-1499: Inappropriate implementation in WebAuthentication
  * CVE-2022-1500: Insufficient data validation in Dev Tools
  * CVE-2022-1501: Inappropriate implementation in iframe
- Added patches:
  * chromium-101-libxml-unbundle.patch
  * chromium-101-segmentation_platform-type.patch
- Removed patches:
  * chromium-100-SCTHashdanceMetadata-move.patch
  * chromium-100-GLImplementationParts-constexpr.patch
  * chromium-100-macro-typo.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1652270400">- Chromium 101.0.4951.64 (boo#1199409)
  * CVE-2022-1633: Use after free in Sharesheet
  * CVE-2022-1634: Use after free in Browser UI
  * CVE-2022-1635: Use after free in Permission Prompts
  * CVE-2022-1636: Use after free in Performance APIs
  * CVE-2022-1637: Inappropriate implementation in Web Contents
  * CVE-2022-1638: Heap buffer overflow in V8 Internationalization
  * CVE-2022-1639: Use after free in ANGLE
  * CVE-2022-1640: Use after free in Sharing
  * CVE-2022-1641: Use after free in Web UI Diagnostics</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1652616000">- Chromium 101.0.4951.67
  * fixes for other platforms</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1653652800">- Chromium 102.0.5001.61 (boo#1199893)
  * CVE-2022-1853: Use after free in Indexed DB
  * CVE-2022-1854: Use after free in ANGLE
  * CVE-2022-1855: Use after free in Messaging
  * CVE-2022-1856: Use after free in User Education
  * CVE-2022-1857: Insufficient policy enforcement in File System API
  * CVE-2022-1858: Out of bounds read in DevTools
  * CVE-2022-1859: Use after free in Performance Manager
  * CVE-2022-1860: Use after free in UI Foundations
  * CVE-2022-1861: Use after free in Sharing
  * CVE-2022-1862: Inappropriate implementation in Extensions
  * CVE-2022-1863: Use after free in Tab Groups
  * CVE-2022-1864: Use after free in WebApp Installs
  * CVE-2022-1865: Use after free in Bookmarks
  * CVE-2022-1866: Use after free in Tablet Mode
  * CVE-2022-1867: Insufficient validation of untrusted input in Data Transfer
  * CVE-2022-1868: Inappropriate implementation in Extensions API
  * CVE-2022-1869: Type Confusion in V8
  * CVE-2022-1870: Use after free in App Service
  * CVE-2022-1871: Insufficient policy enforcement in File System API
  * CVE-2022-1872: Insufficient policy enforcement in Extensions API
  * CVE-2022-1873: Insufficient policy enforcement in COOP
  * CVE-2022-1874: Insufficient policy enforcement in Safe Browsing
  * CVE-2022-1875: Inappropriate implementation in PDF
  * CVE-2022-1876: Heap buffer overflow in DevTools
- Added patches:
  * chromium-102-compiler.patch
  * chromium-102-fenced_frame_utils-include.patch
  * chromium-102-regex_pattern-array.patch
  * chromium-102-swiftshader-template-instantiation.patch
  * chromium-102-symbolize-include.patch
  * ffmpeg-new-channel-layout.patch
- Removed patches:
  * chromium-100-compiler.patch
  * chromium-80-QuicStreamSendBuffer-deleted-move-constructor.patch
  * chromium-95-quiche-include.patch
  * chromium-fix-swiftshader-template.patch
  * chromium-missing-include-tuple.patch
  * chromium-webrtc-stats-missing-vector.patch
  * chromium-101-segmentation_platform-type.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654084800">- Disable ARM control flow integrity, it causes build issues
  at the moment
- Try a different SVG (black logo on GNOME)
- Removed patches:
  * chromium-third_party-symbolize-missing-include.patch
  (replaced by chromium-102-symbolize-include.patch)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654689600">- Switch to GTK4 on TW and Leap 15.4+ (boo#1200139)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1654862400">- Chromium 102.0.5005.115 (boo#1200423)
  * CVE-2022-2007: Use after free in WebGPU
  * CVE-2022-2008: Out of bounds memory access in WebGL
  * CVE-2022-2010: Out of bounds read in compositing
  * CVE-2022-2011: Use after free in ANGLE</changelog>
</package>
<package pkgid="c93eb15833b62625a5dbde7794a5ebe79028715a4c24992f2d13df8934035f3b" name="chromium" arch="src">
  <version epoch="0" ver="102.0.5005.115" rel="bp154.2.8.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1643889600">- Chromium 98.0.4758.80 (boo#1195420)
  * CVE-2022-0452: Use after free in Safe Browsing
  * CVE-2022-0453: Use after free in Reader Mode
  * CVE-2022-0454: Heap buffer overflow in ANGLE
  * CVE-2022-0455: Inappropriate implementation in Full Screen Mode
  * CVE-2022-0456: Use after free in Web Search
  * CVE-2022-0457: Type Confusion in V8
  * CVE-2022-0459: Use after free in Screen Capture
  * CVE-2022-0460: Use after free in Window Dialog
  * CVE-2022-0461: Policy bypass in COOP
  * CVE-2022-0462: Inappropriate implementation in Scroll
  * CVE-2022-0463: Use after free in Accessibility
  * CVE-2022-0464: Use after free in Accessibility
  * CVE-2022-0465: Use after free in Extensions
  * CVE-2022-0466: Inappropriate implementation in Extensions Platform
  * CVE-2022-0467: Inappropriate implementation in Pointer Lock
  * CVE-2022-0468: Use after free in Payments
  * CVE-2022-0469: Use after free in Cast
  * CVE-2022-0470: Out of bounds memory access in V8
  * Various fixes from internal audits, fuzzing and other initiatives
- drop upstreamed patches:
  * chromium-97-Point-constexpr.patch
- add patches:
  * chromium-98-MiraclePtr-gcc-ice.patch
  * chromium-98-WaylandFrameManager-check.patch
- change chromium-97-compiler.patch to chromium-98-compiler.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1644926400">- Chromium 98.0.4758.102 (boo#1195986)
  * CVE-2022-0603: Use after free in File Manager
  * CVE-2022-0604: Heap buffer overflow in Tab Groups
  * CVE-2022-0605: Use after free in Webstore API
  * CVE-2022-0606: Use after free in ANGLE
  * CVE-2022-0607: Use after free in GPU
  * CVE-2022-0608: Integer overflow in Mojo
  * CVE-2022-0609: Use after free in Animation
  * CVE-2022-0610: Inappropriate implementation in Gamepad API
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1646395200">- Chromium 99.0.4844.51 (boo#1196641)
  * CVE-2022-0789: Heap buffer overflow in ANGLE
  * CVE-2022-0790: Use after free in Cast UI
  * CVE-2022-0791: Use after free in Omnibox
  * CVE-2022-0792: Out of bounds read in ANGLE
  * CVE-2022-0793: Use after free in Views
  * CVE-2022-0794: Use after free in WebShare
  * CVE-2022-0795: Type Confusion in Blink Layout
  * CVE-2022-0796: Use after free in Media
  * CVE-2022-0797: Out of bounds memory access in Mojo
  * CVE-2022-0798: Use after free in MediaStream
  * CVE-2022-0799: Insufficient policy enforcement in Installer
  * CVE-2022-0800: Heap buffer overflow in Cast UI
  * CVE-2022-0801: Inappropriate implementation in HTML parser
  * CVE-2022-0802: Inappropriate implementation in Full screen mode
  * CVE-2022-0803: Inappropriate implementation in Permissions
  * CVE-2022-0804: Inappropriate implementation in Full screen mode
  * CVE-2022-0805: Use after free in Browser Switcher
  * CVE-2022-0806: Data leak in Canvas
  * CVE-2022-0807: Inappropriate implementation in Autofill
  * CVE-2022-0808: Use after free in Chrome OS Shell
  * CVE-2022-0809: Out of bounds memory access in WebXR
- Removed patches:
  * chromium-96-EnumTable-crash.patch
  * chromium-89-missing-cstring-header.patch
  * chromium-95-libyuv-aarch64.patch
  * chromium-95-libyuv-arm.patch
  * chromium-98-MiraclePtr-gcc-ice.patch
  * chromium-98-WaylandFrameManager-check.patch
- Added patches:
  * chromium-97-arm-tflite-cast.patch
  * chromium-98-gtk4-build.patch
  * chromium-99-AutofillAssistantModelExecutor-NoDestructor.patch
  * chromium-98-EnumTable-crash.patch
  * chromium-third_party-symbolize-missing-include.patch
  * chromium-v8-missing-utility-include.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1647432000">- Chromium 99.0.4844.74 (boo#1197163)
  * CVE-2022-0971: Use after free in Blink Layout
  * CVE-2022-0972: Use after free in Extensions
  * CVE-2022-0973: Use after free in Safe Browsing
  * CVE-2022-0974: Use after free in Splitscreen
  * CVE-2022-0975: Use after free in ANGLE
  * CVE-2022-0976: Heap buffer overflow in GPU
  * CVE-2022-0977: Use after free in Browser UI
  * CVE-2022-0978: Use after free in ANGLE
  * CVE-2022-0979: Use after free in Safe Browsing
  * CVE-2022-0980: Use after free in New Tab Page
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1647864000">- Chromium 99.0.4844.82:
  * Fix potential problem in Hangouts (boo#1197332)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1648296000">- Chromium 99.0.4844.84:
  * CVE-2022-1096: Type Confusion in V8 (boo#1197552)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1648555200">- Update disk constraints</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1648641600">- Chromium 100.0.4896.60 (boo#1197680)
  * CVE-2022-1125: Use after free in Portals
  * CVE-2022-1127: Use after free in QR Code Generator
  * CVE-2022-1128: Inappropriate implementation in Web Share API
  * CVE-2022-1129: Inappropriate implementation in Full Screen Mode
  * CVE-2022-1130: Insufficient validation of untrusted input in WebOTP
  * CVE-2022-1131: Use after free in Cast UI
  * CVE-2022-1132: Inappropriate implementation in Virtual Keyboard
  * CVE-2022-1133: Use after free in WebRTC
  * CVE-2022-1134: Type Confusion in V8
  * CVE-2022-1135: Use after free in Shopping Cart
  * CVE-2022-1136: Use after free in Tab Strip
  * CVE-2022-1137: Inappropriate implementation in Extensions
  * CVE-2022-1138: Inappropriate implementation in Web Cursor
  * CVE-2022-1139: Inappropriate implementation in Background Fetch API
  * CVE-2022-1141: Use after free in File Manager
  * CVE-2022-1142: Heap buffer overflow in WebUI
  * CVE-2022-1143: Heap buffer overflow in WebUI
  * CVE-2022-1144: Use after free in WebUI
  * CVE-2022-1145: Use after free in Extensions
  * CVE-2022-1146: Inappropriate implementation in Resource Timing
- Added patches:
  * chromium-100-compiler.patch
  * chromium-100-GLImplementationParts-constexpr.patch
  * chromium-100-InMilliseconds-constexpr.patch
  * chromium-100-SCTHashdanceMetadata-move.patch
  * chromium-100-macro-typo.patch
- Removed patches:
  * chromium-98-compiler.patch
  * chromium-86-nearby-explicit.patch
  * chromium-glibc-2.34.patch
  * chromium-v8-missing-utility-include.patch
  * chromium-99-AutofillAssistantModelExecutor-NoDestructor.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1649160000">- Chromium 100.0.4896.75:
  * CVE-2022-1232: Type Confusion in V8 (boo#1198053)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1649592000">- Patches for GCC 12:
  * chromium-fix-swiftshader-template.patch
  * chromium-missing-include-tuple.patch
  * chromium-webrtc-stats-missing-vector.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1649764800">- Chromium 100.0.4896.88 (boo#1198361)
  * CVE-2022-1305: Use after free in storage
  * CVE-2022-1306: Inappropriate implementation in compositing
  * CVE-2022-1307: Inappropriate implementation in full screen
  * CVE-2022-1308: Use after free in BFCache
  * CVE-2022-1309: Insufficient policy enforcement in developer tools
  * CVE-2022-1310: Use after free in regular expressions
  * CVE-2022-1311: Use after free in Chrome OS shell
  * CVE-2022-1312: Use after free in storage
  * CVE-2022-1313: Use after free in tab groups
  * CVE-2022-1314: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1650024000">- Chromium 100.0.4896.127 (boo#1198509)
  * CVE-2022-1364: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1650542400">- Fixes for go 1.18</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1651665600">- Chromium 101.0.4951.54 (boo#1199118)
- Chromium 101.0.4951.41 (boo#1198917)
  * CVE-2022-1477: Use after free in Vulkan
  * CVE-2022-1478: Use after free in SwiftShader
  * CVE-2022-1479: Use after free in ANGLE
  * CVE-2022-1480: Use after free in Device API
  * CVE-2022-1481: Use after free in Sharing
  * CVE-2022-1482: Inappropriate implementation in WebGL
  * CVE-2022-1483: Heap buffer overflow in WebGPU
  * CVE-2022-1484: Heap buffer overflow in Web UI Settings
  * CVE-2022-1485: Use after free in File System API
  * CVE-2022-1486: Type Confusion in V8
  * CVE-2022-1487: Use after free in Ozone
  * CVE-2022-1488: Inappropriate implementation in Extensions API
  * CVE-2022-1489: Out of bounds memory access in UI Shelf
  * CVE-2022-1490: Use after free in Browser Switcher
  * CVE-2022-1491: Use after free in Bookmarks
  * CVE-2022-1492: Insufficient data validation in Blink Editing
  * CVE-2022-1493: Use after free in Dev Tools
  * CVE-2022-1494: Insufficient data validation in Trusted Types
  * CVE-2022-1495: Incorrect security UI in Downloads
  * CVE-2022-1496: Use after free in File Manager
  * CVE-2022-1497: Inappropriate implementation in Input
  * CVE-2022-1498: Inappropriate implementation in HTML Parser
  * CVE-2022-1499: Inappropriate implementation in WebAuthentication
  * CVE-2022-1500: Insufficient data validation in Dev Tools
  * CVE-2022-1501: Inappropriate implementation in iframe
- Added patches:
  * chromium-101-libxml-unbundle.patch
  * chromium-101-segmentation_platform-type.patch
- Removed patches:
  * chromium-100-SCTHashdanceMetadata-move.patch
  * chromium-100-GLImplementationParts-constexpr.patch
  * chromium-100-macro-typo.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1652270400">- Chromium 101.0.4951.64 (boo#1199409)
  * CVE-2022-1633: Use after free in Sharesheet
  * CVE-2022-1634: Use after free in Browser UI
  * CVE-2022-1635: Use after free in Permission Prompts
  * CVE-2022-1636: Use after free in Performance APIs
  * CVE-2022-1637: Inappropriate implementation in Web Contents
  * CVE-2022-1638: Heap buffer overflow in V8 Internationalization
  * CVE-2022-1639: Use after free in ANGLE
  * CVE-2022-1640: Use after free in Sharing
  * CVE-2022-1641: Use after free in Web UI Diagnostics</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1652616000">- Chromium 101.0.4951.67
  * fixes for other platforms</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1653652800">- Chromium 102.0.5001.61 (boo#1199893)
  * CVE-2022-1853: Use after free in Indexed DB
  * CVE-2022-1854: Use after free in ANGLE
  * CVE-2022-1855: Use after free in Messaging
  * CVE-2022-1856: Use after free in User Education
  * CVE-2022-1857: Insufficient policy enforcement in File System API
  * CVE-2022-1858: Out of bounds read in DevTools
  * CVE-2022-1859: Use after free in Performance Manager
  * CVE-2022-1860: Use after free in UI Foundations
  * CVE-2022-1861: Use after free in Sharing
  * CVE-2022-1862: Inappropriate implementation in Extensions
  * CVE-2022-1863: Use after free in Tab Groups
  * CVE-2022-1864: Use after free in WebApp Installs
  * CVE-2022-1865: Use after free in Bookmarks
  * CVE-2022-1866: Use after free in Tablet Mode
  * CVE-2022-1867: Insufficient validation of untrusted input in Data Transfer
  * CVE-2022-1868: Inappropriate implementation in Extensions API
  * CVE-2022-1869: Type Confusion in V8
  * CVE-2022-1870: Use after free in App Service
  * CVE-2022-1871: Insufficient policy enforcement in File System API
  * CVE-2022-1872: Insufficient policy enforcement in Extensions API
  * CVE-2022-1873: Insufficient policy enforcement in COOP
  * CVE-2022-1874: Insufficient policy enforcement in Safe Browsing
  * CVE-2022-1875: Inappropriate implementation in PDF
  * CVE-2022-1876: Heap buffer overflow in DevTools
- Added patches:
  * chromium-102-compiler.patch
  * chromium-102-fenced_frame_utils-include.patch
  * chromium-102-regex_pattern-array.patch
  * chromium-102-swiftshader-template-instantiation.patch
  * chromium-102-symbolize-include.patch
  * ffmpeg-new-channel-layout.patch
- Removed patches:
  * chromium-100-compiler.patch
  * chromium-80-QuicStreamSendBuffer-deleted-move-constructor.patch
  * chromium-95-quiche-include.patch
  * chromium-fix-swiftshader-template.patch
  * chromium-missing-include-tuple.patch
  * chromium-webrtc-stats-missing-vector.patch
  * chromium-101-segmentation_platform-type.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654084800">- Disable ARM control flow integrity, it causes build issues
  at the moment
- Try a different SVG (black logo on GNOME)
- Removed patches:
  * chromium-third_party-symbolize-missing-include.patch
  (replaced by chromium-102-symbolize-include.patch)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654689600">- Switch to GTK4 on TW and Leap 15.4+ (boo#1200139)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1654862400">- Chromium 102.0.5005.115 (boo#1200423)
  * CVE-2022-2007: Use after free in WebGPU
  * CVE-2022-2008: Out of bounds memory access in WebGL
  * CVE-2022-2010: Out of bounds read in compositing
  * CVE-2022-2011: Use after free in ANGLE</changelog>
</package>
<package pkgid="95fc49ce58e90593625b0916e5c32719ca633918d1109fc167cd38ae72e44477" name="chromium" arch="x86_64">
  <version epoch="0" ver="102.0.5005.115" rel="bp154.2.8.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1643889600">- Chromium 98.0.4758.80 (boo#1195420)
  * CVE-2022-0452: Use after free in Safe Browsing
  * CVE-2022-0453: Use after free in Reader Mode
  * CVE-2022-0454: Heap buffer overflow in ANGLE
  * CVE-2022-0455: Inappropriate implementation in Full Screen Mode
  * CVE-2022-0456: Use after free in Web Search
  * CVE-2022-0457: Type Confusion in V8
  * CVE-2022-0459: Use after free in Screen Capture
  * CVE-2022-0460: Use after free in Window Dialog
  * CVE-2022-0461: Policy bypass in COOP
  * CVE-2022-0462: Inappropriate implementation in Scroll
  * CVE-2022-0463: Use after free in Accessibility
  * CVE-2022-0464: Use after free in Accessibility
  * CVE-2022-0465: Use after free in Extensions
  * CVE-2022-0466: Inappropriate implementation in Extensions Platform
  * CVE-2022-0467: Inappropriate implementation in Pointer Lock
  * CVE-2022-0468: Use after free in Payments
  * CVE-2022-0469: Use after free in Cast
  * CVE-2022-0470: Out of bounds memory access in V8
  * Various fixes from internal audits, fuzzing and other initiatives
- drop upstreamed patches:
  * chromium-97-Point-constexpr.patch
- add patches:
  * chromium-98-MiraclePtr-gcc-ice.patch
  * chromium-98-WaylandFrameManager-check.patch
- change chromium-97-compiler.patch to chromium-98-compiler.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1644926400">- Chromium 98.0.4758.102 (boo#1195986)
  * CVE-2022-0603: Use after free in File Manager
  * CVE-2022-0604: Heap buffer overflow in Tab Groups
  * CVE-2022-0605: Use after free in Webstore API
  * CVE-2022-0606: Use after free in ANGLE
  * CVE-2022-0607: Use after free in GPU
  * CVE-2022-0608: Integer overflow in Mojo
  * CVE-2022-0609: Use after free in Animation
  * CVE-2022-0610: Inappropriate implementation in Gamepad API
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1646395200">- Chromium 99.0.4844.51 (boo#1196641)
  * CVE-2022-0789: Heap buffer overflow in ANGLE
  * CVE-2022-0790: Use after free in Cast UI
  * CVE-2022-0791: Use after free in Omnibox
  * CVE-2022-0792: Out of bounds read in ANGLE
  * CVE-2022-0793: Use after free in Views
  * CVE-2022-0794: Use after free in WebShare
  * CVE-2022-0795: Type Confusion in Blink Layout
  * CVE-2022-0796: Use after free in Media
  * CVE-2022-0797: Out of bounds memory access in Mojo
  * CVE-2022-0798: Use after free in MediaStream
  * CVE-2022-0799: Insufficient policy enforcement in Installer
  * CVE-2022-0800: Heap buffer overflow in Cast UI
  * CVE-2022-0801: Inappropriate implementation in HTML parser
  * CVE-2022-0802: Inappropriate implementation in Full screen mode
  * CVE-2022-0803: Inappropriate implementation in Permissions
  * CVE-2022-0804: Inappropriate implementation in Full screen mode
  * CVE-2022-0805: Use after free in Browser Switcher
  * CVE-2022-0806: Data leak in Canvas
  * CVE-2022-0807: Inappropriate implementation in Autofill
  * CVE-2022-0808: Use after free in Chrome OS Shell
  * CVE-2022-0809: Out of bounds memory access in WebXR
- Removed patches:
  * chromium-96-EnumTable-crash.patch
  * chromium-89-missing-cstring-header.patch
  * chromium-95-libyuv-aarch64.patch
  * chromium-95-libyuv-arm.patch
  * chromium-98-MiraclePtr-gcc-ice.patch
  * chromium-98-WaylandFrameManager-check.patch
- Added patches:
  * chromium-97-arm-tflite-cast.patch
  * chromium-98-gtk4-build.patch
  * chromium-99-AutofillAssistantModelExecutor-NoDestructor.patch
  * chromium-98-EnumTable-crash.patch
  * chromium-third_party-symbolize-missing-include.patch
  * chromium-v8-missing-utility-include.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1647432000">- Chromium 99.0.4844.74 (boo#1197163)
  * CVE-2022-0971: Use after free in Blink Layout
  * CVE-2022-0972: Use after free in Extensions
  * CVE-2022-0973: Use after free in Safe Browsing
  * CVE-2022-0974: Use after free in Splitscreen
  * CVE-2022-0975: Use after free in ANGLE
  * CVE-2022-0976: Heap buffer overflow in GPU
  * CVE-2022-0977: Use after free in Browser UI
  * CVE-2022-0978: Use after free in ANGLE
  * CVE-2022-0979: Use after free in Safe Browsing
  * CVE-2022-0980: Use after free in New Tab Page
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1647864000">- Chromium 99.0.4844.82:
  * Fix potential problem in Hangouts (boo#1197332)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1648296000">- Chromium 99.0.4844.84:
  * CVE-2022-1096: Type Confusion in V8 (boo#1197552)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1648555200">- Update disk constraints</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1648641600">- Chromium 100.0.4896.60 (boo#1197680)
  * CVE-2022-1125: Use after free in Portals
  * CVE-2022-1127: Use after free in QR Code Generator
  * CVE-2022-1128: Inappropriate implementation in Web Share API
  * CVE-2022-1129: Inappropriate implementation in Full Screen Mode
  * CVE-2022-1130: Insufficient validation of untrusted input in WebOTP
  * CVE-2022-1131: Use after free in Cast UI
  * CVE-2022-1132: Inappropriate implementation in Virtual Keyboard
  * CVE-2022-1133: Use after free in WebRTC
  * CVE-2022-1134: Type Confusion in V8
  * CVE-2022-1135: Use after free in Shopping Cart
  * CVE-2022-1136: Use after free in Tab Strip
  * CVE-2022-1137: Inappropriate implementation in Extensions
  * CVE-2022-1138: Inappropriate implementation in Web Cursor
  * CVE-2022-1139: Inappropriate implementation in Background Fetch API
  * CVE-2022-1141: Use after free in File Manager
  * CVE-2022-1142: Heap buffer overflow in WebUI
  * CVE-2022-1143: Heap buffer overflow in WebUI
  * CVE-2022-1144: Use after free in WebUI
  * CVE-2022-1145: Use after free in Extensions
  * CVE-2022-1146: Inappropriate implementation in Resource Timing
- Added patches:
  * chromium-100-compiler.patch
  * chromium-100-GLImplementationParts-constexpr.patch
  * chromium-100-InMilliseconds-constexpr.patch
  * chromium-100-SCTHashdanceMetadata-move.patch
  * chromium-100-macro-typo.patch
- Removed patches:
  * chromium-98-compiler.patch
  * chromium-86-nearby-explicit.patch
  * chromium-glibc-2.34.patch
  * chromium-v8-missing-utility-include.patch
  * chromium-99-AutofillAssistantModelExecutor-NoDestructor.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1649160000">- Chromium 100.0.4896.75:
  * CVE-2022-1232: Type Confusion in V8 (boo#1198053)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1649592000">- Patches for GCC 12:
  * chromium-fix-swiftshader-template.patch
  * chromium-missing-include-tuple.patch
  * chromium-webrtc-stats-missing-vector.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1649764800">- Chromium 100.0.4896.88 (boo#1198361)
  * CVE-2022-1305: Use after free in storage
  * CVE-2022-1306: Inappropriate implementation in compositing
  * CVE-2022-1307: Inappropriate implementation in full screen
  * CVE-2022-1308: Use after free in BFCache
  * CVE-2022-1309: Insufficient policy enforcement in developer tools
  * CVE-2022-1310: Use after free in regular expressions
  * CVE-2022-1311: Use after free in Chrome OS shell
  * CVE-2022-1312: Use after free in storage
  * CVE-2022-1313: Use after free in tab groups
  * CVE-2022-1314: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1650024000">- Chromium 100.0.4896.127 (boo#1198509)
  * CVE-2022-1364: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1650542400">- Fixes for go 1.18</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1651665600">- Chromium 101.0.4951.54 (boo#1199118)
- Chromium 101.0.4951.41 (boo#1198917)
  * CVE-2022-1477: Use after free in Vulkan
  * CVE-2022-1478: Use after free in SwiftShader
  * CVE-2022-1479: Use after free in ANGLE
  * CVE-2022-1480: Use after free in Device API
  * CVE-2022-1481: Use after free in Sharing
  * CVE-2022-1482: Inappropriate implementation in WebGL
  * CVE-2022-1483: Heap buffer overflow in WebGPU
  * CVE-2022-1484: Heap buffer overflow in Web UI Settings
  * CVE-2022-1485: Use after free in File System API
  * CVE-2022-1486: Type Confusion in V8
  * CVE-2022-1487: Use after free in Ozone
  * CVE-2022-1488: Inappropriate implementation in Extensions API
  * CVE-2022-1489: Out of bounds memory access in UI Shelf
  * CVE-2022-1490: Use after free in Browser Switcher
  * CVE-2022-1491: Use after free in Bookmarks
  * CVE-2022-1492: Insufficient data validation in Blink Editing
  * CVE-2022-1493: Use after free in Dev Tools
  * CVE-2022-1494: Insufficient data validation in Trusted Types
  * CVE-2022-1495: Incorrect security UI in Downloads
  * CVE-2022-1496: Use after free in File Manager
  * CVE-2022-1497: Inappropriate implementation in Input
  * CVE-2022-1498: Inappropriate implementation in HTML Parser
  * CVE-2022-1499: Inappropriate implementation in WebAuthentication
  * CVE-2022-1500: Insufficient data validation in Dev Tools
  * CVE-2022-1501: Inappropriate implementation in iframe
- Added patches:
  * chromium-101-libxml-unbundle.patch
  * chromium-101-segmentation_platform-type.patch
- Removed patches:
  * chromium-100-SCTHashdanceMetadata-move.patch
  * chromium-100-GLImplementationParts-constexpr.patch
  * chromium-100-macro-typo.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1652270400">- Chromium 101.0.4951.64 (boo#1199409)
  * CVE-2022-1633: Use after free in Sharesheet
  * CVE-2022-1634: Use after free in Browser UI
  * CVE-2022-1635: Use after free in Permission Prompts
  * CVE-2022-1636: Use after free in Performance APIs
  * CVE-2022-1637: Inappropriate implementation in Web Contents
  * CVE-2022-1638: Heap buffer overflow in V8 Internationalization
  * CVE-2022-1639: Use after free in ANGLE
  * CVE-2022-1640: Use after free in Sharing
  * CVE-2022-1641: Use after free in Web UI Diagnostics</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1652616000">- Chromium 101.0.4951.67
  * fixes for other platforms</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1653652800">- Chromium 102.0.5001.61 (boo#1199893)
  * CVE-2022-1853: Use after free in Indexed DB
  * CVE-2022-1854: Use after free in ANGLE
  * CVE-2022-1855: Use after free in Messaging
  * CVE-2022-1856: Use after free in User Education
  * CVE-2022-1857: Insufficient policy enforcement in File System API
  * CVE-2022-1858: Out of bounds read in DevTools
  * CVE-2022-1859: Use after free in Performance Manager
  * CVE-2022-1860: Use after free in UI Foundations
  * CVE-2022-1861: Use after free in Sharing
  * CVE-2022-1862: Inappropriate implementation in Extensions
  * CVE-2022-1863: Use after free in Tab Groups
  * CVE-2022-1864: Use after free in WebApp Installs
  * CVE-2022-1865: Use after free in Bookmarks
  * CVE-2022-1866: Use after free in Tablet Mode
  * CVE-2022-1867: Insufficient validation of untrusted input in Data Transfer
  * CVE-2022-1868: Inappropriate implementation in Extensions API
  * CVE-2022-1869: Type Confusion in V8
  * CVE-2022-1870: Use after free in App Service
  * CVE-2022-1871: Insufficient policy enforcement in File System API
  * CVE-2022-1872: Insufficient policy enforcement in Extensions API
  * CVE-2022-1873: Insufficient policy enforcement in COOP
  * CVE-2022-1874: Insufficient policy enforcement in Safe Browsing
  * CVE-2022-1875: Inappropriate implementation in PDF
  * CVE-2022-1876: Heap buffer overflow in DevTools
- Added patches:
  * chromium-102-compiler.patch
  * chromium-102-fenced_frame_utils-include.patch
  * chromium-102-regex_pattern-array.patch
  * chromium-102-swiftshader-template-instantiation.patch
  * chromium-102-symbolize-include.patch
  * ffmpeg-new-channel-layout.patch
- Removed patches:
  * chromium-100-compiler.patch
  * chromium-80-QuicStreamSendBuffer-deleted-move-constructor.patch
  * chromium-95-quiche-include.patch
  * chromium-fix-swiftshader-template.patch
  * chromium-missing-include-tuple.patch
  * chromium-webrtc-stats-missing-vector.patch
  * chromium-101-segmentation_platform-type.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654084800">- Disable ARM control flow integrity, it causes build issues
  at the moment
- Try a different SVG (black logo on GNOME)
- Removed patches:
  * chromium-third_party-symbolize-missing-include.patch
  (replaced by chromium-102-symbolize-include.patch)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654689600">- Switch to GTK4 on TW and Leap 15.4+ (boo#1200139)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1654862400">- Chromium 102.0.5005.115 (boo#1200423)
  * CVE-2022-2007: Use after free in WebGPU
  * CVE-2022-2008: Out of bounds memory access in WebGL
  * CVE-2022-2010: Out of bounds read in compositing
  * CVE-2022-2011: Use after free in ANGLE</changelog>
</package>
<package pkgid="d06667dbf8c01962ba852070fe103e74df7b496accbbfa81ddec5f69cef2aab1" name="chromium" arch="aarch64">
  <version epoch="0" ver="102.0.5005.61" rel="bp154.2.5.3"/>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1642680000">- Revert chromium-94-ffmpeg-roll.patch on TW: fix moved to
  FFmpeg</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642766400">- Chromium 97.0.4692.99 (boo#1194919):
  * CVE-2022-0289: Use after free in Safe browsing
  * CVE-2022-0290: Use after free in Site isolation
  * CVE-2022-0291: Inappropriate implementation in Storage
  * CVE-2022-0292: Inappropriate implementation in Fenced Frames
  * CVE-2022-0293: Use after free in Web packaging
  * CVE-2022-0294: Inappropriate implementation in Push messaging
  * CVE-2022-0295: Use after free in Omnibox
  * CVE-2022-0296: Use after free in Printing
  * CVE-2022-0297: Use after free in Vulkan
  * CVE-2022-0298: Use after free in Scheduling
  * CVE-2022-0300: Use after free in Text Input Method Editor
  * CVE-2022-0301: Heap buffer overflow in DevTools
  * CVE-2022-0302: Use after free in Omnibox
  * CVE-2022-0303: Race in GPU Watchdog
  * CVE-2022-0304: Use after free in Bookmarks
  * CVE-2022-0305: Inappropriate implementation in Service Worker API
  * CVE-2022-0306: Heap buffer overflow in PDFium
  * CVE-2022-0307: Use after free in Optimization Guide
  * CVE-2022-0308: Use after free in Data Transfer
  * CVE-2022-0309: Inappropriate implementation in Autofill
  * CVE-2022-0310: Heap buffer overflow in Task Manager
  * CVE-2022-0311: Heap buffer overflow in Task Manager
  * Various fixes from internal audits, fuzzing and other initiatives
- drop upstreamed patches:
  * fix-tag-dragging-in-Mutter.patch
  * fix-tag-dragging-in-KWin.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1643889600">- Chromium 98.0.4758.80 (boo#1195420)
  * CVE-2022-0452: Use after free in Safe Browsing
  * CVE-2022-0453: Use after free in Reader Mode
  * CVE-2022-0454: Heap buffer overflow in ANGLE
  * CVE-2022-0455: Inappropriate implementation in Full Screen Mode
  * CVE-2022-0456: Use after free in Web Search
  * CVE-2022-0457: Type Confusion in V8
  * CVE-2022-0459: Use after free in Screen Capture
  * CVE-2022-0460: Use after free in Window Dialog
  * CVE-2022-0461: Policy bypass in COOP
  * CVE-2022-0462: Inappropriate implementation in Scroll
  * CVE-2022-0463: Use after free in Accessibility
  * CVE-2022-0464: Use after free in Accessibility
  * CVE-2022-0465: Use after free in Extensions
  * CVE-2022-0466: Inappropriate implementation in Extensions Platform
  * CVE-2022-0467: Inappropriate implementation in Pointer Lock
  * CVE-2022-0468: Use after free in Payments
  * CVE-2022-0469: Use after free in Cast
  * CVE-2022-0470: Out of bounds memory access in V8
  * Various fixes from internal audits, fuzzing and other initiatives
- drop upstreamed patches:
  * chromium-97-Point-constexpr.patch
- add patches:
  * chromium-98-MiraclePtr-gcc-ice.patch
  * chromium-98-WaylandFrameManager-check.patch
- change chromium-97-compiler.patch to chromium-98-compiler.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1644926400">- Chromium 98.0.4758.102 (boo#1195986)
  * CVE-2022-0603: Use after free in File Manager
  * CVE-2022-0604: Heap buffer overflow in Tab Groups
  * CVE-2022-0605: Use after free in Webstore API
  * CVE-2022-0606: Use after free in ANGLE
  * CVE-2022-0607: Use after free in GPU
  * CVE-2022-0608: Integer overflow in Mojo
  * CVE-2022-0609: Use after free in Animation
  * CVE-2022-0610: Inappropriate implementation in Gamepad API
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1646395200">- Chromium 99.0.4844.51 (boo#1196641)
  * CVE-2022-0789: Heap buffer overflow in ANGLE
  * CVE-2022-0790: Use after free in Cast UI
  * CVE-2022-0791: Use after free in Omnibox
  * CVE-2022-0792: Out of bounds read in ANGLE
  * CVE-2022-0793: Use after free in Views
  * CVE-2022-0794: Use after free in WebShare
  * CVE-2022-0795: Type Confusion in Blink Layout
  * CVE-2022-0796: Use after free in Media
  * CVE-2022-0797: Out of bounds memory access in Mojo
  * CVE-2022-0798: Use after free in MediaStream
  * CVE-2022-0799: Insufficient policy enforcement in Installer
  * CVE-2022-0800: Heap buffer overflow in Cast UI
  * CVE-2022-0801: Inappropriate implementation in HTML parser
  * CVE-2022-0802: Inappropriate implementation in Full screen mode
  * CVE-2022-0803: Inappropriate implementation in Permissions
  * CVE-2022-0804: Inappropriate implementation in Full screen mode
  * CVE-2022-0805: Use after free in Browser Switcher
  * CVE-2022-0806: Data leak in Canvas
  * CVE-2022-0807: Inappropriate implementation in Autofill
  * CVE-2022-0808: Use after free in Chrome OS Shell
  * CVE-2022-0809: Out of bounds memory access in WebXR
- Removed patches:
  * chromium-96-EnumTable-crash.patch
  * chromium-89-missing-cstring-header.patch
  * chromium-95-libyuv-aarch64.patch
  * chromium-95-libyuv-arm.patch
  * chromium-98-MiraclePtr-gcc-ice.patch
  * chromium-98-WaylandFrameManager-check.patch
- Added patches:
  * chromium-97-arm-tflite-cast.patch
  * chromium-98-gtk4-build.patch
  * chromium-99-AutofillAssistantModelExecutor-NoDestructor.patch
  * chromium-98-EnumTable-crash.patch
  * chromium-third_party-symbolize-missing-include.patch
  * chromium-v8-missing-utility-include.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1647432000">- Chromium 99.0.4844.74 (boo#1197163)
  * CVE-2022-0971: Use after free in Blink Layout
  * CVE-2022-0972: Use after free in Extensions
  * CVE-2022-0973: Use after free in Safe Browsing
  * CVE-2022-0974: Use after free in Splitscreen
  * CVE-2022-0975: Use after free in ANGLE
  * CVE-2022-0976: Heap buffer overflow in GPU
  * CVE-2022-0977: Use after free in Browser UI
  * CVE-2022-0978: Use after free in ANGLE
  * CVE-2022-0979: Use after free in Safe Browsing
  * CVE-2022-0980: Use after free in New Tab Page
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1647864000">- Chromium 99.0.4844.82:
  * Fix potential problem in Hangouts (boo#1197332)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1648296000">- Chromium 99.0.4844.84:
  * CVE-2022-1096: Type Confusion in V8 (boo#1197552)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1648555200">- Update disk constraints</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1648641600">- Chromium 100.0.4896.60 (boo#1197680)
  * CVE-2022-1125: Use after free in Portals
  * CVE-2022-1127: Use after free in QR Code Generator
  * CVE-2022-1128: Inappropriate implementation in Web Share API
  * CVE-2022-1129: Inappropriate implementation in Full Screen Mode
  * CVE-2022-1130: Insufficient validation of untrusted input in WebOTP
  * CVE-2022-1131: Use after free in Cast UI
  * CVE-2022-1132: Inappropriate implementation in Virtual Keyboard
  * CVE-2022-1133: Use after free in WebRTC
  * CVE-2022-1134: Type Confusion in V8
  * CVE-2022-1135: Use after free in Shopping Cart
  * CVE-2022-1136: Use after free in Tab Strip
  * CVE-2022-1137: Inappropriate implementation in Extensions
  * CVE-2022-1138: Inappropriate implementation in Web Cursor
  * CVE-2022-1139: Inappropriate implementation in Background Fetch API
  * CVE-2022-1141: Use after free in File Manager
  * CVE-2022-1142: Heap buffer overflow in WebUI
  * CVE-2022-1143: Heap buffer overflow in WebUI
  * CVE-2022-1144: Use after free in WebUI
  * CVE-2022-1145: Use after free in Extensions
  * CVE-2022-1146: Inappropriate implementation in Resource Timing
- Added patches:
  * chromium-100-compiler.patch
  * chromium-100-GLImplementationParts-constexpr.patch
  * chromium-100-InMilliseconds-constexpr.patch
  * chromium-100-SCTHashdanceMetadata-move.patch
  * chromium-100-macro-typo.patch
- Removed patches:
  * chromium-98-compiler.patch
  * chromium-86-nearby-explicit.patch
  * chromium-glibc-2.34.patch
  * chromium-v8-missing-utility-include.patch
  * chromium-99-AutofillAssistantModelExecutor-NoDestructor.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1649160000">- Chromium 100.0.4896.75:
  * CVE-2022-1232: Type Confusion in V8 (boo#1198053)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1649592000">- Patches for GCC 12:
  * chromium-fix-swiftshader-template.patch
  * chromium-missing-include-tuple.patch
  * chromium-webrtc-stats-missing-vector.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1649764800">- Chromium 100.0.4896.88 (boo#1198361)
  * CVE-2022-1305: Use after free in storage
  * CVE-2022-1306: Inappropriate implementation in compositing
  * CVE-2022-1307: Inappropriate implementation in full screen
  * CVE-2022-1308: Use after free in BFCache
  * CVE-2022-1309: Insufficient policy enforcement in developer tools
  * CVE-2022-1310: Use after free in regular expressions
  * CVE-2022-1311: Use after free in Chrome OS shell
  * CVE-2022-1312: Use after free in storage
  * CVE-2022-1313: Use after free in tab groups
  * CVE-2022-1314: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1650024000">- Chromium 100.0.4896.127 (boo#1198509)
  * CVE-2022-1364: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1650542400">- Fixes for go 1.18</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1651665600">- Chromium 101.0.4951.54 (boo#1199118)
- Chromium 101.0.4951.41 (boo#1198917)
  * CVE-2022-1477: Use after free in Vulkan
  * CVE-2022-1478: Use after free in SwiftShader
  * CVE-2022-1479: Use after free in ANGLE
  * CVE-2022-1480: Use after free in Device API
  * CVE-2022-1481: Use after free in Sharing
  * CVE-2022-1482: Inappropriate implementation in WebGL
  * CVE-2022-1483: Heap buffer overflow in WebGPU
  * CVE-2022-1484: Heap buffer overflow in Web UI Settings
  * CVE-2022-1485: Use after free in File System API
  * CVE-2022-1486: Type Confusion in V8
  * CVE-2022-1487: Use after free in Ozone
  * CVE-2022-1488: Inappropriate implementation in Extensions API
  * CVE-2022-1489: Out of bounds memory access in UI Shelf
  * CVE-2022-1490: Use after free in Browser Switcher
  * CVE-2022-1491: Use after free in Bookmarks
  * CVE-2022-1492: Insufficient data validation in Blink Editing
  * CVE-2022-1493: Use after free in Dev Tools
  * CVE-2022-1494: Insufficient data validation in Trusted Types
  * CVE-2022-1495: Incorrect security UI in Downloads
  * CVE-2022-1496: Use after free in File Manager
  * CVE-2022-1497: Inappropriate implementation in Input
  * CVE-2022-1498: Inappropriate implementation in HTML Parser
  * CVE-2022-1499: Inappropriate implementation in WebAuthentication
  * CVE-2022-1500: Insufficient data validation in Dev Tools
  * CVE-2022-1501: Inappropriate implementation in iframe
- Added patches:
  * chromium-101-libxml-unbundle.patch
  * chromium-101-segmentation_platform-type.patch
- Removed patches:
  * chromium-100-SCTHashdanceMetadata-move.patch
  * chromium-100-GLImplementationParts-constexpr.patch
  * chromium-100-macro-typo.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1652270400">- Chromium 101.0.4951.64 (boo#1199409)
  * CVE-2022-1633: Use after free in Sharesheet
  * CVE-2022-1634: Use after free in Browser UI
  * CVE-2022-1635: Use after free in Permission Prompts
  * CVE-2022-1636: Use after free in Performance APIs
  * CVE-2022-1637: Inappropriate implementation in Web Contents
  * CVE-2022-1638: Heap buffer overflow in V8 Internationalization
  * CVE-2022-1639: Use after free in ANGLE
  * CVE-2022-1640: Use after free in Sharing
  * CVE-2022-1641: Use after free in Web UI Diagnostics</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1652616000">- Chromium 101.0.4951.67
  * fixes for other platforms</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1653652800">- Chromium 102.0.5001.61 (boo#1199893)
  * CVE-2022-1853: Use after free in Indexed DB
  * CVE-2022-1854: Use after free in ANGLE
  * CVE-2022-1855: Use after free in Messaging
  * CVE-2022-1856: Use after free in User Education
  * CVE-2022-1857: Insufficient policy enforcement in File System API
  * CVE-2022-1858: Out of bounds read in DevTools
  * CVE-2022-1859: Use after free in Performance Manager
  * CVE-2022-1860: Use after free in UI Foundations
  * CVE-2022-1861: Use after free in Sharing
  * CVE-2022-1862: Inappropriate implementation in Extensions
  * CVE-2022-1863: Use after free in Tab Groups
  * CVE-2022-1864: Use after free in WebApp Installs
  * CVE-2022-1865: Use after free in Bookmarks
  * CVE-2022-1866: Use after free in Tablet Mode
  * CVE-2022-1867: Insufficient validation of untrusted input in Data Transfer
  * CVE-2022-1868: Inappropriate implementation in Extensions API
  * CVE-2022-1869: Type Confusion in V8
  * CVE-2022-1870: Use after free in App Service
  * CVE-2022-1871: Insufficient policy enforcement in File System API
  * CVE-2022-1872: Insufficient policy enforcement in Extensions API
  * CVE-2022-1873: Insufficient policy enforcement in COOP
  * CVE-2022-1874: Insufficient policy enforcement in Safe Browsing
  * CVE-2022-1875: Inappropriate implementation in PDF
  * CVE-2022-1876: Heap buffer overflow in DevTools
- Added patches:
  * chromium-102-compiler.patch
  * chromium-102-fenced_frame_utils-include.patch
  * chromium-102-regex_pattern-array.patch
  * chromium-102-swiftshader-template-instantiation.patch
  * chromium-102-symbolize-include.patch
  * ffmpeg-new-channel-layout.patch
- Removed patches:
  * chromium-100-compiler.patch
  * chromium-80-QuicStreamSendBuffer-deleted-move-constructor.patch
  * chromium-95-quiche-include.patch
  * chromium-fix-swiftshader-template.patch
  * chromium-missing-include-tuple.patch
  * chromium-webrtc-stats-missing-vector.patch
  * chromium-101-segmentation_platform-type.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654084800">- Disable ARM control flow integrity, it causes build issues
  at the moment
- Try a different SVG (black logo on GNOME)
- Removed patches:
  * chromium-third_party-symbolize-missing-include.patch
  (replaced by chromium-102-symbolize-include.patch)</changelog>
</package>
<package pkgid="27f94160fb07171a8fe14555629e1510d49673a1656d079a53bf93cd56affe0a" name="chromium" arch="src">
  <version epoch="0" ver="102.0.5005.61" rel="bp154.2.5.3"/>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1642680000">- Revert chromium-94-ffmpeg-roll.patch on TW: fix moved to
  FFmpeg</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642766400">- Chromium 97.0.4692.99 (boo#1194919):
  * CVE-2022-0289: Use after free in Safe browsing
  * CVE-2022-0290: Use after free in Site isolation
  * CVE-2022-0291: Inappropriate implementation in Storage
  * CVE-2022-0292: Inappropriate implementation in Fenced Frames
  * CVE-2022-0293: Use after free in Web packaging
  * CVE-2022-0294: Inappropriate implementation in Push messaging
  * CVE-2022-0295: Use after free in Omnibox
  * CVE-2022-0296: Use after free in Printing
  * CVE-2022-0297: Use after free in Vulkan
  * CVE-2022-0298: Use after free in Scheduling
  * CVE-2022-0300: Use after free in Text Input Method Editor
  * CVE-2022-0301: Heap buffer overflow in DevTools
  * CVE-2022-0302: Use after free in Omnibox
  * CVE-2022-0303: Race in GPU Watchdog
  * CVE-2022-0304: Use after free in Bookmarks
  * CVE-2022-0305: Inappropriate implementation in Service Worker API
  * CVE-2022-0306: Heap buffer overflow in PDFium
  * CVE-2022-0307: Use after free in Optimization Guide
  * CVE-2022-0308: Use after free in Data Transfer
  * CVE-2022-0309: Inappropriate implementation in Autofill
  * CVE-2022-0310: Heap buffer overflow in Task Manager
  * CVE-2022-0311: Heap buffer overflow in Task Manager
  * Various fixes from internal audits, fuzzing and other initiatives
- drop upstreamed patches:
  * fix-tag-dragging-in-Mutter.patch
  * fix-tag-dragging-in-KWin.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1643889600">- Chromium 98.0.4758.80 (boo#1195420)
  * CVE-2022-0452: Use after free in Safe Browsing
  * CVE-2022-0453: Use after free in Reader Mode
  * CVE-2022-0454: Heap buffer overflow in ANGLE
  * CVE-2022-0455: Inappropriate implementation in Full Screen Mode
  * CVE-2022-0456: Use after free in Web Search
  * CVE-2022-0457: Type Confusion in V8
  * CVE-2022-0459: Use after free in Screen Capture
  * CVE-2022-0460: Use after free in Window Dialog
  * CVE-2022-0461: Policy bypass in COOP
  * CVE-2022-0462: Inappropriate implementation in Scroll
  * CVE-2022-0463: Use after free in Accessibility
  * CVE-2022-0464: Use after free in Accessibility
  * CVE-2022-0465: Use after free in Extensions
  * CVE-2022-0466: Inappropriate implementation in Extensions Platform
  * CVE-2022-0467: Inappropriate implementation in Pointer Lock
  * CVE-2022-0468: Use after free in Payments
  * CVE-2022-0469: Use after free in Cast
  * CVE-2022-0470: Out of bounds memory access in V8
  * Various fixes from internal audits, fuzzing and other initiatives
- drop upstreamed patches:
  * chromium-97-Point-constexpr.patch
- add patches:
  * chromium-98-MiraclePtr-gcc-ice.patch
  * chromium-98-WaylandFrameManager-check.patch
- change chromium-97-compiler.patch to chromium-98-compiler.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1644926400">- Chromium 98.0.4758.102 (boo#1195986)
  * CVE-2022-0603: Use after free in File Manager
  * CVE-2022-0604: Heap buffer overflow in Tab Groups
  * CVE-2022-0605: Use after free in Webstore API
  * CVE-2022-0606: Use after free in ANGLE
  * CVE-2022-0607: Use after free in GPU
  * CVE-2022-0608: Integer overflow in Mojo
  * CVE-2022-0609: Use after free in Animation
  * CVE-2022-0610: Inappropriate implementation in Gamepad API
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1646395200">- Chromium 99.0.4844.51 (boo#1196641)
  * CVE-2022-0789: Heap buffer overflow in ANGLE
  * CVE-2022-0790: Use after free in Cast UI
  * CVE-2022-0791: Use after free in Omnibox
  * CVE-2022-0792: Out of bounds read in ANGLE
  * CVE-2022-0793: Use after free in Views
  * CVE-2022-0794: Use after free in WebShare
  * CVE-2022-0795: Type Confusion in Blink Layout
  * CVE-2022-0796: Use after free in Media
  * CVE-2022-0797: Out of bounds memory access in Mojo
  * CVE-2022-0798: Use after free in MediaStream
  * CVE-2022-0799: Insufficient policy enforcement in Installer
  * CVE-2022-0800: Heap buffer overflow in Cast UI
  * CVE-2022-0801: Inappropriate implementation in HTML parser
  * CVE-2022-0802: Inappropriate implementation in Full screen mode
  * CVE-2022-0803: Inappropriate implementation in Permissions
  * CVE-2022-0804: Inappropriate implementation in Full screen mode
  * CVE-2022-0805: Use after free in Browser Switcher
  * CVE-2022-0806: Data leak in Canvas
  * CVE-2022-0807: Inappropriate implementation in Autofill
  * CVE-2022-0808: Use after free in Chrome OS Shell
  * CVE-2022-0809: Out of bounds memory access in WebXR
- Removed patches:
  * chromium-96-EnumTable-crash.patch
  * chromium-89-missing-cstring-header.patch
  * chromium-95-libyuv-aarch64.patch
  * chromium-95-libyuv-arm.patch
  * chromium-98-MiraclePtr-gcc-ice.patch
  * chromium-98-WaylandFrameManager-check.patch
- Added patches:
  * chromium-97-arm-tflite-cast.patch
  * chromium-98-gtk4-build.patch
  * chromium-99-AutofillAssistantModelExecutor-NoDestructor.patch
  * chromium-98-EnumTable-crash.patch
  * chromium-third_party-symbolize-missing-include.patch
  * chromium-v8-missing-utility-include.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1647432000">- Chromium 99.0.4844.74 (boo#1197163)
  * CVE-2022-0971: Use after free in Blink Layout
  * CVE-2022-0972: Use after free in Extensions
  * CVE-2022-0973: Use after free in Safe Browsing
  * CVE-2022-0974: Use after free in Splitscreen
  * CVE-2022-0975: Use after free in ANGLE
  * CVE-2022-0976: Heap buffer overflow in GPU
  * CVE-2022-0977: Use after free in Browser UI
  * CVE-2022-0978: Use after free in ANGLE
  * CVE-2022-0979: Use after free in Safe Browsing
  * CVE-2022-0980: Use after free in New Tab Page
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1647864000">- Chromium 99.0.4844.82:
  * Fix potential problem in Hangouts (boo#1197332)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1648296000">- Chromium 99.0.4844.84:
  * CVE-2022-1096: Type Confusion in V8 (boo#1197552)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1648555200">- Update disk constraints</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1648641600">- Chromium 100.0.4896.60 (boo#1197680)
  * CVE-2022-1125: Use after free in Portals
  * CVE-2022-1127: Use after free in QR Code Generator
  * CVE-2022-1128: Inappropriate implementation in Web Share API
  * CVE-2022-1129: Inappropriate implementation in Full Screen Mode
  * CVE-2022-1130: Insufficient validation of untrusted input in WebOTP
  * CVE-2022-1131: Use after free in Cast UI
  * CVE-2022-1132: Inappropriate implementation in Virtual Keyboard
  * CVE-2022-1133: Use after free in WebRTC
  * CVE-2022-1134: Type Confusion in V8
  * CVE-2022-1135: Use after free in Shopping Cart
  * CVE-2022-1136: Use after free in Tab Strip
  * CVE-2022-1137: Inappropriate implementation in Extensions
  * CVE-2022-1138: Inappropriate implementation in Web Cursor
  * CVE-2022-1139: Inappropriate implementation in Background Fetch API
  * CVE-2022-1141: Use after free in File Manager
  * CVE-2022-1142: Heap buffer overflow in WebUI
  * CVE-2022-1143: Heap buffer overflow in WebUI
  * CVE-2022-1144: Use after free in WebUI
  * CVE-2022-1145: Use after free in Extensions
  * CVE-2022-1146: Inappropriate implementation in Resource Timing
- Added patches:
  * chromium-100-compiler.patch
  * chromium-100-GLImplementationParts-constexpr.patch
  * chromium-100-InMilliseconds-constexpr.patch
  * chromium-100-SCTHashdanceMetadata-move.patch
  * chromium-100-macro-typo.patch
- Removed patches:
  * chromium-98-compiler.patch
  * chromium-86-nearby-explicit.patch
  * chromium-glibc-2.34.patch
  * chromium-v8-missing-utility-include.patch
  * chromium-99-AutofillAssistantModelExecutor-NoDestructor.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1649160000">- Chromium 100.0.4896.75:
  * CVE-2022-1232: Type Confusion in V8 (boo#1198053)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1649592000">- Patches for GCC 12:
  * chromium-fix-swiftshader-template.patch
  * chromium-missing-include-tuple.patch
  * chromium-webrtc-stats-missing-vector.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1649764800">- Chromium 100.0.4896.88 (boo#1198361)
  * CVE-2022-1305: Use after free in storage
  * CVE-2022-1306: Inappropriate implementation in compositing
  * CVE-2022-1307: Inappropriate implementation in full screen
  * CVE-2022-1308: Use after free in BFCache
  * CVE-2022-1309: Insufficient policy enforcement in developer tools
  * CVE-2022-1310: Use after free in regular expressions
  * CVE-2022-1311: Use after free in Chrome OS shell
  * CVE-2022-1312: Use after free in storage
  * CVE-2022-1313: Use after free in tab groups
  * CVE-2022-1314: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1650024000">- Chromium 100.0.4896.127 (boo#1198509)
  * CVE-2022-1364: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1650542400">- Fixes for go 1.18</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1651665600">- Chromium 101.0.4951.54 (boo#1199118)
- Chromium 101.0.4951.41 (boo#1198917)
  * CVE-2022-1477: Use after free in Vulkan
  * CVE-2022-1478: Use after free in SwiftShader
  * CVE-2022-1479: Use after free in ANGLE
  * CVE-2022-1480: Use after free in Device API
  * CVE-2022-1481: Use after free in Sharing
  * CVE-2022-1482: Inappropriate implementation in WebGL
  * CVE-2022-1483: Heap buffer overflow in WebGPU
  * CVE-2022-1484: Heap buffer overflow in Web UI Settings
  * CVE-2022-1485: Use after free in File System API
  * CVE-2022-1486: Type Confusion in V8
  * CVE-2022-1487: Use after free in Ozone
  * CVE-2022-1488: Inappropriate implementation in Extensions API
  * CVE-2022-1489: Out of bounds memory access in UI Shelf
  * CVE-2022-1490: Use after free in Browser Switcher
  * CVE-2022-1491: Use after free in Bookmarks
  * CVE-2022-1492: Insufficient data validation in Blink Editing
  * CVE-2022-1493: Use after free in Dev Tools
  * CVE-2022-1494: Insufficient data validation in Trusted Types
  * CVE-2022-1495: Incorrect security UI in Downloads
  * CVE-2022-1496: Use after free in File Manager
  * CVE-2022-1497: Inappropriate implementation in Input
  * CVE-2022-1498: Inappropriate implementation in HTML Parser
  * CVE-2022-1499: Inappropriate implementation in WebAuthentication
  * CVE-2022-1500: Insufficient data validation in Dev Tools
  * CVE-2022-1501: Inappropriate implementation in iframe
- Added patches:
  * chromium-101-libxml-unbundle.patch
  * chromium-101-segmentation_platform-type.patch
- Removed patches:
  * chromium-100-SCTHashdanceMetadata-move.patch
  * chromium-100-GLImplementationParts-constexpr.patch
  * chromium-100-macro-typo.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1652270400">- Chromium 101.0.4951.64 (boo#1199409)
  * CVE-2022-1633: Use after free in Sharesheet
  * CVE-2022-1634: Use after free in Browser UI
  * CVE-2022-1635: Use after free in Permission Prompts
  * CVE-2022-1636: Use after free in Performance APIs
  * CVE-2022-1637: Inappropriate implementation in Web Contents
  * CVE-2022-1638: Heap buffer overflow in V8 Internationalization
  * CVE-2022-1639: Use after free in ANGLE
  * CVE-2022-1640: Use after free in Sharing
  * CVE-2022-1641: Use after free in Web UI Diagnostics</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1652616000">- Chromium 101.0.4951.67
  * fixes for other platforms</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1653652800">- Chromium 102.0.5001.61 (boo#1199893)
  * CVE-2022-1853: Use after free in Indexed DB
  * CVE-2022-1854: Use after free in ANGLE
  * CVE-2022-1855: Use after free in Messaging
  * CVE-2022-1856: Use after free in User Education
  * CVE-2022-1857: Insufficient policy enforcement in File System API
  * CVE-2022-1858: Out of bounds read in DevTools
  * CVE-2022-1859: Use after free in Performance Manager
  * CVE-2022-1860: Use after free in UI Foundations
  * CVE-2022-1861: Use after free in Sharing
  * CVE-2022-1862: Inappropriate implementation in Extensions
  * CVE-2022-1863: Use after free in Tab Groups
  * CVE-2022-1864: Use after free in WebApp Installs
  * CVE-2022-1865: Use after free in Bookmarks
  * CVE-2022-1866: Use after free in Tablet Mode
  * CVE-2022-1867: Insufficient validation of untrusted input in Data Transfer
  * CVE-2022-1868: Inappropriate implementation in Extensions API
  * CVE-2022-1869: Type Confusion in V8
  * CVE-2022-1870: Use after free in App Service
  * CVE-2022-1871: Insufficient policy enforcement in File System API
  * CVE-2022-1872: Insufficient policy enforcement in Extensions API
  * CVE-2022-1873: Insufficient policy enforcement in COOP
  * CVE-2022-1874: Insufficient policy enforcement in Safe Browsing
  * CVE-2022-1875: Inappropriate implementation in PDF
  * CVE-2022-1876: Heap buffer overflow in DevTools
- Added patches:
  * chromium-102-compiler.patch
  * chromium-102-fenced_frame_utils-include.patch
  * chromium-102-regex_pattern-array.patch
  * chromium-102-swiftshader-template-instantiation.patch
  * chromium-102-symbolize-include.patch
  * ffmpeg-new-channel-layout.patch
- Removed patches:
  * chromium-100-compiler.patch
  * chromium-80-QuicStreamSendBuffer-deleted-move-constructor.patch
  * chromium-95-quiche-include.patch
  * chromium-fix-swiftshader-template.patch
  * chromium-missing-include-tuple.patch
  * chromium-webrtc-stats-missing-vector.patch
  * chromium-101-segmentation_platform-type.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654084800">- Disable ARM control flow integrity, it causes build issues
  at the moment
- Try a different SVG (black logo on GNOME)
- Removed patches:
  * chromium-third_party-symbolize-missing-include.patch
  (replaced by chromium-102-symbolize-include.patch)</changelog>
</package>
<package pkgid="7a1a637220633f815dce463f99059c2ee7d73d909c3ecbc2cd934f252d324f75" name="chromium" arch="x86_64">
  <version epoch="0" ver="102.0.5005.61" rel="bp154.2.5.3"/>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1642680000">- Revert chromium-94-ffmpeg-roll.patch on TW: fix moved to
  FFmpeg</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642766400">- Chromium 97.0.4692.99 (boo#1194919):
  * CVE-2022-0289: Use after free in Safe browsing
  * CVE-2022-0290: Use after free in Site isolation
  * CVE-2022-0291: Inappropriate implementation in Storage
  * CVE-2022-0292: Inappropriate implementation in Fenced Frames
  * CVE-2022-0293: Use after free in Web packaging
  * CVE-2022-0294: Inappropriate implementation in Push messaging
  * CVE-2022-0295: Use after free in Omnibox
  * CVE-2022-0296: Use after free in Printing
  * CVE-2022-0297: Use after free in Vulkan
  * CVE-2022-0298: Use after free in Scheduling
  * CVE-2022-0300: Use after free in Text Input Method Editor
  * CVE-2022-0301: Heap buffer overflow in DevTools
  * CVE-2022-0302: Use after free in Omnibox
  * CVE-2022-0303: Race in GPU Watchdog
  * CVE-2022-0304: Use after free in Bookmarks
  * CVE-2022-0305: Inappropriate implementation in Service Worker API
  * CVE-2022-0306: Heap buffer overflow in PDFium
  * CVE-2022-0307: Use after free in Optimization Guide
  * CVE-2022-0308: Use after free in Data Transfer
  * CVE-2022-0309: Inappropriate implementation in Autofill
  * CVE-2022-0310: Heap buffer overflow in Task Manager
  * CVE-2022-0311: Heap buffer overflow in Task Manager
  * Various fixes from internal audits, fuzzing and other initiatives
- drop upstreamed patches:
  * fix-tag-dragging-in-Mutter.patch
  * fix-tag-dragging-in-KWin.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1643889600">- Chromium 98.0.4758.80 (boo#1195420)
  * CVE-2022-0452: Use after free in Safe Browsing
  * CVE-2022-0453: Use after free in Reader Mode
  * CVE-2022-0454: Heap buffer overflow in ANGLE
  * CVE-2022-0455: Inappropriate implementation in Full Screen Mode
  * CVE-2022-0456: Use after free in Web Search
  * CVE-2022-0457: Type Confusion in V8
  * CVE-2022-0459: Use after free in Screen Capture
  * CVE-2022-0460: Use after free in Window Dialog
  * CVE-2022-0461: Policy bypass in COOP
  * CVE-2022-0462: Inappropriate implementation in Scroll
  * CVE-2022-0463: Use after free in Accessibility
  * CVE-2022-0464: Use after free in Accessibility
  * CVE-2022-0465: Use after free in Extensions
  * CVE-2022-0466: Inappropriate implementation in Extensions Platform
  * CVE-2022-0467: Inappropriate implementation in Pointer Lock
  * CVE-2022-0468: Use after free in Payments
  * CVE-2022-0469: Use after free in Cast
  * CVE-2022-0470: Out of bounds memory access in V8
  * Various fixes from internal audits, fuzzing and other initiatives
- drop upstreamed patches:
  * chromium-97-Point-constexpr.patch
- add patches:
  * chromium-98-MiraclePtr-gcc-ice.patch
  * chromium-98-WaylandFrameManager-check.patch
- change chromium-97-compiler.patch to chromium-98-compiler.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1644926400">- Chromium 98.0.4758.102 (boo#1195986)
  * CVE-2022-0603: Use after free in File Manager
  * CVE-2022-0604: Heap buffer overflow in Tab Groups
  * CVE-2022-0605: Use after free in Webstore API
  * CVE-2022-0606: Use after free in ANGLE
  * CVE-2022-0607: Use after free in GPU
  * CVE-2022-0608: Integer overflow in Mojo
  * CVE-2022-0609: Use after free in Animation
  * CVE-2022-0610: Inappropriate implementation in Gamepad API
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1646395200">- Chromium 99.0.4844.51 (boo#1196641)
  * CVE-2022-0789: Heap buffer overflow in ANGLE
  * CVE-2022-0790: Use after free in Cast UI
  * CVE-2022-0791: Use after free in Omnibox
  * CVE-2022-0792: Out of bounds read in ANGLE
  * CVE-2022-0793: Use after free in Views
  * CVE-2022-0794: Use after free in WebShare
  * CVE-2022-0795: Type Confusion in Blink Layout
  * CVE-2022-0796: Use after free in Media
  * CVE-2022-0797: Out of bounds memory access in Mojo
  * CVE-2022-0798: Use after free in MediaStream
  * CVE-2022-0799: Insufficient policy enforcement in Installer
  * CVE-2022-0800: Heap buffer overflow in Cast UI
  * CVE-2022-0801: Inappropriate implementation in HTML parser
  * CVE-2022-0802: Inappropriate implementation in Full screen mode
  * CVE-2022-0803: Inappropriate implementation in Permissions
  * CVE-2022-0804: Inappropriate implementation in Full screen mode
  * CVE-2022-0805: Use after free in Browser Switcher
  * CVE-2022-0806: Data leak in Canvas
  * CVE-2022-0807: Inappropriate implementation in Autofill
  * CVE-2022-0808: Use after free in Chrome OS Shell
  * CVE-2022-0809: Out of bounds memory access in WebXR
- Removed patches:
  * chromium-96-EnumTable-crash.patch
  * chromium-89-missing-cstring-header.patch
  * chromium-95-libyuv-aarch64.patch
  * chromium-95-libyuv-arm.patch
  * chromium-98-MiraclePtr-gcc-ice.patch
  * chromium-98-WaylandFrameManager-check.patch
- Added patches:
  * chromium-97-arm-tflite-cast.patch
  * chromium-98-gtk4-build.patch
  * chromium-99-AutofillAssistantModelExecutor-NoDestructor.patch
  * chromium-98-EnumTable-crash.patch
  * chromium-third_party-symbolize-missing-include.patch
  * chromium-v8-missing-utility-include.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1647432000">- Chromium 99.0.4844.74 (boo#1197163)
  * CVE-2022-0971: Use after free in Blink Layout
  * CVE-2022-0972: Use after free in Extensions
  * CVE-2022-0973: Use after free in Safe Browsing
  * CVE-2022-0974: Use after free in Splitscreen
  * CVE-2022-0975: Use after free in ANGLE
  * CVE-2022-0976: Heap buffer overflow in GPU
  * CVE-2022-0977: Use after free in Browser UI
  * CVE-2022-0978: Use after free in ANGLE
  * CVE-2022-0979: Use after free in Safe Browsing
  * CVE-2022-0980: Use after free in New Tab Page
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1647864000">- Chromium 99.0.4844.82:
  * Fix potential problem in Hangouts (boo#1197332)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1648296000">- Chromium 99.0.4844.84:
  * CVE-2022-1096: Type Confusion in V8 (boo#1197552)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1648555200">- Update disk constraints</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1648641600">- Chromium 100.0.4896.60 (boo#1197680)
  * CVE-2022-1125: Use after free in Portals
  * CVE-2022-1127: Use after free in QR Code Generator
  * CVE-2022-1128: Inappropriate implementation in Web Share API
  * CVE-2022-1129: Inappropriate implementation in Full Screen Mode
  * CVE-2022-1130: Insufficient validation of untrusted input in WebOTP
  * CVE-2022-1131: Use after free in Cast UI
  * CVE-2022-1132: Inappropriate implementation in Virtual Keyboard
  * CVE-2022-1133: Use after free in WebRTC
  * CVE-2022-1134: Type Confusion in V8
  * CVE-2022-1135: Use after free in Shopping Cart
  * CVE-2022-1136: Use after free in Tab Strip
  * CVE-2022-1137: Inappropriate implementation in Extensions
  * CVE-2022-1138: Inappropriate implementation in Web Cursor
  * CVE-2022-1139: Inappropriate implementation in Background Fetch API
  * CVE-2022-1141: Use after free in File Manager
  * CVE-2022-1142: Heap buffer overflow in WebUI
  * CVE-2022-1143: Heap buffer overflow in WebUI
  * CVE-2022-1144: Use after free in WebUI
  * CVE-2022-1145: Use after free in Extensions
  * CVE-2022-1146: Inappropriate implementation in Resource Timing
- Added patches:
  * chromium-100-compiler.patch
  * chromium-100-GLImplementationParts-constexpr.patch
  * chromium-100-InMilliseconds-constexpr.patch
  * chromium-100-SCTHashdanceMetadata-move.patch
  * chromium-100-macro-typo.patch
- Removed patches:
  * chromium-98-compiler.patch
  * chromium-86-nearby-explicit.patch
  * chromium-glibc-2.34.patch
  * chromium-v8-missing-utility-include.patch
  * chromium-99-AutofillAssistantModelExecutor-NoDestructor.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1649160000">- Chromium 100.0.4896.75:
  * CVE-2022-1232: Type Confusion in V8 (boo#1198053)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1649592000">- Patches for GCC 12:
  * chromium-fix-swiftshader-template.patch
  * chromium-missing-include-tuple.patch
  * chromium-webrtc-stats-missing-vector.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1649764800">- Chromium 100.0.4896.88 (boo#1198361)
  * CVE-2022-1305: Use after free in storage
  * CVE-2022-1306: Inappropriate implementation in compositing
  * CVE-2022-1307: Inappropriate implementation in full screen
  * CVE-2022-1308: Use after free in BFCache
  * CVE-2022-1309: Insufficient policy enforcement in developer tools
  * CVE-2022-1310: Use after free in regular expressions
  * CVE-2022-1311: Use after free in Chrome OS shell
  * CVE-2022-1312: Use after free in storage
  * CVE-2022-1313: Use after free in tab groups
  * CVE-2022-1314: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1650024000">- Chromium 100.0.4896.127 (boo#1198509)
  * CVE-2022-1364: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1650542400">- Fixes for go 1.18</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1651665600">- Chromium 101.0.4951.54 (boo#1199118)
- Chromium 101.0.4951.41 (boo#1198917)
  * CVE-2022-1477: Use after free in Vulkan
  * CVE-2022-1478: Use after free in SwiftShader
  * CVE-2022-1479: Use after free in ANGLE
  * CVE-2022-1480: Use after free in Device API
  * CVE-2022-1481: Use after free in Sharing
  * CVE-2022-1482: Inappropriate implementation in WebGL
  * CVE-2022-1483: Heap buffer overflow in WebGPU
  * CVE-2022-1484: Heap buffer overflow in Web UI Settings
  * CVE-2022-1485: Use after free in File System API
  * CVE-2022-1486: Type Confusion in V8
  * CVE-2022-1487: Use after free in Ozone
  * CVE-2022-1488: Inappropriate implementation in Extensions API
  * CVE-2022-1489: Out of bounds memory access in UI Shelf
  * CVE-2022-1490: Use after free in Browser Switcher
  * CVE-2022-1491: Use after free in Bookmarks
  * CVE-2022-1492: Insufficient data validation in Blink Editing
  * CVE-2022-1493: Use after free in Dev Tools
  * CVE-2022-1494: Insufficient data validation in Trusted Types
  * CVE-2022-1495: Incorrect security UI in Downloads
  * CVE-2022-1496: Use after free in File Manager
  * CVE-2022-1497: Inappropriate implementation in Input
  * CVE-2022-1498: Inappropriate implementation in HTML Parser
  * CVE-2022-1499: Inappropriate implementation in WebAuthentication
  * CVE-2022-1500: Insufficient data validation in Dev Tools
  * CVE-2022-1501: Inappropriate implementation in iframe
- Added patches:
  * chromium-101-libxml-unbundle.patch
  * chromium-101-segmentation_platform-type.patch
- Removed patches:
  * chromium-100-SCTHashdanceMetadata-move.patch
  * chromium-100-GLImplementationParts-constexpr.patch
  * chromium-100-macro-typo.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1652270400">- Chromium 101.0.4951.64 (boo#1199409)
  * CVE-2022-1633: Use after free in Sharesheet
  * CVE-2022-1634: Use after free in Browser UI
  * CVE-2022-1635: Use after free in Permission Prompts
  * CVE-2022-1636: Use after free in Performance APIs
  * CVE-2022-1637: Inappropriate implementation in Web Contents
  * CVE-2022-1638: Heap buffer overflow in V8 Internationalization
  * CVE-2022-1639: Use after free in ANGLE
  * CVE-2022-1640: Use after free in Sharing
  * CVE-2022-1641: Use after free in Web UI Diagnostics</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1652616000">- Chromium 101.0.4951.67
  * fixes for other platforms</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1653652800">- Chromium 102.0.5001.61 (boo#1199893)
  * CVE-2022-1853: Use after free in Indexed DB
  * CVE-2022-1854: Use after free in ANGLE
  * CVE-2022-1855: Use after free in Messaging
  * CVE-2022-1856: Use after free in User Education
  * CVE-2022-1857: Insufficient policy enforcement in File System API
  * CVE-2022-1858: Out of bounds read in DevTools
  * CVE-2022-1859: Use after free in Performance Manager
  * CVE-2022-1860: Use after free in UI Foundations
  * CVE-2022-1861: Use after free in Sharing
  * CVE-2022-1862: Inappropriate implementation in Extensions
  * CVE-2022-1863: Use after free in Tab Groups
  * CVE-2022-1864: Use after free in WebApp Installs
  * CVE-2022-1865: Use after free in Bookmarks
  * CVE-2022-1866: Use after free in Tablet Mode
  * CVE-2022-1867: Insufficient validation of untrusted input in Data Transfer
  * CVE-2022-1868: Inappropriate implementation in Extensions API
  * CVE-2022-1869: Type Confusion in V8
  * CVE-2022-1870: Use after free in App Service
  * CVE-2022-1871: Insufficient policy enforcement in File System API
  * CVE-2022-1872: Insufficient policy enforcement in Extensions API
  * CVE-2022-1873: Insufficient policy enforcement in COOP
  * CVE-2022-1874: Insufficient policy enforcement in Safe Browsing
  * CVE-2022-1875: Inappropriate implementation in PDF
  * CVE-2022-1876: Heap buffer overflow in DevTools
- Added patches:
  * chromium-102-compiler.patch
  * chromium-102-fenced_frame_utils-include.patch
  * chromium-102-regex_pattern-array.patch
  * chromium-102-swiftshader-template-instantiation.patch
  * chromium-102-symbolize-include.patch
  * ffmpeg-new-channel-layout.patch
- Removed patches:
  * chromium-100-compiler.patch
  * chromium-80-QuicStreamSendBuffer-deleted-move-constructor.patch
  * chromium-95-quiche-include.patch
  * chromium-fix-swiftshader-template.patch
  * chromium-missing-include-tuple.patch
  * chromium-webrtc-stats-missing-vector.patch
  * chromium-101-segmentation_platform-type.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654084800">- Disable ARM control flow integrity, it causes build issues
  at the moment
- Try a different SVG (black logo on GNOME)
- Removed patches:
  * chromium-third_party-symbolize-missing-include.patch
  (replaced by chromium-102-symbolize-include.patch)</changelog>
</package>
<package pkgid="b72ef93d977a82260044b6e71ae0313f839dc90a5c6e22abb2ea46bdbe566f2a" name="chromium" arch="aarch64">
  <version epoch="0" ver="103.0.5060.114" rel="bp154.2.14.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1647432000">- Chromium 99.0.4844.74 (boo#1197163)
  * CVE-2022-0971: Use after free in Blink Layout
  * CVE-2022-0972: Use after free in Extensions
  * CVE-2022-0973: Use after free in Safe Browsing
  * CVE-2022-0974: Use after free in Splitscreen
  * CVE-2022-0975: Use after free in ANGLE
  * CVE-2022-0976: Heap buffer overflow in GPU
  * CVE-2022-0977: Use after free in Browser UI
  * CVE-2022-0978: Use after free in ANGLE
  * CVE-2022-0979: Use after free in Safe Browsing
  * CVE-2022-0980: Use after free in New Tab Page
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1647864000">- Chromium 99.0.4844.82:
  * Fix potential problem in Hangouts (boo#1197332)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1648296000">- Chromium 99.0.4844.84:
  * CVE-2022-1096: Type Confusion in V8 (boo#1197552)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1648555200">- Update disk constraints</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1648641600">- Chromium 100.0.4896.60 (boo#1197680)
  * CVE-2022-1125: Use after free in Portals
  * CVE-2022-1127: Use after free in QR Code Generator
  * CVE-2022-1128: Inappropriate implementation in Web Share API
  * CVE-2022-1129: Inappropriate implementation in Full Screen Mode
  * CVE-2022-1130: Insufficient validation of untrusted input in WebOTP
  * CVE-2022-1131: Use after free in Cast UI
  * CVE-2022-1132: Inappropriate implementation in Virtual Keyboard
  * CVE-2022-1133: Use after free in WebRTC
  * CVE-2022-1134: Type Confusion in V8
  * CVE-2022-1135: Use after free in Shopping Cart
  * CVE-2022-1136: Use after free in Tab Strip
  * CVE-2022-1137: Inappropriate implementation in Extensions
  * CVE-2022-1138: Inappropriate implementation in Web Cursor
  * CVE-2022-1139: Inappropriate implementation in Background Fetch API
  * CVE-2022-1141: Use after free in File Manager
  * CVE-2022-1142: Heap buffer overflow in WebUI
  * CVE-2022-1143: Heap buffer overflow in WebUI
  * CVE-2022-1144: Use after free in WebUI
  * CVE-2022-1145: Use after free in Extensions
  * CVE-2022-1146: Inappropriate implementation in Resource Timing
- Added patches:
  * chromium-100-compiler.patch
  * chromium-100-GLImplementationParts-constexpr.patch
  * chromium-100-InMilliseconds-constexpr.patch
  * chromium-100-SCTHashdanceMetadata-move.patch
  * chromium-100-macro-typo.patch
- Removed patches:
  * chromium-98-compiler.patch
  * chromium-86-nearby-explicit.patch
  * chromium-glibc-2.34.patch
  * chromium-v8-missing-utility-include.patch
  * chromium-99-AutofillAssistantModelExecutor-NoDestructor.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1649160000">- Chromium 100.0.4896.75:
  * CVE-2022-1232: Type Confusion in V8 (boo#1198053)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1649592000">- Patches for GCC 12:
  * chromium-fix-swiftshader-template.patch
  * chromium-missing-include-tuple.patch
  * chromium-webrtc-stats-missing-vector.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1649764800">- Chromium 100.0.4896.88 (boo#1198361)
  * CVE-2022-1305: Use after free in storage
  * CVE-2022-1306: Inappropriate implementation in compositing
  * CVE-2022-1307: Inappropriate implementation in full screen
  * CVE-2022-1308: Use after free in BFCache
  * CVE-2022-1309: Insufficient policy enforcement in developer tools
  * CVE-2022-1310: Use after free in regular expressions
  * CVE-2022-1311: Use after free in Chrome OS shell
  * CVE-2022-1312: Use after free in storage
  * CVE-2022-1313: Use after free in tab groups
  * CVE-2022-1314: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1650024000">- Chromium 100.0.4896.127 (boo#1198509)
  * CVE-2022-1364: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1650542400">- Fixes for go 1.18</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1651665600">- Chromium 101.0.4951.54 (boo#1199118)
- Chromium 101.0.4951.41 (boo#1198917)
  * CVE-2022-1477: Use after free in Vulkan
  * CVE-2022-1478: Use after free in SwiftShader
  * CVE-2022-1479: Use after free in ANGLE
  * CVE-2022-1480: Use after free in Device API
  * CVE-2022-1481: Use after free in Sharing
  * CVE-2022-1482: Inappropriate implementation in WebGL
  * CVE-2022-1483: Heap buffer overflow in WebGPU
  * CVE-2022-1484: Heap buffer overflow in Web UI Settings
  * CVE-2022-1485: Use after free in File System API
  * CVE-2022-1486: Type Confusion in V8
  * CVE-2022-1487: Use after free in Ozone
  * CVE-2022-1488: Inappropriate implementation in Extensions API
  * CVE-2022-1489: Out of bounds memory access in UI Shelf
  * CVE-2022-1490: Use after free in Browser Switcher
  * CVE-2022-1491: Use after free in Bookmarks
  * CVE-2022-1492: Insufficient data validation in Blink Editing
  * CVE-2022-1493: Use after free in Dev Tools
  * CVE-2022-1494: Insufficient data validation in Trusted Types
  * CVE-2022-1495: Incorrect security UI in Downloads
  * CVE-2022-1496: Use after free in File Manager
  * CVE-2022-1497: Inappropriate implementation in Input
  * CVE-2022-1498: Inappropriate implementation in HTML Parser
  * CVE-2022-1499: Inappropriate implementation in WebAuthentication
  * CVE-2022-1500: Insufficient data validation in Dev Tools
  * CVE-2022-1501: Inappropriate implementation in iframe
- Added patches:
  * chromium-101-libxml-unbundle.patch
  * chromium-101-segmentation_platform-type.patch
- Removed patches:
  * chromium-100-SCTHashdanceMetadata-move.patch
  * chromium-100-GLImplementationParts-constexpr.patch
  * chromium-100-macro-typo.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1652270400">- Chromium 101.0.4951.64 (boo#1199409)
  * CVE-2022-1633: Use after free in Sharesheet
  * CVE-2022-1634: Use after free in Browser UI
  * CVE-2022-1635: Use after free in Permission Prompts
  * CVE-2022-1636: Use after free in Performance APIs
  * CVE-2022-1637: Inappropriate implementation in Web Contents
  * CVE-2022-1638: Heap buffer overflow in V8 Internationalization
  * CVE-2022-1639: Use after free in ANGLE
  * CVE-2022-1640: Use after free in Sharing
  * CVE-2022-1641: Use after free in Web UI Diagnostics</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1652616000">- Chromium 101.0.4951.67
  * fixes for other platforms</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1653652800">- Chromium 102.0.5001.61 (boo#1199893)
  * CVE-2022-1853: Use after free in Indexed DB
  * CVE-2022-1854: Use after free in ANGLE
  * CVE-2022-1855: Use after free in Messaging
  * CVE-2022-1856: Use after free in User Education
  * CVE-2022-1857: Insufficient policy enforcement in File System API
  * CVE-2022-1858: Out of bounds read in DevTools
  * CVE-2022-1859: Use after free in Performance Manager
  * CVE-2022-1860: Use after free in UI Foundations
  * CVE-2022-1861: Use after free in Sharing
  * CVE-2022-1862: Inappropriate implementation in Extensions
  * CVE-2022-1863: Use after free in Tab Groups
  * CVE-2022-1864: Use after free in WebApp Installs
  * CVE-2022-1865: Use after free in Bookmarks
  * CVE-2022-1866: Use after free in Tablet Mode
  * CVE-2022-1867: Insufficient validation of untrusted input in Data Transfer
  * CVE-2022-1868: Inappropriate implementation in Extensions API
  * CVE-2022-1869: Type Confusion in V8
  * CVE-2022-1870: Use after free in App Service
  * CVE-2022-1871: Insufficient policy enforcement in File System API
  * CVE-2022-1872: Insufficient policy enforcement in Extensions API
  * CVE-2022-1873: Insufficient policy enforcement in COOP
  * CVE-2022-1874: Insufficient policy enforcement in Safe Browsing
  * CVE-2022-1875: Inappropriate implementation in PDF
  * CVE-2022-1876: Heap buffer overflow in DevTools
- Added patches:
  * chromium-102-compiler.patch
  * chromium-102-fenced_frame_utils-include.patch
  * chromium-102-regex_pattern-array.patch
  * chromium-102-swiftshader-template-instantiation.patch
  * chromium-102-symbolize-include.patch
  * ffmpeg-new-channel-layout.patch
- Removed patches:
  * chromium-100-compiler.patch
  * chromium-80-QuicStreamSendBuffer-deleted-move-constructor.patch
  * chromium-95-quiche-include.patch
  * chromium-fix-swiftshader-template.patch
  * chromium-missing-include-tuple.patch
  * chromium-webrtc-stats-missing-vector.patch
  * chromium-101-segmentation_platform-type.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654084800">- Disable ARM control flow integrity, it causes build issues
  at the moment
- Try a different SVG (black logo on GNOME)
- Removed patches:
  * chromium-third_party-symbolize-missing-include.patch
  (replaced by chromium-102-symbolize-include.patch)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654689600">- Switch to GTK4 on TW and Leap 15.4+ (boo#1200139)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1654862400">- Chromium 102.0.5005.115 (boo#1200423)
  * CVE-2022-2007: Use after free in WebGPU
  * CVE-2022-2008: Out of bounds memory access in WebGL
  * CVE-2022-2010: Out of bounds read in compositing
  * CVE-2022-2011: Use after free in ANGLE</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1656158400">- Chromium 103.0.5060.53 (boo#1200783)
  * CVE-2022-2156: Use after free in Base
  * CVE-2022-2157: Use after free in Interest groups
  * CVE-2022-2158: Type Confusion in V8
  * CVE-2022-2160: Insufficient policy enforcement in DevTools
  * CVE-2022-2161: Use after free in WebApp Provider
  * CVE-2022-2162: Insufficient policy enforcement in File System API
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * CVE-2022-2164: Inappropriate implementation in Extensions API
  * CVE-2022-2165: Insufficient data validation in URL formatting
- Added patches:
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-VirtualCursor-std-layout.patch
  * chromium-103-compiler.patch
- Removed patches:
  * chromium-102-compiler.patch
  * chromium-91-sql-standard-layout-type.patch
  * chromium-101-libxml-unbundle.patch
  * chromium-102-fenced_frame_utils-include.patch
  * chromium-102-swiftshader-template-instantiation.patch
  * chromium-102-symbolize-include.patch
  * chromium-97-arm-tflite-cast.patch
  * chromium-97-ScrollView-reference.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657195200">- Chromium 103.0.5060.66
  * no upstream release notes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657368000">- Chromium 103.0.5060.114 (boo#1201216)
  * CVE-2022-2294: Heap buffer overflow in WebRTC
  * CVE-2022-2295: Type Confusion in V8
  * CVE-2022-2296: Use after free in Chrome OS Shell</changelog>
</package>
<package pkgid="5384300d0c216cd9de5f6026e290b951d921a076dd142012981d212bb78ad92d" name="chromium" arch="src">
  <version epoch="0" ver="103.0.5060.114" rel="bp154.2.14.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1647432000">- Chromium 99.0.4844.74 (boo#1197163)
  * CVE-2022-0971: Use after free in Blink Layout
  * CVE-2022-0972: Use after free in Extensions
  * CVE-2022-0973: Use after free in Safe Browsing
  * CVE-2022-0974: Use after free in Splitscreen
  * CVE-2022-0975: Use after free in ANGLE
  * CVE-2022-0976: Heap buffer overflow in GPU
  * CVE-2022-0977: Use after free in Browser UI
  * CVE-2022-0978: Use after free in ANGLE
  * CVE-2022-0979: Use after free in Safe Browsing
  * CVE-2022-0980: Use after free in New Tab Page
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1647864000">- Chromium 99.0.4844.82:
  * Fix potential problem in Hangouts (boo#1197332)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1648296000">- Chromium 99.0.4844.84:
  * CVE-2022-1096: Type Confusion in V8 (boo#1197552)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1648555200">- Update disk constraints</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1648641600">- Chromium 100.0.4896.60 (boo#1197680)
  * CVE-2022-1125: Use after free in Portals
  * CVE-2022-1127: Use after free in QR Code Generator
  * CVE-2022-1128: Inappropriate implementation in Web Share API
  * CVE-2022-1129: Inappropriate implementation in Full Screen Mode
  * CVE-2022-1130: Insufficient validation of untrusted input in WebOTP
  * CVE-2022-1131: Use after free in Cast UI
  * CVE-2022-1132: Inappropriate implementation in Virtual Keyboard
  * CVE-2022-1133: Use after free in WebRTC
  * CVE-2022-1134: Type Confusion in V8
  * CVE-2022-1135: Use after free in Shopping Cart
  * CVE-2022-1136: Use after free in Tab Strip
  * CVE-2022-1137: Inappropriate implementation in Extensions
  * CVE-2022-1138: Inappropriate implementation in Web Cursor
  * CVE-2022-1139: Inappropriate implementation in Background Fetch API
  * CVE-2022-1141: Use after free in File Manager
  * CVE-2022-1142: Heap buffer overflow in WebUI
  * CVE-2022-1143: Heap buffer overflow in WebUI
  * CVE-2022-1144: Use after free in WebUI
  * CVE-2022-1145: Use after free in Extensions
  * CVE-2022-1146: Inappropriate implementation in Resource Timing
- Added patches:
  * chromium-100-compiler.patch
  * chromium-100-GLImplementationParts-constexpr.patch
  * chromium-100-InMilliseconds-constexpr.patch
  * chromium-100-SCTHashdanceMetadata-move.patch
  * chromium-100-macro-typo.patch
- Removed patches:
  * chromium-98-compiler.patch
  * chromium-86-nearby-explicit.patch
  * chromium-glibc-2.34.patch
  * chromium-v8-missing-utility-include.patch
  * chromium-99-AutofillAssistantModelExecutor-NoDestructor.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1649160000">- Chromium 100.0.4896.75:
  * CVE-2022-1232: Type Confusion in V8 (boo#1198053)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1649592000">- Patches for GCC 12:
  * chromium-fix-swiftshader-template.patch
  * chromium-missing-include-tuple.patch
  * chromium-webrtc-stats-missing-vector.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1649764800">- Chromium 100.0.4896.88 (boo#1198361)
  * CVE-2022-1305: Use after free in storage
  * CVE-2022-1306: Inappropriate implementation in compositing
  * CVE-2022-1307: Inappropriate implementation in full screen
  * CVE-2022-1308: Use after free in BFCache
  * CVE-2022-1309: Insufficient policy enforcement in developer tools
  * CVE-2022-1310: Use after free in regular expressions
  * CVE-2022-1311: Use after free in Chrome OS shell
  * CVE-2022-1312: Use after free in storage
  * CVE-2022-1313: Use after free in tab groups
  * CVE-2022-1314: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1650024000">- Chromium 100.0.4896.127 (boo#1198509)
  * CVE-2022-1364: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1650542400">- Fixes for go 1.18</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1651665600">- Chromium 101.0.4951.54 (boo#1199118)
- Chromium 101.0.4951.41 (boo#1198917)
  * CVE-2022-1477: Use after free in Vulkan
  * CVE-2022-1478: Use after free in SwiftShader
  * CVE-2022-1479: Use after free in ANGLE
  * CVE-2022-1480: Use after free in Device API
  * CVE-2022-1481: Use after free in Sharing
  * CVE-2022-1482: Inappropriate implementation in WebGL
  * CVE-2022-1483: Heap buffer overflow in WebGPU
  * CVE-2022-1484: Heap buffer overflow in Web UI Settings
  * CVE-2022-1485: Use after free in File System API
  * CVE-2022-1486: Type Confusion in V8
  * CVE-2022-1487: Use after free in Ozone
  * CVE-2022-1488: Inappropriate implementation in Extensions API
  * CVE-2022-1489: Out of bounds memory access in UI Shelf
  * CVE-2022-1490: Use after free in Browser Switcher
  * CVE-2022-1491: Use after free in Bookmarks
  * CVE-2022-1492: Insufficient data validation in Blink Editing
  * CVE-2022-1493: Use after free in Dev Tools
  * CVE-2022-1494: Insufficient data validation in Trusted Types
  * CVE-2022-1495: Incorrect security UI in Downloads
  * CVE-2022-1496: Use after free in File Manager
  * CVE-2022-1497: Inappropriate implementation in Input
  * CVE-2022-1498: Inappropriate implementation in HTML Parser
  * CVE-2022-1499: Inappropriate implementation in WebAuthentication
  * CVE-2022-1500: Insufficient data validation in Dev Tools
  * CVE-2022-1501: Inappropriate implementation in iframe
- Added patches:
  * chromium-101-libxml-unbundle.patch
  * chromium-101-segmentation_platform-type.patch
- Removed patches:
  * chromium-100-SCTHashdanceMetadata-move.patch
  * chromium-100-GLImplementationParts-constexpr.patch
  * chromium-100-macro-typo.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1652270400">- Chromium 101.0.4951.64 (boo#1199409)
  * CVE-2022-1633: Use after free in Sharesheet
  * CVE-2022-1634: Use after free in Browser UI
  * CVE-2022-1635: Use after free in Permission Prompts
  * CVE-2022-1636: Use after free in Performance APIs
  * CVE-2022-1637: Inappropriate implementation in Web Contents
  * CVE-2022-1638: Heap buffer overflow in V8 Internationalization
  * CVE-2022-1639: Use after free in ANGLE
  * CVE-2022-1640: Use after free in Sharing
  * CVE-2022-1641: Use after free in Web UI Diagnostics</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1652616000">- Chromium 101.0.4951.67
  * fixes for other platforms</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1653652800">- Chromium 102.0.5001.61 (boo#1199893)
  * CVE-2022-1853: Use after free in Indexed DB
  * CVE-2022-1854: Use after free in ANGLE
  * CVE-2022-1855: Use after free in Messaging
  * CVE-2022-1856: Use after free in User Education
  * CVE-2022-1857: Insufficient policy enforcement in File System API
  * CVE-2022-1858: Out of bounds read in DevTools
  * CVE-2022-1859: Use after free in Performance Manager
  * CVE-2022-1860: Use after free in UI Foundations
  * CVE-2022-1861: Use after free in Sharing
  * CVE-2022-1862: Inappropriate implementation in Extensions
  * CVE-2022-1863: Use after free in Tab Groups
  * CVE-2022-1864: Use after free in WebApp Installs
  * CVE-2022-1865: Use after free in Bookmarks
  * CVE-2022-1866: Use after free in Tablet Mode
  * CVE-2022-1867: Insufficient validation of untrusted input in Data Transfer
  * CVE-2022-1868: Inappropriate implementation in Extensions API
  * CVE-2022-1869: Type Confusion in V8
  * CVE-2022-1870: Use after free in App Service
  * CVE-2022-1871: Insufficient policy enforcement in File System API
  * CVE-2022-1872: Insufficient policy enforcement in Extensions API
  * CVE-2022-1873: Insufficient policy enforcement in COOP
  * CVE-2022-1874: Insufficient policy enforcement in Safe Browsing
  * CVE-2022-1875: Inappropriate implementation in PDF
  * CVE-2022-1876: Heap buffer overflow in DevTools
- Added patches:
  * chromium-102-compiler.patch
  * chromium-102-fenced_frame_utils-include.patch
  * chromium-102-regex_pattern-array.patch
  * chromium-102-swiftshader-template-instantiation.patch
  * chromium-102-symbolize-include.patch
  * ffmpeg-new-channel-layout.patch
- Removed patches:
  * chromium-100-compiler.patch
  * chromium-80-QuicStreamSendBuffer-deleted-move-constructor.patch
  * chromium-95-quiche-include.patch
  * chromium-fix-swiftshader-template.patch
  * chromium-missing-include-tuple.patch
  * chromium-webrtc-stats-missing-vector.patch
  * chromium-101-segmentation_platform-type.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654084800">- Disable ARM control flow integrity, it causes build issues
  at the moment
- Try a different SVG (black logo on GNOME)
- Removed patches:
  * chromium-third_party-symbolize-missing-include.patch
  (replaced by chromium-102-symbolize-include.patch)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654689600">- Switch to GTK4 on TW and Leap 15.4+ (boo#1200139)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1654862400">- Chromium 102.0.5005.115 (boo#1200423)
  * CVE-2022-2007: Use after free in WebGPU
  * CVE-2022-2008: Out of bounds memory access in WebGL
  * CVE-2022-2010: Out of bounds read in compositing
  * CVE-2022-2011: Use after free in ANGLE</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1656158400">- Chromium 103.0.5060.53 (boo#1200783)
  * CVE-2022-2156: Use after free in Base
  * CVE-2022-2157: Use after free in Interest groups
  * CVE-2022-2158: Type Confusion in V8
  * CVE-2022-2160: Insufficient policy enforcement in DevTools
  * CVE-2022-2161: Use after free in WebApp Provider
  * CVE-2022-2162: Insufficient policy enforcement in File System API
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * CVE-2022-2164: Inappropriate implementation in Extensions API
  * CVE-2022-2165: Insufficient data validation in URL formatting
- Added patches:
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-VirtualCursor-std-layout.patch
  * chromium-103-compiler.patch
- Removed patches:
  * chromium-102-compiler.patch
  * chromium-91-sql-standard-layout-type.patch
  * chromium-101-libxml-unbundle.patch
  * chromium-102-fenced_frame_utils-include.patch
  * chromium-102-swiftshader-template-instantiation.patch
  * chromium-102-symbolize-include.patch
  * chromium-97-arm-tflite-cast.patch
  * chromium-97-ScrollView-reference.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657195200">- Chromium 103.0.5060.66
  * no upstream release notes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657368000">- Chromium 103.0.5060.114 (boo#1201216)
  * CVE-2022-2294: Heap buffer overflow in WebRTC
  * CVE-2022-2295: Type Confusion in V8
  * CVE-2022-2296: Use after free in Chrome OS Shell</changelog>
</package>
<package pkgid="441e40a159399a072c270020f08500b237e23c8ae1611d6a9a6b9b5e5dab6ba3" name="chromium" arch="x86_64">
  <version epoch="0" ver="103.0.5060.114" rel="bp154.2.14.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1647432000">- Chromium 99.0.4844.74 (boo#1197163)
  * CVE-2022-0971: Use after free in Blink Layout
  * CVE-2022-0972: Use after free in Extensions
  * CVE-2022-0973: Use after free in Safe Browsing
  * CVE-2022-0974: Use after free in Splitscreen
  * CVE-2022-0975: Use after free in ANGLE
  * CVE-2022-0976: Heap buffer overflow in GPU
  * CVE-2022-0977: Use after free in Browser UI
  * CVE-2022-0978: Use after free in ANGLE
  * CVE-2022-0979: Use after free in Safe Browsing
  * CVE-2022-0980: Use after free in New Tab Page
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1647864000">- Chromium 99.0.4844.82:
  * Fix potential problem in Hangouts (boo#1197332)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1648296000">- Chromium 99.0.4844.84:
  * CVE-2022-1096: Type Confusion in V8 (boo#1197552)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1648555200">- Update disk constraints</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1648641600">- Chromium 100.0.4896.60 (boo#1197680)
  * CVE-2022-1125: Use after free in Portals
  * CVE-2022-1127: Use after free in QR Code Generator
  * CVE-2022-1128: Inappropriate implementation in Web Share API
  * CVE-2022-1129: Inappropriate implementation in Full Screen Mode
  * CVE-2022-1130: Insufficient validation of untrusted input in WebOTP
  * CVE-2022-1131: Use after free in Cast UI
  * CVE-2022-1132: Inappropriate implementation in Virtual Keyboard
  * CVE-2022-1133: Use after free in WebRTC
  * CVE-2022-1134: Type Confusion in V8
  * CVE-2022-1135: Use after free in Shopping Cart
  * CVE-2022-1136: Use after free in Tab Strip
  * CVE-2022-1137: Inappropriate implementation in Extensions
  * CVE-2022-1138: Inappropriate implementation in Web Cursor
  * CVE-2022-1139: Inappropriate implementation in Background Fetch API
  * CVE-2022-1141: Use after free in File Manager
  * CVE-2022-1142: Heap buffer overflow in WebUI
  * CVE-2022-1143: Heap buffer overflow in WebUI
  * CVE-2022-1144: Use after free in WebUI
  * CVE-2022-1145: Use after free in Extensions
  * CVE-2022-1146: Inappropriate implementation in Resource Timing
- Added patches:
  * chromium-100-compiler.patch
  * chromium-100-GLImplementationParts-constexpr.patch
  * chromium-100-InMilliseconds-constexpr.patch
  * chromium-100-SCTHashdanceMetadata-move.patch
  * chromium-100-macro-typo.patch
- Removed patches:
  * chromium-98-compiler.patch
  * chromium-86-nearby-explicit.patch
  * chromium-glibc-2.34.patch
  * chromium-v8-missing-utility-include.patch
  * chromium-99-AutofillAssistantModelExecutor-NoDestructor.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1649160000">- Chromium 100.0.4896.75:
  * CVE-2022-1232: Type Confusion in V8 (boo#1198053)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1649592000">- Patches for GCC 12:
  * chromium-fix-swiftshader-template.patch
  * chromium-missing-include-tuple.patch
  * chromium-webrtc-stats-missing-vector.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1649764800">- Chromium 100.0.4896.88 (boo#1198361)
  * CVE-2022-1305: Use after free in storage
  * CVE-2022-1306: Inappropriate implementation in compositing
  * CVE-2022-1307: Inappropriate implementation in full screen
  * CVE-2022-1308: Use after free in BFCache
  * CVE-2022-1309: Insufficient policy enforcement in developer tools
  * CVE-2022-1310: Use after free in regular expressions
  * CVE-2022-1311: Use after free in Chrome OS shell
  * CVE-2022-1312: Use after free in storage
  * CVE-2022-1313: Use after free in tab groups
  * CVE-2022-1314: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1650024000">- Chromium 100.0.4896.127 (boo#1198509)
  * CVE-2022-1364: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1650542400">- Fixes for go 1.18</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1651665600">- Chromium 101.0.4951.54 (boo#1199118)
- Chromium 101.0.4951.41 (boo#1198917)
  * CVE-2022-1477: Use after free in Vulkan
  * CVE-2022-1478: Use after free in SwiftShader
  * CVE-2022-1479: Use after free in ANGLE
  * CVE-2022-1480: Use after free in Device API
  * CVE-2022-1481: Use after free in Sharing
  * CVE-2022-1482: Inappropriate implementation in WebGL
  * CVE-2022-1483: Heap buffer overflow in WebGPU
  * CVE-2022-1484: Heap buffer overflow in Web UI Settings
  * CVE-2022-1485: Use after free in File System API
  * CVE-2022-1486: Type Confusion in V8
  * CVE-2022-1487: Use after free in Ozone
  * CVE-2022-1488: Inappropriate implementation in Extensions API
  * CVE-2022-1489: Out of bounds memory access in UI Shelf
  * CVE-2022-1490: Use after free in Browser Switcher
  * CVE-2022-1491: Use after free in Bookmarks
  * CVE-2022-1492: Insufficient data validation in Blink Editing
  * CVE-2022-1493: Use after free in Dev Tools
  * CVE-2022-1494: Insufficient data validation in Trusted Types
  * CVE-2022-1495: Incorrect security UI in Downloads
  * CVE-2022-1496: Use after free in File Manager
  * CVE-2022-1497: Inappropriate implementation in Input
  * CVE-2022-1498: Inappropriate implementation in HTML Parser
  * CVE-2022-1499: Inappropriate implementation in WebAuthentication
  * CVE-2022-1500: Insufficient data validation in Dev Tools
  * CVE-2022-1501: Inappropriate implementation in iframe
- Added patches:
  * chromium-101-libxml-unbundle.patch
  * chromium-101-segmentation_platform-type.patch
- Removed patches:
  * chromium-100-SCTHashdanceMetadata-move.patch
  * chromium-100-GLImplementationParts-constexpr.patch
  * chromium-100-macro-typo.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1652270400">- Chromium 101.0.4951.64 (boo#1199409)
  * CVE-2022-1633: Use after free in Sharesheet
  * CVE-2022-1634: Use after free in Browser UI
  * CVE-2022-1635: Use after free in Permission Prompts
  * CVE-2022-1636: Use after free in Performance APIs
  * CVE-2022-1637: Inappropriate implementation in Web Contents
  * CVE-2022-1638: Heap buffer overflow in V8 Internationalization
  * CVE-2022-1639: Use after free in ANGLE
  * CVE-2022-1640: Use after free in Sharing
  * CVE-2022-1641: Use after free in Web UI Diagnostics</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1652616000">- Chromium 101.0.4951.67
  * fixes for other platforms</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1653652800">- Chromium 102.0.5001.61 (boo#1199893)
  * CVE-2022-1853: Use after free in Indexed DB
  * CVE-2022-1854: Use after free in ANGLE
  * CVE-2022-1855: Use after free in Messaging
  * CVE-2022-1856: Use after free in User Education
  * CVE-2022-1857: Insufficient policy enforcement in File System API
  * CVE-2022-1858: Out of bounds read in DevTools
  * CVE-2022-1859: Use after free in Performance Manager
  * CVE-2022-1860: Use after free in UI Foundations
  * CVE-2022-1861: Use after free in Sharing
  * CVE-2022-1862: Inappropriate implementation in Extensions
  * CVE-2022-1863: Use after free in Tab Groups
  * CVE-2022-1864: Use after free in WebApp Installs
  * CVE-2022-1865: Use after free in Bookmarks
  * CVE-2022-1866: Use after free in Tablet Mode
  * CVE-2022-1867: Insufficient validation of untrusted input in Data Transfer
  * CVE-2022-1868: Inappropriate implementation in Extensions API
  * CVE-2022-1869: Type Confusion in V8
  * CVE-2022-1870: Use after free in App Service
  * CVE-2022-1871: Insufficient policy enforcement in File System API
  * CVE-2022-1872: Insufficient policy enforcement in Extensions API
  * CVE-2022-1873: Insufficient policy enforcement in COOP
  * CVE-2022-1874: Insufficient policy enforcement in Safe Browsing
  * CVE-2022-1875: Inappropriate implementation in PDF
  * CVE-2022-1876: Heap buffer overflow in DevTools
- Added patches:
  * chromium-102-compiler.patch
  * chromium-102-fenced_frame_utils-include.patch
  * chromium-102-regex_pattern-array.patch
  * chromium-102-swiftshader-template-instantiation.patch
  * chromium-102-symbolize-include.patch
  * ffmpeg-new-channel-layout.patch
- Removed patches:
  * chromium-100-compiler.patch
  * chromium-80-QuicStreamSendBuffer-deleted-move-constructor.patch
  * chromium-95-quiche-include.patch
  * chromium-fix-swiftshader-template.patch
  * chromium-missing-include-tuple.patch
  * chromium-webrtc-stats-missing-vector.patch
  * chromium-101-segmentation_platform-type.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654084800">- Disable ARM control flow integrity, it causes build issues
  at the moment
- Try a different SVG (black logo on GNOME)
- Removed patches:
  * chromium-third_party-symbolize-missing-include.patch
  (replaced by chromium-102-symbolize-include.patch)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654689600">- Switch to GTK4 on TW and Leap 15.4+ (boo#1200139)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1654862400">- Chromium 102.0.5005.115 (boo#1200423)
  * CVE-2022-2007: Use after free in WebGPU
  * CVE-2022-2008: Out of bounds memory access in WebGL
  * CVE-2022-2010: Out of bounds read in compositing
  * CVE-2022-2011: Use after free in ANGLE</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1656158400">- Chromium 103.0.5060.53 (boo#1200783)
  * CVE-2022-2156: Use after free in Base
  * CVE-2022-2157: Use after free in Interest groups
  * CVE-2022-2158: Type Confusion in V8
  * CVE-2022-2160: Insufficient policy enforcement in DevTools
  * CVE-2022-2161: Use after free in WebApp Provider
  * CVE-2022-2162: Insufficient policy enforcement in File System API
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * CVE-2022-2164: Inappropriate implementation in Extensions API
  * CVE-2022-2165: Insufficient data validation in URL formatting
- Added patches:
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-VirtualCursor-std-layout.patch
  * chromium-103-compiler.patch
- Removed patches:
  * chromium-102-compiler.patch
  * chromium-91-sql-standard-layout-type.patch
  * chromium-101-libxml-unbundle.patch
  * chromium-102-fenced_frame_utils-include.patch
  * chromium-102-swiftshader-template-instantiation.patch
  * chromium-102-symbolize-include.patch
  * chromium-97-arm-tflite-cast.patch
  * chromium-97-ScrollView-reference.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657195200">- Chromium 103.0.5060.66
  * no upstream release notes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657368000">- Chromium 103.0.5060.114 (boo#1201216)
  * CVE-2022-2294: Heap buffer overflow in WebRTC
  * CVE-2022-2295: Type Confusion in V8
  * CVE-2022-2296: Use after free in Chrome OS Shell</changelog>
</package>
<package pkgid="97235183095641b171e3192f3fc94316a2bf030ba49edb8441b47adb4213368a" name="chromium" arch="aarch64">
  <version epoch="0" ver="103.0.5060.134" rel="bp154.2.17.2"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1647864000">- Chromium 99.0.4844.82:
  * Fix potential problem in Hangouts (boo#1197332)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1648296000">- Chromium 99.0.4844.84:
  * CVE-2022-1096: Type Confusion in V8 (boo#1197552)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1648555200">- Update disk constraints</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1648641600">- Chromium 100.0.4896.60 (boo#1197680)
  * CVE-2022-1125: Use after free in Portals
  * CVE-2022-1127: Use after free in QR Code Generator
  * CVE-2022-1128: Inappropriate implementation in Web Share API
  * CVE-2022-1129: Inappropriate implementation in Full Screen Mode
  * CVE-2022-1130: Insufficient validation of untrusted input in WebOTP
  * CVE-2022-1131: Use after free in Cast UI
  * CVE-2022-1132: Inappropriate implementation in Virtual Keyboard
  * CVE-2022-1133: Use after free in WebRTC
  * CVE-2022-1134: Type Confusion in V8
  * CVE-2022-1135: Use after free in Shopping Cart
  * CVE-2022-1136: Use after free in Tab Strip
  * CVE-2022-1137: Inappropriate implementation in Extensions
  * CVE-2022-1138: Inappropriate implementation in Web Cursor
  * CVE-2022-1139: Inappropriate implementation in Background Fetch API
  * CVE-2022-1141: Use after free in File Manager
  * CVE-2022-1142: Heap buffer overflow in WebUI
  * CVE-2022-1143: Heap buffer overflow in WebUI
  * CVE-2022-1144: Use after free in WebUI
  * CVE-2022-1145: Use after free in Extensions
  * CVE-2022-1146: Inappropriate implementation in Resource Timing
- Added patches:
  * chromium-100-compiler.patch
  * chromium-100-GLImplementationParts-constexpr.patch
  * chromium-100-InMilliseconds-constexpr.patch
  * chromium-100-SCTHashdanceMetadata-move.patch
  * chromium-100-macro-typo.patch
- Removed patches:
  * chromium-98-compiler.patch
  * chromium-86-nearby-explicit.patch
  * chromium-glibc-2.34.patch
  * chromium-v8-missing-utility-include.patch
  * chromium-99-AutofillAssistantModelExecutor-NoDestructor.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1649160000">- Chromium 100.0.4896.75:
  * CVE-2022-1232: Type Confusion in V8 (boo#1198053)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1649592000">- Patches for GCC 12:
  * chromium-fix-swiftshader-template.patch
  * chromium-missing-include-tuple.patch
  * chromium-webrtc-stats-missing-vector.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1649764800">- Chromium 100.0.4896.88 (boo#1198361)
  * CVE-2022-1305: Use after free in storage
  * CVE-2022-1306: Inappropriate implementation in compositing
  * CVE-2022-1307: Inappropriate implementation in full screen
  * CVE-2022-1308: Use after free in BFCache
  * CVE-2022-1309: Insufficient policy enforcement in developer tools
  * CVE-2022-1310: Use after free in regular expressions
  * CVE-2022-1311: Use after free in Chrome OS shell
  * CVE-2022-1312: Use after free in storage
  * CVE-2022-1313: Use after free in tab groups
  * CVE-2022-1314: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1650024000">- Chromium 100.0.4896.127 (boo#1198509)
  * CVE-2022-1364: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1650542400">- Fixes for go 1.18</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1651665600">- Chromium 101.0.4951.54 (boo#1199118)
- Chromium 101.0.4951.41 (boo#1198917)
  * CVE-2022-1477: Use after free in Vulkan
  * CVE-2022-1478: Use after free in SwiftShader
  * CVE-2022-1479: Use after free in ANGLE
  * CVE-2022-1480: Use after free in Device API
  * CVE-2022-1481: Use after free in Sharing
  * CVE-2022-1482: Inappropriate implementation in WebGL
  * CVE-2022-1483: Heap buffer overflow in WebGPU
  * CVE-2022-1484: Heap buffer overflow in Web UI Settings
  * CVE-2022-1485: Use after free in File System API
  * CVE-2022-1486: Type Confusion in V8
  * CVE-2022-1487: Use after free in Ozone
  * CVE-2022-1488: Inappropriate implementation in Extensions API
  * CVE-2022-1489: Out of bounds memory access in UI Shelf
  * CVE-2022-1490: Use after free in Browser Switcher
  * CVE-2022-1491: Use after free in Bookmarks
  * CVE-2022-1492: Insufficient data validation in Blink Editing
  * CVE-2022-1493: Use after free in Dev Tools
  * CVE-2022-1494: Insufficient data validation in Trusted Types
  * CVE-2022-1495: Incorrect security UI in Downloads
  * CVE-2022-1496: Use after free in File Manager
  * CVE-2022-1497: Inappropriate implementation in Input
  * CVE-2022-1498: Inappropriate implementation in HTML Parser
  * CVE-2022-1499: Inappropriate implementation in WebAuthentication
  * CVE-2022-1500: Insufficient data validation in Dev Tools
  * CVE-2022-1501: Inappropriate implementation in iframe
- Added patches:
  * chromium-101-libxml-unbundle.patch
  * chromium-101-segmentation_platform-type.patch
- Removed patches:
  * chromium-100-SCTHashdanceMetadata-move.patch
  * chromium-100-GLImplementationParts-constexpr.patch
  * chromium-100-macro-typo.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1652270400">- Chromium 101.0.4951.64 (boo#1199409)
  * CVE-2022-1633: Use after free in Sharesheet
  * CVE-2022-1634: Use after free in Browser UI
  * CVE-2022-1635: Use after free in Permission Prompts
  * CVE-2022-1636: Use after free in Performance APIs
  * CVE-2022-1637: Inappropriate implementation in Web Contents
  * CVE-2022-1638: Heap buffer overflow in V8 Internationalization
  * CVE-2022-1639: Use after free in ANGLE
  * CVE-2022-1640: Use after free in Sharing
  * CVE-2022-1641: Use after free in Web UI Diagnostics</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1652616000">- Chromium 101.0.4951.67
  * fixes for other platforms</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1653652800">- Chromium 102.0.5001.61 (boo#1199893)
  * CVE-2022-1853: Use after free in Indexed DB
  * CVE-2022-1854: Use after free in ANGLE
  * CVE-2022-1855: Use after free in Messaging
  * CVE-2022-1856: Use after free in User Education
  * CVE-2022-1857: Insufficient policy enforcement in File System API
  * CVE-2022-1858: Out of bounds read in DevTools
  * CVE-2022-1859: Use after free in Performance Manager
  * CVE-2022-1860: Use after free in UI Foundations
  * CVE-2022-1861: Use after free in Sharing
  * CVE-2022-1862: Inappropriate implementation in Extensions
  * CVE-2022-1863: Use after free in Tab Groups
  * CVE-2022-1864: Use after free in WebApp Installs
  * CVE-2022-1865: Use after free in Bookmarks
  * CVE-2022-1866: Use after free in Tablet Mode
  * CVE-2022-1867: Insufficient validation of untrusted input in Data Transfer
  * CVE-2022-1868: Inappropriate implementation in Extensions API
  * CVE-2022-1869: Type Confusion in V8
  * CVE-2022-1870: Use after free in App Service
  * CVE-2022-1871: Insufficient policy enforcement in File System API
  * CVE-2022-1872: Insufficient policy enforcement in Extensions API
  * CVE-2022-1873: Insufficient policy enforcement in COOP
  * CVE-2022-1874: Insufficient policy enforcement in Safe Browsing
  * CVE-2022-1875: Inappropriate implementation in PDF
  * CVE-2022-1876: Heap buffer overflow in DevTools
- Added patches:
  * chromium-102-compiler.patch
  * chromium-102-fenced_frame_utils-include.patch
  * chromium-102-regex_pattern-array.patch
  * chromium-102-swiftshader-template-instantiation.patch
  * chromium-102-symbolize-include.patch
  * ffmpeg-new-channel-layout.patch
- Removed patches:
  * chromium-100-compiler.patch
  * chromium-80-QuicStreamSendBuffer-deleted-move-constructor.patch
  * chromium-95-quiche-include.patch
  * chromium-fix-swiftshader-template.patch
  * chromium-missing-include-tuple.patch
  * chromium-webrtc-stats-missing-vector.patch
  * chromium-101-segmentation_platform-type.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654084800">- Disable ARM control flow integrity, it causes build issues
  at the moment
- Try a different SVG (black logo on GNOME)
- Removed patches:
  * chromium-third_party-symbolize-missing-include.patch
  (replaced by chromium-102-symbolize-include.patch)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654689600">- Switch to GTK4 on TW and Leap 15.4+ (boo#1200139)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1654862400">- Chromium 102.0.5005.115 (boo#1200423)
  * CVE-2022-2007: Use after free in WebGPU
  * CVE-2022-2008: Out of bounds memory access in WebGL
  * CVE-2022-2010: Out of bounds read in compositing
  * CVE-2022-2011: Use after free in ANGLE</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1656158400">- Chromium 103.0.5060.53 (boo#1200783)
  * CVE-2022-2156: Use after free in Base
  * CVE-2022-2157: Use after free in Interest groups
  * CVE-2022-2158: Type Confusion in V8
  * CVE-2022-2160: Insufficient policy enforcement in DevTools
  * CVE-2022-2161: Use after free in WebApp Provider
  * CVE-2022-2162: Insufficient policy enforcement in File System API
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * CVE-2022-2164: Inappropriate implementation in Extensions API
  * CVE-2022-2165: Insufficient data validation in URL formatting
- Added patches:
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-VirtualCursor-std-layout.patch
  * chromium-103-compiler.patch
- Removed patches:
  * chromium-102-compiler.patch
  * chromium-91-sql-standard-layout-type.patch
  * chromium-101-libxml-unbundle.patch
  * chromium-102-fenced_frame_utils-include.patch
  * chromium-102-swiftshader-template-instantiation.patch
  * chromium-102-symbolize-include.patch
  * chromium-97-arm-tflite-cast.patch
  * chromium-97-ScrollView-reference.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657195200">- Chromium 103.0.5060.66
  * no upstream release notes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657368000">- Chromium 103.0.5060.114 (boo#1201216)
  * CVE-2022-2294: Heap buffer overflow in WebRTC
  * CVE-2022-2295: Type Confusion in V8
  * CVE-2022-2296: Use after free in Chrome OS Shell</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1658318400">- Chromium 103.0.5060.134 (boo#1201679):
  * CVE-2022-2477 : Use after free in Guest View
  * CVE-2022-2478 : Use after free in PDF
  * CVE-2022-2479 : Insufficient validation of untrusted input in File
  * CVE-2022-2480 : Use after free in Service Worker API
  * CVE-2022-2481: Use after free in Views
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
</package>
<package pkgid="851209705ef5184347db076b58c7097475e1f0530f2f4bce1d7216dafcd93f02" name="chromium" arch="src">
  <version epoch="0" ver="103.0.5060.134" rel="bp154.2.17.2"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1647864000">- Chromium 99.0.4844.82:
  * Fix potential problem in Hangouts (boo#1197332)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1648296000">- Chromium 99.0.4844.84:
  * CVE-2022-1096: Type Confusion in V8 (boo#1197552)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1648555200">- Update disk constraints</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1648641600">- Chromium 100.0.4896.60 (boo#1197680)
  * CVE-2022-1125: Use after free in Portals
  * CVE-2022-1127: Use after free in QR Code Generator
  * CVE-2022-1128: Inappropriate implementation in Web Share API
  * CVE-2022-1129: Inappropriate implementation in Full Screen Mode
  * CVE-2022-1130: Insufficient validation of untrusted input in WebOTP
  * CVE-2022-1131: Use after free in Cast UI
  * CVE-2022-1132: Inappropriate implementation in Virtual Keyboard
  * CVE-2022-1133: Use after free in WebRTC
  * CVE-2022-1134: Type Confusion in V8
  * CVE-2022-1135: Use after free in Shopping Cart
  * CVE-2022-1136: Use after free in Tab Strip
  * CVE-2022-1137: Inappropriate implementation in Extensions
  * CVE-2022-1138: Inappropriate implementation in Web Cursor
  * CVE-2022-1139: Inappropriate implementation in Background Fetch API
  * CVE-2022-1141: Use after free in File Manager
  * CVE-2022-1142: Heap buffer overflow in WebUI
  * CVE-2022-1143: Heap buffer overflow in WebUI
  * CVE-2022-1144: Use after free in WebUI
  * CVE-2022-1145: Use after free in Extensions
  * CVE-2022-1146: Inappropriate implementation in Resource Timing
- Added patches:
  * chromium-100-compiler.patch
  * chromium-100-GLImplementationParts-constexpr.patch
  * chromium-100-InMilliseconds-constexpr.patch
  * chromium-100-SCTHashdanceMetadata-move.patch
  * chromium-100-macro-typo.patch
- Removed patches:
  * chromium-98-compiler.patch
  * chromium-86-nearby-explicit.patch
  * chromium-glibc-2.34.patch
  * chromium-v8-missing-utility-include.patch
  * chromium-99-AutofillAssistantModelExecutor-NoDestructor.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1649160000">- Chromium 100.0.4896.75:
  * CVE-2022-1232: Type Confusion in V8 (boo#1198053)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1649592000">- Patches for GCC 12:
  * chromium-fix-swiftshader-template.patch
  * chromium-missing-include-tuple.patch
  * chromium-webrtc-stats-missing-vector.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1649764800">- Chromium 100.0.4896.88 (boo#1198361)
  * CVE-2022-1305: Use after free in storage
  * CVE-2022-1306: Inappropriate implementation in compositing
  * CVE-2022-1307: Inappropriate implementation in full screen
  * CVE-2022-1308: Use after free in BFCache
  * CVE-2022-1309: Insufficient policy enforcement in developer tools
  * CVE-2022-1310: Use after free in regular expressions
  * CVE-2022-1311: Use after free in Chrome OS shell
  * CVE-2022-1312: Use after free in storage
  * CVE-2022-1313: Use after free in tab groups
  * CVE-2022-1314: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1650024000">- Chromium 100.0.4896.127 (boo#1198509)
  * CVE-2022-1364: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1650542400">- Fixes for go 1.18</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1651665600">- Chromium 101.0.4951.54 (boo#1199118)
- Chromium 101.0.4951.41 (boo#1198917)
  * CVE-2022-1477: Use after free in Vulkan
  * CVE-2022-1478: Use after free in SwiftShader
  * CVE-2022-1479: Use after free in ANGLE
  * CVE-2022-1480: Use after free in Device API
  * CVE-2022-1481: Use after free in Sharing
  * CVE-2022-1482: Inappropriate implementation in WebGL
  * CVE-2022-1483: Heap buffer overflow in WebGPU
  * CVE-2022-1484: Heap buffer overflow in Web UI Settings
  * CVE-2022-1485: Use after free in File System API
  * CVE-2022-1486: Type Confusion in V8
  * CVE-2022-1487: Use after free in Ozone
  * CVE-2022-1488: Inappropriate implementation in Extensions API
  * CVE-2022-1489: Out of bounds memory access in UI Shelf
  * CVE-2022-1490: Use after free in Browser Switcher
  * CVE-2022-1491: Use after free in Bookmarks
  * CVE-2022-1492: Insufficient data validation in Blink Editing
  * CVE-2022-1493: Use after free in Dev Tools
  * CVE-2022-1494: Insufficient data validation in Trusted Types
  * CVE-2022-1495: Incorrect security UI in Downloads
  * CVE-2022-1496: Use after free in File Manager
  * CVE-2022-1497: Inappropriate implementation in Input
  * CVE-2022-1498: Inappropriate implementation in HTML Parser
  * CVE-2022-1499: Inappropriate implementation in WebAuthentication
  * CVE-2022-1500: Insufficient data validation in Dev Tools
  * CVE-2022-1501: Inappropriate implementation in iframe
- Added patches:
  * chromium-101-libxml-unbundle.patch
  * chromium-101-segmentation_platform-type.patch
- Removed patches:
  * chromium-100-SCTHashdanceMetadata-move.patch
  * chromium-100-GLImplementationParts-constexpr.patch
  * chromium-100-macro-typo.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1652270400">- Chromium 101.0.4951.64 (boo#1199409)
  * CVE-2022-1633: Use after free in Sharesheet
  * CVE-2022-1634: Use after free in Browser UI
  * CVE-2022-1635: Use after free in Permission Prompts
  * CVE-2022-1636: Use after free in Performance APIs
  * CVE-2022-1637: Inappropriate implementation in Web Contents
  * CVE-2022-1638: Heap buffer overflow in V8 Internationalization
  * CVE-2022-1639: Use after free in ANGLE
  * CVE-2022-1640: Use after free in Sharing
  * CVE-2022-1641: Use after free in Web UI Diagnostics</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1652616000">- Chromium 101.0.4951.67
  * fixes for other platforms</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1653652800">- Chromium 102.0.5001.61 (boo#1199893)
  * CVE-2022-1853: Use after free in Indexed DB
  * CVE-2022-1854: Use after free in ANGLE
  * CVE-2022-1855: Use after free in Messaging
  * CVE-2022-1856: Use after free in User Education
  * CVE-2022-1857: Insufficient policy enforcement in File System API
  * CVE-2022-1858: Out of bounds read in DevTools
  * CVE-2022-1859: Use after free in Performance Manager
  * CVE-2022-1860: Use after free in UI Foundations
  * CVE-2022-1861: Use after free in Sharing
  * CVE-2022-1862: Inappropriate implementation in Extensions
  * CVE-2022-1863: Use after free in Tab Groups
  * CVE-2022-1864: Use after free in WebApp Installs
  * CVE-2022-1865: Use after free in Bookmarks
  * CVE-2022-1866: Use after free in Tablet Mode
  * CVE-2022-1867: Insufficient validation of untrusted input in Data Transfer
  * CVE-2022-1868: Inappropriate implementation in Extensions API
  * CVE-2022-1869: Type Confusion in V8
  * CVE-2022-1870: Use after free in App Service
  * CVE-2022-1871: Insufficient policy enforcement in File System API
  * CVE-2022-1872: Insufficient policy enforcement in Extensions API
  * CVE-2022-1873: Insufficient policy enforcement in COOP
  * CVE-2022-1874: Insufficient policy enforcement in Safe Browsing
  * CVE-2022-1875: Inappropriate implementation in PDF
  * CVE-2022-1876: Heap buffer overflow in DevTools
- Added patches:
  * chromium-102-compiler.patch
  * chromium-102-fenced_frame_utils-include.patch
  * chromium-102-regex_pattern-array.patch
  * chromium-102-swiftshader-template-instantiation.patch
  * chromium-102-symbolize-include.patch
  * ffmpeg-new-channel-layout.patch
- Removed patches:
  * chromium-100-compiler.patch
  * chromium-80-QuicStreamSendBuffer-deleted-move-constructor.patch
  * chromium-95-quiche-include.patch
  * chromium-fix-swiftshader-template.patch
  * chromium-missing-include-tuple.patch
  * chromium-webrtc-stats-missing-vector.patch
  * chromium-101-segmentation_platform-type.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654084800">- Disable ARM control flow integrity, it causes build issues
  at the moment
- Try a different SVG (black logo on GNOME)
- Removed patches:
  * chromium-third_party-symbolize-missing-include.patch
  (replaced by chromium-102-symbolize-include.patch)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654689600">- Switch to GTK4 on TW and Leap 15.4+ (boo#1200139)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1654862400">- Chromium 102.0.5005.115 (boo#1200423)
  * CVE-2022-2007: Use after free in WebGPU
  * CVE-2022-2008: Out of bounds memory access in WebGL
  * CVE-2022-2010: Out of bounds read in compositing
  * CVE-2022-2011: Use after free in ANGLE</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1656158400">- Chromium 103.0.5060.53 (boo#1200783)
  * CVE-2022-2156: Use after free in Base
  * CVE-2022-2157: Use after free in Interest groups
  * CVE-2022-2158: Type Confusion in V8
  * CVE-2022-2160: Insufficient policy enforcement in DevTools
  * CVE-2022-2161: Use after free in WebApp Provider
  * CVE-2022-2162: Insufficient policy enforcement in File System API
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * CVE-2022-2164: Inappropriate implementation in Extensions API
  * CVE-2022-2165: Insufficient data validation in URL formatting
- Added patches:
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-VirtualCursor-std-layout.patch
  * chromium-103-compiler.patch
- Removed patches:
  * chromium-102-compiler.patch
  * chromium-91-sql-standard-layout-type.patch
  * chromium-101-libxml-unbundle.patch
  * chromium-102-fenced_frame_utils-include.patch
  * chromium-102-swiftshader-template-instantiation.patch
  * chromium-102-symbolize-include.patch
  * chromium-97-arm-tflite-cast.patch
  * chromium-97-ScrollView-reference.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657195200">- Chromium 103.0.5060.66
  * no upstream release notes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657368000">- Chromium 103.0.5060.114 (boo#1201216)
  * CVE-2022-2294: Heap buffer overflow in WebRTC
  * CVE-2022-2295: Type Confusion in V8
  * CVE-2022-2296: Use after free in Chrome OS Shell</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1658318400">- Chromium 103.0.5060.134 (boo#1201679):
  * CVE-2022-2477 : Use after free in Guest View
  * CVE-2022-2478 : Use after free in PDF
  * CVE-2022-2479 : Insufficient validation of untrusted input in File
  * CVE-2022-2480 : Use after free in Service Worker API
  * CVE-2022-2481: Use after free in Views
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
</package>
<package pkgid="0bb3e5ed3c6d20fe631e0bd2f567ec343164b21fcd3a3d5cbc40164fdf94a5ef" name="chromium" arch="x86_64">
  <version epoch="0" ver="103.0.5060.134" rel="bp154.2.17.2"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1647864000">- Chromium 99.0.4844.82:
  * Fix potential problem in Hangouts (boo#1197332)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1648296000">- Chromium 99.0.4844.84:
  * CVE-2022-1096: Type Confusion in V8 (boo#1197552)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1648555200">- Update disk constraints</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1648641600">- Chromium 100.0.4896.60 (boo#1197680)
  * CVE-2022-1125: Use after free in Portals
  * CVE-2022-1127: Use after free in QR Code Generator
  * CVE-2022-1128: Inappropriate implementation in Web Share API
  * CVE-2022-1129: Inappropriate implementation in Full Screen Mode
  * CVE-2022-1130: Insufficient validation of untrusted input in WebOTP
  * CVE-2022-1131: Use after free in Cast UI
  * CVE-2022-1132: Inappropriate implementation in Virtual Keyboard
  * CVE-2022-1133: Use after free in WebRTC
  * CVE-2022-1134: Type Confusion in V8
  * CVE-2022-1135: Use after free in Shopping Cart
  * CVE-2022-1136: Use after free in Tab Strip
  * CVE-2022-1137: Inappropriate implementation in Extensions
  * CVE-2022-1138: Inappropriate implementation in Web Cursor
  * CVE-2022-1139: Inappropriate implementation in Background Fetch API
  * CVE-2022-1141: Use after free in File Manager
  * CVE-2022-1142: Heap buffer overflow in WebUI
  * CVE-2022-1143: Heap buffer overflow in WebUI
  * CVE-2022-1144: Use after free in WebUI
  * CVE-2022-1145: Use after free in Extensions
  * CVE-2022-1146: Inappropriate implementation in Resource Timing
- Added patches:
  * chromium-100-compiler.patch
  * chromium-100-GLImplementationParts-constexpr.patch
  * chromium-100-InMilliseconds-constexpr.patch
  * chromium-100-SCTHashdanceMetadata-move.patch
  * chromium-100-macro-typo.patch
- Removed patches:
  * chromium-98-compiler.patch
  * chromium-86-nearby-explicit.patch
  * chromium-glibc-2.34.patch
  * chromium-v8-missing-utility-include.patch
  * chromium-99-AutofillAssistantModelExecutor-NoDestructor.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1649160000">- Chromium 100.0.4896.75:
  * CVE-2022-1232: Type Confusion in V8 (boo#1198053)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1649592000">- Patches for GCC 12:
  * chromium-fix-swiftshader-template.patch
  * chromium-missing-include-tuple.patch
  * chromium-webrtc-stats-missing-vector.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1649764800">- Chromium 100.0.4896.88 (boo#1198361)
  * CVE-2022-1305: Use after free in storage
  * CVE-2022-1306: Inappropriate implementation in compositing
  * CVE-2022-1307: Inappropriate implementation in full screen
  * CVE-2022-1308: Use after free in BFCache
  * CVE-2022-1309: Insufficient policy enforcement in developer tools
  * CVE-2022-1310: Use after free in regular expressions
  * CVE-2022-1311: Use after free in Chrome OS shell
  * CVE-2022-1312: Use after free in storage
  * CVE-2022-1313: Use after free in tab groups
  * CVE-2022-1314: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1650024000">- Chromium 100.0.4896.127 (boo#1198509)
  * CVE-2022-1364: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1650542400">- Fixes for go 1.18</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1651665600">- Chromium 101.0.4951.54 (boo#1199118)
- Chromium 101.0.4951.41 (boo#1198917)
  * CVE-2022-1477: Use after free in Vulkan
  * CVE-2022-1478: Use after free in SwiftShader
  * CVE-2022-1479: Use after free in ANGLE
  * CVE-2022-1480: Use after free in Device API
  * CVE-2022-1481: Use after free in Sharing
  * CVE-2022-1482: Inappropriate implementation in WebGL
  * CVE-2022-1483: Heap buffer overflow in WebGPU
  * CVE-2022-1484: Heap buffer overflow in Web UI Settings
  * CVE-2022-1485: Use after free in File System API
  * CVE-2022-1486: Type Confusion in V8
  * CVE-2022-1487: Use after free in Ozone
  * CVE-2022-1488: Inappropriate implementation in Extensions API
  * CVE-2022-1489: Out of bounds memory access in UI Shelf
  * CVE-2022-1490: Use after free in Browser Switcher
  * CVE-2022-1491: Use after free in Bookmarks
  * CVE-2022-1492: Insufficient data validation in Blink Editing
  * CVE-2022-1493: Use after free in Dev Tools
  * CVE-2022-1494: Insufficient data validation in Trusted Types
  * CVE-2022-1495: Incorrect security UI in Downloads
  * CVE-2022-1496: Use after free in File Manager
  * CVE-2022-1497: Inappropriate implementation in Input
  * CVE-2022-1498: Inappropriate implementation in HTML Parser
  * CVE-2022-1499: Inappropriate implementation in WebAuthentication
  * CVE-2022-1500: Insufficient data validation in Dev Tools
  * CVE-2022-1501: Inappropriate implementation in iframe
- Added patches:
  * chromium-101-libxml-unbundle.patch
  * chromium-101-segmentation_platform-type.patch
- Removed patches:
  * chromium-100-SCTHashdanceMetadata-move.patch
  * chromium-100-GLImplementationParts-constexpr.patch
  * chromium-100-macro-typo.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1652270400">- Chromium 101.0.4951.64 (boo#1199409)
  * CVE-2022-1633: Use after free in Sharesheet
  * CVE-2022-1634: Use after free in Browser UI
  * CVE-2022-1635: Use after free in Permission Prompts
  * CVE-2022-1636: Use after free in Performance APIs
  * CVE-2022-1637: Inappropriate implementation in Web Contents
  * CVE-2022-1638: Heap buffer overflow in V8 Internationalization
  * CVE-2022-1639: Use after free in ANGLE
  * CVE-2022-1640: Use after free in Sharing
  * CVE-2022-1641: Use after free in Web UI Diagnostics</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1652616000">- Chromium 101.0.4951.67
  * fixes for other platforms</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1653652800">- Chromium 102.0.5001.61 (boo#1199893)
  * CVE-2022-1853: Use after free in Indexed DB
  * CVE-2022-1854: Use after free in ANGLE
  * CVE-2022-1855: Use after free in Messaging
  * CVE-2022-1856: Use after free in User Education
  * CVE-2022-1857: Insufficient policy enforcement in File System API
  * CVE-2022-1858: Out of bounds read in DevTools
  * CVE-2022-1859: Use after free in Performance Manager
  * CVE-2022-1860: Use after free in UI Foundations
  * CVE-2022-1861: Use after free in Sharing
  * CVE-2022-1862: Inappropriate implementation in Extensions
  * CVE-2022-1863: Use after free in Tab Groups
  * CVE-2022-1864: Use after free in WebApp Installs
  * CVE-2022-1865: Use after free in Bookmarks
  * CVE-2022-1866: Use after free in Tablet Mode
  * CVE-2022-1867: Insufficient validation of untrusted input in Data Transfer
  * CVE-2022-1868: Inappropriate implementation in Extensions API
  * CVE-2022-1869: Type Confusion in V8
  * CVE-2022-1870: Use after free in App Service
  * CVE-2022-1871: Insufficient policy enforcement in File System API
  * CVE-2022-1872: Insufficient policy enforcement in Extensions API
  * CVE-2022-1873: Insufficient policy enforcement in COOP
  * CVE-2022-1874: Insufficient policy enforcement in Safe Browsing
  * CVE-2022-1875: Inappropriate implementation in PDF
  * CVE-2022-1876: Heap buffer overflow in DevTools
- Added patches:
  * chromium-102-compiler.patch
  * chromium-102-fenced_frame_utils-include.patch
  * chromium-102-regex_pattern-array.patch
  * chromium-102-swiftshader-template-instantiation.patch
  * chromium-102-symbolize-include.patch
  * ffmpeg-new-channel-layout.patch
- Removed patches:
  * chromium-100-compiler.patch
  * chromium-80-QuicStreamSendBuffer-deleted-move-constructor.patch
  * chromium-95-quiche-include.patch
  * chromium-fix-swiftshader-template.patch
  * chromium-missing-include-tuple.patch
  * chromium-webrtc-stats-missing-vector.patch
  * chromium-101-segmentation_platform-type.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654084800">- Disable ARM control flow integrity, it causes build issues
  at the moment
- Try a different SVG (black logo on GNOME)
- Removed patches:
  * chromium-third_party-symbolize-missing-include.patch
  (replaced by chromium-102-symbolize-include.patch)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654689600">- Switch to GTK4 on TW and Leap 15.4+ (boo#1200139)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1654862400">- Chromium 102.0.5005.115 (boo#1200423)
  * CVE-2022-2007: Use after free in WebGPU
  * CVE-2022-2008: Out of bounds memory access in WebGL
  * CVE-2022-2010: Out of bounds read in compositing
  * CVE-2022-2011: Use after free in ANGLE</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1656158400">- Chromium 103.0.5060.53 (boo#1200783)
  * CVE-2022-2156: Use after free in Base
  * CVE-2022-2157: Use after free in Interest groups
  * CVE-2022-2158: Type Confusion in V8
  * CVE-2022-2160: Insufficient policy enforcement in DevTools
  * CVE-2022-2161: Use after free in WebApp Provider
  * CVE-2022-2162: Insufficient policy enforcement in File System API
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * CVE-2022-2164: Inappropriate implementation in Extensions API
  * CVE-2022-2165: Insufficient data validation in URL formatting
- Added patches:
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-VirtualCursor-std-layout.patch
  * chromium-103-compiler.patch
- Removed patches:
  * chromium-102-compiler.patch
  * chromium-91-sql-standard-layout-type.patch
  * chromium-101-libxml-unbundle.patch
  * chromium-102-fenced_frame_utils-include.patch
  * chromium-102-swiftshader-template-instantiation.patch
  * chromium-102-symbolize-include.patch
  * chromium-97-arm-tflite-cast.patch
  * chromium-97-ScrollView-reference.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657195200">- Chromium 103.0.5060.66
  * no upstream release notes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657368000">- Chromium 103.0.5060.114 (boo#1201216)
  * CVE-2022-2294: Heap buffer overflow in WebRTC
  * CVE-2022-2295: Type Confusion in V8
  * CVE-2022-2296: Use after free in Chrome OS Shell</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1658318400">- Chromium 103.0.5060.134 (boo#1201679):
  * CVE-2022-2477 : Use after free in Guest View
  * CVE-2022-2478 : Use after free in PDF
  * CVE-2022-2479 : Insufficient validation of untrusted input in File
  * CVE-2022-2480 : Use after free in Service Worker API
  * CVE-2022-2481: Use after free in Views
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
</package>
<package pkgid="7fe4a7ccbbfa332a12de3a0985bed7f6b6a0115c201e79bddf5c6a9f4f9fb773" name="chromium" arch="aarch64">
  <version epoch="0" ver="103.0.5060.53" rel="bp154.2.11.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1644926400">- Chromium 98.0.4758.102 (boo#1195986)
  * CVE-2022-0603: Use after free in File Manager
  * CVE-2022-0604: Heap buffer overflow in Tab Groups
  * CVE-2022-0605: Use after free in Webstore API
  * CVE-2022-0606: Use after free in ANGLE
  * CVE-2022-0607: Use after free in GPU
  * CVE-2022-0608: Integer overflow in Mojo
  * CVE-2022-0609: Use after free in Animation
  * CVE-2022-0610: Inappropriate implementation in Gamepad API
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1646395200">- Chromium 99.0.4844.51 (boo#1196641)
  * CVE-2022-0789: Heap buffer overflow in ANGLE
  * CVE-2022-0790: Use after free in Cast UI
  * CVE-2022-0791: Use after free in Omnibox
  * CVE-2022-0792: Out of bounds read in ANGLE
  * CVE-2022-0793: Use after free in Views
  * CVE-2022-0794: Use after free in WebShare
  * CVE-2022-0795: Type Confusion in Blink Layout
  * CVE-2022-0796: Use after free in Media
  * CVE-2022-0797: Out of bounds memory access in Mojo
  * CVE-2022-0798: Use after free in MediaStream
  * CVE-2022-0799: Insufficient policy enforcement in Installer
  * CVE-2022-0800: Heap buffer overflow in Cast UI
  * CVE-2022-0801: Inappropriate implementation in HTML parser
  * CVE-2022-0802: Inappropriate implementation in Full screen mode
  * CVE-2022-0803: Inappropriate implementation in Permissions
  * CVE-2022-0804: Inappropriate implementation in Full screen mode
  * CVE-2022-0805: Use after free in Browser Switcher
  * CVE-2022-0806: Data leak in Canvas
  * CVE-2022-0807: Inappropriate implementation in Autofill
  * CVE-2022-0808: Use after free in Chrome OS Shell
  * CVE-2022-0809: Out of bounds memory access in WebXR
- Removed patches:
  * chromium-96-EnumTable-crash.patch
  * chromium-89-missing-cstring-header.patch
  * chromium-95-libyuv-aarch64.patch
  * chromium-95-libyuv-arm.patch
  * chromium-98-MiraclePtr-gcc-ice.patch
  * chromium-98-WaylandFrameManager-check.patch
- Added patches:
  * chromium-97-arm-tflite-cast.patch
  * chromium-98-gtk4-build.patch
  * chromium-99-AutofillAssistantModelExecutor-NoDestructor.patch
  * chromium-98-EnumTable-crash.patch
  * chromium-third_party-symbolize-missing-include.patch
  * chromium-v8-missing-utility-include.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1647432000">- Chromium 99.0.4844.74 (boo#1197163)
  * CVE-2022-0971: Use after free in Blink Layout
  * CVE-2022-0972: Use after free in Extensions
  * CVE-2022-0973: Use after free in Safe Browsing
  * CVE-2022-0974: Use after free in Splitscreen
  * CVE-2022-0975: Use after free in ANGLE
  * CVE-2022-0976: Heap buffer overflow in GPU
  * CVE-2022-0977: Use after free in Browser UI
  * CVE-2022-0978: Use after free in ANGLE
  * CVE-2022-0979: Use after free in Safe Browsing
  * CVE-2022-0980: Use after free in New Tab Page
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1647864000">- Chromium 99.0.4844.82:
  * Fix potential problem in Hangouts (boo#1197332)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1648296000">- Chromium 99.0.4844.84:
  * CVE-2022-1096: Type Confusion in V8 (boo#1197552)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1648555200">- Update disk constraints</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1648641600">- Chromium 100.0.4896.60 (boo#1197680)
  * CVE-2022-1125: Use after free in Portals
  * CVE-2022-1127: Use after free in QR Code Generator
  * CVE-2022-1128: Inappropriate implementation in Web Share API
  * CVE-2022-1129: Inappropriate implementation in Full Screen Mode
  * CVE-2022-1130: Insufficient validation of untrusted input in WebOTP
  * CVE-2022-1131: Use after free in Cast UI
  * CVE-2022-1132: Inappropriate implementation in Virtual Keyboard
  * CVE-2022-1133: Use after free in WebRTC
  * CVE-2022-1134: Type Confusion in V8
  * CVE-2022-1135: Use after free in Shopping Cart
  * CVE-2022-1136: Use after free in Tab Strip
  * CVE-2022-1137: Inappropriate implementation in Extensions
  * CVE-2022-1138: Inappropriate implementation in Web Cursor
  * CVE-2022-1139: Inappropriate implementation in Background Fetch API
  * CVE-2022-1141: Use after free in File Manager
  * CVE-2022-1142: Heap buffer overflow in WebUI
  * CVE-2022-1143: Heap buffer overflow in WebUI
  * CVE-2022-1144: Use after free in WebUI
  * CVE-2022-1145: Use after free in Extensions
  * CVE-2022-1146: Inappropriate implementation in Resource Timing
- Added patches:
  * chromium-100-compiler.patch
  * chromium-100-GLImplementationParts-constexpr.patch
  * chromium-100-InMilliseconds-constexpr.patch
  * chromium-100-SCTHashdanceMetadata-move.patch
  * chromium-100-macro-typo.patch
- Removed patches:
  * chromium-98-compiler.patch
  * chromium-86-nearby-explicit.patch
  * chromium-glibc-2.34.patch
  * chromium-v8-missing-utility-include.patch
  * chromium-99-AutofillAssistantModelExecutor-NoDestructor.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1649160000">- Chromium 100.0.4896.75:
  * CVE-2022-1232: Type Confusion in V8 (boo#1198053)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1649592000">- Patches for GCC 12:
  * chromium-fix-swiftshader-template.patch
  * chromium-missing-include-tuple.patch
  * chromium-webrtc-stats-missing-vector.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1649764800">- Chromium 100.0.4896.88 (boo#1198361)
  * CVE-2022-1305: Use after free in storage
  * CVE-2022-1306: Inappropriate implementation in compositing
  * CVE-2022-1307: Inappropriate implementation in full screen
  * CVE-2022-1308: Use after free in BFCache
  * CVE-2022-1309: Insufficient policy enforcement in developer tools
  * CVE-2022-1310: Use after free in regular expressions
  * CVE-2022-1311: Use after free in Chrome OS shell
  * CVE-2022-1312: Use after free in storage
  * CVE-2022-1313: Use after free in tab groups
  * CVE-2022-1314: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1650024000">- Chromium 100.0.4896.127 (boo#1198509)
  * CVE-2022-1364: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1650542400">- Fixes for go 1.18</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1651665600">- Chromium 101.0.4951.54 (boo#1199118)
- Chromium 101.0.4951.41 (boo#1198917)
  * CVE-2022-1477: Use after free in Vulkan
  * CVE-2022-1478: Use after free in SwiftShader
  * CVE-2022-1479: Use after free in ANGLE
  * CVE-2022-1480: Use after free in Device API
  * CVE-2022-1481: Use after free in Sharing
  * CVE-2022-1482: Inappropriate implementation in WebGL
  * CVE-2022-1483: Heap buffer overflow in WebGPU
  * CVE-2022-1484: Heap buffer overflow in Web UI Settings
  * CVE-2022-1485: Use after free in File System API
  * CVE-2022-1486: Type Confusion in V8
  * CVE-2022-1487: Use after free in Ozone
  * CVE-2022-1488: Inappropriate implementation in Extensions API
  * CVE-2022-1489: Out of bounds memory access in UI Shelf
  * CVE-2022-1490: Use after free in Browser Switcher
  * CVE-2022-1491: Use after free in Bookmarks
  * CVE-2022-1492: Insufficient data validation in Blink Editing
  * CVE-2022-1493: Use after free in Dev Tools
  * CVE-2022-1494: Insufficient data validation in Trusted Types
  * CVE-2022-1495: Incorrect security UI in Downloads
  * CVE-2022-1496: Use after free in File Manager
  * CVE-2022-1497: Inappropriate implementation in Input
  * CVE-2022-1498: Inappropriate implementation in HTML Parser
  * CVE-2022-1499: Inappropriate implementation in WebAuthentication
  * CVE-2022-1500: Insufficient data validation in Dev Tools
  * CVE-2022-1501: Inappropriate implementation in iframe
- Added patches:
  * chromium-101-libxml-unbundle.patch
  * chromium-101-segmentation_platform-type.patch
- Removed patches:
  * chromium-100-SCTHashdanceMetadata-move.patch
  * chromium-100-GLImplementationParts-constexpr.patch
  * chromium-100-macro-typo.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1652270400">- Chromium 101.0.4951.64 (boo#1199409)
  * CVE-2022-1633: Use after free in Sharesheet
  * CVE-2022-1634: Use after free in Browser UI
  * CVE-2022-1635: Use after free in Permission Prompts
  * CVE-2022-1636: Use after free in Performance APIs
  * CVE-2022-1637: Inappropriate implementation in Web Contents
  * CVE-2022-1638: Heap buffer overflow in V8 Internationalization
  * CVE-2022-1639: Use after free in ANGLE
  * CVE-2022-1640: Use after free in Sharing
  * CVE-2022-1641: Use after free in Web UI Diagnostics</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1652616000">- Chromium 101.0.4951.67
  * fixes for other platforms</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1653652800">- Chromium 102.0.5001.61 (boo#1199893)
  * CVE-2022-1853: Use after free in Indexed DB
  * CVE-2022-1854: Use after free in ANGLE
  * CVE-2022-1855: Use after free in Messaging
  * CVE-2022-1856: Use after free in User Education
  * CVE-2022-1857: Insufficient policy enforcement in File System API
  * CVE-2022-1858: Out of bounds read in DevTools
  * CVE-2022-1859: Use after free in Performance Manager
  * CVE-2022-1860: Use after free in UI Foundations
  * CVE-2022-1861: Use after free in Sharing
  * CVE-2022-1862: Inappropriate implementation in Extensions
  * CVE-2022-1863: Use after free in Tab Groups
  * CVE-2022-1864: Use after free in WebApp Installs
  * CVE-2022-1865: Use after free in Bookmarks
  * CVE-2022-1866: Use after free in Tablet Mode
  * CVE-2022-1867: Insufficient validation of untrusted input in Data Transfer
  * CVE-2022-1868: Inappropriate implementation in Extensions API
  * CVE-2022-1869: Type Confusion in V8
  * CVE-2022-1870: Use after free in App Service
  * CVE-2022-1871: Insufficient policy enforcement in File System API
  * CVE-2022-1872: Insufficient policy enforcement in Extensions API
  * CVE-2022-1873: Insufficient policy enforcement in COOP
  * CVE-2022-1874: Insufficient policy enforcement in Safe Browsing
  * CVE-2022-1875: Inappropriate implementation in PDF
  * CVE-2022-1876: Heap buffer overflow in DevTools
- Added patches:
  * chromium-102-compiler.patch
  * chromium-102-fenced_frame_utils-include.patch
  * chromium-102-regex_pattern-array.patch
  * chromium-102-swiftshader-template-instantiation.patch
  * chromium-102-symbolize-include.patch
  * ffmpeg-new-channel-layout.patch
- Removed patches:
  * chromium-100-compiler.patch
  * chromium-80-QuicStreamSendBuffer-deleted-move-constructor.patch
  * chromium-95-quiche-include.patch
  * chromium-fix-swiftshader-template.patch
  * chromium-missing-include-tuple.patch
  * chromium-webrtc-stats-missing-vector.patch
  * chromium-101-segmentation_platform-type.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654084800">- Disable ARM control flow integrity, it causes build issues
  at the moment
- Try a different SVG (black logo on GNOME)
- Removed patches:
  * chromium-third_party-symbolize-missing-include.patch
  (replaced by chromium-102-symbolize-include.patch)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654689600">- Switch to GTK4 on TW and Leap 15.4+ (boo#1200139)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1654862400">- Chromium 102.0.5005.115 (boo#1200423)
  * CVE-2022-2007: Use after free in WebGPU
  * CVE-2022-2008: Out of bounds memory access in WebGL
  * CVE-2022-2010: Out of bounds read in compositing
  * CVE-2022-2011: Use after free in ANGLE</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1656158400">- Chromium 103.0.5060.53 (boo#1200783)
  * CVE-2022-2156: Use after free in Base
  * CVE-2022-2157: Use after free in Interest groups
  * CVE-2022-2158: Type Confusion in V8
  * CVE-2022-2160: Insufficient policy enforcement in DevTools
  * CVE-2022-2161: Use after free in WebApp Provider
  * CVE-2022-2162: Insufficient policy enforcement in File System API
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * CVE-2022-2164: Inappropriate implementation in Extensions API
  * CVE-2022-2165: Insufficient data validation in URL formatting
- Added patches:
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-VirtualCursor-std-layout.patch
  * chromium-103-compiler.patch
- Removed patches:
  * chromium-102-compiler.patch
  * chromium-91-sql-standard-layout-type.patch
  * chromium-101-libxml-unbundle.patch
  * chromium-102-fenced_frame_utils-include.patch
  * chromium-102-swiftshader-template-instantiation.patch
  * chromium-102-symbolize-include.patch
  * chromium-97-arm-tflite-cast.patch
  * chromium-97-ScrollView-reference.patch</changelog>
</package>
<package pkgid="74696032f0a6ce759d8cf3f32331cfd493cf81556246851afc0be6ef1cd06e34" name="chromium" arch="src">
  <version epoch="0" ver="103.0.5060.53" rel="bp154.2.11.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1644926400">- Chromium 98.0.4758.102 (boo#1195986)
  * CVE-2022-0603: Use after free in File Manager
  * CVE-2022-0604: Heap buffer overflow in Tab Groups
  * CVE-2022-0605: Use after free in Webstore API
  * CVE-2022-0606: Use after free in ANGLE
  * CVE-2022-0607: Use after free in GPU
  * CVE-2022-0608: Integer overflow in Mojo
  * CVE-2022-0609: Use after free in Animation
  * CVE-2022-0610: Inappropriate implementation in Gamepad API
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1646395200">- Chromium 99.0.4844.51 (boo#1196641)
  * CVE-2022-0789: Heap buffer overflow in ANGLE
  * CVE-2022-0790: Use after free in Cast UI
  * CVE-2022-0791: Use after free in Omnibox
  * CVE-2022-0792: Out of bounds read in ANGLE
  * CVE-2022-0793: Use after free in Views
  * CVE-2022-0794: Use after free in WebShare
  * CVE-2022-0795: Type Confusion in Blink Layout
  * CVE-2022-0796: Use after free in Media
  * CVE-2022-0797: Out of bounds memory access in Mojo
  * CVE-2022-0798: Use after free in MediaStream
  * CVE-2022-0799: Insufficient policy enforcement in Installer
  * CVE-2022-0800: Heap buffer overflow in Cast UI
  * CVE-2022-0801: Inappropriate implementation in HTML parser
  * CVE-2022-0802: Inappropriate implementation in Full screen mode
  * CVE-2022-0803: Inappropriate implementation in Permissions
  * CVE-2022-0804: Inappropriate implementation in Full screen mode
  * CVE-2022-0805: Use after free in Browser Switcher
  * CVE-2022-0806: Data leak in Canvas
  * CVE-2022-0807: Inappropriate implementation in Autofill
  * CVE-2022-0808: Use after free in Chrome OS Shell
  * CVE-2022-0809: Out of bounds memory access in WebXR
- Removed patches:
  * chromium-96-EnumTable-crash.patch
  * chromium-89-missing-cstring-header.patch
  * chromium-95-libyuv-aarch64.patch
  * chromium-95-libyuv-arm.patch
  * chromium-98-MiraclePtr-gcc-ice.patch
  * chromium-98-WaylandFrameManager-check.patch
- Added patches:
  * chromium-97-arm-tflite-cast.patch
  * chromium-98-gtk4-build.patch
  * chromium-99-AutofillAssistantModelExecutor-NoDestructor.patch
  * chromium-98-EnumTable-crash.patch
  * chromium-third_party-symbolize-missing-include.patch
  * chromium-v8-missing-utility-include.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1647432000">- Chromium 99.0.4844.74 (boo#1197163)
  * CVE-2022-0971: Use after free in Blink Layout
  * CVE-2022-0972: Use after free in Extensions
  * CVE-2022-0973: Use after free in Safe Browsing
  * CVE-2022-0974: Use after free in Splitscreen
  * CVE-2022-0975: Use after free in ANGLE
  * CVE-2022-0976: Heap buffer overflow in GPU
  * CVE-2022-0977: Use after free in Browser UI
  * CVE-2022-0978: Use after free in ANGLE
  * CVE-2022-0979: Use after free in Safe Browsing
  * CVE-2022-0980: Use after free in New Tab Page
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1647864000">- Chromium 99.0.4844.82:
  * Fix potential problem in Hangouts (boo#1197332)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1648296000">- Chromium 99.0.4844.84:
  * CVE-2022-1096: Type Confusion in V8 (boo#1197552)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1648555200">- Update disk constraints</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1648641600">- Chromium 100.0.4896.60 (boo#1197680)
  * CVE-2022-1125: Use after free in Portals
  * CVE-2022-1127: Use after free in QR Code Generator
  * CVE-2022-1128: Inappropriate implementation in Web Share API
  * CVE-2022-1129: Inappropriate implementation in Full Screen Mode
  * CVE-2022-1130: Insufficient validation of untrusted input in WebOTP
  * CVE-2022-1131: Use after free in Cast UI
  * CVE-2022-1132: Inappropriate implementation in Virtual Keyboard
  * CVE-2022-1133: Use after free in WebRTC
  * CVE-2022-1134: Type Confusion in V8
  * CVE-2022-1135: Use after free in Shopping Cart
  * CVE-2022-1136: Use after free in Tab Strip
  * CVE-2022-1137: Inappropriate implementation in Extensions
  * CVE-2022-1138: Inappropriate implementation in Web Cursor
  * CVE-2022-1139: Inappropriate implementation in Background Fetch API
  * CVE-2022-1141: Use after free in File Manager
  * CVE-2022-1142: Heap buffer overflow in WebUI
  * CVE-2022-1143: Heap buffer overflow in WebUI
  * CVE-2022-1144: Use after free in WebUI
  * CVE-2022-1145: Use after free in Extensions
  * CVE-2022-1146: Inappropriate implementation in Resource Timing
- Added patches:
  * chromium-100-compiler.patch
  * chromium-100-GLImplementationParts-constexpr.patch
  * chromium-100-InMilliseconds-constexpr.patch
  * chromium-100-SCTHashdanceMetadata-move.patch
  * chromium-100-macro-typo.patch
- Removed patches:
  * chromium-98-compiler.patch
  * chromium-86-nearby-explicit.patch
  * chromium-glibc-2.34.patch
  * chromium-v8-missing-utility-include.patch
  * chromium-99-AutofillAssistantModelExecutor-NoDestructor.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1649160000">- Chromium 100.0.4896.75:
  * CVE-2022-1232: Type Confusion in V8 (boo#1198053)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1649592000">- Patches for GCC 12:
  * chromium-fix-swiftshader-template.patch
  * chromium-missing-include-tuple.patch
  * chromium-webrtc-stats-missing-vector.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1649764800">- Chromium 100.0.4896.88 (boo#1198361)
  * CVE-2022-1305: Use after free in storage
  * CVE-2022-1306: Inappropriate implementation in compositing
  * CVE-2022-1307: Inappropriate implementation in full screen
  * CVE-2022-1308: Use after free in BFCache
  * CVE-2022-1309: Insufficient policy enforcement in developer tools
  * CVE-2022-1310: Use after free in regular expressions
  * CVE-2022-1311: Use after free in Chrome OS shell
  * CVE-2022-1312: Use after free in storage
  * CVE-2022-1313: Use after free in tab groups
  * CVE-2022-1314: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1650024000">- Chromium 100.0.4896.127 (boo#1198509)
  * CVE-2022-1364: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1650542400">- Fixes for go 1.18</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1651665600">- Chromium 101.0.4951.54 (boo#1199118)
- Chromium 101.0.4951.41 (boo#1198917)
  * CVE-2022-1477: Use after free in Vulkan
  * CVE-2022-1478: Use after free in SwiftShader
  * CVE-2022-1479: Use after free in ANGLE
  * CVE-2022-1480: Use after free in Device API
  * CVE-2022-1481: Use after free in Sharing
  * CVE-2022-1482: Inappropriate implementation in WebGL
  * CVE-2022-1483: Heap buffer overflow in WebGPU
  * CVE-2022-1484: Heap buffer overflow in Web UI Settings
  * CVE-2022-1485: Use after free in File System API
  * CVE-2022-1486: Type Confusion in V8
  * CVE-2022-1487: Use after free in Ozone
  * CVE-2022-1488: Inappropriate implementation in Extensions API
  * CVE-2022-1489: Out of bounds memory access in UI Shelf
  * CVE-2022-1490: Use after free in Browser Switcher
  * CVE-2022-1491: Use after free in Bookmarks
  * CVE-2022-1492: Insufficient data validation in Blink Editing
  * CVE-2022-1493: Use after free in Dev Tools
  * CVE-2022-1494: Insufficient data validation in Trusted Types
  * CVE-2022-1495: Incorrect security UI in Downloads
  * CVE-2022-1496: Use after free in File Manager
  * CVE-2022-1497: Inappropriate implementation in Input
  * CVE-2022-1498: Inappropriate implementation in HTML Parser
  * CVE-2022-1499: Inappropriate implementation in WebAuthentication
  * CVE-2022-1500: Insufficient data validation in Dev Tools
  * CVE-2022-1501: Inappropriate implementation in iframe
- Added patches:
  * chromium-101-libxml-unbundle.patch
  * chromium-101-segmentation_platform-type.patch
- Removed patches:
  * chromium-100-SCTHashdanceMetadata-move.patch
  * chromium-100-GLImplementationParts-constexpr.patch
  * chromium-100-macro-typo.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1652270400">- Chromium 101.0.4951.64 (boo#1199409)
  * CVE-2022-1633: Use after free in Sharesheet
  * CVE-2022-1634: Use after free in Browser UI
  * CVE-2022-1635: Use after free in Permission Prompts
  * CVE-2022-1636: Use after free in Performance APIs
  * CVE-2022-1637: Inappropriate implementation in Web Contents
  * CVE-2022-1638: Heap buffer overflow in V8 Internationalization
  * CVE-2022-1639: Use after free in ANGLE
  * CVE-2022-1640: Use after free in Sharing
  * CVE-2022-1641: Use after free in Web UI Diagnostics</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1652616000">- Chromium 101.0.4951.67
  * fixes for other platforms</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1653652800">- Chromium 102.0.5001.61 (boo#1199893)
  * CVE-2022-1853: Use after free in Indexed DB
  * CVE-2022-1854: Use after free in ANGLE
  * CVE-2022-1855: Use after free in Messaging
  * CVE-2022-1856: Use after free in User Education
  * CVE-2022-1857: Insufficient policy enforcement in File System API
  * CVE-2022-1858: Out of bounds read in DevTools
  * CVE-2022-1859: Use after free in Performance Manager
  * CVE-2022-1860: Use after free in UI Foundations
  * CVE-2022-1861: Use after free in Sharing
  * CVE-2022-1862: Inappropriate implementation in Extensions
  * CVE-2022-1863: Use after free in Tab Groups
  * CVE-2022-1864: Use after free in WebApp Installs
  * CVE-2022-1865: Use after free in Bookmarks
  * CVE-2022-1866: Use after free in Tablet Mode
  * CVE-2022-1867: Insufficient validation of untrusted input in Data Transfer
  * CVE-2022-1868: Inappropriate implementation in Extensions API
  * CVE-2022-1869: Type Confusion in V8
  * CVE-2022-1870: Use after free in App Service
  * CVE-2022-1871: Insufficient policy enforcement in File System API
  * CVE-2022-1872: Insufficient policy enforcement in Extensions API
  * CVE-2022-1873: Insufficient policy enforcement in COOP
  * CVE-2022-1874: Insufficient policy enforcement in Safe Browsing
  * CVE-2022-1875: Inappropriate implementation in PDF
  * CVE-2022-1876: Heap buffer overflow in DevTools
- Added patches:
  * chromium-102-compiler.patch
  * chromium-102-fenced_frame_utils-include.patch
  * chromium-102-regex_pattern-array.patch
  * chromium-102-swiftshader-template-instantiation.patch
  * chromium-102-symbolize-include.patch
  * ffmpeg-new-channel-layout.patch
- Removed patches:
  * chromium-100-compiler.patch
  * chromium-80-QuicStreamSendBuffer-deleted-move-constructor.patch
  * chromium-95-quiche-include.patch
  * chromium-fix-swiftshader-template.patch
  * chromium-missing-include-tuple.patch
  * chromium-webrtc-stats-missing-vector.patch
  * chromium-101-segmentation_platform-type.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654084800">- Disable ARM control flow integrity, it causes build issues
  at the moment
- Try a different SVG (black logo on GNOME)
- Removed patches:
  * chromium-third_party-symbolize-missing-include.patch
  (replaced by chromium-102-symbolize-include.patch)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654689600">- Switch to GTK4 on TW and Leap 15.4+ (boo#1200139)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1654862400">- Chromium 102.0.5005.115 (boo#1200423)
  * CVE-2022-2007: Use after free in WebGPU
  * CVE-2022-2008: Out of bounds memory access in WebGL
  * CVE-2022-2010: Out of bounds read in compositing
  * CVE-2022-2011: Use after free in ANGLE</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1656158400">- Chromium 103.0.5060.53 (boo#1200783)
  * CVE-2022-2156: Use after free in Base
  * CVE-2022-2157: Use after free in Interest groups
  * CVE-2022-2158: Type Confusion in V8
  * CVE-2022-2160: Insufficient policy enforcement in DevTools
  * CVE-2022-2161: Use after free in WebApp Provider
  * CVE-2022-2162: Insufficient policy enforcement in File System API
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * CVE-2022-2164: Inappropriate implementation in Extensions API
  * CVE-2022-2165: Insufficient data validation in URL formatting
- Added patches:
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-VirtualCursor-std-layout.patch
  * chromium-103-compiler.patch
- Removed patches:
  * chromium-102-compiler.patch
  * chromium-91-sql-standard-layout-type.patch
  * chromium-101-libxml-unbundle.patch
  * chromium-102-fenced_frame_utils-include.patch
  * chromium-102-swiftshader-template-instantiation.patch
  * chromium-102-symbolize-include.patch
  * chromium-97-arm-tflite-cast.patch
  * chromium-97-ScrollView-reference.patch</changelog>
</package>
<package pkgid="97bb01c0ba0742194e8878183ea65018fc8fcd7ef9f1bf1ed2987a374f4904c1" name="chromium" arch="x86_64">
  <version epoch="0" ver="103.0.5060.53" rel="bp154.2.11.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1644926400">- Chromium 98.0.4758.102 (boo#1195986)
  * CVE-2022-0603: Use after free in File Manager
  * CVE-2022-0604: Heap buffer overflow in Tab Groups
  * CVE-2022-0605: Use after free in Webstore API
  * CVE-2022-0606: Use after free in ANGLE
  * CVE-2022-0607: Use after free in GPU
  * CVE-2022-0608: Integer overflow in Mojo
  * CVE-2022-0609: Use after free in Animation
  * CVE-2022-0610: Inappropriate implementation in Gamepad API
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1646395200">- Chromium 99.0.4844.51 (boo#1196641)
  * CVE-2022-0789: Heap buffer overflow in ANGLE
  * CVE-2022-0790: Use after free in Cast UI
  * CVE-2022-0791: Use after free in Omnibox
  * CVE-2022-0792: Out of bounds read in ANGLE
  * CVE-2022-0793: Use after free in Views
  * CVE-2022-0794: Use after free in WebShare
  * CVE-2022-0795: Type Confusion in Blink Layout
  * CVE-2022-0796: Use after free in Media
  * CVE-2022-0797: Out of bounds memory access in Mojo
  * CVE-2022-0798: Use after free in MediaStream
  * CVE-2022-0799: Insufficient policy enforcement in Installer
  * CVE-2022-0800: Heap buffer overflow in Cast UI
  * CVE-2022-0801: Inappropriate implementation in HTML parser
  * CVE-2022-0802: Inappropriate implementation in Full screen mode
  * CVE-2022-0803: Inappropriate implementation in Permissions
  * CVE-2022-0804: Inappropriate implementation in Full screen mode
  * CVE-2022-0805: Use after free in Browser Switcher
  * CVE-2022-0806: Data leak in Canvas
  * CVE-2022-0807: Inappropriate implementation in Autofill
  * CVE-2022-0808: Use after free in Chrome OS Shell
  * CVE-2022-0809: Out of bounds memory access in WebXR
- Removed patches:
  * chromium-96-EnumTable-crash.patch
  * chromium-89-missing-cstring-header.patch
  * chromium-95-libyuv-aarch64.patch
  * chromium-95-libyuv-arm.patch
  * chromium-98-MiraclePtr-gcc-ice.patch
  * chromium-98-WaylandFrameManager-check.patch
- Added patches:
  * chromium-97-arm-tflite-cast.patch
  * chromium-98-gtk4-build.patch
  * chromium-99-AutofillAssistantModelExecutor-NoDestructor.patch
  * chromium-98-EnumTable-crash.patch
  * chromium-third_party-symbolize-missing-include.patch
  * chromium-v8-missing-utility-include.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1647432000">- Chromium 99.0.4844.74 (boo#1197163)
  * CVE-2022-0971: Use after free in Blink Layout
  * CVE-2022-0972: Use after free in Extensions
  * CVE-2022-0973: Use after free in Safe Browsing
  * CVE-2022-0974: Use after free in Splitscreen
  * CVE-2022-0975: Use after free in ANGLE
  * CVE-2022-0976: Heap buffer overflow in GPU
  * CVE-2022-0977: Use after free in Browser UI
  * CVE-2022-0978: Use after free in ANGLE
  * CVE-2022-0979: Use after free in Safe Browsing
  * CVE-2022-0980: Use after free in New Tab Page
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1647864000">- Chromium 99.0.4844.82:
  * Fix potential problem in Hangouts (boo#1197332)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1648296000">- Chromium 99.0.4844.84:
  * CVE-2022-1096: Type Confusion in V8 (boo#1197552)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1648555200">- Update disk constraints</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1648641600">- Chromium 100.0.4896.60 (boo#1197680)
  * CVE-2022-1125: Use after free in Portals
  * CVE-2022-1127: Use after free in QR Code Generator
  * CVE-2022-1128: Inappropriate implementation in Web Share API
  * CVE-2022-1129: Inappropriate implementation in Full Screen Mode
  * CVE-2022-1130: Insufficient validation of untrusted input in WebOTP
  * CVE-2022-1131: Use after free in Cast UI
  * CVE-2022-1132: Inappropriate implementation in Virtual Keyboard
  * CVE-2022-1133: Use after free in WebRTC
  * CVE-2022-1134: Type Confusion in V8
  * CVE-2022-1135: Use after free in Shopping Cart
  * CVE-2022-1136: Use after free in Tab Strip
  * CVE-2022-1137: Inappropriate implementation in Extensions
  * CVE-2022-1138: Inappropriate implementation in Web Cursor
  * CVE-2022-1139: Inappropriate implementation in Background Fetch API
  * CVE-2022-1141: Use after free in File Manager
  * CVE-2022-1142: Heap buffer overflow in WebUI
  * CVE-2022-1143: Heap buffer overflow in WebUI
  * CVE-2022-1144: Use after free in WebUI
  * CVE-2022-1145: Use after free in Extensions
  * CVE-2022-1146: Inappropriate implementation in Resource Timing
- Added patches:
  * chromium-100-compiler.patch
  * chromium-100-GLImplementationParts-constexpr.patch
  * chromium-100-InMilliseconds-constexpr.patch
  * chromium-100-SCTHashdanceMetadata-move.patch
  * chromium-100-macro-typo.patch
- Removed patches:
  * chromium-98-compiler.patch
  * chromium-86-nearby-explicit.patch
  * chromium-glibc-2.34.patch
  * chromium-v8-missing-utility-include.patch
  * chromium-99-AutofillAssistantModelExecutor-NoDestructor.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1649160000">- Chromium 100.0.4896.75:
  * CVE-2022-1232: Type Confusion in V8 (boo#1198053)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1649592000">- Patches for GCC 12:
  * chromium-fix-swiftshader-template.patch
  * chromium-missing-include-tuple.patch
  * chromium-webrtc-stats-missing-vector.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1649764800">- Chromium 100.0.4896.88 (boo#1198361)
  * CVE-2022-1305: Use after free in storage
  * CVE-2022-1306: Inappropriate implementation in compositing
  * CVE-2022-1307: Inappropriate implementation in full screen
  * CVE-2022-1308: Use after free in BFCache
  * CVE-2022-1309: Insufficient policy enforcement in developer tools
  * CVE-2022-1310: Use after free in regular expressions
  * CVE-2022-1311: Use after free in Chrome OS shell
  * CVE-2022-1312: Use after free in storage
  * CVE-2022-1313: Use after free in tab groups
  * CVE-2022-1314: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1650024000">- Chromium 100.0.4896.127 (boo#1198509)
  * CVE-2022-1364: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1650542400">- Fixes for go 1.18</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1651665600">- Chromium 101.0.4951.54 (boo#1199118)
- Chromium 101.0.4951.41 (boo#1198917)
  * CVE-2022-1477: Use after free in Vulkan
  * CVE-2022-1478: Use after free in SwiftShader
  * CVE-2022-1479: Use after free in ANGLE
  * CVE-2022-1480: Use after free in Device API
  * CVE-2022-1481: Use after free in Sharing
  * CVE-2022-1482: Inappropriate implementation in WebGL
  * CVE-2022-1483: Heap buffer overflow in WebGPU
  * CVE-2022-1484: Heap buffer overflow in Web UI Settings
  * CVE-2022-1485: Use after free in File System API
  * CVE-2022-1486: Type Confusion in V8
  * CVE-2022-1487: Use after free in Ozone
  * CVE-2022-1488: Inappropriate implementation in Extensions API
  * CVE-2022-1489: Out of bounds memory access in UI Shelf
  * CVE-2022-1490: Use after free in Browser Switcher
  * CVE-2022-1491: Use after free in Bookmarks
  * CVE-2022-1492: Insufficient data validation in Blink Editing
  * CVE-2022-1493: Use after free in Dev Tools
  * CVE-2022-1494: Insufficient data validation in Trusted Types
  * CVE-2022-1495: Incorrect security UI in Downloads
  * CVE-2022-1496: Use after free in File Manager
  * CVE-2022-1497: Inappropriate implementation in Input
  * CVE-2022-1498: Inappropriate implementation in HTML Parser
  * CVE-2022-1499: Inappropriate implementation in WebAuthentication
  * CVE-2022-1500: Insufficient data validation in Dev Tools
  * CVE-2022-1501: Inappropriate implementation in iframe
- Added patches:
  * chromium-101-libxml-unbundle.patch
  * chromium-101-segmentation_platform-type.patch
- Removed patches:
  * chromium-100-SCTHashdanceMetadata-move.patch
  * chromium-100-GLImplementationParts-constexpr.patch
  * chromium-100-macro-typo.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1652270400">- Chromium 101.0.4951.64 (boo#1199409)
  * CVE-2022-1633: Use after free in Sharesheet
  * CVE-2022-1634: Use after free in Browser UI
  * CVE-2022-1635: Use after free in Permission Prompts
  * CVE-2022-1636: Use after free in Performance APIs
  * CVE-2022-1637: Inappropriate implementation in Web Contents
  * CVE-2022-1638: Heap buffer overflow in V8 Internationalization
  * CVE-2022-1639: Use after free in ANGLE
  * CVE-2022-1640: Use after free in Sharing
  * CVE-2022-1641: Use after free in Web UI Diagnostics</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1652616000">- Chromium 101.0.4951.67
  * fixes for other platforms</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1653652800">- Chromium 102.0.5001.61 (boo#1199893)
  * CVE-2022-1853: Use after free in Indexed DB
  * CVE-2022-1854: Use after free in ANGLE
  * CVE-2022-1855: Use after free in Messaging
  * CVE-2022-1856: Use after free in User Education
  * CVE-2022-1857: Insufficient policy enforcement in File System API
  * CVE-2022-1858: Out of bounds read in DevTools
  * CVE-2022-1859: Use after free in Performance Manager
  * CVE-2022-1860: Use after free in UI Foundations
  * CVE-2022-1861: Use after free in Sharing
  * CVE-2022-1862: Inappropriate implementation in Extensions
  * CVE-2022-1863: Use after free in Tab Groups
  * CVE-2022-1864: Use after free in WebApp Installs
  * CVE-2022-1865: Use after free in Bookmarks
  * CVE-2022-1866: Use after free in Tablet Mode
  * CVE-2022-1867: Insufficient validation of untrusted input in Data Transfer
  * CVE-2022-1868: Inappropriate implementation in Extensions API
  * CVE-2022-1869: Type Confusion in V8
  * CVE-2022-1870: Use after free in App Service
  * CVE-2022-1871: Insufficient policy enforcement in File System API
  * CVE-2022-1872: Insufficient policy enforcement in Extensions API
  * CVE-2022-1873: Insufficient policy enforcement in COOP
  * CVE-2022-1874: Insufficient policy enforcement in Safe Browsing
  * CVE-2022-1875: Inappropriate implementation in PDF
  * CVE-2022-1876: Heap buffer overflow in DevTools
- Added patches:
  * chromium-102-compiler.patch
  * chromium-102-fenced_frame_utils-include.patch
  * chromium-102-regex_pattern-array.patch
  * chromium-102-swiftshader-template-instantiation.patch
  * chromium-102-symbolize-include.patch
  * ffmpeg-new-channel-layout.patch
- Removed patches:
  * chromium-100-compiler.patch
  * chromium-80-QuicStreamSendBuffer-deleted-move-constructor.patch
  * chromium-95-quiche-include.patch
  * chromium-fix-swiftshader-template.patch
  * chromium-missing-include-tuple.patch
  * chromium-webrtc-stats-missing-vector.patch
  * chromium-101-segmentation_platform-type.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654084800">- Disable ARM control flow integrity, it causes build issues
  at the moment
- Try a different SVG (black logo on GNOME)
- Removed patches:
  * chromium-third_party-symbolize-missing-include.patch
  (replaced by chromium-102-symbolize-include.patch)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654689600">- Switch to GTK4 on TW and Leap 15.4+ (boo#1200139)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1654862400">- Chromium 102.0.5005.115 (boo#1200423)
  * CVE-2022-2007: Use after free in WebGPU
  * CVE-2022-2008: Out of bounds memory access in WebGL
  * CVE-2022-2010: Out of bounds read in compositing
  * CVE-2022-2011: Use after free in ANGLE</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1656158400">- Chromium 103.0.5060.53 (boo#1200783)
  * CVE-2022-2156: Use after free in Base
  * CVE-2022-2157: Use after free in Interest groups
  * CVE-2022-2158: Type Confusion in V8
  * CVE-2022-2160: Insufficient policy enforcement in DevTools
  * CVE-2022-2161: Use after free in WebApp Provider
  * CVE-2022-2162: Insufficient policy enforcement in File System API
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * CVE-2022-2164: Inappropriate implementation in Extensions API
  * CVE-2022-2165: Insufficient data validation in URL formatting
- Added patches:
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-VirtualCursor-std-layout.patch
  * chromium-103-compiler.patch
- Removed patches:
  * chromium-102-compiler.patch
  * chromium-91-sql-standard-layout-type.patch
  * chromium-101-libxml-unbundle.patch
  * chromium-102-fenced_frame_utils-include.patch
  * chromium-102-swiftshader-template-instantiation.patch
  * chromium-102-symbolize-include.patch
  * chromium-97-arm-tflite-cast.patch
  * chromium-97-ScrollView-reference.patch</changelog>
</package>
<package pkgid="5544303ff5b38f1abfba20a23f33de0b6e06602c7d51ce8b9d6267ca297a9e94" name="chromium" arch="aarch64">
  <version epoch="0" ver="104.0.5112.101" rel="bp154.2.23.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1649160000">- Chromium 100.0.4896.75:
  * CVE-2022-1232: Type Confusion in V8 (boo#1198053)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1649592000">- Patches for GCC 12:
  * chromium-fix-swiftshader-template.patch
  * chromium-missing-include-tuple.patch
  * chromium-webrtc-stats-missing-vector.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1649764800">- Chromium 100.0.4896.88 (boo#1198361)
  * CVE-2022-1305: Use after free in storage
  * CVE-2022-1306: Inappropriate implementation in compositing
  * CVE-2022-1307: Inappropriate implementation in full screen
  * CVE-2022-1308: Use after free in BFCache
  * CVE-2022-1309: Insufficient policy enforcement in developer tools
  * CVE-2022-1310: Use after free in regular expressions
  * CVE-2022-1311: Use after free in Chrome OS shell
  * CVE-2022-1312: Use after free in storage
  * CVE-2022-1313: Use after free in tab groups
  * CVE-2022-1314: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1650024000">- Chromium 100.0.4896.127 (boo#1198509)
  * CVE-2022-1364: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1650542400">- Fixes for go 1.18</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1651665600">- Chromium 101.0.4951.54 (boo#1199118)
- Chromium 101.0.4951.41 (boo#1198917)
  * CVE-2022-1477: Use after free in Vulkan
  * CVE-2022-1478: Use after free in SwiftShader
  * CVE-2022-1479: Use after free in ANGLE
  * CVE-2022-1480: Use after free in Device API
  * CVE-2022-1481: Use after free in Sharing
  * CVE-2022-1482: Inappropriate implementation in WebGL
  * CVE-2022-1483: Heap buffer overflow in WebGPU
  * CVE-2022-1484: Heap buffer overflow in Web UI Settings
  * CVE-2022-1485: Use after free in File System API
  * CVE-2022-1486: Type Confusion in V8
  * CVE-2022-1487: Use after free in Ozone
  * CVE-2022-1488: Inappropriate implementation in Extensions API
  * CVE-2022-1489: Out of bounds memory access in UI Shelf
  * CVE-2022-1490: Use after free in Browser Switcher
  * CVE-2022-1491: Use after free in Bookmarks
  * CVE-2022-1492: Insufficient data validation in Blink Editing
  * CVE-2022-1493: Use after free in Dev Tools
  * CVE-2022-1494: Insufficient data validation in Trusted Types
  * CVE-2022-1495: Incorrect security UI in Downloads
  * CVE-2022-1496: Use after free in File Manager
  * CVE-2022-1497: Inappropriate implementation in Input
  * CVE-2022-1498: Inappropriate implementation in HTML Parser
  * CVE-2022-1499: Inappropriate implementation in WebAuthentication
  * CVE-2022-1500: Insufficient data validation in Dev Tools
  * CVE-2022-1501: Inappropriate implementation in iframe
- Added patches:
  * chromium-101-libxml-unbundle.patch
  * chromium-101-segmentation_platform-type.patch
- Removed patches:
  * chromium-100-SCTHashdanceMetadata-move.patch
  * chromium-100-GLImplementationParts-constexpr.patch
  * chromium-100-macro-typo.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1652270400">- Chromium 101.0.4951.64 (boo#1199409)
  * CVE-2022-1633: Use after free in Sharesheet
  * CVE-2022-1634: Use after free in Browser UI
  * CVE-2022-1635: Use after free in Permission Prompts
  * CVE-2022-1636: Use after free in Performance APIs
  * CVE-2022-1637: Inappropriate implementation in Web Contents
  * CVE-2022-1638: Heap buffer overflow in V8 Internationalization
  * CVE-2022-1639: Use after free in ANGLE
  * CVE-2022-1640: Use after free in Sharing
  * CVE-2022-1641: Use after free in Web UI Diagnostics</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1652616000">- Chromium 101.0.4951.67
  * fixes for other platforms</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1653652800">- Chromium 102.0.5001.61 (boo#1199893)
  * CVE-2022-1853: Use after free in Indexed DB
  * CVE-2022-1854: Use after free in ANGLE
  * CVE-2022-1855: Use after free in Messaging
  * CVE-2022-1856: Use after free in User Education
  * CVE-2022-1857: Insufficient policy enforcement in File System API
  * CVE-2022-1858: Out of bounds read in DevTools
  * CVE-2022-1859: Use after free in Performance Manager
  * CVE-2022-1860: Use after free in UI Foundations
  * CVE-2022-1861: Use after free in Sharing
  * CVE-2022-1862: Inappropriate implementation in Extensions
  * CVE-2022-1863: Use after free in Tab Groups
  * CVE-2022-1864: Use after free in WebApp Installs
  * CVE-2022-1865: Use after free in Bookmarks
  * CVE-2022-1866: Use after free in Tablet Mode
  * CVE-2022-1867: Insufficient validation of untrusted input in Data Transfer
  * CVE-2022-1868: Inappropriate implementation in Extensions API
  * CVE-2022-1869: Type Confusion in V8
  * CVE-2022-1870: Use after free in App Service
  * CVE-2022-1871: Insufficient policy enforcement in File System API
  * CVE-2022-1872: Insufficient policy enforcement in Extensions API
  * CVE-2022-1873: Insufficient policy enforcement in COOP
  * CVE-2022-1874: Insufficient policy enforcement in Safe Browsing
  * CVE-2022-1875: Inappropriate implementation in PDF
  * CVE-2022-1876: Heap buffer overflow in DevTools
- Added patches:
  * chromium-102-compiler.patch
  * chromium-102-fenced_frame_utils-include.patch
  * chromium-102-regex_pattern-array.patch
  * chromium-102-swiftshader-template-instantiation.patch
  * chromium-102-symbolize-include.patch
  * ffmpeg-new-channel-layout.patch
- Removed patches:
  * chromium-100-compiler.patch
  * chromium-80-QuicStreamSendBuffer-deleted-move-constructor.patch
  * chromium-95-quiche-include.patch
  * chromium-fix-swiftshader-template.patch
  * chromium-missing-include-tuple.patch
  * chromium-webrtc-stats-missing-vector.patch
  * chromium-101-segmentation_platform-type.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654084800">- Disable ARM control flow integrity, it causes build issues
  at the moment
- Try a different SVG (black logo on GNOME)
- Removed patches:
  * chromium-third_party-symbolize-missing-include.patch
  (replaced by chromium-102-symbolize-include.patch)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654689600">- Switch to GTK4 on TW and Leap 15.4+ (boo#1200139)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1654862400">- Chromium 102.0.5005.115 (boo#1200423)
  * CVE-2022-2007: Use after free in WebGPU
  * CVE-2022-2008: Out of bounds memory access in WebGL
  * CVE-2022-2010: Out of bounds read in compositing
  * CVE-2022-2011: Use after free in ANGLE</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1656158400">- Chromium 103.0.5060.53 (boo#1200783)
  * CVE-2022-2156: Use after free in Base
  * CVE-2022-2157: Use after free in Interest groups
  * CVE-2022-2158: Type Confusion in V8
  * CVE-2022-2160: Insufficient policy enforcement in DevTools
  * CVE-2022-2161: Use after free in WebApp Provider
  * CVE-2022-2162: Insufficient policy enforcement in File System API
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * CVE-2022-2164: Inappropriate implementation in Extensions API
  * CVE-2022-2165: Insufficient data validation in URL formatting
- Added patches:
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-VirtualCursor-std-layout.patch
  * chromium-103-compiler.patch
- Removed patches:
  * chromium-102-compiler.patch
  * chromium-91-sql-standard-layout-type.patch
  * chromium-101-libxml-unbundle.patch
  * chromium-102-fenced_frame_utils-include.patch
  * chromium-102-swiftshader-template-instantiation.patch
  * chromium-102-symbolize-include.patch
  * chromium-97-arm-tflite-cast.patch
  * chromium-97-ScrollView-reference.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657195200">- Chromium 103.0.5060.66
  * no upstream release notes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657368000">- Chromium 103.0.5060.114 (boo#1201216)
  * CVE-2022-2294: Heap buffer overflow in WebRTC
  * CVE-2022-2295: Type Confusion in V8
  * CVE-2022-2296: Use after free in Chrome OS Shell</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1658318400">- Chromium 103.0.5060.134 (boo#1201679):
  * CVE-2022-2477 : Use after free in Guest View
  * CVE-2022-2478 : Use after free in PDF
  * CVE-2022-2479 : Insufficient validation of untrusted input in File
  * CVE-2022-2480 : Use after free in Service Worker API
  * CVE-2022-2481: Use after free in Views
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1658577600">- Switch back to Clang so that we can use BTI on aarch64
  * Gold is too old - doesn't understand BTI
  * LD crashes on aarch64
- Re-enable LTO
- Prepare move to FFmpeg 5 for new channel layout
  (requires 5.1+)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660046400">- Chromium 104.0.5112.79 (boo#1202075)
  * CVE-2022-2603: Use after free in Omnibox
  * CVE-2022-2604: Use after free in Safe Browsing
  * CVE-2022-2605: Out of bounds read in Dawn
  * CVE-2022-2606: Use after free in Managed devices API
  * CVE-2022-2607: Use after free in Tab Strip
  * CVE-2022-2608: Use after free in Overview Mode
  * CVE-2022-2609: Use after free in Nearby Share
  * CVE-2022-2610: Insufficient policy enforcement in Background Fetch
  * CVE-2022-2611: Inappropriate implementation in Fullscreen API
  * CVE-2022-2612: Side-channel information leakage in Keyboard input
  * CVE-2022-2613: Use after free in Input
  * CVE-2022-2614: Use after free in Sign-In Flow
  * CVE-2022-2615: Insufficient policy enforcement in Cookies
  * CVE-2022-2616: Inappropriate implementation in Extensions API
  * CVE-2022-2617: Use after free in Extensions API
  * CVE-2022-2618: Insufficient validation of untrusted input in Internals
  * CVE-2022-2619: Insufficient validation of untrusted input in Settings
  * CVE-2022-2620: Use after free in WebUI
  * CVE-2022-2621: Use after free in Extensions
  * CVE-2022-2622: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-2623: Use after free in Offline
  * CVE-2022-2624: Heap buffer overflow in PDF
- Added patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-104-tflite-system-zlib.patch
- Removed patches:
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-compiler.patch
- Use FFmpeg 5.1 on TW</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660651200">- Re-enable our version of chrome-wrapper
- Set no sandbox if root is being used (https://crbug.com/638180)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660824000">- Chromium 104.0.5112.101 (boo#1202509):
  * CVE-2022-2852: Use after free in FedCM
  * CVE-2022-2854: Use after free in SwiftShader
  * CVE-2022-2855: Use after free in ANGLE
  * CVE-2022-2857: Use after free in Blink
  * CVE-2022-2858: Use after free in Sign-In Flow
  * CVE-2022-2853: Heap buffer overflow in Downloads
  * CVE-2022-2856: Insufficient validation of untrusted input in Intents
  * CVE-2022-2859: Use after free in Chrome OS Shell
  * CVE-2022-2860: Insufficient policy enforcement in Cookies
  * CVE-2022-2861: Inappropriate implementation in Extensions API</changelog>
</package>
<package pkgid="9dd16027b774607cfc77352077f9990dfdadaa9f9ab64e53e838af1118ff9418" name="chromium" arch="src">
  <version epoch="0" ver="104.0.5112.101" rel="bp154.2.23.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1649160000">- Chromium 100.0.4896.75:
  * CVE-2022-1232: Type Confusion in V8 (boo#1198053)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1649592000">- Patches for GCC 12:
  * chromium-fix-swiftshader-template.patch
  * chromium-missing-include-tuple.patch
  * chromium-webrtc-stats-missing-vector.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1649764800">- Chromium 100.0.4896.88 (boo#1198361)
  * CVE-2022-1305: Use after free in storage
  * CVE-2022-1306: Inappropriate implementation in compositing
  * CVE-2022-1307: Inappropriate implementation in full screen
  * CVE-2022-1308: Use after free in BFCache
  * CVE-2022-1309: Insufficient policy enforcement in developer tools
  * CVE-2022-1310: Use after free in regular expressions
  * CVE-2022-1311: Use after free in Chrome OS shell
  * CVE-2022-1312: Use after free in storage
  * CVE-2022-1313: Use after free in tab groups
  * CVE-2022-1314: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1650024000">- Chromium 100.0.4896.127 (boo#1198509)
  * CVE-2022-1364: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1650542400">- Fixes for go 1.18</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1651665600">- Chromium 101.0.4951.54 (boo#1199118)
- Chromium 101.0.4951.41 (boo#1198917)
  * CVE-2022-1477: Use after free in Vulkan
  * CVE-2022-1478: Use after free in SwiftShader
  * CVE-2022-1479: Use after free in ANGLE
  * CVE-2022-1480: Use after free in Device API
  * CVE-2022-1481: Use after free in Sharing
  * CVE-2022-1482: Inappropriate implementation in WebGL
  * CVE-2022-1483: Heap buffer overflow in WebGPU
  * CVE-2022-1484: Heap buffer overflow in Web UI Settings
  * CVE-2022-1485: Use after free in File System API
  * CVE-2022-1486: Type Confusion in V8
  * CVE-2022-1487: Use after free in Ozone
  * CVE-2022-1488: Inappropriate implementation in Extensions API
  * CVE-2022-1489: Out of bounds memory access in UI Shelf
  * CVE-2022-1490: Use after free in Browser Switcher
  * CVE-2022-1491: Use after free in Bookmarks
  * CVE-2022-1492: Insufficient data validation in Blink Editing
  * CVE-2022-1493: Use after free in Dev Tools
  * CVE-2022-1494: Insufficient data validation in Trusted Types
  * CVE-2022-1495: Incorrect security UI in Downloads
  * CVE-2022-1496: Use after free in File Manager
  * CVE-2022-1497: Inappropriate implementation in Input
  * CVE-2022-1498: Inappropriate implementation in HTML Parser
  * CVE-2022-1499: Inappropriate implementation in WebAuthentication
  * CVE-2022-1500: Insufficient data validation in Dev Tools
  * CVE-2022-1501: Inappropriate implementation in iframe
- Added patches:
  * chromium-101-libxml-unbundle.patch
  * chromium-101-segmentation_platform-type.patch
- Removed patches:
  * chromium-100-SCTHashdanceMetadata-move.patch
  * chromium-100-GLImplementationParts-constexpr.patch
  * chromium-100-macro-typo.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1652270400">- Chromium 101.0.4951.64 (boo#1199409)
  * CVE-2022-1633: Use after free in Sharesheet
  * CVE-2022-1634: Use after free in Browser UI
  * CVE-2022-1635: Use after free in Permission Prompts
  * CVE-2022-1636: Use after free in Performance APIs
  * CVE-2022-1637: Inappropriate implementation in Web Contents
  * CVE-2022-1638: Heap buffer overflow in V8 Internationalization
  * CVE-2022-1639: Use after free in ANGLE
  * CVE-2022-1640: Use after free in Sharing
  * CVE-2022-1641: Use after free in Web UI Diagnostics</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1652616000">- Chromium 101.0.4951.67
  * fixes for other platforms</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1653652800">- Chromium 102.0.5001.61 (boo#1199893)
  * CVE-2022-1853: Use after free in Indexed DB
  * CVE-2022-1854: Use after free in ANGLE
  * CVE-2022-1855: Use after free in Messaging
  * CVE-2022-1856: Use after free in User Education
  * CVE-2022-1857: Insufficient policy enforcement in File System API
  * CVE-2022-1858: Out of bounds read in DevTools
  * CVE-2022-1859: Use after free in Performance Manager
  * CVE-2022-1860: Use after free in UI Foundations
  * CVE-2022-1861: Use after free in Sharing
  * CVE-2022-1862: Inappropriate implementation in Extensions
  * CVE-2022-1863: Use after free in Tab Groups
  * CVE-2022-1864: Use after free in WebApp Installs
  * CVE-2022-1865: Use after free in Bookmarks
  * CVE-2022-1866: Use after free in Tablet Mode
  * CVE-2022-1867: Insufficient validation of untrusted input in Data Transfer
  * CVE-2022-1868: Inappropriate implementation in Extensions API
  * CVE-2022-1869: Type Confusion in V8
  * CVE-2022-1870: Use after free in App Service
  * CVE-2022-1871: Insufficient policy enforcement in File System API
  * CVE-2022-1872: Insufficient policy enforcement in Extensions API
  * CVE-2022-1873: Insufficient policy enforcement in COOP
  * CVE-2022-1874: Insufficient policy enforcement in Safe Browsing
  * CVE-2022-1875: Inappropriate implementation in PDF
  * CVE-2022-1876: Heap buffer overflow in DevTools
- Added patches:
  * chromium-102-compiler.patch
  * chromium-102-fenced_frame_utils-include.patch
  * chromium-102-regex_pattern-array.patch
  * chromium-102-swiftshader-template-instantiation.patch
  * chromium-102-symbolize-include.patch
  * ffmpeg-new-channel-layout.patch
- Removed patches:
  * chromium-100-compiler.patch
  * chromium-80-QuicStreamSendBuffer-deleted-move-constructor.patch
  * chromium-95-quiche-include.patch
  * chromium-fix-swiftshader-template.patch
  * chromium-missing-include-tuple.patch
  * chromium-webrtc-stats-missing-vector.patch
  * chromium-101-segmentation_platform-type.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654084800">- Disable ARM control flow integrity, it causes build issues
  at the moment
- Try a different SVG (black logo on GNOME)
- Removed patches:
  * chromium-third_party-symbolize-missing-include.patch
  (replaced by chromium-102-symbolize-include.patch)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654689600">- Switch to GTK4 on TW and Leap 15.4+ (boo#1200139)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1654862400">- Chromium 102.0.5005.115 (boo#1200423)
  * CVE-2022-2007: Use after free in WebGPU
  * CVE-2022-2008: Out of bounds memory access in WebGL
  * CVE-2022-2010: Out of bounds read in compositing
  * CVE-2022-2011: Use after free in ANGLE</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1656158400">- Chromium 103.0.5060.53 (boo#1200783)
  * CVE-2022-2156: Use after free in Base
  * CVE-2022-2157: Use after free in Interest groups
  * CVE-2022-2158: Type Confusion in V8
  * CVE-2022-2160: Insufficient policy enforcement in DevTools
  * CVE-2022-2161: Use after free in WebApp Provider
  * CVE-2022-2162: Insufficient policy enforcement in File System API
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * CVE-2022-2164: Inappropriate implementation in Extensions API
  * CVE-2022-2165: Insufficient data validation in URL formatting
- Added patches:
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-VirtualCursor-std-layout.patch
  * chromium-103-compiler.patch
- Removed patches:
  * chromium-102-compiler.patch
  * chromium-91-sql-standard-layout-type.patch
  * chromium-101-libxml-unbundle.patch
  * chromium-102-fenced_frame_utils-include.patch
  * chromium-102-swiftshader-template-instantiation.patch
  * chromium-102-symbolize-include.patch
  * chromium-97-arm-tflite-cast.patch
  * chromium-97-ScrollView-reference.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657195200">- Chromium 103.0.5060.66
  * no upstream release notes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657368000">- Chromium 103.0.5060.114 (boo#1201216)
  * CVE-2022-2294: Heap buffer overflow in WebRTC
  * CVE-2022-2295: Type Confusion in V8
  * CVE-2022-2296: Use after free in Chrome OS Shell</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1658318400">- Chromium 103.0.5060.134 (boo#1201679):
  * CVE-2022-2477 : Use after free in Guest View
  * CVE-2022-2478 : Use after free in PDF
  * CVE-2022-2479 : Insufficient validation of untrusted input in File
  * CVE-2022-2480 : Use after free in Service Worker API
  * CVE-2022-2481: Use after free in Views
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1658577600">- Switch back to Clang so that we can use BTI on aarch64
  * Gold is too old - doesn't understand BTI
  * LD crashes on aarch64
- Re-enable LTO
- Prepare move to FFmpeg 5 for new channel layout
  (requires 5.1+)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660046400">- Chromium 104.0.5112.79 (boo#1202075)
  * CVE-2022-2603: Use after free in Omnibox
  * CVE-2022-2604: Use after free in Safe Browsing
  * CVE-2022-2605: Out of bounds read in Dawn
  * CVE-2022-2606: Use after free in Managed devices API
  * CVE-2022-2607: Use after free in Tab Strip
  * CVE-2022-2608: Use after free in Overview Mode
  * CVE-2022-2609: Use after free in Nearby Share
  * CVE-2022-2610: Insufficient policy enforcement in Background Fetch
  * CVE-2022-2611: Inappropriate implementation in Fullscreen API
  * CVE-2022-2612: Side-channel information leakage in Keyboard input
  * CVE-2022-2613: Use after free in Input
  * CVE-2022-2614: Use after free in Sign-In Flow
  * CVE-2022-2615: Insufficient policy enforcement in Cookies
  * CVE-2022-2616: Inappropriate implementation in Extensions API
  * CVE-2022-2617: Use after free in Extensions API
  * CVE-2022-2618: Insufficient validation of untrusted input in Internals
  * CVE-2022-2619: Insufficient validation of untrusted input in Settings
  * CVE-2022-2620: Use after free in WebUI
  * CVE-2022-2621: Use after free in Extensions
  * CVE-2022-2622: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-2623: Use after free in Offline
  * CVE-2022-2624: Heap buffer overflow in PDF
- Added patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-104-tflite-system-zlib.patch
- Removed patches:
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-compiler.patch
- Use FFmpeg 5.1 on TW</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660651200">- Re-enable our version of chrome-wrapper
- Set no sandbox if root is being used (https://crbug.com/638180)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660824000">- Chromium 104.0.5112.101 (boo#1202509):
  * CVE-2022-2852: Use after free in FedCM
  * CVE-2022-2854: Use after free in SwiftShader
  * CVE-2022-2855: Use after free in ANGLE
  * CVE-2022-2857: Use after free in Blink
  * CVE-2022-2858: Use after free in Sign-In Flow
  * CVE-2022-2853: Heap buffer overflow in Downloads
  * CVE-2022-2856: Insufficient validation of untrusted input in Intents
  * CVE-2022-2859: Use after free in Chrome OS Shell
  * CVE-2022-2860: Insufficient policy enforcement in Cookies
  * CVE-2022-2861: Inappropriate implementation in Extensions API</changelog>
</package>
<package pkgid="9ff390ceb034b0726d7799e4102fbb03bb17f890f73134b94585896ed314c9c6" name="chromium" arch="x86_64">
  <version epoch="0" ver="104.0.5112.101" rel="bp154.2.23.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1649160000">- Chromium 100.0.4896.75:
  * CVE-2022-1232: Type Confusion in V8 (boo#1198053)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1649592000">- Patches for GCC 12:
  * chromium-fix-swiftshader-template.patch
  * chromium-missing-include-tuple.patch
  * chromium-webrtc-stats-missing-vector.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1649764800">- Chromium 100.0.4896.88 (boo#1198361)
  * CVE-2022-1305: Use after free in storage
  * CVE-2022-1306: Inappropriate implementation in compositing
  * CVE-2022-1307: Inappropriate implementation in full screen
  * CVE-2022-1308: Use after free in BFCache
  * CVE-2022-1309: Insufficient policy enforcement in developer tools
  * CVE-2022-1310: Use after free in regular expressions
  * CVE-2022-1311: Use after free in Chrome OS shell
  * CVE-2022-1312: Use after free in storage
  * CVE-2022-1313: Use after free in tab groups
  * CVE-2022-1314: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1650024000">- Chromium 100.0.4896.127 (boo#1198509)
  * CVE-2022-1364: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1650542400">- Fixes for go 1.18</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1651665600">- Chromium 101.0.4951.54 (boo#1199118)
- Chromium 101.0.4951.41 (boo#1198917)
  * CVE-2022-1477: Use after free in Vulkan
  * CVE-2022-1478: Use after free in SwiftShader
  * CVE-2022-1479: Use after free in ANGLE
  * CVE-2022-1480: Use after free in Device API
  * CVE-2022-1481: Use after free in Sharing
  * CVE-2022-1482: Inappropriate implementation in WebGL
  * CVE-2022-1483: Heap buffer overflow in WebGPU
  * CVE-2022-1484: Heap buffer overflow in Web UI Settings
  * CVE-2022-1485: Use after free in File System API
  * CVE-2022-1486: Type Confusion in V8
  * CVE-2022-1487: Use after free in Ozone
  * CVE-2022-1488: Inappropriate implementation in Extensions API
  * CVE-2022-1489: Out of bounds memory access in UI Shelf
  * CVE-2022-1490: Use after free in Browser Switcher
  * CVE-2022-1491: Use after free in Bookmarks
  * CVE-2022-1492: Insufficient data validation in Blink Editing
  * CVE-2022-1493: Use after free in Dev Tools
  * CVE-2022-1494: Insufficient data validation in Trusted Types
  * CVE-2022-1495: Incorrect security UI in Downloads
  * CVE-2022-1496: Use after free in File Manager
  * CVE-2022-1497: Inappropriate implementation in Input
  * CVE-2022-1498: Inappropriate implementation in HTML Parser
  * CVE-2022-1499: Inappropriate implementation in WebAuthentication
  * CVE-2022-1500: Insufficient data validation in Dev Tools
  * CVE-2022-1501: Inappropriate implementation in iframe
- Added patches:
  * chromium-101-libxml-unbundle.patch
  * chromium-101-segmentation_platform-type.patch
- Removed patches:
  * chromium-100-SCTHashdanceMetadata-move.patch
  * chromium-100-GLImplementationParts-constexpr.patch
  * chromium-100-macro-typo.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1652270400">- Chromium 101.0.4951.64 (boo#1199409)
  * CVE-2022-1633: Use after free in Sharesheet
  * CVE-2022-1634: Use after free in Browser UI
  * CVE-2022-1635: Use after free in Permission Prompts
  * CVE-2022-1636: Use after free in Performance APIs
  * CVE-2022-1637: Inappropriate implementation in Web Contents
  * CVE-2022-1638: Heap buffer overflow in V8 Internationalization
  * CVE-2022-1639: Use after free in ANGLE
  * CVE-2022-1640: Use after free in Sharing
  * CVE-2022-1641: Use after free in Web UI Diagnostics</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1652616000">- Chromium 101.0.4951.67
  * fixes for other platforms</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1653652800">- Chromium 102.0.5001.61 (boo#1199893)
  * CVE-2022-1853: Use after free in Indexed DB
  * CVE-2022-1854: Use after free in ANGLE
  * CVE-2022-1855: Use after free in Messaging
  * CVE-2022-1856: Use after free in User Education
  * CVE-2022-1857: Insufficient policy enforcement in File System API
  * CVE-2022-1858: Out of bounds read in DevTools
  * CVE-2022-1859: Use after free in Performance Manager
  * CVE-2022-1860: Use after free in UI Foundations
  * CVE-2022-1861: Use after free in Sharing
  * CVE-2022-1862: Inappropriate implementation in Extensions
  * CVE-2022-1863: Use after free in Tab Groups
  * CVE-2022-1864: Use after free in WebApp Installs
  * CVE-2022-1865: Use after free in Bookmarks
  * CVE-2022-1866: Use after free in Tablet Mode
  * CVE-2022-1867: Insufficient validation of untrusted input in Data Transfer
  * CVE-2022-1868: Inappropriate implementation in Extensions API
  * CVE-2022-1869: Type Confusion in V8
  * CVE-2022-1870: Use after free in App Service
  * CVE-2022-1871: Insufficient policy enforcement in File System API
  * CVE-2022-1872: Insufficient policy enforcement in Extensions API
  * CVE-2022-1873: Insufficient policy enforcement in COOP
  * CVE-2022-1874: Insufficient policy enforcement in Safe Browsing
  * CVE-2022-1875: Inappropriate implementation in PDF
  * CVE-2022-1876: Heap buffer overflow in DevTools
- Added patches:
  * chromium-102-compiler.patch
  * chromium-102-fenced_frame_utils-include.patch
  * chromium-102-regex_pattern-array.patch
  * chromium-102-swiftshader-template-instantiation.patch
  * chromium-102-symbolize-include.patch
  * ffmpeg-new-channel-layout.patch
- Removed patches:
  * chromium-100-compiler.patch
  * chromium-80-QuicStreamSendBuffer-deleted-move-constructor.patch
  * chromium-95-quiche-include.patch
  * chromium-fix-swiftshader-template.patch
  * chromium-missing-include-tuple.patch
  * chromium-webrtc-stats-missing-vector.patch
  * chromium-101-segmentation_platform-type.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654084800">- Disable ARM control flow integrity, it causes build issues
  at the moment
- Try a different SVG (black logo on GNOME)
- Removed patches:
  * chromium-third_party-symbolize-missing-include.patch
  (replaced by chromium-102-symbolize-include.patch)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654689600">- Switch to GTK4 on TW and Leap 15.4+ (boo#1200139)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1654862400">- Chromium 102.0.5005.115 (boo#1200423)
  * CVE-2022-2007: Use after free in WebGPU
  * CVE-2022-2008: Out of bounds memory access in WebGL
  * CVE-2022-2010: Out of bounds read in compositing
  * CVE-2022-2011: Use after free in ANGLE</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1656158400">- Chromium 103.0.5060.53 (boo#1200783)
  * CVE-2022-2156: Use after free in Base
  * CVE-2022-2157: Use after free in Interest groups
  * CVE-2022-2158: Type Confusion in V8
  * CVE-2022-2160: Insufficient policy enforcement in DevTools
  * CVE-2022-2161: Use after free in WebApp Provider
  * CVE-2022-2162: Insufficient policy enforcement in File System API
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * CVE-2022-2164: Inappropriate implementation in Extensions API
  * CVE-2022-2165: Insufficient data validation in URL formatting
- Added patches:
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-VirtualCursor-std-layout.patch
  * chromium-103-compiler.patch
- Removed patches:
  * chromium-102-compiler.patch
  * chromium-91-sql-standard-layout-type.patch
  * chromium-101-libxml-unbundle.patch
  * chromium-102-fenced_frame_utils-include.patch
  * chromium-102-swiftshader-template-instantiation.patch
  * chromium-102-symbolize-include.patch
  * chromium-97-arm-tflite-cast.patch
  * chromium-97-ScrollView-reference.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657195200">- Chromium 103.0.5060.66
  * no upstream release notes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657368000">- Chromium 103.0.5060.114 (boo#1201216)
  * CVE-2022-2294: Heap buffer overflow in WebRTC
  * CVE-2022-2295: Type Confusion in V8
  * CVE-2022-2296: Use after free in Chrome OS Shell</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1658318400">- Chromium 103.0.5060.134 (boo#1201679):
  * CVE-2022-2477 : Use after free in Guest View
  * CVE-2022-2478 : Use after free in PDF
  * CVE-2022-2479 : Insufficient validation of untrusted input in File
  * CVE-2022-2480 : Use after free in Service Worker API
  * CVE-2022-2481: Use after free in Views
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1658577600">- Switch back to Clang so that we can use BTI on aarch64
  * Gold is too old - doesn't understand BTI
  * LD crashes on aarch64
- Re-enable LTO
- Prepare move to FFmpeg 5 for new channel layout
  (requires 5.1+)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660046400">- Chromium 104.0.5112.79 (boo#1202075)
  * CVE-2022-2603: Use after free in Omnibox
  * CVE-2022-2604: Use after free in Safe Browsing
  * CVE-2022-2605: Out of bounds read in Dawn
  * CVE-2022-2606: Use after free in Managed devices API
  * CVE-2022-2607: Use after free in Tab Strip
  * CVE-2022-2608: Use after free in Overview Mode
  * CVE-2022-2609: Use after free in Nearby Share
  * CVE-2022-2610: Insufficient policy enforcement in Background Fetch
  * CVE-2022-2611: Inappropriate implementation in Fullscreen API
  * CVE-2022-2612: Side-channel information leakage in Keyboard input
  * CVE-2022-2613: Use after free in Input
  * CVE-2022-2614: Use after free in Sign-In Flow
  * CVE-2022-2615: Insufficient policy enforcement in Cookies
  * CVE-2022-2616: Inappropriate implementation in Extensions API
  * CVE-2022-2617: Use after free in Extensions API
  * CVE-2022-2618: Insufficient validation of untrusted input in Internals
  * CVE-2022-2619: Insufficient validation of untrusted input in Settings
  * CVE-2022-2620: Use after free in WebUI
  * CVE-2022-2621: Use after free in Extensions
  * CVE-2022-2622: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-2623: Use after free in Offline
  * CVE-2022-2624: Heap buffer overflow in PDF
- Added patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-104-tflite-system-zlib.patch
- Removed patches:
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-compiler.patch
- Use FFmpeg 5.1 on TW</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660651200">- Re-enable our version of chrome-wrapper
- Set no sandbox if root is being used (https://crbug.com/638180)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660824000">- Chromium 104.0.5112.101 (boo#1202509):
  * CVE-2022-2852: Use after free in FedCM
  * CVE-2022-2854: Use after free in SwiftShader
  * CVE-2022-2855: Use after free in ANGLE
  * CVE-2022-2857: Use after free in Blink
  * CVE-2022-2858: Use after free in Sign-In Flow
  * CVE-2022-2853: Heap buffer overflow in Downloads
  * CVE-2022-2856: Insufficient validation of untrusted input in Intents
  * CVE-2022-2859: Use after free in Chrome OS Shell
  * CVE-2022-2860: Insufficient policy enforcement in Cookies
  * CVE-2022-2861: Inappropriate implementation in Extensions API</changelog>
</package>
<package pkgid="afc31583149c7d29c9b4bf088228fc557283f475f78e94cbafc5c50a7294815b" name="chromium" arch="aarch64">
  <version epoch="0" ver="104.0.5112.79" rel="bp154.2.20.1"/>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1648555200">- Update disk constraints</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1648641600">- Chromium 100.0.4896.60 (boo#1197680)
  * CVE-2022-1125: Use after free in Portals
  * CVE-2022-1127: Use after free in QR Code Generator
  * CVE-2022-1128: Inappropriate implementation in Web Share API
  * CVE-2022-1129: Inappropriate implementation in Full Screen Mode
  * CVE-2022-1130: Insufficient validation of untrusted input in WebOTP
  * CVE-2022-1131: Use after free in Cast UI
  * CVE-2022-1132: Inappropriate implementation in Virtual Keyboard
  * CVE-2022-1133: Use after free in WebRTC
  * CVE-2022-1134: Type Confusion in V8
  * CVE-2022-1135: Use after free in Shopping Cart
  * CVE-2022-1136: Use after free in Tab Strip
  * CVE-2022-1137: Inappropriate implementation in Extensions
  * CVE-2022-1138: Inappropriate implementation in Web Cursor
  * CVE-2022-1139: Inappropriate implementation in Background Fetch API
  * CVE-2022-1141: Use after free in File Manager
  * CVE-2022-1142: Heap buffer overflow in WebUI
  * CVE-2022-1143: Heap buffer overflow in WebUI
  * CVE-2022-1144: Use after free in WebUI
  * CVE-2022-1145: Use after free in Extensions
  * CVE-2022-1146: Inappropriate implementation in Resource Timing
- Added patches:
  * chromium-100-compiler.patch
  * chromium-100-GLImplementationParts-constexpr.patch
  * chromium-100-InMilliseconds-constexpr.patch
  * chromium-100-SCTHashdanceMetadata-move.patch
  * chromium-100-macro-typo.patch
- Removed patches:
  * chromium-98-compiler.patch
  * chromium-86-nearby-explicit.patch
  * chromium-glibc-2.34.patch
  * chromium-v8-missing-utility-include.patch
  * chromium-99-AutofillAssistantModelExecutor-NoDestructor.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1649160000">- Chromium 100.0.4896.75:
  * CVE-2022-1232: Type Confusion in V8 (boo#1198053)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1649592000">- Patches for GCC 12:
  * chromium-fix-swiftshader-template.patch
  * chromium-missing-include-tuple.patch
  * chromium-webrtc-stats-missing-vector.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1649764800">- Chromium 100.0.4896.88 (boo#1198361)
  * CVE-2022-1305: Use after free in storage
  * CVE-2022-1306: Inappropriate implementation in compositing
  * CVE-2022-1307: Inappropriate implementation in full screen
  * CVE-2022-1308: Use after free in BFCache
  * CVE-2022-1309: Insufficient policy enforcement in developer tools
  * CVE-2022-1310: Use after free in regular expressions
  * CVE-2022-1311: Use after free in Chrome OS shell
  * CVE-2022-1312: Use after free in storage
  * CVE-2022-1313: Use after free in tab groups
  * CVE-2022-1314: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1650024000">- Chromium 100.0.4896.127 (boo#1198509)
  * CVE-2022-1364: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1650542400">- Fixes for go 1.18</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1651665600">- Chromium 101.0.4951.54 (boo#1199118)
- Chromium 101.0.4951.41 (boo#1198917)
  * CVE-2022-1477: Use after free in Vulkan
  * CVE-2022-1478: Use after free in SwiftShader
  * CVE-2022-1479: Use after free in ANGLE
  * CVE-2022-1480: Use after free in Device API
  * CVE-2022-1481: Use after free in Sharing
  * CVE-2022-1482: Inappropriate implementation in WebGL
  * CVE-2022-1483: Heap buffer overflow in WebGPU
  * CVE-2022-1484: Heap buffer overflow in Web UI Settings
  * CVE-2022-1485: Use after free in File System API
  * CVE-2022-1486: Type Confusion in V8
  * CVE-2022-1487: Use after free in Ozone
  * CVE-2022-1488: Inappropriate implementation in Extensions API
  * CVE-2022-1489: Out of bounds memory access in UI Shelf
  * CVE-2022-1490: Use after free in Browser Switcher
  * CVE-2022-1491: Use after free in Bookmarks
  * CVE-2022-1492: Insufficient data validation in Blink Editing
  * CVE-2022-1493: Use after free in Dev Tools
  * CVE-2022-1494: Insufficient data validation in Trusted Types
  * CVE-2022-1495: Incorrect security UI in Downloads
  * CVE-2022-1496: Use after free in File Manager
  * CVE-2022-1497: Inappropriate implementation in Input
  * CVE-2022-1498: Inappropriate implementation in HTML Parser
  * CVE-2022-1499: Inappropriate implementation in WebAuthentication
  * CVE-2022-1500: Insufficient data validation in Dev Tools
  * CVE-2022-1501: Inappropriate implementation in iframe
- Added patches:
  * chromium-101-libxml-unbundle.patch
  * chromium-101-segmentation_platform-type.patch
- Removed patches:
  * chromium-100-SCTHashdanceMetadata-move.patch
  * chromium-100-GLImplementationParts-constexpr.patch
  * chromium-100-macro-typo.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1652270400">- Chromium 101.0.4951.64 (boo#1199409)
  * CVE-2022-1633: Use after free in Sharesheet
  * CVE-2022-1634: Use after free in Browser UI
  * CVE-2022-1635: Use after free in Permission Prompts
  * CVE-2022-1636: Use after free in Performance APIs
  * CVE-2022-1637: Inappropriate implementation in Web Contents
  * CVE-2022-1638: Heap buffer overflow in V8 Internationalization
  * CVE-2022-1639: Use after free in ANGLE
  * CVE-2022-1640: Use after free in Sharing
  * CVE-2022-1641: Use after free in Web UI Diagnostics</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1652616000">- Chromium 101.0.4951.67
  * fixes for other platforms</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1653652800">- Chromium 102.0.5001.61 (boo#1199893)
  * CVE-2022-1853: Use after free in Indexed DB
  * CVE-2022-1854: Use after free in ANGLE
  * CVE-2022-1855: Use after free in Messaging
  * CVE-2022-1856: Use after free in User Education
  * CVE-2022-1857: Insufficient policy enforcement in File System API
  * CVE-2022-1858: Out of bounds read in DevTools
  * CVE-2022-1859: Use after free in Performance Manager
  * CVE-2022-1860: Use after free in UI Foundations
  * CVE-2022-1861: Use after free in Sharing
  * CVE-2022-1862: Inappropriate implementation in Extensions
  * CVE-2022-1863: Use after free in Tab Groups
  * CVE-2022-1864: Use after free in WebApp Installs
  * CVE-2022-1865: Use after free in Bookmarks
  * CVE-2022-1866: Use after free in Tablet Mode
  * CVE-2022-1867: Insufficient validation of untrusted input in Data Transfer
  * CVE-2022-1868: Inappropriate implementation in Extensions API
  * CVE-2022-1869: Type Confusion in V8
  * CVE-2022-1870: Use after free in App Service
  * CVE-2022-1871: Insufficient policy enforcement in File System API
  * CVE-2022-1872: Insufficient policy enforcement in Extensions API
  * CVE-2022-1873: Insufficient policy enforcement in COOP
  * CVE-2022-1874: Insufficient policy enforcement in Safe Browsing
  * CVE-2022-1875: Inappropriate implementation in PDF
  * CVE-2022-1876: Heap buffer overflow in DevTools
- Added patches:
  * chromium-102-compiler.patch
  * chromium-102-fenced_frame_utils-include.patch
  * chromium-102-regex_pattern-array.patch
  * chromium-102-swiftshader-template-instantiation.patch
  * chromium-102-symbolize-include.patch
  * ffmpeg-new-channel-layout.patch
- Removed patches:
  * chromium-100-compiler.patch
  * chromium-80-QuicStreamSendBuffer-deleted-move-constructor.patch
  * chromium-95-quiche-include.patch
  * chromium-fix-swiftshader-template.patch
  * chromium-missing-include-tuple.patch
  * chromium-webrtc-stats-missing-vector.patch
  * chromium-101-segmentation_platform-type.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654084800">- Disable ARM control flow integrity, it causes build issues
  at the moment
- Try a different SVG (black logo on GNOME)
- Removed patches:
  * chromium-third_party-symbolize-missing-include.patch
  (replaced by chromium-102-symbolize-include.patch)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654689600">- Switch to GTK4 on TW and Leap 15.4+ (boo#1200139)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1654862400">- Chromium 102.0.5005.115 (boo#1200423)
  * CVE-2022-2007: Use after free in WebGPU
  * CVE-2022-2008: Out of bounds memory access in WebGL
  * CVE-2022-2010: Out of bounds read in compositing
  * CVE-2022-2011: Use after free in ANGLE</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1656158400">- Chromium 103.0.5060.53 (boo#1200783)
  * CVE-2022-2156: Use after free in Base
  * CVE-2022-2157: Use after free in Interest groups
  * CVE-2022-2158: Type Confusion in V8
  * CVE-2022-2160: Insufficient policy enforcement in DevTools
  * CVE-2022-2161: Use after free in WebApp Provider
  * CVE-2022-2162: Insufficient policy enforcement in File System API
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * CVE-2022-2164: Inappropriate implementation in Extensions API
  * CVE-2022-2165: Insufficient data validation in URL formatting
- Added patches:
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-VirtualCursor-std-layout.patch
  * chromium-103-compiler.patch
- Removed patches:
  * chromium-102-compiler.patch
  * chromium-91-sql-standard-layout-type.patch
  * chromium-101-libxml-unbundle.patch
  * chromium-102-fenced_frame_utils-include.patch
  * chromium-102-swiftshader-template-instantiation.patch
  * chromium-102-symbolize-include.patch
  * chromium-97-arm-tflite-cast.patch
  * chromium-97-ScrollView-reference.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657195200">- Chromium 103.0.5060.66
  * no upstream release notes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657368000">- Chromium 103.0.5060.114 (boo#1201216)
  * CVE-2022-2294: Heap buffer overflow in WebRTC
  * CVE-2022-2295: Type Confusion in V8
  * CVE-2022-2296: Use after free in Chrome OS Shell</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1658318400">- Chromium 103.0.5060.134 (boo#1201679):
  * CVE-2022-2477 : Use after free in Guest View
  * CVE-2022-2478 : Use after free in PDF
  * CVE-2022-2479 : Insufficient validation of untrusted input in File
  * CVE-2022-2480 : Use after free in Service Worker API
  * CVE-2022-2481: Use after free in Views
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1658577600">- Switch back to Clang so that we can use BTI on aarch64
  * Gold is too old - doesn't understand BTI
  * LD crashes on aarch64
- Re-enable LTO
- Prepare move to FFmpeg 5 for new channel layout
  (requires 5.1+)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660046400">- Chromium 104.0.5112.79 (boo#1202075)
  * CVE-2022-2603: Use after free in Omnibox
  * CVE-2022-2604: Use after free in Safe Browsing
  * CVE-2022-2605: Out of bounds read in Dawn
  * CVE-2022-2606: Use after free in Managed devices API
  * CVE-2022-2607: Use after free in Tab Strip
  * CVE-2022-2608: Use after free in Overview Mode
  * CVE-2022-2609: Use after free in Nearby Share
  * CVE-2022-2610: Insufficient policy enforcement in Background Fetch
  * CVE-2022-2611: Inappropriate implementation in Fullscreen API
  * CVE-2022-2612: Side-channel information leakage in Keyboard input
  * CVE-2022-2613: Use after free in Input
  * CVE-2022-2614: Use after free in Sign-In Flow
  * CVE-2022-2615: Insufficient policy enforcement in Cookies
  * CVE-2022-2616: Inappropriate implementation in Extensions API
  * CVE-2022-2617: Use after free in Extensions API
  * CVE-2022-2618: Insufficient validation of untrusted input in Internals
  * CVE-2022-2619: Insufficient validation of untrusted input in Settings
  * CVE-2022-2620: Use after free in WebUI
  * CVE-2022-2621: Use after free in Extensions
  * CVE-2022-2622: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-2623: Use after free in Offline
  * CVE-2022-2624: Heap buffer overflow in PDF
- Added patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-104-tflite-system-zlib.patch
- Removed patches:
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-compiler.patch
- Use FFmpeg 5.1 on TW</changelog>
</package>
<package pkgid="faf25c731dd1e63b50a421a34f76f5e373040686ca39a68f1d0cad93aaac8dfc" name="chromium" arch="src">
  <version epoch="0" ver="104.0.5112.79" rel="bp154.2.20.1"/>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1648555200">- Update disk constraints</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1648641600">- Chromium 100.0.4896.60 (boo#1197680)
  * CVE-2022-1125: Use after free in Portals
  * CVE-2022-1127: Use after free in QR Code Generator
  * CVE-2022-1128: Inappropriate implementation in Web Share API
  * CVE-2022-1129: Inappropriate implementation in Full Screen Mode
  * CVE-2022-1130: Insufficient validation of untrusted input in WebOTP
  * CVE-2022-1131: Use after free in Cast UI
  * CVE-2022-1132: Inappropriate implementation in Virtual Keyboard
  * CVE-2022-1133: Use after free in WebRTC
  * CVE-2022-1134: Type Confusion in V8
  * CVE-2022-1135: Use after free in Shopping Cart
  * CVE-2022-1136: Use after free in Tab Strip
  * CVE-2022-1137: Inappropriate implementation in Extensions
  * CVE-2022-1138: Inappropriate implementation in Web Cursor
  * CVE-2022-1139: Inappropriate implementation in Background Fetch API
  * CVE-2022-1141: Use after free in File Manager
  * CVE-2022-1142: Heap buffer overflow in WebUI
  * CVE-2022-1143: Heap buffer overflow in WebUI
  * CVE-2022-1144: Use after free in WebUI
  * CVE-2022-1145: Use after free in Extensions
  * CVE-2022-1146: Inappropriate implementation in Resource Timing
- Added patches:
  * chromium-100-compiler.patch
  * chromium-100-GLImplementationParts-constexpr.patch
  * chromium-100-InMilliseconds-constexpr.patch
  * chromium-100-SCTHashdanceMetadata-move.patch
  * chromium-100-macro-typo.patch
- Removed patches:
  * chromium-98-compiler.patch
  * chromium-86-nearby-explicit.patch
  * chromium-glibc-2.34.patch
  * chromium-v8-missing-utility-include.patch
  * chromium-99-AutofillAssistantModelExecutor-NoDestructor.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1649160000">- Chromium 100.0.4896.75:
  * CVE-2022-1232: Type Confusion in V8 (boo#1198053)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1649592000">- Patches for GCC 12:
  * chromium-fix-swiftshader-template.patch
  * chromium-missing-include-tuple.patch
  * chromium-webrtc-stats-missing-vector.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1649764800">- Chromium 100.0.4896.88 (boo#1198361)
  * CVE-2022-1305: Use after free in storage
  * CVE-2022-1306: Inappropriate implementation in compositing
  * CVE-2022-1307: Inappropriate implementation in full screen
  * CVE-2022-1308: Use after free in BFCache
  * CVE-2022-1309: Insufficient policy enforcement in developer tools
  * CVE-2022-1310: Use after free in regular expressions
  * CVE-2022-1311: Use after free in Chrome OS shell
  * CVE-2022-1312: Use after free in storage
  * CVE-2022-1313: Use after free in tab groups
  * CVE-2022-1314: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1650024000">- Chromium 100.0.4896.127 (boo#1198509)
  * CVE-2022-1364: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1650542400">- Fixes for go 1.18</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1651665600">- Chromium 101.0.4951.54 (boo#1199118)
- Chromium 101.0.4951.41 (boo#1198917)
  * CVE-2022-1477: Use after free in Vulkan
  * CVE-2022-1478: Use after free in SwiftShader
  * CVE-2022-1479: Use after free in ANGLE
  * CVE-2022-1480: Use after free in Device API
  * CVE-2022-1481: Use after free in Sharing
  * CVE-2022-1482: Inappropriate implementation in WebGL
  * CVE-2022-1483: Heap buffer overflow in WebGPU
  * CVE-2022-1484: Heap buffer overflow in Web UI Settings
  * CVE-2022-1485: Use after free in File System API
  * CVE-2022-1486: Type Confusion in V8
  * CVE-2022-1487: Use after free in Ozone
  * CVE-2022-1488: Inappropriate implementation in Extensions API
  * CVE-2022-1489: Out of bounds memory access in UI Shelf
  * CVE-2022-1490: Use after free in Browser Switcher
  * CVE-2022-1491: Use after free in Bookmarks
  * CVE-2022-1492: Insufficient data validation in Blink Editing
  * CVE-2022-1493: Use after free in Dev Tools
  * CVE-2022-1494: Insufficient data validation in Trusted Types
  * CVE-2022-1495: Incorrect security UI in Downloads
  * CVE-2022-1496: Use after free in File Manager
  * CVE-2022-1497: Inappropriate implementation in Input
  * CVE-2022-1498: Inappropriate implementation in HTML Parser
  * CVE-2022-1499: Inappropriate implementation in WebAuthentication
  * CVE-2022-1500: Insufficient data validation in Dev Tools
  * CVE-2022-1501: Inappropriate implementation in iframe
- Added patches:
  * chromium-101-libxml-unbundle.patch
  * chromium-101-segmentation_platform-type.patch
- Removed patches:
  * chromium-100-SCTHashdanceMetadata-move.patch
  * chromium-100-GLImplementationParts-constexpr.patch
  * chromium-100-macro-typo.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1652270400">- Chromium 101.0.4951.64 (boo#1199409)
  * CVE-2022-1633: Use after free in Sharesheet
  * CVE-2022-1634: Use after free in Browser UI
  * CVE-2022-1635: Use after free in Permission Prompts
  * CVE-2022-1636: Use after free in Performance APIs
  * CVE-2022-1637: Inappropriate implementation in Web Contents
  * CVE-2022-1638: Heap buffer overflow in V8 Internationalization
  * CVE-2022-1639: Use after free in ANGLE
  * CVE-2022-1640: Use after free in Sharing
  * CVE-2022-1641: Use after free in Web UI Diagnostics</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1652616000">- Chromium 101.0.4951.67
  * fixes for other platforms</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1653652800">- Chromium 102.0.5001.61 (boo#1199893)
  * CVE-2022-1853: Use after free in Indexed DB
  * CVE-2022-1854: Use after free in ANGLE
  * CVE-2022-1855: Use after free in Messaging
  * CVE-2022-1856: Use after free in User Education
  * CVE-2022-1857: Insufficient policy enforcement in File System API
  * CVE-2022-1858: Out of bounds read in DevTools
  * CVE-2022-1859: Use after free in Performance Manager
  * CVE-2022-1860: Use after free in UI Foundations
  * CVE-2022-1861: Use after free in Sharing
  * CVE-2022-1862: Inappropriate implementation in Extensions
  * CVE-2022-1863: Use after free in Tab Groups
  * CVE-2022-1864: Use after free in WebApp Installs
  * CVE-2022-1865: Use after free in Bookmarks
  * CVE-2022-1866: Use after free in Tablet Mode
  * CVE-2022-1867: Insufficient validation of untrusted input in Data Transfer
  * CVE-2022-1868: Inappropriate implementation in Extensions API
  * CVE-2022-1869: Type Confusion in V8
  * CVE-2022-1870: Use after free in App Service
  * CVE-2022-1871: Insufficient policy enforcement in File System API
  * CVE-2022-1872: Insufficient policy enforcement in Extensions API
  * CVE-2022-1873: Insufficient policy enforcement in COOP
  * CVE-2022-1874: Insufficient policy enforcement in Safe Browsing
  * CVE-2022-1875: Inappropriate implementation in PDF
  * CVE-2022-1876: Heap buffer overflow in DevTools
- Added patches:
  * chromium-102-compiler.patch
  * chromium-102-fenced_frame_utils-include.patch
  * chromium-102-regex_pattern-array.patch
  * chromium-102-swiftshader-template-instantiation.patch
  * chromium-102-symbolize-include.patch
  * ffmpeg-new-channel-layout.patch
- Removed patches:
  * chromium-100-compiler.patch
  * chromium-80-QuicStreamSendBuffer-deleted-move-constructor.patch
  * chromium-95-quiche-include.patch
  * chromium-fix-swiftshader-template.patch
  * chromium-missing-include-tuple.patch
  * chromium-webrtc-stats-missing-vector.patch
  * chromium-101-segmentation_platform-type.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654084800">- Disable ARM control flow integrity, it causes build issues
  at the moment
- Try a different SVG (black logo on GNOME)
- Removed patches:
  * chromium-third_party-symbolize-missing-include.patch
  (replaced by chromium-102-symbolize-include.patch)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654689600">- Switch to GTK4 on TW and Leap 15.4+ (boo#1200139)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1654862400">- Chromium 102.0.5005.115 (boo#1200423)
  * CVE-2022-2007: Use after free in WebGPU
  * CVE-2022-2008: Out of bounds memory access in WebGL
  * CVE-2022-2010: Out of bounds read in compositing
  * CVE-2022-2011: Use after free in ANGLE</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1656158400">- Chromium 103.0.5060.53 (boo#1200783)
  * CVE-2022-2156: Use after free in Base
  * CVE-2022-2157: Use after free in Interest groups
  * CVE-2022-2158: Type Confusion in V8
  * CVE-2022-2160: Insufficient policy enforcement in DevTools
  * CVE-2022-2161: Use after free in WebApp Provider
  * CVE-2022-2162: Insufficient policy enforcement in File System API
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * CVE-2022-2164: Inappropriate implementation in Extensions API
  * CVE-2022-2165: Insufficient data validation in URL formatting
- Added patches:
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-VirtualCursor-std-layout.patch
  * chromium-103-compiler.patch
- Removed patches:
  * chromium-102-compiler.patch
  * chromium-91-sql-standard-layout-type.patch
  * chromium-101-libxml-unbundle.patch
  * chromium-102-fenced_frame_utils-include.patch
  * chromium-102-swiftshader-template-instantiation.patch
  * chromium-102-symbolize-include.patch
  * chromium-97-arm-tflite-cast.patch
  * chromium-97-ScrollView-reference.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657195200">- Chromium 103.0.5060.66
  * no upstream release notes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657368000">- Chromium 103.0.5060.114 (boo#1201216)
  * CVE-2022-2294: Heap buffer overflow in WebRTC
  * CVE-2022-2295: Type Confusion in V8
  * CVE-2022-2296: Use after free in Chrome OS Shell</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1658318400">- Chromium 103.0.5060.134 (boo#1201679):
  * CVE-2022-2477 : Use after free in Guest View
  * CVE-2022-2478 : Use after free in PDF
  * CVE-2022-2479 : Insufficient validation of untrusted input in File
  * CVE-2022-2480 : Use after free in Service Worker API
  * CVE-2022-2481: Use after free in Views
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1658577600">- Switch back to Clang so that we can use BTI on aarch64
  * Gold is too old - doesn't understand BTI
  * LD crashes on aarch64
- Re-enable LTO
- Prepare move to FFmpeg 5 for new channel layout
  (requires 5.1+)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660046400">- Chromium 104.0.5112.79 (boo#1202075)
  * CVE-2022-2603: Use after free in Omnibox
  * CVE-2022-2604: Use after free in Safe Browsing
  * CVE-2022-2605: Out of bounds read in Dawn
  * CVE-2022-2606: Use after free in Managed devices API
  * CVE-2022-2607: Use after free in Tab Strip
  * CVE-2022-2608: Use after free in Overview Mode
  * CVE-2022-2609: Use after free in Nearby Share
  * CVE-2022-2610: Insufficient policy enforcement in Background Fetch
  * CVE-2022-2611: Inappropriate implementation in Fullscreen API
  * CVE-2022-2612: Side-channel information leakage in Keyboard input
  * CVE-2022-2613: Use after free in Input
  * CVE-2022-2614: Use after free in Sign-In Flow
  * CVE-2022-2615: Insufficient policy enforcement in Cookies
  * CVE-2022-2616: Inappropriate implementation in Extensions API
  * CVE-2022-2617: Use after free in Extensions API
  * CVE-2022-2618: Insufficient validation of untrusted input in Internals
  * CVE-2022-2619: Insufficient validation of untrusted input in Settings
  * CVE-2022-2620: Use after free in WebUI
  * CVE-2022-2621: Use after free in Extensions
  * CVE-2022-2622: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-2623: Use after free in Offline
  * CVE-2022-2624: Heap buffer overflow in PDF
- Added patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-104-tflite-system-zlib.patch
- Removed patches:
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-compiler.patch
- Use FFmpeg 5.1 on TW</changelog>
</package>
<package pkgid="d62586a167d928cb65e785dd74195aa4c0618aed96218977adea394eaaf2e7ce" name="chromium" arch="x86_64">
  <version epoch="0" ver="104.0.5112.79" rel="bp154.2.20.1"/>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1648555200">- Update disk constraints</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1648641600">- Chromium 100.0.4896.60 (boo#1197680)
  * CVE-2022-1125: Use after free in Portals
  * CVE-2022-1127: Use after free in QR Code Generator
  * CVE-2022-1128: Inappropriate implementation in Web Share API
  * CVE-2022-1129: Inappropriate implementation in Full Screen Mode
  * CVE-2022-1130: Insufficient validation of untrusted input in WebOTP
  * CVE-2022-1131: Use after free in Cast UI
  * CVE-2022-1132: Inappropriate implementation in Virtual Keyboard
  * CVE-2022-1133: Use after free in WebRTC
  * CVE-2022-1134: Type Confusion in V8
  * CVE-2022-1135: Use after free in Shopping Cart
  * CVE-2022-1136: Use after free in Tab Strip
  * CVE-2022-1137: Inappropriate implementation in Extensions
  * CVE-2022-1138: Inappropriate implementation in Web Cursor
  * CVE-2022-1139: Inappropriate implementation in Background Fetch API
  * CVE-2022-1141: Use after free in File Manager
  * CVE-2022-1142: Heap buffer overflow in WebUI
  * CVE-2022-1143: Heap buffer overflow in WebUI
  * CVE-2022-1144: Use after free in WebUI
  * CVE-2022-1145: Use after free in Extensions
  * CVE-2022-1146: Inappropriate implementation in Resource Timing
- Added patches:
  * chromium-100-compiler.patch
  * chromium-100-GLImplementationParts-constexpr.patch
  * chromium-100-InMilliseconds-constexpr.patch
  * chromium-100-SCTHashdanceMetadata-move.patch
  * chromium-100-macro-typo.patch
- Removed patches:
  * chromium-98-compiler.patch
  * chromium-86-nearby-explicit.patch
  * chromium-glibc-2.34.patch
  * chromium-v8-missing-utility-include.patch
  * chromium-99-AutofillAssistantModelExecutor-NoDestructor.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1649160000">- Chromium 100.0.4896.75:
  * CVE-2022-1232: Type Confusion in V8 (boo#1198053)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1649592000">- Patches for GCC 12:
  * chromium-fix-swiftshader-template.patch
  * chromium-missing-include-tuple.patch
  * chromium-webrtc-stats-missing-vector.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1649764800">- Chromium 100.0.4896.88 (boo#1198361)
  * CVE-2022-1305: Use after free in storage
  * CVE-2022-1306: Inappropriate implementation in compositing
  * CVE-2022-1307: Inappropriate implementation in full screen
  * CVE-2022-1308: Use after free in BFCache
  * CVE-2022-1309: Insufficient policy enforcement in developer tools
  * CVE-2022-1310: Use after free in regular expressions
  * CVE-2022-1311: Use after free in Chrome OS shell
  * CVE-2022-1312: Use after free in storage
  * CVE-2022-1313: Use after free in tab groups
  * CVE-2022-1314: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1650024000">- Chromium 100.0.4896.127 (boo#1198509)
  * CVE-2022-1364: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1650542400">- Fixes for go 1.18</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1651665600">- Chromium 101.0.4951.54 (boo#1199118)
- Chromium 101.0.4951.41 (boo#1198917)
  * CVE-2022-1477: Use after free in Vulkan
  * CVE-2022-1478: Use after free in SwiftShader
  * CVE-2022-1479: Use after free in ANGLE
  * CVE-2022-1480: Use after free in Device API
  * CVE-2022-1481: Use after free in Sharing
  * CVE-2022-1482: Inappropriate implementation in WebGL
  * CVE-2022-1483: Heap buffer overflow in WebGPU
  * CVE-2022-1484: Heap buffer overflow in Web UI Settings
  * CVE-2022-1485: Use after free in File System API
  * CVE-2022-1486: Type Confusion in V8
  * CVE-2022-1487: Use after free in Ozone
  * CVE-2022-1488: Inappropriate implementation in Extensions API
  * CVE-2022-1489: Out of bounds memory access in UI Shelf
  * CVE-2022-1490: Use after free in Browser Switcher
  * CVE-2022-1491: Use after free in Bookmarks
  * CVE-2022-1492: Insufficient data validation in Blink Editing
  * CVE-2022-1493: Use after free in Dev Tools
  * CVE-2022-1494: Insufficient data validation in Trusted Types
  * CVE-2022-1495: Incorrect security UI in Downloads
  * CVE-2022-1496: Use after free in File Manager
  * CVE-2022-1497: Inappropriate implementation in Input
  * CVE-2022-1498: Inappropriate implementation in HTML Parser
  * CVE-2022-1499: Inappropriate implementation in WebAuthentication
  * CVE-2022-1500: Insufficient data validation in Dev Tools
  * CVE-2022-1501: Inappropriate implementation in iframe
- Added patches:
  * chromium-101-libxml-unbundle.patch
  * chromium-101-segmentation_platform-type.patch
- Removed patches:
  * chromium-100-SCTHashdanceMetadata-move.patch
  * chromium-100-GLImplementationParts-constexpr.patch
  * chromium-100-macro-typo.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1652270400">- Chromium 101.0.4951.64 (boo#1199409)
  * CVE-2022-1633: Use after free in Sharesheet
  * CVE-2022-1634: Use after free in Browser UI
  * CVE-2022-1635: Use after free in Permission Prompts
  * CVE-2022-1636: Use after free in Performance APIs
  * CVE-2022-1637: Inappropriate implementation in Web Contents
  * CVE-2022-1638: Heap buffer overflow in V8 Internationalization
  * CVE-2022-1639: Use after free in ANGLE
  * CVE-2022-1640: Use after free in Sharing
  * CVE-2022-1641: Use after free in Web UI Diagnostics</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1652616000">- Chromium 101.0.4951.67
  * fixes for other platforms</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1653652800">- Chromium 102.0.5001.61 (boo#1199893)
  * CVE-2022-1853: Use after free in Indexed DB
  * CVE-2022-1854: Use after free in ANGLE
  * CVE-2022-1855: Use after free in Messaging
  * CVE-2022-1856: Use after free in User Education
  * CVE-2022-1857: Insufficient policy enforcement in File System API
  * CVE-2022-1858: Out of bounds read in DevTools
  * CVE-2022-1859: Use after free in Performance Manager
  * CVE-2022-1860: Use after free in UI Foundations
  * CVE-2022-1861: Use after free in Sharing
  * CVE-2022-1862: Inappropriate implementation in Extensions
  * CVE-2022-1863: Use after free in Tab Groups
  * CVE-2022-1864: Use after free in WebApp Installs
  * CVE-2022-1865: Use after free in Bookmarks
  * CVE-2022-1866: Use after free in Tablet Mode
  * CVE-2022-1867: Insufficient validation of untrusted input in Data Transfer
  * CVE-2022-1868: Inappropriate implementation in Extensions API
  * CVE-2022-1869: Type Confusion in V8
  * CVE-2022-1870: Use after free in App Service
  * CVE-2022-1871: Insufficient policy enforcement in File System API
  * CVE-2022-1872: Insufficient policy enforcement in Extensions API
  * CVE-2022-1873: Insufficient policy enforcement in COOP
  * CVE-2022-1874: Insufficient policy enforcement in Safe Browsing
  * CVE-2022-1875: Inappropriate implementation in PDF
  * CVE-2022-1876: Heap buffer overflow in DevTools
- Added patches:
  * chromium-102-compiler.patch
  * chromium-102-fenced_frame_utils-include.patch
  * chromium-102-regex_pattern-array.patch
  * chromium-102-swiftshader-template-instantiation.patch
  * chromium-102-symbolize-include.patch
  * ffmpeg-new-channel-layout.patch
- Removed patches:
  * chromium-100-compiler.patch
  * chromium-80-QuicStreamSendBuffer-deleted-move-constructor.patch
  * chromium-95-quiche-include.patch
  * chromium-fix-swiftshader-template.patch
  * chromium-missing-include-tuple.patch
  * chromium-webrtc-stats-missing-vector.patch
  * chromium-101-segmentation_platform-type.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654084800">- Disable ARM control flow integrity, it causes build issues
  at the moment
- Try a different SVG (black logo on GNOME)
- Removed patches:
  * chromium-third_party-symbolize-missing-include.patch
  (replaced by chromium-102-symbolize-include.patch)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654689600">- Switch to GTK4 on TW and Leap 15.4+ (boo#1200139)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1654862400">- Chromium 102.0.5005.115 (boo#1200423)
  * CVE-2022-2007: Use after free in WebGPU
  * CVE-2022-2008: Out of bounds memory access in WebGL
  * CVE-2022-2010: Out of bounds read in compositing
  * CVE-2022-2011: Use after free in ANGLE</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1656158400">- Chromium 103.0.5060.53 (boo#1200783)
  * CVE-2022-2156: Use after free in Base
  * CVE-2022-2157: Use after free in Interest groups
  * CVE-2022-2158: Type Confusion in V8
  * CVE-2022-2160: Insufficient policy enforcement in DevTools
  * CVE-2022-2161: Use after free in WebApp Provider
  * CVE-2022-2162: Insufficient policy enforcement in File System API
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * CVE-2022-2164: Inappropriate implementation in Extensions API
  * CVE-2022-2165: Insufficient data validation in URL formatting
- Added patches:
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-VirtualCursor-std-layout.patch
  * chromium-103-compiler.patch
- Removed patches:
  * chromium-102-compiler.patch
  * chromium-91-sql-standard-layout-type.patch
  * chromium-101-libxml-unbundle.patch
  * chromium-102-fenced_frame_utils-include.patch
  * chromium-102-swiftshader-template-instantiation.patch
  * chromium-102-symbolize-include.patch
  * chromium-97-arm-tflite-cast.patch
  * chromium-97-ScrollView-reference.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657195200">- Chromium 103.0.5060.66
  * no upstream release notes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657368000">- Chromium 103.0.5060.114 (boo#1201216)
  * CVE-2022-2294: Heap buffer overflow in WebRTC
  * CVE-2022-2295: Type Confusion in V8
  * CVE-2022-2296: Use after free in Chrome OS Shell</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1658318400">- Chromium 103.0.5060.134 (boo#1201679):
  * CVE-2022-2477 : Use after free in Guest View
  * CVE-2022-2478 : Use after free in PDF
  * CVE-2022-2479 : Insufficient validation of untrusted input in File
  * CVE-2022-2480 : Use after free in Service Worker API
  * CVE-2022-2481: Use after free in Views
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1658577600">- Switch back to Clang so that we can use BTI on aarch64
  * Gold is too old - doesn't understand BTI
  * LD crashes on aarch64
- Re-enable LTO
- Prepare move to FFmpeg 5 for new channel layout
  (requires 5.1+)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660046400">- Chromium 104.0.5112.79 (boo#1202075)
  * CVE-2022-2603: Use after free in Omnibox
  * CVE-2022-2604: Use after free in Safe Browsing
  * CVE-2022-2605: Out of bounds read in Dawn
  * CVE-2022-2606: Use after free in Managed devices API
  * CVE-2022-2607: Use after free in Tab Strip
  * CVE-2022-2608: Use after free in Overview Mode
  * CVE-2022-2609: Use after free in Nearby Share
  * CVE-2022-2610: Insufficient policy enforcement in Background Fetch
  * CVE-2022-2611: Inappropriate implementation in Fullscreen API
  * CVE-2022-2612: Side-channel information leakage in Keyboard input
  * CVE-2022-2613: Use after free in Input
  * CVE-2022-2614: Use after free in Sign-In Flow
  * CVE-2022-2615: Insufficient policy enforcement in Cookies
  * CVE-2022-2616: Inappropriate implementation in Extensions API
  * CVE-2022-2617: Use after free in Extensions API
  * CVE-2022-2618: Insufficient validation of untrusted input in Internals
  * CVE-2022-2619: Insufficient validation of untrusted input in Settings
  * CVE-2022-2620: Use after free in WebUI
  * CVE-2022-2621: Use after free in Extensions
  * CVE-2022-2622: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-2623: Use after free in Offline
  * CVE-2022-2624: Heap buffer overflow in PDF
- Added patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-104-tflite-system-zlib.patch
- Removed patches:
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-compiler.patch
- Use FFmpeg 5.1 on TW</changelog>
</package>
<package pkgid="c4527b75da5101544cbb3466a537ac34d8e476089fd652332c5ea064b6af7863" name="chromium" arch="aarch64">
  <version epoch="0" ver="105.0.5195.102" rel="bp154.2.26.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1650024000">- Chromium 100.0.4896.127 (boo#1198509)
  * CVE-2022-1364: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1650542400">- Fixes for go 1.18</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1651665600">- Chromium 101.0.4951.54 (boo#1199118)
- Chromium 101.0.4951.41 (boo#1198917)
  * CVE-2022-1477: Use after free in Vulkan
  * CVE-2022-1478: Use after free in SwiftShader
  * CVE-2022-1479: Use after free in ANGLE
  * CVE-2022-1480: Use after free in Device API
  * CVE-2022-1481: Use after free in Sharing
  * CVE-2022-1482: Inappropriate implementation in WebGL
  * CVE-2022-1483: Heap buffer overflow in WebGPU
  * CVE-2022-1484: Heap buffer overflow in Web UI Settings
  * CVE-2022-1485: Use after free in File System API
  * CVE-2022-1486: Type Confusion in V8
  * CVE-2022-1487: Use after free in Ozone
  * CVE-2022-1488: Inappropriate implementation in Extensions API
  * CVE-2022-1489: Out of bounds memory access in UI Shelf
  * CVE-2022-1490: Use after free in Browser Switcher
  * CVE-2022-1491: Use after free in Bookmarks
  * CVE-2022-1492: Insufficient data validation in Blink Editing
  * CVE-2022-1493: Use after free in Dev Tools
  * CVE-2022-1494: Insufficient data validation in Trusted Types
  * CVE-2022-1495: Incorrect security UI in Downloads
  * CVE-2022-1496: Use after free in File Manager
  * CVE-2022-1497: Inappropriate implementation in Input
  * CVE-2022-1498: Inappropriate implementation in HTML Parser
  * CVE-2022-1499: Inappropriate implementation in WebAuthentication
  * CVE-2022-1500: Insufficient data validation in Dev Tools
  * CVE-2022-1501: Inappropriate implementation in iframe
- Added patches:
  * chromium-101-libxml-unbundle.patch
  * chromium-101-segmentation_platform-type.patch
- Removed patches:
  * chromium-100-SCTHashdanceMetadata-move.patch
  * chromium-100-GLImplementationParts-constexpr.patch
  * chromium-100-macro-typo.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1652270400">- Chromium 101.0.4951.64 (boo#1199409)
  * CVE-2022-1633: Use after free in Sharesheet
  * CVE-2022-1634: Use after free in Browser UI
  * CVE-2022-1635: Use after free in Permission Prompts
  * CVE-2022-1636: Use after free in Performance APIs
  * CVE-2022-1637: Inappropriate implementation in Web Contents
  * CVE-2022-1638: Heap buffer overflow in V8 Internationalization
  * CVE-2022-1639: Use after free in ANGLE
  * CVE-2022-1640: Use after free in Sharing
  * CVE-2022-1641: Use after free in Web UI Diagnostics</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1652616000">- Chromium 101.0.4951.67
  * fixes for other platforms</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1653652800">- Chromium 102.0.5001.61 (boo#1199893)
  * CVE-2022-1853: Use after free in Indexed DB
  * CVE-2022-1854: Use after free in ANGLE
  * CVE-2022-1855: Use after free in Messaging
  * CVE-2022-1856: Use after free in User Education
  * CVE-2022-1857: Insufficient policy enforcement in File System API
  * CVE-2022-1858: Out of bounds read in DevTools
  * CVE-2022-1859: Use after free in Performance Manager
  * CVE-2022-1860: Use after free in UI Foundations
  * CVE-2022-1861: Use after free in Sharing
  * CVE-2022-1862: Inappropriate implementation in Extensions
  * CVE-2022-1863: Use after free in Tab Groups
  * CVE-2022-1864: Use after free in WebApp Installs
  * CVE-2022-1865: Use after free in Bookmarks
  * CVE-2022-1866: Use after free in Tablet Mode
  * CVE-2022-1867: Insufficient validation of untrusted input in Data Transfer
  * CVE-2022-1868: Inappropriate implementation in Extensions API
  * CVE-2022-1869: Type Confusion in V8
  * CVE-2022-1870: Use after free in App Service
  * CVE-2022-1871: Insufficient policy enforcement in File System API
  * CVE-2022-1872: Insufficient policy enforcement in Extensions API
  * CVE-2022-1873: Insufficient policy enforcement in COOP
  * CVE-2022-1874: Insufficient policy enforcement in Safe Browsing
  * CVE-2022-1875: Inappropriate implementation in PDF
  * CVE-2022-1876: Heap buffer overflow in DevTools
- Added patches:
  * chromium-102-compiler.patch
  * chromium-102-fenced_frame_utils-include.patch
  * chromium-102-regex_pattern-array.patch
  * chromium-102-swiftshader-template-instantiation.patch
  * chromium-102-symbolize-include.patch
  * ffmpeg-new-channel-layout.patch
- Removed patches:
  * chromium-100-compiler.patch
  * chromium-80-QuicStreamSendBuffer-deleted-move-constructor.patch
  * chromium-95-quiche-include.patch
  * chromium-fix-swiftshader-template.patch
  * chromium-missing-include-tuple.patch
  * chromium-webrtc-stats-missing-vector.patch
  * chromium-101-segmentation_platform-type.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654084800">- Disable ARM control flow integrity, it causes build issues
  at the moment
- Try a different SVG (black logo on GNOME)
- Removed patches:
  * chromium-third_party-symbolize-missing-include.patch
  (replaced by chromium-102-symbolize-include.patch)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654689600">- Switch to GTK4 on TW and Leap 15.4+ (boo#1200139)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1654862400">- Chromium 102.0.5005.115 (boo#1200423)
  * CVE-2022-2007: Use after free in WebGPU
  * CVE-2022-2008: Out of bounds memory access in WebGL
  * CVE-2022-2010: Out of bounds read in compositing
  * CVE-2022-2011: Use after free in ANGLE</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1656158400">- Chromium 103.0.5060.53 (boo#1200783)
  * CVE-2022-2156: Use after free in Base
  * CVE-2022-2157: Use after free in Interest groups
  * CVE-2022-2158: Type Confusion in V8
  * CVE-2022-2160: Insufficient policy enforcement in DevTools
  * CVE-2022-2161: Use after free in WebApp Provider
  * CVE-2022-2162: Insufficient policy enforcement in File System API
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * CVE-2022-2164: Inappropriate implementation in Extensions API
  * CVE-2022-2165: Insufficient data validation in URL formatting
- Added patches:
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-VirtualCursor-std-layout.patch
  * chromium-103-compiler.patch
- Removed patches:
  * chromium-102-compiler.patch
  * chromium-91-sql-standard-layout-type.patch
  * chromium-101-libxml-unbundle.patch
  * chromium-102-fenced_frame_utils-include.patch
  * chromium-102-swiftshader-template-instantiation.patch
  * chromium-102-symbolize-include.patch
  * chromium-97-arm-tflite-cast.patch
  * chromium-97-ScrollView-reference.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657195200">- Chromium 103.0.5060.66
  * no upstream release notes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657368000">- Chromium 103.0.5060.114 (boo#1201216)
  * CVE-2022-2294: Heap buffer overflow in WebRTC
  * CVE-2022-2295: Type Confusion in V8
  * CVE-2022-2296: Use after free in Chrome OS Shell</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1658318400">- Chromium 103.0.5060.134 (boo#1201679):
  * CVE-2022-2477 : Use after free in Guest View
  * CVE-2022-2478 : Use after free in PDF
  * CVE-2022-2479 : Insufficient validation of untrusted input in File
  * CVE-2022-2480 : Use after free in Service Worker API
  * CVE-2022-2481: Use after free in Views
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1658577600">- Switch back to Clang so that we can use BTI on aarch64
  * Gold is too old - doesn't understand BTI
  * LD crashes on aarch64
- Re-enable LTO
- Prepare move to FFmpeg 5 for new channel layout
  (requires 5.1+)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660046400">- Chromium 104.0.5112.79 (boo#1202075)
  * CVE-2022-2603: Use after free in Omnibox
  * CVE-2022-2604: Use after free in Safe Browsing
  * CVE-2022-2605: Out of bounds read in Dawn
  * CVE-2022-2606: Use after free in Managed devices API
  * CVE-2022-2607: Use after free in Tab Strip
  * CVE-2022-2608: Use after free in Overview Mode
  * CVE-2022-2609: Use after free in Nearby Share
  * CVE-2022-2610: Insufficient policy enforcement in Background Fetch
  * CVE-2022-2611: Inappropriate implementation in Fullscreen API
  * CVE-2022-2612: Side-channel information leakage in Keyboard input
  * CVE-2022-2613: Use after free in Input
  * CVE-2022-2614: Use after free in Sign-In Flow
  * CVE-2022-2615: Insufficient policy enforcement in Cookies
  * CVE-2022-2616: Inappropriate implementation in Extensions API
  * CVE-2022-2617: Use after free in Extensions API
  * CVE-2022-2618: Insufficient validation of untrusted input in Internals
  * CVE-2022-2619: Insufficient validation of untrusted input in Settings
  * CVE-2022-2620: Use after free in WebUI
  * CVE-2022-2621: Use after free in Extensions
  * CVE-2022-2622: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-2623: Use after free in Offline
  * CVE-2022-2624: Heap buffer overflow in PDF
- Added patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-104-tflite-system-zlib.patch
- Removed patches:
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-compiler.patch
- Use FFmpeg 5.1 on TW</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660651200">- Re-enable our version of chrome-wrapper
- Set no sandbox if root is being used (https://crbug.com/638180)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660824000">- Chromium 104.0.5112.101 (boo#1202509):
  * CVE-2022-2852: Use after free in FedCM
  * CVE-2022-2854: Use after free in SwiftShader
  * CVE-2022-2855: Use after free in ANGLE
  * CVE-2022-2857: Use after free in Blink
  * CVE-2022-2858: Use after free in Sign-In Flow
  * CVE-2022-2853: Heap buffer overflow in Downloads
  * CVE-2022-2856: Insufficient validation of untrusted input in Intents
  * CVE-2022-2859: Use after free in Chrome OS Shell
  * CVE-2022-2860: Insufficient policy enforcement in Cookies
  * CVE-2022-2861: Inappropriate implementation in Extensions API</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1661169600">- Fix quoting in chrome-wrapper, don't put cwd on LD_LIBRARY_PATH</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1662033600">- Update chromium-symbolic.svg: this fixes bsc#1202403.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1662638400">- Chromium 105.0.5195.102 (boo#1203102):
  * CVE-2022-3075: Insufficient data validation in Mojo
- Chromium 105.0.5195.52 (boo#1202964):
  * CVE-2022-3038: Use after free in Network Service
  * CVE-2022-3039: Use after free in WebSQL
  * CVE-2022-3040: Use after free in Layout
  * CVE-2022-3041: Use after free in WebSQL
  * CVE-2022-3042: Use after free in PhoneHub
  * CVE-2022-3043: Heap buffer overflow in Screen Capture
  * CVE-2022-3044: Inappropriate implementation in Site Isolation
  * CVE-2022-3045: Insufficient validation of untrusted input in V8
  * CVE-2022-3046: Use after free in Browser Tag
  * CVE-2022-3071: Use after free in Tab Strip
  * CVE-2022-3047: Insufficient policy enforcement in Extensions API
  * CVE-2022-3048: Inappropriate implementation in Chrome OS lockscreen
  * CVE-2022-3049: Use after free in SplitScreen
  * CVE-2022-3050: Heap buffer overflow in WebUI
  * CVE-2022-3051: Heap buffer overflow in Exosphere
  * CVE-2022-3052: Heap buffer overflow in Window Manager
  * CVE-2022-3053: Inappropriate implementation in Pointer Lock
  * CVE-2022-3054: Insufficient policy enforcement in DevTools
  * CVE-2022-3055: Use after free in Passwords
  * CVE-2022-3056: Insufficient policy enforcement in Content Security Policy
  * CVE-2022-3057: Inappropriate implementation in iframe Sandbox
  * CVE-2022-3058: Use after free in Sign-In Flow
- Added patches:
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Bitmap-include.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-wayland-1.20.patch
  * chromium-105-compiler.patch
- Removed patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-78-protobuf-RepeatedPtrField-export.patch</changelog>
</package>
<package pkgid="699af5d09705c516221f55fecae64cf1f15aa6e5fdd3472d46419b2c27c87e18" name="chromium" arch="src">
  <version epoch="0" ver="105.0.5195.102" rel="bp154.2.26.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1650024000">- Chromium 100.0.4896.127 (boo#1198509)
  * CVE-2022-1364: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1650542400">- Fixes for go 1.18</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1651665600">- Chromium 101.0.4951.54 (boo#1199118)
- Chromium 101.0.4951.41 (boo#1198917)
  * CVE-2022-1477: Use after free in Vulkan
  * CVE-2022-1478: Use after free in SwiftShader
  * CVE-2022-1479: Use after free in ANGLE
  * CVE-2022-1480: Use after free in Device API
  * CVE-2022-1481: Use after free in Sharing
  * CVE-2022-1482: Inappropriate implementation in WebGL
  * CVE-2022-1483: Heap buffer overflow in WebGPU
  * CVE-2022-1484: Heap buffer overflow in Web UI Settings
  * CVE-2022-1485: Use after free in File System API
  * CVE-2022-1486: Type Confusion in V8
  * CVE-2022-1487: Use after free in Ozone
  * CVE-2022-1488: Inappropriate implementation in Extensions API
  * CVE-2022-1489: Out of bounds memory access in UI Shelf
  * CVE-2022-1490: Use after free in Browser Switcher
  * CVE-2022-1491: Use after free in Bookmarks
  * CVE-2022-1492: Insufficient data validation in Blink Editing
  * CVE-2022-1493: Use after free in Dev Tools
  * CVE-2022-1494: Insufficient data validation in Trusted Types
  * CVE-2022-1495: Incorrect security UI in Downloads
  * CVE-2022-1496: Use after free in File Manager
  * CVE-2022-1497: Inappropriate implementation in Input
  * CVE-2022-1498: Inappropriate implementation in HTML Parser
  * CVE-2022-1499: Inappropriate implementation in WebAuthentication
  * CVE-2022-1500: Insufficient data validation in Dev Tools
  * CVE-2022-1501: Inappropriate implementation in iframe
- Added patches:
  * chromium-101-libxml-unbundle.patch
  * chromium-101-segmentation_platform-type.patch
- Removed patches:
  * chromium-100-SCTHashdanceMetadata-move.patch
  * chromium-100-GLImplementationParts-constexpr.patch
  * chromium-100-macro-typo.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1652270400">- Chromium 101.0.4951.64 (boo#1199409)
  * CVE-2022-1633: Use after free in Sharesheet
  * CVE-2022-1634: Use after free in Browser UI
  * CVE-2022-1635: Use after free in Permission Prompts
  * CVE-2022-1636: Use after free in Performance APIs
  * CVE-2022-1637: Inappropriate implementation in Web Contents
  * CVE-2022-1638: Heap buffer overflow in V8 Internationalization
  * CVE-2022-1639: Use after free in ANGLE
  * CVE-2022-1640: Use after free in Sharing
  * CVE-2022-1641: Use after free in Web UI Diagnostics</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1652616000">- Chromium 101.0.4951.67
  * fixes for other platforms</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1653652800">- Chromium 102.0.5001.61 (boo#1199893)
  * CVE-2022-1853: Use after free in Indexed DB
  * CVE-2022-1854: Use after free in ANGLE
  * CVE-2022-1855: Use after free in Messaging
  * CVE-2022-1856: Use after free in User Education
  * CVE-2022-1857: Insufficient policy enforcement in File System API
  * CVE-2022-1858: Out of bounds read in DevTools
  * CVE-2022-1859: Use after free in Performance Manager
  * CVE-2022-1860: Use after free in UI Foundations
  * CVE-2022-1861: Use after free in Sharing
  * CVE-2022-1862: Inappropriate implementation in Extensions
  * CVE-2022-1863: Use after free in Tab Groups
  * CVE-2022-1864: Use after free in WebApp Installs
  * CVE-2022-1865: Use after free in Bookmarks
  * CVE-2022-1866: Use after free in Tablet Mode
  * CVE-2022-1867: Insufficient validation of untrusted input in Data Transfer
  * CVE-2022-1868: Inappropriate implementation in Extensions API
  * CVE-2022-1869: Type Confusion in V8
  * CVE-2022-1870: Use after free in App Service
  * CVE-2022-1871: Insufficient policy enforcement in File System API
  * CVE-2022-1872: Insufficient policy enforcement in Extensions API
  * CVE-2022-1873: Insufficient policy enforcement in COOP
  * CVE-2022-1874: Insufficient policy enforcement in Safe Browsing
  * CVE-2022-1875: Inappropriate implementation in PDF
  * CVE-2022-1876: Heap buffer overflow in DevTools
- Added patches:
  * chromium-102-compiler.patch
  * chromium-102-fenced_frame_utils-include.patch
  * chromium-102-regex_pattern-array.patch
  * chromium-102-swiftshader-template-instantiation.patch
  * chromium-102-symbolize-include.patch
  * ffmpeg-new-channel-layout.patch
- Removed patches:
  * chromium-100-compiler.patch
  * chromium-80-QuicStreamSendBuffer-deleted-move-constructor.patch
  * chromium-95-quiche-include.patch
  * chromium-fix-swiftshader-template.patch
  * chromium-missing-include-tuple.patch
  * chromium-webrtc-stats-missing-vector.patch
  * chromium-101-segmentation_platform-type.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654084800">- Disable ARM control flow integrity, it causes build issues
  at the moment
- Try a different SVG (black logo on GNOME)
- Removed patches:
  * chromium-third_party-symbolize-missing-include.patch
  (replaced by chromium-102-symbolize-include.patch)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654689600">- Switch to GTK4 on TW and Leap 15.4+ (boo#1200139)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1654862400">- Chromium 102.0.5005.115 (boo#1200423)
  * CVE-2022-2007: Use after free in WebGPU
  * CVE-2022-2008: Out of bounds memory access in WebGL
  * CVE-2022-2010: Out of bounds read in compositing
  * CVE-2022-2011: Use after free in ANGLE</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1656158400">- Chromium 103.0.5060.53 (boo#1200783)
  * CVE-2022-2156: Use after free in Base
  * CVE-2022-2157: Use after free in Interest groups
  * CVE-2022-2158: Type Confusion in V8
  * CVE-2022-2160: Insufficient policy enforcement in DevTools
  * CVE-2022-2161: Use after free in WebApp Provider
  * CVE-2022-2162: Insufficient policy enforcement in File System API
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * CVE-2022-2164: Inappropriate implementation in Extensions API
  * CVE-2022-2165: Insufficient data validation in URL formatting
- Added patches:
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-VirtualCursor-std-layout.patch
  * chromium-103-compiler.patch
- Removed patches:
  * chromium-102-compiler.patch
  * chromium-91-sql-standard-layout-type.patch
  * chromium-101-libxml-unbundle.patch
  * chromium-102-fenced_frame_utils-include.patch
  * chromium-102-swiftshader-template-instantiation.patch
  * chromium-102-symbolize-include.patch
  * chromium-97-arm-tflite-cast.patch
  * chromium-97-ScrollView-reference.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657195200">- Chromium 103.0.5060.66
  * no upstream release notes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657368000">- Chromium 103.0.5060.114 (boo#1201216)
  * CVE-2022-2294: Heap buffer overflow in WebRTC
  * CVE-2022-2295: Type Confusion in V8
  * CVE-2022-2296: Use after free in Chrome OS Shell</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1658318400">- Chromium 103.0.5060.134 (boo#1201679):
  * CVE-2022-2477 : Use after free in Guest View
  * CVE-2022-2478 : Use after free in PDF
  * CVE-2022-2479 : Insufficient validation of untrusted input in File
  * CVE-2022-2480 : Use after free in Service Worker API
  * CVE-2022-2481: Use after free in Views
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1658577600">- Switch back to Clang so that we can use BTI on aarch64
  * Gold is too old - doesn't understand BTI
  * LD crashes on aarch64
- Re-enable LTO
- Prepare move to FFmpeg 5 for new channel layout
  (requires 5.1+)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660046400">- Chromium 104.0.5112.79 (boo#1202075)
  * CVE-2022-2603: Use after free in Omnibox
  * CVE-2022-2604: Use after free in Safe Browsing
  * CVE-2022-2605: Out of bounds read in Dawn
  * CVE-2022-2606: Use after free in Managed devices API
  * CVE-2022-2607: Use after free in Tab Strip
  * CVE-2022-2608: Use after free in Overview Mode
  * CVE-2022-2609: Use after free in Nearby Share
  * CVE-2022-2610: Insufficient policy enforcement in Background Fetch
  * CVE-2022-2611: Inappropriate implementation in Fullscreen API
  * CVE-2022-2612: Side-channel information leakage in Keyboard input
  * CVE-2022-2613: Use after free in Input
  * CVE-2022-2614: Use after free in Sign-In Flow
  * CVE-2022-2615: Insufficient policy enforcement in Cookies
  * CVE-2022-2616: Inappropriate implementation in Extensions API
  * CVE-2022-2617: Use after free in Extensions API
  * CVE-2022-2618: Insufficient validation of untrusted input in Internals
  * CVE-2022-2619: Insufficient validation of untrusted input in Settings
  * CVE-2022-2620: Use after free in WebUI
  * CVE-2022-2621: Use after free in Extensions
  * CVE-2022-2622: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-2623: Use after free in Offline
  * CVE-2022-2624: Heap buffer overflow in PDF
- Added patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-104-tflite-system-zlib.patch
- Removed patches:
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-compiler.patch
- Use FFmpeg 5.1 on TW</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660651200">- Re-enable our version of chrome-wrapper
- Set no sandbox if root is being used (https://crbug.com/638180)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660824000">- Chromium 104.0.5112.101 (boo#1202509):
  * CVE-2022-2852: Use after free in FedCM
  * CVE-2022-2854: Use after free in SwiftShader
  * CVE-2022-2855: Use after free in ANGLE
  * CVE-2022-2857: Use after free in Blink
  * CVE-2022-2858: Use after free in Sign-In Flow
  * CVE-2022-2853: Heap buffer overflow in Downloads
  * CVE-2022-2856: Insufficient validation of untrusted input in Intents
  * CVE-2022-2859: Use after free in Chrome OS Shell
  * CVE-2022-2860: Insufficient policy enforcement in Cookies
  * CVE-2022-2861: Inappropriate implementation in Extensions API</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1661169600">- Fix quoting in chrome-wrapper, don't put cwd on LD_LIBRARY_PATH</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1662033600">- Update chromium-symbolic.svg: this fixes bsc#1202403.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1662638400">- Chromium 105.0.5195.102 (boo#1203102):
  * CVE-2022-3075: Insufficient data validation in Mojo
- Chromium 105.0.5195.52 (boo#1202964):
  * CVE-2022-3038: Use after free in Network Service
  * CVE-2022-3039: Use after free in WebSQL
  * CVE-2022-3040: Use after free in Layout
  * CVE-2022-3041: Use after free in WebSQL
  * CVE-2022-3042: Use after free in PhoneHub
  * CVE-2022-3043: Heap buffer overflow in Screen Capture
  * CVE-2022-3044: Inappropriate implementation in Site Isolation
  * CVE-2022-3045: Insufficient validation of untrusted input in V8
  * CVE-2022-3046: Use after free in Browser Tag
  * CVE-2022-3071: Use after free in Tab Strip
  * CVE-2022-3047: Insufficient policy enforcement in Extensions API
  * CVE-2022-3048: Inappropriate implementation in Chrome OS lockscreen
  * CVE-2022-3049: Use after free in SplitScreen
  * CVE-2022-3050: Heap buffer overflow in WebUI
  * CVE-2022-3051: Heap buffer overflow in Exosphere
  * CVE-2022-3052: Heap buffer overflow in Window Manager
  * CVE-2022-3053: Inappropriate implementation in Pointer Lock
  * CVE-2022-3054: Insufficient policy enforcement in DevTools
  * CVE-2022-3055: Use after free in Passwords
  * CVE-2022-3056: Insufficient policy enforcement in Content Security Policy
  * CVE-2022-3057: Inappropriate implementation in iframe Sandbox
  * CVE-2022-3058: Use after free in Sign-In Flow
- Added patches:
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Bitmap-include.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-wayland-1.20.patch
  * chromium-105-compiler.patch
- Removed patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-78-protobuf-RepeatedPtrField-export.patch</changelog>
</package>
<package pkgid="18416a0caadd281f9671126e49637f1ff6c28c68de0302e57a2d6525a10a8e82" name="chromium" arch="x86_64">
  <version epoch="0" ver="105.0.5195.102" rel="bp154.2.26.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1650024000">- Chromium 100.0.4896.127 (boo#1198509)
  * CVE-2022-1364: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1650542400">- Fixes for go 1.18</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1651665600">- Chromium 101.0.4951.54 (boo#1199118)
- Chromium 101.0.4951.41 (boo#1198917)
  * CVE-2022-1477: Use after free in Vulkan
  * CVE-2022-1478: Use after free in SwiftShader
  * CVE-2022-1479: Use after free in ANGLE
  * CVE-2022-1480: Use after free in Device API
  * CVE-2022-1481: Use after free in Sharing
  * CVE-2022-1482: Inappropriate implementation in WebGL
  * CVE-2022-1483: Heap buffer overflow in WebGPU
  * CVE-2022-1484: Heap buffer overflow in Web UI Settings
  * CVE-2022-1485: Use after free in File System API
  * CVE-2022-1486: Type Confusion in V8
  * CVE-2022-1487: Use after free in Ozone
  * CVE-2022-1488: Inappropriate implementation in Extensions API
  * CVE-2022-1489: Out of bounds memory access in UI Shelf
  * CVE-2022-1490: Use after free in Browser Switcher
  * CVE-2022-1491: Use after free in Bookmarks
  * CVE-2022-1492: Insufficient data validation in Blink Editing
  * CVE-2022-1493: Use after free in Dev Tools
  * CVE-2022-1494: Insufficient data validation in Trusted Types
  * CVE-2022-1495: Incorrect security UI in Downloads
  * CVE-2022-1496: Use after free in File Manager
  * CVE-2022-1497: Inappropriate implementation in Input
  * CVE-2022-1498: Inappropriate implementation in HTML Parser
  * CVE-2022-1499: Inappropriate implementation in WebAuthentication
  * CVE-2022-1500: Insufficient data validation in Dev Tools
  * CVE-2022-1501: Inappropriate implementation in iframe
- Added patches:
  * chromium-101-libxml-unbundle.patch
  * chromium-101-segmentation_platform-type.patch
- Removed patches:
  * chromium-100-SCTHashdanceMetadata-move.patch
  * chromium-100-GLImplementationParts-constexpr.patch
  * chromium-100-macro-typo.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1652270400">- Chromium 101.0.4951.64 (boo#1199409)
  * CVE-2022-1633: Use after free in Sharesheet
  * CVE-2022-1634: Use after free in Browser UI
  * CVE-2022-1635: Use after free in Permission Prompts
  * CVE-2022-1636: Use after free in Performance APIs
  * CVE-2022-1637: Inappropriate implementation in Web Contents
  * CVE-2022-1638: Heap buffer overflow in V8 Internationalization
  * CVE-2022-1639: Use after free in ANGLE
  * CVE-2022-1640: Use after free in Sharing
  * CVE-2022-1641: Use after free in Web UI Diagnostics</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1652616000">- Chromium 101.0.4951.67
  * fixes for other platforms</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1653652800">- Chromium 102.0.5001.61 (boo#1199893)
  * CVE-2022-1853: Use after free in Indexed DB
  * CVE-2022-1854: Use after free in ANGLE
  * CVE-2022-1855: Use after free in Messaging
  * CVE-2022-1856: Use after free in User Education
  * CVE-2022-1857: Insufficient policy enforcement in File System API
  * CVE-2022-1858: Out of bounds read in DevTools
  * CVE-2022-1859: Use after free in Performance Manager
  * CVE-2022-1860: Use after free in UI Foundations
  * CVE-2022-1861: Use after free in Sharing
  * CVE-2022-1862: Inappropriate implementation in Extensions
  * CVE-2022-1863: Use after free in Tab Groups
  * CVE-2022-1864: Use after free in WebApp Installs
  * CVE-2022-1865: Use after free in Bookmarks
  * CVE-2022-1866: Use after free in Tablet Mode
  * CVE-2022-1867: Insufficient validation of untrusted input in Data Transfer
  * CVE-2022-1868: Inappropriate implementation in Extensions API
  * CVE-2022-1869: Type Confusion in V8
  * CVE-2022-1870: Use after free in App Service
  * CVE-2022-1871: Insufficient policy enforcement in File System API
  * CVE-2022-1872: Insufficient policy enforcement in Extensions API
  * CVE-2022-1873: Insufficient policy enforcement in COOP
  * CVE-2022-1874: Insufficient policy enforcement in Safe Browsing
  * CVE-2022-1875: Inappropriate implementation in PDF
  * CVE-2022-1876: Heap buffer overflow in DevTools
- Added patches:
  * chromium-102-compiler.patch
  * chromium-102-fenced_frame_utils-include.patch
  * chromium-102-regex_pattern-array.patch
  * chromium-102-swiftshader-template-instantiation.patch
  * chromium-102-symbolize-include.patch
  * ffmpeg-new-channel-layout.patch
- Removed patches:
  * chromium-100-compiler.patch
  * chromium-80-QuicStreamSendBuffer-deleted-move-constructor.patch
  * chromium-95-quiche-include.patch
  * chromium-fix-swiftshader-template.patch
  * chromium-missing-include-tuple.patch
  * chromium-webrtc-stats-missing-vector.patch
  * chromium-101-segmentation_platform-type.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654084800">- Disable ARM control flow integrity, it causes build issues
  at the moment
- Try a different SVG (black logo on GNOME)
- Removed patches:
  * chromium-third_party-symbolize-missing-include.patch
  (replaced by chromium-102-symbolize-include.patch)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654689600">- Switch to GTK4 on TW and Leap 15.4+ (boo#1200139)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1654862400">- Chromium 102.0.5005.115 (boo#1200423)
  * CVE-2022-2007: Use after free in WebGPU
  * CVE-2022-2008: Out of bounds memory access in WebGL
  * CVE-2022-2010: Out of bounds read in compositing
  * CVE-2022-2011: Use after free in ANGLE</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1656158400">- Chromium 103.0.5060.53 (boo#1200783)
  * CVE-2022-2156: Use after free in Base
  * CVE-2022-2157: Use after free in Interest groups
  * CVE-2022-2158: Type Confusion in V8
  * CVE-2022-2160: Insufficient policy enforcement in DevTools
  * CVE-2022-2161: Use after free in WebApp Provider
  * CVE-2022-2162: Insufficient policy enforcement in File System API
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * CVE-2022-2164: Inappropriate implementation in Extensions API
  * CVE-2022-2165: Insufficient data validation in URL formatting
- Added patches:
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-VirtualCursor-std-layout.patch
  * chromium-103-compiler.patch
- Removed patches:
  * chromium-102-compiler.patch
  * chromium-91-sql-standard-layout-type.patch
  * chromium-101-libxml-unbundle.patch
  * chromium-102-fenced_frame_utils-include.patch
  * chromium-102-swiftshader-template-instantiation.patch
  * chromium-102-symbolize-include.patch
  * chromium-97-arm-tflite-cast.patch
  * chromium-97-ScrollView-reference.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657195200">- Chromium 103.0.5060.66
  * no upstream release notes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657368000">- Chromium 103.0.5060.114 (boo#1201216)
  * CVE-2022-2294: Heap buffer overflow in WebRTC
  * CVE-2022-2295: Type Confusion in V8
  * CVE-2022-2296: Use after free in Chrome OS Shell</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1658318400">- Chromium 103.0.5060.134 (boo#1201679):
  * CVE-2022-2477 : Use after free in Guest View
  * CVE-2022-2478 : Use after free in PDF
  * CVE-2022-2479 : Insufficient validation of untrusted input in File
  * CVE-2022-2480 : Use after free in Service Worker API
  * CVE-2022-2481: Use after free in Views
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1658577600">- Switch back to Clang so that we can use BTI on aarch64
  * Gold is too old - doesn't understand BTI
  * LD crashes on aarch64
- Re-enable LTO
- Prepare move to FFmpeg 5 for new channel layout
  (requires 5.1+)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660046400">- Chromium 104.0.5112.79 (boo#1202075)
  * CVE-2022-2603: Use after free in Omnibox
  * CVE-2022-2604: Use after free in Safe Browsing
  * CVE-2022-2605: Out of bounds read in Dawn
  * CVE-2022-2606: Use after free in Managed devices API
  * CVE-2022-2607: Use after free in Tab Strip
  * CVE-2022-2608: Use after free in Overview Mode
  * CVE-2022-2609: Use after free in Nearby Share
  * CVE-2022-2610: Insufficient policy enforcement in Background Fetch
  * CVE-2022-2611: Inappropriate implementation in Fullscreen API
  * CVE-2022-2612: Side-channel information leakage in Keyboard input
  * CVE-2022-2613: Use after free in Input
  * CVE-2022-2614: Use after free in Sign-In Flow
  * CVE-2022-2615: Insufficient policy enforcement in Cookies
  * CVE-2022-2616: Inappropriate implementation in Extensions API
  * CVE-2022-2617: Use after free in Extensions API
  * CVE-2022-2618: Insufficient validation of untrusted input in Internals
  * CVE-2022-2619: Insufficient validation of untrusted input in Settings
  * CVE-2022-2620: Use after free in WebUI
  * CVE-2022-2621: Use after free in Extensions
  * CVE-2022-2622: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-2623: Use after free in Offline
  * CVE-2022-2624: Heap buffer overflow in PDF
- Added patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-104-tflite-system-zlib.patch
- Removed patches:
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-compiler.patch
- Use FFmpeg 5.1 on TW</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660651200">- Re-enable our version of chrome-wrapper
- Set no sandbox if root is being used (https://crbug.com/638180)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660824000">- Chromium 104.0.5112.101 (boo#1202509):
  * CVE-2022-2852: Use after free in FedCM
  * CVE-2022-2854: Use after free in SwiftShader
  * CVE-2022-2855: Use after free in ANGLE
  * CVE-2022-2857: Use after free in Blink
  * CVE-2022-2858: Use after free in Sign-In Flow
  * CVE-2022-2853: Heap buffer overflow in Downloads
  * CVE-2022-2856: Insufficient validation of untrusted input in Intents
  * CVE-2022-2859: Use after free in Chrome OS Shell
  * CVE-2022-2860: Insufficient policy enforcement in Cookies
  * CVE-2022-2861: Inappropriate implementation in Extensions API</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1661169600">- Fix quoting in chrome-wrapper, don't put cwd on LD_LIBRARY_PATH</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1662033600">- Update chromium-symbolic.svg: this fixes bsc#1202403.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1662638400">- Chromium 105.0.5195.102 (boo#1203102):
  * CVE-2022-3075: Insufficient data validation in Mojo
- Chromium 105.0.5195.52 (boo#1202964):
  * CVE-2022-3038: Use after free in Network Service
  * CVE-2022-3039: Use after free in WebSQL
  * CVE-2022-3040: Use after free in Layout
  * CVE-2022-3041: Use after free in WebSQL
  * CVE-2022-3042: Use after free in PhoneHub
  * CVE-2022-3043: Heap buffer overflow in Screen Capture
  * CVE-2022-3044: Inappropriate implementation in Site Isolation
  * CVE-2022-3045: Insufficient validation of untrusted input in V8
  * CVE-2022-3046: Use after free in Browser Tag
  * CVE-2022-3071: Use after free in Tab Strip
  * CVE-2022-3047: Insufficient policy enforcement in Extensions API
  * CVE-2022-3048: Inappropriate implementation in Chrome OS lockscreen
  * CVE-2022-3049: Use after free in SplitScreen
  * CVE-2022-3050: Heap buffer overflow in WebUI
  * CVE-2022-3051: Heap buffer overflow in Exosphere
  * CVE-2022-3052: Heap buffer overflow in Window Manager
  * CVE-2022-3053: Inappropriate implementation in Pointer Lock
  * CVE-2022-3054: Insufficient policy enforcement in DevTools
  * CVE-2022-3055: Use after free in Passwords
  * CVE-2022-3056: Insufficient policy enforcement in Content Security Policy
  * CVE-2022-3057: Inappropriate implementation in iframe Sandbox
  * CVE-2022-3058: Use after free in Sign-In Flow
- Added patches:
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Bitmap-include.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-wayland-1.20.patch
  * chromium-105-compiler.patch
- Removed patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-78-protobuf-RepeatedPtrField-export.patch</changelog>
</package>
<package pkgid="b95cda1943235e5786c3c541ba5b9fb3326b322be25ffd207e0fef28bf67311b" name="chromium" arch="aarch64">
  <version epoch="0" ver="105.0.5195.127" rel="bp154.2.29.1"/>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1650542400">- Fixes for go 1.18</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1651665600">- Chromium 101.0.4951.54 (boo#1199118)
- Chromium 101.0.4951.41 (boo#1198917)
  * CVE-2022-1477: Use after free in Vulkan
  * CVE-2022-1478: Use after free in SwiftShader
  * CVE-2022-1479: Use after free in ANGLE
  * CVE-2022-1480: Use after free in Device API
  * CVE-2022-1481: Use after free in Sharing
  * CVE-2022-1482: Inappropriate implementation in WebGL
  * CVE-2022-1483: Heap buffer overflow in WebGPU
  * CVE-2022-1484: Heap buffer overflow in Web UI Settings
  * CVE-2022-1485: Use after free in File System API
  * CVE-2022-1486: Type Confusion in V8
  * CVE-2022-1487: Use after free in Ozone
  * CVE-2022-1488: Inappropriate implementation in Extensions API
  * CVE-2022-1489: Out of bounds memory access in UI Shelf
  * CVE-2022-1490: Use after free in Browser Switcher
  * CVE-2022-1491: Use after free in Bookmarks
  * CVE-2022-1492: Insufficient data validation in Blink Editing
  * CVE-2022-1493: Use after free in Dev Tools
  * CVE-2022-1494: Insufficient data validation in Trusted Types
  * CVE-2022-1495: Incorrect security UI in Downloads
  * CVE-2022-1496: Use after free in File Manager
  * CVE-2022-1497: Inappropriate implementation in Input
  * CVE-2022-1498: Inappropriate implementation in HTML Parser
  * CVE-2022-1499: Inappropriate implementation in WebAuthentication
  * CVE-2022-1500: Insufficient data validation in Dev Tools
  * CVE-2022-1501: Inappropriate implementation in iframe
- Added patches:
  * chromium-101-libxml-unbundle.patch
  * chromium-101-segmentation_platform-type.patch
- Removed patches:
  * chromium-100-SCTHashdanceMetadata-move.patch
  * chromium-100-GLImplementationParts-constexpr.patch
  * chromium-100-macro-typo.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1652270400">- Chromium 101.0.4951.64 (boo#1199409)
  * CVE-2022-1633: Use after free in Sharesheet
  * CVE-2022-1634: Use after free in Browser UI
  * CVE-2022-1635: Use after free in Permission Prompts
  * CVE-2022-1636: Use after free in Performance APIs
  * CVE-2022-1637: Inappropriate implementation in Web Contents
  * CVE-2022-1638: Heap buffer overflow in V8 Internationalization
  * CVE-2022-1639: Use after free in ANGLE
  * CVE-2022-1640: Use after free in Sharing
  * CVE-2022-1641: Use after free in Web UI Diagnostics</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1652616000">- Chromium 101.0.4951.67
  * fixes for other platforms</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1653652800">- Chromium 102.0.5001.61 (boo#1199893)
  * CVE-2022-1853: Use after free in Indexed DB
  * CVE-2022-1854: Use after free in ANGLE
  * CVE-2022-1855: Use after free in Messaging
  * CVE-2022-1856: Use after free in User Education
  * CVE-2022-1857: Insufficient policy enforcement in File System API
  * CVE-2022-1858: Out of bounds read in DevTools
  * CVE-2022-1859: Use after free in Performance Manager
  * CVE-2022-1860: Use after free in UI Foundations
  * CVE-2022-1861: Use after free in Sharing
  * CVE-2022-1862: Inappropriate implementation in Extensions
  * CVE-2022-1863: Use after free in Tab Groups
  * CVE-2022-1864: Use after free in WebApp Installs
  * CVE-2022-1865: Use after free in Bookmarks
  * CVE-2022-1866: Use after free in Tablet Mode
  * CVE-2022-1867: Insufficient validation of untrusted input in Data Transfer
  * CVE-2022-1868: Inappropriate implementation in Extensions API
  * CVE-2022-1869: Type Confusion in V8
  * CVE-2022-1870: Use after free in App Service
  * CVE-2022-1871: Insufficient policy enforcement in File System API
  * CVE-2022-1872: Insufficient policy enforcement in Extensions API
  * CVE-2022-1873: Insufficient policy enforcement in COOP
  * CVE-2022-1874: Insufficient policy enforcement in Safe Browsing
  * CVE-2022-1875: Inappropriate implementation in PDF
  * CVE-2022-1876: Heap buffer overflow in DevTools
- Added patches:
  * chromium-102-compiler.patch
  * chromium-102-fenced_frame_utils-include.patch
  * chromium-102-regex_pattern-array.patch
  * chromium-102-swiftshader-template-instantiation.patch
  * chromium-102-symbolize-include.patch
  * ffmpeg-new-channel-layout.patch
- Removed patches:
  * chromium-100-compiler.patch
  * chromium-80-QuicStreamSendBuffer-deleted-move-constructor.patch
  * chromium-95-quiche-include.patch
  * chromium-fix-swiftshader-template.patch
  * chromium-missing-include-tuple.patch
  * chromium-webrtc-stats-missing-vector.patch
  * chromium-101-segmentation_platform-type.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654084800">- Disable ARM control flow integrity, it causes build issues
  at the moment
- Try a different SVG (black logo on GNOME)
- Removed patches:
  * chromium-third_party-symbolize-missing-include.patch
  (replaced by chromium-102-symbolize-include.patch)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654689600">- Switch to GTK4 on TW and Leap 15.4+ (boo#1200139)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1654862400">- Chromium 102.0.5005.115 (boo#1200423)
  * CVE-2022-2007: Use after free in WebGPU
  * CVE-2022-2008: Out of bounds memory access in WebGL
  * CVE-2022-2010: Out of bounds read in compositing
  * CVE-2022-2011: Use after free in ANGLE</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1656158400">- Chromium 103.0.5060.53 (boo#1200783)
  * CVE-2022-2156: Use after free in Base
  * CVE-2022-2157: Use after free in Interest groups
  * CVE-2022-2158: Type Confusion in V8
  * CVE-2022-2160: Insufficient policy enforcement in DevTools
  * CVE-2022-2161: Use after free in WebApp Provider
  * CVE-2022-2162: Insufficient policy enforcement in File System API
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * CVE-2022-2164: Inappropriate implementation in Extensions API
  * CVE-2022-2165: Insufficient data validation in URL formatting
- Added patches:
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-VirtualCursor-std-layout.patch
  * chromium-103-compiler.patch
- Removed patches:
  * chromium-102-compiler.patch
  * chromium-91-sql-standard-layout-type.patch
  * chromium-101-libxml-unbundle.patch
  * chromium-102-fenced_frame_utils-include.patch
  * chromium-102-swiftshader-template-instantiation.patch
  * chromium-102-symbolize-include.patch
  * chromium-97-arm-tflite-cast.patch
  * chromium-97-ScrollView-reference.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657195200">- Chromium 103.0.5060.66
  * no upstream release notes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657368000">- Chromium 103.0.5060.114 (boo#1201216)
  * CVE-2022-2294: Heap buffer overflow in WebRTC
  * CVE-2022-2295: Type Confusion in V8
  * CVE-2022-2296: Use after free in Chrome OS Shell</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1658318400">- Chromium 103.0.5060.134 (boo#1201679):
  * CVE-2022-2477 : Use after free in Guest View
  * CVE-2022-2478 : Use after free in PDF
  * CVE-2022-2479 : Insufficient validation of untrusted input in File
  * CVE-2022-2480 : Use after free in Service Worker API
  * CVE-2022-2481: Use after free in Views
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1658577600">- Switch back to Clang so that we can use BTI on aarch64
  * Gold is too old - doesn't understand BTI
  * LD crashes on aarch64
- Re-enable LTO
- Prepare move to FFmpeg 5 for new channel layout
  (requires 5.1+)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660046400">- Chromium 104.0.5112.79 (boo#1202075)
  * CVE-2022-2603: Use after free in Omnibox
  * CVE-2022-2604: Use after free in Safe Browsing
  * CVE-2022-2605: Out of bounds read in Dawn
  * CVE-2022-2606: Use after free in Managed devices API
  * CVE-2022-2607: Use after free in Tab Strip
  * CVE-2022-2608: Use after free in Overview Mode
  * CVE-2022-2609: Use after free in Nearby Share
  * CVE-2022-2610: Insufficient policy enforcement in Background Fetch
  * CVE-2022-2611: Inappropriate implementation in Fullscreen API
  * CVE-2022-2612: Side-channel information leakage in Keyboard input
  * CVE-2022-2613: Use after free in Input
  * CVE-2022-2614: Use after free in Sign-In Flow
  * CVE-2022-2615: Insufficient policy enforcement in Cookies
  * CVE-2022-2616: Inappropriate implementation in Extensions API
  * CVE-2022-2617: Use after free in Extensions API
  * CVE-2022-2618: Insufficient validation of untrusted input in Internals
  * CVE-2022-2619: Insufficient validation of untrusted input in Settings
  * CVE-2022-2620: Use after free in WebUI
  * CVE-2022-2621: Use after free in Extensions
  * CVE-2022-2622: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-2623: Use after free in Offline
  * CVE-2022-2624: Heap buffer overflow in PDF
- Added patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-104-tflite-system-zlib.patch
- Removed patches:
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-compiler.patch
- Use FFmpeg 5.1 on TW</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660651200">- Re-enable our version of chrome-wrapper
- Set no sandbox if root is being used (https://crbug.com/638180)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660824000">- Chromium 104.0.5112.101 (boo#1202509):
  * CVE-2022-2852: Use after free in FedCM
  * CVE-2022-2854: Use after free in SwiftShader
  * CVE-2022-2855: Use after free in ANGLE
  * CVE-2022-2857: Use after free in Blink
  * CVE-2022-2858: Use after free in Sign-In Flow
  * CVE-2022-2853: Heap buffer overflow in Downloads
  * CVE-2022-2856: Insufficient validation of untrusted input in Intents
  * CVE-2022-2859: Use after free in Chrome OS Shell
  * CVE-2022-2860: Insufficient policy enforcement in Cookies
  * CVE-2022-2861: Inappropriate implementation in Extensions API</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1661169600">- Fix quoting in chrome-wrapper, don't put cwd on LD_LIBRARY_PATH</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1662033600">- Update chromium-symbolic.svg: this fixes bsc#1202403.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1662638400">- Chromium 105.0.5195.102 (boo#1203102):
  * CVE-2022-3075: Insufficient data validation in Mojo
- Chromium 105.0.5195.52 (boo#1202964):
  * CVE-2022-3038: Use after free in Network Service
  * CVE-2022-3039: Use after free in WebSQL
  * CVE-2022-3040: Use after free in Layout
  * CVE-2022-3041: Use after free in WebSQL
  * CVE-2022-3042: Use after free in PhoneHub
  * CVE-2022-3043: Heap buffer overflow in Screen Capture
  * CVE-2022-3044: Inappropriate implementation in Site Isolation
  * CVE-2022-3045: Insufficient validation of untrusted input in V8
  * CVE-2022-3046: Use after free in Browser Tag
  * CVE-2022-3071: Use after free in Tab Strip
  * CVE-2022-3047: Insufficient policy enforcement in Extensions API
  * CVE-2022-3048: Inappropriate implementation in Chrome OS lockscreen
  * CVE-2022-3049: Use after free in SplitScreen
  * CVE-2022-3050: Heap buffer overflow in WebUI
  * CVE-2022-3051: Heap buffer overflow in Exosphere
  * CVE-2022-3052: Heap buffer overflow in Window Manager
  * CVE-2022-3053: Inappropriate implementation in Pointer Lock
  * CVE-2022-3054: Insufficient policy enforcement in DevTools
  * CVE-2022-3055: Use after free in Passwords
  * CVE-2022-3056: Insufficient policy enforcement in Content Security Policy
  * CVE-2022-3057: Inappropriate implementation in iframe Sandbox
  * CVE-2022-3058: Use after free in Sign-In Flow
- Added patches:
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Bitmap-include.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-wayland-1.20.patch
  * chromium-105-compiler.patch
- Removed patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-78-protobuf-RepeatedPtrField-export.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663156800">- Chromium 105.0.5195.127 (boo#1203419):
  * CVE-2022-3195: Out of bounds write in Storage
  * CVE-2022-3196: Use after free in PDF
  * CVE-2022-3197: Use after free in PDF
  * CVE-2022-3198: Use after free in PDF
  * CVE-2022-3199: Use after free in Frames
  * CVE-2022-3200: Heap buffer overflow in Internals
  * CVE-2022-3201: Insufficient validation of untrusted input in DevTools
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
</package>
<package pkgid="5c9a6a584ab244285f11a6244b26ceb964088f7f5b12b6e5792971361d575fbf" name="chromium" arch="src">
  <version epoch="0" ver="105.0.5195.127" rel="bp154.2.29.1"/>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1650542400">- Fixes for go 1.18</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1651665600">- Chromium 101.0.4951.54 (boo#1199118)
- Chromium 101.0.4951.41 (boo#1198917)
  * CVE-2022-1477: Use after free in Vulkan
  * CVE-2022-1478: Use after free in SwiftShader
  * CVE-2022-1479: Use after free in ANGLE
  * CVE-2022-1480: Use after free in Device API
  * CVE-2022-1481: Use after free in Sharing
  * CVE-2022-1482: Inappropriate implementation in WebGL
  * CVE-2022-1483: Heap buffer overflow in WebGPU
  * CVE-2022-1484: Heap buffer overflow in Web UI Settings
  * CVE-2022-1485: Use after free in File System API
  * CVE-2022-1486: Type Confusion in V8
  * CVE-2022-1487: Use after free in Ozone
  * CVE-2022-1488: Inappropriate implementation in Extensions API
  * CVE-2022-1489: Out of bounds memory access in UI Shelf
  * CVE-2022-1490: Use after free in Browser Switcher
  * CVE-2022-1491: Use after free in Bookmarks
  * CVE-2022-1492: Insufficient data validation in Blink Editing
  * CVE-2022-1493: Use after free in Dev Tools
  * CVE-2022-1494: Insufficient data validation in Trusted Types
  * CVE-2022-1495: Incorrect security UI in Downloads
  * CVE-2022-1496: Use after free in File Manager
  * CVE-2022-1497: Inappropriate implementation in Input
  * CVE-2022-1498: Inappropriate implementation in HTML Parser
  * CVE-2022-1499: Inappropriate implementation in WebAuthentication
  * CVE-2022-1500: Insufficient data validation in Dev Tools
  * CVE-2022-1501: Inappropriate implementation in iframe
- Added patches:
  * chromium-101-libxml-unbundle.patch
  * chromium-101-segmentation_platform-type.patch
- Removed patches:
  * chromium-100-SCTHashdanceMetadata-move.patch
  * chromium-100-GLImplementationParts-constexpr.patch
  * chromium-100-macro-typo.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1652270400">- Chromium 101.0.4951.64 (boo#1199409)
  * CVE-2022-1633: Use after free in Sharesheet
  * CVE-2022-1634: Use after free in Browser UI
  * CVE-2022-1635: Use after free in Permission Prompts
  * CVE-2022-1636: Use after free in Performance APIs
  * CVE-2022-1637: Inappropriate implementation in Web Contents
  * CVE-2022-1638: Heap buffer overflow in V8 Internationalization
  * CVE-2022-1639: Use after free in ANGLE
  * CVE-2022-1640: Use after free in Sharing
  * CVE-2022-1641: Use after free in Web UI Diagnostics</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1652616000">- Chromium 101.0.4951.67
  * fixes for other platforms</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1653652800">- Chromium 102.0.5001.61 (boo#1199893)
  * CVE-2022-1853: Use after free in Indexed DB
  * CVE-2022-1854: Use after free in ANGLE
  * CVE-2022-1855: Use after free in Messaging
  * CVE-2022-1856: Use after free in User Education
  * CVE-2022-1857: Insufficient policy enforcement in File System API
  * CVE-2022-1858: Out of bounds read in DevTools
  * CVE-2022-1859: Use after free in Performance Manager
  * CVE-2022-1860: Use after free in UI Foundations
  * CVE-2022-1861: Use after free in Sharing
  * CVE-2022-1862: Inappropriate implementation in Extensions
  * CVE-2022-1863: Use after free in Tab Groups
  * CVE-2022-1864: Use after free in WebApp Installs
  * CVE-2022-1865: Use after free in Bookmarks
  * CVE-2022-1866: Use after free in Tablet Mode
  * CVE-2022-1867: Insufficient validation of untrusted input in Data Transfer
  * CVE-2022-1868: Inappropriate implementation in Extensions API
  * CVE-2022-1869: Type Confusion in V8
  * CVE-2022-1870: Use after free in App Service
  * CVE-2022-1871: Insufficient policy enforcement in File System API
  * CVE-2022-1872: Insufficient policy enforcement in Extensions API
  * CVE-2022-1873: Insufficient policy enforcement in COOP
  * CVE-2022-1874: Insufficient policy enforcement in Safe Browsing
  * CVE-2022-1875: Inappropriate implementation in PDF
  * CVE-2022-1876: Heap buffer overflow in DevTools
- Added patches:
  * chromium-102-compiler.patch
  * chromium-102-fenced_frame_utils-include.patch
  * chromium-102-regex_pattern-array.patch
  * chromium-102-swiftshader-template-instantiation.patch
  * chromium-102-symbolize-include.patch
  * ffmpeg-new-channel-layout.patch
- Removed patches:
  * chromium-100-compiler.patch
  * chromium-80-QuicStreamSendBuffer-deleted-move-constructor.patch
  * chromium-95-quiche-include.patch
  * chromium-fix-swiftshader-template.patch
  * chromium-missing-include-tuple.patch
  * chromium-webrtc-stats-missing-vector.patch
  * chromium-101-segmentation_platform-type.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654084800">- Disable ARM control flow integrity, it causes build issues
  at the moment
- Try a different SVG (black logo on GNOME)
- Removed patches:
  * chromium-third_party-symbolize-missing-include.patch
  (replaced by chromium-102-symbolize-include.patch)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654689600">- Switch to GTK4 on TW and Leap 15.4+ (boo#1200139)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1654862400">- Chromium 102.0.5005.115 (boo#1200423)
  * CVE-2022-2007: Use after free in WebGPU
  * CVE-2022-2008: Out of bounds memory access in WebGL
  * CVE-2022-2010: Out of bounds read in compositing
  * CVE-2022-2011: Use after free in ANGLE</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1656158400">- Chromium 103.0.5060.53 (boo#1200783)
  * CVE-2022-2156: Use after free in Base
  * CVE-2022-2157: Use after free in Interest groups
  * CVE-2022-2158: Type Confusion in V8
  * CVE-2022-2160: Insufficient policy enforcement in DevTools
  * CVE-2022-2161: Use after free in WebApp Provider
  * CVE-2022-2162: Insufficient policy enforcement in File System API
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * CVE-2022-2164: Inappropriate implementation in Extensions API
  * CVE-2022-2165: Insufficient data validation in URL formatting
- Added patches:
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-VirtualCursor-std-layout.patch
  * chromium-103-compiler.patch
- Removed patches:
  * chromium-102-compiler.patch
  * chromium-91-sql-standard-layout-type.patch
  * chromium-101-libxml-unbundle.patch
  * chromium-102-fenced_frame_utils-include.patch
  * chromium-102-swiftshader-template-instantiation.patch
  * chromium-102-symbolize-include.patch
  * chromium-97-arm-tflite-cast.patch
  * chromium-97-ScrollView-reference.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657195200">- Chromium 103.0.5060.66
  * no upstream release notes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657368000">- Chromium 103.0.5060.114 (boo#1201216)
  * CVE-2022-2294: Heap buffer overflow in WebRTC
  * CVE-2022-2295: Type Confusion in V8
  * CVE-2022-2296: Use after free in Chrome OS Shell</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1658318400">- Chromium 103.0.5060.134 (boo#1201679):
  * CVE-2022-2477 : Use after free in Guest View
  * CVE-2022-2478 : Use after free in PDF
  * CVE-2022-2479 : Insufficient validation of untrusted input in File
  * CVE-2022-2480 : Use after free in Service Worker API
  * CVE-2022-2481: Use after free in Views
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1658577600">- Switch back to Clang so that we can use BTI on aarch64
  * Gold is too old - doesn't understand BTI
  * LD crashes on aarch64
- Re-enable LTO
- Prepare move to FFmpeg 5 for new channel layout
  (requires 5.1+)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660046400">- Chromium 104.0.5112.79 (boo#1202075)
  * CVE-2022-2603: Use after free in Omnibox
  * CVE-2022-2604: Use after free in Safe Browsing
  * CVE-2022-2605: Out of bounds read in Dawn
  * CVE-2022-2606: Use after free in Managed devices API
  * CVE-2022-2607: Use after free in Tab Strip
  * CVE-2022-2608: Use after free in Overview Mode
  * CVE-2022-2609: Use after free in Nearby Share
  * CVE-2022-2610: Insufficient policy enforcement in Background Fetch
  * CVE-2022-2611: Inappropriate implementation in Fullscreen API
  * CVE-2022-2612: Side-channel information leakage in Keyboard input
  * CVE-2022-2613: Use after free in Input
  * CVE-2022-2614: Use after free in Sign-In Flow
  * CVE-2022-2615: Insufficient policy enforcement in Cookies
  * CVE-2022-2616: Inappropriate implementation in Extensions API
  * CVE-2022-2617: Use after free in Extensions API
  * CVE-2022-2618: Insufficient validation of untrusted input in Internals
  * CVE-2022-2619: Insufficient validation of untrusted input in Settings
  * CVE-2022-2620: Use after free in WebUI
  * CVE-2022-2621: Use after free in Extensions
  * CVE-2022-2622: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-2623: Use after free in Offline
  * CVE-2022-2624: Heap buffer overflow in PDF
- Added patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-104-tflite-system-zlib.patch
- Removed patches:
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-compiler.patch
- Use FFmpeg 5.1 on TW</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660651200">- Re-enable our version of chrome-wrapper
- Set no sandbox if root is being used (https://crbug.com/638180)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660824000">- Chromium 104.0.5112.101 (boo#1202509):
  * CVE-2022-2852: Use after free in FedCM
  * CVE-2022-2854: Use after free in SwiftShader
  * CVE-2022-2855: Use after free in ANGLE
  * CVE-2022-2857: Use after free in Blink
  * CVE-2022-2858: Use after free in Sign-In Flow
  * CVE-2022-2853: Heap buffer overflow in Downloads
  * CVE-2022-2856: Insufficient validation of untrusted input in Intents
  * CVE-2022-2859: Use after free in Chrome OS Shell
  * CVE-2022-2860: Insufficient policy enforcement in Cookies
  * CVE-2022-2861: Inappropriate implementation in Extensions API</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1661169600">- Fix quoting in chrome-wrapper, don't put cwd on LD_LIBRARY_PATH</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1662033600">- Update chromium-symbolic.svg: this fixes bsc#1202403.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1662638400">- Chromium 105.0.5195.102 (boo#1203102):
  * CVE-2022-3075: Insufficient data validation in Mojo
- Chromium 105.0.5195.52 (boo#1202964):
  * CVE-2022-3038: Use after free in Network Service
  * CVE-2022-3039: Use after free in WebSQL
  * CVE-2022-3040: Use after free in Layout
  * CVE-2022-3041: Use after free in WebSQL
  * CVE-2022-3042: Use after free in PhoneHub
  * CVE-2022-3043: Heap buffer overflow in Screen Capture
  * CVE-2022-3044: Inappropriate implementation in Site Isolation
  * CVE-2022-3045: Insufficient validation of untrusted input in V8
  * CVE-2022-3046: Use after free in Browser Tag
  * CVE-2022-3071: Use after free in Tab Strip
  * CVE-2022-3047: Insufficient policy enforcement in Extensions API
  * CVE-2022-3048: Inappropriate implementation in Chrome OS lockscreen
  * CVE-2022-3049: Use after free in SplitScreen
  * CVE-2022-3050: Heap buffer overflow in WebUI
  * CVE-2022-3051: Heap buffer overflow in Exosphere
  * CVE-2022-3052: Heap buffer overflow in Window Manager
  * CVE-2022-3053: Inappropriate implementation in Pointer Lock
  * CVE-2022-3054: Insufficient policy enforcement in DevTools
  * CVE-2022-3055: Use after free in Passwords
  * CVE-2022-3056: Insufficient policy enforcement in Content Security Policy
  * CVE-2022-3057: Inappropriate implementation in iframe Sandbox
  * CVE-2022-3058: Use after free in Sign-In Flow
- Added patches:
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Bitmap-include.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-wayland-1.20.patch
  * chromium-105-compiler.patch
- Removed patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-78-protobuf-RepeatedPtrField-export.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663156800">- Chromium 105.0.5195.127 (boo#1203419):
  * CVE-2022-3195: Out of bounds write in Storage
  * CVE-2022-3196: Use after free in PDF
  * CVE-2022-3197: Use after free in PDF
  * CVE-2022-3198: Use after free in PDF
  * CVE-2022-3199: Use after free in Frames
  * CVE-2022-3200: Heap buffer overflow in Internals
  * CVE-2022-3201: Insufficient validation of untrusted input in DevTools
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
</package>
<package pkgid="4a98817da85f42c099840699ecfd00f15436937554c0ce7abd083a5ad8fe1b5f" name="chromium" arch="x86_64">
  <version epoch="0" ver="105.0.5195.127" rel="bp154.2.29.1"/>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1650542400">- Fixes for go 1.18</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1651665600">- Chromium 101.0.4951.54 (boo#1199118)
- Chromium 101.0.4951.41 (boo#1198917)
  * CVE-2022-1477: Use after free in Vulkan
  * CVE-2022-1478: Use after free in SwiftShader
  * CVE-2022-1479: Use after free in ANGLE
  * CVE-2022-1480: Use after free in Device API
  * CVE-2022-1481: Use after free in Sharing
  * CVE-2022-1482: Inappropriate implementation in WebGL
  * CVE-2022-1483: Heap buffer overflow in WebGPU
  * CVE-2022-1484: Heap buffer overflow in Web UI Settings
  * CVE-2022-1485: Use after free in File System API
  * CVE-2022-1486: Type Confusion in V8
  * CVE-2022-1487: Use after free in Ozone
  * CVE-2022-1488: Inappropriate implementation in Extensions API
  * CVE-2022-1489: Out of bounds memory access in UI Shelf
  * CVE-2022-1490: Use after free in Browser Switcher
  * CVE-2022-1491: Use after free in Bookmarks
  * CVE-2022-1492: Insufficient data validation in Blink Editing
  * CVE-2022-1493: Use after free in Dev Tools
  * CVE-2022-1494: Insufficient data validation in Trusted Types
  * CVE-2022-1495: Incorrect security UI in Downloads
  * CVE-2022-1496: Use after free in File Manager
  * CVE-2022-1497: Inappropriate implementation in Input
  * CVE-2022-1498: Inappropriate implementation in HTML Parser
  * CVE-2022-1499: Inappropriate implementation in WebAuthentication
  * CVE-2022-1500: Insufficient data validation in Dev Tools
  * CVE-2022-1501: Inappropriate implementation in iframe
- Added patches:
  * chromium-101-libxml-unbundle.patch
  * chromium-101-segmentation_platform-type.patch
- Removed patches:
  * chromium-100-SCTHashdanceMetadata-move.patch
  * chromium-100-GLImplementationParts-constexpr.patch
  * chromium-100-macro-typo.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1652270400">- Chromium 101.0.4951.64 (boo#1199409)
  * CVE-2022-1633: Use after free in Sharesheet
  * CVE-2022-1634: Use after free in Browser UI
  * CVE-2022-1635: Use after free in Permission Prompts
  * CVE-2022-1636: Use after free in Performance APIs
  * CVE-2022-1637: Inappropriate implementation in Web Contents
  * CVE-2022-1638: Heap buffer overflow in V8 Internationalization
  * CVE-2022-1639: Use after free in ANGLE
  * CVE-2022-1640: Use after free in Sharing
  * CVE-2022-1641: Use after free in Web UI Diagnostics</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1652616000">- Chromium 101.0.4951.67
  * fixes for other platforms</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1653652800">- Chromium 102.0.5001.61 (boo#1199893)
  * CVE-2022-1853: Use after free in Indexed DB
  * CVE-2022-1854: Use after free in ANGLE
  * CVE-2022-1855: Use after free in Messaging
  * CVE-2022-1856: Use after free in User Education
  * CVE-2022-1857: Insufficient policy enforcement in File System API
  * CVE-2022-1858: Out of bounds read in DevTools
  * CVE-2022-1859: Use after free in Performance Manager
  * CVE-2022-1860: Use after free in UI Foundations
  * CVE-2022-1861: Use after free in Sharing
  * CVE-2022-1862: Inappropriate implementation in Extensions
  * CVE-2022-1863: Use after free in Tab Groups
  * CVE-2022-1864: Use after free in WebApp Installs
  * CVE-2022-1865: Use after free in Bookmarks
  * CVE-2022-1866: Use after free in Tablet Mode
  * CVE-2022-1867: Insufficient validation of untrusted input in Data Transfer
  * CVE-2022-1868: Inappropriate implementation in Extensions API
  * CVE-2022-1869: Type Confusion in V8
  * CVE-2022-1870: Use after free in App Service
  * CVE-2022-1871: Insufficient policy enforcement in File System API
  * CVE-2022-1872: Insufficient policy enforcement in Extensions API
  * CVE-2022-1873: Insufficient policy enforcement in COOP
  * CVE-2022-1874: Insufficient policy enforcement in Safe Browsing
  * CVE-2022-1875: Inappropriate implementation in PDF
  * CVE-2022-1876: Heap buffer overflow in DevTools
- Added patches:
  * chromium-102-compiler.patch
  * chromium-102-fenced_frame_utils-include.patch
  * chromium-102-regex_pattern-array.patch
  * chromium-102-swiftshader-template-instantiation.patch
  * chromium-102-symbolize-include.patch
  * ffmpeg-new-channel-layout.patch
- Removed patches:
  * chromium-100-compiler.patch
  * chromium-80-QuicStreamSendBuffer-deleted-move-constructor.patch
  * chromium-95-quiche-include.patch
  * chromium-fix-swiftshader-template.patch
  * chromium-missing-include-tuple.patch
  * chromium-webrtc-stats-missing-vector.patch
  * chromium-101-segmentation_platform-type.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654084800">- Disable ARM control flow integrity, it causes build issues
  at the moment
- Try a different SVG (black logo on GNOME)
- Removed patches:
  * chromium-third_party-symbolize-missing-include.patch
  (replaced by chromium-102-symbolize-include.patch)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654689600">- Switch to GTK4 on TW and Leap 15.4+ (boo#1200139)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1654862400">- Chromium 102.0.5005.115 (boo#1200423)
  * CVE-2022-2007: Use after free in WebGPU
  * CVE-2022-2008: Out of bounds memory access in WebGL
  * CVE-2022-2010: Out of bounds read in compositing
  * CVE-2022-2011: Use after free in ANGLE</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1656158400">- Chromium 103.0.5060.53 (boo#1200783)
  * CVE-2022-2156: Use after free in Base
  * CVE-2022-2157: Use after free in Interest groups
  * CVE-2022-2158: Type Confusion in V8
  * CVE-2022-2160: Insufficient policy enforcement in DevTools
  * CVE-2022-2161: Use after free in WebApp Provider
  * CVE-2022-2162: Insufficient policy enforcement in File System API
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * CVE-2022-2164: Inappropriate implementation in Extensions API
  * CVE-2022-2165: Insufficient data validation in URL formatting
- Added patches:
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-VirtualCursor-std-layout.patch
  * chromium-103-compiler.patch
- Removed patches:
  * chromium-102-compiler.patch
  * chromium-91-sql-standard-layout-type.patch
  * chromium-101-libxml-unbundle.patch
  * chromium-102-fenced_frame_utils-include.patch
  * chromium-102-swiftshader-template-instantiation.patch
  * chromium-102-symbolize-include.patch
  * chromium-97-arm-tflite-cast.patch
  * chromium-97-ScrollView-reference.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657195200">- Chromium 103.0.5060.66
  * no upstream release notes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657368000">- Chromium 103.0.5060.114 (boo#1201216)
  * CVE-2022-2294: Heap buffer overflow in WebRTC
  * CVE-2022-2295: Type Confusion in V8
  * CVE-2022-2296: Use after free in Chrome OS Shell</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1658318400">- Chromium 103.0.5060.134 (boo#1201679):
  * CVE-2022-2477 : Use after free in Guest View
  * CVE-2022-2478 : Use after free in PDF
  * CVE-2022-2479 : Insufficient validation of untrusted input in File
  * CVE-2022-2480 : Use after free in Service Worker API
  * CVE-2022-2481: Use after free in Views
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1658577600">- Switch back to Clang so that we can use BTI on aarch64
  * Gold is too old - doesn't understand BTI
  * LD crashes on aarch64
- Re-enable LTO
- Prepare move to FFmpeg 5 for new channel layout
  (requires 5.1+)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660046400">- Chromium 104.0.5112.79 (boo#1202075)
  * CVE-2022-2603: Use after free in Omnibox
  * CVE-2022-2604: Use after free in Safe Browsing
  * CVE-2022-2605: Out of bounds read in Dawn
  * CVE-2022-2606: Use after free in Managed devices API
  * CVE-2022-2607: Use after free in Tab Strip
  * CVE-2022-2608: Use after free in Overview Mode
  * CVE-2022-2609: Use after free in Nearby Share
  * CVE-2022-2610: Insufficient policy enforcement in Background Fetch
  * CVE-2022-2611: Inappropriate implementation in Fullscreen API
  * CVE-2022-2612: Side-channel information leakage in Keyboard input
  * CVE-2022-2613: Use after free in Input
  * CVE-2022-2614: Use after free in Sign-In Flow
  * CVE-2022-2615: Insufficient policy enforcement in Cookies
  * CVE-2022-2616: Inappropriate implementation in Extensions API
  * CVE-2022-2617: Use after free in Extensions API
  * CVE-2022-2618: Insufficient validation of untrusted input in Internals
  * CVE-2022-2619: Insufficient validation of untrusted input in Settings
  * CVE-2022-2620: Use after free in WebUI
  * CVE-2022-2621: Use after free in Extensions
  * CVE-2022-2622: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-2623: Use after free in Offline
  * CVE-2022-2624: Heap buffer overflow in PDF
- Added patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-104-tflite-system-zlib.patch
- Removed patches:
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-compiler.patch
- Use FFmpeg 5.1 on TW</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660651200">- Re-enable our version of chrome-wrapper
- Set no sandbox if root is being used (https://crbug.com/638180)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660824000">- Chromium 104.0.5112.101 (boo#1202509):
  * CVE-2022-2852: Use after free in FedCM
  * CVE-2022-2854: Use after free in SwiftShader
  * CVE-2022-2855: Use after free in ANGLE
  * CVE-2022-2857: Use after free in Blink
  * CVE-2022-2858: Use after free in Sign-In Flow
  * CVE-2022-2853: Heap buffer overflow in Downloads
  * CVE-2022-2856: Insufficient validation of untrusted input in Intents
  * CVE-2022-2859: Use after free in Chrome OS Shell
  * CVE-2022-2860: Insufficient policy enforcement in Cookies
  * CVE-2022-2861: Inappropriate implementation in Extensions API</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1661169600">- Fix quoting in chrome-wrapper, don't put cwd on LD_LIBRARY_PATH</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1662033600">- Update chromium-symbolic.svg: this fixes bsc#1202403.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1662638400">- Chromium 105.0.5195.102 (boo#1203102):
  * CVE-2022-3075: Insufficient data validation in Mojo
- Chromium 105.0.5195.52 (boo#1202964):
  * CVE-2022-3038: Use after free in Network Service
  * CVE-2022-3039: Use after free in WebSQL
  * CVE-2022-3040: Use after free in Layout
  * CVE-2022-3041: Use after free in WebSQL
  * CVE-2022-3042: Use after free in PhoneHub
  * CVE-2022-3043: Heap buffer overflow in Screen Capture
  * CVE-2022-3044: Inappropriate implementation in Site Isolation
  * CVE-2022-3045: Insufficient validation of untrusted input in V8
  * CVE-2022-3046: Use after free in Browser Tag
  * CVE-2022-3071: Use after free in Tab Strip
  * CVE-2022-3047: Insufficient policy enforcement in Extensions API
  * CVE-2022-3048: Inappropriate implementation in Chrome OS lockscreen
  * CVE-2022-3049: Use after free in SplitScreen
  * CVE-2022-3050: Heap buffer overflow in WebUI
  * CVE-2022-3051: Heap buffer overflow in Exosphere
  * CVE-2022-3052: Heap buffer overflow in Window Manager
  * CVE-2022-3053: Inappropriate implementation in Pointer Lock
  * CVE-2022-3054: Insufficient policy enforcement in DevTools
  * CVE-2022-3055: Use after free in Passwords
  * CVE-2022-3056: Insufficient policy enforcement in Content Security Policy
  * CVE-2022-3057: Inappropriate implementation in iframe Sandbox
  * CVE-2022-3058: Use after free in Sign-In Flow
- Added patches:
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Bitmap-include.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-wayland-1.20.patch
  * chromium-105-compiler.patch
- Removed patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-78-protobuf-RepeatedPtrField-export.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663156800">- Chromium 105.0.5195.127 (boo#1203419):
  * CVE-2022-3195: Out of bounds write in Storage
  * CVE-2022-3196: Use after free in PDF
  * CVE-2022-3197: Use after free in PDF
  * CVE-2022-3198: Use after free in PDF
  * CVE-2022-3199: Use after free in Frames
  * CVE-2022-3200: Heap buffer overflow in Internals
  * CVE-2022-3201: Insufficient validation of untrusted input in DevTools
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
</package>
<package pkgid="df57f5f7f601f89de02cf79c142d463eb52362dcfee266e389a3fce728acc335" name="chromium" arch="aarch64">
  <version epoch="0" ver="106.0.5249.119" rel="bp154.2.35.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1652616000">- Chromium 101.0.4951.67
  * fixes for other platforms</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1653652800">- Chromium 102.0.5001.61 (boo#1199893)
  * CVE-2022-1853: Use after free in Indexed DB
  * CVE-2022-1854: Use after free in ANGLE
  * CVE-2022-1855: Use after free in Messaging
  * CVE-2022-1856: Use after free in User Education
  * CVE-2022-1857: Insufficient policy enforcement in File System API
  * CVE-2022-1858: Out of bounds read in DevTools
  * CVE-2022-1859: Use after free in Performance Manager
  * CVE-2022-1860: Use after free in UI Foundations
  * CVE-2022-1861: Use after free in Sharing
  * CVE-2022-1862: Inappropriate implementation in Extensions
  * CVE-2022-1863: Use after free in Tab Groups
  * CVE-2022-1864: Use after free in WebApp Installs
  * CVE-2022-1865: Use after free in Bookmarks
  * CVE-2022-1866: Use after free in Tablet Mode
  * CVE-2022-1867: Insufficient validation of untrusted input in Data Transfer
  * CVE-2022-1868: Inappropriate implementation in Extensions API
  * CVE-2022-1869: Type Confusion in V8
  * CVE-2022-1870: Use after free in App Service
  * CVE-2022-1871: Insufficient policy enforcement in File System API
  * CVE-2022-1872: Insufficient policy enforcement in Extensions API
  * CVE-2022-1873: Insufficient policy enforcement in COOP
  * CVE-2022-1874: Insufficient policy enforcement in Safe Browsing
  * CVE-2022-1875: Inappropriate implementation in PDF
  * CVE-2022-1876: Heap buffer overflow in DevTools
- Added patches:
  * chromium-102-compiler.patch
  * chromium-102-fenced_frame_utils-include.patch
  * chromium-102-regex_pattern-array.patch
  * chromium-102-swiftshader-template-instantiation.patch
  * chromium-102-symbolize-include.patch
  * ffmpeg-new-channel-layout.patch
- Removed patches:
  * chromium-100-compiler.patch
  * chromium-80-QuicStreamSendBuffer-deleted-move-constructor.patch
  * chromium-95-quiche-include.patch
  * chromium-fix-swiftshader-template.patch
  * chromium-missing-include-tuple.patch
  * chromium-webrtc-stats-missing-vector.patch
  * chromium-101-segmentation_platform-type.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654084800">- Disable ARM control flow integrity, it causes build issues
  at the moment
- Try a different SVG (black logo on GNOME)
- Removed patches:
  * chromium-third_party-symbolize-missing-include.patch
  (replaced by chromium-102-symbolize-include.patch)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654689600">- Switch to GTK4 on TW and Leap 15.4+ (boo#1200139)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1654862400">- Chromium 102.0.5005.115 (boo#1200423)
  * CVE-2022-2007: Use after free in WebGPU
  * CVE-2022-2008: Out of bounds memory access in WebGL
  * CVE-2022-2010: Out of bounds read in compositing
  * CVE-2022-2011: Use after free in ANGLE</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1656158400">- Chromium 103.0.5060.53 (boo#1200783)
  * CVE-2022-2156: Use after free in Base
  * CVE-2022-2157: Use after free in Interest groups
  * CVE-2022-2158: Type Confusion in V8
  * CVE-2022-2160: Insufficient policy enforcement in DevTools
  * CVE-2022-2161: Use after free in WebApp Provider
  * CVE-2022-2162: Insufficient policy enforcement in File System API
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * CVE-2022-2164: Inappropriate implementation in Extensions API
  * CVE-2022-2165: Insufficient data validation in URL formatting
- Added patches:
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-VirtualCursor-std-layout.patch
  * chromium-103-compiler.patch
- Removed patches:
  * chromium-102-compiler.patch
  * chromium-91-sql-standard-layout-type.patch
  * chromium-101-libxml-unbundle.patch
  * chromium-102-fenced_frame_utils-include.patch
  * chromium-102-swiftshader-template-instantiation.patch
  * chromium-102-symbolize-include.patch
  * chromium-97-arm-tflite-cast.patch
  * chromium-97-ScrollView-reference.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657195200">- Chromium 103.0.5060.66
  * no upstream release notes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657368000">- Chromium 103.0.5060.114 (boo#1201216)
  * CVE-2022-2294: Heap buffer overflow in WebRTC
  * CVE-2022-2295: Type Confusion in V8
  * CVE-2022-2296: Use after free in Chrome OS Shell</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1658318400">- Chromium 103.0.5060.134 (boo#1201679):
  * CVE-2022-2477 : Use after free in Guest View
  * CVE-2022-2478 : Use after free in PDF
  * CVE-2022-2479 : Insufficient validation of untrusted input in File
  * CVE-2022-2480 : Use after free in Service Worker API
  * CVE-2022-2481: Use after free in Views
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1658577600">- Switch back to Clang so that we can use BTI on aarch64
  * Gold is too old - doesn't understand BTI
  * LD crashes on aarch64
- Re-enable LTO
- Prepare move to FFmpeg 5 for new channel layout
  (requires 5.1+)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660046400">- Chromium 104.0.5112.79 (boo#1202075)
  * CVE-2022-2603: Use after free in Omnibox
  * CVE-2022-2604: Use after free in Safe Browsing
  * CVE-2022-2605: Out of bounds read in Dawn
  * CVE-2022-2606: Use after free in Managed devices API
  * CVE-2022-2607: Use after free in Tab Strip
  * CVE-2022-2608: Use after free in Overview Mode
  * CVE-2022-2609: Use after free in Nearby Share
  * CVE-2022-2610: Insufficient policy enforcement in Background Fetch
  * CVE-2022-2611: Inappropriate implementation in Fullscreen API
  * CVE-2022-2612: Side-channel information leakage in Keyboard input
  * CVE-2022-2613: Use after free in Input
  * CVE-2022-2614: Use after free in Sign-In Flow
  * CVE-2022-2615: Insufficient policy enforcement in Cookies
  * CVE-2022-2616: Inappropriate implementation in Extensions API
  * CVE-2022-2617: Use after free in Extensions API
  * CVE-2022-2618: Insufficient validation of untrusted input in Internals
  * CVE-2022-2619: Insufficient validation of untrusted input in Settings
  * CVE-2022-2620: Use after free in WebUI
  * CVE-2022-2621: Use after free in Extensions
  * CVE-2022-2622: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-2623: Use after free in Offline
  * CVE-2022-2624: Heap buffer overflow in PDF
- Added patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-104-tflite-system-zlib.patch
- Removed patches:
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-compiler.patch
- Use FFmpeg 5.1 on TW</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660651200">- Re-enable our version of chrome-wrapper
- Set no sandbox if root is being used (https://crbug.com/638180)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660824000">- Chromium 104.0.5112.101 (boo#1202509):
  * CVE-2022-2852: Use after free in FedCM
  * CVE-2022-2854: Use after free in SwiftShader
  * CVE-2022-2855: Use after free in ANGLE
  * CVE-2022-2857: Use after free in Blink
  * CVE-2022-2858: Use after free in Sign-In Flow
  * CVE-2022-2853: Heap buffer overflow in Downloads
  * CVE-2022-2856: Insufficient validation of untrusted input in Intents
  * CVE-2022-2859: Use after free in Chrome OS Shell
  * CVE-2022-2860: Insufficient policy enforcement in Cookies
  * CVE-2022-2861: Inappropriate implementation in Extensions API</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1661169600">- Fix quoting in chrome-wrapper, don't put cwd on LD_LIBRARY_PATH</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1662033600">- Update chromium-symbolic.svg: this fixes bsc#1202403.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1662638400">- Chromium 105.0.5195.102 (boo#1203102):
  * CVE-2022-3075: Insufficient data validation in Mojo
- Chromium 105.0.5195.52 (boo#1202964):
  * CVE-2022-3038: Use after free in Network Service
  * CVE-2022-3039: Use after free in WebSQL
  * CVE-2022-3040: Use after free in Layout
  * CVE-2022-3041: Use after free in WebSQL
  * CVE-2022-3042: Use after free in PhoneHub
  * CVE-2022-3043: Heap buffer overflow in Screen Capture
  * CVE-2022-3044: Inappropriate implementation in Site Isolation
  * CVE-2022-3045: Insufficient validation of untrusted input in V8
  * CVE-2022-3046: Use after free in Browser Tag
  * CVE-2022-3071: Use after free in Tab Strip
  * CVE-2022-3047: Insufficient policy enforcement in Extensions API
  * CVE-2022-3048: Inappropriate implementation in Chrome OS lockscreen
  * CVE-2022-3049: Use after free in SplitScreen
  * CVE-2022-3050: Heap buffer overflow in WebUI
  * CVE-2022-3051: Heap buffer overflow in Exosphere
  * CVE-2022-3052: Heap buffer overflow in Window Manager
  * CVE-2022-3053: Inappropriate implementation in Pointer Lock
  * CVE-2022-3054: Insufficient policy enforcement in DevTools
  * CVE-2022-3055: Use after free in Passwords
  * CVE-2022-3056: Insufficient policy enforcement in Content Security Policy
  * CVE-2022-3057: Inappropriate implementation in iframe Sandbox
  * CVE-2022-3058: Use after free in Sign-In Flow
- Added patches:
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Bitmap-include.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-wayland-1.20.patch
  * chromium-105-compiler.patch
- Removed patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-78-protobuf-RepeatedPtrField-export.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663156800">- Chromium 105.0.5195.127 (boo#1203419):
  * CVE-2022-3195: Out of bounds write in Storage
  * CVE-2022-3196: Use after free in PDF
  * CVE-2022-3197: Use after free in PDF
  * CVE-2022-3198: Use after free in PDF
  * CVE-2022-3199: Use after free in Frames
  * CVE-2022-3200: Heap buffer overflow in Internals
  * CVE-2022-3201: Insufficient validation of untrusted input in DevTools
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1664625600">- Chromium 106.0.5249.91 (boo#1203808):
  * CVE-2022-3370: Use after free in Custom Elements
  * CVE-2022-3373: Out of bounds write in V8
- includes changes from 106.0.5249.61:
  * CVE-2022-3304: Use after free in CSS
  * CVE-2022-3201: Insufficient validation of untrusted input in Developer Tools
  * CVE-2022-3305: Use after free in Survey
  * CVE-2022-3306: Use after free in Survey
  * CVE-2022-3307: Use after free in Media
  * CVE-2022-3308: Insufficient policy enforcement in Developer Tools
  * CVE-2022-3309: Use after free in Assistant
  * CVE-2022-3310: Insufficient policy enforcement in Custom Tabs
  * CVE-2022-3311: Use after free in Import
  * CVE-2022-3312: Insufficient validation of untrusted input in VPN
  * CVE-2022-3313: Incorrect security UI in Full Screen
  * CVE-2022-3314: Use after free in Logging
  * CVE-2022-3315: Type confusion in Blink
  * CVE-2022-3316: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-3317: Insufficient validation of untrusted input in Intents
  * CVE-2022-3318: Use after free in ChromeOS Notifications
- drop patches:
  * chromium-104-tflite-system-zlib.patch
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
- add patches
  * chromium-106-ffmpeg-duration.patch
  * chromium-106-AutofillPopupControllerImpl-namespace.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1665057600">- Chromium 106.0.5249.103:
  * fix possible cache manager deadlock
  * Fix right-click menu appearing unexpectedly affecting screen
    readers</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1665576000">- Chromium 106.0.5249.119 (boo#1204223)
  * CVE-2022-3445: Use after free in Skia
  * CVE-2022-3446: Heap buffer overflow in WebSQL
  * CVE-2022-3447: Inappropriate implementation in Custom Tabs
  * CVE-2022-3448: Use after free in Permissions API
  * CVE-2022-3449: Use after free in Safe Browsing
  * CVE-2022-3450: Use after free in Peer Connection</changelog>
</package>
<package pkgid="0fa0b827ae177b89dc6a39e6c85c6bcfd6270bea6c3e8d6cf9e247edc98581b2" name="chromium" arch="src">
  <version epoch="0" ver="106.0.5249.119" rel="bp154.2.35.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1652616000">- Chromium 101.0.4951.67
  * fixes for other platforms</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1653652800">- Chromium 102.0.5001.61 (boo#1199893)
  * CVE-2022-1853: Use after free in Indexed DB
  * CVE-2022-1854: Use after free in ANGLE
  * CVE-2022-1855: Use after free in Messaging
  * CVE-2022-1856: Use after free in User Education
  * CVE-2022-1857: Insufficient policy enforcement in File System API
  * CVE-2022-1858: Out of bounds read in DevTools
  * CVE-2022-1859: Use after free in Performance Manager
  * CVE-2022-1860: Use after free in UI Foundations
  * CVE-2022-1861: Use after free in Sharing
  * CVE-2022-1862: Inappropriate implementation in Extensions
  * CVE-2022-1863: Use after free in Tab Groups
  * CVE-2022-1864: Use after free in WebApp Installs
  * CVE-2022-1865: Use after free in Bookmarks
  * CVE-2022-1866: Use after free in Tablet Mode
  * CVE-2022-1867: Insufficient validation of untrusted input in Data Transfer
  * CVE-2022-1868: Inappropriate implementation in Extensions API
  * CVE-2022-1869: Type Confusion in V8
  * CVE-2022-1870: Use after free in App Service
  * CVE-2022-1871: Insufficient policy enforcement in File System API
  * CVE-2022-1872: Insufficient policy enforcement in Extensions API
  * CVE-2022-1873: Insufficient policy enforcement in COOP
  * CVE-2022-1874: Insufficient policy enforcement in Safe Browsing
  * CVE-2022-1875: Inappropriate implementation in PDF
  * CVE-2022-1876: Heap buffer overflow in DevTools
- Added patches:
  * chromium-102-compiler.patch
  * chromium-102-fenced_frame_utils-include.patch
  * chromium-102-regex_pattern-array.patch
  * chromium-102-swiftshader-template-instantiation.patch
  * chromium-102-symbolize-include.patch
  * ffmpeg-new-channel-layout.patch
- Removed patches:
  * chromium-100-compiler.patch
  * chromium-80-QuicStreamSendBuffer-deleted-move-constructor.patch
  * chromium-95-quiche-include.patch
  * chromium-fix-swiftshader-template.patch
  * chromium-missing-include-tuple.patch
  * chromium-webrtc-stats-missing-vector.patch
  * chromium-101-segmentation_platform-type.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654084800">- Disable ARM control flow integrity, it causes build issues
  at the moment
- Try a different SVG (black logo on GNOME)
- Removed patches:
  * chromium-third_party-symbolize-missing-include.patch
  (replaced by chromium-102-symbolize-include.patch)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654689600">- Switch to GTK4 on TW and Leap 15.4+ (boo#1200139)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1654862400">- Chromium 102.0.5005.115 (boo#1200423)
  * CVE-2022-2007: Use after free in WebGPU
  * CVE-2022-2008: Out of bounds memory access in WebGL
  * CVE-2022-2010: Out of bounds read in compositing
  * CVE-2022-2011: Use after free in ANGLE</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1656158400">- Chromium 103.0.5060.53 (boo#1200783)
  * CVE-2022-2156: Use after free in Base
  * CVE-2022-2157: Use after free in Interest groups
  * CVE-2022-2158: Type Confusion in V8
  * CVE-2022-2160: Insufficient policy enforcement in DevTools
  * CVE-2022-2161: Use after free in WebApp Provider
  * CVE-2022-2162: Insufficient policy enforcement in File System API
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * CVE-2022-2164: Inappropriate implementation in Extensions API
  * CVE-2022-2165: Insufficient data validation in URL formatting
- Added patches:
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-VirtualCursor-std-layout.patch
  * chromium-103-compiler.patch
- Removed patches:
  * chromium-102-compiler.patch
  * chromium-91-sql-standard-layout-type.patch
  * chromium-101-libxml-unbundle.patch
  * chromium-102-fenced_frame_utils-include.patch
  * chromium-102-swiftshader-template-instantiation.patch
  * chromium-102-symbolize-include.patch
  * chromium-97-arm-tflite-cast.patch
  * chromium-97-ScrollView-reference.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657195200">- Chromium 103.0.5060.66
  * no upstream release notes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657368000">- Chromium 103.0.5060.114 (boo#1201216)
  * CVE-2022-2294: Heap buffer overflow in WebRTC
  * CVE-2022-2295: Type Confusion in V8
  * CVE-2022-2296: Use after free in Chrome OS Shell</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1658318400">- Chromium 103.0.5060.134 (boo#1201679):
  * CVE-2022-2477 : Use after free in Guest View
  * CVE-2022-2478 : Use after free in PDF
  * CVE-2022-2479 : Insufficient validation of untrusted input in File
  * CVE-2022-2480 : Use after free in Service Worker API
  * CVE-2022-2481: Use after free in Views
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1658577600">- Switch back to Clang so that we can use BTI on aarch64
  * Gold is too old - doesn't understand BTI
  * LD crashes on aarch64
- Re-enable LTO
- Prepare move to FFmpeg 5 for new channel layout
  (requires 5.1+)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660046400">- Chromium 104.0.5112.79 (boo#1202075)
  * CVE-2022-2603: Use after free in Omnibox
  * CVE-2022-2604: Use after free in Safe Browsing
  * CVE-2022-2605: Out of bounds read in Dawn
  * CVE-2022-2606: Use after free in Managed devices API
  * CVE-2022-2607: Use after free in Tab Strip
  * CVE-2022-2608: Use after free in Overview Mode
  * CVE-2022-2609: Use after free in Nearby Share
  * CVE-2022-2610: Insufficient policy enforcement in Background Fetch
  * CVE-2022-2611: Inappropriate implementation in Fullscreen API
  * CVE-2022-2612: Side-channel information leakage in Keyboard input
  * CVE-2022-2613: Use after free in Input
  * CVE-2022-2614: Use after free in Sign-In Flow
  * CVE-2022-2615: Insufficient policy enforcement in Cookies
  * CVE-2022-2616: Inappropriate implementation in Extensions API
  * CVE-2022-2617: Use after free in Extensions API
  * CVE-2022-2618: Insufficient validation of untrusted input in Internals
  * CVE-2022-2619: Insufficient validation of untrusted input in Settings
  * CVE-2022-2620: Use after free in WebUI
  * CVE-2022-2621: Use after free in Extensions
  * CVE-2022-2622: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-2623: Use after free in Offline
  * CVE-2022-2624: Heap buffer overflow in PDF
- Added patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-104-tflite-system-zlib.patch
- Removed patches:
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-compiler.patch
- Use FFmpeg 5.1 on TW</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660651200">- Re-enable our version of chrome-wrapper
- Set no sandbox if root is being used (https://crbug.com/638180)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660824000">- Chromium 104.0.5112.101 (boo#1202509):
  * CVE-2022-2852: Use after free in FedCM
  * CVE-2022-2854: Use after free in SwiftShader
  * CVE-2022-2855: Use after free in ANGLE
  * CVE-2022-2857: Use after free in Blink
  * CVE-2022-2858: Use after free in Sign-In Flow
  * CVE-2022-2853: Heap buffer overflow in Downloads
  * CVE-2022-2856: Insufficient validation of untrusted input in Intents
  * CVE-2022-2859: Use after free in Chrome OS Shell
  * CVE-2022-2860: Insufficient policy enforcement in Cookies
  * CVE-2022-2861: Inappropriate implementation in Extensions API</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1661169600">- Fix quoting in chrome-wrapper, don't put cwd on LD_LIBRARY_PATH</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1662033600">- Update chromium-symbolic.svg: this fixes bsc#1202403.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1662638400">- Chromium 105.0.5195.102 (boo#1203102):
  * CVE-2022-3075: Insufficient data validation in Mojo
- Chromium 105.0.5195.52 (boo#1202964):
  * CVE-2022-3038: Use after free in Network Service
  * CVE-2022-3039: Use after free in WebSQL
  * CVE-2022-3040: Use after free in Layout
  * CVE-2022-3041: Use after free in WebSQL
  * CVE-2022-3042: Use after free in PhoneHub
  * CVE-2022-3043: Heap buffer overflow in Screen Capture
  * CVE-2022-3044: Inappropriate implementation in Site Isolation
  * CVE-2022-3045: Insufficient validation of untrusted input in V8
  * CVE-2022-3046: Use after free in Browser Tag
  * CVE-2022-3071: Use after free in Tab Strip
  * CVE-2022-3047: Insufficient policy enforcement in Extensions API
  * CVE-2022-3048: Inappropriate implementation in Chrome OS lockscreen
  * CVE-2022-3049: Use after free in SplitScreen
  * CVE-2022-3050: Heap buffer overflow in WebUI
  * CVE-2022-3051: Heap buffer overflow in Exosphere
  * CVE-2022-3052: Heap buffer overflow in Window Manager
  * CVE-2022-3053: Inappropriate implementation in Pointer Lock
  * CVE-2022-3054: Insufficient policy enforcement in DevTools
  * CVE-2022-3055: Use after free in Passwords
  * CVE-2022-3056: Insufficient policy enforcement in Content Security Policy
  * CVE-2022-3057: Inappropriate implementation in iframe Sandbox
  * CVE-2022-3058: Use after free in Sign-In Flow
- Added patches:
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Bitmap-include.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-wayland-1.20.patch
  * chromium-105-compiler.patch
- Removed patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-78-protobuf-RepeatedPtrField-export.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663156800">- Chromium 105.0.5195.127 (boo#1203419):
  * CVE-2022-3195: Out of bounds write in Storage
  * CVE-2022-3196: Use after free in PDF
  * CVE-2022-3197: Use after free in PDF
  * CVE-2022-3198: Use after free in PDF
  * CVE-2022-3199: Use after free in Frames
  * CVE-2022-3200: Heap buffer overflow in Internals
  * CVE-2022-3201: Insufficient validation of untrusted input in DevTools
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1664625600">- Chromium 106.0.5249.91 (boo#1203808):
  * CVE-2022-3370: Use after free in Custom Elements
  * CVE-2022-3373: Out of bounds write in V8
- includes changes from 106.0.5249.61:
  * CVE-2022-3304: Use after free in CSS
  * CVE-2022-3201: Insufficient validation of untrusted input in Developer Tools
  * CVE-2022-3305: Use after free in Survey
  * CVE-2022-3306: Use after free in Survey
  * CVE-2022-3307: Use after free in Media
  * CVE-2022-3308: Insufficient policy enforcement in Developer Tools
  * CVE-2022-3309: Use after free in Assistant
  * CVE-2022-3310: Insufficient policy enforcement in Custom Tabs
  * CVE-2022-3311: Use after free in Import
  * CVE-2022-3312: Insufficient validation of untrusted input in VPN
  * CVE-2022-3313: Incorrect security UI in Full Screen
  * CVE-2022-3314: Use after free in Logging
  * CVE-2022-3315: Type confusion in Blink
  * CVE-2022-3316: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-3317: Insufficient validation of untrusted input in Intents
  * CVE-2022-3318: Use after free in ChromeOS Notifications
- drop patches:
  * chromium-104-tflite-system-zlib.patch
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
- add patches
  * chromium-106-ffmpeg-duration.patch
  * chromium-106-AutofillPopupControllerImpl-namespace.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1665057600">- Chromium 106.0.5249.103:
  * fix possible cache manager deadlock
  * Fix right-click menu appearing unexpectedly affecting screen
    readers</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1665576000">- Chromium 106.0.5249.119 (boo#1204223)
  * CVE-2022-3445: Use after free in Skia
  * CVE-2022-3446: Heap buffer overflow in WebSQL
  * CVE-2022-3447: Inappropriate implementation in Custom Tabs
  * CVE-2022-3448: Use after free in Permissions API
  * CVE-2022-3449: Use after free in Safe Browsing
  * CVE-2022-3450: Use after free in Peer Connection</changelog>
</package>
<package pkgid="9639643c313f5a114f24bd1c3222b577f936eb4877972fa088cd52f1d11becc2" name="chromium" arch="x86_64">
  <version epoch="0" ver="106.0.5249.119" rel="bp154.2.35.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1652616000">- Chromium 101.0.4951.67
  * fixes for other platforms</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1653652800">- Chromium 102.0.5001.61 (boo#1199893)
  * CVE-2022-1853: Use after free in Indexed DB
  * CVE-2022-1854: Use after free in ANGLE
  * CVE-2022-1855: Use after free in Messaging
  * CVE-2022-1856: Use after free in User Education
  * CVE-2022-1857: Insufficient policy enforcement in File System API
  * CVE-2022-1858: Out of bounds read in DevTools
  * CVE-2022-1859: Use after free in Performance Manager
  * CVE-2022-1860: Use after free in UI Foundations
  * CVE-2022-1861: Use after free in Sharing
  * CVE-2022-1862: Inappropriate implementation in Extensions
  * CVE-2022-1863: Use after free in Tab Groups
  * CVE-2022-1864: Use after free in WebApp Installs
  * CVE-2022-1865: Use after free in Bookmarks
  * CVE-2022-1866: Use after free in Tablet Mode
  * CVE-2022-1867: Insufficient validation of untrusted input in Data Transfer
  * CVE-2022-1868: Inappropriate implementation in Extensions API
  * CVE-2022-1869: Type Confusion in V8
  * CVE-2022-1870: Use after free in App Service
  * CVE-2022-1871: Insufficient policy enforcement in File System API
  * CVE-2022-1872: Insufficient policy enforcement in Extensions API
  * CVE-2022-1873: Insufficient policy enforcement in COOP
  * CVE-2022-1874: Insufficient policy enforcement in Safe Browsing
  * CVE-2022-1875: Inappropriate implementation in PDF
  * CVE-2022-1876: Heap buffer overflow in DevTools
- Added patches:
  * chromium-102-compiler.patch
  * chromium-102-fenced_frame_utils-include.patch
  * chromium-102-regex_pattern-array.patch
  * chromium-102-swiftshader-template-instantiation.patch
  * chromium-102-symbolize-include.patch
  * ffmpeg-new-channel-layout.patch
- Removed patches:
  * chromium-100-compiler.patch
  * chromium-80-QuicStreamSendBuffer-deleted-move-constructor.patch
  * chromium-95-quiche-include.patch
  * chromium-fix-swiftshader-template.patch
  * chromium-missing-include-tuple.patch
  * chromium-webrtc-stats-missing-vector.patch
  * chromium-101-segmentation_platform-type.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654084800">- Disable ARM control flow integrity, it causes build issues
  at the moment
- Try a different SVG (black logo on GNOME)
- Removed patches:
  * chromium-third_party-symbolize-missing-include.patch
  (replaced by chromium-102-symbolize-include.patch)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654689600">- Switch to GTK4 on TW and Leap 15.4+ (boo#1200139)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1654862400">- Chromium 102.0.5005.115 (boo#1200423)
  * CVE-2022-2007: Use after free in WebGPU
  * CVE-2022-2008: Out of bounds memory access in WebGL
  * CVE-2022-2010: Out of bounds read in compositing
  * CVE-2022-2011: Use after free in ANGLE</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1656158400">- Chromium 103.0.5060.53 (boo#1200783)
  * CVE-2022-2156: Use after free in Base
  * CVE-2022-2157: Use after free in Interest groups
  * CVE-2022-2158: Type Confusion in V8
  * CVE-2022-2160: Insufficient policy enforcement in DevTools
  * CVE-2022-2161: Use after free in WebApp Provider
  * CVE-2022-2162: Insufficient policy enforcement in File System API
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * CVE-2022-2164: Inappropriate implementation in Extensions API
  * CVE-2022-2165: Insufficient data validation in URL formatting
- Added patches:
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-VirtualCursor-std-layout.patch
  * chromium-103-compiler.patch
- Removed patches:
  * chromium-102-compiler.patch
  * chromium-91-sql-standard-layout-type.patch
  * chromium-101-libxml-unbundle.patch
  * chromium-102-fenced_frame_utils-include.patch
  * chromium-102-swiftshader-template-instantiation.patch
  * chromium-102-symbolize-include.patch
  * chromium-97-arm-tflite-cast.patch
  * chromium-97-ScrollView-reference.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657195200">- Chromium 103.0.5060.66
  * no upstream release notes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657368000">- Chromium 103.0.5060.114 (boo#1201216)
  * CVE-2022-2294: Heap buffer overflow in WebRTC
  * CVE-2022-2295: Type Confusion in V8
  * CVE-2022-2296: Use after free in Chrome OS Shell</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1658318400">- Chromium 103.0.5060.134 (boo#1201679):
  * CVE-2022-2477 : Use after free in Guest View
  * CVE-2022-2478 : Use after free in PDF
  * CVE-2022-2479 : Insufficient validation of untrusted input in File
  * CVE-2022-2480 : Use after free in Service Worker API
  * CVE-2022-2481: Use after free in Views
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1658577600">- Switch back to Clang so that we can use BTI on aarch64
  * Gold is too old - doesn't understand BTI
  * LD crashes on aarch64
- Re-enable LTO
- Prepare move to FFmpeg 5 for new channel layout
  (requires 5.1+)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660046400">- Chromium 104.0.5112.79 (boo#1202075)
  * CVE-2022-2603: Use after free in Omnibox
  * CVE-2022-2604: Use after free in Safe Browsing
  * CVE-2022-2605: Out of bounds read in Dawn
  * CVE-2022-2606: Use after free in Managed devices API
  * CVE-2022-2607: Use after free in Tab Strip
  * CVE-2022-2608: Use after free in Overview Mode
  * CVE-2022-2609: Use after free in Nearby Share
  * CVE-2022-2610: Insufficient policy enforcement in Background Fetch
  * CVE-2022-2611: Inappropriate implementation in Fullscreen API
  * CVE-2022-2612: Side-channel information leakage in Keyboard input
  * CVE-2022-2613: Use after free in Input
  * CVE-2022-2614: Use after free in Sign-In Flow
  * CVE-2022-2615: Insufficient policy enforcement in Cookies
  * CVE-2022-2616: Inappropriate implementation in Extensions API
  * CVE-2022-2617: Use after free in Extensions API
  * CVE-2022-2618: Insufficient validation of untrusted input in Internals
  * CVE-2022-2619: Insufficient validation of untrusted input in Settings
  * CVE-2022-2620: Use after free in WebUI
  * CVE-2022-2621: Use after free in Extensions
  * CVE-2022-2622: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-2623: Use after free in Offline
  * CVE-2022-2624: Heap buffer overflow in PDF
- Added patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-104-tflite-system-zlib.patch
- Removed patches:
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-compiler.patch
- Use FFmpeg 5.1 on TW</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660651200">- Re-enable our version of chrome-wrapper
- Set no sandbox if root is being used (https://crbug.com/638180)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660824000">- Chromium 104.0.5112.101 (boo#1202509):
  * CVE-2022-2852: Use after free in FedCM
  * CVE-2022-2854: Use after free in SwiftShader
  * CVE-2022-2855: Use after free in ANGLE
  * CVE-2022-2857: Use after free in Blink
  * CVE-2022-2858: Use after free in Sign-In Flow
  * CVE-2022-2853: Heap buffer overflow in Downloads
  * CVE-2022-2856: Insufficient validation of untrusted input in Intents
  * CVE-2022-2859: Use after free in Chrome OS Shell
  * CVE-2022-2860: Insufficient policy enforcement in Cookies
  * CVE-2022-2861: Inappropriate implementation in Extensions API</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1661169600">- Fix quoting in chrome-wrapper, don't put cwd on LD_LIBRARY_PATH</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1662033600">- Update chromium-symbolic.svg: this fixes bsc#1202403.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1662638400">- Chromium 105.0.5195.102 (boo#1203102):
  * CVE-2022-3075: Insufficient data validation in Mojo
- Chromium 105.0.5195.52 (boo#1202964):
  * CVE-2022-3038: Use after free in Network Service
  * CVE-2022-3039: Use after free in WebSQL
  * CVE-2022-3040: Use after free in Layout
  * CVE-2022-3041: Use after free in WebSQL
  * CVE-2022-3042: Use after free in PhoneHub
  * CVE-2022-3043: Heap buffer overflow in Screen Capture
  * CVE-2022-3044: Inappropriate implementation in Site Isolation
  * CVE-2022-3045: Insufficient validation of untrusted input in V8
  * CVE-2022-3046: Use after free in Browser Tag
  * CVE-2022-3071: Use after free in Tab Strip
  * CVE-2022-3047: Insufficient policy enforcement in Extensions API
  * CVE-2022-3048: Inappropriate implementation in Chrome OS lockscreen
  * CVE-2022-3049: Use after free in SplitScreen
  * CVE-2022-3050: Heap buffer overflow in WebUI
  * CVE-2022-3051: Heap buffer overflow in Exosphere
  * CVE-2022-3052: Heap buffer overflow in Window Manager
  * CVE-2022-3053: Inappropriate implementation in Pointer Lock
  * CVE-2022-3054: Insufficient policy enforcement in DevTools
  * CVE-2022-3055: Use after free in Passwords
  * CVE-2022-3056: Insufficient policy enforcement in Content Security Policy
  * CVE-2022-3057: Inappropriate implementation in iframe Sandbox
  * CVE-2022-3058: Use after free in Sign-In Flow
- Added patches:
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Bitmap-include.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-wayland-1.20.patch
  * chromium-105-compiler.patch
- Removed patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-78-protobuf-RepeatedPtrField-export.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663156800">- Chromium 105.0.5195.127 (boo#1203419):
  * CVE-2022-3195: Out of bounds write in Storage
  * CVE-2022-3196: Use after free in PDF
  * CVE-2022-3197: Use after free in PDF
  * CVE-2022-3198: Use after free in PDF
  * CVE-2022-3199: Use after free in Frames
  * CVE-2022-3200: Heap buffer overflow in Internals
  * CVE-2022-3201: Insufficient validation of untrusted input in DevTools
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1664625600">- Chromium 106.0.5249.91 (boo#1203808):
  * CVE-2022-3370: Use after free in Custom Elements
  * CVE-2022-3373: Out of bounds write in V8
- includes changes from 106.0.5249.61:
  * CVE-2022-3304: Use after free in CSS
  * CVE-2022-3201: Insufficient validation of untrusted input in Developer Tools
  * CVE-2022-3305: Use after free in Survey
  * CVE-2022-3306: Use after free in Survey
  * CVE-2022-3307: Use after free in Media
  * CVE-2022-3308: Insufficient policy enforcement in Developer Tools
  * CVE-2022-3309: Use after free in Assistant
  * CVE-2022-3310: Insufficient policy enforcement in Custom Tabs
  * CVE-2022-3311: Use after free in Import
  * CVE-2022-3312: Insufficient validation of untrusted input in VPN
  * CVE-2022-3313: Incorrect security UI in Full Screen
  * CVE-2022-3314: Use after free in Logging
  * CVE-2022-3315: Type confusion in Blink
  * CVE-2022-3316: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-3317: Insufficient validation of untrusted input in Intents
  * CVE-2022-3318: Use after free in ChromeOS Notifications
- drop patches:
  * chromium-104-tflite-system-zlib.patch
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
- add patches
  * chromium-106-ffmpeg-duration.patch
  * chromium-106-AutofillPopupControllerImpl-namespace.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1665057600">- Chromium 106.0.5249.103:
  * fix possible cache manager deadlock
  * Fix right-click menu appearing unexpectedly affecting screen
    readers</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1665576000">- Chromium 106.0.5249.119 (boo#1204223)
  * CVE-2022-3445: Use after free in Skia
  * CVE-2022-3446: Heap buffer overflow in WebSQL
  * CVE-2022-3447: Inappropriate implementation in Custom Tabs
  * CVE-2022-3448: Use after free in Permissions API
  * CVE-2022-3449: Use after free in Safe Browsing
  * CVE-2022-3450: Use after free in Peer Connection</changelog>
</package>
<package pkgid="67ba727d13b9b6d845cb199f24256ab09b9ed510845f3d336c3cd4b7fe04d3fa" name="chromium" arch="aarch64">
  <version epoch="0" ver="106.0.5249.91" rel="bp154.2.32.1"/>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1651665600">- Chromium 101.0.4951.54 (boo#1199118)
- Chromium 101.0.4951.41 (boo#1198917)
  * CVE-2022-1477: Use after free in Vulkan
  * CVE-2022-1478: Use after free in SwiftShader
  * CVE-2022-1479: Use after free in ANGLE
  * CVE-2022-1480: Use after free in Device API
  * CVE-2022-1481: Use after free in Sharing
  * CVE-2022-1482: Inappropriate implementation in WebGL
  * CVE-2022-1483: Heap buffer overflow in WebGPU
  * CVE-2022-1484: Heap buffer overflow in Web UI Settings
  * CVE-2022-1485: Use after free in File System API
  * CVE-2022-1486: Type Confusion in V8
  * CVE-2022-1487: Use after free in Ozone
  * CVE-2022-1488: Inappropriate implementation in Extensions API
  * CVE-2022-1489: Out of bounds memory access in UI Shelf
  * CVE-2022-1490: Use after free in Browser Switcher
  * CVE-2022-1491: Use after free in Bookmarks
  * CVE-2022-1492: Insufficient data validation in Blink Editing
  * CVE-2022-1493: Use after free in Dev Tools
  * CVE-2022-1494: Insufficient data validation in Trusted Types
  * CVE-2022-1495: Incorrect security UI in Downloads
  * CVE-2022-1496: Use after free in File Manager
  * CVE-2022-1497: Inappropriate implementation in Input
  * CVE-2022-1498: Inappropriate implementation in HTML Parser
  * CVE-2022-1499: Inappropriate implementation in WebAuthentication
  * CVE-2022-1500: Insufficient data validation in Dev Tools
  * CVE-2022-1501: Inappropriate implementation in iframe
- Added patches:
  * chromium-101-libxml-unbundle.patch
  * chromium-101-segmentation_platform-type.patch
- Removed patches:
  * chromium-100-SCTHashdanceMetadata-move.patch
  * chromium-100-GLImplementationParts-constexpr.patch
  * chromium-100-macro-typo.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1652270400">- Chromium 101.0.4951.64 (boo#1199409)
  * CVE-2022-1633: Use after free in Sharesheet
  * CVE-2022-1634: Use after free in Browser UI
  * CVE-2022-1635: Use after free in Permission Prompts
  * CVE-2022-1636: Use after free in Performance APIs
  * CVE-2022-1637: Inappropriate implementation in Web Contents
  * CVE-2022-1638: Heap buffer overflow in V8 Internationalization
  * CVE-2022-1639: Use after free in ANGLE
  * CVE-2022-1640: Use after free in Sharing
  * CVE-2022-1641: Use after free in Web UI Diagnostics</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1652616000">- Chromium 101.0.4951.67
  * fixes for other platforms</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1653652800">- Chromium 102.0.5001.61 (boo#1199893)
  * CVE-2022-1853: Use after free in Indexed DB
  * CVE-2022-1854: Use after free in ANGLE
  * CVE-2022-1855: Use after free in Messaging
  * CVE-2022-1856: Use after free in User Education
  * CVE-2022-1857: Insufficient policy enforcement in File System API
  * CVE-2022-1858: Out of bounds read in DevTools
  * CVE-2022-1859: Use after free in Performance Manager
  * CVE-2022-1860: Use after free in UI Foundations
  * CVE-2022-1861: Use after free in Sharing
  * CVE-2022-1862: Inappropriate implementation in Extensions
  * CVE-2022-1863: Use after free in Tab Groups
  * CVE-2022-1864: Use after free in WebApp Installs
  * CVE-2022-1865: Use after free in Bookmarks
  * CVE-2022-1866: Use after free in Tablet Mode
  * CVE-2022-1867: Insufficient validation of untrusted input in Data Transfer
  * CVE-2022-1868: Inappropriate implementation in Extensions API
  * CVE-2022-1869: Type Confusion in V8
  * CVE-2022-1870: Use after free in App Service
  * CVE-2022-1871: Insufficient policy enforcement in File System API
  * CVE-2022-1872: Insufficient policy enforcement in Extensions API
  * CVE-2022-1873: Insufficient policy enforcement in COOP
  * CVE-2022-1874: Insufficient policy enforcement in Safe Browsing
  * CVE-2022-1875: Inappropriate implementation in PDF
  * CVE-2022-1876: Heap buffer overflow in DevTools
- Added patches:
  * chromium-102-compiler.patch
  * chromium-102-fenced_frame_utils-include.patch
  * chromium-102-regex_pattern-array.patch
  * chromium-102-swiftshader-template-instantiation.patch
  * chromium-102-symbolize-include.patch
  * ffmpeg-new-channel-layout.patch
- Removed patches:
  * chromium-100-compiler.patch
  * chromium-80-QuicStreamSendBuffer-deleted-move-constructor.patch
  * chromium-95-quiche-include.patch
  * chromium-fix-swiftshader-template.patch
  * chromium-missing-include-tuple.patch
  * chromium-webrtc-stats-missing-vector.patch
  * chromium-101-segmentation_platform-type.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654084800">- Disable ARM control flow integrity, it causes build issues
  at the moment
- Try a different SVG (black logo on GNOME)
- Removed patches:
  * chromium-third_party-symbolize-missing-include.patch
  (replaced by chromium-102-symbolize-include.patch)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654689600">- Switch to GTK4 on TW and Leap 15.4+ (boo#1200139)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1654862400">- Chromium 102.0.5005.115 (boo#1200423)
  * CVE-2022-2007: Use after free in WebGPU
  * CVE-2022-2008: Out of bounds memory access in WebGL
  * CVE-2022-2010: Out of bounds read in compositing
  * CVE-2022-2011: Use after free in ANGLE</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1656158400">- Chromium 103.0.5060.53 (boo#1200783)
  * CVE-2022-2156: Use after free in Base
  * CVE-2022-2157: Use after free in Interest groups
  * CVE-2022-2158: Type Confusion in V8
  * CVE-2022-2160: Insufficient policy enforcement in DevTools
  * CVE-2022-2161: Use after free in WebApp Provider
  * CVE-2022-2162: Insufficient policy enforcement in File System API
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * CVE-2022-2164: Inappropriate implementation in Extensions API
  * CVE-2022-2165: Insufficient data validation in URL formatting
- Added patches:
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-VirtualCursor-std-layout.patch
  * chromium-103-compiler.patch
- Removed patches:
  * chromium-102-compiler.patch
  * chromium-91-sql-standard-layout-type.patch
  * chromium-101-libxml-unbundle.patch
  * chromium-102-fenced_frame_utils-include.patch
  * chromium-102-swiftshader-template-instantiation.patch
  * chromium-102-symbolize-include.patch
  * chromium-97-arm-tflite-cast.patch
  * chromium-97-ScrollView-reference.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657195200">- Chromium 103.0.5060.66
  * no upstream release notes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657368000">- Chromium 103.0.5060.114 (boo#1201216)
  * CVE-2022-2294: Heap buffer overflow in WebRTC
  * CVE-2022-2295: Type Confusion in V8
  * CVE-2022-2296: Use after free in Chrome OS Shell</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1658318400">- Chromium 103.0.5060.134 (boo#1201679):
  * CVE-2022-2477 : Use after free in Guest View
  * CVE-2022-2478 : Use after free in PDF
  * CVE-2022-2479 : Insufficient validation of untrusted input in File
  * CVE-2022-2480 : Use after free in Service Worker API
  * CVE-2022-2481: Use after free in Views
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1658577600">- Switch back to Clang so that we can use BTI on aarch64
  * Gold is too old - doesn't understand BTI
  * LD crashes on aarch64
- Re-enable LTO
- Prepare move to FFmpeg 5 for new channel layout
  (requires 5.1+)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660046400">- Chromium 104.0.5112.79 (boo#1202075)
  * CVE-2022-2603: Use after free in Omnibox
  * CVE-2022-2604: Use after free in Safe Browsing
  * CVE-2022-2605: Out of bounds read in Dawn
  * CVE-2022-2606: Use after free in Managed devices API
  * CVE-2022-2607: Use after free in Tab Strip
  * CVE-2022-2608: Use after free in Overview Mode
  * CVE-2022-2609: Use after free in Nearby Share
  * CVE-2022-2610: Insufficient policy enforcement in Background Fetch
  * CVE-2022-2611: Inappropriate implementation in Fullscreen API
  * CVE-2022-2612: Side-channel information leakage in Keyboard input
  * CVE-2022-2613: Use after free in Input
  * CVE-2022-2614: Use after free in Sign-In Flow
  * CVE-2022-2615: Insufficient policy enforcement in Cookies
  * CVE-2022-2616: Inappropriate implementation in Extensions API
  * CVE-2022-2617: Use after free in Extensions API
  * CVE-2022-2618: Insufficient validation of untrusted input in Internals
  * CVE-2022-2619: Insufficient validation of untrusted input in Settings
  * CVE-2022-2620: Use after free in WebUI
  * CVE-2022-2621: Use after free in Extensions
  * CVE-2022-2622: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-2623: Use after free in Offline
  * CVE-2022-2624: Heap buffer overflow in PDF
- Added patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-104-tflite-system-zlib.patch
- Removed patches:
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-compiler.patch
- Use FFmpeg 5.1 on TW</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660651200">- Re-enable our version of chrome-wrapper
- Set no sandbox if root is being used (https://crbug.com/638180)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660824000">- Chromium 104.0.5112.101 (boo#1202509):
  * CVE-2022-2852: Use after free in FedCM
  * CVE-2022-2854: Use after free in SwiftShader
  * CVE-2022-2855: Use after free in ANGLE
  * CVE-2022-2857: Use after free in Blink
  * CVE-2022-2858: Use after free in Sign-In Flow
  * CVE-2022-2853: Heap buffer overflow in Downloads
  * CVE-2022-2856: Insufficient validation of untrusted input in Intents
  * CVE-2022-2859: Use after free in Chrome OS Shell
  * CVE-2022-2860: Insufficient policy enforcement in Cookies
  * CVE-2022-2861: Inappropriate implementation in Extensions API</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1661169600">- Fix quoting in chrome-wrapper, don't put cwd on LD_LIBRARY_PATH</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1662033600">- Update chromium-symbolic.svg: this fixes bsc#1202403.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1662638400">- Chromium 105.0.5195.102 (boo#1203102):
  * CVE-2022-3075: Insufficient data validation in Mojo
- Chromium 105.0.5195.52 (boo#1202964):
  * CVE-2022-3038: Use after free in Network Service
  * CVE-2022-3039: Use after free in WebSQL
  * CVE-2022-3040: Use after free in Layout
  * CVE-2022-3041: Use after free in WebSQL
  * CVE-2022-3042: Use after free in PhoneHub
  * CVE-2022-3043: Heap buffer overflow in Screen Capture
  * CVE-2022-3044: Inappropriate implementation in Site Isolation
  * CVE-2022-3045: Insufficient validation of untrusted input in V8
  * CVE-2022-3046: Use after free in Browser Tag
  * CVE-2022-3071: Use after free in Tab Strip
  * CVE-2022-3047: Insufficient policy enforcement in Extensions API
  * CVE-2022-3048: Inappropriate implementation in Chrome OS lockscreen
  * CVE-2022-3049: Use after free in SplitScreen
  * CVE-2022-3050: Heap buffer overflow in WebUI
  * CVE-2022-3051: Heap buffer overflow in Exosphere
  * CVE-2022-3052: Heap buffer overflow in Window Manager
  * CVE-2022-3053: Inappropriate implementation in Pointer Lock
  * CVE-2022-3054: Insufficient policy enforcement in DevTools
  * CVE-2022-3055: Use after free in Passwords
  * CVE-2022-3056: Insufficient policy enforcement in Content Security Policy
  * CVE-2022-3057: Inappropriate implementation in iframe Sandbox
  * CVE-2022-3058: Use after free in Sign-In Flow
- Added patches:
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Bitmap-include.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-wayland-1.20.patch
  * chromium-105-compiler.patch
- Removed patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-78-protobuf-RepeatedPtrField-export.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663156800">- Chromium 105.0.5195.127 (boo#1203419):
  * CVE-2022-3195: Out of bounds write in Storage
  * CVE-2022-3196: Use after free in PDF
  * CVE-2022-3197: Use after free in PDF
  * CVE-2022-3198: Use after free in PDF
  * CVE-2022-3199: Use after free in Frames
  * CVE-2022-3200: Heap buffer overflow in Internals
  * CVE-2022-3201: Insufficient validation of untrusted input in DevTools
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1664625600">- Chromium 106.0.5249.91 (boo#1203808):
  * CVE-2022-3370: Use after free in Custom Elements
  * CVE-2022-3373: Out of bounds write in V8
- includes changes from 106.0.5249.61:
  * CVE-2022-3304: Use after free in CSS
  * CVE-2022-3201: Insufficient validation of untrusted input in Developer Tools
  * CVE-2022-3305: Use after free in Survey
  * CVE-2022-3306: Use after free in Survey
  * CVE-2022-3307: Use after free in Media
  * CVE-2022-3308: Insufficient policy enforcement in Developer Tools
  * CVE-2022-3309: Use after free in Assistant
  * CVE-2022-3310: Insufficient policy enforcement in Custom Tabs
  * CVE-2022-3311: Use after free in Import
  * CVE-2022-3312: Insufficient validation of untrusted input in VPN
  * CVE-2022-3313: Incorrect security UI in Full Screen
  * CVE-2022-3314: Use after free in Logging
  * CVE-2022-3315: Type confusion in Blink
  * CVE-2022-3316: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-3317: Insufficient validation of untrusted input in Intents
  * CVE-2022-3318: Use after free in ChromeOS Notifications
- drop patches:
  * chromium-104-tflite-system-zlib.patch
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
- add patches
  * chromium-106-ffmpeg-duration.patch
  * chromium-106-AutofillPopupControllerImpl-namespace.patch</changelog>
</package>
<package pkgid="765f907dc366b65dcd5896fce1099131e1780f3b85ff103b047e0ad577ed5f04" name="chromium" arch="src">
  <version epoch="0" ver="106.0.5249.91" rel="bp154.2.32.1"/>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1651665600">- Chromium 101.0.4951.54 (boo#1199118)
- Chromium 101.0.4951.41 (boo#1198917)
  * CVE-2022-1477: Use after free in Vulkan
  * CVE-2022-1478: Use after free in SwiftShader
  * CVE-2022-1479: Use after free in ANGLE
  * CVE-2022-1480: Use after free in Device API
  * CVE-2022-1481: Use after free in Sharing
  * CVE-2022-1482: Inappropriate implementation in WebGL
  * CVE-2022-1483: Heap buffer overflow in WebGPU
  * CVE-2022-1484: Heap buffer overflow in Web UI Settings
  * CVE-2022-1485: Use after free in File System API
  * CVE-2022-1486: Type Confusion in V8
  * CVE-2022-1487: Use after free in Ozone
  * CVE-2022-1488: Inappropriate implementation in Extensions API
  * CVE-2022-1489: Out of bounds memory access in UI Shelf
  * CVE-2022-1490: Use after free in Browser Switcher
  * CVE-2022-1491: Use after free in Bookmarks
  * CVE-2022-1492: Insufficient data validation in Blink Editing
  * CVE-2022-1493: Use after free in Dev Tools
  * CVE-2022-1494: Insufficient data validation in Trusted Types
  * CVE-2022-1495: Incorrect security UI in Downloads
  * CVE-2022-1496: Use after free in File Manager
  * CVE-2022-1497: Inappropriate implementation in Input
  * CVE-2022-1498: Inappropriate implementation in HTML Parser
  * CVE-2022-1499: Inappropriate implementation in WebAuthentication
  * CVE-2022-1500: Insufficient data validation in Dev Tools
  * CVE-2022-1501: Inappropriate implementation in iframe
- Added patches:
  * chromium-101-libxml-unbundle.patch
  * chromium-101-segmentation_platform-type.patch
- Removed patches:
  * chromium-100-SCTHashdanceMetadata-move.patch
  * chromium-100-GLImplementationParts-constexpr.patch
  * chromium-100-macro-typo.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1652270400">- Chromium 101.0.4951.64 (boo#1199409)
  * CVE-2022-1633: Use after free in Sharesheet
  * CVE-2022-1634: Use after free in Browser UI
  * CVE-2022-1635: Use after free in Permission Prompts
  * CVE-2022-1636: Use after free in Performance APIs
  * CVE-2022-1637: Inappropriate implementation in Web Contents
  * CVE-2022-1638: Heap buffer overflow in V8 Internationalization
  * CVE-2022-1639: Use after free in ANGLE
  * CVE-2022-1640: Use after free in Sharing
  * CVE-2022-1641: Use after free in Web UI Diagnostics</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1652616000">- Chromium 101.0.4951.67
  * fixes for other platforms</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1653652800">- Chromium 102.0.5001.61 (boo#1199893)
  * CVE-2022-1853: Use after free in Indexed DB
  * CVE-2022-1854: Use after free in ANGLE
  * CVE-2022-1855: Use after free in Messaging
  * CVE-2022-1856: Use after free in User Education
  * CVE-2022-1857: Insufficient policy enforcement in File System API
  * CVE-2022-1858: Out of bounds read in DevTools
  * CVE-2022-1859: Use after free in Performance Manager
  * CVE-2022-1860: Use after free in UI Foundations
  * CVE-2022-1861: Use after free in Sharing
  * CVE-2022-1862: Inappropriate implementation in Extensions
  * CVE-2022-1863: Use after free in Tab Groups
  * CVE-2022-1864: Use after free in WebApp Installs
  * CVE-2022-1865: Use after free in Bookmarks
  * CVE-2022-1866: Use after free in Tablet Mode
  * CVE-2022-1867: Insufficient validation of untrusted input in Data Transfer
  * CVE-2022-1868: Inappropriate implementation in Extensions API
  * CVE-2022-1869: Type Confusion in V8
  * CVE-2022-1870: Use after free in App Service
  * CVE-2022-1871: Insufficient policy enforcement in File System API
  * CVE-2022-1872: Insufficient policy enforcement in Extensions API
  * CVE-2022-1873: Insufficient policy enforcement in COOP
  * CVE-2022-1874: Insufficient policy enforcement in Safe Browsing
  * CVE-2022-1875: Inappropriate implementation in PDF
  * CVE-2022-1876: Heap buffer overflow in DevTools
- Added patches:
  * chromium-102-compiler.patch
  * chromium-102-fenced_frame_utils-include.patch
  * chromium-102-regex_pattern-array.patch
  * chromium-102-swiftshader-template-instantiation.patch
  * chromium-102-symbolize-include.patch
  * ffmpeg-new-channel-layout.patch
- Removed patches:
  * chromium-100-compiler.patch
  * chromium-80-QuicStreamSendBuffer-deleted-move-constructor.patch
  * chromium-95-quiche-include.patch
  * chromium-fix-swiftshader-template.patch
  * chromium-missing-include-tuple.patch
  * chromium-webrtc-stats-missing-vector.patch
  * chromium-101-segmentation_platform-type.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654084800">- Disable ARM control flow integrity, it causes build issues
  at the moment
- Try a different SVG (black logo on GNOME)
- Removed patches:
  * chromium-third_party-symbolize-missing-include.patch
  (replaced by chromium-102-symbolize-include.patch)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654689600">- Switch to GTK4 on TW and Leap 15.4+ (boo#1200139)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1654862400">- Chromium 102.0.5005.115 (boo#1200423)
  * CVE-2022-2007: Use after free in WebGPU
  * CVE-2022-2008: Out of bounds memory access in WebGL
  * CVE-2022-2010: Out of bounds read in compositing
  * CVE-2022-2011: Use after free in ANGLE</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1656158400">- Chromium 103.0.5060.53 (boo#1200783)
  * CVE-2022-2156: Use after free in Base
  * CVE-2022-2157: Use after free in Interest groups
  * CVE-2022-2158: Type Confusion in V8
  * CVE-2022-2160: Insufficient policy enforcement in DevTools
  * CVE-2022-2161: Use after free in WebApp Provider
  * CVE-2022-2162: Insufficient policy enforcement in File System API
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * CVE-2022-2164: Inappropriate implementation in Extensions API
  * CVE-2022-2165: Insufficient data validation in URL formatting
- Added patches:
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-VirtualCursor-std-layout.patch
  * chromium-103-compiler.patch
- Removed patches:
  * chromium-102-compiler.patch
  * chromium-91-sql-standard-layout-type.patch
  * chromium-101-libxml-unbundle.patch
  * chromium-102-fenced_frame_utils-include.patch
  * chromium-102-swiftshader-template-instantiation.patch
  * chromium-102-symbolize-include.patch
  * chromium-97-arm-tflite-cast.patch
  * chromium-97-ScrollView-reference.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657195200">- Chromium 103.0.5060.66
  * no upstream release notes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657368000">- Chromium 103.0.5060.114 (boo#1201216)
  * CVE-2022-2294: Heap buffer overflow in WebRTC
  * CVE-2022-2295: Type Confusion in V8
  * CVE-2022-2296: Use after free in Chrome OS Shell</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1658318400">- Chromium 103.0.5060.134 (boo#1201679):
  * CVE-2022-2477 : Use after free in Guest View
  * CVE-2022-2478 : Use after free in PDF
  * CVE-2022-2479 : Insufficient validation of untrusted input in File
  * CVE-2022-2480 : Use after free in Service Worker API
  * CVE-2022-2481: Use after free in Views
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1658577600">- Switch back to Clang so that we can use BTI on aarch64
  * Gold is too old - doesn't understand BTI
  * LD crashes on aarch64
- Re-enable LTO
- Prepare move to FFmpeg 5 for new channel layout
  (requires 5.1+)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660046400">- Chromium 104.0.5112.79 (boo#1202075)
  * CVE-2022-2603: Use after free in Omnibox
  * CVE-2022-2604: Use after free in Safe Browsing
  * CVE-2022-2605: Out of bounds read in Dawn
  * CVE-2022-2606: Use after free in Managed devices API
  * CVE-2022-2607: Use after free in Tab Strip
  * CVE-2022-2608: Use after free in Overview Mode
  * CVE-2022-2609: Use after free in Nearby Share
  * CVE-2022-2610: Insufficient policy enforcement in Background Fetch
  * CVE-2022-2611: Inappropriate implementation in Fullscreen API
  * CVE-2022-2612: Side-channel information leakage in Keyboard input
  * CVE-2022-2613: Use after free in Input
  * CVE-2022-2614: Use after free in Sign-In Flow
  * CVE-2022-2615: Insufficient policy enforcement in Cookies
  * CVE-2022-2616: Inappropriate implementation in Extensions API
  * CVE-2022-2617: Use after free in Extensions API
  * CVE-2022-2618: Insufficient validation of untrusted input in Internals
  * CVE-2022-2619: Insufficient validation of untrusted input in Settings
  * CVE-2022-2620: Use after free in WebUI
  * CVE-2022-2621: Use after free in Extensions
  * CVE-2022-2622: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-2623: Use after free in Offline
  * CVE-2022-2624: Heap buffer overflow in PDF
- Added patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-104-tflite-system-zlib.patch
- Removed patches:
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-compiler.patch
- Use FFmpeg 5.1 on TW</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660651200">- Re-enable our version of chrome-wrapper
- Set no sandbox if root is being used (https://crbug.com/638180)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660824000">- Chromium 104.0.5112.101 (boo#1202509):
  * CVE-2022-2852: Use after free in FedCM
  * CVE-2022-2854: Use after free in SwiftShader
  * CVE-2022-2855: Use after free in ANGLE
  * CVE-2022-2857: Use after free in Blink
  * CVE-2022-2858: Use after free in Sign-In Flow
  * CVE-2022-2853: Heap buffer overflow in Downloads
  * CVE-2022-2856: Insufficient validation of untrusted input in Intents
  * CVE-2022-2859: Use after free in Chrome OS Shell
  * CVE-2022-2860: Insufficient policy enforcement in Cookies
  * CVE-2022-2861: Inappropriate implementation in Extensions API</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1661169600">- Fix quoting in chrome-wrapper, don't put cwd on LD_LIBRARY_PATH</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1662033600">- Update chromium-symbolic.svg: this fixes bsc#1202403.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1662638400">- Chromium 105.0.5195.102 (boo#1203102):
  * CVE-2022-3075: Insufficient data validation in Mojo
- Chromium 105.0.5195.52 (boo#1202964):
  * CVE-2022-3038: Use after free in Network Service
  * CVE-2022-3039: Use after free in WebSQL
  * CVE-2022-3040: Use after free in Layout
  * CVE-2022-3041: Use after free in WebSQL
  * CVE-2022-3042: Use after free in PhoneHub
  * CVE-2022-3043: Heap buffer overflow in Screen Capture
  * CVE-2022-3044: Inappropriate implementation in Site Isolation
  * CVE-2022-3045: Insufficient validation of untrusted input in V8
  * CVE-2022-3046: Use after free in Browser Tag
  * CVE-2022-3071: Use after free in Tab Strip
  * CVE-2022-3047: Insufficient policy enforcement in Extensions API
  * CVE-2022-3048: Inappropriate implementation in Chrome OS lockscreen
  * CVE-2022-3049: Use after free in SplitScreen
  * CVE-2022-3050: Heap buffer overflow in WebUI
  * CVE-2022-3051: Heap buffer overflow in Exosphere
  * CVE-2022-3052: Heap buffer overflow in Window Manager
  * CVE-2022-3053: Inappropriate implementation in Pointer Lock
  * CVE-2022-3054: Insufficient policy enforcement in DevTools
  * CVE-2022-3055: Use after free in Passwords
  * CVE-2022-3056: Insufficient policy enforcement in Content Security Policy
  * CVE-2022-3057: Inappropriate implementation in iframe Sandbox
  * CVE-2022-3058: Use after free in Sign-In Flow
- Added patches:
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Bitmap-include.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-wayland-1.20.patch
  * chromium-105-compiler.patch
- Removed patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-78-protobuf-RepeatedPtrField-export.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663156800">- Chromium 105.0.5195.127 (boo#1203419):
  * CVE-2022-3195: Out of bounds write in Storage
  * CVE-2022-3196: Use after free in PDF
  * CVE-2022-3197: Use after free in PDF
  * CVE-2022-3198: Use after free in PDF
  * CVE-2022-3199: Use after free in Frames
  * CVE-2022-3200: Heap buffer overflow in Internals
  * CVE-2022-3201: Insufficient validation of untrusted input in DevTools
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1664625600">- Chromium 106.0.5249.91 (boo#1203808):
  * CVE-2022-3370: Use after free in Custom Elements
  * CVE-2022-3373: Out of bounds write in V8
- includes changes from 106.0.5249.61:
  * CVE-2022-3304: Use after free in CSS
  * CVE-2022-3201: Insufficient validation of untrusted input in Developer Tools
  * CVE-2022-3305: Use after free in Survey
  * CVE-2022-3306: Use after free in Survey
  * CVE-2022-3307: Use after free in Media
  * CVE-2022-3308: Insufficient policy enforcement in Developer Tools
  * CVE-2022-3309: Use after free in Assistant
  * CVE-2022-3310: Insufficient policy enforcement in Custom Tabs
  * CVE-2022-3311: Use after free in Import
  * CVE-2022-3312: Insufficient validation of untrusted input in VPN
  * CVE-2022-3313: Incorrect security UI in Full Screen
  * CVE-2022-3314: Use after free in Logging
  * CVE-2022-3315: Type confusion in Blink
  * CVE-2022-3316: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-3317: Insufficient validation of untrusted input in Intents
  * CVE-2022-3318: Use after free in ChromeOS Notifications
- drop patches:
  * chromium-104-tflite-system-zlib.patch
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
- add patches
  * chromium-106-ffmpeg-duration.patch
  * chromium-106-AutofillPopupControllerImpl-namespace.patch</changelog>
</package>
<package pkgid="50b38fe1c72fc00035c6a5aa032a247230864d9cd1093b8fdbd57692558f50ed" name="chromium" arch="x86_64">
  <version epoch="0" ver="106.0.5249.91" rel="bp154.2.32.1"/>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1651665600">- Chromium 101.0.4951.54 (boo#1199118)
- Chromium 101.0.4951.41 (boo#1198917)
  * CVE-2022-1477: Use after free in Vulkan
  * CVE-2022-1478: Use after free in SwiftShader
  * CVE-2022-1479: Use after free in ANGLE
  * CVE-2022-1480: Use after free in Device API
  * CVE-2022-1481: Use after free in Sharing
  * CVE-2022-1482: Inappropriate implementation in WebGL
  * CVE-2022-1483: Heap buffer overflow in WebGPU
  * CVE-2022-1484: Heap buffer overflow in Web UI Settings
  * CVE-2022-1485: Use after free in File System API
  * CVE-2022-1486: Type Confusion in V8
  * CVE-2022-1487: Use after free in Ozone
  * CVE-2022-1488: Inappropriate implementation in Extensions API
  * CVE-2022-1489: Out of bounds memory access in UI Shelf
  * CVE-2022-1490: Use after free in Browser Switcher
  * CVE-2022-1491: Use after free in Bookmarks
  * CVE-2022-1492: Insufficient data validation in Blink Editing
  * CVE-2022-1493: Use after free in Dev Tools
  * CVE-2022-1494: Insufficient data validation in Trusted Types
  * CVE-2022-1495: Incorrect security UI in Downloads
  * CVE-2022-1496: Use after free in File Manager
  * CVE-2022-1497: Inappropriate implementation in Input
  * CVE-2022-1498: Inappropriate implementation in HTML Parser
  * CVE-2022-1499: Inappropriate implementation in WebAuthentication
  * CVE-2022-1500: Insufficient data validation in Dev Tools
  * CVE-2022-1501: Inappropriate implementation in iframe
- Added patches:
  * chromium-101-libxml-unbundle.patch
  * chromium-101-segmentation_platform-type.patch
- Removed patches:
  * chromium-100-SCTHashdanceMetadata-move.patch
  * chromium-100-GLImplementationParts-constexpr.patch
  * chromium-100-macro-typo.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1652270400">- Chromium 101.0.4951.64 (boo#1199409)
  * CVE-2022-1633: Use after free in Sharesheet
  * CVE-2022-1634: Use after free in Browser UI
  * CVE-2022-1635: Use after free in Permission Prompts
  * CVE-2022-1636: Use after free in Performance APIs
  * CVE-2022-1637: Inappropriate implementation in Web Contents
  * CVE-2022-1638: Heap buffer overflow in V8 Internationalization
  * CVE-2022-1639: Use after free in ANGLE
  * CVE-2022-1640: Use after free in Sharing
  * CVE-2022-1641: Use after free in Web UI Diagnostics</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1652616000">- Chromium 101.0.4951.67
  * fixes for other platforms</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1653652800">- Chromium 102.0.5001.61 (boo#1199893)
  * CVE-2022-1853: Use after free in Indexed DB
  * CVE-2022-1854: Use after free in ANGLE
  * CVE-2022-1855: Use after free in Messaging
  * CVE-2022-1856: Use after free in User Education
  * CVE-2022-1857: Insufficient policy enforcement in File System API
  * CVE-2022-1858: Out of bounds read in DevTools
  * CVE-2022-1859: Use after free in Performance Manager
  * CVE-2022-1860: Use after free in UI Foundations
  * CVE-2022-1861: Use after free in Sharing
  * CVE-2022-1862: Inappropriate implementation in Extensions
  * CVE-2022-1863: Use after free in Tab Groups
  * CVE-2022-1864: Use after free in WebApp Installs
  * CVE-2022-1865: Use after free in Bookmarks
  * CVE-2022-1866: Use after free in Tablet Mode
  * CVE-2022-1867: Insufficient validation of untrusted input in Data Transfer
  * CVE-2022-1868: Inappropriate implementation in Extensions API
  * CVE-2022-1869: Type Confusion in V8
  * CVE-2022-1870: Use after free in App Service
  * CVE-2022-1871: Insufficient policy enforcement in File System API
  * CVE-2022-1872: Insufficient policy enforcement in Extensions API
  * CVE-2022-1873: Insufficient policy enforcement in COOP
  * CVE-2022-1874: Insufficient policy enforcement in Safe Browsing
  * CVE-2022-1875: Inappropriate implementation in PDF
  * CVE-2022-1876: Heap buffer overflow in DevTools
- Added patches:
  * chromium-102-compiler.patch
  * chromium-102-fenced_frame_utils-include.patch
  * chromium-102-regex_pattern-array.patch
  * chromium-102-swiftshader-template-instantiation.patch
  * chromium-102-symbolize-include.patch
  * ffmpeg-new-channel-layout.patch
- Removed patches:
  * chromium-100-compiler.patch
  * chromium-80-QuicStreamSendBuffer-deleted-move-constructor.patch
  * chromium-95-quiche-include.patch
  * chromium-fix-swiftshader-template.patch
  * chromium-missing-include-tuple.patch
  * chromium-webrtc-stats-missing-vector.patch
  * chromium-101-segmentation_platform-type.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654084800">- Disable ARM control flow integrity, it causes build issues
  at the moment
- Try a different SVG (black logo on GNOME)
- Removed patches:
  * chromium-third_party-symbolize-missing-include.patch
  (replaced by chromium-102-symbolize-include.patch)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654689600">- Switch to GTK4 on TW and Leap 15.4+ (boo#1200139)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1654862400">- Chromium 102.0.5005.115 (boo#1200423)
  * CVE-2022-2007: Use after free in WebGPU
  * CVE-2022-2008: Out of bounds memory access in WebGL
  * CVE-2022-2010: Out of bounds read in compositing
  * CVE-2022-2011: Use after free in ANGLE</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1656158400">- Chromium 103.0.5060.53 (boo#1200783)
  * CVE-2022-2156: Use after free in Base
  * CVE-2022-2157: Use after free in Interest groups
  * CVE-2022-2158: Type Confusion in V8
  * CVE-2022-2160: Insufficient policy enforcement in DevTools
  * CVE-2022-2161: Use after free in WebApp Provider
  * CVE-2022-2162: Insufficient policy enforcement in File System API
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * CVE-2022-2164: Inappropriate implementation in Extensions API
  * CVE-2022-2165: Insufficient data validation in URL formatting
- Added patches:
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-VirtualCursor-std-layout.patch
  * chromium-103-compiler.patch
- Removed patches:
  * chromium-102-compiler.patch
  * chromium-91-sql-standard-layout-type.patch
  * chromium-101-libxml-unbundle.patch
  * chromium-102-fenced_frame_utils-include.patch
  * chromium-102-swiftshader-template-instantiation.patch
  * chromium-102-symbolize-include.patch
  * chromium-97-arm-tflite-cast.patch
  * chromium-97-ScrollView-reference.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657195200">- Chromium 103.0.5060.66
  * no upstream release notes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657368000">- Chromium 103.0.5060.114 (boo#1201216)
  * CVE-2022-2294: Heap buffer overflow in WebRTC
  * CVE-2022-2295: Type Confusion in V8
  * CVE-2022-2296: Use after free in Chrome OS Shell</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1658318400">- Chromium 103.0.5060.134 (boo#1201679):
  * CVE-2022-2477 : Use after free in Guest View
  * CVE-2022-2478 : Use after free in PDF
  * CVE-2022-2479 : Insufficient validation of untrusted input in File
  * CVE-2022-2480 : Use after free in Service Worker API
  * CVE-2022-2481: Use after free in Views
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1658577600">- Switch back to Clang so that we can use BTI on aarch64
  * Gold is too old - doesn't understand BTI
  * LD crashes on aarch64
- Re-enable LTO
- Prepare move to FFmpeg 5 for new channel layout
  (requires 5.1+)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660046400">- Chromium 104.0.5112.79 (boo#1202075)
  * CVE-2022-2603: Use after free in Omnibox
  * CVE-2022-2604: Use after free in Safe Browsing
  * CVE-2022-2605: Out of bounds read in Dawn
  * CVE-2022-2606: Use after free in Managed devices API
  * CVE-2022-2607: Use after free in Tab Strip
  * CVE-2022-2608: Use after free in Overview Mode
  * CVE-2022-2609: Use after free in Nearby Share
  * CVE-2022-2610: Insufficient policy enforcement in Background Fetch
  * CVE-2022-2611: Inappropriate implementation in Fullscreen API
  * CVE-2022-2612: Side-channel information leakage in Keyboard input
  * CVE-2022-2613: Use after free in Input
  * CVE-2022-2614: Use after free in Sign-In Flow
  * CVE-2022-2615: Insufficient policy enforcement in Cookies
  * CVE-2022-2616: Inappropriate implementation in Extensions API
  * CVE-2022-2617: Use after free in Extensions API
  * CVE-2022-2618: Insufficient validation of untrusted input in Internals
  * CVE-2022-2619: Insufficient validation of untrusted input in Settings
  * CVE-2022-2620: Use after free in WebUI
  * CVE-2022-2621: Use after free in Extensions
  * CVE-2022-2622: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-2623: Use after free in Offline
  * CVE-2022-2624: Heap buffer overflow in PDF
- Added patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-104-tflite-system-zlib.patch
- Removed patches:
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-compiler.patch
- Use FFmpeg 5.1 on TW</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660651200">- Re-enable our version of chrome-wrapper
- Set no sandbox if root is being used (https://crbug.com/638180)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660824000">- Chromium 104.0.5112.101 (boo#1202509):
  * CVE-2022-2852: Use after free in FedCM
  * CVE-2022-2854: Use after free in SwiftShader
  * CVE-2022-2855: Use after free in ANGLE
  * CVE-2022-2857: Use after free in Blink
  * CVE-2022-2858: Use after free in Sign-In Flow
  * CVE-2022-2853: Heap buffer overflow in Downloads
  * CVE-2022-2856: Insufficient validation of untrusted input in Intents
  * CVE-2022-2859: Use after free in Chrome OS Shell
  * CVE-2022-2860: Insufficient policy enforcement in Cookies
  * CVE-2022-2861: Inappropriate implementation in Extensions API</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1661169600">- Fix quoting in chrome-wrapper, don't put cwd on LD_LIBRARY_PATH</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1662033600">- Update chromium-symbolic.svg: this fixes bsc#1202403.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1662638400">- Chromium 105.0.5195.102 (boo#1203102):
  * CVE-2022-3075: Insufficient data validation in Mojo
- Chromium 105.0.5195.52 (boo#1202964):
  * CVE-2022-3038: Use after free in Network Service
  * CVE-2022-3039: Use after free in WebSQL
  * CVE-2022-3040: Use after free in Layout
  * CVE-2022-3041: Use after free in WebSQL
  * CVE-2022-3042: Use after free in PhoneHub
  * CVE-2022-3043: Heap buffer overflow in Screen Capture
  * CVE-2022-3044: Inappropriate implementation in Site Isolation
  * CVE-2022-3045: Insufficient validation of untrusted input in V8
  * CVE-2022-3046: Use after free in Browser Tag
  * CVE-2022-3071: Use after free in Tab Strip
  * CVE-2022-3047: Insufficient policy enforcement in Extensions API
  * CVE-2022-3048: Inappropriate implementation in Chrome OS lockscreen
  * CVE-2022-3049: Use after free in SplitScreen
  * CVE-2022-3050: Heap buffer overflow in WebUI
  * CVE-2022-3051: Heap buffer overflow in Exosphere
  * CVE-2022-3052: Heap buffer overflow in Window Manager
  * CVE-2022-3053: Inappropriate implementation in Pointer Lock
  * CVE-2022-3054: Insufficient policy enforcement in DevTools
  * CVE-2022-3055: Use after free in Passwords
  * CVE-2022-3056: Insufficient policy enforcement in Content Security Policy
  * CVE-2022-3057: Inappropriate implementation in iframe Sandbox
  * CVE-2022-3058: Use after free in Sign-In Flow
- Added patches:
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Bitmap-include.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-wayland-1.20.patch
  * chromium-105-compiler.patch
- Removed patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-78-protobuf-RepeatedPtrField-export.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663156800">- Chromium 105.0.5195.127 (boo#1203419):
  * CVE-2022-3195: Out of bounds write in Storage
  * CVE-2022-3196: Use after free in PDF
  * CVE-2022-3197: Use after free in PDF
  * CVE-2022-3198: Use after free in PDF
  * CVE-2022-3199: Use after free in Frames
  * CVE-2022-3200: Heap buffer overflow in Internals
  * CVE-2022-3201: Insufficient validation of untrusted input in DevTools
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1664625600">- Chromium 106.0.5249.91 (boo#1203808):
  * CVE-2022-3370: Use after free in Custom Elements
  * CVE-2022-3373: Out of bounds write in V8
- includes changes from 106.0.5249.61:
  * CVE-2022-3304: Use after free in CSS
  * CVE-2022-3201: Insufficient validation of untrusted input in Developer Tools
  * CVE-2022-3305: Use after free in Survey
  * CVE-2022-3306: Use after free in Survey
  * CVE-2022-3307: Use after free in Media
  * CVE-2022-3308: Insufficient policy enforcement in Developer Tools
  * CVE-2022-3309: Use after free in Assistant
  * CVE-2022-3310: Insufficient policy enforcement in Custom Tabs
  * CVE-2022-3311: Use after free in Import
  * CVE-2022-3312: Insufficient validation of untrusted input in VPN
  * CVE-2022-3313: Incorrect security UI in Full Screen
  * CVE-2022-3314: Use after free in Logging
  * CVE-2022-3315: Type confusion in Blink
  * CVE-2022-3316: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-3317: Insufficient validation of untrusted input in Intents
  * CVE-2022-3318: Use after free in ChromeOS Notifications
- drop patches:
  * chromium-104-tflite-system-zlib.patch
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
- add patches
  * chromium-106-ffmpeg-duration.patch
  * chromium-106-AutofillPopupControllerImpl-namespace.patch</changelog>
</package>
<package pkgid="a00edf8cff61110c4fd1e4ec77a9987578e6aba5125045364649299543b79537" name="chromium" arch="aarch64">
  <version epoch="0" ver="107.0.5304.110" rel="bp154.2.43.1"/>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654689600">- Switch to GTK4 on TW and Leap 15.4+ (boo#1200139)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1654862400">- Chromium 102.0.5005.115 (boo#1200423)
  * CVE-2022-2007: Use after free in WebGPU
  * CVE-2022-2008: Out of bounds memory access in WebGL
  * CVE-2022-2010: Out of bounds read in compositing
  * CVE-2022-2011: Use after free in ANGLE</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1656158400">- Chromium 103.0.5060.53 (boo#1200783)
  * CVE-2022-2156: Use after free in Base
  * CVE-2022-2157: Use after free in Interest groups
  * CVE-2022-2158: Type Confusion in V8
  * CVE-2022-2160: Insufficient policy enforcement in DevTools
  * CVE-2022-2161: Use after free in WebApp Provider
  * CVE-2022-2162: Insufficient policy enforcement in File System API
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * CVE-2022-2164: Inappropriate implementation in Extensions API
  * CVE-2022-2165: Insufficient data validation in URL formatting
- Added patches:
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-VirtualCursor-std-layout.patch
  * chromium-103-compiler.patch
- Removed patches:
  * chromium-102-compiler.patch
  * chromium-91-sql-standard-layout-type.patch
  * chromium-101-libxml-unbundle.patch
  * chromium-102-fenced_frame_utils-include.patch
  * chromium-102-swiftshader-template-instantiation.patch
  * chromium-102-symbolize-include.patch
  * chromium-97-arm-tflite-cast.patch
  * chromium-97-ScrollView-reference.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657195200">- Chromium 103.0.5060.66
  * no upstream release notes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657368000">- Chromium 103.0.5060.114 (boo#1201216)
  * CVE-2022-2294: Heap buffer overflow in WebRTC
  * CVE-2022-2295: Type Confusion in V8
  * CVE-2022-2296: Use after free in Chrome OS Shell</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1658318400">- Chromium 103.0.5060.134 (boo#1201679):
  * CVE-2022-2477 : Use after free in Guest View
  * CVE-2022-2478 : Use after free in PDF
  * CVE-2022-2479 : Insufficient validation of untrusted input in File
  * CVE-2022-2480 : Use after free in Service Worker API
  * CVE-2022-2481: Use after free in Views
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1658577600">- Switch back to Clang so that we can use BTI on aarch64
  * Gold is too old - doesn't understand BTI
  * LD crashes on aarch64
- Re-enable LTO
- Prepare move to FFmpeg 5 for new channel layout
  (requires 5.1+)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660046400">- Chromium 104.0.5112.79 (boo#1202075)
  * CVE-2022-2603: Use after free in Omnibox
  * CVE-2022-2604: Use after free in Safe Browsing
  * CVE-2022-2605: Out of bounds read in Dawn
  * CVE-2022-2606: Use after free in Managed devices API
  * CVE-2022-2607: Use after free in Tab Strip
  * CVE-2022-2608: Use after free in Overview Mode
  * CVE-2022-2609: Use after free in Nearby Share
  * CVE-2022-2610: Insufficient policy enforcement in Background Fetch
  * CVE-2022-2611: Inappropriate implementation in Fullscreen API
  * CVE-2022-2612: Side-channel information leakage in Keyboard input
  * CVE-2022-2613: Use after free in Input
  * CVE-2022-2614: Use after free in Sign-In Flow
  * CVE-2022-2615: Insufficient policy enforcement in Cookies
  * CVE-2022-2616: Inappropriate implementation in Extensions API
  * CVE-2022-2617: Use after free in Extensions API
  * CVE-2022-2618: Insufficient validation of untrusted input in Internals
  * CVE-2022-2619: Insufficient validation of untrusted input in Settings
  * CVE-2022-2620: Use after free in WebUI
  * CVE-2022-2621: Use after free in Extensions
  * CVE-2022-2622: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-2623: Use after free in Offline
  * CVE-2022-2624: Heap buffer overflow in PDF
- Added patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-104-tflite-system-zlib.patch
- Removed patches:
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-compiler.patch
- Use FFmpeg 5.1 on TW</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660651200">- Re-enable our version of chrome-wrapper
- Set no sandbox if root is being used (https://crbug.com/638180)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660824000">- Chromium 104.0.5112.101 (boo#1202509):
  * CVE-2022-2852: Use after free in FedCM
  * CVE-2022-2854: Use after free in SwiftShader
  * CVE-2022-2855: Use after free in ANGLE
  * CVE-2022-2857: Use after free in Blink
  * CVE-2022-2858: Use after free in Sign-In Flow
  * CVE-2022-2853: Heap buffer overflow in Downloads
  * CVE-2022-2856: Insufficient validation of untrusted input in Intents
  * CVE-2022-2859: Use after free in Chrome OS Shell
  * CVE-2022-2860: Insufficient policy enforcement in Cookies
  * CVE-2022-2861: Inappropriate implementation in Extensions API</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1661169600">- Fix quoting in chrome-wrapper, don't put cwd on LD_LIBRARY_PATH</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1662033600">- Update chromium-symbolic.svg: this fixes bsc#1202403.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1662638400">- Chromium 105.0.5195.102 (boo#1203102):
  * CVE-2022-3075: Insufficient data validation in Mojo
- Chromium 105.0.5195.52 (boo#1202964):
  * CVE-2022-3038: Use after free in Network Service
  * CVE-2022-3039: Use after free in WebSQL
  * CVE-2022-3040: Use after free in Layout
  * CVE-2022-3041: Use after free in WebSQL
  * CVE-2022-3042: Use after free in PhoneHub
  * CVE-2022-3043: Heap buffer overflow in Screen Capture
  * CVE-2022-3044: Inappropriate implementation in Site Isolation
  * CVE-2022-3045: Insufficient validation of untrusted input in V8
  * CVE-2022-3046: Use after free in Browser Tag
  * CVE-2022-3071: Use after free in Tab Strip
  * CVE-2022-3047: Insufficient policy enforcement in Extensions API
  * CVE-2022-3048: Inappropriate implementation in Chrome OS lockscreen
  * CVE-2022-3049: Use after free in SplitScreen
  * CVE-2022-3050: Heap buffer overflow in WebUI
  * CVE-2022-3051: Heap buffer overflow in Exosphere
  * CVE-2022-3052: Heap buffer overflow in Window Manager
  * CVE-2022-3053: Inappropriate implementation in Pointer Lock
  * CVE-2022-3054: Insufficient policy enforcement in DevTools
  * CVE-2022-3055: Use after free in Passwords
  * CVE-2022-3056: Insufficient policy enforcement in Content Security Policy
  * CVE-2022-3057: Inappropriate implementation in iframe Sandbox
  * CVE-2022-3058: Use after free in Sign-In Flow
- Added patches:
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Bitmap-include.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-wayland-1.20.patch
  * chromium-105-compiler.patch
- Removed patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-78-protobuf-RepeatedPtrField-export.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663156800">- Chromium 105.0.5195.127 (boo#1203419):
  * CVE-2022-3195: Out of bounds write in Storage
  * CVE-2022-3196: Use after free in PDF
  * CVE-2022-3197: Use after free in PDF
  * CVE-2022-3198: Use after free in PDF
  * CVE-2022-3199: Use after free in Frames
  * CVE-2022-3200: Heap buffer overflow in Internals
  * CVE-2022-3201: Insufficient validation of untrusted input in DevTools
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1664625600">- Chromium 106.0.5249.91 (boo#1203808):
  * CVE-2022-3370: Use after free in Custom Elements
  * CVE-2022-3373: Out of bounds write in V8
- includes changes from 106.0.5249.61:
  * CVE-2022-3304: Use after free in CSS
  * CVE-2022-3201: Insufficient validation of untrusted input in Developer Tools
  * CVE-2022-3305: Use after free in Survey
  * CVE-2022-3306: Use after free in Survey
  * CVE-2022-3307: Use after free in Media
  * CVE-2022-3308: Insufficient policy enforcement in Developer Tools
  * CVE-2022-3309: Use after free in Assistant
  * CVE-2022-3310: Insufficient policy enforcement in Custom Tabs
  * CVE-2022-3311: Use after free in Import
  * CVE-2022-3312: Insufficient validation of untrusted input in VPN
  * CVE-2022-3313: Incorrect security UI in Full Screen
  * CVE-2022-3314: Use after free in Logging
  * CVE-2022-3315: Type confusion in Blink
  * CVE-2022-3316: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-3317: Insufficient validation of untrusted input in Intents
  * CVE-2022-3318: Use after free in ChromeOS Notifications
- drop patches:
  * chromium-104-tflite-system-zlib.patch
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
- add patches
  * chromium-106-ffmpeg-duration.patch
  * chromium-106-AutofillPopupControllerImpl-namespace.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1665057600">- Chromium 106.0.5249.103:
  * fix possible cache manager deadlock
  * Fix right-click menu appearing unexpectedly affecting screen
    readers</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1665576000">- Chromium 106.0.5249.119 (boo#1204223)
  * CVE-2022-3445: Use after free in Skia
  * CVE-2022-3446: Heap buffer overflow in WebSQL
  * CVE-2022-3447: Inappropriate implementation in Custom Tabs
  * CVE-2022-3448: Use after free in Permissions API
  * CVE-2022-3449: Use after free in Safe Browsing
  * CVE-2022-3450: Use after free in Peer Connection</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1666872000">- Chromium 107.0.5304.68 (boo#1204732)
  * CVE-2022-3652: Type Confusion in V8
  * CVE-2022-3653: Heap buffer overflow in Vulkan
  * CVE-2022-3654: Use after free in Layout
  * CVE-2022-3655: Heap buffer overflow in Media Galleries
  * CVE-2022-3656: Insufficient data validation in File System
  * CVE-2022-3657: Use after free in Extensions
  * CVE-2022-3658: Use after free in Feedback service on Chrome OS
  * CVE-2022-3659: Use after free in Accessibility
  * CVE-2022-3660: Inappropriate implementation in Full screen mode
  * CVE-2022-3661: Insufficient data validation in Extensions
- Added patches:
  * chromium-107-compiler.patch
  * chromium-107-system-zlib.patch
- Removed patches:
  * chromium-105-compiler.patch
  * chromium-105-Bitmap-include.patch
  * chromium-106-AutofillPopupControllerImpl-namespace.patch
- Unbundle libyuv and libavif on TW
- Prepare 15.5
- Use qt on 15.4+ (15.3 too old)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1666958400">- Chromium 107.0.5304.87 (boo#1204819)
  * CVE-2022-3723: Type Confusion in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1667995200">- Chromium 107.0.5304.110 (boo#1205221)
  * CVE-2022-3885: Use after free in V8
  * CVE-2022-3886: Use after free in Speech Recognition
  * CVE-2022-3887: Use after free in Web Workers
  * CVE-2022-3888: Use after free in WebCodecs
  * CVE-2022-3889: Type Confusion in V8
  * CVE-2022-3890: Heap buffer overflow in Crashpad</changelog>
</package>
<package pkgid="d7e7087438d77a6ebcfa6b907cb78a8b474e1f3cebbe6154b81f69ec7664f3ee" name="chromium" arch="src">
  <version epoch="0" ver="107.0.5304.110" rel="bp154.2.43.1"/>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654689600">- Switch to GTK4 on TW and Leap 15.4+ (boo#1200139)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1654862400">- Chromium 102.0.5005.115 (boo#1200423)
  * CVE-2022-2007: Use after free in WebGPU
  * CVE-2022-2008: Out of bounds memory access in WebGL
  * CVE-2022-2010: Out of bounds read in compositing
  * CVE-2022-2011: Use after free in ANGLE</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1656158400">- Chromium 103.0.5060.53 (boo#1200783)
  * CVE-2022-2156: Use after free in Base
  * CVE-2022-2157: Use after free in Interest groups
  * CVE-2022-2158: Type Confusion in V8
  * CVE-2022-2160: Insufficient policy enforcement in DevTools
  * CVE-2022-2161: Use after free in WebApp Provider
  * CVE-2022-2162: Insufficient policy enforcement in File System API
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * CVE-2022-2164: Inappropriate implementation in Extensions API
  * CVE-2022-2165: Insufficient data validation in URL formatting
- Added patches:
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-VirtualCursor-std-layout.patch
  * chromium-103-compiler.patch
- Removed patches:
  * chromium-102-compiler.patch
  * chromium-91-sql-standard-layout-type.patch
  * chromium-101-libxml-unbundle.patch
  * chromium-102-fenced_frame_utils-include.patch
  * chromium-102-swiftshader-template-instantiation.patch
  * chromium-102-symbolize-include.patch
  * chromium-97-arm-tflite-cast.patch
  * chromium-97-ScrollView-reference.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657195200">- Chromium 103.0.5060.66
  * no upstream release notes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657368000">- Chromium 103.0.5060.114 (boo#1201216)
  * CVE-2022-2294: Heap buffer overflow in WebRTC
  * CVE-2022-2295: Type Confusion in V8
  * CVE-2022-2296: Use after free in Chrome OS Shell</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1658318400">- Chromium 103.0.5060.134 (boo#1201679):
  * CVE-2022-2477 : Use after free in Guest View
  * CVE-2022-2478 : Use after free in PDF
  * CVE-2022-2479 : Insufficient validation of untrusted input in File
  * CVE-2022-2480 : Use after free in Service Worker API
  * CVE-2022-2481: Use after free in Views
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1658577600">- Switch back to Clang so that we can use BTI on aarch64
  * Gold is too old - doesn't understand BTI
  * LD crashes on aarch64
- Re-enable LTO
- Prepare move to FFmpeg 5 for new channel layout
  (requires 5.1+)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660046400">- Chromium 104.0.5112.79 (boo#1202075)
  * CVE-2022-2603: Use after free in Omnibox
  * CVE-2022-2604: Use after free in Safe Browsing
  * CVE-2022-2605: Out of bounds read in Dawn
  * CVE-2022-2606: Use after free in Managed devices API
  * CVE-2022-2607: Use after free in Tab Strip
  * CVE-2022-2608: Use after free in Overview Mode
  * CVE-2022-2609: Use after free in Nearby Share
  * CVE-2022-2610: Insufficient policy enforcement in Background Fetch
  * CVE-2022-2611: Inappropriate implementation in Fullscreen API
  * CVE-2022-2612: Side-channel information leakage in Keyboard input
  * CVE-2022-2613: Use after free in Input
  * CVE-2022-2614: Use after free in Sign-In Flow
  * CVE-2022-2615: Insufficient policy enforcement in Cookies
  * CVE-2022-2616: Inappropriate implementation in Extensions API
  * CVE-2022-2617: Use after free in Extensions API
  * CVE-2022-2618: Insufficient validation of untrusted input in Internals
  * CVE-2022-2619: Insufficient validation of untrusted input in Settings
  * CVE-2022-2620: Use after free in WebUI
  * CVE-2022-2621: Use after free in Extensions
  * CVE-2022-2622: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-2623: Use after free in Offline
  * CVE-2022-2624: Heap buffer overflow in PDF
- Added patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-104-tflite-system-zlib.patch
- Removed patches:
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-compiler.patch
- Use FFmpeg 5.1 on TW</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660651200">- Re-enable our version of chrome-wrapper
- Set no sandbox if root is being used (https://crbug.com/638180)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660824000">- Chromium 104.0.5112.101 (boo#1202509):
  * CVE-2022-2852: Use after free in FedCM
  * CVE-2022-2854: Use after free in SwiftShader
  * CVE-2022-2855: Use after free in ANGLE
  * CVE-2022-2857: Use after free in Blink
  * CVE-2022-2858: Use after free in Sign-In Flow
  * CVE-2022-2853: Heap buffer overflow in Downloads
  * CVE-2022-2856: Insufficient validation of untrusted input in Intents
  * CVE-2022-2859: Use after free in Chrome OS Shell
  * CVE-2022-2860: Insufficient policy enforcement in Cookies
  * CVE-2022-2861: Inappropriate implementation in Extensions API</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1661169600">- Fix quoting in chrome-wrapper, don't put cwd on LD_LIBRARY_PATH</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1662033600">- Update chromium-symbolic.svg: this fixes bsc#1202403.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1662638400">- Chromium 105.0.5195.102 (boo#1203102):
  * CVE-2022-3075: Insufficient data validation in Mojo
- Chromium 105.0.5195.52 (boo#1202964):
  * CVE-2022-3038: Use after free in Network Service
  * CVE-2022-3039: Use after free in WebSQL
  * CVE-2022-3040: Use after free in Layout
  * CVE-2022-3041: Use after free in WebSQL
  * CVE-2022-3042: Use after free in PhoneHub
  * CVE-2022-3043: Heap buffer overflow in Screen Capture
  * CVE-2022-3044: Inappropriate implementation in Site Isolation
  * CVE-2022-3045: Insufficient validation of untrusted input in V8
  * CVE-2022-3046: Use after free in Browser Tag
  * CVE-2022-3071: Use after free in Tab Strip
  * CVE-2022-3047: Insufficient policy enforcement in Extensions API
  * CVE-2022-3048: Inappropriate implementation in Chrome OS lockscreen
  * CVE-2022-3049: Use after free in SplitScreen
  * CVE-2022-3050: Heap buffer overflow in WebUI
  * CVE-2022-3051: Heap buffer overflow in Exosphere
  * CVE-2022-3052: Heap buffer overflow in Window Manager
  * CVE-2022-3053: Inappropriate implementation in Pointer Lock
  * CVE-2022-3054: Insufficient policy enforcement in DevTools
  * CVE-2022-3055: Use after free in Passwords
  * CVE-2022-3056: Insufficient policy enforcement in Content Security Policy
  * CVE-2022-3057: Inappropriate implementation in iframe Sandbox
  * CVE-2022-3058: Use after free in Sign-In Flow
- Added patches:
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Bitmap-include.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-wayland-1.20.patch
  * chromium-105-compiler.patch
- Removed patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-78-protobuf-RepeatedPtrField-export.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663156800">- Chromium 105.0.5195.127 (boo#1203419):
  * CVE-2022-3195: Out of bounds write in Storage
  * CVE-2022-3196: Use after free in PDF
  * CVE-2022-3197: Use after free in PDF
  * CVE-2022-3198: Use after free in PDF
  * CVE-2022-3199: Use after free in Frames
  * CVE-2022-3200: Heap buffer overflow in Internals
  * CVE-2022-3201: Insufficient validation of untrusted input in DevTools
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1664625600">- Chromium 106.0.5249.91 (boo#1203808):
  * CVE-2022-3370: Use after free in Custom Elements
  * CVE-2022-3373: Out of bounds write in V8
- includes changes from 106.0.5249.61:
  * CVE-2022-3304: Use after free in CSS
  * CVE-2022-3201: Insufficient validation of untrusted input in Developer Tools
  * CVE-2022-3305: Use after free in Survey
  * CVE-2022-3306: Use after free in Survey
  * CVE-2022-3307: Use after free in Media
  * CVE-2022-3308: Insufficient policy enforcement in Developer Tools
  * CVE-2022-3309: Use after free in Assistant
  * CVE-2022-3310: Insufficient policy enforcement in Custom Tabs
  * CVE-2022-3311: Use after free in Import
  * CVE-2022-3312: Insufficient validation of untrusted input in VPN
  * CVE-2022-3313: Incorrect security UI in Full Screen
  * CVE-2022-3314: Use after free in Logging
  * CVE-2022-3315: Type confusion in Blink
  * CVE-2022-3316: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-3317: Insufficient validation of untrusted input in Intents
  * CVE-2022-3318: Use after free in ChromeOS Notifications
- drop patches:
  * chromium-104-tflite-system-zlib.patch
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
- add patches
  * chromium-106-ffmpeg-duration.patch
  * chromium-106-AutofillPopupControllerImpl-namespace.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1665057600">- Chromium 106.0.5249.103:
  * fix possible cache manager deadlock
  * Fix right-click menu appearing unexpectedly affecting screen
    readers</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1665576000">- Chromium 106.0.5249.119 (boo#1204223)
  * CVE-2022-3445: Use after free in Skia
  * CVE-2022-3446: Heap buffer overflow in WebSQL
  * CVE-2022-3447: Inappropriate implementation in Custom Tabs
  * CVE-2022-3448: Use after free in Permissions API
  * CVE-2022-3449: Use after free in Safe Browsing
  * CVE-2022-3450: Use after free in Peer Connection</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1666872000">- Chromium 107.0.5304.68 (boo#1204732)
  * CVE-2022-3652: Type Confusion in V8
  * CVE-2022-3653: Heap buffer overflow in Vulkan
  * CVE-2022-3654: Use after free in Layout
  * CVE-2022-3655: Heap buffer overflow in Media Galleries
  * CVE-2022-3656: Insufficient data validation in File System
  * CVE-2022-3657: Use after free in Extensions
  * CVE-2022-3658: Use after free in Feedback service on Chrome OS
  * CVE-2022-3659: Use after free in Accessibility
  * CVE-2022-3660: Inappropriate implementation in Full screen mode
  * CVE-2022-3661: Insufficient data validation in Extensions
- Added patches:
  * chromium-107-compiler.patch
  * chromium-107-system-zlib.patch
- Removed patches:
  * chromium-105-compiler.patch
  * chromium-105-Bitmap-include.patch
  * chromium-106-AutofillPopupControllerImpl-namespace.patch
- Unbundle libyuv and libavif on TW
- Prepare 15.5
- Use qt on 15.4+ (15.3 too old)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1666958400">- Chromium 107.0.5304.87 (boo#1204819)
  * CVE-2022-3723: Type Confusion in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1667995200">- Chromium 107.0.5304.110 (boo#1205221)
  * CVE-2022-3885: Use after free in V8
  * CVE-2022-3886: Use after free in Speech Recognition
  * CVE-2022-3887: Use after free in Web Workers
  * CVE-2022-3888: Use after free in WebCodecs
  * CVE-2022-3889: Type Confusion in V8
  * CVE-2022-3890: Heap buffer overflow in Crashpad</changelog>
</package>
<package pkgid="08830fd9e0902f750ec754b87a683cb88c3e9894394732a6f49b3012d2344bd6" name="chromium" arch="x86_64">
  <version epoch="0" ver="107.0.5304.110" rel="bp154.2.43.1"/>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654689600">- Switch to GTK4 on TW and Leap 15.4+ (boo#1200139)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1654862400">- Chromium 102.0.5005.115 (boo#1200423)
  * CVE-2022-2007: Use after free in WebGPU
  * CVE-2022-2008: Out of bounds memory access in WebGL
  * CVE-2022-2010: Out of bounds read in compositing
  * CVE-2022-2011: Use after free in ANGLE</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1656158400">- Chromium 103.0.5060.53 (boo#1200783)
  * CVE-2022-2156: Use after free in Base
  * CVE-2022-2157: Use after free in Interest groups
  * CVE-2022-2158: Type Confusion in V8
  * CVE-2022-2160: Insufficient policy enforcement in DevTools
  * CVE-2022-2161: Use after free in WebApp Provider
  * CVE-2022-2162: Insufficient policy enforcement in File System API
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * CVE-2022-2164: Inappropriate implementation in Extensions API
  * CVE-2022-2165: Insufficient data validation in URL formatting
- Added patches:
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-VirtualCursor-std-layout.patch
  * chromium-103-compiler.patch
- Removed patches:
  * chromium-102-compiler.patch
  * chromium-91-sql-standard-layout-type.patch
  * chromium-101-libxml-unbundle.patch
  * chromium-102-fenced_frame_utils-include.patch
  * chromium-102-swiftshader-template-instantiation.patch
  * chromium-102-symbolize-include.patch
  * chromium-97-arm-tflite-cast.patch
  * chromium-97-ScrollView-reference.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657195200">- Chromium 103.0.5060.66
  * no upstream release notes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657368000">- Chromium 103.0.5060.114 (boo#1201216)
  * CVE-2022-2294: Heap buffer overflow in WebRTC
  * CVE-2022-2295: Type Confusion in V8
  * CVE-2022-2296: Use after free in Chrome OS Shell</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1658318400">- Chromium 103.0.5060.134 (boo#1201679):
  * CVE-2022-2477 : Use after free in Guest View
  * CVE-2022-2478 : Use after free in PDF
  * CVE-2022-2479 : Insufficient validation of untrusted input in File
  * CVE-2022-2480 : Use after free in Service Worker API
  * CVE-2022-2481: Use after free in Views
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1658577600">- Switch back to Clang so that we can use BTI on aarch64
  * Gold is too old - doesn't understand BTI
  * LD crashes on aarch64
- Re-enable LTO
- Prepare move to FFmpeg 5 for new channel layout
  (requires 5.1+)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660046400">- Chromium 104.0.5112.79 (boo#1202075)
  * CVE-2022-2603: Use after free in Omnibox
  * CVE-2022-2604: Use after free in Safe Browsing
  * CVE-2022-2605: Out of bounds read in Dawn
  * CVE-2022-2606: Use after free in Managed devices API
  * CVE-2022-2607: Use after free in Tab Strip
  * CVE-2022-2608: Use after free in Overview Mode
  * CVE-2022-2609: Use after free in Nearby Share
  * CVE-2022-2610: Insufficient policy enforcement in Background Fetch
  * CVE-2022-2611: Inappropriate implementation in Fullscreen API
  * CVE-2022-2612: Side-channel information leakage in Keyboard input
  * CVE-2022-2613: Use after free in Input
  * CVE-2022-2614: Use after free in Sign-In Flow
  * CVE-2022-2615: Insufficient policy enforcement in Cookies
  * CVE-2022-2616: Inappropriate implementation in Extensions API
  * CVE-2022-2617: Use after free in Extensions API
  * CVE-2022-2618: Insufficient validation of untrusted input in Internals
  * CVE-2022-2619: Insufficient validation of untrusted input in Settings
  * CVE-2022-2620: Use after free in WebUI
  * CVE-2022-2621: Use after free in Extensions
  * CVE-2022-2622: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-2623: Use after free in Offline
  * CVE-2022-2624: Heap buffer overflow in PDF
- Added patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-104-tflite-system-zlib.patch
- Removed patches:
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-compiler.patch
- Use FFmpeg 5.1 on TW</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660651200">- Re-enable our version of chrome-wrapper
- Set no sandbox if root is being used (https://crbug.com/638180)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660824000">- Chromium 104.0.5112.101 (boo#1202509):
  * CVE-2022-2852: Use after free in FedCM
  * CVE-2022-2854: Use after free in SwiftShader
  * CVE-2022-2855: Use after free in ANGLE
  * CVE-2022-2857: Use after free in Blink
  * CVE-2022-2858: Use after free in Sign-In Flow
  * CVE-2022-2853: Heap buffer overflow in Downloads
  * CVE-2022-2856: Insufficient validation of untrusted input in Intents
  * CVE-2022-2859: Use after free in Chrome OS Shell
  * CVE-2022-2860: Insufficient policy enforcement in Cookies
  * CVE-2022-2861: Inappropriate implementation in Extensions API</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1661169600">- Fix quoting in chrome-wrapper, don't put cwd on LD_LIBRARY_PATH</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1662033600">- Update chromium-symbolic.svg: this fixes bsc#1202403.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1662638400">- Chromium 105.0.5195.102 (boo#1203102):
  * CVE-2022-3075: Insufficient data validation in Mojo
- Chromium 105.0.5195.52 (boo#1202964):
  * CVE-2022-3038: Use after free in Network Service
  * CVE-2022-3039: Use after free in WebSQL
  * CVE-2022-3040: Use after free in Layout
  * CVE-2022-3041: Use after free in WebSQL
  * CVE-2022-3042: Use after free in PhoneHub
  * CVE-2022-3043: Heap buffer overflow in Screen Capture
  * CVE-2022-3044: Inappropriate implementation in Site Isolation
  * CVE-2022-3045: Insufficient validation of untrusted input in V8
  * CVE-2022-3046: Use after free in Browser Tag
  * CVE-2022-3071: Use after free in Tab Strip
  * CVE-2022-3047: Insufficient policy enforcement in Extensions API
  * CVE-2022-3048: Inappropriate implementation in Chrome OS lockscreen
  * CVE-2022-3049: Use after free in SplitScreen
  * CVE-2022-3050: Heap buffer overflow in WebUI
  * CVE-2022-3051: Heap buffer overflow in Exosphere
  * CVE-2022-3052: Heap buffer overflow in Window Manager
  * CVE-2022-3053: Inappropriate implementation in Pointer Lock
  * CVE-2022-3054: Insufficient policy enforcement in DevTools
  * CVE-2022-3055: Use after free in Passwords
  * CVE-2022-3056: Insufficient policy enforcement in Content Security Policy
  * CVE-2022-3057: Inappropriate implementation in iframe Sandbox
  * CVE-2022-3058: Use after free in Sign-In Flow
- Added patches:
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Bitmap-include.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-wayland-1.20.patch
  * chromium-105-compiler.patch
- Removed patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-78-protobuf-RepeatedPtrField-export.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663156800">- Chromium 105.0.5195.127 (boo#1203419):
  * CVE-2022-3195: Out of bounds write in Storage
  * CVE-2022-3196: Use after free in PDF
  * CVE-2022-3197: Use after free in PDF
  * CVE-2022-3198: Use after free in PDF
  * CVE-2022-3199: Use after free in Frames
  * CVE-2022-3200: Heap buffer overflow in Internals
  * CVE-2022-3201: Insufficient validation of untrusted input in DevTools
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1664625600">- Chromium 106.0.5249.91 (boo#1203808):
  * CVE-2022-3370: Use after free in Custom Elements
  * CVE-2022-3373: Out of bounds write in V8
- includes changes from 106.0.5249.61:
  * CVE-2022-3304: Use after free in CSS
  * CVE-2022-3201: Insufficient validation of untrusted input in Developer Tools
  * CVE-2022-3305: Use after free in Survey
  * CVE-2022-3306: Use after free in Survey
  * CVE-2022-3307: Use after free in Media
  * CVE-2022-3308: Insufficient policy enforcement in Developer Tools
  * CVE-2022-3309: Use after free in Assistant
  * CVE-2022-3310: Insufficient policy enforcement in Custom Tabs
  * CVE-2022-3311: Use after free in Import
  * CVE-2022-3312: Insufficient validation of untrusted input in VPN
  * CVE-2022-3313: Incorrect security UI in Full Screen
  * CVE-2022-3314: Use after free in Logging
  * CVE-2022-3315: Type confusion in Blink
  * CVE-2022-3316: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-3317: Insufficient validation of untrusted input in Intents
  * CVE-2022-3318: Use after free in ChromeOS Notifications
- drop patches:
  * chromium-104-tflite-system-zlib.patch
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
- add patches
  * chromium-106-ffmpeg-duration.patch
  * chromium-106-AutofillPopupControllerImpl-namespace.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1665057600">- Chromium 106.0.5249.103:
  * fix possible cache manager deadlock
  * Fix right-click menu appearing unexpectedly affecting screen
    readers</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1665576000">- Chromium 106.0.5249.119 (boo#1204223)
  * CVE-2022-3445: Use after free in Skia
  * CVE-2022-3446: Heap buffer overflow in WebSQL
  * CVE-2022-3447: Inappropriate implementation in Custom Tabs
  * CVE-2022-3448: Use after free in Permissions API
  * CVE-2022-3449: Use after free in Safe Browsing
  * CVE-2022-3450: Use after free in Peer Connection</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1666872000">- Chromium 107.0.5304.68 (boo#1204732)
  * CVE-2022-3652: Type Confusion in V8
  * CVE-2022-3653: Heap buffer overflow in Vulkan
  * CVE-2022-3654: Use after free in Layout
  * CVE-2022-3655: Heap buffer overflow in Media Galleries
  * CVE-2022-3656: Insufficient data validation in File System
  * CVE-2022-3657: Use after free in Extensions
  * CVE-2022-3658: Use after free in Feedback service on Chrome OS
  * CVE-2022-3659: Use after free in Accessibility
  * CVE-2022-3660: Inappropriate implementation in Full screen mode
  * CVE-2022-3661: Insufficient data validation in Extensions
- Added patches:
  * chromium-107-compiler.patch
  * chromium-107-system-zlib.patch
- Removed patches:
  * chromium-105-compiler.patch
  * chromium-105-Bitmap-include.patch
  * chromium-106-AutofillPopupControllerImpl-namespace.patch
- Unbundle libyuv and libavif on TW
- Prepare 15.5
- Use qt on 15.4+ (15.3 too old)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1666958400">- Chromium 107.0.5304.87 (boo#1204819)
  * CVE-2022-3723: Type Confusion in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1667995200">- Chromium 107.0.5304.110 (boo#1205221)
  * CVE-2022-3885: Use after free in V8
  * CVE-2022-3886: Use after free in Speech Recognition
  * CVE-2022-3887: Use after free in Web Workers
  * CVE-2022-3888: Use after free in WebCodecs
  * CVE-2022-3889: Type Confusion in V8
  * CVE-2022-3890: Heap buffer overflow in Crashpad</changelog>
</package>
<package pkgid="104c37e02d8cab396480478c6f571780a6290fb200aa5579ca4993f3e9fc0426" name="chromium" arch="aarch64">
  <version epoch="0" ver="107.0.5304.121" rel="bp154.2.46.1"/>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1656158400">- Chromium 103.0.5060.53 (boo#1200783)
  * CVE-2022-2156: Use after free in Base
  * CVE-2022-2157: Use after free in Interest groups
  * CVE-2022-2158: Type Confusion in V8
  * CVE-2022-2160: Insufficient policy enforcement in DevTools
  * CVE-2022-2161: Use after free in WebApp Provider
  * CVE-2022-2162: Insufficient policy enforcement in File System API
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * CVE-2022-2164: Inappropriate implementation in Extensions API
  * CVE-2022-2165: Insufficient data validation in URL formatting
- Added patches:
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-VirtualCursor-std-layout.patch
  * chromium-103-compiler.patch
- Removed patches:
  * chromium-102-compiler.patch
  * chromium-91-sql-standard-layout-type.patch
  * chromium-101-libxml-unbundle.patch
  * chromium-102-fenced_frame_utils-include.patch
  * chromium-102-swiftshader-template-instantiation.patch
  * chromium-102-symbolize-include.patch
  * chromium-97-arm-tflite-cast.patch
  * chromium-97-ScrollView-reference.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657195200">- Chromium 103.0.5060.66
  * no upstream release notes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657368000">- Chromium 103.0.5060.114 (boo#1201216)
  * CVE-2022-2294: Heap buffer overflow in WebRTC
  * CVE-2022-2295: Type Confusion in V8
  * CVE-2022-2296: Use after free in Chrome OS Shell</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1658318400">- Chromium 103.0.5060.134 (boo#1201679):
  * CVE-2022-2477 : Use after free in Guest View
  * CVE-2022-2478 : Use after free in PDF
  * CVE-2022-2479 : Insufficient validation of untrusted input in File
  * CVE-2022-2480 : Use after free in Service Worker API
  * CVE-2022-2481: Use after free in Views
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1658577600">- Switch back to Clang so that we can use BTI on aarch64
  * Gold is too old - doesn't understand BTI
  * LD crashes on aarch64
- Re-enable LTO
- Prepare move to FFmpeg 5 for new channel layout
  (requires 5.1+)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660046400">- Chromium 104.0.5112.79 (boo#1202075)
  * CVE-2022-2603: Use after free in Omnibox
  * CVE-2022-2604: Use after free in Safe Browsing
  * CVE-2022-2605: Out of bounds read in Dawn
  * CVE-2022-2606: Use after free in Managed devices API
  * CVE-2022-2607: Use after free in Tab Strip
  * CVE-2022-2608: Use after free in Overview Mode
  * CVE-2022-2609: Use after free in Nearby Share
  * CVE-2022-2610: Insufficient policy enforcement in Background Fetch
  * CVE-2022-2611: Inappropriate implementation in Fullscreen API
  * CVE-2022-2612: Side-channel information leakage in Keyboard input
  * CVE-2022-2613: Use after free in Input
  * CVE-2022-2614: Use after free in Sign-In Flow
  * CVE-2022-2615: Insufficient policy enforcement in Cookies
  * CVE-2022-2616: Inappropriate implementation in Extensions API
  * CVE-2022-2617: Use after free in Extensions API
  * CVE-2022-2618: Insufficient validation of untrusted input in Internals
  * CVE-2022-2619: Insufficient validation of untrusted input in Settings
  * CVE-2022-2620: Use after free in WebUI
  * CVE-2022-2621: Use after free in Extensions
  * CVE-2022-2622: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-2623: Use after free in Offline
  * CVE-2022-2624: Heap buffer overflow in PDF
- Added patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-104-tflite-system-zlib.patch
- Removed patches:
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-compiler.patch
- Use FFmpeg 5.1 on TW</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660651200">- Re-enable our version of chrome-wrapper
- Set no sandbox if root is being used (https://crbug.com/638180)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660824000">- Chromium 104.0.5112.101 (boo#1202509):
  * CVE-2022-2852: Use after free in FedCM
  * CVE-2022-2854: Use after free in SwiftShader
  * CVE-2022-2855: Use after free in ANGLE
  * CVE-2022-2857: Use after free in Blink
  * CVE-2022-2858: Use after free in Sign-In Flow
  * CVE-2022-2853: Heap buffer overflow in Downloads
  * CVE-2022-2856: Insufficient validation of untrusted input in Intents
  * CVE-2022-2859: Use after free in Chrome OS Shell
  * CVE-2022-2860: Insufficient policy enforcement in Cookies
  * CVE-2022-2861: Inappropriate implementation in Extensions API</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1661169600">- Fix quoting in chrome-wrapper, don't put cwd on LD_LIBRARY_PATH</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1662033600">- Update chromium-symbolic.svg: this fixes bsc#1202403.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1662638400">- Chromium 105.0.5195.102 (boo#1203102):
  * CVE-2022-3075: Insufficient data validation in Mojo
- Chromium 105.0.5195.52 (boo#1202964):
  * CVE-2022-3038: Use after free in Network Service
  * CVE-2022-3039: Use after free in WebSQL
  * CVE-2022-3040: Use after free in Layout
  * CVE-2022-3041: Use after free in WebSQL
  * CVE-2022-3042: Use after free in PhoneHub
  * CVE-2022-3043: Heap buffer overflow in Screen Capture
  * CVE-2022-3044: Inappropriate implementation in Site Isolation
  * CVE-2022-3045: Insufficient validation of untrusted input in V8
  * CVE-2022-3046: Use after free in Browser Tag
  * CVE-2022-3071: Use after free in Tab Strip
  * CVE-2022-3047: Insufficient policy enforcement in Extensions API
  * CVE-2022-3048: Inappropriate implementation in Chrome OS lockscreen
  * CVE-2022-3049: Use after free in SplitScreen
  * CVE-2022-3050: Heap buffer overflow in WebUI
  * CVE-2022-3051: Heap buffer overflow in Exosphere
  * CVE-2022-3052: Heap buffer overflow in Window Manager
  * CVE-2022-3053: Inappropriate implementation in Pointer Lock
  * CVE-2022-3054: Insufficient policy enforcement in DevTools
  * CVE-2022-3055: Use after free in Passwords
  * CVE-2022-3056: Insufficient policy enforcement in Content Security Policy
  * CVE-2022-3057: Inappropriate implementation in iframe Sandbox
  * CVE-2022-3058: Use after free in Sign-In Flow
- Added patches:
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Bitmap-include.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-wayland-1.20.patch
  * chromium-105-compiler.patch
- Removed patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-78-protobuf-RepeatedPtrField-export.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663156800">- Chromium 105.0.5195.127 (boo#1203419):
  * CVE-2022-3195: Out of bounds write in Storage
  * CVE-2022-3196: Use after free in PDF
  * CVE-2022-3197: Use after free in PDF
  * CVE-2022-3198: Use after free in PDF
  * CVE-2022-3199: Use after free in Frames
  * CVE-2022-3200: Heap buffer overflow in Internals
  * CVE-2022-3201: Insufficient validation of untrusted input in DevTools
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1664625600">- Chromium 106.0.5249.91 (boo#1203808):
  * CVE-2022-3370: Use after free in Custom Elements
  * CVE-2022-3373: Out of bounds write in V8
- includes changes from 106.0.5249.61:
  * CVE-2022-3304: Use after free in CSS
  * CVE-2022-3201: Insufficient validation of untrusted input in Developer Tools
  * CVE-2022-3305: Use after free in Survey
  * CVE-2022-3306: Use after free in Survey
  * CVE-2022-3307: Use after free in Media
  * CVE-2022-3308: Insufficient policy enforcement in Developer Tools
  * CVE-2022-3309: Use after free in Assistant
  * CVE-2022-3310: Insufficient policy enforcement in Custom Tabs
  * CVE-2022-3311: Use after free in Import
  * CVE-2022-3312: Insufficient validation of untrusted input in VPN
  * CVE-2022-3313: Incorrect security UI in Full Screen
  * CVE-2022-3314: Use after free in Logging
  * CVE-2022-3315: Type confusion in Blink
  * CVE-2022-3316: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-3317: Insufficient validation of untrusted input in Intents
  * CVE-2022-3318: Use after free in ChromeOS Notifications
- drop patches:
  * chromium-104-tflite-system-zlib.patch
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
- add patches
  * chromium-106-ffmpeg-duration.patch
  * chromium-106-AutofillPopupControllerImpl-namespace.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1665057600">- Chromium 106.0.5249.103:
  * fix possible cache manager deadlock
  * Fix right-click menu appearing unexpectedly affecting screen
    readers</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1665576000">- Chromium 106.0.5249.119 (boo#1204223)
  * CVE-2022-3445: Use after free in Skia
  * CVE-2022-3446: Heap buffer overflow in WebSQL
  * CVE-2022-3447: Inappropriate implementation in Custom Tabs
  * CVE-2022-3448: Use after free in Permissions API
  * CVE-2022-3449: Use after free in Safe Browsing
  * CVE-2022-3450: Use after free in Peer Connection</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1666872000">- Chromium 107.0.5304.68 (boo#1204732)
  * CVE-2022-3652: Type Confusion in V8
  * CVE-2022-3653: Heap buffer overflow in Vulkan
  * CVE-2022-3654: Use after free in Layout
  * CVE-2022-3655: Heap buffer overflow in Media Galleries
  * CVE-2022-3656: Insufficient data validation in File System
  * CVE-2022-3657: Use after free in Extensions
  * CVE-2022-3658: Use after free in Feedback service on Chrome OS
  * CVE-2022-3659: Use after free in Accessibility
  * CVE-2022-3660: Inappropriate implementation in Full screen mode
  * CVE-2022-3661: Insufficient data validation in Extensions
- Added patches:
  * chromium-107-compiler.patch
  * chromium-107-system-zlib.patch
- Removed patches:
  * chromium-105-compiler.patch
  * chromium-105-Bitmap-include.patch
  * chromium-106-AutofillPopupControllerImpl-namespace.patch
- Unbundle libyuv and libavif on TW
- Prepare 15.5
- Use qt on 15.4+ (15.3 too old)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1666958400">- Chromium 107.0.5304.87 (boo#1204819)
  * CVE-2022-3723: Type Confusion in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1667995200">- Chromium 107.0.5304.110 (boo#1205221)
  * CVE-2022-3885: Use after free in V8
  * CVE-2022-3886: Use after free in Speech Recognition
  * CVE-2022-3887: Use after free in Web Workers
  * CVE-2022-3888: Use after free in WebCodecs
  * CVE-2022-3889: Type Confusion in V8
  * CVE-2022-3890: Heap buffer overflow in Crashpad</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1668686400">- Build with llvm15 on openSUSE:Backports:SLE-15-SP5 and up</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1669291200">- Chromium 107.0.5304.121 (boo#1205736)
  * CVE-2022-4135: Heap buffer overflow in GPU</changelog>
</package>
<package pkgid="5d3d0f2ffff709ffda01f2cb56453c35d101d46a596b112015ffc4fa182c9457" name="chromium" arch="src">
  <version epoch="0" ver="107.0.5304.121" rel="bp154.2.46.1"/>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1656158400">- Chromium 103.0.5060.53 (boo#1200783)
  * CVE-2022-2156: Use after free in Base
  * CVE-2022-2157: Use after free in Interest groups
  * CVE-2022-2158: Type Confusion in V8
  * CVE-2022-2160: Insufficient policy enforcement in DevTools
  * CVE-2022-2161: Use after free in WebApp Provider
  * CVE-2022-2162: Insufficient policy enforcement in File System API
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * CVE-2022-2164: Inappropriate implementation in Extensions API
  * CVE-2022-2165: Insufficient data validation in URL formatting
- Added patches:
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-VirtualCursor-std-layout.patch
  * chromium-103-compiler.patch
- Removed patches:
  * chromium-102-compiler.patch
  * chromium-91-sql-standard-layout-type.patch
  * chromium-101-libxml-unbundle.patch
  * chromium-102-fenced_frame_utils-include.patch
  * chromium-102-swiftshader-template-instantiation.patch
  * chromium-102-symbolize-include.patch
  * chromium-97-arm-tflite-cast.patch
  * chromium-97-ScrollView-reference.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657195200">- Chromium 103.0.5060.66
  * no upstream release notes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657368000">- Chromium 103.0.5060.114 (boo#1201216)
  * CVE-2022-2294: Heap buffer overflow in WebRTC
  * CVE-2022-2295: Type Confusion in V8
  * CVE-2022-2296: Use after free in Chrome OS Shell</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1658318400">- Chromium 103.0.5060.134 (boo#1201679):
  * CVE-2022-2477 : Use after free in Guest View
  * CVE-2022-2478 : Use after free in PDF
  * CVE-2022-2479 : Insufficient validation of untrusted input in File
  * CVE-2022-2480 : Use after free in Service Worker API
  * CVE-2022-2481: Use after free in Views
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1658577600">- Switch back to Clang so that we can use BTI on aarch64
  * Gold is too old - doesn't understand BTI
  * LD crashes on aarch64
- Re-enable LTO
- Prepare move to FFmpeg 5 for new channel layout
  (requires 5.1+)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660046400">- Chromium 104.0.5112.79 (boo#1202075)
  * CVE-2022-2603: Use after free in Omnibox
  * CVE-2022-2604: Use after free in Safe Browsing
  * CVE-2022-2605: Out of bounds read in Dawn
  * CVE-2022-2606: Use after free in Managed devices API
  * CVE-2022-2607: Use after free in Tab Strip
  * CVE-2022-2608: Use after free in Overview Mode
  * CVE-2022-2609: Use after free in Nearby Share
  * CVE-2022-2610: Insufficient policy enforcement in Background Fetch
  * CVE-2022-2611: Inappropriate implementation in Fullscreen API
  * CVE-2022-2612: Side-channel information leakage in Keyboard input
  * CVE-2022-2613: Use after free in Input
  * CVE-2022-2614: Use after free in Sign-In Flow
  * CVE-2022-2615: Insufficient policy enforcement in Cookies
  * CVE-2022-2616: Inappropriate implementation in Extensions API
  * CVE-2022-2617: Use after free in Extensions API
  * CVE-2022-2618: Insufficient validation of untrusted input in Internals
  * CVE-2022-2619: Insufficient validation of untrusted input in Settings
  * CVE-2022-2620: Use after free in WebUI
  * CVE-2022-2621: Use after free in Extensions
  * CVE-2022-2622: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-2623: Use after free in Offline
  * CVE-2022-2624: Heap buffer overflow in PDF
- Added patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-104-tflite-system-zlib.patch
- Removed patches:
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-compiler.patch
- Use FFmpeg 5.1 on TW</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660651200">- Re-enable our version of chrome-wrapper
- Set no sandbox if root is being used (https://crbug.com/638180)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660824000">- Chromium 104.0.5112.101 (boo#1202509):
  * CVE-2022-2852: Use after free in FedCM
  * CVE-2022-2854: Use after free in SwiftShader
  * CVE-2022-2855: Use after free in ANGLE
  * CVE-2022-2857: Use after free in Blink
  * CVE-2022-2858: Use after free in Sign-In Flow
  * CVE-2022-2853: Heap buffer overflow in Downloads
  * CVE-2022-2856: Insufficient validation of untrusted input in Intents
  * CVE-2022-2859: Use after free in Chrome OS Shell
  * CVE-2022-2860: Insufficient policy enforcement in Cookies
  * CVE-2022-2861: Inappropriate implementation in Extensions API</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1661169600">- Fix quoting in chrome-wrapper, don't put cwd on LD_LIBRARY_PATH</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1662033600">- Update chromium-symbolic.svg: this fixes bsc#1202403.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1662638400">- Chromium 105.0.5195.102 (boo#1203102):
  * CVE-2022-3075: Insufficient data validation in Mojo
- Chromium 105.0.5195.52 (boo#1202964):
  * CVE-2022-3038: Use after free in Network Service
  * CVE-2022-3039: Use after free in WebSQL
  * CVE-2022-3040: Use after free in Layout
  * CVE-2022-3041: Use after free in WebSQL
  * CVE-2022-3042: Use after free in PhoneHub
  * CVE-2022-3043: Heap buffer overflow in Screen Capture
  * CVE-2022-3044: Inappropriate implementation in Site Isolation
  * CVE-2022-3045: Insufficient validation of untrusted input in V8
  * CVE-2022-3046: Use after free in Browser Tag
  * CVE-2022-3071: Use after free in Tab Strip
  * CVE-2022-3047: Insufficient policy enforcement in Extensions API
  * CVE-2022-3048: Inappropriate implementation in Chrome OS lockscreen
  * CVE-2022-3049: Use after free in SplitScreen
  * CVE-2022-3050: Heap buffer overflow in WebUI
  * CVE-2022-3051: Heap buffer overflow in Exosphere
  * CVE-2022-3052: Heap buffer overflow in Window Manager
  * CVE-2022-3053: Inappropriate implementation in Pointer Lock
  * CVE-2022-3054: Insufficient policy enforcement in DevTools
  * CVE-2022-3055: Use after free in Passwords
  * CVE-2022-3056: Insufficient policy enforcement in Content Security Policy
  * CVE-2022-3057: Inappropriate implementation in iframe Sandbox
  * CVE-2022-3058: Use after free in Sign-In Flow
- Added patches:
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Bitmap-include.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-wayland-1.20.patch
  * chromium-105-compiler.patch
- Removed patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-78-protobuf-RepeatedPtrField-export.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663156800">- Chromium 105.0.5195.127 (boo#1203419):
  * CVE-2022-3195: Out of bounds write in Storage
  * CVE-2022-3196: Use after free in PDF
  * CVE-2022-3197: Use after free in PDF
  * CVE-2022-3198: Use after free in PDF
  * CVE-2022-3199: Use after free in Frames
  * CVE-2022-3200: Heap buffer overflow in Internals
  * CVE-2022-3201: Insufficient validation of untrusted input in DevTools
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1664625600">- Chromium 106.0.5249.91 (boo#1203808):
  * CVE-2022-3370: Use after free in Custom Elements
  * CVE-2022-3373: Out of bounds write in V8
- includes changes from 106.0.5249.61:
  * CVE-2022-3304: Use after free in CSS
  * CVE-2022-3201: Insufficient validation of untrusted input in Developer Tools
  * CVE-2022-3305: Use after free in Survey
  * CVE-2022-3306: Use after free in Survey
  * CVE-2022-3307: Use after free in Media
  * CVE-2022-3308: Insufficient policy enforcement in Developer Tools
  * CVE-2022-3309: Use after free in Assistant
  * CVE-2022-3310: Insufficient policy enforcement in Custom Tabs
  * CVE-2022-3311: Use after free in Import
  * CVE-2022-3312: Insufficient validation of untrusted input in VPN
  * CVE-2022-3313: Incorrect security UI in Full Screen
  * CVE-2022-3314: Use after free in Logging
  * CVE-2022-3315: Type confusion in Blink
  * CVE-2022-3316: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-3317: Insufficient validation of untrusted input in Intents
  * CVE-2022-3318: Use after free in ChromeOS Notifications
- drop patches:
  * chromium-104-tflite-system-zlib.patch
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
- add patches
  * chromium-106-ffmpeg-duration.patch
  * chromium-106-AutofillPopupControllerImpl-namespace.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1665057600">- Chromium 106.0.5249.103:
  * fix possible cache manager deadlock
  * Fix right-click menu appearing unexpectedly affecting screen
    readers</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1665576000">- Chromium 106.0.5249.119 (boo#1204223)
  * CVE-2022-3445: Use after free in Skia
  * CVE-2022-3446: Heap buffer overflow in WebSQL
  * CVE-2022-3447: Inappropriate implementation in Custom Tabs
  * CVE-2022-3448: Use after free in Permissions API
  * CVE-2022-3449: Use after free in Safe Browsing
  * CVE-2022-3450: Use after free in Peer Connection</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1666872000">- Chromium 107.0.5304.68 (boo#1204732)
  * CVE-2022-3652: Type Confusion in V8
  * CVE-2022-3653: Heap buffer overflow in Vulkan
  * CVE-2022-3654: Use after free in Layout
  * CVE-2022-3655: Heap buffer overflow in Media Galleries
  * CVE-2022-3656: Insufficient data validation in File System
  * CVE-2022-3657: Use after free in Extensions
  * CVE-2022-3658: Use after free in Feedback service on Chrome OS
  * CVE-2022-3659: Use after free in Accessibility
  * CVE-2022-3660: Inappropriate implementation in Full screen mode
  * CVE-2022-3661: Insufficient data validation in Extensions
- Added patches:
  * chromium-107-compiler.patch
  * chromium-107-system-zlib.patch
- Removed patches:
  * chromium-105-compiler.patch
  * chromium-105-Bitmap-include.patch
  * chromium-106-AutofillPopupControllerImpl-namespace.patch
- Unbundle libyuv and libavif on TW
- Prepare 15.5
- Use qt on 15.4+ (15.3 too old)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1666958400">- Chromium 107.0.5304.87 (boo#1204819)
  * CVE-2022-3723: Type Confusion in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1667995200">- Chromium 107.0.5304.110 (boo#1205221)
  * CVE-2022-3885: Use after free in V8
  * CVE-2022-3886: Use after free in Speech Recognition
  * CVE-2022-3887: Use after free in Web Workers
  * CVE-2022-3888: Use after free in WebCodecs
  * CVE-2022-3889: Type Confusion in V8
  * CVE-2022-3890: Heap buffer overflow in Crashpad</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1668686400">- Build with llvm15 on openSUSE:Backports:SLE-15-SP5 and up</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1669291200">- Chromium 107.0.5304.121 (boo#1205736)
  * CVE-2022-4135: Heap buffer overflow in GPU</changelog>
</package>
<package pkgid="96b67e24730943f552423ae72b37e7b680e9b46b64cd0304d3bf9f0cad6d0a40" name="chromium" arch="x86_64">
  <version epoch="0" ver="107.0.5304.121" rel="bp154.2.46.1"/>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1656158400">- Chromium 103.0.5060.53 (boo#1200783)
  * CVE-2022-2156: Use after free in Base
  * CVE-2022-2157: Use after free in Interest groups
  * CVE-2022-2158: Type Confusion in V8
  * CVE-2022-2160: Insufficient policy enforcement in DevTools
  * CVE-2022-2161: Use after free in WebApp Provider
  * CVE-2022-2162: Insufficient policy enforcement in File System API
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * CVE-2022-2164: Inappropriate implementation in Extensions API
  * CVE-2022-2165: Insufficient data validation in URL formatting
- Added patches:
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-VirtualCursor-std-layout.patch
  * chromium-103-compiler.patch
- Removed patches:
  * chromium-102-compiler.patch
  * chromium-91-sql-standard-layout-type.patch
  * chromium-101-libxml-unbundle.patch
  * chromium-102-fenced_frame_utils-include.patch
  * chromium-102-swiftshader-template-instantiation.patch
  * chromium-102-symbolize-include.patch
  * chromium-97-arm-tflite-cast.patch
  * chromium-97-ScrollView-reference.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657195200">- Chromium 103.0.5060.66
  * no upstream release notes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657368000">- Chromium 103.0.5060.114 (boo#1201216)
  * CVE-2022-2294: Heap buffer overflow in WebRTC
  * CVE-2022-2295: Type Confusion in V8
  * CVE-2022-2296: Use after free in Chrome OS Shell</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1658318400">- Chromium 103.0.5060.134 (boo#1201679):
  * CVE-2022-2477 : Use after free in Guest View
  * CVE-2022-2478 : Use after free in PDF
  * CVE-2022-2479 : Insufficient validation of untrusted input in File
  * CVE-2022-2480 : Use after free in Service Worker API
  * CVE-2022-2481: Use after free in Views
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1658577600">- Switch back to Clang so that we can use BTI on aarch64
  * Gold is too old - doesn't understand BTI
  * LD crashes on aarch64
- Re-enable LTO
- Prepare move to FFmpeg 5 for new channel layout
  (requires 5.1+)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660046400">- Chromium 104.0.5112.79 (boo#1202075)
  * CVE-2022-2603: Use after free in Omnibox
  * CVE-2022-2604: Use after free in Safe Browsing
  * CVE-2022-2605: Out of bounds read in Dawn
  * CVE-2022-2606: Use after free in Managed devices API
  * CVE-2022-2607: Use after free in Tab Strip
  * CVE-2022-2608: Use after free in Overview Mode
  * CVE-2022-2609: Use after free in Nearby Share
  * CVE-2022-2610: Insufficient policy enforcement in Background Fetch
  * CVE-2022-2611: Inappropriate implementation in Fullscreen API
  * CVE-2022-2612: Side-channel information leakage in Keyboard input
  * CVE-2022-2613: Use after free in Input
  * CVE-2022-2614: Use after free in Sign-In Flow
  * CVE-2022-2615: Insufficient policy enforcement in Cookies
  * CVE-2022-2616: Inappropriate implementation in Extensions API
  * CVE-2022-2617: Use after free in Extensions API
  * CVE-2022-2618: Insufficient validation of untrusted input in Internals
  * CVE-2022-2619: Insufficient validation of untrusted input in Settings
  * CVE-2022-2620: Use after free in WebUI
  * CVE-2022-2621: Use after free in Extensions
  * CVE-2022-2622: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-2623: Use after free in Offline
  * CVE-2022-2624: Heap buffer overflow in PDF
- Added patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-104-tflite-system-zlib.patch
- Removed patches:
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-compiler.patch
- Use FFmpeg 5.1 on TW</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660651200">- Re-enable our version of chrome-wrapper
- Set no sandbox if root is being used (https://crbug.com/638180)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660824000">- Chromium 104.0.5112.101 (boo#1202509):
  * CVE-2022-2852: Use after free in FedCM
  * CVE-2022-2854: Use after free in SwiftShader
  * CVE-2022-2855: Use after free in ANGLE
  * CVE-2022-2857: Use after free in Blink
  * CVE-2022-2858: Use after free in Sign-In Flow
  * CVE-2022-2853: Heap buffer overflow in Downloads
  * CVE-2022-2856: Insufficient validation of untrusted input in Intents
  * CVE-2022-2859: Use after free in Chrome OS Shell
  * CVE-2022-2860: Insufficient policy enforcement in Cookies
  * CVE-2022-2861: Inappropriate implementation in Extensions API</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1661169600">- Fix quoting in chrome-wrapper, don't put cwd on LD_LIBRARY_PATH</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1662033600">- Update chromium-symbolic.svg: this fixes bsc#1202403.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1662638400">- Chromium 105.0.5195.102 (boo#1203102):
  * CVE-2022-3075: Insufficient data validation in Mojo
- Chromium 105.0.5195.52 (boo#1202964):
  * CVE-2022-3038: Use after free in Network Service
  * CVE-2022-3039: Use after free in WebSQL
  * CVE-2022-3040: Use after free in Layout
  * CVE-2022-3041: Use after free in WebSQL
  * CVE-2022-3042: Use after free in PhoneHub
  * CVE-2022-3043: Heap buffer overflow in Screen Capture
  * CVE-2022-3044: Inappropriate implementation in Site Isolation
  * CVE-2022-3045: Insufficient validation of untrusted input in V8
  * CVE-2022-3046: Use after free in Browser Tag
  * CVE-2022-3071: Use after free in Tab Strip
  * CVE-2022-3047: Insufficient policy enforcement in Extensions API
  * CVE-2022-3048: Inappropriate implementation in Chrome OS lockscreen
  * CVE-2022-3049: Use after free in SplitScreen
  * CVE-2022-3050: Heap buffer overflow in WebUI
  * CVE-2022-3051: Heap buffer overflow in Exosphere
  * CVE-2022-3052: Heap buffer overflow in Window Manager
  * CVE-2022-3053: Inappropriate implementation in Pointer Lock
  * CVE-2022-3054: Insufficient policy enforcement in DevTools
  * CVE-2022-3055: Use after free in Passwords
  * CVE-2022-3056: Insufficient policy enforcement in Content Security Policy
  * CVE-2022-3057: Inappropriate implementation in iframe Sandbox
  * CVE-2022-3058: Use after free in Sign-In Flow
- Added patches:
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Bitmap-include.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-wayland-1.20.patch
  * chromium-105-compiler.patch
- Removed patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-78-protobuf-RepeatedPtrField-export.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663156800">- Chromium 105.0.5195.127 (boo#1203419):
  * CVE-2022-3195: Out of bounds write in Storage
  * CVE-2022-3196: Use after free in PDF
  * CVE-2022-3197: Use after free in PDF
  * CVE-2022-3198: Use after free in PDF
  * CVE-2022-3199: Use after free in Frames
  * CVE-2022-3200: Heap buffer overflow in Internals
  * CVE-2022-3201: Insufficient validation of untrusted input in DevTools
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1664625600">- Chromium 106.0.5249.91 (boo#1203808):
  * CVE-2022-3370: Use after free in Custom Elements
  * CVE-2022-3373: Out of bounds write in V8
- includes changes from 106.0.5249.61:
  * CVE-2022-3304: Use after free in CSS
  * CVE-2022-3201: Insufficient validation of untrusted input in Developer Tools
  * CVE-2022-3305: Use after free in Survey
  * CVE-2022-3306: Use after free in Survey
  * CVE-2022-3307: Use after free in Media
  * CVE-2022-3308: Insufficient policy enforcement in Developer Tools
  * CVE-2022-3309: Use after free in Assistant
  * CVE-2022-3310: Insufficient policy enforcement in Custom Tabs
  * CVE-2022-3311: Use after free in Import
  * CVE-2022-3312: Insufficient validation of untrusted input in VPN
  * CVE-2022-3313: Incorrect security UI in Full Screen
  * CVE-2022-3314: Use after free in Logging
  * CVE-2022-3315: Type confusion in Blink
  * CVE-2022-3316: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-3317: Insufficient validation of untrusted input in Intents
  * CVE-2022-3318: Use after free in ChromeOS Notifications
- drop patches:
  * chromium-104-tflite-system-zlib.patch
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
- add patches
  * chromium-106-ffmpeg-duration.patch
  * chromium-106-AutofillPopupControllerImpl-namespace.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1665057600">- Chromium 106.0.5249.103:
  * fix possible cache manager deadlock
  * Fix right-click menu appearing unexpectedly affecting screen
    readers</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1665576000">- Chromium 106.0.5249.119 (boo#1204223)
  * CVE-2022-3445: Use after free in Skia
  * CVE-2022-3446: Heap buffer overflow in WebSQL
  * CVE-2022-3447: Inappropriate implementation in Custom Tabs
  * CVE-2022-3448: Use after free in Permissions API
  * CVE-2022-3449: Use after free in Safe Browsing
  * CVE-2022-3450: Use after free in Peer Connection</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1666872000">- Chromium 107.0.5304.68 (boo#1204732)
  * CVE-2022-3652: Type Confusion in V8
  * CVE-2022-3653: Heap buffer overflow in Vulkan
  * CVE-2022-3654: Use after free in Layout
  * CVE-2022-3655: Heap buffer overflow in Media Galleries
  * CVE-2022-3656: Insufficient data validation in File System
  * CVE-2022-3657: Use after free in Extensions
  * CVE-2022-3658: Use after free in Feedback service on Chrome OS
  * CVE-2022-3659: Use after free in Accessibility
  * CVE-2022-3660: Inappropriate implementation in Full screen mode
  * CVE-2022-3661: Insufficient data validation in Extensions
- Added patches:
  * chromium-107-compiler.patch
  * chromium-107-system-zlib.patch
- Removed patches:
  * chromium-105-compiler.patch
  * chromium-105-Bitmap-include.patch
  * chromium-106-AutofillPopupControllerImpl-namespace.patch
- Unbundle libyuv and libavif on TW
- Prepare 15.5
- Use qt on 15.4+ (15.3 too old)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1666958400">- Chromium 107.0.5304.87 (boo#1204819)
  * CVE-2022-3723: Type Confusion in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1667995200">- Chromium 107.0.5304.110 (boo#1205221)
  * CVE-2022-3885: Use after free in V8
  * CVE-2022-3886: Use after free in Speech Recognition
  * CVE-2022-3887: Use after free in Web Workers
  * CVE-2022-3888: Use after free in WebCodecs
  * CVE-2022-3889: Type Confusion in V8
  * CVE-2022-3890: Heap buffer overflow in Crashpad</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1668686400">- Build with llvm15 on openSUSE:Backports:SLE-15-SP5 and up</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1669291200">- Chromium 107.0.5304.121 (boo#1205736)
  * CVE-2022-4135: Heap buffer overflow in GPU</changelog>
</package>
<package pkgid="78b5d7810852a27e89c150092fb6cd25c0deffcda4c8d77ccbf5571d9ad59eff" name="chromium" arch="aarch64">
  <version epoch="0" ver="107.0.5304.87" rel="bp154.2.40.1"/>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654084800">- Disable ARM control flow integrity, it causes build issues
  at the moment
- Try a different SVG (black logo on GNOME)
- Removed patches:
  * chromium-third_party-symbolize-missing-include.patch
  (replaced by chromium-102-symbolize-include.patch)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654689600">- Switch to GTK4 on TW and Leap 15.4+ (boo#1200139)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1654862400">- Chromium 102.0.5005.115 (boo#1200423)
  * CVE-2022-2007: Use after free in WebGPU
  * CVE-2022-2008: Out of bounds memory access in WebGL
  * CVE-2022-2010: Out of bounds read in compositing
  * CVE-2022-2011: Use after free in ANGLE</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1656158400">- Chromium 103.0.5060.53 (boo#1200783)
  * CVE-2022-2156: Use after free in Base
  * CVE-2022-2157: Use after free in Interest groups
  * CVE-2022-2158: Type Confusion in V8
  * CVE-2022-2160: Insufficient policy enforcement in DevTools
  * CVE-2022-2161: Use after free in WebApp Provider
  * CVE-2022-2162: Insufficient policy enforcement in File System API
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * CVE-2022-2164: Inappropriate implementation in Extensions API
  * CVE-2022-2165: Insufficient data validation in URL formatting
- Added patches:
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-VirtualCursor-std-layout.patch
  * chromium-103-compiler.patch
- Removed patches:
  * chromium-102-compiler.patch
  * chromium-91-sql-standard-layout-type.patch
  * chromium-101-libxml-unbundle.patch
  * chromium-102-fenced_frame_utils-include.patch
  * chromium-102-swiftshader-template-instantiation.patch
  * chromium-102-symbolize-include.patch
  * chromium-97-arm-tflite-cast.patch
  * chromium-97-ScrollView-reference.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657195200">- Chromium 103.0.5060.66
  * no upstream release notes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657368000">- Chromium 103.0.5060.114 (boo#1201216)
  * CVE-2022-2294: Heap buffer overflow in WebRTC
  * CVE-2022-2295: Type Confusion in V8
  * CVE-2022-2296: Use after free in Chrome OS Shell</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1658318400">- Chromium 103.0.5060.134 (boo#1201679):
  * CVE-2022-2477 : Use after free in Guest View
  * CVE-2022-2478 : Use after free in PDF
  * CVE-2022-2479 : Insufficient validation of untrusted input in File
  * CVE-2022-2480 : Use after free in Service Worker API
  * CVE-2022-2481: Use after free in Views
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1658577600">- Switch back to Clang so that we can use BTI on aarch64
  * Gold is too old - doesn't understand BTI
  * LD crashes on aarch64
- Re-enable LTO
- Prepare move to FFmpeg 5 for new channel layout
  (requires 5.1+)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660046400">- Chromium 104.0.5112.79 (boo#1202075)
  * CVE-2022-2603: Use after free in Omnibox
  * CVE-2022-2604: Use after free in Safe Browsing
  * CVE-2022-2605: Out of bounds read in Dawn
  * CVE-2022-2606: Use after free in Managed devices API
  * CVE-2022-2607: Use after free in Tab Strip
  * CVE-2022-2608: Use after free in Overview Mode
  * CVE-2022-2609: Use after free in Nearby Share
  * CVE-2022-2610: Insufficient policy enforcement in Background Fetch
  * CVE-2022-2611: Inappropriate implementation in Fullscreen API
  * CVE-2022-2612: Side-channel information leakage in Keyboard input
  * CVE-2022-2613: Use after free in Input
  * CVE-2022-2614: Use after free in Sign-In Flow
  * CVE-2022-2615: Insufficient policy enforcement in Cookies
  * CVE-2022-2616: Inappropriate implementation in Extensions API
  * CVE-2022-2617: Use after free in Extensions API
  * CVE-2022-2618: Insufficient validation of untrusted input in Internals
  * CVE-2022-2619: Insufficient validation of untrusted input in Settings
  * CVE-2022-2620: Use after free in WebUI
  * CVE-2022-2621: Use after free in Extensions
  * CVE-2022-2622: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-2623: Use after free in Offline
  * CVE-2022-2624: Heap buffer overflow in PDF
- Added patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-104-tflite-system-zlib.patch
- Removed patches:
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-compiler.patch
- Use FFmpeg 5.1 on TW</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660651200">- Re-enable our version of chrome-wrapper
- Set no sandbox if root is being used (https://crbug.com/638180)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660824000">- Chromium 104.0.5112.101 (boo#1202509):
  * CVE-2022-2852: Use after free in FedCM
  * CVE-2022-2854: Use after free in SwiftShader
  * CVE-2022-2855: Use after free in ANGLE
  * CVE-2022-2857: Use after free in Blink
  * CVE-2022-2858: Use after free in Sign-In Flow
  * CVE-2022-2853: Heap buffer overflow in Downloads
  * CVE-2022-2856: Insufficient validation of untrusted input in Intents
  * CVE-2022-2859: Use after free in Chrome OS Shell
  * CVE-2022-2860: Insufficient policy enforcement in Cookies
  * CVE-2022-2861: Inappropriate implementation in Extensions API</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1661169600">- Fix quoting in chrome-wrapper, don't put cwd on LD_LIBRARY_PATH</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1662033600">- Update chromium-symbolic.svg: this fixes bsc#1202403.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1662638400">- Chromium 105.0.5195.102 (boo#1203102):
  * CVE-2022-3075: Insufficient data validation in Mojo
- Chromium 105.0.5195.52 (boo#1202964):
  * CVE-2022-3038: Use after free in Network Service
  * CVE-2022-3039: Use after free in WebSQL
  * CVE-2022-3040: Use after free in Layout
  * CVE-2022-3041: Use after free in WebSQL
  * CVE-2022-3042: Use after free in PhoneHub
  * CVE-2022-3043: Heap buffer overflow in Screen Capture
  * CVE-2022-3044: Inappropriate implementation in Site Isolation
  * CVE-2022-3045: Insufficient validation of untrusted input in V8
  * CVE-2022-3046: Use after free in Browser Tag
  * CVE-2022-3071: Use after free in Tab Strip
  * CVE-2022-3047: Insufficient policy enforcement in Extensions API
  * CVE-2022-3048: Inappropriate implementation in Chrome OS lockscreen
  * CVE-2022-3049: Use after free in SplitScreen
  * CVE-2022-3050: Heap buffer overflow in WebUI
  * CVE-2022-3051: Heap buffer overflow in Exosphere
  * CVE-2022-3052: Heap buffer overflow in Window Manager
  * CVE-2022-3053: Inappropriate implementation in Pointer Lock
  * CVE-2022-3054: Insufficient policy enforcement in DevTools
  * CVE-2022-3055: Use after free in Passwords
  * CVE-2022-3056: Insufficient policy enforcement in Content Security Policy
  * CVE-2022-3057: Inappropriate implementation in iframe Sandbox
  * CVE-2022-3058: Use after free in Sign-In Flow
- Added patches:
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Bitmap-include.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-wayland-1.20.patch
  * chromium-105-compiler.patch
- Removed patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-78-protobuf-RepeatedPtrField-export.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663156800">- Chromium 105.0.5195.127 (boo#1203419):
  * CVE-2022-3195: Out of bounds write in Storage
  * CVE-2022-3196: Use after free in PDF
  * CVE-2022-3197: Use after free in PDF
  * CVE-2022-3198: Use after free in PDF
  * CVE-2022-3199: Use after free in Frames
  * CVE-2022-3200: Heap buffer overflow in Internals
  * CVE-2022-3201: Insufficient validation of untrusted input in DevTools
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1664625600">- Chromium 106.0.5249.91 (boo#1203808):
  * CVE-2022-3370: Use after free in Custom Elements
  * CVE-2022-3373: Out of bounds write in V8
- includes changes from 106.0.5249.61:
  * CVE-2022-3304: Use after free in CSS
  * CVE-2022-3201: Insufficient validation of untrusted input in Developer Tools
  * CVE-2022-3305: Use after free in Survey
  * CVE-2022-3306: Use after free in Survey
  * CVE-2022-3307: Use after free in Media
  * CVE-2022-3308: Insufficient policy enforcement in Developer Tools
  * CVE-2022-3309: Use after free in Assistant
  * CVE-2022-3310: Insufficient policy enforcement in Custom Tabs
  * CVE-2022-3311: Use after free in Import
  * CVE-2022-3312: Insufficient validation of untrusted input in VPN
  * CVE-2022-3313: Incorrect security UI in Full Screen
  * CVE-2022-3314: Use after free in Logging
  * CVE-2022-3315: Type confusion in Blink
  * CVE-2022-3316: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-3317: Insufficient validation of untrusted input in Intents
  * CVE-2022-3318: Use after free in ChromeOS Notifications
- drop patches:
  * chromium-104-tflite-system-zlib.patch
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
- add patches
  * chromium-106-ffmpeg-duration.patch
  * chromium-106-AutofillPopupControllerImpl-namespace.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1665057600">- Chromium 106.0.5249.103:
  * fix possible cache manager deadlock
  * Fix right-click menu appearing unexpectedly affecting screen
    readers</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1665576000">- Chromium 106.0.5249.119 (boo#1204223)
  * CVE-2022-3445: Use after free in Skia
  * CVE-2022-3446: Heap buffer overflow in WebSQL
  * CVE-2022-3447: Inappropriate implementation in Custom Tabs
  * CVE-2022-3448: Use after free in Permissions API
  * CVE-2022-3449: Use after free in Safe Browsing
  * CVE-2022-3450: Use after free in Peer Connection</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1666872000">- Chromium 107.0.5304.68 (boo#1204732)
  * CVE-2022-3652: Type Confusion in V8
  * CVE-2022-3653: Heap buffer overflow in Vulkan
  * CVE-2022-3654: Use after free in Layout
  * CVE-2022-3655: Heap buffer overflow in Media Galleries
  * CVE-2022-3656: Insufficient data validation in File System
  * CVE-2022-3657: Use after free in Extensions
  * CVE-2022-3658: Use after free in Feedback service on Chrome OS
  * CVE-2022-3659: Use after free in Accessibility
  * CVE-2022-3660: Inappropriate implementation in Full screen mode
  * CVE-2022-3661: Insufficient data validation in Extensions
- Added patches:
  * chromium-107-compiler.patch
  * chromium-107-system-zlib.patch
- Removed patches:
  * chromium-105-compiler.patch
  * chromium-105-Bitmap-include.patch
  * chromium-106-AutofillPopupControllerImpl-namespace.patch
- Unbundle libyuv and libavif on TW
- Prepare 15.5
- Use qt on 15.4+ (15.3 too old)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1666958400">- Chromium 107.0.5304.87 (boo#1204819)
  * CVE-2022-3723: Type Confusion in V8</changelog>
</package>
<package pkgid="e20e84ba173f535ab1a2e5052cfb8c9390ced143b1872d123f4e1b215f118885" name="chromium" arch="src">
  <version epoch="0" ver="107.0.5304.87" rel="bp154.2.40.1"/>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654084800">- Disable ARM control flow integrity, it causes build issues
  at the moment
- Try a different SVG (black logo on GNOME)
- Removed patches:
  * chromium-third_party-symbolize-missing-include.patch
  (replaced by chromium-102-symbolize-include.patch)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654689600">- Switch to GTK4 on TW and Leap 15.4+ (boo#1200139)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1654862400">- Chromium 102.0.5005.115 (boo#1200423)
  * CVE-2022-2007: Use after free in WebGPU
  * CVE-2022-2008: Out of bounds memory access in WebGL
  * CVE-2022-2010: Out of bounds read in compositing
  * CVE-2022-2011: Use after free in ANGLE</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1656158400">- Chromium 103.0.5060.53 (boo#1200783)
  * CVE-2022-2156: Use after free in Base
  * CVE-2022-2157: Use after free in Interest groups
  * CVE-2022-2158: Type Confusion in V8
  * CVE-2022-2160: Insufficient policy enforcement in DevTools
  * CVE-2022-2161: Use after free in WebApp Provider
  * CVE-2022-2162: Insufficient policy enforcement in File System API
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * CVE-2022-2164: Inappropriate implementation in Extensions API
  * CVE-2022-2165: Insufficient data validation in URL formatting
- Added patches:
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-VirtualCursor-std-layout.patch
  * chromium-103-compiler.patch
- Removed patches:
  * chromium-102-compiler.patch
  * chromium-91-sql-standard-layout-type.patch
  * chromium-101-libxml-unbundle.patch
  * chromium-102-fenced_frame_utils-include.patch
  * chromium-102-swiftshader-template-instantiation.patch
  * chromium-102-symbolize-include.patch
  * chromium-97-arm-tflite-cast.patch
  * chromium-97-ScrollView-reference.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657195200">- Chromium 103.0.5060.66
  * no upstream release notes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657368000">- Chromium 103.0.5060.114 (boo#1201216)
  * CVE-2022-2294: Heap buffer overflow in WebRTC
  * CVE-2022-2295: Type Confusion in V8
  * CVE-2022-2296: Use after free in Chrome OS Shell</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1658318400">- Chromium 103.0.5060.134 (boo#1201679):
  * CVE-2022-2477 : Use after free in Guest View
  * CVE-2022-2478 : Use after free in PDF
  * CVE-2022-2479 : Insufficient validation of untrusted input in File
  * CVE-2022-2480 : Use after free in Service Worker API
  * CVE-2022-2481: Use after free in Views
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1658577600">- Switch back to Clang so that we can use BTI on aarch64
  * Gold is too old - doesn't understand BTI
  * LD crashes on aarch64
- Re-enable LTO
- Prepare move to FFmpeg 5 for new channel layout
  (requires 5.1+)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660046400">- Chromium 104.0.5112.79 (boo#1202075)
  * CVE-2022-2603: Use after free in Omnibox
  * CVE-2022-2604: Use after free in Safe Browsing
  * CVE-2022-2605: Out of bounds read in Dawn
  * CVE-2022-2606: Use after free in Managed devices API
  * CVE-2022-2607: Use after free in Tab Strip
  * CVE-2022-2608: Use after free in Overview Mode
  * CVE-2022-2609: Use after free in Nearby Share
  * CVE-2022-2610: Insufficient policy enforcement in Background Fetch
  * CVE-2022-2611: Inappropriate implementation in Fullscreen API
  * CVE-2022-2612: Side-channel information leakage in Keyboard input
  * CVE-2022-2613: Use after free in Input
  * CVE-2022-2614: Use after free in Sign-In Flow
  * CVE-2022-2615: Insufficient policy enforcement in Cookies
  * CVE-2022-2616: Inappropriate implementation in Extensions API
  * CVE-2022-2617: Use after free in Extensions API
  * CVE-2022-2618: Insufficient validation of untrusted input in Internals
  * CVE-2022-2619: Insufficient validation of untrusted input in Settings
  * CVE-2022-2620: Use after free in WebUI
  * CVE-2022-2621: Use after free in Extensions
  * CVE-2022-2622: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-2623: Use after free in Offline
  * CVE-2022-2624: Heap buffer overflow in PDF
- Added patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-104-tflite-system-zlib.patch
- Removed patches:
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-compiler.patch
- Use FFmpeg 5.1 on TW</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660651200">- Re-enable our version of chrome-wrapper
- Set no sandbox if root is being used (https://crbug.com/638180)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660824000">- Chromium 104.0.5112.101 (boo#1202509):
  * CVE-2022-2852: Use after free in FedCM
  * CVE-2022-2854: Use after free in SwiftShader
  * CVE-2022-2855: Use after free in ANGLE
  * CVE-2022-2857: Use after free in Blink
  * CVE-2022-2858: Use after free in Sign-In Flow
  * CVE-2022-2853: Heap buffer overflow in Downloads
  * CVE-2022-2856: Insufficient validation of untrusted input in Intents
  * CVE-2022-2859: Use after free in Chrome OS Shell
  * CVE-2022-2860: Insufficient policy enforcement in Cookies
  * CVE-2022-2861: Inappropriate implementation in Extensions API</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1661169600">- Fix quoting in chrome-wrapper, don't put cwd on LD_LIBRARY_PATH</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1662033600">- Update chromium-symbolic.svg: this fixes bsc#1202403.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1662638400">- Chromium 105.0.5195.102 (boo#1203102):
  * CVE-2022-3075: Insufficient data validation in Mojo
- Chromium 105.0.5195.52 (boo#1202964):
  * CVE-2022-3038: Use after free in Network Service
  * CVE-2022-3039: Use after free in WebSQL
  * CVE-2022-3040: Use after free in Layout
  * CVE-2022-3041: Use after free in WebSQL
  * CVE-2022-3042: Use after free in PhoneHub
  * CVE-2022-3043: Heap buffer overflow in Screen Capture
  * CVE-2022-3044: Inappropriate implementation in Site Isolation
  * CVE-2022-3045: Insufficient validation of untrusted input in V8
  * CVE-2022-3046: Use after free in Browser Tag
  * CVE-2022-3071: Use after free in Tab Strip
  * CVE-2022-3047: Insufficient policy enforcement in Extensions API
  * CVE-2022-3048: Inappropriate implementation in Chrome OS lockscreen
  * CVE-2022-3049: Use after free in SplitScreen
  * CVE-2022-3050: Heap buffer overflow in WebUI
  * CVE-2022-3051: Heap buffer overflow in Exosphere
  * CVE-2022-3052: Heap buffer overflow in Window Manager
  * CVE-2022-3053: Inappropriate implementation in Pointer Lock
  * CVE-2022-3054: Insufficient policy enforcement in DevTools
  * CVE-2022-3055: Use after free in Passwords
  * CVE-2022-3056: Insufficient policy enforcement in Content Security Policy
  * CVE-2022-3057: Inappropriate implementation in iframe Sandbox
  * CVE-2022-3058: Use after free in Sign-In Flow
- Added patches:
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Bitmap-include.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-wayland-1.20.patch
  * chromium-105-compiler.patch
- Removed patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-78-protobuf-RepeatedPtrField-export.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663156800">- Chromium 105.0.5195.127 (boo#1203419):
  * CVE-2022-3195: Out of bounds write in Storage
  * CVE-2022-3196: Use after free in PDF
  * CVE-2022-3197: Use after free in PDF
  * CVE-2022-3198: Use after free in PDF
  * CVE-2022-3199: Use after free in Frames
  * CVE-2022-3200: Heap buffer overflow in Internals
  * CVE-2022-3201: Insufficient validation of untrusted input in DevTools
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1664625600">- Chromium 106.0.5249.91 (boo#1203808):
  * CVE-2022-3370: Use after free in Custom Elements
  * CVE-2022-3373: Out of bounds write in V8
- includes changes from 106.0.5249.61:
  * CVE-2022-3304: Use after free in CSS
  * CVE-2022-3201: Insufficient validation of untrusted input in Developer Tools
  * CVE-2022-3305: Use after free in Survey
  * CVE-2022-3306: Use after free in Survey
  * CVE-2022-3307: Use after free in Media
  * CVE-2022-3308: Insufficient policy enforcement in Developer Tools
  * CVE-2022-3309: Use after free in Assistant
  * CVE-2022-3310: Insufficient policy enforcement in Custom Tabs
  * CVE-2022-3311: Use after free in Import
  * CVE-2022-3312: Insufficient validation of untrusted input in VPN
  * CVE-2022-3313: Incorrect security UI in Full Screen
  * CVE-2022-3314: Use after free in Logging
  * CVE-2022-3315: Type confusion in Blink
  * CVE-2022-3316: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-3317: Insufficient validation of untrusted input in Intents
  * CVE-2022-3318: Use after free in ChromeOS Notifications
- drop patches:
  * chromium-104-tflite-system-zlib.patch
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
- add patches
  * chromium-106-ffmpeg-duration.patch
  * chromium-106-AutofillPopupControllerImpl-namespace.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1665057600">- Chromium 106.0.5249.103:
  * fix possible cache manager deadlock
  * Fix right-click menu appearing unexpectedly affecting screen
    readers</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1665576000">- Chromium 106.0.5249.119 (boo#1204223)
  * CVE-2022-3445: Use after free in Skia
  * CVE-2022-3446: Heap buffer overflow in WebSQL
  * CVE-2022-3447: Inappropriate implementation in Custom Tabs
  * CVE-2022-3448: Use after free in Permissions API
  * CVE-2022-3449: Use after free in Safe Browsing
  * CVE-2022-3450: Use after free in Peer Connection</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1666872000">- Chromium 107.0.5304.68 (boo#1204732)
  * CVE-2022-3652: Type Confusion in V8
  * CVE-2022-3653: Heap buffer overflow in Vulkan
  * CVE-2022-3654: Use after free in Layout
  * CVE-2022-3655: Heap buffer overflow in Media Galleries
  * CVE-2022-3656: Insufficient data validation in File System
  * CVE-2022-3657: Use after free in Extensions
  * CVE-2022-3658: Use after free in Feedback service on Chrome OS
  * CVE-2022-3659: Use after free in Accessibility
  * CVE-2022-3660: Inappropriate implementation in Full screen mode
  * CVE-2022-3661: Insufficient data validation in Extensions
- Added patches:
  * chromium-107-compiler.patch
  * chromium-107-system-zlib.patch
- Removed patches:
  * chromium-105-compiler.patch
  * chromium-105-Bitmap-include.patch
  * chromium-106-AutofillPopupControllerImpl-namespace.patch
- Unbundle libyuv and libavif on TW
- Prepare 15.5
- Use qt on 15.4+ (15.3 too old)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1666958400">- Chromium 107.0.5304.87 (boo#1204819)
  * CVE-2022-3723: Type Confusion in V8</changelog>
</package>
<package pkgid="7d7171ad66993310eb16d1634ad53427afeae129d683bd4c1fd3567988025554" name="chromium" arch="x86_64">
  <version epoch="0" ver="107.0.5304.87" rel="bp154.2.40.1"/>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654084800">- Disable ARM control flow integrity, it causes build issues
  at the moment
- Try a different SVG (black logo on GNOME)
- Removed patches:
  * chromium-third_party-symbolize-missing-include.patch
  (replaced by chromium-102-symbolize-include.patch)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654689600">- Switch to GTK4 on TW and Leap 15.4+ (boo#1200139)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1654862400">- Chromium 102.0.5005.115 (boo#1200423)
  * CVE-2022-2007: Use after free in WebGPU
  * CVE-2022-2008: Out of bounds memory access in WebGL
  * CVE-2022-2010: Out of bounds read in compositing
  * CVE-2022-2011: Use after free in ANGLE</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1656158400">- Chromium 103.0.5060.53 (boo#1200783)
  * CVE-2022-2156: Use after free in Base
  * CVE-2022-2157: Use after free in Interest groups
  * CVE-2022-2158: Type Confusion in V8
  * CVE-2022-2160: Insufficient policy enforcement in DevTools
  * CVE-2022-2161: Use after free in WebApp Provider
  * CVE-2022-2162: Insufficient policy enforcement in File System API
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * CVE-2022-2164: Inappropriate implementation in Extensions API
  * CVE-2022-2165: Insufficient data validation in URL formatting
- Added patches:
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-VirtualCursor-std-layout.patch
  * chromium-103-compiler.patch
- Removed patches:
  * chromium-102-compiler.patch
  * chromium-91-sql-standard-layout-type.patch
  * chromium-101-libxml-unbundle.patch
  * chromium-102-fenced_frame_utils-include.patch
  * chromium-102-swiftshader-template-instantiation.patch
  * chromium-102-symbolize-include.patch
  * chromium-97-arm-tflite-cast.patch
  * chromium-97-ScrollView-reference.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657195200">- Chromium 103.0.5060.66
  * no upstream release notes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657368000">- Chromium 103.0.5060.114 (boo#1201216)
  * CVE-2022-2294: Heap buffer overflow in WebRTC
  * CVE-2022-2295: Type Confusion in V8
  * CVE-2022-2296: Use after free in Chrome OS Shell</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1658318400">- Chromium 103.0.5060.134 (boo#1201679):
  * CVE-2022-2477 : Use after free in Guest View
  * CVE-2022-2478 : Use after free in PDF
  * CVE-2022-2479 : Insufficient validation of untrusted input in File
  * CVE-2022-2480 : Use after free in Service Worker API
  * CVE-2022-2481: Use after free in Views
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1658577600">- Switch back to Clang so that we can use BTI on aarch64
  * Gold is too old - doesn't understand BTI
  * LD crashes on aarch64
- Re-enable LTO
- Prepare move to FFmpeg 5 for new channel layout
  (requires 5.1+)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660046400">- Chromium 104.0.5112.79 (boo#1202075)
  * CVE-2022-2603: Use after free in Omnibox
  * CVE-2022-2604: Use after free in Safe Browsing
  * CVE-2022-2605: Out of bounds read in Dawn
  * CVE-2022-2606: Use after free in Managed devices API
  * CVE-2022-2607: Use after free in Tab Strip
  * CVE-2022-2608: Use after free in Overview Mode
  * CVE-2022-2609: Use after free in Nearby Share
  * CVE-2022-2610: Insufficient policy enforcement in Background Fetch
  * CVE-2022-2611: Inappropriate implementation in Fullscreen API
  * CVE-2022-2612: Side-channel information leakage in Keyboard input
  * CVE-2022-2613: Use after free in Input
  * CVE-2022-2614: Use after free in Sign-In Flow
  * CVE-2022-2615: Insufficient policy enforcement in Cookies
  * CVE-2022-2616: Inappropriate implementation in Extensions API
  * CVE-2022-2617: Use after free in Extensions API
  * CVE-2022-2618: Insufficient validation of untrusted input in Internals
  * CVE-2022-2619: Insufficient validation of untrusted input in Settings
  * CVE-2022-2620: Use after free in WebUI
  * CVE-2022-2621: Use after free in Extensions
  * CVE-2022-2622: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-2623: Use after free in Offline
  * CVE-2022-2624: Heap buffer overflow in PDF
- Added patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-104-tflite-system-zlib.patch
- Removed patches:
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-compiler.patch
- Use FFmpeg 5.1 on TW</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660651200">- Re-enable our version of chrome-wrapper
- Set no sandbox if root is being used (https://crbug.com/638180)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660824000">- Chromium 104.0.5112.101 (boo#1202509):
  * CVE-2022-2852: Use after free in FedCM
  * CVE-2022-2854: Use after free in SwiftShader
  * CVE-2022-2855: Use after free in ANGLE
  * CVE-2022-2857: Use after free in Blink
  * CVE-2022-2858: Use after free in Sign-In Flow
  * CVE-2022-2853: Heap buffer overflow in Downloads
  * CVE-2022-2856: Insufficient validation of untrusted input in Intents
  * CVE-2022-2859: Use after free in Chrome OS Shell
  * CVE-2022-2860: Insufficient policy enforcement in Cookies
  * CVE-2022-2861: Inappropriate implementation in Extensions API</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1661169600">- Fix quoting in chrome-wrapper, don't put cwd on LD_LIBRARY_PATH</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1662033600">- Update chromium-symbolic.svg: this fixes bsc#1202403.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1662638400">- Chromium 105.0.5195.102 (boo#1203102):
  * CVE-2022-3075: Insufficient data validation in Mojo
- Chromium 105.0.5195.52 (boo#1202964):
  * CVE-2022-3038: Use after free in Network Service
  * CVE-2022-3039: Use after free in WebSQL
  * CVE-2022-3040: Use after free in Layout
  * CVE-2022-3041: Use after free in WebSQL
  * CVE-2022-3042: Use after free in PhoneHub
  * CVE-2022-3043: Heap buffer overflow in Screen Capture
  * CVE-2022-3044: Inappropriate implementation in Site Isolation
  * CVE-2022-3045: Insufficient validation of untrusted input in V8
  * CVE-2022-3046: Use after free in Browser Tag
  * CVE-2022-3071: Use after free in Tab Strip
  * CVE-2022-3047: Insufficient policy enforcement in Extensions API
  * CVE-2022-3048: Inappropriate implementation in Chrome OS lockscreen
  * CVE-2022-3049: Use after free in SplitScreen
  * CVE-2022-3050: Heap buffer overflow in WebUI
  * CVE-2022-3051: Heap buffer overflow in Exosphere
  * CVE-2022-3052: Heap buffer overflow in Window Manager
  * CVE-2022-3053: Inappropriate implementation in Pointer Lock
  * CVE-2022-3054: Insufficient policy enforcement in DevTools
  * CVE-2022-3055: Use after free in Passwords
  * CVE-2022-3056: Insufficient policy enforcement in Content Security Policy
  * CVE-2022-3057: Inappropriate implementation in iframe Sandbox
  * CVE-2022-3058: Use after free in Sign-In Flow
- Added patches:
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Bitmap-include.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-wayland-1.20.patch
  * chromium-105-compiler.patch
- Removed patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-78-protobuf-RepeatedPtrField-export.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663156800">- Chromium 105.0.5195.127 (boo#1203419):
  * CVE-2022-3195: Out of bounds write in Storage
  * CVE-2022-3196: Use after free in PDF
  * CVE-2022-3197: Use after free in PDF
  * CVE-2022-3198: Use after free in PDF
  * CVE-2022-3199: Use after free in Frames
  * CVE-2022-3200: Heap buffer overflow in Internals
  * CVE-2022-3201: Insufficient validation of untrusted input in DevTools
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1664625600">- Chromium 106.0.5249.91 (boo#1203808):
  * CVE-2022-3370: Use after free in Custom Elements
  * CVE-2022-3373: Out of bounds write in V8
- includes changes from 106.0.5249.61:
  * CVE-2022-3304: Use after free in CSS
  * CVE-2022-3201: Insufficient validation of untrusted input in Developer Tools
  * CVE-2022-3305: Use after free in Survey
  * CVE-2022-3306: Use after free in Survey
  * CVE-2022-3307: Use after free in Media
  * CVE-2022-3308: Insufficient policy enforcement in Developer Tools
  * CVE-2022-3309: Use after free in Assistant
  * CVE-2022-3310: Insufficient policy enforcement in Custom Tabs
  * CVE-2022-3311: Use after free in Import
  * CVE-2022-3312: Insufficient validation of untrusted input in VPN
  * CVE-2022-3313: Incorrect security UI in Full Screen
  * CVE-2022-3314: Use after free in Logging
  * CVE-2022-3315: Type confusion in Blink
  * CVE-2022-3316: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-3317: Insufficient validation of untrusted input in Intents
  * CVE-2022-3318: Use after free in ChromeOS Notifications
- drop patches:
  * chromium-104-tflite-system-zlib.patch
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
- add patches
  * chromium-106-ffmpeg-duration.patch
  * chromium-106-AutofillPopupControllerImpl-namespace.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1665057600">- Chromium 106.0.5249.103:
  * fix possible cache manager deadlock
  * Fix right-click menu appearing unexpectedly affecting screen
    readers</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1665576000">- Chromium 106.0.5249.119 (boo#1204223)
  * CVE-2022-3445: Use after free in Skia
  * CVE-2022-3446: Heap buffer overflow in WebSQL
  * CVE-2022-3447: Inappropriate implementation in Custom Tabs
  * CVE-2022-3448: Use after free in Permissions API
  * CVE-2022-3449: Use after free in Safe Browsing
  * CVE-2022-3450: Use after free in Peer Connection</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1666872000">- Chromium 107.0.5304.68 (boo#1204732)
  * CVE-2022-3652: Type Confusion in V8
  * CVE-2022-3653: Heap buffer overflow in Vulkan
  * CVE-2022-3654: Use after free in Layout
  * CVE-2022-3655: Heap buffer overflow in Media Galleries
  * CVE-2022-3656: Insufficient data validation in File System
  * CVE-2022-3657: Use after free in Extensions
  * CVE-2022-3658: Use after free in Feedback service on Chrome OS
  * CVE-2022-3659: Use after free in Accessibility
  * CVE-2022-3660: Inappropriate implementation in Full screen mode
  * CVE-2022-3661: Insufficient data validation in Extensions
- Added patches:
  * chromium-107-compiler.patch
  * chromium-107-system-zlib.patch
- Removed patches:
  * chromium-105-compiler.patch
  * chromium-105-Bitmap-include.patch
  * chromium-106-AutofillPopupControllerImpl-namespace.patch
- Unbundle libyuv and libavif on TW
- Prepare 15.5
- Use qt on 15.4+ (15.3 too old)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1666958400">- Chromium 107.0.5304.87 (boo#1204819)
  * CVE-2022-3723: Type Confusion in V8</changelog>
</package>
<package pkgid="533e362a45a67f5982639a4ca94b7c1f573ef4f20800db8c60c9fde90e64b1ef" name="chromium" arch="aarch64">
  <version epoch="0" ver="108.0.5359.124" rel="bp154.2.55.1"/>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1658577600">- Switch back to Clang so that we can use BTI on aarch64
  * Gold is too old - doesn't understand BTI
  * LD crashes on aarch64
- Re-enable LTO
- Prepare move to FFmpeg 5 for new channel layout
  (requires 5.1+)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660046400">- Chromium 104.0.5112.79 (boo#1202075)
  * CVE-2022-2603: Use after free in Omnibox
  * CVE-2022-2604: Use after free in Safe Browsing
  * CVE-2022-2605: Out of bounds read in Dawn
  * CVE-2022-2606: Use after free in Managed devices API
  * CVE-2022-2607: Use after free in Tab Strip
  * CVE-2022-2608: Use after free in Overview Mode
  * CVE-2022-2609: Use after free in Nearby Share
  * CVE-2022-2610: Insufficient policy enforcement in Background Fetch
  * CVE-2022-2611: Inappropriate implementation in Fullscreen API
  * CVE-2022-2612: Side-channel information leakage in Keyboard input
  * CVE-2022-2613: Use after free in Input
  * CVE-2022-2614: Use after free in Sign-In Flow
  * CVE-2022-2615: Insufficient policy enforcement in Cookies
  * CVE-2022-2616: Inappropriate implementation in Extensions API
  * CVE-2022-2617: Use after free in Extensions API
  * CVE-2022-2618: Insufficient validation of untrusted input in Internals
  * CVE-2022-2619: Insufficient validation of untrusted input in Settings
  * CVE-2022-2620: Use after free in WebUI
  * CVE-2022-2621: Use after free in Extensions
  * CVE-2022-2622: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-2623: Use after free in Offline
  * CVE-2022-2624: Heap buffer overflow in PDF
- Added patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-104-tflite-system-zlib.patch
- Removed patches:
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-compiler.patch
- Use FFmpeg 5.1 on TW</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660651200">- Re-enable our version of chrome-wrapper
- Set no sandbox if root is being used (https://crbug.com/638180)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660824000">- Chromium 104.0.5112.101 (boo#1202509):
  * CVE-2022-2852: Use after free in FedCM
  * CVE-2022-2854: Use after free in SwiftShader
  * CVE-2022-2855: Use after free in ANGLE
  * CVE-2022-2857: Use after free in Blink
  * CVE-2022-2858: Use after free in Sign-In Flow
  * CVE-2022-2853: Heap buffer overflow in Downloads
  * CVE-2022-2856: Insufficient validation of untrusted input in Intents
  * CVE-2022-2859: Use after free in Chrome OS Shell
  * CVE-2022-2860: Insufficient policy enforcement in Cookies
  * CVE-2022-2861: Inappropriate implementation in Extensions API</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1661169600">- Fix quoting in chrome-wrapper, don't put cwd on LD_LIBRARY_PATH</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1662033600">- Update chromium-symbolic.svg: this fixes bsc#1202403.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1662638400">- Chromium 105.0.5195.102 (boo#1203102):
  * CVE-2022-3075: Insufficient data validation in Mojo
- Chromium 105.0.5195.52 (boo#1202964):
  * CVE-2022-3038: Use after free in Network Service
  * CVE-2022-3039: Use after free in WebSQL
  * CVE-2022-3040: Use after free in Layout
  * CVE-2022-3041: Use after free in WebSQL
  * CVE-2022-3042: Use after free in PhoneHub
  * CVE-2022-3043: Heap buffer overflow in Screen Capture
  * CVE-2022-3044: Inappropriate implementation in Site Isolation
  * CVE-2022-3045: Insufficient validation of untrusted input in V8
  * CVE-2022-3046: Use after free in Browser Tag
  * CVE-2022-3071: Use after free in Tab Strip
  * CVE-2022-3047: Insufficient policy enforcement in Extensions API
  * CVE-2022-3048: Inappropriate implementation in Chrome OS lockscreen
  * CVE-2022-3049: Use after free in SplitScreen
  * CVE-2022-3050: Heap buffer overflow in WebUI
  * CVE-2022-3051: Heap buffer overflow in Exosphere
  * CVE-2022-3052: Heap buffer overflow in Window Manager
  * CVE-2022-3053: Inappropriate implementation in Pointer Lock
  * CVE-2022-3054: Insufficient policy enforcement in DevTools
  * CVE-2022-3055: Use after free in Passwords
  * CVE-2022-3056: Insufficient policy enforcement in Content Security Policy
  * CVE-2022-3057: Inappropriate implementation in iframe Sandbox
  * CVE-2022-3058: Use after free in Sign-In Flow
- Added patches:
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Bitmap-include.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-wayland-1.20.patch
  * chromium-105-compiler.patch
- Removed patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-78-protobuf-RepeatedPtrField-export.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663156800">- Chromium 105.0.5195.127 (boo#1203419):
  * CVE-2022-3195: Out of bounds write in Storage
  * CVE-2022-3196: Use after free in PDF
  * CVE-2022-3197: Use after free in PDF
  * CVE-2022-3198: Use after free in PDF
  * CVE-2022-3199: Use after free in Frames
  * CVE-2022-3200: Heap buffer overflow in Internals
  * CVE-2022-3201: Insufficient validation of untrusted input in DevTools
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1664625600">- Chromium 106.0.5249.91 (boo#1203808):
  * CVE-2022-3370: Use after free in Custom Elements
  * CVE-2022-3373: Out of bounds write in V8
- includes changes from 106.0.5249.61:
  * CVE-2022-3304: Use after free in CSS
  * CVE-2022-3201: Insufficient validation of untrusted input in Developer Tools
  * CVE-2022-3305: Use after free in Survey
  * CVE-2022-3306: Use after free in Survey
  * CVE-2022-3307: Use after free in Media
  * CVE-2022-3308: Insufficient policy enforcement in Developer Tools
  * CVE-2022-3309: Use after free in Assistant
  * CVE-2022-3310: Insufficient policy enforcement in Custom Tabs
  * CVE-2022-3311: Use after free in Import
  * CVE-2022-3312: Insufficient validation of untrusted input in VPN
  * CVE-2022-3313: Incorrect security UI in Full Screen
  * CVE-2022-3314: Use after free in Logging
  * CVE-2022-3315: Type confusion in Blink
  * CVE-2022-3316: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-3317: Insufficient validation of untrusted input in Intents
  * CVE-2022-3318: Use after free in ChromeOS Notifications
- drop patches:
  * chromium-104-tflite-system-zlib.patch
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
- add patches
  * chromium-106-ffmpeg-duration.patch
  * chromium-106-AutofillPopupControllerImpl-namespace.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1665057600">- Chromium 106.0.5249.103:
  * fix possible cache manager deadlock
  * Fix right-click menu appearing unexpectedly affecting screen
    readers</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1665576000">- Chromium 106.0.5249.119 (boo#1204223)
  * CVE-2022-3445: Use after free in Skia
  * CVE-2022-3446: Heap buffer overflow in WebSQL
  * CVE-2022-3447: Inappropriate implementation in Custom Tabs
  * CVE-2022-3448: Use after free in Permissions API
  * CVE-2022-3449: Use after free in Safe Browsing
  * CVE-2022-3450: Use after free in Peer Connection</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1666872000">- Chromium 107.0.5304.68 (boo#1204732)
  * CVE-2022-3652: Type Confusion in V8
  * CVE-2022-3653: Heap buffer overflow in Vulkan
  * CVE-2022-3654: Use after free in Layout
  * CVE-2022-3655: Heap buffer overflow in Media Galleries
  * CVE-2022-3656: Insufficient data validation in File System
  * CVE-2022-3657: Use after free in Extensions
  * CVE-2022-3658: Use after free in Feedback service on Chrome OS
  * CVE-2022-3659: Use after free in Accessibility
  * CVE-2022-3660: Inappropriate implementation in Full screen mode
  * CVE-2022-3661: Insufficient data validation in Extensions
- Added patches:
  * chromium-107-compiler.patch
  * chromium-107-system-zlib.patch
- Removed patches:
  * chromium-105-compiler.patch
  * chromium-105-Bitmap-include.patch
  * chromium-106-AutofillPopupControllerImpl-namespace.patch
- Unbundle libyuv and libavif on TW
- Prepare 15.5
- Use qt on 15.4+ (15.3 too old)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1666958400">- Chromium 107.0.5304.87 (boo#1204819)
  * CVE-2022-3723: Type Confusion in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1667995200">- Chromium 107.0.5304.110 (boo#1205221)
  * CVE-2022-3885: Use after free in V8
  * CVE-2022-3886: Use after free in Speech Recognition
  * CVE-2022-3887: Use after free in Web Workers
  * CVE-2022-3888: Use after free in WebCodecs
  * CVE-2022-3889: Type Confusion in V8
  * CVE-2022-3890: Heap buffer overflow in Crashpad</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1668686400">- Build with llvm15 on openSUSE:Backports:SLE-15-SP5 and up</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1669291200">- Chromium 107.0.5304.121 (boo#1205736)
  * CVE-2022-4135: Heap buffer overflow in GPU</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1669809600">- Chromium 108.0.5359.71 (boo#1205871):
  * CVE-2022-4174: Type Confusion in V8
  * CVE-2022-4175: Use after free in Camera Capture
  * CVE-2022-4176: Out of bounds write in Lacros Graphics
  * CVE-2022-4177: Use after free in Extensions
  * CVE-2022-4178: Use after free in Mojo
  * CVE-2022-4179: Use after free in Audio
  * CVE-2022-4180: Use after free in Mojo
  * CVE-2022-4181: Use after free in Forms
  * CVE-2022-4182: Inappropriate implementation in Fenced Frames
  * CVE-2022-4183: Insufficient policy enforcement in Popup Blocker
  * CVE-2022-4184: Insufficient policy enforcement in Autofill
  * CVE-2022-4185: Inappropriate implementation in Navigation
  * CVE-2022-4186: Insufficient validation of untrusted input in Downloads
  * CVE-2022-4187: Insufficient policy enforcement in DevTools
  * CVE-2022-4188: Insufficient validation of untrusted input in CORS
  * CVE-2022-4189: Insufficient policy enforcement in DevTools
  * CVE-2022-4190: Insufficient data validation in Directory
  * CVE-2022-4191: Use after free in Sign-In
  * CVE-2022-4192: Use after free in Live Caption
  * CVE-2022-4193: Insufficient policy enforcement in File System API
  * CVE-2022-4194: Use after free in Accessibility
  * CVE-2022-4195: Insufficient policy enforcement in Safe Browsing
- drop chromium-105-wayland-1.20.patch, upstream
- drop chromium-107-compiler.patch
- add chromium-108-compiler.patch
- drop chromium-98-EnumTable-crash.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1670068800">- Chromium 108.0.5359.94:
  * CVE-2022-4262: Type Confusion in V8 (boo#1205999)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1670414400">- Chromium 108.0.5359.98
  * Fix regression in computing &lt;select&gt; visibility</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1671019200">- Chromium 108.0.5359.124:
  * CVE-2022-4436: Use after free in Blink Media
  * CVE-2022-4437: Use after free in Mojo IPC
  * CVE-2022-4438: Use after free in Blink Frames
  * CVE-2022-4439: Use after free in Aura
  * CVE-2022-4440: Use after free in Profiles</changelog>
</package>
<package pkgid="010f399860b7865a740d30c848f3f919cdbc99cb88c7c7a89cfcbfd63eedb4ec" name="chromium" arch="src">
  <version epoch="0" ver="108.0.5359.124" rel="bp154.2.55.1"/>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1658577600">- Switch back to Clang so that we can use BTI on aarch64
  * Gold is too old - doesn't understand BTI
  * LD crashes on aarch64
- Re-enable LTO
- Prepare move to FFmpeg 5 for new channel layout
  (requires 5.1+)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660046400">- Chromium 104.0.5112.79 (boo#1202075)
  * CVE-2022-2603: Use after free in Omnibox
  * CVE-2022-2604: Use after free in Safe Browsing
  * CVE-2022-2605: Out of bounds read in Dawn
  * CVE-2022-2606: Use after free in Managed devices API
  * CVE-2022-2607: Use after free in Tab Strip
  * CVE-2022-2608: Use after free in Overview Mode
  * CVE-2022-2609: Use after free in Nearby Share
  * CVE-2022-2610: Insufficient policy enforcement in Background Fetch
  * CVE-2022-2611: Inappropriate implementation in Fullscreen API
  * CVE-2022-2612: Side-channel information leakage in Keyboard input
  * CVE-2022-2613: Use after free in Input
  * CVE-2022-2614: Use after free in Sign-In Flow
  * CVE-2022-2615: Insufficient policy enforcement in Cookies
  * CVE-2022-2616: Inappropriate implementation in Extensions API
  * CVE-2022-2617: Use after free in Extensions API
  * CVE-2022-2618: Insufficient validation of untrusted input in Internals
  * CVE-2022-2619: Insufficient validation of untrusted input in Settings
  * CVE-2022-2620: Use after free in WebUI
  * CVE-2022-2621: Use after free in Extensions
  * CVE-2022-2622: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-2623: Use after free in Offline
  * CVE-2022-2624: Heap buffer overflow in PDF
- Added patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-104-tflite-system-zlib.patch
- Removed patches:
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-compiler.patch
- Use FFmpeg 5.1 on TW</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660651200">- Re-enable our version of chrome-wrapper
- Set no sandbox if root is being used (https://crbug.com/638180)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660824000">- Chromium 104.0.5112.101 (boo#1202509):
  * CVE-2022-2852: Use after free in FedCM
  * CVE-2022-2854: Use after free in SwiftShader
  * CVE-2022-2855: Use after free in ANGLE
  * CVE-2022-2857: Use after free in Blink
  * CVE-2022-2858: Use after free in Sign-In Flow
  * CVE-2022-2853: Heap buffer overflow in Downloads
  * CVE-2022-2856: Insufficient validation of untrusted input in Intents
  * CVE-2022-2859: Use after free in Chrome OS Shell
  * CVE-2022-2860: Insufficient policy enforcement in Cookies
  * CVE-2022-2861: Inappropriate implementation in Extensions API</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1661169600">- Fix quoting in chrome-wrapper, don't put cwd on LD_LIBRARY_PATH</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1662033600">- Update chromium-symbolic.svg: this fixes bsc#1202403.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1662638400">- Chromium 105.0.5195.102 (boo#1203102):
  * CVE-2022-3075: Insufficient data validation in Mojo
- Chromium 105.0.5195.52 (boo#1202964):
  * CVE-2022-3038: Use after free in Network Service
  * CVE-2022-3039: Use after free in WebSQL
  * CVE-2022-3040: Use after free in Layout
  * CVE-2022-3041: Use after free in WebSQL
  * CVE-2022-3042: Use after free in PhoneHub
  * CVE-2022-3043: Heap buffer overflow in Screen Capture
  * CVE-2022-3044: Inappropriate implementation in Site Isolation
  * CVE-2022-3045: Insufficient validation of untrusted input in V8
  * CVE-2022-3046: Use after free in Browser Tag
  * CVE-2022-3071: Use after free in Tab Strip
  * CVE-2022-3047: Insufficient policy enforcement in Extensions API
  * CVE-2022-3048: Inappropriate implementation in Chrome OS lockscreen
  * CVE-2022-3049: Use after free in SplitScreen
  * CVE-2022-3050: Heap buffer overflow in WebUI
  * CVE-2022-3051: Heap buffer overflow in Exosphere
  * CVE-2022-3052: Heap buffer overflow in Window Manager
  * CVE-2022-3053: Inappropriate implementation in Pointer Lock
  * CVE-2022-3054: Insufficient policy enforcement in DevTools
  * CVE-2022-3055: Use after free in Passwords
  * CVE-2022-3056: Insufficient policy enforcement in Content Security Policy
  * CVE-2022-3057: Inappropriate implementation in iframe Sandbox
  * CVE-2022-3058: Use after free in Sign-In Flow
- Added patches:
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Bitmap-include.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-wayland-1.20.patch
  * chromium-105-compiler.patch
- Removed patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-78-protobuf-RepeatedPtrField-export.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663156800">- Chromium 105.0.5195.127 (boo#1203419):
  * CVE-2022-3195: Out of bounds write in Storage
  * CVE-2022-3196: Use after free in PDF
  * CVE-2022-3197: Use after free in PDF
  * CVE-2022-3198: Use after free in PDF
  * CVE-2022-3199: Use after free in Frames
  * CVE-2022-3200: Heap buffer overflow in Internals
  * CVE-2022-3201: Insufficient validation of untrusted input in DevTools
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1664625600">- Chromium 106.0.5249.91 (boo#1203808):
  * CVE-2022-3370: Use after free in Custom Elements
  * CVE-2022-3373: Out of bounds write in V8
- includes changes from 106.0.5249.61:
  * CVE-2022-3304: Use after free in CSS
  * CVE-2022-3201: Insufficient validation of untrusted input in Developer Tools
  * CVE-2022-3305: Use after free in Survey
  * CVE-2022-3306: Use after free in Survey
  * CVE-2022-3307: Use after free in Media
  * CVE-2022-3308: Insufficient policy enforcement in Developer Tools
  * CVE-2022-3309: Use after free in Assistant
  * CVE-2022-3310: Insufficient policy enforcement in Custom Tabs
  * CVE-2022-3311: Use after free in Import
  * CVE-2022-3312: Insufficient validation of untrusted input in VPN
  * CVE-2022-3313: Incorrect security UI in Full Screen
  * CVE-2022-3314: Use after free in Logging
  * CVE-2022-3315: Type confusion in Blink
  * CVE-2022-3316: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-3317: Insufficient validation of untrusted input in Intents
  * CVE-2022-3318: Use after free in ChromeOS Notifications
- drop patches:
  * chromium-104-tflite-system-zlib.patch
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
- add patches
  * chromium-106-ffmpeg-duration.patch
  * chromium-106-AutofillPopupControllerImpl-namespace.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1665057600">- Chromium 106.0.5249.103:
  * fix possible cache manager deadlock
  * Fix right-click menu appearing unexpectedly affecting screen
    readers</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1665576000">- Chromium 106.0.5249.119 (boo#1204223)
  * CVE-2022-3445: Use after free in Skia
  * CVE-2022-3446: Heap buffer overflow in WebSQL
  * CVE-2022-3447: Inappropriate implementation in Custom Tabs
  * CVE-2022-3448: Use after free in Permissions API
  * CVE-2022-3449: Use after free in Safe Browsing
  * CVE-2022-3450: Use after free in Peer Connection</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1666872000">- Chromium 107.0.5304.68 (boo#1204732)
  * CVE-2022-3652: Type Confusion in V8
  * CVE-2022-3653: Heap buffer overflow in Vulkan
  * CVE-2022-3654: Use after free in Layout
  * CVE-2022-3655: Heap buffer overflow in Media Galleries
  * CVE-2022-3656: Insufficient data validation in File System
  * CVE-2022-3657: Use after free in Extensions
  * CVE-2022-3658: Use after free in Feedback service on Chrome OS
  * CVE-2022-3659: Use after free in Accessibility
  * CVE-2022-3660: Inappropriate implementation in Full screen mode
  * CVE-2022-3661: Insufficient data validation in Extensions
- Added patches:
  * chromium-107-compiler.patch
  * chromium-107-system-zlib.patch
- Removed patches:
  * chromium-105-compiler.patch
  * chromium-105-Bitmap-include.patch
  * chromium-106-AutofillPopupControllerImpl-namespace.patch
- Unbundle libyuv and libavif on TW
- Prepare 15.5
- Use qt on 15.4+ (15.3 too old)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1666958400">- Chromium 107.0.5304.87 (boo#1204819)
  * CVE-2022-3723: Type Confusion in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1667995200">- Chromium 107.0.5304.110 (boo#1205221)
  * CVE-2022-3885: Use after free in V8
  * CVE-2022-3886: Use after free in Speech Recognition
  * CVE-2022-3887: Use after free in Web Workers
  * CVE-2022-3888: Use after free in WebCodecs
  * CVE-2022-3889: Type Confusion in V8
  * CVE-2022-3890: Heap buffer overflow in Crashpad</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1668686400">- Build with llvm15 on openSUSE:Backports:SLE-15-SP5 and up</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1669291200">- Chromium 107.0.5304.121 (boo#1205736)
  * CVE-2022-4135: Heap buffer overflow in GPU</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1669809600">- Chromium 108.0.5359.71 (boo#1205871):
  * CVE-2022-4174: Type Confusion in V8
  * CVE-2022-4175: Use after free in Camera Capture
  * CVE-2022-4176: Out of bounds write in Lacros Graphics
  * CVE-2022-4177: Use after free in Extensions
  * CVE-2022-4178: Use after free in Mojo
  * CVE-2022-4179: Use after free in Audio
  * CVE-2022-4180: Use after free in Mojo
  * CVE-2022-4181: Use after free in Forms
  * CVE-2022-4182: Inappropriate implementation in Fenced Frames
  * CVE-2022-4183: Insufficient policy enforcement in Popup Blocker
  * CVE-2022-4184: Insufficient policy enforcement in Autofill
  * CVE-2022-4185: Inappropriate implementation in Navigation
  * CVE-2022-4186: Insufficient validation of untrusted input in Downloads
  * CVE-2022-4187: Insufficient policy enforcement in DevTools
  * CVE-2022-4188: Insufficient validation of untrusted input in CORS
  * CVE-2022-4189: Insufficient policy enforcement in DevTools
  * CVE-2022-4190: Insufficient data validation in Directory
  * CVE-2022-4191: Use after free in Sign-In
  * CVE-2022-4192: Use after free in Live Caption
  * CVE-2022-4193: Insufficient policy enforcement in File System API
  * CVE-2022-4194: Use after free in Accessibility
  * CVE-2022-4195: Insufficient policy enforcement in Safe Browsing
- drop chromium-105-wayland-1.20.patch, upstream
- drop chromium-107-compiler.patch
- add chromium-108-compiler.patch
- drop chromium-98-EnumTable-crash.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1670068800">- Chromium 108.0.5359.94:
  * CVE-2022-4262: Type Confusion in V8 (boo#1205999)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1670414400">- Chromium 108.0.5359.98
  * Fix regression in computing &lt;select&gt; visibility</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1671019200">- Chromium 108.0.5359.124:
  * CVE-2022-4436: Use after free in Blink Media
  * CVE-2022-4437: Use after free in Mojo IPC
  * CVE-2022-4438: Use after free in Blink Frames
  * CVE-2022-4439: Use after free in Aura
  * CVE-2022-4440: Use after free in Profiles</changelog>
</package>
<package pkgid="ea41b11e956da87d4a408fe5753dcf5c72b6e9f7e1dd6c74e4c5dfbd852aa9f2" name="chromium" arch="x86_64">
  <version epoch="0" ver="108.0.5359.124" rel="bp154.2.55.1"/>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1658577600">- Switch back to Clang so that we can use BTI on aarch64
  * Gold is too old - doesn't understand BTI
  * LD crashes on aarch64
- Re-enable LTO
- Prepare move to FFmpeg 5 for new channel layout
  (requires 5.1+)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660046400">- Chromium 104.0.5112.79 (boo#1202075)
  * CVE-2022-2603: Use after free in Omnibox
  * CVE-2022-2604: Use after free in Safe Browsing
  * CVE-2022-2605: Out of bounds read in Dawn
  * CVE-2022-2606: Use after free in Managed devices API
  * CVE-2022-2607: Use after free in Tab Strip
  * CVE-2022-2608: Use after free in Overview Mode
  * CVE-2022-2609: Use after free in Nearby Share
  * CVE-2022-2610: Insufficient policy enforcement in Background Fetch
  * CVE-2022-2611: Inappropriate implementation in Fullscreen API
  * CVE-2022-2612: Side-channel information leakage in Keyboard input
  * CVE-2022-2613: Use after free in Input
  * CVE-2022-2614: Use after free in Sign-In Flow
  * CVE-2022-2615: Insufficient policy enforcement in Cookies
  * CVE-2022-2616: Inappropriate implementation in Extensions API
  * CVE-2022-2617: Use after free in Extensions API
  * CVE-2022-2618: Insufficient validation of untrusted input in Internals
  * CVE-2022-2619: Insufficient validation of untrusted input in Settings
  * CVE-2022-2620: Use after free in WebUI
  * CVE-2022-2621: Use after free in Extensions
  * CVE-2022-2622: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-2623: Use after free in Offline
  * CVE-2022-2624: Heap buffer overflow in PDF
- Added patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-104-tflite-system-zlib.patch
- Removed patches:
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-compiler.patch
- Use FFmpeg 5.1 on TW</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660651200">- Re-enable our version of chrome-wrapper
- Set no sandbox if root is being used (https://crbug.com/638180)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660824000">- Chromium 104.0.5112.101 (boo#1202509):
  * CVE-2022-2852: Use after free in FedCM
  * CVE-2022-2854: Use after free in SwiftShader
  * CVE-2022-2855: Use after free in ANGLE
  * CVE-2022-2857: Use after free in Blink
  * CVE-2022-2858: Use after free in Sign-In Flow
  * CVE-2022-2853: Heap buffer overflow in Downloads
  * CVE-2022-2856: Insufficient validation of untrusted input in Intents
  * CVE-2022-2859: Use after free in Chrome OS Shell
  * CVE-2022-2860: Insufficient policy enforcement in Cookies
  * CVE-2022-2861: Inappropriate implementation in Extensions API</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1661169600">- Fix quoting in chrome-wrapper, don't put cwd on LD_LIBRARY_PATH</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1662033600">- Update chromium-symbolic.svg: this fixes bsc#1202403.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1662638400">- Chromium 105.0.5195.102 (boo#1203102):
  * CVE-2022-3075: Insufficient data validation in Mojo
- Chromium 105.0.5195.52 (boo#1202964):
  * CVE-2022-3038: Use after free in Network Service
  * CVE-2022-3039: Use after free in WebSQL
  * CVE-2022-3040: Use after free in Layout
  * CVE-2022-3041: Use after free in WebSQL
  * CVE-2022-3042: Use after free in PhoneHub
  * CVE-2022-3043: Heap buffer overflow in Screen Capture
  * CVE-2022-3044: Inappropriate implementation in Site Isolation
  * CVE-2022-3045: Insufficient validation of untrusted input in V8
  * CVE-2022-3046: Use after free in Browser Tag
  * CVE-2022-3071: Use after free in Tab Strip
  * CVE-2022-3047: Insufficient policy enforcement in Extensions API
  * CVE-2022-3048: Inappropriate implementation in Chrome OS lockscreen
  * CVE-2022-3049: Use after free in SplitScreen
  * CVE-2022-3050: Heap buffer overflow in WebUI
  * CVE-2022-3051: Heap buffer overflow in Exosphere
  * CVE-2022-3052: Heap buffer overflow in Window Manager
  * CVE-2022-3053: Inappropriate implementation in Pointer Lock
  * CVE-2022-3054: Insufficient policy enforcement in DevTools
  * CVE-2022-3055: Use after free in Passwords
  * CVE-2022-3056: Insufficient policy enforcement in Content Security Policy
  * CVE-2022-3057: Inappropriate implementation in iframe Sandbox
  * CVE-2022-3058: Use after free in Sign-In Flow
- Added patches:
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Bitmap-include.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-wayland-1.20.patch
  * chromium-105-compiler.patch
- Removed patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-78-protobuf-RepeatedPtrField-export.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663156800">- Chromium 105.0.5195.127 (boo#1203419):
  * CVE-2022-3195: Out of bounds write in Storage
  * CVE-2022-3196: Use after free in PDF
  * CVE-2022-3197: Use after free in PDF
  * CVE-2022-3198: Use after free in PDF
  * CVE-2022-3199: Use after free in Frames
  * CVE-2022-3200: Heap buffer overflow in Internals
  * CVE-2022-3201: Insufficient validation of untrusted input in DevTools
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1664625600">- Chromium 106.0.5249.91 (boo#1203808):
  * CVE-2022-3370: Use after free in Custom Elements
  * CVE-2022-3373: Out of bounds write in V8
- includes changes from 106.0.5249.61:
  * CVE-2022-3304: Use after free in CSS
  * CVE-2022-3201: Insufficient validation of untrusted input in Developer Tools
  * CVE-2022-3305: Use after free in Survey
  * CVE-2022-3306: Use after free in Survey
  * CVE-2022-3307: Use after free in Media
  * CVE-2022-3308: Insufficient policy enforcement in Developer Tools
  * CVE-2022-3309: Use after free in Assistant
  * CVE-2022-3310: Insufficient policy enforcement in Custom Tabs
  * CVE-2022-3311: Use after free in Import
  * CVE-2022-3312: Insufficient validation of untrusted input in VPN
  * CVE-2022-3313: Incorrect security UI in Full Screen
  * CVE-2022-3314: Use after free in Logging
  * CVE-2022-3315: Type confusion in Blink
  * CVE-2022-3316: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-3317: Insufficient validation of untrusted input in Intents
  * CVE-2022-3318: Use after free in ChromeOS Notifications
- drop patches:
  * chromium-104-tflite-system-zlib.patch
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
- add patches
  * chromium-106-ffmpeg-duration.patch
  * chromium-106-AutofillPopupControllerImpl-namespace.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1665057600">- Chromium 106.0.5249.103:
  * fix possible cache manager deadlock
  * Fix right-click menu appearing unexpectedly affecting screen
    readers</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1665576000">- Chromium 106.0.5249.119 (boo#1204223)
  * CVE-2022-3445: Use after free in Skia
  * CVE-2022-3446: Heap buffer overflow in WebSQL
  * CVE-2022-3447: Inappropriate implementation in Custom Tabs
  * CVE-2022-3448: Use after free in Permissions API
  * CVE-2022-3449: Use after free in Safe Browsing
  * CVE-2022-3450: Use after free in Peer Connection</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1666872000">- Chromium 107.0.5304.68 (boo#1204732)
  * CVE-2022-3652: Type Confusion in V8
  * CVE-2022-3653: Heap buffer overflow in Vulkan
  * CVE-2022-3654: Use after free in Layout
  * CVE-2022-3655: Heap buffer overflow in Media Galleries
  * CVE-2022-3656: Insufficient data validation in File System
  * CVE-2022-3657: Use after free in Extensions
  * CVE-2022-3658: Use after free in Feedback service on Chrome OS
  * CVE-2022-3659: Use after free in Accessibility
  * CVE-2022-3660: Inappropriate implementation in Full screen mode
  * CVE-2022-3661: Insufficient data validation in Extensions
- Added patches:
  * chromium-107-compiler.patch
  * chromium-107-system-zlib.patch
- Removed patches:
  * chromium-105-compiler.patch
  * chromium-105-Bitmap-include.patch
  * chromium-106-AutofillPopupControllerImpl-namespace.patch
- Unbundle libyuv and libavif on TW
- Prepare 15.5
- Use qt on 15.4+ (15.3 too old)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1666958400">- Chromium 107.0.5304.87 (boo#1204819)
  * CVE-2022-3723: Type Confusion in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1667995200">- Chromium 107.0.5304.110 (boo#1205221)
  * CVE-2022-3885: Use after free in V8
  * CVE-2022-3886: Use after free in Speech Recognition
  * CVE-2022-3887: Use after free in Web Workers
  * CVE-2022-3888: Use after free in WebCodecs
  * CVE-2022-3889: Type Confusion in V8
  * CVE-2022-3890: Heap buffer overflow in Crashpad</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1668686400">- Build with llvm15 on openSUSE:Backports:SLE-15-SP5 and up</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1669291200">- Chromium 107.0.5304.121 (boo#1205736)
  * CVE-2022-4135: Heap buffer overflow in GPU</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1669809600">- Chromium 108.0.5359.71 (boo#1205871):
  * CVE-2022-4174: Type Confusion in V8
  * CVE-2022-4175: Use after free in Camera Capture
  * CVE-2022-4176: Out of bounds write in Lacros Graphics
  * CVE-2022-4177: Use after free in Extensions
  * CVE-2022-4178: Use after free in Mojo
  * CVE-2022-4179: Use after free in Audio
  * CVE-2022-4180: Use after free in Mojo
  * CVE-2022-4181: Use after free in Forms
  * CVE-2022-4182: Inappropriate implementation in Fenced Frames
  * CVE-2022-4183: Insufficient policy enforcement in Popup Blocker
  * CVE-2022-4184: Insufficient policy enforcement in Autofill
  * CVE-2022-4185: Inappropriate implementation in Navigation
  * CVE-2022-4186: Insufficient validation of untrusted input in Downloads
  * CVE-2022-4187: Insufficient policy enforcement in DevTools
  * CVE-2022-4188: Insufficient validation of untrusted input in CORS
  * CVE-2022-4189: Insufficient policy enforcement in DevTools
  * CVE-2022-4190: Insufficient data validation in Directory
  * CVE-2022-4191: Use after free in Sign-In
  * CVE-2022-4192: Use after free in Live Caption
  * CVE-2022-4193: Insufficient policy enforcement in File System API
  * CVE-2022-4194: Use after free in Accessibility
  * CVE-2022-4195: Insufficient policy enforcement in Safe Browsing
- drop chromium-105-wayland-1.20.patch, upstream
- drop chromium-107-compiler.patch
- add chromium-108-compiler.patch
- drop chromium-98-EnumTable-crash.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1670068800">- Chromium 108.0.5359.94:
  * CVE-2022-4262: Type Confusion in V8 (boo#1205999)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1670414400">- Chromium 108.0.5359.98
  * Fix regression in computing &lt;select&gt; visibility</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1671019200">- Chromium 108.0.5359.124:
  * CVE-2022-4436: Use after free in Blink Media
  * CVE-2022-4437: Use after free in Mojo IPC
  * CVE-2022-4438: Use after free in Blink Frames
  * CVE-2022-4439: Use after free in Aura
  * CVE-2022-4440: Use after free in Profiles</changelog>
</package>
<package pkgid="760c7a44d0b428ba0d5e8b1603fc6f01fe4d5309208c44a9587c1a6bf363b0e6" name="chromium" arch="aarch64">
  <version epoch="0" ver="108.0.5359.71" rel="bp154.2.49.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657195200">- Chromium 103.0.5060.66
  * no upstream release notes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657368000">- Chromium 103.0.5060.114 (boo#1201216)
  * CVE-2022-2294: Heap buffer overflow in WebRTC
  * CVE-2022-2295: Type Confusion in V8
  * CVE-2022-2296: Use after free in Chrome OS Shell</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1658318400">- Chromium 103.0.5060.134 (boo#1201679):
  * CVE-2022-2477 : Use after free in Guest View
  * CVE-2022-2478 : Use after free in PDF
  * CVE-2022-2479 : Insufficient validation of untrusted input in File
  * CVE-2022-2480 : Use after free in Service Worker API
  * CVE-2022-2481: Use after free in Views
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1658577600">- Switch back to Clang so that we can use BTI on aarch64
  * Gold is too old - doesn't understand BTI
  * LD crashes on aarch64
- Re-enable LTO
- Prepare move to FFmpeg 5 for new channel layout
  (requires 5.1+)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660046400">- Chromium 104.0.5112.79 (boo#1202075)
  * CVE-2022-2603: Use after free in Omnibox
  * CVE-2022-2604: Use after free in Safe Browsing
  * CVE-2022-2605: Out of bounds read in Dawn
  * CVE-2022-2606: Use after free in Managed devices API
  * CVE-2022-2607: Use after free in Tab Strip
  * CVE-2022-2608: Use after free in Overview Mode
  * CVE-2022-2609: Use after free in Nearby Share
  * CVE-2022-2610: Insufficient policy enforcement in Background Fetch
  * CVE-2022-2611: Inappropriate implementation in Fullscreen API
  * CVE-2022-2612: Side-channel information leakage in Keyboard input
  * CVE-2022-2613: Use after free in Input
  * CVE-2022-2614: Use after free in Sign-In Flow
  * CVE-2022-2615: Insufficient policy enforcement in Cookies
  * CVE-2022-2616: Inappropriate implementation in Extensions API
  * CVE-2022-2617: Use after free in Extensions API
  * CVE-2022-2618: Insufficient validation of untrusted input in Internals
  * CVE-2022-2619: Insufficient validation of untrusted input in Settings
  * CVE-2022-2620: Use after free in WebUI
  * CVE-2022-2621: Use after free in Extensions
  * CVE-2022-2622: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-2623: Use after free in Offline
  * CVE-2022-2624: Heap buffer overflow in PDF
- Added patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-104-tflite-system-zlib.patch
- Removed patches:
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-compiler.patch
- Use FFmpeg 5.1 on TW</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660651200">- Re-enable our version of chrome-wrapper
- Set no sandbox if root is being used (https://crbug.com/638180)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660824000">- Chromium 104.0.5112.101 (boo#1202509):
  * CVE-2022-2852: Use after free in FedCM
  * CVE-2022-2854: Use after free in SwiftShader
  * CVE-2022-2855: Use after free in ANGLE
  * CVE-2022-2857: Use after free in Blink
  * CVE-2022-2858: Use after free in Sign-In Flow
  * CVE-2022-2853: Heap buffer overflow in Downloads
  * CVE-2022-2856: Insufficient validation of untrusted input in Intents
  * CVE-2022-2859: Use after free in Chrome OS Shell
  * CVE-2022-2860: Insufficient policy enforcement in Cookies
  * CVE-2022-2861: Inappropriate implementation in Extensions API</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1661169600">- Fix quoting in chrome-wrapper, don't put cwd on LD_LIBRARY_PATH</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1662033600">- Update chromium-symbolic.svg: this fixes bsc#1202403.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1662638400">- Chromium 105.0.5195.102 (boo#1203102):
  * CVE-2022-3075: Insufficient data validation in Mojo
- Chromium 105.0.5195.52 (boo#1202964):
  * CVE-2022-3038: Use after free in Network Service
  * CVE-2022-3039: Use after free in WebSQL
  * CVE-2022-3040: Use after free in Layout
  * CVE-2022-3041: Use after free in WebSQL
  * CVE-2022-3042: Use after free in PhoneHub
  * CVE-2022-3043: Heap buffer overflow in Screen Capture
  * CVE-2022-3044: Inappropriate implementation in Site Isolation
  * CVE-2022-3045: Insufficient validation of untrusted input in V8
  * CVE-2022-3046: Use after free in Browser Tag
  * CVE-2022-3071: Use after free in Tab Strip
  * CVE-2022-3047: Insufficient policy enforcement in Extensions API
  * CVE-2022-3048: Inappropriate implementation in Chrome OS lockscreen
  * CVE-2022-3049: Use after free in SplitScreen
  * CVE-2022-3050: Heap buffer overflow in WebUI
  * CVE-2022-3051: Heap buffer overflow in Exosphere
  * CVE-2022-3052: Heap buffer overflow in Window Manager
  * CVE-2022-3053: Inappropriate implementation in Pointer Lock
  * CVE-2022-3054: Insufficient policy enforcement in DevTools
  * CVE-2022-3055: Use after free in Passwords
  * CVE-2022-3056: Insufficient policy enforcement in Content Security Policy
  * CVE-2022-3057: Inappropriate implementation in iframe Sandbox
  * CVE-2022-3058: Use after free in Sign-In Flow
- Added patches:
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Bitmap-include.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-wayland-1.20.patch
  * chromium-105-compiler.patch
- Removed patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-78-protobuf-RepeatedPtrField-export.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663156800">- Chromium 105.0.5195.127 (boo#1203419):
  * CVE-2022-3195: Out of bounds write in Storage
  * CVE-2022-3196: Use after free in PDF
  * CVE-2022-3197: Use after free in PDF
  * CVE-2022-3198: Use after free in PDF
  * CVE-2022-3199: Use after free in Frames
  * CVE-2022-3200: Heap buffer overflow in Internals
  * CVE-2022-3201: Insufficient validation of untrusted input in DevTools
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1664625600">- Chromium 106.0.5249.91 (boo#1203808):
  * CVE-2022-3370: Use after free in Custom Elements
  * CVE-2022-3373: Out of bounds write in V8
- includes changes from 106.0.5249.61:
  * CVE-2022-3304: Use after free in CSS
  * CVE-2022-3201: Insufficient validation of untrusted input in Developer Tools
  * CVE-2022-3305: Use after free in Survey
  * CVE-2022-3306: Use after free in Survey
  * CVE-2022-3307: Use after free in Media
  * CVE-2022-3308: Insufficient policy enforcement in Developer Tools
  * CVE-2022-3309: Use after free in Assistant
  * CVE-2022-3310: Insufficient policy enforcement in Custom Tabs
  * CVE-2022-3311: Use after free in Import
  * CVE-2022-3312: Insufficient validation of untrusted input in VPN
  * CVE-2022-3313: Incorrect security UI in Full Screen
  * CVE-2022-3314: Use after free in Logging
  * CVE-2022-3315: Type confusion in Blink
  * CVE-2022-3316: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-3317: Insufficient validation of untrusted input in Intents
  * CVE-2022-3318: Use after free in ChromeOS Notifications
- drop patches:
  * chromium-104-tflite-system-zlib.patch
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
- add patches
  * chromium-106-ffmpeg-duration.patch
  * chromium-106-AutofillPopupControllerImpl-namespace.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1665057600">- Chromium 106.0.5249.103:
  * fix possible cache manager deadlock
  * Fix right-click menu appearing unexpectedly affecting screen
    readers</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1665576000">- Chromium 106.0.5249.119 (boo#1204223)
  * CVE-2022-3445: Use after free in Skia
  * CVE-2022-3446: Heap buffer overflow in WebSQL
  * CVE-2022-3447: Inappropriate implementation in Custom Tabs
  * CVE-2022-3448: Use after free in Permissions API
  * CVE-2022-3449: Use after free in Safe Browsing
  * CVE-2022-3450: Use after free in Peer Connection</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1666872000">- Chromium 107.0.5304.68 (boo#1204732)
  * CVE-2022-3652: Type Confusion in V8
  * CVE-2022-3653: Heap buffer overflow in Vulkan
  * CVE-2022-3654: Use after free in Layout
  * CVE-2022-3655: Heap buffer overflow in Media Galleries
  * CVE-2022-3656: Insufficient data validation in File System
  * CVE-2022-3657: Use after free in Extensions
  * CVE-2022-3658: Use after free in Feedback service on Chrome OS
  * CVE-2022-3659: Use after free in Accessibility
  * CVE-2022-3660: Inappropriate implementation in Full screen mode
  * CVE-2022-3661: Insufficient data validation in Extensions
- Added patches:
  * chromium-107-compiler.patch
  * chromium-107-system-zlib.patch
- Removed patches:
  * chromium-105-compiler.patch
  * chromium-105-Bitmap-include.patch
  * chromium-106-AutofillPopupControllerImpl-namespace.patch
- Unbundle libyuv and libavif on TW
- Prepare 15.5
- Use qt on 15.4+ (15.3 too old)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1666958400">- Chromium 107.0.5304.87 (boo#1204819)
  * CVE-2022-3723: Type Confusion in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1667995200">- Chromium 107.0.5304.110 (boo#1205221)
  * CVE-2022-3885: Use after free in V8
  * CVE-2022-3886: Use after free in Speech Recognition
  * CVE-2022-3887: Use after free in Web Workers
  * CVE-2022-3888: Use after free in WebCodecs
  * CVE-2022-3889: Type Confusion in V8
  * CVE-2022-3890: Heap buffer overflow in Crashpad</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1668686400">- Build with llvm15 on openSUSE:Backports:SLE-15-SP5 and up</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1669291200">- Chromium 107.0.5304.121 (boo#1205736)
  * CVE-2022-4135: Heap buffer overflow in GPU</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1669809600">- Chromium 108.0.5359.71 (boo#1205871):
  * CVE-2022-4174: Type Confusion in V8
  * CVE-2022-4175: Use after free in Camera Capture
  * CVE-2022-4176: Out of bounds write in Lacros Graphics
  * CVE-2022-4177: Use after free in Extensions
  * CVE-2022-4178: Use after free in Mojo
  * CVE-2022-4179: Use after free in Audio
  * CVE-2022-4180: Use after free in Mojo
  * CVE-2022-4181: Use after free in Forms
  * CVE-2022-4182: Inappropriate implementation in Fenced Frames
  * CVE-2022-4183: Insufficient policy enforcement in Popup Blocker
  * CVE-2022-4184: Insufficient policy enforcement in Autofill
  * CVE-2022-4185: Inappropriate implementation in Navigation
  * CVE-2022-4186: Insufficient validation of untrusted input in Downloads
  * CVE-2022-4187: Insufficient policy enforcement in DevTools
  * CVE-2022-4188: Insufficient validation of untrusted input in CORS
  * CVE-2022-4189: Insufficient policy enforcement in DevTools
  * CVE-2022-4190: Insufficient data validation in Directory
  * CVE-2022-4191: Use after free in Sign-In
  * CVE-2022-4192: Use after free in Live Caption
  * CVE-2022-4193: Insufficient policy enforcement in File System API
  * CVE-2022-4194: Use after free in Accessibility
  * CVE-2022-4195: Insufficient policy enforcement in Safe Browsing
- drop chromium-105-wayland-1.20.patch, upstream
- drop chromium-107-compiler.patch
- add chromium-108-compiler.patch
- drop chromium-98-EnumTable-crash.patch</changelog>
</package>
<package pkgid="f010dd5fb37b8086dc6352aee1fbee3e4f2f29218b7c86364895ba982569b3e5" name="chromium" arch="src">
  <version epoch="0" ver="108.0.5359.71" rel="bp154.2.49.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657195200">- Chromium 103.0.5060.66
  * no upstream release notes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657368000">- Chromium 103.0.5060.114 (boo#1201216)
  * CVE-2022-2294: Heap buffer overflow in WebRTC
  * CVE-2022-2295: Type Confusion in V8
  * CVE-2022-2296: Use after free in Chrome OS Shell</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1658318400">- Chromium 103.0.5060.134 (boo#1201679):
  * CVE-2022-2477 : Use after free in Guest View
  * CVE-2022-2478 : Use after free in PDF
  * CVE-2022-2479 : Insufficient validation of untrusted input in File
  * CVE-2022-2480 : Use after free in Service Worker API
  * CVE-2022-2481: Use after free in Views
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1658577600">- Switch back to Clang so that we can use BTI on aarch64
  * Gold is too old - doesn't understand BTI
  * LD crashes on aarch64
- Re-enable LTO
- Prepare move to FFmpeg 5 for new channel layout
  (requires 5.1+)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660046400">- Chromium 104.0.5112.79 (boo#1202075)
  * CVE-2022-2603: Use after free in Omnibox
  * CVE-2022-2604: Use after free in Safe Browsing
  * CVE-2022-2605: Out of bounds read in Dawn
  * CVE-2022-2606: Use after free in Managed devices API
  * CVE-2022-2607: Use after free in Tab Strip
  * CVE-2022-2608: Use after free in Overview Mode
  * CVE-2022-2609: Use after free in Nearby Share
  * CVE-2022-2610: Insufficient policy enforcement in Background Fetch
  * CVE-2022-2611: Inappropriate implementation in Fullscreen API
  * CVE-2022-2612: Side-channel information leakage in Keyboard input
  * CVE-2022-2613: Use after free in Input
  * CVE-2022-2614: Use after free in Sign-In Flow
  * CVE-2022-2615: Insufficient policy enforcement in Cookies
  * CVE-2022-2616: Inappropriate implementation in Extensions API
  * CVE-2022-2617: Use after free in Extensions API
  * CVE-2022-2618: Insufficient validation of untrusted input in Internals
  * CVE-2022-2619: Insufficient validation of untrusted input in Settings
  * CVE-2022-2620: Use after free in WebUI
  * CVE-2022-2621: Use after free in Extensions
  * CVE-2022-2622: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-2623: Use after free in Offline
  * CVE-2022-2624: Heap buffer overflow in PDF
- Added patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-104-tflite-system-zlib.patch
- Removed patches:
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-compiler.patch
- Use FFmpeg 5.1 on TW</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660651200">- Re-enable our version of chrome-wrapper
- Set no sandbox if root is being used (https://crbug.com/638180)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660824000">- Chromium 104.0.5112.101 (boo#1202509):
  * CVE-2022-2852: Use after free in FedCM
  * CVE-2022-2854: Use after free in SwiftShader
  * CVE-2022-2855: Use after free in ANGLE
  * CVE-2022-2857: Use after free in Blink
  * CVE-2022-2858: Use after free in Sign-In Flow
  * CVE-2022-2853: Heap buffer overflow in Downloads
  * CVE-2022-2856: Insufficient validation of untrusted input in Intents
  * CVE-2022-2859: Use after free in Chrome OS Shell
  * CVE-2022-2860: Insufficient policy enforcement in Cookies
  * CVE-2022-2861: Inappropriate implementation in Extensions API</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1661169600">- Fix quoting in chrome-wrapper, don't put cwd on LD_LIBRARY_PATH</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1662033600">- Update chromium-symbolic.svg: this fixes bsc#1202403.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1662638400">- Chromium 105.0.5195.102 (boo#1203102):
  * CVE-2022-3075: Insufficient data validation in Mojo
- Chromium 105.0.5195.52 (boo#1202964):
  * CVE-2022-3038: Use after free in Network Service
  * CVE-2022-3039: Use after free in WebSQL
  * CVE-2022-3040: Use after free in Layout
  * CVE-2022-3041: Use after free in WebSQL
  * CVE-2022-3042: Use after free in PhoneHub
  * CVE-2022-3043: Heap buffer overflow in Screen Capture
  * CVE-2022-3044: Inappropriate implementation in Site Isolation
  * CVE-2022-3045: Insufficient validation of untrusted input in V8
  * CVE-2022-3046: Use after free in Browser Tag
  * CVE-2022-3071: Use after free in Tab Strip
  * CVE-2022-3047: Insufficient policy enforcement in Extensions API
  * CVE-2022-3048: Inappropriate implementation in Chrome OS lockscreen
  * CVE-2022-3049: Use after free in SplitScreen
  * CVE-2022-3050: Heap buffer overflow in WebUI
  * CVE-2022-3051: Heap buffer overflow in Exosphere
  * CVE-2022-3052: Heap buffer overflow in Window Manager
  * CVE-2022-3053: Inappropriate implementation in Pointer Lock
  * CVE-2022-3054: Insufficient policy enforcement in DevTools
  * CVE-2022-3055: Use after free in Passwords
  * CVE-2022-3056: Insufficient policy enforcement in Content Security Policy
  * CVE-2022-3057: Inappropriate implementation in iframe Sandbox
  * CVE-2022-3058: Use after free in Sign-In Flow
- Added patches:
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Bitmap-include.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-wayland-1.20.patch
  * chromium-105-compiler.patch
- Removed patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-78-protobuf-RepeatedPtrField-export.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663156800">- Chromium 105.0.5195.127 (boo#1203419):
  * CVE-2022-3195: Out of bounds write in Storage
  * CVE-2022-3196: Use after free in PDF
  * CVE-2022-3197: Use after free in PDF
  * CVE-2022-3198: Use after free in PDF
  * CVE-2022-3199: Use after free in Frames
  * CVE-2022-3200: Heap buffer overflow in Internals
  * CVE-2022-3201: Insufficient validation of untrusted input in DevTools
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1664625600">- Chromium 106.0.5249.91 (boo#1203808):
  * CVE-2022-3370: Use after free in Custom Elements
  * CVE-2022-3373: Out of bounds write in V8
- includes changes from 106.0.5249.61:
  * CVE-2022-3304: Use after free in CSS
  * CVE-2022-3201: Insufficient validation of untrusted input in Developer Tools
  * CVE-2022-3305: Use after free in Survey
  * CVE-2022-3306: Use after free in Survey
  * CVE-2022-3307: Use after free in Media
  * CVE-2022-3308: Insufficient policy enforcement in Developer Tools
  * CVE-2022-3309: Use after free in Assistant
  * CVE-2022-3310: Insufficient policy enforcement in Custom Tabs
  * CVE-2022-3311: Use after free in Import
  * CVE-2022-3312: Insufficient validation of untrusted input in VPN
  * CVE-2022-3313: Incorrect security UI in Full Screen
  * CVE-2022-3314: Use after free in Logging
  * CVE-2022-3315: Type confusion in Blink
  * CVE-2022-3316: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-3317: Insufficient validation of untrusted input in Intents
  * CVE-2022-3318: Use after free in ChromeOS Notifications
- drop patches:
  * chromium-104-tflite-system-zlib.patch
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
- add patches
  * chromium-106-ffmpeg-duration.patch
  * chromium-106-AutofillPopupControllerImpl-namespace.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1665057600">- Chromium 106.0.5249.103:
  * fix possible cache manager deadlock
  * Fix right-click menu appearing unexpectedly affecting screen
    readers</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1665576000">- Chromium 106.0.5249.119 (boo#1204223)
  * CVE-2022-3445: Use after free in Skia
  * CVE-2022-3446: Heap buffer overflow in WebSQL
  * CVE-2022-3447: Inappropriate implementation in Custom Tabs
  * CVE-2022-3448: Use after free in Permissions API
  * CVE-2022-3449: Use after free in Safe Browsing
  * CVE-2022-3450: Use after free in Peer Connection</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1666872000">- Chromium 107.0.5304.68 (boo#1204732)
  * CVE-2022-3652: Type Confusion in V8
  * CVE-2022-3653: Heap buffer overflow in Vulkan
  * CVE-2022-3654: Use after free in Layout
  * CVE-2022-3655: Heap buffer overflow in Media Galleries
  * CVE-2022-3656: Insufficient data validation in File System
  * CVE-2022-3657: Use after free in Extensions
  * CVE-2022-3658: Use after free in Feedback service on Chrome OS
  * CVE-2022-3659: Use after free in Accessibility
  * CVE-2022-3660: Inappropriate implementation in Full screen mode
  * CVE-2022-3661: Insufficient data validation in Extensions
- Added patches:
  * chromium-107-compiler.patch
  * chromium-107-system-zlib.patch
- Removed patches:
  * chromium-105-compiler.patch
  * chromium-105-Bitmap-include.patch
  * chromium-106-AutofillPopupControllerImpl-namespace.patch
- Unbundle libyuv and libavif on TW
- Prepare 15.5
- Use qt on 15.4+ (15.3 too old)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1666958400">- Chromium 107.0.5304.87 (boo#1204819)
  * CVE-2022-3723: Type Confusion in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1667995200">- Chromium 107.0.5304.110 (boo#1205221)
  * CVE-2022-3885: Use after free in V8
  * CVE-2022-3886: Use after free in Speech Recognition
  * CVE-2022-3887: Use after free in Web Workers
  * CVE-2022-3888: Use after free in WebCodecs
  * CVE-2022-3889: Type Confusion in V8
  * CVE-2022-3890: Heap buffer overflow in Crashpad</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1668686400">- Build with llvm15 on openSUSE:Backports:SLE-15-SP5 and up</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1669291200">- Chromium 107.0.5304.121 (boo#1205736)
  * CVE-2022-4135: Heap buffer overflow in GPU</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1669809600">- Chromium 108.0.5359.71 (boo#1205871):
  * CVE-2022-4174: Type Confusion in V8
  * CVE-2022-4175: Use after free in Camera Capture
  * CVE-2022-4176: Out of bounds write in Lacros Graphics
  * CVE-2022-4177: Use after free in Extensions
  * CVE-2022-4178: Use after free in Mojo
  * CVE-2022-4179: Use after free in Audio
  * CVE-2022-4180: Use after free in Mojo
  * CVE-2022-4181: Use after free in Forms
  * CVE-2022-4182: Inappropriate implementation in Fenced Frames
  * CVE-2022-4183: Insufficient policy enforcement in Popup Blocker
  * CVE-2022-4184: Insufficient policy enforcement in Autofill
  * CVE-2022-4185: Inappropriate implementation in Navigation
  * CVE-2022-4186: Insufficient validation of untrusted input in Downloads
  * CVE-2022-4187: Insufficient policy enforcement in DevTools
  * CVE-2022-4188: Insufficient validation of untrusted input in CORS
  * CVE-2022-4189: Insufficient policy enforcement in DevTools
  * CVE-2022-4190: Insufficient data validation in Directory
  * CVE-2022-4191: Use after free in Sign-In
  * CVE-2022-4192: Use after free in Live Caption
  * CVE-2022-4193: Insufficient policy enforcement in File System API
  * CVE-2022-4194: Use after free in Accessibility
  * CVE-2022-4195: Insufficient policy enforcement in Safe Browsing
- drop chromium-105-wayland-1.20.patch, upstream
- drop chromium-107-compiler.patch
- add chromium-108-compiler.patch
- drop chromium-98-EnumTable-crash.patch</changelog>
</package>
<package pkgid="0c1a68ab4ebd714db14fd5b540e85c6d0c2592bfe6e2a4bcdb970c804325bb81" name="chromium" arch="x86_64">
  <version epoch="0" ver="108.0.5359.71" rel="bp154.2.49.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657195200">- Chromium 103.0.5060.66
  * no upstream release notes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657368000">- Chromium 103.0.5060.114 (boo#1201216)
  * CVE-2022-2294: Heap buffer overflow in WebRTC
  * CVE-2022-2295: Type Confusion in V8
  * CVE-2022-2296: Use after free in Chrome OS Shell</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1658318400">- Chromium 103.0.5060.134 (boo#1201679):
  * CVE-2022-2477 : Use after free in Guest View
  * CVE-2022-2478 : Use after free in PDF
  * CVE-2022-2479 : Insufficient validation of untrusted input in File
  * CVE-2022-2480 : Use after free in Service Worker API
  * CVE-2022-2481: Use after free in Views
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1658577600">- Switch back to Clang so that we can use BTI on aarch64
  * Gold is too old - doesn't understand BTI
  * LD crashes on aarch64
- Re-enable LTO
- Prepare move to FFmpeg 5 for new channel layout
  (requires 5.1+)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660046400">- Chromium 104.0.5112.79 (boo#1202075)
  * CVE-2022-2603: Use after free in Omnibox
  * CVE-2022-2604: Use after free in Safe Browsing
  * CVE-2022-2605: Out of bounds read in Dawn
  * CVE-2022-2606: Use after free in Managed devices API
  * CVE-2022-2607: Use after free in Tab Strip
  * CVE-2022-2608: Use after free in Overview Mode
  * CVE-2022-2609: Use after free in Nearby Share
  * CVE-2022-2610: Insufficient policy enforcement in Background Fetch
  * CVE-2022-2611: Inappropriate implementation in Fullscreen API
  * CVE-2022-2612: Side-channel information leakage in Keyboard input
  * CVE-2022-2613: Use after free in Input
  * CVE-2022-2614: Use after free in Sign-In Flow
  * CVE-2022-2615: Insufficient policy enforcement in Cookies
  * CVE-2022-2616: Inappropriate implementation in Extensions API
  * CVE-2022-2617: Use after free in Extensions API
  * CVE-2022-2618: Insufficient validation of untrusted input in Internals
  * CVE-2022-2619: Insufficient validation of untrusted input in Settings
  * CVE-2022-2620: Use after free in WebUI
  * CVE-2022-2621: Use after free in Extensions
  * CVE-2022-2622: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-2623: Use after free in Offline
  * CVE-2022-2624: Heap buffer overflow in PDF
- Added patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-104-tflite-system-zlib.patch
- Removed patches:
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-compiler.patch
- Use FFmpeg 5.1 on TW</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660651200">- Re-enable our version of chrome-wrapper
- Set no sandbox if root is being used (https://crbug.com/638180)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660824000">- Chromium 104.0.5112.101 (boo#1202509):
  * CVE-2022-2852: Use after free in FedCM
  * CVE-2022-2854: Use after free in SwiftShader
  * CVE-2022-2855: Use after free in ANGLE
  * CVE-2022-2857: Use after free in Blink
  * CVE-2022-2858: Use after free in Sign-In Flow
  * CVE-2022-2853: Heap buffer overflow in Downloads
  * CVE-2022-2856: Insufficient validation of untrusted input in Intents
  * CVE-2022-2859: Use after free in Chrome OS Shell
  * CVE-2022-2860: Insufficient policy enforcement in Cookies
  * CVE-2022-2861: Inappropriate implementation in Extensions API</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1661169600">- Fix quoting in chrome-wrapper, don't put cwd on LD_LIBRARY_PATH</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1662033600">- Update chromium-symbolic.svg: this fixes bsc#1202403.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1662638400">- Chromium 105.0.5195.102 (boo#1203102):
  * CVE-2022-3075: Insufficient data validation in Mojo
- Chromium 105.0.5195.52 (boo#1202964):
  * CVE-2022-3038: Use after free in Network Service
  * CVE-2022-3039: Use after free in WebSQL
  * CVE-2022-3040: Use after free in Layout
  * CVE-2022-3041: Use after free in WebSQL
  * CVE-2022-3042: Use after free in PhoneHub
  * CVE-2022-3043: Heap buffer overflow in Screen Capture
  * CVE-2022-3044: Inappropriate implementation in Site Isolation
  * CVE-2022-3045: Insufficient validation of untrusted input in V8
  * CVE-2022-3046: Use after free in Browser Tag
  * CVE-2022-3071: Use after free in Tab Strip
  * CVE-2022-3047: Insufficient policy enforcement in Extensions API
  * CVE-2022-3048: Inappropriate implementation in Chrome OS lockscreen
  * CVE-2022-3049: Use after free in SplitScreen
  * CVE-2022-3050: Heap buffer overflow in WebUI
  * CVE-2022-3051: Heap buffer overflow in Exosphere
  * CVE-2022-3052: Heap buffer overflow in Window Manager
  * CVE-2022-3053: Inappropriate implementation in Pointer Lock
  * CVE-2022-3054: Insufficient policy enforcement in DevTools
  * CVE-2022-3055: Use after free in Passwords
  * CVE-2022-3056: Insufficient policy enforcement in Content Security Policy
  * CVE-2022-3057: Inappropriate implementation in iframe Sandbox
  * CVE-2022-3058: Use after free in Sign-In Flow
- Added patches:
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Bitmap-include.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-wayland-1.20.patch
  * chromium-105-compiler.patch
- Removed patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-78-protobuf-RepeatedPtrField-export.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663156800">- Chromium 105.0.5195.127 (boo#1203419):
  * CVE-2022-3195: Out of bounds write in Storage
  * CVE-2022-3196: Use after free in PDF
  * CVE-2022-3197: Use after free in PDF
  * CVE-2022-3198: Use after free in PDF
  * CVE-2022-3199: Use after free in Frames
  * CVE-2022-3200: Heap buffer overflow in Internals
  * CVE-2022-3201: Insufficient validation of untrusted input in DevTools
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1664625600">- Chromium 106.0.5249.91 (boo#1203808):
  * CVE-2022-3370: Use after free in Custom Elements
  * CVE-2022-3373: Out of bounds write in V8
- includes changes from 106.0.5249.61:
  * CVE-2022-3304: Use after free in CSS
  * CVE-2022-3201: Insufficient validation of untrusted input in Developer Tools
  * CVE-2022-3305: Use after free in Survey
  * CVE-2022-3306: Use after free in Survey
  * CVE-2022-3307: Use after free in Media
  * CVE-2022-3308: Insufficient policy enforcement in Developer Tools
  * CVE-2022-3309: Use after free in Assistant
  * CVE-2022-3310: Insufficient policy enforcement in Custom Tabs
  * CVE-2022-3311: Use after free in Import
  * CVE-2022-3312: Insufficient validation of untrusted input in VPN
  * CVE-2022-3313: Incorrect security UI in Full Screen
  * CVE-2022-3314: Use after free in Logging
  * CVE-2022-3315: Type confusion in Blink
  * CVE-2022-3316: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-3317: Insufficient validation of untrusted input in Intents
  * CVE-2022-3318: Use after free in ChromeOS Notifications
- drop patches:
  * chromium-104-tflite-system-zlib.patch
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
- add patches
  * chromium-106-ffmpeg-duration.patch
  * chromium-106-AutofillPopupControllerImpl-namespace.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1665057600">- Chromium 106.0.5249.103:
  * fix possible cache manager deadlock
  * Fix right-click menu appearing unexpectedly affecting screen
    readers</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1665576000">- Chromium 106.0.5249.119 (boo#1204223)
  * CVE-2022-3445: Use after free in Skia
  * CVE-2022-3446: Heap buffer overflow in WebSQL
  * CVE-2022-3447: Inappropriate implementation in Custom Tabs
  * CVE-2022-3448: Use after free in Permissions API
  * CVE-2022-3449: Use after free in Safe Browsing
  * CVE-2022-3450: Use after free in Peer Connection</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1666872000">- Chromium 107.0.5304.68 (boo#1204732)
  * CVE-2022-3652: Type Confusion in V8
  * CVE-2022-3653: Heap buffer overflow in Vulkan
  * CVE-2022-3654: Use after free in Layout
  * CVE-2022-3655: Heap buffer overflow in Media Galleries
  * CVE-2022-3656: Insufficient data validation in File System
  * CVE-2022-3657: Use after free in Extensions
  * CVE-2022-3658: Use after free in Feedback service on Chrome OS
  * CVE-2022-3659: Use after free in Accessibility
  * CVE-2022-3660: Inappropriate implementation in Full screen mode
  * CVE-2022-3661: Insufficient data validation in Extensions
- Added patches:
  * chromium-107-compiler.patch
  * chromium-107-system-zlib.patch
- Removed patches:
  * chromium-105-compiler.patch
  * chromium-105-Bitmap-include.patch
  * chromium-106-AutofillPopupControllerImpl-namespace.patch
- Unbundle libyuv and libavif on TW
- Prepare 15.5
- Use qt on 15.4+ (15.3 too old)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1666958400">- Chromium 107.0.5304.87 (boo#1204819)
  * CVE-2022-3723: Type Confusion in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1667995200">- Chromium 107.0.5304.110 (boo#1205221)
  * CVE-2022-3885: Use after free in V8
  * CVE-2022-3886: Use after free in Speech Recognition
  * CVE-2022-3887: Use after free in Web Workers
  * CVE-2022-3888: Use after free in WebCodecs
  * CVE-2022-3889: Type Confusion in V8
  * CVE-2022-3890: Heap buffer overflow in Crashpad</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1668686400">- Build with llvm15 on openSUSE:Backports:SLE-15-SP5 and up</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1669291200">- Chromium 107.0.5304.121 (boo#1205736)
  * CVE-2022-4135: Heap buffer overflow in GPU</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1669809600">- Chromium 108.0.5359.71 (boo#1205871):
  * CVE-2022-4174: Type Confusion in V8
  * CVE-2022-4175: Use after free in Camera Capture
  * CVE-2022-4176: Out of bounds write in Lacros Graphics
  * CVE-2022-4177: Use after free in Extensions
  * CVE-2022-4178: Use after free in Mojo
  * CVE-2022-4179: Use after free in Audio
  * CVE-2022-4180: Use after free in Mojo
  * CVE-2022-4181: Use after free in Forms
  * CVE-2022-4182: Inappropriate implementation in Fenced Frames
  * CVE-2022-4183: Insufficient policy enforcement in Popup Blocker
  * CVE-2022-4184: Insufficient policy enforcement in Autofill
  * CVE-2022-4185: Inappropriate implementation in Navigation
  * CVE-2022-4186: Insufficient validation of untrusted input in Downloads
  * CVE-2022-4187: Insufficient policy enforcement in DevTools
  * CVE-2022-4188: Insufficient validation of untrusted input in CORS
  * CVE-2022-4189: Insufficient policy enforcement in DevTools
  * CVE-2022-4190: Insufficient data validation in Directory
  * CVE-2022-4191: Use after free in Sign-In
  * CVE-2022-4192: Use after free in Live Caption
  * CVE-2022-4193: Insufficient policy enforcement in File System API
  * CVE-2022-4194: Use after free in Accessibility
  * CVE-2022-4195: Insufficient policy enforcement in Safe Browsing
- drop chromium-105-wayland-1.20.patch, upstream
- drop chromium-107-compiler.patch
- add chromium-108-compiler.patch
- drop chromium-98-EnumTable-crash.patch</changelog>
</package>
<package pkgid="ad57106af4e71c5df9ef9575a9f2ea185a467b8ae23d2ca4a3fd9b0be628233f" name="chromium" arch="aarch64">
  <version epoch="0" ver="108.0.5359.94" rel="bp154.2.52.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657368000">- Chromium 103.0.5060.114 (boo#1201216)
  * CVE-2022-2294: Heap buffer overflow in WebRTC
  * CVE-2022-2295: Type Confusion in V8
  * CVE-2022-2296: Use after free in Chrome OS Shell</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1658318400">- Chromium 103.0.5060.134 (boo#1201679):
  * CVE-2022-2477 : Use after free in Guest View
  * CVE-2022-2478 : Use after free in PDF
  * CVE-2022-2479 : Insufficient validation of untrusted input in File
  * CVE-2022-2480 : Use after free in Service Worker API
  * CVE-2022-2481: Use after free in Views
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1658577600">- Switch back to Clang so that we can use BTI on aarch64
  * Gold is too old - doesn't understand BTI
  * LD crashes on aarch64
- Re-enable LTO
- Prepare move to FFmpeg 5 for new channel layout
  (requires 5.1+)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660046400">- Chromium 104.0.5112.79 (boo#1202075)
  * CVE-2022-2603: Use after free in Omnibox
  * CVE-2022-2604: Use after free in Safe Browsing
  * CVE-2022-2605: Out of bounds read in Dawn
  * CVE-2022-2606: Use after free in Managed devices API
  * CVE-2022-2607: Use after free in Tab Strip
  * CVE-2022-2608: Use after free in Overview Mode
  * CVE-2022-2609: Use after free in Nearby Share
  * CVE-2022-2610: Insufficient policy enforcement in Background Fetch
  * CVE-2022-2611: Inappropriate implementation in Fullscreen API
  * CVE-2022-2612: Side-channel information leakage in Keyboard input
  * CVE-2022-2613: Use after free in Input
  * CVE-2022-2614: Use after free in Sign-In Flow
  * CVE-2022-2615: Insufficient policy enforcement in Cookies
  * CVE-2022-2616: Inappropriate implementation in Extensions API
  * CVE-2022-2617: Use after free in Extensions API
  * CVE-2022-2618: Insufficient validation of untrusted input in Internals
  * CVE-2022-2619: Insufficient validation of untrusted input in Settings
  * CVE-2022-2620: Use after free in WebUI
  * CVE-2022-2621: Use after free in Extensions
  * CVE-2022-2622: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-2623: Use after free in Offline
  * CVE-2022-2624: Heap buffer overflow in PDF
- Added patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-104-tflite-system-zlib.patch
- Removed patches:
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-compiler.patch
- Use FFmpeg 5.1 on TW</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660651200">- Re-enable our version of chrome-wrapper
- Set no sandbox if root is being used (https://crbug.com/638180)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660824000">- Chromium 104.0.5112.101 (boo#1202509):
  * CVE-2022-2852: Use after free in FedCM
  * CVE-2022-2854: Use after free in SwiftShader
  * CVE-2022-2855: Use after free in ANGLE
  * CVE-2022-2857: Use after free in Blink
  * CVE-2022-2858: Use after free in Sign-In Flow
  * CVE-2022-2853: Heap buffer overflow in Downloads
  * CVE-2022-2856: Insufficient validation of untrusted input in Intents
  * CVE-2022-2859: Use after free in Chrome OS Shell
  * CVE-2022-2860: Insufficient policy enforcement in Cookies
  * CVE-2022-2861: Inappropriate implementation in Extensions API</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1661169600">- Fix quoting in chrome-wrapper, don't put cwd on LD_LIBRARY_PATH</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1662033600">- Update chromium-symbolic.svg: this fixes bsc#1202403.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1662638400">- Chromium 105.0.5195.102 (boo#1203102):
  * CVE-2022-3075: Insufficient data validation in Mojo
- Chromium 105.0.5195.52 (boo#1202964):
  * CVE-2022-3038: Use after free in Network Service
  * CVE-2022-3039: Use after free in WebSQL
  * CVE-2022-3040: Use after free in Layout
  * CVE-2022-3041: Use after free in WebSQL
  * CVE-2022-3042: Use after free in PhoneHub
  * CVE-2022-3043: Heap buffer overflow in Screen Capture
  * CVE-2022-3044: Inappropriate implementation in Site Isolation
  * CVE-2022-3045: Insufficient validation of untrusted input in V8
  * CVE-2022-3046: Use after free in Browser Tag
  * CVE-2022-3071: Use after free in Tab Strip
  * CVE-2022-3047: Insufficient policy enforcement in Extensions API
  * CVE-2022-3048: Inappropriate implementation in Chrome OS lockscreen
  * CVE-2022-3049: Use after free in SplitScreen
  * CVE-2022-3050: Heap buffer overflow in WebUI
  * CVE-2022-3051: Heap buffer overflow in Exosphere
  * CVE-2022-3052: Heap buffer overflow in Window Manager
  * CVE-2022-3053: Inappropriate implementation in Pointer Lock
  * CVE-2022-3054: Insufficient policy enforcement in DevTools
  * CVE-2022-3055: Use after free in Passwords
  * CVE-2022-3056: Insufficient policy enforcement in Content Security Policy
  * CVE-2022-3057: Inappropriate implementation in iframe Sandbox
  * CVE-2022-3058: Use after free in Sign-In Flow
- Added patches:
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Bitmap-include.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-wayland-1.20.patch
  * chromium-105-compiler.patch
- Removed patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-78-protobuf-RepeatedPtrField-export.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663156800">- Chromium 105.0.5195.127 (boo#1203419):
  * CVE-2022-3195: Out of bounds write in Storage
  * CVE-2022-3196: Use after free in PDF
  * CVE-2022-3197: Use after free in PDF
  * CVE-2022-3198: Use after free in PDF
  * CVE-2022-3199: Use after free in Frames
  * CVE-2022-3200: Heap buffer overflow in Internals
  * CVE-2022-3201: Insufficient validation of untrusted input in DevTools
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1664625600">- Chromium 106.0.5249.91 (boo#1203808):
  * CVE-2022-3370: Use after free in Custom Elements
  * CVE-2022-3373: Out of bounds write in V8
- includes changes from 106.0.5249.61:
  * CVE-2022-3304: Use after free in CSS
  * CVE-2022-3201: Insufficient validation of untrusted input in Developer Tools
  * CVE-2022-3305: Use after free in Survey
  * CVE-2022-3306: Use after free in Survey
  * CVE-2022-3307: Use after free in Media
  * CVE-2022-3308: Insufficient policy enforcement in Developer Tools
  * CVE-2022-3309: Use after free in Assistant
  * CVE-2022-3310: Insufficient policy enforcement in Custom Tabs
  * CVE-2022-3311: Use after free in Import
  * CVE-2022-3312: Insufficient validation of untrusted input in VPN
  * CVE-2022-3313: Incorrect security UI in Full Screen
  * CVE-2022-3314: Use after free in Logging
  * CVE-2022-3315: Type confusion in Blink
  * CVE-2022-3316: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-3317: Insufficient validation of untrusted input in Intents
  * CVE-2022-3318: Use after free in ChromeOS Notifications
- drop patches:
  * chromium-104-tflite-system-zlib.patch
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
- add patches
  * chromium-106-ffmpeg-duration.patch
  * chromium-106-AutofillPopupControllerImpl-namespace.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1665057600">- Chromium 106.0.5249.103:
  * fix possible cache manager deadlock
  * Fix right-click menu appearing unexpectedly affecting screen
    readers</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1665576000">- Chromium 106.0.5249.119 (boo#1204223)
  * CVE-2022-3445: Use after free in Skia
  * CVE-2022-3446: Heap buffer overflow in WebSQL
  * CVE-2022-3447: Inappropriate implementation in Custom Tabs
  * CVE-2022-3448: Use after free in Permissions API
  * CVE-2022-3449: Use after free in Safe Browsing
  * CVE-2022-3450: Use after free in Peer Connection</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1666872000">- Chromium 107.0.5304.68 (boo#1204732)
  * CVE-2022-3652: Type Confusion in V8
  * CVE-2022-3653: Heap buffer overflow in Vulkan
  * CVE-2022-3654: Use after free in Layout
  * CVE-2022-3655: Heap buffer overflow in Media Galleries
  * CVE-2022-3656: Insufficient data validation in File System
  * CVE-2022-3657: Use after free in Extensions
  * CVE-2022-3658: Use after free in Feedback service on Chrome OS
  * CVE-2022-3659: Use after free in Accessibility
  * CVE-2022-3660: Inappropriate implementation in Full screen mode
  * CVE-2022-3661: Insufficient data validation in Extensions
- Added patches:
  * chromium-107-compiler.patch
  * chromium-107-system-zlib.patch
- Removed patches:
  * chromium-105-compiler.patch
  * chromium-105-Bitmap-include.patch
  * chromium-106-AutofillPopupControllerImpl-namespace.patch
- Unbundle libyuv and libavif on TW
- Prepare 15.5
- Use qt on 15.4+ (15.3 too old)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1666958400">- Chromium 107.0.5304.87 (boo#1204819)
  * CVE-2022-3723: Type Confusion in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1667995200">- Chromium 107.0.5304.110 (boo#1205221)
  * CVE-2022-3885: Use after free in V8
  * CVE-2022-3886: Use after free in Speech Recognition
  * CVE-2022-3887: Use after free in Web Workers
  * CVE-2022-3888: Use after free in WebCodecs
  * CVE-2022-3889: Type Confusion in V8
  * CVE-2022-3890: Heap buffer overflow in Crashpad</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1668686400">- Build with llvm15 on openSUSE:Backports:SLE-15-SP5 and up</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1669291200">- Chromium 107.0.5304.121 (boo#1205736)
  * CVE-2022-4135: Heap buffer overflow in GPU</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1669809600">- Chromium 108.0.5359.71 (boo#1205871):
  * CVE-2022-4174: Type Confusion in V8
  * CVE-2022-4175: Use after free in Camera Capture
  * CVE-2022-4176: Out of bounds write in Lacros Graphics
  * CVE-2022-4177: Use after free in Extensions
  * CVE-2022-4178: Use after free in Mojo
  * CVE-2022-4179: Use after free in Audio
  * CVE-2022-4180: Use after free in Mojo
  * CVE-2022-4181: Use after free in Forms
  * CVE-2022-4182: Inappropriate implementation in Fenced Frames
  * CVE-2022-4183: Insufficient policy enforcement in Popup Blocker
  * CVE-2022-4184: Insufficient policy enforcement in Autofill
  * CVE-2022-4185: Inappropriate implementation in Navigation
  * CVE-2022-4186: Insufficient validation of untrusted input in Downloads
  * CVE-2022-4187: Insufficient policy enforcement in DevTools
  * CVE-2022-4188: Insufficient validation of untrusted input in CORS
  * CVE-2022-4189: Insufficient policy enforcement in DevTools
  * CVE-2022-4190: Insufficient data validation in Directory
  * CVE-2022-4191: Use after free in Sign-In
  * CVE-2022-4192: Use after free in Live Caption
  * CVE-2022-4193: Insufficient policy enforcement in File System API
  * CVE-2022-4194: Use after free in Accessibility
  * CVE-2022-4195: Insufficient policy enforcement in Safe Browsing
- drop chromium-105-wayland-1.20.patch, upstream
- drop chromium-107-compiler.patch
- add chromium-108-compiler.patch
- drop chromium-98-EnumTable-crash.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1670068800">- Chromium 108.0.5359.94:
  * CVE-2022-4262: Type Confusion in V8 (boo#1205999)</changelog>
</package>
<package pkgid="0f583cc97a876e9ec7c43a872fbec8c0b28298b936ea6f1ccf3242984fb69c8b" name="chromium" arch="src">
  <version epoch="0" ver="108.0.5359.94" rel="bp154.2.52.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657368000">- Chromium 103.0.5060.114 (boo#1201216)
  * CVE-2022-2294: Heap buffer overflow in WebRTC
  * CVE-2022-2295: Type Confusion in V8
  * CVE-2022-2296: Use after free in Chrome OS Shell</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1658318400">- Chromium 103.0.5060.134 (boo#1201679):
  * CVE-2022-2477 : Use after free in Guest View
  * CVE-2022-2478 : Use after free in PDF
  * CVE-2022-2479 : Insufficient validation of untrusted input in File
  * CVE-2022-2480 : Use after free in Service Worker API
  * CVE-2022-2481: Use after free in Views
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1658577600">- Switch back to Clang so that we can use BTI on aarch64
  * Gold is too old - doesn't understand BTI
  * LD crashes on aarch64
- Re-enable LTO
- Prepare move to FFmpeg 5 for new channel layout
  (requires 5.1+)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660046400">- Chromium 104.0.5112.79 (boo#1202075)
  * CVE-2022-2603: Use after free in Omnibox
  * CVE-2022-2604: Use after free in Safe Browsing
  * CVE-2022-2605: Out of bounds read in Dawn
  * CVE-2022-2606: Use after free in Managed devices API
  * CVE-2022-2607: Use after free in Tab Strip
  * CVE-2022-2608: Use after free in Overview Mode
  * CVE-2022-2609: Use after free in Nearby Share
  * CVE-2022-2610: Insufficient policy enforcement in Background Fetch
  * CVE-2022-2611: Inappropriate implementation in Fullscreen API
  * CVE-2022-2612: Side-channel information leakage in Keyboard input
  * CVE-2022-2613: Use after free in Input
  * CVE-2022-2614: Use after free in Sign-In Flow
  * CVE-2022-2615: Insufficient policy enforcement in Cookies
  * CVE-2022-2616: Inappropriate implementation in Extensions API
  * CVE-2022-2617: Use after free in Extensions API
  * CVE-2022-2618: Insufficient validation of untrusted input in Internals
  * CVE-2022-2619: Insufficient validation of untrusted input in Settings
  * CVE-2022-2620: Use after free in WebUI
  * CVE-2022-2621: Use after free in Extensions
  * CVE-2022-2622: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-2623: Use after free in Offline
  * CVE-2022-2624: Heap buffer overflow in PDF
- Added patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-104-tflite-system-zlib.patch
- Removed patches:
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-compiler.patch
- Use FFmpeg 5.1 on TW</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660651200">- Re-enable our version of chrome-wrapper
- Set no sandbox if root is being used (https://crbug.com/638180)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660824000">- Chromium 104.0.5112.101 (boo#1202509):
  * CVE-2022-2852: Use after free in FedCM
  * CVE-2022-2854: Use after free in SwiftShader
  * CVE-2022-2855: Use after free in ANGLE
  * CVE-2022-2857: Use after free in Blink
  * CVE-2022-2858: Use after free in Sign-In Flow
  * CVE-2022-2853: Heap buffer overflow in Downloads
  * CVE-2022-2856: Insufficient validation of untrusted input in Intents
  * CVE-2022-2859: Use after free in Chrome OS Shell
  * CVE-2022-2860: Insufficient policy enforcement in Cookies
  * CVE-2022-2861: Inappropriate implementation in Extensions API</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1661169600">- Fix quoting in chrome-wrapper, don't put cwd on LD_LIBRARY_PATH</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1662033600">- Update chromium-symbolic.svg: this fixes bsc#1202403.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1662638400">- Chromium 105.0.5195.102 (boo#1203102):
  * CVE-2022-3075: Insufficient data validation in Mojo
- Chromium 105.0.5195.52 (boo#1202964):
  * CVE-2022-3038: Use after free in Network Service
  * CVE-2022-3039: Use after free in WebSQL
  * CVE-2022-3040: Use after free in Layout
  * CVE-2022-3041: Use after free in WebSQL
  * CVE-2022-3042: Use after free in PhoneHub
  * CVE-2022-3043: Heap buffer overflow in Screen Capture
  * CVE-2022-3044: Inappropriate implementation in Site Isolation
  * CVE-2022-3045: Insufficient validation of untrusted input in V8
  * CVE-2022-3046: Use after free in Browser Tag
  * CVE-2022-3071: Use after free in Tab Strip
  * CVE-2022-3047: Insufficient policy enforcement in Extensions API
  * CVE-2022-3048: Inappropriate implementation in Chrome OS lockscreen
  * CVE-2022-3049: Use after free in SplitScreen
  * CVE-2022-3050: Heap buffer overflow in WebUI
  * CVE-2022-3051: Heap buffer overflow in Exosphere
  * CVE-2022-3052: Heap buffer overflow in Window Manager
  * CVE-2022-3053: Inappropriate implementation in Pointer Lock
  * CVE-2022-3054: Insufficient policy enforcement in DevTools
  * CVE-2022-3055: Use after free in Passwords
  * CVE-2022-3056: Insufficient policy enforcement in Content Security Policy
  * CVE-2022-3057: Inappropriate implementation in iframe Sandbox
  * CVE-2022-3058: Use after free in Sign-In Flow
- Added patches:
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Bitmap-include.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-wayland-1.20.patch
  * chromium-105-compiler.patch
- Removed patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-78-protobuf-RepeatedPtrField-export.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663156800">- Chromium 105.0.5195.127 (boo#1203419):
  * CVE-2022-3195: Out of bounds write in Storage
  * CVE-2022-3196: Use after free in PDF
  * CVE-2022-3197: Use after free in PDF
  * CVE-2022-3198: Use after free in PDF
  * CVE-2022-3199: Use after free in Frames
  * CVE-2022-3200: Heap buffer overflow in Internals
  * CVE-2022-3201: Insufficient validation of untrusted input in DevTools
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1664625600">- Chromium 106.0.5249.91 (boo#1203808):
  * CVE-2022-3370: Use after free in Custom Elements
  * CVE-2022-3373: Out of bounds write in V8
- includes changes from 106.0.5249.61:
  * CVE-2022-3304: Use after free in CSS
  * CVE-2022-3201: Insufficient validation of untrusted input in Developer Tools
  * CVE-2022-3305: Use after free in Survey
  * CVE-2022-3306: Use after free in Survey
  * CVE-2022-3307: Use after free in Media
  * CVE-2022-3308: Insufficient policy enforcement in Developer Tools
  * CVE-2022-3309: Use after free in Assistant
  * CVE-2022-3310: Insufficient policy enforcement in Custom Tabs
  * CVE-2022-3311: Use after free in Import
  * CVE-2022-3312: Insufficient validation of untrusted input in VPN
  * CVE-2022-3313: Incorrect security UI in Full Screen
  * CVE-2022-3314: Use after free in Logging
  * CVE-2022-3315: Type confusion in Blink
  * CVE-2022-3316: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-3317: Insufficient validation of untrusted input in Intents
  * CVE-2022-3318: Use after free in ChromeOS Notifications
- drop patches:
  * chromium-104-tflite-system-zlib.patch
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
- add patches
  * chromium-106-ffmpeg-duration.patch
  * chromium-106-AutofillPopupControllerImpl-namespace.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1665057600">- Chromium 106.0.5249.103:
  * fix possible cache manager deadlock
  * Fix right-click menu appearing unexpectedly affecting screen
    readers</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1665576000">- Chromium 106.0.5249.119 (boo#1204223)
  * CVE-2022-3445: Use after free in Skia
  * CVE-2022-3446: Heap buffer overflow in WebSQL
  * CVE-2022-3447: Inappropriate implementation in Custom Tabs
  * CVE-2022-3448: Use after free in Permissions API
  * CVE-2022-3449: Use after free in Safe Browsing
  * CVE-2022-3450: Use after free in Peer Connection</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1666872000">- Chromium 107.0.5304.68 (boo#1204732)
  * CVE-2022-3652: Type Confusion in V8
  * CVE-2022-3653: Heap buffer overflow in Vulkan
  * CVE-2022-3654: Use after free in Layout
  * CVE-2022-3655: Heap buffer overflow in Media Galleries
  * CVE-2022-3656: Insufficient data validation in File System
  * CVE-2022-3657: Use after free in Extensions
  * CVE-2022-3658: Use after free in Feedback service on Chrome OS
  * CVE-2022-3659: Use after free in Accessibility
  * CVE-2022-3660: Inappropriate implementation in Full screen mode
  * CVE-2022-3661: Insufficient data validation in Extensions
- Added patches:
  * chromium-107-compiler.patch
  * chromium-107-system-zlib.patch
- Removed patches:
  * chromium-105-compiler.patch
  * chromium-105-Bitmap-include.patch
  * chromium-106-AutofillPopupControllerImpl-namespace.patch
- Unbundle libyuv and libavif on TW
- Prepare 15.5
- Use qt on 15.4+ (15.3 too old)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1666958400">- Chromium 107.0.5304.87 (boo#1204819)
  * CVE-2022-3723: Type Confusion in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1667995200">- Chromium 107.0.5304.110 (boo#1205221)
  * CVE-2022-3885: Use after free in V8
  * CVE-2022-3886: Use after free in Speech Recognition
  * CVE-2022-3887: Use after free in Web Workers
  * CVE-2022-3888: Use after free in WebCodecs
  * CVE-2022-3889: Type Confusion in V8
  * CVE-2022-3890: Heap buffer overflow in Crashpad</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1668686400">- Build with llvm15 on openSUSE:Backports:SLE-15-SP5 and up</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1669291200">- Chromium 107.0.5304.121 (boo#1205736)
  * CVE-2022-4135: Heap buffer overflow in GPU</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1669809600">- Chromium 108.0.5359.71 (boo#1205871):
  * CVE-2022-4174: Type Confusion in V8
  * CVE-2022-4175: Use after free in Camera Capture
  * CVE-2022-4176: Out of bounds write in Lacros Graphics
  * CVE-2022-4177: Use after free in Extensions
  * CVE-2022-4178: Use after free in Mojo
  * CVE-2022-4179: Use after free in Audio
  * CVE-2022-4180: Use after free in Mojo
  * CVE-2022-4181: Use after free in Forms
  * CVE-2022-4182: Inappropriate implementation in Fenced Frames
  * CVE-2022-4183: Insufficient policy enforcement in Popup Blocker
  * CVE-2022-4184: Insufficient policy enforcement in Autofill
  * CVE-2022-4185: Inappropriate implementation in Navigation
  * CVE-2022-4186: Insufficient validation of untrusted input in Downloads
  * CVE-2022-4187: Insufficient policy enforcement in DevTools
  * CVE-2022-4188: Insufficient validation of untrusted input in CORS
  * CVE-2022-4189: Insufficient policy enforcement in DevTools
  * CVE-2022-4190: Insufficient data validation in Directory
  * CVE-2022-4191: Use after free in Sign-In
  * CVE-2022-4192: Use after free in Live Caption
  * CVE-2022-4193: Insufficient policy enforcement in File System API
  * CVE-2022-4194: Use after free in Accessibility
  * CVE-2022-4195: Insufficient policy enforcement in Safe Browsing
- drop chromium-105-wayland-1.20.patch, upstream
- drop chromium-107-compiler.patch
- add chromium-108-compiler.patch
- drop chromium-98-EnumTable-crash.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1670068800">- Chromium 108.0.5359.94:
  * CVE-2022-4262: Type Confusion in V8 (boo#1205999)</changelog>
</package>
<package pkgid="f6ddcc8b7d852b72c198a449332d4971c76c5958c142a9c548031374e0db7814" name="chromium" arch="x86_64">
  <version epoch="0" ver="108.0.5359.94" rel="bp154.2.52.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657368000">- Chromium 103.0.5060.114 (boo#1201216)
  * CVE-2022-2294: Heap buffer overflow in WebRTC
  * CVE-2022-2295: Type Confusion in V8
  * CVE-2022-2296: Use after free in Chrome OS Shell</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1658318400">- Chromium 103.0.5060.134 (boo#1201679):
  * CVE-2022-2477 : Use after free in Guest View
  * CVE-2022-2478 : Use after free in PDF
  * CVE-2022-2479 : Insufficient validation of untrusted input in File
  * CVE-2022-2480 : Use after free in Service Worker API
  * CVE-2022-2481: Use after free in Views
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1658577600">- Switch back to Clang so that we can use BTI on aarch64
  * Gold is too old - doesn't understand BTI
  * LD crashes on aarch64
- Re-enable LTO
- Prepare move to FFmpeg 5 for new channel layout
  (requires 5.1+)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660046400">- Chromium 104.0.5112.79 (boo#1202075)
  * CVE-2022-2603: Use after free in Omnibox
  * CVE-2022-2604: Use after free in Safe Browsing
  * CVE-2022-2605: Out of bounds read in Dawn
  * CVE-2022-2606: Use after free in Managed devices API
  * CVE-2022-2607: Use after free in Tab Strip
  * CVE-2022-2608: Use after free in Overview Mode
  * CVE-2022-2609: Use after free in Nearby Share
  * CVE-2022-2610: Insufficient policy enforcement in Background Fetch
  * CVE-2022-2611: Inappropriate implementation in Fullscreen API
  * CVE-2022-2612: Side-channel information leakage in Keyboard input
  * CVE-2022-2613: Use after free in Input
  * CVE-2022-2614: Use after free in Sign-In Flow
  * CVE-2022-2615: Insufficient policy enforcement in Cookies
  * CVE-2022-2616: Inappropriate implementation in Extensions API
  * CVE-2022-2617: Use after free in Extensions API
  * CVE-2022-2618: Insufficient validation of untrusted input in Internals
  * CVE-2022-2619: Insufficient validation of untrusted input in Settings
  * CVE-2022-2620: Use after free in WebUI
  * CVE-2022-2621: Use after free in Extensions
  * CVE-2022-2622: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-2623: Use after free in Offline
  * CVE-2022-2624: Heap buffer overflow in PDF
- Added patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-104-tflite-system-zlib.patch
- Removed patches:
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-compiler.patch
- Use FFmpeg 5.1 on TW</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660651200">- Re-enable our version of chrome-wrapper
- Set no sandbox if root is being used (https://crbug.com/638180)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660824000">- Chromium 104.0.5112.101 (boo#1202509):
  * CVE-2022-2852: Use after free in FedCM
  * CVE-2022-2854: Use after free in SwiftShader
  * CVE-2022-2855: Use after free in ANGLE
  * CVE-2022-2857: Use after free in Blink
  * CVE-2022-2858: Use after free in Sign-In Flow
  * CVE-2022-2853: Heap buffer overflow in Downloads
  * CVE-2022-2856: Insufficient validation of untrusted input in Intents
  * CVE-2022-2859: Use after free in Chrome OS Shell
  * CVE-2022-2860: Insufficient policy enforcement in Cookies
  * CVE-2022-2861: Inappropriate implementation in Extensions API</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1661169600">- Fix quoting in chrome-wrapper, don't put cwd on LD_LIBRARY_PATH</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1662033600">- Update chromium-symbolic.svg: this fixes bsc#1202403.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1662638400">- Chromium 105.0.5195.102 (boo#1203102):
  * CVE-2022-3075: Insufficient data validation in Mojo
- Chromium 105.0.5195.52 (boo#1202964):
  * CVE-2022-3038: Use after free in Network Service
  * CVE-2022-3039: Use after free in WebSQL
  * CVE-2022-3040: Use after free in Layout
  * CVE-2022-3041: Use after free in WebSQL
  * CVE-2022-3042: Use after free in PhoneHub
  * CVE-2022-3043: Heap buffer overflow in Screen Capture
  * CVE-2022-3044: Inappropriate implementation in Site Isolation
  * CVE-2022-3045: Insufficient validation of untrusted input in V8
  * CVE-2022-3046: Use after free in Browser Tag
  * CVE-2022-3071: Use after free in Tab Strip
  * CVE-2022-3047: Insufficient policy enforcement in Extensions API
  * CVE-2022-3048: Inappropriate implementation in Chrome OS lockscreen
  * CVE-2022-3049: Use after free in SplitScreen
  * CVE-2022-3050: Heap buffer overflow in WebUI
  * CVE-2022-3051: Heap buffer overflow in Exosphere
  * CVE-2022-3052: Heap buffer overflow in Window Manager
  * CVE-2022-3053: Inappropriate implementation in Pointer Lock
  * CVE-2022-3054: Insufficient policy enforcement in DevTools
  * CVE-2022-3055: Use after free in Passwords
  * CVE-2022-3056: Insufficient policy enforcement in Content Security Policy
  * CVE-2022-3057: Inappropriate implementation in iframe Sandbox
  * CVE-2022-3058: Use after free in Sign-In Flow
- Added patches:
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Bitmap-include.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-wayland-1.20.patch
  * chromium-105-compiler.patch
- Removed patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-78-protobuf-RepeatedPtrField-export.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663156800">- Chromium 105.0.5195.127 (boo#1203419):
  * CVE-2022-3195: Out of bounds write in Storage
  * CVE-2022-3196: Use after free in PDF
  * CVE-2022-3197: Use after free in PDF
  * CVE-2022-3198: Use after free in PDF
  * CVE-2022-3199: Use after free in Frames
  * CVE-2022-3200: Heap buffer overflow in Internals
  * CVE-2022-3201: Insufficient validation of untrusted input in DevTools
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1664625600">- Chromium 106.0.5249.91 (boo#1203808):
  * CVE-2022-3370: Use after free in Custom Elements
  * CVE-2022-3373: Out of bounds write in V8
- includes changes from 106.0.5249.61:
  * CVE-2022-3304: Use after free in CSS
  * CVE-2022-3201: Insufficient validation of untrusted input in Developer Tools
  * CVE-2022-3305: Use after free in Survey
  * CVE-2022-3306: Use after free in Survey
  * CVE-2022-3307: Use after free in Media
  * CVE-2022-3308: Insufficient policy enforcement in Developer Tools
  * CVE-2022-3309: Use after free in Assistant
  * CVE-2022-3310: Insufficient policy enforcement in Custom Tabs
  * CVE-2022-3311: Use after free in Import
  * CVE-2022-3312: Insufficient validation of untrusted input in VPN
  * CVE-2022-3313: Incorrect security UI in Full Screen
  * CVE-2022-3314: Use after free in Logging
  * CVE-2022-3315: Type confusion in Blink
  * CVE-2022-3316: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-3317: Insufficient validation of untrusted input in Intents
  * CVE-2022-3318: Use after free in ChromeOS Notifications
- drop patches:
  * chromium-104-tflite-system-zlib.patch
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
- add patches
  * chromium-106-ffmpeg-duration.patch
  * chromium-106-AutofillPopupControllerImpl-namespace.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1665057600">- Chromium 106.0.5249.103:
  * fix possible cache manager deadlock
  * Fix right-click menu appearing unexpectedly affecting screen
    readers</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1665576000">- Chromium 106.0.5249.119 (boo#1204223)
  * CVE-2022-3445: Use after free in Skia
  * CVE-2022-3446: Heap buffer overflow in WebSQL
  * CVE-2022-3447: Inappropriate implementation in Custom Tabs
  * CVE-2022-3448: Use after free in Permissions API
  * CVE-2022-3449: Use after free in Safe Browsing
  * CVE-2022-3450: Use after free in Peer Connection</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1666872000">- Chromium 107.0.5304.68 (boo#1204732)
  * CVE-2022-3652: Type Confusion in V8
  * CVE-2022-3653: Heap buffer overflow in Vulkan
  * CVE-2022-3654: Use after free in Layout
  * CVE-2022-3655: Heap buffer overflow in Media Galleries
  * CVE-2022-3656: Insufficient data validation in File System
  * CVE-2022-3657: Use after free in Extensions
  * CVE-2022-3658: Use after free in Feedback service on Chrome OS
  * CVE-2022-3659: Use after free in Accessibility
  * CVE-2022-3660: Inappropriate implementation in Full screen mode
  * CVE-2022-3661: Insufficient data validation in Extensions
- Added patches:
  * chromium-107-compiler.patch
  * chromium-107-system-zlib.patch
- Removed patches:
  * chromium-105-compiler.patch
  * chromium-105-Bitmap-include.patch
  * chromium-106-AutofillPopupControllerImpl-namespace.patch
- Unbundle libyuv and libavif on TW
- Prepare 15.5
- Use qt on 15.4+ (15.3 too old)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1666958400">- Chromium 107.0.5304.87 (boo#1204819)
  * CVE-2022-3723: Type Confusion in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1667995200">- Chromium 107.0.5304.110 (boo#1205221)
  * CVE-2022-3885: Use after free in V8
  * CVE-2022-3886: Use after free in Speech Recognition
  * CVE-2022-3887: Use after free in Web Workers
  * CVE-2022-3888: Use after free in WebCodecs
  * CVE-2022-3889: Type Confusion in V8
  * CVE-2022-3890: Heap buffer overflow in Crashpad</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1668686400">- Build with llvm15 on openSUSE:Backports:SLE-15-SP5 and up</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1669291200">- Chromium 107.0.5304.121 (boo#1205736)
  * CVE-2022-4135: Heap buffer overflow in GPU</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1669809600">- Chromium 108.0.5359.71 (boo#1205871):
  * CVE-2022-4174: Type Confusion in V8
  * CVE-2022-4175: Use after free in Camera Capture
  * CVE-2022-4176: Out of bounds write in Lacros Graphics
  * CVE-2022-4177: Use after free in Extensions
  * CVE-2022-4178: Use after free in Mojo
  * CVE-2022-4179: Use after free in Audio
  * CVE-2022-4180: Use after free in Mojo
  * CVE-2022-4181: Use after free in Forms
  * CVE-2022-4182: Inappropriate implementation in Fenced Frames
  * CVE-2022-4183: Insufficient policy enforcement in Popup Blocker
  * CVE-2022-4184: Insufficient policy enforcement in Autofill
  * CVE-2022-4185: Inappropriate implementation in Navigation
  * CVE-2022-4186: Insufficient validation of untrusted input in Downloads
  * CVE-2022-4187: Insufficient policy enforcement in DevTools
  * CVE-2022-4188: Insufficient validation of untrusted input in CORS
  * CVE-2022-4189: Insufficient policy enforcement in DevTools
  * CVE-2022-4190: Insufficient data validation in Directory
  * CVE-2022-4191: Use after free in Sign-In
  * CVE-2022-4192: Use after free in Live Caption
  * CVE-2022-4193: Insufficient policy enforcement in File System API
  * CVE-2022-4194: Use after free in Accessibility
  * CVE-2022-4195: Insufficient policy enforcement in Safe Browsing
- drop chromium-105-wayland-1.20.patch, upstream
- drop chromium-107-compiler.patch
- add chromium-108-compiler.patch
- drop chromium-98-EnumTable-crash.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1670068800">- Chromium 108.0.5359.94:
  * CVE-2022-4262: Type Confusion in V8 (boo#1205999)</changelog>
</package>
<package pkgid="b176f8e9e3567172d03f745566d9605d5fe9df6d9a41beee0c2b52096bdb318e" name="chromium" arch="aarch64">
  <version epoch="0" ver="109.0.5414.119" rel="bp154.2.64.1"/>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1661169600">- Fix quoting in chrome-wrapper, don't put cwd on LD_LIBRARY_PATH</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1662033600">- Update chromium-symbolic.svg: this fixes bsc#1202403.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1662638400">- Chromium 105.0.5195.102 (boo#1203102):
  * CVE-2022-3075: Insufficient data validation in Mojo
- Chromium 105.0.5195.52 (boo#1202964):
  * CVE-2022-3038: Use after free in Network Service
  * CVE-2022-3039: Use after free in WebSQL
  * CVE-2022-3040: Use after free in Layout
  * CVE-2022-3041: Use after free in WebSQL
  * CVE-2022-3042: Use after free in PhoneHub
  * CVE-2022-3043: Heap buffer overflow in Screen Capture
  * CVE-2022-3044: Inappropriate implementation in Site Isolation
  * CVE-2022-3045: Insufficient validation of untrusted input in V8
  * CVE-2022-3046: Use after free in Browser Tag
  * CVE-2022-3071: Use after free in Tab Strip
  * CVE-2022-3047: Insufficient policy enforcement in Extensions API
  * CVE-2022-3048: Inappropriate implementation in Chrome OS lockscreen
  * CVE-2022-3049: Use after free in SplitScreen
  * CVE-2022-3050: Heap buffer overflow in WebUI
  * CVE-2022-3051: Heap buffer overflow in Exosphere
  * CVE-2022-3052: Heap buffer overflow in Window Manager
  * CVE-2022-3053: Inappropriate implementation in Pointer Lock
  * CVE-2022-3054: Insufficient policy enforcement in DevTools
  * CVE-2022-3055: Use after free in Passwords
  * CVE-2022-3056: Insufficient policy enforcement in Content Security Policy
  * CVE-2022-3057: Inappropriate implementation in iframe Sandbox
  * CVE-2022-3058: Use after free in Sign-In Flow
- Added patches:
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Bitmap-include.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-wayland-1.20.patch
  * chromium-105-compiler.patch
- Removed patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-78-protobuf-RepeatedPtrField-export.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663156800">- Chromium 105.0.5195.127 (boo#1203419):
  * CVE-2022-3195: Out of bounds write in Storage
  * CVE-2022-3196: Use after free in PDF
  * CVE-2022-3197: Use after free in PDF
  * CVE-2022-3198: Use after free in PDF
  * CVE-2022-3199: Use after free in Frames
  * CVE-2022-3200: Heap buffer overflow in Internals
  * CVE-2022-3201: Insufficient validation of untrusted input in DevTools
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1664625600">- Chromium 106.0.5249.91 (boo#1203808):
  * CVE-2022-3370: Use after free in Custom Elements
  * CVE-2022-3373: Out of bounds write in V8
- includes changes from 106.0.5249.61:
  * CVE-2022-3304: Use after free in CSS
  * CVE-2022-3201: Insufficient validation of untrusted input in Developer Tools
  * CVE-2022-3305: Use after free in Survey
  * CVE-2022-3306: Use after free in Survey
  * CVE-2022-3307: Use after free in Media
  * CVE-2022-3308: Insufficient policy enforcement in Developer Tools
  * CVE-2022-3309: Use after free in Assistant
  * CVE-2022-3310: Insufficient policy enforcement in Custom Tabs
  * CVE-2022-3311: Use after free in Import
  * CVE-2022-3312: Insufficient validation of untrusted input in VPN
  * CVE-2022-3313: Incorrect security UI in Full Screen
  * CVE-2022-3314: Use after free in Logging
  * CVE-2022-3315: Type confusion in Blink
  * CVE-2022-3316: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-3317: Insufficient validation of untrusted input in Intents
  * CVE-2022-3318: Use after free in ChromeOS Notifications
- drop patches:
  * chromium-104-tflite-system-zlib.patch
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
- add patches
  * chromium-106-ffmpeg-duration.patch
  * chromium-106-AutofillPopupControllerImpl-namespace.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1665057600">- Chromium 106.0.5249.103:
  * fix possible cache manager deadlock
  * Fix right-click menu appearing unexpectedly affecting screen
    readers</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1665576000">- Chromium 106.0.5249.119 (boo#1204223)
  * CVE-2022-3445: Use after free in Skia
  * CVE-2022-3446: Heap buffer overflow in WebSQL
  * CVE-2022-3447: Inappropriate implementation in Custom Tabs
  * CVE-2022-3448: Use after free in Permissions API
  * CVE-2022-3449: Use after free in Safe Browsing
  * CVE-2022-3450: Use after free in Peer Connection</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1666872000">- Chromium 107.0.5304.68 (boo#1204732)
  * CVE-2022-3652: Type Confusion in V8
  * CVE-2022-3653: Heap buffer overflow in Vulkan
  * CVE-2022-3654: Use after free in Layout
  * CVE-2022-3655: Heap buffer overflow in Media Galleries
  * CVE-2022-3656: Insufficient data validation in File System
  * CVE-2022-3657: Use after free in Extensions
  * CVE-2022-3658: Use after free in Feedback service on Chrome OS
  * CVE-2022-3659: Use after free in Accessibility
  * CVE-2022-3660: Inappropriate implementation in Full screen mode
  * CVE-2022-3661: Insufficient data validation in Extensions
- Added patches:
  * chromium-107-compiler.patch
  * chromium-107-system-zlib.patch
- Removed patches:
  * chromium-105-compiler.patch
  * chromium-105-Bitmap-include.patch
  * chromium-106-AutofillPopupControllerImpl-namespace.patch
- Unbundle libyuv and libavif on TW
- Prepare 15.5
- Use qt on 15.4+ (15.3 too old)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1666958400">- Chromium 107.0.5304.87 (boo#1204819)
  * CVE-2022-3723: Type Confusion in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1667995200">- Chromium 107.0.5304.110 (boo#1205221)
  * CVE-2022-3885: Use after free in V8
  * CVE-2022-3886: Use after free in Speech Recognition
  * CVE-2022-3887: Use after free in Web Workers
  * CVE-2022-3888: Use after free in WebCodecs
  * CVE-2022-3889: Type Confusion in V8
  * CVE-2022-3890: Heap buffer overflow in Crashpad</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1668686400">- Build with llvm15 on openSUSE:Backports:SLE-15-SP5 and up</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1669291200">- Chromium 107.0.5304.121 (boo#1205736)
  * CVE-2022-4135: Heap buffer overflow in GPU</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1669809600">- Chromium 108.0.5359.71 (boo#1205871):
  * CVE-2022-4174: Type Confusion in V8
  * CVE-2022-4175: Use after free in Camera Capture
  * CVE-2022-4176: Out of bounds write in Lacros Graphics
  * CVE-2022-4177: Use after free in Extensions
  * CVE-2022-4178: Use after free in Mojo
  * CVE-2022-4179: Use after free in Audio
  * CVE-2022-4180: Use after free in Mojo
  * CVE-2022-4181: Use after free in Forms
  * CVE-2022-4182: Inappropriate implementation in Fenced Frames
  * CVE-2022-4183: Insufficient policy enforcement in Popup Blocker
  * CVE-2022-4184: Insufficient policy enforcement in Autofill
  * CVE-2022-4185: Inappropriate implementation in Navigation
  * CVE-2022-4186: Insufficient validation of untrusted input in Downloads
  * CVE-2022-4187: Insufficient policy enforcement in DevTools
  * CVE-2022-4188: Insufficient validation of untrusted input in CORS
  * CVE-2022-4189: Insufficient policy enforcement in DevTools
  * CVE-2022-4190: Insufficient data validation in Directory
  * CVE-2022-4191: Use after free in Sign-In
  * CVE-2022-4192: Use after free in Live Caption
  * CVE-2022-4193: Insufficient policy enforcement in File System API
  * CVE-2022-4194: Use after free in Accessibility
  * CVE-2022-4195: Insufficient policy enforcement in Safe Browsing
- drop chromium-105-wayland-1.20.patch, upstream
- drop chromium-107-compiler.patch
- add chromium-108-compiler.patch
- drop chromium-98-EnumTable-crash.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1670068800">- Chromium 108.0.5359.94:
  * CVE-2022-4262: Type Confusion in V8 (boo#1205999)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1670414400">- Chromium 108.0.5359.98
  * Fix regression in computing &lt;select&gt; visibility</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1671019200">- Chromium 108.0.5359.124 (boo#1206403):
  * CVE-2022-4436: Use after free in Blink Media
  * CVE-2022-4437: Use after free in Mojo IPC
  * CVE-2022-4438: Use after free in Blink Frames
  * CVE-2022-4439: Use after free in Aura
  * CVE-2022-4440: Use after free in Profiles</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1671364800">- Add chromium-disable-GlobalMediaControlsCastStartStop.patch:
  disable GlobalMediaControlsCastStartStop to fix crashes
  occurring when interacting with the Media UI (bsc#1198124)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1673352000">- Chromium 109.0.5414.74:
  * Add support for MathML Core
  * CSS: Auto range support for font descriptors inside @font-face
    rule
  * CSS: Add lh length unit
  * CSS: Add hyphenate-limit-chars property
  * CSS: Snap border, outline and column-rule widths before layout
  * API: Improved screen sharing and web conferencing: hints for
    suppressing local audio playback, and Conditional Focus
  * API: HTTP response status code in the Resource Timing API
  * API: Same-site cross-origin prerendering triggered by the
    speculation rules API
  * Remove Event.path API
  * CVE-2023-0128: Use after free in Overview Mode
  * CVE-2023-0129: Heap buffer overflow in Network Service
  * CVE-2023-0130: Inappropriate implementation in Fullscreen API
  * CVE-2023-0131: Inappropriate implementation in iframe Sandbox
  * CVE-2023-0132: Inappropriate implementation in Permission prompts
  * CVE-2023-0133: Inappropriate implementation in Permission prompts
  * CVE-2023-0134: Use after free in Cart
  * CVE-2023-0135: Use after free in Cart
  * CVE-2023-0136: Inappropriate implementation in Fullscreen API
  * CVE-2023-0137: Heap buffer overflow in Platform Apps
  * CVE-2023-0138: Heap buffer overflow in libphonenumber
  * CVE-2023-0139: Insufficient validation of untrusted input in Downloads
  * CVE-2023-0140: Inappropriate implementation in File System API
  * CVE-2023-0141: Insufficient policy enforcement in CORS
  * Various fixes from internal audits, fuzzing and other initiatives
- drop patches:
  * chromium-gcc11.patch - not needed
  * chromium-107-system-zlib.patch - upstream
  * chromium-108-compiler.patch
- add patches:
  * chromium-109-compiler.patch
  * chromium-109-clang-lp154.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1673956800">- Added patches:
  * chromium-icu72-1.patch: ensure TextCodecCJK doesn't conflict
    with system icu (bsc#1207147)
  * chromium-icu72-2.patch: align default characters for old icu
    with that of ICU 72
  * chromium-icu72-3.patch: make V8 aware of space in ICU 72 time
    format</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1674648000">- Chromium 109.0.5414.119 (boo#1207512):
  * CVE-2023-0471: Use after free in WebTransport
  * CVE-2023-0472: Use after free in WebRTC
  * CVE-2023-0473: Type Confusion in ServiceWorker API
  * CVE-2023-0474: Use after free in GuestView
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
</package>
<package pkgid="b03e9721b8ceaf1e7e356b56cf7506949657a6425db38bc4b6d7f2dd13293ac4" name="chromium" arch="src">
  <version epoch="0" ver="109.0.5414.119" rel="bp154.2.64.1"/>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1661169600">- Fix quoting in chrome-wrapper, don't put cwd on LD_LIBRARY_PATH</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1662033600">- Update chromium-symbolic.svg: this fixes bsc#1202403.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1662638400">- Chromium 105.0.5195.102 (boo#1203102):
  * CVE-2022-3075: Insufficient data validation in Mojo
- Chromium 105.0.5195.52 (boo#1202964):
  * CVE-2022-3038: Use after free in Network Service
  * CVE-2022-3039: Use after free in WebSQL
  * CVE-2022-3040: Use after free in Layout
  * CVE-2022-3041: Use after free in WebSQL
  * CVE-2022-3042: Use after free in PhoneHub
  * CVE-2022-3043: Heap buffer overflow in Screen Capture
  * CVE-2022-3044: Inappropriate implementation in Site Isolation
  * CVE-2022-3045: Insufficient validation of untrusted input in V8
  * CVE-2022-3046: Use after free in Browser Tag
  * CVE-2022-3071: Use after free in Tab Strip
  * CVE-2022-3047: Insufficient policy enforcement in Extensions API
  * CVE-2022-3048: Inappropriate implementation in Chrome OS lockscreen
  * CVE-2022-3049: Use after free in SplitScreen
  * CVE-2022-3050: Heap buffer overflow in WebUI
  * CVE-2022-3051: Heap buffer overflow in Exosphere
  * CVE-2022-3052: Heap buffer overflow in Window Manager
  * CVE-2022-3053: Inappropriate implementation in Pointer Lock
  * CVE-2022-3054: Insufficient policy enforcement in DevTools
  * CVE-2022-3055: Use after free in Passwords
  * CVE-2022-3056: Insufficient policy enforcement in Content Security Policy
  * CVE-2022-3057: Inappropriate implementation in iframe Sandbox
  * CVE-2022-3058: Use after free in Sign-In Flow
- Added patches:
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Bitmap-include.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-wayland-1.20.patch
  * chromium-105-compiler.patch
- Removed patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-78-protobuf-RepeatedPtrField-export.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663156800">- Chromium 105.0.5195.127 (boo#1203419):
  * CVE-2022-3195: Out of bounds write in Storage
  * CVE-2022-3196: Use after free in PDF
  * CVE-2022-3197: Use after free in PDF
  * CVE-2022-3198: Use after free in PDF
  * CVE-2022-3199: Use after free in Frames
  * CVE-2022-3200: Heap buffer overflow in Internals
  * CVE-2022-3201: Insufficient validation of untrusted input in DevTools
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1664625600">- Chromium 106.0.5249.91 (boo#1203808):
  * CVE-2022-3370: Use after free in Custom Elements
  * CVE-2022-3373: Out of bounds write in V8
- includes changes from 106.0.5249.61:
  * CVE-2022-3304: Use after free in CSS
  * CVE-2022-3201: Insufficient validation of untrusted input in Developer Tools
  * CVE-2022-3305: Use after free in Survey
  * CVE-2022-3306: Use after free in Survey
  * CVE-2022-3307: Use after free in Media
  * CVE-2022-3308: Insufficient policy enforcement in Developer Tools
  * CVE-2022-3309: Use after free in Assistant
  * CVE-2022-3310: Insufficient policy enforcement in Custom Tabs
  * CVE-2022-3311: Use after free in Import
  * CVE-2022-3312: Insufficient validation of untrusted input in VPN
  * CVE-2022-3313: Incorrect security UI in Full Screen
  * CVE-2022-3314: Use after free in Logging
  * CVE-2022-3315: Type confusion in Blink
  * CVE-2022-3316: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-3317: Insufficient validation of untrusted input in Intents
  * CVE-2022-3318: Use after free in ChromeOS Notifications
- drop patches:
  * chromium-104-tflite-system-zlib.patch
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
- add patches
  * chromium-106-ffmpeg-duration.patch
  * chromium-106-AutofillPopupControllerImpl-namespace.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1665057600">- Chromium 106.0.5249.103:
  * fix possible cache manager deadlock
  * Fix right-click menu appearing unexpectedly affecting screen
    readers</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1665576000">- Chromium 106.0.5249.119 (boo#1204223)
  * CVE-2022-3445: Use after free in Skia
  * CVE-2022-3446: Heap buffer overflow in WebSQL
  * CVE-2022-3447: Inappropriate implementation in Custom Tabs
  * CVE-2022-3448: Use after free in Permissions API
  * CVE-2022-3449: Use after free in Safe Browsing
  * CVE-2022-3450: Use after free in Peer Connection</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1666872000">- Chromium 107.0.5304.68 (boo#1204732)
  * CVE-2022-3652: Type Confusion in V8
  * CVE-2022-3653: Heap buffer overflow in Vulkan
  * CVE-2022-3654: Use after free in Layout
  * CVE-2022-3655: Heap buffer overflow in Media Galleries
  * CVE-2022-3656: Insufficient data validation in File System
  * CVE-2022-3657: Use after free in Extensions
  * CVE-2022-3658: Use after free in Feedback service on Chrome OS
  * CVE-2022-3659: Use after free in Accessibility
  * CVE-2022-3660: Inappropriate implementation in Full screen mode
  * CVE-2022-3661: Insufficient data validation in Extensions
- Added patches:
  * chromium-107-compiler.patch
  * chromium-107-system-zlib.patch
- Removed patches:
  * chromium-105-compiler.patch
  * chromium-105-Bitmap-include.patch
  * chromium-106-AutofillPopupControllerImpl-namespace.patch
- Unbundle libyuv and libavif on TW
- Prepare 15.5
- Use qt on 15.4+ (15.3 too old)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1666958400">- Chromium 107.0.5304.87 (boo#1204819)
  * CVE-2022-3723: Type Confusion in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1667995200">- Chromium 107.0.5304.110 (boo#1205221)
  * CVE-2022-3885: Use after free in V8
  * CVE-2022-3886: Use after free in Speech Recognition
  * CVE-2022-3887: Use after free in Web Workers
  * CVE-2022-3888: Use after free in WebCodecs
  * CVE-2022-3889: Type Confusion in V8
  * CVE-2022-3890: Heap buffer overflow in Crashpad</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1668686400">- Build with llvm15 on openSUSE:Backports:SLE-15-SP5 and up</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1669291200">- Chromium 107.0.5304.121 (boo#1205736)
  * CVE-2022-4135: Heap buffer overflow in GPU</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1669809600">- Chromium 108.0.5359.71 (boo#1205871):
  * CVE-2022-4174: Type Confusion in V8
  * CVE-2022-4175: Use after free in Camera Capture
  * CVE-2022-4176: Out of bounds write in Lacros Graphics
  * CVE-2022-4177: Use after free in Extensions
  * CVE-2022-4178: Use after free in Mojo
  * CVE-2022-4179: Use after free in Audio
  * CVE-2022-4180: Use after free in Mojo
  * CVE-2022-4181: Use after free in Forms
  * CVE-2022-4182: Inappropriate implementation in Fenced Frames
  * CVE-2022-4183: Insufficient policy enforcement in Popup Blocker
  * CVE-2022-4184: Insufficient policy enforcement in Autofill
  * CVE-2022-4185: Inappropriate implementation in Navigation
  * CVE-2022-4186: Insufficient validation of untrusted input in Downloads
  * CVE-2022-4187: Insufficient policy enforcement in DevTools
  * CVE-2022-4188: Insufficient validation of untrusted input in CORS
  * CVE-2022-4189: Insufficient policy enforcement in DevTools
  * CVE-2022-4190: Insufficient data validation in Directory
  * CVE-2022-4191: Use after free in Sign-In
  * CVE-2022-4192: Use after free in Live Caption
  * CVE-2022-4193: Insufficient policy enforcement in File System API
  * CVE-2022-4194: Use after free in Accessibility
  * CVE-2022-4195: Insufficient policy enforcement in Safe Browsing
- drop chromium-105-wayland-1.20.patch, upstream
- drop chromium-107-compiler.patch
- add chromium-108-compiler.patch
- drop chromium-98-EnumTable-crash.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1670068800">- Chromium 108.0.5359.94:
  * CVE-2022-4262: Type Confusion in V8 (boo#1205999)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1670414400">- Chromium 108.0.5359.98
  * Fix regression in computing &lt;select&gt; visibility</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1671019200">- Chromium 108.0.5359.124 (boo#1206403):
  * CVE-2022-4436: Use after free in Blink Media
  * CVE-2022-4437: Use after free in Mojo IPC
  * CVE-2022-4438: Use after free in Blink Frames
  * CVE-2022-4439: Use after free in Aura
  * CVE-2022-4440: Use after free in Profiles</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1671364800">- Add chromium-disable-GlobalMediaControlsCastStartStop.patch:
  disable GlobalMediaControlsCastStartStop to fix crashes
  occurring when interacting with the Media UI (bsc#1198124)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1673352000">- Chromium 109.0.5414.74:
  * Add support for MathML Core
  * CSS: Auto range support for font descriptors inside @font-face
    rule
  * CSS: Add lh length unit
  * CSS: Add hyphenate-limit-chars property
  * CSS: Snap border, outline and column-rule widths before layout
  * API: Improved screen sharing and web conferencing: hints for
    suppressing local audio playback, and Conditional Focus
  * API: HTTP response status code in the Resource Timing API
  * API: Same-site cross-origin prerendering triggered by the
    speculation rules API
  * Remove Event.path API
  * CVE-2023-0128: Use after free in Overview Mode
  * CVE-2023-0129: Heap buffer overflow in Network Service
  * CVE-2023-0130: Inappropriate implementation in Fullscreen API
  * CVE-2023-0131: Inappropriate implementation in iframe Sandbox
  * CVE-2023-0132: Inappropriate implementation in Permission prompts
  * CVE-2023-0133: Inappropriate implementation in Permission prompts
  * CVE-2023-0134: Use after free in Cart
  * CVE-2023-0135: Use after free in Cart
  * CVE-2023-0136: Inappropriate implementation in Fullscreen API
  * CVE-2023-0137: Heap buffer overflow in Platform Apps
  * CVE-2023-0138: Heap buffer overflow in libphonenumber
  * CVE-2023-0139: Insufficient validation of untrusted input in Downloads
  * CVE-2023-0140: Inappropriate implementation in File System API
  * CVE-2023-0141: Insufficient policy enforcement in CORS
  * Various fixes from internal audits, fuzzing and other initiatives
- drop patches:
  * chromium-gcc11.patch - not needed
  * chromium-107-system-zlib.patch - upstream
  * chromium-108-compiler.patch
- add patches:
  * chromium-109-compiler.patch
  * chromium-109-clang-lp154.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1673956800">- Added patches:
  * chromium-icu72-1.patch: ensure TextCodecCJK doesn't conflict
    with system icu (bsc#1207147)
  * chromium-icu72-2.patch: align default characters for old icu
    with that of ICU 72
  * chromium-icu72-3.patch: make V8 aware of space in ICU 72 time
    format</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1674648000">- Chromium 109.0.5414.119 (boo#1207512):
  * CVE-2023-0471: Use after free in WebTransport
  * CVE-2023-0472: Use after free in WebRTC
  * CVE-2023-0473: Type Confusion in ServiceWorker API
  * CVE-2023-0474: Use after free in GuestView
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
</package>
<package pkgid="5c219cf9a892dc3352f2c4cb7bb251cf39336d886e4fbbe22d552abb3a2febc0" name="chromium" arch="x86_64">
  <version epoch="0" ver="109.0.5414.119" rel="bp154.2.64.1"/>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1661169600">- Fix quoting in chrome-wrapper, don't put cwd on LD_LIBRARY_PATH</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1662033600">- Update chromium-symbolic.svg: this fixes bsc#1202403.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1662638400">- Chromium 105.0.5195.102 (boo#1203102):
  * CVE-2022-3075: Insufficient data validation in Mojo
- Chromium 105.0.5195.52 (boo#1202964):
  * CVE-2022-3038: Use after free in Network Service
  * CVE-2022-3039: Use after free in WebSQL
  * CVE-2022-3040: Use after free in Layout
  * CVE-2022-3041: Use after free in WebSQL
  * CVE-2022-3042: Use after free in PhoneHub
  * CVE-2022-3043: Heap buffer overflow in Screen Capture
  * CVE-2022-3044: Inappropriate implementation in Site Isolation
  * CVE-2022-3045: Insufficient validation of untrusted input in V8
  * CVE-2022-3046: Use after free in Browser Tag
  * CVE-2022-3071: Use after free in Tab Strip
  * CVE-2022-3047: Insufficient policy enforcement in Extensions API
  * CVE-2022-3048: Inappropriate implementation in Chrome OS lockscreen
  * CVE-2022-3049: Use after free in SplitScreen
  * CVE-2022-3050: Heap buffer overflow in WebUI
  * CVE-2022-3051: Heap buffer overflow in Exosphere
  * CVE-2022-3052: Heap buffer overflow in Window Manager
  * CVE-2022-3053: Inappropriate implementation in Pointer Lock
  * CVE-2022-3054: Insufficient policy enforcement in DevTools
  * CVE-2022-3055: Use after free in Passwords
  * CVE-2022-3056: Insufficient policy enforcement in Content Security Policy
  * CVE-2022-3057: Inappropriate implementation in iframe Sandbox
  * CVE-2022-3058: Use after free in Sign-In Flow
- Added patches:
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Bitmap-include.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-wayland-1.20.patch
  * chromium-105-compiler.patch
- Removed patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-78-protobuf-RepeatedPtrField-export.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663156800">- Chromium 105.0.5195.127 (boo#1203419):
  * CVE-2022-3195: Out of bounds write in Storage
  * CVE-2022-3196: Use after free in PDF
  * CVE-2022-3197: Use after free in PDF
  * CVE-2022-3198: Use after free in PDF
  * CVE-2022-3199: Use after free in Frames
  * CVE-2022-3200: Heap buffer overflow in Internals
  * CVE-2022-3201: Insufficient validation of untrusted input in DevTools
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1664625600">- Chromium 106.0.5249.91 (boo#1203808):
  * CVE-2022-3370: Use after free in Custom Elements
  * CVE-2022-3373: Out of bounds write in V8
- includes changes from 106.0.5249.61:
  * CVE-2022-3304: Use after free in CSS
  * CVE-2022-3201: Insufficient validation of untrusted input in Developer Tools
  * CVE-2022-3305: Use after free in Survey
  * CVE-2022-3306: Use after free in Survey
  * CVE-2022-3307: Use after free in Media
  * CVE-2022-3308: Insufficient policy enforcement in Developer Tools
  * CVE-2022-3309: Use after free in Assistant
  * CVE-2022-3310: Insufficient policy enforcement in Custom Tabs
  * CVE-2022-3311: Use after free in Import
  * CVE-2022-3312: Insufficient validation of untrusted input in VPN
  * CVE-2022-3313: Incorrect security UI in Full Screen
  * CVE-2022-3314: Use after free in Logging
  * CVE-2022-3315: Type confusion in Blink
  * CVE-2022-3316: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-3317: Insufficient validation of untrusted input in Intents
  * CVE-2022-3318: Use after free in ChromeOS Notifications
- drop patches:
  * chromium-104-tflite-system-zlib.patch
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
- add patches
  * chromium-106-ffmpeg-duration.patch
  * chromium-106-AutofillPopupControllerImpl-namespace.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1665057600">- Chromium 106.0.5249.103:
  * fix possible cache manager deadlock
  * Fix right-click menu appearing unexpectedly affecting screen
    readers</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1665576000">- Chromium 106.0.5249.119 (boo#1204223)
  * CVE-2022-3445: Use after free in Skia
  * CVE-2022-3446: Heap buffer overflow in WebSQL
  * CVE-2022-3447: Inappropriate implementation in Custom Tabs
  * CVE-2022-3448: Use after free in Permissions API
  * CVE-2022-3449: Use after free in Safe Browsing
  * CVE-2022-3450: Use after free in Peer Connection</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1666872000">- Chromium 107.0.5304.68 (boo#1204732)
  * CVE-2022-3652: Type Confusion in V8
  * CVE-2022-3653: Heap buffer overflow in Vulkan
  * CVE-2022-3654: Use after free in Layout
  * CVE-2022-3655: Heap buffer overflow in Media Galleries
  * CVE-2022-3656: Insufficient data validation in File System
  * CVE-2022-3657: Use after free in Extensions
  * CVE-2022-3658: Use after free in Feedback service on Chrome OS
  * CVE-2022-3659: Use after free in Accessibility
  * CVE-2022-3660: Inappropriate implementation in Full screen mode
  * CVE-2022-3661: Insufficient data validation in Extensions
- Added patches:
  * chromium-107-compiler.patch
  * chromium-107-system-zlib.patch
- Removed patches:
  * chromium-105-compiler.patch
  * chromium-105-Bitmap-include.patch
  * chromium-106-AutofillPopupControllerImpl-namespace.patch
- Unbundle libyuv and libavif on TW
- Prepare 15.5
- Use qt on 15.4+ (15.3 too old)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1666958400">- Chromium 107.0.5304.87 (boo#1204819)
  * CVE-2022-3723: Type Confusion in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1667995200">- Chromium 107.0.5304.110 (boo#1205221)
  * CVE-2022-3885: Use after free in V8
  * CVE-2022-3886: Use after free in Speech Recognition
  * CVE-2022-3887: Use after free in Web Workers
  * CVE-2022-3888: Use after free in WebCodecs
  * CVE-2022-3889: Type Confusion in V8
  * CVE-2022-3890: Heap buffer overflow in Crashpad</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1668686400">- Build with llvm15 on openSUSE:Backports:SLE-15-SP5 and up</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1669291200">- Chromium 107.0.5304.121 (boo#1205736)
  * CVE-2022-4135: Heap buffer overflow in GPU</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1669809600">- Chromium 108.0.5359.71 (boo#1205871):
  * CVE-2022-4174: Type Confusion in V8
  * CVE-2022-4175: Use after free in Camera Capture
  * CVE-2022-4176: Out of bounds write in Lacros Graphics
  * CVE-2022-4177: Use after free in Extensions
  * CVE-2022-4178: Use after free in Mojo
  * CVE-2022-4179: Use after free in Audio
  * CVE-2022-4180: Use after free in Mojo
  * CVE-2022-4181: Use after free in Forms
  * CVE-2022-4182: Inappropriate implementation in Fenced Frames
  * CVE-2022-4183: Insufficient policy enforcement in Popup Blocker
  * CVE-2022-4184: Insufficient policy enforcement in Autofill
  * CVE-2022-4185: Inappropriate implementation in Navigation
  * CVE-2022-4186: Insufficient validation of untrusted input in Downloads
  * CVE-2022-4187: Insufficient policy enforcement in DevTools
  * CVE-2022-4188: Insufficient validation of untrusted input in CORS
  * CVE-2022-4189: Insufficient policy enforcement in DevTools
  * CVE-2022-4190: Insufficient data validation in Directory
  * CVE-2022-4191: Use after free in Sign-In
  * CVE-2022-4192: Use after free in Live Caption
  * CVE-2022-4193: Insufficient policy enforcement in File System API
  * CVE-2022-4194: Use after free in Accessibility
  * CVE-2022-4195: Insufficient policy enforcement in Safe Browsing
- drop chromium-105-wayland-1.20.patch, upstream
- drop chromium-107-compiler.patch
- add chromium-108-compiler.patch
- drop chromium-98-EnumTable-crash.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1670068800">- Chromium 108.0.5359.94:
  * CVE-2022-4262: Type Confusion in V8 (boo#1205999)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1670414400">- Chromium 108.0.5359.98
  * Fix regression in computing &lt;select&gt; visibility</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1671019200">- Chromium 108.0.5359.124 (boo#1206403):
  * CVE-2022-4436: Use after free in Blink Media
  * CVE-2022-4437: Use after free in Mojo IPC
  * CVE-2022-4438: Use after free in Blink Frames
  * CVE-2022-4439: Use after free in Aura
  * CVE-2022-4440: Use after free in Profiles</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1671364800">- Add chromium-disable-GlobalMediaControlsCastStartStop.patch:
  disable GlobalMediaControlsCastStartStop to fix crashes
  occurring when interacting with the Media UI (bsc#1198124)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1673352000">- Chromium 109.0.5414.74:
  * Add support for MathML Core
  * CSS: Auto range support for font descriptors inside @font-face
    rule
  * CSS: Add lh length unit
  * CSS: Add hyphenate-limit-chars property
  * CSS: Snap border, outline and column-rule widths before layout
  * API: Improved screen sharing and web conferencing: hints for
    suppressing local audio playback, and Conditional Focus
  * API: HTTP response status code in the Resource Timing API
  * API: Same-site cross-origin prerendering triggered by the
    speculation rules API
  * Remove Event.path API
  * CVE-2023-0128: Use after free in Overview Mode
  * CVE-2023-0129: Heap buffer overflow in Network Service
  * CVE-2023-0130: Inappropriate implementation in Fullscreen API
  * CVE-2023-0131: Inappropriate implementation in iframe Sandbox
  * CVE-2023-0132: Inappropriate implementation in Permission prompts
  * CVE-2023-0133: Inappropriate implementation in Permission prompts
  * CVE-2023-0134: Use after free in Cart
  * CVE-2023-0135: Use after free in Cart
  * CVE-2023-0136: Inappropriate implementation in Fullscreen API
  * CVE-2023-0137: Heap buffer overflow in Platform Apps
  * CVE-2023-0138: Heap buffer overflow in libphonenumber
  * CVE-2023-0139: Insufficient validation of untrusted input in Downloads
  * CVE-2023-0140: Inappropriate implementation in File System API
  * CVE-2023-0141: Insufficient policy enforcement in CORS
  * Various fixes from internal audits, fuzzing and other initiatives
- drop patches:
  * chromium-gcc11.patch - not needed
  * chromium-107-system-zlib.patch - upstream
  * chromium-108-compiler.patch
- add patches:
  * chromium-109-compiler.patch
  * chromium-109-clang-lp154.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1673956800">- Added patches:
  * chromium-icu72-1.patch: ensure TextCodecCJK doesn't conflict
    with system icu (bsc#1207147)
  * chromium-icu72-2.patch: align default characters for old icu
    with that of ICU 72
  * chromium-icu72-3.patch: make V8 aware of space in ICU 72 time
    format</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1674648000">- Chromium 109.0.5414.119 (boo#1207512):
  * CVE-2023-0471: Use after free in WebTransport
  * CVE-2023-0472: Use after free in WebRTC
  * CVE-2023-0473: Type Confusion in ServiceWorker API
  * CVE-2023-0474: Use after free in GuestView
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
</package>
<package pkgid="ab7f42c89c450cbb554581e4825ba220b07ca1c2b0d20195c92dcde7eebbb2cf" name="chromium" arch="aarch64">
  <version epoch="0" ver="109.0.5414.74" rel="bp154.2.58.1"/>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660651200">- Re-enable our version of chrome-wrapper
- Set no sandbox if root is being used (https://crbug.com/638180)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660824000">- Chromium 104.0.5112.101 (boo#1202509):
  * CVE-2022-2852: Use after free in FedCM
  * CVE-2022-2854: Use after free in SwiftShader
  * CVE-2022-2855: Use after free in ANGLE
  * CVE-2022-2857: Use after free in Blink
  * CVE-2022-2858: Use after free in Sign-In Flow
  * CVE-2022-2853: Heap buffer overflow in Downloads
  * CVE-2022-2856: Insufficient validation of untrusted input in Intents
  * CVE-2022-2859: Use after free in Chrome OS Shell
  * CVE-2022-2860: Insufficient policy enforcement in Cookies
  * CVE-2022-2861: Inappropriate implementation in Extensions API</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1661169600">- Fix quoting in chrome-wrapper, don't put cwd on LD_LIBRARY_PATH</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1662033600">- Update chromium-symbolic.svg: this fixes bsc#1202403.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1662638400">- Chromium 105.0.5195.102 (boo#1203102):
  * CVE-2022-3075: Insufficient data validation in Mojo
- Chromium 105.0.5195.52 (boo#1202964):
  * CVE-2022-3038: Use after free in Network Service
  * CVE-2022-3039: Use after free in WebSQL
  * CVE-2022-3040: Use after free in Layout
  * CVE-2022-3041: Use after free in WebSQL
  * CVE-2022-3042: Use after free in PhoneHub
  * CVE-2022-3043: Heap buffer overflow in Screen Capture
  * CVE-2022-3044: Inappropriate implementation in Site Isolation
  * CVE-2022-3045: Insufficient validation of untrusted input in V8
  * CVE-2022-3046: Use after free in Browser Tag
  * CVE-2022-3071: Use after free in Tab Strip
  * CVE-2022-3047: Insufficient policy enforcement in Extensions API
  * CVE-2022-3048: Inappropriate implementation in Chrome OS lockscreen
  * CVE-2022-3049: Use after free in SplitScreen
  * CVE-2022-3050: Heap buffer overflow in WebUI
  * CVE-2022-3051: Heap buffer overflow in Exosphere
  * CVE-2022-3052: Heap buffer overflow in Window Manager
  * CVE-2022-3053: Inappropriate implementation in Pointer Lock
  * CVE-2022-3054: Insufficient policy enforcement in DevTools
  * CVE-2022-3055: Use after free in Passwords
  * CVE-2022-3056: Insufficient policy enforcement in Content Security Policy
  * CVE-2022-3057: Inappropriate implementation in iframe Sandbox
  * CVE-2022-3058: Use after free in Sign-In Flow
- Added patches:
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Bitmap-include.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-wayland-1.20.patch
  * chromium-105-compiler.patch
- Removed patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-78-protobuf-RepeatedPtrField-export.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663156800">- Chromium 105.0.5195.127 (boo#1203419):
  * CVE-2022-3195: Out of bounds write in Storage
  * CVE-2022-3196: Use after free in PDF
  * CVE-2022-3197: Use after free in PDF
  * CVE-2022-3198: Use after free in PDF
  * CVE-2022-3199: Use after free in Frames
  * CVE-2022-3200: Heap buffer overflow in Internals
  * CVE-2022-3201: Insufficient validation of untrusted input in DevTools
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1664625600">- Chromium 106.0.5249.91 (boo#1203808):
  * CVE-2022-3370: Use after free in Custom Elements
  * CVE-2022-3373: Out of bounds write in V8
- includes changes from 106.0.5249.61:
  * CVE-2022-3304: Use after free in CSS
  * CVE-2022-3201: Insufficient validation of untrusted input in Developer Tools
  * CVE-2022-3305: Use after free in Survey
  * CVE-2022-3306: Use after free in Survey
  * CVE-2022-3307: Use after free in Media
  * CVE-2022-3308: Insufficient policy enforcement in Developer Tools
  * CVE-2022-3309: Use after free in Assistant
  * CVE-2022-3310: Insufficient policy enforcement in Custom Tabs
  * CVE-2022-3311: Use after free in Import
  * CVE-2022-3312: Insufficient validation of untrusted input in VPN
  * CVE-2022-3313: Incorrect security UI in Full Screen
  * CVE-2022-3314: Use after free in Logging
  * CVE-2022-3315: Type confusion in Blink
  * CVE-2022-3316: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-3317: Insufficient validation of untrusted input in Intents
  * CVE-2022-3318: Use after free in ChromeOS Notifications
- drop patches:
  * chromium-104-tflite-system-zlib.patch
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
- add patches
  * chromium-106-ffmpeg-duration.patch
  * chromium-106-AutofillPopupControllerImpl-namespace.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1665057600">- Chromium 106.0.5249.103:
  * fix possible cache manager deadlock
  * Fix right-click menu appearing unexpectedly affecting screen
    readers</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1665576000">- Chromium 106.0.5249.119 (boo#1204223)
  * CVE-2022-3445: Use after free in Skia
  * CVE-2022-3446: Heap buffer overflow in WebSQL
  * CVE-2022-3447: Inappropriate implementation in Custom Tabs
  * CVE-2022-3448: Use after free in Permissions API
  * CVE-2022-3449: Use after free in Safe Browsing
  * CVE-2022-3450: Use after free in Peer Connection</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1666872000">- Chromium 107.0.5304.68 (boo#1204732)
  * CVE-2022-3652: Type Confusion in V8
  * CVE-2022-3653: Heap buffer overflow in Vulkan
  * CVE-2022-3654: Use after free in Layout
  * CVE-2022-3655: Heap buffer overflow in Media Galleries
  * CVE-2022-3656: Insufficient data validation in File System
  * CVE-2022-3657: Use after free in Extensions
  * CVE-2022-3658: Use after free in Feedback service on Chrome OS
  * CVE-2022-3659: Use after free in Accessibility
  * CVE-2022-3660: Inappropriate implementation in Full screen mode
  * CVE-2022-3661: Insufficient data validation in Extensions
- Added patches:
  * chromium-107-compiler.patch
  * chromium-107-system-zlib.patch
- Removed patches:
  * chromium-105-compiler.patch
  * chromium-105-Bitmap-include.patch
  * chromium-106-AutofillPopupControllerImpl-namespace.patch
- Unbundle libyuv and libavif on TW
- Prepare 15.5
- Use qt on 15.4+ (15.3 too old)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1666958400">- Chromium 107.0.5304.87 (boo#1204819)
  * CVE-2022-3723: Type Confusion in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1667995200">- Chromium 107.0.5304.110 (boo#1205221)
  * CVE-2022-3885: Use after free in V8
  * CVE-2022-3886: Use after free in Speech Recognition
  * CVE-2022-3887: Use after free in Web Workers
  * CVE-2022-3888: Use after free in WebCodecs
  * CVE-2022-3889: Type Confusion in V8
  * CVE-2022-3890: Heap buffer overflow in Crashpad</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1668686400">- Build with llvm15 on openSUSE:Backports:SLE-15-SP5 and up</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1669291200">- Chromium 107.0.5304.121 (boo#1205736)
  * CVE-2022-4135: Heap buffer overflow in GPU</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1669809600">- Chromium 108.0.5359.71 (boo#1205871):
  * CVE-2022-4174: Type Confusion in V8
  * CVE-2022-4175: Use after free in Camera Capture
  * CVE-2022-4176: Out of bounds write in Lacros Graphics
  * CVE-2022-4177: Use after free in Extensions
  * CVE-2022-4178: Use after free in Mojo
  * CVE-2022-4179: Use after free in Audio
  * CVE-2022-4180: Use after free in Mojo
  * CVE-2022-4181: Use after free in Forms
  * CVE-2022-4182: Inappropriate implementation in Fenced Frames
  * CVE-2022-4183: Insufficient policy enforcement in Popup Blocker
  * CVE-2022-4184: Insufficient policy enforcement in Autofill
  * CVE-2022-4185: Inappropriate implementation in Navigation
  * CVE-2022-4186: Insufficient validation of untrusted input in Downloads
  * CVE-2022-4187: Insufficient policy enforcement in DevTools
  * CVE-2022-4188: Insufficient validation of untrusted input in CORS
  * CVE-2022-4189: Insufficient policy enforcement in DevTools
  * CVE-2022-4190: Insufficient data validation in Directory
  * CVE-2022-4191: Use after free in Sign-In
  * CVE-2022-4192: Use after free in Live Caption
  * CVE-2022-4193: Insufficient policy enforcement in File System API
  * CVE-2022-4194: Use after free in Accessibility
  * CVE-2022-4195: Insufficient policy enforcement in Safe Browsing
- drop chromium-105-wayland-1.20.patch, upstream
- drop chromium-107-compiler.patch
- add chromium-108-compiler.patch
- drop chromium-98-EnumTable-crash.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1670068800">- Chromium 108.0.5359.94:
  * CVE-2022-4262: Type Confusion in V8 (boo#1205999)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1670414400">- Chromium 108.0.5359.98
  * Fix regression in computing &lt;select&gt; visibility</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1671019200">- Chromium 108.0.5359.124 (boo#1206403):
  * CVE-2022-4436: Use after free in Blink Media
  * CVE-2022-4437: Use after free in Mojo IPC
  * CVE-2022-4438: Use after free in Blink Frames
  * CVE-2022-4439: Use after free in Aura
  * CVE-2022-4440: Use after free in Profiles</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1671364800">- Add chromium-disable-GlobalMediaControlsCastStartStop.patch:
  disable GlobalMediaControlsCastStartStop to fix crashes
  occurring when interacting with the Media UI (bsc#1198124)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1673352000">- Chromium 109.0.5414.74:
  * Add support for MathML Core
  * CSS: Auto range support for font descriptors inside @font-face
    rule
  * CSS: Add lh length unit
  * CSS: Add hyphenate-limit-chars property
  * CSS: Snap border, outline and column-rule widths before layout
  * API: Improved screen sharing and web conferencing: hints for
    suppressing local audio playback, and Conditional Focus
  * API: HTTP response status code in the Resource Timing API
  * API: Same-site cross-origin prerendering triggered by the
    speculation rules API
  * Remove Event.path API
  * CVE-2023-0128: Use after free in Overview Mode
  * CVE-2023-0129: Heap buffer overflow in Network Service
  * CVE-2023-0130: Inappropriate implementation in Fullscreen API
  * CVE-2023-0131: Inappropriate implementation in iframe Sandbox
  * CVE-2023-0132: Inappropriate implementation in Permission prompts
  * CVE-2023-0133: Inappropriate implementation in Permission prompts
  * CVE-2023-0134: Use after free in Cart
  * CVE-2023-0135: Use after free in Cart
  * CVE-2023-0136: Inappropriate implementation in Fullscreen API
  * CVE-2023-0137: Heap buffer overflow in Platform Apps
  * CVE-2023-0138: Heap buffer overflow in libphonenumber
  * CVE-2023-0139: Insufficient validation of untrusted input in Downloads
  * CVE-2023-0140: Inappropriate implementation in File System API
  * CVE-2023-0141: Insufficient policy enforcement in CORS
  * Various fixes from internal audits, fuzzing and other initiatives
- drop patches:
  * chromium-gcc11.patch - not needed
  * chromium-107-system-zlib.patch - upstream
  * chromium-108-compiler.patch
- add patches:
  * chromium-109-compiler.patch
  * chromium-109-clang-lp154.patch</changelog>
</package>
<package pkgid="6b482df30627c6f241a2ce8ec66c4d7afc381d5835c28d1268556d240b613190" name="chromium" arch="src">
  <version epoch="0" ver="109.0.5414.74" rel="bp154.2.58.1"/>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660651200">- Re-enable our version of chrome-wrapper
- Set no sandbox if root is being used (https://crbug.com/638180)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660824000">- Chromium 104.0.5112.101 (boo#1202509):
  * CVE-2022-2852: Use after free in FedCM
  * CVE-2022-2854: Use after free in SwiftShader
  * CVE-2022-2855: Use after free in ANGLE
  * CVE-2022-2857: Use after free in Blink
  * CVE-2022-2858: Use after free in Sign-In Flow
  * CVE-2022-2853: Heap buffer overflow in Downloads
  * CVE-2022-2856: Insufficient validation of untrusted input in Intents
  * CVE-2022-2859: Use after free in Chrome OS Shell
  * CVE-2022-2860: Insufficient policy enforcement in Cookies
  * CVE-2022-2861: Inappropriate implementation in Extensions API</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1661169600">- Fix quoting in chrome-wrapper, don't put cwd on LD_LIBRARY_PATH</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1662033600">- Update chromium-symbolic.svg: this fixes bsc#1202403.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1662638400">- Chromium 105.0.5195.102 (boo#1203102):
  * CVE-2022-3075: Insufficient data validation in Mojo
- Chromium 105.0.5195.52 (boo#1202964):
  * CVE-2022-3038: Use after free in Network Service
  * CVE-2022-3039: Use after free in WebSQL
  * CVE-2022-3040: Use after free in Layout
  * CVE-2022-3041: Use after free in WebSQL
  * CVE-2022-3042: Use after free in PhoneHub
  * CVE-2022-3043: Heap buffer overflow in Screen Capture
  * CVE-2022-3044: Inappropriate implementation in Site Isolation
  * CVE-2022-3045: Insufficient validation of untrusted input in V8
  * CVE-2022-3046: Use after free in Browser Tag
  * CVE-2022-3071: Use after free in Tab Strip
  * CVE-2022-3047: Insufficient policy enforcement in Extensions API
  * CVE-2022-3048: Inappropriate implementation in Chrome OS lockscreen
  * CVE-2022-3049: Use after free in SplitScreen
  * CVE-2022-3050: Heap buffer overflow in WebUI
  * CVE-2022-3051: Heap buffer overflow in Exosphere
  * CVE-2022-3052: Heap buffer overflow in Window Manager
  * CVE-2022-3053: Inappropriate implementation in Pointer Lock
  * CVE-2022-3054: Insufficient policy enforcement in DevTools
  * CVE-2022-3055: Use after free in Passwords
  * CVE-2022-3056: Insufficient policy enforcement in Content Security Policy
  * CVE-2022-3057: Inappropriate implementation in iframe Sandbox
  * CVE-2022-3058: Use after free in Sign-In Flow
- Added patches:
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Bitmap-include.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-wayland-1.20.patch
  * chromium-105-compiler.patch
- Removed patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-78-protobuf-RepeatedPtrField-export.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663156800">- Chromium 105.0.5195.127 (boo#1203419):
  * CVE-2022-3195: Out of bounds write in Storage
  * CVE-2022-3196: Use after free in PDF
  * CVE-2022-3197: Use after free in PDF
  * CVE-2022-3198: Use after free in PDF
  * CVE-2022-3199: Use after free in Frames
  * CVE-2022-3200: Heap buffer overflow in Internals
  * CVE-2022-3201: Insufficient validation of untrusted input in DevTools
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1664625600">- Chromium 106.0.5249.91 (boo#1203808):
  * CVE-2022-3370: Use after free in Custom Elements
  * CVE-2022-3373: Out of bounds write in V8
- includes changes from 106.0.5249.61:
  * CVE-2022-3304: Use after free in CSS
  * CVE-2022-3201: Insufficient validation of untrusted input in Developer Tools
  * CVE-2022-3305: Use after free in Survey
  * CVE-2022-3306: Use after free in Survey
  * CVE-2022-3307: Use after free in Media
  * CVE-2022-3308: Insufficient policy enforcement in Developer Tools
  * CVE-2022-3309: Use after free in Assistant
  * CVE-2022-3310: Insufficient policy enforcement in Custom Tabs
  * CVE-2022-3311: Use after free in Import
  * CVE-2022-3312: Insufficient validation of untrusted input in VPN
  * CVE-2022-3313: Incorrect security UI in Full Screen
  * CVE-2022-3314: Use after free in Logging
  * CVE-2022-3315: Type confusion in Blink
  * CVE-2022-3316: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-3317: Insufficient validation of untrusted input in Intents
  * CVE-2022-3318: Use after free in ChromeOS Notifications
- drop patches:
  * chromium-104-tflite-system-zlib.patch
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
- add patches
  * chromium-106-ffmpeg-duration.patch
  * chromium-106-AutofillPopupControllerImpl-namespace.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1665057600">- Chromium 106.0.5249.103:
  * fix possible cache manager deadlock
  * Fix right-click menu appearing unexpectedly affecting screen
    readers</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1665576000">- Chromium 106.0.5249.119 (boo#1204223)
  * CVE-2022-3445: Use after free in Skia
  * CVE-2022-3446: Heap buffer overflow in WebSQL
  * CVE-2022-3447: Inappropriate implementation in Custom Tabs
  * CVE-2022-3448: Use after free in Permissions API
  * CVE-2022-3449: Use after free in Safe Browsing
  * CVE-2022-3450: Use after free in Peer Connection</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1666872000">- Chromium 107.0.5304.68 (boo#1204732)
  * CVE-2022-3652: Type Confusion in V8
  * CVE-2022-3653: Heap buffer overflow in Vulkan
  * CVE-2022-3654: Use after free in Layout
  * CVE-2022-3655: Heap buffer overflow in Media Galleries
  * CVE-2022-3656: Insufficient data validation in File System
  * CVE-2022-3657: Use after free in Extensions
  * CVE-2022-3658: Use after free in Feedback service on Chrome OS
  * CVE-2022-3659: Use after free in Accessibility
  * CVE-2022-3660: Inappropriate implementation in Full screen mode
  * CVE-2022-3661: Insufficient data validation in Extensions
- Added patches:
  * chromium-107-compiler.patch
  * chromium-107-system-zlib.patch
- Removed patches:
  * chromium-105-compiler.patch
  * chromium-105-Bitmap-include.patch
  * chromium-106-AutofillPopupControllerImpl-namespace.patch
- Unbundle libyuv and libavif on TW
- Prepare 15.5
- Use qt on 15.4+ (15.3 too old)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1666958400">- Chromium 107.0.5304.87 (boo#1204819)
  * CVE-2022-3723: Type Confusion in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1667995200">- Chromium 107.0.5304.110 (boo#1205221)
  * CVE-2022-3885: Use after free in V8
  * CVE-2022-3886: Use after free in Speech Recognition
  * CVE-2022-3887: Use after free in Web Workers
  * CVE-2022-3888: Use after free in WebCodecs
  * CVE-2022-3889: Type Confusion in V8
  * CVE-2022-3890: Heap buffer overflow in Crashpad</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1668686400">- Build with llvm15 on openSUSE:Backports:SLE-15-SP5 and up</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1669291200">- Chromium 107.0.5304.121 (boo#1205736)
  * CVE-2022-4135: Heap buffer overflow in GPU</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1669809600">- Chromium 108.0.5359.71 (boo#1205871):
  * CVE-2022-4174: Type Confusion in V8
  * CVE-2022-4175: Use after free in Camera Capture
  * CVE-2022-4176: Out of bounds write in Lacros Graphics
  * CVE-2022-4177: Use after free in Extensions
  * CVE-2022-4178: Use after free in Mojo
  * CVE-2022-4179: Use after free in Audio
  * CVE-2022-4180: Use after free in Mojo
  * CVE-2022-4181: Use after free in Forms
  * CVE-2022-4182: Inappropriate implementation in Fenced Frames
  * CVE-2022-4183: Insufficient policy enforcement in Popup Blocker
  * CVE-2022-4184: Insufficient policy enforcement in Autofill
  * CVE-2022-4185: Inappropriate implementation in Navigation
  * CVE-2022-4186: Insufficient validation of untrusted input in Downloads
  * CVE-2022-4187: Insufficient policy enforcement in DevTools
  * CVE-2022-4188: Insufficient validation of untrusted input in CORS
  * CVE-2022-4189: Insufficient policy enforcement in DevTools
  * CVE-2022-4190: Insufficient data validation in Directory
  * CVE-2022-4191: Use after free in Sign-In
  * CVE-2022-4192: Use after free in Live Caption
  * CVE-2022-4193: Insufficient policy enforcement in File System API
  * CVE-2022-4194: Use after free in Accessibility
  * CVE-2022-4195: Insufficient policy enforcement in Safe Browsing
- drop chromium-105-wayland-1.20.patch, upstream
- drop chromium-107-compiler.patch
- add chromium-108-compiler.patch
- drop chromium-98-EnumTable-crash.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1670068800">- Chromium 108.0.5359.94:
  * CVE-2022-4262: Type Confusion in V8 (boo#1205999)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1670414400">- Chromium 108.0.5359.98
  * Fix regression in computing &lt;select&gt; visibility</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1671019200">- Chromium 108.0.5359.124 (boo#1206403):
  * CVE-2022-4436: Use after free in Blink Media
  * CVE-2022-4437: Use after free in Mojo IPC
  * CVE-2022-4438: Use after free in Blink Frames
  * CVE-2022-4439: Use after free in Aura
  * CVE-2022-4440: Use after free in Profiles</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1671364800">- Add chromium-disable-GlobalMediaControlsCastStartStop.patch:
  disable GlobalMediaControlsCastStartStop to fix crashes
  occurring when interacting with the Media UI (bsc#1198124)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1673352000">- Chromium 109.0.5414.74:
  * Add support for MathML Core
  * CSS: Auto range support for font descriptors inside @font-face
    rule
  * CSS: Add lh length unit
  * CSS: Add hyphenate-limit-chars property
  * CSS: Snap border, outline and column-rule widths before layout
  * API: Improved screen sharing and web conferencing: hints for
    suppressing local audio playback, and Conditional Focus
  * API: HTTP response status code in the Resource Timing API
  * API: Same-site cross-origin prerendering triggered by the
    speculation rules API
  * Remove Event.path API
  * CVE-2023-0128: Use after free in Overview Mode
  * CVE-2023-0129: Heap buffer overflow in Network Service
  * CVE-2023-0130: Inappropriate implementation in Fullscreen API
  * CVE-2023-0131: Inappropriate implementation in iframe Sandbox
  * CVE-2023-0132: Inappropriate implementation in Permission prompts
  * CVE-2023-0133: Inappropriate implementation in Permission prompts
  * CVE-2023-0134: Use after free in Cart
  * CVE-2023-0135: Use after free in Cart
  * CVE-2023-0136: Inappropriate implementation in Fullscreen API
  * CVE-2023-0137: Heap buffer overflow in Platform Apps
  * CVE-2023-0138: Heap buffer overflow in libphonenumber
  * CVE-2023-0139: Insufficient validation of untrusted input in Downloads
  * CVE-2023-0140: Inappropriate implementation in File System API
  * CVE-2023-0141: Insufficient policy enforcement in CORS
  * Various fixes from internal audits, fuzzing and other initiatives
- drop patches:
  * chromium-gcc11.patch - not needed
  * chromium-107-system-zlib.patch - upstream
  * chromium-108-compiler.patch
- add patches:
  * chromium-109-compiler.patch
  * chromium-109-clang-lp154.patch</changelog>
</package>
<package pkgid="4791559da273a5f4f7c77ce5aac83a1cd8b56009ea7ae41f9e1ca0d08f7913df" name="chromium" arch="x86_64">
  <version epoch="0" ver="109.0.5414.74" rel="bp154.2.58.1"/>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660651200">- Re-enable our version of chrome-wrapper
- Set no sandbox if root is being used (https://crbug.com/638180)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660824000">- Chromium 104.0.5112.101 (boo#1202509):
  * CVE-2022-2852: Use after free in FedCM
  * CVE-2022-2854: Use after free in SwiftShader
  * CVE-2022-2855: Use after free in ANGLE
  * CVE-2022-2857: Use after free in Blink
  * CVE-2022-2858: Use after free in Sign-In Flow
  * CVE-2022-2853: Heap buffer overflow in Downloads
  * CVE-2022-2856: Insufficient validation of untrusted input in Intents
  * CVE-2022-2859: Use after free in Chrome OS Shell
  * CVE-2022-2860: Insufficient policy enforcement in Cookies
  * CVE-2022-2861: Inappropriate implementation in Extensions API</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1661169600">- Fix quoting in chrome-wrapper, don't put cwd on LD_LIBRARY_PATH</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1662033600">- Update chromium-symbolic.svg: this fixes bsc#1202403.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1662638400">- Chromium 105.0.5195.102 (boo#1203102):
  * CVE-2022-3075: Insufficient data validation in Mojo
- Chromium 105.0.5195.52 (boo#1202964):
  * CVE-2022-3038: Use after free in Network Service
  * CVE-2022-3039: Use after free in WebSQL
  * CVE-2022-3040: Use after free in Layout
  * CVE-2022-3041: Use after free in WebSQL
  * CVE-2022-3042: Use after free in PhoneHub
  * CVE-2022-3043: Heap buffer overflow in Screen Capture
  * CVE-2022-3044: Inappropriate implementation in Site Isolation
  * CVE-2022-3045: Insufficient validation of untrusted input in V8
  * CVE-2022-3046: Use after free in Browser Tag
  * CVE-2022-3071: Use after free in Tab Strip
  * CVE-2022-3047: Insufficient policy enforcement in Extensions API
  * CVE-2022-3048: Inappropriate implementation in Chrome OS lockscreen
  * CVE-2022-3049: Use after free in SplitScreen
  * CVE-2022-3050: Heap buffer overflow in WebUI
  * CVE-2022-3051: Heap buffer overflow in Exosphere
  * CVE-2022-3052: Heap buffer overflow in Window Manager
  * CVE-2022-3053: Inappropriate implementation in Pointer Lock
  * CVE-2022-3054: Insufficient policy enforcement in DevTools
  * CVE-2022-3055: Use after free in Passwords
  * CVE-2022-3056: Insufficient policy enforcement in Content Security Policy
  * CVE-2022-3057: Inappropriate implementation in iframe Sandbox
  * CVE-2022-3058: Use after free in Sign-In Flow
- Added patches:
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Bitmap-include.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-wayland-1.20.patch
  * chromium-105-compiler.patch
- Removed patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-78-protobuf-RepeatedPtrField-export.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663156800">- Chromium 105.0.5195.127 (boo#1203419):
  * CVE-2022-3195: Out of bounds write in Storage
  * CVE-2022-3196: Use after free in PDF
  * CVE-2022-3197: Use after free in PDF
  * CVE-2022-3198: Use after free in PDF
  * CVE-2022-3199: Use after free in Frames
  * CVE-2022-3200: Heap buffer overflow in Internals
  * CVE-2022-3201: Insufficient validation of untrusted input in DevTools
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1664625600">- Chromium 106.0.5249.91 (boo#1203808):
  * CVE-2022-3370: Use after free in Custom Elements
  * CVE-2022-3373: Out of bounds write in V8
- includes changes from 106.0.5249.61:
  * CVE-2022-3304: Use after free in CSS
  * CVE-2022-3201: Insufficient validation of untrusted input in Developer Tools
  * CVE-2022-3305: Use after free in Survey
  * CVE-2022-3306: Use after free in Survey
  * CVE-2022-3307: Use after free in Media
  * CVE-2022-3308: Insufficient policy enforcement in Developer Tools
  * CVE-2022-3309: Use after free in Assistant
  * CVE-2022-3310: Insufficient policy enforcement in Custom Tabs
  * CVE-2022-3311: Use after free in Import
  * CVE-2022-3312: Insufficient validation of untrusted input in VPN
  * CVE-2022-3313: Incorrect security UI in Full Screen
  * CVE-2022-3314: Use after free in Logging
  * CVE-2022-3315: Type confusion in Blink
  * CVE-2022-3316: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-3317: Insufficient validation of untrusted input in Intents
  * CVE-2022-3318: Use after free in ChromeOS Notifications
- drop patches:
  * chromium-104-tflite-system-zlib.patch
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
- add patches
  * chromium-106-ffmpeg-duration.patch
  * chromium-106-AutofillPopupControllerImpl-namespace.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1665057600">- Chromium 106.0.5249.103:
  * fix possible cache manager deadlock
  * Fix right-click menu appearing unexpectedly affecting screen
    readers</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1665576000">- Chromium 106.0.5249.119 (boo#1204223)
  * CVE-2022-3445: Use after free in Skia
  * CVE-2022-3446: Heap buffer overflow in WebSQL
  * CVE-2022-3447: Inappropriate implementation in Custom Tabs
  * CVE-2022-3448: Use after free in Permissions API
  * CVE-2022-3449: Use after free in Safe Browsing
  * CVE-2022-3450: Use after free in Peer Connection</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1666872000">- Chromium 107.0.5304.68 (boo#1204732)
  * CVE-2022-3652: Type Confusion in V8
  * CVE-2022-3653: Heap buffer overflow in Vulkan
  * CVE-2022-3654: Use after free in Layout
  * CVE-2022-3655: Heap buffer overflow in Media Galleries
  * CVE-2022-3656: Insufficient data validation in File System
  * CVE-2022-3657: Use after free in Extensions
  * CVE-2022-3658: Use after free in Feedback service on Chrome OS
  * CVE-2022-3659: Use after free in Accessibility
  * CVE-2022-3660: Inappropriate implementation in Full screen mode
  * CVE-2022-3661: Insufficient data validation in Extensions
- Added patches:
  * chromium-107-compiler.patch
  * chromium-107-system-zlib.patch
- Removed patches:
  * chromium-105-compiler.patch
  * chromium-105-Bitmap-include.patch
  * chromium-106-AutofillPopupControllerImpl-namespace.patch
- Unbundle libyuv and libavif on TW
- Prepare 15.5
- Use qt on 15.4+ (15.3 too old)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1666958400">- Chromium 107.0.5304.87 (boo#1204819)
  * CVE-2022-3723: Type Confusion in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1667995200">- Chromium 107.0.5304.110 (boo#1205221)
  * CVE-2022-3885: Use after free in V8
  * CVE-2022-3886: Use after free in Speech Recognition
  * CVE-2022-3887: Use after free in Web Workers
  * CVE-2022-3888: Use after free in WebCodecs
  * CVE-2022-3889: Type Confusion in V8
  * CVE-2022-3890: Heap buffer overflow in Crashpad</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1668686400">- Build with llvm15 on openSUSE:Backports:SLE-15-SP5 and up</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1669291200">- Chromium 107.0.5304.121 (boo#1205736)
  * CVE-2022-4135: Heap buffer overflow in GPU</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1669809600">- Chromium 108.0.5359.71 (boo#1205871):
  * CVE-2022-4174: Type Confusion in V8
  * CVE-2022-4175: Use after free in Camera Capture
  * CVE-2022-4176: Out of bounds write in Lacros Graphics
  * CVE-2022-4177: Use after free in Extensions
  * CVE-2022-4178: Use after free in Mojo
  * CVE-2022-4179: Use after free in Audio
  * CVE-2022-4180: Use after free in Mojo
  * CVE-2022-4181: Use after free in Forms
  * CVE-2022-4182: Inappropriate implementation in Fenced Frames
  * CVE-2022-4183: Insufficient policy enforcement in Popup Blocker
  * CVE-2022-4184: Insufficient policy enforcement in Autofill
  * CVE-2022-4185: Inappropriate implementation in Navigation
  * CVE-2022-4186: Insufficient validation of untrusted input in Downloads
  * CVE-2022-4187: Insufficient policy enforcement in DevTools
  * CVE-2022-4188: Insufficient validation of untrusted input in CORS
  * CVE-2022-4189: Insufficient policy enforcement in DevTools
  * CVE-2022-4190: Insufficient data validation in Directory
  * CVE-2022-4191: Use after free in Sign-In
  * CVE-2022-4192: Use after free in Live Caption
  * CVE-2022-4193: Insufficient policy enforcement in File System API
  * CVE-2022-4194: Use after free in Accessibility
  * CVE-2022-4195: Insufficient policy enforcement in Safe Browsing
- drop chromium-105-wayland-1.20.patch, upstream
- drop chromium-107-compiler.patch
- add chromium-108-compiler.patch
- drop chromium-98-EnumTable-crash.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1670068800">- Chromium 108.0.5359.94:
  * CVE-2022-4262: Type Confusion in V8 (boo#1205999)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1670414400">- Chromium 108.0.5359.98
  * Fix regression in computing &lt;select&gt; visibility</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1671019200">- Chromium 108.0.5359.124 (boo#1206403):
  * CVE-2022-4436: Use after free in Blink Media
  * CVE-2022-4437: Use after free in Mojo IPC
  * CVE-2022-4438: Use after free in Blink Frames
  * CVE-2022-4439: Use after free in Aura
  * CVE-2022-4440: Use after free in Profiles</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1671364800">- Add chromium-disable-GlobalMediaControlsCastStartStop.patch:
  disable GlobalMediaControlsCastStartStop to fix crashes
  occurring when interacting with the Media UI (bsc#1198124)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1673352000">- Chromium 109.0.5414.74:
  * Add support for MathML Core
  * CSS: Auto range support for font descriptors inside @font-face
    rule
  * CSS: Add lh length unit
  * CSS: Add hyphenate-limit-chars property
  * CSS: Snap border, outline and column-rule widths before layout
  * API: Improved screen sharing and web conferencing: hints for
    suppressing local audio playback, and Conditional Focus
  * API: HTTP response status code in the Resource Timing API
  * API: Same-site cross-origin prerendering triggered by the
    speculation rules API
  * Remove Event.path API
  * CVE-2023-0128: Use after free in Overview Mode
  * CVE-2023-0129: Heap buffer overflow in Network Service
  * CVE-2023-0130: Inappropriate implementation in Fullscreen API
  * CVE-2023-0131: Inappropriate implementation in iframe Sandbox
  * CVE-2023-0132: Inappropriate implementation in Permission prompts
  * CVE-2023-0133: Inappropriate implementation in Permission prompts
  * CVE-2023-0134: Use after free in Cart
  * CVE-2023-0135: Use after free in Cart
  * CVE-2023-0136: Inappropriate implementation in Fullscreen API
  * CVE-2023-0137: Heap buffer overflow in Platform Apps
  * CVE-2023-0138: Heap buffer overflow in libphonenumber
  * CVE-2023-0139: Insufficient validation of untrusted input in Downloads
  * CVE-2023-0140: Inappropriate implementation in File System API
  * CVE-2023-0141: Insufficient policy enforcement in CORS
  * Various fixes from internal audits, fuzzing and other initiatives
- drop patches:
  * chromium-gcc11.patch - not needed
  * chromium-107-system-zlib.patch - upstream
  * chromium-108-compiler.patch
- add patches:
  * chromium-109-compiler.patch
  * chromium-109-clang-lp154.patch</changelog>
</package>
<package pkgid="ffd00997b4fa925b72f26b9c081597042df6e6528cd4fb2580cb8749bac52705" name="chromium" arch="aarch64">
  <version epoch="0" ver="109.0.5414.74" rel="bp154.2.61.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660824000">- Chromium 104.0.5112.101 (boo#1202509):
  * CVE-2022-2852: Use after free in FedCM
  * CVE-2022-2854: Use after free in SwiftShader
  * CVE-2022-2855: Use after free in ANGLE
  * CVE-2022-2857: Use after free in Blink
  * CVE-2022-2858: Use after free in Sign-In Flow
  * CVE-2022-2853: Heap buffer overflow in Downloads
  * CVE-2022-2856: Insufficient validation of untrusted input in Intents
  * CVE-2022-2859: Use after free in Chrome OS Shell
  * CVE-2022-2860: Insufficient policy enforcement in Cookies
  * CVE-2022-2861: Inappropriate implementation in Extensions API</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1661169600">- Fix quoting in chrome-wrapper, don't put cwd on LD_LIBRARY_PATH</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1662033600">- Update chromium-symbolic.svg: this fixes bsc#1202403.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1662638400">- Chromium 105.0.5195.102 (boo#1203102):
  * CVE-2022-3075: Insufficient data validation in Mojo
- Chromium 105.0.5195.52 (boo#1202964):
  * CVE-2022-3038: Use after free in Network Service
  * CVE-2022-3039: Use after free in WebSQL
  * CVE-2022-3040: Use after free in Layout
  * CVE-2022-3041: Use after free in WebSQL
  * CVE-2022-3042: Use after free in PhoneHub
  * CVE-2022-3043: Heap buffer overflow in Screen Capture
  * CVE-2022-3044: Inappropriate implementation in Site Isolation
  * CVE-2022-3045: Insufficient validation of untrusted input in V8
  * CVE-2022-3046: Use after free in Browser Tag
  * CVE-2022-3071: Use after free in Tab Strip
  * CVE-2022-3047: Insufficient policy enforcement in Extensions API
  * CVE-2022-3048: Inappropriate implementation in Chrome OS lockscreen
  * CVE-2022-3049: Use after free in SplitScreen
  * CVE-2022-3050: Heap buffer overflow in WebUI
  * CVE-2022-3051: Heap buffer overflow in Exosphere
  * CVE-2022-3052: Heap buffer overflow in Window Manager
  * CVE-2022-3053: Inappropriate implementation in Pointer Lock
  * CVE-2022-3054: Insufficient policy enforcement in DevTools
  * CVE-2022-3055: Use after free in Passwords
  * CVE-2022-3056: Insufficient policy enforcement in Content Security Policy
  * CVE-2022-3057: Inappropriate implementation in iframe Sandbox
  * CVE-2022-3058: Use after free in Sign-In Flow
- Added patches:
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Bitmap-include.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-wayland-1.20.patch
  * chromium-105-compiler.patch
- Removed patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-78-protobuf-RepeatedPtrField-export.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663156800">- Chromium 105.0.5195.127 (boo#1203419):
  * CVE-2022-3195: Out of bounds write in Storage
  * CVE-2022-3196: Use after free in PDF
  * CVE-2022-3197: Use after free in PDF
  * CVE-2022-3198: Use after free in PDF
  * CVE-2022-3199: Use after free in Frames
  * CVE-2022-3200: Heap buffer overflow in Internals
  * CVE-2022-3201: Insufficient validation of untrusted input in DevTools
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1664625600">- Chromium 106.0.5249.91 (boo#1203808):
  * CVE-2022-3370: Use after free in Custom Elements
  * CVE-2022-3373: Out of bounds write in V8
- includes changes from 106.0.5249.61:
  * CVE-2022-3304: Use after free in CSS
  * CVE-2022-3201: Insufficient validation of untrusted input in Developer Tools
  * CVE-2022-3305: Use after free in Survey
  * CVE-2022-3306: Use after free in Survey
  * CVE-2022-3307: Use after free in Media
  * CVE-2022-3308: Insufficient policy enforcement in Developer Tools
  * CVE-2022-3309: Use after free in Assistant
  * CVE-2022-3310: Insufficient policy enforcement in Custom Tabs
  * CVE-2022-3311: Use after free in Import
  * CVE-2022-3312: Insufficient validation of untrusted input in VPN
  * CVE-2022-3313: Incorrect security UI in Full Screen
  * CVE-2022-3314: Use after free in Logging
  * CVE-2022-3315: Type confusion in Blink
  * CVE-2022-3316: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-3317: Insufficient validation of untrusted input in Intents
  * CVE-2022-3318: Use after free in ChromeOS Notifications
- drop patches:
  * chromium-104-tflite-system-zlib.patch
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
- add patches
  * chromium-106-ffmpeg-duration.patch
  * chromium-106-AutofillPopupControllerImpl-namespace.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1665057600">- Chromium 106.0.5249.103:
  * fix possible cache manager deadlock
  * Fix right-click menu appearing unexpectedly affecting screen
    readers</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1665576000">- Chromium 106.0.5249.119 (boo#1204223)
  * CVE-2022-3445: Use after free in Skia
  * CVE-2022-3446: Heap buffer overflow in WebSQL
  * CVE-2022-3447: Inappropriate implementation in Custom Tabs
  * CVE-2022-3448: Use after free in Permissions API
  * CVE-2022-3449: Use after free in Safe Browsing
  * CVE-2022-3450: Use after free in Peer Connection</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1666872000">- Chromium 107.0.5304.68 (boo#1204732)
  * CVE-2022-3652: Type Confusion in V8
  * CVE-2022-3653: Heap buffer overflow in Vulkan
  * CVE-2022-3654: Use after free in Layout
  * CVE-2022-3655: Heap buffer overflow in Media Galleries
  * CVE-2022-3656: Insufficient data validation in File System
  * CVE-2022-3657: Use after free in Extensions
  * CVE-2022-3658: Use after free in Feedback service on Chrome OS
  * CVE-2022-3659: Use after free in Accessibility
  * CVE-2022-3660: Inappropriate implementation in Full screen mode
  * CVE-2022-3661: Insufficient data validation in Extensions
- Added patches:
  * chromium-107-compiler.patch
  * chromium-107-system-zlib.patch
- Removed patches:
  * chromium-105-compiler.patch
  * chromium-105-Bitmap-include.patch
  * chromium-106-AutofillPopupControllerImpl-namespace.patch
- Unbundle libyuv and libavif on TW
- Prepare 15.5
- Use qt on 15.4+ (15.3 too old)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1666958400">- Chromium 107.0.5304.87 (boo#1204819)
  * CVE-2022-3723: Type Confusion in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1667995200">- Chromium 107.0.5304.110 (boo#1205221)
  * CVE-2022-3885: Use after free in V8
  * CVE-2022-3886: Use after free in Speech Recognition
  * CVE-2022-3887: Use after free in Web Workers
  * CVE-2022-3888: Use after free in WebCodecs
  * CVE-2022-3889: Type Confusion in V8
  * CVE-2022-3890: Heap buffer overflow in Crashpad</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1668686400">- Build with llvm15 on openSUSE:Backports:SLE-15-SP5 and up</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1669291200">- Chromium 107.0.5304.121 (boo#1205736)
  * CVE-2022-4135: Heap buffer overflow in GPU</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1669809600">- Chromium 108.0.5359.71 (boo#1205871):
  * CVE-2022-4174: Type Confusion in V8
  * CVE-2022-4175: Use after free in Camera Capture
  * CVE-2022-4176: Out of bounds write in Lacros Graphics
  * CVE-2022-4177: Use after free in Extensions
  * CVE-2022-4178: Use after free in Mojo
  * CVE-2022-4179: Use after free in Audio
  * CVE-2022-4180: Use after free in Mojo
  * CVE-2022-4181: Use after free in Forms
  * CVE-2022-4182: Inappropriate implementation in Fenced Frames
  * CVE-2022-4183: Insufficient policy enforcement in Popup Blocker
  * CVE-2022-4184: Insufficient policy enforcement in Autofill
  * CVE-2022-4185: Inappropriate implementation in Navigation
  * CVE-2022-4186: Insufficient validation of untrusted input in Downloads
  * CVE-2022-4187: Insufficient policy enforcement in DevTools
  * CVE-2022-4188: Insufficient validation of untrusted input in CORS
  * CVE-2022-4189: Insufficient policy enforcement in DevTools
  * CVE-2022-4190: Insufficient data validation in Directory
  * CVE-2022-4191: Use after free in Sign-In
  * CVE-2022-4192: Use after free in Live Caption
  * CVE-2022-4193: Insufficient policy enforcement in File System API
  * CVE-2022-4194: Use after free in Accessibility
  * CVE-2022-4195: Insufficient policy enforcement in Safe Browsing
- drop chromium-105-wayland-1.20.patch, upstream
- drop chromium-107-compiler.patch
- add chromium-108-compiler.patch
- drop chromium-98-EnumTable-crash.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1670068800">- Chromium 108.0.5359.94:
  * CVE-2022-4262: Type Confusion in V8 (boo#1205999)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1670414400">- Chromium 108.0.5359.98
  * Fix regression in computing &lt;select&gt; visibility</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1671019200">- Chromium 108.0.5359.124 (boo#1206403):
  * CVE-2022-4436: Use after free in Blink Media
  * CVE-2022-4437: Use after free in Mojo IPC
  * CVE-2022-4438: Use after free in Blink Frames
  * CVE-2022-4439: Use after free in Aura
  * CVE-2022-4440: Use after free in Profiles</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1671364800">- Add chromium-disable-GlobalMediaControlsCastStartStop.patch:
  disable GlobalMediaControlsCastStartStop to fix crashes
  occurring when interacting with the Media UI (bsc#1198124)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1673352000">- Chromium 109.0.5414.74:
  * Add support for MathML Core
  * CSS: Auto range support for font descriptors inside @font-face
    rule
  * CSS: Add lh length unit
  * CSS: Add hyphenate-limit-chars property
  * CSS: Snap border, outline and column-rule widths before layout
  * API: Improved screen sharing and web conferencing: hints for
    suppressing local audio playback, and Conditional Focus
  * API: HTTP response status code in the Resource Timing API
  * API: Same-site cross-origin prerendering triggered by the
    speculation rules API
  * Remove Event.path API
  * CVE-2023-0128: Use after free in Overview Mode
  * CVE-2023-0129: Heap buffer overflow in Network Service
  * CVE-2023-0130: Inappropriate implementation in Fullscreen API
  * CVE-2023-0131: Inappropriate implementation in iframe Sandbox
  * CVE-2023-0132: Inappropriate implementation in Permission prompts
  * CVE-2023-0133: Inappropriate implementation in Permission prompts
  * CVE-2023-0134: Use after free in Cart
  * CVE-2023-0135: Use after free in Cart
  * CVE-2023-0136: Inappropriate implementation in Fullscreen API
  * CVE-2023-0137: Heap buffer overflow in Platform Apps
  * CVE-2023-0138: Heap buffer overflow in libphonenumber
  * CVE-2023-0139: Insufficient validation of untrusted input in Downloads
  * CVE-2023-0140: Inappropriate implementation in File System API
  * CVE-2023-0141: Insufficient policy enforcement in CORS
  * Various fixes from internal audits, fuzzing and other initiatives
- drop patches:
  * chromium-gcc11.patch - not needed
  * chromium-107-system-zlib.patch - upstream
  * chromium-108-compiler.patch
- add patches:
  * chromium-109-compiler.patch
  * chromium-109-clang-lp154.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1673956800">- Added patches:
  * chromium-icu72-1.patch: ensure TextCodecCJK doesn't conflict
    with system icu (bsc#1207147)
  * chromium-icu72-2.patch: align default characters for old icu
    with that of ICU 72
  * chromium-icu72-3.patch: make V8 aware of space in ICU 72 time
    format</changelog>
</package>
<package pkgid="a2f61019b3acc2078500f91bfdf221fafbaa6523c16814330231320487a82364" name="chromium" arch="src">
  <version epoch="0" ver="109.0.5414.74" rel="bp154.2.61.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660824000">- Chromium 104.0.5112.101 (boo#1202509):
  * CVE-2022-2852: Use after free in FedCM
  * CVE-2022-2854: Use after free in SwiftShader
  * CVE-2022-2855: Use after free in ANGLE
  * CVE-2022-2857: Use after free in Blink
  * CVE-2022-2858: Use after free in Sign-In Flow
  * CVE-2022-2853: Heap buffer overflow in Downloads
  * CVE-2022-2856: Insufficient validation of untrusted input in Intents
  * CVE-2022-2859: Use after free in Chrome OS Shell
  * CVE-2022-2860: Insufficient policy enforcement in Cookies
  * CVE-2022-2861: Inappropriate implementation in Extensions API</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1661169600">- Fix quoting in chrome-wrapper, don't put cwd on LD_LIBRARY_PATH</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1662033600">- Update chromium-symbolic.svg: this fixes bsc#1202403.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1662638400">- Chromium 105.0.5195.102 (boo#1203102):
  * CVE-2022-3075: Insufficient data validation in Mojo
- Chromium 105.0.5195.52 (boo#1202964):
  * CVE-2022-3038: Use after free in Network Service
  * CVE-2022-3039: Use after free in WebSQL
  * CVE-2022-3040: Use after free in Layout
  * CVE-2022-3041: Use after free in WebSQL
  * CVE-2022-3042: Use after free in PhoneHub
  * CVE-2022-3043: Heap buffer overflow in Screen Capture
  * CVE-2022-3044: Inappropriate implementation in Site Isolation
  * CVE-2022-3045: Insufficient validation of untrusted input in V8
  * CVE-2022-3046: Use after free in Browser Tag
  * CVE-2022-3071: Use after free in Tab Strip
  * CVE-2022-3047: Insufficient policy enforcement in Extensions API
  * CVE-2022-3048: Inappropriate implementation in Chrome OS lockscreen
  * CVE-2022-3049: Use after free in SplitScreen
  * CVE-2022-3050: Heap buffer overflow in WebUI
  * CVE-2022-3051: Heap buffer overflow in Exosphere
  * CVE-2022-3052: Heap buffer overflow in Window Manager
  * CVE-2022-3053: Inappropriate implementation in Pointer Lock
  * CVE-2022-3054: Insufficient policy enforcement in DevTools
  * CVE-2022-3055: Use after free in Passwords
  * CVE-2022-3056: Insufficient policy enforcement in Content Security Policy
  * CVE-2022-3057: Inappropriate implementation in iframe Sandbox
  * CVE-2022-3058: Use after free in Sign-In Flow
- Added patches:
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Bitmap-include.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-wayland-1.20.patch
  * chromium-105-compiler.patch
- Removed patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-78-protobuf-RepeatedPtrField-export.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663156800">- Chromium 105.0.5195.127 (boo#1203419):
  * CVE-2022-3195: Out of bounds write in Storage
  * CVE-2022-3196: Use after free in PDF
  * CVE-2022-3197: Use after free in PDF
  * CVE-2022-3198: Use after free in PDF
  * CVE-2022-3199: Use after free in Frames
  * CVE-2022-3200: Heap buffer overflow in Internals
  * CVE-2022-3201: Insufficient validation of untrusted input in DevTools
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1664625600">- Chromium 106.0.5249.91 (boo#1203808):
  * CVE-2022-3370: Use after free in Custom Elements
  * CVE-2022-3373: Out of bounds write in V8
- includes changes from 106.0.5249.61:
  * CVE-2022-3304: Use after free in CSS
  * CVE-2022-3201: Insufficient validation of untrusted input in Developer Tools
  * CVE-2022-3305: Use after free in Survey
  * CVE-2022-3306: Use after free in Survey
  * CVE-2022-3307: Use after free in Media
  * CVE-2022-3308: Insufficient policy enforcement in Developer Tools
  * CVE-2022-3309: Use after free in Assistant
  * CVE-2022-3310: Insufficient policy enforcement in Custom Tabs
  * CVE-2022-3311: Use after free in Import
  * CVE-2022-3312: Insufficient validation of untrusted input in VPN
  * CVE-2022-3313: Incorrect security UI in Full Screen
  * CVE-2022-3314: Use after free in Logging
  * CVE-2022-3315: Type confusion in Blink
  * CVE-2022-3316: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-3317: Insufficient validation of untrusted input in Intents
  * CVE-2022-3318: Use after free in ChromeOS Notifications
- drop patches:
  * chromium-104-tflite-system-zlib.patch
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
- add patches
  * chromium-106-ffmpeg-duration.patch
  * chromium-106-AutofillPopupControllerImpl-namespace.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1665057600">- Chromium 106.0.5249.103:
  * fix possible cache manager deadlock
  * Fix right-click menu appearing unexpectedly affecting screen
    readers</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1665576000">- Chromium 106.0.5249.119 (boo#1204223)
  * CVE-2022-3445: Use after free in Skia
  * CVE-2022-3446: Heap buffer overflow in WebSQL
  * CVE-2022-3447: Inappropriate implementation in Custom Tabs
  * CVE-2022-3448: Use after free in Permissions API
  * CVE-2022-3449: Use after free in Safe Browsing
  * CVE-2022-3450: Use after free in Peer Connection</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1666872000">- Chromium 107.0.5304.68 (boo#1204732)
  * CVE-2022-3652: Type Confusion in V8
  * CVE-2022-3653: Heap buffer overflow in Vulkan
  * CVE-2022-3654: Use after free in Layout
  * CVE-2022-3655: Heap buffer overflow in Media Galleries
  * CVE-2022-3656: Insufficient data validation in File System
  * CVE-2022-3657: Use after free in Extensions
  * CVE-2022-3658: Use after free in Feedback service on Chrome OS
  * CVE-2022-3659: Use after free in Accessibility
  * CVE-2022-3660: Inappropriate implementation in Full screen mode
  * CVE-2022-3661: Insufficient data validation in Extensions
- Added patches:
  * chromium-107-compiler.patch
  * chromium-107-system-zlib.patch
- Removed patches:
  * chromium-105-compiler.patch
  * chromium-105-Bitmap-include.patch
  * chromium-106-AutofillPopupControllerImpl-namespace.patch
- Unbundle libyuv and libavif on TW
- Prepare 15.5
- Use qt on 15.4+ (15.3 too old)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1666958400">- Chromium 107.0.5304.87 (boo#1204819)
  * CVE-2022-3723: Type Confusion in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1667995200">- Chromium 107.0.5304.110 (boo#1205221)
  * CVE-2022-3885: Use after free in V8
  * CVE-2022-3886: Use after free in Speech Recognition
  * CVE-2022-3887: Use after free in Web Workers
  * CVE-2022-3888: Use after free in WebCodecs
  * CVE-2022-3889: Type Confusion in V8
  * CVE-2022-3890: Heap buffer overflow in Crashpad</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1668686400">- Build with llvm15 on openSUSE:Backports:SLE-15-SP5 and up</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1669291200">- Chromium 107.0.5304.121 (boo#1205736)
  * CVE-2022-4135: Heap buffer overflow in GPU</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1669809600">- Chromium 108.0.5359.71 (boo#1205871):
  * CVE-2022-4174: Type Confusion in V8
  * CVE-2022-4175: Use after free in Camera Capture
  * CVE-2022-4176: Out of bounds write in Lacros Graphics
  * CVE-2022-4177: Use after free in Extensions
  * CVE-2022-4178: Use after free in Mojo
  * CVE-2022-4179: Use after free in Audio
  * CVE-2022-4180: Use after free in Mojo
  * CVE-2022-4181: Use after free in Forms
  * CVE-2022-4182: Inappropriate implementation in Fenced Frames
  * CVE-2022-4183: Insufficient policy enforcement in Popup Blocker
  * CVE-2022-4184: Insufficient policy enforcement in Autofill
  * CVE-2022-4185: Inappropriate implementation in Navigation
  * CVE-2022-4186: Insufficient validation of untrusted input in Downloads
  * CVE-2022-4187: Insufficient policy enforcement in DevTools
  * CVE-2022-4188: Insufficient validation of untrusted input in CORS
  * CVE-2022-4189: Insufficient policy enforcement in DevTools
  * CVE-2022-4190: Insufficient data validation in Directory
  * CVE-2022-4191: Use after free in Sign-In
  * CVE-2022-4192: Use after free in Live Caption
  * CVE-2022-4193: Insufficient policy enforcement in File System API
  * CVE-2022-4194: Use after free in Accessibility
  * CVE-2022-4195: Insufficient policy enforcement in Safe Browsing
- drop chromium-105-wayland-1.20.patch, upstream
- drop chromium-107-compiler.patch
- add chromium-108-compiler.patch
- drop chromium-98-EnumTable-crash.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1670068800">- Chromium 108.0.5359.94:
  * CVE-2022-4262: Type Confusion in V8 (boo#1205999)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1670414400">- Chromium 108.0.5359.98
  * Fix regression in computing &lt;select&gt; visibility</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1671019200">- Chromium 108.0.5359.124 (boo#1206403):
  * CVE-2022-4436: Use after free in Blink Media
  * CVE-2022-4437: Use after free in Mojo IPC
  * CVE-2022-4438: Use after free in Blink Frames
  * CVE-2022-4439: Use after free in Aura
  * CVE-2022-4440: Use after free in Profiles</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1671364800">- Add chromium-disable-GlobalMediaControlsCastStartStop.patch:
  disable GlobalMediaControlsCastStartStop to fix crashes
  occurring when interacting with the Media UI (bsc#1198124)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1673352000">- Chromium 109.0.5414.74:
  * Add support for MathML Core
  * CSS: Auto range support for font descriptors inside @font-face
    rule
  * CSS: Add lh length unit
  * CSS: Add hyphenate-limit-chars property
  * CSS: Snap border, outline and column-rule widths before layout
  * API: Improved screen sharing and web conferencing: hints for
    suppressing local audio playback, and Conditional Focus
  * API: HTTP response status code in the Resource Timing API
  * API: Same-site cross-origin prerendering triggered by the
    speculation rules API
  * Remove Event.path API
  * CVE-2023-0128: Use after free in Overview Mode
  * CVE-2023-0129: Heap buffer overflow in Network Service
  * CVE-2023-0130: Inappropriate implementation in Fullscreen API
  * CVE-2023-0131: Inappropriate implementation in iframe Sandbox
  * CVE-2023-0132: Inappropriate implementation in Permission prompts
  * CVE-2023-0133: Inappropriate implementation in Permission prompts
  * CVE-2023-0134: Use after free in Cart
  * CVE-2023-0135: Use after free in Cart
  * CVE-2023-0136: Inappropriate implementation in Fullscreen API
  * CVE-2023-0137: Heap buffer overflow in Platform Apps
  * CVE-2023-0138: Heap buffer overflow in libphonenumber
  * CVE-2023-0139: Insufficient validation of untrusted input in Downloads
  * CVE-2023-0140: Inappropriate implementation in File System API
  * CVE-2023-0141: Insufficient policy enforcement in CORS
  * Various fixes from internal audits, fuzzing and other initiatives
- drop patches:
  * chromium-gcc11.patch - not needed
  * chromium-107-system-zlib.patch - upstream
  * chromium-108-compiler.patch
- add patches:
  * chromium-109-compiler.patch
  * chromium-109-clang-lp154.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1673956800">- Added patches:
  * chromium-icu72-1.patch: ensure TextCodecCJK doesn't conflict
    with system icu (bsc#1207147)
  * chromium-icu72-2.patch: align default characters for old icu
    with that of ICU 72
  * chromium-icu72-3.patch: make V8 aware of space in ICU 72 time
    format</changelog>
</package>
<package pkgid="8f1ffd4d97868ffe32123a49d2bb846aead0ed0e8de581d1ec365e6ecc7f185f" name="chromium" arch="x86_64">
  <version epoch="0" ver="109.0.5414.74" rel="bp154.2.61.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660824000">- Chromium 104.0.5112.101 (boo#1202509):
  * CVE-2022-2852: Use after free in FedCM
  * CVE-2022-2854: Use after free in SwiftShader
  * CVE-2022-2855: Use after free in ANGLE
  * CVE-2022-2857: Use after free in Blink
  * CVE-2022-2858: Use after free in Sign-In Flow
  * CVE-2022-2853: Heap buffer overflow in Downloads
  * CVE-2022-2856: Insufficient validation of untrusted input in Intents
  * CVE-2022-2859: Use after free in Chrome OS Shell
  * CVE-2022-2860: Insufficient policy enforcement in Cookies
  * CVE-2022-2861: Inappropriate implementation in Extensions API</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1661169600">- Fix quoting in chrome-wrapper, don't put cwd on LD_LIBRARY_PATH</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1662033600">- Update chromium-symbolic.svg: this fixes bsc#1202403.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1662638400">- Chromium 105.0.5195.102 (boo#1203102):
  * CVE-2022-3075: Insufficient data validation in Mojo
- Chromium 105.0.5195.52 (boo#1202964):
  * CVE-2022-3038: Use after free in Network Service
  * CVE-2022-3039: Use after free in WebSQL
  * CVE-2022-3040: Use after free in Layout
  * CVE-2022-3041: Use after free in WebSQL
  * CVE-2022-3042: Use after free in PhoneHub
  * CVE-2022-3043: Heap buffer overflow in Screen Capture
  * CVE-2022-3044: Inappropriate implementation in Site Isolation
  * CVE-2022-3045: Insufficient validation of untrusted input in V8
  * CVE-2022-3046: Use after free in Browser Tag
  * CVE-2022-3071: Use after free in Tab Strip
  * CVE-2022-3047: Insufficient policy enforcement in Extensions API
  * CVE-2022-3048: Inappropriate implementation in Chrome OS lockscreen
  * CVE-2022-3049: Use after free in SplitScreen
  * CVE-2022-3050: Heap buffer overflow in WebUI
  * CVE-2022-3051: Heap buffer overflow in Exosphere
  * CVE-2022-3052: Heap buffer overflow in Window Manager
  * CVE-2022-3053: Inappropriate implementation in Pointer Lock
  * CVE-2022-3054: Insufficient policy enforcement in DevTools
  * CVE-2022-3055: Use after free in Passwords
  * CVE-2022-3056: Insufficient policy enforcement in Content Security Policy
  * CVE-2022-3057: Inappropriate implementation in iframe Sandbox
  * CVE-2022-3058: Use after free in Sign-In Flow
- Added patches:
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Bitmap-include.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-wayland-1.20.patch
  * chromium-105-compiler.patch
- Removed patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-78-protobuf-RepeatedPtrField-export.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663156800">- Chromium 105.0.5195.127 (boo#1203419):
  * CVE-2022-3195: Out of bounds write in Storage
  * CVE-2022-3196: Use after free in PDF
  * CVE-2022-3197: Use after free in PDF
  * CVE-2022-3198: Use after free in PDF
  * CVE-2022-3199: Use after free in Frames
  * CVE-2022-3200: Heap buffer overflow in Internals
  * CVE-2022-3201: Insufficient validation of untrusted input in DevTools
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1664625600">- Chromium 106.0.5249.91 (boo#1203808):
  * CVE-2022-3370: Use after free in Custom Elements
  * CVE-2022-3373: Out of bounds write in V8
- includes changes from 106.0.5249.61:
  * CVE-2022-3304: Use after free in CSS
  * CVE-2022-3201: Insufficient validation of untrusted input in Developer Tools
  * CVE-2022-3305: Use after free in Survey
  * CVE-2022-3306: Use after free in Survey
  * CVE-2022-3307: Use after free in Media
  * CVE-2022-3308: Insufficient policy enforcement in Developer Tools
  * CVE-2022-3309: Use after free in Assistant
  * CVE-2022-3310: Insufficient policy enforcement in Custom Tabs
  * CVE-2022-3311: Use after free in Import
  * CVE-2022-3312: Insufficient validation of untrusted input in VPN
  * CVE-2022-3313: Incorrect security UI in Full Screen
  * CVE-2022-3314: Use after free in Logging
  * CVE-2022-3315: Type confusion in Blink
  * CVE-2022-3316: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-3317: Insufficient validation of untrusted input in Intents
  * CVE-2022-3318: Use after free in ChromeOS Notifications
- drop patches:
  * chromium-104-tflite-system-zlib.patch
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
- add patches
  * chromium-106-ffmpeg-duration.patch
  * chromium-106-AutofillPopupControllerImpl-namespace.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1665057600">- Chromium 106.0.5249.103:
  * fix possible cache manager deadlock
  * Fix right-click menu appearing unexpectedly affecting screen
    readers</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1665576000">- Chromium 106.0.5249.119 (boo#1204223)
  * CVE-2022-3445: Use after free in Skia
  * CVE-2022-3446: Heap buffer overflow in WebSQL
  * CVE-2022-3447: Inappropriate implementation in Custom Tabs
  * CVE-2022-3448: Use after free in Permissions API
  * CVE-2022-3449: Use after free in Safe Browsing
  * CVE-2022-3450: Use after free in Peer Connection</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1666872000">- Chromium 107.0.5304.68 (boo#1204732)
  * CVE-2022-3652: Type Confusion in V8
  * CVE-2022-3653: Heap buffer overflow in Vulkan
  * CVE-2022-3654: Use after free in Layout
  * CVE-2022-3655: Heap buffer overflow in Media Galleries
  * CVE-2022-3656: Insufficient data validation in File System
  * CVE-2022-3657: Use after free in Extensions
  * CVE-2022-3658: Use after free in Feedback service on Chrome OS
  * CVE-2022-3659: Use after free in Accessibility
  * CVE-2022-3660: Inappropriate implementation in Full screen mode
  * CVE-2022-3661: Insufficient data validation in Extensions
- Added patches:
  * chromium-107-compiler.patch
  * chromium-107-system-zlib.patch
- Removed patches:
  * chromium-105-compiler.patch
  * chromium-105-Bitmap-include.patch
  * chromium-106-AutofillPopupControllerImpl-namespace.patch
- Unbundle libyuv and libavif on TW
- Prepare 15.5
- Use qt on 15.4+ (15.3 too old)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1666958400">- Chromium 107.0.5304.87 (boo#1204819)
  * CVE-2022-3723: Type Confusion in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1667995200">- Chromium 107.0.5304.110 (boo#1205221)
  * CVE-2022-3885: Use after free in V8
  * CVE-2022-3886: Use after free in Speech Recognition
  * CVE-2022-3887: Use after free in Web Workers
  * CVE-2022-3888: Use after free in WebCodecs
  * CVE-2022-3889: Type Confusion in V8
  * CVE-2022-3890: Heap buffer overflow in Crashpad</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1668686400">- Build with llvm15 on openSUSE:Backports:SLE-15-SP5 and up</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1669291200">- Chromium 107.0.5304.121 (boo#1205736)
  * CVE-2022-4135: Heap buffer overflow in GPU</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1669809600">- Chromium 108.0.5359.71 (boo#1205871):
  * CVE-2022-4174: Type Confusion in V8
  * CVE-2022-4175: Use after free in Camera Capture
  * CVE-2022-4176: Out of bounds write in Lacros Graphics
  * CVE-2022-4177: Use after free in Extensions
  * CVE-2022-4178: Use after free in Mojo
  * CVE-2022-4179: Use after free in Audio
  * CVE-2022-4180: Use after free in Mojo
  * CVE-2022-4181: Use after free in Forms
  * CVE-2022-4182: Inappropriate implementation in Fenced Frames
  * CVE-2022-4183: Insufficient policy enforcement in Popup Blocker
  * CVE-2022-4184: Insufficient policy enforcement in Autofill
  * CVE-2022-4185: Inappropriate implementation in Navigation
  * CVE-2022-4186: Insufficient validation of untrusted input in Downloads
  * CVE-2022-4187: Insufficient policy enforcement in DevTools
  * CVE-2022-4188: Insufficient validation of untrusted input in CORS
  * CVE-2022-4189: Insufficient policy enforcement in DevTools
  * CVE-2022-4190: Insufficient data validation in Directory
  * CVE-2022-4191: Use after free in Sign-In
  * CVE-2022-4192: Use after free in Live Caption
  * CVE-2022-4193: Insufficient policy enforcement in File System API
  * CVE-2022-4194: Use after free in Accessibility
  * CVE-2022-4195: Insufficient policy enforcement in Safe Browsing
- drop chromium-105-wayland-1.20.patch, upstream
- drop chromium-107-compiler.patch
- add chromium-108-compiler.patch
- drop chromium-98-EnumTable-crash.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1670068800">- Chromium 108.0.5359.94:
  * CVE-2022-4262: Type Confusion in V8 (boo#1205999)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1670414400">- Chromium 108.0.5359.98
  * Fix regression in computing &lt;select&gt; visibility</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1671019200">- Chromium 108.0.5359.124 (boo#1206403):
  * CVE-2022-4436: Use after free in Blink Media
  * CVE-2022-4437: Use after free in Mojo IPC
  * CVE-2022-4438: Use after free in Blink Frames
  * CVE-2022-4439: Use after free in Aura
  * CVE-2022-4440: Use after free in Profiles</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1671364800">- Add chromium-disable-GlobalMediaControlsCastStartStop.patch:
  disable GlobalMediaControlsCastStartStop to fix crashes
  occurring when interacting with the Media UI (bsc#1198124)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1673352000">- Chromium 109.0.5414.74:
  * Add support for MathML Core
  * CSS: Auto range support for font descriptors inside @font-face
    rule
  * CSS: Add lh length unit
  * CSS: Add hyphenate-limit-chars property
  * CSS: Snap border, outline and column-rule widths before layout
  * API: Improved screen sharing and web conferencing: hints for
    suppressing local audio playback, and Conditional Focus
  * API: HTTP response status code in the Resource Timing API
  * API: Same-site cross-origin prerendering triggered by the
    speculation rules API
  * Remove Event.path API
  * CVE-2023-0128: Use after free in Overview Mode
  * CVE-2023-0129: Heap buffer overflow in Network Service
  * CVE-2023-0130: Inappropriate implementation in Fullscreen API
  * CVE-2023-0131: Inappropriate implementation in iframe Sandbox
  * CVE-2023-0132: Inappropriate implementation in Permission prompts
  * CVE-2023-0133: Inappropriate implementation in Permission prompts
  * CVE-2023-0134: Use after free in Cart
  * CVE-2023-0135: Use after free in Cart
  * CVE-2023-0136: Inappropriate implementation in Fullscreen API
  * CVE-2023-0137: Heap buffer overflow in Platform Apps
  * CVE-2023-0138: Heap buffer overflow in libphonenumber
  * CVE-2023-0139: Insufficient validation of untrusted input in Downloads
  * CVE-2023-0140: Inappropriate implementation in File System API
  * CVE-2023-0141: Insufficient policy enforcement in CORS
  * Various fixes from internal audits, fuzzing and other initiatives
- drop patches:
  * chromium-gcc11.patch - not needed
  * chromium-107-system-zlib.patch - upstream
  * chromium-108-compiler.patch
- add patches:
  * chromium-109-compiler.patch
  * chromium-109-clang-lp154.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1673956800">- Added patches:
  * chromium-icu72-1.patch: ensure TextCodecCJK doesn't conflict
    with system icu (bsc#1207147)
  * chromium-icu72-2.patch: align default characters for old icu
    with that of ICU 72
  * chromium-icu72-3.patch: make V8 aware of space in ICU 72 time
    format</changelog>
</package>
<package pkgid="63ccc795592fb5f0d195d1e6145be9039806fa1310067b0185c112ddea2e4afd" name="chromium" arch="aarch64">
  <version epoch="0" ver="110.0.5481.77" rel="bp154.2.67.1"/>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1662033600">- Update chromium-symbolic.svg: this fixes bsc#1202403.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1662638400">- Chromium 105.0.5195.102 (boo#1203102):
  * CVE-2022-3075: Insufficient data validation in Mojo
- Chromium 105.0.5195.52 (boo#1202964):
  * CVE-2022-3038: Use after free in Network Service
  * CVE-2022-3039: Use after free in WebSQL
  * CVE-2022-3040: Use after free in Layout
  * CVE-2022-3041: Use after free in WebSQL
  * CVE-2022-3042: Use after free in PhoneHub
  * CVE-2022-3043: Heap buffer overflow in Screen Capture
  * CVE-2022-3044: Inappropriate implementation in Site Isolation
  * CVE-2022-3045: Insufficient validation of untrusted input in V8
  * CVE-2022-3046: Use after free in Browser Tag
  * CVE-2022-3071: Use after free in Tab Strip
  * CVE-2022-3047: Insufficient policy enforcement in Extensions API
  * CVE-2022-3048: Inappropriate implementation in Chrome OS lockscreen
  * CVE-2022-3049: Use after free in SplitScreen
  * CVE-2022-3050: Heap buffer overflow in WebUI
  * CVE-2022-3051: Heap buffer overflow in Exosphere
  * CVE-2022-3052: Heap buffer overflow in Window Manager
  * CVE-2022-3053: Inappropriate implementation in Pointer Lock
  * CVE-2022-3054: Insufficient policy enforcement in DevTools
  * CVE-2022-3055: Use after free in Passwords
  * CVE-2022-3056: Insufficient policy enforcement in Content Security Policy
  * CVE-2022-3057: Inappropriate implementation in iframe Sandbox
  * CVE-2022-3058: Use after free in Sign-In Flow
- Added patches:
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Bitmap-include.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-wayland-1.20.patch
  * chromium-105-compiler.patch
- Removed patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-78-protobuf-RepeatedPtrField-export.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663156800">- Chromium 105.0.5195.127 (boo#1203419):
  * CVE-2022-3195: Out of bounds write in Storage
  * CVE-2022-3196: Use after free in PDF
  * CVE-2022-3197: Use after free in PDF
  * CVE-2022-3198: Use after free in PDF
  * CVE-2022-3199: Use after free in Frames
  * CVE-2022-3200: Heap buffer overflow in Internals
  * CVE-2022-3201: Insufficient validation of untrusted input in DevTools
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1664625600">- Chromium 106.0.5249.91 (boo#1203808):
  * CVE-2022-3370: Use after free in Custom Elements
  * CVE-2022-3373: Out of bounds write in V8
- includes changes from 106.0.5249.61:
  * CVE-2022-3304: Use after free in CSS
  * CVE-2022-3201: Insufficient validation of untrusted input in Developer Tools
  * CVE-2022-3305: Use after free in Survey
  * CVE-2022-3306: Use after free in Survey
  * CVE-2022-3307: Use after free in Media
  * CVE-2022-3308: Insufficient policy enforcement in Developer Tools
  * CVE-2022-3309: Use after free in Assistant
  * CVE-2022-3310: Insufficient policy enforcement in Custom Tabs
  * CVE-2022-3311: Use after free in Import
  * CVE-2022-3312: Insufficient validation of untrusted input in VPN
  * CVE-2022-3313: Incorrect security UI in Full Screen
  * CVE-2022-3314: Use after free in Logging
  * CVE-2022-3315: Type confusion in Blink
  * CVE-2022-3316: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-3317: Insufficient validation of untrusted input in Intents
  * CVE-2022-3318: Use after free in ChromeOS Notifications
- drop patches:
  * chromium-104-tflite-system-zlib.patch
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
- add patches
  * chromium-106-ffmpeg-duration.patch
  * chromium-106-AutofillPopupControllerImpl-namespace.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1665057600">- Chromium 106.0.5249.103:
  * fix possible cache manager deadlock
  * Fix right-click menu appearing unexpectedly affecting screen
    readers</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1665576000">- Chromium 106.0.5249.119 (boo#1204223)
  * CVE-2022-3445: Use after free in Skia
  * CVE-2022-3446: Heap buffer overflow in WebSQL
  * CVE-2022-3447: Inappropriate implementation in Custom Tabs
  * CVE-2022-3448: Use after free in Permissions API
  * CVE-2022-3449: Use after free in Safe Browsing
  * CVE-2022-3450: Use after free in Peer Connection</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1666872000">- Chromium 107.0.5304.68 (boo#1204732)
  * CVE-2022-3652: Type Confusion in V8
  * CVE-2022-3653: Heap buffer overflow in Vulkan
  * CVE-2022-3654: Use after free in Layout
  * CVE-2022-3655: Heap buffer overflow in Media Galleries
  * CVE-2022-3656: Insufficient data validation in File System
  * CVE-2022-3657: Use after free in Extensions
  * CVE-2022-3658: Use after free in Feedback service on Chrome OS
  * CVE-2022-3659: Use after free in Accessibility
  * CVE-2022-3660: Inappropriate implementation in Full screen mode
  * CVE-2022-3661: Insufficient data validation in Extensions
- Added patches:
  * chromium-107-compiler.patch
  * chromium-107-system-zlib.patch
- Removed patches:
  * chromium-105-compiler.patch
  * chromium-105-Bitmap-include.patch
  * chromium-106-AutofillPopupControllerImpl-namespace.patch
- Unbundle libyuv and libavif on TW
- Prepare 15.5
- Use qt on 15.4+ (15.3 too old)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1666958400">- Chromium 107.0.5304.87 (boo#1204819)
  * CVE-2022-3723: Type Confusion in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1667995200">- Chromium 107.0.5304.110 (boo#1205221)
  * CVE-2022-3885: Use after free in V8
  * CVE-2022-3886: Use after free in Speech Recognition
  * CVE-2022-3887: Use after free in Web Workers
  * CVE-2022-3888: Use after free in WebCodecs
  * CVE-2022-3889: Type Confusion in V8
  * CVE-2022-3890: Heap buffer overflow in Crashpad</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1668686400">- Build with llvm15 on openSUSE:Backports:SLE-15-SP5 and up</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1669291200">- Chromium 107.0.5304.121 (boo#1205736)
  * CVE-2022-4135: Heap buffer overflow in GPU</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1669809600">- Chromium 108.0.5359.71 (boo#1205871):
  * CVE-2022-4174: Type Confusion in V8
  * CVE-2022-4175: Use after free in Camera Capture
  * CVE-2022-4176: Out of bounds write in Lacros Graphics
  * CVE-2022-4177: Use after free in Extensions
  * CVE-2022-4178: Use after free in Mojo
  * CVE-2022-4179: Use after free in Audio
  * CVE-2022-4180: Use after free in Mojo
  * CVE-2022-4181: Use after free in Forms
  * CVE-2022-4182: Inappropriate implementation in Fenced Frames
  * CVE-2022-4183: Insufficient policy enforcement in Popup Blocker
  * CVE-2022-4184: Insufficient policy enforcement in Autofill
  * CVE-2022-4185: Inappropriate implementation in Navigation
  * CVE-2022-4186: Insufficient validation of untrusted input in Downloads
  * CVE-2022-4187: Insufficient policy enforcement in DevTools
  * CVE-2022-4188: Insufficient validation of untrusted input in CORS
  * CVE-2022-4189: Insufficient policy enforcement in DevTools
  * CVE-2022-4190: Insufficient data validation in Directory
  * CVE-2022-4191: Use after free in Sign-In
  * CVE-2022-4192: Use after free in Live Caption
  * CVE-2022-4193: Insufficient policy enforcement in File System API
  * CVE-2022-4194: Use after free in Accessibility
  * CVE-2022-4195: Insufficient policy enforcement in Safe Browsing
- drop chromium-105-wayland-1.20.patch, upstream
- drop chromium-107-compiler.patch
- add chromium-108-compiler.patch
- drop chromium-98-EnumTable-crash.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1670068800">- Chromium 108.0.5359.94:
  * CVE-2022-4262: Type Confusion in V8 (boo#1205999)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1670414400">- Chromium 108.0.5359.98
  * Fix regression in computing &lt;select&gt; visibility</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1671019200">- Chromium 108.0.5359.124 (boo#1206403):
  * CVE-2022-4436: Use after free in Blink Media
  * CVE-2022-4437: Use after free in Mojo IPC
  * CVE-2022-4438: Use after free in Blink Frames
  * CVE-2022-4439: Use after free in Aura
  * CVE-2022-4440: Use after free in Profiles</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1671364800">- Add chromium-disable-GlobalMediaControlsCastStartStop.patch:
  disable GlobalMediaControlsCastStartStop to fix crashes
  occurring when interacting with the Media UI (bsc#1198124)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1673352000">- Chromium 109.0.5414.74:
  * Add support for MathML Core
  * CSS: Auto range support for font descriptors inside @font-face
    rule
  * CSS: Add lh length unit
  * CSS: Add hyphenate-limit-chars property
  * CSS: Snap border, outline and column-rule widths before layout
  * API: Improved screen sharing and web conferencing: hints for
    suppressing local audio playback, and Conditional Focus
  * API: HTTP response status code in the Resource Timing API
  * API: Same-site cross-origin prerendering triggered by the
    speculation rules API
  * Remove Event.path API
  * CVE-2023-0128: Use after free in Overview Mode
  * CVE-2023-0129: Heap buffer overflow in Network Service
  * CVE-2023-0130: Inappropriate implementation in Fullscreen API
  * CVE-2023-0131: Inappropriate implementation in iframe Sandbox
  * CVE-2023-0132: Inappropriate implementation in Permission prompts
  * CVE-2023-0133: Inappropriate implementation in Permission prompts
  * CVE-2023-0134: Use after free in Cart
  * CVE-2023-0135: Use after free in Cart
  * CVE-2023-0136: Inappropriate implementation in Fullscreen API
  * CVE-2023-0137: Heap buffer overflow in Platform Apps
  * CVE-2023-0138: Heap buffer overflow in libphonenumber
  * CVE-2023-0139: Insufficient validation of untrusted input in Downloads
  * CVE-2023-0140: Inappropriate implementation in File System API
  * CVE-2023-0141: Insufficient policy enforcement in CORS
  * Various fixes from internal audits, fuzzing and other initiatives
- drop patches:
  * chromium-gcc11.patch - not needed
  * chromium-107-system-zlib.patch - upstream
  * chromium-108-compiler.patch
- add patches:
  * chromium-109-compiler.patch
  * chromium-109-clang-lp154.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1673956800">- Added patches:
  * chromium-icu72-1.patch: ensure TextCodecCJK doesn't conflict
    with system icu (bsc#1207147)
  * chromium-icu72-2.patch: align default characters for old icu
    with that of ICU 72
  * chromium-icu72-3.patch: make V8 aware of space in ICU 72 time
    format</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1674648000">- Chromium 109.0.5414.119 (boo#1207512):
  * CVE-2023-0471: Use after free in WebTransport
  * CVE-2023-0472: Use after free in WebRTC
  * CVE-2023-0473: Type Confusion in ServiceWorker API
  * CVE-2023-0474: Use after free in GuestView
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1675857600">- Chromium 110.0.5481.77 (boo#1208029):
  * CVE-2023-0696: Type Confusion in V8
  * CVE-2023-0697: Inappropriate implementation in Full screen mode
  * CVE-2023-0698: Out of bounds read in WebRTC
  * CVE-2023-0699: Use after free in GPU
  * CVE-2023-0700: Inappropriate implementation in Download
  * CVE-2023-0701: Heap buffer overflow in WebUI
  * CVE-2023-0702: Type Confusion in Data Transfer
  * CVE-2023-0703: Type Confusion in DevTools
  * CVE-2023-0704: Insufficient policy enforcement in DevTools
  * CVE-2023-0705: Integer overflow in Core
  * Various fixes from internal audits, fuzzing and other initiatives
- build with bundled libavif
- dropped patches:
  * chromium-109-compiler.patch
  * chromium-icu72-3.patch
- added patches:
  * chromium-110-compiler.patch
  * chromium-110-system-libffi.patch
  * chromium-110-NativeThemeBase-fabs.patch
  * chromium-110-CredentialUIEntry-const.patch
  * chromium-110-DarkModeLABColorSpace-pow.patch
  * v8-move-the-Stack-object-from-ThreadLocalTop.patch</changelog>
</package>
<package pkgid="85969d41635a4787d880c935f195761ddb95dfe1238bb8cca679a206f4ce0b48" name="chromium" arch="src">
  <version epoch="0" ver="110.0.5481.77" rel="bp154.2.67.1"/>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1662033600">- Update chromium-symbolic.svg: this fixes bsc#1202403.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1662638400">- Chromium 105.0.5195.102 (boo#1203102):
  * CVE-2022-3075: Insufficient data validation in Mojo
- Chromium 105.0.5195.52 (boo#1202964):
  * CVE-2022-3038: Use after free in Network Service
  * CVE-2022-3039: Use after free in WebSQL
  * CVE-2022-3040: Use after free in Layout
  * CVE-2022-3041: Use after free in WebSQL
  * CVE-2022-3042: Use after free in PhoneHub
  * CVE-2022-3043: Heap buffer overflow in Screen Capture
  * CVE-2022-3044: Inappropriate implementation in Site Isolation
  * CVE-2022-3045: Insufficient validation of untrusted input in V8
  * CVE-2022-3046: Use after free in Browser Tag
  * CVE-2022-3071: Use after free in Tab Strip
  * CVE-2022-3047: Insufficient policy enforcement in Extensions API
  * CVE-2022-3048: Inappropriate implementation in Chrome OS lockscreen
  * CVE-2022-3049: Use after free in SplitScreen
  * CVE-2022-3050: Heap buffer overflow in WebUI
  * CVE-2022-3051: Heap buffer overflow in Exosphere
  * CVE-2022-3052: Heap buffer overflow in Window Manager
  * CVE-2022-3053: Inappropriate implementation in Pointer Lock
  * CVE-2022-3054: Insufficient policy enforcement in DevTools
  * CVE-2022-3055: Use after free in Passwords
  * CVE-2022-3056: Insufficient policy enforcement in Content Security Policy
  * CVE-2022-3057: Inappropriate implementation in iframe Sandbox
  * CVE-2022-3058: Use after free in Sign-In Flow
- Added patches:
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Bitmap-include.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-wayland-1.20.patch
  * chromium-105-compiler.patch
- Removed patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-78-protobuf-RepeatedPtrField-export.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663156800">- Chromium 105.0.5195.127 (boo#1203419):
  * CVE-2022-3195: Out of bounds write in Storage
  * CVE-2022-3196: Use after free in PDF
  * CVE-2022-3197: Use after free in PDF
  * CVE-2022-3198: Use after free in PDF
  * CVE-2022-3199: Use after free in Frames
  * CVE-2022-3200: Heap buffer overflow in Internals
  * CVE-2022-3201: Insufficient validation of untrusted input in DevTools
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1664625600">- Chromium 106.0.5249.91 (boo#1203808):
  * CVE-2022-3370: Use after free in Custom Elements
  * CVE-2022-3373: Out of bounds write in V8
- includes changes from 106.0.5249.61:
  * CVE-2022-3304: Use after free in CSS
  * CVE-2022-3201: Insufficient validation of untrusted input in Developer Tools
  * CVE-2022-3305: Use after free in Survey
  * CVE-2022-3306: Use after free in Survey
  * CVE-2022-3307: Use after free in Media
  * CVE-2022-3308: Insufficient policy enforcement in Developer Tools
  * CVE-2022-3309: Use after free in Assistant
  * CVE-2022-3310: Insufficient policy enforcement in Custom Tabs
  * CVE-2022-3311: Use after free in Import
  * CVE-2022-3312: Insufficient validation of untrusted input in VPN
  * CVE-2022-3313: Incorrect security UI in Full Screen
  * CVE-2022-3314: Use after free in Logging
  * CVE-2022-3315: Type confusion in Blink
  * CVE-2022-3316: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-3317: Insufficient validation of untrusted input in Intents
  * CVE-2022-3318: Use after free in ChromeOS Notifications
- drop patches:
  * chromium-104-tflite-system-zlib.patch
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
- add patches
  * chromium-106-ffmpeg-duration.patch
  * chromium-106-AutofillPopupControllerImpl-namespace.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1665057600">- Chromium 106.0.5249.103:
  * fix possible cache manager deadlock
  * Fix right-click menu appearing unexpectedly affecting screen
    readers</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1665576000">- Chromium 106.0.5249.119 (boo#1204223)
  * CVE-2022-3445: Use after free in Skia
  * CVE-2022-3446: Heap buffer overflow in WebSQL
  * CVE-2022-3447: Inappropriate implementation in Custom Tabs
  * CVE-2022-3448: Use after free in Permissions API
  * CVE-2022-3449: Use after free in Safe Browsing
  * CVE-2022-3450: Use after free in Peer Connection</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1666872000">- Chromium 107.0.5304.68 (boo#1204732)
  * CVE-2022-3652: Type Confusion in V8
  * CVE-2022-3653: Heap buffer overflow in Vulkan
  * CVE-2022-3654: Use after free in Layout
  * CVE-2022-3655: Heap buffer overflow in Media Galleries
  * CVE-2022-3656: Insufficient data validation in File System
  * CVE-2022-3657: Use after free in Extensions
  * CVE-2022-3658: Use after free in Feedback service on Chrome OS
  * CVE-2022-3659: Use after free in Accessibility
  * CVE-2022-3660: Inappropriate implementation in Full screen mode
  * CVE-2022-3661: Insufficient data validation in Extensions
- Added patches:
  * chromium-107-compiler.patch
  * chromium-107-system-zlib.patch
- Removed patches:
  * chromium-105-compiler.patch
  * chromium-105-Bitmap-include.patch
  * chromium-106-AutofillPopupControllerImpl-namespace.patch
- Unbundle libyuv and libavif on TW
- Prepare 15.5
- Use qt on 15.4+ (15.3 too old)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1666958400">- Chromium 107.0.5304.87 (boo#1204819)
  * CVE-2022-3723: Type Confusion in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1667995200">- Chromium 107.0.5304.110 (boo#1205221)
  * CVE-2022-3885: Use after free in V8
  * CVE-2022-3886: Use after free in Speech Recognition
  * CVE-2022-3887: Use after free in Web Workers
  * CVE-2022-3888: Use after free in WebCodecs
  * CVE-2022-3889: Type Confusion in V8
  * CVE-2022-3890: Heap buffer overflow in Crashpad</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1668686400">- Build with llvm15 on openSUSE:Backports:SLE-15-SP5 and up</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1669291200">- Chromium 107.0.5304.121 (boo#1205736)
  * CVE-2022-4135: Heap buffer overflow in GPU</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1669809600">- Chromium 108.0.5359.71 (boo#1205871):
  * CVE-2022-4174: Type Confusion in V8
  * CVE-2022-4175: Use after free in Camera Capture
  * CVE-2022-4176: Out of bounds write in Lacros Graphics
  * CVE-2022-4177: Use after free in Extensions
  * CVE-2022-4178: Use after free in Mojo
  * CVE-2022-4179: Use after free in Audio
  * CVE-2022-4180: Use after free in Mojo
  * CVE-2022-4181: Use after free in Forms
  * CVE-2022-4182: Inappropriate implementation in Fenced Frames
  * CVE-2022-4183: Insufficient policy enforcement in Popup Blocker
  * CVE-2022-4184: Insufficient policy enforcement in Autofill
  * CVE-2022-4185: Inappropriate implementation in Navigation
  * CVE-2022-4186: Insufficient validation of untrusted input in Downloads
  * CVE-2022-4187: Insufficient policy enforcement in DevTools
  * CVE-2022-4188: Insufficient validation of untrusted input in CORS
  * CVE-2022-4189: Insufficient policy enforcement in DevTools
  * CVE-2022-4190: Insufficient data validation in Directory
  * CVE-2022-4191: Use after free in Sign-In
  * CVE-2022-4192: Use after free in Live Caption
  * CVE-2022-4193: Insufficient policy enforcement in File System API
  * CVE-2022-4194: Use after free in Accessibility
  * CVE-2022-4195: Insufficient policy enforcement in Safe Browsing
- drop chromium-105-wayland-1.20.patch, upstream
- drop chromium-107-compiler.patch
- add chromium-108-compiler.patch
- drop chromium-98-EnumTable-crash.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1670068800">- Chromium 108.0.5359.94:
  * CVE-2022-4262: Type Confusion in V8 (boo#1205999)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1670414400">- Chromium 108.0.5359.98
  * Fix regression in computing &lt;select&gt; visibility</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1671019200">- Chromium 108.0.5359.124 (boo#1206403):
  * CVE-2022-4436: Use after free in Blink Media
  * CVE-2022-4437: Use after free in Mojo IPC
  * CVE-2022-4438: Use after free in Blink Frames
  * CVE-2022-4439: Use after free in Aura
  * CVE-2022-4440: Use after free in Profiles</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1671364800">- Add chromium-disable-GlobalMediaControlsCastStartStop.patch:
  disable GlobalMediaControlsCastStartStop to fix crashes
  occurring when interacting with the Media UI (bsc#1198124)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1673352000">- Chromium 109.0.5414.74:
  * Add support for MathML Core
  * CSS: Auto range support for font descriptors inside @font-face
    rule
  * CSS: Add lh length unit
  * CSS: Add hyphenate-limit-chars property
  * CSS: Snap border, outline and column-rule widths before layout
  * API: Improved screen sharing and web conferencing: hints for
    suppressing local audio playback, and Conditional Focus
  * API: HTTP response status code in the Resource Timing API
  * API: Same-site cross-origin prerendering triggered by the
    speculation rules API
  * Remove Event.path API
  * CVE-2023-0128: Use after free in Overview Mode
  * CVE-2023-0129: Heap buffer overflow in Network Service
  * CVE-2023-0130: Inappropriate implementation in Fullscreen API
  * CVE-2023-0131: Inappropriate implementation in iframe Sandbox
  * CVE-2023-0132: Inappropriate implementation in Permission prompts
  * CVE-2023-0133: Inappropriate implementation in Permission prompts
  * CVE-2023-0134: Use after free in Cart
  * CVE-2023-0135: Use after free in Cart
  * CVE-2023-0136: Inappropriate implementation in Fullscreen API
  * CVE-2023-0137: Heap buffer overflow in Platform Apps
  * CVE-2023-0138: Heap buffer overflow in libphonenumber
  * CVE-2023-0139: Insufficient validation of untrusted input in Downloads
  * CVE-2023-0140: Inappropriate implementation in File System API
  * CVE-2023-0141: Insufficient policy enforcement in CORS
  * Various fixes from internal audits, fuzzing and other initiatives
- drop patches:
  * chromium-gcc11.patch - not needed
  * chromium-107-system-zlib.patch - upstream
  * chromium-108-compiler.patch
- add patches:
  * chromium-109-compiler.patch
  * chromium-109-clang-lp154.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1673956800">- Added patches:
  * chromium-icu72-1.patch: ensure TextCodecCJK doesn't conflict
    with system icu (bsc#1207147)
  * chromium-icu72-2.patch: align default characters for old icu
    with that of ICU 72
  * chromium-icu72-3.patch: make V8 aware of space in ICU 72 time
    format</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1674648000">- Chromium 109.0.5414.119 (boo#1207512):
  * CVE-2023-0471: Use after free in WebTransport
  * CVE-2023-0472: Use after free in WebRTC
  * CVE-2023-0473: Type Confusion in ServiceWorker API
  * CVE-2023-0474: Use after free in GuestView
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1675857600">- Chromium 110.0.5481.77 (boo#1208029):
  * CVE-2023-0696: Type Confusion in V8
  * CVE-2023-0697: Inappropriate implementation in Full screen mode
  * CVE-2023-0698: Out of bounds read in WebRTC
  * CVE-2023-0699: Use after free in GPU
  * CVE-2023-0700: Inappropriate implementation in Download
  * CVE-2023-0701: Heap buffer overflow in WebUI
  * CVE-2023-0702: Type Confusion in Data Transfer
  * CVE-2023-0703: Type Confusion in DevTools
  * CVE-2023-0704: Insufficient policy enforcement in DevTools
  * CVE-2023-0705: Integer overflow in Core
  * Various fixes from internal audits, fuzzing and other initiatives
- build with bundled libavif
- dropped patches:
  * chromium-109-compiler.patch
  * chromium-icu72-3.patch
- added patches:
  * chromium-110-compiler.patch
  * chromium-110-system-libffi.patch
  * chromium-110-NativeThemeBase-fabs.patch
  * chromium-110-CredentialUIEntry-const.patch
  * chromium-110-DarkModeLABColorSpace-pow.patch
  * v8-move-the-Stack-object-from-ThreadLocalTop.patch</changelog>
</package>
<package pkgid="8601973a5e2f8769efa2026712889d8ae6474f9164f23fc0e91fd7bca6ea5ffc" name="chromium" arch="x86_64">
  <version epoch="0" ver="110.0.5481.77" rel="bp154.2.67.1"/>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1662033600">- Update chromium-symbolic.svg: this fixes bsc#1202403.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1662638400">- Chromium 105.0.5195.102 (boo#1203102):
  * CVE-2022-3075: Insufficient data validation in Mojo
- Chromium 105.0.5195.52 (boo#1202964):
  * CVE-2022-3038: Use after free in Network Service
  * CVE-2022-3039: Use after free in WebSQL
  * CVE-2022-3040: Use after free in Layout
  * CVE-2022-3041: Use after free in WebSQL
  * CVE-2022-3042: Use after free in PhoneHub
  * CVE-2022-3043: Heap buffer overflow in Screen Capture
  * CVE-2022-3044: Inappropriate implementation in Site Isolation
  * CVE-2022-3045: Insufficient validation of untrusted input in V8
  * CVE-2022-3046: Use after free in Browser Tag
  * CVE-2022-3071: Use after free in Tab Strip
  * CVE-2022-3047: Insufficient policy enforcement in Extensions API
  * CVE-2022-3048: Inappropriate implementation in Chrome OS lockscreen
  * CVE-2022-3049: Use after free in SplitScreen
  * CVE-2022-3050: Heap buffer overflow in WebUI
  * CVE-2022-3051: Heap buffer overflow in Exosphere
  * CVE-2022-3052: Heap buffer overflow in Window Manager
  * CVE-2022-3053: Inappropriate implementation in Pointer Lock
  * CVE-2022-3054: Insufficient policy enforcement in DevTools
  * CVE-2022-3055: Use after free in Passwords
  * CVE-2022-3056: Insufficient policy enforcement in Content Security Policy
  * CVE-2022-3057: Inappropriate implementation in iframe Sandbox
  * CVE-2022-3058: Use after free in Sign-In Flow
- Added patches:
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Bitmap-include.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-wayland-1.20.patch
  * chromium-105-compiler.patch
- Removed patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-78-protobuf-RepeatedPtrField-export.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663156800">- Chromium 105.0.5195.127 (boo#1203419):
  * CVE-2022-3195: Out of bounds write in Storage
  * CVE-2022-3196: Use after free in PDF
  * CVE-2022-3197: Use after free in PDF
  * CVE-2022-3198: Use after free in PDF
  * CVE-2022-3199: Use after free in Frames
  * CVE-2022-3200: Heap buffer overflow in Internals
  * CVE-2022-3201: Insufficient validation of untrusted input in DevTools
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1664625600">- Chromium 106.0.5249.91 (boo#1203808):
  * CVE-2022-3370: Use after free in Custom Elements
  * CVE-2022-3373: Out of bounds write in V8
- includes changes from 106.0.5249.61:
  * CVE-2022-3304: Use after free in CSS
  * CVE-2022-3201: Insufficient validation of untrusted input in Developer Tools
  * CVE-2022-3305: Use after free in Survey
  * CVE-2022-3306: Use after free in Survey
  * CVE-2022-3307: Use after free in Media
  * CVE-2022-3308: Insufficient policy enforcement in Developer Tools
  * CVE-2022-3309: Use after free in Assistant
  * CVE-2022-3310: Insufficient policy enforcement in Custom Tabs
  * CVE-2022-3311: Use after free in Import
  * CVE-2022-3312: Insufficient validation of untrusted input in VPN
  * CVE-2022-3313: Incorrect security UI in Full Screen
  * CVE-2022-3314: Use after free in Logging
  * CVE-2022-3315: Type confusion in Blink
  * CVE-2022-3316: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-3317: Insufficient validation of untrusted input in Intents
  * CVE-2022-3318: Use after free in ChromeOS Notifications
- drop patches:
  * chromium-104-tflite-system-zlib.patch
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
- add patches
  * chromium-106-ffmpeg-duration.patch
  * chromium-106-AutofillPopupControllerImpl-namespace.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1665057600">- Chromium 106.0.5249.103:
  * fix possible cache manager deadlock
  * Fix right-click menu appearing unexpectedly affecting screen
    readers</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1665576000">- Chromium 106.0.5249.119 (boo#1204223)
  * CVE-2022-3445: Use after free in Skia
  * CVE-2022-3446: Heap buffer overflow in WebSQL
  * CVE-2022-3447: Inappropriate implementation in Custom Tabs
  * CVE-2022-3448: Use after free in Permissions API
  * CVE-2022-3449: Use after free in Safe Browsing
  * CVE-2022-3450: Use after free in Peer Connection</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1666872000">- Chromium 107.0.5304.68 (boo#1204732)
  * CVE-2022-3652: Type Confusion in V8
  * CVE-2022-3653: Heap buffer overflow in Vulkan
  * CVE-2022-3654: Use after free in Layout
  * CVE-2022-3655: Heap buffer overflow in Media Galleries
  * CVE-2022-3656: Insufficient data validation in File System
  * CVE-2022-3657: Use after free in Extensions
  * CVE-2022-3658: Use after free in Feedback service on Chrome OS
  * CVE-2022-3659: Use after free in Accessibility
  * CVE-2022-3660: Inappropriate implementation in Full screen mode
  * CVE-2022-3661: Insufficient data validation in Extensions
- Added patches:
  * chromium-107-compiler.patch
  * chromium-107-system-zlib.patch
- Removed patches:
  * chromium-105-compiler.patch
  * chromium-105-Bitmap-include.patch
  * chromium-106-AutofillPopupControllerImpl-namespace.patch
- Unbundle libyuv and libavif on TW
- Prepare 15.5
- Use qt on 15.4+ (15.3 too old)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1666958400">- Chromium 107.0.5304.87 (boo#1204819)
  * CVE-2022-3723: Type Confusion in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1667995200">- Chromium 107.0.5304.110 (boo#1205221)
  * CVE-2022-3885: Use after free in V8
  * CVE-2022-3886: Use after free in Speech Recognition
  * CVE-2022-3887: Use after free in Web Workers
  * CVE-2022-3888: Use after free in WebCodecs
  * CVE-2022-3889: Type Confusion in V8
  * CVE-2022-3890: Heap buffer overflow in Crashpad</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1668686400">- Build with llvm15 on openSUSE:Backports:SLE-15-SP5 and up</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1669291200">- Chromium 107.0.5304.121 (boo#1205736)
  * CVE-2022-4135: Heap buffer overflow in GPU</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1669809600">- Chromium 108.0.5359.71 (boo#1205871):
  * CVE-2022-4174: Type Confusion in V8
  * CVE-2022-4175: Use after free in Camera Capture
  * CVE-2022-4176: Out of bounds write in Lacros Graphics
  * CVE-2022-4177: Use after free in Extensions
  * CVE-2022-4178: Use after free in Mojo
  * CVE-2022-4179: Use after free in Audio
  * CVE-2022-4180: Use after free in Mojo
  * CVE-2022-4181: Use after free in Forms
  * CVE-2022-4182: Inappropriate implementation in Fenced Frames
  * CVE-2022-4183: Insufficient policy enforcement in Popup Blocker
  * CVE-2022-4184: Insufficient policy enforcement in Autofill
  * CVE-2022-4185: Inappropriate implementation in Navigation
  * CVE-2022-4186: Insufficient validation of untrusted input in Downloads
  * CVE-2022-4187: Insufficient policy enforcement in DevTools
  * CVE-2022-4188: Insufficient validation of untrusted input in CORS
  * CVE-2022-4189: Insufficient policy enforcement in DevTools
  * CVE-2022-4190: Insufficient data validation in Directory
  * CVE-2022-4191: Use after free in Sign-In
  * CVE-2022-4192: Use after free in Live Caption
  * CVE-2022-4193: Insufficient policy enforcement in File System API
  * CVE-2022-4194: Use after free in Accessibility
  * CVE-2022-4195: Insufficient policy enforcement in Safe Browsing
- drop chromium-105-wayland-1.20.patch, upstream
- drop chromium-107-compiler.patch
- add chromium-108-compiler.patch
- drop chromium-98-EnumTable-crash.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1670068800">- Chromium 108.0.5359.94:
  * CVE-2022-4262: Type Confusion in V8 (boo#1205999)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1670414400">- Chromium 108.0.5359.98
  * Fix regression in computing &lt;select&gt; visibility</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1671019200">- Chromium 108.0.5359.124 (boo#1206403):
  * CVE-2022-4436: Use after free in Blink Media
  * CVE-2022-4437: Use after free in Mojo IPC
  * CVE-2022-4438: Use after free in Blink Frames
  * CVE-2022-4439: Use after free in Aura
  * CVE-2022-4440: Use after free in Profiles</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1671364800">- Add chromium-disable-GlobalMediaControlsCastStartStop.patch:
  disable GlobalMediaControlsCastStartStop to fix crashes
  occurring when interacting with the Media UI (bsc#1198124)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1673352000">- Chromium 109.0.5414.74:
  * Add support for MathML Core
  * CSS: Auto range support for font descriptors inside @font-face
    rule
  * CSS: Add lh length unit
  * CSS: Add hyphenate-limit-chars property
  * CSS: Snap border, outline and column-rule widths before layout
  * API: Improved screen sharing and web conferencing: hints for
    suppressing local audio playback, and Conditional Focus
  * API: HTTP response status code in the Resource Timing API
  * API: Same-site cross-origin prerendering triggered by the
    speculation rules API
  * Remove Event.path API
  * CVE-2023-0128: Use after free in Overview Mode
  * CVE-2023-0129: Heap buffer overflow in Network Service
  * CVE-2023-0130: Inappropriate implementation in Fullscreen API
  * CVE-2023-0131: Inappropriate implementation in iframe Sandbox
  * CVE-2023-0132: Inappropriate implementation in Permission prompts
  * CVE-2023-0133: Inappropriate implementation in Permission prompts
  * CVE-2023-0134: Use after free in Cart
  * CVE-2023-0135: Use after free in Cart
  * CVE-2023-0136: Inappropriate implementation in Fullscreen API
  * CVE-2023-0137: Heap buffer overflow in Platform Apps
  * CVE-2023-0138: Heap buffer overflow in libphonenumber
  * CVE-2023-0139: Insufficient validation of untrusted input in Downloads
  * CVE-2023-0140: Inappropriate implementation in File System API
  * CVE-2023-0141: Insufficient policy enforcement in CORS
  * Various fixes from internal audits, fuzzing and other initiatives
- drop patches:
  * chromium-gcc11.patch - not needed
  * chromium-107-system-zlib.patch - upstream
  * chromium-108-compiler.patch
- add patches:
  * chromium-109-compiler.patch
  * chromium-109-clang-lp154.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1673956800">- Added patches:
  * chromium-icu72-1.patch: ensure TextCodecCJK doesn't conflict
    with system icu (bsc#1207147)
  * chromium-icu72-2.patch: align default characters for old icu
    with that of ICU 72
  * chromium-icu72-3.patch: make V8 aware of space in ICU 72 time
    format</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1674648000">- Chromium 109.0.5414.119 (boo#1207512):
  * CVE-2023-0471: Use after free in WebTransport
  * CVE-2023-0472: Use after free in WebRTC
  * CVE-2023-0473: Type Confusion in ServiceWorker API
  * CVE-2023-0474: Use after free in GuestView
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1675857600">- Chromium 110.0.5481.77 (boo#1208029):
  * CVE-2023-0696: Type Confusion in V8
  * CVE-2023-0697: Inappropriate implementation in Full screen mode
  * CVE-2023-0698: Out of bounds read in WebRTC
  * CVE-2023-0699: Use after free in GPU
  * CVE-2023-0700: Inappropriate implementation in Download
  * CVE-2023-0701: Heap buffer overflow in WebUI
  * CVE-2023-0702: Type Confusion in Data Transfer
  * CVE-2023-0703: Type Confusion in DevTools
  * CVE-2023-0704: Insufficient policy enforcement in DevTools
  * CVE-2023-0705: Integer overflow in Core
  * Various fixes from internal audits, fuzzing and other initiatives
- build with bundled libavif
- dropped patches:
  * chromium-109-compiler.patch
  * chromium-icu72-3.patch
- added patches:
  * chromium-110-compiler.patch
  * chromium-110-system-libffi.patch
  * chromium-110-NativeThemeBase-fabs.patch
  * chromium-110-CredentialUIEntry-const.patch
  * chromium-110-DarkModeLABColorSpace-pow.patch
  * v8-move-the-Stack-object-from-ThreadLocalTop.patch</changelog>
</package>
<package pkgid="c98183276b48867059bb566d83a4423df7d2d36f6255ce159a2407e202cdec15" name="connman" arch="aarch64">
  <version epoch="0" ver="1.41" rel="bp154.2.3.1"/>
  <changelog author="sleep_walker@suse.cz" date="1423224000">- bump to 1.28
  ver 1.28:
  Fix issue with DHCPv6 re-transmission timer.
  Fix issue with DHCP service ID option byte order.
  Fix issue with IPv6 connections and SLAAC/DHCPv6.
  Fix issue with telephony and IPv6 autoconfiguration.
  Fix issue with Bluetooth technology setting changes.
  Fix issue with WiFi autoscan interval calculation.
  Fix issue with WiFi and missing BSS signal strength.
  Add support for IPv4 information for WiFi Display.
  ver 1.27:
  Fix issue with memory leak in IP configuration.
  Fix issue with providing random numbers for DHCP.
  Fix issue with handling IN_MOVED_TO inotify events.
  Fix issue with channel selection for WiFi scanning.
  Add support for handling Bluetooth GN and PANU roles.
  ver 1.26:
  Fix issue with missing WiFi security provisioning support.
  Fix issue with immutable setting and provisioned services.
  Fix issue with scheduling DNS cache cleanup procedure.
  Fix issue with IPv6 Privacy setting on service removal.
  Fix issue with DHCPv6 CONFIRM message sending procedure.
  Fix issue with DHCPv6 lease expiration handling support.
  Fix issue with DHCPv4 networks and broadcast flag handling.
  Fix issue with DHCPv4 networks without gateway configuration.
  Fix issue with P2P Peer authorization handling.
  Fix issue with P2P Peer service registration.
  Add support for WiFi Display information elements.
  Add support for systemd-hostnamed integration.
  ver 1.25:
  Fix issue with handling rebind timer for DHCPv6.
  Fix issue with handling DHCP renew transaction.
  Fix issue with user supplied proxy settings and DHCP.
  Fix issue with extra status codes from captive portals.
  Fix issue with service idle state reset on failure.
  Fix issue with DNS label compression handling.
  Add support for experimental P2P Peer service.
  ver 1.24:
  Fix issue with handling slave interfaces.
  Fix issue with handling DHCPv4 broadcast flag.
  Fix issue with handling DHCPv4 lease expiration.
  Fix issue with handling WiFi auto-scanning timeout.
  Fix issue with handling domain and DNS server changes.
  Fix issue with double free and agent messages.
  ver 1.23:
  Fix issue with memory leak in technology handling.
  Fix issue with not removing host route of OpenVPN.
  Fix issue with double free in DHCP cleanup handling.
  Fix issue with handling DHCP method from oFono.
  Fix issue with IPv6-PD when disabling tethering.
  Fix issue with DNS proxy when disabling tethering.
  Fix issue with Bluetooth start and stop interaction.
  Fix issue with Bluetooth PAN networks on adapter change.
  ver 1.22:
  Fix issue with WPS state synchronization.
  Fix issue with DNS servers and default service.
  Fix issue with DHCP client and rebooting state.
  Add support for NTP exponential backoff handling.
  Add support for NTP kiss-of-death packet handling.
  Add support for Ethernet gadget networking.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1438948800">- bump to 1.29
  Fix issue with IPv6 autoconfiguration when disabled.
  Fix issue with IPv6 temporary route handling.
  Fix issue with IPv6 timers for nameservers.
  Fix issue with DHPCv6 and route configuration.
  Fix issue with DHCPv6 source port and buggy servers.
  Fix issue with DHCPv6 rapid commit option length.
  Fix issue with DHCPv6 rapid commit error handling.
  Fix issue with handling invalid WiFi passphrases.
  Fix issue with connecting Ethernet devices.
  Add support for Ethernet and VLAN usage.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1444737600">- bumpt to 1.30
    Fix issue with pending DNS request during server change.
    Fix issue with empty strings in nameservers configuration.
    Fix issue with time servers during IP configuration change.
    Fix issue with 4-way handshake during roaming.
    Fix issue with open WiFi networks security.
    Fix issue with support for WiFi AnonymousIdentity.
    Fix issue with memory leak and DHCPv6 DUID handling.
    Fix issue with DHCP client and P2P interaction.
    Fix issue with handling provision file updates.
    Fix issue with VPN state updates.
    Disable 6to4 support by default.
- add keyring file
- clean with spec-cleaner
- fix builds for all possible distributions and architectures</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1503403200">- bump to 1.35
  besides other things contains fix for CVE-2017-12865</changelog>
  <changelog author="avvissu@yandex.by" date="1504872000">- Remove obsolete macros
- Add polkit-agent-1 dependency
- Use the %tmpfiles_create macro
- Removal of ldconfig scriptlets from all packages
- Add connman-wait-online.service in post{un}
- Spec file cleanup</changelog>
  <changelog author="avvissu@yandex.by" date="1507032000">- Add connman-1.35-resolvconf.patch
- Activate connman.service if the network services disabled
- Add info in /var/adm/update-messages</changelog>
  <changelog author="avvissu@yandex.by" date="1508414400">- Add configuration file (/etc/connman/main.conf)
- Add ghost lines: main.conf connman connman-vpn</changelog>
  <changelog author="avvissu@yandex.by" date="1508500800">- Remove unrecognized options: disable-gtk-doc, enable-threads,
  disable-iwmx, enable-session-policy</changelog>
  <changelog author="avvissu@yandex.by" date="1509019200">- Change the mode of download_files (sr#521762)
- Remove connman-rpmlintrc (bnc#1057697)
- Add client as a recommended dependency</changelog>
  <changelog author="avvissu@yandex.by" date="1514289600">- Add symlink to network.service (connman-1.35-service.patch)</changelog>
  <changelog author="avvissu@yandex.by" date="1518523200">- Fix build errors due to unsupported header include order with
  newer kernels &gt;=4.15 (connman-1.35-include.patch).</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1557489600">- Update to 1.37:
  * Fix issue with handling invalid gateway addresses.
  * Fix issue with handling updates of default gateway.
  * Fix issue with DHCP servers that require broadcast flag.
  * Add support for option to use gateways as time servers.
  * Add support for option to select default technology.
  * Add support for Address Conflict Detection (ACD).
  * Add support for IPv6 iptables management.
- Change in 1.36:
  * Fix issue with DNS short response on error handling.
  * Fix issue with handling incoming DNS requests.
  * Fix issue with handling empty timeserver list.
  * Fix issue with incorrect DHCP byte order.
  * Fix issue with AllowDomainnameUpdates handling.
  * Fix issue with IPv4 link-local IP conflict error.
  * Fix issue with handling WISPr over TLS connections.
  * Fix issue with WiFi background scanning handling.
  * Fix issue with WiFi disconnect+connect race condition.
  * Fix issue with WiFi scanning and tethering operation.
  * Fix issue with WiFi security change handling.
  * Fix issue with missing signal for WPS changes.
  * Fix issue with online check retry handling.
  * Add support for systemd-resolved backend.
  * Add support for mDNS configuration setup.
- Drop connman-1.35-include.patch
- Drop connman-1.35-resolvconf.patch</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1582027200">- Update to 1.38:
  * Fix issue with online check on IP address update.
  * Fix issue with OpenVPN and encrypted private keys.
  * Fix issue with finishing of VPN connections.
  * Add support for updated stable iwd APIs.
  * Add support for WireGuard networks.
- Spec file cleanup</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1613131200">- Update to 1.39 (bsc#1181751):
  * Fix issue with scanning state synchronization and iwd.
  * Fix issue with invalid key with 4-way handshake offloading.
  * Fix issue with DNS proxy length checks to prevent buffer overflow. (CVE-2021-26675)
  * Fix issue with DHCP leaking stack data via uninitialized variable. (CVE-2021-26676)</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1644580800">- Update to 1.41: (bsc#1194177, bsc#1194176, bsc#1194175)
  * Fix issue with RTNL netlink message alignment.
  * Fix issue with dnsproxy and timeout for TCP feature. (CVE-2022-23097, CVE-2022-23096)
  * Fix issue with dnsproxy and busy loop in TCP server. (CVE-2022-23098)
  * Fix issue with WiFi connection with no passphrase.
  * Add support for wpa_supplicant and WPA3-SAE functionality.
  * Add support for D-Bus ObjectManager interface.
- Renamed downstream patches to separate them from upstream patches
  * Rename 0001-connman-1.35-service.patch to 0100-connman-1.35-service.patch
- Add systemd hardening configuration
  * Rename harden_connman-vpn.service.patch to 0101-harden_connman-vpn.service.patch
  * Rename harden_connman-wait-online.service.patch to 0102-harden_connman-wait-online.service.patch
- Disabled openconnect plugin due to version conflict
- Disabled vpnc plugin for i568 missing dependency
- Disabled hh2serial and tist_working for ppc64le due to version conflict</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1659355200">- Add refcounting to wispr portal detection (bsc#1200190)
  * add 0001-wispr-Rename-wispr_portal_list-to-wispr_portal_hash.patch
  * add 0002-wispr-Ignore-NULL-proxy.patch
  * add 0003-wispr-Add-reference-counter-to-portal-context.patch (CVE-2022-32293)
  * add 0004-wispr-Update-portal-context-references.patch (CVE-2022-32293)
- Fix OOB write in received_data (bsc#1200189)
  * add 0005-gweb-Fix-OOB-write-in-received_data.patch (CVE-2022-32292)</changelog>
</package>
<package pkgid="c875f600d2c76f32af6aa088cca83c4dd15324b29f77e337af7c9ca6c88d4eb2" name="connman" arch="i586">
  <version epoch="0" ver="1.41" rel="bp154.2.3.1"/>
  <changelog author="sleep_walker@suse.cz" date="1423224000">- bump to 1.28
  ver 1.28:
  Fix issue with DHCPv6 re-transmission timer.
  Fix issue with DHCP service ID option byte order.
  Fix issue with IPv6 connections and SLAAC/DHCPv6.
  Fix issue with telephony and IPv6 autoconfiguration.
  Fix issue with Bluetooth technology setting changes.
  Fix issue with WiFi autoscan interval calculation.
  Fix issue with WiFi and missing BSS signal strength.
  Add support for IPv4 information for WiFi Display.
  ver 1.27:
  Fix issue with memory leak in IP configuration.
  Fix issue with providing random numbers for DHCP.
  Fix issue with handling IN_MOVED_TO inotify events.
  Fix issue with channel selection for WiFi scanning.
  Add support for handling Bluetooth GN and PANU roles.
  ver 1.26:
  Fix issue with missing WiFi security provisioning support.
  Fix issue with immutable setting and provisioned services.
  Fix issue with scheduling DNS cache cleanup procedure.
  Fix issue with IPv6 Privacy setting on service removal.
  Fix issue with DHCPv6 CONFIRM message sending procedure.
  Fix issue with DHCPv6 lease expiration handling support.
  Fix issue with DHCPv4 networks and broadcast flag handling.
  Fix issue with DHCPv4 networks without gateway configuration.
  Fix issue with P2P Peer authorization handling.
  Fix issue with P2P Peer service registration.
  Add support for WiFi Display information elements.
  Add support for systemd-hostnamed integration.
  ver 1.25:
  Fix issue with handling rebind timer for DHCPv6.
  Fix issue with handling DHCP renew transaction.
  Fix issue with user supplied proxy settings and DHCP.
  Fix issue with extra status codes from captive portals.
  Fix issue with service idle state reset on failure.
  Fix issue with DNS label compression handling.
  Add support for experimental P2P Peer service.
  ver 1.24:
  Fix issue with handling slave interfaces.
  Fix issue with handling DHCPv4 broadcast flag.
  Fix issue with handling DHCPv4 lease expiration.
  Fix issue with handling WiFi auto-scanning timeout.
  Fix issue with handling domain and DNS server changes.
  Fix issue with double free and agent messages.
  ver 1.23:
  Fix issue with memory leak in technology handling.
  Fix issue with not removing host route of OpenVPN.
  Fix issue with double free in DHCP cleanup handling.
  Fix issue with handling DHCP method from oFono.
  Fix issue with IPv6-PD when disabling tethering.
  Fix issue with DNS proxy when disabling tethering.
  Fix issue with Bluetooth start and stop interaction.
  Fix issue with Bluetooth PAN networks on adapter change.
  ver 1.22:
  Fix issue with WPS state synchronization.
  Fix issue with DNS servers and default service.
  Fix issue with DHCP client and rebooting state.
  Add support for NTP exponential backoff handling.
  Add support for NTP kiss-of-death packet handling.
  Add support for Ethernet gadget networking.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1438948800">- bump to 1.29
  Fix issue with IPv6 autoconfiguration when disabled.
  Fix issue with IPv6 temporary route handling.
  Fix issue with IPv6 timers for nameservers.
  Fix issue with DHPCv6 and route configuration.
  Fix issue with DHCPv6 source port and buggy servers.
  Fix issue with DHCPv6 rapid commit option length.
  Fix issue with DHCPv6 rapid commit error handling.
  Fix issue with handling invalid WiFi passphrases.
  Fix issue with connecting Ethernet devices.
  Add support for Ethernet and VLAN usage.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1444737600">- bumpt to 1.30
    Fix issue with pending DNS request during server change.
    Fix issue with empty strings in nameservers configuration.
    Fix issue with time servers during IP configuration change.
    Fix issue with 4-way handshake during roaming.
    Fix issue with open WiFi networks security.
    Fix issue with support for WiFi AnonymousIdentity.
    Fix issue with memory leak and DHCPv6 DUID handling.
    Fix issue with DHCP client and P2P interaction.
    Fix issue with handling provision file updates.
    Fix issue with VPN state updates.
    Disable 6to4 support by default.
- add keyring file
- clean with spec-cleaner
- fix builds for all possible distributions and architectures</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1503403200">- bump to 1.35
  besides other things contains fix for CVE-2017-12865</changelog>
  <changelog author="avvissu@yandex.by" date="1504872000">- Remove obsolete macros
- Add polkit-agent-1 dependency
- Use the %tmpfiles_create macro
- Removal of ldconfig scriptlets from all packages
- Add connman-wait-online.service in post{un}
- Spec file cleanup</changelog>
  <changelog author="avvissu@yandex.by" date="1507032000">- Add connman-1.35-resolvconf.patch
- Activate connman.service if the network services disabled
- Add info in /var/adm/update-messages</changelog>
  <changelog author="avvissu@yandex.by" date="1508414400">- Add configuration file (/etc/connman/main.conf)
- Add ghost lines: main.conf connman connman-vpn</changelog>
  <changelog author="avvissu@yandex.by" date="1508500800">- Remove unrecognized options: disable-gtk-doc, enable-threads,
  disable-iwmx, enable-session-policy</changelog>
  <changelog author="avvissu@yandex.by" date="1509019200">- Change the mode of download_files (sr#521762)
- Remove connman-rpmlintrc (bnc#1057697)
- Add client as a recommended dependency</changelog>
  <changelog author="avvissu@yandex.by" date="1514289600">- Add symlink to network.service (connman-1.35-service.patch)</changelog>
  <changelog author="avvissu@yandex.by" date="1518523200">- Fix build errors due to unsupported header include order with
  newer kernels &gt;=4.15 (connman-1.35-include.patch).</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1557489600">- Update to 1.37:
  * Fix issue with handling invalid gateway addresses.
  * Fix issue with handling updates of default gateway.
  * Fix issue with DHCP servers that require broadcast flag.
  * Add support for option to use gateways as time servers.
  * Add support for option to select default technology.
  * Add support for Address Conflict Detection (ACD).
  * Add support for IPv6 iptables management.
- Change in 1.36:
  * Fix issue with DNS short response on error handling.
  * Fix issue with handling incoming DNS requests.
  * Fix issue with handling empty timeserver list.
  * Fix issue with incorrect DHCP byte order.
  * Fix issue with AllowDomainnameUpdates handling.
  * Fix issue with IPv4 link-local IP conflict error.
  * Fix issue with handling WISPr over TLS connections.
  * Fix issue with WiFi background scanning handling.
  * Fix issue with WiFi disconnect+connect race condition.
  * Fix issue with WiFi scanning and tethering operation.
  * Fix issue with WiFi security change handling.
  * Fix issue with missing signal for WPS changes.
  * Fix issue with online check retry handling.
  * Add support for systemd-resolved backend.
  * Add support for mDNS configuration setup.
- Drop connman-1.35-include.patch
- Drop connman-1.35-resolvconf.patch</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1582027200">- Update to 1.38:
  * Fix issue with online check on IP address update.
  * Fix issue with OpenVPN and encrypted private keys.
  * Fix issue with finishing of VPN connections.
  * Add support for updated stable iwd APIs.
  * Add support for WireGuard networks.
- Spec file cleanup</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1613131200">- Update to 1.39 (bsc#1181751):
  * Fix issue with scanning state synchronization and iwd.
  * Fix issue with invalid key with 4-way handshake offloading.
  * Fix issue with DNS proxy length checks to prevent buffer overflow. (CVE-2021-26675)
  * Fix issue with DHCP leaking stack data via uninitialized variable. (CVE-2021-26676)</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1644580800">- Update to 1.41: (bsc#1194177, bsc#1194176, bsc#1194175)
  * Fix issue with RTNL netlink message alignment.
  * Fix issue with dnsproxy and timeout for TCP feature. (CVE-2022-23097, CVE-2022-23096)
  * Fix issue with dnsproxy and busy loop in TCP server. (CVE-2022-23098)
  * Fix issue with WiFi connection with no passphrase.
  * Add support for wpa_supplicant and WPA3-SAE functionality.
  * Add support for D-Bus ObjectManager interface.
- Renamed downstream patches to separate them from upstream patches
  * Rename 0001-connman-1.35-service.patch to 0100-connman-1.35-service.patch
- Add systemd hardening configuration
  * Rename harden_connman-vpn.service.patch to 0101-harden_connman-vpn.service.patch
  * Rename harden_connman-wait-online.service.patch to 0102-harden_connman-wait-online.service.patch
- Disabled openconnect plugin due to version conflict
- Disabled vpnc plugin for i568 missing dependency
- Disabled hh2serial and tist_working for ppc64le due to version conflict</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1659355200">- Add refcounting to wispr portal detection (bsc#1200190)
  * add 0001-wispr-Rename-wispr_portal_list-to-wispr_portal_hash.patch
  * add 0002-wispr-Ignore-NULL-proxy.patch
  * add 0003-wispr-Add-reference-counter-to-portal-context.patch (CVE-2022-32293)
  * add 0004-wispr-Update-portal-context-references.patch (CVE-2022-32293)
- Fix OOB write in received_data (bsc#1200189)
  * add 0005-gweb-Fix-OOB-write-in-received_data.patch (CVE-2022-32292)</changelog>
</package>
<package pkgid="002817b1cb6a2398795e8c430d5e6e40fef2f07474d01f934f797c413bbb4b2b" name="connman" arch="ppc64le">
  <version epoch="0" ver="1.41" rel="bp154.2.3.1"/>
  <changelog author="sleep_walker@suse.cz" date="1423224000">- bump to 1.28
  ver 1.28:
  Fix issue with DHCPv6 re-transmission timer.
  Fix issue with DHCP service ID option byte order.
  Fix issue with IPv6 connections and SLAAC/DHCPv6.
  Fix issue with telephony and IPv6 autoconfiguration.
  Fix issue with Bluetooth technology setting changes.
  Fix issue with WiFi autoscan interval calculation.
  Fix issue with WiFi and missing BSS signal strength.
  Add support for IPv4 information for WiFi Display.
  ver 1.27:
  Fix issue with memory leak in IP configuration.
  Fix issue with providing random numbers for DHCP.
  Fix issue with handling IN_MOVED_TO inotify events.
  Fix issue with channel selection for WiFi scanning.
  Add support for handling Bluetooth GN and PANU roles.
  ver 1.26:
  Fix issue with missing WiFi security provisioning support.
  Fix issue with immutable setting and provisioned services.
  Fix issue with scheduling DNS cache cleanup procedure.
  Fix issue with IPv6 Privacy setting on service removal.
  Fix issue with DHCPv6 CONFIRM message sending procedure.
  Fix issue with DHCPv6 lease expiration handling support.
  Fix issue with DHCPv4 networks and broadcast flag handling.
  Fix issue with DHCPv4 networks without gateway configuration.
  Fix issue with P2P Peer authorization handling.
  Fix issue with P2P Peer service registration.
  Add support for WiFi Display information elements.
  Add support for systemd-hostnamed integration.
  ver 1.25:
  Fix issue with handling rebind timer for DHCPv6.
  Fix issue with handling DHCP renew transaction.
  Fix issue with user supplied proxy settings and DHCP.
  Fix issue with extra status codes from captive portals.
  Fix issue with service idle state reset on failure.
  Fix issue with DNS label compression handling.
  Add support for experimental P2P Peer service.
  ver 1.24:
  Fix issue with handling slave interfaces.
  Fix issue with handling DHCPv4 broadcast flag.
  Fix issue with handling DHCPv4 lease expiration.
  Fix issue with handling WiFi auto-scanning timeout.
  Fix issue with handling domain and DNS server changes.
  Fix issue with double free and agent messages.
  ver 1.23:
  Fix issue with memory leak in technology handling.
  Fix issue with not removing host route of OpenVPN.
  Fix issue with double free in DHCP cleanup handling.
  Fix issue with handling DHCP method from oFono.
  Fix issue with IPv6-PD when disabling tethering.
  Fix issue with DNS proxy when disabling tethering.
  Fix issue with Bluetooth start and stop interaction.
  Fix issue with Bluetooth PAN networks on adapter change.
  ver 1.22:
  Fix issue with WPS state synchronization.
  Fix issue with DNS servers and default service.
  Fix issue with DHCP client and rebooting state.
  Add support for NTP exponential backoff handling.
  Add support for NTP kiss-of-death packet handling.
  Add support for Ethernet gadget networking.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1438948800">- bump to 1.29
  Fix issue with IPv6 autoconfiguration when disabled.
  Fix issue with IPv6 temporary route handling.
  Fix issue with IPv6 timers for nameservers.
  Fix issue with DHPCv6 and route configuration.
  Fix issue with DHCPv6 source port and buggy servers.
  Fix issue with DHCPv6 rapid commit option length.
  Fix issue with DHCPv6 rapid commit error handling.
  Fix issue with handling invalid WiFi passphrases.
  Fix issue with connecting Ethernet devices.
  Add support for Ethernet and VLAN usage.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1444737600">- bumpt to 1.30
    Fix issue with pending DNS request during server change.
    Fix issue with empty strings in nameservers configuration.
    Fix issue with time servers during IP configuration change.
    Fix issue with 4-way handshake during roaming.
    Fix issue with open WiFi networks security.
    Fix issue with support for WiFi AnonymousIdentity.
    Fix issue with memory leak and DHCPv6 DUID handling.
    Fix issue with DHCP client and P2P interaction.
    Fix issue with handling provision file updates.
    Fix issue with VPN state updates.
    Disable 6to4 support by default.
- add keyring file
- clean with spec-cleaner
- fix builds for all possible distributions and architectures</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1503403200">- bump to 1.35
  besides other things contains fix for CVE-2017-12865</changelog>
  <changelog author="avvissu@yandex.by" date="1504872000">- Remove obsolete macros
- Add polkit-agent-1 dependency
- Use the %tmpfiles_create macro
- Removal of ldconfig scriptlets from all packages
- Add connman-wait-online.service in post{un}
- Spec file cleanup</changelog>
  <changelog author="avvissu@yandex.by" date="1507032000">- Add connman-1.35-resolvconf.patch
- Activate connman.service if the network services disabled
- Add info in /var/adm/update-messages</changelog>
  <changelog author="avvissu@yandex.by" date="1508414400">- Add configuration file (/etc/connman/main.conf)
- Add ghost lines: main.conf connman connman-vpn</changelog>
  <changelog author="avvissu@yandex.by" date="1508500800">- Remove unrecognized options: disable-gtk-doc, enable-threads,
  disable-iwmx, enable-session-policy</changelog>
  <changelog author="avvissu@yandex.by" date="1509019200">- Change the mode of download_files (sr#521762)
- Remove connman-rpmlintrc (bnc#1057697)
- Add client as a recommended dependency</changelog>
  <changelog author="avvissu@yandex.by" date="1514289600">- Add symlink to network.service (connman-1.35-service.patch)</changelog>
  <changelog author="avvissu@yandex.by" date="1518523200">- Fix build errors due to unsupported header include order with
  newer kernels &gt;=4.15 (connman-1.35-include.patch).</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1557489600">- Update to 1.37:
  * Fix issue with handling invalid gateway addresses.
  * Fix issue with handling updates of default gateway.
  * Fix issue with DHCP servers that require broadcast flag.
  * Add support for option to use gateways as time servers.
  * Add support for option to select default technology.
  * Add support for Address Conflict Detection (ACD).
  * Add support for IPv6 iptables management.
- Change in 1.36:
  * Fix issue with DNS short response on error handling.
  * Fix issue with handling incoming DNS requests.
  * Fix issue with handling empty timeserver list.
  * Fix issue with incorrect DHCP byte order.
  * Fix issue with AllowDomainnameUpdates handling.
  * Fix issue with IPv4 link-local IP conflict error.
  * Fix issue with handling WISPr over TLS connections.
  * Fix issue with WiFi background scanning handling.
  * Fix issue with WiFi disconnect+connect race condition.
  * Fix issue with WiFi scanning and tethering operation.
  * Fix issue with WiFi security change handling.
  * Fix issue with missing signal for WPS changes.
  * Fix issue with online check retry handling.
  * Add support for systemd-resolved backend.
  * Add support for mDNS configuration setup.
- Drop connman-1.35-include.patch
- Drop connman-1.35-resolvconf.patch</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1582027200">- Update to 1.38:
  * Fix issue with online check on IP address update.
  * Fix issue with OpenVPN and encrypted private keys.
  * Fix issue with finishing of VPN connections.
  * Add support for updated stable iwd APIs.
  * Add support for WireGuard networks.
- Spec file cleanup</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1613131200">- Update to 1.39 (bsc#1181751):
  * Fix issue with scanning state synchronization and iwd.
  * Fix issue with invalid key with 4-way handshake offloading.
  * Fix issue with DNS proxy length checks to prevent buffer overflow. (CVE-2021-26675)
  * Fix issue with DHCP leaking stack data via uninitialized variable. (CVE-2021-26676)</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1644580800">- Update to 1.41: (bsc#1194177, bsc#1194176, bsc#1194175)
  * Fix issue with RTNL netlink message alignment.
  * Fix issue with dnsproxy and timeout for TCP feature. (CVE-2022-23097, CVE-2022-23096)
  * Fix issue with dnsproxy and busy loop in TCP server. (CVE-2022-23098)
  * Fix issue with WiFi connection with no passphrase.
  * Add support for wpa_supplicant and WPA3-SAE functionality.
  * Add support for D-Bus ObjectManager interface.
- Renamed downstream patches to separate them from upstream patches
  * Rename 0001-connman-1.35-service.patch to 0100-connman-1.35-service.patch
- Add systemd hardening configuration
  * Rename harden_connman-vpn.service.patch to 0101-harden_connman-vpn.service.patch
  * Rename harden_connman-wait-online.service.patch to 0102-harden_connman-wait-online.service.patch
- Disabled openconnect plugin due to version conflict
- Disabled vpnc plugin for i568 missing dependency
- Disabled hh2serial and tist_working for ppc64le due to version conflict</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1659355200">- Add refcounting to wispr portal detection (bsc#1200190)
  * add 0001-wispr-Rename-wispr_portal_list-to-wispr_portal_hash.patch
  * add 0002-wispr-Ignore-NULL-proxy.patch
  * add 0003-wispr-Add-reference-counter-to-portal-context.patch (CVE-2022-32293)
  * add 0004-wispr-Update-portal-context-references.patch (CVE-2022-32293)
- Fix OOB write in received_data (bsc#1200189)
  * add 0005-gweb-Fix-OOB-write-in-received_data.patch (CVE-2022-32292)</changelog>
</package>
<package pkgid="84e78270bfb363e22ae5b65b52e75ee55a7d451714d0c71c771e361102a8d4d6" name="connman" arch="s390x">
  <version epoch="0" ver="1.41" rel="bp154.2.3.1"/>
  <changelog author="sleep_walker@suse.cz" date="1423224000">- bump to 1.28
  ver 1.28:
  Fix issue with DHCPv6 re-transmission timer.
  Fix issue with DHCP service ID option byte order.
  Fix issue with IPv6 connections and SLAAC/DHCPv6.
  Fix issue with telephony and IPv6 autoconfiguration.
  Fix issue with Bluetooth technology setting changes.
  Fix issue with WiFi autoscan interval calculation.
  Fix issue with WiFi and missing BSS signal strength.
  Add support for IPv4 information for WiFi Display.
  ver 1.27:
  Fix issue with memory leak in IP configuration.
  Fix issue with providing random numbers for DHCP.
  Fix issue with handling IN_MOVED_TO inotify events.
  Fix issue with channel selection for WiFi scanning.
  Add support for handling Bluetooth GN and PANU roles.
  ver 1.26:
  Fix issue with missing WiFi security provisioning support.
  Fix issue with immutable setting and provisioned services.
  Fix issue with scheduling DNS cache cleanup procedure.
  Fix issue with IPv6 Privacy setting on service removal.
  Fix issue with DHCPv6 CONFIRM message sending procedure.
  Fix issue with DHCPv6 lease expiration handling support.
  Fix issue with DHCPv4 networks and broadcast flag handling.
  Fix issue with DHCPv4 networks without gateway configuration.
  Fix issue with P2P Peer authorization handling.
  Fix issue with P2P Peer service registration.
  Add support for WiFi Display information elements.
  Add support for systemd-hostnamed integration.
  ver 1.25:
  Fix issue with handling rebind timer for DHCPv6.
  Fix issue with handling DHCP renew transaction.
  Fix issue with user supplied proxy settings and DHCP.
  Fix issue with extra status codes from captive portals.
  Fix issue with service idle state reset on failure.
  Fix issue with DNS label compression handling.
  Add support for experimental P2P Peer service.
  ver 1.24:
  Fix issue with handling slave interfaces.
  Fix issue with handling DHCPv4 broadcast flag.
  Fix issue with handling DHCPv4 lease expiration.
  Fix issue with handling WiFi auto-scanning timeout.
  Fix issue with handling domain and DNS server changes.
  Fix issue with double free and agent messages.
  ver 1.23:
  Fix issue with memory leak in technology handling.
  Fix issue with not removing host route of OpenVPN.
  Fix issue with double free in DHCP cleanup handling.
  Fix issue with handling DHCP method from oFono.
  Fix issue with IPv6-PD when disabling tethering.
  Fix issue with DNS proxy when disabling tethering.
  Fix issue with Bluetooth start and stop interaction.
  Fix issue with Bluetooth PAN networks on adapter change.
  ver 1.22:
  Fix issue with WPS state synchronization.
  Fix issue with DNS servers and default service.
  Fix issue with DHCP client and rebooting state.
  Add support for NTP exponential backoff handling.
  Add support for NTP kiss-of-death packet handling.
  Add support for Ethernet gadget networking.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1438948800">- bump to 1.29
  Fix issue with IPv6 autoconfiguration when disabled.
  Fix issue with IPv6 temporary route handling.
  Fix issue with IPv6 timers for nameservers.
  Fix issue with DHPCv6 and route configuration.
  Fix issue with DHCPv6 source port and buggy servers.
  Fix issue with DHCPv6 rapid commit option length.
  Fix issue with DHCPv6 rapid commit error handling.
  Fix issue with handling invalid WiFi passphrases.
  Fix issue with connecting Ethernet devices.
  Add support for Ethernet and VLAN usage.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1444737600">- bumpt to 1.30
    Fix issue with pending DNS request during server change.
    Fix issue with empty strings in nameservers configuration.
    Fix issue with time servers during IP configuration change.
    Fix issue with 4-way handshake during roaming.
    Fix issue with open WiFi networks security.
    Fix issue with support for WiFi AnonymousIdentity.
    Fix issue with memory leak and DHCPv6 DUID handling.
    Fix issue with DHCP client and P2P interaction.
    Fix issue with handling provision file updates.
    Fix issue with VPN state updates.
    Disable 6to4 support by default.
- add keyring file
- clean with spec-cleaner
- fix builds for all possible distributions and architectures</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1503403200">- bump to 1.35
  besides other things contains fix for CVE-2017-12865</changelog>
  <changelog author="avvissu@yandex.by" date="1504872000">- Remove obsolete macros
- Add polkit-agent-1 dependency
- Use the %tmpfiles_create macro
- Removal of ldconfig scriptlets from all packages
- Add connman-wait-online.service in post{un}
- Spec file cleanup</changelog>
  <changelog author="avvissu@yandex.by" date="1507032000">- Add connman-1.35-resolvconf.patch
- Activate connman.service if the network services disabled
- Add info in /var/adm/update-messages</changelog>
  <changelog author="avvissu@yandex.by" date="1508414400">- Add configuration file (/etc/connman/main.conf)
- Add ghost lines: main.conf connman connman-vpn</changelog>
  <changelog author="avvissu@yandex.by" date="1508500800">- Remove unrecognized options: disable-gtk-doc, enable-threads,
  disable-iwmx, enable-session-policy</changelog>
  <changelog author="avvissu@yandex.by" date="1509019200">- Change the mode of download_files (sr#521762)
- Remove connman-rpmlintrc (bnc#1057697)
- Add client as a recommended dependency</changelog>
  <changelog author="avvissu@yandex.by" date="1514289600">- Add symlink to network.service (connman-1.35-service.patch)</changelog>
  <changelog author="avvissu@yandex.by" date="1518523200">- Fix build errors due to unsupported header include order with
  newer kernels &gt;=4.15 (connman-1.35-include.patch).</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1557489600">- Update to 1.37:
  * Fix issue with handling invalid gateway addresses.
  * Fix issue with handling updates of default gateway.
  * Fix issue with DHCP servers that require broadcast flag.
  * Add support for option to use gateways as time servers.
  * Add support for option to select default technology.
  * Add support for Address Conflict Detection (ACD).
  * Add support for IPv6 iptables management.
- Change in 1.36:
  * Fix issue with DNS short response on error handling.
  * Fix issue with handling incoming DNS requests.
  * Fix issue with handling empty timeserver list.
  * Fix issue with incorrect DHCP byte order.
  * Fix issue with AllowDomainnameUpdates handling.
  * Fix issue with IPv4 link-local IP conflict error.
  * Fix issue with handling WISPr over TLS connections.
  * Fix issue with WiFi background scanning handling.
  * Fix issue with WiFi disconnect+connect race condition.
  * Fix issue with WiFi scanning and tethering operation.
  * Fix issue with WiFi security change handling.
  * Fix issue with missing signal for WPS changes.
  * Fix issue with online check retry handling.
  * Add support for systemd-resolved backend.
  * Add support for mDNS configuration setup.
- Drop connman-1.35-include.patch
- Drop connman-1.35-resolvconf.patch</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1582027200">- Update to 1.38:
  * Fix issue with online check on IP address update.
  * Fix issue with OpenVPN and encrypted private keys.
  * Fix issue with finishing of VPN connections.
  * Add support for updated stable iwd APIs.
  * Add support for WireGuard networks.
- Spec file cleanup</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1613131200">- Update to 1.39 (bsc#1181751):
  * Fix issue with scanning state synchronization and iwd.
  * Fix issue with invalid key with 4-way handshake offloading.
  * Fix issue with DNS proxy length checks to prevent buffer overflow. (CVE-2021-26675)
  * Fix issue with DHCP leaking stack data via uninitialized variable. (CVE-2021-26676)</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1644580800">- Update to 1.41: (bsc#1194177, bsc#1194176, bsc#1194175)
  * Fix issue with RTNL netlink message alignment.
  * Fix issue with dnsproxy and timeout for TCP feature. (CVE-2022-23097, CVE-2022-23096)
  * Fix issue with dnsproxy and busy loop in TCP server. (CVE-2022-23098)
  * Fix issue with WiFi connection with no passphrase.
  * Add support for wpa_supplicant and WPA3-SAE functionality.
  * Add support for D-Bus ObjectManager interface.
- Renamed downstream patches to separate them from upstream patches
  * Rename 0001-connman-1.35-service.patch to 0100-connman-1.35-service.patch
- Add systemd hardening configuration
  * Rename harden_connman-vpn.service.patch to 0101-harden_connman-vpn.service.patch
  * Rename harden_connman-wait-online.service.patch to 0102-harden_connman-wait-online.service.patch
- Disabled openconnect plugin due to version conflict
- Disabled vpnc plugin for i568 missing dependency
- Disabled hh2serial and tist_working for ppc64le due to version conflict</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1659355200">- Add refcounting to wispr portal detection (bsc#1200190)
  * add 0001-wispr-Rename-wispr_portal_list-to-wispr_portal_hash.patch
  * add 0002-wispr-Ignore-NULL-proxy.patch
  * add 0003-wispr-Add-reference-counter-to-portal-context.patch (CVE-2022-32293)
  * add 0004-wispr-Update-portal-context-references.patch (CVE-2022-32293)
- Fix OOB write in received_data (bsc#1200189)
  * add 0005-gweb-Fix-OOB-write-in-received_data.patch (CVE-2022-32292)</changelog>
</package>
<package pkgid="c5f417b8288499338fb596911f2e2a181429c693196777c96b07be1ec6d073a6" name="connman" arch="src">
  <version epoch="0" ver="1.41" rel="bp154.2.3.1"/>
  <changelog author="guillaume@opensuse.org" date="1380024000">- Update to 1.18</changelog>
  <changelog author="sleep_walker@suse.cz" date="1387281600">- bump to 1.20
  ver 1.20:
    Fix issue with invalid cache of DNS proxy support.
    Fix issue with stopping DHCP for failed connections.
    Fix issue with not stopping IPv4 Link-Local state machine.
    Fix issue with service type handling for unknown interfaces.
    Fix issue with using interface names instead of indexes.
    Fix issue with resetting network retry counter on failure.
    Fix issue with using nameservers when its type is not enabled.
    Fix issue with fallback nameservers not being used.
    Add support for NTP version 3 protocol.
  ver 1.19:
    Fix issue with not correctly storing IPv4 method.
    Fix issue with changing the default service too early.
    Fix issue with service reference count and WISPr checks.
    Fix issue with service auto-connect handling and ordering.
    Fix issue with host and domain names when service changes.
    Fix issue with proxy result and WISPr handling.
    Fix issue with proxy reset when disconnecting.
    Fix issue with handling fallback nameservers.
    Add support for multiple agents.</changelog>
  <changelog author="simon@simotek.net" date="1392811200">- bump to 1.21
    Hidden SSID scanning works again and the security mode of the found WiFi network is checked against the one requested (Tomasz Bursztyka).
    Fix failure when enabling Bluetooth using Bluez 5.x (Zhang Zhengguang)
    GTK-doc generated documentation hasn't seen any use in a long time and has become sufficiently broken in order to be removed (Ross Burton). Notice that ConnMan documentation still continues to exist in the ./doc directory.
    Fix a few minor issues discovered by Coverity (Daniel Wagner) and add DNS buffer validation (Jaehyun Kim).
    Properly handle proxies whether they are IP addresses or host names (Sjoerd Simons)</changelog>
  <changelog author="jmatejka@suse.cz" date="1405425600">- Install connmanctl in connman-client package</changelog>
  <changelog author="sleep_walker@suse.cz" date="1423224000">- bump to 1.28
  ver 1.28:
  Fix issue with DHCPv6 re-transmission timer.
  Fix issue with DHCP service ID option byte order.
  Fix issue with IPv6 connections and SLAAC/DHCPv6.
  Fix issue with telephony and IPv6 autoconfiguration.
  Fix issue with Bluetooth technology setting changes.
  Fix issue with WiFi autoscan interval calculation.
  Fix issue with WiFi and missing BSS signal strength.
  Add support for IPv4 information for WiFi Display.
  ver 1.27:
  Fix issue with memory leak in IP configuration.
  Fix issue with providing random numbers for DHCP.
  Fix issue with handling IN_MOVED_TO inotify events.
  Fix issue with channel selection for WiFi scanning.
  Add support for handling Bluetooth GN and PANU roles.
  ver 1.26:
  Fix issue with missing WiFi security provisioning support.
  Fix issue with immutable setting and provisioned services.
  Fix issue with scheduling DNS cache cleanup procedure.
  Fix issue with IPv6 Privacy setting on service removal.
  Fix issue with DHCPv6 CONFIRM message sending procedure.
  Fix issue with DHCPv6 lease expiration handling support.
  Fix issue with DHCPv4 networks and broadcast flag handling.
  Fix issue with DHCPv4 networks without gateway configuration.
  Fix issue with P2P Peer authorization handling.
  Fix issue with P2P Peer service registration.
  Add support for WiFi Display information elements.
  Add support for systemd-hostnamed integration.
  ver 1.25:
  Fix issue with handling rebind timer for DHCPv6.
  Fix issue with handling DHCP renew transaction.
  Fix issue with user supplied proxy settings and DHCP.
  Fix issue with extra status codes from captive portals.
  Fix issue with service idle state reset on failure.
  Fix issue with DNS label compression handling.
  Add support for experimental P2P Peer service.
  ver 1.24:
  Fix issue with handling slave interfaces.
  Fix issue with handling DHCPv4 broadcast flag.
  Fix issue with handling DHCPv4 lease expiration.
  Fix issue with handling WiFi auto-scanning timeout.
  Fix issue with handling domain and DNS server changes.
  Fix issue with double free and agent messages.
  ver 1.23:
  Fix issue with memory leak in technology handling.
  Fix issue with not removing host route of OpenVPN.
  Fix issue with double free in DHCP cleanup handling.
  Fix issue with handling DHCP method from oFono.
  Fix issue with IPv6-PD when disabling tethering.
  Fix issue with DNS proxy when disabling tethering.
  Fix issue with Bluetooth start and stop interaction.
  Fix issue with Bluetooth PAN networks on adapter change.
  ver 1.22:
  Fix issue with WPS state synchronization.
  Fix issue with DNS servers and default service.
  Fix issue with DHCP client and rebooting state.
  Add support for NTP exponential backoff handling.
  Add support for NTP kiss-of-death packet handling.
  Add support for Ethernet gadget networking.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1438948800">- bump to 1.29
  Fix issue with IPv6 autoconfiguration when disabled.
  Fix issue with IPv6 temporary route handling.
  Fix issue with IPv6 timers for nameservers.
  Fix issue with DHPCv6 and route configuration.
  Fix issue with DHCPv6 source port and buggy servers.
  Fix issue with DHCPv6 rapid commit option length.
  Fix issue with DHCPv6 rapid commit error handling.
  Fix issue with handling invalid WiFi passphrases.
  Fix issue with connecting Ethernet devices.
  Add support for Ethernet and VLAN usage.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1444737600">- bumpt to 1.30
    Fix issue with pending DNS request during server change.
    Fix issue with empty strings in nameservers configuration.
    Fix issue with time servers during IP configuration change.
    Fix issue with 4-way handshake during roaming.
    Fix issue with open WiFi networks security.
    Fix issue with support for WiFi AnonymousIdentity.
    Fix issue with memory leak and DHCPv6 DUID handling.
    Fix issue with DHCP client and P2P interaction.
    Fix issue with handling provision file updates.
    Fix issue with VPN state updates.
    Disable 6to4 support by default.
- add keyring file
- clean with spec-cleaner
- fix builds for all possible distributions and architectures</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1503403200">- bump to 1.35
  besides other things contains fix for CVE-2017-12865</changelog>
  <changelog author="avvissu@yandex.by" date="1504872000">- Remove obsolete macros
- Add polkit-agent-1 dependency
- Use the %tmpfiles_create macro
- Removal of ldconfig scriptlets from all packages
- Add connman-wait-online.service in post{un}
- Spec file cleanup</changelog>
  <changelog author="avvissu@yandex.by" date="1507032000">- Add connman-1.35-resolvconf.patch
- Activate connman.service if the network services disabled
- Add info in /var/adm/update-messages</changelog>
  <changelog author="avvissu@yandex.by" date="1508414400">- Add configuration file (/etc/connman/main.conf)
- Add ghost lines: main.conf connman connman-vpn</changelog>
  <changelog author="avvissu@yandex.by" date="1508500800">- Remove unrecognized options: disable-gtk-doc, enable-threads,
  disable-iwmx, enable-session-policy</changelog>
  <changelog author="avvissu@yandex.by" date="1509019200">- Change the mode of download_files (sr#521762)
- Remove connman-rpmlintrc (bnc#1057697)
- Add client as a recommended dependency</changelog>
  <changelog author="avvissu@yandex.by" date="1514289600">- Add symlink to network.service (connman-1.35-service.patch)</changelog>
  <changelog author="avvissu@yandex.by" date="1518523200">- Fix build errors due to unsupported header include order with
  newer kernels &gt;=4.15 (connman-1.35-include.patch).</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1557489600">- Update to 1.37:
  * Fix issue with handling invalid gateway addresses.
  * Fix issue with handling updates of default gateway.
  * Fix issue with DHCP servers that require broadcast flag.
  * Add support for option to use gateways as time servers.
  * Add support for option to select default technology.
  * Add support for Address Conflict Detection (ACD).
  * Add support for IPv6 iptables management.
- Change in 1.36:
  * Fix issue with DNS short response on error handling.
  * Fix issue with handling incoming DNS requests.
  * Fix issue with handling empty timeserver list.
  * Fix issue with incorrect DHCP byte order.
  * Fix issue with AllowDomainnameUpdates handling.
  * Fix issue with IPv4 link-local IP conflict error.
  * Fix issue with handling WISPr over TLS connections.
  * Fix issue with WiFi background scanning handling.
  * Fix issue with WiFi disconnect+connect race condition.
  * Fix issue with WiFi scanning and tethering operation.
  * Fix issue with WiFi security change handling.
  * Fix issue with missing signal for WPS changes.
  * Fix issue with online check retry handling.
  * Add support for systemd-resolved backend.
  * Add support for mDNS configuration setup.
- Drop connman-1.35-include.patch
- Drop connman-1.35-resolvconf.patch</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1582027200">- Update to 1.38:
  * Fix issue with online check on IP address update.
  * Fix issue with OpenVPN and encrypted private keys.
  * Fix issue with finishing of VPN connections.
  * Add support for updated stable iwd APIs.
  * Add support for WireGuard networks.
- Spec file cleanup</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1613131200">- Update to 1.39 (bsc#1181751):
  * Fix issue with scanning state synchronization and iwd.
  * Fix issue with invalid key with 4-way handshake offloading.
  * Fix issue with DNS proxy length checks to prevent buffer overflow. (CVE-2021-26675)
  * Fix issue with DHCP leaking stack data via uninitialized variable. (CVE-2021-26676)</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1644580800">- Update to 1.41: (bsc#1194177, bsc#1194176, bsc#1194175)
  * Fix issue with RTNL netlink message alignment.
  * Fix issue with dnsproxy and timeout for TCP feature. (CVE-2022-23097, CVE-2022-23096)
  * Fix issue with dnsproxy and busy loop in TCP server. (CVE-2022-23098)
  * Fix issue with WiFi connection with no passphrase.
  * Add support for wpa_supplicant and WPA3-SAE functionality.
  * Add support for D-Bus ObjectManager interface.
- Renamed downstream patches to separate them from upstream patches
  * Rename 0001-connman-1.35-service.patch to 0100-connman-1.35-service.patch
- Add systemd hardening configuration
  * Rename harden_connman-vpn.service.patch to 0101-harden_connman-vpn.service.patch
  * Rename harden_connman-wait-online.service.patch to 0102-harden_connman-wait-online.service.patch
- Disabled openconnect plugin due to version conflict
- Disabled vpnc plugin for i568 missing dependency
- Disabled hh2serial and tist_working for ppc64le due to version conflict</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1659355200">- Add refcounting to wispr portal detection (bsc#1200190)
  * add 0001-wispr-Rename-wispr_portal_list-to-wispr_portal_hash.patch
  * add 0002-wispr-Ignore-NULL-proxy.patch
  * add 0003-wispr-Add-reference-counter-to-portal-context.patch (CVE-2022-32293)
  * add 0004-wispr-Update-portal-context-references.patch (CVE-2022-32293)
- Fix OOB write in received_data (bsc#1200189)
  * add 0005-gweb-Fix-OOB-write-in-received_data.patch (CVE-2022-32292)</changelog>
</package>
<package pkgid="61a6245847cc5f57997c31f65f050fa96fcc551dd0fa8bfcb63f54b530cfa972" name="connman" arch="x86_64">
  <version epoch="0" ver="1.41" rel="bp154.2.3.1"/>
  <changelog author="sleep_walker@suse.cz" date="1423224000">- bump to 1.28
  ver 1.28:
  Fix issue with DHCPv6 re-transmission timer.
  Fix issue with DHCP service ID option byte order.
  Fix issue with IPv6 connections and SLAAC/DHCPv6.
  Fix issue with telephony and IPv6 autoconfiguration.
  Fix issue with Bluetooth technology setting changes.
  Fix issue with WiFi autoscan interval calculation.
  Fix issue with WiFi and missing BSS signal strength.
  Add support for IPv4 information for WiFi Display.
  ver 1.27:
  Fix issue with memory leak in IP configuration.
  Fix issue with providing random numbers for DHCP.
  Fix issue with handling IN_MOVED_TO inotify events.
  Fix issue with channel selection for WiFi scanning.
  Add support for handling Bluetooth GN and PANU roles.
  ver 1.26:
  Fix issue with missing WiFi security provisioning support.
  Fix issue with immutable setting and provisioned services.
  Fix issue with scheduling DNS cache cleanup procedure.
  Fix issue with IPv6 Privacy setting on service removal.
  Fix issue with DHCPv6 CONFIRM message sending procedure.
  Fix issue with DHCPv6 lease expiration handling support.
  Fix issue with DHCPv4 networks and broadcast flag handling.
  Fix issue with DHCPv4 networks without gateway configuration.
  Fix issue with P2P Peer authorization handling.
  Fix issue with P2P Peer service registration.
  Add support for WiFi Display information elements.
  Add support for systemd-hostnamed integration.
  ver 1.25:
  Fix issue with handling rebind timer for DHCPv6.
  Fix issue with handling DHCP renew transaction.
  Fix issue with user supplied proxy settings and DHCP.
  Fix issue with extra status codes from captive portals.
  Fix issue with service idle state reset on failure.
  Fix issue with DNS label compression handling.
  Add support for experimental P2P Peer service.
  ver 1.24:
  Fix issue with handling slave interfaces.
  Fix issue with handling DHCPv4 broadcast flag.
  Fix issue with handling DHCPv4 lease expiration.
  Fix issue with handling WiFi auto-scanning timeout.
  Fix issue with handling domain and DNS server changes.
  Fix issue with double free and agent messages.
  ver 1.23:
  Fix issue with memory leak in technology handling.
  Fix issue with not removing host route of OpenVPN.
  Fix issue with double free in DHCP cleanup handling.
  Fix issue with handling DHCP method from oFono.
  Fix issue with IPv6-PD when disabling tethering.
  Fix issue with DNS proxy when disabling tethering.
  Fix issue with Bluetooth start and stop interaction.
  Fix issue with Bluetooth PAN networks on adapter change.
  ver 1.22:
  Fix issue with WPS state synchronization.
  Fix issue with DNS servers and default service.
  Fix issue with DHCP client and rebooting state.
  Add support for NTP exponential backoff handling.
  Add support for NTP kiss-of-death packet handling.
  Add support for Ethernet gadget networking.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1438948800">- bump to 1.29
  Fix issue with IPv6 autoconfiguration when disabled.
  Fix issue with IPv6 temporary route handling.
  Fix issue with IPv6 timers for nameservers.
  Fix issue with DHPCv6 and route configuration.
  Fix issue with DHCPv6 source port and buggy servers.
  Fix issue with DHCPv6 rapid commit option length.
  Fix issue with DHCPv6 rapid commit error handling.
  Fix issue with handling invalid WiFi passphrases.
  Fix issue with connecting Ethernet devices.
  Add support for Ethernet and VLAN usage.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1444737600">- bumpt to 1.30
    Fix issue with pending DNS request during server change.
    Fix issue with empty strings in nameservers configuration.
    Fix issue with time servers during IP configuration change.
    Fix issue with 4-way handshake during roaming.
    Fix issue with open WiFi networks security.
    Fix issue with support for WiFi AnonymousIdentity.
    Fix issue with memory leak and DHCPv6 DUID handling.
    Fix issue with DHCP client and P2P interaction.
    Fix issue with handling provision file updates.
    Fix issue with VPN state updates.
    Disable 6to4 support by default.
- add keyring file
- clean with spec-cleaner
- fix builds for all possible distributions and architectures</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1503403200">- bump to 1.35
  besides other things contains fix for CVE-2017-12865</changelog>
  <changelog author="avvissu@yandex.by" date="1504872000">- Remove obsolete macros
- Add polkit-agent-1 dependency
- Use the %tmpfiles_create macro
- Removal of ldconfig scriptlets from all packages
- Add connman-wait-online.service in post{un}
- Spec file cleanup</changelog>
  <changelog author="avvissu@yandex.by" date="1507032000">- Add connman-1.35-resolvconf.patch
- Activate connman.service if the network services disabled
- Add info in /var/adm/update-messages</changelog>
  <changelog author="avvissu@yandex.by" date="1508414400">- Add configuration file (/etc/connman/main.conf)
- Add ghost lines: main.conf connman connman-vpn</changelog>
  <changelog author="avvissu@yandex.by" date="1508500800">- Remove unrecognized options: disable-gtk-doc, enable-threads,
  disable-iwmx, enable-session-policy</changelog>
  <changelog author="avvissu@yandex.by" date="1509019200">- Change the mode of download_files (sr#521762)
- Remove connman-rpmlintrc (bnc#1057697)
- Add client as a recommended dependency</changelog>
  <changelog author="avvissu@yandex.by" date="1514289600">- Add symlink to network.service (connman-1.35-service.patch)</changelog>
  <changelog author="avvissu@yandex.by" date="1518523200">- Fix build errors due to unsupported header include order with
  newer kernels &gt;=4.15 (connman-1.35-include.patch).</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1557489600">- Update to 1.37:
  * Fix issue with handling invalid gateway addresses.
  * Fix issue with handling updates of default gateway.
  * Fix issue with DHCP servers that require broadcast flag.
  * Add support for option to use gateways as time servers.
  * Add support for option to select default technology.
  * Add support for Address Conflict Detection (ACD).
  * Add support for IPv6 iptables management.
- Change in 1.36:
  * Fix issue with DNS short response on error handling.
  * Fix issue with handling incoming DNS requests.
  * Fix issue with handling empty timeserver list.
  * Fix issue with incorrect DHCP byte order.
  * Fix issue with AllowDomainnameUpdates handling.
  * Fix issue with IPv4 link-local IP conflict error.
  * Fix issue with handling WISPr over TLS connections.
  * Fix issue with WiFi background scanning handling.
  * Fix issue with WiFi disconnect+connect race condition.
  * Fix issue with WiFi scanning and tethering operation.
  * Fix issue with WiFi security change handling.
  * Fix issue with missing signal for WPS changes.
  * Fix issue with online check retry handling.
  * Add support for systemd-resolved backend.
  * Add support for mDNS configuration setup.
- Drop connman-1.35-include.patch
- Drop connman-1.35-resolvconf.patch</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1582027200">- Update to 1.38:
  * Fix issue with online check on IP address update.
  * Fix issue with OpenVPN and encrypted private keys.
  * Fix issue with finishing of VPN connections.
  * Add support for updated stable iwd APIs.
  * Add support for WireGuard networks.
- Spec file cleanup</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1613131200">- Update to 1.39 (bsc#1181751):
  * Fix issue with scanning state synchronization and iwd.
  * Fix issue with invalid key with 4-way handshake offloading.
  * Fix issue with DNS proxy length checks to prevent buffer overflow. (CVE-2021-26675)
  * Fix issue with DHCP leaking stack data via uninitialized variable. (CVE-2021-26676)</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1644580800">- Update to 1.41: (bsc#1194177, bsc#1194176, bsc#1194175)
  * Fix issue with RTNL netlink message alignment.
  * Fix issue with dnsproxy and timeout for TCP feature. (CVE-2022-23097, CVE-2022-23096)
  * Fix issue with dnsproxy and busy loop in TCP server. (CVE-2022-23098)
  * Fix issue with WiFi connection with no passphrase.
  * Add support for wpa_supplicant and WPA3-SAE functionality.
  * Add support for D-Bus ObjectManager interface.
- Renamed downstream patches to separate them from upstream patches
  * Rename 0001-connman-1.35-service.patch to 0100-connman-1.35-service.patch
- Add systemd hardening configuration
  * Rename harden_connman-vpn.service.patch to 0101-harden_connman-vpn.service.patch
  * Rename harden_connman-wait-online.service.patch to 0102-harden_connman-wait-online.service.patch
- Disabled openconnect plugin due to version conflict
- Disabled vpnc plugin for i568 missing dependency
- Disabled hh2serial and tist_working for ppc64le due to version conflict</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1659355200">- Add refcounting to wispr portal detection (bsc#1200190)
  * add 0001-wispr-Rename-wispr_portal_list-to-wispr_portal_hash.patch
  * add 0002-wispr-Ignore-NULL-proxy.patch
  * add 0003-wispr-Add-reference-counter-to-portal-context.patch (CVE-2022-32293)
  * add 0004-wispr-Update-portal-context-references.patch (CVE-2022-32293)
- Fix OOB write in received_data (bsc#1200189)
  * add 0005-gweb-Fix-OOB-write-in-received_data.patch (CVE-2022-32292)</changelog>
</package>
<package pkgid="337b63e294a2a92b311447cea1ec63960125e46459a111b0e8a6fa5af04bf8bb" name="connman-client" arch="aarch64">
  <version epoch="0" ver="1.41" rel="bp154.2.3.1"/>
  <changelog author="sleep_walker@suse.cz" date="1423224000">- bump to 1.28
  ver 1.28:
  Fix issue with DHCPv6 re-transmission timer.
  Fix issue with DHCP service ID option byte order.
  Fix issue with IPv6 connections and SLAAC/DHCPv6.
  Fix issue with telephony and IPv6 autoconfiguration.
  Fix issue with Bluetooth technology setting changes.
  Fix issue with WiFi autoscan interval calculation.
  Fix issue with WiFi and missing BSS signal strength.
  Add support for IPv4 information for WiFi Display.
  ver 1.27:
  Fix issue with memory leak in IP configuration.
  Fix issue with providing random numbers for DHCP.
  Fix issue with handling IN_MOVED_TO inotify events.
  Fix issue with channel selection for WiFi scanning.
  Add support for handling Bluetooth GN and PANU roles.
  ver 1.26:
  Fix issue with missing WiFi security provisioning support.
  Fix issue with immutable setting and provisioned services.
  Fix issue with scheduling DNS cache cleanup procedure.
  Fix issue with IPv6 Privacy setting on service removal.
  Fix issue with DHCPv6 CONFIRM message sending procedure.
  Fix issue with DHCPv6 lease expiration handling support.
  Fix issue with DHCPv4 networks and broadcast flag handling.
  Fix issue with DHCPv4 networks without gateway configuration.
  Fix issue with P2P Peer authorization handling.
  Fix issue with P2P Peer service registration.
  Add support for WiFi Display information elements.
  Add support for systemd-hostnamed integration.
  ver 1.25:
  Fix issue with handling rebind timer for DHCPv6.
  Fix issue with handling DHCP renew transaction.
  Fix issue with user supplied proxy settings and DHCP.
  Fix issue with extra status codes from captive portals.
  Fix issue with service idle state reset on failure.
  Fix issue with DNS label compression handling.
  Add support for experimental P2P Peer service.
  ver 1.24:
  Fix issue with handling slave interfaces.
  Fix issue with handling DHCPv4 broadcast flag.
  Fix issue with handling DHCPv4 lease expiration.
  Fix issue with handling WiFi auto-scanning timeout.
  Fix issue with handling domain and DNS server changes.
  Fix issue with double free and agent messages.
  ver 1.23:
  Fix issue with memory leak in technology handling.
  Fix issue with not removing host route of OpenVPN.
  Fix issue with double free in DHCP cleanup handling.
  Fix issue with handling DHCP method from oFono.
  Fix issue with IPv6-PD when disabling tethering.
  Fix issue with DNS proxy when disabling tethering.
  Fix issue with Bluetooth start and stop interaction.
  Fix issue with Bluetooth PAN networks on adapter change.
  ver 1.22:
  Fix issue with WPS state synchronization.
  Fix issue with DNS servers and default service.
  Fix issue with DHCP client and rebooting state.
  Add support for NTP exponential backoff handling.
  Add support for NTP kiss-of-death packet handling.
  Add support for Ethernet gadget networking.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1438948800">- bump to 1.29
  Fix issue with IPv6 autoconfiguration when disabled.
  Fix issue with IPv6 temporary route handling.
  Fix issue with IPv6 timers for nameservers.
  Fix issue with DHPCv6 and route configuration.
  Fix issue with DHCPv6 source port and buggy servers.
  Fix issue with DHCPv6 rapid commit option length.
  Fix issue with DHCPv6 rapid commit error handling.
  Fix issue with handling invalid WiFi passphrases.
  Fix issue with connecting Ethernet devices.
  Add support for Ethernet and VLAN usage.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1444737600">- bumpt to 1.30
    Fix issue with pending DNS request during server change.
    Fix issue with empty strings in nameservers configuration.
    Fix issue with time servers during IP configuration change.
    Fix issue with 4-way handshake during roaming.
    Fix issue with open WiFi networks security.
    Fix issue with support for WiFi AnonymousIdentity.
    Fix issue with memory leak and DHCPv6 DUID handling.
    Fix issue with DHCP client and P2P interaction.
    Fix issue with handling provision file updates.
    Fix issue with VPN state updates.
    Disable 6to4 support by default.
- add keyring file
- clean with spec-cleaner
- fix builds for all possible distributions and architectures</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1503403200">- bump to 1.35
  besides other things contains fix for CVE-2017-12865</changelog>
  <changelog author="avvissu@yandex.by" date="1504872000">- Remove obsolete macros
- Add polkit-agent-1 dependency
- Use the %tmpfiles_create macro
- Removal of ldconfig scriptlets from all packages
- Add connman-wait-online.service in post{un}
- Spec file cleanup</changelog>
  <changelog author="avvissu@yandex.by" date="1507032000">- Add connman-1.35-resolvconf.patch
- Activate connman.service if the network services disabled
- Add info in /var/adm/update-messages</changelog>
  <changelog author="avvissu@yandex.by" date="1508414400">- Add configuration file (/etc/connman/main.conf)
- Add ghost lines: main.conf connman connman-vpn</changelog>
  <changelog author="avvissu@yandex.by" date="1508500800">- Remove unrecognized options: disable-gtk-doc, enable-threads,
  disable-iwmx, enable-session-policy</changelog>
  <changelog author="avvissu@yandex.by" date="1509019200">- Change the mode of download_files (sr#521762)
- Remove connman-rpmlintrc (bnc#1057697)
- Add client as a recommended dependency</changelog>
  <changelog author="avvissu@yandex.by" date="1514289600">- Add symlink to network.service (connman-1.35-service.patch)</changelog>
  <changelog author="avvissu@yandex.by" date="1518523200">- Fix build errors due to unsupported header include order with
  newer kernels &gt;=4.15 (connman-1.35-include.patch).</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1557489600">- Update to 1.37:
  * Fix issue with handling invalid gateway addresses.
  * Fix issue with handling updates of default gateway.
  * Fix issue with DHCP servers that require broadcast flag.
  * Add support for option to use gateways as time servers.
  * Add support for option to select default technology.
  * Add support for Address Conflict Detection (ACD).
  * Add support for IPv6 iptables management.
- Change in 1.36:
  * Fix issue with DNS short response on error handling.
  * Fix issue with handling incoming DNS requests.
  * Fix issue with handling empty timeserver list.
  * Fix issue with incorrect DHCP byte order.
  * Fix issue with AllowDomainnameUpdates handling.
  * Fix issue with IPv4 link-local IP conflict error.
  * Fix issue with handling WISPr over TLS connections.
  * Fix issue with WiFi background scanning handling.
  * Fix issue with WiFi disconnect+connect race condition.
  * Fix issue with WiFi scanning and tethering operation.
  * Fix issue with WiFi security change handling.
  * Fix issue with missing signal for WPS changes.
  * Fix issue with online check retry handling.
  * Add support for systemd-resolved backend.
  * Add support for mDNS configuration setup.
- Drop connman-1.35-include.patch
- Drop connman-1.35-resolvconf.patch</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1582027200">- Update to 1.38:
  * Fix issue with online check on IP address update.
  * Fix issue with OpenVPN and encrypted private keys.
  * Fix issue with finishing of VPN connections.
  * Add support for updated stable iwd APIs.
  * Add support for WireGuard networks.
- Spec file cleanup</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1613131200">- Update to 1.39 (bsc#1181751):
  * Fix issue with scanning state synchronization and iwd.
  * Fix issue with invalid key with 4-way handshake offloading.
  * Fix issue with DNS proxy length checks to prevent buffer overflow. (CVE-2021-26675)
  * Fix issue with DHCP leaking stack data via uninitialized variable. (CVE-2021-26676)</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1644580800">- Update to 1.41: (bsc#1194177, bsc#1194176, bsc#1194175)
  * Fix issue with RTNL netlink message alignment.
  * Fix issue with dnsproxy and timeout for TCP feature. (CVE-2022-23097, CVE-2022-23096)
  * Fix issue with dnsproxy and busy loop in TCP server. (CVE-2022-23098)
  * Fix issue with WiFi connection with no passphrase.
  * Add support for wpa_supplicant and WPA3-SAE functionality.
  * Add support for D-Bus ObjectManager interface.
- Renamed downstream patches to separate them from upstream patches
  * Rename 0001-connman-1.35-service.patch to 0100-connman-1.35-service.patch
- Add systemd hardening configuration
  * Rename harden_connman-vpn.service.patch to 0101-harden_connman-vpn.service.patch
  * Rename harden_connman-wait-online.service.patch to 0102-harden_connman-wait-online.service.patch
- Disabled openconnect plugin due to version conflict
- Disabled vpnc plugin for i568 missing dependency
- Disabled hh2serial and tist_working for ppc64le due to version conflict</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1659355200">- Add refcounting to wispr portal detection (bsc#1200190)
  * add 0001-wispr-Rename-wispr_portal_list-to-wispr_portal_hash.patch
  * add 0002-wispr-Ignore-NULL-proxy.patch
  * add 0003-wispr-Add-reference-counter-to-portal-context.patch (CVE-2022-32293)
  * add 0004-wispr-Update-portal-context-references.patch (CVE-2022-32293)
- Fix OOB write in received_data (bsc#1200189)
  * add 0005-gweb-Fix-OOB-write-in-received_data.patch (CVE-2022-32292)</changelog>
</package>
<package pkgid="f9108aa8967447b1cc44d552e37ec536bf35b21b8054f1ff766253ba3d1aa833" name="connman-client" arch="i586">
  <version epoch="0" ver="1.41" rel="bp154.2.3.1"/>
  <changelog author="sleep_walker@suse.cz" date="1423224000">- bump to 1.28
  ver 1.28:
  Fix issue with DHCPv6 re-transmission timer.
  Fix issue with DHCP service ID option byte order.
  Fix issue with IPv6 connections and SLAAC/DHCPv6.
  Fix issue with telephony and IPv6 autoconfiguration.
  Fix issue with Bluetooth technology setting changes.
  Fix issue with WiFi autoscan interval calculation.
  Fix issue with WiFi and missing BSS signal strength.
  Add support for IPv4 information for WiFi Display.
  ver 1.27:
  Fix issue with memory leak in IP configuration.
  Fix issue with providing random numbers for DHCP.
  Fix issue with handling IN_MOVED_TO inotify events.
  Fix issue with channel selection for WiFi scanning.
  Add support for handling Bluetooth GN and PANU roles.
  ver 1.26:
  Fix issue with missing WiFi security provisioning support.
  Fix issue with immutable setting and provisioned services.
  Fix issue with scheduling DNS cache cleanup procedure.
  Fix issue with IPv6 Privacy setting on service removal.
  Fix issue with DHCPv6 CONFIRM message sending procedure.
  Fix issue with DHCPv6 lease expiration handling support.
  Fix issue with DHCPv4 networks and broadcast flag handling.
  Fix issue with DHCPv4 networks without gateway configuration.
  Fix issue with P2P Peer authorization handling.
  Fix issue with P2P Peer service registration.
  Add support for WiFi Display information elements.
  Add support for systemd-hostnamed integration.
  ver 1.25:
  Fix issue with handling rebind timer for DHCPv6.
  Fix issue with handling DHCP renew transaction.
  Fix issue with user supplied proxy settings and DHCP.
  Fix issue with extra status codes from captive portals.
  Fix issue with service idle state reset on failure.
  Fix issue with DNS label compression handling.
  Add support for experimental P2P Peer service.
  ver 1.24:
  Fix issue with handling slave interfaces.
  Fix issue with handling DHCPv4 broadcast flag.
  Fix issue with handling DHCPv4 lease expiration.
  Fix issue with handling WiFi auto-scanning timeout.
  Fix issue with handling domain and DNS server changes.
  Fix issue with double free and agent messages.
  ver 1.23:
  Fix issue with memory leak in technology handling.
  Fix issue with not removing host route of OpenVPN.
  Fix issue with double free in DHCP cleanup handling.
  Fix issue with handling DHCP method from oFono.
  Fix issue with IPv6-PD when disabling tethering.
  Fix issue with DNS proxy when disabling tethering.
  Fix issue with Bluetooth start and stop interaction.
  Fix issue with Bluetooth PAN networks on adapter change.
  ver 1.22:
  Fix issue with WPS state synchronization.
  Fix issue with DNS servers and default service.
  Fix issue with DHCP client and rebooting state.
  Add support for NTP exponential backoff handling.
  Add support for NTP kiss-of-death packet handling.
  Add support for Ethernet gadget networking.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1438948800">- bump to 1.29
  Fix issue with IPv6 autoconfiguration when disabled.
  Fix issue with IPv6 temporary route handling.
  Fix issue with IPv6 timers for nameservers.
  Fix issue with DHPCv6 and route configuration.
  Fix issue with DHCPv6 source port and buggy servers.
  Fix issue with DHCPv6 rapid commit option length.
  Fix issue with DHCPv6 rapid commit error handling.
  Fix issue with handling invalid WiFi passphrases.
  Fix issue with connecting Ethernet devices.
  Add support for Ethernet and VLAN usage.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1444737600">- bumpt to 1.30
    Fix issue with pending DNS request during server change.
    Fix issue with empty strings in nameservers configuration.
    Fix issue with time servers during IP configuration change.
    Fix issue with 4-way handshake during roaming.
    Fix issue with open WiFi networks security.
    Fix issue with support for WiFi AnonymousIdentity.
    Fix issue with memory leak and DHCPv6 DUID handling.
    Fix issue with DHCP client and P2P interaction.
    Fix issue with handling provision file updates.
    Fix issue with VPN state updates.
    Disable 6to4 support by default.
- add keyring file
- clean with spec-cleaner
- fix builds for all possible distributions and architectures</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1503403200">- bump to 1.35
  besides other things contains fix for CVE-2017-12865</changelog>
  <changelog author="avvissu@yandex.by" date="1504872000">- Remove obsolete macros
- Add polkit-agent-1 dependency
- Use the %tmpfiles_create macro
- Removal of ldconfig scriptlets from all packages
- Add connman-wait-online.service in post{un}
- Spec file cleanup</changelog>
  <changelog author="avvissu@yandex.by" date="1507032000">- Add connman-1.35-resolvconf.patch
- Activate connman.service if the network services disabled
- Add info in /var/adm/update-messages</changelog>
  <changelog author="avvissu@yandex.by" date="1508414400">- Add configuration file (/etc/connman/main.conf)
- Add ghost lines: main.conf connman connman-vpn</changelog>
  <changelog author="avvissu@yandex.by" date="1508500800">- Remove unrecognized options: disable-gtk-doc, enable-threads,
  disable-iwmx, enable-session-policy</changelog>
  <changelog author="avvissu@yandex.by" date="1509019200">- Change the mode of download_files (sr#521762)
- Remove connman-rpmlintrc (bnc#1057697)
- Add client as a recommended dependency</changelog>
  <changelog author="avvissu@yandex.by" date="1514289600">- Add symlink to network.service (connman-1.35-service.patch)</changelog>
  <changelog author="avvissu@yandex.by" date="1518523200">- Fix build errors due to unsupported header include order with
  newer kernels &gt;=4.15 (connman-1.35-include.patch).</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1557489600">- Update to 1.37:
  * Fix issue with handling invalid gateway addresses.
  * Fix issue with handling updates of default gateway.
  * Fix issue with DHCP servers that require broadcast flag.
  * Add support for option to use gateways as time servers.
  * Add support for option to select default technology.
  * Add support for Address Conflict Detection (ACD).
  * Add support for IPv6 iptables management.
- Change in 1.36:
  * Fix issue with DNS short response on error handling.
  * Fix issue with handling incoming DNS requests.
  * Fix issue with handling empty timeserver list.
  * Fix issue with incorrect DHCP byte order.
  * Fix issue with AllowDomainnameUpdates handling.
  * Fix issue with IPv4 link-local IP conflict error.
  * Fix issue with handling WISPr over TLS connections.
  * Fix issue with WiFi background scanning handling.
  * Fix issue with WiFi disconnect+connect race condition.
  * Fix issue with WiFi scanning and tethering operation.
  * Fix issue with WiFi security change handling.
  * Fix issue with missing signal for WPS changes.
  * Fix issue with online check retry handling.
  * Add support for systemd-resolved backend.
  * Add support for mDNS configuration setup.
- Drop connman-1.35-include.patch
- Drop connman-1.35-resolvconf.patch</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1582027200">- Update to 1.38:
  * Fix issue with online check on IP address update.
  * Fix issue with OpenVPN and encrypted private keys.
  * Fix issue with finishing of VPN connections.
  * Add support for updated stable iwd APIs.
  * Add support for WireGuard networks.
- Spec file cleanup</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1613131200">- Update to 1.39 (bsc#1181751):
  * Fix issue with scanning state synchronization and iwd.
  * Fix issue with invalid key with 4-way handshake offloading.
  * Fix issue with DNS proxy length checks to prevent buffer overflow. (CVE-2021-26675)
  * Fix issue with DHCP leaking stack data via uninitialized variable. (CVE-2021-26676)</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1644580800">- Update to 1.41: (bsc#1194177, bsc#1194176, bsc#1194175)
  * Fix issue with RTNL netlink message alignment.
  * Fix issue with dnsproxy and timeout for TCP feature. (CVE-2022-23097, CVE-2022-23096)
  * Fix issue with dnsproxy and busy loop in TCP server. (CVE-2022-23098)
  * Fix issue with WiFi connection with no passphrase.
  * Add support for wpa_supplicant and WPA3-SAE functionality.
  * Add support for D-Bus ObjectManager interface.
- Renamed downstream patches to separate them from upstream patches
  * Rename 0001-connman-1.35-service.patch to 0100-connman-1.35-service.patch
- Add systemd hardening configuration
  * Rename harden_connman-vpn.service.patch to 0101-harden_connman-vpn.service.patch
  * Rename harden_connman-wait-online.service.patch to 0102-harden_connman-wait-online.service.patch
- Disabled openconnect plugin due to version conflict
- Disabled vpnc plugin for i568 missing dependency
- Disabled hh2serial and tist_working for ppc64le due to version conflict</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1659355200">- Add refcounting to wispr portal detection (bsc#1200190)
  * add 0001-wispr-Rename-wispr_portal_list-to-wispr_portal_hash.patch
  * add 0002-wispr-Ignore-NULL-proxy.patch
  * add 0003-wispr-Add-reference-counter-to-portal-context.patch (CVE-2022-32293)
  * add 0004-wispr-Update-portal-context-references.patch (CVE-2022-32293)
- Fix OOB write in received_data (bsc#1200189)
  * add 0005-gweb-Fix-OOB-write-in-received_data.patch (CVE-2022-32292)</changelog>
</package>
<package pkgid="b5daa8be50f7f3e1363ee609f736802be8c23cf11c954ff03e9128869762b286" name="connman-client" arch="ppc64le">
  <version epoch="0" ver="1.41" rel="bp154.2.3.1"/>
  <changelog author="sleep_walker@suse.cz" date="1423224000">- bump to 1.28
  ver 1.28:
  Fix issue with DHCPv6 re-transmission timer.
  Fix issue with DHCP service ID option byte order.
  Fix issue with IPv6 connections and SLAAC/DHCPv6.
  Fix issue with telephony and IPv6 autoconfiguration.
  Fix issue with Bluetooth technology setting changes.
  Fix issue with WiFi autoscan interval calculation.
  Fix issue with WiFi and missing BSS signal strength.
  Add support for IPv4 information for WiFi Display.
  ver 1.27:
  Fix issue with memory leak in IP configuration.
  Fix issue with providing random numbers for DHCP.
  Fix issue with handling IN_MOVED_TO inotify events.
  Fix issue with channel selection for WiFi scanning.
  Add support for handling Bluetooth GN and PANU roles.
  ver 1.26:
  Fix issue with missing WiFi security provisioning support.
  Fix issue with immutable setting and provisioned services.
  Fix issue with scheduling DNS cache cleanup procedure.
  Fix issue with IPv6 Privacy setting on service removal.
  Fix issue with DHCPv6 CONFIRM message sending procedure.
  Fix issue with DHCPv6 lease expiration handling support.
  Fix issue with DHCPv4 networks and broadcast flag handling.
  Fix issue with DHCPv4 networks without gateway configuration.
  Fix issue with P2P Peer authorization handling.
  Fix issue with P2P Peer service registration.
  Add support for WiFi Display information elements.
  Add support for systemd-hostnamed integration.
  ver 1.25:
  Fix issue with handling rebind timer for DHCPv6.
  Fix issue with handling DHCP renew transaction.
  Fix issue with user supplied proxy settings and DHCP.
  Fix issue with extra status codes from captive portals.
  Fix issue with service idle state reset on failure.
  Fix issue with DNS label compression handling.
  Add support for experimental P2P Peer service.
  ver 1.24:
  Fix issue with handling slave interfaces.
  Fix issue with handling DHCPv4 broadcast flag.
  Fix issue with handling DHCPv4 lease expiration.
  Fix issue with handling WiFi auto-scanning timeout.
  Fix issue with handling domain and DNS server changes.
  Fix issue with double free and agent messages.
  ver 1.23:
  Fix issue with memory leak in technology handling.
  Fix issue with not removing host route of OpenVPN.
  Fix issue with double free in DHCP cleanup handling.
  Fix issue with handling DHCP method from oFono.
  Fix issue with IPv6-PD when disabling tethering.
  Fix issue with DNS proxy when disabling tethering.
  Fix issue with Bluetooth start and stop interaction.
  Fix issue with Bluetooth PAN networks on adapter change.
  ver 1.22:
  Fix issue with WPS state synchronization.
  Fix issue with DNS servers and default service.
  Fix issue with DHCP client and rebooting state.
  Add support for NTP exponential backoff handling.
  Add support for NTP kiss-of-death packet handling.
  Add support for Ethernet gadget networking.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1438948800">- bump to 1.29
  Fix issue with IPv6 autoconfiguration when disabled.
  Fix issue with IPv6 temporary route handling.
  Fix issue with IPv6 timers for nameservers.
  Fix issue with DHPCv6 and route configuration.
  Fix issue with DHCPv6 source port and buggy servers.
  Fix issue with DHCPv6 rapid commit option length.
  Fix issue with DHCPv6 rapid commit error handling.
  Fix issue with handling invalid WiFi passphrases.
  Fix issue with connecting Ethernet devices.
  Add support for Ethernet and VLAN usage.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1444737600">- bumpt to 1.30
    Fix issue with pending DNS request during server change.
    Fix issue with empty strings in nameservers configuration.
    Fix issue with time servers during IP configuration change.
    Fix issue with 4-way handshake during roaming.
    Fix issue with open WiFi networks security.
    Fix issue with support for WiFi AnonymousIdentity.
    Fix issue with memory leak and DHCPv6 DUID handling.
    Fix issue with DHCP client and P2P interaction.
    Fix issue with handling provision file updates.
    Fix issue with VPN state updates.
    Disable 6to4 support by default.
- add keyring file
- clean with spec-cleaner
- fix builds for all possible distributions and architectures</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1503403200">- bump to 1.35
  besides other things contains fix for CVE-2017-12865</changelog>
  <changelog author="avvissu@yandex.by" date="1504872000">- Remove obsolete macros
- Add polkit-agent-1 dependency
- Use the %tmpfiles_create macro
- Removal of ldconfig scriptlets from all packages
- Add connman-wait-online.service in post{un}
- Spec file cleanup</changelog>
  <changelog author="avvissu@yandex.by" date="1507032000">- Add connman-1.35-resolvconf.patch
- Activate connman.service if the network services disabled
- Add info in /var/adm/update-messages</changelog>
  <changelog author="avvissu@yandex.by" date="1508414400">- Add configuration file (/etc/connman/main.conf)
- Add ghost lines: main.conf connman connman-vpn</changelog>
  <changelog author="avvissu@yandex.by" date="1508500800">- Remove unrecognized options: disable-gtk-doc, enable-threads,
  disable-iwmx, enable-session-policy</changelog>
  <changelog author="avvissu@yandex.by" date="1509019200">- Change the mode of download_files (sr#521762)
- Remove connman-rpmlintrc (bnc#1057697)
- Add client as a recommended dependency</changelog>
  <changelog author="avvissu@yandex.by" date="1514289600">- Add symlink to network.service (connman-1.35-service.patch)</changelog>
  <changelog author="avvissu@yandex.by" date="1518523200">- Fix build errors due to unsupported header include order with
  newer kernels &gt;=4.15 (connman-1.35-include.patch).</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1557489600">- Update to 1.37:
  * Fix issue with handling invalid gateway addresses.
  * Fix issue with handling updates of default gateway.
  * Fix issue with DHCP servers that require broadcast flag.
  * Add support for option to use gateways as time servers.
  * Add support for option to select default technology.
  * Add support for Address Conflict Detection (ACD).
  * Add support for IPv6 iptables management.
- Change in 1.36:
  * Fix issue with DNS short response on error handling.
  * Fix issue with handling incoming DNS requests.
  * Fix issue with handling empty timeserver list.
  * Fix issue with incorrect DHCP byte order.
  * Fix issue with AllowDomainnameUpdates handling.
  * Fix issue with IPv4 link-local IP conflict error.
  * Fix issue with handling WISPr over TLS connections.
  * Fix issue with WiFi background scanning handling.
  * Fix issue with WiFi disconnect+connect race condition.
  * Fix issue with WiFi scanning and tethering operation.
  * Fix issue with WiFi security change handling.
  * Fix issue with missing signal for WPS changes.
  * Fix issue with online check retry handling.
  * Add support for systemd-resolved backend.
  * Add support for mDNS configuration setup.
- Drop connman-1.35-include.patch
- Drop connman-1.35-resolvconf.patch</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1582027200">- Update to 1.38:
  * Fix issue with online check on IP address update.
  * Fix issue with OpenVPN and encrypted private keys.
  * Fix issue with finishing of VPN connections.
  * Add support for updated stable iwd APIs.
  * Add support for WireGuard networks.
- Spec file cleanup</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1613131200">- Update to 1.39 (bsc#1181751):
  * Fix issue with scanning state synchronization and iwd.
  * Fix issue with invalid key with 4-way handshake offloading.
  * Fix issue with DNS proxy length checks to prevent buffer overflow. (CVE-2021-26675)
  * Fix issue with DHCP leaking stack data via uninitialized variable. (CVE-2021-26676)</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1644580800">- Update to 1.41: (bsc#1194177, bsc#1194176, bsc#1194175)
  * Fix issue with RTNL netlink message alignment.
  * Fix issue with dnsproxy and timeout for TCP feature. (CVE-2022-23097, CVE-2022-23096)
  * Fix issue with dnsproxy and busy loop in TCP server. (CVE-2022-23098)
  * Fix issue with WiFi connection with no passphrase.
  * Add support for wpa_supplicant and WPA3-SAE functionality.
  * Add support for D-Bus ObjectManager interface.
- Renamed downstream patches to separate them from upstream patches
  * Rename 0001-connman-1.35-service.patch to 0100-connman-1.35-service.patch
- Add systemd hardening configuration
  * Rename harden_connman-vpn.service.patch to 0101-harden_connman-vpn.service.patch
  * Rename harden_connman-wait-online.service.patch to 0102-harden_connman-wait-online.service.patch
- Disabled openconnect plugin due to version conflict
- Disabled vpnc plugin for i568 missing dependency
- Disabled hh2serial and tist_working for ppc64le due to version conflict</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1659355200">- Add refcounting to wispr portal detection (bsc#1200190)
  * add 0001-wispr-Rename-wispr_portal_list-to-wispr_portal_hash.patch
  * add 0002-wispr-Ignore-NULL-proxy.patch
  * add 0003-wispr-Add-reference-counter-to-portal-context.patch (CVE-2022-32293)
  * add 0004-wispr-Update-portal-context-references.patch (CVE-2022-32293)
- Fix OOB write in received_data (bsc#1200189)
  * add 0005-gweb-Fix-OOB-write-in-received_data.patch (CVE-2022-32292)</changelog>
</package>
<package pkgid="fb664a551abdc7b673dd9463b7b88853263b7ae60e1eab0bf5e03b95c5ab2cc3" name="connman-client" arch="s390x">
  <version epoch="0" ver="1.41" rel="bp154.2.3.1"/>
  <changelog author="sleep_walker@suse.cz" date="1423224000">- bump to 1.28
  ver 1.28:
  Fix issue with DHCPv6 re-transmission timer.
  Fix issue with DHCP service ID option byte order.
  Fix issue with IPv6 connections and SLAAC/DHCPv6.
  Fix issue with telephony and IPv6 autoconfiguration.
  Fix issue with Bluetooth technology setting changes.
  Fix issue with WiFi autoscan interval calculation.
  Fix issue with WiFi and missing BSS signal strength.
  Add support for IPv4 information for WiFi Display.
  ver 1.27:
  Fix issue with memory leak in IP configuration.
  Fix issue with providing random numbers for DHCP.
  Fix issue with handling IN_MOVED_TO inotify events.
  Fix issue with channel selection for WiFi scanning.
  Add support for handling Bluetooth GN and PANU roles.
  ver 1.26:
  Fix issue with missing WiFi security provisioning support.
  Fix issue with immutable setting and provisioned services.
  Fix issue with scheduling DNS cache cleanup procedure.
  Fix issue with IPv6 Privacy setting on service removal.
  Fix issue with DHCPv6 CONFIRM message sending procedure.
  Fix issue with DHCPv6 lease expiration handling support.
  Fix issue with DHCPv4 networks and broadcast flag handling.
  Fix issue with DHCPv4 networks without gateway configuration.
  Fix issue with P2P Peer authorization handling.
  Fix issue with P2P Peer service registration.
  Add support for WiFi Display information elements.
  Add support for systemd-hostnamed integration.
  ver 1.25:
  Fix issue with handling rebind timer for DHCPv6.
  Fix issue with handling DHCP renew transaction.
  Fix issue with user supplied proxy settings and DHCP.
  Fix issue with extra status codes from captive portals.
  Fix issue with service idle state reset on failure.
  Fix issue with DNS label compression handling.
  Add support for experimental P2P Peer service.
  ver 1.24:
  Fix issue with handling slave interfaces.
  Fix issue with handling DHCPv4 broadcast flag.
  Fix issue with handling DHCPv4 lease expiration.
  Fix issue with handling WiFi auto-scanning timeout.
  Fix issue with handling domain and DNS server changes.
  Fix issue with double free and agent messages.
  ver 1.23:
  Fix issue with memory leak in technology handling.
  Fix issue with not removing host route of OpenVPN.
  Fix issue with double free in DHCP cleanup handling.
  Fix issue with handling DHCP method from oFono.
  Fix issue with IPv6-PD when disabling tethering.
  Fix issue with DNS proxy when disabling tethering.
  Fix issue with Bluetooth start and stop interaction.
  Fix issue with Bluetooth PAN networks on adapter change.
  ver 1.22:
  Fix issue with WPS state synchronization.
  Fix issue with DNS servers and default service.
  Fix issue with DHCP client and rebooting state.
  Add support for NTP exponential backoff handling.
  Add support for NTP kiss-of-death packet handling.
  Add support for Ethernet gadget networking.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1438948800">- bump to 1.29
  Fix issue with IPv6 autoconfiguration when disabled.
  Fix issue with IPv6 temporary route handling.
  Fix issue with IPv6 timers for nameservers.
  Fix issue with DHPCv6 and route configuration.
  Fix issue with DHCPv6 source port and buggy servers.
  Fix issue with DHCPv6 rapid commit option length.
  Fix issue with DHCPv6 rapid commit error handling.
  Fix issue with handling invalid WiFi passphrases.
  Fix issue with connecting Ethernet devices.
  Add support for Ethernet and VLAN usage.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1444737600">- bumpt to 1.30
    Fix issue with pending DNS request during server change.
    Fix issue with empty strings in nameservers configuration.
    Fix issue with time servers during IP configuration change.
    Fix issue with 4-way handshake during roaming.
    Fix issue with open WiFi networks security.
    Fix issue with support for WiFi AnonymousIdentity.
    Fix issue with memory leak and DHCPv6 DUID handling.
    Fix issue with DHCP client and P2P interaction.
    Fix issue with handling provision file updates.
    Fix issue with VPN state updates.
    Disable 6to4 support by default.
- add keyring file
- clean with spec-cleaner
- fix builds for all possible distributions and architectures</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1503403200">- bump to 1.35
  besides other things contains fix for CVE-2017-12865</changelog>
  <changelog author="avvissu@yandex.by" date="1504872000">- Remove obsolete macros
- Add polkit-agent-1 dependency
- Use the %tmpfiles_create macro
- Removal of ldconfig scriptlets from all packages
- Add connman-wait-online.service in post{un}
- Spec file cleanup</changelog>
  <changelog author="avvissu@yandex.by" date="1507032000">- Add connman-1.35-resolvconf.patch
- Activate connman.service if the network services disabled
- Add info in /var/adm/update-messages</changelog>
  <changelog author="avvissu@yandex.by" date="1508414400">- Add configuration file (/etc/connman/main.conf)
- Add ghost lines: main.conf connman connman-vpn</changelog>
  <changelog author="avvissu@yandex.by" date="1508500800">- Remove unrecognized options: disable-gtk-doc, enable-threads,
  disable-iwmx, enable-session-policy</changelog>
  <changelog author="avvissu@yandex.by" date="1509019200">- Change the mode of download_files (sr#521762)
- Remove connman-rpmlintrc (bnc#1057697)
- Add client as a recommended dependency</changelog>
  <changelog author="avvissu@yandex.by" date="1514289600">- Add symlink to network.service (connman-1.35-service.patch)</changelog>
  <changelog author="avvissu@yandex.by" date="1518523200">- Fix build errors due to unsupported header include order with
  newer kernels &gt;=4.15 (connman-1.35-include.patch).</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1557489600">- Update to 1.37:
  * Fix issue with handling invalid gateway addresses.
  * Fix issue with handling updates of default gateway.
  * Fix issue with DHCP servers that require broadcast flag.
  * Add support for option to use gateways as time servers.
  * Add support for option to select default technology.
  * Add support for Address Conflict Detection (ACD).
  * Add support for IPv6 iptables management.
- Change in 1.36:
  * Fix issue with DNS short response on error handling.
  * Fix issue with handling incoming DNS requests.
  * Fix issue with handling empty timeserver list.
  * Fix issue with incorrect DHCP byte order.
  * Fix issue with AllowDomainnameUpdates handling.
  * Fix issue with IPv4 link-local IP conflict error.
  * Fix issue with handling WISPr over TLS connections.
  * Fix issue with WiFi background scanning handling.
  * Fix issue with WiFi disconnect+connect race condition.
  * Fix issue with WiFi scanning and tethering operation.
  * Fix issue with WiFi security change handling.
  * Fix issue with missing signal for WPS changes.
  * Fix issue with online check retry handling.
  * Add support for systemd-resolved backend.
  * Add support for mDNS configuration setup.
- Drop connman-1.35-include.patch
- Drop connman-1.35-resolvconf.patch</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1582027200">- Update to 1.38:
  * Fix issue with online check on IP address update.
  * Fix issue with OpenVPN and encrypted private keys.
  * Fix issue with finishing of VPN connections.
  * Add support for updated stable iwd APIs.
  * Add support for WireGuard networks.
- Spec file cleanup</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1613131200">- Update to 1.39 (bsc#1181751):
  * Fix issue with scanning state synchronization and iwd.
  * Fix issue with invalid key with 4-way handshake offloading.
  * Fix issue with DNS proxy length checks to prevent buffer overflow. (CVE-2021-26675)
  * Fix issue with DHCP leaking stack data via uninitialized variable. (CVE-2021-26676)</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1644580800">- Update to 1.41: (bsc#1194177, bsc#1194176, bsc#1194175)
  * Fix issue with RTNL netlink message alignment.
  * Fix issue with dnsproxy and timeout for TCP feature. (CVE-2022-23097, CVE-2022-23096)
  * Fix issue with dnsproxy and busy loop in TCP server. (CVE-2022-23098)
  * Fix issue with WiFi connection with no passphrase.
  * Add support for wpa_supplicant and WPA3-SAE functionality.
  * Add support for D-Bus ObjectManager interface.
- Renamed downstream patches to separate them from upstream patches
  * Rename 0001-connman-1.35-service.patch to 0100-connman-1.35-service.patch
- Add systemd hardening configuration
  * Rename harden_connman-vpn.service.patch to 0101-harden_connman-vpn.service.patch
  * Rename harden_connman-wait-online.service.patch to 0102-harden_connman-wait-online.service.patch
- Disabled openconnect plugin due to version conflict
- Disabled vpnc plugin for i568 missing dependency
- Disabled hh2serial and tist_working for ppc64le due to version conflict</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1659355200">- Add refcounting to wispr portal detection (bsc#1200190)
  * add 0001-wispr-Rename-wispr_portal_list-to-wispr_portal_hash.patch
  * add 0002-wispr-Ignore-NULL-proxy.patch
  * add 0003-wispr-Add-reference-counter-to-portal-context.patch (CVE-2022-32293)
  * add 0004-wispr-Update-portal-context-references.patch (CVE-2022-32293)
- Fix OOB write in received_data (bsc#1200189)
  * add 0005-gweb-Fix-OOB-write-in-received_data.patch (CVE-2022-32292)</changelog>
</package>
<package pkgid="3459e431cdea9f3d0539908c6896d88e7d8e558e17dd9f84459d6cabb080e96f" name="connman-client" arch="x86_64">
  <version epoch="0" ver="1.41" rel="bp154.2.3.1"/>
  <changelog author="sleep_walker@suse.cz" date="1423224000">- bump to 1.28
  ver 1.28:
  Fix issue with DHCPv6 re-transmission timer.
  Fix issue with DHCP service ID option byte order.
  Fix issue with IPv6 connections and SLAAC/DHCPv6.
  Fix issue with telephony and IPv6 autoconfiguration.
  Fix issue with Bluetooth technology setting changes.
  Fix issue with WiFi autoscan interval calculation.
  Fix issue with WiFi and missing BSS signal strength.
  Add support for IPv4 information for WiFi Display.
  ver 1.27:
  Fix issue with memory leak in IP configuration.
  Fix issue with providing random numbers for DHCP.
  Fix issue with handling IN_MOVED_TO inotify events.
  Fix issue with channel selection for WiFi scanning.
  Add support for handling Bluetooth GN and PANU roles.
  ver 1.26:
  Fix issue with missing WiFi security provisioning support.
  Fix issue with immutable setting and provisioned services.
  Fix issue with scheduling DNS cache cleanup procedure.
  Fix issue with IPv6 Privacy setting on service removal.
  Fix issue with DHCPv6 CONFIRM message sending procedure.
  Fix issue with DHCPv6 lease expiration handling support.
  Fix issue with DHCPv4 networks and broadcast flag handling.
  Fix issue with DHCPv4 networks without gateway configuration.
  Fix issue with P2P Peer authorization handling.
  Fix issue with P2P Peer service registration.
  Add support for WiFi Display information elements.
  Add support for systemd-hostnamed integration.
  ver 1.25:
  Fix issue with handling rebind timer for DHCPv6.
  Fix issue with handling DHCP renew transaction.
  Fix issue with user supplied proxy settings and DHCP.
  Fix issue with extra status codes from captive portals.
  Fix issue with service idle state reset on failure.
  Fix issue with DNS label compression handling.
  Add support for experimental P2P Peer service.
  ver 1.24:
  Fix issue with handling slave interfaces.
  Fix issue with handling DHCPv4 broadcast flag.
  Fix issue with handling DHCPv4 lease expiration.
  Fix issue with handling WiFi auto-scanning timeout.
  Fix issue with handling domain and DNS server changes.
  Fix issue with double free and agent messages.
  ver 1.23:
  Fix issue with memory leak in technology handling.
  Fix issue with not removing host route of OpenVPN.
  Fix issue with double free in DHCP cleanup handling.
  Fix issue with handling DHCP method from oFono.
  Fix issue with IPv6-PD when disabling tethering.
  Fix issue with DNS proxy when disabling tethering.
  Fix issue with Bluetooth start and stop interaction.
  Fix issue with Bluetooth PAN networks on adapter change.
  ver 1.22:
  Fix issue with WPS state synchronization.
  Fix issue with DNS servers and default service.
  Fix issue with DHCP client and rebooting state.
  Add support for NTP exponential backoff handling.
  Add support for NTP kiss-of-death packet handling.
  Add support for Ethernet gadget networking.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1438948800">- bump to 1.29
  Fix issue with IPv6 autoconfiguration when disabled.
  Fix issue with IPv6 temporary route handling.
  Fix issue with IPv6 timers for nameservers.
  Fix issue with DHPCv6 and route configuration.
  Fix issue with DHCPv6 source port and buggy servers.
  Fix issue with DHCPv6 rapid commit option length.
  Fix issue with DHCPv6 rapid commit error handling.
  Fix issue with handling invalid WiFi passphrases.
  Fix issue with connecting Ethernet devices.
  Add support for Ethernet and VLAN usage.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1444737600">- bumpt to 1.30
    Fix issue with pending DNS request during server change.
    Fix issue with empty strings in nameservers configuration.
    Fix issue with time servers during IP configuration change.
    Fix issue with 4-way handshake during roaming.
    Fix issue with open WiFi networks security.
    Fix issue with support for WiFi AnonymousIdentity.
    Fix issue with memory leak and DHCPv6 DUID handling.
    Fix issue with DHCP client and P2P interaction.
    Fix issue with handling provision file updates.
    Fix issue with VPN state updates.
    Disable 6to4 support by default.
- add keyring file
- clean with spec-cleaner
- fix builds for all possible distributions and architectures</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1503403200">- bump to 1.35
  besides other things contains fix for CVE-2017-12865</changelog>
  <changelog author="avvissu@yandex.by" date="1504872000">- Remove obsolete macros
- Add polkit-agent-1 dependency
- Use the %tmpfiles_create macro
- Removal of ldconfig scriptlets from all packages
- Add connman-wait-online.service in post{un}
- Spec file cleanup</changelog>
  <changelog author="avvissu@yandex.by" date="1507032000">- Add connman-1.35-resolvconf.patch
- Activate connman.service if the network services disabled
- Add info in /var/adm/update-messages</changelog>
  <changelog author="avvissu@yandex.by" date="1508414400">- Add configuration file (/etc/connman/main.conf)
- Add ghost lines: main.conf connman connman-vpn</changelog>
  <changelog author="avvissu@yandex.by" date="1508500800">- Remove unrecognized options: disable-gtk-doc, enable-threads,
  disable-iwmx, enable-session-policy</changelog>
  <changelog author="avvissu@yandex.by" date="1509019200">- Change the mode of download_files (sr#521762)
- Remove connman-rpmlintrc (bnc#1057697)
- Add client as a recommended dependency</changelog>
  <changelog author="avvissu@yandex.by" date="1514289600">- Add symlink to network.service (connman-1.35-service.patch)</changelog>
  <changelog author="avvissu@yandex.by" date="1518523200">- Fix build errors due to unsupported header include order with
  newer kernels &gt;=4.15 (connman-1.35-include.patch).</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1557489600">- Update to 1.37:
  * Fix issue with handling invalid gateway addresses.
  * Fix issue with handling updates of default gateway.
  * Fix issue with DHCP servers that require broadcast flag.
  * Add support for option to use gateways as time servers.
  * Add support for option to select default technology.
  * Add support for Address Conflict Detection (ACD).
  * Add support for IPv6 iptables management.
- Change in 1.36:
  * Fix issue with DNS short response on error handling.
  * Fix issue with handling incoming DNS requests.
  * Fix issue with handling empty timeserver list.
  * Fix issue with incorrect DHCP byte order.
  * Fix issue with AllowDomainnameUpdates handling.
  * Fix issue with IPv4 link-local IP conflict error.
  * Fix issue with handling WISPr over TLS connections.
  * Fix issue with WiFi background scanning handling.
  * Fix issue with WiFi disconnect+connect race condition.
  * Fix issue with WiFi scanning and tethering operation.
  * Fix issue with WiFi security change handling.
  * Fix issue with missing signal for WPS changes.
  * Fix issue with online check retry handling.
  * Add support for systemd-resolved backend.
  * Add support for mDNS configuration setup.
- Drop connman-1.35-include.patch
- Drop connman-1.35-resolvconf.patch</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1582027200">- Update to 1.38:
  * Fix issue with online check on IP address update.
  * Fix issue with OpenVPN and encrypted private keys.
  * Fix issue with finishing of VPN connections.
  * Add support for updated stable iwd APIs.
  * Add support for WireGuard networks.
- Spec file cleanup</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1613131200">- Update to 1.39 (bsc#1181751):
  * Fix issue with scanning state synchronization and iwd.
  * Fix issue with invalid key with 4-way handshake offloading.
  * Fix issue with DNS proxy length checks to prevent buffer overflow. (CVE-2021-26675)
  * Fix issue with DHCP leaking stack data via uninitialized variable. (CVE-2021-26676)</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1644580800">- Update to 1.41: (bsc#1194177, bsc#1194176, bsc#1194175)
  * Fix issue with RTNL netlink message alignment.
  * Fix issue with dnsproxy and timeout for TCP feature. (CVE-2022-23097, CVE-2022-23096)
  * Fix issue with dnsproxy and busy loop in TCP server. (CVE-2022-23098)
  * Fix issue with WiFi connection with no passphrase.
  * Add support for wpa_supplicant and WPA3-SAE functionality.
  * Add support for D-Bus ObjectManager interface.
- Renamed downstream patches to separate them from upstream patches
  * Rename 0001-connman-1.35-service.patch to 0100-connman-1.35-service.patch
- Add systemd hardening configuration
  * Rename harden_connman-vpn.service.patch to 0101-harden_connman-vpn.service.patch
  * Rename harden_connman-wait-online.service.patch to 0102-harden_connman-wait-online.service.patch
- Disabled openconnect plugin due to version conflict
- Disabled vpnc plugin for i568 missing dependency
- Disabled hh2serial and tist_working for ppc64le due to version conflict</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1659355200">- Add refcounting to wispr portal detection (bsc#1200190)
  * add 0001-wispr-Rename-wispr_portal_list-to-wispr_portal_hash.patch
  * add 0002-wispr-Ignore-NULL-proxy.patch
  * add 0003-wispr-Add-reference-counter-to-portal-context.patch (CVE-2022-32293)
  * add 0004-wispr-Update-portal-context-references.patch (CVE-2022-32293)
- Fix OOB write in received_data (bsc#1200189)
  * add 0005-gweb-Fix-OOB-write-in-received_data.patch (CVE-2022-32292)</changelog>
</package>
<package pkgid="1510b4360d2f1150f859ad364a3cb85b1b3d5e84b02cfd6bc32693a5ecd0f8c6" name="connman-devel" arch="aarch64">
  <version epoch="0" ver="1.41" rel="bp154.2.3.1"/>
  <changelog author="sleep_walker@suse.cz" date="1423224000">- bump to 1.28
  ver 1.28:
  Fix issue with DHCPv6 re-transmission timer.
  Fix issue with DHCP service ID option byte order.
  Fix issue with IPv6 connections and SLAAC/DHCPv6.
  Fix issue with telephony and IPv6 autoconfiguration.
  Fix issue with Bluetooth technology setting changes.
  Fix issue with WiFi autoscan interval calculation.
  Fix issue with WiFi and missing BSS signal strength.
  Add support for IPv4 information for WiFi Display.
  ver 1.27:
  Fix issue with memory leak in IP configuration.
  Fix issue with providing random numbers for DHCP.
  Fix issue with handling IN_MOVED_TO inotify events.
  Fix issue with channel selection for WiFi scanning.
  Add support for handling Bluetooth GN and PANU roles.
  ver 1.26:
  Fix issue with missing WiFi security provisioning support.
  Fix issue with immutable setting and provisioned services.
  Fix issue with scheduling DNS cache cleanup procedure.
  Fix issue with IPv6 Privacy setting on service removal.
  Fix issue with DHCPv6 CONFIRM message sending procedure.
  Fix issue with DHCPv6 lease expiration handling support.
  Fix issue with DHCPv4 networks and broadcast flag handling.
  Fix issue with DHCPv4 networks without gateway configuration.
  Fix issue with P2P Peer authorization handling.
  Fix issue with P2P Peer service registration.
  Add support for WiFi Display information elements.
  Add support for systemd-hostnamed integration.
  ver 1.25:
  Fix issue with handling rebind timer for DHCPv6.
  Fix issue with handling DHCP renew transaction.
  Fix issue with user supplied proxy settings and DHCP.
  Fix issue with extra status codes from captive portals.
  Fix issue with service idle state reset on failure.
  Fix issue with DNS label compression handling.
  Add support for experimental P2P Peer service.
  ver 1.24:
  Fix issue with handling slave interfaces.
  Fix issue with handling DHCPv4 broadcast flag.
  Fix issue with handling DHCPv4 lease expiration.
  Fix issue with handling WiFi auto-scanning timeout.
  Fix issue with handling domain and DNS server changes.
  Fix issue with double free and agent messages.
  ver 1.23:
  Fix issue with memory leak in technology handling.
  Fix issue with not removing host route of OpenVPN.
  Fix issue with double free in DHCP cleanup handling.
  Fix issue with handling DHCP method from oFono.
  Fix issue with IPv6-PD when disabling tethering.
  Fix issue with DNS proxy when disabling tethering.
  Fix issue with Bluetooth start and stop interaction.
  Fix issue with Bluetooth PAN networks on adapter change.
  ver 1.22:
  Fix issue with WPS state synchronization.
  Fix issue with DNS servers and default service.
  Fix issue with DHCP client and rebooting state.
  Add support for NTP exponential backoff handling.
  Add support for NTP kiss-of-death packet handling.
  Add support for Ethernet gadget networking.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1438948800">- bump to 1.29
  Fix issue with IPv6 autoconfiguration when disabled.
  Fix issue with IPv6 temporary route handling.
  Fix issue with IPv6 timers for nameservers.
  Fix issue with DHPCv6 and route configuration.
  Fix issue with DHCPv6 source port and buggy servers.
  Fix issue with DHCPv6 rapid commit option length.
  Fix issue with DHCPv6 rapid commit error handling.
  Fix issue with handling invalid WiFi passphrases.
  Fix issue with connecting Ethernet devices.
  Add support for Ethernet and VLAN usage.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1444737600">- bumpt to 1.30
    Fix issue with pending DNS request during server change.
    Fix issue with empty strings in nameservers configuration.
    Fix issue with time servers during IP configuration change.
    Fix issue with 4-way handshake during roaming.
    Fix issue with open WiFi networks security.
    Fix issue with support for WiFi AnonymousIdentity.
    Fix issue with memory leak and DHCPv6 DUID handling.
    Fix issue with DHCP client and P2P interaction.
    Fix issue with handling provision file updates.
    Fix issue with VPN state updates.
    Disable 6to4 support by default.
- add keyring file
- clean with spec-cleaner
- fix builds for all possible distributions and architectures</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1503403200">- bump to 1.35
  besides other things contains fix for CVE-2017-12865</changelog>
  <changelog author="avvissu@yandex.by" date="1504872000">- Remove obsolete macros
- Add polkit-agent-1 dependency
- Use the %tmpfiles_create macro
- Removal of ldconfig scriptlets from all packages
- Add connman-wait-online.service in post{un}
- Spec file cleanup</changelog>
  <changelog author="avvissu@yandex.by" date="1507032000">- Add connman-1.35-resolvconf.patch
- Activate connman.service if the network services disabled
- Add info in /var/adm/update-messages</changelog>
  <changelog author="avvissu@yandex.by" date="1508414400">- Add configuration file (/etc/connman/main.conf)
- Add ghost lines: main.conf connman connman-vpn</changelog>
  <changelog author="avvissu@yandex.by" date="1508500800">- Remove unrecognized options: disable-gtk-doc, enable-threads,
  disable-iwmx, enable-session-policy</changelog>
  <changelog author="avvissu@yandex.by" date="1509019200">- Change the mode of download_files (sr#521762)
- Remove connman-rpmlintrc (bnc#1057697)
- Add client as a recommended dependency</changelog>
  <changelog author="avvissu@yandex.by" date="1514289600">- Add symlink to network.service (connman-1.35-service.patch)</changelog>
  <changelog author="avvissu@yandex.by" date="1518523200">- Fix build errors due to unsupported header include order with
  newer kernels &gt;=4.15 (connman-1.35-include.patch).</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1557489600">- Update to 1.37:
  * Fix issue with handling invalid gateway addresses.
  * Fix issue with handling updates of default gateway.
  * Fix issue with DHCP servers that require broadcast flag.
  * Add support for option to use gateways as time servers.
  * Add support for option to select default technology.
  * Add support for Address Conflict Detection (ACD).
  * Add support for IPv6 iptables management.
- Change in 1.36:
  * Fix issue with DNS short response on error handling.
  * Fix issue with handling incoming DNS requests.
  * Fix issue with handling empty timeserver list.
  * Fix issue with incorrect DHCP byte order.
  * Fix issue with AllowDomainnameUpdates handling.
  * Fix issue with IPv4 link-local IP conflict error.
  * Fix issue with handling WISPr over TLS connections.
  * Fix issue with WiFi background scanning handling.
  * Fix issue with WiFi disconnect+connect race condition.
  * Fix issue with WiFi scanning and tethering operation.
  * Fix issue with WiFi security change handling.
  * Fix issue with missing signal for WPS changes.
  * Fix issue with online check retry handling.
  * Add support for systemd-resolved backend.
  * Add support for mDNS configuration setup.
- Drop connman-1.35-include.patch
- Drop connman-1.35-resolvconf.patch</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1582027200">- Update to 1.38:
  * Fix issue with online check on IP address update.
  * Fix issue with OpenVPN and encrypted private keys.
  * Fix issue with finishing of VPN connections.
  * Add support for updated stable iwd APIs.
  * Add support for WireGuard networks.
- Spec file cleanup</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1613131200">- Update to 1.39 (bsc#1181751):
  * Fix issue with scanning state synchronization and iwd.
  * Fix issue with invalid key with 4-way handshake offloading.
  * Fix issue with DNS proxy length checks to prevent buffer overflow. (CVE-2021-26675)
  * Fix issue with DHCP leaking stack data via uninitialized variable. (CVE-2021-26676)</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1644580800">- Update to 1.41: (bsc#1194177, bsc#1194176, bsc#1194175)
  * Fix issue with RTNL netlink message alignment.
  * Fix issue with dnsproxy and timeout for TCP feature. (CVE-2022-23097, CVE-2022-23096)
  * Fix issue with dnsproxy and busy loop in TCP server. (CVE-2022-23098)
  * Fix issue with WiFi connection with no passphrase.
  * Add support for wpa_supplicant and WPA3-SAE functionality.
  * Add support for D-Bus ObjectManager interface.
- Renamed downstream patches to separate them from upstream patches
  * Rename 0001-connman-1.35-service.patch to 0100-connman-1.35-service.patch
- Add systemd hardening configuration
  * Rename harden_connman-vpn.service.patch to 0101-harden_connman-vpn.service.patch
  * Rename harden_connman-wait-online.service.patch to 0102-harden_connman-wait-online.service.patch
- Disabled openconnect plugin due to version conflict
- Disabled vpnc plugin for i568 missing dependency
- Disabled hh2serial and tist_working for ppc64le due to version conflict</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1659355200">- Add refcounting to wispr portal detection (bsc#1200190)
  * add 0001-wispr-Rename-wispr_portal_list-to-wispr_portal_hash.patch
  * add 0002-wispr-Ignore-NULL-proxy.patch
  * add 0003-wispr-Add-reference-counter-to-portal-context.patch (CVE-2022-32293)
  * add 0004-wispr-Update-portal-context-references.patch (CVE-2022-32293)
- Fix OOB write in received_data (bsc#1200189)
  * add 0005-gweb-Fix-OOB-write-in-received_data.patch (CVE-2022-32292)</changelog>
</package>
<package pkgid="b70324306328876890deb106c11daa0ab7ce9ef197b626dd5ce3116a1f5d1403" name="connman-devel" arch="i586">
  <version epoch="0" ver="1.41" rel="bp154.2.3.1"/>
  <changelog author="sleep_walker@suse.cz" date="1423224000">- bump to 1.28
  ver 1.28:
  Fix issue with DHCPv6 re-transmission timer.
  Fix issue with DHCP service ID option byte order.
  Fix issue with IPv6 connections and SLAAC/DHCPv6.
  Fix issue with telephony and IPv6 autoconfiguration.
  Fix issue with Bluetooth technology setting changes.
  Fix issue with WiFi autoscan interval calculation.
  Fix issue with WiFi and missing BSS signal strength.
  Add support for IPv4 information for WiFi Display.
  ver 1.27:
  Fix issue with memory leak in IP configuration.
  Fix issue with providing random numbers for DHCP.
  Fix issue with handling IN_MOVED_TO inotify events.
  Fix issue with channel selection for WiFi scanning.
  Add support for handling Bluetooth GN and PANU roles.
  ver 1.26:
  Fix issue with missing WiFi security provisioning support.
  Fix issue with immutable setting and provisioned services.
  Fix issue with scheduling DNS cache cleanup procedure.
  Fix issue with IPv6 Privacy setting on service removal.
  Fix issue with DHCPv6 CONFIRM message sending procedure.
  Fix issue with DHCPv6 lease expiration handling support.
  Fix issue with DHCPv4 networks and broadcast flag handling.
  Fix issue with DHCPv4 networks without gateway configuration.
  Fix issue with P2P Peer authorization handling.
  Fix issue with P2P Peer service registration.
  Add support for WiFi Display information elements.
  Add support for systemd-hostnamed integration.
  ver 1.25:
  Fix issue with handling rebind timer for DHCPv6.
  Fix issue with handling DHCP renew transaction.
  Fix issue with user supplied proxy settings and DHCP.
  Fix issue with extra status codes from captive portals.
  Fix issue with service idle state reset on failure.
  Fix issue with DNS label compression handling.
  Add support for experimental P2P Peer service.
  ver 1.24:
  Fix issue with handling slave interfaces.
  Fix issue with handling DHCPv4 broadcast flag.
  Fix issue with handling DHCPv4 lease expiration.
  Fix issue with handling WiFi auto-scanning timeout.
  Fix issue with handling domain and DNS server changes.
  Fix issue with double free and agent messages.
  ver 1.23:
  Fix issue with memory leak in technology handling.
  Fix issue with not removing host route of OpenVPN.
  Fix issue with double free in DHCP cleanup handling.
  Fix issue with handling DHCP method from oFono.
  Fix issue with IPv6-PD when disabling tethering.
  Fix issue with DNS proxy when disabling tethering.
  Fix issue with Bluetooth start and stop interaction.
  Fix issue with Bluetooth PAN networks on adapter change.
  ver 1.22:
  Fix issue with WPS state synchronization.
  Fix issue with DNS servers and default service.
  Fix issue with DHCP client and rebooting state.
  Add support for NTP exponential backoff handling.
  Add support for NTP kiss-of-death packet handling.
  Add support for Ethernet gadget networking.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1438948800">- bump to 1.29
  Fix issue with IPv6 autoconfiguration when disabled.
  Fix issue with IPv6 temporary route handling.
  Fix issue with IPv6 timers for nameservers.
  Fix issue with DHPCv6 and route configuration.
  Fix issue with DHCPv6 source port and buggy servers.
  Fix issue with DHCPv6 rapid commit option length.
  Fix issue with DHCPv6 rapid commit error handling.
  Fix issue with handling invalid WiFi passphrases.
  Fix issue with connecting Ethernet devices.
  Add support for Ethernet and VLAN usage.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1444737600">- bumpt to 1.30
    Fix issue with pending DNS request during server change.
    Fix issue with empty strings in nameservers configuration.
    Fix issue with time servers during IP configuration change.
    Fix issue with 4-way handshake during roaming.
    Fix issue with open WiFi networks security.
    Fix issue with support for WiFi AnonymousIdentity.
    Fix issue with memory leak and DHCPv6 DUID handling.
    Fix issue with DHCP client and P2P interaction.
    Fix issue with handling provision file updates.
    Fix issue with VPN state updates.
    Disable 6to4 support by default.
- add keyring file
- clean with spec-cleaner
- fix builds for all possible distributions and architectures</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1503403200">- bump to 1.35
  besides other things contains fix for CVE-2017-12865</changelog>
  <changelog author="avvissu@yandex.by" date="1504872000">- Remove obsolete macros
- Add polkit-agent-1 dependency
- Use the %tmpfiles_create macro
- Removal of ldconfig scriptlets from all packages
- Add connman-wait-online.service in post{un}
- Spec file cleanup</changelog>
  <changelog author="avvissu@yandex.by" date="1507032000">- Add connman-1.35-resolvconf.patch
- Activate connman.service if the network services disabled
- Add info in /var/adm/update-messages</changelog>
  <changelog author="avvissu@yandex.by" date="1508414400">- Add configuration file (/etc/connman/main.conf)
- Add ghost lines: main.conf connman connman-vpn</changelog>
  <changelog author="avvissu@yandex.by" date="1508500800">- Remove unrecognized options: disable-gtk-doc, enable-threads,
  disable-iwmx, enable-session-policy</changelog>
  <changelog author="avvissu@yandex.by" date="1509019200">- Change the mode of download_files (sr#521762)
- Remove connman-rpmlintrc (bnc#1057697)
- Add client as a recommended dependency</changelog>
  <changelog author="avvissu@yandex.by" date="1514289600">- Add symlink to network.service (connman-1.35-service.patch)</changelog>
  <changelog author="avvissu@yandex.by" date="1518523200">- Fix build errors due to unsupported header include order with
  newer kernels &gt;=4.15 (connman-1.35-include.patch).</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1557489600">- Update to 1.37:
  * Fix issue with handling invalid gateway addresses.
  * Fix issue with handling updates of default gateway.
  * Fix issue with DHCP servers that require broadcast flag.
  * Add support for option to use gateways as time servers.
  * Add support for option to select default technology.
  * Add support for Address Conflict Detection (ACD).
  * Add support for IPv6 iptables management.
- Change in 1.36:
  * Fix issue with DNS short response on error handling.
  * Fix issue with handling incoming DNS requests.
  * Fix issue with handling empty timeserver list.
  * Fix issue with incorrect DHCP byte order.
  * Fix issue with AllowDomainnameUpdates handling.
  * Fix issue with IPv4 link-local IP conflict error.
  * Fix issue with handling WISPr over TLS connections.
  * Fix issue with WiFi background scanning handling.
  * Fix issue with WiFi disconnect+connect race condition.
  * Fix issue with WiFi scanning and tethering operation.
  * Fix issue with WiFi security change handling.
  * Fix issue with missing signal for WPS changes.
  * Fix issue with online check retry handling.
  * Add support for systemd-resolved backend.
  * Add support for mDNS configuration setup.
- Drop connman-1.35-include.patch
- Drop connman-1.35-resolvconf.patch</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1582027200">- Update to 1.38:
  * Fix issue with online check on IP address update.
  * Fix issue with OpenVPN and encrypted private keys.
  * Fix issue with finishing of VPN connections.
  * Add support for updated stable iwd APIs.
  * Add support for WireGuard networks.
- Spec file cleanup</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1613131200">- Update to 1.39 (bsc#1181751):
  * Fix issue with scanning state synchronization and iwd.
  * Fix issue with invalid key with 4-way handshake offloading.
  * Fix issue with DNS proxy length checks to prevent buffer overflow. (CVE-2021-26675)
  * Fix issue with DHCP leaking stack data via uninitialized variable. (CVE-2021-26676)</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1644580800">- Update to 1.41: (bsc#1194177, bsc#1194176, bsc#1194175)
  * Fix issue with RTNL netlink message alignment.
  * Fix issue with dnsproxy and timeout for TCP feature. (CVE-2022-23097, CVE-2022-23096)
  * Fix issue with dnsproxy and busy loop in TCP server. (CVE-2022-23098)
  * Fix issue with WiFi connection with no passphrase.
  * Add support for wpa_supplicant and WPA3-SAE functionality.
  * Add support for D-Bus ObjectManager interface.
- Renamed downstream patches to separate them from upstream patches
  * Rename 0001-connman-1.35-service.patch to 0100-connman-1.35-service.patch
- Add systemd hardening configuration
  * Rename harden_connman-vpn.service.patch to 0101-harden_connman-vpn.service.patch
  * Rename harden_connman-wait-online.service.patch to 0102-harden_connman-wait-online.service.patch
- Disabled openconnect plugin due to version conflict
- Disabled vpnc plugin for i568 missing dependency
- Disabled hh2serial and tist_working for ppc64le due to version conflict</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1659355200">- Add refcounting to wispr portal detection (bsc#1200190)
  * add 0001-wispr-Rename-wispr_portal_list-to-wispr_portal_hash.patch
  * add 0002-wispr-Ignore-NULL-proxy.patch
  * add 0003-wispr-Add-reference-counter-to-portal-context.patch (CVE-2022-32293)
  * add 0004-wispr-Update-portal-context-references.patch (CVE-2022-32293)
- Fix OOB write in received_data (bsc#1200189)
  * add 0005-gweb-Fix-OOB-write-in-received_data.patch (CVE-2022-32292)</changelog>
</package>
<package pkgid="5db22ac698e119a4e126038786542cecf411d140afe79f799b018842bf4c9075" name="connman-devel" arch="ppc64le">
  <version epoch="0" ver="1.41" rel="bp154.2.3.1"/>
  <changelog author="sleep_walker@suse.cz" date="1423224000">- bump to 1.28
  ver 1.28:
  Fix issue with DHCPv6 re-transmission timer.
  Fix issue with DHCP service ID option byte order.
  Fix issue with IPv6 connections and SLAAC/DHCPv6.
  Fix issue with telephony and IPv6 autoconfiguration.
  Fix issue with Bluetooth technology setting changes.
  Fix issue with WiFi autoscan interval calculation.
  Fix issue with WiFi and missing BSS signal strength.
  Add support for IPv4 information for WiFi Display.
  ver 1.27:
  Fix issue with memory leak in IP configuration.
  Fix issue with providing random numbers for DHCP.
  Fix issue with handling IN_MOVED_TO inotify events.
  Fix issue with channel selection for WiFi scanning.
  Add support for handling Bluetooth GN and PANU roles.
  ver 1.26:
  Fix issue with missing WiFi security provisioning support.
  Fix issue with immutable setting and provisioned services.
  Fix issue with scheduling DNS cache cleanup procedure.
  Fix issue with IPv6 Privacy setting on service removal.
  Fix issue with DHCPv6 CONFIRM message sending procedure.
  Fix issue with DHCPv6 lease expiration handling support.
  Fix issue with DHCPv4 networks and broadcast flag handling.
  Fix issue with DHCPv4 networks without gateway configuration.
  Fix issue with P2P Peer authorization handling.
  Fix issue with P2P Peer service registration.
  Add support for WiFi Display information elements.
  Add support for systemd-hostnamed integration.
  ver 1.25:
  Fix issue with handling rebind timer for DHCPv6.
  Fix issue with handling DHCP renew transaction.
  Fix issue with user supplied proxy settings and DHCP.
  Fix issue with extra status codes from captive portals.
  Fix issue with service idle state reset on failure.
  Fix issue with DNS label compression handling.
  Add support for experimental P2P Peer service.
  ver 1.24:
  Fix issue with handling slave interfaces.
  Fix issue with handling DHCPv4 broadcast flag.
  Fix issue with handling DHCPv4 lease expiration.
  Fix issue with handling WiFi auto-scanning timeout.
  Fix issue with handling domain and DNS server changes.
  Fix issue with double free and agent messages.
  ver 1.23:
  Fix issue with memory leak in technology handling.
  Fix issue with not removing host route of OpenVPN.
  Fix issue with double free in DHCP cleanup handling.
  Fix issue with handling DHCP method from oFono.
  Fix issue with IPv6-PD when disabling tethering.
  Fix issue with DNS proxy when disabling tethering.
  Fix issue with Bluetooth start and stop interaction.
  Fix issue with Bluetooth PAN networks on adapter change.
  ver 1.22:
  Fix issue with WPS state synchronization.
  Fix issue with DNS servers and default service.
  Fix issue with DHCP client and rebooting state.
  Add support for NTP exponential backoff handling.
  Add support for NTP kiss-of-death packet handling.
  Add support for Ethernet gadget networking.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1438948800">- bump to 1.29
  Fix issue with IPv6 autoconfiguration when disabled.
  Fix issue with IPv6 temporary route handling.
  Fix issue with IPv6 timers for nameservers.
  Fix issue with DHPCv6 and route configuration.
  Fix issue with DHCPv6 source port and buggy servers.
  Fix issue with DHCPv6 rapid commit option length.
  Fix issue with DHCPv6 rapid commit error handling.
  Fix issue with handling invalid WiFi passphrases.
  Fix issue with connecting Ethernet devices.
  Add support for Ethernet and VLAN usage.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1444737600">- bumpt to 1.30
    Fix issue with pending DNS request during server change.
    Fix issue with empty strings in nameservers configuration.
    Fix issue with time servers during IP configuration change.
    Fix issue with 4-way handshake during roaming.
    Fix issue with open WiFi networks security.
    Fix issue with support for WiFi AnonymousIdentity.
    Fix issue with memory leak and DHCPv6 DUID handling.
    Fix issue with DHCP client and P2P interaction.
    Fix issue with handling provision file updates.
    Fix issue with VPN state updates.
    Disable 6to4 support by default.
- add keyring file
- clean with spec-cleaner
- fix builds for all possible distributions and architectures</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1503403200">- bump to 1.35
  besides other things contains fix for CVE-2017-12865</changelog>
  <changelog author="avvissu@yandex.by" date="1504872000">- Remove obsolete macros
- Add polkit-agent-1 dependency
- Use the %tmpfiles_create macro
- Removal of ldconfig scriptlets from all packages
- Add connman-wait-online.service in post{un}
- Spec file cleanup</changelog>
  <changelog author="avvissu@yandex.by" date="1507032000">- Add connman-1.35-resolvconf.patch
- Activate connman.service if the network services disabled
- Add info in /var/adm/update-messages</changelog>
  <changelog author="avvissu@yandex.by" date="1508414400">- Add configuration file (/etc/connman/main.conf)
- Add ghost lines: main.conf connman connman-vpn</changelog>
  <changelog author="avvissu@yandex.by" date="1508500800">- Remove unrecognized options: disable-gtk-doc, enable-threads,
  disable-iwmx, enable-session-policy</changelog>
  <changelog author="avvissu@yandex.by" date="1509019200">- Change the mode of download_files (sr#521762)
- Remove connman-rpmlintrc (bnc#1057697)
- Add client as a recommended dependency</changelog>
  <changelog author="avvissu@yandex.by" date="1514289600">- Add symlink to network.service (connman-1.35-service.patch)</changelog>
  <changelog author="avvissu@yandex.by" date="1518523200">- Fix build errors due to unsupported header include order with
  newer kernels &gt;=4.15 (connman-1.35-include.patch).</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1557489600">- Update to 1.37:
  * Fix issue with handling invalid gateway addresses.
  * Fix issue with handling updates of default gateway.
  * Fix issue with DHCP servers that require broadcast flag.
  * Add support for option to use gateways as time servers.
  * Add support for option to select default technology.
  * Add support for Address Conflict Detection (ACD).
  * Add support for IPv6 iptables management.
- Change in 1.36:
  * Fix issue with DNS short response on error handling.
  * Fix issue with handling incoming DNS requests.
  * Fix issue with handling empty timeserver list.
  * Fix issue with incorrect DHCP byte order.
  * Fix issue with AllowDomainnameUpdates handling.
  * Fix issue with IPv4 link-local IP conflict error.
  * Fix issue with handling WISPr over TLS connections.
  * Fix issue with WiFi background scanning handling.
  * Fix issue with WiFi disconnect+connect race condition.
  * Fix issue with WiFi scanning and tethering operation.
  * Fix issue with WiFi security change handling.
  * Fix issue with missing signal for WPS changes.
  * Fix issue with online check retry handling.
  * Add support for systemd-resolved backend.
  * Add support for mDNS configuration setup.
- Drop connman-1.35-include.patch
- Drop connman-1.35-resolvconf.patch</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1582027200">- Update to 1.38:
  * Fix issue with online check on IP address update.
  * Fix issue with OpenVPN and encrypted private keys.
  * Fix issue with finishing of VPN connections.
  * Add support for updated stable iwd APIs.
  * Add support for WireGuard networks.
- Spec file cleanup</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1613131200">- Update to 1.39 (bsc#1181751):
  * Fix issue with scanning state synchronization and iwd.
  * Fix issue with invalid key with 4-way handshake offloading.
  * Fix issue with DNS proxy length checks to prevent buffer overflow. (CVE-2021-26675)
  * Fix issue with DHCP leaking stack data via uninitialized variable. (CVE-2021-26676)</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1644580800">- Update to 1.41: (bsc#1194177, bsc#1194176, bsc#1194175)
  * Fix issue with RTNL netlink message alignment.
  * Fix issue with dnsproxy and timeout for TCP feature. (CVE-2022-23097, CVE-2022-23096)
  * Fix issue with dnsproxy and busy loop in TCP server. (CVE-2022-23098)
  * Fix issue with WiFi connection with no passphrase.
  * Add support for wpa_supplicant and WPA3-SAE functionality.
  * Add support for D-Bus ObjectManager interface.
- Renamed downstream patches to separate them from upstream patches
  * Rename 0001-connman-1.35-service.patch to 0100-connman-1.35-service.patch
- Add systemd hardening configuration
  * Rename harden_connman-vpn.service.patch to 0101-harden_connman-vpn.service.patch
  * Rename harden_connman-wait-online.service.patch to 0102-harden_connman-wait-online.service.patch
- Disabled openconnect plugin due to version conflict
- Disabled vpnc plugin for i568 missing dependency
- Disabled hh2serial and tist_working for ppc64le due to version conflict</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1659355200">- Add refcounting to wispr portal detection (bsc#1200190)
  * add 0001-wispr-Rename-wispr_portal_list-to-wispr_portal_hash.patch
  * add 0002-wispr-Ignore-NULL-proxy.patch
  * add 0003-wispr-Add-reference-counter-to-portal-context.patch (CVE-2022-32293)
  * add 0004-wispr-Update-portal-context-references.patch (CVE-2022-32293)
- Fix OOB write in received_data (bsc#1200189)
  * add 0005-gweb-Fix-OOB-write-in-received_data.patch (CVE-2022-32292)</changelog>
</package>
<package pkgid="805b73a82e868726d714e5d5b24a5b0782fdd3d18c4ee57c320fbdeec21e48ef" name="connman-devel" arch="s390x">
  <version epoch="0" ver="1.41" rel="bp154.2.3.1"/>
  <changelog author="sleep_walker@suse.cz" date="1423224000">- bump to 1.28
  ver 1.28:
  Fix issue with DHCPv6 re-transmission timer.
  Fix issue with DHCP service ID option byte order.
  Fix issue with IPv6 connections and SLAAC/DHCPv6.
  Fix issue with telephony and IPv6 autoconfiguration.
  Fix issue with Bluetooth technology setting changes.
  Fix issue with WiFi autoscan interval calculation.
  Fix issue with WiFi and missing BSS signal strength.
  Add support for IPv4 information for WiFi Display.
  ver 1.27:
  Fix issue with memory leak in IP configuration.
  Fix issue with providing random numbers for DHCP.
  Fix issue with handling IN_MOVED_TO inotify events.
  Fix issue with channel selection for WiFi scanning.
  Add support for handling Bluetooth GN and PANU roles.
  ver 1.26:
  Fix issue with missing WiFi security provisioning support.
  Fix issue with immutable setting and provisioned services.
  Fix issue with scheduling DNS cache cleanup procedure.
  Fix issue with IPv6 Privacy setting on service removal.
  Fix issue with DHCPv6 CONFIRM message sending procedure.
  Fix issue with DHCPv6 lease expiration handling support.
  Fix issue with DHCPv4 networks and broadcast flag handling.
  Fix issue with DHCPv4 networks without gateway configuration.
  Fix issue with P2P Peer authorization handling.
  Fix issue with P2P Peer service registration.
  Add support for WiFi Display information elements.
  Add support for systemd-hostnamed integration.
  ver 1.25:
  Fix issue with handling rebind timer for DHCPv6.
  Fix issue with handling DHCP renew transaction.
  Fix issue with user supplied proxy settings and DHCP.
  Fix issue with extra status codes from captive portals.
  Fix issue with service idle state reset on failure.
  Fix issue with DNS label compression handling.
  Add support for experimental P2P Peer service.
  ver 1.24:
  Fix issue with handling slave interfaces.
  Fix issue with handling DHCPv4 broadcast flag.
  Fix issue with handling DHCPv4 lease expiration.
  Fix issue with handling WiFi auto-scanning timeout.
  Fix issue with handling domain and DNS server changes.
  Fix issue with double free and agent messages.
  ver 1.23:
  Fix issue with memory leak in technology handling.
  Fix issue with not removing host route of OpenVPN.
  Fix issue with double free in DHCP cleanup handling.
  Fix issue with handling DHCP method from oFono.
  Fix issue with IPv6-PD when disabling tethering.
  Fix issue with DNS proxy when disabling tethering.
  Fix issue with Bluetooth start and stop interaction.
  Fix issue with Bluetooth PAN networks on adapter change.
  ver 1.22:
  Fix issue with WPS state synchronization.
  Fix issue with DNS servers and default service.
  Fix issue with DHCP client and rebooting state.
  Add support for NTP exponential backoff handling.
  Add support for NTP kiss-of-death packet handling.
  Add support for Ethernet gadget networking.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1438948800">- bump to 1.29
  Fix issue with IPv6 autoconfiguration when disabled.
  Fix issue with IPv6 temporary route handling.
  Fix issue with IPv6 timers for nameservers.
  Fix issue with DHPCv6 and route configuration.
  Fix issue with DHCPv6 source port and buggy servers.
  Fix issue with DHCPv6 rapid commit option length.
  Fix issue with DHCPv6 rapid commit error handling.
  Fix issue with handling invalid WiFi passphrases.
  Fix issue with connecting Ethernet devices.
  Add support for Ethernet and VLAN usage.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1444737600">- bumpt to 1.30
    Fix issue with pending DNS request during server change.
    Fix issue with empty strings in nameservers configuration.
    Fix issue with time servers during IP configuration change.
    Fix issue with 4-way handshake during roaming.
    Fix issue with open WiFi networks security.
    Fix issue with support for WiFi AnonymousIdentity.
    Fix issue with memory leak and DHCPv6 DUID handling.
    Fix issue with DHCP client and P2P interaction.
    Fix issue with handling provision file updates.
    Fix issue with VPN state updates.
    Disable 6to4 support by default.
- add keyring file
- clean with spec-cleaner
- fix builds for all possible distributions and architectures</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1503403200">- bump to 1.35
  besides other things contains fix for CVE-2017-12865</changelog>
  <changelog author="avvissu@yandex.by" date="1504872000">- Remove obsolete macros
- Add polkit-agent-1 dependency
- Use the %tmpfiles_create macro
- Removal of ldconfig scriptlets from all packages
- Add connman-wait-online.service in post{un}
- Spec file cleanup</changelog>
  <changelog author="avvissu@yandex.by" date="1507032000">- Add connman-1.35-resolvconf.patch
- Activate connman.service if the network services disabled
- Add info in /var/adm/update-messages</changelog>
  <changelog author="avvissu@yandex.by" date="1508414400">- Add configuration file (/etc/connman/main.conf)
- Add ghost lines: main.conf connman connman-vpn</changelog>
  <changelog author="avvissu@yandex.by" date="1508500800">- Remove unrecognized options: disable-gtk-doc, enable-threads,
  disable-iwmx, enable-session-policy</changelog>
  <changelog author="avvissu@yandex.by" date="1509019200">- Change the mode of download_files (sr#521762)
- Remove connman-rpmlintrc (bnc#1057697)
- Add client as a recommended dependency</changelog>
  <changelog author="avvissu@yandex.by" date="1514289600">- Add symlink to network.service (connman-1.35-service.patch)</changelog>
  <changelog author="avvissu@yandex.by" date="1518523200">- Fix build errors due to unsupported header include order with
  newer kernels &gt;=4.15 (connman-1.35-include.patch).</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1557489600">- Update to 1.37:
  * Fix issue with handling invalid gateway addresses.
  * Fix issue with handling updates of default gateway.
  * Fix issue with DHCP servers that require broadcast flag.
  * Add support for option to use gateways as time servers.
  * Add support for option to select default technology.
  * Add support for Address Conflict Detection (ACD).
  * Add support for IPv6 iptables management.
- Change in 1.36:
  * Fix issue with DNS short response on error handling.
  * Fix issue with handling incoming DNS requests.
  * Fix issue with handling empty timeserver list.
  * Fix issue with incorrect DHCP byte order.
  * Fix issue with AllowDomainnameUpdates handling.
  * Fix issue with IPv4 link-local IP conflict error.
  * Fix issue with handling WISPr over TLS connections.
  * Fix issue with WiFi background scanning handling.
  * Fix issue with WiFi disconnect+connect race condition.
  * Fix issue with WiFi scanning and tethering operation.
  * Fix issue with WiFi security change handling.
  * Fix issue with missing signal for WPS changes.
  * Fix issue with online check retry handling.
  * Add support for systemd-resolved backend.
  * Add support for mDNS configuration setup.
- Drop connman-1.35-include.patch
- Drop connman-1.35-resolvconf.patch</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1582027200">- Update to 1.38:
  * Fix issue with online check on IP address update.
  * Fix issue with OpenVPN and encrypted private keys.
  * Fix issue with finishing of VPN connections.
  * Add support for updated stable iwd APIs.
  * Add support for WireGuard networks.
- Spec file cleanup</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1613131200">- Update to 1.39 (bsc#1181751):
  * Fix issue with scanning state synchronization and iwd.
  * Fix issue with invalid key with 4-way handshake offloading.
  * Fix issue with DNS proxy length checks to prevent buffer overflow. (CVE-2021-26675)
  * Fix issue with DHCP leaking stack data via uninitialized variable. (CVE-2021-26676)</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1644580800">- Update to 1.41: (bsc#1194177, bsc#1194176, bsc#1194175)
  * Fix issue with RTNL netlink message alignment.
  * Fix issue with dnsproxy and timeout for TCP feature. (CVE-2022-23097, CVE-2022-23096)
  * Fix issue with dnsproxy and busy loop in TCP server. (CVE-2022-23098)
  * Fix issue with WiFi connection with no passphrase.
  * Add support for wpa_supplicant and WPA3-SAE functionality.
  * Add support for D-Bus ObjectManager interface.
- Renamed downstream patches to separate them from upstream patches
  * Rename 0001-connman-1.35-service.patch to 0100-connman-1.35-service.patch
- Add systemd hardening configuration
  * Rename harden_connman-vpn.service.patch to 0101-harden_connman-vpn.service.patch
  * Rename harden_connman-wait-online.service.patch to 0102-harden_connman-wait-online.service.patch
- Disabled openconnect plugin due to version conflict
- Disabled vpnc plugin for i568 missing dependency
- Disabled hh2serial and tist_working for ppc64le due to version conflict</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1659355200">- Add refcounting to wispr portal detection (bsc#1200190)
  * add 0001-wispr-Rename-wispr_portal_list-to-wispr_portal_hash.patch
  * add 0002-wispr-Ignore-NULL-proxy.patch
  * add 0003-wispr-Add-reference-counter-to-portal-context.patch (CVE-2022-32293)
  * add 0004-wispr-Update-portal-context-references.patch (CVE-2022-32293)
- Fix OOB write in received_data (bsc#1200189)
  * add 0005-gweb-Fix-OOB-write-in-received_data.patch (CVE-2022-32292)</changelog>
</package>
<package pkgid="2980397ae18642cd17af4164c14a99f13fdfe273b4a62e86ff7a4d03821ad7dd" name="connman-devel" arch="x86_64">
  <version epoch="0" ver="1.41" rel="bp154.2.3.1"/>
  <changelog author="sleep_walker@suse.cz" date="1423224000">- bump to 1.28
  ver 1.28:
  Fix issue with DHCPv6 re-transmission timer.
  Fix issue with DHCP service ID option byte order.
  Fix issue with IPv6 connections and SLAAC/DHCPv6.
  Fix issue with telephony and IPv6 autoconfiguration.
  Fix issue with Bluetooth technology setting changes.
  Fix issue with WiFi autoscan interval calculation.
  Fix issue with WiFi and missing BSS signal strength.
  Add support for IPv4 information for WiFi Display.
  ver 1.27:
  Fix issue with memory leak in IP configuration.
  Fix issue with providing random numbers for DHCP.
  Fix issue with handling IN_MOVED_TO inotify events.
  Fix issue with channel selection for WiFi scanning.
  Add support for handling Bluetooth GN and PANU roles.
  ver 1.26:
  Fix issue with missing WiFi security provisioning support.
  Fix issue with immutable setting and provisioned services.
  Fix issue with scheduling DNS cache cleanup procedure.
  Fix issue with IPv6 Privacy setting on service removal.
  Fix issue with DHCPv6 CONFIRM message sending procedure.
  Fix issue with DHCPv6 lease expiration handling support.
  Fix issue with DHCPv4 networks and broadcast flag handling.
  Fix issue with DHCPv4 networks without gateway configuration.
  Fix issue with P2P Peer authorization handling.
  Fix issue with P2P Peer service registration.
  Add support for WiFi Display information elements.
  Add support for systemd-hostnamed integration.
  ver 1.25:
  Fix issue with handling rebind timer for DHCPv6.
  Fix issue with handling DHCP renew transaction.
  Fix issue with user supplied proxy settings and DHCP.
  Fix issue with extra status codes from captive portals.
  Fix issue with service idle state reset on failure.
  Fix issue with DNS label compression handling.
  Add support for experimental P2P Peer service.
  ver 1.24:
  Fix issue with handling slave interfaces.
  Fix issue with handling DHCPv4 broadcast flag.
  Fix issue with handling DHCPv4 lease expiration.
  Fix issue with handling WiFi auto-scanning timeout.
  Fix issue with handling domain and DNS server changes.
  Fix issue with double free and agent messages.
  ver 1.23:
  Fix issue with memory leak in technology handling.
  Fix issue with not removing host route of OpenVPN.
  Fix issue with double free in DHCP cleanup handling.
  Fix issue with handling DHCP method from oFono.
  Fix issue with IPv6-PD when disabling tethering.
  Fix issue with DNS proxy when disabling tethering.
  Fix issue with Bluetooth start and stop interaction.
  Fix issue with Bluetooth PAN networks on adapter change.
  ver 1.22:
  Fix issue with WPS state synchronization.
  Fix issue with DNS servers and default service.
  Fix issue with DHCP client and rebooting state.
  Add support for NTP exponential backoff handling.
  Add support for NTP kiss-of-death packet handling.
  Add support for Ethernet gadget networking.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1438948800">- bump to 1.29
  Fix issue with IPv6 autoconfiguration when disabled.
  Fix issue with IPv6 temporary route handling.
  Fix issue with IPv6 timers for nameservers.
  Fix issue with DHPCv6 and route configuration.
  Fix issue with DHCPv6 source port and buggy servers.
  Fix issue with DHCPv6 rapid commit option length.
  Fix issue with DHCPv6 rapid commit error handling.
  Fix issue with handling invalid WiFi passphrases.
  Fix issue with connecting Ethernet devices.
  Add support for Ethernet and VLAN usage.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1444737600">- bumpt to 1.30
    Fix issue with pending DNS request during server change.
    Fix issue with empty strings in nameservers configuration.
    Fix issue with time servers during IP configuration change.
    Fix issue with 4-way handshake during roaming.
    Fix issue with open WiFi networks security.
    Fix issue with support for WiFi AnonymousIdentity.
    Fix issue with memory leak and DHCPv6 DUID handling.
    Fix issue with DHCP client and P2P interaction.
    Fix issue with handling provision file updates.
    Fix issue with VPN state updates.
    Disable 6to4 support by default.
- add keyring file
- clean with spec-cleaner
- fix builds for all possible distributions and architectures</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1503403200">- bump to 1.35
  besides other things contains fix for CVE-2017-12865</changelog>
  <changelog author="avvissu@yandex.by" date="1504872000">- Remove obsolete macros
- Add polkit-agent-1 dependency
- Use the %tmpfiles_create macro
- Removal of ldconfig scriptlets from all packages
- Add connman-wait-online.service in post{un}
- Spec file cleanup</changelog>
  <changelog author="avvissu@yandex.by" date="1507032000">- Add connman-1.35-resolvconf.patch
- Activate connman.service if the network services disabled
- Add info in /var/adm/update-messages</changelog>
  <changelog author="avvissu@yandex.by" date="1508414400">- Add configuration file (/etc/connman/main.conf)
- Add ghost lines: main.conf connman connman-vpn</changelog>
  <changelog author="avvissu@yandex.by" date="1508500800">- Remove unrecognized options: disable-gtk-doc, enable-threads,
  disable-iwmx, enable-session-policy</changelog>
  <changelog author="avvissu@yandex.by" date="1509019200">- Change the mode of download_files (sr#521762)
- Remove connman-rpmlintrc (bnc#1057697)
- Add client as a recommended dependency</changelog>
  <changelog author="avvissu@yandex.by" date="1514289600">- Add symlink to network.service (connman-1.35-service.patch)</changelog>
  <changelog author="avvissu@yandex.by" date="1518523200">- Fix build errors due to unsupported header include order with
  newer kernels &gt;=4.15 (connman-1.35-include.patch).</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1557489600">- Update to 1.37:
  * Fix issue with handling invalid gateway addresses.
  * Fix issue with handling updates of default gateway.
  * Fix issue with DHCP servers that require broadcast flag.
  * Add support for option to use gateways as time servers.
  * Add support for option to select default technology.
  * Add support for Address Conflict Detection (ACD).
  * Add support for IPv6 iptables management.
- Change in 1.36:
  * Fix issue with DNS short response on error handling.
  * Fix issue with handling incoming DNS requests.
  * Fix issue with handling empty timeserver list.
  * Fix issue with incorrect DHCP byte order.
  * Fix issue with AllowDomainnameUpdates handling.
  * Fix issue with IPv4 link-local IP conflict error.
  * Fix issue with handling WISPr over TLS connections.
  * Fix issue with WiFi background scanning handling.
  * Fix issue with WiFi disconnect+connect race condition.
  * Fix issue with WiFi scanning and tethering operation.
  * Fix issue with WiFi security change handling.
  * Fix issue with missing signal for WPS changes.
  * Fix issue with online check retry handling.
  * Add support for systemd-resolved backend.
  * Add support for mDNS configuration setup.
- Drop connman-1.35-include.patch
- Drop connman-1.35-resolvconf.patch</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1582027200">- Update to 1.38:
  * Fix issue with online check on IP address update.
  * Fix issue with OpenVPN and encrypted private keys.
  * Fix issue with finishing of VPN connections.
  * Add support for updated stable iwd APIs.
  * Add support for WireGuard networks.
- Spec file cleanup</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1613131200">- Update to 1.39 (bsc#1181751):
  * Fix issue with scanning state synchronization and iwd.
  * Fix issue with invalid key with 4-way handshake offloading.
  * Fix issue with DNS proxy length checks to prevent buffer overflow. (CVE-2021-26675)
  * Fix issue with DHCP leaking stack data via uninitialized variable. (CVE-2021-26676)</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1644580800">- Update to 1.41: (bsc#1194177, bsc#1194176, bsc#1194175)
  * Fix issue with RTNL netlink message alignment.
  * Fix issue with dnsproxy and timeout for TCP feature. (CVE-2022-23097, CVE-2022-23096)
  * Fix issue with dnsproxy and busy loop in TCP server. (CVE-2022-23098)
  * Fix issue with WiFi connection with no passphrase.
  * Add support for wpa_supplicant and WPA3-SAE functionality.
  * Add support for D-Bus ObjectManager interface.
- Renamed downstream patches to separate them from upstream patches
  * Rename 0001-connman-1.35-service.patch to 0100-connman-1.35-service.patch
- Add systemd hardening configuration
  * Rename harden_connman-vpn.service.patch to 0101-harden_connman-vpn.service.patch
  * Rename harden_connman-wait-online.service.patch to 0102-harden_connman-wait-online.service.patch
- Disabled openconnect plugin due to version conflict
- Disabled vpnc plugin for i568 missing dependency
- Disabled hh2serial and tist_working for ppc64le due to version conflict</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1659355200">- Add refcounting to wispr portal detection (bsc#1200190)
  * add 0001-wispr-Rename-wispr_portal_list-to-wispr_portal_hash.patch
  * add 0002-wispr-Ignore-NULL-proxy.patch
  * add 0003-wispr-Add-reference-counter-to-portal-context.patch (CVE-2022-32293)
  * add 0004-wispr-Update-portal-context-references.patch (CVE-2022-32293)
- Fix OOB write in received_data (bsc#1200189)
  * add 0005-gweb-Fix-OOB-write-in-received_data.patch (CVE-2022-32292)</changelog>
</package>
<package pkgid="f87580ba614e9285b3471c75543b5a16655cb723e420a2b59a5d05c02468feb5" name="connman-doc" arch="aarch64">
  <version epoch="0" ver="1.41" rel="bp154.2.3.1"/>
  <changelog author="sleep_walker@suse.cz" date="1423224000">- bump to 1.28
  ver 1.28:
  Fix issue with DHCPv6 re-transmission timer.
  Fix issue with DHCP service ID option byte order.
  Fix issue with IPv6 connections and SLAAC/DHCPv6.
  Fix issue with telephony and IPv6 autoconfiguration.
  Fix issue with Bluetooth technology setting changes.
  Fix issue with WiFi autoscan interval calculation.
  Fix issue with WiFi and missing BSS signal strength.
  Add support for IPv4 information for WiFi Display.
  ver 1.27:
  Fix issue with memory leak in IP configuration.
  Fix issue with providing random numbers for DHCP.
  Fix issue with handling IN_MOVED_TO inotify events.
  Fix issue with channel selection for WiFi scanning.
  Add support for handling Bluetooth GN and PANU roles.
  ver 1.26:
  Fix issue with missing WiFi security provisioning support.
  Fix issue with immutable setting and provisioned services.
  Fix issue with scheduling DNS cache cleanup procedure.
  Fix issue with IPv6 Privacy setting on service removal.
  Fix issue with DHCPv6 CONFIRM message sending procedure.
  Fix issue with DHCPv6 lease expiration handling support.
  Fix issue with DHCPv4 networks and broadcast flag handling.
  Fix issue with DHCPv4 networks without gateway configuration.
  Fix issue with P2P Peer authorization handling.
  Fix issue with P2P Peer service registration.
  Add support for WiFi Display information elements.
  Add support for systemd-hostnamed integration.
  ver 1.25:
  Fix issue with handling rebind timer for DHCPv6.
  Fix issue with handling DHCP renew transaction.
  Fix issue with user supplied proxy settings and DHCP.
  Fix issue with extra status codes from captive portals.
  Fix issue with service idle state reset on failure.
  Fix issue with DNS label compression handling.
  Add support for experimental P2P Peer service.
  ver 1.24:
  Fix issue with handling slave interfaces.
  Fix issue with handling DHCPv4 broadcast flag.
  Fix issue with handling DHCPv4 lease expiration.
  Fix issue with handling WiFi auto-scanning timeout.
  Fix issue with handling domain and DNS server changes.
  Fix issue with double free and agent messages.
  ver 1.23:
  Fix issue with memory leak in technology handling.
  Fix issue with not removing host route of OpenVPN.
  Fix issue with double free in DHCP cleanup handling.
  Fix issue with handling DHCP method from oFono.
  Fix issue with IPv6-PD when disabling tethering.
  Fix issue with DNS proxy when disabling tethering.
  Fix issue with Bluetooth start and stop interaction.
  Fix issue with Bluetooth PAN networks on adapter change.
  ver 1.22:
  Fix issue with WPS state synchronization.
  Fix issue with DNS servers and default service.
  Fix issue with DHCP client and rebooting state.
  Add support for NTP exponential backoff handling.
  Add support for NTP kiss-of-death packet handling.
  Add support for Ethernet gadget networking.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1438948800">- bump to 1.29
  Fix issue with IPv6 autoconfiguration when disabled.
  Fix issue with IPv6 temporary route handling.
  Fix issue with IPv6 timers for nameservers.
  Fix issue with DHPCv6 and route configuration.
  Fix issue with DHCPv6 source port and buggy servers.
  Fix issue with DHCPv6 rapid commit option length.
  Fix issue with DHCPv6 rapid commit error handling.
  Fix issue with handling invalid WiFi passphrases.
  Fix issue with connecting Ethernet devices.
  Add support for Ethernet and VLAN usage.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1444737600">- bumpt to 1.30
    Fix issue with pending DNS request during server change.
    Fix issue with empty strings in nameservers configuration.
    Fix issue with time servers during IP configuration change.
    Fix issue with 4-way handshake during roaming.
    Fix issue with open WiFi networks security.
    Fix issue with support for WiFi AnonymousIdentity.
    Fix issue with memory leak and DHCPv6 DUID handling.
    Fix issue with DHCP client and P2P interaction.
    Fix issue with handling provision file updates.
    Fix issue with VPN state updates.
    Disable 6to4 support by default.
- add keyring file
- clean with spec-cleaner
- fix builds for all possible distributions and architectures</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1503403200">- bump to 1.35
  besides other things contains fix for CVE-2017-12865</changelog>
  <changelog author="avvissu@yandex.by" date="1504872000">- Remove obsolete macros
- Add polkit-agent-1 dependency
- Use the %tmpfiles_create macro
- Removal of ldconfig scriptlets from all packages
- Add connman-wait-online.service in post{un}
- Spec file cleanup</changelog>
  <changelog author="avvissu@yandex.by" date="1507032000">- Add connman-1.35-resolvconf.patch
- Activate connman.service if the network services disabled
- Add info in /var/adm/update-messages</changelog>
  <changelog author="avvissu@yandex.by" date="1508414400">- Add configuration file (/etc/connman/main.conf)
- Add ghost lines: main.conf connman connman-vpn</changelog>
  <changelog author="avvissu@yandex.by" date="1508500800">- Remove unrecognized options: disable-gtk-doc, enable-threads,
  disable-iwmx, enable-session-policy</changelog>
  <changelog author="avvissu@yandex.by" date="1509019200">- Change the mode of download_files (sr#521762)
- Remove connman-rpmlintrc (bnc#1057697)
- Add client as a recommended dependency</changelog>
  <changelog author="avvissu@yandex.by" date="1514289600">- Add symlink to network.service (connman-1.35-service.patch)</changelog>
  <changelog author="avvissu@yandex.by" date="1518523200">- Fix build errors due to unsupported header include order with
  newer kernels &gt;=4.15 (connman-1.35-include.patch).</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1557489600">- Update to 1.37:
  * Fix issue with handling invalid gateway addresses.
  * Fix issue with handling updates of default gateway.
  * Fix issue with DHCP servers that require broadcast flag.
  * Add support for option to use gateways as time servers.
  * Add support for option to select default technology.
  * Add support for Address Conflict Detection (ACD).
  * Add support for IPv6 iptables management.
- Change in 1.36:
  * Fix issue with DNS short response on error handling.
  * Fix issue with handling incoming DNS requests.
  * Fix issue with handling empty timeserver list.
  * Fix issue with incorrect DHCP byte order.
  * Fix issue with AllowDomainnameUpdates handling.
  * Fix issue with IPv4 link-local IP conflict error.
  * Fix issue with handling WISPr over TLS connections.
  * Fix issue with WiFi background scanning handling.
  * Fix issue with WiFi disconnect+connect race condition.
  * Fix issue with WiFi scanning and tethering operation.
  * Fix issue with WiFi security change handling.
  * Fix issue with missing signal for WPS changes.
  * Fix issue with online check retry handling.
  * Add support for systemd-resolved backend.
  * Add support for mDNS configuration setup.
- Drop connman-1.35-include.patch
- Drop connman-1.35-resolvconf.patch</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1582027200">- Update to 1.38:
  * Fix issue with online check on IP address update.
  * Fix issue with OpenVPN and encrypted private keys.
  * Fix issue with finishing of VPN connections.
  * Add support for updated stable iwd APIs.
  * Add support for WireGuard networks.
- Spec file cleanup</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1613131200">- Update to 1.39 (bsc#1181751):
  * Fix issue with scanning state synchronization and iwd.
  * Fix issue with invalid key with 4-way handshake offloading.
  * Fix issue with DNS proxy length checks to prevent buffer overflow. (CVE-2021-26675)
  * Fix issue with DHCP leaking stack data via uninitialized variable. (CVE-2021-26676)</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1644580800">- Update to 1.41: (bsc#1194177, bsc#1194176, bsc#1194175)
  * Fix issue with RTNL netlink message alignment.
  * Fix issue with dnsproxy and timeout for TCP feature. (CVE-2022-23097, CVE-2022-23096)
  * Fix issue with dnsproxy and busy loop in TCP server. (CVE-2022-23098)
  * Fix issue with WiFi connection with no passphrase.
  * Add support for wpa_supplicant and WPA3-SAE functionality.
  * Add support for D-Bus ObjectManager interface.
- Renamed downstream patches to separate them from upstream patches
  * Rename 0001-connman-1.35-service.patch to 0100-connman-1.35-service.patch
- Add systemd hardening configuration
  * Rename harden_connman-vpn.service.patch to 0101-harden_connman-vpn.service.patch
  * Rename harden_connman-wait-online.service.patch to 0102-harden_connman-wait-online.service.patch
- Disabled openconnect plugin due to version conflict
- Disabled vpnc plugin for i568 missing dependency
- Disabled hh2serial and tist_working for ppc64le due to version conflict</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1659355200">- Add refcounting to wispr portal detection (bsc#1200190)
  * add 0001-wispr-Rename-wispr_portal_list-to-wispr_portal_hash.patch
  * add 0002-wispr-Ignore-NULL-proxy.patch
  * add 0003-wispr-Add-reference-counter-to-portal-context.patch (CVE-2022-32293)
  * add 0004-wispr-Update-portal-context-references.patch (CVE-2022-32293)
- Fix OOB write in received_data (bsc#1200189)
  * add 0005-gweb-Fix-OOB-write-in-received_data.patch (CVE-2022-32292)</changelog>
</package>
<package pkgid="ad6a5d0cfa9d83c929e94fed4a15b70a0161559862f2c301b6502f3995612293" name="connman-doc" arch="i586">
  <version epoch="0" ver="1.41" rel="bp154.2.3.1"/>
  <changelog author="sleep_walker@suse.cz" date="1423224000">- bump to 1.28
  ver 1.28:
  Fix issue with DHCPv6 re-transmission timer.
  Fix issue with DHCP service ID option byte order.
  Fix issue with IPv6 connections and SLAAC/DHCPv6.
  Fix issue with telephony and IPv6 autoconfiguration.
  Fix issue with Bluetooth technology setting changes.
  Fix issue with WiFi autoscan interval calculation.
  Fix issue with WiFi and missing BSS signal strength.
  Add support for IPv4 information for WiFi Display.
  ver 1.27:
  Fix issue with memory leak in IP configuration.
  Fix issue with providing random numbers for DHCP.
  Fix issue with handling IN_MOVED_TO inotify events.
  Fix issue with channel selection for WiFi scanning.
  Add support for handling Bluetooth GN and PANU roles.
  ver 1.26:
  Fix issue with missing WiFi security provisioning support.
  Fix issue with immutable setting and provisioned services.
  Fix issue with scheduling DNS cache cleanup procedure.
  Fix issue with IPv6 Privacy setting on service removal.
  Fix issue with DHCPv6 CONFIRM message sending procedure.
  Fix issue with DHCPv6 lease expiration handling support.
  Fix issue with DHCPv4 networks and broadcast flag handling.
  Fix issue with DHCPv4 networks without gateway configuration.
  Fix issue with P2P Peer authorization handling.
  Fix issue with P2P Peer service registration.
  Add support for WiFi Display information elements.
  Add support for systemd-hostnamed integration.
  ver 1.25:
  Fix issue with handling rebind timer for DHCPv6.
  Fix issue with handling DHCP renew transaction.
  Fix issue with user supplied proxy settings and DHCP.
  Fix issue with extra status codes from captive portals.
  Fix issue with service idle state reset on failure.
  Fix issue with DNS label compression handling.
  Add support for experimental P2P Peer service.
  ver 1.24:
  Fix issue with handling slave interfaces.
  Fix issue with handling DHCPv4 broadcast flag.
  Fix issue with handling DHCPv4 lease expiration.
  Fix issue with handling WiFi auto-scanning timeout.
  Fix issue with handling domain and DNS server changes.
  Fix issue with double free and agent messages.
  ver 1.23:
  Fix issue with memory leak in technology handling.
  Fix issue with not removing host route of OpenVPN.
  Fix issue with double free in DHCP cleanup handling.
  Fix issue with handling DHCP method from oFono.
  Fix issue with IPv6-PD when disabling tethering.
  Fix issue with DNS proxy when disabling tethering.
  Fix issue with Bluetooth start and stop interaction.
  Fix issue with Bluetooth PAN networks on adapter change.
  ver 1.22:
  Fix issue with WPS state synchronization.
  Fix issue with DNS servers and default service.
  Fix issue with DHCP client and rebooting state.
  Add support for NTP exponential backoff handling.
  Add support for NTP kiss-of-death packet handling.
  Add support for Ethernet gadget networking.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1438948800">- bump to 1.29
  Fix issue with IPv6 autoconfiguration when disabled.
  Fix issue with IPv6 temporary route handling.
  Fix issue with IPv6 timers for nameservers.
  Fix issue with DHPCv6 and route configuration.
  Fix issue with DHCPv6 source port and buggy servers.
  Fix issue with DHCPv6 rapid commit option length.
  Fix issue with DHCPv6 rapid commit error handling.
  Fix issue with handling invalid WiFi passphrases.
  Fix issue with connecting Ethernet devices.
  Add support for Ethernet and VLAN usage.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1444737600">- bumpt to 1.30
    Fix issue with pending DNS request during server change.
    Fix issue with empty strings in nameservers configuration.
    Fix issue with time servers during IP configuration change.
    Fix issue with 4-way handshake during roaming.
    Fix issue with open WiFi networks security.
    Fix issue with support for WiFi AnonymousIdentity.
    Fix issue with memory leak and DHCPv6 DUID handling.
    Fix issue with DHCP client and P2P interaction.
    Fix issue with handling provision file updates.
    Fix issue with VPN state updates.
    Disable 6to4 support by default.
- add keyring file
- clean with spec-cleaner
- fix builds for all possible distributions and architectures</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1503403200">- bump to 1.35
  besides other things contains fix for CVE-2017-12865</changelog>
  <changelog author="avvissu@yandex.by" date="1504872000">- Remove obsolete macros
- Add polkit-agent-1 dependency
- Use the %tmpfiles_create macro
- Removal of ldconfig scriptlets from all packages
- Add connman-wait-online.service in post{un}
- Spec file cleanup</changelog>
  <changelog author="avvissu@yandex.by" date="1507032000">- Add connman-1.35-resolvconf.patch
- Activate connman.service if the network services disabled
- Add info in /var/adm/update-messages</changelog>
  <changelog author="avvissu@yandex.by" date="1508414400">- Add configuration file (/etc/connman/main.conf)
- Add ghost lines: main.conf connman connman-vpn</changelog>
  <changelog author="avvissu@yandex.by" date="1508500800">- Remove unrecognized options: disable-gtk-doc, enable-threads,
  disable-iwmx, enable-session-policy</changelog>
  <changelog author="avvissu@yandex.by" date="1509019200">- Change the mode of download_files (sr#521762)
- Remove connman-rpmlintrc (bnc#1057697)
- Add client as a recommended dependency</changelog>
  <changelog author="avvissu@yandex.by" date="1514289600">- Add symlink to network.service (connman-1.35-service.patch)</changelog>
  <changelog author="avvissu@yandex.by" date="1518523200">- Fix build errors due to unsupported header include order with
  newer kernels &gt;=4.15 (connman-1.35-include.patch).</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1557489600">- Update to 1.37:
  * Fix issue with handling invalid gateway addresses.
  * Fix issue with handling updates of default gateway.
  * Fix issue with DHCP servers that require broadcast flag.
  * Add support for option to use gateways as time servers.
  * Add support for option to select default technology.
  * Add support for Address Conflict Detection (ACD).
  * Add support for IPv6 iptables management.
- Change in 1.36:
  * Fix issue with DNS short response on error handling.
  * Fix issue with handling incoming DNS requests.
  * Fix issue with handling empty timeserver list.
  * Fix issue with incorrect DHCP byte order.
  * Fix issue with AllowDomainnameUpdates handling.
  * Fix issue with IPv4 link-local IP conflict error.
  * Fix issue with handling WISPr over TLS connections.
  * Fix issue with WiFi background scanning handling.
  * Fix issue with WiFi disconnect+connect race condition.
  * Fix issue with WiFi scanning and tethering operation.
  * Fix issue with WiFi security change handling.
  * Fix issue with missing signal for WPS changes.
  * Fix issue with online check retry handling.
  * Add support for systemd-resolved backend.
  * Add support for mDNS configuration setup.
- Drop connman-1.35-include.patch
- Drop connman-1.35-resolvconf.patch</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1582027200">- Update to 1.38:
  * Fix issue with online check on IP address update.
  * Fix issue with OpenVPN and encrypted private keys.
  * Fix issue with finishing of VPN connections.
  * Add support for updated stable iwd APIs.
  * Add support for WireGuard networks.
- Spec file cleanup</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1613131200">- Update to 1.39 (bsc#1181751):
  * Fix issue with scanning state synchronization and iwd.
  * Fix issue with invalid key with 4-way handshake offloading.
  * Fix issue with DNS proxy length checks to prevent buffer overflow. (CVE-2021-26675)
  * Fix issue with DHCP leaking stack data via uninitialized variable. (CVE-2021-26676)</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1644580800">- Update to 1.41: (bsc#1194177, bsc#1194176, bsc#1194175)
  * Fix issue with RTNL netlink message alignment.
  * Fix issue with dnsproxy and timeout for TCP feature. (CVE-2022-23097, CVE-2022-23096)
  * Fix issue with dnsproxy and busy loop in TCP server. (CVE-2022-23098)
  * Fix issue with WiFi connection with no passphrase.
  * Add support for wpa_supplicant and WPA3-SAE functionality.
  * Add support for D-Bus ObjectManager interface.
- Renamed downstream patches to separate them from upstream patches
  * Rename 0001-connman-1.35-service.patch to 0100-connman-1.35-service.patch
- Add systemd hardening configuration
  * Rename harden_connman-vpn.service.patch to 0101-harden_connman-vpn.service.patch
  * Rename harden_connman-wait-online.service.patch to 0102-harden_connman-wait-online.service.patch
- Disabled openconnect plugin due to version conflict
- Disabled vpnc plugin for i568 missing dependency
- Disabled hh2serial and tist_working for ppc64le due to version conflict</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1659355200">- Add refcounting to wispr portal detection (bsc#1200190)
  * add 0001-wispr-Rename-wispr_portal_list-to-wispr_portal_hash.patch
  * add 0002-wispr-Ignore-NULL-proxy.patch
  * add 0003-wispr-Add-reference-counter-to-portal-context.patch (CVE-2022-32293)
  * add 0004-wispr-Update-portal-context-references.patch (CVE-2022-32293)
- Fix OOB write in received_data (bsc#1200189)
  * add 0005-gweb-Fix-OOB-write-in-received_data.patch (CVE-2022-32292)</changelog>
</package>
<package pkgid="45f085cabeed0f11eb4d617f6feba5983ce3837f674d4d952a6e24cedade0cc6" name="connman-doc" arch="ppc64le">
  <version epoch="0" ver="1.41" rel="bp154.2.3.1"/>
  <changelog author="sleep_walker@suse.cz" date="1423224000">- bump to 1.28
  ver 1.28:
  Fix issue with DHCPv6 re-transmission timer.
  Fix issue with DHCP service ID option byte order.
  Fix issue with IPv6 connections and SLAAC/DHCPv6.
  Fix issue with telephony and IPv6 autoconfiguration.
  Fix issue with Bluetooth technology setting changes.
  Fix issue with WiFi autoscan interval calculation.
  Fix issue with WiFi and missing BSS signal strength.
  Add support for IPv4 information for WiFi Display.
  ver 1.27:
  Fix issue with memory leak in IP configuration.
  Fix issue with providing random numbers for DHCP.
  Fix issue with handling IN_MOVED_TO inotify events.
  Fix issue with channel selection for WiFi scanning.
  Add support for handling Bluetooth GN and PANU roles.
  ver 1.26:
  Fix issue with missing WiFi security provisioning support.
  Fix issue with immutable setting and provisioned services.
  Fix issue with scheduling DNS cache cleanup procedure.
  Fix issue with IPv6 Privacy setting on service removal.
  Fix issue with DHCPv6 CONFIRM message sending procedure.
  Fix issue with DHCPv6 lease expiration handling support.
  Fix issue with DHCPv4 networks and broadcast flag handling.
  Fix issue with DHCPv4 networks without gateway configuration.
  Fix issue with P2P Peer authorization handling.
  Fix issue with P2P Peer service registration.
  Add support for WiFi Display information elements.
  Add support for systemd-hostnamed integration.
  ver 1.25:
  Fix issue with handling rebind timer for DHCPv6.
  Fix issue with handling DHCP renew transaction.
  Fix issue with user supplied proxy settings and DHCP.
  Fix issue with extra status codes from captive portals.
  Fix issue with service idle state reset on failure.
  Fix issue with DNS label compression handling.
  Add support for experimental P2P Peer service.
  ver 1.24:
  Fix issue with handling slave interfaces.
  Fix issue with handling DHCPv4 broadcast flag.
  Fix issue with handling DHCPv4 lease expiration.
  Fix issue with handling WiFi auto-scanning timeout.
  Fix issue with handling domain and DNS server changes.
  Fix issue with double free and agent messages.
  ver 1.23:
  Fix issue with memory leak in technology handling.
  Fix issue with not removing host route of OpenVPN.
  Fix issue with double free in DHCP cleanup handling.
  Fix issue with handling DHCP method from oFono.
  Fix issue with IPv6-PD when disabling tethering.
  Fix issue with DNS proxy when disabling tethering.
  Fix issue with Bluetooth start and stop interaction.
  Fix issue with Bluetooth PAN networks on adapter change.
  ver 1.22:
  Fix issue with WPS state synchronization.
  Fix issue with DNS servers and default service.
  Fix issue with DHCP client and rebooting state.
  Add support for NTP exponential backoff handling.
  Add support for NTP kiss-of-death packet handling.
  Add support for Ethernet gadget networking.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1438948800">- bump to 1.29
  Fix issue with IPv6 autoconfiguration when disabled.
  Fix issue with IPv6 temporary route handling.
  Fix issue with IPv6 timers for nameservers.
  Fix issue with DHPCv6 and route configuration.
  Fix issue with DHCPv6 source port and buggy servers.
  Fix issue with DHCPv6 rapid commit option length.
  Fix issue with DHCPv6 rapid commit error handling.
  Fix issue with handling invalid WiFi passphrases.
  Fix issue with connecting Ethernet devices.
  Add support for Ethernet and VLAN usage.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1444737600">- bumpt to 1.30
    Fix issue with pending DNS request during server change.
    Fix issue with empty strings in nameservers configuration.
    Fix issue with time servers during IP configuration change.
    Fix issue with 4-way handshake during roaming.
    Fix issue with open WiFi networks security.
    Fix issue with support for WiFi AnonymousIdentity.
    Fix issue with memory leak and DHCPv6 DUID handling.
    Fix issue with DHCP client and P2P interaction.
    Fix issue with handling provision file updates.
    Fix issue with VPN state updates.
    Disable 6to4 support by default.
- add keyring file
- clean with spec-cleaner
- fix builds for all possible distributions and architectures</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1503403200">- bump to 1.35
  besides other things contains fix for CVE-2017-12865</changelog>
  <changelog author="avvissu@yandex.by" date="1504872000">- Remove obsolete macros
- Add polkit-agent-1 dependency
- Use the %tmpfiles_create macro
- Removal of ldconfig scriptlets from all packages
- Add connman-wait-online.service in post{un}
- Spec file cleanup</changelog>
  <changelog author="avvissu@yandex.by" date="1507032000">- Add connman-1.35-resolvconf.patch
- Activate connman.service if the network services disabled
- Add info in /var/adm/update-messages</changelog>
  <changelog author="avvissu@yandex.by" date="1508414400">- Add configuration file (/etc/connman/main.conf)
- Add ghost lines: main.conf connman connman-vpn</changelog>
  <changelog author="avvissu@yandex.by" date="1508500800">- Remove unrecognized options: disable-gtk-doc, enable-threads,
  disable-iwmx, enable-session-policy</changelog>
  <changelog author="avvissu@yandex.by" date="1509019200">- Change the mode of download_files (sr#521762)
- Remove connman-rpmlintrc (bnc#1057697)
- Add client as a recommended dependency</changelog>
  <changelog author="avvissu@yandex.by" date="1514289600">- Add symlink to network.service (connman-1.35-service.patch)</changelog>
  <changelog author="avvissu@yandex.by" date="1518523200">- Fix build errors due to unsupported header include order with
  newer kernels &gt;=4.15 (connman-1.35-include.patch).</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1557489600">- Update to 1.37:
  * Fix issue with handling invalid gateway addresses.
  * Fix issue with handling updates of default gateway.
  * Fix issue with DHCP servers that require broadcast flag.
  * Add support for option to use gateways as time servers.
  * Add support for option to select default technology.
  * Add support for Address Conflict Detection (ACD).
  * Add support for IPv6 iptables management.
- Change in 1.36:
  * Fix issue with DNS short response on error handling.
  * Fix issue with handling incoming DNS requests.
  * Fix issue with handling empty timeserver list.
  * Fix issue with incorrect DHCP byte order.
  * Fix issue with AllowDomainnameUpdates handling.
  * Fix issue with IPv4 link-local IP conflict error.
  * Fix issue with handling WISPr over TLS connections.
  * Fix issue with WiFi background scanning handling.
  * Fix issue with WiFi disconnect+connect race condition.
  * Fix issue with WiFi scanning and tethering operation.
  * Fix issue with WiFi security change handling.
  * Fix issue with missing signal for WPS changes.
  * Fix issue with online check retry handling.
  * Add support for systemd-resolved backend.
  * Add support for mDNS configuration setup.
- Drop connman-1.35-include.patch
- Drop connman-1.35-resolvconf.patch</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1582027200">- Update to 1.38:
  * Fix issue with online check on IP address update.
  * Fix issue with OpenVPN and encrypted private keys.
  * Fix issue with finishing of VPN connections.
  * Add support for updated stable iwd APIs.
  * Add support for WireGuard networks.
- Spec file cleanup</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1613131200">- Update to 1.39 (bsc#1181751):
  * Fix issue with scanning state synchronization and iwd.
  * Fix issue with invalid key with 4-way handshake offloading.
  * Fix issue with DNS proxy length checks to prevent buffer overflow. (CVE-2021-26675)
  * Fix issue with DHCP leaking stack data via uninitialized variable. (CVE-2021-26676)</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1644580800">- Update to 1.41: (bsc#1194177, bsc#1194176, bsc#1194175)
  * Fix issue with RTNL netlink message alignment.
  * Fix issue with dnsproxy and timeout for TCP feature. (CVE-2022-23097, CVE-2022-23096)
  * Fix issue with dnsproxy and busy loop in TCP server. (CVE-2022-23098)
  * Fix issue with WiFi connection with no passphrase.
  * Add support for wpa_supplicant and WPA3-SAE functionality.
  * Add support for D-Bus ObjectManager interface.
- Renamed downstream patches to separate them from upstream patches
  * Rename 0001-connman-1.35-service.patch to 0100-connman-1.35-service.patch
- Add systemd hardening configuration
  * Rename harden_connman-vpn.service.patch to 0101-harden_connman-vpn.service.patch
  * Rename harden_connman-wait-online.service.patch to 0102-harden_connman-wait-online.service.patch
- Disabled openconnect plugin due to version conflict
- Disabled vpnc plugin for i568 missing dependency
- Disabled hh2serial and tist_working for ppc64le due to version conflict</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1659355200">- Add refcounting to wispr portal detection (bsc#1200190)
  * add 0001-wispr-Rename-wispr_portal_list-to-wispr_portal_hash.patch
  * add 0002-wispr-Ignore-NULL-proxy.patch
  * add 0003-wispr-Add-reference-counter-to-portal-context.patch (CVE-2022-32293)
  * add 0004-wispr-Update-portal-context-references.patch (CVE-2022-32293)
- Fix OOB write in received_data (bsc#1200189)
  * add 0005-gweb-Fix-OOB-write-in-received_data.patch (CVE-2022-32292)</changelog>
</package>
<package pkgid="ac8ac07aa780f62ee10e251af0b169793d423297217f8fadeba31daea4d9d840" name="connman-doc" arch="s390x">
  <version epoch="0" ver="1.41" rel="bp154.2.3.1"/>
  <changelog author="sleep_walker@suse.cz" date="1423224000">- bump to 1.28
  ver 1.28:
  Fix issue with DHCPv6 re-transmission timer.
  Fix issue with DHCP service ID option byte order.
  Fix issue with IPv6 connections and SLAAC/DHCPv6.
  Fix issue with telephony and IPv6 autoconfiguration.
  Fix issue with Bluetooth technology setting changes.
  Fix issue with WiFi autoscan interval calculation.
  Fix issue with WiFi and missing BSS signal strength.
  Add support for IPv4 information for WiFi Display.
  ver 1.27:
  Fix issue with memory leak in IP configuration.
  Fix issue with providing random numbers for DHCP.
  Fix issue with handling IN_MOVED_TO inotify events.
  Fix issue with channel selection for WiFi scanning.
  Add support for handling Bluetooth GN and PANU roles.
  ver 1.26:
  Fix issue with missing WiFi security provisioning support.
  Fix issue with immutable setting and provisioned services.
  Fix issue with scheduling DNS cache cleanup procedure.
  Fix issue with IPv6 Privacy setting on service removal.
  Fix issue with DHCPv6 CONFIRM message sending procedure.
  Fix issue with DHCPv6 lease expiration handling support.
  Fix issue with DHCPv4 networks and broadcast flag handling.
  Fix issue with DHCPv4 networks without gateway configuration.
  Fix issue with P2P Peer authorization handling.
  Fix issue with P2P Peer service registration.
  Add support for WiFi Display information elements.
  Add support for systemd-hostnamed integration.
  ver 1.25:
  Fix issue with handling rebind timer for DHCPv6.
  Fix issue with handling DHCP renew transaction.
  Fix issue with user supplied proxy settings and DHCP.
  Fix issue with extra status codes from captive portals.
  Fix issue with service idle state reset on failure.
  Fix issue with DNS label compression handling.
  Add support for experimental P2P Peer service.
  ver 1.24:
  Fix issue with handling slave interfaces.
  Fix issue with handling DHCPv4 broadcast flag.
  Fix issue with handling DHCPv4 lease expiration.
  Fix issue with handling WiFi auto-scanning timeout.
  Fix issue with handling domain and DNS server changes.
  Fix issue with double free and agent messages.
  ver 1.23:
  Fix issue with memory leak in technology handling.
  Fix issue with not removing host route of OpenVPN.
  Fix issue with double free in DHCP cleanup handling.
  Fix issue with handling DHCP method from oFono.
  Fix issue with IPv6-PD when disabling tethering.
  Fix issue with DNS proxy when disabling tethering.
  Fix issue with Bluetooth start and stop interaction.
  Fix issue with Bluetooth PAN networks on adapter change.
  ver 1.22:
  Fix issue with WPS state synchronization.
  Fix issue with DNS servers and default service.
  Fix issue with DHCP client and rebooting state.
  Add support for NTP exponential backoff handling.
  Add support for NTP kiss-of-death packet handling.
  Add support for Ethernet gadget networking.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1438948800">- bump to 1.29
  Fix issue with IPv6 autoconfiguration when disabled.
  Fix issue with IPv6 temporary route handling.
  Fix issue with IPv6 timers for nameservers.
  Fix issue with DHPCv6 and route configuration.
  Fix issue with DHCPv6 source port and buggy servers.
  Fix issue with DHCPv6 rapid commit option length.
  Fix issue with DHCPv6 rapid commit error handling.
  Fix issue with handling invalid WiFi passphrases.
  Fix issue with connecting Ethernet devices.
  Add support for Ethernet and VLAN usage.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1444737600">- bumpt to 1.30
    Fix issue with pending DNS request during server change.
    Fix issue with empty strings in nameservers configuration.
    Fix issue with time servers during IP configuration change.
    Fix issue with 4-way handshake during roaming.
    Fix issue with open WiFi networks security.
    Fix issue with support for WiFi AnonymousIdentity.
    Fix issue with memory leak and DHCPv6 DUID handling.
    Fix issue with DHCP client and P2P interaction.
    Fix issue with handling provision file updates.
    Fix issue with VPN state updates.
    Disable 6to4 support by default.
- add keyring file
- clean with spec-cleaner
- fix builds for all possible distributions and architectures</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1503403200">- bump to 1.35
  besides other things contains fix for CVE-2017-12865</changelog>
  <changelog author="avvissu@yandex.by" date="1504872000">- Remove obsolete macros
- Add polkit-agent-1 dependency
- Use the %tmpfiles_create macro
- Removal of ldconfig scriptlets from all packages
- Add connman-wait-online.service in post{un}
- Spec file cleanup</changelog>
  <changelog author="avvissu@yandex.by" date="1507032000">- Add connman-1.35-resolvconf.patch
- Activate connman.service if the network services disabled
- Add info in /var/adm/update-messages</changelog>
  <changelog author="avvissu@yandex.by" date="1508414400">- Add configuration file (/etc/connman/main.conf)
- Add ghost lines: main.conf connman connman-vpn</changelog>
  <changelog author="avvissu@yandex.by" date="1508500800">- Remove unrecognized options: disable-gtk-doc, enable-threads,
  disable-iwmx, enable-session-policy</changelog>
  <changelog author="avvissu@yandex.by" date="1509019200">- Change the mode of download_files (sr#521762)
- Remove connman-rpmlintrc (bnc#1057697)
- Add client as a recommended dependency</changelog>
  <changelog author="avvissu@yandex.by" date="1514289600">- Add symlink to network.service (connman-1.35-service.patch)</changelog>
  <changelog author="avvissu@yandex.by" date="1518523200">- Fix build errors due to unsupported header include order with
  newer kernels &gt;=4.15 (connman-1.35-include.patch).</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1557489600">- Update to 1.37:
  * Fix issue with handling invalid gateway addresses.
  * Fix issue with handling updates of default gateway.
  * Fix issue with DHCP servers that require broadcast flag.
  * Add support for option to use gateways as time servers.
  * Add support for option to select default technology.
  * Add support for Address Conflict Detection (ACD).
  * Add support for IPv6 iptables management.
- Change in 1.36:
  * Fix issue with DNS short response on error handling.
  * Fix issue with handling incoming DNS requests.
  * Fix issue with handling empty timeserver list.
  * Fix issue with incorrect DHCP byte order.
  * Fix issue with AllowDomainnameUpdates handling.
  * Fix issue with IPv4 link-local IP conflict error.
  * Fix issue with handling WISPr over TLS connections.
  * Fix issue with WiFi background scanning handling.
  * Fix issue with WiFi disconnect+connect race condition.
  * Fix issue with WiFi scanning and tethering operation.
  * Fix issue with WiFi security change handling.
  * Fix issue with missing signal for WPS changes.
  * Fix issue with online check retry handling.
  * Add support for systemd-resolved backend.
  * Add support for mDNS configuration setup.
- Drop connman-1.35-include.patch
- Drop connman-1.35-resolvconf.patch</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1582027200">- Update to 1.38:
  * Fix issue with online check on IP address update.
  * Fix issue with OpenVPN and encrypted private keys.
  * Fix issue with finishing of VPN connections.
  * Add support for updated stable iwd APIs.
  * Add support for WireGuard networks.
- Spec file cleanup</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1613131200">- Update to 1.39 (bsc#1181751):
  * Fix issue with scanning state synchronization and iwd.
  * Fix issue with invalid key with 4-way handshake offloading.
  * Fix issue with DNS proxy length checks to prevent buffer overflow. (CVE-2021-26675)
  * Fix issue with DHCP leaking stack data via uninitialized variable. (CVE-2021-26676)</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1644580800">- Update to 1.41: (bsc#1194177, bsc#1194176, bsc#1194175)
  * Fix issue with RTNL netlink message alignment.
  * Fix issue with dnsproxy and timeout for TCP feature. (CVE-2022-23097, CVE-2022-23096)
  * Fix issue with dnsproxy and busy loop in TCP server. (CVE-2022-23098)
  * Fix issue with WiFi connection with no passphrase.
  * Add support for wpa_supplicant and WPA3-SAE functionality.
  * Add support for D-Bus ObjectManager interface.
- Renamed downstream patches to separate them from upstream patches
  * Rename 0001-connman-1.35-service.patch to 0100-connman-1.35-service.patch
- Add systemd hardening configuration
  * Rename harden_connman-vpn.service.patch to 0101-harden_connman-vpn.service.patch
  * Rename harden_connman-wait-online.service.patch to 0102-harden_connman-wait-online.service.patch
- Disabled openconnect plugin due to version conflict
- Disabled vpnc plugin for i568 missing dependency
- Disabled hh2serial and tist_working for ppc64le due to version conflict</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1659355200">- Add refcounting to wispr portal detection (bsc#1200190)
  * add 0001-wispr-Rename-wispr_portal_list-to-wispr_portal_hash.patch
  * add 0002-wispr-Ignore-NULL-proxy.patch
  * add 0003-wispr-Add-reference-counter-to-portal-context.patch (CVE-2022-32293)
  * add 0004-wispr-Update-portal-context-references.patch (CVE-2022-32293)
- Fix OOB write in received_data (bsc#1200189)
  * add 0005-gweb-Fix-OOB-write-in-received_data.patch (CVE-2022-32292)</changelog>
</package>
<package pkgid="1b7d970932cf97804959b612c3fbce3dcd4bb195752aa9407456e46220895cec" name="connman-doc" arch="x86_64">
  <version epoch="0" ver="1.41" rel="bp154.2.3.1"/>
  <changelog author="sleep_walker@suse.cz" date="1423224000">- bump to 1.28
  ver 1.28:
  Fix issue with DHCPv6 re-transmission timer.
  Fix issue with DHCP service ID option byte order.
  Fix issue with IPv6 connections and SLAAC/DHCPv6.
  Fix issue with telephony and IPv6 autoconfiguration.
  Fix issue with Bluetooth technology setting changes.
  Fix issue with WiFi autoscan interval calculation.
  Fix issue with WiFi and missing BSS signal strength.
  Add support for IPv4 information for WiFi Display.
  ver 1.27:
  Fix issue with memory leak in IP configuration.
  Fix issue with providing random numbers for DHCP.
  Fix issue with handling IN_MOVED_TO inotify events.
  Fix issue with channel selection for WiFi scanning.
  Add support for handling Bluetooth GN and PANU roles.
  ver 1.26:
  Fix issue with missing WiFi security provisioning support.
  Fix issue with immutable setting and provisioned services.
  Fix issue with scheduling DNS cache cleanup procedure.
  Fix issue with IPv6 Privacy setting on service removal.
  Fix issue with DHCPv6 CONFIRM message sending procedure.
  Fix issue with DHCPv6 lease expiration handling support.
  Fix issue with DHCPv4 networks and broadcast flag handling.
  Fix issue with DHCPv4 networks without gateway configuration.
  Fix issue with P2P Peer authorization handling.
  Fix issue with P2P Peer service registration.
  Add support for WiFi Display information elements.
  Add support for systemd-hostnamed integration.
  ver 1.25:
  Fix issue with handling rebind timer for DHCPv6.
  Fix issue with handling DHCP renew transaction.
  Fix issue with user supplied proxy settings and DHCP.
  Fix issue with extra status codes from captive portals.
  Fix issue with service idle state reset on failure.
  Fix issue with DNS label compression handling.
  Add support for experimental P2P Peer service.
  ver 1.24:
  Fix issue with handling slave interfaces.
  Fix issue with handling DHCPv4 broadcast flag.
  Fix issue with handling DHCPv4 lease expiration.
  Fix issue with handling WiFi auto-scanning timeout.
  Fix issue with handling domain and DNS server changes.
  Fix issue with double free and agent messages.
  ver 1.23:
  Fix issue with memory leak in technology handling.
  Fix issue with not removing host route of OpenVPN.
  Fix issue with double free in DHCP cleanup handling.
  Fix issue with handling DHCP method from oFono.
  Fix issue with IPv6-PD when disabling tethering.
  Fix issue with DNS proxy when disabling tethering.
  Fix issue with Bluetooth start and stop interaction.
  Fix issue with Bluetooth PAN networks on adapter change.
  ver 1.22:
  Fix issue with WPS state synchronization.
  Fix issue with DNS servers and default service.
  Fix issue with DHCP client and rebooting state.
  Add support for NTP exponential backoff handling.
  Add support for NTP kiss-of-death packet handling.
  Add support for Ethernet gadget networking.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1438948800">- bump to 1.29
  Fix issue with IPv6 autoconfiguration when disabled.
  Fix issue with IPv6 temporary route handling.
  Fix issue with IPv6 timers for nameservers.
  Fix issue with DHPCv6 and route configuration.
  Fix issue with DHCPv6 source port and buggy servers.
  Fix issue with DHCPv6 rapid commit option length.
  Fix issue with DHCPv6 rapid commit error handling.
  Fix issue with handling invalid WiFi passphrases.
  Fix issue with connecting Ethernet devices.
  Add support for Ethernet and VLAN usage.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1444737600">- bumpt to 1.30
    Fix issue with pending DNS request during server change.
    Fix issue with empty strings in nameservers configuration.
    Fix issue with time servers during IP configuration change.
    Fix issue with 4-way handshake during roaming.
    Fix issue with open WiFi networks security.
    Fix issue with support for WiFi AnonymousIdentity.
    Fix issue with memory leak and DHCPv6 DUID handling.
    Fix issue with DHCP client and P2P interaction.
    Fix issue with handling provision file updates.
    Fix issue with VPN state updates.
    Disable 6to4 support by default.
- add keyring file
- clean with spec-cleaner
- fix builds for all possible distributions and architectures</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1503403200">- bump to 1.35
  besides other things contains fix for CVE-2017-12865</changelog>
  <changelog author="avvissu@yandex.by" date="1504872000">- Remove obsolete macros
- Add polkit-agent-1 dependency
- Use the %tmpfiles_create macro
- Removal of ldconfig scriptlets from all packages
- Add connman-wait-online.service in post{un}
- Spec file cleanup</changelog>
  <changelog author="avvissu@yandex.by" date="1507032000">- Add connman-1.35-resolvconf.patch
- Activate connman.service if the network services disabled
- Add info in /var/adm/update-messages</changelog>
  <changelog author="avvissu@yandex.by" date="1508414400">- Add configuration file (/etc/connman/main.conf)
- Add ghost lines: main.conf connman connman-vpn</changelog>
  <changelog author="avvissu@yandex.by" date="1508500800">- Remove unrecognized options: disable-gtk-doc, enable-threads,
  disable-iwmx, enable-session-policy</changelog>
  <changelog author="avvissu@yandex.by" date="1509019200">- Change the mode of download_files (sr#521762)
- Remove connman-rpmlintrc (bnc#1057697)
- Add client as a recommended dependency</changelog>
  <changelog author="avvissu@yandex.by" date="1514289600">- Add symlink to network.service (connman-1.35-service.patch)</changelog>
  <changelog author="avvissu@yandex.by" date="1518523200">- Fix build errors due to unsupported header include order with
  newer kernels &gt;=4.15 (connman-1.35-include.patch).</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1557489600">- Update to 1.37:
  * Fix issue with handling invalid gateway addresses.
  * Fix issue with handling updates of default gateway.
  * Fix issue with DHCP servers that require broadcast flag.
  * Add support for option to use gateways as time servers.
  * Add support for option to select default technology.
  * Add support for Address Conflict Detection (ACD).
  * Add support for IPv6 iptables management.
- Change in 1.36:
  * Fix issue with DNS short response on error handling.
  * Fix issue with handling incoming DNS requests.
  * Fix issue with handling empty timeserver list.
  * Fix issue with incorrect DHCP byte order.
  * Fix issue with AllowDomainnameUpdates handling.
  * Fix issue with IPv4 link-local IP conflict error.
  * Fix issue with handling WISPr over TLS connections.
  * Fix issue with WiFi background scanning handling.
  * Fix issue with WiFi disconnect+connect race condition.
  * Fix issue with WiFi scanning and tethering operation.
  * Fix issue with WiFi security change handling.
  * Fix issue with missing signal for WPS changes.
  * Fix issue with online check retry handling.
  * Add support for systemd-resolved backend.
  * Add support for mDNS configuration setup.
- Drop connman-1.35-include.patch
- Drop connman-1.35-resolvconf.patch</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1582027200">- Update to 1.38:
  * Fix issue with online check on IP address update.
  * Fix issue with OpenVPN and encrypted private keys.
  * Fix issue with finishing of VPN connections.
  * Add support for updated stable iwd APIs.
  * Add support for WireGuard networks.
- Spec file cleanup</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1613131200">- Update to 1.39 (bsc#1181751):
  * Fix issue with scanning state synchronization and iwd.
  * Fix issue with invalid key with 4-way handshake offloading.
  * Fix issue with DNS proxy length checks to prevent buffer overflow. (CVE-2021-26675)
  * Fix issue with DHCP leaking stack data via uninitialized variable. (CVE-2021-26676)</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1644580800">- Update to 1.41: (bsc#1194177, bsc#1194176, bsc#1194175)
  * Fix issue with RTNL netlink message alignment.
  * Fix issue with dnsproxy and timeout for TCP feature. (CVE-2022-23097, CVE-2022-23096)
  * Fix issue with dnsproxy and busy loop in TCP server. (CVE-2022-23098)
  * Fix issue with WiFi connection with no passphrase.
  * Add support for wpa_supplicant and WPA3-SAE functionality.
  * Add support for D-Bus ObjectManager interface.
- Renamed downstream patches to separate them from upstream patches
  * Rename 0001-connman-1.35-service.patch to 0100-connman-1.35-service.patch
- Add systemd hardening configuration
  * Rename harden_connman-vpn.service.patch to 0101-harden_connman-vpn.service.patch
  * Rename harden_connman-wait-online.service.patch to 0102-harden_connman-wait-online.service.patch
- Disabled openconnect plugin due to version conflict
- Disabled vpnc plugin for i568 missing dependency
- Disabled hh2serial and tist_working for ppc64le due to version conflict</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1659355200">- Add refcounting to wispr portal detection (bsc#1200190)
  * add 0001-wispr-Rename-wispr_portal_list-to-wispr_portal_hash.patch
  * add 0002-wispr-Ignore-NULL-proxy.patch
  * add 0003-wispr-Add-reference-counter-to-portal-context.patch (CVE-2022-32293)
  * add 0004-wispr-Update-portal-context-references.patch (CVE-2022-32293)
- Fix OOB write in received_data (bsc#1200189)
  * add 0005-gweb-Fix-OOB-write-in-received_data.patch (CVE-2022-32292)</changelog>
</package>
<package pkgid="53ee34f4f2553595a16ff9ed28b6ca491eb8009ccf88ed5eb6b37cf3152db31b" name="connman-nmcompat" arch="aarch64">
  <version epoch="0" ver="1.41" rel="bp154.2.3.1"/>
  <changelog author="sleep_walker@suse.cz" date="1423224000">- bump to 1.28
  ver 1.28:
  Fix issue with DHCPv6 re-transmission timer.
  Fix issue with DHCP service ID option byte order.
  Fix issue with IPv6 connections and SLAAC/DHCPv6.
  Fix issue with telephony and IPv6 autoconfiguration.
  Fix issue with Bluetooth technology setting changes.
  Fix issue with WiFi autoscan interval calculation.
  Fix issue with WiFi and missing BSS signal strength.
  Add support for IPv4 information for WiFi Display.
  ver 1.27:
  Fix issue with memory leak in IP configuration.
  Fix issue with providing random numbers for DHCP.
  Fix issue with handling IN_MOVED_TO inotify events.
  Fix issue with channel selection for WiFi scanning.
  Add support for handling Bluetooth GN and PANU roles.
  ver 1.26:
  Fix issue with missing WiFi security provisioning support.
  Fix issue with immutable setting and provisioned services.
  Fix issue with scheduling DNS cache cleanup procedure.
  Fix issue with IPv6 Privacy setting on service removal.
  Fix issue with DHCPv6 CONFIRM message sending procedure.
  Fix issue with DHCPv6 lease expiration handling support.
  Fix issue with DHCPv4 networks and broadcast flag handling.
  Fix issue with DHCPv4 networks without gateway configuration.
  Fix issue with P2P Peer authorization handling.
  Fix issue with P2P Peer service registration.
  Add support for WiFi Display information elements.
  Add support for systemd-hostnamed integration.
  ver 1.25:
  Fix issue with handling rebind timer for DHCPv6.
  Fix issue with handling DHCP renew transaction.
  Fix issue with user supplied proxy settings and DHCP.
  Fix issue with extra status codes from captive portals.
  Fix issue with service idle state reset on failure.
  Fix issue with DNS label compression handling.
  Add support for experimental P2P Peer service.
  ver 1.24:
  Fix issue with handling slave interfaces.
  Fix issue with handling DHCPv4 broadcast flag.
  Fix issue with handling DHCPv4 lease expiration.
  Fix issue with handling WiFi auto-scanning timeout.
  Fix issue with handling domain and DNS server changes.
  Fix issue with double free and agent messages.
  ver 1.23:
  Fix issue with memory leak in technology handling.
  Fix issue with not removing host route of OpenVPN.
  Fix issue with double free in DHCP cleanup handling.
  Fix issue with handling DHCP method from oFono.
  Fix issue with IPv6-PD when disabling tethering.
  Fix issue with DNS proxy when disabling tethering.
  Fix issue with Bluetooth start and stop interaction.
  Fix issue with Bluetooth PAN networks on adapter change.
  ver 1.22:
  Fix issue with WPS state synchronization.
  Fix issue with DNS servers and default service.
  Fix issue with DHCP client and rebooting state.
  Add support for NTP exponential backoff handling.
  Add support for NTP kiss-of-death packet handling.
  Add support for Ethernet gadget networking.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1438948800">- bump to 1.29
  Fix issue with IPv6 autoconfiguration when disabled.
  Fix issue with IPv6 temporary route handling.
  Fix issue with IPv6 timers for nameservers.
  Fix issue with DHPCv6 and route configuration.
  Fix issue with DHCPv6 source port and buggy servers.
  Fix issue with DHCPv6 rapid commit option length.
  Fix issue with DHCPv6 rapid commit error handling.
  Fix issue with handling invalid WiFi passphrases.
  Fix issue with connecting Ethernet devices.
  Add support for Ethernet and VLAN usage.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1444737600">- bumpt to 1.30
    Fix issue with pending DNS request during server change.
    Fix issue with empty strings in nameservers configuration.
    Fix issue with time servers during IP configuration change.
    Fix issue with 4-way handshake during roaming.
    Fix issue with open WiFi networks security.
    Fix issue with support for WiFi AnonymousIdentity.
    Fix issue with memory leak and DHCPv6 DUID handling.
    Fix issue with DHCP client and P2P interaction.
    Fix issue with handling provision file updates.
    Fix issue with VPN state updates.
    Disable 6to4 support by default.
- add keyring file
- clean with spec-cleaner
- fix builds for all possible distributions and architectures</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1503403200">- bump to 1.35
  besides other things contains fix for CVE-2017-12865</changelog>
  <changelog author="avvissu@yandex.by" date="1504872000">- Remove obsolete macros
- Add polkit-agent-1 dependency
- Use the %tmpfiles_create macro
- Removal of ldconfig scriptlets from all packages
- Add connman-wait-online.service in post{un}
- Spec file cleanup</changelog>
  <changelog author="avvissu@yandex.by" date="1507032000">- Add connman-1.35-resolvconf.patch
- Activate connman.service if the network services disabled
- Add info in /var/adm/update-messages</changelog>
  <changelog author="avvissu@yandex.by" date="1508414400">- Add configuration file (/etc/connman/main.conf)
- Add ghost lines: main.conf connman connman-vpn</changelog>
  <changelog author="avvissu@yandex.by" date="1508500800">- Remove unrecognized options: disable-gtk-doc, enable-threads,
  disable-iwmx, enable-session-policy</changelog>
  <changelog author="avvissu@yandex.by" date="1509019200">- Change the mode of download_files (sr#521762)
- Remove connman-rpmlintrc (bnc#1057697)
- Add client as a recommended dependency</changelog>
  <changelog author="avvissu@yandex.by" date="1514289600">- Add symlink to network.service (connman-1.35-service.patch)</changelog>
  <changelog author="avvissu@yandex.by" date="1518523200">- Fix build errors due to unsupported header include order with
  newer kernels &gt;=4.15 (connman-1.35-include.patch).</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1557489600">- Update to 1.37:
  * Fix issue with handling invalid gateway addresses.
  * Fix issue with handling updates of default gateway.
  * Fix issue with DHCP servers that require broadcast flag.
  * Add support for option to use gateways as time servers.
  * Add support for option to select default technology.
  * Add support for Address Conflict Detection (ACD).
  * Add support for IPv6 iptables management.
- Change in 1.36:
  * Fix issue with DNS short response on error handling.
  * Fix issue with handling incoming DNS requests.
  * Fix issue with handling empty timeserver list.
  * Fix issue with incorrect DHCP byte order.
  * Fix issue with AllowDomainnameUpdates handling.
  * Fix issue with IPv4 link-local IP conflict error.
  * Fix issue with handling WISPr over TLS connections.
  * Fix issue with WiFi background scanning handling.
  * Fix issue with WiFi disconnect+connect race condition.
  * Fix issue with WiFi scanning and tethering operation.
  * Fix issue with WiFi security change handling.
  * Fix issue with missing signal for WPS changes.
  * Fix issue with online check retry handling.
  * Add support for systemd-resolved backend.
  * Add support for mDNS configuration setup.
- Drop connman-1.35-include.patch
- Drop connman-1.35-resolvconf.patch</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1582027200">- Update to 1.38:
  * Fix issue with online check on IP address update.
  * Fix issue with OpenVPN and encrypted private keys.
  * Fix issue with finishing of VPN connections.
  * Add support for updated stable iwd APIs.
  * Add support for WireGuard networks.
- Spec file cleanup</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1613131200">- Update to 1.39 (bsc#1181751):
  * Fix issue with scanning state synchronization and iwd.
  * Fix issue with invalid key with 4-way handshake offloading.
  * Fix issue with DNS proxy length checks to prevent buffer overflow. (CVE-2021-26675)
  * Fix issue with DHCP leaking stack data via uninitialized variable. (CVE-2021-26676)</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1644580800">- Update to 1.41: (bsc#1194177, bsc#1194176, bsc#1194175)
  * Fix issue with RTNL netlink message alignment.
  * Fix issue with dnsproxy and timeout for TCP feature. (CVE-2022-23097, CVE-2022-23096)
  * Fix issue with dnsproxy and busy loop in TCP server. (CVE-2022-23098)
  * Fix issue with WiFi connection with no passphrase.
  * Add support for wpa_supplicant and WPA3-SAE functionality.
  * Add support for D-Bus ObjectManager interface.
- Renamed downstream patches to separate them from upstream patches
  * Rename 0001-connman-1.35-service.patch to 0100-connman-1.35-service.patch
- Add systemd hardening configuration
  * Rename harden_connman-vpn.service.patch to 0101-harden_connman-vpn.service.patch
  * Rename harden_connman-wait-online.service.patch to 0102-harden_connman-wait-online.service.patch
- Disabled openconnect plugin due to version conflict
- Disabled vpnc plugin for i568 missing dependency
- Disabled hh2serial and tist_working for ppc64le due to version conflict</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1659355200">- Add refcounting to wispr portal detection (bsc#1200190)
  * add 0001-wispr-Rename-wispr_portal_list-to-wispr_portal_hash.patch
  * add 0002-wispr-Ignore-NULL-proxy.patch
  * add 0003-wispr-Add-reference-counter-to-portal-context.patch (CVE-2022-32293)
  * add 0004-wispr-Update-portal-context-references.patch (CVE-2022-32293)
- Fix OOB write in received_data (bsc#1200189)
  * add 0005-gweb-Fix-OOB-write-in-received_data.patch (CVE-2022-32292)</changelog>
</package>
<package pkgid="eaa1f338bf0b99ff1eb4de7734106afa6bc8b9bd73df5c521bf36ea8d3d5ea82" name="connman-nmcompat" arch="i586">
  <version epoch="0" ver="1.41" rel="bp154.2.3.1"/>
  <changelog author="sleep_walker@suse.cz" date="1423224000">- bump to 1.28
  ver 1.28:
  Fix issue with DHCPv6 re-transmission timer.
  Fix issue with DHCP service ID option byte order.
  Fix issue with IPv6 connections and SLAAC/DHCPv6.
  Fix issue with telephony and IPv6 autoconfiguration.
  Fix issue with Bluetooth technology setting changes.
  Fix issue with WiFi autoscan interval calculation.
  Fix issue with WiFi and missing BSS signal strength.
  Add support for IPv4 information for WiFi Display.
  ver 1.27:
  Fix issue with memory leak in IP configuration.
  Fix issue with providing random numbers for DHCP.
  Fix issue with handling IN_MOVED_TO inotify events.
  Fix issue with channel selection for WiFi scanning.
  Add support for handling Bluetooth GN and PANU roles.
  ver 1.26:
  Fix issue with missing WiFi security provisioning support.
  Fix issue with immutable setting and provisioned services.
  Fix issue with scheduling DNS cache cleanup procedure.
  Fix issue with IPv6 Privacy setting on service removal.
  Fix issue with DHCPv6 CONFIRM message sending procedure.
  Fix issue with DHCPv6 lease expiration handling support.
  Fix issue with DHCPv4 networks and broadcast flag handling.
  Fix issue with DHCPv4 networks without gateway configuration.
  Fix issue with P2P Peer authorization handling.
  Fix issue with P2P Peer service registration.
  Add support for WiFi Display information elements.
  Add support for systemd-hostnamed integration.
  ver 1.25:
  Fix issue with handling rebind timer for DHCPv6.
  Fix issue with handling DHCP renew transaction.
  Fix issue with user supplied proxy settings and DHCP.
  Fix issue with extra status codes from captive portals.
  Fix issue with service idle state reset on failure.
  Fix issue with DNS label compression handling.
  Add support for experimental P2P Peer service.
  ver 1.24:
  Fix issue with handling slave interfaces.
  Fix issue with handling DHCPv4 broadcast flag.
  Fix issue with handling DHCPv4 lease expiration.
  Fix issue with handling WiFi auto-scanning timeout.
  Fix issue with handling domain and DNS server changes.
  Fix issue with double free and agent messages.
  ver 1.23:
  Fix issue with memory leak in technology handling.
  Fix issue with not removing host route of OpenVPN.
  Fix issue with double free in DHCP cleanup handling.
  Fix issue with handling DHCP method from oFono.
  Fix issue with IPv6-PD when disabling tethering.
  Fix issue with DNS proxy when disabling tethering.
  Fix issue with Bluetooth start and stop interaction.
  Fix issue with Bluetooth PAN networks on adapter change.
  ver 1.22:
  Fix issue with WPS state synchronization.
  Fix issue with DNS servers and default service.
  Fix issue with DHCP client and rebooting state.
  Add support for NTP exponential backoff handling.
  Add support for NTP kiss-of-death packet handling.
  Add support for Ethernet gadget networking.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1438948800">- bump to 1.29
  Fix issue with IPv6 autoconfiguration when disabled.
  Fix issue with IPv6 temporary route handling.
  Fix issue with IPv6 timers for nameservers.
  Fix issue with DHPCv6 and route configuration.
  Fix issue with DHCPv6 source port and buggy servers.
  Fix issue with DHCPv6 rapid commit option length.
  Fix issue with DHCPv6 rapid commit error handling.
  Fix issue with handling invalid WiFi passphrases.
  Fix issue with connecting Ethernet devices.
  Add support for Ethernet and VLAN usage.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1444737600">- bumpt to 1.30
    Fix issue with pending DNS request during server change.
    Fix issue with empty strings in nameservers configuration.
    Fix issue with time servers during IP configuration change.
    Fix issue with 4-way handshake during roaming.
    Fix issue with open WiFi networks security.
    Fix issue with support for WiFi AnonymousIdentity.
    Fix issue with memory leak and DHCPv6 DUID handling.
    Fix issue with DHCP client and P2P interaction.
    Fix issue with handling provision file updates.
    Fix issue with VPN state updates.
    Disable 6to4 support by default.
- add keyring file
- clean with spec-cleaner
- fix builds for all possible distributions and architectures</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1503403200">- bump to 1.35
  besides other things contains fix for CVE-2017-12865</changelog>
  <changelog author="avvissu@yandex.by" date="1504872000">- Remove obsolete macros
- Add polkit-agent-1 dependency
- Use the %tmpfiles_create macro
- Removal of ldconfig scriptlets from all packages
- Add connman-wait-online.service in post{un}
- Spec file cleanup</changelog>
  <changelog author="avvissu@yandex.by" date="1507032000">- Add connman-1.35-resolvconf.patch
- Activate connman.service if the network services disabled
- Add info in /var/adm/update-messages</changelog>
  <changelog author="avvissu@yandex.by" date="1508414400">- Add configuration file (/etc/connman/main.conf)
- Add ghost lines: main.conf connman connman-vpn</changelog>
  <changelog author="avvissu@yandex.by" date="1508500800">- Remove unrecognized options: disable-gtk-doc, enable-threads,
  disable-iwmx, enable-session-policy</changelog>
  <changelog author="avvissu@yandex.by" date="1509019200">- Change the mode of download_files (sr#521762)
- Remove connman-rpmlintrc (bnc#1057697)
- Add client as a recommended dependency</changelog>
  <changelog author="avvissu@yandex.by" date="1514289600">- Add symlink to network.service (connman-1.35-service.patch)</changelog>
  <changelog author="avvissu@yandex.by" date="1518523200">- Fix build errors due to unsupported header include order with
  newer kernels &gt;=4.15 (connman-1.35-include.patch).</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1557489600">- Update to 1.37:
  * Fix issue with handling invalid gateway addresses.
  * Fix issue with handling updates of default gateway.
  * Fix issue with DHCP servers that require broadcast flag.
  * Add support for option to use gateways as time servers.
  * Add support for option to select default technology.
  * Add support for Address Conflict Detection (ACD).
  * Add support for IPv6 iptables management.
- Change in 1.36:
  * Fix issue with DNS short response on error handling.
  * Fix issue with handling incoming DNS requests.
  * Fix issue with handling empty timeserver list.
  * Fix issue with incorrect DHCP byte order.
  * Fix issue with AllowDomainnameUpdates handling.
  * Fix issue with IPv4 link-local IP conflict error.
  * Fix issue with handling WISPr over TLS connections.
  * Fix issue with WiFi background scanning handling.
  * Fix issue with WiFi disconnect+connect race condition.
  * Fix issue with WiFi scanning and tethering operation.
  * Fix issue with WiFi security change handling.
  * Fix issue with missing signal for WPS changes.
  * Fix issue with online check retry handling.
  * Add support for systemd-resolved backend.
  * Add support for mDNS configuration setup.
- Drop connman-1.35-include.patch
- Drop connman-1.35-resolvconf.patch</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1582027200">- Update to 1.38:
  * Fix issue with online check on IP address update.
  * Fix issue with OpenVPN and encrypted private keys.
  * Fix issue with finishing of VPN connections.
  * Add support for updated stable iwd APIs.
  * Add support for WireGuard networks.
- Spec file cleanup</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1613131200">- Update to 1.39 (bsc#1181751):
  * Fix issue with scanning state synchronization and iwd.
  * Fix issue with invalid key with 4-way handshake offloading.
  * Fix issue with DNS proxy length checks to prevent buffer overflow. (CVE-2021-26675)
  * Fix issue with DHCP leaking stack data via uninitialized variable. (CVE-2021-26676)</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1644580800">- Update to 1.41: (bsc#1194177, bsc#1194176, bsc#1194175)
  * Fix issue with RTNL netlink message alignment.
  * Fix issue with dnsproxy and timeout for TCP feature. (CVE-2022-23097, CVE-2022-23096)
  * Fix issue with dnsproxy and busy loop in TCP server. (CVE-2022-23098)
  * Fix issue with WiFi connection with no passphrase.
  * Add support for wpa_supplicant and WPA3-SAE functionality.
  * Add support for D-Bus ObjectManager interface.
- Renamed downstream patches to separate them from upstream patches
  * Rename 0001-connman-1.35-service.patch to 0100-connman-1.35-service.patch
- Add systemd hardening configuration
  * Rename harden_connman-vpn.service.patch to 0101-harden_connman-vpn.service.patch
  * Rename harden_connman-wait-online.service.patch to 0102-harden_connman-wait-online.service.patch
- Disabled openconnect plugin due to version conflict
- Disabled vpnc plugin for i568 missing dependency
- Disabled hh2serial and tist_working for ppc64le due to version conflict</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1659355200">- Add refcounting to wispr portal detection (bsc#1200190)
  * add 0001-wispr-Rename-wispr_portal_list-to-wispr_portal_hash.patch
  * add 0002-wispr-Ignore-NULL-proxy.patch
  * add 0003-wispr-Add-reference-counter-to-portal-context.patch (CVE-2022-32293)
  * add 0004-wispr-Update-portal-context-references.patch (CVE-2022-32293)
- Fix OOB write in received_data (bsc#1200189)
  * add 0005-gweb-Fix-OOB-write-in-received_data.patch (CVE-2022-32292)</changelog>
</package>
<package pkgid="551c751e0744075ea8e40f1466d52e3e67009884d561384aab230346ae95cb8f" name="connman-nmcompat" arch="ppc64le">
  <version epoch="0" ver="1.41" rel="bp154.2.3.1"/>
  <changelog author="sleep_walker@suse.cz" date="1423224000">- bump to 1.28
  ver 1.28:
  Fix issue with DHCPv6 re-transmission timer.
  Fix issue with DHCP service ID option byte order.
  Fix issue with IPv6 connections and SLAAC/DHCPv6.
  Fix issue with telephony and IPv6 autoconfiguration.
  Fix issue with Bluetooth technology setting changes.
  Fix issue with WiFi autoscan interval calculation.
  Fix issue with WiFi and missing BSS signal strength.
  Add support for IPv4 information for WiFi Display.
  ver 1.27:
  Fix issue with memory leak in IP configuration.
  Fix issue with providing random numbers for DHCP.
  Fix issue with handling IN_MOVED_TO inotify events.
  Fix issue with channel selection for WiFi scanning.
  Add support for handling Bluetooth GN and PANU roles.
  ver 1.26:
  Fix issue with missing WiFi security provisioning support.
  Fix issue with immutable setting and provisioned services.
  Fix issue with scheduling DNS cache cleanup procedure.
  Fix issue with IPv6 Privacy setting on service removal.
  Fix issue with DHCPv6 CONFIRM message sending procedure.
  Fix issue with DHCPv6 lease expiration handling support.
  Fix issue with DHCPv4 networks and broadcast flag handling.
  Fix issue with DHCPv4 networks without gateway configuration.
  Fix issue with P2P Peer authorization handling.
  Fix issue with P2P Peer service registration.
  Add support for WiFi Display information elements.
  Add support for systemd-hostnamed integration.
  ver 1.25:
  Fix issue with handling rebind timer for DHCPv6.
  Fix issue with handling DHCP renew transaction.
  Fix issue with user supplied proxy settings and DHCP.
  Fix issue with extra status codes from captive portals.
  Fix issue with service idle state reset on failure.
  Fix issue with DNS label compression handling.
  Add support for experimental P2P Peer service.
  ver 1.24:
  Fix issue with handling slave interfaces.
  Fix issue with handling DHCPv4 broadcast flag.
  Fix issue with handling DHCPv4 lease expiration.
  Fix issue with handling WiFi auto-scanning timeout.
  Fix issue with handling domain and DNS server changes.
  Fix issue with double free and agent messages.
  ver 1.23:
  Fix issue with memory leak in technology handling.
  Fix issue with not removing host route of OpenVPN.
  Fix issue with double free in DHCP cleanup handling.
  Fix issue with handling DHCP method from oFono.
  Fix issue with IPv6-PD when disabling tethering.
  Fix issue with DNS proxy when disabling tethering.
  Fix issue with Bluetooth start and stop interaction.
  Fix issue with Bluetooth PAN networks on adapter change.
  ver 1.22:
  Fix issue with WPS state synchronization.
  Fix issue with DNS servers and default service.
  Fix issue with DHCP client and rebooting state.
  Add support for NTP exponential backoff handling.
  Add support for NTP kiss-of-death packet handling.
  Add support for Ethernet gadget networking.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1438948800">- bump to 1.29
  Fix issue with IPv6 autoconfiguration when disabled.
  Fix issue with IPv6 temporary route handling.
  Fix issue with IPv6 timers for nameservers.
  Fix issue with DHPCv6 and route configuration.
  Fix issue with DHCPv6 source port and buggy servers.
  Fix issue with DHCPv6 rapid commit option length.
  Fix issue with DHCPv6 rapid commit error handling.
  Fix issue with handling invalid WiFi passphrases.
  Fix issue with connecting Ethernet devices.
  Add support for Ethernet and VLAN usage.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1444737600">- bumpt to 1.30
    Fix issue with pending DNS request during server change.
    Fix issue with empty strings in nameservers configuration.
    Fix issue with time servers during IP configuration change.
    Fix issue with 4-way handshake during roaming.
    Fix issue with open WiFi networks security.
    Fix issue with support for WiFi AnonymousIdentity.
    Fix issue with memory leak and DHCPv6 DUID handling.
    Fix issue with DHCP client and P2P interaction.
    Fix issue with handling provision file updates.
    Fix issue with VPN state updates.
    Disable 6to4 support by default.
- add keyring file
- clean with spec-cleaner
- fix builds for all possible distributions and architectures</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1503403200">- bump to 1.35
  besides other things contains fix for CVE-2017-12865</changelog>
  <changelog author="avvissu@yandex.by" date="1504872000">- Remove obsolete macros
- Add polkit-agent-1 dependency
- Use the %tmpfiles_create macro
- Removal of ldconfig scriptlets from all packages
- Add connman-wait-online.service in post{un}
- Spec file cleanup</changelog>
  <changelog author="avvissu@yandex.by" date="1507032000">- Add connman-1.35-resolvconf.patch
- Activate connman.service if the network services disabled
- Add info in /var/adm/update-messages</changelog>
  <changelog author="avvissu@yandex.by" date="1508414400">- Add configuration file (/etc/connman/main.conf)
- Add ghost lines: main.conf connman connman-vpn</changelog>
  <changelog author="avvissu@yandex.by" date="1508500800">- Remove unrecognized options: disable-gtk-doc, enable-threads,
  disable-iwmx, enable-session-policy</changelog>
  <changelog author="avvissu@yandex.by" date="1509019200">- Change the mode of download_files (sr#521762)
- Remove connman-rpmlintrc (bnc#1057697)
- Add client as a recommended dependency</changelog>
  <changelog author="avvissu@yandex.by" date="1514289600">- Add symlink to network.service (connman-1.35-service.patch)</changelog>
  <changelog author="avvissu@yandex.by" date="1518523200">- Fix build errors due to unsupported header include order with
  newer kernels &gt;=4.15 (connman-1.35-include.patch).</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1557489600">- Update to 1.37:
  * Fix issue with handling invalid gateway addresses.
  * Fix issue with handling updates of default gateway.
  * Fix issue with DHCP servers that require broadcast flag.
  * Add support for option to use gateways as time servers.
  * Add support for option to select default technology.
  * Add support for Address Conflict Detection (ACD).
  * Add support for IPv6 iptables management.
- Change in 1.36:
  * Fix issue with DNS short response on error handling.
  * Fix issue with handling incoming DNS requests.
  * Fix issue with handling empty timeserver list.
  * Fix issue with incorrect DHCP byte order.
  * Fix issue with AllowDomainnameUpdates handling.
  * Fix issue with IPv4 link-local IP conflict error.
  * Fix issue with handling WISPr over TLS connections.
  * Fix issue with WiFi background scanning handling.
  * Fix issue with WiFi disconnect+connect race condition.
  * Fix issue with WiFi scanning and tethering operation.
  * Fix issue with WiFi security change handling.
  * Fix issue with missing signal for WPS changes.
  * Fix issue with online check retry handling.
  * Add support for systemd-resolved backend.
  * Add support for mDNS configuration setup.
- Drop connman-1.35-include.patch
- Drop connman-1.35-resolvconf.patch</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1582027200">- Update to 1.38:
  * Fix issue with online check on IP address update.
  * Fix issue with OpenVPN and encrypted private keys.
  * Fix issue with finishing of VPN connections.
  * Add support for updated stable iwd APIs.
  * Add support for WireGuard networks.
- Spec file cleanup</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1613131200">- Update to 1.39 (bsc#1181751):
  * Fix issue with scanning state synchronization and iwd.
  * Fix issue with invalid key with 4-way handshake offloading.
  * Fix issue with DNS proxy length checks to prevent buffer overflow. (CVE-2021-26675)
  * Fix issue with DHCP leaking stack data via uninitialized variable. (CVE-2021-26676)</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1644580800">- Update to 1.41: (bsc#1194177, bsc#1194176, bsc#1194175)
  * Fix issue with RTNL netlink message alignment.
  * Fix issue with dnsproxy and timeout for TCP feature. (CVE-2022-23097, CVE-2022-23096)
  * Fix issue with dnsproxy and busy loop in TCP server. (CVE-2022-23098)
  * Fix issue with WiFi connection with no passphrase.
  * Add support for wpa_supplicant and WPA3-SAE functionality.
  * Add support for D-Bus ObjectManager interface.
- Renamed downstream patches to separate them from upstream patches
  * Rename 0001-connman-1.35-service.patch to 0100-connman-1.35-service.patch
- Add systemd hardening configuration
  * Rename harden_connman-vpn.service.patch to 0101-harden_connman-vpn.service.patch
  * Rename harden_connman-wait-online.service.patch to 0102-harden_connman-wait-online.service.patch
- Disabled openconnect plugin due to version conflict
- Disabled vpnc plugin for i568 missing dependency
- Disabled hh2serial and tist_working for ppc64le due to version conflict</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1659355200">- Add refcounting to wispr portal detection (bsc#1200190)
  * add 0001-wispr-Rename-wispr_portal_list-to-wispr_portal_hash.patch
  * add 0002-wispr-Ignore-NULL-proxy.patch
  * add 0003-wispr-Add-reference-counter-to-portal-context.patch (CVE-2022-32293)
  * add 0004-wispr-Update-portal-context-references.patch (CVE-2022-32293)
- Fix OOB write in received_data (bsc#1200189)
  * add 0005-gweb-Fix-OOB-write-in-received_data.patch (CVE-2022-32292)</changelog>
</package>
<package pkgid="4414962598215d848861fb8d231fff2aaf3b1ead6a4515ca8a66073e9b44cd56" name="connman-nmcompat" arch="s390x">
  <version epoch="0" ver="1.41" rel="bp154.2.3.1"/>
  <changelog author="sleep_walker@suse.cz" date="1423224000">- bump to 1.28
  ver 1.28:
  Fix issue with DHCPv6 re-transmission timer.
  Fix issue with DHCP service ID option byte order.
  Fix issue with IPv6 connections and SLAAC/DHCPv6.
  Fix issue with telephony and IPv6 autoconfiguration.
  Fix issue with Bluetooth technology setting changes.
  Fix issue with WiFi autoscan interval calculation.
  Fix issue with WiFi and missing BSS signal strength.
  Add support for IPv4 information for WiFi Display.
  ver 1.27:
  Fix issue with memory leak in IP configuration.
  Fix issue with providing random numbers for DHCP.
  Fix issue with handling IN_MOVED_TO inotify events.
  Fix issue with channel selection for WiFi scanning.
  Add support for handling Bluetooth GN and PANU roles.
  ver 1.26:
  Fix issue with missing WiFi security provisioning support.
  Fix issue with immutable setting and provisioned services.
  Fix issue with scheduling DNS cache cleanup procedure.
  Fix issue with IPv6 Privacy setting on service removal.
  Fix issue with DHCPv6 CONFIRM message sending procedure.
  Fix issue with DHCPv6 lease expiration handling support.
  Fix issue with DHCPv4 networks and broadcast flag handling.
  Fix issue with DHCPv4 networks without gateway configuration.
  Fix issue with P2P Peer authorization handling.
  Fix issue with P2P Peer service registration.
  Add support for WiFi Display information elements.
  Add support for systemd-hostnamed integration.
  ver 1.25:
  Fix issue with handling rebind timer for DHCPv6.
  Fix issue with handling DHCP renew transaction.
  Fix issue with user supplied proxy settings and DHCP.
  Fix issue with extra status codes from captive portals.
  Fix issue with service idle state reset on failure.
  Fix issue with DNS label compression handling.
  Add support for experimental P2P Peer service.
  ver 1.24:
  Fix issue with handling slave interfaces.
  Fix issue with handling DHCPv4 broadcast flag.
  Fix issue with handling DHCPv4 lease expiration.
  Fix issue with handling WiFi auto-scanning timeout.
  Fix issue with handling domain and DNS server changes.
  Fix issue with double free and agent messages.
  ver 1.23:
  Fix issue with memory leak in technology handling.
  Fix issue with not removing host route of OpenVPN.
  Fix issue with double free in DHCP cleanup handling.
  Fix issue with handling DHCP method from oFono.
  Fix issue with IPv6-PD when disabling tethering.
  Fix issue with DNS proxy when disabling tethering.
  Fix issue with Bluetooth start and stop interaction.
  Fix issue with Bluetooth PAN networks on adapter change.
  ver 1.22:
  Fix issue with WPS state synchronization.
  Fix issue with DNS servers and default service.
  Fix issue with DHCP client and rebooting state.
  Add support for NTP exponential backoff handling.
  Add support for NTP kiss-of-death packet handling.
  Add support for Ethernet gadget networking.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1438948800">- bump to 1.29
  Fix issue with IPv6 autoconfiguration when disabled.
  Fix issue with IPv6 temporary route handling.
  Fix issue with IPv6 timers for nameservers.
  Fix issue with DHPCv6 and route configuration.
  Fix issue with DHCPv6 source port and buggy servers.
  Fix issue with DHCPv6 rapid commit option length.
  Fix issue with DHCPv6 rapid commit error handling.
  Fix issue with handling invalid WiFi passphrases.
  Fix issue with connecting Ethernet devices.
  Add support for Ethernet and VLAN usage.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1444737600">- bumpt to 1.30
    Fix issue with pending DNS request during server change.
    Fix issue with empty strings in nameservers configuration.
    Fix issue with time servers during IP configuration change.
    Fix issue with 4-way handshake during roaming.
    Fix issue with open WiFi networks security.
    Fix issue with support for WiFi AnonymousIdentity.
    Fix issue with memory leak and DHCPv6 DUID handling.
    Fix issue with DHCP client and P2P interaction.
    Fix issue with handling provision file updates.
    Fix issue with VPN state updates.
    Disable 6to4 support by default.
- add keyring file
- clean with spec-cleaner
- fix builds for all possible distributions and architectures</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1503403200">- bump to 1.35
  besides other things contains fix for CVE-2017-12865</changelog>
  <changelog author="avvissu@yandex.by" date="1504872000">- Remove obsolete macros
- Add polkit-agent-1 dependency
- Use the %tmpfiles_create macro
- Removal of ldconfig scriptlets from all packages
- Add connman-wait-online.service in post{un}
- Spec file cleanup</changelog>
  <changelog author="avvissu@yandex.by" date="1507032000">- Add connman-1.35-resolvconf.patch
- Activate connman.service if the network services disabled
- Add info in /var/adm/update-messages</changelog>
  <changelog author="avvissu@yandex.by" date="1508414400">- Add configuration file (/etc/connman/main.conf)
- Add ghost lines: main.conf connman connman-vpn</changelog>
  <changelog author="avvissu@yandex.by" date="1508500800">- Remove unrecognized options: disable-gtk-doc, enable-threads,
  disable-iwmx, enable-session-policy</changelog>
  <changelog author="avvissu@yandex.by" date="1509019200">- Change the mode of download_files (sr#521762)
- Remove connman-rpmlintrc (bnc#1057697)
- Add client as a recommended dependency</changelog>
  <changelog author="avvissu@yandex.by" date="1514289600">- Add symlink to network.service (connman-1.35-service.patch)</changelog>
  <changelog author="avvissu@yandex.by" date="1518523200">- Fix build errors due to unsupported header include order with
  newer kernels &gt;=4.15 (connman-1.35-include.patch).</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1557489600">- Update to 1.37:
  * Fix issue with handling invalid gateway addresses.
  * Fix issue with handling updates of default gateway.
  * Fix issue with DHCP servers that require broadcast flag.
  * Add support for option to use gateways as time servers.
  * Add support for option to select default technology.
  * Add support for Address Conflict Detection (ACD).
  * Add support for IPv6 iptables management.
- Change in 1.36:
  * Fix issue with DNS short response on error handling.
  * Fix issue with handling incoming DNS requests.
  * Fix issue with handling empty timeserver list.
  * Fix issue with incorrect DHCP byte order.
  * Fix issue with AllowDomainnameUpdates handling.
  * Fix issue with IPv4 link-local IP conflict error.
  * Fix issue with handling WISPr over TLS connections.
  * Fix issue with WiFi background scanning handling.
  * Fix issue with WiFi disconnect+connect race condition.
  * Fix issue with WiFi scanning and tethering operation.
  * Fix issue with WiFi security change handling.
  * Fix issue with missing signal for WPS changes.
  * Fix issue with online check retry handling.
  * Add support for systemd-resolved backend.
  * Add support for mDNS configuration setup.
- Drop connman-1.35-include.patch
- Drop connman-1.35-resolvconf.patch</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1582027200">- Update to 1.38:
  * Fix issue with online check on IP address update.
  * Fix issue with OpenVPN and encrypted private keys.
  * Fix issue with finishing of VPN connections.
  * Add support for updated stable iwd APIs.
  * Add support for WireGuard networks.
- Spec file cleanup</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1613131200">- Update to 1.39 (bsc#1181751):
  * Fix issue with scanning state synchronization and iwd.
  * Fix issue with invalid key with 4-way handshake offloading.
  * Fix issue with DNS proxy length checks to prevent buffer overflow. (CVE-2021-26675)
  * Fix issue with DHCP leaking stack data via uninitialized variable. (CVE-2021-26676)</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1644580800">- Update to 1.41: (bsc#1194177, bsc#1194176, bsc#1194175)
  * Fix issue with RTNL netlink message alignment.
  * Fix issue with dnsproxy and timeout for TCP feature. (CVE-2022-23097, CVE-2022-23096)
  * Fix issue with dnsproxy and busy loop in TCP server. (CVE-2022-23098)
  * Fix issue with WiFi connection with no passphrase.
  * Add support for wpa_supplicant and WPA3-SAE functionality.
  * Add support for D-Bus ObjectManager interface.
- Renamed downstream patches to separate them from upstream patches
  * Rename 0001-connman-1.35-service.patch to 0100-connman-1.35-service.patch
- Add systemd hardening configuration
  * Rename harden_connman-vpn.service.patch to 0101-harden_connman-vpn.service.patch
  * Rename harden_connman-wait-online.service.patch to 0102-harden_connman-wait-online.service.patch
- Disabled openconnect plugin due to version conflict
- Disabled vpnc plugin for i568 missing dependency
- Disabled hh2serial and tist_working for ppc64le due to version conflict</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1659355200">- Add refcounting to wispr portal detection (bsc#1200190)
  * add 0001-wispr-Rename-wispr_portal_list-to-wispr_portal_hash.patch
  * add 0002-wispr-Ignore-NULL-proxy.patch
  * add 0003-wispr-Add-reference-counter-to-portal-context.patch (CVE-2022-32293)
  * add 0004-wispr-Update-portal-context-references.patch (CVE-2022-32293)
- Fix OOB write in received_data (bsc#1200189)
  * add 0005-gweb-Fix-OOB-write-in-received_data.patch (CVE-2022-32292)</changelog>
</package>
<package pkgid="48ebd71d4b518221d12237e442be235efa54eb943bc5780cdd313cfda756195d" name="connman-nmcompat" arch="x86_64">
  <version epoch="0" ver="1.41" rel="bp154.2.3.1"/>
  <changelog author="sleep_walker@suse.cz" date="1423224000">- bump to 1.28
  ver 1.28:
  Fix issue with DHCPv6 re-transmission timer.
  Fix issue with DHCP service ID option byte order.
  Fix issue with IPv6 connections and SLAAC/DHCPv6.
  Fix issue with telephony and IPv6 autoconfiguration.
  Fix issue with Bluetooth technology setting changes.
  Fix issue with WiFi autoscan interval calculation.
  Fix issue with WiFi and missing BSS signal strength.
  Add support for IPv4 information for WiFi Display.
  ver 1.27:
  Fix issue with memory leak in IP configuration.
  Fix issue with providing random numbers for DHCP.
  Fix issue with handling IN_MOVED_TO inotify events.
  Fix issue with channel selection for WiFi scanning.
  Add support for handling Bluetooth GN and PANU roles.
  ver 1.26:
  Fix issue with missing WiFi security provisioning support.
  Fix issue with immutable setting and provisioned services.
  Fix issue with scheduling DNS cache cleanup procedure.
  Fix issue with IPv6 Privacy setting on service removal.
  Fix issue with DHCPv6 CONFIRM message sending procedure.
  Fix issue with DHCPv6 lease expiration handling support.
  Fix issue with DHCPv4 networks and broadcast flag handling.
  Fix issue with DHCPv4 networks without gateway configuration.
  Fix issue with P2P Peer authorization handling.
  Fix issue with P2P Peer service registration.
  Add support for WiFi Display information elements.
  Add support for systemd-hostnamed integration.
  ver 1.25:
  Fix issue with handling rebind timer for DHCPv6.
  Fix issue with handling DHCP renew transaction.
  Fix issue with user supplied proxy settings and DHCP.
  Fix issue with extra status codes from captive portals.
  Fix issue with service idle state reset on failure.
  Fix issue with DNS label compression handling.
  Add support for experimental P2P Peer service.
  ver 1.24:
  Fix issue with handling slave interfaces.
  Fix issue with handling DHCPv4 broadcast flag.
  Fix issue with handling DHCPv4 lease expiration.
  Fix issue with handling WiFi auto-scanning timeout.
  Fix issue with handling domain and DNS server changes.
  Fix issue with double free and agent messages.
  ver 1.23:
  Fix issue with memory leak in technology handling.
  Fix issue with not removing host route of OpenVPN.
  Fix issue with double free in DHCP cleanup handling.
  Fix issue with handling DHCP method from oFono.
  Fix issue with IPv6-PD when disabling tethering.
  Fix issue with DNS proxy when disabling tethering.
  Fix issue with Bluetooth start and stop interaction.
  Fix issue with Bluetooth PAN networks on adapter change.
  ver 1.22:
  Fix issue with WPS state synchronization.
  Fix issue with DNS servers and default service.
  Fix issue with DHCP client and rebooting state.
  Add support for NTP exponential backoff handling.
  Add support for NTP kiss-of-death packet handling.
  Add support for Ethernet gadget networking.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1438948800">- bump to 1.29
  Fix issue with IPv6 autoconfiguration when disabled.
  Fix issue with IPv6 temporary route handling.
  Fix issue with IPv6 timers for nameservers.
  Fix issue with DHPCv6 and route configuration.
  Fix issue with DHCPv6 source port and buggy servers.
  Fix issue with DHCPv6 rapid commit option length.
  Fix issue with DHCPv6 rapid commit error handling.
  Fix issue with handling invalid WiFi passphrases.
  Fix issue with connecting Ethernet devices.
  Add support for Ethernet and VLAN usage.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1444737600">- bumpt to 1.30
    Fix issue with pending DNS request during server change.
    Fix issue with empty strings in nameservers configuration.
    Fix issue with time servers during IP configuration change.
    Fix issue with 4-way handshake during roaming.
    Fix issue with open WiFi networks security.
    Fix issue with support for WiFi AnonymousIdentity.
    Fix issue with memory leak and DHCPv6 DUID handling.
    Fix issue with DHCP client and P2P interaction.
    Fix issue with handling provision file updates.
    Fix issue with VPN state updates.
    Disable 6to4 support by default.
- add keyring file
- clean with spec-cleaner
- fix builds for all possible distributions and architectures</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1503403200">- bump to 1.35
  besides other things contains fix for CVE-2017-12865</changelog>
  <changelog author="avvissu@yandex.by" date="1504872000">- Remove obsolete macros
- Add polkit-agent-1 dependency
- Use the %tmpfiles_create macro
- Removal of ldconfig scriptlets from all packages
- Add connman-wait-online.service in post{un}
- Spec file cleanup</changelog>
  <changelog author="avvissu@yandex.by" date="1507032000">- Add connman-1.35-resolvconf.patch
- Activate connman.service if the network services disabled
- Add info in /var/adm/update-messages</changelog>
  <changelog author="avvissu@yandex.by" date="1508414400">- Add configuration file (/etc/connman/main.conf)
- Add ghost lines: main.conf connman connman-vpn</changelog>
  <changelog author="avvissu@yandex.by" date="1508500800">- Remove unrecognized options: disable-gtk-doc, enable-threads,
  disable-iwmx, enable-session-policy</changelog>
  <changelog author="avvissu@yandex.by" date="1509019200">- Change the mode of download_files (sr#521762)
- Remove connman-rpmlintrc (bnc#1057697)
- Add client as a recommended dependency</changelog>
  <changelog author="avvissu@yandex.by" date="1514289600">- Add symlink to network.service (connman-1.35-service.patch)</changelog>
  <changelog author="avvissu@yandex.by" date="1518523200">- Fix build errors due to unsupported header include order with
  newer kernels &gt;=4.15 (connman-1.35-include.patch).</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1557489600">- Update to 1.37:
  * Fix issue with handling invalid gateway addresses.
  * Fix issue with handling updates of default gateway.
  * Fix issue with DHCP servers that require broadcast flag.
  * Add support for option to use gateways as time servers.
  * Add support for option to select default technology.
  * Add support for Address Conflict Detection (ACD).
  * Add support for IPv6 iptables management.
- Change in 1.36:
  * Fix issue with DNS short response on error handling.
  * Fix issue with handling incoming DNS requests.
  * Fix issue with handling empty timeserver list.
  * Fix issue with incorrect DHCP byte order.
  * Fix issue with AllowDomainnameUpdates handling.
  * Fix issue with IPv4 link-local IP conflict error.
  * Fix issue with handling WISPr over TLS connections.
  * Fix issue with WiFi background scanning handling.
  * Fix issue with WiFi disconnect+connect race condition.
  * Fix issue with WiFi scanning and tethering operation.
  * Fix issue with WiFi security change handling.
  * Fix issue with missing signal for WPS changes.
  * Fix issue with online check retry handling.
  * Add support for systemd-resolved backend.
  * Add support for mDNS configuration setup.
- Drop connman-1.35-include.patch
- Drop connman-1.35-resolvconf.patch</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1582027200">- Update to 1.38:
  * Fix issue with online check on IP address update.
  * Fix issue with OpenVPN and encrypted private keys.
  * Fix issue with finishing of VPN connections.
  * Add support for updated stable iwd APIs.
  * Add support for WireGuard networks.
- Spec file cleanup</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1613131200">- Update to 1.39 (bsc#1181751):
  * Fix issue with scanning state synchronization and iwd.
  * Fix issue with invalid key with 4-way handshake offloading.
  * Fix issue with DNS proxy length checks to prevent buffer overflow. (CVE-2021-26675)
  * Fix issue with DHCP leaking stack data via uninitialized variable. (CVE-2021-26676)</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1644580800">- Update to 1.41: (bsc#1194177, bsc#1194176, bsc#1194175)
  * Fix issue with RTNL netlink message alignment.
  * Fix issue with dnsproxy and timeout for TCP feature. (CVE-2022-23097, CVE-2022-23096)
  * Fix issue with dnsproxy and busy loop in TCP server. (CVE-2022-23098)
  * Fix issue with WiFi connection with no passphrase.
  * Add support for wpa_supplicant and WPA3-SAE functionality.
  * Add support for D-Bus ObjectManager interface.
- Renamed downstream patches to separate them from upstream patches
  * Rename 0001-connman-1.35-service.patch to 0100-connman-1.35-service.patch
- Add systemd hardening configuration
  * Rename harden_connman-vpn.service.patch to 0101-harden_connman-vpn.service.patch
  * Rename harden_connman-wait-online.service.patch to 0102-harden_connman-wait-online.service.patch
- Disabled openconnect plugin due to version conflict
- Disabled vpnc plugin for i568 missing dependency
- Disabled hh2serial and tist_working for ppc64le due to version conflict</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1659355200">- Add refcounting to wispr portal detection (bsc#1200190)
  * add 0001-wispr-Rename-wispr_portal_list-to-wispr_portal_hash.patch
  * add 0002-wispr-Ignore-NULL-proxy.patch
  * add 0003-wispr-Add-reference-counter-to-portal-context.patch (CVE-2022-32293)
  * add 0004-wispr-Update-portal-context-references.patch (CVE-2022-32293)
- Fix OOB write in received_data (bsc#1200189)
  * add 0005-gweb-Fix-OOB-write-in-received_data.patch (CVE-2022-32292)</changelog>
</package>
<package pkgid="f51d0467d5a48d096e0a409c0fb935697d63a77d6b79f3650dd79b27813e6fbf" name="connman-plugin-hh2serial-gps" arch="aarch64">
  <version epoch="0" ver="1.41" rel="bp154.2.3.1"/>
  <changelog author="sleep_walker@suse.cz" date="1423224000">- bump to 1.28
  ver 1.28:
  Fix issue with DHCPv6 re-transmission timer.
  Fix issue with DHCP service ID option byte order.
  Fix issue with IPv6 connections and SLAAC/DHCPv6.
  Fix issue with telephony and IPv6 autoconfiguration.
  Fix issue with Bluetooth technology setting changes.
  Fix issue with WiFi autoscan interval calculation.
  Fix issue with WiFi and missing BSS signal strength.
  Add support for IPv4 information for WiFi Display.
  ver 1.27:
  Fix issue with memory leak in IP configuration.
  Fix issue with providing random numbers for DHCP.
  Fix issue with handling IN_MOVED_TO inotify events.
  Fix issue with channel selection for WiFi scanning.
  Add support for handling Bluetooth GN and PANU roles.
  ver 1.26:
  Fix issue with missing WiFi security provisioning support.
  Fix issue with immutable setting and provisioned services.
  Fix issue with scheduling DNS cache cleanup procedure.
  Fix issue with IPv6 Privacy setting on service removal.
  Fix issue with DHCPv6 CONFIRM message sending procedure.
  Fix issue with DHCPv6 lease expiration handling support.
  Fix issue with DHCPv4 networks and broadcast flag handling.
  Fix issue with DHCPv4 networks without gateway configuration.
  Fix issue with P2P Peer authorization handling.
  Fix issue with P2P Peer service registration.
  Add support for WiFi Display information elements.
  Add support for systemd-hostnamed integration.
  ver 1.25:
  Fix issue with handling rebind timer for DHCPv6.
  Fix issue with handling DHCP renew transaction.
  Fix issue with user supplied proxy settings and DHCP.
  Fix issue with extra status codes from captive portals.
  Fix issue with service idle state reset on failure.
  Fix issue with DNS label compression handling.
  Add support for experimental P2P Peer service.
  ver 1.24:
  Fix issue with handling slave interfaces.
  Fix issue with handling DHCPv4 broadcast flag.
  Fix issue with handling DHCPv4 lease expiration.
  Fix issue with handling WiFi auto-scanning timeout.
  Fix issue with handling domain and DNS server changes.
  Fix issue with double free and agent messages.
  ver 1.23:
  Fix issue with memory leak in technology handling.
  Fix issue with not removing host route of OpenVPN.
  Fix issue with double free in DHCP cleanup handling.
  Fix issue with handling DHCP method from oFono.
  Fix issue with IPv6-PD when disabling tethering.
  Fix issue with DNS proxy when disabling tethering.
  Fix issue with Bluetooth start and stop interaction.
  Fix issue with Bluetooth PAN networks on adapter change.
  ver 1.22:
  Fix issue with WPS state synchronization.
  Fix issue with DNS servers and default service.
  Fix issue with DHCP client and rebooting state.
  Add support for NTP exponential backoff handling.
  Add support for NTP kiss-of-death packet handling.
  Add support for Ethernet gadget networking.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1438948800">- bump to 1.29
  Fix issue with IPv6 autoconfiguration when disabled.
  Fix issue with IPv6 temporary route handling.
  Fix issue with IPv6 timers for nameservers.
  Fix issue with DHPCv6 and route configuration.
  Fix issue with DHCPv6 source port and buggy servers.
  Fix issue with DHCPv6 rapid commit option length.
  Fix issue with DHCPv6 rapid commit error handling.
  Fix issue with handling invalid WiFi passphrases.
  Fix issue with connecting Ethernet devices.
  Add support for Ethernet and VLAN usage.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1444737600">- bumpt to 1.30
    Fix issue with pending DNS request during server change.
    Fix issue with empty strings in nameservers configuration.
    Fix issue with time servers during IP configuration change.
    Fix issue with 4-way handshake during roaming.
    Fix issue with open WiFi networks security.
    Fix issue with support for WiFi AnonymousIdentity.
    Fix issue with memory leak and DHCPv6 DUID handling.
    Fix issue with DHCP client and P2P interaction.
    Fix issue with handling provision file updates.
    Fix issue with VPN state updates.
    Disable 6to4 support by default.
- add keyring file
- clean with spec-cleaner
- fix builds for all possible distributions and architectures</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1503403200">- bump to 1.35
  besides other things contains fix for CVE-2017-12865</changelog>
  <changelog author="avvissu@yandex.by" date="1504872000">- Remove obsolete macros
- Add polkit-agent-1 dependency
- Use the %tmpfiles_create macro
- Removal of ldconfig scriptlets from all packages
- Add connman-wait-online.service in post{un}
- Spec file cleanup</changelog>
  <changelog author="avvissu@yandex.by" date="1507032000">- Add connman-1.35-resolvconf.patch
- Activate connman.service if the network services disabled
- Add info in /var/adm/update-messages</changelog>
  <changelog author="avvissu@yandex.by" date="1508414400">- Add configuration file (/etc/connman/main.conf)
- Add ghost lines: main.conf connman connman-vpn</changelog>
  <changelog author="avvissu@yandex.by" date="1508500800">- Remove unrecognized options: disable-gtk-doc, enable-threads,
  disable-iwmx, enable-session-policy</changelog>
  <changelog author="avvissu@yandex.by" date="1509019200">- Change the mode of download_files (sr#521762)
- Remove connman-rpmlintrc (bnc#1057697)
- Add client as a recommended dependency</changelog>
  <changelog author="avvissu@yandex.by" date="1514289600">- Add symlink to network.service (connman-1.35-service.patch)</changelog>
  <changelog author="avvissu@yandex.by" date="1518523200">- Fix build errors due to unsupported header include order with
  newer kernels &gt;=4.15 (connman-1.35-include.patch).</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1557489600">- Update to 1.37:
  * Fix issue with handling invalid gateway addresses.
  * Fix issue with handling updates of default gateway.
  * Fix issue with DHCP servers that require broadcast flag.
  * Add support for option to use gateways as time servers.
  * Add support for option to select default technology.
  * Add support for Address Conflict Detection (ACD).
  * Add support for IPv6 iptables management.
- Change in 1.36:
  * Fix issue with DNS short response on error handling.
  * Fix issue with handling incoming DNS requests.
  * Fix issue with handling empty timeserver list.
  * Fix issue with incorrect DHCP byte order.
  * Fix issue with AllowDomainnameUpdates handling.
  * Fix issue with IPv4 link-local IP conflict error.
  * Fix issue with handling WISPr over TLS connections.
  * Fix issue with WiFi background scanning handling.
  * Fix issue with WiFi disconnect+connect race condition.
  * Fix issue with WiFi scanning and tethering operation.
  * Fix issue with WiFi security change handling.
  * Fix issue with missing signal for WPS changes.
  * Fix issue with online check retry handling.
  * Add support for systemd-resolved backend.
  * Add support for mDNS configuration setup.
- Drop connman-1.35-include.patch
- Drop connman-1.35-resolvconf.patch</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1582027200">- Update to 1.38:
  * Fix issue with online check on IP address update.
  * Fix issue with OpenVPN and encrypted private keys.
  * Fix issue with finishing of VPN connections.
  * Add support for updated stable iwd APIs.
  * Add support for WireGuard networks.
- Spec file cleanup</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1613131200">- Update to 1.39 (bsc#1181751):
  * Fix issue with scanning state synchronization and iwd.
  * Fix issue with invalid key with 4-way handshake offloading.
  * Fix issue with DNS proxy length checks to prevent buffer overflow. (CVE-2021-26675)
  * Fix issue with DHCP leaking stack data via uninitialized variable. (CVE-2021-26676)</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1644580800">- Update to 1.41: (bsc#1194177, bsc#1194176, bsc#1194175)
  * Fix issue with RTNL netlink message alignment.
  * Fix issue with dnsproxy and timeout for TCP feature. (CVE-2022-23097, CVE-2022-23096)
  * Fix issue with dnsproxy and busy loop in TCP server. (CVE-2022-23098)
  * Fix issue with WiFi connection with no passphrase.
  * Add support for wpa_supplicant and WPA3-SAE functionality.
  * Add support for D-Bus ObjectManager interface.
- Renamed downstream patches to separate them from upstream patches
  * Rename 0001-connman-1.35-service.patch to 0100-connman-1.35-service.patch
- Add systemd hardening configuration
  * Rename harden_connman-vpn.service.patch to 0101-harden_connman-vpn.service.patch
  * Rename harden_connman-wait-online.service.patch to 0102-harden_connman-wait-online.service.patch
- Disabled openconnect plugin due to version conflict
- Disabled vpnc plugin for i568 missing dependency
- Disabled hh2serial and tist_working for ppc64le due to version conflict</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1659355200">- Add refcounting to wispr portal detection (bsc#1200190)
  * add 0001-wispr-Rename-wispr_portal_list-to-wispr_portal_hash.patch
  * add 0002-wispr-Ignore-NULL-proxy.patch
  * add 0003-wispr-Add-reference-counter-to-portal-context.patch (CVE-2022-32293)
  * add 0004-wispr-Update-portal-context-references.patch (CVE-2022-32293)
- Fix OOB write in received_data (bsc#1200189)
  * add 0005-gweb-Fix-OOB-write-in-received_data.patch (CVE-2022-32292)</changelog>
</package>
<package pkgid="af17e4268a87f9fce4000caa72f641bd334a2aebaeb1c9594158b74da700054a" name="connman-plugin-hh2serial-gps" arch="i586">
  <version epoch="0" ver="1.41" rel="bp154.2.3.1"/>
  <changelog author="sleep_walker@suse.cz" date="1423224000">- bump to 1.28
  ver 1.28:
  Fix issue with DHCPv6 re-transmission timer.
  Fix issue with DHCP service ID option byte order.
  Fix issue with IPv6 connections and SLAAC/DHCPv6.
  Fix issue with telephony and IPv6 autoconfiguration.
  Fix issue with Bluetooth technology setting changes.
  Fix issue with WiFi autoscan interval calculation.
  Fix issue with WiFi and missing BSS signal strength.
  Add support for IPv4 information for WiFi Display.
  ver 1.27:
  Fix issue with memory leak in IP configuration.
  Fix issue with providing random numbers for DHCP.
  Fix issue with handling IN_MOVED_TO inotify events.
  Fix issue with channel selection for WiFi scanning.
  Add support for handling Bluetooth GN and PANU roles.
  ver 1.26:
  Fix issue with missing WiFi security provisioning support.
  Fix issue with immutable setting and provisioned services.
  Fix issue with scheduling DNS cache cleanup procedure.
  Fix issue with IPv6 Privacy setting on service removal.
  Fix issue with DHCPv6 CONFIRM message sending procedure.
  Fix issue with DHCPv6 lease expiration handling support.
  Fix issue with DHCPv4 networks and broadcast flag handling.
  Fix issue with DHCPv4 networks without gateway configuration.
  Fix issue with P2P Peer authorization handling.
  Fix issue with P2P Peer service registration.
  Add support for WiFi Display information elements.
  Add support for systemd-hostnamed integration.
  ver 1.25:
  Fix issue with handling rebind timer for DHCPv6.
  Fix issue with handling DHCP renew transaction.
  Fix issue with user supplied proxy settings and DHCP.
  Fix issue with extra status codes from captive portals.
  Fix issue with service idle state reset on failure.
  Fix issue with DNS label compression handling.
  Add support for experimental P2P Peer service.
  ver 1.24:
  Fix issue with handling slave interfaces.
  Fix issue with handling DHCPv4 broadcast flag.
  Fix issue with handling DHCPv4 lease expiration.
  Fix issue with handling WiFi auto-scanning timeout.
  Fix issue with handling domain and DNS server changes.
  Fix issue with double free and agent messages.
  ver 1.23:
  Fix issue with memory leak in technology handling.
  Fix issue with not removing host route of OpenVPN.
  Fix issue with double free in DHCP cleanup handling.
  Fix issue with handling DHCP method from oFono.
  Fix issue with IPv6-PD when disabling tethering.
  Fix issue with DNS proxy when disabling tethering.
  Fix issue with Bluetooth start and stop interaction.
  Fix issue with Bluetooth PAN networks on adapter change.
  ver 1.22:
  Fix issue with WPS state synchronization.
  Fix issue with DNS servers and default service.
  Fix issue with DHCP client and rebooting state.
  Add support for NTP exponential backoff handling.
  Add support for NTP kiss-of-death packet handling.
  Add support for Ethernet gadget networking.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1438948800">- bump to 1.29
  Fix issue with IPv6 autoconfiguration when disabled.
  Fix issue with IPv6 temporary route handling.
  Fix issue with IPv6 timers for nameservers.
  Fix issue with DHPCv6 and route configuration.
  Fix issue with DHCPv6 source port and buggy servers.
  Fix issue with DHCPv6 rapid commit option length.
  Fix issue with DHCPv6 rapid commit error handling.
  Fix issue with handling invalid WiFi passphrases.
  Fix issue with connecting Ethernet devices.
  Add support for Ethernet and VLAN usage.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1444737600">- bumpt to 1.30
    Fix issue with pending DNS request during server change.
    Fix issue with empty strings in nameservers configuration.
    Fix issue with time servers during IP configuration change.
    Fix issue with 4-way handshake during roaming.
    Fix issue with open WiFi networks security.
    Fix issue with support for WiFi AnonymousIdentity.
    Fix issue with memory leak and DHCPv6 DUID handling.
    Fix issue with DHCP client and P2P interaction.
    Fix issue with handling provision file updates.
    Fix issue with VPN state updates.
    Disable 6to4 support by default.
- add keyring file
- clean with spec-cleaner
- fix builds for all possible distributions and architectures</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1503403200">- bump to 1.35
  besides other things contains fix for CVE-2017-12865</changelog>
  <changelog author="avvissu@yandex.by" date="1504872000">- Remove obsolete macros
- Add polkit-agent-1 dependency
- Use the %tmpfiles_create macro
- Removal of ldconfig scriptlets from all packages
- Add connman-wait-online.service in post{un}
- Spec file cleanup</changelog>
  <changelog author="avvissu@yandex.by" date="1507032000">- Add connman-1.35-resolvconf.patch
- Activate connman.service if the network services disabled
- Add info in /var/adm/update-messages</changelog>
  <changelog author="avvissu@yandex.by" date="1508414400">- Add configuration file (/etc/connman/main.conf)
- Add ghost lines: main.conf connman connman-vpn</changelog>
  <changelog author="avvissu@yandex.by" date="1508500800">- Remove unrecognized options: disable-gtk-doc, enable-threads,
  disable-iwmx, enable-session-policy</changelog>
  <changelog author="avvissu@yandex.by" date="1509019200">- Change the mode of download_files (sr#521762)
- Remove connman-rpmlintrc (bnc#1057697)
- Add client as a recommended dependency</changelog>
  <changelog author="avvissu@yandex.by" date="1514289600">- Add symlink to network.service (connman-1.35-service.patch)</changelog>
  <changelog author="avvissu@yandex.by" date="1518523200">- Fix build errors due to unsupported header include order with
  newer kernels &gt;=4.15 (connman-1.35-include.patch).</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1557489600">- Update to 1.37:
  * Fix issue with handling invalid gateway addresses.
  * Fix issue with handling updates of default gateway.
  * Fix issue with DHCP servers that require broadcast flag.
  * Add support for option to use gateways as time servers.
  * Add support for option to select default technology.
  * Add support for Address Conflict Detection (ACD).
  * Add support for IPv6 iptables management.
- Change in 1.36:
  * Fix issue with DNS short response on error handling.
  * Fix issue with handling incoming DNS requests.
  * Fix issue with handling empty timeserver list.
  * Fix issue with incorrect DHCP byte order.
  * Fix issue with AllowDomainnameUpdates handling.
  * Fix issue with IPv4 link-local IP conflict error.
  * Fix issue with handling WISPr over TLS connections.
  * Fix issue with WiFi background scanning handling.
  * Fix issue with WiFi disconnect+connect race condition.
  * Fix issue with WiFi scanning and tethering operation.
  * Fix issue with WiFi security change handling.
  * Fix issue with missing signal for WPS changes.
  * Fix issue with online check retry handling.
  * Add support for systemd-resolved backend.
  * Add support for mDNS configuration setup.
- Drop connman-1.35-include.patch
- Drop connman-1.35-resolvconf.patch</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1582027200">- Update to 1.38:
  * Fix issue with online check on IP address update.
  * Fix issue with OpenVPN and encrypted private keys.
  * Fix issue with finishing of VPN connections.
  * Add support for updated stable iwd APIs.
  * Add support for WireGuard networks.
- Spec file cleanup</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1613131200">- Update to 1.39 (bsc#1181751):
  * Fix issue with scanning state synchronization and iwd.
  * Fix issue with invalid key with 4-way handshake offloading.
  * Fix issue with DNS proxy length checks to prevent buffer overflow. (CVE-2021-26675)
  * Fix issue with DHCP leaking stack data via uninitialized variable. (CVE-2021-26676)</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1644580800">- Update to 1.41: (bsc#1194177, bsc#1194176, bsc#1194175)
  * Fix issue with RTNL netlink message alignment.
  * Fix issue with dnsproxy and timeout for TCP feature. (CVE-2022-23097, CVE-2022-23096)
  * Fix issue with dnsproxy and busy loop in TCP server. (CVE-2022-23098)
  * Fix issue with WiFi connection with no passphrase.
  * Add support for wpa_supplicant and WPA3-SAE functionality.
  * Add support for D-Bus ObjectManager interface.
- Renamed downstream patches to separate them from upstream patches
  * Rename 0001-connman-1.35-service.patch to 0100-connman-1.35-service.patch
- Add systemd hardening configuration
  * Rename harden_connman-vpn.service.patch to 0101-harden_connman-vpn.service.patch
  * Rename harden_connman-wait-online.service.patch to 0102-harden_connman-wait-online.service.patch
- Disabled openconnect plugin due to version conflict
- Disabled vpnc plugin for i568 missing dependency
- Disabled hh2serial and tist_working for ppc64le due to version conflict</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1659355200">- Add refcounting to wispr portal detection (bsc#1200190)
  * add 0001-wispr-Rename-wispr_portal_list-to-wispr_portal_hash.patch
  * add 0002-wispr-Ignore-NULL-proxy.patch
  * add 0003-wispr-Add-reference-counter-to-portal-context.patch (CVE-2022-32293)
  * add 0004-wispr-Update-portal-context-references.patch (CVE-2022-32293)
- Fix OOB write in received_data (bsc#1200189)
  * add 0005-gweb-Fix-OOB-write-in-received_data.patch (CVE-2022-32292)</changelog>
</package>
<package pkgid="1a932a363ef9b8b26236e64223948534951dc32a59ad8f5be7723f3e989be3cf" name="connman-plugin-hh2serial-gps" arch="s390x">
  <version epoch="0" ver="1.41" rel="bp154.2.3.1"/>
  <changelog author="sleep_walker@suse.cz" date="1423224000">- bump to 1.28
  ver 1.28:
  Fix issue with DHCPv6 re-transmission timer.
  Fix issue with DHCP service ID option byte order.
  Fix issue with IPv6 connections and SLAAC/DHCPv6.
  Fix issue with telephony and IPv6 autoconfiguration.
  Fix issue with Bluetooth technology setting changes.
  Fix issue with WiFi autoscan interval calculation.
  Fix issue with WiFi and missing BSS signal strength.
  Add support for IPv4 information for WiFi Display.
  ver 1.27:
  Fix issue with memory leak in IP configuration.
  Fix issue with providing random numbers for DHCP.
  Fix issue with handling IN_MOVED_TO inotify events.
  Fix issue with channel selection for WiFi scanning.
  Add support for handling Bluetooth GN and PANU roles.
  ver 1.26:
  Fix issue with missing WiFi security provisioning support.
  Fix issue with immutable setting and provisioned services.
  Fix issue with scheduling DNS cache cleanup procedure.
  Fix issue with IPv6 Privacy setting on service removal.
  Fix issue with DHCPv6 CONFIRM message sending procedure.
  Fix issue with DHCPv6 lease expiration handling support.
  Fix issue with DHCPv4 networks and broadcast flag handling.
  Fix issue with DHCPv4 networks without gateway configuration.
  Fix issue with P2P Peer authorization handling.
  Fix issue with P2P Peer service registration.
  Add support for WiFi Display information elements.
  Add support for systemd-hostnamed integration.
  ver 1.25:
  Fix issue with handling rebind timer for DHCPv6.
  Fix issue with handling DHCP renew transaction.
  Fix issue with user supplied proxy settings and DHCP.
  Fix issue with extra status codes from captive portals.
  Fix issue with service idle state reset on failure.
  Fix issue with DNS label compression handling.
  Add support for experimental P2P Peer service.
  ver 1.24:
  Fix issue with handling slave interfaces.
  Fix issue with handling DHCPv4 broadcast flag.
  Fix issue with handling DHCPv4 lease expiration.
  Fix issue with handling WiFi auto-scanning timeout.
  Fix issue with handling domain and DNS server changes.
  Fix issue with double free and agent messages.
  ver 1.23:
  Fix issue with memory leak in technology handling.
  Fix issue with not removing host route of OpenVPN.
  Fix issue with double free in DHCP cleanup handling.
  Fix issue with handling DHCP method from oFono.
  Fix issue with IPv6-PD when disabling tethering.
  Fix issue with DNS proxy when disabling tethering.
  Fix issue with Bluetooth start and stop interaction.
  Fix issue with Bluetooth PAN networks on adapter change.
  ver 1.22:
  Fix issue with WPS state synchronization.
  Fix issue with DNS servers and default service.
  Fix issue with DHCP client and rebooting state.
  Add support for NTP exponential backoff handling.
  Add support for NTP kiss-of-death packet handling.
  Add support for Ethernet gadget networking.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1438948800">- bump to 1.29
  Fix issue with IPv6 autoconfiguration when disabled.
  Fix issue with IPv6 temporary route handling.
  Fix issue with IPv6 timers for nameservers.
  Fix issue with DHPCv6 and route configuration.
  Fix issue with DHCPv6 source port and buggy servers.
  Fix issue with DHCPv6 rapid commit option length.
  Fix issue with DHCPv6 rapid commit error handling.
  Fix issue with handling invalid WiFi passphrases.
  Fix issue with connecting Ethernet devices.
  Add support for Ethernet and VLAN usage.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1444737600">- bumpt to 1.30
    Fix issue with pending DNS request during server change.
    Fix issue with empty strings in nameservers configuration.
    Fix issue with time servers during IP configuration change.
    Fix issue with 4-way handshake during roaming.
    Fix issue with open WiFi networks security.
    Fix issue with support for WiFi AnonymousIdentity.
    Fix issue with memory leak and DHCPv6 DUID handling.
    Fix issue with DHCP client and P2P interaction.
    Fix issue with handling provision file updates.
    Fix issue with VPN state updates.
    Disable 6to4 support by default.
- add keyring file
- clean with spec-cleaner
- fix builds for all possible distributions and architectures</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1503403200">- bump to 1.35
  besides other things contains fix for CVE-2017-12865</changelog>
  <changelog author="avvissu@yandex.by" date="1504872000">- Remove obsolete macros
- Add polkit-agent-1 dependency
- Use the %tmpfiles_create macro
- Removal of ldconfig scriptlets from all packages
- Add connman-wait-online.service in post{un}
- Spec file cleanup</changelog>
  <changelog author="avvissu@yandex.by" date="1507032000">- Add connman-1.35-resolvconf.patch
- Activate connman.service if the network services disabled
- Add info in /var/adm/update-messages</changelog>
  <changelog author="avvissu@yandex.by" date="1508414400">- Add configuration file (/etc/connman/main.conf)
- Add ghost lines: main.conf connman connman-vpn</changelog>
  <changelog author="avvissu@yandex.by" date="1508500800">- Remove unrecognized options: disable-gtk-doc, enable-threads,
  disable-iwmx, enable-session-policy</changelog>
  <changelog author="avvissu@yandex.by" date="1509019200">- Change the mode of download_files (sr#521762)
- Remove connman-rpmlintrc (bnc#1057697)
- Add client as a recommended dependency</changelog>
  <changelog author="avvissu@yandex.by" date="1514289600">- Add symlink to network.service (connman-1.35-service.patch)</changelog>
  <changelog author="avvissu@yandex.by" date="1518523200">- Fix build errors due to unsupported header include order with
  newer kernels &gt;=4.15 (connman-1.35-include.patch).</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1557489600">- Update to 1.37:
  * Fix issue with handling invalid gateway addresses.
  * Fix issue with handling updates of default gateway.
  * Fix issue with DHCP servers that require broadcast flag.
  * Add support for option to use gateways as time servers.
  * Add support for option to select default technology.
  * Add support for Address Conflict Detection (ACD).
  * Add support for IPv6 iptables management.
- Change in 1.36:
  * Fix issue with DNS short response on error handling.
  * Fix issue with handling incoming DNS requests.
  * Fix issue with handling empty timeserver list.
  * Fix issue with incorrect DHCP byte order.
  * Fix issue with AllowDomainnameUpdates handling.
  * Fix issue with IPv4 link-local IP conflict error.
  * Fix issue with handling WISPr over TLS connections.
  * Fix issue with WiFi background scanning handling.
  * Fix issue with WiFi disconnect+connect race condition.
  * Fix issue with WiFi scanning and tethering operation.
  * Fix issue with WiFi security change handling.
  * Fix issue with missing signal for WPS changes.
  * Fix issue with online check retry handling.
  * Add support for systemd-resolved backend.
  * Add support for mDNS configuration setup.
- Drop connman-1.35-include.patch
- Drop connman-1.35-resolvconf.patch</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1582027200">- Update to 1.38:
  * Fix issue with online check on IP address update.
  * Fix issue with OpenVPN and encrypted private keys.
  * Fix issue with finishing of VPN connections.
  * Add support for updated stable iwd APIs.
  * Add support for WireGuard networks.
- Spec file cleanup</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1613131200">- Update to 1.39 (bsc#1181751):
  * Fix issue with scanning state synchronization and iwd.
  * Fix issue with invalid key with 4-way handshake offloading.
  * Fix issue with DNS proxy length checks to prevent buffer overflow. (CVE-2021-26675)
  * Fix issue with DHCP leaking stack data via uninitialized variable. (CVE-2021-26676)</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1644580800">- Update to 1.41: (bsc#1194177, bsc#1194176, bsc#1194175)
  * Fix issue with RTNL netlink message alignment.
  * Fix issue with dnsproxy and timeout for TCP feature. (CVE-2022-23097, CVE-2022-23096)
  * Fix issue with dnsproxy and busy loop in TCP server. (CVE-2022-23098)
  * Fix issue with WiFi connection with no passphrase.
  * Add support for wpa_supplicant and WPA3-SAE functionality.
  * Add support for D-Bus ObjectManager interface.
- Renamed downstream patches to separate them from upstream patches
  * Rename 0001-connman-1.35-service.patch to 0100-connman-1.35-service.patch
- Add systemd hardening configuration
  * Rename harden_connman-vpn.service.patch to 0101-harden_connman-vpn.service.patch
  * Rename harden_connman-wait-online.service.patch to 0102-harden_connman-wait-online.service.patch
- Disabled openconnect plugin due to version conflict
- Disabled vpnc plugin for i568 missing dependency
- Disabled hh2serial and tist_working for ppc64le due to version conflict</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1659355200">- Add refcounting to wispr portal detection (bsc#1200190)
  * add 0001-wispr-Rename-wispr_portal_list-to-wispr_portal_hash.patch
  * add 0002-wispr-Ignore-NULL-proxy.patch
  * add 0003-wispr-Add-reference-counter-to-portal-context.patch (CVE-2022-32293)
  * add 0004-wispr-Update-portal-context-references.patch (CVE-2022-32293)
- Fix OOB write in received_data (bsc#1200189)
  * add 0005-gweb-Fix-OOB-write-in-received_data.patch (CVE-2022-32292)</changelog>
</package>
<package pkgid="8993c73b0169647a4b5a0e2d94801703a09ebe449738f9a9d829fe19df4aaa15" name="connman-plugin-hh2serial-gps" arch="x86_64">
  <version epoch="0" ver="1.41" rel="bp154.2.3.1"/>
  <changelog author="sleep_walker@suse.cz" date="1423224000">- bump to 1.28
  ver 1.28:
  Fix issue with DHCPv6 re-transmission timer.
  Fix issue with DHCP service ID option byte order.
  Fix issue with IPv6 connections and SLAAC/DHCPv6.
  Fix issue with telephony and IPv6 autoconfiguration.
  Fix issue with Bluetooth technology setting changes.
  Fix issue with WiFi autoscan interval calculation.
  Fix issue with WiFi and missing BSS signal strength.
  Add support for IPv4 information for WiFi Display.
  ver 1.27:
  Fix issue with memory leak in IP configuration.
  Fix issue with providing random numbers for DHCP.
  Fix issue with handling IN_MOVED_TO inotify events.
  Fix issue with channel selection for WiFi scanning.
  Add support for handling Bluetooth GN and PANU roles.
  ver 1.26:
  Fix issue with missing WiFi security provisioning support.
  Fix issue with immutable setting and provisioned services.
  Fix issue with scheduling DNS cache cleanup procedure.
  Fix issue with IPv6 Privacy setting on service removal.
  Fix issue with DHCPv6 CONFIRM message sending procedure.
  Fix issue with DHCPv6 lease expiration handling support.
  Fix issue with DHCPv4 networks and broadcast flag handling.
  Fix issue with DHCPv4 networks without gateway configuration.
  Fix issue with P2P Peer authorization handling.
  Fix issue with P2P Peer service registration.
  Add support for WiFi Display information elements.
  Add support for systemd-hostnamed integration.
  ver 1.25:
  Fix issue with handling rebind timer for DHCPv6.
  Fix issue with handling DHCP renew transaction.
  Fix issue with user supplied proxy settings and DHCP.
  Fix issue with extra status codes from captive portals.
  Fix issue with service idle state reset on failure.
  Fix issue with DNS label compression handling.
  Add support for experimental P2P Peer service.
  ver 1.24:
  Fix issue with handling slave interfaces.
  Fix issue with handling DHCPv4 broadcast flag.
  Fix issue with handling DHCPv4 lease expiration.
  Fix issue with handling WiFi auto-scanning timeout.
  Fix issue with handling domain and DNS server changes.
  Fix issue with double free and agent messages.
  ver 1.23:
  Fix issue with memory leak in technology handling.
  Fix issue with not removing host route of OpenVPN.
  Fix issue with double free in DHCP cleanup handling.
  Fix issue with handling DHCP method from oFono.
  Fix issue with IPv6-PD when disabling tethering.
  Fix issue with DNS proxy when disabling tethering.
  Fix issue with Bluetooth start and stop interaction.
  Fix issue with Bluetooth PAN networks on adapter change.
  ver 1.22:
  Fix issue with WPS state synchronization.
  Fix issue with DNS servers and default service.
  Fix issue with DHCP client and rebooting state.
  Add support for NTP exponential backoff handling.
  Add support for NTP kiss-of-death packet handling.
  Add support for Ethernet gadget networking.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1438948800">- bump to 1.29
  Fix issue with IPv6 autoconfiguration when disabled.
  Fix issue with IPv6 temporary route handling.
  Fix issue with IPv6 timers for nameservers.
  Fix issue with DHPCv6 and route configuration.
  Fix issue with DHCPv6 source port and buggy servers.
  Fix issue with DHCPv6 rapid commit option length.
  Fix issue with DHCPv6 rapid commit error handling.
  Fix issue with handling invalid WiFi passphrases.
  Fix issue with connecting Ethernet devices.
  Add support for Ethernet and VLAN usage.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1444737600">- bumpt to 1.30
    Fix issue with pending DNS request during server change.
    Fix issue with empty strings in nameservers configuration.
    Fix issue with time servers during IP configuration change.
    Fix issue with 4-way handshake during roaming.
    Fix issue with open WiFi networks security.
    Fix issue with support for WiFi AnonymousIdentity.
    Fix issue with memory leak and DHCPv6 DUID handling.
    Fix issue with DHCP client and P2P interaction.
    Fix issue with handling provision file updates.
    Fix issue with VPN state updates.
    Disable 6to4 support by default.
- add keyring file
- clean with spec-cleaner
- fix builds for all possible distributions and architectures</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1503403200">- bump to 1.35
  besides other things contains fix for CVE-2017-12865</changelog>
  <changelog author="avvissu@yandex.by" date="1504872000">- Remove obsolete macros
- Add polkit-agent-1 dependency
- Use the %tmpfiles_create macro
- Removal of ldconfig scriptlets from all packages
- Add connman-wait-online.service in post{un}
- Spec file cleanup</changelog>
  <changelog author="avvissu@yandex.by" date="1507032000">- Add connman-1.35-resolvconf.patch
- Activate connman.service if the network services disabled
- Add info in /var/adm/update-messages</changelog>
  <changelog author="avvissu@yandex.by" date="1508414400">- Add configuration file (/etc/connman/main.conf)
- Add ghost lines: main.conf connman connman-vpn</changelog>
  <changelog author="avvissu@yandex.by" date="1508500800">- Remove unrecognized options: disable-gtk-doc, enable-threads,
  disable-iwmx, enable-session-policy</changelog>
  <changelog author="avvissu@yandex.by" date="1509019200">- Change the mode of download_files (sr#521762)
- Remove connman-rpmlintrc (bnc#1057697)
- Add client as a recommended dependency</changelog>
  <changelog author="avvissu@yandex.by" date="1514289600">- Add symlink to network.service (connman-1.35-service.patch)</changelog>
  <changelog author="avvissu@yandex.by" date="1518523200">- Fix build errors due to unsupported header include order with
  newer kernels &gt;=4.15 (connman-1.35-include.patch).</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1557489600">- Update to 1.37:
  * Fix issue with handling invalid gateway addresses.
  * Fix issue with handling updates of default gateway.
  * Fix issue with DHCP servers that require broadcast flag.
  * Add support for option to use gateways as time servers.
  * Add support for option to select default technology.
  * Add support for Address Conflict Detection (ACD).
  * Add support for IPv6 iptables management.
- Change in 1.36:
  * Fix issue with DNS short response on error handling.
  * Fix issue with handling incoming DNS requests.
  * Fix issue with handling empty timeserver list.
  * Fix issue with incorrect DHCP byte order.
  * Fix issue with AllowDomainnameUpdates handling.
  * Fix issue with IPv4 link-local IP conflict error.
  * Fix issue with handling WISPr over TLS connections.
  * Fix issue with WiFi background scanning handling.
  * Fix issue with WiFi disconnect+connect race condition.
  * Fix issue with WiFi scanning and tethering operation.
  * Fix issue with WiFi security change handling.
  * Fix issue with missing signal for WPS changes.
  * Fix issue with online check retry handling.
  * Add support for systemd-resolved backend.
  * Add support for mDNS configuration setup.
- Drop connman-1.35-include.patch
- Drop connman-1.35-resolvconf.patch</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1582027200">- Update to 1.38:
  * Fix issue with online check on IP address update.
  * Fix issue with OpenVPN and encrypted private keys.
  * Fix issue with finishing of VPN connections.
  * Add support for updated stable iwd APIs.
  * Add support for WireGuard networks.
- Spec file cleanup</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1613131200">- Update to 1.39 (bsc#1181751):
  * Fix issue with scanning state synchronization and iwd.
  * Fix issue with invalid key with 4-way handshake offloading.
  * Fix issue with DNS proxy length checks to prevent buffer overflow. (CVE-2021-26675)
  * Fix issue with DHCP leaking stack data via uninitialized variable. (CVE-2021-26676)</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1644580800">- Update to 1.41: (bsc#1194177, bsc#1194176, bsc#1194175)
  * Fix issue with RTNL netlink message alignment.
  * Fix issue with dnsproxy and timeout for TCP feature. (CVE-2022-23097, CVE-2022-23096)
  * Fix issue with dnsproxy and busy loop in TCP server. (CVE-2022-23098)
  * Fix issue with WiFi connection with no passphrase.
  * Add support for wpa_supplicant and WPA3-SAE functionality.
  * Add support for D-Bus ObjectManager interface.
- Renamed downstream patches to separate them from upstream patches
  * Rename 0001-connman-1.35-service.patch to 0100-connman-1.35-service.patch
- Add systemd hardening configuration
  * Rename harden_connman-vpn.service.patch to 0101-harden_connman-vpn.service.patch
  * Rename harden_connman-wait-online.service.patch to 0102-harden_connman-wait-online.service.patch
- Disabled openconnect plugin due to version conflict
- Disabled vpnc plugin for i568 missing dependency
- Disabled hh2serial and tist_working for ppc64le due to version conflict</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1659355200">- Add refcounting to wispr portal detection (bsc#1200190)
  * add 0001-wispr-Rename-wispr_portal_list-to-wispr_portal_hash.patch
  * add 0002-wispr-Ignore-NULL-proxy.patch
  * add 0003-wispr-Add-reference-counter-to-portal-context.patch (CVE-2022-32293)
  * add 0004-wispr-Update-portal-context-references.patch (CVE-2022-32293)
- Fix OOB write in received_data (bsc#1200189)
  * add 0005-gweb-Fix-OOB-write-in-received_data.patch (CVE-2022-32292)</changelog>
</package>
<package pkgid="215512c5b1344b523433572e4c86f54505aeaef13cc44e7c078e51ff7c83ea20" name="connman-plugin-iospm" arch="aarch64">
  <version epoch="0" ver="1.41" rel="bp154.2.3.1"/>
  <changelog author="sleep_walker@suse.cz" date="1423224000">- bump to 1.28
  ver 1.28:
  Fix issue with DHCPv6 re-transmission timer.
  Fix issue with DHCP service ID option byte order.
  Fix issue with IPv6 connections and SLAAC/DHCPv6.
  Fix issue with telephony and IPv6 autoconfiguration.
  Fix issue with Bluetooth technology setting changes.
  Fix issue with WiFi autoscan interval calculation.
  Fix issue with WiFi and missing BSS signal strength.
  Add support for IPv4 information for WiFi Display.
  ver 1.27:
  Fix issue with memory leak in IP configuration.
  Fix issue with providing random numbers for DHCP.
  Fix issue with handling IN_MOVED_TO inotify events.
  Fix issue with channel selection for WiFi scanning.
  Add support for handling Bluetooth GN and PANU roles.
  ver 1.26:
  Fix issue with missing WiFi security provisioning support.
  Fix issue with immutable setting and provisioned services.
  Fix issue with scheduling DNS cache cleanup procedure.
  Fix issue with IPv6 Privacy setting on service removal.
  Fix issue with DHCPv6 CONFIRM message sending procedure.
  Fix issue with DHCPv6 lease expiration handling support.
  Fix issue with DHCPv4 networks and broadcast flag handling.
  Fix issue with DHCPv4 networks without gateway configuration.
  Fix issue with P2P Peer authorization handling.
  Fix issue with P2P Peer service registration.
  Add support for WiFi Display information elements.
  Add support for systemd-hostnamed integration.
  ver 1.25:
  Fix issue with handling rebind timer for DHCPv6.
  Fix issue with handling DHCP renew transaction.
  Fix issue with user supplied proxy settings and DHCP.
  Fix issue with extra status codes from captive portals.
  Fix issue with service idle state reset on failure.
  Fix issue with DNS label compression handling.
  Add support for experimental P2P Peer service.
  ver 1.24:
  Fix issue with handling slave interfaces.
  Fix issue with handling DHCPv4 broadcast flag.
  Fix issue with handling DHCPv4 lease expiration.
  Fix issue with handling WiFi auto-scanning timeout.
  Fix issue with handling domain and DNS server changes.
  Fix issue with double free and agent messages.
  ver 1.23:
  Fix issue with memory leak in technology handling.
  Fix issue with not removing host route of OpenVPN.
  Fix issue with double free in DHCP cleanup handling.
  Fix issue with handling DHCP method from oFono.
  Fix issue with IPv6-PD when disabling tethering.
  Fix issue with DNS proxy when disabling tethering.
  Fix issue with Bluetooth start and stop interaction.
  Fix issue with Bluetooth PAN networks on adapter change.
  ver 1.22:
  Fix issue with WPS state synchronization.
  Fix issue with DNS servers and default service.
  Fix issue with DHCP client and rebooting state.
  Add support for NTP exponential backoff handling.
  Add support for NTP kiss-of-death packet handling.
  Add support for Ethernet gadget networking.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1438948800">- bump to 1.29
  Fix issue with IPv6 autoconfiguration when disabled.
  Fix issue with IPv6 temporary route handling.
  Fix issue with IPv6 timers for nameservers.
  Fix issue with DHPCv6 and route configuration.
  Fix issue with DHCPv6 source port and buggy servers.
  Fix issue with DHCPv6 rapid commit option length.
  Fix issue with DHCPv6 rapid commit error handling.
  Fix issue with handling invalid WiFi passphrases.
  Fix issue with connecting Ethernet devices.
  Add support for Ethernet and VLAN usage.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1444737600">- bumpt to 1.30
    Fix issue with pending DNS request during server change.
    Fix issue with empty strings in nameservers configuration.
    Fix issue with time servers during IP configuration change.
    Fix issue with 4-way handshake during roaming.
    Fix issue with open WiFi networks security.
    Fix issue with support for WiFi AnonymousIdentity.
    Fix issue with memory leak and DHCPv6 DUID handling.
    Fix issue with DHCP client and P2P interaction.
    Fix issue with handling provision file updates.
    Fix issue with VPN state updates.
    Disable 6to4 support by default.
- add keyring file
- clean with spec-cleaner
- fix builds for all possible distributions and architectures</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1503403200">- bump to 1.35
  besides other things contains fix for CVE-2017-12865</changelog>
  <changelog author="avvissu@yandex.by" date="1504872000">- Remove obsolete macros
- Add polkit-agent-1 dependency
- Use the %tmpfiles_create macro
- Removal of ldconfig scriptlets from all packages
- Add connman-wait-online.service in post{un}
- Spec file cleanup</changelog>
  <changelog author="avvissu@yandex.by" date="1507032000">- Add connman-1.35-resolvconf.patch
- Activate connman.service if the network services disabled
- Add info in /var/adm/update-messages</changelog>
  <changelog author="avvissu@yandex.by" date="1508414400">- Add configuration file (/etc/connman/main.conf)
- Add ghost lines: main.conf connman connman-vpn</changelog>
  <changelog author="avvissu@yandex.by" date="1508500800">- Remove unrecognized options: disable-gtk-doc, enable-threads,
  disable-iwmx, enable-session-policy</changelog>
  <changelog author="avvissu@yandex.by" date="1509019200">- Change the mode of download_files (sr#521762)
- Remove connman-rpmlintrc (bnc#1057697)
- Add client as a recommended dependency</changelog>
  <changelog author="avvissu@yandex.by" date="1514289600">- Add symlink to network.service (connman-1.35-service.patch)</changelog>
  <changelog author="avvissu@yandex.by" date="1518523200">- Fix build errors due to unsupported header include order with
  newer kernels &gt;=4.15 (connman-1.35-include.patch).</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1557489600">- Update to 1.37:
  * Fix issue with handling invalid gateway addresses.
  * Fix issue with handling updates of default gateway.
  * Fix issue with DHCP servers that require broadcast flag.
  * Add support for option to use gateways as time servers.
  * Add support for option to select default technology.
  * Add support for Address Conflict Detection (ACD).
  * Add support for IPv6 iptables management.
- Change in 1.36:
  * Fix issue with DNS short response on error handling.
  * Fix issue with handling incoming DNS requests.
  * Fix issue with handling empty timeserver list.
  * Fix issue with incorrect DHCP byte order.
  * Fix issue with AllowDomainnameUpdates handling.
  * Fix issue with IPv4 link-local IP conflict error.
  * Fix issue with handling WISPr over TLS connections.
  * Fix issue with WiFi background scanning handling.
  * Fix issue with WiFi disconnect+connect race condition.
  * Fix issue with WiFi scanning and tethering operation.
  * Fix issue with WiFi security change handling.
  * Fix issue with missing signal for WPS changes.
  * Fix issue with online check retry handling.
  * Add support for systemd-resolved backend.
  * Add support for mDNS configuration setup.
- Drop connman-1.35-include.patch
- Drop connman-1.35-resolvconf.patch</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1582027200">- Update to 1.38:
  * Fix issue with online check on IP address update.
  * Fix issue with OpenVPN and encrypted private keys.
  * Fix issue with finishing of VPN connections.
  * Add support for updated stable iwd APIs.
  * Add support for WireGuard networks.
- Spec file cleanup</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1613131200">- Update to 1.39 (bsc#1181751):
  * Fix issue with scanning state synchronization and iwd.
  * Fix issue with invalid key with 4-way handshake offloading.
  * Fix issue with DNS proxy length checks to prevent buffer overflow. (CVE-2021-26675)
  * Fix issue with DHCP leaking stack data via uninitialized variable. (CVE-2021-26676)</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1644580800">- Update to 1.41: (bsc#1194177, bsc#1194176, bsc#1194175)
  * Fix issue with RTNL netlink message alignment.
  * Fix issue with dnsproxy and timeout for TCP feature. (CVE-2022-23097, CVE-2022-23096)
  * Fix issue with dnsproxy and busy loop in TCP server. (CVE-2022-23098)
  * Fix issue with WiFi connection with no passphrase.
  * Add support for wpa_supplicant and WPA3-SAE functionality.
  * Add support for D-Bus ObjectManager interface.
- Renamed downstream patches to separate them from upstream patches
  * Rename 0001-connman-1.35-service.patch to 0100-connman-1.35-service.patch
- Add systemd hardening configuration
  * Rename harden_connman-vpn.service.patch to 0101-harden_connman-vpn.service.patch
  * Rename harden_connman-wait-online.service.patch to 0102-harden_connman-wait-online.service.patch
- Disabled openconnect plugin due to version conflict
- Disabled vpnc plugin for i568 missing dependency
- Disabled hh2serial and tist_working for ppc64le due to version conflict</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1659355200">- Add refcounting to wispr portal detection (bsc#1200190)
  * add 0001-wispr-Rename-wispr_portal_list-to-wispr_portal_hash.patch
  * add 0002-wispr-Ignore-NULL-proxy.patch
  * add 0003-wispr-Add-reference-counter-to-portal-context.patch (CVE-2022-32293)
  * add 0004-wispr-Update-portal-context-references.patch (CVE-2022-32293)
- Fix OOB write in received_data (bsc#1200189)
  * add 0005-gweb-Fix-OOB-write-in-received_data.patch (CVE-2022-32292)</changelog>
</package>
<package pkgid="3cba7af62931acd6114ebee7245f1912180575b95359f7de155e1801c68605a2" name="connman-plugin-iospm" arch="i586">
  <version epoch="0" ver="1.41" rel="bp154.2.3.1"/>
  <changelog author="sleep_walker@suse.cz" date="1423224000">- bump to 1.28
  ver 1.28:
  Fix issue with DHCPv6 re-transmission timer.
  Fix issue with DHCP service ID option byte order.
  Fix issue with IPv6 connections and SLAAC/DHCPv6.
  Fix issue with telephony and IPv6 autoconfiguration.
  Fix issue with Bluetooth technology setting changes.
  Fix issue with WiFi autoscan interval calculation.
  Fix issue with WiFi and missing BSS signal strength.
  Add support for IPv4 information for WiFi Display.
  ver 1.27:
  Fix issue with memory leak in IP configuration.
  Fix issue with providing random numbers for DHCP.
  Fix issue with handling IN_MOVED_TO inotify events.
  Fix issue with channel selection for WiFi scanning.
  Add support for handling Bluetooth GN and PANU roles.
  ver 1.26:
  Fix issue with missing WiFi security provisioning support.
  Fix issue with immutable setting and provisioned services.
  Fix issue with scheduling DNS cache cleanup procedure.
  Fix issue with IPv6 Privacy setting on service removal.
  Fix issue with DHCPv6 CONFIRM message sending procedure.
  Fix issue with DHCPv6 lease expiration handling support.
  Fix issue with DHCPv4 networks and broadcast flag handling.
  Fix issue with DHCPv4 networks without gateway configuration.
  Fix issue with P2P Peer authorization handling.
  Fix issue with P2P Peer service registration.
  Add support for WiFi Display information elements.
  Add support for systemd-hostnamed integration.
  ver 1.25:
  Fix issue with handling rebind timer for DHCPv6.
  Fix issue with handling DHCP renew transaction.
  Fix issue with user supplied proxy settings and DHCP.
  Fix issue with extra status codes from captive portals.
  Fix issue with service idle state reset on failure.
  Fix issue with DNS label compression handling.
  Add support for experimental P2P Peer service.
  ver 1.24:
  Fix issue with handling slave interfaces.
  Fix issue with handling DHCPv4 broadcast flag.
  Fix issue with handling DHCPv4 lease expiration.
  Fix issue with handling WiFi auto-scanning timeout.
  Fix issue with handling domain and DNS server changes.
  Fix issue with double free and agent messages.
  ver 1.23:
  Fix issue with memory leak in technology handling.
  Fix issue with not removing host route of OpenVPN.
  Fix issue with double free in DHCP cleanup handling.
  Fix issue with handling DHCP method from oFono.
  Fix issue with IPv6-PD when disabling tethering.
  Fix issue with DNS proxy when disabling tethering.
  Fix issue with Bluetooth start and stop interaction.
  Fix issue with Bluetooth PAN networks on adapter change.
  ver 1.22:
  Fix issue with WPS state synchronization.
  Fix issue with DNS servers and default service.
  Fix issue with DHCP client and rebooting state.
  Add support for NTP exponential backoff handling.
  Add support for NTP kiss-of-death packet handling.
  Add support for Ethernet gadget networking.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1438948800">- bump to 1.29
  Fix issue with IPv6 autoconfiguration when disabled.
  Fix issue with IPv6 temporary route handling.
  Fix issue with IPv6 timers for nameservers.
  Fix issue with DHPCv6 and route configuration.
  Fix issue with DHCPv6 source port and buggy servers.
  Fix issue with DHCPv6 rapid commit option length.
  Fix issue with DHCPv6 rapid commit error handling.
  Fix issue with handling invalid WiFi passphrases.
  Fix issue with connecting Ethernet devices.
  Add support for Ethernet and VLAN usage.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1444737600">- bumpt to 1.30
    Fix issue with pending DNS request during server change.
    Fix issue with empty strings in nameservers configuration.
    Fix issue with time servers during IP configuration change.
    Fix issue with 4-way handshake during roaming.
    Fix issue with open WiFi networks security.
    Fix issue with support for WiFi AnonymousIdentity.
    Fix issue with memory leak and DHCPv6 DUID handling.
    Fix issue with DHCP client and P2P interaction.
    Fix issue with handling provision file updates.
    Fix issue with VPN state updates.
    Disable 6to4 support by default.
- add keyring file
- clean with spec-cleaner
- fix builds for all possible distributions and architectures</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1503403200">- bump to 1.35
  besides other things contains fix for CVE-2017-12865</changelog>
  <changelog author="avvissu@yandex.by" date="1504872000">- Remove obsolete macros
- Add polkit-agent-1 dependency
- Use the %tmpfiles_create macro
- Removal of ldconfig scriptlets from all packages
- Add connman-wait-online.service in post{un}
- Spec file cleanup</changelog>
  <changelog author="avvissu@yandex.by" date="1507032000">- Add connman-1.35-resolvconf.patch
- Activate connman.service if the network services disabled
- Add info in /var/adm/update-messages</changelog>
  <changelog author="avvissu@yandex.by" date="1508414400">- Add configuration file (/etc/connman/main.conf)
- Add ghost lines: main.conf connman connman-vpn</changelog>
  <changelog author="avvissu@yandex.by" date="1508500800">- Remove unrecognized options: disable-gtk-doc, enable-threads,
  disable-iwmx, enable-session-policy</changelog>
  <changelog author="avvissu@yandex.by" date="1509019200">- Change the mode of download_files (sr#521762)
- Remove connman-rpmlintrc (bnc#1057697)
- Add client as a recommended dependency</changelog>
  <changelog author="avvissu@yandex.by" date="1514289600">- Add symlink to network.service (connman-1.35-service.patch)</changelog>
  <changelog author="avvissu@yandex.by" date="1518523200">- Fix build errors due to unsupported header include order with
  newer kernels &gt;=4.15 (connman-1.35-include.patch).</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1557489600">- Update to 1.37:
  * Fix issue with handling invalid gateway addresses.
  * Fix issue with handling updates of default gateway.
  * Fix issue with DHCP servers that require broadcast flag.
  * Add support for option to use gateways as time servers.
  * Add support for option to select default technology.
  * Add support for Address Conflict Detection (ACD).
  * Add support for IPv6 iptables management.
- Change in 1.36:
  * Fix issue with DNS short response on error handling.
  * Fix issue with handling incoming DNS requests.
  * Fix issue with handling empty timeserver list.
  * Fix issue with incorrect DHCP byte order.
  * Fix issue with AllowDomainnameUpdates handling.
  * Fix issue with IPv4 link-local IP conflict error.
  * Fix issue with handling WISPr over TLS connections.
  * Fix issue with WiFi background scanning handling.
  * Fix issue with WiFi disconnect+connect race condition.
  * Fix issue with WiFi scanning and tethering operation.
  * Fix issue with WiFi security change handling.
  * Fix issue with missing signal for WPS changes.
  * Fix issue with online check retry handling.
  * Add support for systemd-resolved backend.
  * Add support for mDNS configuration setup.
- Drop connman-1.35-include.patch
- Drop connman-1.35-resolvconf.patch</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1582027200">- Update to 1.38:
  * Fix issue with online check on IP address update.
  * Fix issue with OpenVPN and encrypted private keys.
  * Fix issue with finishing of VPN connections.
  * Add support for updated stable iwd APIs.
  * Add support for WireGuard networks.
- Spec file cleanup</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1613131200">- Update to 1.39 (bsc#1181751):
  * Fix issue with scanning state synchronization and iwd.
  * Fix issue with invalid key with 4-way handshake offloading.
  * Fix issue with DNS proxy length checks to prevent buffer overflow. (CVE-2021-26675)
  * Fix issue with DHCP leaking stack data via uninitialized variable. (CVE-2021-26676)</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1644580800">- Update to 1.41: (bsc#1194177, bsc#1194176, bsc#1194175)
  * Fix issue with RTNL netlink message alignment.
  * Fix issue with dnsproxy and timeout for TCP feature. (CVE-2022-23097, CVE-2022-23096)
  * Fix issue with dnsproxy and busy loop in TCP server. (CVE-2022-23098)
  * Fix issue with WiFi connection with no passphrase.
  * Add support for wpa_supplicant and WPA3-SAE functionality.
  * Add support for D-Bus ObjectManager interface.
- Renamed downstream patches to separate them from upstream patches
  * Rename 0001-connman-1.35-service.patch to 0100-connman-1.35-service.patch
- Add systemd hardening configuration
  * Rename harden_connman-vpn.service.patch to 0101-harden_connman-vpn.service.patch
  * Rename harden_connman-wait-online.service.patch to 0102-harden_connman-wait-online.service.patch
- Disabled openconnect plugin due to version conflict
- Disabled vpnc plugin for i568 missing dependency
- Disabled hh2serial and tist_working for ppc64le due to version conflict</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1659355200">- Add refcounting to wispr portal detection (bsc#1200190)
  * add 0001-wispr-Rename-wispr_portal_list-to-wispr_portal_hash.patch
  * add 0002-wispr-Ignore-NULL-proxy.patch
  * add 0003-wispr-Add-reference-counter-to-portal-context.patch (CVE-2022-32293)
  * add 0004-wispr-Update-portal-context-references.patch (CVE-2022-32293)
- Fix OOB write in received_data (bsc#1200189)
  * add 0005-gweb-Fix-OOB-write-in-received_data.patch (CVE-2022-32292)</changelog>
</package>
<package pkgid="3ea9e948ba81dd5a8a79558ceccf25746bce613d5702113303805d6443b744e1" name="connman-plugin-iospm" arch="ppc64le">
  <version epoch="0" ver="1.41" rel="bp154.2.3.1"/>
  <changelog author="sleep_walker@suse.cz" date="1423224000">- bump to 1.28
  ver 1.28:
  Fix issue with DHCPv6 re-transmission timer.
  Fix issue with DHCP service ID option byte order.
  Fix issue with IPv6 connections and SLAAC/DHCPv6.
  Fix issue with telephony and IPv6 autoconfiguration.
  Fix issue with Bluetooth technology setting changes.
  Fix issue with WiFi autoscan interval calculation.
  Fix issue with WiFi and missing BSS signal strength.
  Add support for IPv4 information for WiFi Display.
  ver 1.27:
  Fix issue with memory leak in IP configuration.
  Fix issue with providing random numbers for DHCP.
  Fix issue with handling IN_MOVED_TO inotify events.
  Fix issue with channel selection for WiFi scanning.
  Add support for handling Bluetooth GN and PANU roles.
  ver 1.26:
  Fix issue with missing WiFi security provisioning support.
  Fix issue with immutable setting and provisioned services.
  Fix issue with scheduling DNS cache cleanup procedure.
  Fix issue with IPv6 Privacy setting on service removal.
  Fix issue with DHCPv6 CONFIRM message sending procedure.
  Fix issue with DHCPv6 lease expiration handling support.
  Fix issue with DHCPv4 networks and broadcast flag handling.
  Fix issue with DHCPv4 networks without gateway configuration.
  Fix issue with P2P Peer authorization handling.
  Fix issue with P2P Peer service registration.
  Add support for WiFi Display information elements.
  Add support for systemd-hostnamed integration.
  ver 1.25:
  Fix issue with handling rebind timer for DHCPv6.
  Fix issue with handling DHCP renew transaction.
  Fix issue with user supplied proxy settings and DHCP.
  Fix issue with extra status codes from captive portals.
  Fix issue with service idle state reset on failure.
  Fix issue with DNS label compression handling.
  Add support for experimental P2P Peer service.
  ver 1.24:
  Fix issue with handling slave interfaces.
  Fix issue with handling DHCPv4 broadcast flag.
  Fix issue with handling DHCPv4 lease expiration.
  Fix issue with handling WiFi auto-scanning timeout.
  Fix issue with handling domain and DNS server changes.
  Fix issue with double free and agent messages.
  ver 1.23:
  Fix issue with memory leak in technology handling.
  Fix issue with not removing host route of OpenVPN.
  Fix issue with double free in DHCP cleanup handling.
  Fix issue with handling DHCP method from oFono.
  Fix issue with IPv6-PD when disabling tethering.
  Fix issue with DNS proxy when disabling tethering.
  Fix issue with Bluetooth start and stop interaction.
  Fix issue with Bluetooth PAN networks on adapter change.
  ver 1.22:
  Fix issue with WPS state synchronization.
  Fix issue with DNS servers and default service.
  Fix issue with DHCP client and rebooting state.
  Add support for NTP exponential backoff handling.
  Add support for NTP kiss-of-death packet handling.
  Add support for Ethernet gadget networking.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1438948800">- bump to 1.29
  Fix issue with IPv6 autoconfiguration when disabled.
  Fix issue with IPv6 temporary route handling.
  Fix issue with IPv6 timers for nameservers.
  Fix issue with DHPCv6 and route configuration.
  Fix issue with DHCPv6 source port and buggy servers.
  Fix issue with DHCPv6 rapid commit option length.
  Fix issue with DHCPv6 rapid commit error handling.
  Fix issue with handling invalid WiFi passphrases.
  Fix issue with connecting Ethernet devices.
  Add support for Ethernet and VLAN usage.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1444737600">- bumpt to 1.30
    Fix issue with pending DNS request during server change.
    Fix issue with empty strings in nameservers configuration.
    Fix issue with time servers during IP configuration change.
    Fix issue with 4-way handshake during roaming.
    Fix issue with open WiFi networks security.
    Fix issue with support for WiFi AnonymousIdentity.
    Fix issue with memory leak and DHCPv6 DUID handling.
    Fix issue with DHCP client and P2P interaction.
    Fix issue with handling provision file updates.
    Fix issue with VPN state updates.
    Disable 6to4 support by default.
- add keyring file
- clean with spec-cleaner
- fix builds for all possible distributions and architectures</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1503403200">- bump to 1.35
  besides other things contains fix for CVE-2017-12865</changelog>
  <changelog author="avvissu@yandex.by" date="1504872000">- Remove obsolete macros
- Add polkit-agent-1 dependency
- Use the %tmpfiles_create macro
- Removal of ldconfig scriptlets from all packages
- Add connman-wait-online.service in post{un}
- Spec file cleanup</changelog>
  <changelog author="avvissu@yandex.by" date="1507032000">- Add connman-1.35-resolvconf.patch
- Activate connman.service if the network services disabled
- Add info in /var/adm/update-messages</changelog>
  <changelog author="avvissu@yandex.by" date="1508414400">- Add configuration file (/etc/connman/main.conf)
- Add ghost lines: main.conf connman connman-vpn</changelog>
  <changelog author="avvissu@yandex.by" date="1508500800">- Remove unrecognized options: disable-gtk-doc, enable-threads,
  disable-iwmx, enable-session-policy</changelog>
  <changelog author="avvissu@yandex.by" date="1509019200">- Change the mode of download_files (sr#521762)
- Remove connman-rpmlintrc (bnc#1057697)
- Add client as a recommended dependency</changelog>
  <changelog author="avvissu@yandex.by" date="1514289600">- Add symlink to network.service (connman-1.35-service.patch)</changelog>
  <changelog author="avvissu@yandex.by" date="1518523200">- Fix build errors due to unsupported header include order with
  newer kernels &gt;=4.15 (connman-1.35-include.patch).</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1557489600">- Update to 1.37:
  * Fix issue with handling invalid gateway addresses.
  * Fix issue with handling updates of default gateway.
  * Fix issue with DHCP servers that require broadcast flag.
  * Add support for option to use gateways as time servers.
  * Add support for option to select default technology.
  * Add support for Address Conflict Detection (ACD).
  * Add support for IPv6 iptables management.
- Change in 1.36:
  * Fix issue with DNS short response on error handling.
  * Fix issue with handling incoming DNS requests.
  * Fix issue with handling empty timeserver list.
  * Fix issue with incorrect DHCP byte order.
  * Fix issue with AllowDomainnameUpdates handling.
  * Fix issue with IPv4 link-local IP conflict error.
  * Fix issue with handling WISPr over TLS connections.
  * Fix issue with WiFi background scanning handling.
  * Fix issue with WiFi disconnect+connect race condition.
  * Fix issue with WiFi scanning and tethering operation.
  * Fix issue with WiFi security change handling.
  * Fix issue with missing signal for WPS changes.
  * Fix issue with online check retry handling.
  * Add support for systemd-resolved backend.
  * Add support for mDNS configuration setup.
- Drop connman-1.35-include.patch
- Drop connman-1.35-resolvconf.patch</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1582027200">- Update to 1.38:
  * Fix issue with online check on IP address update.
  * Fix issue with OpenVPN and encrypted private keys.
  * Fix issue with finishing of VPN connections.
  * Add support for updated stable iwd APIs.
  * Add support for WireGuard networks.
- Spec file cleanup</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1613131200">- Update to 1.39 (bsc#1181751):
  * Fix issue with scanning state synchronization and iwd.
  * Fix issue with invalid key with 4-way handshake offloading.
  * Fix issue with DNS proxy length checks to prevent buffer overflow. (CVE-2021-26675)
  * Fix issue with DHCP leaking stack data via uninitialized variable. (CVE-2021-26676)</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1644580800">- Update to 1.41: (bsc#1194177, bsc#1194176, bsc#1194175)
  * Fix issue with RTNL netlink message alignment.
  * Fix issue with dnsproxy and timeout for TCP feature. (CVE-2022-23097, CVE-2022-23096)
  * Fix issue with dnsproxy and busy loop in TCP server. (CVE-2022-23098)
  * Fix issue with WiFi connection with no passphrase.
  * Add support for wpa_supplicant and WPA3-SAE functionality.
  * Add support for D-Bus ObjectManager interface.
- Renamed downstream patches to separate them from upstream patches
  * Rename 0001-connman-1.35-service.patch to 0100-connman-1.35-service.patch
- Add systemd hardening configuration
  * Rename harden_connman-vpn.service.patch to 0101-harden_connman-vpn.service.patch
  * Rename harden_connman-wait-online.service.patch to 0102-harden_connman-wait-online.service.patch
- Disabled openconnect plugin due to version conflict
- Disabled vpnc plugin for i568 missing dependency
- Disabled hh2serial and tist_working for ppc64le due to version conflict</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1659355200">- Add refcounting to wispr portal detection (bsc#1200190)
  * add 0001-wispr-Rename-wispr_portal_list-to-wispr_portal_hash.patch
  * add 0002-wispr-Ignore-NULL-proxy.patch
  * add 0003-wispr-Add-reference-counter-to-portal-context.patch (CVE-2022-32293)
  * add 0004-wispr-Update-portal-context-references.patch (CVE-2022-32293)
- Fix OOB write in received_data (bsc#1200189)
  * add 0005-gweb-Fix-OOB-write-in-received_data.patch (CVE-2022-32292)</changelog>
</package>
<package pkgid="f833becd5456b6b4d43482ac5633cdf9f2ac03edc040e84ece43cd9bb1ef2160" name="connman-plugin-iospm" arch="s390x">
  <version epoch="0" ver="1.41" rel="bp154.2.3.1"/>
  <changelog author="sleep_walker@suse.cz" date="1423224000">- bump to 1.28
  ver 1.28:
  Fix issue with DHCPv6 re-transmission timer.
  Fix issue with DHCP service ID option byte order.
  Fix issue with IPv6 connections and SLAAC/DHCPv6.
  Fix issue with telephony and IPv6 autoconfiguration.
  Fix issue with Bluetooth technology setting changes.
  Fix issue with WiFi autoscan interval calculation.
  Fix issue with WiFi and missing BSS signal strength.
  Add support for IPv4 information for WiFi Display.
  ver 1.27:
  Fix issue with memory leak in IP configuration.
  Fix issue with providing random numbers for DHCP.
  Fix issue with handling IN_MOVED_TO inotify events.
  Fix issue with channel selection for WiFi scanning.
  Add support for handling Bluetooth GN and PANU roles.
  ver 1.26:
  Fix issue with missing WiFi security provisioning support.
  Fix issue with immutable setting and provisioned services.
  Fix issue with scheduling DNS cache cleanup procedure.
  Fix issue with IPv6 Privacy setting on service removal.
  Fix issue with DHCPv6 CONFIRM message sending procedure.
  Fix issue with DHCPv6 lease expiration handling support.
  Fix issue with DHCPv4 networks and broadcast flag handling.
  Fix issue with DHCPv4 networks without gateway configuration.
  Fix issue with P2P Peer authorization handling.
  Fix issue with P2P Peer service registration.
  Add support for WiFi Display information elements.
  Add support for systemd-hostnamed integration.
  ver 1.25:
  Fix issue with handling rebind timer for DHCPv6.
  Fix issue with handling DHCP renew transaction.
  Fix issue with user supplied proxy settings and DHCP.
  Fix issue with extra status codes from captive portals.
  Fix issue with service idle state reset on failure.
  Fix issue with DNS label compression handling.
  Add support for experimental P2P Peer service.
  ver 1.24:
  Fix issue with handling slave interfaces.
  Fix issue with handling DHCPv4 broadcast flag.
  Fix issue with handling DHCPv4 lease expiration.
  Fix issue with handling WiFi auto-scanning timeout.
  Fix issue with handling domain and DNS server changes.
  Fix issue with double free and agent messages.
  ver 1.23:
  Fix issue with memory leak in technology handling.
  Fix issue with not removing host route of OpenVPN.
  Fix issue with double free in DHCP cleanup handling.
  Fix issue with handling DHCP method from oFono.
  Fix issue with IPv6-PD when disabling tethering.
  Fix issue with DNS proxy when disabling tethering.
  Fix issue with Bluetooth start and stop interaction.
  Fix issue with Bluetooth PAN networks on adapter change.
  ver 1.22:
  Fix issue with WPS state synchronization.
  Fix issue with DNS servers and default service.
  Fix issue with DHCP client and rebooting state.
  Add support for NTP exponential backoff handling.
  Add support for NTP kiss-of-death packet handling.
  Add support for Ethernet gadget networking.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1438948800">- bump to 1.29
  Fix issue with IPv6 autoconfiguration when disabled.
  Fix issue with IPv6 temporary route handling.
  Fix issue with IPv6 timers for nameservers.
  Fix issue with DHPCv6 and route configuration.
  Fix issue with DHCPv6 source port and buggy servers.
  Fix issue with DHCPv6 rapid commit option length.
  Fix issue with DHCPv6 rapid commit error handling.
  Fix issue with handling invalid WiFi passphrases.
  Fix issue with connecting Ethernet devices.
  Add support for Ethernet and VLAN usage.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1444737600">- bumpt to 1.30
    Fix issue with pending DNS request during server change.
    Fix issue with empty strings in nameservers configuration.
    Fix issue with time servers during IP configuration change.
    Fix issue with 4-way handshake during roaming.
    Fix issue with open WiFi networks security.
    Fix issue with support for WiFi AnonymousIdentity.
    Fix issue with memory leak and DHCPv6 DUID handling.
    Fix issue with DHCP client and P2P interaction.
    Fix issue with handling provision file updates.
    Fix issue with VPN state updates.
    Disable 6to4 support by default.
- add keyring file
- clean with spec-cleaner
- fix builds for all possible distributions and architectures</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1503403200">- bump to 1.35
  besides other things contains fix for CVE-2017-12865</changelog>
  <changelog author="avvissu@yandex.by" date="1504872000">- Remove obsolete macros
- Add polkit-agent-1 dependency
- Use the %tmpfiles_create macro
- Removal of ldconfig scriptlets from all packages
- Add connman-wait-online.service in post{un}
- Spec file cleanup</changelog>
  <changelog author="avvissu@yandex.by" date="1507032000">- Add connman-1.35-resolvconf.patch
- Activate connman.service if the network services disabled
- Add info in /var/adm/update-messages</changelog>
  <changelog author="avvissu@yandex.by" date="1508414400">- Add configuration file (/etc/connman/main.conf)
- Add ghost lines: main.conf connman connman-vpn</changelog>
  <changelog author="avvissu@yandex.by" date="1508500800">- Remove unrecognized options: disable-gtk-doc, enable-threads,
  disable-iwmx, enable-session-policy</changelog>
  <changelog author="avvissu@yandex.by" date="1509019200">- Change the mode of download_files (sr#521762)
- Remove connman-rpmlintrc (bnc#1057697)
- Add client as a recommended dependency</changelog>
  <changelog author="avvissu@yandex.by" date="1514289600">- Add symlink to network.service (connman-1.35-service.patch)</changelog>
  <changelog author="avvissu@yandex.by" date="1518523200">- Fix build errors due to unsupported header include order with
  newer kernels &gt;=4.15 (connman-1.35-include.patch).</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1557489600">- Update to 1.37:
  * Fix issue with handling invalid gateway addresses.
  * Fix issue with handling updates of default gateway.
  * Fix issue with DHCP servers that require broadcast flag.
  * Add support for option to use gateways as time servers.
  * Add support for option to select default technology.
  * Add support for Address Conflict Detection (ACD).
  * Add support for IPv6 iptables management.
- Change in 1.36:
  * Fix issue with DNS short response on error handling.
  * Fix issue with handling incoming DNS requests.
  * Fix issue with handling empty timeserver list.
  * Fix issue with incorrect DHCP byte order.
  * Fix issue with AllowDomainnameUpdates handling.
  * Fix issue with IPv4 link-local IP conflict error.
  * Fix issue with handling WISPr over TLS connections.
  * Fix issue with WiFi background scanning handling.
  * Fix issue with WiFi disconnect+connect race condition.
  * Fix issue with WiFi scanning and tethering operation.
  * Fix issue with WiFi security change handling.
  * Fix issue with missing signal for WPS changes.
  * Fix issue with online check retry handling.
  * Add support for systemd-resolved backend.
  * Add support for mDNS configuration setup.
- Drop connman-1.35-include.patch
- Drop connman-1.35-resolvconf.patch</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1582027200">- Update to 1.38:
  * Fix issue with online check on IP address update.
  * Fix issue with OpenVPN and encrypted private keys.
  * Fix issue with finishing of VPN connections.
  * Add support for updated stable iwd APIs.
  * Add support for WireGuard networks.
- Spec file cleanup</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1613131200">- Update to 1.39 (bsc#1181751):
  * Fix issue with scanning state synchronization and iwd.
  * Fix issue with invalid key with 4-way handshake offloading.
  * Fix issue with DNS proxy length checks to prevent buffer overflow. (CVE-2021-26675)
  * Fix issue with DHCP leaking stack data via uninitialized variable. (CVE-2021-26676)</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1644580800">- Update to 1.41: (bsc#1194177, bsc#1194176, bsc#1194175)
  * Fix issue with RTNL netlink message alignment.
  * Fix issue with dnsproxy and timeout for TCP feature. (CVE-2022-23097, CVE-2022-23096)
  * Fix issue with dnsproxy and busy loop in TCP server. (CVE-2022-23098)
  * Fix issue with WiFi connection with no passphrase.
  * Add support for wpa_supplicant and WPA3-SAE functionality.
  * Add support for D-Bus ObjectManager interface.
- Renamed downstream patches to separate them from upstream patches
  * Rename 0001-connman-1.35-service.patch to 0100-connman-1.35-service.patch
- Add systemd hardening configuration
  * Rename harden_connman-vpn.service.patch to 0101-harden_connman-vpn.service.patch
  * Rename harden_connman-wait-online.service.patch to 0102-harden_connman-wait-online.service.patch
- Disabled openconnect plugin due to version conflict
- Disabled vpnc plugin for i568 missing dependency
- Disabled hh2serial and tist_working for ppc64le due to version conflict</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1659355200">- Add refcounting to wispr portal detection (bsc#1200190)
  * add 0001-wispr-Rename-wispr_portal_list-to-wispr_portal_hash.patch
  * add 0002-wispr-Ignore-NULL-proxy.patch
  * add 0003-wispr-Add-reference-counter-to-portal-context.patch (CVE-2022-32293)
  * add 0004-wispr-Update-portal-context-references.patch (CVE-2022-32293)
- Fix OOB write in received_data (bsc#1200189)
  * add 0005-gweb-Fix-OOB-write-in-received_data.patch (CVE-2022-32292)</changelog>
</package>
<package pkgid="533eb08485d3d7b68236f42f011ceb967a52c6600d2e7deeb93e314e6058b405" name="connman-plugin-iospm" arch="x86_64">
  <version epoch="0" ver="1.41" rel="bp154.2.3.1"/>
  <changelog author="sleep_walker@suse.cz" date="1423224000">- bump to 1.28
  ver 1.28:
  Fix issue with DHCPv6 re-transmission timer.
  Fix issue with DHCP service ID option byte order.
  Fix issue with IPv6 connections and SLAAC/DHCPv6.
  Fix issue with telephony and IPv6 autoconfiguration.
  Fix issue with Bluetooth technology setting changes.
  Fix issue with WiFi autoscan interval calculation.
  Fix issue with WiFi and missing BSS signal strength.
  Add support for IPv4 information for WiFi Display.
  ver 1.27:
  Fix issue with memory leak in IP configuration.
  Fix issue with providing random numbers for DHCP.
  Fix issue with handling IN_MOVED_TO inotify events.
  Fix issue with channel selection for WiFi scanning.
  Add support for handling Bluetooth GN and PANU roles.
  ver 1.26:
  Fix issue with missing WiFi security provisioning support.
  Fix issue with immutable setting and provisioned services.
  Fix issue with scheduling DNS cache cleanup procedure.
  Fix issue with IPv6 Privacy setting on service removal.
  Fix issue with DHCPv6 CONFIRM message sending procedure.
  Fix issue with DHCPv6 lease expiration handling support.
  Fix issue with DHCPv4 networks and broadcast flag handling.
  Fix issue with DHCPv4 networks without gateway configuration.
  Fix issue with P2P Peer authorization handling.
  Fix issue with P2P Peer service registration.
  Add support for WiFi Display information elements.
  Add support for systemd-hostnamed integration.
  ver 1.25:
  Fix issue with handling rebind timer for DHCPv6.
  Fix issue with handling DHCP renew transaction.
  Fix issue with user supplied proxy settings and DHCP.
  Fix issue with extra status codes from captive portals.
  Fix issue with service idle state reset on failure.
  Fix issue with DNS label compression handling.
  Add support for experimental P2P Peer service.
  ver 1.24:
  Fix issue with handling slave interfaces.
  Fix issue with handling DHCPv4 broadcast flag.
  Fix issue with handling DHCPv4 lease expiration.
  Fix issue with handling WiFi auto-scanning timeout.
  Fix issue with handling domain and DNS server changes.
  Fix issue with double free and agent messages.
  ver 1.23:
  Fix issue with memory leak in technology handling.
  Fix issue with not removing host route of OpenVPN.
  Fix issue with double free in DHCP cleanup handling.
  Fix issue with handling DHCP method from oFono.
  Fix issue with IPv6-PD when disabling tethering.
  Fix issue with DNS proxy when disabling tethering.
  Fix issue with Bluetooth start and stop interaction.
  Fix issue with Bluetooth PAN networks on adapter change.
  ver 1.22:
  Fix issue with WPS state synchronization.
  Fix issue with DNS servers and default service.
  Fix issue with DHCP client and rebooting state.
  Add support for NTP exponential backoff handling.
  Add support for NTP kiss-of-death packet handling.
  Add support for Ethernet gadget networking.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1438948800">- bump to 1.29
  Fix issue with IPv6 autoconfiguration when disabled.
  Fix issue with IPv6 temporary route handling.
  Fix issue with IPv6 timers for nameservers.
  Fix issue with DHPCv6 and route configuration.
  Fix issue with DHCPv6 source port and buggy servers.
  Fix issue with DHCPv6 rapid commit option length.
  Fix issue with DHCPv6 rapid commit error handling.
  Fix issue with handling invalid WiFi passphrases.
  Fix issue with connecting Ethernet devices.
  Add support for Ethernet and VLAN usage.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1444737600">- bumpt to 1.30
    Fix issue with pending DNS request during server change.
    Fix issue with empty strings in nameservers configuration.
    Fix issue with time servers during IP configuration change.
    Fix issue with 4-way handshake during roaming.
    Fix issue with open WiFi networks security.
    Fix issue with support for WiFi AnonymousIdentity.
    Fix issue with memory leak and DHCPv6 DUID handling.
    Fix issue with DHCP client and P2P interaction.
    Fix issue with handling provision file updates.
    Fix issue with VPN state updates.
    Disable 6to4 support by default.
- add keyring file
- clean with spec-cleaner
- fix builds for all possible distributions and architectures</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1503403200">- bump to 1.35
  besides other things contains fix for CVE-2017-12865</changelog>
  <changelog author="avvissu@yandex.by" date="1504872000">- Remove obsolete macros
- Add polkit-agent-1 dependency
- Use the %tmpfiles_create macro
- Removal of ldconfig scriptlets from all packages
- Add connman-wait-online.service in post{un}
- Spec file cleanup</changelog>
  <changelog author="avvissu@yandex.by" date="1507032000">- Add connman-1.35-resolvconf.patch
- Activate connman.service if the network services disabled
- Add info in /var/adm/update-messages</changelog>
  <changelog author="avvissu@yandex.by" date="1508414400">- Add configuration file (/etc/connman/main.conf)
- Add ghost lines: main.conf connman connman-vpn</changelog>
  <changelog author="avvissu@yandex.by" date="1508500800">- Remove unrecognized options: disable-gtk-doc, enable-threads,
  disable-iwmx, enable-session-policy</changelog>
  <changelog author="avvissu@yandex.by" date="1509019200">- Change the mode of download_files (sr#521762)
- Remove connman-rpmlintrc (bnc#1057697)
- Add client as a recommended dependency</changelog>
  <changelog author="avvissu@yandex.by" date="1514289600">- Add symlink to network.service (connman-1.35-service.patch)</changelog>
  <changelog author="avvissu@yandex.by" date="1518523200">- Fix build errors due to unsupported header include order with
  newer kernels &gt;=4.15 (connman-1.35-include.patch).</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1557489600">- Update to 1.37:
  * Fix issue with handling invalid gateway addresses.
  * Fix issue with handling updates of default gateway.
  * Fix issue with DHCP servers that require broadcast flag.
  * Add support for option to use gateways as time servers.
  * Add support for option to select default technology.
  * Add support for Address Conflict Detection (ACD).
  * Add support for IPv6 iptables management.
- Change in 1.36:
  * Fix issue with DNS short response on error handling.
  * Fix issue with handling incoming DNS requests.
  * Fix issue with handling empty timeserver list.
  * Fix issue with incorrect DHCP byte order.
  * Fix issue with AllowDomainnameUpdates handling.
  * Fix issue with IPv4 link-local IP conflict error.
  * Fix issue with handling WISPr over TLS connections.
  * Fix issue with WiFi background scanning handling.
  * Fix issue with WiFi disconnect+connect race condition.
  * Fix issue with WiFi scanning and tethering operation.
  * Fix issue with WiFi security change handling.
  * Fix issue with missing signal for WPS changes.
  * Fix issue with online check retry handling.
  * Add support for systemd-resolved backend.
  * Add support for mDNS configuration setup.
- Drop connman-1.35-include.patch
- Drop connman-1.35-resolvconf.patch</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1582027200">- Update to 1.38:
  * Fix issue with online check on IP address update.
  * Fix issue with OpenVPN and encrypted private keys.
  * Fix issue with finishing of VPN connections.
  * Add support for updated stable iwd APIs.
  * Add support for WireGuard networks.
- Spec file cleanup</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1613131200">- Update to 1.39 (bsc#1181751):
  * Fix issue with scanning state synchronization and iwd.
  * Fix issue with invalid key with 4-way handshake offloading.
  * Fix issue with DNS proxy length checks to prevent buffer overflow. (CVE-2021-26675)
  * Fix issue with DHCP leaking stack data via uninitialized variable. (CVE-2021-26676)</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1644580800">- Update to 1.41: (bsc#1194177, bsc#1194176, bsc#1194175)
  * Fix issue with RTNL netlink message alignment.
  * Fix issue with dnsproxy and timeout for TCP feature. (CVE-2022-23097, CVE-2022-23096)
  * Fix issue with dnsproxy and busy loop in TCP server. (CVE-2022-23098)
  * Fix issue with WiFi connection with no passphrase.
  * Add support for wpa_supplicant and WPA3-SAE functionality.
  * Add support for D-Bus ObjectManager interface.
- Renamed downstream patches to separate them from upstream patches
  * Rename 0001-connman-1.35-service.patch to 0100-connman-1.35-service.patch
- Add systemd hardening configuration
  * Rename harden_connman-vpn.service.patch to 0101-harden_connman-vpn.service.patch
  * Rename harden_connman-wait-online.service.patch to 0102-harden_connman-wait-online.service.patch
- Disabled openconnect plugin due to version conflict
- Disabled vpnc plugin for i568 missing dependency
- Disabled hh2serial and tist_working for ppc64le due to version conflict</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1659355200">- Add refcounting to wispr portal detection (bsc#1200190)
  * add 0001-wispr-Rename-wispr_portal_list-to-wispr_portal_hash.patch
  * add 0002-wispr-Ignore-NULL-proxy.patch
  * add 0003-wispr-Add-reference-counter-to-portal-context.patch (CVE-2022-32293)
  * add 0004-wispr-Update-portal-context-references.patch (CVE-2022-32293)
- Fix OOB write in received_data (bsc#1200189)
  * add 0005-gweb-Fix-OOB-write-in-received_data.patch (CVE-2022-32292)</changelog>
</package>
<package pkgid="d996956a351730c3985d98a03d83c5b98b06727d17e341d1997c57bd54be9a75" name="connman-plugin-l2tp" arch="aarch64">
  <version epoch="0" ver="1.41" rel="bp154.2.3.1"/>
  <changelog author="sleep_walker@suse.cz" date="1423224000">- bump to 1.28
  ver 1.28:
  Fix issue with DHCPv6 re-transmission timer.
  Fix issue with DHCP service ID option byte order.
  Fix issue with IPv6 connections and SLAAC/DHCPv6.
  Fix issue with telephony and IPv6 autoconfiguration.
  Fix issue with Bluetooth technology setting changes.
  Fix issue with WiFi autoscan interval calculation.
  Fix issue with WiFi and missing BSS signal strength.
  Add support for IPv4 information for WiFi Display.
  ver 1.27:
  Fix issue with memory leak in IP configuration.
  Fix issue with providing random numbers for DHCP.
  Fix issue with handling IN_MOVED_TO inotify events.
  Fix issue with channel selection for WiFi scanning.
  Add support for handling Bluetooth GN and PANU roles.
  ver 1.26:
  Fix issue with missing WiFi security provisioning support.
  Fix issue with immutable setting and provisioned services.
  Fix issue with scheduling DNS cache cleanup procedure.
  Fix issue with IPv6 Privacy setting on service removal.
  Fix issue with DHCPv6 CONFIRM message sending procedure.
  Fix issue with DHCPv6 lease expiration handling support.
  Fix issue with DHCPv4 networks and broadcast flag handling.
  Fix issue with DHCPv4 networks without gateway configuration.
  Fix issue with P2P Peer authorization handling.
  Fix issue with P2P Peer service registration.
  Add support for WiFi Display information elements.
  Add support for systemd-hostnamed integration.
  ver 1.25:
  Fix issue with handling rebind timer for DHCPv6.
  Fix issue with handling DHCP renew transaction.
  Fix issue with user supplied proxy settings and DHCP.
  Fix issue with extra status codes from captive portals.
  Fix issue with service idle state reset on failure.
  Fix issue with DNS label compression handling.
  Add support for experimental P2P Peer service.
  ver 1.24:
  Fix issue with handling slave interfaces.
  Fix issue with handling DHCPv4 broadcast flag.
  Fix issue with handling DHCPv4 lease expiration.
  Fix issue with handling WiFi auto-scanning timeout.
  Fix issue with handling domain and DNS server changes.
  Fix issue with double free and agent messages.
  ver 1.23:
  Fix issue with memory leak in technology handling.
  Fix issue with not removing host route of OpenVPN.
  Fix issue with double free in DHCP cleanup handling.
  Fix issue with handling DHCP method from oFono.
  Fix issue with IPv6-PD when disabling tethering.
  Fix issue with DNS proxy when disabling tethering.
  Fix issue with Bluetooth start and stop interaction.
  Fix issue with Bluetooth PAN networks on adapter change.
  ver 1.22:
  Fix issue with WPS state synchronization.
  Fix issue with DNS servers and default service.
  Fix issue with DHCP client and rebooting state.
  Add support for NTP exponential backoff handling.
  Add support for NTP kiss-of-death packet handling.
  Add support for Ethernet gadget networking.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1438948800">- bump to 1.29
  Fix issue with IPv6 autoconfiguration when disabled.
  Fix issue with IPv6 temporary route handling.
  Fix issue with IPv6 timers for nameservers.
  Fix issue with DHPCv6 and route configuration.
  Fix issue with DHCPv6 source port and buggy servers.
  Fix issue with DHCPv6 rapid commit option length.
  Fix issue with DHCPv6 rapid commit error handling.
  Fix issue with handling invalid WiFi passphrases.
  Fix issue with connecting Ethernet devices.
  Add support for Ethernet and VLAN usage.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1444737600">- bumpt to 1.30
    Fix issue with pending DNS request during server change.
    Fix issue with empty strings in nameservers configuration.
    Fix issue with time servers during IP configuration change.
    Fix issue with 4-way handshake during roaming.
    Fix issue with open WiFi networks security.
    Fix issue with support for WiFi AnonymousIdentity.
    Fix issue with memory leak and DHCPv6 DUID handling.
    Fix issue with DHCP client and P2P interaction.
    Fix issue with handling provision file updates.
    Fix issue with VPN state updates.
    Disable 6to4 support by default.
- add keyring file
- clean with spec-cleaner
- fix builds for all possible distributions and architectures</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1503403200">- bump to 1.35
  besides other things contains fix for CVE-2017-12865</changelog>
  <changelog author="avvissu@yandex.by" date="1504872000">- Remove obsolete macros
- Add polkit-agent-1 dependency
- Use the %tmpfiles_create macro
- Removal of ldconfig scriptlets from all packages
- Add connman-wait-online.service in post{un}
- Spec file cleanup</changelog>
  <changelog author="avvissu@yandex.by" date="1507032000">- Add connman-1.35-resolvconf.patch
- Activate connman.service if the network services disabled
- Add info in /var/adm/update-messages</changelog>
  <changelog author="avvissu@yandex.by" date="1508414400">- Add configuration file (/etc/connman/main.conf)
- Add ghost lines: main.conf connman connman-vpn</changelog>
  <changelog author="avvissu@yandex.by" date="1508500800">- Remove unrecognized options: disable-gtk-doc, enable-threads,
  disable-iwmx, enable-session-policy</changelog>
  <changelog author="avvissu@yandex.by" date="1509019200">- Change the mode of download_files (sr#521762)
- Remove connman-rpmlintrc (bnc#1057697)
- Add client as a recommended dependency</changelog>
  <changelog author="avvissu@yandex.by" date="1514289600">- Add symlink to network.service (connman-1.35-service.patch)</changelog>
  <changelog author="avvissu@yandex.by" date="1518523200">- Fix build errors due to unsupported header include order with
  newer kernels &gt;=4.15 (connman-1.35-include.patch).</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1557489600">- Update to 1.37:
  * Fix issue with handling invalid gateway addresses.
  * Fix issue with handling updates of default gateway.
  * Fix issue with DHCP servers that require broadcast flag.
  * Add support for option to use gateways as time servers.
  * Add support for option to select default technology.
  * Add support for Address Conflict Detection (ACD).
  * Add support for IPv6 iptables management.
- Change in 1.36:
  * Fix issue with DNS short response on error handling.
  * Fix issue with handling incoming DNS requests.
  * Fix issue with handling empty timeserver list.
  * Fix issue with incorrect DHCP byte order.
  * Fix issue with AllowDomainnameUpdates handling.
  * Fix issue with IPv4 link-local IP conflict error.
  * Fix issue with handling WISPr over TLS connections.
  * Fix issue with WiFi background scanning handling.
  * Fix issue with WiFi disconnect+connect race condition.
  * Fix issue with WiFi scanning and tethering operation.
  * Fix issue with WiFi security change handling.
  * Fix issue with missing signal for WPS changes.
  * Fix issue with online check retry handling.
  * Add support for systemd-resolved backend.
  * Add support for mDNS configuration setup.
- Drop connman-1.35-include.patch
- Drop connman-1.35-resolvconf.patch</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1582027200">- Update to 1.38:
  * Fix issue with online check on IP address update.
  * Fix issue with OpenVPN and encrypted private keys.
  * Fix issue with finishing of VPN connections.
  * Add support for updated stable iwd APIs.
  * Add support for WireGuard networks.
- Spec file cleanup</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1613131200">- Update to 1.39 (bsc#1181751):
  * Fix issue with scanning state synchronization and iwd.
  * Fix issue with invalid key with 4-way handshake offloading.
  * Fix issue with DNS proxy length checks to prevent buffer overflow. (CVE-2021-26675)
  * Fix issue with DHCP leaking stack data via uninitialized variable. (CVE-2021-26676)</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1644580800">- Update to 1.41: (bsc#1194177, bsc#1194176, bsc#1194175)
  * Fix issue with RTNL netlink message alignment.
  * Fix issue with dnsproxy and timeout for TCP feature. (CVE-2022-23097, CVE-2022-23096)
  * Fix issue with dnsproxy and busy loop in TCP server. (CVE-2022-23098)
  * Fix issue with WiFi connection with no passphrase.
  * Add support for wpa_supplicant and WPA3-SAE functionality.
  * Add support for D-Bus ObjectManager interface.
- Renamed downstream patches to separate them from upstream patches
  * Rename 0001-connman-1.35-service.patch to 0100-connman-1.35-service.patch
- Add systemd hardening configuration
  * Rename harden_connman-vpn.service.patch to 0101-harden_connman-vpn.service.patch
  * Rename harden_connman-wait-online.service.patch to 0102-harden_connman-wait-online.service.patch
- Disabled openconnect plugin due to version conflict
- Disabled vpnc plugin for i568 missing dependency
- Disabled hh2serial and tist_working for ppc64le due to version conflict</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1659355200">- Add refcounting to wispr portal detection (bsc#1200190)
  * add 0001-wispr-Rename-wispr_portal_list-to-wispr_portal_hash.patch
  * add 0002-wispr-Ignore-NULL-proxy.patch
  * add 0003-wispr-Add-reference-counter-to-portal-context.patch (CVE-2022-32293)
  * add 0004-wispr-Update-portal-context-references.patch (CVE-2022-32293)
- Fix OOB write in received_data (bsc#1200189)
  * add 0005-gweb-Fix-OOB-write-in-received_data.patch (CVE-2022-32292)</changelog>
</package>
<package pkgid="f26595cb189fc07b4776575173429a4823d902e65f5f73851838c3c2668072b4" name="connman-plugin-l2tp" arch="i586">
  <version epoch="0" ver="1.41" rel="bp154.2.3.1"/>
  <changelog author="sleep_walker@suse.cz" date="1423224000">- bump to 1.28
  ver 1.28:
  Fix issue with DHCPv6 re-transmission timer.
  Fix issue with DHCP service ID option byte order.
  Fix issue with IPv6 connections and SLAAC/DHCPv6.
  Fix issue with telephony and IPv6 autoconfiguration.
  Fix issue with Bluetooth technology setting changes.
  Fix issue with WiFi autoscan interval calculation.
  Fix issue with WiFi and missing BSS signal strength.
  Add support for IPv4 information for WiFi Display.
  ver 1.27:
  Fix issue with memory leak in IP configuration.
  Fix issue with providing random numbers for DHCP.
  Fix issue with handling IN_MOVED_TO inotify events.
  Fix issue with channel selection for WiFi scanning.
  Add support for handling Bluetooth GN and PANU roles.
  ver 1.26:
  Fix issue with missing WiFi security provisioning support.
  Fix issue with immutable setting and provisioned services.
  Fix issue with scheduling DNS cache cleanup procedure.
  Fix issue with IPv6 Privacy setting on service removal.
  Fix issue with DHCPv6 CONFIRM message sending procedure.
  Fix issue with DHCPv6 lease expiration handling support.
  Fix issue with DHCPv4 networks and broadcast flag handling.
  Fix issue with DHCPv4 networks without gateway configuration.
  Fix issue with P2P Peer authorization handling.
  Fix issue with P2P Peer service registration.
  Add support for WiFi Display information elements.
  Add support for systemd-hostnamed integration.
  ver 1.25:
  Fix issue with handling rebind timer for DHCPv6.
  Fix issue with handling DHCP renew transaction.
  Fix issue with user supplied proxy settings and DHCP.
  Fix issue with extra status codes from captive portals.
  Fix issue with service idle state reset on failure.
  Fix issue with DNS label compression handling.
  Add support for experimental P2P Peer service.
  ver 1.24:
  Fix issue with handling slave interfaces.
  Fix issue with handling DHCPv4 broadcast flag.
  Fix issue with handling DHCPv4 lease expiration.
  Fix issue with handling WiFi auto-scanning timeout.
  Fix issue with handling domain and DNS server changes.
  Fix issue with double free and agent messages.
  ver 1.23:
  Fix issue with memory leak in technology handling.
  Fix issue with not removing host route of OpenVPN.
  Fix issue with double free in DHCP cleanup handling.
  Fix issue with handling DHCP method from oFono.
  Fix issue with IPv6-PD when disabling tethering.
  Fix issue with DNS proxy when disabling tethering.
  Fix issue with Bluetooth start and stop interaction.
  Fix issue with Bluetooth PAN networks on adapter change.
  ver 1.22:
  Fix issue with WPS state synchronization.
  Fix issue with DNS servers and default service.
  Fix issue with DHCP client and rebooting state.
  Add support for NTP exponential backoff handling.
  Add support for NTP kiss-of-death packet handling.
  Add support for Ethernet gadget networking.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1438948800">- bump to 1.29
  Fix issue with IPv6 autoconfiguration when disabled.
  Fix issue with IPv6 temporary route handling.
  Fix issue with IPv6 timers for nameservers.
  Fix issue with DHPCv6 and route configuration.
  Fix issue with DHCPv6 source port and buggy servers.
  Fix issue with DHCPv6 rapid commit option length.
  Fix issue with DHCPv6 rapid commit error handling.
  Fix issue with handling invalid WiFi passphrases.
  Fix issue with connecting Ethernet devices.
  Add support for Ethernet and VLAN usage.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1444737600">- bumpt to 1.30
    Fix issue with pending DNS request during server change.
    Fix issue with empty strings in nameservers configuration.
    Fix issue with time servers during IP configuration change.
    Fix issue with 4-way handshake during roaming.
    Fix issue with open WiFi networks security.
    Fix issue with support for WiFi AnonymousIdentity.
    Fix issue with memory leak and DHCPv6 DUID handling.
    Fix issue with DHCP client and P2P interaction.
    Fix issue with handling provision file updates.
    Fix issue with VPN state updates.
    Disable 6to4 support by default.
- add keyring file
- clean with spec-cleaner
- fix builds for all possible distributions and architectures</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1503403200">- bump to 1.35
  besides other things contains fix for CVE-2017-12865</changelog>
  <changelog author="avvissu@yandex.by" date="1504872000">- Remove obsolete macros
- Add polkit-agent-1 dependency
- Use the %tmpfiles_create macro
- Removal of ldconfig scriptlets from all packages
- Add connman-wait-online.service in post{un}
- Spec file cleanup</changelog>
  <changelog author="avvissu@yandex.by" date="1507032000">- Add connman-1.35-resolvconf.patch
- Activate connman.service if the network services disabled
- Add info in /var/adm/update-messages</changelog>
  <changelog author="avvissu@yandex.by" date="1508414400">- Add configuration file (/etc/connman/main.conf)
- Add ghost lines: main.conf connman connman-vpn</changelog>
  <changelog author="avvissu@yandex.by" date="1508500800">- Remove unrecognized options: disable-gtk-doc, enable-threads,
  disable-iwmx, enable-session-policy</changelog>
  <changelog author="avvissu@yandex.by" date="1509019200">- Change the mode of download_files (sr#521762)
- Remove connman-rpmlintrc (bnc#1057697)
- Add client as a recommended dependency</changelog>
  <changelog author="avvissu@yandex.by" date="1514289600">- Add symlink to network.service (connman-1.35-service.patch)</changelog>
  <changelog author="avvissu@yandex.by" date="1518523200">- Fix build errors due to unsupported header include order with
  newer kernels &gt;=4.15 (connman-1.35-include.patch).</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1557489600">- Update to 1.37:
  * Fix issue with handling invalid gateway addresses.
  * Fix issue with handling updates of default gateway.
  * Fix issue with DHCP servers that require broadcast flag.
  * Add support for option to use gateways as time servers.
  * Add support for option to select default technology.
  * Add support for Address Conflict Detection (ACD).
  * Add support for IPv6 iptables management.
- Change in 1.36:
  * Fix issue with DNS short response on error handling.
  * Fix issue with handling incoming DNS requests.
  * Fix issue with handling empty timeserver list.
  * Fix issue with incorrect DHCP byte order.
  * Fix issue with AllowDomainnameUpdates handling.
  * Fix issue with IPv4 link-local IP conflict error.
  * Fix issue with handling WISPr over TLS connections.
  * Fix issue with WiFi background scanning handling.
  * Fix issue with WiFi disconnect+connect race condition.
  * Fix issue with WiFi scanning and tethering operation.
  * Fix issue with WiFi security change handling.
  * Fix issue with missing signal for WPS changes.
  * Fix issue with online check retry handling.
  * Add support for systemd-resolved backend.
  * Add support for mDNS configuration setup.
- Drop connman-1.35-include.patch
- Drop connman-1.35-resolvconf.patch</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1582027200">- Update to 1.38:
  * Fix issue with online check on IP address update.
  * Fix issue with OpenVPN and encrypted private keys.
  * Fix issue with finishing of VPN connections.
  * Add support for updated stable iwd APIs.
  * Add support for WireGuard networks.
- Spec file cleanup</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1613131200">- Update to 1.39 (bsc#1181751):
  * Fix issue with scanning state synchronization and iwd.
  * Fix issue with invalid key with 4-way handshake offloading.
  * Fix issue with DNS proxy length checks to prevent buffer overflow. (CVE-2021-26675)
  * Fix issue with DHCP leaking stack data via uninitialized variable. (CVE-2021-26676)</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1644580800">- Update to 1.41: (bsc#1194177, bsc#1194176, bsc#1194175)
  * Fix issue with RTNL netlink message alignment.
  * Fix issue with dnsproxy and timeout for TCP feature. (CVE-2022-23097, CVE-2022-23096)
  * Fix issue with dnsproxy and busy loop in TCP server. (CVE-2022-23098)
  * Fix issue with WiFi connection with no passphrase.
  * Add support for wpa_supplicant and WPA3-SAE functionality.
  * Add support for D-Bus ObjectManager interface.
- Renamed downstream patches to separate them from upstream patches
  * Rename 0001-connman-1.35-service.patch to 0100-connman-1.35-service.patch
- Add systemd hardening configuration
  * Rename harden_connman-vpn.service.patch to 0101-harden_connman-vpn.service.patch
  * Rename harden_connman-wait-online.service.patch to 0102-harden_connman-wait-online.service.patch
- Disabled openconnect plugin due to version conflict
- Disabled vpnc plugin for i568 missing dependency
- Disabled hh2serial and tist_working for ppc64le due to version conflict</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1659355200">- Add refcounting to wispr portal detection (bsc#1200190)
  * add 0001-wispr-Rename-wispr_portal_list-to-wispr_portal_hash.patch
  * add 0002-wispr-Ignore-NULL-proxy.patch
  * add 0003-wispr-Add-reference-counter-to-portal-context.patch (CVE-2022-32293)
  * add 0004-wispr-Update-portal-context-references.patch (CVE-2022-32293)
- Fix OOB write in received_data (bsc#1200189)
  * add 0005-gweb-Fix-OOB-write-in-received_data.patch (CVE-2022-32292)</changelog>
</package>
<package pkgid="9b29c47ce92afe733e7ca36327a4dbe3a87e6b47ae095d7f4e2bdfb5bc188020" name="connman-plugin-l2tp" arch="ppc64le">
  <version epoch="0" ver="1.41" rel="bp154.2.3.1"/>
  <changelog author="sleep_walker@suse.cz" date="1423224000">- bump to 1.28
  ver 1.28:
  Fix issue with DHCPv6 re-transmission timer.
  Fix issue with DHCP service ID option byte order.
  Fix issue with IPv6 connections and SLAAC/DHCPv6.
  Fix issue with telephony and IPv6 autoconfiguration.
  Fix issue with Bluetooth technology setting changes.
  Fix issue with WiFi autoscan interval calculation.
  Fix issue with WiFi and missing BSS signal strength.
  Add support for IPv4 information for WiFi Display.
  ver 1.27:
  Fix issue with memory leak in IP configuration.
  Fix issue with providing random numbers for DHCP.
  Fix issue with handling IN_MOVED_TO inotify events.
  Fix issue with channel selection for WiFi scanning.
  Add support for handling Bluetooth GN and PANU roles.
  ver 1.26:
  Fix issue with missing WiFi security provisioning support.
  Fix issue with immutable setting and provisioned services.
  Fix issue with scheduling DNS cache cleanup procedure.
  Fix issue with IPv6 Privacy setting on service removal.
  Fix issue with DHCPv6 CONFIRM message sending procedure.
  Fix issue with DHCPv6 lease expiration handling support.
  Fix issue with DHCPv4 networks and broadcast flag handling.
  Fix issue with DHCPv4 networks without gateway configuration.
  Fix issue with P2P Peer authorization handling.
  Fix issue with P2P Peer service registration.
  Add support for WiFi Display information elements.
  Add support for systemd-hostnamed integration.
  ver 1.25:
  Fix issue with handling rebind timer for DHCPv6.
  Fix issue with handling DHCP renew transaction.
  Fix issue with user supplied proxy settings and DHCP.
  Fix issue with extra status codes from captive portals.
  Fix issue with service idle state reset on failure.
  Fix issue with DNS label compression handling.
  Add support for experimental P2P Peer service.
  ver 1.24:
  Fix issue with handling slave interfaces.
  Fix issue with handling DHCPv4 broadcast flag.
  Fix issue with handling DHCPv4 lease expiration.
  Fix issue with handling WiFi auto-scanning timeout.
  Fix issue with handling domain and DNS server changes.
  Fix issue with double free and agent messages.
  ver 1.23:
  Fix issue with memory leak in technology handling.
  Fix issue with not removing host route of OpenVPN.
  Fix issue with double free in DHCP cleanup handling.
  Fix issue with handling DHCP method from oFono.
  Fix issue with IPv6-PD when disabling tethering.
  Fix issue with DNS proxy when disabling tethering.
  Fix issue with Bluetooth start and stop interaction.
  Fix issue with Bluetooth PAN networks on adapter change.
  ver 1.22:
  Fix issue with WPS state synchronization.
  Fix issue with DNS servers and default service.
  Fix issue with DHCP client and rebooting state.
  Add support for NTP exponential backoff handling.
  Add support for NTP kiss-of-death packet handling.
  Add support for Ethernet gadget networking.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1438948800">- bump to 1.29
  Fix issue with IPv6 autoconfiguration when disabled.
  Fix issue with IPv6 temporary route handling.
  Fix issue with IPv6 timers for nameservers.
  Fix issue with DHPCv6 and route configuration.
  Fix issue with DHCPv6 source port and buggy servers.
  Fix issue with DHCPv6 rapid commit option length.
  Fix issue with DHCPv6 rapid commit error handling.
  Fix issue with handling invalid WiFi passphrases.
  Fix issue with connecting Ethernet devices.
  Add support for Ethernet and VLAN usage.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1444737600">- bumpt to 1.30
    Fix issue with pending DNS request during server change.
    Fix issue with empty strings in nameservers configuration.
    Fix issue with time servers during IP configuration change.
    Fix issue with 4-way handshake during roaming.
    Fix issue with open WiFi networks security.
    Fix issue with support for WiFi AnonymousIdentity.
    Fix issue with memory leak and DHCPv6 DUID handling.
    Fix issue with DHCP client and P2P interaction.
    Fix issue with handling provision file updates.
    Fix issue with VPN state updates.
    Disable 6to4 support by default.
- add keyring file
- clean with spec-cleaner
- fix builds for all possible distributions and architectures</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1503403200">- bump to 1.35
  besides other things contains fix for CVE-2017-12865</changelog>
  <changelog author="avvissu@yandex.by" date="1504872000">- Remove obsolete macros
- Add polkit-agent-1 dependency
- Use the %tmpfiles_create macro
- Removal of ldconfig scriptlets from all packages
- Add connman-wait-online.service in post{un}
- Spec file cleanup</changelog>
  <changelog author="avvissu@yandex.by" date="1507032000">- Add connman-1.35-resolvconf.patch
- Activate connman.service if the network services disabled
- Add info in /var/adm/update-messages</changelog>
  <changelog author="avvissu@yandex.by" date="1508414400">- Add configuration file (/etc/connman/main.conf)
- Add ghost lines: main.conf connman connman-vpn</changelog>
  <changelog author="avvissu@yandex.by" date="1508500800">- Remove unrecognized options: disable-gtk-doc, enable-threads,
  disable-iwmx, enable-session-policy</changelog>
  <changelog author="avvissu@yandex.by" date="1509019200">- Change the mode of download_files (sr#521762)
- Remove connman-rpmlintrc (bnc#1057697)
- Add client as a recommended dependency</changelog>
  <changelog author="avvissu@yandex.by" date="1514289600">- Add symlink to network.service (connman-1.35-service.patch)</changelog>
  <changelog author="avvissu@yandex.by" date="1518523200">- Fix build errors due to unsupported header include order with
  newer kernels &gt;=4.15 (connman-1.35-include.patch).</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1557489600">- Update to 1.37:
  * Fix issue with handling invalid gateway addresses.
  * Fix issue with handling updates of default gateway.
  * Fix issue with DHCP servers that require broadcast flag.
  * Add support for option to use gateways as time servers.
  * Add support for option to select default technology.
  * Add support for Address Conflict Detection (ACD).
  * Add support for IPv6 iptables management.
- Change in 1.36:
  * Fix issue with DNS short response on error handling.
  * Fix issue with handling incoming DNS requests.
  * Fix issue with handling empty timeserver list.
  * Fix issue with incorrect DHCP byte order.
  * Fix issue with AllowDomainnameUpdates handling.
  * Fix issue with IPv4 link-local IP conflict error.
  * Fix issue with handling WISPr over TLS connections.
  * Fix issue with WiFi background scanning handling.
  * Fix issue with WiFi disconnect+connect race condition.
  * Fix issue with WiFi scanning and tethering operation.
  * Fix issue with WiFi security change handling.
  * Fix issue with missing signal for WPS changes.
  * Fix issue with online check retry handling.
  * Add support for systemd-resolved backend.
  * Add support for mDNS configuration setup.
- Drop connman-1.35-include.patch
- Drop connman-1.35-resolvconf.patch</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1582027200">- Update to 1.38:
  * Fix issue with online check on IP address update.
  * Fix issue with OpenVPN and encrypted private keys.
  * Fix issue with finishing of VPN connections.
  * Add support for updated stable iwd APIs.
  * Add support for WireGuard networks.
- Spec file cleanup</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1613131200">- Update to 1.39 (bsc#1181751):
  * Fix issue with scanning state synchronization and iwd.
  * Fix issue with invalid key with 4-way handshake offloading.
  * Fix issue with DNS proxy length checks to prevent buffer overflow. (CVE-2021-26675)
  * Fix issue with DHCP leaking stack data via uninitialized variable. (CVE-2021-26676)</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1644580800">- Update to 1.41: (bsc#1194177, bsc#1194176, bsc#1194175)
  * Fix issue with RTNL netlink message alignment.
  * Fix issue with dnsproxy and timeout for TCP feature. (CVE-2022-23097, CVE-2022-23096)
  * Fix issue with dnsproxy and busy loop in TCP server. (CVE-2022-23098)
  * Fix issue with WiFi connection with no passphrase.
  * Add support for wpa_supplicant and WPA3-SAE functionality.
  * Add support for D-Bus ObjectManager interface.
- Renamed downstream patches to separate them from upstream patches
  * Rename 0001-connman-1.35-service.patch to 0100-connman-1.35-service.patch
- Add systemd hardening configuration
  * Rename harden_connman-vpn.service.patch to 0101-harden_connman-vpn.service.patch
  * Rename harden_connman-wait-online.service.patch to 0102-harden_connman-wait-online.service.patch
- Disabled openconnect plugin due to version conflict
- Disabled vpnc plugin for i568 missing dependency
- Disabled hh2serial and tist_working for ppc64le due to version conflict</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1659355200">- Add refcounting to wispr portal detection (bsc#1200190)
  * add 0001-wispr-Rename-wispr_portal_list-to-wispr_portal_hash.patch
  * add 0002-wispr-Ignore-NULL-proxy.patch
  * add 0003-wispr-Add-reference-counter-to-portal-context.patch (CVE-2022-32293)
  * add 0004-wispr-Update-portal-context-references.patch (CVE-2022-32293)
- Fix OOB write in received_data (bsc#1200189)
  * add 0005-gweb-Fix-OOB-write-in-received_data.patch (CVE-2022-32292)</changelog>
</package>
<package pkgid="7caf35a34c8d67e4d388f58ddbc2a381bf34d232a6a3336a27172f198bdcbcac" name="connman-plugin-l2tp" arch="s390x">
  <version epoch="0" ver="1.41" rel="bp154.2.3.1"/>
  <changelog author="sleep_walker@suse.cz" date="1423224000">- bump to 1.28
  ver 1.28:
  Fix issue with DHCPv6 re-transmission timer.
  Fix issue with DHCP service ID option byte order.
  Fix issue with IPv6 connections and SLAAC/DHCPv6.
  Fix issue with telephony and IPv6 autoconfiguration.
  Fix issue with Bluetooth technology setting changes.
  Fix issue with WiFi autoscan interval calculation.
  Fix issue with WiFi and missing BSS signal strength.
  Add support for IPv4 information for WiFi Display.
  ver 1.27:
  Fix issue with memory leak in IP configuration.
  Fix issue with providing random numbers for DHCP.
  Fix issue with handling IN_MOVED_TO inotify events.
  Fix issue with channel selection for WiFi scanning.
  Add support for handling Bluetooth GN and PANU roles.
  ver 1.26:
  Fix issue with missing WiFi security provisioning support.
  Fix issue with immutable setting and provisioned services.
  Fix issue with scheduling DNS cache cleanup procedure.
  Fix issue with IPv6 Privacy setting on service removal.
  Fix issue with DHCPv6 CONFIRM message sending procedure.
  Fix issue with DHCPv6 lease expiration handling support.
  Fix issue with DHCPv4 networks and broadcast flag handling.
  Fix issue with DHCPv4 networks without gateway configuration.
  Fix issue with P2P Peer authorization handling.
  Fix issue with P2P Peer service registration.
  Add support for WiFi Display information elements.
  Add support for systemd-hostnamed integration.
  ver 1.25:
  Fix issue with handling rebind timer for DHCPv6.
  Fix issue with handling DHCP renew transaction.
  Fix issue with user supplied proxy settings and DHCP.
  Fix issue with extra status codes from captive portals.
  Fix issue with service idle state reset on failure.
  Fix issue with DNS label compression handling.
  Add support for experimental P2P Peer service.
  ver 1.24:
  Fix issue with handling slave interfaces.
  Fix issue with handling DHCPv4 broadcast flag.
  Fix issue with handling DHCPv4 lease expiration.
  Fix issue with handling WiFi auto-scanning timeout.
  Fix issue with handling domain and DNS server changes.
  Fix issue with double free and agent messages.
  ver 1.23:
  Fix issue with memory leak in technology handling.
  Fix issue with not removing host route of OpenVPN.
  Fix issue with double free in DHCP cleanup handling.
  Fix issue with handling DHCP method from oFono.
  Fix issue with IPv6-PD when disabling tethering.
  Fix issue with DNS proxy when disabling tethering.
  Fix issue with Bluetooth start and stop interaction.
  Fix issue with Bluetooth PAN networks on adapter change.
  ver 1.22:
  Fix issue with WPS state synchronization.
  Fix issue with DNS servers and default service.
  Fix issue with DHCP client and rebooting state.
  Add support for NTP exponential backoff handling.
  Add support for NTP kiss-of-death packet handling.
  Add support for Ethernet gadget networking.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1438948800">- bump to 1.29
  Fix issue with IPv6 autoconfiguration when disabled.
  Fix issue with IPv6 temporary route handling.
  Fix issue with IPv6 timers for nameservers.
  Fix issue with DHPCv6 and route configuration.
  Fix issue with DHCPv6 source port and buggy servers.
  Fix issue with DHCPv6 rapid commit option length.
  Fix issue with DHCPv6 rapid commit error handling.
  Fix issue with handling invalid WiFi passphrases.
  Fix issue with connecting Ethernet devices.
  Add support for Ethernet and VLAN usage.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1444737600">- bumpt to 1.30
    Fix issue with pending DNS request during server change.
    Fix issue with empty strings in nameservers configuration.
    Fix issue with time servers during IP configuration change.
    Fix issue with 4-way handshake during roaming.
    Fix issue with open WiFi networks security.
    Fix issue with support for WiFi AnonymousIdentity.
    Fix issue with memory leak and DHCPv6 DUID handling.
    Fix issue with DHCP client and P2P interaction.
    Fix issue with handling provision file updates.
    Fix issue with VPN state updates.
    Disable 6to4 support by default.
- add keyring file
- clean with spec-cleaner
- fix builds for all possible distributions and architectures</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1503403200">- bump to 1.35
  besides other things contains fix for CVE-2017-12865</changelog>
  <changelog author="avvissu@yandex.by" date="1504872000">- Remove obsolete macros
- Add polkit-agent-1 dependency
- Use the %tmpfiles_create macro
- Removal of ldconfig scriptlets from all packages
- Add connman-wait-online.service in post{un}
- Spec file cleanup</changelog>
  <changelog author="avvissu@yandex.by" date="1507032000">- Add connman-1.35-resolvconf.patch
- Activate connman.service if the network services disabled
- Add info in /var/adm/update-messages</changelog>
  <changelog author="avvissu@yandex.by" date="1508414400">- Add configuration file (/etc/connman/main.conf)
- Add ghost lines: main.conf connman connman-vpn</changelog>
  <changelog author="avvissu@yandex.by" date="1508500800">- Remove unrecognized options: disable-gtk-doc, enable-threads,
  disable-iwmx, enable-session-policy</changelog>
  <changelog author="avvissu@yandex.by" date="1509019200">- Change the mode of download_files (sr#521762)
- Remove connman-rpmlintrc (bnc#1057697)
- Add client as a recommended dependency</changelog>
  <changelog author="avvissu@yandex.by" date="1514289600">- Add symlink to network.service (connman-1.35-service.patch)</changelog>
  <changelog author="avvissu@yandex.by" date="1518523200">- Fix build errors due to unsupported header include order with
  newer kernels &gt;=4.15 (connman-1.35-include.patch).</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1557489600">- Update to 1.37:
  * Fix issue with handling invalid gateway addresses.
  * Fix issue with handling updates of default gateway.
  * Fix issue with DHCP servers that require broadcast flag.
  * Add support for option to use gateways as time servers.
  * Add support for option to select default technology.
  * Add support for Address Conflict Detection (ACD).
  * Add support for IPv6 iptables management.
- Change in 1.36:
  * Fix issue with DNS short response on error handling.
  * Fix issue with handling incoming DNS requests.
  * Fix issue with handling empty timeserver list.
  * Fix issue with incorrect DHCP byte order.
  * Fix issue with AllowDomainnameUpdates handling.
  * Fix issue with IPv4 link-local IP conflict error.
  * Fix issue with handling WISPr over TLS connections.
  * Fix issue with WiFi background scanning handling.
  * Fix issue with WiFi disconnect+connect race condition.
  * Fix issue with WiFi scanning and tethering operation.
  * Fix issue with WiFi security change handling.
  * Fix issue with missing signal for WPS changes.
  * Fix issue with online check retry handling.
  * Add support for systemd-resolved backend.
  * Add support for mDNS configuration setup.
- Drop connman-1.35-include.patch
- Drop connman-1.35-resolvconf.patch</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1582027200">- Update to 1.38:
  * Fix issue with online check on IP address update.
  * Fix issue with OpenVPN and encrypted private keys.
  * Fix issue with finishing of VPN connections.
  * Add support for updated stable iwd APIs.
  * Add support for WireGuard networks.
- Spec file cleanup</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1613131200">- Update to 1.39 (bsc#1181751):
  * Fix issue with scanning state synchronization and iwd.
  * Fix issue with invalid key with 4-way handshake offloading.
  * Fix issue with DNS proxy length checks to prevent buffer overflow. (CVE-2021-26675)
  * Fix issue with DHCP leaking stack data via uninitialized variable. (CVE-2021-26676)</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1644580800">- Update to 1.41: (bsc#1194177, bsc#1194176, bsc#1194175)
  * Fix issue with RTNL netlink message alignment.
  * Fix issue with dnsproxy and timeout for TCP feature. (CVE-2022-23097, CVE-2022-23096)
  * Fix issue with dnsproxy and busy loop in TCP server. (CVE-2022-23098)
  * Fix issue with WiFi connection with no passphrase.
  * Add support for wpa_supplicant and WPA3-SAE functionality.
  * Add support for D-Bus ObjectManager interface.
- Renamed downstream patches to separate them from upstream patches
  * Rename 0001-connman-1.35-service.patch to 0100-connman-1.35-service.patch
- Add systemd hardening configuration
  * Rename harden_connman-vpn.service.patch to 0101-harden_connman-vpn.service.patch
  * Rename harden_connman-wait-online.service.patch to 0102-harden_connman-wait-online.service.patch
- Disabled openconnect plugin due to version conflict
- Disabled vpnc plugin for i568 missing dependency
- Disabled hh2serial and tist_working for ppc64le due to version conflict</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1659355200">- Add refcounting to wispr portal detection (bsc#1200190)
  * add 0001-wispr-Rename-wispr_portal_list-to-wispr_portal_hash.patch
  * add 0002-wispr-Ignore-NULL-proxy.patch
  * add 0003-wispr-Add-reference-counter-to-portal-context.patch (CVE-2022-32293)
  * add 0004-wispr-Update-portal-context-references.patch (CVE-2022-32293)
- Fix OOB write in received_data (bsc#1200189)
  * add 0005-gweb-Fix-OOB-write-in-received_data.patch (CVE-2022-32292)</changelog>
</package>
<package pkgid="a9cebbde7ad80bdf3543af650f689c34ae657e8ef1d97c3851c1679247a06724" name="connman-plugin-l2tp" arch="x86_64">
  <version epoch="0" ver="1.41" rel="bp154.2.3.1"/>
  <changelog author="sleep_walker@suse.cz" date="1423224000">- bump to 1.28
  ver 1.28:
  Fix issue with DHCPv6 re-transmission timer.
  Fix issue with DHCP service ID option byte order.
  Fix issue with IPv6 connections and SLAAC/DHCPv6.
  Fix issue with telephony and IPv6 autoconfiguration.
  Fix issue with Bluetooth technology setting changes.
  Fix issue with WiFi autoscan interval calculation.
  Fix issue with WiFi and missing BSS signal strength.
  Add support for IPv4 information for WiFi Display.
  ver 1.27:
  Fix issue with memory leak in IP configuration.
  Fix issue with providing random numbers for DHCP.
  Fix issue with handling IN_MOVED_TO inotify events.
  Fix issue with channel selection for WiFi scanning.
  Add support for handling Bluetooth GN and PANU roles.
  ver 1.26:
  Fix issue with missing WiFi security provisioning support.
  Fix issue with immutable setting and provisioned services.
  Fix issue with scheduling DNS cache cleanup procedure.
  Fix issue with IPv6 Privacy setting on service removal.
  Fix issue with DHCPv6 CONFIRM message sending procedure.
  Fix issue with DHCPv6 lease expiration handling support.
  Fix issue with DHCPv4 networks and broadcast flag handling.
  Fix issue with DHCPv4 networks without gateway configuration.
  Fix issue with P2P Peer authorization handling.
  Fix issue with P2P Peer service registration.
  Add support for WiFi Display information elements.
  Add support for systemd-hostnamed integration.
  ver 1.25:
  Fix issue with handling rebind timer for DHCPv6.
  Fix issue with handling DHCP renew transaction.
  Fix issue with user supplied proxy settings and DHCP.
  Fix issue with extra status codes from captive portals.
  Fix issue with service idle state reset on failure.
  Fix issue with DNS label compression handling.
  Add support for experimental P2P Peer service.
  ver 1.24:
  Fix issue with handling slave interfaces.
  Fix issue with handling DHCPv4 broadcast flag.
  Fix issue with handling DHCPv4 lease expiration.
  Fix issue with handling WiFi auto-scanning timeout.
  Fix issue with handling domain and DNS server changes.
  Fix issue with double free and agent messages.
  ver 1.23:
  Fix issue with memory leak in technology handling.
  Fix issue with not removing host route of OpenVPN.
  Fix issue with double free in DHCP cleanup handling.
  Fix issue with handling DHCP method from oFono.
  Fix issue with IPv6-PD when disabling tethering.
  Fix issue with DNS proxy when disabling tethering.
  Fix issue with Bluetooth start and stop interaction.
  Fix issue with Bluetooth PAN networks on adapter change.
  ver 1.22:
  Fix issue with WPS state synchronization.
  Fix issue with DNS servers and default service.
  Fix issue with DHCP client and rebooting state.
  Add support for NTP exponential backoff handling.
  Add support for NTP kiss-of-death packet handling.
  Add support for Ethernet gadget networking.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1438948800">- bump to 1.29
  Fix issue with IPv6 autoconfiguration when disabled.
  Fix issue with IPv6 temporary route handling.
  Fix issue with IPv6 timers for nameservers.
  Fix issue with DHPCv6 and route configuration.
  Fix issue with DHCPv6 source port and buggy servers.
  Fix issue with DHCPv6 rapid commit option length.
  Fix issue with DHCPv6 rapid commit error handling.
  Fix issue with handling invalid WiFi passphrases.
  Fix issue with connecting Ethernet devices.
  Add support for Ethernet and VLAN usage.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1444737600">- bumpt to 1.30
    Fix issue with pending DNS request during server change.
    Fix issue with empty strings in nameservers configuration.
    Fix issue with time servers during IP configuration change.
    Fix issue with 4-way handshake during roaming.
    Fix issue with open WiFi networks security.
    Fix issue with support for WiFi AnonymousIdentity.
    Fix issue with memory leak and DHCPv6 DUID handling.
    Fix issue with DHCP client and P2P interaction.
    Fix issue with handling provision file updates.
    Fix issue with VPN state updates.
    Disable 6to4 support by default.
- add keyring file
- clean with spec-cleaner
- fix builds for all possible distributions and architectures</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1503403200">- bump to 1.35
  besides other things contains fix for CVE-2017-12865</changelog>
  <changelog author="avvissu@yandex.by" date="1504872000">- Remove obsolete macros
- Add polkit-agent-1 dependency
- Use the %tmpfiles_create macro
- Removal of ldconfig scriptlets from all packages
- Add connman-wait-online.service in post{un}
- Spec file cleanup</changelog>
  <changelog author="avvissu@yandex.by" date="1507032000">- Add connman-1.35-resolvconf.patch
- Activate connman.service if the network services disabled
- Add info in /var/adm/update-messages</changelog>
  <changelog author="avvissu@yandex.by" date="1508414400">- Add configuration file (/etc/connman/main.conf)
- Add ghost lines: main.conf connman connman-vpn</changelog>
  <changelog author="avvissu@yandex.by" date="1508500800">- Remove unrecognized options: disable-gtk-doc, enable-threads,
  disable-iwmx, enable-session-policy</changelog>
  <changelog author="avvissu@yandex.by" date="1509019200">- Change the mode of download_files (sr#521762)
- Remove connman-rpmlintrc (bnc#1057697)
- Add client as a recommended dependency</changelog>
  <changelog author="avvissu@yandex.by" date="1514289600">- Add symlink to network.service (connman-1.35-service.patch)</changelog>
  <changelog author="avvissu@yandex.by" date="1518523200">- Fix build errors due to unsupported header include order with
  newer kernels &gt;=4.15 (connman-1.35-include.patch).</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1557489600">- Update to 1.37:
  * Fix issue with handling invalid gateway addresses.
  * Fix issue with handling updates of default gateway.
  * Fix issue with DHCP servers that require broadcast flag.
  * Add support for option to use gateways as time servers.
  * Add support for option to select default technology.
  * Add support for Address Conflict Detection (ACD).
  * Add support for IPv6 iptables management.
- Change in 1.36:
  * Fix issue with DNS short response on error handling.
  * Fix issue with handling incoming DNS requests.
  * Fix issue with handling empty timeserver list.
  * Fix issue with incorrect DHCP byte order.
  * Fix issue with AllowDomainnameUpdates handling.
  * Fix issue with IPv4 link-local IP conflict error.
  * Fix issue with handling WISPr over TLS connections.
  * Fix issue with WiFi background scanning handling.
  * Fix issue with WiFi disconnect+connect race condition.
  * Fix issue with WiFi scanning and tethering operation.
  * Fix issue with WiFi security change handling.
  * Fix issue with missing signal for WPS changes.
  * Fix issue with online check retry handling.
  * Add support for systemd-resolved backend.
  * Add support for mDNS configuration setup.
- Drop connman-1.35-include.patch
- Drop connman-1.35-resolvconf.patch</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1582027200">- Update to 1.38:
  * Fix issue with online check on IP address update.
  * Fix issue with OpenVPN and encrypted private keys.
  * Fix issue with finishing of VPN connections.
  * Add support for updated stable iwd APIs.
  * Add support for WireGuard networks.
- Spec file cleanup</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1613131200">- Update to 1.39 (bsc#1181751):
  * Fix issue with scanning state synchronization and iwd.
  * Fix issue with invalid key with 4-way handshake offloading.
  * Fix issue with DNS proxy length checks to prevent buffer overflow. (CVE-2021-26675)
  * Fix issue with DHCP leaking stack data via uninitialized variable. (CVE-2021-26676)</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1644580800">- Update to 1.41: (bsc#1194177, bsc#1194176, bsc#1194175)
  * Fix issue with RTNL netlink message alignment.
  * Fix issue with dnsproxy and timeout for TCP feature. (CVE-2022-23097, CVE-2022-23096)
  * Fix issue with dnsproxy and busy loop in TCP server. (CVE-2022-23098)
  * Fix issue with WiFi connection with no passphrase.
  * Add support for wpa_supplicant and WPA3-SAE functionality.
  * Add support for D-Bus ObjectManager interface.
- Renamed downstream patches to separate them from upstream patches
  * Rename 0001-connman-1.35-service.patch to 0100-connman-1.35-service.patch
- Add systemd hardening configuration
  * Rename harden_connman-vpn.service.patch to 0101-harden_connman-vpn.service.patch
  * Rename harden_connman-wait-online.service.patch to 0102-harden_connman-wait-online.service.patch
- Disabled openconnect plugin due to version conflict
- Disabled vpnc plugin for i568 missing dependency
- Disabled hh2serial and tist_working for ppc64le due to version conflict</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1659355200">- Add refcounting to wispr portal detection (bsc#1200190)
  * add 0001-wispr-Rename-wispr_portal_list-to-wispr_portal_hash.patch
  * add 0002-wispr-Ignore-NULL-proxy.patch
  * add 0003-wispr-Add-reference-counter-to-portal-context.patch (CVE-2022-32293)
  * add 0004-wispr-Update-portal-context-references.patch (CVE-2022-32293)
- Fix OOB write in received_data (bsc#1200189)
  * add 0005-gweb-Fix-OOB-write-in-received_data.patch (CVE-2022-32292)</changelog>
</package>
<package pkgid="31b6a3acd4b63ff9e1176c87df3b90e08907a5a242e8df338740d9b79fd34f18" name="connman-plugin-openvpn" arch="aarch64">
  <version epoch="0" ver="1.41" rel="bp154.2.3.1"/>
  <changelog author="sleep_walker@suse.cz" date="1423224000">- bump to 1.28
  ver 1.28:
  Fix issue with DHCPv6 re-transmission timer.
  Fix issue with DHCP service ID option byte order.
  Fix issue with IPv6 connections and SLAAC/DHCPv6.
  Fix issue with telephony and IPv6 autoconfiguration.
  Fix issue with Bluetooth technology setting changes.
  Fix issue with WiFi autoscan interval calculation.
  Fix issue with WiFi and missing BSS signal strength.
  Add support for IPv4 information for WiFi Display.
  ver 1.27:
  Fix issue with memory leak in IP configuration.
  Fix issue with providing random numbers for DHCP.
  Fix issue with handling IN_MOVED_TO inotify events.
  Fix issue with channel selection for WiFi scanning.
  Add support for handling Bluetooth GN and PANU roles.
  ver 1.26:
  Fix issue with missing WiFi security provisioning support.
  Fix issue with immutable setting and provisioned services.
  Fix issue with scheduling DNS cache cleanup procedure.
  Fix issue with IPv6 Privacy setting on service removal.
  Fix issue with DHCPv6 CONFIRM message sending procedure.
  Fix issue with DHCPv6 lease expiration handling support.
  Fix issue with DHCPv4 networks and broadcast flag handling.
  Fix issue with DHCPv4 networks without gateway configuration.
  Fix issue with P2P Peer authorization handling.
  Fix issue with P2P Peer service registration.
  Add support for WiFi Display information elements.
  Add support for systemd-hostnamed integration.
  ver 1.25:
  Fix issue with handling rebind timer for DHCPv6.
  Fix issue with handling DHCP renew transaction.
  Fix issue with user supplied proxy settings and DHCP.
  Fix issue with extra status codes from captive portals.
  Fix issue with service idle state reset on failure.
  Fix issue with DNS label compression handling.
  Add support for experimental P2P Peer service.
  ver 1.24:
  Fix issue with handling slave interfaces.
  Fix issue with handling DHCPv4 broadcast flag.
  Fix issue with handling DHCPv4 lease expiration.
  Fix issue with handling WiFi auto-scanning timeout.
  Fix issue with handling domain and DNS server changes.
  Fix issue with double free and agent messages.
  ver 1.23:
  Fix issue with memory leak in technology handling.
  Fix issue with not removing host route of OpenVPN.
  Fix issue with double free in DHCP cleanup handling.
  Fix issue with handling DHCP method from oFono.
  Fix issue with IPv6-PD when disabling tethering.
  Fix issue with DNS proxy when disabling tethering.
  Fix issue with Bluetooth start and stop interaction.
  Fix issue with Bluetooth PAN networks on adapter change.
  ver 1.22:
  Fix issue with WPS state synchronization.
  Fix issue with DNS servers and default service.
  Fix issue with DHCP client and rebooting state.
  Add support for NTP exponential backoff handling.
  Add support for NTP kiss-of-death packet handling.
  Add support for Ethernet gadget networking.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1438948800">- bump to 1.29
  Fix issue with IPv6 autoconfiguration when disabled.
  Fix issue with IPv6 temporary route handling.
  Fix issue with IPv6 timers for nameservers.
  Fix issue with DHPCv6 and route configuration.
  Fix issue with DHCPv6 source port and buggy servers.
  Fix issue with DHCPv6 rapid commit option length.
  Fix issue with DHCPv6 rapid commit error handling.
  Fix issue with handling invalid WiFi passphrases.
  Fix issue with connecting Ethernet devices.
  Add support for Ethernet and VLAN usage.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1444737600">- bumpt to 1.30
    Fix issue with pending DNS request during server change.
    Fix issue with empty strings in nameservers configuration.
    Fix issue with time servers during IP configuration change.
    Fix issue with 4-way handshake during roaming.
    Fix issue with open WiFi networks security.
    Fix issue with support for WiFi AnonymousIdentity.
    Fix issue with memory leak and DHCPv6 DUID handling.
    Fix issue with DHCP client and P2P interaction.
    Fix issue with handling provision file updates.
    Fix issue with VPN state updates.
    Disable 6to4 support by default.
- add keyring file
- clean with spec-cleaner
- fix builds for all possible distributions and architectures</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1503403200">- bump to 1.35
  besides other things contains fix for CVE-2017-12865</changelog>
  <changelog author="avvissu@yandex.by" date="1504872000">- Remove obsolete macros
- Add polkit-agent-1 dependency
- Use the %tmpfiles_create macro
- Removal of ldconfig scriptlets from all packages
- Add connman-wait-online.service in post{un}
- Spec file cleanup</changelog>
  <changelog author="avvissu@yandex.by" date="1507032000">- Add connman-1.35-resolvconf.patch
- Activate connman.service if the network services disabled
- Add info in /var/adm/update-messages</changelog>
  <changelog author="avvissu@yandex.by" date="1508414400">- Add configuration file (/etc/connman/main.conf)
- Add ghost lines: main.conf connman connman-vpn</changelog>
  <changelog author="avvissu@yandex.by" date="1508500800">- Remove unrecognized options: disable-gtk-doc, enable-threads,
  disable-iwmx, enable-session-policy</changelog>
  <changelog author="avvissu@yandex.by" date="1509019200">- Change the mode of download_files (sr#521762)
- Remove connman-rpmlintrc (bnc#1057697)
- Add client as a recommended dependency</changelog>
  <changelog author="avvissu@yandex.by" date="1514289600">- Add symlink to network.service (connman-1.35-service.patch)</changelog>
  <changelog author="avvissu@yandex.by" date="1518523200">- Fix build errors due to unsupported header include order with
  newer kernels &gt;=4.15 (connman-1.35-include.patch).</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1557489600">- Update to 1.37:
  * Fix issue with handling invalid gateway addresses.
  * Fix issue with handling updates of default gateway.
  * Fix issue with DHCP servers that require broadcast flag.
  * Add support for option to use gateways as time servers.
  * Add support for option to select default technology.
  * Add support for Address Conflict Detection (ACD).
  * Add support for IPv6 iptables management.
- Change in 1.36:
  * Fix issue with DNS short response on error handling.
  * Fix issue with handling incoming DNS requests.
  * Fix issue with handling empty timeserver list.
  * Fix issue with incorrect DHCP byte order.
  * Fix issue with AllowDomainnameUpdates handling.
  * Fix issue with IPv4 link-local IP conflict error.
  * Fix issue with handling WISPr over TLS connections.
  * Fix issue with WiFi background scanning handling.
  * Fix issue with WiFi disconnect+connect race condition.
  * Fix issue with WiFi scanning and tethering operation.
  * Fix issue with WiFi security change handling.
  * Fix issue with missing signal for WPS changes.
  * Fix issue with online check retry handling.
  * Add support for systemd-resolved backend.
  * Add support for mDNS configuration setup.
- Drop connman-1.35-include.patch
- Drop connman-1.35-resolvconf.patch</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1582027200">- Update to 1.38:
  * Fix issue with online check on IP address update.
  * Fix issue with OpenVPN and encrypted private keys.
  * Fix issue with finishing of VPN connections.
  * Add support for updated stable iwd APIs.
  * Add support for WireGuard networks.
- Spec file cleanup</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1613131200">- Update to 1.39 (bsc#1181751):
  * Fix issue with scanning state synchronization and iwd.
  * Fix issue with invalid key with 4-way handshake offloading.
  * Fix issue with DNS proxy length checks to prevent buffer overflow. (CVE-2021-26675)
  * Fix issue with DHCP leaking stack data via uninitialized variable. (CVE-2021-26676)</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1644580800">- Update to 1.41: (bsc#1194177, bsc#1194176, bsc#1194175)
  * Fix issue with RTNL netlink message alignment.
  * Fix issue with dnsproxy and timeout for TCP feature. (CVE-2022-23097, CVE-2022-23096)
  * Fix issue with dnsproxy and busy loop in TCP server. (CVE-2022-23098)
  * Fix issue with WiFi connection with no passphrase.
  * Add support for wpa_supplicant and WPA3-SAE functionality.
  * Add support for D-Bus ObjectManager interface.
- Renamed downstream patches to separate them from upstream patches
  * Rename 0001-connman-1.35-service.patch to 0100-connman-1.35-service.patch
- Add systemd hardening configuration
  * Rename harden_connman-vpn.service.patch to 0101-harden_connman-vpn.service.patch
  * Rename harden_connman-wait-online.service.patch to 0102-harden_connman-wait-online.service.patch
- Disabled openconnect plugin due to version conflict
- Disabled vpnc plugin for i568 missing dependency
- Disabled hh2serial and tist_working for ppc64le due to version conflict</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1659355200">- Add refcounting to wispr portal detection (bsc#1200190)
  * add 0001-wispr-Rename-wispr_portal_list-to-wispr_portal_hash.patch
  * add 0002-wispr-Ignore-NULL-proxy.patch
  * add 0003-wispr-Add-reference-counter-to-portal-context.patch (CVE-2022-32293)
  * add 0004-wispr-Update-portal-context-references.patch (CVE-2022-32293)
- Fix OOB write in received_data (bsc#1200189)
  * add 0005-gweb-Fix-OOB-write-in-received_data.patch (CVE-2022-32292)</changelog>
</package>
<package pkgid="da76706f92cdf052f2e28e9adddd4dc8932c37ad77c8d1d084564dc01d4dede0" name="connman-plugin-openvpn" arch="i586">
  <version epoch="0" ver="1.41" rel="bp154.2.3.1"/>
  <changelog author="sleep_walker@suse.cz" date="1423224000">- bump to 1.28
  ver 1.28:
  Fix issue with DHCPv6 re-transmission timer.
  Fix issue with DHCP service ID option byte order.
  Fix issue with IPv6 connections and SLAAC/DHCPv6.
  Fix issue with telephony and IPv6 autoconfiguration.
  Fix issue with Bluetooth technology setting changes.
  Fix issue with WiFi autoscan interval calculation.
  Fix issue with WiFi and missing BSS signal strength.
  Add support for IPv4 information for WiFi Display.
  ver 1.27:
  Fix issue with memory leak in IP configuration.
  Fix issue with providing random numbers for DHCP.
  Fix issue with handling IN_MOVED_TO inotify events.
  Fix issue with channel selection for WiFi scanning.
  Add support for handling Bluetooth GN and PANU roles.
  ver 1.26:
  Fix issue with missing WiFi security provisioning support.
  Fix issue with immutable setting and provisioned services.
  Fix issue with scheduling DNS cache cleanup procedure.
  Fix issue with IPv6 Privacy setting on service removal.
  Fix issue with DHCPv6 CONFIRM message sending procedure.
  Fix issue with DHCPv6 lease expiration handling support.
  Fix issue with DHCPv4 networks and broadcast flag handling.
  Fix issue with DHCPv4 networks without gateway configuration.
  Fix issue with P2P Peer authorization handling.
  Fix issue with P2P Peer service registration.
  Add support for WiFi Display information elements.
  Add support for systemd-hostnamed integration.
  ver 1.25:
  Fix issue with handling rebind timer for DHCPv6.
  Fix issue with handling DHCP renew transaction.
  Fix issue with user supplied proxy settings and DHCP.
  Fix issue with extra status codes from captive portals.
  Fix issue with service idle state reset on failure.
  Fix issue with DNS label compression handling.
  Add support for experimental P2P Peer service.
  ver 1.24:
  Fix issue with handling slave interfaces.
  Fix issue with handling DHCPv4 broadcast flag.
  Fix issue with handling DHCPv4 lease expiration.
  Fix issue with handling WiFi auto-scanning timeout.
  Fix issue with handling domain and DNS server changes.
  Fix issue with double free and agent messages.
  ver 1.23:
  Fix issue with memory leak in technology handling.
  Fix issue with not removing host route of OpenVPN.
  Fix issue with double free in DHCP cleanup handling.
  Fix issue with handling DHCP method from oFono.
  Fix issue with IPv6-PD when disabling tethering.
  Fix issue with DNS proxy when disabling tethering.
  Fix issue with Bluetooth start and stop interaction.
  Fix issue with Bluetooth PAN networks on adapter change.
  ver 1.22:
  Fix issue with WPS state synchronization.
  Fix issue with DNS servers and default service.
  Fix issue with DHCP client and rebooting state.
  Add support for NTP exponential backoff handling.
  Add support for NTP kiss-of-death packet handling.
  Add support for Ethernet gadget networking.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1438948800">- bump to 1.29
  Fix issue with IPv6 autoconfiguration when disabled.
  Fix issue with IPv6 temporary route handling.
  Fix issue with IPv6 timers for nameservers.
  Fix issue with DHPCv6 and route configuration.
  Fix issue with DHCPv6 source port and buggy servers.
  Fix issue with DHCPv6 rapid commit option length.
  Fix issue with DHCPv6 rapid commit error handling.
  Fix issue with handling invalid WiFi passphrases.
  Fix issue with connecting Ethernet devices.
  Add support for Ethernet and VLAN usage.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1444737600">- bumpt to 1.30
    Fix issue with pending DNS request during server change.
    Fix issue with empty strings in nameservers configuration.
    Fix issue with time servers during IP configuration change.
    Fix issue with 4-way handshake during roaming.
    Fix issue with open WiFi networks security.
    Fix issue with support for WiFi AnonymousIdentity.
    Fix issue with memory leak and DHCPv6 DUID handling.
    Fix issue with DHCP client and P2P interaction.
    Fix issue with handling provision file updates.
    Fix issue with VPN state updates.
    Disable 6to4 support by default.
- add keyring file
- clean with spec-cleaner
- fix builds for all possible distributions and architectures</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1503403200">- bump to 1.35
  besides other things contains fix for CVE-2017-12865</changelog>
  <changelog author="avvissu@yandex.by" date="1504872000">- Remove obsolete macros
- Add polkit-agent-1 dependency
- Use the %tmpfiles_create macro
- Removal of ldconfig scriptlets from all packages
- Add connman-wait-online.service in post{un}
- Spec file cleanup</changelog>
  <changelog author="avvissu@yandex.by" date="1507032000">- Add connman-1.35-resolvconf.patch
- Activate connman.service if the network services disabled
- Add info in /var/adm/update-messages</changelog>
  <changelog author="avvissu@yandex.by" date="1508414400">- Add configuration file (/etc/connman/main.conf)
- Add ghost lines: main.conf connman connman-vpn</changelog>
  <changelog author="avvissu@yandex.by" date="1508500800">- Remove unrecognized options: disable-gtk-doc, enable-threads,
  disable-iwmx, enable-session-policy</changelog>
  <changelog author="avvissu@yandex.by" date="1509019200">- Change the mode of download_files (sr#521762)
- Remove connman-rpmlintrc (bnc#1057697)
- Add client as a recommended dependency</changelog>
  <changelog author="avvissu@yandex.by" date="1514289600">- Add symlink to network.service (connman-1.35-service.patch)</changelog>
  <changelog author="avvissu@yandex.by" date="1518523200">- Fix build errors due to unsupported header include order with
  newer kernels &gt;=4.15 (connman-1.35-include.patch).</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1557489600">- Update to 1.37:
  * Fix issue with handling invalid gateway addresses.
  * Fix issue with handling updates of default gateway.
  * Fix issue with DHCP servers that require broadcast flag.
  * Add support for option to use gateways as time servers.
  * Add support for option to select default technology.
  * Add support for Address Conflict Detection (ACD).
  * Add support for IPv6 iptables management.
- Change in 1.36:
  * Fix issue with DNS short response on error handling.
  * Fix issue with handling incoming DNS requests.
  * Fix issue with handling empty timeserver list.
  * Fix issue with incorrect DHCP byte order.
  * Fix issue with AllowDomainnameUpdates handling.
  * Fix issue with IPv4 link-local IP conflict error.
  * Fix issue with handling WISPr over TLS connections.
  * Fix issue with WiFi background scanning handling.
  * Fix issue with WiFi disconnect+connect race condition.
  * Fix issue with WiFi scanning and tethering operation.
  * Fix issue with WiFi security change handling.
  * Fix issue with missing signal for WPS changes.
  * Fix issue with online check retry handling.
  * Add support for systemd-resolved backend.
  * Add support for mDNS configuration setup.
- Drop connman-1.35-include.patch
- Drop connman-1.35-resolvconf.patch</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1582027200">- Update to 1.38:
  * Fix issue with online check on IP address update.
  * Fix issue with OpenVPN and encrypted private keys.
  * Fix issue with finishing of VPN connections.
  * Add support for updated stable iwd APIs.
  * Add support for WireGuard networks.
- Spec file cleanup</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1613131200">- Update to 1.39 (bsc#1181751):
  * Fix issue with scanning state synchronization and iwd.
  * Fix issue with invalid key with 4-way handshake offloading.
  * Fix issue with DNS proxy length checks to prevent buffer overflow. (CVE-2021-26675)
  * Fix issue with DHCP leaking stack data via uninitialized variable. (CVE-2021-26676)</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1644580800">- Update to 1.41: (bsc#1194177, bsc#1194176, bsc#1194175)
  * Fix issue with RTNL netlink message alignment.
  * Fix issue with dnsproxy and timeout for TCP feature. (CVE-2022-23097, CVE-2022-23096)
  * Fix issue with dnsproxy and busy loop in TCP server. (CVE-2022-23098)
  * Fix issue with WiFi connection with no passphrase.
  * Add support for wpa_supplicant and WPA3-SAE functionality.
  * Add support for D-Bus ObjectManager interface.
- Renamed downstream patches to separate them from upstream patches
  * Rename 0001-connman-1.35-service.patch to 0100-connman-1.35-service.patch
- Add systemd hardening configuration
  * Rename harden_connman-vpn.service.patch to 0101-harden_connman-vpn.service.patch
  * Rename harden_connman-wait-online.service.patch to 0102-harden_connman-wait-online.service.patch
- Disabled openconnect plugin due to version conflict
- Disabled vpnc plugin for i568 missing dependency
- Disabled hh2serial and tist_working for ppc64le due to version conflict</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1659355200">- Add refcounting to wispr portal detection (bsc#1200190)
  * add 0001-wispr-Rename-wispr_portal_list-to-wispr_portal_hash.patch
  * add 0002-wispr-Ignore-NULL-proxy.patch
  * add 0003-wispr-Add-reference-counter-to-portal-context.patch (CVE-2022-32293)
  * add 0004-wispr-Update-portal-context-references.patch (CVE-2022-32293)
- Fix OOB write in received_data (bsc#1200189)
  * add 0005-gweb-Fix-OOB-write-in-received_data.patch (CVE-2022-32292)</changelog>
</package>
<package pkgid="58069f612e420d1b4486ed6381be4460a399023fcefc660cbe9106a0b654f145" name="connman-plugin-openvpn" arch="ppc64le">
  <version epoch="0" ver="1.41" rel="bp154.2.3.1"/>
  <changelog author="sleep_walker@suse.cz" date="1423224000">- bump to 1.28
  ver 1.28:
  Fix issue with DHCPv6 re-transmission timer.
  Fix issue with DHCP service ID option byte order.
  Fix issue with IPv6 connections and SLAAC/DHCPv6.
  Fix issue with telephony and IPv6 autoconfiguration.
  Fix issue with Bluetooth technology setting changes.
  Fix issue with WiFi autoscan interval calculation.
  Fix issue with WiFi and missing BSS signal strength.
  Add support for IPv4 information for WiFi Display.
  ver 1.27:
  Fix issue with memory leak in IP configuration.
  Fix issue with providing random numbers for DHCP.
  Fix issue with handling IN_MOVED_TO inotify events.
  Fix issue with channel selection for WiFi scanning.
  Add support for handling Bluetooth GN and PANU roles.
  ver 1.26:
  Fix issue with missing WiFi security provisioning support.
  Fix issue with immutable setting and provisioned services.
  Fix issue with scheduling DNS cache cleanup procedure.
  Fix issue with IPv6 Privacy setting on service removal.
  Fix issue with DHCPv6 CONFIRM message sending procedure.
  Fix issue with DHCPv6 lease expiration handling support.
  Fix issue with DHCPv4 networks and broadcast flag handling.
  Fix issue with DHCPv4 networks without gateway configuration.
  Fix issue with P2P Peer authorization handling.
  Fix issue with P2P Peer service registration.
  Add support for WiFi Display information elements.
  Add support for systemd-hostnamed integration.
  ver 1.25:
  Fix issue with handling rebind timer for DHCPv6.
  Fix issue with handling DHCP renew transaction.
  Fix issue with user supplied proxy settings and DHCP.
  Fix issue with extra status codes from captive portals.
  Fix issue with service idle state reset on failure.
  Fix issue with DNS label compression handling.
  Add support for experimental P2P Peer service.
  ver 1.24:
  Fix issue with handling slave interfaces.
  Fix issue with handling DHCPv4 broadcast flag.
  Fix issue with handling DHCPv4 lease expiration.
  Fix issue with handling WiFi auto-scanning timeout.
  Fix issue with handling domain and DNS server changes.
  Fix issue with double free and agent messages.
  ver 1.23:
  Fix issue with memory leak in technology handling.
  Fix issue with not removing host route of OpenVPN.
  Fix issue with double free in DHCP cleanup handling.
  Fix issue with handling DHCP method from oFono.
  Fix issue with IPv6-PD when disabling tethering.
  Fix issue with DNS proxy when disabling tethering.
  Fix issue with Bluetooth start and stop interaction.
  Fix issue with Bluetooth PAN networks on adapter change.
  ver 1.22:
  Fix issue with WPS state synchronization.
  Fix issue with DNS servers and default service.
  Fix issue with DHCP client and rebooting state.
  Add support for NTP exponential backoff handling.
  Add support for NTP kiss-of-death packet handling.
  Add support for Ethernet gadget networking.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1438948800">- bump to 1.29
  Fix issue with IPv6 autoconfiguration when disabled.
  Fix issue with IPv6 temporary route handling.
  Fix issue with IPv6 timers for nameservers.
  Fix issue with DHPCv6 and route configuration.
  Fix issue with DHCPv6 source port and buggy servers.
  Fix issue with DHCPv6 rapid commit option length.
  Fix issue with DHCPv6 rapid commit error handling.
  Fix issue with handling invalid WiFi passphrases.
  Fix issue with connecting Ethernet devices.
  Add support for Ethernet and VLAN usage.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1444737600">- bumpt to 1.30
    Fix issue with pending DNS request during server change.
    Fix issue with empty strings in nameservers configuration.
    Fix issue with time servers during IP configuration change.
    Fix issue with 4-way handshake during roaming.
    Fix issue with open WiFi networks security.
    Fix issue with support for WiFi AnonymousIdentity.
    Fix issue with memory leak and DHCPv6 DUID handling.
    Fix issue with DHCP client and P2P interaction.
    Fix issue with handling provision file updates.
    Fix issue with VPN state updates.
    Disable 6to4 support by default.
- add keyring file
- clean with spec-cleaner
- fix builds for all possible distributions and architectures</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1503403200">- bump to 1.35
  besides other things contains fix for CVE-2017-12865</changelog>
  <changelog author="avvissu@yandex.by" date="1504872000">- Remove obsolete macros
- Add polkit-agent-1 dependency
- Use the %tmpfiles_create macro
- Removal of ldconfig scriptlets from all packages
- Add connman-wait-online.service in post{un}
- Spec file cleanup</changelog>
  <changelog author="avvissu@yandex.by" date="1507032000">- Add connman-1.35-resolvconf.patch
- Activate connman.service if the network services disabled
- Add info in /var/adm/update-messages</changelog>
  <changelog author="avvissu@yandex.by" date="1508414400">- Add configuration file (/etc/connman/main.conf)
- Add ghost lines: main.conf connman connman-vpn</changelog>
  <changelog author="avvissu@yandex.by" date="1508500800">- Remove unrecognized options: disable-gtk-doc, enable-threads,
  disable-iwmx, enable-session-policy</changelog>
  <changelog author="avvissu@yandex.by" date="1509019200">- Change the mode of download_files (sr#521762)
- Remove connman-rpmlintrc (bnc#1057697)
- Add client as a recommended dependency</changelog>
  <changelog author="avvissu@yandex.by" date="1514289600">- Add symlink to network.service (connman-1.35-service.patch)</changelog>
  <changelog author="avvissu@yandex.by" date="1518523200">- Fix build errors due to unsupported header include order with
  newer kernels &gt;=4.15 (connman-1.35-include.patch).</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1557489600">- Update to 1.37:
  * Fix issue with handling invalid gateway addresses.
  * Fix issue with handling updates of default gateway.
  * Fix issue with DHCP servers that require broadcast flag.
  * Add support for option to use gateways as time servers.
  * Add support for option to select default technology.
  * Add support for Address Conflict Detection (ACD).
  * Add support for IPv6 iptables management.
- Change in 1.36:
  * Fix issue with DNS short response on error handling.
  * Fix issue with handling incoming DNS requests.
  * Fix issue with handling empty timeserver list.
  * Fix issue with incorrect DHCP byte order.
  * Fix issue with AllowDomainnameUpdates handling.
  * Fix issue with IPv4 link-local IP conflict error.
  * Fix issue with handling WISPr over TLS connections.
  * Fix issue with WiFi background scanning handling.
  * Fix issue with WiFi disconnect+connect race condition.
  * Fix issue with WiFi scanning and tethering operation.
  * Fix issue with WiFi security change handling.
  * Fix issue with missing signal for WPS changes.
  * Fix issue with online check retry handling.
  * Add support for systemd-resolved backend.
  * Add support for mDNS configuration setup.
- Drop connman-1.35-include.patch
- Drop connman-1.35-resolvconf.patch</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1582027200">- Update to 1.38:
  * Fix issue with online check on IP address update.
  * Fix issue with OpenVPN and encrypted private keys.
  * Fix issue with finishing of VPN connections.
  * Add support for updated stable iwd APIs.
  * Add support for WireGuard networks.
- Spec file cleanup</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1613131200">- Update to 1.39 (bsc#1181751):
  * Fix issue with scanning state synchronization and iwd.
  * Fix issue with invalid key with 4-way handshake offloading.
  * Fix issue with DNS proxy length checks to prevent buffer overflow. (CVE-2021-26675)
  * Fix issue with DHCP leaking stack data via uninitialized variable. (CVE-2021-26676)</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1644580800">- Update to 1.41: (bsc#1194177, bsc#1194176, bsc#1194175)
  * Fix issue with RTNL netlink message alignment.
  * Fix issue with dnsproxy and timeout for TCP feature. (CVE-2022-23097, CVE-2022-23096)
  * Fix issue with dnsproxy and busy loop in TCP server. (CVE-2022-23098)
  * Fix issue with WiFi connection with no passphrase.
  * Add support for wpa_supplicant and WPA3-SAE functionality.
  * Add support for D-Bus ObjectManager interface.
- Renamed downstream patches to separate them from upstream patches
  * Rename 0001-connman-1.35-service.patch to 0100-connman-1.35-service.patch
- Add systemd hardening configuration
  * Rename harden_connman-vpn.service.patch to 0101-harden_connman-vpn.service.patch
  * Rename harden_connman-wait-online.service.patch to 0102-harden_connman-wait-online.service.patch
- Disabled openconnect plugin due to version conflict
- Disabled vpnc plugin for i568 missing dependency
- Disabled hh2serial and tist_working for ppc64le due to version conflict</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1659355200">- Add refcounting to wispr portal detection (bsc#1200190)
  * add 0001-wispr-Rename-wispr_portal_list-to-wispr_portal_hash.patch
  * add 0002-wispr-Ignore-NULL-proxy.patch
  * add 0003-wispr-Add-reference-counter-to-portal-context.patch (CVE-2022-32293)
  * add 0004-wispr-Update-portal-context-references.patch (CVE-2022-32293)
- Fix OOB write in received_data (bsc#1200189)
  * add 0005-gweb-Fix-OOB-write-in-received_data.patch (CVE-2022-32292)</changelog>
</package>
<package pkgid="8450c3f409a3679c2c06b6cfde5d1d4c8902f8ae3d50acee6e03e3f4b0406127" name="connman-plugin-openvpn" arch="s390x">
  <version epoch="0" ver="1.41" rel="bp154.2.3.1"/>
  <changelog author="sleep_walker@suse.cz" date="1423224000">- bump to 1.28
  ver 1.28:
  Fix issue with DHCPv6 re-transmission timer.
  Fix issue with DHCP service ID option byte order.
  Fix issue with IPv6 connections and SLAAC/DHCPv6.
  Fix issue with telephony and IPv6 autoconfiguration.
  Fix issue with Bluetooth technology setting changes.
  Fix issue with WiFi autoscan interval calculation.
  Fix issue with WiFi and missing BSS signal strength.
  Add support for IPv4 information for WiFi Display.
  ver 1.27:
  Fix issue with memory leak in IP configuration.
  Fix issue with providing random numbers for DHCP.
  Fix issue with handling IN_MOVED_TO inotify events.
  Fix issue with channel selection for WiFi scanning.
  Add support for handling Bluetooth GN and PANU roles.
  ver 1.26:
  Fix issue with missing WiFi security provisioning support.
  Fix issue with immutable setting and provisioned services.
  Fix issue with scheduling DNS cache cleanup procedure.
  Fix issue with IPv6 Privacy setting on service removal.
  Fix issue with DHCPv6 CONFIRM message sending procedure.
  Fix issue with DHCPv6 lease expiration handling support.
  Fix issue with DHCPv4 networks and broadcast flag handling.
  Fix issue with DHCPv4 networks without gateway configuration.
  Fix issue with P2P Peer authorization handling.
  Fix issue with P2P Peer service registration.
  Add support for WiFi Display information elements.
  Add support for systemd-hostnamed integration.
  ver 1.25:
  Fix issue with handling rebind timer for DHCPv6.
  Fix issue with handling DHCP renew transaction.
  Fix issue with user supplied proxy settings and DHCP.
  Fix issue with extra status codes from captive portals.
  Fix issue with service idle state reset on failure.
  Fix issue with DNS label compression handling.
  Add support for experimental P2P Peer service.
  ver 1.24:
  Fix issue with handling slave interfaces.
  Fix issue with handling DHCPv4 broadcast flag.
  Fix issue with handling DHCPv4 lease expiration.
  Fix issue with handling WiFi auto-scanning timeout.
  Fix issue with handling domain and DNS server changes.
  Fix issue with double free and agent messages.
  ver 1.23:
  Fix issue with memory leak in technology handling.
  Fix issue with not removing host route of OpenVPN.
  Fix issue with double free in DHCP cleanup handling.
  Fix issue with handling DHCP method from oFono.
  Fix issue with IPv6-PD when disabling tethering.
  Fix issue with DNS proxy when disabling tethering.
  Fix issue with Bluetooth start and stop interaction.
  Fix issue with Bluetooth PAN networks on adapter change.
  ver 1.22:
  Fix issue with WPS state synchronization.
  Fix issue with DNS servers and default service.
  Fix issue with DHCP client and rebooting state.
  Add support for NTP exponential backoff handling.
  Add support for NTP kiss-of-death packet handling.
  Add support for Ethernet gadget networking.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1438948800">- bump to 1.29
  Fix issue with IPv6 autoconfiguration when disabled.
  Fix issue with IPv6 temporary route handling.
  Fix issue with IPv6 timers for nameservers.
  Fix issue with DHPCv6 and route configuration.
  Fix issue with DHCPv6 source port and buggy servers.
  Fix issue with DHCPv6 rapid commit option length.
  Fix issue with DHCPv6 rapid commit error handling.
  Fix issue with handling invalid WiFi passphrases.
  Fix issue with connecting Ethernet devices.
  Add support for Ethernet and VLAN usage.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1444737600">- bumpt to 1.30
    Fix issue with pending DNS request during server change.
    Fix issue with empty strings in nameservers configuration.
    Fix issue with time servers during IP configuration change.
    Fix issue with 4-way handshake during roaming.
    Fix issue with open WiFi networks security.
    Fix issue with support for WiFi AnonymousIdentity.
    Fix issue with memory leak and DHCPv6 DUID handling.
    Fix issue with DHCP client and P2P interaction.
    Fix issue with handling provision file updates.
    Fix issue with VPN state updates.
    Disable 6to4 support by default.
- add keyring file
- clean with spec-cleaner
- fix builds for all possible distributions and architectures</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1503403200">- bump to 1.35
  besides other things contains fix for CVE-2017-12865</changelog>
  <changelog author="avvissu@yandex.by" date="1504872000">- Remove obsolete macros
- Add polkit-agent-1 dependency
- Use the %tmpfiles_create macro
- Removal of ldconfig scriptlets from all packages
- Add connman-wait-online.service in post{un}
- Spec file cleanup</changelog>
  <changelog author="avvissu@yandex.by" date="1507032000">- Add connman-1.35-resolvconf.patch
- Activate connman.service if the network services disabled
- Add info in /var/adm/update-messages</changelog>
  <changelog author="avvissu@yandex.by" date="1508414400">- Add configuration file (/etc/connman/main.conf)
- Add ghost lines: main.conf connman connman-vpn</changelog>
  <changelog author="avvissu@yandex.by" date="1508500800">- Remove unrecognized options: disable-gtk-doc, enable-threads,
  disable-iwmx, enable-session-policy</changelog>
  <changelog author="avvissu@yandex.by" date="1509019200">- Change the mode of download_files (sr#521762)
- Remove connman-rpmlintrc (bnc#1057697)
- Add client as a recommended dependency</changelog>
  <changelog author="avvissu@yandex.by" date="1514289600">- Add symlink to network.service (connman-1.35-service.patch)</changelog>
  <changelog author="avvissu@yandex.by" date="1518523200">- Fix build errors due to unsupported header include order with
  newer kernels &gt;=4.15 (connman-1.35-include.patch).</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1557489600">- Update to 1.37:
  * Fix issue with handling invalid gateway addresses.
  * Fix issue with handling updates of default gateway.
  * Fix issue with DHCP servers that require broadcast flag.
  * Add support for option to use gateways as time servers.
  * Add support for option to select default technology.
  * Add support for Address Conflict Detection (ACD).
  * Add support for IPv6 iptables management.
- Change in 1.36:
  * Fix issue with DNS short response on error handling.
  * Fix issue with handling incoming DNS requests.
  * Fix issue with handling empty timeserver list.
  * Fix issue with incorrect DHCP byte order.
  * Fix issue with AllowDomainnameUpdates handling.
  * Fix issue with IPv4 link-local IP conflict error.
  * Fix issue with handling WISPr over TLS connections.
  * Fix issue with WiFi background scanning handling.
  * Fix issue with WiFi disconnect+connect race condition.
  * Fix issue with WiFi scanning and tethering operation.
  * Fix issue with WiFi security change handling.
  * Fix issue with missing signal for WPS changes.
  * Fix issue with online check retry handling.
  * Add support for systemd-resolved backend.
  * Add support for mDNS configuration setup.
- Drop connman-1.35-include.patch
- Drop connman-1.35-resolvconf.patch</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1582027200">- Update to 1.38:
  * Fix issue with online check on IP address update.
  * Fix issue with OpenVPN and encrypted private keys.
  * Fix issue with finishing of VPN connections.
  * Add support for updated stable iwd APIs.
  * Add support for WireGuard networks.
- Spec file cleanup</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1613131200">- Update to 1.39 (bsc#1181751):
  * Fix issue with scanning state synchronization and iwd.
  * Fix issue with invalid key with 4-way handshake offloading.
  * Fix issue with DNS proxy length checks to prevent buffer overflow. (CVE-2021-26675)
  * Fix issue with DHCP leaking stack data via uninitialized variable. (CVE-2021-26676)</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1644580800">- Update to 1.41: (bsc#1194177, bsc#1194176, bsc#1194175)
  * Fix issue with RTNL netlink message alignment.
  * Fix issue with dnsproxy and timeout for TCP feature. (CVE-2022-23097, CVE-2022-23096)
  * Fix issue with dnsproxy and busy loop in TCP server. (CVE-2022-23098)
  * Fix issue with WiFi connection with no passphrase.
  * Add support for wpa_supplicant and WPA3-SAE functionality.
  * Add support for D-Bus ObjectManager interface.
- Renamed downstream patches to separate them from upstream patches
  * Rename 0001-connman-1.35-service.patch to 0100-connman-1.35-service.patch
- Add systemd hardening configuration
  * Rename harden_connman-vpn.service.patch to 0101-harden_connman-vpn.service.patch
  * Rename harden_connman-wait-online.service.patch to 0102-harden_connman-wait-online.service.patch
- Disabled openconnect plugin due to version conflict
- Disabled vpnc plugin for i568 missing dependency
- Disabled hh2serial and tist_working for ppc64le due to version conflict</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1659355200">- Add refcounting to wispr portal detection (bsc#1200190)
  * add 0001-wispr-Rename-wispr_portal_list-to-wispr_portal_hash.patch
  * add 0002-wispr-Ignore-NULL-proxy.patch
  * add 0003-wispr-Add-reference-counter-to-portal-context.patch (CVE-2022-32293)
  * add 0004-wispr-Update-portal-context-references.patch (CVE-2022-32293)
- Fix OOB write in received_data (bsc#1200189)
  * add 0005-gweb-Fix-OOB-write-in-received_data.patch (CVE-2022-32292)</changelog>
</package>
<package pkgid="120e779eaf58c4d2cbe4ae83f0fe9338f7c0a63b1c1ae3348017fd130eeaf2b4" name="connman-plugin-openvpn" arch="x86_64">
  <version epoch="0" ver="1.41" rel="bp154.2.3.1"/>
  <changelog author="sleep_walker@suse.cz" date="1423224000">- bump to 1.28
  ver 1.28:
  Fix issue with DHCPv6 re-transmission timer.
  Fix issue with DHCP service ID option byte order.
  Fix issue with IPv6 connections and SLAAC/DHCPv6.
  Fix issue with telephony and IPv6 autoconfiguration.
  Fix issue with Bluetooth technology setting changes.
  Fix issue with WiFi autoscan interval calculation.
  Fix issue with WiFi and missing BSS signal strength.
  Add support for IPv4 information for WiFi Display.
  ver 1.27:
  Fix issue with memory leak in IP configuration.
  Fix issue with providing random numbers for DHCP.
  Fix issue with handling IN_MOVED_TO inotify events.
  Fix issue with channel selection for WiFi scanning.
  Add support for handling Bluetooth GN and PANU roles.
  ver 1.26:
  Fix issue with missing WiFi security provisioning support.
  Fix issue with immutable setting and provisioned services.
  Fix issue with scheduling DNS cache cleanup procedure.
  Fix issue with IPv6 Privacy setting on service removal.
  Fix issue with DHCPv6 CONFIRM message sending procedure.
  Fix issue with DHCPv6 lease expiration handling support.
  Fix issue with DHCPv4 networks and broadcast flag handling.
  Fix issue with DHCPv4 networks without gateway configuration.
  Fix issue with P2P Peer authorization handling.
  Fix issue with P2P Peer service registration.
  Add support for WiFi Display information elements.
  Add support for systemd-hostnamed integration.
  ver 1.25:
  Fix issue with handling rebind timer for DHCPv6.
  Fix issue with handling DHCP renew transaction.
  Fix issue with user supplied proxy settings and DHCP.
  Fix issue with extra status codes from captive portals.
  Fix issue with service idle state reset on failure.
  Fix issue with DNS label compression handling.
  Add support for experimental P2P Peer service.
  ver 1.24:
  Fix issue with handling slave interfaces.
  Fix issue with handling DHCPv4 broadcast flag.
  Fix issue with handling DHCPv4 lease expiration.
  Fix issue with handling WiFi auto-scanning timeout.
  Fix issue with handling domain and DNS server changes.
  Fix issue with double free and agent messages.
  ver 1.23:
  Fix issue with memory leak in technology handling.
  Fix issue with not removing host route of OpenVPN.
  Fix issue with double free in DHCP cleanup handling.
  Fix issue with handling DHCP method from oFono.
  Fix issue with IPv6-PD when disabling tethering.
  Fix issue with DNS proxy when disabling tethering.
  Fix issue with Bluetooth start and stop interaction.
  Fix issue with Bluetooth PAN networks on adapter change.
  ver 1.22:
  Fix issue with WPS state synchronization.
  Fix issue with DNS servers and default service.
  Fix issue with DHCP client and rebooting state.
  Add support for NTP exponential backoff handling.
  Add support for NTP kiss-of-death packet handling.
  Add support for Ethernet gadget networking.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1438948800">- bump to 1.29
  Fix issue with IPv6 autoconfiguration when disabled.
  Fix issue with IPv6 temporary route handling.
  Fix issue with IPv6 timers for nameservers.
  Fix issue with DHPCv6 and route configuration.
  Fix issue with DHCPv6 source port and buggy servers.
  Fix issue with DHCPv6 rapid commit option length.
  Fix issue with DHCPv6 rapid commit error handling.
  Fix issue with handling invalid WiFi passphrases.
  Fix issue with connecting Ethernet devices.
  Add support for Ethernet and VLAN usage.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1444737600">- bumpt to 1.30
    Fix issue with pending DNS request during server change.
    Fix issue with empty strings in nameservers configuration.
    Fix issue with time servers during IP configuration change.
    Fix issue with 4-way handshake during roaming.
    Fix issue with open WiFi networks security.
    Fix issue with support for WiFi AnonymousIdentity.
    Fix issue with memory leak and DHCPv6 DUID handling.
    Fix issue with DHCP client and P2P interaction.
    Fix issue with handling provision file updates.
    Fix issue with VPN state updates.
    Disable 6to4 support by default.
- add keyring file
- clean with spec-cleaner
- fix builds for all possible distributions and architectures</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1503403200">- bump to 1.35
  besides other things contains fix for CVE-2017-12865</changelog>
  <changelog author="avvissu@yandex.by" date="1504872000">- Remove obsolete macros
- Add polkit-agent-1 dependency
- Use the %tmpfiles_create macro
- Removal of ldconfig scriptlets from all packages
- Add connman-wait-online.service in post{un}
- Spec file cleanup</changelog>
  <changelog author="avvissu@yandex.by" date="1507032000">- Add connman-1.35-resolvconf.patch
- Activate connman.service if the network services disabled
- Add info in /var/adm/update-messages</changelog>
  <changelog author="avvissu@yandex.by" date="1508414400">- Add configuration file (/etc/connman/main.conf)
- Add ghost lines: main.conf connman connman-vpn</changelog>
  <changelog author="avvissu@yandex.by" date="1508500800">- Remove unrecognized options: disable-gtk-doc, enable-threads,
  disable-iwmx, enable-session-policy</changelog>
  <changelog author="avvissu@yandex.by" date="1509019200">- Change the mode of download_files (sr#521762)
- Remove connman-rpmlintrc (bnc#1057697)
- Add client as a recommended dependency</changelog>
  <changelog author="avvissu@yandex.by" date="1514289600">- Add symlink to network.service (connman-1.35-service.patch)</changelog>
  <changelog author="avvissu@yandex.by" date="1518523200">- Fix build errors due to unsupported header include order with
  newer kernels &gt;=4.15 (connman-1.35-include.patch).</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1557489600">- Update to 1.37:
  * Fix issue with handling invalid gateway addresses.
  * Fix issue with handling updates of default gateway.
  * Fix issue with DHCP servers that require broadcast flag.
  * Add support for option to use gateways as time servers.
  * Add support for option to select default technology.
  * Add support for Address Conflict Detection (ACD).
  * Add support for IPv6 iptables management.
- Change in 1.36:
  * Fix issue with DNS short response on error handling.
  * Fix issue with handling incoming DNS requests.
  * Fix issue with handling empty timeserver list.
  * Fix issue with incorrect DHCP byte order.
  * Fix issue with AllowDomainnameUpdates handling.
  * Fix issue with IPv4 link-local IP conflict error.
  * Fix issue with handling WISPr over TLS connections.
  * Fix issue with WiFi background scanning handling.
  * Fix issue with WiFi disconnect+connect race condition.
  * Fix issue with WiFi scanning and tethering operation.
  * Fix issue with WiFi security change handling.
  * Fix issue with missing signal for WPS changes.
  * Fix issue with online check retry handling.
  * Add support for systemd-resolved backend.
  * Add support for mDNS configuration setup.
- Drop connman-1.35-include.patch
- Drop connman-1.35-resolvconf.patch</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1582027200">- Update to 1.38:
  * Fix issue with online check on IP address update.
  * Fix issue with OpenVPN and encrypted private keys.
  * Fix issue with finishing of VPN connections.
  * Add support for updated stable iwd APIs.
  * Add support for WireGuard networks.
- Spec file cleanup</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1613131200">- Update to 1.39 (bsc#1181751):
  * Fix issue with scanning state synchronization and iwd.
  * Fix issue with invalid key with 4-way handshake offloading.
  * Fix issue with DNS proxy length checks to prevent buffer overflow. (CVE-2021-26675)
  * Fix issue with DHCP leaking stack data via uninitialized variable. (CVE-2021-26676)</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1644580800">- Update to 1.41: (bsc#1194177, bsc#1194176, bsc#1194175)
  * Fix issue with RTNL netlink message alignment.
  * Fix issue with dnsproxy and timeout for TCP feature. (CVE-2022-23097, CVE-2022-23096)
  * Fix issue with dnsproxy and busy loop in TCP server. (CVE-2022-23098)
  * Fix issue with WiFi connection with no passphrase.
  * Add support for wpa_supplicant and WPA3-SAE functionality.
  * Add support for D-Bus ObjectManager interface.
- Renamed downstream patches to separate them from upstream patches
  * Rename 0001-connman-1.35-service.patch to 0100-connman-1.35-service.patch
- Add systemd hardening configuration
  * Rename harden_connman-vpn.service.patch to 0101-harden_connman-vpn.service.patch
  * Rename harden_connman-wait-online.service.patch to 0102-harden_connman-wait-online.service.patch
- Disabled openconnect plugin due to version conflict
- Disabled vpnc plugin for i568 missing dependency
- Disabled hh2serial and tist_working for ppc64le due to version conflict</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1659355200">- Add refcounting to wispr portal detection (bsc#1200190)
  * add 0001-wispr-Rename-wispr_portal_list-to-wispr_portal_hash.patch
  * add 0002-wispr-Ignore-NULL-proxy.patch
  * add 0003-wispr-Add-reference-counter-to-portal-context.patch (CVE-2022-32293)
  * add 0004-wispr-Update-portal-context-references.patch (CVE-2022-32293)
- Fix OOB write in received_data (bsc#1200189)
  * add 0005-gweb-Fix-OOB-write-in-received_data.patch (CVE-2022-32292)</changelog>
</package>
<package pkgid="4631652bb975b2e73ab6f84ca5a01faf84b7076d48a1215685dc77d94b9799ca" name="connman-plugin-polkit" arch="aarch64">
  <version epoch="0" ver="1.41" rel="bp154.2.3.1"/>
  <changelog author="sleep_walker@suse.cz" date="1423224000">- bump to 1.28
  ver 1.28:
  Fix issue with DHCPv6 re-transmission timer.
  Fix issue with DHCP service ID option byte order.
  Fix issue with IPv6 connections and SLAAC/DHCPv6.
  Fix issue with telephony and IPv6 autoconfiguration.
  Fix issue with Bluetooth technology setting changes.
  Fix issue with WiFi autoscan interval calculation.
  Fix issue with WiFi and missing BSS signal strength.
  Add support for IPv4 information for WiFi Display.
  ver 1.27:
  Fix issue with memory leak in IP configuration.
  Fix issue with providing random numbers for DHCP.
  Fix issue with handling IN_MOVED_TO inotify events.
  Fix issue with channel selection for WiFi scanning.
  Add support for handling Bluetooth GN and PANU roles.
  ver 1.26:
  Fix issue with missing WiFi security provisioning support.
  Fix issue with immutable setting and provisioned services.
  Fix issue with scheduling DNS cache cleanup procedure.
  Fix issue with IPv6 Privacy setting on service removal.
  Fix issue with DHCPv6 CONFIRM message sending procedure.
  Fix issue with DHCPv6 lease expiration handling support.
  Fix issue with DHCPv4 networks and broadcast flag handling.
  Fix issue with DHCPv4 networks without gateway configuration.
  Fix issue with P2P Peer authorization handling.
  Fix issue with P2P Peer service registration.
  Add support for WiFi Display information elements.
  Add support for systemd-hostnamed integration.
  ver 1.25:
  Fix issue with handling rebind timer for DHCPv6.
  Fix issue with handling DHCP renew transaction.
  Fix issue with user supplied proxy settings and DHCP.
  Fix issue with extra status codes from captive portals.
  Fix issue with service idle state reset on failure.
  Fix issue with DNS label compression handling.
  Add support for experimental P2P Peer service.
  ver 1.24:
  Fix issue with handling slave interfaces.
  Fix issue with handling DHCPv4 broadcast flag.
  Fix issue with handling DHCPv4 lease expiration.
  Fix issue with handling WiFi auto-scanning timeout.
  Fix issue with handling domain and DNS server changes.
  Fix issue with double free and agent messages.
  ver 1.23:
  Fix issue with memory leak in technology handling.
  Fix issue with not removing host route of OpenVPN.
  Fix issue with double free in DHCP cleanup handling.
  Fix issue with handling DHCP method from oFono.
  Fix issue with IPv6-PD when disabling tethering.
  Fix issue with DNS proxy when disabling tethering.
  Fix issue with Bluetooth start and stop interaction.
  Fix issue with Bluetooth PAN networks on adapter change.
  ver 1.22:
  Fix issue with WPS state synchronization.
  Fix issue with DNS servers and default service.
  Fix issue with DHCP client and rebooting state.
  Add support for NTP exponential backoff handling.
  Add support for NTP kiss-of-death packet handling.
  Add support for Ethernet gadget networking.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1438948800">- bump to 1.29
  Fix issue with IPv6 autoconfiguration when disabled.
  Fix issue with IPv6 temporary route handling.
  Fix issue with IPv6 timers for nameservers.
  Fix issue with DHPCv6 and route configuration.
  Fix issue with DHCPv6 source port and buggy servers.
  Fix issue with DHCPv6 rapid commit option length.
  Fix issue with DHCPv6 rapid commit error handling.
  Fix issue with handling invalid WiFi passphrases.
  Fix issue with connecting Ethernet devices.
  Add support for Ethernet and VLAN usage.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1444737600">- bumpt to 1.30
    Fix issue with pending DNS request during server change.
    Fix issue with empty strings in nameservers configuration.
    Fix issue with time servers during IP configuration change.
    Fix issue with 4-way handshake during roaming.
    Fix issue with open WiFi networks security.
    Fix issue with support for WiFi AnonymousIdentity.
    Fix issue with memory leak and DHCPv6 DUID handling.
    Fix issue with DHCP client and P2P interaction.
    Fix issue with handling provision file updates.
    Fix issue with VPN state updates.
    Disable 6to4 support by default.
- add keyring file
- clean with spec-cleaner
- fix builds for all possible distributions and architectures</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1503403200">- bump to 1.35
  besides other things contains fix for CVE-2017-12865</changelog>
  <changelog author="avvissu@yandex.by" date="1504872000">- Remove obsolete macros
- Add polkit-agent-1 dependency
- Use the %tmpfiles_create macro
- Removal of ldconfig scriptlets from all packages
- Add connman-wait-online.service in post{un}
- Spec file cleanup</changelog>
  <changelog author="avvissu@yandex.by" date="1507032000">- Add connman-1.35-resolvconf.patch
- Activate connman.service if the network services disabled
- Add info in /var/adm/update-messages</changelog>
  <changelog author="avvissu@yandex.by" date="1508414400">- Add configuration file (/etc/connman/main.conf)
- Add ghost lines: main.conf connman connman-vpn</changelog>
  <changelog author="avvissu@yandex.by" date="1508500800">- Remove unrecognized options: disable-gtk-doc, enable-threads,
  disable-iwmx, enable-session-policy</changelog>
  <changelog author="avvissu@yandex.by" date="1509019200">- Change the mode of download_files (sr#521762)
- Remove connman-rpmlintrc (bnc#1057697)
- Add client as a recommended dependency</changelog>
  <changelog author="avvissu@yandex.by" date="1514289600">- Add symlink to network.service (connman-1.35-service.patch)</changelog>
  <changelog author="avvissu@yandex.by" date="1518523200">- Fix build errors due to unsupported header include order with
  newer kernels &gt;=4.15 (connman-1.35-include.patch).</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1557489600">- Update to 1.37:
  * Fix issue with handling invalid gateway addresses.
  * Fix issue with handling updates of default gateway.
  * Fix issue with DHCP servers that require broadcast flag.
  * Add support for option to use gateways as time servers.
  * Add support for option to select default technology.
  * Add support for Address Conflict Detection (ACD).
  * Add support for IPv6 iptables management.
- Change in 1.36:
  * Fix issue with DNS short response on error handling.
  * Fix issue with handling incoming DNS requests.
  * Fix issue with handling empty timeserver list.
  * Fix issue with incorrect DHCP byte order.
  * Fix issue with AllowDomainnameUpdates handling.
  * Fix issue with IPv4 link-local IP conflict error.
  * Fix issue with handling WISPr over TLS connections.
  * Fix issue with WiFi background scanning handling.
  * Fix issue with WiFi disconnect+connect race condition.
  * Fix issue with WiFi scanning and tethering operation.
  * Fix issue with WiFi security change handling.
  * Fix issue with missing signal for WPS changes.
  * Fix issue with online check retry handling.
  * Add support for systemd-resolved backend.
  * Add support for mDNS configuration setup.
- Drop connman-1.35-include.patch
- Drop connman-1.35-resolvconf.patch</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1582027200">- Update to 1.38:
  * Fix issue with online check on IP address update.
  * Fix issue with OpenVPN and encrypted private keys.
  * Fix issue with finishing of VPN connections.
  * Add support for updated stable iwd APIs.
  * Add support for WireGuard networks.
- Spec file cleanup</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1613131200">- Update to 1.39 (bsc#1181751):
  * Fix issue with scanning state synchronization and iwd.
  * Fix issue with invalid key with 4-way handshake offloading.
  * Fix issue with DNS proxy length checks to prevent buffer overflow. (CVE-2021-26675)
  * Fix issue with DHCP leaking stack data via uninitialized variable. (CVE-2021-26676)</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1644580800">- Update to 1.41: (bsc#1194177, bsc#1194176, bsc#1194175)
  * Fix issue with RTNL netlink message alignment.
  * Fix issue with dnsproxy and timeout for TCP feature. (CVE-2022-23097, CVE-2022-23096)
  * Fix issue with dnsproxy and busy loop in TCP server. (CVE-2022-23098)
  * Fix issue with WiFi connection with no passphrase.
  * Add support for wpa_supplicant and WPA3-SAE functionality.
  * Add support for D-Bus ObjectManager interface.
- Renamed downstream patches to separate them from upstream patches
  * Rename 0001-connman-1.35-service.patch to 0100-connman-1.35-service.patch
- Add systemd hardening configuration
  * Rename harden_connman-vpn.service.patch to 0101-harden_connman-vpn.service.patch
  * Rename harden_connman-wait-online.service.patch to 0102-harden_connman-wait-online.service.patch
- Disabled openconnect plugin due to version conflict
- Disabled vpnc plugin for i568 missing dependency
- Disabled hh2serial and tist_working for ppc64le due to version conflict</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1659355200">- Add refcounting to wispr portal detection (bsc#1200190)
  * add 0001-wispr-Rename-wispr_portal_list-to-wispr_portal_hash.patch
  * add 0002-wispr-Ignore-NULL-proxy.patch
  * add 0003-wispr-Add-reference-counter-to-portal-context.patch (CVE-2022-32293)
  * add 0004-wispr-Update-portal-context-references.patch (CVE-2022-32293)
- Fix OOB write in received_data (bsc#1200189)
  * add 0005-gweb-Fix-OOB-write-in-received_data.patch (CVE-2022-32292)</changelog>
</package>
<package pkgid="4c23d9bd2287c4fb2e867cefa29f7c4e9fb59fcdfcdf18b5201c488a17bfe990" name="connman-plugin-polkit" arch="i586">
  <version epoch="0" ver="1.41" rel="bp154.2.3.1"/>
  <changelog author="sleep_walker@suse.cz" date="1423224000">- bump to 1.28
  ver 1.28:
  Fix issue with DHCPv6 re-transmission timer.
  Fix issue with DHCP service ID option byte order.
  Fix issue with IPv6 connections and SLAAC/DHCPv6.
  Fix issue with telephony and IPv6 autoconfiguration.
  Fix issue with Bluetooth technology setting changes.
  Fix issue with WiFi autoscan interval calculation.
  Fix issue with WiFi and missing BSS signal strength.
  Add support for IPv4 information for WiFi Display.
  ver 1.27:
  Fix issue with memory leak in IP configuration.
  Fix issue with providing random numbers for DHCP.
  Fix issue with handling IN_MOVED_TO inotify events.
  Fix issue with channel selection for WiFi scanning.
  Add support for handling Bluetooth GN and PANU roles.
  ver 1.26:
  Fix issue with missing WiFi security provisioning support.
  Fix issue with immutable setting and provisioned services.
  Fix issue with scheduling DNS cache cleanup procedure.
  Fix issue with IPv6 Privacy setting on service removal.
  Fix issue with DHCPv6 CONFIRM message sending procedure.
  Fix issue with DHCPv6 lease expiration handling support.
  Fix issue with DHCPv4 networks and broadcast flag handling.
  Fix issue with DHCPv4 networks without gateway configuration.
  Fix issue with P2P Peer authorization handling.
  Fix issue with P2P Peer service registration.
  Add support for WiFi Display information elements.
  Add support for systemd-hostnamed integration.
  ver 1.25:
  Fix issue with handling rebind timer for DHCPv6.
  Fix issue with handling DHCP renew transaction.
  Fix issue with user supplied proxy settings and DHCP.
  Fix issue with extra status codes from captive portals.
  Fix issue with service idle state reset on failure.
  Fix issue with DNS label compression handling.
  Add support for experimental P2P Peer service.
  ver 1.24:
  Fix issue with handling slave interfaces.
  Fix issue with handling DHCPv4 broadcast flag.
  Fix issue with handling DHCPv4 lease expiration.
  Fix issue with handling WiFi auto-scanning timeout.
  Fix issue with handling domain and DNS server changes.
  Fix issue with double free and agent messages.
  ver 1.23:
  Fix issue with memory leak in technology handling.
  Fix issue with not removing host route of OpenVPN.
  Fix issue with double free in DHCP cleanup handling.
  Fix issue with handling DHCP method from oFono.
  Fix issue with IPv6-PD when disabling tethering.
  Fix issue with DNS proxy when disabling tethering.
  Fix issue with Bluetooth start and stop interaction.
  Fix issue with Bluetooth PAN networks on adapter change.
  ver 1.22:
  Fix issue with WPS state synchronization.
  Fix issue with DNS servers and default service.
  Fix issue with DHCP client and rebooting state.
  Add support for NTP exponential backoff handling.
  Add support for NTP kiss-of-death packet handling.
  Add support for Ethernet gadget networking.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1438948800">- bump to 1.29
  Fix issue with IPv6 autoconfiguration when disabled.
  Fix issue with IPv6 temporary route handling.
  Fix issue with IPv6 timers for nameservers.
  Fix issue with DHPCv6 and route configuration.
  Fix issue with DHCPv6 source port and buggy servers.
  Fix issue with DHCPv6 rapid commit option length.
  Fix issue with DHCPv6 rapid commit error handling.
  Fix issue with handling invalid WiFi passphrases.
  Fix issue with connecting Ethernet devices.
  Add support for Ethernet and VLAN usage.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1444737600">- bumpt to 1.30
    Fix issue with pending DNS request during server change.
    Fix issue with empty strings in nameservers configuration.
    Fix issue with time servers during IP configuration change.
    Fix issue with 4-way handshake during roaming.
    Fix issue with open WiFi networks security.
    Fix issue with support for WiFi AnonymousIdentity.
    Fix issue with memory leak and DHCPv6 DUID handling.
    Fix issue with DHCP client and P2P interaction.
    Fix issue with handling provision file updates.
    Fix issue with VPN state updates.
    Disable 6to4 support by default.
- add keyring file
- clean with spec-cleaner
- fix builds for all possible distributions and architectures</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1503403200">- bump to 1.35
  besides other things contains fix for CVE-2017-12865</changelog>
  <changelog author="avvissu@yandex.by" date="1504872000">- Remove obsolete macros
- Add polkit-agent-1 dependency
- Use the %tmpfiles_create macro
- Removal of ldconfig scriptlets from all packages
- Add connman-wait-online.service in post{un}
- Spec file cleanup</changelog>
  <changelog author="avvissu@yandex.by" date="1507032000">- Add connman-1.35-resolvconf.patch
- Activate connman.service if the network services disabled
- Add info in /var/adm/update-messages</changelog>
  <changelog author="avvissu@yandex.by" date="1508414400">- Add configuration file (/etc/connman/main.conf)
- Add ghost lines: main.conf connman connman-vpn</changelog>
  <changelog author="avvissu@yandex.by" date="1508500800">- Remove unrecognized options: disable-gtk-doc, enable-threads,
  disable-iwmx, enable-session-policy</changelog>
  <changelog author="avvissu@yandex.by" date="1509019200">- Change the mode of download_files (sr#521762)
- Remove connman-rpmlintrc (bnc#1057697)
- Add client as a recommended dependency</changelog>
  <changelog author="avvissu@yandex.by" date="1514289600">- Add symlink to network.service (connman-1.35-service.patch)</changelog>
  <changelog author="avvissu@yandex.by" date="1518523200">- Fix build errors due to unsupported header include order with
  newer kernels &gt;=4.15 (connman-1.35-include.patch).</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1557489600">- Update to 1.37:
  * Fix issue with handling invalid gateway addresses.
  * Fix issue with handling updates of default gateway.
  * Fix issue with DHCP servers that require broadcast flag.
  * Add support for option to use gateways as time servers.
  * Add support for option to select default technology.
  * Add support for Address Conflict Detection (ACD).
  * Add support for IPv6 iptables management.
- Change in 1.36:
  * Fix issue with DNS short response on error handling.
  * Fix issue with handling incoming DNS requests.
  * Fix issue with handling empty timeserver list.
  * Fix issue with incorrect DHCP byte order.
  * Fix issue with AllowDomainnameUpdates handling.
  * Fix issue with IPv4 link-local IP conflict error.
  * Fix issue with handling WISPr over TLS connections.
  * Fix issue with WiFi background scanning handling.
  * Fix issue with WiFi disconnect+connect race condition.
  * Fix issue with WiFi scanning and tethering operation.
  * Fix issue with WiFi security change handling.
  * Fix issue with missing signal for WPS changes.
  * Fix issue with online check retry handling.
  * Add support for systemd-resolved backend.
  * Add support for mDNS configuration setup.
- Drop connman-1.35-include.patch
- Drop connman-1.35-resolvconf.patch</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1582027200">- Update to 1.38:
  * Fix issue with online check on IP address update.
  * Fix issue with OpenVPN and encrypted private keys.
  * Fix issue with finishing of VPN connections.
  * Add support for updated stable iwd APIs.
  * Add support for WireGuard networks.
- Spec file cleanup</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1613131200">- Update to 1.39 (bsc#1181751):
  * Fix issue with scanning state synchronization and iwd.
  * Fix issue with invalid key with 4-way handshake offloading.
  * Fix issue with DNS proxy length checks to prevent buffer overflow. (CVE-2021-26675)
  * Fix issue with DHCP leaking stack data via uninitialized variable. (CVE-2021-26676)</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1644580800">- Update to 1.41: (bsc#1194177, bsc#1194176, bsc#1194175)
  * Fix issue with RTNL netlink message alignment.
  * Fix issue with dnsproxy and timeout for TCP feature. (CVE-2022-23097, CVE-2022-23096)
  * Fix issue with dnsproxy and busy loop in TCP server. (CVE-2022-23098)
  * Fix issue with WiFi connection with no passphrase.
  * Add support for wpa_supplicant and WPA3-SAE functionality.
  * Add support for D-Bus ObjectManager interface.
- Renamed downstream patches to separate them from upstream patches
  * Rename 0001-connman-1.35-service.patch to 0100-connman-1.35-service.patch
- Add systemd hardening configuration
  * Rename harden_connman-vpn.service.patch to 0101-harden_connman-vpn.service.patch
  * Rename harden_connman-wait-online.service.patch to 0102-harden_connman-wait-online.service.patch
- Disabled openconnect plugin due to version conflict
- Disabled vpnc plugin for i568 missing dependency
- Disabled hh2serial and tist_working for ppc64le due to version conflict</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1659355200">- Add refcounting to wispr portal detection (bsc#1200190)
  * add 0001-wispr-Rename-wispr_portal_list-to-wispr_portal_hash.patch
  * add 0002-wispr-Ignore-NULL-proxy.patch
  * add 0003-wispr-Add-reference-counter-to-portal-context.patch (CVE-2022-32293)
  * add 0004-wispr-Update-portal-context-references.patch (CVE-2022-32293)
- Fix OOB write in received_data (bsc#1200189)
  * add 0005-gweb-Fix-OOB-write-in-received_data.patch (CVE-2022-32292)</changelog>
</package>
<package pkgid="11826dcfd6efb28b2d22055936c5ecfd7d90e6777344888673f820ac13be3da4" name="connman-plugin-polkit" arch="ppc64le">
  <version epoch="0" ver="1.41" rel="bp154.2.3.1"/>
  <changelog author="sleep_walker@suse.cz" date="1423224000">- bump to 1.28
  ver 1.28:
  Fix issue with DHCPv6 re-transmission timer.
  Fix issue with DHCP service ID option byte order.
  Fix issue with IPv6 connections and SLAAC/DHCPv6.
  Fix issue with telephony and IPv6 autoconfiguration.
  Fix issue with Bluetooth technology setting changes.
  Fix issue with WiFi autoscan interval calculation.
  Fix issue with WiFi and missing BSS signal strength.
  Add support for IPv4 information for WiFi Display.
  ver 1.27:
  Fix issue with memory leak in IP configuration.
  Fix issue with providing random numbers for DHCP.
  Fix issue with handling IN_MOVED_TO inotify events.
  Fix issue with channel selection for WiFi scanning.
  Add support for handling Bluetooth GN and PANU roles.
  ver 1.26:
  Fix issue with missing WiFi security provisioning support.
  Fix issue with immutable setting and provisioned services.
  Fix issue with scheduling DNS cache cleanup procedure.
  Fix issue with IPv6 Privacy setting on service removal.
  Fix issue with DHCPv6 CONFIRM message sending procedure.
  Fix issue with DHCPv6 lease expiration handling support.
  Fix issue with DHCPv4 networks and broadcast flag handling.
  Fix issue with DHCPv4 networks without gateway configuration.
  Fix issue with P2P Peer authorization handling.
  Fix issue with P2P Peer service registration.
  Add support for WiFi Display information elements.
  Add support for systemd-hostnamed integration.
  ver 1.25:
  Fix issue with handling rebind timer for DHCPv6.
  Fix issue with handling DHCP renew transaction.
  Fix issue with user supplied proxy settings and DHCP.
  Fix issue with extra status codes from captive portals.
  Fix issue with service idle state reset on failure.
  Fix issue with DNS label compression handling.
  Add support for experimental P2P Peer service.
  ver 1.24:
  Fix issue with handling slave interfaces.
  Fix issue with handling DHCPv4 broadcast flag.
  Fix issue with handling DHCPv4 lease expiration.
  Fix issue with handling WiFi auto-scanning timeout.
  Fix issue with handling domain and DNS server changes.
  Fix issue with double free and agent messages.
  ver 1.23:
  Fix issue with memory leak in technology handling.
  Fix issue with not removing host route of OpenVPN.
  Fix issue with double free in DHCP cleanup handling.
  Fix issue with handling DHCP method from oFono.
  Fix issue with IPv6-PD when disabling tethering.
  Fix issue with DNS proxy when disabling tethering.
  Fix issue with Bluetooth start and stop interaction.
  Fix issue with Bluetooth PAN networks on adapter change.
  ver 1.22:
  Fix issue with WPS state synchronization.
  Fix issue with DNS servers and default service.
  Fix issue with DHCP client and rebooting state.
  Add support for NTP exponential backoff handling.
  Add support for NTP kiss-of-death packet handling.
  Add support for Ethernet gadget networking.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1438948800">- bump to 1.29
  Fix issue with IPv6 autoconfiguration when disabled.
  Fix issue with IPv6 temporary route handling.
  Fix issue with IPv6 timers for nameservers.
  Fix issue with DHPCv6 and route configuration.
  Fix issue with DHCPv6 source port and buggy servers.
  Fix issue with DHCPv6 rapid commit option length.
  Fix issue with DHCPv6 rapid commit error handling.
  Fix issue with handling invalid WiFi passphrases.
  Fix issue with connecting Ethernet devices.
  Add support for Ethernet and VLAN usage.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1444737600">- bumpt to 1.30
    Fix issue with pending DNS request during server change.
    Fix issue with empty strings in nameservers configuration.
    Fix issue with time servers during IP configuration change.
    Fix issue with 4-way handshake during roaming.
    Fix issue with open WiFi networks security.
    Fix issue with support for WiFi AnonymousIdentity.
    Fix issue with memory leak and DHCPv6 DUID handling.
    Fix issue with DHCP client and P2P interaction.
    Fix issue with handling provision file updates.
    Fix issue with VPN state updates.
    Disable 6to4 support by default.
- add keyring file
- clean with spec-cleaner
- fix builds for all possible distributions and architectures</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1503403200">- bump to 1.35
  besides other things contains fix for CVE-2017-12865</changelog>
  <changelog author="avvissu@yandex.by" date="1504872000">- Remove obsolete macros
- Add polkit-agent-1 dependency
- Use the %tmpfiles_create macro
- Removal of ldconfig scriptlets from all packages
- Add connman-wait-online.service in post{un}
- Spec file cleanup</changelog>
  <changelog author="avvissu@yandex.by" date="1507032000">- Add connman-1.35-resolvconf.patch
- Activate connman.service if the network services disabled
- Add info in /var/adm/update-messages</changelog>
  <changelog author="avvissu@yandex.by" date="1508414400">- Add configuration file (/etc/connman/main.conf)
- Add ghost lines: main.conf connman connman-vpn</changelog>
  <changelog author="avvissu@yandex.by" date="1508500800">- Remove unrecognized options: disable-gtk-doc, enable-threads,
  disable-iwmx, enable-session-policy</changelog>
  <changelog author="avvissu@yandex.by" date="1509019200">- Change the mode of download_files (sr#521762)
- Remove connman-rpmlintrc (bnc#1057697)
- Add client as a recommended dependency</changelog>
  <changelog author="avvissu@yandex.by" date="1514289600">- Add symlink to network.service (connman-1.35-service.patch)</changelog>
  <changelog author="avvissu@yandex.by" date="1518523200">- Fix build errors due to unsupported header include order with
  newer kernels &gt;=4.15 (connman-1.35-include.patch).</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1557489600">- Update to 1.37:
  * Fix issue with handling invalid gateway addresses.
  * Fix issue with handling updates of default gateway.
  * Fix issue with DHCP servers that require broadcast flag.
  * Add support for option to use gateways as time servers.
  * Add support for option to select default technology.
  * Add support for Address Conflict Detection (ACD).
  * Add support for IPv6 iptables management.
- Change in 1.36:
  * Fix issue with DNS short response on error handling.
  * Fix issue with handling incoming DNS requests.
  * Fix issue with handling empty timeserver list.
  * Fix issue with incorrect DHCP byte order.
  * Fix issue with AllowDomainnameUpdates handling.
  * Fix issue with IPv4 link-local IP conflict error.
  * Fix issue with handling WISPr over TLS connections.
  * Fix issue with WiFi background scanning handling.
  * Fix issue with WiFi disconnect+connect race condition.
  * Fix issue with WiFi scanning and tethering operation.
  * Fix issue with WiFi security change handling.
  * Fix issue with missing signal for WPS changes.
  * Fix issue with online check retry handling.
  * Add support for systemd-resolved backend.
  * Add support for mDNS configuration setup.
- Drop connman-1.35-include.patch
- Drop connman-1.35-resolvconf.patch</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1582027200">- Update to 1.38:
  * Fix issue with online check on IP address update.
  * Fix issue with OpenVPN and encrypted private keys.
  * Fix issue with finishing of VPN connections.
  * Add support for updated stable iwd APIs.
  * Add support for WireGuard networks.
- Spec file cleanup</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1613131200">- Update to 1.39 (bsc#1181751):
  * Fix issue with scanning state synchronization and iwd.
  * Fix issue with invalid key with 4-way handshake offloading.
  * Fix issue with DNS proxy length checks to prevent buffer overflow. (CVE-2021-26675)
  * Fix issue with DHCP leaking stack data via uninitialized variable. (CVE-2021-26676)</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1644580800">- Update to 1.41: (bsc#1194177, bsc#1194176, bsc#1194175)
  * Fix issue with RTNL netlink message alignment.
  * Fix issue with dnsproxy and timeout for TCP feature. (CVE-2022-23097, CVE-2022-23096)
  * Fix issue with dnsproxy and busy loop in TCP server. (CVE-2022-23098)
  * Fix issue with WiFi connection with no passphrase.
  * Add support for wpa_supplicant and WPA3-SAE functionality.
  * Add support for D-Bus ObjectManager interface.
- Renamed downstream patches to separate them from upstream patches
  * Rename 0001-connman-1.35-service.patch to 0100-connman-1.35-service.patch
- Add systemd hardening configuration
  * Rename harden_connman-vpn.service.patch to 0101-harden_connman-vpn.service.patch
  * Rename harden_connman-wait-online.service.patch to 0102-harden_connman-wait-online.service.patch
- Disabled openconnect plugin due to version conflict
- Disabled vpnc plugin for i568 missing dependency
- Disabled hh2serial and tist_working for ppc64le due to version conflict</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1659355200">- Add refcounting to wispr portal detection (bsc#1200190)
  * add 0001-wispr-Rename-wispr_portal_list-to-wispr_portal_hash.patch
  * add 0002-wispr-Ignore-NULL-proxy.patch
  * add 0003-wispr-Add-reference-counter-to-portal-context.patch (CVE-2022-32293)
  * add 0004-wispr-Update-portal-context-references.patch (CVE-2022-32293)
- Fix OOB write in received_data (bsc#1200189)
  * add 0005-gweb-Fix-OOB-write-in-received_data.patch (CVE-2022-32292)</changelog>
</package>
<package pkgid="e3f11e3019d1f021cdcf1834f2989e91338a6af4bae2db7e2b8d584534793f7f" name="connman-plugin-polkit" arch="s390x">
  <version epoch="0" ver="1.41" rel="bp154.2.3.1"/>
  <changelog author="sleep_walker@suse.cz" date="1423224000">- bump to 1.28
  ver 1.28:
  Fix issue with DHCPv6 re-transmission timer.
  Fix issue with DHCP service ID option byte order.
  Fix issue with IPv6 connections and SLAAC/DHCPv6.
  Fix issue with telephony and IPv6 autoconfiguration.
  Fix issue with Bluetooth technology setting changes.
  Fix issue with WiFi autoscan interval calculation.
  Fix issue with WiFi and missing BSS signal strength.
  Add support for IPv4 information for WiFi Display.
  ver 1.27:
  Fix issue with memory leak in IP configuration.
  Fix issue with providing random numbers for DHCP.
  Fix issue with handling IN_MOVED_TO inotify events.
  Fix issue with channel selection for WiFi scanning.
  Add support for handling Bluetooth GN and PANU roles.
  ver 1.26:
  Fix issue with missing WiFi security provisioning support.
  Fix issue with immutable setting and provisioned services.
  Fix issue with scheduling DNS cache cleanup procedure.
  Fix issue with IPv6 Privacy setting on service removal.
  Fix issue with DHCPv6 CONFIRM message sending procedure.
  Fix issue with DHCPv6 lease expiration handling support.
  Fix issue with DHCPv4 networks and broadcast flag handling.
  Fix issue with DHCPv4 networks without gateway configuration.
  Fix issue with P2P Peer authorization handling.
  Fix issue with P2P Peer service registration.
  Add support for WiFi Display information elements.
  Add support for systemd-hostnamed integration.
  ver 1.25:
  Fix issue with handling rebind timer for DHCPv6.
  Fix issue with handling DHCP renew transaction.
  Fix issue with user supplied proxy settings and DHCP.
  Fix issue with extra status codes from captive portals.
  Fix issue with service idle state reset on failure.
  Fix issue with DNS label compression handling.
  Add support for experimental P2P Peer service.
  ver 1.24:
  Fix issue with handling slave interfaces.
  Fix issue with handling DHCPv4 broadcast flag.
  Fix issue with handling DHCPv4 lease expiration.
  Fix issue with handling WiFi auto-scanning timeout.
  Fix issue with handling domain and DNS server changes.
  Fix issue with double free and agent messages.
  ver 1.23:
  Fix issue with memory leak in technology handling.
  Fix issue with not removing host route of OpenVPN.
  Fix issue with double free in DHCP cleanup handling.
  Fix issue with handling DHCP method from oFono.
  Fix issue with IPv6-PD when disabling tethering.
  Fix issue with DNS proxy when disabling tethering.
  Fix issue with Bluetooth start and stop interaction.
  Fix issue with Bluetooth PAN networks on adapter change.
  ver 1.22:
  Fix issue with WPS state synchronization.
  Fix issue with DNS servers and default service.
  Fix issue with DHCP client and rebooting state.
  Add support for NTP exponential backoff handling.
  Add support for NTP kiss-of-death packet handling.
  Add support for Ethernet gadget networking.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1438948800">- bump to 1.29
  Fix issue with IPv6 autoconfiguration when disabled.
  Fix issue with IPv6 temporary route handling.
  Fix issue with IPv6 timers for nameservers.
  Fix issue with DHPCv6 and route configuration.
  Fix issue with DHCPv6 source port and buggy servers.
  Fix issue with DHCPv6 rapid commit option length.
  Fix issue with DHCPv6 rapid commit error handling.
  Fix issue with handling invalid WiFi passphrases.
  Fix issue with connecting Ethernet devices.
  Add support for Ethernet and VLAN usage.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1444737600">- bumpt to 1.30
    Fix issue with pending DNS request during server change.
    Fix issue with empty strings in nameservers configuration.
    Fix issue with time servers during IP configuration change.
    Fix issue with 4-way handshake during roaming.
    Fix issue with open WiFi networks security.
    Fix issue with support for WiFi AnonymousIdentity.
    Fix issue with memory leak and DHCPv6 DUID handling.
    Fix issue with DHCP client and P2P interaction.
    Fix issue with handling provision file updates.
    Fix issue with VPN state updates.
    Disable 6to4 support by default.
- add keyring file
- clean with spec-cleaner
- fix builds for all possible distributions and architectures</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1503403200">- bump to 1.35
  besides other things contains fix for CVE-2017-12865</changelog>
  <changelog author="avvissu@yandex.by" date="1504872000">- Remove obsolete macros
- Add polkit-agent-1 dependency
- Use the %tmpfiles_create macro
- Removal of ldconfig scriptlets from all packages
- Add connman-wait-online.service in post{un}
- Spec file cleanup</changelog>
  <changelog author="avvissu@yandex.by" date="1507032000">- Add connman-1.35-resolvconf.patch
- Activate connman.service if the network services disabled
- Add info in /var/adm/update-messages</changelog>
  <changelog author="avvissu@yandex.by" date="1508414400">- Add configuration file (/etc/connman/main.conf)
- Add ghost lines: main.conf connman connman-vpn</changelog>
  <changelog author="avvissu@yandex.by" date="1508500800">- Remove unrecognized options: disable-gtk-doc, enable-threads,
  disable-iwmx, enable-session-policy</changelog>
  <changelog author="avvissu@yandex.by" date="1509019200">- Change the mode of download_files (sr#521762)
- Remove connman-rpmlintrc (bnc#1057697)
- Add client as a recommended dependency</changelog>
  <changelog author="avvissu@yandex.by" date="1514289600">- Add symlink to network.service (connman-1.35-service.patch)</changelog>
  <changelog author="avvissu@yandex.by" date="1518523200">- Fix build errors due to unsupported header include order with
  newer kernels &gt;=4.15 (connman-1.35-include.patch).</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1557489600">- Update to 1.37:
  * Fix issue with handling invalid gateway addresses.
  * Fix issue with handling updates of default gateway.
  * Fix issue with DHCP servers that require broadcast flag.
  * Add support for option to use gateways as time servers.
  * Add support for option to select default technology.
  * Add support for Address Conflict Detection (ACD).
  * Add support for IPv6 iptables management.
- Change in 1.36:
  * Fix issue with DNS short response on error handling.
  * Fix issue with handling incoming DNS requests.
  * Fix issue with handling empty timeserver list.
  * Fix issue with incorrect DHCP byte order.
  * Fix issue with AllowDomainnameUpdates handling.
  * Fix issue with IPv4 link-local IP conflict error.
  * Fix issue with handling WISPr over TLS connections.
  * Fix issue with WiFi background scanning handling.
  * Fix issue with WiFi disconnect+connect race condition.
  * Fix issue with WiFi scanning and tethering operation.
  * Fix issue with WiFi security change handling.
  * Fix issue with missing signal for WPS changes.
  * Fix issue with online check retry handling.
  * Add support for systemd-resolved backend.
  * Add support for mDNS configuration setup.
- Drop connman-1.35-include.patch
- Drop connman-1.35-resolvconf.patch</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1582027200">- Update to 1.38:
  * Fix issue with online check on IP address update.
  * Fix issue with OpenVPN and encrypted private keys.
  * Fix issue with finishing of VPN connections.
  * Add support for updated stable iwd APIs.
  * Add support for WireGuard networks.
- Spec file cleanup</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1613131200">- Update to 1.39 (bsc#1181751):
  * Fix issue with scanning state synchronization and iwd.
  * Fix issue with invalid key with 4-way handshake offloading.
  * Fix issue with DNS proxy length checks to prevent buffer overflow. (CVE-2021-26675)
  * Fix issue with DHCP leaking stack data via uninitialized variable. (CVE-2021-26676)</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1644580800">- Update to 1.41: (bsc#1194177, bsc#1194176, bsc#1194175)
  * Fix issue with RTNL netlink message alignment.
  * Fix issue with dnsproxy and timeout for TCP feature. (CVE-2022-23097, CVE-2022-23096)
  * Fix issue with dnsproxy and busy loop in TCP server. (CVE-2022-23098)
  * Fix issue with WiFi connection with no passphrase.
  * Add support for wpa_supplicant and WPA3-SAE functionality.
  * Add support for D-Bus ObjectManager interface.
- Renamed downstream patches to separate them from upstream patches
  * Rename 0001-connman-1.35-service.patch to 0100-connman-1.35-service.patch
- Add systemd hardening configuration
  * Rename harden_connman-vpn.service.patch to 0101-harden_connman-vpn.service.patch
  * Rename harden_connman-wait-online.service.patch to 0102-harden_connman-wait-online.service.patch
- Disabled openconnect plugin due to version conflict
- Disabled vpnc plugin for i568 missing dependency
- Disabled hh2serial and tist_working for ppc64le due to version conflict</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1659355200">- Add refcounting to wispr portal detection (bsc#1200190)
  * add 0001-wispr-Rename-wispr_portal_list-to-wispr_portal_hash.patch
  * add 0002-wispr-Ignore-NULL-proxy.patch
  * add 0003-wispr-Add-reference-counter-to-portal-context.patch (CVE-2022-32293)
  * add 0004-wispr-Update-portal-context-references.patch (CVE-2022-32293)
- Fix OOB write in received_data (bsc#1200189)
  * add 0005-gweb-Fix-OOB-write-in-received_data.patch (CVE-2022-32292)</changelog>
</package>
<package pkgid="e64af96242839b69bd200cd3242028293a3a5917fc2fc97286e8fe3401135dcc" name="connman-plugin-polkit" arch="x86_64">
  <version epoch="0" ver="1.41" rel="bp154.2.3.1"/>
  <changelog author="sleep_walker@suse.cz" date="1423224000">- bump to 1.28
  ver 1.28:
  Fix issue with DHCPv6 re-transmission timer.
  Fix issue with DHCP service ID option byte order.
  Fix issue with IPv6 connections and SLAAC/DHCPv6.
  Fix issue with telephony and IPv6 autoconfiguration.
  Fix issue with Bluetooth technology setting changes.
  Fix issue with WiFi autoscan interval calculation.
  Fix issue with WiFi and missing BSS signal strength.
  Add support for IPv4 information for WiFi Display.
  ver 1.27:
  Fix issue with memory leak in IP configuration.
  Fix issue with providing random numbers for DHCP.
  Fix issue with handling IN_MOVED_TO inotify events.
  Fix issue with channel selection for WiFi scanning.
  Add support for handling Bluetooth GN and PANU roles.
  ver 1.26:
  Fix issue with missing WiFi security provisioning support.
  Fix issue with immutable setting and provisioned services.
  Fix issue with scheduling DNS cache cleanup procedure.
  Fix issue with IPv6 Privacy setting on service removal.
  Fix issue with DHCPv6 CONFIRM message sending procedure.
  Fix issue with DHCPv6 lease expiration handling support.
  Fix issue with DHCPv4 networks and broadcast flag handling.
  Fix issue with DHCPv4 networks without gateway configuration.
  Fix issue with P2P Peer authorization handling.
  Fix issue with P2P Peer service registration.
  Add support for WiFi Display information elements.
  Add support for systemd-hostnamed integration.
  ver 1.25:
  Fix issue with handling rebind timer for DHCPv6.
  Fix issue with handling DHCP renew transaction.
  Fix issue with user supplied proxy settings and DHCP.
  Fix issue with extra status codes from captive portals.
  Fix issue with service idle state reset on failure.
  Fix issue with DNS label compression handling.
  Add support for experimental P2P Peer service.
  ver 1.24:
  Fix issue with handling slave interfaces.
  Fix issue with handling DHCPv4 broadcast flag.
  Fix issue with handling DHCPv4 lease expiration.
  Fix issue with handling WiFi auto-scanning timeout.
  Fix issue with handling domain and DNS server changes.
  Fix issue with double free and agent messages.
  ver 1.23:
  Fix issue with memory leak in technology handling.
  Fix issue with not removing host route of OpenVPN.
  Fix issue with double free in DHCP cleanup handling.
  Fix issue with handling DHCP method from oFono.
  Fix issue with IPv6-PD when disabling tethering.
  Fix issue with DNS proxy when disabling tethering.
  Fix issue with Bluetooth start and stop interaction.
  Fix issue with Bluetooth PAN networks on adapter change.
  ver 1.22:
  Fix issue with WPS state synchronization.
  Fix issue with DNS servers and default service.
  Fix issue with DHCP client and rebooting state.
  Add support for NTP exponential backoff handling.
  Add support for NTP kiss-of-death packet handling.
  Add support for Ethernet gadget networking.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1438948800">- bump to 1.29
  Fix issue with IPv6 autoconfiguration when disabled.
  Fix issue with IPv6 temporary route handling.
  Fix issue with IPv6 timers for nameservers.
  Fix issue with DHPCv6 and route configuration.
  Fix issue with DHCPv6 source port and buggy servers.
  Fix issue with DHCPv6 rapid commit option length.
  Fix issue with DHCPv6 rapid commit error handling.
  Fix issue with handling invalid WiFi passphrases.
  Fix issue with connecting Ethernet devices.
  Add support for Ethernet and VLAN usage.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1444737600">- bumpt to 1.30
    Fix issue with pending DNS request during server change.
    Fix issue with empty strings in nameservers configuration.
    Fix issue with time servers during IP configuration change.
    Fix issue with 4-way handshake during roaming.
    Fix issue with open WiFi networks security.
    Fix issue with support for WiFi AnonymousIdentity.
    Fix issue with memory leak and DHCPv6 DUID handling.
    Fix issue with DHCP client and P2P interaction.
    Fix issue with handling provision file updates.
    Fix issue with VPN state updates.
    Disable 6to4 support by default.
- add keyring file
- clean with spec-cleaner
- fix builds for all possible distributions and architectures</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1503403200">- bump to 1.35
  besides other things contains fix for CVE-2017-12865</changelog>
  <changelog author="avvissu@yandex.by" date="1504872000">- Remove obsolete macros
- Add polkit-agent-1 dependency
- Use the %tmpfiles_create macro
- Removal of ldconfig scriptlets from all packages
- Add connman-wait-online.service in post{un}
- Spec file cleanup</changelog>
  <changelog author="avvissu@yandex.by" date="1507032000">- Add connman-1.35-resolvconf.patch
- Activate connman.service if the network services disabled
- Add info in /var/adm/update-messages</changelog>
  <changelog author="avvissu@yandex.by" date="1508414400">- Add configuration file (/etc/connman/main.conf)
- Add ghost lines: main.conf connman connman-vpn</changelog>
  <changelog author="avvissu@yandex.by" date="1508500800">- Remove unrecognized options: disable-gtk-doc, enable-threads,
  disable-iwmx, enable-session-policy</changelog>
  <changelog author="avvissu@yandex.by" date="1509019200">- Change the mode of download_files (sr#521762)
- Remove connman-rpmlintrc (bnc#1057697)
- Add client as a recommended dependency</changelog>
  <changelog author="avvissu@yandex.by" date="1514289600">- Add symlink to network.service (connman-1.35-service.patch)</changelog>
  <changelog author="avvissu@yandex.by" date="1518523200">- Fix build errors due to unsupported header include order with
  newer kernels &gt;=4.15 (connman-1.35-include.patch).</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1557489600">- Update to 1.37:
  * Fix issue with handling invalid gateway addresses.
  * Fix issue with handling updates of default gateway.
  * Fix issue with DHCP servers that require broadcast flag.
  * Add support for option to use gateways as time servers.
  * Add support for option to select default technology.
  * Add support for Address Conflict Detection (ACD).
  * Add support for IPv6 iptables management.
- Change in 1.36:
  * Fix issue with DNS short response on error handling.
  * Fix issue with handling incoming DNS requests.
  * Fix issue with handling empty timeserver list.
  * Fix issue with incorrect DHCP byte order.
  * Fix issue with AllowDomainnameUpdates handling.
  * Fix issue with IPv4 link-local IP conflict error.
  * Fix issue with handling WISPr over TLS connections.
  * Fix issue with WiFi background scanning handling.
  * Fix issue with WiFi disconnect+connect race condition.
  * Fix issue with WiFi scanning and tethering operation.
  * Fix issue with WiFi security change handling.
  * Fix issue with missing signal for WPS changes.
  * Fix issue with online check retry handling.
  * Add support for systemd-resolved backend.
  * Add support for mDNS configuration setup.
- Drop connman-1.35-include.patch
- Drop connman-1.35-resolvconf.patch</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1582027200">- Update to 1.38:
  * Fix issue with online check on IP address update.
  * Fix issue with OpenVPN and encrypted private keys.
  * Fix issue with finishing of VPN connections.
  * Add support for updated stable iwd APIs.
  * Add support for WireGuard networks.
- Spec file cleanup</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1613131200">- Update to 1.39 (bsc#1181751):
  * Fix issue with scanning state synchronization and iwd.
  * Fix issue with invalid key with 4-way handshake offloading.
  * Fix issue with DNS proxy length checks to prevent buffer overflow. (CVE-2021-26675)
  * Fix issue with DHCP leaking stack data via uninitialized variable. (CVE-2021-26676)</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1644580800">- Update to 1.41: (bsc#1194177, bsc#1194176, bsc#1194175)
  * Fix issue with RTNL netlink message alignment.
  * Fix issue with dnsproxy and timeout for TCP feature. (CVE-2022-23097, CVE-2022-23096)
  * Fix issue with dnsproxy and busy loop in TCP server. (CVE-2022-23098)
  * Fix issue with WiFi connection with no passphrase.
  * Add support for wpa_supplicant and WPA3-SAE functionality.
  * Add support for D-Bus ObjectManager interface.
- Renamed downstream patches to separate them from upstream patches
  * Rename 0001-connman-1.35-service.patch to 0100-connman-1.35-service.patch
- Add systemd hardening configuration
  * Rename harden_connman-vpn.service.patch to 0101-harden_connman-vpn.service.patch
  * Rename harden_connman-wait-online.service.patch to 0102-harden_connman-wait-online.service.patch
- Disabled openconnect plugin due to version conflict
- Disabled vpnc plugin for i568 missing dependency
- Disabled hh2serial and tist_working for ppc64le due to version conflict</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1659355200">- Add refcounting to wispr portal detection (bsc#1200190)
  * add 0001-wispr-Rename-wispr_portal_list-to-wispr_portal_hash.patch
  * add 0002-wispr-Ignore-NULL-proxy.patch
  * add 0003-wispr-Add-reference-counter-to-portal-context.patch (CVE-2022-32293)
  * add 0004-wispr-Update-portal-context-references.patch (CVE-2022-32293)
- Fix OOB write in received_data (bsc#1200189)
  * add 0005-gweb-Fix-OOB-write-in-received_data.patch (CVE-2022-32292)</changelog>
</package>
<package pkgid="f3be52c0848703041d1ee309dc2865990acfcd4147a354684b8322efa3fc01f2" name="connman-plugin-pptp" arch="aarch64">
  <version epoch="0" ver="1.41" rel="bp154.2.3.1"/>
  <changelog author="sleep_walker@suse.cz" date="1423224000">- bump to 1.28
  ver 1.28:
  Fix issue with DHCPv6 re-transmission timer.
  Fix issue with DHCP service ID option byte order.
  Fix issue with IPv6 connections and SLAAC/DHCPv6.
  Fix issue with telephony and IPv6 autoconfiguration.
  Fix issue with Bluetooth technology setting changes.
  Fix issue with WiFi autoscan interval calculation.
  Fix issue with WiFi and missing BSS signal strength.
  Add support for IPv4 information for WiFi Display.
  ver 1.27:
  Fix issue with memory leak in IP configuration.
  Fix issue with providing random numbers for DHCP.
  Fix issue with handling IN_MOVED_TO inotify events.
  Fix issue with channel selection for WiFi scanning.
  Add support for handling Bluetooth GN and PANU roles.
  ver 1.26:
  Fix issue with missing WiFi security provisioning support.
  Fix issue with immutable setting and provisioned services.
  Fix issue with scheduling DNS cache cleanup procedure.
  Fix issue with IPv6 Privacy setting on service removal.
  Fix issue with DHCPv6 CONFIRM message sending procedure.
  Fix issue with DHCPv6 lease expiration handling support.
  Fix issue with DHCPv4 networks and broadcast flag handling.
  Fix issue with DHCPv4 networks without gateway configuration.
  Fix issue with P2P Peer authorization handling.
  Fix issue with P2P Peer service registration.
  Add support for WiFi Display information elements.
  Add support for systemd-hostnamed integration.
  ver 1.25:
  Fix issue with handling rebind timer for DHCPv6.
  Fix issue with handling DHCP renew transaction.
  Fix issue with user supplied proxy settings and DHCP.
  Fix issue with extra status codes from captive portals.
  Fix issue with service idle state reset on failure.
  Fix issue with DNS label compression handling.
  Add support for experimental P2P Peer service.
  ver 1.24:
  Fix issue with handling slave interfaces.
  Fix issue with handling DHCPv4 broadcast flag.
  Fix issue with handling DHCPv4 lease expiration.
  Fix issue with handling WiFi auto-scanning timeout.
  Fix issue with handling domain and DNS server changes.
  Fix issue with double free and agent messages.
  ver 1.23:
  Fix issue with memory leak in technology handling.
  Fix issue with not removing host route of OpenVPN.
  Fix issue with double free in DHCP cleanup handling.
  Fix issue with handling DHCP method from oFono.
  Fix issue with IPv6-PD when disabling tethering.
  Fix issue with DNS proxy when disabling tethering.
  Fix issue with Bluetooth start and stop interaction.
  Fix issue with Bluetooth PAN networks on adapter change.
  ver 1.22:
  Fix issue with WPS state synchronization.
  Fix issue with DNS servers and default service.
  Fix issue with DHCP client and rebooting state.
  Add support for NTP exponential backoff handling.
  Add support for NTP kiss-of-death packet handling.
  Add support for Ethernet gadget networking.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1438948800">- bump to 1.29
  Fix issue with IPv6 autoconfiguration when disabled.
  Fix issue with IPv6 temporary route handling.
  Fix issue with IPv6 timers for nameservers.
  Fix issue with DHPCv6 and route configuration.
  Fix issue with DHCPv6 source port and buggy servers.
  Fix issue with DHCPv6 rapid commit option length.
  Fix issue with DHCPv6 rapid commit error handling.
  Fix issue with handling invalid WiFi passphrases.
  Fix issue with connecting Ethernet devices.
  Add support for Ethernet and VLAN usage.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1444737600">- bumpt to 1.30
    Fix issue with pending DNS request during server change.
    Fix issue with empty strings in nameservers configuration.
    Fix issue with time servers during IP configuration change.
    Fix issue with 4-way handshake during roaming.
    Fix issue with open WiFi networks security.
    Fix issue with support for WiFi AnonymousIdentity.
    Fix issue with memory leak and DHCPv6 DUID handling.
    Fix issue with DHCP client and P2P interaction.
    Fix issue with handling provision file updates.
    Fix issue with VPN state updates.
    Disable 6to4 support by default.
- add keyring file
- clean with spec-cleaner
- fix builds for all possible distributions and architectures</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1503403200">- bump to 1.35
  besides other things contains fix for CVE-2017-12865</changelog>
  <changelog author="avvissu@yandex.by" date="1504872000">- Remove obsolete macros
- Add polkit-agent-1 dependency
- Use the %tmpfiles_create macro
- Removal of ldconfig scriptlets from all packages
- Add connman-wait-online.service in post{un}
- Spec file cleanup</changelog>
  <changelog author="avvissu@yandex.by" date="1507032000">- Add connman-1.35-resolvconf.patch
- Activate connman.service if the network services disabled
- Add info in /var/adm/update-messages</changelog>
  <changelog author="avvissu@yandex.by" date="1508414400">- Add configuration file (/etc/connman/main.conf)
- Add ghost lines: main.conf connman connman-vpn</changelog>
  <changelog author="avvissu@yandex.by" date="1508500800">- Remove unrecognized options: disable-gtk-doc, enable-threads,
  disable-iwmx, enable-session-policy</changelog>
  <changelog author="avvissu@yandex.by" date="1509019200">- Change the mode of download_files (sr#521762)
- Remove connman-rpmlintrc (bnc#1057697)
- Add client as a recommended dependency</changelog>
  <changelog author="avvissu@yandex.by" date="1514289600">- Add symlink to network.service (connman-1.35-service.patch)</changelog>
  <changelog author="avvissu@yandex.by" date="1518523200">- Fix build errors due to unsupported header include order with
  newer kernels &gt;=4.15 (connman-1.35-include.patch).</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1557489600">- Update to 1.37:
  * Fix issue with handling invalid gateway addresses.
  * Fix issue with handling updates of default gateway.
  * Fix issue with DHCP servers that require broadcast flag.
  * Add support for option to use gateways as time servers.
  * Add support for option to select default technology.
  * Add support for Address Conflict Detection (ACD).
  * Add support for IPv6 iptables management.
- Change in 1.36:
  * Fix issue with DNS short response on error handling.
  * Fix issue with handling incoming DNS requests.
  * Fix issue with handling empty timeserver list.
  * Fix issue with incorrect DHCP byte order.
  * Fix issue with AllowDomainnameUpdates handling.
  * Fix issue with IPv4 link-local IP conflict error.
  * Fix issue with handling WISPr over TLS connections.
  * Fix issue with WiFi background scanning handling.
  * Fix issue with WiFi disconnect+connect race condition.
  * Fix issue with WiFi scanning and tethering operation.
  * Fix issue with WiFi security change handling.
  * Fix issue with missing signal for WPS changes.
  * Fix issue with online check retry handling.
  * Add support for systemd-resolved backend.
  * Add support for mDNS configuration setup.
- Drop connman-1.35-include.patch
- Drop connman-1.35-resolvconf.patch</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1582027200">- Update to 1.38:
  * Fix issue with online check on IP address update.
  * Fix issue with OpenVPN and encrypted private keys.
  * Fix issue with finishing of VPN connections.
  * Add support for updated stable iwd APIs.
  * Add support for WireGuard networks.
- Spec file cleanup</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1613131200">- Update to 1.39 (bsc#1181751):
  * Fix issue with scanning state synchronization and iwd.
  * Fix issue with invalid key with 4-way handshake offloading.
  * Fix issue with DNS proxy length checks to prevent buffer overflow. (CVE-2021-26675)
  * Fix issue with DHCP leaking stack data via uninitialized variable. (CVE-2021-26676)</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1644580800">- Update to 1.41: (bsc#1194177, bsc#1194176, bsc#1194175)
  * Fix issue with RTNL netlink message alignment.
  * Fix issue with dnsproxy and timeout for TCP feature. (CVE-2022-23097, CVE-2022-23096)
  * Fix issue with dnsproxy and busy loop in TCP server. (CVE-2022-23098)
  * Fix issue with WiFi connection with no passphrase.
  * Add support for wpa_supplicant and WPA3-SAE functionality.
  * Add support for D-Bus ObjectManager interface.
- Renamed downstream patches to separate them from upstream patches
  * Rename 0001-connman-1.35-service.patch to 0100-connman-1.35-service.patch
- Add systemd hardening configuration
  * Rename harden_connman-vpn.service.patch to 0101-harden_connman-vpn.service.patch
  * Rename harden_connman-wait-online.service.patch to 0102-harden_connman-wait-online.service.patch
- Disabled openconnect plugin due to version conflict
- Disabled vpnc plugin for i568 missing dependency
- Disabled hh2serial and tist_working for ppc64le due to version conflict</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1659355200">- Add refcounting to wispr portal detection (bsc#1200190)
  * add 0001-wispr-Rename-wispr_portal_list-to-wispr_portal_hash.patch
  * add 0002-wispr-Ignore-NULL-proxy.patch
  * add 0003-wispr-Add-reference-counter-to-portal-context.patch (CVE-2022-32293)
  * add 0004-wispr-Update-portal-context-references.patch (CVE-2022-32293)
- Fix OOB write in received_data (bsc#1200189)
  * add 0005-gweb-Fix-OOB-write-in-received_data.patch (CVE-2022-32292)</changelog>
</package>
<package pkgid="45ef9eee69727ffb72b8d25e5746bb66ed10e97678c4f1caece0a74093f24185" name="connman-plugin-pptp" arch="i586">
  <version epoch="0" ver="1.41" rel="bp154.2.3.1"/>
  <changelog author="sleep_walker@suse.cz" date="1423224000">- bump to 1.28
  ver 1.28:
  Fix issue with DHCPv6 re-transmission timer.
  Fix issue with DHCP service ID option byte order.
  Fix issue with IPv6 connections and SLAAC/DHCPv6.
  Fix issue with telephony and IPv6 autoconfiguration.
  Fix issue with Bluetooth technology setting changes.
  Fix issue with WiFi autoscan interval calculation.
  Fix issue with WiFi and missing BSS signal strength.
  Add support for IPv4 information for WiFi Display.
  ver 1.27:
  Fix issue with memory leak in IP configuration.
  Fix issue with providing random numbers for DHCP.
  Fix issue with handling IN_MOVED_TO inotify events.
  Fix issue with channel selection for WiFi scanning.
  Add support for handling Bluetooth GN and PANU roles.
  ver 1.26:
  Fix issue with missing WiFi security provisioning support.
  Fix issue with immutable setting and provisioned services.
  Fix issue with scheduling DNS cache cleanup procedure.
  Fix issue with IPv6 Privacy setting on service removal.
  Fix issue with DHCPv6 CONFIRM message sending procedure.
  Fix issue with DHCPv6 lease expiration handling support.
  Fix issue with DHCPv4 networks and broadcast flag handling.
  Fix issue with DHCPv4 networks without gateway configuration.
  Fix issue with P2P Peer authorization handling.
  Fix issue with P2P Peer service registration.
  Add support for WiFi Display information elements.
  Add support for systemd-hostnamed integration.
  ver 1.25:
  Fix issue with handling rebind timer for DHCPv6.
  Fix issue with handling DHCP renew transaction.
  Fix issue with user supplied proxy settings and DHCP.
  Fix issue with extra status codes from captive portals.
  Fix issue with service idle state reset on failure.
  Fix issue with DNS label compression handling.
  Add support for experimental P2P Peer service.
  ver 1.24:
  Fix issue with handling slave interfaces.
  Fix issue with handling DHCPv4 broadcast flag.
  Fix issue with handling DHCPv4 lease expiration.
  Fix issue with handling WiFi auto-scanning timeout.
  Fix issue with handling domain and DNS server changes.
  Fix issue with double free and agent messages.
  ver 1.23:
  Fix issue with memory leak in technology handling.
  Fix issue with not removing host route of OpenVPN.
  Fix issue with double free in DHCP cleanup handling.
  Fix issue with handling DHCP method from oFono.
  Fix issue with IPv6-PD when disabling tethering.
  Fix issue with DNS proxy when disabling tethering.
  Fix issue with Bluetooth start and stop interaction.
  Fix issue with Bluetooth PAN networks on adapter change.
  ver 1.22:
  Fix issue with WPS state synchronization.
  Fix issue with DNS servers and default service.
  Fix issue with DHCP client and rebooting state.
  Add support for NTP exponential backoff handling.
  Add support for NTP kiss-of-death packet handling.
  Add support for Ethernet gadget networking.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1438948800">- bump to 1.29
  Fix issue with IPv6 autoconfiguration when disabled.
  Fix issue with IPv6 temporary route handling.
  Fix issue with IPv6 timers for nameservers.
  Fix issue with DHPCv6 and route configuration.
  Fix issue with DHCPv6 source port and buggy servers.
  Fix issue with DHCPv6 rapid commit option length.
  Fix issue with DHCPv6 rapid commit error handling.
  Fix issue with handling invalid WiFi passphrases.
  Fix issue with connecting Ethernet devices.
  Add support for Ethernet and VLAN usage.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1444737600">- bumpt to 1.30
    Fix issue with pending DNS request during server change.
    Fix issue with empty strings in nameservers configuration.
    Fix issue with time servers during IP configuration change.
    Fix issue with 4-way handshake during roaming.
    Fix issue with open WiFi networks security.
    Fix issue with support for WiFi AnonymousIdentity.
    Fix issue with memory leak and DHCPv6 DUID handling.
    Fix issue with DHCP client and P2P interaction.
    Fix issue with handling provision file updates.
    Fix issue with VPN state updates.
    Disable 6to4 support by default.
- add keyring file
- clean with spec-cleaner
- fix builds for all possible distributions and architectures</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1503403200">- bump to 1.35
  besides other things contains fix for CVE-2017-12865</changelog>
  <changelog author="avvissu@yandex.by" date="1504872000">- Remove obsolete macros
- Add polkit-agent-1 dependency
- Use the %tmpfiles_create macro
- Removal of ldconfig scriptlets from all packages
- Add connman-wait-online.service in post{un}
- Spec file cleanup</changelog>
  <changelog author="avvissu@yandex.by" date="1507032000">- Add connman-1.35-resolvconf.patch
- Activate connman.service if the network services disabled
- Add info in /var/adm/update-messages</changelog>
  <changelog author="avvissu@yandex.by" date="1508414400">- Add configuration file (/etc/connman/main.conf)
- Add ghost lines: main.conf connman connman-vpn</changelog>
  <changelog author="avvissu@yandex.by" date="1508500800">- Remove unrecognized options: disable-gtk-doc, enable-threads,
  disable-iwmx, enable-session-policy</changelog>
  <changelog author="avvissu@yandex.by" date="1509019200">- Change the mode of download_files (sr#521762)
- Remove connman-rpmlintrc (bnc#1057697)
- Add client as a recommended dependency</changelog>
  <changelog author="avvissu@yandex.by" date="1514289600">- Add symlink to network.service (connman-1.35-service.patch)</changelog>
  <changelog author="avvissu@yandex.by" date="1518523200">- Fix build errors due to unsupported header include order with
  newer kernels &gt;=4.15 (connman-1.35-include.patch).</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1557489600">- Update to 1.37:
  * Fix issue with handling invalid gateway addresses.
  * Fix issue with handling updates of default gateway.
  * Fix issue with DHCP servers that require broadcast flag.
  * Add support for option to use gateways as time servers.
  * Add support for option to select default technology.
  * Add support for Address Conflict Detection (ACD).
  * Add support for IPv6 iptables management.
- Change in 1.36:
  * Fix issue with DNS short response on error handling.
  * Fix issue with handling incoming DNS requests.
  * Fix issue with handling empty timeserver list.
  * Fix issue with incorrect DHCP byte order.
  * Fix issue with AllowDomainnameUpdates handling.
  * Fix issue with IPv4 link-local IP conflict error.
  * Fix issue with handling WISPr over TLS connections.
  * Fix issue with WiFi background scanning handling.
  * Fix issue with WiFi disconnect+connect race condition.
  * Fix issue with WiFi scanning and tethering operation.
  * Fix issue with WiFi security change handling.
  * Fix issue with missing signal for WPS changes.
  * Fix issue with online check retry handling.
  * Add support for systemd-resolved backend.
  * Add support for mDNS configuration setup.
- Drop connman-1.35-include.patch
- Drop connman-1.35-resolvconf.patch</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1582027200">- Update to 1.38:
  * Fix issue with online check on IP address update.
  * Fix issue with OpenVPN and encrypted private keys.
  * Fix issue with finishing of VPN connections.
  * Add support for updated stable iwd APIs.
  * Add support for WireGuard networks.
- Spec file cleanup</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1613131200">- Update to 1.39 (bsc#1181751):
  * Fix issue with scanning state synchronization and iwd.
  * Fix issue with invalid key with 4-way handshake offloading.
  * Fix issue with DNS proxy length checks to prevent buffer overflow. (CVE-2021-26675)
  * Fix issue with DHCP leaking stack data via uninitialized variable. (CVE-2021-26676)</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1644580800">- Update to 1.41: (bsc#1194177, bsc#1194176, bsc#1194175)
  * Fix issue with RTNL netlink message alignment.
  * Fix issue with dnsproxy and timeout for TCP feature. (CVE-2022-23097, CVE-2022-23096)
  * Fix issue with dnsproxy and busy loop in TCP server. (CVE-2022-23098)
  * Fix issue with WiFi connection with no passphrase.
  * Add support for wpa_supplicant and WPA3-SAE functionality.
  * Add support for D-Bus ObjectManager interface.
- Renamed downstream patches to separate them from upstream patches
  * Rename 0001-connman-1.35-service.patch to 0100-connman-1.35-service.patch
- Add systemd hardening configuration
  * Rename harden_connman-vpn.service.patch to 0101-harden_connman-vpn.service.patch
  * Rename harden_connman-wait-online.service.patch to 0102-harden_connman-wait-online.service.patch
- Disabled openconnect plugin due to version conflict
- Disabled vpnc plugin for i568 missing dependency
- Disabled hh2serial and tist_working for ppc64le due to version conflict</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1659355200">- Add refcounting to wispr portal detection (bsc#1200190)
  * add 0001-wispr-Rename-wispr_portal_list-to-wispr_portal_hash.patch
  * add 0002-wispr-Ignore-NULL-proxy.patch
  * add 0003-wispr-Add-reference-counter-to-portal-context.patch (CVE-2022-32293)
  * add 0004-wispr-Update-portal-context-references.patch (CVE-2022-32293)
- Fix OOB write in received_data (bsc#1200189)
  * add 0005-gweb-Fix-OOB-write-in-received_data.patch (CVE-2022-32292)</changelog>
</package>
<package pkgid="4fa619b41d431b9bd3838b0ea04d2eca6bd411e43089299bd5a1296ffa28b315" name="connman-plugin-pptp" arch="ppc64le">
  <version epoch="0" ver="1.41" rel="bp154.2.3.1"/>
  <changelog author="sleep_walker@suse.cz" date="1423224000">- bump to 1.28
  ver 1.28:
  Fix issue with DHCPv6 re-transmission timer.
  Fix issue with DHCP service ID option byte order.
  Fix issue with IPv6 connections and SLAAC/DHCPv6.
  Fix issue with telephony and IPv6 autoconfiguration.
  Fix issue with Bluetooth technology setting changes.
  Fix issue with WiFi autoscan interval calculation.
  Fix issue with WiFi and missing BSS signal strength.
  Add support for IPv4 information for WiFi Display.
  ver 1.27:
  Fix issue with memory leak in IP configuration.
  Fix issue with providing random numbers for DHCP.
  Fix issue with handling IN_MOVED_TO inotify events.
  Fix issue with channel selection for WiFi scanning.
  Add support for handling Bluetooth GN and PANU roles.
  ver 1.26:
  Fix issue with missing WiFi security provisioning support.
  Fix issue with immutable setting and provisioned services.
  Fix issue with scheduling DNS cache cleanup procedure.
  Fix issue with IPv6 Privacy setting on service removal.
  Fix issue with DHCPv6 CONFIRM message sending procedure.
  Fix issue with DHCPv6 lease expiration handling support.
  Fix issue with DHCPv4 networks and broadcast flag handling.
  Fix issue with DHCPv4 networks without gateway configuration.
  Fix issue with P2P Peer authorization handling.
  Fix issue with P2P Peer service registration.
  Add support for WiFi Display information elements.
  Add support for systemd-hostnamed integration.
  ver 1.25:
  Fix issue with handling rebind timer for DHCPv6.
  Fix issue with handling DHCP renew transaction.
  Fix issue with user supplied proxy settings and DHCP.
  Fix issue with extra status codes from captive portals.
  Fix issue with service idle state reset on failure.
  Fix issue with DNS label compression handling.
  Add support for experimental P2P Peer service.
  ver 1.24:
  Fix issue with handling slave interfaces.
  Fix issue with handling DHCPv4 broadcast flag.
  Fix issue with handling DHCPv4 lease expiration.
  Fix issue with handling WiFi auto-scanning timeout.
  Fix issue with handling domain and DNS server changes.
  Fix issue with double free and agent messages.
  ver 1.23:
  Fix issue with memory leak in technology handling.
  Fix issue with not removing host route of OpenVPN.
  Fix issue with double free in DHCP cleanup handling.
  Fix issue with handling DHCP method from oFono.
  Fix issue with IPv6-PD when disabling tethering.
  Fix issue with DNS proxy when disabling tethering.
  Fix issue with Bluetooth start and stop interaction.
  Fix issue with Bluetooth PAN networks on adapter change.
  ver 1.22:
  Fix issue with WPS state synchronization.
  Fix issue with DNS servers and default service.
  Fix issue with DHCP client and rebooting state.
  Add support for NTP exponential backoff handling.
  Add support for NTP kiss-of-death packet handling.
  Add support for Ethernet gadget networking.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1438948800">- bump to 1.29
  Fix issue with IPv6 autoconfiguration when disabled.
  Fix issue with IPv6 temporary route handling.
  Fix issue with IPv6 timers for nameservers.
  Fix issue with DHPCv6 and route configuration.
  Fix issue with DHCPv6 source port and buggy servers.
  Fix issue with DHCPv6 rapid commit option length.
  Fix issue with DHCPv6 rapid commit error handling.
  Fix issue with handling invalid WiFi passphrases.
  Fix issue with connecting Ethernet devices.
  Add support for Ethernet and VLAN usage.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1444737600">- bumpt to 1.30
    Fix issue with pending DNS request during server change.
    Fix issue with empty strings in nameservers configuration.
    Fix issue with time servers during IP configuration change.
    Fix issue with 4-way handshake during roaming.
    Fix issue with open WiFi networks security.
    Fix issue with support for WiFi AnonymousIdentity.
    Fix issue with memory leak and DHCPv6 DUID handling.
    Fix issue with DHCP client and P2P interaction.
    Fix issue with handling provision file updates.
    Fix issue with VPN state updates.
    Disable 6to4 support by default.
- add keyring file
- clean with spec-cleaner
- fix builds for all possible distributions and architectures</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1503403200">- bump to 1.35
  besides other things contains fix for CVE-2017-12865</changelog>
  <changelog author="avvissu@yandex.by" date="1504872000">- Remove obsolete macros
- Add polkit-agent-1 dependency
- Use the %tmpfiles_create macro
- Removal of ldconfig scriptlets from all packages
- Add connman-wait-online.service in post{un}
- Spec file cleanup</changelog>
  <changelog author="avvissu@yandex.by" date="1507032000">- Add connman-1.35-resolvconf.patch
- Activate connman.service if the network services disabled
- Add info in /var/adm/update-messages</changelog>
  <changelog author="avvissu@yandex.by" date="1508414400">- Add configuration file (/etc/connman/main.conf)
- Add ghost lines: main.conf connman connman-vpn</changelog>
  <changelog author="avvissu@yandex.by" date="1508500800">- Remove unrecognized options: disable-gtk-doc, enable-threads,
  disable-iwmx, enable-session-policy</changelog>
  <changelog author="avvissu@yandex.by" date="1509019200">- Change the mode of download_files (sr#521762)
- Remove connman-rpmlintrc (bnc#1057697)
- Add client as a recommended dependency</changelog>
  <changelog author="avvissu@yandex.by" date="1514289600">- Add symlink to network.service (connman-1.35-service.patch)</changelog>
  <changelog author="avvissu@yandex.by" date="1518523200">- Fix build errors due to unsupported header include order with
  newer kernels &gt;=4.15 (connman-1.35-include.patch).</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1557489600">- Update to 1.37:
  * Fix issue with handling invalid gateway addresses.
  * Fix issue with handling updates of default gateway.
  * Fix issue with DHCP servers that require broadcast flag.
  * Add support for option to use gateways as time servers.
  * Add support for option to select default technology.
  * Add support for Address Conflict Detection (ACD).
  * Add support for IPv6 iptables management.
- Change in 1.36:
  * Fix issue with DNS short response on error handling.
  * Fix issue with handling incoming DNS requests.
  * Fix issue with handling empty timeserver list.
  * Fix issue with incorrect DHCP byte order.
  * Fix issue with AllowDomainnameUpdates handling.
  * Fix issue with IPv4 link-local IP conflict error.
  * Fix issue with handling WISPr over TLS connections.
  * Fix issue with WiFi background scanning handling.
  * Fix issue with WiFi disconnect+connect race condition.
  * Fix issue with WiFi scanning and tethering operation.
  * Fix issue with WiFi security change handling.
  * Fix issue with missing signal for WPS changes.
  * Fix issue with online check retry handling.
  * Add support for systemd-resolved backend.
  * Add support for mDNS configuration setup.
- Drop connman-1.35-include.patch
- Drop connman-1.35-resolvconf.patch</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1582027200">- Update to 1.38:
  * Fix issue with online check on IP address update.
  * Fix issue with OpenVPN and encrypted private keys.
  * Fix issue with finishing of VPN connections.
  * Add support for updated stable iwd APIs.
  * Add support for WireGuard networks.
- Spec file cleanup</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1613131200">- Update to 1.39 (bsc#1181751):
  * Fix issue with scanning state synchronization and iwd.
  * Fix issue with invalid key with 4-way handshake offloading.
  * Fix issue with DNS proxy length checks to prevent buffer overflow. (CVE-2021-26675)
  * Fix issue with DHCP leaking stack data via uninitialized variable. (CVE-2021-26676)</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1644580800">- Update to 1.41: (bsc#1194177, bsc#1194176, bsc#1194175)
  * Fix issue with RTNL netlink message alignment.
  * Fix issue with dnsproxy and timeout for TCP feature. (CVE-2022-23097, CVE-2022-23096)
  * Fix issue with dnsproxy and busy loop in TCP server. (CVE-2022-23098)
  * Fix issue with WiFi connection with no passphrase.
  * Add support for wpa_supplicant and WPA3-SAE functionality.
  * Add support for D-Bus ObjectManager interface.
- Renamed downstream patches to separate them from upstream patches
  * Rename 0001-connman-1.35-service.patch to 0100-connman-1.35-service.patch
- Add systemd hardening configuration
  * Rename harden_connman-vpn.service.patch to 0101-harden_connman-vpn.service.patch
  * Rename harden_connman-wait-online.service.patch to 0102-harden_connman-wait-online.service.patch
- Disabled openconnect plugin due to version conflict
- Disabled vpnc plugin for i568 missing dependency
- Disabled hh2serial and tist_working for ppc64le due to version conflict</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1659355200">- Add refcounting to wispr portal detection (bsc#1200190)
  * add 0001-wispr-Rename-wispr_portal_list-to-wispr_portal_hash.patch
  * add 0002-wispr-Ignore-NULL-proxy.patch
  * add 0003-wispr-Add-reference-counter-to-portal-context.patch (CVE-2022-32293)
  * add 0004-wispr-Update-portal-context-references.patch (CVE-2022-32293)
- Fix OOB write in received_data (bsc#1200189)
  * add 0005-gweb-Fix-OOB-write-in-received_data.patch (CVE-2022-32292)</changelog>
</package>
<package pkgid="3cda20bb67384cbe13fd1fead2e82bae7ae164007bc1541729bf2c9ab90b9454" name="connman-plugin-pptp" arch="s390x">
  <version epoch="0" ver="1.41" rel="bp154.2.3.1"/>
  <changelog author="sleep_walker@suse.cz" date="1423224000">- bump to 1.28
  ver 1.28:
  Fix issue with DHCPv6 re-transmission timer.
  Fix issue with DHCP service ID option byte order.
  Fix issue with IPv6 connections and SLAAC/DHCPv6.
  Fix issue with telephony and IPv6 autoconfiguration.
  Fix issue with Bluetooth technology setting changes.
  Fix issue with WiFi autoscan interval calculation.
  Fix issue with WiFi and missing BSS signal strength.
  Add support for IPv4 information for WiFi Display.
  ver 1.27:
  Fix issue with memory leak in IP configuration.
  Fix issue with providing random numbers for DHCP.
  Fix issue with handling IN_MOVED_TO inotify events.
  Fix issue with channel selection for WiFi scanning.
  Add support for handling Bluetooth GN and PANU roles.
  ver 1.26:
  Fix issue with missing WiFi security provisioning support.
  Fix issue with immutable setting and provisioned services.
  Fix issue with scheduling DNS cache cleanup procedure.
  Fix issue with IPv6 Privacy setting on service removal.
  Fix issue with DHCPv6 CONFIRM message sending procedure.
  Fix issue with DHCPv6 lease expiration handling support.
  Fix issue with DHCPv4 networks and broadcast flag handling.
  Fix issue with DHCPv4 networks without gateway configuration.
  Fix issue with P2P Peer authorization handling.
  Fix issue with P2P Peer service registration.
  Add support for WiFi Display information elements.
  Add support for systemd-hostnamed integration.
  ver 1.25:
  Fix issue with handling rebind timer for DHCPv6.
  Fix issue with handling DHCP renew transaction.
  Fix issue with user supplied proxy settings and DHCP.
  Fix issue with extra status codes from captive portals.
  Fix issue with service idle state reset on failure.
  Fix issue with DNS label compression handling.
  Add support for experimental P2P Peer service.
  ver 1.24:
  Fix issue with handling slave interfaces.
  Fix issue with handling DHCPv4 broadcast flag.
  Fix issue with handling DHCPv4 lease expiration.
  Fix issue with handling WiFi auto-scanning timeout.
  Fix issue with handling domain and DNS server changes.
  Fix issue with double free and agent messages.
  ver 1.23:
  Fix issue with memory leak in technology handling.
  Fix issue with not removing host route of OpenVPN.
  Fix issue with double free in DHCP cleanup handling.
  Fix issue with handling DHCP method from oFono.
  Fix issue with IPv6-PD when disabling tethering.
  Fix issue with DNS proxy when disabling tethering.
  Fix issue with Bluetooth start and stop interaction.
  Fix issue with Bluetooth PAN networks on adapter change.
  ver 1.22:
  Fix issue with WPS state synchronization.
  Fix issue with DNS servers and default service.
  Fix issue with DHCP client and rebooting state.
  Add support for NTP exponential backoff handling.
  Add support for NTP kiss-of-death packet handling.
  Add support for Ethernet gadget networking.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1438948800">- bump to 1.29
  Fix issue with IPv6 autoconfiguration when disabled.
  Fix issue with IPv6 temporary route handling.
  Fix issue with IPv6 timers for nameservers.
  Fix issue with DHPCv6 and route configuration.
  Fix issue with DHCPv6 source port and buggy servers.
  Fix issue with DHCPv6 rapid commit option length.
  Fix issue with DHCPv6 rapid commit error handling.
  Fix issue with handling invalid WiFi passphrases.
  Fix issue with connecting Ethernet devices.
  Add support for Ethernet and VLAN usage.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1444737600">- bumpt to 1.30
    Fix issue with pending DNS request during server change.
    Fix issue with empty strings in nameservers configuration.
    Fix issue with time servers during IP configuration change.
    Fix issue with 4-way handshake during roaming.
    Fix issue with open WiFi networks security.
    Fix issue with support for WiFi AnonymousIdentity.
    Fix issue with memory leak and DHCPv6 DUID handling.
    Fix issue with DHCP client and P2P interaction.
    Fix issue with handling provision file updates.
    Fix issue with VPN state updates.
    Disable 6to4 support by default.
- add keyring file
- clean with spec-cleaner
- fix builds for all possible distributions and architectures</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1503403200">- bump to 1.35
  besides other things contains fix for CVE-2017-12865</changelog>
  <changelog author="avvissu@yandex.by" date="1504872000">- Remove obsolete macros
- Add polkit-agent-1 dependency
- Use the %tmpfiles_create macro
- Removal of ldconfig scriptlets from all packages
- Add connman-wait-online.service in post{un}
- Spec file cleanup</changelog>
  <changelog author="avvissu@yandex.by" date="1507032000">- Add connman-1.35-resolvconf.patch
- Activate connman.service if the network services disabled
- Add info in /var/adm/update-messages</changelog>
  <changelog author="avvissu@yandex.by" date="1508414400">- Add configuration file (/etc/connman/main.conf)
- Add ghost lines: main.conf connman connman-vpn</changelog>
  <changelog author="avvissu@yandex.by" date="1508500800">- Remove unrecognized options: disable-gtk-doc, enable-threads,
  disable-iwmx, enable-session-policy</changelog>
  <changelog author="avvissu@yandex.by" date="1509019200">- Change the mode of download_files (sr#521762)
- Remove connman-rpmlintrc (bnc#1057697)
- Add client as a recommended dependency</changelog>
  <changelog author="avvissu@yandex.by" date="1514289600">- Add symlink to network.service (connman-1.35-service.patch)</changelog>
  <changelog author="avvissu@yandex.by" date="1518523200">- Fix build errors due to unsupported header include order with
  newer kernels &gt;=4.15 (connman-1.35-include.patch).</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1557489600">- Update to 1.37:
  * Fix issue with handling invalid gateway addresses.
  * Fix issue with handling updates of default gateway.
  * Fix issue with DHCP servers that require broadcast flag.
  * Add support for option to use gateways as time servers.
  * Add support for option to select default technology.
  * Add support for Address Conflict Detection (ACD).
  * Add support for IPv6 iptables management.
- Change in 1.36:
  * Fix issue with DNS short response on error handling.
  * Fix issue with handling incoming DNS requests.
  * Fix issue with handling empty timeserver list.
  * Fix issue with incorrect DHCP byte order.
  * Fix issue with AllowDomainnameUpdates handling.
  * Fix issue with IPv4 link-local IP conflict error.
  * Fix issue with handling WISPr over TLS connections.
  * Fix issue with WiFi background scanning handling.
  * Fix issue with WiFi disconnect+connect race condition.
  * Fix issue with WiFi scanning and tethering operation.
  * Fix issue with WiFi security change handling.
  * Fix issue with missing signal for WPS changes.
  * Fix issue with online check retry handling.
  * Add support for systemd-resolved backend.
  * Add support for mDNS configuration setup.
- Drop connman-1.35-include.patch
- Drop connman-1.35-resolvconf.patch</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1582027200">- Update to 1.38:
  * Fix issue with online check on IP address update.
  * Fix issue with OpenVPN and encrypted private keys.
  * Fix issue with finishing of VPN connections.
  * Add support for updated stable iwd APIs.
  * Add support for WireGuard networks.
- Spec file cleanup</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1613131200">- Update to 1.39 (bsc#1181751):
  * Fix issue with scanning state synchronization and iwd.
  * Fix issue with invalid key with 4-way handshake offloading.
  * Fix issue with DNS proxy length checks to prevent buffer overflow. (CVE-2021-26675)
  * Fix issue with DHCP leaking stack data via uninitialized variable. (CVE-2021-26676)</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1644580800">- Update to 1.41: (bsc#1194177, bsc#1194176, bsc#1194175)
  * Fix issue with RTNL netlink message alignment.
  * Fix issue with dnsproxy and timeout for TCP feature. (CVE-2022-23097, CVE-2022-23096)
  * Fix issue with dnsproxy and busy loop in TCP server. (CVE-2022-23098)
  * Fix issue with WiFi connection with no passphrase.
  * Add support for wpa_supplicant and WPA3-SAE functionality.
  * Add support for D-Bus ObjectManager interface.
- Renamed downstream patches to separate them from upstream patches
  * Rename 0001-connman-1.35-service.patch to 0100-connman-1.35-service.patch
- Add systemd hardening configuration
  * Rename harden_connman-vpn.service.patch to 0101-harden_connman-vpn.service.patch
  * Rename harden_connman-wait-online.service.patch to 0102-harden_connman-wait-online.service.patch
- Disabled openconnect plugin due to version conflict
- Disabled vpnc plugin for i568 missing dependency
- Disabled hh2serial and tist_working for ppc64le due to version conflict</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1659355200">- Add refcounting to wispr portal detection (bsc#1200190)
  * add 0001-wispr-Rename-wispr_portal_list-to-wispr_portal_hash.patch
  * add 0002-wispr-Ignore-NULL-proxy.patch
  * add 0003-wispr-Add-reference-counter-to-portal-context.patch (CVE-2022-32293)
  * add 0004-wispr-Update-portal-context-references.patch (CVE-2022-32293)
- Fix OOB write in received_data (bsc#1200189)
  * add 0005-gweb-Fix-OOB-write-in-received_data.patch (CVE-2022-32292)</changelog>
</package>
<package pkgid="32c2972c36c1abb5f122b47f508f228511770db81200de87a847bebdadcb23ee" name="connman-plugin-pptp" arch="x86_64">
  <version epoch="0" ver="1.41" rel="bp154.2.3.1"/>
  <changelog author="sleep_walker@suse.cz" date="1423224000">- bump to 1.28
  ver 1.28:
  Fix issue with DHCPv6 re-transmission timer.
  Fix issue with DHCP service ID option byte order.
  Fix issue with IPv6 connections and SLAAC/DHCPv6.
  Fix issue with telephony and IPv6 autoconfiguration.
  Fix issue with Bluetooth technology setting changes.
  Fix issue with WiFi autoscan interval calculation.
  Fix issue with WiFi and missing BSS signal strength.
  Add support for IPv4 information for WiFi Display.
  ver 1.27:
  Fix issue with memory leak in IP configuration.
  Fix issue with providing random numbers for DHCP.
  Fix issue with handling IN_MOVED_TO inotify events.
  Fix issue with channel selection for WiFi scanning.
  Add support for handling Bluetooth GN and PANU roles.
  ver 1.26:
  Fix issue with missing WiFi security provisioning support.
  Fix issue with immutable setting and provisioned services.
  Fix issue with scheduling DNS cache cleanup procedure.
  Fix issue with IPv6 Privacy setting on service removal.
  Fix issue with DHCPv6 CONFIRM message sending procedure.
  Fix issue with DHCPv6 lease expiration handling support.
  Fix issue with DHCPv4 networks and broadcast flag handling.
  Fix issue with DHCPv4 networks without gateway configuration.
  Fix issue with P2P Peer authorization handling.
  Fix issue with P2P Peer service registration.
  Add support for WiFi Display information elements.
  Add support for systemd-hostnamed integration.
  ver 1.25:
  Fix issue with handling rebind timer for DHCPv6.
  Fix issue with handling DHCP renew transaction.
  Fix issue with user supplied proxy settings and DHCP.
  Fix issue with extra status codes from captive portals.
  Fix issue with service idle state reset on failure.
  Fix issue with DNS label compression handling.
  Add support for experimental P2P Peer service.
  ver 1.24:
  Fix issue with handling slave interfaces.
  Fix issue with handling DHCPv4 broadcast flag.
  Fix issue with handling DHCPv4 lease expiration.
  Fix issue with handling WiFi auto-scanning timeout.
  Fix issue with handling domain and DNS server changes.
  Fix issue with double free and agent messages.
  ver 1.23:
  Fix issue with memory leak in technology handling.
  Fix issue with not removing host route of OpenVPN.
  Fix issue with double free in DHCP cleanup handling.
  Fix issue with handling DHCP method from oFono.
  Fix issue with IPv6-PD when disabling tethering.
  Fix issue with DNS proxy when disabling tethering.
  Fix issue with Bluetooth start and stop interaction.
  Fix issue with Bluetooth PAN networks on adapter change.
  ver 1.22:
  Fix issue with WPS state synchronization.
  Fix issue with DNS servers and default service.
  Fix issue with DHCP client and rebooting state.
  Add support for NTP exponential backoff handling.
  Add support for NTP kiss-of-death packet handling.
  Add support for Ethernet gadget networking.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1438948800">- bump to 1.29
  Fix issue with IPv6 autoconfiguration when disabled.
  Fix issue with IPv6 temporary route handling.
  Fix issue with IPv6 timers for nameservers.
  Fix issue with DHPCv6 and route configuration.
  Fix issue with DHCPv6 source port and buggy servers.
  Fix issue with DHCPv6 rapid commit option length.
  Fix issue with DHCPv6 rapid commit error handling.
  Fix issue with handling invalid WiFi passphrases.
  Fix issue with connecting Ethernet devices.
  Add support for Ethernet and VLAN usage.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1444737600">- bumpt to 1.30
    Fix issue with pending DNS request during server change.
    Fix issue with empty strings in nameservers configuration.
    Fix issue with time servers during IP configuration change.
    Fix issue with 4-way handshake during roaming.
    Fix issue with open WiFi networks security.
    Fix issue with support for WiFi AnonymousIdentity.
    Fix issue with memory leak and DHCPv6 DUID handling.
    Fix issue with DHCP client and P2P interaction.
    Fix issue with handling provision file updates.
    Fix issue with VPN state updates.
    Disable 6to4 support by default.
- add keyring file
- clean with spec-cleaner
- fix builds for all possible distributions and architectures</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1503403200">- bump to 1.35
  besides other things contains fix for CVE-2017-12865</changelog>
  <changelog author="avvissu@yandex.by" date="1504872000">- Remove obsolete macros
- Add polkit-agent-1 dependency
- Use the %tmpfiles_create macro
- Removal of ldconfig scriptlets from all packages
- Add connman-wait-online.service in post{un}
- Spec file cleanup</changelog>
  <changelog author="avvissu@yandex.by" date="1507032000">- Add connman-1.35-resolvconf.patch
- Activate connman.service if the network services disabled
- Add info in /var/adm/update-messages</changelog>
  <changelog author="avvissu@yandex.by" date="1508414400">- Add configuration file (/etc/connman/main.conf)
- Add ghost lines: main.conf connman connman-vpn</changelog>
  <changelog author="avvissu@yandex.by" date="1508500800">- Remove unrecognized options: disable-gtk-doc, enable-threads,
  disable-iwmx, enable-session-policy</changelog>
  <changelog author="avvissu@yandex.by" date="1509019200">- Change the mode of download_files (sr#521762)
- Remove connman-rpmlintrc (bnc#1057697)
- Add client as a recommended dependency</changelog>
  <changelog author="avvissu@yandex.by" date="1514289600">- Add symlink to network.service (connman-1.35-service.patch)</changelog>
  <changelog author="avvissu@yandex.by" date="1518523200">- Fix build errors due to unsupported header include order with
  newer kernels &gt;=4.15 (connman-1.35-include.patch).</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1557489600">- Update to 1.37:
  * Fix issue with handling invalid gateway addresses.
  * Fix issue with handling updates of default gateway.
  * Fix issue with DHCP servers that require broadcast flag.
  * Add support for option to use gateways as time servers.
  * Add support for option to select default technology.
  * Add support for Address Conflict Detection (ACD).
  * Add support for IPv6 iptables management.
- Change in 1.36:
  * Fix issue with DNS short response on error handling.
  * Fix issue with handling incoming DNS requests.
  * Fix issue with handling empty timeserver list.
  * Fix issue with incorrect DHCP byte order.
  * Fix issue with AllowDomainnameUpdates handling.
  * Fix issue with IPv4 link-local IP conflict error.
  * Fix issue with handling WISPr over TLS connections.
  * Fix issue with WiFi background scanning handling.
  * Fix issue with WiFi disconnect+connect race condition.
  * Fix issue with WiFi scanning and tethering operation.
  * Fix issue with WiFi security change handling.
  * Fix issue with missing signal for WPS changes.
  * Fix issue with online check retry handling.
  * Add support for systemd-resolved backend.
  * Add support for mDNS configuration setup.
- Drop connman-1.35-include.patch
- Drop connman-1.35-resolvconf.patch</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1582027200">- Update to 1.38:
  * Fix issue with online check on IP address update.
  * Fix issue with OpenVPN and encrypted private keys.
  * Fix issue with finishing of VPN connections.
  * Add support for updated stable iwd APIs.
  * Add support for WireGuard networks.
- Spec file cleanup</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1613131200">- Update to 1.39 (bsc#1181751):
  * Fix issue with scanning state synchronization and iwd.
  * Fix issue with invalid key with 4-way handshake offloading.
  * Fix issue with DNS proxy length checks to prevent buffer overflow. (CVE-2021-26675)
  * Fix issue with DHCP leaking stack data via uninitialized variable. (CVE-2021-26676)</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1644580800">- Update to 1.41: (bsc#1194177, bsc#1194176, bsc#1194175)
  * Fix issue with RTNL netlink message alignment.
  * Fix issue with dnsproxy and timeout for TCP feature. (CVE-2022-23097, CVE-2022-23096)
  * Fix issue with dnsproxy and busy loop in TCP server. (CVE-2022-23098)
  * Fix issue with WiFi connection with no passphrase.
  * Add support for wpa_supplicant and WPA3-SAE functionality.
  * Add support for D-Bus ObjectManager interface.
- Renamed downstream patches to separate them from upstream patches
  * Rename 0001-connman-1.35-service.patch to 0100-connman-1.35-service.patch
- Add systemd hardening configuration
  * Rename harden_connman-vpn.service.patch to 0101-harden_connman-vpn.service.patch
  * Rename harden_connman-wait-online.service.patch to 0102-harden_connman-wait-online.service.patch
- Disabled openconnect plugin due to version conflict
- Disabled vpnc plugin for i568 missing dependency
- Disabled hh2serial and tist_working for ppc64le due to version conflict</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1659355200">- Add refcounting to wispr portal detection (bsc#1200190)
  * add 0001-wispr-Rename-wispr_portal_list-to-wispr_portal_hash.patch
  * add 0002-wispr-Ignore-NULL-proxy.patch
  * add 0003-wispr-Add-reference-counter-to-portal-context.patch (CVE-2022-32293)
  * add 0004-wispr-Update-portal-context-references.patch (CVE-2022-32293)
- Fix OOB write in received_data (bsc#1200189)
  * add 0005-gweb-Fix-OOB-write-in-received_data.patch (CVE-2022-32292)</changelog>
</package>
<package pkgid="eb93b03b9092dbcbfbb86148fa3ed8b297f8a3f7568d40e91d8c70923a77b6bc" name="connman-plugin-tist" arch="aarch64">
  <version epoch="0" ver="1.41" rel="bp154.2.3.1"/>
  <changelog author="sleep_walker@suse.cz" date="1423224000">- bump to 1.28
  ver 1.28:
  Fix issue with DHCPv6 re-transmission timer.
  Fix issue with DHCP service ID option byte order.
  Fix issue with IPv6 connections and SLAAC/DHCPv6.
  Fix issue with telephony and IPv6 autoconfiguration.
  Fix issue with Bluetooth technology setting changes.
  Fix issue with WiFi autoscan interval calculation.
  Fix issue with WiFi and missing BSS signal strength.
  Add support for IPv4 information for WiFi Display.
  ver 1.27:
  Fix issue with memory leak in IP configuration.
  Fix issue with providing random numbers for DHCP.
  Fix issue with handling IN_MOVED_TO inotify events.
  Fix issue with channel selection for WiFi scanning.
  Add support for handling Bluetooth GN and PANU roles.
  ver 1.26:
  Fix issue with missing WiFi security provisioning support.
  Fix issue with immutable setting and provisioned services.
  Fix issue with scheduling DNS cache cleanup procedure.
  Fix issue with IPv6 Privacy setting on service removal.
  Fix issue with DHCPv6 CONFIRM message sending procedure.
  Fix issue with DHCPv6 lease expiration handling support.
  Fix issue with DHCPv4 networks and broadcast flag handling.
  Fix issue with DHCPv4 networks without gateway configuration.
  Fix issue with P2P Peer authorization handling.
  Fix issue with P2P Peer service registration.
  Add support for WiFi Display information elements.
  Add support for systemd-hostnamed integration.
  ver 1.25:
  Fix issue with handling rebind timer for DHCPv6.
  Fix issue with handling DHCP renew transaction.
  Fix issue with user supplied proxy settings and DHCP.
  Fix issue with extra status codes from captive portals.
  Fix issue with service idle state reset on failure.
  Fix issue with DNS label compression handling.
  Add support for experimental P2P Peer service.
  ver 1.24:
  Fix issue with handling slave interfaces.
  Fix issue with handling DHCPv4 broadcast flag.
  Fix issue with handling DHCPv4 lease expiration.
  Fix issue with handling WiFi auto-scanning timeout.
  Fix issue with handling domain and DNS server changes.
  Fix issue with double free and agent messages.
  ver 1.23:
  Fix issue with memory leak in technology handling.
  Fix issue with not removing host route of OpenVPN.
  Fix issue with double free in DHCP cleanup handling.
  Fix issue with handling DHCP method from oFono.
  Fix issue with IPv6-PD when disabling tethering.
  Fix issue with DNS proxy when disabling tethering.
  Fix issue with Bluetooth start and stop interaction.
  Fix issue with Bluetooth PAN networks on adapter change.
  ver 1.22:
  Fix issue with WPS state synchronization.
  Fix issue with DNS servers and default service.
  Fix issue with DHCP client and rebooting state.
  Add support for NTP exponential backoff handling.
  Add support for NTP kiss-of-death packet handling.
  Add support for Ethernet gadget networking.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1438948800">- bump to 1.29
  Fix issue with IPv6 autoconfiguration when disabled.
  Fix issue with IPv6 temporary route handling.
  Fix issue with IPv6 timers for nameservers.
  Fix issue with DHPCv6 and route configuration.
  Fix issue with DHCPv6 source port and buggy servers.
  Fix issue with DHCPv6 rapid commit option length.
  Fix issue with DHCPv6 rapid commit error handling.
  Fix issue with handling invalid WiFi passphrases.
  Fix issue with connecting Ethernet devices.
  Add support for Ethernet and VLAN usage.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1444737600">- bumpt to 1.30
    Fix issue with pending DNS request during server change.
    Fix issue with empty strings in nameservers configuration.
    Fix issue with time servers during IP configuration change.
    Fix issue with 4-way handshake during roaming.
    Fix issue with open WiFi networks security.
    Fix issue with support for WiFi AnonymousIdentity.
    Fix issue with memory leak and DHCPv6 DUID handling.
    Fix issue with DHCP client and P2P interaction.
    Fix issue with handling provision file updates.
    Fix issue with VPN state updates.
    Disable 6to4 support by default.
- add keyring file
- clean with spec-cleaner
- fix builds for all possible distributions and architectures</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1503403200">- bump to 1.35
  besides other things contains fix for CVE-2017-12865</changelog>
  <changelog author="avvissu@yandex.by" date="1504872000">- Remove obsolete macros
- Add polkit-agent-1 dependency
- Use the %tmpfiles_create macro
- Removal of ldconfig scriptlets from all packages
- Add connman-wait-online.service in post{un}
- Spec file cleanup</changelog>
  <changelog author="avvissu@yandex.by" date="1507032000">- Add connman-1.35-resolvconf.patch
- Activate connman.service if the network services disabled
- Add info in /var/adm/update-messages</changelog>
  <changelog author="avvissu@yandex.by" date="1508414400">- Add configuration file (/etc/connman/main.conf)
- Add ghost lines: main.conf connman connman-vpn</changelog>
  <changelog author="avvissu@yandex.by" date="1508500800">- Remove unrecognized options: disable-gtk-doc, enable-threads,
  disable-iwmx, enable-session-policy</changelog>
  <changelog author="avvissu@yandex.by" date="1509019200">- Change the mode of download_files (sr#521762)
- Remove connman-rpmlintrc (bnc#1057697)
- Add client as a recommended dependency</changelog>
  <changelog author="avvissu@yandex.by" date="1514289600">- Add symlink to network.service (connman-1.35-service.patch)</changelog>
  <changelog author="avvissu@yandex.by" date="1518523200">- Fix build errors due to unsupported header include order with
  newer kernels &gt;=4.15 (connman-1.35-include.patch).</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1557489600">- Update to 1.37:
  * Fix issue with handling invalid gateway addresses.
  * Fix issue with handling updates of default gateway.
  * Fix issue with DHCP servers that require broadcast flag.
  * Add support for option to use gateways as time servers.
  * Add support for option to select default technology.
  * Add support for Address Conflict Detection (ACD).
  * Add support for IPv6 iptables management.
- Change in 1.36:
  * Fix issue with DNS short response on error handling.
  * Fix issue with handling incoming DNS requests.
  * Fix issue with handling empty timeserver list.
  * Fix issue with incorrect DHCP byte order.
  * Fix issue with AllowDomainnameUpdates handling.
  * Fix issue with IPv4 link-local IP conflict error.
  * Fix issue with handling WISPr over TLS connections.
  * Fix issue with WiFi background scanning handling.
  * Fix issue with WiFi disconnect+connect race condition.
  * Fix issue with WiFi scanning and tethering operation.
  * Fix issue with WiFi security change handling.
  * Fix issue with missing signal for WPS changes.
  * Fix issue with online check retry handling.
  * Add support for systemd-resolved backend.
  * Add support for mDNS configuration setup.
- Drop connman-1.35-include.patch
- Drop connman-1.35-resolvconf.patch</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1582027200">- Update to 1.38:
  * Fix issue with online check on IP address update.
  * Fix issue with OpenVPN and encrypted private keys.
  * Fix issue with finishing of VPN connections.
  * Add support for updated stable iwd APIs.
  * Add support for WireGuard networks.
- Spec file cleanup</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1613131200">- Update to 1.39 (bsc#1181751):
  * Fix issue with scanning state synchronization and iwd.
  * Fix issue with invalid key with 4-way handshake offloading.
  * Fix issue with DNS proxy length checks to prevent buffer overflow. (CVE-2021-26675)
  * Fix issue with DHCP leaking stack data via uninitialized variable. (CVE-2021-26676)</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1644580800">- Update to 1.41: (bsc#1194177, bsc#1194176, bsc#1194175)
  * Fix issue with RTNL netlink message alignment.
  * Fix issue with dnsproxy and timeout for TCP feature. (CVE-2022-23097, CVE-2022-23096)
  * Fix issue with dnsproxy and busy loop in TCP server. (CVE-2022-23098)
  * Fix issue with WiFi connection with no passphrase.
  * Add support for wpa_supplicant and WPA3-SAE functionality.
  * Add support for D-Bus ObjectManager interface.
- Renamed downstream patches to separate them from upstream patches
  * Rename 0001-connman-1.35-service.patch to 0100-connman-1.35-service.patch
- Add systemd hardening configuration
  * Rename harden_connman-vpn.service.patch to 0101-harden_connman-vpn.service.patch
  * Rename harden_connman-wait-online.service.patch to 0102-harden_connman-wait-online.service.patch
- Disabled openconnect plugin due to version conflict
- Disabled vpnc plugin for i568 missing dependency
- Disabled hh2serial and tist_working for ppc64le due to version conflict</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1659355200">- Add refcounting to wispr portal detection (bsc#1200190)
  * add 0001-wispr-Rename-wispr_portal_list-to-wispr_portal_hash.patch
  * add 0002-wispr-Ignore-NULL-proxy.patch
  * add 0003-wispr-Add-reference-counter-to-portal-context.patch (CVE-2022-32293)
  * add 0004-wispr-Update-portal-context-references.patch (CVE-2022-32293)
- Fix OOB write in received_data (bsc#1200189)
  * add 0005-gweb-Fix-OOB-write-in-received_data.patch (CVE-2022-32292)</changelog>
</package>
<package pkgid="9a0ba6db460576427e4ab6fc0044dc8551da73df056152c63d0b6a1ca2c5dc29" name="connman-plugin-tist" arch="i586">
  <version epoch="0" ver="1.41" rel="bp154.2.3.1"/>
  <changelog author="sleep_walker@suse.cz" date="1423224000">- bump to 1.28
  ver 1.28:
  Fix issue with DHCPv6 re-transmission timer.
  Fix issue with DHCP service ID option byte order.
  Fix issue with IPv6 connections and SLAAC/DHCPv6.
  Fix issue with telephony and IPv6 autoconfiguration.
  Fix issue with Bluetooth technology setting changes.
  Fix issue with WiFi autoscan interval calculation.
  Fix issue with WiFi and missing BSS signal strength.
  Add support for IPv4 information for WiFi Display.
  ver 1.27:
  Fix issue with memory leak in IP configuration.
  Fix issue with providing random numbers for DHCP.
  Fix issue with handling IN_MOVED_TO inotify events.
  Fix issue with channel selection for WiFi scanning.
  Add support for handling Bluetooth GN and PANU roles.
  ver 1.26:
  Fix issue with missing WiFi security provisioning support.
  Fix issue with immutable setting and provisioned services.
  Fix issue with scheduling DNS cache cleanup procedure.
  Fix issue with IPv6 Privacy setting on service removal.
  Fix issue with DHCPv6 CONFIRM message sending procedure.
  Fix issue with DHCPv6 lease expiration handling support.
  Fix issue with DHCPv4 networks and broadcast flag handling.
  Fix issue with DHCPv4 networks without gateway configuration.
  Fix issue with P2P Peer authorization handling.
  Fix issue with P2P Peer service registration.
  Add support for WiFi Display information elements.
  Add support for systemd-hostnamed integration.
  ver 1.25:
  Fix issue with handling rebind timer for DHCPv6.
  Fix issue with handling DHCP renew transaction.
  Fix issue with user supplied proxy settings and DHCP.
  Fix issue with extra status codes from captive portals.
  Fix issue with service idle state reset on failure.
  Fix issue with DNS label compression handling.
  Add support for experimental P2P Peer service.
  ver 1.24:
  Fix issue with handling slave interfaces.
  Fix issue with handling DHCPv4 broadcast flag.
  Fix issue with handling DHCPv4 lease expiration.
  Fix issue with handling WiFi auto-scanning timeout.
  Fix issue with handling domain and DNS server changes.
  Fix issue with double free and agent messages.
  ver 1.23:
  Fix issue with memory leak in technology handling.
  Fix issue with not removing host route of OpenVPN.
  Fix issue with double free in DHCP cleanup handling.
  Fix issue with handling DHCP method from oFono.
  Fix issue with IPv6-PD when disabling tethering.
  Fix issue with DNS proxy when disabling tethering.
  Fix issue with Bluetooth start and stop interaction.
  Fix issue with Bluetooth PAN networks on adapter change.
  ver 1.22:
  Fix issue with WPS state synchronization.
  Fix issue with DNS servers and default service.
  Fix issue with DHCP client and rebooting state.
  Add support for NTP exponential backoff handling.
  Add support for NTP kiss-of-death packet handling.
  Add support for Ethernet gadget networking.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1438948800">- bump to 1.29
  Fix issue with IPv6 autoconfiguration when disabled.
  Fix issue with IPv6 temporary route handling.
  Fix issue with IPv6 timers for nameservers.
  Fix issue with DHPCv6 and route configuration.
  Fix issue with DHCPv6 source port and buggy servers.
  Fix issue with DHCPv6 rapid commit option length.
  Fix issue with DHCPv6 rapid commit error handling.
  Fix issue with handling invalid WiFi passphrases.
  Fix issue with connecting Ethernet devices.
  Add support for Ethernet and VLAN usage.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1444737600">- bumpt to 1.30
    Fix issue with pending DNS request during server change.
    Fix issue with empty strings in nameservers configuration.
    Fix issue with time servers during IP configuration change.
    Fix issue with 4-way handshake during roaming.
    Fix issue with open WiFi networks security.
    Fix issue with support for WiFi AnonymousIdentity.
    Fix issue with memory leak and DHCPv6 DUID handling.
    Fix issue with DHCP client and P2P interaction.
    Fix issue with handling provision file updates.
    Fix issue with VPN state updates.
    Disable 6to4 support by default.
- add keyring file
- clean with spec-cleaner
- fix builds for all possible distributions and architectures</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1503403200">- bump to 1.35
  besides other things contains fix for CVE-2017-12865</changelog>
  <changelog author="avvissu@yandex.by" date="1504872000">- Remove obsolete macros
- Add polkit-agent-1 dependency
- Use the %tmpfiles_create macro
- Removal of ldconfig scriptlets from all packages
- Add connman-wait-online.service in post{un}
- Spec file cleanup</changelog>
  <changelog author="avvissu@yandex.by" date="1507032000">- Add connman-1.35-resolvconf.patch
- Activate connman.service if the network services disabled
- Add info in /var/adm/update-messages</changelog>
  <changelog author="avvissu@yandex.by" date="1508414400">- Add configuration file (/etc/connman/main.conf)
- Add ghost lines: main.conf connman connman-vpn</changelog>
  <changelog author="avvissu@yandex.by" date="1508500800">- Remove unrecognized options: disable-gtk-doc, enable-threads,
  disable-iwmx, enable-session-policy</changelog>
  <changelog author="avvissu@yandex.by" date="1509019200">- Change the mode of download_files (sr#521762)
- Remove connman-rpmlintrc (bnc#1057697)
- Add client as a recommended dependency</changelog>
  <changelog author="avvissu@yandex.by" date="1514289600">- Add symlink to network.service (connman-1.35-service.patch)</changelog>
  <changelog author="avvissu@yandex.by" date="1518523200">- Fix build errors due to unsupported header include order with
  newer kernels &gt;=4.15 (connman-1.35-include.patch).</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1557489600">- Update to 1.37:
  * Fix issue with handling invalid gateway addresses.
  * Fix issue with handling updates of default gateway.
  * Fix issue with DHCP servers that require broadcast flag.
  * Add support for option to use gateways as time servers.
  * Add support for option to select default technology.
  * Add support for Address Conflict Detection (ACD).
  * Add support for IPv6 iptables management.
- Change in 1.36:
  * Fix issue with DNS short response on error handling.
  * Fix issue with handling incoming DNS requests.
  * Fix issue with handling empty timeserver list.
  * Fix issue with incorrect DHCP byte order.
  * Fix issue with AllowDomainnameUpdates handling.
  * Fix issue with IPv4 link-local IP conflict error.
  * Fix issue with handling WISPr over TLS connections.
  * Fix issue with WiFi background scanning handling.
  * Fix issue with WiFi disconnect+connect race condition.
  * Fix issue with WiFi scanning and tethering operation.
  * Fix issue with WiFi security change handling.
  * Fix issue with missing signal for WPS changes.
  * Fix issue with online check retry handling.
  * Add support for systemd-resolved backend.
  * Add support for mDNS configuration setup.
- Drop connman-1.35-include.patch
- Drop connman-1.35-resolvconf.patch</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1582027200">- Update to 1.38:
  * Fix issue with online check on IP address update.
  * Fix issue with OpenVPN and encrypted private keys.
  * Fix issue with finishing of VPN connections.
  * Add support for updated stable iwd APIs.
  * Add support for WireGuard networks.
- Spec file cleanup</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1613131200">- Update to 1.39 (bsc#1181751):
  * Fix issue with scanning state synchronization and iwd.
  * Fix issue with invalid key with 4-way handshake offloading.
  * Fix issue with DNS proxy length checks to prevent buffer overflow. (CVE-2021-26675)
  * Fix issue with DHCP leaking stack data via uninitialized variable. (CVE-2021-26676)</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1644580800">- Update to 1.41: (bsc#1194177, bsc#1194176, bsc#1194175)
  * Fix issue with RTNL netlink message alignment.
  * Fix issue with dnsproxy and timeout for TCP feature. (CVE-2022-23097, CVE-2022-23096)
  * Fix issue with dnsproxy and busy loop in TCP server. (CVE-2022-23098)
  * Fix issue with WiFi connection with no passphrase.
  * Add support for wpa_supplicant and WPA3-SAE functionality.
  * Add support for D-Bus ObjectManager interface.
- Renamed downstream patches to separate them from upstream patches
  * Rename 0001-connman-1.35-service.patch to 0100-connman-1.35-service.patch
- Add systemd hardening configuration
  * Rename harden_connman-vpn.service.patch to 0101-harden_connman-vpn.service.patch
  * Rename harden_connman-wait-online.service.patch to 0102-harden_connman-wait-online.service.patch
- Disabled openconnect plugin due to version conflict
- Disabled vpnc plugin for i568 missing dependency
- Disabled hh2serial and tist_working for ppc64le due to version conflict</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1659355200">- Add refcounting to wispr portal detection (bsc#1200190)
  * add 0001-wispr-Rename-wispr_portal_list-to-wispr_portal_hash.patch
  * add 0002-wispr-Ignore-NULL-proxy.patch
  * add 0003-wispr-Add-reference-counter-to-portal-context.patch (CVE-2022-32293)
  * add 0004-wispr-Update-portal-context-references.patch (CVE-2022-32293)
- Fix OOB write in received_data (bsc#1200189)
  * add 0005-gweb-Fix-OOB-write-in-received_data.patch (CVE-2022-32292)</changelog>
</package>
<package pkgid="a5d172cb86e6bb55bd5dc723e705311f24d15c6b5135e36a77eb2da61ab796b6" name="connman-plugin-tist" arch="s390x">
  <version epoch="0" ver="1.41" rel="bp154.2.3.1"/>
  <changelog author="sleep_walker@suse.cz" date="1423224000">- bump to 1.28
  ver 1.28:
  Fix issue with DHCPv6 re-transmission timer.
  Fix issue with DHCP service ID option byte order.
  Fix issue with IPv6 connections and SLAAC/DHCPv6.
  Fix issue with telephony and IPv6 autoconfiguration.
  Fix issue with Bluetooth technology setting changes.
  Fix issue with WiFi autoscan interval calculation.
  Fix issue with WiFi and missing BSS signal strength.
  Add support for IPv4 information for WiFi Display.
  ver 1.27:
  Fix issue with memory leak in IP configuration.
  Fix issue with providing random numbers for DHCP.
  Fix issue with handling IN_MOVED_TO inotify events.
  Fix issue with channel selection for WiFi scanning.
  Add support for handling Bluetooth GN and PANU roles.
  ver 1.26:
  Fix issue with missing WiFi security provisioning support.
  Fix issue with immutable setting and provisioned services.
  Fix issue with scheduling DNS cache cleanup procedure.
  Fix issue with IPv6 Privacy setting on service removal.
  Fix issue with DHCPv6 CONFIRM message sending procedure.
  Fix issue with DHCPv6 lease expiration handling support.
  Fix issue with DHCPv4 networks and broadcast flag handling.
  Fix issue with DHCPv4 networks without gateway configuration.
  Fix issue with P2P Peer authorization handling.
  Fix issue with P2P Peer service registration.
  Add support for WiFi Display information elements.
  Add support for systemd-hostnamed integration.
  ver 1.25:
  Fix issue with handling rebind timer for DHCPv6.
  Fix issue with handling DHCP renew transaction.
  Fix issue with user supplied proxy settings and DHCP.
  Fix issue with extra status codes from captive portals.
  Fix issue with service idle state reset on failure.
  Fix issue with DNS label compression handling.
  Add support for experimental P2P Peer service.
  ver 1.24:
  Fix issue with handling slave interfaces.
  Fix issue with handling DHCPv4 broadcast flag.
  Fix issue with handling DHCPv4 lease expiration.
  Fix issue with handling WiFi auto-scanning timeout.
  Fix issue with handling domain and DNS server changes.
  Fix issue with double free and agent messages.
  ver 1.23:
  Fix issue with memory leak in technology handling.
  Fix issue with not removing host route of OpenVPN.
  Fix issue with double free in DHCP cleanup handling.
  Fix issue with handling DHCP method from oFono.
  Fix issue with IPv6-PD when disabling tethering.
  Fix issue with DNS proxy when disabling tethering.
  Fix issue with Bluetooth start and stop interaction.
  Fix issue with Bluetooth PAN networks on adapter change.
  ver 1.22:
  Fix issue with WPS state synchronization.
  Fix issue with DNS servers and default service.
  Fix issue with DHCP client and rebooting state.
  Add support for NTP exponential backoff handling.
  Add support for NTP kiss-of-death packet handling.
  Add support for Ethernet gadget networking.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1438948800">- bump to 1.29
  Fix issue with IPv6 autoconfiguration when disabled.
  Fix issue with IPv6 temporary route handling.
  Fix issue with IPv6 timers for nameservers.
  Fix issue with DHPCv6 and route configuration.
  Fix issue with DHCPv6 source port and buggy servers.
  Fix issue with DHCPv6 rapid commit option length.
  Fix issue with DHCPv6 rapid commit error handling.
  Fix issue with handling invalid WiFi passphrases.
  Fix issue with connecting Ethernet devices.
  Add support for Ethernet and VLAN usage.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1444737600">- bumpt to 1.30
    Fix issue with pending DNS request during server change.
    Fix issue with empty strings in nameservers configuration.
    Fix issue with time servers during IP configuration change.
    Fix issue with 4-way handshake during roaming.
    Fix issue with open WiFi networks security.
    Fix issue with support for WiFi AnonymousIdentity.
    Fix issue with memory leak and DHCPv6 DUID handling.
    Fix issue with DHCP client and P2P interaction.
    Fix issue with handling provision file updates.
    Fix issue with VPN state updates.
    Disable 6to4 support by default.
- add keyring file
- clean with spec-cleaner
- fix builds for all possible distributions and architectures</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1503403200">- bump to 1.35
  besides other things contains fix for CVE-2017-12865</changelog>
  <changelog author="avvissu@yandex.by" date="1504872000">- Remove obsolete macros
- Add polkit-agent-1 dependency
- Use the %tmpfiles_create macro
- Removal of ldconfig scriptlets from all packages
- Add connman-wait-online.service in post{un}
- Spec file cleanup</changelog>
  <changelog author="avvissu@yandex.by" date="1507032000">- Add connman-1.35-resolvconf.patch
- Activate connman.service if the network services disabled
- Add info in /var/adm/update-messages</changelog>
  <changelog author="avvissu@yandex.by" date="1508414400">- Add configuration file (/etc/connman/main.conf)
- Add ghost lines: main.conf connman connman-vpn</changelog>
  <changelog author="avvissu@yandex.by" date="1508500800">- Remove unrecognized options: disable-gtk-doc, enable-threads,
  disable-iwmx, enable-session-policy</changelog>
  <changelog author="avvissu@yandex.by" date="1509019200">- Change the mode of download_files (sr#521762)
- Remove connman-rpmlintrc (bnc#1057697)
- Add client as a recommended dependency</changelog>
  <changelog author="avvissu@yandex.by" date="1514289600">- Add symlink to network.service (connman-1.35-service.patch)</changelog>
  <changelog author="avvissu@yandex.by" date="1518523200">- Fix build errors due to unsupported header include order with
  newer kernels &gt;=4.15 (connman-1.35-include.patch).</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1557489600">- Update to 1.37:
  * Fix issue with handling invalid gateway addresses.
  * Fix issue with handling updates of default gateway.
  * Fix issue with DHCP servers that require broadcast flag.
  * Add support for option to use gateways as time servers.
  * Add support for option to select default technology.
  * Add support for Address Conflict Detection (ACD).
  * Add support for IPv6 iptables management.
- Change in 1.36:
  * Fix issue with DNS short response on error handling.
  * Fix issue with handling incoming DNS requests.
  * Fix issue with handling empty timeserver list.
  * Fix issue with incorrect DHCP byte order.
  * Fix issue with AllowDomainnameUpdates handling.
  * Fix issue with IPv4 link-local IP conflict error.
  * Fix issue with handling WISPr over TLS connections.
  * Fix issue with WiFi background scanning handling.
  * Fix issue with WiFi disconnect+connect race condition.
  * Fix issue with WiFi scanning and tethering operation.
  * Fix issue with WiFi security change handling.
  * Fix issue with missing signal for WPS changes.
  * Fix issue with online check retry handling.
  * Add support for systemd-resolved backend.
  * Add support for mDNS configuration setup.
- Drop connman-1.35-include.patch
- Drop connman-1.35-resolvconf.patch</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1582027200">- Update to 1.38:
  * Fix issue with online check on IP address update.
  * Fix issue with OpenVPN and encrypted private keys.
  * Fix issue with finishing of VPN connections.
  * Add support for updated stable iwd APIs.
  * Add support for WireGuard networks.
- Spec file cleanup</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1613131200">- Update to 1.39 (bsc#1181751):
  * Fix issue with scanning state synchronization and iwd.
  * Fix issue with invalid key with 4-way handshake offloading.
  * Fix issue with DNS proxy length checks to prevent buffer overflow. (CVE-2021-26675)
  * Fix issue with DHCP leaking stack data via uninitialized variable. (CVE-2021-26676)</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1644580800">- Update to 1.41: (bsc#1194177, bsc#1194176, bsc#1194175)
  * Fix issue with RTNL netlink message alignment.
  * Fix issue with dnsproxy and timeout for TCP feature. (CVE-2022-23097, CVE-2022-23096)
  * Fix issue with dnsproxy and busy loop in TCP server. (CVE-2022-23098)
  * Fix issue with WiFi connection with no passphrase.
  * Add support for wpa_supplicant and WPA3-SAE functionality.
  * Add support for D-Bus ObjectManager interface.
- Renamed downstream patches to separate them from upstream patches
  * Rename 0001-connman-1.35-service.patch to 0100-connman-1.35-service.patch
- Add systemd hardening configuration
  * Rename harden_connman-vpn.service.patch to 0101-harden_connman-vpn.service.patch
  * Rename harden_connman-wait-online.service.patch to 0102-harden_connman-wait-online.service.patch
- Disabled openconnect plugin due to version conflict
- Disabled vpnc plugin for i568 missing dependency
- Disabled hh2serial and tist_working for ppc64le due to version conflict</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1659355200">- Add refcounting to wispr portal detection (bsc#1200190)
  * add 0001-wispr-Rename-wispr_portal_list-to-wispr_portal_hash.patch
  * add 0002-wispr-Ignore-NULL-proxy.patch
  * add 0003-wispr-Add-reference-counter-to-portal-context.patch (CVE-2022-32293)
  * add 0004-wispr-Update-portal-context-references.patch (CVE-2022-32293)
- Fix OOB write in received_data (bsc#1200189)
  * add 0005-gweb-Fix-OOB-write-in-received_data.patch (CVE-2022-32292)</changelog>
</package>
<package pkgid="08028094a06704ca9ab7a9b44eb738cf15ad9f2b61fb98c11ea67adfc01a6638" name="connman-plugin-tist" arch="x86_64">
  <version epoch="0" ver="1.41" rel="bp154.2.3.1"/>
  <changelog author="sleep_walker@suse.cz" date="1423224000">- bump to 1.28
  ver 1.28:
  Fix issue with DHCPv6 re-transmission timer.
  Fix issue with DHCP service ID option byte order.
  Fix issue with IPv6 connections and SLAAC/DHCPv6.
  Fix issue with telephony and IPv6 autoconfiguration.
  Fix issue with Bluetooth technology setting changes.
  Fix issue with WiFi autoscan interval calculation.
  Fix issue with WiFi and missing BSS signal strength.
  Add support for IPv4 information for WiFi Display.
  ver 1.27:
  Fix issue with memory leak in IP configuration.
  Fix issue with providing random numbers for DHCP.
  Fix issue with handling IN_MOVED_TO inotify events.
  Fix issue with channel selection for WiFi scanning.
  Add support for handling Bluetooth GN and PANU roles.
  ver 1.26:
  Fix issue with missing WiFi security provisioning support.
  Fix issue with immutable setting and provisioned services.
  Fix issue with scheduling DNS cache cleanup procedure.
  Fix issue with IPv6 Privacy setting on service removal.
  Fix issue with DHCPv6 CONFIRM message sending procedure.
  Fix issue with DHCPv6 lease expiration handling support.
  Fix issue with DHCPv4 networks and broadcast flag handling.
  Fix issue with DHCPv4 networks without gateway configuration.
  Fix issue with P2P Peer authorization handling.
  Fix issue with P2P Peer service registration.
  Add support for WiFi Display information elements.
  Add support for systemd-hostnamed integration.
  ver 1.25:
  Fix issue with handling rebind timer for DHCPv6.
  Fix issue with handling DHCP renew transaction.
  Fix issue with user supplied proxy settings and DHCP.
  Fix issue with extra status codes from captive portals.
  Fix issue with service idle state reset on failure.
  Fix issue with DNS label compression handling.
  Add support for experimental P2P Peer service.
  ver 1.24:
  Fix issue with handling slave interfaces.
  Fix issue with handling DHCPv4 broadcast flag.
  Fix issue with handling DHCPv4 lease expiration.
  Fix issue with handling WiFi auto-scanning timeout.
  Fix issue with handling domain and DNS server changes.
  Fix issue with double free and agent messages.
  ver 1.23:
  Fix issue with memory leak in technology handling.
  Fix issue with not removing host route of OpenVPN.
  Fix issue with double free in DHCP cleanup handling.
  Fix issue with handling DHCP method from oFono.
  Fix issue with IPv6-PD when disabling tethering.
  Fix issue with DNS proxy when disabling tethering.
  Fix issue with Bluetooth start and stop interaction.
  Fix issue with Bluetooth PAN networks on adapter change.
  ver 1.22:
  Fix issue with WPS state synchronization.
  Fix issue with DNS servers and default service.
  Fix issue with DHCP client and rebooting state.
  Add support for NTP exponential backoff handling.
  Add support for NTP kiss-of-death packet handling.
  Add support for Ethernet gadget networking.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1438948800">- bump to 1.29
  Fix issue with IPv6 autoconfiguration when disabled.
  Fix issue with IPv6 temporary route handling.
  Fix issue with IPv6 timers for nameservers.
  Fix issue with DHPCv6 and route configuration.
  Fix issue with DHCPv6 source port and buggy servers.
  Fix issue with DHCPv6 rapid commit option length.
  Fix issue with DHCPv6 rapid commit error handling.
  Fix issue with handling invalid WiFi passphrases.
  Fix issue with connecting Ethernet devices.
  Add support for Ethernet and VLAN usage.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1444737600">- bumpt to 1.30
    Fix issue with pending DNS request during server change.
    Fix issue with empty strings in nameservers configuration.
    Fix issue with time servers during IP configuration change.
    Fix issue with 4-way handshake during roaming.
    Fix issue with open WiFi networks security.
    Fix issue with support for WiFi AnonymousIdentity.
    Fix issue with memory leak and DHCPv6 DUID handling.
    Fix issue with DHCP client and P2P interaction.
    Fix issue with handling provision file updates.
    Fix issue with VPN state updates.
    Disable 6to4 support by default.
- add keyring file
- clean with spec-cleaner
- fix builds for all possible distributions and architectures</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1503403200">- bump to 1.35
  besides other things contains fix for CVE-2017-12865</changelog>
  <changelog author="avvissu@yandex.by" date="1504872000">- Remove obsolete macros
- Add polkit-agent-1 dependency
- Use the %tmpfiles_create macro
- Removal of ldconfig scriptlets from all packages
- Add connman-wait-online.service in post{un}
- Spec file cleanup</changelog>
  <changelog author="avvissu@yandex.by" date="1507032000">- Add connman-1.35-resolvconf.patch
- Activate connman.service if the network services disabled
- Add info in /var/adm/update-messages</changelog>
  <changelog author="avvissu@yandex.by" date="1508414400">- Add configuration file (/etc/connman/main.conf)
- Add ghost lines: main.conf connman connman-vpn</changelog>
  <changelog author="avvissu@yandex.by" date="1508500800">- Remove unrecognized options: disable-gtk-doc, enable-threads,
  disable-iwmx, enable-session-policy</changelog>
  <changelog author="avvissu@yandex.by" date="1509019200">- Change the mode of download_files (sr#521762)
- Remove connman-rpmlintrc (bnc#1057697)
- Add client as a recommended dependency</changelog>
  <changelog author="avvissu@yandex.by" date="1514289600">- Add symlink to network.service (connman-1.35-service.patch)</changelog>
  <changelog author="avvissu@yandex.by" date="1518523200">- Fix build errors due to unsupported header include order with
  newer kernels &gt;=4.15 (connman-1.35-include.patch).</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1557489600">- Update to 1.37:
  * Fix issue with handling invalid gateway addresses.
  * Fix issue with handling updates of default gateway.
  * Fix issue with DHCP servers that require broadcast flag.
  * Add support for option to use gateways as time servers.
  * Add support for option to select default technology.
  * Add support for Address Conflict Detection (ACD).
  * Add support for IPv6 iptables management.
- Change in 1.36:
  * Fix issue with DNS short response on error handling.
  * Fix issue with handling incoming DNS requests.
  * Fix issue with handling empty timeserver list.
  * Fix issue with incorrect DHCP byte order.
  * Fix issue with AllowDomainnameUpdates handling.
  * Fix issue with IPv4 link-local IP conflict error.
  * Fix issue with handling WISPr over TLS connections.
  * Fix issue with WiFi background scanning handling.
  * Fix issue with WiFi disconnect+connect race condition.
  * Fix issue with WiFi scanning and tethering operation.
  * Fix issue with WiFi security change handling.
  * Fix issue with missing signal for WPS changes.
  * Fix issue with online check retry handling.
  * Add support for systemd-resolved backend.
  * Add support for mDNS configuration setup.
- Drop connman-1.35-include.patch
- Drop connman-1.35-resolvconf.patch</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1582027200">- Update to 1.38:
  * Fix issue with online check on IP address update.
  * Fix issue with OpenVPN and encrypted private keys.
  * Fix issue with finishing of VPN connections.
  * Add support for updated stable iwd APIs.
  * Add support for WireGuard networks.
- Spec file cleanup</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1613131200">- Update to 1.39 (bsc#1181751):
  * Fix issue with scanning state synchronization and iwd.
  * Fix issue with invalid key with 4-way handshake offloading.
  * Fix issue with DNS proxy length checks to prevent buffer overflow. (CVE-2021-26675)
  * Fix issue with DHCP leaking stack data via uninitialized variable. (CVE-2021-26676)</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1644580800">- Update to 1.41: (bsc#1194177, bsc#1194176, bsc#1194175)
  * Fix issue with RTNL netlink message alignment.
  * Fix issue with dnsproxy and timeout for TCP feature. (CVE-2022-23097, CVE-2022-23096)
  * Fix issue with dnsproxy and busy loop in TCP server. (CVE-2022-23098)
  * Fix issue with WiFi connection with no passphrase.
  * Add support for wpa_supplicant and WPA3-SAE functionality.
  * Add support for D-Bus ObjectManager interface.
- Renamed downstream patches to separate them from upstream patches
  * Rename 0001-connman-1.35-service.patch to 0100-connman-1.35-service.patch
- Add systemd hardening configuration
  * Rename harden_connman-vpn.service.patch to 0101-harden_connman-vpn.service.patch
  * Rename harden_connman-wait-online.service.patch to 0102-harden_connman-wait-online.service.patch
- Disabled openconnect plugin due to version conflict
- Disabled vpnc plugin for i568 missing dependency
- Disabled hh2serial and tist_working for ppc64le due to version conflict</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1659355200">- Add refcounting to wispr portal detection (bsc#1200190)
  * add 0001-wispr-Rename-wispr_portal_list-to-wispr_portal_hash.patch
  * add 0002-wispr-Ignore-NULL-proxy.patch
  * add 0003-wispr-Add-reference-counter-to-portal-context.patch (CVE-2022-32293)
  * add 0004-wispr-Update-portal-context-references.patch (CVE-2022-32293)
- Fix OOB write in received_data (bsc#1200189)
  * add 0005-gweb-Fix-OOB-write-in-received_data.patch (CVE-2022-32292)</changelog>
</package>
<package pkgid="b358b802b45e7418f39012bb35dd92d035dfdfdd37657157347074f81ae11594" name="connman-plugin-vpnc" arch="aarch64">
  <version epoch="0" ver="1.41" rel="bp154.2.3.1"/>
  <changelog author="sleep_walker@suse.cz" date="1423224000">- bump to 1.28
  ver 1.28:
  Fix issue with DHCPv6 re-transmission timer.
  Fix issue with DHCP service ID option byte order.
  Fix issue with IPv6 connections and SLAAC/DHCPv6.
  Fix issue with telephony and IPv6 autoconfiguration.
  Fix issue with Bluetooth technology setting changes.
  Fix issue with WiFi autoscan interval calculation.
  Fix issue with WiFi and missing BSS signal strength.
  Add support for IPv4 information for WiFi Display.
  ver 1.27:
  Fix issue with memory leak in IP configuration.
  Fix issue with providing random numbers for DHCP.
  Fix issue with handling IN_MOVED_TO inotify events.
  Fix issue with channel selection for WiFi scanning.
  Add support for handling Bluetooth GN and PANU roles.
  ver 1.26:
  Fix issue with missing WiFi security provisioning support.
  Fix issue with immutable setting and provisioned services.
  Fix issue with scheduling DNS cache cleanup procedure.
  Fix issue with IPv6 Privacy setting on service removal.
  Fix issue with DHCPv6 CONFIRM message sending procedure.
  Fix issue with DHCPv6 lease expiration handling support.
  Fix issue with DHCPv4 networks and broadcast flag handling.
  Fix issue with DHCPv4 networks without gateway configuration.
  Fix issue with P2P Peer authorization handling.
  Fix issue with P2P Peer service registration.
  Add support for WiFi Display information elements.
  Add support for systemd-hostnamed integration.
  ver 1.25:
  Fix issue with handling rebind timer for DHCPv6.
  Fix issue with handling DHCP renew transaction.
  Fix issue with user supplied proxy settings and DHCP.
  Fix issue with extra status codes from captive portals.
  Fix issue with service idle state reset on failure.
  Fix issue with DNS label compression handling.
  Add support for experimental P2P Peer service.
  ver 1.24:
  Fix issue with handling slave interfaces.
  Fix issue with handling DHCPv4 broadcast flag.
  Fix issue with handling DHCPv4 lease expiration.
  Fix issue with handling WiFi auto-scanning timeout.
  Fix issue with handling domain and DNS server changes.
  Fix issue with double free and agent messages.
  ver 1.23:
  Fix issue with memory leak in technology handling.
  Fix issue with not removing host route of OpenVPN.
  Fix issue with double free in DHCP cleanup handling.
  Fix issue with handling DHCP method from oFono.
  Fix issue with IPv6-PD when disabling tethering.
  Fix issue with DNS proxy when disabling tethering.
  Fix issue with Bluetooth start and stop interaction.
  Fix issue with Bluetooth PAN networks on adapter change.
  ver 1.22:
  Fix issue with WPS state synchronization.
  Fix issue with DNS servers and default service.
  Fix issue with DHCP client and rebooting state.
  Add support for NTP exponential backoff handling.
  Add support for NTP kiss-of-death packet handling.
  Add support for Ethernet gadget networking.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1438948800">- bump to 1.29
  Fix issue with IPv6 autoconfiguration when disabled.
  Fix issue with IPv6 temporary route handling.
  Fix issue with IPv6 timers for nameservers.
  Fix issue with DHPCv6 and route configuration.
  Fix issue with DHCPv6 source port and buggy servers.
  Fix issue with DHCPv6 rapid commit option length.
  Fix issue with DHCPv6 rapid commit error handling.
  Fix issue with handling invalid WiFi passphrases.
  Fix issue with connecting Ethernet devices.
  Add support for Ethernet and VLAN usage.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1444737600">- bumpt to 1.30
    Fix issue with pending DNS request during server change.
    Fix issue with empty strings in nameservers configuration.
    Fix issue with time servers during IP configuration change.
    Fix issue with 4-way handshake during roaming.
    Fix issue with open WiFi networks security.
    Fix issue with support for WiFi AnonymousIdentity.
    Fix issue with memory leak and DHCPv6 DUID handling.
    Fix issue with DHCP client and P2P interaction.
    Fix issue with handling provision file updates.
    Fix issue with VPN state updates.
    Disable 6to4 support by default.
- add keyring file
- clean with spec-cleaner
- fix builds for all possible distributions and architectures</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1503403200">- bump to 1.35
  besides other things contains fix for CVE-2017-12865</changelog>
  <changelog author="avvissu@yandex.by" date="1504872000">- Remove obsolete macros
- Add polkit-agent-1 dependency
- Use the %tmpfiles_create macro
- Removal of ldconfig scriptlets from all packages
- Add connman-wait-online.service in post{un}
- Spec file cleanup</changelog>
  <changelog author="avvissu@yandex.by" date="1507032000">- Add connman-1.35-resolvconf.patch
- Activate connman.service if the network services disabled
- Add info in /var/adm/update-messages</changelog>
  <changelog author="avvissu@yandex.by" date="1508414400">- Add configuration file (/etc/connman/main.conf)
- Add ghost lines: main.conf connman connman-vpn</changelog>
  <changelog author="avvissu@yandex.by" date="1508500800">- Remove unrecognized options: disable-gtk-doc, enable-threads,
  disable-iwmx, enable-session-policy</changelog>
  <changelog author="avvissu@yandex.by" date="1509019200">- Change the mode of download_files (sr#521762)
- Remove connman-rpmlintrc (bnc#1057697)
- Add client as a recommended dependency</changelog>
  <changelog author="avvissu@yandex.by" date="1514289600">- Add symlink to network.service (connman-1.35-service.patch)</changelog>
  <changelog author="avvissu@yandex.by" date="1518523200">- Fix build errors due to unsupported header include order with
  newer kernels &gt;=4.15 (connman-1.35-include.patch).</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1557489600">- Update to 1.37:
  * Fix issue with handling invalid gateway addresses.
  * Fix issue with handling updates of default gateway.
  * Fix issue with DHCP servers that require broadcast flag.
  * Add support for option to use gateways as time servers.
  * Add support for option to select default technology.
  * Add support for Address Conflict Detection (ACD).
  * Add support for IPv6 iptables management.
- Change in 1.36:
  * Fix issue with DNS short response on error handling.
  * Fix issue with handling incoming DNS requests.
  * Fix issue with handling empty timeserver list.
  * Fix issue with incorrect DHCP byte order.
  * Fix issue with AllowDomainnameUpdates handling.
  * Fix issue with IPv4 link-local IP conflict error.
  * Fix issue with handling WISPr over TLS connections.
  * Fix issue with WiFi background scanning handling.
  * Fix issue with WiFi disconnect+connect race condition.
  * Fix issue with WiFi scanning and tethering operation.
  * Fix issue with WiFi security change handling.
  * Fix issue with missing signal for WPS changes.
  * Fix issue with online check retry handling.
  * Add support for systemd-resolved backend.
  * Add support for mDNS configuration setup.
- Drop connman-1.35-include.patch
- Drop connman-1.35-resolvconf.patch</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1582027200">- Update to 1.38:
  * Fix issue with online check on IP address update.
  * Fix issue with OpenVPN and encrypted private keys.
  * Fix issue with finishing of VPN connections.
  * Add support for updated stable iwd APIs.
  * Add support for WireGuard networks.
- Spec file cleanup</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1613131200">- Update to 1.39 (bsc#1181751):
  * Fix issue with scanning state synchronization and iwd.
  * Fix issue with invalid key with 4-way handshake offloading.
  * Fix issue with DNS proxy length checks to prevent buffer overflow. (CVE-2021-26675)
  * Fix issue with DHCP leaking stack data via uninitialized variable. (CVE-2021-26676)</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1644580800">- Update to 1.41: (bsc#1194177, bsc#1194176, bsc#1194175)
  * Fix issue with RTNL netlink message alignment.
  * Fix issue with dnsproxy and timeout for TCP feature. (CVE-2022-23097, CVE-2022-23096)
  * Fix issue with dnsproxy and busy loop in TCP server. (CVE-2022-23098)
  * Fix issue with WiFi connection with no passphrase.
  * Add support for wpa_supplicant and WPA3-SAE functionality.
  * Add support for D-Bus ObjectManager interface.
- Renamed downstream patches to separate them from upstream patches
  * Rename 0001-connman-1.35-service.patch to 0100-connman-1.35-service.patch
- Add systemd hardening configuration
  * Rename harden_connman-vpn.service.patch to 0101-harden_connman-vpn.service.patch
  * Rename harden_connman-wait-online.service.patch to 0102-harden_connman-wait-online.service.patch
- Disabled openconnect plugin due to version conflict
- Disabled vpnc plugin for i568 missing dependency
- Disabled hh2serial and tist_working for ppc64le due to version conflict</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1659355200">- Add refcounting to wispr portal detection (bsc#1200190)
  * add 0001-wispr-Rename-wispr_portal_list-to-wispr_portal_hash.patch
  * add 0002-wispr-Ignore-NULL-proxy.patch
  * add 0003-wispr-Add-reference-counter-to-portal-context.patch (CVE-2022-32293)
  * add 0004-wispr-Update-portal-context-references.patch (CVE-2022-32293)
- Fix OOB write in received_data (bsc#1200189)
  * add 0005-gweb-Fix-OOB-write-in-received_data.patch (CVE-2022-32292)</changelog>
</package>
<package pkgid="cd562efa66cc3e6b791123527ccd8fb5846b9310c64e7daa11321ef8010df3bb" name="connman-plugin-vpnc" arch="ppc64le">
  <version epoch="0" ver="1.41" rel="bp154.2.3.1"/>
  <changelog author="sleep_walker@suse.cz" date="1423224000">- bump to 1.28
  ver 1.28:
  Fix issue with DHCPv6 re-transmission timer.
  Fix issue with DHCP service ID option byte order.
  Fix issue with IPv6 connections and SLAAC/DHCPv6.
  Fix issue with telephony and IPv6 autoconfiguration.
  Fix issue with Bluetooth technology setting changes.
  Fix issue with WiFi autoscan interval calculation.
  Fix issue with WiFi and missing BSS signal strength.
  Add support for IPv4 information for WiFi Display.
  ver 1.27:
  Fix issue with memory leak in IP configuration.
  Fix issue with providing random numbers for DHCP.
  Fix issue with handling IN_MOVED_TO inotify events.
  Fix issue with channel selection for WiFi scanning.
  Add support for handling Bluetooth GN and PANU roles.
  ver 1.26:
  Fix issue with missing WiFi security provisioning support.
  Fix issue with immutable setting and provisioned services.
  Fix issue with scheduling DNS cache cleanup procedure.
  Fix issue with IPv6 Privacy setting on service removal.
  Fix issue with DHCPv6 CONFIRM message sending procedure.
  Fix issue with DHCPv6 lease expiration handling support.
  Fix issue with DHCPv4 networks and broadcast flag handling.
  Fix issue with DHCPv4 networks without gateway configuration.
  Fix issue with P2P Peer authorization handling.
  Fix issue with P2P Peer service registration.
  Add support for WiFi Display information elements.
  Add support for systemd-hostnamed integration.
  ver 1.25:
  Fix issue with handling rebind timer for DHCPv6.
  Fix issue with handling DHCP renew transaction.
  Fix issue with user supplied proxy settings and DHCP.
  Fix issue with extra status codes from captive portals.
  Fix issue with service idle state reset on failure.
  Fix issue with DNS label compression handling.
  Add support for experimental P2P Peer service.
  ver 1.24:
  Fix issue with handling slave interfaces.
  Fix issue with handling DHCPv4 broadcast flag.
  Fix issue with handling DHCPv4 lease expiration.
  Fix issue with handling WiFi auto-scanning timeout.
  Fix issue with handling domain and DNS server changes.
  Fix issue with double free and agent messages.
  ver 1.23:
  Fix issue with memory leak in technology handling.
  Fix issue with not removing host route of OpenVPN.
  Fix issue with double free in DHCP cleanup handling.
  Fix issue with handling DHCP method from oFono.
  Fix issue with IPv6-PD when disabling tethering.
  Fix issue with DNS proxy when disabling tethering.
  Fix issue with Bluetooth start and stop interaction.
  Fix issue with Bluetooth PAN networks on adapter change.
  ver 1.22:
  Fix issue with WPS state synchronization.
  Fix issue with DNS servers and default service.
  Fix issue with DHCP client and rebooting state.
  Add support for NTP exponential backoff handling.
  Add support for NTP kiss-of-death packet handling.
  Add support for Ethernet gadget networking.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1438948800">- bump to 1.29
  Fix issue with IPv6 autoconfiguration when disabled.
  Fix issue with IPv6 temporary route handling.
  Fix issue with IPv6 timers for nameservers.
  Fix issue with DHPCv6 and route configuration.
  Fix issue with DHCPv6 source port and buggy servers.
  Fix issue with DHCPv6 rapid commit option length.
  Fix issue with DHCPv6 rapid commit error handling.
  Fix issue with handling invalid WiFi passphrases.
  Fix issue with connecting Ethernet devices.
  Add support for Ethernet and VLAN usage.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1444737600">- bumpt to 1.30
    Fix issue with pending DNS request during server change.
    Fix issue with empty strings in nameservers configuration.
    Fix issue with time servers during IP configuration change.
    Fix issue with 4-way handshake during roaming.
    Fix issue with open WiFi networks security.
    Fix issue with support for WiFi AnonymousIdentity.
    Fix issue with memory leak and DHCPv6 DUID handling.
    Fix issue with DHCP client and P2P interaction.
    Fix issue with handling provision file updates.
    Fix issue with VPN state updates.
    Disable 6to4 support by default.
- add keyring file
- clean with spec-cleaner
- fix builds for all possible distributions and architectures</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1503403200">- bump to 1.35
  besides other things contains fix for CVE-2017-12865</changelog>
  <changelog author="avvissu@yandex.by" date="1504872000">- Remove obsolete macros
- Add polkit-agent-1 dependency
- Use the %tmpfiles_create macro
- Removal of ldconfig scriptlets from all packages
- Add connman-wait-online.service in post{un}
- Spec file cleanup</changelog>
  <changelog author="avvissu@yandex.by" date="1507032000">- Add connman-1.35-resolvconf.patch
- Activate connman.service if the network services disabled
- Add info in /var/adm/update-messages</changelog>
  <changelog author="avvissu@yandex.by" date="1508414400">- Add configuration file (/etc/connman/main.conf)
- Add ghost lines: main.conf connman connman-vpn</changelog>
  <changelog author="avvissu@yandex.by" date="1508500800">- Remove unrecognized options: disable-gtk-doc, enable-threads,
  disable-iwmx, enable-session-policy</changelog>
  <changelog author="avvissu@yandex.by" date="1509019200">- Change the mode of download_files (sr#521762)
- Remove connman-rpmlintrc (bnc#1057697)
- Add client as a recommended dependency</changelog>
  <changelog author="avvissu@yandex.by" date="1514289600">- Add symlink to network.service (connman-1.35-service.patch)</changelog>
  <changelog author="avvissu@yandex.by" date="1518523200">- Fix build errors due to unsupported header include order with
  newer kernels &gt;=4.15 (connman-1.35-include.patch).</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1557489600">- Update to 1.37:
  * Fix issue with handling invalid gateway addresses.
  * Fix issue with handling updates of default gateway.
  * Fix issue with DHCP servers that require broadcast flag.
  * Add support for option to use gateways as time servers.
  * Add support for option to select default technology.
  * Add support for Address Conflict Detection (ACD).
  * Add support for IPv6 iptables management.
- Change in 1.36:
  * Fix issue with DNS short response on error handling.
  * Fix issue with handling incoming DNS requests.
  * Fix issue with handling empty timeserver list.
  * Fix issue with incorrect DHCP byte order.
  * Fix issue with AllowDomainnameUpdates handling.
  * Fix issue with IPv4 link-local IP conflict error.
  * Fix issue with handling WISPr over TLS connections.
  * Fix issue with WiFi background scanning handling.
  * Fix issue with WiFi disconnect+connect race condition.
  * Fix issue with WiFi scanning and tethering operation.
  * Fix issue with WiFi security change handling.
  * Fix issue with missing signal for WPS changes.
  * Fix issue with online check retry handling.
  * Add support for systemd-resolved backend.
  * Add support for mDNS configuration setup.
- Drop connman-1.35-include.patch
- Drop connman-1.35-resolvconf.patch</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1582027200">- Update to 1.38:
  * Fix issue with online check on IP address update.
  * Fix issue with OpenVPN and encrypted private keys.
  * Fix issue with finishing of VPN connections.
  * Add support for updated stable iwd APIs.
  * Add support for WireGuard networks.
- Spec file cleanup</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1613131200">- Update to 1.39 (bsc#1181751):
  * Fix issue with scanning state synchronization and iwd.
  * Fix issue with invalid key with 4-way handshake offloading.
  * Fix issue with DNS proxy length checks to prevent buffer overflow. (CVE-2021-26675)
  * Fix issue with DHCP leaking stack data via uninitialized variable. (CVE-2021-26676)</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1644580800">- Update to 1.41: (bsc#1194177, bsc#1194176, bsc#1194175)
  * Fix issue with RTNL netlink message alignment.
  * Fix issue with dnsproxy and timeout for TCP feature. (CVE-2022-23097, CVE-2022-23096)
  * Fix issue with dnsproxy and busy loop in TCP server. (CVE-2022-23098)
  * Fix issue with WiFi connection with no passphrase.
  * Add support for wpa_supplicant and WPA3-SAE functionality.
  * Add support for D-Bus ObjectManager interface.
- Renamed downstream patches to separate them from upstream patches
  * Rename 0001-connman-1.35-service.patch to 0100-connman-1.35-service.patch
- Add systemd hardening configuration
  * Rename harden_connman-vpn.service.patch to 0101-harden_connman-vpn.service.patch
  * Rename harden_connman-wait-online.service.patch to 0102-harden_connman-wait-online.service.patch
- Disabled openconnect plugin due to version conflict
- Disabled vpnc plugin for i568 missing dependency
- Disabled hh2serial and tist_working for ppc64le due to version conflict</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1659355200">- Add refcounting to wispr portal detection (bsc#1200190)
  * add 0001-wispr-Rename-wispr_portal_list-to-wispr_portal_hash.patch
  * add 0002-wispr-Ignore-NULL-proxy.patch
  * add 0003-wispr-Add-reference-counter-to-portal-context.patch (CVE-2022-32293)
  * add 0004-wispr-Update-portal-context-references.patch (CVE-2022-32293)
- Fix OOB write in received_data (bsc#1200189)
  * add 0005-gweb-Fix-OOB-write-in-received_data.patch (CVE-2022-32292)</changelog>
</package>
<package pkgid="de8457cafdc646dcf54725b1f69314f93f8ba8646604f59be2ef1251888eda2e" name="connman-plugin-vpnc" arch="s390x">
  <version epoch="0" ver="1.41" rel="bp154.2.3.1"/>
  <changelog author="sleep_walker@suse.cz" date="1423224000">- bump to 1.28
  ver 1.28:
  Fix issue with DHCPv6 re-transmission timer.
  Fix issue with DHCP service ID option byte order.
  Fix issue with IPv6 connections and SLAAC/DHCPv6.
  Fix issue with telephony and IPv6 autoconfiguration.
  Fix issue with Bluetooth technology setting changes.
  Fix issue with WiFi autoscan interval calculation.
  Fix issue with WiFi and missing BSS signal strength.
  Add support for IPv4 information for WiFi Display.
  ver 1.27:
  Fix issue with memory leak in IP configuration.
  Fix issue with providing random numbers for DHCP.
  Fix issue with handling IN_MOVED_TO inotify events.
  Fix issue with channel selection for WiFi scanning.
  Add support for handling Bluetooth GN and PANU roles.
  ver 1.26:
  Fix issue with missing WiFi security provisioning support.
  Fix issue with immutable setting and provisioned services.
  Fix issue with scheduling DNS cache cleanup procedure.
  Fix issue with IPv6 Privacy setting on service removal.
  Fix issue with DHCPv6 CONFIRM message sending procedure.
  Fix issue with DHCPv6 lease expiration handling support.
  Fix issue with DHCPv4 networks and broadcast flag handling.
  Fix issue with DHCPv4 networks without gateway configuration.
  Fix issue with P2P Peer authorization handling.
  Fix issue with P2P Peer service registration.
  Add support for WiFi Display information elements.
  Add support for systemd-hostnamed integration.
  ver 1.25:
  Fix issue with handling rebind timer for DHCPv6.
  Fix issue with handling DHCP renew transaction.
  Fix issue with user supplied proxy settings and DHCP.
  Fix issue with extra status codes from captive portals.
  Fix issue with service idle state reset on failure.
  Fix issue with DNS label compression handling.
  Add support for experimental P2P Peer service.
  ver 1.24:
  Fix issue with handling slave interfaces.
  Fix issue with handling DHCPv4 broadcast flag.
  Fix issue with handling DHCPv4 lease expiration.
  Fix issue with handling WiFi auto-scanning timeout.
  Fix issue with handling domain and DNS server changes.
  Fix issue with double free and agent messages.
  ver 1.23:
  Fix issue with memory leak in technology handling.
  Fix issue with not removing host route of OpenVPN.
  Fix issue with double free in DHCP cleanup handling.
  Fix issue with handling DHCP method from oFono.
  Fix issue with IPv6-PD when disabling tethering.
  Fix issue with DNS proxy when disabling tethering.
  Fix issue with Bluetooth start and stop interaction.
  Fix issue with Bluetooth PAN networks on adapter change.
  ver 1.22:
  Fix issue with WPS state synchronization.
  Fix issue with DNS servers and default service.
  Fix issue with DHCP client and rebooting state.
  Add support for NTP exponential backoff handling.
  Add support for NTP kiss-of-death packet handling.
  Add support for Ethernet gadget networking.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1438948800">- bump to 1.29
  Fix issue with IPv6 autoconfiguration when disabled.
  Fix issue with IPv6 temporary route handling.
  Fix issue with IPv6 timers for nameservers.
  Fix issue with DHPCv6 and route configuration.
  Fix issue with DHCPv6 source port and buggy servers.
  Fix issue with DHCPv6 rapid commit option length.
  Fix issue with DHCPv6 rapid commit error handling.
  Fix issue with handling invalid WiFi passphrases.
  Fix issue with connecting Ethernet devices.
  Add support for Ethernet and VLAN usage.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1444737600">- bumpt to 1.30
    Fix issue with pending DNS request during server change.
    Fix issue with empty strings in nameservers configuration.
    Fix issue with time servers during IP configuration change.
    Fix issue with 4-way handshake during roaming.
    Fix issue with open WiFi networks security.
    Fix issue with support for WiFi AnonymousIdentity.
    Fix issue with memory leak and DHCPv6 DUID handling.
    Fix issue with DHCP client and P2P interaction.
    Fix issue with handling provision file updates.
    Fix issue with VPN state updates.
    Disable 6to4 support by default.
- add keyring file
- clean with spec-cleaner
- fix builds for all possible distributions and architectures</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1503403200">- bump to 1.35
  besides other things contains fix for CVE-2017-12865</changelog>
  <changelog author="avvissu@yandex.by" date="1504872000">- Remove obsolete macros
- Add polkit-agent-1 dependency
- Use the %tmpfiles_create macro
- Removal of ldconfig scriptlets from all packages
- Add connman-wait-online.service in post{un}
- Spec file cleanup</changelog>
  <changelog author="avvissu@yandex.by" date="1507032000">- Add connman-1.35-resolvconf.patch
- Activate connman.service if the network services disabled
- Add info in /var/adm/update-messages</changelog>
  <changelog author="avvissu@yandex.by" date="1508414400">- Add configuration file (/etc/connman/main.conf)
- Add ghost lines: main.conf connman connman-vpn</changelog>
  <changelog author="avvissu@yandex.by" date="1508500800">- Remove unrecognized options: disable-gtk-doc, enable-threads,
  disable-iwmx, enable-session-policy</changelog>
  <changelog author="avvissu@yandex.by" date="1509019200">- Change the mode of download_files (sr#521762)
- Remove connman-rpmlintrc (bnc#1057697)
- Add client as a recommended dependency</changelog>
  <changelog author="avvissu@yandex.by" date="1514289600">- Add symlink to network.service (connman-1.35-service.patch)</changelog>
  <changelog author="avvissu@yandex.by" date="1518523200">- Fix build errors due to unsupported header include order with
  newer kernels &gt;=4.15 (connman-1.35-include.patch).</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1557489600">- Update to 1.37:
  * Fix issue with handling invalid gateway addresses.
  * Fix issue with handling updates of default gateway.
  * Fix issue with DHCP servers that require broadcast flag.
  * Add support for option to use gateways as time servers.
  * Add support for option to select default technology.
  * Add support for Address Conflict Detection (ACD).
  * Add support for IPv6 iptables management.
- Change in 1.36:
  * Fix issue with DNS short response on error handling.
  * Fix issue with handling incoming DNS requests.
  * Fix issue with handling empty timeserver list.
  * Fix issue with incorrect DHCP byte order.
  * Fix issue with AllowDomainnameUpdates handling.
  * Fix issue with IPv4 link-local IP conflict error.
  * Fix issue with handling WISPr over TLS connections.
  * Fix issue with WiFi background scanning handling.
  * Fix issue with WiFi disconnect+connect race condition.
  * Fix issue with WiFi scanning and tethering operation.
  * Fix issue with WiFi security change handling.
  * Fix issue with missing signal for WPS changes.
  * Fix issue with online check retry handling.
  * Add support for systemd-resolved backend.
  * Add support for mDNS configuration setup.
- Drop connman-1.35-include.patch
- Drop connman-1.35-resolvconf.patch</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1582027200">- Update to 1.38:
  * Fix issue with online check on IP address update.
  * Fix issue with OpenVPN and encrypted private keys.
  * Fix issue with finishing of VPN connections.
  * Add support for updated stable iwd APIs.
  * Add support for WireGuard networks.
- Spec file cleanup</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1613131200">- Update to 1.39 (bsc#1181751):
  * Fix issue with scanning state synchronization and iwd.
  * Fix issue with invalid key with 4-way handshake offloading.
  * Fix issue with DNS proxy length checks to prevent buffer overflow. (CVE-2021-26675)
  * Fix issue with DHCP leaking stack data via uninitialized variable. (CVE-2021-26676)</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1644580800">- Update to 1.41: (bsc#1194177, bsc#1194176, bsc#1194175)
  * Fix issue with RTNL netlink message alignment.
  * Fix issue with dnsproxy and timeout for TCP feature. (CVE-2022-23097, CVE-2022-23096)
  * Fix issue with dnsproxy and busy loop in TCP server. (CVE-2022-23098)
  * Fix issue with WiFi connection with no passphrase.
  * Add support for wpa_supplicant and WPA3-SAE functionality.
  * Add support for D-Bus ObjectManager interface.
- Renamed downstream patches to separate them from upstream patches
  * Rename 0001-connman-1.35-service.patch to 0100-connman-1.35-service.patch
- Add systemd hardening configuration
  * Rename harden_connman-vpn.service.patch to 0101-harden_connman-vpn.service.patch
  * Rename harden_connman-wait-online.service.patch to 0102-harden_connman-wait-online.service.patch
- Disabled openconnect plugin due to version conflict
- Disabled vpnc plugin for i568 missing dependency
- Disabled hh2serial and tist_working for ppc64le due to version conflict</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1659355200">- Add refcounting to wispr portal detection (bsc#1200190)
  * add 0001-wispr-Rename-wispr_portal_list-to-wispr_portal_hash.patch
  * add 0002-wispr-Ignore-NULL-proxy.patch
  * add 0003-wispr-Add-reference-counter-to-portal-context.patch (CVE-2022-32293)
  * add 0004-wispr-Update-portal-context-references.patch (CVE-2022-32293)
- Fix OOB write in received_data (bsc#1200189)
  * add 0005-gweb-Fix-OOB-write-in-received_data.patch (CVE-2022-32292)</changelog>
</package>
<package pkgid="8eb8313c5b295135bfa34a83d13ffc487295b0d06c367ad171621d0c3a28e9d8" name="connman-plugin-vpnc" arch="x86_64">
  <version epoch="0" ver="1.41" rel="bp154.2.3.1"/>
  <changelog author="sleep_walker@suse.cz" date="1423224000">- bump to 1.28
  ver 1.28:
  Fix issue with DHCPv6 re-transmission timer.
  Fix issue with DHCP service ID option byte order.
  Fix issue with IPv6 connections and SLAAC/DHCPv6.
  Fix issue with telephony and IPv6 autoconfiguration.
  Fix issue with Bluetooth technology setting changes.
  Fix issue with WiFi autoscan interval calculation.
  Fix issue with WiFi and missing BSS signal strength.
  Add support for IPv4 information for WiFi Display.
  ver 1.27:
  Fix issue with memory leak in IP configuration.
  Fix issue with providing random numbers for DHCP.
  Fix issue with handling IN_MOVED_TO inotify events.
  Fix issue with channel selection for WiFi scanning.
  Add support for handling Bluetooth GN and PANU roles.
  ver 1.26:
  Fix issue with missing WiFi security provisioning support.
  Fix issue with immutable setting and provisioned services.
  Fix issue with scheduling DNS cache cleanup procedure.
  Fix issue with IPv6 Privacy setting on service removal.
  Fix issue with DHCPv6 CONFIRM message sending procedure.
  Fix issue with DHCPv6 lease expiration handling support.
  Fix issue with DHCPv4 networks and broadcast flag handling.
  Fix issue with DHCPv4 networks without gateway configuration.
  Fix issue with P2P Peer authorization handling.
  Fix issue with P2P Peer service registration.
  Add support for WiFi Display information elements.
  Add support for systemd-hostnamed integration.
  ver 1.25:
  Fix issue with handling rebind timer for DHCPv6.
  Fix issue with handling DHCP renew transaction.
  Fix issue with user supplied proxy settings and DHCP.
  Fix issue with extra status codes from captive portals.
  Fix issue with service idle state reset on failure.
  Fix issue with DNS label compression handling.
  Add support for experimental P2P Peer service.
  ver 1.24:
  Fix issue with handling slave interfaces.
  Fix issue with handling DHCPv4 broadcast flag.
  Fix issue with handling DHCPv4 lease expiration.
  Fix issue with handling WiFi auto-scanning timeout.
  Fix issue with handling domain and DNS server changes.
  Fix issue with double free and agent messages.
  ver 1.23:
  Fix issue with memory leak in technology handling.
  Fix issue with not removing host route of OpenVPN.
  Fix issue with double free in DHCP cleanup handling.
  Fix issue with handling DHCP method from oFono.
  Fix issue with IPv6-PD when disabling tethering.
  Fix issue with DNS proxy when disabling tethering.
  Fix issue with Bluetooth start and stop interaction.
  Fix issue with Bluetooth PAN networks on adapter change.
  ver 1.22:
  Fix issue with WPS state synchronization.
  Fix issue with DNS servers and default service.
  Fix issue with DHCP client and rebooting state.
  Add support for NTP exponential backoff handling.
  Add support for NTP kiss-of-death packet handling.
  Add support for Ethernet gadget networking.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1438948800">- bump to 1.29
  Fix issue with IPv6 autoconfiguration when disabled.
  Fix issue with IPv6 temporary route handling.
  Fix issue with IPv6 timers for nameservers.
  Fix issue with DHPCv6 and route configuration.
  Fix issue with DHCPv6 source port and buggy servers.
  Fix issue with DHCPv6 rapid commit option length.
  Fix issue with DHCPv6 rapid commit error handling.
  Fix issue with handling invalid WiFi passphrases.
  Fix issue with connecting Ethernet devices.
  Add support for Ethernet and VLAN usage.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1444737600">- bumpt to 1.30
    Fix issue with pending DNS request during server change.
    Fix issue with empty strings in nameservers configuration.
    Fix issue with time servers during IP configuration change.
    Fix issue with 4-way handshake during roaming.
    Fix issue with open WiFi networks security.
    Fix issue with support for WiFi AnonymousIdentity.
    Fix issue with memory leak and DHCPv6 DUID handling.
    Fix issue with DHCP client and P2P interaction.
    Fix issue with handling provision file updates.
    Fix issue with VPN state updates.
    Disable 6to4 support by default.
- add keyring file
- clean with spec-cleaner
- fix builds for all possible distributions and architectures</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1503403200">- bump to 1.35
  besides other things contains fix for CVE-2017-12865</changelog>
  <changelog author="avvissu@yandex.by" date="1504872000">- Remove obsolete macros
- Add polkit-agent-1 dependency
- Use the %tmpfiles_create macro
- Removal of ldconfig scriptlets from all packages
- Add connman-wait-online.service in post{un}
- Spec file cleanup</changelog>
  <changelog author="avvissu@yandex.by" date="1507032000">- Add connman-1.35-resolvconf.patch
- Activate connman.service if the network services disabled
- Add info in /var/adm/update-messages</changelog>
  <changelog author="avvissu@yandex.by" date="1508414400">- Add configuration file (/etc/connman/main.conf)
- Add ghost lines: main.conf connman connman-vpn</changelog>
  <changelog author="avvissu@yandex.by" date="1508500800">- Remove unrecognized options: disable-gtk-doc, enable-threads,
  disable-iwmx, enable-session-policy</changelog>
  <changelog author="avvissu@yandex.by" date="1509019200">- Change the mode of download_files (sr#521762)
- Remove connman-rpmlintrc (bnc#1057697)
- Add client as a recommended dependency</changelog>
  <changelog author="avvissu@yandex.by" date="1514289600">- Add symlink to network.service (connman-1.35-service.patch)</changelog>
  <changelog author="avvissu@yandex.by" date="1518523200">- Fix build errors due to unsupported header include order with
  newer kernels &gt;=4.15 (connman-1.35-include.patch).</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1557489600">- Update to 1.37:
  * Fix issue with handling invalid gateway addresses.
  * Fix issue with handling updates of default gateway.
  * Fix issue with DHCP servers that require broadcast flag.
  * Add support for option to use gateways as time servers.
  * Add support for option to select default technology.
  * Add support for Address Conflict Detection (ACD).
  * Add support for IPv6 iptables management.
- Change in 1.36:
  * Fix issue with DNS short response on error handling.
  * Fix issue with handling incoming DNS requests.
  * Fix issue with handling empty timeserver list.
  * Fix issue with incorrect DHCP byte order.
  * Fix issue with AllowDomainnameUpdates handling.
  * Fix issue with IPv4 link-local IP conflict error.
  * Fix issue with handling WISPr over TLS connections.
  * Fix issue with WiFi background scanning handling.
  * Fix issue with WiFi disconnect+connect race condition.
  * Fix issue with WiFi scanning and tethering operation.
  * Fix issue with WiFi security change handling.
  * Fix issue with missing signal for WPS changes.
  * Fix issue with online check retry handling.
  * Add support for systemd-resolved backend.
  * Add support for mDNS configuration setup.
- Drop connman-1.35-include.patch
- Drop connman-1.35-resolvconf.patch</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1582027200">- Update to 1.38:
  * Fix issue with online check on IP address update.
  * Fix issue with OpenVPN and encrypted private keys.
  * Fix issue with finishing of VPN connections.
  * Add support for updated stable iwd APIs.
  * Add support for WireGuard networks.
- Spec file cleanup</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1613131200">- Update to 1.39 (bsc#1181751):
  * Fix issue with scanning state synchronization and iwd.
  * Fix issue with invalid key with 4-way handshake offloading.
  * Fix issue with DNS proxy length checks to prevent buffer overflow. (CVE-2021-26675)
  * Fix issue with DHCP leaking stack data via uninitialized variable. (CVE-2021-26676)</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1644580800">- Update to 1.41: (bsc#1194177, bsc#1194176, bsc#1194175)
  * Fix issue with RTNL netlink message alignment.
  * Fix issue with dnsproxy and timeout for TCP feature. (CVE-2022-23097, CVE-2022-23096)
  * Fix issue with dnsproxy and busy loop in TCP server. (CVE-2022-23098)
  * Fix issue with WiFi connection with no passphrase.
  * Add support for wpa_supplicant and WPA3-SAE functionality.
  * Add support for D-Bus ObjectManager interface.
- Renamed downstream patches to separate them from upstream patches
  * Rename 0001-connman-1.35-service.patch to 0100-connman-1.35-service.patch
- Add systemd hardening configuration
  * Rename harden_connman-vpn.service.patch to 0101-harden_connman-vpn.service.patch
  * Rename harden_connman-wait-online.service.patch to 0102-harden_connman-wait-online.service.patch
- Disabled openconnect plugin due to version conflict
- Disabled vpnc plugin for i568 missing dependency
- Disabled hh2serial and tist_working for ppc64le due to version conflict</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1659355200">- Add refcounting to wispr portal detection (bsc#1200190)
  * add 0001-wispr-Rename-wispr_portal_list-to-wispr_portal_hash.patch
  * add 0002-wispr-Ignore-NULL-proxy.patch
  * add 0003-wispr-Add-reference-counter-to-portal-context.patch (CVE-2022-32293)
  * add 0004-wispr-Update-portal-context-references.patch (CVE-2022-32293)
- Fix OOB write in received_data (bsc#1200189)
  * add 0005-gweb-Fix-OOB-write-in-received_data.patch (CVE-2022-32292)</changelog>
</package>
<package pkgid="eff5505edb2bbff19645b6b045bf4b9867858d418e0ec24e97c6dafcbc1c8f01" name="connman-plugin-wireguard" arch="aarch64">
  <version epoch="0" ver="1.41" rel="bp154.2.3.1"/>
  <changelog author="sleep_walker@suse.cz" date="1423224000">- bump to 1.28
  ver 1.28:
  Fix issue with DHCPv6 re-transmission timer.
  Fix issue with DHCP service ID option byte order.
  Fix issue with IPv6 connections and SLAAC/DHCPv6.
  Fix issue with telephony and IPv6 autoconfiguration.
  Fix issue with Bluetooth technology setting changes.
  Fix issue with WiFi autoscan interval calculation.
  Fix issue with WiFi and missing BSS signal strength.
  Add support for IPv4 information for WiFi Display.
  ver 1.27:
  Fix issue with memory leak in IP configuration.
  Fix issue with providing random numbers for DHCP.
  Fix issue with handling IN_MOVED_TO inotify events.
  Fix issue with channel selection for WiFi scanning.
  Add support for handling Bluetooth GN and PANU roles.
  ver 1.26:
  Fix issue with missing WiFi security provisioning support.
  Fix issue with immutable setting and provisioned services.
  Fix issue with scheduling DNS cache cleanup procedure.
  Fix issue with IPv6 Privacy setting on service removal.
  Fix issue with DHCPv6 CONFIRM message sending procedure.
  Fix issue with DHCPv6 lease expiration handling support.
  Fix issue with DHCPv4 networks and broadcast flag handling.
  Fix issue with DHCPv4 networks without gateway configuration.
  Fix issue with P2P Peer authorization handling.
  Fix issue with P2P Peer service registration.
  Add support for WiFi Display information elements.
  Add support for systemd-hostnamed integration.
  ver 1.25:
  Fix issue with handling rebind timer for DHCPv6.
  Fix issue with handling DHCP renew transaction.
  Fix issue with user supplied proxy settings and DHCP.
  Fix issue with extra status codes from captive portals.
  Fix issue with service idle state reset on failure.
  Fix issue with DNS label compression handling.
  Add support for experimental P2P Peer service.
  ver 1.24:
  Fix issue with handling slave interfaces.
  Fix issue with handling DHCPv4 broadcast flag.
  Fix issue with handling DHCPv4 lease expiration.
  Fix issue with handling WiFi auto-scanning timeout.
  Fix issue with handling domain and DNS server changes.
  Fix issue with double free and agent messages.
  ver 1.23:
  Fix issue with memory leak in technology handling.
  Fix issue with not removing host route of OpenVPN.
  Fix issue with double free in DHCP cleanup handling.
  Fix issue with handling DHCP method from oFono.
  Fix issue with IPv6-PD when disabling tethering.
  Fix issue with DNS proxy when disabling tethering.
  Fix issue with Bluetooth start and stop interaction.
  Fix issue with Bluetooth PAN networks on adapter change.
  ver 1.22:
  Fix issue with WPS state synchronization.
  Fix issue with DNS servers and default service.
  Fix issue with DHCP client and rebooting state.
  Add support for NTP exponential backoff handling.
  Add support for NTP kiss-of-death packet handling.
  Add support for Ethernet gadget networking.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1438948800">- bump to 1.29
  Fix issue with IPv6 autoconfiguration when disabled.
  Fix issue with IPv6 temporary route handling.
  Fix issue with IPv6 timers for nameservers.
  Fix issue with DHPCv6 and route configuration.
  Fix issue with DHCPv6 source port and buggy servers.
  Fix issue with DHCPv6 rapid commit option length.
  Fix issue with DHCPv6 rapid commit error handling.
  Fix issue with handling invalid WiFi passphrases.
  Fix issue with connecting Ethernet devices.
  Add support for Ethernet and VLAN usage.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1444737600">- bumpt to 1.30
    Fix issue with pending DNS request during server change.
    Fix issue with empty strings in nameservers configuration.
    Fix issue with time servers during IP configuration change.
    Fix issue with 4-way handshake during roaming.
    Fix issue with open WiFi networks security.
    Fix issue with support for WiFi AnonymousIdentity.
    Fix issue with memory leak and DHCPv6 DUID handling.
    Fix issue with DHCP client and P2P interaction.
    Fix issue with handling provision file updates.
    Fix issue with VPN state updates.
    Disable 6to4 support by default.
- add keyring file
- clean with spec-cleaner
- fix builds for all possible distributions and architectures</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1503403200">- bump to 1.35
  besides other things contains fix for CVE-2017-12865</changelog>
  <changelog author="avvissu@yandex.by" date="1504872000">- Remove obsolete macros
- Add polkit-agent-1 dependency
- Use the %tmpfiles_create macro
- Removal of ldconfig scriptlets from all packages
- Add connman-wait-online.service in post{un}
- Spec file cleanup</changelog>
  <changelog author="avvissu@yandex.by" date="1507032000">- Add connman-1.35-resolvconf.patch
- Activate connman.service if the network services disabled
- Add info in /var/adm/update-messages</changelog>
  <changelog author="avvissu@yandex.by" date="1508414400">- Add configuration file (/etc/connman/main.conf)
- Add ghost lines: main.conf connman connman-vpn</changelog>
  <changelog author="avvissu@yandex.by" date="1508500800">- Remove unrecognized options: disable-gtk-doc, enable-threads,
  disable-iwmx, enable-session-policy</changelog>
  <changelog author="avvissu@yandex.by" date="1509019200">- Change the mode of download_files (sr#521762)
- Remove connman-rpmlintrc (bnc#1057697)
- Add client as a recommended dependency</changelog>
  <changelog author="avvissu@yandex.by" date="1514289600">- Add symlink to network.service (connman-1.35-service.patch)</changelog>
  <changelog author="avvissu@yandex.by" date="1518523200">- Fix build errors due to unsupported header include order with
  newer kernels &gt;=4.15 (connman-1.35-include.patch).</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1557489600">- Update to 1.37:
  * Fix issue with handling invalid gateway addresses.
  * Fix issue with handling updates of default gateway.
  * Fix issue with DHCP servers that require broadcast flag.
  * Add support for option to use gateways as time servers.
  * Add support for option to select default technology.
  * Add support for Address Conflict Detection (ACD).
  * Add support for IPv6 iptables management.
- Change in 1.36:
  * Fix issue with DNS short response on error handling.
  * Fix issue with handling incoming DNS requests.
  * Fix issue with handling empty timeserver list.
  * Fix issue with incorrect DHCP byte order.
  * Fix issue with AllowDomainnameUpdates handling.
  * Fix issue with IPv4 link-local IP conflict error.
  * Fix issue with handling WISPr over TLS connections.
  * Fix issue with WiFi background scanning handling.
  * Fix issue with WiFi disconnect+connect race condition.
  * Fix issue with WiFi scanning and tethering operation.
  * Fix issue with WiFi security change handling.
  * Fix issue with missing signal for WPS changes.
  * Fix issue with online check retry handling.
  * Add support for systemd-resolved backend.
  * Add support for mDNS configuration setup.
- Drop connman-1.35-include.patch
- Drop connman-1.35-resolvconf.patch</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1582027200">- Update to 1.38:
  * Fix issue with online check on IP address update.
  * Fix issue with OpenVPN and encrypted private keys.
  * Fix issue with finishing of VPN connections.
  * Add support for updated stable iwd APIs.
  * Add support for WireGuard networks.
- Spec file cleanup</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1613131200">- Update to 1.39 (bsc#1181751):
  * Fix issue with scanning state synchronization and iwd.
  * Fix issue with invalid key with 4-way handshake offloading.
  * Fix issue with DNS proxy length checks to prevent buffer overflow. (CVE-2021-26675)
  * Fix issue with DHCP leaking stack data via uninitialized variable. (CVE-2021-26676)</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1644580800">- Update to 1.41: (bsc#1194177, bsc#1194176, bsc#1194175)
  * Fix issue with RTNL netlink message alignment.
  * Fix issue with dnsproxy and timeout for TCP feature. (CVE-2022-23097, CVE-2022-23096)
  * Fix issue with dnsproxy and busy loop in TCP server. (CVE-2022-23098)
  * Fix issue with WiFi connection with no passphrase.
  * Add support for wpa_supplicant and WPA3-SAE functionality.
  * Add support for D-Bus ObjectManager interface.
- Renamed downstream patches to separate them from upstream patches
  * Rename 0001-connman-1.35-service.patch to 0100-connman-1.35-service.patch
- Add systemd hardening configuration
  * Rename harden_connman-vpn.service.patch to 0101-harden_connman-vpn.service.patch
  * Rename harden_connman-wait-online.service.patch to 0102-harden_connman-wait-online.service.patch
- Disabled openconnect plugin due to version conflict
- Disabled vpnc plugin for i568 missing dependency
- Disabled hh2serial and tist_working for ppc64le due to version conflict</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1659355200">- Add refcounting to wispr portal detection (bsc#1200190)
  * add 0001-wispr-Rename-wispr_portal_list-to-wispr_portal_hash.patch
  * add 0002-wispr-Ignore-NULL-proxy.patch
  * add 0003-wispr-Add-reference-counter-to-portal-context.patch (CVE-2022-32293)
  * add 0004-wispr-Update-portal-context-references.patch (CVE-2022-32293)
- Fix OOB write in received_data (bsc#1200189)
  * add 0005-gweb-Fix-OOB-write-in-received_data.patch (CVE-2022-32292)</changelog>
</package>
<package pkgid="526b2cbaeb5309efd356ddb4a874d14eba0b2a3ce6edbb5ad22658f1b92ce567" name="connman-plugin-wireguard" arch="i586">
  <version epoch="0" ver="1.41" rel="bp154.2.3.1"/>
  <changelog author="sleep_walker@suse.cz" date="1423224000">- bump to 1.28
  ver 1.28:
  Fix issue with DHCPv6 re-transmission timer.
  Fix issue with DHCP service ID option byte order.
  Fix issue with IPv6 connections and SLAAC/DHCPv6.
  Fix issue with telephony and IPv6 autoconfiguration.
  Fix issue with Bluetooth technology setting changes.
  Fix issue with WiFi autoscan interval calculation.
  Fix issue with WiFi and missing BSS signal strength.
  Add support for IPv4 information for WiFi Display.
  ver 1.27:
  Fix issue with memory leak in IP configuration.
  Fix issue with providing random numbers for DHCP.
  Fix issue with handling IN_MOVED_TO inotify events.
  Fix issue with channel selection for WiFi scanning.
  Add support for handling Bluetooth GN and PANU roles.
  ver 1.26:
  Fix issue with missing WiFi security provisioning support.
  Fix issue with immutable setting and provisioned services.
  Fix issue with scheduling DNS cache cleanup procedure.
  Fix issue with IPv6 Privacy setting on service removal.
  Fix issue with DHCPv6 CONFIRM message sending procedure.
  Fix issue with DHCPv6 lease expiration handling support.
  Fix issue with DHCPv4 networks and broadcast flag handling.
  Fix issue with DHCPv4 networks without gateway configuration.
  Fix issue with P2P Peer authorization handling.
  Fix issue with P2P Peer service registration.
  Add support for WiFi Display information elements.
  Add support for systemd-hostnamed integration.
  ver 1.25:
  Fix issue with handling rebind timer for DHCPv6.
  Fix issue with handling DHCP renew transaction.
  Fix issue with user supplied proxy settings and DHCP.
  Fix issue with extra status codes from captive portals.
  Fix issue with service idle state reset on failure.
  Fix issue with DNS label compression handling.
  Add support for experimental P2P Peer service.
  ver 1.24:
  Fix issue with handling slave interfaces.
  Fix issue with handling DHCPv4 broadcast flag.
  Fix issue with handling DHCPv4 lease expiration.
  Fix issue with handling WiFi auto-scanning timeout.
  Fix issue with handling domain and DNS server changes.
  Fix issue with double free and agent messages.
  ver 1.23:
  Fix issue with memory leak in technology handling.
  Fix issue with not removing host route of OpenVPN.
  Fix issue with double free in DHCP cleanup handling.
  Fix issue with handling DHCP method from oFono.
  Fix issue with IPv6-PD when disabling tethering.
  Fix issue with DNS proxy when disabling tethering.
  Fix issue with Bluetooth start and stop interaction.
  Fix issue with Bluetooth PAN networks on adapter change.
  ver 1.22:
  Fix issue with WPS state synchronization.
  Fix issue with DNS servers and default service.
  Fix issue with DHCP client and rebooting state.
  Add support for NTP exponential backoff handling.
  Add support for NTP kiss-of-death packet handling.
  Add support for Ethernet gadget networking.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1438948800">- bump to 1.29
  Fix issue with IPv6 autoconfiguration when disabled.
  Fix issue with IPv6 temporary route handling.
  Fix issue with IPv6 timers for nameservers.
  Fix issue with DHPCv6 and route configuration.
  Fix issue with DHCPv6 source port and buggy servers.
  Fix issue with DHCPv6 rapid commit option length.
  Fix issue with DHCPv6 rapid commit error handling.
  Fix issue with handling invalid WiFi passphrases.
  Fix issue with connecting Ethernet devices.
  Add support for Ethernet and VLAN usage.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1444737600">- bumpt to 1.30
    Fix issue with pending DNS request during server change.
    Fix issue with empty strings in nameservers configuration.
    Fix issue with time servers during IP configuration change.
    Fix issue with 4-way handshake during roaming.
    Fix issue with open WiFi networks security.
    Fix issue with support for WiFi AnonymousIdentity.
    Fix issue with memory leak and DHCPv6 DUID handling.
    Fix issue with DHCP client and P2P interaction.
    Fix issue with handling provision file updates.
    Fix issue with VPN state updates.
    Disable 6to4 support by default.
- add keyring file
- clean with spec-cleaner
- fix builds for all possible distributions and architectures</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1503403200">- bump to 1.35
  besides other things contains fix for CVE-2017-12865</changelog>
  <changelog author="avvissu@yandex.by" date="1504872000">- Remove obsolete macros
- Add polkit-agent-1 dependency
- Use the %tmpfiles_create macro
- Removal of ldconfig scriptlets from all packages
- Add connman-wait-online.service in post{un}
- Spec file cleanup</changelog>
  <changelog author="avvissu@yandex.by" date="1507032000">- Add connman-1.35-resolvconf.patch
- Activate connman.service if the network services disabled
- Add info in /var/adm/update-messages</changelog>
  <changelog author="avvissu@yandex.by" date="1508414400">- Add configuration file (/etc/connman/main.conf)
- Add ghost lines: main.conf connman connman-vpn</changelog>
  <changelog author="avvissu@yandex.by" date="1508500800">- Remove unrecognized options: disable-gtk-doc, enable-threads,
  disable-iwmx, enable-session-policy</changelog>
  <changelog author="avvissu@yandex.by" date="1509019200">- Change the mode of download_files (sr#521762)
- Remove connman-rpmlintrc (bnc#1057697)
- Add client as a recommended dependency</changelog>
  <changelog author="avvissu@yandex.by" date="1514289600">- Add symlink to network.service (connman-1.35-service.patch)</changelog>
  <changelog author="avvissu@yandex.by" date="1518523200">- Fix build errors due to unsupported header include order with
  newer kernels &gt;=4.15 (connman-1.35-include.patch).</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1557489600">- Update to 1.37:
  * Fix issue with handling invalid gateway addresses.
  * Fix issue with handling updates of default gateway.
  * Fix issue with DHCP servers that require broadcast flag.
  * Add support for option to use gateways as time servers.
  * Add support for option to select default technology.
  * Add support for Address Conflict Detection (ACD).
  * Add support for IPv6 iptables management.
- Change in 1.36:
  * Fix issue with DNS short response on error handling.
  * Fix issue with handling incoming DNS requests.
  * Fix issue with handling empty timeserver list.
  * Fix issue with incorrect DHCP byte order.
  * Fix issue with AllowDomainnameUpdates handling.
  * Fix issue with IPv4 link-local IP conflict error.
  * Fix issue with handling WISPr over TLS connections.
  * Fix issue with WiFi background scanning handling.
  * Fix issue with WiFi disconnect+connect race condition.
  * Fix issue with WiFi scanning and tethering operation.
  * Fix issue with WiFi security change handling.
  * Fix issue with missing signal for WPS changes.
  * Fix issue with online check retry handling.
  * Add support for systemd-resolved backend.
  * Add support for mDNS configuration setup.
- Drop connman-1.35-include.patch
- Drop connman-1.35-resolvconf.patch</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1582027200">- Update to 1.38:
  * Fix issue with online check on IP address update.
  * Fix issue with OpenVPN and encrypted private keys.
  * Fix issue with finishing of VPN connections.
  * Add support for updated stable iwd APIs.
  * Add support for WireGuard networks.
- Spec file cleanup</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1613131200">- Update to 1.39 (bsc#1181751):
  * Fix issue with scanning state synchronization and iwd.
  * Fix issue with invalid key with 4-way handshake offloading.
  * Fix issue with DNS proxy length checks to prevent buffer overflow. (CVE-2021-26675)
  * Fix issue with DHCP leaking stack data via uninitialized variable. (CVE-2021-26676)</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1644580800">- Update to 1.41: (bsc#1194177, bsc#1194176, bsc#1194175)
  * Fix issue with RTNL netlink message alignment.
  * Fix issue with dnsproxy and timeout for TCP feature. (CVE-2022-23097, CVE-2022-23096)
  * Fix issue with dnsproxy and busy loop in TCP server. (CVE-2022-23098)
  * Fix issue with WiFi connection with no passphrase.
  * Add support for wpa_supplicant and WPA3-SAE functionality.
  * Add support for D-Bus ObjectManager interface.
- Renamed downstream patches to separate them from upstream patches
  * Rename 0001-connman-1.35-service.patch to 0100-connman-1.35-service.patch
- Add systemd hardening configuration
  * Rename harden_connman-vpn.service.patch to 0101-harden_connman-vpn.service.patch
  * Rename harden_connman-wait-online.service.patch to 0102-harden_connman-wait-online.service.patch
- Disabled openconnect plugin due to version conflict
- Disabled vpnc plugin for i568 missing dependency
- Disabled hh2serial and tist_working for ppc64le due to version conflict</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1659355200">- Add refcounting to wispr portal detection (bsc#1200190)
  * add 0001-wispr-Rename-wispr_portal_list-to-wispr_portal_hash.patch
  * add 0002-wispr-Ignore-NULL-proxy.patch
  * add 0003-wispr-Add-reference-counter-to-portal-context.patch (CVE-2022-32293)
  * add 0004-wispr-Update-portal-context-references.patch (CVE-2022-32293)
- Fix OOB write in received_data (bsc#1200189)
  * add 0005-gweb-Fix-OOB-write-in-received_data.patch (CVE-2022-32292)</changelog>
</package>
<package pkgid="62d2e9376bb115e7f0925806c60d264e9b0dbe8732954611841f8f2b6b3b7df2" name="connman-plugin-wireguard" arch="ppc64le">
  <version epoch="0" ver="1.41" rel="bp154.2.3.1"/>
  <changelog author="sleep_walker@suse.cz" date="1423224000">- bump to 1.28
  ver 1.28:
  Fix issue with DHCPv6 re-transmission timer.
  Fix issue with DHCP service ID option byte order.
  Fix issue with IPv6 connections and SLAAC/DHCPv6.
  Fix issue with telephony and IPv6 autoconfiguration.
  Fix issue with Bluetooth technology setting changes.
  Fix issue with WiFi autoscan interval calculation.
  Fix issue with WiFi and missing BSS signal strength.
  Add support for IPv4 information for WiFi Display.
  ver 1.27:
  Fix issue with memory leak in IP configuration.
  Fix issue with providing random numbers for DHCP.
  Fix issue with handling IN_MOVED_TO inotify events.
  Fix issue with channel selection for WiFi scanning.
  Add support for handling Bluetooth GN and PANU roles.
  ver 1.26:
  Fix issue with missing WiFi security provisioning support.
  Fix issue with immutable setting and provisioned services.
  Fix issue with scheduling DNS cache cleanup procedure.
  Fix issue with IPv6 Privacy setting on service removal.
  Fix issue with DHCPv6 CONFIRM message sending procedure.
  Fix issue with DHCPv6 lease expiration handling support.
  Fix issue with DHCPv4 networks and broadcast flag handling.
  Fix issue with DHCPv4 networks without gateway configuration.
  Fix issue with P2P Peer authorization handling.
  Fix issue with P2P Peer service registration.
  Add support for WiFi Display information elements.
  Add support for systemd-hostnamed integration.
  ver 1.25:
  Fix issue with handling rebind timer for DHCPv6.
  Fix issue with handling DHCP renew transaction.
  Fix issue with user supplied proxy settings and DHCP.
  Fix issue with extra status codes from captive portals.
  Fix issue with service idle state reset on failure.
  Fix issue with DNS label compression handling.
  Add support for experimental P2P Peer service.
  ver 1.24:
  Fix issue with handling slave interfaces.
  Fix issue with handling DHCPv4 broadcast flag.
  Fix issue with handling DHCPv4 lease expiration.
  Fix issue with handling WiFi auto-scanning timeout.
  Fix issue with handling domain and DNS server changes.
  Fix issue with double free and agent messages.
  ver 1.23:
  Fix issue with memory leak in technology handling.
  Fix issue with not removing host route of OpenVPN.
  Fix issue with double free in DHCP cleanup handling.
  Fix issue with handling DHCP method from oFono.
  Fix issue with IPv6-PD when disabling tethering.
  Fix issue with DNS proxy when disabling tethering.
  Fix issue with Bluetooth start and stop interaction.
  Fix issue with Bluetooth PAN networks on adapter change.
  ver 1.22:
  Fix issue with WPS state synchronization.
  Fix issue with DNS servers and default service.
  Fix issue with DHCP client and rebooting state.
  Add support for NTP exponential backoff handling.
  Add support for NTP kiss-of-death packet handling.
  Add support for Ethernet gadget networking.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1438948800">- bump to 1.29
  Fix issue with IPv6 autoconfiguration when disabled.
  Fix issue with IPv6 temporary route handling.
  Fix issue with IPv6 timers for nameservers.
  Fix issue with DHPCv6 and route configuration.
  Fix issue with DHCPv6 source port and buggy servers.
  Fix issue with DHCPv6 rapid commit option length.
  Fix issue with DHCPv6 rapid commit error handling.
  Fix issue with handling invalid WiFi passphrases.
  Fix issue with connecting Ethernet devices.
  Add support for Ethernet and VLAN usage.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1444737600">- bumpt to 1.30
    Fix issue with pending DNS request during server change.
    Fix issue with empty strings in nameservers configuration.
    Fix issue with time servers during IP configuration change.
    Fix issue with 4-way handshake during roaming.
    Fix issue with open WiFi networks security.
    Fix issue with support for WiFi AnonymousIdentity.
    Fix issue with memory leak and DHCPv6 DUID handling.
    Fix issue with DHCP client and P2P interaction.
    Fix issue with handling provision file updates.
    Fix issue with VPN state updates.
    Disable 6to4 support by default.
- add keyring file
- clean with spec-cleaner
- fix builds for all possible distributions and architectures</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1503403200">- bump to 1.35
  besides other things contains fix for CVE-2017-12865</changelog>
  <changelog author="avvissu@yandex.by" date="1504872000">- Remove obsolete macros
- Add polkit-agent-1 dependency
- Use the %tmpfiles_create macro
- Removal of ldconfig scriptlets from all packages
- Add connman-wait-online.service in post{un}
- Spec file cleanup</changelog>
  <changelog author="avvissu@yandex.by" date="1507032000">- Add connman-1.35-resolvconf.patch
- Activate connman.service if the network services disabled
- Add info in /var/adm/update-messages</changelog>
  <changelog author="avvissu@yandex.by" date="1508414400">- Add configuration file (/etc/connman/main.conf)
- Add ghost lines: main.conf connman connman-vpn</changelog>
  <changelog author="avvissu@yandex.by" date="1508500800">- Remove unrecognized options: disable-gtk-doc, enable-threads,
  disable-iwmx, enable-session-policy</changelog>
  <changelog author="avvissu@yandex.by" date="1509019200">- Change the mode of download_files (sr#521762)
- Remove connman-rpmlintrc (bnc#1057697)
- Add client as a recommended dependency</changelog>
  <changelog author="avvissu@yandex.by" date="1514289600">- Add symlink to network.service (connman-1.35-service.patch)</changelog>
  <changelog author="avvissu@yandex.by" date="1518523200">- Fix build errors due to unsupported header include order with
  newer kernels &gt;=4.15 (connman-1.35-include.patch).</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1557489600">- Update to 1.37:
  * Fix issue with handling invalid gateway addresses.
  * Fix issue with handling updates of default gateway.
  * Fix issue with DHCP servers that require broadcast flag.
  * Add support for option to use gateways as time servers.
  * Add support for option to select default technology.
  * Add support for Address Conflict Detection (ACD).
  * Add support for IPv6 iptables management.
- Change in 1.36:
  * Fix issue with DNS short response on error handling.
  * Fix issue with handling incoming DNS requests.
  * Fix issue with handling empty timeserver list.
  * Fix issue with incorrect DHCP byte order.
  * Fix issue with AllowDomainnameUpdates handling.
  * Fix issue with IPv4 link-local IP conflict error.
  * Fix issue with handling WISPr over TLS connections.
  * Fix issue with WiFi background scanning handling.
  * Fix issue with WiFi disconnect+connect race condition.
  * Fix issue with WiFi scanning and tethering operation.
  * Fix issue with WiFi security change handling.
  * Fix issue with missing signal for WPS changes.
  * Fix issue with online check retry handling.
  * Add support for systemd-resolved backend.
  * Add support for mDNS configuration setup.
- Drop connman-1.35-include.patch
- Drop connman-1.35-resolvconf.patch</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1582027200">- Update to 1.38:
  * Fix issue with online check on IP address update.
  * Fix issue with OpenVPN and encrypted private keys.
  * Fix issue with finishing of VPN connections.
  * Add support for updated stable iwd APIs.
  * Add support for WireGuard networks.
- Spec file cleanup</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1613131200">- Update to 1.39 (bsc#1181751):
  * Fix issue with scanning state synchronization and iwd.
  * Fix issue with invalid key with 4-way handshake offloading.
  * Fix issue with DNS proxy length checks to prevent buffer overflow. (CVE-2021-26675)
  * Fix issue with DHCP leaking stack data via uninitialized variable. (CVE-2021-26676)</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1644580800">- Update to 1.41: (bsc#1194177, bsc#1194176, bsc#1194175)
  * Fix issue with RTNL netlink message alignment.
  * Fix issue with dnsproxy and timeout for TCP feature. (CVE-2022-23097, CVE-2022-23096)
  * Fix issue with dnsproxy and busy loop in TCP server. (CVE-2022-23098)
  * Fix issue with WiFi connection with no passphrase.
  * Add support for wpa_supplicant and WPA3-SAE functionality.
  * Add support for D-Bus ObjectManager interface.
- Renamed downstream patches to separate them from upstream patches
  * Rename 0001-connman-1.35-service.patch to 0100-connman-1.35-service.patch
- Add systemd hardening configuration
  * Rename harden_connman-vpn.service.patch to 0101-harden_connman-vpn.service.patch
  * Rename harden_connman-wait-online.service.patch to 0102-harden_connman-wait-online.service.patch
- Disabled openconnect plugin due to version conflict
- Disabled vpnc plugin for i568 missing dependency
- Disabled hh2serial and tist_working for ppc64le due to version conflict</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1659355200">- Add refcounting to wispr portal detection (bsc#1200190)
  * add 0001-wispr-Rename-wispr_portal_list-to-wispr_portal_hash.patch
  * add 0002-wispr-Ignore-NULL-proxy.patch
  * add 0003-wispr-Add-reference-counter-to-portal-context.patch (CVE-2022-32293)
  * add 0004-wispr-Update-portal-context-references.patch (CVE-2022-32293)
- Fix OOB write in received_data (bsc#1200189)
  * add 0005-gweb-Fix-OOB-write-in-received_data.patch (CVE-2022-32292)</changelog>
</package>
<package pkgid="c4710b5105fe0e0b41d9bb5aa17d76dfbf70ab40f580bf14539e72454f42cc37" name="connman-plugin-wireguard" arch="s390x">
  <version epoch="0" ver="1.41" rel="bp154.2.3.1"/>
  <changelog author="sleep_walker@suse.cz" date="1423224000">- bump to 1.28
  ver 1.28:
  Fix issue with DHCPv6 re-transmission timer.
  Fix issue with DHCP service ID option byte order.
  Fix issue with IPv6 connections and SLAAC/DHCPv6.
  Fix issue with telephony and IPv6 autoconfiguration.
  Fix issue with Bluetooth technology setting changes.
  Fix issue with WiFi autoscan interval calculation.
  Fix issue with WiFi and missing BSS signal strength.
  Add support for IPv4 information for WiFi Display.
  ver 1.27:
  Fix issue with memory leak in IP configuration.
  Fix issue with providing random numbers for DHCP.
  Fix issue with handling IN_MOVED_TO inotify events.
  Fix issue with channel selection for WiFi scanning.
  Add support for handling Bluetooth GN and PANU roles.
  ver 1.26:
  Fix issue with missing WiFi security provisioning support.
  Fix issue with immutable setting and provisioned services.
  Fix issue with scheduling DNS cache cleanup procedure.
  Fix issue with IPv6 Privacy setting on service removal.
  Fix issue with DHCPv6 CONFIRM message sending procedure.
  Fix issue with DHCPv6 lease expiration handling support.
  Fix issue with DHCPv4 networks and broadcast flag handling.
  Fix issue with DHCPv4 networks without gateway configuration.
  Fix issue with P2P Peer authorization handling.
  Fix issue with P2P Peer service registration.
  Add support for WiFi Display information elements.
  Add support for systemd-hostnamed integration.
  ver 1.25:
  Fix issue with handling rebind timer for DHCPv6.
  Fix issue with handling DHCP renew transaction.
  Fix issue with user supplied proxy settings and DHCP.
  Fix issue with extra status codes from captive portals.
  Fix issue with service idle state reset on failure.
  Fix issue with DNS label compression handling.
  Add support for experimental P2P Peer service.
  ver 1.24:
  Fix issue with handling slave interfaces.
  Fix issue with handling DHCPv4 broadcast flag.
  Fix issue with handling DHCPv4 lease expiration.
  Fix issue with handling WiFi auto-scanning timeout.
  Fix issue with handling domain and DNS server changes.
  Fix issue with double free and agent messages.
  ver 1.23:
  Fix issue with memory leak in technology handling.
  Fix issue with not removing host route of OpenVPN.
  Fix issue with double free in DHCP cleanup handling.
  Fix issue with handling DHCP method from oFono.
  Fix issue with IPv6-PD when disabling tethering.
  Fix issue with DNS proxy when disabling tethering.
  Fix issue with Bluetooth start and stop interaction.
  Fix issue with Bluetooth PAN networks on adapter change.
  ver 1.22:
  Fix issue with WPS state synchronization.
  Fix issue with DNS servers and default service.
  Fix issue with DHCP client and rebooting state.
  Add support for NTP exponential backoff handling.
  Add support for NTP kiss-of-death packet handling.
  Add support for Ethernet gadget networking.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1438948800">- bump to 1.29
  Fix issue with IPv6 autoconfiguration when disabled.
  Fix issue with IPv6 temporary route handling.
  Fix issue with IPv6 timers for nameservers.
  Fix issue with DHPCv6 and route configuration.
  Fix issue with DHCPv6 source port and buggy servers.
  Fix issue with DHCPv6 rapid commit option length.
  Fix issue with DHCPv6 rapid commit error handling.
  Fix issue with handling invalid WiFi passphrases.
  Fix issue with connecting Ethernet devices.
  Add support for Ethernet and VLAN usage.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1444737600">- bumpt to 1.30
    Fix issue with pending DNS request during server change.
    Fix issue with empty strings in nameservers configuration.
    Fix issue with time servers during IP configuration change.
    Fix issue with 4-way handshake during roaming.
    Fix issue with open WiFi networks security.
    Fix issue with support for WiFi AnonymousIdentity.
    Fix issue with memory leak and DHCPv6 DUID handling.
    Fix issue with DHCP client and P2P interaction.
    Fix issue with handling provision file updates.
    Fix issue with VPN state updates.
    Disable 6to4 support by default.
- add keyring file
- clean with spec-cleaner
- fix builds for all possible distributions and architectures</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1503403200">- bump to 1.35
  besides other things contains fix for CVE-2017-12865</changelog>
  <changelog author="avvissu@yandex.by" date="1504872000">- Remove obsolete macros
- Add polkit-agent-1 dependency
- Use the %tmpfiles_create macro
- Removal of ldconfig scriptlets from all packages
- Add connman-wait-online.service in post{un}
- Spec file cleanup</changelog>
  <changelog author="avvissu@yandex.by" date="1507032000">- Add connman-1.35-resolvconf.patch
- Activate connman.service if the network services disabled
- Add info in /var/adm/update-messages</changelog>
  <changelog author="avvissu@yandex.by" date="1508414400">- Add configuration file (/etc/connman/main.conf)
- Add ghost lines: main.conf connman connman-vpn</changelog>
  <changelog author="avvissu@yandex.by" date="1508500800">- Remove unrecognized options: disable-gtk-doc, enable-threads,
  disable-iwmx, enable-session-policy</changelog>
  <changelog author="avvissu@yandex.by" date="1509019200">- Change the mode of download_files (sr#521762)
- Remove connman-rpmlintrc (bnc#1057697)
- Add client as a recommended dependency</changelog>
  <changelog author="avvissu@yandex.by" date="1514289600">- Add symlink to network.service (connman-1.35-service.patch)</changelog>
  <changelog author="avvissu@yandex.by" date="1518523200">- Fix build errors due to unsupported header include order with
  newer kernels &gt;=4.15 (connman-1.35-include.patch).</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1557489600">- Update to 1.37:
  * Fix issue with handling invalid gateway addresses.
  * Fix issue with handling updates of default gateway.
  * Fix issue with DHCP servers that require broadcast flag.
  * Add support for option to use gateways as time servers.
  * Add support for option to select default technology.
  * Add support for Address Conflict Detection (ACD).
  * Add support for IPv6 iptables management.
- Change in 1.36:
  * Fix issue with DNS short response on error handling.
  * Fix issue with handling incoming DNS requests.
  * Fix issue with handling empty timeserver list.
  * Fix issue with incorrect DHCP byte order.
  * Fix issue with AllowDomainnameUpdates handling.
  * Fix issue with IPv4 link-local IP conflict error.
  * Fix issue with handling WISPr over TLS connections.
  * Fix issue with WiFi background scanning handling.
  * Fix issue with WiFi disconnect+connect race condition.
  * Fix issue with WiFi scanning and tethering operation.
  * Fix issue with WiFi security change handling.
  * Fix issue with missing signal for WPS changes.
  * Fix issue with online check retry handling.
  * Add support for systemd-resolved backend.
  * Add support for mDNS configuration setup.
- Drop connman-1.35-include.patch
- Drop connman-1.35-resolvconf.patch</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1582027200">- Update to 1.38:
  * Fix issue with online check on IP address update.
  * Fix issue with OpenVPN and encrypted private keys.
  * Fix issue with finishing of VPN connections.
  * Add support for updated stable iwd APIs.
  * Add support for WireGuard networks.
- Spec file cleanup</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1613131200">- Update to 1.39 (bsc#1181751):
  * Fix issue with scanning state synchronization and iwd.
  * Fix issue with invalid key with 4-way handshake offloading.
  * Fix issue with DNS proxy length checks to prevent buffer overflow. (CVE-2021-26675)
  * Fix issue with DHCP leaking stack data via uninitialized variable. (CVE-2021-26676)</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1644580800">- Update to 1.41: (bsc#1194177, bsc#1194176, bsc#1194175)
  * Fix issue with RTNL netlink message alignment.
  * Fix issue with dnsproxy and timeout for TCP feature. (CVE-2022-23097, CVE-2022-23096)
  * Fix issue with dnsproxy and busy loop in TCP server. (CVE-2022-23098)
  * Fix issue with WiFi connection with no passphrase.
  * Add support for wpa_supplicant and WPA3-SAE functionality.
  * Add support for D-Bus ObjectManager interface.
- Renamed downstream patches to separate them from upstream patches
  * Rename 0001-connman-1.35-service.patch to 0100-connman-1.35-service.patch
- Add systemd hardening configuration
  * Rename harden_connman-vpn.service.patch to 0101-harden_connman-vpn.service.patch
  * Rename harden_connman-wait-online.service.patch to 0102-harden_connman-wait-online.service.patch
- Disabled openconnect plugin due to version conflict
- Disabled vpnc plugin for i568 missing dependency
- Disabled hh2serial and tist_working for ppc64le due to version conflict</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1659355200">- Add refcounting to wispr portal detection (bsc#1200190)
  * add 0001-wispr-Rename-wispr_portal_list-to-wispr_portal_hash.patch
  * add 0002-wispr-Ignore-NULL-proxy.patch
  * add 0003-wispr-Add-reference-counter-to-portal-context.patch (CVE-2022-32293)
  * add 0004-wispr-Update-portal-context-references.patch (CVE-2022-32293)
- Fix OOB write in received_data (bsc#1200189)
  * add 0005-gweb-Fix-OOB-write-in-received_data.patch (CVE-2022-32292)</changelog>
</package>
<package pkgid="016effb4bf37fffa5847aa438d9ba426aae96471eb11a53de251c0d70f4e92fb" name="connman-plugin-wireguard" arch="x86_64">
  <version epoch="0" ver="1.41" rel="bp154.2.3.1"/>
  <changelog author="sleep_walker@suse.cz" date="1423224000">- bump to 1.28
  ver 1.28:
  Fix issue with DHCPv6 re-transmission timer.
  Fix issue with DHCP service ID option byte order.
  Fix issue with IPv6 connections and SLAAC/DHCPv6.
  Fix issue with telephony and IPv6 autoconfiguration.
  Fix issue with Bluetooth technology setting changes.
  Fix issue with WiFi autoscan interval calculation.
  Fix issue with WiFi and missing BSS signal strength.
  Add support for IPv4 information for WiFi Display.
  ver 1.27:
  Fix issue with memory leak in IP configuration.
  Fix issue with providing random numbers for DHCP.
  Fix issue with handling IN_MOVED_TO inotify events.
  Fix issue with channel selection for WiFi scanning.
  Add support for handling Bluetooth GN and PANU roles.
  ver 1.26:
  Fix issue with missing WiFi security provisioning support.
  Fix issue with immutable setting and provisioned services.
  Fix issue with scheduling DNS cache cleanup procedure.
  Fix issue with IPv6 Privacy setting on service removal.
  Fix issue with DHCPv6 CONFIRM message sending procedure.
  Fix issue with DHCPv6 lease expiration handling support.
  Fix issue with DHCPv4 networks and broadcast flag handling.
  Fix issue with DHCPv4 networks without gateway configuration.
  Fix issue with P2P Peer authorization handling.
  Fix issue with P2P Peer service registration.
  Add support for WiFi Display information elements.
  Add support for systemd-hostnamed integration.
  ver 1.25:
  Fix issue with handling rebind timer for DHCPv6.
  Fix issue with handling DHCP renew transaction.
  Fix issue with user supplied proxy settings and DHCP.
  Fix issue with extra status codes from captive portals.
  Fix issue with service idle state reset on failure.
  Fix issue with DNS label compression handling.
  Add support for experimental P2P Peer service.
  ver 1.24:
  Fix issue with handling slave interfaces.
  Fix issue with handling DHCPv4 broadcast flag.
  Fix issue with handling DHCPv4 lease expiration.
  Fix issue with handling WiFi auto-scanning timeout.
  Fix issue with handling domain and DNS server changes.
  Fix issue with double free and agent messages.
  ver 1.23:
  Fix issue with memory leak in technology handling.
  Fix issue with not removing host route of OpenVPN.
  Fix issue with double free in DHCP cleanup handling.
  Fix issue with handling DHCP method from oFono.
  Fix issue with IPv6-PD when disabling tethering.
  Fix issue with DNS proxy when disabling tethering.
  Fix issue with Bluetooth start and stop interaction.
  Fix issue with Bluetooth PAN networks on adapter change.
  ver 1.22:
  Fix issue with WPS state synchronization.
  Fix issue with DNS servers and default service.
  Fix issue with DHCP client and rebooting state.
  Add support for NTP exponential backoff handling.
  Add support for NTP kiss-of-death packet handling.
  Add support for Ethernet gadget networking.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1438948800">- bump to 1.29
  Fix issue with IPv6 autoconfiguration when disabled.
  Fix issue with IPv6 temporary route handling.
  Fix issue with IPv6 timers for nameservers.
  Fix issue with DHPCv6 and route configuration.
  Fix issue with DHCPv6 source port and buggy servers.
  Fix issue with DHCPv6 rapid commit option length.
  Fix issue with DHCPv6 rapid commit error handling.
  Fix issue with handling invalid WiFi passphrases.
  Fix issue with connecting Ethernet devices.
  Add support for Ethernet and VLAN usage.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1444737600">- bumpt to 1.30
    Fix issue with pending DNS request during server change.
    Fix issue with empty strings in nameservers configuration.
    Fix issue with time servers during IP configuration change.
    Fix issue with 4-way handshake during roaming.
    Fix issue with open WiFi networks security.
    Fix issue with support for WiFi AnonymousIdentity.
    Fix issue with memory leak and DHCPv6 DUID handling.
    Fix issue with DHCP client and P2P interaction.
    Fix issue with handling provision file updates.
    Fix issue with VPN state updates.
    Disable 6to4 support by default.
- add keyring file
- clean with spec-cleaner
- fix builds for all possible distributions and architectures</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1503403200">- bump to 1.35
  besides other things contains fix for CVE-2017-12865</changelog>
  <changelog author="avvissu@yandex.by" date="1504872000">- Remove obsolete macros
- Add polkit-agent-1 dependency
- Use the %tmpfiles_create macro
- Removal of ldconfig scriptlets from all packages
- Add connman-wait-online.service in post{un}
- Spec file cleanup</changelog>
  <changelog author="avvissu@yandex.by" date="1507032000">- Add connman-1.35-resolvconf.patch
- Activate connman.service if the network services disabled
- Add info in /var/adm/update-messages</changelog>
  <changelog author="avvissu@yandex.by" date="1508414400">- Add configuration file (/etc/connman/main.conf)
- Add ghost lines: main.conf connman connman-vpn</changelog>
  <changelog author="avvissu@yandex.by" date="1508500800">- Remove unrecognized options: disable-gtk-doc, enable-threads,
  disable-iwmx, enable-session-policy</changelog>
  <changelog author="avvissu@yandex.by" date="1509019200">- Change the mode of download_files (sr#521762)
- Remove connman-rpmlintrc (bnc#1057697)
- Add client as a recommended dependency</changelog>
  <changelog author="avvissu@yandex.by" date="1514289600">- Add symlink to network.service (connman-1.35-service.patch)</changelog>
  <changelog author="avvissu@yandex.by" date="1518523200">- Fix build errors due to unsupported header include order with
  newer kernels &gt;=4.15 (connman-1.35-include.patch).</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1557489600">- Update to 1.37:
  * Fix issue with handling invalid gateway addresses.
  * Fix issue with handling updates of default gateway.
  * Fix issue with DHCP servers that require broadcast flag.
  * Add support for option to use gateways as time servers.
  * Add support for option to select default technology.
  * Add support for Address Conflict Detection (ACD).
  * Add support for IPv6 iptables management.
- Change in 1.36:
  * Fix issue with DNS short response on error handling.
  * Fix issue with handling incoming DNS requests.
  * Fix issue with handling empty timeserver list.
  * Fix issue with incorrect DHCP byte order.
  * Fix issue with AllowDomainnameUpdates handling.
  * Fix issue with IPv4 link-local IP conflict error.
  * Fix issue with handling WISPr over TLS connections.
  * Fix issue with WiFi background scanning handling.
  * Fix issue with WiFi disconnect+connect race condition.
  * Fix issue with WiFi scanning and tethering operation.
  * Fix issue with WiFi security change handling.
  * Fix issue with missing signal for WPS changes.
  * Fix issue with online check retry handling.
  * Add support for systemd-resolved backend.
  * Add support for mDNS configuration setup.
- Drop connman-1.35-include.patch
- Drop connman-1.35-resolvconf.patch</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1582027200">- Update to 1.38:
  * Fix issue with online check on IP address update.
  * Fix issue with OpenVPN and encrypted private keys.
  * Fix issue with finishing of VPN connections.
  * Add support for updated stable iwd APIs.
  * Add support for WireGuard networks.
- Spec file cleanup</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1613131200">- Update to 1.39 (bsc#1181751):
  * Fix issue with scanning state synchronization and iwd.
  * Fix issue with invalid key with 4-way handshake offloading.
  * Fix issue with DNS proxy length checks to prevent buffer overflow. (CVE-2021-26675)
  * Fix issue with DHCP leaking stack data via uninitialized variable. (CVE-2021-26676)</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1644580800">- Update to 1.41: (bsc#1194177, bsc#1194176, bsc#1194175)
  * Fix issue with RTNL netlink message alignment.
  * Fix issue with dnsproxy and timeout for TCP feature. (CVE-2022-23097, CVE-2022-23096)
  * Fix issue with dnsproxy and busy loop in TCP server. (CVE-2022-23098)
  * Fix issue with WiFi connection with no passphrase.
  * Add support for wpa_supplicant and WPA3-SAE functionality.
  * Add support for D-Bus ObjectManager interface.
- Renamed downstream patches to separate them from upstream patches
  * Rename 0001-connman-1.35-service.patch to 0100-connman-1.35-service.patch
- Add systemd hardening configuration
  * Rename harden_connman-vpn.service.patch to 0101-harden_connman-vpn.service.patch
  * Rename harden_connman-wait-online.service.patch to 0102-harden_connman-wait-online.service.patch
- Disabled openconnect plugin due to version conflict
- Disabled vpnc plugin for i568 missing dependency
- Disabled hh2serial and tist_working for ppc64le due to version conflict</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1659355200">- Add refcounting to wispr portal detection (bsc#1200190)
  * add 0001-wispr-Rename-wispr_portal_list-to-wispr_portal_hash.patch
  * add 0002-wispr-Ignore-NULL-proxy.patch
  * add 0003-wispr-Add-reference-counter-to-portal-context.patch (CVE-2022-32293)
  * add 0004-wispr-Update-portal-context-references.patch (CVE-2022-32293)
- Fix OOB write in received_data (bsc#1200189)
  * add 0005-gweb-Fix-OOB-write-in-received_data.patch (CVE-2022-32292)</changelog>
</package>
<package pkgid="67252088d6433c79bcc44124866669165d4884b361ea79798ad38a09e0626f96" name="connman-test" arch="aarch64">
  <version epoch="0" ver="1.41" rel="bp154.2.3.1"/>
  <changelog author="sleep_walker@suse.cz" date="1423224000">- bump to 1.28
  ver 1.28:
  Fix issue with DHCPv6 re-transmission timer.
  Fix issue with DHCP service ID option byte order.
  Fix issue with IPv6 connections and SLAAC/DHCPv6.
  Fix issue with telephony and IPv6 autoconfiguration.
  Fix issue with Bluetooth technology setting changes.
  Fix issue with WiFi autoscan interval calculation.
  Fix issue with WiFi and missing BSS signal strength.
  Add support for IPv4 information for WiFi Display.
  ver 1.27:
  Fix issue with memory leak in IP configuration.
  Fix issue with providing random numbers for DHCP.
  Fix issue with handling IN_MOVED_TO inotify events.
  Fix issue with channel selection for WiFi scanning.
  Add support for handling Bluetooth GN and PANU roles.
  ver 1.26:
  Fix issue with missing WiFi security provisioning support.
  Fix issue with immutable setting and provisioned services.
  Fix issue with scheduling DNS cache cleanup procedure.
  Fix issue with IPv6 Privacy setting on service removal.
  Fix issue with DHCPv6 CONFIRM message sending procedure.
  Fix issue with DHCPv6 lease expiration handling support.
  Fix issue with DHCPv4 networks and broadcast flag handling.
  Fix issue with DHCPv4 networks without gateway configuration.
  Fix issue with P2P Peer authorization handling.
  Fix issue with P2P Peer service registration.
  Add support for WiFi Display information elements.
  Add support for systemd-hostnamed integration.
  ver 1.25:
  Fix issue with handling rebind timer for DHCPv6.
  Fix issue with handling DHCP renew transaction.
  Fix issue with user supplied proxy settings and DHCP.
  Fix issue with extra status codes from captive portals.
  Fix issue with service idle state reset on failure.
  Fix issue with DNS label compression handling.
  Add support for experimental P2P Peer service.
  ver 1.24:
  Fix issue with handling slave interfaces.
  Fix issue with handling DHCPv4 broadcast flag.
  Fix issue with handling DHCPv4 lease expiration.
  Fix issue with handling WiFi auto-scanning timeout.
  Fix issue with handling domain and DNS server changes.
  Fix issue with double free and agent messages.
  ver 1.23:
  Fix issue with memory leak in technology handling.
  Fix issue with not removing host route of OpenVPN.
  Fix issue with double free in DHCP cleanup handling.
  Fix issue with handling DHCP method from oFono.
  Fix issue with IPv6-PD when disabling tethering.
  Fix issue with DNS proxy when disabling tethering.
  Fix issue with Bluetooth start and stop interaction.
  Fix issue with Bluetooth PAN networks on adapter change.
  ver 1.22:
  Fix issue with WPS state synchronization.
  Fix issue with DNS servers and default service.
  Fix issue with DHCP client and rebooting state.
  Add support for NTP exponential backoff handling.
  Add support for NTP kiss-of-death packet handling.
  Add support for Ethernet gadget networking.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1438948800">- bump to 1.29
  Fix issue with IPv6 autoconfiguration when disabled.
  Fix issue with IPv6 temporary route handling.
  Fix issue with IPv6 timers for nameservers.
  Fix issue with DHPCv6 and route configuration.
  Fix issue with DHCPv6 source port and buggy servers.
  Fix issue with DHCPv6 rapid commit option length.
  Fix issue with DHCPv6 rapid commit error handling.
  Fix issue with handling invalid WiFi passphrases.
  Fix issue with connecting Ethernet devices.
  Add support for Ethernet and VLAN usage.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1444737600">- bumpt to 1.30
    Fix issue with pending DNS request during server change.
    Fix issue with empty strings in nameservers configuration.
    Fix issue with time servers during IP configuration change.
    Fix issue with 4-way handshake during roaming.
    Fix issue with open WiFi networks security.
    Fix issue with support for WiFi AnonymousIdentity.
    Fix issue with memory leak and DHCPv6 DUID handling.
    Fix issue with DHCP client and P2P interaction.
    Fix issue with handling provision file updates.
    Fix issue with VPN state updates.
    Disable 6to4 support by default.
- add keyring file
- clean with spec-cleaner
- fix builds for all possible distributions and architectures</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1503403200">- bump to 1.35
  besides other things contains fix for CVE-2017-12865</changelog>
  <changelog author="avvissu@yandex.by" date="1504872000">- Remove obsolete macros
- Add polkit-agent-1 dependency
- Use the %tmpfiles_create macro
- Removal of ldconfig scriptlets from all packages
- Add connman-wait-online.service in post{un}
- Spec file cleanup</changelog>
  <changelog author="avvissu@yandex.by" date="1507032000">- Add connman-1.35-resolvconf.patch
- Activate connman.service if the network services disabled
- Add info in /var/adm/update-messages</changelog>
  <changelog author="avvissu@yandex.by" date="1508414400">- Add configuration file (/etc/connman/main.conf)
- Add ghost lines: main.conf connman connman-vpn</changelog>
  <changelog author="avvissu@yandex.by" date="1508500800">- Remove unrecognized options: disable-gtk-doc, enable-threads,
  disable-iwmx, enable-session-policy</changelog>
  <changelog author="avvissu@yandex.by" date="1509019200">- Change the mode of download_files (sr#521762)
- Remove connman-rpmlintrc (bnc#1057697)
- Add client as a recommended dependency</changelog>
  <changelog author="avvissu@yandex.by" date="1514289600">- Add symlink to network.service (connman-1.35-service.patch)</changelog>
  <changelog author="avvissu@yandex.by" date="1518523200">- Fix build errors due to unsupported header include order with
  newer kernels &gt;=4.15 (connman-1.35-include.patch).</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1557489600">- Update to 1.37:
  * Fix issue with handling invalid gateway addresses.
  * Fix issue with handling updates of default gateway.
  * Fix issue with DHCP servers that require broadcast flag.
  * Add support for option to use gateways as time servers.
  * Add support for option to select default technology.
  * Add support for Address Conflict Detection (ACD).
  * Add support for IPv6 iptables management.
- Change in 1.36:
  * Fix issue with DNS short response on error handling.
  * Fix issue with handling incoming DNS requests.
  * Fix issue with handling empty timeserver list.
  * Fix issue with incorrect DHCP byte order.
  * Fix issue with AllowDomainnameUpdates handling.
  * Fix issue with IPv4 link-local IP conflict error.
  * Fix issue with handling WISPr over TLS connections.
  * Fix issue with WiFi background scanning handling.
  * Fix issue with WiFi disconnect+connect race condition.
  * Fix issue with WiFi scanning and tethering operation.
  * Fix issue with WiFi security change handling.
  * Fix issue with missing signal for WPS changes.
  * Fix issue with online check retry handling.
  * Add support for systemd-resolved backend.
  * Add support for mDNS configuration setup.
- Drop connman-1.35-include.patch
- Drop connman-1.35-resolvconf.patch</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1582027200">- Update to 1.38:
  * Fix issue with online check on IP address update.
  * Fix issue with OpenVPN and encrypted private keys.
  * Fix issue with finishing of VPN connections.
  * Add support for updated stable iwd APIs.
  * Add support for WireGuard networks.
- Spec file cleanup</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1613131200">- Update to 1.39 (bsc#1181751):
  * Fix issue with scanning state synchronization and iwd.
  * Fix issue with invalid key with 4-way handshake offloading.
  * Fix issue with DNS proxy length checks to prevent buffer overflow. (CVE-2021-26675)
  * Fix issue with DHCP leaking stack data via uninitialized variable. (CVE-2021-26676)</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1644580800">- Update to 1.41: (bsc#1194177, bsc#1194176, bsc#1194175)
  * Fix issue with RTNL netlink message alignment.
  * Fix issue with dnsproxy and timeout for TCP feature. (CVE-2022-23097, CVE-2022-23096)
  * Fix issue with dnsproxy and busy loop in TCP server. (CVE-2022-23098)
  * Fix issue with WiFi connection with no passphrase.
  * Add support for wpa_supplicant and WPA3-SAE functionality.
  * Add support for D-Bus ObjectManager interface.
- Renamed downstream patches to separate them from upstream patches
  * Rename 0001-connman-1.35-service.patch to 0100-connman-1.35-service.patch
- Add systemd hardening configuration
  * Rename harden_connman-vpn.service.patch to 0101-harden_connman-vpn.service.patch
  * Rename harden_connman-wait-online.service.patch to 0102-harden_connman-wait-online.service.patch
- Disabled openconnect plugin due to version conflict
- Disabled vpnc plugin for i568 missing dependency
- Disabled hh2serial and tist_working for ppc64le due to version conflict</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1659355200">- Add refcounting to wispr portal detection (bsc#1200190)
  * add 0001-wispr-Rename-wispr_portal_list-to-wispr_portal_hash.patch
  * add 0002-wispr-Ignore-NULL-proxy.patch
  * add 0003-wispr-Add-reference-counter-to-portal-context.patch (CVE-2022-32293)
  * add 0004-wispr-Update-portal-context-references.patch (CVE-2022-32293)
- Fix OOB write in received_data (bsc#1200189)
  * add 0005-gweb-Fix-OOB-write-in-received_data.patch (CVE-2022-32292)</changelog>
</package>
<package pkgid="173643401ec3de49029888177b4d7f5075173744278c2c9a910e52a9960a95c6" name="connman-test" arch="i586">
  <version epoch="0" ver="1.41" rel="bp154.2.3.1"/>
  <changelog author="sleep_walker@suse.cz" date="1423224000">- bump to 1.28
  ver 1.28:
  Fix issue with DHCPv6 re-transmission timer.
  Fix issue with DHCP service ID option byte order.
  Fix issue with IPv6 connections and SLAAC/DHCPv6.
  Fix issue with telephony and IPv6 autoconfiguration.
  Fix issue with Bluetooth technology setting changes.
  Fix issue with WiFi autoscan interval calculation.
  Fix issue with WiFi and missing BSS signal strength.
  Add support for IPv4 information for WiFi Display.
  ver 1.27:
  Fix issue with memory leak in IP configuration.
  Fix issue with providing random numbers for DHCP.
  Fix issue with handling IN_MOVED_TO inotify events.
  Fix issue with channel selection for WiFi scanning.
  Add support for handling Bluetooth GN and PANU roles.
  ver 1.26:
  Fix issue with missing WiFi security provisioning support.
  Fix issue with immutable setting and provisioned services.
  Fix issue with scheduling DNS cache cleanup procedure.
  Fix issue with IPv6 Privacy setting on service removal.
  Fix issue with DHCPv6 CONFIRM message sending procedure.
  Fix issue with DHCPv6 lease expiration handling support.
  Fix issue with DHCPv4 networks and broadcast flag handling.
  Fix issue with DHCPv4 networks without gateway configuration.
  Fix issue with P2P Peer authorization handling.
  Fix issue with P2P Peer service registration.
  Add support for WiFi Display information elements.
  Add support for systemd-hostnamed integration.
  ver 1.25:
  Fix issue with handling rebind timer for DHCPv6.
  Fix issue with handling DHCP renew transaction.
  Fix issue with user supplied proxy settings and DHCP.
  Fix issue with extra status codes from captive portals.
  Fix issue with service idle state reset on failure.
  Fix issue with DNS label compression handling.
  Add support for experimental P2P Peer service.
  ver 1.24:
  Fix issue with handling slave interfaces.
  Fix issue with handling DHCPv4 broadcast flag.
  Fix issue with handling DHCPv4 lease expiration.
  Fix issue with handling WiFi auto-scanning timeout.
  Fix issue with handling domain and DNS server changes.
  Fix issue with double free and agent messages.
  ver 1.23:
  Fix issue with memory leak in technology handling.
  Fix issue with not removing host route of OpenVPN.
  Fix issue with double free in DHCP cleanup handling.
  Fix issue with handling DHCP method from oFono.
  Fix issue with IPv6-PD when disabling tethering.
  Fix issue with DNS proxy when disabling tethering.
  Fix issue with Bluetooth start and stop interaction.
  Fix issue with Bluetooth PAN networks on adapter change.
  ver 1.22:
  Fix issue with WPS state synchronization.
  Fix issue with DNS servers and default service.
  Fix issue with DHCP client and rebooting state.
  Add support for NTP exponential backoff handling.
  Add support for NTP kiss-of-death packet handling.
  Add support for Ethernet gadget networking.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1438948800">- bump to 1.29
  Fix issue with IPv6 autoconfiguration when disabled.
  Fix issue with IPv6 temporary route handling.
  Fix issue with IPv6 timers for nameservers.
  Fix issue with DHPCv6 and route configuration.
  Fix issue with DHCPv6 source port and buggy servers.
  Fix issue with DHCPv6 rapid commit option length.
  Fix issue with DHCPv6 rapid commit error handling.
  Fix issue with handling invalid WiFi passphrases.
  Fix issue with connecting Ethernet devices.
  Add support for Ethernet and VLAN usage.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1444737600">- bumpt to 1.30
    Fix issue with pending DNS request during server change.
    Fix issue with empty strings in nameservers configuration.
    Fix issue with time servers during IP configuration change.
    Fix issue with 4-way handshake during roaming.
    Fix issue with open WiFi networks security.
    Fix issue with support for WiFi AnonymousIdentity.
    Fix issue with memory leak and DHCPv6 DUID handling.
    Fix issue with DHCP client and P2P interaction.
    Fix issue with handling provision file updates.
    Fix issue with VPN state updates.
    Disable 6to4 support by default.
- add keyring file
- clean with spec-cleaner
- fix builds for all possible distributions and architectures</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1503403200">- bump to 1.35
  besides other things contains fix for CVE-2017-12865</changelog>
  <changelog author="avvissu@yandex.by" date="1504872000">- Remove obsolete macros
- Add polkit-agent-1 dependency
- Use the %tmpfiles_create macro
- Removal of ldconfig scriptlets from all packages
- Add connman-wait-online.service in post{un}
- Spec file cleanup</changelog>
  <changelog author="avvissu@yandex.by" date="1507032000">- Add connman-1.35-resolvconf.patch
- Activate connman.service if the network services disabled
- Add info in /var/adm/update-messages</changelog>
  <changelog author="avvissu@yandex.by" date="1508414400">- Add configuration file (/etc/connman/main.conf)
- Add ghost lines: main.conf connman connman-vpn</changelog>
  <changelog author="avvissu@yandex.by" date="1508500800">- Remove unrecognized options: disable-gtk-doc, enable-threads,
  disable-iwmx, enable-session-policy</changelog>
  <changelog author="avvissu@yandex.by" date="1509019200">- Change the mode of download_files (sr#521762)
- Remove connman-rpmlintrc (bnc#1057697)
- Add client as a recommended dependency</changelog>
  <changelog author="avvissu@yandex.by" date="1514289600">- Add symlink to network.service (connman-1.35-service.patch)</changelog>
  <changelog author="avvissu@yandex.by" date="1518523200">- Fix build errors due to unsupported header include order with
  newer kernels &gt;=4.15 (connman-1.35-include.patch).</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1557489600">- Update to 1.37:
  * Fix issue with handling invalid gateway addresses.
  * Fix issue with handling updates of default gateway.
  * Fix issue with DHCP servers that require broadcast flag.
  * Add support for option to use gateways as time servers.
  * Add support for option to select default technology.
  * Add support for Address Conflict Detection (ACD).
  * Add support for IPv6 iptables management.
- Change in 1.36:
  * Fix issue with DNS short response on error handling.
  * Fix issue with handling incoming DNS requests.
  * Fix issue with handling empty timeserver list.
  * Fix issue with incorrect DHCP byte order.
  * Fix issue with AllowDomainnameUpdates handling.
  * Fix issue with IPv4 link-local IP conflict error.
  * Fix issue with handling WISPr over TLS connections.
  * Fix issue with WiFi background scanning handling.
  * Fix issue with WiFi disconnect+connect race condition.
  * Fix issue with WiFi scanning and tethering operation.
  * Fix issue with WiFi security change handling.
  * Fix issue with missing signal for WPS changes.
  * Fix issue with online check retry handling.
  * Add support for systemd-resolved backend.
  * Add support for mDNS configuration setup.
- Drop connman-1.35-include.patch
- Drop connman-1.35-resolvconf.patch</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1582027200">- Update to 1.38:
  * Fix issue with online check on IP address update.
  * Fix issue with OpenVPN and encrypted private keys.
  * Fix issue with finishing of VPN connections.
  * Add support for updated stable iwd APIs.
  * Add support for WireGuard networks.
- Spec file cleanup</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1613131200">- Update to 1.39 (bsc#1181751):
  * Fix issue with scanning state synchronization and iwd.
  * Fix issue with invalid key with 4-way handshake offloading.
  * Fix issue with DNS proxy length checks to prevent buffer overflow. (CVE-2021-26675)
  * Fix issue with DHCP leaking stack data via uninitialized variable. (CVE-2021-26676)</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1644580800">- Update to 1.41: (bsc#1194177, bsc#1194176, bsc#1194175)
  * Fix issue with RTNL netlink message alignment.
  * Fix issue with dnsproxy and timeout for TCP feature. (CVE-2022-23097, CVE-2022-23096)
  * Fix issue with dnsproxy and busy loop in TCP server. (CVE-2022-23098)
  * Fix issue with WiFi connection with no passphrase.
  * Add support for wpa_supplicant and WPA3-SAE functionality.
  * Add support for D-Bus ObjectManager interface.
- Renamed downstream patches to separate them from upstream patches
  * Rename 0001-connman-1.35-service.patch to 0100-connman-1.35-service.patch
- Add systemd hardening configuration
  * Rename harden_connman-vpn.service.patch to 0101-harden_connman-vpn.service.patch
  * Rename harden_connman-wait-online.service.patch to 0102-harden_connman-wait-online.service.patch
- Disabled openconnect plugin due to version conflict
- Disabled vpnc plugin for i568 missing dependency
- Disabled hh2serial and tist_working for ppc64le due to version conflict</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1659355200">- Add refcounting to wispr portal detection (bsc#1200190)
  * add 0001-wispr-Rename-wispr_portal_list-to-wispr_portal_hash.patch
  * add 0002-wispr-Ignore-NULL-proxy.patch
  * add 0003-wispr-Add-reference-counter-to-portal-context.patch (CVE-2022-32293)
  * add 0004-wispr-Update-portal-context-references.patch (CVE-2022-32293)
- Fix OOB write in received_data (bsc#1200189)
  * add 0005-gweb-Fix-OOB-write-in-received_data.patch (CVE-2022-32292)</changelog>
</package>
<package pkgid="795270a9232452d6efc5e46349374a304feb372307c4ee96af8991bffff9cca8" name="connman-test" arch="ppc64le">
  <version epoch="0" ver="1.41" rel="bp154.2.3.1"/>
  <changelog author="sleep_walker@suse.cz" date="1423224000">- bump to 1.28
  ver 1.28:
  Fix issue with DHCPv6 re-transmission timer.
  Fix issue with DHCP service ID option byte order.
  Fix issue with IPv6 connections and SLAAC/DHCPv6.
  Fix issue with telephony and IPv6 autoconfiguration.
  Fix issue with Bluetooth technology setting changes.
  Fix issue with WiFi autoscan interval calculation.
  Fix issue with WiFi and missing BSS signal strength.
  Add support for IPv4 information for WiFi Display.
  ver 1.27:
  Fix issue with memory leak in IP configuration.
  Fix issue with providing random numbers for DHCP.
  Fix issue with handling IN_MOVED_TO inotify events.
  Fix issue with channel selection for WiFi scanning.
  Add support for handling Bluetooth GN and PANU roles.
  ver 1.26:
  Fix issue with missing WiFi security provisioning support.
  Fix issue with immutable setting and provisioned services.
  Fix issue with scheduling DNS cache cleanup procedure.
  Fix issue with IPv6 Privacy setting on service removal.
  Fix issue with DHCPv6 CONFIRM message sending procedure.
  Fix issue with DHCPv6 lease expiration handling support.
  Fix issue with DHCPv4 networks and broadcast flag handling.
  Fix issue with DHCPv4 networks without gateway configuration.
  Fix issue with P2P Peer authorization handling.
  Fix issue with P2P Peer service registration.
  Add support for WiFi Display information elements.
  Add support for systemd-hostnamed integration.
  ver 1.25:
  Fix issue with handling rebind timer for DHCPv6.
  Fix issue with handling DHCP renew transaction.
  Fix issue with user supplied proxy settings and DHCP.
  Fix issue with extra status codes from captive portals.
  Fix issue with service idle state reset on failure.
  Fix issue with DNS label compression handling.
  Add support for experimental P2P Peer service.
  ver 1.24:
  Fix issue with handling slave interfaces.
  Fix issue with handling DHCPv4 broadcast flag.
  Fix issue with handling DHCPv4 lease expiration.
  Fix issue with handling WiFi auto-scanning timeout.
  Fix issue with handling domain and DNS server changes.
  Fix issue with double free and agent messages.
  ver 1.23:
  Fix issue with memory leak in technology handling.
  Fix issue with not removing host route of OpenVPN.
  Fix issue with double free in DHCP cleanup handling.
  Fix issue with handling DHCP method from oFono.
  Fix issue with IPv6-PD when disabling tethering.
  Fix issue with DNS proxy when disabling tethering.
  Fix issue with Bluetooth start and stop interaction.
  Fix issue with Bluetooth PAN networks on adapter change.
  ver 1.22:
  Fix issue with WPS state synchronization.
  Fix issue with DNS servers and default service.
  Fix issue with DHCP client and rebooting state.
  Add support for NTP exponential backoff handling.
  Add support for NTP kiss-of-death packet handling.
  Add support for Ethernet gadget networking.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1438948800">- bump to 1.29
  Fix issue with IPv6 autoconfiguration when disabled.
  Fix issue with IPv6 temporary route handling.
  Fix issue with IPv6 timers for nameservers.
  Fix issue with DHPCv6 and route configuration.
  Fix issue with DHCPv6 source port and buggy servers.
  Fix issue with DHCPv6 rapid commit option length.
  Fix issue with DHCPv6 rapid commit error handling.
  Fix issue with handling invalid WiFi passphrases.
  Fix issue with connecting Ethernet devices.
  Add support for Ethernet and VLAN usage.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1444737600">- bumpt to 1.30
    Fix issue with pending DNS request during server change.
    Fix issue with empty strings in nameservers configuration.
    Fix issue with time servers during IP configuration change.
    Fix issue with 4-way handshake during roaming.
    Fix issue with open WiFi networks security.
    Fix issue with support for WiFi AnonymousIdentity.
    Fix issue with memory leak and DHCPv6 DUID handling.
    Fix issue with DHCP client and P2P interaction.
    Fix issue with handling provision file updates.
    Fix issue with VPN state updates.
    Disable 6to4 support by default.
- add keyring file
- clean with spec-cleaner
- fix builds for all possible distributions and architectures</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1503403200">- bump to 1.35
  besides other things contains fix for CVE-2017-12865</changelog>
  <changelog author="avvissu@yandex.by" date="1504872000">- Remove obsolete macros
- Add polkit-agent-1 dependency
- Use the %tmpfiles_create macro
- Removal of ldconfig scriptlets from all packages
- Add connman-wait-online.service in post{un}
- Spec file cleanup</changelog>
  <changelog author="avvissu@yandex.by" date="1507032000">- Add connman-1.35-resolvconf.patch
- Activate connman.service if the network services disabled
- Add info in /var/adm/update-messages</changelog>
  <changelog author="avvissu@yandex.by" date="1508414400">- Add configuration file (/etc/connman/main.conf)
- Add ghost lines: main.conf connman connman-vpn</changelog>
  <changelog author="avvissu@yandex.by" date="1508500800">- Remove unrecognized options: disable-gtk-doc, enable-threads,
  disable-iwmx, enable-session-policy</changelog>
  <changelog author="avvissu@yandex.by" date="1509019200">- Change the mode of download_files (sr#521762)
- Remove connman-rpmlintrc (bnc#1057697)
- Add client as a recommended dependency</changelog>
  <changelog author="avvissu@yandex.by" date="1514289600">- Add symlink to network.service (connman-1.35-service.patch)</changelog>
  <changelog author="avvissu@yandex.by" date="1518523200">- Fix build errors due to unsupported header include order with
  newer kernels &gt;=4.15 (connman-1.35-include.patch).</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1557489600">- Update to 1.37:
  * Fix issue with handling invalid gateway addresses.
  * Fix issue with handling updates of default gateway.
  * Fix issue with DHCP servers that require broadcast flag.
  * Add support for option to use gateways as time servers.
  * Add support for option to select default technology.
  * Add support for Address Conflict Detection (ACD).
  * Add support for IPv6 iptables management.
- Change in 1.36:
  * Fix issue with DNS short response on error handling.
  * Fix issue with handling incoming DNS requests.
  * Fix issue with handling empty timeserver list.
  * Fix issue with incorrect DHCP byte order.
  * Fix issue with AllowDomainnameUpdates handling.
  * Fix issue with IPv4 link-local IP conflict error.
  * Fix issue with handling WISPr over TLS connections.
  * Fix issue with WiFi background scanning handling.
  * Fix issue with WiFi disconnect+connect race condition.
  * Fix issue with WiFi scanning and tethering operation.
  * Fix issue with WiFi security change handling.
  * Fix issue with missing signal for WPS changes.
  * Fix issue with online check retry handling.
  * Add support for systemd-resolved backend.
  * Add support for mDNS configuration setup.
- Drop connman-1.35-include.patch
- Drop connman-1.35-resolvconf.patch</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1582027200">- Update to 1.38:
  * Fix issue with online check on IP address update.
  * Fix issue with OpenVPN and encrypted private keys.
  * Fix issue with finishing of VPN connections.
  * Add support for updated stable iwd APIs.
  * Add support for WireGuard networks.
- Spec file cleanup</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1613131200">- Update to 1.39 (bsc#1181751):
  * Fix issue with scanning state synchronization and iwd.
  * Fix issue with invalid key with 4-way handshake offloading.
  * Fix issue with DNS proxy length checks to prevent buffer overflow. (CVE-2021-26675)
  * Fix issue with DHCP leaking stack data via uninitialized variable. (CVE-2021-26676)</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1644580800">- Update to 1.41: (bsc#1194177, bsc#1194176, bsc#1194175)
  * Fix issue with RTNL netlink message alignment.
  * Fix issue with dnsproxy and timeout for TCP feature. (CVE-2022-23097, CVE-2022-23096)
  * Fix issue with dnsproxy and busy loop in TCP server. (CVE-2022-23098)
  * Fix issue with WiFi connection with no passphrase.
  * Add support for wpa_supplicant and WPA3-SAE functionality.
  * Add support for D-Bus ObjectManager interface.
- Renamed downstream patches to separate them from upstream patches
  * Rename 0001-connman-1.35-service.patch to 0100-connman-1.35-service.patch
- Add systemd hardening configuration
  * Rename harden_connman-vpn.service.patch to 0101-harden_connman-vpn.service.patch
  * Rename harden_connman-wait-online.service.patch to 0102-harden_connman-wait-online.service.patch
- Disabled openconnect plugin due to version conflict
- Disabled vpnc plugin for i568 missing dependency
- Disabled hh2serial and tist_working for ppc64le due to version conflict</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1659355200">- Add refcounting to wispr portal detection (bsc#1200190)
  * add 0001-wispr-Rename-wispr_portal_list-to-wispr_portal_hash.patch
  * add 0002-wispr-Ignore-NULL-proxy.patch
  * add 0003-wispr-Add-reference-counter-to-portal-context.patch (CVE-2022-32293)
  * add 0004-wispr-Update-portal-context-references.patch (CVE-2022-32293)
- Fix OOB write in received_data (bsc#1200189)
  * add 0005-gweb-Fix-OOB-write-in-received_data.patch (CVE-2022-32292)</changelog>
</package>
<package pkgid="19ed6466c34c6455b0b550b3c367a6586af17207ae7017dd996efdaed16d092d" name="connman-test" arch="s390x">
  <version epoch="0" ver="1.41" rel="bp154.2.3.1"/>
  <changelog author="sleep_walker@suse.cz" date="1423224000">- bump to 1.28
  ver 1.28:
  Fix issue with DHCPv6 re-transmission timer.
  Fix issue with DHCP service ID option byte order.
  Fix issue with IPv6 connections and SLAAC/DHCPv6.
  Fix issue with telephony and IPv6 autoconfiguration.
  Fix issue with Bluetooth technology setting changes.
  Fix issue with WiFi autoscan interval calculation.
  Fix issue with WiFi and missing BSS signal strength.
  Add support for IPv4 information for WiFi Display.
  ver 1.27:
  Fix issue with memory leak in IP configuration.
  Fix issue with providing random numbers for DHCP.
  Fix issue with handling IN_MOVED_TO inotify events.
  Fix issue with channel selection for WiFi scanning.
  Add support for handling Bluetooth GN and PANU roles.
  ver 1.26:
  Fix issue with missing WiFi security provisioning support.
  Fix issue with immutable setting and provisioned services.
  Fix issue with scheduling DNS cache cleanup procedure.
  Fix issue with IPv6 Privacy setting on service removal.
  Fix issue with DHCPv6 CONFIRM message sending procedure.
  Fix issue with DHCPv6 lease expiration handling support.
  Fix issue with DHCPv4 networks and broadcast flag handling.
  Fix issue with DHCPv4 networks without gateway configuration.
  Fix issue with P2P Peer authorization handling.
  Fix issue with P2P Peer service registration.
  Add support for WiFi Display information elements.
  Add support for systemd-hostnamed integration.
  ver 1.25:
  Fix issue with handling rebind timer for DHCPv6.
  Fix issue with handling DHCP renew transaction.
  Fix issue with user supplied proxy settings and DHCP.
  Fix issue with extra status codes from captive portals.
  Fix issue with service idle state reset on failure.
  Fix issue with DNS label compression handling.
  Add support for experimental P2P Peer service.
  ver 1.24:
  Fix issue with handling slave interfaces.
  Fix issue with handling DHCPv4 broadcast flag.
  Fix issue with handling DHCPv4 lease expiration.
  Fix issue with handling WiFi auto-scanning timeout.
  Fix issue with handling domain and DNS server changes.
  Fix issue with double free and agent messages.
  ver 1.23:
  Fix issue with memory leak in technology handling.
  Fix issue with not removing host route of OpenVPN.
  Fix issue with double free in DHCP cleanup handling.
  Fix issue with handling DHCP method from oFono.
  Fix issue with IPv6-PD when disabling tethering.
  Fix issue with DNS proxy when disabling tethering.
  Fix issue with Bluetooth start and stop interaction.
  Fix issue with Bluetooth PAN networks on adapter change.
  ver 1.22:
  Fix issue with WPS state synchronization.
  Fix issue with DNS servers and default service.
  Fix issue with DHCP client and rebooting state.
  Add support for NTP exponential backoff handling.
  Add support for NTP kiss-of-death packet handling.
  Add support for Ethernet gadget networking.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1438948800">- bump to 1.29
  Fix issue with IPv6 autoconfiguration when disabled.
  Fix issue with IPv6 temporary route handling.
  Fix issue with IPv6 timers for nameservers.
  Fix issue with DHPCv6 and route configuration.
  Fix issue with DHCPv6 source port and buggy servers.
  Fix issue with DHCPv6 rapid commit option length.
  Fix issue with DHCPv6 rapid commit error handling.
  Fix issue with handling invalid WiFi passphrases.
  Fix issue with connecting Ethernet devices.
  Add support for Ethernet and VLAN usage.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1444737600">- bumpt to 1.30
    Fix issue with pending DNS request during server change.
    Fix issue with empty strings in nameservers configuration.
    Fix issue with time servers during IP configuration change.
    Fix issue with 4-way handshake during roaming.
    Fix issue with open WiFi networks security.
    Fix issue with support for WiFi AnonymousIdentity.
    Fix issue with memory leak and DHCPv6 DUID handling.
    Fix issue with DHCP client and P2P interaction.
    Fix issue with handling provision file updates.
    Fix issue with VPN state updates.
    Disable 6to4 support by default.
- add keyring file
- clean with spec-cleaner
- fix builds for all possible distributions and architectures</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1503403200">- bump to 1.35
  besides other things contains fix for CVE-2017-12865</changelog>
  <changelog author="avvissu@yandex.by" date="1504872000">- Remove obsolete macros
- Add polkit-agent-1 dependency
- Use the %tmpfiles_create macro
- Removal of ldconfig scriptlets from all packages
- Add connman-wait-online.service in post{un}
- Spec file cleanup</changelog>
  <changelog author="avvissu@yandex.by" date="1507032000">- Add connman-1.35-resolvconf.patch
- Activate connman.service if the network services disabled
- Add info in /var/adm/update-messages</changelog>
  <changelog author="avvissu@yandex.by" date="1508414400">- Add configuration file (/etc/connman/main.conf)
- Add ghost lines: main.conf connman connman-vpn</changelog>
  <changelog author="avvissu@yandex.by" date="1508500800">- Remove unrecognized options: disable-gtk-doc, enable-threads,
  disable-iwmx, enable-session-policy</changelog>
  <changelog author="avvissu@yandex.by" date="1509019200">- Change the mode of download_files (sr#521762)
- Remove connman-rpmlintrc (bnc#1057697)
- Add client as a recommended dependency</changelog>
  <changelog author="avvissu@yandex.by" date="1514289600">- Add symlink to network.service (connman-1.35-service.patch)</changelog>
  <changelog author="avvissu@yandex.by" date="1518523200">- Fix build errors due to unsupported header include order with
  newer kernels &gt;=4.15 (connman-1.35-include.patch).</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1557489600">- Update to 1.37:
  * Fix issue with handling invalid gateway addresses.
  * Fix issue with handling updates of default gateway.
  * Fix issue with DHCP servers that require broadcast flag.
  * Add support for option to use gateways as time servers.
  * Add support for option to select default technology.
  * Add support for Address Conflict Detection (ACD).
  * Add support for IPv6 iptables management.
- Change in 1.36:
  * Fix issue with DNS short response on error handling.
  * Fix issue with handling incoming DNS requests.
  * Fix issue with handling empty timeserver list.
  * Fix issue with incorrect DHCP byte order.
  * Fix issue with AllowDomainnameUpdates handling.
  * Fix issue with IPv4 link-local IP conflict error.
  * Fix issue with handling WISPr over TLS connections.
  * Fix issue with WiFi background scanning handling.
  * Fix issue with WiFi disconnect+connect race condition.
  * Fix issue with WiFi scanning and tethering operation.
  * Fix issue with WiFi security change handling.
  * Fix issue with missing signal for WPS changes.
  * Fix issue with online check retry handling.
  * Add support for systemd-resolved backend.
  * Add support for mDNS configuration setup.
- Drop connman-1.35-include.patch
- Drop connman-1.35-resolvconf.patch</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1582027200">- Update to 1.38:
  * Fix issue with online check on IP address update.
  * Fix issue with OpenVPN and encrypted private keys.
  * Fix issue with finishing of VPN connections.
  * Add support for updated stable iwd APIs.
  * Add support for WireGuard networks.
- Spec file cleanup</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1613131200">- Update to 1.39 (bsc#1181751):
  * Fix issue with scanning state synchronization and iwd.
  * Fix issue with invalid key with 4-way handshake offloading.
  * Fix issue with DNS proxy length checks to prevent buffer overflow. (CVE-2021-26675)
  * Fix issue with DHCP leaking stack data via uninitialized variable. (CVE-2021-26676)</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1644580800">- Update to 1.41: (bsc#1194177, bsc#1194176, bsc#1194175)
  * Fix issue with RTNL netlink message alignment.
  * Fix issue with dnsproxy and timeout for TCP feature. (CVE-2022-23097, CVE-2022-23096)
  * Fix issue with dnsproxy and busy loop in TCP server. (CVE-2022-23098)
  * Fix issue with WiFi connection with no passphrase.
  * Add support for wpa_supplicant and WPA3-SAE functionality.
  * Add support for D-Bus ObjectManager interface.
- Renamed downstream patches to separate them from upstream patches
  * Rename 0001-connman-1.35-service.patch to 0100-connman-1.35-service.patch
- Add systemd hardening configuration
  * Rename harden_connman-vpn.service.patch to 0101-harden_connman-vpn.service.patch
  * Rename harden_connman-wait-online.service.patch to 0102-harden_connman-wait-online.service.patch
- Disabled openconnect plugin due to version conflict
- Disabled vpnc plugin for i568 missing dependency
- Disabled hh2serial and tist_working for ppc64le due to version conflict</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1659355200">- Add refcounting to wispr portal detection (bsc#1200190)
  * add 0001-wispr-Rename-wispr_portal_list-to-wispr_portal_hash.patch
  * add 0002-wispr-Ignore-NULL-proxy.patch
  * add 0003-wispr-Add-reference-counter-to-portal-context.patch (CVE-2022-32293)
  * add 0004-wispr-Update-portal-context-references.patch (CVE-2022-32293)
- Fix OOB write in received_data (bsc#1200189)
  * add 0005-gweb-Fix-OOB-write-in-received_data.patch (CVE-2022-32292)</changelog>
</package>
<package pkgid="10f7b10579010daa5693088142bc57f6686183502686332c66cf147b31438411" name="connman-test" arch="x86_64">
  <version epoch="0" ver="1.41" rel="bp154.2.3.1"/>
  <changelog author="sleep_walker@suse.cz" date="1423224000">- bump to 1.28
  ver 1.28:
  Fix issue with DHCPv6 re-transmission timer.
  Fix issue with DHCP service ID option byte order.
  Fix issue with IPv6 connections and SLAAC/DHCPv6.
  Fix issue with telephony and IPv6 autoconfiguration.
  Fix issue with Bluetooth technology setting changes.
  Fix issue with WiFi autoscan interval calculation.
  Fix issue with WiFi and missing BSS signal strength.
  Add support for IPv4 information for WiFi Display.
  ver 1.27:
  Fix issue with memory leak in IP configuration.
  Fix issue with providing random numbers for DHCP.
  Fix issue with handling IN_MOVED_TO inotify events.
  Fix issue with channel selection for WiFi scanning.
  Add support for handling Bluetooth GN and PANU roles.
  ver 1.26:
  Fix issue with missing WiFi security provisioning support.
  Fix issue with immutable setting and provisioned services.
  Fix issue with scheduling DNS cache cleanup procedure.
  Fix issue with IPv6 Privacy setting on service removal.
  Fix issue with DHCPv6 CONFIRM message sending procedure.
  Fix issue with DHCPv6 lease expiration handling support.
  Fix issue with DHCPv4 networks and broadcast flag handling.
  Fix issue with DHCPv4 networks without gateway configuration.
  Fix issue with P2P Peer authorization handling.
  Fix issue with P2P Peer service registration.
  Add support for WiFi Display information elements.
  Add support for systemd-hostnamed integration.
  ver 1.25:
  Fix issue with handling rebind timer for DHCPv6.
  Fix issue with handling DHCP renew transaction.
  Fix issue with user supplied proxy settings and DHCP.
  Fix issue with extra status codes from captive portals.
  Fix issue with service idle state reset on failure.
  Fix issue with DNS label compression handling.
  Add support for experimental P2P Peer service.
  ver 1.24:
  Fix issue with handling slave interfaces.
  Fix issue with handling DHCPv4 broadcast flag.
  Fix issue with handling DHCPv4 lease expiration.
  Fix issue with handling WiFi auto-scanning timeout.
  Fix issue with handling domain and DNS server changes.
  Fix issue with double free and agent messages.
  ver 1.23:
  Fix issue with memory leak in technology handling.
  Fix issue with not removing host route of OpenVPN.
  Fix issue with double free in DHCP cleanup handling.
  Fix issue with handling DHCP method from oFono.
  Fix issue with IPv6-PD when disabling tethering.
  Fix issue with DNS proxy when disabling tethering.
  Fix issue with Bluetooth start and stop interaction.
  Fix issue with Bluetooth PAN networks on adapter change.
  ver 1.22:
  Fix issue with WPS state synchronization.
  Fix issue with DNS servers and default service.
  Fix issue with DHCP client and rebooting state.
  Add support for NTP exponential backoff handling.
  Add support for NTP kiss-of-death packet handling.
  Add support for Ethernet gadget networking.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1438948800">- bump to 1.29
  Fix issue with IPv6 autoconfiguration when disabled.
  Fix issue with IPv6 temporary route handling.
  Fix issue with IPv6 timers for nameservers.
  Fix issue with DHPCv6 and route configuration.
  Fix issue with DHCPv6 source port and buggy servers.
  Fix issue with DHCPv6 rapid commit option length.
  Fix issue with DHCPv6 rapid commit error handling.
  Fix issue with handling invalid WiFi passphrases.
  Fix issue with connecting Ethernet devices.
  Add support for Ethernet and VLAN usage.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1444737600">- bumpt to 1.30
    Fix issue with pending DNS request during server change.
    Fix issue with empty strings in nameservers configuration.
    Fix issue with time servers during IP configuration change.
    Fix issue with 4-way handshake during roaming.
    Fix issue with open WiFi networks security.
    Fix issue with support for WiFi AnonymousIdentity.
    Fix issue with memory leak and DHCPv6 DUID handling.
    Fix issue with DHCP client and P2P interaction.
    Fix issue with handling provision file updates.
    Fix issue with VPN state updates.
    Disable 6to4 support by default.
- add keyring file
- clean with spec-cleaner
- fix builds for all possible distributions and architectures</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1503403200">- bump to 1.35
  besides other things contains fix for CVE-2017-12865</changelog>
  <changelog author="avvissu@yandex.by" date="1504872000">- Remove obsolete macros
- Add polkit-agent-1 dependency
- Use the %tmpfiles_create macro
- Removal of ldconfig scriptlets from all packages
- Add connman-wait-online.service in post{un}
- Spec file cleanup</changelog>
  <changelog author="avvissu@yandex.by" date="1507032000">- Add connman-1.35-resolvconf.patch
- Activate connman.service if the network services disabled
- Add info in /var/adm/update-messages</changelog>
  <changelog author="avvissu@yandex.by" date="1508414400">- Add configuration file (/etc/connman/main.conf)
- Add ghost lines: main.conf connman connman-vpn</changelog>
  <changelog author="avvissu@yandex.by" date="1508500800">- Remove unrecognized options: disable-gtk-doc, enable-threads,
  disable-iwmx, enable-session-policy</changelog>
  <changelog author="avvissu@yandex.by" date="1509019200">- Change the mode of download_files (sr#521762)
- Remove connman-rpmlintrc (bnc#1057697)
- Add client as a recommended dependency</changelog>
  <changelog author="avvissu@yandex.by" date="1514289600">- Add symlink to network.service (connman-1.35-service.patch)</changelog>
  <changelog author="avvissu@yandex.by" date="1518523200">- Fix build errors due to unsupported header include order with
  newer kernels &gt;=4.15 (connman-1.35-include.patch).</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1557489600">- Update to 1.37:
  * Fix issue with handling invalid gateway addresses.
  * Fix issue with handling updates of default gateway.
  * Fix issue with DHCP servers that require broadcast flag.
  * Add support for option to use gateways as time servers.
  * Add support for option to select default technology.
  * Add support for Address Conflict Detection (ACD).
  * Add support for IPv6 iptables management.
- Change in 1.36:
  * Fix issue with DNS short response on error handling.
  * Fix issue with handling incoming DNS requests.
  * Fix issue with handling empty timeserver list.
  * Fix issue with incorrect DHCP byte order.
  * Fix issue with AllowDomainnameUpdates handling.
  * Fix issue with IPv4 link-local IP conflict error.
  * Fix issue with handling WISPr over TLS connections.
  * Fix issue with WiFi background scanning handling.
  * Fix issue with WiFi disconnect+connect race condition.
  * Fix issue with WiFi scanning and tethering operation.
  * Fix issue with WiFi security change handling.
  * Fix issue with missing signal for WPS changes.
  * Fix issue with online check retry handling.
  * Add support for systemd-resolved backend.
  * Add support for mDNS configuration setup.
- Drop connman-1.35-include.patch
- Drop connman-1.35-resolvconf.patch</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1582027200">- Update to 1.38:
  * Fix issue with online check on IP address update.
  * Fix issue with OpenVPN and encrypted private keys.
  * Fix issue with finishing of VPN connections.
  * Add support for updated stable iwd APIs.
  * Add support for WireGuard networks.
- Spec file cleanup</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1613131200">- Update to 1.39 (bsc#1181751):
  * Fix issue with scanning state synchronization and iwd.
  * Fix issue with invalid key with 4-way handshake offloading.
  * Fix issue with DNS proxy length checks to prevent buffer overflow. (CVE-2021-26675)
  * Fix issue with DHCP leaking stack data via uninitialized variable. (CVE-2021-26676)</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1644580800">- Update to 1.41: (bsc#1194177, bsc#1194176, bsc#1194175)
  * Fix issue with RTNL netlink message alignment.
  * Fix issue with dnsproxy and timeout for TCP feature. (CVE-2022-23097, CVE-2022-23096)
  * Fix issue with dnsproxy and busy loop in TCP server. (CVE-2022-23098)
  * Fix issue with WiFi connection with no passphrase.
  * Add support for wpa_supplicant and WPA3-SAE functionality.
  * Add support for D-Bus ObjectManager interface.
- Renamed downstream patches to separate them from upstream patches
  * Rename 0001-connman-1.35-service.patch to 0100-connman-1.35-service.patch
- Add systemd hardening configuration
  * Rename harden_connman-vpn.service.patch to 0101-harden_connman-vpn.service.patch
  * Rename harden_connman-wait-online.service.patch to 0102-harden_connman-wait-online.service.patch
- Disabled openconnect plugin due to version conflict
- Disabled vpnc plugin for i568 missing dependency
- Disabled hh2serial and tist_working for ppc64le due to version conflict</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1659355200">- Add refcounting to wispr portal detection (bsc#1200190)
  * add 0001-wispr-Rename-wispr_portal_list-to-wispr_portal_hash.patch
  * add 0002-wispr-Ignore-NULL-proxy.patch
  * add 0003-wispr-Add-reference-counter-to-portal-context.patch (CVE-2022-32293)
  * add 0004-wispr-Update-portal-context-references.patch (CVE-2022-32293)
- Fix OOB write in received_data (bsc#1200189)
  * add 0005-gweb-Fix-OOB-write-in-received_data.patch (CVE-2022-32292)</changelog>
</package>
<package pkgid="17716f5cfb7fe9112e119e240c54435ad0694451f48fb6c65da02a0ad07d278d" name="coturn" arch="aarch64">
  <version epoch="0" ver="4.5.2" rel="bp154.2.3.1"/>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1586433600">- Initial release of coturn 4.5.1.1</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1586606400">- Shorten description by stripping the long list of all RFCs.
- Drop %defattr; use %autosetup.</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1586692800">- Use pkgconfig(systemd) for packaging</changelog>
  <changelog author="lars@linux-schulserver.de" date="1586865600">- added apparmor profile (coturn-apparmor-usr.bin.turnserver)
- fix executable permissions in devel package by using defattr</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1588593600">- Extended Readme.SUSE with description on how to bind to ports below 1024
- Fixes and enhancements in service-file
- /etc/sysconfig/coturn defaults now to not show software's version to the public
- Version 4.5.1.2:
  * Do not display empty CLI passwd alert if CLI is not enabled
  * Removed several functions: gh#coturn/coturn#359
  * Fix webadmin IP permission and possible SQL-injections: gh#coturn/coturn#386
  * Fix Mongo driver crash on invalid connection string: gh#coturn/coturn#390
  * enhanced fread return length check: gh#coturn/coturn#392
  * disconnect database gracefully: #367
  * Using SSL_get_version method for BoringSSL compatibility:
    turn_session_info-&gt;tls_method returns real TLS version:
    gh#coturn/coturn#382
  * Added systemd service example: gh#coturn/coturn#276
  * Add bandwidth usage reporting packet/bandwidth usage by peers:
    gh#coturn/coturn#284
  * Modifying configure to enable compile with private libraries:
    gh#coturn/coturn#381
  * Append to log files rather than overriding them: gh#coturn/coturn#417
  * Updated incorrect string length check for 'ssh': gh#coturn/coturn#442
  * Fix Dockerfile for latest Debian: gh#coturn/coturn#449
  * CVE-2020-6061, CVE-2020-6062: specially crafted HTTP POST request can lead
    to heap overflow which can result in information leak:
    gh#coturn/coturn#489
  * STUN input validation: gh#coturn/coturn#472
  * Allow MD5 in FIPS mode: gh#coturn/coturn#398
  * update travis config ubuntu/mac images
  * added null check for second char: gh#coturn/coturn#466
  * compiler warning fixes: gh#coturn/coturn#470
  * Fix a memory leak when an SHATYPE isn't supported: gh#coturn/coturn#471
  * fix compiler warning comparison between signed and unsigned integer expressions
  * fix compiler warning string truncation
  * change Diffie Hellman default key length from 1066 to 2066
  * drop of supplementary group IDs: gh#coturn/coturn#522
  * Unify spelling of Coturn: gh#coturn/coturn#514
  * Rename "prod" config option to "no-software-attribute": gh#coturn/coturn#506
    gh#coturn/coturn#478
  * change sql data dir in docker-compose-all.yml: gh#coturn/coturn#516
  * add flags to disable periodic use of dynamic tables: gh#coturn/coturn#525
  * fix typos and grammar: gh#coturn/coturn#463, gh#coturn/coturn#488
  * Update README.docker: gh#coturn/coturn#475
  * fix config extension in README.docker: gh#coturn/coturn#519
  * Code beautifications: gh#coturn/coturn#327, gh#coturn/coturn#455,
    gh#coturn/coturn#513
- Removed patches now included in upstream: coturn-4.5.1.0-append-log.patch,
  coturn-4.5.1.1-cve-2020-6061.patch, coturn-4.5.1.1-cve-2020-6062.patch and
  coturn-4.5.1.1.missing-call-to-setgroups-before-setuid.patch</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1593518400">- Version 4.5.1.3:
  * Remove reference to SSLv3: gh#coturn/coturn#566
  * Ignore MD5 for BoringSSL: gh#coturn/coturn#579
  * STUN response buffer not initialized properly; he issue found and
    reported gh#coturn/coturn#583 by Felix Dörre all credits belongs to
    him. CVE-2020-4067, boo#1173510
- Let coturn allow binding to ports below 1024 per default</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1597838400">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1609070400">- AppArmor profile has ABI 3.0 and some minor changes
- Modified systemd unit:
  * do not use daemon mode
  * Type=simple
  * added security settings
- added multi-instance systemd unit</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1610366400">- Version 4.5.2
  * Fix for CVE-2020-26262 (boo#1180764)
  - Fix ipv6 ::1 loopback check
  - Not allow allocate peer address 0.0.0.0/8 and ::/128
  - For more details see the github security advisory:
    https://github.com/coturn/coturn/security/advisories/GHSA-6g6j-r9rf-cm7p
  * fix null pointer dereference in case of out of memory.
  * Fix: Null pointer dereference on tcp_client_input_handler_rfc6062data function
  * Fix: use-after-free vulnerability on write_to_peerchannel function
  * Fix: use-after-free vulnerability on write_client_connection function
  * add prometheus metrics
  * Delete trailing whitespace in example configuration files
  * Add architecture ppc64le to travis build
  * Fix misleading option in doc (prometheus)
  * Allow RFC6062 TCP relay data to look like TLS
  * Add support for proxy protocol V1
  * Print full date and time in logs
  * Add new options: "new-log-timestamp" and "new-log-timestamp-format"
  * Do not use FIPS and remove hardcode OPENSSL_VERSION_NUMBER with LibreSSL
  * Add ACME redirect url
  * support of --acme-redirect &lt;URL&gt;
  * fix acme security, redundancy, consistency
  * Add new --log-binding option to enable binding request logging
  * Fix stale-nonce documentation
  * Version number is changed to semver 2.0
  * pkg-config, and various cleanups in configure file
  * Add systemd notification for better systemd integration
  * Fix c++ support
  * Remove session id/allocation labels
  * Remove per session metrics. We should later add more counters.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_coturn.service.patch
  Modified:
  * coturn.service
  * coturn@.service</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1634558400">- Dropped harden_coturn.service.patch because systemd units are
  created from own source anyway and are proven to work</changelog>
  <changelog author="Georg Pfuetzenreuter &lt;georg.pfuetzenreuter@suse.com&gt;" date="1660910400">- Drop @privileged SystemCallFilter, can prevent service from starting (status=31/SYS)</changelog>
</package>
<package pkgid="98e7d1380d5d65ca1f43a141e282986092ddfd9d8c4f50031decfcbc22b8b908" name="coturn" arch="ppc64le">
  <version epoch="0" ver="4.5.2" rel="bp154.2.3.1"/>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1586433600">- Initial release of coturn 4.5.1.1</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1586606400">- Shorten description by stripping the long list of all RFCs.
- Drop %defattr; use %autosetup.</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1586692800">- Use pkgconfig(systemd) for packaging</changelog>
  <changelog author="lars@linux-schulserver.de" date="1586865600">- added apparmor profile (coturn-apparmor-usr.bin.turnserver)
- fix executable permissions in devel package by using defattr</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1588593600">- Extended Readme.SUSE with description on how to bind to ports below 1024
- Fixes and enhancements in service-file
- /etc/sysconfig/coturn defaults now to not show software's version to the public
- Version 4.5.1.2:
  * Do not display empty CLI passwd alert if CLI is not enabled
  * Removed several functions: gh#coturn/coturn#359
  * Fix webadmin IP permission and possible SQL-injections: gh#coturn/coturn#386
  * Fix Mongo driver crash on invalid connection string: gh#coturn/coturn#390
  * enhanced fread return length check: gh#coturn/coturn#392
  * disconnect database gracefully: #367
  * Using SSL_get_version method for BoringSSL compatibility:
    turn_session_info-&gt;tls_method returns real TLS version:
    gh#coturn/coturn#382
  * Added systemd service example: gh#coturn/coturn#276
  * Add bandwidth usage reporting packet/bandwidth usage by peers:
    gh#coturn/coturn#284
  * Modifying configure to enable compile with private libraries:
    gh#coturn/coturn#381
  * Append to log files rather than overriding them: gh#coturn/coturn#417
  * Updated incorrect string length check for 'ssh': gh#coturn/coturn#442
  * Fix Dockerfile for latest Debian: gh#coturn/coturn#449
  * CVE-2020-6061, CVE-2020-6062: specially crafted HTTP POST request can lead
    to heap overflow which can result in information leak:
    gh#coturn/coturn#489
  * STUN input validation: gh#coturn/coturn#472
  * Allow MD5 in FIPS mode: gh#coturn/coturn#398
  * update travis config ubuntu/mac images
  * added null check for second char: gh#coturn/coturn#466
  * compiler warning fixes: gh#coturn/coturn#470
  * Fix a memory leak when an SHATYPE isn't supported: gh#coturn/coturn#471
  * fix compiler warning comparison between signed and unsigned integer expressions
  * fix compiler warning string truncation
  * change Diffie Hellman default key length from 1066 to 2066
  * drop of supplementary group IDs: gh#coturn/coturn#522
  * Unify spelling of Coturn: gh#coturn/coturn#514
  * Rename "prod" config option to "no-software-attribute": gh#coturn/coturn#506
    gh#coturn/coturn#478
  * change sql data dir in docker-compose-all.yml: gh#coturn/coturn#516
  * add flags to disable periodic use of dynamic tables: gh#coturn/coturn#525
  * fix typos and grammar: gh#coturn/coturn#463, gh#coturn/coturn#488
  * Update README.docker: gh#coturn/coturn#475
  * fix config extension in README.docker: gh#coturn/coturn#519
  * Code beautifications: gh#coturn/coturn#327, gh#coturn/coturn#455,
    gh#coturn/coturn#513
- Removed patches now included in upstream: coturn-4.5.1.0-append-log.patch,
  coturn-4.5.1.1-cve-2020-6061.patch, coturn-4.5.1.1-cve-2020-6062.patch and
  coturn-4.5.1.1.missing-call-to-setgroups-before-setuid.patch</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1593518400">- Version 4.5.1.3:
  * Remove reference to SSLv3: gh#coturn/coturn#566
  * Ignore MD5 for BoringSSL: gh#coturn/coturn#579
  * STUN response buffer not initialized properly; he issue found and
    reported gh#coturn/coturn#583 by Felix Dörre all credits belongs to
    him. CVE-2020-4067, boo#1173510
- Let coturn allow binding to ports below 1024 per default</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1597838400">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1609070400">- AppArmor profile has ABI 3.0 and some minor changes
- Modified systemd unit:
  * do not use daemon mode
  * Type=simple
  * added security settings
- added multi-instance systemd unit</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1610366400">- Version 4.5.2
  * Fix for CVE-2020-26262 (boo#1180764)
  - Fix ipv6 ::1 loopback check
  - Not allow allocate peer address 0.0.0.0/8 and ::/128
  - For more details see the github security advisory:
    https://github.com/coturn/coturn/security/advisories/GHSA-6g6j-r9rf-cm7p
  * fix null pointer dereference in case of out of memory.
  * Fix: Null pointer dereference on tcp_client_input_handler_rfc6062data function
  * Fix: use-after-free vulnerability on write_to_peerchannel function
  * Fix: use-after-free vulnerability on write_client_connection function
  * add prometheus metrics
  * Delete trailing whitespace in example configuration files
  * Add architecture ppc64le to travis build
  * Fix misleading option in doc (prometheus)
  * Allow RFC6062 TCP relay data to look like TLS
  * Add support for proxy protocol V1
  * Print full date and time in logs
  * Add new options: "new-log-timestamp" and "new-log-timestamp-format"
  * Do not use FIPS and remove hardcode OPENSSL_VERSION_NUMBER with LibreSSL
  * Add ACME redirect url
  * support of --acme-redirect &lt;URL&gt;
  * fix acme security, redundancy, consistency
  * Add new --log-binding option to enable binding request logging
  * Fix stale-nonce documentation
  * Version number is changed to semver 2.0
  * pkg-config, and various cleanups in configure file
  * Add systemd notification for better systemd integration
  * Fix c++ support
  * Remove session id/allocation labels
  * Remove per session metrics. We should later add more counters.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_coturn.service.patch
  Modified:
  * coturn.service
  * coturn@.service</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1634558400">- Dropped harden_coturn.service.patch because systemd units are
  created from own source anyway and are proven to work</changelog>
  <changelog author="Georg Pfuetzenreuter &lt;georg.pfuetzenreuter@suse.com&gt;" date="1660910400">- Drop @privileged SystemCallFilter, can prevent service from starting (status=31/SYS)</changelog>
</package>
<package pkgid="046c80bcb5238abe584e13dfb88d7424e756b5690c66b62d72eb596a59b1b553" name="coturn" arch="s390x">
  <version epoch="0" ver="4.5.2" rel="bp154.2.3.1"/>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1586433600">- Initial release of coturn 4.5.1.1</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1586606400">- Shorten description by stripping the long list of all RFCs.
- Drop %defattr; use %autosetup.</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1586692800">- Use pkgconfig(systemd) for packaging</changelog>
  <changelog author="lars@linux-schulserver.de" date="1586865600">- added apparmor profile (coturn-apparmor-usr.bin.turnserver)
- fix executable permissions in devel package by using defattr</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1588593600">- Extended Readme.SUSE with description on how to bind to ports below 1024
- Fixes and enhancements in service-file
- /etc/sysconfig/coturn defaults now to not show software's version to the public
- Version 4.5.1.2:
  * Do not display empty CLI passwd alert if CLI is not enabled
  * Removed several functions: gh#coturn/coturn#359
  * Fix webadmin IP permission and possible SQL-injections: gh#coturn/coturn#386
  * Fix Mongo driver crash on invalid connection string: gh#coturn/coturn#390
  * enhanced fread return length check: gh#coturn/coturn#392
  * disconnect database gracefully: #367
  * Using SSL_get_version method for BoringSSL compatibility:
    turn_session_info-&gt;tls_method returns real TLS version:
    gh#coturn/coturn#382
  * Added systemd service example: gh#coturn/coturn#276
  * Add bandwidth usage reporting packet/bandwidth usage by peers:
    gh#coturn/coturn#284
  * Modifying configure to enable compile with private libraries:
    gh#coturn/coturn#381
  * Append to log files rather than overriding them: gh#coturn/coturn#417
  * Updated incorrect string length check for 'ssh': gh#coturn/coturn#442
  * Fix Dockerfile for latest Debian: gh#coturn/coturn#449
  * CVE-2020-6061, CVE-2020-6062: specially crafted HTTP POST request can lead
    to heap overflow which can result in information leak:
    gh#coturn/coturn#489
  * STUN input validation: gh#coturn/coturn#472
  * Allow MD5 in FIPS mode: gh#coturn/coturn#398
  * update travis config ubuntu/mac images
  * added null check for second char: gh#coturn/coturn#466
  * compiler warning fixes: gh#coturn/coturn#470
  * Fix a memory leak when an SHATYPE isn't supported: gh#coturn/coturn#471
  * fix compiler warning comparison between signed and unsigned integer expressions
  * fix compiler warning string truncation
  * change Diffie Hellman default key length from 1066 to 2066
  * drop of supplementary group IDs: gh#coturn/coturn#522
  * Unify spelling of Coturn: gh#coturn/coturn#514
  * Rename "prod" config option to "no-software-attribute": gh#coturn/coturn#506
    gh#coturn/coturn#478
  * change sql data dir in docker-compose-all.yml: gh#coturn/coturn#516
  * add flags to disable periodic use of dynamic tables: gh#coturn/coturn#525
  * fix typos and grammar: gh#coturn/coturn#463, gh#coturn/coturn#488
  * Update README.docker: gh#coturn/coturn#475
  * fix config extension in README.docker: gh#coturn/coturn#519
  * Code beautifications: gh#coturn/coturn#327, gh#coturn/coturn#455,
    gh#coturn/coturn#513
- Removed patches now included in upstream: coturn-4.5.1.0-append-log.patch,
  coturn-4.5.1.1-cve-2020-6061.patch, coturn-4.5.1.1-cve-2020-6062.patch and
  coturn-4.5.1.1.missing-call-to-setgroups-before-setuid.patch</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1593518400">- Version 4.5.1.3:
  * Remove reference to SSLv3: gh#coturn/coturn#566
  * Ignore MD5 for BoringSSL: gh#coturn/coturn#579
  * STUN response buffer not initialized properly; he issue found and
    reported gh#coturn/coturn#583 by Felix Dörre all credits belongs to
    him. CVE-2020-4067, boo#1173510
- Let coturn allow binding to ports below 1024 per default</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1597838400">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1609070400">- AppArmor profile has ABI 3.0 and some minor changes
- Modified systemd unit:
  * do not use daemon mode
  * Type=simple
  * added security settings
- added multi-instance systemd unit</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1610366400">- Version 4.5.2
  * Fix for CVE-2020-26262 (boo#1180764)
  - Fix ipv6 ::1 loopback check
  - Not allow allocate peer address 0.0.0.0/8 and ::/128
  - For more details see the github security advisory:
    https://github.com/coturn/coturn/security/advisories/GHSA-6g6j-r9rf-cm7p
  * fix null pointer dereference in case of out of memory.
  * Fix: Null pointer dereference on tcp_client_input_handler_rfc6062data function
  * Fix: use-after-free vulnerability on write_to_peerchannel function
  * Fix: use-after-free vulnerability on write_client_connection function
  * add prometheus metrics
  * Delete trailing whitespace in example configuration files
  * Add architecture ppc64le to travis build
  * Fix misleading option in doc (prometheus)
  * Allow RFC6062 TCP relay data to look like TLS
  * Add support for proxy protocol V1
  * Print full date and time in logs
  * Add new options: "new-log-timestamp" and "new-log-timestamp-format"
  * Do not use FIPS and remove hardcode OPENSSL_VERSION_NUMBER with LibreSSL
  * Add ACME redirect url
  * support of --acme-redirect &lt;URL&gt;
  * fix acme security, redundancy, consistency
  * Add new --log-binding option to enable binding request logging
  * Fix stale-nonce documentation
  * Version number is changed to semver 2.0
  * pkg-config, and various cleanups in configure file
  * Add systemd notification for better systemd integration
  * Fix c++ support
  * Remove session id/allocation labels
  * Remove per session metrics. We should later add more counters.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_coturn.service.patch
  Modified:
  * coturn.service
  * coturn@.service</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1634558400">- Dropped harden_coturn.service.patch because systemd units are
  created from own source anyway and are proven to work</changelog>
  <changelog author="Georg Pfuetzenreuter &lt;georg.pfuetzenreuter@suse.com&gt;" date="1660910400">- Drop @privileged SystemCallFilter, can prevent service from starting (status=31/SYS)</changelog>
</package>
<package pkgid="71246c390b13e7b03134f3ce3248ed45dfe711fdcc81a8e63ebb16f31444d57a" name="coturn" arch="src">
  <version epoch="0" ver="4.5.2" rel="bp154.2.3.1"/>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1586433600">- Initial release of coturn 4.5.1.1</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1586606400">- Shorten description by stripping the long list of all RFCs.
- Drop %defattr; use %autosetup.</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1586692800">- Use pkgconfig(systemd) for packaging</changelog>
  <changelog author="lars@linux-schulserver.de" date="1586865600">- added apparmor profile (coturn-apparmor-usr.bin.turnserver)
- fix executable permissions in devel package by using defattr</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1588593600">- Extended Readme.SUSE with description on how to bind to ports below 1024
- Fixes and enhancements in service-file
- /etc/sysconfig/coturn defaults now to not show software's version to the public
- Version 4.5.1.2:
  * Do not display empty CLI passwd alert if CLI is not enabled
  * Removed several functions: gh#coturn/coturn#359
  * Fix webadmin IP permission and possible SQL-injections: gh#coturn/coturn#386
  * Fix Mongo driver crash on invalid connection string: gh#coturn/coturn#390
  * enhanced fread return length check: gh#coturn/coturn#392
  * disconnect database gracefully: #367
  * Using SSL_get_version method for BoringSSL compatibility:
    turn_session_info-&gt;tls_method returns real TLS version:
    gh#coturn/coturn#382
  * Added systemd service example: gh#coturn/coturn#276
  * Add bandwidth usage reporting packet/bandwidth usage by peers:
    gh#coturn/coturn#284
  * Modifying configure to enable compile with private libraries:
    gh#coturn/coturn#381
  * Append to log files rather than overriding them: gh#coturn/coturn#417
  * Updated incorrect string length check for 'ssh': gh#coturn/coturn#442
  * Fix Dockerfile for latest Debian: gh#coturn/coturn#449
  * CVE-2020-6061, CVE-2020-6062: specially crafted HTTP POST request can lead
    to heap overflow which can result in information leak:
    gh#coturn/coturn#489
  * STUN input validation: gh#coturn/coturn#472
  * Allow MD5 in FIPS mode: gh#coturn/coturn#398
  * update travis config ubuntu/mac images
  * added null check for second char: gh#coturn/coturn#466
  * compiler warning fixes: gh#coturn/coturn#470
  * Fix a memory leak when an SHATYPE isn't supported: gh#coturn/coturn#471
  * fix compiler warning comparison between signed and unsigned integer expressions
  * fix compiler warning string truncation
  * change Diffie Hellman default key length from 1066 to 2066
  * drop of supplementary group IDs: gh#coturn/coturn#522
  * Unify spelling of Coturn: gh#coturn/coturn#514
  * Rename "prod" config option to "no-software-attribute": gh#coturn/coturn#506
    gh#coturn/coturn#478
  * change sql data dir in docker-compose-all.yml: gh#coturn/coturn#516
  * add flags to disable periodic use of dynamic tables: gh#coturn/coturn#525
  * fix typos and grammar: gh#coturn/coturn#463, gh#coturn/coturn#488
  * Update README.docker: gh#coturn/coturn#475
  * fix config extension in README.docker: gh#coturn/coturn#519
  * Code beautifications: gh#coturn/coturn#327, gh#coturn/coturn#455,
    gh#coturn/coturn#513
- Removed patches now included in upstream: coturn-4.5.1.0-append-log.patch,
  coturn-4.5.1.1-cve-2020-6061.patch, coturn-4.5.1.1-cve-2020-6062.patch and
  coturn-4.5.1.1.missing-call-to-setgroups-before-setuid.patch</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1593518400">- Version 4.5.1.3:
  * Remove reference to SSLv3: gh#coturn/coturn#566
  * Ignore MD5 for BoringSSL: gh#coturn/coturn#579
  * STUN response buffer not initialized properly; he issue found and
    reported gh#coturn/coturn#583 by Felix Dörre all credits belongs to
    him. CVE-2020-4067, boo#1173510
- Let coturn allow binding to ports below 1024 per default</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1597838400">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1609070400">- AppArmor profile has ABI 3.0 and some minor changes
- Modified systemd unit:
  * do not use daemon mode
  * Type=simple
  * added security settings
- added multi-instance systemd unit</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1610366400">- Version 4.5.2
  * Fix for CVE-2020-26262 (boo#1180764)
  - Fix ipv6 ::1 loopback check
  - Not allow allocate peer address 0.0.0.0/8 and ::/128
  - For more details see the github security advisory:
    https://github.com/coturn/coturn/security/advisories/GHSA-6g6j-r9rf-cm7p
  * fix null pointer dereference in case of out of memory.
  * Fix: Null pointer dereference on tcp_client_input_handler_rfc6062data function
  * Fix: use-after-free vulnerability on write_to_peerchannel function
  * Fix: use-after-free vulnerability on write_client_connection function
  * add prometheus metrics
  * Delete trailing whitespace in example configuration files
  * Add architecture ppc64le to travis build
  * Fix misleading option in doc (prometheus)
  * Allow RFC6062 TCP relay data to look like TLS
  * Add support for proxy protocol V1
  * Print full date and time in logs
  * Add new options: "new-log-timestamp" and "new-log-timestamp-format"
  * Do not use FIPS and remove hardcode OPENSSL_VERSION_NUMBER with LibreSSL
  * Add ACME redirect url
  * support of --acme-redirect &lt;URL&gt;
  * fix acme security, redundancy, consistency
  * Add new --log-binding option to enable binding request logging
  * Fix stale-nonce documentation
  * Version number is changed to semver 2.0
  * pkg-config, and various cleanups in configure file
  * Add systemd notification for better systemd integration
  * Fix c++ support
  * Remove session id/allocation labels
  * Remove per session metrics. We should later add more counters.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_coturn.service.patch
  Modified:
  * coturn.service
  * coturn@.service</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1634558400">- Dropped harden_coturn.service.patch because systemd units are
  created from own source anyway and are proven to work</changelog>
  <changelog author="Georg Pfuetzenreuter &lt;georg.pfuetzenreuter@suse.com&gt;" date="1660910400">- Drop @privileged SystemCallFilter, can prevent service from starting (status=31/SYS)</changelog>
</package>
<package pkgid="e6f5e46de12f765fa7a53021bfa546c475a59f6cdecfda9f84c03f1e47cfc5df" name="coturn" arch="x86_64">
  <version epoch="0" ver="4.5.2" rel="bp154.2.3.1"/>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1586433600">- Initial release of coturn 4.5.1.1</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1586606400">- Shorten description by stripping the long list of all RFCs.
- Drop %defattr; use %autosetup.</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1586692800">- Use pkgconfig(systemd) for packaging</changelog>
  <changelog author="lars@linux-schulserver.de" date="1586865600">- added apparmor profile (coturn-apparmor-usr.bin.turnserver)
- fix executable permissions in devel package by using defattr</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1588593600">- Extended Readme.SUSE with description on how to bind to ports below 1024
- Fixes and enhancements in service-file
- /etc/sysconfig/coturn defaults now to not show software's version to the public
- Version 4.5.1.2:
  * Do not display empty CLI passwd alert if CLI is not enabled
  * Removed several functions: gh#coturn/coturn#359
  * Fix webadmin IP permission and possible SQL-injections: gh#coturn/coturn#386
  * Fix Mongo driver crash on invalid connection string: gh#coturn/coturn#390
  * enhanced fread return length check: gh#coturn/coturn#392
  * disconnect database gracefully: #367
  * Using SSL_get_version method for BoringSSL compatibility:
    turn_session_info-&gt;tls_method returns real TLS version:
    gh#coturn/coturn#382
  * Added systemd service example: gh#coturn/coturn#276
  * Add bandwidth usage reporting packet/bandwidth usage by peers:
    gh#coturn/coturn#284
  * Modifying configure to enable compile with private libraries:
    gh#coturn/coturn#381
  * Append to log files rather than overriding them: gh#coturn/coturn#417
  * Updated incorrect string length check for 'ssh': gh#coturn/coturn#442
  * Fix Dockerfile for latest Debian: gh#coturn/coturn#449
  * CVE-2020-6061, CVE-2020-6062: specially crafted HTTP POST request can lead
    to heap overflow which can result in information leak:
    gh#coturn/coturn#489
  * STUN input validation: gh#coturn/coturn#472
  * Allow MD5 in FIPS mode: gh#coturn/coturn#398
  * update travis config ubuntu/mac images
  * added null check for second char: gh#coturn/coturn#466
  * compiler warning fixes: gh#coturn/coturn#470
  * Fix a memory leak when an SHATYPE isn't supported: gh#coturn/coturn#471
  * fix compiler warning comparison between signed and unsigned integer expressions
  * fix compiler warning string truncation
  * change Diffie Hellman default key length from 1066 to 2066
  * drop of supplementary group IDs: gh#coturn/coturn#522
  * Unify spelling of Coturn: gh#coturn/coturn#514
  * Rename "prod" config option to "no-software-attribute": gh#coturn/coturn#506
    gh#coturn/coturn#478
  * change sql data dir in docker-compose-all.yml: gh#coturn/coturn#516
  * add flags to disable periodic use of dynamic tables: gh#coturn/coturn#525
  * fix typos and grammar: gh#coturn/coturn#463, gh#coturn/coturn#488
  * Update README.docker: gh#coturn/coturn#475
  * fix config extension in README.docker: gh#coturn/coturn#519
  * Code beautifications: gh#coturn/coturn#327, gh#coturn/coturn#455,
    gh#coturn/coturn#513
- Removed patches now included in upstream: coturn-4.5.1.0-append-log.patch,
  coturn-4.5.1.1-cve-2020-6061.patch, coturn-4.5.1.1-cve-2020-6062.patch and
  coturn-4.5.1.1.missing-call-to-setgroups-before-setuid.patch</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1593518400">- Version 4.5.1.3:
  * Remove reference to SSLv3: gh#coturn/coturn#566
  * Ignore MD5 for BoringSSL: gh#coturn/coturn#579
  * STUN response buffer not initialized properly; he issue found and
    reported gh#coturn/coturn#583 by Felix Dörre all credits belongs to
    him. CVE-2020-4067, boo#1173510
- Let coturn allow binding to ports below 1024 per default</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1597838400">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1609070400">- AppArmor profile has ABI 3.0 and some minor changes
- Modified systemd unit:
  * do not use daemon mode
  * Type=simple
  * added security settings
- added multi-instance systemd unit</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1610366400">- Version 4.5.2
  * Fix for CVE-2020-26262 (boo#1180764)
  - Fix ipv6 ::1 loopback check
  - Not allow allocate peer address 0.0.0.0/8 and ::/128
  - For more details see the github security advisory:
    https://github.com/coturn/coturn/security/advisories/GHSA-6g6j-r9rf-cm7p
  * fix null pointer dereference in case of out of memory.
  * Fix: Null pointer dereference on tcp_client_input_handler_rfc6062data function
  * Fix: use-after-free vulnerability on write_to_peerchannel function
  * Fix: use-after-free vulnerability on write_client_connection function
  * add prometheus metrics
  * Delete trailing whitespace in example configuration files
  * Add architecture ppc64le to travis build
  * Fix misleading option in doc (prometheus)
  * Allow RFC6062 TCP relay data to look like TLS
  * Add support for proxy protocol V1
  * Print full date and time in logs
  * Add new options: "new-log-timestamp" and "new-log-timestamp-format"
  * Do not use FIPS and remove hardcode OPENSSL_VERSION_NUMBER with LibreSSL
  * Add ACME redirect url
  * support of --acme-redirect &lt;URL&gt;
  * fix acme security, redundancy, consistency
  * Add new --log-binding option to enable binding request logging
  * Fix stale-nonce documentation
  * Version number is changed to semver 2.0
  * pkg-config, and various cleanups in configure file
  * Add systemd notification for better systemd integration
  * Fix c++ support
  * Remove session id/allocation labels
  * Remove per session metrics. We should later add more counters.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_coturn.service.patch
  Modified:
  * coturn.service
  * coturn@.service</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1634558400">- Dropped harden_coturn.service.patch because systemd units are
  created from own source anyway and are proven to work</changelog>
  <changelog author="Georg Pfuetzenreuter &lt;georg.pfuetzenreuter@suse.com&gt;" date="1660910400">- Drop @privileged SystemCallFilter, can prevent service from starting (status=31/SYS)</changelog>
</package>
<package pkgid="fbdea3222a31454f023f9e3ebc2a41c44adf0850714e13ae7aa885dcc0a87d8c" name="coturn-devel" arch="aarch64">
  <version epoch="0" ver="4.5.2" rel="bp154.2.3.1"/>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1586433600">- Initial release of coturn 4.5.1.1</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1586606400">- Shorten description by stripping the long list of all RFCs.
- Drop %defattr; use %autosetup.</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1586692800">- Use pkgconfig(systemd) for packaging</changelog>
  <changelog author="lars@linux-schulserver.de" date="1586865600">- added apparmor profile (coturn-apparmor-usr.bin.turnserver)
- fix executable permissions in devel package by using defattr</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1588593600">- Extended Readme.SUSE with description on how to bind to ports below 1024
- Fixes and enhancements in service-file
- /etc/sysconfig/coturn defaults now to not show software's version to the public
- Version 4.5.1.2:
  * Do not display empty CLI passwd alert if CLI is not enabled
  * Removed several functions: gh#coturn/coturn#359
  * Fix webadmin IP permission and possible SQL-injections: gh#coturn/coturn#386
  * Fix Mongo driver crash on invalid connection string: gh#coturn/coturn#390
  * enhanced fread return length check: gh#coturn/coturn#392
  * disconnect database gracefully: #367
  * Using SSL_get_version method for BoringSSL compatibility:
    turn_session_info-&gt;tls_method returns real TLS version:
    gh#coturn/coturn#382
  * Added systemd service example: gh#coturn/coturn#276
  * Add bandwidth usage reporting packet/bandwidth usage by peers:
    gh#coturn/coturn#284
  * Modifying configure to enable compile with private libraries:
    gh#coturn/coturn#381
  * Append to log files rather than overriding them: gh#coturn/coturn#417
  * Updated incorrect string length check for 'ssh': gh#coturn/coturn#442
  * Fix Dockerfile for latest Debian: gh#coturn/coturn#449
  * CVE-2020-6061, CVE-2020-6062: specially crafted HTTP POST request can lead
    to heap overflow which can result in information leak:
    gh#coturn/coturn#489
  * STUN input validation: gh#coturn/coturn#472
  * Allow MD5 in FIPS mode: gh#coturn/coturn#398
  * update travis config ubuntu/mac images
  * added null check for second char: gh#coturn/coturn#466
  * compiler warning fixes: gh#coturn/coturn#470
  * Fix a memory leak when an SHATYPE isn't supported: gh#coturn/coturn#471
  * fix compiler warning comparison between signed and unsigned integer expressions
  * fix compiler warning string truncation
  * change Diffie Hellman default key length from 1066 to 2066
  * drop of supplementary group IDs: gh#coturn/coturn#522
  * Unify spelling of Coturn: gh#coturn/coturn#514
  * Rename "prod" config option to "no-software-attribute": gh#coturn/coturn#506
    gh#coturn/coturn#478
  * change sql data dir in docker-compose-all.yml: gh#coturn/coturn#516
  * add flags to disable periodic use of dynamic tables: gh#coturn/coturn#525
  * fix typos and grammar: gh#coturn/coturn#463, gh#coturn/coturn#488
  * Update README.docker: gh#coturn/coturn#475
  * fix config extension in README.docker: gh#coturn/coturn#519
  * Code beautifications: gh#coturn/coturn#327, gh#coturn/coturn#455,
    gh#coturn/coturn#513
- Removed patches now included in upstream: coturn-4.5.1.0-append-log.patch,
  coturn-4.5.1.1-cve-2020-6061.patch, coturn-4.5.1.1-cve-2020-6062.patch and
  coturn-4.5.1.1.missing-call-to-setgroups-before-setuid.patch</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1593518400">- Version 4.5.1.3:
  * Remove reference to SSLv3: gh#coturn/coturn#566
  * Ignore MD5 for BoringSSL: gh#coturn/coturn#579
  * STUN response buffer not initialized properly; he issue found and
    reported gh#coturn/coturn#583 by Felix Dörre all credits belongs to
    him. CVE-2020-4067, boo#1173510
- Let coturn allow binding to ports below 1024 per default</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1597838400">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1609070400">- AppArmor profile has ABI 3.0 and some minor changes
- Modified systemd unit:
  * do not use daemon mode
  * Type=simple
  * added security settings
- added multi-instance systemd unit</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1610366400">- Version 4.5.2
  * Fix for CVE-2020-26262 (boo#1180764)
  - Fix ipv6 ::1 loopback check
  - Not allow allocate peer address 0.0.0.0/8 and ::/128
  - For more details see the github security advisory:
    https://github.com/coturn/coturn/security/advisories/GHSA-6g6j-r9rf-cm7p
  * fix null pointer dereference in case of out of memory.
  * Fix: Null pointer dereference on tcp_client_input_handler_rfc6062data function
  * Fix: use-after-free vulnerability on write_to_peerchannel function
  * Fix: use-after-free vulnerability on write_client_connection function
  * add prometheus metrics
  * Delete trailing whitespace in example configuration files
  * Add architecture ppc64le to travis build
  * Fix misleading option in doc (prometheus)
  * Allow RFC6062 TCP relay data to look like TLS
  * Add support for proxy protocol V1
  * Print full date and time in logs
  * Add new options: "new-log-timestamp" and "new-log-timestamp-format"
  * Do not use FIPS and remove hardcode OPENSSL_VERSION_NUMBER with LibreSSL
  * Add ACME redirect url
  * support of --acme-redirect &lt;URL&gt;
  * fix acme security, redundancy, consistency
  * Add new --log-binding option to enable binding request logging
  * Fix stale-nonce documentation
  * Version number is changed to semver 2.0
  * pkg-config, and various cleanups in configure file
  * Add systemd notification for better systemd integration
  * Fix c++ support
  * Remove session id/allocation labels
  * Remove per session metrics. We should later add more counters.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_coturn.service.patch
  Modified:
  * coturn.service
  * coturn@.service</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1634558400">- Dropped harden_coturn.service.patch because systemd units are
  created from own source anyway and are proven to work</changelog>
  <changelog author="Georg Pfuetzenreuter &lt;georg.pfuetzenreuter@suse.com&gt;" date="1660910400">- Drop @privileged SystemCallFilter, can prevent service from starting (status=31/SYS)</changelog>
</package>
<package pkgid="baaaa68cbf8c2e0a7770601508166ebb45fc94c9e56b96553870c9f0aa1d03f4" name="coturn-devel" arch="ppc64le">
  <version epoch="0" ver="4.5.2" rel="bp154.2.3.1"/>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1586433600">- Initial release of coturn 4.5.1.1</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1586606400">- Shorten description by stripping the long list of all RFCs.
- Drop %defattr; use %autosetup.</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1586692800">- Use pkgconfig(systemd) for packaging</changelog>
  <changelog author="lars@linux-schulserver.de" date="1586865600">- added apparmor profile (coturn-apparmor-usr.bin.turnserver)
- fix executable permissions in devel package by using defattr</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1588593600">- Extended Readme.SUSE with description on how to bind to ports below 1024
- Fixes and enhancements in service-file
- /etc/sysconfig/coturn defaults now to not show software's version to the public
- Version 4.5.1.2:
  * Do not display empty CLI passwd alert if CLI is not enabled
  * Removed several functions: gh#coturn/coturn#359
  * Fix webadmin IP permission and possible SQL-injections: gh#coturn/coturn#386
  * Fix Mongo driver crash on invalid connection string: gh#coturn/coturn#390
  * enhanced fread return length check: gh#coturn/coturn#392
  * disconnect database gracefully: #367
  * Using SSL_get_version method for BoringSSL compatibility:
    turn_session_info-&gt;tls_method returns real TLS version:
    gh#coturn/coturn#382
  * Added systemd service example: gh#coturn/coturn#276
  * Add bandwidth usage reporting packet/bandwidth usage by peers:
    gh#coturn/coturn#284
  * Modifying configure to enable compile with private libraries:
    gh#coturn/coturn#381
  * Append to log files rather than overriding them: gh#coturn/coturn#417
  * Updated incorrect string length check for 'ssh': gh#coturn/coturn#442
  * Fix Dockerfile for latest Debian: gh#coturn/coturn#449
  * CVE-2020-6061, CVE-2020-6062: specially crafted HTTP POST request can lead
    to heap overflow which can result in information leak:
    gh#coturn/coturn#489
  * STUN input validation: gh#coturn/coturn#472
  * Allow MD5 in FIPS mode: gh#coturn/coturn#398
  * update travis config ubuntu/mac images
  * added null check for second char: gh#coturn/coturn#466
  * compiler warning fixes: gh#coturn/coturn#470
  * Fix a memory leak when an SHATYPE isn't supported: gh#coturn/coturn#471
  * fix compiler warning comparison between signed and unsigned integer expressions
  * fix compiler warning string truncation
  * change Diffie Hellman default key length from 1066 to 2066
  * drop of supplementary group IDs: gh#coturn/coturn#522
  * Unify spelling of Coturn: gh#coturn/coturn#514
  * Rename "prod" config option to "no-software-attribute": gh#coturn/coturn#506
    gh#coturn/coturn#478
  * change sql data dir in docker-compose-all.yml: gh#coturn/coturn#516
  * add flags to disable periodic use of dynamic tables: gh#coturn/coturn#525
  * fix typos and grammar: gh#coturn/coturn#463, gh#coturn/coturn#488
  * Update README.docker: gh#coturn/coturn#475
  * fix config extension in README.docker: gh#coturn/coturn#519
  * Code beautifications: gh#coturn/coturn#327, gh#coturn/coturn#455,
    gh#coturn/coturn#513
- Removed patches now included in upstream: coturn-4.5.1.0-append-log.patch,
  coturn-4.5.1.1-cve-2020-6061.patch, coturn-4.5.1.1-cve-2020-6062.patch and
  coturn-4.5.1.1.missing-call-to-setgroups-before-setuid.patch</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1593518400">- Version 4.5.1.3:
  * Remove reference to SSLv3: gh#coturn/coturn#566
  * Ignore MD5 for BoringSSL: gh#coturn/coturn#579
  * STUN response buffer not initialized properly; he issue found and
    reported gh#coturn/coturn#583 by Felix Dörre all credits belongs to
    him. CVE-2020-4067, boo#1173510
- Let coturn allow binding to ports below 1024 per default</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1597838400">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1609070400">- AppArmor profile has ABI 3.0 and some minor changes
- Modified systemd unit:
  * do not use daemon mode
  * Type=simple
  * added security settings
- added multi-instance systemd unit</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1610366400">- Version 4.5.2
  * Fix for CVE-2020-26262 (boo#1180764)
  - Fix ipv6 ::1 loopback check
  - Not allow allocate peer address 0.0.0.0/8 and ::/128
  - For more details see the github security advisory:
    https://github.com/coturn/coturn/security/advisories/GHSA-6g6j-r9rf-cm7p
  * fix null pointer dereference in case of out of memory.
  * Fix: Null pointer dereference on tcp_client_input_handler_rfc6062data function
  * Fix: use-after-free vulnerability on write_to_peerchannel function
  * Fix: use-after-free vulnerability on write_client_connection function
  * add prometheus metrics
  * Delete trailing whitespace in example configuration files
  * Add architecture ppc64le to travis build
  * Fix misleading option in doc (prometheus)
  * Allow RFC6062 TCP relay data to look like TLS
  * Add support for proxy protocol V1
  * Print full date and time in logs
  * Add new options: "new-log-timestamp" and "new-log-timestamp-format"
  * Do not use FIPS and remove hardcode OPENSSL_VERSION_NUMBER with LibreSSL
  * Add ACME redirect url
  * support of --acme-redirect &lt;URL&gt;
  * fix acme security, redundancy, consistency
  * Add new --log-binding option to enable binding request logging
  * Fix stale-nonce documentation
  * Version number is changed to semver 2.0
  * pkg-config, and various cleanups in configure file
  * Add systemd notification for better systemd integration
  * Fix c++ support
  * Remove session id/allocation labels
  * Remove per session metrics. We should later add more counters.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_coturn.service.patch
  Modified:
  * coturn.service
  * coturn@.service</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1634558400">- Dropped harden_coturn.service.patch because systemd units are
  created from own source anyway and are proven to work</changelog>
  <changelog author="Georg Pfuetzenreuter &lt;georg.pfuetzenreuter@suse.com&gt;" date="1660910400">- Drop @privileged SystemCallFilter, can prevent service from starting (status=31/SYS)</changelog>
</package>
<package pkgid="852e816c62ecf4dbdeec9bc454721ac2364e138d9d84d55af27ba267f6407aae" name="coturn-devel" arch="s390x">
  <version epoch="0" ver="4.5.2" rel="bp154.2.3.1"/>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1586433600">- Initial release of coturn 4.5.1.1</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1586606400">- Shorten description by stripping the long list of all RFCs.
- Drop %defattr; use %autosetup.</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1586692800">- Use pkgconfig(systemd) for packaging</changelog>
  <changelog author="lars@linux-schulserver.de" date="1586865600">- added apparmor profile (coturn-apparmor-usr.bin.turnserver)
- fix executable permissions in devel package by using defattr</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1588593600">- Extended Readme.SUSE with description on how to bind to ports below 1024
- Fixes and enhancements in service-file
- /etc/sysconfig/coturn defaults now to not show software's version to the public
- Version 4.5.1.2:
  * Do not display empty CLI passwd alert if CLI is not enabled
  * Removed several functions: gh#coturn/coturn#359
  * Fix webadmin IP permission and possible SQL-injections: gh#coturn/coturn#386
  * Fix Mongo driver crash on invalid connection string: gh#coturn/coturn#390
  * enhanced fread return length check: gh#coturn/coturn#392
  * disconnect database gracefully: #367
  * Using SSL_get_version method for BoringSSL compatibility:
    turn_session_info-&gt;tls_method returns real TLS version:
    gh#coturn/coturn#382
  * Added systemd service example: gh#coturn/coturn#276
  * Add bandwidth usage reporting packet/bandwidth usage by peers:
    gh#coturn/coturn#284
  * Modifying configure to enable compile with private libraries:
    gh#coturn/coturn#381
  * Append to log files rather than overriding them: gh#coturn/coturn#417
  * Updated incorrect string length check for 'ssh': gh#coturn/coturn#442
  * Fix Dockerfile for latest Debian: gh#coturn/coturn#449
  * CVE-2020-6061, CVE-2020-6062: specially crafted HTTP POST request can lead
    to heap overflow which can result in information leak:
    gh#coturn/coturn#489
  * STUN input validation: gh#coturn/coturn#472
  * Allow MD5 in FIPS mode: gh#coturn/coturn#398
  * update travis config ubuntu/mac images
  * added null check for second char: gh#coturn/coturn#466
  * compiler warning fixes: gh#coturn/coturn#470
  * Fix a memory leak when an SHATYPE isn't supported: gh#coturn/coturn#471
  * fix compiler warning comparison between signed and unsigned integer expressions
  * fix compiler warning string truncation
  * change Diffie Hellman default key length from 1066 to 2066
  * drop of supplementary group IDs: gh#coturn/coturn#522
  * Unify spelling of Coturn: gh#coturn/coturn#514
  * Rename "prod" config option to "no-software-attribute": gh#coturn/coturn#506
    gh#coturn/coturn#478
  * change sql data dir in docker-compose-all.yml: gh#coturn/coturn#516
  * add flags to disable periodic use of dynamic tables: gh#coturn/coturn#525
  * fix typos and grammar: gh#coturn/coturn#463, gh#coturn/coturn#488
  * Update README.docker: gh#coturn/coturn#475
  * fix config extension in README.docker: gh#coturn/coturn#519
  * Code beautifications: gh#coturn/coturn#327, gh#coturn/coturn#455,
    gh#coturn/coturn#513
- Removed patches now included in upstream: coturn-4.5.1.0-append-log.patch,
  coturn-4.5.1.1-cve-2020-6061.patch, coturn-4.5.1.1-cve-2020-6062.patch and
  coturn-4.5.1.1.missing-call-to-setgroups-before-setuid.patch</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1593518400">- Version 4.5.1.3:
  * Remove reference to SSLv3: gh#coturn/coturn#566
  * Ignore MD5 for BoringSSL: gh#coturn/coturn#579
  * STUN response buffer not initialized properly; he issue found and
    reported gh#coturn/coturn#583 by Felix Dörre all credits belongs to
    him. CVE-2020-4067, boo#1173510
- Let coturn allow binding to ports below 1024 per default</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1597838400">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1609070400">- AppArmor profile has ABI 3.0 and some minor changes
- Modified systemd unit:
  * do not use daemon mode
  * Type=simple
  * added security settings
- added multi-instance systemd unit</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1610366400">- Version 4.5.2
  * Fix for CVE-2020-26262 (boo#1180764)
  - Fix ipv6 ::1 loopback check
  - Not allow allocate peer address 0.0.0.0/8 and ::/128
  - For more details see the github security advisory:
    https://github.com/coturn/coturn/security/advisories/GHSA-6g6j-r9rf-cm7p
  * fix null pointer dereference in case of out of memory.
  * Fix: Null pointer dereference on tcp_client_input_handler_rfc6062data function
  * Fix: use-after-free vulnerability on write_to_peerchannel function
  * Fix: use-after-free vulnerability on write_client_connection function
  * add prometheus metrics
  * Delete trailing whitespace in example configuration files
  * Add architecture ppc64le to travis build
  * Fix misleading option in doc (prometheus)
  * Allow RFC6062 TCP relay data to look like TLS
  * Add support for proxy protocol V1
  * Print full date and time in logs
  * Add new options: "new-log-timestamp" and "new-log-timestamp-format"
  * Do not use FIPS and remove hardcode OPENSSL_VERSION_NUMBER with LibreSSL
  * Add ACME redirect url
  * support of --acme-redirect &lt;URL&gt;
  * fix acme security, redundancy, consistency
  * Add new --log-binding option to enable binding request logging
  * Fix stale-nonce documentation
  * Version number is changed to semver 2.0
  * pkg-config, and various cleanups in configure file
  * Add systemd notification for better systemd integration
  * Fix c++ support
  * Remove session id/allocation labels
  * Remove per session metrics. We should later add more counters.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_coturn.service.patch
  Modified:
  * coturn.service
  * coturn@.service</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1634558400">- Dropped harden_coturn.service.patch because systemd units are
  created from own source anyway and are proven to work</changelog>
  <changelog author="Georg Pfuetzenreuter &lt;georg.pfuetzenreuter@suse.com&gt;" date="1660910400">- Drop @privileged SystemCallFilter, can prevent service from starting (status=31/SYS)</changelog>
</package>
<package pkgid="e60f14ba3d706c8b15dd414ad9ab76f7bf2f0727cebf996f4c2c8fbbaafd9540" name="coturn-devel" arch="x86_64">
  <version epoch="0" ver="4.5.2" rel="bp154.2.3.1"/>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1586433600">- Initial release of coturn 4.5.1.1</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1586606400">- Shorten description by stripping the long list of all RFCs.
- Drop %defattr; use %autosetup.</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1586692800">- Use pkgconfig(systemd) for packaging</changelog>
  <changelog author="lars@linux-schulserver.de" date="1586865600">- added apparmor profile (coturn-apparmor-usr.bin.turnserver)
- fix executable permissions in devel package by using defattr</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1588593600">- Extended Readme.SUSE with description on how to bind to ports below 1024
- Fixes and enhancements in service-file
- /etc/sysconfig/coturn defaults now to not show software's version to the public
- Version 4.5.1.2:
  * Do not display empty CLI passwd alert if CLI is not enabled
  * Removed several functions: gh#coturn/coturn#359
  * Fix webadmin IP permission and possible SQL-injections: gh#coturn/coturn#386
  * Fix Mongo driver crash on invalid connection string: gh#coturn/coturn#390
  * enhanced fread return length check: gh#coturn/coturn#392
  * disconnect database gracefully: #367
  * Using SSL_get_version method for BoringSSL compatibility:
    turn_session_info-&gt;tls_method returns real TLS version:
    gh#coturn/coturn#382
  * Added systemd service example: gh#coturn/coturn#276
  * Add bandwidth usage reporting packet/bandwidth usage by peers:
    gh#coturn/coturn#284
  * Modifying configure to enable compile with private libraries:
    gh#coturn/coturn#381
  * Append to log files rather than overriding them: gh#coturn/coturn#417
  * Updated incorrect string length check for 'ssh': gh#coturn/coturn#442
  * Fix Dockerfile for latest Debian: gh#coturn/coturn#449
  * CVE-2020-6061, CVE-2020-6062: specially crafted HTTP POST request can lead
    to heap overflow which can result in information leak:
    gh#coturn/coturn#489
  * STUN input validation: gh#coturn/coturn#472
  * Allow MD5 in FIPS mode: gh#coturn/coturn#398
  * update travis config ubuntu/mac images
  * added null check for second char: gh#coturn/coturn#466
  * compiler warning fixes: gh#coturn/coturn#470
  * Fix a memory leak when an SHATYPE isn't supported: gh#coturn/coturn#471
  * fix compiler warning comparison between signed and unsigned integer expressions
  * fix compiler warning string truncation
  * change Diffie Hellman default key length from 1066 to 2066
  * drop of supplementary group IDs: gh#coturn/coturn#522
  * Unify spelling of Coturn: gh#coturn/coturn#514
  * Rename "prod" config option to "no-software-attribute": gh#coturn/coturn#506
    gh#coturn/coturn#478
  * change sql data dir in docker-compose-all.yml: gh#coturn/coturn#516
  * add flags to disable periodic use of dynamic tables: gh#coturn/coturn#525
  * fix typos and grammar: gh#coturn/coturn#463, gh#coturn/coturn#488
  * Update README.docker: gh#coturn/coturn#475
  * fix config extension in README.docker: gh#coturn/coturn#519
  * Code beautifications: gh#coturn/coturn#327, gh#coturn/coturn#455,
    gh#coturn/coturn#513
- Removed patches now included in upstream: coturn-4.5.1.0-append-log.patch,
  coturn-4.5.1.1-cve-2020-6061.patch, coturn-4.5.1.1-cve-2020-6062.patch and
  coturn-4.5.1.1.missing-call-to-setgroups-before-setuid.patch</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1593518400">- Version 4.5.1.3:
  * Remove reference to SSLv3: gh#coturn/coturn#566
  * Ignore MD5 for BoringSSL: gh#coturn/coturn#579
  * STUN response buffer not initialized properly; he issue found and
    reported gh#coturn/coturn#583 by Felix Dörre all credits belongs to
    him. CVE-2020-4067, boo#1173510
- Let coturn allow binding to ports below 1024 per default</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1597838400">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1609070400">- AppArmor profile has ABI 3.0 and some minor changes
- Modified systemd unit:
  * do not use daemon mode
  * Type=simple
  * added security settings
- added multi-instance systemd unit</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1610366400">- Version 4.5.2
  * Fix for CVE-2020-26262 (boo#1180764)
  - Fix ipv6 ::1 loopback check
  - Not allow allocate peer address 0.0.0.0/8 and ::/128
  - For more details see the github security advisory:
    https://github.com/coturn/coturn/security/advisories/GHSA-6g6j-r9rf-cm7p
  * fix null pointer dereference in case of out of memory.
  * Fix: Null pointer dereference on tcp_client_input_handler_rfc6062data function
  * Fix: use-after-free vulnerability on write_to_peerchannel function
  * Fix: use-after-free vulnerability on write_client_connection function
  * add prometheus metrics
  * Delete trailing whitespace in example configuration files
  * Add architecture ppc64le to travis build
  * Fix misleading option in doc (prometheus)
  * Allow RFC6062 TCP relay data to look like TLS
  * Add support for proxy protocol V1
  * Print full date and time in logs
  * Add new options: "new-log-timestamp" and "new-log-timestamp-format"
  * Do not use FIPS and remove hardcode OPENSSL_VERSION_NUMBER with LibreSSL
  * Add ACME redirect url
  * support of --acme-redirect &lt;URL&gt;
  * fix acme security, redundancy, consistency
  * Add new --log-binding option to enable binding request logging
  * Fix stale-nonce documentation
  * Version number is changed to semver 2.0
  * pkg-config, and various cleanups in configure file
  * Add systemd notification for better systemd integration
  * Fix c++ support
  * Remove session id/allocation labels
  * Remove per session metrics. We should later add more counters.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_coturn.service.patch
  Modified:
  * coturn.service
  * coturn@.service</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1634558400">- Dropped harden_coturn.service.patch because systemd units are
  created from own source anyway and are proven to work</changelog>
  <changelog author="Georg Pfuetzenreuter &lt;georg.pfuetzenreuter@suse.com&gt;" date="1660910400">- Drop @privileged SystemCallFilter, can prevent service from starting (status=31/SYS)</changelog>
</package>
<package pkgid="87291a0963677d104ecb5118a3b8dc457621fbdbfac358947fb1fcbc84103196" name="coturn-utils" arch="aarch64">
  <version epoch="0" ver="4.5.2" rel="bp154.2.3.1"/>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1586433600">- Initial release of coturn 4.5.1.1</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1586606400">- Shorten description by stripping the long list of all RFCs.
- Drop %defattr; use %autosetup.</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1586692800">- Use pkgconfig(systemd) for packaging</changelog>
  <changelog author="lars@linux-schulserver.de" date="1586865600">- added apparmor profile (coturn-apparmor-usr.bin.turnserver)
- fix executable permissions in devel package by using defattr</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1588593600">- Extended Readme.SUSE with description on how to bind to ports below 1024
- Fixes and enhancements in service-file
- /etc/sysconfig/coturn defaults now to not show software's version to the public
- Version 4.5.1.2:
  * Do not display empty CLI passwd alert if CLI is not enabled
  * Removed several functions: gh#coturn/coturn#359
  * Fix webadmin IP permission and possible SQL-injections: gh#coturn/coturn#386
  * Fix Mongo driver crash on invalid connection string: gh#coturn/coturn#390
  * enhanced fread return length check: gh#coturn/coturn#392
  * disconnect database gracefully: #367
  * Using SSL_get_version method for BoringSSL compatibility:
    turn_session_info-&gt;tls_method returns real TLS version:
    gh#coturn/coturn#382
  * Added systemd service example: gh#coturn/coturn#276
  * Add bandwidth usage reporting packet/bandwidth usage by peers:
    gh#coturn/coturn#284
  * Modifying configure to enable compile with private libraries:
    gh#coturn/coturn#381
  * Append to log files rather than overriding them: gh#coturn/coturn#417
  * Updated incorrect string length check for 'ssh': gh#coturn/coturn#442
  * Fix Dockerfile for latest Debian: gh#coturn/coturn#449
  * CVE-2020-6061, CVE-2020-6062: specially crafted HTTP POST request can lead
    to heap overflow which can result in information leak:
    gh#coturn/coturn#489
  * STUN input validation: gh#coturn/coturn#472
  * Allow MD5 in FIPS mode: gh#coturn/coturn#398
  * update travis config ubuntu/mac images
  * added null check for second char: gh#coturn/coturn#466
  * compiler warning fixes: gh#coturn/coturn#470
  * Fix a memory leak when an SHATYPE isn't supported: gh#coturn/coturn#471
  * fix compiler warning comparison between signed and unsigned integer expressions
  * fix compiler warning string truncation
  * change Diffie Hellman default key length from 1066 to 2066
  * drop of supplementary group IDs: gh#coturn/coturn#522
  * Unify spelling of Coturn: gh#coturn/coturn#514
  * Rename "prod" config option to "no-software-attribute": gh#coturn/coturn#506
    gh#coturn/coturn#478
  * change sql data dir in docker-compose-all.yml: gh#coturn/coturn#516
  * add flags to disable periodic use of dynamic tables: gh#coturn/coturn#525
  * fix typos and grammar: gh#coturn/coturn#463, gh#coturn/coturn#488
  * Update README.docker: gh#coturn/coturn#475
  * fix config extension in README.docker: gh#coturn/coturn#519
  * Code beautifications: gh#coturn/coturn#327, gh#coturn/coturn#455,
    gh#coturn/coturn#513
- Removed patches now included in upstream: coturn-4.5.1.0-append-log.patch,
  coturn-4.5.1.1-cve-2020-6061.patch, coturn-4.5.1.1-cve-2020-6062.patch and
  coturn-4.5.1.1.missing-call-to-setgroups-before-setuid.patch</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1593518400">- Version 4.5.1.3:
  * Remove reference to SSLv3: gh#coturn/coturn#566
  * Ignore MD5 for BoringSSL: gh#coturn/coturn#579
  * STUN response buffer not initialized properly; he issue found and
    reported gh#coturn/coturn#583 by Felix Dörre all credits belongs to
    him. CVE-2020-4067, boo#1173510
- Let coturn allow binding to ports below 1024 per default</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1597838400">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1609070400">- AppArmor profile has ABI 3.0 and some minor changes
- Modified systemd unit:
  * do not use daemon mode
  * Type=simple
  * added security settings
- added multi-instance systemd unit</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1610366400">- Version 4.5.2
  * Fix for CVE-2020-26262 (boo#1180764)
  - Fix ipv6 ::1 loopback check
  - Not allow allocate peer address 0.0.0.0/8 and ::/128
  - For more details see the github security advisory:
    https://github.com/coturn/coturn/security/advisories/GHSA-6g6j-r9rf-cm7p
  * fix null pointer dereference in case of out of memory.
  * Fix: Null pointer dereference on tcp_client_input_handler_rfc6062data function
  * Fix: use-after-free vulnerability on write_to_peerchannel function
  * Fix: use-after-free vulnerability on write_client_connection function
  * add prometheus metrics
  * Delete trailing whitespace in example configuration files
  * Add architecture ppc64le to travis build
  * Fix misleading option in doc (prometheus)
  * Allow RFC6062 TCP relay data to look like TLS
  * Add support for proxy protocol V1
  * Print full date and time in logs
  * Add new options: "new-log-timestamp" and "new-log-timestamp-format"
  * Do not use FIPS and remove hardcode OPENSSL_VERSION_NUMBER with LibreSSL
  * Add ACME redirect url
  * support of --acme-redirect &lt;URL&gt;
  * fix acme security, redundancy, consistency
  * Add new --log-binding option to enable binding request logging
  * Fix stale-nonce documentation
  * Version number is changed to semver 2.0
  * pkg-config, and various cleanups in configure file
  * Add systemd notification for better systemd integration
  * Fix c++ support
  * Remove session id/allocation labels
  * Remove per session metrics. We should later add more counters.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_coturn.service.patch
  Modified:
  * coturn.service
  * coturn@.service</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1634558400">- Dropped harden_coturn.service.patch because systemd units are
  created from own source anyway and are proven to work</changelog>
  <changelog author="Georg Pfuetzenreuter &lt;georg.pfuetzenreuter@suse.com&gt;" date="1660910400">- Drop @privileged SystemCallFilter, can prevent service from starting (status=31/SYS)</changelog>
</package>
<package pkgid="116034ee4aa22f9b08676836c686ac724a79db3753c2c48289272d8062314077" name="coturn-utils" arch="ppc64le">
  <version epoch="0" ver="4.5.2" rel="bp154.2.3.1"/>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1586433600">- Initial release of coturn 4.5.1.1</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1586606400">- Shorten description by stripping the long list of all RFCs.
- Drop %defattr; use %autosetup.</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1586692800">- Use pkgconfig(systemd) for packaging</changelog>
  <changelog author="lars@linux-schulserver.de" date="1586865600">- added apparmor profile (coturn-apparmor-usr.bin.turnserver)
- fix executable permissions in devel package by using defattr</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1588593600">- Extended Readme.SUSE with description on how to bind to ports below 1024
- Fixes and enhancements in service-file
- /etc/sysconfig/coturn defaults now to not show software's version to the public
- Version 4.5.1.2:
  * Do not display empty CLI passwd alert if CLI is not enabled
  * Removed several functions: gh#coturn/coturn#359
  * Fix webadmin IP permission and possible SQL-injections: gh#coturn/coturn#386
  * Fix Mongo driver crash on invalid connection string: gh#coturn/coturn#390
  * enhanced fread return length check: gh#coturn/coturn#392
  * disconnect database gracefully: #367
  * Using SSL_get_version method for BoringSSL compatibility:
    turn_session_info-&gt;tls_method returns real TLS version:
    gh#coturn/coturn#382
  * Added systemd service example: gh#coturn/coturn#276
  * Add bandwidth usage reporting packet/bandwidth usage by peers:
    gh#coturn/coturn#284
  * Modifying configure to enable compile with private libraries:
    gh#coturn/coturn#381
  * Append to log files rather than overriding them: gh#coturn/coturn#417
  * Updated incorrect string length check for 'ssh': gh#coturn/coturn#442
  * Fix Dockerfile for latest Debian: gh#coturn/coturn#449
  * CVE-2020-6061, CVE-2020-6062: specially crafted HTTP POST request can lead
    to heap overflow which can result in information leak:
    gh#coturn/coturn#489
  * STUN input validation: gh#coturn/coturn#472
  * Allow MD5 in FIPS mode: gh#coturn/coturn#398
  * update travis config ubuntu/mac images
  * added null check for second char: gh#coturn/coturn#466
  * compiler warning fixes: gh#coturn/coturn#470
  * Fix a memory leak when an SHATYPE isn't supported: gh#coturn/coturn#471
  * fix compiler warning comparison between signed and unsigned integer expressions
  * fix compiler warning string truncation
  * change Diffie Hellman default key length from 1066 to 2066
  * drop of supplementary group IDs: gh#coturn/coturn#522
  * Unify spelling of Coturn: gh#coturn/coturn#514
  * Rename "prod" config option to "no-software-attribute": gh#coturn/coturn#506
    gh#coturn/coturn#478
  * change sql data dir in docker-compose-all.yml: gh#coturn/coturn#516
  * add flags to disable periodic use of dynamic tables: gh#coturn/coturn#525
  * fix typos and grammar: gh#coturn/coturn#463, gh#coturn/coturn#488
  * Update README.docker: gh#coturn/coturn#475
  * fix config extension in README.docker: gh#coturn/coturn#519
  * Code beautifications: gh#coturn/coturn#327, gh#coturn/coturn#455,
    gh#coturn/coturn#513
- Removed patches now included in upstream: coturn-4.5.1.0-append-log.patch,
  coturn-4.5.1.1-cve-2020-6061.patch, coturn-4.5.1.1-cve-2020-6062.patch and
  coturn-4.5.1.1.missing-call-to-setgroups-before-setuid.patch</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1593518400">- Version 4.5.1.3:
  * Remove reference to SSLv3: gh#coturn/coturn#566
  * Ignore MD5 for BoringSSL: gh#coturn/coturn#579
  * STUN response buffer not initialized properly; he issue found and
    reported gh#coturn/coturn#583 by Felix Dörre all credits belongs to
    him. CVE-2020-4067, boo#1173510
- Let coturn allow binding to ports below 1024 per default</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1597838400">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1609070400">- AppArmor profile has ABI 3.0 and some minor changes
- Modified systemd unit:
  * do not use daemon mode
  * Type=simple
  * added security settings
- added multi-instance systemd unit</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1610366400">- Version 4.5.2
  * Fix for CVE-2020-26262 (boo#1180764)
  - Fix ipv6 ::1 loopback check
  - Not allow allocate peer address 0.0.0.0/8 and ::/128
  - For more details see the github security advisory:
    https://github.com/coturn/coturn/security/advisories/GHSA-6g6j-r9rf-cm7p
  * fix null pointer dereference in case of out of memory.
  * Fix: Null pointer dereference on tcp_client_input_handler_rfc6062data function
  * Fix: use-after-free vulnerability on write_to_peerchannel function
  * Fix: use-after-free vulnerability on write_client_connection function
  * add prometheus metrics
  * Delete trailing whitespace in example configuration files
  * Add architecture ppc64le to travis build
  * Fix misleading option in doc (prometheus)
  * Allow RFC6062 TCP relay data to look like TLS
  * Add support for proxy protocol V1
  * Print full date and time in logs
  * Add new options: "new-log-timestamp" and "new-log-timestamp-format"
  * Do not use FIPS and remove hardcode OPENSSL_VERSION_NUMBER with LibreSSL
  * Add ACME redirect url
  * support of --acme-redirect &lt;URL&gt;
  * fix acme security, redundancy, consistency
  * Add new --log-binding option to enable binding request logging
  * Fix stale-nonce documentation
  * Version number is changed to semver 2.0
  * pkg-config, and various cleanups in configure file
  * Add systemd notification for better systemd integration
  * Fix c++ support
  * Remove session id/allocation labels
  * Remove per session metrics. We should later add more counters.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_coturn.service.patch
  Modified:
  * coturn.service
  * coturn@.service</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1634558400">- Dropped harden_coturn.service.patch because systemd units are
  created from own source anyway and are proven to work</changelog>
  <changelog author="Georg Pfuetzenreuter &lt;georg.pfuetzenreuter@suse.com&gt;" date="1660910400">- Drop @privileged SystemCallFilter, can prevent service from starting (status=31/SYS)</changelog>
</package>
<package pkgid="93571cd22f5ca1e4c74a489aaa4c0a27bcd232a366ba55d7bad450adb55b34f6" name="coturn-utils" arch="s390x">
  <version epoch="0" ver="4.5.2" rel="bp154.2.3.1"/>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1586433600">- Initial release of coturn 4.5.1.1</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1586606400">- Shorten description by stripping the long list of all RFCs.
- Drop %defattr; use %autosetup.</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1586692800">- Use pkgconfig(systemd) for packaging</changelog>
  <changelog author="lars@linux-schulserver.de" date="1586865600">- added apparmor profile (coturn-apparmor-usr.bin.turnserver)
- fix executable permissions in devel package by using defattr</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1588593600">- Extended Readme.SUSE with description on how to bind to ports below 1024
- Fixes and enhancements in service-file
- /etc/sysconfig/coturn defaults now to not show software's version to the public
- Version 4.5.1.2:
  * Do not display empty CLI passwd alert if CLI is not enabled
  * Removed several functions: gh#coturn/coturn#359
  * Fix webadmin IP permission and possible SQL-injections: gh#coturn/coturn#386
  * Fix Mongo driver crash on invalid connection string: gh#coturn/coturn#390
  * enhanced fread return length check: gh#coturn/coturn#392
  * disconnect database gracefully: #367
  * Using SSL_get_version method for BoringSSL compatibility:
    turn_session_info-&gt;tls_method returns real TLS version:
    gh#coturn/coturn#382
  * Added systemd service example: gh#coturn/coturn#276
  * Add bandwidth usage reporting packet/bandwidth usage by peers:
    gh#coturn/coturn#284
  * Modifying configure to enable compile with private libraries:
    gh#coturn/coturn#381
  * Append to log files rather than overriding them: gh#coturn/coturn#417
  * Updated incorrect string length check for 'ssh': gh#coturn/coturn#442
  * Fix Dockerfile for latest Debian: gh#coturn/coturn#449
  * CVE-2020-6061, CVE-2020-6062: specially crafted HTTP POST request can lead
    to heap overflow which can result in information leak:
    gh#coturn/coturn#489
  * STUN input validation: gh#coturn/coturn#472
  * Allow MD5 in FIPS mode: gh#coturn/coturn#398
  * update travis config ubuntu/mac images
  * added null check for second char: gh#coturn/coturn#466
  * compiler warning fixes: gh#coturn/coturn#470
  * Fix a memory leak when an SHATYPE isn't supported: gh#coturn/coturn#471
  * fix compiler warning comparison between signed and unsigned integer expressions
  * fix compiler warning string truncation
  * change Diffie Hellman default key length from 1066 to 2066
  * drop of supplementary group IDs: gh#coturn/coturn#522
  * Unify spelling of Coturn: gh#coturn/coturn#514
  * Rename "prod" config option to "no-software-attribute": gh#coturn/coturn#506
    gh#coturn/coturn#478
  * change sql data dir in docker-compose-all.yml: gh#coturn/coturn#516
  * add flags to disable periodic use of dynamic tables: gh#coturn/coturn#525
  * fix typos and grammar: gh#coturn/coturn#463, gh#coturn/coturn#488
  * Update README.docker: gh#coturn/coturn#475
  * fix config extension in README.docker: gh#coturn/coturn#519
  * Code beautifications: gh#coturn/coturn#327, gh#coturn/coturn#455,
    gh#coturn/coturn#513
- Removed patches now included in upstream: coturn-4.5.1.0-append-log.patch,
  coturn-4.5.1.1-cve-2020-6061.patch, coturn-4.5.1.1-cve-2020-6062.patch and
  coturn-4.5.1.1.missing-call-to-setgroups-before-setuid.patch</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1593518400">- Version 4.5.1.3:
  * Remove reference to SSLv3: gh#coturn/coturn#566
  * Ignore MD5 for BoringSSL: gh#coturn/coturn#579
  * STUN response buffer not initialized properly; he issue found and
    reported gh#coturn/coturn#583 by Felix Dörre all credits belongs to
    him. CVE-2020-4067, boo#1173510
- Let coturn allow binding to ports below 1024 per default</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1597838400">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1609070400">- AppArmor profile has ABI 3.0 and some minor changes
- Modified systemd unit:
  * do not use daemon mode
  * Type=simple
  * added security settings
- added multi-instance systemd unit</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1610366400">- Version 4.5.2
  * Fix for CVE-2020-26262 (boo#1180764)
  - Fix ipv6 ::1 loopback check
  - Not allow allocate peer address 0.0.0.0/8 and ::/128
  - For more details see the github security advisory:
    https://github.com/coturn/coturn/security/advisories/GHSA-6g6j-r9rf-cm7p
  * fix null pointer dereference in case of out of memory.
  * Fix: Null pointer dereference on tcp_client_input_handler_rfc6062data function
  * Fix: use-after-free vulnerability on write_to_peerchannel function
  * Fix: use-after-free vulnerability on write_client_connection function
  * add prometheus metrics
  * Delete trailing whitespace in example configuration files
  * Add architecture ppc64le to travis build
  * Fix misleading option in doc (prometheus)
  * Allow RFC6062 TCP relay data to look like TLS
  * Add support for proxy protocol V1
  * Print full date and time in logs
  * Add new options: "new-log-timestamp" and "new-log-timestamp-format"
  * Do not use FIPS and remove hardcode OPENSSL_VERSION_NUMBER with LibreSSL
  * Add ACME redirect url
  * support of --acme-redirect &lt;URL&gt;
  * fix acme security, redundancy, consistency
  * Add new --log-binding option to enable binding request logging
  * Fix stale-nonce documentation
  * Version number is changed to semver 2.0
  * pkg-config, and various cleanups in configure file
  * Add systemd notification for better systemd integration
  * Fix c++ support
  * Remove session id/allocation labels
  * Remove per session metrics. We should later add more counters.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_coturn.service.patch
  Modified:
  * coturn.service
  * coturn@.service</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1634558400">- Dropped harden_coturn.service.patch because systemd units are
  created from own source anyway and are proven to work</changelog>
  <changelog author="Georg Pfuetzenreuter &lt;georg.pfuetzenreuter@suse.com&gt;" date="1660910400">- Drop @privileged SystemCallFilter, can prevent service from starting (status=31/SYS)</changelog>
</package>
<package pkgid="9c0a623e78d7bf040b38bd9fe2bd64ae1175259fbff754f92ff1ead52e77303a" name="coturn-utils" arch="x86_64">
  <version epoch="0" ver="4.5.2" rel="bp154.2.3.1"/>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1586433600">- Initial release of coturn 4.5.1.1</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1586606400">- Shorten description by stripping the long list of all RFCs.
- Drop %defattr; use %autosetup.</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1586692800">- Use pkgconfig(systemd) for packaging</changelog>
  <changelog author="lars@linux-schulserver.de" date="1586865600">- added apparmor profile (coturn-apparmor-usr.bin.turnserver)
- fix executable permissions in devel package by using defattr</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1588593600">- Extended Readme.SUSE with description on how to bind to ports below 1024
- Fixes and enhancements in service-file
- /etc/sysconfig/coturn defaults now to not show software's version to the public
- Version 4.5.1.2:
  * Do not display empty CLI passwd alert if CLI is not enabled
  * Removed several functions: gh#coturn/coturn#359
  * Fix webadmin IP permission and possible SQL-injections: gh#coturn/coturn#386
  * Fix Mongo driver crash on invalid connection string: gh#coturn/coturn#390
  * enhanced fread return length check: gh#coturn/coturn#392
  * disconnect database gracefully: #367
  * Using SSL_get_version method for BoringSSL compatibility:
    turn_session_info-&gt;tls_method returns real TLS version:
    gh#coturn/coturn#382
  * Added systemd service example: gh#coturn/coturn#276
  * Add bandwidth usage reporting packet/bandwidth usage by peers:
    gh#coturn/coturn#284
  * Modifying configure to enable compile with private libraries:
    gh#coturn/coturn#381
  * Append to log files rather than overriding them: gh#coturn/coturn#417
  * Updated incorrect string length check for 'ssh': gh#coturn/coturn#442
  * Fix Dockerfile for latest Debian: gh#coturn/coturn#449
  * CVE-2020-6061, CVE-2020-6062: specially crafted HTTP POST request can lead
    to heap overflow which can result in information leak:
    gh#coturn/coturn#489
  * STUN input validation: gh#coturn/coturn#472
  * Allow MD5 in FIPS mode: gh#coturn/coturn#398
  * update travis config ubuntu/mac images
  * added null check for second char: gh#coturn/coturn#466
  * compiler warning fixes: gh#coturn/coturn#470
  * Fix a memory leak when an SHATYPE isn't supported: gh#coturn/coturn#471
  * fix compiler warning comparison between signed and unsigned integer expressions
  * fix compiler warning string truncation
  * change Diffie Hellman default key length from 1066 to 2066
  * drop of supplementary group IDs: gh#coturn/coturn#522
  * Unify spelling of Coturn: gh#coturn/coturn#514
  * Rename "prod" config option to "no-software-attribute": gh#coturn/coturn#506
    gh#coturn/coturn#478
  * change sql data dir in docker-compose-all.yml: gh#coturn/coturn#516
  * add flags to disable periodic use of dynamic tables: gh#coturn/coturn#525
  * fix typos and grammar: gh#coturn/coturn#463, gh#coturn/coturn#488
  * Update README.docker: gh#coturn/coturn#475
  * fix config extension in README.docker: gh#coturn/coturn#519
  * Code beautifications: gh#coturn/coturn#327, gh#coturn/coturn#455,
    gh#coturn/coturn#513
- Removed patches now included in upstream: coturn-4.5.1.0-append-log.patch,
  coturn-4.5.1.1-cve-2020-6061.patch, coturn-4.5.1.1-cve-2020-6062.patch and
  coturn-4.5.1.1.missing-call-to-setgroups-before-setuid.patch</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1593518400">- Version 4.5.1.3:
  * Remove reference to SSLv3: gh#coturn/coturn#566
  * Ignore MD5 for BoringSSL: gh#coturn/coturn#579
  * STUN response buffer not initialized properly; he issue found and
    reported gh#coturn/coturn#583 by Felix Dörre all credits belongs to
    him. CVE-2020-4067, boo#1173510
- Let coturn allow binding to ports below 1024 per default</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1597838400">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1609070400">- AppArmor profile has ABI 3.0 and some minor changes
- Modified systemd unit:
  * do not use daemon mode
  * Type=simple
  * added security settings
- added multi-instance systemd unit</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1610366400">- Version 4.5.2
  * Fix for CVE-2020-26262 (boo#1180764)
  - Fix ipv6 ::1 loopback check
  - Not allow allocate peer address 0.0.0.0/8 and ::/128
  - For more details see the github security advisory:
    https://github.com/coturn/coturn/security/advisories/GHSA-6g6j-r9rf-cm7p
  * fix null pointer dereference in case of out of memory.
  * Fix: Null pointer dereference on tcp_client_input_handler_rfc6062data function
  * Fix: use-after-free vulnerability on write_to_peerchannel function
  * Fix: use-after-free vulnerability on write_client_connection function
  * add prometheus metrics
  * Delete trailing whitespace in example configuration files
  * Add architecture ppc64le to travis build
  * Fix misleading option in doc (prometheus)
  * Allow RFC6062 TCP relay data to look like TLS
  * Add support for proxy protocol V1
  * Print full date and time in logs
  * Add new options: "new-log-timestamp" and "new-log-timestamp-format"
  * Do not use FIPS and remove hardcode OPENSSL_VERSION_NUMBER with LibreSSL
  * Add ACME redirect url
  * support of --acme-redirect &lt;URL&gt;
  * fix acme security, redundancy, consistency
  * Add new --log-binding option to enable binding request logging
  * Fix stale-nonce documentation
  * Version number is changed to semver 2.0
  * pkg-config, and various cleanups in configure file
  * Add systemd notification for better systemd integration
  * Fix c++ support
  * Remove session id/allocation labels
  * Remove per session metrics. We should later add more counters.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_coturn.service.patch
  Modified:
  * coturn.service
  * coturn@.service</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1634558400">- Dropped harden_coturn.service.patch because systemd units are
  created from own source anyway and are proven to work</changelog>
  <changelog author="Georg Pfuetzenreuter &lt;georg.pfuetzenreuter@suse.com&gt;" date="1660910400">- Drop @privileged SystemCallFilter, can prevent service from starting (status=31/SYS)</changelog>
</package>
<package pkgid="7718b60f1b00143d19c66a62bbf081f7b1eeae1514d8b9083e7f2f87dfe25930" name="darktable" arch="aarch64">
  <version epoch="0" ver="3.6.1" rel="bp154.2.3.1"/>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1577966400">- Cleanup spec file:
  * Move LICENSE to licensedir
  * Use _libexecdir for tools
  * Remove conditionals for obsolete distribution versions
- Do not copy developer/packager documentation to docdir</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1578225600">- Update Debian files to reflect current version</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1578657600">- Fix building on Fedora</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1578916800">- Move libdarktable.so to %_libdir (boo#1160739)</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1580212800">- Fix the RPATH which is broken because of an invalid cmake macro
  * Correct fix for (boo#1160739)
  * CMake fix: https://build.opensuse.org/request/show/764183
- Fix version number in Debian/Ubuntu builds</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1581508800">- Update the documentation to 3.0</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1583841600">- Update to version 3.0.1
  * https://github.com/darktable-org/darktable/releases/tag/release-3.0.1
- added https://github.com/darktable-org/darktable/commit/8bceae80bd8459f4ec5929df75d6ec0471c3d26c.patch
  to fix regression in the basic adjustment module.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1587470400">- Update to version 3.0.2
  * Better UI for the blend modes which are now grouped by category.
  * Ctrl+Click can be used to rename a module instance.
  * Allow larger vignette scale
  * Add pseudo preset in whitebalance to keep user's modifications.
  * In crop&amp;rotate module it is possible to allow only vertical
    composition change using the Shift modifier when dragging
    the crop area and horizontal one using the Ctrl modifier.
  * Varios fixes
  * Add new supported cameras
  * Add new white balance presets
- Remove 8bceae80bd8459f4ec5929df75d6ec0471c3d26c.patch</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1588161600">- Update dsc file and debian archive</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1597147200">- Update to version 3.2.1
  * full changelog: https://github.com/darktable-org/darktable/releases/tag/release-3.2.1
  * highlights:
    + The lighttable view has been rewritten and the filmstrip reworked
    + The lighttable modules have improved user interaction
    + A complete overhaul of the CSS has been done
    + The Color Picker and Location modules are updated to better fit
    into the new UI
    + The preference dialog has been fully reviewed and reorganized to propose
    a better look and require less scrolling
    + The new negadoctor module has been added to help inverting negative films
    + A new histogram display called RGB Parade has been added
    + The metadata feature has been made generic internally and has new features
    + Image change detection has been made more reliable
    + A new down-sampling preference has been introduced for faster response
    in darkroom
    + Filmic RGB is updated to v4</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1608552000">- Use URL for source tarball and signature
- Added darktable-rpmlintrc
- Added missing lua-api pdf
- Removed trailing spaces from changes file
- Fixed building on Fedora</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1608811200">- Update to version 3.4.0
  * https://github.com/darktable-org/darktable/releases/tag/release-3.4.0</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1609761600">- Added d10c290fb3b47bbc8fd90d6d1d7935b900c1caf6.patch
  * Fix building on aarch64</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1610712000">- Added libgmic to build dependencies on Debian/Ubuntu
- Fixed typo in README.openSUSE</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1612440000">- Update to version 3.4.1
  * https://github.com/darktable-org/darktable/releases/tag/release-3.4.1
- Removed d10c290fb3b47bbc8fd90d6d1d7935b900c1caf6.patch</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1612785600">- Use pkgconfig BuildRequires for more libraries</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1612958400">- Build with internal lua on Fedora 33 and newer</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1625313600">- Update to version 3.6.0
  * https://github.com/darktable-org/darktable/releases/tag/release-3.6.0</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1631275200">- Update to version 3.6.1
  * https://github.com/darktable-org/darktable/releases/tag/release-3.6.1</changelog>
  <changelog author="Simon Lees &lt;simonf.lees@suse.com&gt;" date="1655812800">- cmake macro now uses DCMAKE_SKIP_INSTALL_RPATH rather then
  DCMAKE_SKIP_RPATH (boo#1200482 boo#1200483)</changelog>
</package>
<package pkgid="bbf762c9a0cc92efcfd602e8b5a85c7e9ec12250b4454e52c903ba71ffca0430" name="darktable" arch="src">
  <version epoch="0" ver="3.6.1" rel="bp154.2.3.1"/>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1577966400">- Cleanup spec file:
  * Move LICENSE to licensedir
  * Use _libexecdir for tools
  * Remove conditionals for obsolete distribution versions
- Do not copy developer/packager documentation to docdir</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1578225600">- Update Debian files to reflect current version</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1578657600">- Fix building on Fedora</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1578916800">- Move libdarktable.so to %_libdir (boo#1160739)</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1580212800">- Fix the RPATH which is broken because of an invalid cmake macro
  * Correct fix for (boo#1160739)
  * CMake fix: https://build.opensuse.org/request/show/764183
- Fix version number in Debian/Ubuntu builds</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1581508800">- Update the documentation to 3.0</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1583841600">- Update to version 3.0.1
  * https://github.com/darktable-org/darktable/releases/tag/release-3.0.1
- added https://github.com/darktable-org/darktable/commit/8bceae80bd8459f4ec5929df75d6ec0471c3d26c.patch
  to fix regression in the basic adjustment module.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1587470400">- Update to version 3.0.2
  * Better UI for the blend modes which are now grouped by category.
  * Ctrl+Click can be used to rename a module instance.
  * Allow larger vignette scale
  * Add pseudo preset in whitebalance to keep user's modifications.
  * In crop&amp;rotate module it is possible to allow only vertical
    composition change using the Shift modifier when dragging
    the crop area and horizontal one using the Ctrl modifier.
  * Varios fixes
  * Add new supported cameras
  * Add new white balance presets
- Remove 8bceae80bd8459f4ec5929df75d6ec0471c3d26c.patch</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1588161600">- Update dsc file and debian archive</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1597147200">- Update to version 3.2.1
  * full changelog: https://github.com/darktable-org/darktable/releases/tag/release-3.2.1
  * highlights:
    + The lighttable view has been rewritten and the filmstrip reworked
    + The lighttable modules have improved user interaction
    + A complete overhaul of the CSS has been done
    + The Color Picker and Location modules are updated to better fit
    into the new UI
    + The preference dialog has been fully reviewed and reorganized to propose
    a better look and require less scrolling
    + The new negadoctor module has been added to help inverting negative films
    + A new histogram display called RGB Parade has been added
    + The metadata feature has been made generic internally and has new features
    + Image change detection has been made more reliable
    + A new down-sampling preference has been introduced for faster response
    in darkroom
    + Filmic RGB is updated to v4</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1608552000">- Use URL for source tarball and signature
- Added darktable-rpmlintrc
- Added missing lua-api pdf
- Removed trailing spaces from changes file
- Fixed building on Fedora</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1608811200">- Update to version 3.4.0
  * https://github.com/darktable-org/darktable/releases/tag/release-3.4.0</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1609761600">- Added d10c290fb3b47bbc8fd90d6d1d7935b900c1caf6.patch
  * Fix building on aarch64</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1610712000">- Added libgmic to build dependencies on Debian/Ubuntu
- Fixed typo in README.openSUSE</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1612440000">- Update to version 3.4.1
  * https://github.com/darktable-org/darktable/releases/tag/release-3.4.1
- Removed d10c290fb3b47bbc8fd90d6d1d7935b900c1caf6.patch</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1612785600">- Use pkgconfig BuildRequires for more libraries</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1612958400">- Build with internal lua on Fedora 33 and newer</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1625313600">- Update to version 3.6.0
  * https://github.com/darktable-org/darktable/releases/tag/release-3.6.0</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1631275200">- Update to version 3.6.1
  * https://github.com/darktable-org/darktable/releases/tag/release-3.6.1</changelog>
  <changelog author="Simon Lees &lt;simonf.lees@suse.com&gt;" date="1655812800">- cmake macro now uses DCMAKE_SKIP_INSTALL_RPATH rather then
  DCMAKE_SKIP_RPATH (boo#1200482 boo#1200483)</changelog>
</package>
<package pkgid="af074f6e5fab0301276ef18586f7b2d2a5908c389aca49cde74fa5c9dc021c74" name="darktable" arch="x86_64">
  <version epoch="0" ver="3.6.1" rel="bp154.2.3.1"/>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1577966400">- Cleanup spec file:
  * Move LICENSE to licensedir
  * Use _libexecdir for tools
  * Remove conditionals for obsolete distribution versions
- Do not copy developer/packager documentation to docdir</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1578225600">- Update Debian files to reflect current version</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1578657600">- Fix building on Fedora</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1578916800">- Move libdarktable.so to %_libdir (boo#1160739)</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1580212800">- Fix the RPATH which is broken because of an invalid cmake macro
  * Correct fix for (boo#1160739)
  * CMake fix: https://build.opensuse.org/request/show/764183
- Fix version number in Debian/Ubuntu builds</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1581508800">- Update the documentation to 3.0</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1583841600">- Update to version 3.0.1
  * https://github.com/darktable-org/darktable/releases/tag/release-3.0.1
- added https://github.com/darktable-org/darktable/commit/8bceae80bd8459f4ec5929df75d6ec0471c3d26c.patch
  to fix regression in the basic adjustment module.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1587470400">- Update to version 3.0.2
  * Better UI for the blend modes which are now grouped by category.
  * Ctrl+Click can be used to rename a module instance.
  * Allow larger vignette scale
  * Add pseudo preset in whitebalance to keep user's modifications.
  * In crop&amp;rotate module it is possible to allow only vertical
    composition change using the Shift modifier when dragging
    the crop area and horizontal one using the Ctrl modifier.
  * Varios fixes
  * Add new supported cameras
  * Add new white balance presets
- Remove 8bceae80bd8459f4ec5929df75d6ec0471c3d26c.patch</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1588161600">- Update dsc file and debian archive</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1597147200">- Update to version 3.2.1
  * full changelog: https://github.com/darktable-org/darktable/releases/tag/release-3.2.1
  * highlights:
    + The lighttable view has been rewritten and the filmstrip reworked
    + The lighttable modules have improved user interaction
    + A complete overhaul of the CSS has been done
    + The Color Picker and Location modules are updated to better fit
    into the new UI
    + The preference dialog has been fully reviewed and reorganized to propose
    a better look and require less scrolling
    + The new negadoctor module has been added to help inverting negative films
    + A new histogram display called RGB Parade has been added
    + The metadata feature has been made generic internally and has new features
    + Image change detection has been made more reliable
    + A new down-sampling preference has been introduced for faster response
    in darkroom
    + Filmic RGB is updated to v4</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1608552000">- Use URL for source tarball and signature
- Added darktable-rpmlintrc
- Added missing lua-api pdf
- Removed trailing spaces from changes file
- Fixed building on Fedora</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1608811200">- Update to version 3.4.0
  * https://github.com/darktable-org/darktable/releases/tag/release-3.4.0</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1609761600">- Added d10c290fb3b47bbc8fd90d6d1d7935b900c1caf6.patch
  * Fix building on aarch64</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1610712000">- Added libgmic to build dependencies on Debian/Ubuntu
- Fixed typo in README.openSUSE</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1612440000">- Update to version 3.4.1
  * https://github.com/darktable-org/darktable/releases/tag/release-3.4.1
- Removed d10c290fb3b47bbc8fd90d6d1d7935b900c1caf6.patch</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1612785600">- Use pkgconfig BuildRequires for more libraries</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1612958400">- Build with internal lua on Fedora 33 and newer</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1625313600">- Update to version 3.6.0
  * https://github.com/darktable-org/darktable/releases/tag/release-3.6.0</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1631275200">- Update to version 3.6.1
  * https://github.com/darktable-org/darktable/releases/tag/release-3.6.1</changelog>
  <changelog author="Simon Lees &lt;simonf.lees@suse.com&gt;" date="1655812800">- cmake macro now uses DCMAKE_SKIP_INSTALL_RPATH rather then
  DCMAKE_SKIP_RPATH (boo#1200482 boo#1200483)</changelog>
</package>
<package pkgid="c11466da49c5c3a08e85b78a20d02d8f27971c42b89ed3a601dc67310c7acd32" name="darktable-doc" arch="noarch">
  <version epoch="0" ver="3.6.1" rel="bp154.2.3.1"/>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1577966400">- Cleanup spec file:
  * Move LICENSE to licensedir
  * Use _libexecdir for tools
  * Remove conditionals for obsolete distribution versions
- Do not copy developer/packager documentation to docdir</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1578225600">- Update Debian files to reflect current version</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1578657600">- Fix building on Fedora</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1578916800">- Move libdarktable.so to %_libdir (boo#1160739)</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1580212800">- Fix the RPATH which is broken because of an invalid cmake macro
  * Correct fix for (boo#1160739)
  * CMake fix: https://build.opensuse.org/request/show/764183
- Fix version number in Debian/Ubuntu builds</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1581508800">- Update the documentation to 3.0</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1583841600">- Update to version 3.0.1
  * https://github.com/darktable-org/darktable/releases/tag/release-3.0.1
- added https://github.com/darktable-org/darktable/commit/8bceae80bd8459f4ec5929df75d6ec0471c3d26c.patch
  to fix regression in the basic adjustment module.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1587470400">- Update to version 3.0.2
  * Better UI for the blend modes which are now grouped by category.
  * Ctrl+Click can be used to rename a module instance.
  * Allow larger vignette scale
  * Add pseudo preset in whitebalance to keep user's modifications.
  * In crop&amp;rotate module it is possible to allow only vertical
    composition change using the Shift modifier when dragging
    the crop area and horizontal one using the Ctrl modifier.
  * Varios fixes
  * Add new supported cameras
  * Add new white balance presets
- Remove 8bceae80bd8459f4ec5929df75d6ec0471c3d26c.patch</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1588161600">- Update dsc file and debian archive</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1597147200">- Update to version 3.2.1
  * full changelog: https://github.com/darktable-org/darktable/releases/tag/release-3.2.1
  * highlights:
    + The lighttable view has been rewritten and the filmstrip reworked
    + The lighttable modules have improved user interaction
    + A complete overhaul of the CSS has been done
    + The Color Picker and Location modules are updated to better fit
    into the new UI
    + The preference dialog has been fully reviewed and reorganized to propose
    a better look and require less scrolling
    + The new negadoctor module has been added to help inverting negative films
    + A new histogram display called RGB Parade has been added
    + The metadata feature has been made generic internally and has new features
    + Image change detection has been made more reliable
    + A new down-sampling preference has been introduced for faster response
    in darkroom
    + Filmic RGB is updated to v4</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1608552000">- Use URL for source tarball and signature
- Added darktable-rpmlintrc
- Added missing lua-api pdf
- Removed trailing spaces from changes file
- Fixed building on Fedora</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1608811200">- Update to version 3.4.0
  * https://github.com/darktable-org/darktable/releases/tag/release-3.4.0</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1609761600">- Added d10c290fb3b47bbc8fd90d6d1d7935b900c1caf6.patch
  * Fix building on aarch64</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1610712000">- Added libgmic to build dependencies on Debian/Ubuntu
- Fixed typo in README.openSUSE</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1612440000">- Update to version 3.4.1
  * https://github.com/darktable-org/darktable/releases/tag/release-3.4.1
- Removed d10c290fb3b47bbc8fd90d6d1d7935b900c1caf6.patch</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1612785600">- Use pkgconfig BuildRequires for more libraries</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1612958400">- Build with internal lua on Fedora 33 and newer</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1625313600">- Update to version 3.6.0
  * https://github.com/darktable-org/darktable/releases/tag/release-3.6.0</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1631275200">- Update to version 3.6.1
  * https://github.com/darktable-org/darktable/releases/tag/release-3.6.1</changelog>
  <changelog author="Simon Lees &lt;simonf.lees@suse.com&gt;" date="1655812800">- cmake macro now uses DCMAKE_SKIP_INSTALL_RPATH rather then
  DCMAKE_SKIP_RPATH (boo#1200482 boo#1200483)</changelog>
</package>
<package pkgid="eeda0bb44b8f229de0a652de3df82a7e843e5ce48138f85eae3abdb6c7a0d33b" name="darktable-tools-basecurve" arch="aarch64">
  <version epoch="0" ver="3.6.1" rel="bp154.2.3.1"/>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1577966400">- Cleanup spec file:
  * Move LICENSE to licensedir
  * Use _libexecdir for tools
  * Remove conditionals for obsolete distribution versions
- Do not copy developer/packager documentation to docdir</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1578225600">- Update Debian files to reflect current version</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1578657600">- Fix building on Fedora</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1578916800">- Move libdarktable.so to %_libdir (boo#1160739)</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1580212800">- Fix the RPATH which is broken because of an invalid cmake macro
  * Correct fix for (boo#1160739)
  * CMake fix: https://build.opensuse.org/request/show/764183
- Fix version number in Debian/Ubuntu builds</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1581508800">- Update the documentation to 3.0</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1583841600">- Update to version 3.0.1
  * https://github.com/darktable-org/darktable/releases/tag/release-3.0.1
- added https://github.com/darktable-org/darktable/commit/8bceae80bd8459f4ec5929df75d6ec0471c3d26c.patch
  to fix regression in the basic adjustment module.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1587470400">- Update to version 3.0.2
  * Better UI for the blend modes which are now grouped by category.
  * Ctrl+Click can be used to rename a module instance.
  * Allow larger vignette scale
  * Add pseudo preset in whitebalance to keep user's modifications.
  * In crop&amp;rotate module it is possible to allow only vertical
    composition change using the Shift modifier when dragging
    the crop area and horizontal one using the Ctrl modifier.
  * Varios fixes
  * Add new supported cameras
  * Add new white balance presets
- Remove 8bceae80bd8459f4ec5929df75d6ec0471c3d26c.patch</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1588161600">- Update dsc file and debian archive</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1597147200">- Update to version 3.2.1
  * full changelog: https://github.com/darktable-org/darktable/releases/tag/release-3.2.1
  * highlights:
    + The lighttable view has been rewritten and the filmstrip reworked
    + The lighttable modules have improved user interaction
    + A complete overhaul of the CSS has been done
    + The Color Picker and Location modules are updated to better fit
    into the new UI
    + The preference dialog has been fully reviewed and reorganized to propose
    a better look and require less scrolling
    + The new negadoctor module has been added to help inverting negative films
    + A new histogram display called RGB Parade has been added
    + The metadata feature has been made generic internally and has new features
    + Image change detection has been made more reliable
    + A new down-sampling preference has been introduced for faster response
    in darkroom
    + Filmic RGB is updated to v4</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1608552000">- Use URL for source tarball and signature
- Added darktable-rpmlintrc
- Added missing lua-api pdf
- Removed trailing spaces from changes file
- Fixed building on Fedora</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1608811200">- Update to version 3.4.0
  * https://github.com/darktable-org/darktable/releases/tag/release-3.4.0</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1609761600">- Added d10c290fb3b47bbc8fd90d6d1d7935b900c1caf6.patch
  * Fix building on aarch64</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1610712000">- Added libgmic to build dependencies on Debian/Ubuntu
- Fixed typo in README.openSUSE</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1612440000">- Update to version 3.4.1
  * https://github.com/darktable-org/darktable/releases/tag/release-3.4.1
- Removed d10c290fb3b47bbc8fd90d6d1d7935b900c1caf6.patch</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1612785600">- Use pkgconfig BuildRequires for more libraries</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1612958400">- Build with internal lua on Fedora 33 and newer</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1625313600">- Update to version 3.6.0
  * https://github.com/darktable-org/darktable/releases/tag/release-3.6.0</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1631275200">- Update to version 3.6.1
  * https://github.com/darktable-org/darktable/releases/tag/release-3.6.1</changelog>
  <changelog author="Simon Lees &lt;simonf.lees@suse.com&gt;" date="1655812800">- cmake macro now uses DCMAKE_SKIP_INSTALL_RPATH rather then
  DCMAKE_SKIP_RPATH (boo#1200482 boo#1200483)</changelog>
</package>
<package pkgid="267f48d970afb55e0260bacd6240fcd5c520e45c83a421bb636824a083149853" name="darktable-tools-basecurve" arch="x86_64">
  <version epoch="0" ver="3.6.1" rel="bp154.2.3.1"/>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1577966400">- Cleanup spec file:
  * Move LICENSE to licensedir
  * Use _libexecdir for tools
  * Remove conditionals for obsolete distribution versions
- Do not copy developer/packager documentation to docdir</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1578225600">- Update Debian files to reflect current version</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1578657600">- Fix building on Fedora</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1578916800">- Move libdarktable.so to %_libdir (boo#1160739)</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1580212800">- Fix the RPATH which is broken because of an invalid cmake macro
  * Correct fix for (boo#1160739)
  * CMake fix: https://build.opensuse.org/request/show/764183
- Fix version number in Debian/Ubuntu builds</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1581508800">- Update the documentation to 3.0</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1583841600">- Update to version 3.0.1
  * https://github.com/darktable-org/darktable/releases/tag/release-3.0.1
- added https://github.com/darktable-org/darktable/commit/8bceae80bd8459f4ec5929df75d6ec0471c3d26c.patch
  to fix regression in the basic adjustment module.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1587470400">- Update to version 3.0.2
  * Better UI for the blend modes which are now grouped by category.
  * Ctrl+Click can be used to rename a module instance.
  * Allow larger vignette scale
  * Add pseudo preset in whitebalance to keep user's modifications.
  * In crop&amp;rotate module it is possible to allow only vertical
    composition change using the Shift modifier when dragging
    the crop area and horizontal one using the Ctrl modifier.
  * Varios fixes
  * Add new supported cameras
  * Add new white balance presets
- Remove 8bceae80bd8459f4ec5929df75d6ec0471c3d26c.patch</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1588161600">- Update dsc file and debian archive</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1597147200">- Update to version 3.2.1
  * full changelog: https://github.com/darktable-org/darktable/releases/tag/release-3.2.1
  * highlights:
    + The lighttable view has been rewritten and the filmstrip reworked
    + The lighttable modules have improved user interaction
    + A complete overhaul of the CSS has been done
    + The Color Picker and Location modules are updated to better fit
    into the new UI
    + The preference dialog has been fully reviewed and reorganized to propose
    a better look and require less scrolling
    + The new negadoctor module has been added to help inverting negative films
    + A new histogram display called RGB Parade has been added
    + The metadata feature has been made generic internally and has new features
    + Image change detection has been made more reliable
    + A new down-sampling preference has been introduced for faster response
    in darkroom
    + Filmic RGB is updated to v4</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1608552000">- Use URL for source tarball and signature
- Added darktable-rpmlintrc
- Added missing lua-api pdf
- Removed trailing spaces from changes file
- Fixed building on Fedora</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1608811200">- Update to version 3.4.0
  * https://github.com/darktable-org/darktable/releases/tag/release-3.4.0</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1609761600">- Added d10c290fb3b47bbc8fd90d6d1d7935b900c1caf6.patch
  * Fix building on aarch64</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1610712000">- Added libgmic to build dependencies on Debian/Ubuntu
- Fixed typo in README.openSUSE</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1612440000">- Update to version 3.4.1
  * https://github.com/darktable-org/darktable/releases/tag/release-3.4.1
- Removed d10c290fb3b47bbc8fd90d6d1d7935b900c1caf6.patch</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1612785600">- Use pkgconfig BuildRequires for more libraries</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1612958400">- Build with internal lua on Fedora 33 and newer</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1625313600">- Update to version 3.6.0
  * https://github.com/darktable-org/darktable/releases/tag/release-3.6.0</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1631275200">- Update to version 3.6.1
  * https://github.com/darktable-org/darktable/releases/tag/release-3.6.1</changelog>
  <changelog author="Simon Lees &lt;simonf.lees@suse.com&gt;" date="1655812800">- cmake macro now uses DCMAKE_SKIP_INSTALL_RPATH rather then
  DCMAKE_SKIP_RPATH (boo#1200482 boo#1200483)</changelog>
</package>
<package pkgid="450997b32bd3edd2165bb897a9d3cb78a83741317a138fd6c922a55575a36e2c" name="darktable-tools-noise" arch="aarch64">
  <version epoch="0" ver="3.6.1" rel="bp154.2.3.1"/>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1577966400">- Cleanup spec file:
  * Move LICENSE to licensedir
  * Use _libexecdir for tools
  * Remove conditionals for obsolete distribution versions
- Do not copy developer/packager documentation to docdir</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1578225600">- Update Debian files to reflect current version</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1578657600">- Fix building on Fedora</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1578916800">- Move libdarktable.so to %_libdir (boo#1160739)</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1580212800">- Fix the RPATH which is broken because of an invalid cmake macro
  * Correct fix for (boo#1160739)
  * CMake fix: https://build.opensuse.org/request/show/764183
- Fix version number in Debian/Ubuntu builds</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1581508800">- Update the documentation to 3.0</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1583841600">- Update to version 3.0.1
  * https://github.com/darktable-org/darktable/releases/tag/release-3.0.1
- added https://github.com/darktable-org/darktable/commit/8bceae80bd8459f4ec5929df75d6ec0471c3d26c.patch
  to fix regression in the basic adjustment module.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1587470400">- Update to version 3.0.2
  * Better UI for the blend modes which are now grouped by category.
  * Ctrl+Click can be used to rename a module instance.
  * Allow larger vignette scale
  * Add pseudo preset in whitebalance to keep user's modifications.
  * In crop&amp;rotate module it is possible to allow only vertical
    composition change using the Shift modifier when dragging
    the crop area and horizontal one using the Ctrl modifier.
  * Varios fixes
  * Add new supported cameras
  * Add new white balance presets
- Remove 8bceae80bd8459f4ec5929df75d6ec0471c3d26c.patch</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1588161600">- Update dsc file and debian archive</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1597147200">- Update to version 3.2.1
  * full changelog: https://github.com/darktable-org/darktable/releases/tag/release-3.2.1
  * highlights:
    + The lighttable view has been rewritten and the filmstrip reworked
    + The lighttable modules have improved user interaction
    + A complete overhaul of the CSS has been done
    + The Color Picker and Location modules are updated to better fit
    into the new UI
    + The preference dialog has been fully reviewed and reorganized to propose
    a better look and require less scrolling
    + The new negadoctor module has been added to help inverting negative films
    + A new histogram display called RGB Parade has been added
    + The metadata feature has been made generic internally and has new features
    + Image change detection has been made more reliable
    + A new down-sampling preference has been introduced for faster response
    in darkroom
    + Filmic RGB is updated to v4</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1608552000">- Use URL for source tarball and signature
- Added darktable-rpmlintrc
- Added missing lua-api pdf
- Removed trailing spaces from changes file
- Fixed building on Fedora</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1608811200">- Update to version 3.4.0
  * https://github.com/darktable-org/darktable/releases/tag/release-3.4.0</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1609761600">- Added d10c290fb3b47bbc8fd90d6d1d7935b900c1caf6.patch
  * Fix building on aarch64</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1610712000">- Added libgmic to build dependencies on Debian/Ubuntu
- Fixed typo in README.openSUSE</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1612440000">- Update to version 3.4.1
  * https://github.com/darktable-org/darktable/releases/tag/release-3.4.1
- Removed d10c290fb3b47bbc8fd90d6d1d7935b900c1caf6.patch</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1612785600">- Use pkgconfig BuildRequires for more libraries</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1612958400">- Build with internal lua on Fedora 33 and newer</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1625313600">- Update to version 3.6.0
  * https://github.com/darktable-org/darktable/releases/tag/release-3.6.0</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1631275200">- Update to version 3.6.1
  * https://github.com/darktable-org/darktable/releases/tag/release-3.6.1</changelog>
  <changelog author="Simon Lees &lt;simonf.lees@suse.com&gt;" date="1655812800">- cmake macro now uses DCMAKE_SKIP_INSTALL_RPATH rather then
  DCMAKE_SKIP_RPATH (boo#1200482 boo#1200483)</changelog>
</package>
<package pkgid="ca47665716a99f3c1bb0ad5db61f8294e34ceef9796e574f55bea419c4b8e696" name="darktable-tools-noise" arch="x86_64">
  <version epoch="0" ver="3.6.1" rel="bp154.2.3.1"/>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1577966400">- Cleanup spec file:
  * Move LICENSE to licensedir
  * Use _libexecdir for tools
  * Remove conditionals for obsolete distribution versions
- Do not copy developer/packager documentation to docdir</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1578225600">- Update Debian files to reflect current version</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1578657600">- Fix building on Fedora</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1578916800">- Move libdarktable.so to %_libdir (boo#1160739)</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1580212800">- Fix the RPATH which is broken because of an invalid cmake macro
  * Correct fix for (boo#1160739)
  * CMake fix: https://build.opensuse.org/request/show/764183
- Fix version number in Debian/Ubuntu builds</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1581508800">- Update the documentation to 3.0</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1583841600">- Update to version 3.0.1
  * https://github.com/darktable-org/darktable/releases/tag/release-3.0.1
- added https://github.com/darktable-org/darktable/commit/8bceae80bd8459f4ec5929df75d6ec0471c3d26c.patch
  to fix regression in the basic adjustment module.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1587470400">- Update to version 3.0.2
  * Better UI for the blend modes which are now grouped by category.
  * Ctrl+Click can be used to rename a module instance.
  * Allow larger vignette scale
  * Add pseudo preset in whitebalance to keep user's modifications.
  * In crop&amp;rotate module it is possible to allow only vertical
    composition change using the Shift modifier when dragging
    the crop area and horizontal one using the Ctrl modifier.
  * Varios fixes
  * Add new supported cameras
  * Add new white balance presets
- Remove 8bceae80bd8459f4ec5929df75d6ec0471c3d26c.patch</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1588161600">- Update dsc file and debian archive</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1597147200">- Update to version 3.2.1
  * full changelog: https://github.com/darktable-org/darktable/releases/tag/release-3.2.1
  * highlights:
    + The lighttable view has been rewritten and the filmstrip reworked
    + The lighttable modules have improved user interaction
    + A complete overhaul of the CSS has been done
    + The Color Picker and Location modules are updated to better fit
    into the new UI
    + The preference dialog has been fully reviewed and reorganized to propose
    a better look and require less scrolling
    + The new negadoctor module has been added to help inverting negative films
    + A new histogram display called RGB Parade has been added
    + The metadata feature has been made generic internally and has new features
    + Image change detection has been made more reliable
    + A new down-sampling preference has been introduced for faster response
    in darkroom
    + Filmic RGB is updated to v4</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1608552000">- Use URL for source tarball and signature
- Added darktable-rpmlintrc
- Added missing lua-api pdf
- Removed trailing spaces from changes file
- Fixed building on Fedora</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1608811200">- Update to version 3.4.0
  * https://github.com/darktable-org/darktable/releases/tag/release-3.4.0</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1609761600">- Added d10c290fb3b47bbc8fd90d6d1d7935b900c1caf6.patch
  * Fix building on aarch64</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1610712000">- Added libgmic to build dependencies on Debian/Ubuntu
- Fixed typo in README.openSUSE</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1612440000">- Update to version 3.4.1
  * https://github.com/darktable-org/darktable/releases/tag/release-3.4.1
- Removed d10c290fb3b47bbc8fd90d6d1d7935b900c1caf6.patch</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1612785600">- Use pkgconfig BuildRequires for more libraries</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1612958400">- Build with internal lua on Fedora 33 and newer</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1625313600">- Update to version 3.6.0
  * https://github.com/darktable-org/darktable/releases/tag/release-3.6.0</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1631275200">- Update to version 3.6.1
  * https://github.com/darktable-org/darktable/releases/tag/release-3.6.1</changelog>
  <changelog author="Simon Lees &lt;simonf.lees@suse.com&gt;" date="1655812800">- cmake macro now uses DCMAKE_SKIP_INSTALL_RPATH rather then
  DCMAKE_SKIP_RPATH (boo#1200482 boo#1200483)</changelog>
</package>
<package pkgid="4384239dbd9f1e5c5845e86626b1bcc8e1f7cb830e15b0350bcad0c6ad14b004" name="dbus-broker" arch="aarch64">
  <version epoch="0" ver="28" rel="bp154.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1503662400">- Initial package (version 3) for build.opensuse.org</changelog>
  <changelog author="jengelh@inai.de" date="1505044800">- Update to new upstream release 4
  * Support for sending SELinux AVC violations to audit rather
    than syslog.
  * Units will now be activated via explicit calls to StartUnit()
    rather than faking a ActivationRequest directed signal. This
    allows to catch startup failures (or rejections) and allows
    to reject all pending activation requests right away.
  * The broker now logs policy violations to the system log.
- Add use-system-deps.diff</changelog>
  <changelog author="jengelh@inai.de" date="1517918400">- Update to new upstream release 9
  * AddListener() on org.bus1.DBus.Broker now supports UID ranges.
  * dbus-broker.service unit is now ordered before basic.target.
  * The launcher now uses instantiated systemd template units
    when activating a service that has no associated systemd
    service file.
  * The launcher now supports configuration reloading.
  * Activated units now inherit their user from the actual D-Bus
    service, if provided.</changelog>
  <changelog author="jengelh@inai.de" date="1520251200">- Update to new upstream release 11
  * The policy-type of the dbus-broker API has been simplified.
    It is now reduced to a policy-batch indexed by uids, in
    combination with a policy-batch indexed either by gid or
    uid-range.
  * The launcher now supports a `--config-file PATH` commandline
    option to override the root configuration file, which is
    still deduced based on the passed scope parameter.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1546430400">- Update to new upstream release 17
  * The compatibility launcher now namespaces transient systemd
    units based on its own name on the scope-bus.
  * The launcher now respects the `&lt;user&gt;NAME&lt;/user&gt;'
    configuration and correctly drops privileges of the broker
    and itself after startup.
  * Messages with file-descriptors will now be refused if the
    client did not negotiate file-descriptor passing before.
- Drop use-system-deps.diff</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548676800">- Update RPM group.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1550750400">- Update to new upstream release 18
  * The compatibility launcher is no longer isolated in its own
    network namespace, since the SELinux APIs require access to
    the root network namespace.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1560254400">- Update to new upstream release 21
  * Previously, resource limits were incorrectly calculated,
    leading too limits that were higher than intended.
  * Messages are now directly forwarded to the journal and
    amended with additional fields. The journal-catalog now
    contains entries with background information on runtime log
    messages.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1582545600">- Update to release 22
  * Implement org.freedesktop.DBus.Debug.Stats in the driver.
  * Support no-op activation files.
  * The new configuration option `linux-4-17`, if set to true
    (default is false), makes dbus-broker assume it runs on
    linux-v4.17 or newer. It will make use of features introduced
    up to linux-v4.17. This allows to forcibly disable
    workarounds for old kernels.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1589284800">- Update to release 23
  * Expose supplementary groups as `UnixGroupIDs` as defined by
    the dbus specification in 0.53.
  * The broker now uses the peer-pid from `SO_PEERCRED` on the
    controller socket, rather than relying on `getppid()`. This
    allows creating the broker from intermediate processes
    without having any credentials of the intermediate leak into
    the broker.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1599220800">- Update to release 24
  * Make audit-events properly typed and prevent non-auditable
    events from being forwarded to the linux audit system.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1606996800">- Update to release 25
  * Fix an assertion failure when disconnecting monitors with active
    unique-name matches.
  * Fix the selinux error-handling to no longer mark all errors as
    auditable by default.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1611230400">- Update to release 26
  * Improve the service activation tracking of the compatibility
    launcher. We now track spawned systemd units for their entire
    lifetime, so we can properly detect when activations fail.
  * Work around a kernel off-by-one error in the socket queue
    accounting to fix a race-condition where dbus clients might
    not be dispatched.
  * Support running without `shmem` configured in the kernel.
    This will make the broker run better on limited embedded
    devices.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1613390400">- Update to release 27
  * Fix several bugs with the new service-activation tracking,
    including a race-condition when restarting activatable
    services.
  * Be more verbose about denied configuration access and print
    the file-path for better diagnostics.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1615982400">- Update to release 28
  * Further improvements to the service activation tracking. This
    better tracks units in systemd and closes some races where a
    repeated activation would incorrectly fail.
  * Fix a crash where duplicate monitor matches would be
    incorrectly installed in the broker.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1654776000">- Fix a stack buffer over-read in bundled c-shquote (bsc#1200332,
  CVE-2022-31212)
  * fix-upstream-CVE-2022-31212.patch
- Fix a NULL pointer dereferences in bundled c-shquote (bsc#1200333,
  CVE-2022-31213)
  * fix-upstream-CVE-2022-31213.patch
  * this patch also backports some c_mem* functions to c-stdaux
    as they didnt exist in this version</changelog>
</package>
<package pkgid="aa2094db96235e9837beba87ec4f6a4e93c2adda310d5fd69e1d4972ff08981f" name="dbus-broker" arch="i586">
  <version epoch="0" ver="28" rel="bp154.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1503662400">- Initial package (version 3) for build.opensuse.org</changelog>
  <changelog author="jengelh@inai.de" date="1505044800">- Update to new upstream release 4
  * Support for sending SELinux AVC violations to audit rather
    than syslog.
  * Units will now be activated via explicit calls to StartUnit()
    rather than faking a ActivationRequest directed signal. This
    allows to catch startup failures (or rejections) and allows
    to reject all pending activation requests right away.
  * The broker now logs policy violations to the system log.
- Add use-system-deps.diff</changelog>
  <changelog author="jengelh@inai.de" date="1517918400">- Update to new upstream release 9
  * AddListener() on org.bus1.DBus.Broker now supports UID ranges.
  * dbus-broker.service unit is now ordered before basic.target.
  * The launcher now uses instantiated systemd template units
    when activating a service that has no associated systemd
    service file.
  * The launcher now supports configuration reloading.
  * Activated units now inherit their user from the actual D-Bus
    service, if provided.</changelog>
  <changelog author="jengelh@inai.de" date="1520251200">- Update to new upstream release 11
  * The policy-type of the dbus-broker API has been simplified.
    It is now reduced to a policy-batch indexed by uids, in
    combination with a policy-batch indexed either by gid or
    uid-range.
  * The launcher now supports a `--config-file PATH` commandline
    option to override the root configuration file, which is
    still deduced based on the passed scope parameter.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1546430400">- Update to new upstream release 17
  * The compatibility launcher now namespaces transient systemd
    units based on its own name on the scope-bus.
  * The launcher now respects the `&lt;user&gt;NAME&lt;/user&gt;'
    configuration and correctly drops privileges of the broker
    and itself after startup.
  * Messages with file-descriptors will now be refused if the
    client did not negotiate file-descriptor passing before.
- Drop use-system-deps.diff</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548676800">- Update RPM group.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1550750400">- Update to new upstream release 18
  * The compatibility launcher is no longer isolated in its own
    network namespace, since the SELinux APIs require access to
    the root network namespace.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1560254400">- Update to new upstream release 21
  * Previously, resource limits were incorrectly calculated,
    leading too limits that were higher than intended.
  * Messages are now directly forwarded to the journal and
    amended with additional fields. The journal-catalog now
    contains entries with background information on runtime log
    messages.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1582545600">- Update to release 22
  * Implement org.freedesktop.DBus.Debug.Stats in the driver.
  * Support no-op activation files.
  * The new configuration option `linux-4-17`, if set to true
    (default is false), makes dbus-broker assume it runs on
    linux-v4.17 or newer. It will make use of features introduced
    up to linux-v4.17. This allows to forcibly disable
    workarounds for old kernels.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1589284800">- Update to release 23
  * Expose supplementary groups as `UnixGroupIDs` as defined by
    the dbus specification in 0.53.
  * The broker now uses the peer-pid from `SO_PEERCRED` on the
    controller socket, rather than relying on `getppid()`. This
    allows creating the broker from intermediate processes
    without having any credentials of the intermediate leak into
    the broker.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1599220800">- Update to release 24
  * Make audit-events properly typed and prevent non-auditable
    events from being forwarded to the linux audit system.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1606996800">- Update to release 25
  * Fix an assertion failure when disconnecting monitors with active
    unique-name matches.
  * Fix the selinux error-handling to no longer mark all errors as
    auditable by default.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1611230400">- Update to release 26
  * Improve the service activation tracking of the compatibility
    launcher. We now track spawned systemd units for their entire
    lifetime, so we can properly detect when activations fail.
  * Work around a kernel off-by-one error in the socket queue
    accounting to fix a race-condition where dbus clients might
    not be dispatched.
  * Support running without `shmem` configured in the kernel.
    This will make the broker run better on limited embedded
    devices.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1613390400">- Update to release 27
  * Fix several bugs with the new service-activation tracking,
    including a race-condition when restarting activatable
    services.
  * Be more verbose about denied configuration access and print
    the file-path for better diagnostics.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1615982400">- Update to release 28
  * Further improvements to the service activation tracking. This
    better tracks units in systemd and closes some races where a
    repeated activation would incorrectly fail.
  * Fix a crash where duplicate monitor matches would be
    incorrectly installed in the broker.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1654776000">- Fix a stack buffer over-read in bundled c-shquote (bsc#1200332,
  CVE-2022-31212)
  * fix-upstream-CVE-2022-31212.patch
- Fix a NULL pointer dereferences in bundled c-shquote (bsc#1200333,
  CVE-2022-31213)
  * fix-upstream-CVE-2022-31213.patch
  * this patch also backports some c_mem* functions to c-stdaux
    as they didnt exist in this version</changelog>
</package>
<package pkgid="eac836683d0d3a6561c41cddfe69cad16c8f508e2ea046d24784c2125dbea0fd" name="dbus-broker" arch="ppc64le">
  <version epoch="0" ver="28" rel="bp154.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1503662400">- Initial package (version 3) for build.opensuse.org</changelog>
  <changelog author="jengelh@inai.de" date="1505044800">- Update to new upstream release 4
  * Support for sending SELinux AVC violations to audit rather
    than syslog.
  * Units will now be activated via explicit calls to StartUnit()
    rather than faking a ActivationRequest directed signal. This
    allows to catch startup failures (or rejections) and allows
    to reject all pending activation requests right away.
  * The broker now logs policy violations to the system log.
- Add use-system-deps.diff</changelog>
  <changelog author="jengelh@inai.de" date="1517918400">- Update to new upstream release 9
  * AddListener() on org.bus1.DBus.Broker now supports UID ranges.
  * dbus-broker.service unit is now ordered before basic.target.
  * The launcher now uses instantiated systemd template units
    when activating a service that has no associated systemd
    service file.
  * The launcher now supports configuration reloading.
  * Activated units now inherit their user from the actual D-Bus
    service, if provided.</changelog>
  <changelog author="jengelh@inai.de" date="1520251200">- Update to new upstream release 11
  * The policy-type of the dbus-broker API has been simplified.
    It is now reduced to a policy-batch indexed by uids, in
    combination with a policy-batch indexed either by gid or
    uid-range.
  * The launcher now supports a `--config-file PATH` commandline
    option to override the root configuration file, which is
    still deduced based on the passed scope parameter.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1546430400">- Update to new upstream release 17
  * The compatibility launcher now namespaces transient systemd
    units based on its own name on the scope-bus.
  * The launcher now respects the `&lt;user&gt;NAME&lt;/user&gt;'
    configuration and correctly drops privileges of the broker
    and itself after startup.
  * Messages with file-descriptors will now be refused if the
    client did not negotiate file-descriptor passing before.
- Drop use-system-deps.diff</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548676800">- Update RPM group.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1550750400">- Update to new upstream release 18
  * The compatibility launcher is no longer isolated in its own
    network namespace, since the SELinux APIs require access to
    the root network namespace.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1560254400">- Update to new upstream release 21
  * Previously, resource limits were incorrectly calculated,
    leading too limits that were higher than intended.
  * Messages are now directly forwarded to the journal and
    amended with additional fields. The journal-catalog now
    contains entries with background information on runtime log
    messages.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1582545600">- Update to release 22
  * Implement org.freedesktop.DBus.Debug.Stats in the driver.
  * Support no-op activation files.
  * The new configuration option `linux-4-17`, if set to true
    (default is false), makes dbus-broker assume it runs on
    linux-v4.17 or newer. It will make use of features introduced
    up to linux-v4.17. This allows to forcibly disable
    workarounds for old kernels.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1589284800">- Update to release 23
  * Expose supplementary groups as `UnixGroupIDs` as defined by
    the dbus specification in 0.53.
  * The broker now uses the peer-pid from `SO_PEERCRED` on the
    controller socket, rather than relying on `getppid()`. This
    allows creating the broker from intermediate processes
    without having any credentials of the intermediate leak into
    the broker.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1599220800">- Update to release 24
  * Make audit-events properly typed and prevent non-auditable
    events from being forwarded to the linux audit system.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1606996800">- Update to release 25
  * Fix an assertion failure when disconnecting monitors with active
    unique-name matches.
  * Fix the selinux error-handling to no longer mark all errors as
    auditable by default.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1611230400">- Update to release 26
  * Improve the service activation tracking of the compatibility
    launcher. We now track spawned systemd units for their entire
    lifetime, so we can properly detect when activations fail.
  * Work around a kernel off-by-one error in the socket queue
    accounting to fix a race-condition where dbus clients might
    not be dispatched.
  * Support running without `shmem` configured in the kernel.
    This will make the broker run better on limited embedded
    devices.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1613390400">- Update to release 27
  * Fix several bugs with the new service-activation tracking,
    including a race-condition when restarting activatable
    services.
  * Be more verbose about denied configuration access and print
    the file-path for better diagnostics.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1615982400">- Update to release 28
  * Further improvements to the service activation tracking. This
    better tracks units in systemd and closes some races where a
    repeated activation would incorrectly fail.
  * Fix a crash where duplicate monitor matches would be
    incorrectly installed in the broker.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1654776000">- Fix a stack buffer over-read in bundled c-shquote (bsc#1200332,
  CVE-2022-31212)
  * fix-upstream-CVE-2022-31212.patch
- Fix a NULL pointer dereferences in bundled c-shquote (bsc#1200333,
  CVE-2022-31213)
  * fix-upstream-CVE-2022-31213.patch
  * this patch also backports some c_mem* functions to c-stdaux
    as they didnt exist in this version</changelog>
</package>
<package pkgid="1ba81bbd895ceb35f3d4e8c072cc0844e43161b124a505df51956e8536d9baee" name="dbus-broker" arch="s390x">
  <version epoch="0" ver="28" rel="bp154.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1503662400">- Initial package (version 3) for build.opensuse.org</changelog>
  <changelog author="jengelh@inai.de" date="1505044800">- Update to new upstream release 4
  * Support for sending SELinux AVC violations to audit rather
    than syslog.
  * Units will now be activated via explicit calls to StartUnit()
    rather than faking a ActivationRequest directed signal. This
    allows to catch startup failures (or rejections) and allows
    to reject all pending activation requests right away.
  * The broker now logs policy violations to the system log.
- Add use-system-deps.diff</changelog>
  <changelog author="jengelh@inai.de" date="1517918400">- Update to new upstream release 9
  * AddListener() on org.bus1.DBus.Broker now supports UID ranges.
  * dbus-broker.service unit is now ordered before basic.target.
  * The launcher now uses instantiated systemd template units
    when activating a service that has no associated systemd
    service file.
  * The launcher now supports configuration reloading.
  * Activated units now inherit their user from the actual D-Bus
    service, if provided.</changelog>
  <changelog author="jengelh@inai.de" date="1520251200">- Update to new upstream release 11
  * The policy-type of the dbus-broker API has been simplified.
    It is now reduced to a policy-batch indexed by uids, in
    combination with a policy-batch indexed either by gid or
    uid-range.
  * The launcher now supports a `--config-file PATH` commandline
    option to override the root configuration file, which is
    still deduced based on the passed scope parameter.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1546430400">- Update to new upstream release 17
  * The compatibility launcher now namespaces transient systemd
    units based on its own name on the scope-bus.
  * The launcher now respects the `&lt;user&gt;NAME&lt;/user&gt;'
    configuration and correctly drops privileges of the broker
    and itself after startup.
  * Messages with file-descriptors will now be refused if the
    client did not negotiate file-descriptor passing before.
- Drop use-system-deps.diff</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548676800">- Update RPM group.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1550750400">- Update to new upstream release 18
  * The compatibility launcher is no longer isolated in its own
    network namespace, since the SELinux APIs require access to
    the root network namespace.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1560254400">- Update to new upstream release 21
  * Previously, resource limits were incorrectly calculated,
    leading too limits that were higher than intended.
  * Messages are now directly forwarded to the journal and
    amended with additional fields. The journal-catalog now
    contains entries with background information on runtime log
    messages.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1582545600">- Update to release 22
  * Implement org.freedesktop.DBus.Debug.Stats in the driver.
  * Support no-op activation files.
  * The new configuration option `linux-4-17`, if set to true
    (default is false), makes dbus-broker assume it runs on
    linux-v4.17 or newer. It will make use of features introduced
    up to linux-v4.17. This allows to forcibly disable
    workarounds for old kernels.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1589284800">- Update to release 23
  * Expose supplementary groups as `UnixGroupIDs` as defined by
    the dbus specification in 0.53.
  * The broker now uses the peer-pid from `SO_PEERCRED` on the
    controller socket, rather than relying on `getppid()`. This
    allows creating the broker from intermediate processes
    without having any credentials of the intermediate leak into
    the broker.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1599220800">- Update to release 24
  * Make audit-events properly typed and prevent non-auditable
    events from being forwarded to the linux audit system.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1606996800">- Update to release 25
  * Fix an assertion failure when disconnecting monitors with active
    unique-name matches.
  * Fix the selinux error-handling to no longer mark all errors as
    auditable by default.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1611230400">- Update to release 26
  * Improve the service activation tracking of the compatibility
    launcher. We now track spawned systemd units for their entire
    lifetime, so we can properly detect when activations fail.
  * Work around a kernel off-by-one error in the socket queue
    accounting to fix a race-condition where dbus clients might
    not be dispatched.
  * Support running without `shmem` configured in the kernel.
    This will make the broker run better on limited embedded
    devices.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1613390400">- Update to release 27
  * Fix several bugs with the new service-activation tracking,
    including a race-condition when restarting activatable
    services.
  * Be more verbose about denied configuration access and print
    the file-path for better diagnostics.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1615982400">- Update to release 28
  * Further improvements to the service activation tracking. This
    better tracks units in systemd and closes some races where a
    repeated activation would incorrectly fail.
  * Fix a crash where duplicate monitor matches would be
    incorrectly installed in the broker.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1654776000">- Fix a stack buffer over-read in bundled c-shquote (bsc#1200332,
  CVE-2022-31212)
  * fix-upstream-CVE-2022-31212.patch
- Fix a NULL pointer dereferences in bundled c-shquote (bsc#1200333,
  CVE-2022-31213)
  * fix-upstream-CVE-2022-31213.patch
  * this patch also backports some c_mem* functions to c-stdaux
    as they didnt exist in this version</changelog>
</package>
<package pkgid="a84411ba61b7c015dcd7813fed3372e0ffce4e101e2d57df058c006f127fbd4d" name="dbus-broker" arch="src">
  <version epoch="0" ver="28" rel="bp154.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1503662400">- Initial package (version 3) for build.opensuse.org</changelog>
  <changelog author="jengelh@inai.de" date="1505044800">- Update to new upstream release 4
  * Support for sending SELinux AVC violations to audit rather
    than syslog.
  * Units will now be activated via explicit calls to StartUnit()
    rather than faking a ActivationRequest directed signal. This
    allows to catch startup failures (or rejections) and allows
    to reject all pending activation requests right away.
  * The broker now logs policy violations to the system log.
- Add use-system-deps.diff</changelog>
  <changelog author="jengelh@inai.de" date="1517918400">- Update to new upstream release 9
  * AddListener() on org.bus1.DBus.Broker now supports UID ranges.
  * dbus-broker.service unit is now ordered before basic.target.
  * The launcher now uses instantiated systemd template units
    when activating a service that has no associated systemd
    service file.
  * The launcher now supports configuration reloading.
  * Activated units now inherit their user from the actual D-Bus
    service, if provided.</changelog>
  <changelog author="jengelh@inai.de" date="1520251200">- Update to new upstream release 11
  * The policy-type of the dbus-broker API has been simplified.
    It is now reduced to a policy-batch indexed by uids, in
    combination with a policy-batch indexed either by gid or
    uid-range.
  * The launcher now supports a `--config-file PATH` commandline
    option to override the root configuration file, which is
    still deduced based on the passed scope parameter.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1546430400">- Update to new upstream release 17
  * The compatibility launcher now namespaces transient systemd
    units based on its own name on the scope-bus.
  * The launcher now respects the `&lt;user&gt;NAME&lt;/user&gt;'
    configuration and correctly drops privileges of the broker
    and itself after startup.
  * Messages with file-descriptors will now be refused if the
    client did not negotiate file-descriptor passing before.
- Drop use-system-deps.diff</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548676800">- Update RPM group.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1550750400">- Update to new upstream release 18
  * The compatibility launcher is no longer isolated in its own
    network namespace, since the SELinux APIs require access to
    the root network namespace.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1560254400">- Update to new upstream release 21
  * Previously, resource limits were incorrectly calculated,
    leading too limits that were higher than intended.
  * Messages are now directly forwarded to the journal and
    amended with additional fields. The journal-catalog now
    contains entries with background information on runtime log
    messages.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1582545600">- Update to release 22
  * Implement org.freedesktop.DBus.Debug.Stats in the driver.
  * Support no-op activation files.
  * The new configuration option `linux-4-17`, if set to true
    (default is false), makes dbus-broker assume it runs on
    linux-v4.17 or newer. It will make use of features introduced
    up to linux-v4.17. This allows to forcibly disable
    workarounds for old kernels.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1589284800">- Update to release 23
  * Expose supplementary groups as `UnixGroupIDs` as defined by
    the dbus specification in 0.53.
  * The broker now uses the peer-pid from `SO_PEERCRED` on the
    controller socket, rather than relying on `getppid()`. This
    allows creating the broker from intermediate processes
    without having any credentials of the intermediate leak into
    the broker.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1599220800">- Update to release 24
  * Make audit-events properly typed and prevent non-auditable
    events from being forwarded to the linux audit system.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1606996800">- Update to release 25
  * Fix an assertion failure when disconnecting monitors with active
    unique-name matches.
  * Fix the selinux error-handling to no longer mark all errors as
    auditable by default.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1611230400">- Update to release 26
  * Improve the service activation tracking of the compatibility
    launcher. We now track spawned systemd units for their entire
    lifetime, so we can properly detect when activations fail.
  * Work around a kernel off-by-one error in the socket queue
    accounting to fix a race-condition where dbus clients might
    not be dispatched.
  * Support running without `shmem` configured in the kernel.
    This will make the broker run better on limited embedded
    devices.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1613390400">- Update to release 27
  * Fix several bugs with the new service-activation tracking,
    including a race-condition when restarting activatable
    services.
  * Be more verbose about denied configuration access and print
    the file-path for better diagnostics.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1615982400">- Update to release 28
  * Further improvements to the service activation tracking. This
    better tracks units in systemd and closes some races where a
    repeated activation would incorrectly fail.
  * Fix a crash where duplicate monitor matches would be
    incorrectly installed in the broker.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1654776000">- Fix a stack buffer over-read in bundled c-shquote (bsc#1200332,
  CVE-2022-31212)
  * fix-upstream-CVE-2022-31212.patch
- Fix a NULL pointer dereferences in bundled c-shquote (bsc#1200333,
  CVE-2022-31213)
  * fix-upstream-CVE-2022-31213.patch
  * this patch also backports some c_mem* functions to c-stdaux
    as they didnt exist in this version</changelog>
</package>
<package pkgid="6d84df31ef5fbf1a0807966ff9cce50b62389f2a4f1400785eefd602c5c20176" name="dbus-broker" arch="x86_64">
  <version epoch="0" ver="28" rel="bp154.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1503662400">- Initial package (version 3) for build.opensuse.org</changelog>
  <changelog author="jengelh@inai.de" date="1505044800">- Update to new upstream release 4
  * Support for sending SELinux AVC violations to audit rather
    than syslog.
  * Units will now be activated via explicit calls to StartUnit()
    rather than faking a ActivationRequest directed signal. This
    allows to catch startup failures (or rejections) and allows
    to reject all pending activation requests right away.
  * The broker now logs policy violations to the system log.
- Add use-system-deps.diff</changelog>
  <changelog author="jengelh@inai.de" date="1517918400">- Update to new upstream release 9
  * AddListener() on org.bus1.DBus.Broker now supports UID ranges.
  * dbus-broker.service unit is now ordered before basic.target.
  * The launcher now uses instantiated systemd template units
    when activating a service that has no associated systemd
    service file.
  * The launcher now supports configuration reloading.
  * Activated units now inherit their user from the actual D-Bus
    service, if provided.</changelog>
  <changelog author="jengelh@inai.de" date="1520251200">- Update to new upstream release 11
  * The policy-type of the dbus-broker API has been simplified.
    It is now reduced to a policy-batch indexed by uids, in
    combination with a policy-batch indexed either by gid or
    uid-range.
  * The launcher now supports a `--config-file PATH` commandline
    option to override the root configuration file, which is
    still deduced based on the passed scope parameter.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1546430400">- Update to new upstream release 17
  * The compatibility launcher now namespaces transient systemd
    units based on its own name on the scope-bus.
  * The launcher now respects the `&lt;user&gt;NAME&lt;/user&gt;'
    configuration and correctly drops privileges of the broker
    and itself after startup.
  * Messages with file-descriptors will now be refused if the
    client did not negotiate file-descriptor passing before.
- Drop use-system-deps.diff</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548676800">- Update RPM group.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1550750400">- Update to new upstream release 18
  * The compatibility launcher is no longer isolated in its own
    network namespace, since the SELinux APIs require access to
    the root network namespace.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1560254400">- Update to new upstream release 21
  * Previously, resource limits were incorrectly calculated,
    leading too limits that were higher than intended.
  * Messages are now directly forwarded to the journal and
    amended with additional fields. The journal-catalog now
    contains entries with background information on runtime log
    messages.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1582545600">- Update to release 22
  * Implement org.freedesktop.DBus.Debug.Stats in the driver.
  * Support no-op activation files.
  * The new configuration option `linux-4-17`, if set to true
    (default is false), makes dbus-broker assume it runs on
    linux-v4.17 or newer. It will make use of features introduced
    up to linux-v4.17. This allows to forcibly disable
    workarounds for old kernels.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1589284800">- Update to release 23
  * Expose supplementary groups as `UnixGroupIDs` as defined by
    the dbus specification in 0.53.
  * The broker now uses the peer-pid from `SO_PEERCRED` on the
    controller socket, rather than relying on `getppid()`. This
    allows creating the broker from intermediate processes
    without having any credentials of the intermediate leak into
    the broker.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1599220800">- Update to release 24
  * Make audit-events properly typed and prevent non-auditable
    events from being forwarded to the linux audit system.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1606996800">- Update to release 25
  * Fix an assertion failure when disconnecting monitors with active
    unique-name matches.
  * Fix the selinux error-handling to no longer mark all errors as
    auditable by default.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1611230400">- Update to release 26
  * Improve the service activation tracking of the compatibility
    launcher. We now track spawned systemd units for their entire
    lifetime, so we can properly detect when activations fail.
  * Work around a kernel off-by-one error in the socket queue
    accounting to fix a race-condition where dbus clients might
    not be dispatched.
  * Support running without `shmem` configured in the kernel.
    This will make the broker run better on limited embedded
    devices.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1613390400">- Update to release 27
  * Fix several bugs with the new service-activation tracking,
    including a race-condition when restarting activatable
    services.
  * Be more verbose about denied configuration access and print
    the file-path for better diagnostics.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1615982400">- Update to release 28
  * Further improvements to the service activation tracking. This
    better tracks units in systemd and closes some races where a
    repeated activation would incorrectly fail.
  * Fix a crash where duplicate monitor matches would be
    incorrectly installed in the broker.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1654776000">- Fix a stack buffer over-read in bundled c-shquote (bsc#1200332,
  CVE-2022-31212)
  * fix-upstream-CVE-2022-31212.patch
- Fix a NULL pointer dereferences in bundled c-shquote (bsc#1200333,
  CVE-2022-31213)
  * fix-upstream-CVE-2022-31213.patch
  * this patch also backports some c_mem* functions to c-stdaux
    as they didnt exist in this version</changelog>
</package>
<package pkgid="616694de0103c507edb1e352094fe626d5e59487d081201c0b239a006cda4315" name="deepin-kwin" arch="aarch64">
  <version epoch="0" ver="5.4.26" rel="bp154.2.3.1"/>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1557316800">- Initial package for version 0.0.5</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1563537600">- update version to 0.1.0
  * Allow configuration items to override the default theme
  * Add the "deepin-chameleon" window decoration for kwin
  * Support get the shoutcut default value
  * Correct the path to find translation files
  * Ignore the RuleBook::save function of kwin
  * Execute dirname before setting the LD_PRELOAD environment
  * Support KWin highlightWindows effect for PreviewWindow
  * Overwrite the window menu
  * Support for specifying the version of kwin on build
  * Multitaskingview: add multitaskingview ts
  * Automatically append the wallpaper's gsetting value item
  * Clean LD_PRELOAD env
  * Fix the window was closed incorrectly
  * Fix the "Window to Desktop" shoutcuts is invalid
  * Fix No warning when opening the multitasking view app in 2D window manager
  * Fix do not print warning messages when the build and runtime versions are consistent
  * keep window to viewable if it is minimized
  * Disable theme cache of FrameSvg
  * Install the "kdeglobals" file
  * Fix the compositingEnabledChanged signal is sent only when the user actively sets it
  * Fix the window default cursor of the gtk application does not follow the theme
  * Disable window manager window menu
  * Preview window give priority to use the dbus interface by kwin
  * Support PresentWindows
  * Support set cursor theme/size for kwin</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1584792000">- remove some files which are in plasma5-defaults-openSUSE</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1614600000">- Update version to 5.2.0.13
  * fix: Avoid taskbar showing up when changing workspace in multitaskingview
  * Revert "fix: Provides a default wallpaper for the second workspace."
  * fix: mips platform second workspace background is white.
  * Provides a default wallpaper for the second workspace.
  * fix get sp1 default-uri method.
  * fix: A color field flicker when right-click menu show up
    Adjust the order of image processing
  * after system upgrading from SP1 to SP2, the old wallpaper will be kept.
  * Provides a default wallpaper for the second workspace.
  * remove dialog rule to avoid configuration by user
  * fix: Blur multitasking background.
- Add patches: deepin-kwin-crash.patch, deepin-kwin-tabbox-chameleon-rename.patch
  and deepin-kwin-unload-blur.patch</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1618142400">- Support kwin 5.21+, add support-kwin-5_19+.patch and
  support-kwin-5_21+.patch</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1620129600">- Update version to 5.3.7
  * Support kwin 5.19, drop support-kwin-5_19+.patch
  * Add translation files
  * update dde-kwin.postinst base on update DTK's /etc/os-version
  * Fix bugs
- Drop deepin-kwin-unload-blur.patch, merged by upstream</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1623758400">- Update version to 5.3.9
  * Fix bugs
  * Support kwin 5.21+, drop support-kwin-5_21+.patch
- Drop fix-crash-bug.patch, fixed by upstream</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1632312000">- Add fix-library-links.patch, fix build on Tumbleweed</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1636459200">- Update version to 5.3.14
  * Fix bugs
  * Update translations</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1638273600">- Update version to 5.4.12
  * Split screen mode is always grayed out in the working area
  * add split screen menu
  * support lightWeight config for shadow
  * optimize work thumbnail
  * Fix bugs
  * Workaround: builds are not performed under Kwin greater than 5.21</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1645358400">- Update version 5.4.19
  * Frees heap memory when the program exits
  * Disable multitasking
  * disable effects by default
  * Support DDE Wayland
  * Support client activation from dde shell
  * Fix bugs</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1645790400">- Add fix-build-on-5_18_6.patch for leap</changelog>
  <changelog author="Max Lin &lt;mlin@suse.com&gt;" date="1645876800">- Fix Leap 15.4 build since Kwin has greater version than 5.21
  in Leap 15.4</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1654862400">- Update version 5.4.26
  * update window raduis for effects
  * Add splitmenu translate
  * Add a dependency on 'kwin-wayland'
  * Add func about maxi button long press
  * Modify code based on code review results
  * Fix bugs
- Add dde-kwin.5.4.26.patch, fix build on kwin 5.24+
- Add drop-nonexistent-translations.patch
- No longer need kwayland-server (boo#1200318)
- Drop deepin-kwin-crash.patch</changelog>
</package>
<package pkgid="914892184e5d20ea701f3074f936cee9aa01187f0a29725e8a1f9a2909e75f75" name="deepin-kwin" arch="ppc64le">
  <version epoch="0" ver="5.4.26" rel="bp154.2.3.1"/>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1557316800">- Initial package for version 0.0.5</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1563537600">- update version to 0.1.0
  * Allow configuration items to override the default theme
  * Add the "deepin-chameleon" window decoration for kwin
  * Support get the shoutcut default value
  * Correct the path to find translation files
  * Ignore the RuleBook::save function of kwin
  * Execute dirname before setting the LD_PRELOAD environment
  * Support KWin highlightWindows effect for PreviewWindow
  * Overwrite the window menu
  * Support for specifying the version of kwin on build
  * Multitaskingview: add multitaskingview ts
  * Automatically append the wallpaper's gsetting value item
  * Clean LD_PRELOAD env
  * Fix the window was closed incorrectly
  * Fix the "Window to Desktop" shoutcuts is invalid
  * Fix No warning when opening the multitasking view app in 2D window manager
  * Fix do not print warning messages when the build and runtime versions are consistent
  * keep window to viewable if it is minimized
  * Disable theme cache of FrameSvg
  * Install the "kdeglobals" file
  * Fix the compositingEnabledChanged signal is sent only when the user actively sets it
  * Fix the window default cursor of the gtk application does not follow the theme
  * Disable window manager window menu
  * Preview window give priority to use the dbus interface by kwin
  * Support PresentWindows
  * Support set cursor theme/size for kwin</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1584792000">- remove some files which are in plasma5-defaults-openSUSE</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1614600000">- Update version to 5.2.0.13
  * fix: Avoid taskbar showing up when changing workspace in multitaskingview
  * Revert "fix: Provides a default wallpaper for the second workspace."
  * fix: mips platform second workspace background is white.
  * Provides a default wallpaper for the second workspace.
  * fix get sp1 default-uri method.
  * fix: A color field flicker when right-click menu show up
    Adjust the order of image processing
  * after system upgrading from SP1 to SP2, the old wallpaper will be kept.
  * Provides a default wallpaper for the second workspace.
  * remove dialog rule to avoid configuration by user
  * fix: Blur multitasking background.
- Add patches: deepin-kwin-crash.patch, deepin-kwin-tabbox-chameleon-rename.patch
  and deepin-kwin-unload-blur.patch</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1618142400">- Support kwin 5.21+, add support-kwin-5_19+.patch and
  support-kwin-5_21+.patch</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1620129600">- Update version to 5.3.7
  * Support kwin 5.19, drop support-kwin-5_19+.patch
  * Add translation files
  * update dde-kwin.postinst base on update DTK's /etc/os-version
  * Fix bugs
- Drop deepin-kwin-unload-blur.patch, merged by upstream</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1623758400">- Update version to 5.3.9
  * Fix bugs
  * Support kwin 5.21+, drop support-kwin-5_21+.patch
- Drop fix-crash-bug.patch, fixed by upstream</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1632312000">- Add fix-library-links.patch, fix build on Tumbleweed</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1636459200">- Update version to 5.3.14
  * Fix bugs
  * Update translations</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1638273600">- Update version to 5.4.12
  * Split screen mode is always grayed out in the working area
  * add split screen menu
  * support lightWeight config for shadow
  * optimize work thumbnail
  * Fix bugs
  * Workaround: builds are not performed under Kwin greater than 5.21</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1645358400">- Update version 5.4.19
  * Frees heap memory when the program exits
  * Disable multitasking
  * disable effects by default
  * Support DDE Wayland
  * Support client activation from dde shell
  * Fix bugs</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1645790400">- Add fix-build-on-5_18_6.patch for leap</changelog>
  <changelog author="Max Lin &lt;mlin@suse.com&gt;" date="1645876800">- Fix Leap 15.4 build since Kwin has greater version than 5.21
  in Leap 15.4</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1654862400">- Update version 5.4.26
  * update window raduis for effects
  * Add splitmenu translate
  * Add a dependency on 'kwin-wayland'
  * Add func about maxi button long press
  * Modify code based on code review results
  * Fix bugs
- Add dde-kwin.5.4.26.patch, fix build on kwin 5.24+
- Add drop-nonexistent-translations.patch
- No longer need kwayland-server (boo#1200318)
- Drop deepin-kwin-crash.patch</changelog>
</package>
<package pkgid="3375391a8ae2ea7857f689a8823f71a6f72eee43a7441b90502955eb12a3cf17" name="deepin-kwin" arch="src">
  <version epoch="0" ver="5.4.26" rel="bp154.2.3.1"/>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1557316800">- Initial package for version 0.0.5</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1563537600">- update version to 0.1.0
  * Allow configuration items to override the default theme
  * Add the "deepin-chameleon" window decoration for kwin
  * Support get the shoutcut default value
  * Correct the path to find translation files
  * Ignore the RuleBook::save function of kwin
  * Execute dirname before setting the LD_PRELOAD environment
  * Support KWin highlightWindows effect for PreviewWindow
  * Overwrite the window menu
  * Support for specifying the version of kwin on build
  * Multitaskingview: add multitaskingview ts
  * Automatically append the wallpaper's gsetting value item
  * Clean LD_PRELOAD env
  * Fix the window was closed incorrectly
  * Fix the "Window to Desktop" shoutcuts is invalid
  * Fix No warning when opening the multitasking view app in 2D window manager
  * Fix do not print warning messages when the build and runtime versions are consistent
  * keep window to viewable if it is minimized
  * Disable theme cache of FrameSvg
  * Install the "kdeglobals" file
  * Fix the compositingEnabledChanged signal is sent only when the user actively sets it
  * Fix the window default cursor of the gtk application does not follow the theme
  * Disable window manager window menu
  * Preview window give priority to use the dbus interface by kwin
  * Support PresentWindows
  * Support set cursor theme/size for kwin</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1584792000">- remove some files which are in plasma5-defaults-openSUSE</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1614600000">- Update version to 5.2.0.13
  * fix: Avoid taskbar showing up when changing workspace in multitaskingview
  * Revert "fix: Provides a default wallpaper for the second workspace."
  * fix: mips platform second workspace background is white.
  * Provides a default wallpaper for the second workspace.
  * fix get sp1 default-uri method.
  * fix: A color field flicker when right-click menu show up
    Adjust the order of image processing
  * after system upgrading from SP1 to SP2, the old wallpaper will be kept.
  * Provides a default wallpaper for the second workspace.
  * remove dialog rule to avoid configuration by user
  * fix: Blur multitasking background.
- Add patches: deepin-kwin-crash.patch, deepin-kwin-tabbox-chameleon-rename.patch
  and deepin-kwin-unload-blur.patch</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1618142400">- Support kwin 5.21+, add support-kwin-5_19+.patch and
  support-kwin-5_21+.patch</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1620129600">- Update version to 5.3.7
  * Support kwin 5.19, drop support-kwin-5_19+.patch
  * Add translation files
  * update dde-kwin.postinst base on update DTK's /etc/os-version
  * Fix bugs
- Drop deepin-kwin-unload-blur.patch, merged by upstream</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1623758400">- Update version to 5.3.9
  * Fix bugs
  * Support kwin 5.21+, drop support-kwin-5_21+.patch
- Drop fix-crash-bug.patch, fixed by upstream</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1632312000">- Add fix-library-links.patch, fix build on Tumbleweed</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1636459200">- Update version to 5.3.14
  * Fix bugs
  * Update translations</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1638273600">- Update version to 5.4.12
  * Split screen mode is always grayed out in the working area
  * add split screen menu
  * support lightWeight config for shadow
  * optimize work thumbnail
  * Fix bugs
  * Workaround: builds are not performed under Kwin greater than 5.21</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1645358400">- Update version 5.4.19
  * Frees heap memory when the program exits
  * Disable multitasking
  * disable effects by default
  * Support DDE Wayland
  * Support client activation from dde shell
  * Fix bugs</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1645790400">- Add fix-build-on-5_18_6.patch for leap</changelog>
  <changelog author="Max Lin &lt;mlin@suse.com&gt;" date="1645876800">- Fix Leap 15.4 build since Kwin has greater version than 5.21
  in Leap 15.4</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1654862400">- Update version 5.4.26
  * update window raduis for effects
  * Add splitmenu translate
  * Add a dependency on 'kwin-wayland'
  * Add func about maxi button long press
  * Modify code based on code review results
  * Fix bugs
- Add dde-kwin.5.4.26.patch, fix build on kwin 5.24+
- Add drop-nonexistent-translations.patch
- No longer need kwayland-server (boo#1200318)
- Drop deepin-kwin-crash.patch</changelog>
</package>
<package pkgid="257c7e4d9fcfaa25aa23f76efaabc292b0c3daf60876dc7f942e3ce56603407c" name="deepin-kwin" arch="x86_64">
  <version epoch="0" ver="5.4.26" rel="bp154.2.3.1"/>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1557316800">- Initial package for version 0.0.5</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1563537600">- update version to 0.1.0
  * Allow configuration items to override the default theme
  * Add the "deepin-chameleon" window decoration for kwin
  * Support get the shoutcut default value
  * Correct the path to find translation files
  * Ignore the RuleBook::save function of kwin
  * Execute dirname before setting the LD_PRELOAD environment
  * Support KWin highlightWindows effect for PreviewWindow
  * Overwrite the window menu
  * Support for specifying the version of kwin on build
  * Multitaskingview: add multitaskingview ts
  * Automatically append the wallpaper's gsetting value item
  * Clean LD_PRELOAD env
  * Fix the window was closed incorrectly
  * Fix the "Window to Desktop" shoutcuts is invalid
  * Fix No warning when opening the multitasking view app in 2D window manager
  * Fix do not print warning messages when the build and runtime versions are consistent
  * keep window to viewable if it is minimized
  * Disable theme cache of FrameSvg
  * Install the "kdeglobals" file
  * Fix the compositingEnabledChanged signal is sent only when the user actively sets it
  * Fix the window default cursor of the gtk application does not follow the theme
  * Disable window manager window menu
  * Preview window give priority to use the dbus interface by kwin
  * Support PresentWindows
  * Support set cursor theme/size for kwin</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1584792000">- remove some files which are in plasma5-defaults-openSUSE</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1614600000">- Update version to 5.2.0.13
  * fix: Avoid taskbar showing up when changing workspace in multitaskingview
  * Revert "fix: Provides a default wallpaper for the second workspace."
  * fix: mips platform second workspace background is white.
  * Provides a default wallpaper for the second workspace.
  * fix get sp1 default-uri method.
  * fix: A color field flicker when right-click menu show up
    Adjust the order of image processing
  * after system upgrading from SP1 to SP2, the old wallpaper will be kept.
  * Provides a default wallpaper for the second workspace.
  * remove dialog rule to avoid configuration by user
  * fix: Blur multitasking background.
- Add patches: deepin-kwin-crash.patch, deepin-kwin-tabbox-chameleon-rename.patch
  and deepin-kwin-unload-blur.patch</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1618142400">- Support kwin 5.21+, add support-kwin-5_19+.patch and
  support-kwin-5_21+.patch</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1620129600">- Update version to 5.3.7
  * Support kwin 5.19, drop support-kwin-5_19+.patch
  * Add translation files
  * update dde-kwin.postinst base on update DTK's /etc/os-version
  * Fix bugs
- Drop deepin-kwin-unload-blur.patch, merged by upstream</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1623758400">- Update version to 5.3.9
  * Fix bugs
  * Support kwin 5.21+, drop support-kwin-5_21+.patch
- Drop fix-crash-bug.patch, fixed by upstream</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1632312000">- Add fix-library-links.patch, fix build on Tumbleweed</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1636459200">- Update version to 5.3.14
  * Fix bugs
  * Update translations</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1638273600">- Update version to 5.4.12
  * Split screen mode is always grayed out in the working area
  * add split screen menu
  * support lightWeight config for shadow
  * optimize work thumbnail
  * Fix bugs
  * Workaround: builds are not performed under Kwin greater than 5.21</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1645358400">- Update version 5.4.19
  * Frees heap memory when the program exits
  * Disable multitasking
  * disable effects by default
  * Support DDE Wayland
  * Support client activation from dde shell
  * Fix bugs</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1645790400">- Add fix-build-on-5_18_6.patch for leap</changelog>
  <changelog author="Max Lin &lt;mlin@suse.com&gt;" date="1645876800">- Fix Leap 15.4 build since Kwin has greater version than 5.21
  in Leap 15.4</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1654862400">- Update version 5.4.26
  * update window raduis for effects
  * Add splitmenu translate
  * Add a dependency on 'kwin-wayland'
  * Add func about maxi button long press
  * Modify code based on code review results
  * Fix bugs
- Add dde-kwin.5.4.26.patch, fix build on kwin 5.24+
- Add drop-nonexistent-translations.patch
- No longer need kwayland-server (boo#1200318)
- Drop deepin-kwin-crash.patch</changelog>
</package>
<package pkgid="ae675b68b3556c783b702abd66af3b96f25a5842a07be3d59309d88321965eae" name="deepin-kwin-devel" arch="aarch64">
  <version epoch="0" ver="5.4.26" rel="bp154.2.3.1"/>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1557316800">- Initial package for version 0.0.5</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1563537600">- update version to 0.1.0
  * Allow configuration items to override the default theme
  * Add the "deepin-chameleon" window decoration for kwin
  * Support get the shoutcut default value
  * Correct the path to find translation files
  * Ignore the RuleBook::save function of kwin
  * Execute dirname before setting the LD_PRELOAD environment
  * Support KWin highlightWindows effect for PreviewWindow
  * Overwrite the window menu
  * Support for specifying the version of kwin on build
  * Multitaskingview: add multitaskingview ts
  * Automatically append the wallpaper's gsetting value item
  * Clean LD_PRELOAD env
  * Fix the window was closed incorrectly
  * Fix the "Window to Desktop" shoutcuts is invalid
  * Fix No warning when opening the multitasking view app in 2D window manager
  * Fix do not print warning messages when the build and runtime versions are consistent
  * keep window to viewable if it is minimized
  * Disable theme cache of FrameSvg
  * Install the "kdeglobals" file
  * Fix the compositingEnabledChanged signal is sent only when the user actively sets it
  * Fix the window default cursor of the gtk application does not follow the theme
  * Disable window manager window menu
  * Preview window give priority to use the dbus interface by kwin
  * Support PresentWindows
  * Support set cursor theme/size for kwin</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1584792000">- remove some files which are in plasma5-defaults-openSUSE</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1614600000">- Update version to 5.2.0.13
  * fix: Avoid taskbar showing up when changing workspace in multitaskingview
  * Revert "fix: Provides a default wallpaper for the second workspace."
  * fix: mips platform second workspace background is white.
  * Provides a default wallpaper for the second workspace.
  * fix get sp1 default-uri method.
  * fix: A color field flicker when right-click menu show up
    Adjust the order of image processing
  * after system upgrading from SP1 to SP2, the old wallpaper will be kept.
  * Provides a default wallpaper for the second workspace.
  * remove dialog rule to avoid configuration by user
  * fix: Blur multitasking background.
- Add patches: deepin-kwin-crash.patch, deepin-kwin-tabbox-chameleon-rename.patch
  and deepin-kwin-unload-blur.patch</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1618142400">- Support kwin 5.21+, add support-kwin-5_19+.patch and
  support-kwin-5_21+.patch</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1620129600">- Update version to 5.3.7
  * Support kwin 5.19, drop support-kwin-5_19+.patch
  * Add translation files
  * update dde-kwin.postinst base on update DTK's /etc/os-version
  * Fix bugs
- Drop deepin-kwin-unload-blur.patch, merged by upstream</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1623758400">- Update version to 5.3.9
  * Fix bugs
  * Support kwin 5.21+, drop support-kwin-5_21+.patch
- Drop fix-crash-bug.patch, fixed by upstream</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1632312000">- Add fix-library-links.patch, fix build on Tumbleweed</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1636459200">- Update version to 5.3.14
  * Fix bugs
  * Update translations</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1638273600">- Update version to 5.4.12
  * Split screen mode is always grayed out in the working area
  * add split screen menu
  * support lightWeight config for shadow
  * optimize work thumbnail
  * Fix bugs
  * Workaround: builds are not performed under Kwin greater than 5.21</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1645358400">- Update version 5.4.19
  * Frees heap memory when the program exits
  * Disable multitasking
  * disable effects by default
  * Support DDE Wayland
  * Support client activation from dde shell
  * Fix bugs</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1645790400">- Add fix-build-on-5_18_6.patch for leap</changelog>
  <changelog author="Max Lin &lt;mlin@suse.com&gt;" date="1645876800">- Fix Leap 15.4 build since Kwin has greater version than 5.21
  in Leap 15.4</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1654862400">- Update version 5.4.26
  * update window raduis for effects
  * Add splitmenu translate
  * Add a dependency on 'kwin-wayland'
  * Add func about maxi button long press
  * Modify code based on code review results
  * Fix bugs
- Add dde-kwin.5.4.26.patch, fix build on kwin 5.24+
- Add drop-nonexistent-translations.patch
- No longer need kwayland-server (boo#1200318)
- Drop deepin-kwin-crash.patch</changelog>
</package>
<package pkgid="f88f80044dde05c964fe73e9691b326cdc9cca88c81f9476b0a023945bef0807" name="deepin-kwin-devel" arch="ppc64le">
  <version epoch="0" ver="5.4.26" rel="bp154.2.3.1"/>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1557316800">- Initial package for version 0.0.5</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1563537600">- update version to 0.1.0
  * Allow configuration items to override the default theme
  * Add the "deepin-chameleon" window decoration for kwin
  * Support get the shoutcut default value
  * Correct the path to find translation files
  * Ignore the RuleBook::save function of kwin
  * Execute dirname before setting the LD_PRELOAD environment
  * Support KWin highlightWindows effect for PreviewWindow
  * Overwrite the window menu
  * Support for specifying the version of kwin on build
  * Multitaskingview: add multitaskingview ts
  * Automatically append the wallpaper's gsetting value item
  * Clean LD_PRELOAD env
  * Fix the window was closed incorrectly
  * Fix the "Window to Desktop" shoutcuts is invalid
  * Fix No warning when opening the multitasking view app in 2D window manager
  * Fix do not print warning messages when the build and runtime versions are consistent
  * keep window to viewable if it is minimized
  * Disable theme cache of FrameSvg
  * Install the "kdeglobals" file
  * Fix the compositingEnabledChanged signal is sent only when the user actively sets it
  * Fix the window default cursor of the gtk application does not follow the theme
  * Disable window manager window menu
  * Preview window give priority to use the dbus interface by kwin
  * Support PresentWindows
  * Support set cursor theme/size for kwin</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1584792000">- remove some files which are in plasma5-defaults-openSUSE</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1614600000">- Update version to 5.2.0.13
  * fix: Avoid taskbar showing up when changing workspace in multitaskingview
  * Revert "fix: Provides a default wallpaper for the second workspace."
  * fix: mips platform second workspace background is white.
  * Provides a default wallpaper for the second workspace.
  * fix get sp1 default-uri method.
  * fix: A color field flicker when right-click menu show up
    Adjust the order of image processing
  * after system upgrading from SP1 to SP2, the old wallpaper will be kept.
  * Provides a default wallpaper for the second workspace.
  * remove dialog rule to avoid configuration by user
  * fix: Blur multitasking background.
- Add patches: deepin-kwin-crash.patch, deepin-kwin-tabbox-chameleon-rename.patch
  and deepin-kwin-unload-blur.patch</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1618142400">- Support kwin 5.21+, add support-kwin-5_19+.patch and
  support-kwin-5_21+.patch</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1620129600">- Update version to 5.3.7
  * Support kwin 5.19, drop support-kwin-5_19+.patch
  * Add translation files
  * update dde-kwin.postinst base on update DTK's /etc/os-version
  * Fix bugs
- Drop deepin-kwin-unload-blur.patch, merged by upstream</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1623758400">- Update version to 5.3.9
  * Fix bugs
  * Support kwin 5.21+, drop support-kwin-5_21+.patch
- Drop fix-crash-bug.patch, fixed by upstream</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1632312000">- Add fix-library-links.patch, fix build on Tumbleweed</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1636459200">- Update version to 5.3.14
  * Fix bugs
  * Update translations</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1638273600">- Update version to 5.4.12
  * Split screen mode is always grayed out in the working area
  * add split screen menu
  * support lightWeight config for shadow
  * optimize work thumbnail
  * Fix bugs
  * Workaround: builds are not performed under Kwin greater than 5.21</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1645358400">- Update version 5.4.19
  * Frees heap memory when the program exits
  * Disable multitasking
  * disable effects by default
  * Support DDE Wayland
  * Support client activation from dde shell
  * Fix bugs</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1645790400">- Add fix-build-on-5_18_6.patch for leap</changelog>
  <changelog author="Max Lin &lt;mlin@suse.com&gt;" date="1645876800">- Fix Leap 15.4 build since Kwin has greater version than 5.21
  in Leap 15.4</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1654862400">- Update version 5.4.26
  * update window raduis for effects
  * Add splitmenu translate
  * Add a dependency on 'kwin-wayland'
  * Add func about maxi button long press
  * Modify code based on code review results
  * Fix bugs
- Add dde-kwin.5.4.26.patch, fix build on kwin 5.24+
- Add drop-nonexistent-translations.patch
- No longer need kwayland-server (boo#1200318)
- Drop deepin-kwin-crash.patch</changelog>
</package>
<package pkgid="95cfaa25df3383427046522afd7b80e7eaa9d8a98ba8b56548404fd3573639f2" name="deepin-kwin-devel" arch="x86_64">
  <version epoch="0" ver="5.4.26" rel="bp154.2.3.1"/>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1557316800">- Initial package for version 0.0.5</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1563537600">- update version to 0.1.0
  * Allow configuration items to override the default theme
  * Add the "deepin-chameleon" window decoration for kwin
  * Support get the shoutcut default value
  * Correct the path to find translation files
  * Ignore the RuleBook::save function of kwin
  * Execute dirname before setting the LD_PRELOAD environment
  * Support KWin highlightWindows effect for PreviewWindow
  * Overwrite the window menu
  * Support for specifying the version of kwin on build
  * Multitaskingview: add multitaskingview ts
  * Automatically append the wallpaper's gsetting value item
  * Clean LD_PRELOAD env
  * Fix the window was closed incorrectly
  * Fix the "Window to Desktop" shoutcuts is invalid
  * Fix No warning when opening the multitasking view app in 2D window manager
  * Fix do not print warning messages when the build and runtime versions are consistent
  * keep window to viewable if it is minimized
  * Disable theme cache of FrameSvg
  * Install the "kdeglobals" file
  * Fix the compositingEnabledChanged signal is sent only when the user actively sets it
  * Fix the window default cursor of the gtk application does not follow the theme
  * Disable window manager window menu
  * Preview window give priority to use the dbus interface by kwin
  * Support PresentWindows
  * Support set cursor theme/size for kwin</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1584792000">- remove some files which are in plasma5-defaults-openSUSE</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1614600000">- Update version to 5.2.0.13
  * fix: Avoid taskbar showing up when changing workspace in multitaskingview
  * Revert "fix: Provides a default wallpaper for the second workspace."
  * fix: mips platform second workspace background is white.
  * Provides a default wallpaper for the second workspace.
  * fix get sp1 default-uri method.
  * fix: A color field flicker when right-click menu show up
    Adjust the order of image processing
  * after system upgrading from SP1 to SP2, the old wallpaper will be kept.
  * Provides a default wallpaper for the second workspace.
  * remove dialog rule to avoid configuration by user
  * fix: Blur multitasking background.
- Add patches: deepin-kwin-crash.patch, deepin-kwin-tabbox-chameleon-rename.patch
  and deepin-kwin-unload-blur.patch</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1618142400">- Support kwin 5.21+, add support-kwin-5_19+.patch and
  support-kwin-5_21+.patch</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1620129600">- Update version to 5.3.7
  * Support kwin 5.19, drop support-kwin-5_19+.patch
  * Add translation files
  * update dde-kwin.postinst base on update DTK's /etc/os-version
  * Fix bugs
- Drop deepin-kwin-unload-blur.patch, merged by upstream</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1623758400">- Update version to 5.3.9
  * Fix bugs
  * Support kwin 5.21+, drop support-kwin-5_21+.patch
- Drop fix-crash-bug.patch, fixed by upstream</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1632312000">- Add fix-library-links.patch, fix build on Tumbleweed</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1636459200">- Update version to 5.3.14
  * Fix bugs
  * Update translations</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1638273600">- Update version to 5.4.12
  * Split screen mode is always grayed out in the working area
  * add split screen menu
  * support lightWeight config for shadow
  * optimize work thumbnail
  * Fix bugs
  * Workaround: builds are not performed under Kwin greater than 5.21</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1645358400">- Update version 5.4.19
  * Frees heap memory when the program exits
  * Disable multitasking
  * disable effects by default
  * Support DDE Wayland
  * Support client activation from dde shell
  * Fix bugs</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1645790400">- Add fix-build-on-5_18_6.patch for leap</changelog>
  <changelog author="Max Lin &lt;mlin@suse.com&gt;" date="1645876800">- Fix Leap 15.4 build since Kwin has greater version than 5.21
  in Leap 15.4</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1654862400">- Update version 5.4.26
  * update window raduis for effects
  * Add splitmenu translate
  * Add a dependency on 'kwin-wayland'
  * Add func about maxi button long press
  * Modify code based on code review results
  * Fix bugs
- Add dde-kwin.5.4.26.patch, fix build on kwin 5.24+
- Add drop-nonexistent-translations.patch
- No longer need kwayland-server (boo#1200318)
- Drop deepin-kwin-crash.patch</changelog>
</package>
<package pkgid="4dcf736e9af8b114df941e015ac03257916f9917edb74bebbeb3a734a5690377" name="deepin-kwin-lang" arch="noarch">
  <version epoch="0" ver="5.4.26" rel="bp154.2.3.1"/>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1557316800">- Initial package for version 0.0.5</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1563537600">- update version to 0.1.0
  * Allow configuration items to override the default theme
  * Add the "deepin-chameleon" window decoration for kwin
  * Support get the shoutcut default value
  * Correct the path to find translation files
  * Ignore the RuleBook::save function of kwin
  * Execute dirname before setting the LD_PRELOAD environment
  * Support KWin highlightWindows effect for PreviewWindow
  * Overwrite the window menu
  * Support for specifying the version of kwin on build
  * Multitaskingview: add multitaskingview ts
  * Automatically append the wallpaper's gsetting value item
  * Clean LD_PRELOAD env
  * Fix the window was closed incorrectly
  * Fix the "Window to Desktop" shoutcuts is invalid
  * Fix No warning when opening the multitasking view app in 2D window manager
  * Fix do not print warning messages when the build and runtime versions are consistent
  * keep window to viewable if it is minimized
  * Disable theme cache of FrameSvg
  * Install the "kdeglobals" file
  * Fix the compositingEnabledChanged signal is sent only when the user actively sets it
  * Fix the window default cursor of the gtk application does not follow the theme
  * Disable window manager window menu
  * Preview window give priority to use the dbus interface by kwin
  * Support PresentWindows
  * Support set cursor theme/size for kwin</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1584792000">- remove some files which are in plasma5-defaults-openSUSE</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1614600000">- Update version to 5.2.0.13
  * fix: Avoid taskbar showing up when changing workspace in multitaskingview
  * Revert "fix: Provides a default wallpaper for the second workspace."
  * fix: mips platform second workspace background is white.
  * Provides a default wallpaper for the second workspace.
  * fix get sp1 default-uri method.
  * fix: A color field flicker when right-click menu show up
    Adjust the order of image processing
  * after system upgrading from SP1 to SP2, the old wallpaper will be kept.
  * Provides a default wallpaper for the second workspace.
  * remove dialog rule to avoid configuration by user
  * fix: Blur multitasking background.
- Add patches: deepin-kwin-crash.patch, deepin-kwin-tabbox-chameleon-rename.patch
  and deepin-kwin-unload-blur.patch</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1618142400">- Support kwin 5.21+, add support-kwin-5_19+.patch and
  support-kwin-5_21+.patch</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1620129600">- Update version to 5.3.7
  * Support kwin 5.19, drop support-kwin-5_19+.patch
  * Add translation files
  * update dde-kwin.postinst base on update DTK's /etc/os-version
  * Fix bugs
- Drop deepin-kwin-unload-blur.patch, merged by upstream</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1623758400">- Update version to 5.3.9
  * Fix bugs
  * Support kwin 5.21+, drop support-kwin-5_21+.patch
- Drop fix-crash-bug.patch, fixed by upstream</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1632312000">- Add fix-library-links.patch, fix build on Tumbleweed</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1636459200">- Update version to 5.3.14
  * Fix bugs
  * Update translations</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1638273600">- Update version to 5.4.12
  * Split screen mode is always grayed out in the working area
  * add split screen menu
  * support lightWeight config for shadow
  * optimize work thumbnail
  * Fix bugs
  * Workaround: builds are not performed under Kwin greater than 5.21</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1645358400">- Update version 5.4.19
  * Frees heap memory when the program exits
  * Disable multitasking
  * disable effects by default
  * Support DDE Wayland
  * Support client activation from dde shell
  * Fix bugs</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1645790400">- Add fix-build-on-5_18_6.patch for leap</changelog>
  <changelog author="Max Lin &lt;mlin@suse.com&gt;" date="1645876800">- Fix Leap 15.4 build since Kwin has greater version than 5.21
  in Leap 15.4</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1654862400">- Update version 5.4.26
  * update window raduis for effects
  * Add splitmenu translate
  * Add a dependency on 'kwin-wayland'
  * Add func about maxi button long press
  * Modify code based on code review results
  * Fix bugs
- Add dde-kwin.5.4.26.patch, fix build on kwin 5.24+
- Add drop-nonexistent-translations.patch
- No longer need kwayland-server (boo#1200318)
- Drop deepin-kwin-crash.patch</changelog>
</package>
<package pkgid="fd1cc0b7022f64fc1beded4d522aef949c313fe36df82f623662912609ba5ff6" name="deluge" arch="noarch">
  <version epoch="0" ver="2.1.1" rel="bp154.2.3.1"/>
  <changelog author="sor.alexei@meowr.ru" date="1414497600">- Initial package.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1414843200">- Update to 1.3.11:
  * Core: disable use of SSLv3 protocol for DelugeRPC
  * GtkUI: fix ImportError for users with Twisted &lt; 10
  * GtkUI: fix column issue when disabling a plugin
  * WebUI: modify SSL Context to allow &gt;= TLSv1 protocol
  * WebUI: fix Size column to show total_wanted instead of
    total_size</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1442232000">- Update to 1.3.12:
  * Core: Include fix for Twisted 15.0 URI class rename.
  * Core: Fix AttributeError in set_trackers with libtorrent 1.0.x.
  * Core: Enable libtorrent-rasterbar extension bindings again for
    libtorrent-rasterbar versions &gt;= 0.16.7 (this disables
    Tracker Exchange by default).
  * Core: Backport atomic fastresume and state file saving fixes as
    another attempt to prevent data loss on unclean exits.
  * GtkUI: Fix potential AttributeError in is_on_active_workspace.
  * WebUI: Fix i18n issue in Connection Manager which left users
    unable to connect.
  * WebUI: Increase cookie lifespan for display settings.
  * Console: Fixed 'set and then get' in config command.
  * Scheduler Plugin: Show current speed limit in statusbar.
- Add deluge-update_7z_binary.patch.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1463400000">- Add deluge-fix-blocklist-crash.patch: workaround a bug in
  libtorrent-rasterbar 1.1.0 which results in a crash when
  blocklist is used (boo#978600).</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1469016000">- Update to version 1.3.13:
  * Core: Increase RSA key size from 1024 to 2048 and use SHA256
    digest.
  * Core: Fix empty error message from certain trackers.
  * Core: Fix torrent ending up displaying the wrong state.
  * Core: Force a torrent into Error state if the resume data is
    rejected.
  * Core: Workaround unwanted tracker announce when force rechecking
    paused torrent.
  * Core: Stop moving torrent files if target files exist to prevent
    unintended clobbering of data.
  * Core: Fix the pausing and resuming of the Deluge session so
    torrents return to previous state.
  * Core: Add support for TLS SNI in httpdownloader.
  * Core: Ensure base32 magnet hash is uppercase to fix lowercase
    magnets uris.
  * Daemon: New command-line option to restict selected config key to
    read-only.
  * Daemon: Allow use of uppercase log level to match UIs.
  * UI: Fixed error with blank lines in auth file.
  * GtkUI: Fix installing plugin from a non-ascii directory.
  * GtkUI: Error'd torrents no longer display a progress percentage.
  * GtkUI: Fixed the 'Added' column showing the wrong date.
  * GtkUI: Prevent the user from changing tracker selection when
    editing trackers.
  * GtkUI: Fix showing the wrong connected status with hostname in
    the Connection Manager.
  * GtkUI: Fix the progress column to sort by progress and state
    correctly.
  * GtkUI: Fix incorrect Move Completed directory shown in Options
    tab.
  * GtkUI: Sorting for name column is now case insensitive.
  * GtkUI: Reduce height of Add Torrent Dialog to help with smaller screeen resoltuions.
  * GtkUI: Fix adding UDP trackers to trackers dialog.
  * WebUI: Fix HTTPS negotiating incorrect cipher.
  * WebUI: Fix the broken Options context menu.
  * WebUI: Fix the hostlist config file not being created.
  * WebUI: Fix plugin's js code not loading when using the WebUI
    plugin.
  * Console: Fix adding non-ascii torrent in non-interactive mode.
  * Console: Add time_added to info sort keys.
  * Blocklist Plugin: Fix plugin lockup with empty url.
  * Scheduler Plugin: Fix an error accidentally introduced in 1.3.12.
  * Notification Plugin: Fix the popup to show the actual count of
    files finished.
  * Notification Plugin: Fix issue with SMTP port entry not
    updating in GtkUI.
  * AutoAdd Plugin: Fix watch directory not accepting uppercase file
    extension.
  * Extractor Plugin: Ignore the remaining rar part files to
    prevent spawning useless processes.
  * Extractor Plugin: Fix only an directory folder when
    extracting rar files.
- Add deluge-suse-geoip-location.patch: point to the right
  GeoIP.dat location.
- Add deluge-libtorrent-1.1-geoip.patch: use python-GeoIP to get
  GeoIP data.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1471435200">- Remove deluge-fix-blocklist-crash.patch: fixed in the
  libtorrent-rasterbar package.
- Simplify deluge-libtorrent-1.1-geoip.patch.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1489406400">- Update to version 1.3.14:
  * Core: Fix 'Too many files open' errors.
  * Core: Add support for python-GeoIP for use with libtorrent 1.1.
  * Core: Fix a single proxy entry being overwritten resulting in
    no proxy set.
  * UI: Add the tracker_status translation to UIs.
  * GtkUI: Strip whitespace from infohash before checks.
  * GtkUI: Add a missed feature autofill infohash entry from
    clipboard.
  * WebUI: Backport bind interface option for server.
  * WebUI, security: Fix WebUI CSRF Vulnerability.
  * ConsoleUI: Fix a decode error comparing non-ascii (str) torrent
    names.
  * AutoAdd Plugin: Fixes for splitting magnets from file.
  * Remove the duplicate magnet extension when splitting.
- Remove deluge-libtorrent-1.1-geoip.patch: fixed upstream.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1495195200">- Update to version 1.3.15:
  * Core: Fix issues with displaying libtorrent-rasterbar single
    proxy.
  * Core: Fix libtorrent-rasterbar 1.2 trackers crashing Deluge
    UIs.
  * Core: Fix an error in torrent priorities causing file priority
    mismatch in UIs.
  * GtkUI: Fix column sort state not saved in Thinclient mode.
  * GtkUI: Fix a connection manager error with malformed ip.
  * GtkUI: Rename SystemTray/Indicator "Pause/Resume All" to
    "Pause/Resume Session".
  * GtkUI: Workaround libtorrent-rasterbar single proxy by greying
    out unused proxy types.
  * WebUI: Check render template files exist otherwise raise 404
    (CVE-2017-9031, bsc#1039815).
  * Notification Plugin: Fix webui passing string for int port
    value.
  * AutoAdd Plugin: Add WebUI preferences page detailing lack of
    configuration via WebUI.
  * Label Plugin: Add WebUI preferences page detailing how to
    configure plugin.</changelog>
  <changelog author="develop7@develop7.info" date="1530792000">- Add deluge-1.3.15-fix-preferences.patch: upstream fix for broken
  preferences window</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1560081600">- Update to version 2.0.2:
  * See /usr/share/doc/packages/deluge/CHANGELOG.md
- Rebase deluge-suse-geoip-location.patch,
  deluge-update_7z_binary.patch.</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1561204800">- Update to version 2.0.3:
  * Gtk UI
    + Fix errors running on Wayland (#3265).
    + Fix Peers Tab tooltip and context menu errors (#3266).
  * Web UI
    + Fix TypeError in Peers Tab setting country flag.
    + Fix reverse proxy header TypeError (#3260).
    + Fix request.base ?idna? codec error (#3261).
    + Fix unable to change password (#3262).
  * Extractor plugin
    + Fix potential error starting plugin.
  * Documentation
    + Fix macOS install typo.
    + Fix Windows install instructions.</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1582977600">- Add a missing requirement python3-setproctitle (boo#1164888).
- Add a missing requirement python3-Pillow (boo#1164890).
- Add a missing requirement python3-pycairo (boo#1164892).
- Use %py3_build and %py3_install macros.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1600430400">- Use legacy libtorrent-rasterbar on Tumbleweed</changelog>
  <changelog author="andy great &lt;andythe_great@pm.me&gt;" date="1604750400">- Fix Deluge not starting by changing dependency from
  python3-xdg to python3-pyxdg.</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1639656000">- Update to version 2.0.5 (changes since 2.0.3):
  * Gtk UI
    + Add detection of torrent URL on GTK UI focus.
    + Fix piecesbar crashing when enabled.
    + Remove num_blocks_cache_hits in stats.
    + Fix unhandled error with empty clipboard.
    + Add torrentdetails tabs position menu.
    + Hide pygame community banner in console.
    + Fix cmp function for None types.
    + Fix loading config with double-quotes in string.
    + Fix Status tab download speed and uploaded.
  * Web UI
    + Handle torrent add failures.
    + Add menu option to copy magnet URI.
    + Fix md5sums in torrent files breaking file listing.
    + Add country flag alt/title for accessibility.
  * Console UI
    + Fix hostlist status lookup errors.
    + Fix AttributeError setting config values.
    + Fix setting "Skip" priority.
  * Core
    + Add workaround libtorrent 2.0 file_progress error.
    + Fix allow enabling any plugin Python version.
    + Export torrent get_magnet_uri method.
    + Fix loading magnet with resume_data and no metadata.
    + Fix httpdownloader reencoding torrent file downloads.
    + Fix lt listen_interfaces not comma-separated.
    + Fix unable to remove magnet with delete_copies enabled.
    + Fix Python 3.8 compatibility.
    + Fix loading config with double-quotes in string.
    + Fix pickle loading non-ascii state error.
    + Fix creation of pidfile via command option.
    + Fix for peer.client UnicodeDecodeError.
    + Fix show_file unhandled dbus error.
  * Documentation
    + Add How-to guides about services..
  * Stats plugin
    + Fix constant session status key warnings.
    + Fix cairo error.
  * Notifications plugin
    + Fix email KeyError with status name.
    + Fix unhandled TypeErrors on Python 3.
  * Autoadd plugin
    + Fix magnet missing applied labels.
- Use the latest libtorrent-rasterbar version now.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1648728000">- Add global typelib gconf exclude, filter out unneeded and
  unwanted gconf2 runtime Requires.</changelog>
  <changelog author="Ben Greiner &lt;code@bnavigator.de&gt;" date="1655812800">- Actually needs "twisted[tls]": python-Twisted-tls on Tumbleweed</changelog>
  <changelog author="Dead Mozay &lt;dead_mozay@opensuse.org&gt;" date="1659700800">- Update to version 2.1.1 (changes since 2.1.0) (bsc#1203162, CVE-2021-3427):
  * Core:
    + Fix missing trackers added via magnet.
    + Fix handling magnets with tracker tiers.
    + Add support for SVG tracker icons.
    + Fix tracker icon error handling.
    + Fix cleaning-up tracker icon temp files.
    + Fix Plugin manager to handle new metadata 2.1.
    + Hide passwords in config logs.
    + Fix cleaning-up temp files in add_torrent_url.
    + Fix KeyError in sessionproxy after torrent delete.
    + Remove libtorrent deprecated functions.
    + Fix file_completed_alert handling.
    + Add plugin keys to get_torrents_status.
    + Add support for pygeoip dependency.
    + Add is_interface and is_interface_name to validate network
    interfaces.
    + Fix is_url and is_infohash error with None value.
    + Fix load_libintl error.
    + Add support for IPv6 in host lists.
    + Add systemd user services.
    + Fix refresh and expire the torrent status cache.
    + Fix crash when logging errors initializing gettext.
  * Web UI:
    + Fix ETA column sorting in correct order (#3413).
    + Fix defining foreground and background colors.
    + Accept charset in content-type for json messages.
    + Fix 'Complete Seen' and 'Completed' sorting.
    + Fix encoding HTML entities for torrent attributes
    to prevent XSS.
  * Gtk UI:
    + Fix download location textbox width.
    + Fix obscured port number in Connection Manager.
    + Increase connection manager default height.
    + Fix bug with setting move completed in Options tab.
    + Fix adding daemon accounts.
    + Hide account password length in log.
    + Added a torrent menu option for magnet copy.
    + Fix unable to prefetch magnet in thinclient mode.
    + Use GtkSpinner when testing open port.
    + Update About Dialog year.
    + Fix Edit Torrents dialogs close issues.
    + Fix ETA being copied to neighboring empty cells.
  * Console UI:
    + Fix curses.init_pair raise ValueError on Py3.10.
    + Swap j and k key's behavior to fit vim mode.
    + Fix torrent details status error.
    + Fix incorrect test for when a host is online.
    + Add the torrent label to info command.
  * AutoAdd:
    + Fix handling torrent decode errors.
    + Fix error dialog not being shown on error.
  * Blocklist:
    + Add frequency unit to interval label.
  * Notifications:
    + Fix UnicodeEncodeError upon non-ascii torrent name.
  * Breaking changes:
    + Python 2 support removed (Python &gt;= 3.6)
    + libtorrent minimum requirement increased (&gt;= 1.2).</changelog>
  <changelog author="Dead Mozay &lt;dead_mozay@opensuse.org&gt;" date="1660910400">- Add global typelib AyatanaAppIndicator3 exclude, filter out unneeded and
  unwanted AyatanaAppIndicator3 runtime Requires.</changelog>
</package>
<package pkgid="54bc925a85b981d0bd471f9edc8b9eb690b0ae25aabcbe41c5ceb07fa43b8f76" name="deluge" arch="src">
  <version epoch="0" ver="2.1.1" rel="bp154.2.3.1"/>
  <changelog author="sor.alexei@meowr.ru" date="1414497600">- Initial package.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1414843200">- Update to 1.3.11:
  * Core: disable use of SSLv3 protocol for DelugeRPC
  * GtkUI: fix ImportError for users with Twisted &lt; 10
  * GtkUI: fix column issue when disabling a plugin
  * WebUI: modify SSL Context to allow &gt;= TLSv1 protocol
  * WebUI: fix Size column to show total_wanted instead of
    total_size</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1442232000">- Update to 1.3.12:
  * Core: Include fix for Twisted 15.0 URI class rename.
  * Core: Fix AttributeError in set_trackers with libtorrent 1.0.x.
  * Core: Enable libtorrent-rasterbar extension bindings again for
    libtorrent-rasterbar versions &gt;= 0.16.7 (this disables
    Tracker Exchange by default).
  * Core: Backport atomic fastresume and state file saving fixes as
    another attempt to prevent data loss on unclean exits.
  * GtkUI: Fix potential AttributeError in is_on_active_workspace.
  * WebUI: Fix i18n issue in Connection Manager which left users
    unable to connect.
  * WebUI: Increase cookie lifespan for display settings.
  * Console: Fixed 'set and then get' in config command.
  * Scheduler Plugin: Show current speed limit in statusbar.
- Add deluge-update_7z_binary.patch.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1463400000">- Add deluge-fix-blocklist-crash.patch: workaround a bug in
  libtorrent-rasterbar 1.1.0 which results in a crash when
  blocklist is used (boo#978600).</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1469016000">- Update to version 1.3.13:
  * Core: Increase RSA key size from 1024 to 2048 and use SHA256
    digest.
  * Core: Fix empty error message from certain trackers.
  * Core: Fix torrent ending up displaying the wrong state.
  * Core: Force a torrent into Error state if the resume data is
    rejected.
  * Core: Workaround unwanted tracker announce when force rechecking
    paused torrent.
  * Core: Stop moving torrent files if target files exist to prevent
    unintended clobbering of data.
  * Core: Fix the pausing and resuming of the Deluge session so
    torrents return to previous state.
  * Core: Add support for TLS SNI in httpdownloader.
  * Core: Ensure base32 magnet hash is uppercase to fix lowercase
    magnets uris.
  * Daemon: New command-line option to restict selected config key to
    read-only.
  * Daemon: Allow use of uppercase log level to match UIs.
  * UI: Fixed error with blank lines in auth file.
  * GtkUI: Fix installing plugin from a non-ascii directory.
  * GtkUI: Error'd torrents no longer display a progress percentage.
  * GtkUI: Fixed the 'Added' column showing the wrong date.
  * GtkUI: Prevent the user from changing tracker selection when
    editing trackers.
  * GtkUI: Fix showing the wrong connected status with hostname in
    the Connection Manager.
  * GtkUI: Fix the progress column to sort by progress and state
    correctly.
  * GtkUI: Fix incorrect Move Completed directory shown in Options
    tab.
  * GtkUI: Sorting for name column is now case insensitive.
  * GtkUI: Reduce height of Add Torrent Dialog to help with smaller screeen resoltuions.
  * GtkUI: Fix adding UDP trackers to trackers dialog.
  * WebUI: Fix HTTPS negotiating incorrect cipher.
  * WebUI: Fix the broken Options context menu.
  * WebUI: Fix the hostlist config file not being created.
  * WebUI: Fix plugin's js code not loading when using the WebUI
    plugin.
  * Console: Fix adding non-ascii torrent in non-interactive mode.
  * Console: Add time_added to info sort keys.
  * Blocklist Plugin: Fix plugin lockup with empty url.
  * Scheduler Plugin: Fix an error accidentally introduced in 1.3.12.
  * Notification Plugin: Fix the popup to show the actual count of
    files finished.
  * Notification Plugin: Fix issue with SMTP port entry not
    updating in GtkUI.
  * AutoAdd Plugin: Fix watch directory not accepting uppercase file
    extension.
  * Extractor Plugin: Ignore the remaining rar part files to
    prevent spawning useless processes.
  * Extractor Plugin: Fix only an directory folder when
    extracting rar files.
- Add deluge-suse-geoip-location.patch: point to the right
  GeoIP.dat location.
- Add deluge-libtorrent-1.1-geoip.patch: use python-GeoIP to get
  GeoIP data.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1471435200">- Remove deluge-fix-blocklist-crash.patch: fixed in the
  libtorrent-rasterbar package.
- Simplify deluge-libtorrent-1.1-geoip.patch.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1489406400">- Update to version 1.3.14:
  * Core: Fix 'Too many files open' errors.
  * Core: Add support for python-GeoIP for use with libtorrent 1.1.
  * Core: Fix a single proxy entry being overwritten resulting in
    no proxy set.
  * UI: Add the tracker_status translation to UIs.
  * GtkUI: Strip whitespace from infohash before checks.
  * GtkUI: Add a missed feature autofill infohash entry from
    clipboard.
  * WebUI: Backport bind interface option for server.
  * WebUI, security: Fix WebUI CSRF Vulnerability.
  * ConsoleUI: Fix a decode error comparing non-ascii (str) torrent
    names.
  * AutoAdd Plugin: Fixes for splitting magnets from file.
  * Remove the duplicate magnet extension when splitting.
- Remove deluge-libtorrent-1.1-geoip.patch: fixed upstream.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1495195200">- Update to version 1.3.15:
  * Core: Fix issues with displaying libtorrent-rasterbar single
    proxy.
  * Core: Fix libtorrent-rasterbar 1.2 trackers crashing Deluge
    UIs.
  * Core: Fix an error in torrent priorities causing file priority
    mismatch in UIs.
  * GtkUI: Fix column sort state not saved in Thinclient mode.
  * GtkUI: Fix a connection manager error with malformed ip.
  * GtkUI: Rename SystemTray/Indicator "Pause/Resume All" to
    "Pause/Resume Session".
  * GtkUI: Workaround libtorrent-rasterbar single proxy by greying
    out unused proxy types.
  * WebUI: Check render template files exist otherwise raise 404
    (CVE-2017-9031, bsc#1039815).
  * Notification Plugin: Fix webui passing string for int port
    value.
  * AutoAdd Plugin: Add WebUI preferences page detailing lack of
    configuration via WebUI.
  * Label Plugin: Add WebUI preferences page detailing how to
    configure plugin.</changelog>
  <changelog author="develop7@develop7.info" date="1530792000">- Add deluge-1.3.15-fix-preferences.patch: upstream fix for broken
  preferences window</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1560081600">- Update to version 2.0.2:
  * See /usr/share/doc/packages/deluge/CHANGELOG.md
- Rebase deluge-suse-geoip-location.patch,
  deluge-update_7z_binary.patch.</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1561204800">- Update to version 2.0.3:
  * Gtk UI
    + Fix errors running on Wayland (#3265).
    + Fix Peers Tab tooltip and context menu errors (#3266).
  * Web UI
    + Fix TypeError in Peers Tab setting country flag.
    + Fix reverse proxy header TypeError (#3260).
    + Fix request.base ?idna? codec error (#3261).
    + Fix unable to change password (#3262).
  * Extractor plugin
    + Fix potential error starting plugin.
  * Documentation
    + Fix macOS install typo.
    + Fix Windows install instructions.</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1582977600">- Add a missing requirement python3-setproctitle (boo#1164888).
- Add a missing requirement python3-Pillow (boo#1164890).
- Add a missing requirement python3-pycairo (boo#1164892).
- Use %py3_build and %py3_install macros.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1600430400">- Use legacy libtorrent-rasterbar on Tumbleweed</changelog>
  <changelog author="andy great &lt;andythe_great@pm.me&gt;" date="1604750400">- Fix Deluge not starting by changing dependency from
  python3-xdg to python3-pyxdg.</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1639656000">- Update to version 2.0.5 (changes since 2.0.3):
  * Gtk UI
    + Add detection of torrent URL on GTK UI focus.
    + Fix piecesbar crashing when enabled.
    + Remove num_blocks_cache_hits in stats.
    + Fix unhandled error with empty clipboard.
    + Add torrentdetails tabs position menu.
    + Hide pygame community banner in console.
    + Fix cmp function for None types.
    + Fix loading config with double-quotes in string.
    + Fix Status tab download speed and uploaded.
  * Web UI
    + Handle torrent add failures.
    + Add menu option to copy magnet URI.
    + Fix md5sums in torrent files breaking file listing.
    + Add country flag alt/title for accessibility.
  * Console UI
    + Fix hostlist status lookup errors.
    + Fix AttributeError setting config values.
    + Fix setting "Skip" priority.
  * Core
    + Add workaround libtorrent 2.0 file_progress error.
    + Fix allow enabling any plugin Python version.
    + Export torrent get_magnet_uri method.
    + Fix loading magnet with resume_data and no metadata.
    + Fix httpdownloader reencoding torrent file downloads.
    + Fix lt listen_interfaces not comma-separated.
    + Fix unable to remove magnet with delete_copies enabled.
    + Fix Python 3.8 compatibility.
    + Fix loading config with double-quotes in string.
    + Fix pickle loading non-ascii state error.
    + Fix creation of pidfile via command option.
    + Fix for peer.client UnicodeDecodeError.
    + Fix show_file unhandled dbus error.
  * Documentation
    + Add How-to guides about services..
  * Stats plugin
    + Fix constant session status key warnings.
    + Fix cairo error.
  * Notifications plugin
    + Fix email KeyError with status name.
    + Fix unhandled TypeErrors on Python 3.
  * Autoadd plugin
    + Fix magnet missing applied labels.
- Use the latest libtorrent-rasterbar version now.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1648728000">- Add global typelib gconf exclude, filter out unneeded and
  unwanted gconf2 runtime Requires.</changelog>
  <changelog author="Ben Greiner &lt;code@bnavigator.de&gt;" date="1655812800">- Actually needs "twisted[tls]": python-Twisted-tls on Tumbleweed</changelog>
  <changelog author="Dead Mozay &lt;dead_mozay@opensuse.org&gt;" date="1659700800">- Update to version 2.1.1 (changes since 2.1.0) (bsc#1203162, CVE-2021-3427):
  * Core:
    + Fix missing trackers added via magnet.
    + Fix handling magnets with tracker tiers.
    + Add support for SVG tracker icons.
    + Fix tracker icon error handling.
    + Fix cleaning-up tracker icon temp files.
    + Fix Plugin manager to handle new metadata 2.1.
    + Hide passwords in config logs.
    + Fix cleaning-up temp files in add_torrent_url.
    + Fix KeyError in sessionproxy after torrent delete.
    + Remove libtorrent deprecated functions.
    + Fix file_completed_alert handling.
    + Add plugin keys to get_torrents_status.
    + Add support for pygeoip dependency.
    + Add is_interface and is_interface_name to validate network
    interfaces.
    + Fix is_url and is_infohash error with None value.
    + Fix load_libintl error.
    + Add support for IPv6 in host lists.
    + Add systemd user services.
    + Fix refresh and expire the torrent status cache.
    + Fix crash when logging errors initializing gettext.
  * Web UI:
    + Fix ETA column sorting in correct order (#3413).
    + Fix defining foreground and background colors.
    + Accept charset in content-type for json messages.
    + Fix 'Complete Seen' and 'Completed' sorting.
    + Fix encoding HTML entities for torrent attributes
    to prevent XSS.
  * Gtk UI:
    + Fix download location textbox width.
    + Fix obscured port number in Connection Manager.
    + Increase connection manager default height.
    + Fix bug with setting move completed in Options tab.
    + Fix adding daemon accounts.
    + Hide account password length in log.
    + Added a torrent menu option for magnet copy.
    + Fix unable to prefetch magnet in thinclient mode.
    + Use GtkSpinner when testing open port.
    + Update About Dialog year.
    + Fix Edit Torrents dialogs close issues.
    + Fix ETA being copied to neighboring empty cells.
  * Console UI:
    + Fix curses.init_pair raise ValueError on Py3.10.
    + Swap j and k key's behavior to fit vim mode.
    + Fix torrent details status error.
    + Fix incorrect test for when a host is online.
    + Add the torrent label to info command.
  * AutoAdd:
    + Fix handling torrent decode errors.
    + Fix error dialog not being shown on error.
  * Blocklist:
    + Add frequency unit to interval label.
  * Notifications:
    + Fix UnicodeEncodeError upon non-ascii torrent name.
  * Breaking changes:
    + Python 2 support removed (Python &gt;= 3.6)
    + libtorrent minimum requirement increased (&gt;= 1.2).</changelog>
  <changelog author="Dead Mozay &lt;dead_mozay@opensuse.org&gt;" date="1660910400">- Add global typelib AyatanaAppIndicator3 exclude, filter out unneeded and
  unwanted AyatanaAppIndicator3 runtime Requires.</changelog>
</package>
<package pkgid="df35789f68344e46794b16f5d635c738613b65c0b11d5a8a39abd94ddd5946eb" name="deluge-lang" arch="noarch">
  <version epoch="0" ver="2.1.1" rel="bp154.2.3.1"/>
  <changelog author="sor.alexei@meowr.ru" date="1414497600">- Initial package.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1414843200">- Update to 1.3.11:
  * Core: disable use of SSLv3 protocol for DelugeRPC
  * GtkUI: fix ImportError for users with Twisted &lt; 10
  * GtkUI: fix column issue when disabling a plugin
  * WebUI: modify SSL Context to allow &gt;= TLSv1 protocol
  * WebUI: fix Size column to show total_wanted instead of
    total_size</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1442232000">- Update to 1.3.12:
  * Core: Include fix for Twisted 15.0 URI class rename.
  * Core: Fix AttributeError in set_trackers with libtorrent 1.0.x.
  * Core: Enable libtorrent-rasterbar extension bindings again for
    libtorrent-rasterbar versions &gt;= 0.16.7 (this disables
    Tracker Exchange by default).
  * Core: Backport atomic fastresume and state file saving fixes as
    another attempt to prevent data loss on unclean exits.
  * GtkUI: Fix potential AttributeError in is_on_active_workspace.
  * WebUI: Fix i18n issue in Connection Manager which left users
    unable to connect.
  * WebUI: Increase cookie lifespan for display settings.
  * Console: Fixed 'set and then get' in config command.
  * Scheduler Plugin: Show current speed limit in statusbar.
- Add deluge-update_7z_binary.patch.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1463400000">- Add deluge-fix-blocklist-crash.patch: workaround a bug in
  libtorrent-rasterbar 1.1.0 which results in a crash when
  blocklist is used (boo#978600).</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1469016000">- Update to version 1.3.13:
  * Core: Increase RSA key size from 1024 to 2048 and use SHA256
    digest.
  * Core: Fix empty error message from certain trackers.
  * Core: Fix torrent ending up displaying the wrong state.
  * Core: Force a torrent into Error state if the resume data is
    rejected.
  * Core: Workaround unwanted tracker announce when force rechecking
    paused torrent.
  * Core: Stop moving torrent files if target files exist to prevent
    unintended clobbering of data.
  * Core: Fix the pausing and resuming of the Deluge session so
    torrents return to previous state.
  * Core: Add support for TLS SNI in httpdownloader.
  * Core: Ensure base32 magnet hash is uppercase to fix lowercase
    magnets uris.
  * Daemon: New command-line option to restict selected config key to
    read-only.
  * Daemon: Allow use of uppercase log level to match UIs.
  * UI: Fixed error with blank lines in auth file.
  * GtkUI: Fix installing plugin from a non-ascii directory.
  * GtkUI: Error'd torrents no longer display a progress percentage.
  * GtkUI: Fixed the 'Added' column showing the wrong date.
  * GtkUI: Prevent the user from changing tracker selection when
    editing trackers.
  * GtkUI: Fix showing the wrong connected status with hostname in
    the Connection Manager.
  * GtkUI: Fix the progress column to sort by progress and state
    correctly.
  * GtkUI: Fix incorrect Move Completed directory shown in Options
    tab.
  * GtkUI: Sorting for name column is now case insensitive.
  * GtkUI: Reduce height of Add Torrent Dialog to help with smaller screeen resoltuions.
  * GtkUI: Fix adding UDP trackers to trackers dialog.
  * WebUI: Fix HTTPS negotiating incorrect cipher.
  * WebUI: Fix the broken Options context menu.
  * WebUI: Fix the hostlist config file not being created.
  * WebUI: Fix plugin's js code not loading when using the WebUI
    plugin.
  * Console: Fix adding non-ascii torrent in non-interactive mode.
  * Console: Add time_added to info sort keys.
  * Blocklist Plugin: Fix plugin lockup with empty url.
  * Scheduler Plugin: Fix an error accidentally introduced in 1.3.12.
  * Notification Plugin: Fix the popup to show the actual count of
    files finished.
  * Notification Plugin: Fix issue with SMTP port entry not
    updating in GtkUI.
  * AutoAdd Plugin: Fix watch directory not accepting uppercase file
    extension.
  * Extractor Plugin: Ignore the remaining rar part files to
    prevent spawning useless processes.
  * Extractor Plugin: Fix only an directory folder when
    extracting rar files.
- Add deluge-suse-geoip-location.patch: point to the right
  GeoIP.dat location.
- Add deluge-libtorrent-1.1-geoip.patch: use python-GeoIP to get
  GeoIP data.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1471435200">- Remove deluge-fix-blocklist-crash.patch: fixed in the
  libtorrent-rasterbar package.
- Simplify deluge-libtorrent-1.1-geoip.patch.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1489406400">- Update to version 1.3.14:
  * Core: Fix 'Too many files open' errors.
  * Core: Add support for python-GeoIP for use with libtorrent 1.1.
  * Core: Fix a single proxy entry being overwritten resulting in
    no proxy set.
  * UI: Add the tracker_status translation to UIs.
  * GtkUI: Strip whitespace from infohash before checks.
  * GtkUI: Add a missed feature autofill infohash entry from
    clipboard.
  * WebUI: Backport bind interface option for server.
  * WebUI, security: Fix WebUI CSRF Vulnerability.
  * ConsoleUI: Fix a decode error comparing non-ascii (str) torrent
    names.
  * AutoAdd Plugin: Fixes for splitting magnets from file.
  * Remove the duplicate magnet extension when splitting.
- Remove deluge-libtorrent-1.1-geoip.patch: fixed upstream.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1495195200">- Update to version 1.3.15:
  * Core: Fix issues with displaying libtorrent-rasterbar single
    proxy.
  * Core: Fix libtorrent-rasterbar 1.2 trackers crashing Deluge
    UIs.
  * Core: Fix an error in torrent priorities causing file priority
    mismatch in UIs.
  * GtkUI: Fix column sort state not saved in Thinclient mode.
  * GtkUI: Fix a connection manager error with malformed ip.
  * GtkUI: Rename SystemTray/Indicator "Pause/Resume All" to
    "Pause/Resume Session".
  * GtkUI: Workaround libtorrent-rasterbar single proxy by greying
    out unused proxy types.
  * WebUI: Check render template files exist otherwise raise 404
    (CVE-2017-9031, bsc#1039815).
  * Notification Plugin: Fix webui passing string for int port
    value.
  * AutoAdd Plugin: Add WebUI preferences page detailing lack of
    configuration via WebUI.
  * Label Plugin: Add WebUI preferences page detailing how to
    configure plugin.</changelog>
  <changelog author="develop7@develop7.info" date="1530792000">- Add deluge-1.3.15-fix-preferences.patch: upstream fix for broken
  preferences window</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1560081600">- Update to version 2.0.2:
  * See /usr/share/doc/packages/deluge/CHANGELOG.md
- Rebase deluge-suse-geoip-location.patch,
  deluge-update_7z_binary.patch.</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1561204800">- Update to version 2.0.3:
  * Gtk UI
    + Fix errors running on Wayland (#3265).
    + Fix Peers Tab tooltip and context menu errors (#3266).
  * Web UI
    + Fix TypeError in Peers Tab setting country flag.
    + Fix reverse proxy header TypeError (#3260).
    + Fix request.base ?idna? codec error (#3261).
    + Fix unable to change password (#3262).
  * Extractor plugin
    + Fix potential error starting plugin.
  * Documentation
    + Fix macOS install typo.
    + Fix Windows install instructions.</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1582977600">- Add a missing requirement python3-setproctitle (boo#1164888).
- Add a missing requirement python3-Pillow (boo#1164890).
- Add a missing requirement python3-pycairo (boo#1164892).
- Use %py3_build and %py3_install macros.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1600430400">- Use legacy libtorrent-rasterbar on Tumbleweed</changelog>
  <changelog author="andy great &lt;andythe_great@pm.me&gt;" date="1604750400">- Fix Deluge not starting by changing dependency from
  python3-xdg to python3-pyxdg.</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1639656000">- Update to version 2.0.5 (changes since 2.0.3):
  * Gtk UI
    + Add detection of torrent URL on GTK UI focus.
    + Fix piecesbar crashing when enabled.
    + Remove num_blocks_cache_hits in stats.
    + Fix unhandled error with empty clipboard.
    + Add torrentdetails tabs position menu.
    + Hide pygame community banner in console.
    + Fix cmp function for None types.
    + Fix loading config with double-quotes in string.
    + Fix Status tab download speed and uploaded.
  * Web UI
    + Handle torrent add failures.
    + Add menu option to copy magnet URI.
    + Fix md5sums in torrent files breaking file listing.
    + Add country flag alt/title for accessibility.
  * Console UI
    + Fix hostlist status lookup errors.
    + Fix AttributeError setting config values.
    + Fix setting "Skip" priority.
  * Core
    + Add workaround libtorrent 2.0 file_progress error.
    + Fix allow enabling any plugin Python version.
    + Export torrent get_magnet_uri method.
    + Fix loading magnet with resume_data and no metadata.
    + Fix httpdownloader reencoding torrent file downloads.
    + Fix lt listen_interfaces not comma-separated.
    + Fix unable to remove magnet with delete_copies enabled.
    + Fix Python 3.8 compatibility.
    + Fix loading config with double-quotes in string.
    + Fix pickle loading non-ascii state error.
    + Fix creation of pidfile via command option.
    + Fix for peer.client UnicodeDecodeError.
    + Fix show_file unhandled dbus error.
  * Documentation
    + Add How-to guides about services..
  * Stats plugin
    + Fix constant session status key warnings.
    + Fix cairo error.
  * Notifications plugin
    + Fix email KeyError with status name.
    + Fix unhandled TypeErrors on Python 3.
  * Autoadd plugin
    + Fix magnet missing applied labels.
- Use the latest libtorrent-rasterbar version now.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1648728000">- Add global typelib gconf exclude, filter out unneeded and
  unwanted gconf2 runtime Requires.</changelog>
  <changelog author="Ben Greiner &lt;code@bnavigator.de&gt;" date="1655812800">- Actually needs "twisted[tls]": python-Twisted-tls on Tumbleweed</changelog>
  <changelog author="Dead Mozay &lt;dead_mozay@opensuse.org&gt;" date="1659700800">- Update to version 2.1.1 (changes since 2.1.0) (bsc#1203162, CVE-2021-3427):
  * Core:
    + Fix missing trackers added via magnet.
    + Fix handling magnets with tracker tiers.
    + Add support for SVG tracker icons.
    + Fix tracker icon error handling.
    + Fix cleaning-up tracker icon temp files.
    + Fix Plugin manager to handle new metadata 2.1.
    + Hide passwords in config logs.
    + Fix cleaning-up temp files in add_torrent_url.
    + Fix KeyError in sessionproxy after torrent delete.
    + Remove libtorrent deprecated functions.
    + Fix file_completed_alert handling.
    + Add plugin keys to get_torrents_status.
    + Add support for pygeoip dependency.
    + Add is_interface and is_interface_name to validate network
    interfaces.
    + Fix is_url and is_infohash error with None value.
    + Fix load_libintl error.
    + Add support for IPv6 in host lists.
    + Add systemd user services.
    + Fix refresh and expire the torrent status cache.
    + Fix crash when logging errors initializing gettext.
  * Web UI:
    + Fix ETA column sorting in correct order (#3413).
    + Fix defining foreground and background colors.
    + Accept charset in content-type for json messages.
    + Fix 'Complete Seen' and 'Completed' sorting.
    + Fix encoding HTML entities for torrent attributes
    to prevent XSS.
  * Gtk UI:
    + Fix download location textbox width.
    + Fix obscured port number in Connection Manager.
    + Increase connection manager default height.
    + Fix bug with setting move completed in Options tab.
    + Fix adding daemon accounts.
    + Hide account password length in log.
    + Added a torrent menu option for magnet copy.
    + Fix unable to prefetch magnet in thinclient mode.
    + Use GtkSpinner when testing open port.
    + Update About Dialog year.
    + Fix Edit Torrents dialogs close issues.
    + Fix ETA being copied to neighboring empty cells.
  * Console UI:
    + Fix curses.init_pair raise ValueError on Py3.10.
    + Swap j and k key's behavior to fit vim mode.
    + Fix torrent details status error.
    + Fix incorrect test for when a host is online.
    + Add the torrent label to info command.
  * AutoAdd:
    + Fix handling torrent decode errors.
    + Fix error dialog not being shown on error.
  * Blocklist:
    + Add frequency unit to interval label.
  * Notifications:
    + Fix UnicodeEncodeError upon non-ascii torrent name.
  * Breaking changes:
    + Python 2 support removed (Python &gt;= 3.6)
    + libtorrent minimum requirement increased (&gt;= 1.2).</changelog>
  <changelog author="Dead Mozay &lt;dead_mozay@opensuse.org&gt;" date="1660910400">- Add global typelib AyatanaAppIndicator3 exclude, filter out unneeded and
  unwanted AyatanaAppIndicator3 runtime Requires.</changelog>
</package>
<package pkgid="265256903a1d7f980cee11c04af78828a392ac246ee8fd7d13ef5bedea5a7b76" name="ecore_imf-module-scim" arch="aarch64">
  <version epoch="0" ver="1.26.3" rel="bp154.4.3.20"/>
  <changelog author="Simon Lees &lt;simonf.lees@suse.com&gt;" date="1573214400">- 1.23 Release
  * Again, the primary focus of this release has been stabilizing
    the EO library as well as an extending the set of unified API
    which is based on it. From this release onwards we also switched
    to meson as our only build system (RIP autotools, you served us
    well for a long time). The 2110 commits contain more changes to
    possible list here, but you will find improved DRM support, a new
    widget for controlling vector animations, a first step towards
    MVVM support, general bugfixes and more.
    Please see the NEWS file for more details.
  * spec file cleanup</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1579694400">- Use luajit only if available</changelog>
  <changelog author="Tomas Cech &lt;sleep_walker@opensuse.org&gt;" date="1580472000">- 1.23.3 Release
  Fixes:
  * elementary: handle case when XFIXES is not available. (T8321)
  * ecore: remove unecessary field in data structure.
  * eina: only the type need to be NULL to assume EINA_VALUE_EMPTY.
  * tests/eina: use #ifdef guard for block which can only occur inside ifdef (CID1400948)
  * mono: remove duplicated EinaFreeCb delegate
  * mono: blacklist efl_ui_text_context_menu_item_add
  * Revert "elm/genlist: don't process entire item queue on each item add"
  * tests/spec: allow for a longer timeout of the spec suite for dist build
  * travis/ci: update Fedora CI images to 31
  * ci: work around ccache segafult during setup
  * travis: update Ubuntu image to the 19.10 release
  * docs: Efl.Gfx.View
  * check: reset flags that used for legacy 'changed' cb
  * elementary: fix end of fast scroll not showing up during Efl.Ui.CollectionView scroll.
  * edje_calc: UNLIKELY changed to LIKELY.
  * elm_config: replace ecore_file_cp with ecore_file_mv
  * csharp:comma have whitespace after and none before
  * csharp: Removing a never used class. (T8417)
  * elementary: cleanup Eina_Future properly by relying on efl_future_then proper lifecycle.
  * elementary: properly handle in flight request in Efl.Ui.CollectionView.
  * elementary: watch event on the model Efl.Ui.CollectionView use directly.
  * ci: fix ccache segfault during setup on CI in release-ready build
  * evas_filter: remove shader compile error
  * Efl.Ui.Scroll_Manager: Fix indentation
  * eolian_mono: avoid keyword as a variable name
  * wl_egl : Prevent access to NULL pointer
  * eolian-cxx: Make events inherit beta info from klass.
  * Revert "elm/genlist: remove calc jobs"
  * Revert "tests/genlist: add behavior testing for nearly all genlist events"</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1582286400">- add full url to the source</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1586520000">- Drastically reduce the number of packages, the reality is
  these days most of the libs don't function without the others
  and everything we use needs all of them. Upstream is also heading
  in this direction.
- Drop avahi and elocation as upstream is phasing it out and we
  don't use them</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1588680000">- 1.24.0 Release
  * EO memory optimization improvements
  * Copy and Paste rework
  * Ecore_Wl2 work
  * Documentation work
  * Multiple other bugfixes
  * Removals
  * emotion &amp; evas: remove gstreamer 0.10 support (gstreamer 1.x support is stable)
  * escape: remove library from tree (no known reamaining user of EFL on PS3 OS)
  * ecore_x: remove support XGesture extension (deprecated, distros do no longer ship it)
  * elocation: remove beta library (never out of beta)
  * eeze: remove tizen module support from eeze sensor (unused, sensor API stays)
  * evas3d: remove support for evas 3D which was a beta all along (never out of beta)
  * Xine and vlc supportin emotion (gstreamer 1.x support is stable)</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1589457600">- 1.24.1 Release
  * edje - don't set font sizes less than 1
  * ecore_evas_x - fix maximize/unmaximize request corner case
  * ecore_evas: only define these eina errors once
  * exactness: remove no longer needed _evas_new()
  * exactness_player: do not test for delay_ms
  * evas + gl - fix callback-to-app-changes-state issue with pixel data</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1590494400">- 1.24.2
  * evas_vg_shape: return NULL in evas_vg_shape_add when the parent of shape is NULL
  * efl_ui_image: fix to call "clicked" smart callback when there is no img
  * ecore-x - ensure we fully look at all xkb events and refresh all binds
  * evas_vg_container: return NULL in evas_vg_container_add when the parent of container is NULL
  * build: ensure we set ENABLE_LUA_OLD when using a lua interpreter</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1596628800">- 1.24.3
  * evas - csd and wl csd - fix alpha zeroing to avoid framespace junk
  * evas - genetic update regions smart merge - merge v adjacent regions
  * efreet - handle runtime relocation right with default XDG_DATA_DIRS
  * edje: fix animation memory leak.
  * canvas vg: fix dangling vector containers.
  * evas vg: clean up dangling instances
  * canvas vg: fix vector file data memory leak.
  * efl gfx_path: fix memory leak.
  * efl_ui_image: fixed elm_image_preload_disabled_set api is not working when it is called before file set</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1598875200">- Disable NEON on armv6/7:
  * efl-no-neon.patch</changelog>
  <changelog author="Tomas Cech &lt;sleep_walker@opensuse.org&gt;" date="1599134400">- split out ecore_imf-module-scim to reduce dependencies of base efl package</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1603108800">- 1.25.1
  * This time around we do not have bigger changes to cover here. For the full list please look at the NEWS file, if you are interested in the details. As usual we have been working on fixing bugs, optimising our code for speed and memory footprint and adding new features.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1625659200">- Fix typo in description</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1641384000">- Drop unkown meson paramter -Demotion-loaders-disabler. Meson
  prior to 0.60 ignored it, recent meson version fails.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1644321600">- Update to 1.26.2:
  * Fix crash when doing wierd combinations of eet_write and eet_read
  * Fix elementary tests to pass
  * Fix portability of putenv/setenv for niche OS's
  * Fix ecore input to build on BSD
  * Fix svg decoding crashes for vector decode
  * Fix theme - ibar label overlay
  * Fix theme - pointer scaling and sizing
  * Fix ecore x - ensure pointer on screen when setting bounds
  * elm theme - win - fix mystery off-by-1 resize of content
  * elm theme - fix mis-named colorclass for inwin bg
  * edje entry - fix past to use shft+ins for paste and no ctl
  * edje entry - complete key handling for cut (shft+del)
  * elm theme - fix placement of procstats and volume so they dont fight
  * Evas GL dithers by default for better quality (but it's a bit slower)
  * Evas HEIF format loaded (need to remove from disabled set)
  * Default theme is now the flat theme
  * New color palette files and API
  * Improved speed of Entry appending
  * Improved performance by not rendering invisible windows</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1645099200">- Upstream theme is now called Flat rather then dark. Dark will
  reappear soon in a new package.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1645099201">- Upstream theme is now called Flat rather then dark. Dark will
  reappear soon in a new package.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1645704000">- Themes are going to recommend there icon themes as well</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1646222400">- Drop python-devel BuildRequires: not needed.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1664193600">- Update to 1.26.3 Bugfix release
  * Fix theme issues
  * Fix edje calc internal return values in some cases
  * Fix ecore-x netwm moveresize request handling
  * Fix ecore-x xkb handling to not leak
  * Fix new xkb event handling
  * Fix evas smart object to null out fields for safety
  * Fix elm null cnp object handling to not crash in odd cases
  * Fix ecore evas x11 dnd handling to not null out xdnd props
  * Fix data checkme file so relocation at runtime works again
  * Fix eina bt output to always have spaces between fields
  * Fix png loader on arm to not have rgb values when a is 0
  * Fix textgrid to guard against null glyphs
  * Fix ecore-x vblank to use current time not vlbank time
  * Fix emile to handle invalid compress types more gracefully
  * Fix compile warnings
  * Fix evas psd loader crash
  * Fix osx sample compile conf script options
  * Fix wl vsync timer to use current time not vblank time
  * Work around xwayland issue where synthetic events are not sent</changelog>
</package>
<package pkgid="cf7ad8230b58f3b686a2391384ce0ea8bc2229b2453eb62feba090418176c446" name="ecore_imf-module-scim" arch="s390x">
  <version epoch="0" ver="1.26.3" rel="bp154.4.3.20"/>
  <changelog author="Simon Lees &lt;simonf.lees@suse.com&gt;" date="1573214400">- 1.23 Release
  * Again, the primary focus of this release has been stabilizing
    the EO library as well as an extending the set of unified API
    which is based on it. From this release onwards we also switched
    to meson as our only build system (RIP autotools, you served us
    well for a long time). The 2110 commits contain more changes to
    possible list here, but you will find improved DRM support, a new
    widget for controlling vector animations, a first step towards
    MVVM support, general bugfixes and more.
    Please see the NEWS file for more details.
  * spec file cleanup</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1579694400">- Use luajit only if available</changelog>
  <changelog author="Tomas Cech &lt;sleep_walker@opensuse.org&gt;" date="1580472000">- 1.23.3 Release
  Fixes:
  * elementary: handle case when XFIXES is not available. (T8321)
  * ecore: remove unecessary field in data structure.
  * eina: only the type need to be NULL to assume EINA_VALUE_EMPTY.
  * tests/eina: use #ifdef guard for block which can only occur inside ifdef (CID1400948)
  * mono: remove duplicated EinaFreeCb delegate
  * mono: blacklist efl_ui_text_context_menu_item_add
  * Revert "elm/genlist: don't process entire item queue on each item add"
  * tests/spec: allow for a longer timeout of the spec suite for dist build
  * travis/ci: update Fedora CI images to 31
  * ci: work around ccache segafult during setup
  * travis: update Ubuntu image to the 19.10 release
  * docs: Efl.Gfx.View
  * check: reset flags that used for legacy 'changed' cb
  * elementary: fix end of fast scroll not showing up during Efl.Ui.CollectionView scroll.
  * edje_calc: UNLIKELY changed to LIKELY.
  * elm_config: replace ecore_file_cp with ecore_file_mv
  * csharp:comma have whitespace after and none before
  * csharp: Removing a never used class. (T8417)
  * elementary: cleanup Eina_Future properly by relying on efl_future_then proper lifecycle.
  * elementary: properly handle in flight request in Efl.Ui.CollectionView.
  * elementary: watch event on the model Efl.Ui.CollectionView use directly.
  * ci: fix ccache segfault during setup on CI in release-ready build
  * evas_filter: remove shader compile error
  * Efl.Ui.Scroll_Manager: Fix indentation
  * eolian_mono: avoid keyword as a variable name
  * wl_egl : Prevent access to NULL pointer
  * eolian-cxx: Make events inherit beta info from klass.
  * Revert "elm/genlist: remove calc jobs"
  * Revert "tests/genlist: add behavior testing for nearly all genlist events"</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1582286400">- add full url to the source</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1586520000">- Drastically reduce the number of packages, the reality is
  these days most of the libs don't function without the others
  and everything we use needs all of them. Upstream is also heading
  in this direction.
- Drop avahi and elocation as upstream is phasing it out and we
  don't use them</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1588680000">- 1.24.0 Release
  * EO memory optimization improvements
  * Copy and Paste rework
  * Ecore_Wl2 work
  * Documentation work
  * Multiple other bugfixes
  * Removals
  * emotion &amp; evas: remove gstreamer 0.10 support (gstreamer 1.x support is stable)
  * escape: remove library from tree (no known reamaining user of EFL on PS3 OS)
  * ecore_x: remove support XGesture extension (deprecated, distros do no longer ship it)
  * elocation: remove beta library (never out of beta)
  * eeze: remove tizen module support from eeze sensor (unused, sensor API stays)
  * evas3d: remove support for evas 3D which was a beta all along (never out of beta)
  * Xine and vlc supportin emotion (gstreamer 1.x support is stable)</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1589457600">- 1.24.1 Release
  * edje - don't set font sizes less than 1
  * ecore_evas_x - fix maximize/unmaximize request corner case
  * ecore_evas: only define these eina errors once
  * exactness: remove no longer needed _evas_new()
  * exactness_player: do not test for delay_ms
  * evas + gl - fix callback-to-app-changes-state issue with pixel data</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1590494400">- 1.24.2
  * evas_vg_shape: return NULL in evas_vg_shape_add when the parent of shape is NULL
  * efl_ui_image: fix to call "clicked" smart callback when there is no img
  * ecore-x - ensure we fully look at all xkb events and refresh all binds
  * evas_vg_container: return NULL in evas_vg_container_add when the parent of container is NULL
  * build: ensure we set ENABLE_LUA_OLD when using a lua interpreter</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1596628800">- 1.24.3
  * evas - csd and wl csd - fix alpha zeroing to avoid framespace junk
  * evas - genetic update regions smart merge - merge v adjacent regions
  * efreet - handle runtime relocation right with default XDG_DATA_DIRS
  * edje: fix animation memory leak.
  * canvas vg: fix dangling vector containers.
  * evas vg: clean up dangling instances
  * canvas vg: fix vector file data memory leak.
  * efl gfx_path: fix memory leak.
  * efl_ui_image: fixed elm_image_preload_disabled_set api is not working when it is called before file set</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1598875200">- Disable NEON on armv6/7:
  * efl-no-neon.patch</changelog>
  <changelog author="Tomas Cech &lt;sleep_walker@opensuse.org&gt;" date="1599134400">- split out ecore_imf-module-scim to reduce dependencies of base efl package</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1603108800">- 1.25.1
  * This time around we do not have bigger changes to cover here. For the full list please look at the NEWS file, if you are interested in the details. As usual we have been working on fixing bugs, optimising our code for speed and memory footprint and adding new features.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1625659200">- Fix typo in description</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1641384000">- Drop unkown meson paramter -Demotion-loaders-disabler. Meson
  prior to 0.60 ignored it, recent meson version fails.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1644321600">- Update to 1.26.2:
  * Fix crash when doing wierd combinations of eet_write and eet_read
  * Fix elementary tests to pass
  * Fix portability of putenv/setenv for niche OS's
  * Fix ecore input to build on BSD
  * Fix svg decoding crashes for vector decode
  * Fix theme - ibar label overlay
  * Fix theme - pointer scaling and sizing
  * Fix ecore x - ensure pointer on screen when setting bounds
  * elm theme - win - fix mystery off-by-1 resize of content
  * elm theme - fix mis-named colorclass for inwin bg
  * edje entry - fix past to use shft+ins for paste and no ctl
  * edje entry - complete key handling for cut (shft+del)
  * elm theme - fix placement of procstats and volume so they dont fight
  * Evas GL dithers by default for better quality (but it's a bit slower)
  * Evas HEIF format loaded (need to remove from disabled set)
  * Default theme is now the flat theme
  * New color palette files and API
  * Improved speed of Entry appending
  * Improved performance by not rendering invisible windows</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1645099200">- Upstream theme is now called Flat rather then dark. Dark will
  reappear soon in a new package.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1645099201">- Upstream theme is now called Flat rather then dark. Dark will
  reappear soon in a new package.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1645704000">- Themes are going to recommend there icon themes as well</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1646222400">- Drop python-devel BuildRequires: not needed.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1664193600">- Update to 1.26.3 Bugfix release
  * Fix theme issues
  * Fix edje calc internal return values in some cases
  * Fix ecore-x netwm moveresize request handling
  * Fix ecore-x xkb handling to not leak
  * Fix new xkb event handling
  * Fix evas smart object to null out fields for safety
  * Fix elm null cnp object handling to not crash in odd cases
  * Fix ecore evas x11 dnd handling to not null out xdnd props
  * Fix data checkme file so relocation at runtime works again
  * Fix eina bt output to always have spaces between fields
  * Fix png loader on arm to not have rgb values when a is 0
  * Fix textgrid to guard against null glyphs
  * Fix ecore-x vblank to use current time not vlbank time
  * Fix emile to handle invalid compress types more gracefully
  * Fix compile warnings
  * Fix evas psd loader crash
  * Fix osx sample compile conf script options
  * Fix wl vsync timer to use current time not vblank time
  * Work around xwayland issue where synthetic events are not sent</changelog>
</package>
<package pkgid="0f299f51304329a1fdf835636e7d5f01d11168423eda21e20ed5be6829b25764" name="ecore_imf-module-scim" arch="x86_64">
  <version epoch="0" ver="1.26.3" rel="bp154.4.3.20"/>
  <changelog author="Simon Lees &lt;simonf.lees@suse.com&gt;" date="1573214400">- 1.23 Release
  * Again, the primary focus of this release has been stabilizing
    the EO library as well as an extending the set of unified API
    which is based on it. From this release onwards we also switched
    to meson as our only build system (RIP autotools, you served us
    well for a long time). The 2110 commits contain more changes to
    possible list here, but you will find improved DRM support, a new
    widget for controlling vector animations, a first step towards
    MVVM support, general bugfixes and more.
    Please see the NEWS file for more details.
  * spec file cleanup</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1579694400">- Use luajit only if available</changelog>
  <changelog author="Tomas Cech &lt;sleep_walker@opensuse.org&gt;" date="1580472000">- 1.23.3 Release
  Fixes:
  * elementary: handle case when XFIXES is not available. (T8321)
  * ecore: remove unecessary field in data structure.
  * eina: only the type need to be NULL to assume EINA_VALUE_EMPTY.
  * tests/eina: use #ifdef guard for block which can only occur inside ifdef (CID1400948)
  * mono: remove duplicated EinaFreeCb delegate
  * mono: blacklist efl_ui_text_context_menu_item_add
  * Revert "elm/genlist: don't process entire item queue on each item add"
  * tests/spec: allow for a longer timeout of the spec suite for dist build
  * travis/ci: update Fedora CI images to 31
  * ci: work around ccache segafult during setup
  * travis: update Ubuntu image to the 19.10 release
  * docs: Efl.Gfx.View
  * check: reset flags that used for legacy 'changed' cb
  * elementary: fix end of fast scroll not showing up during Efl.Ui.CollectionView scroll.
  * edje_calc: UNLIKELY changed to LIKELY.
  * elm_config: replace ecore_file_cp with ecore_file_mv
  * csharp:comma have whitespace after and none before
  * csharp: Removing a never used class. (T8417)
  * elementary: cleanup Eina_Future properly by relying on efl_future_then proper lifecycle.
  * elementary: properly handle in flight request in Efl.Ui.CollectionView.
  * elementary: watch event on the model Efl.Ui.CollectionView use directly.
  * ci: fix ccache segfault during setup on CI in release-ready build
  * evas_filter: remove shader compile error
  * Efl.Ui.Scroll_Manager: Fix indentation
  * eolian_mono: avoid keyword as a variable name
  * wl_egl : Prevent access to NULL pointer
  * eolian-cxx: Make events inherit beta info from klass.
  * Revert "elm/genlist: remove calc jobs"
  * Revert "tests/genlist: add behavior testing for nearly all genlist events"</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1582286400">- add full url to the source</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1586520000">- Drastically reduce the number of packages, the reality is
  these days most of the libs don't function without the others
  and everything we use needs all of them. Upstream is also heading
  in this direction.
- Drop avahi and elocation as upstream is phasing it out and we
  don't use them</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1588680000">- 1.24.0 Release
  * EO memory optimization improvements
  * Copy and Paste rework
  * Ecore_Wl2 work
  * Documentation work
  * Multiple other bugfixes
  * Removals
  * emotion &amp; evas: remove gstreamer 0.10 support (gstreamer 1.x support is stable)
  * escape: remove library from tree (no known reamaining user of EFL on PS3 OS)
  * ecore_x: remove support XGesture extension (deprecated, distros do no longer ship it)
  * elocation: remove beta library (never out of beta)
  * eeze: remove tizen module support from eeze sensor (unused, sensor API stays)
  * evas3d: remove support for evas 3D which was a beta all along (never out of beta)
  * Xine and vlc supportin emotion (gstreamer 1.x support is stable)</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1589457600">- 1.24.1 Release
  * edje - don't set font sizes less than 1
  * ecore_evas_x - fix maximize/unmaximize request corner case
  * ecore_evas: only define these eina errors once
  * exactness: remove no longer needed _evas_new()
  * exactness_player: do not test for delay_ms
  * evas + gl - fix callback-to-app-changes-state issue with pixel data</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1590494400">- 1.24.2
  * evas_vg_shape: return NULL in evas_vg_shape_add when the parent of shape is NULL
  * efl_ui_image: fix to call "clicked" smart callback when there is no img
  * ecore-x - ensure we fully look at all xkb events and refresh all binds
  * evas_vg_container: return NULL in evas_vg_container_add when the parent of container is NULL
  * build: ensure we set ENABLE_LUA_OLD when using a lua interpreter</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1596628800">- 1.24.3
  * evas - csd and wl csd - fix alpha zeroing to avoid framespace junk
  * evas - genetic update regions smart merge - merge v adjacent regions
  * efreet - handle runtime relocation right with default XDG_DATA_DIRS
  * edje: fix animation memory leak.
  * canvas vg: fix dangling vector containers.
  * evas vg: clean up dangling instances
  * canvas vg: fix vector file data memory leak.
  * efl gfx_path: fix memory leak.
  * efl_ui_image: fixed elm_image_preload_disabled_set api is not working when it is called before file set</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1598875200">- Disable NEON on armv6/7:
  * efl-no-neon.patch</changelog>
  <changelog author="Tomas Cech &lt;sleep_walker@opensuse.org&gt;" date="1599134400">- split out ecore_imf-module-scim to reduce dependencies of base efl package</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1603108800">- 1.25.1
  * This time around we do not have bigger changes to cover here. For the full list please look at the NEWS file, if you are interested in the details. As usual we have been working on fixing bugs, optimising our code for speed and memory footprint and adding new features.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1625659200">- Fix typo in description</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1641384000">- Drop unkown meson paramter -Demotion-loaders-disabler. Meson
  prior to 0.60 ignored it, recent meson version fails.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1644321600">- Update to 1.26.2:
  * Fix crash when doing wierd combinations of eet_write and eet_read
  * Fix elementary tests to pass
  * Fix portability of putenv/setenv for niche OS's
  * Fix ecore input to build on BSD
  * Fix svg decoding crashes for vector decode
  * Fix theme - ibar label overlay
  * Fix theme - pointer scaling and sizing
  * Fix ecore x - ensure pointer on screen when setting bounds
  * elm theme - win - fix mystery off-by-1 resize of content
  * elm theme - fix mis-named colorclass for inwin bg
  * edje entry - fix past to use shft+ins for paste and no ctl
  * edje entry - complete key handling for cut (shft+del)
  * elm theme - fix placement of procstats and volume so they dont fight
  * Evas GL dithers by default for better quality (but it's a bit slower)
  * Evas HEIF format loaded (need to remove from disabled set)
  * Default theme is now the flat theme
  * New color palette files and API
  * Improved speed of Entry appending
  * Improved performance by not rendering invisible windows</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1645099200">- Upstream theme is now called Flat rather then dark. Dark will
  reappear soon in a new package.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1645099201">- Upstream theme is now called Flat rather then dark. Dark will
  reappear soon in a new package.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1645704000">- Themes are going to recommend there icon themes as well</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1646222400">- Drop python-devel BuildRequires: not needed.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1664193600">- Update to 1.26.3 Bugfix release
  * Fix theme issues
  * Fix edje calc internal return values in some cases
  * Fix ecore-x netwm moveresize request handling
  * Fix ecore-x xkb handling to not leak
  * Fix new xkb event handling
  * Fix evas smart object to null out fields for safety
  * Fix elm null cnp object handling to not crash in odd cases
  * Fix ecore evas x11 dnd handling to not null out xdnd props
  * Fix data checkme file so relocation at runtime works again
  * Fix eina bt output to always have spaces between fields
  * Fix png loader on arm to not have rgb values when a is 0
  * Fix textgrid to guard against null glyphs
  * Fix ecore-x vblank to use current time not vlbank time
  * Fix emile to handle invalid compress types more gracefully
  * Fix compile warnings
  * Fix evas psd loader crash
  * Fix osx sample compile conf script options
  * Fix wl vsync timer to use current time not vblank time
  * Work around xwayland issue where synthetic events are not sent</changelog>
</package>
<package pkgid="f0105baaaa3f34a92e5b41b674760cda0595268035309190f357dfc188ff6711" name="efitools" arch="aarch64">
  <version epoch="0" ver="1.9.2" rel="bp154.2.1"/>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1608724800">- initial import (version 1.9.2)
  + Only package the userspace tools</changelog>
</package>
<package pkgid="a871202a8b952edb7700fc279faaa511797b3eac2a8d899e4c382bf1baf6511a" name="efitools" arch="i586">
  <version epoch="0" ver="1.9.2" rel="bp154.2.1"/>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1608724800">- initial import (version 1.9.2)
  + Only package the userspace tools</changelog>
</package>
<package pkgid="27c893a985b31506b13f2266198476c56168b3eccad2fef0e83c2d09c3a647fd" name="efitools" arch="src">
  <version epoch="0" ver="1.9.2" rel="bp154.2.1"/>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1608724800">- initial import (version 1.9.2)
  + Only package the userspace tools</changelog>
</package>
<package pkgid="f88c8f1f0c7c9906ddbeb420b3ce38a4c34c71ddeff5fc69401908ac4d7627b4" name="efitools" arch="x86_64">
  <version epoch="0" ver="1.9.2" rel="bp154.2.1"/>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1608724800">- initial import (version 1.9.2)
  + Only package the userspace tools</changelog>
</package>
<package pkgid="d37cb1c36f36d8363500e49cd5e43b6d8a1af425a84fdea44607aa48661d7802" name="efl" arch="aarch64">
  <version epoch="0" ver="1.26.3" rel="bp154.4.3.20"/>
  <changelog author="Simon Lees &lt;simonf.lees@suse.com&gt;" date="1573214400">- 1.23 Release
  * Again, the primary focus of this release has been stabilizing
    the EO library as well as an extending the set of unified API
    which is based on it. From this release onwards we also switched
    to meson as our only build system (RIP autotools, you served us
    well for a long time). The 2110 commits contain more changes to
    possible list here, but you will find improved DRM support, a new
    widget for controlling vector animations, a first step towards
    MVVM support, general bugfixes and more.
    Please see the NEWS file for more details.
  * spec file cleanup</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1579694400">- Use luajit only if available</changelog>
  <changelog author="Tomas Cech &lt;sleep_walker@opensuse.org&gt;" date="1580472000">- 1.23.3 Release
  Fixes:
  * elementary: handle case when XFIXES is not available. (T8321)
  * ecore: remove unecessary field in data structure.
  * eina: only the type need to be NULL to assume EINA_VALUE_EMPTY.
  * tests/eina: use #ifdef guard for block which can only occur inside ifdef (CID1400948)
  * mono: remove duplicated EinaFreeCb delegate
  * mono: blacklist efl_ui_text_context_menu_item_add
  * Revert "elm/genlist: don't process entire item queue on each item add"
  * tests/spec: allow for a longer timeout of the spec suite for dist build
  * travis/ci: update Fedora CI images to 31
  * ci: work around ccache segafult during setup
  * travis: update Ubuntu image to the 19.10 release
  * docs: Efl.Gfx.View
  * check: reset flags that used for legacy 'changed' cb
  * elementary: fix end of fast scroll not showing up during Efl.Ui.CollectionView scroll.
  * edje_calc: UNLIKELY changed to LIKELY.
  * elm_config: replace ecore_file_cp with ecore_file_mv
  * csharp:comma have whitespace after and none before
  * csharp: Removing a never used class. (T8417)
  * elementary: cleanup Eina_Future properly by relying on efl_future_then proper lifecycle.
  * elementary: properly handle in flight request in Efl.Ui.CollectionView.
  * elementary: watch event on the model Efl.Ui.CollectionView use directly.
  * ci: fix ccache segfault during setup on CI in release-ready build
  * evas_filter: remove shader compile error
  * Efl.Ui.Scroll_Manager: Fix indentation
  * eolian_mono: avoid keyword as a variable name
  * wl_egl : Prevent access to NULL pointer
  * eolian-cxx: Make events inherit beta info from klass.
  * Revert "elm/genlist: remove calc jobs"
  * Revert "tests/genlist: add behavior testing for nearly all genlist events"</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1582286400">- add full url to the source</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1586520000">- Drastically reduce the number of packages, the reality is
  these days most of the libs don't function without the others
  and everything we use needs all of them. Upstream is also heading
  in this direction.
- Drop avahi and elocation as upstream is phasing it out and we
  don't use them</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1588680000">- 1.24.0 Release
  * EO memory optimization improvements
  * Copy and Paste rework
  * Ecore_Wl2 work
  * Documentation work
  * Multiple other bugfixes
  * Removals
  * emotion &amp; evas: remove gstreamer 0.10 support (gstreamer 1.x support is stable)
  * escape: remove library from tree (no known reamaining user of EFL on PS3 OS)
  * ecore_x: remove support XGesture extension (deprecated, distros do no longer ship it)
  * elocation: remove beta library (never out of beta)
  * eeze: remove tizen module support from eeze sensor (unused, sensor API stays)
  * evas3d: remove support for evas 3D which was a beta all along (never out of beta)
  * Xine and vlc supportin emotion (gstreamer 1.x support is stable)</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1589457600">- 1.24.1 Release
  * edje - don't set font sizes less than 1
  * ecore_evas_x - fix maximize/unmaximize request corner case
  * ecore_evas: only define these eina errors once
  * exactness: remove no longer needed _evas_new()
  * exactness_player: do not test for delay_ms
  * evas + gl - fix callback-to-app-changes-state issue with pixel data</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1590494400">- 1.24.2
  * evas_vg_shape: return NULL in evas_vg_shape_add when the parent of shape is NULL
  * efl_ui_image: fix to call "clicked" smart callback when there is no img
  * ecore-x - ensure we fully look at all xkb events and refresh all binds
  * evas_vg_container: return NULL in evas_vg_container_add when the parent of container is NULL
  * build: ensure we set ENABLE_LUA_OLD when using a lua interpreter</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1596628800">- 1.24.3
  * evas - csd and wl csd - fix alpha zeroing to avoid framespace junk
  * evas - genetic update regions smart merge - merge v adjacent regions
  * efreet - handle runtime relocation right with default XDG_DATA_DIRS
  * edje: fix animation memory leak.
  * canvas vg: fix dangling vector containers.
  * evas vg: clean up dangling instances
  * canvas vg: fix vector file data memory leak.
  * efl gfx_path: fix memory leak.
  * efl_ui_image: fixed elm_image_preload_disabled_set api is not working when it is called before file set</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1598875200">- Disable NEON on armv6/7:
  * efl-no-neon.patch</changelog>
  <changelog author="Tomas Cech &lt;sleep_walker@opensuse.org&gt;" date="1599134400">- split out ecore_imf-module-scim to reduce dependencies of base efl package</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1603108800">- 1.25.1
  * This time around we do not have bigger changes to cover here. For the full list please look at the NEWS file, if you are interested in the details. As usual we have been working on fixing bugs, optimising our code for speed and memory footprint and adding new features.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1625659200">- Fix typo in description</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1641384000">- Drop unkown meson paramter -Demotion-loaders-disabler. Meson
  prior to 0.60 ignored it, recent meson version fails.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1644321600">- Update to 1.26.2:
  * Fix crash when doing wierd combinations of eet_write and eet_read
  * Fix elementary tests to pass
  * Fix portability of putenv/setenv for niche OS's
  * Fix ecore input to build on BSD
  * Fix svg decoding crashes for vector decode
  * Fix theme - ibar label overlay
  * Fix theme - pointer scaling and sizing
  * Fix ecore x - ensure pointer on screen when setting bounds
  * elm theme - win - fix mystery off-by-1 resize of content
  * elm theme - fix mis-named colorclass for inwin bg
  * edje entry - fix past to use shft+ins for paste and no ctl
  * edje entry - complete key handling for cut (shft+del)
  * elm theme - fix placement of procstats and volume so they dont fight
  * Evas GL dithers by default for better quality (but it's a bit slower)
  * Evas HEIF format loaded (need to remove from disabled set)
  * Default theme is now the flat theme
  * New color palette files and API
  * Improved speed of Entry appending
  * Improved performance by not rendering invisible windows</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1645099200">- Upstream theme is now called Flat rather then dark. Dark will
  reappear soon in a new package.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1645099201">- Upstream theme is now called Flat rather then dark. Dark will
  reappear soon in a new package.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1645704000">- Themes are going to recommend there icon themes as well</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1646222400">- Drop python-devel BuildRequires: not needed.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1664193600">- Update to 1.26.3 Bugfix release
  * Fix theme issues
  * Fix edje calc internal return values in some cases
  * Fix ecore-x netwm moveresize request handling
  * Fix ecore-x xkb handling to not leak
  * Fix new xkb event handling
  * Fix evas smart object to null out fields for safety
  * Fix elm null cnp object handling to not crash in odd cases
  * Fix ecore evas x11 dnd handling to not null out xdnd props
  * Fix data checkme file so relocation at runtime works again
  * Fix eina bt output to always have spaces between fields
  * Fix png loader on arm to not have rgb values when a is 0
  * Fix textgrid to guard against null glyphs
  * Fix ecore-x vblank to use current time not vlbank time
  * Fix emile to handle invalid compress types more gracefully
  * Fix compile warnings
  * Fix evas psd loader crash
  * Fix osx sample compile conf script options
  * Fix wl vsync timer to use current time not vblank time
  * Work around xwayland issue where synthetic events are not sent</changelog>
</package>
<package pkgid="70a4ad0f87925b11e771a8fbffee1de78620860f1b93b8e37ab2ab2e22bd439b" name="efl" arch="s390x">
  <version epoch="0" ver="1.26.3" rel="bp154.4.3.20"/>
  <changelog author="Simon Lees &lt;simonf.lees@suse.com&gt;" date="1573214400">- 1.23 Release
  * Again, the primary focus of this release has been stabilizing
    the EO library as well as an extending the set of unified API
    which is based on it. From this release onwards we also switched
    to meson as our only build system (RIP autotools, you served us
    well for a long time). The 2110 commits contain more changes to
    possible list here, but you will find improved DRM support, a new
    widget for controlling vector animations, a first step towards
    MVVM support, general bugfixes and more.
    Please see the NEWS file for more details.
  * spec file cleanup</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1579694400">- Use luajit only if available</changelog>
  <changelog author="Tomas Cech &lt;sleep_walker@opensuse.org&gt;" date="1580472000">- 1.23.3 Release
  Fixes:
  * elementary: handle case when XFIXES is not available. (T8321)
  * ecore: remove unecessary field in data structure.
  * eina: only the type need to be NULL to assume EINA_VALUE_EMPTY.
  * tests/eina: use #ifdef guard for block which can only occur inside ifdef (CID1400948)
  * mono: remove duplicated EinaFreeCb delegate
  * mono: blacklist efl_ui_text_context_menu_item_add
  * Revert "elm/genlist: don't process entire item queue on each item add"
  * tests/spec: allow for a longer timeout of the spec suite for dist build
  * travis/ci: update Fedora CI images to 31
  * ci: work around ccache segafult during setup
  * travis: update Ubuntu image to the 19.10 release
  * docs: Efl.Gfx.View
  * check: reset flags that used for legacy 'changed' cb
  * elementary: fix end of fast scroll not showing up during Efl.Ui.CollectionView scroll.
  * edje_calc: UNLIKELY changed to LIKELY.
  * elm_config: replace ecore_file_cp with ecore_file_mv
  * csharp:comma have whitespace after and none before
  * csharp: Removing a never used class. (T8417)
  * elementary: cleanup Eina_Future properly by relying on efl_future_then proper lifecycle.
  * elementary: properly handle in flight request in Efl.Ui.CollectionView.
  * elementary: watch event on the model Efl.Ui.CollectionView use directly.
  * ci: fix ccache segfault during setup on CI in release-ready build
  * evas_filter: remove shader compile error
  * Efl.Ui.Scroll_Manager: Fix indentation
  * eolian_mono: avoid keyword as a variable name
  * wl_egl : Prevent access to NULL pointer
  * eolian-cxx: Make events inherit beta info from klass.
  * Revert "elm/genlist: remove calc jobs"
  * Revert "tests/genlist: add behavior testing for nearly all genlist events"</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1582286400">- add full url to the source</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1586520000">- Drastically reduce the number of packages, the reality is
  these days most of the libs don't function without the others
  and everything we use needs all of them. Upstream is also heading
  in this direction.
- Drop avahi and elocation as upstream is phasing it out and we
  don't use them</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1588680000">- 1.24.0 Release
  * EO memory optimization improvements
  * Copy and Paste rework
  * Ecore_Wl2 work
  * Documentation work
  * Multiple other bugfixes
  * Removals
  * emotion &amp; evas: remove gstreamer 0.10 support (gstreamer 1.x support is stable)
  * escape: remove library from tree (no known reamaining user of EFL on PS3 OS)
  * ecore_x: remove support XGesture extension (deprecated, distros do no longer ship it)
  * elocation: remove beta library (never out of beta)
  * eeze: remove tizen module support from eeze sensor (unused, sensor API stays)
  * evas3d: remove support for evas 3D which was a beta all along (never out of beta)
  * Xine and vlc supportin emotion (gstreamer 1.x support is stable)</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1589457600">- 1.24.1 Release
  * edje - don't set font sizes less than 1
  * ecore_evas_x - fix maximize/unmaximize request corner case
  * ecore_evas: only define these eina errors once
  * exactness: remove no longer needed _evas_new()
  * exactness_player: do not test for delay_ms
  * evas + gl - fix callback-to-app-changes-state issue with pixel data</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1590494400">- 1.24.2
  * evas_vg_shape: return NULL in evas_vg_shape_add when the parent of shape is NULL
  * efl_ui_image: fix to call "clicked" smart callback when there is no img
  * ecore-x - ensure we fully look at all xkb events and refresh all binds
  * evas_vg_container: return NULL in evas_vg_container_add when the parent of container is NULL
  * build: ensure we set ENABLE_LUA_OLD when using a lua interpreter</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1596628800">- 1.24.3
  * evas - csd and wl csd - fix alpha zeroing to avoid framespace junk
  * evas - genetic update regions smart merge - merge v adjacent regions
  * efreet - handle runtime relocation right with default XDG_DATA_DIRS
  * edje: fix animation memory leak.
  * canvas vg: fix dangling vector containers.
  * evas vg: clean up dangling instances
  * canvas vg: fix vector file data memory leak.
  * efl gfx_path: fix memory leak.
  * efl_ui_image: fixed elm_image_preload_disabled_set api is not working when it is called before file set</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1598875200">- Disable NEON on armv6/7:
  * efl-no-neon.patch</changelog>
  <changelog author="Tomas Cech &lt;sleep_walker@opensuse.org&gt;" date="1599134400">- split out ecore_imf-module-scim to reduce dependencies of base efl package</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1603108800">- 1.25.1
  * This time around we do not have bigger changes to cover here. For the full list please look at the NEWS file, if you are interested in the details. As usual we have been working on fixing bugs, optimising our code for speed and memory footprint and adding new features.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1625659200">- Fix typo in description</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1641384000">- Drop unkown meson paramter -Demotion-loaders-disabler. Meson
  prior to 0.60 ignored it, recent meson version fails.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1644321600">- Update to 1.26.2:
  * Fix crash when doing wierd combinations of eet_write and eet_read
  * Fix elementary tests to pass
  * Fix portability of putenv/setenv for niche OS's
  * Fix ecore input to build on BSD
  * Fix svg decoding crashes for vector decode
  * Fix theme - ibar label overlay
  * Fix theme - pointer scaling and sizing
  * Fix ecore x - ensure pointer on screen when setting bounds
  * elm theme - win - fix mystery off-by-1 resize of content
  * elm theme - fix mis-named colorclass for inwin bg
  * edje entry - fix past to use shft+ins for paste and no ctl
  * edje entry - complete key handling for cut (shft+del)
  * elm theme - fix placement of procstats and volume so they dont fight
  * Evas GL dithers by default for better quality (but it's a bit slower)
  * Evas HEIF format loaded (need to remove from disabled set)
  * Default theme is now the flat theme
  * New color palette files and API
  * Improved speed of Entry appending
  * Improved performance by not rendering invisible windows</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1645099200">- Upstream theme is now called Flat rather then dark. Dark will
  reappear soon in a new package.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1645099201">- Upstream theme is now called Flat rather then dark. Dark will
  reappear soon in a new package.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1645704000">- Themes are going to recommend there icon themes as well</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1646222400">- Drop python-devel BuildRequires: not needed.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1664193600">- Update to 1.26.3 Bugfix release
  * Fix theme issues
  * Fix edje calc internal return values in some cases
  * Fix ecore-x netwm moveresize request handling
  * Fix ecore-x xkb handling to not leak
  * Fix new xkb event handling
  * Fix evas smart object to null out fields for safety
  * Fix elm null cnp object handling to not crash in odd cases
  * Fix ecore evas x11 dnd handling to not null out xdnd props
  * Fix data checkme file so relocation at runtime works again
  * Fix eina bt output to always have spaces between fields
  * Fix png loader on arm to not have rgb values when a is 0
  * Fix textgrid to guard against null glyphs
  * Fix ecore-x vblank to use current time not vlbank time
  * Fix emile to handle invalid compress types more gracefully
  * Fix compile warnings
  * Fix evas psd loader crash
  * Fix osx sample compile conf script options
  * Fix wl vsync timer to use current time not vblank time
  * Work around xwayland issue where synthetic events are not sent</changelog>
</package>
<package pkgid="142fb430bcc75fba86711982f03c8fd37cf5847513cd12c4436169e56115bbb0" name="efl" arch="src">
  <version epoch="0" ver="1.26.3" rel="bp154.4.3.20"/>
  <changelog author="Simon Lees &lt;simonf.lees@suse.com&gt;" date="1573214400">- 1.23 Release
  * Again, the primary focus of this release has been stabilizing
    the EO library as well as an extending the set of unified API
    which is based on it. From this release onwards we also switched
    to meson as our only build system (RIP autotools, you served us
    well for a long time). The 2110 commits contain more changes to
    possible list here, but you will find improved DRM support, a new
    widget for controlling vector animations, a first step towards
    MVVM support, general bugfixes and more.
    Please see the NEWS file for more details.
  * spec file cleanup</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1579694400">- Use luajit only if available</changelog>
  <changelog author="Tomas Cech &lt;sleep_walker@opensuse.org&gt;" date="1580472000">- 1.23.3 Release
  Fixes:
  * elementary: handle case when XFIXES is not available. (T8321)
  * ecore: remove unecessary field in data structure.
  * eina: only the type need to be NULL to assume EINA_VALUE_EMPTY.
  * tests/eina: use #ifdef guard for block which can only occur inside ifdef (CID1400948)
  * mono: remove duplicated EinaFreeCb delegate
  * mono: blacklist efl_ui_text_context_menu_item_add
  * Revert "elm/genlist: don't process entire item queue on each item add"
  * tests/spec: allow for a longer timeout of the spec suite for dist build
  * travis/ci: update Fedora CI images to 31
  * ci: work around ccache segafult during setup
  * travis: update Ubuntu image to the 19.10 release
  * docs: Efl.Gfx.View
  * check: reset flags that used for legacy 'changed' cb
  * elementary: fix end of fast scroll not showing up during Efl.Ui.CollectionView scroll.
  * edje_calc: UNLIKELY changed to LIKELY.
  * elm_config: replace ecore_file_cp with ecore_file_mv
  * csharp:comma have whitespace after and none before
  * csharp: Removing a never used class. (T8417)
  * elementary: cleanup Eina_Future properly by relying on efl_future_then proper lifecycle.
  * elementary: properly handle in flight request in Efl.Ui.CollectionView.
  * elementary: watch event on the model Efl.Ui.CollectionView use directly.
  * ci: fix ccache segfault during setup on CI in release-ready build
  * evas_filter: remove shader compile error
  * Efl.Ui.Scroll_Manager: Fix indentation
  * eolian_mono: avoid keyword as a variable name
  * wl_egl : Prevent access to NULL pointer
  * eolian-cxx: Make events inherit beta info from klass.
  * Revert "elm/genlist: remove calc jobs"
  * Revert "tests/genlist: add behavior testing for nearly all genlist events"</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1582286400">- add full url to the source</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1586520000">- Drastically reduce the number of packages, the reality is
  these days most of the libs don't function without the others
  and everything we use needs all of them. Upstream is also heading
  in this direction.
- Drop avahi and elocation as upstream is phasing it out and we
  don't use them</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1588680000">- 1.24.0 Release
  * EO memory optimization improvements
  * Copy and Paste rework
  * Ecore_Wl2 work
  * Documentation work
  * Multiple other bugfixes
  * Removals
  * emotion &amp; evas: remove gstreamer 0.10 support (gstreamer 1.x support is stable)
  * escape: remove library from tree (no known reamaining user of EFL on PS3 OS)
  * ecore_x: remove support XGesture extension (deprecated, distros do no longer ship it)
  * elocation: remove beta library (never out of beta)
  * eeze: remove tizen module support from eeze sensor (unused, sensor API stays)
  * evas3d: remove support for evas 3D which was a beta all along (never out of beta)
  * Xine and vlc supportin emotion (gstreamer 1.x support is stable)</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1589457600">- 1.24.1 Release
  * edje - don't set font sizes less than 1
  * ecore_evas_x - fix maximize/unmaximize request corner case
  * ecore_evas: only define these eina errors once
  * exactness: remove no longer needed _evas_new()
  * exactness_player: do not test for delay_ms
  * evas + gl - fix callback-to-app-changes-state issue with pixel data</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1590494400">- 1.24.2
  * evas_vg_shape: return NULL in evas_vg_shape_add when the parent of shape is NULL
  * efl_ui_image: fix to call "clicked" smart callback when there is no img
  * ecore-x - ensure we fully look at all xkb events and refresh all binds
  * evas_vg_container: return NULL in evas_vg_container_add when the parent of container is NULL
  * build: ensure we set ENABLE_LUA_OLD when using a lua interpreter</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1596628800">- 1.24.3
  * evas - csd and wl csd - fix alpha zeroing to avoid framespace junk
  * evas - genetic update regions smart merge - merge v adjacent regions
  * efreet - handle runtime relocation right with default XDG_DATA_DIRS
  * edje: fix animation memory leak.
  * canvas vg: fix dangling vector containers.
  * evas vg: clean up dangling instances
  * canvas vg: fix vector file data memory leak.
  * efl gfx_path: fix memory leak.
  * efl_ui_image: fixed elm_image_preload_disabled_set api is not working when it is called before file set</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1598875200">- Disable NEON on armv6/7:
  * efl-no-neon.patch</changelog>
  <changelog author="Tomas Cech &lt;sleep_walker@opensuse.org&gt;" date="1599134400">- split out ecore_imf-module-scim to reduce dependencies of base efl package</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1603108800">- 1.25.1
  * This time around we do not have bigger changes to cover here. For the full list please look at the NEWS file, if you are interested in the details. As usual we have been working on fixing bugs, optimising our code for speed and memory footprint and adding new features.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1625659200">- Fix typo in description</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1641384000">- Drop unkown meson paramter -Demotion-loaders-disabler. Meson
  prior to 0.60 ignored it, recent meson version fails.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1644321600">- Update to 1.26.2:
  * Fix crash when doing wierd combinations of eet_write and eet_read
  * Fix elementary tests to pass
  * Fix portability of putenv/setenv for niche OS's
  * Fix ecore input to build on BSD
  * Fix svg decoding crashes for vector decode
  * Fix theme - ibar label overlay
  * Fix theme - pointer scaling and sizing
  * Fix ecore x - ensure pointer on screen when setting bounds
  * elm theme - win - fix mystery off-by-1 resize of content
  * elm theme - fix mis-named colorclass for inwin bg
  * edje entry - fix past to use shft+ins for paste and no ctl
  * edje entry - complete key handling for cut (shft+del)
  * elm theme - fix placement of procstats and volume so they dont fight
  * Evas GL dithers by default for better quality (but it's a bit slower)
  * Evas HEIF format loaded (need to remove from disabled set)
  * Default theme is now the flat theme
  * New color palette files and API
  * Improved speed of Entry appending
  * Improved performance by not rendering invisible windows</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1645099200">- Upstream theme is now called Flat rather then dark. Dark will
  reappear soon in a new package.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1645099201">- Upstream theme is now called Flat rather then dark. Dark will
  reappear soon in a new package.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1645704000">- Themes are going to recommend there icon themes as well</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1646222400">- Drop python-devel BuildRequires: not needed.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1664193600">- Update to 1.26.3 Bugfix release
  * Fix theme issues
  * Fix edje calc internal return values in some cases
  * Fix ecore-x netwm moveresize request handling
  * Fix ecore-x xkb handling to not leak
  * Fix new xkb event handling
  * Fix evas smart object to null out fields for safety
  * Fix elm null cnp object handling to not crash in odd cases
  * Fix ecore evas x11 dnd handling to not null out xdnd props
  * Fix data checkme file so relocation at runtime works again
  * Fix eina bt output to always have spaces between fields
  * Fix png loader on arm to not have rgb values when a is 0
  * Fix textgrid to guard against null glyphs
  * Fix ecore-x vblank to use current time not vlbank time
  * Fix emile to handle invalid compress types more gracefully
  * Fix compile warnings
  * Fix evas psd loader crash
  * Fix osx sample compile conf script options
  * Fix wl vsync timer to use current time not vblank time
  * Work around xwayland issue where synthetic events are not sent</changelog>
</package>
<package pkgid="91a85ee68876d999e63a7449cac840ef12a617a8cd540d62642c435eafd54b5a" name="efl" arch="x86_64">
  <version epoch="0" ver="1.26.3" rel="bp154.4.3.20"/>
  <changelog author="Simon Lees &lt;simonf.lees@suse.com&gt;" date="1573214400">- 1.23 Release
  * Again, the primary focus of this release has been stabilizing
    the EO library as well as an extending the set of unified API
    which is based on it. From this release onwards we also switched
    to meson as our only build system (RIP autotools, you served us
    well for a long time). The 2110 commits contain more changes to
    possible list here, but you will find improved DRM support, a new
    widget for controlling vector animations, a first step towards
    MVVM support, general bugfixes and more.
    Please see the NEWS file for more details.
  * spec file cleanup</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1579694400">- Use luajit only if available</changelog>
  <changelog author="Tomas Cech &lt;sleep_walker@opensuse.org&gt;" date="1580472000">- 1.23.3 Release
  Fixes:
  * elementary: handle case when XFIXES is not available. (T8321)
  * ecore: remove unecessary field in data structure.
  * eina: only the type need to be NULL to assume EINA_VALUE_EMPTY.
  * tests/eina: use #ifdef guard for block which can only occur inside ifdef (CID1400948)
  * mono: remove duplicated EinaFreeCb delegate
  * mono: blacklist efl_ui_text_context_menu_item_add
  * Revert "elm/genlist: don't process entire item queue on each item add"
  * tests/spec: allow for a longer timeout of the spec suite for dist build
  * travis/ci: update Fedora CI images to 31
  * ci: work around ccache segafult during setup
  * travis: update Ubuntu image to the 19.10 release
  * docs: Efl.Gfx.View
  * check: reset flags that used for legacy 'changed' cb
  * elementary: fix end of fast scroll not showing up during Efl.Ui.CollectionView scroll.
  * edje_calc: UNLIKELY changed to LIKELY.
  * elm_config: replace ecore_file_cp with ecore_file_mv
  * csharp:comma have whitespace after and none before
  * csharp: Removing a never used class. (T8417)
  * elementary: cleanup Eina_Future properly by relying on efl_future_then proper lifecycle.
  * elementary: properly handle in flight request in Efl.Ui.CollectionView.
  * elementary: watch event on the model Efl.Ui.CollectionView use directly.
  * ci: fix ccache segfault during setup on CI in release-ready build
  * evas_filter: remove shader compile error
  * Efl.Ui.Scroll_Manager: Fix indentation
  * eolian_mono: avoid keyword as a variable name
  * wl_egl : Prevent access to NULL pointer
  * eolian-cxx: Make events inherit beta info from klass.
  * Revert "elm/genlist: remove calc jobs"
  * Revert "tests/genlist: add behavior testing for nearly all genlist events"</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1582286400">- add full url to the source</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1586520000">- Drastically reduce the number of packages, the reality is
  these days most of the libs don't function without the others
  and everything we use needs all of them. Upstream is also heading
  in this direction.
- Drop avahi and elocation as upstream is phasing it out and we
  don't use them</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1588680000">- 1.24.0 Release
  * EO memory optimization improvements
  * Copy and Paste rework
  * Ecore_Wl2 work
  * Documentation work
  * Multiple other bugfixes
  * Removals
  * emotion &amp; evas: remove gstreamer 0.10 support (gstreamer 1.x support is stable)
  * escape: remove library from tree (no known reamaining user of EFL on PS3 OS)
  * ecore_x: remove support XGesture extension (deprecated, distros do no longer ship it)
  * elocation: remove beta library (never out of beta)
  * eeze: remove tizen module support from eeze sensor (unused, sensor API stays)
  * evas3d: remove support for evas 3D which was a beta all along (never out of beta)
  * Xine and vlc supportin emotion (gstreamer 1.x support is stable)</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1589457600">- 1.24.1 Release
  * edje - don't set font sizes less than 1
  * ecore_evas_x - fix maximize/unmaximize request corner case
  * ecore_evas: only define these eina errors once
  * exactness: remove no longer needed _evas_new()
  * exactness_player: do not test for delay_ms
  * evas + gl - fix callback-to-app-changes-state issue with pixel data</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1590494400">- 1.24.2
  * evas_vg_shape: return NULL in evas_vg_shape_add when the parent of shape is NULL
  * efl_ui_image: fix to call "clicked" smart callback when there is no img
  * ecore-x - ensure we fully look at all xkb events and refresh all binds
  * evas_vg_container: return NULL in evas_vg_container_add when the parent of container is NULL
  * build: ensure we set ENABLE_LUA_OLD when using a lua interpreter</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1596628800">- 1.24.3
  * evas - csd and wl csd - fix alpha zeroing to avoid framespace junk
  * evas - genetic update regions smart merge - merge v adjacent regions
  * efreet - handle runtime relocation right with default XDG_DATA_DIRS
  * edje: fix animation memory leak.
  * canvas vg: fix dangling vector containers.
  * evas vg: clean up dangling instances
  * canvas vg: fix vector file data memory leak.
  * efl gfx_path: fix memory leak.
  * efl_ui_image: fixed elm_image_preload_disabled_set api is not working when it is called before file set</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1598875200">- Disable NEON on armv6/7:
  * efl-no-neon.patch</changelog>
  <changelog author="Tomas Cech &lt;sleep_walker@opensuse.org&gt;" date="1599134400">- split out ecore_imf-module-scim to reduce dependencies of base efl package</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1603108800">- 1.25.1
  * This time around we do not have bigger changes to cover here. For the full list please look at the NEWS file, if you are interested in the details. As usual we have been working on fixing bugs, optimising our code for speed and memory footprint and adding new features.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1625659200">- Fix typo in description</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1641384000">- Drop unkown meson paramter -Demotion-loaders-disabler. Meson
  prior to 0.60 ignored it, recent meson version fails.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1644321600">- Update to 1.26.2:
  * Fix crash when doing wierd combinations of eet_write and eet_read
  * Fix elementary tests to pass
  * Fix portability of putenv/setenv for niche OS's
  * Fix ecore input to build on BSD
  * Fix svg decoding crashes for vector decode
  * Fix theme - ibar label overlay
  * Fix theme - pointer scaling and sizing
  * Fix ecore x - ensure pointer on screen when setting bounds
  * elm theme - win - fix mystery off-by-1 resize of content
  * elm theme - fix mis-named colorclass for inwin bg
  * edje entry - fix past to use shft+ins for paste and no ctl
  * edje entry - complete key handling for cut (shft+del)
  * elm theme - fix placement of procstats and volume so they dont fight
  * Evas GL dithers by default for better quality (but it's a bit slower)
  * Evas HEIF format loaded (need to remove from disabled set)
  * Default theme is now the flat theme
  * New color palette files and API
  * Improved speed of Entry appending
  * Improved performance by not rendering invisible windows</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1645099200">- Upstream theme is now called Flat rather then dark. Dark will
  reappear soon in a new package.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1645099201">- Upstream theme is now called Flat rather then dark. Dark will
  reappear soon in a new package.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1645704000">- Themes are going to recommend there icon themes as well</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1646222400">- Drop python-devel BuildRequires: not needed.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1664193600">- Update to 1.26.3 Bugfix release
  * Fix theme issues
  * Fix edje calc internal return values in some cases
  * Fix ecore-x netwm moveresize request handling
  * Fix ecore-x xkb handling to not leak
  * Fix new xkb event handling
  * Fix evas smart object to null out fields for safety
  * Fix elm null cnp object handling to not crash in odd cases
  * Fix ecore evas x11 dnd handling to not null out xdnd props
  * Fix data checkme file so relocation at runtime works again
  * Fix eina bt output to always have spaces between fields
  * Fix png loader on arm to not have rgb values when a is 0
  * Fix textgrid to guard against null glyphs
  * Fix ecore-x vblank to use current time not vlbank time
  * Fix emile to handle invalid compress types more gracefully
  * Fix compile warnings
  * Fix evas psd loader crash
  * Fix osx sample compile conf script options
  * Fix wl vsync timer to use current time not vblank time
  * Work around xwayland issue where synthetic events are not sent</changelog>
</package>
<package pkgid="5e6e5838de72a0110f5aff615513a2d87c7d96ea1923f7371f13a4c1f5fb5c12" name="efl-devel" arch="aarch64">
  <version epoch="0" ver="1.26.3" rel="bp154.4.3.20"/>
  <changelog author="Simon Lees &lt;simonf.lees@suse.com&gt;" date="1573214400">- 1.23 Release
  * Again, the primary focus of this release has been stabilizing
    the EO library as well as an extending the set of unified API
    which is based on it. From this release onwards we also switched
    to meson as our only build system (RIP autotools, you served us
    well for a long time). The 2110 commits contain more changes to
    possible list here, but you will find improved DRM support, a new
    widget for controlling vector animations, a first step towards
    MVVM support, general bugfixes and more.
    Please see the NEWS file for more details.
  * spec file cleanup</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1579694400">- Use luajit only if available</changelog>
  <changelog author="Tomas Cech &lt;sleep_walker@opensuse.org&gt;" date="1580472000">- 1.23.3 Release
  Fixes:
  * elementary: handle case when XFIXES is not available. (T8321)
  * ecore: remove unecessary field in data structure.
  * eina: only the type need to be NULL to assume EINA_VALUE_EMPTY.
  * tests/eina: use #ifdef guard for block which can only occur inside ifdef (CID1400948)
  * mono: remove duplicated EinaFreeCb delegate
  * mono: blacklist efl_ui_text_context_menu_item_add
  * Revert "elm/genlist: don't process entire item queue on each item add"
  * tests/spec: allow for a longer timeout of the spec suite for dist build
  * travis/ci: update Fedora CI images to 31
  * ci: work around ccache segafult during setup
  * travis: update Ubuntu image to the 19.10 release
  * docs: Efl.Gfx.View
  * check: reset flags that used for legacy 'changed' cb
  * elementary: fix end of fast scroll not showing up during Efl.Ui.CollectionView scroll.
  * edje_calc: UNLIKELY changed to LIKELY.
  * elm_config: replace ecore_file_cp with ecore_file_mv
  * csharp:comma have whitespace after and none before
  * csharp: Removing a never used class. (T8417)
  * elementary: cleanup Eina_Future properly by relying on efl_future_then proper lifecycle.
  * elementary: properly handle in flight request in Efl.Ui.CollectionView.
  * elementary: watch event on the model Efl.Ui.CollectionView use directly.
  * ci: fix ccache segfault during setup on CI in release-ready build
  * evas_filter: remove shader compile error
  * Efl.Ui.Scroll_Manager: Fix indentation
  * eolian_mono: avoid keyword as a variable name
  * wl_egl : Prevent access to NULL pointer
  * eolian-cxx: Make events inherit beta info from klass.
  * Revert "elm/genlist: remove calc jobs"
  * Revert "tests/genlist: add behavior testing for nearly all genlist events"</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1582286400">- add full url to the source</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1586520000">- Drastically reduce the number of packages, the reality is
  these days most of the libs don't function without the others
  and everything we use needs all of them. Upstream is also heading
  in this direction.
- Drop avahi and elocation as upstream is phasing it out and we
  don't use them</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1588680000">- 1.24.0 Release
  * EO memory optimization improvements
  * Copy and Paste rework
  * Ecore_Wl2 work
  * Documentation work
  * Multiple other bugfixes
  * Removals
  * emotion &amp; evas: remove gstreamer 0.10 support (gstreamer 1.x support is stable)
  * escape: remove library from tree (no known reamaining user of EFL on PS3 OS)
  * ecore_x: remove support XGesture extension (deprecated, distros do no longer ship it)
  * elocation: remove beta library (never out of beta)
  * eeze: remove tizen module support from eeze sensor (unused, sensor API stays)
  * evas3d: remove support for evas 3D which was a beta all along (never out of beta)
  * Xine and vlc supportin emotion (gstreamer 1.x support is stable)</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1589457600">- 1.24.1 Release
  * edje - don't set font sizes less than 1
  * ecore_evas_x - fix maximize/unmaximize request corner case
  * ecore_evas: only define these eina errors once
  * exactness: remove no longer needed _evas_new()
  * exactness_player: do not test for delay_ms
  * evas + gl - fix callback-to-app-changes-state issue with pixel data</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1590494400">- 1.24.2
  * evas_vg_shape: return NULL in evas_vg_shape_add when the parent of shape is NULL
  * efl_ui_image: fix to call "clicked" smart callback when there is no img
  * ecore-x - ensure we fully look at all xkb events and refresh all binds
  * evas_vg_container: return NULL in evas_vg_container_add when the parent of container is NULL
  * build: ensure we set ENABLE_LUA_OLD when using a lua interpreter</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1596628800">- 1.24.3
  * evas - csd and wl csd - fix alpha zeroing to avoid framespace junk
  * evas - genetic update regions smart merge - merge v adjacent regions
  * efreet - handle runtime relocation right with default XDG_DATA_DIRS
  * edje: fix animation memory leak.
  * canvas vg: fix dangling vector containers.
  * evas vg: clean up dangling instances
  * canvas vg: fix vector file data memory leak.
  * efl gfx_path: fix memory leak.
  * efl_ui_image: fixed elm_image_preload_disabled_set api is not working when it is called before file set</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1598875200">- Disable NEON on armv6/7:
  * efl-no-neon.patch</changelog>
  <changelog author="Tomas Cech &lt;sleep_walker@opensuse.org&gt;" date="1599134400">- split out ecore_imf-module-scim to reduce dependencies of base efl package</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1603108800">- 1.25.1
  * This time around we do not have bigger changes to cover here. For the full list please look at the NEWS file, if you are interested in the details. As usual we have been working on fixing bugs, optimising our code for speed and memory footprint and adding new features.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1625659200">- Fix typo in description</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1641384000">- Drop unkown meson paramter -Demotion-loaders-disabler. Meson
  prior to 0.60 ignored it, recent meson version fails.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1644321600">- Update to 1.26.2:
  * Fix crash when doing wierd combinations of eet_write and eet_read
  * Fix elementary tests to pass
  * Fix portability of putenv/setenv for niche OS's
  * Fix ecore input to build on BSD
  * Fix svg decoding crashes for vector decode
  * Fix theme - ibar label overlay
  * Fix theme - pointer scaling and sizing
  * Fix ecore x - ensure pointer on screen when setting bounds
  * elm theme - win - fix mystery off-by-1 resize of content
  * elm theme - fix mis-named colorclass for inwin bg
  * edje entry - fix past to use shft+ins for paste and no ctl
  * edje entry - complete key handling for cut (shft+del)
  * elm theme - fix placement of procstats and volume so they dont fight
  * Evas GL dithers by default for better quality (but it's a bit slower)
  * Evas HEIF format loaded (need to remove from disabled set)
  * Default theme is now the flat theme
  * New color palette files and API
  * Improved speed of Entry appending
  * Improved performance by not rendering invisible windows</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1645099200">- Upstream theme is now called Flat rather then dark. Dark will
  reappear soon in a new package.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1645099201">- Upstream theme is now called Flat rather then dark. Dark will
  reappear soon in a new package.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1645704000">- Themes are going to recommend there icon themes as well</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1646222400">- Drop python-devel BuildRequires: not needed.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1664193600">- Update to 1.26.3 Bugfix release
  * Fix theme issues
  * Fix edje calc internal return values in some cases
  * Fix ecore-x netwm moveresize request handling
  * Fix ecore-x xkb handling to not leak
  * Fix new xkb event handling
  * Fix evas smart object to null out fields for safety
  * Fix elm null cnp object handling to not crash in odd cases
  * Fix ecore evas x11 dnd handling to not null out xdnd props
  * Fix data checkme file so relocation at runtime works again
  * Fix eina bt output to always have spaces between fields
  * Fix png loader on arm to not have rgb values when a is 0
  * Fix textgrid to guard against null glyphs
  * Fix ecore-x vblank to use current time not vlbank time
  * Fix emile to handle invalid compress types more gracefully
  * Fix compile warnings
  * Fix evas psd loader crash
  * Fix osx sample compile conf script options
  * Fix wl vsync timer to use current time not vblank time
  * Work around xwayland issue where synthetic events are not sent</changelog>
</package>
<package pkgid="02be7a970faa55f2ef74de17691bd701af05e442b7840719609fd8d5ff0aaae4" name="efl-devel" arch="s390x">
  <version epoch="0" ver="1.26.3" rel="bp154.4.3.20"/>
  <changelog author="Simon Lees &lt;simonf.lees@suse.com&gt;" date="1573214400">- 1.23 Release
  * Again, the primary focus of this release has been stabilizing
    the EO library as well as an extending the set of unified API
    which is based on it. From this release onwards we also switched
    to meson as our only build system (RIP autotools, you served us
    well for a long time). The 2110 commits contain more changes to
    possible list here, but you will find improved DRM support, a new
    widget for controlling vector animations, a first step towards
    MVVM support, general bugfixes and more.
    Please see the NEWS file for more details.
  * spec file cleanup</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1579694400">- Use luajit only if available</changelog>
  <changelog author="Tomas Cech &lt;sleep_walker@opensuse.org&gt;" date="1580472000">- 1.23.3 Release
  Fixes:
  * elementary: handle case when XFIXES is not available. (T8321)
  * ecore: remove unecessary field in data structure.
  * eina: only the type need to be NULL to assume EINA_VALUE_EMPTY.
  * tests/eina: use #ifdef guard for block which can only occur inside ifdef (CID1400948)
  * mono: remove duplicated EinaFreeCb delegate
  * mono: blacklist efl_ui_text_context_menu_item_add
  * Revert "elm/genlist: don't process entire item queue on each item add"
  * tests/spec: allow for a longer timeout of the spec suite for dist build
  * travis/ci: update Fedora CI images to 31
  * ci: work around ccache segafult during setup
  * travis: update Ubuntu image to the 19.10 release
  * docs: Efl.Gfx.View
  * check: reset flags that used for legacy 'changed' cb
  * elementary: fix end of fast scroll not showing up during Efl.Ui.CollectionView scroll.
  * edje_calc: UNLIKELY changed to LIKELY.
  * elm_config: replace ecore_file_cp with ecore_file_mv
  * csharp:comma have whitespace after and none before
  * csharp: Removing a never used class. (T8417)
  * elementary: cleanup Eina_Future properly by relying on efl_future_then proper lifecycle.
  * elementary: properly handle in flight request in Efl.Ui.CollectionView.
  * elementary: watch event on the model Efl.Ui.CollectionView use directly.
  * ci: fix ccache segfault during setup on CI in release-ready build
  * evas_filter: remove shader compile error
  * Efl.Ui.Scroll_Manager: Fix indentation
  * eolian_mono: avoid keyword as a variable name
  * wl_egl : Prevent access to NULL pointer
  * eolian-cxx: Make events inherit beta info from klass.
  * Revert "elm/genlist: remove calc jobs"
  * Revert "tests/genlist: add behavior testing for nearly all genlist events"</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1582286400">- add full url to the source</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1586520000">- Drastically reduce the number of packages, the reality is
  these days most of the libs don't function without the others
  and everything we use needs all of them. Upstream is also heading
  in this direction.
- Drop avahi and elocation as upstream is phasing it out and we
  don't use them</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1588680000">- 1.24.0 Release
  * EO memory optimization improvements
  * Copy and Paste rework
  * Ecore_Wl2 work
  * Documentation work
  * Multiple other bugfixes
  * Removals
  * emotion &amp; evas: remove gstreamer 0.10 support (gstreamer 1.x support is stable)
  * escape: remove library from tree (no known reamaining user of EFL on PS3 OS)
  * ecore_x: remove support XGesture extension (deprecated, distros do no longer ship it)
  * elocation: remove beta library (never out of beta)
  * eeze: remove tizen module support from eeze sensor (unused, sensor API stays)
  * evas3d: remove support for evas 3D which was a beta all along (never out of beta)
  * Xine and vlc supportin emotion (gstreamer 1.x support is stable)</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1589457600">- 1.24.1 Release
  * edje - don't set font sizes less than 1
  * ecore_evas_x - fix maximize/unmaximize request corner case
  * ecore_evas: only define these eina errors once
  * exactness: remove no longer needed _evas_new()
  * exactness_player: do not test for delay_ms
  * evas + gl - fix callback-to-app-changes-state issue with pixel data</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1590494400">- 1.24.2
  * evas_vg_shape: return NULL in evas_vg_shape_add when the parent of shape is NULL
  * efl_ui_image: fix to call "clicked" smart callback when there is no img
  * ecore-x - ensure we fully look at all xkb events and refresh all binds
  * evas_vg_container: return NULL in evas_vg_container_add when the parent of container is NULL
  * build: ensure we set ENABLE_LUA_OLD when using a lua interpreter</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1596628800">- 1.24.3
  * evas - csd and wl csd - fix alpha zeroing to avoid framespace junk
  * evas - genetic update regions smart merge - merge v adjacent regions
  * efreet - handle runtime relocation right with default XDG_DATA_DIRS
  * edje: fix animation memory leak.
  * canvas vg: fix dangling vector containers.
  * evas vg: clean up dangling instances
  * canvas vg: fix vector file data memory leak.
  * efl gfx_path: fix memory leak.
  * efl_ui_image: fixed elm_image_preload_disabled_set api is not working when it is called before file set</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1598875200">- Disable NEON on armv6/7:
  * efl-no-neon.patch</changelog>
  <changelog author="Tomas Cech &lt;sleep_walker@opensuse.org&gt;" date="1599134400">- split out ecore_imf-module-scim to reduce dependencies of base efl package</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1603108800">- 1.25.1
  * This time around we do not have bigger changes to cover here. For the full list please look at the NEWS file, if you are interested in the details. As usual we have been working on fixing bugs, optimising our code for speed and memory footprint and adding new features.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1625659200">- Fix typo in description</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1641384000">- Drop unkown meson paramter -Demotion-loaders-disabler. Meson
  prior to 0.60 ignored it, recent meson version fails.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1644321600">- Update to 1.26.2:
  * Fix crash when doing wierd combinations of eet_write and eet_read
  * Fix elementary tests to pass
  * Fix portability of putenv/setenv for niche OS's
  * Fix ecore input to build on BSD
  * Fix svg decoding crashes for vector decode
  * Fix theme - ibar label overlay
  * Fix theme - pointer scaling and sizing
  * Fix ecore x - ensure pointer on screen when setting bounds
  * elm theme - win - fix mystery off-by-1 resize of content
  * elm theme - fix mis-named colorclass for inwin bg
  * edje entry - fix past to use shft+ins for paste and no ctl
  * edje entry - complete key handling for cut (shft+del)
  * elm theme - fix placement of procstats and volume so they dont fight
  * Evas GL dithers by default for better quality (but it's a bit slower)
  * Evas HEIF format loaded (need to remove from disabled set)
  * Default theme is now the flat theme
  * New color palette files and API
  * Improved speed of Entry appending
  * Improved performance by not rendering invisible windows</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1645099200">- Upstream theme is now called Flat rather then dark. Dark will
  reappear soon in a new package.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1645099201">- Upstream theme is now called Flat rather then dark. Dark will
  reappear soon in a new package.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1645704000">- Themes are going to recommend there icon themes as well</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1646222400">- Drop python-devel BuildRequires: not needed.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1664193600">- Update to 1.26.3 Bugfix release
  * Fix theme issues
  * Fix edje calc internal return values in some cases
  * Fix ecore-x netwm moveresize request handling
  * Fix ecore-x xkb handling to not leak
  * Fix new xkb event handling
  * Fix evas smart object to null out fields for safety
  * Fix elm null cnp object handling to not crash in odd cases
  * Fix ecore evas x11 dnd handling to not null out xdnd props
  * Fix data checkme file so relocation at runtime works again
  * Fix eina bt output to always have spaces between fields
  * Fix png loader on arm to not have rgb values when a is 0
  * Fix textgrid to guard against null glyphs
  * Fix ecore-x vblank to use current time not vlbank time
  * Fix emile to handle invalid compress types more gracefully
  * Fix compile warnings
  * Fix evas psd loader crash
  * Fix osx sample compile conf script options
  * Fix wl vsync timer to use current time not vblank time
  * Work around xwayland issue where synthetic events are not sent</changelog>
</package>
<package pkgid="134989906f658bb747e6a7e6af33dc5002e6d8490b1ef3d3562b0278a9fee381" name="efl-devel" arch="x86_64">
  <version epoch="0" ver="1.26.3" rel="bp154.4.3.20"/>
  <changelog author="Simon Lees &lt;simonf.lees@suse.com&gt;" date="1573214400">- 1.23 Release
  * Again, the primary focus of this release has been stabilizing
    the EO library as well as an extending the set of unified API
    which is based on it. From this release onwards we also switched
    to meson as our only build system (RIP autotools, you served us
    well for a long time). The 2110 commits contain more changes to
    possible list here, but you will find improved DRM support, a new
    widget for controlling vector animations, a first step towards
    MVVM support, general bugfixes and more.
    Please see the NEWS file for more details.
  * spec file cleanup</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1579694400">- Use luajit only if available</changelog>
  <changelog author="Tomas Cech &lt;sleep_walker@opensuse.org&gt;" date="1580472000">- 1.23.3 Release
  Fixes:
  * elementary: handle case when XFIXES is not available. (T8321)
  * ecore: remove unecessary field in data structure.
  * eina: only the type need to be NULL to assume EINA_VALUE_EMPTY.
  * tests/eina: use #ifdef guard for block which can only occur inside ifdef (CID1400948)
  * mono: remove duplicated EinaFreeCb delegate
  * mono: blacklist efl_ui_text_context_menu_item_add
  * Revert "elm/genlist: don't process entire item queue on each item add"
  * tests/spec: allow for a longer timeout of the spec suite for dist build
  * travis/ci: update Fedora CI images to 31
  * ci: work around ccache segafult during setup
  * travis: update Ubuntu image to the 19.10 release
  * docs: Efl.Gfx.View
  * check: reset flags that used for legacy 'changed' cb
  * elementary: fix end of fast scroll not showing up during Efl.Ui.CollectionView scroll.
  * edje_calc: UNLIKELY changed to LIKELY.
  * elm_config: replace ecore_file_cp with ecore_file_mv
  * csharp:comma have whitespace after and none before
  * csharp: Removing a never used class. (T8417)
  * elementary: cleanup Eina_Future properly by relying on efl_future_then proper lifecycle.
  * elementary: properly handle in flight request in Efl.Ui.CollectionView.
  * elementary: watch event on the model Efl.Ui.CollectionView use directly.
  * ci: fix ccache segfault during setup on CI in release-ready build
  * evas_filter: remove shader compile error
  * Efl.Ui.Scroll_Manager: Fix indentation
  * eolian_mono: avoid keyword as a variable name
  * wl_egl : Prevent access to NULL pointer
  * eolian-cxx: Make events inherit beta info from klass.
  * Revert "elm/genlist: remove calc jobs"
  * Revert "tests/genlist: add behavior testing for nearly all genlist events"</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1582286400">- add full url to the source</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1586520000">- Drastically reduce the number of packages, the reality is
  these days most of the libs don't function without the others
  and everything we use needs all of them. Upstream is also heading
  in this direction.
- Drop avahi and elocation as upstream is phasing it out and we
  don't use them</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1588680000">- 1.24.0 Release
  * EO memory optimization improvements
  * Copy and Paste rework
  * Ecore_Wl2 work
  * Documentation work
  * Multiple other bugfixes
  * Removals
  * emotion &amp; evas: remove gstreamer 0.10 support (gstreamer 1.x support is stable)
  * escape: remove library from tree (no known reamaining user of EFL on PS3 OS)
  * ecore_x: remove support XGesture extension (deprecated, distros do no longer ship it)
  * elocation: remove beta library (never out of beta)
  * eeze: remove tizen module support from eeze sensor (unused, sensor API stays)
  * evas3d: remove support for evas 3D which was a beta all along (never out of beta)
  * Xine and vlc supportin emotion (gstreamer 1.x support is stable)</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1589457600">- 1.24.1 Release
  * edje - don't set font sizes less than 1
  * ecore_evas_x - fix maximize/unmaximize request corner case
  * ecore_evas: only define these eina errors once
  * exactness: remove no longer needed _evas_new()
  * exactness_player: do not test for delay_ms
  * evas + gl - fix callback-to-app-changes-state issue with pixel data</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1590494400">- 1.24.2
  * evas_vg_shape: return NULL in evas_vg_shape_add when the parent of shape is NULL
  * efl_ui_image: fix to call "clicked" smart callback when there is no img
  * ecore-x - ensure we fully look at all xkb events and refresh all binds
  * evas_vg_container: return NULL in evas_vg_container_add when the parent of container is NULL
  * build: ensure we set ENABLE_LUA_OLD when using a lua interpreter</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1596628800">- 1.24.3
  * evas - csd and wl csd - fix alpha zeroing to avoid framespace junk
  * evas - genetic update regions smart merge - merge v adjacent regions
  * efreet - handle runtime relocation right with default XDG_DATA_DIRS
  * edje: fix animation memory leak.
  * canvas vg: fix dangling vector containers.
  * evas vg: clean up dangling instances
  * canvas vg: fix vector file data memory leak.
  * efl gfx_path: fix memory leak.
  * efl_ui_image: fixed elm_image_preload_disabled_set api is not working when it is called before file set</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1598875200">- Disable NEON on armv6/7:
  * efl-no-neon.patch</changelog>
  <changelog author="Tomas Cech &lt;sleep_walker@opensuse.org&gt;" date="1599134400">- split out ecore_imf-module-scim to reduce dependencies of base efl package</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1603108800">- 1.25.1
  * This time around we do not have bigger changes to cover here. For the full list please look at the NEWS file, if you are interested in the details. As usual we have been working on fixing bugs, optimising our code for speed and memory footprint and adding new features.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1625659200">- Fix typo in description</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1641384000">- Drop unkown meson paramter -Demotion-loaders-disabler. Meson
  prior to 0.60 ignored it, recent meson version fails.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1644321600">- Update to 1.26.2:
  * Fix crash when doing wierd combinations of eet_write and eet_read
  * Fix elementary tests to pass
  * Fix portability of putenv/setenv for niche OS's
  * Fix ecore input to build on BSD
  * Fix svg decoding crashes for vector decode
  * Fix theme - ibar label overlay
  * Fix theme - pointer scaling and sizing
  * Fix ecore x - ensure pointer on screen when setting bounds
  * elm theme - win - fix mystery off-by-1 resize of content
  * elm theme - fix mis-named colorclass for inwin bg
  * edje entry - fix past to use shft+ins for paste and no ctl
  * edje entry - complete key handling for cut (shft+del)
  * elm theme - fix placement of procstats and volume so they dont fight
  * Evas GL dithers by default for better quality (but it's a bit slower)
  * Evas HEIF format loaded (need to remove from disabled set)
  * Default theme is now the flat theme
  * New color palette files and API
  * Improved speed of Entry appending
  * Improved performance by not rendering invisible windows</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1645099200">- Upstream theme is now called Flat rather then dark. Dark will
  reappear soon in a new package.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1645099201">- Upstream theme is now called Flat rather then dark. Dark will
  reappear soon in a new package.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1645704000">- Themes are going to recommend there icon themes as well</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1646222400">- Drop python-devel BuildRequires: not needed.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1664193600">- Update to 1.26.3 Bugfix release
  * Fix theme issues
  * Fix edje calc internal return values in some cases
  * Fix ecore-x netwm moveresize request handling
  * Fix ecore-x xkb handling to not leak
  * Fix new xkb event handling
  * Fix evas smart object to null out fields for safety
  * Fix elm null cnp object handling to not crash in odd cases
  * Fix ecore evas x11 dnd handling to not null out xdnd props
  * Fix data checkme file so relocation at runtime works again
  * Fix eina bt output to always have spaces between fields
  * Fix png loader on arm to not have rgb values when a is 0
  * Fix textgrid to guard against null glyphs
  * Fix ecore-x vblank to use current time not vlbank time
  * Fix emile to handle invalid compress types more gracefully
  * Fix compile warnings
  * Fix evas psd loader crash
  * Fix osx sample compile conf script options
  * Fix wl vsync timer to use current time not vblank time
  * Work around xwayland issue where synthetic events are not sent</changelog>
</package>
<package pkgid="2bbf274500d8956760cdfbc2c5445e5e667e09e2c7b62dd92a164210e672a88e" name="efl-examples" arch="aarch64">
  <version epoch="0" ver="1.26.3" rel="bp154.4.3.20"/>
  <changelog author="Simon Lees &lt;simonf.lees@suse.com&gt;" date="1573214400">- 1.23 Release
  * Again, the primary focus of this release has been stabilizing
    the EO library as well as an extending the set of unified API
    which is based on it. From this release onwards we also switched
    to meson as our only build system (RIP autotools, you served us
    well for a long time). The 2110 commits contain more changes to
    possible list here, but you will find improved DRM support, a new
    widget for controlling vector animations, a first step towards
    MVVM support, general bugfixes and more.
    Please see the NEWS file for more details.
  * spec file cleanup</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1579694400">- Use luajit only if available</changelog>
  <changelog author="Tomas Cech &lt;sleep_walker@opensuse.org&gt;" date="1580472000">- 1.23.3 Release
  Fixes:
  * elementary: handle case when XFIXES is not available. (T8321)
  * ecore: remove unecessary field in data structure.
  * eina: only the type need to be NULL to assume EINA_VALUE_EMPTY.
  * tests/eina: use #ifdef guard for block which can only occur inside ifdef (CID1400948)
  * mono: remove duplicated EinaFreeCb delegate
  * mono: blacklist efl_ui_text_context_menu_item_add
  * Revert "elm/genlist: don't process entire item queue on each item add"
  * tests/spec: allow for a longer timeout of the spec suite for dist build
  * travis/ci: update Fedora CI images to 31
  * ci: work around ccache segafult during setup
  * travis: update Ubuntu image to the 19.10 release
  * docs: Efl.Gfx.View
  * check: reset flags that used for legacy 'changed' cb
  * elementary: fix end of fast scroll not showing up during Efl.Ui.CollectionView scroll.
  * edje_calc: UNLIKELY changed to LIKELY.
  * elm_config: replace ecore_file_cp with ecore_file_mv
  * csharp:comma have whitespace after and none before
  * csharp: Removing a never used class. (T8417)
  * elementary: cleanup Eina_Future properly by relying on efl_future_then proper lifecycle.
  * elementary: properly handle in flight request in Efl.Ui.CollectionView.
  * elementary: watch event on the model Efl.Ui.CollectionView use directly.
  * ci: fix ccache segfault during setup on CI in release-ready build
  * evas_filter: remove shader compile error
  * Efl.Ui.Scroll_Manager: Fix indentation
  * eolian_mono: avoid keyword as a variable name
  * wl_egl : Prevent access to NULL pointer
  * eolian-cxx: Make events inherit beta info from klass.
  * Revert "elm/genlist: remove calc jobs"
  * Revert "tests/genlist: add behavior testing for nearly all genlist events"</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1582286400">- add full url to the source</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1586520000">- Drastically reduce the number of packages, the reality is
  these days most of the libs don't function without the others
  and everything we use needs all of them. Upstream is also heading
  in this direction.
- Drop avahi and elocation as upstream is phasing it out and we
  don't use them</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1588680000">- 1.24.0 Release
  * EO memory optimization improvements
  * Copy and Paste rework
  * Ecore_Wl2 work
  * Documentation work
  * Multiple other bugfixes
  * Removals
  * emotion &amp; evas: remove gstreamer 0.10 support (gstreamer 1.x support is stable)
  * escape: remove library from tree (no known reamaining user of EFL on PS3 OS)
  * ecore_x: remove support XGesture extension (deprecated, distros do no longer ship it)
  * elocation: remove beta library (never out of beta)
  * eeze: remove tizen module support from eeze sensor (unused, sensor API stays)
  * evas3d: remove support for evas 3D which was a beta all along (never out of beta)
  * Xine and vlc supportin emotion (gstreamer 1.x support is stable)</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1589457600">- 1.24.1 Release
  * edje - don't set font sizes less than 1
  * ecore_evas_x - fix maximize/unmaximize request corner case
  * ecore_evas: only define these eina errors once
  * exactness: remove no longer needed _evas_new()
  * exactness_player: do not test for delay_ms
  * evas + gl - fix callback-to-app-changes-state issue with pixel data</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1590494400">- 1.24.2
  * evas_vg_shape: return NULL in evas_vg_shape_add when the parent of shape is NULL
  * efl_ui_image: fix to call "clicked" smart callback when there is no img
  * ecore-x - ensure we fully look at all xkb events and refresh all binds
  * evas_vg_container: return NULL in evas_vg_container_add when the parent of container is NULL
  * build: ensure we set ENABLE_LUA_OLD when using a lua interpreter</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1596628800">- 1.24.3
  * evas - csd and wl csd - fix alpha zeroing to avoid framespace junk
  * evas - genetic update regions smart merge - merge v adjacent regions
  * efreet - handle runtime relocation right with default XDG_DATA_DIRS
  * edje: fix animation memory leak.
  * canvas vg: fix dangling vector containers.
  * evas vg: clean up dangling instances
  * canvas vg: fix vector file data memory leak.
  * efl gfx_path: fix memory leak.
  * efl_ui_image: fixed elm_image_preload_disabled_set api is not working when it is called before file set</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1598875200">- Disable NEON on armv6/7:
  * efl-no-neon.patch</changelog>
  <changelog author="Tomas Cech &lt;sleep_walker@opensuse.org&gt;" date="1599134400">- split out ecore_imf-module-scim to reduce dependencies of base efl package</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1603108800">- 1.25.1
  * This time around we do not have bigger changes to cover here. For the full list please look at the NEWS file, if you are interested in the details. As usual we have been working on fixing bugs, optimising our code for speed and memory footprint and adding new features.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1625659200">- Fix typo in description</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1641384000">- Drop unkown meson paramter -Demotion-loaders-disabler. Meson
  prior to 0.60 ignored it, recent meson version fails.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1644321600">- Update to 1.26.2:
  * Fix crash when doing wierd combinations of eet_write and eet_read
  * Fix elementary tests to pass
  * Fix portability of putenv/setenv for niche OS's
  * Fix ecore input to build on BSD
  * Fix svg decoding crashes for vector decode
  * Fix theme - ibar label overlay
  * Fix theme - pointer scaling and sizing
  * Fix ecore x - ensure pointer on screen when setting bounds
  * elm theme - win - fix mystery off-by-1 resize of content
  * elm theme - fix mis-named colorclass for inwin bg
  * edje entry - fix past to use shft+ins for paste and no ctl
  * edje entry - complete key handling for cut (shft+del)
  * elm theme - fix placement of procstats and volume so they dont fight
  * Evas GL dithers by default for better quality (but it's a bit slower)
  * Evas HEIF format loaded (need to remove from disabled set)
  * Default theme is now the flat theme
  * New color palette files and API
  * Improved speed of Entry appending
  * Improved performance by not rendering invisible windows</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1645099200">- Upstream theme is now called Flat rather then dark. Dark will
  reappear soon in a new package.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1645099201">- Upstream theme is now called Flat rather then dark. Dark will
  reappear soon in a new package.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1645704000">- Themes are going to recommend there icon themes as well</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1646222400">- Drop python-devel BuildRequires: not needed.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1664193600">- Update to 1.26.3 Bugfix release
  * Fix theme issues
  * Fix edje calc internal return values in some cases
  * Fix ecore-x netwm moveresize request handling
  * Fix ecore-x xkb handling to not leak
  * Fix new xkb event handling
  * Fix evas smart object to null out fields for safety
  * Fix elm null cnp object handling to not crash in odd cases
  * Fix ecore evas x11 dnd handling to not null out xdnd props
  * Fix data checkme file so relocation at runtime works again
  * Fix eina bt output to always have spaces between fields
  * Fix png loader on arm to not have rgb values when a is 0
  * Fix textgrid to guard against null glyphs
  * Fix ecore-x vblank to use current time not vlbank time
  * Fix emile to handle invalid compress types more gracefully
  * Fix compile warnings
  * Fix evas psd loader crash
  * Fix osx sample compile conf script options
  * Fix wl vsync timer to use current time not vblank time
  * Work around xwayland issue where synthetic events are not sent</changelog>
</package>
<package pkgid="39d4d2c8ebaee41c49ad24936beacec17d3d34b5e0ddddbd948b97f26f759684" name="efl-examples" arch="s390x">
  <version epoch="0" ver="1.26.3" rel="bp154.4.3.20"/>
  <changelog author="Simon Lees &lt;simonf.lees@suse.com&gt;" date="1573214400">- 1.23 Release
  * Again, the primary focus of this release has been stabilizing
    the EO library as well as an extending the set of unified API
    which is based on it. From this release onwards we also switched
    to meson as our only build system (RIP autotools, you served us
    well for a long time). The 2110 commits contain more changes to
    possible list here, but you will find improved DRM support, a new
    widget for controlling vector animations, a first step towards
    MVVM support, general bugfixes and more.
    Please see the NEWS file for more details.
  * spec file cleanup</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1579694400">- Use luajit only if available</changelog>
  <changelog author="Tomas Cech &lt;sleep_walker@opensuse.org&gt;" date="1580472000">- 1.23.3 Release
  Fixes:
  * elementary: handle case when XFIXES is not available. (T8321)
  * ecore: remove unecessary field in data structure.
  * eina: only the type need to be NULL to assume EINA_VALUE_EMPTY.
  * tests/eina: use #ifdef guard for block which can only occur inside ifdef (CID1400948)
  * mono: remove duplicated EinaFreeCb delegate
  * mono: blacklist efl_ui_text_context_menu_item_add
  * Revert "elm/genlist: don't process entire item queue on each item add"
  * tests/spec: allow for a longer timeout of the spec suite for dist build
  * travis/ci: update Fedora CI images to 31
  * ci: work around ccache segafult during setup
  * travis: update Ubuntu image to the 19.10 release
  * docs: Efl.Gfx.View
  * check: reset flags that used for legacy 'changed' cb
  * elementary: fix end of fast scroll not showing up during Efl.Ui.CollectionView scroll.
  * edje_calc: UNLIKELY changed to LIKELY.
  * elm_config: replace ecore_file_cp with ecore_file_mv
  * csharp:comma have whitespace after and none before
  * csharp: Removing a never used class. (T8417)
  * elementary: cleanup Eina_Future properly by relying on efl_future_then proper lifecycle.
  * elementary: properly handle in flight request in Efl.Ui.CollectionView.
  * elementary: watch event on the model Efl.Ui.CollectionView use directly.
  * ci: fix ccache segfault during setup on CI in release-ready build
  * evas_filter: remove shader compile error
  * Efl.Ui.Scroll_Manager: Fix indentation
  * eolian_mono: avoid keyword as a variable name
  * wl_egl : Prevent access to NULL pointer
  * eolian-cxx: Make events inherit beta info from klass.
  * Revert "elm/genlist: remove calc jobs"
  * Revert "tests/genlist: add behavior testing for nearly all genlist events"</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1582286400">- add full url to the source</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1586520000">- Drastically reduce the number of packages, the reality is
  these days most of the libs don't function without the others
  and everything we use needs all of them. Upstream is also heading
  in this direction.
- Drop avahi and elocation as upstream is phasing it out and we
  don't use them</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1588680000">- 1.24.0 Release
  * EO memory optimization improvements
  * Copy and Paste rework
  * Ecore_Wl2 work
  * Documentation work
  * Multiple other bugfixes
  * Removals
  * emotion &amp; evas: remove gstreamer 0.10 support (gstreamer 1.x support is stable)
  * escape: remove library from tree (no known reamaining user of EFL on PS3 OS)
  * ecore_x: remove support XGesture extension (deprecated, distros do no longer ship it)
  * elocation: remove beta library (never out of beta)
  * eeze: remove tizen module support from eeze sensor (unused, sensor API stays)
  * evas3d: remove support for evas 3D which was a beta all along (never out of beta)
  * Xine and vlc supportin emotion (gstreamer 1.x support is stable)</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1589457600">- 1.24.1 Release
  * edje - don't set font sizes less than 1
  * ecore_evas_x - fix maximize/unmaximize request corner case
  * ecore_evas: only define these eina errors once
  * exactness: remove no longer needed _evas_new()
  * exactness_player: do not test for delay_ms
  * evas + gl - fix callback-to-app-changes-state issue with pixel data</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1590494400">- 1.24.2
  * evas_vg_shape: return NULL in evas_vg_shape_add when the parent of shape is NULL
  * efl_ui_image: fix to call "clicked" smart callback when there is no img
  * ecore-x - ensure we fully look at all xkb events and refresh all binds
  * evas_vg_container: return NULL in evas_vg_container_add when the parent of container is NULL
  * build: ensure we set ENABLE_LUA_OLD when using a lua interpreter</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1596628800">- 1.24.3
  * evas - csd and wl csd - fix alpha zeroing to avoid framespace junk
  * evas - genetic update regions smart merge - merge v adjacent regions
  * efreet - handle runtime relocation right with default XDG_DATA_DIRS
  * edje: fix animation memory leak.
  * canvas vg: fix dangling vector containers.
  * evas vg: clean up dangling instances
  * canvas vg: fix vector file data memory leak.
  * efl gfx_path: fix memory leak.
  * efl_ui_image: fixed elm_image_preload_disabled_set api is not working when it is called before file set</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1598875200">- Disable NEON on armv6/7:
  * efl-no-neon.patch</changelog>
  <changelog author="Tomas Cech &lt;sleep_walker@opensuse.org&gt;" date="1599134400">- split out ecore_imf-module-scim to reduce dependencies of base efl package</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1603108800">- 1.25.1
  * This time around we do not have bigger changes to cover here. For the full list please look at the NEWS file, if you are interested in the details. As usual we have been working on fixing bugs, optimising our code for speed and memory footprint and adding new features.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1625659200">- Fix typo in description</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1641384000">- Drop unkown meson paramter -Demotion-loaders-disabler. Meson
  prior to 0.60 ignored it, recent meson version fails.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1644321600">- Update to 1.26.2:
  * Fix crash when doing wierd combinations of eet_write and eet_read
  * Fix elementary tests to pass
  * Fix portability of putenv/setenv for niche OS's
  * Fix ecore input to build on BSD
  * Fix svg decoding crashes for vector decode
  * Fix theme - ibar label overlay
  * Fix theme - pointer scaling and sizing
  * Fix ecore x - ensure pointer on screen when setting bounds
  * elm theme - win - fix mystery off-by-1 resize of content
  * elm theme - fix mis-named colorclass for inwin bg
  * edje entry - fix past to use shft+ins for paste and no ctl
  * edje entry - complete key handling for cut (shft+del)
  * elm theme - fix placement of procstats and volume so they dont fight
  * Evas GL dithers by default for better quality (but it's a bit slower)
  * Evas HEIF format loaded (need to remove from disabled set)
  * Default theme is now the flat theme
  * New color palette files and API
  * Improved speed of Entry appending
  * Improved performance by not rendering invisible windows</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1645099200">- Upstream theme is now called Flat rather then dark. Dark will
  reappear soon in a new package.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1645099201">- Upstream theme is now called Flat rather then dark. Dark will
  reappear soon in a new package.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1645704000">- Themes are going to recommend there icon themes as well</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1646222400">- Drop python-devel BuildRequires: not needed.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1664193600">- Update to 1.26.3 Bugfix release
  * Fix theme issues
  * Fix edje calc internal return values in some cases
  * Fix ecore-x netwm moveresize request handling
  * Fix ecore-x xkb handling to not leak
  * Fix new xkb event handling
  * Fix evas smart object to null out fields for safety
  * Fix elm null cnp object handling to not crash in odd cases
  * Fix ecore evas x11 dnd handling to not null out xdnd props
  * Fix data checkme file so relocation at runtime works again
  * Fix eina bt output to always have spaces between fields
  * Fix png loader on arm to not have rgb values when a is 0
  * Fix textgrid to guard against null glyphs
  * Fix ecore-x vblank to use current time not vlbank time
  * Fix emile to handle invalid compress types more gracefully
  * Fix compile warnings
  * Fix evas psd loader crash
  * Fix osx sample compile conf script options
  * Fix wl vsync timer to use current time not vblank time
  * Work around xwayland issue where synthetic events are not sent</changelog>
</package>
<package pkgid="b989fbcc7cf8fabc2b5102d50b8dd8aaaaab805eae09a36b347e8e66815217b2" name="efl-examples" arch="x86_64">
  <version epoch="0" ver="1.26.3" rel="bp154.4.3.20"/>
  <changelog author="Simon Lees &lt;simonf.lees@suse.com&gt;" date="1573214400">- 1.23 Release
  * Again, the primary focus of this release has been stabilizing
    the EO library as well as an extending the set of unified API
    which is based on it. From this release onwards we also switched
    to meson as our only build system (RIP autotools, you served us
    well for a long time). The 2110 commits contain more changes to
    possible list here, but you will find improved DRM support, a new
    widget for controlling vector animations, a first step towards
    MVVM support, general bugfixes and more.
    Please see the NEWS file for more details.
  * spec file cleanup</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1579694400">- Use luajit only if available</changelog>
  <changelog author="Tomas Cech &lt;sleep_walker@opensuse.org&gt;" date="1580472000">- 1.23.3 Release
  Fixes:
  * elementary: handle case when XFIXES is not available. (T8321)
  * ecore: remove unecessary field in data structure.
  * eina: only the type need to be NULL to assume EINA_VALUE_EMPTY.
  * tests/eina: use #ifdef guard for block which can only occur inside ifdef (CID1400948)
  * mono: remove duplicated EinaFreeCb delegate
  * mono: blacklist efl_ui_text_context_menu_item_add
  * Revert "elm/genlist: don't process entire item queue on each item add"
  * tests/spec: allow for a longer timeout of the spec suite for dist build
  * travis/ci: update Fedora CI images to 31
  * ci: work around ccache segafult during setup
  * travis: update Ubuntu image to the 19.10 release
  * docs: Efl.Gfx.View
  * check: reset flags that used for legacy 'changed' cb
  * elementary: fix end of fast scroll not showing up during Efl.Ui.CollectionView scroll.
  * edje_calc: UNLIKELY changed to LIKELY.
  * elm_config: replace ecore_file_cp with ecore_file_mv
  * csharp:comma have whitespace after and none before
  * csharp: Removing a never used class. (T8417)
  * elementary: cleanup Eina_Future properly by relying on efl_future_then proper lifecycle.
  * elementary: properly handle in flight request in Efl.Ui.CollectionView.
  * elementary: watch event on the model Efl.Ui.CollectionView use directly.
  * ci: fix ccache segfault during setup on CI in release-ready build
  * evas_filter: remove shader compile error
  * Efl.Ui.Scroll_Manager: Fix indentation
  * eolian_mono: avoid keyword as a variable name
  * wl_egl : Prevent access to NULL pointer
  * eolian-cxx: Make events inherit beta info from klass.
  * Revert "elm/genlist: remove calc jobs"
  * Revert "tests/genlist: add behavior testing for nearly all genlist events"</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1582286400">- add full url to the source</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1586520000">- Drastically reduce the number of packages, the reality is
  these days most of the libs don't function without the others
  and everything we use needs all of them. Upstream is also heading
  in this direction.
- Drop avahi and elocation as upstream is phasing it out and we
  don't use them</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1588680000">- 1.24.0 Release
  * EO memory optimization improvements
  * Copy and Paste rework
  * Ecore_Wl2 work
  * Documentation work
  * Multiple other bugfixes
  * Removals
  * emotion &amp; evas: remove gstreamer 0.10 support (gstreamer 1.x support is stable)
  * escape: remove library from tree (no known reamaining user of EFL on PS3 OS)
  * ecore_x: remove support XGesture extension (deprecated, distros do no longer ship it)
  * elocation: remove beta library (never out of beta)
  * eeze: remove tizen module support from eeze sensor (unused, sensor API stays)
  * evas3d: remove support for evas 3D which was a beta all along (never out of beta)
  * Xine and vlc supportin emotion (gstreamer 1.x support is stable)</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1589457600">- 1.24.1 Release
  * edje - don't set font sizes less than 1
  * ecore_evas_x - fix maximize/unmaximize request corner case
  * ecore_evas: only define these eina errors once
  * exactness: remove no longer needed _evas_new()
  * exactness_player: do not test for delay_ms
  * evas + gl - fix callback-to-app-changes-state issue with pixel data</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1590494400">- 1.24.2
  * evas_vg_shape: return NULL in evas_vg_shape_add when the parent of shape is NULL
  * efl_ui_image: fix to call "clicked" smart callback when there is no img
  * ecore-x - ensure we fully look at all xkb events and refresh all binds
  * evas_vg_container: return NULL in evas_vg_container_add when the parent of container is NULL
  * build: ensure we set ENABLE_LUA_OLD when using a lua interpreter</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1596628800">- 1.24.3
  * evas - csd and wl csd - fix alpha zeroing to avoid framespace junk
  * evas - genetic update regions smart merge - merge v adjacent regions
  * efreet - handle runtime relocation right with default XDG_DATA_DIRS
  * edje: fix animation memory leak.
  * canvas vg: fix dangling vector containers.
  * evas vg: clean up dangling instances
  * canvas vg: fix vector file data memory leak.
  * efl gfx_path: fix memory leak.
  * efl_ui_image: fixed elm_image_preload_disabled_set api is not working when it is called before file set</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1598875200">- Disable NEON on armv6/7:
  * efl-no-neon.patch</changelog>
  <changelog author="Tomas Cech &lt;sleep_walker@opensuse.org&gt;" date="1599134400">- split out ecore_imf-module-scim to reduce dependencies of base efl package</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1603108800">- 1.25.1
  * This time around we do not have bigger changes to cover here. For the full list please look at the NEWS file, if you are interested in the details. As usual we have been working on fixing bugs, optimising our code for speed and memory footprint and adding new features.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1625659200">- Fix typo in description</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1641384000">- Drop unkown meson paramter -Demotion-loaders-disabler. Meson
  prior to 0.60 ignored it, recent meson version fails.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1644321600">- Update to 1.26.2:
  * Fix crash when doing wierd combinations of eet_write and eet_read
  * Fix elementary tests to pass
  * Fix portability of putenv/setenv for niche OS's
  * Fix ecore input to build on BSD
  * Fix svg decoding crashes for vector decode
  * Fix theme - ibar label overlay
  * Fix theme - pointer scaling and sizing
  * Fix ecore x - ensure pointer on screen when setting bounds
  * elm theme - win - fix mystery off-by-1 resize of content
  * elm theme - fix mis-named colorclass for inwin bg
  * edje entry - fix past to use shft+ins for paste and no ctl
  * edje entry - complete key handling for cut (shft+del)
  * elm theme - fix placement of procstats and volume so they dont fight
  * Evas GL dithers by default for better quality (but it's a bit slower)
  * Evas HEIF format loaded (need to remove from disabled set)
  * Default theme is now the flat theme
  * New color palette files and API
  * Improved speed of Entry appending
  * Improved performance by not rendering invisible windows</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1645099200">- Upstream theme is now called Flat rather then dark. Dark will
  reappear soon in a new package.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1645099201">- Upstream theme is now called Flat rather then dark. Dark will
  reappear soon in a new package.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1645704000">- Themes are going to recommend there icon themes as well</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1646222400">- Drop python-devel BuildRequires: not needed.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1664193600">- Update to 1.26.3 Bugfix release
  * Fix theme issues
  * Fix edje calc internal return values in some cases
  * Fix ecore-x netwm moveresize request handling
  * Fix ecore-x xkb handling to not leak
  * Fix new xkb event handling
  * Fix evas smart object to null out fields for safety
  * Fix elm null cnp object handling to not crash in odd cases
  * Fix ecore evas x11 dnd handling to not null out xdnd props
  * Fix data checkme file so relocation at runtime works again
  * Fix eina bt output to always have spaces between fields
  * Fix png loader on arm to not have rgb values when a is 0
  * Fix textgrid to guard against null glyphs
  * Fix ecore-x vblank to use current time not vlbank time
  * Fix emile to handle invalid compress types more gracefully
  * Fix compile warnings
  * Fix evas psd loader crash
  * Fix osx sample compile conf script options
  * Fix wl vsync timer to use current time not vblank time
  * Work around xwayland issue where synthetic events are not sent</changelog>
</package>
<package pkgid="1ee3ba3a81a585315a97f12205c73c58ce499db00de702b2ee59f3651ab43022" name="efl-lang" arch="noarch">
  <version epoch="0" ver="1.26.3" rel="bp154.4.3.20"/>
  <changelog author="Simon Lees &lt;simonf.lees@suse.com&gt;" date="1573214400">- 1.23 Release
  * Again, the primary focus of this release has been stabilizing
    the EO library as well as an extending the set of unified API
    which is based on it. From this release onwards we also switched
    to meson as our only build system (RIP autotools, you served us
    well for a long time). The 2110 commits contain more changes to
    possible list here, but you will find improved DRM support, a new
    widget for controlling vector animations, a first step towards
    MVVM support, general bugfixes and more.
    Please see the NEWS file for more details.
  * spec file cleanup</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1579694400">- Use luajit only if available</changelog>
  <changelog author="Tomas Cech &lt;sleep_walker@opensuse.org&gt;" date="1580472000">- 1.23.3 Release
  Fixes:
  * elementary: handle case when XFIXES is not available. (T8321)
  * ecore: remove unecessary field in data structure.
  * eina: only the type need to be NULL to assume EINA_VALUE_EMPTY.
  * tests/eina: use #ifdef guard for block which can only occur inside ifdef (CID1400948)
  * mono: remove duplicated EinaFreeCb delegate
  * mono: blacklist efl_ui_text_context_menu_item_add
  * Revert "elm/genlist: don't process entire item queue on each item add"
  * tests/spec: allow for a longer timeout of the spec suite for dist build
  * travis/ci: update Fedora CI images to 31
  * ci: work around ccache segafult during setup
  * travis: update Ubuntu image to the 19.10 release
  * docs: Efl.Gfx.View
  * check: reset flags that used for legacy 'changed' cb
  * elementary: fix end of fast scroll not showing up during Efl.Ui.CollectionView scroll.
  * edje_calc: UNLIKELY changed to LIKELY.
  * elm_config: replace ecore_file_cp with ecore_file_mv
  * csharp:comma have whitespace after and none before
  * csharp: Removing a never used class. (T8417)
  * elementary: cleanup Eina_Future properly by relying on efl_future_then proper lifecycle.
  * elementary: properly handle in flight request in Efl.Ui.CollectionView.
  * elementary: watch event on the model Efl.Ui.CollectionView use directly.
  * ci: fix ccache segfault during setup on CI in release-ready build
  * evas_filter: remove shader compile error
  * Efl.Ui.Scroll_Manager: Fix indentation
  * eolian_mono: avoid keyword as a variable name
  * wl_egl : Prevent access to NULL pointer
  * eolian-cxx: Make events inherit beta info from klass.
  * Revert "elm/genlist: remove calc jobs"
  * Revert "tests/genlist: add behavior testing for nearly all genlist events"</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1582286400">- add full url to the source</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1586520000">- Drastically reduce the number of packages, the reality is
  these days most of the libs don't function without the others
  and everything we use needs all of them. Upstream is also heading
  in this direction.
- Drop avahi and elocation as upstream is phasing it out and we
  don't use them</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1588680000">- 1.24.0 Release
  * EO memory optimization improvements
  * Copy and Paste rework
  * Ecore_Wl2 work
  * Documentation work
  * Multiple other bugfixes
  * Removals
  * emotion &amp; evas: remove gstreamer 0.10 support (gstreamer 1.x support is stable)
  * escape: remove library from tree (no known reamaining user of EFL on PS3 OS)
  * ecore_x: remove support XGesture extension (deprecated, distros do no longer ship it)
  * elocation: remove beta library (never out of beta)
  * eeze: remove tizen module support from eeze sensor (unused, sensor API stays)
  * evas3d: remove support for evas 3D which was a beta all along (never out of beta)
  * Xine and vlc supportin emotion (gstreamer 1.x support is stable)</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1589457600">- 1.24.1 Release
  * edje - don't set font sizes less than 1
  * ecore_evas_x - fix maximize/unmaximize request corner case
  * ecore_evas: only define these eina errors once
  * exactness: remove no longer needed _evas_new()
  * exactness_player: do not test for delay_ms
  * evas + gl - fix callback-to-app-changes-state issue with pixel data</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1590494400">- 1.24.2
  * evas_vg_shape: return NULL in evas_vg_shape_add when the parent of shape is NULL
  * efl_ui_image: fix to call "clicked" smart callback when there is no img
  * ecore-x - ensure we fully look at all xkb events and refresh all binds
  * evas_vg_container: return NULL in evas_vg_container_add when the parent of container is NULL
  * build: ensure we set ENABLE_LUA_OLD when using a lua interpreter</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1596628800">- 1.24.3
  * evas - csd and wl csd - fix alpha zeroing to avoid framespace junk
  * evas - genetic update regions smart merge - merge v adjacent regions
  * efreet - handle runtime relocation right with default XDG_DATA_DIRS
  * edje: fix animation memory leak.
  * canvas vg: fix dangling vector containers.
  * evas vg: clean up dangling instances
  * canvas vg: fix vector file data memory leak.
  * efl gfx_path: fix memory leak.
  * efl_ui_image: fixed elm_image_preload_disabled_set api is not working when it is called before file set</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1598875200">- Disable NEON on armv6/7:
  * efl-no-neon.patch</changelog>
  <changelog author="Tomas Cech &lt;sleep_walker@opensuse.org&gt;" date="1599134400">- split out ecore_imf-module-scim to reduce dependencies of base efl package</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1603108800">- 1.25.1
  * This time around we do not have bigger changes to cover here. For the full list please look at the NEWS file, if you are interested in the details. As usual we have been working on fixing bugs, optimising our code for speed and memory footprint and adding new features.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1625659200">- Fix typo in description</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1641384000">- Drop unkown meson paramter -Demotion-loaders-disabler. Meson
  prior to 0.60 ignored it, recent meson version fails.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1644321600">- Update to 1.26.2:
  * Fix crash when doing wierd combinations of eet_write and eet_read
  * Fix elementary tests to pass
  * Fix portability of putenv/setenv for niche OS's
  * Fix ecore input to build on BSD
  * Fix svg decoding crashes for vector decode
  * Fix theme - ibar label overlay
  * Fix theme - pointer scaling and sizing
  * Fix ecore x - ensure pointer on screen when setting bounds
  * elm theme - win - fix mystery off-by-1 resize of content
  * elm theme - fix mis-named colorclass for inwin bg
  * edje entry - fix past to use shft+ins for paste and no ctl
  * edje entry - complete key handling for cut (shft+del)
  * elm theme - fix placement of procstats and volume so they dont fight
  * Evas GL dithers by default for better quality (but it's a bit slower)
  * Evas HEIF format loaded (need to remove from disabled set)
  * Default theme is now the flat theme
  * New color palette files and API
  * Improved speed of Entry appending
  * Improved performance by not rendering invisible windows</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1645099200">- Upstream theme is now called Flat rather then dark. Dark will
  reappear soon in a new package.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1645099201">- Upstream theme is now called Flat rather then dark. Dark will
  reappear soon in a new package.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1645704000">- Themes are going to recommend there icon themes as well</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1646222400">- Drop python-devel BuildRequires: not needed.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1664193600">- Update to 1.26.3 Bugfix release
  * Fix theme issues
  * Fix edje calc internal return values in some cases
  * Fix ecore-x netwm moveresize request handling
  * Fix ecore-x xkb handling to not leak
  * Fix new xkb event handling
  * Fix evas smart object to null out fields for safety
  * Fix elm null cnp object handling to not crash in odd cases
  * Fix ecore evas x11 dnd handling to not null out xdnd props
  * Fix data checkme file so relocation at runtime works again
  * Fix eina bt output to always have spaces between fields
  * Fix png loader on arm to not have rgb values when a is 0
  * Fix textgrid to guard against null glyphs
  * Fix ecore-x vblank to use current time not vlbank time
  * Fix emile to handle invalid compress types more gracefully
  * Fix compile warnings
  * Fix evas psd loader crash
  * Fix osx sample compile conf script options
  * Fix wl vsync timer to use current time not vblank time
  * Work around xwayland issue where synthetic events are not sent</changelog>
</package>
<package pkgid="586a0ef82defc32aad09fed91345fa29b17750b5eb6f95527699f0e138d4235a" name="efl-testsuite" arch="aarch64">
  <version epoch="0" ver="1.26.3" rel="bp154.4.3.20"/>
  <changelog author="Simon Lees &lt;simonf.lees@suse.com&gt;" date="1573214400">- 1.23 Release
  * Again, the primary focus of this release has been stabilizing
    the EO library as well as an extending the set of unified API
    which is based on it. From this release onwards we also switched
    to meson as our only build system (RIP autotools, you served us
    well for a long time). The 2110 commits contain more changes to
    possible list here, but you will find improved DRM support, a new
    widget for controlling vector animations, a first step towards
    MVVM support, general bugfixes and more.
    Please see the NEWS file for more details.
  * spec file cleanup</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1579694400">- Use luajit only if available</changelog>
  <changelog author="Tomas Cech &lt;sleep_walker@opensuse.org&gt;" date="1580472000">- 1.23.3 Release
  Fixes:
  * elementary: handle case when XFIXES is not available. (T8321)
  * ecore: remove unecessary field in data structure.
  * eina: only the type need to be NULL to assume EINA_VALUE_EMPTY.
  * tests/eina: use #ifdef guard for block which can only occur inside ifdef (CID1400948)
  * mono: remove duplicated EinaFreeCb delegate
  * mono: blacklist efl_ui_text_context_menu_item_add
  * Revert "elm/genlist: don't process entire item queue on each item add"
  * tests/spec: allow for a longer timeout of the spec suite for dist build
  * travis/ci: update Fedora CI images to 31
  * ci: work around ccache segafult during setup
  * travis: update Ubuntu image to the 19.10 release
  * docs: Efl.Gfx.View
  * check: reset flags that used for legacy 'changed' cb
  * elementary: fix end of fast scroll not showing up during Efl.Ui.CollectionView scroll.
  * edje_calc: UNLIKELY changed to LIKELY.
  * elm_config: replace ecore_file_cp with ecore_file_mv
  * csharp:comma have whitespace after and none before
  * csharp: Removing a never used class. (T8417)
  * elementary: cleanup Eina_Future properly by relying on efl_future_then proper lifecycle.
  * elementary: properly handle in flight request in Efl.Ui.CollectionView.
  * elementary: watch event on the model Efl.Ui.CollectionView use directly.
  * ci: fix ccache segfault during setup on CI in release-ready build
  * evas_filter: remove shader compile error
  * Efl.Ui.Scroll_Manager: Fix indentation
  * eolian_mono: avoid keyword as a variable name
  * wl_egl : Prevent access to NULL pointer
  * eolian-cxx: Make events inherit beta info from klass.
  * Revert "elm/genlist: remove calc jobs"
  * Revert "tests/genlist: add behavior testing for nearly all genlist events"</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1582286400">- add full url to the source</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1586520000">- Drastically reduce the number of packages, the reality is
  these days most of the libs don't function without the others
  and everything we use needs all of them. Upstream is also heading
  in this direction.
- Drop avahi and elocation as upstream is phasing it out and we
  don't use them</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1588680000">- 1.24.0 Release
  * EO memory optimization improvements
  * Copy and Paste rework
  * Ecore_Wl2 work
  * Documentation work
  * Multiple other bugfixes
  * Removals
  * emotion &amp; evas: remove gstreamer 0.10 support (gstreamer 1.x support is stable)
  * escape: remove library from tree (no known reamaining user of EFL on PS3 OS)
  * ecore_x: remove support XGesture extension (deprecated, distros do no longer ship it)
  * elocation: remove beta library (never out of beta)
  * eeze: remove tizen module support from eeze sensor (unused, sensor API stays)
  * evas3d: remove support for evas 3D which was a beta all along (never out of beta)
  * Xine and vlc supportin emotion (gstreamer 1.x support is stable)</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1589457600">- 1.24.1 Release
  * edje - don't set font sizes less than 1
  * ecore_evas_x - fix maximize/unmaximize request corner case
  * ecore_evas: only define these eina errors once
  * exactness: remove no longer needed _evas_new()
  * exactness_player: do not test for delay_ms
  * evas + gl - fix callback-to-app-changes-state issue with pixel data</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1590494400">- 1.24.2
  * evas_vg_shape: return NULL in evas_vg_shape_add when the parent of shape is NULL
  * efl_ui_image: fix to call "clicked" smart callback when there is no img
  * ecore-x - ensure we fully look at all xkb events and refresh all binds
  * evas_vg_container: return NULL in evas_vg_container_add when the parent of container is NULL
  * build: ensure we set ENABLE_LUA_OLD when using a lua interpreter</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1596628800">- 1.24.3
  * evas - csd and wl csd - fix alpha zeroing to avoid framespace junk
  * evas - genetic update regions smart merge - merge v adjacent regions
  * efreet - handle runtime relocation right with default XDG_DATA_DIRS
  * edje: fix animation memory leak.
  * canvas vg: fix dangling vector containers.
  * evas vg: clean up dangling instances
  * canvas vg: fix vector file data memory leak.
  * efl gfx_path: fix memory leak.
  * efl_ui_image: fixed elm_image_preload_disabled_set api is not working when it is called before file set</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1598875200">- Disable NEON on armv6/7:
  * efl-no-neon.patch</changelog>
  <changelog author="Tomas Cech &lt;sleep_walker@opensuse.org&gt;" date="1599134400">- split out ecore_imf-module-scim to reduce dependencies of base efl package</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1603108800">- 1.25.1
  * This time around we do not have bigger changes to cover here. For the full list please look at the NEWS file, if you are interested in the details. As usual we have been working on fixing bugs, optimising our code for speed and memory footprint and adding new features.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1625659200">- Fix typo in description</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1641384000">- Drop unkown meson paramter -Demotion-loaders-disabler. Meson
  prior to 0.60 ignored it, recent meson version fails.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1644321600">- Update to 1.26.2:
  * Fix crash when doing wierd combinations of eet_write and eet_read
  * Fix elementary tests to pass
  * Fix portability of putenv/setenv for niche OS's
  * Fix ecore input to build on BSD
  * Fix svg decoding crashes for vector decode
  * Fix theme - ibar label overlay
  * Fix theme - pointer scaling and sizing
  * Fix ecore x - ensure pointer on screen when setting bounds
  * elm theme - win - fix mystery off-by-1 resize of content
  * elm theme - fix mis-named colorclass for inwin bg
  * edje entry - fix past to use shft+ins for paste and no ctl
  * edje entry - complete key handling for cut (shft+del)
  * elm theme - fix placement of procstats and volume so they dont fight
  * Evas GL dithers by default for better quality (but it's a bit slower)
  * Evas HEIF format loaded (need to remove from disabled set)
  * Default theme is now the flat theme
  * New color palette files and API
  * Improved speed of Entry appending
  * Improved performance by not rendering invisible windows</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1645099200">- Upstream theme is now called Flat rather then dark. Dark will
  reappear soon in a new package.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1645099201">- Upstream theme is now called Flat rather then dark. Dark will
  reappear soon in a new package.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1645704000">- Themes are going to recommend there icon themes as well</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1646222400">- Drop python-devel BuildRequires: not needed.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1664193600">- Update to 1.26.3 Bugfix release
  * Fix theme issues
  * Fix edje calc internal return values in some cases
  * Fix ecore-x netwm moveresize request handling
  * Fix ecore-x xkb handling to not leak
  * Fix new xkb event handling
  * Fix evas smart object to null out fields for safety
  * Fix elm null cnp object handling to not crash in odd cases
  * Fix ecore evas x11 dnd handling to not null out xdnd props
  * Fix data checkme file so relocation at runtime works again
  * Fix eina bt output to always have spaces between fields
  * Fix png loader on arm to not have rgb values when a is 0
  * Fix textgrid to guard against null glyphs
  * Fix ecore-x vblank to use current time not vlbank time
  * Fix emile to handle invalid compress types more gracefully
  * Fix compile warnings
  * Fix evas psd loader crash
  * Fix osx sample compile conf script options
  * Fix wl vsync timer to use current time not vblank time
  * Work around xwayland issue where synthetic events are not sent</changelog>
</package>
<package pkgid="47564f630a6eb34b3da959a246fd378fbaddbe382cb6f234ad156925770b42b9" name="efl-testsuite" arch="s390x">
  <version epoch="0" ver="1.26.3" rel="bp154.4.3.20"/>
  <changelog author="Simon Lees &lt;simonf.lees@suse.com&gt;" date="1573214400">- 1.23 Release
  * Again, the primary focus of this release has been stabilizing
    the EO library as well as an extending the set of unified API
    which is based on it. From this release onwards we also switched
    to meson as our only build system (RIP autotools, you served us
    well for a long time). The 2110 commits contain more changes to
    possible list here, but you will find improved DRM support, a new
    widget for controlling vector animations, a first step towards
    MVVM support, general bugfixes and more.
    Please see the NEWS file for more details.
  * spec file cleanup</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1579694400">- Use luajit only if available</changelog>
  <changelog author="Tomas Cech &lt;sleep_walker@opensuse.org&gt;" date="1580472000">- 1.23.3 Release
  Fixes:
  * elementary: handle case when XFIXES is not available. (T8321)
  * ecore: remove unecessary field in data structure.
  * eina: only the type need to be NULL to assume EINA_VALUE_EMPTY.
  * tests/eina: use #ifdef guard for block which can only occur inside ifdef (CID1400948)
  * mono: remove duplicated EinaFreeCb delegate
  * mono: blacklist efl_ui_text_context_menu_item_add
  * Revert "elm/genlist: don't process entire item queue on each item add"
  * tests/spec: allow for a longer timeout of the spec suite for dist build
  * travis/ci: update Fedora CI images to 31
  * ci: work around ccache segafult during setup
  * travis: update Ubuntu image to the 19.10 release
  * docs: Efl.Gfx.View
  * check: reset flags that used for legacy 'changed' cb
  * elementary: fix end of fast scroll not showing up during Efl.Ui.CollectionView scroll.
  * edje_calc: UNLIKELY changed to LIKELY.
  * elm_config: replace ecore_file_cp with ecore_file_mv
  * csharp:comma have whitespace after and none before
  * csharp: Removing a never used class. (T8417)
  * elementary: cleanup Eina_Future properly by relying on efl_future_then proper lifecycle.
  * elementary: properly handle in flight request in Efl.Ui.CollectionView.
  * elementary: watch event on the model Efl.Ui.CollectionView use directly.
  * ci: fix ccache segfault during setup on CI in release-ready build
  * evas_filter: remove shader compile error
  * Efl.Ui.Scroll_Manager: Fix indentation
  * eolian_mono: avoid keyword as a variable name
  * wl_egl : Prevent access to NULL pointer
  * eolian-cxx: Make events inherit beta info from klass.
  * Revert "elm/genlist: remove calc jobs"
  * Revert "tests/genlist: add behavior testing for nearly all genlist events"</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1582286400">- add full url to the source</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1586520000">- Drastically reduce the number of packages, the reality is
  these days most of the libs don't function without the others
  and everything we use needs all of them. Upstream is also heading
  in this direction.
- Drop avahi and elocation as upstream is phasing it out and we
  don't use them</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1588680000">- 1.24.0 Release
  * EO memory optimization improvements
  * Copy and Paste rework
  * Ecore_Wl2 work
  * Documentation work
  * Multiple other bugfixes
  * Removals
  * emotion &amp; evas: remove gstreamer 0.10 support (gstreamer 1.x support is stable)
  * escape: remove library from tree (no known reamaining user of EFL on PS3 OS)
  * ecore_x: remove support XGesture extension (deprecated, distros do no longer ship it)
  * elocation: remove beta library (never out of beta)
  * eeze: remove tizen module support from eeze sensor (unused, sensor API stays)
  * evas3d: remove support for evas 3D which was a beta all along (never out of beta)
  * Xine and vlc supportin emotion (gstreamer 1.x support is stable)</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1589457600">- 1.24.1 Release
  * edje - don't set font sizes less than 1
  * ecore_evas_x - fix maximize/unmaximize request corner case
  * ecore_evas: only define these eina errors once
  * exactness: remove no longer needed _evas_new()
  * exactness_player: do not test for delay_ms
  * evas + gl - fix callback-to-app-changes-state issue with pixel data</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1590494400">- 1.24.2
  * evas_vg_shape: return NULL in evas_vg_shape_add when the parent of shape is NULL
  * efl_ui_image: fix to call "clicked" smart callback when there is no img
  * ecore-x - ensure we fully look at all xkb events and refresh all binds
  * evas_vg_container: return NULL in evas_vg_container_add when the parent of container is NULL
  * build: ensure we set ENABLE_LUA_OLD when using a lua interpreter</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1596628800">- 1.24.3
  * evas - csd and wl csd - fix alpha zeroing to avoid framespace junk
  * evas - genetic update regions smart merge - merge v adjacent regions
  * efreet - handle runtime relocation right with default XDG_DATA_DIRS
  * edje: fix animation memory leak.
  * canvas vg: fix dangling vector containers.
  * evas vg: clean up dangling instances
  * canvas vg: fix vector file data memory leak.
  * efl gfx_path: fix memory leak.
  * efl_ui_image: fixed elm_image_preload_disabled_set api is not working when it is called before file set</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1598875200">- Disable NEON on armv6/7:
  * efl-no-neon.patch</changelog>
  <changelog author="Tomas Cech &lt;sleep_walker@opensuse.org&gt;" date="1599134400">- split out ecore_imf-module-scim to reduce dependencies of base efl package</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1603108800">- 1.25.1
  * This time around we do not have bigger changes to cover here. For the full list please look at the NEWS file, if you are interested in the details. As usual we have been working on fixing bugs, optimising our code for speed and memory footprint and adding new features.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1625659200">- Fix typo in description</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1641384000">- Drop unkown meson paramter -Demotion-loaders-disabler. Meson
  prior to 0.60 ignored it, recent meson version fails.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1644321600">- Update to 1.26.2:
  * Fix crash when doing wierd combinations of eet_write and eet_read
  * Fix elementary tests to pass
  * Fix portability of putenv/setenv for niche OS's
  * Fix ecore input to build on BSD
  * Fix svg decoding crashes for vector decode
  * Fix theme - ibar label overlay
  * Fix theme - pointer scaling and sizing
  * Fix ecore x - ensure pointer on screen when setting bounds
  * elm theme - win - fix mystery off-by-1 resize of content
  * elm theme - fix mis-named colorclass for inwin bg
  * edje entry - fix past to use shft+ins for paste and no ctl
  * edje entry - complete key handling for cut (shft+del)
  * elm theme - fix placement of procstats and volume so they dont fight
  * Evas GL dithers by default for better quality (but it's a bit slower)
  * Evas HEIF format loaded (need to remove from disabled set)
  * Default theme is now the flat theme
  * New color palette files and API
  * Improved speed of Entry appending
  * Improved performance by not rendering invisible windows</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1645099200">- Upstream theme is now called Flat rather then dark. Dark will
  reappear soon in a new package.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1645099201">- Upstream theme is now called Flat rather then dark. Dark will
  reappear soon in a new package.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1645704000">- Themes are going to recommend there icon themes as well</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1646222400">- Drop python-devel BuildRequires: not needed.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1664193600">- Update to 1.26.3 Bugfix release
  * Fix theme issues
  * Fix edje calc internal return values in some cases
  * Fix ecore-x netwm moveresize request handling
  * Fix ecore-x xkb handling to not leak
  * Fix new xkb event handling
  * Fix evas smart object to null out fields for safety
  * Fix elm null cnp object handling to not crash in odd cases
  * Fix ecore evas x11 dnd handling to not null out xdnd props
  * Fix data checkme file so relocation at runtime works again
  * Fix eina bt output to always have spaces between fields
  * Fix png loader on arm to not have rgb values when a is 0
  * Fix textgrid to guard against null glyphs
  * Fix ecore-x vblank to use current time not vlbank time
  * Fix emile to handle invalid compress types more gracefully
  * Fix compile warnings
  * Fix evas psd loader crash
  * Fix osx sample compile conf script options
  * Fix wl vsync timer to use current time not vblank time
  * Work around xwayland issue where synthetic events are not sent</changelog>
</package>
<package pkgid="fdb35f359dfa8f8048972125c9299feb936b45191194ab1ef4b69f0a316cb310" name="efl-testsuite" arch="x86_64">
  <version epoch="0" ver="1.26.3" rel="bp154.4.3.20"/>
  <changelog author="Simon Lees &lt;simonf.lees@suse.com&gt;" date="1573214400">- 1.23 Release
  * Again, the primary focus of this release has been stabilizing
    the EO library as well as an extending the set of unified API
    which is based on it. From this release onwards we also switched
    to meson as our only build system (RIP autotools, you served us
    well for a long time). The 2110 commits contain more changes to
    possible list here, but you will find improved DRM support, a new
    widget for controlling vector animations, a first step towards
    MVVM support, general bugfixes and more.
    Please see the NEWS file for more details.
  * spec file cleanup</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1579694400">- Use luajit only if available</changelog>
  <changelog author="Tomas Cech &lt;sleep_walker@opensuse.org&gt;" date="1580472000">- 1.23.3 Release
  Fixes:
  * elementary: handle case when XFIXES is not available. (T8321)
  * ecore: remove unecessary field in data structure.
  * eina: only the type need to be NULL to assume EINA_VALUE_EMPTY.
  * tests/eina: use #ifdef guard for block which can only occur inside ifdef (CID1400948)
  * mono: remove duplicated EinaFreeCb delegate
  * mono: blacklist efl_ui_text_context_menu_item_add
  * Revert "elm/genlist: don't process entire item queue on each item add"
  * tests/spec: allow for a longer timeout of the spec suite for dist build
  * travis/ci: update Fedora CI images to 31
  * ci: work around ccache segafult during setup
  * travis: update Ubuntu image to the 19.10 release
  * docs: Efl.Gfx.View
  * check: reset flags that used for legacy 'changed' cb
  * elementary: fix end of fast scroll not showing up during Efl.Ui.CollectionView scroll.
  * edje_calc: UNLIKELY changed to LIKELY.
  * elm_config: replace ecore_file_cp with ecore_file_mv
  * csharp:comma have whitespace after and none before
  * csharp: Removing a never used class. (T8417)
  * elementary: cleanup Eina_Future properly by relying on efl_future_then proper lifecycle.
  * elementary: properly handle in flight request in Efl.Ui.CollectionView.
  * elementary: watch event on the model Efl.Ui.CollectionView use directly.
  * ci: fix ccache segfault during setup on CI in release-ready build
  * evas_filter: remove shader compile error
  * Efl.Ui.Scroll_Manager: Fix indentation
  * eolian_mono: avoid keyword as a variable name
  * wl_egl : Prevent access to NULL pointer
  * eolian-cxx: Make events inherit beta info from klass.
  * Revert "elm/genlist: remove calc jobs"
  * Revert "tests/genlist: add behavior testing for nearly all genlist events"</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1582286400">- add full url to the source</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1586520000">- Drastically reduce the number of packages, the reality is
  these days most of the libs don't function without the others
  and everything we use needs all of them. Upstream is also heading
  in this direction.
- Drop avahi and elocation as upstream is phasing it out and we
  don't use them</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1588680000">- 1.24.0 Release
  * EO memory optimization improvements
  * Copy and Paste rework
  * Ecore_Wl2 work
  * Documentation work
  * Multiple other bugfixes
  * Removals
  * emotion &amp; evas: remove gstreamer 0.10 support (gstreamer 1.x support is stable)
  * escape: remove library from tree (no known reamaining user of EFL on PS3 OS)
  * ecore_x: remove support XGesture extension (deprecated, distros do no longer ship it)
  * elocation: remove beta library (never out of beta)
  * eeze: remove tizen module support from eeze sensor (unused, sensor API stays)
  * evas3d: remove support for evas 3D which was a beta all along (never out of beta)
  * Xine and vlc supportin emotion (gstreamer 1.x support is stable)</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1589457600">- 1.24.1 Release
  * edje - don't set font sizes less than 1
  * ecore_evas_x - fix maximize/unmaximize request corner case
  * ecore_evas: only define these eina errors once
  * exactness: remove no longer needed _evas_new()
  * exactness_player: do not test for delay_ms
  * evas + gl - fix callback-to-app-changes-state issue with pixel data</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1590494400">- 1.24.2
  * evas_vg_shape: return NULL in evas_vg_shape_add when the parent of shape is NULL
  * efl_ui_image: fix to call "clicked" smart callback when there is no img
  * ecore-x - ensure we fully look at all xkb events and refresh all binds
  * evas_vg_container: return NULL in evas_vg_container_add when the parent of container is NULL
  * build: ensure we set ENABLE_LUA_OLD when using a lua interpreter</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1596628800">- 1.24.3
  * evas - csd and wl csd - fix alpha zeroing to avoid framespace junk
  * evas - genetic update regions smart merge - merge v adjacent regions
  * efreet - handle runtime relocation right with default XDG_DATA_DIRS
  * edje: fix animation memory leak.
  * canvas vg: fix dangling vector containers.
  * evas vg: clean up dangling instances
  * canvas vg: fix vector file data memory leak.
  * efl gfx_path: fix memory leak.
  * efl_ui_image: fixed elm_image_preload_disabled_set api is not working when it is called before file set</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1598875200">- Disable NEON on armv6/7:
  * efl-no-neon.patch</changelog>
  <changelog author="Tomas Cech &lt;sleep_walker@opensuse.org&gt;" date="1599134400">- split out ecore_imf-module-scim to reduce dependencies of base efl package</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1603108800">- 1.25.1
  * This time around we do not have bigger changes to cover here. For the full list please look at the NEWS file, if you are interested in the details. As usual we have been working on fixing bugs, optimising our code for speed and memory footprint and adding new features.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1625659200">- Fix typo in description</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1641384000">- Drop unkown meson paramter -Demotion-loaders-disabler. Meson
  prior to 0.60 ignored it, recent meson version fails.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1644321600">- Update to 1.26.2:
  * Fix crash when doing wierd combinations of eet_write and eet_read
  * Fix elementary tests to pass
  * Fix portability of putenv/setenv for niche OS's
  * Fix ecore input to build on BSD
  * Fix svg decoding crashes for vector decode
  * Fix theme - ibar label overlay
  * Fix theme - pointer scaling and sizing
  * Fix ecore x - ensure pointer on screen when setting bounds
  * elm theme - win - fix mystery off-by-1 resize of content
  * elm theme - fix mis-named colorclass for inwin bg
  * edje entry - fix past to use shft+ins for paste and no ctl
  * edje entry - complete key handling for cut (shft+del)
  * elm theme - fix placement of procstats and volume so they dont fight
  * Evas GL dithers by default for better quality (but it's a bit slower)
  * Evas HEIF format loaded (need to remove from disabled set)
  * Default theme is now the flat theme
  * New color palette files and API
  * Improved speed of Entry appending
  * Improved performance by not rendering invisible windows</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1645099200">- Upstream theme is now called Flat rather then dark. Dark will
  reappear soon in a new package.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1645099201">- Upstream theme is now called Flat rather then dark. Dark will
  reappear soon in a new package.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1645704000">- Themes are going to recommend there icon themes as well</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1646222400">- Drop python-devel BuildRequires: not needed.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1664193600">- Update to 1.26.3 Bugfix release
  * Fix theme issues
  * Fix edje calc internal return values in some cases
  * Fix ecore-x netwm moveresize request handling
  * Fix ecore-x xkb handling to not leak
  * Fix new xkb event handling
  * Fix evas smart object to null out fields for safety
  * Fix elm null cnp object handling to not crash in odd cases
  * Fix ecore evas x11 dnd handling to not null out xdnd props
  * Fix data checkme file so relocation at runtime works again
  * Fix eina bt output to always have spaces between fields
  * Fix png loader on arm to not have rgb values when a is 0
  * Fix textgrid to guard against null glyphs
  * Fix ecore-x vblank to use current time not vlbank time
  * Fix emile to handle invalid compress types more gracefully
  * Fix compile warnings
  * Fix evas psd loader crash
  * Fix osx sample compile conf script options
  * Fix wl vsync timer to use current time not vblank time
  * Work around xwayland issue where synthetic events are not sent</changelog>
</package>
<package pkgid="8a2ce128e63c1ec1fe6f44dd03c3440951343e4c6c90e0abfd443b921c5cbab0" name="elua" arch="aarch64">
  <version epoch="0" ver="1.26.3" rel="bp154.4.3.20"/>
  <changelog author="Simon Lees &lt;simonf.lees@suse.com&gt;" date="1573214400">- 1.23 Release
  * Again, the primary focus of this release has been stabilizing
    the EO library as well as an extending the set of unified API
    which is based on it. From this release onwards we also switched
    to meson as our only build system (RIP autotools, you served us
    well for a long time). The 2110 commits contain more changes to
    possible list here, but you will find improved DRM support, a new
    widget for controlling vector animations, a first step towards
    MVVM support, general bugfixes and more.
    Please see the NEWS file for more details.
  * spec file cleanup</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1579694400">- Use luajit only if available</changelog>
  <changelog author="Tomas Cech &lt;sleep_walker@opensuse.org&gt;" date="1580472000">- 1.23.3 Release
  Fixes:
  * elementary: handle case when XFIXES is not available. (T8321)
  * ecore: remove unecessary field in data structure.
  * eina: only the type need to be NULL to assume EINA_VALUE_EMPTY.
  * tests/eina: use #ifdef guard for block which can only occur inside ifdef (CID1400948)
  * mono: remove duplicated EinaFreeCb delegate
  * mono: blacklist efl_ui_text_context_menu_item_add
  * Revert "elm/genlist: don't process entire item queue on each item add"
  * tests/spec: allow for a longer timeout of the spec suite for dist build
  * travis/ci: update Fedora CI images to 31
  * ci: work around ccache segafult during setup
  * travis: update Ubuntu image to the 19.10 release
  * docs: Efl.Gfx.View
  * check: reset flags that used for legacy 'changed' cb
  * elementary: fix end of fast scroll not showing up during Efl.Ui.CollectionView scroll.
  * edje_calc: UNLIKELY changed to LIKELY.
  * elm_config: replace ecore_file_cp with ecore_file_mv
  * csharp:comma have whitespace after and none before
  * csharp: Removing a never used class. (T8417)
  * elementary: cleanup Eina_Future properly by relying on efl_future_then proper lifecycle.
  * elementary: properly handle in flight request in Efl.Ui.CollectionView.
  * elementary: watch event on the model Efl.Ui.CollectionView use directly.
  * ci: fix ccache segfault during setup on CI in release-ready build
  * evas_filter: remove shader compile error
  * Efl.Ui.Scroll_Manager: Fix indentation
  * eolian_mono: avoid keyword as a variable name
  * wl_egl : Prevent access to NULL pointer
  * eolian-cxx: Make events inherit beta info from klass.
  * Revert "elm/genlist: remove calc jobs"
  * Revert "tests/genlist: add behavior testing for nearly all genlist events"</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1582286400">- add full url to the source</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1586520000">- Drastically reduce the number of packages, the reality is
  these days most of the libs don't function without the others
  and everything we use needs all of them. Upstream is also heading
  in this direction.
- Drop avahi and elocation as upstream is phasing it out and we
  don't use them</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1588680000">- 1.24.0 Release
  * EO memory optimization improvements
  * Copy and Paste rework
  * Ecore_Wl2 work
  * Documentation work
  * Multiple other bugfixes
  * Removals
  * emotion &amp; evas: remove gstreamer 0.10 support (gstreamer 1.x support is stable)
  * escape: remove library from tree (no known reamaining user of EFL on PS3 OS)
  * ecore_x: remove support XGesture extension (deprecated, distros do no longer ship it)
  * elocation: remove beta library (never out of beta)
  * eeze: remove tizen module support from eeze sensor (unused, sensor API stays)
  * evas3d: remove support for evas 3D which was a beta all along (never out of beta)
  * Xine and vlc supportin emotion (gstreamer 1.x support is stable)</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1589457600">- 1.24.1 Release
  * edje - don't set font sizes less than 1
  * ecore_evas_x - fix maximize/unmaximize request corner case
  * ecore_evas: only define these eina errors once
  * exactness: remove no longer needed _evas_new()
  * exactness_player: do not test for delay_ms
  * evas + gl - fix callback-to-app-changes-state issue with pixel data</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1590494400">- 1.24.2
  * evas_vg_shape: return NULL in evas_vg_shape_add when the parent of shape is NULL
  * efl_ui_image: fix to call "clicked" smart callback when there is no img
  * ecore-x - ensure we fully look at all xkb events and refresh all binds
  * evas_vg_container: return NULL in evas_vg_container_add when the parent of container is NULL
  * build: ensure we set ENABLE_LUA_OLD when using a lua interpreter</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1596628800">- 1.24.3
  * evas - csd and wl csd - fix alpha zeroing to avoid framespace junk
  * evas - genetic update regions smart merge - merge v adjacent regions
  * efreet - handle runtime relocation right with default XDG_DATA_DIRS
  * edje: fix animation memory leak.
  * canvas vg: fix dangling vector containers.
  * evas vg: clean up dangling instances
  * canvas vg: fix vector file data memory leak.
  * efl gfx_path: fix memory leak.
  * efl_ui_image: fixed elm_image_preload_disabled_set api is not working when it is called before file set</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1598875200">- Disable NEON on armv6/7:
  * efl-no-neon.patch</changelog>
  <changelog author="Tomas Cech &lt;sleep_walker@opensuse.org&gt;" date="1599134400">- split out ecore_imf-module-scim to reduce dependencies of base efl package</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1603108800">- 1.25.1
  * This time around we do not have bigger changes to cover here. For the full list please look at the NEWS file, if you are interested in the details. As usual we have been working on fixing bugs, optimising our code for speed and memory footprint and adding new features.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1625659200">- Fix typo in description</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1641384000">- Drop unkown meson paramter -Demotion-loaders-disabler. Meson
  prior to 0.60 ignored it, recent meson version fails.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1644321600">- Update to 1.26.2:
  * Fix crash when doing wierd combinations of eet_write and eet_read
  * Fix elementary tests to pass
  * Fix portability of putenv/setenv for niche OS's
  * Fix ecore input to build on BSD
  * Fix svg decoding crashes for vector decode
  * Fix theme - ibar label overlay
  * Fix theme - pointer scaling and sizing
  * Fix ecore x - ensure pointer on screen when setting bounds
  * elm theme - win - fix mystery off-by-1 resize of content
  * elm theme - fix mis-named colorclass for inwin bg
  * edje entry - fix past to use shft+ins for paste and no ctl
  * edje entry - complete key handling for cut (shft+del)
  * elm theme - fix placement of procstats and volume so they dont fight
  * Evas GL dithers by default for better quality (but it's a bit slower)
  * Evas HEIF format loaded (need to remove from disabled set)
  * Default theme is now the flat theme
  * New color palette files and API
  * Improved speed of Entry appending
  * Improved performance by not rendering invisible windows</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1645099200">- Upstream theme is now called Flat rather then dark. Dark will
  reappear soon in a new package.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1645099201">- Upstream theme is now called Flat rather then dark. Dark will
  reappear soon in a new package.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1645704000">- Themes are going to recommend there icon themes as well</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1646222400">- Drop python-devel BuildRequires: not needed.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1664193600">- Update to 1.26.3 Bugfix release
  * Fix theme issues
  * Fix edje calc internal return values in some cases
  * Fix ecore-x netwm moveresize request handling
  * Fix ecore-x xkb handling to not leak
  * Fix new xkb event handling
  * Fix evas smart object to null out fields for safety
  * Fix elm null cnp object handling to not crash in odd cases
  * Fix ecore evas x11 dnd handling to not null out xdnd props
  * Fix data checkme file so relocation at runtime works again
  * Fix eina bt output to always have spaces between fields
  * Fix png loader on arm to not have rgb values when a is 0
  * Fix textgrid to guard against null glyphs
  * Fix ecore-x vblank to use current time not vlbank time
  * Fix emile to handle invalid compress types more gracefully
  * Fix compile warnings
  * Fix evas psd loader crash
  * Fix osx sample compile conf script options
  * Fix wl vsync timer to use current time not vblank time
  * Work around xwayland issue where synthetic events are not sent</changelog>
</package>
<package pkgid="7cb47ee1e20d3d95fd4a9795fb2ecf09066fab207057a259fc325c09faa9f620" name="elua" arch="s390x">
  <version epoch="0" ver="1.26.3" rel="bp154.4.3.20"/>
  <changelog author="Simon Lees &lt;simonf.lees@suse.com&gt;" date="1573214400">- 1.23 Release
  * Again, the primary focus of this release has been stabilizing
    the EO library as well as an extending the set of unified API
    which is based on it. From this release onwards we also switched
    to meson as our only build system (RIP autotools, you served us
    well for a long time). The 2110 commits contain more changes to
    possible list here, but you will find improved DRM support, a new
    widget for controlling vector animations, a first step towards
    MVVM support, general bugfixes and more.
    Please see the NEWS file for more details.
  * spec file cleanup</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1579694400">- Use luajit only if available</changelog>
  <changelog author="Tomas Cech &lt;sleep_walker@opensuse.org&gt;" date="1580472000">- 1.23.3 Release
  Fixes:
  * elementary: handle case when XFIXES is not available. (T8321)
  * ecore: remove unecessary field in data structure.
  * eina: only the type need to be NULL to assume EINA_VALUE_EMPTY.
  * tests/eina: use #ifdef guard for block which can only occur inside ifdef (CID1400948)
  * mono: remove duplicated EinaFreeCb delegate
  * mono: blacklist efl_ui_text_context_menu_item_add
  * Revert "elm/genlist: don't process entire item queue on each item add"
  * tests/spec: allow for a longer timeout of the spec suite for dist build
  * travis/ci: update Fedora CI images to 31
  * ci: work around ccache segafult during setup
  * travis: update Ubuntu image to the 19.10 release
  * docs: Efl.Gfx.View
  * check: reset flags that used for legacy 'changed' cb
  * elementary: fix end of fast scroll not showing up during Efl.Ui.CollectionView scroll.
  * edje_calc: UNLIKELY changed to LIKELY.
  * elm_config: replace ecore_file_cp with ecore_file_mv
  * csharp:comma have whitespace after and none before
  * csharp: Removing a never used class. (T8417)
  * elementary: cleanup Eina_Future properly by relying on efl_future_then proper lifecycle.
  * elementary: properly handle in flight request in Efl.Ui.CollectionView.
  * elementary: watch event on the model Efl.Ui.CollectionView use directly.
  * ci: fix ccache segfault during setup on CI in release-ready build
  * evas_filter: remove shader compile error
  * Efl.Ui.Scroll_Manager: Fix indentation
  * eolian_mono: avoid keyword as a variable name
  * wl_egl : Prevent access to NULL pointer
  * eolian-cxx: Make events inherit beta info from klass.
  * Revert "elm/genlist: remove calc jobs"
  * Revert "tests/genlist: add behavior testing for nearly all genlist events"</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1582286400">- add full url to the source</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1586520000">- Drastically reduce the number of packages, the reality is
  these days most of the libs don't function without the others
  and everything we use needs all of them. Upstream is also heading
  in this direction.
- Drop avahi and elocation as upstream is phasing it out and we
  don't use them</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1588680000">- 1.24.0 Release
  * EO memory optimization improvements
  * Copy and Paste rework
  * Ecore_Wl2 work
  * Documentation work
  * Multiple other bugfixes
  * Removals
  * emotion &amp; evas: remove gstreamer 0.10 support (gstreamer 1.x support is stable)
  * escape: remove library from tree (no known reamaining user of EFL on PS3 OS)
  * ecore_x: remove support XGesture extension (deprecated, distros do no longer ship it)
  * elocation: remove beta library (never out of beta)
  * eeze: remove tizen module support from eeze sensor (unused, sensor API stays)
  * evas3d: remove support for evas 3D which was a beta all along (never out of beta)
  * Xine and vlc supportin emotion (gstreamer 1.x support is stable)</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1589457600">- 1.24.1 Release
  * edje - don't set font sizes less than 1
  * ecore_evas_x - fix maximize/unmaximize request corner case
  * ecore_evas: only define these eina errors once
  * exactness: remove no longer needed _evas_new()
  * exactness_player: do not test for delay_ms
  * evas + gl - fix callback-to-app-changes-state issue with pixel data</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1590494400">- 1.24.2
  * evas_vg_shape: return NULL in evas_vg_shape_add when the parent of shape is NULL
  * efl_ui_image: fix to call "clicked" smart callback when there is no img
  * ecore-x - ensure we fully look at all xkb events and refresh all binds
  * evas_vg_container: return NULL in evas_vg_container_add when the parent of container is NULL
  * build: ensure we set ENABLE_LUA_OLD when using a lua interpreter</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1596628800">- 1.24.3
  * evas - csd and wl csd - fix alpha zeroing to avoid framespace junk
  * evas - genetic update regions smart merge - merge v adjacent regions
  * efreet - handle runtime relocation right with default XDG_DATA_DIRS
  * edje: fix animation memory leak.
  * canvas vg: fix dangling vector containers.
  * evas vg: clean up dangling instances
  * canvas vg: fix vector file data memory leak.
  * efl gfx_path: fix memory leak.
  * efl_ui_image: fixed elm_image_preload_disabled_set api is not working when it is called before file set</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1598875200">- Disable NEON on armv6/7:
  * efl-no-neon.patch</changelog>
  <changelog author="Tomas Cech &lt;sleep_walker@opensuse.org&gt;" date="1599134400">- split out ecore_imf-module-scim to reduce dependencies of base efl package</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1603108800">- 1.25.1
  * This time around we do not have bigger changes to cover here. For the full list please look at the NEWS file, if you are interested in the details. As usual we have been working on fixing bugs, optimising our code for speed and memory footprint and adding new features.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1625659200">- Fix typo in description</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1641384000">- Drop unkown meson paramter -Demotion-loaders-disabler. Meson
  prior to 0.60 ignored it, recent meson version fails.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1644321600">- Update to 1.26.2:
  * Fix crash when doing wierd combinations of eet_write and eet_read
  * Fix elementary tests to pass
  * Fix portability of putenv/setenv for niche OS's
  * Fix ecore input to build on BSD
  * Fix svg decoding crashes for vector decode
  * Fix theme - ibar label overlay
  * Fix theme - pointer scaling and sizing
  * Fix ecore x - ensure pointer on screen when setting bounds
  * elm theme - win - fix mystery off-by-1 resize of content
  * elm theme - fix mis-named colorclass for inwin bg
  * edje entry - fix past to use shft+ins for paste and no ctl
  * edje entry - complete key handling for cut (shft+del)
  * elm theme - fix placement of procstats and volume so they dont fight
  * Evas GL dithers by default for better quality (but it's a bit slower)
  * Evas HEIF format loaded (need to remove from disabled set)
  * Default theme is now the flat theme
  * New color palette files and API
  * Improved speed of Entry appending
  * Improved performance by not rendering invisible windows</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1645099200">- Upstream theme is now called Flat rather then dark. Dark will
  reappear soon in a new package.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1645099201">- Upstream theme is now called Flat rather then dark. Dark will
  reappear soon in a new package.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1645704000">- Themes are going to recommend there icon themes as well</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1646222400">- Drop python-devel BuildRequires: not needed.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1664193600">- Update to 1.26.3 Bugfix release
  * Fix theme issues
  * Fix edje calc internal return values in some cases
  * Fix ecore-x netwm moveresize request handling
  * Fix ecore-x xkb handling to not leak
  * Fix new xkb event handling
  * Fix evas smart object to null out fields for safety
  * Fix elm null cnp object handling to not crash in odd cases
  * Fix ecore evas x11 dnd handling to not null out xdnd props
  * Fix data checkme file so relocation at runtime works again
  * Fix eina bt output to always have spaces between fields
  * Fix png loader on arm to not have rgb values when a is 0
  * Fix textgrid to guard against null glyphs
  * Fix ecore-x vblank to use current time not vlbank time
  * Fix emile to handle invalid compress types more gracefully
  * Fix compile warnings
  * Fix evas psd loader crash
  * Fix osx sample compile conf script options
  * Fix wl vsync timer to use current time not vblank time
  * Work around xwayland issue where synthetic events are not sent</changelog>
</package>
<package pkgid="630c2fc1e552e0eda84b3261122ff4bab0b617d8d10a7ad1da79ec619a2015d0" name="elua" arch="x86_64">
  <version epoch="0" ver="1.26.3" rel="bp154.4.3.20"/>
  <changelog author="Simon Lees &lt;simonf.lees@suse.com&gt;" date="1573214400">- 1.23 Release
  * Again, the primary focus of this release has been stabilizing
    the EO library as well as an extending the set of unified API
    which is based on it. From this release onwards we also switched
    to meson as our only build system (RIP autotools, you served us
    well for a long time). The 2110 commits contain more changes to
    possible list here, but you will find improved DRM support, a new
    widget for controlling vector animations, a first step towards
    MVVM support, general bugfixes and more.
    Please see the NEWS file for more details.
  * spec file cleanup</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1579694400">- Use luajit only if available</changelog>
  <changelog author="Tomas Cech &lt;sleep_walker@opensuse.org&gt;" date="1580472000">- 1.23.3 Release
  Fixes:
  * elementary: handle case when XFIXES is not available. (T8321)
  * ecore: remove unecessary field in data structure.
  * eina: only the type need to be NULL to assume EINA_VALUE_EMPTY.
  * tests/eina: use #ifdef guard for block which can only occur inside ifdef (CID1400948)
  * mono: remove duplicated EinaFreeCb delegate
  * mono: blacklist efl_ui_text_context_menu_item_add
  * Revert "elm/genlist: don't process entire item queue on each item add"
  * tests/spec: allow for a longer timeout of the spec suite for dist build
  * travis/ci: update Fedora CI images to 31
  * ci: work around ccache segafult during setup
  * travis: update Ubuntu image to the 19.10 release
  * docs: Efl.Gfx.View
  * check: reset flags that used for legacy 'changed' cb
  * elementary: fix end of fast scroll not showing up during Efl.Ui.CollectionView scroll.
  * edje_calc: UNLIKELY changed to LIKELY.
  * elm_config: replace ecore_file_cp with ecore_file_mv
  * csharp:comma have whitespace after and none before
  * csharp: Removing a never used class. (T8417)
  * elementary: cleanup Eina_Future properly by relying on efl_future_then proper lifecycle.
  * elementary: properly handle in flight request in Efl.Ui.CollectionView.
  * elementary: watch event on the model Efl.Ui.CollectionView use directly.
  * ci: fix ccache segfault during setup on CI in release-ready build
  * evas_filter: remove shader compile error
  * Efl.Ui.Scroll_Manager: Fix indentation
  * eolian_mono: avoid keyword as a variable name
  * wl_egl : Prevent access to NULL pointer
  * eolian-cxx: Make events inherit beta info from klass.
  * Revert "elm/genlist: remove calc jobs"
  * Revert "tests/genlist: add behavior testing for nearly all genlist events"</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1582286400">- add full url to the source</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1586520000">- Drastically reduce the number of packages, the reality is
  these days most of the libs don't function without the others
  and everything we use needs all of them. Upstream is also heading
  in this direction.
- Drop avahi and elocation as upstream is phasing it out and we
  don't use them</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1588680000">- 1.24.0 Release
  * EO memory optimization improvements
  * Copy and Paste rework
  * Ecore_Wl2 work
  * Documentation work
  * Multiple other bugfixes
  * Removals
  * emotion &amp; evas: remove gstreamer 0.10 support (gstreamer 1.x support is stable)
  * escape: remove library from tree (no known reamaining user of EFL on PS3 OS)
  * ecore_x: remove support XGesture extension (deprecated, distros do no longer ship it)
  * elocation: remove beta library (never out of beta)
  * eeze: remove tizen module support from eeze sensor (unused, sensor API stays)
  * evas3d: remove support for evas 3D which was a beta all along (never out of beta)
  * Xine and vlc supportin emotion (gstreamer 1.x support is stable)</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1589457600">- 1.24.1 Release
  * edje - don't set font sizes less than 1
  * ecore_evas_x - fix maximize/unmaximize request corner case
  * ecore_evas: only define these eina errors once
  * exactness: remove no longer needed _evas_new()
  * exactness_player: do not test for delay_ms
  * evas + gl - fix callback-to-app-changes-state issue with pixel data</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1590494400">- 1.24.2
  * evas_vg_shape: return NULL in evas_vg_shape_add when the parent of shape is NULL
  * efl_ui_image: fix to call "clicked" smart callback when there is no img
  * ecore-x - ensure we fully look at all xkb events and refresh all binds
  * evas_vg_container: return NULL in evas_vg_container_add when the parent of container is NULL
  * build: ensure we set ENABLE_LUA_OLD when using a lua interpreter</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1596628800">- 1.24.3
  * evas - csd and wl csd - fix alpha zeroing to avoid framespace junk
  * evas - genetic update regions smart merge - merge v adjacent regions
  * efreet - handle runtime relocation right with default XDG_DATA_DIRS
  * edje: fix animation memory leak.
  * canvas vg: fix dangling vector containers.
  * evas vg: clean up dangling instances
  * canvas vg: fix vector file data memory leak.
  * efl gfx_path: fix memory leak.
  * efl_ui_image: fixed elm_image_preload_disabled_set api is not working when it is called before file set</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1598875200">- Disable NEON on armv6/7:
  * efl-no-neon.patch</changelog>
  <changelog author="Tomas Cech &lt;sleep_walker@opensuse.org&gt;" date="1599134400">- split out ecore_imf-module-scim to reduce dependencies of base efl package</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1603108800">- 1.25.1
  * This time around we do not have bigger changes to cover here. For the full list please look at the NEWS file, if you are interested in the details. As usual we have been working on fixing bugs, optimising our code for speed and memory footprint and adding new features.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1625659200">- Fix typo in description</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1641384000">- Drop unkown meson paramter -Demotion-loaders-disabler. Meson
  prior to 0.60 ignored it, recent meson version fails.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1644321600">- Update to 1.26.2:
  * Fix crash when doing wierd combinations of eet_write and eet_read
  * Fix elementary tests to pass
  * Fix portability of putenv/setenv for niche OS's
  * Fix ecore input to build on BSD
  * Fix svg decoding crashes for vector decode
  * Fix theme - ibar label overlay
  * Fix theme - pointer scaling and sizing
  * Fix ecore x - ensure pointer on screen when setting bounds
  * elm theme - win - fix mystery off-by-1 resize of content
  * elm theme - fix mis-named colorclass for inwin bg
  * edje entry - fix past to use shft+ins for paste and no ctl
  * edje entry - complete key handling for cut (shft+del)
  * elm theme - fix placement of procstats and volume so they dont fight
  * Evas GL dithers by default for better quality (but it's a bit slower)
  * Evas HEIF format loaded (need to remove from disabled set)
  * Default theme is now the flat theme
  * New color palette files and API
  * Improved speed of Entry appending
  * Improved performance by not rendering invisible windows</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1645099200">- Upstream theme is now called Flat rather then dark. Dark will
  reappear soon in a new package.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1645099201">- Upstream theme is now called Flat rather then dark. Dark will
  reappear soon in a new package.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1645704000">- Themes are going to recommend there icon themes as well</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1646222400">- Drop python-devel BuildRequires: not needed.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1664193600">- Update to 1.26.3 Bugfix release
  * Fix theme issues
  * Fix edje calc internal return values in some cases
  * Fix ecore-x netwm moveresize request handling
  * Fix ecore-x xkb handling to not leak
  * Fix new xkb event handling
  * Fix evas smart object to null out fields for safety
  * Fix elm null cnp object handling to not crash in odd cases
  * Fix ecore evas x11 dnd handling to not null out xdnd props
  * Fix data checkme file so relocation at runtime works again
  * Fix eina bt output to always have spaces between fields
  * Fix png loader on arm to not have rgb values when a is 0
  * Fix textgrid to guard against null glyphs
  * Fix ecore-x vblank to use current time not vlbank time
  * Fix emile to handle invalid compress types more gracefully
  * Fix compile warnings
  * Fix evas psd loader crash
  * Fix osx sample compile conf script options
  * Fix wl vsync timer to use current time not vblank time
  * Work around xwayland issue where synthetic events are not sent</changelog>
</package>
<package pkgid="ef362040a5b10fcd7619222aec83d848fa6b5ef0edce1e6193f83df6cca2e446" name="enlightenment" arch="aarch64">
  <version epoch="0" ver="0.25.4" rel="bp154.4.3.1"/>
  <changelog author="sflees@suse.de" date="1521115200">- 0.22.2
  * T5910    systray related crashes.
  * T6202    luncher: popup focus issue.
  * T6211    Login with wrong password possible! "Authentication via PAM had errors setting up the authentication session. The error code was 11"
  * T6259    BSD CPUClock bryce gadget - arrow moves in the opposite direction
  * T6328    luncher preview issues
  * T6414    e moves and resizes maximized windows on restart
  * T6454    Copy Paste freezes E.
  * T6617    Better check for evas gl support
  * T6619    Black flicker between E's splash screen and desktop
  * T6623    moving gadgets around multiple times crashes E
  * T6633    make it simpler to report bugs
  * T6644    wayland / xwayland issues
  * T6721    Make Bryce Less like a pogostick
  * T6722    lockscreen gadgets are not shown on "startup lockscreen" and "suspend lockscreen"
  * T6723    window borders doesn't accept edje icons
  * Other miscolanious fixes
- Don't ship wayland desktop file in Leap 15 (but build support)
- Fix desktop files not to symlink to each other
- Add feature-qt-apps-gtk2-theme.patch to set a style for Qt apps
  they look rather broken otherwise</changelog>
  <changelog author="sflees@suse.de" date="1521806400">- 0.22.3
  * T6779 Fix screenlock regression
  * T6784 enlightenment_open still uses deprecated defaults.list
  * remove pulse - wayland hack thats no longer needed</changelog>
  <changelog author="sean@suspend.net" date="1538308800">- 0.22.4
  * T5076 Incorrect desktop files
  * T5203 alt+esc sometimes crash
  * T6787 Exec-keys in some .desktop files are failing to be recognized by Enlightenment
  * T7030 efl internals pass null objects to functions which should not be passed null</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1559131200">- Disable wayland until 0.23.0 when it will build again
- only use update alternatives on openSUSE
- enable systemd on Mageia</changelog>
  <changelog author="simon &lt;simonf.lees@suse.com&gt;" date="1567684800">- 0.23.1
  * Renable wayland support
  * Highlights
  * New padded screenshot option
  * Meson build now is the build system
  * Music Control now supports rage mpris dbus protocol
  * Add Bluez5 support with totally new and redone module and gadget
  * Add dpms option to turn it off or on
  * Alt-tab window switcher allows moving of windows while alt-tabbing
  * Lots of bug fixes, compile warning fixes etc.
  * Massive improvements to Wayland support</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1576756800">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  Allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1589889600">- 0.24.0
  * New and improved shot module with editor and cropper
  * Reduced number of setuid tools (merged many into single system tool)
  * External monitor backlight and brightness controls via (lib)ddctil
  * Improved resolution of EFM thumbnails to 256x256 by default
  * New and improved crash handling guru meditation
  * Restarts are now seamless with fade in and out and zero glitches
  * Wallpaper import generates multiple resolutions for better efficiency
  * Regularly malloc_trim if available to keep mem down
  * All restarts are now handled by enlightenment_start, not e itself
  * Enforce pointer lock to screen in X to stop pointer out-of-bounds
  * Pager plain is gone - use the regular "miniature preview" pager
  * Music control auto-runs your selected media player if not there
  * Handle exception for steam games to find the right desktop file
  * Polkit auth agent support as new core module - no extra daemons
  * Drop comp fast effects - Should be edje transition factor + theme tags
  * Easier config of specific desktop wallpaper straight from pager
  * Startup should be smoother with IO prefetch thread
  * New special blanking timeout for when locked that can be shorter
  * Bluez4 gone now as Bluez5 is done and working fine
  * Down to zero outstanding coverity issues
  * The usual batches of bug fixes and minor improvements
  * New source system.conf to replace upstream's with an openSUSE
    specific config</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1593777600">- Fix name for dlopen'ed libddcutil2 runtime dependency</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1596715200">- 0.24.2
  * Fixed null exec command running
  * Fixed handling of screen with no edid
  * Fixed signal.h, execinfo.h include for some libc's
  * Sped up pager thumb loading significant;y
  * Handle zone changes during startup
  * Longer efreetd timeout for update event
  * Fixed e's xsettings support on 64bit to use the right types
  * Fixed preloading of icon
  * Fixed e's wl backlight/dimming logic to be correct and reliable
  * Fixed noisy logging on invalid exec handle found
  * Fixed shot blurriness if size didn't quite match
  * Fixed battery on openbsd to use right constants
  * Fixed cpu freq setting on freebsd etc.
  * Handle error exits from dependency libs as an error and bring up alert
  * E system - isolate stdio so it doesn't affect ipc on stdin/out
  * Polkit &amp; Askpass password - handle escaping right
  * Fix tiling issue with float/unfloat
  * Fixed shell autohide when clock data up
  * Handle x io error with proper exit code and exit
- 0.24.1
  * Optimized keymap response handling to not stall on startup
  * Fixed wayland frame request timestamp to be the 0 base same as others
  * Fix polkit auth handling when having to auth for non-user UID
  * Randr fix to move pointer on-screen if off screen after reconfigure
  * Fix non-systemd system suport for resume to not think it's suspended
  * Add delay to allow any pending frames to display before suspend
- Add fix-opensuse-pam-search-path.patch because pam is in /usr/include/security</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1597665600">- libddcutil3 replaces libddcutil2 in Tumbleweed</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1597752000">- libddcutil.patch: acutally load libddcutil.so.3 instead of
  libddcutil.so.2 in Tumbleweed</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1605182400">- BuildRequire hicolor-icon-theme to fix directory not owned.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1617278400">- Just recommend libddcutil its not strictly needed and the feature
  wasn't in older versions of Leap.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1644321600">- Update to 0.25.2:
  * Lots of minor bug fixes (see git log)
  * Flat look to match new flat theme
  * New much higher quality default wallpaper set
  * Optimized XKB keymap change handling
  * Init splash is now always on (theme can remove it if desired)
  * Added screen setup menu entry in quick settings menu
  * Redid a lot of screen dimming/blanking/timeout code to fix cruft
  * IBox iconify gadget has window previews on mouse-over now
  * New gesture recognition bindings for touchpads (using Elput)
  * On loss or re-plug in of screen now restore windows sensibly
  * Tasks has window preview on mouse-over now
  * FPS debug (ctl+alt+shift+f to toggle) has a lot more data now
  * BT devices in the Bluez gadget will show battery level if supported
  * Battery now has mouse-over popup with detailed battery information
  * Config saving moved to threads to minimize I/O stutter to core
  * Shot allows copy of screenshot to copy and paste selection too now
  * Temperature monitor now uses hwmon devices and multiple instances
  * New Procstats module can show mem/CPU usage in titlebar
  * Offline/presentation mode removed - use bindings + actions instead
  * Remove custom desklock command - built in is more reliable
  * Winlist (alt+tab) has large mode with window previews now
  * Pluggable device monitoring and applying of input config on plug
  * Added workaround broken Spotify cover art URLs
  * Scale settings will now modify xsettings DPI to make non-efl apps scale
  * Fonts now made to be consistent with EFL and other apps
  * Added binding action to switch profiles
  * EFM - sync more often when doing I/O ops like copy etc.
  * XDG_CURRENT_DESKTOP is now set too
  * EFM image preview will show EFIX dates for when image taken
  * Power plug/unplug now emit signals which theme can make sounds for
  * Mixer - have simple device to icon database text file to look nicer
  * Mixer - add VU meters for output and input audio
  * Mixer - Show icons for apps currently playing sounds and recording
  * Set _NET_WM_STATE_HIDDEN when windows are hidden to avoid rendering
  * Reduce power usage when screen is blanked by setting wins to iconic
  * Added ?grow window in direction? actions you can bind
  * Added palette editor and selector tool to set up custom colors
  * Fingerprint (libFprint) support in desklock and new tool for settings
  * EFM - add recent files menu to access recently opened files
  * Force stdout/error log now to ~/.e-log.log
  * Added settings for animation multiplier to speed up/down transitions
  * No more edge bindings by default
- Rebase dont_offer_updates.patch
- Rebase feature-qt-apps-gtk2-theme.patch
- Remove feature-suse-disable-offline-menu.patch
- Remove libddcutil.patch</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1645012800">- Update to 0.25.3
  * Fix notification double-shadow on multi-screen notifications
  * Add option to gesture to turn off entirely to avoid xserver vt bugs
  * Add option to backlight to disable ddc support in case it's broken
  * Fix ibar left/right emit for alignment
- Log to journal with X11 etc rather then logfile
    feature-openSUSE-log-to-journal.patch
- Refreshed enlightenment-0.16.999.65256-dont_require_suidbit.patch to be -p1
- Fix xsession file install</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1645704000">- boo#1154733 - Recommend pam_mount</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1646049600">- Allow Branding &gt;= 0.1 (I made 0.2 the other day)
- Fix non wayland build</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1650024000">- boo#1197326,1196609 - Don't Enable modules that don't exist in profile
  migration.
  * fix-upstream-dont-migrate-sysinfoluncher.patch
- Recommend acpid for bindings</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1651752000">- Recommend acpid for bindings (Should now remove popup) [boo#1196609]
- system.conf allow all users, this is required because we no
  longer automatically add people to the users group. [boo#1196609]</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1664280000">- Update to 0.25.4 Bugfix release
  * Fix shape handling in various cases that affected apps with shaped input
  * Fix procstats popup and dangling icon for fullscreen windows
  * Fix a vianishing pointer in some cases
  * Workaround Qt issue where it does not remove WM_STATE on withdraw
  * Fix fullscreen focus toggle flicker
  * Fix pointer sticking case
  * Fix tap-to-click props
  * Fix gadgcon disabled items
  * Fix config fallback handling that means no fallback happened
  * Fix gtk frame prop handling
  * Fix first map handling that affected energyxt
  * Fix CVE-2022-37706 (boo#1203631)
  * Hanrde enlightenment_sys when mis-packaged without sysactions.conf
- Drop fix-upstream-dont-migrate-sysinfoluncher.patch fixed upstream</changelog>
</package>
<package pkgid="0d0847f8189469aff7eb5af421fb263d7a929e5ccb4fafee92827bce8763f31d" name="enlightenment" arch="ppc64le">
  <version epoch="0" ver="0.25.4" rel="bp154.4.3.1"/>
  <changelog author="sflees@suse.de" date="1521115200">- 0.22.2
  * T5910    systray related crashes.
  * T6202    luncher: popup focus issue.
  * T6211    Login with wrong password possible! "Authentication via PAM had errors setting up the authentication session. The error code was 11"
  * T6259    BSD CPUClock bryce gadget - arrow moves in the opposite direction
  * T6328    luncher preview issues
  * T6414    e moves and resizes maximized windows on restart
  * T6454    Copy Paste freezes E.
  * T6617    Better check for evas gl support
  * T6619    Black flicker between E's splash screen and desktop
  * T6623    moving gadgets around multiple times crashes E
  * T6633    make it simpler to report bugs
  * T6644    wayland / xwayland issues
  * T6721    Make Bryce Less like a pogostick
  * T6722    lockscreen gadgets are not shown on "startup lockscreen" and "suspend lockscreen"
  * T6723    window borders doesn't accept edje icons
  * Other miscolanious fixes
- Don't ship wayland desktop file in Leap 15 (but build support)
- Fix desktop files not to symlink to each other
- Add feature-qt-apps-gtk2-theme.patch to set a style for Qt apps
  they look rather broken otherwise</changelog>
  <changelog author="sflees@suse.de" date="1521806400">- 0.22.3
  * T6779 Fix screenlock regression
  * T6784 enlightenment_open still uses deprecated defaults.list
  * remove pulse - wayland hack thats no longer needed</changelog>
  <changelog author="sean@suspend.net" date="1538308800">- 0.22.4
  * T5076 Incorrect desktop files
  * T5203 alt+esc sometimes crash
  * T6787 Exec-keys in some .desktop files are failing to be recognized by Enlightenment
  * T7030 efl internals pass null objects to functions which should not be passed null</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1559131200">- Disable wayland until 0.23.0 when it will build again
- only use update alternatives on openSUSE
- enable systemd on Mageia</changelog>
  <changelog author="simon &lt;simonf.lees@suse.com&gt;" date="1567684800">- 0.23.1
  * Renable wayland support
  * Highlights
  * New padded screenshot option
  * Meson build now is the build system
  * Music Control now supports rage mpris dbus protocol
  * Add Bluez5 support with totally new and redone module and gadget
  * Add dpms option to turn it off or on
  * Alt-tab window switcher allows moving of windows while alt-tabbing
  * Lots of bug fixes, compile warning fixes etc.
  * Massive improvements to Wayland support</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1576756800">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  Allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1589889600">- 0.24.0
  * New and improved shot module with editor and cropper
  * Reduced number of setuid tools (merged many into single system tool)
  * External monitor backlight and brightness controls via (lib)ddctil
  * Improved resolution of EFM thumbnails to 256x256 by default
  * New and improved crash handling guru meditation
  * Restarts are now seamless with fade in and out and zero glitches
  * Wallpaper import generates multiple resolutions for better efficiency
  * Regularly malloc_trim if available to keep mem down
  * All restarts are now handled by enlightenment_start, not e itself
  * Enforce pointer lock to screen in X to stop pointer out-of-bounds
  * Pager plain is gone - use the regular "miniature preview" pager
  * Music control auto-runs your selected media player if not there
  * Handle exception for steam games to find the right desktop file
  * Polkit auth agent support as new core module - no extra daemons
  * Drop comp fast effects - Should be edje transition factor + theme tags
  * Easier config of specific desktop wallpaper straight from pager
  * Startup should be smoother with IO prefetch thread
  * New special blanking timeout for when locked that can be shorter
  * Bluez4 gone now as Bluez5 is done and working fine
  * Down to zero outstanding coverity issues
  * The usual batches of bug fixes and minor improvements
  * New source system.conf to replace upstream's with an openSUSE
    specific config</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1593777600">- Fix name for dlopen'ed libddcutil2 runtime dependency</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1596715200">- 0.24.2
  * Fixed null exec command running
  * Fixed handling of screen with no edid
  * Fixed signal.h, execinfo.h include for some libc's
  * Sped up pager thumb loading significant;y
  * Handle zone changes during startup
  * Longer efreetd timeout for update event
  * Fixed e's xsettings support on 64bit to use the right types
  * Fixed preloading of icon
  * Fixed e's wl backlight/dimming logic to be correct and reliable
  * Fixed noisy logging on invalid exec handle found
  * Fixed shot blurriness if size didn't quite match
  * Fixed battery on openbsd to use right constants
  * Fixed cpu freq setting on freebsd etc.
  * Handle error exits from dependency libs as an error and bring up alert
  * E system - isolate stdio so it doesn't affect ipc on stdin/out
  * Polkit &amp; Askpass password - handle escaping right
  * Fix tiling issue with float/unfloat
  * Fixed shell autohide when clock data up
  * Handle x io error with proper exit code and exit
- 0.24.1
  * Optimized keymap response handling to not stall on startup
  * Fixed wayland frame request timestamp to be the 0 base same as others
  * Fix polkit auth handling when having to auth for non-user UID
  * Randr fix to move pointer on-screen if off screen after reconfigure
  * Fix non-systemd system suport for resume to not think it's suspended
  * Add delay to allow any pending frames to display before suspend
- Add fix-opensuse-pam-search-path.patch because pam is in /usr/include/security</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1597665600">- libddcutil3 replaces libddcutil2 in Tumbleweed</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1597752000">- libddcutil.patch: acutally load libddcutil.so.3 instead of
  libddcutil.so.2 in Tumbleweed</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1605182400">- BuildRequire hicolor-icon-theme to fix directory not owned.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1617278400">- Just recommend libddcutil its not strictly needed and the feature
  wasn't in older versions of Leap.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1644321600">- Update to 0.25.2:
  * Lots of minor bug fixes (see git log)
  * Flat look to match new flat theme
  * New much higher quality default wallpaper set
  * Optimized XKB keymap change handling
  * Init splash is now always on (theme can remove it if desired)
  * Added screen setup menu entry in quick settings menu
  * Redid a lot of screen dimming/blanking/timeout code to fix cruft
  * IBox iconify gadget has window previews on mouse-over now
  * New gesture recognition bindings for touchpads (using Elput)
  * On loss or re-plug in of screen now restore windows sensibly
  * Tasks has window preview on mouse-over now
  * FPS debug (ctl+alt+shift+f to toggle) has a lot more data now
  * BT devices in the Bluez gadget will show battery level if supported
  * Battery now has mouse-over popup with detailed battery information
  * Config saving moved to threads to minimize I/O stutter to core
  * Shot allows copy of screenshot to copy and paste selection too now
  * Temperature monitor now uses hwmon devices and multiple instances
  * New Procstats module can show mem/CPU usage in titlebar
  * Offline/presentation mode removed - use bindings + actions instead
  * Remove custom desklock command - built in is more reliable
  * Winlist (alt+tab) has large mode with window previews now
  * Pluggable device monitoring and applying of input config on plug
  * Added workaround broken Spotify cover art URLs
  * Scale settings will now modify xsettings DPI to make non-efl apps scale
  * Fonts now made to be consistent with EFL and other apps
  * Added binding action to switch profiles
  * EFM - sync more often when doing I/O ops like copy etc.
  * XDG_CURRENT_DESKTOP is now set too
  * EFM image preview will show EFIX dates for when image taken
  * Power plug/unplug now emit signals which theme can make sounds for
  * Mixer - have simple device to icon database text file to look nicer
  * Mixer - add VU meters for output and input audio
  * Mixer - Show icons for apps currently playing sounds and recording
  * Set _NET_WM_STATE_HIDDEN when windows are hidden to avoid rendering
  * Reduce power usage when screen is blanked by setting wins to iconic
  * Added ?grow window in direction? actions you can bind
  * Added palette editor and selector tool to set up custom colors
  * Fingerprint (libFprint) support in desklock and new tool for settings
  * EFM - add recent files menu to access recently opened files
  * Force stdout/error log now to ~/.e-log.log
  * Added settings for animation multiplier to speed up/down transitions
  * No more edge bindings by default
- Rebase dont_offer_updates.patch
- Rebase feature-qt-apps-gtk2-theme.patch
- Remove feature-suse-disable-offline-menu.patch
- Remove libddcutil.patch</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1645012800">- Update to 0.25.3
  * Fix notification double-shadow on multi-screen notifications
  * Add option to gesture to turn off entirely to avoid xserver vt bugs
  * Add option to backlight to disable ddc support in case it's broken
  * Fix ibar left/right emit for alignment
- Log to journal with X11 etc rather then logfile
    feature-openSUSE-log-to-journal.patch
- Refreshed enlightenment-0.16.999.65256-dont_require_suidbit.patch to be -p1
- Fix xsession file install</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1645704000">- boo#1154733 - Recommend pam_mount</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1646049600">- Allow Branding &gt;= 0.1 (I made 0.2 the other day)
- Fix non wayland build</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1650024000">- boo#1197326,1196609 - Don't Enable modules that don't exist in profile
  migration.
  * fix-upstream-dont-migrate-sysinfoluncher.patch
- Recommend acpid for bindings</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1651752000">- Recommend acpid for bindings (Should now remove popup) [boo#1196609]
- system.conf allow all users, this is required because we no
  longer automatically add people to the users group. [boo#1196609]</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1664280000">- Update to 0.25.4 Bugfix release
  * Fix shape handling in various cases that affected apps with shaped input
  * Fix procstats popup and dangling icon for fullscreen windows
  * Fix a vianishing pointer in some cases
  * Workaround Qt issue where it does not remove WM_STATE on withdraw
  * Fix fullscreen focus toggle flicker
  * Fix pointer sticking case
  * Fix tap-to-click props
  * Fix gadgcon disabled items
  * Fix config fallback handling that means no fallback happened
  * Fix gtk frame prop handling
  * Fix first map handling that affected energyxt
  * Fix CVE-2022-37706 (boo#1203631)
  * Hanrde enlightenment_sys when mis-packaged without sysactions.conf
- Drop fix-upstream-dont-migrate-sysinfoluncher.patch fixed upstream</changelog>
</package>
<package pkgid="4bb3be4ece08034dad5c75a811114d0755fb14e5c69f44d82469a51ab099dab9" name="enlightenment" arch="s390x">
  <version epoch="0" ver="0.25.4" rel="bp154.4.3.1"/>
  <changelog author="sflees@suse.de" date="1521115200">- 0.22.2
  * T5910    systray related crashes.
  * T6202    luncher: popup focus issue.
  * T6211    Login with wrong password possible! "Authentication via PAM had errors setting up the authentication session. The error code was 11"
  * T6259    BSD CPUClock bryce gadget - arrow moves in the opposite direction
  * T6328    luncher preview issues
  * T6414    e moves and resizes maximized windows on restart
  * T6454    Copy Paste freezes E.
  * T6617    Better check for evas gl support
  * T6619    Black flicker between E's splash screen and desktop
  * T6623    moving gadgets around multiple times crashes E
  * T6633    make it simpler to report bugs
  * T6644    wayland / xwayland issues
  * T6721    Make Bryce Less like a pogostick
  * T6722    lockscreen gadgets are not shown on "startup lockscreen" and "suspend lockscreen"
  * T6723    window borders doesn't accept edje icons
  * Other miscolanious fixes
- Don't ship wayland desktop file in Leap 15 (but build support)
- Fix desktop files not to symlink to each other
- Add feature-qt-apps-gtk2-theme.patch to set a style for Qt apps
  they look rather broken otherwise</changelog>
  <changelog author="sflees@suse.de" date="1521806400">- 0.22.3
  * T6779 Fix screenlock regression
  * T6784 enlightenment_open still uses deprecated defaults.list
  * remove pulse - wayland hack thats no longer needed</changelog>
  <changelog author="sean@suspend.net" date="1538308800">- 0.22.4
  * T5076 Incorrect desktop files
  * T5203 alt+esc sometimes crash
  * T6787 Exec-keys in some .desktop files are failing to be recognized by Enlightenment
  * T7030 efl internals pass null objects to functions which should not be passed null</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1559131200">- Disable wayland until 0.23.0 when it will build again
- only use update alternatives on openSUSE
- enable systemd on Mageia</changelog>
  <changelog author="simon &lt;simonf.lees@suse.com&gt;" date="1567684800">- 0.23.1
  * Renable wayland support
  * Highlights
  * New padded screenshot option
  * Meson build now is the build system
  * Music Control now supports rage mpris dbus protocol
  * Add Bluez5 support with totally new and redone module and gadget
  * Add dpms option to turn it off or on
  * Alt-tab window switcher allows moving of windows while alt-tabbing
  * Lots of bug fixes, compile warning fixes etc.
  * Massive improvements to Wayland support</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1576756800">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  Allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1589889600">- 0.24.0
  * New and improved shot module with editor and cropper
  * Reduced number of setuid tools (merged many into single system tool)
  * External monitor backlight and brightness controls via (lib)ddctil
  * Improved resolution of EFM thumbnails to 256x256 by default
  * New and improved crash handling guru meditation
  * Restarts are now seamless with fade in and out and zero glitches
  * Wallpaper import generates multiple resolutions for better efficiency
  * Regularly malloc_trim if available to keep mem down
  * All restarts are now handled by enlightenment_start, not e itself
  * Enforce pointer lock to screen in X to stop pointer out-of-bounds
  * Pager plain is gone - use the regular "miniature preview" pager
  * Music control auto-runs your selected media player if not there
  * Handle exception for steam games to find the right desktop file
  * Polkit auth agent support as new core module - no extra daemons
  * Drop comp fast effects - Should be edje transition factor + theme tags
  * Easier config of specific desktop wallpaper straight from pager
  * Startup should be smoother with IO prefetch thread
  * New special blanking timeout for when locked that can be shorter
  * Bluez4 gone now as Bluez5 is done and working fine
  * Down to zero outstanding coverity issues
  * The usual batches of bug fixes and minor improvements
  * New source system.conf to replace upstream's with an openSUSE
    specific config</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1593777600">- Fix name for dlopen'ed libddcutil2 runtime dependency</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1596715200">- 0.24.2
  * Fixed null exec command running
  * Fixed handling of screen with no edid
  * Fixed signal.h, execinfo.h include for some libc's
  * Sped up pager thumb loading significant;y
  * Handle zone changes during startup
  * Longer efreetd timeout for update event
  * Fixed e's xsettings support on 64bit to use the right types
  * Fixed preloading of icon
  * Fixed e's wl backlight/dimming logic to be correct and reliable
  * Fixed noisy logging on invalid exec handle found
  * Fixed shot blurriness if size didn't quite match
  * Fixed battery on openbsd to use right constants
  * Fixed cpu freq setting on freebsd etc.
  * Handle error exits from dependency libs as an error and bring up alert
  * E system - isolate stdio so it doesn't affect ipc on stdin/out
  * Polkit &amp; Askpass password - handle escaping right
  * Fix tiling issue with float/unfloat
  * Fixed shell autohide when clock data up
  * Handle x io error with proper exit code and exit
- 0.24.1
  * Optimized keymap response handling to not stall on startup
  * Fixed wayland frame request timestamp to be the 0 base same as others
  * Fix polkit auth handling when having to auth for non-user UID
  * Randr fix to move pointer on-screen if off screen after reconfigure
  * Fix non-systemd system suport for resume to not think it's suspended
  * Add delay to allow any pending frames to display before suspend
- Add fix-opensuse-pam-search-path.patch because pam is in /usr/include/security</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1597665600">- libddcutil3 replaces libddcutil2 in Tumbleweed</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1597752000">- libddcutil.patch: acutally load libddcutil.so.3 instead of
  libddcutil.so.2 in Tumbleweed</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1605182400">- BuildRequire hicolor-icon-theme to fix directory not owned.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1617278400">- Just recommend libddcutil its not strictly needed and the feature
  wasn't in older versions of Leap.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1644321600">- Update to 0.25.2:
  * Lots of minor bug fixes (see git log)
  * Flat look to match new flat theme
  * New much higher quality default wallpaper set
  * Optimized XKB keymap change handling
  * Init splash is now always on (theme can remove it if desired)
  * Added screen setup menu entry in quick settings menu
  * Redid a lot of screen dimming/blanking/timeout code to fix cruft
  * IBox iconify gadget has window previews on mouse-over now
  * New gesture recognition bindings for touchpads (using Elput)
  * On loss or re-plug in of screen now restore windows sensibly
  * Tasks has window preview on mouse-over now
  * FPS debug (ctl+alt+shift+f to toggle) has a lot more data now
  * BT devices in the Bluez gadget will show battery level if supported
  * Battery now has mouse-over popup with detailed battery information
  * Config saving moved to threads to minimize I/O stutter to core
  * Shot allows copy of screenshot to copy and paste selection too now
  * Temperature monitor now uses hwmon devices and multiple instances
  * New Procstats module can show mem/CPU usage in titlebar
  * Offline/presentation mode removed - use bindings + actions instead
  * Remove custom desklock command - built in is more reliable
  * Winlist (alt+tab) has large mode with window previews now
  * Pluggable device monitoring and applying of input config on plug
  * Added workaround broken Spotify cover art URLs
  * Scale settings will now modify xsettings DPI to make non-efl apps scale
  * Fonts now made to be consistent with EFL and other apps
  * Added binding action to switch profiles
  * EFM - sync more often when doing I/O ops like copy etc.
  * XDG_CURRENT_DESKTOP is now set too
  * EFM image preview will show EFIX dates for when image taken
  * Power plug/unplug now emit signals which theme can make sounds for
  * Mixer - have simple device to icon database text file to look nicer
  * Mixer - add VU meters for output and input audio
  * Mixer - Show icons for apps currently playing sounds and recording
  * Set _NET_WM_STATE_HIDDEN when windows are hidden to avoid rendering
  * Reduce power usage when screen is blanked by setting wins to iconic
  * Added ?grow window in direction? actions you can bind
  * Added palette editor and selector tool to set up custom colors
  * Fingerprint (libFprint) support in desklock and new tool for settings
  * EFM - add recent files menu to access recently opened files
  * Force stdout/error log now to ~/.e-log.log
  * Added settings for animation multiplier to speed up/down transitions
  * No more edge bindings by default
- Rebase dont_offer_updates.patch
- Rebase feature-qt-apps-gtk2-theme.patch
- Remove feature-suse-disable-offline-menu.patch
- Remove libddcutil.patch</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1645012800">- Update to 0.25.3
  * Fix notification double-shadow on multi-screen notifications
  * Add option to gesture to turn off entirely to avoid xserver vt bugs
  * Add option to backlight to disable ddc support in case it's broken
  * Fix ibar left/right emit for alignment
- Log to journal with X11 etc rather then logfile
    feature-openSUSE-log-to-journal.patch
- Refreshed enlightenment-0.16.999.65256-dont_require_suidbit.patch to be -p1
- Fix xsession file install</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1645704000">- boo#1154733 - Recommend pam_mount</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1646049600">- Allow Branding &gt;= 0.1 (I made 0.2 the other day)
- Fix non wayland build</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1650024000">- boo#1197326,1196609 - Don't Enable modules that don't exist in profile
  migration.
  * fix-upstream-dont-migrate-sysinfoluncher.patch
- Recommend acpid for bindings</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1651752000">- Recommend acpid for bindings (Should now remove popup) [boo#1196609]
- system.conf allow all users, this is required because we no
  longer automatically add people to the users group. [boo#1196609]</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1664280000">- Update to 0.25.4 Bugfix release
  * Fix shape handling in various cases that affected apps with shaped input
  * Fix procstats popup and dangling icon for fullscreen windows
  * Fix a vianishing pointer in some cases
  * Workaround Qt issue where it does not remove WM_STATE on withdraw
  * Fix fullscreen focus toggle flicker
  * Fix pointer sticking case
  * Fix tap-to-click props
  * Fix gadgcon disabled items
  * Fix config fallback handling that means no fallback happened
  * Fix gtk frame prop handling
  * Fix first map handling that affected energyxt
  * Fix CVE-2022-37706 (boo#1203631)
  * Hanrde enlightenment_sys when mis-packaged without sysactions.conf
- Drop fix-upstream-dont-migrate-sysinfoluncher.patch fixed upstream</changelog>
</package>
<package pkgid="9f3eed085b6452876be3fe5e3dd149c6c5d90122939284898e706c04780c75ab" name="enlightenment" arch="src">
  <version epoch="0" ver="0.25.4" rel="bp154.4.3.1"/>
  <changelog author="sflees@suse.de" date="1521115200">- 0.22.2
  * T5910    systray related crashes.
  * T6202    luncher: popup focus issue.
  * T6211    Login with wrong password possible! "Authentication via PAM had errors setting up the authentication session. The error code was 11"
  * T6259    BSD CPUClock bryce gadget - arrow moves in the opposite direction
  * T6328    luncher preview issues
  * T6414    e moves and resizes maximized windows on restart
  * T6454    Copy Paste freezes E.
  * T6617    Better check for evas gl support
  * T6619    Black flicker between E's splash screen and desktop
  * T6623    moving gadgets around multiple times crashes E
  * T6633    make it simpler to report bugs
  * T6644    wayland / xwayland issues
  * T6721    Make Bryce Less like a pogostick
  * T6722    lockscreen gadgets are not shown on "startup lockscreen" and "suspend lockscreen"
  * T6723    window borders doesn't accept edje icons
  * Other miscolanious fixes
- Don't ship wayland desktop file in Leap 15 (but build support)
- Fix desktop files not to symlink to each other
- Add feature-qt-apps-gtk2-theme.patch to set a style for Qt apps
  they look rather broken otherwise</changelog>
  <changelog author="sflees@suse.de" date="1521806400">- 0.22.3
  * T6779 Fix screenlock regression
  * T6784 enlightenment_open still uses deprecated defaults.list
  * remove pulse - wayland hack thats no longer needed</changelog>
  <changelog author="sean@suspend.net" date="1538308800">- 0.22.4
  * T5076 Incorrect desktop files
  * T5203 alt+esc sometimes crash
  * T6787 Exec-keys in some .desktop files are failing to be recognized by Enlightenment
  * T7030 efl internals pass null objects to functions which should not be passed null</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1559131200">- Disable wayland until 0.23.0 when it will build again
- only use update alternatives on openSUSE
- enable systemd on Mageia</changelog>
  <changelog author="simon &lt;simonf.lees@suse.com&gt;" date="1567684800">- 0.23.1
  * Renable wayland support
  * Highlights
  * New padded screenshot option
  * Meson build now is the build system
  * Music Control now supports rage mpris dbus protocol
  * Add Bluez5 support with totally new and redone module and gadget
  * Add dpms option to turn it off or on
  * Alt-tab window switcher allows moving of windows while alt-tabbing
  * Lots of bug fixes, compile warning fixes etc.
  * Massive improvements to Wayland support</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1576756800">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  Allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1589889600">- 0.24.0
  * New and improved shot module with editor and cropper
  * Reduced number of setuid tools (merged many into single system tool)
  * External monitor backlight and brightness controls via (lib)ddctil
  * Improved resolution of EFM thumbnails to 256x256 by default
  * New and improved crash handling guru meditation
  * Restarts are now seamless with fade in and out and zero glitches
  * Wallpaper import generates multiple resolutions for better efficiency
  * Regularly malloc_trim if available to keep mem down
  * All restarts are now handled by enlightenment_start, not e itself
  * Enforce pointer lock to screen in X to stop pointer out-of-bounds
  * Pager plain is gone - use the regular "miniature preview" pager
  * Music control auto-runs your selected media player if not there
  * Handle exception for steam games to find the right desktop file
  * Polkit auth agent support as new core module - no extra daemons
  * Drop comp fast effects - Should be edje transition factor + theme tags
  * Easier config of specific desktop wallpaper straight from pager
  * Startup should be smoother with IO prefetch thread
  * New special blanking timeout for when locked that can be shorter
  * Bluez4 gone now as Bluez5 is done and working fine
  * Down to zero outstanding coverity issues
  * The usual batches of bug fixes and minor improvements
  * New source system.conf to replace upstream's with an openSUSE
    specific config</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1593777600">- Fix name for dlopen'ed libddcutil2 runtime dependency</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1596715200">- 0.24.2
  * Fixed null exec command running
  * Fixed handling of screen with no edid
  * Fixed signal.h, execinfo.h include for some libc's
  * Sped up pager thumb loading significant;y
  * Handle zone changes during startup
  * Longer efreetd timeout for update event
  * Fixed e's xsettings support on 64bit to use the right types
  * Fixed preloading of icon
  * Fixed e's wl backlight/dimming logic to be correct and reliable
  * Fixed noisy logging on invalid exec handle found
  * Fixed shot blurriness if size didn't quite match
  * Fixed battery on openbsd to use right constants
  * Fixed cpu freq setting on freebsd etc.
  * Handle error exits from dependency libs as an error and bring up alert
  * E system - isolate stdio so it doesn't affect ipc on stdin/out
  * Polkit &amp; Askpass password - handle escaping right
  * Fix tiling issue with float/unfloat
  * Fixed shell autohide when clock data up
  * Handle x io error with proper exit code and exit
- 0.24.1
  * Optimized keymap response handling to not stall on startup
  * Fixed wayland frame request timestamp to be the 0 base same as others
  * Fix polkit auth handling when having to auth for non-user UID
  * Randr fix to move pointer on-screen if off screen after reconfigure
  * Fix non-systemd system suport for resume to not think it's suspended
  * Add delay to allow any pending frames to display before suspend
- Add fix-opensuse-pam-search-path.patch because pam is in /usr/include/security</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1597665600">- libddcutil3 replaces libddcutil2 in Tumbleweed</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1597752000">- libddcutil.patch: acutally load libddcutil.so.3 instead of
  libddcutil.so.2 in Tumbleweed</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1605182400">- BuildRequire hicolor-icon-theme to fix directory not owned.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1617278400">- Just recommend libddcutil its not strictly needed and the feature
  wasn't in older versions of Leap.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1644321600">- Update to 0.25.2:
  * Lots of minor bug fixes (see git log)
  * Flat look to match new flat theme
  * New much higher quality default wallpaper set
  * Optimized XKB keymap change handling
  * Init splash is now always on (theme can remove it if desired)
  * Added screen setup menu entry in quick settings menu
  * Redid a lot of screen dimming/blanking/timeout code to fix cruft
  * IBox iconify gadget has window previews on mouse-over now
  * New gesture recognition bindings for touchpads (using Elput)
  * On loss or re-plug in of screen now restore windows sensibly
  * Tasks has window preview on mouse-over now
  * FPS debug (ctl+alt+shift+f to toggle) has a lot more data now
  * BT devices in the Bluez gadget will show battery level if supported
  * Battery now has mouse-over popup with detailed battery information
  * Config saving moved to threads to minimize I/O stutter to core
  * Shot allows copy of screenshot to copy and paste selection too now
  * Temperature monitor now uses hwmon devices and multiple instances
  * New Procstats module can show mem/CPU usage in titlebar
  * Offline/presentation mode removed - use bindings + actions instead
  * Remove custom desklock command - built in is more reliable
  * Winlist (alt+tab) has large mode with window previews now
  * Pluggable device monitoring and applying of input config on plug
  * Added workaround broken Spotify cover art URLs
  * Scale settings will now modify xsettings DPI to make non-efl apps scale
  * Fonts now made to be consistent with EFL and other apps
  * Added binding action to switch profiles
  * EFM - sync more often when doing I/O ops like copy etc.
  * XDG_CURRENT_DESKTOP is now set too
  * EFM image preview will show EFIX dates for when image taken
  * Power plug/unplug now emit signals which theme can make sounds for
  * Mixer - have simple device to icon database text file to look nicer
  * Mixer - add VU meters for output and input audio
  * Mixer - Show icons for apps currently playing sounds and recording
  * Set _NET_WM_STATE_HIDDEN when windows are hidden to avoid rendering
  * Reduce power usage when screen is blanked by setting wins to iconic
  * Added ?grow window in direction? actions you can bind
  * Added palette editor and selector tool to set up custom colors
  * Fingerprint (libFprint) support in desklock and new tool for settings
  * EFM - add recent files menu to access recently opened files
  * Force stdout/error log now to ~/.e-log.log
  * Added settings for animation multiplier to speed up/down transitions
  * No more edge bindings by default
- Rebase dont_offer_updates.patch
- Rebase feature-qt-apps-gtk2-theme.patch
- Remove feature-suse-disable-offline-menu.patch
- Remove libddcutil.patch</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1645012800">- Update to 0.25.3
  * Fix notification double-shadow on multi-screen notifications
  * Add option to gesture to turn off entirely to avoid xserver vt bugs
  * Add option to backlight to disable ddc support in case it's broken
  * Fix ibar left/right emit for alignment
- Log to journal with X11 etc rather then logfile
    feature-openSUSE-log-to-journal.patch
- Refreshed enlightenment-0.16.999.65256-dont_require_suidbit.patch to be -p1
- Fix xsession file install</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1645704000">- boo#1154733 - Recommend pam_mount</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1646049600">- Allow Branding &gt;= 0.1 (I made 0.2 the other day)
- Fix non wayland build</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1650024000">- boo#1197326,1196609 - Don't Enable modules that don't exist in profile
  migration.
  * fix-upstream-dont-migrate-sysinfoluncher.patch
- Recommend acpid for bindings</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1651752000">- Recommend acpid for bindings (Should now remove popup) [boo#1196609]
- system.conf allow all users, this is required because we no
  longer automatically add people to the users group. [boo#1196609]</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1664280000">- Update to 0.25.4 Bugfix release
  * Fix shape handling in various cases that affected apps with shaped input
  * Fix procstats popup and dangling icon for fullscreen windows
  * Fix a vianishing pointer in some cases
  * Workaround Qt issue where it does not remove WM_STATE on withdraw
  * Fix fullscreen focus toggle flicker
  * Fix pointer sticking case
  * Fix tap-to-click props
  * Fix gadgcon disabled items
  * Fix config fallback handling that means no fallback happened
  * Fix gtk frame prop handling
  * Fix first map handling that affected energyxt
  * Fix CVE-2022-37706 (boo#1203631)
  * Hanrde enlightenment_sys when mis-packaged without sysactions.conf
- Drop fix-upstream-dont-migrate-sysinfoluncher.patch fixed upstream</changelog>
</package>
<package pkgid="24e547b8474d6eca96b439e3c644427f43dee5bee1a78a303f0b88ca753bb312" name="enlightenment" arch="x86_64">
  <version epoch="0" ver="0.25.4" rel="bp154.4.3.1"/>
  <changelog author="sflees@suse.de" date="1521115200">- 0.22.2
  * T5910    systray related crashes.
  * T6202    luncher: popup focus issue.
  * T6211    Login with wrong password possible! "Authentication via PAM had errors setting up the authentication session. The error code was 11"
  * T6259    BSD CPUClock bryce gadget - arrow moves in the opposite direction
  * T6328    luncher preview issues
  * T6414    e moves and resizes maximized windows on restart
  * T6454    Copy Paste freezes E.
  * T6617    Better check for evas gl support
  * T6619    Black flicker between E's splash screen and desktop
  * T6623    moving gadgets around multiple times crashes E
  * T6633    make it simpler to report bugs
  * T6644    wayland / xwayland issues
  * T6721    Make Bryce Less like a pogostick
  * T6722    lockscreen gadgets are not shown on "startup lockscreen" and "suspend lockscreen"
  * T6723    window borders doesn't accept edje icons
  * Other miscolanious fixes
- Don't ship wayland desktop file in Leap 15 (but build support)
- Fix desktop files not to symlink to each other
- Add feature-qt-apps-gtk2-theme.patch to set a style for Qt apps
  they look rather broken otherwise</changelog>
  <changelog author="sflees@suse.de" date="1521806400">- 0.22.3
  * T6779 Fix screenlock regression
  * T6784 enlightenment_open still uses deprecated defaults.list
  * remove pulse - wayland hack thats no longer needed</changelog>
  <changelog author="sean@suspend.net" date="1538308800">- 0.22.4
  * T5076 Incorrect desktop files
  * T5203 alt+esc sometimes crash
  * T6787 Exec-keys in some .desktop files are failing to be recognized by Enlightenment
  * T7030 efl internals pass null objects to functions which should not be passed null</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1559131200">- Disable wayland until 0.23.0 when it will build again
- only use update alternatives on openSUSE
- enable systemd on Mageia</changelog>
  <changelog author="simon &lt;simonf.lees@suse.com&gt;" date="1567684800">- 0.23.1
  * Renable wayland support
  * Highlights
  * New padded screenshot option
  * Meson build now is the build system
  * Music Control now supports rage mpris dbus protocol
  * Add Bluez5 support with totally new and redone module and gadget
  * Add dpms option to turn it off or on
  * Alt-tab window switcher allows moving of windows while alt-tabbing
  * Lots of bug fixes, compile warning fixes etc.
  * Massive improvements to Wayland support</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1576756800">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  Allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1589889600">- 0.24.0
  * New and improved shot module with editor and cropper
  * Reduced number of setuid tools (merged many into single system tool)
  * External monitor backlight and brightness controls via (lib)ddctil
  * Improved resolution of EFM thumbnails to 256x256 by default
  * New and improved crash handling guru meditation
  * Restarts are now seamless with fade in and out and zero glitches
  * Wallpaper import generates multiple resolutions for better efficiency
  * Regularly malloc_trim if available to keep mem down
  * All restarts are now handled by enlightenment_start, not e itself
  * Enforce pointer lock to screen in X to stop pointer out-of-bounds
  * Pager plain is gone - use the regular "miniature preview" pager
  * Music control auto-runs your selected media player if not there
  * Handle exception for steam games to find the right desktop file
  * Polkit auth agent support as new core module - no extra daemons
  * Drop comp fast effects - Should be edje transition factor + theme tags
  * Easier config of specific desktop wallpaper straight from pager
  * Startup should be smoother with IO prefetch thread
  * New special blanking timeout for when locked that can be shorter
  * Bluez4 gone now as Bluez5 is done and working fine
  * Down to zero outstanding coverity issues
  * The usual batches of bug fixes and minor improvements
  * New source system.conf to replace upstream's with an openSUSE
    specific config</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1593777600">- Fix name for dlopen'ed libddcutil2 runtime dependency</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1596715200">- 0.24.2
  * Fixed null exec command running
  * Fixed handling of screen with no edid
  * Fixed signal.h, execinfo.h include for some libc's
  * Sped up pager thumb loading significant;y
  * Handle zone changes during startup
  * Longer efreetd timeout for update event
  * Fixed e's xsettings support on 64bit to use the right types
  * Fixed preloading of icon
  * Fixed e's wl backlight/dimming logic to be correct and reliable
  * Fixed noisy logging on invalid exec handle found
  * Fixed shot blurriness if size didn't quite match
  * Fixed battery on openbsd to use right constants
  * Fixed cpu freq setting on freebsd etc.
  * Handle error exits from dependency libs as an error and bring up alert
  * E system - isolate stdio so it doesn't affect ipc on stdin/out
  * Polkit &amp; Askpass password - handle escaping right
  * Fix tiling issue with float/unfloat
  * Fixed shell autohide when clock data up
  * Handle x io error with proper exit code and exit
- 0.24.1
  * Optimized keymap response handling to not stall on startup
  * Fixed wayland frame request timestamp to be the 0 base same as others
  * Fix polkit auth handling when having to auth for non-user UID
  * Randr fix to move pointer on-screen if off screen after reconfigure
  * Fix non-systemd system suport for resume to not think it's suspended
  * Add delay to allow any pending frames to display before suspend
- Add fix-opensuse-pam-search-path.patch because pam is in /usr/include/security</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1597665600">- libddcutil3 replaces libddcutil2 in Tumbleweed</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1597752000">- libddcutil.patch: acutally load libddcutil.so.3 instead of
  libddcutil.so.2 in Tumbleweed</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1605182400">- BuildRequire hicolor-icon-theme to fix directory not owned.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1617278400">- Just recommend libddcutil its not strictly needed and the feature
  wasn't in older versions of Leap.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1644321600">- Update to 0.25.2:
  * Lots of minor bug fixes (see git log)
  * Flat look to match new flat theme
  * New much higher quality default wallpaper set
  * Optimized XKB keymap change handling
  * Init splash is now always on (theme can remove it if desired)
  * Added screen setup menu entry in quick settings menu
  * Redid a lot of screen dimming/blanking/timeout code to fix cruft
  * IBox iconify gadget has window previews on mouse-over now
  * New gesture recognition bindings for touchpads (using Elput)
  * On loss or re-plug in of screen now restore windows sensibly
  * Tasks has window preview on mouse-over now
  * FPS debug (ctl+alt+shift+f to toggle) has a lot more data now
  * BT devices in the Bluez gadget will show battery level if supported
  * Battery now has mouse-over popup with detailed battery information
  * Config saving moved to threads to minimize I/O stutter to core
  * Shot allows copy of screenshot to copy and paste selection too now
  * Temperature monitor now uses hwmon devices and multiple instances
  * New Procstats module can show mem/CPU usage in titlebar
  * Offline/presentation mode removed - use bindings + actions instead
  * Remove custom desklock command - built in is more reliable
  * Winlist (alt+tab) has large mode with window previews now
  * Pluggable device monitoring and applying of input config on plug
  * Added workaround broken Spotify cover art URLs
  * Scale settings will now modify xsettings DPI to make non-efl apps scale
  * Fonts now made to be consistent with EFL and other apps
  * Added binding action to switch profiles
  * EFM - sync more often when doing I/O ops like copy etc.
  * XDG_CURRENT_DESKTOP is now set too
  * EFM image preview will show EFIX dates for when image taken
  * Power plug/unplug now emit signals which theme can make sounds for
  * Mixer - have simple device to icon database text file to look nicer
  * Mixer - add VU meters for output and input audio
  * Mixer - Show icons for apps currently playing sounds and recording
  * Set _NET_WM_STATE_HIDDEN when windows are hidden to avoid rendering
  * Reduce power usage when screen is blanked by setting wins to iconic
  * Added ?grow window in direction? actions you can bind
  * Added palette editor and selector tool to set up custom colors
  * Fingerprint (libFprint) support in desklock and new tool for settings
  * EFM - add recent files menu to access recently opened files
  * Force stdout/error log now to ~/.e-log.log
  * Added settings for animation multiplier to speed up/down transitions
  * No more edge bindings by default
- Rebase dont_offer_updates.patch
- Rebase feature-qt-apps-gtk2-theme.patch
- Remove feature-suse-disable-offline-menu.patch
- Remove libddcutil.patch</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1645012800">- Update to 0.25.3
  * Fix notification double-shadow on multi-screen notifications
  * Add option to gesture to turn off entirely to avoid xserver vt bugs
  * Add option to backlight to disable ddc support in case it's broken
  * Fix ibar left/right emit for alignment
- Log to journal with X11 etc rather then logfile
    feature-openSUSE-log-to-journal.patch
- Refreshed enlightenment-0.16.999.65256-dont_require_suidbit.patch to be -p1
- Fix xsession file install</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1645704000">- boo#1154733 - Recommend pam_mount</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1646049600">- Allow Branding &gt;= 0.1 (I made 0.2 the other day)
- Fix non wayland build</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1650024000">- boo#1197326,1196609 - Don't Enable modules that don't exist in profile
  migration.
  * fix-upstream-dont-migrate-sysinfoluncher.patch
- Recommend acpid for bindings</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1651752000">- Recommend acpid for bindings (Should now remove popup) [boo#1196609]
- system.conf allow all users, this is required because we no
  longer automatically add people to the users group. [boo#1196609]</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1664280000">- Update to 0.25.4 Bugfix release
  * Fix shape handling in various cases that affected apps with shaped input
  * Fix procstats popup and dangling icon for fullscreen windows
  * Fix a vianishing pointer in some cases
  * Workaround Qt issue where it does not remove WM_STATE on withdraw
  * Fix fullscreen focus toggle flicker
  * Fix pointer sticking case
  * Fix tap-to-click props
  * Fix gadgcon disabled items
  * Fix config fallback handling that means no fallback happened
  * Fix gtk frame prop handling
  * Fix first map handling that affected energyxt
  * Fix CVE-2022-37706 (boo#1203631)
  * Hanrde enlightenment_sys when mis-packaged without sysactions.conf
- Drop fix-upstream-dont-migrate-sysinfoluncher.patch fixed upstream</changelog>
</package>
<package pkgid="8d11f75cda82992c99000dc61910992cf25191b7f688f142111ad7c6240b6180" name="enlightenment-branding-upstream" arch="aarch64">
  <version epoch="0" ver="0.25.4" rel="bp154.4.3.1"/>
  <changelog author="sflees@suse.de" date="1521115200">- 0.22.2
  * T5910    systray related crashes.
  * T6202    luncher: popup focus issue.
  * T6211    Login with wrong password possible! "Authentication via PAM had errors setting up the authentication session. The error code was 11"
  * T6259    BSD CPUClock bryce gadget - arrow moves in the opposite direction
  * T6328    luncher preview issues
  * T6414    e moves and resizes maximized windows on restart
  * T6454    Copy Paste freezes E.
  * T6617    Better check for evas gl support
  * T6619    Black flicker between E's splash screen and desktop
  * T6623    moving gadgets around multiple times crashes E
  * T6633    make it simpler to report bugs
  * T6644    wayland / xwayland issues
  * T6721    Make Bryce Less like a pogostick
  * T6722    lockscreen gadgets are not shown on "startup lockscreen" and "suspend lockscreen"
  * T6723    window borders doesn't accept edje icons
  * Other miscolanious fixes
- Don't ship wayland desktop file in Leap 15 (but build support)
- Fix desktop files not to symlink to each other
- Add feature-qt-apps-gtk2-theme.patch to set a style for Qt apps
  they look rather broken otherwise</changelog>
  <changelog author="sflees@suse.de" date="1521806400">- 0.22.3
  * T6779 Fix screenlock regression
  * T6784 enlightenment_open still uses deprecated defaults.list
  * remove pulse - wayland hack thats no longer needed</changelog>
  <changelog author="sean@suspend.net" date="1538308800">- 0.22.4
  * T5076 Incorrect desktop files
  * T5203 alt+esc sometimes crash
  * T6787 Exec-keys in some .desktop files are failing to be recognized by Enlightenment
  * T7030 efl internals pass null objects to functions which should not be passed null</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1559131200">- Disable wayland until 0.23.0 when it will build again
- only use update alternatives on openSUSE
- enable systemd on Mageia</changelog>
  <changelog author="simon &lt;simonf.lees@suse.com&gt;" date="1567684800">- 0.23.1
  * Renable wayland support
  * Highlights
  * New padded screenshot option
  * Meson build now is the build system
  * Music Control now supports rage mpris dbus protocol
  * Add Bluez5 support with totally new and redone module and gadget
  * Add dpms option to turn it off or on
  * Alt-tab window switcher allows moving of windows while alt-tabbing
  * Lots of bug fixes, compile warning fixes etc.
  * Massive improvements to Wayland support</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1576756800">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  Allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1589889600">- 0.24.0
  * New and improved shot module with editor and cropper
  * Reduced number of setuid tools (merged many into single system tool)
  * External monitor backlight and brightness controls via (lib)ddctil
  * Improved resolution of EFM thumbnails to 256x256 by default
  * New and improved crash handling guru meditation
  * Restarts are now seamless with fade in and out and zero glitches
  * Wallpaper import generates multiple resolutions for better efficiency
  * Regularly malloc_trim if available to keep mem down
  * All restarts are now handled by enlightenment_start, not e itself
  * Enforce pointer lock to screen in X to stop pointer out-of-bounds
  * Pager plain is gone - use the regular "miniature preview" pager
  * Music control auto-runs your selected media player if not there
  * Handle exception for steam games to find the right desktop file
  * Polkit auth agent support as new core module - no extra daemons
  * Drop comp fast effects - Should be edje transition factor + theme tags
  * Easier config of specific desktop wallpaper straight from pager
  * Startup should be smoother with IO prefetch thread
  * New special blanking timeout for when locked that can be shorter
  * Bluez4 gone now as Bluez5 is done and working fine
  * Down to zero outstanding coverity issues
  * The usual batches of bug fixes and minor improvements
  * New source system.conf to replace upstream's with an openSUSE
    specific config</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1593777600">- Fix name for dlopen'ed libddcutil2 runtime dependency</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1596715200">- 0.24.2
  * Fixed null exec command running
  * Fixed handling of screen with no edid
  * Fixed signal.h, execinfo.h include for some libc's
  * Sped up pager thumb loading significant;y
  * Handle zone changes during startup
  * Longer efreetd timeout for update event
  * Fixed e's xsettings support on 64bit to use the right types
  * Fixed preloading of icon
  * Fixed e's wl backlight/dimming logic to be correct and reliable
  * Fixed noisy logging on invalid exec handle found
  * Fixed shot blurriness if size didn't quite match
  * Fixed battery on openbsd to use right constants
  * Fixed cpu freq setting on freebsd etc.
  * Handle error exits from dependency libs as an error and bring up alert
  * E system - isolate stdio so it doesn't affect ipc on stdin/out
  * Polkit &amp; Askpass password - handle escaping right
  * Fix tiling issue with float/unfloat
  * Fixed shell autohide when clock data up
  * Handle x io error with proper exit code and exit
- 0.24.1
  * Optimized keymap response handling to not stall on startup
  * Fixed wayland frame request timestamp to be the 0 base same as others
  * Fix polkit auth handling when having to auth for non-user UID
  * Randr fix to move pointer on-screen if off screen after reconfigure
  * Fix non-systemd system suport for resume to not think it's suspended
  * Add delay to allow any pending frames to display before suspend
- Add fix-opensuse-pam-search-path.patch because pam is in /usr/include/security</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1597665600">- libddcutil3 replaces libddcutil2 in Tumbleweed</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1597752000">- libddcutil.patch: acutally load libddcutil.so.3 instead of
  libddcutil.so.2 in Tumbleweed</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1605182400">- BuildRequire hicolor-icon-theme to fix directory not owned.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1617278400">- Just recommend libddcutil its not strictly needed and the feature
  wasn't in older versions of Leap.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1644321600">- Update to 0.25.2:
  * Lots of minor bug fixes (see git log)
  * Flat look to match new flat theme
  * New much higher quality default wallpaper set
  * Optimized XKB keymap change handling
  * Init splash is now always on (theme can remove it if desired)
  * Added screen setup menu entry in quick settings menu
  * Redid a lot of screen dimming/blanking/timeout code to fix cruft
  * IBox iconify gadget has window previews on mouse-over now
  * New gesture recognition bindings for touchpads (using Elput)
  * On loss or re-plug in of screen now restore windows sensibly
  * Tasks has window preview on mouse-over now
  * FPS debug (ctl+alt+shift+f to toggle) has a lot more data now
  * BT devices in the Bluez gadget will show battery level if supported
  * Battery now has mouse-over popup with detailed battery information
  * Config saving moved to threads to minimize I/O stutter to core
  * Shot allows copy of screenshot to copy and paste selection too now
  * Temperature monitor now uses hwmon devices and multiple instances
  * New Procstats module can show mem/CPU usage in titlebar
  * Offline/presentation mode removed - use bindings + actions instead
  * Remove custom desklock command - built in is more reliable
  * Winlist (alt+tab) has large mode with window previews now
  * Pluggable device monitoring and applying of input config on plug
  * Added workaround broken Spotify cover art URLs
  * Scale settings will now modify xsettings DPI to make non-efl apps scale
  * Fonts now made to be consistent with EFL and other apps
  * Added binding action to switch profiles
  * EFM - sync more often when doing I/O ops like copy etc.
  * XDG_CURRENT_DESKTOP is now set too
  * EFM image preview will show EFIX dates for when image taken
  * Power plug/unplug now emit signals which theme can make sounds for
  * Mixer - have simple device to icon database text file to look nicer
  * Mixer - add VU meters for output and input audio
  * Mixer - Show icons for apps currently playing sounds and recording
  * Set _NET_WM_STATE_HIDDEN when windows are hidden to avoid rendering
  * Reduce power usage when screen is blanked by setting wins to iconic
  * Added ?grow window in direction? actions you can bind
  * Added palette editor and selector tool to set up custom colors
  * Fingerprint (libFprint) support in desklock and new tool for settings
  * EFM - add recent files menu to access recently opened files
  * Force stdout/error log now to ~/.e-log.log
  * Added settings for animation multiplier to speed up/down transitions
  * No more edge bindings by default
- Rebase dont_offer_updates.patch
- Rebase feature-qt-apps-gtk2-theme.patch
- Remove feature-suse-disable-offline-menu.patch
- Remove libddcutil.patch</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1645012800">- Update to 0.25.3
  * Fix notification double-shadow on multi-screen notifications
  * Add option to gesture to turn off entirely to avoid xserver vt bugs
  * Add option to backlight to disable ddc support in case it's broken
  * Fix ibar left/right emit for alignment
- Log to journal with X11 etc rather then logfile
    feature-openSUSE-log-to-journal.patch
- Refreshed enlightenment-0.16.999.65256-dont_require_suidbit.patch to be -p1
- Fix xsession file install</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1645704000">- boo#1154733 - Recommend pam_mount</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1646049600">- Allow Branding &gt;= 0.1 (I made 0.2 the other day)
- Fix non wayland build</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1650024000">- boo#1197326,1196609 - Don't Enable modules that don't exist in profile
  migration.
  * fix-upstream-dont-migrate-sysinfoluncher.patch
- Recommend acpid for bindings</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1651752000">- Recommend acpid for bindings (Should now remove popup) [boo#1196609]
- system.conf allow all users, this is required because we no
  longer automatically add people to the users group. [boo#1196609]</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1664280000">- Update to 0.25.4 Bugfix release
  * Fix shape handling in various cases that affected apps with shaped input
  * Fix procstats popup and dangling icon for fullscreen windows
  * Fix a vianishing pointer in some cases
  * Workaround Qt issue where it does not remove WM_STATE on withdraw
  * Fix fullscreen focus toggle flicker
  * Fix pointer sticking case
  * Fix tap-to-click props
  * Fix gadgcon disabled items
  * Fix config fallback handling that means no fallback happened
  * Fix gtk frame prop handling
  * Fix first map handling that affected energyxt
  * Fix CVE-2022-37706 (boo#1203631)
  * Hanrde enlightenment_sys when mis-packaged without sysactions.conf
- Drop fix-upstream-dont-migrate-sysinfoluncher.patch fixed upstream</changelog>
</package>
<package pkgid="7cd0f7fc56041d97e1f1869a8c012b3aa846176511cbcb250d20842b00a67f7b" name="enlightenment-branding-upstream" arch="ppc64le">
  <version epoch="0" ver="0.25.4" rel="bp154.4.3.1"/>
  <changelog author="sflees@suse.de" date="1521115200">- 0.22.2
  * T5910    systray related crashes.
  * T6202    luncher: popup focus issue.
  * T6211    Login with wrong password possible! "Authentication via PAM had errors setting up the authentication session. The error code was 11"
  * T6259    BSD CPUClock bryce gadget - arrow moves in the opposite direction
  * T6328    luncher preview issues
  * T6414    e moves and resizes maximized windows on restart
  * T6454    Copy Paste freezes E.
  * T6617    Better check for evas gl support
  * T6619    Black flicker between E's splash screen and desktop
  * T6623    moving gadgets around multiple times crashes E
  * T6633    make it simpler to report bugs
  * T6644    wayland / xwayland issues
  * T6721    Make Bryce Less like a pogostick
  * T6722    lockscreen gadgets are not shown on "startup lockscreen" and "suspend lockscreen"
  * T6723    window borders doesn't accept edje icons
  * Other miscolanious fixes
- Don't ship wayland desktop file in Leap 15 (but build support)
- Fix desktop files not to symlink to each other
- Add feature-qt-apps-gtk2-theme.patch to set a style for Qt apps
  they look rather broken otherwise</changelog>
  <changelog author="sflees@suse.de" date="1521806400">- 0.22.3
  * T6779 Fix screenlock regression
  * T6784 enlightenment_open still uses deprecated defaults.list
  * remove pulse - wayland hack thats no longer needed</changelog>
  <changelog author="sean@suspend.net" date="1538308800">- 0.22.4
  * T5076 Incorrect desktop files
  * T5203 alt+esc sometimes crash
  * T6787 Exec-keys in some .desktop files are failing to be recognized by Enlightenment
  * T7030 efl internals pass null objects to functions which should not be passed null</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1559131200">- Disable wayland until 0.23.0 when it will build again
- only use update alternatives on openSUSE
- enable systemd on Mageia</changelog>
  <changelog author="simon &lt;simonf.lees@suse.com&gt;" date="1567684800">- 0.23.1
  * Renable wayland support
  * Highlights
  * New padded screenshot option
  * Meson build now is the build system
  * Music Control now supports rage mpris dbus protocol
  * Add Bluez5 support with totally new and redone module and gadget
  * Add dpms option to turn it off or on
  * Alt-tab window switcher allows moving of windows while alt-tabbing
  * Lots of bug fixes, compile warning fixes etc.
  * Massive improvements to Wayland support</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1576756800">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  Allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1589889600">- 0.24.0
  * New and improved shot module with editor and cropper
  * Reduced number of setuid tools (merged many into single system tool)
  * External monitor backlight and brightness controls via (lib)ddctil
  * Improved resolution of EFM thumbnails to 256x256 by default
  * New and improved crash handling guru meditation
  * Restarts are now seamless with fade in and out and zero glitches
  * Wallpaper import generates multiple resolutions for better efficiency
  * Regularly malloc_trim if available to keep mem down
  * All restarts are now handled by enlightenment_start, not e itself
  * Enforce pointer lock to screen in X to stop pointer out-of-bounds
  * Pager plain is gone - use the regular "miniature preview" pager
  * Music control auto-runs your selected media player if not there
  * Handle exception for steam games to find the right desktop file
  * Polkit auth agent support as new core module - no extra daemons
  * Drop comp fast effects - Should be edje transition factor + theme tags
  * Easier config of specific desktop wallpaper straight from pager
  * Startup should be smoother with IO prefetch thread
  * New special blanking timeout for when locked that can be shorter
  * Bluez4 gone now as Bluez5 is done and working fine
  * Down to zero outstanding coverity issues
  * The usual batches of bug fixes and minor improvements
  * New source system.conf to replace upstream's with an openSUSE
    specific config</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1593777600">- Fix name for dlopen'ed libddcutil2 runtime dependency</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1596715200">- 0.24.2
  * Fixed null exec command running
  * Fixed handling of screen with no edid
  * Fixed signal.h, execinfo.h include for some libc's
  * Sped up pager thumb loading significant;y
  * Handle zone changes during startup
  * Longer efreetd timeout for update event
  * Fixed e's xsettings support on 64bit to use the right types
  * Fixed preloading of icon
  * Fixed e's wl backlight/dimming logic to be correct and reliable
  * Fixed noisy logging on invalid exec handle found
  * Fixed shot blurriness if size didn't quite match
  * Fixed battery on openbsd to use right constants
  * Fixed cpu freq setting on freebsd etc.
  * Handle error exits from dependency libs as an error and bring up alert
  * E system - isolate stdio so it doesn't affect ipc on stdin/out
  * Polkit &amp; Askpass password - handle escaping right
  * Fix tiling issue with float/unfloat
  * Fixed shell autohide when clock data up
  * Handle x io error with proper exit code and exit
- 0.24.1
  * Optimized keymap response handling to not stall on startup
  * Fixed wayland frame request timestamp to be the 0 base same as others
  * Fix polkit auth handling when having to auth for non-user UID
  * Randr fix to move pointer on-screen if off screen after reconfigure
  * Fix non-systemd system suport for resume to not think it's suspended
  * Add delay to allow any pending frames to display before suspend
- Add fix-opensuse-pam-search-path.patch because pam is in /usr/include/security</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1597665600">- libddcutil3 replaces libddcutil2 in Tumbleweed</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1597752000">- libddcutil.patch: acutally load libddcutil.so.3 instead of
  libddcutil.so.2 in Tumbleweed</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1605182400">- BuildRequire hicolor-icon-theme to fix directory not owned.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1617278400">- Just recommend libddcutil its not strictly needed and the feature
  wasn't in older versions of Leap.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1644321600">- Update to 0.25.2:
  * Lots of minor bug fixes (see git log)
  * Flat look to match new flat theme
  * New much higher quality default wallpaper set
  * Optimized XKB keymap change handling
  * Init splash is now always on (theme can remove it if desired)
  * Added screen setup menu entry in quick settings menu
  * Redid a lot of screen dimming/blanking/timeout code to fix cruft
  * IBox iconify gadget has window previews on mouse-over now
  * New gesture recognition bindings for touchpads (using Elput)
  * On loss or re-plug in of screen now restore windows sensibly
  * Tasks has window preview on mouse-over now
  * FPS debug (ctl+alt+shift+f to toggle) has a lot more data now
  * BT devices in the Bluez gadget will show battery level if supported
  * Battery now has mouse-over popup with detailed battery information
  * Config saving moved to threads to minimize I/O stutter to core
  * Shot allows copy of screenshot to copy and paste selection too now
  * Temperature monitor now uses hwmon devices and multiple instances
  * New Procstats module can show mem/CPU usage in titlebar
  * Offline/presentation mode removed - use bindings + actions instead
  * Remove custom desklock command - built in is more reliable
  * Winlist (alt+tab) has large mode with window previews now
  * Pluggable device monitoring and applying of input config on plug
  * Added workaround broken Spotify cover art URLs
  * Scale settings will now modify xsettings DPI to make non-efl apps scale
  * Fonts now made to be consistent with EFL and other apps
  * Added binding action to switch profiles
  * EFM - sync more often when doing I/O ops like copy etc.
  * XDG_CURRENT_DESKTOP is now set too
  * EFM image preview will show EFIX dates for when image taken
  * Power plug/unplug now emit signals which theme can make sounds for
  * Mixer - have simple device to icon database text file to look nicer
  * Mixer - add VU meters for output and input audio
  * Mixer - Show icons for apps currently playing sounds and recording
  * Set _NET_WM_STATE_HIDDEN when windows are hidden to avoid rendering
  * Reduce power usage when screen is blanked by setting wins to iconic
  * Added ?grow window in direction? actions you can bind
  * Added palette editor and selector tool to set up custom colors
  * Fingerprint (libFprint) support in desklock and new tool for settings
  * EFM - add recent files menu to access recently opened files
  * Force stdout/error log now to ~/.e-log.log
  * Added settings for animation multiplier to speed up/down transitions
  * No more edge bindings by default
- Rebase dont_offer_updates.patch
- Rebase feature-qt-apps-gtk2-theme.patch
- Remove feature-suse-disable-offline-menu.patch
- Remove libddcutil.patch</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1645012800">- Update to 0.25.3
  * Fix notification double-shadow on multi-screen notifications
  * Add option to gesture to turn off entirely to avoid xserver vt bugs
  * Add option to backlight to disable ddc support in case it's broken
  * Fix ibar left/right emit for alignment
- Log to journal with X11 etc rather then logfile
    feature-openSUSE-log-to-journal.patch
- Refreshed enlightenment-0.16.999.65256-dont_require_suidbit.patch to be -p1
- Fix xsession file install</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1645704000">- boo#1154733 - Recommend pam_mount</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1646049600">- Allow Branding &gt;= 0.1 (I made 0.2 the other day)
- Fix non wayland build</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1650024000">- boo#1197326,1196609 - Don't Enable modules that don't exist in profile
  migration.
  * fix-upstream-dont-migrate-sysinfoluncher.patch
- Recommend acpid for bindings</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1651752000">- Recommend acpid for bindings (Should now remove popup) [boo#1196609]
- system.conf allow all users, this is required because we no
  longer automatically add people to the users group. [boo#1196609]</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1664280000">- Update to 0.25.4 Bugfix release
  * Fix shape handling in various cases that affected apps with shaped input
  * Fix procstats popup and dangling icon for fullscreen windows
  * Fix a vianishing pointer in some cases
  * Workaround Qt issue where it does not remove WM_STATE on withdraw
  * Fix fullscreen focus toggle flicker
  * Fix pointer sticking case
  * Fix tap-to-click props
  * Fix gadgcon disabled items
  * Fix config fallback handling that means no fallback happened
  * Fix gtk frame prop handling
  * Fix first map handling that affected energyxt
  * Fix CVE-2022-37706 (boo#1203631)
  * Hanrde enlightenment_sys when mis-packaged without sysactions.conf
- Drop fix-upstream-dont-migrate-sysinfoluncher.patch fixed upstream</changelog>
</package>
<package pkgid="bf575f2e1cd12828e16654c71fe46ece895b7e966f673adbd894b07ad97e3590" name="enlightenment-branding-upstream" arch="s390x">
  <version epoch="0" ver="0.25.4" rel="bp154.4.3.1"/>
  <changelog author="sflees@suse.de" date="1521115200">- 0.22.2
  * T5910    systray related crashes.
  * T6202    luncher: popup focus issue.
  * T6211    Login with wrong password possible! "Authentication via PAM had errors setting up the authentication session. The error code was 11"
  * T6259    BSD CPUClock bryce gadget - arrow moves in the opposite direction
  * T6328    luncher preview issues
  * T6414    e moves and resizes maximized windows on restart
  * T6454    Copy Paste freezes E.
  * T6617    Better check for evas gl support
  * T6619    Black flicker between E's splash screen and desktop
  * T6623    moving gadgets around multiple times crashes E
  * T6633    make it simpler to report bugs
  * T6644    wayland / xwayland issues
  * T6721    Make Bryce Less like a pogostick
  * T6722    lockscreen gadgets are not shown on "startup lockscreen" and "suspend lockscreen"
  * T6723    window borders doesn't accept edje icons
  * Other miscolanious fixes
- Don't ship wayland desktop file in Leap 15 (but build support)
- Fix desktop files not to symlink to each other
- Add feature-qt-apps-gtk2-theme.patch to set a style for Qt apps
  they look rather broken otherwise</changelog>
  <changelog author="sflees@suse.de" date="1521806400">- 0.22.3
  * T6779 Fix screenlock regression
  * T6784 enlightenment_open still uses deprecated defaults.list
  * remove pulse - wayland hack thats no longer needed</changelog>
  <changelog author="sean@suspend.net" date="1538308800">- 0.22.4
  * T5076 Incorrect desktop files
  * T5203 alt+esc sometimes crash
  * T6787 Exec-keys in some .desktop files are failing to be recognized by Enlightenment
  * T7030 efl internals pass null objects to functions which should not be passed null</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1559131200">- Disable wayland until 0.23.0 when it will build again
- only use update alternatives on openSUSE
- enable systemd on Mageia</changelog>
  <changelog author="simon &lt;simonf.lees@suse.com&gt;" date="1567684800">- 0.23.1
  * Renable wayland support
  * Highlights
  * New padded screenshot option
  * Meson build now is the build system
  * Music Control now supports rage mpris dbus protocol
  * Add Bluez5 support with totally new and redone module and gadget
  * Add dpms option to turn it off or on
  * Alt-tab window switcher allows moving of windows while alt-tabbing
  * Lots of bug fixes, compile warning fixes etc.
  * Massive improvements to Wayland support</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1576756800">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  Allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1589889600">- 0.24.0
  * New and improved shot module with editor and cropper
  * Reduced number of setuid tools (merged many into single system tool)
  * External monitor backlight and brightness controls via (lib)ddctil
  * Improved resolution of EFM thumbnails to 256x256 by default
  * New and improved crash handling guru meditation
  * Restarts are now seamless with fade in and out and zero glitches
  * Wallpaper import generates multiple resolutions for better efficiency
  * Regularly malloc_trim if available to keep mem down
  * All restarts are now handled by enlightenment_start, not e itself
  * Enforce pointer lock to screen in X to stop pointer out-of-bounds
  * Pager plain is gone - use the regular "miniature preview" pager
  * Music control auto-runs your selected media player if not there
  * Handle exception for steam games to find the right desktop file
  * Polkit auth agent support as new core module - no extra daemons
  * Drop comp fast effects - Should be edje transition factor + theme tags
  * Easier config of specific desktop wallpaper straight from pager
  * Startup should be smoother with IO prefetch thread
  * New special blanking timeout for when locked that can be shorter
  * Bluez4 gone now as Bluez5 is done and working fine
  * Down to zero outstanding coverity issues
  * The usual batches of bug fixes and minor improvements
  * New source system.conf to replace upstream's with an openSUSE
    specific config</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1593777600">- Fix name for dlopen'ed libddcutil2 runtime dependency</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1596715200">- 0.24.2
  * Fixed null exec command running
  * Fixed handling of screen with no edid
  * Fixed signal.h, execinfo.h include for some libc's
  * Sped up pager thumb loading significant;y
  * Handle zone changes during startup
  * Longer efreetd timeout for update event
  * Fixed e's xsettings support on 64bit to use the right types
  * Fixed preloading of icon
  * Fixed e's wl backlight/dimming logic to be correct and reliable
  * Fixed noisy logging on invalid exec handle found
  * Fixed shot blurriness if size didn't quite match
  * Fixed battery on openbsd to use right constants
  * Fixed cpu freq setting on freebsd etc.
  * Handle error exits from dependency libs as an error and bring up alert
  * E system - isolate stdio so it doesn't affect ipc on stdin/out
  * Polkit &amp; Askpass password - handle escaping right
  * Fix tiling issue with float/unfloat
  * Fixed shell autohide when clock data up
  * Handle x io error with proper exit code and exit
- 0.24.1
  * Optimized keymap response handling to not stall on startup
  * Fixed wayland frame request timestamp to be the 0 base same as others
  * Fix polkit auth handling when having to auth for non-user UID
  * Randr fix to move pointer on-screen if off screen after reconfigure
  * Fix non-systemd system suport for resume to not think it's suspended
  * Add delay to allow any pending frames to display before suspend
- Add fix-opensuse-pam-search-path.patch because pam is in /usr/include/security</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1597665600">- libddcutil3 replaces libddcutil2 in Tumbleweed</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1597752000">- libddcutil.patch: acutally load libddcutil.so.3 instead of
  libddcutil.so.2 in Tumbleweed</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1605182400">- BuildRequire hicolor-icon-theme to fix directory not owned.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1617278400">- Just recommend libddcutil its not strictly needed and the feature
  wasn't in older versions of Leap.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1644321600">- Update to 0.25.2:
  * Lots of minor bug fixes (see git log)
  * Flat look to match new flat theme
  * New much higher quality default wallpaper set
  * Optimized XKB keymap change handling
  * Init splash is now always on (theme can remove it if desired)
  * Added screen setup menu entry in quick settings menu
  * Redid a lot of screen dimming/blanking/timeout code to fix cruft
  * IBox iconify gadget has window previews on mouse-over now
  * New gesture recognition bindings for touchpads (using Elput)
  * On loss or re-plug in of screen now restore windows sensibly
  * Tasks has window preview on mouse-over now
  * FPS debug (ctl+alt+shift+f to toggle) has a lot more data now
  * BT devices in the Bluez gadget will show battery level if supported
  * Battery now has mouse-over popup with detailed battery information
  * Config saving moved to threads to minimize I/O stutter to core
  * Shot allows copy of screenshot to copy and paste selection too now
  * Temperature monitor now uses hwmon devices and multiple instances
  * New Procstats module can show mem/CPU usage in titlebar
  * Offline/presentation mode removed - use bindings + actions instead
  * Remove custom desklock command - built in is more reliable
  * Winlist (alt+tab) has large mode with window previews now
  * Pluggable device monitoring and applying of input config on plug
  * Added workaround broken Spotify cover art URLs
  * Scale settings will now modify xsettings DPI to make non-efl apps scale
  * Fonts now made to be consistent with EFL and other apps
  * Added binding action to switch profiles
  * EFM - sync more often when doing I/O ops like copy etc.
  * XDG_CURRENT_DESKTOP is now set too
  * EFM image preview will show EFIX dates for when image taken
  * Power plug/unplug now emit signals which theme can make sounds for
  * Mixer - have simple device to icon database text file to look nicer
  * Mixer - add VU meters for output and input audio
  * Mixer - Show icons for apps currently playing sounds and recording
  * Set _NET_WM_STATE_HIDDEN when windows are hidden to avoid rendering
  * Reduce power usage when screen is blanked by setting wins to iconic
  * Added ?grow window in direction? actions you can bind
  * Added palette editor and selector tool to set up custom colors
  * Fingerprint (libFprint) support in desklock and new tool for settings
  * EFM - add recent files menu to access recently opened files
  * Force stdout/error log now to ~/.e-log.log
  * Added settings for animation multiplier to speed up/down transitions
  * No more edge bindings by default
- Rebase dont_offer_updates.patch
- Rebase feature-qt-apps-gtk2-theme.patch
- Remove feature-suse-disable-offline-menu.patch
- Remove libddcutil.patch</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1645012800">- Update to 0.25.3
  * Fix notification double-shadow on multi-screen notifications
  * Add option to gesture to turn off entirely to avoid xserver vt bugs
  * Add option to backlight to disable ddc support in case it's broken
  * Fix ibar left/right emit for alignment
- Log to journal with X11 etc rather then logfile
    feature-openSUSE-log-to-journal.patch
- Refreshed enlightenment-0.16.999.65256-dont_require_suidbit.patch to be -p1
- Fix xsession file install</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1645704000">- boo#1154733 - Recommend pam_mount</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1646049600">- Allow Branding &gt;= 0.1 (I made 0.2 the other day)
- Fix non wayland build</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1650024000">- boo#1197326,1196609 - Don't Enable modules that don't exist in profile
  migration.
  * fix-upstream-dont-migrate-sysinfoluncher.patch
- Recommend acpid for bindings</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1651752000">- Recommend acpid for bindings (Should now remove popup) [boo#1196609]
- system.conf allow all users, this is required because we no
  longer automatically add people to the users group. [boo#1196609]</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1664280000">- Update to 0.25.4 Bugfix release
  * Fix shape handling in various cases that affected apps with shaped input
  * Fix procstats popup and dangling icon for fullscreen windows
  * Fix a vianishing pointer in some cases
  * Workaround Qt issue where it does not remove WM_STATE on withdraw
  * Fix fullscreen focus toggle flicker
  * Fix pointer sticking case
  * Fix tap-to-click props
  * Fix gadgcon disabled items
  * Fix config fallback handling that means no fallback happened
  * Fix gtk frame prop handling
  * Fix first map handling that affected energyxt
  * Fix CVE-2022-37706 (boo#1203631)
  * Hanrde enlightenment_sys when mis-packaged without sysactions.conf
- Drop fix-upstream-dont-migrate-sysinfoluncher.patch fixed upstream</changelog>
</package>
<package pkgid="7be787e48e89ac799cb2d4e0f2a8c060cc12024b9b6197a2a4a4291003fa8eeb" name="enlightenment-branding-upstream" arch="x86_64">
  <version epoch="0" ver="0.25.4" rel="bp154.4.3.1"/>
  <changelog author="sflees@suse.de" date="1521115200">- 0.22.2
  * T5910    systray related crashes.
  * T6202    luncher: popup focus issue.
  * T6211    Login with wrong password possible! "Authentication via PAM had errors setting up the authentication session. The error code was 11"
  * T6259    BSD CPUClock bryce gadget - arrow moves in the opposite direction
  * T6328    luncher preview issues
  * T6414    e moves and resizes maximized windows on restart
  * T6454    Copy Paste freezes E.
  * T6617    Better check for evas gl support
  * T6619    Black flicker between E's splash screen and desktop
  * T6623    moving gadgets around multiple times crashes E
  * T6633    make it simpler to report bugs
  * T6644    wayland / xwayland issues
  * T6721    Make Bryce Less like a pogostick
  * T6722    lockscreen gadgets are not shown on "startup lockscreen" and "suspend lockscreen"
  * T6723    window borders doesn't accept edje icons
  * Other miscolanious fixes
- Don't ship wayland desktop file in Leap 15 (but build support)
- Fix desktop files not to symlink to each other
- Add feature-qt-apps-gtk2-theme.patch to set a style for Qt apps
  they look rather broken otherwise</changelog>
  <changelog author="sflees@suse.de" date="1521806400">- 0.22.3
  * T6779 Fix screenlock regression
  * T6784 enlightenment_open still uses deprecated defaults.list
  * remove pulse - wayland hack thats no longer needed</changelog>
  <changelog author="sean@suspend.net" date="1538308800">- 0.22.4
  * T5076 Incorrect desktop files
  * T5203 alt+esc sometimes crash
  * T6787 Exec-keys in some .desktop files are failing to be recognized by Enlightenment
  * T7030 efl internals pass null objects to functions which should not be passed null</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1559131200">- Disable wayland until 0.23.0 when it will build again
- only use update alternatives on openSUSE
- enable systemd on Mageia</changelog>
  <changelog author="simon &lt;simonf.lees@suse.com&gt;" date="1567684800">- 0.23.1
  * Renable wayland support
  * Highlights
  * New padded screenshot option
  * Meson build now is the build system
  * Music Control now supports rage mpris dbus protocol
  * Add Bluez5 support with totally new and redone module and gadget
  * Add dpms option to turn it off or on
  * Alt-tab window switcher allows moving of windows while alt-tabbing
  * Lots of bug fixes, compile warning fixes etc.
  * Massive improvements to Wayland support</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1576756800">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  Allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1589889600">- 0.24.0
  * New and improved shot module with editor and cropper
  * Reduced number of setuid tools (merged many into single system tool)
  * External monitor backlight and brightness controls via (lib)ddctil
  * Improved resolution of EFM thumbnails to 256x256 by default
  * New and improved crash handling guru meditation
  * Restarts are now seamless with fade in and out and zero glitches
  * Wallpaper import generates multiple resolutions for better efficiency
  * Regularly malloc_trim if available to keep mem down
  * All restarts are now handled by enlightenment_start, not e itself
  * Enforce pointer lock to screen in X to stop pointer out-of-bounds
  * Pager plain is gone - use the regular "miniature preview" pager
  * Music control auto-runs your selected media player if not there
  * Handle exception for steam games to find the right desktop file
  * Polkit auth agent support as new core module - no extra daemons
  * Drop comp fast effects - Should be edje transition factor + theme tags
  * Easier config of specific desktop wallpaper straight from pager
  * Startup should be smoother with IO prefetch thread
  * New special blanking timeout for when locked that can be shorter
  * Bluez4 gone now as Bluez5 is done and working fine
  * Down to zero outstanding coverity issues
  * The usual batches of bug fixes and minor improvements
  * New source system.conf to replace upstream's with an openSUSE
    specific config</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1593777600">- Fix name for dlopen'ed libddcutil2 runtime dependency</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1596715200">- 0.24.2
  * Fixed null exec command running
  * Fixed handling of screen with no edid
  * Fixed signal.h, execinfo.h include for some libc's
  * Sped up pager thumb loading significant;y
  * Handle zone changes during startup
  * Longer efreetd timeout for update event
  * Fixed e's xsettings support on 64bit to use the right types
  * Fixed preloading of icon
  * Fixed e's wl backlight/dimming logic to be correct and reliable
  * Fixed noisy logging on invalid exec handle found
  * Fixed shot blurriness if size didn't quite match
  * Fixed battery on openbsd to use right constants
  * Fixed cpu freq setting on freebsd etc.
  * Handle error exits from dependency libs as an error and bring up alert
  * E system - isolate stdio so it doesn't affect ipc on stdin/out
  * Polkit &amp; Askpass password - handle escaping right
  * Fix tiling issue with float/unfloat
  * Fixed shell autohide when clock data up
  * Handle x io error with proper exit code and exit
- 0.24.1
  * Optimized keymap response handling to not stall on startup
  * Fixed wayland frame request timestamp to be the 0 base same as others
  * Fix polkit auth handling when having to auth for non-user UID
  * Randr fix to move pointer on-screen if off screen after reconfigure
  * Fix non-systemd system suport for resume to not think it's suspended
  * Add delay to allow any pending frames to display before suspend
- Add fix-opensuse-pam-search-path.patch because pam is in /usr/include/security</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1597665600">- libddcutil3 replaces libddcutil2 in Tumbleweed</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1597752000">- libddcutil.patch: acutally load libddcutil.so.3 instead of
  libddcutil.so.2 in Tumbleweed</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1605182400">- BuildRequire hicolor-icon-theme to fix directory not owned.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1617278400">- Just recommend libddcutil its not strictly needed and the feature
  wasn't in older versions of Leap.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1644321600">- Update to 0.25.2:
  * Lots of minor bug fixes (see git log)
  * Flat look to match new flat theme
  * New much higher quality default wallpaper set
  * Optimized XKB keymap change handling
  * Init splash is now always on (theme can remove it if desired)
  * Added screen setup menu entry in quick settings menu
  * Redid a lot of screen dimming/blanking/timeout code to fix cruft
  * IBox iconify gadget has window previews on mouse-over now
  * New gesture recognition bindings for touchpads (using Elput)
  * On loss or re-plug in of screen now restore windows sensibly
  * Tasks has window preview on mouse-over now
  * FPS debug (ctl+alt+shift+f to toggle) has a lot more data now
  * BT devices in the Bluez gadget will show battery level if supported
  * Battery now has mouse-over popup with detailed battery information
  * Config saving moved to threads to minimize I/O stutter to core
  * Shot allows copy of screenshot to copy and paste selection too now
  * Temperature monitor now uses hwmon devices and multiple instances
  * New Procstats module can show mem/CPU usage in titlebar
  * Offline/presentation mode removed - use bindings + actions instead
  * Remove custom desklock command - built in is more reliable
  * Winlist (alt+tab) has large mode with window previews now
  * Pluggable device monitoring and applying of input config on plug
  * Added workaround broken Spotify cover art URLs
  * Scale settings will now modify xsettings DPI to make non-efl apps scale
  * Fonts now made to be consistent with EFL and other apps
  * Added binding action to switch profiles
  * EFM - sync more often when doing I/O ops like copy etc.
  * XDG_CURRENT_DESKTOP is now set too
  * EFM image preview will show EFIX dates for when image taken
  * Power plug/unplug now emit signals which theme can make sounds for
  * Mixer - have simple device to icon database text file to look nicer
  * Mixer - add VU meters for output and input audio
  * Mixer - Show icons for apps currently playing sounds and recording
  * Set _NET_WM_STATE_HIDDEN when windows are hidden to avoid rendering
  * Reduce power usage when screen is blanked by setting wins to iconic
  * Added ?grow window in direction? actions you can bind
  * Added palette editor and selector tool to set up custom colors
  * Fingerprint (libFprint) support in desklock and new tool for settings
  * EFM - add recent files menu to access recently opened files
  * Force stdout/error log now to ~/.e-log.log
  * Added settings for animation multiplier to speed up/down transitions
  * No more edge bindings by default
- Rebase dont_offer_updates.patch
- Rebase feature-qt-apps-gtk2-theme.patch
- Remove feature-suse-disable-offline-menu.patch
- Remove libddcutil.patch</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1645012800">- Update to 0.25.3
  * Fix notification double-shadow on multi-screen notifications
  * Add option to gesture to turn off entirely to avoid xserver vt bugs
  * Add option to backlight to disable ddc support in case it's broken
  * Fix ibar left/right emit for alignment
- Log to journal with X11 etc rather then logfile
    feature-openSUSE-log-to-journal.patch
- Refreshed enlightenment-0.16.999.65256-dont_require_suidbit.patch to be -p1
- Fix xsession file install</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1645704000">- boo#1154733 - Recommend pam_mount</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1646049600">- Allow Branding &gt;= 0.1 (I made 0.2 the other day)
- Fix non wayland build</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1650024000">- boo#1197326,1196609 - Don't Enable modules that don't exist in profile
  migration.
  * fix-upstream-dont-migrate-sysinfoluncher.patch
- Recommend acpid for bindings</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1651752000">- Recommend acpid for bindings (Should now remove popup) [boo#1196609]
- system.conf allow all users, this is required because we no
  longer automatically add people to the users group. [boo#1196609]</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1664280000">- Update to 0.25.4 Bugfix release
  * Fix shape handling in various cases that affected apps with shaped input
  * Fix procstats popup and dangling icon for fullscreen windows
  * Fix a vianishing pointer in some cases
  * Workaround Qt issue where it does not remove WM_STATE on withdraw
  * Fix fullscreen focus toggle flicker
  * Fix pointer sticking case
  * Fix tap-to-click props
  * Fix gadgcon disabled items
  * Fix config fallback handling that means no fallback happened
  * Fix gtk frame prop handling
  * Fix first map handling that affected energyxt
  * Fix CVE-2022-37706 (boo#1203631)
  * Hanrde enlightenment_sys when mis-packaged without sysactions.conf
- Drop fix-upstream-dont-migrate-sysinfoluncher.patch fixed upstream</changelog>
</package>
<package pkgid="60c31368c495c794df1062ed999b5e1c26c5463b09256eac168f50d2ba640a7d" name="enlightenment-devel" arch="aarch64">
  <version epoch="0" ver="0.25.4" rel="bp154.4.3.1"/>
  <changelog author="sflees@suse.de" date="1521115200">- 0.22.2
  * T5910    systray related crashes.
  * T6202    luncher: popup focus issue.
  * T6211    Login with wrong password possible! "Authentication via PAM had errors setting up the authentication session. The error code was 11"
  * T6259    BSD CPUClock bryce gadget - arrow moves in the opposite direction
  * T6328    luncher preview issues
  * T6414    e moves and resizes maximized windows on restart
  * T6454    Copy Paste freezes E.
  * T6617    Better check for evas gl support
  * T6619    Black flicker between E's splash screen and desktop
  * T6623    moving gadgets around multiple times crashes E
  * T6633    make it simpler to report bugs
  * T6644    wayland / xwayland issues
  * T6721    Make Bryce Less like a pogostick
  * T6722    lockscreen gadgets are not shown on "startup lockscreen" and "suspend lockscreen"
  * T6723    window borders doesn't accept edje icons
  * Other miscolanious fixes
- Don't ship wayland desktop file in Leap 15 (but build support)
- Fix desktop files not to symlink to each other
- Add feature-qt-apps-gtk2-theme.patch to set a style for Qt apps
  they look rather broken otherwise</changelog>
  <changelog author="sflees@suse.de" date="1521806400">- 0.22.3
  * T6779 Fix screenlock regression
  * T6784 enlightenment_open still uses deprecated defaults.list
  * remove pulse - wayland hack thats no longer needed</changelog>
  <changelog author="sean@suspend.net" date="1538308800">- 0.22.4
  * T5076 Incorrect desktop files
  * T5203 alt+esc sometimes crash
  * T6787 Exec-keys in some .desktop files are failing to be recognized by Enlightenment
  * T7030 efl internals pass null objects to functions which should not be passed null</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1559131200">- Disable wayland until 0.23.0 when it will build again
- only use update alternatives on openSUSE
- enable systemd on Mageia</changelog>
  <changelog author="simon &lt;simonf.lees@suse.com&gt;" date="1567684800">- 0.23.1
  * Renable wayland support
  * Highlights
  * New padded screenshot option
  * Meson build now is the build system
  * Music Control now supports rage mpris dbus protocol
  * Add Bluez5 support with totally new and redone module and gadget
  * Add dpms option to turn it off or on
  * Alt-tab window switcher allows moving of windows while alt-tabbing
  * Lots of bug fixes, compile warning fixes etc.
  * Massive improvements to Wayland support</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1576756800">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  Allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1589889600">- 0.24.0
  * New and improved shot module with editor and cropper
  * Reduced number of setuid tools (merged many into single system tool)
  * External monitor backlight and brightness controls via (lib)ddctil
  * Improved resolution of EFM thumbnails to 256x256 by default
  * New and improved crash handling guru meditation
  * Restarts are now seamless with fade in and out and zero glitches
  * Wallpaper import generates multiple resolutions for better efficiency
  * Regularly malloc_trim if available to keep mem down
  * All restarts are now handled by enlightenment_start, not e itself
  * Enforce pointer lock to screen in X to stop pointer out-of-bounds
  * Pager plain is gone - use the regular "miniature preview" pager
  * Music control auto-runs your selected media player if not there
  * Handle exception for steam games to find the right desktop file
  * Polkit auth agent support as new core module - no extra daemons
  * Drop comp fast effects - Should be edje transition factor + theme tags
  * Easier config of specific desktop wallpaper straight from pager
  * Startup should be smoother with IO prefetch thread
  * New special blanking timeout for when locked that can be shorter
  * Bluez4 gone now as Bluez5 is done and working fine
  * Down to zero outstanding coverity issues
  * The usual batches of bug fixes and minor improvements
  * New source system.conf to replace upstream's with an openSUSE
    specific config</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1593777600">- Fix name for dlopen'ed libddcutil2 runtime dependency</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1596715200">- 0.24.2
  * Fixed null exec command running
  * Fixed handling of screen with no edid
  * Fixed signal.h, execinfo.h include for some libc's
  * Sped up pager thumb loading significant;y
  * Handle zone changes during startup
  * Longer efreetd timeout for update event
  * Fixed e's xsettings support on 64bit to use the right types
  * Fixed preloading of icon
  * Fixed e's wl backlight/dimming logic to be correct and reliable
  * Fixed noisy logging on invalid exec handle found
  * Fixed shot blurriness if size didn't quite match
  * Fixed battery on openbsd to use right constants
  * Fixed cpu freq setting on freebsd etc.
  * Handle error exits from dependency libs as an error and bring up alert
  * E system - isolate stdio so it doesn't affect ipc on stdin/out
  * Polkit &amp; Askpass password - handle escaping right
  * Fix tiling issue with float/unfloat
  * Fixed shell autohide when clock data up
  * Handle x io error with proper exit code and exit
- 0.24.1
  * Optimized keymap response handling to not stall on startup
  * Fixed wayland frame request timestamp to be the 0 base same as others
  * Fix polkit auth handling when having to auth for non-user UID
  * Randr fix to move pointer on-screen if off screen after reconfigure
  * Fix non-systemd system suport for resume to not think it's suspended
  * Add delay to allow any pending frames to display before suspend
- Add fix-opensuse-pam-search-path.patch because pam is in /usr/include/security</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1597665600">- libddcutil3 replaces libddcutil2 in Tumbleweed</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1597752000">- libddcutil.patch: acutally load libddcutil.so.3 instead of
  libddcutil.so.2 in Tumbleweed</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1605182400">- BuildRequire hicolor-icon-theme to fix directory not owned.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1617278400">- Just recommend libddcutil its not strictly needed and the feature
  wasn't in older versions of Leap.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1644321600">- Update to 0.25.2:
  * Lots of minor bug fixes (see git log)
  * Flat look to match new flat theme
  * New much higher quality default wallpaper set
  * Optimized XKB keymap change handling
  * Init splash is now always on (theme can remove it if desired)
  * Added screen setup menu entry in quick settings menu
  * Redid a lot of screen dimming/blanking/timeout code to fix cruft
  * IBox iconify gadget has window previews on mouse-over now
  * New gesture recognition bindings for touchpads (using Elput)
  * On loss or re-plug in of screen now restore windows sensibly
  * Tasks has window preview on mouse-over now
  * FPS debug (ctl+alt+shift+f to toggle) has a lot more data now
  * BT devices in the Bluez gadget will show battery level if supported
  * Battery now has mouse-over popup with detailed battery information
  * Config saving moved to threads to minimize I/O stutter to core
  * Shot allows copy of screenshot to copy and paste selection too now
  * Temperature monitor now uses hwmon devices and multiple instances
  * New Procstats module can show mem/CPU usage in titlebar
  * Offline/presentation mode removed - use bindings + actions instead
  * Remove custom desklock command - built in is more reliable
  * Winlist (alt+tab) has large mode with window previews now
  * Pluggable device monitoring and applying of input config on plug
  * Added workaround broken Spotify cover art URLs
  * Scale settings will now modify xsettings DPI to make non-efl apps scale
  * Fonts now made to be consistent with EFL and other apps
  * Added binding action to switch profiles
  * EFM - sync more often when doing I/O ops like copy etc.
  * XDG_CURRENT_DESKTOP is now set too
  * EFM image preview will show EFIX dates for when image taken
  * Power plug/unplug now emit signals which theme can make sounds for
  * Mixer - have simple device to icon database text file to look nicer
  * Mixer - add VU meters for output and input audio
  * Mixer - Show icons for apps currently playing sounds and recording
  * Set _NET_WM_STATE_HIDDEN when windows are hidden to avoid rendering
  * Reduce power usage when screen is blanked by setting wins to iconic
  * Added ?grow window in direction? actions you can bind
  * Added palette editor and selector tool to set up custom colors
  * Fingerprint (libFprint) support in desklock and new tool for settings
  * EFM - add recent files menu to access recently opened files
  * Force stdout/error log now to ~/.e-log.log
  * Added settings for animation multiplier to speed up/down transitions
  * No more edge bindings by default
- Rebase dont_offer_updates.patch
- Rebase feature-qt-apps-gtk2-theme.patch
- Remove feature-suse-disable-offline-menu.patch
- Remove libddcutil.patch</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1645012800">- Update to 0.25.3
  * Fix notification double-shadow on multi-screen notifications
  * Add option to gesture to turn off entirely to avoid xserver vt bugs
  * Add option to backlight to disable ddc support in case it's broken
  * Fix ibar left/right emit for alignment
- Log to journal with X11 etc rather then logfile
    feature-openSUSE-log-to-journal.patch
- Refreshed enlightenment-0.16.999.65256-dont_require_suidbit.patch to be -p1
- Fix xsession file install</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1645704000">- boo#1154733 - Recommend pam_mount</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1646049600">- Allow Branding &gt;= 0.1 (I made 0.2 the other day)
- Fix non wayland build</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1650024000">- boo#1197326,1196609 - Don't Enable modules that don't exist in profile
  migration.
  * fix-upstream-dont-migrate-sysinfoluncher.patch
- Recommend acpid for bindings</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1651752000">- Recommend acpid for bindings (Should now remove popup) [boo#1196609]
- system.conf allow all users, this is required because we no
  longer automatically add people to the users group. [boo#1196609]</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1664280000">- Update to 0.25.4 Bugfix release
  * Fix shape handling in various cases that affected apps with shaped input
  * Fix procstats popup and dangling icon for fullscreen windows
  * Fix a vianishing pointer in some cases
  * Workaround Qt issue where it does not remove WM_STATE on withdraw
  * Fix fullscreen focus toggle flicker
  * Fix pointer sticking case
  * Fix tap-to-click props
  * Fix gadgcon disabled items
  * Fix config fallback handling that means no fallback happened
  * Fix gtk frame prop handling
  * Fix first map handling that affected energyxt
  * Fix CVE-2022-37706 (boo#1203631)
  * Hanrde enlightenment_sys when mis-packaged without sysactions.conf
- Drop fix-upstream-dont-migrate-sysinfoluncher.patch fixed upstream</changelog>
</package>
<package pkgid="e9d62b48ef3832795e5a82f4f01cb07d155a1d880b07d38c5a61c7d562777ea6" name="enlightenment-devel" arch="ppc64le">
  <version epoch="0" ver="0.25.4" rel="bp154.4.3.1"/>
  <changelog author="sflees@suse.de" date="1521115200">- 0.22.2
  * T5910    systray related crashes.
  * T6202    luncher: popup focus issue.
  * T6211    Login with wrong password possible! "Authentication via PAM had errors setting up the authentication session. The error code was 11"
  * T6259    BSD CPUClock bryce gadget - arrow moves in the opposite direction
  * T6328    luncher preview issues
  * T6414    e moves and resizes maximized windows on restart
  * T6454    Copy Paste freezes E.
  * T6617    Better check for evas gl support
  * T6619    Black flicker between E's splash screen and desktop
  * T6623    moving gadgets around multiple times crashes E
  * T6633    make it simpler to report bugs
  * T6644    wayland / xwayland issues
  * T6721    Make Bryce Less like a pogostick
  * T6722    lockscreen gadgets are not shown on "startup lockscreen" and "suspend lockscreen"
  * T6723    window borders doesn't accept edje icons
  * Other miscolanious fixes
- Don't ship wayland desktop file in Leap 15 (but build support)
- Fix desktop files not to symlink to each other
- Add feature-qt-apps-gtk2-theme.patch to set a style for Qt apps
  they look rather broken otherwise</changelog>
  <changelog author="sflees@suse.de" date="1521806400">- 0.22.3
  * T6779 Fix screenlock regression
  * T6784 enlightenment_open still uses deprecated defaults.list
  * remove pulse - wayland hack thats no longer needed</changelog>
  <changelog author="sean@suspend.net" date="1538308800">- 0.22.4
  * T5076 Incorrect desktop files
  * T5203 alt+esc sometimes crash
  * T6787 Exec-keys in some .desktop files are failing to be recognized by Enlightenment
  * T7030 efl internals pass null objects to functions which should not be passed null</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1559131200">- Disable wayland until 0.23.0 when it will build again
- only use update alternatives on openSUSE
- enable systemd on Mageia</changelog>
  <changelog author="simon &lt;simonf.lees@suse.com&gt;" date="1567684800">- 0.23.1
  * Renable wayland support
  * Highlights
  * New padded screenshot option
  * Meson build now is the build system
  * Music Control now supports rage mpris dbus protocol
  * Add Bluez5 support with totally new and redone module and gadget
  * Add dpms option to turn it off or on
  * Alt-tab window switcher allows moving of windows while alt-tabbing
  * Lots of bug fixes, compile warning fixes etc.
  * Massive improvements to Wayland support</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1576756800">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  Allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1589889600">- 0.24.0
  * New and improved shot module with editor and cropper
  * Reduced number of setuid tools (merged many into single system tool)
  * External monitor backlight and brightness controls via (lib)ddctil
  * Improved resolution of EFM thumbnails to 256x256 by default
  * New and improved crash handling guru meditation
  * Restarts are now seamless with fade in and out and zero glitches
  * Wallpaper import generates multiple resolutions for better efficiency
  * Regularly malloc_trim if available to keep mem down
  * All restarts are now handled by enlightenment_start, not e itself
  * Enforce pointer lock to screen in X to stop pointer out-of-bounds
  * Pager plain is gone - use the regular "miniature preview" pager
  * Music control auto-runs your selected media player if not there
  * Handle exception for steam games to find the right desktop file
  * Polkit auth agent support as new core module - no extra daemons
  * Drop comp fast effects - Should be edje transition factor + theme tags
  * Easier config of specific desktop wallpaper straight from pager
  * Startup should be smoother with IO prefetch thread
  * New special blanking timeout for when locked that can be shorter
  * Bluez4 gone now as Bluez5 is done and working fine
  * Down to zero outstanding coverity issues
  * The usual batches of bug fixes and minor improvements
  * New source system.conf to replace upstream's with an openSUSE
    specific config</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1593777600">- Fix name for dlopen'ed libddcutil2 runtime dependency</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1596715200">- 0.24.2
  * Fixed null exec command running
  * Fixed handling of screen with no edid
  * Fixed signal.h, execinfo.h include for some libc's
  * Sped up pager thumb loading significant;y
  * Handle zone changes during startup
  * Longer efreetd timeout for update event
  * Fixed e's xsettings support on 64bit to use the right types
  * Fixed preloading of icon
  * Fixed e's wl backlight/dimming logic to be correct and reliable
  * Fixed noisy logging on invalid exec handle found
  * Fixed shot blurriness if size didn't quite match
  * Fixed battery on openbsd to use right constants
  * Fixed cpu freq setting on freebsd etc.
  * Handle error exits from dependency libs as an error and bring up alert
  * E system - isolate stdio so it doesn't affect ipc on stdin/out
  * Polkit &amp; Askpass password - handle escaping right
  * Fix tiling issue with float/unfloat
  * Fixed shell autohide when clock data up
  * Handle x io error with proper exit code and exit
- 0.24.1
  * Optimized keymap response handling to not stall on startup
  * Fixed wayland frame request timestamp to be the 0 base same as others
  * Fix polkit auth handling when having to auth for non-user UID
  * Randr fix to move pointer on-screen if off screen after reconfigure
  * Fix non-systemd system suport for resume to not think it's suspended
  * Add delay to allow any pending frames to display before suspend
- Add fix-opensuse-pam-search-path.patch because pam is in /usr/include/security</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1597665600">- libddcutil3 replaces libddcutil2 in Tumbleweed</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1597752000">- libddcutil.patch: acutally load libddcutil.so.3 instead of
  libddcutil.so.2 in Tumbleweed</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1605182400">- BuildRequire hicolor-icon-theme to fix directory not owned.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1617278400">- Just recommend libddcutil its not strictly needed and the feature
  wasn't in older versions of Leap.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1644321600">- Update to 0.25.2:
  * Lots of minor bug fixes (see git log)
  * Flat look to match new flat theme
  * New much higher quality default wallpaper set
  * Optimized XKB keymap change handling
  * Init splash is now always on (theme can remove it if desired)
  * Added screen setup menu entry in quick settings menu
  * Redid a lot of screen dimming/blanking/timeout code to fix cruft
  * IBox iconify gadget has window previews on mouse-over now
  * New gesture recognition bindings for touchpads (using Elput)
  * On loss or re-plug in of screen now restore windows sensibly
  * Tasks has window preview on mouse-over now
  * FPS debug (ctl+alt+shift+f to toggle) has a lot more data now
  * BT devices in the Bluez gadget will show battery level if supported
  * Battery now has mouse-over popup with detailed battery information
  * Config saving moved to threads to minimize I/O stutter to core
  * Shot allows copy of screenshot to copy and paste selection too now
  * Temperature monitor now uses hwmon devices and multiple instances
  * New Procstats module can show mem/CPU usage in titlebar
  * Offline/presentation mode removed - use bindings + actions instead
  * Remove custom desklock command - built in is more reliable
  * Winlist (alt+tab) has large mode with window previews now
  * Pluggable device monitoring and applying of input config on plug
  * Added workaround broken Spotify cover art URLs
  * Scale settings will now modify xsettings DPI to make non-efl apps scale
  * Fonts now made to be consistent with EFL and other apps
  * Added binding action to switch profiles
  * EFM - sync more often when doing I/O ops like copy etc.
  * XDG_CURRENT_DESKTOP is now set too
  * EFM image preview will show EFIX dates for when image taken
  * Power plug/unplug now emit signals which theme can make sounds for
  * Mixer - have simple device to icon database text file to look nicer
  * Mixer - add VU meters for output and input audio
  * Mixer - Show icons for apps currently playing sounds and recording
  * Set _NET_WM_STATE_HIDDEN when windows are hidden to avoid rendering
  * Reduce power usage when screen is blanked by setting wins to iconic
  * Added ?grow window in direction? actions you can bind
  * Added palette editor and selector tool to set up custom colors
  * Fingerprint (libFprint) support in desklock and new tool for settings
  * EFM - add recent files menu to access recently opened files
  * Force stdout/error log now to ~/.e-log.log
  * Added settings for animation multiplier to speed up/down transitions
  * No more edge bindings by default
- Rebase dont_offer_updates.patch
- Rebase feature-qt-apps-gtk2-theme.patch
- Remove feature-suse-disable-offline-menu.patch
- Remove libddcutil.patch</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1645012800">- Update to 0.25.3
  * Fix notification double-shadow on multi-screen notifications
  * Add option to gesture to turn off entirely to avoid xserver vt bugs
  * Add option to backlight to disable ddc support in case it's broken
  * Fix ibar left/right emit for alignment
- Log to journal with X11 etc rather then logfile
    feature-openSUSE-log-to-journal.patch
- Refreshed enlightenment-0.16.999.65256-dont_require_suidbit.patch to be -p1
- Fix xsession file install</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1645704000">- boo#1154733 - Recommend pam_mount</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1646049600">- Allow Branding &gt;= 0.1 (I made 0.2 the other day)
- Fix non wayland build</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1650024000">- boo#1197326,1196609 - Don't Enable modules that don't exist in profile
  migration.
  * fix-upstream-dont-migrate-sysinfoluncher.patch
- Recommend acpid for bindings</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1651752000">- Recommend acpid for bindings (Should now remove popup) [boo#1196609]
- system.conf allow all users, this is required because we no
  longer automatically add people to the users group. [boo#1196609]</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1664280000">- Update to 0.25.4 Bugfix release
  * Fix shape handling in various cases that affected apps with shaped input
  * Fix procstats popup and dangling icon for fullscreen windows
  * Fix a vianishing pointer in some cases
  * Workaround Qt issue where it does not remove WM_STATE on withdraw
  * Fix fullscreen focus toggle flicker
  * Fix pointer sticking case
  * Fix tap-to-click props
  * Fix gadgcon disabled items
  * Fix config fallback handling that means no fallback happened
  * Fix gtk frame prop handling
  * Fix first map handling that affected energyxt
  * Fix CVE-2022-37706 (boo#1203631)
  * Hanrde enlightenment_sys when mis-packaged without sysactions.conf
- Drop fix-upstream-dont-migrate-sysinfoluncher.patch fixed upstream</changelog>
</package>
<package pkgid="e1ec130ce141d06ce6bcc12b4db8e57a9c4d038bcba9dd22daa40df6ed005579" name="enlightenment-devel" arch="s390x">
  <version epoch="0" ver="0.25.4" rel="bp154.4.3.1"/>
  <changelog author="sflees@suse.de" date="1521115200">- 0.22.2
  * T5910    systray related crashes.
  * T6202    luncher: popup focus issue.
  * T6211    Login with wrong password possible! "Authentication via PAM had errors setting up the authentication session. The error code was 11"
  * T6259    BSD CPUClock bryce gadget - arrow moves in the opposite direction
  * T6328    luncher preview issues
  * T6414    e moves and resizes maximized windows on restart
  * T6454    Copy Paste freezes E.
  * T6617    Better check for evas gl support
  * T6619    Black flicker between E's splash screen and desktop
  * T6623    moving gadgets around multiple times crashes E
  * T6633    make it simpler to report bugs
  * T6644    wayland / xwayland issues
  * T6721    Make Bryce Less like a pogostick
  * T6722    lockscreen gadgets are not shown on "startup lockscreen" and "suspend lockscreen"
  * T6723    window borders doesn't accept edje icons
  * Other miscolanious fixes
- Don't ship wayland desktop file in Leap 15 (but build support)
- Fix desktop files not to symlink to each other
- Add feature-qt-apps-gtk2-theme.patch to set a style for Qt apps
  they look rather broken otherwise</changelog>
  <changelog author="sflees@suse.de" date="1521806400">- 0.22.3
  * T6779 Fix screenlock regression
  * T6784 enlightenment_open still uses deprecated defaults.list
  * remove pulse - wayland hack thats no longer needed</changelog>
  <changelog author="sean@suspend.net" date="1538308800">- 0.22.4
  * T5076 Incorrect desktop files
  * T5203 alt+esc sometimes crash
  * T6787 Exec-keys in some .desktop files are failing to be recognized by Enlightenment
  * T7030 efl internals pass null objects to functions which should not be passed null</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1559131200">- Disable wayland until 0.23.0 when it will build again
- only use update alternatives on openSUSE
- enable systemd on Mageia</changelog>
  <changelog author="simon &lt;simonf.lees@suse.com&gt;" date="1567684800">- 0.23.1
  * Renable wayland support
  * Highlights
  * New padded screenshot option
  * Meson build now is the build system
  * Music Control now supports rage mpris dbus protocol
  * Add Bluez5 support with totally new and redone module and gadget
  * Add dpms option to turn it off or on
  * Alt-tab window switcher allows moving of windows while alt-tabbing
  * Lots of bug fixes, compile warning fixes etc.
  * Massive improvements to Wayland support</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1576756800">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  Allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1589889600">- 0.24.0
  * New and improved shot module with editor and cropper
  * Reduced number of setuid tools (merged many into single system tool)
  * External monitor backlight and brightness controls via (lib)ddctil
  * Improved resolution of EFM thumbnails to 256x256 by default
  * New and improved crash handling guru meditation
  * Restarts are now seamless with fade in and out and zero glitches
  * Wallpaper import generates multiple resolutions for better efficiency
  * Regularly malloc_trim if available to keep mem down
  * All restarts are now handled by enlightenment_start, not e itself
  * Enforce pointer lock to screen in X to stop pointer out-of-bounds
  * Pager plain is gone - use the regular "miniature preview" pager
  * Music control auto-runs your selected media player if not there
  * Handle exception for steam games to find the right desktop file
  * Polkit auth agent support as new core module - no extra daemons
  * Drop comp fast effects - Should be edje transition factor + theme tags
  * Easier config of specific desktop wallpaper straight from pager
  * Startup should be smoother with IO prefetch thread
  * New special blanking timeout for when locked that can be shorter
  * Bluez4 gone now as Bluez5 is done and working fine
  * Down to zero outstanding coverity issues
  * The usual batches of bug fixes and minor improvements
  * New source system.conf to replace upstream's with an openSUSE
    specific config</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1593777600">- Fix name for dlopen'ed libddcutil2 runtime dependency</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1596715200">- 0.24.2
  * Fixed null exec command running
  * Fixed handling of screen with no edid
  * Fixed signal.h, execinfo.h include for some libc's
  * Sped up pager thumb loading significant;y
  * Handle zone changes during startup
  * Longer efreetd timeout for update event
  * Fixed e's xsettings support on 64bit to use the right types
  * Fixed preloading of icon
  * Fixed e's wl backlight/dimming logic to be correct and reliable
  * Fixed noisy logging on invalid exec handle found
  * Fixed shot blurriness if size didn't quite match
  * Fixed battery on openbsd to use right constants
  * Fixed cpu freq setting on freebsd etc.
  * Handle error exits from dependency libs as an error and bring up alert
  * E system - isolate stdio so it doesn't affect ipc on stdin/out
  * Polkit &amp; Askpass password - handle escaping right
  * Fix tiling issue with float/unfloat
  * Fixed shell autohide when clock data up
  * Handle x io error with proper exit code and exit
- 0.24.1
  * Optimized keymap response handling to not stall on startup
  * Fixed wayland frame request timestamp to be the 0 base same as others
  * Fix polkit auth handling when having to auth for non-user UID
  * Randr fix to move pointer on-screen if off screen after reconfigure
  * Fix non-systemd system suport for resume to not think it's suspended
  * Add delay to allow any pending frames to display before suspend
- Add fix-opensuse-pam-search-path.patch because pam is in /usr/include/security</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1597665600">- libddcutil3 replaces libddcutil2 in Tumbleweed</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1597752000">- libddcutil.patch: acutally load libddcutil.so.3 instead of
  libddcutil.so.2 in Tumbleweed</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1605182400">- BuildRequire hicolor-icon-theme to fix directory not owned.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1617278400">- Just recommend libddcutil its not strictly needed and the feature
  wasn't in older versions of Leap.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1644321600">- Update to 0.25.2:
  * Lots of minor bug fixes (see git log)
  * Flat look to match new flat theme
  * New much higher quality default wallpaper set
  * Optimized XKB keymap change handling
  * Init splash is now always on (theme can remove it if desired)
  * Added screen setup menu entry in quick settings menu
  * Redid a lot of screen dimming/blanking/timeout code to fix cruft
  * IBox iconify gadget has window previews on mouse-over now
  * New gesture recognition bindings for touchpads (using Elput)
  * On loss or re-plug in of screen now restore windows sensibly
  * Tasks has window preview on mouse-over now
  * FPS debug (ctl+alt+shift+f to toggle) has a lot more data now
  * BT devices in the Bluez gadget will show battery level if supported
  * Battery now has mouse-over popup with detailed battery information
  * Config saving moved to threads to minimize I/O stutter to core
  * Shot allows copy of screenshot to copy and paste selection too now
  * Temperature monitor now uses hwmon devices and multiple instances
  * New Procstats module can show mem/CPU usage in titlebar
  * Offline/presentation mode removed - use bindings + actions instead
  * Remove custom desklock command - built in is more reliable
  * Winlist (alt+tab) has large mode with window previews now
  * Pluggable device monitoring and applying of input config on plug
  * Added workaround broken Spotify cover art URLs
  * Scale settings will now modify xsettings DPI to make non-efl apps scale
  * Fonts now made to be consistent with EFL and other apps
  * Added binding action to switch profiles
  * EFM - sync more often when doing I/O ops like copy etc.
  * XDG_CURRENT_DESKTOP is now set too
  * EFM image preview will show EFIX dates for when image taken
  * Power plug/unplug now emit signals which theme can make sounds for
  * Mixer - have simple device to icon database text file to look nicer
  * Mixer - add VU meters for output and input audio
  * Mixer - Show icons for apps currently playing sounds and recording
  * Set _NET_WM_STATE_HIDDEN when windows are hidden to avoid rendering
  * Reduce power usage when screen is blanked by setting wins to iconic
  * Added ?grow window in direction? actions you can bind
  * Added palette editor and selector tool to set up custom colors
  * Fingerprint (libFprint) support in desklock and new tool for settings
  * EFM - add recent files menu to access recently opened files
  * Force stdout/error log now to ~/.e-log.log
  * Added settings for animation multiplier to speed up/down transitions
  * No more edge bindings by default
- Rebase dont_offer_updates.patch
- Rebase feature-qt-apps-gtk2-theme.patch
- Remove feature-suse-disable-offline-menu.patch
- Remove libddcutil.patch</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1645012800">- Update to 0.25.3
  * Fix notification double-shadow on multi-screen notifications
  * Add option to gesture to turn off entirely to avoid xserver vt bugs
  * Add option to backlight to disable ddc support in case it's broken
  * Fix ibar left/right emit for alignment
- Log to journal with X11 etc rather then logfile
    feature-openSUSE-log-to-journal.patch
- Refreshed enlightenment-0.16.999.65256-dont_require_suidbit.patch to be -p1
- Fix xsession file install</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1645704000">- boo#1154733 - Recommend pam_mount</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1646049600">- Allow Branding &gt;= 0.1 (I made 0.2 the other day)
- Fix non wayland build</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1650024000">- boo#1197326,1196609 - Don't Enable modules that don't exist in profile
  migration.
  * fix-upstream-dont-migrate-sysinfoluncher.patch
- Recommend acpid for bindings</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1651752000">- Recommend acpid for bindings (Should now remove popup) [boo#1196609]
- system.conf allow all users, this is required because we no
  longer automatically add people to the users group. [boo#1196609]</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1664280000">- Update to 0.25.4 Bugfix release
  * Fix shape handling in various cases that affected apps with shaped input
  * Fix procstats popup and dangling icon for fullscreen windows
  * Fix a vianishing pointer in some cases
  * Workaround Qt issue where it does not remove WM_STATE on withdraw
  * Fix fullscreen focus toggle flicker
  * Fix pointer sticking case
  * Fix tap-to-click props
  * Fix gadgcon disabled items
  * Fix config fallback handling that means no fallback happened
  * Fix gtk frame prop handling
  * Fix first map handling that affected energyxt
  * Fix CVE-2022-37706 (boo#1203631)
  * Hanrde enlightenment_sys when mis-packaged without sysactions.conf
- Drop fix-upstream-dont-migrate-sysinfoluncher.patch fixed upstream</changelog>
</package>
<package pkgid="cfc03a0c69aa3192a3a9f7f7d37b0434ceca2cddf6000cfce887cb8ea41df55c" name="enlightenment-devel" arch="x86_64">
  <version epoch="0" ver="0.25.4" rel="bp154.4.3.1"/>
  <changelog author="sflees@suse.de" date="1521115200">- 0.22.2
  * T5910    systray related crashes.
  * T6202    luncher: popup focus issue.
  * T6211    Login with wrong password possible! "Authentication via PAM had errors setting up the authentication session. The error code was 11"
  * T6259    BSD CPUClock bryce gadget - arrow moves in the opposite direction
  * T6328    luncher preview issues
  * T6414    e moves and resizes maximized windows on restart
  * T6454    Copy Paste freezes E.
  * T6617    Better check for evas gl support
  * T6619    Black flicker between E's splash screen and desktop
  * T6623    moving gadgets around multiple times crashes E
  * T6633    make it simpler to report bugs
  * T6644    wayland / xwayland issues
  * T6721    Make Bryce Less like a pogostick
  * T6722    lockscreen gadgets are not shown on "startup lockscreen" and "suspend lockscreen"
  * T6723    window borders doesn't accept edje icons
  * Other miscolanious fixes
- Don't ship wayland desktop file in Leap 15 (but build support)
- Fix desktop files not to symlink to each other
- Add feature-qt-apps-gtk2-theme.patch to set a style for Qt apps
  they look rather broken otherwise</changelog>
  <changelog author="sflees@suse.de" date="1521806400">- 0.22.3
  * T6779 Fix screenlock regression
  * T6784 enlightenment_open still uses deprecated defaults.list
  * remove pulse - wayland hack thats no longer needed</changelog>
  <changelog author="sean@suspend.net" date="1538308800">- 0.22.4
  * T5076 Incorrect desktop files
  * T5203 alt+esc sometimes crash
  * T6787 Exec-keys in some .desktop files are failing to be recognized by Enlightenment
  * T7030 efl internals pass null objects to functions which should not be passed null</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1559131200">- Disable wayland until 0.23.0 when it will build again
- only use update alternatives on openSUSE
- enable systemd on Mageia</changelog>
  <changelog author="simon &lt;simonf.lees@suse.com&gt;" date="1567684800">- 0.23.1
  * Renable wayland support
  * Highlights
  * New padded screenshot option
  * Meson build now is the build system
  * Music Control now supports rage mpris dbus protocol
  * Add Bluez5 support with totally new and redone module and gadget
  * Add dpms option to turn it off or on
  * Alt-tab window switcher allows moving of windows while alt-tabbing
  * Lots of bug fixes, compile warning fixes etc.
  * Massive improvements to Wayland support</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1576756800">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  Allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1589889600">- 0.24.0
  * New and improved shot module with editor and cropper
  * Reduced number of setuid tools (merged many into single system tool)
  * External monitor backlight and brightness controls via (lib)ddctil
  * Improved resolution of EFM thumbnails to 256x256 by default
  * New and improved crash handling guru meditation
  * Restarts are now seamless with fade in and out and zero glitches
  * Wallpaper import generates multiple resolutions for better efficiency
  * Regularly malloc_trim if available to keep mem down
  * All restarts are now handled by enlightenment_start, not e itself
  * Enforce pointer lock to screen in X to stop pointer out-of-bounds
  * Pager plain is gone - use the regular "miniature preview" pager
  * Music control auto-runs your selected media player if not there
  * Handle exception for steam games to find the right desktop file
  * Polkit auth agent support as new core module - no extra daemons
  * Drop comp fast effects - Should be edje transition factor + theme tags
  * Easier config of specific desktop wallpaper straight from pager
  * Startup should be smoother with IO prefetch thread
  * New special blanking timeout for when locked that can be shorter
  * Bluez4 gone now as Bluez5 is done and working fine
  * Down to zero outstanding coverity issues
  * The usual batches of bug fixes and minor improvements
  * New source system.conf to replace upstream's with an openSUSE
    specific config</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1593777600">- Fix name for dlopen'ed libddcutil2 runtime dependency</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1596715200">- 0.24.2
  * Fixed null exec command running
  * Fixed handling of screen with no edid
  * Fixed signal.h, execinfo.h include for some libc's
  * Sped up pager thumb loading significant;y
  * Handle zone changes during startup
  * Longer efreetd timeout for update event
  * Fixed e's xsettings support on 64bit to use the right types
  * Fixed preloading of icon
  * Fixed e's wl backlight/dimming logic to be correct and reliable
  * Fixed noisy logging on invalid exec handle found
  * Fixed shot blurriness if size didn't quite match
  * Fixed battery on openbsd to use right constants
  * Fixed cpu freq setting on freebsd etc.
  * Handle error exits from dependency libs as an error and bring up alert
  * E system - isolate stdio so it doesn't affect ipc on stdin/out
  * Polkit &amp; Askpass password - handle escaping right
  * Fix tiling issue with float/unfloat
  * Fixed shell autohide when clock data up
  * Handle x io error with proper exit code and exit
- 0.24.1
  * Optimized keymap response handling to not stall on startup
  * Fixed wayland frame request timestamp to be the 0 base same as others
  * Fix polkit auth handling when having to auth for non-user UID
  * Randr fix to move pointer on-screen if off screen after reconfigure
  * Fix non-systemd system suport for resume to not think it's suspended
  * Add delay to allow any pending frames to display before suspend
- Add fix-opensuse-pam-search-path.patch because pam is in /usr/include/security</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1597665600">- libddcutil3 replaces libddcutil2 in Tumbleweed</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1597752000">- libddcutil.patch: acutally load libddcutil.so.3 instead of
  libddcutil.so.2 in Tumbleweed</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1605182400">- BuildRequire hicolor-icon-theme to fix directory not owned.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1617278400">- Just recommend libddcutil its not strictly needed and the feature
  wasn't in older versions of Leap.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1644321600">- Update to 0.25.2:
  * Lots of minor bug fixes (see git log)
  * Flat look to match new flat theme
  * New much higher quality default wallpaper set
  * Optimized XKB keymap change handling
  * Init splash is now always on (theme can remove it if desired)
  * Added screen setup menu entry in quick settings menu
  * Redid a lot of screen dimming/blanking/timeout code to fix cruft
  * IBox iconify gadget has window previews on mouse-over now
  * New gesture recognition bindings for touchpads (using Elput)
  * On loss or re-plug in of screen now restore windows sensibly
  * Tasks has window preview on mouse-over now
  * FPS debug (ctl+alt+shift+f to toggle) has a lot more data now
  * BT devices in the Bluez gadget will show battery level if supported
  * Battery now has mouse-over popup with detailed battery information
  * Config saving moved to threads to minimize I/O stutter to core
  * Shot allows copy of screenshot to copy and paste selection too now
  * Temperature monitor now uses hwmon devices and multiple instances
  * New Procstats module can show mem/CPU usage in titlebar
  * Offline/presentation mode removed - use bindings + actions instead
  * Remove custom desklock command - built in is more reliable
  * Winlist (alt+tab) has large mode with window previews now
  * Pluggable device monitoring and applying of input config on plug
  * Added workaround broken Spotify cover art URLs
  * Scale settings will now modify xsettings DPI to make non-efl apps scale
  * Fonts now made to be consistent with EFL and other apps
  * Added binding action to switch profiles
  * EFM - sync more often when doing I/O ops like copy etc.
  * XDG_CURRENT_DESKTOP is now set too
  * EFM image preview will show EFIX dates for when image taken
  * Power plug/unplug now emit signals which theme can make sounds for
  * Mixer - have simple device to icon database text file to look nicer
  * Mixer - add VU meters for output and input audio
  * Mixer - Show icons for apps currently playing sounds and recording
  * Set _NET_WM_STATE_HIDDEN when windows are hidden to avoid rendering
  * Reduce power usage when screen is blanked by setting wins to iconic
  * Added ?grow window in direction? actions you can bind
  * Added palette editor and selector tool to set up custom colors
  * Fingerprint (libFprint) support in desklock and new tool for settings
  * EFM - add recent files menu to access recently opened files
  * Force stdout/error log now to ~/.e-log.log
  * Added settings for animation multiplier to speed up/down transitions
  * No more edge bindings by default
- Rebase dont_offer_updates.patch
- Rebase feature-qt-apps-gtk2-theme.patch
- Remove feature-suse-disable-offline-menu.patch
- Remove libddcutil.patch</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1645012800">- Update to 0.25.3
  * Fix notification double-shadow on multi-screen notifications
  * Add option to gesture to turn off entirely to avoid xserver vt bugs
  * Add option to backlight to disable ddc support in case it's broken
  * Fix ibar left/right emit for alignment
- Log to journal with X11 etc rather then logfile
    feature-openSUSE-log-to-journal.patch
- Refreshed enlightenment-0.16.999.65256-dont_require_suidbit.patch to be -p1
- Fix xsession file install</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1645704000">- boo#1154733 - Recommend pam_mount</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1646049600">- Allow Branding &gt;= 0.1 (I made 0.2 the other day)
- Fix non wayland build</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1650024000">- boo#1197326,1196609 - Don't Enable modules that don't exist in profile
  migration.
  * fix-upstream-dont-migrate-sysinfoluncher.patch
- Recommend acpid for bindings</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1651752000">- Recommend acpid for bindings (Should now remove popup) [boo#1196609]
- system.conf allow all users, this is required because we no
  longer automatically add people to the users group. [boo#1196609]</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1664280000">- Update to 0.25.4 Bugfix release
  * Fix shape handling in various cases that affected apps with shaped input
  * Fix procstats popup and dangling icon for fullscreen windows
  * Fix a vianishing pointer in some cases
  * Workaround Qt issue where it does not remove WM_STATE on withdraw
  * Fix fullscreen focus toggle flicker
  * Fix pointer sticking case
  * Fix tap-to-click props
  * Fix gadgcon disabled items
  * Fix config fallback handling that means no fallback happened
  * Fix gtk frame prop handling
  * Fix first map handling that affected energyxt
  * Fix CVE-2022-37706 (boo#1203631)
  * Hanrde enlightenment_sys when mis-packaged without sysactions.conf
- Drop fix-upstream-dont-migrate-sysinfoluncher.patch fixed upstream</changelog>
</package>
<package pkgid="1c6088bc6e32ebfa5169edfa767b525c339ba5dc2b746c69212f29bbac505352" name="enlightenment-theme-Flat" arch="aarch64">
  <version epoch="0" ver="0.21.0" rel="bp154.4.3.20"/>
  <changelog author="Simon Lees &lt;simonf.lees@suse.com&gt;" date="1573214400">- 1.23 Release
  * Again, the primary focus of this release has been stabilizing
    the EO library as well as an extending the set of unified API
    which is based on it. From this release onwards we also switched
    to meson as our only build system (RIP autotools, you served us
    well for a long time). The 2110 commits contain more changes to
    possible list here, but you will find improved DRM support, a new
    widget for controlling vector animations, a first step towards
    MVVM support, general bugfixes and more.
    Please see the NEWS file for more details.
  * spec file cleanup</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1579694400">- Use luajit only if available</changelog>
  <changelog author="Tomas Cech &lt;sleep_walker@opensuse.org&gt;" date="1580472000">- 1.23.3 Release
  Fixes:
  * elementary: handle case when XFIXES is not available. (T8321)
  * ecore: remove unecessary field in data structure.
  * eina: only the type need to be NULL to assume EINA_VALUE_EMPTY.
  * tests/eina: use #ifdef guard for block which can only occur inside ifdef (CID1400948)
  * mono: remove duplicated EinaFreeCb delegate
  * mono: blacklist efl_ui_text_context_menu_item_add
  * Revert "elm/genlist: don't process entire item queue on each item add"
  * tests/spec: allow for a longer timeout of the spec suite for dist build
  * travis/ci: update Fedora CI images to 31
  * ci: work around ccache segafult during setup
  * travis: update Ubuntu image to the 19.10 release
  * docs: Efl.Gfx.View
  * check: reset flags that used for legacy 'changed' cb
  * elementary: fix end of fast scroll not showing up during Efl.Ui.CollectionView scroll.
  * edje_calc: UNLIKELY changed to LIKELY.
  * elm_config: replace ecore_file_cp with ecore_file_mv
  * csharp:comma have whitespace after and none before
  * csharp: Removing a never used class. (T8417)
  * elementary: cleanup Eina_Future properly by relying on efl_future_then proper lifecycle.
  * elementary: properly handle in flight request in Efl.Ui.CollectionView.
  * elementary: watch event on the model Efl.Ui.CollectionView use directly.
  * ci: fix ccache segfault during setup on CI in release-ready build
  * evas_filter: remove shader compile error
  * Efl.Ui.Scroll_Manager: Fix indentation
  * eolian_mono: avoid keyword as a variable name
  * wl_egl : Prevent access to NULL pointer
  * eolian-cxx: Make events inherit beta info from klass.
  * Revert "elm/genlist: remove calc jobs"
  * Revert "tests/genlist: add behavior testing for nearly all genlist events"</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1582286400">- add full url to the source</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1586520000">- Drastically reduce the number of packages, the reality is
  these days most of the libs don't function without the others
  and everything we use needs all of them. Upstream is also heading
  in this direction.
- Drop avahi and elocation as upstream is phasing it out and we
  don't use them</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1588680000">- 1.24.0 Release
  * EO memory optimization improvements
  * Copy and Paste rework
  * Ecore_Wl2 work
  * Documentation work
  * Multiple other bugfixes
  * Removals
  * emotion &amp; evas: remove gstreamer 0.10 support (gstreamer 1.x support is stable)
  * escape: remove library from tree (no known reamaining user of EFL on PS3 OS)
  * ecore_x: remove support XGesture extension (deprecated, distros do no longer ship it)
  * elocation: remove beta library (never out of beta)
  * eeze: remove tizen module support from eeze sensor (unused, sensor API stays)
  * evas3d: remove support for evas 3D which was a beta all along (never out of beta)
  * Xine and vlc supportin emotion (gstreamer 1.x support is stable)</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1589457600">- 1.24.1 Release
  * edje - don't set font sizes less than 1
  * ecore_evas_x - fix maximize/unmaximize request corner case
  * ecore_evas: only define these eina errors once
  * exactness: remove no longer needed _evas_new()
  * exactness_player: do not test for delay_ms
  * evas + gl - fix callback-to-app-changes-state issue with pixel data</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1590494400">- 1.24.2
  * evas_vg_shape: return NULL in evas_vg_shape_add when the parent of shape is NULL
  * efl_ui_image: fix to call "clicked" smart callback when there is no img
  * ecore-x - ensure we fully look at all xkb events and refresh all binds
  * evas_vg_container: return NULL in evas_vg_container_add when the parent of container is NULL
  * build: ensure we set ENABLE_LUA_OLD when using a lua interpreter</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1596628800">- 1.24.3
  * evas - csd and wl csd - fix alpha zeroing to avoid framespace junk
  * evas - genetic update regions smart merge - merge v adjacent regions
  * efreet - handle runtime relocation right with default XDG_DATA_DIRS
  * edje: fix animation memory leak.
  * canvas vg: fix dangling vector containers.
  * evas vg: clean up dangling instances
  * canvas vg: fix vector file data memory leak.
  * efl gfx_path: fix memory leak.
  * efl_ui_image: fixed elm_image_preload_disabled_set api is not working when it is called before file set</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1598875200">- Disable NEON on armv6/7:
  * efl-no-neon.patch</changelog>
  <changelog author="Tomas Cech &lt;sleep_walker@opensuse.org&gt;" date="1599134400">- split out ecore_imf-module-scim to reduce dependencies of base efl package</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1603108800">- 1.25.1
  * This time around we do not have bigger changes to cover here. For the full list please look at the NEWS file, if you are interested in the details. As usual we have been working on fixing bugs, optimising our code for speed and memory footprint and adding new features.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1625659200">- Fix typo in description</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1641384000">- Drop unkown meson paramter -Demotion-loaders-disabler. Meson
  prior to 0.60 ignored it, recent meson version fails.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1644321600">- Update to 1.26.2:
  * Fix crash when doing wierd combinations of eet_write and eet_read
  * Fix elementary tests to pass
  * Fix portability of putenv/setenv for niche OS's
  * Fix ecore input to build on BSD
  * Fix svg decoding crashes for vector decode
  * Fix theme - ibar label overlay
  * Fix theme - pointer scaling and sizing
  * Fix ecore x - ensure pointer on screen when setting bounds
  * elm theme - win - fix mystery off-by-1 resize of content
  * elm theme - fix mis-named colorclass for inwin bg
  * edje entry - fix past to use shft+ins for paste and no ctl
  * edje entry - complete key handling for cut (shft+del)
  * elm theme - fix placement of procstats and volume so they dont fight
  * Evas GL dithers by default for better quality (but it's a bit slower)
  * Evas HEIF format loaded (need to remove from disabled set)
  * Default theme is now the flat theme
  * New color palette files and API
  * Improved speed of Entry appending
  * Improved performance by not rendering invisible windows</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1645099200">- Upstream theme is now called Flat rather then dark. Dark will
  reappear soon in a new package.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1645099201">- Upstream theme is now called Flat rather then dark. Dark will
  reappear soon in a new package.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1645704000">- Themes are going to recommend there icon themes as well</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1646222400">- Drop python-devel BuildRequires: not needed.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1664193600">- Update to 1.26.3 Bugfix release
  * Fix theme issues
  * Fix edje calc internal return values in some cases
  * Fix ecore-x netwm moveresize request handling
  * Fix ecore-x xkb handling to not leak
  * Fix new xkb event handling
  * Fix evas smart object to null out fields for safety
  * Fix elm null cnp object handling to not crash in odd cases
  * Fix ecore evas x11 dnd handling to not null out xdnd props
  * Fix data checkme file so relocation at runtime works again
  * Fix eina bt output to always have spaces between fields
  * Fix png loader on arm to not have rgb values when a is 0
  * Fix textgrid to guard against null glyphs
  * Fix ecore-x vblank to use current time not vlbank time
  * Fix emile to handle invalid compress types more gracefully
  * Fix compile warnings
  * Fix evas psd loader crash
  * Fix osx sample compile conf script options
  * Fix wl vsync timer to use current time not vblank time
  * Work around xwayland issue where synthetic events are not sent</changelog>
</package>
<package pkgid="781f6e3bd4cde876659497fb841bd3fb2e54eeac74e0c81266ca316ef212ba62" name="enlightenment-theme-Flat" arch="s390x">
  <version epoch="0" ver="0.21.0" rel="bp154.4.3.20"/>
  <changelog author="Simon Lees &lt;simonf.lees@suse.com&gt;" date="1573214400">- 1.23 Release
  * Again, the primary focus of this release has been stabilizing
    the EO library as well as an extending the set of unified API
    which is based on it. From this release onwards we also switched
    to meson as our only build system (RIP autotools, you served us
    well for a long time). The 2110 commits contain more changes to
    possible list here, but you will find improved DRM support, a new
    widget for controlling vector animations, a first step towards
    MVVM support, general bugfixes and more.
    Please see the NEWS file for more details.
  * spec file cleanup</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1579694400">- Use luajit only if available</changelog>
  <changelog author="Tomas Cech &lt;sleep_walker@opensuse.org&gt;" date="1580472000">- 1.23.3 Release
  Fixes:
  * elementary: handle case when XFIXES is not available. (T8321)
  * ecore: remove unecessary field in data structure.
  * eina: only the type need to be NULL to assume EINA_VALUE_EMPTY.
  * tests/eina: use #ifdef guard for block which can only occur inside ifdef (CID1400948)
  * mono: remove duplicated EinaFreeCb delegate
  * mono: blacklist efl_ui_text_context_menu_item_add
  * Revert "elm/genlist: don't process entire item queue on each item add"
  * tests/spec: allow for a longer timeout of the spec suite for dist build
  * travis/ci: update Fedora CI images to 31
  * ci: work around ccache segafult during setup
  * travis: update Ubuntu image to the 19.10 release
  * docs: Efl.Gfx.View
  * check: reset flags that used for legacy 'changed' cb
  * elementary: fix end of fast scroll not showing up during Efl.Ui.CollectionView scroll.
  * edje_calc: UNLIKELY changed to LIKELY.
  * elm_config: replace ecore_file_cp with ecore_file_mv
  * csharp:comma have whitespace after and none before
  * csharp: Removing a never used class. (T8417)
  * elementary: cleanup Eina_Future properly by relying on efl_future_then proper lifecycle.
  * elementary: properly handle in flight request in Efl.Ui.CollectionView.
  * elementary: watch event on the model Efl.Ui.CollectionView use directly.
  * ci: fix ccache segfault during setup on CI in release-ready build
  * evas_filter: remove shader compile error
  * Efl.Ui.Scroll_Manager: Fix indentation
  * eolian_mono: avoid keyword as a variable name
  * wl_egl : Prevent access to NULL pointer
  * eolian-cxx: Make events inherit beta info from klass.
  * Revert "elm/genlist: remove calc jobs"
  * Revert "tests/genlist: add behavior testing for nearly all genlist events"</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1582286400">- add full url to the source</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1586520000">- Drastically reduce the number of packages, the reality is
  these days most of the libs don't function without the others
  and everything we use needs all of them. Upstream is also heading
  in this direction.
- Drop avahi and elocation as upstream is phasing it out and we
  don't use them</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1588680000">- 1.24.0 Release
  * EO memory optimization improvements
  * Copy and Paste rework
  * Ecore_Wl2 work
  * Documentation work
  * Multiple other bugfixes
  * Removals
  * emotion &amp; evas: remove gstreamer 0.10 support (gstreamer 1.x support is stable)
  * escape: remove library from tree (no known reamaining user of EFL on PS3 OS)
  * ecore_x: remove support XGesture extension (deprecated, distros do no longer ship it)
  * elocation: remove beta library (never out of beta)
  * eeze: remove tizen module support from eeze sensor (unused, sensor API stays)
  * evas3d: remove support for evas 3D which was a beta all along (never out of beta)
  * Xine and vlc supportin emotion (gstreamer 1.x support is stable)</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1589457600">- 1.24.1 Release
  * edje - don't set font sizes less than 1
  * ecore_evas_x - fix maximize/unmaximize request corner case
  * ecore_evas: only define these eina errors once
  * exactness: remove no longer needed _evas_new()
  * exactness_player: do not test for delay_ms
  * evas + gl - fix callback-to-app-changes-state issue with pixel data</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1590494400">- 1.24.2
  * evas_vg_shape: return NULL in evas_vg_shape_add when the parent of shape is NULL
  * efl_ui_image: fix to call "clicked" smart callback when there is no img
  * ecore-x - ensure we fully look at all xkb events and refresh all binds
  * evas_vg_container: return NULL in evas_vg_container_add when the parent of container is NULL
  * build: ensure we set ENABLE_LUA_OLD when using a lua interpreter</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1596628800">- 1.24.3
  * evas - csd and wl csd - fix alpha zeroing to avoid framespace junk
  * evas - genetic update regions smart merge - merge v adjacent regions
  * efreet - handle runtime relocation right with default XDG_DATA_DIRS
  * edje: fix animation memory leak.
  * canvas vg: fix dangling vector containers.
  * evas vg: clean up dangling instances
  * canvas vg: fix vector file data memory leak.
  * efl gfx_path: fix memory leak.
  * efl_ui_image: fixed elm_image_preload_disabled_set api is not working when it is called before file set</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1598875200">- Disable NEON on armv6/7:
  * efl-no-neon.patch</changelog>
  <changelog author="Tomas Cech &lt;sleep_walker@opensuse.org&gt;" date="1599134400">- split out ecore_imf-module-scim to reduce dependencies of base efl package</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1603108800">- 1.25.1
  * This time around we do not have bigger changes to cover here. For the full list please look at the NEWS file, if you are interested in the details. As usual we have been working on fixing bugs, optimising our code for speed and memory footprint and adding new features.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1625659200">- Fix typo in description</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1641384000">- Drop unkown meson paramter -Demotion-loaders-disabler. Meson
  prior to 0.60 ignored it, recent meson version fails.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1644321600">- Update to 1.26.2:
  * Fix crash when doing wierd combinations of eet_write and eet_read
  * Fix elementary tests to pass
  * Fix portability of putenv/setenv for niche OS's
  * Fix ecore input to build on BSD
  * Fix svg decoding crashes for vector decode
  * Fix theme - ibar label overlay
  * Fix theme - pointer scaling and sizing
  * Fix ecore x - ensure pointer on screen when setting bounds
  * elm theme - win - fix mystery off-by-1 resize of content
  * elm theme - fix mis-named colorclass for inwin bg
  * edje entry - fix past to use shft+ins for paste and no ctl
  * edje entry - complete key handling for cut (shft+del)
  * elm theme - fix placement of procstats and volume so they dont fight
  * Evas GL dithers by default for better quality (but it's a bit slower)
  * Evas HEIF format loaded (need to remove from disabled set)
  * Default theme is now the flat theme
  * New color palette files and API
  * Improved speed of Entry appending
  * Improved performance by not rendering invisible windows</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1645099200">- Upstream theme is now called Flat rather then dark. Dark will
  reappear soon in a new package.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1645099201">- Upstream theme is now called Flat rather then dark. Dark will
  reappear soon in a new package.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1645704000">- Themes are going to recommend there icon themes as well</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1646222400">- Drop python-devel BuildRequires: not needed.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1664193600">- Update to 1.26.3 Bugfix release
  * Fix theme issues
  * Fix edje calc internal return values in some cases
  * Fix ecore-x netwm moveresize request handling
  * Fix ecore-x xkb handling to not leak
  * Fix new xkb event handling
  * Fix evas smart object to null out fields for safety
  * Fix elm null cnp object handling to not crash in odd cases
  * Fix ecore evas x11 dnd handling to not null out xdnd props
  * Fix data checkme file so relocation at runtime works again
  * Fix eina bt output to always have spaces between fields
  * Fix png loader on arm to not have rgb values when a is 0
  * Fix textgrid to guard against null glyphs
  * Fix ecore-x vblank to use current time not vlbank time
  * Fix emile to handle invalid compress types more gracefully
  * Fix compile warnings
  * Fix evas psd loader crash
  * Fix osx sample compile conf script options
  * Fix wl vsync timer to use current time not vblank time
  * Work around xwayland issue where synthetic events are not sent</changelog>
</package>
<package pkgid="2edfc480c97396a32ae5eda19832e520a2d6a6ac2553204f6a7a488064b07267" name="enlightenment-theme-Flat" arch="x86_64">
  <version epoch="0" ver="0.21.0" rel="bp154.4.3.20"/>
  <changelog author="Simon Lees &lt;simonf.lees@suse.com&gt;" date="1573214400">- 1.23 Release
  * Again, the primary focus of this release has been stabilizing
    the EO library as well as an extending the set of unified API
    which is based on it. From this release onwards we also switched
    to meson as our only build system (RIP autotools, you served us
    well for a long time). The 2110 commits contain more changes to
    possible list here, but you will find improved DRM support, a new
    widget for controlling vector animations, a first step towards
    MVVM support, general bugfixes and more.
    Please see the NEWS file for more details.
  * spec file cleanup</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1579694400">- Use luajit only if available</changelog>
  <changelog author="Tomas Cech &lt;sleep_walker@opensuse.org&gt;" date="1580472000">- 1.23.3 Release
  Fixes:
  * elementary: handle case when XFIXES is not available. (T8321)
  * ecore: remove unecessary field in data structure.
  * eina: only the type need to be NULL to assume EINA_VALUE_EMPTY.
  * tests/eina: use #ifdef guard for block which can only occur inside ifdef (CID1400948)
  * mono: remove duplicated EinaFreeCb delegate
  * mono: blacklist efl_ui_text_context_menu_item_add
  * Revert "elm/genlist: don't process entire item queue on each item add"
  * tests/spec: allow for a longer timeout of the spec suite for dist build
  * travis/ci: update Fedora CI images to 31
  * ci: work around ccache segafult during setup
  * travis: update Ubuntu image to the 19.10 release
  * docs: Efl.Gfx.View
  * check: reset flags that used for legacy 'changed' cb
  * elementary: fix end of fast scroll not showing up during Efl.Ui.CollectionView scroll.
  * edje_calc: UNLIKELY changed to LIKELY.
  * elm_config: replace ecore_file_cp with ecore_file_mv
  * csharp:comma have whitespace after and none before
  * csharp: Removing a never used class. (T8417)
  * elementary: cleanup Eina_Future properly by relying on efl_future_then proper lifecycle.
  * elementary: properly handle in flight request in Efl.Ui.CollectionView.
  * elementary: watch event on the model Efl.Ui.CollectionView use directly.
  * ci: fix ccache segfault during setup on CI in release-ready build
  * evas_filter: remove shader compile error
  * Efl.Ui.Scroll_Manager: Fix indentation
  * eolian_mono: avoid keyword as a variable name
  * wl_egl : Prevent access to NULL pointer
  * eolian-cxx: Make events inherit beta info from klass.
  * Revert "elm/genlist: remove calc jobs"
  * Revert "tests/genlist: add behavior testing for nearly all genlist events"</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1582286400">- add full url to the source</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1586520000">- Drastically reduce the number of packages, the reality is
  these days most of the libs don't function without the others
  and everything we use needs all of them. Upstream is also heading
  in this direction.
- Drop avahi and elocation as upstream is phasing it out and we
  don't use them</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1588680000">- 1.24.0 Release
  * EO memory optimization improvements
  * Copy and Paste rework
  * Ecore_Wl2 work
  * Documentation work
  * Multiple other bugfixes
  * Removals
  * emotion &amp; evas: remove gstreamer 0.10 support (gstreamer 1.x support is stable)
  * escape: remove library from tree (no known reamaining user of EFL on PS3 OS)
  * ecore_x: remove support XGesture extension (deprecated, distros do no longer ship it)
  * elocation: remove beta library (never out of beta)
  * eeze: remove tizen module support from eeze sensor (unused, sensor API stays)
  * evas3d: remove support for evas 3D which was a beta all along (never out of beta)
  * Xine and vlc supportin emotion (gstreamer 1.x support is stable)</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1589457600">- 1.24.1 Release
  * edje - don't set font sizes less than 1
  * ecore_evas_x - fix maximize/unmaximize request corner case
  * ecore_evas: only define these eina errors once
  * exactness: remove no longer needed _evas_new()
  * exactness_player: do not test for delay_ms
  * evas + gl - fix callback-to-app-changes-state issue with pixel data</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1590494400">- 1.24.2
  * evas_vg_shape: return NULL in evas_vg_shape_add when the parent of shape is NULL
  * efl_ui_image: fix to call "clicked" smart callback when there is no img
  * ecore-x - ensure we fully look at all xkb events and refresh all binds
  * evas_vg_container: return NULL in evas_vg_container_add when the parent of container is NULL
  * build: ensure we set ENABLE_LUA_OLD when using a lua interpreter</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1596628800">- 1.24.3
  * evas - csd and wl csd - fix alpha zeroing to avoid framespace junk
  * evas - genetic update regions smart merge - merge v adjacent regions
  * efreet - handle runtime relocation right with default XDG_DATA_DIRS
  * edje: fix animation memory leak.
  * canvas vg: fix dangling vector containers.
  * evas vg: clean up dangling instances
  * canvas vg: fix vector file data memory leak.
  * efl gfx_path: fix memory leak.
  * efl_ui_image: fixed elm_image_preload_disabled_set api is not working when it is called before file set</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1598875200">- Disable NEON on armv6/7:
  * efl-no-neon.patch</changelog>
  <changelog author="Tomas Cech &lt;sleep_walker@opensuse.org&gt;" date="1599134400">- split out ecore_imf-module-scim to reduce dependencies of base efl package</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1603108800">- 1.25.1
  * This time around we do not have bigger changes to cover here. For the full list please look at the NEWS file, if you are interested in the details. As usual we have been working on fixing bugs, optimising our code for speed and memory footprint and adding new features.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1625659200">- Fix typo in description</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1641384000">- Drop unkown meson paramter -Demotion-loaders-disabler. Meson
  prior to 0.60 ignored it, recent meson version fails.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1644321600">- Update to 1.26.2:
  * Fix crash when doing wierd combinations of eet_write and eet_read
  * Fix elementary tests to pass
  * Fix portability of putenv/setenv for niche OS's
  * Fix ecore input to build on BSD
  * Fix svg decoding crashes for vector decode
  * Fix theme - ibar label overlay
  * Fix theme - pointer scaling and sizing
  * Fix ecore x - ensure pointer on screen when setting bounds
  * elm theme - win - fix mystery off-by-1 resize of content
  * elm theme - fix mis-named colorclass for inwin bg
  * edje entry - fix past to use shft+ins for paste and no ctl
  * edje entry - complete key handling for cut (shft+del)
  * elm theme - fix placement of procstats and volume so they dont fight
  * Evas GL dithers by default for better quality (but it's a bit slower)
  * Evas HEIF format loaded (need to remove from disabled set)
  * Default theme is now the flat theme
  * New color palette files and API
  * Improved speed of Entry appending
  * Improved performance by not rendering invisible windows</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1645099200">- Upstream theme is now called Flat rather then dark. Dark will
  reappear soon in a new package.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1645099201">- Upstream theme is now called Flat rather then dark. Dark will
  reappear soon in a new package.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1645704000">- Themes are going to recommend there icon themes as well</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1646222400">- Drop python-devel BuildRequires: not needed.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1664193600">- Update to 1.26.3 Bugfix release
  * Fix theme issues
  * Fix edje calc internal return values in some cases
  * Fix ecore-x netwm moveresize request handling
  * Fix ecore-x xkb handling to not leak
  * Fix new xkb event handling
  * Fix evas smart object to null out fields for safety
  * Fix elm null cnp object handling to not crash in odd cases
  * Fix ecore evas x11 dnd handling to not null out xdnd props
  * Fix data checkme file so relocation at runtime works again
  * Fix eina bt output to always have spaces between fields
  * Fix png loader on arm to not have rgb values when a is 0
  * Fix textgrid to guard against null glyphs
  * Fix ecore-x vblank to use current time not vlbank time
  * Fix emile to handle invalid compress types more gracefully
  * Fix compile warnings
  * Fix evas psd loader crash
  * Fix osx sample compile conf script options
  * Fix wl vsync timer to use current time not vblank time
  * Work around xwayland issue where synthetic events are not sent</changelog>
</package>
<package pkgid="6456919e279f7923b2d58f9c7cfbf304813b98536333bb36a85ce7c47b31a10e" name="enlightenment-theme-upstream" arch="aarch64">
  <version epoch="0" ver="0.21.0" rel="bp154.4.3.20"/>
  <changelog author="Simon Lees &lt;simonf.lees@suse.com&gt;" date="1573214400">- 1.23 Release
  * Again, the primary focus of this release has been stabilizing
    the EO library as well as an extending the set of unified API
    which is based on it. From this release onwards we also switched
    to meson as our only build system (RIP autotools, you served us
    well for a long time). The 2110 commits contain more changes to
    possible list here, but you will find improved DRM support, a new
    widget for controlling vector animations, a first step towards
    MVVM support, general bugfixes and more.
    Please see the NEWS file for more details.
  * spec file cleanup</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1579694400">- Use luajit only if available</changelog>
  <changelog author="Tomas Cech &lt;sleep_walker@opensuse.org&gt;" date="1580472000">- 1.23.3 Release
  Fixes:
  * elementary: handle case when XFIXES is not available. (T8321)
  * ecore: remove unecessary field in data structure.
  * eina: only the type need to be NULL to assume EINA_VALUE_EMPTY.
  * tests/eina: use #ifdef guard for block which can only occur inside ifdef (CID1400948)
  * mono: remove duplicated EinaFreeCb delegate
  * mono: blacklist efl_ui_text_context_menu_item_add
  * Revert "elm/genlist: don't process entire item queue on each item add"
  * tests/spec: allow for a longer timeout of the spec suite for dist build
  * travis/ci: update Fedora CI images to 31
  * ci: work around ccache segafult during setup
  * travis: update Ubuntu image to the 19.10 release
  * docs: Efl.Gfx.View
  * check: reset flags that used for legacy 'changed' cb
  * elementary: fix end of fast scroll not showing up during Efl.Ui.CollectionView scroll.
  * edje_calc: UNLIKELY changed to LIKELY.
  * elm_config: replace ecore_file_cp with ecore_file_mv
  * csharp:comma have whitespace after and none before
  * csharp: Removing a never used class. (T8417)
  * elementary: cleanup Eina_Future properly by relying on efl_future_then proper lifecycle.
  * elementary: properly handle in flight request in Efl.Ui.CollectionView.
  * elementary: watch event on the model Efl.Ui.CollectionView use directly.
  * ci: fix ccache segfault during setup on CI in release-ready build
  * evas_filter: remove shader compile error
  * Efl.Ui.Scroll_Manager: Fix indentation
  * eolian_mono: avoid keyword as a variable name
  * wl_egl : Prevent access to NULL pointer
  * eolian-cxx: Make events inherit beta info from klass.
  * Revert "elm/genlist: remove calc jobs"
  * Revert "tests/genlist: add behavior testing for nearly all genlist events"</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1582286400">- add full url to the source</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1586520000">- Drastically reduce the number of packages, the reality is
  these days most of the libs don't function without the others
  and everything we use needs all of them. Upstream is also heading
  in this direction.
- Drop avahi and elocation as upstream is phasing it out and we
  don't use them</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1588680000">- 1.24.0 Release
  * EO memory optimization improvements
  * Copy and Paste rework
  * Ecore_Wl2 work
  * Documentation work
  * Multiple other bugfixes
  * Removals
  * emotion &amp; evas: remove gstreamer 0.10 support (gstreamer 1.x support is stable)
  * escape: remove library from tree (no known reamaining user of EFL on PS3 OS)
  * ecore_x: remove support XGesture extension (deprecated, distros do no longer ship it)
  * elocation: remove beta library (never out of beta)
  * eeze: remove tizen module support from eeze sensor (unused, sensor API stays)
  * evas3d: remove support for evas 3D which was a beta all along (never out of beta)
  * Xine and vlc supportin emotion (gstreamer 1.x support is stable)</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1589457600">- 1.24.1 Release
  * edje - don't set font sizes less than 1
  * ecore_evas_x - fix maximize/unmaximize request corner case
  * ecore_evas: only define these eina errors once
  * exactness: remove no longer needed _evas_new()
  * exactness_player: do not test for delay_ms
  * evas + gl - fix callback-to-app-changes-state issue with pixel data</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1590494400">- 1.24.2
  * evas_vg_shape: return NULL in evas_vg_shape_add when the parent of shape is NULL
  * efl_ui_image: fix to call "clicked" smart callback when there is no img
  * ecore-x - ensure we fully look at all xkb events and refresh all binds
  * evas_vg_container: return NULL in evas_vg_container_add when the parent of container is NULL
  * build: ensure we set ENABLE_LUA_OLD when using a lua interpreter</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1596628800">- 1.24.3
  * evas - csd and wl csd - fix alpha zeroing to avoid framespace junk
  * evas - genetic update regions smart merge - merge v adjacent regions
  * efreet - handle runtime relocation right with default XDG_DATA_DIRS
  * edje: fix animation memory leak.
  * canvas vg: fix dangling vector containers.
  * evas vg: clean up dangling instances
  * canvas vg: fix vector file data memory leak.
  * efl gfx_path: fix memory leak.
  * efl_ui_image: fixed elm_image_preload_disabled_set api is not working when it is called before file set</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1598875200">- Disable NEON on armv6/7:
  * efl-no-neon.patch</changelog>
  <changelog author="Tomas Cech &lt;sleep_walker@opensuse.org&gt;" date="1599134400">- split out ecore_imf-module-scim to reduce dependencies of base efl package</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1603108800">- 1.25.1
  * This time around we do not have bigger changes to cover here. For the full list please look at the NEWS file, if you are interested in the details. As usual we have been working on fixing bugs, optimising our code for speed and memory footprint and adding new features.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1625659200">- Fix typo in description</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1641384000">- Drop unkown meson paramter -Demotion-loaders-disabler. Meson
  prior to 0.60 ignored it, recent meson version fails.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1644321600">- Update to 1.26.2:
  * Fix crash when doing wierd combinations of eet_write and eet_read
  * Fix elementary tests to pass
  * Fix portability of putenv/setenv for niche OS's
  * Fix ecore input to build on BSD
  * Fix svg decoding crashes for vector decode
  * Fix theme - ibar label overlay
  * Fix theme - pointer scaling and sizing
  * Fix ecore x - ensure pointer on screen when setting bounds
  * elm theme - win - fix mystery off-by-1 resize of content
  * elm theme - fix mis-named colorclass for inwin bg
  * edje entry - fix past to use shft+ins for paste and no ctl
  * edje entry - complete key handling for cut (shft+del)
  * elm theme - fix placement of procstats and volume so they dont fight
  * Evas GL dithers by default for better quality (but it's a bit slower)
  * Evas HEIF format loaded (need to remove from disabled set)
  * Default theme is now the flat theme
  * New color palette files and API
  * Improved speed of Entry appending
  * Improved performance by not rendering invisible windows</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1645099200">- Upstream theme is now called Flat rather then dark. Dark will
  reappear soon in a new package.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1645099201">- Upstream theme is now called Flat rather then dark. Dark will
  reappear soon in a new package.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1645704000">- Themes are going to recommend there icon themes as well</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1646222400">- Drop python-devel BuildRequires: not needed.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1664193600">- Update to 1.26.3 Bugfix release
  * Fix theme issues
  * Fix edje calc internal return values in some cases
  * Fix ecore-x netwm moveresize request handling
  * Fix ecore-x xkb handling to not leak
  * Fix new xkb event handling
  * Fix evas smart object to null out fields for safety
  * Fix elm null cnp object handling to not crash in odd cases
  * Fix ecore evas x11 dnd handling to not null out xdnd props
  * Fix data checkme file so relocation at runtime works again
  * Fix eina bt output to always have spaces between fields
  * Fix png loader on arm to not have rgb values when a is 0
  * Fix textgrid to guard against null glyphs
  * Fix ecore-x vblank to use current time not vlbank time
  * Fix emile to handle invalid compress types more gracefully
  * Fix compile warnings
  * Fix evas psd loader crash
  * Fix osx sample compile conf script options
  * Fix wl vsync timer to use current time not vblank time
  * Work around xwayland issue where synthetic events are not sent</changelog>
</package>
<package pkgid="ca0e9b724dd2debf3acd8a5c254dc530e8a39988d68fc55fa25b630d208259dd" name="enlightenment-theme-upstream" arch="s390x">
  <version epoch="0" ver="0.21.0" rel="bp154.4.3.20"/>
  <changelog author="Simon Lees &lt;simonf.lees@suse.com&gt;" date="1573214400">- 1.23 Release
  * Again, the primary focus of this release has been stabilizing
    the EO library as well as an extending the set of unified API
    which is based on it. From this release onwards we also switched
    to meson as our only build system (RIP autotools, you served us
    well for a long time). The 2110 commits contain more changes to
    possible list here, but you will find improved DRM support, a new
    widget for controlling vector animations, a first step towards
    MVVM support, general bugfixes and more.
    Please see the NEWS file for more details.
  * spec file cleanup</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1579694400">- Use luajit only if available</changelog>
  <changelog author="Tomas Cech &lt;sleep_walker@opensuse.org&gt;" date="1580472000">- 1.23.3 Release
  Fixes:
  * elementary: handle case when XFIXES is not available. (T8321)
  * ecore: remove unecessary field in data structure.
  * eina: only the type need to be NULL to assume EINA_VALUE_EMPTY.
  * tests/eina: use #ifdef guard for block which can only occur inside ifdef (CID1400948)
  * mono: remove duplicated EinaFreeCb delegate
  * mono: blacklist efl_ui_text_context_menu_item_add
  * Revert "elm/genlist: don't process entire item queue on each item add"
  * tests/spec: allow for a longer timeout of the spec suite for dist build
  * travis/ci: update Fedora CI images to 31
  * ci: work around ccache segafult during setup
  * travis: update Ubuntu image to the 19.10 release
  * docs: Efl.Gfx.View
  * check: reset flags that used for legacy 'changed' cb
  * elementary: fix end of fast scroll not showing up during Efl.Ui.CollectionView scroll.
  * edje_calc: UNLIKELY changed to LIKELY.
  * elm_config: replace ecore_file_cp with ecore_file_mv
  * csharp:comma have whitespace after and none before
  * csharp: Removing a never used class. (T8417)
  * elementary: cleanup Eina_Future properly by relying on efl_future_then proper lifecycle.
  * elementary: properly handle in flight request in Efl.Ui.CollectionView.
  * elementary: watch event on the model Efl.Ui.CollectionView use directly.
  * ci: fix ccache segfault during setup on CI in release-ready build
  * evas_filter: remove shader compile error
  * Efl.Ui.Scroll_Manager: Fix indentation
  * eolian_mono: avoid keyword as a variable name
  * wl_egl : Prevent access to NULL pointer
  * eolian-cxx: Make events inherit beta info from klass.
  * Revert "elm/genlist: remove calc jobs"
  * Revert "tests/genlist: add behavior testing for nearly all genlist events"</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1582286400">- add full url to the source</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1586520000">- Drastically reduce the number of packages, the reality is
  these days most of the libs don't function without the others
  and everything we use needs all of them. Upstream is also heading
  in this direction.
- Drop avahi and elocation as upstream is phasing it out and we
  don't use them</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1588680000">- 1.24.0 Release
  * EO memory optimization improvements
  * Copy and Paste rework
  * Ecore_Wl2 work
  * Documentation work
  * Multiple other bugfixes
  * Removals
  * emotion &amp; evas: remove gstreamer 0.10 support (gstreamer 1.x support is stable)
  * escape: remove library from tree (no known reamaining user of EFL on PS3 OS)
  * ecore_x: remove support XGesture extension (deprecated, distros do no longer ship it)
  * elocation: remove beta library (never out of beta)
  * eeze: remove tizen module support from eeze sensor (unused, sensor API stays)
  * evas3d: remove support for evas 3D which was a beta all along (never out of beta)
  * Xine and vlc supportin emotion (gstreamer 1.x support is stable)</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1589457600">- 1.24.1 Release
  * edje - don't set font sizes less than 1
  * ecore_evas_x - fix maximize/unmaximize request corner case
  * ecore_evas: only define these eina errors once
  * exactness: remove no longer needed _evas_new()
  * exactness_player: do not test for delay_ms
  * evas + gl - fix callback-to-app-changes-state issue with pixel data</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1590494400">- 1.24.2
  * evas_vg_shape: return NULL in evas_vg_shape_add when the parent of shape is NULL
  * efl_ui_image: fix to call "clicked" smart callback when there is no img
  * ecore-x - ensure we fully look at all xkb events and refresh all binds
  * evas_vg_container: return NULL in evas_vg_container_add when the parent of container is NULL
  * build: ensure we set ENABLE_LUA_OLD when using a lua interpreter</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1596628800">- 1.24.3
  * evas - csd and wl csd - fix alpha zeroing to avoid framespace junk
  * evas - genetic update regions smart merge - merge v adjacent regions
  * efreet - handle runtime relocation right with default XDG_DATA_DIRS
  * edje: fix animation memory leak.
  * canvas vg: fix dangling vector containers.
  * evas vg: clean up dangling instances
  * canvas vg: fix vector file data memory leak.
  * efl gfx_path: fix memory leak.
  * efl_ui_image: fixed elm_image_preload_disabled_set api is not working when it is called before file set</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1598875200">- Disable NEON on armv6/7:
  * efl-no-neon.patch</changelog>
  <changelog author="Tomas Cech &lt;sleep_walker@opensuse.org&gt;" date="1599134400">- split out ecore_imf-module-scim to reduce dependencies of base efl package</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1603108800">- 1.25.1
  * This time around we do not have bigger changes to cover here. For the full list please look at the NEWS file, if you are interested in the details. As usual we have been working on fixing bugs, optimising our code for speed and memory footprint and adding new features.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1625659200">- Fix typo in description</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1641384000">- Drop unkown meson paramter -Demotion-loaders-disabler. Meson
  prior to 0.60 ignored it, recent meson version fails.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1644321600">- Update to 1.26.2:
  * Fix crash when doing wierd combinations of eet_write and eet_read
  * Fix elementary tests to pass
  * Fix portability of putenv/setenv for niche OS's
  * Fix ecore input to build on BSD
  * Fix svg decoding crashes for vector decode
  * Fix theme - ibar label overlay
  * Fix theme - pointer scaling and sizing
  * Fix ecore x - ensure pointer on screen when setting bounds
  * elm theme - win - fix mystery off-by-1 resize of content
  * elm theme - fix mis-named colorclass for inwin bg
  * edje entry - fix past to use shft+ins for paste and no ctl
  * edje entry - complete key handling for cut (shft+del)
  * elm theme - fix placement of procstats and volume so they dont fight
  * Evas GL dithers by default for better quality (but it's a bit slower)
  * Evas HEIF format loaded (need to remove from disabled set)
  * Default theme is now the flat theme
  * New color palette files and API
  * Improved speed of Entry appending
  * Improved performance by not rendering invisible windows</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1645099200">- Upstream theme is now called Flat rather then dark. Dark will
  reappear soon in a new package.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1645099201">- Upstream theme is now called Flat rather then dark. Dark will
  reappear soon in a new package.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1645704000">- Themes are going to recommend there icon themes as well</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1646222400">- Drop python-devel BuildRequires: not needed.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1664193600">- Update to 1.26.3 Bugfix release
  * Fix theme issues
  * Fix edje calc internal return values in some cases
  * Fix ecore-x netwm moveresize request handling
  * Fix ecore-x xkb handling to not leak
  * Fix new xkb event handling
  * Fix evas smart object to null out fields for safety
  * Fix elm null cnp object handling to not crash in odd cases
  * Fix ecore evas x11 dnd handling to not null out xdnd props
  * Fix data checkme file so relocation at runtime works again
  * Fix eina bt output to always have spaces between fields
  * Fix png loader on arm to not have rgb values when a is 0
  * Fix textgrid to guard against null glyphs
  * Fix ecore-x vblank to use current time not vlbank time
  * Fix emile to handle invalid compress types more gracefully
  * Fix compile warnings
  * Fix evas psd loader crash
  * Fix osx sample compile conf script options
  * Fix wl vsync timer to use current time not vblank time
  * Work around xwayland issue where synthetic events are not sent</changelog>
</package>
<package pkgid="3532bb5b690cc5ff7d60ed7ee031e8f9712cc688e3680bd23a4918154369181e" name="enlightenment-theme-upstream" arch="x86_64">
  <version epoch="0" ver="0.21.0" rel="bp154.4.3.20"/>
  <changelog author="Simon Lees &lt;simonf.lees@suse.com&gt;" date="1573214400">- 1.23 Release
  * Again, the primary focus of this release has been stabilizing
    the EO library as well as an extending the set of unified API
    which is based on it. From this release onwards we also switched
    to meson as our only build system (RIP autotools, you served us
    well for a long time). The 2110 commits contain more changes to
    possible list here, but you will find improved DRM support, a new
    widget for controlling vector animations, a first step towards
    MVVM support, general bugfixes and more.
    Please see the NEWS file for more details.
  * spec file cleanup</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1579694400">- Use luajit only if available</changelog>
  <changelog author="Tomas Cech &lt;sleep_walker@opensuse.org&gt;" date="1580472000">- 1.23.3 Release
  Fixes:
  * elementary: handle case when XFIXES is not available. (T8321)
  * ecore: remove unecessary field in data structure.
  * eina: only the type need to be NULL to assume EINA_VALUE_EMPTY.
  * tests/eina: use #ifdef guard for block which can only occur inside ifdef (CID1400948)
  * mono: remove duplicated EinaFreeCb delegate
  * mono: blacklist efl_ui_text_context_menu_item_add
  * Revert "elm/genlist: don't process entire item queue on each item add"
  * tests/spec: allow for a longer timeout of the spec suite for dist build
  * travis/ci: update Fedora CI images to 31
  * ci: work around ccache segafult during setup
  * travis: update Ubuntu image to the 19.10 release
  * docs: Efl.Gfx.View
  * check: reset flags that used for legacy 'changed' cb
  * elementary: fix end of fast scroll not showing up during Efl.Ui.CollectionView scroll.
  * edje_calc: UNLIKELY changed to LIKELY.
  * elm_config: replace ecore_file_cp with ecore_file_mv
  * csharp:comma have whitespace after and none before
  * csharp: Removing a never used class. (T8417)
  * elementary: cleanup Eina_Future properly by relying on efl_future_then proper lifecycle.
  * elementary: properly handle in flight request in Efl.Ui.CollectionView.
  * elementary: watch event on the model Efl.Ui.CollectionView use directly.
  * ci: fix ccache segfault during setup on CI in release-ready build
  * evas_filter: remove shader compile error
  * Efl.Ui.Scroll_Manager: Fix indentation
  * eolian_mono: avoid keyword as a variable name
  * wl_egl : Prevent access to NULL pointer
  * eolian-cxx: Make events inherit beta info from klass.
  * Revert "elm/genlist: remove calc jobs"
  * Revert "tests/genlist: add behavior testing for nearly all genlist events"</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1582286400">- add full url to the source</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1586520000">- Drastically reduce the number of packages, the reality is
  these days most of the libs don't function without the others
  and everything we use needs all of them. Upstream is also heading
  in this direction.
- Drop avahi and elocation as upstream is phasing it out and we
  don't use them</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1588680000">- 1.24.0 Release
  * EO memory optimization improvements
  * Copy and Paste rework
  * Ecore_Wl2 work
  * Documentation work
  * Multiple other bugfixes
  * Removals
  * emotion &amp; evas: remove gstreamer 0.10 support (gstreamer 1.x support is stable)
  * escape: remove library from tree (no known reamaining user of EFL on PS3 OS)
  * ecore_x: remove support XGesture extension (deprecated, distros do no longer ship it)
  * elocation: remove beta library (never out of beta)
  * eeze: remove tizen module support from eeze sensor (unused, sensor API stays)
  * evas3d: remove support for evas 3D which was a beta all along (never out of beta)
  * Xine and vlc supportin emotion (gstreamer 1.x support is stable)</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1589457600">- 1.24.1 Release
  * edje - don't set font sizes less than 1
  * ecore_evas_x - fix maximize/unmaximize request corner case
  * ecore_evas: only define these eina errors once
  * exactness: remove no longer needed _evas_new()
  * exactness_player: do not test for delay_ms
  * evas + gl - fix callback-to-app-changes-state issue with pixel data</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1590494400">- 1.24.2
  * evas_vg_shape: return NULL in evas_vg_shape_add when the parent of shape is NULL
  * efl_ui_image: fix to call "clicked" smart callback when there is no img
  * ecore-x - ensure we fully look at all xkb events and refresh all binds
  * evas_vg_container: return NULL in evas_vg_container_add when the parent of container is NULL
  * build: ensure we set ENABLE_LUA_OLD when using a lua interpreter</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1596628800">- 1.24.3
  * evas - csd and wl csd - fix alpha zeroing to avoid framespace junk
  * evas - genetic update regions smart merge - merge v adjacent regions
  * efreet - handle runtime relocation right with default XDG_DATA_DIRS
  * edje: fix animation memory leak.
  * canvas vg: fix dangling vector containers.
  * evas vg: clean up dangling instances
  * canvas vg: fix vector file data memory leak.
  * efl gfx_path: fix memory leak.
  * efl_ui_image: fixed elm_image_preload_disabled_set api is not working when it is called before file set</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1598875200">- Disable NEON on armv6/7:
  * efl-no-neon.patch</changelog>
  <changelog author="Tomas Cech &lt;sleep_walker@opensuse.org&gt;" date="1599134400">- split out ecore_imf-module-scim to reduce dependencies of base efl package</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1603108800">- 1.25.1
  * This time around we do not have bigger changes to cover here. For the full list please look at the NEWS file, if you are interested in the details. As usual we have been working on fixing bugs, optimising our code for speed and memory footprint and adding new features.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1625659200">- Fix typo in description</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1641384000">- Drop unkown meson paramter -Demotion-loaders-disabler. Meson
  prior to 0.60 ignored it, recent meson version fails.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1644321600">- Update to 1.26.2:
  * Fix crash when doing wierd combinations of eet_write and eet_read
  * Fix elementary tests to pass
  * Fix portability of putenv/setenv for niche OS's
  * Fix ecore input to build on BSD
  * Fix svg decoding crashes for vector decode
  * Fix theme - ibar label overlay
  * Fix theme - pointer scaling and sizing
  * Fix ecore x - ensure pointer on screen when setting bounds
  * elm theme - win - fix mystery off-by-1 resize of content
  * elm theme - fix mis-named colorclass for inwin bg
  * edje entry - fix past to use shft+ins for paste and no ctl
  * edje entry - complete key handling for cut (shft+del)
  * elm theme - fix placement of procstats and volume so they dont fight
  * Evas GL dithers by default for better quality (but it's a bit slower)
  * Evas HEIF format loaded (need to remove from disabled set)
  * Default theme is now the flat theme
  * New color palette files and API
  * Improved speed of Entry appending
  * Improved performance by not rendering invisible windows</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1645099200">- Upstream theme is now called Flat rather then dark. Dark will
  reappear soon in a new package.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1645099201">- Upstream theme is now called Flat rather then dark. Dark will
  reappear soon in a new package.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1645704000">- Themes are going to recommend there icon themes as well</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1646222400">- Drop python-devel BuildRequires: not needed.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1664193600">- Update to 1.26.3 Bugfix release
  * Fix theme issues
  * Fix edje calc internal return values in some cases
  * Fix ecore-x netwm moveresize request handling
  * Fix ecore-x xkb handling to not leak
  * Fix new xkb event handling
  * Fix evas smart object to null out fields for safety
  * Fix elm null cnp object handling to not crash in odd cases
  * Fix ecore evas x11 dnd handling to not null out xdnd props
  * Fix data checkme file so relocation at runtime works again
  * Fix eina bt output to always have spaces between fields
  * Fix png loader on arm to not have rgb values when a is 0
  * Fix textgrid to guard against null glyphs
  * Fix ecore-x vblank to use current time not vlbank time
  * Fix emile to handle invalid compress types more gracefully
  * Fix compile warnings
  * Fix evas psd loader crash
  * Fix osx sample compile conf script options
  * Fix wl vsync timer to use current time not vblank time
  * Work around xwayland issue where synthetic events are not sent</changelog>
</package>
<package pkgid="fb45df5017b1b5d61385fec62cb5f619867001a8e849620a4fa6f006eeef7228" name="enlightenment-x-Flat-icon-theme" arch="aarch64">
  <version epoch="0" ver="0.21.0" rel="bp154.4.3.20"/>
  <changelog author="Simon Lees &lt;simonf.lees@suse.com&gt;" date="1573214400">- 1.23 Release
  * Again, the primary focus of this release has been stabilizing
    the EO library as well as an extending the set of unified API
    which is based on it. From this release onwards we also switched
    to meson as our only build system (RIP autotools, you served us
    well for a long time). The 2110 commits contain more changes to
    possible list here, but you will find improved DRM support, a new
    widget for controlling vector animations, a first step towards
    MVVM support, general bugfixes and more.
    Please see the NEWS file for more details.
  * spec file cleanup</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1579694400">- Use luajit only if available</changelog>
  <changelog author="Tomas Cech &lt;sleep_walker@opensuse.org&gt;" date="1580472000">- 1.23.3 Release
  Fixes:
  * elementary: handle case when XFIXES is not available. (T8321)
  * ecore: remove unecessary field in data structure.
  * eina: only the type need to be NULL to assume EINA_VALUE_EMPTY.
  * tests/eina: use #ifdef guard for block which can only occur inside ifdef (CID1400948)
  * mono: remove duplicated EinaFreeCb delegate
  * mono: blacklist efl_ui_text_context_menu_item_add
  * Revert "elm/genlist: don't process entire item queue on each item add"
  * tests/spec: allow for a longer timeout of the spec suite for dist build
  * travis/ci: update Fedora CI images to 31
  * ci: work around ccache segafult during setup
  * travis: update Ubuntu image to the 19.10 release
  * docs: Efl.Gfx.View
  * check: reset flags that used for legacy 'changed' cb
  * elementary: fix end of fast scroll not showing up during Efl.Ui.CollectionView scroll.
  * edje_calc: UNLIKELY changed to LIKELY.
  * elm_config: replace ecore_file_cp with ecore_file_mv
  * csharp:comma have whitespace after and none before
  * csharp: Removing a never used class. (T8417)
  * elementary: cleanup Eina_Future properly by relying on efl_future_then proper lifecycle.
  * elementary: properly handle in flight request in Efl.Ui.CollectionView.
  * elementary: watch event on the model Efl.Ui.CollectionView use directly.
  * ci: fix ccache segfault during setup on CI in release-ready build
  * evas_filter: remove shader compile error
  * Efl.Ui.Scroll_Manager: Fix indentation
  * eolian_mono: avoid keyword as a variable name
  * wl_egl : Prevent access to NULL pointer
  * eolian-cxx: Make events inherit beta info from klass.
  * Revert "elm/genlist: remove calc jobs"
  * Revert "tests/genlist: add behavior testing for nearly all genlist events"</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1582286400">- add full url to the source</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1586520000">- Drastically reduce the number of packages, the reality is
  these days most of the libs don't function without the others
  and everything we use needs all of them. Upstream is also heading
  in this direction.
- Drop avahi and elocation as upstream is phasing it out and we
  don't use them</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1588680000">- 1.24.0 Release
  * EO memory optimization improvements
  * Copy and Paste rework
  * Ecore_Wl2 work
  * Documentation work
  * Multiple other bugfixes
  * Removals
  * emotion &amp; evas: remove gstreamer 0.10 support (gstreamer 1.x support is stable)
  * escape: remove library from tree (no known reamaining user of EFL on PS3 OS)
  * ecore_x: remove support XGesture extension (deprecated, distros do no longer ship it)
  * elocation: remove beta library (never out of beta)
  * eeze: remove tizen module support from eeze sensor (unused, sensor API stays)
  * evas3d: remove support for evas 3D which was a beta all along (never out of beta)
  * Xine and vlc supportin emotion (gstreamer 1.x support is stable)</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1589457600">- 1.24.1 Release
  * edje - don't set font sizes less than 1
  * ecore_evas_x - fix maximize/unmaximize request corner case
  * ecore_evas: only define these eina errors once
  * exactness: remove no longer needed _evas_new()
  * exactness_player: do not test for delay_ms
  * evas + gl - fix callback-to-app-changes-state issue with pixel data</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1590494400">- 1.24.2
  * evas_vg_shape: return NULL in evas_vg_shape_add when the parent of shape is NULL
  * efl_ui_image: fix to call "clicked" smart callback when there is no img
  * ecore-x - ensure we fully look at all xkb events and refresh all binds
  * evas_vg_container: return NULL in evas_vg_container_add when the parent of container is NULL
  * build: ensure we set ENABLE_LUA_OLD when using a lua interpreter</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1596628800">- 1.24.3
  * evas - csd and wl csd - fix alpha zeroing to avoid framespace junk
  * evas - genetic update regions smart merge - merge v adjacent regions
  * efreet - handle runtime relocation right with default XDG_DATA_DIRS
  * edje: fix animation memory leak.
  * canvas vg: fix dangling vector containers.
  * evas vg: clean up dangling instances
  * canvas vg: fix vector file data memory leak.
  * efl gfx_path: fix memory leak.
  * efl_ui_image: fixed elm_image_preload_disabled_set api is not working when it is called before file set</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1598875200">- Disable NEON on armv6/7:
  * efl-no-neon.patch</changelog>
  <changelog author="Tomas Cech &lt;sleep_walker@opensuse.org&gt;" date="1599134400">- split out ecore_imf-module-scim to reduce dependencies of base efl package</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1603108800">- 1.25.1
  * This time around we do not have bigger changes to cover here. For the full list please look at the NEWS file, if you are interested in the details. As usual we have been working on fixing bugs, optimising our code for speed and memory footprint and adding new features.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1625659200">- Fix typo in description</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1641384000">- Drop unkown meson paramter -Demotion-loaders-disabler. Meson
  prior to 0.60 ignored it, recent meson version fails.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1644321600">- Update to 1.26.2:
  * Fix crash when doing wierd combinations of eet_write and eet_read
  * Fix elementary tests to pass
  * Fix portability of putenv/setenv for niche OS's
  * Fix ecore input to build on BSD
  * Fix svg decoding crashes for vector decode
  * Fix theme - ibar label overlay
  * Fix theme - pointer scaling and sizing
  * Fix ecore x - ensure pointer on screen when setting bounds
  * elm theme - win - fix mystery off-by-1 resize of content
  * elm theme - fix mis-named colorclass for inwin bg
  * edje entry - fix past to use shft+ins for paste and no ctl
  * edje entry - complete key handling for cut (shft+del)
  * elm theme - fix placement of procstats and volume so they dont fight
  * Evas GL dithers by default for better quality (but it's a bit slower)
  * Evas HEIF format loaded (need to remove from disabled set)
  * Default theme is now the flat theme
  * New color palette files and API
  * Improved speed of Entry appending
  * Improved performance by not rendering invisible windows</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1645099200">- Upstream theme is now called Flat rather then dark. Dark will
  reappear soon in a new package.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1645099201">- Upstream theme is now called Flat rather then dark. Dark will
  reappear soon in a new package.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1645704000">- Themes are going to recommend there icon themes as well</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1646222400">- Drop python-devel BuildRequires: not needed.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1664193600">- Update to 1.26.3 Bugfix release
  * Fix theme issues
  * Fix edje calc internal return values in some cases
  * Fix ecore-x netwm moveresize request handling
  * Fix ecore-x xkb handling to not leak
  * Fix new xkb event handling
  * Fix evas smart object to null out fields for safety
  * Fix elm null cnp object handling to not crash in odd cases
  * Fix ecore evas x11 dnd handling to not null out xdnd props
  * Fix data checkme file so relocation at runtime works again
  * Fix eina bt output to always have spaces between fields
  * Fix png loader on arm to not have rgb values when a is 0
  * Fix textgrid to guard against null glyphs
  * Fix ecore-x vblank to use current time not vlbank time
  * Fix emile to handle invalid compress types more gracefully
  * Fix compile warnings
  * Fix evas psd loader crash
  * Fix osx sample compile conf script options
  * Fix wl vsync timer to use current time not vblank time
  * Work around xwayland issue where synthetic events are not sent</changelog>
</package>
<package pkgid="ecfd171252cf1f0d6c59741ed49da933aadf91143480b4cd08661fe123c8057e" name="enlightenment-x-Flat-icon-theme" arch="s390x">
  <version epoch="0" ver="0.21.0" rel="bp154.4.3.20"/>
  <changelog author="Simon Lees &lt;simonf.lees@suse.com&gt;" date="1573214400">- 1.23 Release
  * Again, the primary focus of this release has been stabilizing
    the EO library as well as an extending the set of unified API
    which is based on it. From this release onwards we also switched
    to meson as our only build system (RIP autotools, you served us
    well for a long time). The 2110 commits contain more changes to
    possible list here, but you will find improved DRM support, a new
    widget for controlling vector animations, a first step towards
    MVVM support, general bugfixes and more.
    Please see the NEWS file for more details.
  * spec file cleanup</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1579694400">- Use luajit only if available</changelog>
  <changelog author="Tomas Cech &lt;sleep_walker@opensuse.org&gt;" date="1580472000">- 1.23.3 Release
  Fixes:
  * elementary: handle case when XFIXES is not available. (T8321)
  * ecore: remove unecessary field in data structure.
  * eina: only the type need to be NULL to assume EINA_VALUE_EMPTY.
  * tests/eina: use #ifdef guard for block which can only occur inside ifdef (CID1400948)
  * mono: remove duplicated EinaFreeCb delegate
  * mono: blacklist efl_ui_text_context_menu_item_add
  * Revert "elm/genlist: don't process entire item queue on each item add"
  * tests/spec: allow for a longer timeout of the spec suite for dist build
  * travis/ci: update Fedora CI images to 31
  * ci: work around ccache segafult during setup
  * travis: update Ubuntu image to the 19.10 release
  * docs: Efl.Gfx.View
  * check: reset flags that used for legacy 'changed' cb
  * elementary: fix end of fast scroll not showing up during Efl.Ui.CollectionView scroll.
  * edje_calc: UNLIKELY changed to LIKELY.
  * elm_config: replace ecore_file_cp with ecore_file_mv
  * csharp:comma have whitespace after and none before
  * csharp: Removing a never used class. (T8417)
  * elementary: cleanup Eina_Future properly by relying on efl_future_then proper lifecycle.
  * elementary: properly handle in flight request in Efl.Ui.CollectionView.
  * elementary: watch event on the model Efl.Ui.CollectionView use directly.
  * ci: fix ccache segfault during setup on CI in release-ready build
  * evas_filter: remove shader compile error
  * Efl.Ui.Scroll_Manager: Fix indentation
  * eolian_mono: avoid keyword as a variable name
  * wl_egl : Prevent access to NULL pointer
  * eolian-cxx: Make events inherit beta info from klass.
  * Revert "elm/genlist: remove calc jobs"
  * Revert "tests/genlist: add behavior testing for nearly all genlist events"</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1582286400">- add full url to the source</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1586520000">- Drastically reduce the number of packages, the reality is
  these days most of the libs don't function without the others
  and everything we use needs all of them. Upstream is also heading
  in this direction.
- Drop avahi and elocation as upstream is phasing it out and we
  don't use them</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1588680000">- 1.24.0 Release
  * EO memory optimization improvements
  * Copy and Paste rework
  * Ecore_Wl2 work
  * Documentation work
  * Multiple other bugfixes
  * Removals
  * emotion &amp; evas: remove gstreamer 0.10 support (gstreamer 1.x support is stable)
  * escape: remove library from tree (no known reamaining user of EFL on PS3 OS)
  * ecore_x: remove support XGesture extension (deprecated, distros do no longer ship it)
  * elocation: remove beta library (never out of beta)
  * eeze: remove tizen module support from eeze sensor (unused, sensor API stays)
  * evas3d: remove support for evas 3D which was a beta all along (never out of beta)
  * Xine and vlc supportin emotion (gstreamer 1.x support is stable)</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1589457600">- 1.24.1 Release
  * edje - don't set font sizes less than 1
  * ecore_evas_x - fix maximize/unmaximize request corner case
  * ecore_evas: only define these eina errors once
  * exactness: remove no longer needed _evas_new()
  * exactness_player: do not test for delay_ms
  * evas + gl - fix callback-to-app-changes-state issue with pixel data</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1590494400">- 1.24.2
  * evas_vg_shape: return NULL in evas_vg_shape_add when the parent of shape is NULL
  * efl_ui_image: fix to call "clicked" smart callback when there is no img
  * ecore-x - ensure we fully look at all xkb events and refresh all binds
  * evas_vg_container: return NULL in evas_vg_container_add when the parent of container is NULL
  * build: ensure we set ENABLE_LUA_OLD when using a lua interpreter</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1596628800">- 1.24.3
  * evas - csd and wl csd - fix alpha zeroing to avoid framespace junk
  * evas - genetic update regions smart merge - merge v adjacent regions
  * efreet - handle runtime relocation right with default XDG_DATA_DIRS
  * edje: fix animation memory leak.
  * canvas vg: fix dangling vector containers.
  * evas vg: clean up dangling instances
  * canvas vg: fix vector file data memory leak.
  * efl gfx_path: fix memory leak.
  * efl_ui_image: fixed elm_image_preload_disabled_set api is not working when it is called before file set</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1598875200">- Disable NEON on armv6/7:
  * efl-no-neon.patch</changelog>
  <changelog author="Tomas Cech &lt;sleep_walker@opensuse.org&gt;" date="1599134400">- split out ecore_imf-module-scim to reduce dependencies of base efl package</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1603108800">- 1.25.1
  * This time around we do not have bigger changes to cover here. For the full list please look at the NEWS file, if you are interested in the details. As usual we have been working on fixing bugs, optimising our code for speed and memory footprint and adding new features.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1625659200">- Fix typo in description</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1641384000">- Drop unkown meson paramter -Demotion-loaders-disabler. Meson
  prior to 0.60 ignored it, recent meson version fails.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1644321600">- Update to 1.26.2:
  * Fix crash when doing wierd combinations of eet_write and eet_read
  * Fix elementary tests to pass
  * Fix portability of putenv/setenv for niche OS's
  * Fix ecore input to build on BSD
  * Fix svg decoding crashes for vector decode
  * Fix theme - ibar label overlay
  * Fix theme - pointer scaling and sizing
  * Fix ecore x - ensure pointer on screen when setting bounds
  * elm theme - win - fix mystery off-by-1 resize of content
  * elm theme - fix mis-named colorclass for inwin bg
  * edje entry - fix past to use shft+ins for paste and no ctl
  * edje entry - complete key handling for cut (shft+del)
  * elm theme - fix placement of procstats and volume so they dont fight
  * Evas GL dithers by default for better quality (but it's a bit slower)
  * Evas HEIF format loaded (need to remove from disabled set)
  * Default theme is now the flat theme
  * New color palette files and API
  * Improved speed of Entry appending
  * Improved performance by not rendering invisible windows</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1645099200">- Upstream theme is now called Flat rather then dark. Dark will
  reappear soon in a new package.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1645099201">- Upstream theme is now called Flat rather then dark. Dark will
  reappear soon in a new package.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1645704000">- Themes are going to recommend there icon themes as well</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1646222400">- Drop python-devel BuildRequires: not needed.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1664193600">- Update to 1.26.3 Bugfix release
  * Fix theme issues
  * Fix edje calc internal return values in some cases
  * Fix ecore-x netwm moveresize request handling
  * Fix ecore-x xkb handling to not leak
  * Fix new xkb event handling
  * Fix evas smart object to null out fields for safety
  * Fix elm null cnp object handling to not crash in odd cases
  * Fix ecore evas x11 dnd handling to not null out xdnd props
  * Fix data checkme file so relocation at runtime works again
  * Fix eina bt output to always have spaces between fields
  * Fix png loader on arm to not have rgb values when a is 0
  * Fix textgrid to guard against null glyphs
  * Fix ecore-x vblank to use current time not vlbank time
  * Fix emile to handle invalid compress types more gracefully
  * Fix compile warnings
  * Fix evas psd loader crash
  * Fix osx sample compile conf script options
  * Fix wl vsync timer to use current time not vblank time
  * Work around xwayland issue where synthetic events are not sent</changelog>
</package>
<package pkgid="38403e3806d9d2cd0ee932751d5a459dbab6dcfbc3d657143c933f58ae01ef15" name="enlightenment-x-Flat-icon-theme" arch="x86_64">
  <version epoch="0" ver="0.21.0" rel="bp154.4.3.20"/>
  <changelog author="Simon Lees &lt;simonf.lees@suse.com&gt;" date="1573214400">- 1.23 Release
  * Again, the primary focus of this release has been stabilizing
    the EO library as well as an extending the set of unified API
    which is based on it. From this release onwards we also switched
    to meson as our only build system (RIP autotools, you served us
    well for a long time). The 2110 commits contain more changes to
    possible list here, but you will find improved DRM support, a new
    widget for controlling vector animations, a first step towards
    MVVM support, general bugfixes and more.
    Please see the NEWS file for more details.
  * spec file cleanup</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1579694400">- Use luajit only if available</changelog>
  <changelog author="Tomas Cech &lt;sleep_walker@opensuse.org&gt;" date="1580472000">- 1.23.3 Release
  Fixes:
  * elementary: handle case when XFIXES is not available. (T8321)
  * ecore: remove unecessary field in data structure.
  * eina: only the type need to be NULL to assume EINA_VALUE_EMPTY.
  * tests/eina: use #ifdef guard for block which can only occur inside ifdef (CID1400948)
  * mono: remove duplicated EinaFreeCb delegate
  * mono: blacklist efl_ui_text_context_menu_item_add
  * Revert "elm/genlist: don't process entire item queue on each item add"
  * tests/spec: allow for a longer timeout of the spec suite for dist build
  * travis/ci: update Fedora CI images to 31
  * ci: work around ccache segafult during setup
  * travis: update Ubuntu image to the 19.10 release
  * docs: Efl.Gfx.View
  * check: reset flags that used for legacy 'changed' cb
  * elementary: fix end of fast scroll not showing up during Efl.Ui.CollectionView scroll.
  * edje_calc: UNLIKELY changed to LIKELY.
  * elm_config: replace ecore_file_cp with ecore_file_mv
  * csharp:comma have whitespace after and none before
  * csharp: Removing a never used class. (T8417)
  * elementary: cleanup Eina_Future properly by relying on efl_future_then proper lifecycle.
  * elementary: properly handle in flight request in Efl.Ui.CollectionView.
  * elementary: watch event on the model Efl.Ui.CollectionView use directly.
  * ci: fix ccache segfault during setup on CI in release-ready build
  * evas_filter: remove shader compile error
  * Efl.Ui.Scroll_Manager: Fix indentation
  * eolian_mono: avoid keyword as a variable name
  * wl_egl : Prevent access to NULL pointer
  * eolian-cxx: Make events inherit beta info from klass.
  * Revert "elm/genlist: remove calc jobs"
  * Revert "tests/genlist: add behavior testing for nearly all genlist events"</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1582286400">- add full url to the source</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1586520000">- Drastically reduce the number of packages, the reality is
  these days most of the libs don't function without the others
  and everything we use needs all of them. Upstream is also heading
  in this direction.
- Drop avahi and elocation as upstream is phasing it out and we
  don't use them</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1588680000">- 1.24.0 Release
  * EO memory optimization improvements
  * Copy and Paste rework
  * Ecore_Wl2 work
  * Documentation work
  * Multiple other bugfixes
  * Removals
  * emotion &amp; evas: remove gstreamer 0.10 support (gstreamer 1.x support is stable)
  * escape: remove library from tree (no known reamaining user of EFL on PS3 OS)
  * ecore_x: remove support XGesture extension (deprecated, distros do no longer ship it)
  * elocation: remove beta library (never out of beta)
  * eeze: remove tizen module support from eeze sensor (unused, sensor API stays)
  * evas3d: remove support for evas 3D which was a beta all along (never out of beta)
  * Xine and vlc supportin emotion (gstreamer 1.x support is stable)</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1589457600">- 1.24.1 Release
  * edje - don't set font sizes less than 1
  * ecore_evas_x - fix maximize/unmaximize request corner case
  * ecore_evas: only define these eina errors once
  * exactness: remove no longer needed _evas_new()
  * exactness_player: do not test for delay_ms
  * evas + gl - fix callback-to-app-changes-state issue with pixel data</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1590494400">- 1.24.2
  * evas_vg_shape: return NULL in evas_vg_shape_add when the parent of shape is NULL
  * efl_ui_image: fix to call "clicked" smart callback when there is no img
  * ecore-x - ensure we fully look at all xkb events and refresh all binds
  * evas_vg_container: return NULL in evas_vg_container_add when the parent of container is NULL
  * build: ensure we set ENABLE_LUA_OLD when using a lua interpreter</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1596628800">- 1.24.3
  * evas - csd and wl csd - fix alpha zeroing to avoid framespace junk
  * evas - genetic update regions smart merge - merge v adjacent regions
  * efreet - handle runtime relocation right with default XDG_DATA_DIRS
  * edje: fix animation memory leak.
  * canvas vg: fix dangling vector containers.
  * evas vg: clean up dangling instances
  * canvas vg: fix vector file data memory leak.
  * efl gfx_path: fix memory leak.
  * efl_ui_image: fixed elm_image_preload_disabled_set api is not working when it is called before file set</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1598875200">- Disable NEON on armv6/7:
  * efl-no-neon.patch</changelog>
  <changelog author="Tomas Cech &lt;sleep_walker@opensuse.org&gt;" date="1599134400">- split out ecore_imf-module-scim to reduce dependencies of base efl package</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1603108800">- 1.25.1
  * This time around we do not have bigger changes to cover here. For the full list please look at the NEWS file, if you are interested in the details. As usual we have been working on fixing bugs, optimising our code for speed and memory footprint and adding new features.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1625659200">- Fix typo in description</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1641384000">- Drop unkown meson paramter -Demotion-loaders-disabler. Meson
  prior to 0.60 ignored it, recent meson version fails.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1644321600">- Update to 1.26.2:
  * Fix crash when doing wierd combinations of eet_write and eet_read
  * Fix elementary tests to pass
  * Fix portability of putenv/setenv for niche OS's
  * Fix ecore input to build on BSD
  * Fix svg decoding crashes for vector decode
  * Fix theme - ibar label overlay
  * Fix theme - pointer scaling and sizing
  * Fix ecore x - ensure pointer on screen when setting bounds
  * elm theme - win - fix mystery off-by-1 resize of content
  * elm theme - fix mis-named colorclass for inwin bg
  * edje entry - fix past to use shft+ins for paste and no ctl
  * edje entry - complete key handling for cut (shft+del)
  * elm theme - fix placement of procstats and volume so they dont fight
  * Evas GL dithers by default for better quality (but it's a bit slower)
  * Evas HEIF format loaded (need to remove from disabled set)
  * Default theme is now the flat theme
  * New color palette files and API
  * Improved speed of Entry appending
  * Improved performance by not rendering invisible windows</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1645099200">- Upstream theme is now called Flat rather then dark. Dark will
  reappear soon in a new package.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1645099201">- Upstream theme is now called Flat rather then dark. Dark will
  reappear soon in a new package.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1645704000">- Themes are going to recommend there icon themes as well</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1646222400">- Drop python-devel BuildRequires: not needed.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1664193600">- Update to 1.26.3 Bugfix release
  * Fix theme issues
  * Fix edje calc internal return values in some cases
  * Fix ecore-x netwm moveresize request handling
  * Fix ecore-x xkb handling to not leak
  * Fix new xkb event handling
  * Fix evas smart object to null out fields for safety
  * Fix elm null cnp object handling to not crash in odd cases
  * Fix ecore evas x11 dnd handling to not null out xdnd props
  * Fix data checkme file so relocation at runtime works again
  * Fix eina bt output to always have spaces between fields
  * Fix png loader on arm to not have rgb values when a is 0
  * Fix textgrid to guard against null glyphs
  * Fix ecore-x vblank to use current time not vlbank time
  * Fix emile to handle invalid compress types more gracefully
  * Fix compile warnings
  * Fix evas psd loader crash
  * Fix osx sample compile conf script options
  * Fix wl vsync timer to use current time not vblank time
  * Work around xwayland issue where synthetic events are not sent</changelog>
</package>
<package pkgid="ac8b53ed9bf0a350fe84e4a1bed4822d9b080131a8a55a2dfa7267736b1bce32" name="evas-generic-loaders" arch="aarch64">
  <version epoch="0" ver="1.26.3" rel="bp154.4.3.20"/>
  <changelog author="Simon Lees &lt;simonf.lees@suse.com&gt;" date="1573214400">- 1.23 Release
  * Again, the primary focus of this release has been stabilizing
    the EO library as well as an extending the set of unified API
    which is based on it. From this release onwards we also switched
    to meson as our only build system (RIP autotools, you served us
    well for a long time). The 2110 commits contain more changes to
    possible list here, but you will find improved DRM support, a new
    widget for controlling vector animations, a first step towards
    MVVM support, general bugfixes and more.
    Please see the NEWS file for more details.
  * spec file cleanup</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1579694400">- Use luajit only if available</changelog>
  <changelog author="Tomas Cech &lt;sleep_walker@opensuse.org&gt;" date="1580472000">- 1.23.3 Release
  Fixes:
  * elementary: handle case when XFIXES is not available. (T8321)
  * ecore: remove unecessary field in data structure.
  * eina: only the type need to be NULL to assume EINA_VALUE_EMPTY.
  * tests/eina: use #ifdef guard for block which can only occur inside ifdef (CID1400948)
  * mono: remove duplicated EinaFreeCb delegate
  * mono: blacklist efl_ui_text_context_menu_item_add
  * Revert "elm/genlist: don't process entire item queue on each item add"
  * tests/spec: allow for a longer timeout of the spec suite for dist build
  * travis/ci: update Fedora CI images to 31
  * ci: work around ccache segafult during setup
  * travis: update Ubuntu image to the 19.10 release
  * docs: Efl.Gfx.View
  * check: reset flags that used for legacy 'changed' cb
  * elementary: fix end of fast scroll not showing up during Efl.Ui.CollectionView scroll.
  * edje_calc: UNLIKELY changed to LIKELY.
  * elm_config: replace ecore_file_cp with ecore_file_mv
  * csharp:comma have whitespace after and none before
  * csharp: Removing a never used class. (T8417)
  * elementary: cleanup Eina_Future properly by relying on efl_future_then proper lifecycle.
  * elementary: properly handle in flight request in Efl.Ui.CollectionView.
  * elementary: watch event on the model Efl.Ui.CollectionView use directly.
  * ci: fix ccache segfault during setup on CI in release-ready build
  * evas_filter: remove shader compile error
  * Efl.Ui.Scroll_Manager: Fix indentation
  * eolian_mono: avoid keyword as a variable name
  * wl_egl : Prevent access to NULL pointer
  * eolian-cxx: Make events inherit beta info from klass.
  * Revert "elm/genlist: remove calc jobs"
  * Revert "tests/genlist: add behavior testing for nearly all genlist events"</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1582286400">- add full url to the source</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1586520000">- Drastically reduce the number of packages, the reality is
  these days most of the libs don't function without the others
  and everything we use needs all of them. Upstream is also heading
  in this direction.
- Drop avahi and elocation as upstream is phasing it out and we
  don't use them</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1588680000">- 1.24.0 Release
  * EO memory optimization improvements
  * Copy and Paste rework
  * Ecore_Wl2 work
  * Documentation work
  * Multiple other bugfixes
  * Removals
  * emotion &amp; evas: remove gstreamer 0.10 support (gstreamer 1.x support is stable)
  * escape: remove library from tree (no known reamaining user of EFL on PS3 OS)
  * ecore_x: remove support XGesture extension (deprecated, distros do no longer ship it)
  * elocation: remove beta library (never out of beta)
  * eeze: remove tizen module support from eeze sensor (unused, sensor API stays)
  * evas3d: remove support for evas 3D which was a beta all along (never out of beta)
  * Xine and vlc supportin emotion (gstreamer 1.x support is stable)</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1589457600">- 1.24.1 Release
  * edje - don't set font sizes less than 1
  * ecore_evas_x - fix maximize/unmaximize request corner case
  * ecore_evas: only define these eina errors once
  * exactness: remove no longer needed _evas_new()
  * exactness_player: do not test for delay_ms
  * evas + gl - fix callback-to-app-changes-state issue with pixel data</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1590494400">- 1.24.2
  * evas_vg_shape: return NULL in evas_vg_shape_add when the parent of shape is NULL
  * efl_ui_image: fix to call "clicked" smart callback when there is no img
  * ecore-x - ensure we fully look at all xkb events and refresh all binds
  * evas_vg_container: return NULL in evas_vg_container_add when the parent of container is NULL
  * build: ensure we set ENABLE_LUA_OLD when using a lua interpreter</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1596628800">- 1.24.3
  * evas - csd and wl csd - fix alpha zeroing to avoid framespace junk
  * evas - genetic update regions smart merge - merge v adjacent regions
  * efreet - handle runtime relocation right with default XDG_DATA_DIRS
  * edje: fix animation memory leak.
  * canvas vg: fix dangling vector containers.
  * evas vg: clean up dangling instances
  * canvas vg: fix vector file data memory leak.
  * efl gfx_path: fix memory leak.
  * efl_ui_image: fixed elm_image_preload_disabled_set api is not working when it is called before file set</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1598875200">- Disable NEON on armv6/7:
  * efl-no-neon.patch</changelog>
  <changelog author="Tomas Cech &lt;sleep_walker@opensuse.org&gt;" date="1599134400">- split out ecore_imf-module-scim to reduce dependencies of base efl package</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1603108800">- 1.25.1
  * This time around we do not have bigger changes to cover here. For the full list please look at the NEWS file, if you are interested in the details. As usual we have been working on fixing bugs, optimising our code for speed and memory footprint and adding new features.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1625659200">- Fix typo in description</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1641384000">- Drop unkown meson paramter -Demotion-loaders-disabler. Meson
  prior to 0.60 ignored it, recent meson version fails.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1644321600">- Update to 1.26.2:
  * Fix crash when doing wierd combinations of eet_write and eet_read
  * Fix elementary tests to pass
  * Fix portability of putenv/setenv for niche OS's
  * Fix ecore input to build on BSD
  * Fix svg decoding crashes for vector decode
  * Fix theme - ibar label overlay
  * Fix theme - pointer scaling and sizing
  * Fix ecore x - ensure pointer on screen when setting bounds
  * elm theme - win - fix mystery off-by-1 resize of content
  * elm theme - fix mis-named colorclass for inwin bg
  * edje entry - fix past to use shft+ins for paste and no ctl
  * edje entry - complete key handling for cut (shft+del)
  * elm theme - fix placement of procstats and volume so they dont fight
  * Evas GL dithers by default for better quality (but it's a bit slower)
  * Evas HEIF format loaded (need to remove from disabled set)
  * Default theme is now the flat theme
  * New color palette files and API
  * Improved speed of Entry appending
  * Improved performance by not rendering invisible windows</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1645099200">- Upstream theme is now called Flat rather then dark. Dark will
  reappear soon in a new package.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1645099201">- Upstream theme is now called Flat rather then dark. Dark will
  reappear soon in a new package.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1645704000">- Themes are going to recommend there icon themes as well</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1646222400">- Drop python-devel BuildRequires: not needed.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1664193600">- Update to 1.26.3 Bugfix release
  * Fix theme issues
  * Fix edje calc internal return values in some cases
  * Fix ecore-x netwm moveresize request handling
  * Fix ecore-x xkb handling to not leak
  * Fix new xkb event handling
  * Fix evas smart object to null out fields for safety
  * Fix elm null cnp object handling to not crash in odd cases
  * Fix ecore evas x11 dnd handling to not null out xdnd props
  * Fix data checkme file so relocation at runtime works again
  * Fix eina bt output to always have spaces between fields
  * Fix png loader on arm to not have rgb values when a is 0
  * Fix textgrid to guard against null glyphs
  * Fix ecore-x vblank to use current time not vlbank time
  * Fix emile to handle invalid compress types more gracefully
  * Fix compile warnings
  * Fix evas psd loader crash
  * Fix osx sample compile conf script options
  * Fix wl vsync timer to use current time not vblank time
  * Work around xwayland issue where synthetic events are not sent</changelog>
</package>
<package pkgid="e755550cdd19100eaf18143491a9a4bd3001eb18fa55718569363395d81af296" name="evas-generic-loaders" arch="s390x">
  <version epoch="0" ver="1.26.3" rel="bp154.4.3.20"/>
  <changelog author="Simon Lees &lt;simonf.lees@suse.com&gt;" date="1573214400">- 1.23 Release
  * Again, the primary focus of this release has been stabilizing
    the EO library as well as an extending the set of unified API
    which is based on it. From this release onwards we also switched
    to meson as our only build system (RIP autotools, you served us
    well for a long time). The 2110 commits contain more changes to
    possible list here, but you will find improved DRM support, a new
    widget for controlling vector animations, a first step towards
    MVVM support, general bugfixes and more.
    Please see the NEWS file for more details.
  * spec file cleanup</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1579694400">- Use luajit only if available</changelog>
  <changelog author="Tomas Cech &lt;sleep_walker@opensuse.org&gt;" date="1580472000">- 1.23.3 Release
  Fixes:
  * elementary: handle case when XFIXES is not available. (T8321)
  * ecore: remove unecessary field in data structure.
  * eina: only the type need to be NULL to assume EINA_VALUE_EMPTY.
  * tests/eina: use #ifdef guard for block which can only occur inside ifdef (CID1400948)
  * mono: remove duplicated EinaFreeCb delegate
  * mono: blacklist efl_ui_text_context_menu_item_add
  * Revert "elm/genlist: don't process entire item queue on each item add"
  * tests/spec: allow for a longer timeout of the spec suite for dist build
  * travis/ci: update Fedora CI images to 31
  * ci: work around ccache segafult during setup
  * travis: update Ubuntu image to the 19.10 release
  * docs: Efl.Gfx.View
  * check: reset flags that used for legacy 'changed' cb
  * elementary: fix end of fast scroll not showing up during Efl.Ui.CollectionView scroll.
  * edje_calc: UNLIKELY changed to LIKELY.
  * elm_config: replace ecore_file_cp with ecore_file_mv
  * csharp:comma have whitespace after and none before
  * csharp: Removing a never used class. (T8417)
  * elementary: cleanup Eina_Future properly by relying on efl_future_then proper lifecycle.
  * elementary: properly handle in flight request in Efl.Ui.CollectionView.
  * elementary: watch event on the model Efl.Ui.CollectionView use directly.
  * ci: fix ccache segfault during setup on CI in release-ready build
  * evas_filter: remove shader compile error
  * Efl.Ui.Scroll_Manager: Fix indentation
  * eolian_mono: avoid keyword as a variable name
  * wl_egl : Prevent access to NULL pointer
  * eolian-cxx: Make events inherit beta info from klass.
  * Revert "elm/genlist: remove calc jobs"
  * Revert "tests/genlist: add behavior testing for nearly all genlist events"</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1582286400">- add full url to the source</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1586520000">- Drastically reduce the number of packages, the reality is
  these days most of the libs don't function without the others
  and everything we use needs all of them. Upstream is also heading
  in this direction.
- Drop avahi and elocation as upstream is phasing it out and we
  don't use them</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1588680000">- 1.24.0 Release
  * EO memory optimization improvements
  * Copy and Paste rework
  * Ecore_Wl2 work
  * Documentation work
  * Multiple other bugfixes
  * Removals
  * emotion &amp; evas: remove gstreamer 0.10 support (gstreamer 1.x support is stable)
  * escape: remove library from tree (no known reamaining user of EFL on PS3 OS)
  * ecore_x: remove support XGesture extension (deprecated, distros do no longer ship it)
  * elocation: remove beta library (never out of beta)
  * eeze: remove tizen module support from eeze sensor (unused, sensor API stays)
  * evas3d: remove support for evas 3D which was a beta all along (never out of beta)
  * Xine and vlc supportin emotion (gstreamer 1.x support is stable)</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1589457600">- 1.24.1 Release
  * edje - don't set font sizes less than 1
  * ecore_evas_x - fix maximize/unmaximize request corner case
  * ecore_evas: only define these eina errors once
  * exactness: remove no longer needed _evas_new()
  * exactness_player: do not test for delay_ms
  * evas + gl - fix callback-to-app-changes-state issue with pixel data</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1590494400">- 1.24.2
  * evas_vg_shape: return NULL in evas_vg_shape_add when the parent of shape is NULL
  * efl_ui_image: fix to call "clicked" smart callback when there is no img
  * ecore-x - ensure we fully look at all xkb events and refresh all binds
  * evas_vg_container: return NULL in evas_vg_container_add when the parent of container is NULL
  * build: ensure we set ENABLE_LUA_OLD when using a lua interpreter</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1596628800">- 1.24.3
  * evas - csd and wl csd - fix alpha zeroing to avoid framespace junk
  * evas - genetic update regions smart merge - merge v adjacent regions
  * efreet - handle runtime relocation right with default XDG_DATA_DIRS
  * edje: fix animation memory leak.
  * canvas vg: fix dangling vector containers.
  * evas vg: clean up dangling instances
  * canvas vg: fix vector file data memory leak.
  * efl gfx_path: fix memory leak.
  * efl_ui_image: fixed elm_image_preload_disabled_set api is not working when it is called before file set</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1598875200">- Disable NEON on armv6/7:
  * efl-no-neon.patch</changelog>
  <changelog author="Tomas Cech &lt;sleep_walker@opensuse.org&gt;" date="1599134400">- split out ecore_imf-module-scim to reduce dependencies of base efl package</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1603108800">- 1.25.1
  * This time around we do not have bigger changes to cover here. For the full list please look at the NEWS file, if you are interested in the details. As usual we have been working on fixing bugs, optimising our code for speed and memory footprint and adding new features.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1625659200">- Fix typo in description</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1641384000">- Drop unkown meson paramter -Demotion-loaders-disabler. Meson
  prior to 0.60 ignored it, recent meson version fails.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1644321600">- Update to 1.26.2:
  * Fix crash when doing wierd combinations of eet_write and eet_read
  * Fix elementary tests to pass
  * Fix portability of putenv/setenv for niche OS's
  * Fix ecore input to build on BSD
  * Fix svg decoding crashes for vector decode
  * Fix theme - ibar label overlay
  * Fix theme - pointer scaling and sizing
  * Fix ecore x - ensure pointer on screen when setting bounds
  * elm theme - win - fix mystery off-by-1 resize of content
  * elm theme - fix mis-named colorclass for inwin bg
  * edje entry - fix past to use shft+ins for paste and no ctl
  * edje entry - complete key handling for cut (shft+del)
  * elm theme - fix placement of procstats and volume so they dont fight
  * Evas GL dithers by default for better quality (but it's a bit slower)
  * Evas HEIF format loaded (need to remove from disabled set)
  * Default theme is now the flat theme
  * New color palette files and API
  * Improved speed of Entry appending
  * Improved performance by not rendering invisible windows</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1645099200">- Upstream theme is now called Flat rather then dark. Dark will
  reappear soon in a new package.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1645099201">- Upstream theme is now called Flat rather then dark. Dark will
  reappear soon in a new package.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1645704000">- Themes are going to recommend there icon themes as well</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1646222400">- Drop python-devel BuildRequires: not needed.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1664193600">- Update to 1.26.3 Bugfix release
  * Fix theme issues
  * Fix edje calc internal return values in some cases
  * Fix ecore-x netwm moveresize request handling
  * Fix ecore-x xkb handling to not leak
  * Fix new xkb event handling
  * Fix evas smart object to null out fields for safety
  * Fix elm null cnp object handling to not crash in odd cases
  * Fix ecore evas x11 dnd handling to not null out xdnd props
  * Fix data checkme file so relocation at runtime works again
  * Fix eina bt output to always have spaces between fields
  * Fix png loader on arm to not have rgb values when a is 0
  * Fix textgrid to guard against null glyphs
  * Fix ecore-x vblank to use current time not vlbank time
  * Fix emile to handle invalid compress types more gracefully
  * Fix compile warnings
  * Fix evas psd loader crash
  * Fix osx sample compile conf script options
  * Fix wl vsync timer to use current time not vblank time
  * Work around xwayland issue where synthetic events are not sent</changelog>
</package>
<package pkgid="21c524f4cce8c94a20243f063d5d6a27c7b0f24f6fe843cb31194a606e1f8252" name="evas-generic-loaders" arch="x86_64">
  <version epoch="0" ver="1.26.3" rel="bp154.4.3.20"/>
  <changelog author="Simon Lees &lt;simonf.lees@suse.com&gt;" date="1573214400">- 1.23 Release
  * Again, the primary focus of this release has been stabilizing
    the EO library as well as an extending the set of unified API
    which is based on it. From this release onwards we also switched
    to meson as our only build system (RIP autotools, you served us
    well for a long time). The 2110 commits contain more changes to
    possible list here, but you will find improved DRM support, a new
    widget for controlling vector animations, a first step towards
    MVVM support, general bugfixes and more.
    Please see the NEWS file for more details.
  * spec file cleanup</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1579694400">- Use luajit only if available</changelog>
  <changelog author="Tomas Cech &lt;sleep_walker@opensuse.org&gt;" date="1580472000">- 1.23.3 Release
  Fixes:
  * elementary: handle case when XFIXES is not available. (T8321)
  * ecore: remove unecessary field in data structure.
  * eina: only the type need to be NULL to assume EINA_VALUE_EMPTY.
  * tests/eina: use #ifdef guard for block which can only occur inside ifdef (CID1400948)
  * mono: remove duplicated EinaFreeCb delegate
  * mono: blacklist efl_ui_text_context_menu_item_add
  * Revert "elm/genlist: don't process entire item queue on each item add"
  * tests/spec: allow for a longer timeout of the spec suite for dist build
  * travis/ci: update Fedora CI images to 31
  * ci: work around ccache segafult during setup
  * travis: update Ubuntu image to the 19.10 release
  * docs: Efl.Gfx.View
  * check: reset flags that used for legacy 'changed' cb
  * elementary: fix end of fast scroll not showing up during Efl.Ui.CollectionView scroll.
  * edje_calc: UNLIKELY changed to LIKELY.
  * elm_config: replace ecore_file_cp with ecore_file_mv
  * csharp:comma have whitespace after and none before
  * csharp: Removing a never used class. (T8417)
  * elementary: cleanup Eina_Future properly by relying on efl_future_then proper lifecycle.
  * elementary: properly handle in flight request in Efl.Ui.CollectionView.
  * elementary: watch event on the model Efl.Ui.CollectionView use directly.
  * ci: fix ccache segfault during setup on CI in release-ready build
  * evas_filter: remove shader compile error
  * Efl.Ui.Scroll_Manager: Fix indentation
  * eolian_mono: avoid keyword as a variable name
  * wl_egl : Prevent access to NULL pointer
  * eolian-cxx: Make events inherit beta info from klass.
  * Revert "elm/genlist: remove calc jobs"
  * Revert "tests/genlist: add behavior testing for nearly all genlist events"</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1582286400">- add full url to the source</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1586520000">- Drastically reduce the number of packages, the reality is
  these days most of the libs don't function without the others
  and everything we use needs all of them. Upstream is also heading
  in this direction.
- Drop avahi and elocation as upstream is phasing it out and we
  don't use them</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1588680000">- 1.24.0 Release
  * EO memory optimization improvements
  * Copy and Paste rework
  * Ecore_Wl2 work
  * Documentation work
  * Multiple other bugfixes
  * Removals
  * emotion &amp; evas: remove gstreamer 0.10 support (gstreamer 1.x support is stable)
  * escape: remove library from tree (no known reamaining user of EFL on PS3 OS)
  * ecore_x: remove support XGesture extension (deprecated, distros do no longer ship it)
  * elocation: remove beta library (never out of beta)
  * eeze: remove tizen module support from eeze sensor (unused, sensor API stays)
  * evas3d: remove support for evas 3D which was a beta all along (never out of beta)
  * Xine and vlc supportin emotion (gstreamer 1.x support is stable)</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1589457600">- 1.24.1 Release
  * edje - don't set font sizes less than 1
  * ecore_evas_x - fix maximize/unmaximize request corner case
  * ecore_evas: only define these eina errors once
  * exactness: remove no longer needed _evas_new()
  * exactness_player: do not test for delay_ms
  * evas + gl - fix callback-to-app-changes-state issue with pixel data</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1590494400">- 1.24.2
  * evas_vg_shape: return NULL in evas_vg_shape_add when the parent of shape is NULL
  * efl_ui_image: fix to call "clicked" smart callback when there is no img
  * ecore-x - ensure we fully look at all xkb events and refresh all binds
  * evas_vg_container: return NULL in evas_vg_container_add when the parent of container is NULL
  * build: ensure we set ENABLE_LUA_OLD when using a lua interpreter</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1596628800">- 1.24.3
  * evas - csd and wl csd - fix alpha zeroing to avoid framespace junk
  * evas - genetic update regions smart merge - merge v adjacent regions
  * efreet - handle runtime relocation right with default XDG_DATA_DIRS
  * edje: fix animation memory leak.
  * canvas vg: fix dangling vector containers.
  * evas vg: clean up dangling instances
  * canvas vg: fix vector file data memory leak.
  * efl gfx_path: fix memory leak.
  * efl_ui_image: fixed elm_image_preload_disabled_set api is not working when it is called before file set</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1598875200">- Disable NEON on armv6/7:
  * efl-no-neon.patch</changelog>
  <changelog author="Tomas Cech &lt;sleep_walker@opensuse.org&gt;" date="1599134400">- split out ecore_imf-module-scim to reduce dependencies of base efl package</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1603108800">- 1.25.1
  * This time around we do not have bigger changes to cover here. For the full list please look at the NEWS file, if you are interested in the details. As usual we have been working on fixing bugs, optimising our code for speed and memory footprint and adding new features.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1625659200">- Fix typo in description</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1641384000">- Drop unkown meson paramter -Demotion-loaders-disabler. Meson
  prior to 0.60 ignored it, recent meson version fails.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1644321600">- Update to 1.26.2:
  * Fix crash when doing wierd combinations of eet_write and eet_read
  * Fix elementary tests to pass
  * Fix portability of putenv/setenv for niche OS's
  * Fix ecore input to build on BSD
  * Fix svg decoding crashes for vector decode
  * Fix theme - ibar label overlay
  * Fix theme - pointer scaling and sizing
  * Fix ecore x - ensure pointer on screen when setting bounds
  * elm theme - win - fix mystery off-by-1 resize of content
  * elm theme - fix mis-named colorclass for inwin bg
  * edje entry - fix past to use shft+ins for paste and no ctl
  * edje entry - complete key handling for cut (shft+del)
  * elm theme - fix placement of procstats and volume so they dont fight
  * Evas GL dithers by default for better quality (but it's a bit slower)
  * Evas HEIF format loaded (need to remove from disabled set)
  * Default theme is now the flat theme
  * New color palette files and API
  * Improved speed of Entry appending
  * Improved performance by not rendering invisible windows</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1645099200">- Upstream theme is now called Flat rather then dark. Dark will
  reappear soon in a new package.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1645099201">- Upstream theme is now called Flat rather then dark. Dark will
  reappear soon in a new package.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1645704000">- Themes are going to recommend there icon themes as well</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1646222400">- Drop python-devel BuildRequires: not needed.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1664193600">- Update to 1.26.3 Bugfix release
  * Fix theme issues
  * Fix edje calc internal return values in some cases
  * Fix ecore-x netwm moveresize request handling
  * Fix ecore-x xkb handling to not leak
  * Fix new xkb event handling
  * Fix evas smart object to null out fields for safety
  * Fix elm null cnp object handling to not crash in odd cases
  * Fix ecore evas x11 dnd handling to not null out xdnd props
  * Fix data checkme file so relocation at runtime works again
  * Fix eina bt output to always have spaces between fields
  * Fix png loader on arm to not have rgb values when a is 0
  * Fix textgrid to guard against null glyphs
  * Fix ecore-x vblank to use current time not vlbank time
  * Fix emile to handle invalid compress types more gracefully
  * Fix compile warnings
  * Fix evas psd loader crash
  * Fix osx sample compile conf script options
  * Fix wl vsync timer to use current time not vblank time
  * Work around xwayland issue where synthetic events are not sent</changelog>
</package>
<package pkgid="a15c99c49d04652aad65d4c5bb40eed7bbc698e808ea3a13eaef9fe7efa88c0a" name="exim" arch="aarch64">
  <version epoch="0" ver="4.94.2" rel="bp154.2.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1521115200">- Replace xorg-x11-devel by individual pkgconfig() buildrequires.</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1523880000">- update to 4.91
  * DEFER rather than ERROR on redis cluster MOVED response.
  * Catch and remove uninitialized value warning in exiqsumm
  * Disallow '/' characters in queue names specified for the "queue=" ACL
    modifier.  This matches the restriction on the commandline.
  * Fix pgsql lookup for multiple result-tuples with a single column.
    Previously only the last row was returned.
  * Bug 2217: Tighten up the parsing of DKIM signature headers.
  * Bug 2215: Fix crash associated with dnsdb lookup done from DKIM ACL.
  * Fix issue with continued-connections when the DNS shifts unreliably.
  * Bug 2214: Fix SMTP responses resulting from non-accept result of MIME ACL.
  * The "support for" informational output now, which built with Content
  Scanning support, has a line for the malware scanner interfaces compiled
  in.  Interface can be individually included or not at build time.
  * The "aveserver", "kavdaemon" and "mksd" interfaces are now not included
  by the template makefile "src/EDITME".  The "STREAM" support for an older
  ClamAV interface method is removed.
  * Bug 2223: Fix mysql lookup returns for the no-data case (when the number of
  rows affected is given instead).
  * The runtime Berkeley DB library version is now additionally output by
  "exim -d -bV".  Previously only the compile-time version was shown.
  * Bug 2230: Fix cutthrough routing for nonfirst messages in an initiating
  SMTP connection.
  * Bug 2229: Fix cutthrough routing for nonstandard port numbers defined by
  routers.
  * Bug 2174: A timeout on connect for a callout was also erroneously seen as
  a timeout on read on a GnuTLS initiating connection, resulting in the
  initiating connection being dropped.
  * Relax results from ACL control request to enable cutthrough, in
  unsupported situations, from error to silently (except under debug)
  ignoring.
  * Fix Buffer overflow in base64d() (CVE-2018-6789)
  * Fix bug in DKIM verify: a buffer overflow could corrupt the malloc
  metadata, resulting in a crash in free().
  * Fix broken Heimdal GSSAPI authenticator integration.
  * Bug 2113: Fix conversation closedown with the Avast malware scanner.
  * Bug 2239: Enforce non-usability of control=utf8_downconvert in the mail ACL.
  * Speed up macro lookups during configuration file read, by skipping non-
  macro text after a replacement (previously it was only once per line) and
  by skipping builtin macros when searching for an uppercase lead character.
  * DANE support moved from Experimental to mainline.  The Makefile control
  for the build is renamed.
  * Fix memory leak during multi-message connections using STARTTLS.
  * Bug 2236: When a DKIM verification result is overridden by ACL, DMARC
  reported the original.  Fix to report (as far as possible) the ACL
  result replacing the original.
  * Fix memory leak during multi-message connections using STARTTLS under
  OpenSSL
  * Bug 2242: Fix exim_dbmbuild to permit directoryless filenames.
  * Fix utf8_downconvert propagation through a redirect router.
  * Bug 2253: For logging delivery lines under PRDR, append the overall
  DATA response info to the (existing) per-recipient response info for
  the "C=" log element.
  * Bug 2251: Fix ldap lookups that return a single attribute having zero-
  length value.
  * Support Avast multiline protocol, this allows passing flags to
  newer versions of the scanner.
  * Ensure that variables possibly set during message acceptance are marked
    dead before release of memory in the daemon loop.
  * Bug 2250: Fix a longstanding bug in heavily-pipelined SMTP input (such
  as a multi-recipient message from a mailinglist manager).
  * The (EXPERIMENTAL_DMARC) variable $dmarc_ar_header is withdrawn, being
  replaced by the ${authresults } expansion.
  * Bug 2257: Fix pipe transport to not use a socket-only syscall.
  * Set a handler for SIGTERM and call exit(3) if running as PID 1. This
  allows proper process termination in container environments.
  * Bug 2258: Fix spool_wireformat in combination with LMTP transport.
  Previously the "final dot" had a newline after it; ensure it is CR,LF.
  * SPF: remove support for the "spf" ACL condition outcome values "err_temp"
  and "err_perm", deprecated since 4.83 when the RFC-defined words
  " temperror" and "permerror" were introduced.
  * Re-introduce enforcement of no cutthrough delivery on transports having
  transport-filters or DKIM-signing.
  * Cutthrough: for a final-dot response timeout (and nonunderstood responses)
  in defer=pass mode supply a 450 to the initiator.  Previously the message
    would be spooled.
  * DANE: add dane_require_tls_ciphers SMTP Transport option; if unset,
    tls_require_ciphers is used as before.
  * Malware Avast: Better match the Avast multiline protocol.
  * Fix reinitialisation of DKIM logging variable between messages.
  * Bug 2255: Revert the disable of the OpenSSL session caching.
  * Add util/renew-opendmarc-tlds.sh script for safe renewal of public
  suffix list.
  * DKIM: accept Ed25519 pubkeys in SubjectPublicKeyInfo-wrapped form,
  since the IETF WG has not yet settled on that versus the original
  "bare" representation.
  * Fix syslog logging for syslog_timestamp=no and log_selector +millisec.
  Previously the millisecond value corrupted the output.
  Fix also for syslog_pid=no and log_selector +pid, for which the pid
  corrupted the output.</changelog>
  <changelog author="seanlew@opensuse.org" date="1553342400">- update to exim 4.92
  * ${l_header:&lt;name&gt;} expansion
  * ${readsocket} now supports TLS
  * "utf8_downconvert" option (if built with SUPPORT_I18N)
  * "pipelining" log_selector
  * JSON variants for ${extract } expansion
  * "noutf8" debug option
  * TCP Fast Open support on MacOS
  * CVE-2019-10149: Fixed a Remote Command Execution (bsc#1136587)
- add workaround patch for compile time error on missing printf
  format annotation (gnu_printf.patch)</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1559736000">- spec file cleanup
  * fix DANE inclusion guard condition
  * re-enable i18n and remove misleading comment
  * EXPERIMENTAL_SPF is now SUPPORT_SPF
  * DANE is now SUPPORT_DANE</changelog>
  <changelog author="alex &lt;atoptsoglou@suse.com&gt;" date="1564056000">- update to exim 4.92.1
  * CVE-2019-13917: Fixed an issue with ${sort} expansion which could
  allow remote attackers to execute other programs with root privileges
  (boo#1142207)</changelog>
  <changelog author="poeml@cmdline.net" date="1567857600">- update to exim 4.92.2
  * CVE-2019-15846: fix against remote attackers executing arbitrary code as
    root via a trailing backslash</changelog>
  <changelog author="poeml@cmdline.net" date="1569844800">- update to exim 4.92.3
  * CVE-2019-16928: fix against Heap-based buffer overflow in string_vformat,
    remote code execution seems to be possible</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1575892800">- update to exim 4.93
  * SUPPORT_DMARC replaces EXPERIMENTAL_DMARC
  * DISABLE_TLS replaces SUPPORT_TLS
  * Bump the version for the local_scan API.
  * smtp transport option hosts_try_fastopen defaults to "*".
  * DNSSec is requested (not required) for all queries. (This seemes to
    ask for trouble if your resolver is a systemd-resolved.)
  * Generic router option retry_use_local_part defaults to "true" under specific
    pre-conditions.
  * Introduce a tainting mechanism for values read from untrusted sources.
  * Use longer file names for temporary spool files (this avoids
    name conflicts with spool on a shared file system).
  * Use dsn_from main config option (was ignored previously).</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1577966400">spec file cleanup to make update work
- add docdir to spec</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1578398400">- update to exim 4.93.0.4 (+fixes release)
  * Avoid costly startup code when not strictly needed.  This reduces time
    for some exim process initialisations.  It does mean that the logging
    of TLS configuration problems is only done for the daemon startup.
  * Early-pipelining support code is now included unless disabled in Makefile.
  * DKIM verification defaults no long accept sha1 hashes, to conform to
    RFC 8301.  They can still be enabled, using the dkim_verify_hashes main
    option.
  * Support CHUNKING from an smtp transport using a transport_filter, when
    DKIM signing is being done.  Previously a transport_filter would always
    disable CHUNKING, falling back to traditional DATA.
  * Regard command-line receipients as tainted.
  * Bug 340: Remove the daemon pid file on exit, whe due to SIGTERM.
  * Bug 2489: Fix crash in the "pam" expansion condition.  It seems that the
    PAM library frees one of the arguments given to it, despite the
    documentation.  Therefore a plain malloc must be used.
  * Bug 2491: Use tainted buffers for the transport smtp context.  Previously
    on-stack buffers were used, resulting in a taint trap when DSN information
    copied from a received message was written into the buffer.
  * Bug 2493: Harden ARC verify against Outlook, whick has been seen to mix
    the ordering of its ARC headers.  This caused a crash.
  * Bug 2492: Use tainted memory for retry record when needed.  Previously when
    a new record was being constructed with information from the peer, a trap
    was taken.
  * Bug 2494: Unset the default for dmarc_tld_file.  Previously a naiive
    installation would get error messages from DMARC verify, when it hit the
    nonexistent file indicated by the default.  Distros wanting DMARC enabled
    should both provide the file and set the option.
    Also enforce no DMARC verification for command-line sourced messages.
  * Fix an uninitialised flag in early-pipelining.  Previously connections
    could, depending on the platform, hang at the STARTTLS response.
  * Bug 2498: Reset a counter used for ARC verify before handling another
    message on a connection.  Previously if one message had ARC headers and
    the following one did not, a crash could result when adding an
    Authentication-Results: header.
  * Bug 2500: Rewind some of the common-coding in string handling between the
    Exim main code and Exim-related utities.  The introduction of taint
    tracking also did many adjustments to string handling.  Since then, eximon
    frequently terminated with an assert failure.
  * When PIPELINING, synch after every hundred or so RCPT commands sent and
    check for 452 responses.  This slightly helps the inefficieny of doing
    a large alias-expansion into a recipient-limited target.  The max_rcpt
    transport option still applies (and at the current default, will override
    the new feature).  The check is done for either cause of synch, and forces
    a fast-retry of all 452'd recipients using a new MAIL FROM on the same
    connection.  The new facility is not tunable at this time.
  * Fix the variables set by the gsasl authenticator.  Previously a pointer to
    library live data was being used, so the results became garbage.  Make
    copies while it is still usable.
  * Logging: when the deliver_time selector ise set, include the DT= field
    on delivery deferred (==) and failed (**) lines (if a delivery was
    attemtped).  Previously it was only on completion (=&gt;) lines.
  * Authentication: the gsasl driver not provides the $authN variables in time
    for the expansion of the server_scram_iter and server_scram_salt options.</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1578916800">- add a spec-file workaround for bsc#1160726</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1585742400">- don't create logfiles during install
  * fixes CVE-2020-8015 (bsc#1154183)</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1589284800">- bring changes from current in +fixes branch
  (patch-exim-fixes-ee83de04d3087efaf808d1f2235a988275c2ee94)
  * fixes CVE-2020-12783 (bsc#1171490)
  * Regard command-line recipients as tainted.
  * Bug 2489: Fix crash in the "pam" expansion condition.
  * Use tainted buffers for the transport smtp context.
  * Bug 2493: Harden ARC verify against Outlook, which has been seen to mix
    the ordering of its ARC headers.  This caused a crash.
  * Bug 2492: Use tainted memory for retry record when needed.  Previously when
    a new record was being constructed with information from the peer, a trap
    was taken.
  * Bug 2494: Unset the default for dmarc_tld_file.
  * Fix an uninitialised flag in early-pipelining.  Previously connections
    could, depending on the platform, hang at the STARTTLS response.
  * Bug 2498: Reset a counter used for ARC verify before handling another
    message on a connection.  Previously if one message had ARC headers and
    the following one did not, a crash could result when adding an
    Authentication-Results: header.
  * Bug 2500: Rewind some of the common-coding in string handling between the
    Exim main code and Exim-related utities.
  * Fix the variables set by the gsasl authenticator.
  * Bug 2507: Modules: on handling a dynamic-module (lookups) open failure,
    only retrieve the errormessage once.
  * Bug 2501: Fix init call in the heimdal authenticator.  Previously it
    adjusted the size of a major service buffer; this failed because the
    buffer was in use at the time.  Change to a compile-time increase in the
    buffer size, when this authenticator is compiled into exim.</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1589889600">- switch pretrans to use lua
  (fixes bsc#1171877)</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1591099200">- update to exim 4.94
  * some transports now refuse to use tainted data in constructing their delivery
    location
    this WILL BREAK configurations which are not updated accordingly.
    In particular: any Transport use of $local_user which has been relying upon
    check_local_user far away in the Router to make it safe, should be updated to
    replace $local_user with $local_part_data.
  * Attempting to remove, in router or transport, a header name that ends with
    an asterisk (which is a standards-legal name) will now result in all headers
    named starting with the string before the asterisk being removed.</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1591617600">- bring in changes from current +fixes (lots of taint check fixes)
  * Bug 1329: Fix format of Maildir-format filenames to match other mail-
    related applications.  Previously an "H" was used where available info
    says that "M" should be, so change to match.
  * Bug 2587: Fix pam expansion condition.  Tainted values are commonly used
    as arguments, so an implementation trying to copy these into a local
    buffer was taking a taint-enforcement trap.  Fix by using dynamically
    created buffers.
  * Bug 2586: Fix listcount expansion operator.  Using tainted arguments is
    reasonable, eg. to count headers.  Fix by using dynamically created
    buffers rather than a local.  Do similar fixes for ACL actions "dcc",
    "log_reject_target", "malware" and "spam"; the arguments are expanded
    so could be handling tainted values.
  * Bug 2590: Fix -bi (newaliases).  A previous code rearrangement had
    broken the (no-op) support for this sendmail command.  Restore it
    to doing nothing, silently, and returning good status.</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1598270400">- bring back missing exim_db.8 manual page
  (fixes bsc#1173693)</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1619611200">- update to exim-4.94.1
  * Fix security issue in BDAT state confusion.
    Ensure we reset known-good where we know we need to not be reading BDAT
    data, as a general case fix, and move the places where we switch to BDAT
    mode until after various protocol state checks.
    Fixes CVE-2020-BDATA reported by Qualys.
  * Fix security issue in SMTP verb option parsing (CVE-2020-EXOPT)
  * Fix security issue with too many recipients on a message (to remove a
    known security problem if someone does set recipients_max to unlimited,
    or if local additions add to the recipient list).
    Fixes CVE-2020-RCPTL reported by Qualys.
  * Fix CVE-2020-28016 (PFPZA): Heap out-of-bounds write in parse_fix_phrase()
  * Fix security issue CVE-2020-PFPSN and guard against cmdline invoker
    providing a particularly obnoxious sender full name.
  * Fix Linux security issue CVE-2020-SLCWD and guard against PATH_MAX
    better.</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1620129600">- update to exim-4.94.2
  security update (bsc#1185631)
  * CVE-2020-28007: Link attack in Exim's log directory
  * CVE-2020-28008: Assorted attacks in Exim's spool directory
  * CVE-2020-28014: Arbitrary PID file creation
  * CVE-2020-28011: Heap buffer overflow in queue_run()
  * CVE-2020-28010: Heap out-of-bounds write in main()
  * CVE-2020-28013: Heap buffer overflow in parse_fix_phrase()
  * CVE-2020-28016: Heap out-of-bounds write in parse_fix_phrase()
  * CVE-2020-28015: New-line injection into spool header file (local)
  * CVE-2020-28012: Missing close-on-exec flag for privileged pipe
  * CVE-2020-28009: Integer overflow in get_stdinput()
  * CVE-2020-28017: Integer overflow in receive_add_recipient()
  * CVE-2020-28020: Integer overflow in receive_msg()
  * CVE-2020-28023: Out-of-bounds read in smtp_setup_msg()
  * CVE-2020-28021: New-line injection into spool header file (remote)
  * CVE-2020-28022: Heap out-of-bounds read and write in extract_option()
  * CVE-2020-28026: Line truncation and injection in spool_read_header()
  * CVE-2020-28019: Failure to reset function pointer after BDAT error
  * CVE-2020-28024: Heap buffer underflow in smtp_ungetc()
  * CVE-2020-28018: Use-after-free in tls-openssl.c
  * CVE-2020-28025: Heap out-of-bounds read in pdkim_finish_bodyhash()</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1666094400">- add patch-cve-2022-3559 (fixes CVE-2022-3559, bsc#1204427, Bug 2915)</changelog>
</package>
<package pkgid="bdb92ec38923253acd1f53af683b797f1a112b579dd90e7b3635bc72ce1a1a99" name="exim" arch="ppc64le">
  <version epoch="0" ver="4.94.2" rel="bp154.2.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1521115200">- Replace xorg-x11-devel by individual pkgconfig() buildrequires.</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1523880000">- update to 4.91
  * DEFER rather than ERROR on redis cluster MOVED response.
  * Catch and remove uninitialized value warning in exiqsumm
  * Disallow '/' characters in queue names specified for the "queue=" ACL
    modifier.  This matches the restriction on the commandline.
  * Fix pgsql lookup for multiple result-tuples with a single column.
    Previously only the last row was returned.
  * Bug 2217: Tighten up the parsing of DKIM signature headers.
  * Bug 2215: Fix crash associated with dnsdb lookup done from DKIM ACL.
  * Fix issue with continued-connections when the DNS shifts unreliably.
  * Bug 2214: Fix SMTP responses resulting from non-accept result of MIME ACL.
  * The "support for" informational output now, which built with Content
  Scanning support, has a line for the malware scanner interfaces compiled
  in.  Interface can be individually included or not at build time.
  * The "aveserver", "kavdaemon" and "mksd" interfaces are now not included
  by the template makefile "src/EDITME".  The "STREAM" support for an older
  ClamAV interface method is removed.
  * Bug 2223: Fix mysql lookup returns for the no-data case (when the number of
  rows affected is given instead).
  * The runtime Berkeley DB library version is now additionally output by
  "exim -d -bV".  Previously only the compile-time version was shown.
  * Bug 2230: Fix cutthrough routing for nonfirst messages in an initiating
  SMTP connection.
  * Bug 2229: Fix cutthrough routing for nonstandard port numbers defined by
  routers.
  * Bug 2174: A timeout on connect for a callout was also erroneously seen as
  a timeout on read on a GnuTLS initiating connection, resulting in the
  initiating connection being dropped.
  * Relax results from ACL control request to enable cutthrough, in
  unsupported situations, from error to silently (except under debug)
  ignoring.
  * Fix Buffer overflow in base64d() (CVE-2018-6789)
  * Fix bug in DKIM verify: a buffer overflow could corrupt the malloc
  metadata, resulting in a crash in free().
  * Fix broken Heimdal GSSAPI authenticator integration.
  * Bug 2113: Fix conversation closedown with the Avast malware scanner.
  * Bug 2239: Enforce non-usability of control=utf8_downconvert in the mail ACL.
  * Speed up macro lookups during configuration file read, by skipping non-
  macro text after a replacement (previously it was only once per line) and
  by skipping builtin macros when searching for an uppercase lead character.
  * DANE support moved from Experimental to mainline.  The Makefile control
  for the build is renamed.
  * Fix memory leak during multi-message connections using STARTTLS.
  * Bug 2236: When a DKIM verification result is overridden by ACL, DMARC
  reported the original.  Fix to report (as far as possible) the ACL
  result replacing the original.
  * Fix memory leak during multi-message connections using STARTTLS under
  OpenSSL
  * Bug 2242: Fix exim_dbmbuild to permit directoryless filenames.
  * Fix utf8_downconvert propagation through a redirect router.
  * Bug 2253: For logging delivery lines under PRDR, append the overall
  DATA response info to the (existing) per-recipient response info for
  the "C=" log element.
  * Bug 2251: Fix ldap lookups that return a single attribute having zero-
  length value.
  * Support Avast multiline protocol, this allows passing flags to
  newer versions of the scanner.
  * Ensure that variables possibly set during message acceptance are marked
    dead before release of memory in the daemon loop.
  * Bug 2250: Fix a longstanding bug in heavily-pipelined SMTP input (such
  as a multi-recipient message from a mailinglist manager).
  * The (EXPERIMENTAL_DMARC) variable $dmarc_ar_header is withdrawn, being
  replaced by the ${authresults } expansion.
  * Bug 2257: Fix pipe transport to not use a socket-only syscall.
  * Set a handler for SIGTERM and call exit(3) if running as PID 1. This
  allows proper process termination in container environments.
  * Bug 2258: Fix spool_wireformat in combination with LMTP transport.
  Previously the "final dot" had a newline after it; ensure it is CR,LF.
  * SPF: remove support for the "spf" ACL condition outcome values "err_temp"
  and "err_perm", deprecated since 4.83 when the RFC-defined words
  " temperror" and "permerror" were introduced.
  * Re-introduce enforcement of no cutthrough delivery on transports having
  transport-filters or DKIM-signing.
  * Cutthrough: for a final-dot response timeout (and nonunderstood responses)
  in defer=pass mode supply a 450 to the initiator.  Previously the message
    would be spooled.
  * DANE: add dane_require_tls_ciphers SMTP Transport option; if unset,
    tls_require_ciphers is used as before.
  * Malware Avast: Better match the Avast multiline protocol.
  * Fix reinitialisation of DKIM logging variable between messages.
  * Bug 2255: Revert the disable of the OpenSSL session caching.
  * Add util/renew-opendmarc-tlds.sh script for safe renewal of public
  suffix list.
  * DKIM: accept Ed25519 pubkeys in SubjectPublicKeyInfo-wrapped form,
  since the IETF WG has not yet settled on that versus the original
  "bare" representation.
  * Fix syslog logging for syslog_timestamp=no and log_selector +millisec.
  Previously the millisecond value corrupted the output.
  Fix also for syslog_pid=no and log_selector +pid, for which the pid
  corrupted the output.</changelog>
  <changelog author="seanlew@opensuse.org" date="1553342400">- update to exim 4.92
  * ${l_header:&lt;name&gt;} expansion
  * ${readsocket} now supports TLS
  * "utf8_downconvert" option (if built with SUPPORT_I18N)
  * "pipelining" log_selector
  * JSON variants for ${extract } expansion
  * "noutf8" debug option
  * TCP Fast Open support on MacOS
  * CVE-2019-10149: Fixed a Remote Command Execution (bsc#1136587)
- add workaround patch for compile time error on missing printf
  format annotation (gnu_printf.patch)</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1559736000">- spec file cleanup
  * fix DANE inclusion guard condition
  * re-enable i18n and remove misleading comment
  * EXPERIMENTAL_SPF is now SUPPORT_SPF
  * DANE is now SUPPORT_DANE</changelog>
  <changelog author="alex &lt;atoptsoglou@suse.com&gt;" date="1564056000">- update to exim 4.92.1
  * CVE-2019-13917: Fixed an issue with ${sort} expansion which could
  allow remote attackers to execute other programs with root privileges
  (boo#1142207)</changelog>
  <changelog author="poeml@cmdline.net" date="1567857600">- update to exim 4.92.2
  * CVE-2019-15846: fix against remote attackers executing arbitrary code as
    root via a trailing backslash</changelog>
  <changelog author="poeml@cmdline.net" date="1569844800">- update to exim 4.92.3
  * CVE-2019-16928: fix against Heap-based buffer overflow in string_vformat,
    remote code execution seems to be possible</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1575892800">- update to exim 4.93
  * SUPPORT_DMARC replaces EXPERIMENTAL_DMARC
  * DISABLE_TLS replaces SUPPORT_TLS
  * Bump the version for the local_scan API.
  * smtp transport option hosts_try_fastopen defaults to "*".
  * DNSSec is requested (not required) for all queries. (This seemes to
    ask for trouble if your resolver is a systemd-resolved.)
  * Generic router option retry_use_local_part defaults to "true" under specific
    pre-conditions.
  * Introduce a tainting mechanism for values read from untrusted sources.
  * Use longer file names for temporary spool files (this avoids
    name conflicts with spool on a shared file system).
  * Use dsn_from main config option (was ignored previously).</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1577966400">spec file cleanup to make update work
- add docdir to spec</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1578398400">- update to exim 4.93.0.4 (+fixes release)
  * Avoid costly startup code when not strictly needed.  This reduces time
    for some exim process initialisations.  It does mean that the logging
    of TLS configuration problems is only done for the daemon startup.
  * Early-pipelining support code is now included unless disabled in Makefile.
  * DKIM verification defaults no long accept sha1 hashes, to conform to
    RFC 8301.  They can still be enabled, using the dkim_verify_hashes main
    option.
  * Support CHUNKING from an smtp transport using a transport_filter, when
    DKIM signing is being done.  Previously a transport_filter would always
    disable CHUNKING, falling back to traditional DATA.
  * Regard command-line receipients as tainted.
  * Bug 340: Remove the daemon pid file on exit, whe due to SIGTERM.
  * Bug 2489: Fix crash in the "pam" expansion condition.  It seems that the
    PAM library frees one of the arguments given to it, despite the
    documentation.  Therefore a plain malloc must be used.
  * Bug 2491: Use tainted buffers for the transport smtp context.  Previously
    on-stack buffers were used, resulting in a taint trap when DSN information
    copied from a received message was written into the buffer.
  * Bug 2493: Harden ARC verify against Outlook, whick has been seen to mix
    the ordering of its ARC headers.  This caused a crash.
  * Bug 2492: Use tainted memory for retry record when needed.  Previously when
    a new record was being constructed with information from the peer, a trap
    was taken.
  * Bug 2494: Unset the default for dmarc_tld_file.  Previously a naiive
    installation would get error messages from DMARC verify, when it hit the
    nonexistent file indicated by the default.  Distros wanting DMARC enabled
    should both provide the file and set the option.
    Also enforce no DMARC verification for command-line sourced messages.
  * Fix an uninitialised flag in early-pipelining.  Previously connections
    could, depending on the platform, hang at the STARTTLS response.
  * Bug 2498: Reset a counter used for ARC verify before handling another
    message on a connection.  Previously if one message had ARC headers and
    the following one did not, a crash could result when adding an
    Authentication-Results: header.
  * Bug 2500: Rewind some of the common-coding in string handling between the
    Exim main code and Exim-related utities.  The introduction of taint
    tracking also did many adjustments to string handling.  Since then, eximon
    frequently terminated with an assert failure.
  * When PIPELINING, synch after every hundred or so RCPT commands sent and
    check for 452 responses.  This slightly helps the inefficieny of doing
    a large alias-expansion into a recipient-limited target.  The max_rcpt
    transport option still applies (and at the current default, will override
    the new feature).  The check is done for either cause of synch, and forces
    a fast-retry of all 452'd recipients using a new MAIL FROM on the same
    connection.  The new facility is not tunable at this time.
  * Fix the variables set by the gsasl authenticator.  Previously a pointer to
    library live data was being used, so the results became garbage.  Make
    copies while it is still usable.
  * Logging: when the deliver_time selector ise set, include the DT= field
    on delivery deferred (==) and failed (**) lines (if a delivery was
    attemtped).  Previously it was only on completion (=&gt;) lines.
  * Authentication: the gsasl driver not provides the $authN variables in time
    for the expansion of the server_scram_iter and server_scram_salt options.</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1578916800">- add a spec-file workaround for bsc#1160726</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1585742400">- don't create logfiles during install
  * fixes CVE-2020-8015 (bsc#1154183)</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1589284800">- bring changes from current in +fixes branch
  (patch-exim-fixes-ee83de04d3087efaf808d1f2235a988275c2ee94)
  * fixes CVE-2020-12783 (bsc#1171490)
  * Regard command-line recipients as tainted.
  * Bug 2489: Fix crash in the "pam" expansion condition.
  * Use tainted buffers for the transport smtp context.
  * Bug 2493: Harden ARC verify against Outlook, which has been seen to mix
    the ordering of its ARC headers.  This caused a crash.
  * Bug 2492: Use tainted memory for retry record when needed.  Previously when
    a new record was being constructed with information from the peer, a trap
    was taken.
  * Bug 2494: Unset the default for dmarc_tld_file.
  * Fix an uninitialised flag in early-pipelining.  Previously connections
    could, depending on the platform, hang at the STARTTLS response.
  * Bug 2498: Reset a counter used for ARC verify before handling another
    message on a connection.  Previously if one message had ARC headers and
    the following one did not, a crash could result when adding an
    Authentication-Results: header.
  * Bug 2500: Rewind some of the common-coding in string handling between the
    Exim main code and Exim-related utities.
  * Fix the variables set by the gsasl authenticator.
  * Bug 2507: Modules: on handling a dynamic-module (lookups) open failure,
    only retrieve the errormessage once.
  * Bug 2501: Fix init call in the heimdal authenticator.  Previously it
    adjusted the size of a major service buffer; this failed because the
    buffer was in use at the time.  Change to a compile-time increase in the
    buffer size, when this authenticator is compiled into exim.</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1589889600">- switch pretrans to use lua
  (fixes bsc#1171877)</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1591099200">- update to exim 4.94
  * some transports now refuse to use tainted data in constructing their delivery
    location
    this WILL BREAK configurations which are not updated accordingly.
    In particular: any Transport use of $local_user which has been relying upon
    check_local_user far away in the Router to make it safe, should be updated to
    replace $local_user with $local_part_data.
  * Attempting to remove, in router or transport, a header name that ends with
    an asterisk (which is a standards-legal name) will now result in all headers
    named starting with the string before the asterisk being removed.</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1591617600">- bring in changes from current +fixes (lots of taint check fixes)
  * Bug 1329: Fix format of Maildir-format filenames to match other mail-
    related applications.  Previously an "H" was used where available info
    says that "M" should be, so change to match.
  * Bug 2587: Fix pam expansion condition.  Tainted values are commonly used
    as arguments, so an implementation trying to copy these into a local
    buffer was taking a taint-enforcement trap.  Fix by using dynamically
    created buffers.
  * Bug 2586: Fix listcount expansion operator.  Using tainted arguments is
    reasonable, eg. to count headers.  Fix by using dynamically created
    buffers rather than a local.  Do similar fixes for ACL actions "dcc",
    "log_reject_target", "malware" and "spam"; the arguments are expanded
    so could be handling tainted values.
  * Bug 2590: Fix -bi (newaliases).  A previous code rearrangement had
    broken the (no-op) support for this sendmail command.  Restore it
    to doing nothing, silently, and returning good status.</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1598270400">- bring back missing exim_db.8 manual page
  (fixes bsc#1173693)</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1619611200">- update to exim-4.94.1
  * Fix security issue in BDAT state confusion.
    Ensure we reset known-good where we know we need to not be reading BDAT
    data, as a general case fix, and move the places where we switch to BDAT
    mode until after various protocol state checks.
    Fixes CVE-2020-BDATA reported by Qualys.
  * Fix security issue in SMTP verb option parsing (CVE-2020-EXOPT)
  * Fix security issue with too many recipients on a message (to remove a
    known security problem if someone does set recipients_max to unlimited,
    or if local additions add to the recipient list).
    Fixes CVE-2020-RCPTL reported by Qualys.
  * Fix CVE-2020-28016 (PFPZA): Heap out-of-bounds write in parse_fix_phrase()
  * Fix security issue CVE-2020-PFPSN and guard against cmdline invoker
    providing a particularly obnoxious sender full name.
  * Fix Linux security issue CVE-2020-SLCWD and guard against PATH_MAX
    better.</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1620129600">- update to exim-4.94.2
  security update (bsc#1185631)
  * CVE-2020-28007: Link attack in Exim's log directory
  * CVE-2020-28008: Assorted attacks in Exim's spool directory
  * CVE-2020-28014: Arbitrary PID file creation
  * CVE-2020-28011: Heap buffer overflow in queue_run()
  * CVE-2020-28010: Heap out-of-bounds write in main()
  * CVE-2020-28013: Heap buffer overflow in parse_fix_phrase()
  * CVE-2020-28016: Heap out-of-bounds write in parse_fix_phrase()
  * CVE-2020-28015: New-line injection into spool header file (local)
  * CVE-2020-28012: Missing close-on-exec flag for privileged pipe
  * CVE-2020-28009: Integer overflow in get_stdinput()
  * CVE-2020-28017: Integer overflow in receive_add_recipient()
  * CVE-2020-28020: Integer overflow in receive_msg()
  * CVE-2020-28023: Out-of-bounds read in smtp_setup_msg()
  * CVE-2020-28021: New-line injection into spool header file (remote)
  * CVE-2020-28022: Heap out-of-bounds read and write in extract_option()
  * CVE-2020-28026: Line truncation and injection in spool_read_header()
  * CVE-2020-28019: Failure to reset function pointer after BDAT error
  * CVE-2020-28024: Heap buffer underflow in smtp_ungetc()
  * CVE-2020-28018: Use-after-free in tls-openssl.c
  * CVE-2020-28025: Heap out-of-bounds read in pdkim_finish_bodyhash()</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1666094400">- add patch-cve-2022-3559 (fixes CVE-2022-3559, bsc#1204427, Bug 2915)</changelog>
</package>
<package pkgid="cd4b7782fa33e7fe2ebd71ca56eb8f02f4804435763bf253a790f3b6af288423" name="exim" arch="s390x">
  <version epoch="0" ver="4.94.2" rel="bp154.2.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1521115200">- Replace xorg-x11-devel by individual pkgconfig() buildrequires.</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1523880000">- update to 4.91
  * DEFER rather than ERROR on redis cluster MOVED response.
  * Catch and remove uninitialized value warning in exiqsumm
  * Disallow '/' characters in queue names specified for the "queue=" ACL
    modifier.  This matches the restriction on the commandline.
  * Fix pgsql lookup for multiple result-tuples with a single column.
    Previously only the last row was returned.
  * Bug 2217: Tighten up the parsing of DKIM signature headers.
  * Bug 2215: Fix crash associated with dnsdb lookup done from DKIM ACL.
  * Fix issue with continued-connections when the DNS shifts unreliably.
  * Bug 2214: Fix SMTP responses resulting from non-accept result of MIME ACL.
  * The "support for" informational output now, which built with Content
  Scanning support, has a line for the malware scanner interfaces compiled
  in.  Interface can be individually included or not at build time.
  * The "aveserver", "kavdaemon" and "mksd" interfaces are now not included
  by the template makefile "src/EDITME".  The "STREAM" support for an older
  ClamAV interface method is removed.
  * Bug 2223: Fix mysql lookup returns for the no-data case (when the number of
  rows affected is given instead).
  * The runtime Berkeley DB library version is now additionally output by
  "exim -d -bV".  Previously only the compile-time version was shown.
  * Bug 2230: Fix cutthrough routing for nonfirst messages in an initiating
  SMTP connection.
  * Bug 2229: Fix cutthrough routing for nonstandard port numbers defined by
  routers.
  * Bug 2174: A timeout on connect for a callout was also erroneously seen as
  a timeout on read on a GnuTLS initiating connection, resulting in the
  initiating connection being dropped.
  * Relax results from ACL control request to enable cutthrough, in
  unsupported situations, from error to silently (except under debug)
  ignoring.
  * Fix Buffer overflow in base64d() (CVE-2018-6789)
  * Fix bug in DKIM verify: a buffer overflow could corrupt the malloc
  metadata, resulting in a crash in free().
  * Fix broken Heimdal GSSAPI authenticator integration.
  * Bug 2113: Fix conversation closedown with the Avast malware scanner.
  * Bug 2239: Enforce non-usability of control=utf8_downconvert in the mail ACL.
  * Speed up macro lookups during configuration file read, by skipping non-
  macro text after a replacement (previously it was only once per line) and
  by skipping builtin macros when searching for an uppercase lead character.
  * DANE support moved from Experimental to mainline.  The Makefile control
  for the build is renamed.
  * Fix memory leak during multi-message connections using STARTTLS.
  * Bug 2236: When a DKIM verification result is overridden by ACL, DMARC
  reported the original.  Fix to report (as far as possible) the ACL
  result replacing the original.
  * Fix memory leak during multi-message connections using STARTTLS under
  OpenSSL
  * Bug 2242: Fix exim_dbmbuild to permit directoryless filenames.
  * Fix utf8_downconvert propagation through a redirect router.
  * Bug 2253: For logging delivery lines under PRDR, append the overall
  DATA response info to the (existing) per-recipient response info for
  the "C=" log element.
  * Bug 2251: Fix ldap lookups that return a single attribute having zero-
  length value.
  * Support Avast multiline protocol, this allows passing flags to
  newer versions of the scanner.
  * Ensure that variables possibly set during message acceptance are marked
    dead before release of memory in the daemon loop.
  * Bug 2250: Fix a longstanding bug in heavily-pipelined SMTP input (such
  as a multi-recipient message from a mailinglist manager).
  * The (EXPERIMENTAL_DMARC) variable $dmarc_ar_header is withdrawn, being
  replaced by the ${authresults } expansion.
  * Bug 2257: Fix pipe transport to not use a socket-only syscall.
  * Set a handler for SIGTERM and call exit(3) if running as PID 1. This
  allows proper process termination in container environments.
  * Bug 2258: Fix spool_wireformat in combination with LMTP transport.
  Previously the "final dot" had a newline after it; ensure it is CR,LF.
  * SPF: remove support for the "spf" ACL condition outcome values "err_temp"
  and "err_perm", deprecated since 4.83 when the RFC-defined words
  " temperror" and "permerror" were introduced.
  * Re-introduce enforcement of no cutthrough delivery on transports having
  transport-filters or DKIM-signing.
  * Cutthrough: for a final-dot response timeout (and nonunderstood responses)
  in defer=pass mode supply a 450 to the initiator.  Previously the message
    would be spooled.
  * DANE: add dane_require_tls_ciphers SMTP Transport option; if unset,
    tls_require_ciphers is used as before.
  * Malware Avast: Better match the Avast multiline protocol.
  * Fix reinitialisation of DKIM logging variable between messages.
  * Bug 2255: Revert the disable of the OpenSSL session caching.
  * Add util/renew-opendmarc-tlds.sh script for safe renewal of public
  suffix list.
  * DKIM: accept Ed25519 pubkeys in SubjectPublicKeyInfo-wrapped form,
  since the IETF WG has not yet settled on that versus the original
  "bare" representation.
  * Fix syslog logging for syslog_timestamp=no and log_selector +millisec.
  Previously the millisecond value corrupted the output.
  Fix also for syslog_pid=no and log_selector +pid, for which the pid
  corrupted the output.</changelog>
  <changelog author="seanlew@opensuse.org" date="1553342400">- update to exim 4.92
  * ${l_header:&lt;name&gt;} expansion
  * ${readsocket} now supports TLS
  * "utf8_downconvert" option (if built with SUPPORT_I18N)
  * "pipelining" log_selector
  * JSON variants for ${extract } expansion
  * "noutf8" debug option
  * TCP Fast Open support on MacOS
  * CVE-2019-10149: Fixed a Remote Command Execution (bsc#1136587)
- add workaround patch for compile time error on missing printf
  format annotation (gnu_printf.patch)</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1559736000">- spec file cleanup
  * fix DANE inclusion guard condition
  * re-enable i18n and remove misleading comment
  * EXPERIMENTAL_SPF is now SUPPORT_SPF
  * DANE is now SUPPORT_DANE</changelog>
  <changelog author="alex &lt;atoptsoglou@suse.com&gt;" date="1564056000">- update to exim 4.92.1
  * CVE-2019-13917: Fixed an issue with ${sort} expansion which could
  allow remote attackers to execute other programs with root privileges
  (boo#1142207)</changelog>
  <changelog author="poeml@cmdline.net" date="1567857600">- update to exim 4.92.2
  * CVE-2019-15846: fix against remote attackers executing arbitrary code as
    root via a trailing backslash</changelog>
  <changelog author="poeml@cmdline.net" date="1569844800">- update to exim 4.92.3
  * CVE-2019-16928: fix against Heap-based buffer overflow in string_vformat,
    remote code execution seems to be possible</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1575892800">- update to exim 4.93
  * SUPPORT_DMARC replaces EXPERIMENTAL_DMARC
  * DISABLE_TLS replaces SUPPORT_TLS
  * Bump the version for the local_scan API.
  * smtp transport option hosts_try_fastopen defaults to "*".
  * DNSSec is requested (not required) for all queries. (This seemes to
    ask for trouble if your resolver is a systemd-resolved.)
  * Generic router option retry_use_local_part defaults to "true" under specific
    pre-conditions.
  * Introduce a tainting mechanism for values read from untrusted sources.
  * Use longer file names for temporary spool files (this avoids
    name conflicts with spool on a shared file system).
  * Use dsn_from main config option (was ignored previously).</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1577966400">spec file cleanup to make update work
- add docdir to spec</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1578398400">- update to exim 4.93.0.4 (+fixes release)
  * Avoid costly startup code when not strictly needed.  This reduces time
    for some exim process initialisations.  It does mean that the logging
    of TLS configuration problems is only done for the daemon startup.
  * Early-pipelining support code is now included unless disabled in Makefile.
  * DKIM verification defaults no long accept sha1 hashes, to conform to
    RFC 8301.  They can still be enabled, using the dkim_verify_hashes main
    option.
  * Support CHUNKING from an smtp transport using a transport_filter, when
    DKIM signing is being done.  Previously a transport_filter would always
    disable CHUNKING, falling back to traditional DATA.
  * Regard command-line receipients as tainted.
  * Bug 340: Remove the daemon pid file on exit, whe due to SIGTERM.
  * Bug 2489: Fix crash in the "pam" expansion condition.  It seems that the
    PAM library frees one of the arguments given to it, despite the
    documentation.  Therefore a plain malloc must be used.
  * Bug 2491: Use tainted buffers for the transport smtp context.  Previously
    on-stack buffers were used, resulting in a taint trap when DSN information
    copied from a received message was written into the buffer.
  * Bug 2493: Harden ARC verify against Outlook, whick has been seen to mix
    the ordering of its ARC headers.  This caused a crash.
  * Bug 2492: Use tainted memory for retry record when needed.  Previously when
    a new record was being constructed with information from the peer, a trap
    was taken.
  * Bug 2494: Unset the default for dmarc_tld_file.  Previously a naiive
    installation would get error messages from DMARC verify, when it hit the
    nonexistent file indicated by the default.  Distros wanting DMARC enabled
    should both provide the file and set the option.
    Also enforce no DMARC verification for command-line sourced messages.
  * Fix an uninitialised flag in early-pipelining.  Previously connections
    could, depending on the platform, hang at the STARTTLS response.
  * Bug 2498: Reset a counter used for ARC verify before handling another
    message on a connection.  Previously if one message had ARC headers and
    the following one did not, a crash could result when adding an
    Authentication-Results: header.
  * Bug 2500: Rewind some of the common-coding in string handling between the
    Exim main code and Exim-related utities.  The introduction of taint
    tracking also did many adjustments to string handling.  Since then, eximon
    frequently terminated with an assert failure.
  * When PIPELINING, synch after every hundred or so RCPT commands sent and
    check for 452 responses.  This slightly helps the inefficieny of doing
    a large alias-expansion into a recipient-limited target.  The max_rcpt
    transport option still applies (and at the current default, will override
    the new feature).  The check is done for either cause of synch, and forces
    a fast-retry of all 452'd recipients using a new MAIL FROM on the same
    connection.  The new facility is not tunable at this time.
  * Fix the variables set by the gsasl authenticator.  Previously a pointer to
    library live data was being used, so the results became garbage.  Make
    copies while it is still usable.
  * Logging: when the deliver_time selector ise set, include the DT= field
    on delivery deferred (==) and failed (**) lines (if a delivery was
    attemtped).  Previously it was only on completion (=&gt;) lines.
  * Authentication: the gsasl driver not provides the $authN variables in time
    for the expansion of the server_scram_iter and server_scram_salt options.</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1578916800">- add a spec-file workaround for bsc#1160726</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1585742400">- don't create logfiles during install
  * fixes CVE-2020-8015 (bsc#1154183)</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1589284800">- bring changes from current in +fixes branch
  (patch-exim-fixes-ee83de04d3087efaf808d1f2235a988275c2ee94)
  * fixes CVE-2020-12783 (bsc#1171490)
  * Regard command-line recipients as tainted.
  * Bug 2489: Fix crash in the "pam" expansion condition.
  * Use tainted buffers for the transport smtp context.
  * Bug 2493: Harden ARC verify against Outlook, which has been seen to mix
    the ordering of its ARC headers.  This caused a crash.
  * Bug 2492: Use tainted memory for retry record when needed.  Previously when
    a new record was being constructed with information from the peer, a trap
    was taken.
  * Bug 2494: Unset the default for dmarc_tld_file.
  * Fix an uninitialised flag in early-pipelining.  Previously connections
    could, depending on the platform, hang at the STARTTLS response.
  * Bug 2498: Reset a counter used for ARC verify before handling another
    message on a connection.  Previously if one message had ARC headers and
    the following one did not, a crash could result when adding an
    Authentication-Results: header.
  * Bug 2500: Rewind some of the common-coding in string handling between the
    Exim main code and Exim-related utities.
  * Fix the variables set by the gsasl authenticator.
  * Bug 2507: Modules: on handling a dynamic-module (lookups) open failure,
    only retrieve the errormessage once.
  * Bug 2501: Fix init call in the heimdal authenticator.  Previously it
    adjusted the size of a major service buffer; this failed because the
    buffer was in use at the time.  Change to a compile-time increase in the
    buffer size, when this authenticator is compiled into exim.</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1589889600">- switch pretrans to use lua
  (fixes bsc#1171877)</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1591099200">- update to exim 4.94
  * some transports now refuse to use tainted data in constructing their delivery
    location
    this WILL BREAK configurations which are not updated accordingly.
    In particular: any Transport use of $local_user which has been relying upon
    check_local_user far away in the Router to make it safe, should be updated to
    replace $local_user with $local_part_data.
  * Attempting to remove, in router or transport, a header name that ends with
    an asterisk (which is a standards-legal name) will now result in all headers
    named starting with the string before the asterisk being removed.</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1591617600">- bring in changes from current +fixes (lots of taint check fixes)
  * Bug 1329: Fix format of Maildir-format filenames to match other mail-
    related applications.  Previously an "H" was used where available info
    says that "M" should be, so change to match.
  * Bug 2587: Fix pam expansion condition.  Tainted values are commonly used
    as arguments, so an implementation trying to copy these into a local
    buffer was taking a taint-enforcement trap.  Fix by using dynamically
    created buffers.
  * Bug 2586: Fix listcount expansion operator.  Using tainted arguments is
    reasonable, eg. to count headers.  Fix by using dynamically created
    buffers rather than a local.  Do similar fixes for ACL actions "dcc",
    "log_reject_target", "malware" and "spam"; the arguments are expanded
    so could be handling tainted values.
  * Bug 2590: Fix -bi (newaliases).  A previous code rearrangement had
    broken the (no-op) support for this sendmail command.  Restore it
    to doing nothing, silently, and returning good status.</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1598270400">- bring back missing exim_db.8 manual page
  (fixes bsc#1173693)</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1619611200">- update to exim-4.94.1
  * Fix security issue in BDAT state confusion.
    Ensure we reset known-good where we know we need to not be reading BDAT
    data, as a general case fix, and move the places where we switch to BDAT
    mode until after various protocol state checks.
    Fixes CVE-2020-BDATA reported by Qualys.
  * Fix security issue in SMTP verb option parsing (CVE-2020-EXOPT)
  * Fix security issue with too many recipients on a message (to remove a
    known security problem if someone does set recipients_max to unlimited,
    or if local additions add to the recipient list).
    Fixes CVE-2020-RCPTL reported by Qualys.
  * Fix CVE-2020-28016 (PFPZA): Heap out-of-bounds write in parse_fix_phrase()
  * Fix security issue CVE-2020-PFPSN and guard against cmdline invoker
    providing a particularly obnoxious sender full name.
  * Fix Linux security issue CVE-2020-SLCWD and guard against PATH_MAX
    better.</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1620129600">- update to exim-4.94.2
  security update (bsc#1185631)
  * CVE-2020-28007: Link attack in Exim's log directory
  * CVE-2020-28008: Assorted attacks in Exim's spool directory
  * CVE-2020-28014: Arbitrary PID file creation
  * CVE-2020-28011: Heap buffer overflow in queue_run()
  * CVE-2020-28010: Heap out-of-bounds write in main()
  * CVE-2020-28013: Heap buffer overflow in parse_fix_phrase()
  * CVE-2020-28016: Heap out-of-bounds write in parse_fix_phrase()
  * CVE-2020-28015: New-line injection into spool header file (local)
  * CVE-2020-28012: Missing close-on-exec flag for privileged pipe
  * CVE-2020-28009: Integer overflow in get_stdinput()
  * CVE-2020-28017: Integer overflow in receive_add_recipient()
  * CVE-2020-28020: Integer overflow in receive_msg()
  * CVE-2020-28023: Out-of-bounds read in smtp_setup_msg()
  * CVE-2020-28021: New-line injection into spool header file (remote)
  * CVE-2020-28022: Heap out-of-bounds read and write in extract_option()
  * CVE-2020-28026: Line truncation and injection in spool_read_header()
  * CVE-2020-28019: Failure to reset function pointer after BDAT error
  * CVE-2020-28024: Heap buffer underflow in smtp_ungetc()
  * CVE-2020-28018: Use-after-free in tls-openssl.c
  * CVE-2020-28025: Heap out-of-bounds read in pdkim_finish_bodyhash()</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1666094400">- add patch-cve-2022-3559 (fixes CVE-2022-3559, bsc#1204427, Bug 2915)</changelog>
</package>
<package pkgid="7cc068ff5d30f7595c9a14f07207e3a3470d723bb6a3630487a0756dd3b1b0e9" name="exim" arch="src">
  <version epoch="0" ver="4.94.2" rel="bp154.2.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1521115200">- Replace xorg-x11-devel by individual pkgconfig() buildrequires.</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1523880000">- update to 4.91
  * DEFER rather than ERROR on redis cluster MOVED response.
  * Catch and remove uninitialized value warning in exiqsumm
  * Disallow '/' characters in queue names specified for the "queue=" ACL
    modifier.  This matches the restriction on the commandline.
  * Fix pgsql lookup for multiple result-tuples with a single column.
    Previously only the last row was returned.
  * Bug 2217: Tighten up the parsing of DKIM signature headers.
  * Bug 2215: Fix crash associated with dnsdb lookup done from DKIM ACL.
  * Fix issue with continued-connections when the DNS shifts unreliably.
  * Bug 2214: Fix SMTP responses resulting from non-accept result of MIME ACL.
  * The "support for" informational output now, which built with Content
  Scanning support, has a line for the malware scanner interfaces compiled
  in.  Interface can be individually included or not at build time.
  * The "aveserver", "kavdaemon" and "mksd" interfaces are now not included
  by the template makefile "src/EDITME".  The "STREAM" support for an older
  ClamAV interface method is removed.
  * Bug 2223: Fix mysql lookup returns for the no-data case (when the number of
  rows affected is given instead).
  * The runtime Berkeley DB library version is now additionally output by
  "exim -d -bV".  Previously only the compile-time version was shown.
  * Bug 2230: Fix cutthrough routing for nonfirst messages in an initiating
  SMTP connection.
  * Bug 2229: Fix cutthrough routing for nonstandard port numbers defined by
  routers.
  * Bug 2174: A timeout on connect for a callout was also erroneously seen as
  a timeout on read on a GnuTLS initiating connection, resulting in the
  initiating connection being dropped.
  * Relax results from ACL control request to enable cutthrough, in
  unsupported situations, from error to silently (except under debug)
  ignoring.
  * Fix Buffer overflow in base64d() (CVE-2018-6789)
  * Fix bug in DKIM verify: a buffer overflow could corrupt the malloc
  metadata, resulting in a crash in free().
  * Fix broken Heimdal GSSAPI authenticator integration.
  * Bug 2113: Fix conversation closedown with the Avast malware scanner.
  * Bug 2239: Enforce non-usability of control=utf8_downconvert in the mail ACL.
  * Speed up macro lookups during configuration file read, by skipping non-
  macro text after a replacement (previously it was only once per line) and
  by skipping builtin macros when searching for an uppercase lead character.
  * DANE support moved from Experimental to mainline.  The Makefile control
  for the build is renamed.
  * Fix memory leak during multi-message connections using STARTTLS.
  * Bug 2236: When a DKIM verification result is overridden by ACL, DMARC
  reported the original.  Fix to report (as far as possible) the ACL
  result replacing the original.
  * Fix memory leak during multi-message connections using STARTTLS under
  OpenSSL
  * Bug 2242: Fix exim_dbmbuild to permit directoryless filenames.
  * Fix utf8_downconvert propagation through a redirect router.
  * Bug 2253: For logging delivery lines under PRDR, append the overall
  DATA response info to the (existing) per-recipient response info for
  the "C=" log element.
  * Bug 2251: Fix ldap lookups that return a single attribute having zero-
  length value.
  * Support Avast multiline protocol, this allows passing flags to
  newer versions of the scanner.
  * Ensure that variables possibly set during message acceptance are marked
    dead before release of memory in the daemon loop.
  * Bug 2250: Fix a longstanding bug in heavily-pipelined SMTP input (such
  as a multi-recipient message from a mailinglist manager).
  * The (EXPERIMENTAL_DMARC) variable $dmarc_ar_header is withdrawn, being
  replaced by the ${authresults } expansion.
  * Bug 2257: Fix pipe transport to not use a socket-only syscall.
  * Set a handler for SIGTERM and call exit(3) if running as PID 1. This
  allows proper process termination in container environments.
  * Bug 2258: Fix spool_wireformat in combination with LMTP transport.
  Previously the "final dot" had a newline after it; ensure it is CR,LF.
  * SPF: remove support for the "spf" ACL condition outcome values "err_temp"
  and "err_perm", deprecated since 4.83 when the RFC-defined words
  " temperror" and "permerror" were introduced.
  * Re-introduce enforcement of no cutthrough delivery on transports having
  transport-filters or DKIM-signing.
  * Cutthrough: for a final-dot response timeout (and nonunderstood responses)
  in defer=pass mode supply a 450 to the initiator.  Previously the message
    would be spooled.
  * DANE: add dane_require_tls_ciphers SMTP Transport option; if unset,
    tls_require_ciphers is used as before.
  * Malware Avast: Better match the Avast multiline protocol.
  * Fix reinitialisation of DKIM logging variable between messages.
  * Bug 2255: Revert the disable of the OpenSSL session caching.
  * Add util/renew-opendmarc-tlds.sh script for safe renewal of public
  suffix list.
  * DKIM: accept Ed25519 pubkeys in SubjectPublicKeyInfo-wrapped form,
  since the IETF WG has not yet settled on that versus the original
  "bare" representation.
  * Fix syslog logging for syslog_timestamp=no and log_selector +millisec.
  Previously the millisecond value corrupted the output.
  Fix also for syslog_pid=no and log_selector +pid, for which the pid
  corrupted the output.</changelog>
  <changelog author="seanlew@opensuse.org" date="1553342400">- update to exim 4.92
  * ${l_header:&lt;name&gt;} expansion
  * ${readsocket} now supports TLS
  * "utf8_downconvert" option (if built with SUPPORT_I18N)
  * "pipelining" log_selector
  * JSON variants for ${extract } expansion
  * "noutf8" debug option
  * TCP Fast Open support on MacOS
  * CVE-2019-10149: Fixed a Remote Command Execution (bsc#1136587)
- add workaround patch for compile time error on missing printf
  format annotation (gnu_printf.patch)</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1559736000">- spec file cleanup
  * fix DANE inclusion guard condition
  * re-enable i18n and remove misleading comment
  * EXPERIMENTAL_SPF is now SUPPORT_SPF
  * DANE is now SUPPORT_DANE</changelog>
  <changelog author="alex &lt;atoptsoglou@suse.com&gt;" date="1564056000">- update to exim 4.92.1
  * CVE-2019-13917: Fixed an issue with ${sort} expansion which could
  allow remote attackers to execute other programs with root privileges
  (boo#1142207)</changelog>
  <changelog author="poeml@cmdline.net" date="1567857600">- update to exim 4.92.2
  * CVE-2019-15846: fix against remote attackers executing arbitrary code as
    root via a trailing backslash</changelog>
  <changelog author="poeml@cmdline.net" date="1569844800">- update to exim 4.92.3
  * CVE-2019-16928: fix against Heap-based buffer overflow in string_vformat,
    remote code execution seems to be possible</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1575892800">- update to exim 4.93
  * SUPPORT_DMARC replaces EXPERIMENTAL_DMARC
  * DISABLE_TLS replaces SUPPORT_TLS
  * Bump the version for the local_scan API.
  * smtp transport option hosts_try_fastopen defaults to "*".
  * DNSSec is requested (not required) for all queries. (This seemes to
    ask for trouble if your resolver is a systemd-resolved.)
  * Generic router option retry_use_local_part defaults to "true" under specific
    pre-conditions.
  * Introduce a tainting mechanism for values read from untrusted sources.
  * Use longer file names for temporary spool files (this avoids
    name conflicts with spool on a shared file system).
  * Use dsn_from main config option (was ignored previously).</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1577966400">spec file cleanup to make update work
- add docdir to spec</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1578398400">- update to exim 4.93.0.4 (+fixes release)
  * Avoid costly startup code when not strictly needed.  This reduces time
    for some exim process initialisations.  It does mean that the logging
    of TLS configuration problems is only done for the daemon startup.
  * Early-pipelining support code is now included unless disabled in Makefile.
  * DKIM verification defaults no long accept sha1 hashes, to conform to
    RFC 8301.  They can still be enabled, using the dkim_verify_hashes main
    option.
  * Support CHUNKING from an smtp transport using a transport_filter, when
    DKIM signing is being done.  Previously a transport_filter would always
    disable CHUNKING, falling back to traditional DATA.
  * Regard command-line receipients as tainted.
  * Bug 340: Remove the daemon pid file on exit, whe due to SIGTERM.
  * Bug 2489: Fix crash in the "pam" expansion condition.  It seems that the
    PAM library frees one of the arguments given to it, despite the
    documentation.  Therefore a plain malloc must be used.
  * Bug 2491: Use tainted buffers for the transport smtp context.  Previously
    on-stack buffers were used, resulting in a taint trap when DSN information
    copied from a received message was written into the buffer.
  * Bug 2493: Harden ARC verify against Outlook, whick has been seen to mix
    the ordering of its ARC headers.  This caused a crash.
  * Bug 2492: Use tainted memory for retry record when needed.  Previously when
    a new record was being constructed with information from the peer, a trap
    was taken.
  * Bug 2494: Unset the default for dmarc_tld_file.  Previously a naiive
    installation would get error messages from DMARC verify, when it hit the
    nonexistent file indicated by the default.  Distros wanting DMARC enabled
    should both provide the file and set the option.
    Also enforce no DMARC verification for command-line sourced messages.
  * Fix an uninitialised flag in early-pipelining.  Previously connections
    could, depending on the platform, hang at the STARTTLS response.
  * Bug 2498: Reset a counter used for ARC verify before handling another
    message on a connection.  Previously if one message had ARC headers and
    the following one did not, a crash could result when adding an
    Authentication-Results: header.
  * Bug 2500: Rewind some of the common-coding in string handling between the
    Exim main code and Exim-related utities.  The introduction of taint
    tracking also did many adjustments to string handling.  Since then, eximon
    frequently terminated with an assert failure.
  * When PIPELINING, synch after every hundred or so RCPT commands sent and
    check for 452 responses.  This slightly helps the inefficieny of doing
    a large alias-expansion into a recipient-limited target.  The max_rcpt
    transport option still applies (and at the current default, will override
    the new feature).  The check is done for either cause of synch, and forces
    a fast-retry of all 452'd recipients using a new MAIL FROM on the same
    connection.  The new facility is not tunable at this time.
  * Fix the variables set by the gsasl authenticator.  Previously a pointer to
    library live data was being used, so the results became garbage.  Make
    copies while it is still usable.
  * Logging: when the deliver_time selector ise set, include the DT= field
    on delivery deferred (==) and failed (**) lines (if a delivery was
    attemtped).  Previously it was only on completion (=&gt;) lines.
  * Authentication: the gsasl driver not provides the $authN variables in time
    for the expansion of the server_scram_iter and server_scram_salt options.</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1578916800">- add a spec-file workaround for bsc#1160726</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1585742400">- don't create logfiles during install
  * fixes CVE-2020-8015 (bsc#1154183)</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1589284800">- bring changes from current in +fixes branch
  (patch-exim-fixes-ee83de04d3087efaf808d1f2235a988275c2ee94)
  * fixes CVE-2020-12783 (bsc#1171490)
  * Regard command-line recipients as tainted.
  * Bug 2489: Fix crash in the "pam" expansion condition.
  * Use tainted buffers for the transport smtp context.
  * Bug 2493: Harden ARC verify against Outlook, which has been seen to mix
    the ordering of its ARC headers.  This caused a crash.
  * Bug 2492: Use tainted memory for retry record when needed.  Previously when
    a new record was being constructed with information from the peer, a trap
    was taken.
  * Bug 2494: Unset the default for dmarc_tld_file.
  * Fix an uninitialised flag in early-pipelining.  Previously connections
    could, depending on the platform, hang at the STARTTLS response.
  * Bug 2498: Reset a counter used for ARC verify before handling another
    message on a connection.  Previously if one message had ARC headers and
    the following one did not, a crash could result when adding an
    Authentication-Results: header.
  * Bug 2500: Rewind some of the common-coding in string handling between the
    Exim main code and Exim-related utities.
  * Fix the variables set by the gsasl authenticator.
  * Bug 2507: Modules: on handling a dynamic-module (lookups) open failure,
    only retrieve the errormessage once.
  * Bug 2501: Fix init call in the heimdal authenticator.  Previously it
    adjusted the size of a major service buffer; this failed because the
    buffer was in use at the time.  Change to a compile-time increase in the
    buffer size, when this authenticator is compiled into exim.</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1589889600">- switch pretrans to use lua
  (fixes bsc#1171877)</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1591099200">- update to exim 4.94
  * some transports now refuse to use tainted data in constructing their delivery
    location
    this WILL BREAK configurations which are not updated accordingly.
    In particular: any Transport use of $local_user which has been relying upon
    check_local_user far away in the Router to make it safe, should be updated to
    replace $local_user with $local_part_data.
  * Attempting to remove, in router or transport, a header name that ends with
    an asterisk (which is a standards-legal name) will now result in all headers
    named starting with the string before the asterisk being removed.</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1591617600">- bring in changes from current +fixes (lots of taint check fixes)
  * Bug 1329: Fix format of Maildir-format filenames to match other mail-
    related applications.  Previously an "H" was used where available info
    says that "M" should be, so change to match.
  * Bug 2587: Fix pam expansion condition.  Tainted values are commonly used
    as arguments, so an implementation trying to copy these into a local
    buffer was taking a taint-enforcement trap.  Fix by using dynamically
    created buffers.
  * Bug 2586: Fix listcount expansion operator.  Using tainted arguments is
    reasonable, eg. to count headers.  Fix by using dynamically created
    buffers rather than a local.  Do similar fixes for ACL actions "dcc",
    "log_reject_target", "malware" and "spam"; the arguments are expanded
    so could be handling tainted values.
  * Bug 2590: Fix -bi (newaliases).  A previous code rearrangement had
    broken the (no-op) support for this sendmail command.  Restore it
    to doing nothing, silently, and returning good status.</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1598270400">- bring back missing exim_db.8 manual page
  (fixes bsc#1173693)</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1619611200">- update to exim-4.94.1
  * Fix security issue in BDAT state confusion.
    Ensure we reset known-good where we know we need to not be reading BDAT
    data, as a general case fix, and move the places where we switch to BDAT
    mode until after various protocol state checks.
    Fixes CVE-2020-BDATA reported by Qualys.
  * Fix security issue in SMTP verb option parsing (CVE-2020-EXOPT)
  * Fix security issue with too many recipients on a message (to remove a
    known security problem if someone does set recipients_max to unlimited,
    or if local additions add to the recipient list).
    Fixes CVE-2020-RCPTL reported by Qualys.
  * Fix CVE-2020-28016 (PFPZA): Heap out-of-bounds write in parse_fix_phrase()
  * Fix security issue CVE-2020-PFPSN and guard against cmdline invoker
    providing a particularly obnoxious sender full name.
  * Fix Linux security issue CVE-2020-SLCWD and guard against PATH_MAX
    better.</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1620129600">- update to exim-4.94.2
  security update (bsc#1185631)
  * CVE-2020-28007: Link attack in Exim's log directory
  * CVE-2020-28008: Assorted attacks in Exim's spool directory
  * CVE-2020-28014: Arbitrary PID file creation
  * CVE-2020-28011: Heap buffer overflow in queue_run()
  * CVE-2020-28010: Heap out-of-bounds write in main()
  * CVE-2020-28013: Heap buffer overflow in parse_fix_phrase()
  * CVE-2020-28016: Heap out-of-bounds write in parse_fix_phrase()
  * CVE-2020-28015: New-line injection into spool header file (local)
  * CVE-2020-28012: Missing close-on-exec flag for privileged pipe
  * CVE-2020-28009: Integer overflow in get_stdinput()
  * CVE-2020-28017: Integer overflow in receive_add_recipient()
  * CVE-2020-28020: Integer overflow in receive_msg()
  * CVE-2020-28023: Out-of-bounds read in smtp_setup_msg()
  * CVE-2020-28021: New-line injection into spool header file (remote)
  * CVE-2020-28022: Heap out-of-bounds read and write in extract_option()
  * CVE-2020-28026: Line truncation and injection in spool_read_header()
  * CVE-2020-28019: Failure to reset function pointer after BDAT error
  * CVE-2020-28024: Heap buffer underflow in smtp_ungetc()
  * CVE-2020-28018: Use-after-free in tls-openssl.c
  * CVE-2020-28025: Heap out-of-bounds read in pdkim_finish_bodyhash()</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1666094400">- add patch-cve-2022-3559 (fixes CVE-2022-3559, bsc#1204427, Bug 2915)</changelog>
</package>
<package pkgid="d6995a3ce934ca1bc776d135df193a5ff4f30112a528d2344b638a3933a98432" name="exim" arch="x86_64">
  <version epoch="0" ver="4.94.2" rel="bp154.2.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1521115200">- Replace xorg-x11-devel by individual pkgconfig() buildrequires.</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1523880000">- update to 4.91
  * DEFER rather than ERROR on redis cluster MOVED response.
  * Catch and remove uninitialized value warning in exiqsumm
  * Disallow '/' characters in queue names specified for the "queue=" ACL
    modifier.  This matches the restriction on the commandline.
  * Fix pgsql lookup for multiple result-tuples with a single column.
    Previously only the last row was returned.
  * Bug 2217: Tighten up the parsing of DKIM signature headers.
  * Bug 2215: Fix crash associated with dnsdb lookup done from DKIM ACL.
  * Fix issue with continued-connections when the DNS shifts unreliably.
  * Bug 2214: Fix SMTP responses resulting from non-accept result of MIME ACL.
  * The "support for" informational output now, which built with Content
  Scanning support, has a line for the malware scanner interfaces compiled
  in.  Interface can be individually included or not at build time.
  * The "aveserver", "kavdaemon" and "mksd" interfaces are now not included
  by the template makefile "src/EDITME".  The "STREAM" support for an older
  ClamAV interface method is removed.
  * Bug 2223: Fix mysql lookup returns for the no-data case (when the number of
  rows affected is given instead).
  * The runtime Berkeley DB library version is now additionally output by
  "exim -d -bV".  Previously only the compile-time version was shown.
  * Bug 2230: Fix cutthrough routing for nonfirst messages in an initiating
  SMTP connection.
  * Bug 2229: Fix cutthrough routing for nonstandard port numbers defined by
  routers.
  * Bug 2174: A timeout on connect for a callout was also erroneously seen as
  a timeout on read on a GnuTLS initiating connection, resulting in the
  initiating connection being dropped.
  * Relax results from ACL control request to enable cutthrough, in
  unsupported situations, from error to silently (except under debug)
  ignoring.
  * Fix Buffer overflow in base64d() (CVE-2018-6789)
  * Fix bug in DKIM verify: a buffer overflow could corrupt the malloc
  metadata, resulting in a crash in free().
  * Fix broken Heimdal GSSAPI authenticator integration.
  * Bug 2113: Fix conversation closedown with the Avast malware scanner.
  * Bug 2239: Enforce non-usability of control=utf8_downconvert in the mail ACL.
  * Speed up macro lookups during configuration file read, by skipping non-
  macro text after a replacement (previously it was only once per line) and
  by skipping builtin macros when searching for an uppercase lead character.
  * DANE support moved from Experimental to mainline.  The Makefile control
  for the build is renamed.
  * Fix memory leak during multi-message connections using STARTTLS.
  * Bug 2236: When a DKIM verification result is overridden by ACL, DMARC
  reported the original.  Fix to report (as far as possible) the ACL
  result replacing the original.
  * Fix memory leak during multi-message connections using STARTTLS under
  OpenSSL
  * Bug 2242: Fix exim_dbmbuild to permit directoryless filenames.
  * Fix utf8_downconvert propagation through a redirect router.
  * Bug 2253: For logging delivery lines under PRDR, append the overall
  DATA response info to the (existing) per-recipient response info for
  the "C=" log element.
  * Bug 2251: Fix ldap lookups that return a single attribute having zero-
  length value.
  * Support Avast multiline protocol, this allows passing flags to
  newer versions of the scanner.
  * Ensure that variables possibly set during message acceptance are marked
    dead before release of memory in the daemon loop.
  * Bug 2250: Fix a longstanding bug in heavily-pipelined SMTP input (such
  as a multi-recipient message from a mailinglist manager).
  * The (EXPERIMENTAL_DMARC) variable $dmarc_ar_header is withdrawn, being
  replaced by the ${authresults } expansion.
  * Bug 2257: Fix pipe transport to not use a socket-only syscall.
  * Set a handler for SIGTERM and call exit(3) if running as PID 1. This
  allows proper process termination in container environments.
  * Bug 2258: Fix spool_wireformat in combination with LMTP transport.
  Previously the "final dot" had a newline after it; ensure it is CR,LF.
  * SPF: remove support for the "spf" ACL condition outcome values "err_temp"
  and "err_perm", deprecated since 4.83 when the RFC-defined words
  " temperror" and "permerror" were introduced.
  * Re-introduce enforcement of no cutthrough delivery on transports having
  transport-filters or DKIM-signing.
  * Cutthrough: for a final-dot response timeout (and nonunderstood responses)
  in defer=pass mode supply a 450 to the initiator.  Previously the message
    would be spooled.
  * DANE: add dane_require_tls_ciphers SMTP Transport option; if unset,
    tls_require_ciphers is used as before.
  * Malware Avast: Better match the Avast multiline protocol.
  * Fix reinitialisation of DKIM logging variable between messages.
  * Bug 2255: Revert the disable of the OpenSSL session caching.
  * Add util/renew-opendmarc-tlds.sh script for safe renewal of public
  suffix list.
  * DKIM: accept Ed25519 pubkeys in SubjectPublicKeyInfo-wrapped form,
  since the IETF WG has not yet settled on that versus the original
  "bare" representation.
  * Fix syslog logging for syslog_timestamp=no and log_selector +millisec.
  Previously the millisecond value corrupted the output.
  Fix also for syslog_pid=no and log_selector +pid, for which the pid
  corrupted the output.</changelog>
  <changelog author="seanlew@opensuse.org" date="1553342400">- update to exim 4.92
  * ${l_header:&lt;name&gt;} expansion
  * ${readsocket} now supports TLS
  * "utf8_downconvert" option (if built with SUPPORT_I18N)
  * "pipelining" log_selector
  * JSON variants for ${extract } expansion
  * "noutf8" debug option
  * TCP Fast Open support on MacOS
  * CVE-2019-10149: Fixed a Remote Command Execution (bsc#1136587)
- add workaround patch for compile time error on missing printf
  format annotation (gnu_printf.patch)</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1559736000">- spec file cleanup
  * fix DANE inclusion guard condition
  * re-enable i18n and remove misleading comment
  * EXPERIMENTAL_SPF is now SUPPORT_SPF
  * DANE is now SUPPORT_DANE</changelog>
  <changelog author="alex &lt;atoptsoglou@suse.com&gt;" date="1564056000">- update to exim 4.92.1
  * CVE-2019-13917: Fixed an issue with ${sort} expansion which could
  allow remote attackers to execute other programs with root privileges
  (boo#1142207)</changelog>
  <changelog author="poeml@cmdline.net" date="1567857600">- update to exim 4.92.2
  * CVE-2019-15846: fix against remote attackers executing arbitrary code as
    root via a trailing backslash</changelog>
  <changelog author="poeml@cmdline.net" date="1569844800">- update to exim 4.92.3
  * CVE-2019-16928: fix against Heap-based buffer overflow in string_vformat,
    remote code execution seems to be possible</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1575892800">- update to exim 4.93
  * SUPPORT_DMARC replaces EXPERIMENTAL_DMARC
  * DISABLE_TLS replaces SUPPORT_TLS
  * Bump the version for the local_scan API.
  * smtp transport option hosts_try_fastopen defaults to "*".
  * DNSSec is requested (not required) for all queries. (This seemes to
    ask for trouble if your resolver is a systemd-resolved.)
  * Generic router option retry_use_local_part defaults to "true" under specific
    pre-conditions.
  * Introduce a tainting mechanism for values read from untrusted sources.
  * Use longer file names for temporary spool files (this avoids
    name conflicts with spool on a shared file system).
  * Use dsn_from main config option (was ignored previously).</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1577966400">spec file cleanup to make update work
- add docdir to spec</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1578398400">- update to exim 4.93.0.4 (+fixes release)
  * Avoid costly startup code when not strictly needed.  This reduces time
    for some exim process initialisations.  It does mean that the logging
    of TLS configuration problems is only done for the daemon startup.
  * Early-pipelining support code is now included unless disabled in Makefile.
  * DKIM verification defaults no long accept sha1 hashes, to conform to
    RFC 8301.  They can still be enabled, using the dkim_verify_hashes main
    option.
  * Support CHUNKING from an smtp transport using a transport_filter, when
    DKIM signing is being done.  Previously a transport_filter would always
    disable CHUNKING, falling back to traditional DATA.
  * Regard command-line receipients as tainted.
  * Bug 340: Remove the daemon pid file on exit, whe due to SIGTERM.
  * Bug 2489: Fix crash in the "pam" expansion condition.  It seems that the
    PAM library frees one of the arguments given to it, despite the
    documentation.  Therefore a plain malloc must be used.
  * Bug 2491: Use tainted buffers for the transport smtp context.  Previously
    on-stack buffers were used, resulting in a taint trap when DSN information
    copied from a received message was written into the buffer.
  * Bug 2493: Harden ARC verify against Outlook, whick has been seen to mix
    the ordering of its ARC headers.  This caused a crash.
  * Bug 2492: Use tainted memory for retry record when needed.  Previously when
    a new record was being constructed with information from the peer, a trap
    was taken.
  * Bug 2494: Unset the default for dmarc_tld_file.  Previously a naiive
    installation would get error messages from DMARC verify, when it hit the
    nonexistent file indicated by the default.  Distros wanting DMARC enabled
    should both provide the file and set the option.
    Also enforce no DMARC verification for command-line sourced messages.
  * Fix an uninitialised flag in early-pipelining.  Previously connections
    could, depending on the platform, hang at the STARTTLS response.
  * Bug 2498: Reset a counter used for ARC verify before handling another
    message on a connection.  Previously if one message had ARC headers and
    the following one did not, a crash could result when adding an
    Authentication-Results: header.
  * Bug 2500: Rewind some of the common-coding in string handling between the
    Exim main code and Exim-related utities.  The introduction of taint
    tracking also did many adjustments to string handling.  Since then, eximon
    frequently terminated with an assert failure.
  * When PIPELINING, synch after every hundred or so RCPT commands sent and
    check for 452 responses.  This slightly helps the inefficieny of doing
    a large alias-expansion into a recipient-limited target.  The max_rcpt
    transport option still applies (and at the current default, will override
    the new feature).  The check is done for either cause of synch, and forces
    a fast-retry of all 452'd recipients using a new MAIL FROM on the same
    connection.  The new facility is not tunable at this time.
  * Fix the variables set by the gsasl authenticator.  Previously a pointer to
    library live data was being used, so the results became garbage.  Make
    copies while it is still usable.
  * Logging: when the deliver_time selector ise set, include the DT= field
    on delivery deferred (==) and failed (**) lines (if a delivery was
    attemtped).  Previously it was only on completion (=&gt;) lines.
  * Authentication: the gsasl driver not provides the $authN variables in time
    for the expansion of the server_scram_iter and server_scram_salt options.</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1578916800">- add a spec-file workaround for bsc#1160726</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1585742400">- don't create logfiles during install
  * fixes CVE-2020-8015 (bsc#1154183)</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1589284800">- bring changes from current in +fixes branch
  (patch-exim-fixes-ee83de04d3087efaf808d1f2235a988275c2ee94)
  * fixes CVE-2020-12783 (bsc#1171490)
  * Regard command-line recipients as tainted.
  * Bug 2489: Fix crash in the "pam" expansion condition.
  * Use tainted buffers for the transport smtp context.
  * Bug 2493: Harden ARC verify against Outlook, which has been seen to mix
    the ordering of its ARC headers.  This caused a crash.
  * Bug 2492: Use tainted memory for retry record when needed.  Previously when
    a new record was being constructed with information from the peer, a trap
    was taken.
  * Bug 2494: Unset the default for dmarc_tld_file.
  * Fix an uninitialised flag in early-pipelining.  Previously connections
    could, depending on the platform, hang at the STARTTLS response.
  * Bug 2498: Reset a counter used for ARC verify before handling another
    message on a connection.  Previously if one message had ARC headers and
    the following one did not, a crash could result when adding an
    Authentication-Results: header.
  * Bug 2500: Rewind some of the common-coding in string handling between the
    Exim main code and Exim-related utities.
  * Fix the variables set by the gsasl authenticator.
  * Bug 2507: Modules: on handling a dynamic-module (lookups) open failure,
    only retrieve the errormessage once.
  * Bug 2501: Fix init call in the heimdal authenticator.  Previously it
    adjusted the size of a major service buffer; this failed because the
    buffer was in use at the time.  Change to a compile-time increase in the
    buffer size, when this authenticator is compiled into exim.</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1589889600">- switch pretrans to use lua
  (fixes bsc#1171877)</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1591099200">- update to exim 4.94
  * some transports now refuse to use tainted data in constructing their delivery
    location
    this WILL BREAK configurations which are not updated accordingly.
    In particular: any Transport use of $local_user which has been relying upon
    check_local_user far away in the Router to make it safe, should be updated to
    replace $local_user with $local_part_data.
  * Attempting to remove, in router or transport, a header name that ends with
    an asterisk (which is a standards-legal name) will now result in all headers
    named starting with the string before the asterisk being removed.</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1591617600">- bring in changes from current +fixes (lots of taint check fixes)
  * Bug 1329: Fix format of Maildir-format filenames to match other mail-
    related applications.  Previously an "H" was used where available info
    says that "M" should be, so change to match.
  * Bug 2587: Fix pam expansion condition.  Tainted values are commonly used
    as arguments, so an implementation trying to copy these into a local
    buffer was taking a taint-enforcement trap.  Fix by using dynamically
    created buffers.
  * Bug 2586: Fix listcount expansion operator.  Using tainted arguments is
    reasonable, eg. to count headers.  Fix by using dynamically created
    buffers rather than a local.  Do similar fixes for ACL actions "dcc",
    "log_reject_target", "malware" and "spam"; the arguments are expanded
    so could be handling tainted values.
  * Bug 2590: Fix -bi (newaliases).  A previous code rearrangement had
    broken the (no-op) support for this sendmail command.  Restore it
    to doing nothing, silently, and returning good status.</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1598270400">- bring back missing exim_db.8 manual page
  (fixes bsc#1173693)</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1619611200">- update to exim-4.94.1
  * Fix security issue in BDAT state confusion.
    Ensure we reset known-good where we know we need to not be reading BDAT
    data, as a general case fix, and move the places where we switch to BDAT
    mode until after various protocol state checks.
    Fixes CVE-2020-BDATA reported by Qualys.
  * Fix security issue in SMTP verb option parsing (CVE-2020-EXOPT)
  * Fix security issue with too many recipients on a message (to remove a
    known security problem if someone does set recipients_max to unlimited,
    or if local additions add to the recipient list).
    Fixes CVE-2020-RCPTL reported by Qualys.
  * Fix CVE-2020-28016 (PFPZA): Heap out-of-bounds write in parse_fix_phrase()
  * Fix security issue CVE-2020-PFPSN and guard against cmdline invoker
    providing a particularly obnoxious sender full name.
  * Fix Linux security issue CVE-2020-SLCWD and guard against PATH_MAX
    better.</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1620129600">- update to exim-4.94.2
  security update (bsc#1185631)
  * CVE-2020-28007: Link attack in Exim's log directory
  * CVE-2020-28008: Assorted attacks in Exim's spool directory
  * CVE-2020-28014: Arbitrary PID file creation
  * CVE-2020-28011: Heap buffer overflow in queue_run()
  * CVE-2020-28010: Heap out-of-bounds write in main()
  * CVE-2020-28013: Heap buffer overflow in parse_fix_phrase()
  * CVE-2020-28016: Heap out-of-bounds write in parse_fix_phrase()
  * CVE-2020-28015: New-line injection into spool header file (local)
  * CVE-2020-28012: Missing close-on-exec flag for privileged pipe
  * CVE-2020-28009: Integer overflow in get_stdinput()
  * CVE-2020-28017: Integer overflow in receive_add_recipient()
  * CVE-2020-28020: Integer overflow in receive_msg()
  * CVE-2020-28023: Out-of-bounds read in smtp_setup_msg()
  * CVE-2020-28021: New-line injection into spool header file (remote)
  * CVE-2020-28022: Heap out-of-bounds read and write in extract_option()
  * CVE-2020-28026: Line truncation and injection in spool_read_header()
  * CVE-2020-28019: Failure to reset function pointer after BDAT error
  * CVE-2020-28024: Heap buffer underflow in smtp_ungetc()
  * CVE-2020-28018: Use-after-free in tls-openssl.c
  * CVE-2020-28025: Heap out-of-bounds read in pdkim_finish_bodyhash()</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1666094400">- add patch-cve-2022-3559 (fixes CVE-2022-3559, bsc#1204427, Bug 2915)</changelog>
</package>
<package pkgid="a930226f4a8e3b1fdd7efce50a5530e6842bbdf7a5239f60031a2bc52c9d4fd9" name="eximon" arch="aarch64">
  <version epoch="0" ver="4.94.2" rel="bp154.2.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1521115200">- Replace xorg-x11-devel by individual pkgconfig() buildrequires.</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1523880000">- update to 4.91
  * DEFER rather than ERROR on redis cluster MOVED response.
  * Catch and remove uninitialized value warning in exiqsumm
  * Disallow '/' characters in queue names specified for the "queue=" ACL
    modifier.  This matches the restriction on the commandline.
  * Fix pgsql lookup for multiple result-tuples with a single column.
    Previously only the last row was returned.
  * Bug 2217: Tighten up the parsing of DKIM signature headers.
  * Bug 2215: Fix crash associated with dnsdb lookup done from DKIM ACL.
  * Fix issue with continued-connections when the DNS shifts unreliably.
  * Bug 2214: Fix SMTP responses resulting from non-accept result of MIME ACL.
  * The "support for" informational output now, which built with Content
  Scanning support, has a line for the malware scanner interfaces compiled
  in.  Interface can be individually included or not at build time.
  * The "aveserver", "kavdaemon" and "mksd" interfaces are now not included
  by the template makefile "src/EDITME".  The "STREAM" support for an older
  ClamAV interface method is removed.
  * Bug 2223: Fix mysql lookup returns for the no-data case (when the number of
  rows affected is given instead).
  * The runtime Berkeley DB library version is now additionally output by
  "exim -d -bV".  Previously only the compile-time version was shown.
  * Bug 2230: Fix cutthrough routing for nonfirst messages in an initiating
  SMTP connection.
  * Bug 2229: Fix cutthrough routing for nonstandard port numbers defined by
  routers.
  * Bug 2174: A timeout on connect for a callout was also erroneously seen as
  a timeout on read on a GnuTLS initiating connection, resulting in the
  initiating connection being dropped.
  * Relax results from ACL control request to enable cutthrough, in
  unsupported situations, from error to silently (except under debug)
  ignoring.
  * Fix Buffer overflow in base64d() (CVE-2018-6789)
  * Fix bug in DKIM verify: a buffer overflow could corrupt the malloc
  metadata, resulting in a crash in free().
  * Fix broken Heimdal GSSAPI authenticator integration.
  * Bug 2113: Fix conversation closedown with the Avast malware scanner.
  * Bug 2239: Enforce non-usability of control=utf8_downconvert in the mail ACL.
  * Speed up macro lookups during configuration file read, by skipping non-
  macro text after a replacement (previously it was only once per line) and
  by skipping builtin macros when searching for an uppercase lead character.
  * DANE support moved from Experimental to mainline.  The Makefile control
  for the build is renamed.
  * Fix memory leak during multi-message connections using STARTTLS.
  * Bug 2236: When a DKIM verification result is overridden by ACL, DMARC
  reported the original.  Fix to report (as far as possible) the ACL
  result replacing the original.
  * Fix memory leak during multi-message connections using STARTTLS under
  OpenSSL
  * Bug 2242: Fix exim_dbmbuild to permit directoryless filenames.
  * Fix utf8_downconvert propagation through a redirect router.
  * Bug 2253: For logging delivery lines under PRDR, append the overall
  DATA response info to the (existing) per-recipient response info for
  the "C=" log element.
  * Bug 2251: Fix ldap lookups that return a single attribute having zero-
  length value.
  * Support Avast multiline protocol, this allows passing flags to
  newer versions of the scanner.
  * Ensure that variables possibly set during message acceptance are marked
    dead before release of memory in the daemon loop.
  * Bug 2250: Fix a longstanding bug in heavily-pipelined SMTP input (such
  as a multi-recipient message from a mailinglist manager).
  * The (EXPERIMENTAL_DMARC) variable $dmarc_ar_header is withdrawn, being
  replaced by the ${authresults } expansion.
  * Bug 2257: Fix pipe transport to not use a socket-only syscall.
  * Set a handler for SIGTERM and call exit(3) if running as PID 1. This
  allows proper process termination in container environments.
  * Bug 2258: Fix spool_wireformat in combination with LMTP transport.
  Previously the "final dot" had a newline after it; ensure it is CR,LF.
  * SPF: remove support for the "spf" ACL condition outcome values "err_temp"
  and "err_perm", deprecated since 4.83 when the RFC-defined words
  " temperror" and "permerror" were introduced.
  * Re-introduce enforcement of no cutthrough delivery on transports having
  transport-filters or DKIM-signing.
  * Cutthrough: for a final-dot response timeout (and nonunderstood responses)
  in defer=pass mode supply a 450 to the initiator.  Previously the message
    would be spooled.
  * DANE: add dane_require_tls_ciphers SMTP Transport option; if unset,
    tls_require_ciphers is used as before.
  * Malware Avast: Better match the Avast multiline protocol.
  * Fix reinitialisation of DKIM logging variable between messages.
  * Bug 2255: Revert the disable of the OpenSSL session caching.
  * Add util/renew-opendmarc-tlds.sh script for safe renewal of public
  suffix list.
  * DKIM: accept Ed25519 pubkeys in SubjectPublicKeyInfo-wrapped form,
  since the IETF WG has not yet settled on that versus the original
  "bare" representation.
  * Fix syslog logging for syslog_timestamp=no and log_selector +millisec.
  Previously the millisecond value corrupted the output.
  Fix also for syslog_pid=no and log_selector +pid, for which the pid
  corrupted the output.</changelog>
  <changelog author="seanlew@opensuse.org" date="1553342400">- update to exim 4.92
  * ${l_header:&lt;name&gt;} expansion
  * ${readsocket} now supports TLS
  * "utf8_downconvert" option (if built with SUPPORT_I18N)
  * "pipelining" log_selector
  * JSON variants for ${extract } expansion
  * "noutf8" debug option
  * TCP Fast Open support on MacOS
  * CVE-2019-10149: Fixed a Remote Command Execution (bsc#1136587)
- add workaround patch for compile time error on missing printf
  format annotation (gnu_printf.patch)</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1559736000">- spec file cleanup
  * fix DANE inclusion guard condition
  * re-enable i18n and remove misleading comment
  * EXPERIMENTAL_SPF is now SUPPORT_SPF
  * DANE is now SUPPORT_DANE</changelog>
  <changelog author="alex &lt;atoptsoglou@suse.com&gt;" date="1564056000">- update to exim 4.92.1
  * CVE-2019-13917: Fixed an issue with ${sort} expansion which could
  allow remote attackers to execute other programs with root privileges
  (boo#1142207)</changelog>
  <changelog author="poeml@cmdline.net" date="1567857600">- update to exim 4.92.2
  * CVE-2019-15846: fix against remote attackers executing arbitrary code as
    root via a trailing backslash</changelog>
  <changelog author="poeml@cmdline.net" date="1569844800">- update to exim 4.92.3
  * CVE-2019-16928: fix against Heap-based buffer overflow in string_vformat,
    remote code execution seems to be possible</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1575892800">- update to exim 4.93
  * SUPPORT_DMARC replaces EXPERIMENTAL_DMARC
  * DISABLE_TLS replaces SUPPORT_TLS
  * Bump the version for the local_scan API.
  * smtp transport option hosts_try_fastopen defaults to "*".
  * DNSSec is requested (not required) for all queries. (This seemes to
    ask for trouble if your resolver is a systemd-resolved.)
  * Generic router option retry_use_local_part defaults to "true" under specific
    pre-conditions.
  * Introduce a tainting mechanism for values read from untrusted sources.
  * Use longer file names for temporary spool files (this avoids
    name conflicts with spool on a shared file system).
  * Use dsn_from main config option (was ignored previously).</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1577966400">spec file cleanup to make update work
- add docdir to spec</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1578398400">- update to exim 4.93.0.4 (+fixes release)
  * Avoid costly startup code when not strictly needed.  This reduces time
    for some exim process initialisations.  It does mean that the logging
    of TLS configuration problems is only done for the daemon startup.
  * Early-pipelining support code is now included unless disabled in Makefile.
  * DKIM verification defaults no long accept sha1 hashes, to conform to
    RFC 8301.  They can still be enabled, using the dkim_verify_hashes main
    option.
  * Support CHUNKING from an smtp transport using a transport_filter, when
    DKIM signing is being done.  Previously a transport_filter would always
    disable CHUNKING, falling back to traditional DATA.
  * Regard command-line receipients as tainted.
  * Bug 340: Remove the daemon pid file on exit, whe due to SIGTERM.
  * Bug 2489: Fix crash in the "pam" expansion condition.  It seems that the
    PAM library frees one of the arguments given to it, despite the
    documentation.  Therefore a plain malloc must be used.
  * Bug 2491: Use tainted buffers for the transport smtp context.  Previously
    on-stack buffers were used, resulting in a taint trap when DSN information
    copied from a received message was written into the buffer.
  * Bug 2493: Harden ARC verify against Outlook, whick has been seen to mix
    the ordering of its ARC headers.  This caused a crash.
  * Bug 2492: Use tainted memory for retry record when needed.  Previously when
    a new record was being constructed with information from the peer, a trap
    was taken.
  * Bug 2494: Unset the default for dmarc_tld_file.  Previously a naiive
    installation would get error messages from DMARC verify, when it hit the
    nonexistent file indicated by the default.  Distros wanting DMARC enabled
    should both provide the file and set the option.
    Also enforce no DMARC verification for command-line sourced messages.
  * Fix an uninitialised flag in early-pipelining.  Previously connections
    could, depending on the platform, hang at the STARTTLS response.
  * Bug 2498: Reset a counter used for ARC verify before handling another
    message on a connection.  Previously if one message had ARC headers and
    the following one did not, a crash could result when adding an
    Authentication-Results: header.
  * Bug 2500: Rewind some of the common-coding in string handling between the
    Exim main code and Exim-related utities.  The introduction of taint
    tracking also did many adjustments to string handling.  Since then, eximon
    frequently terminated with an assert failure.
  * When PIPELINING, synch after every hundred or so RCPT commands sent and
    check for 452 responses.  This slightly helps the inefficieny of doing
    a large alias-expansion into a recipient-limited target.  The max_rcpt
    transport option still applies (and at the current default, will override
    the new feature).  The check is done for either cause of synch, and forces
    a fast-retry of all 452'd recipients using a new MAIL FROM on the same
    connection.  The new facility is not tunable at this time.
  * Fix the variables set by the gsasl authenticator.  Previously a pointer to
    library live data was being used, so the results became garbage.  Make
    copies while it is still usable.
  * Logging: when the deliver_time selector ise set, include the DT= field
    on delivery deferred (==) and failed (**) lines (if a delivery was
    attemtped).  Previously it was only on completion (=&gt;) lines.
  * Authentication: the gsasl driver not provides the $authN variables in time
    for the expansion of the server_scram_iter and server_scram_salt options.</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1578916800">- add a spec-file workaround for bsc#1160726</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1585742400">- don't create logfiles during install
  * fixes CVE-2020-8015 (bsc#1154183)</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1589284800">- bring changes from current in +fixes branch
  (patch-exim-fixes-ee83de04d3087efaf808d1f2235a988275c2ee94)
  * fixes CVE-2020-12783 (bsc#1171490)
  * Regard command-line recipients as tainted.
  * Bug 2489: Fix crash in the "pam" expansion condition.
  * Use tainted buffers for the transport smtp context.
  * Bug 2493: Harden ARC verify against Outlook, which has been seen to mix
    the ordering of its ARC headers.  This caused a crash.
  * Bug 2492: Use tainted memory for retry record when needed.  Previously when
    a new record was being constructed with information from the peer, a trap
    was taken.
  * Bug 2494: Unset the default for dmarc_tld_file.
  * Fix an uninitialised flag in early-pipelining.  Previously connections
    could, depending on the platform, hang at the STARTTLS response.
  * Bug 2498: Reset a counter used for ARC verify before handling another
    message on a connection.  Previously if one message had ARC headers and
    the following one did not, a crash could result when adding an
    Authentication-Results: header.
  * Bug 2500: Rewind some of the common-coding in string handling between the
    Exim main code and Exim-related utities.
  * Fix the variables set by the gsasl authenticator.
  * Bug 2507: Modules: on handling a dynamic-module (lookups) open failure,
    only retrieve the errormessage once.
  * Bug 2501: Fix init call in the heimdal authenticator.  Previously it
    adjusted the size of a major service buffer; this failed because the
    buffer was in use at the time.  Change to a compile-time increase in the
    buffer size, when this authenticator is compiled into exim.</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1589889600">- switch pretrans to use lua
  (fixes bsc#1171877)</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1591099200">- update to exim 4.94
  * some transports now refuse to use tainted data in constructing their delivery
    location
    this WILL BREAK configurations which are not updated accordingly.
    In particular: any Transport use of $local_user which has been relying upon
    check_local_user far away in the Router to make it safe, should be updated to
    replace $local_user with $local_part_data.
  * Attempting to remove, in router or transport, a header name that ends with
    an asterisk (which is a standards-legal name) will now result in all headers
    named starting with the string before the asterisk being removed.</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1591617600">- bring in changes from current +fixes (lots of taint check fixes)
  * Bug 1329: Fix format of Maildir-format filenames to match other mail-
    related applications.  Previously an "H" was used where available info
    says that "M" should be, so change to match.
  * Bug 2587: Fix pam expansion condition.  Tainted values are commonly used
    as arguments, so an implementation trying to copy these into a local
    buffer was taking a taint-enforcement trap.  Fix by using dynamically
    created buffers.
  * Bug 2586: Fix listcount expansion operator.  Using tainted arguments is
    reasonable, eg. to count headers.  Fix by using dynamically created
    buffers rather than a local.  Do similar fixes for ACL actions "dcc",
    "log_reject_target", "malware" and "spam"; the arguments are expanded
    so could be handling tainted values.
  * Bug 2590: Fix -bi (newaliases).  A previous code rearrangement had
    broken the (no-op) support for this sendmail command.  Restore it
    to doing nothing, silently, and returning good status.</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1598270400">- bring back missing exim_db.8 manual page
  (fixes bsc#1173693)</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1619611200">- update to exim-4.94.1
  * Fix security issue in BDAT state confusion.
    Ensure we reset known-good where we know we need to not be reading BDAT
    data, as a general case fix, and move the places where we switch to BDAT
    mode until after various protocol state checks.
    Fixes CVE-2020-BDATA reported by Qualys.
  * Fix security issue in SMTP verb option parsing (CVE-2020-EXOPT)
  * Fix security issue with too many recipients on a message (to remove a
    known security problem if someone does set recipients_max to unlimited,
    or if local additions add to the recipient list).
    Fixes CVE-2020-RCPTL reported by Qualys.
  * Fix CVE-2020-28016 (PFPZA): Heap out-of-bounds write in parse_fix_phrase()
  * Fix security issue CVE-2020-PFPSN and guard against cmdline invoker
    providing a particularly obnoxious sender full name.
  * Fix Linux security issue CVE-2020-SLCWD and guard against PATH_MAX
    better.</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1620129600">- update to exim-4.94.2
  security update (bsc#1185631)
  * CVE-2020-28007: Link attack in Exim's log directory
  * CVE-2020-28008: Assorted attacks in Exim's spool directory
  * CVE-2020-28014: Arbitrary PID file creation
  * CVE-2020-28011: Heap buffer overflow in queue_run()
  * CVE-2020-28010: Heap out-of-bounds write in main()
  * CVE-2020-28013: Heap buffer overflow in parse_fix_phrase()
  * CVE-2020-28016: Heap out-of-bounds write in parse_fix_phrase()
  * CVE-2020-28015: New-line injection into spool header file (local)
  * CVE-2020-28012: Missing close-on-exec flag for privileged pipe
  * CVE-2020-28009: Integer overflow in get_stdinput()
  * CVE-2020-28017: Integer overflow in receive_add_recipient()
  * CVE-2020-28020: Integer overflow in receive_msg()
  * CVE-2020-28023: Out-of-bounds read in smtp_setup_msg()
  * CVE-2020-28021: New-line injection into spool header file (remote)
  * CVE-2020-28022: Heap out-of-bounds read and write in extract_option()
  * CVE-2020-28026: Line truncation and injection in spool_read_header()
  * CVE-2020-28019: Failure to reset function pointer after BDAT error
  * CVE-2020-28024: Heap buffer underflow in smtp_ungetc()
  * CVE-2020-28018: Use-after-free in tls-openssl.c
  * CVE-2020-28025: Heap out-of-bounds read in pdkim_finish_bodyhash()</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1666094400">- add patch-cve-2022-3559 (fixes CVE-2022-3559, bsc#1204427, Bug 2915)</changelog>
</package>
<package pkgid="5a5bb3cd23161a02208a92570eb021baf90fa763b83a6799ee1c5a00773eb6b2" name="eximon" arch="ppc64le">
  <version epoch="0" ver="4.94.2" rel="bp154.2.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1521115200">- Replace xorg-x11-devel by individual pkgconfig() buildrequires.</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1523880000">- update to 4.91
  * DEFER rather than ERROR on redis cluster MOVED response.
  * Catch and remove uninitialized value warning in exiqsumm
  * Disallow '/' characters in queue names specified for the "queue=" ACL
    modifier.  This matches the restriction on the commandline.
  * Fix pgsql lookup for multiple result-tuples with a single column.
    Previously only the last row was returned.
  * Bug 2217: Tighten up the parsing of DKIM signature headers.
  * Bug 2215: Fix crash associated with dnsdb lookup done from DKIM ACL.
  * Fix issue with continued-connections when the DNS shifts unreliably.
  * Bug 2214: Fix SMTP responses resulting from non-accept result of MIME ACL.
  * The "support for" informational output now, which built with Content
  Scanning support, has a line for the malware scanner interfaces compiled
  in.  Interface can be individually included or not at build time.
  * The "aveserver", "kavdaemon" and "mksd" interfaces are now not included
  by the template makefile "src/EDITME".  The "STREAM" support for an older
  ClamAV interface method is removed.
  * Bug 2223: Fix mysql lookup returns for the no-data case (when the number of
  rows affected is given instead).
  * The runtime Berkeley DB library version is now additionally output by
  "exim -d -bV".  Previously only the compile-time version was shown.
  * Bug 2230: Fix cutthrough routing for nonfirst messages in an initiating
  SMTP connection.
  * Bug 2229: Fix cutthrough routing for nonstandard port numbers defined by
  routers.
  * Bug 2174: A timeout on connect for a callout was also erroneously seen as
  a timeout on read on a GnuTLS initiating connection, resulting in the
  initiating connection being dropped.
  * Relax results from ACL control request to enable cutthrough, in
  unsupported situations, from error to silently (except under debug)
  ignoring.
  * Fix Buffer overflow in base64d() (CVE-2018-6789)
  * Fix bug in DKIM verify: a buffer overflow could corrupt the malloc
  metadata, resulting in a crash in free().
  * Fix broken Heimdal GSSAPI authenticator integration.
  * Bug 2113: Fix conversation closedown with the Avast malware scanner.
  * Bug 2239: Enforce non-usability of control=utf8_downconvert in the mail ACL.
  * Speed up macro lookups during configuration file read, by skipping non-
  macro text after a replacement (previously it was only once per line) and
  by skipping builtin macros when searching for an uppercase lead character.
  * DANE support moved from Experimental to mainline.  The Makefile control
  for the build is renamed.
  * Fix memory leak during multi-message connections using STARTTLS.
  * Bug 2236: When a DKIM verification result is overridden by ACL, DMARC
  reported the original.  Fix to report (as far as possible) the ACL
  result replacing the original.
  * Fix memory leak during multi-message connections using STARTTLS under
  OpenSSL
  * Bug 2242: Fix exim_dbmbuild to permit directoryless filenames.
  * Fix utf8_downconvert propagation through a redirect router.
  * Bug 2253: For logging delivery lines under PRDR, append the overall
  DATA response info to the (existing) per-recipient response info for
  the "C=" log element.
  * Bug 2251: Fix ldap lookups that return a single attribute having zero-
  length value.
  * Support Avast multiline protocol, this allows passing flags to
  newer versions of the scanner.
  * Ensure that variables possibly set during message acceptance are marked
    dead before release of memory in the daemon loop.
  * Bug 2250: Fix a longstanding bug in heavily-pipelined SMTP input (such
  as a multi-recipient message from a mailinglist manager).
  * The (EXPERIMENTAL_DMARC) variable $dmarc_ar_header is withdrawn, being
  replaced by the ${authresults } expansion.
  * Bug 2257: Fix pipe transport to not use a socket-only syscall.
  * Set a handler for SIGTERM and call exit(3) if running as PID 1. This
  allows proper process termination in container environments.
  * Bug 2258: Fix spool_wireformat in combination with LMTP transport.
  Previously the "final dot" had a newline after it; ensure it is CR,LF.
  * SPF: remove support for the "spf" ACL condition outcome values "err_temp"
  and "err_perm", deprecated since 4.83 when the RFC-defined words
  " temperror" and "permerror" were introduced.
  * Re-introduce enforcement of no cutthrough delivery on transports having
  transport-filters or DKIM-signing.
  * Cutthrough: for a final-dot response timeout (and nonunderstood responses)
  in defer=pass mode supply a 450 to the initiator.  Previously the message
    would be spooled.
  * DANE: add dane_require_tls_ciphers SMTP Transport option; if unset,
    tls_require_ciphers is used as before.
  * Malware Avast: Better match the Avast multiline protocol.
  * Fix reinitialisation of DKIM logging variable between messages.
  * Bug 2255: Revert the disable of the OpenSSL session caching.
  * Add util/renew-opendmarc-tlds.sh script for safe renewal of public
  suffix list.
  * DKIM: accept Ed25519 pubkeys in SubjectPublicKeyInfo-wrapped form,
  since the IETF WG has not yet settled on that versus the original
  "bare" representation.
  * Fix syslog logging for syslog_timestamp=no and log_selector +millisec.
  Previously the millisecond value corrupted the output.
  Fix also for syslog_pid=no and log_selector +pid, for which the pid
  corrupted the output.</changelog>
  <changelog author="seanlew@opensuse.org" date="1553342400">- update to exim 4.92
  * ${l_header:&lt;name&gt;} expansion
  * ${readsocket} now supports TLS
  * "utf8_downconvert" option (if built with SUPPORT_I18N)
  * "pipelining" log_selector
  * JSON variants for ${extract } expansion
  * "noutf8" debug option
  * TCP Fast Open support on MacOS
  * CVE-2019-10149: Fixed a Remote Command Execution (bsc#1136587)
- add workaround patch for compile time error on missing printf
  format annotation (gnu_printf.patch)</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1559736000">- spec file cleanup
  * fix DANE inclusion guard condition
  * re-enable i18n and remove misleading comment
  * EXPERIMENTAL_SPF is now SUPPORT_SPF
  * DANE is now SUPPORT_DANE</changelog>
  <changelog author="alex &lt;atoptsoglou@suse.com&gt;" date="1564056000">- update to exim 4.92.1
  * CVE-2019-13917: Fixed an issue with ${sort} expansion which could
  allow remote attackers to execute other programs with root privileges
  (boo#1142207)</changelog>
  <changelog author="poeml@cmdline.net" date="1567857600">- update to exim 4.92.2
  * CVE-2019-15846: fix against remote attackers executing arbitrary code as
    root via a trailing backslash</changelog>
  <changelog author="poeml@cmdline.net" date="1569844800">- update to exim 4.92.3
  * CVE-2019-16928: fix against Heap-based buffer overflow in string_vformat,
    remote code execution seems to be possible</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1575892800">- update to exim 4.93
  * SUPPORT_DMARC replaces EXPERIMENTAL_DMARC
  * DISABLE_TLS replaces SUPPORT_TLS
  * Bump the version for the local_scan API.
  * smtp transport option hosts_try_fastopen defaults to "*".
  * DNSSec is requested (not required) for all queries. (This seemes to
    ask for trouble if your resolver is a systemd-resolved.)
  * Generic router option retry_use_local_part defaults to "true" under specific
    pre-conditions.
  * Introduce a tainting mechanism for values read from untrusted sources.
  * Use longer file names for temporary spool files (this avoids
    name conflicts with spool on a shared file system).
  * Use dsn_from main config option (was ignored previously).</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1577966400">spec file cleanup to make update work
- add docdir to spec</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1578398400">- update to exim 4.93.0.4 (+fixes release)
  * Avoid costly startup code when not strictly needed.  This reduces time
    for some exim process initialisations.  It does mean that the logging
    of TLS configuration problems is only done for the daemon startup.
  * Early-pipelining support code is now included unless disabled in Makefile.
  * DKIM verification defaults no long accept sha1 hashes, to conform to
    RFC 8301.  They can still be enabled, using the dkim_verify_hashes main
    option.
  * Support CHUNKING from an smtp transport using a transport_filter, when
    DKIM signing is being done.  Previously a transport_filter would always
    disable CHUNKING, falling back to traditional DATA.
  * Regard command-line receipients as tainted.
  * Bug 340: Remove the daemon pid file on exit, whe due to SIGTERM.
  * Bug 2489: Fix crash in the "pam" expansion condition.  It seems that the
    PAM library frees one of the arguments given to it, despite the
    documentation.  Therefore a plain malloc must be used.
  * Bug 2491: Use tainted buffers for the transport smtp context.  Previously
    on-stack buffers were used, resulting in a taint trap when DSN information
    copied from a received message was written into the buffer.
  * Bug 2493: Harden ARC verify against Outlook, whick has been seen to mix
    the ordering of its ARC headers.  This caused a crash.
  * Bug 2492: Use tainted memory for retry record when needed.  Previously when
    a new record was being constructed with information from the peer, a trap
    was taken.
  * Bug 2494: Unset the default for dmarc_tld_file.  Previously a naiive
    installation would get error messages from DMARC verify, when it hit the
    nonexistent file indicated by the default.  Distros wanting DMARC enabled
    should both provide the file and set the option.
    Also enforce no DMARC verification for command-line sourced messages.
  * Fix an uninitialised flag in early-pipelining.  Previously connections
    could, depending on the platform, hang at the STARTTLS response.
  * Bug 2498: Reset a counter used for ARC verify before handling another
    message on a connection.  Previously if one message had ARC headers and
    the following one did not, a crash could result when adding an
    Authentication-Results: header.
  * Bug 2500: Rewind some of the common-coding in string handling between the
    Exim main code and Exim-related utities.  The introduction of taint
    tracking also did many adjustments to string handling.  Since then, eximon
    frequently terminated with an assert failure.
  * When PIPELINING, synch after every hundred or so RCPT commands sent and
    check for 452 responses.  This slightly helps the inefficieny of doing
    a large alias-expansion into a recipient-limited target.  The max_rcpt
    transport option still applies (and at the current default, will override
    the new feature).  The check is done for either cause of synch, and forces
    a fast-retry of all 452'd recipients using a new MAIL FROM on the same
    connection.  The new facility is not tunable at this time.
  * Fix the variables set by the gsasl authenticator.  Previously a pointer to
    library live data was being used, so the results became garbage.  Make
    copies while it is still usable.
  * Logging: when the deliver_time selector ise set, include the DT= field
    on delivery deferred (==) and failed (**) lines (if a delivery was
    attemtped).  Previously it was only on completion (=&gt;) lines.
  * Authentication: the gsasl driver not provides the $authN variables in time
    for the expansion of the server_scram_iter and server_scram_salt options.</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1578916800">- add a spec-file workaround for bsc#1160726</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1585742400">- don't create logfiles during install
  * fixes CVE-2020-8015 (bsc#1154183)</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1589284800">- bring changes from current in +fixes branch
  (patch-exim-fixes-ee83de04d3087efaf808d1f2235a988275c2ee94)
  * fixes CVE-2020-12783 (bsc#1171490)
  * Regard command-line recipients as tainted.
  * Bug 2489: Fix crash in the "pam" expansion condition.
  * Use tainted buffers for the transport smtp context.
  * Bug 2493: Harden ARC verify against Outlook, which has been seen to mix
    the ordering of its ARC headers.  This caused a crash.
  * Bug 2492: Use tainted memory for retry record when needed.  Previously when
    a new record was being constructed with information from the peer, a trap
    was taken.
  * Bug 2494: Unset the default for dmarc_tld_file.
  * Fix an uninitialised flag in early-pipelining.  Previously connections
    could, depending on the platform, hang at the STARTTLS response.
  * Bug 2498: Reset a counter used for ARC verify before handling another
    message on a connection.  Previously if one message had ARC headers and
    the following one did not, a crash could result when adding an
    Authentication-Results: header.
  * Bug 2500: Rewind some of the common-coding in string handling between the
    Exim main code and Exim-related utities.
  * Fix the variables set by the gsasl authenticator.
  * Bug 2507: Modules: on handling a dynamic-module (lookups) open failure,
    only retrieve the errormessage once.
  * Bug 2501: Fix init call in the heimdal authenticator.  Previously it
    adjusted the size of a major service buffer; this failed because the
    buffer was in use at the time.  Change to a compile-time increase in the
    buffer size, when this authenticator is compiled into exim.</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1589889600">- switch pretrans to use lua
  (fixes bsc#1171877)</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1591099200">- update to exim 4.94
  * some transports now refuse to use tainted data in constructing their delivery
    location
    this WILL BREAK configurations which are not updated accordingly.
    In particular: any Transport use of $local_user which has been relying upon
    check_local_user far away in the Router to make it safe, should be updated to
    replace $local_user with $local_part_data.
  * Attempting to remove, in router or transport, a header name that ends with
    an asterisk (which is a standards-legal name) will now result in all headers
    named starting with the string before the asterisk being removed.</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1591617600">- bring in changes from current +fixes (lots of taint check fixes)
  * Bug 1329: Fix format of Maildir-format filenames to match other mail-
    related applications.  Previously an "H" was used where available info
    says that "M" should be, so change to match.
  * Bug 2587: Fix pam expansion condition.  Tainted values are commonly used
    as arguments, so an implementation trying to copy these into a local
    buffer was taking a taint-enforcement trap.  Fix by using dynamically
    created buffers.
  * Bug 2586: Fix listcount expansion operator.  Using tainted arguments is
    reasonable, eg. to count headers.  Fix by using dynamically created
    buffers rather than a local.  Do similar fixes for ACL actions "dcc",
    "log_reject_target", "malware" and "spam"; the arguments are expanded
    so could be handling tainted values.
  * Bug 2590: Fix -bi (newaliases).  A previous code rearrangement had
    broken the (no-op) support for this sendmail command.  Restore it
    to doing nothing, silently, and returning good status.</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1598270400">- bring back missing exim_db.8 manual page
  (fixes bsc#1173693)</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1619611200">- update to exim-4.94.1
  * Fix security issue in BDAT state confusion.
    Ensure we reset known-good where we know we need to not be reading BDAT
    data, as a general case fix, and move the places where we switch to BDAT
    mode until after various protocol state checks.
    Fixes CVE-2020-BDATA reported by Qualys.
  * Fix security issue in SMTP verb option parsing (CVE-2020-EXOPT)
  * Fix security issue with too many recipients on a message (to remove a
    known security problem if someone does set recipients_max to unlimited,
    or if local additions add to the recipient list).
    Fixes CVE-2020-RCPTL reported by Qualys.
  * Fix CVE-2020-28016 (PFPZA): Heap out-of-bounds write in parse_fix_phrase()
  * Fix security issue CVE-2020-PFPSN and guard against cmdline invoker
    providing a particularly obnoxious sender full name.
  * Fix Linux security issue CVE-2020-SLCWD and guard against PATH_MAX
    better.</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1620129600">- update to exim-4.94.2
  security update (bsc#1185631)
  * CVE-2020-28007: Link attack in Exim's log directory
  * CVE-2020-28008: Assorted attacks in Exim's spool directory
  * CVE-2020-28014: Arbitrary PID file creation
  * CVE-2020-28011: Heap buffer overflow in queue_run()
  * CVE-2020-28010: Heap out-of-bounds write in main()
  * CVE-2020-28013: Heap buffer overflow in parse_fix_phrase()
  * CVE-2020-28016: Heap out-of-bounds write in parse_fix_phrase()
  * CVE-2020-28015: New-line injection into spool header file (local)
  * CVE-2020-28012: Missing close-on-exec flag for privileged pipe
  * CVE-2020-28009: Integer overflow in get_stdinput()
  * CVE-2020-28017: Integer overflow in receive_add_recipient()
  * CVE-2020-28020: Integer overflow in receive_msg()
  * CVE-2020-28023: Out-of-bounds read in smtp_setup_msg()
  * CVE-2020-28021: New-line injection into spool header file (remote)
  * CVE-2020-28022: Heap out-of-bounds read and write in extract_option()
  * CVE-2020-28026: Line truncation and injection in spool_read_header()
  * CVE-2020-28019: Failure to reset function pointer after BDAT error
  * CVE-2020-28024: Heap buffer underflow in smtp_ungetc()
  * CVE-2020-28018: Use-after-free in tls-openssl.c
  * CVE-2020-28025: Heap out-of-bounds read in pdkim_finish_bodyhash()</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1666094400">- add patch-cve-2022-3559 (fixes CVE-2022-3559, bsc#1204427, Bug 2915)</changelog>
</package>
<package pkgid="d5d9aabe5b0af521f9d52b8f9a821e7449adfa17f4b3f808267de4d8629086f4" name="eximon" arch="s390x">
  <version epoch="0" ver="4.94.2" rel="bp154.2.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1521115200">- Replace xorg-x11-devel by individual pkgconfig() buildrequires.</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1523880000">- update to 4.91
  * DEFER rather than ERROR on redis cluster MOVED response.
  * Catch and remove uninitialized value warning in exiqsumm
  * Disallow '/' characters in queue names specified for the "queue=" ACL
    modifier.  This matches the restriction on the commandline.
  * Fix pgsql lookup for multiple result-tuples with a single column.
    Previously only the last row was returned.
  * Bug 2217: Tighten up the parsing of DKIM signature headers.
  * Bug 2215: Fix crash associated with dnsdb lookup done from DKIM ACL.
  * Fix issue with continued-connections when the DNS shifts unreliably.
  * Bug 2214: Fix SMTP responses resulting from non-accept result of MIME ACL.
  * The "support for" informational output now, which built with Content
  Scanning support, has a line for the malware scanner interfaces compiled
  in.  Interface can be individually included or not at build time.
  * The "aveserver", "kavdaemon" and "mksd" interfaces are now not included
  by the template makefile "src/EDITME".  The "STREAM" support for an older
  ClamAV interface method is removed.
  * Bug 2223: Fix mysql lookup returns for the no-data case (when the number of
  rows affected is given instead).
  * The runtime Berkeley DB library version is now additionally output by
  "exim -d -bV".  Previously only the compile-time version was shown.
  * Bug 2230: Fix cutthrough routing for nonfirst messages in an initiating
  SMTP connection.
  * Bug 2229: Fix cutthrough routing for nonstandard port numbers defined by
  routers.
  * Bug 2174: A timeout on connect for a callout was also erroneously seen as
  a timeout on read on a GnuTLS initiating connection, resulting in the
  initiating connection being dropped.
  * Relax results from ACL control request to enable cutthrough, in
  unsupported situations, from error to silently (except under debug)
  ignoring.
  * Fix Buffer overflow in base64d() (CVE-2018-6789)
  * Fix bug in DKIM verify: a buffer overflow could corrupt the malloc
  metadata, resulting in a crash in free().
  * Fix broken Heimdal GSSAPI authenticator integration.
  * Bug 2113: Fix conversation closedown with the Avast malware scanner.
  * Bug 2239: Enforce non-usability of control=utf8_downconvert in the mail ACL.
  * Speed up macro lookups during configuration file read, by skipping non-
  macro text after a replacement (previously it was only once per line) and
  by skipping builtin macros when searching for an uppercase lead character.
  * DANE support moved from Experimental to mainline.  The Makefile control
  for the build is renamed.
  * Fix memory leak during multi-message connections using STARTTLS.
  * Bug 2236: When a DKIM verification result is overridden by ACL, DMARC
  reported the original.  Fix to report (as far as possible) the ACL
  result replacing the original.
  * Fix memory leak during multi-message connections using STARTTLS under
  OpenSSL
  * Bug 2242: Fix exim_dbmbuild to permit directoryless filenames.
  * Fix utf8_downconvert propagation through a redirect router.
  * Bug 2253: For logging delivery lines under PRDR, append the overall
  DATA response info to the (existing) per-recipient response info for
  the "C=" log element.
  * Bug 2251: Fix ldap lookups that return a single attribute having zero-
  length value.
  * Support Avast multiline protocol, this allows passing flags to
  newer versions of the scanner.
  * Ensure that variables possibly set during message acceptance are marked
    dead before release of memory in the daemon loop.
  * Bug 2250: Fix a longstanding bug in heavily-pipelined SMTP input (such
  as a multi-recipient message from a mailinglist manager).
  * The (EXPERIMENTAL_DMARC) variable $dmarc_ar_header is withdrawn, being
  replaced by the ${authresults } expansion.
  * Bug 2257: Fix pipe transport to not use a socket-only syscall.
  * Set a handler for SIGTERM and call exit(3) if running as PID 1. This
  allows proper process termination in container environments.
  * Bug 2258: Fix spool_wireformat in combination with LMTP transport.
  Previously the "final dot" had a newline after it; ensure it is CR,LF.
  * SPF: remove support for the "spf" ACL condition outcome values "err_temp"
  and "err_perm", deprecated since 4.83 when the RFC-defined words
  " temperror" and "permerror" were introduced.
  * Re-introduce enforcement of no cutthrough delivery on transports having
  transport-filters or DKIM-signing.
  * Cutthrough: for a final-dot response timeout (and nonunderstood responses)
  in defer=pass mode supply a 450 to the initiator.  Previously the message
    would be spooled.
  * DANE: add dane_require_tls_ciphers SMTP Transport option; if unset,
    tls_require_ciphers is used as before.
  * Malware Avast: Better match the Avast multiline protocol.
  * Fix reinitialisation of DKIM logging variable between messages.
  * Bug 2255: Revert the disable of the OpenSSL session caching.
  * Add util/renew-opendmarc-tlds.sh script for safe renewal of public
  suffix list.
  * DKIM: accept Ed25519 pubkeys in SubjectPublicKeyInfo-wrapped form,
  since the IETF WG has not yet settled on that versus the original
  "bare" representation.
  * Fix syslog logging for syslog_timestamp=no and log_selector +millisec.
  Previously the millisecond value corrupted the output.
  Fix also for syslog_pid=no and log_selector +pid, for which the pid
  corrupted the output.</changelog>
  <changelog author="seanlew@opensuse.org" date="1553342400">- update to exim 4.92
  * ${l_header:&lt;name&gt;} expansion
  * ${readsocket} now supports TLS
  * "utf8_downconvert" option (if built with SUPPORT_I18N)
  * "pipelining" log_selector
  * JSON variants for ${extract } expansion
  * "noutf8" debug option
  * TCP Fast Open support on MacOS
  * CVE-2019-10149: Fixed a Remote Command Execution (bsc#1136587)
- add workaround patch for compile time error on missing printf
  format annotation (gnu_printf.patch)</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1559736000">- spec file cleanup
  * fix DANE inclusion guard condition
  * re-enable i18n and remove misleading comment
  * EXPERIMENTAL_SPF is now SUPPORT_SPF
  * DANE is now SUPPORT_DANE</changelog>
  <changelog author="alex &lt;atoptsoglou@suse.com&gt;" date="1564056000">- update to exim 4.92.1
  * CVE-2019-13917: Fixed an issue with ${sort} expansion which could
  allow remote attackers to execute other programs with root privileges
  (boo#1142207)</changelog>
  <changelog author="poeml@cmdline.net" date="1567857600">- update to exim 4.92.2
  * CVE-2019-15846: fix against remote attackers executing arbitrary code as
    root via a trailing backslash</changelog>
  <changelog author="poeml@cmdline.net" date="1569844800">- update to exim 4.92.3
  * CVE-2019-16928: fix against Heap-based buffer overflow in string_vformat,
    remote code execution seems to be possible</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1575892800">- update to exim 4.93
  * SUPPORT_DMARC replaces EXPERIMENTAL_DMARC
  * DISABLE_TLS replaces SUPPORT_TLS
  * Bump the version for the local_scan API.
  * smtp transport option hosts_try_fastopen defaults to "*".
  * DNSSec is requested (not required) for all queries. (This seemes to
    ask for trouble if your resolver is a systemd-resolved.)
  * Generic router option retry_use_local_part defaults to "true" under specific
    pre-conditions.
  * Introduce a tainting mechanism for values read from untrusted sources.
  * Use longer file names for temporary spool files (this avoids
    name conflicts with spool on a shared file system).
  * Use dsn_from main config option (was ignored previously).</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1577966400">spec file cleanup to make update work
- add docdir to spec</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1578398400">- update to exim 4.93.0.4 (+fixes release)
  * Avoid costly startup code when not strictly needed.  This reduces time
    for some exim process initialisations.  It does mean that the logging
    of TLS configuration problems is only done for the daemon startup.
  * Early-pipelining support code is now included unless disabled in Makefile.
  * DKIM verification defaults no long accept sha1 hashes, to conform to
    RFC 8301.  They can still be enabled, using the dkim_verify_hashes main
    option.
  * Support CHUNKING from an smtp transport using a transport_filter, when
    DKIM signing is being done.  Previously a transport_filter would always
    disable CHUNKING, falling back to traditional DATA.
  * Regard command-line receipients as tainted.
  * Bug 340: Remove the daemon pid file on exit, whe due to SIGTERM.
  * Bug 2489: Fix crash in the "pam" expansion condition.  It seems that the
    PAM library frees one of the arguments given to it, despite the
    documentation.  Therefore a plain malloc must be used.
  * Bug 2491: Use tainted buffers for the transport smtp context.  Previously
    on-stack buffers were used, resulting in a taint trap when DSN information
    copied from a received message was written into the buffer.
  * Bug 2493: Harden ARC verify against Outlook, whick has been seen to mix
    the ordering of its ARC headers.  This caused a crash.
  * Bug 2492: Use tainted memory for retry record when needed.  Previously when
    a new record was being constructed with information from the peer, a trap
    was taken.
  * Bug 2494: Unset the default for dmarc_tld_file.  Previously a naiive
    installation would get error messages from DMARC verify, when it hit the
    nonexistent file indicated by the default.  Distros wanting DMARC enabled
    should both provide the file and set the option.
    Also enforce no DMARC verification for command-line sourced messages.
  * Fix an uninitialised flag in early-pipelining.  Previously connections
    could, depending on the platform, hang at the STARTTLS response.
  * Bug 2498: Reset a counter used for ARC verify before handling another
    message on a connection.  Previously if one message had ARC headers and
    the following one did not, a crash could result when adding an
    Authentication-Results: header.
  * Bug 2500: Rewind some of the common-coding in string handling between the
    Exim main code and Exim-related utities.  The introduction of taint
    tracking also did many adjustments to string handling.  Since then, eximon
    frequently terminated with an assert failure.
  * When PIPELINING, synch after every hundred or so RCPT commands sent and
    check for 452 responses.  This slightly helps the inefficieny of doing
    a large alias-expansion into a recipient-limited target.  The max_rcpt
    transport option still applies (and at the current default, will override
    the new feature).  The check is done for either cause of synch, and forces
    a fast-retry of all 452'd recipients using a new MAIL FROM on the same
    connection.  The new facility is not tunable at this time.
  * Fix the variables set by the gsasl authenticator.  Previously a pointer to
    library live data was being used, so the results became garbage.  Make
    copies while it is still usable.
  * Logging: when the deliver_time selector ise set, include the DT= field
    on delivery deferred (==) and failed (**) lines (if a delivery was
    attemtped).  Previously it was only on completion (=&gt;) lines.
  * Authentication: the gsasl driver not provides the $authN variables in time
    for the expansion of the server_scram_iter and server_scram_salt options.</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1578916800">- add a spec-file workaround for bsc#1160726</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1585742400">- don't create logfiles during install
  * fixes CVE-2020-8015 (bsc#1154183)</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1589284800">- bring changes from current in +fixes branch
  (patch-exim-fixes-ee83de04d3087efaf808d1f2235a988275c2ee94)
  * fixes CVE-2020-12783 (bsc#1171490)
  * Regard command-line recipients as tainted.
  * Bug 2489: Fix crash in the "pam" expansion condition.
  * Use tainted buffers for the transport smtp context.
  * Bug 2493: Harden ARC verify against Outlook, which has been seen to mix
    the ordering of its ARC headers.  This caused a crash.
  * Bug 2492: Use tainted memory for retry record when needed.  Previously when
    a new record was being constructed with information from the peer, a trap
    was taken.
  * Bug 2494: Unset the default for dmarc_tld_file.
  * Fix an uninitialised flag in early-pipelining.  Previously connections
    could, depending on the platform, hang at the STARTTLS response.
  * Bug 2498: Reset a counter used for ARC verify before handling another
    message on a connection.  Previously if one message had ARC headers and
    the following one did not, a crash could result when adding an
    Authentication-Results: header.
  * Bug 2500: Rewind some of the common-coding in string handling between the
    Exim main code and Exim-related utities.
  * Fix the variables set by the gsasl authenticator.
  * Bug 2507: Modules: on handling a dynamic-module (lookups) open failure,
    only retrieve the errormessage once.
  * Bug 2501: Fix init call in the heimdal authenticator.  Previously it
    adjusted the size of a major service buffer; this failed because the
    buffer was in use at the time.  Change to a compile-time increase in the
    buffer size, when this authenticator is compiled into exim.</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1589889600">- switch pretrans to use lua
  (fixes bsc#1171877)</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1591099200">- update to exim 4.94
  * some transports now refuse to use tainted data in constructing their delivery
    location
    this WILL BREAK configurations which are not updated accordingly.
    In particular: any Transport use of $local_user which has been relying upon
    check_local_user far away in the Router to make it safe, should be updated to
    replace $local_user with $local_part_data.
  * Attempting to remove, in router or transport, a header name that ends with
    an asterisk (which is a standards-legal name) will now result in all headers
    named starting with the string before the asterisk being removed.</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1591617600">- bring in changes from current +fixes (lots of taint check fixes)
  * Bug 1329: Fix format of Maildir-format filenames to match other mail-
    related applications.  Previously an "H" was used where available info
    says that "M" should be, so change to match.
  * Bug 2587: Fix pam expansion condition.  Tainted values are commonly used
    as arguments, so an implementation trying to copy these into a local
    buffer was taking a taint-enforcement trap.  Fix by using dynamically
    created buffers.
  * Bug 2586: Fix listcount expansion operator.  Using tainted arguments is
    reasonable, eg. to count headers.  Fix by using dynamically created
    buffers rather than a local.  Do similar fixes for ACL actions "dcc",
    "log_reject_target", "malware" and "spam"; the arguments are expanded
    so could be handling tainted values.
  * Bug 2590: Fix -bi (newaliases).  A previous code rearrangement had
    broken the (no-op) support for this sendmail command.  Restore it
    to doing nothing, silently, and returning good status.</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1598270400">- bring back missing exim_db.8 manual page
  (fixes bsc#1173693)</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1619611200">- update to exim-4.94.1
  * Fix security issue in BDAT state confusion.
    Ensure we reset known-good where we know we need to not be reading BDAT
    data, as a general case fix, and move the places where we switch to BDAT
    mode until after various protocol state checks.
    Fixes CVE-2020-BDATA reported by Qualys.
  * Fix security issue in SMTP verb option parsing (CVE-2020-EXOPT)
  * Fix security issue with too many recipients on a message (to remove a
    known security problem if someone does set recipients_max to unlimited,
    or if local additions add to the recipient list).
    Fixes CVE-2020-RCPTL reported by Qualys.
  * Fix CVE-2020-28016 (PFPZA): Heap out-of-bounds write in parse_fix_phrase()
  * Fix security issue CVE-2020-PFPSN and guard against cmdline invoker
    providing a particularly obnoxious sender full name.
  * Fix Linux security issue CVE-2020-SLCWD and guard against PATH_MAX
    better.</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1620129600">- update to exim-4.94.2
  security update (bsc#1185631)
  * CVE-2020-28007: Link attack in Exim's log directory
  * CVE-2020-28008: Assorted attacks in Exim's spool directory
  * CVE-2020-28014: Arbitrary PID file creation
  * CVE-2020-28011: Heap buffer overflow in queue_run()
  * CVE-2020-28010: Heap out-of-bounds write in main()
  * CVE-2020-28013: Heap buffer overflow in parse_fix_phrase()
  * CVE-2020-28016: Heap out-of-bounds write in parse_fix_phrase()
  * CVE-2020-28015: New-line injection into spool header file (local)
  * CVE-2020-28012: Missing close-on-exec flag for privileged pipe
  * CVE-2020-28009: Integer overflow in get_stdinput()
  * CVE-2020-28017: Integer overflow in receive_add_recipient()
  * CVE-2020-28020: Integer overflow in receive_msg()
  * CVE-2020-28023: Out-of-bounds read in smtp_setup_msg()
  * CVE-2020-28021: New-line injection into spool header file (remote)
  * CVE-2020-28022: Heap out-of-bounds read and write in extract_option()
  * CVE-2020-28026: Line truncation and injection in spool_read_header()
  * CVE-2020-28019: Failure to reset function pointer after BDAT error
  * CVE-2020-28024: Heap buffer underflow in smtp_ungetc()
  * CVE-2020-28018: Use-after-free in tls-openssl.c
  * CVE-2020-28025: Heap out-of-bounds read in pdkim_finish_bodyhash()</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1666094400">- add patch-cve-2022-3559 (fixes CVE-2022-3559, bsc#1204427, Bug 2915)</changelog>
</package>
<package pkgid="f7b7a5ebde499e857cd84ea4f3b0ab83ff1793f7a29c0cb63169dbc3f83584dd" name="eximon" arch="x86_64">
  <version epoch="0" ver="4.94.2" rel="bp154.2.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1521115200">- Replace xorg-x11-devel by individual pkgconfig() buildrequires.</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1523880000">- update to 4.91
  * DEFER rather than ERROR on redis cluster MOVED response.
  * Catch and remove uninitialized value warning in exiqsumm
  * Disallow '/' characters in queue names specified for the "queue=" ACL
    modifier.  This matches the restriction on the commandline.
  * Fix pgsql lookup for multiple result-tuples with a single column.
    Previously only the last row was returned.
  * Bug 2217: Tighten up the parsing of DKIM signature headers.
  * Bug 2215: Fix crash associated with dnsdb lookup done from DKIM ACL.
  * Fix issue with continued-connections when the DNS shifts unreliably.
  * Bug 2214: Fix SMTP responses resulting from non-accept result of MIME ACL.
  * The "support for" informational output now, which built with Content
  Scanning support, has a line for the malware scanner interfaces compiled
  in.  Interface can be individually included or not at build time.
  * The "aveserver", "kavdaemon" and "mksd" interfaces are now not included
  by the template makefile "src/EDITME".  The "STREAM" support for an older
  ClamAV interface method is removed.
  * Bug 2223: Fix mysql lookup returns for the no-data case (when the number of
  rows affected is given instead).
  * The runtime Berkeley DB library version is now additionally output by
  "exim -d -bV".  Previously only the compile-time version was shown.
  * Bug 2230: Fix cutthrough routing for nonfirst messages in an initiating
  SMTP connection.
  * Bug 2229: Fix cutthrough routing for nonstandard port numbers defined by
  routers.
  * Bug 2174: A timeout on connect for a callout was also erroneously seen as
  a timeout on read on a GnuTLS initiating connection, resulting in the
  initiating connection being dropped.
  * Relax results from ACL control request to enable cutthrough, in
  unsupported situations, from error to silently (except under debug)
  ignoring.
  * Fix Buffer overflow in base64d() (CVE-2018-6789)
  * Fix bug in DKIM verify: a buffer overflow could corrupt the malloc
  metadata, resulting in a crash in free().
  * Fix broken Heimdal GSSAPI authenticator integration.
  * Bug 2113: Fix conversation closedown with the Avast malware scanner.
  * Bug 2239: Enforce non-usability of control=utf8_downconvert in the mail ACL.
  * Speed up macro lookups during configuration file read, by skipping non-
  macro text after a replacement (previously it was only once per line) and
  by skipping builtin macros when searching for an uppercase lead character.
  * DANE support moved from Experimental to mainline.  The Makefile control
  for the build is renamed.
  * Fix memory leak during multi-message connections using STARTTLS.
  * Bug 2236: When a DKIM verification result is overridden by ACL, DMARC
  reported the original.  Fix to report (as far as possible) the ACL
  result replacing the original.
  * Fix memory leak during multi-message connections using STARTTLS under
  OpenSSL
  * Bug 2242: Fix exim_dbmbuild to permit directoryless filenames.
  * Fix utf8_downconvert propagation through a redirect router.
  * Bug 2253: For logging delivery lines under PRDR, append the overall
  DATA response info to the (existing) per-recipient response info for
  the "C=" log element.
  * Bug 2251: Fix ldap lookups that return a single attribute having zero-
  length value.
  * Support Avast multiline protocol, this allows passing flags to
  newer versions of the scanner.
  * Ensure that variables possibly set during message acceptance are marked
    dead before release of memory in the daemon loop.
  * Bug 2250: Fix a longstanding bug in heavily-pipelined SMTP input (such
  as a multi-recipient message from a mailinglist manager).
  * The (EXPERIMENTAL_DMARC) variable $dmarc_ar_header is withdrawn, being
  replaced by the ${authresults } expansion.
  * Bug 2257: Fix pipe transport to not use a socket-only syscall.
  * Set a handler for SIGTERM and call exit(3) if running as PID 1. This
  allows proper process termination in container environments.
  * Bug 2258: Fix spool_wireformat in combination with LMTP transport.
  Previously the "final dot" had a newline after it; ensure it is CR,LF.
  * SPF: remove support for the "spf" ACL condition outcome values "err_temp"
  and "err_perm", deprecated since 4.83 when the RFC-defined words
  " temperror" and "permerror" were introduced.
  * Re-introduce enforcement of no cutthrough delivery on transports having
  transport-filters or DKIM-signing.
  * Cutthrough: for a final-dot response timeout (and nonunderstood responses)
  in defer=pass mode supply a 450 to the initiator.  Previously the message
    would be spooled.
  * DANE: add dane_require_tls_ciphers SMTP Transport option; if unset,
    tls_require_ciphers is used as before.
  * Malware Avast: Better match the Avast multiline protocol.
  * Fix reinitialisation of DKIM logging variable between messages.
  * Bug 2255: Revert the disable of the OpenSSL session caching.
  * Add util/renew-opendmarc-tlds.sh script for safe renewal of public
  suffix list.
  * DKIM: accept Ed25519 pubkeys in SubjectPublicKeyInfo-wrapped form,
  since the IETF WG has not yet settled on that versus the original
  "bare" representation.
  * Fix syslog logging for syslog_timestamp=no and log_selector +millisec.
  Previously the millisecond value corrupted the output.
  Fix also for syslog_pid=no and log_selector +pid, for which the pid
  corrupted the output.</changelog>
  <changelog author="seanlew@opensuse.org" date="1553342400">- update to exim 4.92
  * ${l_header:&lt;name&gt;} expansion
  * ${readsocket} now supports TLS
  * "utf8_downconvert" option (if built with SUPPORT_I18N)
  * "pipelining" log_selector
  * JSON variants for ${extract } expansion
  * "noutf8" debug option
  * TCP Fast Open support on MacOS
  * CVE-2019-10149: Fixed a Remote Command Execution (bsc#1136587)
- add workaround patch for compile time error on missing printf
  format annotation (gnu_printf.patch)</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1559736000">- spec file cleanup
  * fix DANE inclusion guard condition
  * re-enable i18n and remove misleading comment
  * EXPERIMENTAL_SPF is now SUPPORT_SPF
  * DANE is now SUPPORT_DANE</changelog>
  <changelog author="alex &lt;atoptsoglou@suse.com&gt;" date="1564056000">- update to exim 4.92.1
  * CVE-2019-13917: Fixed an issue with ${sort} expansion which could
  allow remote attackers to execute other programs with root privileges
  (boo#1142207)</changelog>
  <changelog author="poeml@cmdline.net" date="1567857600">- update to exim 4.92.2
  * CVE-2019-15846: fix against remote attackers executing arbitrary code as
    root via a trailing backslash</changelog>
  <changelog author="poeml@cmdline.net" date="1569844800">- update to exim 4.92.3
  * CVE-2019-16928: fix against Heap-based buffer overflow in string_vformat,
    remote code execution seems to be possible</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1575892800">- update to exim 4.93
  * SUPPORT_DMARC replaces EXPERIMENTAL_DMARC
  * DISABLE_TLS replaces SUPPORT_TLS
  * Bump the version for the local_scan API.
  * smtp transport option hosts_try_fastopen defaults to "*".
  * DNSSec is requested (not required) for all queries. (This seemes to
    ask for trouble if your resolver is a systemd-resolved.)
  * Generic router option retry_use_local_part defaults to "true" under specific
    pre-conditions.
  * Introduce a tainting mechanism for values read from untrusted sources.
  * Use longer file names for temporary spool files (this avoids
    name conflicts with spool on a shared file system).
  * Use dsn_from main config option (was ignored previously).</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1577966400">spec file cleanup to make update work
- add docdir to spec</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1578398400">- update to exim 4.93.0.4 (+fixes release)
  * Avoid costly startup code when not strictly needed.  This reduces time
    for some exim process initialisations.  It does mean that the logging
    of TLS configuration problems is only done for the daemon startup.
  * Early-pipelining support code is now included unless disabled in Makefile.
  * DKIM verification defaults no long accept sha1 hashes, to conform to
    RFC 8301.  They can still be enabled, using the dkim_verify_hashes main
    option.
  * Support CHUNKING from an smtp transport using a transport_filter, when
    DKIM signing is being done.  Previously a transport_filter would always
    disable CHUNKING, falling back to traditional DATA.
  * Regard command-line receipients as tainted.
  * Bug 340: Remove the daemon pid file on exit, whe due to SIGTERM.
  * Bug 2489: Fix crash in the "pam" expansion condition.  It seems that the
    PAM library frees one of the arguments given to it, despite the
    documentation.  Therefore a plain malloc must be used.
  * Bug 2491: Use tainted buffers for the transport smtp context.  Previously
    on-stack buffers were used, resulting in a taint trap when DSN information
    copied from a received message was written into the buffer.
  * Bug 2493: Harden ARC verify against Outlook, whick has been seen to mix
    the ordering of its ARC headers.  This caused a crash.
  * Bug 2492: Use tainted memory for retry record when needed.  Previously when
    a new record was being constructed with information from the peer, a trap
    was taken.
  * Bug 2494: Unset the default for dmarc_tld_file.  Previously a naiive
    installation would get error messages from DMARC verify, when it hit the
    nonexistent file indicated by the default.  Distros wanting DMARC enabled
    should both provide the file and set the option.
    Also enforce no DMARC verification for command-line sourced messages.
  * Fix an uninitialised flag in early-pipelining.  Previously connections
    could, depending on the platform, hang at the STARTTLS response.
  * Bug 2498: Reset a counter used for ARC verify before handling another
    message on a connection.  Previously if one message had ARC headers and
    the following one did not, a crash could result when adding an
    Authentication-Results: header.
  * Bug 2500: Rewind some of the common-coding in string handling between the
    Exim main code and Exim-related utities.  The introduction of taint
    tracking also did many adjustments to string handling.  Since then, eximon
    frequently terminated with an assert failure.
  * When PIPELINING, synch after every hundred or so RCPT commands sent and
    check for 452 responses.  This slightly helps the inefficieny of doing
    a large alias-expansion into a recipient-limited target.  The max_rcpt
    transport option still applies (and at the current default, will override
    the new feature).  The check is done for either cause of synch, and forces
    a fast-retry of all 452'd recipients using a new MAIL FROM on the same
    connection.  The new facility is not tunable at this time.
  * Fix the variables set by the gsasl authenticator.  Previously a pointer to
    library live data was being used, so the results became garbage.  Make
    copies while it is still usable.
  * Logging: when the deliver_time selector ise set, include the DT= field
    on delivery deferred (==) and failed (**) lines (if a delivery was
    attemtped).  Previously it was only on completion (=&gt;) lines.
  * Authentication: the gsasl driver not provides the $authN variables in time
    for the expansion of the server_scram_iter and server_scram_salt options.</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1578916800">- add a spec-file workaround for bsc#1160726</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1585742400">- don't create logfiles during install
  * fixes CVE-2020-8015 (bsc#1154183)</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1589284800">- bring changes from current in +fixes branch
  (patch-exim-fixes-ee83de04d3087efaf808d1f2235a988275c2ee94)
  * fixes CVE-2020-12783 (bsc#1171490)
  * Regard command-line recipients as tainted.
  * Bug 2489: Fix crash in the "pam" expansion condition.
  * Use tainted buffers for the transport smtp context.
  * Bug 2493: Harden ARC verify against Outlook, which has been seen to mix
    the ordering of its ARC headers.  This caused a crash.
  * Bug 2492: Use tainted memory for retry record when needed.  Previously when
    a new record was being constructed with information from the peer, a trap
    was taken.
  * Bug 2494: Unset the default for dmarc_tld_file.
  * Fix an uninitialised flag in early-pipelining.  Previously connections
    could, depending on the platform, hang at the STARTTLS response.
  * Bug 2498: Reset a counter used for ARC verify before handling another
    message on a connection.  Previously if one message had ARC headers and
    the following one did not, a crash could result when adding an
    Authentication-Results: header.
  * Bug 2500: Rewind some of the common-coding in string handling between the
    Exim main code and Exim-related utities.
  * Fix the variables set by the gsasl authenticator.
  * Bug 2507: Modules: on handling a dynamic-module (lookups) open failure,
    only retrieve the errormessage once.
  * Bug 2501: Fix init call in the heimdal authenticator.  Previously it
    adjusted the size of a major service buffer; this failed because the
    buffer was in use at the time.  Change to a compile-time increase in the
    buffer size, when this authenticator is compiled into exim.</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1589889600">- switch pretrans to use lua
  (fixes bsc#1171877)</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1591099200">- update to exim 4.94
  * some transports now refuse to use tainted data in constructing their delivery
    location
    this WILL BREAK configurations which are not updated accordingly.
    In particular: any Transport use of $local_user which has been relying upon
    check_local_user far away in the Router to make it safe, should be updated to
    replace $local_user with $local_part_data.
  * Attempting to remove, in router or transport, a header name that ends with
    an asterisk (which is a standards-legal name) will now result in all headers
    named starting with the string before the asterisk being removed.</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1591617600">- bring in changes from current +fixes (lots of taint check fixes)
  * Bug 1329: Fix format of Maildir-format filenames to match other mail-
    related applications.  Previously an "H" was used where available info
    says that "M" should be, so change to match.
  * Bug 2587: Fix pam expansion condition.  Tainted values are commonly used
    as arguments, so an implementation trying to copy these into a local
    buffer was taking a taint-enforcement trap.  Fix by using dynamically
    created buffers.
  * Bug 2586: Fix listcount expansion operator.  Using tainted arguments is
    reasonable, eg. to count headers.  Fix by using dynamically created
    buffers rather than a local.  Do similar fixes for ACL actions "dcc",
    "log_reject_target", "malware" and "spam"; the arguments are expanded
    so could be handling tainted values.
  * Bug 2590: Fix -bi (newaliases).  A previous code rearrangement had
    broken the (no-op) support for this sendmail command.  Restore it
    to doing nothing, silently, and returning good status.</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1598270400">- bring back missing exim_db.8 manual page
  (fixes bsc#1173693)</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1619611200">- update to exim-4.94.1
  * Fix security issue in BDAT state confusion.
    Ensure we reset known-good where we know we need to not be reading BDAT
    data, as a general case fix, and move the places where we switch to BDAT
    mode until after various protocol state checks.
    Fixes CVE-2020-BDATA reported by Qualys.
  * Fix security issue in SMTP verb option parsing (CVE-2020-EXOPT)
  * Fix security issue with too many recipients on a message (to remove a
    known security problem if someone does set recipients_max to unlimited,
    or if local additions add to the recipient list).
    Fixes CVE-2020-RCPTL reported by Qualys.
  * Fix CVE-2020-28016 (PFPZA): Heap out-of-bounds write in parse_fix_phrase()
  * Fix security issue CVE-2020-PFPSN and guard against cmdline invoker
    providing a particularly obnoxious sender full name.
  * Fix Linux security issue CVE-2020-SLCWD and guard against PATH_MAX
    better.</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1620129600">- update to exim-4.94.2
  security update (bsc#1185631)
  * CVE-2020-28007: Link attack in Exim's log directory
  * CVE-2020-28008: Assorted attacks in Exim's spool directory
  * CVE-2020-28014: Arbitrary PID file creation
  * CVE-2020-28011: Heap buffer overflow in queue_run()
  * CVE-2020-28010: Heap out-of-bounds write in main()
  * CVE-2020-28013: Heap buffer overflow in parse_fix_phrase()
  * CVE-2020-28016: Heap out-of-bounds write in parse_fix_phrase()
  * CVE-2020-28015: New-line injection into spool header file (local)
  * CVE-2020-28012: Missing close-on-exec flag for privileged pipe
  * CVE-2020-28009: Integer overflow in get_stdinput()
  * CVE-2020-28017: Integer overflow in receive_add_recipient()
  * CVE-2020-28020: Integer overflow in receive_msg()
  * CVE-2020-28023: Out-of-bounds read in smtp_setup_msg()
  * CVE-2020-28021: New-line injection into spool header file (remote)
  * CVE-2020-28022: Heap out-of-bounds read and write in extract_option()
  * CVE-2020-28026: Line truncation and injection in spool_read_header()
  * CVE-2020-28019: Failure to reset function pointer after BDAT error
  * CVE-2020-28024: Heap buffer underflow in smtp_ungetc()
  * CVE-2020-28018: Use-after-free in tls-openssl.c
  * CVE-2020-28025: Heap out-of-bounds read in pdkim_finish_bodyhash()</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1666094400">- add patch-cve-2022-3559 (fixes CVE-2022-3559, bsc#1204427, Bug 2915)</changelog>
</package>
<package pkgid="df9696b59160c5daa4669e380f05a718db537c149b57626f6d6c274da5c8e6bc" name="eximstats-html" arch="aarch64">
  <version epoch="0" ver="4.94.2" rel="bp154.2.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1521115200">- Replace xorg-x11-devel by individual pkgconfig() buildrequires.</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1523880000">- update to 4.91
  * DEFER rather than ERROR on redis cluster MOVED response.
  * Catch and remove uninitialized value warning in exiqsumm
  * Disallow '/' characters in queue names specified for the "queue=" ACL
    modifier.  This matches the restriction on the commandline.
  * Fix pgsql lookup for multiple result-tuples with a single column.
    Previously only the last row was returned.
  * Bug 2217: Tighten up the parsing of DKIM signature headers.
  * Bug 2215: Fix crash associated with dnsdb lookup done from DKIM ACL.
  * Fix issue with continued-connections when the DNS shifts unreliably.
  * Bug 2214: Fix SMTP responses resulting from non-accept result of MIME ACL.
  * The "support for" informational output now, which built with Content
  Scanning support, has a line for the malware scanner interfaces compiled
  in.  Interface can be individually included or not at build time.
  * The "aveserver", "kavdaemon" and "mksd" interfaces are now not included
  by the template makefile "src/EDITME".  The "STREAM" support for an older
  ClamAV interface method is removed.
  * Bug 2223: Fix mysql lookup returns for the no-data case (when the number of
  rows affected is given instead).
  * The runtime Berkeley DB library version is now additionally output by
  "exim -d -bV".  Previously only the compile-time version was shown.
  * Bug 2230: Fix cutthrough routing for nonfirst messages in an initiating
  SMTP connection.
  * Bug 2229: Fix cutthrough routing for nonstandard port numbers defined by
  routers.
  * Bug 2174: A timeout on connect for a callout was also erroneously seen as
  a timeout on read on a GnuTLS initiating connection, resulting in the
  initiating connection being dropped.
  * Relax results from ACL control request to enable cutthrough, in
  unsupported situations, from error to silently (except under debug)
  ignoring.
  * Fix Buffer overflow in base64d() (CVE-2018-6789)
  * Fix bug in DKIM verify: a buffer overflow could corrupt the malloc
  metadata, resulting in a crash in free().
  * Fix broken Heimdal GSSAPI authenticator integration.
  * Bug 2113: Fix conversation closedown with the Avast malware scanner.
  * Bug 2239: Enforce non-usability of control=utf8_downconvert in the mail ACL.
  * Speed up macro lookups during configuration file read, by skipping non-
  macro text after a replacement (previously it was only once per line) and
  by skipping builtin macros when searching for an uppercase lead character.
  * DANE support moved from Experimental to mainline.  The Makefile control
  for the build is renamed.
  * Fix memory leak during multi-message connections using STARTTLS.
  * Bug 2236: When a DKIM verification result is overridden by ACL, DMARC
  reported the original.  Fix to report (as far as possible) the ACL
  result replacing the original.
  * Fix memory leak during multi-message connections using STARTTLS under
  OpenSSL
  * Bug 2242: Fix exim_dbmbuild to permit directoryless filenames.
  * Fix utf8_downconvert propagation through a redirect router.
  * Bug 2253: For logging delivery lines under PRDR, append the overall
  DATA response info to the (existing) per-recipient response info for
  the "C=" log element.
  * Bug 2251: Fix ldap lookups that return a single attribute having zero-
  length value.
  * Support Avast multiline protocol, this allows passing flags to
  newer versions of the scanner.
  * Ensure that variables possibly set during message acceptance are marked
    dead before release of memory in the daemon loop.
  * Bug 2250: Fix a longstanding bug in heavily-pipelined SMTP input (such
  as a multi-recipient message from a mailinglist manager).
  * The (EXPERIMENTAL_DMARC) variable $dmarc_ar_header is withdrawn, being
  replaced by the ${authresults } expansion.
  * Bug 2257: Fix pipe transport to not use a socket-only syscall.
  * Set a handler for SIGTERM and call exit(3) if running as PID 1. This
  allows proper process termination in container environments.
  * Bug 2258: Fix spool_wireformat in combination with LMTP transport.
  Previously the "final dot" had a newline after it; ensure it is CR,LF.
  * SPF: remove support for the "spf" ACL condition outcome values "err_temp"
  and "err_perm", deprecated since 4.83 when the RFC-defined words
  " temperror" and "permerror" were introduced.
  * Re-introduce enforcement of no cutthrough delivery on transports having
  transport-filters or DKIM-signing.
  * Cutthrough: for a final-dot response timeout (and nonunderstood responses)
  in defer=pass mode supply a 450 to the initiator.  Previously the message
    would be spooled.
  * DANE: add dane_require_tls_ciphers SMTP Transport option; if unset,
    tls_require_ciphers is used as before.
  * Malware Avast: Better match the Avast multiline protocol.
  * Fix reinitialisation of DKIM logging variable between messages.
  * Bug 2255: Revert the disable of the OpenSSL session caching.
  * Add util/renew-opendmarc-tlds.sh script for safe renewal of public
  suffix list.
  * DKIM: accept Ed25519 pubkeys in SubjectPublicKeyInfo-wrapped form,
  since the IETF WG has not yet settled on that versus the original
  "bare" representation.
  * Fix syslog logging for syslog_timestamp=no and log_selector +millisec.
  Previously the millisecond value corrupted the output.
  Fix also for syslog_pid=no and log_selector +pid, for which the pid
  corrupted the output.</changelog>
  <changelog author="seanlew@opensuse.org" date="1553342400">- update to exim 4.92
  * ${l_header:&lt;name&gt;} expansion
  * ${readsocket} now supports TLS
  * "utf8_downconvert" option (if built with SUPPORT_I18N)
  * "pipelining" log_selector
  * JSON variants for ${extract } expansion
  * "noutf8" debug option
  * TCP Fast Open support on MacOS
  * CVE-2019-10149: Fixed a Remote Command Execution (bsc#1136587)
- add workaround patch for compile time error on missing printf
  format annotation (gnu_printf.patch)</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1559736000">- spec file cleanup
  * fix DANE inclusion guard condition
  * re-enable i18n and remove misleading comment
  * EXPERIMENTAL_SPF is now SUPPORT_SPF
  * DANE is now SUPPORT_DANE</changelog>
  <changelog author="alex &lt;atoptsoglou@suse.com&gt;" date="1564056000">- update to exim 4.92.1
  * CVE-2019-13917: Fixed an issue with ${sort} expansion which could
  allow remote attackers to execute other programs with root privileges
  (boo#1142207)</changelog>
  <changelog author="poeml@cmdline.net" date="1567857600">- update to exim 4.92.2
  * CVE-2019-15846: fix against remote attackers executing arbitrary code as
    root via a trailing backslash</changelog>
  <changelog author="poeml@cmdline.net" date="1569844800">- update to exim 4.92.3
  * CVE-2019-16928: fix against Heap-based buffer overflow in string_vformat,
    remote code execution seems to be possible</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1575892800">- update to exim 4.93
  * SUPPORT_DMARC replaces EXPERIMENTAL_DMARC
  * DISABLE_TLS replaces SUPPORT_TLS
  * Bump the version for the local_scan API.
  * smtp transport option hosts_try_fastopen defaults to "*".
  * DNSSec is requested (not required) for all queries. (This seemes to
    ask for trouble if your resolver is a systemd-resolved.)
  * Generic router option retry_use_local_part defaults to "true" under specific
    pre-conditions.
  * Introduce a tainting mechanism for values read from untrusted sources.
  * Use longer file names for temporary spool files (this avoids
    name conflicts with spool on a shared file system).
  * Use dsn_from main config option (was ignored previously).</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1577966400">spec file cleanup to make update work
- add docdir to spec</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1578398400">- update to exim 4.93.0.4 (+fixes release)
  * Avoid costly startup code when not strictly needed.  This reduces time
    for some exim process initialisations.  It does mean that the logging
    of TLS configuration problems is only done for the daemon startup.
  * Early-pipelining support code is now included unless disabled in Makefile.
  * DKIM verification defaults no long accept sha1 hashes, to conform to
    RFC 8301.  They can still be enabled, using the dkim_verify_hashes main
    option.
  * Support CHUNKING from an smtp transport using a transport_filter, when
    DKIM signing is being done.  Previously a transport_filter would always
    disable CHUNKING, falling back to traditional DATA.
  * Regard command-line receipients as tainted.
  * Bug 340: Remove the daemon pid file on exit, whe due to SIGTERM.
  * Bug 2489: Fix crash in the "pam" expansion condition.  It seems that the
    PAM library frees one of the arguments given to it, despite the
    documentation.  Therefore a plain malloc must be used.
  * Bug 2491: Use tainted buffers for the transport smtp context.  Previously
    on-stack buffers were used, resulting in a taint trap when DSN information
    copied from a received message was written into the buffer.
  * Bug 2493: Harden ARC verify against Outlook, whick has been seen to mix
    the ordering of its ARC headers.  This caused a crash.
  * Bug 2492: Use tainted memory for retry record when needed.  Previously when
    a new record was being constructed with information from the peer, a trap
    was taken.
  * Bug 2494: Unset the default for dmarc_tld_file.  Previously a naiive
    installation would get error messages from DMARC verify, when it hit the
    nonexistent file indicated by the default.  Distros wanting DMARC enabled
    should both provide the file and set the option.
    Also enforce no DMARC verification for command-line sourced messages.
  * Fix an uninitialised flag in early-pipelining.  Previously connections
    could, depending on the platform, hang at the STARTTLS response.
  * Bug 2498: Reset a counter used for ARC verify before handling another
    message on a connection.  Previously if one message had ARC headers and
    the following one did not, a crash could result when adding an
    Authentication-Results: header.
  * Bug 2500: Rewind some of the common-coding in string handling between the
    Exim main code and Exim-related utities.  The introduction of taint
    tracking also did many adjustments to string handling.  Since then, eximon
    frequently terminated with an assert failure.
  * When PIPELINING, synch after every hundred or so RCPT commands sent and
    check for 452 responses.  This slightly helps the inefficieny of doing
    a large alias-expansion into a recipient-limited target.  The max_rcpt
    transport option still applies (and at the current default, will override
    the new feature).  The check is done for either cause of synch, and forces
    a fast-retry of all 452'd recipients using a new MAIL FROM on the same
    connection.  The new facility is not tunable at this time.
  * Fix the variables set by the gsasl authenticator.  Previously a pointer to
    library live data was being used, so the results became garbage.  Make
    copies while it is still usable.
  * Logging: when the deliver_time selector ise set, include the DT= field
    on delivery deferred (==) and failed (**) lines (if a delivery was
    attemtped).  Previously it was only on completion (=&gt;) lines.
  * Authentication: the gsasl driver not provides the $authN variables in time
    for the expansion of the server_scram_iter and server_scram_salt options.</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1578916800">- add a spec-file workaround for bsc#1160726</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1585742400">- don't create logfiles during install
  * fixes CVE-2020-8015 (bsc#1154183)</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1589284800">- bring changes from current in +fixes branch
  (patch-exim-fixes-ee83de04d3087efaf808d1f2235a988275c2ee94)
  * fixes CVE-2020-12783 (bsc#1171490)
  * Regard command-line recipients as tainted.
  * Bug 2489: Fix crash in the "pam" expansion condition.
  * Use tainted buffers for the transport smtp context.
  * Bug 2493: Harden ARC verify against Outlook, which has been seen to mix
    the ordering of its ARC headers.  This caused a crash.
  * Bug 2492: Use tainted memory for retry record when needed.  Previously when
    a new record was being constructed with information from the peer, a trap
    was taken.
  * Bug 2494: Unset the default for dmarc_tld_file.
  * Fix an uninitialised flag in early-pipelining.  Previously connections
    could, depending on the platform, hang at the STARTTLS response.
  * Bug 2498: Reset a counter used for ARC verify before handling another
    message on a connection.  Previously if one message had ARC headers and
    the following one did not, a crash could result when adding an
    Authentication-Results: header.
  * Bug 2500: Rewind some of the common-coding in string handling between the
    Exim main code and Exim-related utities.
  * Fix the variables set by the gsasl authenticator.
  * Bug 2507: Modules: on handling a dynamic-module (lookups) open failure,
    only retrieve the errormessage once.
  * Bug 2501: Fix init call in the heimdal authenticator.  Previously it
    adjusted the size of a major service buffer; this failed because the
    buffer was in use at the time.  Change to a compile-time increase in the
    buffer size, when this authenticator is compiled into exim.</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1589889600">- switch pretrans to use lua
  (fixes bsc#1171877)</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1591099200">- update to exim 4.94
  * some transports now refuse to use tainted data in constructing their delivery
    location
    this WILL BREAK configurations which are not updated accordingly.
    In particular: any Transport use of $local_user which has been relying upon
    check_local_user far away in the Router to make it safe, should be updated to
    replace $local_user with $local_part_data.
  * Attempting to remove, in router or transport, a header name that ends with
    an asterisk (which is a standards-legal name) will now result in all headers
    named starting with the string before the asterisk being removed.</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1591617600">- bring in changes from current +fixes (lots of taint check fixes)
  * Bug 1329: Fix format of Maildir-format filenames to match other mail-
    related applications.  Previously an "H" was used where available info
    says that "M" should be, so change to match.
  * Bug 2587: Fix pam expansion condition.  Tainted values are commonly used
    as arguments, so an implementation trying to copy these into a local
    buffer was taking a taint-enforcement trap.  Fix by using dynamically
    created buffers.
  * Bug 2586: Fix listcount expansion operator.  Using tainted arguments is
    reasonable, eg. to count headers.  Fix by using dynamically created
    buffers rather than a local.  Do similar fixes for ACL actions "dcc",
    "log_reject_target", "malware" and "spam"; the arguments are expanded
    so could be handling tainted values.
  * Bug 2590: Fix -bi (newaliases).  A previous code rearrangement had
    broken the (no-op) support for this sendmail command.  Restore it
    to doing nothing, silently, and returning good status.</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1598270400">- bring back missing exim_db.8 manual page
  (fixes bsc#1173693)</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1619611200">- update to exim-4.94.1
  * Fix security issue in BDAT state confusion.
    Ensure we reset known-good where we know we need to not be reading BDAT
    data, as a general case fix, and move the places where we switch to BDAT
    mode until after various protocol state checks.
    Fixes CVE-2020-BDATA reported by Qualys.
  * Fix security issue in SMTP verb option parsing (CVE-2020-EXOPT)
  * Fix security issue with too many recipients on a message (to remove a
    known security problem if someone does set recipients_max to unlimited,
    or if local additions add to the recipient list).
    Fixes CVE-2020-RCPTL reported by Qualys.
  * Fix CVE-2020-28016 (PFPZA): Heap out-of-bounds write in parse_fix_phrase()
  * Fix security issue CVE-2020-PFPSN and guard against cmdline invoker
    providing a particularly obnoxious sender full name.
  * Fix Linux security issue CVE-2020-SLCWD and guard against PATH_MAX
    better.</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1620129600">- update to exim-4.94.2
  security update (bsc#1185631)
  * CVE-2020-28007: Link attack in Exim's log directory
  * CVE-2020-28008: Assorted attacks in Exim's spool directory
  * CVE-2020-28014: Arbitrary PID file creation
  * CVE-2020-28011: Heap buffer overflow in queue_run()
  * CVE-2020-28010: Heap out-of-bounds write in main()
  * CVE-2020-28013: Heap buffer overflow in parse_fix_phrase()
  * CVE-2020-28016: Heap out-of-bounds write in parse_fix_phrase()
  * CVE-2020-28015: New-line injection into spool header file (local)
  * CVE-2020-28012: Missing close-on-exec flag for privileged pipe
  * CVE-2020-28009: Integer overflow in get_stdinput()
  * CVE-2020-28017: Integer overflow in receive_add_recipient()
  * CVE-2020-28020: Integer overflow in receive_msg()
  * CVE-2020-28023: Out-of-bounds read in smtp_setup_msg()
  * CVE-2020-28021: New-line injection into spool header file (remote)
  * CVE-2020-28022: Heap out-of-bounds read and write in extract_option()
  * CVE-2020-28026: Line truncation and injection in spool_read_header()
  * CVE-2020-28019: Failure to reset function pointer after BDAT error
  * CVE-2020-28024: Heap buffer underflow in smtp_ungetc()
  * CVE-2020-28018: Use-after-free in tls-openssl.c
  * CVE-2020-28025: Heap out-of-bounds read in pdkim_finish_bodyhash()</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1666094400">- add patch-cve-2022-3559 (fixes CVE-2022-3559, bsc#1204427, Bug 2915)</changelog>
</package>
<package pkgid="aabed39c9069066f20d23a5ae0ee8a354c383705af9fe6b00328ba4dc13e7795" name="eximstats-html" arch="ppc64le">
  <version epoch="0" ver="4.94.2" rel="bp154.2.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1521115200">- Replace xorg-x11-devel by individual pkgconfig() buildrequires.</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1523880000">- update to 4.91
  * DEFER rather than ERROR on redis cluster MOVED response.
  * Catch and remove uninitialized value warning in exiqsumm
  * Disallow '/' characters in queue names specified for the "queue=" ACL
    modifier.  This matches the restriction on the commandline.
  * Fix pgsql lookup for multiple result-tuples with a single column.
    Previously only the last row was returned.
  * Bug 2217: Tighten up the parsing of DKIM signature headers.
  * Bug 2215: Fix crash associated with dnsdb lookup done from DKIM ACL.
  * Fix issue with continued-connections when the DNS shifts unreliably.
  * Bug 2214: Fix SMTP responses resulting from non-accept result of MIME ACL.
  * The "support for" informational output now, which built with Content
  Scanning support, has a line for the malware scanner interfaces compiled
  in.  Interface can be individually included or not at build time.
  * The "aveserver", "kavdaemon" and "mksd" interfaces are now not included
  by the template makefile "src/EDITME".  The "STREAM" support for an older
  ClamAV interface method is removed.
  * Bug 2223: Fix mysql lookup returns for the no-data case (when the number of
  rows affected is given instead).
  * The runtime Berkeley DB library version is now additionally output by
  "exim -d -bV".  Previously only the compile-time version was shown.
  * Bug 2230: Fix cutthrough routing for nonfirst messages in an initiating
  SMTP connection.
  * Bug 2229: Fix cutthrough routing for nonstandard port numbers defined by
  routers.
  * Bug 2174: A timeout on connect for a callout was also erroneously seen as
  a timeout on read on a GnuTLS initiating connection, resulting in the
  initiating connection being dropped.
  * Relax results from ACL control request to enable cutthrough, in
  unsupported situations, from error to silently (except under debug)
  ignoring.
  * Fix Buffer overflow in base64d() (CVE-2018-6789)
  * Fix bug in DKIM verify: a buffer overflow could corrupt the malloc
  metadata, resulting in a crash in free().
  * Fix broken Heimdal GSSAPI authenticator integration.
  * Bug 2113: Fix conversation closedown with the Avast malware scanner.
  * Bug 2239: Enforce non-usability of control=utf8_downconvert in the mail ACL.
  * Speed up macro lookups during configuration file read, by skipping non-
  macro text after a replacement (previously it was only once per line) and
  by skipping builtin macros when searching for an uppercase lead character.
  * DANE support moved from Experimental to mainline.  The Makefile control
  for the build is renamed.
  * Fix memory leak during multi-message connections using STARTTLS.
  * Bug 2236: When a DKIM verification result is overridden by ACL, DMARC
  reported the original.  Fix to report (as far as possible) the ACL
  result replacing the original.
  * Fix memory leak during multi-message connections using STARTTLS under
  OpenSSL
  * Bug 2242: Fix exim_dbmbuild to permit directoryless filenames.
  * Fix utf8_downconvert propagation through a redirect router.
  * Bug 2253: For logging delivery lines under PRDR, append the overall
  DATA response info to the (existing) per-recipient response info for
  the "C=" log element.
  * Bug 2251: Fix ldap lookups that return a single attribute having zero-
  length value.
  * Support Avast multiline protocol, this allows passing flags to
  newer versions of the scanner.
  * Ensure that variables possibly set during message acceptance are marked
    dead before release of memory in the daemon loop.
  * Bug 2250: Fix a longstanding bug in heavily-pipelined SMTP input (such
  as a multi-recipient message from a mailinglist manager).
  * The (EXPERIMENTAL_DMARC) variable $dmarc_ar_header is withdrawn, being
  replaced by the ${authresults } expansion.
  * Bug 2257: Fix pipe transport to not use a socket-only syscall.
  * Set a handler for SIGTERM and call exit(3) if running as PID 1. This
  allows proper process termination in container environments.
  * Bug 2258: Fix spool_wireformat in combination with LMTP transport.
  Previously the "final dot" had a newline after it; ensure it is CR,LF.
  * SPF: remove support for the "spf" ACL condition outcome values "err_temp"
  and "err_perm", deprecated since 4.83 when the RFC-defined words
  " temperror" and "permerror" were introduced.
  * Re-introduce enforcement of no cutthrough delivery on transports having
  transport-filters or DKIM-signing.
  * Cutthrough: for a final-dot response timeout (and nonunderstood responses)
  in defer=pass mode supply a 450 to the initiator.  Previously the message
    would be spooled.
  * DANE: add dane_require_tls_ciphers SMTP Transport option; if unset,
    tls_require_ciphers is used as before.
  * Malware Avast: Better match the Avast multiline protocol.
  * Fix reinitialisation of DKIM logging variable between messages.
  * Bug 2255: Revert the disable of the OpenSSL session caching.
  * Add util/renew-opendmarc-tlds.sh script for safe renewal of public
  suffix list.
  * DKIM: accept Ed25519 pubkeys in SubjectPublicKeyInfo-wrapped form,
  since the IETF WG has not yet settled on that versus the original
  "bare" representation.
  * Fix syslog logging for syslog_timestamp=no and log_selector +millisec.
  Previously the millisecond value corrupted the output.
  Fix also for syslog_pid=no and log_selector +pid, for which the pid
  corrupted the output.</changelog>
  <changelog author="seanlew@opensuse.org" date="1553342400">- update to exim 4.92
  * ${l_header:&lt;name&gt;} expansion
  * ${readsocket} now supports TLS
  * "utf8_downconvert" option (if built with SUPPORT_I18N)
  * "pipelining" log_selector
  * JSON variants for ${extract } expansion
  * "noutf8" debug option
  * TCP Fast Open support on MacOS
  * CVE-2019-10149: Fixed a Remote Command Execution (bsc#1136587)
- add workaround patch for compile time error on missing printf
  format annotation (gnu_printf.patch)</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1559736000">- spec file cleanup
  * fix DANE inclusion guard condition
  * re-enable i18n and remove misleading comment
  * EXPERIMENTAL_SPF is now SUPPORT_SPF
  * DANE is now SUPPORT_DANE</changelog>
  <changelog author="alex &lt;atoptsoglou@suse.com&gt;" date="1564056000">- update to exim 4.92.1
  * CVE-2019-13917: Fixed an issue with ${sort} expansion which could
  allow remote attackers to execute other programs with root privileges
  (boo#1142207)</changelog>
  <changelog author="poeml@cmdline.net" date="1567857600">- update to exim 4.92.2
  * CVE-2019-15846: fix against remote attackers executing arbitrary code as
    root via a trailing backslash</changelog>
  <changelog author="poeml@cmdline.net" date="1569844800">- update to exim 4.92.3
  * CVE-2019-16928: fix against Heap-based buffer overflow in string_vformat,
    remote code execution seems to be possible</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1575892800">- update to exim 4.93
  * SUPPORT_DMARC replaces EXPERIMENTAL_DMARC
  * DISABLE_TLS replaces SUPPORT_TLS
  * Bump the version for the local_scan API.
  * smtp transport option hosts_try_fastopen defaults to "*".
  * DNSSec is requested (not required) for all queries. (This seemes to
    ask for trouble if your resolver is a systemd-resolved.)
  * Generic router option retry_use_local_part defaults to "true" under specific
    pre-conditions.
  * Introduce a tainting mechanism for values read from untrusted sources.
  * Use longer file names for temporary spool files (this avoids
    name conflicts with spool on a shared file system).
  * Use dsn_from main config option (was ignored previously).</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1577966400">spec file cleanup to make update work
- add docdir to spec</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1578398400">- update to exim 4.93.0.4 (+fixes release)
  * Avoid costly startup code when not strictly needed.  This reduces time
    for some exim process initialisations.  It does mean that the logging
    of TLS configuration problems is only done for the daemon startup.
  * Early-pipelining support code is now included unless disabled in Makefile.
  * DKIM verification defaults no long accept sha1 hashes, to conform to
    RFC 8301.  They can still be enabled, using the dkim_verify_hashes main
    option.
  * Support CHUNKING from an smtp transport using a transport_filter, when
    DKIM signing is being done.  Previously a transport_filter would always
    disable CHUNKING, falling back to traditional DATA.
  * Regard command-line receipients as tainted.
  * Bug 340: Remove the daemon pid file on exit, whe due to SIGTERM.
  * Bug 2489: Fix crash in the "pam" expansion condition.  It seems that the
    PAM library frees one of the arguments given to it, despite the
    documentation.  Therefore a plain malloc must be used.
  * Bug 2491: Use tainted buffers for the transport smtp context.  Previously
    on-stack buffers were used, resulting in a taint trap when DSN information
    copied from a received message was written into the buffer.
  * Bug 2493: Harden ARC verify against Outlook, whick has been seen to mix
    the ordering of its ARC headers.  This caused a crash.
  * Bug 2492: Use tainted memory for retry record when needed.  Previously when
    a new record was being constructed with information from the peer, a trap
    was taken.
  * Bug 2494: Unset the default for dmarc_tld_file.  Previously a naiive
    installation would get error messages from DMARC verify, when it hit the
    nonexistent file indicated by the default.  Distros wanting DMARC enabled
    should both provide the file and set the option.
    Also enforce no DMARC verification for command-line sourced messages.
  * Fix an uninitialised flag in early-pipelining.  Previously connections
    could, depending on the platform, hang at the STARTTLS response.
  * Bug 2498: Reset a counter used for ARC verify before handling another
    message on a connection.  Previously if one message had ARC headers and
    the following one did not, a crash could result when adding an
    Authentication-Results: header.
  * Bug 2500: Rewind some of the common-coding in string handling between the
    Exim main code and Exim-related utities.  The introduction of taint
    tracking also did many adjustments to string handling.  Since then, eximon
    frequently terminated with an assert failure.
  * When PIPELINING, synch after every hundred or so RCPT commands sent and
    check for 452 responses.  This slightly helps the inefficieny of doing
    a large alias-expansion into a recipient-limited target.  The max_rcpt
    transport option still applies (and at the current default, will override
    the new feature).  The check is done for either cause of synch, and forces
    a fast-retry of all 452'd recipients using a new MAIL FROM on the same
    connection.  The new facility is not tunable at this time.
  * Fix the variables set by the gsasl authenticator.  Previously a pointer to
    library live data was being used, so the results became garbage.  Make
    copies while it is still usable.
  * Logging: when the deliver_time selector ise set, include the DT= field
    on delivery deferred (==) and failed (**) lines (if a delivery was
    attemtped).  Previously it was only on completion (=&gt;) lines.
  * Authentication: the gsasl driver not provides the $authN variables in time
    for the expansion of the server_scram_iter and server_scram_salt options.</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1578916800">- add a spec-file workaround for bsc#1160726</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1585742400">- don't create logfiles during install
  * fixes CVE-2020-8015 (bsc#1154183)</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1589284800">- bring changes from current in +fixes branch
  (patch-exim-fixes-ee83de04d3087efaf808d1f2235a988275c2ee94)
  * fixes CVE-2020-12783 (bsc#1171490)
  * Regard command-line recipients as tainted.
  * Bug 2489: Fix crash in the "pam" expansion condition.
  * Use tainted buffers for the transport smtp context.
  * Bug 2493: Harden ARC verify against Outlook, which has been seen to mix
    the ordering of its ARC headers.  This caused a crash.
  * Bug 2492: Use tainted memory for retry record when needed.  Previously when
    a new record was being constructed with information from the peer, a trap
    was taken.
  * Bug 2494: Unset the default for dmarc_tld_file.
  * Fix an uninitialised flag in early-pipelining.  Previously connections
    could, depending on the platform, hang at the STARTTLS response.
  * Bug 2498: Reset a counter used for ARC verify before handling another
    message on a connection.  Previously if one message had ARC headers and
    the following one did not, a crash could result when adding an
    Authentication-Results: header.
  * Bug 2500: Rewind some of the common-coding in string handling between the
    Exim main code and Exim-related utities.
  * Fix the variables set by the gsasl authenticator.
  * Bug 2507: Modules: on handling a dynamic-module (lookups) open failure,
    only retrieve the errormessage once.
  * Bug 2501: Fix init call in the heimdal authenticator.  Previously it
    adjusted the size of a major service buffer; this failed because the
    buffer was in use at the time.  Change to a compile-time increase in the
    buffer size, when this authenticator is compiled into exim.</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1589889600">- switch pretrans to use lua
  (fixes bsc#1171877)</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1591099200">- update to exim 4.94
  * some transports now refuse to use tainted data in constructing their delivery
    location
    this WILL BREAK configurations which are not updated accordingly.
    In particular: any Transport use of $local_user which has been relying upon
    check_local_user far away in the Router to make it safe, should be updated to
    replace $local_user with $local_part_data.
  * Attempting to remove, in router or transport, a header name that ends with
    an asterisk (which is a standards-legal name) will now result in all headers
    named starting with the string before the asterisk being removed.</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1591617600">- bring in changes from current +fixes (lots of taint check fixes)
  * Bug 1329: Fix format of Maildir-format filenames to match other mail-
    related applications.  Previously an "H" was used where available info
    says that "M" should be, so change to match.
  * Bug 2587: Fix pam expansion condition.  Tainted values are commonly used
    as arguments, so an implementation trying to copy these into a local
    buffer was taking a taint-enforcement trap.  Fix by using dynamically
    created buffers.
  * Bug 2586: Fix listcount expansion operator.  Using tainted arguments is
    reasonable, eg. to count headers.  Fix by using dynamically created
    buffers rather than a local.  Do similar fixes for ACL actions "dcc",
    "log_reject_target", "malware" and "spam"; the arguments are expanded
    so could be handling tainted values.
  * Bug 2590: Fix -bi (newaliases).  A previous code rearrangement had
    broken the (no-op) support for this sendmail command.  Restore it
    to doing nothing, silently, and returning good status.</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1598270400">- bring back missing exim_db.8 manual page
  (fixes bsc#1173693)</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1619611200">- update to exim-4.94.1
  * Fix security issue in BDAT state confusion.
    Ensure we reset known-good where we know we need to not be reading BDAT
    data, as a general case fix, and move the places where we switch to BDAT
    mode until after various protocol state checks.
    Fixes CVE-2020-BDATA reported by Qualys.
  * Fix security issue in SMTP verb option parsing (CVE-2020-EXOPT)
  * Fix security issue with too many recipients on a message (to remove a
    known security problem if someone does set recipients_max to unlimited,
    or if local additions add to the recipient list).
    Fixes CVE-2020-RCPTL reported by Qualys.
  * Fix CVE-2020-28016 (PFPZA): Heap out-of-bounds write in parse_fix_phrase()
  * Fix security issue CVE-2020-PFPSN and guard against cmdline invoker
    providing a particularly obnoxious sender full name.
  * Fix Linux security issue CVE-2020-SLCWD and guard against PATH_MAX
    better.</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1620129600">- update to exim-4.94.2
  security update (bsc#1185631)
  * CVE-2020-28007: Link attack in Exim's log directory
  * CVE-2020-28008: Assorted attacks in Exim's spool directory
  * CVE-2020-28014: Arbitrary PID file creation
  * CVE-2020-28011: Heap buffer overflow in queue_run()
  * CVE-2020-28010: Heap out-of-bounds write in main()
  * CVE-2020-28013: Heap buffer overflow in parse_fix_phrase()
  * CVE-2020-28016: Heap out-of-bounds write in parse_fix_phrase()
  * CVE-2020-28015: New-line injection into spool header file (local)
  * CVE-2020-28012: Missing close-on-exec flag for privileged pipe
  * CVE-2020-28009: Integer overflow in get_stdinput()
  * CVE-2020-28017: Integer overflow in receive_add_recipient()
  * CVE-2020-28020: Integer overflow in receive_msg()
  * CVE-2020-28023: Out-of-bounds read in smtp_setup_msg()
  * CVE-2020-28021: New-line injection into spool header file (remote)
  * CVE-2020-28022: Heap out-of-bounds read and write in extract_option()
  * CVE-2020-28026: Line truncation and injection in spool_read_header()
  * CVE-2020-28019: Failure to reset function pointer after BDAT error
  * CVE-2020-28024: Heap buffer underflow in smtp_ungetc()
  * CVE-2020-28018: Use-after-free in tls-openssl.c
  * CVE-2020-28025: Heap out-of-bounds read in pdkim_finish_bodyhash()</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1666094400">- add patch-cve-2022-3559 (fixes CVE-2022-3559, bsc#1204427, Bug 2915)</changelog>
</package>
<package pkgid="b04f58eed4e659a3851b1e758d6eb93b7b1701ffe8b125c2780ee3080dda6923" name="eximstats-html" arch="s390x">
  <version epoch="0" ver="4.94.2" rel="bp154.2.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1521115200">- Replace xorg-x11-devel by individual pkgconfig() buildrequires.</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1523880000">- update to 4.91
  * DEFER rather than ERROR on redis cluster MOVED response.
  * Catch and remove uninitialized value warning in exiqsumm
  * Disallow '/' characters in queue names specified for the "queue=" ACL
    modifier.  This matches the restriction on the commandline.
  * Fix pgsql lookup for multiple result-tuples with a single column.
    Previously only the last row was returned.
  * Bug 2217: Tighten up the parsing of DKIM signature headers.
  * Bug 2215: Fix crash associated with dnsdb lookup done from DKIM ACL.
  * Fix issue with continued-connections when the DNS shifts unreliably.
  * Bug 2214: Fix SMTP responses resulting from non-accept result of MIME ACL.
  * The "support for" informational output now, which built with Content
  Scanning support, has a line for the malware scanner interfaces compiled
  in.  Interface can be individually included or not at build time.
  * The "aveserver", "kavdaemon" and "mksd" interfaces are now not included
  by the template makefile "src/EDITME".  The "STREAM" support for an older
  ClamAV interface method is removed.
  * Bug 2223: Fix mysql lookup returns for the no-data case (when the number of
  rows affected is given instead).
  * The runtime Berkeley DB library version is now additionally output by
  "exim -d -bV".  Previously only the compile-time version was shown.
  * Bug 2230: Fix cutthrough routing for nonfirst messages in an initiating
  SMTP connection.
  * Bug 2229: Fix cutthrough routing for nonstandard port numbers defined by
  routers.
  * Bug 2174: A timeout on connect for a callout was also erroneously seen as
  a timeout on read on a GnuTLS initiating connection, resulting in the
  initiating connection being dropped.
  * Relax results from ACL control request to enable cutthrough, in
  unsupported situations, from error to silently (except under debug)
  ignoring.
  * Fix Buffer overflow in base64d() (CVE-2018-6789)
  * Fix bug in DKIM verify: a buffer overflow could corrupt the malloc
  metadata, resulting in a crash in free().
  * Fix broken Heimdal GSSAPI authenticator integration.
  * Bug 2113: Fix conversation closedown with the Avast malware scanner.
  * Bug 2239: Enforce non-usability of control=utf8_downconvert in the mail ACL.
  * Speed up macro lookups during configuration file read, by skipping non-
  macro text after a replacement (previously it was only once per line) and
  by skipping builtin macros when searching for an uppercase lead character.
  * DANE support moved from Experimental to mainline.  The Makefile control
  for the build is renamed.
  * Fix memory leak during multi-message connections using STARTTLS.
  * Bug 2236: When a DKIM verification result is overridden by ACL, DMARC
  reported the original.  Fix to report (as far as possible) the ACL
  result replacing the original.
  * Fix memory leak during multi-message connections using STARTTLS under
  OpenSSL
  * Bug 2242: Fix exim_dbmbuild to permit directoryless filenames.
  * Fix utf8_downconvert propagation through a redirect router.
  * Bug 2253: For logging delivery lines under PRDR, append the overall
  DATA response info to the (existing) per-recipient response info for
  the "C=" log element.
  * Bug 2251: Fix ldap lookups that return a single attribute having zero-
  length value.
  * Support Avast multiline protocol, this allows passing flags to
  newer versions of the scanner.
  * Ensure that variables possibly set during message acceptance are marked
    dead before release of memory in the daemon loop.
  * Bug 2250: Fix a longstanding bug in heavily-pipelined SMTP input (such
  as a multi-recipient message from a mailinglist manager).
  * The (EXPERIMENTAL_DMARC) variable $dmarc_ar_header is withdrawn, being
  replaced by the ${authresults } expansion.
  * Bug 2257: Fix pipe transport to not use a socket-only syscall.
  * Set a handler for SIGTERM and call exit(3) if running as PID 1. This
  allows proper process termination in container environments.
  * Bug 2258: Fix spool_wireformat in combination with LMTP transport.
  Previously the "final dot" had a newline after it; ensure it is CR,LF.
  * SPF: remove support for the "spf" ACL condition outcome values "err_temp"
  and "err_perm", deprecated since 4.83 when the RFC-defined words
  " temperror" and "permerror" were introduced.
  * Re-introduce enforcement of no cutthrough delivery on transports having
  transport-filters or DKIM-signing.
  * Cutthrough: for a final-dot response timeout (and nonunderstood responses)
  in defer=pass mode supply a 450 to the initiator.  Previously the message
    would be spooled.
  * DANE: add dane_require_tls_ciphers SMTP Transport option; if unset,
    tls_require_ciphers is used as before.
  * Malware Avast: Better match the Avast multiline protocol.
  * Fix reinitialisation of DKIM logging variable between messages.
  * Bug 2255: Revert the disable of the OpenSSL session caching.
  * Add util/renew-opendmarc-tlds.sh script for safe renewal of public
  suffix list.
  * DKIM: accept Ed25519 pubkeys in SubjectPublicKeyInfo-wrapped form,
  since the IETF WG has not yet settled on that versus the original
  "bare" representation.
  * Fix syslog logging for syslog_timestamp=no and log_selector +millisec.
  Previously the millisecond value corrupted the output.
  Fix also for syslog_pid=no and log_selector +pid, for which the pid
  corrupted the output.</changelog>
  <changelog author="seanlew@opensuse.org" date="1553342400">- update to exim 4.92
  * ${l_header:&lt;name&gt;} expansion
  * ${readsocket} now supports TLS
  * "utf8_downconvert" option (if built with SUPPORT_I18N)
  * "pipelining" log_selector
  * JSON variants for ${extract } expansion
  * "noutf8" debug option
  * TCP Fast Open support on MacOS
  * CVE-2019-10149: Fixed a Remote Command Execution (bsc#1136587)
- add workaround patch for compile time error on missing printf
  format annotation (gnu_printf.patch)</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1559736000">- spec file cleanup
  * fix DANE inclusion guard condition
  * re-enable i18n and remove misleading comment
  * EXPERIMENTAL_SPF is now SUPPORT_SPF
  * DANE is now SUPPORT_DANE</changelog>
  <changelog author="alex &lt;atoptsoglou@suse.com&gt;" date="1564056000">- update to exim 4.92.1
  * CVE-2019-13917: Fixed an issue with ${sort} expansion which could
  allow remote attackers to execute other programs with root privileges
  (boo#1142207)</changelog>
  <changelog author="poeml@cmdline.net" date="1567857600">- update to exim 4.92.2
  * CVE-2019-15846: fix against remote attackers executing arbitrary code as
    root via a trailing backslash</changelog>
  <changelog author="poeml@cmdline.net" date="1569844800">- update to exim 4.92.3
  * CVE-2019-16928: fix against Heap-based buffer overflow in string_vformat,
    remote code execution seems to be possible</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1575892800">- update to exim 4.93
  * SUPPORT_DMARC replaces EXPERIMENTAL_DMARC
  * DISABLE_TLS replaces SUPPORT_TLS
  * Bump the version for the local_scan API.
  * smtp transport option hosts_try_fastopen defaults to "*".
  * DNSSec is requested (not required) for all queries. (This seemes to
    ask for trouble if your resolver is a systemd-resolved.)
  * Generic router option retry_use_local_part defaults to "true" under specific
    pre-conditions.
  * Introduce a tainting mechanism for values read from untrusted sources.
  * Use longer file names for temporary spool files (this avoids
    name conflicts with spool on a shared file system).
  * Use dsn_from main config option (was ignored previously).</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1577966400">spec file cleanup to make update work
- add docdir to spec</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1578398400">- update to exim 4.93.0.4 (+fixes release)
  * Avoid costly startup code when not strictly needed.  This reduces time
    for some exim process initialisations.  It does mean that the logging
    of TLS configuration problems is only done for the daemon startup.
  * Early-pipelining support code is now included unless disabled in Makefile.
  * DKIM verification defaults no long accept sha1 hashes, to conform to
    RFC 8301.  They can still be enabled, using the dkim_verify_hashes main
    option.
  * Support CHUNKING from an smtp transport using a transport_filter, when
    DKIM signing is being done.  Previously a transport_filter would always
    disable CHUNKING, falling back to traditional DATA.
  * Regard command-line receipients as tainted.
  * Bug 340: Remove the daemon pid file on exit, whe due to SIGTERM.
  * Bug 2489: Fix crash in the "pam" expansion condition.  It seems that the
    PAM library frees one of the arguments given to it, despite the
    documentation.  Therefore a plain malloc must be used.
  * Bug 2491: Use tainted buffers for the transport smtp context.  Previously
    on-stack buffers were used, resulting in a taint trap when DSN information
    copied from a received message was written into the buffer.
  * Bug 2493: Harden ARC verify against Outlook, whick has been seen to mix
    the ordering of its ARC headers.  This caused a crash.
  * Bug 2492: Use tainted memory for retry record when needed.  Previously when
    a new record was being constructed with information from the peer, a trap
    was taken.
  * Bug 2494: Unset the default for dmarc_tld_file.  Previously a naiive
    installation would get error messages from DMARC verify, when it hit the
    nonexistent file indicated by the default.  Distros wanting DMARC enabled
    should both provide the file and set the option.
    Also enforce no DMARC verification for command-line sourced messages.
  * Fix an uninitialised flag in early-pipelining.  Previously connections
    could, depending on the platform, hang at the STARTTLS response.
  * Bug 2498: Reset a counter used for ARC verify before handling another
    message on a connection.  Previously if one message had ARC headers and
    the following one did not, a crash could result when adding an
    Authentication-Results: header.
  * Bug 2500: Rewind some of the common-coding in string handling between the
    Exim main code and Exim-related utities.  The introduction of taint
    tracking also did many adjustments to string handling.  Since then, eximon
    frequently terminated with an assert failure.
  * When PIPELINING, synch after every hundred or so RCPT commands sent and
    check for 452 responses.  This slightly helps the inefficieny of doing
    a large alias-expansion into a recipient-limited target.  The max_rcpt
    transport option still applies (and at the current default, will override
    the new feature).  The check is done for either cause of synch, and forces
    a fast-retry of all 452'd recipients using a new MAIL FROM on the same
    connection.  The new facility is not tunable at this time.
  * Fix the variables set by the gsasl authenticator.  Previously a pointer to
    library live data was being used, so the results became garbage.  Make
    copies while it is still usable.
  * Logging: when the deliver_time selector ise set, include the DT= field
    on delivery deferred (==) and failed (**) lines (if a delivery was
    attemtped).  Previously it was only on completion (=&gt;) lines.
  * Authentication: the gsasl driver not provides the $authN variables in time
    for the expansion of the server_scram_iter and server_scram_salt options.</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1578916800">- add a spec-file workaround for bsc#1160726</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1585742400">- don't create logfiles during install
  * fixes CVE-2020-8015 (bsc#1154183)</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1589284800">- bring changes from current in +fixes branch
  (patch-exim-fixes-ee83de04d3087efaf808d1f2235a988275c2ee94)
  * fixes CVE-2020-12783 (bsc#1171490)
  * Regard command-line recipients as tainted.
  * Bug 2489: Fix crash in the "pam" expansion condition.
  * Use tainted buffers for the transport smtp context.
  * Bug 2493: Harden ARC verify against Outlook, which has been seen to mix
    the ordering of its ARC headers.  This caused a crash.
  * Bug 2492: Use tainted memory for retry record when needed.  Previously when
    a new record was being constructed with information from the peer, a trap
    was taken.
  * Bug 2494: Unset the default for dmarc_tld_file.
  * Fix an uninitialised flag in early-pipelining.  Previously connections
    could, depending on the platform, hang at the STARTTLS response.
  * Bug 2498: Reset a counter used for ARC verify before handling another
    message on a connection.  Previously if one message had ARC headers and
    the following one did not, a crash could result when adding an
    Authentication-Results: header.
  * Bug 2500: Rewind some of the common-coding in string handling between the
    Exim main code and Exim-related utities.
  * Fix the variables set by the gsasl authenticator.
  * Bug 2507: Modules: on handling a dynamic-module (lookups) open failure,
    only retrieve the errormessage once.
  * Bug 2501: Fix init call in the heimdal authenticator.  Previously it
    adjusted the size of a major service buffer; this failed because the
    buffer was in use at the time.  Change to a compile-time increase in the
    buffer size, when this authenticator is compiled into exim.</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1589889600">- switch pretrans to use lua
  (fixes bsc#1171877)</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1591099200">- update to exim 4.94
  * some transports now refuse to use tainted data in constructing their delivery
    location
    this WILL BREAK configurations which are not updated accordingly.
    In particular: any Transport use of $local_user which has been relying upon
    check_local_user far away in the Router to make it safe, should be updated to
    replace $local_user with $local_part_data.
  * Attempting to remove, in router or transport, a header name that ends with
    an asterisk (which is a standards-legal name) will now result in all headers
    named starting with the string before the asterisk being removed.</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1591617600">- bring in changes from current +fixes (lots of taint check fixes)
  * Bug 1329: Fix format of Maildir-format filenames to match other mail-
    related applications.  Previously an "H" was used where available info
    says that "M" should be, so change to match.
  * Bug 2587: Fix pam expansion condition.  Tainted values are commonly used
    as arguments, so an implementation trying to copy these into a local
    buffer was taking a taint-enforcement trap.  Fix by using dynamically
    created buffers.
  * Bug 2586: Fix listcount expansion operator.  Using tainted arguments is
    reasonable, eg. to count headers.  Fix by using dynamically created
    buffers rather than a local.  Do similar fixes for ACL actions "dcc",
    "log_reject_target", "malware" and "spam"; the arguments are expanded
    so could be handling tainted values.
  * Bug 2590: Fix -bi (newaliases).  A previous code rearrangement had
    broken the (no-op) support for this sendmail command.  Restore it
    to doing nothing, silently, and returning good status.</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1598270400">- bring back missing exim_db.8 manual page
  (fixes bsc#1173693)</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1619611200">- update to exim-4.94.1
  * Fix security issue in BDAT state confusion.
    Ensure we reset known-good where we know we need to not be reading BDAT
    data, as a general case fix, and move the places where we switch to BDAT
    mode until after various protocol state checks.
    Fixes CVE-2020-BDATA reported by Qualys.
  * Fix security issue in SMTP verb option parsing (CVE-2020-EXOPT)
  * Fix security issue with too many recipients on a message (to remove a
    known security problem if someone does set recipients_max to unlimited,
    or if local additions add to the recipient list).
    Fixes CVE-2020-RCPTL reported by Qualys.
  * Fix CVE-2020-28016 (PFPZA): Heap out-of-bounds write in parse_fix_phrase()
  * Fix security issue CVE-2020-PFPSN and guard against cmdline invoker
    providing a particularly obnoxious sender full name.
  * Fix Linux security issue CVE-2020-SLCWD and guard against PATH_MAX
    better.</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1620129600">- update to exim-4.94.2
  security update (bsc#1185631)
  * CVE-2020-28007: Link attack in Exim's log directory
  * CVE-2020-28008: Assorted attacks in Exim's spool directory
  * CVE-2020-28014: Arbitrary PID file creation
  * CVE-2020-28011: Heap buffer overflow in queue_run()
  * CVE-2020-28010: Heap out-of-bounds write in main()
  * CVE-2020-28013: Heap buffer overflow in parse_fix_phrase()
  * CVE-2020-28016: Heap out-of-bounds write in parse_fix_phrase()
  * CVE-2020-28015: New-line injection into spool header file (local)
  * CVE-2020-28012: Missing close-on-exec flag for privileged pipe
  * CVE-2020-28009: Integer overflow in get_stdinput()
  * CVE-2020-28017: Integer overflow in receive_add_recipient()
  * CVE-2020-28020: Integer overflow in receive_msg()
  * CVE-2020-28023: Out-of-bounds read in smtp_setup_msg()
  * CVE-2020-28021: New-line injection into spool header file (remote)
  * CVE-2020-28022: Heap out-of-bounds read and write in extract_option()
  * CVE-2020-28026: Line truncation and injection in spool_read_header()
  * CVE-2020-28019: Failure to reset function pointer after BDAT error
  * CVE-2020-28024: Heap buffer underflow in smtp_ungetc()
  * CVE-2020-28018: Use-after-free in tls-openssl.c
  * CVE-2020-28025: Heap out-of-bounds read in pdkim_finish_bodyhash()</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1666094400">- add patch-cve-2022-3559 (fixes CVE-2022-3559, bsc#1204427, Bug 2915)</changelog>
</package>
<package pkgid="3a1f62072af41e3e1972e34e7fd7ca285f559c6bbbed639e8f6379b226595fee" name="eximstats-html" arch="x86_64">
  <version epoch="0" ver="4.94.2" rel="bp154.2.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1521115200">- Replace xorg-x11-devel by individual pkgconfig() buildrequires.</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1523880000">- update to 4.91
  * DEFER rather than ERROR on redis cluster MOVED response.
  * Catch and remove uninitialized value warning in exiqsumm
  * Disallow '/' characters in queue names specified for the "queue=" ACL
    modifier.  This matches the restriction on the commandline.
  * Fix pgsql lookup for multiple result-tuples with a single column.
    Previously only the last row was returned.
  * Bug 2217: Tighten up the parsing of DKIM signature headers.
  * Bug 2215: Fix crash associated with dnsdb lookup done from DKIM ACL.
  * Fix issue with continued-connections when the DNS shifts unreliably.
  * Bug 2214: Fix SMTP responses resulting from non-accept result of MIME ACL.
  * The "support for" informational output now, which built with Content
  Scanning support, has a line for the malware scanner interfaces compiled
  in.  Interface can be individually included or not at build time.
  * The "aveserver", "kavdaemon" and "mksd" interfaces are now not included
  by the template makefile "src/EDITME".  The "STREAM" support for an older
  ClamAV interface method is removed.
  * Bug 2223: Fix mysql lookup returns for the no-data case (when the number of
  rows affected is given instead).
  * The runtime Berkeley DB library version is now additionally output by
  "exim -d -bV".  Previously only the compile-time version was shown.
  * Bug 2230: Fix cutthrough routing for nonfirst messages in an initiating
  SMTP connection.
  * Bug 2229: Fix cutthrough routing for nonstandard port numbers defined by
  routers.
  * Bug 2174: A timeout on connect for a callout was also erroneously seen as
  a timeout on read on a GnuTLS initiating connection, resulting in the
  initiating connection being dropped.
  * Relax results from ACL control request to enable cutthrough, in
  unsupported situations, from error to silently (except under debug)
  ignoring.
  * Fix Buffer overflow in base64d() (CVE-2018-6789)
  * Fix bug in DKIM verify: a buffer overflow could corrupt the malloc
  metadata, resulting in a crash in free().
  * Fix broken Heimdal GSSAPI authenticator integration.
  * Bug 2113: Fix conversation closedown with the Avast malware scanner.
  * Bug 2239: Enforce non-usability of control=utf8_downconvert in the mail ACL.
  * Speed up macro lookups during configuration file read, by skipping non-
  macro text after a replacement (previously it was only once per line) and
  by skipping builtin macros when searching for an uppercase lead character.
  * DANE support moved from Experimental to mainline.  The Makefile control
  for the build is renamed.
  * Fix memory leak during multi-message connections using STARTTLS.
  * Bug 2236: When a DKIM verification result is overridden by ACL, DMARC
  reported the original.  Fix to report (as far as possible) the ACL
  result replacing the original.
  * Fix memory leak during multi-message connections using STARTTLS under
  OpenSSL
  * Bug 2242: Fix exim_dbmbuild to permit directoryless filenames.
  * Fix utf8_downconvert propagation through a redirect router.
  * Bug 2253: For logging delivery lines under PRDR, append the overall
  DATA response info to the (existing) per-recipient response info for
  the "C=" log element.
  * Bug 2251: Fix ldap lookups that return a single attribute having zero-
  length value.
  * Support Avast multiline protocol, this allows passing flags to
  newer versions of the scanner.
  * Ensure that variables possibly set during message acceptance are marked
    dead before release of memory in the daemon loop.
  * Bug 2250: Fix a longstanding bug in heavily-pipelined SMTP input (such
  as a multi-recipient message from a mailinglist manager).
  * The (EXPERIMENTAL_DMARC) variable $dmarc_ar_header is withdrawn, being
  replaced by the ${authresults } expansion.
  * Bug 2257: Fix pipe transport to not use a socket-only syscall.
  * Set a handler for SIGTERM and call exit(3) if running as PID 1. This
  allows proper process termination in container environments.
  * Bug 2258: Fix spool_wireformat in combination with LMTP transport.
  Previously the "final dot" had a newline after it; ensure it is CR,LF.
  * SPF: remove support for the "spf" ACL condition outcome values "err_temp"
  and "err_perm", deprecated since 4.83 when the RFC-defined words
  " temperror" and "permerror" were introduced.
  * Re-introduce enforcement of no cutthrough delivery on transports having
  transport-filters or DKIM-signing.
  * Cutthrough: for a final-dot response timeout (and nonunderstood responses)
  in defer=pass mode supply a 450 to the initiator.  Previously the message
    would be spooled.
  * DANE: add dane_require_tls_ciphers SMTP Transport option; if unset,
    tls_require_ciphers is used as before.
  * Malware Avast: Better match the Avast multiline protocol.
  * Fix reinitialisation of DKIM logging variable between messages.
  * Bug 2255: Revert the disable of the OpenSSL session caching.
  * Add util/renew-opendmarc-tlds.sh script for safe renewal of public
  suffix list.
  * DKIM: accept Ed25519 pubkeys in SubjectPublicKeyInfo-wrapped form,
  since the IETF WG has not yet settled on that versus the original
  "bare" representation.
  * Fix syslog logging for syslog_timestamp=no and log_selector +millisec.
  Previously the millisecond value corrupted the output.
  Fix also for syslog_pid=no and log_selector +pid, for which the pid
  corrupted the output.</changelog>
  <changelog author="seanlew@opensuse.org" date="1553342400">- update to exim 4.92
  * ${l_header:&lt;name&gt;} expansion
  * ${readsocket} now supports TLS
  * "utf8_downconvert" option (if built with SUPPORT_I18N)
  * "pipelining" log_selector
  * JSON variants for ${extract } expansion
  * "noutf8" debug option
  * TCP Fast Open support on MacOS
  * CVE-2019-10149: Fixed a Remote Command Execution (bsc#1136587)
- add workaround patch for compile time error on missing printf
  format annotation (gnu_printf.patch)</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1559736000">- spec file cleanup
  * fix DANE inclusion guard condition
  * re-enable i18n and remove misleading comment
  * EXPERIMENTAL_SPF is now SUPPORT_SPF
  * DANE is now SUPPORT_DANE</changelog>
  <changelog author="alex &lt;atoptsoglou@suse.com&gt;" date="1564056000">- update to exim 4.92.1
  * CVE-2019-13917: Fixed an issue with ${sort} expansion which could
  allow remote attackers to execute other programs with root privileges
  (boo#1142207)</changelog>
  <changelog author="poeml@cmdline.net" date="1567857600">- update to exim 4.92.2
  * CVE-2019-15846: fix against remote attackers executing arbitrary code as
    root via a trailing backslash</changelog>
  <changelog author="poeml@cmdline.net" date="1569844800">- update to exim 4.92.3
  * CVE-2019-16928: fix against Heap-based buffer overflow in string_vformat,
    remote code execution seems to be possible</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1575892800">- update to exim 4.93
  * SUPPORT_DMARC replaces EXPERIMENTAL_DMARC
  * DISABLE_TLS replaces SUPPORT_TLS
  * Bump the version for the local_scan API.
  * smtp transport option hosts_try_fastopen defaults to "*".
  * DNSSec is requested (not required) for all queries. (This seemes to
    ask for trouble if your resolver is a systemd-resolved.)
  * Generic router option retry_use_local_part defaults to "true" under specific
    pre-conditions.
  * Introduce a tainting mechanism for values read from untrusted sources.
  * Use longer file names for temporary spool files (this avoids
    name conflicts with spool on a shared file system).
  * Use dsn_from main config option (was ignored previously).</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1577966400">spec file cleanup to make update work
- add docdir to spec</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1578398400">- update to exim 4.93.0.4 (+fixes release)
  * Avoid costly startup code when not strictly needed.  This reduces time
    for some exim process initialisations.  It does mean that the logging
    of TLS configuration problems is only done for the daemon startup.
  * Early-pipelining support code is now included unless disabled in Makefile.
  * DKIM verification defaults no long accept sha1 hashes, to conform to
    RFC 8301.  They can still be enabled, using the dkim_verify_hashes main
    option.
  * Support CHUNKING from an smtp transport using a transport_filter, when
    DKIM signing is being done.  Previously a transport_filter would always
    disable CHUNKING, falling back to traditional DATA.
  * Regard command-line receipients as tainted.
  * Bug 340: Remove the daemon pid file on exit, whe due to SIGTERM.
  * Bug 2489: Fix crash in the "pam" expansion condition.  It seems that the
    PAM library frees one of the arguments given to it, despite the
    documentation.  Therefore a plain malloc must be used.
  * Bug 2491: Use tainted buffers for the transport smtp context.  Previously
    on-stack buffers were used, resulting in a taint trap when DSN information
    copied from a received message was written into the buffer.
  * Bug 2493: Harden ARC verify against Outlook, whick has been seen to mix
    the ordering of its ARC headers.  This caused a crash.
  * Bug 2492: Use tainted memory for retry record when needed.  Previously when
    a new record was being constructed with information from the peer, a trap
    was taken.
  * Bug 2494: Unset the default for dmarc_tld_file.  Previously a naiive
    installation would get error messages from DMARC verify, when it hit the
    nonexistent file indicated by the default.  Distros wanting DMARC enabled
    should both provide the file and set the option.
    Also enforce no DMARC verification for command-line sourced messages.
  * Fix an uninitialised flag in early-pipelining.  Previously connections
    could, depending on the platform, hang at the STARTTLS response.
  * Bug 2498: Reset a counter used for ARC verify before handling another
    message on a connection.  Previously if one message had ARC headers and
    the following one did not, a crash could result when adding an
    Authentication-Results: header.
  * Bug 2500: Rewind some of the common-coding in string handling between the
    Exim main code and Exim-related utities.  The introduction of taint
    tracking also did many adjustments to string handling.  Since then, eximon
    frequently terminated with an assert failure.
  * When PIPELINING, synch after every hundred or so RCPT commands sent and
    check for 452 responses.  This slightly helps the inefficieny of doing
    a large alias-expansion into a recipient-limited target.  The max_rcpt
    transport option still applies (and at the current default, will override
    the new feature).  The check is done for either cause of synch, and forces
    a fast-retry of all 452'd recipients using a new MAIL FROM on the same
    connection.  The new facility is not tunable at this time.
  * Fix the variables set by the gsasl authenticator.  Previously a pointer to
    library live data was being used, so the results became garbage.  Make
    copies while it is still usable.
  * Logging: when the deliver_time selector ise set, include the DT= field
    on delivery deferred (==) and failed (**) lines (if a delivery was
    attemtped).  Previously it was only on completion (=&gt;) lines.
  * Authentication: the gsasl driver not provides the $authN variables in time
    for the expansion of the server_scram_iter and server_scram_salt options.</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1578916800">- add a spec-file workaround for bsc#1160726</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1585742400">- don't create logfiles during install
  * fixes CVE-2020-8015 (bsc#1154183)</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1589284800">- bring changes from current in +fixes branch
  (patch-exim-fixes-ee83de04d3087efaf808d1f2235a988275c2ee94)
  * fixes CVE-2020-12783 (bsc#1171490)
  * Regard command-line recipients as tainted.
  * Bug 2489: Fix crash in the "pam" expansion condition.
  * Use tainted buffers for the transport smtp context.
  * Bug 2493: Harden ARC verify against Outlook, which has been seen to mix
    the ordering of its ARC headers.  This caused a crash.
  * Bug 2492: Use tainted memory for retry record when needed.  Previously when
    a new record was being constructed with information from the peer, a trap
    was taken.
  * Bug 2494: Unset the default for dmarc_tld_file.
  * Fix an uninitialised flag in early-pipelining.  Previously connections
    could, depending on the platform, hang at the STARTTLS response.
  * Bug 2498: Reset a counter used for ARC verify before handling another
    message on a connection.  Previously if one message had ARC headers and
    the following one did not, a crash could result when adding an
    Authentication-Results: header.
  * Bug 2500: Rewind some of the common-coding in string handling between the
    Exim main code and Exim-related utities.
  * Fix the variables set by the gsasl authenticator.
  * Bug 2507: Modules: on handling a dynamic-module (lookups) open failure,
    only retrieve the errormessage once.
  * Bug 2501: Fix init call in the heimdal authenticator.  Previously it
    adjusted the size of a major service buffer; this failed because the
    buffer was in use at the time.  Change to a compile-time increase in the
    buffer size, when this authenticator is compiled into exim.</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1589889600">- switch pretrans to use lua
  (fixes bsc#1171877)</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1591099200">- update to exim 4.94
  * some transports now refuse to use tainted data in constructing their delivery
    location
    this WILL BREAK configurations which are not updated accordingly.
    In particular: any Transport use of $local_user which has been relying upon
    check_local_user far away in the Router to make it safe, should be updated to
    replace $local_user with $local_part_data.
  * Attempting to remove, in router or transport, a header name that ends with
    an asterisk (which is a standards-legal name) will now result in all headers
    named starting with the string before the asterisk being removed.</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1591617600">- bring in changes from current +fixes (lots of taint check fixes)
  * Bug 1329: Fix format of Maildir-format filenames to match other mail-
    related applications.  Previously an "H" was used where available info
    says that "M" should be, so change to match.
  * Bug 2587: Fix pam expansion condition.  Tainted values are commonly used
    as arguments, so an implementation trying to copy these into a local
    buffer was taking a taint-enforcement trap.  Fix by using dynamically
    created buffers.
  * Bug 2586: Fix listcount expansion operator.  Using tainted arguments is
    reasonable, eg. to count headers.  Fix by using dynamically created
    buffers rather than a local.  Do similar fixes for ACL actions "dcc",
    "log_reject_target", "malware" and "spam"; the arguments are expanded
    so could be handling tainted values.
  * Bug 2590: Fix -bi (newaliases).  A previous code rearrangement had
    broken the (no-op) support for this sendmail command.  Restore it
    to doing nothing, silently, and returning good status.</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1598270400">- bring back missing exim_db.8 manual page
  (fixes bsc#1173693)</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1619611200">- update to exim-4.94.1
  * Fix security issue in BDAT state confusion.
    Ensure we reset known-good where we know we need to not be reading BDAT
    data, as a general case fix, and move the places where we switch to BDAT
    mode until after various protocol state checks.
    Fixes CVE-2020-BDATA reported by Qualys.
  * Fix security issue in SMTP verb option parsing (CVE-2020-EXOPT)
  * Fix security issue with too many recipients on a message (to remove a
    known security problem if someone does set recipients_max to unlimited,
    or if local additions add to the recipient list).
    Fixes CVE-2020-RCPTL reported by Qualys.
  * Fix CVE-2020-28016 (PFPZA): Heap out-of-bounds write in parse_fix_phrase()
  * Fix security issue CVE-2020-PFPSN and guard against cmdline invoker
    providing a particularly obnoxious sender full name.
  * Fix Linux security issue CVE-2020-SLCWD and guard against PATH_MAX
    better.</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1620129600">- update to exim-4.94.2
  security update (bsc#1185631)
  * CVE-2020-28007: Link attack in Exim's log directory
  * CVE-2020-28008: Assorted attacks in Exim's spool directory
  * CVE-2020-28014: Arbitrary PID file creation
  * CVE-2020-28011: Heap buffer overflow in queue_run()
  * CVE-2020-28010: Heap out-of-bounds write in main()
  * CVE-2020-28013: Heap buffer overflow in parse_fix_phrase()
  * CVE-2020-28016: Heap out-of-bounds write in parse_fix_phrase()
  * CVE-2020-28015: New-line injection into spool header file (local)
  * CVE-2020-28012: Missing close-on-exec flag for privileged pipe
  * CVE-2020-28009: Integer overflow in get_stdinput()
  * CVE-2020-28017: Integer overflow in receive_add_recipient()
  * CVE-2020-28020: Integer overflow in receive_msg()
  * CVE-2020-28023: Out-of-bounds read in smtp_setup_msg()
  * CVE-2020-28021: New-line injection into spool header file (remote)
  * CVE-2020-28022: Heap out-of-bounds read and write in extract_option()
  * CVE-2020-28026: Line truncation and injection in spool_read_header()
  * CVE-2020-28019: Failure to reset function pointer after BDAT error
  * CVE-2020-28024: Heap buffer underflow in smtp_ungetc()
  * CVE-2020-28018: Use-after-free in tls-openssl.c
  * CVE-2020-28025: Heap out-of-bounds read in pdkim_finish_bodyhash()</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1666094400">- add patch-cve-2022-3559 (fixes CVE-2022-3559, bsc#1204427, Bug 2915)</changelog>
</package>
<package pkgid="f558d6171c53947315a482dd1ee2482dbc756c44e89d80544add72746508fdf2" name="firejail" arch="aarch64">
  <version epoch="0" ver="0.9.70" rel="bp154.2.3.1"/>
  <changelog author="avindra@opensuse.org" date="1513166400">- Update to version 0.9.52:
  * New features
    + systemd-resolved integration
    + whitelisted /var in most profiles
    + GTK2, GTK3 and Qt4 private-lib support
    + --debug-private-lib
    + test deployment of private-lib for the some apps: evince,
    galculator, gnome-calculator, leafpad, mousepad,
    transmission-gtk, xcalc, xmr-stak-cpu, atril,
    mate-color-select, tar, file, strings, gpicview, eom, eog,
    gedit, pluma
    + netfilter template support
    + various new arguments
  * --writable-run-user
  * --rlimit-as
  * --rlimit-cpu
  * --timeout
  * --build (profile build tool)
  * --netfilter.print
  * --netfilter6.print
  * deprecations in modif
    + --allow-private-blacklists (blacklisting, read-only,
    read-write, tmpfs and noexec are allowed in private home
    directories
    + remount-proc-sys (firejail.config)
    + follow-symlink-private-bin (firejail.config)
    + --profile-path
  * enhancements
    + support Firejail user config directory in firecfg
    + disable DBus activation in firecfg
    + enumerate root directories in apparmor profile
    + /etc and /usr/share whitelisting support
    + globbing support for --private-bin
  * new profiles: upstreamed profiles from 3 sources:
    + https://github.com/chiraag-nataraj/firejail-profiles
    + https://github.com/nyancat18/fe
    + https://aur.archlinux.org/packages/firejail-profiles
  * new profiles: terasology, surf, rocketchat, clamscan, clamdscan,
    clamdtop, freshclam, xmr-stak-cpu, amule, ardour4, ardour5,
    brackets, calligra, calligraauthor, calligraconverter,
    calligraflow, calligraplan, calligraplanwork, calligrasheets,
    calligrastage, calligrawords, cin, dooble, dooble-qt4,
    fetchmail, freecad, freecadcmd, google-earth,imagej, karbon,
    1kdenlive, krita, linphone, lmms, macrofusion, mpd, natron,
    Natron, ricochet, shotcut, teamspeak3, tor, tor-browser-en,
    Viber, x-terminal-emulator, zart, conky, arch-audit, ffmpeg,
    bluefish, cinelerra, openshot-qt, pinta, uefitool, aosp,
    pdfmod, gnome-ring, xcalc, zaproxy, kopete, cliqz,
    signal-desktop, kget, nheko, Enpass, kwin_x11, krunner, ping,
    bsdtar, makepkg (Arch), archaudit-report cower (Arch), kdeinit4
- Add full link to source tarball from sourceforge
- Add asc file</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1535025600">- Changed the permissions of the firejail executable to 4750.
  Setuid mode is used, but only allowed for users in the newly
  created group 'firejail' (boo#1059013).
- Update to version 0.9.54:
  * modif: --force removed
  * modif: --csh, --zsh removed
  * modif: --debug-check-filename removed
  * modif: --git-install and --git-uninstall removed
  * modif: support for private-bin, private-lib and shell none has been
    disabled while running AppImage archives in order to be able to use
    our regular profile files with AppImages.
  * modif: restrictions for /proc, /sys and /run/user directories
    are moved from AppArmor profile into firejail executable
  * modif: unifying Chromium and Firefox browsers profiles.
    All users of Firefox-based browsers who use addons and plugins
    that read/write from ${HOME} will need to uncomment the includes for
    firefox-common-addons.inc in firefox-common.profile.
  * modif: split disable-devel.inc into disable-devel and
    disable-interpreters.inc
  * Firejail user access database (/etc/firejail/firejail.users,
    man firejail-users)
  * add --noautopulse to disable automatic ~/.config/pulse (for complex setups)
  * Spectre mitigation patch for gcc and clang compiler
  * D-Bus handling (--nodbus)
  * AppArmor support for overlayfs and chroot sandboxes
  * AppArmor support for AppImages
  * Enable AppArmor by default for a large number of programs
  * firejail --apparmor.print option
  * firemon --apparmor option
  * apparmor yes/no flag in /etc/firejail/firejail.config
  * seccomp syscall list update for glibc 2.26-10
  * seccomp disassembler for --seccomp.print option
  * seccomp machine code optimizer for default seccomp filters
  * IPv6 DNS support
  * whitelist support for overlay and chroot sandboxes
  * private-dev support for overlay and chroot sandboxes
  * private-tmp support for overlay and chroot sandboxes
  * added sandbox name support in firemon
  * firemon/prctl enhancements
  * noblacklist support for /sys/module directory
  * whitelist support for /sys/module directory
  * new profiles: basilisk, Tor Browser language packs, PlayOnLinux, sylpheed,
  * new profiles: discord-canary, pycharm-community, pycharm-professional,
  * new profiles: pdfchain, tilp, vivaldi-snapshot, bitcoin-qt, kaffeine,
  * new profiles: falkon, gnome-builder, asunder, VS Code, gnome-recipes,
  * new profiles: akonadi_controle, evince-previewer, evince-thumbnailer,
  * new profiles: blender-2.8, thunderbird-beta, ncdu, gnome-logs, gcloud,
  * new profiles: musixmatch, gunzip, bunzip2, enchant-lsmod, enchant-lsmod-2,
  * new profiles: enchant, enchant-2, Discord, acat, adiff, als, apack,
  * new profiles: arepack, aunpack profiles, ppsspp, scallion, clion,
  * new profiles: baloo_filemetadata_temp_extractor, AnyDesk, webstorm, xmind,
  * new profiles: qmmp, sayonara</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1536580800">- Remove the rpmlintrc file since the warnings are no longer relevant.</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1536667200">- Drop ldconfig calls since firejail libraries are installed in their
  own subdirectory which is not scanned by ldconfig.</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1537617600">- update to version 0.9.56:
  * modif: removed CFG_CHROOT_DESKTOP configuration option
  * modif: removed compile time --enable-network=restricted
  * modif: removed compile time --disable-bind
  * modif: --net=none allowed even if networking was disabled at compile
    time or at run time
  * modif: allow system users to run the sandbox
  * support wireless devices in --net option
  * support tap devices in --net option (tunneling support)
  * allow IP address configuration if the parent interface specified
    by --net is not configured (--netmask)
  * support for firetunnel utility
  * disable U2F devices (--nou2f)
  * add --private-cache to support private ~/.cache
  * support full paths in private-lib
  * globbing support in private-lib
  * support for local user directories in firecfg (--bindir)
  * new profiles: ms-excel, ms-office, ms-onenote, ms-outlook, ms-powerpoint,
  * new profiles: ms-skype, ms-word, riot-desktop, gnome-mpv, snox, gradio,
  * new profiles: standardnotes-desktop, shellcheck, patch, flameshot,
  * new profiles: rview, rvim, vimcat, vimdiff, vimpager, vimtutor, xxd,
  * new profiles: Beaker, electrum, clamtk, pybitmessage, dig, whois,
  * new profiles: jdownloader, Fluxbox, Blackbox, Awesome, i3
  * new profiles: start-tor-browser.desktop</changelog>
  <changelog author="info@paolostivanin.com" date="1549022400">-  update to version 0.9.58:
  * --disable-mnt rework
  * --net.print command
  * GitLab CI/CD integration: disto specific builds
  * profile parser enhancements and conditional handling support
    for HAS_APPIMAGE, HAS_NODBUS, BROWSER_DISABLE_U2F
  * profile name support
  * added explicit nonewprivs support to join option
  * new profiles: QMediathekView, aria2c, Authenticator, checkbashisms
  * new profiles: devilspie, devilspie2, easystroke, github-desktop, min
  * new profiles: bsdcat, bsdcpio, bsdtar, lzmadec, lbunzip2, lbzcat
  * new profiles: lbzip2, lzcat, lzcmp, lzdiff, lzegrep, lzfgrep, lzgrep
  * new profiles: lzless, lzma, lzmainfo, lzmore, unlzma, unxz, xzcat
  * new profiles: xzcmp, xzdiff, xzegrep, xzfgrep, xzgrep, xzless, xzmore
  * new profiles: lzip, artha, nitroshare, nitroshare-cli, nitroshare-nmh
  * new profiles: nirtoshare-send, nitroshare-ui, mencoder, gnome-pie
  * new profiles: masterpdfeditor, QOwnNotes, aisleriot, Mendeley
  * new profiles: feedreader, ocenaudio, mpsyt, thunderbird-wayland
  * new profiles: supertuxkart, ghostwriter, gajim-history-manager
  * bugfixes</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1559476800">- update to version 0.9.60:
  * security bug reported by Austin Morton:
  Seccomp filters are copied into /run/firejail/mnt, and are writable
  within the jail. A malicious process can modify files from inside the
  jail. Processes that are later joined to the jail will not have seccomp
  filters applied.
  CVE-2019-12589
  boo#1137139
  * memory-deny-write-execute now also blocks memfd_create
  * add private-cwd option to control working directory within jail
  * blocking system D-Bus socket with --nodbus
  * bringing back Centos 6 support
  * drop support for flatpak/snap packages
  * new profiles: crow, nyx, mypaint, celluoid, nano, transgui, mpdris2
  * new profiles: sysprof, simplescreenrecorder, geekbench, xfce4-mixer
  * new profiles: pavucontrol, d-feet, seahorse, secret-tool, gnome-keyring
  * new profiles: regextester, hardinfo, gnome-system-log, gnome-nettool
  * new profiles: netactview, redshift, devhelp, assogiate, subdownloader
  * new profiles: font-manager, exfalso, gconf-editor, dconf-editor
  * new profiles: sysprof-cli, seahorse-tool, secret-tool, dconf, gsettings
  * new profiles: code-oss, pragha, Maelstrom, ostrichriders, bzflag
  * new profiles: freeciv, lincity-ng, megaglest, openttd, crawl, crawl-tiles
  * new profiles: teeworlds, torcs, tremulous, warsow, lugaru, manaplus
  * new profiles: pioneer, scorched3d, widelands, freemind, kid3, kid3-qt
  * new profiles: kid3-cli, nomacs, freecol, opencity, openclonk, slashem
  * new profiles: vultureseye, vulturesclaw, anki, cheese, utox, mp3splt
  * new profiles: oggsplt, flacsplt, gramps, newsboat, freeoffice-planmaker
  * new profiles: autokey-gtk, autokey-qt, autokey-run, autokey-shell
  * new profiles: freeoffice-presentations, freeoffice-textmaker, mp3wrap
  * new profiles: inkview, meteo-qt, mp3splt-gtk, ktouch, yelp, cantata</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1581422400">- update to version 0.9.62
  * added file-copy-limit in /etc/firejail/firejail.config
  * profile templates (/usr/share/doc/firejail)
  * allow-debuggers support in profiles
  * several seccomp enhancements
  * compiler flags autodetection
  * move chroot entirely from path based to file descriptor based mounts
  * whitelisting /usr/share in a large number of profiles
  * new scripts in conrib: gdb-firejail.sh and sort.py
  * enhancement: whitelist /usr/share in some profiles
  * added signal mediation to apparmor profile
  * new conditions: HAS_X11, HAS_NET
  * new profiles: qgis, klatexformula, klatexformula_cmdl, links, xlinks
  * new profiles: pandoc, teams-for-linux, OpenArena, gnome-sound-recorder
  * new profiles: godot, tcpdump, tshark, newsbeuter, keepassxc-cli
  * new profiles: keepassxc-proxy, rhythmbox-client, jerry, zeal, mpg123
  * new profiles: conplay, mpg123.bin, mpg123-alsa, mpg123-id3dump, out123
  * new profiles: mpg123-jack, mpg123-nas, mpg123-openal, mpg123-oss
  * new profiles: mpg123-portaudio, mpg123-pulse, mpg123-strip, pavucontrol-qt
  * new profiles: gnome-characters, gnome-character-map, rsync, Whalebird,
  * new profiles: tor-browser (AUR), Zulip, tb-starter-wrapper, bzcat,
  * new profiles: kiwix-desktop, bzcat, zstd, pzstd, zstdcat, zstdgrep, zstdless
  * new profiles: zstdmt, unzstd, i2p, ar, gnome-latex, pngquant, kalgebra
  * new profiles: kalgebramobile, signal-cli, amuled, kfind, profanity
  * new profiles: audio-recorder, cameramonitor, ddgtk, drawio, unf, gmpc
  * new profiles: electron-mail, gist, gist-paste</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1588161600">- Add firejail-0.9.62-fix-usr-etc.patch:
  Check /usr/etc not just /etc
- Replace python interpreter line in sort.py</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1596888000">- Add patches fix-CVE-2020-17367.patch and fix-CVE-2020-17368.patch to fix CVE-2020-17367 and CVE-2020-17368 and boo#1174986</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1597320000">- Update to 0.9.62.2
  * fix CVE-2020-17367
  * fix CVE-2020-17368
  * additional hardening and bug fixes
- Remove fix-CVE-2020-17368.patch
- Remove fix-CVE-2020-17367.patch</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1597838400">- Update to 0.9.62.4
  * fix AppArmor broken in the previous release
  * miscellaneous fixes</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1603713600">- Add firejail-apparmor-3.0.diff to make the AppArmor profile compatible with
  AppArmor 3.0 (add missing include &lt;tunables/global&gt;)</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1604232000">- Update to version 0.9.64:
  * replaced --nowrap option with --wrap in firemon
  * The blocking action of seccomp filters has been changed from
    killing the process to returning EPERM to the caller. To get the
    previous behaviour, use --seccomp-error-action=kill or
    syscall:kill syntax when constructing filters, or override in
    /etc/firejail/firejail.config file.
  * Fine-grained D-Bus sandboxing with xdg-dbus-proxy.
    xdg-dbus-proxy must be installed, if not D-Bus access will be allowed.
    With this version nodbus is deprecated, in favor of dbus-user none and
    dbus-system none and will be removed in a future version.
  * DHCP client support
  * firecfg only fix dektop-files if started with sudo
  * SELinux labeling support
  * custom 32-bit seccomp filter support
  * restrict ${RUNUSER} in several profiles
  * blacklist shells such as bash in several profiles
  * whitelist globbing
  * mkdir and mkfile support for /run/user directory
  * support ignore for include
  * --include on the command line
  * splitting up media players whitelists in whitelist-players.inc
  * new condition: HAS_NOSOUND
  * new profiles: gfeeds, firefox-x11, tvbrowser, rtv, clipgrab, muraster
  * new profiles: gnome-passwordsafe, bibtex, gummi, latex, mupdf-x11-curl
  * new profiles: pdflatex, tex, wpp, wpspdf, wps, et, multimc, mupdf-x11
  * new profiles: gnome-hexgl, com.github.johnfactotum.Foliate, mupdf-gl, mutool
  * new profiles: desktopeditors, impressive, planmaker18, planmaker18free
  * new profiles: presentations18, presentations18free, textmaker18, teams
  * new profiles: textmaker18free, xournal, gnome-screenshot, ripperX
  * new profiles: sound-juicer, com.github.dahenson.agenda, gnome-pomodoro
  * new profiles: gnome-todo, x2goclient, iagno, kmplayer, penguin-command
  * new profiles: frogatto, gnome-mines, gnome-nibbles, lightsoff, warmux
  * new profiles: ts3client_runscript.sh, ferdi, abiword, four-in-a-row
  * new profiles: gnome-mahjongg, gnome-robots, gnome-sudoku, gnome-taquin
  * new profiles: gnome-tetravex, blobwars, gravity-beams-and-evaporating-stars
  * new profiles: hyperrogue, jumpnbump-menu, jumpnbump, magicor, mindless
  * new profiles: mirrormagic, mrrescue, scorched3d-wrapper, scorchwentbonkers
  * new profiles: seahorse-adventures, wordwarvi, xbill, gnome-klotski
  * new profiles: swell-foop, fdns, five-or-more, steam-runtime
  * new profiles: nicotine, plv, mocp, apostrophe, quadrapassel, dino-im
  * new profiles: hitori, bijiben, gnote, gnubik, ZeGrapher, xonotic-sdl-wrapper
  * new profiles: gapplication, openarena_ded, element-desktop, cawbird
  * new profiles: freetube, strawberry, jitsi-meet-desktop
  * new profiles: homebank, mattermost-desktop, newsflash, com.gitlab.newsflash
  * new profiles: sushi, xfce4-screenshooter, org.gnome.NautilusPreviewer, lyx
  * new profiles: minitube, nuclear, mtpaint, minecraft-launcher, gnome-calendar
  * new profiles: vmware, git-cola, otter-browser, kazam, menulibre, musictube
  * new profiles: onboard, fractal, mirage, quaternion, spectral, man, psi
  * new profiles: smuxi-frontend-gnome, balsa, kube, trojita, youtube
  * new profiles: youtubemusic-nativefier, cola, dbus-send, notify-send
  * new profiles: qrencode, ytmdesktop, twitch
  * new profiles: xournalpp, chromium-freeworld, equalx
- remove firejail-0.9.62-fix-usr-etc.patch, included upstream
- remove firejail-apparmor-3.0.diff, included upstream</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1604318400">- packaging fixes</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1611835200">- Update to 0.9.64.2:
  * allow --tmpfs inside $HOME for unprivileged users
  * --disable-usertmpfs compile time option
  * allow AF_BLUETOOTH via --protocol=bluetooth
  * setup guide for new users: contrib/firejail-welcome.sh
  * implement netns in profiles
  * added nolocal6.net IPv6 network filter
  * new profiles: spectacle, chromium-browser-privacy,
    gtk-straw-viewer, gtk-youtube-viewer, gtk2-youtube-viewer,
    gtk3-youtube-viewer, straw-viewer, lutris, dolphin-emu,
    authenticator-rs, servo, npm, marker, yarn, lsar, unar, agetpkg,
    mdr, shotwell, qnapi, new profiles: guvcview, pkglog, kdiff3, CoyIM.</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1612699200">- Update to 0.9.64.4:
  * disabled overlayfs, pending multiple fixes
  * fixed launch firefox for open url in telegram-desktop.profile</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- firejail 0.9.66:
  * deprecated --audit options, relpaced by jailcheck utility
  * deprecated follow-symlink-as-user from firejail.config
  * new firejail.config settings: private-bin, private-etc
  * new firejail.config settings: private-opt, private-srv
  * new firejail.config settings: whitelist-disable-topdir
  * new firejail.config settings: seccomp-filter-add
  * removed kcmp syscall from seccomp default filter
  * rename --noautopulse to keep-config-pulse
  * filtering environment variables
  * zsh completion
  * command line: --mkdir, --mkfile
  * --protocol now accumulates
  * jailtest utility for testing running sandboxes
  * faccessat2 syscall support
  * --private-dev keeps /dev/input
  * added --noinput to disable /dev/input
  * add support for subdirs in --private-etc
  * subdirs support in private-etc
  * input devices support in private-dev, --no-input
  * support trailing comments on profile lines
  * many new profiles
- split shell completion into standard subpackages</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1644148800">- update to firejail 0.9.68:
  - security: on Ubuntu, the PPA is now recommended over the distro package
  - (see README.md) (#4748)
  - security: bugfix: private-cwd leaks access to the entire filesystem
  - (#4780); reported by Hugo Osvaldo Barrera
  - feature: remove (some) environment variables with auth-tokens (#4157)
  - feature: ALLOW_TRAY condition (#4510 #4599)
  - feature: add basic Firejail support to AppArmor base abstraction (#3226
  - #4628)
  - feature: intrusion detection system (--ids-init, --ids-check)
  - feature: deterministic shutdown command (--deterministic-exit-code,
  - --deterministic-shutdown) (#928 #3042 #4635)
  - feature: noprinters command (#4607 #4827)
  - feature: network monitor (--nettrace)
  - feature: network locker (--netlock) (#4848)
  - feature: whitelist-ro profile command (#4740)
  - feature: disable pipewire with --nosound (#4855)
  - feature: Unset TMP if it doesn't exist inside of sandbox (#4151)
  - feature: Allow apostrophe in whitelist and blacklist (#4614)
  - feature: AppImage support in --build command (#4878)
  - modifs: exit code: distinguish fatal signals by adding 128 (#4533)
  - modifs: firecfg.config is now installed to /etc/firejail/ (#408 #4669)
  - modifs: close file descriptors greater than 2 (--keep-fd) (#4845)
  - modifs: nogroups now stopped causing certain system groups to be dropped,
  - which are now controlled by the relevant "no" options instead (such as
  - nosound -&gt; drop audio group), which fixes device access issues on systems
  - not using (e)logind (such as with seatd) (#4632 #4725 #4732 #4851)
  - removal: --disable-whitelist at compile time
  - removal: whitelist=yes/no in /etc/firejail/firejail.config
  - bugfix: Fix sndio support (#4362 #4365)
  - bugfix: Error mounting tmpfs (MS_REMOUNT flag not being cleared) (#4387)
  - bugfix: --build clears the environment (#4460 #4467)
  - bugfix: firejail hangs with net parameter (#3958 #4476)
  - bugfix: Firejail does not work with a custom hosts file (#2758 #4560)
  - bugfix: --tracelog and --trace override /etc/ld.so.preload (#4558 #4586)
  - bugfix: PATH_MAX is undeclared on musl libc (#4578 #4579 #4583 #4606)
  - bugfix: firejail symlinks are not skipped with private-bin + globs (#4626)
  - bugfix: Firejail rejects empty arguments (#4395)
  - bugfix: firecfg does not work with symlinks (discord.desktop) (#4235)
  - bugfix: Seccomp list output goes to stdout instead of stderr (#4328)
  - bugfix: private-etc does not work with symlinks (#4887)
  - bugfix: Hardware key not detected on keepassxc (#4883)
  - build: allow building with address sanitizer (#4594)
  - build: Stop linking pthread (#4695)
  - build: Configure cleanup and improvements (#4712)
  - ci: add profile checks for sorting disable-programs.inc and
  - firecfg.config and for the required arguments in private-etc (#2739 #4643)
  - ci: pin GitHub actions to SHAs and use Dependabot to update them (#4774)
  - docs: Add new command checklist to CONTRIBUTING.md (#4413)
  - docs: Rework bug report issue template and add both a question and a
  - feature request template (#4479 #4515 #4561)
  - docs: fix contradictory descriptions of machine-id ("preserves" vs
  - "spoofs") (#4689)
  - docs: Document that private-bin and private-etc always accumulate (#4078)
  - new includes: whitelist-run-common.inc (#4288), disable-X11.inc (#4462)
  - new includes: disable-proc.inc (#4521)
  - removed includes: disable-passwordmgr.inc (#4454 #4461)
  - new profiles: microsoft-edge-beta, clion-eap, lifeograph, zim
  - new profiles: io.github.lainsce.Notejot, rednotebook, gallery-dl
  - new profiles: yt-dlp, goldendict, goldendict, bundle, cmake
  - new profiles: make, meson, pip, codium, telnet, ftp, OpenStego
  - new profiles: imv, retroarch, torbrowser, CachyBrowser,
  - new profiles: notable, RPCS3, wget2, raincat, conitop, 1passwd,
  - new profiles: Seafile, neovim, com.github.tchx84.Flatseal</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1655208000">- update to version 0.9.70:
  - fix bsc#1199148 CVE-2022-31214
  - security: CVE-2022-31214 - root escalation in --join logic
  - Reported by Matthias Gerstner, working exploit code was provided to our
  - development team. In the same time frame, the problem was independently
  - reported by Birk Blechschmidt. Full working exploit code was also provided.
  - feature: enable shell tab completion with --tab (#4936)
  - feature: disable user profiles at compile time (#4990)
  - feature: Allow resolution of .local names with avahi-daemon in the apparmor
  - profile (#5088)
  - feature: always log seccomp errors (#5110)
  - feature: firecfg --guide, guided user configuration (#5111)
  - feature: --oom, kernel OutOfMemory-killer (#5122)
  - modif: --ids feature needs to be enabled at compile time (#5155)
  - modif: --nettrace only available to root user
  - rework: whitelist restructuring (#4985)
  - rework: firemon, speed up and lots of fixes
  - bugfix: --private-cwd not expanding macros, broken hyperrogue (#4910)
  - bugfix: nogroups + wrc prints confusing messages (#4930 #4933)
  - bugfix: openSUSE Leap - whitelist-run-common.inc (#4954)
  - bugfix: fix printing in evince (#5011)
  - bugfix: gcov: fix gcov functions always declared as dummy (#5028)
  - bugfix: Stop warning on safe supplementary group clean (#5114)
  - build: remove ultimately unused INSTALL and RANLIB check macros (#5133)
  - build: mkdeb.sh.in: pass remaining arguments to ./configure (#5154)
  - ci: replace centos (EOL) with almalinux (#4912)
  - ci: fix --version not printing compile-time features (#5147)
  - ci: print version after install &amp; fix apparmor support on build_apparmor
  - (#5148)
  - docs: Refer to firejail.config in configuration files (#4916)
  - docs: firejail.config: add warning about allow-tray (#4946)
  - docs: mention that the protocol command accumulates (#5043)
  - docs: mention inconsistent homedir bug involving --private=dir (#5052)
  - docs: mention capabilities(7) on --caps (#5078)
  - new profiles: onionshare, onionshare-cli, opera-developer, songrec
  - new profiles: node-gyp, npx, semver, ping-hardened
  - removed profiles: nvm</changelog>
</package>
<package pkgid="cd834c37b8fac9c2ee5d98d17169380675883c46ba0bdec3ec7603a6854c2310" name="firejail" arch="i586">
  <version epoch="0" ver="0.9.70" rel="bp154.2.3.1"/>
  <changelog author="avindra@opensuse.org" date="1513166400">- Update to version 0.9.52:
  * New features
    + systemd-resolved integration
    + whitelisted /var in most profiles
    + GTK2, GTK3 and Qt4 private-lib support
    + --debug-private-lib
    + test deployment of private-lib for the some apps: evince,
    galculator, gnome-calculator, leafpad, mousepad,
    transmission-gtk, xcalc, xmr-stak-cpu, atril,
    mate-color-select, tar, file, strings, gpicview, eom, eog,
    gedit, pluma
    + netfilter template support
    + various new arguments
  * --writable-run-user
  * --rlimit-as
  * --rlimit-cpu
  * --timeout
  * --build (profile build tool)
  * --netfilter.print
  * --netfilter6.print
  * deprecations in modif
    + --allow-private-blacklists (blacklisting, read-only,
    read-write, tmpfs and noexec are allowed in private home
    directories
    + remount-proc-sys (firejail.config)
    + follow-symlink-private-bin (firejail.config)
    + --profile-path
  * enhancements
    + support Firejail user config directory in firecfg
    + disable DBus activation in firecfg
    + enumerate root directories in apparmor profile
    + /etc and /usr/share whitelisting support
    + globbing support for --private-bin
  * new profiles: upstreamed profiles from 3 sources:
    + https://github.com/chiraag-nataraj/firejail-profiles
    + https://github.com/nyancat18/fe
    + https://aur.archlinux.org/packages/firejail-profiles
  * new profiles: terasology, surf, rocketchat, clamscan, clamdscan,
    clamdtop, freshclam, xmr-stak-cpu, amule, ardour4, ardour5,
    brackets, calligra, calligraauthor, calligraconverter,
    calligraflow, calligraplan, calligraplanwork, calligrasheets,
    calligrastage, calligrawords, cin, dooble, dooble-qt4,
    fetchmail, freecad, freecadcmd, google-earth,imagej, karbon,
    1kdenlive, krita, linphone, lmms, macrofusion, mpd, natron,
    Natron, ricochet, shotcut, teamspeak3, tor, tor-browser-en,
    Viber, x-terminal-emulator, zart, conky, arch-audit, ffmpeg,
    bluefish, cinelerra, openshot-qt, pinta, uefitool, aosp,
    pdfmod, gnome-ring, xcalc, zaproxy, kopete, cliqz,
    signal-desktop, kget, nheko, Enpass, kwin_x11, krunner, ping,
    bsdtar, makepkg (Arch), archaudit-report cower (Arch), kdeinit4
- Add full link to source tarball from sourceforge
- Add asc file</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1535025600">- Changed the permissions of the firejail executable to 4750.
  Setuid mode is used, but only allowed for users in the newly
  created group 'firejail' (boo#1059013).
- Update to version 0.9.54:
  * modif: --force removed
  * modif: --csh, --zsh removed
  * modif: --debug-check-filename removed
  * modif: --git-install and --git-uninstall removed
  * modif: support for private-bin, private-lib and shell none has been
    disabled while running AppImage archives in order to be able to use
    our regular profile files with AppImages.
  * modif: restrictions for /proc, /sys and /run/user directories
    are moved from AppArmor profile into firejail executable
  * modif: unifying Chromium and Firefox browsers profiles.
    All users of Firefox-based browsers who use addons and plugins
    that read/write from ${HOME} will need to uncomment the includes for
    firefox-common-addons.inc in firefox-common.profile.
  * modif: split disable-devel.inc into disable-devel and
    disable-interpreters.inc
  * Firejail user access database (/etc/firejail/firejail.users,
    man firejail-users)
  * add --noautopulse to disable automatic ~/.config/pulse (for complex setups)
  * Spectre mitigation patch for gcc and clang compiler
  * D-Bus handling (--nodbus)
  * AppArmor support for overlayfs and chroot sandboxes
  * AppArmor support for AppImages
  * Enable AppArmor by default for a large number of programs
  * firejail --apparmor.print option
  * firemon --apparmor option
  * apparmor yes/no flag in /etc/firejail/firejail.config
  * seccomp syscall list update for glibc 2.26-10
  * seccomp disassembler for --seccomp.print option
  * seccomp machine code optimizer for default seccomp filters
  * IPv6 DNS support
  * whitelist support for overlay and chroot sandboxes
  * private-dev support for overlay and chroot sandboxes
  * private-tmp support for overlay and chroot sandboxes
  * added sandbox name support in firemon
  * firemon/prctl enhancements
  * noblacklist support for /sys/module directory
  * whitelist support for /sys/module directory
  * new profiles: basilisk, Tor Browser language packs, PlayOnLinux, sylpheed,
  * new profiles: discord-canary, pycharm-community, pycharm-professional,
  * new profiles: pdfchain, tilp, vivaldi-snapshot, bitcoin-qt, kaffeine,
  * new profiles: falkon, gnome-builder, asunder, VS Code, gnome-recipes,
  * new profiles: akonadi_controle, evince-previewer, evince-thumbnailer,
  * new profiles: blender-2.8, thunderbird-beta, ncdu, gnome-logs, gcloud,
  * new profiles: musixmatch, gunzip, bunzip2, enchant-lsmod, enchant-lsmod-2,
  * new profiles: enchant, enchant-2, Discord, acat, adiff, als, apack,
  * new profiles: arepack, aunpack profiles, ppsspp, scallion, clion,
  * new profiles: baloo_filemetadata_temp_extractor, AnyDesk, webstorm, xmind,
  * new profiles: qmmp, sayonara</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1536580800">- Remove the rpmlintrc file since the warnings are no longer relevant.</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1536667200">- Drop ldconfig calls since firejail libraries are installed in their
  own subdirectory which is not scanned by ldconfig.</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1537617600">- update to version 0.9.56:
  * modif: removed CFG_CHROOT_DESKTOP configuration option
  * modif: removed compile time --enable-network=restricted
  * modif: removed compile time --disable-bind
  * modif: --net=none allowed even if networking was disabled at compile
    time or at run time
  * modif: allow system users to run the sandbox
  * support wireless devices in --net option
  * support tap devices in --net option (tunneling support)
  * allow IP address configuration if the parent interface specified
    by --net is not configured (--netmask)
  * support for firetunnel utility
  * disable U2F devices (--nou2f)
  * add --private-cache to support private ~/.cache
  * support full paths in private-lib
  * globbing support in private-lib
  * support for local user directories in firecfg (--bindir)
  * new profiles: ms-excel, ms-office, ms-onenote, ms-outlook, ms-powerpoint,
  * new profiles: ms-skype, ms-word, riot-desktop, gnome-mpv, snox, gradio,
  * new profiles: standardnotes-desktop, shellcheck, patch, flameshot,
  * new profiles: rview, rvim, vimcat, vimdiff, vimpager, vimtutor, xxd,
  * new profiles: Beaker, electrum, clamtk, pybitmessage, dig, whois,
  * new profiles: jdownloader, Fluxbox, Blackbox, Awesome, i3
  * new profiles: start-tor-browser.desktop</changelog>
  <changelog author="info@paolostivanin.com" date="1549022400">-  update to version 0.9.58:
  * --disable-mnt rework
  * --net.print command
  * GitLab CI/CD integration: disto specific builds
  * profile parser enhancements and conditional handling support
    for HAS_APPIMAGE, HAS_NODBUS, BROWSER_DISABLE_U2F
  * profile name support
  * added explicit nonewprivs support to join option
  * new profiles: QMediathekView, aria2c, Authenticator, checkbashisms
  * new profiles: devilspie, devilspie2, easystroke, github-desktop, min
  * new profiles: bsdcat, bsdcpio, bsdtar, lzmadec, lbunzip2, lbzcat
  * new profiles: lbzip2, lzcat, lzcmp, lzdiff, lzegrep, lzfgrep, lzgrep
  * new profiles: lzless, lzma, lzmainfo, lzmore, unlzma, unxz, xzcat
  * new profiles: xzcmp, xzdiff, xzegrep, xzfgrep, xzgrep, xzless, xzmore
  * new profiles: lzip, artha, nitroshare, nitroshare-cli, nitroshare-nmh
  * new profiles: nirtoshare-send, nitroshare-ui, mencoder, gnome-pie
  * new profiles: masterpdfeditor, QOwnNotes, aisleriot, Mendeley
  * new profiles: feedreader, ocenaudio, mpsyt, thunderbird-wayland
  * new profiles: supertuxkart, ghostwriter, gajim-history-manager
  * bugfixes</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1559476800">- update to version 0.9.60:
  * security bug reported by Austin Morton:
  Seccomp filters are copied into /run/firejail/mnt, and are writable
  within the jail. A malicious process can modify files from inside the
  jail. Processes that are later joined to the jail will not have seccomp
  filters applied.
  CVE-2019-12589
  boo#1137139
  * memory-deny-write-execute now also blocks memfd_create
  * add private-cwd option to control working directory within jail
  * blocking system D-Bus socket with --nodbus
  * bringing back Centos 6 support
  * drop support for flatpak/snap packages
  * new profiles: crow, nyx, mypaint, celluoid, nano, transgui, mpdris2
  * new profiles: sysprof, simplescreenrecorder, geekbench, xfce4-mixer
  * new profiles: pavucontrol, d-feet, seahorse, secret-tool, gnome-keyring
  * new profiles: regextester, hardinfo, gnome-system-log, gnome-nettool
  * new profiles: netactview, redshift, devhelp, assogiate, subdownloader
  * new profiles: font-manager, exfalso, gconf-editor, dconf-editor
  * new profiles: sysprof-cli, seahorse-tool, secret-tool, dconf, gsettings
  * new profiles: code-oss, pragha, Maelstrom, ostrichriders, bzflag
  * new profiles: freeciv, lincity-ng, megaglest, openttd, crawl, crawl-tiles
  * new profiles: teeworlds, torcs, tremulous, warsow, lugaru, manaplus
  * new profiles: pioneer, scorched3d, widelands, freemind, kid3, kid3-qt
  * new profiles: kid3-cli, nomacs, freecol, opencity, openclonk, slashem
  * new profiles: vultureseye, vulturesclaw, anki, cheese, utox, mp3splt
  * new profiles: oggsplt, flacsplt, gramps, newsboat, freeoffice-planmaker
  * new profiles: autokey-gtk, autokey-qt, autokey-run, autokey-shell
  * new profiles: freeoffice-presentations, freeoffice-textmaker, mp3wrap
  * new profiles: inkview, meteo-qt, mp3splt-gtk, ktouch, yelp, cantata</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1581422400">- update to version 0.9.62
  * added file-copy-limit in /etc/firejail/firejail.config
  * profile templates (/usr/share/doc/firejail)
  * allow-debuggers support in profiles
  * several seccomp enhancements
  * compiler flags autodetection
  * move chroot entirely from path based to file descriptor based mounts
  * whitelisting /usr/share in a large number of profiles
  * new scripts in conrib: gdb-firejail.sh and sort.py
  * enhancement: whitelist /usr/share in some profiles
  * added signal mediation to apparmor profile
  * new conditions: HAS_X11, HAS_NET
  * new profiles: qgis, klatexformula, klatexformula_cmdl, links, xlinks
  * new profiles: pandoc, teams-for-linux, OpenArena, gnome-sound-recorder
  * new profiles: godot, tcpdump, tshark, newsbeuter, keepassxc-cli
  * new profiles: keepassxc-proxy, rhythmbox-client, jerry, zeal, mpg123
  * new profiles: conplay, mpg123.bin, mpg123-alsa, mpg123-id3dump, out123
  * new profiles: mpg123-jack, mpg123-nas, mpg123-openal, mpg123-oss
  * new profiles: mpg123-portaudio, mpg123-pulse, mpg123-strip, pavucontrol-qt
  * new profiles: gnome-characters, gnome-character-map, rsync, Whalebird,
  * new profiles: tor-browser (AUR), Zulip, tb-starter-wrapper, bzcat,
  * new profiles: kiwix-desktop, bzcat, zstd, pzstd, zstdcat, zstdgrep, zstdless
  * new profiles: zstdmt, unzstd, i2p, ar, gnome-latex, pngquant, kalgebra
  * new profiles: kalgebramobile, signal-cli, amuled, kfind, profanity
  * new profiles: audio-recorder, cameramonitor, ddgtk, drawio, unf, gmpc
  * new profiles: electron-mail, gist, gist-paste</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1588161600">- Add firejail-0.9.62-fix-usr-etc.patch:
  Check /usr/etc not just /etc
- Replace python interpreter line in sort.py</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1596888000">- Add patches fix-CVE-2020-17367.patch and fix-CVE-2020-17368.patch to fix CVE-2020-17367 and CVE-2020-17368 and boo#1174986</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1597320000">- Update to 0.9.62.2
  * fix CVE-2020-17367
  * fix CVE-2020-17368
  * additional hardening and bug fixes
- Remove fix-CVE-2020-17368.patch
- Remove fix-CVE-2020-17367.patch</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1597838400">- Update to 0.9.62.4
  * fix AppArmor broken in the previous release
  * miscellaneous fixes</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1603713600">- Add firejail-apparmor-3.0.diff to make the AppArmor profile compatible with
  AppArmor 3.0 (add missing include &lt;tunables/global&gt;)</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1604232000">- Update to version 0.9.64:
  * replaced --nowrap option with --wrap in firemon
  * The blocking action of seccomp filters has been changed from
    killing the process to returning EPERM to the caller. To get the
    previous behaviour, use --seccomp-error-action=kill or
    syscall:kill syntax when constructing filters, or override in
    /etc/firejail/firejail.config file.
  * Fine-grained D-Bus sandboxing with xdg-dbus-proxy.
    xdg-dbus-proxy must be installed, if not D-Bus access will be allowed.
    With this version nodbus is deprecated, in favor of dbus-user none and
    dbus-system none and will be removed in a future version.
  * DHCP client support
  * firecfg only fix dektop-files if started with sudo
  * SELinux labeling support
  * custom 32-bit seccomp filter support
  * restrict ${RUNUSER} in several profiles
  * blacklist shells such as bash in several profiles
  * whitelist globbing
  * mkdir and mkfile support for /run/user directory
  * support ignore for include
  * --include on the command line
  * splitting up media players whitelists in whitelist-players.inc
  * new condition: HAS_NOSOUND
  * new profiles: gfeeds, firefox-x11, tvbrowser, rtv, clipgrab, muraster
  * new profiles: gnome-passwordsafe, bibtex, gummi, latex, mupdf-x11-curl
  * new profiles: pdflatex, tex, wpp, wpspdf, wps, et, multimc, mupdf-x11
  * new profiles: gnome-hexgl, com.github.johnfactotum.Foliate, mupdf-gl, mutool
  * new profiles: desktopeditors, impressive, planmaker18, planmaker18free
  * new profiles: presentations18, presentations18free, textmaker18, teams
  * new profiles: textmaker18free, xournal, gnome-screenshot, ripperX
  * new profiles: sound-juicer, com.github.dahenson.agenda, gnome-pomodoro
  * new profiles: gnome-todo, x2goclient, iagno, kmplayer, penguin-command
  * new profiles: frogatto, gnome-mines, gnome-nibbles, lightsoff, warmux
  * new profiles: ts3client_runscript.sh, ferdi, abiword, four-in-a-row
  * new profiles: gnome-mahjongg, gnome-robots, gnome-sudoku, gnome-taquin
  * new profiles: gnome-tetravex, blobwars, gravity-beams-and-evaporating-stars
  * new profiles: hyperrogue, jumpnbump-menu, jumpnbump, magicor, mindless
  * new profiles: mirrormagic, mrrescue, scorched3d-wrapper, scorchwentbonkers
  * new profiles: seahorse-adventures, wordwarvi, xbill, gnome-klotski
  * new profiles: swell-foop, fdns, five-or-more, steam-runtime
  * new profiles: nicotine, plv, mocp, apostrophe, quadrapassel, dino-im
  * new profiles: hitori, bijiben, gnote, gnubik, ZeGrapher, xonotic-sdl-wrapper
  * new profiles: gapplication, openarena_ded, element-desktop, cawbird
  * new profiles: freetube, strawberry, jitsi-meet-desktop
  * new profiles: homebank, mattermost-desktop, newsflash, com.gitlab.newsflash
  * new profiles: sushi, xfce4-screenshooter, org.gnome.NautilusPreviewer, lyx
  * new profiles: minitube, nuclear, mtpaint, minecraft-launcher, gnome-calendar
  * new profiles: vmware, git-cola, otter-browser, kazam, menulibre, musictube
  * new profiles: onboard, fractal, mirage, quaternion, spectral, man, psi
  * new profiles: smuxi-frontend-gnome, balsa, kube, trojita, youtube
  * new profiles: youtubemusic-nativefier, cola, dbus-send, notify-send
  * new profiles: qrencode, ytmdesktop, twitch
  * new profiles: xournalpp, chromium-freeworld, equalx
- remove firejail-0.9.62-fix-usr-etc.patch, included upstream
- remove firejail-apparmor-3.0.diff, included upstream</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1604318400">- packaging fixes</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1611835200">- Update to 0.9.64.2:
  * allow --tmpfs inside $HOME for unprivileged users
  * --disable-usertmpfs compile time option
  * allow AF_BLUETOOTH via --protocol=bluetooth
  * setup guide for new users: contrib/firejail-welcome.sh
  * implement netns in profiles
  * added nolocal6.net IPv6 network filter
  * new profiles: spectacle, chromium-browser-privacy,
    gtk-straw-viewer, gtk-youtube-viewer, gtk2-youtube-viewer,
    gtk3-youtube-viewer, straw-viewer, lutris, dolphin-emu,
    authenticator-rs, servo, npm, marker, yarn, lsar, unar, agetpkg,
    mdr, shotwell, qnapi, new profiles: guvcview, pkglog, kdiff3, CoyIM.</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1612699200">- Update to 0.9.64.4:
  * disabled overlayfs, pending multiple fixes
  * fixed launch firefox for open url in telegram-desktop.profile</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- firejail 0.9.66:
  * deprecated --audit options, relpaced by jailcheck utility
  * deprecated follow-symlink-as-user from firejail.config
  * new firejail.config settings: private-bin, private-etc
  * new firejail.config settings: private-opt, private-srv
  * new firejail.config settings: whitelist-disable-topdir
  * new firejail.config settings: seccomp-filter-add
  * removed kcmp syscall from seccomp default filter
  * rename --noautopulse to keep-config-pulse
  * filtering environment variables
  * zsh completion
  * command line: --mkdir, --mkfile
  * --protocol now accumulates
  * jailtest utility for testing running sandboxes
  * faccessat2 syscall support
  * --private-dev keeps /dev/input
  * added --noinput to disable /dev/input
  * add support for subdirs in --private-etc
  * subdirs support in private-etc
  * input devices support in private-dev, --no-input
  * support trailing comments on profile lines
  * many new profiles
- split shell completion into standard subpackages</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1644148800">- update to firejail 0.9.68:
  - security: on Ubuntu, the PPA is now recommended over the distro package
  - (see README.md) (#4748)
  - security: bugfix: private-cwd leaks access to the entire filesystem
  - (#4780); reported by Hugo Osvaldo Barrera
  - feature: remove (some) environment variables with auth-tokens (#4157)
  - feature: ALLOW_TRAY condition (#4510 #4599)
  - feature: add basic Firejail support to AppArmor base abstraction (#3226
  - #4628)
  - feature: intrusion detection system (--ids-init, --ids-check)
  - feature: deterministic shutdown command (--deterministic-exit-code,
  - --deterministic-shutdown) (#928 #3042 #4635)
  - feature: noprinters command (#4607 #4827)
  - feature: network monitor (--nettrace)
  - feature: network locker (--netlock) (#4848)
  - feature: whitelist-ro profile command (#4740)
  - feature: disable pipewire with --nosound (#4855)
  - feature: Unset TMP if it doesn't exist inside of sandbox (#4151)
  - feature: Allow apostrophe in whitelist and blacklist (#4614)
  - feature: AppImage support in --build command (#4878)
  - modifs: exit code: distinguish fatal signals by adding 128 (#4533)
  - modifs: firecfg.config is now installed to /etc/firejail/ (#408 #4669)
  - modifs: close file descriptors greater than 2 (--keep-fd) (#4845)
  - modifs: nogroups now stopped causing certain system groups to be dropped,
  - which are now controlled by the relevant "no" options instead (such as
  - nosound -&gt; drop audio group), which fixes device access issues on systems
  - not using (e)logind (such as with seatd) (#4632 #4725 #4732 #4851)
  - removal: --disable-whitelist at compile time
  - removal: whitelist=yes/no in /etc/firejail/firejail.config
  - bugfix: Fix sndio support (#4362 #4365)
  - bugfix: Error mounting tmpfs (MS_REMOUNT flag not being cleared) (#4387)
  - bugfix: --build clears the environment (#4460 #4467)
  - bugfix: firejail hangs with net parameter (#3958 #4476)
  - bugfix: Firejail does not work with a custom hosts file (#2758 #4560)
  - bugfix: --tracelog and --trace override /etc/ld.so.preload (#4558 #4586)
  - bugfix: PATH_MAX is undeclared on musl libc (#4578 #4579 #4583 #4606)
  - bugfix: firejail symlinks are not skipped with private-bin + globs (#4626)
  - bugfix: Firejail rejects empty arguments (#4395)
  - bugfix: firecfg does not work with symlinks (discord.desktop) (#4235)
  - bugfix: Seccomp list output goes to stdout instead of stderr (#4328)
  - bugfix: private-etc does not work with symlinks (#4887)
  - bugfix: Hardware key not detected on keepassxc (#4883)
  - build: allow building with address sanitizer (#4594)
  - build: Stop linking pthread (#4695)
  - build: Configure cleanup and improvements (#4712)
  - ci: add profile checks for sorting disable-programs.inc and
  - firecfg.config and for the required arguments in private-etc (#2739 #4643)
  - ci: pin GitHub actions to SHAs and use Dependabot to update them (#4774)
  - docs: Add new command checklist to CONTRIBUTING.md (#4413)
  - docs: Rework bug report issue template and add both a question and a
  - feature request template (#4479 #4515 #4561)
  - docs: fix contradictory descriptions of machine-id ("preserves" vs
  - "spoofs") (#4689)
  - docs: Document that private-bin and private-etc always accumulate (#4078)
  - new includes: whitelist-run-common.inc (#4288), disable-X11.inc (#4462)
  - new includes: disable-proc.inc (#4521)
  - removed includes: disable-passwordmgr.inc (#4454 #4461)
  - new profiles: microsoft-edge-beta, clion-eap, lifeograph, zim
  - new profiles: io.github.lainsce.Notejot, rednotebook, gallery-dl
  - new profiles: yt-dlp, goldendict, goldendict, bundle, cmake
  - new profiles: make, meson, pip, codium, telnet, ftp, OpenStego
  - new profiles: imv, retroarch, torbrowser, CachyBrowser,
  - new profiles: notable, RPCS3, wget2, raincat, conitop, 1passwd,
  - new profiles: Seafile, neovim, com.github.tchx84.Flatseal</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1655208000">- update to version 0.9.70:
  - fix bsc#1199148 CVE-2022-31214
  - security: CVE-2022-31214 - root escalation in --join logic
  - Reported by Matthias Gerstner, working exploit code was provided to our
  - development team. In the same time frame, the problem was independently
  - reported by Birk Blechschmidt. Full working exploit code was also provided.
  - feature: enable shell tab completion with --tab (#4936)
  - feature: disable user profiles at compile time (#4990)
  - feature: Allow resolution of .local names with avahi-daemon in the apparmor
  - profile (#5088)
  - feature: always log seccomp errors (#5110)
  - feature: firecfg --guide, guided user configuration (#5111)
  - feature: --oom, kernel OutOfMemory-killer (#5122)
  - modif: --ids feature needs to be enabled at compile time (#5155)
  - modif: --nettrace only available to root user
  - rework: whitelist restructuring (#4985)
  - rework: firemon, speed up and lots of fixes
  - bugfix: --private-cwd not expanding macros, broken hyperrogue (#4910)
  - bugfix: nogroups + wrc prints confusing messages (#4930 #4933)
  - bugfix: openSUSE Leap - whitelist-run-common.inc (#4954)
  - bugfix: fix printing in evince (#5011)
  - bugfix: gcov: fix gcov functions always declared as dummy (#5028)
  - bugfix: Stop warning on safe supplementary group clean (#5114)
  - build: remove ultimately unused INSTALL and RANLIB check macros (#5133)
  - build: mkdeb.sh.in: pass remaining arguments to ./configure (#5154)
  - ci: replace centos (EOL) with almalinux (#4912)
  - ci: fix --version not printing compile-time features (#5147)
  - ci: print version after install &amp; fix apparmor support on build_apparmor
  - (#5148)
  - docs: Refer to firejail.config in configuration files (#4916)
  - docs: firejail.config: add warning about allow-tray (#4946)
  - docs: mention that the protocol command accumulates (#5043)
  - docs: mention inconsistent homedir bug involving --private=dir (#5052)
  - docs: mention capabilities(7) on --caps (#5078)
  - new profiles: onionshare, onionshare-cli, opera-developer, songrec
  - new profiles: node-gyp, npx, semver, ping-hardened
  - removed profiles: nvm</changelog>
</package>
<package pkgid="0a564dda6d09fb67a0e0fbef9f2b7579214c0c583dd7aa34687e589d3657a0e2" name="firejail" arch="ppc64le">
  <version epoch="0" ver="0.9.70" rel="bp154.2.3.1"/>
  <changelog author="avindra@opensuse.org" date="1513166400">- Update to version 0.9.52:
  * New features
    + systemd-resolved integration
    + whitelisted /var in most profiles
    + GTK2, GTK3 and Qt4 private-lib support
    + --debug-private-lib
    + test deployment of private-lib for the some apps: evince,
    galculator, gnome-calculator, leafpad, mousepad,
    transmission-gtk, xcalc, xmr-stak-cpu, atril,
    mate-color-select, tar, file, strings, gpicview, eom, eog,
    gedit, pluma
    + netfilter template support
    + various new arguments
  * --writable-run-user
  * --rlimit-as
  * --rlimit-cpu
  * --timeout
  * --build (profile build tool)
  * --netfilter.print
  * --netfilter6.print
  * deprecations in modif
    + --allow-private-blacklists (blacklisting, read-only,
    read-write, tmpfs and noexec are allowed in private home
    directories
    + remount-proc-sys (firejail.config)
    + follow-symlink-private-bin (firejail.config)
    + --profile-path
  * enhancements
    + support Firejail user config directory in firecfg
    + disable DBus activation in firecfg
    + enumerate root directories in apparmor profile
    + /etc and /usr/share whitelisting support
    + globbing support for --private-bin
  * new profiles: upstreamed profiles from 3 sources:
    + https://github.com/chiraag-nataraj/firejail-profiles
    + https://github.com/nyancat18/fe
    + https://aur.archlinux.org/packages/firejail-profiles
  * new profiles: terasology, surf, rocketchat, clamscan, clamdscan,
    clamdtop, freshclam, xmr-stak-cpu, amule, ardour4, ardour5,
    brackets, calligra, calligraauthor, calligraconverter,
    calligraflow, calligraplan, calligraplanwork, calligrasheets,
    calligrastage, calligrawords, cin, dooble, dooble-qt4,
    fetchmail, freecad, freecadcmd, google-earth,imagej, karbon,
    1kdenlive, krita, linphone, lmms, macrofusion, mpd, natron,
    Natron, ricochet, shotcut, teamspeak3, tor, tor-browser-en,
    Viber, x-terminal-emulator, zart, conky, arch-audit, ffmpeg,
    bluefish, cinelerra, openshot-qt, pinta, uefitool, aosp,
    pdfmod, gnome-ring, xcalc, zaproxy, kopete, cliqz,
    signal-desktop, kget, nheko, Enpass, kwin_x11, krunner, ping,
    bsdtar, makepkg (Arch), archaudit-report cower (Arch), kdeinit4
- Add full link to source tarball from sourceforge
- Add asc file</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1535025600">- Changed the permissions of the firejail executable to 4750.
  Setuid mode is used, but only allowed for users in the newly
  created group 'firejail' (boo#1059013).
- Update to version 0.9.54:
  * modif: --force removed
  * modif: --csh, --zsh removed
  * modif: --debug-check-filename removed
  * modif: --git-install and --git-uninstall removed
  * modif: support for private-bin, private-lib and shell none has been
    disabled while running AppImage archives in order to be able to use
    our regular profile files with AppImages.
  * modif: restrictions for /proc, /sys and /run/user directories
    are moved from AppArmor profile into firejail executable
  * modif: unifying Chromium and Firefox browsers profiles.
    All users of Firefox-based browsers who use addons and plugins
    that read/write from ${HOME} will need to uncomment the includes for
    firefox-common-addons.inc in firefox-common.profile.
  * modif: split disable-devel.inc into disable-devel and
    disable-interpreters.inc
  * Firejail user access database (/etc/firejail/firejail.users,
    man firejail-users)
  * add --noautopulse to disable automatic ~/.config/pulse (for complex setups)
  * Spectre mitigation patch for gcc and clang compiler
  * D-Bus handling (--nodbus)
  * AppArmor support for overlayfs and chroot sandboxes
  * AppArmor support for AppImages
  * Enable AppArmor by default for a large number of programs
  * firejail --apparmor.print option
  * firemon --apparmor option
  * apparmor yes/no flag in /etc/firejail/firejail.config
  * seccomp syscall list update for glibc 2.26-10
  * seccomp disassembler for --seccomp.print option
  * seccomp machine code optimizer for default seccomp filters
  * IPv6 DNS support
  * whitelist support for overlay and chroot sandboxes
  * private-dev support for overlay and chroot sandboxes
  * private-tmp support for overlay and chroot sandboxes
  * added sandbox name support in firemon
  * firemon/prctl enhancements
  * noblacklist support for /sys/module directory
  * whitelist support for /sys/module directory
  * new profiles: basilisk, Tor Browser language packs, PlayOnLinux, sylpheed,
  * new profiles: discord-canary, pycharm-community, pycharm-professional,
  * new profiles: pdfchain, tilp, vivaldi-snapshot, bitcoin-qt, kaffeine,
  * new profiles: falkon, gnome-builder, asunder, VS Code, gnome-recipes,
  * new profiles: akonadi_controle, evince-previewer, evince-thumbnailer,
  * new profiles: blender-2.8, thunderbird-beta, ncdu, gnome-logs, gcloud,
  * new profiles: musixmatch, gunzip, bunzip2, enchant-lsmod, enchant-lsmod-2,
  * new profiles: enchant, enchant-2, Discord, acat, adiff, als, apack,
  * new profiles: arepack, aunpack profiles, ppsspp, scallion, clion,
  * new profiles: baloo_filemetadata_temp_extractor, AnyDesk, webstorm, xmind,
  * new profiles: qmmp, sayonara</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1536580800">- Remove the rpmlintrc file since the warnings are no longer relevant.</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1536667200">- Drop ldconfig calls since firejail libraries are installed in their
  own subdirectory which is not scanned by ldconfig.</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1537617600">- update to version 0.9.56:
  * modif: removed CFG_CHROOT_DESKTOP configuration option
  * modif: removed compile time --enable-network=restricted
  * modif: removed compile time --disable-bind
  * modif: --net=none allowed even if networking was disabled at compile
    time or at run time
  * modif: allow system users to run the sandbox
  * support wireless devices in --net option
  * support tap devices in --net option (tunneling support)
  * allow IP address configuration if the parent interface specified
    by --net is not configured (--netmask)
  * support for firetunnel utility
  * disable U2F devices (--nou2f)
  * add --private-cache to support private ~/.cache
  * support full paths in private-lib
  * globbing support in private-lib
  * support for local user directories in firecfg (--bindir)
  * new profiles: ms-excel, ms-office, ms-onenote, ms-outlook, ms-powerpoint,
  * new profiles: ms-skype, ms-word, riot-desktop, gnome-mpv, snox, gradio,
  * new profiles: standardnotes-desktop, shellcheck, patch, flameshot,
  * new profiles: rview, rvim, vimcat, vimdiff, vimpager, vimtutor, xxd,
  * new profiles: Beaker, electrum, clamtk, pybitmessage, dig, whois,
  * new profiles: jdownloader, Fluxbox, Blackbox, Awesome, i3
  * new profiles: start-tor-browser.desktop</changelog>
  <changelog author="info@paolostivanin.com" date="1549022400">-  update to version 0.9.58:
  * --disable-mnt rework
  * --net.print command
  * GitLab CI/CD integration: disto specific builds
  * profile parser enhancements and conditional handling support
    for HAS_APPIMAGE, HAS_NODBUS, BROWSER_DISABLE_U2F
  * profile name support
  * added explicit nonewprivs support to join option
  * new profiles: QMediathekView, aria2c, Authenticator, checkbashisms
  * new profiles: devilspie, devilspie2, easystroke, github-desktop, min
  * new profiles: bsdcat, bsdcpio, bsdtar, lzmadec, lbunzip2, lbzcat
  * new profiles: lbzip2, lzcat, lzcmp, lzdiff, lzegrep, lzfgrep, lzgrep
  * new profiles: lzless, lzma, lzmainfo, lzmore, unlzma, unxz, xzcat
  * new profiles: xzcmp, xzdiff, xzegrep, xzfgrep, xzgrep, xzless, xzmore
  * new profiles: lzip, artha, nitroshare, nitroshare-cli, nitroshare-nmh
  * new profiles: nirtoshare-send, nitroshare-ui, mencoder, gnome-pie
  * new profiles: masterpdfeditor, QOwnNotes, aisleriot, Mendeley
  * new profiles: feedreader, ocenaudio, mpsyt, thunderbird-wayland
  * new profiles: supertuxkart, ghostwriter, gajim-history-manager
  * bugfixes</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1559476800">- update to version 0.9.60:
  * security bug reported by Austin Morton:
  Seccomp filters are copied into /run/firejail/mnt, and are writable
  within the jail. A malicious process can modify files from inside the
  jail. Processes that are later joined to the jail will not have seccomp
  filters applied.
  CVE-2019-12589
  boo#1137139
  * memory-deny-write-execute now also blocks memfd_create
  * add private-cwd option to control working directory within jail
  * blocking system D-Bus socket with --nodbus
  * bringing back Centos 6 support
  * drop support for flatpak/snap packages
  * new profiles: crow, nyx, mypaint, celluoid, nano, transgui, mpdris2
  * new profiles: sysprof, simplescreenrecorder, geekbench, xfce4-mixer
  * new profiles: pavucontrol, d-feet, seahorse, secret-tool, gnome-keyring
  * new profiles: regextester, hardinfo, gnome-system-log, gnome-nettool
  * new profiles: netactview, redshift, devhelp, assogiate, subdownloader
  * new profiles: font-manager, exfalso, gconf-editor, dconf-editor
  * new profiles: sysprof-cli, seahorse-tool, secret-tool, dconf, gsettings
  * new profiles: code-oss, pragha, Maelstrom, ostrichriders, bzflag
  * new profiles: freeciv, lincity-ng, megaglest, openttd, crawl, crawl-tiles
  * new profiles: teeworlds, torcs, tremulous, warsow, lugaru, manaplus
  * new profiles: pioneer, scorched3d, widelands, freemind, kid3, kid3-qt
  * new profiles: kid3-cli, nomacs, freecol, opencity, openclonk, slashem
  * new profiles: vultureseye, vulturesclaw, anki, cheese, utox, mp3splt
  * new profiles: oggsplt, flacsplt, gramps, newsboat, freeoffice-planmaker
  * new profiles: autokey-gtk, autokey-qt, autokey-run, autokey-shell
  * new profiles: freeoffice-presentations, freeoffice-textmaker, mp3wrap
  * new profiles: inkview, meteo-qt, mp3splt-gtk, ktouch, yelp, cantata</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1581422400">- update to version 0.9.62
  * added file-copy-limit in /etc/firejail/firejail.config
  * profile templates (/usr/share/doc/firejail)
  * allow-debuggers support in profiles
  * several seccomp enhancements
  * compiler flags autodetection
  * move chroot entirely from path based to file descriptor based mounts
  * whitelisting /usr/share in a large number of profiles
  * new scripts in conrib: gdb-firejail.sh and sort.py
  * enhancement: whitelist /usr/share in some profiles
  * added signal mediation to apparmor profile
  * new conditions: HAS_X11, HAS_NET
  * new profiles: qgis, klatexformula, klatexformula_cmdl, links, xlinks
  * new profiles: pandoc, teams-for-linux, OpenArena, gnome-sound-recorder
  * new profiles: godot, tcpdump, tshark, newsbeuter, keepassxc-cli
  * new profiles: keepassxc-proxy, rhythmbox-client, jerry, zeal, mpg123
  * new profiles: conplay, mpg123.bin, mpg123-alsa, mpg123-id3dump, out123
  * new profiles: mpg123-jack, mpg123-nas, mpg123-openal, mpg123-oss
  * new profiles: mpg123-portaudio, mpg123-pulse, mpg123-strip, pavucontrol-qt
  * new profiles: gnome-characters, gnome-character-map, rsync, Whalebird,
  * new profiles: tor-browser (AUR), Zulip, tb-starter-wrapper, bzcat,
  * new profiles: kiwix-desktop, bzcat, zstd, pzstd, zstdcat, zstdgrep, zstdless
  * new profiles: zstdmt, unzstd, i2p, ar, gnome-latex, pngquant, kalgebra
  * new profiles: kalgebramobile, signal-cli, amuled, kfind, profanity
  * new profiles: audio-recorder, cameramonitor, ddgtk, drawio, unf, gmpc
  * new profiles: electron-mail, gist, gist-paste</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1588161600">- Add firejail-0.9.62-fix-usr-etc.patch:
  Check /usr/etc not just /etc
- Replace python interpreter line in sort.py</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1596888000">- Add patches fix-CVE-2020-17367.patch and fix-CVE-2020-17368.patch to fix CVE-2020-17367 and CVE-2020-17368 and boo#1174986</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1597320000">- Update to 0.9.62.2
  * fix CVE-2020-17367
  * fix CVE-2020-17368
  * additional hardening and bug fixes
- Remove fix-CVE-2020-17368.patch
- Remove fix-CVE-2020-17367.patch</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1597838400">- Update to 0.9.62.4
  * fix AppArmor broken in the previous release
  * miscellaneous fixes</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1603713600">- Add firejail-apparmor-3.0.diff to make the AppArmor profile compatible with
  AppArmor 3.0 (add missing include &lt;tunables/global&gt;)</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1604232000">- Update to version 0.9.64:
  * replaced --nowrap option with --wrap in firemon
  * The blocking action of seccomp filters has been changed from
    killing the process to returning EPERM to the caller. To get the
    previous behaviour, use --seccomp-error-action=kill or
    syscall:kill syntax when constructing filters, or override in
    /etc/firejail/firejail.config file.
  * Fine-grained D-Bus sandboxing with xdg-dbus-proxy.
    xdg-dbus-proxy must be installed, if not D-Bus access will be allowed.
    With this version nodbus is deprecated, in favor of dbus-user none and
    dbus-system none and will be removed in a future version.
  * DHCP client support
  * firecfg only fix dektop-files if started with sudo
  * SELinux labeling support
  * custom 32-bit seccomp filter support
  * restrict ${RUNUSER} in several profiles
  * blacklist shells such as bash in several profiles
  * whitelist globbing
  * mkdir and mkfile support for /run/user directory
  * support ignore for include
  * --include on the command line
  * splitting up media players whitelists in whitelist-players.inc
  * new condition: HAS_NOSOUND
  * new profiles: gfeeds, firefox-x11, tvbrowser, rtv, clipgrab, muraster
  * new profiles: gnome-passwordsafe, bibtex, gummi, latex, mupdf-x11-curl
  * new profiles: pdflatex, tex, wpp, wpspdf, wps, et, multimc, mupdf-x11
  * new profiles: gnome-hexgl, com.github.johnfactotum.Foliate, mupdf-gl, mutool
  * new profiles: desktopeditors, impressive, planmaker18, planmaker18free
  * new profiles: presentations18, presentations18free, textmaker18, teams
  * new profiles: textmaker18free, xournal, gnome-screenshot, ripperX
  * new profiles: sound-juicer, com.github.dahenson.agenda, gnome-pomodoro
  * new profiles: gnome-todo, x2goclient, iagno, kmplayer, penguin-command
  * new profiles: frogatto, gnome-mines, gnome-nibbles, lightsoff, warmux
  * new profiles: ts3client_runscript.sh, ferdi, abiword, four-in-a-row
  * new profiles: gnome-mahjongg, gnome-robots, gnome-sudoku, gnome-taquin
  * new profiles: gnome-tetravex, blobwars, gravity-beams-and-evaporating-stars
  * new profiles: hyperrogue, jumpnbump-menu, jumpnbump, magicor, mindless
  * new profiles: mirrormagic, mrrescue, scorched3d-wrapper, scorchwentbonkers
  * new profiles: seahorse-adventures, wordwarvi, xbill, gnome-klotski
  * new profiles: swell-foop, fdns, five-or-more, steam-runtime
  * new profiles: nicotine, plv, mocp, apostrophe, quadrapassel, dino-im
  * new profiles: hitori, bijiben, gnote, gnubik, ZeGrapher, xonotic-sdl-wrapper
  * new profiles: gapplication, openarena_ded, element-desktop, cawbird
  * new profiles: freetube, strawberry, jitsi-meet-desktop
  * new profiles: homebank, mattermost-desktop, newsflash, com.gitlab.newsflash
  * new profiles: sushi, xfce4-screenshooter, org.gnome.NautilusPreviewer, lyx
  * new profiles: minitube, nuclear, mtpaint, minecraft-launcher, gnome-calendar
  * new profiles: vmware, git-cola, otter-browser, kazam, menulibre, musictube
  * new profiles: onboard, fractal, mirage, quaternion, spectral, man, psi
  * new profiles: smuxi-frontend-gnome, balsa, kube, trojita, youtube
  * new profiles: youtubemusic-nativefier, cola, dbus-send, notify-send
  * new profiles: qrencode, ytmdesktop, twitch
  * new profiles: xournalpp, chromium-freeworld, equalx
- remove firejail-0.9.62-fix-usr-etc.patch, included upstream
- remove firejail-apparmor-3.0.diff, included upstream</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1604318400">- packaging fixes</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1611835200">- Update to 0.9.64.2:
  * allow --tmpfs inside $HOME for unprivileged users
  * --disable-usertmpfs compile time option
  * allow AF_BLUETOOTH via --protocol=bluetooth
  * setup guide for new users: contrib/firejail-welcome.sh
  * implement netns in profiles
  * added nolocal6.net IPv6 network filter
  * new profiles: spectacle, chromium-browser-privacy,
    gtk-straw-viewer, gtk-youtube-viewer, gtk2-youtube-viewer,
    gtk3-youtube-viewer, straw-viewer, lutris, dolphin-emu,
    authenticator-rs, servo, npm, marker, yarn, lsar, unar, agetpkg,
    mdr, shotwell, qnapi, new profiles: guvcview, pkglog, kdiff3, CoyIM.</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1612699200">- Update to 0.9.64.4:
  * disabled overlayfs, pending multiple fixes
  * fixed launch firefox for open url in telegram-desktop.profile</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- firejail 0.9.66:
  * deprecated --audit options, relpaced by jailcheck utility
  * deprecated follow-symlink-as-user from firejail.config
  * new firejail.config settings: private-bin, private-etc
  * new firejail.config settings: private-opt, private-srv
  * new firejail.config settings: whitelist-disable-topdir
  * new firejail.config settings: seccomp-filter-add
  * removed kcmp syscall from seccomp default filter
  * rename --noautopulse to keep-config-pulse
  * filtering environment variables
  * zsh completion
  * command line: --mkdir, --mkfile
  * --protocol now accumulates
  * jailtest utility for testing running sandboxes
  * faccessat2 syscall support
  * --private-dev keeps /dev/input
  * added --noinput to disable /dev/input
  * add support for subdirs in --private-etc
  * subdirs support in private-etc
  * input devices support in private-dev, --no-input
  * support trailing comments on profile lines
  * many new profiles
- split shell completion into standard subpackages</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1644148800">- update to firejail 0.9.68:
  - security: on Ubuntu, the PPA is now recommended over the distro package
  - (see README.md) (#4748)
  - security: bugfix: private-cwd leaks access to the entire filesystem
  - (#4780); reported by Hugo Osvaldo Barrera
  - feature: remove (some) environment variables with auth-tokens (#4157)
  - feature: ALLOW_TRAY condition (#4510 #4599)
  - feature: add basic Firejail support to AppArmor base abstraction (#3226
  - #4628)
  - feature: intrusion detection system (--ids-init, --ids-check)
  - feature: deterministic shutdown command (--deterministic-exit-code,
  - --deterministic-shutdown) (#928 #3042 #4635)
  - feature: noprinters command (#4607 #4827)
  - feature: network monitor (--nettrace)
  - feature: network locker (--netlock) (#4848)
  - feature: whitelist-ro profile command (#4740)
  - feature: disable pipewire with --nosound (#4855)
  - feature: Unset TMP if it doesn't exist inside of sandbox (#4151)
  - feature: Allow apostrophe in whitelist and blacklist (#4614)
  - feature: AppImage support in --build command (#4878)
  - modifs: exit code: distinguish fatal signals by adding 128 (#4533)
  - modifs: firecfg.config is now installed to /etc/firejail/ (#408 #4669)
  - modifs: close file descriptors greater than 2 (--keep-fd) (#4845)
  - modifs: nogroups now stopped causing certain system groups to be dropped,
  - which are now controlled by the relevant "no" options instead (such as
  - nosound -&gt; drop audio group), which fixes device access issues on systems
  - not using (e)logind (such as with seatd) (#4632 #4725 #4732 #4851)
  - removal: --disable-whitelist at compile time
  - removal: whitelist=yes/no in /etc/firejail/firejail.config
  - bugfix: Fix sndio support (#4362 #4365)
  - bugfix: Error mounting tmpfs (MS_REMOUNT flag not being cleared) (#4387)
  - bugfix: --build clears the environment (#4460 #4467)
  - bugfix: firejail hangs with net parameter (#3958 #4476)
  - bugfix: Firejail does not work with a custom hosts file (#2758 #4560)
  - bugfix: --tracelog and --trace override /etc/ld.so.preload (#4558 #4586)
  - bugfix: PATH_MAX is undeclared on musl libc (#4578 #4579 #4583 #4606)
  - bugfix: firejail symlinks are not skipped with private-bin + globs (#4626)
  - bugfix: Firejail rejects empty arguments (#4395)
  - bugfix: firecfg does not work with symlinks (discord.desktop) (#4235)
  - bugfix: Seccomp list output goes to stdout instead of stderr (#4328)
  - bugfix: private-etc does not work with symlinks (#4887)
  - bugfix: Hardware key not detected on keepassxc (#4883)
  - build: allow building with address sanitizer (#4594)
  - build: Stop linking pthread (#4695)
  - build: Configure cleanup and improvements (#4712)
  - ci: add profile checks for sorting disable-programs.inc and
  - firecfg.config and for the required arguments in private-etc (#2739 #4643)
  - ci: pin GitHub actions to SHAs and use Dependabot to update them (#4774)
  - docs: Add new command checklist to CONTRIBUTING.md (#4413)
  - docs: Rework bug report issue template and add both a question and a
  - feature request template (#4479 #4515 #4561)
  - docs: fix contradictory descriptions of machine-id ("preserves" vs
  - "spoofs") (#4689)
  - docs: Document that private-bin and private-etc always accumulate (#4078)
  - new includes: whitelist-run-common.inc (#4288), disable-X11.inc (#4462)
  - new includes: disable-proc.inc (#4521)
  - removed includes: disable-passwordmgr.inc (#4454 #4461)
  - new profiles: microsoft-edge-beta, clion-eap, lifeograph, zim
  - new profiles: io.github.lainsce.Notejot, rednotebook, gallery-dl
  - new profiles: yt-dlp, goldendict, goldendict, bundle, cmake
  - new profiles: make, meson, pip, codium, telnet, ftp, OpenStego
  - new profiles: imv, retroarch, torbrowser, CachyBrowser,
  - new profiles: notable, RPCS3, wget2, raincat, conitop, 1passwd,
  - new profiles: Seafile, neovim, com.github.tchx84.Flatseal</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1655208000">- update to version 0.9.70:
  - fix bsc#1199148 CVE-2022-31214
  - security: CVE-2022-31214 - root escalation in --join logic
  - Reported by Matthias Gerstner, working exploit code was provided to our
  - development team. In the same time frame, the problem was independently
  - reported by Birk Blechschmidt. Full working exploit code was also provided.
  - feature: enable shell tab completion with --tab (#4936)
  - feature: disable user profiles at compile time (#4990)
  - feature: Allow resolution of .local names with avahi-daemon in the apparmor
  - profile (#5088)
  - feature: always log seccomp errors (#5110)
  - feature: firecfg --guide, guided user configuration (#5111)
  - feature: --oom, kernel OutOfMemory-killer (#5122)
  - modif: --ids feature needs to be enabled at compile time (#5155)
  - modif: --nettrace only available to root user
  - rework: whitelist restructuring (#4985)
  - rework: firemon, speed up and lots of fixes
  - bugfix: --private-cwd not expanding macros, broken hyperrogue (#4910)
  - bugfix: nogroups + wrc prints confusing messages (#4930 #4933)
  - bugfix: openSUSE Leap - whitelist-run-common.inc (#4954)
  - bugfix: fix printing in evince (#5011)
  - bugfix: gcov: fix gcov functions always declared as dummy (#5028)
  - bugfix: Stop warning on safe supplementary group clean (#5114)
  - build: remove ultimately unused INSTALL and RANLIB check macros (#5133)
  - build: mkdeb.sh.in: pass remaining arguments to ./configure (#5154)
  - ci: replace centos (EOL) with almalinux (#4912)
  - ci: fix --version not printing compile-time features (#5147)
  - ci: print version after install &amp; fix apparmor support on build_apparmor
  - (#5148)
  - docs: Refer to firejail.config in configuration files (#4916)
  - docs: firejail.config: add warning about allow-tray (#4946)
  - docs: mention that the protocol command accumulates (#5043)
  - docs: mention inconsistent homedir bug involving --private=dir (#5052)
  - docs: mention capabilities(7) on --caps (#5078)
  - new profiles: onionshare, onionshare-cli, opera-developer, songrec
  - new profiles: node-gyp, npx, semver, ping-hardened
  - removed profiles: nvm</changelog>
</package>
<package pkgid="bf61b71007d653ef573446db1a82e06d54b0274d8def0267d95c87ba26035754" name="firejail" arch="s390x">
  <version epoch="0" ver="0.9.70" rel="bp154.2.3.1"/>
  <changelog author="avindra@opensuse.org" date="1513166400">- Update to version 0.9.52:
  * New features
    + systemd-resolved integration
    + whitelisted /var in most profiles
    + GTK2, GTK3 and Qt4 private-lib support
    + --debug-private-lib
    + test deployment of private-lib for the some apps: evince,
    galculator, gnome-calculator, leafpad, mousepad,
    transmission-gtk, xcalc, xmr-stak-cpu, atril,
    mate-color-select, tar, file, strings, gpicview, eom, eog,
    gedit, pluma
    + netfilter template support
    + various new arguments
  * --writable-run-user
  * --rlimit-as
  * --rlimit-cpu
  * --timeout
  * --build (profile build tool)
  * --netfilter.print
  * --netfilter6.print
  * deprecations in modif
    + --allow-private-blacklists (blacklisting, read-only,
    read-write, tmpfs and noexec are allowed in private home
    directories
    + remount-proc-sys (firejail.config)
    + follow-symlink-private-bin (firejail.config)
    + --profile-path
  * enhancements
    + support Firejail user config directory in firecfg
    + disable DBus activation in firecfg
    + enumerate root directories in apparmor profile
    + /etc and /usr/share whitelisting support
    + globbing support for --private-bin
  * new profiles: upstreamed profiles from 3 sources:
    + https://github.com/chiraag-nataraj/firejail-profiles
    + https://github.com/nyancat18/fe
    + https://aur.archlinux.org/packages/firejail-profiles
  * new profiles: terasology, surf, rocketchat, clamscan, clamdscan,
    clamdtop, freshclam, xmr-stak-cpu, amule, ardour4, ardour5,
    brackets, calligra, calligraauthor, calligraconverter,
    calligraflow, calligraplan, calligraplanwork, calligrasheets,
    calligrastage, calligrawords, cin, dooble, dooble-qt4,
    fetchmail, freecad, freecadcmd, google-earth,imagej, karbon,
    1kdenlive, krita, linphone, lmms, macrofusion, mpd, natron,
    Natron, ricochet, shotcut, teamspeak3, tor, tor-browser-en,
    Viber, x-terminal-emulator, zart, conky, arch-audit, ffmpeg,
    bluefish, cinelerra, openshot-qt, pinta, uefitool, aosp,
    pdfmod, gnome-ring, xcalc, zaproxy, kopete, cliqz,
    signal-desktop, kget, nheko, Enpass, kwin_x11, krunner, ping,
    bsdtar, makepkg (Arch), archaudit-report cower (Arch), kdeinit4
- Add full link to source tarball from sourceforge
- Add asc file</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1535025600">- Changed the permissions of the firejail executable to 4750.
  Setuid mode is used, but only allowed for users in the newly
  created group 'firejail' (boo#1059013).
- Update to version 0.9.54:
  * modif: --force removed
  * modif: --csh, --zsh removed
  * modif: --debug-check-filename removed
  * modif: --git-install and --git-uninstall removed
  * modif: support for private-bin, private-lib and shell none has been
    disabled while running AppImage archives in order to be able to use
    our regular profile files with AppImages.
  * modif: restrictions for /proc, /sys and /run/user directories
    are moved from AppArmor profile into firejail executable
  * modif: unifying Chromium and Firefox browsers profiles.
    All users of Firefox-based browsers who use addons and plugins
    that read/write from ${HOME} will need to uncomment the includes for
    firefox-common-addons.inc in firefox-common.profile.
  * modif: split disable-devel.inc into disable-devel and
    disable-interpreters.inc
  * Firejail user access database (/etc/firejail/firejail.users,
    man firejail-users)
  * add --noautopulse to disable automatic ~/.config/pulse (for complex setups)
  * Spectre mitigation patch for gcc and clang compiler
  * D-Bus handling (--nodbus)
  * AppArmor support for overlayfs and chroot sandboxes
  * AppArmor support for AppImages
  * Enable AppArmor by default for a large number of programs
  * firejail --apparmor.print option
  * firemon --apparmor option
  * apparmor yes/no flag in /etc/firejail/firejail.config
  * seccomp syscall list update for glibc 2.26-10
  * seccomp disassembler for --seccomp.print option
  * seccomp machine code optimizer for default seccomp filters
  * IPv6 DNS support
  * whitelist support for overlay and chroot sandboxes
  * private-dev support for overlay and chroot sandboxes
  * private-tmp support for overlay and chroot sandboxes
  * added sandbox name support in firemon
  * firemon/prctl enhancements
  * noblacklist support for /sys/module directory
  * whitelist support for /sys/module directory
  * new profiles: basilisk, Tor Browser language packs, PlayOnLinux, sylpheed,
  * new profiles: discord-canary, pycharm-community, pycharm-professional,
  * new profiles: pdfchain, tilp, vivaldi-snapshot, bitcoin-qt, kaffeine,
  * new profiles: falkon, gnome-builder, asunder, VS Code, gnome-recipes,
  * new profiles: akonadi_controle, evince-previewer, evince-thumbnailer,
  * new profiles: blender-2.8, thunderbird-beta, ncdu, gnome-logs, gcloud,
  * new profiles: musixmatch, gunzip, bunzip2, enchant-lsmod, enchant-lsmod-2,
  * new profiles: enchant, enchant-2, Discord, acat, adiff, als, apack,
  * new profiles: arepack, aunpack profiles, ppsspp, scallion, clion,
  * new profiles: baloo_filemetadata_temp_extractor, AnyDesk, webstorm, xmind,
  * new profiles: qmmp, sayonara</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1536580800">- Remove the rpmlintrc file since the warnings are no longer relevant.</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1536667200">- Drop ldconfig calls since firejail libraries are installed in their
  own subdirectory which is not scanned by ldconfig.</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1537617600">- update to version 0.9.56:
  * modif: removed CFG_CHROOT_DESKTOP configuration option
  * modif: removed compile time --enable-network=restricted
  * modif: removed compile time --disable-bind
  * modif: --net=none allowed even if networking was disabled at compile
    time or at run time
  * modif: allow system users to run the sandbox
  * support wireless devices in --net option
  * support tap devices in --net option (tunneling support)
  * allow IP address configuration if the parent interface specified
    by --net is not configured (--netmask)
  * support for firetunnel utility
  * disable U2F devices (--nou2f)
  * add --private-cache to support private ~/.cache
  * support full paths in private-lib
  * globbing support in private-lib
  * support for local user directories in firecfg (--bindir)
  * new profiles: ms-excel, ms-office, ms-onenote, ms-outlook, ms-powerpoint,
  * new profiles: ms-skype, ms-word, riot-desktop, gnome-mpv, snox, gradio,
  * new profiles: standardnotes-desktop, shellcheck, patch, flameshot,
  * new profiles: rview, rvim, vimcat, vimdiff, vimpager, vimtutor, xxd,
  * new profiles: Beaker, electrum, clamtk, pybitmessage, dig, whois,
  * new profiles: jdownloader, Fluxbox, Blackbox, Awesome, i3
  * new profiles: start-tor-browser.desktop</changelog>
  <changelog author="info@paolostivanin.com" date="1549022400">-  update to version 0.9.58:
  * --disable-mnt rework
  * --net.print command
  * GitLab CI/CD integration: disto specific builds
  * profile parser enhancements and conditional handling support
    for HAS_APPIMAGE, HAS_NODBUS, BROWSER_DISABLE_U2F
  * profile name support
  * added explicit nonewprivs support to join option
  * new profiles: QMediathekView, aria2c, Authenticator, checkbashisms
  * new profiles: devilspie, devilspie2, easystroke, github-desktop, min
  * new profiles: bsdcat, bsdcpio, bsdtar, lzmadec, lbunzip2, lbzcat
  * new profiles: lbzip2, lzcat, lzcmp, lzdiff, lzegrep, lzfgrep, lzgrep
  * new profiles: lzless, lzma, lzmainfo, lzmore, unlzma, unxz, xzcat
  * new profiles: xzcmp, xzdiff, xzegrep, xzfgrep, xzgrep, xzless, xzmore
  * new profiles: lzip, artha, nitroshare, nitroshare-cli, nitroshare-nmh
  * new profiles: nirtoshare-send, nitroshare-ui, mencoder, gnome-pie
  * new profiles: masterpdfeditor, QOwnNotes, aisleriot, Mendeley
  * new profiles: feedreader, ocenaudio, mpsyt, thunderbird-wayland
  * new profiles: supertuxkart, ghostwriter, gajim-history-manager
  * bugfixes</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1559476800">- update to version 0.9.60:
  * security bug reported by Austin Morton:
  Seccomp filters are copied into /run/firejail/mnt, and are writable
  within the jail. A malicious process can modify files from inside the
  jail. Processes that are later joined to the jail will not have seccomp
  filters applied.
  CVE-2019-12589
  boo#1137139
  * memory-deny-write-execute now also blocks memfd_create
  * add private-cwd option to control working directory within jail
  * blocking system D-Bus socket with --nodbus
  * bringing back Centos 6 support
  * drop support for flatpak/snap packages
  * new profiles: crow, nyx, mypaint, celluoid, nano, transgui, mpdris2
  * new profiles: sysprof, simplescreenrecorder, geekbench, xfce4-mixer
  * new profiles: pavucontrol, d-feet, seahorse, secret-tool, gnome-keyring
  * new profiles: regextester, hardinfo, gnome-system-log, gnome-nettool
  * new profiles: netactview, redshift, devhelp, assogiate, subdownloader
  * new profiles: font-manager, exfalso, gconf-editor, dconf-editor
  * new profiles: sysprof-cli, seahorse-tool, secret-tool, dconf, gsettings
  * new profiles: code-oss, pragha, Maelstrom, ostrichriders, bzflag
  * new profiles: freeciv, lincity-ng, megaglest, openttd, crawl, crawl-tiles
  * new profiles: teeworlds, torcs, tremulous, warsow, lugaru, manaplus
  * new profiles: pioneer, scorched3d, widelands, freemind, kid3, kid3-qt
  * new profiles: kid3-cli, nomacs, freecol, opencity, openclonk, slashem
  * new profiles: vultureseye, vulturesclaw, anki, cheese, utox, mp3splt
  * new profiles: oggsplt, flacsplt, gramps, newsboat, freeoffice-planmaker
  * new profiles: autokey-gtk, autokey-qt, autokey-run, autokey-shell
  * new profiles: freeoffice-presentations, freeoffice-textmaker, mp3wrap
  * new profiles: inkview, meteo-qt, mp3splt-gtk, ktouch, yelp, cantata</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1581422400">- update to version 0.9.62
  * added file-copy-limit in /etc/firejail/firejail.config
  * profile templates (/usr/share/doc/firejail)
  * allow-debuggers support in profiles
  * several seccomp enhancements
  * compiler flags autodetection
  * move chroot entirely from path based to file descriptor based mounts
  * whitelisting /usr/share in a large number of profiles
  * new scripts in conrib: gdb-firejail.sh and sort.py
  * enhancement: whitelist /usr/share in some profiles
  * added signal mediation to apparmor profile
  * new conditions: HAS_X11, HAS_NET
  * new profiles: qgis, klatexformula, klatexformula_cmdl, links, xlinks
  * new profiles: pandoc, teams-for-linux, OpenArena, gnome-sound-recorder
  * new profiles: godot, tcpdump, tshark, newsbeuter, keepassxc-cli
  * new profiles: keepassxc-proxy, rhythmbox-client, jerry, zeal, mpg123
  * new profiles: conplay, mpg123.bin, mpg123-alsa, mpg123-id3dump, out123
  * new profiles: mpg123-jack, mpg123-nas, mpg123-openal, mpg123-oss
  * new profiles: mpg123-portaudio, mpg123-pulse, mpg123-strip, pavucontrol-qt
  * new profiles: gnome-characters, gnome-character-map, rsync, Whalebird,
  * new profiles: tor-browser (AUR), Zulip, tb-starter-wrapper, bzcat,
  * new profiles: kiwix-desktop, bzcat, zstd, pzstd, zstdcat, zstdgrep, zstdless
  * new profiles: zstdmt, unzstd, i2p, ar, gnome-latex, pngquant, kalgebra
  * new profiles: kalgebramobile, signal-cli, amuled, kfind, profanity
  * new profiles: audio-recorder, cameramonitor, ddgtk, drawio, unf, gmpc
  * new profiles: electron-mail, gist, gist-paste</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1588161600">- Add firejail-0.9.62-fix-usr-etc.patch:
  Check /usr/etc not just /etc
- Replace python interpreter line in sort.py</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1596888000">- Add patches fix-CVE-2020-17367.patch and fix-CVE-2020-17368.patch to fix CVE-2020-17367 and CVE-2020-17368 and boo#1174986</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1597320000">- Update to 0.9.62.2
  * fix CVE-2020-17367
  * fix CVE-2020-17368
  * additional hardening and bug fixes
- Remove fix-CVE-2020-17368.patch
- Remove fix-CVE-2020-17367.patch</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1597838400">- Update to 0.9.62.4
  * fix AppArmor broken in the previous release
  * miscellaneous fixes</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1603713600">- Add firejail-apparmor-3.0.diff to make the AppArmor profile compatible with
  AppArmor 3.0 (add missing include &lt;tunables/global&gt;)</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1604232000">- Update to version 0.9.64:
  * replaced --nowrap option with --wrap in firemon
  * The blocking action of seccomp filters has been changed from
    killing the process to returning EPERM to the caller. To get the
    previous behaviour, use --seccomp-error-action=kill or
    syscall:kill syntax when constructing filters, or override in
    /etc/firejail/firejail.config file.
  * Fine-grained D-Bus sandboxing with xdg-dbus-proxy.
    xdg-dbus-proxy must be installed, if not D-Bus access will be allowed.
    With this version nodbus is deprecated, in favor of dbus-user none and
    dbus-system none and will be removed in a future version.
  * DHCP client support
  * firecfg only fix dektop-files if started with sudo
  * SELinux labeling support
  * custom 32-bit seccomp filter support
  * restrict ${RUNUSER} in several profiles
  * blacklist shells such as bash in several profiles
  * whitelist globbing
  * mkdir and mkfile support for /run/user directory
  * support ignore for include
  * --include on the command line
  * splitting up media players whitelists in whitelist-players.inc
  * new condition: HAS_NOSOUND
  * new profiles: gfeeds, firefox-x11, tvbrowser, rtv, clipgrab, muraster
  * new profiles: gnome-passwordsafe, bibtex, gummi, latex, mupdf-x11-curl
  * new profiles: pdflatex, tex, wpp, wpspdf, wps, et, multimc, mupdf-x11
  * new profiles: gnome-hexgl, com.github.johnfactotum.Foliate, mupdf-gl, mutool
  * new profiles: desktopeditors, impressive, planmaker18, planmaker18free
  * new profiles: presentations18, presentations18free, textmaker18, teams
  * new profiles: textmaker18free, xournal, gnome-screenshot, ripperX
  * new profiles: sound-juicer, com.github.dahenson.agenda, gnome-pomodoro
  * new profiles: gnome-todo, x2goclient, iagno, kmplayer, penguin-command
  * new profiles: frogatto, gnome-mines, gnome-nibbles, lightsoff, warmux
  * new profiles: ts3client_runscript.sh, ferdi, abiword, four-in-a-row
  * new profiles: gnome-mahjongg, gnome-robots, gnome-sudoku, gnome-taquin
  * new profiles: gnome-tetravex, blobwars, gravity-beams-and-evaporating-stars
  * new profiles: hyperrogue, jumpnbump-menu, jumpnbump, magicor, mindless
  * new profiles: mirrormagic, mrrescue, scorched3d-wrapper, scorchwentbonkers
  * new profiles: seahorse-adventures, wordwarvi, xbill, gnome-klotski
  * new profiles: swell-foop, fdns, five-or-more, steam-runtime
  * new profiles: nicotine, plv, mocp, apostrophe, quadrapassel, dino-im
  * new profiles: hitori, bijiben, gnote, gnubik, ZeGrapher, xonotic-sdl-wrapper
  * new profiles: gapplication, openarena_ded, element-desktop, cawbird
  * new profiles: freetube, strawberry, jitsi-meet-desktop
  * new profiles: homebank, mattermost-desktop, newsflash, com.gitlab.newsflash
  * new profiles: sushi, xfce4-screenshooter, org.gnome.NautilusPreviewer, lyx
  * new profiles: minitube, nuclear, mtpaint, minecraft-launcher, gnome-calendar
  * new profiles: vmware, git-cola, otter-browser, kazam, menulibre, musictube
  * new profiles: onboard, fractal, mirage, quaternion, spectral, man, psi
  * new profiles: smuxi-frontend-gnome, balsa, kube, trojita, youtube
  * new profiles: youtubemusic-nativefier, cola, dbus-send, notify-send
  * new profiles: qrencode, ytmdesktop, twitch
  * new profiles: xournalpp, chromium-freeworld, equalx
- remove firejail-0.9.62-fix-usr-etc.patch, included upstream
- remove firejail-apparmor-3.0.diff, included upstream</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1604318400">- packaging fixes</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1611835200">- Update to 0.9.64.2:
  * allow --tmpfs inside $HOME for unprivileged users
  * --disable-usertmpfs compile time option
  * allow AF_BLUETOOTH via --protocol=bluetooth
  * setup guide for new users: contrib/firejail-welcome.sh
  * implement netns in profiles
  * added nolocal6.net IPv6 network filter
  * new profiles: spectacle, chromium-browser-privacy,
    gtk-straw-viewer, gtk-youtube-viewer, gtk2-youtube-viewer,
    gtk3-youtube-viewer, straw-viewer, lutris, dolphin-emu,
    authenticator-rs, servo, npm, marker, yarn, lsar, unar, agetpkg,
    mdr, shotwell, qnapi, new profiles: guvcview, pkglog, kdiff3, CoyIM.</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1612699200">- Update to 0.9.64.4:
  * disabled overlayfs, pending multiple fixes
  * fixed launch firefox for open url in telegram-desktop.profile</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- firejail 0.9.66:
  * deprecated --audit options, relpaced by jailcheck utility
  * deprecated follow-symlink-as-user from firejail.config
  * new firejail.config settings: private-bin, private-etc
  * new firejail.config settings: private-opt, private-srv
  * new firejail.config settings: whitelist-disable-topdir
  * new firejail.config settings: seccomp-filter-add
  * removed kcmp syscall from seccomp default filter
  * rename --noautopulse to keep-config-pulse
  * filtering environment variables
  * zsh completion
  * command line: --mkdir, --mkfile
  * --protocol now accumulates
  * jailtest utility for testing running sandboxes
  * faccessat2 syscall support
  * --private-dev keeps /dev/input
  * added --noinput to disable /dev/input
  * add support for subdirs in --private-etc
  * subdirs support in private-etc
  * input devices support in private-dev, --no-input
  * support trailing comments on profile lines
  * many new profiles
- split shell completion into standard subpackages</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1644148800">- update to firejail 0.9.68:
  - security: on Ubuntu, the PPA is now recommended over the distro package
  - (see README.md) (#4748)
  - security: bugfix: private-cwd leaks access to the entire filesystem
  - (#4780); reported by Hugo Osvaldo Barrera
  - feature: remove (some) environment variables with auth-tokens (#4157)
  - feature: ALLOW_TRAY condition (#4510 #4599)
  - feature: add basic Firejail support to AppArmor base abstraction (#3226
  - #4628)
  - feature: intrusion detection system (--ids-init, --ids-check)
  - feature: deterministic shutdown command (--deterministic-exit-code,
  - --deterministic-shutdown) (#928 #3042 #4635)
  - feature: noprinters command (#4607 #4827)
  - feature: network monitor (--nettrace)
  - feature: network locker (--netlock) (#4848)
  - feature: whitelist-ro profile command (#4740)
  - feature: disable pipewire with --nosound (#4855)
  - feature: Unset TMP if it doesn't exist inside of sandbox (#4151)
  - feature: Allow apostrophe in whitelist and blacklist (#4614)
  - feature: AppImage support in --build command (#4878)
  - modifs: exit code: distinguish fatal signals by adding 128 (#4533)
  - modifs: firecfg.config is now installed to /etc/firejail/ (#408 #4669)
  - modifs: close file descriptors greater than 2 (--keep-fd) (#4845)
  - modifs: nogroups now stopped causing certain system groups to be dropped,
  - which are now controlled by the relevant "no" options instead (such as
  - nosound -&gt; drop audio group), which fixes device access issues on systems
  - not using (e)logind (such as with seatd) (#4632 #4725 #4732 #4851)
  - removal: --disable-whitelist at compile time
  - removal: whitelist=yes/no in /etc/firejail/firejail.config
  - bugfix: Fix sndio support (#4362 #4365)
  - bugfix: Error mounting tmpfs (MS_REMOUNT flag not being cleared) (#4387)
  - bugfix: --build clears the environment (#4460 #4467)
  - bugfix: firejail hangs with net parameter (#3958 #4476)
  - bugfix: Firejail does not work with a custom hosts file (#2758 #4560)
  - bugfix: --tracelog and --trace override /etc/ld.so.preload (#4558 #4586)
  - bugfix: PATH_MAX is undeclared on musl libc (#4578 #4579 #4583 #4606)
  - bugfix: firejail symlinks are not skipped with private-bin + globs (#4626)
  - bugfix: Firejail rejects empty arguments (#4395)
  - bugfix: firecfg does not work with symlinks (discord.desktop) (#4235)
  - bugfix: Seccomp list output goes to stdout instead of stderr (#4328)
  - bugfix: private-etc does not work with symlinks (#4887)
  - bugfix: Hardware key not detected on keepassxc (#4883)
  - build: allow building with address sanitizer (#4594)
  - build: Stop linking pthread (#4695)
  - build: Configure cleanup and improvements (#4712)
  - ci: add profile checks for sorting disable-programs.inc and
  - firecfg.config and for the required arguments in private-etc (#2739 #4643)
  - ci: pin GitHub actions to SHAs and use Dependabot to update them (#4774)
  - docs: Add new command checklist to CONTRIBUTING.md (#4413)
  - docs: Rework bug report issue template and add both a question and a
  - feature request template (#4479 #4515 #4561)
  - docs: fix contradictory descriptions of machine-id ("preserves" vs
  - "spoofs") (#4689)
  - docs: Document that private-bin and private-etc always accumulate (#4078)
  - new includes: whitelist-run-common.inc (#4288), disable-X11.inc (#4462)
  - new includes: disable-proc.inc (#4521)
  - removed includes: disable-passwordmgr.inc (#4454 #4461)
  - new profiles: microsoft-edge-beta, clion-eap, lifeograph, zim
  - new profiles: io.github.lainsce.Notejot, rednotebook, gallery-dl
  - new profiles: yt-dlp, goldendict, goldendict, bundle, cmake
  - new profiles: make, meson, pip, codium, telnet, ftp, OpenStego
  - new profiles: imv, retroarch, torbrowser, CachyBrowser,
  - new profiles: notable, RPCS3, wget2, raincat, conitop, 1passwd,
  - new profiles: Seafile, neovim, com.github.tchx84.Flatseal</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1655208000">- update to version 0.9.70:
  - fix bsc#1199148 CVE-2022-31214
  - security: CVE-2022-31214 - root escalation in --join logic
  - Reported by Matthias Gerstner, working exploit code was provided to our
  - development team. In the same time frame, the problem was independently
  - reported by Birk Blechschmidt. Full working exploit code was also provided.
  - feature: enable shell tab completion with --tab (#4936)
  - feature: disable user profiles at compile time (#4990)
  - feature: Allow resolution of .local names with avahi-daemon in the apparmor
  - profile (#5088)
  - feature: always log seccomp errors (#5110)
  - feature: firecfg --guide, guided user configuration (#5111)
  - feature: --oom, kernel OutOfMemory-killer (#5122)
  - modif: --ids feature needs to be enabled at compile time (#5155)
  - modif: --nettrace only available to root user
  - rework: whitelist restructuring (#4985)
  - rework: firemon, speed up and lots of fixes
  - bugfix: --private-cwd not expanding macros, broken hyperrogue (#4910)
  - bugfix: nogroups + wrc prints confusing messages (#4930 #4933)
  - bugfix: openSUSE Leap - whitelist-run-common.inc (#4954)
  - bugfix: fix printing in evince (#5011)
  - bugfix: gcov: fix gcov functions always declared as dummy (#5028)
  - bugfix: Stop warning on safe supplementary group clean (#5114)
  - build: remove ultimately unused INSTALL and RANLIB check macros (#5133)
  - build: mkdeb.sh.in: pass remaining arguments to ./configure (#5154)
  - ci: replace centos (EOL) with almalinux (#4912)
  - ci: fix --version not printing compile-time features (#5147)
  - ci: print version after install &amp; fix apparmor support on build_apparmor
  - (#5148)
  - docs: Refer to firejail.config in configuration files (#4916)
  - docs: firejail.config: add warning about allow-tray (#4946)
  - docs: mention that the protocol command accumulates (#5043)
  - docs: mention inconsistent homedir bug involving --private=dir (#5052)
  - docs: mention capabilities(7) on --caps (#5078)
  - new profiles: onionshare, onionshare-cli, opera-developer, songrec
  - new profiles: node-gyp, npx, semver, ping-hardened
  - removed profiles: nvm</changelog>
</package>
<package pkgid="a29a47cf530bac49b28be854077e03dadf6d7fe22f919b2200ecd36958995838" name="firejail" arch="src">
  <version epoch="0" ver="0.9.70" rel="bp154.2.3.1"/>
  <changelog author="avindra@opensuse.org" date="1513166400">- Update to version 0.9.52:
  * New features
    + systemd-resolved integration
    + whitelisted /var in most profiles
    + GTK2, GTK3 and Qt4 private-lib support
    + --debug-private-lib
    + test deployment of private-lib for the some apps: evince,
    galculator, gnome-calculator, leafpad, mousepad,
    transmission-gtk, xcalc, xmr-stak-cpu, atril,
    mate-color-select, tar, file, strings, gpicview, eom, eog,
    gedit, pluma
    + netfilter template support
    + various new arguments
  * --writable-run-user
  * --rlimit-as
  * --rlimit-cpu
  * --timeout
  * --build (profile build tool)
  * --netfilter.print
  * --netfilter6.print
  * deprecations in modif
    + --allow-private-blacklists (blacklisting, read-only,
    read-write, tmpfs and noexec are allowed in private home
    directories
    + remount-proc-sys (firejail.config)
    + follow-symlink-private-bin (firejail.config)
    + --profile-path
  * enhancements
    + support Firejail user config directory in firecfg
    + disable DBus activation in firecfg
    + enumerate root directories in apparmor profile
    + /etc and /usr/share whitelisting support
    + globbing support for --private-bin
  * new profiles: upstreamed profiles from 3 sources:
    + https://github.com/chiraag-nataraj/firejail-profiles
    + https://github.com/nyancat18/fe
    + https://aur.archlinux.org/packages/firejail-profiles
  * new profiles: terasology, surf, rocketchat, clamscan, clamdscan,
    clamdtop, freshclam, xmr-stak-cpu, amule, ardour4, ardour5,
    brackets, calligra, calligraauthor, calligraconverter,
    calligraflow, calligraplan, calligraplanwork, calligrasheets,
    calligrastage, calligrawords, cin, dooble, dooble-qt4,
    fetchmail, freecad, freecadcmd, google-earth,imagej, karbon,
    1kdenlive, krita, linphone, lmms, macrofusion, mpd, natron,
    Natron, ricochet, shotcut, teamspeak3, tor, tor-browser-en,
    Viber, x-terminal-emulator, zart, conky, arch-audit, ffmpeg,
    bluefish, cinelerra, openshot-qt, pinta, uefitool, aosp,
    pdfmod, gnome-ring, xcalc, zaproxy, kopete, cliqz,
    signal-desktop, kget, nheko, Enpass, kwin_x11, krunner, ping,
    bsdtar, makepkg (Arch), archaudit-report cower (Arch), kdeinit4
- Add full link to source tarball from sourceforge
- Add asc file</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1535025600">- Changed the permissions of the firejail executable to 4750.
  Setuid mode is used, but only allowed for users in the newly
  created group 'firejail' (boo#1059013).
- Update to version 0.9.54:
  * modif: --force removed
  * modif: --csh, --zsh removed
  * modif: --debug-check-filename removed
  * modif: --git-install and --git-uninstall removed
  * modif: support for private-bin, private-lib and shell none has been
    disabled while running AppImage archives in order to be able to use
    our regular profile files with AppImages.
  * modif: restrictions for /proc, /sys and /run/user directories
    are moved from AppArmor profile into firejail executable
  * modif: unifying Chromium and Firefox browsers profiles.
    All users of Firefox-based browsers who use addons and plugins
    that read/write from ${HOME} will need to uncomment the includes for
    firefox-common-addons.inc in firefox-common.profile.
  * modif: split disable-devel.inc into disable-devel and
    disable-interpreters.inc
  * Firejail user access database (/etc/firejail/firejail.users,
    man firejail-users)
  * add --noautopulse to disable automatic ~/.config/pulse (for complex setups)
  * Spectre mitigation patch for gcc and clang compiler
  * D-Bus handling (--nodbus)
  * AppArmor support for overlayfs and chroot sandboxes
  * AppArmor support for AppImages
  * Enable AppArmor by default for a large number of programs
  * firejail --apparmor.print option
  * firemon --apparmor option
  * apparmor yes/no flag in /etc/firejail/firejail.config
  * seccomp syscall list update for glibc 2.26-10
  * seccomp disassembler for --seccomp.print option
  * seccomp machine code optimizer for default seccomp filters
  * IPv6 DNS support
  * whitelist support for overlay and chroot sandboxes
  * private-dev support for overlay and chroot sandboxes
  * private-tmp support for overlay and chroot sandboxes
  * added sandbox name support in firemon
  * firemon/prctl enhancements
  * noblacklist support for /sys/module directory
  * whitelist support for /sys/module directory
  * new profiles: basilisk, Tor Browser language packs, PlayOnLinux, sylpheed,
  * new profiles: discord-canary, pycharm-community, pycharm-professional,
  * new profiles: pdfchain, tilp, vivaldi-snapshot, bitcoin-qt, kaffeine,
  * new profiles: falkon, gnome-builder, asunder, VS Code, gnome-recipes,
  * new profiles: akonadi_controle, evince-previewer, evince-thumbnailer,
  * new profiles: blender-2.8, thunderbird-beta, ncdu, gnome-logs, gcloud,
  * new profiles: musixmatch, gunzip, bunzip2, enchant-lsmod, enchant-lsmod-2,
  * new profiles: enchant, enchant-2, Discord, acat, adiff, als, apack,
  * new profiles: arepack, aunpack profiles, ppsspp, scallion, clion,
  * new profiles: baloo_filemetadata_temp_extractor, AnyDesk, webstorm, xmind,
  * new profiles: qmmp, sayonara</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1536580800">- Remove the rpmlintrc file since the warnings are no longer relevant.</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1536667200">- Drop ldconfig calls since firejail libraries are installed in their
  own subdirectory which is not scanned by ldconfig.</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1537617600">- update to version 0.9.56:
  * modif: removed CFG_CHROOT_DESKTOP configuration option
  * modif: removed compile time --enable-network=restricted
  * modif: removed compile time --disable-bind
  * modif: --net=none allowed even if networking was disabled at compile
    time or at run time
  * modif: allow system users to run the sandbox
  * support wireless devices in --net option
  * support tap devices in --net option (tunneling support)
  * allow IP address configuration if the parent interface specified
    by --net is not configured (--netmask)
  * support for firetunnel utility
  * disable U2F devices (--nou2f)
  * add --private-cache to support private ~/.cache
  * support full paths in private-lib
  * globbing support in private-lib
  * support for local user directories in firecfg (--bindir)
  * new profiles: ms-excel, ms-office, ms-onenote, ms-outlook, ms-powerpoint,
  * new profiles: ms-skype, ms-word, riot-desktop, gnome-mpv, snox, gradio,
  * new profiles: standardnotes-desktop, shellcheck, patch, flameshot,
  * new profiles: rview, rvim, vimcat, vimdiff, vimpager, vimtutor, xxd,
  * new profiles: Beaker, electrum, clamtk, pybitmessage, dig, whois,
  * new profiles: jdownloader, Fluxbox, Blackbox, Awesome, i3
  * new profiles: start-tor-browser.desktop</changelog>
  <changelog author="info@paolostivanin.com" date="1549022400">-  update to version 0.9.58:
  * --disable-mnt rework
  * --net.print command
  * GitLab CI/CD integration: disto specific builds
  * profile parser enhancements and conditional handling support
    for HAS_APPIMAGE, HAS_NODBUS, BROWSER_DISABLE_U2F
  * profile name support
  * added explicit nonewprivs support to join option
  * new profiles: QMediathekView, aria2c, Authenticator, checkbashisms
  * new profiles: devilspie, devilspie2, easystroke, github-desktop, min
  * new profiles: bsdcat, bsdcpio, bsdtar, lzmadec, lbunzip2, lbzcat
  * new profiles: lbzip2, lzcat, lzcmp, lzdiff, lzegrep, lzfgrep, lzgrep
  * new profiles: lzless, lzma, lzmainfo, lzmore, unlzma, unxz, xzcat
  * new profiles: xzcmp, xzdiff, xzegrep, xzfgrep, xzgrep, xzless, xzmore
  * new profiles: lzip, artha, nitroshare, nitroshare-cli, nitroshare-nmh
  * new profiles: nirtoshare-send, nitroshare-ui, mencoder, gnome-pie
  * new profiles: masterpdfeditor, QOwnNotes, aisleriot, Mendeley
  * new profiles: feedreader, ocenaudio, mpsyt, thunderbird-wayland
  * new profiles: supertuxkart, ghostwriter, gajim-history-manager
  * bugfixes</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1559476800">- update to version 0.9.60:
  * security bug reported by Austin Morton:
  Seccomp filters are copied into /run/firejail/mnt, and are writable
  within the jail. A malicious process can modify files from inside the
  jail. Processes that are later joined to the jail will not have seccomp
  filters applied.
  CVE-2019-12589
  boo#1137139
  * memory-deny-write-execute now also blocks memfd_create
  * add private-cwd option to control working directory within jail
  * blocking system D-Bus socket with --nodbus
  * bringing back Centos 6 support
  * drop support for flatpak/snap packages
  * new profiles: crow, nyx, mypaint, celluoid, nano, transgui, mpdris2
  * new profiles: sysprof, simplescreenrecorder, geekbench, xfce4-mixer
  * new profiles: pavucontrol, d-feet, seahorse, secret-tool, gnome-keyring
  * new profiles: regextester, hardinfo, gnome-system-log, gnome-nettool
  * new profiles: netactview, redshift, devhelp, assogiate, subdownloader
  * new profiles: font-manager, exfalso, gconf-editor, dconf-editor
  * new profiles: sysprof-cli, seahorse-tool, secret-tool, dconf, gsettings
  * new profiles: code-oss, pragha, Maelstrom, ostrichriders, bzflag
  * new profiles: freeciv, lincity-ng, megaglest, openttd, crawl, crawl-tiles
  * new profiles: teeworlds, torcs, tremulous, warsow, lugaru, manaplus
  * new profiles: pioneer, scorched3d, widelands, freemind, kid3, kid3-qt
  * new profiles: kid3-cli, nomacs, freecol, opencity, openclonk, slashem
  * new profiles: vultureseye, vulturesclaw, anki, cheese, utox, mp3splt
  * new profiles: oggsplt, flacsplt, gramps, newsboat, freeoffice-planmaker
  * new profiles: autokey-gtk, autokey-qt, autokey-run, autokey-shell
  * new profiles: freeoffice-presentations, freeoffice-textmaker, mp3wrap
  * new profiles: inkview, meteo-qt, mp3splt-gtk, ktouch, yelp, cantata</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1581422400">- update to version 0.9.62
  * added file-copy-limit in /etc/firejail/firejail.config
  * profile templates (/usr/share/doc/firejail)
  * allow-debuggers support in profiles
  * several seccomp enhancements
  * compiler flags autodetection
  * move chroot entirely from path based to file descriptor based mounts
  * whitelisting /usr/share in a large number of profiles
  * new scripts in conrib: gdb-firejail.sh and sort.py
  * enhancement: whitelist /usr/share in some profiles
  * added signal mediation to apparmor profile
  * new conditions: HAS_X11, HAS_NET
  * new profiles: qgis, klatexformula, klatexformula_cmdl, links, xlinks
  * new profiles: pandoc, teams-for-linux, OpenArena, gnome-sound-recorder
  * new profiles: godot, tcpdump, tshark, newsbeuter, keepassxc-cli
  * new profiles: keepassxc-proxy, rhythmbox-client, jerry, zeal, mpg123
  * new profiles: conplay, mpg123.bin, mpg123-alsa, mpg123-id3dump, out123
  * new profiles: mpg123-jack, mpg123-nas, mpg123-openal, mpg123-oss
  * new profiles: mpg123-portaudio, mpg123-pulse, mpg123-strip, pavucontrol-qt
  * new profiles: gnome-characters, gnome-character-map, rsync, Whalebird,
  * new profiles: tor-browser (AUR), Zulip, tb-starter-wrapper, bzcat,
  * new profiles: kiwix-desktop, bzcat, zstd, pzstd, zstdcat, zstdgrep, zstdless
  * new profiles: zstdmt, unzstd, i2p, ar, gnome-latex, pngquant, kalgebra
  * new profiles: kalgebramobile, signal-cli, amuled, kfind, profanity
  * new profiles: audio-recorder, cameramonitor, ddgtk, drawio, unf, gmpc
  * new profiles: electron-mail, gist, gist-paste</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1588161600">- Add firejail-0.9.62-fix-usr-etc.patch:
  Check /usr/etc not just /etc
- Replace python interpreter line in sort.py</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1596888000">- Add patches fix-CVE-2020-17367.patch and fix-CVE-2020-17368.patch to fix CVE-2020-17367 and CVE-2020-17368 and boo#1174986</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1597320000">- Update to 0.9.62.2
  * fix CVE-2020-17367
  * fix CVE-2020-17368
  * additional hardening and bug fixes
- Remove fix-CVE-2020-17368.patch
- Remove fix-CVE-2020-17367.patch</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1597838400">- Update to 0.9.62.4
  * fix AppArmor broken in the previous release
  * miscellaneous fixes</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1603713600">- Add firejail-apparmor-3.0.diff to make the AppArmor profile compatible with
  AppArmor 3.0 (add missing include &lt;tunables/global&gt;)</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1604232000">- Update to version 0.9.64:
  * replaced --nowrap option with --wrap in firemon
  * The blocking action of seccomp filters has been changed from
    killing the process to returning EPERM to the caller. To get the
    previous behaviour, use --seccomp-error-action=kill or
    syscall:kill syntax when constructing filters, or override in
    /etc/firejail/firejail.config file.
  * Fine-grained D-Bus sandboxing with xdg-dbus-proxy.
    xdg-dbus-proxy must be installed, if not D-Bus access will be allowed.
    With this version nodbus is deprecated, in favor of dbus-user none and
    dbus-system none and will be removed in a future version.
  * DHCP client support
  * firecfg only fix dektop-files if started with sudo
  * SELinux labeling support
  * custom 32-bit seccomp filter support
  * restrict ${RUNUSER} in several profiles
  * blacklist shells such as bash in several profiles
  * whitelist globbing
  * mkdir and mkfile support for /run/user directory
  * support ignore for include
  * --include on the command line
  * splitting up media players whitelists in whitelist-players.inc
  * new condition: HAS_NOSOUND
  * new profiles: gfeeds, firefox-x11, tvbrowser, rtv, clipgrab, muraster
  * new profiles: gnome-passwordsafe, bibtex, gummi, latex, mupdf-x11-curl
  * new profiles: pdflatex, tex, wpp, wpspdf, wps, et, multimc, mupdf-x11
  * new profiles: gnome-hexgl, com.github.johnfactotum.Foliate, mupdf-gl, mutool
  * new profiles: desktopeditors, impressive, planmaker18, planmaker18free
  * new profiles: presentations18, presentations18free, textmaker18, teams
  * new profiles: textmaker18free, xournal, gnome-screenshot, ripperX
  * new profiles: sound-juicer, com.github.dahenson.agenda, gnome-pomodoro
  * new profiles: gnome-todo, x2goclient, iagno, kmplayer, penguin-command
  * new profiles: frogatto, gnome-mines, gnome-nibbles, lightsoff, warmux
  * new profiles: ts3client_runscript.sh, ferdi, abiword, four-in-a-row
  * new profiles: gnome-mahjongg, gnome-robots, gnome-sudoku, gnome-taquin
  * new profiles: gnome-tetravex, blobwars, gravity-beams-and-evaporating-stars
  * new profiles: hyperrogue, jumpnbump-menu, jumpnbump, magicor, mindless
  * new profiles: mirrormagic, mrrescue, scorched3d-wrapper, scorchwentbonkers
  * new profiles: seahorse-adventures, wordwarvi, xbill, gnome-klotski
  * new profiles: swell-foop, fdns, five-or-more, steam-runtime
  * new profiles: nicotine, plv, mocp, apostrophe, quadrapassel, dino-im
  * new profiles: hitori, bijiben, gnote, gnubik, ZeGrapher, xonotic-sdl-wrapper
  * new profiles: gapplication, openarena_ded, element-desktop, cawbird
  * new profiles: freetube, strawberry, jitsi-meet-desktop
  * new profiles: homebank, mattermost-desktop, newsflash, com.gitlab.newsflash
  * new profiles: sushi, xfce4-screenshooter, org.gnome.NautilusPreviewer, lyx
  * new profiles: minitube, nuclear, mtpaint, minecraft-launcher, gnome-calendar
  * new profiles: vmware, git-cola, otter-browser, kazam, menulibre, musictube
  * new profiles: onboard, fractal, mirage, quaternion, spectral, man, psi
  * new profiles: smuxi-frontend-gnome, balsa, kube, trojita, youtube
  * new profiles: youtubemusic-nativefier, cola, dbus-send, notify-send
  * new profiles: qrencode, ytmdesktop, twitch
  * new profiles: xournalpp, chromium-freeworld, equalx
- remove firejail-0.9.62-fix-usr-etc.patch, included upstream
- remove firejail-apparmor-3.0.diff, included upstream</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1604318400">- packaging fixes</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1611835200">- Update to 0.9.64.2:
  * allow --tmpfs inside $HOME for unprivileged users
  * --disable-usertmpfs compile time option
  * allow AF_BLUETOOTH via --protocol=bluetooth
  * setup guide for new users: contrib/firejail-welcome.sh
  * implement netns in profiles
  * added nolocal6.net IPv6 network filter
  * new profiles: spectacle, chromium-browser-privacy,
    gtk-straw-viewer, gtk-youtube-viewer, gtk2-youtube-viewer,
    gtk3-youtube-viewer, straw-viewer, lutris, dolphin-emu,
    authenticator-rs, servo, npm, marker, yarn, lsar, unar, agetpkg,
    mdr, shotwell, qnapi, new profiles: guvcview, pkglog, kdiff3, CoyIM.</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1612699200">- Update to 0.9.64.4:
  * disabled overlayfs, pending multiple fixes
  * fixed launch firefox for open url in telegram-desktop.profile</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- firejail 0.9.66:
  * deprecated --audit options, relpaced by jailcheck utility
  * deprecated follow-symlink-as-user from firejail.config
  * new firejail.config settings: private-bin, private-etc
  * new firejail.config settings: private-opt, private-srv
  * new firejail.config settings: whitelist-disable-topdir
  * new firejail.config settings: seccomp-filter-add
  * removed kcmp syscall from seccomp default filter
  * rename --noautopulse to keep-config-pulse
  * filtering environment variables
  * zsh completion
  * command line: --mkdir, --mkfile
  * --protocol now accumulates
  * jailtest utility for testing running sandboxes
  * faccessat2 syscall support
  * --private-dev keeps /dev/input
  * added --noinput to disable /dev/input
  * add support for subdirs in --private-etc
  * subdirs support in private-etc
  * input devices support in private-dev, --no-input
  * support trailing comments on profile lines
  * many new profiles
- split shell completion into standard subpackages</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1644148800">- update to firejail 0.9.68:
  - security: on Ubuntu, the PPA is now recommended over the distro package
  - (see README.md) (#4748)
  - security: bugfix: private-cwd leaks access to the entire filesystem
  - (#4780); reported by Hugo Osvaldo Barrera
  - feature: remove (some) environment variables with auth-tokens (#4157)
  - feature: ALLOW_TRAY condition (#4510 #4599)
  - feature: add basic Firejail support to AppArmor base abstraction (#3226
  - #4628)
  - feature: intrusion detection system (--ids-init, --ids-check)
  - feature: deterministic shutdown command (--deterministic-exit-code,
  - --deterministic-shutdown) (#928 #3042 #4635)
  - feature: noprinters command (#4607 #4827)
  - feature: network monitor (--nettrace)
  - feature: network locker (--netlock) (#4848)
  - feature: whitelist-ro profile command (#4740)
  - feature: disable pipewire with --nosound (#4855)
  - feature: Unset TMP if it doesn't exist inside of sandbox (#4151)
  - feature: Allow apostrophe in whitelist and blacklist (#4614)
  - feature: AppImage support in --build command (#4878)
  - modifs: exit code: distinguish fatal signals by adding 128 (#4533)
  - modifs: firecfg.config is now installed to /etc/firejail/ (#408 #4669)
  - modifs: close file descriptors greater than 2 (--keep-fd) (#4845)
  - modifs: nogroups now stopped causing certain system groups to be dropped,
  - which are now controlled by the relevant "no" options instead (such as
  - nosound -&gt; drop audio group), which fixes device access issues on systems
  - not using (e)logind (such as with seatd) (#4632 #4725 #4732 #4851)
  - removal: --disable-whitelist at compile time
  - removal: whitelist=yes/no in /etc/firejail/firejail.config
  - bugfix: Fix sndio support (#4362 #4365)
  - bugfix: Error mounting tmpfs (MS_REMOUNT flag not being cleared) (#4387)
  - bugfix: --build clears the environment (#4460 #4467)
  - bugfix: firejail hangs with net parameter (#3958 #4476)
  - bugfix: Firejail does not work with a custom hosts file (#2758 #4560)
  - bugfix: --tracelog and --trace override /etc/ld.so.preload (#4558 #4586)
  - bugfix: PATH_MAX is undeclared on musl libc (#4578 #4579 #4583 #4606)
  - bugfix: firejail symlinks are not skipped with private-bin + globs (#4626)
  - bugfix: Firejail rejects empty arguments (#4395)
  - bugfix: firecfg does not work with symlinks (discord.desktop) (#4235)
  - bugfix: Seccomp list output goes to stdout instead of stderr (#4328)
  - bugfix: private-etc does not work with symlinks (#4887)
  - bugfix: Hardware key not detected on keepassxc (#4883)
  - build: allow building with address sanitizer (#4594)
  - build: Stop linking pthread (#4695)
  - build: Configure cleanup and improvements (#4712)
  - ci: add profile checks for sorting disable-programs.inc and
  - firecfg.config and for the required arguments in private-etc (#2739 #4643)
  - ci: pin GitHub actions to SHAs and use Dependabot to update them (#4774)
  - docs: Add new command checklist to CONTRIBUTING.md (#4413)
  - docs: Rework bug report issue template and add both a question and a
  - feature request template (#4479 #4515 #4561)
  - docs: fix contradictory descriptions of machine-id ("preserves" vs
  - "spoofs") (#4689)
  - docs: Document that private-bin and private-etc always accumulate (#4078)
  - new includes: whitelist-run-common.inc (#4288), disable-X11.inc (#4462)
  - new includes: disable-proc.inc (#4521)
  - removed includes: disable-passwordmgr.inc (#4454 #4461)
  - new profiles: microsoft-edge-beta, clion-eap, lifeograph, zim
  - new profiles: io.github.lainsce.Notejot, rednotebook, gallery-dl
  - new profiles: yt-dlp, goldendict, goldendict, bundle, cmake
  - new profiles: make, meson, pip, codium, telnet, ftp, OpenStego
  - new profiles: imv, retroarch, torbrowser, CachyBrowser,
  - new profiles: notable, RPCS3, wget2, raincat, conitop, 1passwd,
  - new profiles: Seafile, neovim, com.github.tchx84.Flatseal</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1655208000">- update to version 0.9.70:
  - fix bsc#1199148 CVE-2022-31214
  - security: CVE-2022-31214 - root escalation in --join logic
  - Reported by Matthias Gerstner, working exploit code was provided to our
  - development team. In the same time frame, the problem was independently
  - reported by Birk Blechschmidt. Full working exploit code was also provided.
  - feature: enable shell tab completion with --tab (#4936)
  - feature: disable user profiles at compile time (#4990)
  - feature: Allow resolution of .local names with avahi-daemon in the apparmor
  - profile (#5088)
  - feature: always log seccomp errors (#5110)
  - feature: firecfg --guide, guided user configuration (#5111)
  - feature: --oom, kernel OutOfMemory-killer (#5122)
  - modif: --ids feature needs to be enabled at compile time (#5155)
  - modif: --nettrace only available to root user
  - rework: whitelist restructuring (#4985)
  - rework: firemon, speed up and lots of fixes
  - bugfix: --private-cwd not expanding macros, broken hyperrogue (#4910)
  - bugfix: nogroups + wrc prints confusing messages (#4930 #4933)
  - bugfix: openSUSE Leap - whitelist-run-common.inc (#4954)
  - bugfix: fix printing in evince (#5011)
  - bugfix: gcov: fix gcov functions always declared as dummy (#5028)
  - bugfix: Stop warning on safe supplementary group clean (#5114)
  - build: remove ultimately unused INSTALL and RANLIB check macros (#5133)
  - build: mkdeb.sh.in: pass remaining arguments to ./configure (#5154)
  - ci: replace centos (EOL) with almalinux (#4912)
  - ci: fix --version not printing compile-time features (#5147)
  - ci: print version after install &amp; fix apparmor support on build_apparmor
  - (#5148)
  - docs: Refer to firejail.config in configuration files (#4916)
  - docs: firejail.config: add warning about allow-tray (#4946)
  - docs: mention that the protocol command accumulates (#5043)
  - docs: mention inconsistent homedir bug involving --private=dir (#5052)
  - docs: mention capabilities(7) on --caps (#5078)
  - new profiles: onionshare, onionshare-cli, opera-developer, songrec
  - new profiles: node-gyp, npx, semver, ping-hardened
  - removed profiles: nvm</changelog>
</package>
<package pkgid="c1872b655c9faabb02983fd86baaab344219dfd715ef6b9f9dffe649f4c0838e" name="firejail" arch="x86_64">
  <version epoch="0" ver="0.9.70" rel="bp154.2.3.1"/>
  <changelog author="avindra@opensuse.org" date="1513166400">- Update to version 0.9.52:
  * New features
    + systemd-resolved integration
    + whitelisted /var in most profiles
    + GTK2, GTK3 and Qt4 private-lib support
    + --debug-private-lib
    + test deployment of private-lib for the some apps: evince,
    galculator, gnome-calculator, leafpad, mousepad,
    transmission-gtk, xcalc, xmr-stak-cpu, atril,
    mate-color-select, tar, file, strings, gpicview, eom, eog,
    gedit, pluma
    + netfilter template support
    + various new arguments
  * --writable-run-user
  * --rlimit-as
  * --rlimit-cpu
  * --timeout
  * --build (profile build tool)
  * --netfilter.print
  * --netfilter6.print
  * deprecations in modif
    + --allow-private-blacklists (blacklisting, read-only,
    read-write, tmpfs and noexec are allowed in private home
    directories
    + remount-proc-sys (firejail.config)
    + follow-symlink-private-bin (firejail.config)
    + --profile-path
  * enhancements
    + support Firejail user config directory in firecfg
    + disable DBus activation in firecfg
    + enumerate root directories in apparmor profile
    + /etc and /usr/share whitelisting support
    + globbing support for --private-bin
  * new profiles: upstreamed profiles from 3 sources:
    + https://github.com/chiraag-nataraj/firejail-profiles
    + https://github.com/nyancat18/fe
    + https://aur.archlinux.org/packages/firejail-profiles
  * new profiles: terasology, surf, rocketchat, clamscan, clamdscan,
    clamdtop, freshclam, xmr-stak-cpu, amule, ardour4, ardour5,
    brackets, calligra, calligraauthor, calligraconverter,
    calligraflow, calligraplan, calligraplanwork, calligrasheets,
    calligrastage, calligrawords, cin, dooble, dooble-qt4,
    fetchmail, freecad, freecadcmd, google-earth,imagej, karbon,
    1kdenlive, krita, linphone, lmms, macrofusion, mpd, natron,
    Natron, ricochet, shotcut, teamspeak3, tor, tor-browser-en,
    Viber, x-terminal-emulator, zart, conky, arch-audit, ffmpeg,
    bluefish, cinelerra, openshot-qt, pinta, uefitool, aosp,
    pdfmod, gnome-ring, xcalc, zaproxy, kopete, cliqz,
    signal-desktop, kget, nheko, Enpass, kwin_x11, krunner, ping,
    bsdtar, makepkg (Arch), archaudit-report cower (Arch), kdeinit4
- Add full link to source tarball from sourceforge
- Add asc file</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1535025600">- Changed the permissions of the firejail executable to 4750.
  Setuid mode is used, but only allowed for users in the newly
  created group 'firejail' (boo#1059013).
- Update to version 0.9.54:
  * modif: --force removed
  * modif: --csh, --zsh removed
  * modif: --debug-check-filename removed
  * modif: --git-install and --git-uninstall removed
  * modif: support for private-bin, private-lib and shell none has been
    disabled while running AppImage archives in order to be able to use
    our regular profile files with AppImages.
  * modif: restrictions for /proc, /sys and /run/user directories
    are moved from AppArmor profile into firejail executable
  * modif: unifying Chromium and Firefox browsers profiles.
    All users of Firefox-based browsers who use addons and plugins
    that read/write from ${HOME} will need to uncomment the includes for
    firefox-common-addons.inc in firefox-common.profile.
  * modif: split disable-devel.inc into disable-devel and
    disable-interpreters.inc
  * Firejail user access database (/etc/firejail/firejail.users,
    man firejail-users)
  * add --noautopulse to disable automatic ~/.config/pulse (for complex setups)
  * Spectre mitigation patch for gcc and clang compiler
  * D-Bus handling (--nodbus)
  * AppArmor support for overlayfs and chroot sandboxes
  * AppArmor support for AppImages
  * Enable AppArmor by default for a large number of programs
  * firejail --apparmor.print option
  * firemon --apparmor option
  * apparmor yes/no flag in /etc/firejail/firejail.config
  * seccomp syscall list update for glibc 2.26-10
  * seccomp disassembler for --seccomp.print option
  * seccomp machine code optimizer for default seccomp filters
  * IPv6 DNS support
  * whitelist support for overlay and chroot sandboxes
  * private-dev support for overlay and chroot sandboxes
  * private-tmp support for overlay and chroot sandboxes
  * added sandbox name support in firemon
  * firemon/prctl enhancements
  * noblacklist support for /sys/module directory
  * whitelist support for /sys/module directory
  * new profiles: basilisk, Tor Browser language packs, PlayOnLinux, sylpheed,
  * new profiles: discord-canary, pycharm-community, pycharm-professional,
  * new profiles: pdfchain, tilp, vivaldi-snapshot, bitcoin-qt, kaffeine,
  * new profiles: falkon, gnome-builder, asunder, VS Code, gnome-recipes,
  * new profiles: akonadi_controle, evince-previewer, evince-thumbnailer,
  * new profiles: blender-2.8, thunderbird-beta, ncdu, gnome-logs, gcloud,
  * new profiles: musixmatch, gunzip, bunzip2, enchant-lsmod, enchant-lsmod-2,
  * new profiles: enchant, enchant-2, Discord, acat, adiff, als, apack,
  * new profiles: arepack, aunpack profiles, ppsspp, scallion, clion,
  * new profiles: baloo_filemetadata_temp_extractor, AnyDesk, webstorm, xmind,
  * new profiles: qmmp, sayonara</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1536580800">- Remove the rpmlintrc file since the warnings are no longer relevant.</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1536667200">- Drop ldconfig calls since firejail libraries are installed in their
  own subdirectory which is not scanned by ldconfig.</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1537617600">- update to version 0.9.56:
  * modif: removed CFG_CHROOT_DESKTOP configuration option
  * modif: removed compile time --enable-network=restricted
  * modif: removed compile time --disable-bind
  * modif: --net=none allowed even if networking was disabled at compile
    time or at run time
  * modif: allow system users to run the sandbox
  * support wireless devices in --net option
  * support tap devices in --net option (tunneling support)
  * allow IP address configuration if the parent interface specified
    by --net is not configured (--netmask)
  * support for firetunnel utility
  * disable U2F devices (--nou2f)
  * add --private-cache to support private ~/.cache
  * support full paths in private-lib
  * globbing support in private-lib
  * support for local user directories in firecfg (--bindir)
  * new profiles: ms-excel, ms-office, ms-onenote, ms-outlook, ms-powerpoint,
  * new profiles: ms-skype, ms-word, riot-desktop, gnome-mpv, snox, gradio,
  * new profiles: standardnotes-desktop, shellcheck, patch, flameshot,
  * new profiles: rview, rvim, vimcat, vimdiff, vimpager, vimtutor, xxd,
  * new profiles: Beaker, electrum, clamtk, pybitmessage, dig, whois,
  * new profiles: jdownloader, Fluxbox, Blackbox, Awesome, i3
  * new profiles: start-tor-browser.desktop</changelog>
  <changelog author="info@paolostivanin.com" date="1549022400">-  update to version 0.9.58:
  * --disable-mnt rework
  * --net.print command
  * GitLab CI/CD integration: disto specific builds
  * profile parser enhancements and conditional handling support
    for HAS_APPIMAGE, HAS_NODBUS, BROWSER_DISABLE_U2F
  * profile name support
  * added explicit nonewprivs support to join option
  * new profiles: QMediathekView, aria2c, Authenticator, checkbashisms
  * new profiles: devilspie, devilspie2, easystroke, github-desktop, min
  * new profiles: bsdcat, bsdcpio, bsdtar, lzmadec, lbunzip2, lbzcat
  * new profiles: lbzip2, lzcat, lzcmp, lzdiff, lzegrep, lzfgrep, lzgrep
  * new profiles: lzless, lzma, lzmainfo, lzmore, unlzma, unxz, xzcat
  * new profiles: xzcmp, xzdiff, xzegrep, xzfgrep, xzgrep, xzless, xzmore
  * new profiles: lzip, artha, nitroshare, nitroshare-cli, nitroshare-nmh
  * new profiles: nirtoshare-send, nitroshare-ui, mencoder, gnome-pie
  * new profiles: masterpdfeditor, QOwnNotes, aisleriot, Mendeley
  * new profiles: feedreader, ocenaudio, mpsyt, thunderbird-wayland
  * new profiles: supertuxkart, ghostwriter, gajim-history-manager
  * bugfixes</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1559476800">- update to version 0.9.60:
  * security bug reported by Austin Morton:
  Seccomp filters are copied into /run/firejail/mnt, and are writable
  within the jail. A malicious process can modify files from inside the
  jail. Processes that are later joined to the jail will not have seccomp
  filters applied.
  CVE-2019-12589
  boo#1137139
  * memory-deny-write-execute now also blocks memfd_create
  * add private-cwd option to control working directory within jail
  * blocking system D-Bus socket with --nodbus
  * bringing back Centos 6 support
  * drop support for flatpak/snap packages
  * new profiles: crow, nyx, mypaint, celluoid, nano, transgui, mpdris2
  * new profiles: sysprof, simplescreenrecorder, geekbench, xfce4-mixer
  * new profiles: pavucontrol, d-feet, seahorse, secret-tool, gnome-keyring
  * new profiles: regextester, hardinfo, gnome-system-log, gnome-nettool
  * new profiles: netactview, redshift, devhelp, assogiate, subdownloader
  * new profiles: font-manager, exfalso, gconf-editor, dconf-editor
  * new profiles: sysprof-cli, seahorse-tool, secret-tool, dconf, gsettings
  * new profiles: code-oss, pragha, Maelstrom, ostrichriders, bzflag
  * new profiles: freeciv, lincity-ng, megaglest, openttd, crawl, crawl-tiles
  * new profiles: teeworlds, torcs, tremulous, warsow, lugaru, manaplus
  * new profiles: pioneer, scorched3d, widelands, freemind, kid3, kid3-qt
  * new profiles: kid3-cli, nomacs, freecol, opencity, openclonk, slashem
  * new profiles: vultureseye, vulturesclaw, anki, cheese, utox, mp3splt
  * new profiles: oggsplt, flacsplt, gramps, newsboat, freeoffice-planmaker
  * new profiles: autokey-gtk, autokey-qt, autokey-run, autokey-shell
  * new profiles: freeoffice-presentations, freeoffice-textmaker, mp3wrap
  * new profiles: inkview, meteo-qt, mp3splt-gtk, ktouch, yelp, cantata</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1581422400">- update to version 0.9.62
  * added file-copy-limit in /etc/firejail/firejail.config
  * profile templates (/usr/share/doc/firejail)
  * allow-debuggers support in profiles
  * several seccomp enhancements
  * compiler flags autodetection
  * move chroot entirely from path based to file descriptor based mounts
  * whitelisting /usr/share in a large number of profiles
  * new scripts in conrib: gdb-firejail.sh and sort.py
  * enhancement: whitelist /usr/share in some profiles
  * added signal mediation to apparmor profile
  * new conditions: HAS_X11, HAS_NET
  * new profiles: qgis, klatexformula, klatexformula_cmdl, links, xlinks
  * new profiles: pandoc, teams-for-linux, OpenArena, gnome-sound-recorder
  * new profiles: godot, tcpdump, tshark, newsbeuter, keepassxc-cli
  * new profiles: keepassxc-proxy, rhythmbox-client, jerry, zeal, mpg123
  * new profiles: conplay, mpg123.bin, mpg123-alsa, mpg123-id3dump, out123
  * new profiles: mpg123-jack, mpg123-nas, mpg123-openal, mpg123-oss
  * new profiles: mpg123-portaudio, mpg123-pulse, mpg123-strip, pavucontrol-qt
  * new profiles: gnome-characters, gnome-character-map, rsync, Whalebird,
  * new profiles: tor-browser (AUR), Zulip, tb-starter-wrapper, bzcat,
  * new profiles: kiwix-desktop, bzcat, zstd, pzstd, zstdcat, zstdgrep, zstdless
  * new profiles: zstdmt, unzstd, i2p, ar, gnome-latex, pngquant, kalgebra
  * new profiles: kalgebramobile, signal-cli, amuled, kfind, profanity
  * new profiles: audio-recorder, cameramonitor, ddgtk, drawio, unf, gmpc
  * new profiles: electron-mail, gist, gist-paste</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1588161600">- Add firejail-0.9.62-fix-usr-etc.patch:
  Check /usr/etc not just /etc
- Replace python interpreter line in sort.py</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1596888000">- Add patches fix-CVE-2020-17367.patch and fix-CVE-2020-17368.patch to fix CVE-2020-17367 and CVE-2020-17368 and boo#1174986</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1597320000">- Update to 0.9.62.2
  * fix CVE-2020-17367
  * fix CVE-2020-17368
  * additional hardening and bug fixes
- Remove fix-CVE-2020-17368.patch
- Remove fix-CVE-2020-17367.patch</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1597838400">- Update to 0.9.62.4
  * fix AppArmor broken in the previous release
  * miscellaneous fixes</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1603713600">- Add firejail-apparmor-3.0.diff to make the AppArmor profile compatible with
  AppArmor 3.0 (add missing include &lt;tunables/global&gt;)</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1604232000">- Update to version 0.9.64:
  * replaced --nowrap option with --wrap in firemon
  * The blocking action of seccomp filters has been changed from
    killing the process to returning EPERM to the caller. To get the
    previous behaviour, use --seccomp-error-action=kill or
    syscall:kill syntax when constructing filters, or override in
    /etc/firejail/firejail.config file.
  * Fine-grained D-Bus sandboxing with xdg-dbus-proxy.
    xdg-dbus-proxy must be installed, if not D-Bus access will be allowed.
    With this version nodbus is deprecated, in favor of dbus-user none and
    dbus-system none and will be removed in a future version.
  * DHCP client support
  * firecfg only fix dektop-files if started with sudo
  * SELinux labeling support
  * custom 32-bit seccomp filter support
  * restrict ${RUNUSER} in several profiles
  * blacklist shells such as bash in several profiles
  * whitelist globbing
  * mkdir and mkfile support for /run/user directory
  * support ignore for include
  * --include on the command line
  * splitting up media players whitelists in whitelist-players.inc
  * new condition: HAS_NOSOUND
  * new profiles: gfeeds, firefox-x11, tvbrowser, rtv, clipgrab, muraster
  * new profiles: gnome-passwordsafe, bibtex, gummi, latex, mupdf-x11-curl
  * new profiles: pdflatex, tex, wpp, wpspdf, wps, et, multimc, mupdf-x11
  * new profiles: gnome-hexgl, com.github.johnfactotum.Foliate, mupdf-gl, mutool
  * new profiles: desktopeditors, impressive, planmaker18, planmaker18free
  * new profiles: presentations18, presentations18free, textmaker18, teams
  * new profiles: textmaker18free, xournal, gnome-screenshot, ripperX
  * new profiles: sound-juicer, com.github.dahenson.agenda, gnome-pomodoro
  * new profiles: gnome-todo, x2goclient, iagno, kmplayer, penguin-command
  * new profiles: frogatto, gnome-mines, gnome-nibbles, lightsoff, warmux
  * new profiles: ts3client_runscript.sh, ferdi, abiword, four-in-a-row
  * new profiles: gnome-mahjongg, gnome-robots, gnome-sudoku, gnome-taquin
  * new profiles: gnome-tetravex, blobwars, gravity-beams-and-evaporating-stars
  * new profiles: hyperrogue, jumpnbump-menu, jumpnbump, magicor, mindless
  * new profiles: mirrormagic, mrrescue, scorched3d-wrapper, scorchwentbonkers
  * new profiles: seahorse-adventures, wordwarvi, xbill, gnome-klotski
  * new profiles: swell-foop, fdns, five-or-more, steam-runtime
  * new profiles: nicotine, plv, mocp, apostrophe, quadrapassel, dino-im
  * new profiles: hitori, bijiben, gnote, gnubik, ZeGrapher, xonotic-sdl-wrapper
  * new profiles: gapplication, openarena_ded, element-desktop, cawbird
  * new profiles: freetube, strawberry, jitsi-meet-desktop
  * new profiles: homebank, mattermost-desktop, newsflash, com.gitlab.newsflash
  * new profiles: sushi, xfce4-screenshooter, org.gnome.NautilusPreviewer, lyx
  * new profiles: minitube, nuclear, mtpaint, minecraft-launcher, gnome-calendar
  * new profiles: vmware, git-cola, otter-browser, kazam, menulibre, musictube
  * new profiles: onboard, fractal, mirage, quaternion, spectral, man, psi
  * new profiles: smuxi-frontend-gnome, balsa, kube, trojita, youtube
  * new profiles: youtubemusic-nativefier, cola, dbus-send, notify-send
  * new profiles: qrencode, ytmdesktop, twitch
  * new profiles: xournalpp, chromium-freeworld, equalx
- remove firejail-0.9.62-fix-usr-etc.patch, included upstream
- remove firejail-apparmor-3.0.diff, included upstream</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1604318400">- packaging fixes</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1611835200">- Update to 0.9.64.2:
  * allow --tmpfs inside $HOME for unprivileged users
  * --disable-usertmpfs compile time option
  * allow AF_BLUETOOTH via --protocol=bluetooth
  * setup guide for new users: contrib/firejail-welcome.sh
  * implement netns in profiles
  * added nolocal6.net IPv6 network filter
  * new profiles: spectacle, chromium-browser-privacy,
    gtk-straw-viewer, gtk-youtube-viewer, gtk2-youtube-viewer,
    gtk3-youtube-viewer, straw-viewer, lutris, dolphin-emu,
    authenticator-rs, servo, npm, marker, yarn, lsar, unar, agetpkg,
    mdr, shotwell, qnapi, new profiles: guvcview, pkglog, kdiff3, CoyIM.</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1612699200">- Update to 0.9.64.4:
  * disabled overlayfs, pending multiple fixes
  * fixed launch firefox for open url in telegram-desktop.profile</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- firejail 0.9.66:
  * deprecated --audit options, relpaced by jailcheck utility
  * deprecated follow-symlink-as-user from firejail.config
  * new firejail.config settings: private-bin, private-etc
  * new firejail.config settings: private-opt, private-srv
  * new firejail.config settings: whitelist-disable-topdir
  * new firejail.config settings: seccomp-filter-add
  * removed kcmp syscall from seccomp default filter
  * rename --noautopulse to keep-config-pulse
  * filtering environment variables
  * zsh completion
  * command line: --mkdir, --mkfile
  * --protocol now accumulates
  * jailtest utility for testing running sandboxes
  * faccessat2 syscall support
  * --private-dev keeps /dev/input
  * added --noinput to disable /dev/input
  * add support for subdirs in --private-etc
  * subdirs support in private-etc
  * input devices support in private-dev, --no-input
  * support trailing comments on profile lines
  * many new profiles
- split shell completion into standard subpackages</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1644148800">- update to firejail 0.9.68:
  - security: on Ubuntu, the PPA is now recommended over the distro package
  - (see README.md) (#4748)
  - security: bugfix: private-cwd leaks access to the entire filesystem
  - (#4780); reported by Hugo Osvaldo Barrera
  - feature: remove (some) environment variables with auth-tokens (#4157)
  - feature: ALLOW_TRAY condition (#4510 #4599)
  - feature: add basic Firejail support to AppArmor base abstraction (#3226
  - #4628)
  - feature: intrusion detection system (--ids-init, --ids-check)
  - feature: deterministic shutdown command (--deterministic-exit-code,
  - --deterministic-shutdown) (#928 #3042 #4635)
  - feature: noprinters command (#4607 #4827)
  - feature: network monitor (--nettrace)
  - feature: network locker (--netlock) (#4848)
  - feature: whitelist-ro profile command (#4740)
  - feature: disable pipewire with --nosound (#4855)
  - feature: Unset TMP if it doesn't exist inside of sandbox (#4151)
  - feature: Allow apostrophe in whitelist and blacklist (#4614)
  - feature: AppImage support in --build command (#4878)
  - modifs: exit code: distinguish fatal signals by adding 128 (#4533)
  - modifs: firecfg.config is now installed to /etc/firejail/ (#408 #4669)
  - modifs: close file descriptors greater than 2 (--keep-fd) (#4845)
  - modifs: nogroups now stopped causing certain system groups to be dropped,
  - which are now controlled by the relevant "no" options instead (such as
  - nosound -&gt; drop audio group), which fixes device access issues on systems
  - not using (e)logind (such as with seatd) (#4632 #4725 #4732 #4851)
  - removal: --disable-whitelist at compile time
  - removal: whitelist=yes/no in /etc/firejail/firejail.config
  - bugfix: Fix sndio support (#4362 #4365)
  - bugfix: Error mounting tmpfs (MS_REMOUNT flag not being cleared) (#4387)
  - bugfix: --build clears the environment (#4460 #4467)
  - bugfix: firejail hangs with net parameter (#3958 #4476)
  - bugfix: Firejail does not work with a custom hosts file (#2758 #4560)
  - bugfix: --tracelog and --trace override /etc/ld.so.preload (#4558 #4586)
  - bugfix: PATH_MAX is undeclared on musl libc (#4578 #4579 #4583 #4606)
  - bugfix: firejail symlinks are not skipped with private-bin + globs (#4626)
  - bugfix: Firejail rejects empty arguments (#4395)
  - bugfix: firecfg does not work with symlinks (discord.desktop) (#4235)
  - bugfix: Seccomp list output goes to stdout instead of stderr (#4328)
  - bugfix: private-etc does not work with symlinks (#4887)
  - bugfix: Hardware key not detected on keepassxc (#4883)
  - build: allow building with address sanitizer (#4594)
  - build: Stop linking pthread (#4695)
  - build: Configure cleanup and improvements (#4712)
  - ci: add profile checks for sorting disable-programs.inc and
  - firecfg.config and for the required arguments in private-etc (#2739 #4643)
  - ci: pin GitHub actions to SHAs and use Dependabot to update them (#4774)
  - docs: Add new command checklist to CONTRIBUTING.md (#4413)
  - docs: Rework bug report issue template and add both a question and a
  - feature request template (#4479 #4515 #4561)
  - docs: fix contradictory descriptions of machine-id ("preserves" vs
  - "spoofs") (#4689)
  - docs: Document that private-bin and private-etc always accumulate (#4078)
  - new includes: whitelist-run-common.inc (#4288), disable-X11.inc (#4462)
  - new includes: disable-proc.inc (#4521)
  - removed includes: disable-passwordmgr.inc (#4454 #4461)
  - new profiles: microsoft-edge-beta, clion-eap, lifeograph, zim
  - new profiles: io.github.lainsce.Notejot, rednotebook, gallery-dl
  - new profiles: yt-dlp, goldendict, goldendict, bundle, cmake
  - new profiles: make, meson, pip, codium, telnet, ftp, OpenStego
  - new profiles: imv, retroarch, torbrowser, CachyBrowser,
  - new profiles: notable, RPCS3, wget2, raincat, conitop, 1passwd,
  - new profiles: Seafile, neovim, com.github.tchx84.Flatseal</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1655208000">- update to version 0.9.70:
  - fix bsc#1199148 CVE-2022-31214
  - security: CVE-2022-31214 - root escalation in --join logic
  - Reported by Matthias Gerstner, working exploit code was provided to our
  - development team. In the same time frame, the problem was independently
  - reported by Birk Blechschmidt. Full working exploit code was also provided.
  - feature: enable shell tab completion with --tab (#4936)
  - feature: disable user profiles at compile time (#4990)
  - feature: Allow resolution of .local names with avahi-daemon in the apparmor
  - profile (#5088)
  - feature: always log seccomp errors (#5110)
  - feature: firecfg --guide, guided user configuration (#5111)
  - feature: --oom, kernel OutOfMemory-killer (#5122)
  - modif: --ids feature needs to be enabled at compile time (#5155)
  - modif: --nettrace only available to root user
  - rework: whitelist restructuring (#4985)
  - rework: firemon, speed up and lots of fixes
  - bugfix: --private-cwd not expanding macros, broken hyperrogue (#4910)
  - bugfix: nogroups + wrc prints confusing messages (#4930 #4933)
  - bugfix: openSUSE Leap - whitelist-run-common.inc (#4954)
  - bugfix: fix printing in evince (#5011)
  - bugfix: gcov: fix gcov functions always declared as dummy (#5028)
  - bugfix: Stop warning on safe supplementary group clean (#5114)
  - build: remove ultimately unused INSTALL and RANLIB check macros (#5133)
  - build: mkdeb.sh.in: pass remaining arguments to ./configure (#5154)
  - ci: replace centos (EOL) with almalinux (#4912)
  - ci: fix --version not printing compile-time features (#5147)
  - ci: print version after install &amp; fix apparmor support on build_apparmor
  - (#5148)
  - docs: Refer to firejail.config in configuration files (#4916)
  - docs: firejail.config: add warning about allow-tray (#4946)
  - docs: mention that the protocol command accumulates (#5043)
  - docs: mention inconsistent homedir bug involving --private=dir (#5052)
  - docs: mention capabilities(7) on --caps (#5078)
  - new profiles: onionshare, onionshare-cli, opera-developer, songrec
  - new profiles: node-gyp, npx, semver, ping-hardened
  - removed profiles: nvm</changelog>
</package>
<package pkgid="e4b6d27e4957a16f97bb9348d699c281fca854cd875166ddd1207b57837b274d" name="firejail-bash-completion" arch="aarch64">
  <version epoch="0" ver="0.9.70" rel="bp154.2.3.1"/>
  <changelog author="avindra@opensuse.org" date="1513166400">- Update to version 0.9.52:
  * New features
    + systemd-resolved integration
    + whitelisted /var in most profiles
    + GTK2, GTK3 and Qt4 private-lib support
    + --debug-private-lib
    + test deployment of private-lib for the some apps: evince,
    galculator, gnome-calculator, leafpad, mousepad,
    transmission-gtk, xcalc, xmr-stak-cpu, atril,
    mate-color-select, tar, file, strings, gpicview, eom, eog,
    gedit, pluma
    + netfilter template support
    + various new arguments
  * --writable-run-user
  * --rlimit-as
  * --rlimit-cpu
  * --timeout
  * --build (profile build tool)
  * --netfilter.print
  * --netfilter6.print
  * deprecations in modif
    + --allow-private-blacklists (blacklisting, read-only,
    read-write, tmpfs and noexec are allowed in private home
    directories
    + remount-proc-sys (firejail.config)
    + follow-symlink-private-bin (firejail.config)
    + --profile-path
  * enhancements
    + support Firejail user config directory in firecfg
    + disable DBus activation in firecfg
    + enumerate root directories in apparmor profile
    + /etc and /usr/share whitelisting support
    + globbing support for --private-bin
  * new profiles: upstreamed profiles from 3 sources:
    + https://github.com/chiraag-nataraj/firejail-profiles
    + https://github.com/nyancat18/fe
    + https://aur.archlinux.org/packages/firejail-profiles
  * new profiles: terasology, surf, rocketchat, clamscan, clamdscan,
    clamdtop, freshclam, xmr-stak-cpu, amule, ardour4, ardour5,
    brackets, calligra, calligraauthor, calligraconverter,
    calligraflow, calligraplan, calligraplanwork, calligrasheets,
    calligrastage, calligrawords, cin, dooble, dooble-qt4,
    fetchmail, freecad, freecadcmd, google-earth,imagej, karbon,
    1kdenlive, krita, linphone, lmms, macrofusion, mpd, natron,
    Natron, ricochet, shotcut, teamspeak3, tor, tor-browser-en,
    Viber, x-terminal-emulator, zart, conky, arch-audit, ffmpeg,
    bluefish, cinelerra, openshot-qt, pinta, uefitool, aosp,
    pdfmod, gnome-ring, xcalc, zaproxy, kopete, cliqz,
    signal-desktop, kget, nheko, Enpass, kwin_x11, krunner, ping,
    bsdtar, makepkg (Arch), archaudit-report cower (Arch), kdeinit4
- Add full link to source tarball from sourceforge
- Add asc file</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1535025600">- Changed the permissions of the firejail executable to 4750.
  Setuid mode is used, but only allowed for users in the newly
  created group 'firejail' (boo#1059013).
- Update to version 0.9.54:
  * modif: --force removed
  * modif: --csh, --zsh removed
  * modif: --debug-check-filename removed
  * modif: --git-install and --git-uninstall removed
  * modif: support for private-bin, private-lib and shell none has been
    disabled while running AppImage archives in order to be able to use
    our regular profile files with AppImages.
  * modif: restrictions for /proc, /sys and /run/user directories
    are moved from AppArmor profile into firejail executable
  * modif: unifying Chromium and Firefox browsers profiles.
    All users of Firefox-based browsers who use addons and plugins
    that read/write from ${HOME} will need to uncomment the includes for
    firefox-common-addons.inc in firefox-common.profile.
  * modif: split disable-devel.inc into disable-devel and
    disable-interpreters.inc
  * Firejail user access database (/etc/firejail/firejail.users,
    man firejail-users)
  * add --noautopulse to disable automatic ~/.config/pulse (for complex setups)
  * Spectre mitigation patch for gcc and clang compiler
  * D-Bus handling (--nodbus)
  * AppArmor support for overlayfs and chroot sandboxes
  * AppArmor support for AppImages
  * Enable AppArmor by default for a large number of programs
  * firejail --apparmor.print option
  * firemon --apparmor option
  * apparmor yes/no flag in /etc/firejail/firejail.config
  * seccomp syscall list update for glibc 2.26-10
  * seccomp disassembler for --seccomp.print option
  * seccomp machine code optimizer for default seccomp filters
  * IPv6 DNS support
  * whitelist support for overlay and chroot sandboxes
  * private-dev support for overlay and chroot sandboxes
  * private-tmp support for overlay and chroot sandboxes
  * added sandbox name support in firemon
  * firemon/prctl enhancements
  * noblacklist support for /sys/module directory
  * whitelist support for /sys/module directory
  * new profiles: basilisk, Tor Browser language packs, PlayOnLinux, sylpheed,
  * new profiles: discord-canary, pycharm-community, pycharm-professional,
  * new profiles: pdfchain, tilp, vivaldi-snapshot, bitcoin-qt, kaffeine,
  * new profiles: falkon, gnome-builder, asunder, VS Code, gnome-recipes,
  * new profiles: akonadi_controle, evince-previewer, evince-thumbnailer,
  * new profiles: blender-2.8, thunderbird-beta, ncdu, gnome-logs, gcloud,
  * new profiles: musixmatch, gunzip, bunzip2, enchant-lsmod, enchant-lsmod-2,
  * new profiles: enchant, enchant-2, Discord, acat, adiff, als, apack,
  * new profiles: arepack, aunpack profiles, ppsspp, scallion, clion,
  * new profiles: baloo_filemetadata_temp_extractor, AnyDesk, webstorm, xmind,
  * new profiles: qmmp, sayonara</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1536580800">- Remove the rpmlintrc file since the warnings are no longer relevant.</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1536667200">- Drop ldconfig calls since firejail libraries are installed in their
  own subdirectory which is not scanned by ldconfig.</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1537617600">- update to version 0.9.56:
  * modif: removed CFG_CHROOT_DESKTOP configuration option
  * modif: removed compile time --enable-network=restricted
  * modif: removed compile time --disable-bind
  * modif: --net=none allowed even if networking was disabled at compile
    time or at run time
  * modif: allow system users to run the sandbox
  * support wireless devices in --net option
  * support tap devices in --net option (tunneling support)
  * allow IP address configuration if the parent interface specified
    by --net is not configured (--netmask)
  * support for firetunnel utility
  * disable U2F devices (--nou2f)
  * add --private-cache to support private ~/.cache
  * support full paths in private-lib
  * globbing support in private-lib
  * support for local user directories in firecfg (--bindir)
  * new profiles: ms-excel, ms-office, ms-onenote, ms-outlook, ms-powerpoint,
  * new profiles: ms-skype, ms-word, riot-desktop, gnome-mpv, snox, gradio,
  * new profiles: standardnotes-desktop, shellcheck, patch, flameshot,
  * new profiles: rview, rvim, vimcat, vimdiff, vimpager, vimtutor, xxd,
  * new profiles: Beaker, electrum, clamtk, pybitmessage, dig, whois,
  * new profiles: jdownloader, Fluxbox, Blackbox, Awesome, i3
  * new profiles: start-tor-browser.desktop</changelog>
  <changelog author="info@paolostivanin.com" date="1549022400">-  update to version 0.9.58:
  * --disable-mnt rework
  * --net.print command
  * GitLab CI/CD integration: disto specific builds
  * profile parser enhancements and conditional handling support
    for HAS_APPIMAGE, HAS_NODBUS, BROWSER_DISABLE_U2F
  * profile name support
  * added explicit nonewprivs support to join option
  * new profiles: QMediathekView, aria2c, Authenticator, checkbashisms
  * new profiles: devilspie, devilspie2, easystroke, github-desktop, min
  * new profiles: bsdcat, bsdcpio, bsdtar, lzmadec, lbunzip2, lbzcat
  * new profiles: lbzip2, lzcat, lzcmp, lzdiff, lzegrep, lzfgrep, lzgrep
  * new profiles: lzless, lzma, lzmainfo, lzmore, unlzma, unxz, xzcat
  * new profiles: xzcmp, xzdiff, xzegrep, xzfgrep, xzgrep, xzless, xzmore
  * new profiles: lzip, artha, nitroshare, nitroshare-cli, nitroshare-nmh
  * new profiles: nirtoshare-send, nitroshare-ui, mencoder, gnome-pie
  * new profiles: masterpdfeditor, QOwnNotes, aisleriot, Mendeley
  * new profiles: feedreader, ocenaudio, mpsyt, thunderbird-wayland
  * new profiles: supertuxkart, ghostwriter, gajim-history-manager
  * bugfixes</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1559476800">- update to version 0.9.60:
  * security bug reported by Austin Morton:
  Seccomp filters are copied into /run/firejail/mnt, and are writable
  within the jail. A malicious process can modify files from inside the
  jail. Processes that are later joined to the jail will not have seccomp
  filters applied.
  CVE-2019-12589
  boo#1137139
  * memory-deny-write-execute now also blocks memfd_create
  * add private-cwd option to control working directory within jail
  * blocking system D-Bus socket with --nodbus
  * bringing back Centos 6 support
  * drop support for flatpak/snap packages
  * new profiles: crow, nyx, mypaint, celluoid, nano, transgui, mpdris2
  * new profiles: sysprof, simplescreenrecorder, geekbench, xfce4-mixer
  * new profiles: pavucontrol, d-feet, seahorse, secret-tool, gnome-keyring
  * new profiles: regextester, hardinfo, gnome-system-log, gnome-nettool
  * new profiles: netactview, redshift, devhelp, assogiate, subdownloader
  * new profiles: font-manager, exfalso, gconf-editor, dconf-editor
  * new profiles: sysprof-cli, seahorse-tool, secret-tool, dconf, gsettings
  * new profiles: code-oss, pragha, Maelstrom, ostrichriders, bzflag
  * new profiles: freeciv, lincity-ng, megaglest, openttd, crawl, crawl-tiles
  * new profiles: teeworlds, torcs, tremulous, warsow, lugaru, manaplus
  * new profiles: pioneer, scorched3d, widelands, freemind, kid3, kid3-qt
  * new profiles: kid3-cli, nomacs, freecol, opencity, openclonk, slashem
  * new profiles: vultureseye, vulturesclaw, anki, cheese, utox, mp3splt
  * new profiles: oggsplt, flacsplt, gramps, newsboat, freeoffice-planmaker
  * new profiles: autokey-gtk, autokey-qt, autokey-run, autokey-shell
  * new profiles: freeoffice-presentations, freeoffice-textmaker, mp3wrap
  * new profiles: inkview, meteo-qt, mp3splt-gtk, ktouch, yelp, cantata</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1581422400">- update to version 0.9.62
  * added file-copy-limit in /etc/firejail/firejail.config
  * profile templates (/usr/share/doc/firejail)
  * allow-debuggers support in profiles
  * several seccomp enhancements
  * compiler flags autodetection
  * move chroot entirely from path based to file descriptor based mounts
  * whitelisting /usr/share in a large number of profiles
  * new scripts in conrib: gdb-firejail.sh and sort.py
  * enhancement: whitelist /usr/share in some profiles
  * added signal mediation to apparmor profile
  * new conditions: HAS_X11, HAS_NET
  * new profiles: qgis, klatexformula, klatexformula_cmdl, links, xlinks
  * new profiles: pandoc, teams-for-linux, OpenArena, gnome-sound-recorder
  * new profiles: godot, tcpdump, tshark, newsbeuter, keepassxc-cli
  * new profiles: keepassxc-proxy, rhythmbox-client, jerry, zeal, mpg123
  * new profiles: conplay, mpg123.bin, mpg123-alsa, mpg123-id3dump, out123
  * new profiles: mpg123-jack, mpg123-nas, mpg123-openal, mpg123-oss
  * new profiles: mpg123-portaudio, mpg123-pulse, mpg123-strip, pavucontrol-qt
  * new profiles: gnome-characters, gnome-character-map, rsync, Whalebird,
  * new profiles: tor-browser (AUR), Zulip, tb-starter-wrapper, bzcat,
  * new profiles: kiwix-desktop, bzcat, zstd, pzstd, zstdcat, zstdgrep, zstdless
  * new profiles: zstdmt, unzstd, i2p, ar, gnome-latex, pngquant, kalgebra
  * new profiles: kalgebramobile, signal-cli, amuled, kfind, profanity
  * new profiles: audio-recorder, cameramonitor, ddgtk, drawio, unf, gmpc
  * new profiles: electron-mail, gist, gist-paste</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1588161600">- Add firejail-0.9.62-fix-usr-etc.patch:
  Check /usr/etc not just /etc
- Replace python interpreter line in sort.py</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1596888000">- Add patches fix-CVE-2020-17367.patch and fix-CVE-2020-17368.patch to fix CVE-2020-17367 and CVE-2020-17368 and boo#1174986</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1597320000">- Update to 0.9.62.2
  * fix CVE-2020-17367
  * fix CVE-2020-17368
  * additional hardening and bug fixes
- Remove fix-CVE-2020-17368.patch
- Remove fix-CVE-2020-17367.patch</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1597838400">- Update to 0.9.62.4
  * fix AppArmor broken in the previous release
  * miscellaneous fixes</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1603713600">- Add firejail-apparmor-3.0.diff to make the AppArmor profile compatible with
  AppArmor 3.0 (add missing include &lt;tunables/global&gt;)</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1604232000">- Update to version 0.9.64:
  * replaced --nowrap option with --wrap in firemon
  * The blocking action of seccomp filters has been changed from
    killing the process to returning EPERM to the caller. To get the
    previous behaviour, use --seccomp-error-action=kill or
    syscall:kill syntax when constructing filters, or override in
    /etc/firejail/firejail.config file.
  * Fine-grained D-Bus sandboxing with xdg-dbus-proxy.
    xdg-dbus-proxy must be installed, if not D-Bus access will be allowed.
    With this version nodbus is deprecated, in favor of dbus-user none and
    dbus-system none and will be removed in a future version.
  * DHCP client support
  * firecfg only fix dektop-files if started with sudo
  * SELinux labeling support
  * custom 32-bit seccomp filter support
  * restrict ${RUNUSER} in several profiles
  * blacklist shells such as bash in several profiles
  * whitelist globbing
  * mkdir and mkfile support for /run/user directory
  * support ignore for include
  * --include on the command line
  * splitting up media players whitelists in whitelist-players.inc
  * new condition: HAS_NOSOUND
  * new profiles: gfeeds, firefox-x11, tvbrowser, rtv, clipgrab, muraster
  * new profiles: gnome-passwordsafe, bibtex, gummi, latex, mupdf-x11-curl
  * new profiles: pdflatex, tex, wpp, wpspdf, wps, et, multimc, mupdf-x11
  * new profiles: gnome-hexgl, com.github.johnfactotum.Foliate, mupdf-gl, mutool
  * new profiles: desktopeditors, impressive, planmaker18, planmaker18free
  * new profiles: presentations18, presentations18free, textmaker18, teams
  * new profiles: textmaker18free, xournal, gnome-screenshot, ripperX
  * new profiles: sound-juicer, com.github.dahenson.agenda, gnome-pomodoro
  * new profiles: gnome-todo, x2goclient, iagno, kmplayer, penguin-command
  * new profiles: frogatto, gnome-mines, gnome-nibbles, lightsoff, warmux
  * new profiles: ts3client_runscript.sh, ferdi, abiword, four-in-a-row
  * new profiles: gnome-mahjongg, gnome-robots, gnome-sudoku, gnome-taquin
  * new profiles: gnome-tetravex, blobwars, gravity-beams-and-evaporating-stars
  * new profiles: hyperrogue, jumpnbump-menu, jumpnbump, magicor, mindless
  * new profiles: mirrormagic, mrrescue, scorched3d-wrapper, scorchwentbonkers
  * new profiles: seahorse-adventures, wordwarvi, xbill, gnome-klotski
  * new profiles: swell-foop, fdns, five-or-more, steam-runtime
  * new profiles: nicotine, plv, mocp, apostrophe, quadrapassel, dino-im
  * new profiles: hitori, bijiben, gnote, gnubik, ZeGrapher, xonotic-sdl-wrapper
  * new profiles: gapplication, openarena_ded, element-desktop, cawbird
  * new profiles: freetube, strawberry, jitsi-meet-desktop
  * new profiles: homebank, mattermost-desktop, newsflash, com.gitlab.newsflash
  * new profiles: sushi, xfce4-screenshooter, org.gnome.NautilusPreviewer, lyx
  * new profiles: minitube, nuclear, mtpaint, minecraft-launcher, gnome-calendar
  * new profiles: vmware, git-cola, otter-browser, kazam, menulibre, musictube
  * new profiles: onboard, fractal, mirage, quaternion, spectral, man, psi
  * new profiles: smuxi-frontend-gnome, balsa, kube, trojita, youtube
  * new profiles: youtubemusic-nativefier, cola, dbus-send, notify-send
  * new profiles: qrencode, ytmdesktop, twitch
  * new profiles: xournalpp, chromium-freeworld, equalx
- remove firejail-0.9.62-fix-usr-etc.patch, included upstream
- remove firejail-apparmor-3.0.diff, included upstream</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1604318400">- packaging fixes</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1611835200">- Update to 0.9.64.2:
  * allow --tmpfs inside $HOME for unprivileged users
  * --disable-usertmpfs compile time option
  * allow AF_BLUETOOTH via --protocol=bluetooth
  * setup guide for new users: contrib/firejail-welcome.sh
  * implement netns in profiles
  * added nolocal6.net IPv6 network filter
  * new profiles: spectacle, chromium-browser-privacy,
    gtk-straw-viewer, gtk-youtube-viewer, gtk2-youtube-viewer,
    gtk3-youtube-viewer, straw-viewer, lutris, dolphin-emu,
    authenticator-rs, servo, npm, marker, yarn, lsar, unar, agetpkg,
    mdr, shotwell, qnapi, new profiles: guvcview, pkglog, kdiff3, CoyIM.</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1612699200">- Update to 0.9.64.4:
  * disabled overlayfs, pending multiple fixes
  * fixed launch firefox for open url in telegram-desktop.profile</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- firejail 0.9.66:
  * deprecated --audit options, relpaced by jailcheck utility
  * deprecated follow-symlink-as-user from firejail.config
  * new firejail.config settings: private-bin, private-etc
  * new firejail.config settings: private-opt, private-srv
  * new firejail.config settings: whitelist-disable-topdir
  * new firejail.config settings: seccomp-filter-add
  * removed kcmp syscall from seccomp default filter
  * rename --noautopulse to keep-config-pulse
  * filtering environment variables
  * zsh completion
  * command line: --mkdir, --mkfile
  * --protocol now accumulates
  * jailtest utility for testing running sandboxes
  * faccessat2 syscall support
  * --private-dev keeps /dev/input
  * added --noinput to disable /dev/input
  * add support for subdirs in --private-etc
  * subdirs support in private-etc
  * input devices support in private-dev, --no-input
  * support trailing comments on profile lines
  * many new profiles
- split shell completion into standard subpackages</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1644148800">- update to firejail 0.9.68:
  - security: on Ubuntu, the PPA is now recommended over the distro package
  - (see README.md) (#4748)
  - security: bugfix: private-cwd leaks access to the entire filesystem
  - (#4780); reported by Hugo Osvaldo Barrera
  - feature: remove (some) environment variables with auth-tokens (#4157)
  - feature: ALLOW_TRAY condition (#4510 #4599)
  - feature: add basic Firejail support to AppArmor base abstraction (#3226
  - #4628)
  - feature: intrusion detection system (--ids-init, --ids-check)
  - feature: deterministic shutdown command (--deterministic-exit-code,
  - --deterministic-shutdown) (#928 #3042 #4635)
  - feature: noprinters command (#4607 #4827)
  - feature: network monitor (--nettrace)
  - feature: network locker (--netlock) (#4848)
  - feature: whitelist-ro profile command (#4740)
  - feature: disable pipewire with --nosound (#4855)
  - feature: Unset TMP if it doesn't exist inside of sandbox (#4151)
  - feature: Allow apostrophe in whitelist and blacklist (#4614)
  - feature: AppImage support in --build command (#4878)
  - modifs: exit code: distinguish fatal signals by adding 128 (#4533)
  - modifs: firecfg.config is now installed to /etc/firejail/ (#408 #4669)
  - modifs: close file descriptors greater than 2 (--keep-fd) (#4845)
  - modifs: nogroups now stopped causing certain system groups to be dropped,
  - which are now controlled by the relevant "no" options instead (such as
  - nosound -&gt; drop audio group), which fixes device access issues on systems
  - not using (e)logind (such as with seatd) (#4632 #4725 #4732 #4851)
  - removal: --disable-whitelist at compile time
  - removal: whitelist=yes/no in /etc/firejail/firejail.config
  - bugfix: Fix sndio support (#4362 #4365)
  - bugfix: Error mounting tmpfs (MS_REMOUNT flag not being cleared) (#4387)
  - bugfix: --build clears the environment (#4460 #4467)
  - bugfix: firejail hangs with net parameter (#3958 #4476)
  - bugfix: Firejail does not work with a custom hosts file (#2758 #4560)
  - bugfix: --tracelog and --trace override /etc/ld.so.preload (#4558 #4586)
  - bugfix: PATH_MAX is undeclared on musl libc (#4578 #4579 #4583 #4606)
  - bugfix: firejail symlinks are not skipped with private-bin + globs (#4626)
  - bugfix: Firejail rejects empty arguments (#4395)
  - bugfix: firecfg does not work with symlinks (discord.desktop) (#4235)
  - bugfix: Seccomp list output goes to stdout instead of stderr (#4328)
  - bugfix: private-etc does not work with symlinks (#4887)
  - bugfix: Hardware key not detected on keepassxc (#4883)
  - build: allow building with address sanitizer (#4594)
  - build: Stop linking pthread (#4695)
  - build: Configure cleanup and improvements (#4712)
  - ci: add profile checks for sorting disable-programs.inc and
  - firecfg.config and for the required arguments in private-etc (#2739 #4643)
  - ci: pin GitHub actions to SHAs and use Dependabot to update them (#4774)
  - docs: Add new command checklist to CONTRIBUTING.md (#4413)
  - docs: Rework bug report issue template and add both a question and a
  - feature request template (#4479 #4515 #4561)
  - docs: fix contradictory descriptions of machine-id ("preserves" vs
  - "spoofs") (#4689)
  - docs: Document that private-bin and private-etc always accumulate (#4078)
  - new includes: whitelist-run-common.inc (#4288), disable-X11.inc (#4462)
  - new includes: disable-proc.inc (#4521)
  - removed includes: disable-passwordmgr.inc (#4454 #4461)
  - new profiles: microsoft-edge-beta, clion-eap, lifeograph, zim
  - new profiles: io.github.lainsce.Notejot, rednotebook, gallery-dl
  - new profiles: yt-dlp, goldendict, goldendict, bundle, cmake
  - new profiles: make, meson, pip, codium, telnet, ftp, OpenStego
  - new profiles: imv, retroarch, torbrowser, CachyBrowser,
  - new profiles: notable, RPCS3, wget2, raincat, conitop, 1passwd,
  - new profiles: Seafile, neovim, com.github.tchx84.Flatseal</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1655208000">- update to version 0.9.70:
  - fix bsc#1199148 CVE-2022-31214
  - security: CVE-2022-31214 - root escalation in --join logic
  - Reported by Matthias Gerstner, working exploit code was provided to our
  - development team. In the same time frame, the problem was independently
  - reported by Birk Blechschmidt. Full working exploit code was also provided.
  - feature: enable shell tab completion with --tab (#4936)
  - feature: disable user profiles at compile time (#4990)
  - feature: Allow resolution of .local names with avahi-daemon in the apparmor
  - profile (#5088)
  - feature: always log seccomp errors (#5110)
  - feature: firecfg --guide, guided user configuration (#5111)
  - feature: --oom, kernel OutOfMemory-killer (#5122)
  - modif: --ids feature needs to be enabled at compile time (#5155)
  - modif: --nettrace only available to root user
  - rework: whitelist restructuring (#4985)
  - rework: firemon, speed up and lots of fixes
  - bugfix: --private-cwd not expanding macros, broken hyperrogue (#4910)
  - bugfix: nogroups + wrc prints confusing messages (#4930 #4933)
  - bugfix: openSUSE Leap - whitelist-run-common.inc (#4954)
  - bugfix: fix printing in evince (#5011)
  - bugfix: gcov: fix gcov functions always declared as dummy (#5028)
  - bugfix: Stop warning on safe supplementary group clean (#5114)
  - build: remove ultimately unused INSTALL and RANLIB check macros (#5133)
  - build: mkdeb.sh.in: pass remaining arguments to ./configure (#5154)
  - ci: replace centos (EOL) with almalinux (#4912)
  - ci: fix --version not printing compile-time features (#5147)
  - ci: print version after install &amp; fix apparmor support on build_apparmor
  - (#5148)
  - docs: Refer to firejail.config in configuration files (#4916)
  - docs: firejail.config: add warning about allow-tray (#4946)
  - docs: mention that the protocol command accumulates (#5043)
  - docs: mention inconsistent homedir bug involving --private=dir (#5052)
  - docs: mention capabilities(7) on --caps (#5078)
  - new profiles: onionshare, onionshare-cli, opera-developer, songrec
  - new profiles: node-gyp, npx, semver, ping-hardened
  - removed profiles: nvm</changelog>
</package>
<package pkgid="f792c5b35bab8dc9dea7b9d640cf09a72c98374c6cfff46d034f4239de30d329" name="firejail-bash-completion" arch="i586">
  <version epoch="0" ver="0.9.70" rel="bp154.2.3.1"/>
  <changelog author="avindra@opensuse.org" date="1513166400">- Update to version 0.9.52:
  * New features
    + systemd-resolved integration
    + whitelisted /var in most profiles
    + GTK2, GTK3 and Qt4 private-lib support
    + --debug-private-lib
    + test deployment of private-lib for the some apps: evince,
    galculator, gnome-calculator, leafpad, mousepad,
    transmission-gtk, xcalc, xmr-stak-cpu, atril,
    mate-color-select, tar, file, strings, gpicview, eom, eog,
    gedit, pluma
    + netfilter template support
    + various new arguments
  * --writable-run-user
  * --rlimit-as
  * --rlimit-cpu
  * --timeout
  * --build (profile build tool)
  * --netfilter.print
  * --netfilter6.print
  * deprecations in modif
    + --allow-private-blacklists (blacklisting, read-only,
    read-write, tmpfs and noexec are allowed in private home
    directories
    + remount-proc-sys (firejail.config)
    + follow-symlink-private-bin (firejail.config)
    + --profile-path
  * enhancements
    + support Firejail user config directory in firecfg
    + disable DBus activation in firecfg
    + enumerate root directories in apparmor profile
    + /etc and /usr/share whitelisting support
    + globbing support for --private-bin
  * new profiles: upstreamed profiles from 3 sources:
    + https://github.com/chiraag-nataraj/firejail-profiles
    + https://github.com/nyancat18/fe
    + https://aur.archlinux.org/packages/firejail-profiles
  * new profiles: terasology, surf, rocketchat, clamscan, clamdscan,
    clamdtop, freshclam, xmr-stak-cpu, amule, ardour4, ardour5,
    brackets, calligra, calligraauthor, calligraconverter,
    calligraflow, calligraplan, calligraplanwork, calligrasheets,
    calligrastage, calligrawords, cin, dooble, dooble-qt4,
    fetchmail, freecad, freecadcmd, google-earth,imagej, karbon,
    1kdenlive, krita, linphone, lmms, macrofusion, mpd, natron,
    Natron, ricochet, shotcut, teamspeak3, tor, tor-browser-en,
    Viber, x-terminal-emulator, zart, conky, arch-audit, ffmpeg,
    bluefish, cinelerra, openshot-qt, pinta, uefitool, aosp,
    pdfmod, gnome-ring, xcalc, zaproxy, kopete, cliqz,
    signal-desktop, kget, nheko, Enpass, kwin_x11, krunner, ping,
    bsdtar, makepkg (Arch), archaudit-report cower (Arch), kdeinit4
- Add full link to source tarball from sourceforge
- Add asc file</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1535025600">- Changed the permissions of the firejail executable to 4750.
  Setuid mode is used, but only allowed for users in the newly
  created group 'firejail' (boo#1059013).
- Update to version 0.9.54:
  * modif: --force removed
  * modif: --csh, --zsh removed
  * modif: --debug-check-filename removed
  * modif: --git-install and --git-uninstall removed
  * modif: support for private-bin, private-lib and shell none has been
    disabled while running AppImage archives in order to be able to use
    our regular profile files with AppImages.
  * modif: restrictions for /proc, /sys and /run/user directories
    are moved from AppArmor profile into firejail executable
  * modif: unifying Chromium and Firefox browsers profiles.
    All users of Firefox-based browsers who use addons and plugins
    that read/write from ${HOME} will need to uncomment the includes for
    firefox-common-addons.inc in firefox-common.profile.
  * modif: split disable-devel.inc into disable-devel and
    disable-interpreters.inc
  * Firejail user access database (/etc/firejail/firejail.users,
    man firejail-users)
  * add --noautopulse to disable automatic ~/.config/pulse (for complex setups)
  * Spectre mitigation patch for gcc and clang compiler
  * D-Bus handling (--nodbus)
  * AppArmor support for overlayfs and chroot sandboxes
  * AppArmor support for AppImages
  * Enable AppArmor by default for a large number of programs
  * firejail --apparmor.print option
  * firemon --apparmor option
  * apparmor yes/no flag in /etc/firejail/firejail.config
  * seccomp syscall list update for glibc 2.26-10
  * seccomp disassembler for --seccomp.print option
  * seccomp machine code optimizer for default seccomp filters
  * IPv6 DNS support
  * whitelist support for overlay and chroot sandboxes
  * private-dev support for overlay and chroot sandboxes
  * private-tmp support for overlay and chroot sandboxes
  * added sandbox name support in firemon
  * firemon/prctl enhancements
  * noblacklist support for /sys/module directory
  * whitelist support for /sys/module directory
  * new profiles: basilisk, Tor Browser language packs, PlayOnLinux, sylpheed,
  * new profiles: discord-canary, pycharm-community, pycharm-professional,
  * new profiles: pdfchain, tilp, vivaldi-snapshot, bitcoin-qt, kaffeine,
  * new profiles: falkon, gnome-builder, asunder, VS Code, gnome-recipes,
  * new profiles: akonadi_controle, evince-previewer, evince-thumbnailer,
  * new profiles: blender-2.8, thunderbird-beta, ncdu, gnome-logs, gcloud,
  * new profiles: musixmatch, gunzip, bunzip2, enchant-lsmod, enchant-lsmod-2,
  * new profiles: enchant, enchant-2, Discord, acat, adiff, als, apack,
  * new profiles: arepack, aunpack profiles, ppsspp, scallion, clion,
  * new profiles: baloo_filemetadata_temp_extractor, AnyDesk, webstorm, xmind,
  * new profiles: qmmp, sayonara</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1536580800">- Remove the rpmlintrc file since the warnings are no longer relevant.</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1536667200">- Drop ldconfig calls since firejail libraries are installed in their
  own subdirectory which is not scanned by ldconfig.</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1537617600">- update to version 0.9.56:
  * modif: removed CFG_CHROOT_DESKTOP configuration option
  * modif: removed compile time --enable-network=restricted
  * modif: removed compile time --disable-bind
  * modif: --net=none allowed even if networking was disabled at compile
    time or at run time
  * modif: allow system users to run the sandbox
  * support wireless devices in --net option
  * support tap devices in --net option (tunneling support)
  * allow IP address configuration if the parent interface specified
    by --net is not configured (--netmask)
  * support for firetunnel utility
  * disable U2F devices (--nou2f)
  * add --private-cache to support private ~/.cache
  * support full paths in private-lib
  * globbing support in private-lib
  * support for local user directories in firecfg (--bindir)
  * new profiles: ms-excel, ms-office, ms-onenote, ms-outlook, ms-powerpoint,
  * new profiles: ms-skype, ms-word, riot-desktop, gnome-mpv, snox, gradio,
  * new profiles: standardnotes-desktop, shellcheck, patch, flameshot,
  * new profiles: rview, rvim, vimcat, vimdiff, vimpager, vimtutor, xxd,
  * new profiles: Beaker, electrum, clamtk, pybitmessage, dig, whois,
  * new profiles: jdownloader, Fluxbox, Blackbox, Awesome, i3
  * new profiles: start-tor-browser.desktop</changelog>
  <changelog author="info@paolostivanin.com" date="1549022400">-  update to version 0.9.58:
  * --disable-mnt rework
  * --net.print command
  * GitLab CI/CD integration: disto specific builds
  * profile parser enhancements and conditional handling support
    for HAS_APPIMAGE, HAS_NODBUS, BROWSER_DISABLE_U2F
  * profile name support
  * added explicit nonewprivs support to join option
  * new profiles: QMediathekView, aria2c, Authenticator, checkbashisms
  * new profiles: devilspie, devilspie2, easystroke, github-desktop, min
  * new profiles: bsdcat, bsdcpio, bsdtar, lzmadec, lbunzip2, lbzcat
  * new profiles: lbzip2, lzcat, lzcmp, lzdiff, lzegrep, lzfgrep, lzgrep
  * new profiles: lzless, lzma, lzmainfo, lzmore, unlzma, unxz, xzcat
  * new profiles: xzcmp, xzdiff, xzegrep, xzfgrep, xzgrep, xzless, xzmore
  * new profiles: lzip, artha, nitroshare, nitroshare-cli, nitroshare-nmh
  * new profiles: nirtoshare-send, nitroshare-ui, mencoder, gnome-pie
  * new profiles: masterpdfeditor, QOwnNotes, aisleriot, Mendeley
  * new profiles: feedreader, ocenaudio, mpsyt, thunderbird-wayland
  * new profiles: supertuxkart, ghostwriter, gajim-history-manager
  * bugfixes</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1559476800">- update to version 0.9.60:
  * security bug reported by Austin Morton:
  Seccomp filters are copied into /run/firejail/mnt, and are writable
  within the jail. A malicious process can modify files from inside the
  jail. Processes that are later joined to the jail will not have seccomp
  filters applied.
  CVE-2019-12589
  boo#1137139
  * memory-deny-write-execute now also blocks memfd_create
  * add private-cwd option to control working directory within jail
  * blocking system D-Bus socket with --nodbus
  * bringing back Centos 6 support
  * drop support for flatpak/snap packages
  * new profiles: crow, nyx, mypaint, celluoid, nano, transgui, mpdris2
  * new profiles: sysprof, simplescreenrecorder, geekbench, xfce4-mixer
  * new profiles: pavucontrol, d-feet, seahorse, secret-tool, gnome-keyring
  * new profiles: regextester, hardinfo, gnome-system-log, gnome-nettool
  * new profiles: netactview, redshift, devhelp, assogiate, subdownloader
  * new profiles: font-manager, exfalso, gconf-editor, dconf-editor
  * new profiles: sysprof-cli, seahorse-tool, secret-tool, dconf, gsettings
  * new profiles: code-oss, pragha, Maelstrom, ostrichriders, bzflag
  * new profiles: freeciv, lincity-ng, megaglest, openttd, crawl, crawl-tiles
  * new profiles: teeworlds, torcs, tremulous, warsow, lugaru, manaplus
  * new profiles: pioneer, scorched3d, widelands, freemind, kid3, kid3-qt
  * new profiles: kid3-cli, nomacs, freecol, opencity, openclonk, slashem
  * new profiles: vultureseye, vulturesclaw, anki, cheese, utox, mp3splt
  * new profiles: oggsplt, flacsplt, gramps, newsboat, freeoffice-planmaker
  * new profiles: autokey-gtk, autokey-qt, autokey-run, autokey-shell
  * new profiles: freeoffice-presentations, freeoffice-textmaker, mp3wrap
  * new profiles: inkview, meteo-qt, mp3splt-gtk, ktouch, yelp, cantata</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1581422400">- update to version 0.9.62
  * added file-copy-limit in /etc/firejail/firejail.config
  * profile templates (/usr/share/doc/firejail)
  * allow-debuggers support in profiles
  * several seccomp enhancements
  * compiler flags autodetection
  * move chroot entirely from path based to file descriptor based mounts
  * whitelisting /usr/share in a large number of profiles
  * new scripts in conrib: gdb-firejail.sh and sort.py
  * enhancement: whitelist /usr/share in some profiles
  * added signal mediation to apparmor profile
  * new conditions: HAS_X11, HAS_NET
  * new profiles: qgis, klatexformula, klatexformula_cmdl, links, xlinks
  * new profiles: pandoc, teams-for-linux, OpenArena, gnome-sound-recorder
  * new profiles: godot, tcpdump, tshark, newsbeuter, keepassxc-cli
  * new profiles: keepassxc-proxy, rhythmbox-client, jerry, zeal, mpg123
  * new profiles: conplay, mpg123.bin, mpg123-alsa, mpg123-id3dump, out123
  * new profiles: mpg123-jack, mpg123-nas, mpg123-openal, mpg123-oss
  * new profiles: mpg123-portaudio, mpg123-pulse, mpg123-strip, pavucontrol-qt
  * new profiles: gnome-characters, gnome-character-map, rsync, Whalebird,
  * new profiles: tor-browser (AUR), Zulip, tb-starter-wrapper, bzcat,
  * new profiles: kiwix-desktop, bzcat, zstd, pzstd, zstdcat, zstdgrep, zstdless
  * new profiles: zstdmt, unzstd, i2p, ar, gnome-latex, pngquant, kalgebra
  * new profiles: kalgebramobile, signal-cli, amuled, kfind, profanity
  * new profiles: audio-recorder, cameramonitor, ddgtk, drawio, unf, gmpc
  * new profiles: electron-mail, gist, gist-paste</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1588161600">- Add firejail-0.9.62-fix-usr-etc.patch:
  Check /usr/etc not just /etc
- Replace python interpreter line in sort.py</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1596888000">- Add patches fix-CVE-2020-17367.patch and fix-CVE-2020-17368.patch to fix CVE-2020-17367 and CVE-2020-17368 and boo#1174986</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1597320000">- Update to 0.9.62.2
  * fix CVE-2020-17367
  * fix CVE-2020-17368
  * additional hardening and bug fixes
- Remove fix-CVE-2020-17368.patch
- Remove fix-CVE-2020-17367.patch</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1597838400">- Update to 0.9.62.4
  * fix AppArmor broken in the previous release
  * miscellaneous fixes</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1603713600">- Add firejail-apparmor-3.0.diff to make the AppArmor profile compatible with
  AppArmor 3.0 (add missing include &lt;tunables/global&gt;)</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1604232000">- Update to version 0.9.64:
  * replaced --nowrap option with --wrap in firemon
  * The blocking action of seccomp filters has been changed from
    killing the process to returning EPERM to the caller. To get the
    previous behaviour, use --seccomp-error-action=kill or
    syscall:kill syntax when constructing filters, or override in
    /etc/firejail/firejail.config file.
  * Fine-grained D-Bus sandboxing with xdg-dbus-proxy.
    xdg-dbus-proxy must be installed, if not D-Bus access will be allowed.
    With this version nodbus is deprecated, in favor of dbus-user none and
    dbus-system none and will be removed in a future version.
  * DHCP client support
  * firecfg only fix dektop-files if started with sudo
  * SELinux labeling support
  * custom 32-bit seccomp filter support
  * restrict ${RUNUSER} in several profiles
  * blacklist shells such as bash in several profiles
  * whitelist globbing
  * mkdir and mkfile support for /run/user directory
  * support ignore for include
  * --include on the command line
  * splitting up media players whitelists in whitelist-players.inc
  * new condition: HAS_NOSOUND
  * new profiles: gfeeds, firefox-x11, tvbrowser, rtv, clipgrab, muraster
  * new profiles: gnome-passwordsafe, bibtex, gummi, latex, mupdf-x11-curl
  * new profiles: pdflatex, tex, wpp, wpspdf, wps, et, multimc, mupdf-x11
  * new profiles: gnome-hexgl, com.github.johnfactotum.Foliate, mupdf-gl, mutool
  * new profiles: desktopeditors, impressive, planmaker18, planmaker18free
  * new profiles: presentations18, presentations18free, textmaker18, teams
  * new profiles: textmaker18free, xournal, gnome-screenshot, ripperX
  * new profiles: sound-juicer, com.github.dahenson.agenda, gnome-pomodoro
  * new profiles: gnome-todo, x2goclient, iagno, kmplayer, penguin-command
  * new profiles: frogatto, gnome-mines, gnome-nibbles, lightsoff, warmux
  * new profiles: ts3client_runscript.sh, ferdi, abiword, four-in-a-row
  * new profiles: gnome-mahjongg, gnome-robots, gnome-sudoku, gnome-taquin
  * new profiles: gnome-tetravex, blobwars, gravity-beams-and-evaporating-stars
  * new profiles: hyperrogue, jumpnbump-menu, jumpnbump, magicor, mindless
  * new profiles: mirrormagic, mrrescue, scorched3d-wrapper, scorchwentbonkers
  * new profiles: seahorse-adventures, wordwarvi, xbill, gnome-klotski
  * new profiles: swell-foop, fdns, five-or-more, steam-runtime
  * new profiles: nicotine, plv, mocp, apostrophe, quadrapassel, dino-im
  * new profiles: hitori, bijiben, gnote, gnubik, ZeGrapher, xonotic-sdl-wrapper
  * new profiles: gapplication, openarena_ded, element-desktop, cawbird
  * new profiles: freetube, strawberry, jitsi-meet-desktop
  * new profiles: homebank, mattermost-desktop, newsflash, com.gitlab.newsflash
  * new profiles: sushi, xfce4-screenshooter, org.gnome.NautilusPreviewer, lyx
  * new profiles: minitube, nuclear, mtpaint, minecraft-launcher, gnome-calendar
  * new profiles: vmware, git-cola, otter-browser, kazam, menulibre, musictube
  * new profiles: onboard, fractal, mirage, quaternion, spectral, man, psi
  * new profiles: smuxi-frontend-gnome, balsa, kube, trojita, youtube
  * new profiles: youtubemusic-nativefier, cola, dbus-send, notify-send
  * new profiles: qrencode, ytmdesktop, twitch
  * new profiles: xournalpp, chromium-freeworld, equalx
- remove firejail-0.9.62-fix-usr-etc.patch, included upstream
- remove firejail-apparmor-3.0.diff, included upstream</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1604318400">- packaging fixes</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1611835200">- Update to 0.9.64.2:
  * allow --tmpfs inside $HOME for unprivileged users
  * --disable-usertmpfs compile time option
  * allow AF_BLUETOOTH via --protocol=bluetooth
  * setup guide for new users: contrib/firejail-welcome.sh
  * implement netns in profiles
  * added nolocal6.net IPv6 network filter
  * new profiles: spectacle, chromium-browser-privacy,
    gtk-straw-viewer, gtk-youtube-viewer, gtk2-youtube-viewer,
    gtk3-youtube-viewer, straw-viewer, lutris, dolphin-emu,
    authenticator-rs, servo, npm, marker, yarn, lsar, unar, agetpkg,
    mdr, shotwell, qnapi, new profiles: guvcview, pkglog, kdiff3, CoyIM.</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1612699200">- Update to 0.9.64.4:
  * disabled overlayfs, pending multiple fixes
  * fixed launch firefox for open url in telegram-desktop.profile</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- firejail 0.9.66:
  * deprecated --audit options, relpaced by jailcheck utility
  * deprecated follow-symlink-as-user from firejail.config
  * new firejail.config settings: private-bin, private-etc
  * new firejail.config settings: private-opt, private-srv
  * new firejail.config settings: whitelist-disable-topdir
  * new firejail.config settings: seccomp-filter-add
  * removed kcmp syscall from seccomp default filter
  * rename --noautopulse to keep-config-pulse
  * filtering environment variables
  * zsh completion
  * command line: --mkdir, --mkfile
  * --protocol now accumulates
  * jailtest utility for testing running sandboxes
  * faccessat2 syscall support
  * --private-dev keeps /dev/input
  * added --noinput to disable /dev/input
  * add support for subdirs in --private-etc
  * subdirs support in private-etc
  * input devices support in private-dev, --no-input
  * support trailing comments on profile lines
  * many new profiles
- split shell completion into standard subpackages</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1644148800">- update to firejail 0.9.68:
  - security: on Ubuntu, the PPA is now recommended over the distro package
  - (see README.md) (#4748)
  - security: bugfix: private-cwd leaks access to the entire filesystem
  - (#4780); reported by Hugo Osvaldo Barrera
  - feature: remove (some) environment variables with auth-tokens (#4157)
  - feature: ALLOW_TRAY condition (#4510 #4599)
  - feature: add basic Firejail support to AppArmor base abstraction (#3226
  - #4628)
  - feature: intrusion detection system (--ids-init, --ids-check)
  - feature: deterministic shutdown command (--deterministic-exit-code,
  - --deterministic-shutdown) (#928 #3042 #4635)
  - feature: noprinters command (#4607 #4827)
  - feature: network monitor (--nettrace)
  - feature: network locker (--netlock) (#4848)
  - feature: whitelist-ro profile command (#4740)
  - feature: disable pipewire with --nosound (#4855)
  - feature: Unset TMP if it doesn't exist inside of sandbox (#4151)
  - feature: Allow apostrophe in whitelist and blacklist (#4614)
  - feature: AppImage support in --build command (#4878)
  - modifs: exit code: distinguish fatal signals by adding 128 (#4533)
  - modifs: firecfg.config is now installed to /etc/firejail/ (#408 #4669)
  - modifs: close file descriptors greater than 2 (--keep-fd) (#4845)
  - modifs: nogroups now stopped causing certain system groups to be dropped,
  - which are now controlled by the relevant "no" options instead (such as
  - nosound -&gt; drop audio group), which fixes device access issues on systems
  - not using (e)logind (such as with seatd) (#4632 #4725 #4732 #4851)
  - removal: --disable-whitelist at compile time
  - removal: whitelist=yes/no in /etc/firejail/firejail.config
  - bugfix: Fix sndio support (#4362 #4365)
  - bugfix: Error mounting tmpfs (MS_REMOUNT flag not being cleared) (#4387)
  - bugfix: --build clears the environment (#4460 #4467)
  - bugfix: firejail hangs with net parameter (#3958 #4476)
  - bugfix: Firejail does not work with a custom hosts file (#2758 #4560)
  - bugfix: --tracelog and --trace override /etc/ld.so.preload (#4558 #4586)
  - bugfix: PATH_MAX is undeclared on musl libc (#4578 #4579 #4583 #4606)
  - bugfix: firejail symlinks are not skipped with private-bin + globs (#4626)
  - bugfix: Firejail rejects empty arguments (#4395)
  - bugfix: firecfg does not work with symlinks (discord.desktop) (#4235)
  - bugfix: Seccomp list output goes to stdout instead of stderr (#4328)
  - bugfix: private-etc does not work with symlinks (#4887)
  - bugfix: Hardware key not detected on keepassxc (#4883)
  - build: allow building with address sanitizer (#4594)
  - build: Stop linking pthread (#4695)
  - build: Configure cleanup and improvements (#4712)
  - ci: add profile checks for sorting disable-programs.inc and
  - firecfg.config and for the required arguments in private-etc (#2739 #4643)
  - ci: pin GitHub actions to SHAs and use Dependabot to update them (#4774)
  - docs: Add new command checklist to CONTRIBUTING.md (#4413)
  - docs: Rework bug report issue template and add both a question and a
  - feature request template (#4479 #4515 #4561)
  - docs: fix contradictory descriptions of machine-id ("preserves" vs
  - "spoofs") (#4689)
  - docs: Document that private-bin and private-etc always accumulate (#4078)
  - new includes: whitelist-run-common.inc (#4288), disable-X11.inc (#4462)
  - new includes: disable-proc.inc (#4521)
  - removed includes: disable-passwordmgr.inc (#4454 #4461)
  - new profiles: microsoft-edge-beta, clion-eap, lifeograph, zim
  - new profiles: io.github.lainsce.Notejot, rednotebook, gallery-dl
  - new profiles: yt-dlp, goldendict, goldendict, bundle, cmake
  - new profiles: make, meson, pip, codium, telnet, ftp, OpenStego
  - new profiles: imv, retroarch, torbrowser, CachyBrowser,
  - new profiles: notable, RPCS3, wget2, raincat, conitop, 1passwd,
  - new profiles: Seafile, neovim, com.github.tchx84.Flatseal</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1655208000">- update to version 0.9.70:
  - fix bsc#1199148 CVE-2022-31214
  - security: CVE-2022-31214 - root escalation in --join logic
  - Reported by Matthias Gerstner, working exploit code was provided to our
  - development team. In the same time frame, the problem was independently
  - reported by Birk Blechschmidt. Full working exploit code was also provided.
  - feature: enable shell tab completion with --tab (#4936)
  - feature: disable user profiles at compile time (#4990)
  - feature: Allow resolution of .local names with avahi-daemon in the apparmor
  - profile (#5088)
  - feature: always log seccomp errors (#5110)
  - feature: firecfg --guide, guided user configuration (#5111)
  - feature: --oom, kernel OutOfMemory-killer (#5122)
  - modif: --ids feature needs to be enabled at compile time (#5155)
  - modif: --nettrace only available to root user
  - rework: whitelist restructuring (#4985)
  - rework: firemon, speed up and lots of fixes
  - bugfix: --private-cwd not expanding macros, broken hyperrogue (#4910)
  - bugfix: nogroups + wrc prints confusing messages (#4930 #4933)
  - bugfix: openSUSE Leap - whitelist-run-common.inc (#4954)
  - bugfix: fix printing in evince (#5011)
  - bugfix: gcov: fix gcov functions always declared as dummy (#5028)
  - bugfix: Stop warning on safe supplementary group clean (#5114)
  - build: remove ultimately unused INSTALL and RANLIB check macros (#5133)
  - build: mkdeb.sh.in: pass remaining arguments to ./configure (#5154)
  - ci: replace centos (EOL) with almalinux (#4912)
  - ci: fix --version not printing compile-time features (#5147)
  - ci: print version after install &amp; fix apparmor support on build_apparmor
  - (#5148)
  - docs: Refer to firejail.config in configuration files (#4916)
  - docs: firejail.config: add warning about allow-tray (#4946)
  - docs: mention that the protocol command accumulates (#5043)
  - docs: mention inconsistent homedir bug involving --private=dir (#5052)
  - docs: mention capabilities(7) on --caps (#5078)
  - new profiles: onionshare, onionshare-cli, opera-developer, songrec
  - new profiles: node-gyp, npx, semver, ping-hardened
  - removed profiles: nvm</changelog>
</package>
<package pkgid="7bd61ca234ed6d39b1b1a52377ef72d1446c96881068823ae9ec0802f5f10822" name="firejail-bash-completion" arch="ppc64le">
  <version epoch="0" ver="0.9.70" rel="bp154.2.3.1"/>
  <changelog author="avindra@opensuse.org" date="1513166400">- Update to version 0.9.52:
  * New features
    + systemd-resolved integration
    + whitelisted /var in most profiles
    + GTK2, GTK3 and Qt4 private-lib support
    + --debug-private-lib
    + test deployment of private-lib for the some apps: evince,
    galculator, gnome-calculator, leafpad, mousepad,
    transmission-gtk, xcalc, xmr-stak-cpu, atril,
    mate-color-select, tar, file, strings, gpicview, eom, eog,
    gedit, pluma
    + netfilter template support
    + various new arguments
  * --writable-run-user
  * --rlimit-as
  * --rlimit-cpu
  * --timeout
  * --build (profile build tool)
  * --netfilter.print
  * --netfilter6.print
  * deprecations in modif
    + --allow-private-blacklists (blacklisting, read-only,
    read-write, tmpfs and noexec are allowed in private home
    directories
    + remount-proc-sys (firejail.config)
    + follow-symlink-private-bin (firejail.config)
    + --profile-path
  * enhancements
    + support Firejail user config directory in firecfg
    + disable DBus activation in firecfg
    + enumerate root directories in apparmor profile
    + /etc and /usr/share whitelisting support
    + globbing support for --private-bin
  * new profiles: upstreamed profiles from 3 sources:
    + https://github.com/chiraag-nataraj/firejail-profiles
    + https://github.com/nyancat18/fe
    + https://aur.archlinux.org/packages/firejail-profiles
  * new profiles: terasology, surf, rocketchat, clamscan, clamdscan,
    clamdtop, freshclam, xmr-stak-cpu, amule, ardour4, ardour5,
    brackets, calligra, calligraauthor, calligraconverter,
    calligraflow, calligraplan, calligraplanwork, calligrasheets,
    calligrastage, calligrawords, cin, dooble, dooble-qt4,
    fetchmail, freecad, freecadcmd, google-earth,imagej, karbon,
    1kdenlive, krita, linphone, lmms, macrofusion, mpd, natron,
    Natron, ricochet, shotcut, teamspeak3, tor, tor-browser-en,
    Viber, x-terminal-emulator, zart, conky, arch-audit, ffmpeg,
    bluefish, cinelerra, openshot-qt, pinta, uefitool, aosp,
    pdfmod, gnome-ring, xcalc, zaproxy, kopete, cliqz,
    signal-desktop, kget, nheko, Enpass, kwin_x11, krunner, ping,
    bsdtar, makepkg (Arch), archaudit-report cower (Arch), kdeinit4
- Add full link to source tarball from sourceforge
- Add asc file</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1535025600">- Changed the permissions of the firejail executable to 4750.
  Setuid mode is used, but only allowed for users in the newly
  created group 'firejail' (boo#1059013).
- Update to version 0.9.54:
  * modif: --force removed
  * modif: --csh, --zsh removed
  * modif: --debug-check-filename removed
  * modif: --git-install and --git-uninstall removed
  * modif: support for private-bin, private-lib and shell none has been
    disabled while running AppImage archives in order to be able to use
    our regular profile files with AppImages.
  * modif: restrictions for /proc, /sys and /run/user directories
    are moved from AppArmor profile into firejail executable
  * modif: unifying Chromium and Firefox browsers profiles.
    All users of Firefox-based browsers who use addons and plugins
    that read/write from ${HOME} will need to uncomment the includes for
    firefox-common-addons.inc in firefox-common.profile.
  * modif: split disable-devel.inc into disable-devel and
    disable-interpreters.inc
  * Firejail user access database (/etc/firejail/firejail.users,
    man firejail-users)
  * add --noautopulse to disable automatic ~/.config/pulse (for complex setups)
  * Spectre mitigation patch for gcc and clang compiler
  * D-Bus handling (--nodbus)
  * AppArmor support for overlayfs and chroot sandboxes
  * AppArmor support for AppImages
  * Enable AppArmor by default for a large number of programs
  * firejail --apparmor.print option
  * firemon --apparmor option
  * apparmor yes/no flag in /etc/firejail/firejail.config
  * seccomp syscall list update for glibc 2.26-10
  * seccomp disassembler for --seccomp.print option
  * seccomp machine code optimizer for default seccomp filters
  * IPv6 DNS support
  * whitelist support for overlay and chroot sandboxes
  * private-dev support for overlay and chroot sandboxes
  * private-tmp support for overlay and chroot sandboxes
  * added sandbox name support in firemon
  * firemon/prctl enhancements
  * noblacklist support for /sys/module directory
  * whitelist support for /sys/module directory
  * new profiles: basilisk, Tor Browser language packs, PlayOnLinux, sylpheed,
  * new profiles: discord-canary, pycharm-community, pycharm-professional,
  * new profiles: pdfchain, tilp, vivaldi-snapshot, bitcoin-qt, kaffeine,
  * new profiles: falkon, gnome-builder, asunder, VS Code, gnome-recipes,
  * new profiles: akonadi_controle, evince-previewer, evince-thumbnailer,
  * new profiles: blender-2.8, thunderbird-beta, ncdu, gnome-logs, gcloud,
  * new profiles: musixmatch, gunzip, bunzip2, enchant-lsmod, enchant-lsmod-2,
  * new profiles: enchant, enchant-2, Discord, acat, adiff, als, apack,
  * new profiles: arepack, aunpack profiles, ppsspp, scallion, clion,
  * new profiles: baloo_filemetadata_temp_extractor, AnyDesk, webstorm, xmind,
  * new profiles: qmmp, sayonara</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1536580800">- Remove the rpmlintrc file since the warnings are no longer relevant.</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1536667200">- Drop ldconfig calls since firejail libraries are installed in their
  own subdirectory which is not scanned by ldconfig.</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1537617600">- update to version 0.9.56:
  * modif: removed CFG_CHROOT_DESKTOP configuration option
  * modif: removed compile time --enable-network=restricted
  * modif: removed compile time --disable-bind
  * modif: --net=none allowed even if networking was disabled at compile
    time or at run time
  * modif: allow system users to run the sandbox
  * support wireless devices in --net option
  * support tap devices in --net option (tunneling support)
  * allow IP address configuration if the parent interface specified
    by --net is not configured (--netmask)
  * support for firetunnel utility
  * disable U2F devices (--nou2f)
  * add --private-cache to support private ~/.cache
  * support full paths in private-lib
  * globbing support in private-lib
  * support for local user directories in firecfg (--bindir)
  * new profiles: ms-excel, ms-office, ms-onenote, ms-outlook, ms-powerpoint,
  * new profiles: ms-skype, ms-word, riot-desktop, gnome-mpv, snox, gradio,
  * new profiles: standardnotes-desktop, shellcheck, patch, flameshot,
  * new profiles: rview, rvim, vimcat, vimdiff, vimpager, vimtutor, xxd,
  * new profiles: Beaker, electrum, clamtk, pybitmessage, dig, whois,
  * new profiles: jdownloader, Fluxbox, Blackbox, Awesome, i3
  * new profiles: start-tor-browser.desktop</changelog>
  <changelog author="info@paolostivanin.com" date="1549022400">-  update to version 0.9.58:
  * --disable-mnt rework
  * --net.print command
  * GitLab CI/CD integration: disto specific builds
  * profile parser enhancements and conditional handling support
    for HAS_APPIMAGE, HAS_NODBUS, BROWSER_DISABLE_U2F
  * profile name support
  * added explicit nonewprivs support to join option
  * new profiles: QMediathekView, aria2c, Authenticator, checkbashisms
  * new profiles: devilspie, devilspie2, easystroke, github-desktop, min
  * new profiles: bsdcat, bsdcpio, bsdtar, lzmadec, lbunzip2, lbzcat
  * new profiles: lbzip2, lzcat, lzcmp, lzdiff, lzegrep, lzfgrep, lzgrep
  * new profiles: lzless, lzma, lzmainfo, lzmore, unlzma, unxz, xzcat
  * new profiles: xzcmp, xzdiff, xzegrep, xzfgrep, xzgrep, xzless, xzmore
  * new profiles: lzip, artha, nitroshare, nitroshare-cli, nitroshare-nmh
  * new profiles: nirtoshare-send, nitroshare-ui, mencoder, gnome-pie
  * new profiles: masterpdfeditor, QOwnNotes, aisleriot, Mendeley
  * new profiles: feedreader, ocenaudio, mpsyt, thunderbird-wayland
  * new profiles: supertuxkart, ghostwriter, gajim-history-manager
  * bugfixes</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1559476800">- update to version 0.9.60:
  * security bug reported by Austin Morton:
  Seccomp filters are copied into /run/firejail/mnt, and are writable
  within the jail. A malicious process can modify files from inside the
  jail. Processes that are later joined to the jail will not have seccomp
  filters applied.
  CVE-2019-12589
  boo#1137139
  * memory-deny-write-execute now also blocks memfd_create
  * add private-cwd option to control working directory within jail
  * blocking system D-Bus socket with --nodbus
  * bringing back Centos 6 support
  * drop support for flatpak/snap packages
  * new profiles: crow, nyx, mypaint, celluoid, nano, transgui, mpdris2
  * new profiles: sysprof, simplescreenrecorder, geekbench, xfce4-mixer
  * new profiles: pavucontrol, d-feet, seahorse, secret-tool, gnome-keyring
  * new profiles: regextester, hardinfo, gnome-system-log, gnome-nettool
  * new profiles: netactview, redshift, devhelp, assogiate, subdownloader
  * new profiles: font-manager, exfalso, gconf-editor, dconf-editor
  * new profiles: sysprof-cli, seahorse-tool, secret-tool, dconf, gsettings
  * new profiles: code-oss, pragha, Maelstrom, ostrichriders, bzflag
  * new profiles: freeciv, lincity-ng, megaglest, openttd, crawl, crawl-tiles
  * new profiles: teeworlds, torcs, tremulous, warsow, lugaru, manaplus
  * new profiles: pioneer, scorched3d, widelands, freemind, kid3, kid3-qt
  * new profiles: kid3-cli, nomacs, freecol, opencity, openclonk, slashem
  * new profiles: vultureseye, vulturesclaw, anki, cheese, utox, mp3splt
  * new profiles: oggsplt, flacsplt, gramps, newsboat, freeoffice-planmaker
  * new profiles: autokey-gtk, autokey-qt, autokey-run, autokey-shell
  * new profiles: freeoffice-presentations, freeoffice-textmaker, mp3wrap
  * new profiles: inkview, meteo-qt, mp3splt-gtk, ktouch, yelp, cantata</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1581422400">- update to version 0.9.62
  * added file-copy-limit in /etc/firejail/firejail.config
  * profile templates (/usr/share/doc/firejail)
  * allow-debuggers support in profiles
  * several seccomp enhancements
  * compiler flags autodetection
  * move chroot entirely from path based to file descriptor based mounts
  * whitelisting /usr/share in a large number of profiles
  * new scripts in conrib: gdb-firejail.sh and sort.py
  * enhancement: whitelist /usr/share in some profiles
  * added signal mediation to apparmor profile
  * new conditions: HAS_X11, HAS_NET
  * new profiles: qgis, klatexformula, klatexformula_cmdl, links, xlinks
  * new profiles: pandoc, teams-for-linux, OpenArena, gnome-sound-recorder
  * new profiles: godot, tcpdump, tshark, newsbeuter, keepassxc-cli
  * new profiles: keepassxc-proxy, rhythmbox-client, jerry, zeal, mpg123
  * new profiles: conplay, mpg123.bin, mpg123-alsa, mpg123-id3dump, out123
  * new profiles: mpg123-jack, mpg123-nas, mpg123-openal, mpg123-oss
  * new profiles: mpg123-portaudio, mpg123-pulse, mpg123-strip, pavucontrol-qt
  * new profiles: gnome-characters, gnome-character-map, rsync, Whalebird,
  * new profiles: tor-browser (AUR), Zulip, tb-starter-wrapper, bzcat,
  * new profiles: kiwix-desktop, bzcat, zstd, pzstd, zstdcat, zstdgrep, zstdless
  * new profiles: zstdmt, unzstd, i2p, ar, gnome-latex, pngquant, kalgebra
  * new profiles: kalgebramobile, signal-cli, amuled, kfind, profanity
  * new profiles: audio-recorder, cameramonitor, ddgtk, drawio, unf, gmpc
  * new profiles: electron-mail, gist, gist-paste</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1588161600">- Add firejail-0.9.62-fix-usr-etc.patch:
  Check /usr/etc not just /etc
- Replace python interpreter line in sort.py</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1596888000">- Add patches fix-CVE-2020-17367.patch and fix-CVE-2020-17368.patch to fix CVE-2020-17367 and CVE-2020-17368 and boo#1174986</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1597320000">- Update to 0.9.62.2
  * fix CVE-2020-17367
  * fix CVE-2020-17368
  * additional hardening and bug fixes
- Remove fix-CVE-2020-17368.patch
- Remove fix-CVE-2020-17367.patch</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1597838400">- Update to 0.9.62.4
  * fix AppArmor broken in the previous release
  * miscellaneous fixes</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1603713600">- Add firejail-apparmor-3.0.diff to make the AppArmor profile compatible with
  AppArmor 3.0 (add missing include &lt;tunables/global&gt;)</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1604232000">- Update to version 0.9.64:
  * replaced --nowrap option with --wrap in firemon
  * The blocking action of seccomp filters has been changed from
    killing the process to returning EPERM to the caller. To get the
    previous behaviour, use --seccomp-error-action=kill or
    syscall:kill syntax when constructing filters, or override in
    /etc/firejail/firejail.config file.
  * Fine-grained D-Bus sandboxing with xdg-dbus-proxy.
    xdg-dbus-proxy must be installed, if not D-Bus access will be allowed.
    With this version nodbus is deprecated, in favor of dbus-user none and
    dbus-system none and will be removed in a future version.
  * DHCP client support
  * firecfg only fix dektop-files if started with sudo
  * SELinux labeling support
  * custom 32-bit seccomp filter support
  * restrict ${RUNUSER} in several profiles
  * blacklist shells such as bash in several profiles
  * whitelist globbing
  * mkdir and mkfile support for /run/user directory
  * support ignore for include
  * --include on the command line
  * splitting up media players whitelists in whitelist-players.inc
  * new condition: HAS_NOSOUND
  * new profiles: gfeeds, firefox-x11, tvbrowser, rtv, clipgrab, muraster
  * new profiles: gnome-passwordsafe, bibtex, gummi, latex, mupdf-x11-curl
  * new profiles: pdflatex, tex, wpp, wpspdf, wps, et, multimc, mupdf-x11
  * new profiles: gnome-hexgl, com.github.johnfactotum.Foliate, mupdf-gl, mutool
  * new profiles: desktopeditors, impressive, planmaker18, planmaker18free
  * new profiles: presentations18, presentations18free, textmaker18, teams
  * new profiles: textmaker18free, xournal, gnome-screenshot, ripperX
  * new profiles: sound-juicer, com.github.dahenson.agenda, gnome-pomodoro
  * new profiles: gnome-todo, x2goclient, iagno, kmplayer, penguin-command
  * new profiles: frogatto, gnome-mines, gnome-nibbles, lightsoff, warmux
  * new profiles: ts3client_runscript.sh, ferdi, abiword, four-in-a-row
  * new profiles: gnome-mahjongg, gnome-robots, gnome-sudoku, gnome-taquin
  * new profiles: gnome-tetravex, blobwars, gravity-beams-and-evaporating-stars
  * new profiles: hyperrogue, jumpnbump-menu, jumpnbump, magicor, mindless
  * new profiles: mirrormagic, mrrescue, scorched3d-wrapper, scorchwentbonkers
  * new profiles: seahorse-adventures, wordwarvi, xbill, gnome-klotski
  * new profiles: swell-foop, fdns, five-or-more, steam-runtime
  * new profiles: nicotine, plv, mocp, apostrophe, quadrapassel, dino-im
  * new profiles: hitori, bijiben, gnote, gnubik, ZeGrapher, xonotic-sdl-wrapper
  * new profiles: gapplication, openarena_ded, element-desktop, cawbird
  * new profiles: freetube, strawberry, jitsi-meet-desktop
  * new profiles: homebank, mattermost-desktop, newsflash, com.gitlab.newsflash
  * new profiles: sushi, xfce4-screenshooter, org.gnome.NautilusPreviewer, lyx
  * new profiles: minitube, nuclear, mtpaint, minecraft-launcher, gnome-calendar
  * new profiles: vmware, git-cola, otter-browser, kazam, menulibre, musictube
  * new profiles: onboard, fractal, mirage, quaternion, spectral, man, psi
  * new profiles: smuxi-frontend-gnome, balsa, kube, trojita, youtube
  * new profiles: youtubemusic-nativefier, cola, dbus-send, notify-send
  * new profiles: qrencode, ytmdesktop, twitch
  * new profiles: xournalpp, chromium-freeworld, equalx
- remove firejail-0.9.62-fix-usr-etc.patch, included upstream
- remove firejail-apparmor-3.0.diff, included upstream</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1604318400">- packaging fixes</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1611835200">- Update to 0.9.64.2:
  * allow --tmpfs inside $HOME for unprivileged users
  * --disable-usertmpfs compile time option
  * allow AF_BLUETOOTH via --protocol=bluetooth
  * setup guide for new users: contrib/firejail-welcome.sh
  * implement netns in profiles
  * added nolocal6.net IPv6 network filter
  * new profiles: spectacle, chromium-browser-privacy,
    gtk-straw-viewer, gtk-youtube-viewer, gtk2-youtube-viewer,
    gtk3-youtube-viewer, straw-viewer, lutris, dolphin-emu,
    authenticator-rs, servo, npm, marker, yarn, lsar, unar, agetpkg,
    mdr, shotwell, qnapi, new profiles: guvcview, pkglog, kdiff3, CoyIM.</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1612699200">- Update to 0.9.64.4:
  * disabled overlayfs, pending multiple fixes
  * fixed launch firefox for open url in telegram-desktop.profile</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- firejail 0.9.66:
  * deprecated --audit options, relpaced by jailcheck utility
  * deprecated follow-symlink-as-user from firejail.config
  * new firejail.config settings: private-bin, private-etc
  * new firejail.config settings: private-opt, private-srv
  * new firejail.config settings: whitelist-disable-topdir
  * new firejail.config settings: seccomp-filter-add
  * removed kcmp syscall from seccomp default filter
  * rename --noautopulse to keep-config-pulse
  * filtering environment variables
  * zsh completion
  * command line: --mkdir, --mkfile
  * --protocol now accumulates
  * jailtest utility for testing running sandboxes
  * faccessat2 syscall support
  * --private-dev keeps /dev/input
  * added --noinput to disable /dev/input
  * add support for subdirs in --private-etc
  * subdirs support in private-etc
  * input devices support in private-dev, --no-input
  * support trailing comments on profile lines
  * many new profiles
- split shell completion into standard subpackages</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1644148800">- update to firejail 0.9.68:
  - security: on Ubuntu, the PPA is now recommended over the distro package
  - (see README.md) (#4748)
  - security: bugfix: private-cwd leaks access to the entire filesystem
  - (#4780); reported by Hugo Osvaldo Barrera
  - feature: remove (some) environment variables with auth-tokens (#4157)
  - feature: ALLOW_TRAY condition (#4510 #4599)
  - feature: add basic Firejail support to AppArmor base abstraction (#3226
  - #4628)
  - feature: intrusion detection system (--ids-init, --ids-check)
  - feature: deterministic shutdown command (--deterministic-exit-code,
  - --deterministic-shutdown) (#928 #3042 #4635)
  - feature: noprinters command (#4607 #4827)
  - feature: network monitor (--nettrace)
  - feature: network locker (--netlock) (#4848)
  - feature: whitelist-ro profile command (#4740)
  - feature: disable pipewire with --nosound (#4855)
  - feature: Unset TMP if it doesn't exist inside of sandbox (#4151)
  - feature: Allow apostrophe in whitelist and blacklist (#4614)
  - feature: AppImage support in --build command (#4878)
  - modifs: exit code: distinguish fatal signals by adding 128 (#4533)
  - modifs: firecfg.config is now installed to /etc/firejail/ (#408 #4669)
  - modifs: close file descriptors greater than 2 (--keep-fd) (#4845)
  - modifs: nogroups now stopped causing certain system groups to be dropped,
  - which are now controlled by the relevant "no" options instead (such as
  - nosound -&gt; drop audio group), which fixes device access issues on systems
  - not using (e)logind (such as with seatd) (#4632 #4725 #4732 #4851)
  - removal: --disable-whitelist at compile time
  - removal: whitelist=yes/no in /etc/firejail/firejail.config
  - bugfix: Fix sndio support (#4362 #4365)
  - bugfix: Error mounting tmpfs (MS_REMOUNT flag not being cleared) (#4387)
  - bugfix: --build clears the environment (#4460 #4467)
  - bugfix: firejail hangs with net parameter (#3958 #4476)
  - bugfix: Firejail does not work with a custom hosts file (#2758 #4560)
  - bugfix: --tracelog and --trace override /etc/ld.so.preload (#4558 #4586)
  - bugfix: PATH_MAX is undeclared on musl libc (#4578 #4579 #4583 #4606)
  - bugfix: firejail symlinks are not skipped with private-bin + globs (#4626)
  - bugfix: Firejail rejects empty arguments (#4395)
  - bugfix: firecfg does not work with symlinks (discord.desktop) (#4235)
  - bugfix: Seccomp list output goes to stdout instead of stderr (#4328)
  - bugfix: private-etc does not work with symlinks (#4887)
  - bugfix: Hardware key not detected on keepassxc (#4883)
  - build: allow building with address sanitizer (#4594)
  - build: Stop linking pthread (#4695)
  - build: Configure cleanup and improvements (#4712)
  - ci: add profile checks for sorting disable-programs.inc and
  - firecfg.config and for the required arguments in private-etc (#2739 #4643)
  - ci: pin GitHub actions to SHAs and use Dependabot to update them (#4774)
  - docs: Add new command checklist to CONTRIBUTING.md (#4413)
  - docs: Rework bug report issue template and add both a question and a
  - feature request template (#4479 #4515 #4561)
  - docs: fix contradictory descriptions of machine-id ("preserves" vs
  - "spoofs") (#4689)
  - docs: Document that private-bin and private-etc always accumulate (#4078)
  - new includes: whitelist-run-common.inc (#4288), disable-X11.inc (#4462)
  - new includes: disable-proc.inc (#4521)
  - removed includes: disable-passwordmgr.inc (#4454 #4461)
  - new profiles: microsoft-edge-beta, clion-eap, lifeograph, zim
  - new profiles: io.github.lainsce.Notejot, rednotebook, gallery-dl
  - new profiles: yt-dlp, goldendict, goldendict, bundle, cmake
  - new profiles: make, meson, pip, codium, telnet, ftp, OpenStego
  - new profiles: imv, retroarch, torbrowser, CachyBrowser,
  - new profiles: notable, RPCS3, wget2, raincat, conitop, 1passwd,
  - new profiles: Seafile, neovim, com.github.tchx84.Flatseal</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1655208000">- update to version 0.9.70:
  - fix bsc#1199148 CVE-2022-31214
  - security: CVE-2022-31214 - root escalation in --join logic
  - Reported by Matthias Gerstner, working exploit code was provided to our
  - development team. In the same time frame, the problem was independently
  - reported by Birk Blechschmidt. Full working exploit code was also provided.
  - feature: enable shell tab completion with --tab (#4936)
  - feature: disable user profiles at compile time (#4990)
  - feature: Allow resolution of .local names with avahi-daemon in the apparmor
  - profile (#5088)
  - feature: always log seccomp errors (#5110)
  - feature: firecfg --guide, guided user configuration (#5111)
  - feature: --oom, kernel OutOfMemory-killer (#5122)
  - modif: --ids feature needs to be enabled at compile time (#5155)
  - modif: --nettrace only available to root user
  - rework: whitelist restructuring (#4985)
  - rework: firemon, speed up and lots of fixes
  - bugfix: --private-cwd not expanding macros, broken hyperrogue (#4910)
  - bugfix: nogroups + wrc prints confusing messages (#4930 #4933)
  - bugfix: openSUSE Leap - whitelist-run-common.inc (#4954)
  - bugfix: fix printing in evince (#5011)
  - bugfix: gcov: fix gcov functions always declared as dummy (#5028)
  - bugfix: Stop warning on safe supplementary group clean (#5114)
  - build: remove ultimately unused INSTALL and RANLIB check macros (#5133)
  - build: mkdeb.sh.in: pass remaining arguments to ./configure (#5154)
  - ci: replace centos (EOL) with almalinux (#4912)
  - ci: fix --version not printing compile-time features (#5147)
  - ci: print version after install &amp; fix apparmor support on build_apparmor
  - (#5148)
  - docs: Refer to firejail.config in configuration files (#4916)
  - docs: firejail.config: add warning about allow-tray (#4946)
  - docs: mention that the protocol command accumulates (#5043)
  - docs: mention inconsistent homedir bug involving --private=dir (#5052)
  - docs: mention capabilities(7) on --caps (#5078)
  - new profiles: onionshare, onionshare-cli, opera-developer, songrec
  - new profiles: node-gyp, npx, semver, ping-hardened
  - removed profiles: nvm</changelog>
</package>
<package pkgid="71461d85134280b436c9d216bca24d9eabc9621fd87ee7c35ffb168cc96533c5" name="firejail-bash-completion" arch="s390x">
  <version epoch="0" ver="0.9.70" rel="bp154.2.3.1"/>
  <changelog author="avindra@opensuse.org" date="1513166400">- Update to version 0.9.52:
  * New features
    + systemd-resolved integration
    + whitelisted /var in most profiles
    + GTK2, GTK3 and Qt4 private-lib support
    + --debug-private-lib
    + test deployment of private-lib for the some apps: evince,
    galculator, gnome-calculator, leafpad, mousepad,
    transmission-gtk, xcalc, xmr-stak-cpu, atril,
    mate-color-select, tar, file, strings, gpicview, eom, eog,
    gedit, pluma
    + netfilter template support
    + various new arguments
  * --writable-run-user
  * --rlimit-as
  * --rlimit-cpu
  * --timeout
  * --build (profile build tool)
  * --netfilter.print
  * --netfilter6.print
  * deprecations in modif
    + --allow-private-blacklists (blacklisting, read-only,
    read-write, tmpfs and noexec are allowed in private home
    directories
    + remount-proc-sys (firejail.config)
    + follow-symlink-private-bin (firejail.config)
    + --profile-path
  * enhancements
    + support Firejail user config directory in firecfg
    + disable DBus activation in firecfg
    + enumerate root directories in apparmor profile
    + /etc and /usr/share whitelisting support
    + globbing support for --private-bin
  * new profiles: upstreamed profiles from 3 sources:
    + https://github.com/chiraag-nataraj/firejail-profiles
    + https://github.com/nyancat18/fe
    + https://aur.archlinux.org/packages/firejail-profiles
  * new profiles: terasology, surf, rocketchat, clamscan, clamdscan,
    clamdtop, freshclam, xmr-stak-cpu, amule, ardour4, ardour5,
    brackets, calligra, calligraauthor, calligraconverter,
    calligraflow, calligraplan, calligraplanwork, calligrasheets,
    calligrastage, calligrawords, cin, dooble, dooble-qt4,
    fetchmail, freecad, freecadcmd, google-earth,imagej, karbon,
    1kdenlive, krita, linphone, lmms, macrofusion, mpd, natron,
    Natron, ricochet, shotcut, teamspeak3, tor, tor-browser-en,
    Viber, x-terminal-emulator, zart, conky, arch-audit, ffmpeg,
    bluefish, cinelerra, openshot-qt, pinta, uefitool, aosp,
    pdfmod, gnome-ring, xcalc, zaproxy, kopete, cliqz,
    signal-desktop, kget, nheko, Enpass, kwin_x11, krunner, ping,
    bsdtar, makepkg (Arch), archaudit-report cower (Arch), kdeinit4
- Add full link to source tarball from sourceforge
- Add asc file</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1535025600">- Changed the permissions of the firejail executable to 4750.
  Setuid mode is used, but only allowed for users in the newly
  created group 'firejail' (boo#1059013).
- Update to version 0.9.54:
  * modif: --force removed
  * modif: --csh, --zsh removed
  * modif: --debug-check-filename removed
  * modif: --git-install and --git-uninstall removed
  * modif: support for private-bin, private-lib and shell none has been
    disabled while running AppImage archives in order to be able to use
    our regular profile files with AppImages.
  * modif: restrictions for /proc, /sys and /run/user directories
    are moved from AppArmor profile into firejail executable
  * modif: unifying Chromium and Firefox browsers profiles.
    All users of Firefox-based browsers who use addons and plugins
    that read/write from ${HOME} will need to uncomment the includes for
    firefox-common-addons.inc in firefox-common.profile.
  * modif: split disable-devel.inc into disable-devel and
    disable-interpreters.inc
  * Firejail user access database (/etc/firejail/firejail.users,
    man firejail-users)
  * add --noautopulse to disable automatic ~/.config/pulse (for complex setups)
  * Spectre mitigation patch for gcc and clang compiler
  * D-Bus handling (--nodbus)
  * AppArmor support for overlayfs and chroot sandboxes
  * AppArmor support for AppImages
  * Enable AppArmor by default for a large number of programs
  * firejail --apparmor.print option
  * firemon --apparmor option
  * apparmor yes/no flag in /etc/firejail/firejail.config
  * seccomp syscall list update for glibc 2.26-10
  * seccomp disassembler for --seccomp.print option
  * seccomp machine code optimizer for default seccomp filters
  * IPv6 DNS support
  * whitelist support for overlay and chroot sandboxes
  * private-dev support for overlay and chroot sandboxes
  * private-tmp support for overlay and chroot sandboxes
  * added sandbox name support in firemon
  * firemon/prctl enhancements
  * noblacklist support for /sys/module directory
  * whitelist support for /sys/module directory
  * new profiles: basilisk, Tor Browser language packs, PlayOnLinux, sylpheed,
  * new profiles: discord-canary, pycharm-community, pycharm-professional,
  * new profiles: pdfchain, tilp, vivaldi-snapshot, bitcoin-qt, kaffeine,
  * new profiles: falkon, gnome-builder, asunder, VS Code, gnome-recipes,
  * new profiles: akonadi_controle, evince-previewer, evince-thumbnailer,
  * new profiles: blender-2.8, thunderbird-beta, ncdu, gnome-logs, gcloud,
  * new profiles: musixmatch, gunzip, bunzip2, enchant-lsmod, enchant-lsmod-2,
  * new profiles: enchant, enchant-2, Discord, acat, adiff, als, apack,
  * new profiles: arepack, aunpack profiles, ppsspp, scallion, clion,
  * new profiles: baloo_filemetadata_temp_extractor, AnyDesk, webstorm, xmind,
  * new profiles: qmmp, sayonara</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1536580800">- Remove the rpmlintrc file since the warnings are no longer relevant.</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1536667200">- Drop ldconfig calls since firejail libraries are installed in their
  own subdirectory which is not scanned by ldconfig.</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1537617600">- update to version 0.9.56:
  * modif: removed CFG_CHROOT_DESKTOP configuration option
  * modif: removed compile time --enable-network=restricted
  * modif: removed compile time --disable-bind
  * modif: --net=none allowed even if networking was disabled at compile
    time or at run time
  * modif: allow system users to run the sandbox
  * support wireless devices in --net option
  * support tap devices in --net option (tunneling support)
  * allow IP address configuration if the parent interface specified
    by --net is not configured (--netmask)
  * support for firetunnel utility
  * disable U2F devices (--nou2f)
  * add --private-cache to support private ~/.cache
  * support full paths in private-lib
  * globbing support in private-lib
  * support for local user directories in firecfg (--bindir)
  * new profiles: ms-excel, ms-office, ms-onenote, ms-outlook, ms-powerpoint,
  * new profiles: ms-skype, ms-word, riot-desktop, gnome-mpv, snox, gradio,
  * new profiles: standardnotes-desktop, shellcheck, patch, flameshot,
  * new profiles: rview, rvim, vimcat, vimdiff, vimpager, vimtutor, xxd,
  * new profiles: Beaker, electrum, clamtk, pybitmessage, dig, whois,
  * new profiles: jdownloader, Fluxbox, Blackbox, Awesome, i3
  * new profiles: start-tor-browser.desktop</changelog>
  <changelog author="info@paolostivanin.com" date="1549022400">-  update to version 0.9.58:
  * --disable-mnt rework
  * --net.print command
  * GitLab CI/CD integration: disto specific builds
  * profile parser enhancements and conditional handling support
    for HAS_APPIMAGE, HAS_NODBUS, BROWSER_DISABLE_U2F
  * profile name support
  * added explicit nonewprivs support to join option
  * new profiles: QMediathekView, aria2c, Authenticator, checkbashisms
  * new profiles: devilspie, devilspie2, easystroke, github-desktop, min
  * new profiles: bsdcat, bsdcpio, bsdtar, lzmadec, lbunzip2, lbzcat
  * new profiles: lbzip2, lzcat, lzcmp, lzdiff, lzegrep, lzfgrep, lzgrep
  * new profiles: lzless, lzma, lzmainfo, lzmore, unlzma, unxz, xzcat
  * new profiles: xzcmp, xzdiff, xzegrep, xzfgrep, xzgrep, xzless, xzmore
  * new profiles: lzip, artha, nitroshare, nitroshare-cli, nitroshare-nmh
  * new profiles: nirtoshare-send, nitroshare-ui, mencoder, gnome-pie
  * new profiles: masterpdfeditor, QOwnNotes, aisleriot, Mendeley
  * new profiles: feedreader, ocenaudio, mpsyt, thunderbird-wayland
  * new profiles: supertuxkart, ghostwriter, gajim-history-manager
  * bugfixes</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1559476800">- update to version 0.9.60:
  * security bug reported by Austin Morton:
  Seccomp filters are copied into /run/firejail/mnt, and are writable
  within the jail. A malicious process can modify files from inside the
  jail. Processes that are later joined to the jail will not have seccomp
  filters applied.
  CVE-2019-12589
  boo#1137139
  * memory-deny-write-execute now also blocks memfd_create
  * add private-cwd option to control working directory within jail
  * blocking system D-Bus socket with --nodbus
  * bringing back Centos 6 support
  * drop support for flatpak/snap packages
  * new profiles: crow, nyx, mypaint, celluoid, nano, transgui, mpdris2
  * new profiles: sysprof, simplescreenrecorder, geekbench, xfce4-mixer
  * new profiles: pavucontrol, d-feet, seahorse, secret-tool, gnome-keyring
  * new profiles: regextester, hardinfo, gnome-system-log, gnome-nettool
  * new profiles: netactview, redshift, devhelp, assogiate, subdownloader
  * new profiles: font-manager, exfalso, gconf-editor, dconf-editor
  * new profiles: sysprof-cli, seahorse-tool, secret-tool, dconf, gsettings
  * new profiles: code-oss, pragha, Maelstrom, ostrichriders, bzflag
  * new profiles: freeciv, lincity-ng, megaglest, openttd, crawl, crawl-tiles
  * new profiles: teeworlds, torcs, tremulous, warsow, lugaru, manaplus
  * new profiles: pioneer, scorched3d, widelands, freemind, kid3, kid3-qt
  * new profiles: kid3-cli, nomacs, freecol, opencity, openclonk, slashem
  * new profiles: vultureseye, vulturesclaw, anki, cheese, utox, mp3splt
  * new profiles: oggsplt, flacsplt, gramps, newsboat, freeoffice-planmaker
  * new profiles: autokey-gtk, autokey-qt, autokey-run, autokey-shell
  * new profiles: freeoffice-presentations, freeoffice-textmaker, mp3wrap
  * new profiles: inkview, meteo-qt, mp3splt-gtk, ktouch, yelp, cantata</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1581422400">- update to version 0.9.62
  * added file-copy-limit in /etc/firejail/firejail.config
  * profile templates (/usr/share/doc/firejail)
  * allow-debuggers support in profiles
  * several seccomp enhancements
  * compiler flags autodetection
  * move chroot entirely from path based to file descriptor based mounts
  * whitelisting /usr/share in a large number of profiles
  * new scripts in conrib: gdb-firejail.sh and sort.py
  * enhancement: whitelist /usr/share in some profiles
  * added signal mediation to apparmor profile
  * new conditions: HAS_X11, HAS_NET
  * new profiles: qgis, klatexformula, klatexformula_cmdl, links, xlinks
  * new profiles: pandoc, teams-for-linux, OpenArena, gnome-sound-recorder
  * new profiles: godot, tcpdump, tshark, newsbeuter, keepassxc-cli
  * new profiles: keepassxc-proxy, rhythmbox-client, jerry, zeal, mpg123
  * new profiles: conplay, mpg123.bin, mpg123-alsa, mpg123-id3dump, out123
  * new profiles: mpg123-jack, mpg123-nas, mpg123-openal, mpg123-oss
  * new profiles: mpg123-portaudio, mpg123-pulse, mpg123-strip, pavucontrol-qt
  * new profiles: gnome-characters, gnome-character-map, rsync, Whalebird,
  * new profiles: tor-browser (AUR), Zulip, tb-starter-wrapper, bzcat,
  * new profiles: kiwix-desktop, bzcat, zstd, pzstd, zstdcat, zstdgrep, zstdless
  * new profiles: zstdmt, unzstd, i2p, ar, gnome-latex, pngquant, kalgebra
  * new profiles: kalgebramobile, signal-cli, amuled, kfind, profanity
  * new profiles: audio-recorder, cameramonitor, ddgtk, drawio, unf, gmpc
  * new profiles: electron-mail, gist, gist-paste</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1588161600">- Add firejail-0.9.62-fix-usr-etc.patch:
  Check /usr/etc not just /etc
- Replace python interpreter line in sort.py</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1596888000">- Add patches fix-CVE-2020-17367.patch and fix-CVE-2020-17368.patch to fix CVE-2020-17367 and CVE-2020-17368 and boo#1174986</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1597320000">- Update to 0.9.62.2
  * fix CVE-2020-17367
  * fix CVE-2020-17368
  * additional hardening and bug fixes
- Remove fix-CVE-2020-17368.patch
- Remove fix-CVE-2020-17367.patch</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1597838400">- Update to 0.9.62.4
  * fix AppArmor broken in the previous release
  * miscellaneous fixes</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1603713600">- Add firejail-apparmor-3.0.diff to make the AppArmor profile compatible with
  AppArmor 3.0 (add missing include &lt;tunables/global&gt;)</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1604232000">- Update to version 0.9.64:
  * replaced --nowrap option with --wrap in firemon
  * The blocking action of seccomp filters has been changed from
    killing the process to returning EPERM to the caller. To get the
    previous behaviour, use --seccomp-error-action=kill or
    syscall:kill syntax when constructing filters, or override in
    /etc/firejail/firejail.config file.
  * Fine-grained D-Bus sandboxing with xdg-dbus-proxy.
    xdg-dbus-proxy must be installed, if not D-Bus access will be allowed.
    With this version nodbus is deprecated, in favor of dbus-user none and
    dbus-system none and will be removed in a future version.
  * DHCP client support
  * firecfg only fix dektop-files if started with sudo
  * SELinux labeling support
  * custom 32-bit seccomp filter support
  * restrict ${RUNUSER} in several profiles
  * blacklist shells such as bash in several profiles
  * whitelist globbing
  * mkdir and mkfile support for /run/user directory
  * support ignore for include
  * --include on the command line
  * splitting up media players whitelists in whitelist-players.inc
  * new condition: HAS_NOSOUND
  * new profiles: gfeeds, firefox-x11, tvbrowser, rtv, clipgrab, muraster
  * new profiles: gnome-passwordsafe, bibtex, gummi, latex, mupdf-x11-curl
  * new profiles: pdflatex, tex, wpp, wpspdf, wps, et, multimc, mupdf-x11
  * new profiles: gnome-hexgl, com.github.johnfactotum.Foliate, mupdf-gl, mutool
  * new profiles: desktopeditors, impressive, planmaker18, planmaker18free
  * new profiles: presentations18, presentations18free, textmaker18, teams
  * new profiles: textmaker18free, xournal, gnome-screenshot, ripperX
  * new profiles: sound-juicer, com.github.dahenson.agenda, gnome-pomodoro
  * new profiles: gnome-todo, x2goclient, iagno, kmplayer, penguin-command
  * new profiles: frogatto, gnome-mines, gnome-nibbles, lightsoff, warmux
  * new profiles: ts3client_runscript.sh, ferdi, abiword, four-in-a-row
  * new profiles: gnome-mahjongg, gnome-robots, gnome-sudoku, gnome-taquin
  * new profiles: gnome-tetravex, blobwars, gravity-beams-and-evaporating-stars
  * new profiles: hyperrogue, jumpnbump-menu, jumpnbump, magicor, mindless
  * new profiles: mirrormagic, mrrescue, scorched3d-wrapper, scorchwentbonkers
  * new profiles: seahorse-adventures, wordwarvi, xbill, gnome-klotski
  * new profiles: swell-foop, fdns, five-or-more, steam-runtime
  * new profiles: nicotine, plv, mocp, apostrophe, quadrapassel, dino-im
  * new profiles: hitori, bijiben, gnote, gnubik, ZeGrapher, xonotic-sdl-wrapper
  * new profiles: gapplication, openarena_ded, element-desktop, cawbird
  * new profiles: freetube, strawberry, jitsi-meet-desktop
  * new profiles: homebank, mattermost-desktop, newsflash, com.gitlab.newsflash
  * new profiles: sushi, xfce4-screenshooter, org.gnome.NautilusPreviewer, lyx
  * new profiles: minitube, nuclear, mtpaint, minecraft-launcher, gnome-calendar
  * new profiles: vmware, git-cola, otter-browser, kazam, menulibre, musictube
  * new profiles: onboard, fractal, mirage, quaternion, spectral, man, psi
  * new profiles: smuxi-frontend-gnome, balsa, kube, trojita, youtube
  * new profiles: youtubemusic-nativefier, cola, dbus-send, notify-send
  * new profiles: qrencode, ytmdesktop, twitch
  * new profiles: xournalpp, chromium-freeworld, equalx
- remove firejail-0.9.62-fix-usr-etc.patch, included upstream
- remove firejail-apparmor-3.0.diff, included upstream</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1604318400">- packaging fixes</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1611835200">- Update to 0.9.64.2:
  * allow --tmpfs inside $HOME for unprivileged users
  * --disable-usertmpfs compile time option
  * allow AF_BLUETOOTH via --protocol=bluetooth
  * setup guide for new users: contrib/firejail-welcome.sh
  * implement netns in profiles
  * added nolocal6.net IPv6 network filter
  * new profiles: spectacle, chromium-browser-privacy,
    gtk-straw-viewer, gtk-youtube-viewer, gtk2-youtube-viewer,
    gtk3-youtube-viewer, straw-viewer, lutris, dolphin-emu,
    authenticator-rs, servo, npm, marker, yarn, lsar, unar, agetpkg,
    mdr, shotwell, qnapi, new profiles: guvcview, pkglog, kdiff3, CoyIM.</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1612699200">- Update to 0.9.64.4:
  * disabled overlayfs, pending multiple fixes
  * fixed launch firefox for open url in telegram-desktop.profile</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- firejail 0.9.66:
  * deprecated --audit options, relpaced by jailcheck utility
  * deprecated follow-symlink-as-user from firejail.config
  * new firejail.config settings: private-bin, private-etc
  * new firejail.config settings: private-opt, private-srv
  * new firejail.config settings: whitelist-disable-topdir
  * new firejail.config settings: seccomp-filter-add
  * removed kcmp syscall from seccomp default filter
  * rename --noautopulse to keep-config-pulse
  * filtering environment variables
  * zsh completion
  * command line: --mkdir, --mkfile
  * --protocol now accumulates
  * jailtest utility for testing running sandboxes
  * faccessat2 syscall support
  * --private-dev keeps /dev/input
  * added --noinput to disable /dev/input
  * add support for subdirs in --private-etc
  * subdirs support in private-etc
  * input devices support in private-dev, --no-input
  * support trailing comments on profile lines
  * many new profiles
- split shell completion into standard subpackages</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1644148800">- update to firejail 0.9.68:
  - security: on Ubuntu, the PPA is now recommended over the distro package
  - (see README.md) (#4748)
  - security: bugfix: private-cwd leaks access to the entire filesystem
  - (#4780); reported by Hugo Osvaldo Barrera
  - feature: remove (some) environment variables with auth-tokens (#4157)
  - feature: ALLOW_TRAY condition (#4510 #4599)
  - feature: add basic Firejail support to AppArmor base abstraction (#3226
  - #4628)
  - feature: intrusion detection system (--ids-init, --ids-check)
  - feature: deterministic shutdown command (--deterministic-exit-code,
  - --deterministic-shutdown) (#928 #3042 #4635)
  - feature: noprinters command (#4607 #4827)
  - feature: network monitor (--nettrace)
  - feature: network locker (--netlock) (#4848)
  - feature: whitelist-ro profile command (#4740)
  - feature: disable pipewire with --nosound (#4855)
  - feature: Unset TMP if it doesn't exist inside of sandbox (#4151)
  - feature: Allow apostrophe in whitelist and blacklist (#4614)
  - feature: AppImage support in --build command (#4878)
  - modifs: exit code: distinguish fatal signals by adding 128 (#4533)
  - modifs: firecfg.config is now installed to /etc/firejail/ (#408 #4669)
  - modifs: close file descriptors greater than 2 (--keep-fd) (#4845)
  - modifs: nogroups now stopped causing certain system groups to be dropped,
  - which are now controlled by the relevant "no" options instead (such as
  - nosound -&gt; drop audio group), which fixes device access issues on systems
  - not using (e)logind (such as with seatd) (#4632 #4725 #4732 #4851)
  - removal: --disable-whitelist at compile time
  - removal: whitelist=yes/no in /etc/firejail/firejail.config
  - bugfix: Fix sndio support (#4362 #4365)
  - bugfix: Error mounting tmpfs (MS_REMOUNT flag not being cleared) (#4387)
  - bugfix: --build clears the environment (#4460 #4467)
  - bugfix: firejail hangs with net parameter (#3958 #4476)
  - bugfix: Firejail does not work with a custom hosts file (#2758 #4560)
  - bugfix: --tracelog and --trace override /etc/ld.so.preload (#4558 #4586)
  - bugfix: PATH_MAX is undeclared on musl libc (#4578 #4579 #4583 #4606)
  - bugfix: firejail symlinks are not skipped with private-bin + globs (#4626)
  - bugfix: Firejail rejects empty arguments (#4395)
  - bugfix: firecfg does not work with symlinks (discord.desktop) (#4235)
  - bugfix: Seccomp list output goes to stdout instead of stderr (#4328)
  - bugfix: private-etc does not work with symlinks (#4887)
  - bugfix: Hardware key not detected on keepassxc (#4883)
  - build: allow building with address sanitizer (#4594)
  - build: Stop linking pthread (#4695)
  - build: Configure cleanup and improvements (#4712)
  - ci: add profile checks for sorting disable-programs.inc and
  - firecfg.config and for the required arguments in private-etc (#2739 #4643)
  - ci: pin GitHub actions to SHAs and use Dependabot to update them (#4774)
  - docs: Add new command checklist to CONTRIBUTING.md (#4413)
  - docs: Rework bug report issue template and add both a question and a
  - feature request template (#4479 #4515 #4561)
  - docs: fix contradictory descriptions of machine-id ("preserves" vs
  - "spoofs") (#4689)
  - docs: Document that private-bin and private-etc always accumulate (#4078)
  - new includes: whitelist-run-common.inc (#4288), disable-X11.inc (#4462)
  - new includes: disable-proc.inc (#4521)
  - removed includes: disable-passwordmgr.inc (#4454 #4461)
  - new profiles: microsoft-edge-beta, clion-eap, lifeograph, zim
  - new profiles: io.github.lainsce.Notejot, rednotebook, gallery-dl
  - new profiles: yt-dlp, goldendict, goldendict, bundle, cmake
  - new profiles: make, meson, pip, codium, telnet, ftp, OpenStego
  - new profiles: imv, retroarch, torbrowser, CachyBrowser,
  - new profiles: notable, RPCS3, wget2, raincat, conitop, 1passwd,
  - new profiles: Seafile, neovim, com.github.tchx84.Flatseal</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1655208000">- update to version 0.9.70:
  - fix bsc#1199148 CVE-2022-31214
  - security: CVE-2022-31214 - root escalation in --join logic
  - Reported by Matthias Gerstner, working exploit code was provided to our
  - development team. In the same time frame, the problem was independently
  - reported by Birk Blechschmidt. Full working exploit code was also provided.
  - feature: enable shell tab completion with --tab (#4936)
  - feature: disable user profiles at compile time (#4990)
  - feature: Allow resolution of .local names with avahi-daemon in the apparmor
  - profile (#5088)
  - feature: always log seccomp errors (#5110)
  - feature: firecfg --guide, guided user configuration (#5111)
  - feature: --oom, kernel OutOfMemory-killer (#5122)
  - modif: --ids feature needs to be enabled at compile time (#5155)
  - modif: --nettrace only available to root user
  - rework: whitelist restructuring (#4985)
  - rework: firemon, speed up and lots of fixes
  - bugfix: --private-cwd not expanding macros, broken hyperrogue (#4910)
  - bugfix: nogroups + wrc prints confusing messages (#4930 #4933)
  - bugfix: openSUSE Leap - whitelist-run-common.inc (#4954)
  - bugfix: fix printing in evince (#5011)
  - bugfix: gcov: fix gcov functions always declared as dummy (#5028)
  - bugfix: Stop warning on safe supplementary group clean (#5114)
  - build: remove ultimately unused INSTALL and RANLIB check macros (#5133)
  - build: mkdeb.sh.in: pass remaining arguments to ./configure (#5154)
  - ci: replace centos (EOL) with almalinux (#4912)
  - ci: fix --version not printing compile-time features (#5147)
  - ci: print version after install &amp; fix apparmor support on build_apparmor
  - (#5148)
  - docs: Refer to firejail.config in configuration files (#4916)
  - docs: firejail.config: add warning about allow-tray (#4946)
  - docs: mention that the protocol command accumulates (#5043)
  - docs: mention inconsistent homedir bug involving --private=dir (#5052)
  - docs: mention capabilities(7) on --caps (#5078)
  - new profiles: onionshare, onionshare-cli, opera-developer, songrec
  - new profiles: node-gyp, npx, semver, ping-hardened
  - removed profiles: nvm</changelog>
</package>
<package pkgid="0f749d3eedfd2a0fd55ec308650d6ebf45e73df1202988b97d6f7596ae041175" name="firejail-bash-completion" arch="x86_64">
  <version epoch="0" ver="0.9.70" rel="bp154.2.3.1"/>
  <changelog author="avindra@opensuse.org" date="1513166400">- Update to version 0.9.52:
  * New features
    + systemd-resolved integration
    + whitelisted /var in most profiles
    + GTK2, GTK3 and Qt4 private-lib support
    + --debug-private-lib
    + test deployment of private-lib for the some apps: evince,
    galculator, gnome-calculator, leafpad, mousepad,
    transmission-gtk, xcalc, xmr-stak-cpu, atril,
    mate-color-select, tar, file, strings, gpicview, eom, eog,
    gedit, pluma
    + netfilter template support
    + various new arguments
  * --writable-run-user
  * --rlimit-as
  * --rlimit-cpu
  * --timeout
  * --build (profile build tool)
  * --netfilter.print
  * --netfilter6.print
  * deprecations in modif
    + --allow-private-blacklists (blacklisting, read-only,
    read-write, tmpfs and noexec are allowed in private home
    directories
    + remount-proc-sys (firejail.config)
    + follow-symlink-private-bin (firejail.config)
    + --profile-path
  * enhancements
    + support Firejail user config directory in firecfg
    + disable DBus activation in firecfg
    + enumerate root directories in apparmor profile
    + /etc and /usr/share whitelisting support
    + globbing support for --private-bin
  * new profiles: upstreamed profiles from 3 sources:
    + https://github.com/chiraag-nataraj/firejail-profiles
    + https://github.com/nyancat18/fe
    + https://aur.archlinux.org/packages/firejail-profiles
  * new profiles: terasology, surf, rocketchat, clamscan, clamdscan,
    clamdtop, freshclam, xmr-stak-cpu, amule, ardour4, ardour5,
    brackets, calligra, calligraauthor, calligraconverter,
    calligraflow, calligraplan, calligraplanwork, calligrasheets,
    calligrastage, calligrawords, cin, dooble, dooble-qt4,
    fetchmail, freecad, freecadcmd, google-earth,imagej, karbon,
    1kdenlive, krita, linphone, lmms, macrofusion, mpd, natron,
    Natron, ricochet, shotcut, teamspeak3, tor, tor-browser-en,
    Viber, x-terminal-emulator, zart, conky, arch-audit, ffmpeg,
    bluefish, cinelerra, openshot-qt, pinta, uefitool, aosp,
    pdfmod, gnome-ring, xcalc, zaproxy, kopete, cliqz,
    signal-desktop, kget, nheko, Enpass, kwin_x11, krunner, ping,
    bsdtar, makepkg (Arch), archaudit-report cower (Arch), kdeinit4
- Add full link to source tarball from sourceforge
- Add asc file</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1535025600">- Changed the permissions of the firejail executable to 4750.
  Setuid mode is used, but only allowed for users in the newly
  created group 'firejail' (boo#1059013).
- Update to version 0.9.54:
  * modif: --force removed
  * modif: --csh, --zsh removed
  * modif: --debug-check-filename removed
  * modif: --git-install and --git-uninstall removed
  * modif: support for private-bin, private-lib and shell none has been
    disabled while running AppImage archives in order to be able to use
    our regular profile files with AppImages.
  * modif: restrictions for /proc, /sys and /run/user directories
    are moved from AppArmor profile into firejail executable
  * modif: unifying Chromium and Firefox browsers profiles.
    All users of Firefox-based browsers who use addons and plugins
    that read/write from ${HOME} will need to uncomment the includes for
    firefox-common-addons.inc in firefox-common.profile.
  * modif: split disable-devel.inc into disable-devel and
    disable-interpreters.inc
  * Firejail user access database (/etc/firejail/firejail.users,
    man firejail-users)
  * add --noautopulse to disable automatic ~/.config/pulse (for complex setups)
  * Spectre mitigation patch for gcc and clang compiler
  * D-Bus handling (--nodbus)
  * AppArmor support for overlayfs and chroot sandboxes
  * AppArmor support for AppImages
  * Enable AppArmor by default for a large number of programs
  * firejail --apparmor.print option
  * firemon --apparmor option
  * apparmor yes/no flag in /etc/firejail/firejail.config
  * seccomp syscall list update for glibc 2.26-10
  * seccomp disassembler for --seccomp.print option
  * seccomp machine code optimizer for default seccomp filters
  * IPv6 DNS support
  * whitelist support for overlay and chroot sandboxes
  * private-dev support for overlay and chroot sandboxes
  * private-tmp support for overlay and chroot sandboxes
  * added sandbox name support in firemon
  * firemon/prctl enhancements
  * noblacklist support for /sys/module directory
  * whitelist support for /sys/module directory
  * new profiles: basilisk, Tor Browser language packs, PlayOnLinux, sylpheed,
  * new profiles: discord-canary, pycharm-community, pycharm-professional,
  * new profiles: pdfchain, tilp, vivaldi-snapshot, bitcoin-qt, kaffeine,
  * new profiles: falkon, gnome-builder, asunder, VS Code, gnome-recipes,
  * new profiles: akonadi_controle, evince-previewer, evince-thumbnailer,
  * new profiles: blender-2.8, thunderbird-beta, ncdu, gnome-logs, gcloud,
  * new profiles: musixmatch, gunzip, bunzip2, enchant-lsmod, enchant-lsmod-2,
  * new profiles: enchant, enchant-2, Discord, acat, adiff, als, apack,
  * new profiles: arepack, aunpack profiles, ppsspp, scallion, clion,
  * new profiles: baloo_filemetadata_temp_extractor, AnyDesk, webstorm, xmind,
  * new profiles: qmmp, sayonara</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1536580800">- Remove the rpmlintrc file since the warnings are no longer relevant.</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1536667200">- Drop ldconfig calls since firejail libraries are installed in their
  own subdirectory which is not scanned by ldconfig.</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1537617600">- update to version 0.9.56:
  * modif: removed CFG_CHROOT_DESKTOP configuration option
  * modif: removed compile time --enable-network=restricted
  * modif: removed compile time --disable-bind
  * modif: --net=none allowed even if networking was disabled at compile
    time or at run time
  * modif: allow system users to run the sandbox
  * support wireless devices in --net option
  * support tap devices in --net option (tunneling support)
  * allow IP address configuration if the parent interface specified
    by --net is not configured (--netmask)
  * support for firetunnel utility
  * disable U2F devices (--nou2f)
  * add --private-cache to support private ~/.cache
  * support full paths in private-lib
  * globbing support in private-lib
  * support for local user directories in firecfg (--bindir)
  * new profiles: ms-excel, ms-office, ms-onenote, ms-outlook, ms-powerpoint,
  * new profiles: ms-skype, ms-word, riot-desktop, gnome-mpv, snox, gradio,
  * new profiles: standardnotes-desktop, shellcheck, patch, flameshot,
  * new profiles: rview, rvim, vimcat, vimdiff, vimpager, vimtutor, xxd,
  * new profiles: Beaker, electrum, clamtk, pybitmessage, dig, whois,
  * new profiles: jdownloader, Fluxbox, Blackbox, Awesome, i3
  * new profiles: start-tor-browser.desktop</changelog>
  <changelog author="info@paolostivanin.com" date="1549022400">-  update to version 0.9.58:
  * --disable-mnt rework
  * --net.print command
  * GitLab CI/CD integration: disto specific builds
  * profile parser enhancements and conditional handling support
    for HAS_APPIMAGE, HAS_NODBUS, BROWSER_DISABLE_U2F
  * profile name support
  * added explicit nonewprivs support to join option
  * new profiles: QMediathekView, aria2c, Authenticator, checkbashisms
  * new profiles: devilspie, devilspie2, easystroke, github-desktop, min
  * new profiles: bsdcat, bsdcpio, bsdtar, lzmadec, lbunzip2, lbzcat
  * new profiles: lbzip2, lzcat, lzcmp, lzdiff, lzegrep, lzfgrep, lzgrep
  * new profiles: lzless, lzma, lzmainfo, lzmore, unlzma, unxz, xzcat
  * new profiles: xzcmp, xzdiff, xzegrep, xzfgrep, xzgrep, xzless, xzmore
  * new profiles: lzip, artha, nitroshare, nitroshare-cli, nitroshare-nmh
  * new profiles: nirtoshare-send, nitroshare-ui, mencoder, gnome-pie
  * new profiles: masterpdfeditor, QOwnNotes, aisleriot, Mendeley
  * new profiles: feedreader, ocenaudio, mpsyt, thunderbird-wayland
  * new profiles: supertuxkart, ghostwriter, gajim-history-manager
  * bugfixes</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1559476800">- update to version 0.9.60:
  * security bug reported by Austin Morton:
  Seccomp filters are copied into /run/firejail/mnt, and are writable
  within the jail. A malicious process can modify files from inside the
  jail. Processes that are later joined to the jail will not have seccomp
  filters applied.
  CVE-2019-12589
  boo#1137139
  * memory-deny-write-execute now also blocks memfd_create
  * add private-cwd option to control working directory within jail
  * blocking system D-Bus socket with --nodbus
  * bringing back Centos 6 support
  * drop support for flatpak/snap packages
  * new profiles: crow, nyx, mypaint, celluoid, nano, transgui, mpdris2
  * new profiles: sysprof, simplescreenrecorder, geekbench, xfce4-mixer
  * new profiles: pavucontrol, d-feet, seahorse, secret-tool, gnome-keyring
  * new profiles: regextester, hardinfo, gnome-system-log, gnome-nettool
  * new profiles: netactview, redshift, devhelp, assogiate, subdownloader
  * new profiles: font-manager, exfalso, gconf-editor, dconf-editor
  * new profiles: sysprof-cli, seahorse-tool, secret-tool, dconf, gsettings
  * new profiles: code-oss, pragha, Maelstrom, ostrichriders, bzflag
  * new profiles: freeciv, lincity-ng, megaglest, openttd, crawl, crawl-tiles
  * new profiles: teeworlds, torcs, tremulous, warsow, lugaru, manaplus
  * new profiles: pioneer, scorched3d, widelands, freemind, kid3, kid3-qt
  * new profiles: kid3-cli, nomacs, freecol, opencity, openclonk, slashem
  * new profiles: vultureseye, vulturesclaw, anki, cheese, utox, mp3splt
  * new profiles: oggsplt, flacsplt, gramps, newsboat, freeoffice-planmaker
  * new profiles: autokey-gtk, autokey-qt, autokey-run, autokey-shell
  * new profiles: freeoffice-presentations, freeoffice-textmaker, mp3wrap
  * new profiles: inkview, meteo-qt, mp3splt-gtk, ktouch, yelp, cantata</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1581422400">- update to version 0.9.62
  * added file-copy-limit in /etc/firejail/firejail.config
  * profile templates (/usr/share/doc/firejail)
  * allow-debuggers support in profiles
  * several seccomp enhancements
  * compiler flags autodetection
  * move chroot entirely from path based to file descriptor based mounts
  * whitelisting /usr/share in a large number of profiles
  * new scripts in conrib: gdb-firejail.sh and sort.py
  * enhancement: whitelist /usr/share in some profiles
  * added signal mediation to apparmor profile
  * new conditions: HAS_X11, HAS_NET
  * new profiles: qgis, klatexformula, klatexformula_cmdl, links, xlinks
  * new profiles: pandoc, teams-for-linux, OpenArena, gnome-sound-recorder
  * new profiles: godot, tcpdump, tshark, newsbeuter, keepassxc-cli
  * new profiles: keepassxc-proxy, rhythmbox-client, jerry, zeal, mpg123
  * new profiles: conplay, mpg123.bin, mpg123-alsa, mpg123-id3dump, out123
  * new profiles: mpg123-jack, mpg123-nas, mpg123-openal, mpg123-oss
  * new profiles: mpg123-portaudio, mpg123-pulse, mpg123-strip, pavucontrol-qt
  * new profiles: gnome-characters, gnome-character-map, rsync, Whalebird,
  * new profiles: tor-browser (AUR), Zulip, tb-starter-wrapper, bzcat,
  * new profiles: kiwix-desktop, bzcat, zstd, pzstd, zstdcat, zstdgrep, zstdless
  * new profiles: zstdmt, unzstd, i2p, ar, gnome-latex, pngquant, kalgebra
  * new profiles: kalgebramobile, signal-cli, amuled, kfind, profanity
  * new profiles: audio-recorder, cameramonitor, ddgtk, drawio, unf, gmpc
  * new profiles: electron-mail, gist, gist-paste</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1588161600">- Add firejail-0.9.62-fix-usr-etc.patch:
  Check /usr/etc not just /etc
- Replace python interpreter line in sort.py</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1596888000">- Add patches fix-CVE-2020-17367.patch and fix-CVE-2020-17368.patch to fix CVE-2020-17367 and CVE-2020-17368 and boo#1174986</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1597320000">- Update to 0.9.62.2
  * fix CVE-2020-17367
  * fix CVE-2020-17368
  * additional hardening and bug fixes
- Remove fix-CVE-2020-17368.patch
- Remove fix-CVE-2020-17367.patch</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1597838400">- Update to 0.9.62.4
  * fix AppArmor broken in the previous release
  * miscellaneous fixes</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1603713600">- Add firejail-apparmor-3.0.diff to make the AppArmor profile compatible with
  AppArmor 3.0 (add missing include &lt;tunables/global&gt;)</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1604232000">- Update to version 0.9.64:
  * replaced --nowrap option with --wrap in firemon
  * The blocking action of seccomp filters has been changed from
    killing the process to returning EPERM to the caller. To get the
    previous behaviour, use --seccomp-error-action=kill or
    syscall:kill syntax when constructing filters, or override in
    /etc/firejail/firejail.config file.
  * Fine-grained D-Bus sandboxing with xdg-dbus-proxy.
    xdg-dbus-proxy must be installed, if not D-Bus access will be allowed.
    With this version nodbus is deprecated, in favor of dbus-user none and
    dbus-system none and will be removed in a future version.
  * DHCP client support
  * firecfg only fix dektop-files if started with sudo
  * SELinux labeling support
  * custom 32-bit seccomp filter support
  * restrict ${RUNUSER} in several profiles
  * blacklist shells such as bash in several profiles
  * whitelist globbing
  * mkdir and mkfile support for /run/user directory
  * support ignore for include
  * --include on the command line
  * splitting up media players whitelists in whitelist-players.inc
  * new condition: HAS_NOSOUND
  * new profiles: gfeeds, firefox-x11, tvbrowser, rtv, clipgrab, muraster
  * new profiles: gnome-passwordsafe, bibtex, gummi, latex, mupdf-x11-curl
  * new profiles: pdflatex, tex, wpp, wpspdf, wps, et, multimc, mupdf-x11
  * new profiles: gnome-hexgl, com.github.johnfactotum.Foliate, mupdf-gl, mutool
  * new profiles: desktopeditors, impressive, planmaker18, planmaker18free
  * new profiles: presentations18, presentations18free, textmaker18, teams
  * new profiles: textmaker18free, xournal, gnome-screenshot, ripperX
  * new profiles: sound-juicer, com.github.dahenson.agenda, gnome-pomodoro
  * new profiles: gnome-todo, x2goclient, iagno, kmplayer, penguin-command
  * new profiles: frogatto, gnome-mines, gnome-nibbles, lightsoff, warmux
  * new profiles: ts3client_runscript.sh, ferdi, abiword, four-in-a-row
  * new profiles: gnome-mahjongg, gnome-robots, gnome-sudoku, gnome-taquin
  * new profiles: gnome-tetravex, blobwars, gravity-beams-and-evaporating-stars
  * new profiles: hyperrogue, jumpnbump-menu, jumpnbump, magicor, mindless
  * new profiles: mirrormagic, mrrescue, scorched3d-wrapper, scorchwentbonkers
  * new profiles: seahorse-adventures, wordwarvi, xbill, gnome-klotski
  * new profiles: swell-foop, fdns, five-or-more, steam-runtime
  * new profiles: nicotine, plv, mocp, apostrophe, quadrapassel, dino-im
  * new profiles: hitori, bijiben, gnote, gnubik, ZeGrapher, xonotic-sdl-wrapper
  * new profiles: gapplication, openarena_ded, element-desktop, cawbird
  * new profiles: freetube, strawberry, jitsi-meet-desktop
  * new profiles: homebank, mattermost-desktop, newsflash, com.gitlab.newsflash
  * new profiles: sushi, xfce4-screenshooter, org.gnome.NautilusPreviewer, lyx
  * new profiles: minitube, nuclear, mtpaint, minecraft-launcher, gnome-calendar
  * new profiles: vmware, git-cola, otter-browser, kazam, menulibre, musictube
  * new profiles: onboard, fractal, mirage, quaternion, spectral, man, psi
  * new profiles: smuxi-frontend-gnome, balsa, kube, trojita, youtube
  * new profiles: youtubemusic-nativefier, cola, dbus-send, notify-send
  * new profiles: qrencode, ytmdesktop, twitch
  * new profiles: xournalpp, chromium-freeworld, equalx
- remove firejail-0.9.62-fix-usr-etc.patch, included upstream
- remove firejail-apparmor-3.0.diff, included upstream</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1604318400">- packaging fixes</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1611835200">- Update to 0.9.64.2:
  * allow --tmpfs inside $HOME for unprivileged users
  * --disable-usertmpfs compile time option
  * allow AF_BLUETOOTH via --protocol=bluetooth
  * setup guide for new users: contrib/firejail-welcome.sh
  * implement netns in profiles
  * added nolocal6.net IPv6 network filter
  * new profiles: spectacle, chromium-browser-privacy,
    gtk-straw-viewer, gtk-youtube-viewer, gtk2-youtube-viewer,
    gtk3-youtube-viewer, straw-viewer, lutris, dolphin-emu,
    authenticator-rs, servo, npm, marker, yarn, lsar, unar, agetpkg,
    mdr, shotwell, qnapi, new profiles: guvcview, pkglog, kdiff3, CoyIM.</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1612699200">- Update to 0.9.64.4:
  * disabled overlayfs, pending multiple fixes
  * fixed launch firefox for open url in telegram-desktop.profile</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- firejail 0.9.66:
  * deprecated --audit options, relpaced by jailcheck utility
  * deprecated follow-symlink-as-user from firejail.config
  * new firejail.config settings: private-bin, private-etc
  * new firejail.config settings: private-opt, private-srv
  * new firejail.config settings: whitelist-disable-topdir
  * new firejail.config settings: seccomp-filter-add
  * removed kcmp syscall from seccomp default filter
  * rename --noautopulse to keep-config-pulse
  * filtering environment variables
  * zsh completion
  * command line: --mkdir, --mkfile
  * --protocol now accumulates
  * jailtest utility for testing running sandboxes
  * faccessat2 syscall support
  * --private-dev keeps /dev/input
  * added --noinput to disable /dev/input
  * add support for subdirs in --private-etc
  * subdirs support in private-etc
  * input devices support in private-dev, --no-input
  * support trailing comments on profile lines
  * many new profiles
- split shell completion into standard subpackages</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1644148800">- update to firejail 0.9.68:
  - security: on Ubuntu, the PPA is now recommended over the distro package
  - (see README.md) (#4748)
  - security: bugfix: private-cwd leaks access to the entire filesystem
  - (#4780); reported by Hugo Osvaldo Barrera
  - feature: remove (some) environment variables with auth-tokens (#4157)
  - feature: ALLOW_TRAY condition (#4510 #4599)
  - feature: add basic Firejail support to AppArmor base abstraction (#3226
  - #4628)
  - feature: intrusion detection system (--ids-init, --ids-check)
  - feature: deterministic shutdown command (--deterministic-exit-code,
  - --deterministic-shutdown) (#928 #3042 #4635)
  - feature: noprinters command (#4607 #4827)
  - feature: network monitor (--nettrace)
  - feature: network locker (--netlock) (#4848)
  - feature: whitelist-ro profile command (#4740)
  - feature: disable pipewire with --nosound (#4855)
  - feature: Unset TMP if it doesn't exist inside of sandbox (#4151)
  - feature: Allow apostrophe in whitelist and blacklist (#4614)
  - feature: AppImage support in --build command (#4878)
  - modifs: exit code: distinguish fatal signals by adding 128 (#4533)
  - modifs: firecfg.config is now installed to /etc/firejail/ (#408 #4669)
  - modifs: close file descriptors greater than 2 (--keep-fd) (#4845)
  - modifs: nogroups now stopped causing certain system groups to be dropped,
  - which are now controlled by the relevant "no" options instead (such as
  - nosound -&gt; drop audio group), which fixes device access issues on systems
  - not using (e)logind (such as with seatd) (#4632 #4725 #4732 #4851)
  - removal: --disable-whitelist at compile time
  - removal: whitelist=yes/no in /etc/firejail/firejail.config
  - bugfix: Fix sndio support (#4362 #4365)
  - bugfix: Error mounting tmpfs (MS_REMOUNT flag not being cleared) (#4387)
  - bugfix: --build clears the environment (#4460 #4467)
  - bugfix: firejail hangs with net parameter (#3958 #4476)
  - bugfix: Firejail does not work with a custom hosts file (#2758 #4560)
  - bugfix: --tracelog and --trace override /etc/ld.so.preload (#4558 #4586)
  - bugfix: PATH_MAX is undeclared on musl libc (#4578 #4579 #4583 #4606)
  - bugfix: firejail symlinks are not skipped with private-bin + globs (#4626)
  - bugfix: Firejail rejects empty arguments (#4395)
  - bugfix: firecfg does not work with symlinks (discord.desktop) (#4235)
  - bugfix: Seccomp list output goes to stdout instead of stderr (#4328)
  - bugfix: private-etc does not work with symlinks (#4887)
  - bugfix: Hardware key not detected on keepassxc (#4883)
  - build: allow building with address sanitizer (#4594)
  - build: Stop linking pthread (#4695)
  - build: Configure cleanup and improvements (#4712)
  - ci: add profile checks for sorting disable-programs.inc and
  - firecfg.config and for the required arguments in private-etc (#2739 #4643)
  - ci: pin GitHub actions to SHAs and use Dependabot to update them (#4774)
  - docs: Add new command checklist to CONTRIBUTING.md (#4413)
  - docs: Rework bug report issue template and add both a question and a
  - feature request template (#4479 #4515 #4561)
  - docs: fix contradictory descriptions of machine-id ("preserves" vs
  - "spoofs") (#4689)
  - docs: Document that private-bin and private-etc always accumulate (#4078)
  - new includes: whitelist-run-common.inc (#4288), disable-X11.inc (#4462)
  - new includes: disable-proc.inc (#4521)
  - removed includes: disable-passwordmgr.inc (#4454 #4461)
  - new profiles: microsoft-edge-beta, clion-eap, lifeograph, zim
  - new profiles: io.github.lainsce.Notejot, rednotebook, gallery-dl
  - new profiles: yt-dlp, goldendict, goldendict, bundle, cmake
  - new profiles: make, meson, pip, codium, telnet, ftp, OpenStego
  - new profiles: imv, retroarch, torbrowser, CachyBrowser,
  - new profiles: notable, RPCS3, wget2, raincat, conitop, 1passwd,
  - new profiles: Seafile, neovim, com.github.tchx84.Flatseal</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1655208000">- update to version 0.9.70:
  - fix bsc#1199148 CVE-2022-31214
  - security: CVE-2022-31214 - root escalation in --join logic
  - Reported by Matthias Gerstner, working exploit code was provided to our
  - development team. In the same time frame, the problem was independently
  - reported by Birk Blechschmidt. Full working exploit code was also provided.
  - feature: enable shell tab completion with --tab (#4936)
  - feature: disable user profiles at compile time (#4990)
  - feature: Allow resolution of .local names with avahi-daemon in the apparmor
  - profile (#5088)
  - feature: always log seccomp errors (#5110)
  - feature: firecfg --guide, guided user configuration (#5111)
  - feature: --oom, kernel OutOfMemory-killer (#5122)
  - modif: --ids feature needs to be enabled at compile time (#5155)
  - modif: --nettrace only available to root user
  - rework: whitelist restructuring (#4985)
  - rework: firemon, speed up and lots of fixes
  - bugfix: --private-cwd not expanding macros, broken hyperrogue (#4910)
  - bugfix: nogroups + wrc prints confusing messages (#4930 #4933)
  - bugfix: openSUSE Leap - whitelist-run-common.inc (#4954)
  - bugfix: fix printing in evince (#5011)
  - bugfix: gcov: fix gcov functions always declared as dummy (#5028)
  - bugfix: Stop warning on safe supplementary group clean (#5114)
  - build: remove ultimately unused INSTALL and RANLIB check macros (#5133)
  - build: mkdeb.sh.in: pass remaining arguments to ./configure (#5154)
  - ci: replace centos (EOL) with almalinux (#4912)
  - ci: fix --version not printing compile-time features (#5147)
  - ci: print version after install &amp; fix apparmor support on build_apparmor
  - (#5148)
  - docs: Refer to firejail.config in configuration files (#4916)
  - docs: firejail.config: add warning about allow-tray (#4946)
  - docs: mention that the protocol command accumulates (#5043)
  - docs: mention inconsistent homedir bug involving --private=dir (#5052)
  - docs: mention capabilities(7) on --caps (#5078)
  - new profiles: onionshare, onionshare-cli, opera-developer, songrec
  - new profiles: node-gyp, npx, semver, ping-hardened
  - removed profiles: nvm</changelog>
</package>
<package pkgid="764cbb4f2e786bf665d7f8800e3842749db0e34a6709d50a991beb0b6660e472" name="firejail-zsh-completion" arch="aarch64">
  <version epoch="0" ver="0.9.70" rel="bp154.2.3.1"/>
  <changelog author="avindra@opensuse.org" date="1513166400">- Update to version 0.9.52:
  * New features
    + systemd-resolved integration
    + whitelisted /var in most profiles
    + GTK2, GTK3 and Qt4 private-lib support
    + --debug-private-lib
    + test deployment of private-lib for the some apps: evince,
    galculator, gnome-calculator, leafpad, mousepad,
    transmission-gtk, xcalc, xmr-stak-cpu, atril,
    mate-color-select, tar, file, strings, gpicview, eom, eog,
    gedit, pluma
    + netfilter template support
    + various new arguments
  * --writable-run-user
  * --rlimit-as
  * --rlimit-cpu
  * --timeout
  * --build (profile build tool)
  * --netfilter.print
  * --netfilter6.print
  * deprecations in modif
    + --allow-private-blacklists (blacklisting, read-only,
    read-write, tmpfs and noexec are allowed in private home
    directories
    + remount-proc-sys (firejail.config)
    + follow-symlink-private-bin (firejail.config)
    + --profile-path
  * enhancements
    + support Firejail user config directory in firecfg
    + disable DBus activation in firecfg
    + enumerate root directories in apparmor profile
    + /etc and /usr/share whitelisting support
    + globbing support for --private-bin
  * new profiles: upstreamed profiles from 3 sources:
    + https://github.com/chiraag-nataraj/firejail-profiles
    + https://github.com/nyancat18/fe
    + https://aur.archlinux.org/packages/firejail-profiles
  * new profiles: terasology, surf, rocketchat, clamscan, clamdscan,
    clamdtop, freshclam, xmr-stak-cpu, amule, ardour4, ardour5,
    brackets, calligra, calligraauthor, calligraconverter,
    calligraflow, calligraplan, calligraplanwork, calligrasheets,
    calligrastage, calligrawords, cin, dooble, dooble-qt4,
    fetchmail, freecad, freecadcmd, google-earth,imagej, karbon,
    1kdenlive, krita, linphone, lmms, macrofusion, mpd, natron,
    Natron, ricochet, shotcut, teamspeak3, tor, tor-browser-en,
    Viber, x-terminal-emulator, zart, conky, arch-audit, ffmpeg,
    bluefish, cinelerra, openshot-qt, pinta, uefitool, aosp,
    pdfmod, gnome-ring, xcalc, zaproxy, kopete, cliqz,
    signal-desktop, kget, nheko, Enpass, kwin_x11, krunner, ping,
    bsdtar, makepkg (Arch), archaudit-report cower (Arch), kdeinit4
- Add full link to source tarball from sourceforge
- Add asc file</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1535025600">- Changed the permissions of the firejail executable to 4750.
  Setuid mode is used, but only allowed for users in the newly
  created group 'firejail' (boo#1059013).
- Update to version 0.9.54:
  * modif: --force removed
  * modif: --csh, --zsh removed
  * modif: --debug-check-filename removed
  * modif: --git-install and --git-uninstall removed
  * modif: support for private-bin, private-lib and shell none has been
    disabled while running AppImage archives in order to be able to use
    our regular profile files with AppImages.
  * modif: restrictions for /proc, /sys and /run/user directories
    are moved from AppArmor profile into firejail executable
  * modif: unifying Chromium and Firefox browsers profiles.
    All users of Firefox-based browsers who use addons and plugins
    that read/write from ${HOME} will need to uncomment the includes for
    firefox-common-addons.inc in firefox-common.profile.
  * modif: split disable-devel.inc into disable-devel and
    disable-interpreters.inc
  * Firejail user access database (/etc/firejail/firejail.users,
    man firejail-users)
  * add --noautopulse to disable automatic ~/.config/pulse (for complex setups)
  * Spectre mitigation patch for gcc and clang compiler
  * D-Bus handling (--nodbus)
  * AppArmor support for overlayfs and chroot sandboxes
  * AppArmor support for AppImages
  * Enable AppArmor by default for a large number of programs
  * firejail --apparmor.print option
  * firemon --apparmor option
  * apparmor yes/no flag in /etc/firejail/firejail.config
  * seccomp syscall list update for glibc 2.26-10
  * seccomp disassembler for --seccomp.print option
  * seccomp machine code optimizer for default seccomp filters
  * IPv6 DNS support
  * whitelist support for overlay and chroot sandboxes
  * private-dev support for overlay and chroot sandboxes
  * private-tmp support for overlay and chroot sandboxes
  * added sandbox name support in firemon
  * firemon/prctl enhancements
  * noblacklist support for /sys/module directory
  * whitelist support for /sys/module directory
  * new profiles: basilisk, Tor Browser language packs, PlayOnLinux, sylpheed,
  * new profiles: discord-canary, pycharm-community, pycharm-professional,
  * new profiles: pdfchain, tilp, vivaldi-snapshot, bitcoin-qt, kaffeine,
  * new profiles: falkon, gnome-builder, asunder, VS Code, gnome-recipes,
  * new profiles: akonadi_controle, evince-previewer, evince-thumbnailer,
  * new profiles: blender-2.8, thunderbird-beta, ncdu, gnome-logs, gcloud,
  * new profiles: musixmatch, gunzip, bunzip2, enchant-lsmod, enchant-lsmod-2,
  * new profiles: enchant, enchant-2, Discord, acat, adiff, als, apack,
  * new profiles: arepack, aunpack profiles, ppsspp, scallion, clion,
  * new profiles: baloo_filemetadata_temp_extractor, AnyDesk, webstorm, xmind,
  * new profiles: qmmp, sayonara</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1536580800">- Remove the rpmlintrc file since the warnings are no longer relevant.</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1536667200">- Drop ldconfig calls since firejail libraries are installed in their
  own subdirectory which is not scanned by ldconfig.</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1537617600">- update to version 0.9.56:
  * modif: removed CFG_CHROOT_DESKTOP configuration option
  * modif: removed compile time --enable-network=restricted
  * modif: removed compile time --disable-bind
  * modif: --net=none allowed even if networking was disabled at compile
    time or at run time
  * modif: allow system users to run the sandbox
  * support wireless devices in --net option
  * support tap devices in --net option (tunneling support)
  * allow IP address configuration if the parent interface specified
    by --net is not configured (--netmask)
  * support for firetunnel utility
  * disable U2F devices (--nou2f)
  * add --private-cache to support private ~/.cache
  * support full paths in private-lib
  * globbing support in private-lib
  * support for local user directories in firecfg (--bindir)
  * new profiles: ms-excel, ms-office, ms-onenote, ms-outlook, ms-powerpoint,
  * new profiles: ms-skype, ms-word, riot-desktop, gnome-mpv, snox, gradio,
  * new profiles: standardnotes-desktop, shellcheck, patch, flameshot,
  * new profiles: rview, rvim, vimcat, vimdiff, vimpager, vimtutor, xxd,
  * new profiles: Beaker, electrum, clamtk, pybitmessage, dig, whois,
  * new profiles: jdownloader, Fluxbox, Blackbox, Awesome, i3
  * new profiles: start-tor-browser.desktop</changelog>
  <changelog author="info@paolostivanin.com" date="1549022400">-  update to version 0.9.58:
  * --disable-mnt rework
  * --net.print command
  * GitLab CI/CD integration: disto specific builds
  * profile parser enhancements and conditional handling support
    for HAS_APPIMAGE, HAS_NODBUS, BROWSER_DISABLE_U2F
  * profile name support
  * added explicit nonewprivs support to join option
  * new profiles: QMediathekView, aria2c, Authenticator, checkbashisms
  * new profiles: devilspie, devilspie2, easystroke, github-desktop, min
  * new profiles: bsdcat, bsdcpio, bsdtar, lzmadec, lbunzip2, lbzcat
  * new profiles: lbzip2, lzcat, lzcmp, lzdiff, lzegrep, lzfgrep, lzgrep
  * new profiles: lzless, lzma, lzmainfo, lzmore, unlzma, unxz, xzcat
  * new profiles: xzcmp, xzdiff, xzegrep, xzfgrep, xzgrep, xzless, xzmore
  * new profiles: lzip, artha, nitroshare, nitroshare-cli, nitroshare-nmh
  * new profiles: nirtoshare-send, nitroshare-ui, mencoder, gnome-pie
  * new profiles: masterpdfeditor, QOwnNotes, aisleriot, Mendeley
  * new profiles: feedreader, ocenaudio, mpsyt, thunderbird-wayland
  * new profiles: supertuxkart, ghostwriter, gajim-history-manager
  * bugfixes</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1559476800">- update to version 0.9.60:
  * security bug reported by Austin Morton:
  Seccomp filters are copied into /run/firejail/mnt, and are writable
  within the jail. A malicious process can modify files from inside the
  jail. Processes that are later joined to the jail will not have seccomp
  filters applied.
  CVE-2019-12589
  boo#1137139
  * memory-deny-write-execute now also blocks memfd_create
  * add private-cwd option to control working directory within jail
  * blocking system D-Bus socket with --nodbus
  * bringing back Centos 6 support
  * drop support for flatpak/snap packages
  * new profiles: crow, nyx, mypaint, celluoid, nano, transgui, mpdris2
  * new profiles: sysprof, simplescreenrecorder, geekbench, xfce4-mixer
  * new profiles: pavucontrol, d-feet, seahorse, secret-tool, gnome-keyring
  * new profiles: regextester, hardinfo, gnome-system-log, gnome-nettool
  * new profiles: netactview, redshift, devhelp, assogiate, subdownloader
  * new profiles: font-manager, exfalso, gconf-editor, dconf-editor
  * new profiles: sysprof-cli, seahorse-tool, secret-tool, dconf, gsettings
  * new profiles: code-oss, pragha, Maelstrom, ostrichriders, bzflag
  * new profiles: freeciv, lincity-ng, megaglest, openttd, crawl, crawl-tiles
  * new profiles: teeworlds, torcs, tremulous, warsow, lugaru, manaplus
  * new profiles: pioneer, scorched3d, widelands, freemind, kid3, kid3-qt
  * new profiles: kid3-cli, nomacs, freecol, opencity, openclonk, slashem
  * new profiles: vultureseye, vulturesclaw, anki, cheese, utox, mp3splt
  * new profiles: oggsplt, flacsplt, gramps, newsboat, freeoffice-planmaker
  * new profiles: autokey-gtk, autokey-qt, autokey-run, autokey-shell
  * new profiles: freeoffice-presentations, freeoffice-textmaker, mp3wrap
  * new profiles: inkview, meteo-qt, mp3splt-gtk, ktouch, yelp, cantata</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1581422400">- update to version 0.9.62
  * added file-copy-limit in /etc/firejail/firejail.config
  * profile templates (/usr/share/doc/firejail)
  * allow-debuggers support in profiles
  * several seccomp enhancements
  * compiler flags autodetection
  * move chroot entirely from path based to file descriptor based mounts
  * whitelisting /usr/share in a large number of profiles
  * new scripts in conrib: gdb-firejail.sh and sort.py
  * enhancement: whitelist /usr/share in some profiles
  * added signal mediation to apparmor profile
  * new conditions: HAS_X11, HAS_NET
  * new profiles: qgis, klatexformula, klatexformula_cmdl, links, xlinks
  * new profiles: pandoc, teams-for-linux, OpenArena, gnome-sound-recorder
  * new profiles: godot, tcpdump, tshark, newsbeuter, keepassxc-cli
  * new profiles: keepassxc-proxy, rhythmbox-client, jerry, zeal, mpg123
  * new profiles: conplay, mpg123.bin, mpg123-alsa, mpg123-id3dump, out123
  * new profiles: mpg123-jack, mpg123-nas, mpg123-openal, mpg123-oss
  * new profiles: mpg123-portaudio, mpg123-pulse, mpg123-strip, pavucontrol-qt
  * new profiles: gnome-characters, gnome-character-map, rsync, Whalebird,
  * new profiles: tor-browser (AUR), Zulip, tb-starter-wrapper, bzcat,
  * new profiles: kiwix-desktop, bzcat, zstd, pzstd, zstdcat, zstdgrep, zstdless
  * new profiles: zstdmt, unzstd, i2p, ar, gnome-latex, pngquant, kalgebra
  * new profiles: kalgebramobile, signal-cli, amuled, kfind, profanity
  * new profiles: audio-recorder, cameramonitor, ddgtk, drawio, unf, gmpc
  * new profiles: electron-mail, gist, gist-paste</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1588161600">- Add firejail-0.9.62-fix-usr-etc.patch:
  Check /usr/etc not just /etc
- Replace python interpreter line in sort.py</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1596888000">- Add patches fix-CVE-2020-17367.patch and fix-CVE-2020-17368.patch to fix CVE-2020-17367 and CVE-2020-17368 and boo#1174986</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1597320000">- Update to 0.9.62.2
  * fix CVE-2020-17367
  * fix CVE-2020-17368
  * additional hardening and bug fixes
- Remove fix-CVE-2020-17368.patch
- Remove fix-CVE-2020-17367.patch</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1597838400">- Update to 0.9.62.4
  * fix AppArmor broken in the previous release
  * miscellaneous fixes</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1603713600">- Add firejail-apparmor-3.0.diff to make the AppArmor profile compatible with
  AppArmor 3.0 (add missing include &lt;tunables/global&gt;)</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1604232000">- Update to version 0.9.64:
  * replaced --nowrap option with --wrap in firemon
  * The blocking action of seccomp filters has been changed from
    killing the process to returning EPERM to the caller. To get the
    previous behaviour, use --seccomp-error-action=kill or
    syscall:kill syntax when constructing filters, or override in
    /etc/firejail/firejail.config file.
  * Fine-grained D-Bus sandboxing with xdg-dbus-proxy.
    xdg-dbus-proxy must be installed, if not D-Bus access will be allowed.
    With this version nodbus is deprecated, in favor of dbus-user none and
    dbus-system none and will be removed in a future version.
  * DHCP client support
  * firecfg only fix dektop-files if started with sudo
  * SELinux labeling support
  * custom 32-bit seccomp filter support
  * restrict ${RUNUSER} in several profiles
  * blacklist shells such as bash in several profiles
  * whitelist globbing
  * mkdir and mkfile support for /run/user directory
  * support ignore for include
  * --include on the command line
  * splitting up media players whitelists in whitelist-players.inc
  * new condition: HAS_NOSOUND
  * new profiles: gfeeds, firefox-x11, tvbrowser, rtv, clipgrab, muraster
  * new profiles: gnome-passwordsafe, bibtex, gummi, latex, mupdf-x11-curl
  * new profiles: pdflatex, tex, wpp, wpspdf, wps, et, multimc, mupdf-x11
  * new profiles: gnome-hexgl, com.github.johnfactotum.Foliate, mupdf-gl, mutool
  * new profiles: desktopeditors, impressive, planmaker18, planmaker18free
  * new profiles: presentations18, presentations18free, textmaker18, teams
  * new profiles: textmaker18free, xournal, gnome-screenshot, ripperX
  * new profiles: sound-juicer, com.github.dahenson.agenda, gnome-pomodoro
  * new profiles: gnome-todo, x2goclient, iagno, kmplayer, penguin-command
  * new profiles: frogatto, gnome-mines, gnome-nibbles, lightsoff, warmux
  * new profiles: ts3client_runscript.sh, ferdi, abiword, four-in-a-row
  * new profiles: gnome-mahjongg, gnome-robots, gnome-sudoku, gnome-taquin
  * new profiles: gnome-tetravex, blobwars, gravity-beams-and-evaporating-stars
  * new profiles: hyperrogue, jumpnbump-menu, jumpnbump, magicor, mindless
  * new profiles: mirrormagic, mrrescue, scorched3d-wrapper, scorchwentbonkers
  * new profiles: seahorse-adventures, wordwarvi, xbill, gnome-klotski
  * new profiles: swell-foop, fdns, five-or-more, steam-runtime
  * new profiles: nicotine, plv, mocp, apostrophe, quadrapassel, dino-im
  * new profiles: hitori, bijiben, gnote, gnubik, ZeGrapher, xonotic-sdl-wrapper
  * new profiles: gapplication, openarena_ded, element-desktop, cawbird
  * new profiles: freetube, strawberry, jitsi-meet-desktop
  * new profiles: homebank, mattermost-desktop, newsflash, com.gitlab.newsflash
  * new profiles: sushi, xfce4-screenshooter, org.gnome.NautilusPreviewer, lyx
  * new profiles: minitube, nuclear, mtpaint, minecraft-launcher, gnome-calendar
  * new profiles: vmware, git-cola, otter-browser, kazam, menulibre, musictube
  * new profiles: onboard, fractal, mirage, quaternion, spectral, man, psi
  * new profiles: smuxi-frontend-gnome, balsa, kube, trojita, youtube
  * new profiles: youtubemusic-nativefier, cola, dbus-send, notify-send
  * new profiles: qrencode, ytmdesktop, twitch
  * new profiles: xournalpp, chromium-freeworld, equalx
- remove firejail-0.9.62-fix-usr-etc.patch, included upstream
- remove firejail-apparmor-3.0.diff, included upstream</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1604318400">- packaging fixes</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1611835200">- Update to 0.9.64.2:
  * allow --tmpfs inside $HOME for unprivileged users
  * --disable-usertmpfs compile time option
  * allow AF_BLUETOOTH via --protocol=bluetooth
  * setup guide for new users: contrib/firejail-welcome.sh
  * implement netns in profiles
  * added nolocal6.net IPv6 network filter
  * new profiles: spectacle, chromium-browser-privacy,
    gtk-straw-viewer, gtk-youtube-viewer, gtk2-youtube-viewer,
    gtk3-youtube-viewer, straw-viewer, lutris, dolphin-emu,
    authenticator-rs, servo, npm, marker, yarn, lsar, unar, agetpkg,
    mdr, shotwell, qnapi, new profiles: guvcview, pkglog, kdiff3, CoyIM.</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1612699200">- Update to 0.9.64.4:
  * disabled overlayfs, pending multiple fixes
  * fixed launch firefox for open url in telegram-desktop.profile</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- firejail 0.9.66:
  * deprecated --audit options, relpaced by jailcheck utility
  * deprecated follow-symlink-as-user from firejail.config
  * new firejail.config settings: private-bin, private-etc
  * new firejail.config settings: private-opt, private-srv
  * new firejail.config settings: whitelist-disable-topdir
  * new firejail.config settings: seccomp-filter-add
  * removed kcmp syscall from seccomp default filter
  * rename --noautopulse to keep-config-pulse
  * filtering environment variables
  * zsh completion
  * command line: --mkdir, --mkfile
  * --protocol now accumulates
  * jailtest utility for testing running sandboxes
  * faccessat2 syscall support
  * --private-dev keeps /dev/input
  * added --noinput to disable /dev/input
  * add support for subdirs in --private-etc
  * subdirs support in private-etc
  * input devices support in private-dev, --no-input
  * support trailing comments on profile lines
  * many new profiles
- split shell completion into standard subpackages</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1644148800">- update to firejail 0.9.68:
  - security: on Ubuntu, the PPA is now recommended over the distro package
  - (see README.md) (#4748)
  - security: bugfix: private-cwd leaks access to the entire filesystem
  - (#4780); reported by Hugo Osvaldo Barrera
  - feature: remove (some) environment variables with auth-tokens (#4157)
  - feature: ALLOW_TRAY condition (#4510 #4599)
  - feature: add basic Firejail support to AppArmor base abstraction (#3226
  - #4628)
  - feature: intrusion detection system (--ids-init, --ids-check)
  - feature: deterministic shutdown command (--deterministic-exit-code,
  - --deterministic-shutdown) (#928 #3042 #4635)
  - feature: noprinters command (#4607 #4827)
  - feature: network monitor (--nettrace)
  - feature: network locker (--netlock) (#4848)
  - feature: whitelist-ro profile command (#4740)
  - feature: disable pipewire with --nosound (#4855)
  - feature: Unset TMP if it doesn't exist inside of sandbox (#4151)
  - feature: Allow apostrophe in whitelist and blacklist (#4614)
  - feature: AppImage support in --build command (#4878)
  - modifs: exit code: distinguish fatal signals by adding 128 (#4533)
  - modifs: firecfg.config is now installed to /etc/firejail/ (#408 #4669)
  - modifs: close file descriptors greater than 2 (--keep-fd) (#4845)
  - modifs: nogroups now stopped causing certain system groups to be dropped,
  - which are now controlled by the relevant "no" options instead (such as
  - nosound -&gt; drop audio group), which fixes device access issues on systems
  - not using (e)logind (such as with seatd) (#4632 #4725 #4732 #4851)
  - removal: --disable-whitelist at compile time
  - removal: whitelist=yes/no in /etc/firejail/firejail.config
  - bugfix: Fix sndio support (#4362 #4365)
  - bugfix: Error mounting tmpfs (MS_REMOUNT flag not being cleared) (#4387)
  - bugfix: --build clears the environment (#4460 #4467)
  - bugfix: firejail hangs with net parameter (#3958 #4476)
  - bugfix: Firejail does not work with a custom hosts file (#2758 #4560)
  - bugfix: --tracelog and --trace override /etc/ld.so.preload (#4558 #4586)
  - bugfix: PATH_MAX is undeclared on musl libc (#4578 #4579 #4583 #4606)
  - bugfix: firejail symlinks are not skipped with private-bin + globs (#4626)
  - bugfix: Firejail rejects empty arguments (#4395)
  - bugfix: firecfg does not work with symlinks (discord.desktop) (#4235)
  - bugfix: Seccomp list output goes to stdout instead of stderr (#4328)
  - bugfix: private-etc does not work with symlinks (#4887)
  - bugfix: Hardware key not detected on keepassxc (#4883)
  - build: allow building with address sanitizer (#4594)
  - build: Stop linking pthread (#4695)
  - build: Configure cleanup and improvements (#4712)
  - ci: add profile checks for sorting disable-programs.inc and
  - firecfg.config and for the required arguments in private-etc (#2739 #4643)
  - ci: pin GitHub actions to SHAs and use Dependabot to update them (#4774)
  - docs: Add new command checklist to CONTRIBUTING.md (#4413)
  - docs: Rework bug report issue template and add both a question and a
  - feature request template (#4479 #4515 #4561)
  - docs: fix contradictory descriptions of machine-id ("preserves" vs
  - "spoofs") (#4689)
  - docs: Document that private-bin and private-etc always accumulate (#4078)
  - new includes: whitelist-run-common.inc (#4288), disable-X11.inc (#4462)
  - new includes: disable-proc.inc (#4521)
  - removed includes: disable-passwordmgr.inc (#4454 #4461)
  - new profiles: microsoft-edge-beta, clion-eap, lifeograph, zim
  - new profiles: io.github.lainsce.Notejot, rednotebook, gallery-dl
  - new profiles: yt-dlp, goldendict, goldendict, bundle, cmake
  - new profiles: make, meson, pip, codium, telnet, ftp, OpenStego
  - new profiles: imv, retroarch, torbrowser, CachyBrowser,
  - new profiles: notable, RPCS3, wget2, raincat, conitop, 1passwd,
  - new profiles: Seafile, neovim, com.github.tchx84.Flatseal</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1655208000">- update to version 0.9.70:
  - fix bsc#1199148 CVE-2022-31214
  - security: CVE-2022-31214 - root escalation in --join logic
  - Reported by Matthias Gerstner, working exploit code was provided to our
  - development team. In the same time frame, the problem was independently
  - reported by Birk Blechschmidt. Full working exploit code was also provided.
  - feature: enable shell tab completion with --tab (#4936)
  - feature: disable user profiles at compile time (#4990)
  - feature: Allow resolution of .local names with avahi-daemon in the apparmor
  - profile (#5088)
  - feature: always log seccomp errors (#5110)
  - feature: firecfg --guide, guided user configuration (#5111)
  - feature: --oom, kernel OutOfMemory-killer (#5122)
  - modif: --ids feature needs to be enabled at compile time (#5155)
  - modif: --nettrace only available to root user
  - rework: whitelist restructuring (#4985)
  - rework: firemon, speed up and lots of fixes
  - bugfix: --private-cwd not expanding macros, broken hyperrogue (#4910)
  - bugfix: nogroups + wrc prints confusing messages (#4930 #4933)
  - bugfix: openSUSE Leap - whitelist-run-common.inc (#4954)
  - bugfix: fix printing in evince (#5011)
  - bugfix: gcov: fix gcov functions always declared as dummy (#5028)
  - bugfix: Stop warning on safe supplementary group clean (#5114)
  - build: remove ultimately unused INSTALL and RANLIB check macros (#5133)
  - build: mkdeb.sh.in: pass remaining arguments to ./configure (#5154)
  - ci: replace centos (EOL) with almalinux (#4912)
  - ci: fix --version not printing compile-time features (#5147)
  - ci: print version after install &amp; fix apparmor support on build_apparmor
  - (#5148)
  - docs: Refer to firejail.config in configuration files (#4916)
  - docs: firejail.config: add warning about allow-tray (#4946)
  - docs: mention that the protocol command accumulates (#5043)
  - docs: mention inconsistent homedir bug involving --private=dir (#5052)
  - docs: mention capabilities(7) on --caps (#5078)
  - new profiles: onionshare, onionshare-cli, opera-developer, songrec
  - new profiles: node-gyp, npx, semver, ping-hardened
  - removed profiles: nvm</changelog>
</package>
<package pkgid="944a55f88ff39fc656dcd643d3a99e338f47c8100d60226d50e2bd9836012698" name="firejail-zsh-completion" arch="i586">
  <version epoch="0" ver="0.9.70" rel="bp154.2.3.1"/>
  <changelog author="avindra@opensuse.org" date="1513166400">- Update to version 0.9.52:
  * New features
    + systemd-resolved integration
    + whitelisted /var in most profiles
    + GTK2, GTK3 and Qt4 private-lib support
    + --debug-private-lib
    + test deployment of private-lib for the some apps: evince,
    galculator, gnome-calculator, leafpad, mousepad,
    transmission-gtk, xcalc, xmr-stak-cpu, atril,
    mate-color-select, tar, file, strings, gpicview, eom, eog,
    gedit, pluma
    + netfilter template support
    + various new arguments
  * --writable-run-user
  * --rlimit-as
  * --rlimit-cpu
  * --timeout
  * --build (profile build tool)
  * --netfilter.print
  * --netfilter6.print
  * deprecations in modif
    + --allow-private-blacklists (blacklisting, read-only,
    read-write, tmpfs and noexec are allowed in private home
    directories
    + remount-proc-sys (firejail.config)
    + follow-symlink-private-bin (firejail.config)
    + --profile-path
  * enhancements
    + support Firejail user config directory in firecfg
    + disable DBus activation in firecfg
    + enumerate root directories in apparmor profile
    + /etc and /usr/share whitelisting support
    + globbing support for --private-bin
  * new profiles: upstreamed profiles from 3 sources:
    + https://github.com/chiraag-nataraj/firejail-profiles
    + https://github.com/nyancat18/fe
    + https://aur.archlinux.org/packages/firejail-profiles
  * new profiles: terasology, surf, rocketchat, clamscan, clamdscan,
    clamdtop, freshclam, xmr-stak-cpu, amule, ardour4, ardour5,
    brackets, calligra, calligraauthor, calligraconverter,
    calligraflow, calligraplan, calligraplanwork, calligrasheets,
    calligrastage, calligrawords, cin, dooble, dooble-qt4,
    fetchmail, freecad, freecadcmd, google-earth,imagej, karbon,
    1kdenlive, krita, linphone, lmms, macrofusion, mpd, natron,
    Natron, ricochet, shotcut, teamspeak3, tor, tor-browser-en,
    Viber, x-terminal-emulator, zart, conky, arch-audit, ffmpeg,
    bluefish, cinelerra, openshot-qt, pinta, uefitool, aosp,
    pdfmod, gnome-ring, xcalc, zaproxy, kopete, cliqz,
    signal-desktop, kget, nheko, Enpass, kwin_x11, krunner, ping,
    bsdtar, makepkg (Arch), archaudit-report cower (Arch), kdeinit4
- Add full link to source tarball from sourceforge
- Add asc file</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1535025600">- Changed the permissions of the firejail executable to 4750.
  Setuid mode is used, but only allowed for users in the newly
  created group 'firejail' (boo#1059013).
- Update to version 0.9.54:
  * modif: --force removed
  * modif: --csh, --zsh removed
  * modif: --debug-check-filename removed
  * modif: --git-install and --git-uninstall removed
  * modif: support for private-bin, private-lib and shell none has been
    disabled while running AppImage archives in order to be able to use
    our regular profile files with AppImages.
  * modif: restrictions for /proc, /sys and /run/user directories
    are moved from AppArmor profile into firejail executable
  * modif: unifying Chromium and Firefox browsers profiles.
    All users of Firefox-based browsers who use addons and plugins
    that read/write from ${HOME} will need to uncomment the includes for
    firefox-common-addons.inc in firefox-common.profile.
  * modif: split disable-devel.inc into disable-devel and
    disable-interpreters.inc
  * Firejail user access database (/etc/firejail/firejail.users,
    man firejail-users)
  * add --noautopulse to disable automatic ~/.config/pulse (for complex setups)
  * Spectre mitigation patch for gcc and clang compiler
  * D-Bus handling (--nodbus)
  * AppArmor support for overlayfs and chroot sandboxes
  * AppArmor support for AppImages
  * Enable AppArmor by default for a large number of programs
  * firejail --apparmor.print option
  * firemon --apparmor option
  * apparmor yes/no flag in /etc/firejail/firejail.config
  * seccomp syscall list update for glibc 2.26-10
  * seccomp disassembler for --seccomp.print option
  * seccomp machine code optimizer for default seccomp filters
  * IPv6 DNS support
  * whitelist support for overlay and chroot sandboxes
  * private-dev support for overlay and chroot sandboxes
  * private-tmp support for overlay and chroot sandboxes
  * added sandbox name support in firemon
  * firemon/prctl enhancements
  * noblacklist support for /sys/module directory
  * whitelist support for /sys/module directory
  * new profiles: basilisk, Tor Browser language packs, PlayOnLinux, sylpheed,
  * new profiles: discord-canary, pycharm-community, pycharm-professional,
  * new profiles: pdfchain, tilp, vivaldi-snapshot, bitcoin-qt, kaffeine,
  * new profiles: falkon, gnome-builder, asunder, VS Code, gnome-recipes,
  * new profiles: akonadi_controle, evince-previewer, evince-thumbnailer,
  * new profiles: blender-2.8, thunderbird-beta, ncdu, gnome-logs, gcloud,
  * new profiles: musixmatch, gunzip, bunzip2, enchant-lsmod, enchant-lsmod-2,
  * new profiles: enchant, enchant-2, Discord, acat, adiff, als, apack,
  * new profiles: arepack, aunpack profiles, ppsspp, scallion, clion,
  * new profiles: baloo_filemetadata_temp_extractor, AnyDesk, webstorm, xmind,
  * new profiles: qmmp, sayonara</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1536580800">- Remove the rpmlintrc file since the warnings are no longer relevant.</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1536667200">- Drop ldconfig calls since firejail libraries are installed in their
  own subdirectory which is not scanned by ldconfig.</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1537617600">- update to version 0.9.56:
  * modif: removed CFG_CHROOT_DESKTOP configuration option
  * modif: removed compile time --enable-network=restricted
  * modif: removed compile time --disable-bind
  * modif: --net=none allowed even if networking was disabled at compile
    time or at run time
  * modif: allow system users to run the sandbox
  * support wireless devices in --net option
  * support tap devices in --net option (tunneling support)
  * allow IP address configuration if the parent interface specified
    by --net is not configured (--netmask)
  * support for firetunnel utility
  * disable U2F devices (--nou2f)
  * add --private-cache to support private ~/.cache
  * support full paths in private-lib
  * globbing support in private-lib
  * support for local user directories in firecfg (--bindir)
  * new profiles: ms-excel, ms-office, ms-onenote, ms-outlook, ms-powerpoint,
  * new profiles: ms-skype, ms-word, riot-desktop, gnome-mpv, snox, gradio,
  * new profiles: standardnotes-desktop, shellcheck, patch, flameshot,
  * new profiles: rview, rvim, vimcat, vimdiff, vimpager, vimtutor, xxd,
  * new profiles: Beaker, electrum, clamtk, pybitmessage, dig, whois,
  * new profiles: jdownloader, Fluxbox, Blackbox, Awesome, i3
  * new profiles: start-tor-browser.desktop</changelog>
  <changelog author="info@paolostivanin.com" date="1549022400">-  update to version 0.9.58:
  * --disable-mnt rework
  * --net.print command
  * GitLab CI/CD integration: disto specific builds
  * profile parser enhancements and conditional handling support
    for HAS_APPIMAGE, HAS_NODBUS, BROWSER_DISABLE_U2F
  * profile name support
  * added explicit nonewprivs support to join option
  * new profiles: QMediathekView, aria2c, Authenticator, checkbashisms
  * new profiles: devilspie, devilspie2, easystroke, github-desktop, min
  * new profiles: bsdcat, bsdcpio, bsdtar, lzmadec, lbunzip2, lbzcat
  * new profiles: lbzip2, lzcat, lzcmp, lzdiff, lzegrep, lzfgrep, lzgrep
  * new profiles: lzless, lzma, lzmainfo, lzmore, unlzma, unxz, xzcat
  * new profiles: xzcmp, xzdiff, xzegrep, xzfgrep, xzgrep, xzless, xzmore
  * new profiles: lzip, artha, nitroshare, nitroshare-cli, nitroshare-nmh
  * new profiles: nirtoshare-send, nitroshare-ui, mencoder, gnome-pie
  * new profiles: masterpdfeditor, QOwnNotes, aisleriot, Mendeley
  * new profiles: feedreader, ocenaudio, mpsyt, thunderbird-wayland
  * new profiles: supertuxkart, ghostwriter, gajim-history-manager
  * bugfixes</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1559476800">- update to version 0.9.60:
  * security bug reported by Austin Morton:
  Seccomp filters are copied into /run/firejail/mnt, and are writable
  within the jail. A malicious process can modify files from inside the
  jail. Processes that are later joined to the jail will not have seccomp
  filters applied.
  CVE-2019-12589
  boo#1137139
  * memory-deny-write-execute now also blocks memfd_create
  * add private-cwd option to control working directory within jail
  * blocking system D-Bus socket with --nodbus
  * bringing back Centos 6 support
  * drop support for flatpak/snap packages
  * new profiles: crow, nyx, mypaint, celluoid, nano, transgui, mpdris2
  * new profiles: sysprof, simplescreenrecorder, geekbench, xfce4-mixer
  * new profiles: pavucontrol, d-feet, seahorse, secret-tool, gnome-keyring
  * new profiles: regextester, hardinfo, gnome-system-log, gnome-nettool
  * new profiles: netactview, redshift, devhelp, assogiate, subdownloader
  * new profiles: font-manager, exfalso, gconf-editor, dconf-editor
  * new profiles: sysprof-cli, seahorse-tool, secret-tool, dconf, gsettings
  * new profiles: code-oss, pragha, Maelstrom, ostrichriders, bzflag
  * new profiles: freeciv, lincity-ng, megaglest, openttd, crawl, crawl-tiles
  * new profiles: teeworlds, torcs, tremulous, warsow, lugaru, manaplus
  * new profiles: pioneer, scorched3d, widelands, freemind, kid3, kid3-qt
  * new profiles: kid3-cli, nomacs, freecol, opencity, openclonk, slashem
  * new profiles: vultureseye, vulturesclaw, anki, cheese, utox, mp3splt
  * new profiles: oggsplt, flacsplt, gramps, newsboat, freeoffice-planmaker
  * new profiles: autokey-gtk, autokey-qt, autokey-run, autokey-shell
  * new profiles: freeoffice-presentations, freeoffice-textmaker, mp3wrap
  * new profiles: inkview, meteo-qt, mp3splt-gtk, ktouch, yelp, cantata</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1581422400">- update to version 0.9.62
  * added file-copy-limit in /etc/firejail/firejail.config
  * profile templates (/usr/share/doc/firejail)
  * allow-debuggers support in profiles
  * several seccomp enhancements
  * compiler flags autodetection
  * move chroot entirely from path based to file descriptor based mounts
  * whitelisting /usr/share in a large number of profiles
  * new scripts in conrib: gdb-firejail.sh and sort.py
  * enhancement: whitelist /usr/share in some profiles
  * added signal mediation to apparmor profile
  * new conditions: HAS_X11, HAS_NET
  * new profiles: qgis, klatexformula, klatexformula_cmdl, links, xlinks
  * new profiles: pandoc, teams-for-linux, OpenArena, gnome-sound-recorder
  * new profiles: godot, tcpdump, tshark, newsbeuter, keepassxc-cli
  * new profiles: keepassxc-proxy, rhythmbox-client, jerry, zeal, mpg123
  * new profiles: conplay, mpg123.bin, mpg123-alsa, mpg123-id3dump, out123
  * new profiles: mpg123-jack, mpg123-nas, mpg123-openal, mpg123-oss
  * new profiles: mpg123-portaudio, mpg123-pulse, mpg123-strip, pavucontrol-qt
  * new profiles: gnome-characters, gnome-character-map, rsync, Whalebird,
  * new profiles: tor-browser (AUR), Zulip, tb-starter-wrapper, bzcat,
  * new profiles: kiwix-desktop, bzcat, zstd, pzstd, zstdcat, zstdgrep, zstdless
  * new profiles: zstdmt, unzstd, i2p, ar, gnome-latex, pngquant, kalgebra
  * new profiles: kalgebramobile, signal-cli, amuled, kfind, profanity
  * new profiles: audio-recorder, cameramonitor, ddgtk, drawio, unf, gmpc
  * new profiles: electron-mail, gist, gist-paste</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1588161600">- Add firejail-0.9.62-fix-usr-etc.patch:
  Check /usr/etc not just /etc
- Replace python interpreter line in sort.py</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1596888000">- Add patches fix-CVE-2020-17367.patch and fix-CVE-2020-17368.patch to fix CVE-2020-17367 and CVE-2020-17368 and boo#1174986</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1597320000">- Update to 0.9.62.2
  * fix CVE-2020-17367
  * fix CVE-2020-17368
  * additional hardening and bug fixes
- Remove fix-CVE-2020-17368.patch
- Remove fix-CVE-2020-17367.patch</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1597838400">- Update to 0.9.62.4
  * fix AppArmor broken in the previous release
  * miscellaneous fixes</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1603713600">- Add firejail-apparmor-3.0.diff to make the AppArmor profile compatible with
  AppArmor 3.0 (add missing include &lt;tunables/global&gt;)</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1604232000">- Update to version 0.9.64:
  * replaced --nowrap option with --wrap in firemon
  * The blocking action of seccomp filters has been changed from
    killing the process to returning EPERM to the caller. To get the
    previous behaviour, use --seccomp-error-action=kill or
    syscall:kill syntax when constructing filters, or override in
    /etc/firejail/firejail.config file.
  * Fine-grained D-Bus sandboxing with xdg-dbus-proxy.
    xdg-dbus-proxy must be installed, if not D-Bus access will be allowed.
    With this version nodbus is deprecated, in favor of dbus-user none and
    dbus-system none and will be removed in a future version.
  * DHCP client support
  * firecfg only fix dektop-files if started with sudo
  * SELinux labeling support
  * custom 32-bit seccomp filter support
  * restrict ${RUNUSER} in several profiles
  * blacklist shells such as bash in several profiles
  * whitelist globbing
  * mkdir and mkfile support for /run/user directory
  * support ignore for include
  * --include on the command line
  * splitting up media players whitelists in whitelist-players.inc
  * new condition: HAS_NOSOUND
  * new profiles: gfeeds, firefox-x11, tvbrowser, rtv, clipgrab, muraster
  * new profiles: gnome-passwordsafe, bibtex, gummi, latex, mupdf-x11-curl
  * new profiles: pdflatex, tex, wpp, wpspdf, wps, et, multimc, mupdf-x11
  * new profiles: gnome-hexgl, com.github.johnfactotum.Foliate, mupdf-gl, mutool
  * new profiles: desktopeditors, impressive, planmaker18, planmaker18free
  * new profiles: presentations18, presentations18free, textmaker18, teams
  * new profiles: textmaker18free, xournal, gnome-screenshot, ripperX
  * new profiles: sound-juicer, com.github.dahenson.agenda, gnome-pomodoro
  * new profiles: gnome-todo, x2goclient, iagno, kmplayer, penguin-command
  * new profiles: frogatto, gnome-mines, gnome-nibbles, lightsoff, warmux
  * new profiles: ts3client_runscript.sh, ferdi, abiword, four-in-a-row
  * new profiles: gnome-mahjongg, gnome-robots, gnome-sudoku, gnome-taquin
  * new profiles: gnome-tetravex, blobwars, gravity-beams-and-evaporating-stars
  * new profiles: hyperrogue, jumpnbump-menu, jumpnbump, magicor, mindless
  * new profiles: mirrormagic, mrrescue, scorched3d-wrapper, scorchwentbonkers
  * new profiles: seahorse-adventures, wordwarvi, xbill, gnome-klotski
  * new profiles: swell-foop, fdns, five-or-more, steam-runtime
  * new profiles: nicotine, plv, mocp, apostrophe, quadrapassel, dino-im
  * new profiles: hitori, bijiben, gnote, gnubik, ZeGrapher, xonotic-sdl-wrapper
  * new profiles: gapplication, openarena_ded, element-desktop, cawbird
  * new profiles: freetube, strawberry, jitsi-meet-desktop
  * new profiles: homebank, mattermost-desktop, newsflash, com.gitlab.newsflash
  * new profiles: sushi, xfce4-screenshooter, org.gnome.NautilusPreviewer, lyx
  * new profiles: minitube, nuclear, mtpaint, minecraft-launcher, gnome-calendar
  * new profiles: vmware, git-cola, otter-browser, kazam, menulibre, musictube
  * new profiles: onboard, fractal, mirage, quaternion, spectral, man, psi
  * new profiles: smuxi-frontend-gnome, balsa, kube, trojita, youtube
  * new profiles: youtubemusic-nativefier, cola, dbus-send, notify-send
  * new profiles: qrencode, ytmdesktop, twitch
  * new profiles: xournalpp, chromium-freeworld, equalx
- remove firejail-0.9.62-fix-usr-etc.patch, included upstream
- remove firejail-apparmor-3.0.diff, included upstream</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1604318400">- packaging fixes</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1611835200">- Update to 0.9.64.2:
  * allow --tmpfs inside $HOME for unprivileged users
  * --disable-usertmpfs compile time option
  * allow AF_BLUETOOTH via --protocol=bluetooth
  * setup guide for new users: contrib/firejail-welcome.sh
  * implement netns in profiles
  * added nolocal6.net IPv6 network filter
  * new profiles: spectacle, chromium-browser-privacy,
    gtk-straw-viewer, gtk-youtube-viewer, gtk2-youtube-viewer,
    gtk3-youtube-viewer, straw-viewer, lutris, dolphin-emu,
    authenticator-rs, servo, npm, marker, yarn, lsar, unar, agetpkg,
    mdr, shotwell, qnapi, new profiles: guvcview, pkglog, kdiff3, CoyIM.</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1612699200">- Update to 0.9.64.4:
  * disabled overlayfs, pending multiple fixes
  * fixed launch firefox for open url in telegram-desktop.profile</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- firejail 0.9.66:
  * deprecated --audit options, relpaced by jailcheck utility
  * deprecated follow-symlink-as-user from firejail.config
  * new firejail.config settings: private-bin, private-etc
  * new firejail.config settings: private-opt, private-srv
  * new firejail.config settings: whitelist-disable-topdir
  * new firejail.config settings: seccomp-filter-add
  * removed kcmp syscall from seccomp default filter
  * rename --noautopulse to keep-config-pulse
  * filtering environment variables
  * zsh completion
  * command line: --mkdir, --mkfile
  * --protocol now accumulates
  * jailtest utility for testing running sandboxes
  * faccessat2 syscall support
  * --private-dev keeps /dev/input
  * added --noinput to disable /dev/input
  * add support for subdirs in --private-etc
  * subdirs support in private-etc
  * input devices support in private-dev, --no-input
  * support trailing comments on profile lines
  * many new profiles
- split shell completion into standard subpackages</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1644148800">- update to firejail 0.9.68:
  - security: on Ubuntu, the PPA is now recommended over the distro package
  - (see README.md) (#4748)
  - security: bugfix: private-cwd leaks access to the entire filesystem
  - (#4780); reported by Hugo Osvaldo Barrera
  - feature: remove (some) environment variables with auth-tokens (#4157)
  - feature: ALLOW_TRAY condition (#4510 #4599)
  - feature: add basic Firejail support to AppArmor base abstraction (#3226
  - #4628)
  - feature: intrusion detection system (--ids-init, --ids-check)
  - feature: deterministic shutdown command (--deterministic-exit-code,
  - --deterministic-shutdown) (#928 #3042 #4635)
  - feature: noprinters command (#4607 #4827)
  - feature: network monitor (--nettrace)
  - feature: network locker (--netlock) (#4848)
  - feature: whitelist-ro profile command (#4740)
  - feature: disable pipewire with --nosound (#4855)
  - feature: Unset TMP if it doesn't exist inside of sandbox (#4151)
  - feature: Allow apostrophe in whitelist and blacklist (#4614)
  - feature: AppImage support in --build command (#4878)
  - modifs: exit code: distinguish fatal signals by adding 128 (#4533)
  - modifs: firecfg.config is now installed to /etc/firejail/ (#408 #4669)
  - modifs: close file descriptors greater than 2 (--keep-fd) (#4845)
  - modifs: nogroups now stopped causing certain system groups to be dropped,
  - which are now controlled by the relevant "no" options instead (such as
  - nosound -&gt; drop audio group), which fixes device access issues on systems
  - not using (e)logind (such as with seatd) (#4632 #4725 #4732 #4851)
  - removal: --disable-whitelist at compile time
  - removal: whitelist=yes/no in /etc/firejail/firejail.config
  - bugfix: Fix sndio support (#4362 #4365)
  - bugfix: Error mounting tmpfs (MS_REMOUNT flag not being cleared) (#4387)
  - bugfix: --build clears the environment (#4460 #4467)
  - bugfix: firejail hangs with net parameter (#3958 #4476)
  - bugfix: Firejail does not work with a custom hosts file (#2758 #4560)
  - bugfix: --tracelog and --trace override /etc/ld.so.preload (#4558 #4586)
  - bugfix: PATH_MAX is undeclared on musl libc (#4578 #4579 #4583 #4606)
  - bugfix: firejail symlinks are not skipped with private-bin + globs (#4626)
  - bugfix: Firejail rejects empty arguments (#4395)
  - bugfix: firecfg does not work with symlinks (discord.desktop) (#4235)
  - bugfix: Seccomp list output goes to stdout instead of stderr (#4328)
  - bugfix: private-etc does not work with symlinks (#4887)
  - bugfix: Hardware key not detected on keepassxc (#4883)
  - build: allow building with address sanitizer (#4594)
  - build: Stop linking pthread (#4695)
  - build: Configure cleanup and improvements (#4712)
  - ci: add profile checks for sorting disable-programs.inc and
  - firecfg.config and for the required arguments in private-etc (#2739 #4643)
  - ci: pin GitHub actions to SHAs and use Dependabot to update them (#4774)
  - docs: Add new command checklist to CONTRIBUTING.md (#4413)
  - docs: Rework bug report issue template and add both a question and a
  - feature request template (#4479 #4515 #4561)
  - docs: fix contradictory descriptions of machine-id ("preserves" vs
  - "spoofs") (#4689)
  - docs: Document that private-bin and private-etc always accumulate (#4078)
  - new includes: whitelist-run-common.inc (#4288), disable-X11.inc (#4462)
  - new includes: disable-proc.inc (#4521)
  - removed includes: disable-passwordmgr.inc (#4454 #4461)
  - new profiles: microsoft-edge-beta, clion-eap, lifeograph, zim
  - new profiles: io.github.lainsce.Notejot, rednotebook, gallery-dl
  - new profiles: yt-dlp, goldendict, goldendict, bundle, cmake
  - new profiles: make, meson, pip, codium, telnet, ftp, OpenStego
  - new profiles: imv, retroarch, torbrowser, CachyBrowser,
  - new profiles: notable, RPCS3, wget2, raincat, conitop, 1passwd,
  - new profiles: Seafile, neovim, com.github.tchx84.Flatseal</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1655208000">- update to version 0.9.70:
  - fix bsc#1199148 CVE-2022-31214
  - security: CVE-2022-31214 - root escalation in --join logic
  - Reported by Matthias Gerstner, working exploit code was provided to our
  - development team. In the same time frame, the problem was independently
  - reported by Birk Blechschmidt. Full working exploit code was also provided.
  - feature: enable shell tab completion with --tab (#4936)
  - feature: disable user profiles at compile time (#4990)
  - feature: Allow resolution of .local names with avahi-daemon in the apparmor
  - profile (#5088)
  - feature: always log seccomp errors (#5110)
  - feature: firecfg --guide, guided user configuration (#5111)
  - feature: --oom, kernel OutOfMemory-killer (#5122)
  - modif: --ids feature needs to be enabled at compile time (#5155)
  - modif: --nettrace only available to root user
  - rework: whitelist restructuring (#4985)
  - rework: firemon, speed up and lots of fixes
  - bugfix: --private-cwd not expanding macros, broken hyperrogue (#4910)
  - bugfix: nogroups + wrc prints confusing messages (#4930 #4933)
  - bugfix: openSUSE Leap - whitelist-run-common.inc (#4954)
  - bugfix: fix printing in evince (#5011)
  - bugfix: gcov: fix gcov functions always declared as dummy (#5028)
  - bugfix: Stop warning on safe supplementary group clean (#5114)
  - build: remove ultimately unused INSTALL and RANLIB check macros (#5133)
  - build: mkdeb.sh.in: pass remaining arguments to ./configure (#5154)
  - ci: replace centos (EOL) with almalinux (#4912)
  - ci: fix --version not printing compile-time features (#5147)
  - ci: print version after install &amp; fix apparmor support on build_apparmor
  - (#5148)
  - docs: Refer to firejail.config in configuration files (#4916)
  - docs: firejail.config: add warning about allow-tray (#4946)
  - docs: mention that the protocol command accumulates (#5043)
  - docs: mention inconsistent homedir bug involving --private=dir (#5052)
  - docs: mention capabilities(7) on --caps (#5078)
  - new profiles: onionshare, onionshare-cli, opera-developer, songrec
  - new profiles: node-gyp, npx, semver, ping-hardened
  - removed profiles: nvm</changelog>
</package>
<package pkgid="b2c8f87eae27d0a8571018504d4f4056bd33911851c63dd31d7cf068f2e190ac" name="firejail-zsh-completion" arch="ppc64le">
  <version epoch="0" ver="0.9.70" rel="bp154.2.3.1"/>
  <changelog author="avindra@opensuse.org" date="1513166400">- Update to version 0.9.52:
  * New features
    + systemd-resolved integration
    + whitelisted /var in most profiles
    + GTK2, GTK3 and Qt4 private-lib support
    + --debug-private-lib
    + test deployment of private-lib for the some apps: evince,
    galculator, gnome-calculator, leafpad, mousepad,
    transmission-gtk, xcalc, xmr-stak-cpu, atril,
    mate-color-select, tar, file, strings, gpicview, eom, eog,
    gedit, pluma
    + netfilter template support
    + various new arguments
  * --writable-run-user
  * --rlimit-as
  * --rlimit-cpu
  * --timeout
  * --build (profile build tool)
  * --netfilter.print
  * --netfilter6.print
  * deprecations in modif
    + --allow-private-blacklists (blacklisting, read-only,
    read-write, tmpfs and noexec are allowed in private home
    directories
    + remount-proc-sys (firejail.config)
    + follow-symlink-private-bin (firejail.config)
    + --profile-path
  * enhancements
    + support Firejail user config directory in firecfg
    + disable DBus activation in firecfg
    + enumerate root directories in apparmor profile
    + /etc and /usr/share whitelisting support
    + globbing support for --private-bin
  * new profiles: upstreamed profiles from 3 sources:
    + https://github.com/chiraag-nataraj/firejail-profiles
    + https://github.com/nyancat18/fe
    + https://aur.archlinux.org/packages/firejail-profiles
  * new profiles: terasology, surf, rocketchat, clamscan, clamdscan,
    clamdtop, freshclam, xmr-stak-cpu, amule, ardour4, ardour5,
    brackets, calligra, calligraauthor, calligraconverter,
    calligraflow, calligraplan, calligraplanwork, calligrasheets,
    calligrastage, calligrawords, cin, dooble, dooble-qt4,
    fetchmail, freecad, freecadcmd, google-earth,imagej, karbon,
    1kdenlive, krita, linphone, lmms, macrofusion, mpd, natron,
    Natron, ricochet, shotcut, teamspeak3, tor, tor-browser-en,
    Viber, x-terminal-emulator, zart, conky, arch-audit, ffmpeg,
    bluefish, cinelerra, openshot-qt, pinta, uefitool, aosp,
    pdfmod, gnome-ring, xcalc, zaproxy, kopete, cliqz,
    signal-desktop, kget, nheko, Enpass, kwin_x11, krunner, ping,
    bsdtar, makepkg (Arch), archaudit-report cower (Arch), kdeinit4
- Add full link to source tarball from sourceforge
- Add asc file</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1535025600">- Changed the permissions of the firejail executable to 4750.
  Setuid mode is used, but only allowed for users in the newly
  created group 'firejail' (boo#1059013).
- Update to version 0.9.54:
  * modif: --force removed
  * modif: --csh, --zsh removed
  * modif: --debug-check-filename removed
  * modif: --git-install and --git-uninstall removed
  * modif: support for private-bin, private-lib and shell none has been
    disabled while running AppImage archives in order to be able to use
    our regular profile files with AppImages.
  * modif: restrictions for /proc, /sys and /run/user directories
    are moved from AppArmor profile into firejail executable
  * modif: unifying Chromium and Firefox browsers profiles.
    All users of Firefox-based browsers who use addons and plugins
    that read/write from ${HOME} will need to uncomment the includes for
    firefox-common-addons.inc in firefox-common.profile.
  * modif: split disable-devel.inc into disable-devel and
    disable-interpreters.inc
  * Firejail user access database (/etc/firejail/firejail.users,
    man firejail-users)
  * add --noautopulse to disable automatic ~/.config/pulse (for complex setups)
  * Spectre mitigation patch for gcc and clang compiler
  * D-Bus handling (--nodbus)
  * AppArmor support for overlayfs and chroot sandboxes
  * AppArmor support for AppImages
  * Enable AppArmor by default for a large number of programs
  * firejail --apparmor.print option
  * firemon --apparmor option
  * apparmor yes/no flag in /etc/firejail/firejail.config
  * seccomp syscall list update for glibc 2.26-10
  * seccomp disassembler for --seccomp.print option
  * seccomp machine code optimizer for default seccomp filters
  * IPv6 DNS support
  * whitelist support for overlay and chroot sandboxes
  * private-dev support for overlay and chroot sandboxes
  * private-tmp support for overlay and chroot sandboxes
  * added sandbox name support in firemon
  * firemon/prctl enhancements
  * noblacklist support for /sys/module directory
  * whitelist support for /sys/module directory
  * new profiles: basilisk, Tor Browser language packs, PlayOnLinux, sylpheed,
  * new profiles: discord-canary, pycharm-community, pycharm-professional,
  * new profiles: pdfchain, tilp, vivaldi-snapshot, bitcoin-qt, kaffeine,
  * new profiles: falkon, gnome-builder, asunder, VS Code, gnome-recipes,
  * new profiles: akonadi_controle, evince-previewer, evince-thumbnailer,
  * new profiles: blender-2.8, thunderbird-beta, ncdu, gnome-logs, gcloud,
  * new profiles: musixmatch, gunzip, bunzip2, enchant-lsmod, enchant-lsmod-2,
  * new profiles: enchant, enchant-2, Discord, acat, adiff, als, apack,
  * new profiles: arepack, aunpack profiles, ppsspp, scallion, clion,
  * new profiles: baloo_filemetadata_temp_extractor, AnyDesk, webstorm, xmind,
  * new profiles: qmmp, sayonara</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1536580800">- Remove the rpmlintrc file since the warnings are no longer relevant.</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1536667200">- Drop ldconfig calls since firejail libraries are installed in their
  own subdirectory which is not scanned by ldconfig.</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1537617600">- update to version 0.9.56:
  * modif: removed CFG_CHROOT_DESKTOP configuration option
  * modif: removed compile time --enable-network=restricted
  * modif: removed compile time --disable-bind
  * modif: --net=none allowed even if networking was disabled at compile
    time or at run time
  * modif: allow system users to run the sandbox
  * support wireless devices in --net option
  * support tap devices in --net option (tunneling support)
  * allow IP address configuration if the parent interface specified
    by --net is not configured (--netmask)
  * support for firetunnel utility
  * disable U2F devices (--nou2f)
  * add --private-cache to support private ~/.cache
  * support full paths in private-lib
  * globbing support in private-lib
  * support for local user directories in firecfg (--bindir)
  * new profiles: ms-excel, ms-office, ms-onenote, ms-outlook, ms-powerpoint,
  * new profiles: ms-skype, ms-word, riot-desktop, gnome-mpv, snox, gradio,
  * new profiles: standardnotes-desktop, shellcheck, patch, flameshot,
  * new profiles: rview, rvim, vimcat, vimdiff, vimpager, vimtutor, xxd,
  * new profiles: Beaker, electrum, clamtk, pybitmessage, dig, whois,
  * new profiles: jdownloader, Fluxbox, Blackbox, Awesome, i3
  * new profiles: start-tor-browser.desktop</changelog>
  <changelog author="info@paolostivanin.com" date="1549022400">-  update to version 0.9.58:
  * --disable-mnt rework
  * --net.print command
  * GitLab CI/CD integration: disto specific builds
  * profile parser enhancements and conditional handling support
    for HAS_APPIMAGE, HAS_NODBUS, BROWSER_DISABLE_U2F
  * profile name support
  * added explicit nonewprivs support to join option
  * new profiles: QMediathekView, aria2c, Authenticator, checkbashisms
  * new profiles: devilspie, devilspie2, easystroke, github-desktop, min
  * new profiles: bsdcat, bsdcpio, bsdtar, lzmadec, lbunzip2, lbzcat
  * new profiles: lbzip2, lzcat, lzcmp, lzdiff, lzegrep, lzfgrep, lzgrep
  * new profiles: lzless, lzma, lzmainfo, lzmore, unlzma, unxz, xzcat
  * new profiles: xzcmp, xzdiff, xzegrep, xzfgrep, xzgrep, xzless, xzmore
  * new profiles: lzip, artha, nitroshare, nitroshare-cli, nitroshare-nmh
  * new profiles: nirtoshare-send, nitroshare-ui, mencoder, gnome-pie
  * new profiles: masterpdfeditor, QOwnNotes, aisleriot, Mendeley
  * new profiles: feedreader, ocenaudio, mpsyt, thunderbird-wayland
  * new profiles: supertuxkart, ghostwriter, gajim-history-manager
  * bugfixes</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1559476800">- update to version 0.9.60:
  * security bug reported by Austin Morton:
  Seccomp filters are copied into /run/firejail/mnt, and are writable
  within the jail. A malicious process can modify files from inside the
  jail. Processes that are later joined to the jail will not have seccomp
  filters applied.
  CVE-2019-12589
  boo#1137139
  * memory-deny-write-execute now also blocks memfd_create
  * add private-cwd option to control working directory within jail
  * blocking system D-Bus socket with --nodbus
  * bringing back Centos 6 support
  * drop support for flatpak/snap packages
  * new profiles: crow, nyx, mypaint, celluoid, nano, transgui, mpdris2
  * new profiles: sysprof, simplescreenrecorder, geekbench, xfce4-mixer
  * new profiles: pavucontrol, d-feet, seahorse, secret-tool, gnome-keyring
  * new profiles: regextester, hardinfo, gnome-system-log, gnome-nettool
  * new profiles: netactview, redshift, devhelp, assogiate, subdownloader
  * new profiles: font-manager, exfalso, gconf-editor, dconf-editor
  * new profiles: sysprof-cli, seahorse-tool, secret-tool, dconf, gsettings
  * new profiles: code-oss, pragha, Maelstrom, ostrichriders, bzflag
  * new profiles: freeciv, lincity-ng, megaglest, openttd, crawl, crawl-tiles
  * new profiles: teeworlds, torcs, tremulous, warsow, lugaru, manaplus
  * new profiles: pioneer, scorched3d, widelands, freemind, kid3, kid3-qt
  * new profiles: kid3-cli, nomacs, freecol, opencity, openclonk, slashem
  * new profiles: vultureseye, vulturesclaw, anki, cheese, utox, mp3splt
  * new profiles: oggsplt, flacsplt, gramps, newsboat, freeoffice-planmaker
  * new profiles: autokey-gtk, autokey-qt, autokey-run, autokey-shell
  * new profiles: freeoffice-presentations, freeoffice-textmaker, mp3wrap
  * new profiles: inkview, meteo-qt, mp3splt-gtk, ktouch, yelp, cantata</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1581422400">- update to version 0.9.62
  * added file-copy-limit in /etc/firejail/firejail.config
  * profile templates (/usr/share/doc/firejail)
  * allow-debuggers support in profiles
  * several seccomp enhancements
  * compiler flags autodetection
  * move chroot entirely from path based to file descriptor based mounts
  * whitelisting /usr/share in a large number of profiles
  * new scripts in conrib: gdb-firejail.sh and sort.py
  * enhancement: whitelist /usr/share in some profiles
  * added signal mediation to apparmor profile
  * new conditions: HAS_X11, HAS_NET
  * new profiles: qgis, klatexformula, klatexformula_cmdl, links, xlinks
  * new profiles: pandoc, teams-for-linux, OpenArena, gnome-sound-recorder
  * new profiles: godot, tcpdump, tshark, newsbeuter, keepassxc-cli
  * new profiles: keepassxc-proxy, rhythmbox-client, jerry, zeal, mpg123
  * new profiles: conplay, mpg123.bin, mpg123-alsa, mpg123-id3dump, out123
  * new profiles: mpg123-jack, mpg123-nas, mpg123-openal, mpg123-oss
  * new profiles: mpg123-portaudio, mpg123-pulse, mpg123-strip, pavucontrol-qt
  * new profiles: gnome-characters, gnome-character-map, rsync, Whalebird,
  * new profiles: tor-browser (AUR), Zulip, tb-starter-wrapper, bzcat,
  * new profiles: kiwix-desktop, bzcat, zstd, pzstd, zstdcat, zstdgrep, zstdless
  * new profiles: zstdmt, unzstd, i2p, ar, gnome-latex, pngquant, kalgebra
  * new profiles: kalgebramobile, signal-cli, amuled, kfind, profanity
  * new profiles: audio-recorder, cameramonitor, ddgtk, drawio, unf, gmpc
  * new profiles: electron-mail, gist, gist-paste</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1588161600">- Add firejail-0.9.62-fix-usr-etc.patch:
  Check /usr/etc not just /etc
- Replace python interpreter line in sort.py</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1596888000">- Add patches fix-CVE-2020-17367.patch and fix-CVE-2020-17368.patch to fix CVE-2020-17367 and CVE-2020-17368 and boo#1174986</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1597320000">- Update to 0.9.62.2
  * fix CVE-2020-17367
  * fix CVE-2020-17368
  * additional hardening and bug fixes
- Remove fix-CVE-2020-17368.patch
- Remove fix-CVE-2020-17367.patch</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1597838400">- Update to 0.9.62.4
  * fix AppArmor broken in the previous release
  * miscellaneous fixes</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1603713600">- Add firejail-apparmor-3.0.diff to make the AppArmor profile compatible with
  AppArmor 3.0 (add missing include &lt;tunables/global&gt;)</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1604232000">- Update to version 0.9.64:
  * replaced --nowrap option with --wrap in firemon
  * The blocking action of seccomp filters has been changed from
    killing the process to returning EPERM to the caller. To get the
    previous behaviour, use --seccomp-error-action=kill or
    syscall:kill syntax when constructing filters, or override in
    /etc/firejail/firejail.config file.
  * Fine-grained D-Bus sandboxing with xdg-dbus-proxy.
    xdg-dbus-proxy must be installed, if not D-Bus access will be allowed.
    With this version nodbus is deprecated, in favor of dbus-user none and
    dbus-system none and will be removed in a future version.
  * DHCP client support
  * firecfg only fix dektop-files if started with sudo
  * SELinux labeling support
  * custom 32-bit seccomp filter support
  * restrict ${RUNUSER} in several profiles
  * blacklist shells such as bash in several profiles
  * whitelist globbing
  * mkdir and mkfile support for /run/user directory
  * support ignore for include
  * --include on the command line
  * splitting up media players whitelists in whitelist-players.inc
  * new condition: HAS_NOSOUND
  * new profiles: gfeeds, firefox-x11, tvbrowser, rtv, clipgrab, muraster
  * new profiles: gnome-passwordsafe, bibtex, gummi, latex, mupdf-x11-curl
  * new profiles: pdflatex, tex, wpp, wpspdf, wps, et, multimc, mupdf-x11
  * new profiles: gnome-hexgl, com.github.johnfactotum.Foliate, mupdf-gl, mutool
  * new profiles: desktopeditors, impressive, planmaker18, planmaker18free
  * new profiles: presentations18, presentations18free, textmaker18, teams
  * new profiles: textmaker18free, xournal, gnome-screenshot, ripperX
  * new profiles: sound-juicer, com.github.dahenson.agenda, gnome-pomodoro
  * new profiles: gnome-todo, x2goclient, iagno, kmplayer, penguin-command
  * new profiles: frogatto, gnome-mines, gnome-nibbles, lightsoff, warmux
  * new profiles: ts3client_runscript.sh, ferdi, abiword, four-in-a-row
  * new profiles: gnome-mahjongg, gnome-robots, gnome-sudoku, gnome-taquin
  * new profiles: gnome-tetravex, blobwars, gravity-beams-and-evaporating-stars
  * new profiles: hyperrogue, jumpnbump-menu, jumpnbump, magicor, mindless
  * new profiles: mirrormagic, mrrescue, scorched3d-wrapper, scorchwentbonkers
  * new profiles: seahorse-adventures, wordwarvi, xbill, gnome-klotski
  * new profiles: swell-foop, fdns, five-or-more, steam-runtime
  * new profiles: nicotine, plv, mocp, apostrophe, quadrapassel, dino-im
  * new profiles: hitori, bijiben, gnote, gnubik, ZeGrapher, xonotic-sdl-wrapper
  * new profiles: gapplication, openarena_ded, element-desktop, cawbird
  * new profiles: freetube, strawberry, jitsi-meet-desktop
  * new profiles: homebank, mattermost-desktop, newsflash, com.gitlab.newsflash
  * new profiles: sushi, xfce4-screenshooter, org.gnome.NautilusPreviewer, lyx
  * new profiles: minitube, nuclear, mtpaint, minecraft-launcher, gnome-calendar
  * new profiles: vmware, git-cola, otter-browser, kazam, menulibre, musictube
  * new profiles: onboard, fractal, mirage, quaternion, spectral, man, psi
  * new profiles: smuxi-frontend-gnome, balsa, kube, trojita, youtube
  * new profiles: youtubemusic-nativefier, cola, dbus-send, notify-send
  * new profiles: qrencode, ytmdesktop, twitch
  * new profiles: xournalpp, chromium-freeworld, equalx
- remove firejail-0.9.62-fix-usr-etc.patch, included upstream
- remove firejail-apparmor-3.0.diff, included upstream</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1604318400">- packaging fixes</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1611835200">- Update to 0.9.64.2:
  * allow --tmpfs inside $HOME for unprivileged users
  * --disable-usertmpfs compile time option
  * allow AF_BLUETOOTH via --protocol=bluetooth
  * setup guide for new users: contrib/firejail-welcome.sh
  * implement netns in profiles
  * added nolocal6.net IPv6 network filter
  * new profiles: spectacle, chromium-browser-privacy,
    gtk-straw-viewer, gtk-youtube-viewer, gtk2-youtube-viewer,
    gtk3-youtube-viewer, straw-viewer, lutris, dolphin-emu,
    authenticator-rs, servo, npm, marker, yarn, lsar, unar, agetpkg,
    mdr, shotwell, qnapi, new profiles: guvcview, pkglog, kdiff3, CoyIM.</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1612699200">- Update to 0.9.64.4:
  * disabled overlayfs, pending multiple fixes
  * fixed launch firefox for open url in telegram-desktop.profile</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- firejail 0.9.66:
  * deprecated --audit options, relpaced by jailcheck utility
  * deprecated follow-symlink-as-user from firejail.config
  * new firejail.config settings: private-bin, private-etc
  * new firejail.config settings: private-opt, private-srv
  * new firejail.config settings: whitelist-disable-topdir
  * new firejail.config settings: seccomp-filter-add
  * removed kcmp syscall from seccomp default filter
  * rename --noautopulse to keep-config-pulse
  * filtering environment variables
  * zsh completion
  * command line: --mkdir, --mkfile
  * --protocol now accumulates
  * jailtest utility for testing running sandboxes
  * faccessat2 syscall support
  * --private-dev keeps /dev/input
  * added --noinput to disable /dev/input
  * add support for subdirs in --private-etc
  * subdirs support in private-etc
  * input devices support in private-dev, --no-input
  * support trailing comments on profile lines
  * many new profiles
- split shell completion into standard subpackages</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1644148800">- update to firejail 0.9.68:
  - security: on Ubuntu, the PPA is now recommended over the distro package
  - (see README.md) (#4748)
  - security: bugfix: private-cwd leaks access to the entire filesystem
  - (#4780); reported by Hugo Osvaldo Barrera
  - feature: remove (some) environment variables with auth-tokens (#4157)
  - feature: ALLOW_TRAY condition (#4510 #4599)
  - feature: add basic Firejail support to AppArmor base abstraction (#3226
  - #4628)
  - feature: intrusion detection system (--ids-init, --ids-check)
  - feature: deterministic shutdown command (--deterministic-exit-code,
  - --deterministic-shutdown) (#928 #3042 #4635)
  - feature: noprinters command (#4607 #4827)
  - feature: network monitor (--nettrace)
  - feature: network locker (--netlock) (#4848)
  - feature: whitelist-ro profile command (#4740)
  - feature: disable pipewire with --nosound (#4855)
  - feature: Unset TMP if it doesn't exist inside of sandbox (#4151)
  - feature: Allow apostrophe in whitelist and blacklist (#4614)
  - feature: AppImage support in --build command (#4878)
  - modifs: exit code: distinguish fatal signals by adding 128 (#4533)
  - modifs: firecfg.config is now installed to /etc/firejail/ (#408 #4669)
  - modifs: close file descriptors greater than 2 (--keep-fd) (#4845)
  - modifs: nogroups now stopped causing certain system groups to be dropped,
  - which are now controlled by the relevant "no" options instead (such as
  - nosound -&gt; drop audio group), which fixes device access issues on systems
  - not using (e)logind (such as with seatd) (#4632 #4725 #4732 #4851)
  - removal: --disable-whitelist at compile time
  - removal: whitelist=yes/no in /etc/firejail/firejail.config
  - bugfix: Fix sndio support (#4362 #4365)
  - bugfix: Error mounting tmpfs (MS_REMOUNT flag not being cleared) (#4387)
  - bugfix: --build clears the environment (#4460 #4467)
  - bugfix: firejail hangs with net parameter (#3958 #4476)
  - bugfix: Firejail does not work with a custom hosts file (#2758 #4560)
  - bugfix: --tracelog and --trace override /etc/ld.so.preload (#4558 #4586)
  - bugfix: PATH_MAX is undeclared on musl libc (#4578 #4579 #4583 #4606)
  - bugfix: firejail symlinks are not skipped with private-bin + globs (#4626)
  - bugfix: Firejail rejects empty arguments (#4395)
  - bugfix: firecfg does not work with symlinks (discord.desktop) (#4235)
  - bugfix: Seccomp list output goes to stdout instead of stderr (#4328)
  - bugfix: private-etc does not work with symlinks (#4887)
  - bugfix: Hardware key not detected on keepassxc (#4883)
  - build: allow building with address sanitizer (#4594)
  - build: Stop linking pthread (#4695)
  - build: Configure cleanup and improvements (#4712)
  - ci: add profile checks for sorting disable-programs.inc and
  - firecfg.config and for the required arguments in private-etc (#2739 #4643)
  - ci: pin GitHub actions to SHAs and use Dependabot to update them (#4774)
  - docs: Add new command checklist to CONTRIBUTING.md (#4413)
  - docs: Rework bug report issue template and add both a question and a
  - feature request template (#4479 #4515 #4561)
  - docs: fix contradictory descriptions of machine-id ("preserves" vs
  - "spoofs") (#4689)
  - docs: Document that private-bin and private-etc always accumulate (#4078)
  - new includes: whitelist-run-common.inc (#4288), disable-X11.inc (#4462)
  - new includes: disable-proc.inc (#4521)
  - removed includes: disable-passwordmgr.inc (#4454 #4461)
  - new profiles: microsoft-edge-beta, clion-eap, lifeograph, zim
  - new profiles: io.github.lainsce.Notejot, rednotebook, gallery-dl
  - new profiles: yt-dlp, goldendict, goldendict, bundle, cmake
  - new profiles: make, meson, pip, codium, telnet, ftp, OpenStego
  - new profiles: imv, retroarch, torbrowser, CachyBrowser,
  - new profiles: notable, RPCS3, wget2, raincat, conitop, 1passwd,
  - new profiles: Seafile, neovim, com.github.tchx84.Flatseal</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1655208000">- update to version 0.9.70:
  - fix bsc#1199148 CVE-2022-31214
  - security: CVE-2022-31214 - root escalation in --join logic
  - Reported by Matthias Gerstner, working exploit code was provided to our
  - development team. In the same time frame, the problem was independently
  - reported by Birk Blechschmidt. Full working exploit code was also provided.
  - feature: enable shell tab completion with --tab (#4936)
  - feature: disable user profiles at compile time (#4990)
  - feature: Allow resolution of .local names with avahi-daemon in the apparmor
  - profile (#5088)
  - feature: always log seccomp errors (#5110)
  - feature: firecfg --guide, guided user configuration (#5111)
  - feature: --oom, kernel OutOfMemory-killer (#5122)
  - modif: --ids feature needs to be enabled at compile time (#5155)
  - modif: --nettrace only available to root user
  - rework: whitelist restructuring (#4985)
  - rework: firemon, speed up and lots of fixes
  - bugfix: --private-cwd not expanding macros, broken hyperrogue (#4910)
  - bugfix: nogroups + wrc prints confusing messages (#4930 #4933)
  - bugfix: openSUSE Leap - whitelist-run-common.inc (#4954)
  - bugfix: fix printing in evince (#5011)
  - bugfix: gcov: fix gcov functions always declared as dummy (#5028)
  - bugfix: Stop warning on safe supplementary group clean (#5114)
  - build: remove ultimately unused INSTALL and RANLIB check macros (#5133)
  - build: mkdeb.sh.in: pass remaining arguments to ./configure (#5154)
  - ci: replace centos (EOL) with almalinux (#4912)
  - ci: fix --version not printing compile-time features (#5147)
  - ci: print version after install &amp; fix apparmor support on build_apparmor
  - (#5148)
  - docs: Refer to firejail.config in configuration files (#4916)
  - docs: firejail.config: add warning about allow-tray (#4946)
  - docs: mention that the protocol command accumulates (#5043)
  - docs: mention inconsistent homedir bug involving --private=dir (#5052)
  - docs: mention capabilities(7) on --caps (#5078)
  - new profiles: onionshare, onionshare-cli, opera-developer, songrec
  - new profiles: node-gyp, npx, semver, ping-hardened
  - removed profiles: nvm</changelog>
</package>
<package pkgid="6fa3e833d905133c4e63a9f57cd38a14522caec82cc79b339b91a88ed11c5b1a" name="firejail-zsh-completion" arch="s390x">
  <version epoch="0" ver="0.9.70" rel="bp154.2.3.1"/>
  <changelog author="avindra@opensuse.org" date="1513166400">- Update to version 0.9.52:
  * New features
    + systemd-resolved integration
    + whitelisted /var in most profiles
    + GTK2, GTK3 and Qt4 private-lib support
    + --debug-private-lib
    + test deployment of private-lib for the some apps: evince,
    galculator, gnome-calculator, leafpad, mousepad,
    transmission-gtk, xcalc, xmr-stak-cpu, atril,
    mate-color-select, tar, file, strings, gpicview, eom, eog,
    gedit, pluma
    + netfilter template support
    + various new arguments
  * --writable-run-user
  * --rlimit-as
  * --rlimit-cpu
  * --timeout
  * --build (profile build tool)
  * --netfilter.print
  * --netfilter6.print
  * deprecations in modif
    + --allow-private-blacklists (blacklisting, read-only,
    read-write, tmpfs and noexec are allowed in private home
    directories
    + remount-proc-sys (firejail.config)
    + follow-symlink-private-bin (firejail.config)
    + --profile-path
  * enhancements
    + support Firejail user config directory in firecfg
    + disable DBus activation in firecfg
    + enumerate root directories in apparmor profile
    + /etc and /usr/share whitelisting support
    + globbing support for --private-bin
  * new profiles: upstreamed profiles from 3 sources:
    + https://github.com/chiraag-nataraj/firejail-profiles
    + https://github.com/nyancat18/fe
    + https://aur.archlinux.org/packages/firejail-profiles
  * new profiles: terasology, surf, rocketchat, clamscan, clamdscan,
    clamdtop, freshclam, xmr-stak-cpu, amule, ardour4, ardour5,
    brackets, calligra, calligraauthor, calligraconverter,
    calligraflow, calligraplan, calligraplanwork, calligrasheets,
    calligrastage, calligrawords, cin, dooble, dooble-qt4,
    fetchmail, freecad, freecadcmd, google-earth,imagej, karbon,
    1kdenlive, krita, linphone, lmms, macrofusion, mpd, natron,
    Natron, ricochet, shotcut, teamspeak3, tor, tor-browser-en,
    Viber, x-terminal-emulator, zart, conky, arch-audit, ffmpeg,
    bluefish, cinelerra, openshot-qt, pinta, uefitool, aosp,
    pdfmod, gnome-ring, xcalc, zaproxy, kopete, cliqz,
    signal-desktop, kget, nheko, Enpass, kwin_x11, krunner, ping,
    bsdtar, makepkg (Arch), archaudit-report cower (Arch), kdeinit4
- Add full link to source tarball from sourceforge
- Add asc file</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1535025600">- Changed the permissions of the firejail executable to 4750.
  Setuid mode is used, but only allowed for users in the newly
  created group 'firejail' (boo#1059013).
- Update to version 0.9.54:
  * modif: --force removed
  * modif: --csh, --zsh removed
  * modif: --debug-check-filename removed
  * modif: --git-install and --git-uninstall removed
  * modif: support for private-bin, private-lib and shell none has been
    disabled while running AppImage archives in order to be able to use
    our regular profile files with AppImages.
  * modif: restrictions for /proc, /sys and /run/user directories
    are moved from AppArmor profile into firejail executable
  * modif: unifying Chromium and Firefox browsers profiles.
    All users of Firefox-based browsers who use addons and plugins
    that read/write from ${HOME} will need to uncomment the includes for
    firefox-common-addons.inc in firefox-common.profile.
  * modif: split disable-devel.inc into disable-devel and
    disable-interpreters.inc
  * Firejail user access database (/etc/firejail/firejail.users,
    man firejail-users)
  * add --noautopulse to disable automatic ~/.config/pulse (for complex setups)
  * Spectre mitigation patch for gcc and clang compiler
  * D-Bus handling (--nodbus)
  * AppArmor support for overlayfs and chroot sandboxes
  * AppArmor support for AppImages
  * Enable AppArmor by default for a large number of programs
  * firejail --apparmor.print option
  * firemon --apparmor option
  * apparmor yes/no flag in /etc/firejail/firejail.config
  * seccomp syscall list update for glibc 2.26-10
  * seccomp disassembler for --seccomp.print option
  * seccomp machine code optimizer for default seccomp filters
  * IPv6 DNS support
  * whitelist support for overlay and chroot sandboxes
  * private-dev support for overlay and chroot sandboxes
  * private-tmp support for overlay and chroot sandboxes
  * added sandbox name support in firemon
  * firemon/prctl enhancements
  * noblacklist support for /sys/module directory
  * whitelist support for /sys/module directory
  * new profiles: basilisk, Tor Browser language packs, PlayOnLinux, sylpheed,
  * new profiles: discord-canary, pycharm-community, pycharm-professional,
  * new profiles: pdfchain, tilp, vivaldi-snapshot, bitcoin-qt, kaffeine,
  * new profiles: falkon, gnome-builder, asunder, VS Code, gnome-recipes,
  * new profiles: akonadi_controle, evince-previewer, evince-thumbnailer,
  * new profiles: blender-2.8, thunderbird-beta, ncdu, gnome-logs, gcloud,
  * new profiles: musixmatch, gunzip, bunzip2, enchant-lsmod, enchant-lsmod-2,
  * new profiles: enchant, enchant-2, Discord, acat, adiff, als, apack,
  * new profiles: arepack, aunpack profiles, ppsspp, scallion, clion,
  * new profiles: baloo_filemetadata_temp_extractor, AnyDesk, webstorm, xmind,
  * new profiles: qmmp, sayonara</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1536580800">- Remove the rpmlintrc file since the warnings are no longer relevant.</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1536667200">- Drop ldconfig calls since firejail libraries are installed in their
  own subdirectory which is not scanned by ldconfig.</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1537617600">- update to version 0.9.56:
  * modif: removed CFG_CHROOT_DESKTOP configuration option
  * modif: removed compile time --enable-network=restricted
  * modif: removed compile time --disable-bind
  * modif: --net=none allowed even if networking was disabled at compile
    time or at run time
  * modif: allow system users to run the sandbox
  * support wireless devices in --net option
  * support tap devices in --net option (tunneling support)
  * allow IP address configuration if the parent interface specified
    by --net is not configured (--netmask)
  * support for firetunnel utility
  * disable U2F devices (--nou2f)
  * add --private-cache to support private ~/.cache
  * support full paths in private-lib
  * globbing support in private-lib
  * support for local user directories in firecfg (--bindir)
  * new profiles: ms-excel, ms-office, ms-onenote, ms-outlook, ms-powerpoint,
  * new profiles: ms-skype, ms-word, riot-desktop, gnome-mpv, snox, gradio,
  * new profiles: standardnotes-desktop, shellcheck, patch, flameshot,
  * new profiles: rview, rvim, vimcat, vimdiff, vimpager, vimtutor, xxd,
  * new profiles: Beaker, electrum, clamtk, pybitmessage, dig, whois,
  * new profiles: jdownloader, Fluxbox, Blackbox, Awesome, i3
  * new profiles: start-tor-browser.desktop</changelog>
  <changelog author="info@paolostivanin.com" date="1549022400">-  update to version 0.9.58:
  * --disable-mnt rework
  * --net.print command
  * GitLab CI/CD integration: disto specific builds
  * profile parser enhancements and conditional handling support
    for HAS_APPIMAGE, HAS_NODBUS, BROWSER_DISABLE_U2F
  * profile name support
  * added explicit nonewprivs support to join option
  * new profiles: QMediathekView, aria2c, Authenticator, checkbashisms
  * new profiles: devilspie, devilspie2, easystroke, github-desktop, min
  * new profiles: bsdcat, bsdcpio, bsdtar, lzmadec, lbunzip2, lbzcat
  * new profiles: lbzip2, lzcat, lzcmp, lzdiff, lzegrep, lzfgrep, lzgrep
  * new profiles: lzless, lzma, lzmainfo, lzmore, unlzma, unxz, xzcat
  * new profiles: xzcmp, xzdiff, xzegrep, xzfgrep, xzgrep, xzless, xzmore
  * new profiles: lzip, artha, nitroshare, nitroshare-cli, nitroshare-nmh
  * new profiles: nirtoshare-send, nitroshare-ui, mencoder, gnome-pie
  * new profiles: masterpdfeditor, QOwnNotes, aisleriot, Mendeley
  * new profiles: feedreader, ocenaudio, mpsyt, thunderbird-wayland
  * new profiles: supertuxkart, ghostwriter, gajim-history-manager
  * bugfixes</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1559476800">- update to version 0.9.60:
  * security bug reported by Austin Morton:
  Seccomp filters are copied into /run/firejail/mnt, and are writable
  within the jail. A malicious process can modify files from inside the
  jail. Processes that are later joined to the jail will not have seccomp
  filters applied.
  CVE-2019-12589
  boo#1137139
  * memory-deny-write-execute now also blocks memfd_create
  * add private-cwd option to control working directory within jail
  * blocking system D-Bus socket with --nodbus
  * bringing back Centos 6 support
  * drop support for flatpak/snap packages
  * new profiles: crow, nyx, mypaint, celluoid, nano, transgui, mpdris2
  * new profiles: sysprof, simplescreenrecorder, geekbench, xfce4-mixer
  * new profiles: pavucontrol, d-feet, seahorse, secret-tool, gnome-keyring
  * new profiles: regextester, hardinfo, gnome-system-log, gnome-nettool
  * new profiles: netactview, redshift, devhelp, assogiate, subdownloader
  * new profiles: font-manager, exfalso, gconf-editor, dconf-editor
  * new profiles: sysprof-cli, seahorse-tool, secret-tool, dconf, gsettings
  * new profiles: code-oss, pragha, Maelstrom, ostrichriders, bzflag
  * new profiles: freeciv, lincity-ng, megaglest, openttd, crawl, crawl-tiles
  * new profiles: teeworlds, torcs, tremulous, warsow, lugaru, manaplus
  * new profiles: pioneer, scorched3d, widelands, freemind, kid3, kid3-qt
  * new profiles: kid3-cli, nomacs, freecol, opencity, openclonk, slashem
  * new profiles: vultureseye, vulturesclaw, anki, cheese, utox, mp3splt
  * new profiles: oggsplt, flacsplt, gramps, newsboat, freeoffice-planmaker
  * new profiles: autokey-gtk, autokey-qt, autokey-run, autokey-shell
  * new profiles: freeoffice-presentations, freeoffice-textmaker, mp3wrap
  * new profiles: inkview, meteo-qt, mp3splt-gtk, ktouch, yelp, cantata</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1581422400">- update to version 0.9.62
  * added file-copy-limit in /etc/firejail/firejail.config
  * profile templates (/usr/share/doc/firejail)
  * allow-debuggers support in profiles
  * several seccomp enhancements
  * compiler flags autodetection
  * move chroot entirely from path based to file descriptor based mounts
  * whitelisting /usr/share in a large number of profiles
  * new scripts in conrib: gdb-firejail.sh and sort.py
  * enhancement: whitelist /usr/share in some profiles
  * added signal mediation to apparmor profile
  * new conditions: HAS_X11, HAS_NET
  * new profiles: qgis, klatexformula, klatexformula_cmdl, links, xlinks
  * new profiles: pandoc, teams-for-linux, OpenArena, gnome-sound-recorder
  * new profiles: godot, tcpdump, tshark, newsbeuter, keepassxc-cli
  * new profiles: keepassxc-proxy, rhythmbox-client, jerry, zeal, mpg123
  * new profiles: conplay, mpg123.bin, mpg123-alsa, mpg123-id3dump, out123
  * new profiles: mpg123-jack, mpg123-nas, mpg123-openal, mpg123-oss
  * new profiles: mpg123-portaudio, mpg123-pulse, mpg123-strip, pavucontrol-qt
  * new profiles: gnome-characters, gnome-character-map, rsync, Whalebird,
  * new profiles: tor-browser (AUR), Zulip, tb-starter-wrapper, bzcat,
  * new profiles: kiwix-desktop, bzcat, zstd, pzstd, zstdcat, zstdgrep, zstdless
  * new profiles: zstdmt, unzstd, i2p, ar, gnome-latex, pngquant, kalgebra
  * new profiles: kalgebramobile, signal-cli, amuled, kfind, profanity
  * new profiles: audio-recorder, cameramonitor, ddgtk, drawio, unf, gmpc
  * new profiles: electron-mail, gist, gist-paste</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1588161600">- Add firejail-0.9.62-fix-usr-etc.patch:
  Check /usr/etc not just /etc
- Replace python interpreter line in sort.py</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1596888000">- Add patches fix-CVE-2020-17367.patch and fix-CVE-2020-17368.patch to fix CVE-2020-17367 and CVE-2020-17368 and boo#1174986</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1597320000">- Update to 0.9.62.2
  * fix CVE-2020-17367
  * fix CVE-2020-17368
  * additional hardening and bug fixes
- Remove fix-CVE-2020-17368.patch
- Remove fix-CVE-2020-17367.patch</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1597838400">- Update to 0.9.62.4
  * fix AppArmor broken in the previous release
  * miscellaneous fixes</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1603713600">- Add firejail-apparmor-3.0.diff to make the AppArmor profile compatible with
  AppArmor 3.0 (add missing include &lt;tunables/global&gt;)</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1604232000">- Update to version 0.9.64:
  * replaced --nowrap option with --wrap in firemon
  * The blocking action of seccomp filters has been changed from
    killing the process to returning EPERM to the caller. To get the
    previous behaviour, use --seccomp-error-action=kill or
    syscall:kill syntax when constructing filters, or override in
    /etc/firejail/firejail.config file.
  * Fine-grained D-Bus sandboxing with xdg-dbus-proxy.
    xdg-dbus-proxy must be installed, if not D-Bus access will be allowed.
    With this version nodbus is deprecated, in favor of dbus-user none and
    dbus-system none and will be removed in a future version.
  * DHCP client support
  * firecfg only fix dektop-files if started with sudo
  * SELinux labeling support
  * custom 32-bit seccomp filter support
  * restrict ${RUNUSER} in several profiles
  * blacklist shells such as bash in several profiles
  * whitelist globbing
  * mkdir and mkfile support for /run/user directory
  * support ignore for include
  * --include on the command line
  * splitting up media players whitelists in whitelist-players.inc
  * new condition: HAS_NOSOUND
  * new profiles: gfeeds, firefox-x11, tvbrowser, rtv, clipgrab, muraster
  * new profiles: gnome-passwordsafe, bibtex, gummi, latex, mupdf-x11-curl
  * new profiles: pdflatex, tex, wpp, wpspdf, wps, et, multimc, mupdf-x11
  * new profiles: gnome-hexgl, com.github.johnfactotum.Foliate, mupdf-gl, mutool
  * new profiles: desktopeditors, impressive, planmaker18, planmaker18free
  * new profiles: presentations18, presentations18free, textmaker18, teams
  * new profiles: textmaker18free, xournal, gnome-screenshot, ripperX
  * new profiles: sound-juicer, com.github.dahenson.agenda, gnome-pomodoro
  * new profiles: gnome-todo, x2goclient, iagno, kmplayer, penguin-command
  * new profiles: frogatto, gnome-mines, gnome-nibbles, lightsoff, warmux
  * new profiles: ts3client_runscript.sh, ferdi, abiword, four-in-a-row
  * new profiles: gnome-mahjongg, gnome-robots, gnome-sudoku, gnome-taquin
  * new profiles: gnome-tetravex, blobwars, gravity-beams-and-evaporating-stars
  * new profiles: hyperrogue, jumpnbump-menu, jumpnbump, magicor, mindless
  * new profiles: mirrormagic, mrrescue, scorched3d-wrapper, scorchwentbonkers
  * new profiles: seahorse-adventures, wordwarvi, xbill, gnome-klotski
  * new profiles: swell-foop, fdns, five-or-more, steam-runtime
  * new profiles: nicotine, plv, mocp, apostrophe, quadrapassel, dino-im
  * new profiles: hitori, bijiben, gnote, gnubik, ZeGrapher, xonotic-sdl-wrapper
  * new profiles: gapplication, openarena_ded, element-desktop, cawbird
  * new profiles: freetube, strawberry, jitsi-meet-desktop
  * new profiles: homebank, mattermost-desktop, newsflash, com.gitlab.newsflash
  * new profiles: sushi, xfce4-screenshooter, org.gnome.NautilusPreviewer, lyx
  * new profiles: minitube, nuclear, mtpaint, minecraft-launcher, gnome-calendar
  * new profiles: vmware, git-cola, otter-browser, kazam, menulibre, musictube
  * new profiles: onboard, fractal, mirage, quaternion, spectral, man, psi
  * new profiles: smuxi-frontend-gnome, balsa, kube, trojita, youtube
  * new profiles: youtubemusic-nativefier, cola, dbus-send, notify-send
  * new profiles: qrencode, ytmdesktop, twitch
  * new profiles: xournalpp, chromium-freeworld, equalx
- remove firejail-0.9.62-fix-usr-etc.patch, included upstream
- remove firejail-apparmor-3.0.diff, included upstream</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1604318400">- packaging fixes</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1611835200">- Update to 0.9.64.2:
  * allow --tmpfs inside $HOME for unprivileged users
  * --disable-usertmpfs compile time option
  * allow AF_BLUETOOTH via --protocol=bluetooth
  * setup guide for new users: contrib/firejail-welcome.sh
  * implement netns in profiles
  * added nolocal6.net IPv6 network filter
  * new profiles: spectacle, chromium-browser-privacy,
    gtk-straw-viewer, gtk-youtube-viewer, gtk2-youtube-viewer,
    gtk3-youtube-viewer, straw-viewer, lutris, dolphin-emu,
    authenticator-rs, servo, npm, marker, yarn, lsar, unar, agetpkg,
    mdr, shotwell, qnapi, new profiles: guvcview, pkglog, kdiff3, CoyIM.</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1612699200">- Update to 0.9.64.4:
  * disabled overlayfs, pending multiple fixes
  * fixed launch firefox for open url in telegram-desktop.profile</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- firejail 0.9.66:
  * deprecated --audit options, relpaced by jailcheck utility
  * deprecated follow-symlink-as-user from firejail.config
  * new firejail.config settings: private-bin, private-etc
  * new firejail.config settings: private-opt, private-srv
  * new firejail.config settings: whitelist-disable-topdir
  * new firejail.config settings: seccomp-filter-add
  * removed kcmp syscall from seccomp default filter
  * rename --noautopulse to keep-config-pulse
  * filtering environment variables
  * zsh completion
  * command line: --mkdir, --mkfile
  * --protocol now accumulates
  * jailtest utility for testing running sandboxes
  * faccessat2 syscall support
  * --private-dev keeps /dev/input
  * added --noinput to disable /dev/input
  * add support for subdirs in --private-etc
  * subdirs support in private-etc
  * input devices support in private-dev, --no-input
  * support trailing comments on profile lines
  * many new profiles
- split shell completion into standard subpackages</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1644148800">- update to firejail 0.9.68:
  - security: on Ubuntu, the PPA is now recommended over the distro package
  - (see README.md) (#4748)
  - security: bugfix: private-cwd leaks access to the entire filesystem
  - (#4780); reported by Hugo Osvaldo Barrera
  - feature: remove (some) environment variables with auth-tokens (#4157)
  - feature: ALLOW_TRAY condition (#4510 #4599)
  - feature: add basic Firejail support to AppArmor base abstraction (#3226
  - #4628)
  - feature: intrusion detection system (--ids-init, --ids-check)
  - feature: deterministic shutdown command (--deterministic-exit-code,
  - --deterministic-shutdown) (#928 #3042 #4635)
  - feature: noprinters command (#4607 #4827)
  - feature: network monitor (--nettrace)
  - feature: network locker (--netlock) (#4848)
  - feature: whitelist-ro profile command (#4740)
  - feature: disable pipewire with --nosound (#4855)
  - feature: Unset TMP if it doesn't exist inside of sandbox (#4151)
  - feature: Allow apostrophe in whitelist and blacklist (#4614)
  - feature: AppImage support in --build command (#4878)
  - modifs: exit code: distinguish fatal signals by adding 128 (#4533)
  - modifs: firecfg.config is now installed to /etc/firejail/ (#408 #4669)
  - modifs: close file descriptors greater than 2 (--keep-fd) (#4845)
  - modifs: nogroups now stopped causing certain system groups to be dropped,
  - which are now controlled by the relevant "no" options instead (such as
  - nosound -&gt; drop audio group), which fixes device access issues on systems
  - not using (e)logind (such as with seatd) (#4632 #4725 #4732 #4851)
  - removal: --disable-whitelist at compile time
  - removal: whitelist=yes/no in /etc/firejail/firejail.config
  - bugfix: Fix sndio support (#4362 #4365)
  - bugfix: Error mounting tmpfs (MS_REMOUNT flag not being cleared) (#4387)
  - bugfix: --build clears the environment (#4460 #4467)
  - bugfix: firejail hangs with net parameter (#3958 #4476)
  - bugfix: Firejail does not work with a custom hosts file (#2758 #4560)
  - bugfix: --tracelog and --trace override /etc/ld.so.preload (#4558 #4586)
  - bugfix: PATH_MAX is undeclared on musl libc (#4578 #4579 #4583 #4606)
  - bugfix: firejail symlinks are not skipped with private-bin + globs (#4626)
  - bugfix: Firejail rejects empty arguments (#4395)
  - bugfix: firecfg does not work with symlinks (discord.desktop) (#4235)
  - bugfix: Seccomp list output goes to stdout instead of stderr (#4328)
  - bugfix: private-etc does not work with symlinks (#4887)
  - bugfix: Hardware key not detected on keepassxc (#4883)
  - build: allow building with address sanitizer (#4594)
  - build: Stop linking pthread (#4695)
  - build: Configure cleanup and improvements (#4712)
  - ci: add profile checks for sorting disable-programs.inc and
  - firecfg.config and for the required arguments in private-etc (#2739 #4643)
  - ci: pin GitHub actions to SHAs and use Dependabot to update them (#4774)
  - docs: Add new command checklist to CONTRIBUTING.md (#4413)
  - docs: Rework bug report issue template and add both a question and a
  - feature request template (#4479 #4515 #4561)
  - docs: fix contradictory descriptions of machine-id ("preserves" vs
  - "spoofs") (#4689)
  - docs: Document that private-bin and private-etc always accumulate (#4078)
  - new includes: whitelist-run-common.inc (#4288), disable-X11.inc (#4462)
  - new includes: disable-proc.inc (#4521)
  - removed includes: disable-passwordmgr.inc (#4454 #4461)
  - new profiles: microsoft-edge-beta, clion-eap, lifeograph, zim
  - new profiles: io.github.lainsce.Notejot, rednotebook, gallery-dl
  - new profiles: yt-dlp, goldendict, goldendict, bundle, cmake
  - new profiles: make, meson, pip, codium, telnet, ftp, OpenStego
  - new profiles: imv, retroarch, torbrowser, CachyBrowser,
  - new profiles: notable, RPCS3, wget2, raincat, conitop, 1passwd,
  - new profiles: Seafile, neovim, com.github.tchx84.Flatseal</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1655208000">- update to version 0.9.70:
  - fix bsc#1199148 CVE-2022-31214
  - security: CVE-2022-31214 - root escalation in --join logic
  - Reported by Matthias Gerstner, working exploit code was provided to our
  - development team. In the same time frame, the problem was independently
  - reported by Birk Blechschmidt. Full working exploit code was also provided.
  - feature: enable shell tab completion with --tab (#4936)
  - feature: disable user profiles at compile time (#4990)
  - feature: Allow resolution of .local names with avahi-daemon in the apparmor
  - profile (#5088)
  - feature: always log seccomp errors (#5110)
  - feature: firecfg --guide, guided user configuration (#5111)
  - feature: --oom, kernel OutOfMemory-killer (#5122)
  - modif: --ids feature needs to be enabled at compile time (#5155)
  - modif: --nettrace only available to root user
  - rework: whitelist restructuring (#4985)
  - rework: firemon, speed up and lots of fixes
  - bugfix: --private-cwd not expanding macros, broken hyperrogue (#4910)
  - bugfix: nogroups + wrc prints confusing messages (#4930 #4933)
  - bugfix: openSUSE Leap - whitelist-run-common.inc (#4954)
  - bugfix: fix printing in evince (#5011)
  - bugfix: gcov: fix gcov functions always declared as dummy (#5028)
  - bugfix: Stop warning on safe supplementary group clean (#5114)
  - build: remove ultimately unused INSTALL and RANLIB check macros (#5133)
  - build: mkdeb.sh.in: pass remaining arguments to ./configure (#5154)
  - ci: replace centos (EOL) with almalinux (#4912)
  - ci: fix --version not printing compile-time features (#5147)
  - ci: print version after install &amp; fix apparmor support on build_apparmor
  - (#5148)
  - docs: Refer to firejail.config in configuration files (#4916)
  - docs: firejail.config: add warning about allow-tray (#4946)
  - docs: mention that the protocol command accumulates (#5043)
  - docs: mention inconsistent homedir bug involving --private=dir (#5052)
  - docs: mention capabilities(7) on --caps (#5078)
  - new profiles: onionshare, onionshare-cli, opera-developer, songrec
  - new profiles: node-gyp, npx, semver, ping-hardened
  - removed profiles: nvm</changelog>
</package>
<package pkgid="2d202ca8bdfc5ca4ea6ef5e92af17b2147f20b313810516c1c26f5b9b5a9b9b1" name="firejail-zsh-completion" arch="x86_64">
  <version epoch="0" ver="0.9.70" rel="bp154.2.3.1"/>
  <changelog author="avindra@opensuse.org" date="1513166400">- Update to version 0.9.52:
  * New features
    + systemd-resolved integration
    + whitelisted /var in most profiles
    + GTK2, GTK3 and Qt4 private-lib support
    + --debug-private-lib
    + test deployment of private-lib for the some apps: evince,
    galculator, gnome-calculator, leafpad, mousepad,
    transmission-gtk, xcalc, xmr-stak-cpu, atril,
    mate-color-select, tar, file, strings, gpicview, eom, eog,
    gedit, pluma
    + netfilter template support
    + various new arguments
  * --writable-run-user
  * --rlimit-as
  * --rlimit-cpu
  * --timeout
  * --build (profile build tool)
  * --netfilter.print
  * --netfilter6.print
  * deprecations in modif
    + --allow-private-blacklists (blacklisting, read-only,
    read-write, tmpfs and noexec are allowed in private home
    directories
    + remount-proc-sys (firejail.config)
    + follow-symlink-private-bin (firejail.config)
    + --profile-path
  * enhancements
    + support Firejail user config directory in firecfg
    + disable DBus activation in firecfg
    + enumerate root directories in apparmor profile
    + /etc and /usr/share whitelisting support
    + globbing support for --private-bin
  * new profiles: upstreamed profiles from 3 sources:
    + https://github.com/chiraag-nataraj/firejail-profiles
    + https://github.com/nyancat18/fe
    + https://aur.archlinux.org/packages/firejail-profiles
  * new profiles: terasology, surf, rocketchat, clamscan, clamdscan,
    clamdtop, freshclam, xmr-stak-cpu, amule, ardour4, ardour5,
    brackets, calligra, calligraauthor, calligraconverter,
    calligraflow, calligraplan, calligraplanwork, calligrasheets,
    calligrastage, calligrawords, cin, dooble, dooble-qt4,
    fetchmail, freecad, freecadcmd, google-earth,imagej, karbon,
    1kdenlive, krita, linphone, lmms, macrofusion, mpd, natron,
    Natron, ricochet, shotcut, teamspeak3, tor, tor-browser-en,
    Viber, x-terminal-emulator, zart, conky, arch-audit, ffmpeg,
    bluefish, cinelerra, openshot-qt, pinta, uefitool, aosp,
    pdfmod, gnome-ring, xcalc, zaproxy, kopete, cliqz,
    signal-desktop, kget, nheko, Enpass, kwin_x11, krunner, ping,
    bsdtar, makepkg (Arch), archaudit-report cower (Arch), kdeinit4
- Add full link to source tarball from sourceforge
- Add asc file</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1535025600">- Changed the permissions of the firejail executable to 4750.
  Setuid mode is used, but only allowed for users in the newly
  created group 'firejail' (boo#1059013).
- Update to version 0.9.54:
  * modif: --force removed
  * modif: --csh, --zsh removed
  * modif: --debug-check-filename removed
  * modif: --git-install and --git-uninstall removed
  * modif: support for private-bin, private-lib and shell none has been
    disabled while running AppImage archives in order to be able to use
    our regular profile files with AppImages.
  * modif: restrictions for /proc, /sys and /run/user directories
    are moved from AppArmor profile into firejail executable
  * modif: unifying Chromium and Firefox browsers profiles.
    All users of Firefox-based browsers who use addons and plugins
    that read/write from ${HOME} will need to uncomment the includes for
    firefox-common-addons.inc in firefox-common.profile.
  * modif: split disable-devel.inc into disable-devel and
    disable-interpreters.inc
  * Firejail user access database (/etc/firejail/firejail.users,
    man firejail-users)
  * add --noautopulse to disable automatic ~/.config/pulse (for complex setups)
  * Spectre mitigation patch for gcc and clang compiler
  * D-Bus handling (--nodbus)
  * AppArmor support for overlayfs and chroot sandboxes
  * AppArmor support for AppImages
  * Enable AppArmor by default for a large number of programs
  * firejail --apparmor.print option
  * firemon --apparmor option
  * apparmor yes/no flag in /etc/firejail/firejail.config
  * seccomp syscall list update for glibc 2.26-10
  * seccomp disassembler for --seccomp.print option
  * seccomp machine code optimizer for default seccomp filters
  * IPv6 DNS support
  * whitelist support for overlay and chroot sandboxes
  * private-dev support for overlay and chroot sandboxes
  * private-tmp support for overlay and chroot sandboxes
  * added sandbox name support in firemon
  * firemon/prctl enhancements
  * noblacklist support for /sys/module directory
  * whitelist support for /sys/module directory
  * new profiles: basilisk, Tor Browser language packs, PlayOnLinux, sylpheed,
  * new profiles: discord-canary, pycharm-community, pycharm-professional,
  * new profiles: pdfchain, tilp, vivaldi-snapshot, bitcoin-qt, kaffeine,
  * new profiles: falkon, gnome-builder, asunder, VS Code, gnome-recipes,
  * new profiles: akonadi_controle, evince-previewer, evince-thumbnailer,
  * new profiles: blender-2.8, thunderbird-beta, ncdu, gnome-logs, gcloud,
  * new profiles: musixmatch, gunzip, bunzip2, enchant-lsmod, enchant-lsmod-2,
  * new profiles: enchant, enchant-2, Discord, acat, adiff, als, apack,
  * new profiles: arepack, aunpack profiles, ppsspp, scallion, clion,
  * new profiles: baloo_filemetadata_temp_extractor, AnyDesk, webstorm, xmind,
  * new profiles: qmmp, sayonara</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1536580800">- Remove the rpmlintrc file since the warnings are no longer relevant.</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1536667200">- Drop ldconfig calls since firejail libraries are installed in their
  own subdirectory which is not scanned by ldconfig.</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1537617600">- update to version 0.9.56:
  * modif: removed CFG_CHROOT_DESKTOP configuration option
  * modif: removed compile time --enable-network=restricted
  * modif: removed compile time --disable-bind
  * modif: --net=none allowed even if networking was disabled at compile
    time or at run time
  * modif: allow system users to run the sandbox
  * support wireless devices in --net option
  * support tap devices in --net option (tunneling support)
  * allow IP address configuration if the parent interface specified
    by --net is not configured (--netmask)
  * support for firetunnel utility
  * disable U2F devices (--nou2f)
  * add --private-cache to support private ~/.cache
  * support full paths in private-lib
  * globbing support in private-lib
  * support for local user directories in firecfg (--bindir)
  * new profiles: ms-excel, ms-office, ms-onenote, ms-outlook, ms-powerpoint,
  * new profiles: ms-skype, ms-word, riot-desktop, gnome-mpv, snox, gradio,
  * new profiles: standardnotes-desktop, shellcheck, patch, flameshot,
  * new profiles: rview, rvim, vimcat, vimdiff, vimpager, vimtutor, xxd,
  * new profiles: Beaker, electrum, clamtk, pybitmessage, dig, whois,
  * new profiles: jdownloader, Fluxbox, Blackbox, Awesome, i3
  * new profiles: start-tor-browser.desktop</changelog>
  <changelog author="info@paolostivanin.com" date="1549022400">-  update to version 0.9.58:
  * --disable-mnt rework
  * --net.print command
  * GitLab CI/CD integration: disto specific builds
  * profile parser enhancements and conditional handling support
    for HAS_APPIMAGE, HAS_NODBUS, BROWSER_DISABLE_U2F
  * profile name support
  * added explicit nonewprivs support to join option
  * new profiles: QMediathekView, aria2c, Authenticator, checkbashisms
  * new profiles: devilspie, devilspie2, easystroke, github-desktop, min
  * new profiles: bsdcat, bsdcpio, bsdtar, lzmadec, lbunzip2, lbzcat
  * new profiles: lbzip2, lzcat, lzcmp, lzdiff, lzegrep, lzfgrep, lzgrep
  * new profiles: lzless, lzma, lzmainfo, lzmore, unlzma, unxz, xzcat
  * new profiles: xzcmp, xzdiff, xzegrep, xzfgrep, xzgrep, xzless, xzmore
  * new profiles: lzip, artha, nitroshare, nitroshare-cli, nitroshare-nmh
  * new profiles: nirtoshare-send, nitroshare-ui, mencoder, gnome-pie
  * new profiles: masterpdfeditor, QOwnNotes, aisleriot, Mendeley
  * new profiles: feedreader, ocenaudio, mpsyt, thunderbird-wayland
  * new profiles: supertuxkart, ghostwriter, gajim-history-manager
  * bugfixes</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1559476800">- update to version 0.9.60:
  * security bug reported by Austin Morton:
  Seccomp filters are copied into /run/firejail/mnt, and are writable
  within the jail. A malicious process can modify files from inside the
  jail. Processes that are later joined to the jail will not have seccomp
  filters applied.
  CVE-2019-12589
  boo#1137139
  * memory-deny-write-execute now also blocks memfd_create
  * add private-cwd option to control working directory within jail
  * blocking system D-Bus socket with --nodbus
  * bringing back Centos 6 support
  * drop support for flatpak/snap packages
  * new profiles: crow, nyx, mypaint, celluoid, nano, transgui, mpdris2
  * new profiles: sysprof, simplescreenrecorder, geekbench, xfce4-mixer
  * new profiles: pavucontrol, d-feet, seahorse, secret-tool, gnome-keyring
  * new profiles: regextester, hardinfo, gnome-system-log, gnome-nettool
  * new profiles: netactview, redshift, devhelp, assogiate, subdownloader
  * new profiles: font-manager, exfalso, gconf-editor, dconf-editor
  * new profiles: sysprof-cli, seahorse-tool, secret-tool, dconf, gsettings
  * new profiles: code-oss, pragha, Maelstrom, ostrichriders, bzflag
  * new profiles: freeciv, lincity-ng, megaglest, openttd, crawl, crawl-tiles
  * new profiles: teeworlds, torcs, tremulous, warsow, lugaru, manaplus
  * new profiles: pioneer, scorched3d, widelands, freemind, kid3, kid3-qt
  * new profiles: kid3-cli, nomacs, freecol, opencity, openclonk, slashem
  * new profiles: vultureseye, vulturesclaw, anki, cheese, utox, mp3splt
  * new profiles: oggsplt, flacsplt, gramps, newsboat, freeoffice-planmaker
  * new profiles: autokey-gtk, autokey-qt, autokey-run, autokey-shell
  * new profiles: freeoffice-presentations, freeoffice-textmaker, mp3wrap
  * new profiles: inkview, meteo-qt, mp3splt-gtk, ktouch, yelp, cantata</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1581422400">- update to version 0.9.62
  * added file-copy-limit in /etc/firejail/firejail.config
  * profile templates (/usr/share/doc/firejail)
  * allow-debuggers support in profiles
  * several seccomp enhancements
  * compiler flags autodetection
  * move chroot entirely from path based to file descriptor based mounts
  * whitelisting /usr/share in a large number of profiles
  * new scripts in conrib: gdb-firejail.sh and sort.py
  * enhancement: whitelist /usr/share in some profiles
  * added signal mediation to apparmor profile
  * new conditions: HAS_X11, HAS_NET
  * new profiles: qgis, klatexformula, klatexformula_cmdl, links, xlinks
  * new profiles: pandoc, teams-for-linux, OpenArena, gnome-sound-recorder
  * new profiles: godot, tcpdump, tshark, newsbeuter, keepassxc-cli
  * new profiles: keepassxc-proxy, rhythmbox-client, jerry, zeal, mpg123
  * new profiles: conplay, mpg123.bin, mpg123-alsa, mpg123-id3dump, out123
  * new profiles: mpg123-jack, mpg123-nas, mpg123-openal, mpg123-oss
  * new profiles: mpg123-portaudio, mpg123-pulse, mpg123-strip, pavucontrol-qt
  * new profiles: gnome-characters, gnome-character-map, rsync, Whalebird,
  * new profiles: tor-browser (AUR), Zulip, tb-starter-wrapper, bzcat,
  * new profiles: kiwix-desktop, bzcat, zstd, pzstd, zstdcat, zstdgrep, zstdless
  * new profiles: zstdmt, unzstd, i2p, ar, gnome-latex, pngquant, kalgebra
  * new profiles: kalgebramobile, signal-cli, amuled, kfind, profanity
  * new profiles: audio-recorder, cameramonitor, ddgtk, drawio, unf, gmpc
  * new profiles: electron-mail, gist, gist-paste</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1588161600">- Add firejail-0.9.62-fix-usr-etc.patch:
  Check /usr/etc not just /etc
- Replace python interpreter line in sort.py</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1596888000">- Add patches fix-CVE-2020-17367.patch and fix-CVE-2020-17368.patch to fix CVE-2020-17367 and CVE-2020-17368 and boo#1174986</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1597320000">- Update to 0.9.62.2
  * fix CVE-2020-17367
  * fix CVE-2020-17368
  * additional hardening and bug fixes
- Remove fix-CVE-2020-17368.patch
- Remove fix-CVE-2020-17367.patch</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1597838400">- Update to 0.9.62.4
  * fix AppArmor broken in the previous release
  * miscellaneous fixes</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1603713600">- Add firejail-apparmor-3.0.diff to make the AppArmor profile compatible with
  AppArmor 3.0 (add missing include &lt;tunables/global&gt;)</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1604232000">- Update to version 0.9.64:
  * replaced --nowrap option with --wrap in firemon
  * The blocking action of seccomp filters has been changed from
    killing the process to returning EPERM to the caller. To get the
    previous behaviour, use --seccomp-error-action=kill or
    syscall:kill syntax when constructing filters, or override in
    /etc/firejail/firejail.config file.
  * Fine-grained D-Bus sandboxing with xdg-dbus-proxy.
    xdg-dbus-proxy must be installed, if not D-Bus access will be allowed.
    With this version nodbus is deprecated, in favor of dbus-user none and
    dbus-system none and will be removed in a future version.
  * DHCP client support
  * firecfg only fix dektop-files if started with sudo
  * SELinux labeling support
  * custom 32-bit seccomp filter support
  * restrict ${RUNUSER} in several profiles
  * blacklist shells such as bash in several profiles
  * whitelist globbing
  * mkdir and mkfile support for /run/user directory
  * support ignore for include
  * --include on the command line
  * splitting up media players whitelists in whitelist-players.inc
  * new condition: HAS_NOSOUND
  * new profiles: gfeeds, firefox-x11, tvbrowser, rtv, clipgrab, muraster
  * new profiles: gnome-passwordsafe, bibtex, gummi, latex, mupdf-x11-curl
  * new profiles: pdflatex, tex, wpp, wpspdf, wps, et, multimc, mupdf-x11
  * new profiles: gnome-hexgl, com.github.johnfactotum.Foliate, mupdf-gl, mutool
  * new profiles: desktopeditors, impressive, planmaker18, planmaker18free
  * new profiles: presentations18, presentations18free, textmaker18, teams
  * new profiles: textmaker18free, xournal, gnome-screenshot, ripperX
  * new profiles: sound-juicer, com.github.dahenson.agenda, gnome-pomodoro
  * new profiles: gnome-todo, x2goclient, iagno, kmplayer, penguin-command
  * new profiles: frogatto, gnome-mines, gnome-nibbles, lightsoff, warmux
  * new profiles: ts3client_runscript.sh, ferdi, abiword, four-in-a-row
  * new profiles: gnome-mahjongg, gnome-robots, gnome-sudoku, gnome-taquin
  * new profiles: gnome-tetravex, blobwars, gravity-beams-and-evaporating-stars
  * new profiles: hyperrogue, jumpnbump-menu, jumpnbump, magicor, mindless
  * new profiles: mirrormagic, mrrescue, scorched3d-wrapper, scorchwentbonkers
  * new profiles: seahorse-adventures, wordwarvi, xbill, gnome-klotski
  * new profiles: swell-foop, fdns, five-or-more, steam-runtime
  * new profiles: nicotine, plv, mocp, apostrophe, quadrapassel, dino-im
  * new profiles: hitori, bijiben, gnote, gnubik, ZeGrapher, xonotic-sdl-wrapper
  * new profiles: gapplication, openarena_ded, element-desktop, cawbird
  * new profiles: freetube, strawberry, jitsi-meet-desktop
  * new profiles: homebank, mattermost-desktop, newsflash, com.gitlab.newsflash
  * new profiles: sushi, xfce4-screenshooter, org.gnome.NautilusPreviewer, lyx
  * new profiles: minitube, nuclear, mtpaint, minecraft-launcher, gnome-calendar
  * new profiles: vmware, git-cola, otter-browser, kazam, menulibre, musictube
  * new profiles: onboard, fractal, mirage, quaternion, spectral, man, psi
  * new profiles: smuxi-frontend-gnome, balsa, kube, trojita, youtube
  * new profiles: youtubemusic-nativefier, cola, dbus-send, notify-send
  * new profiles: qrencode, ytmdesktop, twitch
  * new profiles: xournalpp, chromium-freeworld, equalx
- remove firejail-0.9.62-fix-usr-etc.patch, included upstream
- remove firejail-apparmor-3.0.diff, included upstream</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1604318400">- packaging fixes</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1611835200">- Update to 0.9.64.2:
  * allow --tmpfs inside $HOME for unprivileged users
  * --disable-usertmpfs compile time option
  * allow AF_BLUETOOTH via --protocol=bluetooth
  * setup guide for new users: contrib/firejail-welcome.sh
  * implement netns in profiles
  * added nolocal6.net IPv6 network filter
  * new profiles: spectacle, chromium-browser-privacy,
    gtk-straw-viewer, gtk-youtube-viewer, gtk2-youtube-viewer,
    gtk3-youtube-viewer, straw-viewer, lutris, dolphin-emu,
    authenticator-rs, servo, npm, marker, yarn, lsar, unar, agetpkg,
    mdr, shotwell, qnapi, new profiles: guvcview, pkglog, kdiff3, CoyIM.</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1612699200">- Update to 0.9.64.4:
  * disabled overlayfs, pending multiple fixes
  * fixed launch firefox for open url in telegram-desktop.profile</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- firejail 0.9.66:
  * deprecated --audit options, relpaced by jailcheck utility
  * deprecated follow-symlink-as-user from firejail.config
  * new firejail.config settings: private-bin, private-etc
  * new firejail.config settings: private-opt, private-srv
  * new firejail.config settings: whitelist-disable-topdir
  * new firejail.config settings: seccomp-filter-add
  * removed kcmp syscall from seccomp default filter
  * rename --noautopulse to keep-config-pulse
  * filtering environment variables
  * zsh completion
  * command line: --mkdir, --mkfile
  * --protocol now accumulates
  * jailtest utility for testing running sandboxes
  * faccessat2 syscall support
  * --private-dev keeps /dev/input
  * added --noinput to disable /dev/input
  * add support for subdirs in --private-etc
  * subdirs support in private-etc
  * input devices support in private-dev, --no-input
  * support trailing comments on profile lines
  * many new profiles
- split shell completion into standard subpackages</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1644148800">- update to firejail 0.9.68:
  - security: on Ubuntu, the PPA is now recommended over the distro package
  - (see README.md) (#4748)
  - security: bugfix: private-cwd leaks access to the entire filesystem
  - (#4780); reported by Hugo Osvaldo Barrera
  - feature: remove (some) environment variables with auth-tokens (#4157)
  - feature: ALLOW_TRAY condition (#4510 #4599)
  - feature: add basic Firejail support to AppArmor base abstraction (#3226
  - #4628)
  - feature: intrusion detection system (--ids-init, --ids-check)
  - feature: deterministic shutdown command (--deterministic-exit-code,
  - --deterministic-shutdown) (#928 #3042 #4635)
  - feature: noprinters command (#4607 #4827)
  - feature: network monitor (--nettrace)
  - feature: network locker (--netlock) (#4848)
  - feature: whitelist-ro profile command (#4740)
  - feature: disable pipewire with --nosound (#4855)
  - feature: Unset TMP if it doesn't exist inside of sandbox (#4151)
  - feature: Allow apostrophe in whitelist and blacklist (#4614)
  - feature: AppImage support in --build command (#4878)
  - modifs: exit code: distinguish fatal signals by adding 128 (#4533)
  - modifs: firecfg.config is now installed to /etc/firejail/ (#408 #4669)
  - modifs: close file descriptors greater than 2 (--keep-fd) (#4845)
  - modifs: nogroups now stopped causing certain system groups to be dropped,
  - which are now controlled by the relevant "no" options instead (such as
  - nosound -&gt; drop audio group), which fixes device access issues on systems
  - not using (e)logind (such as with seatd) (#4632 #4725 #4732 #4851)
  - removal: --disable-whitelist at compile time
  - removal: whitelist=yes/no in /etc/firejail/firejail.config
  - bugfix: Fix sndio support (#4362 #4365)
  - bugfix: Error mounting tmpfs (MS_REMOUNT flag not being cleared) (#4387)
  - bugfix: --build clears the environment (#4460 #4467)
  - bugfix: firejail hangs with net parameter (#3958 #4476)
  - bugfix: Firejail does not work with a custom hosts file (#2758 #4560)
  - bugfix: --tracelog and --trace override /etc/ld.so.preload (#4558 #4586)
  - bugfix: PATH_MAX is undeclared on musl libc (#4578 #4579 #4583 #4606)
  - bugfix: firejail symlinks are not skipped with private-bin + globs (#4626)
  - bugfix: Firejail rejects empty arguments (#4395)
  - bugfix: firecfg does not work with symlinks (discord.desktop) (#4235)
  - bugfix: Seccomp list output goes to stdout instead of stderr (#4328)
  - bugfix: private-etc does not work with symlinks (#4887)
  - bugfix: Hardware key not detected on keepassxc (#4883)
  - build: allow building with address sanitizer (#4594)
  - build: Stop linking pthread (#4695)
  - build: Configure cleanup and improvements (#4712)
  - ci: add profile checks for sorting disable-programs.inc and
  - firecfg.config and for the required arguments in private-etc (#2739 #4643)
  - ci: pin GitHub actions to SHAs and use Dependabot to update them (#4774)
  - docs: Add new command checklist to CONTRIBUTING.md (#4413)
  - docs: Rework bug report issue template and add both a question and a
  - feature request template (#4479 #4515 #4561)
  - docs: fix contradictory descriptions of machine-id ("preserves" vs
  - "spoofs") (#4689)
  - docs: Document that private-bin and private-etc always accumulate (#4078)
  - new includes: whitelist-run-common.inc (#4288), disable-X11.inc (#4462)
  - new includes: disable-proc.inc (#4521)
  - removed includes: disable-passwordmgr.inc (#4454 #4461)
  - new profiles: microsoft-edge-beta, clion-eap, lifeograph, zim
  - new profiles: io.github.lainsce.Notejot, rednotebook, gallery-dl
  - new profiles: yt-dlp, goldendict, goldendict, bundle, cmake
  - new profiles: make, meson, pip, codium, telnet, ftp, OpenStego
  - new profiles: imv, retroarch, torbrowser, CachyBrowser,
  - new profiles: notable, RPCS3, wget2, raincat, conitop, 1passwd,
  - new profiles: Seafile, neovim, com.github.tchx84.Flatseal</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1655208000">- update to version 0.9.70:
  - fix bsc#1199148 CVE-2022-31214
  - security: CVE-2022-31214 - root escalation in --join logic
  - Reported by Matthias Gerstner, working exploit code was provided to our
  - development team. In the same time frame, the problem was independently
  - reported by Birk Blechschmidt. Full working exploit code was also provided.
  - feature: enable shell tab completion with --tab (#4936)
  - feature: disable user profiles at compile time (#4990)
  - feature: Allow resolution of .local names with avahi-daemon in the apparmor
  - profile (#5088)
  - feature: always log seccomp errors (#5110)
  - feature: firecfg --guide, guided user configuration (#5111)
  - feature: --oom, kernel OutOfMemory-killer (#5122)
  - modif: --ids feature needs to be enabled at compile time (#5155)
  - modif: --nettrace only available to root user
  - rework: whitelist restructuring (#4985)
  - rework: firemon, speed up and lots of fixes
  - bugfix: --private-cwd not expanding macros, broken hyperrogue (#4910)
  - bugfix: nogroups + wrc prints confusing messages (#4930 #4933)
  - bugfix: openSUSE Leap - whitelist-run-common.inc (#4954)
  - bugfix: fix printing in evince (#5011)
  - bugfix: gcov: fix gcov functions always declared as dummy (#5028)
  - bugfix: Stop warning on safe supplementary group clean (#5114)
  - build: remove ultimately unused INSTALL and RANLIB check macros (#5133)
  - build: mkdeb.sh.in: pass remaining arguments to ./configure (#5154)
  - ci: replace centos (EOL) with almalinux (#4912)
  - ci: fix --version not printing compile-time features (#5147)
  - ci: print version after install &amp; fix apparmor support on build_apparmor
  - (#5148)
  - docs: Refer to firejail.config in configuration files (#4916)
  - docs: firejail.config: add warning about allow-tray (#4946)
  - docs: mention that the protocol command accumulates (#5043)
  - docs: mention inconsistent homedir bug involving --private=dir (#5052)
  - docs: mention capabilities(7) on --caps (#5078)
  - new profiles: onionshare, onionshare-cli, opera-developer, songrec
  - new profiles: node-gyp, npx, semver, ping-hardened
  - removed profiles: nvm</changelog>
</package>
<package pkgid="c256208fc9e5de5ed6ce21f0229c9beac93431771af7141ba2c4ca02e2ea8f70" name="freeciv" arch="aarch64">
  <version epoch="0" ver="3.0.3" rel="bp154.2.3.1"/>
  <changelog author="astieger@suse.com" date="1464955200">- Freeciv 2.5.4:
  * various fixes and changes for rulesets
  * general bug fixes</changelog>
  <changelog author="astieger@suse.com" date="1469880000">- Freeciv 2.5.5:
  * various fixes and changes for rulesets
  * general bug fixes
  * New 'persistent' metaserver connection mode, where one failure
    to talk to the metaserver does not prevent future attempts.
    Enabled with the '--keep' server option or the
    '/metaconnection persistent' server command.
- for a full list of upstream changes, see
  http://freeciv.wikia.com/wiki/NEWS-2.5.5</changelog>
  <changelog author="mimi.vx@gmail.com" date="1481457600">- Freeciv 2.5.6
  * various fixes and changes for rulesets
  * general fixes
- for a full list of upstream changes see
    http://freeciv.wikia.com/wiki/NEWS-2.5.6</changelog>
  <changelog author="astieger@suse.com" date="1502625600">- Freeciv 2.5.8:
  * Various fixes, including safegame fixes
- for a full list of upstream changes see
    http://freeciv.wikia.com/wiki/NEWS-2.5.7
    http://freeciv.wikia.com/wiki/NEWS-2.5.8</changelog>
  <changelog author="astieger@suse.com" date="1505736000">- Freeciv 2.5.9:
  * Fix regression in 'scorelog' function: if one continues from
    a saved game, any scorelog saved before that point would get
    wiped  rather than appended to
  * minor fixes to the Catalan and Russian localizations</changelog>
  <changelog author="astieger@suse.com" date="1517486400">- Freeciv 2.5.10:
  * fixes for failure and crashes in certain game situations
  * Minor adjustment and fixes to rules, gameplay, AI, Client UI</changelog>
  <changelog author="astieger@suse.com" date="1529064000">- freeciv 2.5.11:
  * Stealing a future technology was accidentally yielding two of
    them
  * Put a message about nuclear attack in a more appropriate
    category
  * Some minor improvements to autogenerated terrain help
  * Fix a crash with a malformed tileset
  * Fix an erroneous diagnostic for a malformed savegame
  * Fix a geographical error in the Cuyavian nation description
  * Fix typo in ruleset help comments
  * Fix some compiler warnings
  * Updated translations</changelog>
  <changelog author="Dirk Stoecker &lt;opensuse@dstoecker.de&gt;" date="1562760000">- update to 2.6.0, lots of changes
  See https://freeciv.fandom.com/wiki/NEWS-2.6.0
  Rebase freeciv-appdata-desktop-references.patch
  Cleanup build
  Introduce separate freeciv-lang package</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1585310400">- Update to 2.6.2. New bugfix release.
  See https://freeciv.fandom.com/wiki/NEWS-2.6.2 for the complete
  list of changes.
- Drop fix-qt5-detection.patch. No longer needed.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1591272000">- Drop libggz2-devel BuildRequires: ggz has not been supported
  since freeciv 2.6.0.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1591272001">- Add freeciv-qt-5.15.patch: Fix build with Qt 5.15.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1608638400">- update to 2.6.2.1:
  * Fixed server crash when unit with zero move_rate is transformed
  * Fixed crashes when using Direction objects in lua scripts
  * Fixed crash when chatline text had opening tag without closing tag
  * Fixes to the Qt client
  * Updated translations
  * Fixed Qt-client build against Qt-5.15 (removes freeciv-qt-5.15.patch )
  * Documentation updates</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1612008000">- update to 2.6.3:
  * see http://www.freeciv.org/wiki/NEWS-2.6.3
  * Fixed trouble when a new city is founded to the ruins of a former city,
    and that new city establish a trade route with a player who had seen
    former city, and is unaware that it had been destroyed HRM#871606
  * Fixed a case where shared vision did not completely update
    recipient's map HRM#846106
  * Fixed a bug where one could paradrop to peaceful nation's territory
    after continuing game from an old savegame HRM#879084
  * Fixed a bug causing game sometimes to tell wrong reason of why an
    action failed HRM#879880
  * Cease fire no longer runs out with an already dead player, making his
    former allies to hate the alive party of the treaty HRM#879055
  * Made server not to end in a infinite loop after loading savegame with
    too high phase number. Such a savegame was reported to be created
    after spaceship was launched but game was still continued HRM#815196
  * Unified writing of the city name Washington-on-the-Brazos
    between rulesets, so it doesn't appear multiple times in the same
    game in a bit different form HRM#867817
  * Stealth units are no longer erroneously hidden even from allies
    HRM#764976
  * Placing initial units is now done in shuffled player order HRM#850656
  * Corrupt worker tasks are cleared. Those can originate, e.g.,
    from buggy pre-2.6.2.1 Qt-client, and live in old savegames HRM#901938
  * In a ruleset, such as civ2civ3, where caravans can help building wonder
    in a foreign city, refresh city info of the city owner when one does
    HRM#907977
  * Display of success probabilities for diplomats was off when targeting
    stack of units instead of individual unit HRM#859761
  * Fixed pillaging of extras that are caused by something else than
    player actions. For the fix to work, both server and client must be
    at least version 2.6.3 HRM#861508
  * Civilian unit trying to paradrop to an enemy city dies HRM#870004
  * Prevented dead player from getting techs via Tech_Parasite effect.
    This caused trouble in alien ruleset where Tech_Parasite is granted
    by a tech HRM#873692
  * Improved support of CityTile requirement type HRM#877780
  * Fixed trouble preventing Small Wonders from working as impr_reqs
    for units HRM#884993
  * Corrected success probability shown by action dialog when it depends
    on a special kind of road HRM#897490
  * The included Lua engine has been upgraded from 5.3.5 to 5.3.6. HRM#889425
- drop freeciv-appdata-desktop-references.patch (obsolete)</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1618142400">- Update to 2.6.4:
  * Bugfix release, see https://freeciv.fandom.com/wiki/NEWS-2.6.4</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1626436800">- update to 2.6.5:
  * https://freeciv.fandom.com/wiki/NEWS-2.6.5
  * 2.6.5 is a bugfix release. Notably it fixes regression in 2.6.4 gtk3-client
    that present units in city dialog had no overlays drawn at all.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1639224000">- update to 2.6.6:
  * https://freeciv.fandom.com/wiki/NEWS-2.6.5
  * 2.6.6 is a bugfix release.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1648036800">- update to 3.0.0:
  * This release is a major upgrade which with some changes that
    can support backward compatible rulesets
  * see https://freeciv.fandom.com/wiki/NEWS-3.0.0#WHAT.27S_CHANGED_SINCE_2.6</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1650628800">- update to 3.0.1:
  * 3.0.1 is a generic bugfix release
  * see https://freeciv.fandom.com/wiki/NEWS-3.0.1</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1658145600">- update to 3.0.2:
  * 3.0.2 is a generic bugfix release
  * see https://freeciv.fandom.com/wiki/NEWS-3.0.2</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1660910400">- update to 3.0.3 (bsc#1202548, CVE-2022-6083):
  * 3.0.3 is a bugfix release
  * see https://freeciv.fandom.com/wiki/NEWS-3.0.3</changelog>
</package>
<package pkgid="35ec6a22384d8bb1a5a94b69692a8e92460d3f04a7a860e7286eeedfe56d7a77" name="freeciv" arch="i586">
  <version epoch="0" ver="3.0.3" rel="bp154.2.3.1"/>
  <changelog author="astieger@suse.com" date="1464955200">- Freeciv 2.5.4:
  * various fixes and changes for rulesets
  * general bug fixes</changelog>
  <changelog author="astieger@suse.com" date="1469880000">- Freeciv 2.5.5:
  * various fixes and changes for rulesets
  * general bug fixes
  * New 'persistent' metaserver connection mode, where one failure
    to talk to the metaserver does not prevent future attempts.
    Enabled with the '--keep' server option or the
    '/metaconnection persistent' server command.
- for a full list of upstream changes, see
  http://freeciv.wikia.com/wiki/NEWS-2.5.5</changelog>
  <changelog author="mimi.vx@gmail.com" date="1481457600">- Freeciv 2.5.6
  * various fixes and changes for rulesets
  * general fixes
- for a full list of upstream changes see
    http://freeciv.wikia.com/wiki/NEWS-2.5.6</changelog>
  <changelog author="astieger@suse.com" date="1502625600">- Freeciv 2.5.8:
  * Various fixes, including safegame fixes
- for a full list of upstream changes see
    http://freeciv.wikia.com/wiki/NEWS-2.5.7
    http://freeciv.wikia.com/wiki/NEWS-2.5.8</changelog>
  <changelog author="astieger@suse.com" date="1505736000">- Freeciv 2.5.9:
  * Fix regression in 'scorelog' function: if one continues from
    a saved game, any scorelog saved before that point would get
    wiped  rather than appended to
  * minor fixes to the Catalan and Russian localizations</changelog>
  <changelog author="astieger@suse.com" date="1517486400">- Freeciv 2.5.10:
  * fixes for failure and crashes in certain game situations
  * Minor adjustment and fixes to rules, gameplay, AI, Client UI</changelog>
  <changelog author="astieger@suse.com" date="1529064000">- freeciv 2.5.11:
  * Stealing a future technology was accidentally yielding two of
    them
  * Put a message about nuclear attack in a more appropriate
    category
  * Some minor improvements to autogenerated terrain help
  * Fix a crash with a malformed tileset
  * Fix an erroneous diagnostic for a malformed savegame
  * Fix a geographical error in the Cuyavian nation description
  * Fix typo in ruleset help comments
  * Fix some compiler warnings
  * Updated translations</changelog>
  <changelog author="Dirk Stoecker &lt;opensuse@dstoecker.de&gt;" date="1562760000">- update to 2.6.0, lots of changes
  See https://freeciv.fandom.com/wiki/NEWS-2.6.0
  Rebase freeciv-appdata-desktop-references.patch
  Cleanup build
  Introduce separate freeciv-lang package</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1585310400">- Update to 2.6.2. New bugfix release.
  See https://freeciv.fandom.com/wiki/NEWS-2.6.2 for the complete
  list of changes.
- Drop fix-qt5-detection.patch. No longer needed.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1591272000">- Drop libggz2-devel BuildRequires: ggz has not been supported
  since freeciv 2.6.0.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1591272001">- Add freeciv-qt-5.15.patch: Fix build with Qt 5.15.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1608638400">- update to 2.6.2.1:
  * Fixed server crash when unit with zero move_rate is transformed
  * Fixed crashes when using Direction objects in lua scripts
  * Fixed crash when chatline text had opening tag without closing tag
  * Fixes to the Qt client
  * Updated translations
  * Fixed Qt-client build against Qt-5.15 (removes freeciv-qt-5.15.patch )
  * Documentation updates</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1612008000">- update to 2.6.3:
  * see http://www.freeciv.org/wiki/NEWS-2.6.3
  * Fixed trouble when a new city is founded to the ruins of a former city,
    and that new city establish a trade route with a player who had seen
    former city, and is unaware that it had been destroyed HRM#871606
  * Fixed a case where shared vision did not completely update
    recipient's map HRM#846106
  * Fixed a bug where one could paradrop to peaceful nation's territory
    after continuing game from an old savegame HRM#879084
  * Fixed a bug causing game sometimes to tell wrong reason of why an
    action failed HRM#879880
  * Cease fire no longer runs out with an already dead player, making his
    former allies to hate the alive party of the treaty HRM#879055
  * Made server not to end in a infinite loop after loading savegame with
    too high phase number. Such a savegame was reported to be created
    after spaceship was launched but game was still continued HRM#815196
  * Unified writing of the city name Washington-on-the-Brazos
    between rulesets, so it doesn't appear multiple times in the same
    game in a bit different form HRM#867817
  * Stealth units are no longer erroneously hidden even from allies
    HRM#764976
  * Placing initial units is now done in shuffled player order HRM#850656
  * Corrupt worker tasks are cleared. Those can originate, e.g.,
    from buggy pre-2.6.2.1 Qt-client, and live in old savegames HRM#901938
  * In a ruleset, such as civ2civ3, where caravans can help building wonder
    in a foreign city, refresh city info of the city owner when one does
    HRM#907977
  * Display of success probabilities for diplomats was off when targeting
    stack of units instead of individual unit HRM#859761
  * Fixed pillaging of extras that are caused by something else than
    player actions. For the fix to work, both server and client must be
    at least version 2.6.3 HRM#861508
  * Civilian unit trying to paradrop to an enemy city dies HRM#870004
  * Prevented dead player from getting techs via Tech_Parasite effect.
    This caused trouble in alien ruleset where Tech_Parasite is granted
    by a tech HRM#873692
  * Improved support of CityTile requirement type HRM#877780
  * Fixed trouble preventing Small Wonders from working as impr_reqs
    for units HRM#884993
  * Corrected success probability shown by action dialog when it depends
    on a special kind of road HRM#897490
  * The included Lua engine has been upgraded from 5.3.5 to 5.3.6. HRM#889425
- drop freeciv-appdata-desktop-references.patch (obsolete)</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1618142400">- Update to 2.6.4:
  * Bugfix release, see https://freeciv.fandom.com/wiki/NEWS-2.6.4</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1626436800">- update to 2.6.5:
  * https://freeciv.fandom.com/wiki/NEWS-2.6.5
  * 2.6.5 is a bugfix release. Notably it fixes regression in 2.6.4 gtk3-client
    that present units in city dialog had no overlays drawn at all.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1639224000">- update to 2.6.6:
  * https://freeciv.fandom.com/wiki/NEWS-2.6.5
  * 2.6.6 is a bugfix release.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1648036800">- update to 3.0.0:
  * This release is a major upgrade which with some changes that
    can support backward compatible rulesets
  * see https://freeciv.fandom.com/wiki/NEWS-3.0.0#WHAT.27S_CHANGED_SINCE_2.6</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1650628800">- update to 3.0.1:
  * 3.0.1 is a generic bugfix release
  * see https://freeciv.fandom.com/wiki/NEWS-3.0.1</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1658145600">- update to 3.0.2:
  * 3.0.2 is a generic bugfix release
  * see https://freeciv.fandom.com/wiki/NEWS-3.0.2</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1660910400">- update to 3.0.3 (bsc#1202548, CVE-2022-6083):
  * 3.0.3 is a bugfix release
  * see https://freeciv.fandom.com/wiki/NEWS-3.0.3</changelog>
</package>
<package pkgid="9aed4b6bb5e169d9a4882a07b6685ee800b7efeb772ac55f27407dab4a20acfe" name="freeciv" arch="ppc64le">
  <version epoch="0" ver="3.0.3" rel="bp154.2.3.1"/>
  <changelog author="astieger@suse.com" date="1464955200">- Freeciv 2.5.4:
  * various fixes and changes for rulesets
  * general bug fixes</changelog>
  <changelog author="astieger@suse.com" date="1469880000">- Freeciv 2.5.5:
  * various fixes and changes for rulesets
  * general bug fixes
  * New 'persistent' metaserver connection mode, where one failure
    to talk to the metaserver does not prevent future attempts.
    Enabled with the '--keep' server option or the
    '/metaconnection persistent' server command.
- for a full list of upstream changes, see
  http://freeciv.wikia.com/wiki/NEWS-2.5.5</changelog>
  <changelog author="mimi.vx@gmail.com" date="1481457600">- Freeciv 2.5.6
  * various fixes and changes for rulesets
  * general fixes
- for a full list of upstream changes see
    http://freeciv.wikia.com/wiki/NEWS-2.5.6</changelog>
  <changelog author="astieger@suse.com" date="1502625600">- Freeciv 2.5.8:
  * Various fixes, including safegame fixes
- for a full list of upstream changes see
    http://freeciv.wikia.com/wiki/NEWS-2.5.7
    http://freeciv.wikia.com/wiki/NEWS-2.5.8</changelog>
  <changelog author="astieger@suse.com" date="1505736000">- Freeciv 2.5.9:
  * Fix regression in 'scorelog' function: if one continues from
    a saved game, any scorelog saved before that point would get
    wiped  rather than appended to
  * minor fixes to the Catalan and Russian localizations</changelog>
  <changelog author="astieger@suse.com" date="1517486400">- Freeciv 2.5.10:
  * fixes for failure and crashes in certain game situations
  * Minor adjustment and fixes to rules, gameplay, AI, Client UI</changelog>
  <changelog author="astieger@suse.com" date="1529064000">- freeciv 2.5.11:
  * Stealing a future technology was accidentally yielding two of
    them
  * Put a message about nuclear attack in a more appropriate
    category
  * Some minor improvements to autogenerated terrain help
  * Fix a crash with a malformed tileset
  * Fix an erroneous diagnostic for a malformed savegame
  * Fix a geographical error in the Cuyavian nation description
  * Fix typo in ruleset help comments
  * Fix some compiler warnings
  * Updated translations</changelog>
  <changelog author="Dirk Stoecker &lt;opensuse@dstoecker.de&gt;" date="1562760000">- update to 2.6.0, lots of changes
  See https://freeciv.fandom.com/wiki/NEWS-2.6.0
  Rebase freeciv-appdata-desktop-references.patch
  Cleanup build
  Introduce separate freeciv-lang package</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1585310400">- Update to 2.6.2. New bugfix release.
  See https://freeciv.fandom.com/wiki/NEWS-2.6.2 for the complete
  list of changes.
- Drop fix-qt5-detection.patch. No longer needed.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1591272000">- Drop libggz2-devel BuildRequires: ggz has not been supported
  since freeciv 2.6.0.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1591272001">- Add freeciv-qt-5.15.patch: Fix build with Qt 5.15.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1608638400">- update to 2.6.2.1:
  * Fixed server crash when unit with zero move_rate is transformed
  * Fixed crashes when using Direction objects in lua scripts
  * Fixed crash when chatline text had opening tag without closing tag
  * Fixes to the Qt client
  * Updated translations
  * Fixed Qt-client build against Qt-5.15 (removes freeciv-qt-5.15.patch )
  * Documentation updates</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1612008000">- update to 2.6.3:
  * see http://www.freeciv.org/wiki/NEWS-2.6.3
  * Fixed trouble when a new city is founded to the ruins of a former city,
    and that new city establish a trade route with a player who had seen
    former city, and is unaware that it had been destroyed HRM#871606
  * Fixed a case where shared vision did not completely update
    recipient's map HRM#846106
  * Fixed a bug where one could paradrop to peaceful nation's territory
    after continuing game from an old savegame HRM#879084
  * Fixed a bug causing game sometimes to tell wrong reason of why an
    action failed HRM#879880
  * Cease fire no longer runs out with an already dead player, making his
    former allies to hate the alive party of the treaty HRM#879055
  * Made server not to end in a infinite loop after loading savegame with
    too high phase number. Such a savegame was reported to be created
    after spaceship was launched but game was still continued HRM#815196
  * Unified writing of the city name Washington-on-the-Brazos
    between rulesets, so it doesn't appear multiple times in the same
    game in a bit different form HRM#867817
  * Stealth units are no longer erroneously hidden even from allies
    HRM#764976
  * Placing initial units is now done in shuffled player order HRM#850656
  * Corrupt worker tasks are cleared. Those can originate, e.g.,
    from buggy pre-2.6.2.1 Qt-client, and live in old savegames HRM#901938
  * In a ruleset, such as civ2civ3, where caravans can help building wonder
    in a foreign city, refresh city info of the city owner when one does
    HRM#907977
  * Display of success probabilities for diplomats was off when targeting
    stack of units instead of individual unit HRM#859761
  * Fixed pillaging of extras that are caused by something else than
    player actions. For the fix to work, both server and client must be
    at least version 2.6.3 HRM#861508
  * Civilian unit trying to paradrop to an enemy city dies HRM#870004
  * Prevented dead player from getting techs via Tech_Parasite effect.
    This caused trouble in alien ruleset where Tech_Parasite is granted
    by a tech HRM#873692
  * Improved support of CityTile requirement type HRM#877780
  * Fixed trouble preventing Small Wonders from working as impr_reqs
    for units HRM#884993
  * Corrected success probability shown by action dialog when it depends
    on a special kind of road HRM#897490
  * The included Lua engine has been upgraded from 5.3.5 to 5.3.6. HRM#889425
- drop freeciv-appdata-desktop-references.patch (obsolete)</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1618142400">- Update to 2.6.4:
  * Bugfix release, see https://freeciv.fandom.com/wiki/NEWS-2.6.4</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1626436800">- update to 2.6.5:
  * https://freeciv.fandom.com/wiki/NEWS-2.6.5
  * 2.6.5 is a bugfix release. Notably it fixes regression in 2.6.4 gtk3-client
    that present units in city dialog had no overlays drawn at all.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1639224000">- update to 2.6.6:
  * https://freeciv.fandom.com/wiki/NEWS-2.6.5
  * 2.6.6 is a bugfix release.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1648036800">- update to 3.0.0:
  * This release is a major upgrade which with some changes that
    can support backward compatible rulesets
  * see https://freeciv.fandom.com/wiki/NEWS-3.0.0#WHAT.27S_CHANGED_SINCE_2.6</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1650628800">- update to 3.0.1:
  * 3.0.1 is a generic bugfix release
  * see https://freeciv.fandom.com/wiki/NEWS-3.0.1</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1658145600">- update to 3.0.2:
  * 3.0.2 is a generic bugfix release
  * see https://freeciv.fandom.com/wiki/NEWS-3.0.2</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1660910400">- update to 3.0.3 (bsc#1202548, CVE-2022-6083):
  * 3.0.3 is a bugfix release
  * see https://freeciv.fandom.com/wiki/NEWS-3.0.3</changelog>
</package>
<package pkgid="d93eaf9ef20d001164d7e181887424e2a3b8f445e63f944b7e69e35e05a661c1" name="freeciv" arch="s390x">
  <version epoch="0" ver="3.0.3" rel="bp154.2.3.1"/>
  <changelog author="astieger@suse.com" date="1464955200">- Freeciv 2.5.4:
  * various fixes and changes for rulesets
  * general bug fixes</changelog>
  <changelog author="astieger@suse.com" date="1469880000">- Freeciv 2.5.5:
  * various fixes and changes for rulesets
  * general bug fixes
  * New 'persistent' metaserver connection mode, where one failure
    to talk to the metaserver does not prevent future attempts.
    Enabled with the '--keep' server option or the
    '/metaconnection persistent' server command.
- for a full list of upstream changes, see
  http://freeciv.wikia.com/wiki/NEWS-2.5.5</changelog>
  <changelog author="mimi.vx@gmail.com" date="1481457600">- Freeciv 2.5.6
  * various fixes and changes for rulesets
  * general fixes
- for a full list of upstream changes see
    http://freeciv.wikia.com/wiki/NEWS-2.5.6</changelog>
  <changelog author="astieger@suse.com" date="1502625600">- Freeciv 2.5.8:
  * Various fixes, including safegame fixes
- for a full list of upstream changes see
    http://freeciv.wikia.com/wiki/NEWS-2.5.7
    http://freeciv.wikia.com/wiki/NEWS-2.5.8</changelog>
  <changelog author="astieger@suse.com" date="1505736000">- Freeciv 2.5.9:
  * Fix regression in 'scorelog' function: if one continues from
    a saved game, any scorelog saved before that point would get
    wiped  rather than appended to
  * minor fixes to the Catalan and Russian localizations</changelog>
  <changelog author="astieger@suse.com" date="1517486400">- Freeciv 2.5.10:
  * fixes for failure and crashes in certain game situations
  * Minor adjustment and fixes to rules, gameplay, AI, Client UI</changelog>
  <changelog author="astieger@suse.com" date="1529064000">- freeciv 2.5.11:
  * Stealing a future technology was accidentally yielding two of
    them
  * Put a message about nuclear attack in a more appropriate
    category
  * Some minor improvements to autogenerated terrain help
  * Fix a crash with a malformed tileset
  * Fix an erroneous diagnostic for a malformed savegame
  * Fix a geographical error in the Cuyavian nation description
  * Fix typo in ruleset help comments
  * Fix some compiler warnings
  * Updated translations</changelog>
  <changelog author="Dirk Stoecker &lt;opensuse@dstoecker.de&gt;" date="1562760000">- update to 2.6.0, lots of changes
  See https://freeciv.fandom.com/wiki/NEWS-2.6.0
  Rebase freeciv-appdata-desktop-references.patch
  Cleanup build
  Introduce separate freeciv-lang package</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1585310400">- Update to 2.6.2. New bugfix release.
  See https://freeciv.fandom.com/wiki/NEWS-2.6.2 for the complete
  list of changes.
- Drop fix-qt5-detection.patch. No longer needed.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1591272000">- Drop libggz2-devel BuildRequires: ggz has not been supported
  since freeciv 2.6.0.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1591272001">- Add freeciv-qt-5.15.patch: Fix build with Qt 5.15.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1608638400">- update to 2.6.2.1:
  * Fixed server crash when unit with zero move_rate is transformed
  * Fixed crashes when using Direction objects in lua scripts
  * Fixed crash when chatline text had opening tag without closing tag
  * Fixes to the Qt client
  * Updated translations
  * Fixed Qt-client build against Qt-5.15 (removes freeciv-qt-5.15.patch )
  * Documentation updates</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1612008000">- update to 2.6.3:
  * see http://www.freeciv.org/wiki/NEWS-2.6.3
  * Fixed trouble when a new city is founded to the ruins of a former city,
    and that new city establish a trade route with a player who had seen
    former city, and is unaware that it had been destroyed HRM#871606
  * Fixed a case where shared vision did not completely update
    recipient's map HRM#846106
  * Fixed a bug where one could paradrop to peaceful nation's territory
    after continuing game from an old savegame HRM#879084
  * Fixed a bug causing game sometimes to tell wrong reason of why an
    action failed HRM#879880
  * Cease fire no longer runs out with an already dead player, making his
    former allies to hate the alive party of the treaty HRM#879055
  * Made server not to end in a infinite loop after loading savegame with
    too high phase number. Such a savegame was reported to be created
    after spaceship was launched but game was still continued HRM#815196
  * Unified writing of the city name Washington-on-the-Brazos
    between rulesets, so it doesn't appear multiple times in the same
    game in a bit different form HRM#867817
  * Stealth units are no longer erroneously hidden even from allies
    HRM#764976
  * Placing initial units is now done in shuffled player order HRM#850656
  * Corrupt worker tasks are cleared. Those can originate, e.g.,
    from buggy pre-2.6.2.1 Qt-client, and live in old savegames HRM#901938
  * In a ruleset, such as civ2civ3, where caravans can help building wonder
    in a foreign city, refresh city info of the city owner when one does
    HRM#907977
  * Display of success probabilities for diplomats was off when targeting
    stack of units instead of individual unit HRM#859761
  * Fixed pillaging of extras that are caused by something else than
    player actions. For the fix to work, both server and client must be
    at least version 2.6.3 HRM#861508
  * Civilian unit trying to paradrop to an enemy city dies HRM#870004
  * Prevented dead player from getting techs via Tech_Parasite effect.
    This caused trouble in alien ruleset where Tech_Parasite is granted
    by a tech HRM#873692
  * Improved support of CityTile requirement type HRM#877780
  * Fixed trouble preventing Small Wonders from working as impr_reqs
    for units HRM#884993
  * Corrected success probability shown by action dialog when it depends
    on a special kind of road HRM#897490
  * The included Lua engine has been upgraded from 5.3.5 to 5.3.6. HRM#889425
- drop freeciv-appdata-desktop-references.patch (obsolete)</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1618142400">- Update to 2.6.4:
  * Bugfix release, see https://freeciv.fandom.com/wiki/NEWS-2.6.4</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1626436800">- update to 2.6.5:
  * https://freeciv.fandom.com/wiki/NEWS-2.6.5
  * 2.6.5 is a bugfix release. Notably it fixes regression in 2.6.4 gtk3-client
    that present units in city dialog had no overlays drawn at all.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1639224000">- update to 2.6.6:
  * https://freeciv.fandom.com/wiki/NEWS-2.6.5
  * 2.6.6 is a bugfix release.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1648036800">- update to 3.0.0:
  * This release is a major upgrade which with some changes that
    can support backward compatible rulesets
  * see https://freeciv.fandom.com/wiki/NEWS-3.0.0#WHAT.27S_CHANGED_SINCE_2.6</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1650628800">- update to 3.0.1:
  * 3.0.1 is a generic bugfix release
  * see https://freeciv.fandom.com/wiki/NEWS-3.0.1</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1658145600">- update to 3.0.2:
  * 3.0.2 is a generic bugfix release
  * see https://freeciv.fandom.com/wiki/NEWS-3.0.2</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1660910400">- update to 3.0.3 (bsc#1202548, CVE-2022-6083):
  * 3.0.3 is a bugfix release
  * see https://freeciv.fandom.com/wiki/NEWS-3.0.3</changelog>
</package>
<package pkgid="138870fc4c8e052ddea93fe47ec84c036cac15daf9a855f10191ed135588c9aa" name="freeciv" arch="src">
  <version epoch="0" ver="3.0.3" rel="bp154.2.3.1"/>
  <changelog author="astieger@suse.com" date="1464955200">- Freeciv 2.5.4:
  * various fixes and changes for rulesets
  * general bug fixes</changelog>
  <changelog author="astieger@suse.com" date="1469880000">- Freeciv 2.5.5:
  * various fixes and changes for rulesets
  * general bug fixes
  * New 'persistent' metaserver connection mode, where one failure
    to talk to the metaserver does not prevent future attempts.
    Enabled with the '--keep' server option or the
    '/metaconnection persistent' server command.
- for a full list of upstream changes, see
  http://freeciv.wikia.com/wiki/NEWS-2.5.5</changelog>
  <changelog author="mimi.vx@gmail.com" date="1481457600">- Freeciv 2.5.6
  * various fixes and changes for rulesets
  * general fixes
- for a full list of upstream changes see
    http://freeciv.wikia.com/wiki/NEWS-2.5.6</changelog>
  <changelog author="astieger@suse.com" date="1502625600">- Freeciv 2.5.8:
  * Various fixes, including safegame fixes
- for a full list of upstream changes see
    http://freeciv.wikia.com/wiki/NEWS-2.5.7
    http://freeciv.wikia.com/wiki/NEWS-2.5.8</changelog>
  <changelog author="astieger@suse.com" date="1505736000">- Freeciv 2.5.9:
  * Fix regression in 'scorelog' function: if one continues from
    a saved game, any scorelog saved before that point would get
    wiped  rather than appended to
  * minor fixes to the Catalan and Russian localizations</changelog>
  <changelog author="astieger@suse.com" date="1517486400">- Freeciv 2.5.10:
  * fixes for failure and crashes in certain game situations
  * Minor adjustment and fixes to rules, gameplay, AI, Client UI</changelog>
  <changelog author="astieger@suse.com" date="1529064000">- freeciv 2.5.11:
  * Stealing a future technology was accidentally yielding two of
    them
  * Put a message about nuclear attack in a more appropriate
    category
  * Some minor improvements to autogenerated terrain help
  * Fix a crash with a malformed tileset
  * Fix an erroneous diagnostic for a malformed savegame
  * Fix a geographical error in the Cuyavian nation description
  * Fix typo in ruleset help comments
  * Fix some compiler warnings
  * Updated translations</changelog>
  <changelog author="Dirk Stoecker &lt;opensuse@dstoecker.de&gt;" date="1562760000">- update to 2.6.0, lots of changes
  See https://freeciv.fandom.com/wiki/NEWS-2.6.0
  Rebase freeciv-appdata-desktop-references.patch
  Cleanup build
  Introduce separate freeciv-lang package</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1585310400">- Update to 2.6.2. New bugfix release.
  See https://freeciv.fandom.com/wiki/NEWS-2.6.2 for the complete
  list of changes.
- Drop fix-qt5-detection.patch. No longer needed.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1591272000">- Drop libggz2-devel BuildRequires: ggz has not been supported
  since freeciv 2.6.0.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1591272001">- Add freeciv-qt-5.15.patch: Fix build with Qt 5.15.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1608638400">- update to 2.6.2.1:
  * Fixed server crash when unit with zero move_rate is transformed
  * Fixed crashes when using Direction objects in lua scripts
  * Fixed crash when chatline text had opening tag without closing tag
  * Fixes to the Qt client
  * Updated translations
  * Fixed Qt-client build against Qt-5.15 (removes freeciv-qt-5.15.patch )
  * Documentation updates</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1612008000">- update to 2.6.3:
  * see http://www.freeciv.org/wiki/NEWS-2.6.3
  * Fixed trouble when a new city is founded to the ruins of a former city,
    and that new city establish a trade route with a player who had seen
    former city, and is unaware that it had been destroyed HRM#871606
  * Fixed a case where shared vision did not completely update
    recipient's map HRM#846106
  * Fixed a bug where one could paradrop to peaceful nation's territory
    after continuing game from an old savegame HRM#879084
  * Fixed a bug causing game sometimes to tell wrong reason of why an
    action failed HRM#879880
  * Cease fire no longer runs out with an already dead player, making his
    former allies to hate the alive party of the treaty HRM#879055
  * Made server not to end in a infinite loop after loading savegame with
    too high phase number. Such a savegame was reported to be created
    after spaceship was launched but game was still continued HRM#815196
  * Unified writing of the city name Washington-on-the-Brazos
    between rulesets, so it doesn't appear multiple times in the same
    game in a bit different form HRM#867817
  * Stealth units are no longer erroneously hidden even from allies
    HRM#764976
  * Placing initial units is now done in shuffled player order HRM#850656
  * Corrupt worker tasks are cleared. Those can originate, e.g.,
    from buggy pre-2.6.2.1 Qt-client, and live in old savegames HRM#901938
  * In a ruleset, such as civ2civ3, where caravans can help building wonder
    in a foreign city, refresh city info of the city owner when one does
    HRM#907977
  * Display of success probabilities for diplomats was off when targeting
    stack of units instead of individual unit HRM#859761
  * Fixed pillaging of extras that are caused by something else than
    player actions. For the fix to work, both server and client must be
    at least version 2.6.3 HRM#861508
  * Civilian unit trying to paradrop to an enemy city dies HRM#870004
  * Prevented dead player from getting techs via Tech_Parasite effect.
    This caused trouble in alien ruleset where Tech_Parasite is granted
    by a tech HRM#873692
  * Improved support of CityTile requirement type HRM#877780
  * Fixed trouble preventing Small Wonders from working as impr_reqs
    for units HRM#884993
  * Corrected success probability shown by action dialog when it depends
    on a special kind of road HRM#897490
  * The included Lua engine has been upgraded from 5.3.5 to 5.3.6. HRM#889425
- drop freeciv-appdata-desktop-references.patch (obsolete)</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1618142400">- Update to 2.6.4:
  * Bugfix release, see https://freeciv.fandom.com/wiki/NEWS-2.6.4</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1626436800">- update to 2.6.5:
  * https://freeciv.fandom.com/wiki/NEWS-2.6.5
  * 2.6.5 is a bugfix release. Notably it fixes regression in 2.6.4 gtk3-client
    that present units in city dialog had no overlays drawn at all.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1639224000">- update to 2.6.6:
  * https://freeciv.fandom.com/wiki/NEWS-2.6.5
  * 2.6.6 is a bugfix release.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1648036800">- update to 3.0.0:
  * This release is a major upgrade which with some changes that
    can support backward compatible rulesets
  * see https://freeciv.fandom.com/wiki/NEWS-3.0.0#WHAT.27S_CHANGED_SINCE_2.6</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1650628800">- update to 3.0.1:
  * 3.0.1 is a generic bugfix release
  * see https://freeciv.fandom.com/wiki/NEWS-3.0.1</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1658145600">- update to 3.0.2:
  * 3.0.2 is a generic bugfix release
  * see https://freeciv.fandom.com/wiki/NEWS-3.0.2</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1660910400">- update to 3.0.3 (bsc#1202548, CVE-2022-6083):
  * 3.0.3 is a bugfix release
  * see https://freeciv.fandom.com/wiki/NEWS-3.0.3</changelog>
</package>
<package pkgid="83d3d8468c0459d2c53ef40ef48c0c17bcf108a9a053fa2b9ff38e02b5a0338c" name="freeciv" arch="x86_64">
  <version epoch="0" ver="3.0.3" rel="bp154.2.3.1"/>
  <changelog author="astieger@suse.com" date="1464955200">- Freeciv 2.5.4:
  * various fixes and changes for rulesets
  * general bug fixes</changelog>
  <changelog author="astieger@suse.com" date="1469880000">- Freeciv 2.5.5:
  * various fixes and changes for rulesets
  * general bug fixes
  * New 'persistent' metaserver connection mode, where one failure
    to talk to the metaserver does not prevent future attempts.
    Enabled with the '--keep' server option or the
    '/metaconnection persistent' server command.
- for a full list of upstream changes, see
  http://freeciv.wikia.com/wiki/NEWS-2.5.5</changelog>
  <changelog author="mimi.vx@gmail.com" date="1481457600">- Freeciv 2.5.6
  * various fixes and changes for rulesets
  * general fixes
- for a full list of upstream changes see
    http://freeciv.wikia.com/wiki/NEWS-2.5.6</changelog>
  <changelog author="astieger@suse.com" date="1502625600">- Freeciv 2.5.8:
  * Various fixes, including safegame fixes
- for a full list of upstream changes see
    http://freeciv.wikia.com/wiki/NEWS-2.5.7
    http://freeciv.wikia.com/wiki/NEWS-2.5.8</changelog>
  <changelog author="astieger@suse.com" date="1505736000">- Freeciv 2.5.9:
  * Fix regression in 'scorelog' function: if one continues from
    a saved game, any scorelog saved before that point would get
    wiped  rather than appended to
  * minor fixes to the Catalan and Russian localizations</changelog>
  <changelog author="astieger@suse.com" date="1517486400">- Freeciv 2.5.10:
  * fixes for failure and crashes in certain game situations
  * Minor adjustment and fixes to rules, gameplay, AI, Client UI</changelog>
  <changelog author="astieger@suse.com" date="1529064000">- freeciv 2.5.11:
  * Stealing a future technology was accidentally yielding two of
    them
  * Put a message about nuclear attack in a more appropriate
    category
  * Some minor improvements to autogenerated terrain help
  * Fix a crash with a malformed tileset
  * Fix an erroneous diagnostic for a malformed savegame
  * Fix a geographical error in the Cuyavian nation description
  * Fix typo in ruleset help comments
  * Fix some compiler warnings
  * Updated translations</changelog>
  <changelog author="Dirk Stoecker &lt;opensuse@dstoecker.de&gt;" date="1562760000">- update to 2.6.0, lots of changes
  See https://freeciv.fandom.com/wiki/NEWS-2.6.0
  Rebase freeciv-appdata-desktop-references.patch
  Cleanup build
  Introduce separate freeciv-lang package</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1585310400">- Update to 2.6.2. New bugfix release.
  See https://freeciv.fandom.com/wiki/NEWS-2.6.2 for the complete
  list of changes.
- Drop fix-qt5-detection.patch. No longer needed.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1591272000">- Drop libggz2-devel BuildRequires: ggz has not been supported
  since freeciv 2.6.0.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1591272001">- Add freeciv-qt-5.15.patch: Fix build with Qt 5.15.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1608638400">- update to 2.6.2.1:
  * Fixed server crash when unit with zero move_rate is transformed
  * Fixed crashes when using Direction objects in lua scripts
  * Fixed crash when chatline text had opening tag without closing tag
  * Fixes to the Qt client
  * Updated translations
  * Fixed Qt-client build against Qt-5.15 (removes freeciv-qt-5.15.patch )
  * Documentation updates</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1612008000">- update to 2.6.3:
  * see http://www.freeciv.org/wiki/NEWS-2.6.3
  * Fixed trouble when a new city is founded to the ruins of a former city,
    and that new city establish a trade route with a player who had seen
    former city, and is unaware that it had been destroyed HRM#871606
  * Fixed a case where shared vision did not completely update
    recipient's map HRM#846106
  * Fixed a bug where one could paradrop to peaceful nation's territory
    after continuing game from an old savegame HRM#879084
  * Fixed a bug causing game sometimes to tell wrong reason of why an
    action failed HRM#879880
  * Cease fire no longer runs out with an already dead player, making his
    former allies to hate the alive party of the treaty HRM#879055
  * Made server not to end in a infinite loop after loading savegame with
    too high phase number. Such a savegame was reported to be created
    after spaceship was launched but game was still continued HRM#815196
  * Unified writing of the city name Washington-on-the-Brazos
    between rulesets, so it doesn't appear multiple times in the same
    game in a bit different form HRM#867817
  * Stealth units are no longer erroneously hidden even from allies
    HRM#764976
  * Placing initial units is now done in shuffled player order HRM#850656
  * Corrupt worker tasks are cleared. Those can originate, e.g.,
    from buggy pre-2.6.2.1 Qt-client, and live in old savegames HRM#901938
  * In a ruleset, such as civ2civ3, where caravans can help building wonder
    in a foreign city, refresh city info of the city owner when one does
    HRM#907977
  * Display of success probabilities for diplomats was off when targeting
    stack of units instead of individual unit HRM#859761
  * Fixed pillaging of extras that are caused by something else than
    player actions. For the fix to work, both server and client must be
    at least version 2.6.3 HRM#861508
  * Civilian unit trying to paradrop to an enemy city dies HRM#870004
  * Prevented dead player from getting techs via Tech_Parasite effect.
    This caused trouble in alien ruleset where Tech_Parasite is granted
    by a tech HRM#873692
  * Improved support of CityTile requirement type HRM#877780
  * Fixed trouble preventing Small Wonders from working as impr_reqs
    for units HRM#884993
  * Corrected success probability shown by action dialog when it depends
    on a special kind of road HRM#897490
  * The included Lua engine has been upgraded from 5.3.5 to 5.3.6. HRM#889425
- drop freeciv-appdata-desktop-references.patch (obsolete)</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1618142400">- Update to 2.6.4:
  * Bugfix release, see https://freeciv.fandom.com/wiki/NEWS-2.6.4</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1626436800">- update to 2.6.5:
  * https://freeciv.fandom.com/wiki/NEWS-2.6.5
  * 2.6.5 is a bugfix release. Notably it fixes regression in 2.6.4 gtk3-client
    that present units in city dialog had no overlays drawn at all.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1639224000">- update to 2.6.6:
  * https://freeciv.fandom.com/wiki/NEWS-2.6.5
  * 2.6.6 is a bugfix release.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1648036800">- update to 3.0.0:
  * This release is a major upgrade which with some changes that
    can support backward compatible rulesets
  * see https://freeciv.fandom.com/wiki/NEWS-3.0.0#WHAT.27S_CHANGED_SINCE_2.6</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1650628800">- update to 3.0.1:
  * 3.0.1 is a generic bugfix release
  * see https://freeciv.fandom.com/wiki/NEWS-3.0.1</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1658145600">- update to 3.0.2:
  * 3.0.2 is a generic bugfix release
  * see https://freeciv.fandom.com/wiki/NEWS-3.0.2</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1660910400">- update to 3.0.3 (bsc#1202548, CVE-2022-6083):
  * 3.0.3 is a bugfix release
  * see https://freeciv.fandom.com/wiki/NEWS-3.0.3</changelog>
</package>
<package pkgid="24bcc0a465ce5344de407a7f4f8be362217a3cd5e8b4a2332aab97f7ee2089ea" name="freeciv-gtk3" arch="aarch64">
  <version epoch="0" ver="3.0.3" rel="bp154.2.3.1"/>
  <changelog author="astieger@suse.com" date="1464955200">- Freeciv 2.5.4:
  * various fixes and changes for rulesets
  * general bug fixes</changelog>
  <changelog author="astieger@suse.com" date="1469880000">- Freeciv 2.5.5:
  * various fixes and changes for rulesets
  * general bug fixes
  * New 'persistent' metaserver connection mode, where one failure
    to talk to the metaserver does not prevent future attempts.
    Enabled with the '--keep' server option or the
    '/metaconnection persistent' server command.
- for a full list of upstream changes, see
  http://freeciv.wikia.com/wiki/NEWS-2.5.5</changelog>
  <changelog author="mimi.vx@gmail.com" date="1481457600">- Freeciv 2.5.6
  * various fixes and changes for rulesets
  * general fixes
- for a full list of upstream changes see
    http://freeciv.wikia.com/wiki/NEWS-2.5.6</changelog>
  <changelog author="astieger@suse.com" date="1502625600">- Freeciv 2.5.8:
  * Various fixes, including safegame fixes
- for a full list of upstream changes see
    http://freeciv.wikia.com/wiki/NEWS-2.5.7
    http://freeciv.wikia.com/wiki/NEWS-2.5.8</changelog>
  <changelog author="astieger@suse.com" date="1505736000">- Freeciv 2.5.9:
  * Fix regression in 'scorelog' function: if one continues from
    a saved game, any scorelog saved before that point would get
    wiped  rather than appended to
  * minor fixes to the Catalan and Russian localizations</changelog>
  <changelog author="astieger@suse.com" date="1517486400">- Freeciv 2.5.10:
  * fixes for failure and crashes in certain game situations
  * Minor adjustment and fixes to rules, gameplay, AI, Client UI</changelog>
  <changelog author="astieger@suse.com" date="1529064000">- freeciv 2.5.11:
  * Stealing a future technology was accidentally yielding two of
    them
  * Put a message about nuclear attack in a more appropriate
    category
  * Some minor improvements to autogenerated terrain help
  * Fix a crash with a malformed tileset
  * Fix an erroneous diagnostic for a malformed savegame
  * Fix a geographical error in the Cuyavian nation description
  * Fix typo in ruleset help comments
  * Fix some compiler warnings
  * Updated translations</changelog>
  <changelog author="Dirk Stoecker &lt;opensuse@dstoecker.de&gt;" date="1562760000">- update to 2.6.0, lots of changes
  See https://freeciv.fandom.com/wiki/NEWS-2.6.0
  Rebase freeciv-appdata-desktop-references.patch
  Cleanup build
  Introduce separate freeciv-lang package</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1585310400">- Update to 2.6.2. New bugfix release.
  See https://freeciv.fandom.com/wiki/NEWS-2.6.2 for the complete
  list of changes.
- Drop fix-qt5-detection.patch. No longer needed.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1591272000">- Drop libggz2-devel BuildRequires: ggz has not been supported
  since freeciv 2.6.0.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1591272001">- Add freeciv-qt-5.15.patch: Fix build with Qt 5.15.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1608638400">- update to 2.6.2.1:
  * Fixed server crash when unit with zero move_rate is transformed
  * Fixed crashes when using Direction objects in lua scripts
  * Fixed crash when chatline text had opening tag without closing tag
  * Fixes to the Qt client
  * Updated translations
  * Fixed Qt-client build against Qt-5.15 (removes freeciv-qt-5.15.patch )
  * Documentation updates</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1612008000">- update to 2.6.3:
  * see http://www.freeciv.org/wiki/NEWS-2.6.3
  * Fixed trouble when a new city is founded to the ruins of a former city,
    and that new city establish a trade route with a player who had seen
    former city, and is unaware that it had been destroyed HRM#871606
  * Fixed a case where shared vision did not completely update
    recipient's map HRM#846106
  * Fixed a bug where one could paradrop to peaceful nation's territory
    after continuing game from an old savegame HRM#879084
  * Fixed a bug causing game sometimes to tell wrong reason of why an
    action failed HRM#879880
  * Cease fire no longer runs out with an already dead player, making his
    former allies to hate the alive party of the treaty HRM#879055
  * Made server not to end in a infinite loop after loading savegame with
    too high phase number. Such a savegame was reported to be created
    after spaceship was launched but game was still continued HRM#815196
  * Unified writing of the city name Washington-on-the-Brazos
    between rulesets, so it doesn't appear multiple times in the same
    game in a bit different form HRM#867817
  * Stealth units are no longer erroneously hidden even from allies
    HRM#764976
  * Placing initial units is now done in shuffled player order HRM#850656
  * Corrupt worker tasks are cleared. Those can originate, e.g.,
    from buggy pre-2.6.2.1 Qt-client, and live in old savegames HRM#901938
  * In a ruleset, such as civ2civ3, where caravans can help building wonder
    in a foreign city, refresh city info of the city owner when one does
    HRM#907977
  * Display of success probabilities for diplomats was off when targeting
    stack of units instead of individual unit HRM#859761
  * Fixed pillaging of extras that are caused by something else than
    player actions. For the fix to work, both server and client must be
    at least version 2.6.3 HRM#861508
  * Civilian unit trying to paradrop to an enemy city dies HRM#870004
  * Prevented dead player from getting techs via Tech_Parasite effect.
    This caused trouble in alien ruleset where Tech_Parasite is granted
    by a tech HRM#873692
  * Improved support of CityTile requirement type HRM#877780
  * Fixed trouble preventing Small Wonders from working as impr_reqs
    for units HRM#884993
  * Corrected success probability shown by action dialog when it depends
    on a special kind of road HRM#897490
  * The included Lua engine has been upgraded from 5.3.5 to 5.3.6. HRM#889425
- drop freeciv-appdata-desktop-references.patch (obsolete)</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1618142400">- Update to 2.6.4:
  * Bugfix release, see https://freeciv.fandom.com/wiki/NEWS-2.6.4</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1626436800">- update to 2.6.5:
  * https://freeciv.fandom.com/wiki/NEWS-2.6.5
  * 2.6.5 is a bugfix release. Notably it fixes regression in 2.6.4 gtk3-client
    that present units in city dialog had no overlays drawn at all.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1639224000">- update to 2.6.6:
  * https://freeciv.fandom.com/wiki/NEWS-2.6.5
  * 2.6.6 is a bugfix release.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1648036800">- update to 3.0.0:
  * This release is a major upgrade which with some changes that
    can support backward compatible rulesets
  * see https://freeciv.fandom.com/wiki/NEWS-3.0.0#WHAT.27S_CHANGED_SINCE_2.6</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1650628800">- update to 3.0.1:
  * 3.0.1 is a generic bugfix release
  * see https://freeciv.fandom.com/wiki/NEWS-3.0.1</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1658145600">- update to 3.0.2:
  * 3.0.2 is a generic bugfix release
  * see https://freeciv.fandom.com/wiki/NEWS-3.0.2</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1660910400">- update to 3.0.3 (bsc#1202548, CVE-2022-6083):
  * 3.0.3 is a bugfix release
  * see https://freeciv.fandom.com/wiki/NEWS-3.0.3</changelog>
</package>
<package pkgid="f051d2590980658b58c087995407601302f96b9b1a926dac3f9cdeacd9e453de" name="freeciv-gtk3" arch="i586">
  <version epoch="0" ver="3.0.3" rel="bp154.2.3.1"/>
  <changelog author="astieger@suse.com" date="1464955200">- Freeciv 2.5.4:
  * various fixes and changes for rulesets
  * general bug fixes</changelog>
  <changelog author="astieger@suse.com" date="1469880000">- Freeciv 2.5.5:
  * various fixes and changes for rulesets
  * general bug fixes
  * New 'persistent' metaserver connection mode, where one failure
    to talk to the metaserver does not prevent future attempts.
    Enabled with the '--keep' server option or the
    '/metaconnection persistent' server command.
- for a full list of upstream changes, see
  http://freeciv.wikia.com/wiki/NEWS-2.5.5</changelog>
  <changelog author="mimi.vx@gmail.com" date="1481457600">- Freeciv 2.5.6
  * various fixes and changes for rulesets
  * general fixes
- for a full list of upstream changes see
    http://freeciv.wikia.com/wiki/NEWS-2.5.6</changelog>
  <changelog author="astieger@suse.com" date="1502625600">- Freeciv 2.5.8:
  * Various fixes, including safegame fixes
- for a full list of upstream changes see
    http://freeciv.wikia.com/wiki/NEWS-2.5.7
    http://freeciv.wikia.com/wiki/NEWS-2.5.8</changelog>
  <changelog author="astieger@suse.com" date="1505736000">- Freeciv 2.5.9:
  * Fix regression in 'scorelog' function: if one continues from
    a saved game, any scorelog saved before that point would get
    wiped  rather than appended to
  * minor fixes to the Catalan and Russian localizations</changelog>
  <changelog author="astieger@suse.com" date="1517486400">- Freeciv 2.5.10:
  * fixes for failure and crashes in certain game situations
  * Minor adjustment and fixes to rules, gameplay, AI, Client UI</changelog>
  <changelog author="astieger@suse.com" date="1529064000">- freeciv 2.5.11:
  * Stealing a future technology was accidentally yielding two of
    them
  * Put a message about nuclear attack in a more appropriate
    category
  * Some minor improvements to autogenerated terrain help
  * Fix a crash with a malformed tileset
  * Fix an erroneous diagnostic for a malformed savegame
  * Fix a geographical error in the Cuyavian nation description
  * Fix typo in ruleset help comments
  * Fix some compiler warnings
  * Updated translations</changelog>
  <changelog author="Dirk Stoecker &lt;opensuse@dstoecker.de&gt;" date="1562760000">- update to 2.6.0, lots of changes
  See https://freeciv.fandom.com/wiki/NEWS-2.6.0
  Rebase freeciv-appdata-desktop-references.patch
  Cleanup build
  Introduce separate freeciv-lang package</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1585310400">- Update to 2.6.2. New bugfix release.
  See https://freeciv.fandom.com/wiki/NEWS-2.6.2 for the complete
  list of changes.
- Drop fix-qt5-detection.patch. No longer needed.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1591272000">- Drop libggz2-devel BuildRequires: ggz has not been supported
  since freeciv 2.6.0.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1591272001">- Add freeciv-qt-5.15.patch: Fix build with Qt 5.15.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1608638400">- update to 2.6.2.1:
  * Fixed server crash when unit with zero move_rate is transformed
  * Fixed crashes when using Direction objects in lua scripts
  * Fixed crash when chatline text had opening tag without closing tag
  * Fixes to the Qt client
  * Updated translations
  * Fixed Qt-client build against Qt-5.15 (removes freeciv-qt-5.15.patch )
  * Documentation updates</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1612008000">- update to 2.6.3:
  * see http://www.freeciv.org/wiki/NEWS-2.6.3
  * Fixed trouble when a new city is founded to the ruins of a former city,
    and that new city establish a trade route with a player who had seen
    former city, and is unaware that it had been destroyed HRM#871606
  * Fixed a case where shared vision did not completely update
    recipient's map HRM#846106
  * Fixed a bug where one could paradrop to peaceful nation's territory
    after continuing game from an old savegame HRM#879084
  * Fixed a bug causing game sometimes to tell wrong reason of why an
    action failed HRM#879880
  * Cease fire no longer runs out with an already dead player, making his
    former allies to hate the alive party of the treaty HRM#879055
  * Made server not to end in a infinite loop after loading savegame with
    too high phase number. Such a savegame was reported to be created
    after spaceship was launched but game was still continued HRM#815196
  * Unified writing of the city name Washington-on-the-Brazos
    between rulesets, so it doesn't appear multiple times in the same
    game in a bit different form HRM#867817
  * Stealth units are no longer erroneously hidden even from allies
    HRM#764976
  * Placing initial units is now done in shuffled player order HRM#850656
  * Corrupt worker tasks are cleared. Those can originate, e.g.,
    from buggy pre-2.6.2.1 Qt-client, and live in old savegames HRM#901938
  * In a ruleset, such as civ2civ3, where caravans can help building wonder
    in a foreign city, refresh city info of the city owner when one does
    HRM#907977
  * Display of success probabilities for diplomats was off when targeting
    stack of units instead of individual unit HRM#859761
  * Fixed pillaging of extras that are caused by something else than
    player actions. For the fix to work, both server and client must be
    at least version 2.6.3 HRM#861508
  * Civilian unit trying to paradrop to an enemy city dies HRM#870004
  * Prevented dead player from getting techs via Tech_Parasite effect.
    This caused trouble in alien ruleset where Tech_Parasite is granted
    by a tech HRM#873692
  * Improved support of CityTile requirement type HRM#877780
  * Fixed trouble preventing Small Wonders from working as impr_reqs
    for units HRM#884993
  * Corrected success probability shown by action dialog when it depends
    on a special kind of road HRM#897490
  * The included Lua engine has been upgraded from 5.3.5 to 5.3.6. HRM#889425
- drop freeciv-appdata-desktop-references.patch (obsolete)</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1618142400">- Update to 2.6.4:
  * Bugfix release, see https://freeciv.fandom.com/wiki/NEWS-2.6.4</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1626436800">- update to 2.6.5:
  * https://freeciv.fandom.com/wiki/NEWS-2.6.5
  * 2.6.5 is a bugfix release. Notably it fixes regression in 2.6.4 gtk3-client
    that present units in city dialog had no overlays drawn at all.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1639224000">- update to 2.6.6:
  * https://freeciv.fandom.com/wiki/NEWS-2.6.5
  * 2.6.6 is a bugfix release.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1648036800">- update to 3.0.0:
  * This release is a major upgrade which with some changes that
    can support backward compatible rulesets
  * see https://freeciv.fandom.com/wiki/NEWS-3.0.0#WHAT.27S_CHANGED_SINCE_2.6</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1650628800">- update to 3.0.1:
  * 3.0.1 is a generic bugfix release
  * see https://freeciv.fandom.com/wiki/NEWS-3.0.1</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1658145600">- update to 3.0.2:
  * 3.0.2 is a generic bugfix release
  * see https://freeciv.fandom.com/wiki/NEWS-3.0.2</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1660910400">- update to 3.0.3 (bsc#1202548, CVE-2022-6083):
  * 3.0.3 is a bugfix release
  * see https://freeciv.fandom.com/wiki/NEWS-3.0.3</changelog>
</package>
<package pkgid="18a85a3a561c737b5e8eb310dcae7f5f140b327c8e98f35bbcde7d5c80a8d887" name="freeciv-gtk3" arch="ppc64le">
  <version epoch="0" ver="3.0.3" rel="bp154.2.3.1"/>
  <changelog author="astieger@suse.com" date="1464955200">- Freeciv 2.5.4:
  * various fixes and changes for rulesets
  * general bug fixes</changelog>
  <changelog author="astieger@suse.com" date="1469880000">- Freeciv 2.5.5:
  * various fixes and changes for rulesets
  * general bug fixes
  * New 'persistent' metaserver connection mode, where one failure
    to talk to the metaserver does not prevent future attempts.
    Enabled with the '--keep' server option or the
    '/metaconnection persistent' server command.
- for a full list of upstream changes, see
  http://freeciv.wikia.com/wiki/NEWS-2.5.5</changelog>
  <changelog author="mimi.vx@gmail.com" date="1481457600">- Freeciv 2.5.6
  * various fixes and changes for rulesets
  * general fixes
- for a full list of upstream changes see
    http://freeciv.wikia.com/wiki/NEWS-2.5.6</changelog>
  <changelog author="astieger@suse.com" date="1502625600">- Freeciv 2.5.8:
  * Various fixes, including safegame fixes
- for a full list of upstream changes see
    http://freeciv.wikia.com/wiki/NEWS-2.5.7
    http://freeciv.wikia.com/wiki/NEWS-2.5.8</changelog>
  <changelog author="astieger@suse.com" date="1505736000">- Freeciv 2.5.9:
  * Fix regression in 'scorelog' function: if one continues from
    a saved game, any scorelog saved before that point would get
    wiped  rather than appended to
  * minor fixes to the Catalan and Russian localizations</changelog>
  <changelog author="astieger@suse.com" date="1517486400">- Freeciv 2.5.10:
  * fixes for failure and crashes in certain game situations
  * Minor adjustment and fixes to rules, gameplay, AI, Client UI</changelog>
  <changelog author="astieger@suse.com" date="1529064000">- freeciv 2.5.11:
  * Stealing a future technology was accidentally yielding two of
    them
  * Put a message about nuclear attack in a more appropriate
    category
  * Some minor improvements to autogenerated terrain help
  * Fix a crash with a malformed tileset
  * Fix an erroneous diagnostic for a malformed savegame
  * Fix a geographical error in the Cuyavian nation description
  * Fix typo in ruleset help comments
  * Fix some compiler warnings
  * Updated translations</changelog>
  <changelog author="Dirk Stoecker &lt;opensuse@dstoecker.de&gt;" date="1562760000">- update to 2.6.0, lots of changes
  See https://freeciv.fandom.com/wiki/NEWS-2.6.0
  Rebase freeciv-appdata-desktop-references.patch
  Cleanup build
  Introduce separate freeciv-lang package</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1585310400">- Update to 2.6.2. New bugfix release.
  See https://freeciv.fandom.com/wiki/NEWS-2.6.2 for the complete
  list of changes.
- Drop fix-qt5-detection.patch. No longer needed.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1591272000">- Drop libggz2-devel BuildRequires: ggz has not been supported
  since freeciv 2.6.0.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1591272001">- Add freeciv-qt-5.15.patch: Fix build with Qt 5.15.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1608638400">- update to 2.6.2.1:
  * Fixed server crash when unit with zero move_rate is transformed
  * Fixed crashes when using Direction objects in lua scripts
  * Fixed crash when chatline text had opening tag without closing tag
  * Fixes to the Qt client
  * Updated translations
  * Fixed Qt-client build against Qt-5.15 (removes freeciv-qt-5.15.patch )
  * Documentation updates</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1612008000">- update to 2.6.3:
  * see http://www.freeciv.org/wiki/NEWS-2.6.3
  * Fixed trouble when a new city is founded to the ruins of a former city,
    and that new city establish a trade route with a player who had seen
    former city, and is unaware that it had been destroyed HRM#871606
  * Fixed a case where shared vision did not completely update
    recipient's map HRM#846106
  * Fixed a bug where one could paradrop to peaceful nation's territory
    after continuing game from an old savegame HRM#879084
  * Fixed a bug causing game sometimes to tell wrong reason of why an
    action failed HRM#879880
  * Cease fire no longer runs out with an already dead player, making his
    former allies to hate the alive party of the treaty HRM#879055
  * Made server not to end in a infinite loop after loading savegame with
    too high phase number. Such a savegame was reported to be created
    after spaceship was launched but game was still continued HRM#815196
  * Unified writing of the city name Washington-on-the-Brazos
    between rulesets, so it doesn't appear multiple times in the same
    game in a bit different form HRM#867817
  * Stealth units are no longer erroneously hidden even from allies
    HRM#764976
  * Placing initial units is now done in shuffled player order HRM#850656
  * Corrupt worker tasks are cleared. Those can originate, e.g.,
    from buggy pre-2.6.2.1 Qt-client, and live in old savegames HRM#901938
  * In a ruleset, such as civ2civ3, where caravans can help building wonder
    in a foreign city, refresh city info of the city owner when one does
    HRM#907977
  * Display of success probabilities for diplomats was off when targeting
    stack of units instead of individual unit HRM#859761
  * Fixed pillaging of extras that are caused by something else than
    player actions. For the fix to work, both server and client must be
    at least version 2.6.3 HRM#861508
  * Civilian unit trying to paradrop to an enemy city dies HRM#870004
  * Prevented dead player from getting techs via Tech_Parasite effect.
    This caused trouble in alien ruleset where Tech_Parasite is granted
    by a tech HRM#873692
  * Improved support of CityTile requirement type HRM#877780
  * Fixed trouble preventing Small Wonders from working as impr_reqs
    for units HRM#884993
  * Corrected success probability shown by action dialog when it depends
    on a special kind of road HRM#897490
  * The included Lua engine has been upgraded from 5.3.5 to 5.3.6. HRM#889425
- drop freeciv-appdata-desktop-references.patch (obsolete)</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1618142400">- Update to 2.6.4:
  * Bugfix release, see https://freeciv.fandom.com/wiki/NEWS-2.6.4</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1626436800">- update to 2.6.5:
  * https://freeciv.fandom.com/wiki/NEWS-2.6.5
  * 2.6.5 is a bugfix release. Notably it fixes regression in 2.6.4 gtk3-client
    that present units in city dialog had no overlays drawn at all.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1639224000">- update to 2.6.6:
  * https://freeciv.fandom.com/wiki/NEWS-2.6.5
  * 2.6.6 is a bugfix release.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1648036800">- update to 3.0.0:
  * This release is a major upgrade which with some changes that
    can support backward compatible rulesets
  * see https://freeciv.fandom.com/wiki/NEWS-3.0.0#WHAT.27S_CHANGED_SINCE_2.6</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1650628800">- update to 3.0.1:
  * 3.0.1 is a generic bugfix release
  * see https://freeciv.fandom.com/wiki/NEWS-3.0.1</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1658145600">- update to 3.0.2:
  * 3.0.2 is a generic bugfix release
  * see https://freeciv.fandom.com/wiki/NEWS-3.0.2</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1660910400">- update to 3.0.3 (bsc#1202548, CVE-2022-6083):
  * 3.0.3 is a bugfix release
  * see https://freeciv.fandom.com/wiki/NEWS-3.0.3</changelog>
</package>
<package pkgid="1813a4e6d4796dee77ed6af251ad90f79d82d117b9736cc812b1a004795c2f60" name="freeciv-gtk3" arch="s390x">
  <version epoch="0" ver="3.0.3" rel="bp154.2.3.1"/>
  <changelog author="astieger@suse.com" date="1464955200">- Freeciv 2.5.4:
  * various fixes and changes for rulesets
  * general bug fixes</changelog>
  <changelog author="astieger@suse.com" date="1469880000">- Freeciv 2.5.5:
  * various fixes and changes for rulesets
  * general bug fixes
  * New 'persistent' metaserver connection mode, where one failure
    to talk to the metaserver does not prevent future attempts.
    Enabled with the '--keep' server option or the
    '/metaconnection persistent' server command.
- for a full list of upstream changes, see
  http://freeciv.wikia.com/wiki/NEWS-2.5.5</changelog>
  <changelog author="mimi.vx@gmail.com" date="1481457600">- Freeciv 2.5.6
  * various fixes and changes for rulesets
  * general fixes
- for a full list of upstream changes see
    http://freeciv.wikia.com/wiki/NEWS-2.5.6</changelog>
  <changelog author="astieger@suse.com" date="1502625600">- Freeciv 2.5.8:
  * Various fixes, including safegame fixes
- for a full list of upstream changes see
    http://freeciv.wikia.com/wiki/NEWS-2.5.7
    http://freeciv.wikia.com/wiki/NEWS-2.5.8</changelog>
  <changelog author="astieger@suse.com" date="1505736000">- Freeciv 2.5.9:
  * Fix regression in 'scorelog' function: if one continues from
    a saved game, any scorelog saved before that point would get
    wiped  rather than appended to
  * minor fixes to the Catalan and Russian localizations</changelog>
  <changelog author="astieger@suse.com" date="1517486400">- Freeciv 2.5.10:
  * fixes for failure and crashes in certain game situations
  * Minor adjustment and fixes to rules, gameplay, AI, Client UI</changelog>
  <changelog author="astieger@suse.com" date="1529064000">- freeciv 2.5.11:
  * Stealing a future technology was accidentally yielding two of
    them
  * Put a message about nuclear attack in a more appropriate
    category
  * Some minor improvements to autogenerated terrain help
  * Fix a crash with a malformed tileset
  * Fix an erroneous diagnostic for a malformed savegame
  * Fix a geographical error in the Cuyavian nation description
  * Fix typo in ruleset help comments
  * Fix some compiler warnings
  * Updated translations</changelog>
  <changelog author="Dirk Stoecker &lt;opensuse@dstoecker.de&gt;" date="1562760000">- update to 2.6.0, lots of changes
  See https://freeciv.fandom.com/wiki/NEWS-2.6.0
  Rebase freeciv-appdata-desktop-references.patch
  Cleanup build
  Introduce separate freeciv-lang package</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1585310400">- Update to 2.6.2. New bugfix release.
  See https://freeciv.fandom.com/wiki/NEWS-2.6.2 for the complete
  list of changes.
- Drop fix-qt5-detection.patch. No longer needed.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1591272000">- Drop libggz2-devel BuildRequires: ggz has not been supported
  since freeciv 2.6.0.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1591272001">- Add freeciv-qt-5.15.patch: Fix build with Qt 5.15.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1608638400">- update to 2.6.2.1:
  * Fixed server crash when unit with zero move_rate is transformed
  * Fixed crashes when using Direction objects in lua scripts
  * Fixed crash when chatline text had opening tag without closing tag
  * Fixes to the Qt client
  * Updated translations
  * Fixed Qt-client build against Qt-5.15 (removes freeciv-qt-5.15.patch )
  * Documentation updates</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1612008000">- update to 2.6.3:
  * see http://www.freeciv.org/wiki/NEWS-2.6.3
  * Fixed trouble when a new city is founded to the ruins of a former city,
    and that new city establish a trade route with a player who had seen
    former city, and is unaware that it had been destroyed HRM#871606
  * Fixed a case where shared vision did not completely update
    recipient's map HRM#846106
  * Fixed a bug where one could paradrop to peaceful nation's territory
    after continuing game from an old savegame HRM#879084
  * Fixed a bug causing game sometimes to tell wrong reason of why an
    action failed HRM#879880
  * Cease fire no longer runs out with an already dead player, making his
    former allies to hate the alive party of the treaty HRM#879055
  * Made server not to end in a infinite loop after loading savegame with
    too high phase number. Such a savegame was reported to be created
    after spaceship was launched but game was still continued HRM#815196
  * Unified writing of the city name Washington-on-the-Brazos
    between rulesets, so it doesn't appear multiple times in the same
    game in a bit different form HRM#867817
  * Stealth units are no longer erroneously hidden even from allies
    HRM#764976
  * Placing initial units is now done in shuffled player order HRM#850656
  * Corrupt worker tasks are cleared. Those can originate, e.g.,
    from buggy pre-2.6.2.1 Qt-client, and live in old savegames HRM#901938
  * In a ruleset, such as civ2civ3, where caravans can help building wonder
    in a foreign city, refresh city info of the city owner when one does
    HRM#907977
  * Display of success probabilities for diplomats was off when targeting
    stack of units instead of individual unit HRM#859761
  * Fixed pillaging of extras that are caused by something else than
    player actions. For the fix to work, both server and client must be
    at least version 2.6.3 HRM#861508
  * Civilian unit trying to paradrop to an enemy city dies HRM#870004
  * Prevented dead player from getting techs via Tech_Parasite effect.
    This caused trouble in alien ruleset where Tech_Parasite is granted
    by a tech HRM#873692
  * Improved support of CityTile requirement type HRM#877780
  * Fixed trouble preventing Small Wonders from working as impr_reqs
    for units HRM#884993
  * Corrected success probability shown by action dialog when it depends
    on a special kind of road HRM#897490
  * The included Lua engine has been upgraded from 5.3.5 to 5.3.6. HRM#889425
- drop freeciv-appdata-desktop-references.patch (obsolete)</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1618142400">- Update to 2.6.4:
  * Bugfix release, see https://freeciv.fandom.com/wiki/NEWS-2.6.4</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1626436800">- update to 2.6.5:
  * https://freeciv.fandom.com/wiki/NEWS-2.6.5
  * 2.6.5 is a bugfix release. Notably it fixes regression in 2.6.4 gtk3-client
    that present units in city dialog had no overlays drawn at all.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1639224000">- update to 2.6.6:
  * https://freeciv.fandom.com/wiki/NEWS-2.6.5
  * 2.6.6 is a bugfix release.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1648036800">- update to 3.0.0:
  * This release is a major upgrade which with some changes that
    can support backward compatible rulesets
  * see https://freeciv.fandom.com/wiki/NEWS-3.0.0#WHAT.27S_CHANGED_SINCE_2.6</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1650628800">- update to 3.0.1:
  * 3.0.1 is a generic bugfix release
  * see https://freeciv.fandom.com/wiki/NEWS-3.0.1</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1658145600">- update to 3.0.2:
  * 3.0.2 is a generic bugfix release
  * see https://freeciv.fandom.com/wiki/NEWS-3.0.2</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1660910400">- update to 3.0.3 (bsc#1202548, CVE-2022-6083):
  * 3.0.3 is a bugfix release
  * see https://freeciv.fandom.com/wiki/NEWS-3.0.3</changelog>
</package>
<package pkgid="c9112c7886db2307954e8e2322062cbe512397e239349e5a6fca36760132eac3" name="freeciv-gtk3" arch="x86_64">
  <version epoch="0" ver="3.0.3" rel="bp154.2.3.1"/>
  <changelog author="astieger@suse.com" date="1464955200">- Freeciv 2.5.4:
  * various fixes and changes for rulesets
  * general bug fixes</changelog>
  <changelog author="astieger@suse.com" date="1469880000">- Freeciv 2.5.5:
  * various fixes and changes for rulesets
  * general bug fixes
  * New 'persistent' metaserver connection mode, where one failure
    to talk to the metaserver does not prevent future attempts.
    Enabled with the '--keep' server option or the
    '/metaconnection persistent' server command.
- for a full list of upstream changes, see
  http://freeciv.wikia.com/wiki/NEWS-2.5.5</changelog>
  <changelog author="mimi.vx@gmail.com" date="1481457600">- Freeciv 2.5.6
  * various fixes and changes for rulesets
  * general fixes
- for a full list of upstream changes see
    http://freeciv.wikia.com/wiki/NEWS-2.5.6</changelog>
  <changelog author="astieger@suse.com" date="1502625600">- Freeciv 2.5.8:
  * Various fixes, including safegame fixes
- for a full list of upstream changes see
    http://freeciv.wikia.com/wiki/NEWS-2.5.7
    http://freeciv.wikia.com/wiki/NEWS-2.5.8</changelog>
  <changelog author="astieger@suse.com" date="1505736000">- Freeciv 2.5.9:
  * Fix regression in 'scorelog' function: if one continues from
    a saved game, any scorelog saved before that point would get
    wiped  rather than appended to
  * minor fixes to the Catalan and Russian localizations</changelog>
  <changelog author="astieger@suse.com" date="1517486400">- Freeciv 2.5.10:
  * fixes for failure and crashes in certain game situations
  * Minor adjustment and fixes to rules, gameplay, AI, Client UI</changelog>
  <changelog author="astieger@suse.com" date="1529064000">- freeciv 2.5.11:
  * Stealing a future technology was accidentally yielding two of
    them
  * Put a message about nuclear attack in a more appropriate
    category
  * Some minor improvements to autogenerated terrain help
  * Fix a crash with a malformed tileset
  * Fix an erroneous diagnostic for a malformed savegame
  * Fix a geographical error in the Cuyavian nation description
  * Fix typo in ruleset help comments
  * Fix some compiler warnings
  * Updated translations</changelog>
  <changelog author="Dirk Stoecker &lt;opensuse@dstoecker.de&gt;" date="1562760000">- update to 2.6.0, lots of changes
  See https://freeciv.fandom.com/wiki/NEWS-2.6.0
  Rebase freeciv-appdata-desktop-references.patch
  Cleanup build
  Introduce separate freeciv-lang package</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1585310400">- Update to 2.6.2. New bugfix release.
  See https://freeciv.fandom.com/wiki/NEWS-2.6.2 for the complete
  list of changes.
- Drop fix-qt5-detection.patch. No longer needed.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1591272000">- Drop libggz2-devel BuildRequires: ggz has not been supported
  since freeciv 2.6.0.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1591272001">- Add freeciv-qt-5.15.patch: Fix build with Qt 5.15.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1608638400">- update to 2.6.2.1:
  * Fixed server crash when unit with zero move_rate is transformed
  * Fixed crashes when using Direction objects in lua scripts
  * Fixed crash when chatline text had opening tag without closing tag
  * Fixes to the Qt client
  * Updated translations
  * Fixed Qt-client build against Qt-5.15 (removes freeciv-qt-5.15.patch )
  * Documentation updates</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1612008000">- update to 2.6.3:
  * see http://www.freeciv.org/wiki/NEWS-2.6.3
  * Fixed trouble when a new city is founded to the ruins of a former city,
    and that new city establish a trade route with a player who had seen
    former city, and is unaware that it had been destroyed HRM#871606
  * Fixed a case where shared vision did not completely update
    recipient's map HRM#846106
  * Fixed a bug where one could paradrop to peaceful nation's territory
    after continuing game from an old savegame HRM#879084
  * Fixed a bug causing game sometimes to tell wrong reason of why an
    action failed HRM#879880
  * Cease fire no longer runs out with an already dead player, making his
    former allies to hate the alive party of the treaty HRM#879055
  * Made server not to end in a infinite loop after loading savegame with
    too high phase number. Such a savegame was reported to be created
    after spaceship was launched but game was still continued HRM#815196
  * Unified writing of the city name Washington-on-the-Brazos
    between rulesets, so it doesn't appear multiple times in the same
    game in a bit different form HRM#867817
  * Stealth units are no longer erroneously hidden even from allies
    HRM#764976
  * Placing initial units is now done in shuffled player order HRM#850656
  * Corrupt worker tasks are cleared. Those can originate, e.g.,
    from buggy pre-2.6.2.1 Qt-client, and live in old savegames HRM#901938
  * In a ruleset, such as civ2civ3, where caravans can help building wonder
    in a foreign city, refresh city info of the city owner when one does
    HRM#907977
  * Display of success probabilities for diplomats was off when targeting
    stack of units instead of individual unit HRM#859761
  * Fixed pillaging of extras that are caused by something else than
    player actions. For the fix to work, both server and client must be
    at least version 2.6.3 HRM#861508
  * Civilian unit trying to paradrop to an enemy city dies HRM#870004
  * Prevented dead player from getting techs via Tech_Parasite effect.
    This caused trouble in alien ruleset where Tech_Parasite is granted
    by a tech HRM#873692
  * Improved support of CityTile requirement type HRM#877780
  * Fixed trouble preventing Small Wonders from working as impr_reqs
    for units HRM#884993
  * Corrected success probability shown by action dialog when it depends
    on a special kind of road HRM#897490
  * The included Lua engine has been upgraded from 5.3.5 to 5.3.6. HRM#889425
- drop freeciv-appdata-desktop-references.patch (obsolete)</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1618142400">- Update to 2.6.4:
  * Bugfix release, see https://freeciv.fandom.com/wiki/NEWS-2.6.4</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1626436800">- update to 2.6.5:
  * https://freeciv.fandom.com/wiki/NEWS-2.6.5
  * 2.6.5 is a bugfix release. Notably it fixes regression in 2.6.4 gtk3-client
    that present units in city dialog had no overlays drawn at all.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1639224000">- update to 2.6.6:
  * https://freeciv.fandom.com/wiki/NEWS-2.6.5
  * 2.6.6 is a bugfix release.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1648036800">- update to 3.0.0:
  * This release is a major upgrade which with some changes that
    can support backward compatible rulesets
  * see https://freeciv.fandom.com/wiki/NEWS-3.0.0#WHAT.27S_CHANGED_SINCE_2.6</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1650628800">- update to 3.0.1:
  * 3.0.1 is a generic bugfix release
  * see https://freeciv.fandom.com/wiki/NEWS-3.0.1</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1658145600">- update to 3.0.2:
  * 3.0.2 is a generic bugfix release
  * see https://freeciv.fandom.com/wiki/NEWS-3.0.2</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1660910400">- update to 3.0.3 (bsc#1202548, CVE-2022-6083):
  * 3.0.3 is a bugfix release
  * see https://freeciv.fandom.com/wiki/NEWS-3.0.3</changelog>
</package>
<package pkgid="6c9175c223249ed855087efb242336f1a303eea26f1d1f3591e4e99da54ed1df" name="freeciv-lang" arch="aarch64">
  <version epoch="0" ver="3.0.3" rel="bp154.2.3.1"/>
  <changelog author="astieger@suse.com" date="1464955200">- Freeciv 2.5.4:
  * various fixes and changes for rulesets
  * general bug fixes</changelog>
  <changelog author="astieger@suse.com" date="1469880000">- Freeciv 2.5.5:
  * various fixes and changes for rulesets
  * general bug fixes
  * New 'persistent' metaserver connection mode, where one failure
    to talk to the metaserver does not prevent future attempts.
    Enabled with the '--keep' server option or the
    '/metaconnection persistent' server command.
- for a full list of upstream changes, see
  http://freeciv.wikia.com/wiki/NEWS-2.5.5</changelog>
  <changelog author="mimi.vx@gmail.com" date="1481457600">- Freeciv 2.5.6
  * various fixes and changes for rulesets
  * general fixes
- for a full list of upstream changes see
    http://freeciv.wikia.com/wiki/NEWS-2.5.6</changelog>
  <changelog author="astieger@suse.com" date="1502625600">- Freeciv 2.5.8:
  * Various fixes, including safegame fixes
- for a full list of upstream changes see
    http://freeciv.wikia.com/wiki/NEWS-2.5.7
    http://freeciv.wikia.com/wiki/NEWS-2.5.8</changelog>
  <changelog author="astieger@suse.com" date="1505736000">- Freeciv 2.5.9:
  * Fix regression in 'scorelog' function: if one continues from
    a saved game, any scorelog saved before that point would get
    wiped  rather than appended to
  * minor fixes to the Catalan and Russian localizations</changelog>
  <changelog author="astieger@suse.com" date="1517486400">- Freeciv 2.5.10:
  * fixes for failure and crashes in certain game situations
  * Minor adjustment and fixes to rules, gameplay, AI, Client UI</changelog>
  <changelog author="astieger@suse.com" date="1529064000">- freeciv 2.5.11:
  * Stealing a future technology was accidentally yielding two of
    them
  * Put a message about nuclear attack in a more appropriate
    category
  * Some minor improvements to autogenerated terrain help
  * Fix a crash with a malformed tileset
  * Fix an erroneous diagnostic for a malformed savegame
  * Fix a geographical error in the Cuyavian nation description
  * Fix typo in ruleset help comments
  * Fix some compiler warnings
  * Updated translations</changelog>
  <changelog author="Dirk Stoecker &lt;opensuse@dstoecker.de&gt;" date="1562760000">- update to 2.6.0, lots of changes
  See https://freeciv.fandom.com/wiki/NEWS-2.6.0
  Rebase freeciv-appdata-desktop-references.patch
  Cleanup build
  Introduce separate freeciv-lang package</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1585310400">- Update to 2.6.2. New bugfix release.
  See https://freeciv.fandom.com/wiki/NEWS-2.6.2 for the complete
  list of changes.
- Drop fix-qt5-detection.patch. No longer needed.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1591272000">- Drop libggz2-devel BuildRequires: ggz has not been supported
  since freeciv 2.6.0.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1591272001">- Add freeciv-qt-5.15.patch: Fix build with Qt 5.15.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1608638400">- update to 2.6.2.1:
  * Fixed server crash when unit with zero move_rate is transformed
  * Fixed crashes when using Direction objects in lua scripts
  * Fixed crash when chatline text had opening tag without closing tag
  * Fixes to the Qt client
  * Updated translations
  * Fixed Qt-client build against Qt-5.15 (removes freeciv-qt-5.15.patch )
  * Documentation updates</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1612008000">- update to 2.6.3:
  * see http://www.freeciv.org/wiki/NEWS-2.6.3
  * Fixed trouble when a new city is founded to the ruins of a former city,
    and that new city establish a trade route with a player who had seen
    former city, and is unaware that it had been destroyed HRM#871606
  * Fixed a case where shared vision did not completely update
    recipient's map HRM#846106
  * Fixed a bug where one could paradrop to peaceful nation's territory
    after continuing game from an old savegame HRM#879084
  * Fixed a bug causing game sometimes to tell wrong reason of why an
    action failed HRM#879880
  * Cease fire no longer runs out with an already dead player, making his
    former allies to hate the alive party of the treaty HRM#879055
  * Made server not to end in a infinite loop after loading savegame with
    too high phase number. Such a savegame was reported to be created
    after spaceship was launched but game was still continued HRM#815196
  * Unified writing of the city name Washington-on-the-Brazos
    between rulesets, so it doesn't appear multiple times in the same
    game in a bit different form HRM#867817
  * Stealth units are no longer erroneously hidden even from allies
    HRM#764976
  * Placing initial units is now done in shuffled player order HRM#850656
  * Corrupt worker tasks are cleared. Those can originate, e.g.,
    from buggy pre-2.6.2.1 Qt-client, and live in old savegames HRM#901938
  * In a ruleset, such as civ2civ3, where caravans can help building wonder
    in a foreign city, refresh city info of the city owner when one does
    HRM#907977
  * Display of success probabilities for diplomats was off when targeting
    stack of units instead of individual unit HRM#859761
  * Fixed pillaging of extras that are caused by something else than
    player actions. For the fix to work, both server and client must be
    at least version 2.6.3 HRM#861508
  * Civilian unit trying to paradrop to an enemy city dies HRM#870004
  * Prevented dead player from getting techs via Tech_Parasite effect.
    This caused trouble in alien ruleset where Tech_Parasite is granted
    by a tech HRM#873692
  * Improved support of CityTile requirement type HRM#877780
  * Fixed trouble preventing Small Wonders from working as impr_reqs
    for units HRM#884993
  * Corrected success probability shown by action dialog when it depends
    on a special kind of road HRM#897490
  * The included Lua engine has been upgraded from 5.3.5 to 5.3.6. HRM#889425
- drop freeciv-appdata-desktop-references.patch (obsolete)</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1618142400">- Update to 2.6.4:
  * Bugfix release, see https://freeciv.fandom.com/wiki/NEWS-2.6.4</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1626436800">- update to 2.6.5:
  * https://freeciv.fandom.com/wiki/NEWS-2.6.5
  * 2.6.5 is a bugfix release. Notably it fixes regression in 2.6.4 gtk3-client
    that present units in city dialog had no overlays drawn at all.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1639224000">- update to 2.6.6:
  * https://freeciv.fandom.com/wiki/NEWS-2.6.5
  * 2.6.6 is a bugfix release.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1648036800">- update to 3.0.0:
  * This release is a major upgrade which with some changes that
    can support backward compatible rulesets
  * see https://freeciv.fandom.com/wiki/NEWS-3.0.0#WHAT.27S_CHANGED_SINCE_2.6</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1650628800">- update to 3.0.1:
  * 3.0.1 is a generic bugfix release
  * see https://freeciv.fandom.com/wiki/NEWS-3.0.1</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1658145600">- update to 3.0.2:
  * 3.0.2 is a generic bugfix release
  * see https://freeciv.fandom.com/wiki/NEWS-3.0.2</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1660910400">- update to 3.0.3 (bsc#1202548, CVE-2022-6083):
  * 3.0.3 is a bugfix release
  * see https://freeciv.fandom.com/wiki/NEWS-3.0.3</changelog>
</package>
<package pkgid="8e0cf9ea50847a02b3e4f21172fab801e74720cf8265a590387eb001c1f0223f" name="freeciv-lang" arch="i586">
  <version epoch="0" ver="3.0.3" rel="bp154.2.3.1"/>
  <changelog author="astieger@suse.com" date="1464955200">- Freeciv 2.5.4:
  * various fixes and changes for rulesets
  * general bug fixes</changelog>
  <changelog author="astieger@suse.com" date="1469880000">- Freeciv 2.5.5:
  * various fixes and changes for rulesets
  * general bug fixes
  * New 'persistent' metaserver connection mode, where one failure
    to talk to the metaserver does not prevent future attempts.
    Enabled with the '--keep' server option or the
    '/metaconnection persistent' server command.
- for a full list of upstream changes, see
  http://freeciv.wikia.com/wiki/NEWS-2.5.5</changelog>
  <changelog author="mimi.vx@gmail.com" date="1481457600">- Freeciv 2.5.6
  * various fixes and changes for rulesets
  * general fixes
- for a full list of upstream changes see
    http://freeciv.wikia.com/wiki/NEWS-2.5.6</changelog>
  <changelog author="astieger@suse.com" date="1502625600">- Freeciv 2.5.8:
  * Various fixes, including safegame fixes
- for a full list of upstream changes see
    http://freeciv.wikia.com/wiki/NEWS-2.5.7
    http://freeciv.wikia.com/wiki/NEWS-2.5.8</changelog>
  <changelog author="astieger@suse.com" date="1505736000">- Freeciv 2.5.9:
  * Fix regression in 'scorelog' function: if one continues from
    a saved game, any scorelog saved before that point would get
    wiped  rather than appended to
  * minor fixes to the Catalan and Russian localizations</changelog>
  <changelog author="astieger@suse.com" date="1517486400">- Freeciv 2.5.10:
  * fixes for failure and crashes in certain game situations
  * Minor adjustment and fixes to rules, gameplay, AI, Client UI</changelog>
  <changelog author="astieger@suse.com" date="1529064000">- freeciv 2.5.11:
  * Stealing a future technology was accidentally yielding two of
    them
  * Put a message about nuclear attack in a more appropriate
    category
  * Some minor improvements to autogenerated terrain help
  * Fix a crash with a malformed tileset
  * Fix an erroneous diagnostic for a malformed savegame
  * Fix a geographical error in the Cuyavian nation description
  * Fix typo in ruleset help comments
  * Fix some compiler warnings
  * Updated translations</changelog>
  <changelog author="Dirk Stoecker &lt;opensuse@dstoecker.de&gt;" date="1562760000">- update to 2.6.0, lots of changes
  See https://freeciv.fandom.com/wiki/NEWS-2.6.0
  Rebase freeciv-appdata-desktop-references.patch
  Cleanup build
  Introduce separate freeciv-lang package</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1585310400">- Update to 2.6.2. New bugfix release.
  See https://freeciv.fandom.com/wiki/NEWS-2.6.2 for the complete
  list of changes.
- Drop fix-qt5-detection.patch. No longer needed.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1591272000">- Drop libggz2-devel BuildRequires: ggz has not been supported
  since freeciv 2.6.0.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1591272001">- Add freeciv-qt-5.15.patch: Fix build with Qt 5.15.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1608638400">- update to 2.6.2.1:
  * Fixed server crash when unit with zero move_rate is transformed
  * Fixed crashes when using Direction objects in lua scripts
  * Fixed crash when chatline text had opening tag without closing tag
  * Fixes to the Qt client
  * Updated translations
  * Fixed Qt-client build against Qt-5.15 (removes freeciv-qt-5.15.patch )
  * Documentation updates</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1612008000">- update to 2.6.3:
  * see http://www.freeciv.org/wiki/NEWS-2.6.3
  * Fixed trouble when a new city is founded to the ruins of a former city,
    and that new city establish a trade route with a player who had seen
    former city, and is unaware that it had been destroyed HRM#871606
  * Fixed a case where shared vision did not completely update
    recipient's map HRM#846106
  * Fixed a bug where one could paradrop to peaceful nation's territory
    after continuing game from an old savegame HRM#879084
  * Fixed a bug causing game sometimes to tell wrong reason of why an
    action failed HRM#879880
  * Cease fire no longer runs out with an already dead player, making his
    former allies to hate the alive party of the treaty HRM#879055
  * Made server not to end in a infinite loop after loading savegame with
    too high phase number. Such a savegame was reported to be created
    after spaceship was launched but game was still continued HRM#815196
  * Unified writing of the city name Washington-on-the-Brazos
    between rulesets, so it doesn't appear multiple times in the same
    game in a bit different form HRM#867817
  * Stealth units are no longer erroneously hidden even from allies
    HRM#764976
  * Placing initial units is now done in shuffled player order HRM#850656
  * Corrupt worker tasks are cleared. Those can originate, e.g.,
    from buggy pre-2.6.2.1 Qt-client, and live in old savegames HRM#901938
  * In a ruleset, such as civ2civ3, where caravans can help building wonder
    in a foreign city, refresh city info of the city owner when one does
    HRM#907977
  * Display of success probabilities for diplomats was off when targeting
    stack of units instead of individual unit HRM#859761
  * Fixed pillaging of extras that are caused by something else than
    player actions. For the fix to work, both server and client must be
    at least version 2.6.3 HRM#861508
  * Civilian unit trying to paradrop to an enemy city dies HRM#870004
  * Prevented dead player from getting techs via Tech_Parasite effect.
    This caused trouble in alien ruleset where Tech_Parasite is granted
    by a tech HRM#873692
  * Improved support of CityTile requirement type HRM#877780
  * Fixed trouble preventing Small Wonders from working as impr_reqs
    for units HRM#884993
  * Corrected success probability shown by action dialog when it depends
    on a special kind of road HRM#897490
  * The included Lua engine has been upgraded from 5.3.5 to 5.3.6. HRM#889425
- drop freeciv-appdata-desktop-references.patch (obsolete)</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1618142400">- Update to 2.6.4:
  * Bugfix release, see https://freeciv.fandom.com/wiki/NEWS-2.6.4</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1626436800">- update to 2.6.5:
  * https://freeciv.fandom.com/wiki/NEWS-2.6.5
  * 2.6.5 is a bugfix release. Notably it fixes regression in 2.6.4 gtk3-client
    that present units in city dialog had no overlays drawn at all.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1639224000">- update to 2.6.6:
  * https://freeciv.fandom.com/wiki/NEWS-2.6.5
  * 2.6.6 is a bugfix release.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1648036800">- update to 3.0.0:
  * This release is a major upgrade which with some changes that
    can support backward compatible rulesets
  * see https://freeciv.fandom.com/wiki/NEWS-3.0.0#WHAT.27S_CHANGED_SINCE_2.6</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1650628800">- update to 3.0.1:
  * 3.0.1 is a generic bugfix release
  * see https://freeciv.fandom.com/wiki/NEWS-3.0.1</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1658145600">- update to 3.0.2:
  * 3.0.2 is a generic bugfix release
  * see https://freeciv.fandom.com/wiki/NEWS-3.0.2</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1660910400">- update to 3.0.3 (bsc#1202548, CVE-2022-6083):
  * 3.0.3 is a bugfix release
  * see https://freeciv.fandom.com/wiki/NEWS-3.0.3</changelog>
</package>
<package pkgid="70c39177e6281bc10a22d24572b06ffe3aa2a30065f9947665d99c398108de41" name="freeciv-lang" arch="ppc64le">
  <version epoch="0" ver="3.0.3" rel="bp154.2.3.1"/>
  <changelog author="astieger@suse.com" date="1464955200">- Freeciv 2.5.4:
  * various fixes and changes for rulesets
  * general bug fixes</changelog>
  <changelog author="astieger@suse.com" date="1469880000">- Freeciv 2.5.5:
  * various fixes and changes for rulesets
  * general bug fixes
  * New 'persistent' metaserver connection mode, where one failure
    to talk to the metaserver does not prevent future attempts.
    Enabled with the '--keep' server option or the
    '/metaconnection persistent' server command.
- for a full list of upstream changes, see
  http://freeciv.wikia.com/wiki/NEWS-2.5.5</changelog>
  <changelog author="mimi.vx@gmail.com" date="1481457600">- Freeciv 2.5.6
  * various fixes and changes for rulesets
  * general fixes
- for a full list of upstream changes see
    http://freeciv.wikia.com/wiki/NEWS-2.5.6</changelog>
  <changelog author="astieger@suse.com" date="1502625600">- Freeciv 2.5.8:
  * Various fixes, including safegame fixes
- for a full list of upstream changes see
    http://freeciv.wikia.com/wiki/NEWS-2.5.7
    http://freeciv.wikia.com/wiki/NEWS-2.5.8</changelog>
  <changelog author="astieger@suse.com" date="1505736000">- Freeciv 2.5.9:
  * Fix regression in 'scorelog' function: if one continues from
    a saved game, any scorelog saved before that point would get
    wiped  rather than appended to
  * minor fixes to the Catalan and Russian localizations</changelog>
  <changelog author="astieger@suse.com" date="1517486400">- Freeciv 2.5.10:
  * fixes for failure and crashes in certain game situations
  * Minor adjustment and fixes to rules, gameplay, AI, Client UI</changelog>
  <changelog author="astieger@suse.com" date="1529064000">- freeciv 2.5.11:
  * Stealing a future technology was accidentally yielding two of
    them
  * Put a message about nuclear attack in a more appropriate
    category
  * Some minor improvements to autogenerated terrain help
  * Fix a crash with a malformed tileset
  * Fix an erroneous diagnostic for a malformed savegame
  * Fix a geographical error in the Cuyavian nation description
  * Fix typo in ruleset help comments
  * Fix some compiler warnings
  * Updated translations</changelog>
  <changelog author="Dirk Stoecker &lt;opensuse@dstoecker.de&gt;" date="1562760000">- update to 2.6.0, lots of changes
  See https://freeciv.fandom.com/wiki/NEWS-2.6.0
  Rebase freeciv-appdata-desktop-references.patch
  Cleanup build
  Introduce separate freeciv-lang package</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1585310400">- Update to 2.6.2. New bugfix release.
  See https://freeciv.fandom.com/wiki/NEWS-2.6.2 for the complete
  list of changes.
- Drop fix-qt5-detection.patch. No longer needed.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1591272000">- Drop libggz2-devel BuildRequires: ggz has not been supported
  since freeciv 2.6.0.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1591272001">- Add freeciv-qt-5.15.patch: Fix build with Qt 5.15.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1608638400">- update to 2.6.2.1:
  * Fixed server crash when unit with zero move_rate is transformed
  * Fixed crashes when using Direction objects in lua scripts
  * Fixed crash when chatline text had opening tag without closing tag
  * Fixes to the Qt client
  * Updated translations
  * Fixed Qt-client build against Qt-5.15 (removes freeciv-qt-5.15.patch )
  * Documentation updates</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1612008000">- update to 2.6.3:
  * see http://www.freeciv.org/wiki/NEWS-2.6.3
  * Fixed trouble when a new city is founded to the ruins of a former city,
    and that new city establish a trade route with a player who had seen
    former city, and is unaware that it had been destroyed HRM#871606
  * Fixed a case where shared vision did not completely update
    recipient's map HRM#846106
  * Fixed a bug where one could paradrop to peaceful nation's territory
    after continuing game from an old savegame HRM#879084
  * Fixed a bug causing game sometimes to tell wrong reason of why an
    action failed HRM#879880
  * Cease fire no longer runs out with an already dead player, making his
    former allies to hate the alive party of the treaty HRM#879055
  * Made server not to end in a infinite loop after loading savegame with
    too high phase number. Such a savegame was reported to be created
    after spaceship was launched but game was still continued HRM#815196
  * Unified writing of the city name Washington-on-the-Brazos
    between rulesets, so it doesn't appear multiple times in the same
    game in a bit different form HRM#867817
  * Stealth units are no longer erroneously hidden even from allies
    HRM#764976
  * Placing initial units is now done in shuffled player order HRM#850656
  * Corrupt worker tasks are cleared. Those can originate, e.g.,
    from buggy pre-2.6.2.1 Qt-client, and live in old savegames HRM#901938
  * In a ruleset, such as civ2civ3, where caravans can help building wonder
    in a foreign city, refresh city info of the city owner when one does
    HRM#907977
  * Display of success probabilities for diplomats was off when targeting
    stack of units instead of individual unit HRM#859761
  * Fixed pillaging of extras that are caused by something else than
    player actions. For the fix to work, both server and client must be
    at least version 2.6.3 HRM#861508
  * Civilian unit trying to paradrop to an enemy city dies HRM#870004
  * Prevented dead player from getting techs via Tech_Parasite effect.
    This caused trouble in alien ruleset where Tech_Parasite is granted
    by a tech HRM#873692
  * Improved support of CityTile requirement type HRM#877780
  * Fixed trouble preventing Small Wonders from working as impr_reqs
    for units HRM#884993
  * Corrected success probability shown by action dialog when it depends
    on a special kind of road HRM#897490
  * The included Lua engine has been upgraded from 5.3.5 to 5.3.6. HRM#889425
- drop freeciv-appdata-desktop-references.patch (obsolete)</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1618142400">- Update to 2.6.4:
  * Bugfix release, see https://freeciv.fandom.com/wiki/NEWS-2.6.4</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1626436800">- update to 2.6.5:
  * https://freeciv.fandom.com/wiki/NEWS-2.6.5
  * 2.6.5 is a bugfix release. Notably it fixes regression in 2.6.4 gtk3-client
    that present units in city dialog had no overlays drawn at all.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1639224000">- update to 2.6.6:
  * https://freeciv.fandom.com/wiki/NEWS-2.6.5
  * 2.6.6 is a bugfix release.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1648036800">- update to 3.0.0:
  * This release is a major upgrade which with some changes that
    can support backward compatible rulesets
  * see https://freeciv.fandom.com/wiki/NEWS-3.0.0#WHAT.27S_CHANGED_SINCE_2.6</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1650628800">- update to 3.0.1:
  * 3.0.1 is a generic bugfix release
  * see https://freeciv.fandom.com/wiki/NEWS-3.0.1</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1658145600">- update to 3.0.2:
  * 3.0.2 is a generic bugfix release
  * see https://freeciv.fandom.com/wiki/NEWS-3.0.2</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1660910400">- update to 3.0.3 (bsc#1202548, CVE-2022-6083):
  * 3.0.3 is a bugfix release
  * see https://freeciv.fandom.com/wiki/NEWS-3.0.3</changelog>
</package>
<package pkgid="55cbbc6e48d209e35b39f39a30a24dad3853fbf813a60ddb331b865bdb776f63" name="freeciv-lang" arch="s390x">
  <version epoch="0" ver="3.0.3" rel="bp154.2.3.1"/>
  <changelog author="astieger@suse.com" date="1464955200">- Freeciv 2.5.4:
  * various fixes and changes for rulesets
  * general bug fixes</changelog>
  <changelog author="astieger@suse.com" date="1469880000">- Freeciv 2.5.5:
  * various fixes and changes for rulesets
  * general bug fixes
  * New 'persistent' metaserver connection mode, where one failure
    to talk to the metaserver does not prevent future attempts.
    Enabled with the '--keep' server option or the
    '/metaconnection persistent' server command.
- for a full list of upstream changes, see
  http://freeciv.wikia.com/wiki/NEWS-2.5.5</changelog>
  <changelog author="mimi.vx@gmail.com" date="1481457600">- Freeciv 2.5.6
  * various fixes and changes for rulesets
  * general fixes
- for a full list of upstream changes see
    http://freeciv.wikia.com/wiki/NEWS-2.5.6</changelog>
  <changelog author="astieger@suse.com" date="1502625600">- Freeciv 2.5.8:
  * Various fixes, including safegame fixes
- for a full list of upstream changes see
    http://freeciv.wikia.com/wiki/NEWS-2.5.7
    http://freeciv.wikia.com/wiki/NEWS-2.5.8</changelog>
  <changelog author="astieger@suse.com" date="1505736000">- Freeciv 2.5.9:
  * Fix regression in 'scorelog' function: if one continues from
    a saved game, any scorelog saved before that point would get
    wiped  rather than appended to
  * minor fixes to the Catalan and Russian localizations</changelog>
  <changelog author="astieger@suse.com" date="1517486400">- Freeciv 2.5.10:
  * fixes for failure and crashes in certain game situations
  * Minor adjustment and fixes to rules, gameplay, AI, Client UI</changelog>
  <changelog author="astieger@suse.com" date="1529064000">- freeciv 2.5.11:
  * Stealing a future technology was accidentally yielding two of
    them
  * Put a message about nuclear attack in a more appropriate
    category
  * Some minor improvements to autogenerated terrain help
  * Fix a crash with a malformed tileset
  * Fix an erroneous diagnostic for a malformed savegame
  * Fix a geographical error in the Cuyavian nation description
  * Fix typo in ruleset help comments
  * Fix some compiler warnings
  * Updated translations</changelog>
  <changelog author="Dirk Stoecker &lt;opensuse@dstoecker.de&gt;" date="1562760000">- update to 2.6.0, lots of changes
  See https://freeciv.fandom.com/wiki/NEWS-2.6.0
  Rebase freeciv-appdata-desktop-references.patch
  Cleanup build
  Introduce separate freeciv-lang package</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1585310400">- Update to 2.6.2. New bugfix release.
  See https://freeciv.fandom.com/wiki/NEWS-2.6.2 for the complete
  list of changes.
- Drop fix-qt5-detection.patch. No longer needed.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1591272000">- Drop libggz2-devel BuildRequires: ggz has not been supported
  since freeciv 2.6.0.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1591272001">- Add freeciv-qt-5.15.patch: Fix build with Qt 5.15.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1608638400">- update to 2.6.2.1:
  * Fixed server crash when unit with zero move_rate is transformed
  * Fixed crashes when using Direction objects in lua scripts
  * Fixed crash when chatline text had opening tag without closing tag
  * Fixes to the Qt client
  * Updated translations
  * Fixed Qt-client build against Qt-5.15 (removes freeciv-qt-5.15.patch )
  * Documentation updates</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1612008000">- update to 2.6.3:
  * see http://www.freeciv.org/wiki/NEWS-2.6.3
  * Fixed trouble when a new city is founded to the ruins of a former city,
    and that new city establish a trade route with a player who had seen
    former city, and is unaware that it had been destroyed HRM#871606
  * Fixed a case where shared vision did not completely update
    recipient's map HRM#846106
  * Fixed a bug where one could paradrop to peaceful nation's territory
    after continuing game from an old savegame HRM#879084
  * Fixed a bug causing game sometimes to tell wrong reason of why an
    action failed HRM#879880
  * Cease fire no longer runs out with an already dead player, making his
    former allies to hate the alive party of the treaty HRM#879055
  * Made server not to end in a infinite loop after loading savegame with
    too high phase number. Such a savegame was reported to be created
    after spaceship was launched but game was still continued HRM#815196
  * Unified writing of the city name Washington-on-the-Brazos
    between rulesets, so it doesn't appear multiple times in the same
    game in a bit different form HRM#867817
  * Stealth units are no longer erroneously hidden even from allies
    HRM#764976
  * Placing initial units is now done in shuffled player order HRM#850656
  * Corrupt worker tasks are cleared. Those can originate, e.g.,
    from buggy pre-2.6.2.1 Qt-client, and live in old savegames HRM#901938
  * In a ruleset, such as civ2civ3, where caravans can help building wonder
    in a foreign city, refresh city info of the city owner when one does
    HRM#907977
  * Display of success probabilities for diplomats was off when targeting
    stack of units instead of individual unit HRM#859761
  * Fixed pillaging of extras that are caused by something else than
    player actions. For the fix to work, both server and client must be
    at least version 2.6.3 HRM#861508
  * Civilian unit trying to paradrop to an enemy city dies HRM#870004
  * Prevented dead player from getting techs via Tech_Parasite effect.
    This caused trouble in alien ruleset where Tech_Parasite is granted
    by a tech HRM#873692
  * Improved support of CityTile requirement type HRM#877780
  * Fixed trouble preventing Small Wonders from working as impr_reqs
    for units HRM#884993
  * Corrected success probability shown by action dialog when it depends
    on a special kind of road HRM#897490
  * The included Lua engine has been upgraded from 5.3.5 to 5.3.6. HRM#889425
- drop freeciv-appdata-desktop-references.patch (obsolete)</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1618142400">- Update to 2.6.4:
  * Bugfix release, see https://freeciv.fandom.com/wiki/NEWS-2.6.4</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1626436800">- update to 2.6.5:
  * https://freeciv.fandom.com/wiki/NEWS-2.6.5
  * 2.6.5 is a bugfix release. Notably it fixes regression in 2.6.4 gtk3-client
    that present units in city dialog had no overlays drawn at all.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1639224000">- update to 2.6.6:
  * https://freeciv.fandom.com/wiki/NEWS-2.6.5
  * 2.6.6 is a bugfix release.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1648036800">- update to 3.0.0:
  * This release is a major upgrade which with some changes that
    can support backward compatible rulesets
  * see https://freeciv.fandom.com/wiki/NEWS-3.0.0#WHAT.27S_CHANGED_SINCE_2.6</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1650628800">- update to 3.0.1:
  * 3.0.1 is a generic bugfix release
  * see https://freeciv.fandom.com/wiki/NEWS-3.0.1</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1658145600">- update to 3.0.2:
  * 3.0.2 is a generic bugfix release
  * see https://freeciv.fandom.com/wiki/NEWS-3.0.2</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1660910400">- update to 3.0.3 (bsc#1202548, CVE-2022-6083):
  * 3.0.3 is a bugfix release
  * see https://freeciv.fandom.com/wiki/NEWS-3.0.3</changelog>
</package>
<package pkgid="606dff93439f214524035f19c1b0ad8745d4d5615e222027ff7dadb64bb16ed0" name="freeciv-lang" arch="x86_64">
  <version epoch="0" ver="3.0.3" rel="bp154.2.3.1"/>
  <changelog author="astieger@suse.com" date="1464955200">- Freeciv 2.5.4:
  * various fixes and changes for rulesets
  * general bug fixes</changelog>
  <changelog author="astieger@suse.com" date="1469880000">- Freeciv 2.5.5:
  * various fixes and changes for rulesets
  * general bug fixes
  * New 'persistent' metaserver connection mode, where one failure
    to talk to the metaserver does not prevent future attempts.
    Enabled with the '--keep' server option or the
    '/metaconnection persistent' server command.
- for a full list of upstream changes, see
  http://freeciv.wikia.com/wiki/NEWS-2.5.5</changelog>
  <changelog author="mimi.vx@gmail.com" date="1481457600">- Freeciv 2.5.6
  * various fixes and changes for rulesets
  * general fixes
- for a full list of upstream changes see
    http://freeciv.wikia.com/wiki/NEWS-2.5.6</changelog>
  <changelog author="astieger@suse.com" date="1502625600">- Freeciv 2.5.8:
  * Various fixes, including safegame fixes
- for a full list of upstream changes see
    http://freeciv.wikia.com/wiki/NEWS-2.5.7
    http://freeciv.wikia.com/wiki/NEWS-2.5.8</changelog>
  <changelog author="astieger@suse.com" date="1505736000">- Freeciv 2.5.9:
  * Fix regression in 'scorelog' function: if one continues from
    a saved game, any scorelog saved before that point would get
    wiped  rather than appended to
  * minor fixes to the Catalan and Russian localizations</changelog>
  <changelog author="astieger@suse.com" date="1517486400">- Freeciv 2.5.10:
  * fixes for failure and crashes in certain game situations
  * Minor adjustment and fixes to rules, gameplay, AI, Client UI</changelog>
  <changelog author="astieger@suse.com" date="1529064000">- freeciv 2.5.11:
  * Stealing a future technology was accidentally yielding two of
    them
  * Put a message about nuclear attack in a more appropriate
    category
  * Some minor improvements to autogenerated terrain help
  * Fix a crash with a malformed tileset
  * Fix an erroneous diagnostic for a malformed savegame
  * Fix a geographical error in the Cuyavian nation description
  * Fix typo in ruleset help comments
  * Fix some compiler warnings
  * Updated translations</changelog>
  <changelog author="Dirk Stoecker &lt;opensuse@dstoecker.de&gt;" date="1562760000">- update to 2.6.0, lots of changes
  See https://freeciv.fandom.com/wiki/NEWS-2.6.0
  Rebase freeciv-appdata-desktop-references.patch
  Cleanup build
  Introduce separate freeciv-lang package</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1585310400">- Update to 2.6.2. New bugfix release.
  See https://freeciv.fandom.com/wiki/NEWS-2.6.2 for the complete
  list of changes.
- Drop fix-qt5-detection.patch. No longer needed.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1591272000">- Drop libggz2-devel BuildRequires: ggz has not been supported
  since freeciv 2.6.0.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1591272001">- Add freeciv-qt-5.15.patch: Fix build with Qt 5.15.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1608638400">- update to 2.6.2.1:
  * Fixed server crash when unit with zero move_rate is transformed
  * Fixed crashes when using Direction objects in lua scripts
  * Fixed crash when chatline text had opening tag without closing tag
  * Fixes to the Qt client
  * Updated translations
  * Fixed Qt-client build against Qt-5.15 (removes freeciv-qt-5.15.patch )
  * Documentation updates</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1612008000">- update to 2.6.3:
  * see http://www.freeciv.org/wiki/NEWS-2.6.3
  * Fixed trouble when a new city is founded to the ruins of a former city,
    and that new city establish a trade route with a player who had seen
    former city, and is unaware that it had been destroyed HRM#871606
  * Fixed a case where shared vision did not completely update
    recipient's map HRM#846106
  * Fixed a bug where one could paradrop to peaceful nation's territory
    after continuing game from an old savegame HRM#879084
  * Fixed a bug causing game sometimes to tell wrong reason of why an
    action failed HRM#879880
  * Cease fire no longer runs out with an already dead player, making his
    former allies to hate the alive party of the treaty HRM#879055
  * Made server not to end in a infinite loop after loading savegame with
    too high phase number. Such a savegame was reported to be created
    after spaceship was launched but game was still continued HRM#815196
  * Unified writing of the city name Washington-on-the-Brazos
    between rulesets, so it doesn't appear multiple times in the same
    game in a bit different form HRM#867817
  * Stealth units are no longer erroneously hidden even from allies
    HRM#764976
  * Placing initial units is now done in shuffled player order HRM#850656
  * Corrupt worker tasks are cleared. Those can originate, e.g.,
    from buggy pre-2.6.2.1 Qt-client, and live in old savegames HRM#901938
  * In a ruleset, such as civ2civ3, where caravans can help building wonder
    in a foreign city, refresh city info of the city owner when one does
    HRM#907977
  * Display of success probabilities for diplomats was off when targeting
    stack of units instead of individual unit HRM#859761
  * Fixed pillaging of extras that are caused by something else than
    player actions. For the fix to work, both server and client must be
    at least version 2.6.3 HRM#861508
  * Civilian unit trying to paradrop to an enemy city dies HRM#870004
  * Prevented dead player from getting techs via Tech_Parasite effect.
    This caused trouble in alien ruleset where Tech_Parasite is granted
    by a tech HRM#873692
  * Improved support of CityTile requirement type HRM#877780
  * Fixed trouble preventing Small Wonders from working as impr_reqs
    for units HRM#884993
  * Corrected success probability shown by action dialog when it depends
    on a special kind of road HRM#897490
  * The included Lua engine has been upgraded from 5.3.5 to 5.3.6. HRM#889425
- drop freeciv-appdata-desktop-references.patch (obsolete)</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1618142400">- Update to 2.6.4:
  * Bugfix release, see https://freeciv.fandom.com/wiki/NEWS-2.6.4</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1626436800">- update to 2.6.5:
  * https://freeciv.fandom.com/wiki/NEWS-2.6.5
  * 2.6.5 is a bugfix release. Notably it fixes regression in 2.6.4 gtk3-client
    that present units in city dialog had no overlays drawn at all.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1639224000">- update to 2.6.6:
  * https://freeciv.fandom.com/wiki/NEWS-2.6.5
  * 2.6.6 is a bugfix release.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1648036800">- update to 3.0.0:
  * This release is a major upgrade which with some changes that
    can support backward compatible rulesets
  * see https://freeciv.fandom.com/wiki/NEWS-3.0.0#WHAT.27S_CHANGED_SINCE_2.6</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1650628800">- update to 3.0.1:
  * 3.0.1 is a generic bugfix release
  * see https://freeciv.fandom.com/wiki/NEWS-3.0.1</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1658145600">- update to 3.0.2:
  * 3.0.2 is a generic bugfix release
  * see https://freeciv.fandom.com/wiki/NEWS-3.0.2</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1660910400">- update to 3.0.3 (bsc#1202548, CVE-2022-6083):
  * 3.0.3 is a bugfix release
  * see https://freeciv.fandom.com/wiki/NEWS-3.0.3</changelog>
</package>
<package pkgid="f2d6f1df4b48c97e03ff614bbbe829beda883bea7b918791e5193fb6a51887c8" name="freeciv-qt" arch="aarch64">
  <version epoch="0" ver="3.0.3" rel="bp154.2.3.1"/>
  <changelog author="astieger@suse.com" date="1464955200">- Freeciv 2.5.4:
  * various fixes and changes for rulesets
  * general bug fixes</changelog>
  <changelog author="astieger@suse.com" date="1469880000">- Freeciv 2.5.5:
  * various fixes and changes for rulesets
  * general bug fixes
  * New 'persistent' metaserver connection mode, where one failure
    to talk to the metaserver does not prevent future attempts.
    Enabled with the '--keep' server option or the
    '/metaconnection persistent' server command.
- for a full list of upstream changes, see
  http://freeciv.wikia.com/wiki/NEWS-2.5.5</changelog>
  <changelog author="mimi.vx@gmail.com" date="1481457600">- Freeciv 2.5.6
  * various fixes and changes for rulesets
  * general fixes
- for a full list of upstream changes see
    http://freeciv.wikia.com/wiki/NEWS-2.5.6</changelog>
  <changelog author="astieger@suse.com" date="1502625600">- Freeciv 2.5.8:
  * Various fixes, including safegame fixes
- for a full list of upstream changes see
    http://freeciv.wikia.com/wiki/NEWS-2.5.7
    http://freeciv.wikia.com/wiki/NEWS-2.5.8</changelog>
  <changelog author="astieger@suse.com" date="1505736000">- Freeciv 2.5.9:
  * Fix regression in 'scorelog' function: if one continues from
    a saved game, any scorelog saved before that point would get
    wiped  rather than appended to
  * minor fixes to the Catalan and Russian localizations</changelog>
  <changelog author="astieger@suse.com" date="1517486400">- Freeciv 2.5.10:
  * fixes for failure and crashes in certain game situations
  * Minor adjustment and fixes to rules, gameplay, AI, Client UI</changelog>
  <changelog author="astieger@suse.com" date="1529064000">- freeciv 2.5.11:
  * Stealing a future technology was accidentally yielding two of
    them
  * Put a message about nuclear attack in a more appropriate
    category
  * Some minor improvements to autogenerated terrain help
  * Fix a crash with a malformed tileset
  * Fix an erroneous diagnostic for a malformed savegame
  * Fix a geographical error in the Cuyavian nation description
  * Fix typo in ruleset help comments
  * Fix some compiler warnings
  * Updated translations</changelog>
  <changelog author="Dirk Stoecker &lt;opensuse@dstoecker.de&gt;" date="1562760000">- update to 2.6.0, lots of changes
  See https://freeciv.fandom.com/wiki/NEWS-2.6.0
  Rebase freeciv-appdata-desktop-references.patch
  Cleanup build
  Introduce separate freeciv-lang package</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1585310400">- Update to 2.6.2. New bugfix release.
  See https://freeciv.fandom.com/wiki/NEWS-2.6.2 for the complete
  list of changes.
- Drop fix-qt5-detection.patch. No longer needed.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1591272000">- Drop libggz2-devel BuildRequires: ggz has not been supported
  since freeciv 2.6.0.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1591272001">- Add freeciv-qt-5.15.patch: Fix build with Qt 5.15.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1608638400">- update to 2.6.2.1:
  * Fixed server crash when unit with zero move_rate is transformed
  * Fixed crashes when using Direction objects in lua scripts
  * Fixed crash when chatline text had opening tag without closing tag
  * Fixes to the Qt client
  * Updated translations
  * Fixed Qt-client build against Qt-5.15 (removes freeciv-qt-5.15.patch )
  * Documentation updates</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1612008000">- update to 2.6.3:
  * see http://www.freeciv.org/wiki/NEWS-2.6.3
  * Fixed trouble when a new city is founded to the ruins of a former city,
    and that new city establish a trade route with a player who had seen
    former city, and is unaware that it had been destroyed HRM#871606
  * Fixed a case where shared vision did not completely update
    recipient's map HRM#846106
  * Fixed a bug where one could paradrop to peaceful nation's territory
    after continuing game from an old savegame HRM#879084
  * Fixed a bug causing game sometimes to tell wrong reason of why an
    action failed HRM#879880
  * Cease fire no longer runs out with an already dead player, making his
    former allies to hate the alive party of the treaty HRM#879055
  * Made server not to end in a infinite loop after loading savegame with
    too high phase number. Such a savegame was reported to be created
    after spaceship was launched but game was still continued HRM#815196
  * Unified writing of the city name Washington-on-the-Brazos
    between rulesets, so it doesn't appear multiple times in the same
    game in a bit different form HRM#867817
  * Stealth units are no longer erroneously hidden even from allies
    HRM#764976
  * Placing initial units is now done in shuffled player order HRM#850656
  * Corrupt worker tasks are cleared. Those can originate, e.g.,
    from buggy pre-2.6.2.1 Qt-client, and live in old savegames HRM#901938
  * In a ruleset, such as civ2civ3, where caravans can help building wonder
    in a foreign city, refresh city info of the city owner when one does
    HRM#907977
  * Display of success probabilities for diplomats was off when targeting
    stack of units instead of individual unit HRM#859761
  * Fixed pillaging of extras that are caused by something else than
    player actions. For the fix to work, both server and client must be
    at least version 2.6.3 HRM#861508
  * Civilian unit trying to paradrop to an enemy city dies HRM#870004
  * Prevented dead player from getting techs via Tech_Parasite effect.
    This caused trouble in alien ruleset where Tech_Parasite is granted
    by a tech HRM#873692
  * Improved support of CityTile requirement type HRM#877780
  * Fixed trouble preventing Small Wonders from working as impr_reqs
    for units HRM#884993
  * Corrected success probability shown by action dialog when it depends
    on a special kind of road HRM#897490
  * The included Lua engine has been upgraded from 5.3.5 to 5.3.6. HRM#889425
- drop freeciv-appdata-desktop-references.patch (obsolete)</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1618142400">- Update to 2.6.4:
  * Bugfix release, see https://freeciv.fandom.com/wiki/NEWS-2.6.4</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1626436800">- update to 2.6.5:
  * https://freeciv.fandom.com/wiki/NEWS-2.6.5
  * 2.6.5 is a bugfix release. Notably it fixes regression in 2.6.4 gtk3-client
    that present units in city dialog had no overlays drawn at all.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1639224000">- update to 2.6.6:
  * https://freeciv.fandom.com/wiki/NEWS-2.6.5
  * 2.6.6 is a bugfix release.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1648036800">- update to 3.0.0:
  * This release is a major upgrade which with some changes that
    can support backward compatible rulesets
  * see https://freeciv.fandom.com/wiki/NEWS-3.0.0#WHAT.27S_CHANGED_SINCE_2.6</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1650628800">- update to 3.0.1:
  * 3.0.1 is a generic bugfix release
  * see https://freeciv.fandom.com/wiki/NEWS-3.0.1</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1658145600">- update to 3.0.2:
  * 3.0.2 is a generic bugfix release
  * see https://freeciv.fandom.com/wiki/NEWS-3.0.2</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1660910400">- update to 3.0.3 (bsc#1202548, CVE-2022-6083):
  * 3.0.3 is a bugfix release
  * see https://freeciv.fandom.com/wiki/NEWS-3.0.3</changelog>
</package>
<package pkgid="81ace8812ddb279627056653918eac9030b2b6b907b51df4ebd6d7f2ea5b41ca" name="freeciv-qt" arch="i586">
  <version epoch="0" ver="3.0.3" rel="bp154.2.3.1"/>
  <changelog author="astieger@suse.com" date="1464955200">- Freeciv 2.5.4:
  * various fixes and changes for rulesets
  * general bug fixes</changelog>
  <changelog author="astieger@suse.com" date="1469880000">- Freeciv 2.5.5:
  * various fixes and changes for rulesets
  * general bug fixes
  * New 'persistent' metaserver connection mode, where one failure
    to talk to the metaserver does not prevent future attempts.
    Enabled with the '--keep' server option or the
    '/metaconnection persistent' server command.
- for a full list of upstream changes, see
  http://freeciv.wikia.com/wiki/NEWS-2.5.5</changelog>
  <changelog author="mimi.vx@gmail.com" date="1481457600">- Freeciv 2.5.6
  * various fixes and changes for rulesets
  * general fixes
- for a full list of upstream changes see
    http://freeciv.wikia.com/wiki/NEWS-2.5.6</changelog>
  <changelog author="astieger@suse.com" date="1502625600">- Freeciv 2.5.8:
  * Various fixes, including safegame fixes
- for a full list of upstream changes see
    http://freeciv.wikia.com/wiki/NEWS-2.5.7
    http://freeciv.wikia.com/wiki/NEWS-2.5.8</changelog>
  <changelog author="astieger@suse.com" date="1505736000">- Freeciv 2.5.9:
  * Fix regression in 'scorelog' function: if one continues from
    a saved game, any scorelog saved before that point would get
    wiped  rather than appended to
  * minor fixes to the Catalan and Russian localizations</changelog>
  <changelog author="astieger@suse.com" date="1517486400">- Freeciv 2.5.10:
  * fixes for failure and crashes in certain game situations
  * Minor adjustment and fixes to rules, gameplay, AI, Client UI</changelog>
  <changelog author="astieger@suse.com" date="1529064000">- freeciv 2.5.11:
  * Stealing a future technology was accidentally yielding two of
    them
  * Put a message about nuclear attack in a more appropriate
    category
  * Some minor improvements to autogenerated terrain help
  * Fix a crash with a malformed tileset
  * Fix an erroneous diagnostic for a malformed savegame
  * Fix a geographical error in the Cuyavian nation description
  * Fix typo in ruleset help comments
  * Fix some compiler warnings
  * Updated translations</changelog>
  <changelog author="Dirk Stoecker &lt;opensuse@dstoecker.de&gt;" date="1562760000">- update to 2.6.0, lots of changes
  See https://freeciv.fandom.com/wiki/NEWS-2.6.0
  Rebase freeciv-appdata-desktop-references.patch
  Cleanup build
  Introduce separate freeciv-lang package</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1585310400">- Update to 2.6.2. New bugfix release.
  See https://freeciv.fandom.com/wiki/NEWS-2.6.2 for the complete
  list of changes.
- Drop fix-qt5-detection.patch. No longer needed.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1591272000">- Drop libggz2-devel BuildRequires: ggz has not been supported
  since freeciv 2.6.0.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1591272001">- Add freeciv-qt-5.15.patch: Fix build with Qt 5.15.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1608638400">- update to 2.6.2.1:
  * Fixed server crash when unit with zero move_rate is transformed
  * Fixed crashes when using Direction objects in lua scripts
  * Fixed crash when chatline text had opening tag without closing tag
  * Fixes to the Qt client
  * Updated translations
  * Fixed Qt-client build against Qt-5.15 (removes freeciv-qt-5.15.patch )
  * Documentation updates</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1612008000">- update to 2.6.3:
  * see http://www.freeciv.org/wiki/NEWS-2.6.3
  * Fixed trouble when a new city is founded to the ruins of a former city,
    and that new city establish a trade route with a player who had seen
    former city, and is unaware that it had been destroyed HRM#871606
  * Fixed a case where shared vision did not completely update
    recipient's map HRM#846106
  * Fixed a bug where one could paradrop to peaceful nation's territory
    after continuing game from an old savegame HRM#879084
  * Fixed a bug causing game sometimes to tell wrong reason of why an
    action failed HRM#879880
  * Cease fire no longer runs out with an already dead player, making his
    former allies to hate the alive party of the treaty HRM#879055
  * Made server not to end in a infinite loop after loading savegame with
    too high phase number. Such a savegame was reported to be created
    after spaceship was launched but game was still continued HRM#815196
  * Unified writing of the city name Washington-on-the-Brazos
    between rulesets, so it doesn't appear multiple times in the same
    game in a bit different form HRM#867817
  * Stealth units are no longer erroneously hidden even from allies
    HRM#764976
  * Placing initial units is now done in shuffled player order HRM#850656
  * Corrupt worker tasks are cleared. Those can originate, e.g.,
    from buggy pre-2.6.2.1 Qt-client, and live in old savegames HRM#901938
  * In a ruleset, such as civ2civ3, where caravans can help building wonder
    in a foreign city, refresh city info of the city owner when one does
    HRM#907977
  * Display of success probabilities for diplomats was off when targeting
    stack of units instead of individual unit HRM#859761
  * Fixed pillaging of extras that are caused by something else than
    player actions. For the fix to work, both server and client must be
    at least version 2.6.3 HRM#861508
  * Civilian unit trying to paradrop to an enemy city dies HRM#870004
  * Prevented dead player from getting techs via Tech_Parasite effect.
    This caused trouble in alien ruleset where Tech_Parasite is granted
    by a tech HRM#873692
  * Improved support of CityTile requirement type HRM#877780
  * Fixed trouble preventing Small Wonders from working as impr_reqs
    for units HRM#884993
  * Corrected success probability shown by action dialog when it depends
    on a special kind of road HRM#897490
  * The included Lua engine has been upgraded from 5.3.5 to 5.3.6. HRM#889425
- drop freeciv-appdata-desktop-references.patch (obsolete)</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1618142400">- Update to 2.6.4:
  * Bugfix release, see https://freeciv.fandom.com/wiki/NEWS-2.6.4</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1626436800">- update to 2.6.5:
  * https://freeciv.fandom.com/wiki/NEWS-2.6.5
  * 2.6.5 is a bugfix release. Notably it fixes regression in 2.6.4 gtk3-client
    that present units in city dialog had no overlays drawn at all.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1639224000">- update to 2.6.6:
  * https://freeciv.fandom.com/wiki/NEWS-2.6.5
  * 2.6.6 is a bugfix release.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1648036800">- update to 3.0.0:
  * This release is a major upgrade which with some changes that
    can support backward compatible rulesets
  * see https://freeciv.fandom.com/wiki/NEWS-3.0.0#WHAT.27S_CHANGED_SINCE_2.6</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1650628800">- update to 3.0.1:
  * 3.0.1 is a generic bugfix release
  * see https://freeciv.fandom.com/wiki/NEWS-3.0.1</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1658145600">- update to 3.0.2:
  * 3.0.2 is a generic bugfix release
  * see https://freeciv.fandom.com/wiki/NEWS-3.0.2</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1660910400">- update to 3.0.3 (bsc#1202548, CVE-2022-6083):
  * 3.0.3 is a bugfix release
  * see https://freeciv.fandom.com/wiki/NEWS-3.0.3</changelog>
</package>
<package pkgid="fb63eb48f6ca63ef1692f6a24fac6a8c0f0d8ccadd425f7a3abd305221240f73" name="freeciv-qt" arch="ppc64le">
  <version epoch="0" ver="3.0.3" rel="bp154.2.3.1"/>
  <changelog author="astieger@suse.com" date="1464955200">- Freeciv 2.5.4:
  * various fixes and changes for rulesets
  * general bug fixes</changelog>
  <changelog author="astieger@suse.com" date="1469880000">- Freeciv 2.5.5:
  * various fixes and changes for rulesets
  * general bug fixes
  * New 'persistent' metaserver connection mode, where one failure
    to talk to the metaserver does not prevent future attempts.
    Enabled with the '--keep' server option or the
    '/metaconnection persistent' server command.
- for a full list of upstream changes, see
  http://freeciv.wikia.com/wiki/NEWS-2.5.5</changelog>
  <changelog author="mimi.vx@gmail.com" date="1481457600">- Freeciv 2.5.6
  * various fixes and changes for rulesets
  * general fixes
- for a full list of upstream changes see
    http://freeciv.wikia.com/wiki/NEWS-2.5.6</changelog>
  <changelog author="astieger@suse.com" date="1502625600">- Freeciv 2.5.8:
  * Various fixes, including safegame fixes
- for a full list of upstream changes see
    http://freeciv.wikia.com/wiki/NEWS-2.5.7
    http://freeciv.wikia.com/wiki/NEWS-2.5.8</changelog>
  <changelog author="astieger@suse.com" date="1505736000">- Freeciv 2.5.9:
  * Fix regression in 'scorelog' function: if one continues from
    a saved game, any scorelog saved before that point would get
    wiped  rather than appended to
  * minor fixes to the Catalan and Russian localizations</changelog>
  <changelog author="astieger@suse.com" date="1517486400">- Freeciv 2.5.10:
  * fixes for failure and crashes in certain game situations
  * Minor adjustment and fixes to rules, gameplay, AI, Client UI</changelog>
  <changelog author="astieger@suse.com" date="1529064000">- freeciv 2.5.11:
  * Stealing a future technology was accidentally yielding two of
    them
  * Put a message about nuclear attack in a more appropriate
    category
  * Some minor improvements to autogenerated terrain help
  * Fix a crash with a malformed tileset
  * Fix an erroneous diagnostic for a malformed savegame
  * Fix a geographical error in the Cuyavian nation description
  * Fix typo in ruleset help comments
  * Fix some compiler warnings
  * Updated translations</changelog>
  <changelog author="Dirk Stoecker &lt;opensuse@dstoecker.de&gt;" date="1562760000">- update to 2.6.0, lots of changes
  See https://freeciv.fandom.com/wiki/NEWS-2.6.0
  Rebase freeciv-appdata-desktop-references.patch
  Cleanup build
  Introduce separate freeciv-lang package</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1585310400">- Update to 2.6.2. New bugfix release.
  See https://freeciv.fandom.com/wiki/NEWS-2.6.2 for the complete
  list of changes.
- Drop fix-qt5-detection.patch. No longer needed.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1591272000">- Drop libggz2-devel BuildRequires: ggz has not been supported
  since freeciv 2.6.0.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1591272001">- Add freeciv-qt-5.15.patch: Fix build with Qt 5.15.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1608638400">- update to 2.6.2.1:
  * Fixed server crash when unit with zero move_rate is transformed
  * Fixed crashes when using Direction objects in lua scripts
  * Fixed crash when chatline text had opening tag without closing tag
  * Fixes to the Qt client
  * Updated translations
  * Fixed Qt-client build against Qt-5.15 (removes freeciv-qt-5.15.patch )
  * Documentation updates</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1612008000">- update to 2.6.3:
  * see http://www.freeciv.org/wiki/NEWS-2.6.3
  * Fixed trouble when a new city is founded to the ruins of a former city,
    and that new city establish a trade route with a player who had seen
    former city, and is unaware that it had been destroyed HRM#871606
  * Fixed a case where shared vision did not completely update
    recipient's map HRM#846106
  * Fixed a bug where one could paradrop to peaceful nation's territory
    after continuing game from an old savegame HRM#879084
  * Fixed a bug causing game sometimes to tell wrong reason of why an
    action failed HRM#879880
  * Cease fire no longer runs out with an already dead player, making his
    former allies to hate the alive party of the treaty HRM#879055
  * Made server not to end in a infinite loop after loading savegame with
    too high phase number. Such a savegame was reported to be created
    after spaceship was launched but game was still continued HRM#815196
  * Unified writing of the city name Washington-on-the-Brazos
    between rulesets, so it doesn't appear multiple times in the same
    game in a bit different form HRM#867817
  * Stealth units are no longer erroneously hidden even from allies
    HRM#764976
  * Placing initial units is now done in shuffled player order HRM#850656
  * Corrupt worker tasks are cleared. Those can originate, e.g.,
    from buggy pre-2.6.2.1 Qt-client, and live in old savegames HRM#901938
  * In a ruleset, such as civ2civ3, where caravans can help building wonder
    in a foreign city, refresh city info of the city owner when one does
    HRM#907977
  * Display of success probabilities for diplomats was off when targeting
    stack of units instead of individual unit HRM#859761
  * Fixed pillaging of extras that are caused by something else than
    player actions. For the fix to work, both server and client must be
    at least version 2.6.3 HRM#861508
  * Civilian unit trying to paradrop to an enemy city dies HRM#870004
  * Prevented dead player from getting techs via Tech_Parasite effect.
    This caused trouble in alien ruleset where Tech_Parasite is granted
    by a tech HRM#873692
  * Improved support of CityTile requirement type HRM#877780
  * Fixed trouble preventing Small Wonders from working as impr_reqs
    for units HRM#884993
  * Corrected success probability shown by action dialog when it depends
    on a special kind of road HRM#897490
  * The included Lua engine has been upgraded from 5.3.5 to 5.3.6. HRM#889425
- drop freeciv-appdata-desktop-references.patch (obsolete)</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1618142400">- Update to 2.6.4:
  * Bugfix release, see https://freeciv.fandom.com/wiki/NEWS-2.6.4</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1626436800">- update to 2.6.5:
  * https://freeciv.fandom.com/wiki/NEWS-2.6.5
  * 2.6.5 is a bugfix release. Notably it fixes regression in 2.6.4 gtk3-client
    that present units in city dialog had no overlays drawn at all.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1639224000">- update to 2.6.6:
  * https://freeciv.fandom.com/wiki/NEWS-2.6.5
  * 2.6.6 is a bugfix release.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1648036800">- update to 3.0.0:
  * This release is a major upgrade which with some changes that
    can support backward compatible rulesets
  * see https://freeciv.fandom.com/wiki/NEWS-3.0.0#WHAT.27S_CHANGED_SINCE_2.6</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1650628800">- update to 3.0.1:
  * 3.0.1 is a generic bugfix release
  * see https://freeciv.fandom.com/wiki/NEWS-3.0.1</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1658145600">- update to 3.0.2:
  * 3.0.2 is a generic bugfix release
  * see https://freeciv.fandom.com/wiki/NEWS-3.0.2</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1660910400">- update to 3.0.3 (bsc#1202548, CVE-2022-6083):
  * 3.0.3 is a bugfix release
  * see https://freeciv.fandom.com/wiki/NEWS-3.0.3</changelog>
</package>
<package pkgid="40aaa88cc17102b5fcbaf9c13f0ed355af029a696abb7ecbce54159512a936fe" name="freeciv-qt" arch="s390x">
  <version epoch="0" ver="3.0.3" rel="bp154.2.3.1"/>
  <changelog author="astieger@suse.com" date="1464955200">- Freeciv 2.5.4:
  * various fixes and changes for rulesets
  * general bug fixes</changelog>
  <changelog author="astieger@suse.com" date="1469880000">- Freeciv 2.5.5:
  * various fixes and changes for rulesets
  * general bug fixes
  * New 'persistent' metaserver connection mode, where one failure
    to talk to the metaserver does not prevent future attempts.
    Enabled with the '--keep' server option or the
    '/metaconnection persistent' server command.
- for a full list of upstream changes, see
  http://freeciv.wikia.com/wiki/NEWS-2.5.5</changelog>
  <changelog author="mimi.vx@gmail.com" date="1481457600">- Freeciv 2.5.6
  * various fixes and changes for rulesets
  * general fixes
- for a full list of upstream changes see
    http://freeciv.wikia.com/wiki/NEWS-2.5.6</changelog>
  <changelog author="astieger@suse.com" date="1502625600">- Freeciv 2.5.8:
  * Various fixes, including safegame fixes
- for a full list of upstream changes see
    http://freeciv.wikia.com/wiki/NEWS-2.5.7
    http://freeciv.wikia.com/wiki/NEWS-2.5.8</changelog>
  <changelog author="astieger@suse.com" date="1505736000">- Freeciv 2.5.9:
  * Fix regression in 'scorelog' function: if one continues from
    a saved game, any scorelog saved before that point would get
    wiped  rather than appended to
  * minor fixes to the Catalan and Russian localizations</changelog>
  <changelog author="astieger@suse.com" date="1517486400">- Freeciv 2.5.10:
  * fixes for failure and crashes in certain game situations
  * Minor adjustment and fixes to rules, gameplay, AI, Client UI</changelog>
  <changelog author="astieger@suse.com" date="1529064000">- freeciv 2.5.11:
  * Stealing a future technology was accidentally yielding two of
    them
  * Put a message about nuclear attack in a more appropriate
    category
  * Some minor improvements to autogenerated terrain help
  * Fix a crash with a malformed tileset
  * Fix an erroneous diagnostic for a malformed savegame
  * Fix a geographical error in the Cuyavian nation description
  * Fix typo in ruleset help comments
  * Fix some compiler warnings
  * Updated translations</changelog>
  <changelog author="Dirk Stoecker &lt;opensuse@dstoecker.de&gt;" date="1562760000">- update to 2.6.0, lots of changes
  See https://freeciv.fandom.com/wiki/NEWS-2.6.0
  Rebase freeciv-appdata-desktop-references.patch
  Cleanup build
  Introduce separate freeciv-lang package</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1585310400">- Update to 2.6.2. New bugfix release.
  See https://freeciv.fandom.com/wiki/NEWS-2.6.2 for the complete
  list of changes.
- Drop fix-qt5-detection.patch. No longer needed.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1591272000">- Drop libggz2-devel BuildRequires: ggz has not been supported
  since freeciv 2.6.0.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1591272001">- Add freeciv-qt-5.15.patch: Fix build with Qt 5.15.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1608638400">- update to 2.6.2.1:
  * Fixed server crash when unit with zero move_rate is transformed
  * Fixed crashes when using Direction objects in lua scripts
  * Fixed crash when chatline text had opening tag without closing tag
  * Fixes to the Qt client
  * Updated translations
  * Fixed Qt-client build against Qt-5.15 (removes freeciv-qt-5.15.patch )
  * Documentation updates</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1612008000">- update to 2.6.3:
  * see http://www.freeciv.org/wiki/NEWS-2.6.3
  * Fixed trouble when a new city is founded to the ruins of a former city,
    and that new city establish a trade route with a player who had seen
    former city, and is unaware that it had been destroyed HRM#871606
  * Fixed a case where shared vision did not completely update
    recipient's map HRM#846106
  * Fixed a bug where one could paradrop to peaceful nation's territory
    after continuing game from an old savegame HRM#879084
  * Fixed a bug causing game sometimes to tell wrong reason of why an
    action failed HRM#879880
  * Cease fire no longer runs out with an already dead player, making his
    former allies to hate the alive party of the treaty HRM#879055
  * Made server not to end in a infinite loop after loading savegame with
    too high phase number. Such a savegame was reported to be created
    after spaceship was launched but game was still continued HRM#815196
  * Unified writing of the city name Washington-on-the-Brazos
    between rulesets, so it doesn't appear multiple times in the same
    game in a bit different form HRM#867817
  * Stealth units are no longer erroneously hidden even from allies
    HRM#764976
  * Placing initial units is now done in shuffled player order HRM#850656
  * Corrupt worker tasks are cleared. Those can originate, e.g.,
    from buggy pre-2.6.2.1 Qt-client, and live in old savegames HRM#901938
  * In a ruleset, such as civ2civ3, where caravans can help building wonder
    in a foreign city, refresh city info of the city owner when one does
    HRM#907977
  * Display of success probabilities for diplomats was off when targeting
    stack of units instead of individual unit HRM#859761
  * Fixed pillaging of extras that are caused by something else than
    player actions. For the fix to work, both server and client must be
    at least version 2.6.3 HRM#861508
  * Civilian unit trying to paradrop to an enemy city dies HRM#870004
  * Prevented dead player from getting techs via Tech_Parasite effect.
    This caused trouble in alien ruleset where Tech_Parasite is granted
    by a tech HRM#873692
  * Improved support of CityTile requirement type HRM#877780
  * Fixed trouble preventing Small Wonders from working as impr_reqs
    for units HRM#884993
  * Corrected success probability shown by action dialog when it depends
    on a special kind of road HRM#897490
  * The included Lua engine has been upgraded from 5.3.5 to 5.3.6. HRM#889425
- drop freeciv-appdata-desktop-references.patch (obsolete)</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1618142400">- Update to 2.6.4:
  * Bugfix release, see https://freeciv.fandom.com/wiki/NEWS-2.6.4</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1626436800">- update to 2.6.5:
  * https://freeciv.fandom.com/wiki/NEWS-2.6.5
  * 2.6.5 is a bugfix release. Notably it fixes regression in 2.6.4 gtk3-client
    that present units in city dialog had no overlays drawn at all.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1639224000">- update to 2.6.6:
  * https://freeciv.fandom.com/wiki/NEWS-2.6.5
  * 2.6.6 is a bugfix release.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1648036800">- update to 3.0.0:
  * This release is a major upgrade which with some changes that
    can support backward compatible rulesets
  * see https://freeciv.fandom.com/wiki/NEWS-3.0.0#WHAT.27S_CHANGED_SINCE_2.6</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1650628800">- update to 3.0.1:
  * 3.0.1 is a generic bugfix release
  * see https://freeciv.fandom.com/wiki/NEWS-3.0.1</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1658145600">- update to 3.0.2:
  * 3.0.2 is a generic bugfix release
  * see https://freeciv.fandom.com/wiki/NEWS-3.0.2</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1660910400">- update to 3.0.3 (bsc#1202548, CVE-2022-6083):
  * 3.0.3 is a bugfix release
  * see https://freeciv.fandom.com/wiki/NEWS-3.0.3</changelog>
</package>
<package pkgid="71b505af58a7fc27445fd12a05a9e2ad675ce31e4866177ca57018ed1874ac4d" name="freeciv-qt" arch="x86_64">
  <version epoch="0" ver="3.0.3" rel="bp154.2.3.1"/>
  <changelog author="astieger@suse.com" date="1464955200">- Freeciv 2.5.4:
  * various fixes and changes for rulesets
  * general bug fixes</changelog>
  <changelog author="astieger@suse.com" date="1469880000">- Freeciv 2.5.5:
  * various fixes and changes for rulesets
  * general bug fixes
  * New 'persistent' metaserver connection mode, where one failure
    to talk to the metaserver does not prevent future attempts.
    Enabled with the '--keep' server option or the
    '/metaconnection persistent' server command.
- for a full list of upstream changes, see
  http://freeciv.wikia.com/wiki/NEWS-2.5.5</changelog>
  <changelog author="mimi.vx@gmail.com" date="1481457600">- Freeciv 2.5.6
  * various fixes and changes for rulesets
  * general fixes
- for a full list of upstream changes see
    http://freeciv.wikia.com/wiki/NEWS-2.5.6</changelog>
  <changelog author="astieger@suse.com" date="1502625600">- Freeciv 2.5.8:
  * Various fixes, including safegame fixes
- for a full list of upstream changes see
    http://freeciv.wikia.com/wiki/NEWS-2.5.7
    http://freeciv.wikia.com/wiki/NEWS-2.5.8</changelog>
  <changelog author="astieger@suse.com" date="1505736000">- Freeciv 2.5.9:
  * Fix regression in 'scorelog' function: if one continues from
    a saved game, any scorelog saved before that point would get
    wiped  rather than appended to
  * minor fixes to the Catalan and Russian localizations</changelog>
  <changelog author="astieger@suse.com" date="1517486400">- Freeciv 2.5.10:
  * fixes for failure and crashes in certain game situations
  * Minor adjustment and fixes to rules, gameplay, AI, Client UI</changelog>
  <changelog author="astieger@suse.com" date="1529064000">- freeciv 2.5.11:
  * Stealing a future technology was accidentally yielding two of
    them
  * Put a message about nuclear attack in a more appropriate
    category
  * Some minor improvements to autogenerated terrain help
  * Fix a crash with a malformed tileset
  * Fix an erroneous diagnostic for a malformed savegame
  * Fix a geographical error in the Cuyavian nation description
  * Fix typo in ruleset help comments
  * Fix some compiler warnings
  * Updated translations</changelog>
  <changelog author="Dirk Stoecker &lt;opensuse@dstoecker.de&gt;" date="1562760000">- update to 2.6.0, lots of changes
  See https://freeciv.fandom.com/wiki/NEWS-2.6.0
  Rebase freeciv-appdata-desktop-references.patch
  Cleanup build
  Introduce separate freeciv-lang package</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1585310400">- Update to 2.6.2. New bugfix release.
  See https://freeciv.fandom.com/wiki/NEWS-2.6.2 for the complete
  list of changes.
- Drop fix-qt5-detection.patch. No longer needed.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1591272000">- Drop libggz2-devel BuildRequires: ggz has not been supported
  since freeciv 2.6.0.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1591272001">- Add freeciv-qt-5.15.patch: Fix build with Qt 5.15.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1608638400">- update to 2.6.2.1:
  * Fixed server crash when unit with zero move_rate is transformed
  * Fixed crashes when using Direction objects in lua scripts
  * Fixed crash when chatline text had opening tag without closing tag
  * Fixes to the Qt client
  * Updated translations
  * Fixed Qt-client build against Qt-5.15 (removes freeciv-qt-5.15.patch )
  * Documentation updates</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1612008000">- update to 2.6.3:
  * see http://www.freeciv.org/wiki/NEWS-2.6.3
  * Fixed trouble when a new city is founded to the ruins of a former city,
    and that new city establish a trade route with a player who had seen
    former city, and is unaware that it had been destroyed HRM#871606
  * Fixed a case where shared vision did not completely update
    recipient's map HRM#846106
  * Fixed a bug where one could paradrop to peaceful nation's territory
    after continuing game from an old savegame HRM#879084
  * Fixed a bug causing game sometimes to tell wrong reason of why an
    action failed HRM#879880
  * Cease fire no longer runs out with an already dead player, making his
    former allies to hate the alive party of the treaty HRM#879055
  * Made server not to end in a infinite loop after loading savegame with
    too high phase number. Such a savegame was reported to be created
    after spaceship was launched but game was still continued HRM#815196
  * Unified writing of the city name Washington-on-the-Brazos
    between rulesets, so it doesn't appear multiple times in the same
    game in a bit different form HRM#867817
  * Stealth units are no longer erroneously hidden even from allies
    HRM#764976
  * Placing initial units is now done in shuffled player order HRM#850656
  * Corrupt worker tasks are cleared. Those can originate, e.g.,
    from buggy pre-2.6.2.1 Qt-client, and live in old savegames HRM#901938
  * In a ruleset, such as civ2civ3, where caravans can help building wonder
    in a foreign city, refresh city info of the city owner when one does
    HRM#907977
  * Display of success probabilities for diplomats was off when targeting
    stack of units instead of individual unit HRM#859761
  * Fixed pillaging of extras that are caused by something else than
    player actions. For the fix to work, both server and client must be
    at least version 2.6.3 HRM#861508
  * Civilian unit trying to paradrop to an enemy city dies HRM#870004
  * Prevented dead player from getting techs via Tech_Parasite effect.
    This caused trouble in alien ruleset where Tech_Parasite is granted
    by a tech HRM#873692
  * Improved support of CityTile requirement type HRM#877780
  * Fixed trouble preventing Small Wonders from working as impr_reqs
    for units HRM#884993
  * Corrected success probability shown by action dialog when it depends
    on a special kind of road HRM#897490
  * The included Lua engine has been upgraded from 5.3.5 to 5.3.6. HRM#889425
- drop freeciv-appdata-desktop-references.patch (obsolete)</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1618142400">- Update to 2.6.4:
  * Bugfix release, see https://freeciv.fandom.com/wiki/NEWS-2.6.4</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1626436800">- update to 2.6.5:
  * https://freeciv.fandom.com/wiki/NEWS-2.6.5
  * 2.6.5 is a bugfix release. Notably it fixes regression in 2.6.4 gtk3-client
    that present units in city dialog had no overlays drawn at all.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1639224000">- update to 2.6.6:
  * https://freeciv.fandom.com/wiki/NEWS-2.6.5
  * 2.6.6 is a bugfix release.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1648036800">- update to 3.0.0:
  * This release is a major upgrade which with some changes that
    can support backward compatible rulesets
  * see https://freeciv.fandom.com/wiki/NEWS-3.0.0#WHAT.27S_CHANGED_SINCE_2.6</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1650628800">- update to 3.0.1:
  * 3.0.1 is a generic bugfix release
  * see https://freeciv.fandom.com/wiki/NEWS-3.0.1</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1658145600">- update to 3.0.2:
  * 3.0.2 is a generic bugfix release
  * see https://freeciv.fandom.com/wiki/NEWS-3.0.2</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1660910400">- update to 3.0.3 (bsc#1202548, CVE-2022-6083):
  * 3.0.3 is a bugfix release
  * see https://freeciv.fandom.com/wiki/NEWS-3.0.3</changelog>
</package>
<package pkgid="d2da76e12153555e6bb73cf401704a9fe3b68692f69b845225ecd924bf47f1df" name="fwts" arch="aarch64">
  <version epoch="0" ver="22.05.00" rel="bp154.2.3.5"/>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1606824000">- Fix broken source url and prepare done in previous changes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1608292800">- Update to version 20.12.00:
  * See provided changelog for detailed list of changes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1610971200">- Add patch fixing bsc#1178442 bsc#1177992
  * acpi-pmtt-fix-infinite-loops-when-length-is-incorrectly-zero.diff</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1611316800">- Update to version 21.01.00:
  * See provided changelog for detailed list of changes
- Drop upstreamed patch:
  * acpi-pmtt-fix-infinite-loops-when-length-is-incorrectly-zero.diff</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1614254400">- Update to version 21.02.00:
  * See provided changelog for detailed list of changes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1618488000">- Update to version 21.03.00:
  * See provided changelog for detailed list of changes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1619611200">- Switch to obs scm _service</changelog>
  <changelog author="Martin Pluskal mpluskal@suse.com" date="1621512000">- Update to version 21.03.00:
  * uefirtvariable: fix memory leak
  * acpi: refactor by fwts_acpi_reserved_type_check
  * acpi: refactor by fwts_acpi_structure_range_check
  * uefirtauthvar: check variable runtime services supported before testing (LP: #1913351)
  * uefirtvariable: check variable runtime services supported before testing (LP: #1913351)
  * uefirtmisc: check misc runtime services supported before testing (LP: #1913351)
  * uefirttime: check time services supported before testing (LP: #1913351)
  * acpi: spcr: accept baud rate 0x0 as a preconfigured state
  * fwts-test: sync up with PMTT rev 2 changes
  * acpi: pmtt: update PMTT to revision 2 (mantis 1975)</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1621857600">- Update to version 21.05.00:
  * lib: fwts_version.h - update to V21.05.00
  * debian: update changelog
  * auto-packager:mkpackage.sh: add impish
  * fwts-test: sync up with dbgp changes
  * acpi: dbgp/spmi: check space ids by fwts_acpi_space_id
  * acpiinfo: update ACPI 6.4 vs. ACPICA versions
  * lib: acpi: fix incorrect actual vs. struct length outputs
  * acpi: shorten helper function names by removing "check"
  * lib: acpi: unify naming style by removing "ACPI"
  * fwts-test: sync up with PMTT refactoring changes
  * acpi: refactor length check by fwts_acpi_structure_length_check
  * acpi: refactor zero length by fwts_acpi_structure_length_zero_check</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1624363200">- Update to version 21.06.00:
  * lib: fwts_version.h - update to V21.06.00
  * debian: update changelog
  * fwts_acpi_tables: memcpy 4 char ACPI table name
  * Remove complex disabling of ACPI for non-ACPI targets
  * Debian: move source lintian overrides file to source
  * Add lintian overrides for ldconfig trigger warning
  * Debian: control: update Standards-Version to 4.1.0
  * Debian: update compat level to 9
  * Debian: add Rules-Requires-Root field to control file
  * Debian: add project Homepage field to control file
  * debian/copyright: use secure https url specifier
  * Debian: remove spaces at end of lines of control file
  * Debian: remove spaces at end of lines of changelong
  * auto-packager: mkpackage.sh: remove xenial
  * live-image: add "TPM tests" to root menu
  * live-image: add utils tests to "Selected" menu
  * tpmevlog: add to batch tests
  * klog.json: check IRQ requests on irqchip</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1628078400">- Update to version 21.07.00:
  * ACPICA: Update to version 20210730
  * uefirttime: Fix incorrect error messages for invalid time test
  * fwts-test: sync up with updates in fwts_wmi_known_guids
  * acpi/wmi: update WMI known GUIDs from Linux kernel 5.14-rc1
  * sbbr: remove pm_file test (not required in BBR 1.0)
  * lib: fwts_version.h - update to V21.07.00
  * debian: update changelog
  * auto-packager: mkpackage.sh: remove groovy
  * uefirttime: add advice for the timezone 2047 failure (LP: #1933503)
  * fwts-test: sync up with DBG2 changes from BSA updates
  * fwts_acpi_tables: skip FACS warning for reduced hardware
  * acpi: method: Make _AEI test optional for SBBR
  * acpi: dbg2: Allow 16550 compatible serial port in DBG2
  * acpi: method: Make method_test_ADR() optional
  * sbbr: adjust signature name for MADT
  * sbbr: remove SSDT from mandatory list
  * sbbr: acpitables: add new recommended tables
  * acpi: acpitables: add advices for table revision tests</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1629892800">- Update to version 21.08.00:
  * lib: fwts_version.h - update to V21.08.00
  * debian: update changelog
  * ARM64 SMCCC firmware API tests
  * bios: smm: fix indentation
  * acpi: sbbr: refactor by fwts_get_fadt_version
  * lib: fwts_acpi_tables: add a function to get FADT versions
  * acpi: fadt: remove hard-coded FADT version
  * acpi: fadt: clarify comments of FACS and HW-reduced mode
  * acpi: dmar: add a warning when PCI device is not found</changelog>
  <changelog author="mpluskal@suse.com" date="1631620800">- Update to version 21.08.00:
  * Manual: update number of tests, date and remove double spaces
  * debian/control: Add device-tree-compiler as dependency for armel/armhf/arm64
  * fwts_firmware: Rework Devicetree firmware detection
  * Enable dt_sysinfo test for Power only</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1632916800">- Update to version 21.09.00:
  * snapcraft: Fix incorrect core20 library path
  * snapcraft: fix path to fwts
  * lib: fwts_version.h - update to V21.09.00
  * debian: update changelog
  * acpi: replace fwts_firmware_detect() by fw-&gt;firmware_type
  * lib: fwts_firmware: fix incorrect comments for fwts_firmware_detect
  * uefi: uefirtmisc: reduce scope of some variables
  * uefi: securebootcert: make some function arguments const
  * src/pci/smccc: reduce scope of variable ret
  * bios: smm: remove redundant variable n
  * acpi: iort: constify some function arguments
  * acpi: dmar: constify a pointer argument in acpi_parse_dev_scope
  * acpi: cstates: remove redundant null check on entry
  * smccc_test: fix missing ) in pr_info call
  * opal: clean up some coding style issues
  * opal: Fix a few memory leaks on asprint allocated buffers
  * acpi: s3power: clean up pedantic static analysis warnings
  * uefirtvariable: clean up pedantic static analysis warnings
  * opal: mem_info: clean up pedantic static analysis warnings
  * fwts_devicetree: clean up static analysis warning
  * fwts_acpi_tables: NULLify table pointers
  * snapcraft: update to use core20
  * lib: use &lt;poll.h&gt; rather than &lt;sys/poll.h&gt;</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1638532800">- Update to version 21.11.00:
  * lib: fwts_version.h - update to V21.11.00
  * debian: update changelog
  * auto-packager:mkpackage.sh: add jammy
  * fwts-test: sync up the adding sleep type for s2idle testing
  * s3: add sleep type setting for testing with s3 or s2idle
  * acpi: madt: De-initialise ACPICA core engine in case of error.
  * lib: fwts_smbios: fix loading SMBIOS table from uefi
  * acpi: uniqueid: skip comparison of _HID and _CID of the same device
  * ACPICA: Update to version 20210930</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1640088000">- Update to version 21.12.00:
  * lib: fwts_version.h - update to V21.12.00
  * debian: update changelog
  * dmicheck: skip scanning smbios in /dev/mem on aarch64
  * s3: increase s2idle_residency to u64 to avoid overflows
  * s3: fix incorrect error messages for s2idle_residency
  * acpi: uniqueid: clean up pedantic static analysis warnings
  * s4: clean up pedantic static analysis warnings</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1642593600">- Update build dependencies (add zlib)</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1644321600">- Update to version 22.01.00:
  * fwts-test: sync up the adding option for get next high monotonic count
  * uefirtmisc: add option to specify iterations get next high monitonic count
  * uefirtmisc: add checking the resources for testing
  * lib: fwts_version.h - update to V22.01.00
  * debian: update changelog
  * fwts_acpica: skip unneccessary null check
  * s3: use system suspend default if --s3-sleep-type is not used
  * tpmevlogdump: add supporting several new types for event log dumping
  * auto-packager: mkpackage.sh: remove hirsute
  * tpmevlog: add supporting several new types for event log checking
  * lib: fwts_tpm.h: add new type definition</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1648123200">- Update to version 22.03.00:
  * lib: fwts_version.h - update to V22.03.00
  * debian: update changelog
  * fwts-test: sync up the sdev checking secure access components
  * acpi: sdev: add checking secure access components
  * acpi: macf: report failures instead of just logging the errors
  * acpi/time: skip a number of TAD methods when _GCP[0] is clear
  * acpi:dmar: update the link of DMAR table
  * fwts-tests: update acpi dump data to be in sync with latest ACPICA
  * ACPICA: Update to version 20211217</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1653998400">- Update to version 22.05.00:
  * lib: fwts_version.h - update to V22.05.00
  * debian: update changelog
  * fwts-test: sync up IORT test with specification version E.d
  * acpi: mcfg: checking kernel lockdown when doing mmap PCI config space
  * auto-packager:mkpackage.sh: add kinetic
  * acpi: iort: update IORT test to specification version E.d
  * Update copyright year to 2022
  * acpi: iort: update the IORT node dump
  * acpi: iort: update IORT node revision check
  * ACPICA: Update to version 20220331</changelog>
</package>
<package pkgid="9fccacbfb7b6af796c14c36fdecbd212043dedbcdc667461aae400bc0193ae16" name="fwts" arch="i586">
  <version epoch="0" ver="22.05.00" rel="bp154.2.3.5"/>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1606824000">- Fix broken source url and prepare done in previous changes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1608292800">- Update to version 20.12.00:
  * See provided changelog for detailed list of changes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1610971200">- Add patch fixing bsc#1178442 bsc#1177992
  * acpi-pmtt-fix-infinite-loops-when-length-is-incorrectly-zero.diff</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1611316800">- Update to version 21.01.00:
  * See provided changelog for detailed list of changes
- Drop upstreamed patch:
  * acpi-pmtt-fix-infinite-loops-when-length-is-incorrectly-zero.diff</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1614254400">- Update to version 21.02.00:
  * See provided changelog for detailed list of changes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1618488000">- Update to version 21.03.00:
  * See provided changelog for detailed list of changes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1619611200">- Switch to obs scm _service</changelog>
  <changelog author="Martin Pluskal mpluskal@suse.com" date="1621512000">- Update to version 21.03.00:
  * uefirtvariable: fix memory leak
  * acpi: refactor by fwts_acpi_reserved_type_check
  * acpi: refactor by fwts_acpi_structure_range_check
  * uefirtauthvar: check variable runtime services supported before testing (LP: #1913351)
  * uefirtvariable: check variable runtime services supported before testing (LP: #1913351)
  * uefirtmisc: check misc runtime services supported before testing (LP: #1913351)
  * uefirttime: check time services supported before testing (LP: #1913351)
  * acpi: spcr: accept baud rate 0x0 as a preconfigured state
  * fwts-test: sync up with PMTT rev 2 changes
  * acpi: pmtt: update PMTT to revision 2 (mantis 1975)</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1621857600">- Update to version 21.05.00:
  * lib: fwts_version.h - update to V21.05.00
  * debian: update changelog
  * auto-packager:mkpackage.sh: add impish
  * fwts-test: sync up with dbgp changes
  * acpi: dbgp/spmi: check space ids by fwts_acpi_space_id
  * acpiinfo: update ACPI 6.4 vs. ACPICA versions
  * lib: acpi: fix incorrect actual vs. struct length outputs
  * acpi: shorten helper function names by removing "check"
  * lib: acpi: unify naming style by removing "ACPI"
  * fwts-test: sync up with PMTT refactoring changes
  * acpi: refactor length check by fwts_acpi_structure_length_check
  * acpi: refactor zero length by fwts_acpi_structure_length_zero_check</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1624363200">- Update to version 21.06.00:
  * lib: fwts_version.h - update to V21.06.00
  * debian: update changelog
  * fwts_acpi_tables: memcpy 4 char ACPI table name
  * Remove complex disabling of ACPI for non-ACPI targets
  * Debian: move source lintian overrides file to source
  * Add lintian overrides for ldconfig trigger warning
  * Debian: control: update Standards-Version to 4.1.0
  * Debian: update compat level to 9
  * Debian: add Rules-Requires-Root field to control file
  * Debian: add project Homepage field to control file
  * debian/copyright: use secure https url specifier
  * Debian: remove spaces at end of lines of control file
  * Debian: remove spaces at end of lines of changelong
  * auto-packager: mkpackage.sh: remove xenial
  * live-image: add "TPM tests" to root menu
  * live-image: add utils tests to "Selected" menu
  * tpmevlog: add to batch tests
  * klog.json: check IRQ requests on irqchip</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1628078400">- Update to version 21.07.00:
  * ACPICA: Update to version 20210730
  * uefirttime: Fix incorrect error messages for invalid time test
  * fwts-test: sync up with updates in fwts_wmi_known_guids
  * acpi/wmi: update WMI known GUIDs from Linux kernel 5.14-rc1
  * sbbr: remove pm_file test (not required in BBR 1.0)
  * lib: fwts_version.h - update to V21.07.00
  * debian: update changelog
  * auto-packager: mkpackage.sh: remove groovy
  * uefirttime: add advice for the timezone 2047 failure (LP: #1933503)
  * fwts-test: sync up with DBG2 changes from BSA updates
  * fwts_acpi_tables: skip FACS warning for reduced hardware
  * acpi: method: Make _AEI test optional for SBBR
  * acpi: dbg2: Allow 16550 compatible serial port in DBG2
  * acpi: method: Make method_test_ADR() optional
  * sbbr: adjust signature name for MADT
  * sbbr: remove SSDT from mandatory list
  * sbbr: acpitables: add new recommended tables
  * acpi: acpitables: add advices for table revision tests</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1629892800">- Update to version 21.08.00:
  * lib: fwts_version.h - update to V21.08.00
  * debian: update changelog
  * ARM64 SMCCC firmware API tests
  * bios: smm: fix indentation
  * acpi: sbbr: refactor by fwts_get_fadt_version
  * lib: fwts_acpi_tables: add a function to get FADT versions
  * acpi: fadt: remove hard-coded FADT version
  * acpi: fadt: clarify comments of FACS and HW-reduced mode
  * acpi: dmar: add a warning when PCI device is not found</changelog>
  <changelog author="mpluskal@suse.com" date="1631620800">- Update to version 21.08.00:
  * Manual: update number of tests, date and remove double spaces
  * debian/control: Add device-tree-compiler as dependency for armel/armhf/arm64
  * fwts_firmware: Rework Devicetree firmware detection
  * Enable dt_sysinfo test for Power only</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1632916800">- Update to version 21.09.00:
  * snapcraft: Fix incorrect core20 library path
  * snapcraft: fix path to fwts
  * lib: fwts_version.h - update to V21.09.00
  * debian: update changelog
  * acpi: replace fwts_firmware_detect() by fw-&gt;firmware_type
  * lib: fwts_firmware: fix incorrect comments for fwts_firmware_detect
  * uefi: uefirtmisc: reduce scope of some variables
  * uefi: securebootcert: make some function arguments const
  * src/pci/smccc: reduce scope of variable ret
  * bios: smm: remove redundant variable n
  * acpi: iort: constify some function arguments
  * acpi: dmar: constify a pointer argument in acpi_parse_dev_scope
  * acpi: cstates: remove redundant null check on entry
  * smccc_test: fix missing ) in pr_info call
  * opal: clean up some coding style issues
  * opal: Fix a few memory leaks on asprint allocated buffers
  * acpi: s3power: clean up pedantic static analysis warnings
  * uefirtvariable: clean up pedantic static analysis warnings
  * opal: mem_info: clean up pedantic static analysis warnings
  * fwts_devicetree: clean up static analysis warning
  * fwts_acpi_tables: NULLify table pointers
  * snapcraft: update to use core20
  * lib: use &lt;poll.h&gt; rather than &lt;sys/poll.h&gt;</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1638532800">- Update to version 21.11.00:
  * lib: fwts_version.h - update to V21.11.00
  * debian: update changelog
  * auto-packager:mkpackage.sh: add jammy
  * fwts-test: sync up the adding sleep type for s2idle testing
  * s3: add sleep type setting for testing with s3 or s2idle
  * acpi: madt: De-initialise ACPICA core engine in case of error.
  * lib: fwts_smbios: fix loading SMBIOS table from uefi
  * acpi: uniqueid: skip comparison of _HID and _CID of the same device
  * ACPICA: Update to version 20210930</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1640088000">- Update to version 21.12.00:
  * lib: fwts_version.h - update to V21.12.00
  * debian: update changelog
  * dmicheck: skip scanning smbios in /dev/mem on aarch64
  * s3: increase s2idle_residency to u64 to avoid overflows
  * s3: fix incorrect error messages for s2idle_residency
  * acpi: uniqueid: clean up pedantic static analysis warnings
  * s4: clean up pedantic static analysis warnings</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1642593600">- Update build dependencies (add zlib)</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1644321600">- Update to version 22.01.00:
  * fwts-test: sync up the adding option for get next high monotonic count
  * uefirtmisc: add option to specify iterations get next high monitonic count
  * uefirtmisc: add checking the resources for testing
  * lib: fwts_version.h - update to V22.01.00
  * debian: update changelog
  * fwts_acpica: skip unneccessary null check
  * s3: use system suspend default if --s3-sleep-type is not used
  * tpmevlogdump: add supporting several new types for event log dumping
  * auto-packager: mkpackage.sh: remove hirsute
  * tpmevlog: add supporting several new types for event log checking
  * lib: fwts_tpm.h: add new type definition</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1648123200">- Update to version 22.03.00:
  * lib: fwts_version.h - update to V22.03.00
  * debian: update changelog
  * fwts-test: sync up the sdev checking secure access components
  * acpi: sdev: add checking secure access components
  * acpi: macf: report failures instead of just logging the errors
  * acpi/time: skip a number of TAD methods when _GCP[0] is clear
  * acpi:dmar: update the link of DMAR table
  * fwts-tests: update acpi dump data to be in sync with latest ACPICA
  * ACPICA: Update to version 20211217</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1653998400">- Update to version 22.05.00:
  * lib: fwts_version.h - update to V22.05.00
  * debian: update changelog
  * fwts-test: sync up IORT test with specification version E.d
  * acpi: mcfg: checking kernel lockdown when doing mmap PCI config space
  * auto-packager:mkpackage.sh: add kinetic
  * acpi: iort: update IORT test to specification version E.d
  * Update copyright year to 2022
  * acpi: iort: update the IORT node dump
  * acpi: iort: update IORT node revision check
  * ACPICA: Update to version 20220331</changelog>
</package>
<package pkgid="09364a1332596c739b33b342834f00e7dc7839b37e58fe67e70a28b6155f0c65" name="fwts" arch="src">
  <version epoch="0" ver="22.05.00" rel="bp154.2.3.5"/>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1606824000">- Fix broken source url and prepare done in previous changes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1608292800">- Update to version 20.12.00:
  * See provided changelog for detailed list of changes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1610971200">- Add patch fixing bsc#1178442 bsc#1177992
  * acpi-pmtt-fix-infinite-loops-when-length-is-incorrectly-zero.diff</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1611316800">- Update to version 21.01.00:
  * See provided changelog for detailed list of changes
- Drop upstreamed patch:
  * acpi-pmtt-fix-infinite-loops-when-length-is-incorrectly-zero.diff</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1614254400">- Update to version 21.02.00:
  * See provided changelog for detailed list of changes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1618488000">- Update to version 21.03.00:
  * See provided changelog for detailed list of changes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1619611200">- Switch to obs scm _service</changelog>
  <changelog author="Martin Pluskal mpluskal@suse.com" date="1621512000">- Update to version 21.03.00:
  * uefirtvariable: fix memory leak
  * acpi: refactor by fwts_acpi_reserved_type_check
  * acpi: refactor by fwts_acpi_structure_range_check
  * uefirtauthvar: check variable runtime services supported before testing (LP: #1913351)
  * uefirtvariable: check variable runtime services supported before testing (LP: #1913351)
  * uefirtmisc: check misc runtime services supported before testing (LP: #1913351)
  * uefirttime: check time services supported before testing (LP: #1913351)
  * acpi: spcr: accept baud rate 0x0 as a preconfigured state
  * fwts-test: sync up with PMTT rev 2 changes
  * acpi: pmtt: update PMTT to revision 2 (mantis 1975)</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1621857600">- Update to version 21.05.00:
  * lib: fwts_version.h - update to V21.05.00
  * debian: update changelog
  * auto-packager:mkpackage.sh: add impish
  * fwts-test: sync up with dbgp changes
  * acpi: dbgp/spmi: check space ids by fwts_acpi_space_id
  * acpiinfo: update ACPI 6.4 vs. ACPICA versions
  * lib: acpi: fix incorrect actual vs. struct length outputs
  * acpi: shorten helper function names by removing "check"
  * lib: acpi: unify naming style by removing "ACPI"
  * fwts-test: sync up with PMTT refactoring changes
  * acpi: refactor length check by fwts_acpi_structure_length_check
  * acpi: refactor zero length by fwts_acpi_structure_length_zero_check</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1624363200">- Update to version 21.06.00:
  * lib: fwts_version.h - update to V21.06.00
  * debian: update changelog
  * fwts_acpi_tables: memcpy 4 char ACPI table name
  * Remove complex disabling of ACPI for non-ACPI targets
  * Debian: move source lintian overrides file to source
  * Add lintian overrides for ldconfig trigger warning
  * Debian: control: update Standards-Version to 4.1.0
  * Debian: update compat level to 9
  * Debian: add Rules-Requires-Root field to control file
  * Debian: add project Homepage field to control file
  * debian/copyright: use secure https url specifier
  * Debian: remove spaces at end of lines of control file
  * Debian: remove spaces at end of lines of changelong
  * auto-packager: mkpackage.sh: remove xenial
  * live-image: add "TPM tests" to root menu
  * live-image: add utils tests to "Selected" menu
  * tpmevlog: add to batch tests
  * klog.json: check IRQ requests on irqchip</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1628078400">- Update to version 21.07.00:
  * ACPICA: Update to version 20210730
  * uefirttime: Fix incorrect error messages for invalid time test
  * fwts-test: sync up with updates in fwts_wmi_known_guids
  * acpi/wmi: update WMI known GUIDs from Linux kernel 5.14-rc1
  * sbbr: remove pm_file test (not required in BBR 1.0)
  * lib: fwts_version.h - update to V21.07.00
  * debian: update changelog
  * auto-packager: mkpackage.sh: remove groovy
  * uefirttime: add advice for the timezone 2047 failure (LP: #1933503)
  * fwts-test: sync up with DBG2 changes from BSA updates
  * fwts_acpi_tables: skip FACS warning for reduced hardware
  * acpi: method: Make _AEI test optional for SBBR
  * acpi: dbg2: Allow 16550 compatible serial port in DBG2
  * acpi: method: Make method_test_ADR() optional
  * sbbr: adjust signature name for MADT
  * sbbr: remove SSDT from mandatory list
  * sbbr: acpitables: add new recommended tables
  * acpi: acpitables: add advices for table revision tests</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1629892800">- Update to version 21.08.00:
  * lib: fwts_version.h - update to V21.08.00
  * debian: update changelog
  * ARM64 SMCCC firmware API tests
  * bios: smm: fix indentation
  * acpi: sbbr: refactor by fwts_get_fadt_version
  * lib: fwts_acpi_tables: add a function to get FADT versions
  * acpi: fadt: remove hard-coded FADT version
  * acpi: fadt: clarify comments of FACS and HW-reduced mode
  * acpi: dmar: add a warning when PCI device is not found</changelog>
  <changelog author="mpluskal@suse.com" date="1631620800">- Update to version 21.08.00:
  * Manual: update number of tests, date and remove double spaces
  * debian/control: Add device-tree-compiler as dependency for armel/armhf/arm64
  * fwts_firmware: Rework Devicetree firmware detection
  * Enable dt_sysinfo test for Power only</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1632916800">- Update to version 21.09.00:
  * snapcraft: Fix incorrect core20 library path
  * snapcraft: fix path to fwts
  * lib: fwts_version.h - update to V21.09.00
  * debian: update changelog
  * acpi: replace fwts_firmware_detect() by fw-&gt;firmware_type
  * lib: fwts_firmware: fix incorrect comments for fwts_firmware_detect
  * uefi: uefirtmisc: reduce scope of some variables
  * uefi: securebootcert: make some function arguments const
  * src/pci/smccc: reduce scope of variable ret
  * bios: smm: remove redundant variable n
  * acpi: iort: constify some function arguments
  * acpi: dmar: constify a pointer argument in acpi_parse_dev_scope
  * acpi: cstates: remove redundant null check on entry
  * smccc_test: fix missing ) in pr_info call
  * opal: clean up some coding style issues
  * opal: Fix a few memory leaks on asprint allocated buffers
  * acpi: s3power: clean up pedantic static analysis warnings
  * uefirtvariable: clean up pedantic static analysis warnings
  * opal: mem_info: clean up pedantic static analysis warnings
  * fwts_devicetree: clean up static analysis warning
  * fwts_acpi_tables: NULLify table pointers
  * snapcraft: update to use core20
  * lib: use &lt;poll.h&gt; rather than &lt;sys/poll.h&gt;</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1638532800">- Update to version 21.11.00:
  * lib: fwts_version.h - update to V21.11.00
  * debian: update changelog
  * auto-packager:mkpackage.sh: add jammy
  * fwts-test: sync up the adding sleep type for s2idle testing
  * s3: add sleep type setting for testing with s3 or s2idle
  * acpi: madt: De-initialise ACPICA core engine in case of error.
  * lib: fwts_smbios: fix loading SMBIOS table from uefi
  * acpi: uniqueid: skip comparison of _HID and _CID of the same device
  * ACPICA: Update to version 20210930</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1640088000">- Update to version 21.12.00:
  * lib: fwts_version.h - update to V21.12.00
  * debian: update changelog
  * dmicheck: skip scanning smbios in /dev/mem on aarch64
  * s3: increase s2idle_residency to u64 to avoid overflows
  * s3: fix incorrect error messages for s2idle_residency
  * acpi: uniqueid: clean up pedantic static analysis warnings
  * s4: clean up pedantic static analysis warnings</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1642593600">- Update build dependencies (add zlib)</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1644321600">- Update to version 22.01.00:
  * fwts-test: sync up the adding option for get next high monotonic count
  * uefirtmisc: add option to specify iterations get next high monitonic count
  * uefirtmisc: add checking the resources for testing
  * lib: fwts_version.h - update to V22.01.00
  * debian: update changelog
  * fwts_acpica: skip unneccessary null check
  * s3: use system suspend default if --s3-sleep-type is not used
  * tpmevlogdump: add supporting several new types for event log dumping
  * auto-packager: mkpackage.sh: remove hirsute
  * tpmevlog: add supporting several new types for event log checking
  * lib: fwts_tpm.h: add new type definition</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1648123200">- Update to version 22.03.00:
  * lib: fwts_version.h - update to V22.03.00
  * debian: update changelog
  * fwts-test: sync up the sdev checking secure access components
  * acpi: sdev: add checking secure access components
  * acpi: macf: report failures instead of just logging the errors
  * acpi/time: skip a number of TAD methods when _GCP[0] is clear
  * acpi:dmar: update the link of DMAR table
  * fwts-tests: update acpi dump data to be in sync with latest ACPICA
  * ACPICA: Update to version 20211217</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1653998400">- Update to version 22.05.00:
  * lib: fwts_version.h - update to V22.05.00
  * debian: update changelog
  * fwts-test: sync up IORT test with specification version E.d
  * acpi: mcfg: checking kernel lockdown when doing mmap PCI config space
  * auto-packager:mkpackage.sh: add kinetic
  * acpi: iort: update IORT test to specification version E.d
  * Update copyright year to 2022
  * acpi: iort: update the IORT node dump
  * acpi: iort: update IORT node revision check
  * ACPICA: Update to version 20220331</changelog>
</package>
<package pkgid="c54257bdcf94d0b44e9ad0537890827704f78509335444b120cea99130db6179" name="fwts" arch="x86_64">
  <version epoch="0" ver="22.05.00" rel="bp154.2.3.5"/>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1606824000">- Fix broken source url and prepare done in previous changes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1608292800">- Update to version 20.12.00:
  * See provided changelog for detailed list of changes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1610971200">- Add patch fixing bsc#1178442 bsc#1177992
  * acpi-pmtt-fix-infinite-loops-when-length-is-incorrectly-zero.diff</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1611316800">- Update to version 21.01.00:
  * See provided changelog for detailed list of changes
- Drop upstreamed patch:
  * acpi-pmtt-fix-infinite-loops-when-length-is-incorrectly-zero.diff</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1614254400">- Update to version 21.02.00:
  * See provided changelog for detailed list of changes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1618488000">- Update to version 21.03.00:
  * See provided changelog for detailed list of changes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1619611200">- Switch to obs scm _service</changelog>
  <changelog author="Martin Pluskal mpluskal@suse.com" date="1621512000">- Update to version 21.03.00:
  * uefirtvariable: fix memory leak
  * acpi: refactor by fwts_acpi_reserved_type_check
  * acpi: refactor by fwts_acpi_structure_range_check
  * uefirtauthvar: check variable runtime services supported before testing (LP: #1913351)
  * uefirtvariable: check variable runtime services supported before testing (LP: #1913351)
  * uefirtmisc: check misc runtime services supported before testing (LP: #1913351)
  * uefirttime: check time services supported before testing (LP: #1913351)
  * acpi: spcr: accept baud rate 0x0 as a preconfigured state
  * fwts-test: sync up with PMTT rev 2 changes
  * acpi: pmtt: update PMTT to revision 2 (mantis 1975)</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1621857600">- Update to version 21.05.00:
  * lib: fwts_version.h - update to V21.05.00
  * debian: update changelog
  * auto-packager:mkpackage.sh: add impish
  * fwts-test: sync up with dbgp changes
  * acpi: dbgp/spmi: check space ids by fwts_acpi_space_id
  * acpiinfo: update ACPI 6.4 vs. ACPICA versions
  * lib: acpi: fix incorrect actual vs. struct length outputs
  * acpi: shorten helper function names by removing "check"
  * lib: acpi: unify naming style by removing "ACPI"
  * fwts-test: sync up with PMTT refactoring changes
  * acpi: refactor length check by fwts_acpi_structure_length_check
  * acpi: refactor zero length by fwts_acpi_structure_length_zero_check</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1624363200">- Update to version 21.06.00:
  * lib: fwts_version.h - update to V21.06.00
  * debian: update changelog
  * fwts_acpi_tables: memcpy 4 char ACPI table name
  * Remove complex disabling of ACPI for non-ACPI targets
  * Debian: move source lintian overrides file to source
  * Add lintian overrides for ldconfig trigger warning
  * Debian: control: update Standards-Version to 4.1.0
  * Debian: update compat level to 9
  * Debian: add Rules-Requires-Root field to control file
  * Debian: add project Homepage field to control file
  * debian/copyright: use secure https url specifier
  * Debian: remove spaces at end of lines of control file
  * Debian: remove spaces at end of lines of changelong
  * auto-packager: mkpackage.sh: remove xenial
  * live-image: add "TPM tests" to root menu
  * live-image: add utils tests to "Selected" menu
  * tpmevlog: add to batch tests
  * klog.json: check IRQ requests on irqchip</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1628078400">- Update to version 21.07.00:
  * ACPICA: Update to version 20210730
  * uefirttime: Fix incorrect error messages for invalid time test
  * fwts-test: sync up with updates in fwts_wmi_known_guids
  * acpi/wmi: update WMI known GUIDs from Linux kernel 5.14-rc1
  * sbbr: remove pm_file test (not required in BBR 1.0)
  * lib: fwts_version.h - update to V21.07.00
  * debian: update changelog
  * auto-packager: mkpackage.sh: remove groovy
  * uefirttime: add advice for the timezone 2047 failure (LP: #1933503)
  * fwts-test: sync up with DBG2 changes from BSA updates
  * fwts_acpi_tables: skip FACS warning for reduced hardware
  * acpi: method: Make _AEI test optional for SBBR
  * acpi: dbg2: Allow 16550 compatible serial port in DBG2
  * acpi: method: Make method_test_ADR() optional
  * sbbr: adjust signature name for MADT
  * sbbr: remove SSDT from mandatory list
  * sbbr: acpitables: add new recommended tables
  * acpi: acpitables: add advices for table revision tests</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1629892800">- Update to version 21.08.00:
  * lib: fwts_version.h - update to V21.08.00
  * debian: update changelog
  * ARM64 SMCCC firmware API tests
  * bios: smm: fix indentation
  * acpi: sbbr: refactor by fwts_get_fadt_version
  * lib: fwts_acpi_tables: add a function to get FADT versions
  * acpi: fadt: remove hard-coded FADT version
  * acpi: fadt: clarify comments of FACS and HW-reduced mode
  * acpi: dmar: add a warning when PCI device is not found</changelog>
  <changelog author="mpluskal@suse.com" date="1631620800">- Update to version 21.08.00:
  * Manual: update number of tests, date and remove double spaces
  * debian/control: Add device-tree-compiler as dependency for armel/armhf/arm64
  * fwts_firmware: Rework Devicetree firmware detection
  * Enable dt_sysinfo test for Power only</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1632916800">- Update to version 21.09.00:
  * snapcraft: Fix incorrect core20 library path
  * snapcraft: fix path to fwts
  * lib: fwts_version.h - update to V21.09.00
  * debian: update changelog
  * acpi: replace fwts_firmware_detect() by fw-&gt;firmware_type
  * lib: fwts_firmware: fix incorrect comments for fwts_firmware_detect
  * uefi: uefirtmisc: reduce scope of some variables
  * uefi: securebootcert: make some function arguments const
  * src/pci/smccc: reduce scope of variable ret
  * bios: smm: remove redundant variable n
  * acpi: iort: constify some function arguments
  * acpi: dmar: constify a pointer argument in acpi_parse_dev_scope
  * acpi: cstates: remove redundant null check on entry
  * smccc_test: fix missing ) in pr_info call
  * opal: clean up some coding style issues
  * opal: Fix a few memory leaks on asprint allocated buffers
  * acpi: s3power: clean up pedantic static analysis warnings
  * uefirtvariable: clean up pedantic static analysis warnings
  * opal: mem_info: clean up pedantic static analysis warnings
  * fwts_devicetree: clean up static analysis warning
  * fwts_acpi_tables: NULLify table pointers
  * snapcraft: update to use core20
  * lib: use &lt;poll.h&gt; rather than &lt;sys/poll.h&gt;</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1638532800">- Update to version 21.11.00:
  * lib: fwts_version.h - update to V21.11.00
  * debian: update changelog
  * auto-packager:mkpackage.sh: add jammy
  * fwts-test: sync up the adding sleep type for s2idle testing
  * s3: add sleep type setting for testing with s3 or s2idle
  * acpi: madt: De-initialise ACPICA core engine in case of error.
  * lib: fwts_smbios: fix loading SMBIOS table from uefi
  * acpi: uniqueid: skip comparison of _HID and _CID of the same device
  * ACPICA: Update to version 20210930</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1640088000">- Update to version 21.12.00:
  * lib: fwts_version.h - update to V21.12.00
  * debian: update changelog
  * dmicheck: skip scanning smbios in /dev/mem on aarch64
  * s3: increase s2idle_residency to u64 to avoid overflows
  * s3: fix incorrect error messages for s2idle_residency
  * acpi: uniqueid: clean up pedantic static analysis warnings
  * s4: clean up pedantic static analysis warnings</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1642593600">- Update build dependencies (add zlib)</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1644321600">- Update to version 22.01.00:
  * fwts-test: sync up the adding option for get next high monotonic count
  * uefirtmisc: add option to specify iterations get next high monitonic count
  * uefirtmisc: add checking the resources for testing
  * lib: fwts_version.h - update to V22.01.00
  * debian: update changelog
  * fwts_acpica: skip unneccessary null check
  * s3: use system suspend default if --s3-sleep-type is not used
  * tpmevlogdump: add supporting several new types for event log dumping
  * auto-packager: mkpackage.sh: remove hirsute
  * tpmevlog: add supporting several new types for event log checking
  * lib: fwts_tpm.h: add new type definition</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1648123200">- Update to version 22.03.00:
  * lib: fwts_version.h - update to V22.03.00
  * debian: update changelog
  * fwts-test: sync up the sdev checking secure access components
  * acpi: sdev: add checking secure access components
  * acpi: macf: report failures instead of just logging the errors
  * acpi/time: skip a number of TAD methods when _GCP[0] is clear
  * acpi:dmar: update the link of DMAR table
  * fwts-tests: update acpi dump data to be in sync with latest ACPICA
  * ACPICA: Update to version 20211217</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1653998400">- Update to version 22.05.00:
  * lib: fwts_version.h - update to V22.05.00
  * debian: update changelog
  * fwts-test: sync up IORT test with specification version E.d
  * acpi: mcfg: checking kernel lockdown when doing mmap PCI config space
  * auto-packager:mkpackage.sh: add kinetic
  * acpi: iort: update IORT test to specification version E.d
  * Update copyright year to 2022
  * acpi: iort: update the IORT node dump
  * acpi: iort: update IORT node revision check
  * ACPICA: Update to version 20220331</changelog>
</package>
<package pkgid="4bffeea78c36a71850dcbcad16b9b5c53f49fc8860845cafd0834913d8c98043" name="fwts" arch="aarch64">
  <version epoch="0" ver="22.07.00" rel="bp154.2.6.1"/>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1608292800">- Update to version 20.12.00:
  * See provided changelog for detailed list of changes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1610971200">- Add patch fixing bsc#1178442 bsc#1177992
  * acpi-pmtt-fix-infinite-loops-when-length-is-incorrectly-zero.diff</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1611316800">- Update to version 21.01.00:
  * See provided changelog for detailed list of changes
- Drop upstreamed patch:
  * acpi-pmtt-fix-infinite-loops-when-length-is-incorrectly-zero.diff</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1614254400">- Update to version 21.02.00:
  * See provided changelog for detailed list of changes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1618488000">- Update to version 21.03.00:
  * See provided changelog for detailed list of changes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1619611200">- Switch to obs scm _service</changelog>
  <changelog author="Martin Pluskal mpluskal@suse.com" date="1621512000">- Update to version 21.03.00:
  * uefirtvariable: fix memory leak
  * acpi: refactor by fwts_acpi_reserved_type_check
  * acpi: refactor by fwts_acpi_structure_range_check
  * uefirtauthvar: check variable runtime services supported before testing (LP: #1913351)
  * uefirtvariable: check variable runtime services supported before testing (LP: #1913351)
  * uefirtmisc: check misc runtime services supported before testing (LP: #1913351)
  * uefirttime: check time services supported before testing (LP: #1913351)
  * acpi: spcr: accept baud rate 0x0 as a preconfigured state
  * fwts-test: sync up with PMTT rev 2 changes
  * acpi: pmtt: update PMTT to revision 2 (mantis 1975)</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1621857600">- Update to version 21.05.00:
  * lib: fwts_version.h - update to V21.05.00
  * debian: update changelog
  * auto-packager:mkpackage.sh: add impish
  * fwts-test: sync up with dbgp changes
  * acpi: dbgp/spmi: check space ids by fwts_acpi_space_id
  * acpiinfo: update ACPI 6.4 vs. ACPICA versions
  * lib: acpi: fix incorrect actual vs. struct length outputs
  * acpi: shorten helper function names by removing "check"
  * lib: acpi: unify naming style by removing "ACPI"
  * fwts-test: sync up with PMTT refactoring changes
  * acpi: refactor length check by fwts_acpi_structure_length_check
  * acpi: refactor zero length by fwts_acpi_structure_length_zero_check</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1624363200">- Update to version 21.06.00:
  * lib: fwts_version.h - update to V21.06.00
  * debian: update changelog
  * fwts_acpi_tables: memcpy 4 char ACPI table name
  * Remove complex disabling of ACPI for non-ACPI targets
  * Debian: move source lintian overrides file to source
  * Add lintian overrides for ldconfig trigger warning
  * Debian: control: update Standards-Version to 4.1.0
  * Debian: update compat level to 9
  * Debian: add Rules-Requires-Root field to control file
  * Debian: add project Homepage field to control file
  * debian/copyright: use secure https url specifier
  * Debian: remove spaces at end of lines of control file
  * Debian: remove spaces at end of lines of changelong
  * auto-packager: mkpackage.sh: remove xenial
  * live-image: add "TPM tests" to root menu
  * live-image: add utils tests to "Selected" menu
  * tpmevlog: add to batch tests
  * klog.json: check IRQ requests on irqchip</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1628078400">- Update to version 21.07.00:
  * ACPICA: Update to version 20210730
  * uefirttime: Fix incorrect error messages for invalid time test
  * fwts-test: sync up with updates in fwts_wmi_known_guids
  * acpi/wmi: update WMI known GUIDs from Linux kernel 5.14-rc1
  * sbbr: remove pm_file test (not required in BBR 1.0)
  * lib: fwts_version.h - update to V21.07.00
  * debian: update changelog
  * auto-packager: mkpackage.sh: remove groovy
  * uefirttime: add advice for the timezone 2047 failure (LP: #1933503)
  * fwts-test: sync up with DBG2 changes from BSA updates
  * fwts_acpi_tables: skip FACS warning for reduced hardware
  * acpi: method: Make _AEI test optional for SBBR
  * acpi: dbg2: Allow 16550 compatible serial port in DBG2
  * acpi: method: Make method_test_ADR() optional
  * sbbr: adjust signature name for MADT
  * sbbr: remove SSDT from mandatory list
  * sbbr: acpitables: add new recommended tables
  * acpi: acpitables: add advices for table revision tests</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1629892800">- Update to version 21.08.00:
  * lib: fwts_version.h - update to V21.08.00
  * debian: update changelog
  * ARM64 SMCCC firmware API tests
  * bios: smm: fix indentation
  * acpi: sbbr: refactor by fwts_get_fadt_version
  * lib: fwts_acpi_tables: add a function to get FADT versions
  * acpi: fadt: remove hard-coded FADT version
  * acpi: fadt: clarify comments of FACS and HW-reduced mode
  * acpi: dmar: add a warning when PCI device is not found</changelog>
  <changelog author="mpluskal@suse.com" date="1631620800">- Update to version 21.08.00:
  * Manual: update number of tests, date and remove double spaces
  * debian/control: Add device-tree-compiler as dependency for armel/armhf/arm64
  * fwts_firmware: Rework Devicetree firmware detection
  * Enable dt_sysinfo test for Power only</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1632916800">- Update to version 21.09.00:
  * snapcraft: Fix incorrect core20 library path
  * snapcraft: fix path to fwts
  * lib: fwts_version.h - update to V21.09.00
  * debian: update changelog
  * acpi: replace fwts_firmware_detect() by fw-&gt;firmware_type
  * lib: fwts_firmware: fix incorrect comments for fwts_firmware_detect
  * uefi: uefirtmisc: reduce scope of some variables
  * uefi: securebootcert: make some function arguments const
  * src/pci/smccc: reduce scope of variable ret
  * bios: smm: remove redundant variable n
  * acpi: iort: constify some function arguments
  * acpi: dmar: constify a pointer argument in acpi_parse_dev_scope
  * acpi: cstates: remove redundant null check on entry
  * smccc_test: fix missing ) in pr_info call
  * opal: clean up some coding style issues
  * opal: Fix a few memory leaks on asprint allocated buffers
  * acpi: s3power: clean up pedantic static analysis warnings
  * uefirtvariable: clean up pedantic static analysis warnings
  * opal: mem_info: clean up pedantic static analysis warnings
  * fwts_devicetree: clean up static analysis warning
  * fwts_acpi_tables: NULLify table pointers
  * snapcraft: update to use core20
  * lib: use &lt;poll.h&gt; rather than &lt;sys/poll.h&gt;</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1638532800">- Update to version 21.11.00:
  * lib: fwts_version.h - update to V21.11.00
  * debian: update changelog
  * auto-packager:mkpackage.sh: add jammy
  * fwts-test: sync up the adding sleep type for s2idle testing
  * s3: add sleep type setting for testing with s3 or s2idle
  * acpi: madt: De-initialise ACPICA core engine in case of error.
  * lib: fwts_smbios: fix loading SMBIOS table from uefi
  * acpi: uniqueid: skip comparison of _HID and _CID of the same device
  * ACPICA: Update to version 20210930</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1640088000">- Update to version 21.12.00:
  * lib: fwts_version.h - update to V21.12.00
  * debian: update changelog
  * dmicheck: skip scanning smbios in /dev/mem on aarch64
  * s3: increase s2idle_residency to u64 to avoid overflows
  * s3: fix incorrect error messages for s2idle_residency
  * acpi: uniqueid: clean up pedantic static analysis warnings
  * s4: clean up pedantic static analysis warnings</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1642593600">- Update build dependencies (add zlib)</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1644321600">- Update to version 22.01.00:
  * fwts-test: sync up the adding option for get next high monotonic count
  * uefirtmisc: add option to specify iterations get next high monitonic count
  * uefirtmisc: add checking the resources for testing
  * lib: fwts_version.h - update to V22.01.00
  * debian: update changelog
  * fwts_acpica: skip unneccessary null check
  * s3: use system suspend default if --s3-sleep-type is not used
  * tpmevlogdump: add supporting several new types for event log dumping
  * auto-packager: mkpackage.sh: remove hirsute
  * tpmevlog: add supporting several new types for event log checking
  * lib: fwts_tpm.h: add new type definition</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1648123200">- Update to version 22.03.00:
  * lib: fwts_version.h - update to V22.03.00
  * debian: update changelog
  * fwts-test: sync up the sdev checking secure access components
  * acpi: sdev: add checking secure access components
  * acpi: macf: report failures instead of just logging the errors
  * acpi/time: skip a number of TAD methods when _GCP[0] is clear
  * acpi:dmar: update the link of DMAR table
  * fwts-tests: update acpi dump data to be in sync with latest ACPICA
  * ACPICA: Update to version 20211217</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1653998400">- Update to version 22.05.00:
  * lib: fwts_version.h - update to V22.05.00
  * debian: update changelog
  * fwts-test: sync up IORT test with specification version E.d
  * acpi: mcfg: checking kernel lockdown when doing mmap PCI config space
  * auto-packager:mkpackage.sh: add kinetic
  * acpi: iort: update IORT test to specification version E.d
  * Update copyright year to 2022
  * acpi: iort: update the IORT node dump
  * acpi: iort: update IORT node revision check
  * ACPICA: Update to version 20220331</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1659700800">- Update to version 22.07.00:
  * lib: fwts_version.h - update to V22.07.00
  * debian: update changelog
  * auto-packager: mkpackage.sh: remove impish
  * fwts-test: sync up with asf verbose dump
  * acpi: asf: enable verbose output
  * fwts-test: sync up the remove of ASF minimun watchdog reset value
  * acpi: asf: remove the checking of minmun watchdog reset value 0
  * fwts-test: sync up the fix of pmtt wrong table label
  * acpi: pmtt: fix the wrong table label
  * dmicheck: update the processor upgrade field for type 4
  * dmicheck: update for supporting DMI version to 3.5
  * dmicheck: add Processor Architecture Types check for type 44
  * build: Improve linking</changelog>
</package>
<package pkgid="ceca5058e5d58a309a07a40bdd56b04d0df2ded7ebf62070e70a0058186b5d90" name="fwts" arch="i586">
  <version epoch="0" ver="22.07.00" rel="bp154.2.6.1"/>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1608292800">- Update to version 20.12.00:
  * See provided changelog for detailed list of changes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1610971200">- Add patch fixing bsc#1178442 bsc#1177992
  * acpi-pmtt-fix-infinite-loops-when-length-is-incorrectly-zero.diff</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1611316800">- Update to version 21.01.00:
  * See provided changelog for detailed list of changes
- Drop upstreamed patch:
  * acpi-pmtt-fix-infinite-loops-when-length-is-incorrectly-zero.diff</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1614254400">- Update to version 21.02.00:
  * See provided changelog for detailed list of changes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1618488000">- Update to version 21.03.00:
  * See provided changelog for detailed list of changes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1619611200">- Switch to obs scm _service</changelog>
  <changelog author="Martin Pluskal mpluskal@suse.com" date="1621512000">- Update to version 21.03.00:
  * uefirtvariable: fix memory leak
  * acpi: refactor by fwts_acpi_reserved_type_check
  * acpi: refactor by fwts_acpi_structure_range_check
  * uefirtauthvar: check variable runtime services supported before testing (LP: #1913351)
  * uefirtvariable: check variable runtime services supported before testing (LP: #1913351)
  * uefirtmisc: check misc runtime services supported before testing (LP: #1913351)
  * uefirttime: check time services supported before testing (LP: #1913351)
  * acpi: spcr: accept baud rate 0x0 as a preconfigured state
  * fwts-test: sync up with PMTT rev 2 changes
  * acpi: pmtt: update PMTT to revision 2 (mantis 1975)</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1621857600">- Update to version 21.05.00:
  * lib: fwts_version.h - update to V21.05.00
  * debian: update changelog
  * auto-packager:mkpackage.sh: add impish
  * fwts-test: sync up with dbgp changes
  * acpi: dbgp/spmi: check space ids by fwts_acpi_space_id
  * acpiinfo: update ACPI 6.4 vs. ACPICA versions
  * lib: acpi: fix incorrect actual vs. struct length outputs
  * acpi: shorten helper function names by removing "check"
  * lib: acpi: unify naming style by removing "ACPI"
  * fwts-test: sync up with PMTT refactoring changes
  * acpi: refactor length check by fwts_acpi_structure_length_check
  * acpi: refactor zero length by fwts_acpi_structure_length_zero_check</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1624363200">- Update to version 21.06.00:
  * lib: fwts_version.h - update to V21.06.00
  * debian: update changelog
  * fwts_acpi_tables: memcpy 4 char ACPI table name
  * Remove complex disabling of ACPI for non-ACPI targets
  * Debian: move source lintian overrides file to source
  * Add lintian overrides for ldconfig trigger warning
  * Debian: control: update Standards-Version to 4.1.0
  * Debian: update compat level to 9
  * Debian: add Rules-Requires-Root field to control file
  * Debian: add project Homepage field to control file
  * debian/copyright: use secure https url specifier
  * Debian: remove spaces at end of lines of control file
  * Debian: remove spaces at end of lines of changelong
  * auto-packager: mkpackage.sh: remove xenial
  * live-image: add "TPM tests" to root menu
  * live-image: add utils tests to "Selected" menu
  * tpmevlog: add to batch tests
  * klog.json: check IRQ requests on irqchip</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1628078400">- Update to version 21.07.00:
  * ACPICA: Update to version 20210730
  * uefirttime: Fix incorrect error messages for invalid time test
  * fwts-test: sync up with updates in fwts_wmi_known_guids
  * acpi/wmi: update WMI known GUIDs from Linux kernel 5.14-rc1
  * sbbr: remove pm_file test (not required in BBR 1.0)
  * lib: fwts_version.h - update to V21.07.00
  * debian: update changelog
  * auto-packager: mkpackage.sh: remove groovy
  * uefirttime: add advice for the timezone 2047 failure (LP: #1933503)
  * fwts-test: sync up with DBG2 changes from BSA updates
  * fwts_acpi_tables: skip FACS warning for reduced hardware
  * acpi: method: Make _AEI test optional for SBBR
  * acpi: dbg2: Allow 16550 compatible serial port in DBG2
  * acpi: method: Make method_test_ADR() optional
  * sbbr: adjust signature name for MADT
  * sbbr: remove SSDT from mandatory list
  * sbbr: acpitables: add new recommended tables
  * acpi: acpitables: add advices for table revision tests</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1629892800">- Update to version 21.08.00:
  * lib: fwts_version.h - update to V21.08.00
  * debian: update changelog
  * ARM64 SMCCC firmware API tests
  * bios: smm: fix indentation
  * acpi: sbbr: refactor by fwts_get_fadt_version
  * lib: fwts_acpi_tables: add a function to get FADT versions
  * acpi: fadt: remove hard-coded FADT version
  * acpi: fadt: clarify comments of FACS and HW-reduced mode
  * acpi: dmar: add a warning when PCI device is not found</changelog>
  <changelog author="mpluskal@suse.com" date="1631620800">- Update to version 21.08.00:
  * Manual: update number of tests, date and remove double spaces
  * debian/control: Add device-tree-compiler as dependency for armel/armhf/arm64
  * fwts_firmware: Rework Devicetree firmware detection
  * Enable dt_sysinfo test for Power only</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1632916800">- Update to version 21.09.00:
  * snapcraft: Fix incorrect core20 library path
  * snapcraft: fix path to fwts
  * lib: fwts_version.h - update to V21.09.00
  * debian: update changelog
  * acpi: replace fwts_firmware_detect() by fw-&gt;firmware_type
  * lib: fwts_firmware: fix incorrect comments for fwts_firmware_detect
  * uefi: uefirtmisc: reduce scope of some variables
  * uefi: securebootcert: make some function arguments const
  * src/pci/smccc: reduce scope of variable ret
  * bios: smm: remove redundant variable n
  * acpi: iort: constify some function arguments
  * acpi: dmar: constify a pointer argument in acpi_parse_dev_scope
  * acpi: cstates: remove redundant null check on entry
  * smccc_test: fix missing ) in pr_info call
  * opal: clean up some coding style issues
  * opal: Fix a few memory leaks on asprint allocated buffers
  * acpi: s3power: clean up pedantic static analysis warnings
  * uefirtvariable: clean up pedantic static analysis warnings
  * opal: mem_info: clean up pedantic static analysis warnings
  * fwts_devicetree: clean up static analysis warning
  * fwts_acpi_tables: NULLify table pointers
  * snapcraft: update to use core20
  * lib: use &lt;poll.h&gt; rather than &lt;sys/poll.h&gt;</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1638532800">- Update to version 21.11.00:
  * lib: fwts_version.h - update to V21.11.00
  * debian: update changelog
  * auto-packager:mkpackage.sh: add jammy
  * fwts-test: sync up the adding sleep type for s2idle testing
  * s3: add sleep type setting for testing with s3 or s2idle
  * acpi: madt: De-initialise ACPICA core engine in case of error.
  * lib: fwts_smbios: fix loading SMBIOS table from uefi
  * acpi: uniqueid: skip comparison of _HID and _CID of the same device
  * ACPICA: Update to version 20210930</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1640088000">- Update to version 21.12.00:
  * lib: fwts_version.h - update to V21.12.00
  * debian: update changelog
  * dmicheck: skip scanning smbios in /dev/mem on aarch64
  * s3: increase s2idle_residency to u64 to avoid overflows
  * s3: fix incorrect error messages for s2idle_residency
  * acpi: uniqueid: clean up pedantic static analysis warnings
  * s4: clean up pedantic static analysis warnings</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1642593600">- Update build dependencies (add zlib)</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1644321600">- Update to version 22.01.00:
  * fwts-test: sync up the adding option for get next high monotonic count
  * uefirtmisc: add option to specify iterations get next high monitonic count
  * uefirtmisc: add checking the resources for testing
  * lib: fwts_version.h - update to V22.01.00
  * debian: update changelog
  * fwts_acpica: skip unneccessary null check
  * s3: use system suspend default if --s3-sleep-type is not used
  * tpmevlogdump: add supporting several new types for event log dumping
  * auto-packager: mkpackage.sh: remove hirsute
  * tpmevlog: add supporting several new types for event log checking
  * lib: fwts_tpm.h: add new type definition</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1648123200">- Update to version 22.03.00:
  * lib: fwts_version.h - update to V22.03.00
  * debian: update changelog
  * fwts-test: sync up the sdev checking secure access components
  * acpi: sdev: add checking secure access components
  * acpi: macf: report failures instead of just logging the errors
  * acpi/time: skip a number of TAD methods when _GCP[0] is clear
  * acpi:dmar: update the link of DMAR table
  * fwts-tests: update acpi dump data to be in sync with latest ACPICA
  * ACPICA: Update to version 20211217</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1653998400">- Update to version 22.05.00:
  * lib: fwts_version.h - update to V22.05.00
  * debian: update changelog
  * fwts-test: sync up IORT test with specification version E.d
  * acpi: mcfg: checking kernel lockdown when doing mmap PCI config space
  * auto-packager:mkpackage.sh: add kinetic
  * acpi: iort: update IORT test to specification version E.d
  * Update copyright year to 2022
  * acpi: iort: update the IORT node dump
  * acpi: iort: update IORT node revision check
  * ACPICA: Update to version 20220331</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1659700800">- Update to version 22.07.00:
  * lib: fwts_version.h - update to V22.07.00
  * debian: update changelog
  * auto-packager: mkpackage.sh: remove impish
  * fwts-test: sync up with asf verbose dump
  * acpi: asf: enable verbose output
  * fwts-test: sync up the remove of ASF minimun watchdog reset value
  * acpi: asf: remove the checking of minmun watchdog reset value 0
  * fwts-test: sync up the fix of pmtt wrong table label
  * acpi: pmtt: fix the wrong table label
  * dmicheck: update the processor upgrade field for type 4
  * dmicheck: update for supporting DMI version to 3.5
  * dmicheck: add Processor Architecture Types check for type 44
  * build: Improve linking</changelog>
</package>
<package pkgid="bde118846afe1494bfb9e4d0ec404c73469c5f9ca3e1a6309a543437aa754eac" name="fwts" arch="src">
  <version epoch="0" ver="22.07.00" rel="bp154.2.6.1"/>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1608292800">- Update to version 20.12.00:
  * See provided changelog for detailed list of changes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1610971200">- Add patch fixing bsc#1178442 bsc#1177992
  * acpi-pmtt-fix-infinite-loops-when-length-is-incorrectly-zero.diff</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1611316800">- Update to version 21.01.00:
  * See provided changelog for detailed list of changes
- Drop upstreamed patch:
  * acpi-pmtt-fix-infinite-loops-when-length-is-incorrectly-zero.diff</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1614254400">- Update to version 21.02.00:
  * See provided changelog for detailed list of changes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1618488000">- Update to version 21.03.00:
  * See provided changelog for detailed list of changes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1619611200">- Switch to obs scm _service</changelog>
  <changelog author="Martin Pluskal mpluskal@suse.com" date="1621512000">- Update to version 21.03.00:
  * uefirtvariable: fix memory leak
  * acpi: refactor by fwts_acpi_reserved_type_check
  * acpi: refactor by fwts_acpi_structure_range_check
  * uefirtauthvar: check variable runtime services supported before testing (LP: #1913351)
  * uefirtvariable: check variable runtime services supported before testing (LP: #1913351)
  * uefirtmisc: check misc runtime services supported before testing (LP: #1913351)
  * uefirttime: check time services supported before testing (LP: #1913351)
  * acpi: spcr: accept baud rate 0x0 as a preconfigured state
  * fwts-test: sync up with PMTT rev 2 changes
  * acpi: pmtt: update PMTT to revision 2 (mantis 1975)</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1621857600">- Update to version 21.05.00:
  * lib: fwts_version.h - update to V21.05.00
  * debian: update changelog
  * auto-packager:mkpackage.sh: add impish
  * fwts-test: sync up with dbgp changes
  * acpi: dbgp/spmi: check space ids by fwts_acpi_space_id
  * acpiinfo: update ACPI 6.4 vs. ACPICA versions
  * lib: acpi: fix incorrect actual vs. struct length outputs
  * acpi: shorten helper function names by removing "check"
  * lib: acpi: unify naming style by removing "ACPI"
  * fwts-test: sync up with PMTT refactoring changes
  * acpi: refactor length check by fwts_acpi_structure_length_check
  * acpi: refactor zero length by fwts_acpi_structure_length_zero_check</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1624363200">- Update to version 21.06.00:
  * lib: fwts_version.h - update to V21.06.00
  * debian: update changelog
  * fwts_acpi_tables: memcpy 4 char ACPI table name
  * Remove complex disabling of ACPI for non-ACPI targets
  * Debian: move source lintian overrides file to source
  * Add lintian overrides for ldconfig trigger warning
  * Debian: control: update Standards-Version to 4.1.0
  * Debian: update compat level to 9
  * Debian: add Rules-Requires-Root field to control file
  * Debian: add project Homepage field to control file
  * debian/copyright: use secure https url specifier
  * Debian: remove spaces at end of lines of control file
  * Debian: remove spaces at end of lines of changelong
  * auto-packager: mkpackage.sh: remove xenial
  * live-image: add "TPM tests" to root menu
  * live-image: add utils tests to "Selected" menu
  * tpmevlog: add to batch tests
  * klog.json: check IRQ requests on irqchip</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1628078400">- Update to version 21.07.00:
  * ACPICA: Update to version 20210730
  * uefirttime: Fix incorrect error messages for invalid time test
  * fwts-test: sync up with updates in fwts_wmi_known_guids
  * acpi/wmi: update WMI known GUIDs from Linux kernel 5.14-rc1
  * sbbr: remove pm_file test (not required in BBR 1.0)
  * lib: fwts_version.h - update to V21.07.00
  * debian: update changelog
  * auto-packager: mkpackage.sh: remove groovy
  * uefirttime: add advice for the timezone 2047 failure (LP: #1933503)
  * fwts-test: sync up with DBG2 changes from BSA updates
  * fwts_acpi_tables: skip FACS warning for reduced hardware
  * acpi: method: Make _AEI test optional for SBBR
  * acpi: dbg2: Allow 16550 compatible serial port in DBG2
  * acpi: method: Make method_test_ADR() optional
  * sbbr: adjust signature name for MADT
  * sbbr: remove SSDT from mandatory list
  * sbbr: acpitables: add new recommended tables
  * acpi: acpitables: add advices for table revision tests</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1629892800">- Update to version 21.08.00:
  * lib: fwts_version.h - update to V21.08.00
  * debian: update changelog
  * ARM64 SMCCC firmware API tests
  * bios: smm: fix indentation
  * acpi: sbbr: refactor by fwts_get_fadt_version
  * lib: fwts_acpi_tables: add a function to get FADT versions
  * acpi: fadt: remove hard-coded FADT version
  * acpi: fadt: clarify comments of FACS and HW-reduced mode
  * acpi: dmar: add a warning when PCI device is not found</changelog>
  <changelog author="mpluskal@suse.com" date="1631620800">- Update to version 21.08.00:
  * Manual: update number of tests, date and remove double spaces
  * debian/control: Add device-tree-compiler as dependency for armel/armhf/arm64
  * fwts_firmware: Rework Devicetree firmware detection
  * Enable dt_sysinfo test for Power only</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1632916800">- Update to version 21.09.00:
  * snapcraft: Fix incorrect core20 library path
  * snapcraft: fix path to fwts
  * lib: fwts_version.h - update to V21.09.00
  * debian: update changelog
  * acpi: replace fwts_firmware_detect() by fw-&gt;firmware_type
  * lib: fwts_firmware: fix incorrect comments for fwts_firmware_detect
  * uefi: uefirtmisc: reduce scope of some variables
  * uefi: securebootcert: make some function arguments const
  * src/pci/smccc: reduce scope of variable ret
  * bios: smm: remove redundant variable n
  * acpi: iort: constify some function arguments
  * acpi: dmar: constify a pointer argument in acpi_parse_dev_scope
  * acpi: cstates: remove redundant null check on entry
  * smccc_test: fix missing ) in pr_info call
  * opal: clean up some coding style issues
  * opal: Fix a few memory leaks on asprint allocated buffers
  * acpi: s3power: clean up pedantic static analysis warnings
  * uefirtvariable: clean up pedantic static analysis warnings
  * opal: mem_info: clean up pedantic static analysis warnings
  * fwts_devicetree: clean up static analysis warning
  * fwts_acpi_tables: NULLify table pointers
  * snapcraft: update to use core20
  * lib: use &lt;poll.h&gt; rather than &lt;sys/poll.h&gt;</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1638532800">- Update to version 21.11.00:
  * lib: fwts_version.h - update to V21.11.00
  * debian: update changelog
  * auto-packager:mkpackage.sh: add jammy
  * fwts-test: sync up the adding sleep type for s2idle testing
  * s3: add sleep type setting for testing with s3 or s2idle
  * acpi: madt: De-initialise ACPICA core engine in case of error.
  * lib: fwts_smbios: fix loading SMBIOS table from uefi
  * acpi: uniqueid: skip comparison of _HID and _CID of the same device
  * ACPICA: Update to version 20210930</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1640088000">- Update to version 21.12.00:
  * lib: fwts_version.h - update to V21.12.00
  * debian: update changelog
  * dmicheck: skip scanning smbios in /dev/mem on aarch64
  * s3: increase s2idle_residency to u64 to avoid overflows
  * s3: fix incorrect error messages for s2idle_residency
  * acpi: uniqueid: clean up pedantic static analysis warnings
  * s4: clean up pedantic static analysis warnings</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1642593600">- Update build dependencies (add zlib)</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1644321600">- Update to version 22.01.00:
  * fwts-test: sync up the adding option for get next high monotonic count
  * uefirtmisc: add option to specify iterations get next high monitonic count
  * uefirtmisc: add checking the resources for testing
  * lib: fwts_version.h - update to V22.01.00
  * debian: update changelog
  * fwts_acpica: skip unneccessary null check
  * s3: use system suspend default if --s3-sleep-type is not used
  * tpmevlogdump: add supporting several new types for event log dumping
  * auto-packager: mkpackage.sh: remove hirsute
  * tpmevlog: add supporting several new types for event log checking
  * lib: fwts_tpm.h: add new type definition</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1648123200">- Update to version 22.03.00:
  * lib: fwts_version.h - update to V22.03.00
  * debian: update changelog
  * fwts-test: sync up the sdev checking secure access components
  * acpi: sdev: add checking secure access components
  * acpi: macf: report failures instead of just logging the errors
  * acpi/time: skip a number of TAD methods when _GCP[0] is clear
  * acpi:dmar: update the link of DMAR table
  * fwts-tests: update acpi dump data to be in sync with latest ACPICA
  * ACPICA: Update to version 20211217</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1653998400">- Update to version 22.05.00:
  * lib: fwts_version.h - update to V22.05.00
  * debian: update changelog
  * fwts-test: sync up IORT test with specification version E.d
  * acpi: mcfg: checking kernel lockdown when doing mmap PCI config space
  * auto-packager:mkpackage.sh: add kinetic
  * acpi: iort: update IORT test to specification version E.d
  * Update copyright year to 2022
  * acpi: iort: update the IORT node dump
  * acpi: iort: update IORT node revision check
  * ACPICA: Update to version 20220331</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1659700800">- Update to version 22.07.00:
  * lib: fwts_version.h - update to V22.07.00
  * debian: update changelog
  * auto-packager: mkpackage.sh: remove impish
  * fwts-test: sync up with asf verbose dump
  * acpi: asf: enable verbose output
  * fwts-test: sync up the remove of ASF minimun watchdog reset value
  * acpi: asf: remove the checking of minmun watchdog reset value 0
  * fwts-test: sync up the fix of pmtt wrong table label
  * acpi: pmtt: fix the wrong table label
  * dmicheck: update the processor upgrade field for type 4
  * dmicheck: update for supporting DMI version to 3.5
  * dmicheck: add Processor Architecture Types check for type 44
  * build: Improve linking</changelog>
</package>
<package pkgid="2dd8928bf21779db42a88f700ae9e801d25b1e8b67d52742a9356a287669bf42" name="fwts" arch="x86_64">
  <version epoch="0" ver="22.07.00" rel="bp154.2.6.1"/>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1608292800">- Update to version 20.12.00:
  * See provided changelog for detailed list of changes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1610971200">- Add patch fixing bsc#1178442 bsc#1177992
  * acpi-pmtt-fix-infinite-loops-when-length-is-incorrectly-zero.diff</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1611316800">- Update to version 21.01.00:
  * See provided changelog for detailed list of changes
- Drop upstreamed patch:
  * acpi-pmtt-fix-infinite-loops-when-length-is-incorrectly-zero.diff</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1614254400">- Update to version 21.02.00:
  * See provided changelog for detailed list of changes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1618488000">- Update to version 21.03.00:
  * See provided changelog for detailed list of changes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1619611200">- Switch to obs scm _service</changelog>
  <changelog author="Martin Pluskal mpluskal@suse.com" date="1621512000">- Update to version 21.03.00:
  * uefirtvariable: fix memory leak
  * acpi: refactor by fwts_acpi_reserved_type_check
  * acpi: refactor by fwts_acpi_structure_range_check
  * uefirtauthvar: check variable runtime services supported before testing (LP: #1913351)
  * uefirtvariable: check variable runtime services supported before testing (LP: #1913351)
  * uefirtmisc: check misc runtime services supported before testing (LP: #1913351)
  * uefirttime: check time services supported before testing (LP: #1913351)
  * acpi: spcr: accept baud rate 0x0 as a preconfigured state
  * fwts-test: sync up with PMTT rev 2 changes
  * acpi: pmtt: update PMTT to revision 2 (mantis 1975)</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1621857600">- Update to version 21.05.00:
  * lib: fwts_version.h - update to V21.05.00
  * debian: update changelog
  * auto-packager:mkpackage.sh: add impish
  * fwts-test: sync up with dbgp changes
  * acpi: dbgp/spmi: check space ids by fwts_acpi_space_id
  * acpiinfo: update ACPI 6.4 vs. ACPICA versions
  * lib: acpi: fix incorrect actual vs. struct length outputs
  * acpi: shorten helper function names by removing "check"
  * lib: acpi: unify naming style by removing "ACPI"
  * fwts-test: sync up with PMTT refactoring changes
  * acpi: refactor length check by fwts_acpi_structure_length_check
  * acpi: refactor zero length by fwts_acpi_structure_length_zero_check</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1624363200">- Update to version 21.06.00:
  * lib: fwts_version.h - update to V21.06.00
  * debian: update changelog
  * fwts_acpi_tables: memcpy 4 char ACPI table name
  * Remove complex disabling of ACPI for non-ACPI targets
  * Debian: move source lintian overrides file to source
  * Add lintian overrides for ldconfig trigger warning
  * Debian: control: update Standards-Version to 4.1.0
  * Debian: update compat level to 9
  * Debian: add Rules-Requires-Root field to control file
  * Debian: add project Homepage field to control file
  * debian/copyright: use secure https url specifier
  * Debian: remove spaces at end of lines of control file
  * Debian: remove spaces at end of lines of changelong
  * auto-packager: mkpackage.sh: remove xenial
  * live-image: add "TPM tests" to root menu
  * live-image: add utils tests to "Selected" menu
  * tpmevlog: add to batch tests
  * klog.json: check IRQ requests on irqchip</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1628078400">- Update to version 21.07.00:
  * ACPICA: Update to version 20210730
  * uefirttime: Fix incorrect error messages for invalid time test
  * fwts-test: sync up with updates in fwts_wmi_known_guids
  * acpi/wmi: update WMI known GUIDs from Linux kernel 5.14-rc1
  * sbbr: remove pm_file test (not required in BBR 1.0)
  * lib: fwts_version.h - update to V21.07.00
  * debian: update changelog
  * auto-packager: mkpackage.sh: remove groovy
  * uefirttime: add advice for the timezone 2047 failure (LP: #1933503)
  * fwts-test: sync up with DBG2 changes from BSA updates
  * fwts_acpi_tables: skip FACS warning for reduced hardware
  * acpi: method: Make _AEI test optional for SBBR
  * acpi: dbg2: Allow 16550 compatible serial port in DBG2
  * acpi: method: Make method_test_ADR() optional
  * sbbr: adjust signature name for MADT
  * sbbr: remove SSDT from mandatory list
  * sbbr: acpitables: add new recommended tables
  * acpi: acpitables: add advices for table revision tests</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1629892800">- Update to version 21.08.00:
  * lib: fwts_version.h - update to V21.08.00
  * debian: update changelog
  * ARM64 SMCCC firmware API tests
  * bios: smm: fix indentation
  * acpi: sbbr: refactor by fwts_get_fadt_version
  * lib: fwts_acpi_tables: add a function to get FADT versions
  * acpi: fadt: remove hard-coded FADT version
  * acpi: fadt: clarify comments of FACS and HW-reduced mode
  * acpi: dmar: add a warning when PCI device is not found</changelog>
  <changelog author="mpluskal@suse.com" date="1631620800">- Update to version 21.08.00:
  * Manual: update number of tests, date and remove double spaces
  * debian/control: Add device-tree-compiler as dependency for armel/armhf/arm64
  * fwts_firmware: Rework Devicetree firmware detection
  * Enable dt_sysinfo test for Power only</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1632916800">- Update to version 21.09.00:
  * snapcraft: Fix incorrect core20 library path
  * snapcraft: fix path to fwts
  * lib: fwts_version.h - update to V21.09.00
  * debian: update changelog
  * acpi: replace fwts_firmware_detect() by fw-&gt;firmware_type
  * lib: fwts_firmware: fix incorrect comments for fwts_firmware_detect
  * uefi: uefirtmisc: reduce scope of some variables
  * uefi: securebootcert: make some function arguments const
  * src/pci/smccc: reduce scope of variable ret
  * bios: smm: remove redundant variable n
  * acpi: iort: constify some function arguments
  * acpi: dmar: constify a pointer argument in acpi_parse_dev_scope
  * acpi: cstates: remove redundant null check on entry
  * smccc_test: fix missing ) in pr_info call
  * opal: clean up some coding style issues
  * opal: Fix a few memory leaks on asprint allocated buffers
  * acpi: s3power: clean up pedantic static analysis warnings
  * uefirtvariable: clean up pedantic static analysis warnings
  * opal: mem_info: clean up pedantic static analysis warnings
  * fwts_devicetree: clean up static analysis warning
  * fwts_acpi_tables: NULLify table pointers
  * snapcraft: update to use core20
  * lib: use &lt;poll.h&gt; rather than &lt;sys/poll.h&gt;</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1638532800">- Update to version 21.11.00:
  * lib: fwts_version.h - update to V21.11.00
  * debian: update changelog
  * auto-packager:mkpackage.sh: add jammy
  * fwts-test: sync up the adding sleep type for s2idle testing
  * s3: add sleep type setting for testing with s3 or s2idle
  * acpi: madt: De-initialise ACPICA core engine in case of error.
  * lib: fwts_smbios: fix loading SMBIOS table from uefi
  * acpi: uniqueid: skip comparison of _HID and _CID of the same device
  * ACPICA: Update to version 20210930</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1640088000">- Update to version 21.12.00:
  * lib: fwts_version.h - update to V21.12.00
  * debian: update changelog
  * dmicheck: skip scanning smbios in /dev/mem on aarch64
  * s3: increase s2idle_residency to u64 to avoid overflows
  * s3: fix incorrect error messages for s2idle_residency
  * acpi: uniqueid: clean up pedantic static analysis warnings
  * s4: clean up pedantic static analysis warnings</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1642593600">- Update build dependencies (add zlib)</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1644321600">- Update to version 22.01.00:
  * fwts-test: sync up the adding option for get next high monotonic count
  * uefirtmisc: add option to specify iterations get next high monitonic count
  * uefirtmisc: add checking the resources for testing
  * lib: fwts_version.h - update to V22.01.00
  * debian: update changelog
  * fwts_acpica: skip unneccessary null check
  * s3: use system suspend default if --s3-sleep-type is not used
  * tpmevlogdump: add supporting several new types for event log dumping
  * auto-packager: mkpackage.sh: remove hirsute
  * tpmevlog: add supporting several new types for event log checking
  * lib: fwts_tpm.h: add new type definition</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1648123200">- Update to version 22.03.00:
  * lib: fwts_version.h - update to V22.03.00
  * debian: update changelog
  * fwts-test: sync up the sdev checking secure access components
  * acpi: sdev: add checking secure access components
  * acpi: macf: report failures instead of just logging the errors
  * acpi/time: skip a number of TAD methods when _GCP[0] is clear
  * acpi:dmar: update the link of DMAR table
  * fwts-tests: update acpi dump data to be in sync with latest ACPICA
  * ACPICA: Update to version 20211217</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1653998400">- Update to version 22.05.00:
  * lib: fwts_version.h - update to V22.05.00
  * debian: update changelog
  * fwts-test: sync up IORT test with specification version E.d
  * acpi: mcfg: checking kernel lockdown when doing mmap PCI config space
  * auto-packager:mkpackage.sh: add kinetic
  * acpi: iort: update IORT test to specification version E.d
  * Update copyright year to 2022
  * acpi: iort: update the IORT node dump
  * acpi: iort: update IORT node revision check
  * ACPICA: Update to version 20220331</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1659700800">- Update to version 22.07.00:
  * lib: fwts_version.h - update to V22.07.00
  * debian: update changelog
  * auto-packager: mkpackage.sh: remove impish
  * fwts-test: sync up with asf verbose dump
  * acpi: asf: enable verbose output
  * fwts-test: sync up the remove of ASF minimun watchdog reset value
  * acpi: asf: remove the checking of minmun watchdog reset value 0
  * fwts-test: sync up the fix of pmtt wrong table label
  * acpi: pmtt: fix the wrong table label
  * dmicheck: update the processor upgrade field for type 4
  * dmicheck: update for supporting DMI version to 3.5
  * dmicheck: add Processor Architecture Types check for type 44
  * build: Improve linking</changelog>
</package>
<package pkgid="cc3ecfcc52fcf399d96f88f2b859b5b31454963bf579b6f55a46c8d594fd416a" name="fwts" arch="aarch64">
  <version epoch="0" ver="22.09.00" rel="bp154.2.9.1"/>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1610971200">- Add patch fixing bsc#1178442 bsc#1177992
  * acpi-pmtt-fix-infinite-loops-when-length-is-incorrectly-zero.diff</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1611316800">- Update to version 21.01.00:
  * See provided changelog for detailed list of changes
- Drop upstreamed patch:
  * acpi-pmtt-fix-infinite-loops-when-length-is-incorrectly-zero.diff</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1614254400">- Update to version 21.02.00:
  * See provided changelog for detailed list of changes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1618488000">- Update to version 21.03.00:
  * See provided changelog for detailed list of changes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1619611200">- Switch to obs scm _service</changelog>
  <changelog author="Martin Pluskal mpluskal@suse.com" date="1621512000">- Update to version 21.03.00:
  * uefirtvariable: fix memory leak
  * acpi: refactor by fwts_acpi_reserved_type_check
  * acpi: refactor by fwts_acpi_structure_range_check
  * uefirtauthvar: check variable runtime services supported before testing (LP: #1913351)
  * uefirtvariable: check variable runtime services supported before testing (LP: #1913351)
  * uefirtmisc: check misc runtime services supported before testing (LP: #1913351)
  * uefirttime: check time services supported before testing (LP: #1913351)
  * acpi: spcr: accept baud rate 0x0 as a preconfigured state
  * fwts-test: sync up with PMTT rev 2 changes
  * acpi: pmtt: update PMTT to revision 2 (mantis 1975)</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1621857600">- Update to version 21.05.00:
  * lib: fwts_version.h - update to V21.05.00
  * debian: update changelog
  * auto-packager:mkpackage.sh: add impish
  * fwts-test: sync up with dbgp changes
  * acpi: dbgp/spmi: check space ids by fwts_acpi_space_id
  * acpiinfo: update ACPI 6.4 vs. ACPICA versions
  * lib: acpi: fix incorrect actual vs. struct length outputs
  * acpi: shorten helper function names by removing "check"
  * lib: acpi: unify naming style by removing "ACPI"
  * fwts-test: sync up with PMTT refactoring changes
  * acpi: refactor length check by fwts_acpi_structure_length_check
  * acpi: refactor zero length by fwts_acpi_structure_length_zero_check</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1624363200">- Update to version 21.06.00:
  * lib: fwts_version.h - update to V21.06.00
  * debian: update changelog
  * fwts_acpi_tables: memcpy 4 char ACPI table name
  * Remove complex disabling of ACPI for non-ACPI targets
  * Debian: move source lintian overrides file to source
  * Add lintian overrides for ldconfig trigger warning
  * Debian: control: update Standards-Version to 4.1.0
  * Debian: update compat level to 9
  * Debian: add Rules-Requires-Root field to control file
  * Debian: add project Homepage field to control file
  * debian/copyright: use secure https url specifier
  * Debian: remove spaces at end of lines of control file
  * Debian: remove spaces at end of lines of changelong
  * auto-packager: mkpackage.sh: remove xenial
  * live-image: add "TPM tests" to root menu
  * live-image: add utils tests to "Selected" menu
  * tpmevlog: add to batch tests
  * klog.json: check IRQ requests on irqchip</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1628078400">- Update to version 21.07.00:
  * ACPICA: Update to version 20210730
  * uefirttime: Fix incorrect error messages for invalid time test
  * fwts-test: sync up with updates in fwts_wmi_known_guids
  * acpi/wmi: update WMI known GUIDs from Linux kernel 5.14-rc1
  * sbbr: remove pm_file test (not required in BBR 1.0)
  * lib: fwts_version.h - update to V21.07.00
  * debian: update changelog
  * auto-packager: mkpackage.sh: remove groovy
  * uefirttime: add advice for the timezone 2047 failure (LP: #1933503)
  * fwts-test: sync up with DBG2 changes from BSA updates
  * fwts_acpi_tables: skip FACS warning for reduced hardware
  * acpi: method: Make _AEI test optional for SBBR
  * acpi: dbg2: Allow 16550 compatible serial port in DBG2
  * acpi: method: Make method_test_ADR() optional
  * sbbr: adjust signature name for MADT
  * sbbr: remove SSDT from mandatory list
  * sbbr: acpitables: add new recommended tables
  * acpi: acpitables: add advices for table revision tests</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1629892800">- Update to version 21.08.00:
  * lib: fwts_version.h - update to V21.08.00
  * debian: update changelog
  * ARM64 SMCCC firmware API tests
  * bios: smm: fix indentation
  * acpi: sbbr: refactor by fwts_get_fadt_version
  * lib: fwts_acpi_tables: add a function to get FADT versions
  * acpi: fadt: remove hard-coded FADT version
  * acpi: fadt: clarify comments of FACS and HW-reduced mode
  * acpi: dmar: add a warning when PCI device is not found</changelog>
  <changelog author="mpluskal@suse.com" date="1631620800">- Update to version 21.08.00:
  * Manual: update number of tests, date and remove double spaces
  * debian/control: Add device-tree-compiler as dependency for armel/armhf/arm64
  * fwts_firmware: Rework Devicetree firmware detection
  * Enable dt_sysinfo test for Power only</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1632916800">- Update to version 21.09.00:
  * snapcraft: Fix incorrect core20 library path
  * snapcraft: fix path to fwts
  * lib: fwts_version.h - update to V21.09.00
  * debian: update changelog
  * acpi: replace fwts_firmware_detect() by fw-&gt;firmware_type
  * lib: fwts_firmware: fix incorrect comments for fwts_firmware_detect
  * uefi: uefirtmisc: reduce scope of some variables
  * uefi: securebootcert: make some function arguments const
  * src/pci/smccc: reduce scope of variable ret
  * bios: smm: remove redundant variable n
  * acpi: iort: constify some function arguments
  * acpi: dmar: constify a pointer argument in acpi_parse_dev_scope
  * acpi: cstates: remove redundant null check on entry
  * smccc_test: fix missing ) in pr_info call
  * opal: clean up some coding style issues
  * opal: Fix a few memory leaks on asprint allocated buffers
  * acpi: s3power: clean up pedantic static analysis warnings
  * uefirtvariable: clean up pedantic static analysis warnings
  * opal: mem_info: clean up pedantic static analysis warnings
  * fwts_devicetree: clean up static analysis warning
  * fwts_acpi_tables: NULLify table pointers
  * snapcraft: update to use core20
  * lib: use &lt;poll.h&gt; rather than &lt;sys/poll.h&gt;</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1638532800">- Update to version 21.11.00:
  * lib: fwts_version.h - update to V21.11.00
  * debian: update changelog
  * auto-packager:mkpackage.sh: add jammy
  * fwts-test: sync up the adding sleep type for s2idle testing
  * s3: add sleep type setting for testing with s3 or s2idle
  * acpi: madt: De-initialise ACPICA core engine in case of error.
  * lib: fwts_smbios: fix loading SMBIOS table from uefi
  * acpi: uniqueid: skip comparison of _HID and _CID of the same device
  * ACPICA: Update to version 20210930</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1640088000">- Update to version 21.12.00:
  * lib: fwts_version.h - update to V21.12.00
  * debian: update changelog
  * dmicheck: skip scanning smbios in /dev/mem on aarch64
  * s3: increase s2idle_residency to u64 to avoid overflows
  * s3: fix incorrect error messages for s2idle_residency
  * acpi: uniqueid: clean up pedantic static analysis warnings
  * s4: clean up pedantic static analysis warnings</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1642593600">- Update build dependencies (add zlib)</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1644321600">- Update to version 22.01.00:
  * fwts-test: sync up the adding option for get next high monotonic count
  * uefirtmisc: add option to specify iterations get next high monitonic count
  * uefirtmisc: add checking the resources for testing
  * lib: fwts_version.h - update to V22.01.00
  * debian: update changelog
  * fwts_acpica: skip unneccessary null check
  * s3: use system suspend default if --s3-sleep-type is not used
  * tpmevlogdump: add supporting several new types for event log dumping
  * auto-packager: mkpackage.sh: remove hirsute
  * tpmevlog: add supporting several new types for event log checking
  * lib: fwts_tpm.h: add new type definition</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1648123200">- Update to version 22.03.00:
  * lib: fwts_version.h - update to V22.03.00
  * debian: update changelog
  * fwts-test: sync up the sdev checking secure access components
  * acpi: sdev: add checking secure access components
  * acpi: macf: report failures instead of just logging the errors
  * acpi/time: skip a number of TAD methods when _GCP[0] is clear
  * acpi:dmar: update the link of DMAR table
  * fwts-tests: update acpi dump data to be in sync with latest ACPICA
  * ACPICA: Update to version 20211217</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1653998400">- Update to version 22.05.00:
  * lib: fwts_version.h - update to V22.05.00
  * debian: update changelog
  * fwts-test: sync up IORT test with specification version E.d
  * acpi: mcfg: checking kernel lockdown when doing mmap PCI config space
  * auto-packager:mkpackage.sh: add kinetic
  * acpi: iort: update IORT test to specification version E.d
  * Update copyright year to 2022
  * acpi: iort: update the IORT node dump
  * acpi: iort: update IORT node revision check
  * ACPICA: Update to version 20220331</changelog>
  <changelog author="mpluskal@suse.com" date="1663156800">- Update to version 22.07.00:
  * acpi: fadt: get _CST c2 c3 for p_lvl2 and p_lvl3 tests
  * uefi: securebootcert: fix the attribute set for AuditMode and DeployedMode
  * lib: acpi: update battery charge limiting state for _BST
  * acpi: dbg2: update the subtype for DBG2 table
  * lib: fwts_version.h - update to V22.07.00
  * debian: update changelog
  * auto-packager: mkpackage.sh: remove impish
  * fwts-test: sync up with asf verbose dump
  * acpi: asf: enable verbose output
  * fwts-test: sync up the remove of ASF minimun watchdog reset value
  * acpi: asf: remove the checking of minmun watchdog reset value 0
  * fwts-test: sync up the fix of pmtt wrong table label
  * acpi: pmtt: fix the wrong table label
  * dmicheck: update the processor upgrade field for type 4
  * dmicheck: update for supporting DMI version to 3.5
  * dmicheck: add Processor Architecture Types check for type 44
  * build: Improve linking</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1665662400">- Update to version 22.09.00:
  * lib: fwts_version.h - update to V22.09.00
  * debian: update changelog
  * acpi: iort: remove redundant code
  * fwts-test: add regression test for SVKL
  * acpi: svkl: add test for SVKL table (mantis 2162)
  * acpi: nhltdump: add endpoint discriptor string description
  * acpi: nhltdump: add dumping nhlt table for audio configurations</changelog>
</package>
<package pkgid="d18f1dad37c880f6ea3934d5cdc10a71e4b0698b05a1091b111d6abf2960de76" name="fwts" arch="i586">
  <version epoch="0" ver="22.09.00" rel="bp154.2.9.1"/>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1610971200">- Add patch fixing bsc#1178442 bsc#1177992
  * acpi-pmtt-fix-infinite-loops-when-length-is-incorrectly-zero.diff</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1611316800">- Update to version 21.01.00:
  * See provided changelog for detailed list of changes
- Drop upstreamed patch:
  * acpi-pmtt-fix-infinite-loops-when-length-is-incorrectly-zero.diff</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1614254400">- Update to version 21.02.00:
  * See provided changelog for detailed list of changes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1618488000">- Update to version 21.03.00:
  * See provided changelog for detailed list of changes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1619611200">- Switch to obs scm _service</changelog>
  <changelog author="Martin Pluskal mpluskal@suse.com" date="1621512000">- Update to version 21.03.00:
  * uefirtvariable: fix memory leak
  * acpi: refactor by fwts_acpi_reserved_type_check
  * acpi: refactor by fwts_acpi_structure_range_check
  * uefirtauthvar: check variable runtime services supported before testing (LP: #1913351)
  * uefirtvariable: check variable runtime services supported before testing (LP: #1913351)
  * uefirtmisc: check misc runtime services supported before testing (LP: #1913351)
  * uefirttime: check time services supported before testing (LP: #1913351)
  * acpi: spcr: accept baud rate 0x0 as a preconfigured state
  * fwts-test: sync up with PMTT rev 2 changes
  * acpi: pmtt: update PMTT to revision 2 (mantis 1975)</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1621857600">- Update to version 21.05.00:
  * lib: fwts_version.h - update to V21.05.00
  * debian: update changelog
  * auto-packager:mkpackage.sh: add impish
  * fwts-test: sync up with dbgp changes
  * acpi: dbgp/spmi: check space ids by fwts_acpi_space_id
  * acpiinfo: update ACPI 6.4 vs. ACPICA versions
  * lib: acpi: fix incorrect actual vs. struct length outputs
  * acpi: shorten helper function names by removing "check"
  * lib: acpi: unify naming style by removing "ACPI"
  * fwts-test: sync up with PMTT refactoring changes
  * acpi: refactor length check by fwts_acpi_structure_length_check
  * acpi: refactor zero length by fwts_acpi_structure_length_zero_check</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1624363200">- Update to version 21.06.00:
  * lib: fwts_version.h - update to V21.06.00
  * debian: update changelog
  * fwts_acpi_tables: memcpy 4 char ACPI table name
  * Remove complex disabling of ACPI for non-ACPI targets
  * Debian: move source lintian overrides file to source
  * Add lintian overrides for ldconfig trigger warning
  * Debian: control: update Standards-Version to 4.1.0
  * Debian: update compat level to 9
  * Debian: add Rules-Requires-Root field to control file
  * Debian: add project Homepage field to control file
  * debian/copyright: use secure https url specifier
  * Debian: remove spaces at end of lines of control file
  * Debian: remove spaces at end of lines of changelong
  * auto-packager: mkpackage.sh: remove xenial
  * live-image: add "TPM tests" to root menu
  * live-image: add utils tests to "Selected" menu
  * tpmevlog: add to batch tests
  * klog.json: check IRQ requests on irqchip</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1628078400">- Update to version 21.07.00:
  * ACPICA: Update to version 20210730
  * uefirttime: Fix incorrect error messages for invalid time test
  * fwts-test: sync up with updates in fwts_wmi_known_guids
  * acpi/wmi: update WMI known GUIDs from Linux kernel 5.14-rc1
  * sbbr: remove pm_file test (not required in BBR 1.0)
  * lib: fwts_version.h - update to V21.07.00
  * debian: update changelog
  * auto-packager: mkpackage.sh: remove groovy
  * uefirttime: add advice for the timezone 2047 failure (LP: #1933503)
  * fwts-test: sync up with DBG2 changes from BSA updates
  * fwts_acpi_tables: skip FACS warning for reduced hardware
  * acpi: method: Make _AEI test optional for SBBR
  * acpi: dbg2: Allow 16550 compatible serial port in DBG2
  * acpi: method: Make method_test_ADR() optional
  * sbbr: adjust signature name for MADT
  * sbbr: remove SSDT from mandatory list
  * sbbr: acpitables: add new recommended tables
  * acpi: acpitables: add advices for table revision tests</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1629892800">- Update to version 21.08.00:
  * lib: fwts_version.h - update to V21.08.00
  * debian: update changelog
  * ARM64 SMCCC firmware API tests
  * bios: smm: fix indentation
  * acpi: sbbr: refactor by fwts_get_fadt_version
  * lib: fwts_acpi_tables: add a function to get FADT versions
  * acpi: fadt: remove hard-coded FADT version
  * acpi: fadt: clarify comments of FACS and HW-reduced mode
  * acpi: dmar: add a warning when PCI device is not found</changelog>
  <changelog author="mpluskal@suse.com" date="1631620800">- Update to version 21.08.00:
  * Manual: update number of tests, date and remove double spaces
  * debian/control: Add device-tree-compiler as dependency for armel/armhf/arm64
  * fwts_firmware: Rework Devicetree firmware detection
  * Enable dt_sysinfo test for Power only</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1632916800">- Update to version 21.09.00:
  * snapcraft: Fix incorrect core20 library path
  * snapcraft: fix path to fwts
  * lib: fwts_version.h - update to V21.09.00
  * debian: update changelog
  * acpi: replace fwts_firmware_detect() by fw-&gt;firmware_type
  * lib: fwts_firmware: fix incorrect comments for fwts_firmware_detect
  * uefi: uefirtmisc: reduce scope of some variables
  * uefi: securebootcert: make some function arguments const
  * src/pci/smccc: reduce scope of variable ret
  * bios: smm: remove redundant variable n
  * acpi: iort: constify some function arguments
  * acpi: dmar: constify a pointer argument in acpi_parse_dev_scope
  * acpi: cstates: remove redundant null check on entry
  * smccc_test: fix missing ) in pr_info call
  * opal: clean up some coding style issues
  * opal: Fix a few memory leaks on asprint allocated buffers
  * acpi: s3power: clean up pedantic static analysis warnings
  * uefirtvariable: clean up pedantic static analysis warnings
  * opal: mem_info: clean up pedantic static analysis warnings
  * fwts_devicetree: clean up static analysis warning
  * fwts_acpi_tables: NULLify table pointers
  * snapcraft: update to use core20
  * lib: use &lt;poll.h&gt; rather than &lt;sys/poll.h&gt;</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1638532800">- Update to version 21.11.00:
  * lib: fwts_version.h - update to V21.11.00
  * debian: update changelog
  * auto-packager:mkpackage.sh: add jammy
  * fwts-test: sync up the adding sleep type for s2idle testing
  * s3: add sleep type setting for testing with s3 or s2idle
  * acpi: madt: De-initialise ACPICA core engine in case of error.
  * lib: fwts_smbios: fix loading SMBIOS table from uefi
  * acpi: uniqueid: skip comparison of _HID and _CID of the same device
  * ACPICA: Update to version 20210930</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1640088000">- Update to version 21.12.00:
  * lib: fwts_version.h - update to V21.12.00
  * debian: update changelog
  * dmicheck: skip scanning smbios in /dev/mem on aarch64
  * s3: increase s2idle_residency to u64 to avoid overflows
  * s3: fix incorrect error messages for s2idle_residency
  * acpi: uniqueid: clean up pedantic static analysis warnings
  * s4: clean up pedantic static analysis warnings</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1642593600">- Update build dependencies (add zlib)</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1644321600">- Update to version 22.01.00:
  * fwts-test: sync up the adding option for get next high monotonic count
  * uefirtmisc: add option to specify iterations get next high monitonic count
  * uefirtmisc: add checking the resources for testing
  * lib: fwts_version.h - update to V22.01.00
  * debian: update changelog
  * fwts_acpica: skip unneccessary null check
  * s3: use system suspend default if --s3-sleep-type is not used
  * tpmevlogdump: add supporting several new types for event log dumping
  * auto-packager: mkpackage.sh: remove hirsute
  * tpmevlog: add supporting several new types for event log checking
  * lib: fwts_tpm.h: add new type definition</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1648123200">- Update to version 22.03.00:
  * lib: fwts_version.h - update to V22.03.00
  * debian: update changelog
  * fwts-test: sync up the sdev checking secure access components
  * acpi: sdev: add checking secure access components
  * acpi: macf: report failures instead of just logging the errors
  * acpi/time: skip a number of TAD methods when _GCP[0] is clear
  * acpi:dmar: update the link of DMAR table
  * fwts-tests: update acpi dump data to be in sync with latest ACPICA
  * ACPICA: Update to version 20211217</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1653998400">- Update to version 22.05.00:
  * lib: fwts_version.h - update to V22.05.00
  * debian: update changelog
  * fwts-test: sync up IORT test with specification version E.d
  * acpi: mcfg: checking kernel lockdown when doing mmap PCI config space
  * auto-packager:mkpackage.sh: add kinetic
  * acpi: iort: update IORT test to specification version E.d
  * Update copyright year to 2022
  * acpi: iort: update the IORT node dump
  * acpi: iort: update IORT node revision check
  * ACPICA: Update to version 20220331</changelog>
  <changelog author="mpluskal@suse.com" date="1663156800">- Update to version 22.07.00:
  * acpi: fadt: get _CST c2 c3 for p_lvl2 and p_lvl3 tests
  * uefi: securebootcert: fix the attribute set for AuditMode and DeployedMode
  * lib: acpi: update battery charge limiting state for _BST
  * acpi: dbg2: update the subtype for DBG2 table
  * lib: fwts_version.h - update to V22.07.00
  * debian: update changelog
  * auto-packager: mkpackage.sh: remove impish
  * fwts-test: sync up with asf verbose dump
  * acpi: asf: enable verbose output
  * fwts-test: sync up the remove of ASF minimun watchdog reset value
  * acpi: asf: remove the checking of minmun watchdog reset value 0
  * fwts-test: sync up the fix of pmtt wrong table label
  * acpi: pmtt: fix the wrong table label
  * dmicheck: update the processor upgrade field for type 4
  * dmicheck: update for supporting DMI version to 3.5
  * dmicheck: add Processor Architecture Types check for type 44
  * build: Improve linking</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1665662400">- Update to version 22.09.00:
  * lib: fwts_version.h - update to V22.09.00
  * debian: update changelog
  * acpi: iort: remove redundant code
  * fwts-test: add regression test for SVKL
  * acpi: svkl: add test for SVKL table (mantis 2162)
  * acpi: nhltdump: add endpoint discriptor string description
  * acpi: nhltdump: add dumping nhlt table for audio configurations</changelog>
</package>
<package pkgid="2a166b6c71b1278ea8a8f8625de4c1547615ac18a5f4e8984f144b8ee84e254c" name="fwts" arch="src">
  <version epoch="0" ver="22.09.00" rel="bp154.2.9.1"/>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1610971200">- Add patch fixing bsc#1178442 bsc#1177992
  * acpi-pmtt-fix-infinite-loops-when-length-is-incorrectly-zero.diff</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1611316800">- Update to version 21.01.00:
  * See provided changelog for detailed list of changes
- Drop upstreamed patch:
  * acpi-pmtt-fix-infinite-loops-when-length-is-incorrectly-zero.diff</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1614254400">- Update to version 21.02.00:
  * See provided changelog for detailed list of changes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1618488000">- Update to version 21.03.00:
  * See provided changelog for detailed list of changes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1619611200">- Switch to obs scm _service</changelog>
  <changelog author="Martin Pluskal mpluskal@suse.com" date="1621512000">- Update to version 21.03.00:
  * uefirtvariable: fix memory leak
  * acpi: refactor by fwts_acpi_reserved_type_check
  * acpi: refactor by fwts_acpi_structure_range_check
  * uefirtauthvar: check variable runtime services supported before testing (LP: #1913351)
  * uefirtvariable: check variable runtime services supported before testing (LP: #1913351)
  * uefirtmisc: check misc runtime services supported before testing (LP: #1913351)
  * uefirttime: check time services supported before testing (LP: #1913351)
  * acpi: spcr: accept baud rate 0x0 as a preconfigured state
  * fwts-test: sync up with PMTT rev 2 changes
  * acpi: pmtt: update PMTT to revision 2 (mantis 1975)</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1621857600">- Update to version 21.05.00:
  * lib: fwts_version.h - update to V21.05.00
  * debian: update changelog
  * auto-packager:mkpackage.sh: add impish
  * fwts-test: sync up with dbgp changes
  * acpi: dbgp/spmi: check space ids by fwts_acpi_space_id
  * acpiinfo: update ACPI 6.4 vs. ACPICA versions
  * lib: acpi: fix incorrect actual vs. struct length outputs
  * acpi: shorten helper function names by removing "check"
  * lib: acpi: unify naming style by removing "ACPI"
  * fwts-test: sync up with PMTT refactoring changes
  * acpi: refactor length check by fwts_acpi_structure_length_check
  * acpi: refactor zero length by fwts_acpi_structure_length_zero_check</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1624363200">- Update to version 21.06.00:
  * lib: fwts_version.h - update to V21.06.00
  * debian: update changelog
  * fwts_acpi_tables: memcpy 4 char ACPI table name
  * Remove complex disabling of ACPI for non-ACPI targets
  * Debian: move source lintian overrides file to source
  * Add lintian overrides for ldconfig trigger warning
  * Debian: control: update Standards-Version to 4.1.0
  * Debian: update compat level to 9
  * Debian: add Rules-Requires-Root field to control file
  * Debian: add project Homepage field to control file
  * debian/copyright: use secure https url specifier
  * Debian: remove spaces at end of lines of control file
  * Debian: remove spaces at end of lines of changelong
  * auto-packager: mkpackage.sh: remove xenial
  * live-image: add "TPM tests" to root menu
  * live-image: add utils tests to "Selected" menu
  * tpmevlog: add to batch tests
  * klog.json: check IRQ requests on irqchip</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1628078400">- Update to version 21.07.00:
  * ACPICA: Update to version 20210730
  * uefirttime: Fix incorrect error messages for invalid time test
  * fwts-test: sync up with updates in fwts_wmi_known_guids
  * acpi/wmi: update WMI known GUIDs from Linux kernel 5.14-rc1
  * sbbr: remove pm_file test (not required in BBR 1.0)
  * lib: fwts_version.h - update to V21.07.00
  * debian: update changelog
  * auto-packager: mkpackage.sh: remove groovy
  * uefirttime: add advice for the timezone 2047 failure (LP: #1933503)
  * fwts-test: sync up with DBG2 changes from BSA updates
  * fwts_acpi_tables: skip FACS warning for reduced hardware
  * acpi: method: Make _AEI test optional for SBBR
  * acpi: dbg2: Allow 16550 compatible serial port in DBG2
  * acpi: method: Make method_test_ADR() optional
  * sbbr: adjust signature name for MADT
  * sbbr: remove SSDT from mandatory list
  * sbbr: acpitables: add new recommended tables
  * acpi: acpitables: add advices for table revision tests</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1629892800">- Update to version 21.08.00:
  * lib: fwts_version.h - update to V21.08.00
  * debian: update changelog
  * ARM64 SMCCC firmware API tests
  * bios: smm: fix indentation
  * acpi: sbbr: refactor by fwts_get_fadt_version
  * lib: fwts_acpi_tables: add a function to get FADT versions
  * acpi: fadt: remove hard-coded FADT version
  * acpi: fadt: clarify comments of FACS and HW-reduced mode
  * acpi: dmar: add a warning when PCI device is not found</changelog>
  <changelog author="mpluskal@suse.com" date="1631620800">- Update to version 21.08.00:
  * Manual: update number of tests, date and remove double spaces
  * debian/control: Add device-tree-compiler as dependency for armel/armhf/arm64
  * fwts_firmware: Rework Devicetree firmware detection
  * Enable dt_sysinfo test for Power only</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1632916800">- Update to version 21.09.00:
  * snapcraft: Fix incorrect core20 library path
  * snapcraft: fix path to fwts
  * lib: fwts_version.h - update to V21.09.00
  * debian: update changelog
  * acpi: replace fwts_firmware_detect() by fw-&gt;firmware_type
  * lib: fwts_firmware: fix incorrect comments for fwts_firmware_detect
  * uefi: uefirtmisc: reduce scope of some variables
  * uefi: securebootcert: make some function arguments const
  * src/pci/smccc: reduce scope of variable ret
  * bios: smm: remove redundant variable n
  * acpi: iort: constify some function arguments
  * acpi: dmar: constify a pointer argument in acpi_parse_dev_scope
  * acpi: cstates: remove redundant null check on entry
  * smccc_test: fix missing ) in pr_info call
  * opal: clean up some coding style issues
  * opal: Fix a few memory leaks on asprint allocated buffers
  * acpi: s3power: clean up pedantic static analysis warnings
  * uefirtvariable: clean up pedantic static analysis warnings
  * opal: mem_info: clean up pedantic static analysis warnings
  * fwts_devicetree: clean up static analysis warning
  * fwts_acpi_tables: NULLify table pointers
  * snapcraft: update to use core20
  * lib: use &lt;poll.h&gt; rather than &lt;sys/poll.h&gt;</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1638532800">- Update to version 21.11.00:
  * lib: fwts_version.h - update to V21.11.00
  * debian: update changelog
  * auto-packager:mkpackage.sh: add jammy
  * fwts-test: sync up the adding sleep type for s2idle testing
  * s3: add sleep type setting for testing with s3 or s2idle
  * acpi: madt: De-initialise ACPICA core engine in case of error.
  * lib: fwts_smbios: fix loading SMBIOS table from uefi
  * acpi: uniqueid: skip comparison of _HID and _CID of the same device
  * ACPICA: Update to version 20210930</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1640088000">- Update to version 21.12.00:
  * lib: fwts_version.h - update to V21.12.00
  * debian: update changelog
  * dmicheck: skip scanning smbios in /dev/mem on aarch64
  * s3: increase s2idle_residency to u64 to avoid overflows
  * s3: fix incorrect error messages for s2idle_residency
  * acpi: uniqueid: clean up pedantic static analysis warnings
  * s4: clean up pedantic static analysis warnings</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1642593600">- Update build dependencies (add zlib)</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1644321600">- Update to version 22.01.00:
  * fwts-test: sync up the adding option for get next high monotonic count
  * uefirtmisc: add option to specify iterations get next high monitonic count
  * uefirtmisc: add checking the resources for testing
  * lib: fwts_version.h - update to V22.01.00
  * debian: update changelog
  * fwts_acpica: skip unneccessary null check
  * s3: use system suspend default if --s3-sleep-type is not used
  * tpmevlogdump: add supporting several new types for event log dumping
  * auto-packager: mkpackage.sh: remove hirsute
  * tpmevlog: add supporting several new types for event log checking
  * lib: fwts_tpm.h: add new type definition</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1648123200">- Update to version 22.03.00:
  * lib: fwts_version.h - update to V22.03.00
  * debian: update changelog
  * fwts-test: sync up the sdev checking secure access components
  * acpi: sdev: add checking secure access components
  * acpi: macf: report failures instead of just logging the errors
  * acpi/time: skip a number of TAD methods when _GCP[0] is clear
  * acpi:dmar: update the link of DMAR table
  * fwts-tests: update acpi dump data to be in sync with latest ACPICA
  * ACPICA: Update to version 20211217</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1653998400">- Update to version 22.05.00:
  * lib: fwts_version.h - update to V22.05.00
  * debian: update changelog
  * fwts-test: sync up IORT test with specification version E.d
  * acpi: mcfg: checking kernel lockdown when doing mmap PCI config space
  * auto-packager:mkpackage.sh: add kinetic
  * acpi: iort: update IORT test to specification version E.d
  * Update copyright year to 2022
  * acpi: iort: update the IORT node dump
  * acpi: iort: update IORT node revision check
  * ACPICA: Update to version 20220331</changelog>
  <changelog author="mpluskal@suse.com" date="1663156800">- Update to version 22.07.00:
  * acpi: fadt: get _CST c2 c3 for p_lvl2 and p_lvl3 tests
  * uefi: securebootcert: fix the attribute set for AuditMode and DeployedMode
  * lib: acpi: update battery charge limiting state for _BST
  * acpi: dbg2: update the subtype for DBG2 table
  * lib: fwts_version.h - update to V22.07.00
  * debian: update changelog
  * auto-packager: mkpackage.sh: remove impish
  * fwts-test: sync up with asf verbose dump
  * acpi: asf: enable verbose output
  * fwts-test: sync up the remove of ASF minimun watchdog reset value
  * acpi: asf: remove the checking of minmun watchdog reset value 0
  * fwts-test: sync up the fix of pmtt wrong table label
  * acpi: pmtt: fix the wrong table label
  * dmicheck: update the processor upgrade field for type 4
  * dmicheck: update for supporting DMI version to 3.5
  * dmicheck: add Processor Architecture Types check for type 44
  * build: Improve linking</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1665662400">- Update to version 22.09.00:
  * lib: fwts_version.h - update to V22.09.00
  * debian: update changelog
  * acpi: iort: remove redundant code
  * fwts-test: add regression test for SVKL
  * acpi: svkl: add test for SVKL table (mantis 2162)
  * acpi: nhltdump: add endpoint discriptor string description
  * acpi: nhltdump: add dumping nhlt table for audio configurations</changelog>
</package>
<package pkgid="70260155cb05eada57c16c825019d2469984f1878416044f491c670d134b3a4d" name="fwts" arch="x86_64">
  <version epoch="0" ver="22.09.00" rel="bp154.2.9.1"/>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1610971200">- Add patch fixing bsc#1178442 bsc#1177992
  * acpi-pmtt-fix-infinite-loops-when-length-is-incorrectly-zero.diff</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1611316800">- Update to version 21.01.00:
  * See provided changelog for detailed list of changes
- Drop upstreamed patch:
  * acpi-pmtt-fix-infinite-loops-when-length-is-incorrectly-zero.diff</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1614254400">- Update to version 21.02.00:
  * See provided changelog for detailed list of changes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1618488000">- Update to version 21.03.00:
  * See provided changelog for detailed list of changes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1619611200">- Switch to obs scm _service</changelog>
  <changelog author="Martin Pluskal mpluskal@suse.com" date="1621512000">- Update to version 21.03.00:
  * uefirtvariable: fix memory leak
  * acpi: refactor by fwts_acpi_reserved_type_check
  * acpi: refactor by fwts_acpi_structure_range_check
  * uefirtauthvar: check variable runtime services supported before testing (LP: #1913351)
  * uefirtvariable: check variable runtime services supported before testing (LP: #1913351)
  * uefirtmisc: check misc runtime services supported before testing (LP: #1913351)
  * uefirttime: check time services supported before testing (LP: #1913351)
  * acpi: spcr: accept baud rate 0x0 as a preconfigured state
  * fwts-test: sync up with PMTT rev 2 changes
  * acpi: pmtt: update PMTT to revision 2 (mantis 1975)</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1621857600">- Update to version 21.05.00:
  * lib: fwts_version.h - update to V21.05.00
  * debian: update changelog
  * auto-packager:mkpackage.sh: add impish
  * fwts-test: sync up with dbgp changes
  * acpi: dbgp/spmi: check space ids by fwts_acpi_space_id
  * acpiinfo: update ACPI 6.4 vs. ACPICA versions
  * lib: acpi: fix incorrect actual vs. struct length outputs
  * acpi: shorten helper function names by removing "check"
  * lib: acpi: unify naming style by removing "ACPI"
  * fwts-test: sync up with PMTT refactoring changes
  * acpi: refactor length check by fwts_acpi_structure_length_check
  * acpi: refactor zero length by fwts_acpi_structure_length_zero_check</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1624363200">- Update to version 21.06.00:
  * lib: fwts_version.h - update to V21.06.00
  * debian: update changelog
  * fwts_acpi_tables: memcpy 4 char ACPI table name
  * Remove complex disabling of ACPI for non-ACPI targets
  * Debian: move source lintian overrides file to source
  * Add lintian overrides for ldconfig trigger warning
  * Debian: control: update Standards-Version to 4.1.0
  * Debian: update compat level to 9
  * Debian: add Rules-Requires-Root field to control file
  * Debian: add project Homepage field to control file
  * debian/copyright: use secure https url specifier
  * Debian: remove spaces at end of lines of control file
  * Debian: remove spaces at end of lines of changelong
  * auto-packager: mkpackage.sh: remove xenial
  * live-image: add "TPM tests" to root menu
  * live-image: add utils tests to "Selected" menu
  * tpmevlog: add to batch tests
  * klog.json: check IRQ requests on irqchip</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1628078400">- Update to version 21.07.00:
  * ACPICA: Update to version 20210730
  * uefirttime: Fix incorrect error messages for invalid time test
  * fwts-test: sync up with updates in fwts_wmi_known_guids
  * acpi/wmi: update WMI known GUIDs from Linux kernel 5.14-rc1
  * sbbr: remove pm_file test (not required in BBR 1.0)
  * lib: fwts_version.h - update to V21.07.00
  * debian: update changelog
  * auto-packager: mkpackage.sh: remove groovy
  * uefirttime: add advice for the timezone 2047 failure (LP: #1933503)
  * fwts-test: sync up with DBG2 changes from BSA updates
  * fwts_acpi_tables: skip FACS warning for reduced hardware
  * acpi: method: Make _AEI test optional for SBBR
  * acpi: dbg2: Allow 16550 compatible serial port in DBG2
  * acpi: method: Make method_test_ADR() optional
  * sbbr: adjust signature name for MADT
  * sbbr: remove SSDT from mandatory list
  * sbbr: acpitables: add new recommended tables
  * acpi: acpitables: add advices for table revision tests</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1629892800">- Update to version 21.08.00:
  * lib: fwts_version.h - update to V21.08.00
  * debian: update changelog
  * ARM64 SMCCC firmware API tests
  * bios: smm: fix indentation
  * acpi: sbbr: refactor by fwts_get_fadt_version
  * lib: fwts_acpi_tables: add a function to get FADT versions
  * acpi: fadt: remove hard-coded FADT version
  * acpi: fadt: clarify comments of FACS and HW-reduced mode
  * acpi: dmar: add a warning when PCI device is not found</changelog>
  <changelog author="mpluskal@suse.com" date="1631620800">- Update to version 21.08.00:
  * Manual: update number of tests, date and remove double spaces
  * debian/control: Add device-tree-compiler as dependency for armel/armhf/arm64
  * fwts_firmware: Rework Devicetree firmware detection
  * Enable dt_sysinfo test for Power only</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1632916800">- Update to version 21.09.00:
  * snapcraft: Fix incorrect core20 library path
  * snapcraft: fix path to fwts
  * lib: fwts_version.h - update to V21.09.00
  * debian: update changelog
  * acpi: replace fwts_firmware_detect() by fw-&gt;firmware_type
  * lib: fwts_firmware: fix incorrect comments for fwts_firmware_detect
  * uefi: uefirtmisc: reduce scope of some variables
  * uefi: securebootcert: make some function arguments const
  * src/pci/smccc: reduce scope of variable ret
  * bios: smm: remove redundant variable n
  * acpi: iort: constify some function arguments
  * acpi: dmar: constify a pointer argument in acpi_parse_dev_scope
  * acpi: cstates: remove redundant null check on entry
  * smccc_test: fix missing ) in pr_info call
  * opal: clean up some coding style issues
  * opal: Fix a few memory leaks on asprint allocated buffers
  * acpi: s3power: clean up pedantic static analysis warnings
  * uefirtvariable: clean up pedantic static analysis warnings
  * opal: mem_info: clean up pedantic static analysis warnings
  * fwts_devicetree: clean up static analysis warning
  * fwts_acpi_tables: NULLify table pointers
  * snapcraft: update to use core20
  * lib: use &lt;poll.h&gt; rather than &lt;sys/poll.h&gt;</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1638532800">- Update to version 21.11.00:
  * lib: fwts_version.h - update to V21.11.00
  * debian: update changelog
  * auto-packager:mkpackage.sh: add jammy
  * fwts-test: sync up the adding sleep type for s2idle testing
  * s3: add sleep type setting for testing with s3 or s2idle
  * acpi: madt: De-initialise ACPICA core engine in case of error.
  * lib: fwts_smbios: fix loading SMBIOS table from uefi
  * acpi: uniqueid: skip comparison of _HID and _CID of the same device
  * ACPICA: Update to version 20210930</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1640088000">- Update to version 21.12.00:
  * lib: fwts_version.h - update to V21.12.00
  * debian: update changelog
  * dmicheck: skip scanning smbios in /dev/mem on aarch64
  * s3: increase s2idle_residency to u64 to avoid overflows
  * s3: fix incorrect error messages for s2idle_residency
  * acpi: uniqueid: clean up pedantic static analysis warnings
  * s4: clean up pedantic static analysis warnings</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1642593600">- Update build dependencies (add zlib)</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1644321600">- Update to version 22.01.00:
  * fwts-test: sync up the adding option for get next high monotonic count
  * uefirtmisc: add option to specify iterations get next high monitonic count
  * uefirtmisc: add checking the resources for testing
  * lib: fwts_version.h - update to V22.01.00
  * debian: update changelog
  * fwts_acpica: skip unneccessary null check
  * s3: use system suspend default if --s3-sleep-type is not used
  * tpmevlogdump: add supporting several new types for event log dumping
  * auto-packager: mkpackage.sh: remove hirsute
  * tpmevlog: add supporting several new types for event log checking
  * lib: fwts_tpm.h: add new type definition</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1648123200">- Update to version 22.03.00:
  * lib: fwts_version.h - update to V22.03.00
  * debian: update changelog
  * fwts-test: sync up the sdev checking secure access components
  * acpi: sdev: add checking secure access components
  * acpi: macf: report failures instead of just logging the errors
  * acpi/time: skip a number of TAD methods when _GCP[0] is clear
  * acpi:dmar: update the link of DMAR table
  * fwts-tests: update acpi dump data to be in sync with latest ACPICA
  * ACPICA: Update to version 20211217</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1653998400">- Update to version 22.05.00:
  * lib: fwts_version.h - update to V22.05.00
  * debian: update changelog
  * fwts-test: sync up IORT test with specification version E.d
  * acpi: mcfg: checking kernel lockdown when doing mmap PCI config space
  * auto-packager:mkpackage.sh: add kinetic
  * acpi: iort: update IORT test to specification version E.d
  * Update copyright year to 2022
  * acpi: iort: update the IORT node dump
  * acpi: iort: update IORT node revision check
  * ACPICA: Update to version 20220331</changelog>
  <changelog author="mpluskal@suse.com" date="1663156800">- Update to version 22.07.00:
  * acpi: fadt: get _CST c2 c3 for p_lvl2 and p_lvl3 tests
  * uefi: securebootcert: fix the attribute set for AuditMode and DeployedMode
  * lib: acpi: update battery charge limiting state for _BST
  * acpi: dbg2: update the subtype for DBG2 table
  * lib: fwts_version.h - update to V22.07.00
  * debian: update changelog
  * auto-packager: mkpackage.sh: remove impish
  * fwts-test: sync up with asf verbose dump
  * acpi: asf: enable verbose output
  * fwts-test: sync up the remove of ASF minimun watchdog reset value
  * acpi: asf: remove the checking of minmun watchdog reset value 0
  * fwts-test: sync up the fix of pmtt wrong table label
  * acpi: pmtt: fix the wrong table label
  * dmicheck: update the processor upgrade field for type 4
  * dmicheck: update for supporting DMI version to 3.5
  * dmicheck: add Processor Architecture Types check for type 44
  * build: Improve linking</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1665662400">- Update to version 22.09.00:
  * lib: fwts_version.h - update to V22.09.00
  * debian: update changelog
  * acpi: iort: remove redundant code
  * fwts-test: add regression test for SVKL
  * acpi: svkl: add test for SVKL table (mantis 2162)
  * acpi: nhltdump: add endpoint discriptor string description
  * acpi: nhltdump: add dumping nhlt table for audio configurations</changelog>
</package>
<package pkgid="c7423c0c833790f2d3982b1312a96863f3803ed029ce7cd79f408c6b00e2cb6d" name="fwts" arch="aarch64">
  <version epoch="0" ver="23.01.00" rel="bp154.2.12.1"/>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1618488000">- Update to version 21.03.00:
  * See provided changelog for detailed list of changes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1619611200">- Switch to obs scm _service</changelog>
  <changelog author="Martin Pluskal mpluskal@suse.com" date="1621512000">- Update to version 21.03.00:
  * uefirtvariable: fix memory leak
  * acpi: refactor by fwts_acpi_reserved_type_check
  * acpi: refactor by fwts_acpi_structure_range_check
  * uefirtauthvar: check variable runtime services supported before testing (LP: #1913351)
  * uefirtvariable: check variable runtime services supported before testing (LP: #1913351)
  * uefirtmisc: check misc runtime services supported before testing (LP: #1913351)
  * uefirttime: check time services supported before testing (LP: #1913351)
  * acpi: spcr: accept baud rate 0x0 as a preconfigured state
  * fwts-test: sync up with PMTT rev 2 changes
  * acpi: pmtt: update PMTT to revision 2 (mantis 1975)</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1621857600">- Update to version 21.05.00:
  * lib: fwts_version.h - update to V21.05.00
  * debian: update changelog
  * auto-packager:mkpackage.sh: add impish
  * fwts-test: sync up with dbgp changes
  * acpi: dbgp/spmi: check space ids by fwts_acpi_space_id
  * acpiinfo: update ACPI 6.4 vs. ACPICA versions
  * lib: acpi: fix incorrect actual vs. struct length outputs
  * acpi: shorten helper function names by removing "check"
  * lib: acpi: unify naming style by removing "ACPI"
  * fwts-test: sync up with PMTT refactoring changes
  * acpi: refactor length check by fwts_acpi_structure_length_check
  * acpi: refactor zero length by fwts_acpi_structure_length_zero_check</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1624363200">- Update to version 21.06.00:
  * lib: fwts_version.h - update to V21.06.00
  * debian: update changelog
  * fwts_acpi_tables: memcpy 4 char ACPI table name
  * Remove complex disabling of ACPI for non-ACPI targets
  * Debian: move source lintian overrides file to source
  * Add lintian overrides for ldconfig trigger warning
  * Debian: control: update Standards-Version to 4.1.0
  * Debian: update compat level to 9
  * Debian: add Rules-Requires-Root field to control file
  * Debian: add project Homepage field to control file
  * debian/copyright: use secure https url specifier
  * Debian: remove spaces at end of lines of control file
  * Debian: remove spaces at end of lines of changelong
  * auto-packager: mkpackage.sh: remove xenial
  * live-image: add "TPM tests" to root menu
  * live-image: add utils tests to "Selected" menu
  * tpmevlog: add to batch tests
  * klog.json: check IRQ requests on irqchip</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1628078400">- Update to version 21.07.00:
  * ACPICA: Update to version 20210730
  * uefirttime: Fix incorrect error messages for invalid time test
  * fwts-test: sync up with updates in fwts_wmi_known_guids
  * acpi/wmi: update WMI known GUIDs from Linux kernel 5.14-rc1
  * sbbr: remove pm_file test (not required in BBR 1.0)
  * lib: fwts_version.h - update to V21.07.00
  * debian: update changelog
  * auto-packager: mkpackage.sh: remove groovy
  * uefirttime: add advice for the timezone 2047 failure (LP: #1933503)
  * fwts-test: sync up with DBG2 changes from BSA updates
  * fwts_acpi_tables: skip FACS warning for reduced hardware
  * acpi: method: Make _AEI test optional for SBBR
  * acpi: dbg2: Allow 16550 compatible serial port in DBG2
  * acpi: method: Make method_test_ADR() optional
  * sbbr: adjust signature name for MADT
  * sbbr: remove SSDT from mandatory list
  * sbbr: acpitables: add new recommended tables
  * acpi: acpitables: add advices for table revision tests</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1629892800">- Update to version 21.08.00:
  * lib: fwts_version.h - update to V21.08.00
  * debian: update changelog
  * ARM64 SMCCC firmware API tests
  * bios: smm: fix indentation
  * acpi: sbbr: refactor by fwts_get_fadt_version
  * lib: fwts_acpi_tables: add a function to get FADT versions
  * acpi: fadt: remove hard-coded FADT version
  * acpi: fadt: clarify comments of FACS and HW-reduced mode
  * acpi: dmar: add a warning when PCI device is not found</changelog>
  <changelog author="mpluskal@suse.com" date="1631620800">- Update to version 21.08.00:
  * Manual: update number of tests, date and remove double spaces
  * debian/control: Add device-tree-compiler as dependency for armel/armhf/arm64
  * fwts_firmware: Rework Devicetree firmware detection
  * Enable dt_sysinfo test for Power only</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1632916800">- Update to version 21.09.00:
  * snapcraft: Fix incorrect core20 library path
  * snapcraft: fix path to fwts
  * lib: fwts_version.h - update to V21.09.00
  * debian: update changelog
  * acpi: replace fwts_firmware_detect() by fw-&gt;firmware_type
  * lib: fwts_firmware: fix incorrect comments for fwts_firmware_detect
  * uefi: uefirtmisc: reduce scope of some variables
  * uefi: securebootcert: make some function arguments const
  * src/pci/smccc: reduce scope of variable ret
  * bios: smm: remove redundant variable n
  * acpi: iort: constify some function arguments
  * acpi: dmar: constify a pointer argument in acpi_parse_dev_scope
  * acpi: cstates: remove redundant null check on entry
  * smccc_test: fix missing ) in pr_info call
  * opal: clean up some coding style issues
  * opal: Fix a few memory leaks on asprint allocated buffers
  * acpi: s3power: clean up pedantic static analysis warnings
  * uefirtvariable: clean up pedantic static analysis warnings
  * opal: mem_info: clean up pedantic static analysis warnings
  * fwts_devicetree: clean up static analysis warning
  * fwts_acpi_tables: NULLify table pointers
  * snapcraft: update to use core20
  * lib: use &lt;poll.h&gt; rather than &lt;sys/poll.h&gt;</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1638532800">- Update to version 21.11.00:
  * lib: fwts_version.h - update to V21.11.00
  * debian: update changelog
  * auto-packager:mkpackage.sh: add jammy
  * fwts-test: sync up the adding sleep type for s2idle testing
  * s3: add sleep type setting for testing with s3 or s2idle
  * acpi: madt: De-initialise ACPICA core engine in case of error.
  * lib: fwts_smbios: fix loading SMBIOS table from uefi
  * acpi: uniqueid: skip comparison of _HID and _CID of the same device
  * ACPICA: Update to version 20210930</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1640088000">- Update to version 21.12.00:
  * lib: fwts_version.h - update to V21.12.00
  * debian: update changelog
  * dmicheck: skip scanning smbios in /dev/mem on aarch64
  * s3: increase s2idle_residency to u64 to avoid overflows
  * s3: fix incorrect error messages for s2idle_residency
  * acpi: uniqueid: clean up pedantic static analysis warnings
  * s4: clean up pedantic static analysis warnings</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1642593600">- Update build dependencies (add zlib)</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1644321600">- Update to version 22.01.00:
  * fwts-test: sync up the adding option for get next high monotonic count
  * uefirtmisc: add option to specify iterations get next high monitonic count
  * uefirtmisc: add checking the resources for testing
  * lib: fwts_version.h - update to V22.01.00
  * debian: update changelog
  * fwts_acpica: skip unneccessary null check
  * s3: use system suspend default if --s3-sleep-type is not used
  * tpmevlogdump: add supporting several new types for event log dumping
  * auto-packager: mkpackage.sh: remove hirsute
  * tpmevlog: add supporting several new types for event log checking
  * lib: fwts_tpm.h: add new type definition</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1648123200">- Update to version 22.03.00:
  * lib: fwts_version.h - update to V22.03.00
  * debian: update changelog
  * fwts-test: sync up the sdev checking secure access components
  * acpi: sdev: add checking secure access components
  * acpi: macf: report failures instead of just logging the errors
  * acpi/time: skip a number of TAD methods when _GCP[0] is clear
  * acpi:dmar: update the link of DMAR table
  * fwts-tests: update acpi dump data to be in sync with latest ACPICA
  * ACPICA: Update to version 20211217</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1653998400">- Update to version 22.05.00:
  * lib: fwts_version.h - update to V22.05.00
  * debian: update changelog
  * fwts-test: sync up IORT test with specification version E.d
  * acpi: mcfg: checking kernel lockdown when doing mmap PCI config space
  * auto-packager:mkpackage.sh: add kinetic
  * acpi: iort: update IORT test to specification version E.d
  * Update copyright year to 2022
  * acpi: iort: update the IORT node dump
  * acpi: iort: update IORT node revision check
  * ACPICA: Update to version 20220331</changelog>
  <changelog author="mpluskal@suse.com" date="1663156800">- Update to version 22.07.00:
  * acpi: fadt: get _CST c2 c3 for p_lvl2 and p_lvl3 tests
  * uefi: securebootcert: fix the attribute set for AuditMode and DeployedMode
  * lib: acpi: update battery charge limiting state for _BST
  * acpi: dbg2: update the subtype for DBG2 table
  * lib: fwts_version.h - update to V22.07.00
  * debian: update changelog
  * auto-packager: mkpackage.sh: remove impish
  * fwts-test: sync up with asf verbose dump
  * acpi: asf: enable verbose output
  * fwts-test: sync up the remove of ASF minimun watchdog reset value
  * acpi: asf: remove the checking of minmun watchdog reset value 0
  * fwts-test: sync up the fix of pmtt wrong table label
  * acpi: pmtt: fix the wrong table label
  * dmicheck: update the processor upgrade field for type 4
  * dmicheck: update for supporting DMI version to 3.5
  * dmicheck: add Processor Architecture Types check for type 44
  * build: Improve linking</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1665662400">- Update to version 22.09.00:
  * lib: fwts_version.h - update to V22.09.00
  * debian: update changelog
  * acpi: iort: remove redundant code
  * fwts-test: add regression test for SVKL
  * acpi: svkl: add test for SVKL table (mantis 2162)
  * acpi: nhltdump: add endpoint discriptor string description
  * acpi: nhltdump: add dumping nhlt table for audio configurations</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1669377600">- Update to version 22.11.00:
  * lib: fwts_version.h - update to V22.11.00
  * debian: update changelog
  * auto-package: mkpackage.sh: add lunar
  * fwts-test: sync test logs with latest ACPICA
  * ACPICA: Update to version 20221020
  * Add Support for EV_COMPACT_HASH event type
  * fwts-test: add regression tests for CEDT
  * acpi: cedt: add tests for ACPI CEDT table (mantis 2076)
  * fwts-test: add regression test for RGRT
  * acpi: rgrt: add test for ACPI RGRT table( mantis 2056)
  * fwts-test: sync up with the default s3 sleep type description change
  * s3: modify the default sleep type description</changelog>
  <changelog author="mpluskal@suse.com" date="1672920000">- Update to version 22.11.00:
  * tpmevlog: add tests for checking the UEFI_IMAGE_LOAD_EVENT Structure
  * acpi: s3: fix the issue for determining time to resume</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1673956800">- Update to version 23.01.00:
  * lib: fwts_version.h - update to V23.01.00
  * debian: update changelog
  * fwts-test: sync up with the fix of passed reserved value
  * Update copyright year to 2023
  * lib: fwts_acpi_tables: fix the passed reserved value
  * fwts-test: add regression tests for AEST
  * acpi: aest: add tests for ACPI AEST table</changelog>
</package>
<package pkgid="16af43165ae744384af24ea773dd8f05262c47743fb470bc96d8626894d77c1e" name="fwts" arch="i586">
  <version epoch="0" ver="23.01.00" rel="bp154.2.12.1"/>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1618488000">- Update to version 21.03.00:
  * See provided changelog for detailed list of changes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1619611200">- Switch to obs scm _service</changelog>
  <changelog author="Martin Pluskal mpluskal@suse.com" date="1621512000">- Update to version 21.03.00:
  * uefirtvariable: fix memory leak
  * acpi: refactor by fwts_acpi_reserved_type_check
  * acpi: refactor by fwts_acpi_structure_range_check
  * uefirtauthvar: check variable runtime services supported before testing (LP: #1913351)
  * uefirtvariable: check variable runtime services supported before testing (LP: #1913351)
  * uefirtmisc: check misc runtime services supported before testing (LP: #1913351)
  * uefirttime: check time services supported before testing (LP: #1913351)
  * acpi: spcr: accept baud rate 0x0 as a preconfigured state
  * fwts-test: sync up with PMTT rev 2 changes
  * acpi: pmtt: update PMTT to revision 2 (mantis 1975)</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1621857600">- Update to version 21.05.00:
  * lib: fwts_version.h - update to V21.05.00
  * debian: update changelog
  * auto-packager:mkpackage.sh: add impish
  * fwts-test: sync up with dbgp changes
  * acpi: dbgp/spmi: check space ids by fwts_acpi_space_id
  * acpiinfo: update ACPI 6.4 vs. ACPICA versions
  * lib: acpi: fix incorrect actual vs. struct length outputs
  * acpi: shorten helper function names by removing "check"
  * lib: acpi: unify naming style by removing "ACPI"
  * fwts-test: sync up with PMTT refactoring changes
  * acpi: refactor length check by fwts_acpi_structure_length_check
  * acpi: refactor zero length by fwts_acpi_structure_length_zero_check</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1624363200">- Update to version 21.06.00:
  * lib: fwts_version.h - update to V21.06.00
  * debian: update changelog
  * fwts_acpi_tables: memcpy 4 char ACPI table name
  * Remove complex disabling of ACPI for non-ACPI targets
  * Debian: move source lintian overrides file to source
  * Add lintian overrides for ldconfig trigger warning
  * Debian: control: update Standards-Version to 4.1.0
  * Debian: update compat level to 9
  * Debian: add Rules-Requires-Root field to control file
  * Debian: add project Homepage field to control file
  * debian/copyright: use secure https url specifier
  * Debian: remove spaces at end of lines of control file
  * Debian: remove spaces at end of lines of changelong
  * auto-packager: mkpackage.sh: remove xenial
  * live-image: add "TPM tests" to root menu
  * live-image: add utils tests to "Selected" menu
  * tpmevlog: add to batch tests
  * klog.json: check IRQ requests on irqchip</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1628078400">- Update to version 21.07.00:
  * ACPICA: Update to version 20210730
  * uefirttime: Fix incorrect error messages for invalid time test
  * fwts-test: sync up with updates in fwts_wmi_known_guids
  * acpi/wmi: update WMI known GUIDs from Linux kernel 5.14-rc1
  * sbbr: remove pm_file test (not required in BBR 1.0)
  * lib: fwts_version.h - update to V21.07.00
  * debian: update changelog
  * auto-packager: mkpackage.sh: remove groovy
  * uefirttime: add advice for the timezone 2047 failure (LP: #1933503)
  * fwts-test: sync up with DBG2 changes from BSA updates
  * fwts_acpi_tables: skip FACS warning for reduced hardware
  * acpi: method: Make _AEI test optional for SBBR
  * acpi: dbg2: Allow 16550 compatible serial port in DBG2
  * acpi: method: Make method_test_ADR() optional
  * sbbr: adjust signature name for MADT
  * sbbr: remove SSDT from mandatory list
  * sbbr: acpitables: add new recommended tables
  * acpi: acpitables: add advices for table revision tests</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1629892800">- Update to version 21.08.00:
  * lib: fwts_version.h - update to V21.08.00
  * debian: update changelog
  * ARM64 SMCCC firmware API tests
  * bios: smm: fix indentation
  * acpi: sbbr: refactor by fwts_get_fadt_version
  * lib: fwts_acpi_tables: add a function to get FADT versions
  * acpi: fadt: remove hard-coded FADT version
  * acpi: fadt: clarify comments of FACS and HW-reduced mode
  * acpi: dmar: add a warning when PCI device is not found</changelog>
  <changelog author="mpluskal@suse.com" date="1631620800">- Update to version 21.08.00:
  * Manual: update number of tests, date and remove double spaces
  * debian/control: Add device-tree-compiler as dependency for armel/armhf/arm64
  * fwts_firmware: Rework Devicetree firmware detection
  * Enable dt_sysinfo test for Power only</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1632916800">- Update to version 21.09.00:
  * snapcraft: Fix incorrect core20 library path
  * snapcraft: fix path to fwts
  * lib: fwts_version.h - update to V21.09.00
  * debian: update changelog
  * acpi: replace fwts_firmware_detect() by fw-&gt;firmware_type
  * lib: fwts_firmware: fix incorrect comments for fwts_firmware_detect
  * uefi: uefirtmisc: reduce scope of some variables
  * uefi: securebootcert: make some function arguments const
  * src/pci/smccc: reduce scope of variable ret
  * bios: smm: remove redundant variable n
  * acpi: iort: constify some function arguments
  * acpi: dmar: constify a pointer argument in acpi_parse_dev_scope
  * acpi: cstates: remove redundant null check on entry
  * smccc_test: fix missing ) in pr_info call
  * opal: clean up some coding style issues
  * opal: Fix a few memory leaks on asprint allocated buffers
  * acpi: s3power: clean up pedantic static analysis warnings
  * uefirtvariable: clean up pedantic static analysis warnings
  * opal: mem_info: clean up pedantic static analysis warnings
  * fwts_devicetree: clean up static analysis warning
  * fwts_acpi_tables: NULLify table pointers
  * snapcraft: update to use core20
  * lib: use &lt;poll.h&gt; rather than &lt;sys/poll.h&gt;</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1638532800">- Update to version 21.11.00:
  * lib: fwts_version.h - update to V21.11.00
  * debian: update changelog
  * auto-packager:mkpackage.sh: add jammy
  * fwts-test: sync up the adding sleep type for s2idle testing
  * s3: add sleep type setting for testing with s3 or s2idle
  * acpi: madt: De-initialise ACPICA core engine in case of error.
  * lib: fwts_smbios: fix loading SMBIOS table from uefi
  * acpi: uniqueid: skip comparison of _HID and _CID of the same device
  * ACPICA: Update to version 20210930</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1640088000">- Update to version 21.12.00:
  * lib: fwts_version.h - update to V21.12.00
  * debian: update changelog
  * dmicheck: skip scanning smbios in /dev/mem on aarch64
  * s3: increase s2idle_residency to u64 to avoid overflows
  * s3: fix incorrect error messages for s2idle_residency
  * acpi: uniqueid: clean up pedantic static analysis warnings
  * s4: clean up pedantic static analysis warnings</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1642593600">- Update build dependencies (add zlib)</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1644321600">- Update to version 22.01.00:
  * fwts-test: sync up the adding option for get next high monotonic count
  * uefirtmisc: add option to specify iterations get next high monitonic count
  * uefirtmisc: add checking the resources for testing
  * lib: fwts_version.h - update to V22.01.00
  * debian: update changelog
  * fwts_acpica: skip unneccessary null check
  * s3: use system suspend default if --s3-sleep-type is not used
  * tpmevlogdump: add supporting several new types for event log dumping
  * auto-packager: mkpackage.sh: remove hirsute
  * tpmevlog: add supporting several new types for event log checking
  * lib: fwts_tpm.h: add new type definition</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1648123200">- Update to version 22.03.00:
  * lib: fwts_version.h - update to V22.03.00
  * debian: update changelog
  * fwts-test: sync up the sdev checking secure access components
  * acpi: sdev: add checking secure access components
  * acpi: macf: report failures instead of just logging the errors
  * acpi/time: skip a number of TAD methods when _GCP[0] is clear
  * acpi:dmar: update the link of DMAR table
  * fwts-tests: update acpi dump data to be in sync with latest ACPICA
  * ACPICA: Update to version 20211217</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1653998400">- Update to version 22.05.00:
  * lib: fwts_version.h - update to V22.05.00
  * debian: update changelog
  * fwts-test: sync up IORT test with specification version E.d
  * acpi: mcfg: checking kernel lockdown when doing mmap PCI config space
  * auto-packager:mkpackage.sh: add kinetic
  * acpi: iort: update IORT test to specification version E.d
  * Update copyright year to 2022
  * acpi: iort: update the IORT node dump
  * acpi: iort: update IORT node revision check
  * ACPICA: Update to version 20220331</changelog>
  <changelog author="mpluskal@suse.com" date="1663156800">- Update to version 22.07.00:
  * acpi: fadt: get _CST c2 c3 for p_lvl2 and p_lvl3 tests
  * uefi: securebootcert: fix the attribute set for AuditMode and DeployedMode
  * lib: acpi: update battery charge limiting state for _BST
  * acpi: dbg2: update the subtype for DBG2 table
  * lib: fwts_version.h - update to V22.07.00
  * debian: update changelog
  * auto-packager: mkpackage.sh: remove impish
  * fwts-test: sync up with asf verbose dump
  * acpi: asf: enable verbose output
  * fwts-test: sync up the remove of ASF minimun watchdog reset value
  * acpi: asf: remove the checking of minmun watchdog reset value 0
  * fwts-test: sync up the fix of pmtt wrong table label
  * acpi: pmtt: fix the wrong table label
  * dmicheck: update the processor upgrade field for type 4
  * dmicheck: update for supporting DMI version to 3.5
  * dmicheck: add Processor Architecture Types check for type 44
  * build: Improve linking</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1665662400">- Update to version 22.09.00:
  * lib: fwts_version.h - update to V22.09.00
  * debian: update changelog
  * acpi: iort: remove redundant code
  * fwts-test: add regression test for SVKL
  * acpi: svkl: add test for SVKL table (mantis 2162)
  * acpi: nhltdump: add endpoint discriptor string description
  * acpi: nhltdump: add dumping nhlt table for audio configurations</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1669377600">- Update to version 22.11.00:
  * lib: fwts_version.h - update to V22.11.00
  * debian: update changelog
  * auto-package: mkpackage.sh: add lunar
  * fwts-test: sync test logs with latest ACPICA
  * ACPICA: Update to version 20221020
  * Add Support for EV_COMPACT_HASH event type
  * fwts-test: add regression tests for CEDT
  * acpi: cedt: add tests for ACPI CEDT table (mantis 2076)
  * fwts-test: add regression test for RGRT
  * acpi: rgrt: add test for ACPI RGRT table( mantis 2056)
  * fwts-test: sync up with the default s3 sleep type description change
  * s3: modify the default sleep type description</changelog>
  <changelog author="mpluskal@suse.com" date="1672920000">- Update to version 22.11.00:
  * tpmevlog: add tests for checking the UEFI_IMAGE_LOAD_EVENT Structure
  * acpi: s3: fix the issue for determining time to resume</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1673956800">- Update to version 23.01.00:
  * lib: fwts_version.h - update to V23.01.00
  * debian: update changelog
  * fwts-test: sync up with the fix of passed reserved value
  * Update copyright year to 2023
  * lib: fwts_acpi_tables: fix the passed reserved value
  * fwts-test: add regression tests for AEST
  * acpi: aest: add tests for ACPI AEST table</changelog>
</package>
<package pkgid="f95fc109d14692c1af335413f07aef76b8408b2deb29bb0e12d3271d5221f538" name="fwts" arch="src">
  <version epoch="0" ver="23.01.00" rel="bp154.2.12.1"/>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1618488000">- Update to version 21.03.00:
  * See provided changelog for detailed list of changes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1619611200">- Switch to obs scm _service</changelog>
  <changelog author="Martin Pluskal mpluskal@suse.com" date="1621512000">- Update to version 21.03.00:
  * uefirtvariable: fix memory leak
  * acpi: refactor by fwts_acpi_reserved_type_check
  * acpi: refactor by fwts_acpi_structure_range_check
  * uefirtauthvar: check variable runtime services supported before testing (LP: #1913351)
  * uefirtvariable: check variable runtime services supported before testing (LP: #1913351)
  * uefirtmisc: check misc runtime services supported before testing (LP: #1913351)
  * uefirttime: check time services supported before testing (LP: #1913351)
  * acpi: spcr: accept baud rate 0x0 as a preconfigured state
  * fwts-test: sync up with PMTT rev 2 changes
  * acpi: pmtt: update PMTT to revision 2 (mantis 1975)</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1621857600">- Update to version 21.05.00:
  * lib: fwts_version.h - update to V21.05.00
  * debian: update changelog
  * auto-packager:mkpackage.sh: add impish
  * fwts-test: sync up with dbgp changes
  * acpi: dbgp/spmi: check space ids by fwts_acpi_space_id
  * acpiinfo: update ACPI 6.4 vs. ACPICA versions
  * lib: acpi: fix incorrect actual vs. struct length outputs
  * acpi: shorten helper function names by removing "check"
  * lib: acpi: unify naming style by removing "ACPI"
  * fwts-test: sync up with PMTT refactoring changes
  * acpi: refactor length check by fwts_acpi_structure_length_check
  * acpi: refactor zero length by fwts_acpi_structure_length_zero_check</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1624363200">- Update to version 21.06.00:
  * lib: fwts_version.h - update to V21.06.00
  * debian: update changelog
  * fwts_acpi_tables: memcpy 4 char ACPI table name
  * Remove complex disabling of ACPI for non-ACPI targets
  * Debian: move source lintian overrides file to source
  * Add lintian overrides for ldconfig trigger warning
  * Debian: control: update Standards-Version to 4.1.0
  * Debian: update compat level to 9
  * Debian: add Rules-Requires-Root field to control file
  * Debian: add project Homepage field to control file
  * debian/copyright: use secure https url specifier
  * Debian: remove spaces at end of lines of control file
  * Debian: remove spaces at end of lines of changelong
  * auto-packager: mkpackage.sh: remove xenial
  * live-image: add "TPM tests" to root menu
  * live-image: add utils tests to "Selected" menu
  * tpmevlog: add to batch tests
  * klog.json: check IRQ requests on irqchip</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1628078400">- Update to version 21.07.00:
  * ACPICA: Update to version 20210730
  * uefirttime: Fix incorrect error messages for invalid time test
  * fwts-test: sync up with updates in fwts_wmi_known_guids
  * acpi/wmi: update WMI known GUIDs from Linux kernel 5.14-rc1
  * sbbr: remove pm_file test (not required in BBR 1.0)
  * lib: fwts_version.h - update to V21.07.00
  * debian: update changelog
  * auto-packager: mkpackage.sh: remove groovy
  * uefirttime: add advice for the timezone 2047 failure (LP: #1933503)
  * fwts-test: sync up with DBG2 changes from BSA updates
  * fwts_acpi_tables: skip FACS warning for reduced hardware
  * acpi: method: Make _AEI test optional for SBBR
  * acpi: dbg2: Allow 16550 compatible serial port in DBG2
  * acpi: method: Make method_test_ADR() optional
  * sbbr: adjust signature name for MADT
  * sbbr: remove SSDT from mandatory list
  * sbbr: acpitables: add new recommended tables
  * acpi: acpitables: add advices for table revision tests</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1629892800">- Update to version 21.08.00:
  * lib: fwts_version.h - update to V21.08.00
  * debian: update changelog
  * ARM64 SMCCC firmware API tests
  * bios: smm: fix indentation
  * acpi: sbbr: refactor by fwts_get_fadt_version
  * lib: fwts_acpi_tables: add a function to get FADT versions
  * acpi: fadt: remove hard-coded FADT version
  * acpi: fadt: clarify comments of FACS and HW-reduced mode
  * acpi: dmar: add a warning when PCI device is not found</changelog>
  <changelog author="mpluskal@suse.com" date="1631620800">- Update to version 21.08.00:
  * Manual: update number of tests, date and remove double spaces
  * debian/control: Add device-tree-compiler as dependency for armel/armhf/arm64
  * fwts_firmware: Rework Devicetree firmware detection
  * Enable dt_sysinfo test for Power only</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1632916800">- Update to version 21.09.00:
  * snapcraft: Fix incorrect core20 library path
  * snapcraft: fix path to fwts
  * lib: fwts_version.h - update to V21.09.00
  * debian: update changelog
  * acpi: replace fwts_firmware_detect() by fw-&gt;firmware_type
  * lib: fwts_firmware: fix incorrect comments for fwts_firmware_detect
  * uefi: uefirtmisc: reduce scope of some variables
  * uefi: securebootcert: make some function arguments const
  * src/pci/smccc: reduce scope of variable ret
  * bios: smm: remove redundant variable n
  * acpi: iort: constify some function arguments
  * acpi: dmar: constify a pointer argument in acpi_parse_dev_scope
  * acpi: cstates: remove redundant null check on entry
  * smccc_test: fix missing ) in pr_info call
  * opal: clean up some coding style issues
  * opal: Fix a few memory leaks on asprint allocated buffers
  * acpi: s3power: clean up pedantic static analysis warnings
  * uefirtvariable: clean up pedantic static analysis warnings
  * opal: mem_info: clean up pedantic static analysis warnings
  * fwts_devicetree: clean up static analysis warning
  * fwts_acpi_tables: NULLify table pointers
  * snapcraft: update to use core20
  * lib: use &lt;poll.h&gt; rather than &lt;sys/poll.h&gt;</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1638532800">- Update to version 21.11.00:
  * lib: fwts_version.h - update to V21.11.00
  * debian: update changelog
  * auto-packager:mkpackage.sh: add jammy
  * fwts-test: sync up the adding sleep type for s2idle testing
  * s3: add sleep type setting for testing with s3 or s2idle
  * acpi: madt: De-initialise ACPICA core engine in case of error.
  * lib: fwts_smbios: fix loading SMBIOS table from uefi
  * acpi: uniqueid: skip comparison of _HID and _CID of the same device
  * ACPICA: Update to version 20210930</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1640088000">- Update to version 21.12.00:
  * lib: fwts_version.h - update to V21.12.00
  * debian: update changelog
  * dmicheck: skip scanning smbios in /dev/mem on aarch64
  * s3: increase s2idle_residency to u64 to avoid overflows
  * s3: fix incorrect error messages for s2idle_residency
  * acpi: uniqueid: clean up pedantic static analysis warnings
  * s4: clean up pedantic static analysis warnings</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1642593600">- Update build dependencies (add zlib)</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1644321600">- Update to version 22.01.00:
  * fwts-test: sync up the adding option for get next high monotonic count
  * uefirtmisc: add option to specify iterations get next high monitonic count
  * uefirtmisc: add checking the resources for testing
  * lib: fwts_version.h - update to V22.01.00
  * debian: update changelog
  * fwts_acpica: skip unneccessary null check
  * s3: use system suspend default if --s3-sleep-type is not used
  * tpmevlogdump: add supporting several new types for event log dumping
  * auto-packager: mkpackage.sh: remove hirsute
  * tpmevlog: add supporting several new types for event log checking
  * lib: fwts_tpm.h: add new type definition</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1648123200">- Update to version 22.03.00:
  * lib: fwts_version.h - update to V22.03.00
  * debian: update changelog
  * fwts-test: sync up the sdev checking secure access components
  * acpi: sdev: add checking secure access components
  * acpi: macf: report failures instead of just logging the errors
  * acpi/time: skip a number of TAD methods when _GCP[0] is clear
  * acpi:dmar: update the link of DMAR table
  * fwts-tests: update acpi dump data to be in sync with latest ACPICA
  * ACPICA: Update to version 20211217</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1653998400">- Update to version 22.05.00:
  * lib: fwts_version.h - update to V22.05.00
  * debian: update changelog
  * fwts-test: sync up IORT test with specification version E.d
  * acpi: mcfg: checking kernel lockdown when doing mmap PCI config space
  * auto-packager:mkpackage.sh: add kinetic
  * acpi: iort: update IORT test to specification version E.d
  * Update copyright year to 2022
  * acpi: iort: update the IORT node dump
  * acpi: iort: update IORT node revision check
  * ACPICA: Update to version 20220331</changelog>
  <changelog author="mpluskal@suse.com" date="1663156800">- Update to version 22.07.00:
  * acpi: fadt: get _CST c2 c3 for p_lvl2 and p_lvl3 tests
  * uefi: securebootcert: fix the attribute set for AuditMode and DeployedMode
  * lib: acpi: update battery charge limiting state for _BST
  * acpi: dbg2: update the subtype for DBG2 table
  * lib: fwts_version.h - update to V22.07.00
  * debian: update changelog
  * auto-packager: mkpackage.sh: remove impish
  * fwts-test: sync up with asf verbose dump
  * acpi: asf: enable verbose output
  * fwts-test: sync up the remove of ASF minimun watchdog reset value
  * acpi: asf: remove the checking of minmun watchdog reset value 0
  * fwts-test: sync up the fix of pmtt wrong table label
  * acpi: pmtt: fix the wrong table label
  * dmicheck: update the processor upgrade field for type 4
  * dmicheck: update for supporting DMI version to 3.5
  * dmicheck: add Processor Architecture Types check for type 44
  * build: Improve linking</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1665662400">- Update to version 22.09.00:
  * lib: fwts_version.h - update to V22.09.00
  * debian: update changelog
  * acpi: iort: remove redundant code
  * fwts-test: add regression test for SVKL
  * acpi: svkl: add test for SVKL table (mantis 2162)
  * acpi: nhltdump: add endpoint discriptor string description
  * acpi: nhltdump: add dumping nhlt table for audio configurations</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1669377600">- Update to version 22.11.00:
  * lib: fwts_version.h - update to V22.11.00
  * debian: update changelog
  * auto-package: mkpackage.sh: add lunar
  * fwts-test: sync test logs with latest ACPICA
  * ACPICA: Update to version 20221020
  * Add Support for EV_COMPACT_HASH event type
  * fwts-test: add regression tests for CEDT
  * acpi: cedt: add tests for ACPI CEDT table (mantis 2076)
  * fwts-test: add regression test for RGRT
  * acpi: rgrt: add test for ACPI RGRT table( mantis 2056)
  * fwts-test: sync up with the default s3 sleep type description change
  * s3: modify the default sleep type description</changelog>
  <changelog author="mpluskal@suse.com" date="1672920000">- Update to version 22.11.00:
  * tpmevlog: add tests for checking the UEFI_IMAGE_LOAD_EVENT Structure
  * acpi: s3: fix the issue for determining time to resume</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1673956800">- Update to version 23.01.00:
  * lib: fwts_version.h - update to V23.01.00
  * debian: update changelog
  * fwts-test: sync up with the fix of passed reserved value
  * Update copyright year to 2023
  * lib: fwts_acpi_tables: fix the passed reserved value
  * fwts-test: add regression tests for AEST
  * acpi: aest: add tests for ACPI AEST table</changelog>
</package>
<package pkgid="fe8076999792ad8674874f26b10ba4542c9a4562520560438e9b676afe25280e" name="fwts" arch="x86_64">
  <version epoch="0" ver="23.01.00" rel="bp154.2.12.1"/>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1618488000">- Update to version 21.03.00:
  * See provided changelog for detailed list of changes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1619611200">- Switch to obs scm _service</changelog>
  <changelog author="Martin Pluskal mpluskal@suse.com" date="1621512000">- Update to version 21.03.00:
  * uefirtvariable: fix memory leak
  * acpi: refactor by fwts_acpi_reserved_type_check
  * acpi: refactor by fwts_acpi_structure_range_check
  * uefirtauthvar: check variable runtime services supported before testing (LP: #1913351)
  * uefirtvariable: check variable runtime services supported before testing (LP: #1913351)
  * uefirtmisc: check misc runtime services supported before testing (LP: #1913351)
  * uefirttime: check time services supported before testing (LP: #1913351)
  * acpi: spcr: accept baud rate 0x0 as a preconfigured state
  * fwts-test: sync up with PMTT rev 2 changes
  * acpi: pmtt: update PMTT to revision 2 (mantis 1975)</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1621857600">- Update to version 21.05.00:
  * lib: fwts_version.h - update to V21.05.00
  * debian: update changelog
  * auto-packager:mkpackage.sh: add impish
  * fwts-test: sync up with dbgp changes
  * acpi: dbgp/spmi: check space ids by fwts_acpi_space_id
  * acpiinfo: update ACPI 6.4 vs. ACPICA versions
  * lib: acpi: fix incorrect actual vs. struct length outputs
  * acpi: shorten helper function names by removing "check"
  * lib: acpi: unify naming style by removing "ACPI"
  * fwts-test: sync up with PMTT refactoring changes
  * acpi: refactor length check by fwts_acpi_structure_length_check
  * acpi: refactor zero length by fwts_acpi_structure_length_zero_check</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1624363200">- Update to version 21.06.00:
  * lib: fwts_version.h - update to V21.06.00
  * debian: update changelog
  * fwts_acpi_tables: memcpy 4 char ACPI table name
  * Remove complex disabling of ACPI for non-ACPI targets
  * Debian: move source lintian overrides file to source
  * Add lintian overrides for ldconfig trigger warning
  * Debian: control: update Standards-Version to 4.1.0
  * Debian: update compat level to 9
  * Debian: add Rules-Requires-Root field to control file
  * Debian: add project Homepage field to control file
  * debian/copyright: use secure https url specifier
  * Debian: remove spaces at end of lines of control file
  * Debian: remove spaces at end of lines of changelong
  * auto-packager: mkpackage.sh: remove xenial
  * live-image: add "TPM tests" to root menu
  * live-image: add utils tests to "Selected" menu
  * tpmevlog: add to batch tests
  * klog.json: check IRQ requests on irqchip</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1628078400">- Update to version 21.07.00:
  * ACPICA: Update to version 20210730
  * uefirttime: Fix incorrect error messages for invalid time test
  * fwts-test: sync up with updates in fwts_wmi_known_guids
  * acpi/wmi: update WMI known GUIDs from Linux kernel 5.14-rc1
  * sbbr: remove pm_file test (not required in BBR 1.0)
  * lib: fwts_version.h - update to V21.07.00
  * debian: update changelog
  * auto-packager: mkpackage.sh: remove groovy
  * uefirttime: add advice for the timezone 2047 failure (LP: #1933503)
  * fwts-test: sync up with DBG2 changes from BSA updates
  * fwts_acpi_tables: skip FACS warning for reduced hardware
  * acpi: method: Make _AEI test optional for SBBR
  * acpi: dbg2: Allow 16550 compatible serial port in DBG2
  * acpi: method: Make method_test_ADR() optional
  * sbbr: adjust signature name for MADT
  * sbbr: remove SSDT from mandatory list
  * sbbr: acpitables: add new recommended tables
  * acpi: acpitables: add advices for table revision tests</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1629892800">- Update to version 21.08.00:
  * lib: fwts_version.h - update to V21.08.00
  * debian: update changelog
  * ARM64 SMCCC firmware API tests
  * bios: smm: fix indentation
  * acpi: sbbr: refactor by fwts_get_fadt_version
  * lib: fwts_acpi_tables: add a function to get FADT versions
  * acpi: fadt: remove hard-coded FADT version
  * acpi: fadt: clarify comments of FACS and HW-reduced mode
  * acpi: dmar: add a warning when PCI device is not found</changelog>
  <changelog author="mpluskal@suse.com" date="1631620800">- Update to version 21.08.00:
  * Manual: update number of tests, date and remove double spaces
  * debian/control: Add device-tree-compiler as dependency for armel/armhf/arm64
  * fwts_firmware: Rework Devicetree firmware detection
  * Enable dt_sysinfo test for Power only</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1632916800">- Update to version 21.09.00:
  * snapcraft: Fix incorrect core20 library path
  * snapcraft: fix path to fwts
  * lib: fwts_version.h - update to V21.09.00
  * debian: update changelog
  * acpi: replace fwts_firmware_detect() by fw-&gt;firmware_type
  * lib: fwts_firmware: fix incorrect comments for fwts_firmware_detect
  * uefi: uefirtmisc: reduce scope of some variables
  * uefi: securebootcert: make some function arguments const
  * src/pci/smccc: reduce scope of variable ret
  * bios: smm: remove redundant variable n
  * acpi: iort: constify some function arguments
  * acpi: dmar: constify a pointer argument in acpi_parse_dev_scope
  * acpi: cstates: remove redundant null check on entry
  * smccc_test: fix missing ) in pr_info call
  * opal: clean up some coding style issues
  * opal: Fix a few memory leaks on asprint allocated buffers
  * acpi: s3power: clean up pedantic static analysis warnings
  * uefirtvariable: clean up pedantic static analysis warnings
  * opal: mem_info: clean up pedantic static analysis warnings
  * fwts_devicetree: clean up static analysis warning
  * fwts_acpi_tables: NULLify table pointers
  * snapcraft: update to use core20
  * lib: use &lt;poll.h&gt; rather than &lt;sys/poll.h&gt;</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1638532800">- Update to version 21.11.00:
  * lib: fwts_version.h - update to V21.11.00
  * debian: update changelog
  * auto-packager:mkpackage.sh: add jammy
  * fwts-test: sync up the adding sleep type for s2idle testing
  * s3: add sleep type setting for testing with s3 or s2idle
  * acpi: madt: De-initialise ACPICA core engine in case of error.
  * lib: fwts_smbios: fix loading SMBIOS table from uefi
  * acpi: uniqueid: skip comparison of _HID and _CID of the same device
  * ACPICA: Update to version 20210930</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1640088000">- Update to version 21.12.00:
  * lib: fwts_version.h - update to V21.12.00
  * debian: update changelog
  * dmicheck: skip scanning smbios in /dev/mem on aarch64
  * s3: increase s2idle_residency to u64 to avoid overflows
  * s3: fix incorrect error messages for s2idle_residency
  * acpi: uniqueid: clean up pedantic static analysis warnings
  * s4: clean up pedantic static analysis warnings</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1642593600">- Update build dependencies (add zlib)</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1644321600">- Update to version 22.01.00:
  * fwts-test: sync up the adding option for get next high monotonic count
  * uefirtmisc: add option to specify iterations get next high monitonic count
  * uefirtmisc: add checking the resources for testing
  * lib: fwts_version.h - update to V22.01.00
  * debian: update changelog
  * fwts_acpica: skip unneccessary null check
  * s3: use system suspend default if --s3-sleep-type is not used
  * tpmevlogdump: add supporting several new types for event log dumping
  * auto-packager: mkpackage.sh: remove hirsute
  * tpmevlog: add supporting several new types for event log checking
  * lib: fwts_tpm.h: add new type definition</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1648123200">- Update to version 22.03.00:
  * lib: fwts_version.h - update to V22.03.00
  * debian: update changelog
  * fwts-test: sync up the sdev checking secure access components
  * acpi: sdev: add checking secure access components
  * acpi: macf: report failures instead of just logging the errors
  * acpi/time: skip a number of TAD methods when _GCP[0] is clear
  * acpi:dmar: update the link of DMAR table
  * fwts-tests: update acpi dump data to be in sync with latest ACPICA
  * ACPICA: Update to version 20211217</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1653998400">- Update to version 22.05.00:
  * lib: fwts_version.h - update to V22.05.00
  * debian: update changelog
  * fwts-test: sync up IORT test with specification version E.d
  * acpi: mcfg: checking kernel lockdown when doing mmap PCI config space
  * auto-packager:mkpackage.sh: add kinetic
  * acpi: iort: update IORT test to specification version E.d
  * Update copyright year to 2022
  * acpi: iort: update the IORT node dump
  * acpi: iort: update IORT node revision check
  * ACPICA: Update to version 20220331</changelog>
  <changelog author="mpluskal@suse.com" date="1663156800">- Update to version 22.07.00:
  * acpi: fadt: get _CST c2 c3 for p_lvl2 and p_lvl3 tests
  * uefi: securebootcert: fix the attribute set for AuditMode and DeployedMode
  * lib: acpi: update battery charge limiting state for _BST
  * acpi: dbg2: update the subtype for DBG2 table
  * lib: fwts_version.h - update to V22.07.00
  * debian: update changelog
  * auto-packager: mkpackage.sh: remove impish
  * fwts-test: sync up with asf verbose dump
  * acpi: asf: enable verbose output
  * fwts-test: sync up the remove of ASF minimun watchdog reset value
  * acpi: asf: remove the checking of minmun watchdog reset value 0
  * fwts-test: sync up the fix of pmtt wrong table label
  * acpi: pmtt: fix the wrong table label
  * dmicheck: update the processor upgrade field for type 4
  * dmicheck: update for supporting DMI version to 3.5
  * dmicheck: add Processor Architecture Types check for type 44
  * build: Improve linking</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1665662400">- Update to version 22.09.00:
  * lib: fwts_version.h - update to V22.09.00
  * debian: update changelog
  * acpi: iort: remove redundant code
  * fwts-test: add regression test for SVKL
  * acpi: svkl: add test for SVKL table (mantis 2162)
  * acpi: nhltdump: add endpoint discriptor string description
  * acpi: nhltdump: add dumping nhlt table for audio configurations</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1669377600">- Update to version 22.11.00:
  * lib: fwts_version.h - update to V22.11.00
  * debian: update changelog
  * auto-package: mkpackage.sh: add lunar
  * fwts-test: sync test logs with latest ACPICA
  * ACPICA: Update to version 20221020
  * Add Support for EV_COMPACT_HASH event type
  * fwts-test: add regression tests for CEDT
  * acpi: cedt: add tests for ACPI CEDT table (mantis 2076)
  * fwts-test: add regression test for RGRT
  * acpi: rgrt: add test for ACPI RGRT table( mantis 2056)
  * fwts-test: sync up with the default s3 sleep type description change
  * s3: modify the default sleep type description</changelog>
  <changelog author="mpluskal@suse.com" date="1672920000">- Update to version 22.11.00:
  * tpmevlog: add tests for checking the UEFI_IMAGE_LOAD_EVENT Structure
  * acpi: s3: fix the issue for determining time to resume</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1673956800">- Update to version 23.01.00:
  * lib: fwts_version.h - update to V23.01.00
  * debian: update changelog
  * fwts-test: sync up with the fix of passed reserved value
  * Update copyright year to 2023
  * lib: fwts_acpi_tables: fix the passed reserved value
  * fwts-test: add regression tests for AEST
  * acpi: aest: add tests for ACPI AEST table</changelog>
</package>
<package pkgid="a0ae0f9ed5960f9074ff30ebc4d5cd33437caad3695c3b99998702b3ec20112d" name="gdal" arch="aarch64">
  <version epoch="0" ver="3.4.1" rel="bp154.2.2.1"/>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1593518400">- Update to 3.1.1 version with full changelog
  https://github.com/OSGeo/gdal/blob/v3.1.1/gdal/NEWS
- Packaging:
  + drop merged upstream gdal-fix-docs.patch
  + Rework our way to deliver the package:
  - Remove building doc as we don't deliver it
  - Use upstream man page already present in tar
  - Simplify all %if doc related stuff
  + Lower again a bit _constraints: 2.5G RAM 4.0G HDD</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1594123200">- Update to 3.1.2 version bug fix release see changelog
  https://github.com/OSGeo/gdal/blob/v3.1.1/gdal/NEWS</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595160000">- Work-around occasional build failures due to incomplete ordering
  in Makefile. (https://github.com/OSGeo/gdal/issues/2777)
- Avoid double gdal prefix for /usr/share/gdal/gdal/*</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1599566400">- Update to 3.1.3 version bug fix release see changelog
  https://github.com/OSGeo/gdal/blob/v3.1.3/gdal/NEWS</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1603540800">- Update to 3.1.4 version bug fix release see changelog
  https://github.com/OSGeo/gdal/blob/v3.1.4/gdal/NEWS</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1604491200">- Update to 3.2.0:
  * Full changelog
    https://github.com/OSGeo/gdal/blob/v3.2.0/gdal/NEWS
- Packaging:
  + Add python3-GDAL as require in gdal package
  + Remove shebang where it's not allowed in python's scripts</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1609761600">- Update to 3.2.1:
  * Full changelog
    https://github.com/OSGeo/gdal/blob/v3.2.1/gdal/NEWS
- Packaging:
  + Update copyright year</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1615550400">- Update to 3.2.2 (bug fix release):
  * Full changelog
    https://github.com/OSGeo/gdal/blob/v3.2.2/gdal/NEWS</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1620129600">- Update to 3.2.3 (bug fix release)
  * Full changelog
    https://github.com/OSGeo/gdal/blob/v3.2.3/gdal/NEWS
- Be warned about ahead changes with future 3.3.x version
    https://github.com/OSGeo/gdal/blob/v3.3.0/gdal/NEWS</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1621252800">- remove bundled libraries, use system provided ones</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1621857600">- Update to 3.3.0 version
  * Full changelog
    https://github.com/OSGeo/gdal/blob/v3.3.0/gdal/NEWS
  * Main changes python2 is now gone
- Packaging
  + bump libso version to 2.9
  + Remove python2 related stuff
  + Add support for heif,pcre,kml,sfcgal
    make conditionnal support of libkml, sfcgal, heif
  + Prepare tests also conditionnal
  + Several small cleanup (merged, no more)
  + Remove autoreconf upstream is using last available</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1626004800">- Update to version 3.3.1 bugfix release
  + Full changelog
    https://github.com/OSGeo/gdal/blob/v3.3.1/gdal/NEWS</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1631016000">- Update to version 3.3.2 bugfix release
  + Full changelog
    https://github.com/OSGeo/gdal/blob/v3.3.2/gdal/NEWS</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1634731200">- Fix build with poppler 2.10:
  * gdal-poppler-2.10-a.patch
  * gdal-poppler-2.10-b.patch</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1635768000">- Update to version 3.3.3 bugfix release
  + Full changelog https://github.com/OSGeo/gdal/blob/v3.3.3/gdal/NEWS
- Removed upstream patches
  + gdal-poppler-2.10-a.patch
  + gdal-poppler-2.10-b.patch</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1638187200">- Fix xerces detection by adding --with-xerces-inc parameter</changelog>
  <changelog author="D. Berge &lt;opensuse@navlost.eu&gt;" date="1640952000">- Fix build on Leap 15.3</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1641297600">- Upgrade to version 3.4.1 bugfix release
  + Full changelog https://github.com/OSGeo/gdal/blob/v3.4.0/gdal/NEWS
  + Explicitly add a call to autogen.sh
  + Upstream PCIDSK: fix write heap-buffer-overflow boo#1194263
- Removed GDALmake.opt.in.patch due to cc1plus: warning:
  - I gcore: No such file or directory [-Wmissing-include-dirs]
- Add conditionnal support for hdf4 boo#1192614 on Leap
  build -with hdf4_support can be enabled
- Update copyright year</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1646654400">- Add gdal-fix-build-poppler.patch: Fix build with poppler 22.03.0
  and newer.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1646740800">- Add gdal-fix-poppler-leap.patch: Fix build on Leap 15.4 and
  poppler.
- Add fdups macro, BuildRequires already in place, remove
  duplicate files.</changelog>
</package>
<package pkgid="1e953ffb1e52e78ba70fcc84ed63632d81ccb13cedc681ea3e012684d13a1800" name="gdal" arch="ppc64le">
  <version epoch="0" ver="3.4.1" rel="bp154.2.2.1"/>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1593518400">- Update to 3.1.1 version with full changelog
  https://github.com/OSGeo/gdal/blob/v3.1.1/gdal/NEWS
- Packaging:
  + drop merged upstream gdal-fix-docs.patch
  + Rework our way to deliver the package:
  - Remove building doc as we don't deliver it
  - Use upstream man page already present in tar
  - Simplify all %if doc related stuff
  + Lower again a bit _constraints: 2.5G RAM 4.0G HDD</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1594123200">- Update to 3.1.2 version bug fix release see changelog
  https://github.com/OSGeo/gdal/blob/v3.1.1/gdal/NEWS</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595160000">- Work-around occasional build failures due to incomplete ordering
  in Makefile. (https://github.com/OSGeo/gdal/issues/2777)
- Avoid double gdal prefix for /usr/share/gdal/gdal/*</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1599566400">- Update to 3.1.3 version bug fix release see changelog
  https://github.com/OSGeo/gdal/blob/v3.1.3/gdal/NEWS</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1603540800">- Update to 3.1.4 version bug fix release see changelog
  https://github.com/OSGeo/gdal/blob/v3.1.4/gdal/NEWS</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1604491200">- Update to 3.2.0:
  * Full changelog
    https://github.com/OSGeo/gdal/blob/v3.2.0/gdal/NEWS
- Packaging:
  + Add python3-GDAL as require in gdal package
  + Remove shebang where it's not allowed in python's scripts</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1609761600">- Update to 3.2.1:
  * Full changelog
    https://github.com/OSGeo/gdal/blob/v3.2.1/gdal/NEWS
- Packaging:
  + Update copyright year</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1615550400">- Update to 3.2.2 (bug fix release):
  * Full changelog
    https://github.com/OSGeo/gdal/blob/v3.2.2/gdal/NEWS</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1620129600">- Update to 3.2.3 (bug fix release)
  * Full changelog
    https://github.com/OSGeo/gdal/blob/v3.2.3/gdal/NEWS
- Be warned about ahead changes with future 3.3.x version
    https://github.com/OSGeo/gdal/blob/v3.3.0/gdal/NEWS</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1621252800">- remove bundled libraries, use system provided ones</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1621857600">- Update to 3.3.0 version
  * Full changelog
    https://github.com/OSGeo/gdal/blob/v3.3.0/gdal/NEWS
  * Main changes python2 is now gone
- Packaging
  + bump libso version to 2.9
  + Remove python2 related stuff
  + Add support for heif,pcre,kml,sfcgal
    make conditionnal support of libkml, sfcgal, heif
  + Prepare tests also conditionnal
  + Several small cleanup (merged, no more)
  + Remove autoreconf upstream is using last available</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1626004800">- Update to version 3.3.1 bugfix release
  + Full changelog
    https://github.com/OSGeo/gdal/blob/v3.3.1/gdal/NEWS</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1631016000">- Update to version 3.3.2 bugfix release
  + Full changelog
    https://github.com/OSGeo/gdal/blob/v3.3.2/gdal/NEWS</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1634731200">- Fix build with poppler 2.10:
  * gdal-poppler-2.10-a.patch
  * gdal-poppler-2.10-b.patch</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1635768000">- Update to version 3.3.3 bugfix release
  + Full changelog https://github.com/OSGeo/gdal/blob/v3.3.3/gdal/NEWS
- Removed upstream patches
  + gdal-poppler-2.10-a.patch
  + gdal-poppler-2.10-b.patch</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1638187200">- Fix xerces detection by adding --with-xerces-inc parameter</changelog>
  <changelog author="D. Berge &lt;opensuse@navlost.eu&gt;" date="1640952000">- Fix build on Leap 15.3</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1641297600">- Upgrade to version 3.4.1 bugfix release
  + Full changelog https://github.com/OSGeo/gdal/blob/v3.4.0/gdal/NEWS
  + Explicitly add a call to autogen.sh
  + Upstream PCIDSK: fix write heap-buffer-overflow boo#1194263
- Removed GDALmake.opt.in.patch due to cc1plus: warning:
  - I gcore: No such file or directory [-Wmissing-include-dirs]
- Add conditionnal support for hdf4 boo#1192614 on Leap
  build -with hdf4_support can be enabled
- Update copyright year</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1646654400">- Add gdal-fix-build-poppler.patch: Fix build with poppler 22.03.0
  and newer.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1646740800">- Add gdal-fix-poppler-leap.patch: Fix build on Leap 15.4 and
  poppler.
- Add fdups macro, BuildRequires already in place, remove
  duplicate files.</changelog>
</package>
<package pkgid="fc8c0c3d7ea338893d4210a81b6806e6e8bdf8257bd36d67d6f38647ec13135c" name="gdal" arch="s390x">
  <version epoch="0" ver="3.4.1" rel="bp154.2.2.1"/>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1593518400">- Update to 3.1.1 version with full changelog
  https://github.com/OSGeo/gdal/blob/v3.1.1/gdal/NEWS
- Packaging:
  + drop merged upstream gdal-fix-docs.patch
  + Rework our way to deliver the package:
  - Remove building doc as we don't deliver it
  - Use upstream man page already present in tar
  - Simplify all %if doc related stuff
  + Lower again a bit _constraints: 2.5G RAM 4.0G HDD</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1594123200">- Update to 3.1.2 version bug fix release see changelog
  https://github.com/OSGeo/gdal/blob/v3.1.1/gdal/NEWS</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595160000">- Work-around occasional build failures due to incomplete ordering
  in Makefile. (https://github.com/OSGeo/gdal/issues/2777)
- Avoid double gdal prefix for /usr/share/gdal/gdal/*</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1599566400">- Update to 3.1.3 version bug fix release see changelog
  https://github.com/OSGeo/gdal/blob/v3.1.3/gdal/NEWS</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1603540800">- Update to 3.1.4 version bug fix release see changelog
  https://github.com/OSGeo/gdal/blob/v3.1.4/gdal/NEWS</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1604491200">- Update to 3.2.0:
  * Full changelog
    https://github.com/OSGeo/gdal/blob/v3.2.0/gdal/NEWS
- Packaging:
  + Add python3-GDAL as require in gdal package
  + Remove shebang where it's not allowed in python's scripts</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1609761600">- Update to 3.2.1:
  * Full changelog
    https://github.com/OSGeo/gdal/blob/v3.2.1/gdal/NEWS
- Packaging:
  + Update copyright year</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1615550400">- Update to 3.2.2 (bug fix release):
  * Full changelog
    https://github.com/OSGeo/gdal/blob/v3.2.2/gdal/NEWS</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1620129600">- Update to 3.2.3 (bug fix release)
  * Full changelog
    https://github.com/OSGeo/gdal/blob/v3.2.3/gdal/NEWS
- Be warned about ahead changes with future 3.3.x version
    https://github.com/OSGeo/gdal/blob/v3.3.0/gdal/NEWS</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1621252800">- remove bundled libraries, use system provided ones</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1621857600">- Update to 3.3.0 version
  * Full changelog
    https://github.com/OSGeo/gdal/blob/v3.3.0/gdal/NEWS
  * Main changes python2 is now gone
- Packaging
  + bump libso version to 2.9
  + Remove python2 related stuff
  + Add support for heif,pcre,kml,sfcgal
    make conditionnal support of libkml, sfcgal, heif
  + Prepare tests also conditionnal
  + Several small cleanup (merged, no more)
  + Remove autoreconf upstream is using last available</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1626004800">- Update to version 3.3.1 bugfix release
  + Full changelog
    https://github.com/OSGeo/gdal/blob/v3.3.1/gdal/NEWS</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1631016000">- Update to version 3.3.2 bugfix release
  + Full changelog
    https://github.com/OSGeo/gdal/blob/v3.3.2/gdal/NEWS</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1634731200">- Fix build with poppler 2.10:
  * gdal-poppler-2.10-a.patch
  * gdal-poppler-2.10-b.patch</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1635768000">- Update to version 3.3.3 bugfix release
  + Full changelog https://github.com/OSGeo/gdal/blob/v3.3.3/gdal/NEWS
- Removed upstream patches
  + gdal-poppler-2.10-a.patch
  + gdal-poppler-2.10-b.patch</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1638187200">- Fix xerces detection by adding --with-xerces-inc parameter</changelog>
  <changelog author="D. Berge &lt;opensuse@navlost.eu&gt;" date="1640952000">- Fix build on Leap 15.3</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1641297600">- Upgrade to version 3.4.1 bugfix release
  + Full changelog https://github.com/OSGeo/gdal/blob/v3.4.0/gdal/NEWS
  + Explicitly add a call to autogen.sh
  + Upstream PCIDSK: fix write heap-buffer-overflow boo#1194263
- Removed GDALmake.opt.in.patch due to cc1plus: warning:
  - I gcore: No such file or directory [-Wmissing-include-dirs]
- Add conditionnal support for hdf4 boo#1192614 on Leap
  build -with hdf4_support can be enabled
- Update copyright year</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1646654400">- Add gdal-fix-build-poppler.patch: Fix build with poppler 22.03.0
  and newer.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1646740800">- Add gdal-fix-poppler-leap.patch: Fix build on Leap 15.4 and
  poppler.
- Add fdups macro, BuildRequires already in place, remove
  duplicate files.</changelog>
</package>
<package pkgid="1a0f97bd8bced978a2bd52b3382a609ae643c6545dd80d2be35ba32849de2b27" name="gdal" arch="src">
  <version epoch="0" ver="3.4.1" rel="bp154.2.2.1"/>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1593518400">- Update to 3.1.1 version with full changelog
  https://github.com/OSGeo/gdal/blob/v3.1.1/gdal/NEWS
- Packaging:
  + drop merged upstream gdal-fix-docs.patch
  + Rework our way to deliver the package:
  - Remove building doc as we don't deliver it
  - Use upstream man page already present in tar
  - Simplify all %if doc related stuff
  + Lower again a bit _constraints: 2.5G RAM 4.0G HDD</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1594123200">- Update to 3.1.2 version bug fix release see changelog
  https://github.com/OSGeo/gdal/blob/v3.1.1/gdal/NEWS</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595160000">- Work-around occasional build failures due to incomplete ordering
  in Makefile. (https://github.com/OSGeo/gdal/issues/2777)
- Avoid double gdal prefix for /usr/share/gdal/gdal/*</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1599566400">- Update to 3.1.3 version bug fix release see changelog
  https://github.com/OSGeo/gdal/blob/v3.1.3/gdal/NEWS</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1603540800">- Update to 3.1.4 version bug fix release see changelog
  https://github.com/OSGeo/gdal/blob/v3.1.4/gdal/NEWS</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1604491200">- Update to 3.2.0:
  * Full changelog
    https://github.com/OSGeo/gdal/blob/v3.2.0/gdal/NEWS
- Packaging:
  + Add python3-GDAL as require in gdal package
  + Remove shebang where it's not allowed in python's scripts</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1609761600">- Update to 3.2.1:
  * Full changelog
    https://github.com/OSGeo/gdal/blob/v3.2.1/gdal/NEWS
- Packaging:
  + Update copyright year</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1615550400">- Update to 3.2.2 (bug fix release):
  * Full changelog
    https://github.com/OSGeo/gdal/blob/v3.2.2/gdal/NEWS</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1620129600">- Update to 3.2.3 (bug fix release)
  * Full changelog
    https://github.com/OSGeo/gdal/blob/v3.2.3/gdal/NEWS
- Be warned about ahead changes with future 3.3.x version
    https://github.com/OSGeo/gdal/blob/v3.3.0/gdal/NEWS</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1621252800">- remove bundled libraries, use system provided ones</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1621857600">- Update to 3.3.0 version
  * Full changelog
    https://github.com/OSGeo/gdal/blob/v3.3.0/gdal/NEWS
  * Main changes python2 is now gone
- Packaging
  + bump libso version to 2.9
  + Remove python2 related stuff
  + Add support for heif,pcre,kml,sfcgal
    make conditionnal support of libkml, sfcgal, heif
  + Prepare tests also conditionnal
  + Several small cleanup (merged, no more)
  + Remove autoreconf upstream is using last available</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1626004800">- Update to version 3.3.1 bugfix release
  + Full changelog
    https://github.com/OSGeo/gdal/blob/v3.3.1/gdal/NEWS</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1631016000">- Update to version 3.3.2 bugfix release
  + Full changelog
    https://github.com/OSGeo/gdal/blob/v3.3.2/gdal/NEWS</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1634731200">- Fix build with poppler 2.10:
  * gdal-poppler-2.10-a.patch
  * gdal-poppler-2.10-b.patch</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1635768000">- Update to version 3.3.3 bugfix release
  + Full changelog https://github.com/OSGeo/gdal/blob/v3.3.3/gdal/NEWS
- Removed upstream patches
  + gdal-poppler-2.10-a.patch
  + gdal-poppler-2.10-b.patch</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1638187200">- Fix xerces detection by adding --with-xerces-inc parameter</changelog>
  <changelog author="D. Berge &lt;opensuse@navlost.eu&gt;" date="1640952000">- Fix build on Leap 15.3</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1641297600">- Upgrade to version 3.4.1 bugfix release
  + Full changelog https://github.com/OSGeo/gdal/blob/v3.4.0/gdal/NEWS
  + Explicitly add a call to autogen.sh
  + Upstream PCIDSK: fix write heap-buffer-overflow boo#1194263
- Removed GDALmake.opt.in.patch due to cc1plus: warning:
  - I gcore: No such file or directory [-Wmissing-include-dirs]
- Add conditionnal support for hdf4 boo#1192614 on Leap
  build -with hdf4_support can be enabled
- Update copyright year</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1646654400">- Add gdal-fix-build-poppler.patch: Fix build with poppler 22.03.0
  and newer.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1646740800">- Add gdal-fix-poppler-leap.patch: Fix build on Leap 15.4 and
  poppler.
- Add fdups macro, BuildRequires already in place, remove
  duplicate files.</changelog>
</package>
<package pkgid="6c14b482e13857bbd73e7a56e25d96a6039a1556507391247427aa61312dad07" name="gdal" arch="x86_64">
  <version epoch="0" ver="3.4.1" rel="bp154.2.2.1"/>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1593518400">- Update to 3.1.1 version with full changelog
  https://github.com/OSGeo/gdal/blob/v3.1.1/gdal/NEWS
- Packaging:
  + drop merged upstream gdal-fix-docs.patch
  + Rework our way to deliver the package:
  - Remove building doc as we don't deliver it
  - Use upstream man page already present in tar
  - Simplify all %if doc related stuff
  + Lower again a bit _constraints: 2.5G RAM 4.0G HDD</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1594123200">- Update to 3.1.2 version bug fix release see changelog
  https://github.com/OSGeo/gdal/blob/v3.1.1/gdal/NEWS</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595160000">- Work-around occasional build failures due to incomplete ordering
  in Makefile. (https://github.com/OSGeo/gdal/issues/2777)
- Avoid double gdal prefix for /usr/share/gdal/gdal/*</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1599566400">- Update to 3.1.3 version bug fix release see changelog
  https://github.com/OSGeo/gdal/blob/v3.1.3/gdal/NEWS</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1603540800">- Update to 3.1.4 version bug fix release see changelog
  https://github.com/OSGeo/gdal/blob/v3.1.4/gdal/NEWS</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1604491200">- Update to 3.2.0:
  * Full changelog
    https://github.com/OSGeo/gdal/blob/v3.2.0/gdal/NEWS
- Packaging:
  + Add python3-GDAL as require in gdal package
  + Remove shebang where it's not allowed in python's scripts</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1609761600">- Update to 3.2.1:
  * Full changelog
    https://github.com/OSGeo/gdal/blob/v3.2.1/gdal/NEWS
- Packaging:
  + Update copyright year</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1615550400">- Update to 3.2.2 (bug fix release):
  * Full changelog
    https://github.com/OSGeo/gdal/blob/v3.2.2/gdal/NEWS</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1620129600">- Update to 3.2.3 (bug fix release)
  * Full changelog
    https://github.com/OSGeo/gdal/blob/v3.2.3/gdal/NEWS
- Be warned about ahead changes with future 3.3.x version
    https://github.com/OSGeo/gdal/blob/v3.3.0/gdal/NEWS</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1621252800">- remove bundled libraries, use system provided ones</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1621857600">- Update to 3.3.0 version
  * Full changelog
    https://github.com/OSGeo/gdal/blob/v3.3.0/gdal/NEWS
  * Main changes python2 is now gone
- Packaging
  + bump libso version to 2.9
  + Remove python2 related stuff
  + Add support for heif,pcre,kml,sfcgal
    make conditionnal support of libkml, sfcgal, heif
  + Prepare tests also conditionnal
  + Several small cleanup (merged, no more)
  + Remove autoreconf upstream is using last available</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1626004800">- Update to version 3.3.1 bugfix release
  + Full changelog
    https://github.com/OSGeo/gdal/blob/v3.3.1/gdal/NEWS</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1631016000">- Update to version 3.3.2 bugfix release
  + Full changelog
    https://github.com/OSGeo/gdal/blob/v3.3.2/gdal/NEWS</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1634731200">- Fix build with poppler 2.10:
  * gdal-poppler-2.10-a.patch
  * gdal-poppler-2.10-b.patch</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1635768000">- Update to version 3.3.3 bugfix release
  + Full changelog https://github.com/OSGeo/gdal/blob/v3.3.3/gdal/NEWS
- Removed upstream patches
  + gdal-poppler-2.10-a.patch
  + gdal-poppler-2.10-b.patch</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1638187200">- Fix xerces detection by adding --with-xerces-inc parameter</changelog>
  <changelog author="D. Berge &lt;opensuse@navlost.eu&gt;" date="1640952000">- Fix build on Leap 15.3</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1641297600">- Upgrade to version 3.4.1 bugfix release
  + Full changelog https://github.com/OSGeo/gdal/blob/v3.4.0/gdal/NEWS
  + Explicitly add a call to autogen.sh
  + Upstream PCIDSK: fix write heap-buffer-overflow boo#1194263
- Removed GDALmake.opt.in.patch due to cc1plus: warning:
  - I gcore: No such file or directory [-Wmissing-include-dirs]
- Add conditionnal support for hdf4 boo#1192614 on Leap
  build -with hdf4_support can be enabled
- Update copyright year</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1646654400">- Add gdal-fix-build-poppler.patch: Fix build with poppler 22.03.0
  and newer.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1646740800">- Add gdal-fix-poppler-leap.patch: Fix build on Leap 15.4 and
  poppler.
- Add fdups macro, BuildRequires already in place, remove
  duplicate files.</changelog>
</package>
<package pkgid="f37dbf513cac1b3ae83fe2fc11ebc0cba71ba1ff03854f7f286f9d291b23ae31" name="gdal-devel" arch="aarch64">
  <version epoch="0" ver="3.4.1" rel="bp154.2.2.1"/>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1593518400">- Update to 3.1.1 version with full changelog
  https://github.com/OSGeo/gdal/blob/v3.1.1/gdal/NEWS
- Packaging:
  + drop merged upstream gdal-fix-docs.patch
  + Rework our way to deliver the package:
  - Remove building doc as we don't deliver it
  - Use upstream man page already present in tar
  - Simplify all %if doc related stuff
  + Lower again a bit _constraints: 2.5G RAM 4.0G HDD</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1594123200">- Update to 3.1.2 version bug fix release see changelog
  https://github.com/OSGeo/gdal/blob/v3.1.1/gdal/NEWS</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595160000">- Work-around occasional build failures due to incomplete ordering
  in Makefile. (https://github.com/OSGeo/gdal/issues/2777)
- Avoid double gdal prefix for /usr/share/gdal/gdal/*</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1599566400">- Update to 3.1.3 version bug fix release see changelog
  https://github.com/OSGeo/gdal/blob/v3.1.3/gdal/NEWS</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1603540800">- Update to 3.1.4 version bug fix release see changelog
  https://github.com/OSGeo/gdal/blob/v3.1.4/gdal/NEWS</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1604491200">- Update to 3.2.0:
  * Full changelog
    https://github.com/OSGeo/gdal/blob/v3.2.0/gdal/NEWS
- Packaging:
  + Add python3-GDAL as require in gdal package
  + Remove shebang where it's not allowed in python's scripts</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1609761600">- Update to 3.2.1:
  * Full changelog
    https://github.com/OSGeo/gdal/blob/v3.2.1/gdal/NEWS
- Packaging:
  + Update copyright year</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1615550400">- Update to 3.2.2 (bug fix release):
  * Full changelog
    https://github.com/OSGeo/gdal/blob/v3.2.2/gdal/NEWS</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1620129600">- Update to 3.2.3 (bug fix release)
  * Full changelog
    https://github.com/OSGeo/gdal/blob/v3.2.3/gdal/NEWS
- Be warned about ahead changes with future 3.3.x version
    https://github.com/OSGeo/gdal/blob/v3.3.0/gdal/NEWS</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1621252800">- remove bundled libraries, use system provided ones</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1621857600">- Update to 3.3.0 version
  * Full changelog
    https://github.com/OSGeo/gdal/blob/v3.3.0/gdal/NEWS
  * Main changes python2 is now gone
- Packaging
  + bump libso version to 2.9
  + Remove python2 related stuff
  + Add support for heif,pcre,kml,sfcgal
    make conditionnal support of libkml, sfcgal, heif
  + Prepare tests also conditionnal
  + Several small cleanup (merged, no more)
  + Remove autoreconf upstream is using last available</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1626004800">- Update to version 3.3.1 bugfix release
  + Full changelog
    https://github.com/OSGeo/gdal/blob/v3.3.1/gdal/NEWS</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1631016000">- Update to version 3.3.2 bugfix release
  + Full changelog
    https://github.com/OSGeo/gdal/blob/v3.3.2/gdal/NEWS</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1634731200">- Fix build with poppler 2.10:
  * gdal-poppler-2.10-a.patch
  * gdal-poppler-2.10-b.patch</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1635768000">- Update to version 3.3.3 bugfix release
  + Full changelog https://github.com/OSGeo/gdal/blob/v3.3.3/gdal/NEWS
- Removed upstream patches
  + gdal-poppler-2.10-a.patch
  + gdal-poppler-2.10-b.patch</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1638187200">- Fix xerces detection by adding --with-xerces-inc parameter</changelog>
  <changelog author="D. Berge &lt;opensuse@navlost.eu&gt;" date="1640952000">- Fix build on Leap 15.3</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1641297600">- Upgrade to version 3.4.1 bugfix release
  + Full changelog https://github.com/OSGeo/gdal/blob/v3.4.0/gdal/NEWS
  + Explicitly add a call to autogen.sh
  + Upstream PCIDSK: fix write heap-buffer-overflow boo#1194263
- Removed GDALmake.opt.in.patch due to cc1plus: warning:
  - I gcore: No such file or directory [-Wmissing-include-dirs]
- Add conditionnal support for hdf4 boo#1192614 on Leap
  build -with hdf4_support can be enabled
- Update copyright year</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1646654400">- Add gdal-fix-build-poppler.patch: Fix build with poppler 22.03.0
  and newer.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1646740800">- Add gdal-fix-poppler-leap.patch: Fix build on Leap 15.4 and
  poppler.
- Add fdups macro, BuildRequires already in place, remove
  duplicate files.</changelog>
</package>
<package pkgid="d840942b9cc40a6b6102f1a8851a04c5c1a0434bdcf4f15b3700ae5a54d65c1f" name="gdal-devel" arch="ppc64le">
  <version epoch="0" ver="3.4.1" rel="bp154.2.2.1"/>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1593518400">- Update to 3.1.1 version with full changelog
  https://github.com/OSGeo/gdal/blob/v3.1.1/gdal/NEWS
- Packaging:
  + drop merged upstream gdal-fix-docs.patch
  + Rework our way to deliver the package:
  - Remove building doc as we don't deliver it
  - Use upstream man page already present in tar
  - Simplify all %if doc related stuff
  + Lower again a bit _constraints: 2.5G RAM 4.0G HDD</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1594123200">- Update to 3.1.2 version bug fix release see changelog
  https://github.com/OSGeo/gdal/blob/v3.1.1/gdal/NEWS</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595160000">- Work-around occasional build failures due to incomplete ordering
  in Makefile. (https://github.com/OSGeo/gdal/issues/2777)
- Avoid double gdal prefix for /usr/share/gdal/gdal/*</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1599566400">- Update to 3.1.3 version bug fix release see changelog
  https://github.com/OSGeo/gdal/blob/v3.1.3/gdal/NEWS</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1603540800">- Update to 3.1.4 version bug fix release see changelog
  https://github.com/OSGeo/gdal/blob/v3.1.4/gdal/NEWS</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1604491200">- Update to 3.2.0:
  * Full changelog
    https://github.com/OSGeo/gdal/blob/v3.2.0/gdal/NEWS
- Packaging:
  + Add python3-GDAL as require in gdal package
  + Remove shebang where it's not allowed in python's scripts</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1609761600">- Update to 3.2.1:
  * Full changelog
    https://github.com/OSGeo/gdal/blob/v3.2.1/gdal/NEWS
- Packaging:
  + Update copyright year</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1615550400">- Update to 3.2.2 (bug fix release):
  * Full changelog
    https://github.com/OSGeo/gdal/blob/v3.2.2/gdal/NEWS</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1620129600">- Update to 3.2.3 (bug fix release)
  * Full changelog
    https://github.com/OSGeo/gdal/blob/v3.2.3/gdal/NEWS
- Be warned about ahead changes with future 3.3.x version
    https://github.com/OSGeo/gdal/blob/v3.3.0/gdal/NEWS</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1621252800">- remove bundled libraries, use system provided ones</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1621857600">- Update to 3.3.0 version
  * Full changelog
    https://github.com/OSGeo/gdal/blob/v3.3.0/gdal/NEWS
  * Main changes python2 is now gone
- Packaging
  + bump libso version to 2.9
  + Remove python2 related stuff
  + Add support for heif,pcre,kml,sfcgal
    make conditionnal support of libkml, sfcgal, heif
  + Prepare tests also conditionnal
  + Several small cleanup (merged, no more)
  + Remove autoreconf upstream is using last available</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1626004800">- Update to version 3.3.1 bugfix release
  + Full changelog
    https://github.com/OSGeo/gdal/blob/v3.3.1/gdal/NEWS</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1631016000">- Update to version 3.3.2 bugfix release
  + Full changelog
    https://github.com/OSGeo/gdal/blob/v3.3.2/gdal/NEWS</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1634731200">- Fix build with poppler 2.10:
  * gdal-poppler-2.10-a.patch
  * gdal-poppler-2.10-b.patch</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1635768000">- Update to version 3.3.3 bugfix release
  + Full changelog https://github.com/OSGeo/gdal/blob/v3.3.3/gdal/NEWS
- Removed upstream patches
  + gdal-poppler-2.10-a.patch
  + gdal-poppler-2.10-b.patch</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1638187200">- Fix xerces detection by adding --with-xerces-inc parameter</changelog>
  <changelog author="D. Berge &lt;opensuse@navlost.eu&gt;" date="1640952000">- Fix build on Leap 15.3</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1641297600">- Upgrade to version 3.4.1 bugfix release
  + Full changelog https://github.com/OSGeo/gdal/blob/v3.4.0/gdal/NEWS
  + Explicitly add a call to autogen.sh
  + Upstream PCIDSK: fix write heap-buffer-overflow boo#1194263
- Removed GDALmake.opt.in.patch due to cc1plus: warning:
  - I gcore: No such file or directory [-Wmissing-include-dirs]
- Add conditionnal support for hdf4 boo#1192614 on Leap
  build -with hdf4_support can be enabled
- Update copyright year</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1646654400">- Add gdal-fix-build-poppler.patch: Fix build with poppler 22.03.0
  and newer.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1646740800">- Add gdal-fix-poppler-leap.patch: Fix build on Leap 15.4 and
  poppler.
- Add fdups macro, BuildRequires already in place, remove
  duplicate files.</changelog>
</package>
<package pkgid="6edcfd38f3e05d878e418c6ae5861dbd95e6870da66102422e4258b8db0aaa54" name="gdal-devel" arch="s390x">
  <version epoch="0" ver="3.4.1" rel="bp154.2.2.1"/>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1593518400">- Update to 3.1.1 version with full changelog
  https://github.com/OSGeo/gdal/blob/v3.1.1/gdal/NEWS
- Packaging:
  + drop merged upstream gdal-fix-docs.patch
  + Rework our way to deliver the package:
  - Remove building doc as we don't deliver it
  - Use upstream man page already present in tar
  - Simplify all %if doc related stuff
  + Lower again a bit _constraints: 2.5G RAM 4.0G HDD</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1594123200">- Update to 3.1.2 version bug fix release see changelog
  https://github.com/OSGeo/gdal/blob/v3.1.1/gdal/NEWS</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595160000">- Work-around occasional build failures due to incomplete ordering
  in Makefile. (https://github.com/OSGeo/gdal/issues/2777)
- Avoid double gdal prefix for /usr/share/gdal/gdal/*</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1599566400">- Update to 3.1.3 version bug fix release see changelog
  https://github.com/OSGeo/gdal/blob/v3.1.3/gdal/NEWS</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1603540800">- Update to 3.1.4 version bug fix release see changelog
  https://github.com/OSGeo/gdal/blob/v3.1.4/gdal/NEWS</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1604491200">- Update to 3.2.0:
  * Full changelog
    https://github.com/OSGeo/gdal/blob/v3.2.0/gdal/NEWS
- Packaging:
  + Add python3-GDAL as require in gdal package
  + Remove shebang where it's not allowed in python's scripts</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1609761600">- Update to 3.2.1:
  * Full changelog
    https://github.com/OSGeo/gdal/blob/v3.2.1/gdal/NEWS
- Packaging:
  + Update copyright year</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1615550400">- Update to 3.2.2 (bug fix release):
  * Full changelog
    https://github.com/OSGeo/gdal/blob/v3.2.2/gdal/NEWS</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1620129600">- Update to 3.2.3 (bug fix release)
  * Full changelog
    https://github.com/OSGeo/gdal/blob/v3.2.3/gdal/NEWS
- Be warned about ahead changes with future 3.3.x version
    https://github.com/OSGeo/gdal/blob/v3.3.0/gdal/NEWS</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1621252800">- remove bundled libraries, use system provided ones</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1621857600">- Update to 3.3.0 version
  * Full changelog
    https://github.com/OSGeo/gdal/blob/v3.3.0/gdal/NEWS
  * Main changes python2 is now gone
- Packaging
  + bump libso version to 2.9
  + Remove python2 related stuff
  + Add support for heif,pcre,kml,sfcgal
    make conditionnal support of libkml, sfcgal, heif
  + Prepare tests also conditionnal
  + Several small cleanup (merged, no more)
  + Remove autoreconf upstream is using last available</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1626004800">- Update to version 3.3.1 bugfix release
  + Full changelog
    https://github.com/OSGeo/gdal/blob/v3.3.1/gdal/NEWS</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1631016000">- Update to version 3.3.2 bugfix release
  + Full changelog
    https://github.com/OSGeo/gdal/blob/v3.3.2/gdal/NEWS</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1634731200">- Fix build with poppler 2.10:
  * gdal-poppler-2.10-a.patch
  * gdal-poppler-2.10-b.patch</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1635768000">- Update to version 3.3.3 bugfix release
  + Full changelog https://github.com/OSGeo/gdal/blob/v3.3.3/gdal/NEWS
- Removed upstream patches
  + gdal-poppler-2.10-a.patch
  + gdal-poppler-2.10-b.patch</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1638187200">- Fix xerces detection by adding --with-xerces-inc parameter</changelog>
  <changelog author="D. Berge &lt;opensuse@navlost.eu&gt;" date="1640952000">- Fix build on Leap 15.3</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1641297600">- Upgrade to version 3.4.1 bugfix release
  + Full changelog https://github.com/OSGeo/gdal/blob/v3.4.0/gdal/NEWS
  + Explicitly add a call to autogen.sh
  + Upstream PCIDSK: fix write heap-buffer-overflow boo#1194263
- Removed GDALmake.opt.in.patch due to cc1plus: warning:
  - I gcore: No such file or directory [-Wmissing-include-dirs]
- Add conditionnal support for hdf4 boo#1192614 on Leap
  build -with hdf4_support can be enabled
- Update copyright year</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1646654400">- Add gdal-fix-build-poppler.patch: Fix build with poppler 22.03.0
  and newer.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1646740800">- Add gdal-fix-poppler-leap.patch: Fix build on Leap 15.4 and
  poppler.
- Add fdups macro, BuildRequires already in place, remove
  duplicate files.</changelog>
</package>
<package pkgid="6680a27ef6f886ebb486266885ac485b83f9c2d97bfbb395cbe22c7c3367c043" name="gdal-devel" arch="x86_64">
  <version epoch="0" ver="3.4.1" rel="bp154.2.2.1"/>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1593518400">- Update to 3.1.1 version with full changelog
  https://github.com/OSGeo/gdal/blob/v3.1.1/gdal/NEWS
- Packaging:
  + drop merged upstream gdal-fix-docs.patch
  + Rework our way to deliver the package:
  - Remove building doc as we don't deliver it
  - Use upstream man page already present in tar
  - Simplify all %if doc related stuff
  + Lower again a bit _constraints: 2.5G RAM 4.0G HDD</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1594123200">- Update to 3.1.2 version bug fix release see changelog
  https://github.com/OSGeo/gdal/blob/v3.1.1/gdal/NEWS</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595160000">- Work-around occasional build failures due to incomplete ordering
  in Makefile. (https://github.com/OSGeo/gdal/issues/2777)
- Avoid double gdal prefix for /usr/share/gdal/gdal/*</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1599566400">- Update to 3.1.3 version bug fix release see changelog
  https://github.com/OSGeo/gdal/blob/v3.1.3/gdal/NEWS</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1603540800">- Update to 3.1.4 version bug fix release see changelog
  https://github.com/OSGeo/gdal/blob/v3.1.4/gdal/NEWS</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1604491200">- Update to 3.2.0:
  * Full changelog
    https://github.com/OSGeo/gdal/blob/v3.2.0/gdal/NEWS
- Packaging:
  + Add python3-GDAL as require in gdal package
  + Remove shebang where it's not allowed in python's scripts</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1609761600">- Update to 3.2.1:
  * Full changelog
    https://github.com/OSGeo/gdal/blob/v3.2.1/gdal/NEWS
- Packaging:
  + Update copyright year</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1615550400">- Update to 3.2.2 (bug fix release):
  * Full changelog
    https://github.com/OSGeo/gdal/blob/v3.2.2/gdal/NEWS</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1620129600">- Update to 3.2.3 (bug fix release)
  * Full changelog
    https://github.com/OSGeo/gdal/blob/v3.2.3/gdal/NEWS
- Be warned about ahead changes with future 3.3.x version
    https://github.com/OSGeo/gdal/blob/v3.3.0/gdal/NEWS</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1621252800">- remove bundled libraries, use system provided ones</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1621857600">- Update to 3.3.0 version
  * Full changelog
    https://github.com/OSGeo/gdal/blob/v3.3.0/gdal/NEWS
  * Main changes python2 is now gone
- Packaging
  + bump libso version to 2.9
  + Remove python2 related stuff
  + Add support for heif,pcre,kml,sfcgal
    make conditionnal support of libkml, sfcgal, heif
  + Prepare tests also conditionnal
  + Several small cleanup (merged, no more)
  + Remove autoreconf upstream is using last available</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1626004800">- Update to version 3.3.1 bugfix release
  + Full changelog
    https://github.com/OSGeo/gdal/blob/v3.3.1/gdal/NEWS</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1631016000">- Update to version 3.3.2 bugfix release
  + Full changelog
    https://github.com/OSGeo/gdal/blob/v3.3.2/gdal/NEWS</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1634731200">- Fix build with poppler 2.10:
  * gdal-poppler-2.10-a.patch
  * gdal-poppler-2.10-b.patch</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1635768000">- Update to version 3.3.3 bugfix release
  + Full changelog https://github.com/OSGeo/gdal/blob/v3.3.3/gdal/NEWS
- Removed upstream patches
  + gdal-poppler-2.10-a.patch
  + gdal-poppler-2.10-b.patch</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1638187200">- Fix xerces detection by adding --with-xerces-inc parameter</changelog>
  <changelog author="D. Berge &lt;opensuse@navlost.eu&gt;" date="1640952000">- Fix build on Leap 15.3</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1641297600">- Upgrade to version 3.4.1 bugfix release
  + Full changelog https://github.com/OSGeo/gdal/blob/v3.4.0/gdal/NEWS
  + Explicitly add a call to autogen.sh
  + Upstream PCIDSK: fix write heap-buffer-overflow boo#1194263
- Removed GDALmake.opt.in.patch due to cc1plus: warning:
  - I gcore: No such file or directory [-Wmissing-include-dirs]
- Add conditionnal support for hdf4 boo#1192614 on Leap
  build -with hdf4_support can be enabled
- Update copyright year</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1646654400">- Add gdal-fix-build-poppler.patch: Fix build with poppler 22.03.0
  and newer.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1646740800">- Add gdal-fix-poppler-leap.patch: Fix build on Leap 15.4 and
  poppler.
- Add fdups macro, BuildRequires already in place, remove
  duplicate files.</changelog>
</package>
<package pkgid="e3e28afdcf57db9a6bea9f57746367f31b7b893dc89ac989c9a67a6bbfcbbc0a" name="gdcm" arch="aarch64">
  <version epoch="0" ver="3.0.19" rel="bp154.2.5.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1582027200">- version 3.0.5
  * fix for API change in poppler</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1585483200">- poppler_api.patch added to fix API changes in poppler in TW</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1586865600">- Update poppler_api.patch to make UnicodeMap* const.
- Compile with -fpermissive so that this works on Leap 15.2 too</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1591617600">- Add patch to fix build on aarch64:
  * gdcm-2.8.8-dont_use_EOF.patch</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1591704000">- version 3.0.6
  * no changelog available
  * poppler_api.patch removed (included in source)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1593518400">- version 3.0.7
  * no changelog available
  * gdcm-2.8.8-dont_use_EOF.patch removed (included in 3.0.7)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1602936000">- version 3.0.8
  * Fix TestScanner1 test</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1604404800">- fixed build system
  fix_charls2_patch removed
  0001-Fix-build-with-CharLS-2.1.0.patch added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1604577600">- typo corrected: fix_charls_2.patch removed</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1622808000">- 0002-gcc11-changes.diff added to fix TW build failure</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1627387200">- version 3.0.9 (no changelog)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1628510400">- Trim filler wording from some descriptions. Change the other
  descriptions to describe the package, rather than give
  instructions to the user.</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1639396800">- version 3.0.10 (no changelog)
  * 0002-gcc11-changes.diff removed (included in source)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1646740800">- use compiler gcc11-c++ to fix Leap 15.4 build</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648209600">- version 3.0.11
  * Fix for a significant issue with JPEG-LS and RGB color space
  * tons of small bug fixes</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648814400">- version 3.0.12
  * support for poppler 22.03 added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1663588800">- version 3.0.18
  no changelog</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1663934400">- rename of gdcm-libgdcm3_0 to libgdcm3_0 (proposal S. Brüns)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664798400">- Provides/obsoletes moved to lbgdcm-package (Thx DimStar)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664971200">- version 3.0.19 - no changelog
  'Provides' Tag removed from ligdcm</changelog>
</package>
<package pkgid="4d68a602e7c2cf888e767f501c9e7e911fb27925d6975ef4beda42fca56d4476" name="gdcm" arch="ppc64le">
  <version epoch="0" ver="3.0.19" rel="bp154.2.5.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1582027200">- version 3.0.5
  * fix for API change in poppler</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1585483200">- poppler_api.patch added to fix API changes in poppler in TW</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1586865600">- Update poppler_api.patch to make UnicodeMap* const.
- Compile with -fpermissive so that this works on Leap 15.2 too</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1591617600">- Add patch to fix build on aarch64:
  * gdcm-2.8.8-dont_use_EOF.patch</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1591704000">- version 3.0.6
  * no changelog available
  * poppler_api.patch removed (included in source)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1593518400">- version 3.0.7
  * no changelog available
  * gdcm-2.8.8-dont_use_EOF.patch removed (included in 3.0.7)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1602936000">- version 3.0.8
  * Fix TestScanner1 test</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1604404800">- fixed build system
  fix_charls2_patch removed
  0001-Fix-build-with-CharLS-2.1.0.patch added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1604577600">- typo corrected: fix_charls_2.patch removed</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1622808000">- 0002-gcc11-changes.diff added to fix TW build failure</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1627387200">- version 3.0.9 (no changelog)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1628510400">- Trim filler wording from some descriptions. Change the other
  descriptions to describe the package, rather than give
  instructions to the user.</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1639396800">- version 3.0.10 (no changelog)
  * 0002-gcc11-changes.diff removed (included in source)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1646740800">- use compiler gcc11-c++ to fix Leap 15.4 build</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648209600">- version 3.0.11
  * Fix for a significant issue with JPEG-LS and RGB color space
  * tons of small bug fixes</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648814400">- version 3.0.12
  * support for poppler 22.03 added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1663588800">- version 3.0.18
  no changelog</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1663934400">- rename of gdcm-libgdcm3_0 to libgdcm3_0 (proposal S. Brüns)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664798400">- Provides/obsoletes moved to lbgdcm-package (Thx DimStar)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664971200">- version 3.0.19 - no changelog
  'Provides' Tag removed from ligdcm</changelog>
</package>
<package pkgid="8a1074d2cb120136e6a81d4b82237f175fba2617dcc0b1b64a1ba7e4aa62d12b" name="gdcm" arch="s390x">
  <version epoch="0" ver="3.0.19" rel="bp154.2.5.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1582027200">- version 3.0.5
  * fix for API change in poppler</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1585483200">- poppler_api.patch added to fix API changes in poppler in TW</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1586865600">- Update poppler_api.patch to make UnicodeMap* const.
- Compile with -fpermissive so that this works on Leap 15.2 too</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1591617600">- Add patch to fix build on aarch64:
  * gdcm-2.8.8-dont_use_EOF.patch</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1591704000">- version 3.0.6
  * no changelog available
  * poppler_api.patch removed (included in source)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1593518400">- version 3.0.7
  * no changelog available
  * gdcm-2.8.8-dont_use_EOF.patch removed (included in 3.0.7)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1602936000">- version 3.0.8
  * Fix TestScanner1 test</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1604404800">- fixed build system
  fix_charls2_patch removed
  0001-Fix-build-with-CharLS-2.1.0.patch added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1604577600">- typo corrected: fix_charls_2.patch removed</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1622808000">- 0002-gcc11-changes.diff added to fix TW build failure</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1627387200">- version 3.0.9 (no changelog)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1628510400">- Trim filler wording from some descriptions. Change the other
  descriptions to describe the package, rather than give
  instructions to the user.</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1639396800">- version 3.0.10 (no changelog)
  * 0002-gcc11-changes.diff removed (included in source)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1646740800">- use compiler gcc11-c++ to fix Leap 15.4 build</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648209600">- version 3.0.11
  * Fix for a significant issue with JPEG-LS and RGB color space
  * tons of small bug fixes</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648814400">- version 3.0.12
  * support for poppler 22.03 added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1663588800">- version 3.0.18
  no changelog</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1663934400">- rename of gdcm-libgdcm3_0 to libgdcm3_0 (proposal S. Brüns)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664798400">- Provides/obsoletes moved to lbgdcm-package (Thx DimStar)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664971200">- version 3.0.19 - no changelog
  'Provides' Tag removed from ligdcm</changelog>
</package>
<package pkgid="41de8d362bbed81eeb385deff7b03468cbf507322bfb8abcfef74ffb7daf2b8a" name="gdcm" arch="src">
  <version epoch="0" ver="3.0.19" rel="bp154.2.5.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1582027200">- version 3.0.5
  * fix for API change in poppler</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1585483200">- poppler_api.patch added to fix API changes in poppler in TW</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1586865600">- Update poppler_api.patch to make UnicodeMap* const.
- Compile with -fpermissive so that this works on Leap 15.2 too</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1591617600">- Add patch to fix build on aarch64:
  * gdcm-2.8.8-dont_use_EOF.patch</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1591704000">- version 3.0.6
  * no changelog available
  * poppler_api.patch removed (included in source)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1593518400">- version 3.0.7
  * no changelog available
  * gdcm-2.8.8-dont_use_EOF.patch removed (included in 3.0.7)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1602936000">- version 3.0.8
  * Fix TestScanner1 test</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1604404800">- fixed build system
  fix_charls2_patch removed
  0001-Fix-build-with-CharLS-2.1.0.patch added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1604577600">- typo corrected: fix_charls_2.patch removed</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1622808000">- 0002-gcc11-changes.diff added to fix TW build failure</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1627387200">- version 3.0.9 (no changelog)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1628510400">- Trim filler wording from some descriptions. Change the other
  descriptions to describe the package, rather than give
  instructions to the user.</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1639396800">- version 3.0.10 (no changelog)
  * 0002-gcc11-changes.diff removed (included in source)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1646740800">- use compiler gcc11-c++ to fix Leap 15.4 build</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648209600">- version 3.0.11
  * Fix for a significant issue with JPEG-LS and RGB color space
  * tons of small bug fixes</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648814400">- version 3.0.12
  * support for poppler 22.03 added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1663588800">- version 3.0.18
  no changelog</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1663934400">- rename of gdcm-libgdcm3_0 to libgdcm3_0 (proposal S. Brüns)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664798400">- Provides/obsoletes moved to lbgdcm-package (Thx DimStar)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664971200">- version 3.0.19 - no changelog
  'Provides' Tag removed from ligdcm</changelog>
</package>
<package pkgid="2fa3794ba839dff2f5fc4015b05e808fde8ec40d1adaf829e1ab420d74c1f431" name="gdcm" arch="x86_64">
  <version epoch="0" ver="3.0.19" rel="bp154.2.5.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1582027200">- version 3.0.5
  * fix for API change in poppler</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1585483200">- poppler_api.patch added to fix API changes in poppler in TW</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1586865600">- Update poppler_api.patch to make UnicodeMap* const.
- Compile with -fpermissive so that this works on Leap 15.2 too</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1591617600">- Add patch to fix build on aarch64:
  * gdcm-2.8.8-dont_use_EOF.patch</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1591704000">- version 3.0.6
  * no changelog available
  * poppler_api.patch removed (included in source)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1593518400">- version 3.0.7
  * no changelog available
  * gdcm-2.8.8-dont_use_EOF.patch removed (included in 3.0.7)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1602936000">- version 3.0.8
  * Fix TestScanner1 test</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1604404800">- fixed build system
  fix_charls2_patch removed
  0001-Fix-build-with-CharLS-2.1.0.patch added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1604577600">- typo corrected: fix_charls_2.patch removed</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1622808000">- 0002-gcc11-changes.diff added to fix TW build failure</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1627387200">- version 3.0.9 (no changelog)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1628510400">- Trim filler wording from some descriptions. Change the other
  descriptions to describe the package, rather than give
  instructions to the user.</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1639396800">- version 3.0.10 (no changelog)
  * 0002-gcc11-changes.diff removed (included in source)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1646740800">- use compiler gcc11-c++ to fix Leap 15.4 build</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648209600">- version 3.0.11
  * Fix for a significant issue with JPEG-LS and RGB color space
  * tons of small bug fixes</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648814400">- version 3.0.12
  * support for poppler 22.03 added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1663588800">- version 3.0.18
  no changelog</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1663934400">- rename of gdcm-libgdcm3_0 to libgdcm3_0 (proposal S. Brüns)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664798400">- Provides/obsoletes moved to lbgdcm-package (Thx DimStar)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664971200">- version 3.0.19 - no changelog
  'Provides' Tag removed from ligdcm</changelog>
</package>
<package pkgid="ffe80a5bc1af12d91ab8e8f94e8295d560a4d9eedeef8293b0fdce32f769f524" name="gdcm-applications" arch="aarch64">
  <version epoch="0" ver="3.0.19" rel="bp154.2.5.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1582027200">- version 3.0.5
  * fix for API change in poppler</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1585483200">- poppler_api.patch added to fix API changes in poppler in TW</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1586865600">- Update poppler_api.patch to make UnicodeMap* const.
- Compile with -fpermissive so that this works on Leap 15.2 too</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1591617600">- Add patch to fix build on aarch64:
  * gdcm-2.8.8-dont_use_EOF.patch</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1591704000">- version 3.0.6
  * no changelog available
  * poppler_api.patch removed (included in source)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1593518400">- version 3.0.7
  * no changelog available
  * gdcm-2.8.8-dont_use_EOF.patch removed (included in 3.0.7)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1602936000">- version 3.0.8
  * Fix TestScanner1 test</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1604404800">- fixed build system
  fix_charls2_patch removed
  0001-Fix-build-with-CharLS-2.1.0.patch added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1604577600">- typo corrected: fix_charls_2.patch removed</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1622808000">- 0002-gcc11-changes.diff added to fix TW build failure</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1627387200">- version 3.0.9 (no changelog)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1628510400">- Trim filler wording from some descriptions. Change the other
  descriptions to describe the package, rather than give
  instructions to the user.</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1639396800">- version 3.0.10 (no changelog)
  * 0002-gcc11-changes.diff removed (included in source)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1646740800">- use compiler gcc11-c++ to fix Leap 15.4 build</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648209600">- version 3.0.11
  * Fix for a significant issue with JPEG-LS and RGB color space
  * tons of small bug fixes</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648814400">- version 3.0.12
  * support for poppler 22.03 added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1663588800">- version 3.0.18
  no changelog</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1663934400">- rename of gdcm-libgdcm3_0 to libgdcm3_0 (proposal S. Brüns)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664798400">- Provides/obsoletes moved to lbgdcm-package (Thx DimStar)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664971200">- version 3.0.19 - no changelog
  'Provides' Tag removed from ligdcm</changelog>
</package>
<package pkgid="444c7a6128708cc89f59c585e0e4ebe19bb469f1c55d544403d11495f9dd3896" name="gdcm-applications" arch="ppc64le">
  <version epoch="0" ver="3.0.19" rel="bp154.2.5.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1582027200">- version 3.0.5
  * fix for API change in poppler</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1585483200">- poppler_api.patch added to fix API changes in poppler in TW</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1586865600">- Update poppler_api.patch to make UnicodeMap* const.
- Compile with -fpermissive so that this works on Leap 15.2 too</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1591617600">- Add patch to fix build on aarch64:
  * gdcm-2.8.8-dont_use_EOF.patch</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1591704000">- version 3.0.6
  * no changelog available
  * poppler_api.patch removed (included in source)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1593518400">- version 3.0.7
  * no changelog available
  * gdcm-2.8.8-dont_use_EOF.patch removed (included in 3.0.7)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1602936000">- version 3.0.8
  * Fix TestScanner1 test</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1604404800">- fixed build system
  fix_charls2_patch removed
  0001-Fix-build-with-CharLS-2.1.0.patch added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1604577600">- typo corrected: fix_charls_2.patch removed</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1622808000">- 0002-gcc11-changes.diff added to fix TW build failure</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1627387200">- version 3.0.9 (no changelog)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1628510400">- Trim filler wording from some descriptions. Change the other
  descriptions to describe the package, rather than give
  instructions to the user.</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1639396800">- version 3.0.10 (no changelog)
  * 0002-gcc11-changes.diff removed (included in source)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1646740800">- use compiler gcc11-c++ to fix Leap 15.4 build</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648209600">- version 3.0.11
  * Fix for a significant issue with JPEG-LS and RGB color space
  * tons of small bug fixes</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648814400">- version 3.0.12
  * support for poppler 22.03 added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1663588800">- version 3.0.18
  no changelog</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1663934400">- rename of gdcm-libgdcm3_0 to libgdcm3_0 (proposal S. Brüns)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664798400">- Provides/obsoletes moved to lbgdcm-package (Thx DimStar)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664971200">- version 3.0.19 - no changelog
  'Provides' Tag removed from ligdcm</changelog>
</package>
<package pkgid="c389597f2b69434904341f5e688185854947055b56cf1b755252f28195a93350" name="gdcm-applications" arch="s390x">
  <version epoch="0" ver="3.0.19" rel="bp154.2.5.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1582027200">- version 3.0.5
  * fix for API change in poppler</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1585483200">- poppler_api.patch added to fix API changes in poppler in TW</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1586865600">- Update poppler_api.patch to make UnicodeMap* const.
- Compile with -fpermissive so that this works on Leap 15.2 too</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1591617600">- Add patch to fix build on aarch64:
  * gdcm-2.8.8-dont_use_EOF.patch</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1591704000">- version 3.0.6
  * no changelog available
  * poppler_api.patch removed (included in source)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1593518400">- version 3.0.7
  * no changelog available
  * gdcm-2.8.8-dont_use_EOF.patch removed (included in 3.0.7)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1602936000">- version 3.0.8
  * Fix TestScanner1 test</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1604404800">- fixed build system
  fix_charls2_patch removed
  0001-Fix-build-with-CharLS-2.1.0.patch added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1604577600">- typo corrected: fix_charls_2.patch removed</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1622808000">- 0002-gcc11-changes.diff added to fix TW build failure</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1627387200">- version 3.0.9 (no changelog)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1628510400">- Trim filler wording from some descriptions. Change the other
  descriptions to describe the package, rather than give
  instructions to the user.</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1639396800">- version 3.0.10 (no changelog)
  * 0002-gcc11-changes.diff removed (included in source)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1646740800">- use compiler gcc11-c++ to fix Leap 15.4 build</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648209600">- version 3.0.11
  * Fix for a significant issue with JPEG-LS and RGB color space
  * tons of small bug fixes</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648814400">- version 3.0.12
  * support for poppler 22.03 added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1663588800">- version 3.0.18
  no changelog</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1663934400">- rename of gdcm-libgdcm3_0 to libgdcm3_0 (proposal S. Brüns)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664798400">- Provides/obsoletes moved to lbgdcm-package (Thx DimStar)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664971200">- version 3.0.19 - no changelog
  'Provides' Tag removed from ligdcm</changelog>
</package>
<package pkgid="b755faff803c8ccf195c3a9ad2bded6c1617b3f8eb4dac4b91695e6e0b3752c0" name="gdcm-applications" arch="x86_64">
  <version epoch="0" ver="3.0.19" rel="bp154.2.5.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1582027200">- version 3.0.5
  * fix for API change in poppler</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1585483200">- poppler_api.patch added to fix API changes in poppler in TW</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1586865600">- Update poppler_api.patch to make UnicodeMap* const.
- Compile with -fpermissive so that this works on Leap 15.2 too</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1591617600">- Add patch to fix build on aarch64:
  * gdcm-2.8.8-dont_use_EOF.patch</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1591704000">- version 3.0.6
  * no changelog available
  * poppler_api.patch removed (included in source)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1593518400">- version 3.0.7
  * no changelog available
  * gdcm-2.8.8-dont_use_EOF.patch removed (included in 3.0.7)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1602936000">- version 3.0.8
  * Fix TestScanner1 test</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1604404800">- fixed build system
  fix_charls2_patch removed
  0001-Fix-build-with-CharLS-2.1.0.patch added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1604577600">- typo corrected: fix_charls_2.patch removed</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1622808000">- 0002-gcc11-changes.diff added to fix TW build failure</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1627387200">- version 3.0.9 (no changelog)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1628510400">- Trim filler wording from some descriptions. Change the other
  descriptions to describe the package, rather than give
  instructions to the user.</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1639396800">- version 3.0.10 (no changelog)
  * 0002-gcc11-changes.diff removed (included in source)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1646740800">- use compiler gcc11-c++ to fix Leap 15.4 build</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648209600">- version 3.0.11
  * Fix for a significant issue with JPEG-LS and RGB color space
  * tons of small bug fixes</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648814400">- version 3.0.12
  * support for poppler 22.03 added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1663588800">- version 3.0.18
  no changelog</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1663934400">- rename of gdcm-libgdcm3_0 to libgdcm3_0 (proposal S. Brüns)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664798400">- Provides/obsoletes moved to lbgdcm-package (Thx DimStar)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664971200">- version 3.0.19 - no changelog
  'Provides' Tag removed from ligdcm</changelog>
</package>
<package pkgid="80e45014a73519a16fcd611121ebda2dc734f924ef426c63c4eda8dbdd2a90d8" name="gdcm-devel" arch="aarch64">
  <version epoch="0" ver="3.0.19" rel="bp154.2.5.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1582027200">- version 3.0.5
  * fix for API change in poppler</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1585483200">- poppler_api.patch added to fix API changes in poppler in TW</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1586865600">- Update poppler_api.patch to make UnicodeMap* const.
- Compile with -fpermissive so that this works on Leap 15.2 too</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1591617600">- Add patch to fix build on aarch64:
  * gdcm-2.8.8-dont_use_EOF.patch</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1591704000">- version 3.0.6
  * no changelog available
  * poppler_api.patch removed (included in source)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1593518400">- version 3.0.7
  * no changelog available
  * gdcm-2.8.8-dont_use_EOF.patch removed (included in 3.0.7)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1602936000">- version 3.0.8
  * Fix TestScanner1 test</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1604404800">- fixed build system
  fix_charls2_patch removed
  0001-Fix-build-with-CharLS-2.1.0.patch added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1604577600">- typo corrected: fix_charls_2.patch removed</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1622808000">- 0002-gcc11-changes.diff added to fix TW build failure</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1627387200">- version 3.0.9 (no changelog)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1628510400">- Trim filler wording from some descriptions. Change the other
  descriptions to describe the package, rather than give
  instructions to the user.</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1639396800">- version 3.0.10 (no changelog)
  * 0002-gcc11-changes.diff removed (included in source)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1646740800">- use compiler gcc11-c++ to fix Leap 15.4 build</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648209600">- version 3.0.11
  * Fix for a significant issue with JPEG-LS and RGB color space
  * tons of small bug fixes</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648814400">- version 3.0.12
  * support for poppler 22.03 added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1663588800">- version 3.0.18
  no changelog</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1663934400">- rename of gdcm-libgdcm3_0 to libgdcm3_0 (proposal S. Brüns)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664798400">- Provides/obsoletes moved to lbgdcm-package (Thx DimStar)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664971200">- version 3.0.19 - no changelog
  'Provides' Tag removed from ligdcm</changelog>
</package>
<package pkgid="9740c71689ae6dbb261ca848ecba44f1fab99cc7f004b393877da028809f5f85" name="gdcm-devel" arch="ppc64le">
  <version epoch="0" ver="3.0.19" rel="bp154.2.5.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1582027200">- version 3.0.5
  * fix for API change in poppler</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1585483200">- poppler_api.patch added to fix API changes in poppler in TW</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1586865600">- Update poppler_api.patch to make UnicodeMap* const.
- Compile with -fpermissive so that this works on Leap 15.2 too</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1591617600">- Add patch to fix build on aarch64:
  * gdcm-2.8.8-dont_use_EOF.patch</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1591704000">- version 3.0.6
  * no changelog available
  * poppler_api.patch removed (included in source)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1593518400">- version 3.0.7
  * no changelog available
  * gdcm-2.8.8-dont_use_EOF.patch removed (included in 3.0.7)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1602936000">- version 3.0.8
  * Fix TestScanner1 test</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1604404800">- fixed build system
  fix_charls2_patch removed
  0001-Fix-build-with-CharLS-2.1.0.patch added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1604577600">- typo corrected: fix_charls_2.patch removed</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1622808000">- 0002-gcc11-changes.diff added to fix TW build failure</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1627387200">- version 3.0.9 (no changelog)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1628510400">- Trim filler wording from some descriptions. Change the other
  descriptions to describe the package, rather than give
  instructions to the user.</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1639396800">- version 3.0.10 (no changelog)
  * 0002-gcc11-changes.diff removed (included in source)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1646740800">- use compiler gcc11-c++ to fix Leap 15.4 build</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648209600">- version 3.0.11
  * Fix for a significant issue with JPEG-LS and RGB color space
  * tons of small bug fixes</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648814400">- version 3.0.12
  * support for poppler 22.03 added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1663588800">- version 3.0.18
  no changelog</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1663934400">- rename of gdcm-libgdcm3_0 to libgdcm3_0 (proposal S. Brüns)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664798400">- Provides/obsoletes moved to lbgdcm-package (Thx DimStar)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664971200">- version 3.0.19 - no changelog
  'Provides' Tag removed from ligdcm</changelog>
</package>
<package pkgid="04eebd1803502e18c16c28eb2d6af307668300b1a8d6a80e9355dfd36fe6494b" name="gdcm-devel" arch="s390x">
  <version epoch="0" ver="3.0.19" rel="bp154.2.5.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1582027200">- version 3.0.5
  * fix for API change in poppler</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1585483200">- poppler_api.patch added to fix API changes in poppler in TW</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1586865600">- Update poppler_api.patch to make UnicodeMap* const.
- Compile with -fpermissive so that this works on Leap 15.2 too</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1591617600">- Add patch to fix build on aarch64:
  * gdcm-2.8.8-dont_use_EOF.patch</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1591704000">- version 3.0.6
  * no changelog available
  * poppler_api.patch removed (included in source)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1593518400">- version 3.0.7
  * no changelog available
  * gdcm-2.8.8-dont_use_EOF.patch removed (included in 3.0.7)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1602936000">- version 3.0.8
  * Fix TestScanner1 test</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1604404800">- fixed build system
  fix_charls2_patch removed
  0001-Fix-build-with-CharLS-2.1.0.patch added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1604577600">- typo corrected: fix_charls_2.patch removed</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1622808000">- 0002-gcc11-changes.diff added to fix TW build failure</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1627387200">- version 3.0.9 (no changelog)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1628510400">- Trim filler wording from some descriptions. Change the other
  descriptions to describe the package, rather than give
  instructions to the user.</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1639396800">- version 3.0.10 (no changelog)
  * 0002-gcc11-changes.diff removed (included in source)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1646740800">- use compiler gcc11-c++ to fix Leap 15.4 build</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648209600">- version 3.0.11
  * Fix for a significant issue with JPEG-LS and RGB color space
  * tons of small bug fixes</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648814400">- version 3.0.12
  * support for poppler 22.03 added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1663588800">- version 3.0.18
  no changelog</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1663934400">- rename of gdcm-libgdcm3_0 to libgdcm3_0 (proposal S. Brüns)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664798400">- Provides/obsoletes moved to lbgdcm-package (Thx DimStar)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664971200">- version 3.0.19 - no changelog
  'Provides' Tag removed from ligdcm</changelog>
</package>
<package pkgid="c9183885217a778b2df31143b24062199cc3ab38a9fef6e594ed320237649419" name="gdcm-devel" arch="x86_64">
  <version epoch="0" ver="3.0.19" rel="bp154.2.5.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1582027200">- version 3.0.5
  * fix for API change in poppler</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1585483200">- poppler_api.patch added to fix API changes in poppler in TW</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1586865600">- Update poppler_api.patch to make UnicodeMap* const.
- Compile with -fpermissive so that this works on Leap 15.2 too</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1591617600">- Add patch to fix build on aarch64:
  * gdcm-2.8.8-dont_use_EOF.patch</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1591704000">- version 3.0.6
  * no changelog available
  * poppler_api.patch removed (included in source)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1593518400">- version 3.0.7
  * no changelog available
  * gdcm-2.8.8-dont_use_EOF.patch removed (included in 3.0.7)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1602936000">- version 3.0.8
  * Fix TestScanner1 test</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1604404800">- fixed build system
  fix_charls2_patch removed
  0001-Fix-build-with-CharLS-2.1.0.patch added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1604577600">- typo corrected: fix_charls_2.patch removed</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1622808000">- 0002-gcc11-changes.diff added to fix TW build failure</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1627387200">- version 3.0.9 (no changelog)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1628510400">- Trim filler wording from some descriptions. Change the other
  descriptions to describe the package, rather than give
  instructions to the user.</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1639396800">- version 3.0.10 (no changelog)
  * 0002-gcc11-changes.diff removed (included in source)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1646740800">- use compiler gcc11-c++ to fix Leap 15.4 build</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648209600">- version 3.0.11
  * Fix for a significant issue with JPEG-LS and RGB color space
  * tons of small bug fixes</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648814400">- version 3.0.12
  * support for poppler 22.03 added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1663588800">- version 3.0.18
  no changelog</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1663934400">- rename of gdcm-libgdcm3_0 to libgdcm3_0 (proposal S. Brüns)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664798400">- Provides/obsoletes moved to lbgdcm-package (Thx DimStar)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664971200">- version 3.0.19 - no changelog
  'Provides' Tag removed from ligdcm</changelog>
</package>
<package pkgid="69c433c8cd9bba3e39c685dd0a41683b86744248d99f2bf1b9d0604400377df8" name="gdcm-examples" arch="aarch64">
  <version epoch="0" ver="3.0.19" rel="bp154.2.5.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1582027200">- version 3.0.5
  * fix for API change in poppler</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1585483200">- poppler_api.patch added to fix API changes in poppler in TW</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1586865600">- Update poppler_api.patch to make UnicodeMap* const.
- Compile with -fpermissive so that this works on Leap 15.2 too</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1591617600">- Add patch to fix build on aarch64:
  * gdcm-2.8.8-dont_use_EOF.patch</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1591704000">- version 3.0.6
  * no changelog available
  * poppler_api.patch removed (included in source)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1593518400">- version 3.0.7
  * no changelog available
  * gdcm-2.8.8-dont_use_EOF.patch removed (included in 3.0.7)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1602936000">- version 3.0.8
  * Fix TestScanner1 test</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1604404800">- fixed build system
  fix_charls2_patch removed
  0001-Fix-build-with-CharLS-2.1.0.patch added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1604577600">- typo corrected: fix_charls_2.patch removed</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1622808000">- 0002-gcc11-changes.diff added to fix TW build failure</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1627387200">- version 3.0.9 (no changelog)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1628510400">- Trim filler wording from some descriptions. Change the other
  descriptions to describe the package, rather than give
  instructions to the user.</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1639396800">- version 3.0.10 (no changelog)
  * 0002-gcc11-changes.diff removed (included in source)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1646740800">- use compiler gcc11-c++ to fix Leap 15.4 build</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648209600">- version 3.0.11
  * Fix for a significant issue with JPEG-LS and RGB color space
  * tons of small bug fixes</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648814400">- version 3.0.12
  * support for poppler 22.03 added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1663588800">- version 3.0.18
  no changelog</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1663934400">- rename of gdcm-libgdcm3_0 to libgdcm3_0 (proposal S. Brüns)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664798400">- Provides/obsoletes moved to lbgdcm-package (Thx DimStar)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664971200">- version 3.0.19 - no changelog
  'Provides' Tag removed from ligdcm</changelog>
</package>
<package pkgid="d3f0cd653c81362a0ee7295b41f7c7c689029f5c3412c7696c08a3660d3ffe59" name="gdcm-examples" arch="ppc64le">
  <version epoch="0" ver="3.0.19" rel="bp154.2.5.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1582027200">- version 3.0.5
  * fix for API change in poppler</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1585483200">- poppler_api.patch added to fix API changes in poppler in TW</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1586865600">- Update poppler_api.patch to make UnicodeMap* const.
- Compile with -fpermissive so that this works on Leap 15.2 too</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1591617600">- Add patch to fix build on aarch64:
  * gdcm-2.8.8-dont_use_EOF.patch</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1591704000">- version 3.0.6
  * no changelog available
  * poppler_api.patch removed (included in source)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1593518400">- version 3.0.7
  * no changelog available
  * gdcm-2.8.8-dont_use_EOF.patch removed (included in 3.0.7)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1602936000">- version 3.0.8
  * Fix TestScanner1 test</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1604404800">- fixed build system
  fix_charls2_patch removed
  0001-Fix-build-with-CharLS-2.1.0.patch added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1604577600">- typo corrected: fix_charls_2.patch removed</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1622808000">- 0002-gcc11-changes.diff added to fix TW build failure</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1627387200">- version 3.0.9 (no changelog)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1628510400">- Trim filler wording from some descriptions. Change the other
  descriptions to describe the package, rather than give
  instructions to the user.</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1639396800">- version 3.0.10 (no changelog)
  * 0002-gcc11-changes.diff removed (included in source)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1646740800">- use compiler gcc11-c++ to fix Leap 15.4 build</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648209600">- version 3.0.11
  * Fix for a significant issue with JPEG-LS and RGB color space
  * tons of small bug fixes</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648814400">- version 3.0.12
  * support for poppler 22.03 added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1663588800">- version 3.0.18
  no changelog</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1663934400">- rename of gdcm-libgdcm3_0 to libgdcm3_0 (proposal S. Brüns)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664798400">- Provides/obsoletes moved to lbgdcm-package (Thx DimStar)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664971200">- version 3.0.19 - no changelog
  'Provides' Tag removed from ligdcm</changelog>
</package>
<package pkgid="d7b1bb22e6c33945777c4368362a7b140d442474728a452f92c24d2b9597514e" name="gdcm-examples" arch="s390x">
  <version epoch="0" ver="3.0.19" rel="bp154.2.5.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1582027200">- version 3.0.5
  * fix for API change in poppler</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1585483200">- poppler_api.patch added to fix API changes in poppler in TW</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1586865600">- Update poppler_api.patch to make UnicodeMap* const.
- Compile with -fpermissive so that this works on Leap 15.2 too</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1591617600">- Add patch to fix build on aarch64:
  * gdcm-2.8.8-dont_use_EOF.patch</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1591704000">- version 3.0.6
  * no changelog available
  * poppler_api.patch removed (included in source)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1593518400">- version 3.0.7
  * no changelog available
  * gdcm-2.8.8-dont_use_EOF.patch removed (included in 3.0.7)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1602936000">- version 3.0.8
  * Fix TestScanner1 test</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1604404800">- fixed build system
  fix_charls2_patch removed
  0001-Fix-build-with-CharLS-2.1.0.patch added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1604577600">- typo corrected: fix_charls_2.patch removed</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1622808000">- 0002-gcc11-changes.diff added to fix TW build failure</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1627387200">- version 3.0.9 (no changelog)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1628510400">- Trim filler wording from some descriptions. Change the other
  descriptions to describe the package, rather than give
  instructions to the user.</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1639396800">- version 3.0.10 (no changelog)
  * 0002-gcc11-changes.diff removed (included in source)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1646740800">- use compiler gcc11-c++ to fix Leap 15.4 build</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648209600">- version 3.0.11
  * Fix for a significant issue with JPEG-LS and RGB color space
  * tons of small bug fixes</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648814400">- version 3.0.12
  * support for poppler 22.03 added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1663588800">- version 3.0.18
  no changelog</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1663934400">- rename of gdcm-libgdcm3_0 to libgdcm3_0 (proposal S. Brüns)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664798400">- Provides/obsoletes moved to lbgdcm-package (Thx DimStar)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664971200">- version 3.0.19 - no changelog
  'Provides' Tag removed from ligdcm</changelog>
</package>
<package pkgid="445f5890617340207a5f510b908065e7971947995cd42cf320996122f49fac25" name="gdcm-examples" arch="x86_64">
  <version epoch="0" ver="3.0.19" rel="bp154.2.5.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1582027200">- version 3.0.5
  * fix for API change in poppler</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1585483200">- poppler_api.patch added to fix API changes in poppler in TW</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1586865600">- Update poppler_api.patch to make UnicodeMap* const.
- Compile with -fpermissive so that this works on Leap 15.2 too</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1591617600">- Add patch to fix build on aarch64:
  * gdcm-2.8.8-dont_use_EOF.patch</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1591704000">- version 3.0.6
  * no changelog available
  * poppler_api.patch removed (included in source)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1593518400">- version 3.0.7
  * no changelog available
  * gdcm-2.8.8-dont_use_EOF.patch removed (included in 3.0.7)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1602936000">- version 3.0.8
  * Fix TestScanner1 test</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1604404800">- fixed build system
  fix_charls2_patch removed
  0001-Fix-build-with-CharLS-2.1.0.patch added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1604577600">- typo corrected: fix_charls_2.patch removed</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1622808000">- 0002-gcc11-changes.diff added to fix TW build failure</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1627387200">- version 3.0.9 (no changelog)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1628510400">- Trim filler wording from some descriptions. Change the other
  descriptions to describe the package, rather than give
  instructions to the user.</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1639396800">- version 3.0.10 (no changelog)
  * 0002-gcc11-changes.diff removed (included in source)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1646740800">- use compiler gcc11-c++ to fix Leap 15.4 build</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648209600">- version 3.0.11
  * Fix for a significant issue with JPEG-LS and RGB color space
  * tons of small bug fixes</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648814400">- version 3.0.12
  * support for poppler 22.03 added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1663588800">- version 3.0.18
  no changelog</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1663934400">- rename of gdcm-libgdcm3_0 to libgdcm3_0 (proposal S. Brüns)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664798400">- Provides/obsoletes moved to lbgdcm-package (Thx DimStar)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664971200">- version 3.0.19 - no changelog
  'Provides' Tag removed from ligdcm</changelog>
</package>
<package pkgid="efdf7e38bf8ca7ac0fd0b844d2f3358c884ee9fc77f79b094812a5d28b1d4635" name="ghostwriter" arch="aarch64">
  <version epoch="0" ver="2.1.6" rel="bp154.2.3.1"/>
  <changelog author="mpluskal@suse.com" date="1523275200">- Run spec-cleaner
- Drop not needed scriplets</changelog>
  <changelog author="seb95.scou@gmail.com" date="1523275201">- New upstream release, update to version 1.6.1
  * Worked around an issue with Qt version 5.10 that causes the
  application to occasionally crash when reloading the currently
  opened document or when opening a new document due to the text
  cursor not being set to the beginning of the document before
  clearing the editor and loading the new document.</changelog>
  <changelog author="seb95.scou@gmail.com" date="1523880000">- Update to version 1.6.2
  * Issue #315: Worked around slow load of QPrinter constructor in
    Fedora 27 by lazy loading the printer settings only when needed
    for printing or print preview rather than during application
    startup.
  * Fixed line break tokenizing to not include paragraph breaks.</changelog>
  <changelog author="seb95.scou@gmail.com" date="1531915200">- Update to version 1.7.0
  * Added light and dark built-in themes based on the community Ulysses III theme Plainstraction.
  * @sbrl added a new Github Dark built-in stylesheet for use with the live preview.
  * Live preview has been optimized to show the preview for typed characters immediately on smaller documents.
  * Added ODT and EPUB 3 as export options for MultiMarkdown 6.
  * Theme selection dialog now displays a grid instead of a list.
  * The menu bar is now hidden again in full screen mode when the user presses Alt+Tab to switch to a different application.
  * Fixed issue #354 to disable hard line breaks for Pandoc's Github-flavored Markdown.
  * Worked around issue in Qt 5.11 where changing the theme causes the app to crash.
  * Worked around issue in Qt 5.10 where opening a new document with a document already loaded can cause the app to crash.</changelog>
  <changelog author="seb95.scou@gmail.com" date="1532347200">- Update to version 1.7.1
  * Fixed regression in full screen mode where menu bar was not showing on mouse-over.
  * Fixed regression where wrong theme was shown as selected on opening the Theme Selection dialog.
  * Fixed issue #366 where warnings from Pandoc that were resulting in error dialogs on successful export.
  * Fixed issue #292 where saving a document under Windows resulted in end-of-line characters being written as \n instead of \r\n.
  * Fixed issue #360 where a graphical glitch under MacOS disabled the Theme Selection dialog's remove theme button.</changelog>
  <changelog author="mpluskal@suse.com" date="1533038400">- Update to version 1.7.2:
  * Fixed issue where the --quiet option was mistakenly used with older Pandoc versions that did not support its use.
  * Worked around Qt 5.11 qinstall bug where running qmake and make would fail when installing the translation files</changelog>
  <changelog author="seb95.scou@gmail.com" date="1535112000">- Update to version 1.7.3:
  * Fixed segfault that occurred when changing the theme or interface style after opening the Preview Options dialog.</changelog>
  <changelog author="Sebastien CHAVAUX &lt;seb95.scou@gmail.com&gt;" date="1544788800">- Update to version 1.7.4:
  * Issue #178: Only use --quiet option for Pandoc version 2 or greater.
  * Fixed words-per-minute calculations to not be jumpy or overly high.
  * Fixed issue where creating a new theme resulted in inconsistent selection and display of themes in the Theme Selection dialog.
  * Fixed broken icon when running under Wayland.
  * Fixed screenshots in appdata.
  * Issue #385: Updated resource files license to CC BY-SA 4.0.</changelog>
  <changelog author="Sebastien CHAVAUX &lt;seb95passionlinux@opensuse.org&gt;" date="1556712000">- Update to version 1.8.0:
  * New Features: HTML preview has been ported from QtWebKit to QtWebEngine (Chromium).
  * Issue #206: ghostwriter now has right-to-left language support.
  * Issue #391: mathml option for pandoc is now used to render math equations for preview and export.
  * Issue #411: Fixed crash when adding a new theme with no theme selected.
  * Issue #412: Fixed export to PDF (wkhtmltopdf) failure with Pandoc.
  * Issue #430: Fixed issue extra spaces appearing between &lt;br/&gt; tags in the HTML preview.
  * Removed print support, since it has some odd bugs on some platforms, and most users would want to print their exported content anyway.
  * Removed graphics fade effect for the bottom of the editor, as it is a risky feature that has caused bugs in the past and does not work on HiDPI screens.</changelog>
  <changelog author="Sebastien CHAVAUX &lt;seb95passionlinux@opensuse.org&gt;" date="1582545600">- Update to version 1.8.1:
  * Issue #443: MathJax 3.0 is now built into the HTML preview. Note that this feature works best with Pandoc and requires an Internet connection. Other Markdown processors are not currently supported.
  * Issue #447: Cursor is no longer shown when editor is not in focus.
  * Issue #461: Fixed Cheat Sheet to have correct image example.
  * Issue #471: HUD window styling is fixed for Qt 5.13.
  * Issue #472: Fixed typing paused timers for session statistics and for hiding HUD windows.
  * Discount is not listed as an available Markdown processor if MultiMarkdown is installed.
  * New application translations are available for the following languages:
    + Arabic
    + Dutch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1591272000">- Add patch to fix build with Qt 5.15:
  * 0001-Fix-build-with-Qt-5.15.patch</changelog>
  <changelog author="Cor Blom &lt;cornelis@solcon.nl&gt;" date="1622376000">- Update to 2.0.1:
  Fixed:
  * Issue #598: Unicode characters no longer shifts syntax
    highlighting.
  * Sidebar now properly hides itself after the `Ctrl+J` Outline
    command if it was
    previously hidden on initial launch.
  * New Norwegian translation added.
  * Spanish and Italian translations updated.
- Update to 2.0.0:
  Added:
  * cmark-gfm now replaces Sundown as the default Markdown processor
    for live previews an export.
  * Syntax highlighting now utilizes cmark-gfm for better accuracy,
    especially with nested blocks.
  * HUDs have been replaced with a side bar.
  * Theming has been revamped to include more color options, but to
    exclude background images.
  * CSS for HTML Preview now adaptively changes colors based on the
    current theme.
  * Fonts can be customized for the HTML preview in the Preview
    Options dialog.
  * Themes are now composed of two color schemes: a light mode and a
    dark mode.
  * A new dark mode button in the status bar allows users to switch
    to the current theme's dark mode.
  * Find and replace dialog has been revamped into a panel at the
    bottom of the application.
  * Find and replace now supports highlighting all matches.
  * Export dialog now uses native file selector dialog.
  * Any two spaces at the end of a line are marked with dots by
    default.
  * Selected text now reveals tabs and spaces.
  * Source code has been refactored to follow KDE Frameworks and Qt
    coding style guides.
  * ghostwriter now uses React to update only what changed in the
    live preview since the last keystroke, significantly reducing
    the live preview rendering time for large documents.
  Fixed:
  * Issue #281: Removal of HUD windows will facilitate Alt+Tab
    switching.
  * Issue #382, #539: IME selection window/IBUS candidate window
    should no longer be displaced.
  * Issue #401: Single column tables are now highlighted.
  * Issue #439: README file was updated to remove the installation
    of qt5-default on Debian-based systems.
  * Issue #480: Menu bar is now accessible on relaunching ghostwriter
    in full screen mode.
  * Issue #494: MathJax JavaScript syntax error that was being
    printed to the terminal and which prevented inline math from
    being displayed with the `$` sign has been fixed.
  * Issue #500: Preview Options dialog will now only open once.
  * Issue #507: Multilevel lists are highlighted correctly in the
    editor with the switch to cmark-gfm handling the syntax
    highlighting.
  * Issue #508: HUD windows have been replaced with a side bar for
    compatibility with Wayland.
  * Issue #517: README.md has been updated with correct instructions
    location for building on MacOS.
  * Issue #503: MathJax has now been included inside the application
    rather than fetching it externally.
  * Issue #532: Insert spaces for tabs now works on startup.
  * Issue #536: Added missing Markdown file extensions to file
    dialog filter when opening and saving files.
  Removed:
  * Discount support was removed due to its conflicting executable
    name with MultiMarkdown.
- Remove 0001-Fix-build-with-Qt-5.15.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1622462400">- Fix source url</changelog>
  <changelog author="Cor Blom &lt;cornelis@solcon.nl&gt;" date="1626350400">- Update to 2.0.2:
  * Unicode characters are properly displayed in the sidebar's
    Outline.
  * Chinese and other languages with unicode characters now display
    properly in the HTML preview.</changelog>
  <changelog author="Sebastien CHAVAUX &lt;seb95.scou@gmail.com&gt;" date="1637582400">- Update to 2.1.0.
- list of fixes, see https://github.com/wereturtle/ghostwriter/releases/tag/2.1.0</changelog>
  <changelog author="Sebastien CHAVAUX &lt;seb95.scou@gmail.com&gt;" date="1640520000">- New upstream release, update to version 2.1.1.
- list of fixes, see https://github.com/wereturtle/ghostwriter/releases/tag/2.1.1.</changelog>
  <changelog author="Sebastien CHAVAUX &lt;seb95.scou@gmail.com&gt;" date="1647432000">- New upstream release, update to version 2.1.2.
- list of fixes, see https://github.com/wereturtle/ghostwriter/releases/tag/2.1.2.</changelog>
  <changelog author="Sebastien CHAVAUX &lt;seb95.scou@gmail.com&gt;" date="1654257600">- New upstream release, update to version 2.1.3.
- list of fixes, see https://github.com/wereturtle/ghostwriter/releases/tag/2.1.3.</changelog>
  <changelog author="Sebastien CHAVAUX &lt;seb95.scou@gmail.com&gt;" date="1655640000">- New upstream release, update to version 2.1.4.
- list of fixes, see https://github.com/wereturtle/ghostwriter/releases/tag/2.1.4.</changelog>
  <changelog author="Olivier Belleux &lt;o.g.m.belleux@gmail.com&gt;" date="1665057600">- New upstream release, update to version 2.1.6.
- list of fixes, see https://github.com/KDE/ghostwriter/releases/tag/2.1.6.</changelog>
</package>
<package pkgid="13fd9c95d8d395617d42ab550c0108fb12e8f6519f58e325bf63ef7578e3b8a1" name="ghostwriter" arch="src">
  <version epoch="0" ver="2.1.6" rel="bp154.2.3.1"/>
  <changelog author="mpluskal@suse.com" date="1523275200">- Run spec-cleaner
- Drop not needed scriplets</changelog>
  <changelog author="seb95.scou@gmail.com" date="1523275201">- New upstream release, update to version 1.6.1
  * Worked around an issue with Qt version 5.10 that causes the
  application to occasionally crash when reloading the currently
  opened document or when opening a new document due to the text
  cursor not being set to the beginning of the document before
  clearing the editor and loading the new document.</changelog>
  <changelog author="seb95.scou@gmail.com" date="1523880000">- Update to version 1.6.2
  * Issue #315: Worked around slow load of QPrinter constructor in
    Fedora 27 by lazy loading the printer settings only when needed
    for printing or print preview rather than during application
    startup.
  * Fixed line break tokenizing to not include paragraph breaks.</changelog>
  <changelog author="seb95.scou@gmail.com" date="1531915200">- Update to version 1.7.0
  * Added light and dark built-in themes based on the community Ulysses III theme Plainstraction.
  * @sbrl added a new Github Dark built-in stylesheet for use with the live preview.
  * Live preview has been optimized to show the preview for typed characters immediately on smaller documents.
  * Added ODT and EPUB 3 as export options for MultiMarkdown 6.
  * Theme selection dialog now displays a grid instead of a list.
  * The menu bar is now hidden again in full screen mode when the user presses Alt+Tab to switch to a different application.
  * Fixed issue #354 to disable hard line breaks for Pandoc's Github-flavored Markdown.
  * Worked around issue in Qt 5.11 where changing the theme causes the app to crash.
  * Worked around issue in Qt 5.10 where opening a new document with a document already loaded can cause the app to crash.</changelog>
  <changelog author="seb95.scou@gmail.com" date="1532347200">- Update to version 1.7.1
  * Fixed regression in full screen mode where menu bar was not showing on mouse-over.
  * Fixed regression where wrong theme was shown as selected on opening the Theme Selection dialog.
  * Fixed issue #366 where warnings from Pandoc that were resulting in error dialogs on successful export.
  * Fixed issue #292 where saving a document under Windows resulted in end-of-line characters being written as \n instead of \r\n.
  * Fixed issue #360 where a graphical glitch under MacOS disabled the Theme Selection dialog's remove theme button.</changelog>
  <changelog author="mpluskal@suse.com" date="1533038400">- Update to version 1.7.2:
  * Fixed issue where the --quiet option was mistakenly used with older Pandoc versions that did not support its use.
  * Worked around Qt 5.11 qinstall bug where running qmake and make would fail when installing the translation files</changelog>
  <changelog author="seb95.scou@gmail.com" date="1535112000">- Update to version 1.7.3:
  * Fixed segfault that occurred when changing the theme or interface style after opening the Preview Options dialog.</changelog>
  <changelog author="Sebastien CHAVAUX &lt;seb95.scou@gmail.com&gt;" date="1544788800">- Update to version 1.7.4:
  * Issue #178: Only use --quiet option for Pandoc version 2 or greater.
  * Fixed words-per-minute calculations to not be jumpy or overly high.
  * Fixed issue where creating a new theme resulted in inconsistent selection and display of themes in the Theme Selection dialog.
  * Fixed broken icon when running under Wayland.
  * Fixed screenshots in appdata.
  * Issue #385: Updated resource files license to CC BY-SA 4.0.</changelog>
  <changelog author="Sebastien CHAVAUX &lt;seb95passionlinux@opensuse.org&gt;" date="1556712000">- Update to version 1.8.0:
  * New Features: HTML preview has been ported from QtWebKit to QtWebEngine (Chromium).
  * Issue #206: ghostwriter now has right-to-left language support.
  * Issue #391: mathml option for pandoc is now used to render math equations for preview and export.
  * Issue #411: Fixed crash when adding a new theme with no theme selected.
  * Issue #412: Fixed export to PDF (wkhtmltopdf) failure with Pandoc.
  * Issue #430: Fixed issue extra spaces appearing between &lt;br/&gt; tags in the HTML preview.
  * Removed print support, since it has some odd bugs on some platforms, and most users would want to print their exported content anyway.
  * Removed graphics fade effect for the bottom of the editor, as it is a risky feature that has caused bugs in the past and does not work on HiDPI screens.</changelog>
  <changelog author="Sebastien CHAVAUX &lt;seb95passionlinux@opensuse.org&gt;" date="1582545600">- Update to version 1.8.1:
  * Issue #443: MathJax 3.0 is now built into the HTML preview. Note that this feature works best with Pandoc and requires an Internet connection. Other Markdown processors are not currently supported.
  * Issue #447: Cursor is no longer shown when editor is not in focus.
  * Issue #461: Fixed Cheat Sheet to have correct image example.
  * Issue #471: HUD window styling is fixed for Qt 5.13.
  * Issue #472: Fixed typing paused timers for session statistics and for hiding HUD windows.
  * Discount is not listed as an available Markdown processor if MultiMarkdown is installed.
  * New application translations are available for the following languages:
    + Arabic
    + Dutch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1591272000">- Add patch to fix build with Qt 5.15:
  * 0001-Fix-build-with-Qt-5.15.patch</changelog>
  <changelog author="Cor Blom &lt;cornelis@solcon.nl&gt;" date="1622376000">- Update to 2.0.1:
  Fixed:
  * Issue #598: Unicode characters no longer shifts syntax
    highlighting.
  * Sidebar now properly hides itself after the `Ctrl+J` Outline
    command if it was
    previously hidden on initial launch.
  * New Norwegian translation added.
  * Spanish and Italian translations updated.
- Update to 2.0.0:
  Added:
  * cmark-gfm now replaces Sundown as the default Markdown processor
    for live previews an export.
  * Syntax highlighting now utilizes cmark-gfm for better accuracy,
    especially with nested blocks.
  * HUDs have been replaced with a side bar.
  * Theming has been revamped to include more color options, but to
    exclude background images.
  * CSS for HTML Preview now adaptively changes colors based on the
    current theme.
  * Fonts can be customized for the HTML preview in the Preview
    Options dialog.
  * Themes are now composed of two color schemes: a light mode and a
    dark mode.
  * A new dark mode button in the status bar allows users to switch
    to the current theme's dark mode.
  * Find and replace dialog has been revamped into a panel at the
    bottom of the application.
  * Find and replace now supports highlighting all matches.
  * Export dialog now uses native file selector dialog.
  * Any two spaces at the end of a line are marked with dots by
    default.
  * Selected text now reveals tabs and spaces.
  * Source code has been refactored to follow KDE Frameworks and Qt
    coding style guides.
  * ghostwriter now uses React to update only what changed in the
    live preview since the last keystroke, significantly reducing
    the live preview rendering time for large documents.
  Fixed:
  * Issue #281: Removal of HUD windows will facilitate Alt+Tab
    switching.
  * Issue #382, #539: IME selection window/IBUS candidate window
    should no longer be displaced.
  * Issue #401: Single column tables are now highlighted.
  * Issue #439: README file was updated to remove the installation
    of qt5-default on Debian-based systems.
  * Issue #480: Menu bar is now accessible on relaunching ghostwriter
    in full screen mode.
  * Issue #494: MathJax JavaScript syntax error that was being
    printed to the terminal and which prevented inline math from
    being displayed with the `$` sign has been fixed.
  * Issue #500: Preview Options dialog will now only open once.
  * Issue #507: Multilevel lists are highlighted correctly in the
    editor with the switch to cmark-gfm handling the syntax
    highlighting.
  * Issue #508: HUD windows have been replaced with a side bar for
    compatibility with Wayland.
  * Issue #517: README.md has been updated with correct instructions
    location for building on MacOS.
  * Issue #503: MathJax has now been included inside the application
    rather than fetching it externally.
  * Issue #532: Insert spaces for tabs now works on startup.
  * Issue #536: Added missing Markdown file extensions to file
    dialog filter when opening and saving files.
  Removed:
  * Discount support was removed due to its conflicting executable
    name with MultiMarkdown.
- Remove 0001-Fix-build-with-Qt-5.15.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1622462400">- Fix source url</changelog>
  <changelog author="Cor Blom &lt;cornelis@solcon.nl&gt;" date="1626350400">- Update to 2.0.2:
  * Unicode characters are properly displayed in the sidebar's
    Outline.
  * Chinese and other languages with unicode characters now display
    properly in the HTML preview.</changelog>
  <changelog author="Sebastien CHAVAUX &lt;seb95.scou@gmail.com&gt;" date="1637582400">- Update to 2.1.0.
- list of fixes, see https://github.com/wereturtle/ghostwriter/releases/tag/2.1.0</changelog>
  <changelog author="Sebastien CHAVAUX &lt;seb95.scou@gmail.com&gt;" date="1640520000">- New upstream release, update to version 2.1.1.
- list of fixes, see https://github.com/wereturtle/ghostwriter/releases/tag/2.1.1.</changelog>
  <changelog author="Sebastien CHAVAUX &lt;seb95.scou@gmail.com&gt;" date="1647432000">- New upstream release, update to version 2.1.2.
- list of fixes, see https://github.com/wereturtle/ghostwriter/releases/tag/2.1.2.</changelog>
  <changelog author="Sebastien CHAVAUX &lt;seb95.scou@gmail.com&gt;" date="1654257600">- New upstream release, update to version 2.1.3.
- list of fixes, see https://github.com/wereturtle/ghostwriter/releases/tag/2.1.3.</changelog>
  <changelog author="Sebastien CHAVAUX &lt;seb95.scou@gmail.com&gt;" date="1655640000">- New upstream release, update to version 2.1.4.
- list of fixes, see https://github.com/wereturtle/ghostwriter/releases/tag/2.1.4.</changelog>
  <changelog author="Olivier Belleux &lt;o.g.m.belleux@gmail.com&gt;" date="1665057600">- New upstream release, update to version 2.1.6.
- list of fixes, see https://github.com/KDE/ghostwriter/releases/tag/2.1.6.</changelog>
</package>
<package pkgid="4091d45336fff0ff802343f5a79410bd34554d96473cdd7a626b990a9a50c6a8" name="ghostwriter" arch="x86_64">
  <version epoch="0" ver="2.1.6" rel="bp154.2.3.1"/>
  <changelog author="mpluskal@suse.com" date="1523275200">- Run spec-cleaner
- Drop not needed scriplets</changelog>
  <changelog author="seb95.scou@gmail.com" date="1523275201">- New upstream release, update to version 1.6.1
  * Worked around an issue with Qt version 5.10 that causes the
  application to occasionally crash when reloading the currently
  opened document or when opening a new document due to the text
  cursor not being set to the beginning of the document before
  clearing the editor and loading the new document.</changelog>
  <changelog author="seb95.scou@gmail.com" date="1523880000">- Update to version 1.6.2
  * Issue #315: Worked around slow load of QPrinter constructor in
    Fedora 27 by lazy loading the printer settings only when needed
    for printing or print preview rather than during application
    startup.
  * Fixed line break tokenizing to not include paragraph breaks.</changelog>
  <changelog author="seb95.scou@gmail.com" date="1531915200">- Update to version 1.7.0
  * Added light and dark built-in themes based on the community Ulysses III theme Plainstraction.
  * @sbrl added a new Github Dark built-in stylesheet for use with the live preview.
  * Live preview has been optimized to show the preview for typed characters immediately on smaller documents.
  * Added ODT and EPUB 3 as export options for MultiMarkdown 6.
  * Theme selection dialog now displays a grid instead of a list.
  * The menu bar is now hidden again in full screen mode when the user presses Alt+Tab to switch to a different application.
  * Fixed issue #354 to disable hard line breaks for Pandoc's Github-flavored Markdown.
  * Worked around issue in Qt 5.11 where changing the theme causes the app to crash.
  * Worked around issue in Qt 5.10 where opening a new document with a document already loaded can cause the app to crash.</changelog>
  <changelog author="seb95.scou@gmail.com" date="1532347200">- Update to version 1.7.1
  * Fixed regression in full screen mode where menu bar was not showing on mouse-over.
  * Fixed regression where wrong theme was shown as selected on opening the Theme Selection dialog.
  * Fixed issue #366 where warnings from Pandoc that were resulting in error dialogs on successful export.
  * Fixed issue #292 where saving a document under Windows resulted in end-of-line characters being written as \n instead of \r\n.
  * Fixed issue #360 where a graphical glitch under MacOS disabled the Theme Selection dialog's remove theme button.</changelog>
  <changelog author="mpluskal@suse.com" date="1533038400">- Update to version 1.7.2:
  * Fixed issue where the --quiet option was mistakenly used with older Pandoc versions that did not support its use.
  * Worked around Qt 5.11 qinstall bug where running qmake and make would fail when installing the translation files</changelog>
  <changelog author="seb95.scou@gmail.com" date="1535112000">- Update to version 1.7.3:
  * Fixed segfault that occurred when changing the theme or interface style after opening the Preview Options dialog.</changelog>
  <changelog author="Sebastien CHAVAUX &lt;seb95.scou@gmail.com&gt;" date="1544788800">- Update to version 1.7.4:
  * Issue #178: Only use --quiet option for Pandoc version 2 or greater.
  * Fixed words-per-minute calculations to not be jumpy or overly high.
  * Fixed issue where creating a new theme resulted in inconsistent selection and display of themes in the Theme Selection dialog.
  * Fixed broken icon when running under Wayland.
  * Fixed screenshots in appdata.
  * Issue #385: Updated resource files license to CC BY-SA 4.0.</changelog>
  <changelog author="Sebastien CHAVAUX &lt;seb95passionlinux@opensuse.org&gt;" date="1556712000">- Update to version 1.8.0:
  * New Features: HTML preview has been ported from QtWebKit to QtWebEngine (Chromium).
  * Issue #206: ghostwriter now has right-to-left language support.
  * Issue #391: mathml option for pandoc is now used to render math equations for preview and export.
  * Issue #411: Fixed crash when adding a new theme with no theme selected.
  * Issue #412: Fixed export to PDF (wkhtmltopdf) failure with Pandoc.
  * Issue #430: Fixed issue extra spaces appearing between &lt;br/&gt; tags in the HTML preview.
  * Removed print support, since it has some odd bugs on some platforms, and most users would want to print their exported content anyway.
  * Removed graphics fade effect for the bottom of the editor, as it is a risky feature that has caused bugs in the past and does not work on HiDPI screens.</changelog>
  <changelog author="Sebastien CHAVAUX &lt;seb95passionlinux@opensuse.org&gt;" date="1582545600">- Update to version 1.8.1:
  * Issue #443: MathJax 3.0 is now built into the HTML preview. Note that this feature works best with Pandoc and requires an Internet connection. Other Markdown processors are not currently supported.
  * Issue #447: Cursor is no longer shown when editor is not in focus.
  * Issue #461: Fixed Cheat Sheet to have correct image example.
  * Issue #471: HUD window styling is fixed for Qt 5.13.
  * Issue #472: Fixed typing paused timers for session statistics and for hiding HUD windows.
  * Discount is not listed as an available Markdown processor if MultiMarkdown is installed.
  * New application translations are available for the following languages:
    + Arabic
    + Dutch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1591272000">- Add patch to fix build with Qt 5.15:
  * 0001-Fix-build-with-Qt-5.15.patch</changelog>
  <changelog author="Cor Blom &lt;cornelis@solcon.nl&gt;" date="1622376000">- Update to 2.0.1:
  Fixed:
  * Issue #598: Unicode characters no longer shifts syntax
    highlighting.
  * Sidebar now properly hides itself after the `Ctrl+J` Outline
    command if it was
    previously hidden on initial launch.
  * New Norwegian translation added.
  * Spanish and Italian translations updated.
- Update to 2.0.0:
  Added:
  * cmark-gfm now replaces Sundown as the default Markdown processor
    for live previews an export.
  * Syntax highlighting now utilizes cmark-gfm for better accuracy,
    especially with nested blocks.
  * HUDs have been replaced with a side bar.
  * Theming has been revamped to include more color options, but to
    exclude background images.
  * CSS for HTML Preview now adaptively changes colors based on the
    current theme.
  * Fonts can be customized for the HTML preview in the Preview
    Options dialog.
  * Themes are now composed of two color schemes: a light mode and a
    dark mode.
  * A new dark mode button in the status bar allows users to switch
    to the current theme's dark mode.
  * Find and replace dialog has been revamped into a panel at the
    bottom of the application.
  * Find and replace now supports highlighting all matches.
  * Export dialog now uses native file selector dialog.
  * Any two spaces at the end of a line are marked with dots by
    default.
  * Selected text now reveals tabs and spaces.
  * Source code has been refactored to follow KDE Frameworks and Qt
    coding style guides.
  * ghostwriter now uses React to update only what changed in the
    live preview since the last keystroke, significantly reducing
    the live preview rendering time for large documents.
  Fixed:
  * Issue #281: Removal of HUD windows will facilitate Alt+Tab
    switching.
  * Issue #382, #539: IME selection window/IBUS candidate window
    should no longer be displaced.
  * Issue #401: Single column tables are now highlighted.
  * Issue #439: README file was updated to remove the installation
    of qt5-default on Debian-based systems.
  * Issue #480: Menu bar is now accessible on relaunching ghostwriter
    in full screen mode.
  * Issue #494: MathJax JavaScript syntax error that was being
    printed to the terminal and which prevented inline math from
    being displayed with the `$` sign has been fixed.
  * Issue #500: Preview Options dialog will now only open once.
  * Issue #507: Multilevel lists are highlighted correctly in the
    editor with the switch to cmark-gfm handling the syntax
    highlighting.
  * Issue #508: HUD windows have been replaced with a side bar for
    compatibility with Wayland.
  * Issue #517: README.md has been updated with correct instructions
    location for building on MacOS.
  * Issue #503: MathJax has now been included inside the application
    rather than fetching it externally.
  * Issue #532: Insert spaces for tabs now works on startup.
  * Issue #536: Added missing Markdown file extensions to file
    dialog filter when opening and saving files.
  Removed:
  * Discount support was removed due to its conflicting executable
    name with MultiMarkdown.
- Remove 0001-Fix-build-with-Qt-5.15.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1622462400">- Fix source url</changelog>
  <changelog author="Cor Blom &lt;cornelis@solcon.nl&gt;" date="1626350400">- Update to 2.0.2:
  * Unicode characters are properly displayed in the sidebar's
    Outline.
  * Chinese and other languages with unicode characters now display
    properly in the HTML preview.</changelog>
  <changelog author="Sebastien CHAVAUX &lt;seb95.scou@gmail.com&gt;" date="1637582400">- Update to 2.1.0.
- list of fixes, see https://github.com/wereturtle/ghostwriter/releases/tag/2.1.0</changelog>
  <changelog author="Sebastien CHAVAUX &lt;seb95.scou@gmail.com&gt;" date="1640520000">- New upstream release, update to version 2.1.1.
- list of fixes, see https://github.com/wereturtle/ghostwriter/releases/tag/2.1.1.</changelog>
  <changelog author="Sebastien CHAVAUX &lt;seb95.scou@gmail.com&gt;" date="1647432000">- New upstream release, update to version 2.1.2.
- list of fixes, see https://github.com/wereturtle/ghostwriter/releases/tag/2.1.2.</changelog>
  <changelog author="Sebastien CHAVAUX &lt;seb95.scou@gmail.com&gt;" date="1654257600">- New upstream release, update to version 2.1.3.
- list of fixes, see https://github.com/wereturtle/ghostwriter/releases/tag/2.1.3.</changelog>
  <changelog author="Sebastien CHAVAUX &lt;seb95.scou@gmail.com&gt;" date="1655640000">- New upstream release, update to version 2.1.4.
- list of fixes, see https://github.com/wereturtle/ghostwriter/releases/tag/2.1.4.</changelog>
  <changelog author="Olivier Belleux &lt;o.g.m.belleux@gmail.com&gt;" date="1665057600">- New upstream release, update to version 2.1.6.
- list of fixes, see https://github.com/KDE/ghostwriter/releases/tag/2.1.6.</changelog>
</package>
<package pkgid="56cb8fa2313f14e30490a04d0e4883e38d7032ec2528f614a2457cd016738569" name="ghostwriter-lang" arch="noarch">
  <version epoch="0" ver="2.1.6" rel="bp154.2.3.1"/>
  <changelog author="mpluskal@suse.com" date="1523275200">- Run spec-cleaner
- Drop not needed scriplets</changelog>
  <changelog author="seb95.scou@gmail.com" date="1523275201">- New upstream release, update to version 1.6.1
  * Worked around an issue with Qt version 5.10 that causes the
  application to occasionally crash when reloading the currently
  opened document or when opening a new document due to the text
  cursor not being set to the beginning of the document before
  clearing the editor and loading the new document.</changelog>
  <changelog author="seb95.scou@gmail.com" date="1523880000">- Update to version 1.6.2
  * Issue #315: Worked around slow load of QPrinter constructor in
    Fedora 27 by lazy loading the printer settings only when needed
    for printing or print preview rather than during application
    startup.
  * Fixed line break tokenizing to not include paragraph breaks.</changelog>
  <changelog author="seb95.scou@gmail.com" date="1531915200">- Update to version 1.7.0
  * Added light and dark built-in themes based on the community Ulysses III theme Plainstraction.
  * @sbrl added a new Github Dark built-in stylesheet for use with the live preview.
  * Live preview has been optimized to show the preview for typed characters immediately on smaller documents.
  * Added ODT and EPUB 3 as export options for MultiMarkdown 6.
  * Theme selection dialog now displays a grid instead of a list.
  * The menu bar is now hidden again in full screen mode when the user presses Alt+Tab to switch to a different application.
  * Fixed issue #354 to disable hard line breaks for Pandoc's Github-flavored Markdown.
  * Worked around issue in Qt 5.11 where changing the theme causes the app to crash.
  * Worked around issue in Qt 5.10 where opening a new document with a document already loaded can cause the app to crash.</changelog>
  <changelog author="seb95.scou@gmail.com" date="1532347200">- Update to version 1.7.1
  * Fixed regression in full screen mode where menu bar was not showing on mouse-over.
  * Fixed regression where wrong theme was shown as selected on opening the Theme Selection dialog.
  * Fixed issue #366 where warnings from Pandoc that were resulting in error dialogs on successful export.
  * Fixed issue #292 where saving a document under Windows resulted in end-of-line characters being written as \n instead of \r\n.
  * Fixed issue #360 where a graphical glitch under MacOS disabled the Theme Selection dialog's remove theme button.</changelog>
  <changelog author="mpluskal@suse.com" date="1533038400">- Update to version 1.7.2:
  * Fixed issue where the --quiet option was mistakenly used with older Pandoc versions that did not support its use.
  * Worked around Qt 5.11 qinstall bug where running qmake and make would fail when installing the translation files</changelog>
  <changelog author="seb95.scou@gmail.com" date="1535112000">- Update to version 1.7.3:
  * Fixed segfault that occurred when changing the theme or interface style after opening the Preview Options dialog.</changelog>
  <changelog author="Sebastien CHAVAUX &lt;seb95.scou@gmail.com&gt;" date="1544788800">- Update to version 1.7.4:
  * Issue #178: Only use --quiet option for Pandoc version 2 or greater.
  * Fixed words-per-minute calculations to not be jumpy or overly high.
  * Fixed issue where creating a new theme resulted in inconsistent selection and display of themes in the Theme Selection dialog.
  * Fixed broken icon when running under Wayland.
  * Fixed screenshots in appdata.
  * Issue #385: Updated resource files license to CC BY-SA 4.0.</changelog>
  <changelog author="Sebastien CHAVAUX &lt;seb95passionlinux@opensuse.org&gt;" date="1556712000">- Update to version 1.8.0:
  * New Features: HTML preview has been ported from QtWebKit to QtWebEngine (Chromium).
  * Issue #206: ghostwriter now has right-to-left language support.
  * Issue #391: mathml option for pandoc is now used to render math equations for preview and export.
  * Issue #411: Fixed crash when adding a new theme with no theme selected.
  * Issue #412: Fixed export to PDF (wkhtmltopdf) failure with Pandoc.
  * Issue #430: Fixed issue extra spaces appearing between &lt;br/&gt; tags in the HTML preview.
  * Removed print support, since it has some odd bugs on some platforms, and most users would want to print their exported content anyway.
  * Removed graphics fade effect for the bottom of the editor, as it is a risky feature that has caused bugs in the past and does not work on HiDPI screens.</changelog>
  <changelog author="Sebastien CHAVAUX &lt;seb95passionlinux@opensuse.org&gt;" date="1582545600">- Update to version 1.8.1:
  * Issue #443: MathJax 3.0 is now built into the HTML preview. Note that this feature works best with Pandoc and requires an Internet connection. Other Markdown processors are not currently supported.
  * Issue #447: Cursor is no longer shown when editor is not in focus.
  * Issue #461: Fixed Cheat Sheet to have correct image example.
  * Issue #471: HUD window styling is fixed for Qt 5.13.
  * Issue #472: Fixed typing paused timers for session statistics and for hiding HUD windows.
  * Discount is not listed as an available Markdown processor if MultiMarkdown is installed.
  * New application translations are available for the following languages:
    + Arabic
    + Dutch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1591272000">- Add patch to fix build with Qt 5.15:
  * 0001-Fix-build-with-Qt-5.15.patch</changelog>
  <changelog author="Cor Blom &lt;cornelis@solcon.nl&gt;" date="1622376000">- Update to 2.0.1:
  Fixed:
  * Issue #598: Unicode characters no longer shifts syntax
    highlighting.
  * Sidebar now properly hides itself after the `Ctrl+J` Outline
    command if it was
    previously hidden on initial launch.
  * New Norwegian translation added.
  * Spanish and Italian translations updated.
- Update to 2.0.0:
  Added:
  * cmark-gfm now replaces Sundown as the default Markdown processor
    for live previews an export.
  * Syntax highlighting now utilizes cmark-gfm for better accuracy,
    especially with nested blocks.
  * HUDs have been replaced with a side bar.
  * Theming has been revamped to include more color options, but to
    exclude background images.
  * CSS for HTML Preview now adaptively changes colors based on the
    current theme.
  * Fonts can be customized for the HTML preview in the Preview
    Options dialog.
  * Themes are now composed of two color schemes: a light mode and a
    dark mode.
  * A new dark mode button in the status bar allows users to switch
    to the current theme's dark mode.
  * Find and replace dialog has been revamped into a panel at the
    bottom of the application.
  * Find and replace now supports highlighting all matches.
  * Export dialog now uses native file selector dialog.
  * Any two spaces at the end of a line are marked with dots by
    default.
  * Selected text now reveals tabs and spaces.
  * Source code has been refactored to follow KDE Frameworks and Qt
    coding style guides.
  * ghostwriter now uses React to update only what changed in the
    live preview since the last keystroke, significantly reducing
    the live preview rendering time for large documents.
  Fixed:
  * Issue #281: Removal of HUD windows will facilitate Alt+Tab
    switching.
  * Issue #382, #539: IME selection window/IBUS candidate window
    should no longer be displaced.
  * Issue #401: Single column tables are now highlighted.
  * Issue #439: README file was updated to remove the installation
    of qt5-default on Debian-based systems.
  * Issue #480: Menu bar is now accessible on relaunching ghostwriter
    in full screen mode.
  * Issue #494: MathJax JavaScript syntax error that was being
    printed to the terminal and which prevented inline math from
    being displayed with the `$` sign has been fixed.
  * Issue #500: Preview Options dialog will now only open once.
  * Issue #507: Multilevel lists are highlighted correctly in the
    editor with the switch to cmark-gfm handling the syntax
    highlighting.
  * Issue #508: HUD windows have been replaced with a side bar for
    compatibility with Wayland.
  * Issue #517: README.md has been updated with correct instructions
    location for building on MacOS.
  * Issue #503: MathJax has now been included inside the application
    rather than fetching it externally.
  * Issue #532: Insert spaces for tabs now works on startup.
  * Issue #536: Added missing Markdown file extensions to file
    dialog filter when opening and saving files.
  Removed:
  * Discount support was removed due to its conflicting executable
    name with MultiMarkdown.
- Remove 0001-Fix-build-with-Qt-5.15.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1622462400">- Fix source url</changelog>
  <changelog author="Cor Blom &lt;cornelis@solcon.nl&gt;" date="1626350400">- Update to 2.0.2:
  * Unicode characters are properly displayed in the sidebar's
    Outline.
  * Chinese and other languages with unicode characters now display
    properly in the HTML preview.</changelog>
  <changelog author="Sebastien CHAVAUX &lt;seb95.scou@gmail.com&gt;" date="1637582400">- Update to 2.1.0.
- list of fixes, see https://github.com/wereturtle/ghostwriter/releases/tag/2.1.0</changelog>
  <changelog author="Sebastien CHAVAUX &lt;seb95.scou@gmail.com&gt;" date="1640520000">- New upstream release, update to version 2.1.1.
- list of fixes, see https://github.com/wereturtle/ghostwriter/releases/tag/2.1.1.</changelog>
  <changelog author="Sebastien CHAVAUX &lt;seb95.scou@gmail.com&gt;" date="1647432000">- New upstream release, update to version 2.1.2.
- list of fixes, see https://github.com/wereturtle/ghostwriter/releases/tag/2.1.2.</changelog>
  <changelog author="Sebastien CHAVAUX &lt;seb95.scou@gmail.com&gt;" date="1654257600">- New upstream release, update to version 2.1.3.
- list of fixes, see https://github.com/wereturtle/ghostwriter/releases/tag/2.1.3.</changelog>
  <changelog author="Sebastien CHAVAUX &lt;seb95.scou@gmail.com&gt;" date="1655640000">- New upstream release, update to version 2.1.4.
- list of fixes, see https://github.com/wereturtle/ghostwriter/releases/tag/2.1.4.</changelog>
  <changelog author="Olivier Belleux &lt;o.g.m.belleux@gmail.com&gt;" date="1665057600">- New upstream release, update to version 2.1.6.
- list of fixes, see https://github.com/KDE/ghostwriter/releases/tag/2.1.6.</changelog>
</package>
<package pkgid="5171b3e491dc2afdd492089387aab37462bf93f884c96b2036b5ee71ed1f5df1" name="glusterfs" arch="aarch64">
  <version epoch="0" ver="9.3" rel="bp154.2.3.1"/>
  <changelog author="scorot@free.fr" date="1445947200">- Update to version 3.6.6
  * No ChangeLog available</changelog>
  <changelog author="vcizek@suse.com" date="1503489600">- Update to version 3.8.15
  * fixes build with OpenSSL 1.1 (bsc#1055466)
  * Mandatory lock support for Multiprotocol environment
  * Gluster/NFS disabled by default
  * Geo-replication for Sharded Volumes
  * Tiering aware Geo-replication
  * Enhance Quota enable/disable in glusterd
  * Automagic unsplit-brain by [ctime|mtime|size|majority] for AFR
  * Granular Entry self-heal for AFR
  * Tons of bugfixes
  * for more details see the NEWS file
- spec cleanup
- Install License files/docu</changelog>
  <changelog author="vcizek@suse.com" date="1508328000">- Add missing Requires: libacl-devel to the devel subpackage
  * glfs.h #includes &lt;sys/acl.h&gt;</changelog>
  <changelog author="mpluskal@suse.com" date="1509710400">- Explicitly require python2 as python3 is not yet supported</changelog>
  <changelog author="kukuk@suse.de" date="1510574400">- glusterfs-tirpc.diff: fallback to libtirpc if there is no sunrpc
  support in glibc</changelog>
  <changelog author="jengelh@inai.de" date="1512388800">- Update to new release 3.12.3
  * -- Features introduced in 3.10
  * Brick multiplexing
  * Support to display op-version information from clients
  * Support for rebalance time to completion estimation
  * Separation of tier as its own service
  * Statedump support for gfapi based applications
  * Disabled creation of trash directory by default
  * Implemented parallel readdirp with distribute xlator
  * -- Features introduced in 3.12:
  * Ability to mount sub-directories using the Gluster
    FUSE protocol
  * GFID to path conversion is enabled by default
  * Provided an option to set a limit on number of bricks
    multiplexed in a processes
  * Enhanced the option to export statfs data for bricks
    sharing the same backend filesystem
  * Provided a means to resolve GFID split-brain using
    the gluster CLI
  * Introduction of new api glfs_fd_set_lkowner() to set lock owner
- Remove glusterfs-date.diff (no longer applies)</changelog>
  <changelog author="jengelh@inai.de" date="1513252800">- Add 0001-build-restore-ability-to-control-verbosity-settings.patch
- Replace xdr_sizeof.c with an empty file</changelog>
  <changelog author="jengelh@inai.de" date="1525348800">- Update to new upstream release 4.0.2
  * GlusterD2 (GD2) is a new management daemon for Gluster-4.0,
    glustercli is the command-line interface for it.
    It is a preview release. GD2 is not backwards compatible with
    the older GlusterD. Heterogeneous clusters running both GD2
    and GlusterD are not possible.
  * Not all commands from GlusterD have been implemented for GD2.
  * GD2 does not (yet) work well in 2-node clusters.
  * Self Heal feature integrated for the new Volumes created
    using Glusterd2.</changelog>
  <changelog author="seanlew@opensuse.org" date="1547899200">- Update to new upstream version 5.3 (4.0 is EOL)
  * 5.3 brings hundreds of improvements, see complete relnote at
  https://docs.gluster.org/en/latest/release-notes/5.0/
  * Fixed a number of bugs:
    CVE-2018-1088, CVE-2018-1112 [boo#1090084],
    CVE-2018-10904 [boo#1107018], CVE-2018-10907 [boo#1107019],
    CVE-2018-10911 [boo#1107020], CVE-2018-10913 [boo#1107021],
    CVE-2018-10914 [boo#1107022], CVE-2018-10923 [boo#1107023],
    CVE-2018-10924 [boo#1107024], CVE-2018-10926 [boo#1107025],
    CVE-2018-10927 [boo#1107026], CVE-2018-10928 [boo#1107027],
    CVE-2018-10928 [boo#1107027], CVE-2018-10929 [boo#1107028],
    CVE-2018-10930 [boo#1107029], boo#1105776 .
- Remove patches no longer needed in 5.x:
  * 0001-build-restore-ability-to-control-verbosity-settings.patch
  * glusterfs-tirpc.diff</changelog>
  <changelog author="seanlew@opensuse.org" date="1551528000">- Update to new upstream version 5.4
  * FUSE Client memory leak fixed (#1623107)
  * fail to sync non-ascii utf8 file and dir names (#1648642)
  * Tracker bug for all leases related issues (#1651323)
  * gluster-blockd segfaults because of a null-deref (#1659563)
  * Memory leak: dict_t leak in rda_opendir (#1659676)
  * dht_revalidate may not heal attrs on the brick root (#1660736)
  * Fix tests/bugs/shard/zero-flag.t (#1660932)
  * NL cache: fix typos (#1662200)</changelog>
  <changelog author="seanlew@opensuse.org" date="1552824000">- Update to new upstream version 5.5
  * No changelog yet available in release notes</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Disable LTO (boo#1133088).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Move definition of _lto_cflags into %build.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1576238400">- Update to release 7.0
  * Latency based read child to improve read workload latency in
    a cluster, especially in a cloud setup. Also provides a load
    balancing with the outstanding pending request.
  * Thin-arbiter integration with GD1.
  * If a client older than glusterfs-4.x (i.e. 3.x clients)
    accesses a volume which has the `fips-mode-rchecksum` volume
    option enabled, it can cause erroneous checksum computation/
    unwanted behaviour during afr self-heal.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1577361600">- Fix the name of the Python bindings subpackage
- Properly mark Python bindings subpackage as noarch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1578571200">- Update to release 7.1
  * Fix rebalance causing IO Error - File descriptor in bad state
  * Fix geo-replication sessions going faulty
  * Fix memory leak in glusterfsd process
  * Fix GlusterFS brick process crash
- Add nocommon.patch [boo#1160392]</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1591272000">- Fixes for %_libexecdir changing to /usr/libexec</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1619697600">- Update to release 9.1
  * Implemented seek file operation for open-behind
  * Added io_uring support for Gluster
  * Added Support for 5K volumes
  * Enabled granular-entry-heal by default
  * Added support for monitoring the epoll/rpc layer
  * Improve rebalance of sparse files
- Drop nocommon.patch (merged)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632830400">- Update to release 9.3
  * New reset-brick command
  * Ability to get node level status of a cluster
  * Multi-threaded self-heal for Disperse volumes
  * Lock revocation feature
  * On-demand scrubbing for bitrot detection
  * Real time Cluster notifications using Events APIs
- Move mount helper to /usr/sbin [boo#1191062]</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1657800000">- add explicit Requires for the dependencies, so we make sure
  the dependencies are installed in the same version</changelog>
</package>
<package pkgid="ca220439d9815f2b5d82cfd1dda3dee1d8d0f17dc44434b09424c5195bd95105" name="glusterfs" arch="i586">
  <version epoch="0" ver="9.3" rel="bp154.2.3.1"/>
  <changelog author="scorot@free.fr" date="1445947200">- Update to version 3.6.6
  * No ChangeLog available</changelog>
  <changelog author="vcizek@suse.com" date="1503489600">- Update to version 3.8.15
  * fixes build with OpenSSL 1.1 (bsc#1055466)
  * Mandatory lock support for Multiprotocol environment
  * Gluster/NFS disabled by default
  * Geo-replication for Sharded Volumes
  * Tiering aware Geo-replication
  * Enhance Quota enable/disable in glusterd
  * Automagic unsplit-brain by [ctime|mtime|size|majority] for AFR
  * Granular Entry self-heal for AFR
  * Tons of bugfixes
  * for more details see the NEWS file
- spec cleanup
- Install License files/docu</changelog>
  <changelog author="vcizek@suse.com" date="1508328000">- Add missing Requires: libacl-devel to the devel subpackage
  * glfs.h #includes &lt;sys/acl.h&gt;</changelog>
  <changelog author="mpluskal@suse.com" date="1509710400">- Explicitly require python2 as python3 is not yet supported</changelog>
  <changelog author="kukuk@suse.de" date="1510574400">- glusterfs-tirpc.diff: fallback to libtirpc if there is no sunrpc
  support in glibc</changelog>
  <changelog author="jengelh@inai.de" date="1512388800">- Update to new release 3.12.3
  * -- Features introduced in 3.10
  * Brick multiplexing
  * Support to display op-version information from clients
  * Support for rebalance time to completion estimation
  * Separation of tier as its own service
  * Statedump support for gfapi based applications
  * Disabled creation of trash directory by default
  * Implemented parallel readdirp with distribute xlator
  * -- Features introduced in 3.12:
  * Ability to mount sub-directories using the Gluster
    FUSE protocol
  * GFID to path conversion is enabled by default
  * Provided an option to set a limit on number of bricks
    multiplexed in a processes
  * Enhanced the option to export statfs data for bricks
    sharing the same backend filesystem
  * Provided a means to resolve GFID split-brain using
    the gluster CLI
  * Introduction of new api glfs_fd_set_lkowner() to set lock owner
- Remove glusterfs-date.diff (no longer applies)</changelog>
  <changelog author="jengelh@inai.de" date="1513252800">- Add 0001-build-restore-ability-to-control-verbosity-settings.patch
- Replace xdr_sizeof.c with an empty file</changelog>
  <changelog author="jengelh@inai.de" date="1525348800">- Update to new upstream release 4.0.2
  * GlusterD2 (GD2) is a new management daemon for Gluster-4.0,
    glustercli is the command-line interface for it.
    It is a preview release. GD2 is not backwards compatible with
    the older GlusterD. Heterogeneous clusters running both GD2
    and GlusterD are not possible.
  * Not all commands from GlusterD have been implemented for GD2.
  * GD2 does not (yet) work well in 2-node clusters.
  * Self Heal feature integrated for the new Volumes created
    using Glusterd2.</changelog>
  <changelog author="seanlew@opensuse.org" date="1547899200">- Update to new upstream version 5.3 (4.0 is EOL)
  * 5.3 brings hundreds of improvements, see complete relnote at
  https://docs.gluster.org/en/latest/release-notes/5.0/
  * Fixed a number of bugs:
    CVE-2018-1088, CVE-2018-1112 [boo#1090084],
    CVE-2018-10904 [boo#1107018], CVE-2018-10907 [boo#1107019],
    CVE-2018-10911 [boo#1107020], CVE-2018-10913 [boo#1107021],
    CVE-2018-10914 [boo#1107022], CVE-2018-10923 [boo#1107023],
    CVE-2018-10924 [boo#1107024], CVE-2018-10926 [boo#1107025],
    CVE-2018-10927 [boo#1107026], CVE-2018-10928 [boo#1107027],
    CVE-2018-10928 [boo#1107027], CVE-2018-10929 [boo#1107028],
    CVE-2018-10930 [boo#1107029], boo#1105776 .
- Remove patches no longer needed in 5.x:
  * 0001-build-restore-ability-to-control-verbosity-settings.patch
  * glusterfs-tirpc.diff</changelog>
  <changelog author="seanlew@opensuse.org" date="1551528000">- Update to new upstream version 5.4
  * FUSE Client memory leak fixed (#1623107)
  * fail to sync non-ascii utf8 file and dir names (#1648642)
  * Tracker bug for all leases related issues (#1651323)
  * gluster-blockd segfaults because of a null-deref (#1659563)
  * Memory leak: dict_t leak in rda_opendir (#1659676)
  * dht_revalidate may not heal attrs on the brick root (#1660736)
  * Fix tests/bugs/shard/zero-flag.t (#1660932)
  * NL cache: fix typos (#1662200)</changelog>
  <changelog author="seanlew@opensuse.org" date="1552824000">- Update to new upstream version 5.5
  * No changelog yet available in release notes</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Disable LTO (boo#1133088).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Move definition of _lto_cflags into %build.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1576238400">- Update to release 7.0
  * Latency based read child to improve read workload latency in
    a cluster, especially in a cloud setup. Also provides a load
    balancing with the outstanding pending request.
  * Thin-arbiter integration with GD1.
  * If a client older than glusterfs-4.x (i.e. 3.x clients)
    accesses a volume which has the `fips-mode-rchecksum` volume
    option enabled, it can cause erroneous checksum computation/
    unwanted behaviour during afr self-heal.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1577361600">- Fix the name of the Python bindings subpackage
- Properly mark Python bindings subpackage as noarch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1578571200">- Update to release 7.1
  * Fix rebalance causing IO Error - File descriptor in bad state
  * Fix geo-replication sessions going faulty
  * Fix memory leak in glusterfsd process
  * Fix GlusterFS brick process crash
- Add nocommon.patch [boo#1160392]</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1591272000">- Fixes for %_libexecdir changing to /usr/libexec</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1619697600">- Update to release 9.1
  * Implemented seek file operation for open-behind
  * Added io_uring support for Gluster
  * Added Support for 5K volumes
  * Enabled granular-entry-heal by default
  * Added support for monitoring the epoll/rpc layer
  * Improve rebalance of sparse files
- Drop nocommon.patch (merged)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632830400">- Update to release 9.3
  * New reset-brick command
  * Ability to get node level status of a cluster
  * Multi-threaded self-heal for Disperse volumes
  * Lock revocation feature
  * On-demand scrubbing for bitrot detection
  * Real time Cluster notifications using Events APIs
- Move mount helper to /usr/sbin [boo#1191062]</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1657800000">- add explicit Requires for the dependencies, so we make sure
  the dependencies are installed in the same version</changelog>
</package>
<package pkgid="7457e9d2c5b829ea8ea2201d98cecb6808afbee4128adae047c96cec671f01a1" name="glusterfs" arch="ppc64le">
  <version epoch="0" ver="9.3" rel="bp154.2.3.1"/>
  <changelog author="scorot@free.fr" date="1445947200">- Update to version 3.6.6
  * No ChangeLog available</changelog>
  <changelog author="vcizek@suse.com" date="1503489600">- Update to version 3.8.15
  * fixes build with OpenSSL 1.1 (bsc#1055466)
  * Mandatory lock support for Multiprotocol environment
  * Gluster/NFS disabled by default
  * Geo-replication for Sharded Volumes
  * Tiering aware Geo-replication
  * Enhance Quota enable/disable in glusterd
  * Automagic unsplit-brain by [ctime|mtime|size|majority] for AFR
  * Granular Entry self-heal for AFR
  * Tons of bugfixes
  * for more details see the NEWS file
- spec cleanup
- Install License files/docu</changelog>
  <changelog author="vcizek@suse.com" date="1508328000">- Add missing Requires: libacl-devel to the devel subpackage
  * glfs.h #includes &lt;sys/acl.h&gt;</changelog>
  <changelog author="mpluskal@suse.com" date="1509710400">- Explicitly require python2 as python3 is not yet supported</changelog>
  <changelog author="kukuk@suse.de" date="1510574400">- glusterfs-tirpc.diff: fallback to libtirpc if there is no sunrpc
  support in glibc</changelog>
  <changelog author="jengelh@inai.de" date="1512388800">- Update to new release 3.12.3
  * -- Features introduced in 3.10
  * Brick multiplexing
  * Support to display op-version information from clients
  * Support for rebalance time to completion estimation
  * Separation of tier as its own service
  * Statedump support for gfapi based applications
  * Disabled creation of trash directory by default
  * Implemented parallel readdirp with distribute xlator
  * -- Features introduced in 3.12:
  * Ability to mount sub-directories using the Gluster
    FUSE protocol
  * GFID to path conversion is enabled by default
  * Provided an option to set a limit on number of bricks
    multiplexed in a processes
  * Enhanced the option to export statfs data for bricks
    sharing the same backend filesystem
  * Provided a means to resolve GFID split-brain using
    the gluster CLI
  * Introduction of new api glfs_fd_set_lkowner() to set lock owner
- Remove glusterfs-date.diff (no longer applies)</changelog>
  <changelog author="jengelh@inai.de" date="1513252800">- Add 0001-build-restore-ability-to-control-verbosity-settings.patch
- Replace xdr_sizeof.c with an empty file</changelog>
  <changelog author="jengelh@inai.de" date="1525348800">- Update to new upstream release 4.0.2
  * GlusterD2 (GD2) is a new management daemon for Gluster-4.0,
    glustercli is the command-line interface for it.
    It is a preview release. GD2 is not backwards compatible with
    the older GlusterD. Heterogeneous clusters running both GD2
    and GlusterD are not possible.
  * Not all commands from GlusterD have been implemented for GD2.
  * GD2 does not (yet) work well in 2-node clusters.
  * Self Heal feature integrated for the new Volumes created
    using Glusterd2.</changelog>
  <changelog author="seanlew@opensuse.org" date="1547899200">- Update to new upstream version 5.3 (4.0 is EOL)
  * 5.3 brings hundreds of improvements, see complete relnote at
  https://docs.gluster.org/en/latest/release-notes/5.0/
  * Fixed a number of bugs:
    CVE-2018-1088, CVE-2018-1112 [boo#1090084],
    CVE-2018-10904 [boo#1107018], CVE-2018-10907 [boo#1107019],
    CVE-2018-10911 [boo#1107020], CVE-2018-10913 [boo#1107021],
    CVE-2018-10914 [boo#1107022], CVE-2018-10923 [boo#1107023],
    CVE-2018-10924 [boo#1107024], CVE-2018-10926 [boo#1107025],
    CVE-2018-10927 [boo#1107026], CVE-2018-10928 [boo#1107027],
    CVE-2018-10928 [boo#1107027], CVE-2018-10929 [boo#1107028],
    CVE-2018-10930 [boo#1107029], boo#1105776 .
- Remove patches no longer needed in 5.x:
  * 0001-build-restore-ability-to-control-verbosity-settings.patch
  * glusterfs-tirpc.diff</changelog>
  <changelog author="seanlew@opensuse.org" date="1551528000">- Update to new upstream version 5.4
  * FUSE Client memory leak fixed (#1623107)
  * fail to sync non-ascii utf8 file and dir names (#1648642)
  * Tracker bug for all leases related issues (#1651323)
  * gluster-blockd segfaults because of a null-deref (#1659563)
  * Memory leak: dict_t leak in rda_opendir (#1659676)
  * dht_revalidate may not heal attrs on the brick root (#1660736)
  * Fix tests/bugs/shard/zero-flag.t (#1660932)
  * NL cache: fix typos (#1662200)</changelog>
  <changelog author="seanlew@opensuse.org" date="1552824000">- Update to new upstream version 5.5
  * No changelog yet available in release notes</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Disable LTO (boo#1133088).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Move definition of _lto_cflags into %build.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1576238400">- Update to release 7.0
  * Latency based read child to improve read workload latency in
    a cluster, especially in a cloud setup. Also provides a load
    balancing with the outstanding pending request.
  * Thin-arbiter integration with GD1.
  * If a client older than glusterfs-4.x (i.e. 3.x clients)
    accesses a volume which has the `fips-mode-rchecksum` volume
    option enabled, it can cause erroneous checksum computation/
    unwanted behaviour during afr self-heal.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1577361600">- Fix the name of the Python bindings subpackage
- Properly mark Python bindings subpackage as noarch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1578571200">- Update to release 7.1
  * Fix rebalance causing IO Error - File descriptor in bad state
  * Fix geo-replication sessions going faulty
  * Fix memory leak in glusterfsd process
  * Fix GlusterFS brick process crash
- Add nocommon.patch [boo#1160392]</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1591272000">- Fixes for %_libexecdir changing to /usr/libexec</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1619697600">- Update to release 9.1
  * Implemented seek file operation for open-behind
  * Added io_uring support for Gluster
  * Added Support for 5K volumes
  * Enabled granular-entry-heal by default
  * Added support for monitoring the epoll/rpc layer
  * Improve rebalance of sparse files
- Drop nocommon.patch (merged)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632830400">- Update to release 9.3
  * New reset-brick command
  * Ability to get node level status of a cluster
  * Multi-threaded self-heal for Disperse volumes
  * Lock revocation feature
  * On-demand scrubbing for bitrot detection
  * Real time Cluster notifications using Events APIs
- Move mount helper to /usr/sbin [boo#1191062]</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1657800000">- add explicit Requires for the dependencies, so we make sure
  the dependencies are installed in the same version</changelog>
</package>
<package pkgid="33522f53ff70285e4ce3c9824059cda83ec74705d4a9485688a246fc2f9c6242" name="glusterfs" arch="s390x">
  <version epoch="0" ver="9.3" rel="bp154.2.3.1"/>
  <changelog author="scorot@free.fr" date="1445947200">- Update to version 3.6.6
  * No ChangeLog available</changelog>
  <changelog author="vcizek@suse.com" date="1503489600">- Update to version 3.8.15
  * fixes build with OpenSSL 1.1 (bsc#1055466)
  * Mandatory lock support for Multiprotocol environment
  * Gluster/NFS disabled by default
  * Geo-replication for Sharded Volumes
  * Tiering aware Geo-replication
  * Enhance Quota enable/disable in glusterd
  * Automagic unsplit-brain by [ctime|mtime|size|majority] for AFR
  * Granular Entry self-heal for AFR
  * Tons of bugfixes
  * for more details see the NEWS file
- spec cleanup
- Install License files/docu</changelog>
  <changelog author="vcizek@suse.com" date="1508328000">- Add missing Requires: libacl-devel to the devel subpackage
  * glfs.h #includes &lt;sys/acl.h&gt;</changelog>
  <changelog author="mpluskal@suse.com" date="1509710400">- Explicitly require python2 as python3 is not yet supported</changelog>
  <changelog author="kukuk@suse.de" date="1510574400">- glusterfs-tirpc.diff: fallback to libtirpc if there is no sunrpc
  support in glibc</changelog>
  <changelog author="jengelh@inai.de" date="1512388800">- Update to new release 3.12.3
  * -- Features introduced in 3.10
  * Brick multiplexing
  * Support to display op-version information from clients
  * Support for rebalance time to completion estimation
  * Separation of tier as its own service
  * Statedump support for gfapi based applications
  * Disabled creation of trash directory by default
  * Implemented parallel readdirp with distribute xlator
  * -- Features introduced in 3.12:
  * Ability to mount sub-directories using the Gluster
    FUSE protocol
  * GFID to path conversion is enabled by default
  * Provided an option to set a limit on number of bricks
    multiplexed in a processes
  * Enhanced the option to export statfs data for bricks
    sharing the same backend filesystem
  * Provided a means to resolve GFID split-brain using
    the gluster CLI
  * Introduction of new api glfs_fd_set_lkowner() to set lock owner
- Remove glusterfs-date.diff (no longer applies)</changelog>
  <changelog author="jengelh@inai.de" date="1513252800">- Add 0001-build-restore-ability-to-control-verbosity-settings.patch
- Replace xdr_sizeof.c with an empty file</changelog>
  <changelog author="jengelh@inai.de" date="1525348800">- Update to new upstream release 4.0.2
  * GlusterD2 (GD2) is a new management daemon for Gluster-4.0,
    glustercli is the command-line interface for it.
    It is a preview release. GD2 is not backwards compatible with
    the older GlusterD. Heterogeneous clusters running both GD2
    and GlusterD are not possible.
  * Not all commands from GlusterD have been implemented for GD2.
  * GD2 does not (yet) work well in 2-node clusters.
  * Self Heal feature integrated for the new Volumes created
    using Glusterd2.</changelog>
  <changelog author="seanlew@opensuse.org" date="1547899200">- Update to new upstream version 5.3 (4.0 is EOL)
  * 5.3 brings hundreds of improvements, see complete relnote at
  https://docs.gluster.org/en/latest/release-notes/5.0/
  * Fixed a number of bugs:
    CVE-2018-1088, CVE-2018-1112 [boo#1090084],
    CVE-2018-10904 [boo#1107018], CVE-2018-10907 [boo#1107019],
    CVE-2018-10911 [boo#1107020], CVE-2018-10913 [boo#1107021],
    CVE-2018-10914 [boo#1107022], CVE-2018-10923 [boo#1107023],
    CVE-2018-10924 [boo#1107024], CVE-2018-10926 [boo#1107025],
    CVE-2018-10927 [boo#1107026], CVE-2018-10928 [boo#1107027],
    CVE-2018-10928 [boo#1107027], CVE-2018-10929 [boo#1107028],
    CVE-2018-10930 [boo#1107029], boo#1105776 .
- Remove patches no longer needed in 5.x:
  * 0001-build-restore-ability-to-control-verbosity-settings.patch
  * glusterfs-tirpc.diff</changelog>
  <changelog author="seanlew@opensuse.org" date="1551528000">- Update to new upstream version 5.4
  * FUSE Client memory leak fixed (#1623107)
  * fail to sync non-ascii utf8 file and dir names (#1648642)
  * Tracker bug for all leases related issues (#1651323)
  * gluster-blockd segfaults because of a null-deref (#1659563)
  * Memory leak: dict_t leak in rda_opendir (#1659676)
  * dht_revalidate may not heal attrs on the brick root (#1660736)
  * Fix tests/bugs/shard/zero-flag.t (#1660932)
  * NL cache: fix typos (#1662200)</changelog>
  <changelog author="seanlew@opensuse.org" date="1552824000">- Update to new upstream version 5.5
  * No changelog yet available in release notes</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Disable LTO (boo#1133088).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Move definition of _lto_cflags into %build.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1576238400">- Update to release 7.0
  * Latency based read child to improve read workload latency in
    a cluster, especially in a cloud setup. Also provides a load
    balancing with the outstanding pending request.
  * Thin-arbiter integration with GD1.
  * If a client older than glusterfs-4.x (i.e. 3.x clients)
    accesses a volume which has the `fips-mode-rchecksum` volume
    option enabled, it can cause erroneous checksum computation/
    unwanted behaviour during afr self-heal.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1577361600">- Fix the name of the Python bindings subpackage
- Properly mark Python bindings subpackage as noarch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1578571200">- Update to release 7.1
  * Fix rebalance causing IO Error - File descriptor in bad state
  * Fix geo-replication sessions going faulty
  * Fix memory leak in glusterfsd process
  * Fix GlusterFS brick process crash
- Add nocommon.patch [boo#1160392]</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1591272000">- Fixes for %_libexecdir changing to /usr/libexec</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1619697600">- Update to release 9.1
  * Implemented seek file operation for open-behind
  * Added io_uring support for Gluster
  * Added Support for 5K volumes
  * Enabled granular-entry-heal by default
  * Added support for monitoring the epoll/rpc layer
  * Improve rebalance of sparse files
- Drop nocommon.patch (merged)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632830400">- Update to release 9.3
  * New reset-brick command
  * Ability to get node level status of a cluster
  * Multi-threaded self-heal for Disperse volumes
  * Lock revocation feature
  * On-demand scrubbing for bitrot detection
  * Real time Cluster notifications using Events APIs
- Move mount helper to /usr/sbin [boo#1191062]</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1657800000">- add explicit Requires for the dependencies, so we make sure
  the dependencies are installed in the same version</changelog>
</package>
<package pkgid="4af20de1a4d503606430daabbc0ff42fd53018e5cc37a60a61350f274c3c36b4" name="glusterfs" arch="src">
  <version epoch="0" ver="9.3" rel="bp154.2.3.1"/>
  <changelog author="scorot@free.fr" date="1445947200">- Update to version 3.6.6
  * No ChangeLog available</changelog>
  <changelog author="vcizek@suse.com" date="1503489600">- Update to version 3.8.15
  * fixes build with OpenSSL 1.1 (bsc#1055466)
  * Mandatory lock support for Multiprotocol environment
  * Gluster/NFS disabled by default
  * Geo-replication for Sharded Volumes
  * Tiering aware Geo-replication
  * Enhance Quota enable/disable in glusterd
  * Automagic unsplit-brain by [ctime|mtime|size|majority] for AFR
  * Granular Entry self-heal for AFR
  * Tons of bugfixes
  * for more details see the NEWS file
- spec cleanup
- Install License files/docu</changelog>
  <changelog author="vcizek@suse.com" date="1508328000">- Add missing Requires: libacl-devel to the devel subpackage
  * glfs.h #includes &lt;sys/acl.h&gt;</changelog>
  <changelog author="mpluskal@suse.com" date="1509710400">- Explicitly require python2 as python3 is not yet supported</changelog>
  <changelog author="kukuk@suse.de" date="1510574400">- glusterfs-tirpc.diff: fallback to libtirpc if there is no sunrpc
  support in glibc</changelog>
  <changelog author="jengelh@inai.de" date="1512388800">- Update to new release 3.12.3
  * -- Features introduced in 3.10
  * Brick multiplexing
  * Support to display op-version information from clients
  * Support for rebalance time to completion estimation
  * Separation of tier as its own service
  * Statedump support for gfapi based applications
  * Disabled creation of trash directory by default
  * Implemented parallel readdirp with distribute xlator
  * -- Features introduced in 3.12:
  * Ability to mount sub-directories using the Gluster
    FUSE protocol
  * GFID to path conversion is enabled by default
  * Provided an option to set a limit on number of bricks
    multiplexed in a processes
  * Enhanced the option to export statfs data for bricks
    sharing the same backend filesystem
  * Provided a means to resolve GFID split-brain using
    the gluster CLI
  * Introduction of new api glfs_fd_set_lkowner() to set lock owner
- Remove glusterfs-date.diff (no longer applies)</changelog>
  <changelog author="jengelh@inai.de" date="1513252800">- Add 0001-build-restore-ability-to-control-verbosity-settings.patch
- Replace xdr_sizeof.c with an empty file</changelog>
  <changelog author="jengelh@inai.de" date="1525348800">- Update to new upstream release 4.0.2
  * GlusterD2 (GD2) is a new management daemon for Gluster-4.0,
    glustercli is the command-line interface for it.
    It is a preview release. GD2 is not backwards compatible with
    the older GlusterD. Heterogeneous clusters running both GD2
    and GlusterD are not possible.
  * Not all commands from GlusterD have been implemented for GD2.
  * GD2 does not (yet) work well in 2-node clusters.
  * Self Heal feature integrated for the new Volumes created
    using Glusterd2.</changelog>
  <changelog author="seanlew@opensuse.org" date="1547899200">- Update to new upstream version 5.3 (4.0 is EOL)
  * 5.3 brings hundreds of improvements, see complete relnote at
  https://docs.gluster.org/en/latest/release-notes/5.0/
  * Fixed a number of bugs:
    CVE-2018-1088, CVE-2018-1112 [boo#1090084],
    CVE-2018-10904 [boo#1107018], CVE-2018-10907 [boo#1107019],
    CVE-2018-10911 [boo#1107020], CVE-2018-10913 [boo#1107021],
    CVE-2018-10914 [boo#1107022], CVE-2018-10923 [boo#1107023],
    CVE-2018-10924 [boo#1107024], CVE-2018-10926 [boo#1107025],
    CVE-2018-10927 [boo#1107026], CVE-2018-10928 [boo#1107027],
    CVE-2018-10928 [boo#1107027], CVE-2018-10929 [boo#1107028],
    CVE-2018-10930 [boo#1107029], boo#1105776 .
- Remove patches no longer needed in 5.x:
  * 0001-build-restore-ability-to-control-verbosity-settings.patch
  * glusterfs-tirpc.diff</changelog>
  <changelog author="seanlew@opensuse.org" date="1551528000">- Update to new upstream version 5.4
  * FUSE Client memory leak fixed (#1623107)
  * fail to sync non-ascii utf8 file and dir names (#1648642)
  * Tracker bug for all leases related issues (#1651323)
  * gluster-blockd segfaults because of a null-deref (#1659563)
  * Memory leak: dict_t leak in rda_opendir (#1659676)
  * dht_revalidate may not heal attrs on the brick root (#1660736)
  * Fix tests/bugs/shard/zero-flag.t (#1660932)
  * NL cache: fix typos (#1662200)</changelog>
  <changelog author="seanlew@opensuse.org" date="1552824000">- Update to new upstream version 5.5
  * No changelog yet available in release notes</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Disable LTO (boo#1133088).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Move definition of _lto_cflags into %build.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1576238400">- Update to release 7.0
  * Latency based read child to improve read workload latency in
    a cluster, especially in a cloud setup. Also provides a load
    balancing with the outstanding pending request.
  * Thin-arbiter integration with GD1.
  * If a client older than glusterfs-4.x (i.e. 3.x clients)
    accesses a volume which has the `fips-mode-rchecksum` volume
    option enabled, it can cause erroneous checksum computation/
    unwanted behaviour during afr self-heal.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1577361600">- Fix the name of the Python bindings subpackage
- Properly mark Python bindings subpackage as noarch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1578571200">- Update to release 7.1
  * Fix rebalance causing IO Error - File descriptor in bad state
  * Fix geo-replication sessions going faulty
  * Fix memory leak in glusterfsd process
  * Fix GlusterFS brick process crash
- Add nocommon.patch [boo#1160392]</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1591272000">- Fixes for %_libexecdir changing to /usr/libexec</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1619697600">- Update to release 9.1
  * Implemented seek file operation for open-behind
  * Added io_uring support for Gluster
  * Added Support for 5K volumes
  * Enabled granular-entry-heal by default
  * Added support for monitoring the epoll/rpc layer
  * Improve rebalance of sparse files
- Drop nocommon.patch (merged)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632830400">- Update to release 9.3
  * New reset-brick command
  * Ability to get node level status of a cluster
  * Multi-threaded self-heal for Disperse volumes
  * Lock revocation feature
  * On-demand scrubbing for bitrot detection
  * Real time Cluster notifications using Events APIs
- Move mount helper to /usr/sbin [boo#1191062]</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1657800000">- add explicit Requires for the dependencies, so we make sure
  the dependencies are installed in the same version</changelog>
</package>
<package pkgid="e045eb47759072f9f584c77bf9ca244a47ac8373908a98d06632778d2ef29b1c" name="glusterfs" arch="x86_64">
  <version epoch="0" ver="9.3" rel="bp154.2.3.1"/>
  <changelog author="scorot@free.fr" date="1445947200">- Update to version 3.6.6
  * No ChangeLog available</changelog>
  <changelog author="vcizek@suse.com" date="1503489600">- Update to version 3.8.15
  * fixes build with OpenSSL 1.1 (bsc#1055466)
  * Mandatory lock support for Multiprotocol environment
  * Gluster/NFS disabled by default
  * Geo-replication for Sharded Volumes
  * Tiering aware Geo-replication
  * Enhance Quota enable/disable in glusterd
  * Automagic unsplit-brain by [ctime|mtime|size|majority] for AFR
  * Granular Entry self-heal for AFR
  * Tons of bugfixes
  * for more details see the NEWS file
- spec cleanup
- Install License files/docu</changelog>
  <changelog author="vcizek@suse.com" date="1508328000">- Add missing Requires: libacl-devel to the devel subpackage
  * glfs.h #includes &lt;sys/acl.h&gt;</changelog>
  <changelog author="mpluskal@suse.com" date="1509710400">- Explicitly require python2 as python3 is not yet supported</changelog>
  <changelog author="kukuk@suse.de" date="1510574400">- glusterfs-tirpc.diff: fallback to libtirpc if there is no sunrpc
  support in glibc</changelog>
  <changelog author="jengelh@inai.de" date="1512388800">- Update to new release 3.12.3
  * -- Features introduced in 3.10
  * Brick multiplexing
  * Support to display op-version information from clients
  * Support for rebalance time to completion estimation
  * Separation of tier as its own service
  * Statedump support for gfapi based applications
  * Disabled creation of trash directory by default
  * Implemented parallel readdirp with distribute xlator
  * -- Features introduced in 3.12:
  * Ability to mount sub-directories using the Gluster
    FUSE protocol
  * GFID to path conversion is enabled by default
  * Provided an option to set a limit on number of bricks
    multiplexed in a processes
  * Enhanced the option to export statfs data for bricks
    sharing the same backend filesystem
  * Provided a means to resolve GFID split-brain using
    the gluster CLI
  * Introduction of new api glfs_fd_set_lkowner() to set lock owner
- Remove glusterfs-date.diff (no longer applies)</changelog>
  <changelog author="jengelh@inai.de" date="1513252800">- Add 0001-build-restore-ability-to-control-verbosity-settings.patch
- Replace xdr_sizeof.c with an empty file</changelog>
  <changelog author="jengelh@inai.de" date="1525348800">- Update to new upstream release 4.0.2
  * GlusterD2 (GD2) is a new management daemon for Gluster-4.0,
    glustercli is the command-line interface for it.
    It is a preview release. GD2 is not backwards compatible with
    the older GlusterD. Heterogeneous clusters running both GD2
    and GlusterD are not possible.
  * Not all commands from GlusterD have been implemented for GD2.
  * GD2 does not (yet) work well in 2-node clusters.
  * Self Heal feature integrated for the new Volumes created
    using Glusterd2.</changelog>
  <changelog author="seanlew@opensuse.org" date="1547899200">- Update to new upstream version 5.3 (4.0 is EOL)
  * 5.3 brings hundreds of improvements, see complete relnote at
  https://docs.gluster.org/en/latest/release-notes/5.0/
  * Fixed a number of bugs:
    CVE-2018-1088, CVE-2018-1112 [boo#1090084],
    CVE-2018-10904 [boo#1107018], CVE-2018-10907 [boo#1107019],
    CVE-2018-10911 [boo#1107020], CVE-2018-10913 [boo#1107021],
    CVE-2018-10914 [boo#1107022], CVE-2018-10923 [boo#1107023],
    CVE-2018-10924 [boo#1107024], CVE-2018-10926 [boo#1107025],
    CVE-2018-10927 [boo#1107026], CVE-2018-10928 [boo#1107027],
    CVE-2018-10928 [boo#1107027], CVE-2018-10929 [boo#1107028],
    CVE-2018-10930 [boo#1107029], boo#1105776 .
- Remove patches no longer needed in 5.x:
  * 0001-build-restore-ability-to-control-verbosity-settings.patch
  * glusterfs-tirpc.diff</changelog>
  <changelog author="seanlew@opensuse.org" date="1551528000">- Update to new upstream version 5.4
  * FUSE Client memory leak fixed (#1623107)
  * fail to sync non-ascii utf8 file and dir names (#1648642)
  * Tracker bug for all leases related issues (#1651323)
  * gluster-blockd segfaults because of a null-deref (#1659563)
  * Memory leak: dict_t leak in rda_opendir (#1659676)
  * dht_revalidate may not heal attrs on the brick root (#1660736)
  * Fix tests/bugs/shard/zero-flag.t (#1660932)
  * NL cache: fix typos (#1662200)</changelog>
  <changelog author="seanlew@opensuse.org" date="1552824000">- Update to new upstream version 5.5
  * No changelog yet available in release notes</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Disable LTO (boo#1133088).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Move definition of _lto_cflags into %build.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1576238400">- Update to release 7.0
  * Latency based read child to improve read workload latency in
    a cluster, especially in a cloud setup. Also provides a load
    balancing with the outstanding pending request.
  * Thin-arbiter integration with GD1.
  * If a client older than glusterfs-4.x (i.e. 3.x clients)
    accesses a volume which has the `fips-mode-rchecksum` volume
    option enabled, it can cause erroneous checksum computation/
    unwanted behaviour during afr self-heal.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1577361600">- Fix the name of the Python bindings subpackage
- Properly mark Python bindings subpackage as noarch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1578571200">- Update to release 7.1
  * Fix rebalance causing IO Error - File descriptor in bad state
  * Fix geo-replication sessions going faulty
  * Fix memory leak in glusterfsd process
  * Fix GlusterFS brick process crash
- Add nocommon.patch [boo#1160392]</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1591272000">- Fixes for %_libexecdir changing to /usr/libexec</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1619697600">- Update to release 9.1
  * Implemented seek file operation for open-behind
  * Added io_uring support for Gluster
  * Added Support for 5K volumes
  * Enabled granular-entry-heal by default
  * Added support for monitoring the epoll/rpc layer
  * Improve rebalance of sparse files
- Drop nocommon.patch (merged)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632830400">- Update to release 9.3
  * New reset-brick command
  * Ability to get node level status of a cluster
  * Multi-threaded self-heal for Disperse volumes
  * Lock revocation feature
  * On-demand scrubbing for bitrot detection
  * Real time Cluster notifications using Events APIs
- Move mount helper to /usr/sbin [boo#1191062]</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1657800000">- add explicit Requires for the dependencies, so we make sure
  the dependencies are installed in the same version</changelog>
</package>
<package pkgid="df215f117bbe7fcaaa594d9b387c1b6b71ca38eea5be373d6d27172c6d837f21" name="glusterfs-devel" arch="aarch64">
  <version epoch="0" ver="9.3" rel="bp154.2.3.1"/>
  <changelog author="scorot@free.fr" date="1445947200">- Update to version 3.6.6
  * No ChangeLog available</changelog>
  <changelog author="vcizek@suse.com" date="1503489600">- Update to version 3.8.15
  * fixes build with OpenSSL 1.1 (bsc#1055466)
  * Mandatory lock support for Multiprotocol environment
  * Gluster/NFS disabled by default
  * Geo-replication for Sharded Volumes
  * Tiering aware Geo-replication
  * Enhance Quota enable/disable in glusterd
  * Automagic unsplit-brain by [ctime|mtime|size|majority] for AFR
  * Granular Entry self-heal for AFR
  * Tons of bugfixes
  * for more details see the NEWS file
- spec cleanup
- Install License files/docu</changelog>
  <changelog author="vcizek@suse.com" date="1508328000">- Add missing Requires: libacl-devel to the devel subpackage
  * glfs.h #includes &lt;sys/acl.h&gt;</changelog>
  <changelog author="mpluskal@suse.com" date="1509710400">- Explicitly require python2 as python3 is not yet supported</changelog>
  <changelog author="kukuk@suse.de" date="1510574400">- glusterfs-tirpc.diff: fallback to libtirpc if there is no sunrpc
  support in glibc</changelog>
  <changelog author="jengelh@inai.de" date="1512388800">- Update to new release 3.12.3
  * -- Features introduced in 3.10
  * Brick multiplexing
  * Support to display op-version information from clients
  * Support for rebalance time to completion estimation
  * Separation of tier as its own service
  * Statedump support for gfapi based applications
  * Disabled creation of trash directory by default
  * Implemented parallel readdirp with distribute xlator
  * -- Features introduced in 3.12:
  * Ability to mount sub-directories using the Gluster
    FUSE protocol
  * GFID to path conversion is enabled by default
  * Provided an option to set a limit on number of bricks
    multiplexed in a processes
  * Enhanced the option to export statfs data for bricks
    sharing the same backend filesystem
  * Provided a means to resolve GFID split-brain using
    the gluster CLI
  * Introduction of new api glfs_fd_set_lkowner() to set lock owner
- Remove glusterfs-date.diff (no longer applies)</changelog>
  <changelog author="jengelh@inai.de" date="1513252800">- Add 0001-build-restore-ability-to-control-verbosity-settings.patch
- Replace xdr_sizeof.c with an empty file</changelog>
  <changelog author="jengelh@inai.de" date="1525348800">- Update to new upstream release 4.0.2
  * GlusterD2 (GD2) is a new management daemon for Gluster-4.0,
    glustercli is the command-line interface for it.
    It is a preview release. GD2 is not backwards compatible with
    the older GlusterD. Heterogeneous clusters running both GD2
    and GlusterD are not possible.
  * Not all commands from GlusterD have been implemented for GD2.
  * GD2 does not (yet) work well in 2-node clusters.
  * Self Heal feature integrated for the new Volumes created
    using Glusterd2.</changelog>
  <changelog author="seanlew@opensuse.org" date="1547899200">- Update to new upstream version 5.3 (4.0 is EOL)
  * 5.3 brings hundreds of improvements, see complete relnote at
  https://docs.gluster.org/en/latest/release-notes/5.0/
  * Fixed a number of bugs:
    CVE-2018-1088, CVE-2018-1112 [boo#1090084],
    CVE-2018-10904 [boo#1107018], CVE-2018-10907 [boo#1107019],
    CVE-2018-10911 [boo#1107020], CVE-2018-10913 [boo#1107021],
    CVE-2018-10914 [boo#1107022], CVE-2018-10923 [boo#1107023],
    CVE-2018-10924 [boo#1107024], CVE-2018-10926 [boo#1107025],
    CVE-2018-10927 [boo#1107026], CVE-2018-10928 [boo#1107027],
    CVE-2018-10928 [boo#1107027], CVE-2018-10929 [boo#1107028],
    CVE-2018-10930 [boo#1107029], boo#1105776 .
- Remove patches no longer needed in 5.x:
  * 0001-build-restore-ability-to-control-verbosity-settings.patch
  * glusterfs-tirpc.diff</changelog>
  <changelog author="seanlew@opensuse.org" date="1551528000">- Update to new upstream version 5.4
  * FUSE Client memory leak fixed (#1623107)
  * fail to sync non-ascii utf8 file and dir names (#1648642)
  * Tracker bug for all leases related issues (#1651323)
  * gluster-blockd segfaults because of a null-deref (#1659563)
  * Memory leak: dict_t leak in rda_opendir (#1659676)
  * dht_revalidate may not heal attrs on the brick root (#1660736)
  * Fix tests/bugs/shard/zero-flag.t (#1660932)
  * NL cache: fix typos (#1662200)</changelog>
  <changelog author="seanlew@opensuse.org" date="1552824000">- Update to new upstream version 5.5
  * No changelog yet available in release notes</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Disable LTO (boo#1133088).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Move definition of _lto_cflags into %build.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1576238400">- Update to release 7.0
  * Latency based read child to improve read workload latency in
    a cluster, especially in a cloud setup. Also provides a load
    balancing with the outstanding pending request.
  * Thin-arbiter integration with GD1.
  * If a client older than glusterfs-4.x (i.e. 3.x clients)
    accesses a volume which has the `fips-mode-rchecksum` volume
    option enabled, it can cause erroneous checksum computation/
    unwanted behaviour during afr self-heal.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1577361600">- Fix the name of the Python bindings subpackage
- Properly mark Python bindings subpackage as noarch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1578571200">- Update to release 7.1
  * Fix rebalance causing IO Error - File descriptor in bad state
  * Fix geo-replication sessions going faulty
  * Fix memory leak in glusterfsd process
  * Fix GlusterFS brick process crash
- Add nocommon.patch [boo#1160392]</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1591272000">- Fixes for %_libexecdir changing to /usr/libexec</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1619697600">- Update to release 9.1
  * Implemented seek file operation for open-behind
  * Added io_uring support for Gluster
  * Added Support for 5K volumes
  * Enabled granular-entry-heal by default
  * Added support for monitoring the epoll/rpc layer
  * Improve rebalance of sparse files
- Drop nocommon.patch (merged)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632830400">- Update to release 9.3
  * New reset-brick command
  * Ability to get node level status of a cluster
  * Multi-threaded self-heal for Disperse volumes
  * Lock revocation feature
  * On-demand scrubbing for bitrot detection
  * Real time Cluster notifications using Events APIs
- Move mount helper to /usr/sbin [boo#1191062]</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1657800000">- add explicit Requires for the dependencies, so we make sure
  the dependencies are installed in the same version</changelog>
</package>
<package pkgid="eab662ec2da125e109f2638a33314331ae24724b93f164169097070d93222b36" name="glusterfs-devel" arch="i586">
  <version epoch="0" ver="9.3" rel="bp154.2.3.1"/>
  <changelog author="scorot@free.fr" date="1445947200">- Update to version 3.6.6
  * No ChangeLog available</changelog>
  <changelog author="vcizek@suse.com" date="1503489600">- Update to version 3.8.15
  * fixes build with OpenSSL 1.1 (bsc#1055466)
  * Mandatory lock support for Multiprotocol environment
  * Gluster/NFS disabled by default
  * Geo-replication for Sharded Volumes
  * Tiering aware Geo-replication
  * Enhance Quota enable/disable in glusterd
  * Automagic unsplit-brain by [ctime|mtime|size|majority] for AFR
  * Granular Entry self-heal for AFR
  * Tons of bugfixes
  * for more details see the NEWS file
- spec cleanup
- Install License files/docu</changelog>
  <changelog author="vcizek@suse.com" date="1508328000">- Add missing Requires: libacl-devel to the devel subpackage
  * glfs.h #includes &lt;sys/acl.h&gt;</changelog>
  <changelog author="mpluskal@suse.com" date="1509710400">- Explicitly require python2 as python3 is not yet supported</changelog>
  <changelog author="kukuk@suse.de" date="1510574400">- glusterfs-tirpc.diff: fallback to libtirpc if there is no sunrpc
  support in glibc</changelog>
  <changelog author="jengelh@inai.de" date="1512388800">- Update to new release 3.12.3
  * -- Features introduced in 3.10
  * Brick multiplexing
  * Support to display op-version information from clients
  * Support for rebalance time to completion estimation
  * Separation of tier as its own service
  * Statedump support for gfapi based applications
  * Disabled creation of trash directory by default
  * Implemented parallel readdirp with distribute xlator
  * -- Features introduced in 3.12:
  * Ability to mount sub-directories using the Gluster
    FUSE protocol
  * GFID to path conversion is enabled by default
  * Provided an option to set a limit on number of bricks
    multiplexed in a processes
  * Enhanced the option to export statfs data for bricks
    sharing the same backend filesystem
  * Provided a means to resolve GFID split-brain using
    the gluster CLI
  * Introduction of new api glfs_fd_set_lkowner() to set lock owner
- Remove glusterfs-date.diff (no longer applies)</changelog>
  <changelog author="jengelh@inai.de" date="1513252800">- Add 0001-build-restore-ability-to-control-verbosity-settings.patch
- Replace xdr_sizeof.c with an empty file</changelog>
  <changelog author="jengelh@inai.de" date="1525348800">- Update to new upstream release 4.0.2
  * GlusterD2 (GD2) is a new management daemon for Gluster-4.0,
    glustercli is the command-line interface for it.
    It is a preview release. GD2 is not backwards compatible with
    the older GlusterD. Heterogeneous clusters running both GD2
    and GlusterD are not possible.
  * Not all commands from GlusterD have been implemented for GD2.
  * GD2 does not (yet) work well in 2-node clusters.
  * Self Heal feature integrated for the new Volumes created
    using Glusterd2.</changelog>
  <changelog author="seanlew@opensuse.org" date="1547899200">- Update to new upstream version 5.3 (4.0 is EOL)
  * 5.3 brings hundreds of improvements, see complete relnote at
  https://docs.gluster.org/en/latest/release-notes/5.0/
  * Fixed a number of bugs:
    CVE-2018-1088, CVE-2018-1112 [boo#1090084],
    CVE-2018-10904 [boo#1107018], CVE-2018-10907 [boo#1107019],
    CVE-2018-10911 [boo#1107020], CVE-2018-10913 [boo#1107021],
    CVE-2018-10914 [boo#1107022], CVE-2018-10923 [boo#1107023],
    CVE-2018-10924 [boo#1107024], CVE-2018-10926 [boo#1107025],
    CVE-2018-10927 [boo#1107026], CVE-2018-10928 [boo#1107027],
    CVE-2018-10928 [boo#1107027], CVE-2018-10929 [boo#1107028],
    CVE-2018-10930 [boo#1107029], boo#1105776 .
- Remove patches no longer needed in 5.x:
  * 0001-build-restore-ability-to-control-verbosity-settings.patch
  * glusterfs-tirpc.diff</changelog>
  <changelog author="seanlew@opensuse.org" date="1551528000">- Update to new upstream version 5.4
  * FUSE Client memory leak fixed (#1623107)
  * fail to sync non-ascii utf8 file and dir names (#1648642)
  * Tracker bug for all leases related issues (#1651323)
  * gluster-blockd segfaults because of a null-deref (#1659563)
  * Memory leak: dict_t leak in rda_opendir (#1659676)
  * dht_revalidate may not heal attrs on the brick root (#1660736)
  * Fix tests/bugs/shard/zero-flag.t (#1660932)
  * NL cache: fix typos (#1662200)</changelog>
  <changelog author="seanlew@opensuse.org" date="1552824000">- Update to new upstream version 5.5
  * No changelog yet available in release notes</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Disable LTO (boo#1133088).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Move definition of _lto_cflags into %build.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1576238400">- Update to release 7.0
  * Latency based read child to improve read workload latency in
    a cluster, especially in a cloud setup. Also provides a load
    balancing with the outstanding pending request.
  * Thin-arbiter integration with GD1.
  * If a client older than glusterfs-4.x (i.e. 3.x clients)
    accesses a volume which has the `fips-mode-rchecksum` volume
    option enabled, it can cause erroneous checksum computation/
    unwanted behaviour during afr self-heal.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1577361600">- Fix the name of the Python bindings subpackage
- Properly mark Python bindings subpackage as noarch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1578571200">- Update to release 7.1
  * Fix rebalance causing IO Error - File descriptor in bad state
  * Fix geo-replication sessions going faulty
  * Fix memory leak in glusterfsd process
  * Fix GlusterFS brick process crash
- Add nocommon.patch [boo#1160392]</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1591272000">- Fixes for %_libexecdir changing to /usr/libexec</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1619697600">- Update to release 9.1
  * Implemented seek file operation for open-behind
  * Added io_uring support for Gluster
  * Added Support for 5K volumes
  * Enabled granular-entry-heal by default
  * Added support for monitoring the epoll/rpc layer
  * Improve rebalance of sparse files
- Drop nocommon.patch (merged)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632830400">- Update to release 9.3
  * New reset-brick command
  * Ability to get node level status of a cluster
  * Multi-threaded self-heal for Disperse volumes
  * Lock revocation feature
  * On-demand scrubbing for bitrot detection
  * Real time Cluster notifications using Events APIs
- Move mount helper to /usr/sbin [boo#1191062]</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1657800000">- add explicit Requires for the dependencies, so we make sure
  the dependencies are installed in the same version</changelog>
</package>
<package pkgid="77dcd7c28659786826845c37cd167bdc4be93036c3c02ad04758e2d9edaef4ce" name="glusterfs-devel" arch="ppc64le">
  <version epoch="0" ver="9.3" rel="bp154.2.3.1"/>
  <changelog author="scorot@free.fr" date="1445947200">- Update to version 3.6.6
  * No ChangeLog available</changelog>
  <changelog author="vcizek@suse.com" date="1503489600">- Update to version 3.8.15
  * fixes build with OpenSSL 1.1 (bsc#1055466)
  * Mandatory lock support for Multiprotocol environment
  * Gluster/NFS disabled by default
  * Geo-replication for Sharded Volumes
  * Tiering aware Geo-replication
  * Enhance Quota enable/disable in glusterd
  * Automagic unsplit-brain by [ctime|mtime|size|majority] for AFR
  * Granular Entry self-heal for AFR
  * Tons of bugfixes
  * for more details see the NEWS file
- spec cleanup
- Install License files/docu</changelog>
  <changelog author="vcizek@suse.com" date="1508328000">- Add missing Requires: libacl-devel to the devel subpackage
  * glfs.h #includes &lt;sys/acl.h&gt;</changelog>
  <changelog author="mpluskal@suse.com" date="1509710400">- Explicitly require python2 as python3 is not yet supported</changelog>
  <changelog author="kukuk@suse.de" date="1510574400">- glusterfs-tirpc.diff: fallback to libtirpc if there is no sunrpc
  support in glibc</changelog>
  <changelog author="jengelh@inai.de" date="1512388800">- Update to new release 3.12.3
  * -- Features introduced in 3.10
  * Brick multiplexing
  * Support to display op-version information from clients
  * Support for rebalance time to completion estimation
  * Separation of tier as its own service
  * Statedump support for gfapi based applications
  * Disabled creation of trash directory by default
  * Implemented parallel readdirp with distribute xlator
  * -- Features introduced in 3.12:
  * Ability to mount sub-directories using the Gluster
    FUSE protocol
  * GFID to path conversion is enabled by default
  * Provided an option to set a limit on number of bricks
    multiplexed in a processes
  * Enhanced the option to export statfs data for bricks
    sharing the same backend filesystem
  * Provided a means to resolve GFID split-brain using
    the gluster CLI
  * Introduction of new api glfs_fd_set_lkowner() to set lock owner
- Remove glusterfs-date.diff (no longer applies)</changelog>
  <changelog author="jengelh@inai.de" date="1513252800">- Add 0001-build-restore-ability-to-control-verbosity-settings.patch
- Replace xdr_sizeof.c with an empty file</changelog>
  <changelog author="jengelh@inai.de" date="1525348800">- Update to new upstream release 4.0.2
  * GlusterD2 (GD2) is a new management daemon for Gluster-4.0,
    glustercli is the command-line interface for it.
    It is a preview release. GD2 is not backwards compatible with
    the older GlusterD. Heterogeneous clusters running both GD2
    and GlusterD are not possible.
  * Not all commands from GlusterD have been implemented for GD2.
  * GD2 does not (yet) work well in 2-node clusters.
  * Self Heal feature integrated for the new Volumes created
    using Glusterd2.</changelog>
  <changelog author="seanlew@opensuse.org" date="1547899200">- Update to new upstream version 5.3 (4.0 is EOL)
  * 5.3 brings hundreds of improvements, see complete relnote at
  https://docs.gluster.org/en/latest/release-notes/5.0/
  * Fixed a number of bugs:
    CVE-2018-1088, CVE-2018-1112 [boo#1090084],
    CVE-2018-10904 [boo#1107018], CVE-2018-10907 [boo#1107019],
    CVE-2018-10911 [boo#1107020], CVE-2018-10913 [boo#1107021],
    CVE-2018-10914 [boo#1107022], CVE-2018-10923 [boo#1107023],
    CVE-2018-10924 [boo#1107024], CVE-2018-10926 [boo#1107025],
    CVE-2018-10927 [boo#1107026], CVE-2018-10928 [boo#1107027],
    CVE-2018-10928 [boo#1107027], CVE-2018-10929 [boo#1107028],
    CVE-2018-10930 [boo#1107029], boo#1105776 .
- Remove patches no longer needed in 5.x:
  * 0001-build-restore-ability-to-control-verbosity-settings.patch
  * glusterfs-tirpc.diff</changelog>
  <changelog author="seanlew@opensuse.org" date="1551528000">- Update to new upstream version 5.4
  * FUSE Client memory leak fixed (#1623107)
  * fail to sync non-ascii utf8 file and dir names (#1648642)
  * Tracker bug for all leases related issues (#1651323)
  * gluster-blockd segfaults because of a null-deref (#1659563)
  * Memory leak: dict_t leak in rda_opendir (#1659676)
  * dht_revalidate may not heal attrs on the brick root (#1660736)
  * Fix tests/bugs/shard/zero-flag.t (#1660932)
  * NL cache: fix typos (#1662200)</changelog>
  <changelog author="seanlew@opensuse.org" date="1552824000">- Update to new upstream version 5.5
  * No changelog yet available in release notes</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Disable LTO (boo#1133088).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Move definition of _lto_cflags into %build.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1576238400">- Update to release 7.0
  * Latency based read child to improve read workload latency in
    a cluster, especially in a cloud setup. Also provides a load
    balancing with the outstanding pending request.
  * Thin-arbiter integration with GD1.
  * If a client older than glusterfs-4.x (i.e. 3.x clients)
    accesses a volume which has the `fips-mode-rchecksum` volume
    option enabled, it can cause erroneous checksum computation/
    unwanted behaviour during afr self-heal.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1577361600">- Fix the name of the Python bindings subpackage
- Properly mark Python bindings subpackage as noarch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1578571200">- Update to release 7.1
  * Fix rebalance causing IO Error - File descriptor in bad state
  * Fix geo-replication sessions going faulty
  * Fix memory leak in glusterfsd process
  * Fix GlusterFS brick process crash
- Add nocommon.patch [boo#1160392]</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1591272000">- Fixes for %_libexecdir changing to /usr/libexec</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1619697600">- Update to release 9.1
  * Implemented seek file operation for open-behind
  * Added io_uring support for Gluster
  * Added Support for 5K volumes
  * Enabled granular-entry-heal by default
  * Added support for monitoring the epoll/rpc layer
  * Improve rebalance of sparse files
- Drop nocommon.patch (merged)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632830400">- Update to release 9.3
  * New reset-brick command
  * Ability to get node level status of a cluster
  * Multi-threaded self-heal for Disperse volumes
  * Lock revocation feature
  * On-demand scrubbing for bitrot detection
  * Real time Cluster notifications using Events APIs
- Move mount helper to /usr/sbin [boo#1191062]</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1657800000">- add explicit Requires for the dependencies, so we make sure
  the dependencies are installed in the same version</changelog>
</package>
<package pkgid="aba7ac577839ed1462448faa2ec4196ea9778f90fff07068e0916f9fc92e8317" name="glusterfs-devel" arch="s390x">
  <version epoch="0" ver="9.3" rel="bp154.2.3.1"/>
  <changelog author="scorot@free.fr" date="1445947200">- Update to version 3.6.6
  * No ChangeLog available</changelog>
  <changelog author="vcizek@suse.com" date="1503489600">- Update to version 3.8.15
  * fixes build with OpenSSL 1.1 (bsc#1055466)
  * Mandatory lock support for Multiprotocol environment
  * Gluster/NFS disabled by default
  * Geo-replication for Sharded Volumes
  * Tiering aware Geo-replication
  * Enhance Quota enable/disable in glusterd
  * Automagic unsplit-brain by [ctime|mtime|size|majority] for AFR
  * Granular Entry self-heal for AFR
  * Tons of bugfixes
  * for more details see the NEWS file
- spec cleanup
- Install License files/docu</changelog>
  <changelog author="vcizek@suse.com" date="1508328000">- Add missing Requires: libacl-devel to the devel subpackage
  * glfs.h #includes &lt;sys/acl.h&gt;</changelog>
  <changelog author="mpluskal@suse.com" date="1509710400">- Explicitly require python2 as python3 is not yet supported</changelog>
  <changelog author="kukuk@suse.de" date="1510574400">- glusterfs-tirpc.diff: fallback to libtirpc if there is no sunrpc
  support in glibc</changelog>
  <changelog author="jengelh@inai.de" date="1512388800">- Update to new release 3.12.3
  * -- Features introduced in 3.10
  * Brick multiplexing
  * Support to display op-version information from clients
  * Support for rebalance time to completion estimation
  * Separation of tier as its own service
  * Statedump support for gfapi based applications
  * Disabled creation of trash directory by default
  * Implemented parallel readdirp with distribute xlator
  * -- Features introduced in 3.12:
  * Ability to mount sub-directories using the Gluster
    FUSE protocol
  * GFID to path conversion is enabled by default
  * Provided an option to set a limit on number of bricks
    multiplexed in a processes
  * Enhanced the option to export statfs data for bricks
    sharing the same backend filesystem
  * Provided a means to resolve GFID split-brain using
    the gluster CLI
  * Introduction of new api glfs_fd_set_lkowner() to set lock owner
- Remove glusterfs-date.diff (no longer applies)</changelog>
  <changelog author="jengelh@inai.de" date="1513252800">- Add 0001-build-restore-ability-to-control-verbosity-settings.patch
- Replace xdr_sizeof.c with an empty file</changelog>
  <changelog author="jengelh@inai.de" date="1525348800">- Update to new upstream release 4.0.2
  * GlusterD2 (GD2) is a new management daemon for Gluster-4.0,
    glustercli is the command-line interface for it.
    It is a preview release. GD2 is not backwards compatible with
    the older GlusterD. Heterogeneous clusters running both GD2
    and GlusterD are not possible.
  * Not all commands from GlusterD have been implemented for GD2.
  * GD2 does not (yet) work well in 2-node clusters.
  * Self Heal feature integrated for the new Volumes created
    using Glusterd2.</changelog>
  <changelog author="seanlew@opensuse.org" date="1547899200">- Update to new upstream version 5.3 (4.0 is EOL)
  * 5.3 brings hundreds of improvements, see complete relnote at
  https://docs.gluster.org/en/latest/release-notes/5.0/
  * Fixed a number of bugs:
    CVE-2018-1088, CVE-2018-1112 [boo#1090084],
    CVE-2018-10904 [boo#1107018], CVE-2018-10907 [boo#1107019],
    CVE-2018-10911 [boo#1107020], CVE-2018-10913 [boo#1107021],
    CVE-2018-10914 [boo#1107022], CVE-2018-10923 [boo#1107023],
    CVE-2018-10924 [boo#1107024], CVE-2018-10926 [boo#1107025],
    CVE-2018-10927 [boo#1107026], CVE-2018-10928 [boo#1107027],
    CVE-2018-10928 [boo#1107027], CVE-2018-10929 [boo#1107028],
    CVE-2018-10930 [boo#1107029], boo#1105776 .
- Remove patches no longer needed in 5.x:
  * 0001-build-restore-ability-to-control-verbosity-settings.patch
  * glusterfs-tirpc.diff</changelog>
  <changelog author="seanlew@opensuse.org" date="1551528000">- Update to new upstream version 5.4
  * FUSE Client memory leak fixed (#1623107)
  * fail to sync non-ascii utf8 file and dir names (#1648642)
  * Tracker bug for all leases related issues (#1651323)
  * gluster-blockd segfaults because of a null-deref (#1659563)
  * Memory leak: dict_t leak in rda_opendir (#1659676)
  * dht_revalidate may not heal attrs on the brick root (#1660736)
  * Fix tests/bugs/shard/zero-flag.t (#1660932)
  * NL cache: fix typos (#1662200)</changelog>
  <changelog author="seanlew@opensuse.org" date="1552824000">- Update to new upstream version 5.5
  * No changelog yet available in release notes</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Disable LTO (boo#1133088).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Move definition of _lto_cflags into %build.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1576238400">- Update to release 7.0
  * Latency based read child to improve read workload latency in
    a cluster, especially in a cloud setup. Also provides a load
    balancing with the outstanding pending request.
  * Thin-arbiter integration with GD1.
  * If a client older than glusterfs-4.x (i.e. 3.x clients)
    accesses a volume which has the `fips-mode-rchecksum` volume
    option enabled, it can cause erroneous checksum computation/
    unwanted behaviour during afr self-heal.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1577361600">- Fix the name of the Python bindings subpackage
- Properly mark Python bindings subpackage as noarch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1578571200">- Update to release 7.1
  * Fix rebalance causing IO Error - File descriptor in bad state
  * Fix geo-replication sessions going faulty
  * Fix memory leak in glusterfsd process
  * Fix GlusterFS brick process crash
- Add nocommon.patch [boo#1160392]</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1591272000">- Fixes for %_libexecdir changing to /usr/libexec</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1619697600">- Update to release 9.1
  * Implemented seek file operation for open-behind
  * Added io_uring support for Gluster
  * Added Support for 5K volumes
  * Enabled granular-entry-heal by default
  * Added support for monitoring the epoll/rpc layer
  * Improve rebalance of sparse files
- Drop nocommon.patch (merged)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632830400">- Update to release 9.3
  * New reset-brick command
  * Ability to get node level status of a cluster
  * Multi-threaded self-heal for Disperse volumes
  * Lock revocation feature
  * On-demand scrubbing for bitrot detection
  * Real time Cluster notifications using Events APIs
- Move mount helper to /usr/sbin [boo#1191062]</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1657800000">- add explicit Requires for the dependencies, so we make sure
  the dependencies are installed in the same version</changelog>
</package>
<package pkgid="48dcdad0c3703aebb26612de3878324107ce388cbac4fcff7a1e492f04e1fc62" name="glusterfs-devel" arch="x86_64">
  <version epoch="0" ver="9.3" rel="bp154.2.3.1"/>
  <changelog author="scorot@free.fr" date="1445947200">- Update to version 3.6.6
  * No ChangeLog available</changelog>
  <changelog author="vcizek@suse.com" date="1503489600">- Update to version 3.8.15
  * fixes build with OpenSSL 1.1 (bsc#1055466)
  * Mandatory lock support for Multiprotocol environment
  * Gluster/NFS disabled by default
  * Geo-replication for Sharded Volumes
  * Tiering aware Geo-replication
  * Enhance Quota enable/disable in glusterd
  * Automagic unsplit-brain by [ctime|mtime|size|majority] for AFR
  * Granular Entry self-heal for AFR
  * Tons of bugfixes
  * for more details see the NEWS file
- spec cleanup
- Install License files/docu</changelog>
  <changelog author="vcizek@suse.com" date="1508328000">- Add missing Requires: libacl-devel to the devel subpackage
  * glfs.h #includes &lt;sys/acl.h&gt;</changelog>
  <changelog author="mpluskal@suse.com" date="1509710400">- Explicitly require python2 as python3 is not yet supported</changelog>
  <changelog author="kukuk@suse.de" date="1510574400">- glusterfs-tirpc.diff: fallback to libtirpc if there is no sunrpc
  support in glibc</changelog>
  <changelog author="jengelh@inai.de" date="1512388800">- Update to new release 3.12.3
  * -- Features introduced in 3.10
  * Brick multiplexing
  * Support to display op-version information from clients
  * Support for rebalance time to completion estimation
  * Separation of tier as its own service
  * Statedump support for gfapi based applications
  * Disabled creation of trash directory by default
  * Implemented parallel readdirp with distribute xlator
  * -- Features introduced in 3.12:
  * Ability to mount sub-directories using the Gluster
    FUSE protocol
  * GFID to path conversion is enabled by default
  * Provided an option to set a limit on number of bricks
    multiplexed in a processes
  * Enhanced the option to export statfs data for bricks
    sharing the same backend filesystem
  * Provided a means to resolve GFID split-brain using
    the gluster CLI
  * Introduction of new api glfs_fd_set_lkowner() to set lock owner
- Remove glusterfs-date.diff (no longer applies)</changelog>
  <changelog author="jengelh@inai.de" date="1513252800">- Add 0001-build-restore-ability-to-control-verbosity-settings.patch
- Replace xdr_sizeof.c with an empty file</changelog>
  <changelog author="jengelh@inai.de" date="1525348800">- Update to new upstream release 4.0.2
  * GlusterD2 (GD2) is a new management daemon for Gluster-4.0,
    glustercli is the command-line interface for it.
    It is a preview release. GD2 is not backwards compatible with
    the older GlusterD. Heterogeneous clusters running both GD2
    and GlusterD are not possible.
  * Not all commands from GlusterD have been implemented for GD2.
  * GD2 does not (yet) work well in 2-node clusters.
  * Self Heal feature integrated for the new Volumes created
    using Glusterd2.</changelog>
  <changelog author="seanlew@opensuse.org" date="1547899200">- Update to new upstream version 5.3 (4.0 is EOL)
  * 5.3 brings hundreds of improvements, see complete relnote at
  https://docs.gluster.org/en/latest/release-notes/5.0/
  * Fixed a number of bugs:
    CVE-2018-1088, CVE-2018-1112 [boo#1090084],
    CVE-2018-10904 [boo#1107018], CVE-2018-10907 [boo#1107019],
    CVE-2018-10911 [boo#1107020], CVE-2018-10913 [boo#1107021],
    CVE-2018-10914 [boo#1107022], CVE-2018-10923 [boo#1107023],
    CVE-2018-10924 [boo#1107024], CVE-2018-10926 [boo#1107025],
    CVE-2018-10927 [boo#1107026], CVE-2018-10928 [boo#1107027],
    CVE-2018-10928 [boo#1107027], CVE-2018-10929 [boo#1107028],
    CVE-2018-10930 [boo#1107029], boo#1105776 .
- Remove patches no longer needed in 5.x:
  * 0001-build-restore-ability-to-control-verbosity-settings.patch
  * glusterfs-tirpc.diff</changelog>
  <changelog author="seanlew@opensuse.org" date="1551528000">- Update to new upstream version 5.4
  * FUSE Client memory leak fixed (#1623107)
  * fail to sync non-ascii utf8 file and dir names (#1648642)
  * Tracker bug for all leases related issues (#1651323)
  * gluster-blockd segfaults because of a null-deref (#1659563)
  * Memory leak: dict_t leak in rda_opendir (#1659676)
  * dht_revalidate may not heal attrs on the brick root (#1660736)
  * Fix tests/bugs/shard/zero-flag.t (#1660932)
  * NL cache: fix typos (#1662200)</changelog>
  <changelog author="seanlew@opensuse.org" date="1552824000">- Update to new upstream version 5.5
  * No changelog yet available in release notes</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Disable LTO (boo#1133088).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Move definition of _lto_cflags into %build.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1576238400">- Update to release 7.0
  * Latency based read child to improve read workload latency in
    a cluster, especially in a cloud setup. Also provides a load
    balancing with the outstanding pending request.
  * Thin-arbiter integration with GD1.
  * If a client older than glusterfs-4.x (i.e. 3.x clients)
    accesses a volume which has the `fips-mode-rchecksum` volume
    option enabled, it can cause erroneous checksum computation/
    unwanted behaviour during afr self-heal.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1577361600">- Fix the name of the Python bindings subpackage
- Properly mark Python bindings subpackage as noarch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1578571200">- Update to release 7.1
  * Fix rebalance causing IO Error - File descriptor in bad state
  * Fix geo-replication sessions going faulty
  * Fix memory leak in glusterfsd process
  * Fix GlusterFS brick process crash
- Add nocommon.patch [boo#1160392]</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1591272000">- Fixes for %_libexecdir changing to /usr/libexec</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1619697600">- Update to release 9.1
  * Implemented seek file operation for open-behind
  * Added io_uring support for Gluster
  * Added Support for 5K volumes
  * Enabled granular-entry-heal by default
  * Added support for monitoring the epoll/rpc layer
  * Improve rebalance of sparse files
- Drop nocommon.patch (merged)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632830400">- Update to release 9.3
  * New reset-brick command
  * Ability to get node level status of a cluster
  * Multi-threaded self-heal for Disperse volumes
  * Lock revocation feature
  * On-demand scrubbing for bitrot detection
  * Real time Cluster notifications using Events APIs
- Move mount helper to /usr/sbin [boo#1191062]</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1657800000">- add explicit Requires for the dependencies, so we make sure
  the dependencies are installed in the same version</changelog>
</package>
<package pkgid="eadb6e8c3452de22747669f2878b019283aafd8b00ababf0be4acf0c6f4fde15" name="gmenudbusmenuproxy" arch="aarch64">
  <version epoch="0" ver="5.24.4" rel="bp154.2.3.1"/>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1632312000">- Add patches from Plasma/5.23 branch:
  * 0001-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0002-shell-panel-Fix-ability-to-type-in-textfield.patch
  * 0003-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0004-PipeWire-Make-sure-thumbnails-properly-use-dmabuf-ag.patch
  * 0005-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0006-Klipper-Handle-incoming-UTF-8-mime-types.patch
  * 0007-Klipper-Guard-against-broken-data-fetches.patch
  * 0008-pipewire-Properly-compare-pipewire-versions-using-QV.patch
  * 0009-PipeWire-Include-defines-for-older-PipeWire-versions.patch
  * 0010-sddm-theme-fix-default-username-font-size.patch
- Add patch to fix XEmbed context menus (kde#442758)
  * 0011-Revert-xembed-adapt-to-changes-in-KNotifications.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1632484800">- Add patch to fix build with gpsd:
  * 0001-Fix-build-with-gpsd-3.23.1.patch
- Add patch to fix window thumbnails if dmabuf is not supported (kde#428284):
  * 0002-libtaskmanager-Don-t-request-dmabuf-if-not-supported.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1633608000">- Update to 5.23.0
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.0
- Changes since 5.22.90:
  * Revert "xembed: adapt to changes in KNotifications" (kde#442758)
  * sddm-theme: Fix using mouse movements to show the UI
  * [systemtray] Check for menuItemFactory.object existence (kde#443377)
  * applets/devicenotifier: Remove applet list item animations
  * sddm-theme: Fix use of needsPassword and related button layout
  * [klipper] Fix shortcut of OK button in the clipboard content edit dialog (kde#400623)
  * Fix Kickoff context menu actions for System Settings results (kde#442522)
  * klipper: Fix reading from plasma on wayland
  * Fix build with gpsd 3.23.1
  * Unbreak fontinst KCM (kde#442748)
  * Address regression in VT switching code (kde#442852)
  * libtaskmanager: Don't request dmabuf if not supported (kde#428284)
  * Port away from Kirigami.Units.devicePixelRatio
  * lookandfeel: don't nuke accent colour (kde#442812)
  * kcm/colors: Improve some bindings on accent colors
  * sddm-theme: fix default username font size
  * PipeWire: Include defines for older PipeWire versions
  * pipewire: Properly compare pipewire versions using QVersionNumber
  * [Klipper] Guard against broken data fetches
  * [Klipper] Handle incoming UTF-8 mime types (kde#424694)
  * PipeWire: Make sure thumbnails properly use dmabuf again
  * [shell/panel] Fix ability to type in textfield (kde#442557)
- Drop patches, now upstream:
  * 0001-Fix-build-with-gpsd-3.23.1.patch
  * 0001-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0002-libtaskmanager-Don-t-request-dmabuf-if-not-supported.patch
  * 0002-shell-panel-Fix-ability-to-type-in-textfield.patch
  * 0003-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0004-PipeWire-Make-sure-thumbnails-properly-use-dmabuf-ag.patch
  * 0005-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0006-Klipper-Handle-incoming-UTF-8-mime-types.patch
  * 0007-Klipper-Guard-against-broken-data-fetches.patch
  * 0008-pipewire-Properly-compare-pipewire-versions-using-QV.patch
  * 0009-PipeWire-Include-defines-for-older-PipeWire-versions.patch
  * 0010-sddm-theme-fix-default-username-font-size.patch
  * 0011-Revert-xembed-adapt-to-changes-in-KNotifications.patch
- Refresh 0001-Ignore-default-sddm-face-icons.patch
- Add new key + signature to plasma.keyring</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1634299200">- Add patch to show password input on the "Other" page in SDDM (kde#443737):
  * 0001-sddm-theme-fix-missing-password-field-on-Other-page.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1634644800">- Update to 5.23.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.1
- Changes since 5.23.0:
  * [freespacenotifier] impr: no notification for ro filesystems
  * kcms/colors: Don't apply header accent colors to non-Header color schemes (kde#443786)
  * [kcms/colors] Notify global settings change after saving
  * krdb: Fix removal of Xft.dpi from Xresources (kde#350039)
  * sddm-theme: fix missing password field on "Other" page (kde#443737)
  * pipewire: Report DRM_FORMAT_MOD_INVALID when no modifiers are offered
  * [digital-clock] Do not assign undefined when agenda is not visible (kde#443380)
- Drop patches, now upstream:
  * 0001-sddm-theme-fix-missing-password-field-on-Other-page.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1634817600">- Add back X11 root window properties until firefox is adjusted
  (boo#1191825):
  * 0001-Revert-Drop-setupX11-from-startplasma-waylandsession.patch
  * 0002-Revert-Drop-X11-root-properties-for-KDE-full-session.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1635249600">- Update to 5.23.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.2
- Changes since 5.23.1:
  * Hide KRunner window when pressing escape (kde#444240)
  * [applets/clipboard] Fix selecting clipboard entries with Enter
  * Set Qt.ImhNoPredictiveText for text fields that act as search fields
  * [shell] Ignore placeholder screens
- Add a version to BuildRequires: cmake(Breeze)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1636459200">- Update to 5.23.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.3
- Changes since 5.23.2:
  * fixed size hints to the osd
  * use implicit size to not cause binding loops (kde#422072)
  * wayland: don't create DesktopView for placeholder screen (kde#438839,kde#444801)
  * [startplasma] Detect systemd service in linked state
  * [Notifications] Fix grouping container side line
  * Disconnect watcher for xdgActivationTokenArrived (kde#444385)
  * interactiveconsole: Allow specifying mode from command line parameter</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1638273600">- Update to 5.23.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.4
- Changes since 5.23.3:
  * Lock &amp; login screens: Use RTL-friendly arrows when in RTL mode
  * [logout-greeter] Set window class name (kde#444898,kde#444899)
  * systemtray: Connect to StatusNotifierWatcher before initializing QDBusPendingReply
  * systemtray: Check if a service is already added before processing QDBusReply (kde#443961)
  * baloosearchruner: Emit DBus error when baloo is disabled (kde#445342)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1641297600">- Update to 5.23.5
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.5
- Changes since 5.23.4:
  * applets/systemtray: Follow panel opacity (kde#439025)
  * [webshortcutsrunner] Fix private browsing with some Firefoxes
  * [kcms/style] Don't call setNeedsSave when style config changes (kde#439297)
  * digital-clock: fix calendar popup contrast when opened from desktop (kde#446991)
  * [libnotificationmanager] Fix memory leak
  * [kcms/lookandfeel] Guard reading invalid first entry (kde#446100)
  * [Global Menu] Set translation domain
  * lookandfeel: Add missing check if list of files is empty (kde#439797)
  * [KSplash] Start with zero opacity
  * Fix Klipper Actions content truncation (kde#444365)
  * [klipper] Use full text for DBus return values (kde#446441)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1642075200">- Update to 5.23.90
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.90
- Too many changes to list here
- Rebase 0001-Use-qdbus-qt5.patch
- Replace xprop-kde-full-session.desktop with autostart file:
  * 0001-Revert-Drop-setupX11-from-startplasma-waylandsession.patch
  * 0002-Revert-Drop-X11-root-properties-for-KDE-full-session.patch
- Add patch to fix the upstream sddm theme background:
  * 0001-sddm-theme-Change-wallpaper-extension-so-that-it-poi.patch
- Add patch to fix screen sharing dialog (kde#448423):
  * 0001-systemdialogs-Remove-leftover-and-broken-components.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1642852800">- Add patch to fix initial focus in SDDM (kde#447817):
  * 0001-Make-SessionManagementScreen-a-FocusScope.patch
- Add patch to fix initial focus in the lockscreen:
  * 0001-Fix-initial-focus-in-LockScreenUi.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1644062400">- Update to 5.24.0
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.0
- Too many changes to list here
- Drop patches, now upstream:
  * 0001-sddm-theme-Change-wallpaper-extension-so-that-it-poi.patch
  * 0001-systemdialogs-Remove-leftover-and-broken-components.patch
  * 0001-Make-SessionManagementScreen-a-FocusScope.patch
  * 0001-Fix-initial-focus-in-LockScreenUi.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1644926400">- Update to 5.24.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.1
- Changes since 5.24.0:
  * Move to runtime check of valid font DPI (kde#449918)
  * applets/battery: adjust show/hide conditions for charge limits (kde#435931)
  * applets/systemtray: fix SNI context menu usage without libappindicator (kde#449870)
  * applets/notifications: Increase implicit size of standalone popup (kde#448383)
  * applets-digital/clock: Add workaround for QTBUG-83890 (kde#448387)
  * Clean up "empty" mimeType containg only whitespaces
  * dataengines/apps: Use KIO::ApplicationLauncherJob for starting KService
  * [containmentactions/applauncher] Use ApplicationLauncherJob instead of OpenUrlJob (kde#449900)
  * Desktop: Still show services with nodisplay=true set (kde#449243)
  * appstream runner: De-duplicate results from multiple sources (kde#448619)
  * Fix ksplash always using default theme. (kde#446966)
  * kcms/users: Fix missing template arguments before reply in FingerprintModel
  * De-duplicate 'Uninstall or manage addons' option in the context menu of Kickoff (kde#448564)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1645531200">- Update to 5.24.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.2
- Changes since 5.24.1:
  * applets/clipboard: Focus on the search field for the first time opening the applet
  * applets/clipboard: Make Up/Down arrow keys work in ClipboardPage (kde#448811,kde#450040)
  * applets/panelspacer: Fix optimal size calculation (kde#431668)
  * Fix overdraw on Wayland
  * PanelView: Do not crash when the state is transitioning (kde#373461)
  * Fix launch kscreen kcm in font kcm.
  * Don't install two copies of kcm_fontinst
  * Lock/login themes: stop adjusting shadows based on color scheme (kde#449985)
  * Top-align lock/login/logout screen action buttons (kde#450238)
  * [kcms/user] Set interactive auth flag for more calls (kde#450122)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1645704000">- Add patch to fix log output of some processes (boo#1196206):
  * 0001-startkde-Forward-stdout-stderr-of-started-processes.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1646654400">- Replace %_libdir/libexec with %_libexecdir (boo#1174075)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1646740800">- Update to 5.24.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.3
- Changes since 5.24.2:
  * kcms/colors: Implement radio button layouts better
  * kcms/colors: fix spacing between radio buttons and content
  * [Battery Monitor] Only show charge threshold hint for power supply batteries (kde#451161)
  * [Icons KCM] Give measure delegate a text
  * wallpapers: Sort BackgroundListModel by title
  * applets/digital-clock: Fix `Qt.formatDateTime` returns different date when minute changes (kde#436796)
  * applets/systray: align applet labels with differing line counts in hidden view (kde#438347)
  * Show panel config above other windows (kde#450794)
  * Use current accent colour to set ColorDialog object in colour picker
  * SystemDialog: Allow accepting the dialogs with the keyboard (kde#450223)
  * applets/systemtray: Do not open context menu on mouse pressed for SNI (kde#409768)
  * Revert "Fix overdraw on Wayland"
  * startkde: Forward stdout/stderr of started processes
  * SDDM theme: stop eliding people's names so aggressively (kde#450673)
  * applets/digital-clock: Word-wrap date string for desktop representation (kde#450632)
  * wrap completely the invariants timer in NDEBUG
  * ScreenPool as the source of truth of QScreen info
  * Always ensure there is an user selected (kde#450182)
  * Prevent panel going out of screen boundaries
  * applets/clipboard: Focus on text area when transition is done
  * applets/clipboard: Fix highlight after exiting edit mode
- Drop patches, now upstream:
  * 0001-startkde-Forward-stdout-stderr-of-started-processes.patch
- Restore compatibility with older kf5-filesystem</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1648555200">- Update to 5.24.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.4
- Changes since 5.24.3:
  * kcms/users: Adjust for padding in overlay sheet (kde#451031)
  * [Media Controller] Explicitly set slider "to" before setting "value"
  * [Notifications] Fix implicit size propagation in SelectableLabel
  * applets/kicker: Skip creating KService for non-desktop files or folders (kde#442970)
  * Fix sleep/suspend sometimes not working ... from ksmserver-logout-greeter, by making the DBus calls synchronous.
  * kicker/actionlist: Ensure we parse the args for the jumplist actions (kde#451418)
  * libtaskmanager: recompute active task when a task is removed
  * sddm/lockscreen: Fix weird behaviour
  * [Notifications] Limit notification heading line count</changelog>
  <changelog author="Fushan Wen &lt;qydwhotmail@gmail.com&gt;" date="1656590400">- Fix a potential crash when deleting a panel with a system tray applet
  (kde#453726)
  * 0001-applets-systemtray-disconnect-KConfigLoader-signal-w.patch
- Fix a potential crash on logout (kde#454159)
  * 0001-Avoid-crash-in-plasma-session-teardown.patch</changelog>
</package>
<package pkgid="5096a65dab2034d6326452515b5e7d28fe980fed8202b8db29970db9f98ad3da" name="gmenudbusmenuproxy" arch="ppc64le">
  <version epoch="0" ver="5.24.4" rel="bp154.2.3.1"/>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1632312000">- Add patches from Plasma/5.23 branch:
  * 0001-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0002-shell-panel-Fix-ability-to-type-in-textfield.patch
  * 0003-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0004-PipeWire-Make-sure-thumbnails-properly-use-dmabuf-ag.patch
  * 0005-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0006-Klipper-Handle-incoming-UTF-8-mime-types.patch
  * 0007-Klipper-Guard-against-broken-data-fetches.patch
  * 0008-pipewire-Properly-compare-pipewire-versions-using-QV.patch
  * 0009-PipeWire-Include-defines-for-older-PipeWire-versions.patch
  * 0010-sddm-theme-fix-default-username-font-size.patch
- Add patch to fix XEmbed context menus (kde#442758)
  * 0011-Revert-xembed-adapt-to-changes-in-KNotifications.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1632484800">- Add patch to fix build with gpsd:
  * 0001-Fix-build-with-gpsd-3.23.1.patch
- Add patch to fix window thumbnails if dmabuf is not supported (kde#428284):
  * 0002-libtaskmanager-Don-t-request-dmabuf-if-not-supported.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1633608000">- Update to 5.23.0
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.0
- Changes since 5.22.90:
  * Revert "xembed: adapt to changes in KNotifications" (kde#442758)
  * sddm-theme: Fix using mouse movements to show the UI
  * [systemtray] Check for menuItemFactory.object existence (kde#443377)
  * applets/devicenotifier: Remove applet list item animations
  * sddm-theme: Fix use of needsPassword and related button layout
  * [klipper] Fix shortcut of OK button in the clipboard content edit dialog (kde#400623)
  * Fix Kickoff context menu actions for System Settings results (kde#442522)
  * klipper: Fix reading from plasma on wayland
  * Fix build with gpsd 3.23.1
  * Unbreak fontinst KCM (kde#442748)
  * Address regression in VT switching code (kde#442852)
  * libtaskmanager: Don't request dmabuf if not supported (kde#428284)
  * Port away from Kirigami.Units.devicePixelRatio
  * lookandfeel: don't nuke accent colour (kde#442812)
  * kcm/colors: Improve some bindings on accent colors
  * sddm-theme: fix default username font size
  * PipeWire: Include defines for older PipeWire versions
  * pipewire: Properly compare pipewire versions using QVersionNumber
  * [Klipper] Guard against broken data fetches
  * [Klipper] Handle incoming UTF-8 mime types (kde#424694)
  * PipeWire: Make sure thumbnails properly use dmabuf again
  * [shell/panel] Fix ability to type in textfield (kde#442557)
- Drop patches, now upstream:
  * 0001-Fix-build-with-gpsd-3.23.1.patch
  * 0001-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0002-libtaskmanager-Don-t-request-dmabuf-if-not-supported.patch
  * 0002-shell-panel-Fix-ability-to-type-in-textfield.patch
  * 0003-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0004-PipeWire-Make-sure-thumbnails-properly-use-dmabuf-ag.patch
  * 0005-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0006-Klipper-Handle-incoming-UTF-8-mime-types.patch
  * 0007-Klipper-Guard-against-broken-data-fetches.patch
  * 0008-pipewire-Properly-compare-pipewire-versions-using-QV.patch
  * 0009-PipeWire-Include-defines-for-older-PipeWire-versions.patch
  * 0010-sddm-theme-fix-default-username-font-size.patch
  * 0011-Revert-xembed-adapt-to-changes-in-KNotifications.patch
- Refresh 0001-Ignore-default-sddm-face-icons.patch
- Add new key + signature to plasma.keyring</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1634299200">- Add patch to show password input on the "Other" page in SDDM (kde#443737):
  * 0001-sddm-theme-fix-missing-password-field-on-Other-page.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1634644800">- Update to 5.23.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.1
- Changes since 5.23.0:
  * [freespacenotifier] impr: no notification for ro filesystems
  * kcms/colors: Don't apply header accent colors to non-Header color schemes (kde#443786)
  * [kcms/colors] Notify global settings change after saving
  * krdb: Fix removal of Xft.dpi from Xresources (kde#350039)
  * sddm-theme: fix missing password field on "Other" page (kde#443737)
  * pipewire: Report DRM_FORMAT_MOD_INVALID when no modifiers are offered
  * [digital-clock] Do not assign undefined when agenda is not visible (kde#443380)
- Drop patches, now upstream:
  * 0001-sddm-theme-fix-missing-password-field-on-Other-page.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1634817600">- Add back X11 root window properties until firefox is adjusted
  (boo#1191825):
  * 0001-Revert-Drop-setupX11-from-startplasma-waylandsession.patch
  * 0002-Revert-Drop-X11-root-properties-for-KDE-full-session.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1635249600">- Update to 5.23.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.2
- Changes since 5.23.1:
  * Hide KRunner window when pressing escape (kde#444240)
  * [applets/clipboard] Fix selecting clipboard entries with Enter
  * Set Qt.ImhNoPredictiveText for text fields that act as search fields
  * [shell] Ignore placeholder screens
- Add a version to BuildRequires: cmake(Breeze)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1636459200">- Update to 5.23.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.3
- Changes since 5.23.2:
  * fixed size hints to the osd
  * use implicit size to not cause binding loops (kde#422072)
  * wayland: don't create DesktopView for placeholder screen (kde#438839,kde#444801)
  * [startplasma] Detect systemd service in linked state
  * [Notifications] Fix grouping container side line
  * Disconnect watcher for xdgActivationTokenArrived (kde#444385)
  * interactiveconsole: Allow specifying mode from command line parameter</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1638273600">- Update to 5.23.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.4
- Changes since 5.23.3:
  * Lock &amp; login screens: Use RTL-friendly arrows when in RTL mode
  * [logout-greeter] Set window class name (kde#444898,kde#444899)
  * systemtray: Connect to StatusNotifierWatcher before initializing QDBusPendingReply
  * systemtray: Check if a service is already added before processing QDBusReply (kde#443961)
  * baloosearchruner: Emit DBus error when baloo is disabled (kde#445342)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1641297600">- Update to 5.23.5
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.5
- Changes since 5.23.4:
  * applets/systemtray: Follow panel opacity (kde#439025)
  * [webshortcutsrunner] Fix private browsing with some Firefoxes
  * [kcms/style] Don't call setNeedsSave when style config changes (kde#439297)
  * digital-clock: fix calendar popup contrast when opened from desktop (kde#446991)
  * [libnotificationmanager] Fix memory leak
  * [kcms/lookandfeel] Guard reading invalid first entry (kde#446100)
  * [Global Menu] Set translation domain
  * lookandfeel: Add missing check if list of files is empty (kde#439797)
  * [KSplash] Start with zero opacity
  * Fix Klipper Actions content truncation (kde#444365)
  * [klipper] Use full text for DBus return values (kde#446441)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1642075200">- Update to 5.23.90
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.90
- Too many changes to list here
- Rebase 0001-Use-qdbus-qt5.patch
- Replace xprop-kde-full-session.desktop with autostart file:
  * 0001-Revert-Drop-setupX11-from-startplasma-waylandsession.patch
  * 0002-Revert-Drop-X11-root-properties-for-KDE-full-session.patch
- Add patch to fix the upstream sddm theme background:
  * 0001-sddm-theme-Change-wallpaper-extension-so-that-it-poi.patch
- Add patch to fix screen sharing dialog (kde#448423):
  * 0001-systemdialogs-Remove-leftover-and-broken-components.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1642852800">- Add patch to fix initial focus in SDDM (kde#447817):
  * 0001-Make-SessionManagementScreen-a-FocusScope.patch
- Add patch to fix initial focus in the lockscreen:
  * 0001-Fix-initial-focus-in-LockScreenUi.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1644062400">- Update to 5.24.0
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.0
- Too many changes to list here
- Drop patches, now upstream:
  * 0001-sddm-theme-Change-wallpaper-extension-so-that-it-poi.patch
  * 0001-systemdialogs-Remove-leftover-and-broken-components.patch
  * 0001-Make-SessionManagementScreen-a-FocusScope.patch
  * 0001-Fix-initial-focus-in-LockScreenUi.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1644926400">- Update to 5.24.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.1
- Changes since 5.24.0:
  * Move to runtime check of valid font DPI (kde#449918)
  * applets/battery: adjust show/hide conditions for charge limits (kde#435931)
  * applets/systemtray: fix SNI context menu usage without libappindicator (kde#449870)
  * applets/notifications: Increase implicit size of standalone popup (kde#448383)
  * applets-digital/clock: Add workaround for QTBUG-83890 (kde#448387)
  * Clean up "empty" mimeType containg only whitespaces
  * dataengines/apps: Use KIO::ApplicationLauncherJob for starting KService
  * [containmentactions/applauncher] Use ApplicationLauncherJob instead of OpenUrlJob (kde#449900)
  * Desktop: Still show services with nodisplay=true set (kde#449243)
  * appstream runner: De-duplicate results from multiple sources (kde#448619)
  * Fix ksplash always using default theme. (kde#446966)
  * kcms/users: Fix missing template arguments before reply in FingerprintModel
  * De-duplicate 'Uninstall or manage addons' option in the context menu of Kickoff (kde#448564)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1645531200">- Update to 5.24.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.2
- Changes since 5.24.1:
  * applets/clipboard: Focus on the search field for the first time opening the applet
  * applets/clipboard: Make Up/Down arrow keys work in ClipboardPage (kde#448811,kde#450040)
  * applets/panelspacer: Fix optimal size calculation (kde#431668)
  * Fix overdraw on Wayland
  * PanelView: Do not crash when the state is transitioning (kde#373461)
  * Fix launch kscreen kcm in font kcm.
  * Don't install two copies of kcm_fontinst
  * Lock/login themes: stop adjusting shadows based on color scheme (kde#449985)
  * Top-align lock/login/logout screen action buttons (kde#450238)
  * [kcms/user] Set interactive auth flag for more calls (kde#450122)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1645704000">- Add patch to fix log output of some processes (boo#1196206):
  * 0001-startkde-Forward-stdout-stderr-of-started-processes.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1646654400">- Replace %_libdir/libexec with %_libexecdir (boo#1174075)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1646740800">- Update to 5.24.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.3
- Changes since 5.24.2:
  * kcms/colors: Implement radio button layouts better
  * kcms/colors: fix spacing between radio buttons and content
  * [Battery Monitor] Only show charge threshold hint for power supply batteries (kde#451161)
  * [Icons KCM] Give measure delegate a text
  * wallpapers: Sort BackgroundListModel by title
  * applets/digital-clock: Fix `Qt.formatDateTime` returns different date when minute changes (kde#436796)
  * applets/systray: align applet labels with differing line counts in hidden view (kde#438347)
  * Show panel config above other windows (kde#450794)
  * Use current accent colour to set ColorDialog object in colour picker
  * SystemDialog: Allow accepting the dialogs with the keyboard (kde#450223)
  * applets/systemtray: Do not open context menu on mouse pressed for SNI (kde#409768)
  * Revert "Fix overdraw on Wayland"
  * startkde: Forward stdout/stderr of started processes
  * SDDM theme: stop eliding people's names so aggressively (kde#450673)
  * applets/digital-clock: Word-wrap date string for desktop representation (kde#450632)
  * wrap completely the invariants timer in NDEBUG
  * ScreenPool as the source of truth of QScreen info
  * Always ensure there is an user selected (kde#450182)
  * Prevent panel going out of screen boundaries
  * applets/clipboard: Focus on text area when transition is done
  * applets/clipboard: Fix highlight after exiting edit mode
- Drop patches, now upstream:
  * 0001-startkde-Forward-stdout-stderr-of-started-processes.patch
- Restore compatibility with older kf5-filesystem</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1648555200">- Update to 5.24.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.4
- Changes since 5.24.3:
  * kcms/users: Adjust for padding in overlay sheet (kde#451031)
  * [Media Controller] Explicitly set slider "to" before setting "value"
  * [Notifications] Fix implicit size propagation in SelectableLabel
  * applets/kicker: Skip creating KService for non-desktop files or folders (kde#442970)
  * Fix sleep/suspend sometimes not working ... from ksmserver-logout-greeter, by making the DBus calls synchronous.
  * kicker/actionlist: Ensure we parse the args for the jumplist actions (kde#451418)
  * libtaskmanager: recompute active task when a task is removed
  * sddm/lockscreen: Fix weird behaviour
  * [Notifications] Limit notification heading line count</changelog>
  <changelog author="Fushan Wen &lt;qydwhotmail@gmail.com&gt;" date="1656590400">- Fix a potential crash when deleting a panel with a system tray applet
  (kde#453726)
  * 0001-applets-systemtray-disconnect-KConfigLoader-signal-w.patch
- Fix a potential crash on logout (kde#454159)
  * 0001-Avoid-crash-in-plasma-session-teardown.patch</changelog>
</package>
<package pkgid="366e16b47c902494ab9e1c527688349669a62711300b3393f010cac35fcf0bb7" name="gmenudbusmenuproxy" arch="x86_64">
  <version epoch="0" ver="5.24.4" rel="bp154.2.3.1"/>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1632312000">- Add patches from Plasma/5.23 branch:
  * 0001-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0002-shell-panel-Fix-ability-to-type-in-textfield.patch
  * 0003-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0004-PipeWire-Make-sure-thumbnails-properly-use-dmabuf-ag.patch
  * 0005-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0006-Klipper-Handle-incoming-UTF-8-mime-types.patch
  * 0007-Klipper-Guard-against-broken-data-fetches.patch
  * 0008-pipewire-Properly-compare-pipewire-versions-using-QV.patch
  * 0009-PipeWire-Include-defines-for-older-PipeWire-versions.patch
  * 0010-sddm-theme-fix-default-username-font-size.patch
- Add patch to fix XEmbed context menus (kde#442758)
  * 0011-Revert-xembed-adapt-to-changes-in-KNotifications.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1632484800">- Add patch to fix build with gpsd:
  * 0001-Fix-build-with-gpsd-3.23.1.patch
- Add patch to fix window thumbnails if dmabuf is not supported (kde#428284):
  * 0002-libtaskmanager-Don-t-request-dmabuf-if-not-supported.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1633608000">- Update to 5.23.0
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.0
- Changes since 5.22.90:
  * Revert "xembed: adapt to changes in KNotifications" (kde#442758)
  * sddm-theme: Fix using mouse movements to show the UI
  * [systemtray] Check for menuItemFactory.object existence (kde#443377)
  * applets/devicenotifier: Remove applet list item animations
  * sddm-theme: Fix use of needsPassword and related button layout
  * [klipper] Fix shortcut of OK button in the clipboard content edit dialog (kde#400623)
  * Fix Kickoff context menu actions for System Settings results (kde#442522)
  * klipper: Fix reading from plasma on wayland
  * Fix build with gpsd 3.23.1
  * Unbreak fontinst KCM (kde#442748)
  * Address regression in VT switching code (kde#442852)
  * libtaskmanager: Don't request dmabuf if not supported (kde#428284)
  * Port away from Kirigami.Units.devicePixelRatio
  * lookandfeel: don't nuke accent colour (kde#442812)
  * kcm/colors: Improve some bindings on accent colors
  * sddm-theme: fix default username font size
  * PipeWire: Include defines for older PipeWire versions
  * pipewire: Properly compare pipewire versions using QVersionNumber
  * [Klipper] Guard against broken data fetches
  * [Klipper] Handle incoming UTF-8 mime types (kde#424694)
  * PipeWire: Make sure thumbnails properly use dmabuf again
  * [shell/panel] Fix ability to type in textfield (kde#442557)
- Drop patches, now upstream:
  * 0001-Fix-build-with-gpsd-3.23.1.patch
  * 0001-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0002-libtaskmanager-Don-t-request-dmabuf-if-not-supported.patch
  * 0002-shell-panel-Fix-ability-to-type-in-textfield.patch
  * 0003-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0004-PipeWire-Make-sure-thumbnails-properly-use-dmabuf-ag.patch
  * 0005-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0006-Klipper-Handle-incoming-UTF-8-mime-types.patch
  * 0007-Klipper-Guard-against-broken-data-fetches.patch
  * 0008-pipewire-Properly-compare-pipewire-versions-using-QV.patch
  * 0009-PipeWire-Include-defines-for-older-PipeWire-versions.patch
  * 0010-sddm-theme-fix-default-username-font-size.patch
  * 0011-Revert-xembed-adapt-to-changes-in-KNotifications.patch
- Refresh 0001-Ignore-default-sddm-face-icons.patch
- Add new key + signature to plasma.keyring</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1634299200">- Add patch to show password input on the "Other" page in SDDM (kde#443737):
  * 0001-sddm-theme-fix-missing-password-field-on-Other-page.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1634644800">- Update to 5.23.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.1
- Changes since 5.23.0:
  * [freespacenotifier] impr: no notification for ro filesystems
  * kcms/colors: Don't apply header accent colors to non-Header color schemes (kde#443786)
  * [kcms/colors] Notify global settings change after saving
  * krdb: Fix removal of Xft.dpi from Xresources (kde#350039)
  * sddm-theme: fix missing password field on "Other" page (kde#443737)
  * pipewire: Report DRM_FORMAT_MOD_INVALID when no modifiers are offered
  * [digital-clock] Do not assign undefined when agenda is not visible (kde#443380)
- Drop patches, now upstream:
  * 0001-sddm-theme-fix-missing-password-field-on-Other-page.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1634817600">- Add back X11 root window properties until firefox is adjusted
  (boo#1191825):
  * 0001-Revert-Drop-setupX11-from-startplasma-waylandsession.patch
  * 0002-Revert-Drop-X11-root-properties-for-KDE-full-session.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1635249600">- Update to 5.23.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.2
- Changes since 5.23.1:
  * Hide KRunner window when pressing escape (kde#444240)
  * [applets/clipboard] Fix selecting clipboard entries with Enter
  * Set Qt.ImhNoPredictiveText for text fields that act as search fields
  * [shell] Ignore placeholder screens
- Add a version to BuildRequires: cmake(Breeze)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1636459200">- Update to 5.23.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.3
- Changes since 5.23.2:
  * fixed size hints to the osd
  * use implicit size to not cause binding loops (kde#422072)
  * wayland: don't create DesktopView for placeholder screen (kde#438839,kde#444801)
  * [startplasma] Detect systemd service in linked state
  * [Notifications] Fix grouping container side line
  * Disconnect watcher for xdgActivationTokenArrived (kde#444385)
  * interactiveconsole: Allow specifying mode from command line parameter</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1638273600">- Update to 5.23.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.4
- Changes since 5.23.3:
  * Lock &amp; login screens: Use RTL-friendly arrows when in RTL mode
  * [logout-greeter] Set window class name (kde#444898,kde#444899)
  * systemtray: Connect to StatusNotifierWatcher before initializing QDBusPendingReply
  * systemtray: Check if a service is already added before processing QDBusReply (kde#443961)
  * baloosearchruner: Emit DBus error when baloo is disabled (kde#445342)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1641297600">- Update to 5.23.5
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.5
- Changes since 5.23.4:
  * applets/systemtray: Follow panel opacity (kde#439025)
  * [webshortcutsrunner] Fix private browsing with some Firefoxes
  * [kcms/style] Don't call setNeedsSave when style config changes (kde#439297)
  * digital-clock: fix calendar popup contrast when opened from desktop (kde#446991)
  * [libnotificationmanager] Fix memory leak
  * [kcms/lookandfeel] Guard reading invalid first entry (kde#446100)
  * [Global Menu] Set translation domain
  * lookandfeel: Add missing check if list of files is empty (kde#439797)
  * [KSplash] Start with zero opacity
  * Fix Klipper Actions content truncation (kde#444365)
  * [klipper] Use full text for DBus return values (kde#446441)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1642075200">- Update to 5.23.90
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.90
- Too many changes to list here
- Rebase 0001-Use-qdbus-qt5.patch
- Replace xprop-kde-full-session.desktop with autostart file:
  * 0001-Revert-Drop-setupX11-from-startplasma-waylandsession.patch
  * 0002-Revert-Drop-X11-root-properties-for-KDE-full-session.patch
- Add patch to fix the upstream sddm theme background:
  * 0001-sddm-theme-Change-wallpaper-extension-so-that-it-poi.patch
- Add patch to fix screen sharing dialog (kde#448423):
  * 0001-systemdialogs-Remove-leftover-and-broken-components.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1642852800">- Add patch to fix initial focus in SDDM (kde#447817):
  * 0001-Make-SessionManagementScreen-a-FocusScope.patch
- Add patch to fix initial focus in the lockscreen:
  * 0001-Fix-initial-focus-in-LockScreenUi.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1644062400">- Update to 5.24.0
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.0
- Too many changes to list here
- Drop patches, now upstream:
  * 0001-sddm-theme-Change-wallpaper-extension-so-that-it-poi.patch
  * 0001-systemdialogs-Remove-leftover-and-broken-components.patch
  * 0001-Make-SessionManagementScreen-a-FocusScope.patch
  * 0001-Fix-initial-focus-in-LockScreenUi.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1644926400">- Update to 5.24.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.1
- Changes since 5.24.0:
  * Move to runtime check of valid font DPI (kde#449918)
  * applets/battery: adjust show/hide conditions for charge limits (kde#435931)
  * applets/systemtray: fix SNI context menu usage without libappindicator (kde#449870)
  * applets/notifications: Increase implicit size of standalone popup (kde#448383)
  * applets-digital/clock: Add workaround for QTBUG-83890 (kde#448387)
  * Clean up "empty" mimeType containg only whitespaces
  * dataengines/apps: Use KIO::ApplicationLauncherJob for starting KService
  * [containmentactions/applauncher] Use ApplicationLauncherJob instead of OpenUrlJob (kde#449900)
  * Desktop: Still show services with nodisplay=true set (kde#449243)
  * appstream runner: De-duplicate results from multiple sources (kde#448619)
  * Fix ksplash always using default theme. (kde#446966)
  * kcms/users: Fix missing template arguments before reply in FingerprintModel
  * De-duplicate 'Uninstall or manage addons' option in the context menu of Kickoff (kde#448564)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1645531200">- Update to 5.24.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.2
- Changes since 5.24.1:
  * applets/clipboard: Focus on the search field for the first time opening the applet
  * applets/clipboard: Make Up/Down arrow keys work in ClipboardPage (kde#448811,kde#450040)
  * applets/panelspacer: Fix optimal size calculation (kde#431668)
  * Fix overdraw on Wayland
  * PanelView: Do not crash when the state is transitioning (kde#373461)
  * Fix launch kscreen kcm in font kcm.
  * Don't install two copies of kcm_fontinst
  * Lock/login themes: stop adjusting shadows based on color scheme (kde#449985)
  * Top-align lock/login/logout screen action buttons (kde#450238)
  * [kcms/user] Set interactive auth flag for more calls (kde#450122)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1645704000">- Add patch to fix log output of some processes (boo#1196206):
  * 0001-startkde-Forward-stdout-stderr-of-started-processes.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1646654400">- Replace %_libdir/libexec with %_libexecdir (boo#1174075)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1646740800">- Update to 5.24.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.3
- Changes since 5.24.2:
  * kcms/colors: Implement radio button layouts better
  * kcms/colors: fix spacing between radio buttons and content
  * [Battery Monitor] Only show charge threshold hint for power supply batteries (kde#451161)
  * [Icons KCM] Give measure delegate a text
  * wallpapers: Sort BackgroundListModel by title
  * applets/digital-clock: Fix `Qt.formatDateTime` returns different date when minute changes (kde#436796)
  * applets/systray: align applet labels with differing line counts in hidden view (kde#438347)
  * Show panel config above other windows (kde#450794)
  * Use current accent colour to set ColorDialog object in colour picker
  * SystemDialog: Allow accepting the dialogs with the keyboard (kde#450223)
  * applets/systemtray: Do not open context menu on mouse pressed for SNI (kde#409768)
  * Revert "Fix overdraw on Wayland"
  * startkde: Forward stdout/stderr of started processes
  * SDDM theme: stop eliding people's names so aggressively (kde#450673)
  * applets/digital-clock: Word-wrap date string for desktop representation (kde#450632)
  * wrap completely the invariants timer in NDEBUG
  * ScreenPool as the source of truth of QScreen info
  * Always ensure there is an user selected (kde#450182)
  * Prevent panel going out of screen boundaries
  * applets/clipboard: Focus on text area when transition is done
  * applets/clipboard: Fix highlight after exiting edit mode
- Drop patches, now upstream:
  * 0001-startkde-Forward-stdout-stderr-of-started-processes.patch
- Restore compatibility with older kf5-filesystem</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1648555200">- Update to 5.24.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.4
- Changes since 5.24.3:
  * kcms/users: Adjust for padding in overlay sheet (kde#451031)
  * [Media Controller] Explicitly set slider "to" before setting "value"
  * [Notifications] Fix implicit size propagation in SelectableLabel
  * applets/kicker: Skip creating KService for non-desktop files or folders (kde#442970)
  * Fix sleep/suspend sometimes not working ... from ksmserver-logout-greeter, by making the DBus calls synchronous.
  * kicker/actionlist: Ensure we parse the args for the jumplist actions (kde#451418)
  * libtaskmanager: recompute active task when a task is removed
  * sddm/lockscreen: Fix weird behaviour
  * [Notifications] Limit notification heading line count</changelog>
  <changelog author="Fushan Wen &lt;qydwhotmail@gmail.com&gt;" date="1656590400">- Fix a potential crash when deleting a panel with a system tray applet
  (kde#453726)
  * 0001-applets-systemtray-disconnect-KConfigLoader-signal-w.patch
- Fix a potential crash on logout (kde#454159)
  * 0001-Avoid-crash-in-plasma-session-teardown.patch</changelog>
</package>
<package pkgid="7021de03776ad2004c4f2bf5a45869e0067da44a5b2d8c8be4e62c4f6c77f554" name="gmock" arch="aarch64">
  <version epoch="0" ver="1.12.1" rel="bp154.2.1"/>
  <changelog author="mpluskal@suse.com" date="1425038400">- Use source url
- Package libraries as libgoogletest0
- Run tests when building</changelog>
  <changelog author="mpluskal@suse.com" date="1425124800">- Correct typo in library name</changelog>
  <changelog author="mpluskal@suse.com" date="1440072000">- Update project and source url (now on github)
- Change library name, provides obsoletes should not be necessary
  as no released binary should link against it</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1513425600">- Update to version 1.8.0:
  * Update the value of GTEST_DIR to reflect the googletest dir.
  * Change the GTestDir marco value to reflect the new dir of
    googletest.
  * Read Bazel's $XML_OUTPUT_FILE environment variable
  * Restructure:
  - Test so each scenario is independent.
  - $XML_OUTPUT_FILE logic
  * Fixes:
  - Error C2440 'return' in gmock_test
    (gh#google/googletest#775).
  - Tests that return object which implement operator bool.
  - Operator precedence in GTEST_TEST_BOOLEAN_ with expressions
    that implement operator bool.
  - env_var_test to ignore XML_OUTPUT_FILE if already set.
  - Link that's returned when running tests
    (gh#google/googletest#714).
- Rework package turning it into a source package essencially, once
  its original intention is to provide source files for a testing
  framework, a pure development package itself. Aligning with
  upstream ease our job and avoid unexpected bugs.
- Drop libgtest0 and googletest-devel subpackages bringing gtest
  subpackage instead and obsoleting the previous ones, following
  the above change.
- Provide googlemock together with googletest now that upstream
  officially brought this project under gloogle's wings.
- Replace autoconf and automake BuildRequires by cmake and switch
  configure, make and make_install macros by cmake, cmake_jobs and
  cmake_install. Autotools are deprecated and cmake is recommended
  by upstream.
- Drop libtool BuildRequires and autoreconf call. With the adoption
  of cmake it's no longer need anymore.
- Drop googletest-enable-make-install.patch. No longer needed once
  make install is not used anymore.
- Add googletest-fix-cmake-libdir-install.patch for enabling the
  use of /usr/lib(64) instead of /usr/local/lib(64), once
  upstream's CMakeLists doesn't provide flexibility in this regard.
- Add googletest-rpmlintrc file to filter warnings about
  devel-file-in-non-devel-package, shlib-policy-missing-suffix and
  obsolete-not-provided as the package is a devel one itself now.</changelog>
  <changelog author="tiwai@suse.de" date="1514548800">- Fix the source (and put the download URL as a comment) for
  matching with the actual tarball file name.</changelog>
  <changelog author="adam.majer@suse.de" date="1542369600">- Update to version 1.8.1:
  * add pkg-config files
  * add --no_stacktrace_support for json-output-unittest
  * allow macros inside of parametrized test names.
  * support JSON output format in addition to XML
  * add options to parallelize builds
  * fix double free when building Gtest/GMock in shared libraries
    and linking a test executable with both.
  * 2.6.4 is the minimum CMake version
- cleanup spec file
- googletest-fix-cmake-libdir-install.patch: dropped, upstreamed</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1542456000">- Remove errant backslahes from description.
- Rewrite summaries without em dashes.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1581163200">- Update to version 1.10.0
  * Deprecated "....TEST_CASE" API in favor of "....TEST_SUITE".
    In a nutshell if you have code that uses something like
    "INSTANTIATE_TYPED_TEST_CASE_P " - this and all other
    "*_TEST_CASE " are now deprecated in favor of more standard
    _TEST_SUITE.
  * New powerful MOCK_METHOD macro.
    For example:
    (Old) MOCK_METHOD1(Bar, double(std::string s));
    (New) MOCK_METHOD(double, Bar, (std::string s), (override));
    So there is no need to count the parameters anymore.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1621252800">- Don't depend on python2, when we don't need it.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1641384000">- update to 1.11.0:
  * --gtest_brief shows only test failures in output
  * --gtest_fail_fast stops test execution on first failure
  * Failures in SetUpTestSuite and TearDownTestSuite now cause tests to fail
    rather than log
  * Uninstantiated TEST_P and TYPED_TEST_P now fail unless allowlisted using
    GTEST_ALLOW_UNINSTANTIATED_PARAMETERIZED_TEST
  * new matchers and mocking behavior, see
    https://github.com/google/googletest/releases/tag/release-1.11.0</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1643803200">- Add missing ldconfig calls in %post/%postun
- Enable unit tests on Tumbleweed (fails on 15.x)
- Update rpmlintrc for rpmlint 2.0</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1649419200">- Disable 2 warnings that are affected by GCC 12:
  gh#google/googletest#3792 and gh#google/googletest#3793.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1665057600">- update to 1.12.1:
  * Support for move-only values to Return
  * New matchers: WhenBase64Unescaped
  * ResultOf() now has a 3-arg overload that takes a description string for better
    error messages
  * CMake minimum increased to 3.5</changelog>
</package>
<package pkgid="f218f8a564572813997e48ba60ae8afebdad1db8e31985b6f1d7f89cf3c42cf0" name="gmock" arch="i586">
  <version epoch="0" ver="1.12.1" rel="bp154.2.1"/>
  <changelog author="mpluskal@suse.com" date="1425038400">- Use source url
- Package libraries as libgoogletest0
- Run tests when building</changelog>
  <changelog author="mpluskal@suse.com" date="1425124800">- Correct typo in library name</changelog>
  <changelog author="mpluskal@suse.com" date="1440072000">- Update project and source url (now on github)
- Change library name, provides obsoletes should not be necessary
  as no released binary should link against it</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1513425600">- Update to version 1.8.0:
  * Update the value of GTEST_DIR to reflect the googletest dir.
  * Change the GTestDir marco value to reflect the new dir of
    googletest.
  * Read Bazel's $XML_OUTPUT_FILE environment variable
  * Restructure:
  - Test so each scenario is independent.
  - $XML_OUTPUT_FILE logic
  * Fixes:
  - Error C2440 'return' in gmock_test
    (gh#google/googletest#775).
  - Tests that return object which implement operator bool.
  - Operator precedence in GTEST_TEST_BOOLEAN_ with expressions
    that implement operator bool.
  - env_var_test to ignore XML_OUTPUT_FILE if already set.
  - Link that's returned when running tests
    (gh#google/googletest#714).
- Rework package turning it into a source package essencially, once
  its original intention is to provide source files for a testing
  framework, a pure development package itself. Aligning with
  upstream ease our job and avoid unexpected bugs.
- Drop libgtest0 and googletest-devel subpackages bringing gtest
  subpackage instead and obsoleting the previous ones, following
  the above change.
- Provide googlemock together with googletest now that upstream
  officially brought this project under gloogle's wings.
- Replace autoconf and automake BuildRequires by cmake and switch
  configure, make and make_install macros by cmake, cmake_jobs and
  cmake_install. Autotools are deprecated and cmake is recommended
  by upstream.
- Drop libtool BuildRequires and autoreconf call. With the adoption
  of cmake it's no longer need anymore.
- Drop googletest-enable-make-install.patch. No longer needed once
  make install is not used anymore.
- Add googletest-fix-cmake-libdir-install.patch for enabling the
  use of /usr/lib(64) instead of /usr/local/lib(64), once
  upstream's CMakeLists doesn't provide flexibility in this regard.
- Add googletest-rpmlintrc file to filter warnings about
  devel-file-in-non-devel-package, shlib-policy-missing-suffix and
  obsolete-not-provided as the package is a devel one itself now.</changelog>
  <changelog author="tiwai@suse.de" date="1514548800">- Fix the source (and put the download URL as a comment) for
  matching with the actual tarball file name.</changelog>
  <changelog author="adam.majer@suse.de" date="1542369600">- Update to version 1.8.1:
  * add pkg-config files
  * add --no_stacktrace_support for json-output-unittest
  * allow macros inside of parametrized test names.
  * support JSON output format in addition to XML
  * add options to parallelize builds
  * fix double free when building Gtest/GMock in shared libraries
    and linking a test executable with both.
  * 2.6.4 is the minimum CMake version
- cleanup spec file
- googletest-fix-cmake-libdir-install.patch: dropped, upstreamed</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1542456000">- Remove errant backslahes from description.
- Rewrite summaries without em dashes.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1581163200">- Update to version 1.10.0
  * Deprecated "....TEST_CASE" API in favor of "....TEST_SUITE".
    In a nutshell if you have code that uses something like
    "INSTANTIATE_TYPED_TEST_CASE_P " - this and all other
    "*_TEST_CASE " are now deprecated in favor of more standard
    _TEST_SUITE.
  * New powerful MOCK_METHOD macro.
    For example:
    (Old) MOCK_METHOD1(Bar, double(std::string s));
    (New) MOCK_METHOD(double, Bar, (std::string s), (override));
    So there is no need to count the parameters anymore.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1621252800">- Don't depend on python2, when we don't need it.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1641384000">- update to 1.11.0:
  * --gtest_brief shows only test failures in output
  * --gtest_fail_fast stops test execution on first failure
  * Failures in SetUpTestSuite and TearDownTestSuite now cause tests to fail
    rather than log
  * Uninstantiated TEST_P and TYPED_TEST_P now fail unless allowlisted using
    GTEST_ALLOW_UNINSTANTIATED_PARAMETERIZED_TEST
  * new matchers and mocking behavior, see
    https://github.com/google/googletest/releases/tag/release-1.11.0</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1643803200">- Add missing ldconfig calls in %post/%postun
- Enable unit tests on Tumbleweed (fails on 15.x)
- Update rpmlintrc for rpmlint 2.0</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1649419200">- Disable 2 warnings that are affected by GCC 12:
  gh#google/googletest#3792 and gh#google/googletest#3793.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1665057600">- update to 1.12.1:
  * Support for move-only values to Return
  * New matchers: WhenBase64Unescaped
  * ResultOf() now has a 3-arg overload that takes a description string for better
    error messages
  * CMake minimum increased to 3.5</changelog>
</package>
<package pkgid="ee19b965458382c94418f7c664da4ad96a1b125bbb72f82288afd00174146c38" name="gmock" arch="ppc64le">
  <version epoch="0" ver="1.12.1" rel="bp154.2.1"/>
  <changelog author="mpluskal@suse.com" date="1425038400">- Use source url
- Package libraries as libgoogletest0
- Run tests when building</changelog>
  <changelog author="mpluskal@suse.com" date="1425124800">- Correct typo in library name</changelog>
  <changelog author="mpluskal@suse.com" date="1440072000">- Update project and source url (now on github)
- Change library name, provides obsoletes should not be necessary
  as no released binary should link against it</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1513425600">- Update to version 1.8.0:
  * Update the value of GTEST_DIR to reflect the googletest dir.
  * Change the GTestDir marco value to reflect the new dir of
    googletest.
  * Read Bazel's $XML_OUTPUT_FILE environment variable
  * Restructure:
  - Test so each scenario is independent.
  - $XML_OUTPUT_FILE logic
  * Fixes:
  - Error C2440 'return' in gmock_test
    (gh#google/googletest#775).
  - Tests that return object which implement operator bool.
  - Operator precedence in GTEST_TEST_BOOLEAN_ with expressions
    that implement operator bool.
  - env_var_test to ignore XML_OUTPUT_FILE if already set.
  - Link that's returned when running tests
    (gh#google/googletest#714).
- Rework package turning it into a source package essencially, once
  its original intention is to provide source files for a testing
  framework, a pure development package itself. Aligning with
  upstream ease our job and avoid unexpected bugs.
- Drop libgtest0 and googletest-devel subpackages bringing gtest
  subpackage instead and obsoleting the previous ones, following
  the above change.
- Provide googlemock together with googletest now that upstream
  officially brought this project under gloogle's wings.
- Replace autoconf and automake BuildRequires by cmake and switch
  configure, make and make_install macros by cmake, cmake_jobs and
  cmake_install. Autotools are deprecated and cmake is recommended
  by upstream.
- Drop libtool BuildRequires and autoreconf call. With the adoption
  of cmake it's no longer need anymore.
- Drop googletest-enable-make-install.patch. No longer needed once
  make install is not used anymore.
- Add googletest-fix-cmake-libdir-install.patch for enabling the
  use of /usr/lib(64) instead of /usr/local/lib(64), once
  upstream's CMakeLists doesn't provide flexibility in this regard.
- Add googletest-rpmlintrc file to filter warnings about
  devel-file-in-non-devel-package, shlib-policy-missing-suffix and
  obsolete-not-provided as the package is a devel one itself now.</changelog>
  <changelog author="tiwai@suse.de" date="1514548800">- Fix the source (and put the download URL as a comment) for
  matching with the actual tarball file name.</changelog>
  <changelog author="adam.majer@suse.de" date="1542369600">- Update to version 1.8.1:
  * add pkg-config files
  * add --no_stacktrace_support for json-output-unittest
  * allow macros inside of parametrized test names.
  * support JSON output format in addition to XML
  * add options to parallelize builds
  * fix double free when building Gtest/GMock in shared libraries
    and linking a test executable with both.
  * 2.6.4 is the minimum CMake version
- cleanup spec file
- googletest-fix-cmake-libdir-install.patch: dropped, upstreamed</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1542456000">- Remove errant backslahes from description.
- Rewrite summaries without em dashes.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1581163200">- Update to version 1.10.0
  * Deprecated "....TEST_CASE" API in favor of "....TEST_SUITE".
    In a nutshell if you have code that uses something like
    "INSTANTIATE_TYPED_TEST_CASE_P " - this and all other
    "*_TEST_CASE " are now deprecated in favor of more standard
    _TEST_SUITE.
  * New powerful MOCK_METHOD macro.
    For example:
    (Old) MOCK_METHOD1(Bar, double(std::string s));
    (New) MOCK_METHOD(double, Bar, (std::string s), (override));
    So there is no need to count the parameters anymore.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1621252800">- Don't depend on python2, when we don't need it.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1641384000">- update to 1.11.0:
  * --gtest_brief shows only test failures in output
  * --gtest_fail_fast stops test execution on first failure
  * Failures in SetUpTestSuite and TearDownTestSuite now cause tests to fail
    rather than log
  * Uninstantiated TEST_P and TYPED_TEST_P now fail unless allowlisted using
    GTEST_ALLOW_UNINSTANTIATED_PARAMETERIZED_TEST
  * new matchers and mocking behavior, see
    https://github.com/google/googletest/releases/tag/release-1.11.0</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1643803200">- Add missing ldconfig calls in %post/%postun
- Enable unit tests on Tumbleweed (fails on 15.x)
- Update rpmlintrc for rpmlint 2.0</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1649419200">- Disable 2 warnings that are affected by GCC 12:
  gh#google/googletest#3792 and gh#google/googletest#3793.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1665057600">- update to 1.12.1:
  * Support for move-only values to Return
  * New matchers: WhenBase64Unescaped
  * ResultOf() now has a 3-arg overload that takes a description string for better
    error messages
  * CMake minimum increased to 3.5</changelog>
</package>
<package pkgid="7b6fd9bce5cfed2be719d2dbbbd9146eaac02d71c143e9dc16c553cdcabb057c" name="gmock" arch="s390x">
  <version epoch="0" ver="1.12.1" rel="bp154.2.1"/>
  <changelog author="mpluskal@suse.com" date="1425038400">- Use source url
- Package libraries as libgoogletest0
- Run tests when building</changelog>
  <changelog author="mpluskal@suse.com" date="1425124800">- Correct typo in library name</changelog>
  <changelog author="mpluskal@suse.com" date="1440072000">- Update project and source url (now on github)
- Change library name, provides obsoletes should not be necessary
  as no released binary should link against it</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1513425600">- Update to version 1.8.0:
  * Update the value of GTEST_DIR to reflect the googletest dir.
  * Change the GTestDir marco value to reflect the new dir of
    googletest.
  * Read Bazel's $XML_OUTPUT_FILE environment variable
  * Restructure:
  - Test so each scenario is independent.
  - $XML_OUTPUT_FILE logic
  * Fixes:
  - Error C2440 'return' in gmock_test
    (gh#google/googletest#775).
  - Tests that return object which implement operator bool.
  - Operator precedence in GTEST_TEST_BOOLEAN_ with expressions
    that implement operator bool.
  - env_var_test to ignore XML_OUTPUT_FILE if already set.
  - Link that's returned when running tests
    (gh#google/googletest#714).
- Rework package turning it into a source package essencially, once
  its original intention is to provide source files for a testing
  framework, a pure development package itself. Aligning with
  upstream ease our job and avoid unexpected bugs.
- Drop libgtest0 and googletest-devel subpackages bringing gtest
  subpackage instead and obsoleting the previous ones, following
  the above change.
- Provide googlemock together with googletest now that upstream
  officially brought this project under gloogle's wings.
- Replace autoconf and automake BuildRequires by cmake and switch
  configure, make and make_install macros by cmake, cmake_jobs and
  cmake_install. Autotools are deprecated and cmake is recommended
  by upstream.
- Drop libtool BuildRequires and autoreconf call. With the adoption
  of cmake it's no longer need anymore.
- Drop googletest-enable-make-install.patch. No longer needed once
  make install is not used anymore.
- Add googletest-fix-cmake-libdir-install.patch for enabling the
  use of /usr/lib(64) instead of /usr/local/lib(64), once
  upstream's CMakeLists doesn't provide flexibility in this regard.
- Add googletest-rpmlintrc file to filter warnings about
  devel-file-in-non-devel-package, shlib-policy-missing-suffix and
  obsolete-not-provided as the package is a devel one itself now.</changelog>
  <changelog author="tiwai@suse.de" date="1514548800">- Fix the source (and put the download URL as a comment) for
  matching with the actual tarball file name.</changelog>
  <changelog author="adam.majer@suse.de" date="1542369600">- Update to version 1.8.1:
  * add pkg-config files
  * add --no_stacktrace_support for json-output-unittest
  * allow macros inside of parametrized test names.
  * support JSON output format in addition to XML
  * add options to parallelize builds
  * fix double free when building Gtest/GMock in shared libraries
    and linking a test executable with both.
  * 2.6.4 is the minimum CMake version
- cleanup spec file
- googletest-fix-cmake-libdir-install.patch: dropped, upstreamed</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1542456000">- Remove errant backslahes from description.
- Rewrite summaries without em dashes.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1581163200">- Update to version 1.10.0
  * Deprecated "....TEST_CASE" API in favor of "....TEST_SUITE".
    In a nutshell if you have code that uses something like
    "INSTANTIATE_TYPED_TEST_CASE_P " - this and all other
    "*_TEST_CASE " are now deprecated in favor of more standard
    _TEST_SUITE.
  * New powerful MOCK_METHOD macro.
    For example:
    (Old) MOCK_METHOD1(Bar, double(std::string s));
    (New) MOCK_METHOD(double, Bar, (std::string s), (override));
    So there is no need to count the parameters anymore.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1621252800">- Don't depend on python2, when we don't need it.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1641384000">- update to 1.11.0:
  * --gtest_brief shows only test failures in output
  * --gtest_fail_fast stops test execution on first failure
  * Failures in SetUpTestSuite and TearDownTestSuite now cause tests to fail
    rather than log
  * Uninstantiated TEST_P and TYPED_TEST_P now fail unless allowlisted using
    GTEST_ALLOW_UNINSTANTIATED_PARAMETERIZED_TEST
  * new matchers and mocking behavior, see
    https://github.com/google/googletest/releases/tag/release-1.11.0</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1643803200">- Add missing ldconfig calls in %post/%postun
- Enable unit tests on Tumbleweed (fails on 15.x)
- Update rpmlintrc for rpmlint 2.0</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1649419200">- Disable 2 warnings that are affected by GCC 12:
  gh#google/googletest#3792 and gh#google/googletest#3793.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1665057600">- update to 1.12.1:
  * Support for move-only values to Return
  * New matchers: WhenBase64Unescaped
  * ResultOf() now has a 3-arg overload that takes a description string for better
    error messages
  * CMake minimum increased to 3.5</changelog>
</package>
<package pkgid="5719ce7d51f4b9d741a3c80fe2eb04b27bd4762c2524552d284fc75a0e28aa9a" name="gmock" arch="x86_64">
  <version epoch="0" ver="1.12.1" rel="bp154.2.1"/>
  <changelog author="mpluskal@suse.com" date="1425038400">- Use source url
- Package libraries as libgoogletest0
- Run tests when building</changelog>
  <changelog author="mpluskal@suse.com" date="1425124800">- Correct typo in library name</changelog>
  <changelog author="mpluskal@suse.com" date="1440072000">- Update project and source url (now on github)
- Change library name, provides obsoletes should not be necessary
  as no released binary should link against it</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1513425600">- Update to version 1.8.0:
  * Update the value of GTEST_DIR to reflect the googletest dir.
  * Change the GTestDir marco value to reflect the new dir of
    googletest.
  * Read Bazel's $XML_OUTPUT_FILE environment variable
  * Restructure:
  - Test so each scenario is independent.
  - $XML_OUTPUT_FILE logic
  * Fixes:
  - Error C2440 'return' in gmock_test
    (gh#google/googletest#775).
  - Tests that return object which implement operator bool.
  - Operator precedence in GTEST_TEST_BOOLEAN_ with expressions
    that implement operator bool.
  - env_var_test to ignore XML_OUTPUT_FILE if already set.
  - Link that's returned when running tests
    (gh#google/googletest#714).
- Rework package turning it into a source package essencially, once
  its original intention is to provide source files for a testing
  framework, a pure development package itself. Aligning with
  upstream ease our job and avoid unexpected bugs.
- Drop libgtest0 and googletest-devel subpackages bringing gtest
  subpackage instead and obsoleting the previous ones, following
  the above change.
- Provide googlemock together with googletest now that upstream
  officially brought this project under gloogle's wings.
- Replace autoconf and automake BuildRequires by cmake and switch
  configure, make and make_install macros by cmake, cmake_jobs and
  cmake_install. Autotools are deprecated and cmake is recommended
  by upstream.
- Drop libtool BuildRequires and autoreconf call. With the adoption
  of cmake it's no longer need anymore.
- Drop googletest-enable-make-install.patch. No longer needed once
  make install is not used anymore.
- Add googletest-fix-cmake-libdir-install.patch for enabling the
  use of /usr/lib(64) instead of /usr/local/lib(64), once
  upstream's CMakeLists doesn't provide flexibility in this regard.
- Add googletest-rpmlintrc file to filter warnings about
  devel-file-in-non-devel-package, shlib-policy-missing-suffix and
  obsolete-not-provided as the package is a devel one itself now.</changelog>
  <changelog author="tiwai@suse.de" date="1514548800">- Fix the source (and put the download URL as a comment) for
  matching with the actual tarball file name.</changelog>
  <changelog author="adam.majer@suse.de" date="1542369600">- Update to version 1.8.1:
  * add pkg-config files
  * add --no_stacktrace_support for json-output-unittest
  * allow macros inside of parametrized test names.
  * support JSON output format in addition to XML
  * add options to parallelize builds
  * fix double free when building Gtest/GMock in shared libraries
    and linking a test executable with both.
  * 2.6.4 is the minimum CMake version
- cleanup spec file
- googletest-fix-cmake-libdir-install.patch: dropped, upstreamed</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1542456000">- Remove errant backslahes from description.
- Rewrite summaries without em dashes.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1581163200">- Update to version 1.10.0
  * Deprecated "....TEST_CASE" API in favor of "....TEST_SUITE".
    In a nutshell if you have code that uses something like
    "INSTANTIATE_TYPED_TEST_CASE_P " - this and all other
    "*_TEST_CASE " are now deprecated in favor of more standard
    _TEST_SUITE.
  * New powerful MOCK_METHOD macro.
    For example:
    (Old) MOCK_METHOD1(Bar, double(std::string s));
    (New) MOCK_METHOD(double, Bar, (std::string s), (override));
    So there is no need to count the parameters anymore.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1621252800">- Don't depend on python2, when we don't need it.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1641384000">- update to 1.11.0:
  * --gtest_brief shows only test failures in output
  * --gtest_fail_fast stops test execution on first failure
  * Failures in SetUpTestSuite and TearDownTestSuite now cause tests to fail
    rather than log
  * Uninstantiated TEST_P and TYPED_TEST_P now fail unless allowlisted using
    GTEST_ALLOW_UNINSTANTIATED_PARAMETERIZED_TEST
  * new matchers and mocking behavior, see
    https://github.com/google/googletest/releases/tag/release-1.11.0</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1643803200">- Add missing ldconfig calls in %post/%postun
- Enable unit tests on Tumbleweed (fails on 15.x)
- Update rpmlintrc for rpmlint 2.0</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1649419200">- Disable 2 warnings that are affected by GCC 12:
  gh#google/googletest#3792 and gh#google/googletest#3793.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1665057600">- update to 1.12.1:
  * Support for move-only values to Return
  * New matchers: WhenBase64Unescaped
  * ResultOf() now has a 3-arg overload that takes a description string for better
    error messages
  * CMake minimum increased to 3.5</changelog>
</package>
<package pkgid="186bc8d4f45a93723f1838730e21f71ded29e31ba59b5b647b7f71c85c254d8f" name="gnuhealth" arch="noarch">
  <version epoch="0" ver="4.0.4" rel="bp154.2.3.2"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1585656000">- update for boo#1167126, 1167128</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1586088000">- correction for service file</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1587556800">- pre-release of 3.6.4 covering improved diagnostics on COVID-19
  lab1.diff and lab2.diff added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1589630400">- Version 3.6.4
  additional functionality for COVID-19 and epidemiology tracing
  new epidemiology evaluations
  lab1.diff and lab2.diff removed, included in new version</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1589803200">- python3-matplotlib got lost.....added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1589889600">- version 3.6.4 of gnuhealth-control</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1590062400">- fixed different behviour of bsdtar in script and shell (gnuhealth-control)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1593086400">- gnuhealth-control updated to 3.6.5-openSUSE
  * change of translation server for language packs</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1595332800">- Readme renamed (SUSE -&gt; openSUSE)
  gnuhealth: Link to oS wiki added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1598011200">- version 3.6.5
  HMIS: Update to 3.6.5 including ICD10 codes 2020</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1608638400">- Documentation added to package description</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1613390400">- version 3.8.0
  dentistry package added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1613476800">- python_dependency_generator removed</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1614427200">- add upstream signing key and verify source signature</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1616587200">- Variable for EDITOR set</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1618574400">- update to gnuhealth-control</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1646568000">- version 4.0.0
  * based on Tryton 6.0
  * Improved ergonomics on the GTK client
  * New HELP command that allows offline and contextualized documentation
  * WebDAV and CalDAV packages are fully integrated in GH (no links)
  * Weblate now holds 34 language teams!
  * Removed obsoleted binary ODT (except for some charts)
  * Improved integration with OpenStreetMap (OSM)
  * Improved surgery and patient evaluation flows
  * New health service Dx imaging package
  * Update person gender list
  * Add medical evaluations to health services
  * Include (optional) expiration date on the person ID
  * Add context field for Dx Imaging and Lab tests</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648036800">- version 4.0.2
  * Use ODT binary format for pediatric growth charts reports
  * Force Beren library to 0.7.0 to make it compatible with Python 3.6
  * Allow Python minor versions &gt; 10 (ej Python 3.10.2)
  * fix webdav import error, bug #62165</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648900800">- version 4.0.3
  * Remove pinning from vobject library version (Vanilla installation)
  * fix bug #62235: Traceback on default health professional</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1655380800">- version 4.0.4
  * various bugfixes - see changelog for details</changelog>
</package>
<package pkgid="a278aff638d465243ded05aafd3ac0cb7eb63d1b214e0d442015fa72548bebcd" name="gnuhealth" arch="src">
  <version epoch="0" ver="4.0.4" rel="bp154.2.3.2"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1585656000">- update for boo#1167126, 1167128</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1586088000">- correction for service file</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1587556800">- pre-release of 3.6.4 covering improved diagnostics on COVID-19
  lab1.diff and lab2.diff added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1589630400">- Version 3.6.4
  additional functionality for COVID-19 and epidemiology tracing
  new epidemiology evaluations
  lab1.diff and lab2.diff removed, included in new version</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1589803200">- python3-matplotlib got lost.....added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1589889600">- version 3.6.4 of gnuhealth-control</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1590062400">- fixed different behviour of bsdtar in script and shell (gnuhealth-control)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1593086400">- gnuhealth-control updated to 3.6.5-openSUSE
  * change of translation server for language packs</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1595332800">- Readme renamed (SUSE -&gt; openSUSE)
  gnuhealth: Link to oS wiki added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1598011200">- version 3.6.5
  HMIS: Update to 3.6.5 including ICD10 codes 2020</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1608638400">- Documentation added to package description</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1613390400">- version 3.8.0
  dentistry package added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1613476800">- python_dependency_generator removed</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1614427200">- add upstream signing key and verify source signature</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1616587200">- Variable for EDITOR set</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1618574400">- update to gnuhealth-control</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1646568000">- version 4.0.0
  * based on Tryton 6.0
  * Improved ergonomics on the GTK client
  * New HELP command that allows offline and contextualized documentation
  * WebDAV and CalDAV packages are fully integrated in GH (no links)
  * Weblate now holds 34 language teams!
  * Removed obsoleted binary ODT (except for some charts)
  * Improved integration with OpenStreetMap (OSM)
  * Improved surgery and patient evaluation flows
  * New health service Dx imaging package
  * Update person gender list
  * Add medical evaluations to health services
  * Include (optional) expiration date on the person ID
  * Add context field for Dx Imaging and Lab tests</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648036800">- version 4.0.2
  * Use ODT binary format for pediatric growth charts reports
  * Force Beren library to 0.7.0 to make it compatible with Python 3.6
  * Allow Python minor versions &gt; 10 (ej Python 3.10.2)
  * fix webdav import error, bug #62165</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648900800">- version 4.0.3
  * Remove pinning from vobject library version (Vanilla installation)
  * fix bug #62235: Traceback on default health professional</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1655380800">- version 4.0.4
  * various bugfixes - see changelog for details</changelog>
</package>
<package pkgid="f901e0e7a071d6944aa39f0b73db0c409e4537c303c3f87feb5d687ca853620a" name="gnuhealth" arch="noarch">
  <version epoch="0" ver="4.0.5" rel="bp154.2.6.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1586088000">- correction for service file</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1587556800">- pre-release of 3.6.4 covering improved diagnostics on COVID-19
  lab1.diff and lab2.diff added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1589630400">- Version 3.6.4
  additional functionality for COVID-19 and epidemiology tracing
  new epidemiology evaluations
  lab1.diff and lab2.diff removed, included in new version</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1589803200">- python3-matplotlib got lost.....added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1589889600">- version 3.6.4 of gnuhealth-control</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1590062400">- fixed different behviour of bsdtar in script and shell (gnuhealth-control)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1593086400">- gnuhealth-control updated to 3.6.5-openSUSE
  * change of translation server for language packs</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1595332800">- Readme renamed (SUSE -&gt; openSUSE)
  gnuhealth: Link to oS wiki added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1598011200">- version 3.6.5
  HMIS: Update to 3.6.5 including ICD10 codes 2020</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1608638400">- Documentation added to package description</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1613390400">- version 3.8.0
  dentistry package added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1613476800">- python_dependency_generator removed</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1614427200">- add upstream signing key and verify source signature</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1616587200">- Variable for EDITOR set</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1618574400">- update to gnuhealth-control</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1646568000">- version 4.0.0
  * based on Tryton 6.0
  * Improved ergonomics on the GTK client
  * New HELP command that allows offline and contextualized documentation
  * WebDAV and CalDAV packages are fully integrated in GH (no links)
  * Weblate now holds 34 language teams!
  * Removed obsoleted binary ODT (except for some charts)
  * Improved integration with OpenStreetMap (OSM)
  * Improved surgery and patient evaluation flows
  * New health service Dx imaging package
  * Update person gender list
  * Add medical evaluations to health services
  * Include (optional) expiration date on the person ID
  * Add context field for Dx Imaging and Lab tests</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648036800">- version 4.0.2
  * Use ODT binary format for pediatric growth charts reports
  * Force Beren library to 0.7.0 to make it compatible with Python 3.6
  * Allow Python minor versions &gt; 10 (ej Python 3.10.2)
  * fix webdav import error, bug #62165</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648900800">- version 4.0.3
  * Remove pinning from vobject library version (Vanilla installation)
  * fix bug #62235: Traceback on default health professional</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1655380800">- version 4.0.4
  * various bugfixes - see changelog for details</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1673265600">- Version 4.0.5
  * health_crypto: Fix bug #63558: Fault: 'NoneType' object has no attribute 'name'
  * Fix bug #63557: Missing view architecture for ('calendar.category', None, 'tree')
  * Fix bug #63533: Model 'gnuhealth.pol' is missing a default access
  * Fix bug #63532: health_caldav misses requiremnt vobject in setup.py
  * Fix bug #63517: Fault: 'webdav' is not in list
  * Fix bug #62777: The term health prof used for both initiating and signing professional in patient evaluation
  * Fix bug #62634: Missing Spanish Translations</changelog>
</package>
<package pkgid="7f6121950367dac2b95bf8fc9b9909df296656424af65e758d41c101da6b6b3e" name="gnuhealth" arch="src">
  <version epoch="0" ver="4.0.5" rel="bp154.2.6.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1586088000">- correction for service file</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1587556800">- pre-release of 3.6.4 covering improved diagnostics on COVID-19
  lab1.diff and lab2.diff added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1589630400">- Version 3.6.4
  additional functionality for COVID-19 and epidemiology tracing
  new epidemiology evaluations
  lab1.diff and lab2.diff removed, included in new version</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1589803200">- python3-matplotlib got lost.....added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1589889600">- version 3.6.4 of gnuhealth-control</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1590062400">- fixed different behviour of bsdtar in script and shell (gnuhealth-control)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1593086400">- gnuhealth-control updated to 3.6.5-openSUSE
  * change of translation server for language packs</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1595332800">- Readme renamed (SUSE -&gt; openSUSE)
  gnuhealth: Link to oS wiki added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1598011200">- version 3.6.5
  HMIS: Update to 3.6.5 including ICD10 codes 2020</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1608638400">- Documentation added to package description</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1613390400">- version 3.8.0
  dentistry package added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1613476800">- python_dependency_generator removed</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1614427200">- add upstream signing key and verify source signature</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1616587200">- Variable for EDITOR set</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1618574400">- update to gnuhealth-control</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1646568000">- version 4.0.0
  * based on Tryton 6.0
  * Improved ergonomics on the GTK client
  * New HELP command that allows offline and contextualized documentation
  * WebDAV and CalDAV packages are fully integrated in GH (no links)
  * Weblate now holds 34 language teams!
  * Removed obsoleted binary ODT (except for some charts)
  * Improved integration with OpenStreetMap (OSM)
  * Improved surgery and patient evaluation flows
  * New health service Dx imaging package
  * Update person gender list
  * Add medical evaluations to health services
  * Include (optional) expiration date on the person ID
  * Add context field for Dx Imaging and Lab tests</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648036800">- version 4.0.2
  * Use ODT binary format for pediatric growth charts reports
  * Force Beren library to 0.7.0 to make it compatible with Python 3.6
  * Allow Python minor versions &gt; 10 (ej Python 3.10.2)
  * fix webdav import error, bug #62165</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648900800">- version 4.0.3
  * Remove pinning from vobject library version (Vanilla installation)
  * fix bug #62235: Traceback on default health professional</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1655380800">- version 4.0.4
  * various bugfixes - see changelog for details</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1673265600">- Version 4.0.5
  * health_crypto: Fix bug #63558: Fault: 'NoneType' object has no attribute 'name'
  * Fix bug #63557: Missing view architecture for ('calendar.category', None, 'tree')
  * Fix bug #63533: Model 'gnuhealth.pol' is missing a default access
  * Fix bug #63532: health_caldav misses requiremnt vobject in setup.py
  * Fix bug #63517: Fault: 'webdav' is not in list
  * Fix bug #62777: The term health prof used for both initiating and signing professional in patient evaluation
  * Fix bug #62634: Missing Spanish Translations</changelog>
</package>
<package pkgid="b13d055d4250591dfb74680dce4defcc2533a19ab3ef8c2826ae8aa2483165a8" name="gnuhealth-client" arch="noarch">
  <version epoch="0" ver="4.0.1" rel="bp154.2.3.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1548590400">- Version 3.4.3
  * Fix bug #55458: Command line gets activated with shift Z
  * many bugfixes from tryton client</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1554206400">- link to python2-GooCalendar (remains python2) boo#1131096</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1555761600">- version 3.4.4 - Security fix boo#1131707</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1562846400">- plugin_frl updated to version 3.4.1</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1573473600">- camera.diff added
  plugins changed from *latest* to version 3.4.x</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1574337600">- version 3.6.0</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1575201600">- version 3.6.2 - various bugfixes</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1575288000">- version 3.6.3 - various performance improvements</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1575720000">- version 3.6.4 #57371  Error when assigning a health professional on the work schedule</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1577188800">- version 3.6.5: Fix variable name to values</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1577966400">- update frl plugin to 3.6.1</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1580472000">- version 3.6.6
  * Fix bug #57682: GTK Client - CLI is activated when pressing Shift+Z
  * Add GNU Health shortcuts to the help window</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1583064000">- version 3.6.8
  * Removed the deprecated App Menu in favor of the Menu Bar.
  * Migrate from obsolete Table to Grid
  * Fix the footer
  * Include accelerator for preferences (ctrl+shift+p) and fix
    accelerator for shortcuts (ctrl+shift+F1)
  * Avoid maximizing application at startup
  * Remove unused fast tabbing option from menu
  * Allow setting the GH command line on the bottom again (cli_position =
    bottom). By default is top.</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1589716800">- version 3.6.9
  various bugfixes (including boo#1170553)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1604750400">- remove __pycache__ from plugins (boo#1178453)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1613390400">- version 3.8.1
  spec-file updated to use new python macros</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1614254400">- python_dependency_generator removed (misses dependencies....)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1614427200">- add upstream signing key and verify source signature</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1646568000">- version 4.0.0
  * based on Tryton 6.0
  * for details see CHANGELOG</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1655380800">- version 4.0.1
  * various bug fixes, see changelog
  * plugins adapted and renamed for 4.0</changelog>
</package>
<package pkgid="b9ebef2d8d95a4ddd749c192888a376dc8423053d191225e02ed158486a3bf5d" name="gnuhealth-client" arch="src">
  <version epoch="0" ver="4.0.1" rel="bp154.2.3.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1548590400">- Version 3.4.3
  * Fix bug #55458: Command line gets activated with shift Z
  * many bugfixes from tryton client</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1554206400">- link to python2-GooCalendar (remains python2) boo#1131096</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1555761600">- version 3.4.4 - Security fix boo#1131707</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1562846400">- plugin_frl updated to version 3.4.1</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1573473600">- camera.diff added
  plugins changed from *latest* to version 3.4.x</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1574337600">- version 3.6.0</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1575201600">- version 3.6.2 - various bugfixes</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1575288000">- version 3.6.3 - various performance improvements</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1575720000">- version 3.6.4 #57371  Error when assigning a health professional on the work schedule</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1577188800">- version 3.6.5: Fix variable name to values</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1577966400">- update frl plugin to 3.6.1</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1580472000">- version 3.6.6
  * Fix bug #57682: GTK Client - CLI is activated when pressing Shift+Z
  * Add GNU Health shortcuts to the help window</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1583064000">- version 3.6.8
  * Removed the deprecated App Menu in favor of the Menu Bar.
  * Migrate from obsolete Table to Grid
  * Fix the footer
  * Include accelerator for preferences (ctrl+shift+p) and fix
    accelerator for shortcuts (ctrl+shift+F1)
  * Avoid maximizing application at startup
  * Remove unused fast tabbing option from menu
  * Allow setting the GH command line on the bottom again (cli_position =
    bottom). By default is top.</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1589716800">- version 3.6.9
  various bugfixes (including boo#1170553)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1604750400">- remove __pycache__ from plugins (boo#1178453)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1613390400">- version 3.8.1
  spec-file updated to use new python macros</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1614254400">- python_dependency_generator removed (misses dependencies....)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1614427200">- add upstream signing key and verify source signature</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1646568000">- version 4.0.0
  * based on Tryton 6.0
  * for details see CHANGELOG</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1655380800">- version 4.0.1
  * various bug fixes, see changelog
  * plugins adapted and renamed for 4.0</changelog>
</package>
<package pkgid="92270a86874db1e90039d73c9de9090925c153cbb9129e6801e7b31eb7e6150c" name="gnuhealth-orthanc" arch="noarch">
  <version epoch="0" ver="4.0.4" rel="bp154.2.3.2"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1585656000">- update for boo#1167126, 1167128</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1586088000">- correction for service file</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1587556800">- pre-release of 3.6.4 covering improved diagnostics on COVID-19
  lab1.diff and lab2.diff added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1589630400">- Version 3.6.4
  additional functionality for COVID-19 and epidemiology tracing
  new epidemiology evaluations
  lab1.diff and lab2.diff removed, included in new version</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1589803200">- python3-matplotlib got lost.....added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1589889600">- version 3.6.4 of gnuhealth-control</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1590062400">- fixed different behviour of bsdtar in script and shell (gnuhealth-control)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1593086400">- gnuhealth-control updated to 3.6.5-openSUSE
  * change of translation server for language packs</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1595332800">- Readme renamed (SUSE -&gt; openSUSE)
  gnuhealth: Link to oS wiki added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1598011200">- version 3.6.5
  HMIS: Update to 3.6.5 including ICD10 codes 2020</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1608638400">- Documentation added to package description</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1613390400">- version 3.8.0
  dentistry package added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1613476800">- python_dependency_generator removed</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1614427200">- add upstream signing key and verify source signature</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1616587200">- Variable for EDITOR set</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1618574400">- update to gnuhealth-control</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1646568000">- version 4.0.0
  * based on Tryton 6.0
  * Improved ergonomics on the GTK client
  * New HELP command that allows offline and contextualized documentation
  * WebDAV and CalDAV packages are fully integrated in GH (no links)
  * Weblate now holds 34 language teams!
  * Removed obsoleted binary ODT (except for some charts)
  * Improved integration with OpenStreetMap (OSM)
  * Improved surgery and patient evaluation flows
  * New health service Dx imaging package
  * Update person gender list
  * Add medical evaluations to health services
  * Include (optional) expiration date on the person ID
  * Add context field for Dx Imaging and Lab tests</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648036800">- version 4.0.2
  * Use ODT binary format for pediatric growth charts reports
  * Force Beren library to 0.7.0 to make it compatible with Python 3.6
  * Allow Python minor versions &gt; 10 (ej Python 3.10.2)
  * fix webdav import error, bug #62165</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648900800">- version 4.0.3
  * Remove pinning from vobject library version (Vanilla installation)
  * fix bug #62235: Traceback on default health professional</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1655380800">- version 4.0.4
  * various bugfixes - see changelog for details</changelog>
</package>
<package pkgid="fac82abcc71c6cb43e96233fc33a7b60db4ca05afe695f3e7734f02d90c16779" name="gnuhealth-orthanc" arch="noarch">
  <version epoch="0" ver="4.0.5" rel="bp154.2.6.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1586088000">- correction for service file</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1587556800">- pre-release of 3.6.4 covering improved diagnostics on COVID-19
  lab1.diff and lab2.diff added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1589630400">- Version 3.6.4
  additional functionality for COVID-19 and epidemiology tracing
  new epidemiology evaluations
  lab1.diff and lab2.diff removed, included in new version</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1589803200">- python3-matplotlib got lost.....added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1589889600">- version 3.6.4 of gnuhealth-control</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1590062400">- fixed different behviour of bsdtar in script and shell (gnuhealth-control)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1593086400">- gnuhealth-control updated to 3.6.5-openSUSE
  * change of translation server for language packs</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1595332800">- Readme renamed (SUSE -&gt; openSUSE)
  gnuhealth: Link to oS wiki added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1598011200">- version 3.6.5
  HMIS: Update to 3.6.5 including ICD10 codes 2020</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1608638400">- Documentation added to package description</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1613390400">- version 3.8.0
  dentistry package added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1613476800">- python_dependency_generator removed</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1614427200">- add upstream signing key and verify source signature</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1616587200">- Variable for EDITOR set</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1618574400">- update to gnuhealth-control</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1646568000">- version 4.0.0
  * based on Tryton 6.0
  * Improved ergonomics on the GTK client
  * New HELP command that allows offline and contextualized documentation
  * WebDAV and CalDAV packages are fully integrated in GH (no links)
  * Weblate now holds 34 language teams!
  * Removed obsoleted binary ODT (except for some charts)
  * Improved integration with OpenStreetMap (OSM)
  * Improved surgery and patient evaluation flows
  * New health service Dx imaging package
  * Update person gender list
  * Add medical evaluations to health services
  * Include (optional) expiration date on the person ID
  * Add context field for Dx Imaging and Lab tests</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648036800">- version 4.0.2
  * Use ODT binary format for pediatric growth charts reports
  * Force Beren library to 0.7.0 to make it compatible with Python 3.6
  * Allow Python minor versions &gt; 10 (ej Python 3.10.2)
  * fix webdav import error, bug #62165</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648900800">- version 4.0.3
  * Remove pinning from vobject library version (Vanilla installation)
  * fix bug #62235: Traceback on default health professional</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1655380800">- version 4.0.4
  * various bugfixes - see changelog for details</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1673265600">- Version 4.0.5
  * health_crypto: Fix bug #63558: Fault: 'NoneType' object has no attribute 'name'
  * Fix bug #63557: Missing view architecture for ('calendar.category', None, 'tree')
  * Fix bug #63533: Model 'gnuhealth.pol' is missing a default access
  * Fix bug #63532: health_caldav misses requiremnt vobject in setup.py
  * Fix bug #63517: Fault: 'webdav' is not in list
  * Fix bug #62777: The term health prof used for both initiating and signing professional in patient evaluation
  * Fix bug #62634: Missing Spanish Translations</changelog>
</package>
<package pkgid="9bab69186709abd6330a25ce3848f64128cd473197325f6a5e538758c772a0f0" name="googletest" arch="src">
  <version epoch="0" ver="1.12.1" rel="bp154.2.1"/>
  <changelog author="ftake@geeko.jp" date="1310212800">- Initial import
  * Upstream version: 1.6.0</changelog>
  <changelog author="tiwai@suse.de" date="1312891200">- Add missing Group to gtest-devel
- Add missing BuildRoot (for building with older distros)
- Clean up spec file</changelog>
  <changelog author="i@marguerite.su" date="1344772800">- further clean spec.
- enable build shared libraries.</changelog>
  <changelog author="i@marguerite.su" date="1344772801">- force sles build static libraries, else a lot of inner test can't build.</changelog>
  <changelog author="i@marguerite.su" date="1344772802">- rename.</changelog>
  <changelog author="i@marguerite.su" date="1384171200">- update version 1.7.0
  * New feature: death tests are supported on OpenBSD and in iOS
    simulator now.
  * New feature: Google Test now implements a protocol to allow
    a test runner to detect that a test program has exited
    prematurely and report it as a failure (before it would be
    falsely reported as a success if the exit code is 0).
  * New feature: Test::RecordProperty() can now be used outside of the
    lifespan of a test method, in which case it will be attributed to
    the current test case or the test program in the XML report.
  * New feature (potentially breaking): --gtest_list_tests now prints
    the type parameters and value parameters for each test.
  * Improvement: char pointers and char arrays are now escaped properly
    in failure messages.
  * Improvement: failure summary in XML reports now includes file and
    line information.
  * Improvement: the &lt;testsuites&gt; XML element now has a timestamp attribute.
  * Improvement: When --gtest_filter is specified, XML report now doesn't
    contain information about tests that are filtered out.
  * Fixed the bug where long --gtest_filter flag values are truncated in
    death tests.
  * Potentially breaking change: RUN_ALL_TESTS() is now implemented as a
    function instead of a macro in order to work better with Clang.
  * Compatibility fixes with C++ 11 and various platforms.
  * Bug/warning fixes.</changelog>
  <changelog author="i@marguerite.su" date="1404648000">- add patch: googletest-enable-make-install.patch
  * use standard procedure to install googletest.
- add scripts/gtest-config to installation
  * used by many programs to find gtest CFLAGS and etc.
- install shared libraries for sles too</changelog>
  <changelog author="mpluskal@suse.com" date="1425038400">- Use source url
- Package libraries as libgoogletest0
- Run tests when building</changelog>
  <changelog author="mpluskal@suse.com" date="1425124800">- Correct typo in library name</changelog>
  <changelog author="mpluskal@suse.com" date="1440072000">- Update project and source url (now on github)
- Change library name, provides obsoletes should not be necessary
  as no released binary should link against it</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1513425600">- Update to version 1.8.0:
  * Update the value of GTEST_DIR to reflect the googletest dir.
  * Change the GTestDir marco value to reflect the new dir of
    googletest.
  * Read Bazel's $XML_OUTPUT_FILE environment variable
  * Restructure:
  - Test so each scenario is independent.
  - $XML_OUTPUT_FILE logic
  * Fixes:
  - Error C2440 'return' in gmock_test
    (gh#google/googletest#775).
  - Tests that return object which implement operator bool.
  - Operator precedence in GTEST_TEST_BOOLEAN_ with expressions
    that implement operator bool.
  - env_var_test to ignore XML_OUTPUT_FILE if already set.
  - Link that's returned when running tests
    (gh#google/googletest#714).
- Rework package turning it into a source package essencially, once
  its original intention is to provide source files for a testing
  framework, a pure development package itself. Aligning with
  upstream ease our job and avoid unexpected bugs.
- Drop libgtest0 and googletest-devel subpackages bringing gtest
  subpackage instead and obsoleting the previous ones, following
  the above change.
- Provide googlemock together with googletest now that upstream
  officially brought this project under gloogle's wings.
- Replace autoconf and automake BuildRequires by cmake and switch
  configure, make and make_install macros by cmake, cmake_jobs and
  cmake_install. Autotools are deprecated and cmake is recommended
  by upstream.
- Drop libtool BuildRequires and autoreconf call. With the adoption
  of cmake it's no longer need anymore.
- Drop googletest-enable-make-install.patch. No longer needed once
  make install is not used anymore.
- Add googletest-fix-cmake-libdir-install.patch for enabling the
  use of /usr/lib(64) instead of /usr/local/lib(64), once
  upstream's CMakeLists doesn't provide flexibility in this regard.
- Add googletest-rpmlintrc file to filter warnings about
  devel-file-in-non-devel-package, shlib-policy-missing-suffix and
  obsolete-not-provided as the package is a devel one itself now.</changelog>
  <changelog author="tiwai@suse.de" date="1514548800">- Fix the source (and put the download URL as a comment) for
  matching with the actual tarball file name.</changelog>
  <changelog author="adam.majer@suse.de" date="1542369600">- Update to version 1.8.1:
  * add pkg-config files
  * add --no_stacktrace_support for json-output-unittest
  * allow macros inside of parametrized test names.
  * support JSON output format in addition to XML
  * add options to parallelize builds
  * fix double free when building Gtest/GMock in shared libraries
    and linking a test executable with both.
  * 2.6.4 is the minimum CMake version
- cleanup spec file
- googletest-fix-cmake-libdir-install.patch: dropped, upstreamed</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1542456000">- Remove errant backslahes from description.
- Rewrite summaries without em dashes.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1581163200">- Update to version 1.10.0
  * Deprecated "....TEST_CASE" API in favor of "....TEST_SUITE".
    In a nutshell if you have code that uses something like
    "INSTANTIATE_TYPED_TEST_CASE_P " - this and all other
    "*_TEST_CASE " are now deprecated in favor of more standard
    _TEST_SUITE.
  * New powerful MOCK_METHOD macro.
    For example:
    (Old) MOCK_METHOD1(Bar, double(std::string s));
    (New) MOCK_METHOD(double, Bar, (std::string s), (override));
    So there is no need to count the parameters anymore.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1621252800">- Don't depend on python2, when we don't need it.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1641384000">- update to 1.11.0:
  * --gtest_brief shows only test failures in output
  * --gtest_fail_fast stops test execution on first failure
  * Failures in SetUpTestSuite and TearDownTestSuite now cause tests to fail
    rather than log
  * Uninstantiated TEST_P and TYPED_TEST_P now fail unless allowlisted using
    GTEST_ALLOW_UNINSTANTIATED_PARAMETERIZED_TEST
  * new matchers and mocking behavior, see
    https://github.com/google/googletest/releases/tag/release-1.11.0</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1643803200">- Add missing ldconfig calls in %post/%postun
- Enable unit tests on Tumbleweed (fails on 15.x)
- Update rpmlintrc for rpmlint 2.0</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1649419200">- Disable 2 warnings that are affected by GCC 12:
  gh#google/googletest#3792 and gh#google/googletest#3793.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1665057600">- update to 1.12.1:
  * Support for move-only values to Return
  * New matchers: WhenBase64Unescaped
  * ResultOf() now has a 3-arg overload that takes a description string for better
    error messages
  * CMake minimum increased to 3.5</changelog>
</package>
<package pkgid="0c21727dfaa94d9d202bfa70ad03be581bd2015889eccbbe671a1db5bcc99f45" name="gssntlmssp" arch="aarch64">
  <version epoch="0" ver="1.2.0" rel="bp154.2.3.1"/>
  <changelog author="Simo Sorce &lt;simo@samba.org&gt;" date="1389528000">- New upstream release 0.3.0:
  * Added support for NTLMv1 Signing and Sealing completing full coverage
    of the NTLM protocol
  * Added a number of GSSAPI calls to inquire, export and import context and
    credentials, in preparation for making it work with GSS-Proxy
  * Various fixes memleak and other fixes</changelog>
  <changelog author="Simo Sorce &lt;simo@samba.org&gt;" date="1390737600">- Fixes #1058025
- New upstream release 0.3.1:
  * Fix segfault in init context.</changelog>
  <changelog author="Simo Sorce &lt;simo@samba.org&gt;" date="1424692800">- Update EPEL to latest version</changelog>
  <changelog author="Simo Sorce &lt;simo@samba.org&gt;" date="1464955200">- New upstream release 0.7.0:
  * Return the actual_mech_type when requested
  * Add test to check actual_mech is actually returned
  * Fix gss_inquire_cred with no creds
  * Return actual mech on accept context too
  * Add test for accept returning mech
  * Add placeholder inquire_name
  * Fix a regression in error handling
  * Check that we are actually asking for a known oid
  * Move setting seq numbers to a spearate function
  * Add context extension to reset crypto state</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt;" date="1555588800">- New upstream release 0.8.0:
  * Add compatibility with OpenSSL 1.1.0
  * Port some documentation into the tree
  * Rename and split the README file
  * Add support for RFC5801
  * Add support to return SSF value</changelog>
  <changelog author="Simona Avornicesei &lt;simona@avornicesei.com&gt;" date="1556020800">- build GSSNTLMSSP package v0.8.0 from https://pagure.io/gssntlmssp</changelog>
  <changelog author="Simona Avornicesei &lt;simona@avornicesei.com&gt;" date="1565784000">- Fixed build on OpenSUSE Tumbleweed</changelog>
  <changelog author="Simona Avornicesei &lt;simona@avornicesei.com&gt;" date="1565784001">- Fixed build on Fedora / CentOS</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1582804800">- Specfile cleanup</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1676462400">- Adapt license changes from upstream
  * LGPL-3.0-or-later -&gt; ISC
- Upstream moved to github
- Update to version 1.2.0
  * Implement gss_set_cred_option.
  * Allow to gss_wrap even if NEGOTIATE_SEAL is not negotiated.
  * Move HMAC code to OpenSSL EVP API.
  * Fix crash bug when acceptor credentials are NULL.
  * Translations update from Fedora Weblate.
  Fix CVE:
  * CVE-2023-25563 (boo#1208278): multiple out-of-bounds read
    when decoding NTLM fields.
  * CVE-2023-25564 (boo#1208279): memory corruption when decoding
    UTF16 strings.
  * CVE-2023-25565 (boo#1208280): incorrect free when decoding
    target information.
  * CVE-2023-25566 (boo#1208281): memory leak when parsing
    usernames.
  * CVE-2023-25567 (boo#1208282): out-of-bounds read when
    decoding target information.
- Update to version 1.1
  * various build fixes and better compatibility when a MIC is
    requested.
- Update to version 1.0
  * Fix test_gssapi_rfc5587.
  * Actually run tests with make check.
  * Add two tests around NTLMSSP_NEGOTIATE_LMKEY.
  * Refine LM compatibility level logic.
  * Refactor the gssntlm_required_security function.
  * Implement reading LM/NT hashes.
  * Add test for smpasswd-like user files.
  * Return confidentiality status.
  * Fix segfault in sign/seal functions.
  * Fix dummy signature generation.
  * Use UCS16LE instead of UCS-2LE.
  * Provide a zero lm key if the password is too long.
  * Completely omit CBs AV pairs when no CB provided.
  * Change license to the more permissive ISC.
  * Do not require cached users with winbind.
  * Add ability to pass keyfile via cred store.
  * Remove unused parts of Makefile.am.
  * Move attribute names to allocated strings.
  * Adjust serialization for name attributes.
  * Fix crash in acquiring credentials.
  * Fix fallback to external_creds interface.
  * Introduce parse_user_name() function.
  * Add test for parse_user_name.
  * Change how we assemble user names in ASC.
  * Use thread local storage for winbind context.
  * Make per thread winbind context optional.
  * Fixed memleak of usr_cred.
  * Support get_sids request via name attributes.
  * Fixed memory leaks found by valgrind.
- Update to version 0.9
  * add support for getting session key.
  * Add gss_inquire_attrs_for_mech().
  * Return actual data for RFC5587 API.
  * Add new Windows version flags.
  * Add Key exchange also when wanting integrity only.
  * Drop support for GSS_C_MA_NOT_DFLT_MECH.</changelog>
</package>
<package pkgid="4336ea71be2aa40bd3822106537401aa946f04ced0570f02e6fc3e1d873581ed" name="gssntlmssp" arch="i586">
  <version epoch="0" ver="1.2.0" rel="bp154.2.3.1"/>
  <changelog author="Simo Sorce &lt;simo@samba.org&gt;" date="1389528000">- New upstream release 0.3.0:
  * Added support for NTLMv1 Signing and Sealing completing full coverage
    of the NTLM protocol
  * Added a number of GSSAPI calls to inquire, export and import context and
    credentials, in preparation for making it work with GSS-Proxy
  * Various fixes memleak and other fixes</changelog>
  <changelog author="Simo Sorce &lt;simo@samba.org&gt;" date="1390737600">- Fixes #1058025
- New upstream release 0.3.1:
  * Fix segfault in init context.</changelog>
  <changelog author="Simo Sorce &lt;simo@samba.org&gt;" date="1424692800">- Update EPEL to latest version</changelog>
  <changelog author="Simo Sorce &lt;simo@samba.org&gt;" date="1464955200">- New upstream release 0.7.0:
  * Return the actual_mech_type when requested
  * Add test to check actual_mech is actually returned
  * Fix gss_inquire_cred with no creds
  * Return actual mech on accept context too
  * Add test for accept returning mech
  * Add placeholder inquire_name
  * Fix a regression in error handling
  * Check that we are actually asking for a known oid
  * Move setting seq numbers to a spearate function
  * Add context extension to reset crypto state</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt;" date="1555588800">- New upstream release 0.8.0:
  * Add compatibility with OpenSSL 1.1.0
  * Port some documentation into the tree
  * Rename and split the README file
  * Add support for RFC5801
  * Add support to return SSF value</changelog>
  <changelog author="Simona Avornicesei &lt;simona@avornicesei.com&gt;" date="1556020800">- build GSSNTLMSSP package v0.8.0 from https://pagure.io/gssntlmssp</changelog>
  <changelog author="Simona Avornicesei &lt;simona@avornicesei.com&gt;" date="1565784000">- Fixed build on OpenSUSE Tumbleweed</changelog>
  <changelog author="Simona Avornicesei &lt;simona@avornicesei.com&gt;" date="1565784001">- Fixed build on Fedora / CentOS</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1582804800">- Specfile cleanup</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1676462400">- Adapt license changes from upstream
  * LGPL-3.0-or-later -&gt; ISC
- Upstream moved to github
- Update to version 1.2.0
  * Implement gss_set_cred_option.
  * Allow to gss_wrap even if NEGOTIATE_SEAL is not negotiated.
  * Move HMAC code to OpenSSL EVP API.
  * Fix crash bug when acceptor credentials are NULL.
  * Translations update from Fedora Weblate.
  Fix CVE:
  * CVE-2023-25563 (boo#1208278): multiple out-of-bounds read
    when decoding NTLM fields.
  * CVE-2023-25564 (boo#1208279): memory corruption when decoding
    UTF16 strings.
  * CVE-2023-25565 (boo#1208280): incorrect free when decoding
    target information.
  * CVE-2023-25566 (boo#1208281): memory leak when parsing
    usernames.
  * CVE-2023-25567 (boo#1208282): out-of-bounds read when
    decoding target information.
- Update to version 1.1
  * various build fixes and better compatibility when a MIC is
    requested.
- Update to version 1.0
  * Fix test_gssapi_rfc5587.
  * Actually run tests with make check.
  * Add two tests around NTLMSSP_NEGOTIATE_LMKEY.
  * Refine LM compatibility level logic.
  * Refactor the gssntlm_required_security function.
  * Implement reading LM/NT hashes.
  * Add test for smpasswd-like user files.
  * Return confidentiality status.
  * Fix segfault in sign/seal functions.
  * Fix dummy signature generation.
  * Use UCS16LE instead of UCS-2LE.
  * Provide a zero lm key if the password is too long.
  * Completely omit CBs AV pairs when no CB provided.
  * Change license to the more permissive ISC.
  * Do not require cached users with winbind.
  * Add ability to pass keyfile via cred store.
  * Remove unused parts of Makefile.am.
  * Move attribute names to allocated strings.
  * Adjust serialization for name attributes.
  * Fix crash in acquiring credentials.
  * Fix fallback to external_creds interface.
  * Introduce parse_user_name() function.
  * Add test for parse_user_name.
  * Change how we assemble user names in ASC.
  * Use thread local storage for winbind context.
  * Make per thread winbind context optional.
  * Fixed memleak of usr_cred.
  * Support get_sids request via name attributes.
  * Fixed memory leaks found by valgrind.
- Update to version 0.9
  * add support for getting session key.
  * Add gss_inquire_attrs_for_mech().
  * Return actual data for RFC5587 API.
  * Add new Windows version flags.
  * Add Key exchange also when wanting integrity only.
  * Drop support for GSS_C_MA_NOT_DFLT_MECH.</changelog>
</package>
<package pkgid="22f97f6b68ceedd3e0989330e310d0df210aed68580383b488a3c90d55e21e88" name="gssntlmssp" arch="ppc64le">
  <version epoch="0" ver="1.2.0" rel="bp154.2.3.1"/>
  <changelog author="Simo Sorce &lt;simo@samba.org&gt;" date="1389528000">- New upstream release 0.3.0:
  * Added support for NTLMv1 Signing and Sealing completing full coverage
    of the NTLM protocol
  * Added a number of GSSAPI calls to inquire, export and import context and
    credentials, in preparation for making it work with GSS-Proxy
  * Various fixes memleak and other fixes</changelog>
  <changelog author="Simo Sorce &lt;simo@samba.org&gt;" date="1390737600">- Fixes #1058025
- New upstream release 0.3.1:
  * Fix segfault in init context.</changelog>
  <changelog author="Simo Sorce &lt;simo@samba.org&gt;" date="1424692800">- Update EPEL to latest version</changelog>
  <changelog author="Simo Sorce &lt;simo@samba.org&gt;" date="1464955200">- New upstream release 0.7.0:
  * Return the actual_mech_type when requested
  * Add test to check actual_mech is actually returned
  * Fix gss_inquire_cred with no creds
  * Return actual mech on accept context too
  * Add test for accept returning mech
  * Add placeholder inquire_name
  * Fix a regression in error handling
  * Check that we are actually asking for a known oid
  * Move setting seq numbers to a spearate function
  * Add context extension to reset crypto state</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt;" date="1555588800">- New upstream release 0.8.0:
  * Add compatibility with OpenSSL 1.1.0
  * Port some documentation into the tree
  * Rename and split the README file
  * Add support for RFC5801
  * Add support to return SSF value</changelog>
  <changelog author="Simona Avornicesei &lt;simona@avornicesei.com&gt;" date="1556020800">- build GSSNTLMSSP package v0.8.0 from https://pagure.io/gssntlmssp</changelog>
  <changelog author="Simona Avornicesei &lt;simona@avornicesei.com&gt;" date="1565784000">- Fixed build on OpenSUSE Tumbleweed</changelog>
  <changelog author="Simona Avornicesei &lt;simona@avornicesei.com&gt;" date="1565784001">- Fixed build on Fedora / CentOS</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1582804800">- Specfile cleanup</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1676462400">- Adapt license changes from upstream
  * LGPL-3.0-or-later -&gt; ISC
- Upstream moved to github
- Update to version 1.2.0
  * Implement gss_set_cred_option.
  * Allow to gss_wrap even if NEGOTIATE_SEAL is not negotiated.
  * Move HMAC code to OpenSSL EVP API.
  * Fix crash bug when acceptor credentials are NULL.
  * Translations update from Fedora Weblate.
  Fix CVE:
  * CVE-2023-25563 (boo#1208278): multiple out-of-bounds read
    when decoding NTLM fields.
  * CVE-2023-25564 (boo#1208279): memory corruption when decoding
    UTF16 strings.
  * CVE-2023-25565 (boo#1208280): incorrect free when decoding
    target information.
  * CVE-2023-25566 (boo#1208281): memory leak when parsing
    usernames.
  * CVE-2023-25567 (boo#1208282): out-of-bounds read when
    decoding target information.
- Update to version 1.1
  * various build fixes and better compatibility when a MIC is
    requested.
- Update to version 1.0
  * Fix test_gssapi_rfc5587.
  * Actually run tests with make check.
  * Add two tests around NTLMSSP_NEGOTIATE_LMKEY.
  * Refine LM compatibility level logic.
  * Refactor the gssntlm_required_security function.
  * Implement reading LM/NT hashes.
  * Add test for smpasswd-like user files.
  * Return confidentiality status.
  * Fix segfault in sign/seal functions.
  * Fix dummy signature generation.
  * Use UCS16LE instead of UCS-2LE.
  * Provide a zero lm key if the password is too long.
  * Completely omit CBs AV pairs when no CB provided.
  * Change license to the more permissive ISC.
  * Do not require cached users with winbind.
  * Add ability to pass keyfile via cred store.
  * Remove unused parts of Makefile.am.
  * Move attribute names to allocated strings.
  * Adjust serialization for name attributes.
  * Fix crash in acquiring credentials.
  * Fix fallback to external_creds interface.
  * Introduce parse_user_name() function.
  * Add test for parse_user_name.
  * Change how we assemble user names in ASC.
  * Use thread local storage for winbind context.
  * Make per thread winbind context optional.
  * Fixed memleak of usr_cred.
  * Support get_sids request via name attributes.
  * Fixed memory leaks found by valgrind.
- Update to version 0.9
  * add support for getting session key.
  * Add gss_inquire_attrs_for_mech().
  * Return actual data for RFC5587 API.
  * Add new Windows version flags.
  * Add Key exchange also when wanting integrity only.
  * Drop support for GSS_C_MA_NOT_DFLT_MECH.</changelog>
</package>
<package pkgid="62caa52360085f2b01cf9d67b8a766562da1da34ab87dd5ea69759994bfe36b5" name="gssntlmssp" arch="s390x">
  <version epoch="0" ver="1.2.0" rel="bp154.2.3.1"/>
  <changelog author="Simo Sorce &lt;simo@samba.org&gt;" date="1389528000">- New upstream release 0.3.0:
  * Added support for NTLMv1 Signing and Sealing completing full coverage
    of the NTLM protocol
  * Added a number of GSSAPI calls to inquire, export and import context and
    credentials, in preparation for making it work with GSS-Proxy
  * Various fixes memleak and other fixes</changelog>
  <changelog author="Simo Sorce &lt;simo@samba.org&gt;" date="1390737600">- Fixes #1058025
- New upstream release 0.3.1:
  * Fix segfault in init context.</changelog>
  <changelog author="Simo Sorce &lt;simo@samba.org&gt;" date="1424692800">- Update EPEL to latest version</changelog>
  <changelog author="Simo Sorce &lt;simo@samba.org&gt;" date="1464955200">- New upstream release 0.7.0:
  * Return the actual_mech_type when requested
  * Add test to check actual_mech is actually returned
  * Fix gss_inquire_cred with no creds
  * Return actual mech on accept context too
  * Add test for accept returning mech
  * Add placeholder inquire_name
  * Fix a regression in error handling
  * Check that we are actually asking for a known oid
  * Move setting seq numbers to a spearate function
  * Add context extension to reset crypto state</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt;" date="1555588800">- New upstream release 0.8.0:
  * Add compatibility with OpenSSL 1.1.0
  * Port some documentation into the tree
  * Rename and split the README file
  * Add support for RFC5801
  * Add support to return SSF value</changelog>
  <changelog author="Simona Avornicesei &lt;simona@avornicesei.com&gt;" date="1556020800">- build GSSNTLMSSP package v0.8.0 from https://pagure.io/gssntlmssp</changelog>
  <changelog author="Simona Avornicesei &lt;simona@avornicesei.com&gt;" date="1565784000">- Fixed build on OpenSUSE Tumbleweed</changelog>
  <changelog author="Simona Avornicesei &lt;simona@avornicesei.com&gt;" date="1565784001">- Fixed build on Fedora / CentOS</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1582804800">- Specfile cleanup</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1676462400">- Adapt license changes from upstream
  * LGPL-3.0-or-later -&gt; ISC
- Upstream moved to github
- Update to version 1.2.0
  * Implement gss_set_cred_option.
  * Allow to gss_wrap even if NEGOTIATE_SEAL is not negotiated.
  * Move HMAC code to OpenSSL EVP API.
  * Fix crash bug when acceptor credentials are NULL.
  * Translations update from Fedora Weblate.
  Fix CVE:
  * CVE-2023-25563 (boo#1208278): multiple out-of-bounds read
    when decoding NTLM fields.
  * CVE-2023-25564 (boo#1208279): memory corruption when decoding
    UTF16 strings.
  * CVE-2023-25565 (boo#1208280): incorrect free when decoding
    target information.
  * CVE-2023-25566 (boo#1208281): memory leak when parsing
    usernames.
  * CVE-2023-25567 (boo#1208282): out-of-bounds read when
    decoding target information.
- Update to version 1.1
  * various build fixes and better compatibility when a MIC is
    requested.
- Update to version 1.0
  * Fix test_gssapi_rfc5587.
  * Actually run tests with make check.
  * Add two tests around NTLMSSP_NEGOTIATE_LMKEY.
  * Refine LM compatibility level logic.
  * Refactor the gssntlm_required_security function.
  * Implement reading LM/NT hashes.
  * Add test for smpasswd-like user files.
  * Return confidentiality status.
  * Fix segfault in sign/seal functions.
  * Fix dummy signature generation.
  * Use UCS16LE instead of UCS-2LE.
  * Provide a zero lm key if the password is too long.
  * Completely omit CBs AV pairs when no CB provided.
  * Change license to the more permissive ISC.
  * Do not require cached users with winbind.
  * Add ability to pass keyfile via cred store.
  * Remove unused parts of Makefile.am.
  * Move attribute names to allocated strings.
  * Adjust serialization for name attributes.
  * Fix crash in acquiring credentials.
  * Fix fallback to external_creds interface.
  * Introduce parse_user_name() function.
  * Add test for parse_user_name.
  * Change how we assemble user names in ASC.
  * Use thread local storage for winbind context.
  * Make per thread winbind context optional.
  * Fixed memleak of usr_cred.
  * Support get_sids request via name attributes.
  * Fixed memory leaks found by valgrind.
- Update to version 0.9
  * add support for getting session key.
  * Add gss_inquire_attrs_for_mech().
  * Return actual data for RFC5587 API.
  * Add new Windows version flags.
  * Add Key exchange also when wanting integrity only.
  * Drop support for GSS_C_MA_NOT_DFLT_MECH.</changelog>
</package>
<package pkgid="44b2eb0e9d2fe9cd7657d9e6668e01bb7121fbf2ab16d673b5f5dddcf6ecb377" name="gssntlmssp" arch="src">
  <version epoch="0" ver="1.2.0" rel="bp154.2.3.1"/>
  <changelog author="Simo Sorce &lt;simo@samba.org&gt;" date="1382011200">- Initial import of 0.1.0</changelog>
  <changelog author="Simo Sorce &lt;simo@samba.org&gt;" date="1382097600">- New upstream realease 0.2.0:
  * Add support for acquire_cred_with_password()
  * Fix Signing keys generation
  * Add enterprise names support
  * Add connectionless mode support
  * Add development header gssapi_ntlmssp.h
  * Various bugfixes and tests for new features</changelog>
  <changelog author="Simo Sorce &lt;simo@samba.org&gt;" date="1386158400">- Backport patch that fixes failures with gss_set_neg_mechs() calls.</changelog>
  <changelog author="Simo Sorce &lt;simo@samba.org&gt;" date="1389528000">- New upstream release 0.3.0:
  * Added support for NTLMv1 Signing and Sealing completing full coverage
    of the NTLM protocol
  * Added a number of GSSAPI calls to inquire, export and import context and
    credentials, in preparation for making it work with GSS-Proxy
  * Various fixes memleak and other fixes</changelog>
  <changelog author="Simo Sorce &lt;simo@samba.org&gt;" date="1390737600">- Fixes #1058025
- New upstream release 0.3.1:
  * Fix segfault in init context.</changelog>
  <changelog author="Simo Sorce &lt;simo@samba.org&gt;" date="1424692800">- Update EPEL to latest version</changelog>
  <changelog author="Simo Sorce &lt;simo@samba.org&gt;" date="1464955200">- New upstream release 0.7.0:
  * Return the actual_mech_type when requested
  * Add test to check actual_mech is actually returned
  * Fix gss_inquire_cred with no creds
  * Return actual mech on accept context too
  * Add test for accept returning mech
  * Add placeholder inquire_name
  * Fix a regression in error handling
  * Check that we are actually asking for a known oid
  * Move setting seq numbers to a spearate function
  * Add context extension to reset crypto state</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt;" date="1555588800">- New upstream release 0.8.0:
  * Add compatibility with OpenSSL 1.1.0
  * Port some documentation into the tree
  * Rename and split the README file
  * Add support for RFC5801
  * Add support to return SSF value</changelog>
  <changelog author="Simona Avornicesei &lt;simona@avornicesei.com&gt;" date="1556020800">- build GSSNTLMSSP package v0.8.0 from https://pagure.io/gssntlmssp</changelog>
  <changelog author="Simona Avornicesei &lt;simona@avornicesei.com&gt;" date="1565784000">- Fixed build on OpenSUSE Tumbleweed</changelog>
  <changelog author="Simona Avornicesei &lt;simona@avornicesei.com&gt;" date="1565784001">- Fixed build on Fedora / CentOS</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1582804800">- Specfile cleanup</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1676462400">- Adapt license changes from upstream
  * LGPL-3.0-or-later -&gt; ISC
- Upstream moved to github
- Update to version 1.2.0
  * Implement gss_set_cred_option.
  * Allow to gss_wrap even if NEGOTIATE_SEAL is not negotiated.
  * Move HMAC code to OpenSSL EVP API.
  * Fix crash bug when acceptor credentials are NULL.
  * Translations update from Fedora Weblate.
  Fix CVE:
  * CVE-2023-25563 (boo#1208278): multiple out-of-bounds read
    when decoding NTLM fields.
  * CVE-2023-25564 (boo#1208279): memory corruption when decoding
    UTF16 strings.
  * CVE-2023-25565 (boo#1208280): incorrect free when decoding
    target information.
  * CVE-2023-25566 (boo#1208281): memory leak when parsing
    usernames.
  * CVE-2023-25567 (boo#1208282): out-of-bounds read when
    decoding target information.
- Update to version 1.1
  * various build fixes and better compatibility when a MIC is
    requested.
- Update to version 1.0
  * Fix test_gssapi_rfc5587.
  * Actually run tests with make check.
  * Add two tests around NTLMSSP_NEGOTIATE_LMKEY.
  * Refine LM compatibility level logic.
  * Refactor the gssntlm_required_security function.
  * Implement reading LM/NT hashes.
  * Add test for smpasswd-like user files.
  * Return confidentiality status.
  * Fix segfault in sign/seal functions.
  * Fix dummy signature generation.
  * Use UCS16LE instead of UCS-2LE.
  * Provide a zero lm key if the password is too long.
  * Completely omit CBs AV pairs when no CB provided.
  * Change license to the more permissive ISC.
  * Do not require cached users with winbind.
  * Add ability to pass keyfile via cred store.
  * Remove unused parts of Makefile.am.
  * Move attribute names to allocated strings.
  * Adjust serialization for name attributes.
  * Fix crash in acquiring credentials.
  * Fix fallback to external_creds interface.
  * Introduce parse_user_name() function.
  * Add test for parse_user_name.
  * Change how we assemble user names in ASC.
  * Use thread local storage for winbind context.
  * Make per thread winbind context optional.
  * Fixed memleak of usr_cred.
  * Support get_sids request via name attributes.
  * Fixed memory leaks found by valgrind.
- Update to version 0.9
  * add support for getting session key.
  * Add gss_inquire_attrs_for_mech().
  * Return actual data for RFC5587 API.
  * Add new Windows version flags.
  * Add Key exchange also when wanting integrity only.
  * Drop support for GSS_C_MA_NOT_DFLT_MECH.</changelog>
</package>
<package pkgid="bb312f6c482cd813cf29cc5376974e6f41170d15b7fe8d86fb7bca952e6b130b" name="gssntlmssp" arch="x86_64">
  <version epoch="0" ver="1.2.0" rel="bp154.2.3.1"/>
  <changelog author="Simo Sorce &lt;simo@samba.org&gt;" date="1389528000">- New upstream release 0.3.0:
  * Added support for NTLMv1 Signing and Sealing completing full coverage
    of the NTLM protocol
  * Added a number of GSSAPI calls to inquire, export and import context and
    credentials, in preparation for making it work with GSS-Proxy
  * Various fixes memleak and other fixes</changelog>
  <changelog author="Simo Sorce &lt;simo@samba.org&gt;" date="1390737600">- Fixes #1058025
- New upstream release 0.3.1:
  * Fix segfault in init context.</changelog>
  <changelog author="Simo Sorce &lt;simo@samba.org&gt;" date="1424692800">- Update EPEL to latest version</changelog>
  <changelog author="Simo Sorce &lt;simo@samba.org&gt;" date="1464955200">- New upstream release 0.7.0:
  * Return the actual_mech_type when requested
  * Add test to check actual_mech is actually returned
  * Fix gss_inquire_cred with no creds
  * Return actual mech on accept context too
  * Add test for accept returning mech
  * Add placeholder inquire_name
  * Fix a regression in error handling
  * Check that we are actually asking for a known oid
  * Move setting seq numbers to a spearate function
  * Add context extension to reset crypto state</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt;" date="1555588800">- New upstream release 0.8.0:
  * Add compatibility with OpenSSL 1.1.0
  * Port some documentation into the tree
  * Rename and split the README file
  * Add support for RFC5801
  * Add support to return SSF value</changelog>
  <changelog author="Simona Avornicesei &lt;simona@avornicesei.com&gt;" date="1556020800">- build GSSNTLMSSP package v0.8.0 from https://pagure.io/gssntlmssp</changelog>
  <changelog author="Simona Avornicesei &lt;simona@avornicesei.com&gt;" date="1565784000">- Fixed build on OpenSUSE Tumbleweed</changelog>
  <changelog author="Simona Avornicesei &lt;simona@avornicesei.com&gt;" date="1565784001">- Fixed build on Fedora / CentOS</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1582804800">- Specfile cleanup</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1676462400">- Adapt license changes from upstream
  * LGPL-3.0-or-later -&gt; ISC
- Upstream moved to github
- Update to version 1.2.0
  * Implement gss_set_cred_option.
  * Allow to gss_wrap even if NEGOTIATE_SEAL is not negotiated.
  * Move HMAC code to OpenSSL EVP API.
  * Fix crash bug when acceptor credentials are NULL.
  * Translations update from Fedora Weblate.
  Fix CVE:
  * CVE-2023-25563 (boo#1208278): multiple out-of-bounds read
    when decoding NTLM fields.
  * CVE-2023-25564 (boo#1208279): memory corruption when decoding
    UTF16 strings.
  * CVE-2023-25565 (boo#1208280): incorrect free when decoding
    target information.
  * CVE-2023-25566 (boo#1208281): memory leak when parsing
    usernames.
  * CVE-2023-25567 (boo#1208282): out-of-bounds read when
    decoding target information.
- Update to version 1.1
  * various build fixes and better compatibility when a MIC is
    requested.
- Update to version 1.0
  * Fix test_gssapi_rfc5587.
  * Actually run tests with make check.
  * Add two tests around NTLMSSP_NEGOTIATE_LMKEY.
  * Refine LM compatibility level logic.
  * Refactor the gssntlm_required_security function.
  * Implement reading LM/NT hashes.
  * Add test for smpasswd-like user files.
  * Return confidentiality status.
  * Fix segfault in sign/seal functions.
  * Fix dummy signature generation.
  * Use UCS16LE instead of UCS-2LE.
  * Provide a zero lm key if the password is too long.
  * Completely omit CBs AV pairs when no CB provided.
  * Change license to the more permissive ISC.
  * Do not require cached users with winbind.
  * Add ability to pass keyfile via cred store.
  * Remove unused parts of Makefile.am.
  * Move attribute names to allocated strings.
  * Adjust serialization for name attributes.
  * Fix crash in acquiring credentials.
  * Fix fallback to external_creds interface.
  * Introduce parse_user_name() function.
  * Add test for parse_user_name.
  * Change how we assemble user names in ASC.
  * Use thread local storage for winbind context.
  * Make per thread winbind context optional.
  * Fixed memleak of usr_cred.
  * Support get_sids request via name attributes.
  * Fixed memory leaks found by valgrind.
- Update to version 0.9
  * add support for getting session key.
  * Add gss_inquire_attrs_for_mech().
  * Return actual data for RFC5587 API.
  * Add new Windows version flags.
  * Add Key exchange also when wanting integrity only.
  * Drop support for GSS_C_MA_NOT_DFLT_MECH.</changelog>
</package>
<package pkgid="de34a17af6bbdf5833f66e5f980fdc40de549af0432e807b47e1e436e8483825" name="gssntlmssp-devel" arch="aarch64">
  <version epoch="0" ver="1.2.0" rel="bp154.2.3.1"/>
  <changelog author="Simo Sorce &lt;simo@samba.org&gt;" date="1389528000">- New upstream release 0.3.0:
  * Added support for NTLMv1 Signing and Sealing completing full coverage
    of the NTLM protocol
  * Added a number of GSSAPI calls to inquire, export and import context and
    credentials, in preparation for making it work with GSS-Proxy
  * Various fixes memleak and other fixes</changelog>
  <changelog author="Simo Sorce &lt;simo@samba.org&gt;" date="1390737600">- Fixes #1058025
- New upstream release 0.3.1:
  * Fix segfault in init context.</changelog>
  <changelog author="Simo Sorce &lt;simo@samba.org&gt;" date="1424692800">- Update EPEL to latest version</changelog>
  <changelog author="Simo Sorce &lt;simo@samba.org&gt;" date="1464955200">- New upstream release 0.7.0:
  * Return the actual_mech_type when requested
  * Add test to check actual_mech is actually returned
  * Fix gss_inquire_cred with no creds
  * Return actual mech on accept context too
  * Add test for accept returning mech
  * Add placeholder inquire_name
  * Fix a regression in error handling
  * Check that we are actually asking for a known oid
  * Move setting seq numbers to a spearate function
  * Add context extension to reset crypto state</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt;" date="1555588800">- New upstream release 0.8.0:
  * Add compatibility with OpenSSL 1.1.0
  * Port some documentation into the tree
  * Rename and split the README file
  * Add support for RFC5801
  * Add support to return SSF value</changelog>
  <changelog author="Simona Avornicesei &lt;simona@avornicesei.com&gt;" date="1556020800">- build GSSNTLMSSP package v0.8.0 from https://pagure.io/gssntlmssp</changelog>
  <changelog author="Simona Avornicesei &lt;simona@avornicesei.com&gt;" date="1565784000">- Fixed build on OpenSUSE Tumbleweed</changelog>
  <changelog author="Simona Avornicesei &lt;simona@avornicesei.com&gt;" date="1565784001">- Fixed build on Fedora / CentOS</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1582804800">- Specfile cleanup</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1676462400">- Adapt license changes from upstream
  * LGPL-3.0-or-later -&gt; ISC
- Upstream moved to github
- Update to version 1.2.0
  * Implement gss_set_cred_option.
  * Allow to gss_wrap even if NEGOTIATE_SEAL is not negotiated.
  * Move HMAC code to OpenSSL EVP API.
  * Fix crash bug when acceptor credentials are NULL.
  * Translations update from Fedora Weblate.
  Fix CVE:
  * CVE-2023-25563 (boo#1208278): multiple out-of-bounds read
    when decoding NTLM fields.
  * CVE-2023-25564 (boo#1208279): memory corruption when decoding
    UTF16 strings.
  * CVE-2023-25565 (boo#1208280): incorrect free when decoding
    target information.
  * CVE-2023-25566 (boo#1208281): memory leak when parsing
    usernames.
  * CVE-2023-25567 (boo#1208282): out-of-bounds read when
    decoding target information.
- Update to version 1.1
  * various build fixes and better compatibility when a MIC is
    requested.
- Update to version 1.0
  * Fix test_gssapi_rfc5587.
  * Actually run tests with make check.
  * Add two tests around NTLMSSP_NEGOTIATE_LMKEY.
  * Refine LM compatibility level logic.
  * Refactor the gssntlm_required_security function.
  * Implement reading LM/NT hashes.
  * Add test for smpasswd-like user files.
  * Return confidentiality status.
  * Fix segfault in sign/seal functions.
  * Fix dummy signature generation.
  * Use UCS16LE instead of UCS-2LE.
  * Provide a zero lm key if the password is too long.
  * Completely omit CBs AV pairs when no CB provided.
  * Change license to the more permissive ISC.
  * Do not require cached users with winbind.
  * Add ability to pass keyfile via cred store.
  * Remove unused parts of Makefile.am.
  * Move attribute names to allocated strings.
  * Adjust serialization for name attributes.
  * Fix crash in acquiring credentials.
  * Fix fallback to external_creds interface.
  * Introduce parse_user_name() function.
  * Add test for parse_user_name.
  * Change how we assemble user names in ASC.
  * Use thread local storage for winbind context.
  * Make per thread winbind context optional.
  * Fixed memleak of usr_cred.
  * Support get_sids request via name attributes.
  * Fixed memory leaks found by valgrind.
- Update to version 0.9
  * add support for getting session key.
  * Add gss_inquire_attrs_for_mech().
  * Return actual data for RFC5587 API.
  * Add new Windows version flags.
  * Add Key exchange also when wanting integrity only.
  * Drop support for GSS_C_MA_NOT_DFLT_MECH.</changelog>
</package>
<package pkgid="fcf432e002f86f2ff28df20f70f3613828f9ca95c03219bbd032f7f331a238d3" name="gssntlmssp-devel" arch="i586">
  <version epoch="0" ver="1.2.0" rel="bp154.2.3.1"/>
  <changelog author="Simo Sorce &lt;simo@samba.org&gt;" date="1389528000">- New upstream release 0.3.0:
  * Added support for NTLMv1 Signing and Sealing completing full coverage
    of the NTLM protocol
  * Added a number of GSSAPI calls to inquire, export and import context and
    credentials, in preparation for making it work with GSS-Proxy
  * Various fixes memleak and other fixes</changelog>
  <changelog author="Simo Sorce &lt;simo@samba.org&gt;" date="1390737600">- Fixes #1058025
- New upstream release 0.3.1:
  * Fix segfault in init context.</changelog>
  <changelog author="Simo Sorce &lt;simo@samba.org&gt;" date="1424692800">- Update EPEL to latest version</changelog>
  <changelog author="Simo Sorce &lt;simo@samba.org&gt;" date="1464955200">- New upstream release 0.7.0:
  * Return the actual_mech_type when requested
  * Add test to check actual_mech is actually returned
  * Fix gss_inquire_cred with no creds
  * Return actual mech on accept context too
  * Add test for accept returning mech
  * Add placeholder inquire_name
  * Fix a regression in error handling
  * Check that we are actually asking for a known oid
  * Move setting seq numbers to a spearate function
  * Add context extension to reset crypto state</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt;" date="1555588800">- New upstream release 0.8.0:
  * Add compatibility with OpenSSL 1.1.0
  * Port some documentation into the tree
  * Rename and split the README file
  * Add support for RFC5801
  * Add support to return SSF value</changelog>
  <changelog author="Simona Avornicesei &lt;simona@avornicesei.com&gt;" date="1556020800">- build GSSNTLMSSP package v0.8.0 from https://pagure.io/gssntlmssp</changelog>
  <changelog author="Simona Avornicesei &lt;simona@avornicesei.com&gt;" date="1565784000">- Fixed build on OpenSUSE Tumbleweed</changelog>
  <changelog author="Simona Avornicesei &lt;simona@avornicesei.com&gt;" date="1565784001">- Fixed build on Fedora / CentOS</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1582804800">- Specfile cleanup</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1676462400">- Adapt license changes from upstream
  * LGPL-3.0-or-later -&gt; ISC
- Upstream moved to github
- Update to version 1.2.0
  * Implement gss_set_cred_option.
  * Allow to gss_wrap even if NEGOTIATE_SEAL is not negotiated.
  * Move HMAC code to OpenSSL EVP API.
  * Fix crash bug when acceptor credentials are NULL.
  * Translations update from Fedora Weblate.
  Fix CVE:
  * CVE-2023-25563 (boo#1208278): multiple out-of-bounds read
    when decoding NTLM fields.
  * CVE-2023-25564 (boo#1208279): memory corruption when decoding
    UTF16 strings.
  * CVE-2023-25565 (boo#1208280): incorrect free when decoding
    target information.
  * CVE-2023-25566 (boo#1208281): memory leak when parsing
    usernames.
  * CVE-2023-25567 (boo#1208282): out-of-bounds read when
    decoding target information.
- Update to version 1.1
  * various build fixes and better compatibility when a MIC is
    requested.
- Update to version 1.0
  * Fix test_gssapi_rfc5587.
  * Actually run tests with make check.
  * Add two tests around NTLMSSP_NEGOTIATE_LMKEY.
  * Refine LM compatibility level logic.
  * Refactor the gssntlm_required_security function.
  * Implement reading LM/NT hashes.
  * Add test for smpasswd-like user files.
  * Return confidentiality status.
  * Fix segfault in sign/seal functions.
  * Fix dummy signature generation.
  * Use UCS16LE instead of UCS-2LE.
  * Provide a zero lm key if the password is too long.
  * Completely omit CBs AV pairs when no CB provided.
  * Change license to the more permissive ISC.
  * Do not require cached users with winbind.
  * Add ability to pass keyfile via cred store.
  * Remove unused parts of Makefile.am.
  * Move attribute names to allocated strings.
  * Adjust serialization for name attributes.
  * Fix crash in acquiring credentials.
  * Fix fallback to external_creds interface.
  * Introduce parse_user_name() function.
  * Add test for parse_user_name.
  * Change how we assemble user names in ASC.
  * Use thread local storage for winbind context.
  * Make per thread winbind context optional.
  * Fixed memleak of usr_cred.
  * Support get_sids request via name attributes.
  * Fixed memory leaks found by valgrind.
- Update to version 0.9
  * add support for getting session key.
  * Add gss_inquire_attrs_for_mech().
  * Return actual data for RFC5587 API.
  * Add new Windows version flags.
  * Add Key exchange also when wanting integrity only.
  * Drop support for GSS_C_MA_NOT_DFLT_MECH.</changelog>
</package>
<package pkgid="6b40acb1d26106db7aa5bc01a699a151f313b9431a58e86558029dfe650f5ec9" name="gssntlmssp-devel" arch="ppc64le">
  <version epoch="0" ver="1.2.0" rel="bp154.2.3.1"/>
  <changelog author="Simo Sorce &lt;simo@samba.org&gt;" date="1389528000">- New upstream release 0.3.0:
  * Added support for NTLMv1 Signing and Sealing completing full coverage
    of the NTLM protocol
  * Added a number of GSSAPI calls to inquire, export and import context and
    credentials, in preparation for making it work with GSS-Proxy
  * Various fixes memleak and other fixes</changelog>
  <changelog author="Simo Sorce &lt;simo@samba.org&gt;" date="1390737600">- Fixes #1058025
- New upstream release 0.3.1:
  * Fix segfault in init context.</changelog>
  <changelog author="Simo Sorce &lt;simo@samba.org&gt;" date="1424692800">- Update EPEL to latest version</changelog>
  <changelog author="Simo Sorce &lt;simo@samba.org&gt;" date="1464955200">- New upstream release 0.7.0:
  * Return the actual_mech_type when requested
  * Add test to check actual_mech is actually returned
  * Fix gss_inquire_cred with no creds
  * Return actual mech on accept context too
  * Add test for accept returning mech
  * Add placeholder inquire_name
  * Fix a regression in error handling
  * Check that we are actually asking for a known oid
  * Move setting seq numbers to a spearate function
  * Add context extension to reset crypto state</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt;" date="1555588800">- New upstream release 0.8.0:
  * Add compatibility with OpenSSL 1.1.0
  * Port some documentation into the tree
  * Rename and split the README file
  * Add support for RFC5801
  * Add support to return SSF value</changelog>
  <changelog author="Simona Avornicesei &lt;simona@avornicesei.com&gt;" date="1556020800">- build GSSNTLMSSP package v0.8.0 from https://pagure.io/gssntlmssp</changelog>
  <changelog author="Simona Avornicesei &lt;simona@avornicesei.com&gt;" date="1565784000">- Fixed build on OpenSUSE Tumbleweed</changelog>
  <changelog author="Simona Avornicesei &lt;simona@avornicesei.com&gt;" date="1565784001">- Fixed build on Fedora / CentOS</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1582804800">- Specfile cleanup</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1676462400">- Adapt license changes from upstream
  * LGPL-3.0-or-later -&gt; ISC
- Upstream moved to github
- Update to version 1.2.0
  * Implement gss_set_cred_option.
  * Allow to gss_wrap even if NEGOTIATE_SEAL is not negotiated.
  * Move HMAC code to OpenSSL EVP API.
  * Fix crash bug when acceptor credentials are NULL.
  * Translations update from Fedora Weblate.
  Fix CVE:
  * CVE-2023-25563 (boo#1208278): multiple out-of-bounds read
    when decoding NTLM fields.
  * CVE-2023-25564 (boo#1208279): memory corruption when decoding
    UTF16 strings.
  * CVE-2023-25565 (boo#1208280): incorrect free when decoding
    target information.
  * CVE-2023-25566 (boo#1208281): memory leak when parsing
    usernames.
  * CVE-2023-25567 (boo#1208282): out-of-bounds read when
    decoding target information.
- Update to version 1.1
  * various build fixes and better compatibility when a MIC is
    requested.
- Update to version 1.0
  * Fix test_gssapi_rfc5587.
  * Actually run tests with make check.
  * Add two tests around NTLMSSP_NEGOTIATE_LMKEY.
  * Refine LM compatibility level logic.
  * Refactor the gssntlm_required_security function.
  * Implement reading LM/NT hashes.
  * Add test for smpasswd-like user files.
  * Return confidentiality status.
  * Fix segfault in sign/seal functions.
  * Fix dummy signature generation.
  * Use UCS16LE instead of UCS-2LE.
  * Provide a zero lm key if the password is too long.
  * Completely omit CBs AV pairs when no CB provided.
  * Change license to the more permissive ISC.
  * Do not require cached users with winbind.
  * Add ability to pass keyfile via cred store.
  * Remove unused parts of Makefile.am.
  * Move attribute names to allocated strings.
  * Adjust serialization for name attributes.
  * Fix crash in acquiring credentials.
  * Fix fallback to external_creds interface.
  * Introduce parse_user_name() function.
  * Add test for parse_user_name.
  * Change how we assemble user names in ASC.
  * Use thread local storage for winbind context.
  * Make per thread winbind context optional.
  * Fixed memleak of usr_cred.
  * Support get_sids request via name attributes.
  * Fixed memory leaks found by valgrind.
- Update to version 0.9
  * add support for getting session key.
  * Add gss_inquire_attrs_for_mech().
  * Return actual data for RFC5587 API.
  * Add new Windows version flags.
  * Add Key exchange also when wanting integrity only.
  * Drop support for GSS_C_MA_NOT_DFLT_MECH.</changelog>
</package>
<package pkgid="d6607d95951b28d2c76b02e7bf8fdae6aeac0ca85dc0534a6ff32906f8019faa" name="gssntlmssp-devel" arch="s390x">
  <version epoch="0" ver="1.2.0" rel="bp154.2.3.1"/>
  <changelog author="Simo Sorce &lt;simo@samba.org&gt;" date="1389528000">- New upstream release 0.3.0:
  * Added support for NTLMv1 Signing and Sealing completing full coverage
    of the NTLM protocol
  * Added a number of GSSAPI calls to inquire, export and import context and
    credentials, in preparation for making it work with GSS-Proxy
  * Various fixes memleak and other fixes</changelog>
  <changelog author="Simo Sorce &lt;simo@samba.org&gt;" date="1390737600">- Fixes #1058025
- New upstream release 0.3.1:
  * Fix segfault in init context.</changelog>
  <changelog author="Simo Sorce &lt;simo@samba.org&gt;" date="1424692800">- Update EPEL to latest version</changelog>
  <changelog author="Simo Sorce &lt;simo@samba.org&gt;" date="1464955200">- New upstream release 0.7.0:
  * Return the actual_mech_type when requested
  * Add test to check actual_mech is actually returned
  * Fix gss_inquire_cred with no creds
  * Return actual mech on accept context too
  * Add test for accept returning mech
  * Add placeholder inquire_name
  * Fix a regression in error handling
  * Check that we are actually asking for a known oid
  * Move setting seq numbers to a spearate function
  * Add context extension to reset crypto state</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt;" date="1555588800">- New upstream release 0.8.0:
  * Add compatibility with OpenSSL 1.1.0
  * Port some documentation into the tree
  * Rename and split the README file
  * Add support for RFC5801
  * Add support to return SSF value</changelog>
  <changelog author="Simona Avornicesei &lt;simona@avornicesei.com&gt;" date="1556020800">- build GSSNTLMSSP package v0.8.0 from https://pagure.io/gssntlmssp</changelog>
  <changelog author="Simona Avornicesei &lt;simona@avornicesei.com&gt;" date="1565784000">- Fixed build on OpenSUSE Tumbleweed</changelog>
  <changelog author="Simona Avornicesei &lt;simona@avornicesei.com&gt;" date="1565784001">- Fixed build on Fedora / CentOS</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1582804800">- Specfile cleanup</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1676462400">- Adapt license changes from upstream
  * LGPL-3.0-or-later -&gt; ISC
- Upstream moved to github
- Update to version 1.2.0
  * Implement gss_set_cred_option.
  * Allow to gss_wrap even if NEGOTIATE_SEAL is not negotiated.
  * Move HMAC code to OpenSSL EVP API.
  * Fix crash bug when acceptor credentials are NULL.
  * Translations update from Fedora Weblate.
  Fix CVE:
  * CVE-2023-25563 (boo#1208278): multiple out-of-bounds read
    when decoding NTLM fields.
  * CVE-2023-25564 (boo#1208279): memory corruption when decoding
    UTF16 strings.
  * CVE-2023-25565 (boo#1208280): incorrect free when decoding
    target information.
  * CVE-2023-25566 (boo#1208281): memory leak when parsing
    usernames.
  * CVE-2023-25567 (boo#1208282): out-of-bounds read when
    decoding target information.
- Update to version 1.1
  * various build fixes and better compatibility when a MIC is
    requested.
- Update to version 1.0
  * Fix test_gssapi_rfc5587.
  * Actually run tests with make check.
  * Add two tests around NTLMSSP_NEGOTIATE_LMKEY.
  * Refine LM compatibility level logic.
  * Refactor the gssntlm_required_security function.
  * Implement reading LM/NT hashes.
  * Add test for smpasswd-like user files.
  * Return confidentiality status.
  * Fix segfault in sign/seal functions.
  * Fix dummy signature generation.
  * Use UCS16LE instead of UCS-2LE.
  * Provide a zero lm key if the password is too long.
  * Completely omit CBs AV pairs when no CB provided.
  * Change license to the more permissive ISC.
  * Do not require cached users with winbind.
  * Add ability to pass keyfile via cred store.
  * Remove unused parts of Makefile.am.
  * Move attribute names to allocated strings.
  * Adjust serialization for name attributes.
  * Fix crash in acquiring credentials.
  * Fix fallback to external_creds interface.
  * Introduce parse_user_name() function.
  * Add test for parse_user_name.
  * Change how we assemble user names in ASC.
  * Use thread local storage for winbind context.
  * Make per thread winbind context optional.
  * Fixed memleak of usr_cred.
  * Support get_sids request via name attributes.
  * Fixed memory leaks found by valgrind.
- Update to version 0.9
  * add support for getting session key.
  * Add gss_inquire_attrs_for_mech().
  * Return actual data for RFC5587 API.
  * Add new Windows version flags.
  * Add Key exchange also when wanting integrity only.
  * Drop support for GSS_C_MA_NOT_DFLT_MECH.</changelog>
</package>
<package pkgid="5ae88965439da2a3af99800ba33c637b3dc9374e38f8c8bdcc65977462ff2cb4" name="gssntlmssp-devel" arch="x86_64">
  <version epoch="0" ver="1.2.0" rel="bp154.2.3.1"/>
  <changelog author="Simo Sorce &lt;simo@samba.org&gt;" date="1389528000">- New upstream release 0.3.0:
  * Added support for NTLMv1 Signing and Sealing completing full coverage
    of the NTLM protocol
  * Added a number of GSSAPI calls to inquire, export and import context and
    credentials, in preparation for making it work with GSS-Proxy
  * Various fixes memleak and other fixes</changelog>
  <changelog author="Simo Sorce &lt;simo@samba.org&gt;" date="1390737600">- Fixes #1058025
- New upstream release 0.3.1:
  * Fix segfault in init context.</changelog>
  <changelog author="Simo Sorce &lt;simo@samba.org&gt;" date="1424692800">- Update EPEL to latest version</changelog>
  <changelog author="Simo Sorce &lt;simo@samba.org&gt;" date="1464955200">- New upstream release 0.7.0:
  * Return the actual_mech_type when requested
  * Add test to check actual_mech is actually returned
  * Fix gss_inquire_cred with no creds
  * Return actual mech on accept context too
  * Add test for accept returning mech
  * Add placeholder inquire_name
  * Fix a regression in error handling
  * Check that we are actually asking for a known oid
  * Move setting seq numbers to a spearate function
  * Add context extension to reset crypto state</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt;" date="1555588800">- New upstream release 0.8.0:
  * Add compatibility with OpenSSL 1.1.0
  * Port some documentation into the tree
  * Rename and split the README file
  * Add support for RFC5801
  * Add support to return SSF value</changelog>
  <changelog author="Simona Avornicesei &lt;simona@avornicesei.com&gt;" date="1556020800">- build GSSNTLMSSP package v0.8.0 from https://pagure.io/gssntlmssp</changelog>
  <changelog author="Simona Avornicesei &lt;simona@avornicesei.com&gt;" date="1565784000">- Fixed build on OpenSUSE Tumbleweed</changelog>
  <changelog author="Simona Avornicesei &lt;simona@avornicesei.com&gt;" date="1565784001">- Fixed build on Fedora / CentOS</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1582804800">- Specfile cleanup</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1676462400">- Adapt license changes from upstream
  * LGPL-3.0-or-later -&gt; ISC
- Upstream moved to github
- Update to version 1.2.0
  * Implement gss_set_cred_option.
  * Allow to gss_wrap even if NEGOTIATE_SEAL is not negotiated.
  * Move HMAC code to OpenSSL EVP API.
  * Fix crash bug when acceptor credentials are NULL.
  * Translations update from Fedora Weblate.
  Fix CVE:
  * CVE-2023-25563 (boo#1208278): multiple out-of-bounds read
    when decoding NTLM fields.
  * CVE-2023-25564 (boo#1208279): memory corruption when decoding
    UTF16 strings.
  * CVE-2023-25565 (boo#1208280): incorrect free when decoding
    target information.
  * CVE-2023-25566 (boo#1208281): memory leak when parsing
    usernames.
  * CVE-2023-25567 (boo#1208282): out-of-bounds read when
    decoding target information.
- Update to version 1.1
  * various build fixes and better compatibility when a MIC is
    requested.
- Update to version 1.0
  * Fix test_gssapi_rfc5587.
  * Actually run tests with make check.
  * Add two tests around NTLMSSP_NEGOTIATE_LMKEY.
  * Refine LM compatibility level logic.
  * Refactor the gssntlm_required_security function.
  * Implement reading LM/NT hashes.
  * Add test for smpasswd-like user files.
  * Return confidentiality status.
  * Fix segfault in sign/seal functions.
  * Fix dummy signature generation.
  * Use UCS16LE instead of UCS-2LE.
  * Provide a zero lm key if the password is too long.
  * Completely omit CBs AV pairs when no CB provided.
  * Change license to the more permissive ISC.
  * Do not require cached users with winbind.
  * Add ability to pass keyfile via cred store.
  * Remove unused parts of Makefile.am.
  * Move attribute names to allocated strings.
  * Adjust serialization for name attributes.
  * Fix crash in acquiring credentials.
  * Fix fallback to external_creds interface.
  * Introduce parse_user_name() function.
  * Add test for parse_user_name.
  * Change how we assemble user names in ASC.
  * Use thread local storage for winbind context.
  * Make per thread winbind context optional.
  * Fixed memleak of usr_cred.
  * Support get_sids request via name attributes.
  * Fixed memory leaks found by valgrind.
- Update to version 0.9
  * add support for getting session key.
  * Add gss_inquire_attrs_for_mech().
  * Return actual data for RFC5587 API.
  * Add new Windows version flags.
  * Add Key exchange also when wanting integrity only.
  * Drop support for GSS_C_MA_NOT_DFLT_MECH.</changelog>
</package>
<package pkgid="9f3ddd23c6316670bae8ab8791cbee33b5f4a1a3f5e392b2e23734edb7417d7b" name="gtest" arch="aarch64">
  <version epoch="0" ver="1.12.1" rel="bp154.2.1"/>
  <changelog author="mpluskal@suse.com" date="1425038400">- Use source url
- Package libraries as libgoogletest0
- Run tests when building</changelog>
  <changelog author="mpluskal@suse.com" date="1425124800">- Correct typo in library name</changelog>
  <changelog author="mpluskal@suse.com" date="1440072000">- Update project and source url (now on github)
- Change library name, provides obsoletes should not be necessary
  as no released binary should link against it</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1513425600">- Update to version 1.8.0:
  * Update the value of GTEST_DIR to reflect the googletest dir.
  * Change the GTestDir marco value to reflect the new dir of
    googletest.
  * Read Bazel's $XML_OUTPUT_FILE environment variable
  * Restructure:
  - Test so each scenario is independent.
  - $XML_OUTPUT_FILE logic
  * Fixes:
  - Error C2440 'return' in gmock_test
    (gh#google/googletest#775).
  - Tests that return object which implement operator bool.
  - Operator precedence in GTEST_TEST_BOOLEAN_ with expressions
    that implement operator bool.
  - env_var_test to ignore XML_OUTPUT_FILE if already set.
  - Link that's returned when running tests
    (gh#google/googletest#714).
- Rework package turning it into a source package essencially, once
  its original intention is to provide source files for a testing
  framework, a pure development package itself. Aligning with
  upstream ease our job and avoid unexpected bugs.
- Drop libgtest0 and googletest-devel subpackages bringing gtest
  subpackage instead and obsoleting the previous ones, following
  the above change.
- Provide googlemock together with googletest now that upstream
  officially brought this project under gloogle's wings.
- Replace autoconf and automake BuildRequires by cmake and switch
  configure, make and make_install macros by cmake, cmake_jobs and
  cmake_install. Autotools are deprecated and cmake is recommended
  by upstream.
- Drop libtool BuildRequires and autoreconf call. With the adoption
  of cmake it's no longer need anymore.
- Drop googletest-enable-make-install.patch. No longer needed once
  make install is not used anymore.
- Add googletest-fix-cmake-libdir-install.patch for enabling the
  use of /usr/lib(64) instead of /usr/local/lib(64), once
  upstream's CMakeLists doesn't provide flexibility in this regard.
- Add googletest-rpmlintrc file to filter warnings about
  devel-file-in-non-devel-package, shlib-policy-missing-suffix and
  obsolete-not-provided as the package is a devel one itself now.</changelog>
  <changelog author="tiwai@suse.de" date="1514548800">- Fix the source (and put the download URL as a comment) for
  matching with the actual tarball file name.</changelog>
  <changelog author="adam.majer@suse.de" date="1542369600">- Update to version 1.8.1:
  * add pkg-config files
  * add --no_stacktrace_support for json-output-unittest
  * allow macros inside of parametrized test names.
  * support JSON output format in addition to XML
  * add options to parallelize builds
  * fix double free when building Gtest/GMock in shared libraries
    and linking a test executable with both.
  * 2.6.4 is the minimum CMake version
- cleanup spec file
- googletest-fix-cmake-libdir-install.patch: dropped, upstreamed</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1542456000">- Remove errant backslahes from description.
- Rewrite summaries without em dashes.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1581163200">- Update to version 1.10.0
  * Deprecated "....TEST_CASE" API in favor of "....TEST_SUITE".
    In a nutshell if you have code that uses something like
    "INSTANTIATE_TYPED_TEST_CASE_P " - this and all other
    "*_TEST_CASE " are now deprecated in favor of more standard
    _TEST_SUITE.
  * New powerful MOCK_METHOD macro.
    For example:
    (Old) MOCK_METHOD1(Bar, double(std::string s));
    (New) MOCK_METHOD(double, Bar, (std::string s), (override));
    So there is no need to count the parameters anymore.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1621252800">- Don't depend on python2, when we don't need it.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1641384000">- update to 1.11.0:
  * --gtest_brief shows only test failures in output
  * --gtest_fail_fast stops test execution on first failure
  * Failures in SetUpTestSuite and TearDownTestSuite now cause tests to fail
    rather than log
  * Uninstantiated TEST_P and TYPED_TEST_P now fail unless allowlisted using
    GTEST_ALLOW_UNINSTANTIATED_PARAMETERIZED_TEST
  * new matchers and mocking behavior, see
    https://github.com/google/googletest/releases/tag/release-1.11.0</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1643803200">- Add missing ldconfig calls in %post/%postun
- Enable unit tests on Tumbleweed (fails on 15.x)
- Update rpmlintrc for rpmlint 2.0</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1649419200">- Disable 2 warnings that are affected by GCC 12:
  gh#google/googletest#3792 and gh#google/googletest#3793.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1665057600">- update to 1.12.1:
  * Support for move-only values to Return
  * New matchers: WhenBase64Unescaped
  * ResultOf() now has a 3-arg overload that takes a description string for better
    error messages
  * CMake minimum increased to 3.5</changelog>
</package>
<package pkgid="72c9561ccecd150a706216ea0fc527a63c1a90fb51b21b39f20ed54ee981591e" name="gtest" arch="i586">
  <version epoch="0" ver="1.12.1" rel="bp154.2.1"/>
  <changelog author="mpluskal@suse.com" date="1425038400">- Use source url
- Package libraries as libgoogletest0
- Run tests when building</changelog>
  <changelog author="mpluskal@suse.com" date="1425124800">- Correct typo in library name</changelog>
  <changelog author="mpluskal@suse.com" date="1440072000">- Update project and source url (now on github)
- Change library name, provides obsoletes should not be necessary
  as no released binary should link against it</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1513425600">- Update to version 1.8.0:
  * Update the value of GTEST_DIR to reflect the googletest dir.
  * Change the GTestDir marco value to reflect the new dir of
    googletest.
  * Read Bazel's $XML_OUTPUT_FILE environment variable
  * Restructure:
  - Test so each scenario is independent.
  - $XML_OUTPUT_FILE logic
  * Fixes:
  - Error C2440 'return' in gmock_test
    (gh#google/googletest#775).
  - Tests that return object which implement operator bool.
  - Operator precedence in GTEST_TEST_BOOLEAN_ with expressions
    that implement operator bool.
  - env_var_test to ignore XML_OUTPUT_FILE if already set.
  - Link that's returned when running tests
    (gh#google/googletest#714).
- Rework package turning it into a source package essencially, once
  its original intention is to provide source files for a testing
  framework, a pure development package itself. Aligning with
  upstream ease our job and avoid unexpected bugs.
- Drop libgtest0 and googletest-devel subpackages bringing gtest
  subpackage instead and obsoleting the previous ones, following
  the above change.
- Provide googlemock together with googletest now that upstream
  officially brought this project under gloogle's wings.
- Replace autoconf and automake BuildRequires by cmake and switch
  configure, make and make_install macros by cmake, cmake_jobs and
  cmake_install. Autotools are deprecated and cmake is recommended
  by upstream.
- Drop libtool BuildRequires and autoreconf call. With the adoption
  of cmake it's no longer need anymore.
- Drop googletest-enable-make-install.patch. No longer needed once
  make install is not used anymore.
- Add googletest-fix-cmake-libdir-install.patch for enabling the
  use of /usr/lib(64) instead of /usr/local/lib(64), once
  upstream's CMakeLists doesn't provide flexibility in this regard.
- Add googletest-rpmlintrc file to filter warnings about
  devel-file-in-non-devel-package, shlib-policy-missing-suffix and
  obsolete-not-provided as the package is a devel one itself now.</changelog>
  <changelog author="tiwai@suse.de" date="1514548800">- Fix the source (and put the download URL as a comment) for
  matching with the actual tarball file name.</changelog>
  <changelog author="adam.majer@suse.de" date="1542369600">- Update to version 1.8.1:
  * add pkg-config files
  * add --no_stacktrace_support for json-output-unittest
  * allow macros inside of parametrized test names.
  * support JSON output format in addition to XML
  * add options to parallelize builds
  * fix double free when building Gtest/GMock in shared libraries
    and linking a test executable with both.
  * 2.6.4 is the minimum CMake version
- cleanup spec file
- googletest-fix-cmake-libdir-install.patch: dropped, upstreamed</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1542456000">- Remove errant backslahes from description.
- Rewrite summaries without em dashes.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1581163200">- Update to version 1.10.0
  * Deprecated "....TEST_CASE" API in favor of "....TEST_SUITE".
    In a nutshell if you have code that uses something like
    "INSTANTIATE_TYPED_TEST_CASE_P " - this and all other
    "*_TEST_CASE " are now deprecated in favor of more standard
    _TEST_SUITE.
  * New powerful MOCK_METHOD macro.
    For example:
    (Old) MOCK_METHOD1(Bar, double(std::string s));
    (New) MOCK_METHOD(double, Bar, (std::string s), (override));
    So there is no need to count the parameters anymore.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1621252800">- Don't depend on python2, when we don't need it.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1641384000">- update to 1.11.0:
  * --gtest_brief shows only test failures in output
  * --gtest_fail_fast stops test execution on first failure
  * Failures in SetUpTestSuite and TearDownTestSuite now cause tests to fail
    rather than log
  * Uninstantiated TEST_P and TYPED_TEST_P now fail unless allowlisted using
    GTEST_ALLOW_UNINSTANTIATED_PARAMETERIZED_TEST
  * new matchers and mocking behavior, see
    https://github.com/google/googletest/releases/tag/release-1.11.0</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1643803200">- Add missing ldconfig calls in %post/%postun
- Enable unit tests on Tumbleweed (fails on 15.x)
- Update rpmlintrc for rpmlint 2.0</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1649419200">- Disable 2 warnings that are affected by GCC 12:
  gh#google/googletest#3792 and gh#google/googletest#3793.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1665057600">- update to 1.12.1:
  * Support for move-only values to Return
  * New matchers: WhenBase64Unescaped
  * ResultOf() now has a 3-arg overload that takes a description string for better
    error messages
  * CMake minimum increased to 3.5</changelog>
</package>
<package pkgid="bdbab1908c3c73d407342f339353788d2b53fb37694c2f0f2fae243ee77e305b" name="gtest" arch="ppc64le">
  <version epoch="0" ver="1.12.1" rel="bp154.2.1"/>
  <changelog author="mpluskal@suse.com" date="1425038400">- Use source url
- Package libraries as libgoogletest0
- Run tests when building</changelog>
  <changelog author="mpluskal@suse.com" date="1425124800">- Correct typo in library name</changelog>
  <changelog author="mpluskal@suse.com" date="1440072000">- Update project and source url (now on github)
- Change library name, provides obsoletes should not be necessary
  as no released binary should link against it</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1513425600">- Update to version 1.8.0:
  * Update the value of GTEST_DIR to reflect the googletest dir.
  * Change the GTestDir marco value to reflect the new dir of
    googletest.
  * Read Bazel's $XML_OUTPUT_FILE environment variable
  * Restructure:
  - Test so each scenario is independent.
  - $XML_OUTPUT_FILE logic
  * Fixes:
  - Error C2440 'return' in gmock_test
    (gh#google/googletest#775).
  - Tests that return object which implement operator bool.
  - Operator precedence in GTEST_TEST_BOOLEAN_ with expressions
    that implement operator bool.
  - env_var_test to ignore XML_OUTPUT_FILE if already set.
  - Link that's returned when running tests
    (gh#google/googletest#714).
- Rework package turning it into a source package essencially, once
  its original intention is to provide source files for a testing
  framework, a pure development package itself. Aligning with
  upstream ease our job and avoid unexpected bugs.
- Drop libgtest0 and googletest-devel subpackages bringing gtest
  subpackage instead and obsoleting the previous ones, following
  the above change.
- Provide googlemock together with googletest now that upstream
  officially brought this project under gloogle's wings.
- Replace autoconf and automake BuildRequires by cmake and switch
  configure, make and make_install macros by cmake, cmake_jobs and
  cmake_install. Autotools are deprecated and cmake is recommended
  by upstream.
- Drop libtool BuildRequires and autoreconf call. With the adoption
  of cmake it's no longer need anymore.
- Drop googletest-enable-make-install.patch. No longer needed once
  make install is not used anymore.
- Add googletest-fix-cmake-libdir-install.patch for enabling the
  use of /usr/lib(64) instead of /usr/local/lib(64), once
  upstream's CMakeLists doesn't provide flexibility in this regard.
- Add googletest-rpmlintrc file to filter warnings about
  devel-file-in-non-devel-package, shlib-policy-missing-suffix and
  obsolete-not-provided as the package is a devel one itself now.</changelog>
  <changelog author="tiwai@suse.de" date="1514548800">- Fix the source (and put the download URL as a comment) for
  matching with the actual tarball file name.</changelog>
  <changelog author="adam.majer@suse.de" date="1542369600">- Update to version 1.8.1:
  * add pkg-config files
  * add --no_stacktrace_support for json-output-unittest
  * allow macros inside of parametrized test names.
  * support JSON output format in addition to XML
  * add options to parallelize builds
  * fix double free when building Gtest/GMock in shared libraries
    and linking a test executable with both.
  * 2.6.4 is the minimum CMake version
- cleanup spec file
- googletest-fix-cmake-libdir-install.patch: dropped, upstreamed</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1542456000">- Remove errant backslahes from description.
- Rewrite summaries without em dashes.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1581163200">- Update to version 1.10.0
  * Deprecated "....TEST_CASE" API in favor of "....TEST_SUITE".
    In a nutshell if you have code that uses something like
    "INSTANTIATE_TYPED_TEST_CASE_P " - this and all other
    "*_TEST_CASE " are now deprecated in favor of more standard
    _TEST_SUITE.
  * New powerful MOCK_METHOD macro.
    For example:
    (Old) MOCK_METHOD1(Bar, double(std::string s));
    (New) MOCK_METHOD(double, Bar, (std::string s), (override));
    So there is no need to count the parameters anymore.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1621252800">- Don't depend on python2, when we don't need it.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1641384000">- update to 1.11.0:
  * --gtest_brief shows only test failures in output
  * --gtest_fail_fast stops test execution on first failure
  * Failures in SetUpTestSuite and TearDownTestSuite now cause tests to fail
    rather than log
  * Uninstantiated TEST_P and TYPED_TEST_P now fail unless allowlisted using
    GTEST_ALLOW_UNINSTANTIATED_PARAMETERIZED_TEST
  * new matchers and mocking behavior, see
    https://github.com/google/googletest/releases/tag/release-1.11.0</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1643803200">- Add missing ldconfig calls in %post/%postun
- Enable unit tests on Tumbleweed (fails on 15.x)
- Update rpmlintrc for rpmlint 2.0</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1649419200">- Disable 2 warnings that are affected by GCC 12:
  gh#google/googletest#3792 and gh#google/googletest#3793.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1665057600">- update to 1.12.1:
  * Support for move-only values to Return
  * New matchers: WhenBase64Unescaped
  * ResultOf() now has a 3-arg overload that takes a description string for better
    error messages
  * CMake minimum increased to 3.5</changelog>
</package>
<package pkgid="a3095f22b0c7767222541401b77e1c6dbb0518ea39498bfc22bbc43fbb546425" name="gtest" arch="s390x">
  <version epoch="0" ver="1.12.1" rel="bp154.2.1"/>
  <changelog author="mpluskal@suse.com" date="1425038400">- Use source url
- Package libraries as libgoogletest0
- Run tests when building</changelog>
  <changelog author="mpluskal@suse.com" date="1425124800">- Correct typo in library name</changelog>
  <changelog author="mpluskal@suse.com" date="1440072000">- Update project and source url (now on github)
- Change library name, provides obsoletes should not be necessary
  as no released binary should link against it</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1513425600">- Update to version 1.8.0:
  * Update the value of GTEST_DIR to reflect the googletest dir.
  * Change the GTestDir marco value to reflect the new dir of
    googletest.
  * Read Bazel's $XML_OUTPUT_FILE environment variable
  * Restructure:
  - Test so each scenario is independent.
  - $XML_OUTPUT_FILE logic
  * Fixes:
  - Error C2440 'return' in gmock_test
    (gh#google/googletest#775).
  - Tests that return object which implement operator bool.
  - Operator precedence in GTEST_TEST_BOOLEAN_ with expressions
    that implement operator bool.
  - env_var_test to ignore XML_OUTPUT_FILE if already set.
  - Link that's returned when running tests
    (gh#google/googletest#714).
- Rework package turning it into a source package essencially, once
  its original intention is to provide source files for a testing
  framework, a pure development package itself. Aligning with
  upstream ease our job and avoid unexpected bugs.
- Drop libgtest0 and googletest-devel subpackages bringing gtest
  subpackage instead and obsoleting the previous ones, following
  the above change.
- Provide googlemock together with googletest now that upstream
  officially brought this project under gloogle's wings.
- Replace autoconf and automake BuildRequires by cmake and switch
  configure, make and make_install macros by cmake, cmake_jobs and
  cmake_install. Autotools are deprecated and cmake is recommended
  by upstream.
- Drop libtool BuildRequires and autoreconf call. With the adoption
  of cmake it's no longer need anymore.
- Drop googletest-enable-make-install.patch. No longer needed once
  make install is not used anymore.
- Add googletest-fix-cmake-libdir-install.patch for enabling the
  use of /usr/lib(64) instead of /usr/local/lib(64), once
  upstream's CMakeLists doesn't provide flexibility in this regard.
- Add googletest-rpmlintrc file to filter warnings about
  devel-file-in-non-devel-package, shlib-policy-missing-suffix and
  obsolete-not-provided as the package is a devel one itself now.</changelog>
  <changelog author="tiwai@suse.de" date="1514548800">- Fix the source (and put the download URL as a comment) for
  matching with the actual tarball file name.</changelog>
  <changelog author="adam.majer@suse.de" date="1542369600">- Update to version 1.8.1:
  * add pkg-config files
  * add --no_stacktrace_support for json-output-unittest
  * allow macros inside of parametrized test names.
  * support JSON output format in addition to XML
  * add options to parallelize builds
  * fix double free when building Gtest/GMock in shared libraries
    and linking a test executable with both.
  * 2.6.4 is the minimum CMake version
- cleanup spec file
- googletest-fix-cmake-libdir-install.patch: dropped, upstreamed</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1542456000">- Remove errant backslahes from description.
- Rewrite summaries without em dashes.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1581163200">- Update to version 1.10.0
  * Deprecated "....TEST_CASE" API in favor of "....TEST_SUITE".
    In a nutshell if you have code that uses something like
    "INSTANTIATE_TYPED_TEST_CASE_P " - this and all other
    "*_TEST_CASE " are now deprecated in favor of more standard
    _TEST_SUITE.
  * New powerful MOCK_METHOD macro.
    For example:
    (Old) MOCK_METHOD1(Bar, double(std::string s));
    (New) MOCK_METHOD(double, Bar, (std::string s), (override));
    So there is no need to count the parameters anymore.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1621252800">- Don't depend on python2, when we don't need it.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1641384000">- update to 1.11.0:
  * --gtest_brief shows only test failures in output
  * --gtest_fail_fast stops test execution on first failure
  * Failures in SetUpTestSuite and TearDownTestSuite now cause tests to fail
    rather than log
  * Uninstantiated TEST_P and TYPED_TEST_P now fail unless allowlisted using
    GTEST_ALLOW_UNINSTANTIATED_PARAMETERIZED_TEST
  * new matchers and mocking behavior, see
    https://github.com/google/googletest/releases/tag/release-1.11.0</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1643803200">- Add missing ldconfig calls in %post/%postun
- Enable unit tests on Tumbleweed (fails on 15.x)
- Update rpmlintrc for rpmlint 2.0</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1649419200">- Disable 2 warnings that are affected by GCC 12:
  gh#google/googletest#3792 and gh#google/googletest#3793.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1665057600">- update to 1.12.1:
  * Support for move-only values to Return
  * New matchers: WhenBase64Unescaped
  * ResultOf() now has a 3-arg overload that takes a description string for better
    error messages
  * CMake minimum increased to 3.5</changelog>
</package>
<package pkgid="d7974bb05927399092650c08fe1d5c1d050868230fec5dca5b917274830d14df" name="gtest" arch="x86_64">
  <version epoch="0" ver="1.12.1" rel="bp154.2.1"/>
  <changelog author="mpluskal@suse.com" date="1425038400">- Use source url
- Package libraries as libgoogletest0
- Run tests when building</changelog>
  <changelog author="mpluskal@suse.com" date="1425124800">- Correct typo in library name</changelog>
  <changelog author="mpluskal@suse.com" date="1440072000">- Update project and source url (now on github)
- Change library name, provides obsoletes should not be necessary
  as no released binary should link against it</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1513425600">- Update to version 1.8.0:
  * Update the value of GTEST_DIR to reflect the googletest dir.
  * Change the GTestDir marco value to reflect the new dir of
    googletest.
  * Read Bazel's $XML_OUTPUT_FILE environment variable
  * Restructure:
  - Test so each scenario is independent.
  - $XML_OUTPUT_FILE logic
  * Fixes:
  - Error C2440 'return' in gmock_test
    (gh#google/googletest#775).
  - Tests that return object which implement operator bool.
  - Operator precedence in GTEST_TEST_BOOLEAN_ with expressions
    that implement operator bool.
  - env_var_test to ignore XML_OUTPUT_FILE if already set.
  - Link that's returned when running tests
    (gh#google/googletest#714).
- Rework package turning it into a source package essencially, once
  its original intention is to provide source files for a testing
  framework, a pure development package itself. Aligning with
  upstream ease our job and avoid unexpected bugs.
- Drop libgtest0 and googletest-devel subpackages bringing gtest
  subpackage instead and obsoleting the previous ones, following
  the above change.
- Provide googlemock together with googletest now that upstream
  officially brought this project under gloogle's wings.
- Replace autoconf and automake BuildRequires by cmake and switch
  configure, make and make_install macros by cmake, cmake_jobs and
  cmake_install. Autotools are deprecated and cmake is recommended
  by upstream.
- Drop libtool BuildRequires and autoreconf call. With the adoption
  of cmake it's no longer need anymore.
- Drop googletest-enable-make-install.patch. No longer needed once
  make install is not used anymore.
- Add googletest-fix-cmake-libdir-install.patch for enabling the
  use of /usr/lib(64) instead of /usr/local/lib(64), once
  upstream's CMakeLists doesn't provide flexibility in this regard.
- Add googletest-rpmlintrc file to filter warnings about
  devel-file-in-non-devel-package, shlib-policy-missing-suffix and
  obsolete-not-provided as the package is a devel one itself now.</changelog>
  <changelog author="tiwai@suse.de" date="1514548800">- Fix the source (and put the download URL as a comment) for
  matching with the actual tarball file name.</changelog>
  <changelog author="adam.majer@suse.de" date="1542369600">- Update to version 1.8.1:
  * add pkg-config files
  * add --no_stacktrace_support for json-output-unittest
  * allow macros inside of parametrized test names.
  * support JSON output format in addition to XML
  * add options to parallelize builds
  * fix double free when building Gtest/GMock in shared libraries
    and linking a test executable with both.
  * 2.6.4 is the minimum CMake version
- cleanup spec file
- googletest-fix-cmake-libdir-install.patch: dropped, upstreamed</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1542456000">- Remove errant backslahes from description.
- Rewrite summaries without em dashes.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1581163200">- Update to version 1.10.0
  * Deprecated "....TEST_CASE" API in favor of "....TEST_SUITE".
    In a nutshell if you have code that uses something like
    "INSTANTIATE_TYPED_TEST_CASE_P " - this and all other
    "*_TEST_CASE " are now deprecated in favor of more standard
    _TEST_SUITE.
  * New powerful MOCK_METHOD macro.
    For example:
    (Old) MOCK_METHOD1(Bar, double(std::string s));
    (New) MOCK_METHOD(double, Bar, (std::string s), (override));
    So there is no need to count the parameters anymore.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1621252800">- Don't depend on python2, when we don't need it.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1641384000">- update to 1.11.0:
  * --gtest_brief shows only test failures in output
  * --gtest_fail_fast stops test execution on first failure
  * Failures in SetUpTestSuite and TearDownTestSuite now cause tests to fail
    rather than log
  * Uninstantiated TEST_P and TYPED_TEST_P now fail unless allowlisted using
    GTEST_ALLOW_UNINSTANTIATED_PARAMETERIZED_TEST
  * new matchers and mocking behavior, see
    https://github.com/google/googletest/releases/tag/release-1.11.0</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1643803200">- Add missing ldconfig calls in %post/%postun
- Enable unit tests on Tumbleweed (fails on 15.x)
- Update rpmlintrc for rpmlint 2.0</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1649419200">- Disable 2 warnings that are affected by GCC 12:
  gh#google/googletest#3792 and gh#google/googletest#3793.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1665057600">- update to 1.12.1:
  * Support for move-only values to Return
  * New matchers: WhenBase64Unescaped
  * ResultOf() now has a 3-arg overload that takes a description string for better
    error messages
  * CMake minimum increased to 3.5</changelog>
</package>
<package pkgid="f1dfc0de2cea18ef2c0b537ad90c0755c427f14feeb6a29ebce91e5fd5fe523a" name="hawkey-man" arch="noarch">
  <version epoch="0" ver="0.65.0" rel="bp154.2.1"/>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1594123200">- Update to version 0.48.0
  + Add prereq_ignoreinst &amp; regular_requires properties for pkg (rh#1543449)
  + Reset active modules when no module enabled or default (rh#1767351)
  + Add comment option to transaction (rh#1773679)
  + Failing to get module defauls is a recoverable error
  + Baseurl is not exclusive with mirrorlist/metalink (rh#1775184)
  + Add new function to reset all modules in C API (dnf_context_reset_all_modules)
  + [context] Fix to preserve additionalMetadata content (rh#1808677)
  + Fix filtering of DepSolvables with source rpms (rh#1812596)
  + Add setter for running kernel protection setting
  + Handle situation when an unprivileged user cannot create history database (rh#1634385)
  + Add query filter: latest by priority
  + Add DNF_NO_PROTECTED flag to allow empty list of protected packages
  + Remove 'dim' option from terminal colors to make them more readable (rh#1807774, rh#1814563)
  + [context] Error when main config file can't be opened (rh#1794864)
  + [context] Add function function dnf_context_is_set_config_file_path
  + swdb: Catch only SQLite3 exceptions and simplify the messages
  + MergedTransaction list multiple comments (rh#1773679)
  + Modify CMake to pull *.po files from weblate
  + Optimize DependencyContainer creation from an existing queue
  + fix a memory leak in dnf_package_get_requires()
  + Fix memory leaks on g_build_filename()
  + Fix memory leak in dnf_context_setup()
  + Add `hy_goal_favor` and `hy_goal_disfavor`
  + Define a cleanup function for `DnfPackageSet`
  + dnf-repo: fix dnf_repo_get_public_keys double-free
  + Do not cache RPMDB
  + Use single-quotes around string literals used in SQL statements
  + SQLite3: Do not close the database if it wasn't opened (rh#1761976)
  + Don't create a new history DB connection for in-memory DB
  + transaction/Swdb: Use a single logger variable in constructor
  + utils: Add a safe version of pathExists()
  + swdb: Handle the case when pathExists() fails on e.g. permission
  + Repo: prepend "file://" if a local path is used as baseurl
  + Move urlEncode() to utils
  + utils: Add 'exclude' argument to urlEncode()
  + Encode package URL for downloading through librepo (rh#1817130)
  + Replace std::runtime_error with libdnf::RepoError
  + Fixes and error handling improvements of the File class
  + [context] Use ConfigRepo for gpgkey and baseurl (rh#1807864)
  + [context] support "priority" option in .repo config file (rh#1797265)
- Drop obsolete patch: libdnf-0.45.0-handle-all-rpmdb-variants.patch
- Refresh patch for static linking libsolvext
  + Remove patch: libdnf-0.39.1-with-static-libsolvext.patch
  + Add patch: libdnf-0.48.0-with-static-libsolvext.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1598011200">- Backport fix from upstream to fix building against check &gt;= 0.15
  + Patch: 0001-tests-Fix-incorrect-usage-of-the-fail_unless-macro.patch
- Clean up spec comments about patches</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1603540800">- Update to version 0.54.2
  + history: Fix dnf history rollback when a package was removed (rh#1683134)
  + Add support for HY_GT, HY_LT in query nevra_strict
  + Fix parsing empty lines in config files
  + Accept '==' as an operator in reldeps (rh#1847946)
  + Add log file level main config option (rh#1802074)
  + Add protect_running_kernel configuration option (rh#1698145)
  + Context part of libdnf cannot assume zchunk is on (rh#1851841, rh#1779104)
  + Fix memory leak of resultingModuleIndex and handle g_object refs
  + Redirect librepo logs to libdnf logs with different source
  + Add hy_goal_lock
  + Enum/String conversions for Transaction Store/Replay
  + utils: Add a method to decode URLs
  + Unify hawkey.log line format with the rest of the logs
- Drop patches included in this release
  + Patch: 0001-tests-Fix-incorrect-usage-of-the-fail_unless-macro.patch
- Refresh patch for reposdir paths
  + Remove patch: libdnf-0.39.1-Switch-default-reposdir-to-etc-dnf-repos.d.patch
  + Add patch: libdnf-0.54.2-Switch-default-reposdir-to-etc-dnf-repos.d.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1606651200">- Update to version 0.55.0
  + Add vendor to dnf API (rh#1876561)
  + Add formatting function for solver error
  + Add error types in ModulePackageContainer
  + Implement module enable for context part
  + Improve string formatting for translation
  + Remove redundant printf and change logging info to notice (rh#1827424)
  + Add allow_vendor_change option (rh#1788371) (rh#1788371)
- Backport patches from upstream
  + Patch: 0001-Support-allow_vendor_change-setting-in-dnf-context-A.patch
  + Patch: 0001-context-dnf_keyring_add_public_keys-not-generate-err.patch
- Add patch to turn off changing vendors by default
  + Patch: libdnf-0.55.0-Switch-allow_vendor_change-off.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1607256000">- Update to version 0.55.2
  + Improve performance of query installed() and available()
  + Swdb: Add a method to get the current transaction
  + [modules] Add special handling for src artifacts (rh#1809314)
  + Better msgs if "basecachedir" or "proxy_password" isn't set (rh#1888946)
  + Add new options module_stream_switch
  + Support allow_vendor_change setting in dnf context API
- Drop patches incorporated into this release
  + Patch: 0001-Support-allow_vendor_change-setting-in-dnf-context-A.patch
  + Patch: 0001-context-dnf_keyring_add_public_keys-not-generate-err.patch
- Use cmake_build and cmake_install macros</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1609761600">- Add patch to support armv6hl and RISC-V architectures
  + Patch: 0001-context-Sync-missing-arches-from-DNF.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1612267200">- Update to version 0.58.0
  + Option: Add reset() method
  + Add OptionBinds::getOption() method
  + [context] Add dnf_repo_conf_from_gkeyfile() and dnf_repo_conf_reset()
  + [context] Add support for options: minrate, throttle, bandwidth, timeout
  + [context] Remove g_key_file_get_string() from dnf_repo_set_keyfile_data()
  + Allow loading ext metadata even if only cache (solv) is present
  + Add ASAN_OPTIONS for test_libdnf_main
  + [context,API] Functions for accessing main/global configuration options
  + [context,API] Function for adding setopt
  + Add getter for modular obsoletes from ModuleMetadata
  + Add ModulePackage.getStaticContext() and getRequires()
  + Add compatible layer for MdDocuments v2
  + Fix modular queries with the new solver
  + Improve formatting of error string for modules
  + Change mechanism of module conflicts
  + Fix load/update FailSafe
- Drop patch included in this release
  + Patch: 0001-context-Sync-missing-arches-from-DNF.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1613131200">- Backport fixes to add controls for installonlypkgs and protected_packages
  + Patch: 0001-context-Support-config-file-option-installonlypkgs.patch
  + Patch: 0002-context-Support-config-file-option-protected_package.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1613217600">- Add patch to move directory for dnf state data to /usr/lib/sysimage
  + Patch: libdnf-0.58.0-Use-usr-lib-sysimage-for-the-persistent-state-dir.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1613217601">- Backport another fix for adding controls to installonlypkgs
  + Patch: 0001-context-Fix-dnf_package_is_installonly-RhBug-1928056.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1614081600">- Backport support for using certificates for repository authorization
  + Patch: 0001-Fix-librepo-version-required-in-CMakeList.txt-1.12.0.patch
  + Patch: 0002-Fix-Fully-set-ssl-in-newHandle-function.patch
  + Patch: 0003-conf-Add-options-for-working-with-certificates-used-.patch
  + Patch: 0004-Apply-proxy-certificate-options.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1614254400">- Add repo-config-zypp subpackage to allow easily using Zypper
  repository configuration</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1614340800">- Backport more fixes for using certs for repo authorization
  + Patch: 0001-Deduplicate-code-create-Repo-Impl-stringToProxyAuthM.patch
  + Patch: 0002-context-Support-config-file-option-proxy_auth_method.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1614686400">- Update to 0.60.0
  + Fix repo.fresh() implementation
  + Fix: Fully set ssl in newHandle function
  + [conf] Add options for working with certificates used with proxy
  + Apply proxy certificate options
  + lock: Switch return-if-fail to assert to quiet gcc -fanalyzer
  + build-sys: Clean up message about Python bindings
  + Modify module NSVCA parsing - context definition (rh#1926771)
  + [context] Fix: dnf_package_is_installonly (rh#1928056)
  + Fix problematic language
  + Add getApplicablePackages to advisory and isApplicable to advisorymodule
  + Keep isAdvisoryApplicable to preserve API
  + Run ModulePackageContainerTest tests in tmpdir, merge interdependent
  + [context] Support config file option "proxy_auth_method", defaults "any"
  + Properly handle multiple collections in updateinfo.xml (rh#1804234)
  + Support main config file option "installonlypkgs"
  + Support main config file option "protected_packages"
- Drop patches now part of this release
  + Patch: 0001-context-Support-config-file-option-installonlypkgs.patch
  + Patch: 0002-context-Support-config-file-option-protected_package.patch
  + Patch: 0001-context-Fix-dnf_package_is_installonly-RhBug-1928056.patch
  + Patch: 0001-Fix-librepo-version-required-in-CMakeList.txt-1.12.0.patch
  + Patch: 0002-Fix-Fully-set-ssl-in-newHandle-function.patch
  + Patch: 0003-conf-Add-options-for-working-with-certificates-used-.patch
  + Patch: 0004-Apply-proxy-certificate-options.patch
  + Patch: 0001-Deduplicate-code-create-Repo-Impl-stringToProxyAuthM.patch
  + Patch: 0002-context-Support-config-file-option-proxy_auth_method.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1614686401">- Fix dependency for repo-config-zypp subpackage to work with SLE</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1618315200">- Update to 0.62.0
  + Change order of TransactionItemReason (rh#1921063)
  + Add two new comperators for security filters (rh#1918475)
  + Apply security filters for candidates with lower priority
  + Fix: Goal - translation of messages in global maps
  + Enhance description of modular solvables
  + Improve performance for module query
  + Change mechanism of modular errata applicability (rh#1804234)
  + dnf_transaction_commit(): Remove second call to rpmtsSetVSFlags
  + Fix a couple of memory leaks
  + Fix: Setting of librepo handle in newHandle function
  + Remove failsafe data when module is not enabled (rh#1847035)
  + Expose librepo's checksum functions via SWIG
  + Fix: Mising check of "hy_split_nevra()" return code
  + Do not allow 1 as installonly_limit value (rh#1926261)
  + Fix check whether the subkey can be used for signing
  + Hardening: add signature check with rpmcliVerifySignatures
    (CVE-2021-3445, CVE-2021-3421, CVE-2021-20271, rh#1932079, rh#1932089, rh#1932090, boo#1183779)
  + Add a config option sslverifystatus, defaults to false (rh#1814383)
  + [context] Add API for distro-sync</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1618488000">- Add patch to fix crash when loading DVD repositories
  + Patch: 0001-Fix-a-crash-when-repoId-not-found-in-loaded-conf-gke.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1630065600">- Update to 0.63.1
  + ModuleProfile: add isDefault()
  + ModulePackage: add getDefaultProfile()
  + Add new dnf_context_module_install() C API
  + Fix a crash when [media] section in .treeinfo is missing for bootable media (rh#1946024)
  + Add hy_query_get_advisory_pkgs to C API (rh#1960561)
  + Add dnf_advisorypkg_get_advisory()
  + DNF does not fail on non UTF-8 file names in a package (rh#1893176)
  + Improve error-reporting for modular functions
- Drop patch included in this release
  + Patch: 0001-Fix-a-crash-when-repoId-not-found-in-loaded-conf-gke.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1635940800">- Update to 0.65.0
  + Add support for excluding packages to be installed as weak dependencies
  + Add support for autodetecting packages to be excluded from being installed as weak dependencies
  + Turn off strict validation of modulemd documents (rh#2004853, rh#2007166, rh#2007167)
  + Implement logic for demodularization of modular rpms (rh#1805260)
  + DnfContext: fix handling of default module profiles
  + ModuleMetadata: gracefully handle modules with no defaults
  + Remove failovermethod config option (rh#1961083)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1647259200">- Skip rich deps for autodetection of unmet dependencies (rh#2033130)
  + Patch: 0001-Skip-rich-deps-for-autodetection-of-unmet-dependencies.patch</changelog>
</package>
<package pkgid="2b9b9d3633b9c115f4d424fd7b755756a1170c9f2618e151c477df27780f229f" name="hylafax+" arch="aarch64">
  <version epoch="0" ver="7.0.6" rel="bp154.2.3.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1546948800">- migrate from cron to systemd timers (boo#1115442)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1547640000">- Dependency on hylafax-hfaxd for timers added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1547812800">- faxgetty@ service removed from %pre section, as it is only a placeholder</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548244800">- Reduce boilerplate generated from %service_* by calling it just
  once.</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1563451200">- Version 7.0.0
  * add LDAP features for compatibility with ActiveDirectory (25 Mar-1 Apr 2019)
  * fix recovery after SSL Fax "accept failure" (18 Mar 2019)
  * add TextFormat overstrike option and disable by default (6 Feb 2019)
  * fix the page size of cover sheets returned via notify (8 Jan 2019)
  * fix or silence numerous compiler warnings (19, 22, 28 Dec 2018)
  * fix pagehandling updating after a proxy has been used (7-8 Dec 2018)
  * add faxmail stderr output of RFC2047 decoding results (5 Dec 2018)
  * fix faxmail handling of headers encoded with UTF-8 (4 Dec 2018)
  * fix faxmail handling of base64-encoded text parts (4 Dec 2018)
  * add SSL Fax support (9-26, 29 Nov; 11, 18, 25 Dec 2018; 2, 7, 23 Jan 2019)</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1574424000">- build fails with libtiff 4.1: pretend, that 4.1 is similar to 4.0</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1574424001">- Version 7.0.1
  * create a client timeout setting and change the default from 60 to
  3600 seconds (26 Sep 2019)
  * extend timeout for receiving ECM frames (21 Aug 2019)
  * fix timeout in Class 1 frame reception (5 Aug 2019)
  * improve Class 1 protocol handling when MaxRecvPages exceeded (31 Jul 2019)
  * fix ModemGroup limit default (11 Jul 2019)
  * fix recovery for SSL Fax write failures (6 Jun 2019)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1581681600">- Version 7.0.2
  * change FIXEDWIDTH default to better accommodate auto-rotation (13 Dec 2019)
  * prevent SSL_accept() from blocking (5 Dec 2019)
  * support libtiff v4.1 (5 Dec 2019)
  * fix ignoremodembusy feature broken by ModemGroup limits feature (16 Nov 2019)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1591704000">- fix for boo#1172731
  VUL-0: EMBARGOED: CVE-2020-8024: hylafax+: Problematic permissions allow
    escalation from uucp to other users
  * adjusted authorisation
  * adjusted pre*/post* snipplets</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1597147200">- version 7.0.3
  * add UseSSLFax feature in sendfax, sendfax.conf, hyla.conf, and JobControl
  (31 Jul 2020)
  * be more resilient in listening for the Phase C carrier (30 Jul 2020)
  * make sure to return to command mode if HDLC receive times out (29 Jul 2020)
  * make faxmail ignore boundaries on parts other than multiparts (29 Jul 2020)
  * don't attempt to write zero bytes of data to a TIFF (29 Jul 2020)
  * don't ever respond to CRP with CRP (28 Jul 2020)
  * secure setup.cache/setup.modem - CVE-2020-15397 (27, 30 Jul 2020)
  * reset frame counter when a sender retransmits PPS for a previously confirmed
  ECM block (26 Jul 2020)
  * scrutinize PPM before concluding that the sender missed our MCF (23 Jul 2020)
  * fix modem recovery after SSL Fax failure (22, 26 Jul 2020)
  * ignore echo of PPR, RTN, CRP (10, 13, 21 Jul 2020)
  * attempt to handle NSF/CSI/DIS in Class 1 sending Phase D (6 Jul 2020)
  * run scripts directly rather than invoking them via a shell for security
  hardening (3-5 Jul 2020)
  * add senderFumblesECM feature (3 Jul 2020)
  * add support for PIN/PIP/PRI-Q/PPS-PRI-Q signals, add senderConfusesPIN
  feature, and utilize PIN for rare conditions where it may be helpful
  (2, 6, 13-14 Jul 2020)
  * add senderConfusesRTN feature (25-26 Jun 2020)
  * add MissedPageHandling feature (24 Jun 2020)
  * use and handle CFR in Phase D to retransmit Phase C (16, 23 Jun 2020)
  * cope with hearing echo of RR, CTC during Class 1 sending (15-17 Jun 2020)
  * fix listening for retransmission of MPS/EOP/EOM if it was received
  corrupt on the first attempt (15 Jun 2020)
  * secure temporary directory creation for faxsetup, faxaddmodem, and
  probemodem - CVE-2020-15396 (13 Jun 2020)
  * don't use CRP when receiving PPS/PPM as some senders think
  we are sending MCF (12 Jun 2020)
  * add BR_SSLFAX to show SSL Fax in notify and faxinfo output (1 Jun 2020)
  * have faxinfo put units on non-standard page dimensions (28 May 2020)
  * improve error messages for JobHost connection errors (22 May 2020)
  * fix perpetual blocking of jobs when a job preparation fails,
  attempt to fix similar blocking problems for bad jobs in
  batches, and add "unblock" faxconfig feature (21 May 2020)
  * ignore TCF if we're receiving an SSL Fax (31 Jan 2020)
  * fixes for build on FreeBSD 12.1 (31 Jan - 3 Feb 2020)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1602244800">- rearrange files-section (boo#1172731)</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1611662400">- Fix TW build by pretending tiff 4.2 is as good enough as 4.{0,1}</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1620475200">- Fix TW build by pretending tiff 4.4 is as good enough as 4.{0,1}</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1626091200">- Add hylafax service and helper for use with firewalld, and
  explain the details in README.SUSE.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1632312000">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * hylafax-faxgetty@.service
  * hylafax-faxq.service
  * hylafax-faxqclean.service
  * hylafax-hfaxd.service
  * hylafax-usage.service</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1634558400">- version 7.0.4
  * README.SUSE renamed
  * hylafax.diff added for boo#1191571 (pre-correction)
  * Dependencies on systemd-services adjusted
  * retry training twice at the same bitrate unless FTT (26 Aug 2021)
  * add missing reason messages for session failures (21 Aug 2021)
  * stop attempts to send or receive signals if the call ended prematurely (16-19 Aug 2021)
  * add Class1HasRMHookIndication (16 Aug 2021)
  * don't attempt sending DCN if we're already on hook (15, 17 Aug 2021)
  * end session sooner if receiver hangs up immediately after TCF or during prologue (14 Aug 2021)
  * fix some behavior following frame reception timeouts (13 Aug 2021)
  * improve behavior if procedural interrupt fails (12 Aug 2021)
  * handle sender repeating RR after we transmit MCF (10 Aug 2021)
  * add session logging of receipt of CFR/FTT signals (3 Aug 2021)
  * cope with receipt of PPR following CTC (3 Aug 2021)
  * attempt to cope with NSF/CSI/DIS after PPS, CTR, ERR, RR and improve coping with
    the same after MPS/EOP/EOM (2, 12, 14, 18 Aug 2021)
  * identify DCN after PPS as a receiver abort (2 Aug 2021)
  * attempt to cope with receipt of CTR after sending PPS (2 Aug 2021)
  * remove use of deprecated libtiff integer types and "register" storage class specifier (25 Jul 2021)
  * don't employ senderFumblesECM if V.34-Fax was negotiated (25 Jul 2021)
  * update configure to accept libtiff v4.2 and v4.3 (24 Jul 2021)
  * fix page handling "botch" if a job's first and previous attempts were on a proxy (20 Jul 2021)
  * fix data timeout for bitrates less than 14400 bps when non-zero scanline time (15 Jul 2021)
  * try to cope with T.38 invite stutter at beginning of send (15 Jul 2021)
  * decouple session logging from direct filesystem I/O (15 Jul 2021)
  * try to help receivers who may expect initial 1-bits to start high-speed data (8, 9 Jul, 4 Aug 2021)
  * improve tenacity of "persistent" ECM (26 Jun 2021)
  * maintain the same SSL Fax passcode during a single session (20 May 2021)
  * log detection of binary file transfer support in receivers (1 Apr 2021)
  * add support for SiLabs Si2417/Si2435 (5 Feb 2021)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648900800">- version 7.0.5
  * hylafax.diff removed - included in source
  * extend Class1RecvAbortOK = 0 timeout to 500 ms (4 Dec 2021)
  * cope with Si2435 V.34/V.8 connection glitch (17, 19 Nov 2021)
  * cope with spurious +FCERROR or other delayed messages from modem (26 Oct 2021)
  * avoid letting corrupt RTC signals lead to RTN (26 Oct 2021)
  * don't refer to DCN as an invalid response in error messages (20 Oct 2021)
  * handle TSI during procedural interrupt (19 Oct 2021)
  * do better with waiting on prologue frames from receiver (13 Oct 2021)
  * cope with echo of ERR (13 Oct 2021)
  * run ps2fax, pdf2fax, tiff2fax, pcl2fax coverters as fax user (12 Oct 2021)
  * attempt to cope with receivers who signal RTN in ECM Phase D (23 Sep 2021)
  * fix hfaxd build when LDAP libs are not present (23 Sep 2021)
  * handle PPR echo after fourth PPR (22 Sep 2021)
  * don't use CRP when waiting for CFR following training (15 Sep 2021)
  * attempt to cope with receivers which signal CFR after PPS (14 Sep 2021)
  * cope with senders who signal FTT in Phase D (10 Sep 2021)
  * fix problem with handling NSF/CSI/DIS frame after CTC/EOR (9 Sep 2021)
  * cope with senders who signal PPS without the PPS FCF (9 Sep 2021)
  * handle echo of PPR when expecting CTC/EOR (8 Sep 2021)
  * add failure messages for unspecified training failures (7 Sep 2021)
  * don't use CRP when waiting for CTR (7 Sep 2021)
  * handle echo of EOR, don't use CRP when waiting for ERR (7 Sep 2021)
  * repeat PIN if sender repeats post-page or partial-page message (7-8 Sep 2021)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1654344000">- Project and download links switched to https
  libtiff44.diff added for tiff 4.x compatibility</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1672056000">- version 7.0.6
  * add support for libtiff v4.4 (10 Jun 2022)
  * libtiff44.diff removed
  * cope with SSL Fax senders who skip Phase C (5 May 2022)
  * add ability to trace SSL Fax data reception (3 May 2022)
  * handle timeout OK response to +FRH=3 and +FRM=n (25 Apr 2022)
  * don't leave the modem waiting for a response when in SSL Fax (25 Apr 2022)
  * improve recovery from unexpected SSL Fax terminations during ECM (15, 18, 26 Apr 2022)
  * try to cope with false "no dialtone" results (4, 8 Apr 2022)
  * add initial support for SSL Fax Proxy servers (4, 23 Feb; 4, 19 Apr; 10, 24 Jun 2022)
  * buildrequirement for libssl added (Thanks Dimstar)</changelog>
</package>
<package pkgid="263e2d4086146d06968bd2c30a0bc1d2790c3fe66a8c352fc55039618dce2e41" name="hylafax+" arch="i586">
  <version epoch="0" ver="7.0.6" rel="bp154.2.3.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1546948800">- migrate from cron to systemd timers (boo#1115442)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1547640000">- Dependency on hylafax-hfaxd for timers added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1547812800">- faxgetty@ service removed from %pre section, as it is only a placeholder</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548244800">- Reduce boilerplate generated from %service_* by calling it just
  once.</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1563451200">- Version 7.0.0
  * add LDAP features for compatibility with ActiveDirectory (25 Mar-1 Apr 2019)
  * fix recovery after SSL Fax "accept failure" (18 Mar 2019)
  * add TextFormat overstrike option and disable by default (6 Feb 2019)
  * fix the page size of cover sheets returned via notify (8 Jan 2019)
  * fix or silence numerous compiler warnings (19, 22, 28 Dec 2018)
  * fix pagehandling updating after a proxy has been used (7-8 Dec 2018)
  * add faxmail stderr output of RFC2047 decoding results (5 Dec 2018)
  * fix faxmail handling of headers encoded with UTF-8 (4 Dec 2018)
  * fix faxmail handling of base64-encoded text parts (4 Dec 2018)
  * add SSL Fax support (9-26, 29 Nov; 11, 18, 25 Dec 2018; 2, 7, 23 Jan 2019)</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1574424000">- build fails with libtiff 4.1: pretend, that 4.1 is similar to 4.0</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1574424001">- Version 7.0.1
  * create a client timeout setting and change the default from 60 to
  3600 seconds (26 Sep 2019)
  * extend timeout for receiving ECM frames (21 Aug 2019)
  * fix timeout in Class 1 frame reception (5 Aug 2019)
  * improve Class 1 protocol handling when MaxRecvPages exceeded (31 Jul 2019)
  * fix ModemGroup limit default (11 Jul 2019)
  * fix recovery for SSL Fax write failures (6 Jun 2019)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1581681600">- Version 7.0.2
  * change FIXEDWIDTH default to better accommodate auto-rotation (13 Dec 2019)
  * prevent SSL_accept() from blocking (5 Dec 2019)
  * support libtiff v4.1 (5 Dec 2019)
  * fix ignoremodembusy feature broken by ModemGroup limits feature (16 Nov 2019)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1591704000">- fix for boo#1172731
  VUL-0: EMBARGOED: CVE-2020-8024: hylafax+: Problematic permissions allow
    escalation from uucp to other users
  * adjusted authorisation
  * adjusted pre*/post* snipplets</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1597147200">- version 7.0.3
  * add UseSSLFax feature in sendfax, sendfax.conf, hyla.conf, and JobControl
  (31 Jul 2020)
  * be more resilient in listening for the Phase C carrier (30 Jul 2020)
  * make sure to return to command mode if HDLC receive times out (29 Jul 2020)
  * make faxmail ignore boundaries on parts other than multiparts (29 Jul 2020)
  * don't attempt to write zero bytes of data to a TIFF (29 Jul 2020)
  * don't ever respond to CRP with CRP (28 Jul 2020)
  * secure setup.cache/setup.modem - CVE-2020-15397 (27, 30 Jul 2020)
  * reset frame counter when a sender retransmits PPS for a previously confirmed
  ECM block (26 Jul 2020)
  * scrutinize PPM before concluding that the sender missed our MCF (23 Jul 2020)
  * fix modem recovery after SSL Fax failure (22, 26 Jul 2020)
  * ignore echo of PPR, RTN, CRP (10, 13, 21 Jul 2020)
  * attempt to handle NSF/CSI/DIS in Class 1 sending Phase D (6 Jul 2020)
  * run scripts directly rather than invoking them via a shell for security
  hardening (3-5 Jul 2020)
  * add senderFumblesECM feature (3 Jul 2020)
  * add support for PIN/PIP/PRI-Q/PPS-PRI-Q signals, add senderConfusesPIN
  feature, and utilize PIN for rare conditions where it may be helpful
  (2, 6, 13-14 Jul 2020)
  * add senderConfusesRTN feature (25-26 Jun 2020)
  * add MissedPageHandling feature (24 Jun 2020)
  * use and handle CFR in Phase D to retransmit Phase C (16, 23 Jun 2020)
  * cope with hearing echo of RR, CTC during Class 1 sending (15-17 Jun 2020)
  * fix listening for retransmission of MPS/EOP/EOM if it was received
  corrupt on the first attempt (15 Jun 2020)
  * secure temporary directory creation for faxsetup, faxaddmodem, and
  probemodem - CVE-2020-15396 (13 Jun 2020)
  * don't use CRP when receiving PPS/PPM as some senders think
  we are sending MCF (12 Jun 2020)
  * add BR_SSLFAX to show SSL Fax in notify and faxinfo output (1 Jun 2020)
  * have faxinfo put units on non-standard page dimensions (28 May 2020)
  * improve error messages for JobHost connection errors (22 May 2020)
  * fix perpetual blocking of jobs when a job preparation fails,
  attempt to fix similar blocking problems for bad jobs in
  batches, and add "unblock" faxconfig feature (21 May 2020)
  * ignore TCF if we're receiving an SSL Fax (31 Jan 2020)
  * fixes for build on FreeBSD 12.1 (31 Jan - 3 Feb 2020)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1602244800">- rearrange files-section (boo#1172731)</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1611662400">- Fix TW build by pretending tiff 4.2 is as good enough as 4.{0,1}</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1620475200">- Fix TW build by pretending tiff 4.4 is as good enough as 4.{0,1}</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1626091200">- Add hylafax service and helper for use with firewalld, and
  explain the details in README.SUSE.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1632312000">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * hylafax-faxgetty@.service
  * hylafax-faxq.service
  * hylafax-faxqclean.service
  * hylafax-hfaxd.service
  * hylafax-usage.service</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1634558400">- version 7.0.4
  * README.SUSE renamed
  * hylafax.diff added for boo#1191571 (pre-correction)
  * Dependencies on systemd-services adjusted
  * retry training twice at the same bitrate unless FTT (26 Aug 2021)
  * add missing reason messages for session failures (21 Aug 2021)
  * stop attempts to send or receive signals if the call ended prematurely (16-19 Aug 2021)
  * add Class1HasRMHookIndication (16 Aug 2021)
  * don't attempt sending DCN if we're already on hook (15, 17 Aug 2021)
  * end session sooner if receiver hangs up immediately after TCF or during prologue (14 Aug 2021)
  * fix some behavior following frame reception timeouts (13 Aug 2021)
  * improve behavior if procedural interrupt fails (12 Aug 2021)
  * handle sender repeating RR after we transmit MCF (10 Aug 2021)
  * add session logging of receipt of CFR/FTT signals (3 Aug 2021)
  * cope with receipt of PPR following CTC (3 Aug 2021)
  * attempt to cope with NSF/CSI/DIS after PPS, CTR, ERR, RR and improve coping with
    the same after MPS/EOP/EOM (2, 12, 14, 18 Aug 2021)
  * identify DCN after PPS as a receiver abort (2 Aug 2021)
  * attempt to cope with receipt of CTR after sending PPS (2 Aug 2021)
  * remove use of deprecated libtiff integer types and "register" storage class specifier (25 Jul 2021)
  * don't employ senderFumblesECM if V.34-Fax was negotiated (25 Jul 2021)
  * update configure to accept libtiff v4.2 and v4.3 (24 Jul 2021)
  * fix page handling "botch" if a job's first and previous attempts were on a proxy (20 Jul 2021)
  * fix data timeout for bitrates less than 14400 bps when non-zero scanline time (15 Jul 2021)
  * try to cope with T.38 invite stutter at beginning of send (15 Jul 2021)
  * decouple session logging from direct filesystem I/O (15 Jul 2021)
  * try to help receivers who may expect initial 1-bits to start high-speed data (8, 9 Jul, 4 Aug 2021)
  * improve tenacity of "persistent" ECM (26 Jun 2021)
  * maintain the same SSL Fax passcode during a single session (20 May 2021)
  * log detection of binary file transfer support in receivers (1 Apr 2021)
  * add support for SiLabs Si2417/Si2435 (5 Feb 2021)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648900800">- version 7.0.5
  * hylafax.diff removed - included in source
  * extend Class1RecvAbortOK = 0 timeout to 500 ms (4 Dec 2021)
  * cope with Si2435 V.34/V.8 connection glitch (17, 19 Nov 2021)
  * cope with spurious +FCERROR or other delayed messages from modem (26 Oct 2021)
  * avoid letting corrupt RTC signals lead to RTN (26 Oct 2021)
  * don't refer to DCN as an invalid response in error messages (20 Oct 2021)
  * handle TSI during procedural interrupt (19 Oct 2021)
  * do better with waiting on prologue frames from receiver (13 Oct 2021)
  * cope with echo of ERR (13 Oct 2021)
  * run ps2fax, pdf2fax, tiff2fax, pcl2fax coverters as fax user (12 Oct 2021)
  * attempt to cope with receivers who signal RTN in ECM Phase D (23 Sep 2021)
  * fix hfaxd build when LDAP libs are not present (23 Sep 2021)
  * handle PPR echo after fourth PPR (22 Sep 2021)
  * don't use CRP when waiting for CFR following training (15 Sep 2021)
  * attempt to cope with receivers which signal CFR after PPS (14 Sep 2021)
  * cope with senders who signal FTT in Phase D (10 Sep 2021)
  * fix problem with handling NSF/CSI/DIS frame after CTC/EOR (9 Sep 2021)
  * cope with senders who signal PPS without the PPS FCF (9 Sep 2021)
  * handle echo of PPR when expecting CTC/EOR (8 Sep 2021)
  * add failure messages for unspecified training failures (7 Sep 2021)
  * don't use CRP when waiting for CTR (7 Sep 2021)
  * handle echo of EOR, don't use CRP when waiting for ERR (7 Sep 2021)
  * repeat PIN if sender repeats post-page or partial-page message (7-8 Sep 2021)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1654344000">- Project and download links switched to https
  libtiff44.diff added for tiff 4.x compatibility</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1672056000">- version 7.0.6
  * add support for libtiff v4.4 (10 Jun 2022)
  * libtiff44.diff removed
  * cope with SSL Fax senders who skip Phase C (5 May 2022)
  * add ability to trace SSL Fax data reception (3 May 2022)
  * handle timeout OK response to +FRH=3 and +FRM=n (25 Apr 2022)
  * don't leave the modem waiting for a response when in SSL Fax (25 Apr 2022)
  * improve recovery from unexpected SSL Fax terminations during ECM (15, 18, 26 Apr 2022)
  * try to cope with false "no dialtone" results (4, 8 Apr 2022)
  * add initial support for SSL Fax Proxy servers (4, 23 Feb; 4, 19 Apr; 10, 24 Jun 2022)
  * buildrequirement for libssl added (Thanks Dimstar)</changelog>
</package>
<package pkgid="ff785678774e00747cda3a1985a87532751f544e5e708f7605094165e434d92d" name="hylafax+" arch="ppc64le">
  <version epoch="0" ver="7.0.6" rel="bp154.2.3.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1546948800">- migrate from cron to systemd timers (boo#1115442)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1547640000">- Dependency on hylafax-hfaxd for timers added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1547812800">- faxgetty@ service removed from %pre section, as it is only a placeholder</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548244800">- Reduce boilerplate generated from %service_* by calling it just
  once.</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1563451200">- Version 7.0.0
  * add LDAP features for compatibility with ActiveDirectory (25 Mar-1 Apr 2019)
  * fix recovery after SSL Fax "accept failure" (18 Mar 2019)
  * add TextFormat overstrike option and disable by default (6 Feb 2019)
  * fix the page size of cover sheets returned via notify (8 Jan 2019)
  * fix or silence numerous compiler warnings (19, 22, 28 Dec 2018)
  * fix pagehandling updating after a proxy has been used (7-8 Dec 2018)
  * add faxmail stderr output of RFC2047 decoding results (5 Dec 2018)
  * fix faxmail handling of headers encoded with UTF-8 (4 Dec 2018)
  * fix faxmail handling of base64-encoded text parts (4 Dec 2018)
  * add SSL Fax support (9-26, 29 Nov; 11, 18, 25 Dec 2018; 2, 7, 23 Jan 2019)</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1574424000">- build fails with libtiff 4.1: pretend, that 4.1 is similar to 4.0</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1574424001">- Version 7.0.1
  * create a client timeout setting and change the default from 60 to
  3600 seconds (26 Sep 2019)
  * extend timeout for receiving ECM frames (21 Aug 2019)
  * fix timeout in Class 1 frame reception (5 Aug 2019)
  * improve Class 1 protocol handling when MaxRecvPages exceeded (31 Jul 2019)
  * fix ModemGroup limit default (11 Jul 2019)
  * fix recovery for SSL Fax write failures (6 Jun 2019)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1581681600">- Version 7.0.2
  * change FIXEDWIDTH default to better accommodate auto-rotation (13 Dec 2019)
  * prevent SSL_accept() from blocking (5 Dec 2019)
  * support libtiff v4.1 (5 Dec 2019)
  * fix ignoremodembusy feature broken by ModemGroup limits feature (16 Nov 2019)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1591704000">- fix for boo#1172731
  VUL-0: EMBARGOED: CVE-2020-8024: hylafax+: Problematic permissions allow
    escalation from uucp to other users
  * adjusted authorisation
  * adjusted pre*/post* snipplets</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1597147200">- version 7.0.3
  * add UseSSLFax feature in sendfax, sendfax.conf, hyla.conf, and JobControl
  (31 Jul 2020)
  * be more resilient in listening for the Phase C carrier (30 Jul 2020)
  * make sure to return to command mode if HDLC receive times out (29 Jul 2020)
  * make faxmail ignore boundaries on parts other than multiparts (29 Jul 2020)
  * don't attempt to write zero bytes of data to a TIFF (29 Jul 2020)
  * don't ever respond to CRP with CRP (28 Jul 2020)
  * secure setup.cache/setup.modem - CVE-2020-15397 (27, 30 Jul 2020)
  * reset frame counter when a sender retransmits PPS for a previously confirmed
  ECM block (26 Jul 2020)
  * scrutinize PPM before concluding that the sender missed our MCF (23 Jul 2020)
  * fix modem recovery after SSL Fax failure (22, 26 Jul 2020)
  * ignore echo of PPR, RTN, CRP (10, 13, 21 Jul 2020)
  * attempt to handle NSF/CSI/DIS in Class 1 sending Phase D (6 Jul 2020)
  * run scripts directly rather than invoking them via a shell for security
  hardening (3-5 Jul 2020)
  * add senderFumblesECM feature (3 Jul 2020)
  * add support for PIN/PIP/PRI-Q/PPS-PRI-Q signals, add senderConfusesPIN
  feature, and utilize PIN for rare conditions where it may be helpful
  (2, 6, 13-14 Jul 2020)
  * add senderConfusesRTN feature (25-26 Jun 2020)
  * add MissedPageHandling feature (24 Jun 2020)
  * use and handle CFR in Phase D to retransmit Phase C (16, 23 Jun 2020)
  * cope with hearing echo of RR, CTC during Class 1 sending (15-17 Jun 2020)
  * fix listening for retransmission of MPS/EOP/EOM if it was received
  corrupt on the first attempt (15 Jun 2020)
  * secure temporary directory creation for faxsetup, faxaddmodem, and
  probemodem - CVE-2020-15396 (13 Jun 2020)
  * don't use CRP when receiving PPS/PPM as some senders think
  we are sending MCF (12 Jun 2020)
  * add BR_SSLFAX to show SSL Fax in notify and faxinfo output (1 Jun 2020)
  * have faxinfo put units on non-standard page dimensions (28 May 2020)
  * improve error messages for JobHost connection errors (22 May 2020)
  * fix perpetual blocking of jobs when a job preparation fails,
  attempt to fix similar blocking problems for bad jobs in
  batches, and add "unblock" faxconfig feature (21 May 2020)
  * ignore TCF if we're receiving an SSL Fax (31 Jan 2020)
  * fixes for build on FreeBSD 12.1 (31 Jan - 3 Feb 2020)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1602244800">- rearrange files-section (boo#1172731)</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1611662400">- Fix TW build by pretending tiff 4.2 is as good enough as 4.{0,1}</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1620475200">- Fix TW build by pretending tiff 4.4 is as good enough as 4.{0,1}</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1626091200">- Add hylafax service and helper for use with firewalld, and
  explain the details in README.SUSE.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1632312000">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * hylafax-faxgetty@.service
  * hylafax-faxq.service
  * hylafax-faxqclean.service
  * hylafax-hfaxd.service
  * hylafax-usage.service</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1634558400">- version 7.0.4
  * README.SUSE renamed
  * hylafax.diff added for boo#1191571 (pre-correction)
  * Dependencies on systemd-services adjusted
  * retry training twice at the same bitrate unless FTT (26 Aug 2021)
  * add missing reason messages for session failures (21 Aug 2021)
  * stop attempts to send or receive signals if the call ended prematurely (16-19 Aug 2021)
  * add Class1HasRMHookIndication (16 Aug 2021)
  * don't attempt sending DCN if we're already on hook (15, 17 Aug 2021)
  * end session sooner if receiver hangs up immediately after TCF or during prologue (14 Aug 2021)
  * fix some behavior following frame reception timeouts (13 Aug 2021)
  * improve behavior if procedural interrupt fails (12 Aug 2021)
  * handle sender repeating RR after we transmit MCF (10 Aug 2021)
  * add session logging of receipt of CFR/FTT signals (3 Aug 2021)
  * cope with receipt of PPR following CTC (3 Aug 2021)
  * attempt to cope with NSF/CSI/DIS after PPS, CTR, ERR, RR and improve coping with
    the same after MPS/EOP/EOM (2, 12, 14, 18 Aug 2021)
  * identify DCN after PPS as a receiver abort (2 Aug 2021)
  * attempt to cope with receipt of CTR after sending PPS (2 Aug 2021)
  * remove use of deprecated libtiff integer types and "register" storage class specifier (25 Jul 2021)
  * don't employ senderFumblesECM if V.34-Fax was negotiated (25 Jul 2021)
  * update configure to accept libtiff v4.2 and v4.3 (24 Jul 2021)
  * fix page handling "botch" if a job's first and previous attempts were on a proxy (20 Jul 2021)
  * fix data timeout for bitrates less than 14400 bps when non-zero scanline time (15 Jul 2021)
  * try to cope with T.38 invite stutter at beginning of send (15 Jul 2021)
  * decouple session logging from direct filesystem I/O (15 Jul 2021)
  * try to help receivers who may expect initial 1-bits to start high-speed data (8, 9 Jul, 4 Aug 2021)
  * improve tenacity of "persistent" ECM (26 Jun 2021)
  * maintain the same SSL Fax passcode during a single session (20 May 2021)
  * log detection of binary file transfer support in receivers (1 Apr 2021)
  * add support for SiLabs Si2417/Si2435 (5 Feb 2021)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648900800">- version 7.0.5
  * hylafax.diff removed - included in source
  * extend Class1RecvAbortOK = 0 timeout to 500 ms (4 Dec 2021)
  * cope with Si2435 V.34/V.8 connection glitch (17, 19 Nov 2021)
  * cope with spurious +FCERROR or other delayed messages from modem (26 Oct 2021)
  * avoid letting corrupt RTC signals lead to RTN (26 Oct 2021)
  * don't refer to DCN as an invalid response in error messages (20 Oct 2021)
  * handle TSI during procedural interrupt (19 Oct 2021)
  * do better with waiting on prologue frames from receiver (13 Oct 2021)
  * cope with echo of ERR (13 Oct 2021)
  * run ps2fax, pdf2fax, tiff2fax, pcl2fax coverters as fax user (12 Oct 2021)
  * attempt to cope with receivers who signal RTN in ECM Phase D (23 Sep 2021)
  * fix hfaxd build when LDAP libs are not present (23 Sep 2021)
  * handle PPR echo after fourth PPR (22 Sep 2021)
  * don't use CRP when waiting for CFR following training (15 Sep 2021)
  * attempt to cope with receivers which signal CFR after PPS (14 Sep 2021)
  * cope with senders who signal FTT in Phase D (10 Sep 2021)
  * fix problem with handling NSF/CSI/DIS frame after CTC/EOR (9 Sep 2021)
  * cope with senders who signal PPS without the PPS FCF (9 Sep 2021)
  * handle echo of PPR when expecting CTC/EOR (8 Sep 2021)
  * add failure messages for unspecified training failures (7 Sep 2021)
  * don't use CRP when waiting for CTR (7 Sep 2021)
  * handle echo of EOR, don't use CRP when waiting for ERR (7 Sep 2021)
  * repeat PIN if sender repeats post-page or partial-page message (7-8 Sep 2021)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1654344000">- Project and download links switched to https
  libtiff44.diff added for tiff 4.x compatibility</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1672056000">- version 7.0.6
  * add support for libtiff v4.4 (10 Jun 2022)
  * libtiff44.diff removed
  * cope with SSL Fax senders who skip Phase C (5 May 2022)
  * add ability to trace SSL Fax data reception (3 May 2022)
  * handle timeout OK response to +FRH=3 and +FRM=n (25 Apr 2022)
  * don't leave the modem waiting for a response when in SSL Fax (25 Apr 2022)
  * improve recovery from unexpected SSL Fax terminations during ECM (15, 18, 26 Apr 2022)
  * try to cope with false "no dialtone" results (4, 8 Apr 2022)
  * add initial support for SSL Fax Proxy servers (4, 23 Feb; 4, 19 Apr; 10, 24 Jun 2022)
  * buildrequirement for libssl added (Thanks Dimstar)</changelog>
</package>
<package pkgid="6164246c15e845a4a4255654d3f5e6bff9ab9328331e1a9609f89d110008b676" name="hylafax+" arch="s390x">
  <version epoch="0" ver="7.0.6" rel="bp154.2.3.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1546948800">- migrate from cron to systemd timers (boo#1115442)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1547640000">- Dependency on hylafax-hfaxd for timers added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1547812800">- faxgetty@ service removed from %pre section, as it is only a placeholder</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548244800">- Reduce boilerplate generated from %service_* by calling it just
  once.</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1563451200">- Version 7.0.0
  * add LDAP features for compatibility with ActiveDirectory (25 Mar-1 Apr 2019)
  * fix recovery after SSL Fax "accept failure" (18 Mar 2019)
  * add TextFormat overstrike option and disable by default (6 Feb 2019)
  * fix the page size of cover sheets returned via notify (8 Jan 2019)
  * fix or silence numerous compiler warnings (19, 22, 28 Dec 2018)
  * fix pagehandling updating after a proxy has been used (7-8 Dec 2018)
  * add faxmail stderr output of RFC2047 decoding results (5 Dec 2018)
  * fix faxmail handling of headers encoded with UTF-8 (4 Dec 2018)
  * fix faxmail handling of base64-encoded text parts (4 Dec 2018)
  * add SSL Fax support (9-26, 29 Nov; 11, 18, 25 Dec 2018; 2, 7, 23 Jan 2019)</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1574424000">- build fails with libtiff 4.1: pretend, that 4.1 is similar to 4.0</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1574424001">- Version 7.0.1
  * create a client timeout setting and change the default from 60 to
  3600 seconds (26 Sep 2019)
  * extend timeout for receiving ECM frames (21 Aug 2019)
  * fix timeout in Class 1 frame reception (5 Aug 2019)
  * improve Class 1 protocol handling when MaxRecvPages exceeded (31 Jul 2019)
  * fix ModemGroup limit default (11 Jul 2019)
  * fix recovery for SSL Fax write failures (6 Jun 2019)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1581681600">- Version 7.0.2
  * change FIXEDWIDTH default to better accommodate auto-rotation (13 Dec 2019)
  * prevent SSL_accept() from blocking (5 Dec 2019)
  * support libtiff v4.1 (5 Dec 2019)
  * fix ignoremodembusy feature broken by ModemGroup limits feature (16 Nov 2019)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1591704000">- fix for boo#1172731
  VUL-0: EMBARGOED: CVE-2020-8024: hylafax+: Problematic permissions allow
    escalation from uucp to other users
  * adjusted authorisation
  * adjusted pre*/post* snipplets</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1597147200">- version 7.0.3
  * add UseSSLFax feature in sendfax, sendfax.conf, hyla.conf, and JobControl
  (31 Jul 2020)
  * be more resilient in listening for the Phase C carrier (30 Jul 2020)
  * make sure to return to command mode if HDLC receive times out (29 Jul 2020)
  * make faxmail ignore boundaries on parts other than multiparts (29 Jul 2020)
  * don't attempt to write zero bytes of data to a TIFF (29 Jul 2020)
  * don't ever respond to CRP with CRP (28 Jul 2020)
  * secure setup.cache/setup.modem - CVE-2020-15397 (27, 30 Jul 2020)
  * reset frame counter when a sender retransmits PPS for a previously confirmed
  ECM block (26 Jul 2020)
  * scrutinize PPM before concluding that the sender missed our MCF (23 Jul 2020)
  * fix modem recovery after SSL Fax failure (22, 26 Jul 2020)
  * ignore echo of PPR, RTN, CRP (10, 13, 21 Jul 2020)
  * attempt to handle NSF/CSI/DIS in Class 1 sending Phase D (6 Jul 2020)
  * run scripts directly rather than invoking them via a shell for security
  hardening (3-5 Jul 2020)
  * add senderFumblesECM feature (3 Jul 2020)
  * add support for PIN/PIP/PRI-Q/PPS-PRI-Q signals, add senderConfusesPIN
  feature, and utilize PIN for rare conditions where it may be helpful
  (2, 6, 13-14 Jul 2020)
  * add senderConfusesRTN feature (25-26 Jun 2020)
  * add MissedPageHandling feature (24 Jun 2020)
  * use and handle CFR in Phase D to retransmit Phase C (16, 23 Jun 2020)
  * cope with hearing echo of RR, CTC during Class 1 sending (15-17 Jun 2020)
  * fix listening for retransmission of MPS/EOP/EOM if it was received
  corrupt on the first attempt (15 Jun 2020)
  * secure temporary directory creation for faxsetup, faxaddmodem, and
  probemodem - CVE-2020-15396 (13 Jun 2020)
  * don't use CRP when receiving PPS/PPM as some senders think
  we are sending MCF (12 Jun 2020)
  * add BR_SSLFAX to show SSL Fax in notify and faxinfo output (1 Jun 2020)
  * have faxinfo put units on non-standard page dimensions (28 May 2020)
  * improve error messages for JobHost connection errors (22 May 2020)
  * fix perpetual blocking of jobs when a job preparation fails,
  attempt to fix similar blocking problems for bad jobs in
  batches, and add "unblock" faxconfig feature (21 May 2020)
  * ignore TCF if we're receiving an SSL Fax (31 Jan 2020)
  * fixes for build on FreeBSD 12.1 (31 Jan - 3 Feb 2020)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1602244800">- rearrange files-section (boo#1172731)</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1611662400">- Fix TW build by pretending tiff 4.2 is as good enough as 4.{0,1}</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1620475200">- Fix TW build by pretending tiff 4.4 is as good enough as 4.{0,1}</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1626091200">- Add hylafax service and helper for use with firewalld, and
  explain the details in README.SUSE.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1632312000">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * hylafax-faxgetty@.service
  * hylafax-faxq.service
  * hylafax-faxqclean.service
  * hylafax-hfaxd.service
  * hylafax-usage.service</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1634558400">- version 7.0.4
  * README.SUSE renamed
  * hylafax.diff added for boo#1191571 (pre-correction)
  * Dependencies on systemd-services adjusted
  * retry training twice at the same bitrate unless FTT (26 Aug 2021)
  * add missing reason messages for session failures (21 Aug 2021)
  * stop attempts to send or receive signals if the call ended prematurely (16-19 Aug 2021)
  * add Class1HasRMHookIndication (16 Aug 2021)
  * don't attempt sending DCN if we're already on hook (15, 17 Aug 2021)
  * end session sooner if receiver hangs up immediately after TCF or during prologue (14 Aug 2021)
  * fix some behavior following frame reception timeouts (13 Aug 2021)
  * improve behavior if procedural interrupt fails (12 Aug 2021)
  * handle sender repeating RR after we transmit MCF (10 Aug 2021)
  * add session logging of receipt of CFR/FTT signals (3 Aug 2021)
  * cope with receipt of PPR following CTC (3 Aug 2021)
  * attempt to cope with NSF/CSI/DIS after PPS, CTR, ERR, RR and improve coping with
    the same after MPS/EOP/EOM (2, 12, 14, 18 Aug 2021)
  * identify DCN after PPS as a receiver abort (2 Aug 2021)
  * attempt to cope with receipt of CTR after sending PPS (2 Aug 2021)
  * remove use of deprecated libtiff integer types and "register" storage class specifier (25 Jul 2021)
  * don't employ senderFumblesECM if V.34-Fax was negotiated (25 Jul 2021)
  * update configure to accept libtiff v4.2 and v4.3 (24 Jul 2021)
  * fix page handling "botch" if a job's first and previous attempts were on a proxy (20 Jul 2021)
  * fix data timeout for bitrates less than 14400 bps when non-zero scanline time (15 Jul 2021)
  * try to cope with T.38 invite stutter at beginning of send (15 Jul 2021)
  * decouple session logging from direct filesystem I/O (15 Jul 2021)
  * try to help receivers who may expect initial 1-bits to start high-speed data (8, 9 Jul, 4 Aug 2021)
  * improve tenacity of "persistent" ECM (26 Jun 2021)
  * maintain the same SSL Fax passcode during a single session (20 May 2021)
  * log detection of binary file transfer support in receivers (1 Apr 2021)
  * add support for SiLabs Si2417/Si2435 (5 Feb 2021)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648900800">- version 7.0.5
  * hylafax.diff removed - included in source
  * extend Class1RecvAbortOK = 0 timeout to 500 ms (4 Dec 2021)
  * cope with Si2435 V.34/V.8 connection glitch (17, 19 Nov 2021)
  * cope with spurious +FCERROR or other delayed messages from modem (26 Oct 2021)
  * avoid letting corrupt RTC signals lead to RTN (26 Oct 2021)
  * don't refer to DCN as an invalid response in error messages (20 Oct 2021)
  * handle TSI during procedural interrupt (19 Oct 2021)
  * do better with waiting on prologue frames from receiver (13 Oct 2021)
  * cope with echo of ERR (13 Oct 2021)
  * run ps2fax, pdf2fax, tiff2fax, pcl2fax coverters as fax user (12 Oct 2021)
  * attempt to cope with receivers who signal RTN in ECM Phase D (23 Sep 2021)
  * fix hfaxd build when LDAP libs are not present (23 Sep 2021)
  * handle PPR echo after fourth PPR (22 Sep 2021)
  * don't use CRP when waiting for CFR following training (15 Sep 2021)
  * attempt to cope with receivers which signal CFR after PPS (14 Sep 2021)
  * cope with senders who signal FTT in Phase D (10 Sep 2021)
  * fix problem with handling NSF/CSI/DIS frame after CTC/EOR (9 Sep 2021)
  * cope with senders who signal PPS without the PPS FCF (9 Sep 2021)
  * handle echo of PPR when expecting CTC/EOR (8 Sep 2021)
  * add failure messages for unspecified training failures (7 Sep 2021)
  * don't use CRP when waiting for CTR (7 Sep 2021)
  * handle echo of EOR, don't use CRP when waiting for ERR (7 Sep 2021)
  * repeat PIN if sender repeats post-page or partial-page message (7-8 Sep 2021)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1654344000">- Project and download links switched to https
  libtiff44.diff added for tiff 4.x compatibility</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1672056000">- version 7.0.6
  * add support for libtiff v4.4 (10 Jun 2022)
  * libtiff44.diff removed
  * cope with SSL Fax senders who skip Phase C (5 May 2022)
  * add ability to trace SSL Fax data reception (3 May 2022)
  * handle timeout OK response to +FRH=3 and +FRM=n (25 Apr 2022)
  * don't leave the modem waiting for a response when in SSL Fax (25 Apr 2022)
  * improve recovery from unexpected SSL Fax terminations during ECM (15, 18, 26 Apr 2022)
  * try to cope with false "no dialtone" results (4, 8 Apr 2022)
  * add initial support for SSL Fax Proxy servers (4, 23 Feb; 4, 19 Apr; 10, 24 Jun 2022)
  * buildrequirement for libssl added (Thanks Dimstar)</changelog>
</package>
<package pkgid="9a9ee9c978710dafd8ff621f5bf18e577c1ef077270ed2a45e977d772e5ba6c2" name="hylafax+" arch="src">
  <version epoch="0" ver="7.0.6" rel="bp154.2.3.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1546948800">- migrate from cron to systemd timers (boo#1115442)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1547640000">- Dependency on hylafax-hfaxd for timers added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1547812800">- faxgetty@ service removed from %pre section, as it is only a placeholder</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548244800">- Reduce boilerplate generated from %service_* by calling it just
  once.</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1563451200">- Version 7.0.0
  * add LDAP features for compatibility with ActiveDirectory (25 Mar-1 Apr 2019)
  * fix recovery after SSL Fax "accept failure" (18 Mar 2019)
  * add TextFormat overstrike option and disable by default (6 Feb 2019)
  * fix the page size of cover sheets returned via notify (8 Jan 2019)
  * fix or silence numerous compiler warnings (19, 22, 28 Dec 2018)
  * fix pagehandling updating after a proxy has been used (7-8 Dec 2018)
  * add faxmail stderr output of RFC2047 decoding results (5 Dec 2018)
  * fix faxmail handling of headers encoded with UTF-8 (4 Dec 2018)
  * fix faxmail handling of base64-encoded text parts (4 Dec 2018)
  * add SSL Fax support (9-26, 29 Nov; 11, 18, 25 Dec 2018; 2, 7, 23 Jan 2019)</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1574424000">- build fails with libtiff 4.1: pretend, that 4.1 is similar to 4.0</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1574424001">- Version 7.0.1
  * create a client timeout setting and change the default from 60 to
  3600 seconds (26 Sep 2019)
  * extend timeout for receiving ECM frames (21 Aug 2019)
  * fix timeout in Class 1 frame reception (5 Aug 2019)
  * improve Class 1 protocol handling when MaxRecvPages exceeded (31 Jul 2019)
  * fix ModemGroup limit default (11 Jul 2019)
  * fix recovery for SSL Fax write failures (6 Jun 2019)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1581681600">- Version 7.0.2
  * change FIXEDWIDTH default to better accommodate auto-rotation (13 Dec 2019)
  * prevent SSL_accept() from blocking (5 Dec 2019)
  * support libtiff v4.1 (5 Dec 2019)
  * fix ignoremodembusy feature broken by ModemGroup limits feature (16 Nov 2019)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1591704000">- fix for boo#1172731
  VUL-0: EMBARGOED: CVE-2020-8024: hylafax+: Problematic permissions allow
    escalation from uucp to other users
  * adjusted authorisation
  * adjusted pre*/post* snipplets</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1597147200">- version 7.0.3
  * add UseSSLFax feature in sendfax, sendfax.conf, hyla.conf, and JobControl
  (31 Jul 2020)
  * be more resilient in listening for the Phase C carrier (30 Jul 2020)
  * make sure to return to command mode if HDLC receive times out (29 Jul 2020)
  * make faxmail ignore boundaries on parts other than multiparts (29 Jul 2020)
  * don't attempt to write zero bytes of data to a TIFF (29 Jul 2020)
  * don't ever respond to CRP with CRP (28 Jul 2020)
  * secure setup.cache/setup.modem - CVE-2020-15397 (27, 30 Jul 2020)
  * reset frame counter when a sender retransmits PPS for a previously confirmed
  ECM block (26 Jul 2020)
  * scrutinize PPM before concluding that the sender missed our MCF (23 Jul 2020)
  * fix modem recovery after SSL Fax failure (22, 26 Jul 2020)
  * ignore echo of PPR, RTN, CRP (10, 13, 21 Jul 2020)
  * attempt to handle NSF/CSI/DIS in Class 1 sending Phase D (6 Jul 2020)
  * run scripts directly rather than invoking them via a shell for security
  hardening (3-5 Jul 2020)
  * add senderFumblesECM feature (3 Jul 2020)
  * add support for PIN/PIP/PRI-Q/PPS-PRI-Q signals, add senderConfusesPIN
  feature, and utilize PIN for rare conditions where it may be helpful
  (2, 6, 13-14 Jul 2020)
  * add senderConfusesRTN feature (25-26 Jun 2020)
  * add MissedPageHandling feature (24 Jun 2020)
  * use and handle CFR in Phase D to retransmit Phase C (16, 23 Jun 2020)
  * cope with hearing echo of RR, CTC during Class 1 sending (15-17 Jun 2020)
  * fix listening for retransmission of MPS/EOP/EOM if it was received
  corrupt on the first attempt (15 Jun 2020)
  * secure temporary directory creation for faxsetup, faxaddmodem, and
  probemodem - CVE-2020-15396 (13 Jun 2020)
  * don't use CRP when receiving PPS/PPM as some senders think
  we are sending MCF (12 Jun 2020)
  * add BR_SSLFAX to show SSL Fax in notify and faxinfo output (1 Jun 2020)
  * have faxinfo put units on non-standard page dimensions (28 May 2020)
  * improve error messages for JobHost connection errors (22 May 2020)
  * fix perpetual blocking of jobs when a job preparation fails,
  attempt to fix similar blocking problems for bad jobs in
  batches, and add "unblock" faxconfig feature (21 May 2020)
  * ignore TCF if we're receiving an SSL Fax (31 Jan 2020)
  * fixes for build on FreeBSD 12.1 (31 Jan - 3 Feb 2020)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1602244800">- rearrange files-section (boo#1172731)</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1611662400">- Fix TW build by pretending tiff 4.2 is as good enough as 4.{0,1}</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1620475200">- Fix TW build by pretending tiff 4.4 is as good enough as 4.{0,1}</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1626091200">- Add hylafax service and helper for use with firewalld, and
  explain the details in README.SUSE.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1632312000">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * hylafax-faxgetty@.service
  * hylafax-faxq.service
  * hylafax-faxqclean.service
  * hylafax-hfaxd.service
  * hylafax-usage.service</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1634558400">- version 7.0.4
  * README.SUSE renamed
  * hylafax.diff added for boo#1191571 (pre-correction)
  * Dependencies on systemd-services adjusted
  * retry training twice at the same bitrate unless FTT (26 Aug 2021)
  * add missing reason messages for session failures (21 Aug 2021)
  * stop attempts to send or receive signals if the call ended prematurely (16-19 Aug 2021)
  * add Class1HasRMHookIndication (16 Aug 2021)
  * don't attempt sending DCN if we're already on hook (15, 17 Aug 2021)
  * end session sooner if receiver hangs up immediately after TCF or during prologue (14 Aug 2021)
  * fix some behavior following frame reception timeouts (13 Aug 2021)
  * improve behavior if procedural interrupt fails (12 Aug 2021)
  * handle sender repeating RR after we transmit MCF (10 Aug 2021)
  * add session logging of receipt of CFR/FTT signals (3 Aug 2021)
  * cope with receipt of PPR following CTC (3 Aug 2021)
  * attempt to cope with NSF/CSI/DIS after PPS, CTR, ERR, RR and improve coping with
    the same after MPS/EOP/EOM (2, 12, 14, 18 Aug 2021)
  * identify DCN after PPS as a receiver abort (2 Aug 2021)
  * attempt to cope with receipt of CTR after sending PPS (2 Aug 2021)
  * remove use of deprecated libtiff integer types and "register" storage class specifier (25 Jul 2021)
  * don't employ senderFumblesECM if V.34-Fax was negotiated (25 Jul 2021)
  * update configure to accept libtiff v4.2 and v4.3 (24 Jul 2021)
  * fix page handling "botch" if a job's first and previous attempts were on a proxy (20 Jul 2021)
  * fix data timeout for bitrates less than 14400 bps when non-zero scanline time (15 Jul 2021)
  * try to cope with T.38 invite stutter at beginning of send (15 Jul 2021)
  * decouple session logging from direct filesystem I/O (15 Jul 2021)
  * try to help receivers who may expect initial 1-bits to start high-speed data (8, 9 Jul, 4 Aug 2021)
  * improve tenacity of "persistent" ECM (26 Jun 2021)
  * maintain the same SSL Fax passcode during a single session (20 May 2021)
  * log detection of binary file transfer support in receivers (1 Apr 2021)
  * add support for SiLabs Si2417/Si2435 (5 Feb 2021)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648900800">- version 7.0.5
  * hylafax.diff removed - included in source
  * extend Class1RecvAbortOK = 0 timeout to 500 ms (4 Dec 2021)
  * cope with Si2435 V.34/V.8 connection glitch (17, 19 Nov 2021)
  * cope with spurious +FCERROR or other delayed messages from modem (26 Oct 2021)
  * avoid letting corrupt RTC signals lead to RTN (26 Oct 2021)
  * don't refer to DCN as an invalid response in error messages (20 Oct 2021)
  * handle TSI during procedural interrupt (19 Oct 2021)
  * do better with waiting on prologue frames from receiver (13 Oct 2021)
  * cope with echo of ERR (13 Oct 2021)
  * run ps2fax, pdf2fax, tiff2fax, pcl2fax coverters as fax user (12 Oct 2021)
  * attempt to cope with receivers who signal RTN in ECM Phase D (23 Sep 2021)
  * fix hfaxd build when LDAP libs are not present (23 Sep 2021)
  * handle PPR echo after fourth PPR (22 Sep 2021)
  * don't use CRP when waiting for CFR following training (15 Sep 2021)
  * attempt to cope with receivers which signal CFR after PPS (14 Sep 2021)
  * cope with senders who signal FTT in Phase D (10 Sep 2021)
  * fix problem with handling NSF/CSI/DIS frame after CTC/EOR (9 Sep 2021)
  * cope with senders who signal PPS without the PPS FCF (9 Sep 2021)
  * handle echo of PPR when expecting CTC/EOR (8 Sep 2021)
  * add failure messages for unspecified training failures (7 Sep 2021)
  * don't use CRP when waiting for CTR (7 Sep 2021)
  * handle echo of EOR, don't use CRP when waiting for ERR (7 Sep 2021)
  * repeat PIN if sender repeats post-page or partial-page message (7-8 Sep 2021)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1654344000">- Project and download links switched to https
  libtiff44.diff added for tiff 4.x compatibility</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1672056000">- version 7.0.6
  * add support for libtiff v4.4 (10 Jun 2022)
  * libtiff44.diff removed
  * cope with SSL Fax senders who skip Phase C (5 May 2022)
  * add ability to trace SSL Fax data reception (3 May 2022)
  * handle timeout OK response to +FRH=3 and +FRM=n (25 Apr 2022)
  * don't leave the modem waiting for a response when in SSL Fax (25 Apr 2022)
  * improve recovery from unexpected SSL Fax terminations during ECM (15, 18, 26 Apr 2022)
  * try to cope with false "no dialtone" results (4, 8 Apr 2022)
  * add initial support for SSL Fax Proxy servers (4, 23 Feb; 4, 19 Apr; 10, 24 Jun 2022)
  * buildrequirement for libssl added (Thanks Dimstar)</changelog>
</package>
<package pkgid="7463df0ab5c43f12af4e6091dbd512ee1647e993f2deff0b6539e9feedc39527" name="hylafax+" arch="x86_64">
  <version epoch="0" ver="7.0.6" rel="bp154.2.3.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1546948800">- migrate from cron to systemd timers (boo#1115442)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1547640000">- Dependency on hylafax-hfaxd for timers added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1547812800">- faxgetty@ service removed from %pre section, as it is only a placeholder</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548244800">- Reduce boilerplate generated from %service_* by calling it just
  once.</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1563451200">- Version 7.0.0
  * add LDAP features for compatibility with ActiveDirectory (25 Mar-1 Apr 2019)
  * fix recovery after SSL Fax "accept failure" (18 Mar 2019)
  * add TextFormat overstrike option and disable by default (6 Feb 2019)
  * fix the page size of cover sheets returned via notify (8 Jan 2019)
  * fix or silence numerous compiler warnings (19, 22, 28 Dec 2018)
  * fix pagehandling updating after a proxy has been used (7-8 Dec 2018)
  * add faxmail stderr output of RFC2047 decoding results (5 Dec 2018)
  * fix faxmail handling of headers encoded with UTF-8 (4 Dec 2018)
  * fix faxmail handling of base64-encoded text parts (4 Dec 2018)
  * add SSL Fax support (9-26, 29 Nov; 11, 18, 25 Dec 2018; 2, 7, 23 Jan 2019)</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1574424000">- build fails with libtiff 4.1: pretend, that 4.1 is similar to 4.0</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1574424001">- Version 7.0.1
  * create a client timeout setting and change the default from 60 to
  3600 seconds (26 Sep 2019)
  * extend timeout for receiving ECM frames (21 Aug 2019)
  * fix timeout in Class 1 frame reception (5 Aug 2019)
  * improve Class 1 protocol handling when MaxRecvPages exceeded (31 Jul 2019)
  * fix ModemGroup limit default (11 Jul 2019)
  * fix recovery for SSL Fax write failures (6 Jun 2019)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1581681600">- Version 7.0.2
  * change FIXEDWIDTH default to better accommodate auto-rotation (13 Dec 2019)
  * prevent SSL_accept() from blocking (5 Dec 2019)
  * support libtiff v4.1 (5 Dec 2019)
  * fix ignoremodembusy feature broken by ModemGroup limits feature (16 Nov 2019)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1591704000">- fix for boo#1172731
  VUL-0: EMBARGOED: CVE-2020-8024: hylafax+: Problematic permissions allow
    escalation from uucp to other users
  * adjusted authorisation
  * adjusted pre*/post* snipplets</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1597147200">- version 7.0.3
  * add UseSSLFax feature in sendfax, sendfax.conf, hyla.conf, and JobControl
  (31 Jul 2020)
  * be more resilient in listening for the Phase C carrier (30 Jul 2020)
  * make sure to return to command mode if HDLC receive times out (29 Jul 2020)
  * make faxmail ignore boundaries on parts other than multiparts (29 Jul 2020)
  * don't attempt to write zero bytes of data to a TIFF (29 Jul 2020)
  * don't ever respond to CRP with CRP (28 Jul 2020)
  * secure setup.cache/setup.modem - CVE-2020-15397 (27, 30 Jul 2020)
  * reset frame counter when a sender retransmits PPS for a previously confirmed
  ECM block (26 Jul 2020)
  * scrutinize PPM before concluding that the sender missed our MCF (23 Jul 2020)
  * fix modem recovery after SSL Fax failure (22, 26 Jul 2020)
  * ignore echo of PPR, RTN, CRP (10, 13, 21 Jul 2020)
  * attempt to handle NSF/CSI/DIS in Class 1 sending Phase D (6 Jul 2020)
  * run scripts directly rather than invoking them via a shell for security
  hardening (3-5 Jul 2020)
  * add senderFumblesECM feature (3 Jul 2020)
  * add support for PIN/PIP/PRI-Q/PPS-PRI-Q signals, add senderConfusesPIN
  feature, and utilize PIN for rare conditions where it may be helpful
  (2, 6, 13-14 Jul 2020)
  * add senderConfusesRTN feature (25-26 Jun 2020)
  * add MissedPageHandling feature (24 Jun 2020)
  * use and handle CFR in Phase D to retransmit Phase C (16, 23 Jun 2020)
  * cope with hearing echo of RR, CTC during Class 1 sending (15-17 Jun 2020)
  * fix listening for retransmission of MPS/EOP/EOM if it was received
  corrupt on the first attempt (15 Jun 2020)
  * secure temporary directory creation for faxsetup, faxaddmodem, and
  probemodem - CVE-2020-15396 (13 Jun 2020)
  * don't use CRP when receiving PPS/PPM as some senders think
  we are sending MCF (12 Jun 2020)
  * add BR_SSLFAX to show SSL Fax in notify and faxinfo output (1 Jun 2020)
  * have faxinfo put units on non-standard page dimensions (28 May 2020)
  * improve error messages for JobHost connection errors (22 May 2020)
  * fix perpetual blocking of jobs when a job preparation fails,
  attempt to fix similar blocking problems for bad jobs in
  batches, and add "unblock" faxconfig feature (21 May 2020)
  * ignore TCF if we're receiving an SSL Fax (31 Jan 2020)
  * fixes for build on FreeBSD 12.1 (31 Jan - 3 Feb 2020)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1602244800">- rearrange files-section (boo#1172731)</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1611662400">- Fix TW build by pretending tiff 4.2 is as good enough as 4.{0,1}</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1620475200">- Fix TW build by pretending tiff 4.4 is as good enough as 4.{0,1}</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1626091200">- Add hylafax service and helper for use with firewalld, and
  explain the details in README.SUSE.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1632312000">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * hylafax-faxgetty@.service
  * hylafax-faxq.service
  * hylafax-faxqclean.service
  * hylafax-hfaxd.service
  * hylafax-usage.service</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1634558400">- version 7.0.4
  * README.SUSE renamed
  * hylafax.diff added for boo#1191571 (pre-correction)
  * Dependencies on systemd-services adjusted
  * retry training twice at the same bitrate unless FTT (26 Aug 2021)
  * add missing reason messages for session failures (21 Aug 2021)
  * stop attempts to send or receive signals if the call ended prematurely (16-19 Aug 2021)
  * add Class1HasRMHookIndication (16 Aug 2021)
  * don't attempt sending DCN if we're already on hook (15, 17 Aug 2021)
  * end session sooner if receiver hangs up immediately after TCF or during prologue (14 Aug 2021)
  * fix some behavior following frame reception timeouts (13 Aug 2021)
  * improve behavior if procedural interrupt fails (12 Aug 2021)
  * handle sender repeating RR after we transmit MCF (10 Aug 2021)
  * add session logging of receipt of CFR/FTT signals (3 Aug 2021)
  * cope with receipt of PPR following CTC (3 Aug 2021)
  * attempt to cope with NSF/CSI/DIS after PPS, CTR, ERR, RR and improve coping with
    the same after MPS/EOP/EOM (2, 12, 14, 18 Aug 2021)
  * identify DCN after PPS as a receiver abort (2 Aug 2021)
  * attempt to cope with receipt of CTR after sending PPS (2 Aug 2021)
  * remove use of deprecated libtiff integer types and "register" storage class specifier (25 Jul 2021)
  * don't employ senderFumblesECM if V.34-Fax was negotiated (25 Jul 2021)
  * update configure to accept libtiff v4.2 and v4.3 (24 Jul 2021)
  * fix page handling "botch" if a job's first and previous attempts were on a proxy (20 Jul 2021)
  * fix data timeout for bitrates less than 14400 bps when non-zero scanline time (15 Jul 2021)
  * try to cope with T.38 invite stutter at beginning of send (15 Jul 2021)
  * decouple session logging from direct filesystem I/O (15 Jul 2021)
  * try to help receivers who may expect initial 1-bits to start high-speed data (8, 9 Jul, 4 Aug 2021)
  * improve tenacity of "persistent" ECM (26 Jun 2021)
  * maintain the same SSL Fax passcode during a single session (20 May 2021)
  * log detection of binary file transfer support in receivers (1 Apr 2021)
  * add support for SiLabs Si2417/Si2435 (5 Feb 2021)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648900800">- version 7.0.5
  * hylafax.diff removed - included in source
  * extend Class1RecvAbortOK = 0 timeout to 500 ms (4 Dec 2021)
  * cope with Si2435 V.34/V.8 connection glitch (17, 19 Nov 2021)
  * cope with spurious +FCERROR or other delayed messages from modem (26 Oct 2021)
  * avoid letting corrupt RTC signals lead to RTN (26 Oct 2021)
  * don't refer to DCN as an invalid response in error messages (20 Oct 2021)
  * handle TSI during procedural interrupt (19 Oct 2021)
  * do better with waiting on prologue frames from receiver (13 Oct 2021)
  * cope with echo of ERR (13 Oct 2021)
  * run ps2fax, pdf2fax, tiff2fax, pcl2fax coverters as fax user (12 Oct 2021)
  * attempt to cope with receivers who signal RTN in ECM Phase D (23 Sep 2021)
  * fix hfaxd build when LDAP libs are not present (23 Sep 2021)
  * handle PPR echo after fourth PPR (22 Sep 2021)
  * don't use CRP when waiting for CFR following training (15 Sep 2021)
  * attempt to cope with receivers which signal CFR after PPS (14 Sep 2021)
  * cope with senders who signal FTT in Phase D (10 Sep 2021)
  * fix problem with handling NSF/CSI/DIS frame after CTC/EOR (9 Sep 2021)
  * cope with senders who signal PPS without the PPS FCF (9 Sep 2021)
  * handle echo of PPR when expecting CTC/EOR (8 Sep 2021)
  * add failure messages for unspecified training failures (7 Sep 2021)
  * don't use CRP when waiting for CTR (7 Sep 2021)
  * handle echo of EOR, don't use CRP when waiting for ERR (7 Sep 2021)
  * repeat PIN if sender repeats post-page or partial-page message (7-8 Sep 2021)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1654344000">- Project and download links switched to https
  libtiff44.diff added for tiff 4.x compatibility</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1672056000">- version 7.0.6
  * add support for libtiff v4.4 (10 Jun 2022)
  * libtiff44.diff removed
  * cope with SSL Fax senders who skip Phase C (5 May 2022)
  * add ability to trace SSL Fax data reception (3 May 2022)
  * handle timeout OK response to +FRH=3 and +FRM=n (25 Apr 2022)
  * don't leave the modem waiting for a response when in SSL Fax (25 Apr 2022)
  * improve recovery from unexpected SSL Fax terminations during ECM (15, 18, 26 Apr 2022)
  * try to cope with false "no dialtone" results (4, 8 Apr 2022)
  * add initial support for SSL Fax Proxy servers (4, 23 Feb; 4, 19 Apr; 10, 24 Jun 2022)
  * buildrequirement for libssl added (Thanks Dimstar)</changelog>
</package>
<package pkgid="04631f29e19e07fb4a26c47c046c9c59c126a9622dbf6a9905a83dacc170c413" name="hylafax+" arch="aarch64">
  <version epoch="0" ver="7.0.7" rel="bp154.2.6.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1547812800">- faxgetty@ service removed from %pre section, as it is only a placeholder</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548244800">- Reduce boilerplate generated from %service_* by calling it just
  once.</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1563451200">- Version 7.0.0
  * add LDAP features for compatibility with ActiveDirectory (25 Mar-1 Apr 2019)
  * fix recovery after SSL Fax "accept failure" (18 Mar 2019)
  * add TextFormat overstrike option and disable by default (6 Feb 2019)
  * fix the page size of cover sheets returned via notify (8 Jan 2019)
  * fix or silence numerous compiler warnings (19, 22, 28 Dec 2018)
  * fix pagehandling updating after a proxy has been used (7-8 Dec 2018)
  * add faxmail stderr output of RFC2047 decoding results (5 Dec 2018)
  * fix faxmail handling of headers encoded with UTF-8 (4 Dec 2018)
  * fix faxmail handling of base64-encoded text parts (4 Dec 2018)
  * add SSL Fax support (9-26, 29 Nov; 11, 18, 25 Dec 2018; 2, 7, 23 Jan 2019)</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1574424000">- build fails with libtiff 4.1: pretend, that 4.1 is similar to 4.0</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1574424001">- Version 7.0.1
  * create a client timeout setting and change the default from 60 to
  3600 seconds (26 Sep 2019)
  * extend timeout for receiving ECM frames (21 Aug 2019)
  * fix timeout in Class 1 frame reception (5 Aug 2019)
  * improve Class 1 protocol handling when MaxRecvPages exceeded (31 Jul 2019)
  * fix ModemGroup limit default (11 Jul 2019)
  * fix recovery for SSL Fax write failures (6 Jun 2019)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1581681600">- Version 7.0.2
  * change FIXEDWIDTH default to better accommodate auto-rotation (13 Dec 2019)
  * prevent SSL_accept() from blocking (5 Dec 2019)
  * support libtiff v4.1 (5 Dec 2019)
  * fix ignoremodembusy feature broken by ModemGroup limits feature (16 Nov 2019)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1591704000">- fix for boo#1172731
  VUL-0: EMBARGOED: CVE-2020-8024: hylafax+: Problematic permissions allow
    escalation from uucp to other users
  * adjusted authorisation
  * adjusted pre*/post* snipplets</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1597147200">- version 7.0.3
  * add UseSSLFax feature in sendfax, sendfax.conf, hyla.conf, and JobControl
  (31 Jul 2020)
  * be more resilient in listening for the Phase C carrier (30 Jul 2020)
  * make sure to return to command mode if HDLC receive times out (29 Jul 2020)
  * make faxmail ignore boundaries on parts other than multiparts (29 Jul 2020)
  * don't attempt to write zero bytes of data to a TIFF (29 Jul 2020)
  * don't ever respond to CRP with CRP (28 Jul 2020)
  * secure setup.cache/setup.modem - CVE-2020-15397 (27, 30 Jul 2020)
  * reset frame counter when a sender retransmits PPS for a previously confirmed
  ECM block (26 Jul 2020)
  * scrutinize PPM before concluding that the sender missed our MCF (23 Jul 2020)
  * fix modem recovery after SSL Fax failure (22, 26 Jul 2020)
  * ignore echo of PPR, RTN, CRP (10, 13, 21 Jul 2020)
  * attempt to handle NSF/CSI/DIS in Class 1 sending Phase D (6 Jul 2020)
  * run scripts directly rather than invoking them via a shell for security
  hardening (3-5 Jul 2020)
  * add senderFumblesECM feature (3 Jul 2020)
  * add support for PIN/PIP/PRI-Q/PPS-PRI-Q signals, add senderConfusesPIN
  feature, and utilize PIN for rare conditions where it may be helpful
  (2, 6, 13-14 Jul 2020)
  * add senderConfusesRTN feature (25-26 Jun 2020)
  * add MissedPageHandling feature (24 Jun 2020)
  * use and handle CFR in Phase D to retransmit Phase C (16, 23 Jun 2020)
  * cope with hearing echo of RR, CTC during Class 1 sending (15-17 Jun 2020)
  * fix listening for retransmission of MPS/EOP/EOM if it was received
  corrupt on the first attempt (15 Jun 2020)
  * secure temporary directory creation for faxsetup, faxaddmodem, and
  probemodem - CVE-2020-15396 (13 Jun 2020)
  * don't use CRP when receiving PPS/PPM as some senders think
  we are sending MCF (12 Jun 2020)
  * add BR_SSLFAX to show SSL Fax in notify and faxinfo output (1 Jun 2020)
  * have faxinfo put units on non-standard page dimensions (28 May 2020)
  * improve error messages for JobHost connection errors (22 May 2020)
  * fix perpetual blocking of jobs when a job preparation fails,
  attempt to fix similar blocking problems for bad jobs in
  batches, and add "unblock" faxconfig feature (21 May 2020)
  * ignore TCF if we're receiving an SSL Fax (31 Jan 2020)
  * fixes for build on FreeBSD 12.1 (31 Jan - 3 Feb 2020)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1602244800">- rearrange files-section (boo#1172731)</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1611662400">- Fix TW build by pretending tiff 4.2 is as good enough as 4.{0,1}</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1620475200">- Fix TW build by pretending tiff 4.4 is as good enough as 4.{0,1}</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1626091200">- Add hylafax service and helper for use with firewalld, and
  explain the details in README.SUSE.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1632312000">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * hylafax-faxgetty@.service
  * hylafax-faxq.service
  * hylafax-faxqclean.service
  * hylafax-hfaxd.service
  * hylafax-usage.service</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1634558400">- version 7.0.4
  * README.SUSE renamed
  * hylafax.diff added for boo#1191571 (pre-correction)
  * Dependencies on systemd-services adjusted
  * retry training twice at the same bitrate unless FTT (26 Aug 2021)
  * add missing reason messages for session failures (21 Aug 2021)
  * stop attempts to send or receive signals if the call ended prematurely (16-19 Aug 2021)
  * add Class1HasRMHookIndication (16 Aug 2021)
  * don't attempt sending DCN if we're already on hook (15, 17 Aug 2021)
  * end session sooner if receiver hangs up immediately after TCF or during prologue (14 Aug 2021)
  * fix some behavior following frame reception timeouts (13 Aug 2021)
  * improve behavior if procedural interrupt fails (12 Aug 2021)
  * handle sender repeating RR after we transmit MCF (10 Aug 2021)
  * add session logging of receipt of CFR/FTT signals (3 Aug 2021)
  * cope with receipt of PPR following CTC (3 Aug 2021)
  * attempt to cope with NSF/CSI/DIS after PPS, CTR, ERR, RR and improve coping with
    the same after MPS/EOP/EOM (2, 12, 14, 18 Aug 2021)
  * identify DCN after PPS as a receiver abort (2 Aug 2021)
  * attempt to cope with receipt of CTR after sending PPS (2 Aug 2021)
  * remove use of deprecated libtiff integer types and "register" storage class specifier (25 Jul 2021)
  * don't employ senderFumblesECM if V.34-Fax was negotiated (25 Jul 2021)
  * update configure to accept libtiff v4.2 and v4.3 (24 Jul 2021)
  * fix page handling "botch" if a job's first and previous attempts were on a proxy (20 Jul 2021)
  * fix data timeout for bitrates less than 14400 bps when non-zero scanline time (15 Jul 2021)
  * try to cope with T.38 invite stutter at beginning of send (15 Jul 2021)
  * decouple session logging from direct filesystem I/O (15 Jul 2021)
  * try to help receivers who may expect initial 1-bits to start high-speed data (8, 9 Jul, 4 Aug 2021)
  * improve tenacity of "persistent" ECM (26 Jun 2021)
  * maintain the same SSL Fax passcode during a single session (20 May 2021)
  * log detection of binary file transfer support in receivers (1 Apr 2021)
  * add support for SiLabs Si2417/Si2435 (5 Feb 2021)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648900800">- version 7.0.5
  * hylafax.diff removed - included in source
  * extend Class1RecvAbortOK = 0 timeout to 500 ms (4 Dec 2021)
  * cope with Si2435 V.34/V.8 connection glitch (17, 19 Nov 2021)
  * cope with spurious +FCERROR or other delayed messages from modem (26 Oct 2021)
  * avoid letting corrupt RTC signals lead to RTN (26 Oct 2021)
  * don't refer to DCN as an invalid response in error messages (20 Oct 2021)
  * handle TSI during procedural interrupt (19 Oct 2021)
  * do better with waiting on prologue frames from receiver (13 Oct 2021)
  * cope with echo of ERR (13 Oct 2021)
  * run ps2fax, pdf2fax, tiff2fax, pcl2fax coverters as fax user (12 Oct 2021)
  * attempt to cope with receivers who signal RTN in ECM Phase D (23 Sep 2021)
  * fix hfaxd build when LDAP libs are not present (23 Sep 2021)
  * handle PPR echo after fourth PPR (22 Sep 2021)
  * don't use CRP when waiting for CFR following training (15 Sep 2021)
  * attempt to cope with receivers which signal CFR after PPS (14 Sep 2021)
  * cope with senders who signal FTT in Phase D (10 Sep 2021)
  * fix problem with handling NSF/CSI/DIS frame after CTC/EOR (9 Sep 2021)
  * cope with senders who signal PPS without the PPS FCF (9 Sep 2021)
  * handle echo of PPR when expecting CTC/EOR (8 Sep 2021)
  * add failure messages for unspecified training failures (7 Sep 2021)
  * don't use CRP when waiting for CTR (7 Sep 2021)
  * handle echo of EOR, don't use CRP when waiting for ERR (7 Sep 2021)
  * repeat PIN if sender repeats post-page or partial-page message (7-8 Sep 2021)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1654344000">- Project and download links switched to https
  libtiff44.diff added for tiff 4.x compatibility</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1672056000">- version 7.0.6
  * add support for libtiff v4.4 (10 Jun 2022)
  * libtiff44.diff removed
  * cope with SSL Fax senders who skip Phase C (5 May 2022)
  * add ability to trace SSL Fax data reception (3 May 2022)
  * handle timeout OK response to +FRH=3 and +FRM=n (25 Apr 2022)
  * don't leave the modem waiting for a response when in SSL Fax (25 Apr 2022)
  * improve recovery from unexpected SSL Fax terminations during ECM (15, 18, 26 Apr 2022)
  * try to cope with false "no dialtone" results (4, 8 Apr 2022)
  * add initial support for SSL Fax Proxy servers (4, 23 Feb; 4, 19 Apr; 10, 24 Jun 2022)
  * buildrequirement for libssl added (Thanks Dimstar)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1673524800">- tiff_450.diff added
  updated to trunk r2695 for tiff 4.5 support - See CHANGES for details</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1674561600">- version 7.0.7
  * tiff_450.diff removed
  * constrain job priority to 0-255 (20 Jan 2023)
  * add support for libtiff v4.5.0 (4-5 Jan 2023)
  * add some Si2435 configuration considerations (27 Dec 2022, 20 Jan 2023)
  * if Class1RecvAbortOK is 0 then don't bother with the CAN byte at all (31 Oct 2022)
  * check that the modem isn't trying to deliver a message when we're trying to send
    binary data to it (16-17 Oct 2022)
  * prevent inherited values from creeping into subsequent xferfaxlog data (26 Aug 2022)
  * add external reference feature in dialrules (18 Aug 2022)</changelog>
</package>
<package pkgid="b51b2a33ce4b19012a84aa8ed664726d8d1905c78af97cb5a9336b14633442a7" name="hylafax+" arch="i586">
  <version epoch="0" ver="7.0.7" rel="bp154.2.6.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1547812800">- faxgetty@ service removed from %pre section, as it is only a placeholder</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548244800">- Reduce boilerplate generated from %service_* by calling it just
  once.</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1563451200">- Version 7.0.0
  * add LDAP features for compatibility with ActiveDirectory (25 Mar-1 Apr 2019)
  * fix recovery after SSL Fax "accept failure" (18 Mar 2019)
  * add TextFormat overstrike option and disable by default (6 Feb 2019)
  * fix the page size of cover sheets returned via notify (8 Jan 2019)
  * fix or silence numerous compiler warnings (19, 22, 28 Dec 2018)
  * fix pagehandling updating after a proxy has been used (7-8 Dec 2018)
  * add faxmail stderr output of RFC2047 decoding results (5 Dec 2018)
  * fix faxmail handling of headers encoded with UTF-8 (4 Dec 2018)
  * fix faxmail handling of base64-encoded text parts (4 Dec 2018)
  * add SSL Fax support (9-26, 29 Nov; 11, 18, 25 Dec 2018; 2, 7, 23 Jan 2019)</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1574424000">- build fails with libtiff 4.1: pretend, that 4.1 is similar to 4.0</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1574424001">- Version 7.0.1
  * create a client timeout setting and change the default from 60 to
  3600 seconds (26 Sep 2019)
  * extend timeout for receiving ECM frames (21 Aug 2019)
  * fix timeout in Class 1 frame reception (5 Aug 2019)
  * improve Class 1 protocol handling when MaxRecvPages exceeded (31 Jul 2019)
  * fix ModemGroup limit default (11 Jul 2019)
  * fix recovery for SSL Fax write failures (6 Jun 2019)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1581681600">- Version 7.0.2
  * change FIXEDWIDTH default to better accommodate auto-rotation (13 Dec 2019)
  * prevent SSL_accept() from blocking (5 Dec 2019)
  * support libtiff v4.1 (5 Dec 2019)
  * fix ignoremodembusy feature broken by ModemGroup limits feature (16 Nov 2019)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1591704000">- fix for boo#1172731
  VUL-0: EMBARGOED: CVE-2020-8024: hylafax+: Problematic permissions allow
    escalation from uucp to other users
  * adjusted authorisation
  * adjusted pre*/post* snipplets</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1597147200">- version 7.0.3
  * add UseSSLFax feature in sendfax, sendfax.conf, hyla.conf, and JobControl
  (31 Jul 2020)
  * be more resilient in listening for the Phase C carrier (30 Jul 2020)
  * make sure to return to command mode if HDLC receive times out (29 Jul 2020)
  * make faxmail ignore boundaries on parts other than multiparts (29 Jul 2020)
  * don't attempt to write zero bytes of data to a TIFF (29 Jul 2020)
  * don't ever respond to CRP with CRP (28 Jul 2020)
  * secure setup.cache/setup.modem - CVE-2020-15397 (27, 30 Jul 2020)
  * reset frame counter when a sender retransmits PPS for a previously confirmed
  ECM block (26 Jul 2020)
  * scrutinize PPM before concluding that the sender missed our MCF (23 Jul 2020)
  * fix modem recovery after SSL Fax failure (22, 26 Jul 2020)
  * ignore echo of PPR, RTN, CRP (10, 13, 21 Jul 2020)
  * attempt to handle NSF/CSI/DIS in Class 1 sending Phase D (6 Jul 2020)
  * run scripts directly rather than invoking them via a shell for security
  hardening (3-5 Jul 2020)
  * add senderFumblesECM feature (3 Jul 2020)
  * add support for PIN/PIP/PRI-Q/PPS-PRI-Q signals, add senderConfusesPIN
  feature, and utilize PIN for rare conditions where it may be helpful
  (2, 6, 13-14 Jul 2020)
  * add senderConfusesRTN feature (25-26 Jun 2020)
  * add MissedPageHandling feature (24 Jun 2020)
  * use and handle CFR in Phase D to retransmit Phase C (16, 23 Jun 2020)
  * cope with hearing echo of RR, CTC during Class 1 sending (15-17 Jun 2020)
  * fix listening for retransmission of MPS/EOP/EOM if it was received
  corrupt on the first attempt (15 Jun 2020)
  * secure temporary directory creation for faxsetup, faxaddmodem, and
  probemodem - CVE-2020-15396 (13 Jun 2020)
  * don't use CRP when receiving PPS/PPM as some senders think
  we are sending MCF (12 Jun 2020)
  * add BR_SSLFAX to show SSL Fax in notify and faxinfo output (1 Jun 2020)
  * have faxinfo put units on non-standard page dimensions (28 May 2020)
  * improve error messages for JobHost connection errors (22 May 2020)
  * fix perpetual blocking of jobs when a job preparation fails,
  attempt to fix similar blocking problems for bad jobs in
  batches, and add "unblock" faxconfig feature (21 May 2020)
  * ignore TCF if we're receiving an SSL Fax (31 Jan 2020)
  * fixes for build on FreeBSD 12.1 (31 Jan - 3 Feb 2020)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1602244800">- rearrange files-section (boo#1172731)</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1611662400">- Fix TW build by pretending tiff 4.2 is as good enough as 4.{0,1}</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1620475200">- Fix TW build by pretending tiff 4.4 is as good enough as 4.{0,1}</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1626091200">- Add hylafax service and helper for use with firewalld, and
  explain the details in README.SUSE.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1632312000">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * hylafax-faxgetty@.service
  * hylafax-faxq.service
  * hylafax-faxqclean.service
  * hylafax-hfaxd.service
  * hylafax-usage.service</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1634558400">- version 7.0.4
  * README.SUSE renamed
  * hylafax.diff added for boo#1191571 (pre-correction)
  * Dependencies on systemd-services adjusted
  * retry training twice at the same bitrate unless FTT (26 Aug 2021)
  * add missing reason messages for session failures (21 Aug 2021)
  * stop attempts to send or receive signals if the call ended prematurely (16-19 Aug 2021)
  * add Class1HasRMHookIndication (16 Aug 2021)
  * don't attempt sending DCN if we're already on hook (15, 17 Aug 2021)
  * end session sooner if receiver hangs up immediately after TCF or during prologue (14 Aug 2021)
  * fix some behavior following frame reception timeouts (13 Aug 2021)
  * improve behavior if procedural interrupt fails (12 Aug 2021)
  * handle sender repeating RR after we transmit MCF (10 Aug 2021)
  * add session logging of receipt of CFR/FTT signals (3 Aug 2021)
  * cope with receipt of PPR following CTC (3 Aug 2021)
  * attempt to cope with NSF/CSI/DIS after PPS, CTR, ERR, RR and improve coping with
    the same after MPS/EOP/EOM (2, 12, 14, 18 Aug 2021)
  * identify DCN after PPS as a receiver abort (2 Aug 2021)
  * attempt to cope with receipt of CTR after sending PPS (2 Aug 2021)
  * remove use of deprecated libtiff integer types and "register" storage class specifier (25 Jul 2021)
  * don't employ senderFumblesECM if V.34-Fax was negotiated (25 Jul 2021)
  * update configure to accept libtiff v4.2 and v4.3 (24 Jul 2021)
  * fix page handling "botch" if a job's first and previous attempts were on a proxy (20 Jul 2021)
  * fix data timeout for bitrates less than 14400 bps when non-zero scanline time (15 Jul 2021)
  * try to cope with T.38 invite stutter at beginning of send (15 Jul 2021)
  * decouple session logging from direct filesystem I/O (15 Jul 2021)
  * try to help receivers who may expect initial 1-bits to start high-speed data (8, 9 Jul, 4 Aug 2021)
  * improve tenacity of "persistent" ECM (26 Jun 2021)
  * maintain the same SSL Fax passcode during a single session (20 May 2021)
  * log detection of binary file transfer support in receivers (1 Apr 2021)
  * add support for SiLabs Si2417/Si2435 (5 Feb 2021)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648900800">- version 7.0.5
  * hylafax.diff removed - included in source
  * extend Class1RecvAbortOK = 0 timeout to 500 ms (4 Dec 2021)
  * cope with Si2435 V.34/V.8 connection glitch (17, 19 Nov 2021)
  * cope with spurious +FCERROR or other delayed messages from modem (26 Oct 2021)
  * avoid letting corrupt RTC signals lead to RTN (26 Oct 2021)
  * don't refer to DCN as an invalid response in error messages (20 Oct 2021)
  * handle TSI during procedural interrupt (19 Oct 2021)
  * do better with waiting on prologue frames from receiver (13 Oct 2021)
  * cope with echo of ERR (13 Oct 2021)
  * run ps2fax, pdf2fax, tiff2fax, pcl2fax coverters as fax user (12 Oct 2021)
  * attempt to cope with receivers who signal RTN in ECM Phase D (23 Sep 2021)
  * fix hfaxd build when LDAP libs are not present (23 Sep 2021)
  * handle PPR echo after fourth PPR (22 Sep 2021)
  * don't use CRP when waiting for CFR following training (15 Sep 2021)
  * attempt to cope with receivers which signal CFR after PPS (14 Sep 2021)
  * cope with senders who signal FTT in Phase D (10 Sep 2021)
  * fix problem with handling NSF/CSI/DIS frame after CTC/EOR (9 Sep 2021)
  * cope with senders who signal PPS without the PPS FCF (9 Sep 2021)
  * handle echo of PPR when expecting CTC/EOR (8 Sep 2021)
  * add failure messages for unspecified training failures (7 Sep 2021)
  * don't use CRP when waiting for CTR (7 Sep 2021)
  * handle echo of EOR, don't use CRP when waiting for ERR (7 Sep 2021)
  * repeat PIN if sender repeats post-page or partial-page message (7-8 Sep 2021)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1654344000">- Project and download links switched to https
  libtiff44.diff added for tiff 4.x compatibility</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1672056000">- version 7.0.6
  * add support for libtiff v4.4 (10 Jun 2022)
  * libtiff44.diff removed
  * cope with SSL Fax senders who skip Phase C (5 May 2022)
  * add ability to trace SSL Fax data reception (3 May 2022)
  * handle timeout OK response to +FRH=3 and +FRM=n (25 Apr 2022)
  * don't leave the modem waiting for a response when in SSL Fax (25 Apr 2022)
  * improve recovery from unexpected SSL Fax terminations during ECM (15, 18, 26 Apr 2022)
  * try to cope with false "no dialtone" results (4, 8 Apr 2022)
  * add initial support for SSL Fax Proxy servers (4, 23 Feb; 4, 19 Apr; 10, 24 Jun 2022)
  * buildrequirement for libssl added (Thanks Dimstar)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1673524800">- tiff_450.diff added
  updated to trunk r2695 for tiff 4.5 support - See CHANGES for details</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1674561600">- version 7.0.7
  * tiff_450.diff removed
  * constrain job priority to 0-255 (20 Jan 2023)
  * add support for libtiff v4.5.0 (4-5 Jan 2023)
  * add some Si2435 configuration considerations (27 Dec 2022, 20 Jan 2023)
  * if Class1RecvAbortOK is 0 then don't bother with the CAN byte at all (31 Oct 2022)
  * check that the modem isn't trying to deliver a message when we're trying to send
    binary data to it (16-17 Oct 2022)
  * prevent inherited values from creeping into subsequent xferfaxlog data (26 Aug 2022)
  * add external reference feature in dialrules (18 Aug 2022)</changelog>
</package>
<package pkgid="79c20d0635dcd86c8d8623bb7cd36b27926396a1e87c4f365fbd131b2610f24e" name="hylafax+" arch="ppc64le">
  <version epoch="0" ver="7.0.7" rel="bp154.2.6.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1547812800">- faxgetty@ service removed from %pre section, as it is only a placeholder</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548244800">- Reduce boilerplate generated from %service_* by calling it just
  once.</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1563451200">- Version 7.0.0
  * add LDAP features for compatibility with ActiveDirectory (25 Mar-1 Apr 2019)
  * fix recovery after SSL Fax "accept failure" (18 Mar 2019)
  * add TextFormat overstrike option and disable by default (6 Feb 2019)
  * fix the page size of cover sheets returned via notify (8 Jan 2019)
  * fix or silence numerous compiler warnings (19, 22, 28 Dec 2018)
  * fix pagehandling updating after a proxy has been used (7-8 Dec 2018)
  * add faxmail stderr output of RFC2047 decoding results (5 Dec 2018)
  * fix faxmail handling of headers encoded with UTF-8 (4 Dec 2018)
  * fix faxmail handling of base64-encoded text parts (4 Dec 2018)
  * add SSL Fax support (9-26, 29 Nov; 11, 18, 25 Dec 2018; 2, 7, 23 Jan 2019)</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1574424000">- build fails with libtiff 4.1: pretend, that 4.1 is similar to 4.0</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1574424001">- Version 7.0.1
  * create a client timeout setting and change the default from 60 to
  3600 seconds (26 Sep 2019)
  * extend timeout for receiving ECM frames (21 Aug 2019)
  * fix timeout in Class 1 frame reception (5 Aug 2019)
  * improve Class 1 protocol handling when MaxRecvPages exceeded (31 Jul 2019)
  * fix ModemGroup limit default (11 Jul 2019)
  * fix recovery for SSL Fax write failures (6 Jun 2019)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1581681600">- Version 7.0.2
  * change FIXEDWIDTH default to better accommodate auto-rotation (13 Dec 2019)
  * prevent SSL_accept() from blocking (5 Dec 2019)
  * support libtiff v4.1 (5 Dec 2019)
  * fix ignoremodembusy feature broken by ModemGroup limits feature (16 Nov 2019)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1591704000">- fix for boo#1172731
  VUL-0: EMBARGOED: CVE-2020-8024: hylafax+: Problematic permissions allow
    escalation from uucp to other users
  * adjusted authorisation
  * adjusted pre*/post* snipplets</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1597147200">- version 7.0.3
  * add UseSSLFax feature in sendfax, sendfax.conf, hyla.conf, and JobControl
  (31 Jul 2020)
  * be more resilient in listening for the Phase C carrier (30 Jul 2020)
  * make sure to return to command mode if HDLC receive times out (29 Jul 2020)
  * make faxmail ignore boundaries on parts other than multiparts (29 Jul 2020)
  * don't attempt to write zero bytes of data to a TIFF (29 Jul 2020)
  * don't ever respond to CRP with CRP (28 Jul 2020)
  * secure setup.cache/setup.modem - CVE-2020-15397 (27, 30 Jul 2020)
  * reset frame counter when a sender retransmits PPS for a previously confirmed
  ECM block (26 Jul 2020)
  * scrutinize PPM before concluding that the sender missed our MCF (23 Jul 2020)
  * fix modem recovery after SSL Fax failure (22, 26 Jul 2020)
  * ignore echo of PPR, RTN, CRP (10, 13, 21 Jul 2020)
  * attempt to handle NSF/CSI/DIS in Class 1 sending Phase D (6 Jul 2020)
  * run scripts directly rather than invoking them via a shell for security
  hardening (3-5 Jul 2020)
  * add senderFumblesECM feature (3 Jul 2020)
  * add support for PIN/PIP/PRI-Q/PPS-PRI-Q signals, add senderConfusesPIN
  feature, and utilize PIN for rare conditions where it may be helpful
  (2, 6, 13-14 Jul 2020)
  * add senderConfusesRTN feature (25-26 Jun 2020)
  * add MissedPageHandling feature (24 Jun 2020)
  * use and handle CFR in Phase D to retransmit Phase C (16, 23 Jun 2020)
  * cope with hearing echo of RR, CTC during Class 1 sending (15-17 Jun 2020)
  * fix listening for retransmission of MPS/EOP/EOM if it was received
  corrupt on the first attempt (15 Jun 2020)
  * secure temporary directory creation for faxsetup, faxaddmodem, and
  probemodem - CVE-2020-15396 (13 Jun 2020)
  * don't use CRP when receiving PPS/PPM as some senders think
  we are sending MCF (12 Jun 2020)
  * add BR_SSLFAX to show SSL Fax in notify and faxinfo output (1 Jun 2020)
  * have faxinfo put units on non-standard page dimensions (28 May 2020)
  * improve error messages for JobHost connection errors (22 May 2020)
  * fix perpetual blocking of jobs when a job preparation fails,
  attempt to fix similar blocking problems for bad jobs in
  batches, and add "unblock" faxconfig feature (21 May 2020)
  * ignore TCF if we're receiving an SSL Fax (31 Jan 2020)
  * fixes for build on FreeBSD 12.1 (31 Jan - 3 Feb 2020)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1602244800">- rearrange files-section (boo#1172731)</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1611662400">- Fix TW build by pretending tiff 4.2 is as good enough as 4.{0,1}</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1620475200">- Fix TW build by pretending tiff 4.4 is as good enough as 4.{0,1}</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1626091200">- Add hylafax service and helper for use with firewalld, and
  explain the details in README.SUSE.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1632312000">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * hylafax-faxgetty@.service
  * hylafax-faxq.service
  * hylafax-faxqclean.service
  * hylafax-hfaxd.service
  * hylafax-usage.service</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1634558400">- version 7.0.4
  * README.SUSE renamed
  * hylafax.diff added for boo#1191571 (pre-correction)
  * Dependencies on systemd-services adjusted
  * retry training twice at the same bitrate unless FTT (26 Aug 2021)
  * add missing reason messages for session failures (21 Aug 2021)
  * stop attempts to send or receive signals if the call ended prematurely (16-19 Aug 2021)
  * add Class1HasRMHookIndication (16 Aug 2021)
  * don't attempt sending DCN if we're already on hook (15, 17 Aug 2021)
  * end session sooner if receiver hangs up immediately after TCF or during prologue (14 Aug 2021)
  * fix some behavior following frame reception timeouts (13 Aug 2021)
  * improve behavior if procedural interrupt fails (12 Aug 2021)
  * handle sender repeating RR after we transmit MCF (10 Aug 2021)
  * add session logging of receipt of CFR/FTT signals (3 Aug 2021)
  * cope with receipt of PPR following CTC (3 Aug 2021)
  * attempt to cope with NSF/CSI/DIS after PPS, CTR, ERR, RR and improve coping with
    the same after MPS/EOP/EOM (2, 12, 14, 18 Aug 2021)
  * identify DCN after PPS as a receiver abort (2 Aug 2021)
  * attempt to cope with receipt of CTR after sending PPS (2 Aug 2021)
  * remove use of deprecated libtiff integer types and "register" storage class specifier (25 Jul 2021)
  * don't employ senderFumblesECM if V.34-Fax was negotiated (25 Jul 2021)
  * update configure to accept libtiff v4.2 and v4.3 (24 Jul 2021)
  * fix page handling "botch" if a job's first and previous attempts were on a proxy (20 Jul 2021)
  * fix data timeout for bitrates less than 14400 bps when non-zero scanline time (15 Jul 2021)
  * try to cope with T.38 invite stutter at beginning of send (15 Jul 2021)
  * decouple session logging from direct filesystem I/O (15 Jul 2021)
  * try to help receivers who may expect initial 1-bits to start high-speed data (8, 9 Jul, 4 Aug 2021)
  * improve tenacity of "persistent" ECM (26 Jun 2021)
  * maintain the same SSL Fax passcode during a single session (20 May 2021)
  * log detection of binary file transfer support in receivers (1 Apr 2021)
  * add support for SiLabs Si2417/Si2435 (5 Feb 2021)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648900800">- version 7.0.5
  * hylafax.diff removed - included in source
  * extend Class1RecvAbortOK = 0 timeout to 500 ms (4 Dec 2021)
  * cope with Si2435 V.34/V.8 connection glitch (17, 19 Nov 2021)
  * cope with spurious +FCERROR or other delayed messages from modem (26 Oct 2021)
  * avoid letting corrupt RTC signals lead to RTN (26 Oct 2021)
  * don't refer to DCN as an invalid response in error messages (20 Oct 2021)
  * handle TSI during procedural interrupt (19 Oct 2021)
  * do better with waiting on prologue frames from receiver (13 Oct 2021)
  * cope with echo of ERR (13 Oct 2021)
  * run ps2fax, pdf2fax, tiff2fax, pcl2fax coverters as fax user (12 Oct 2021)
  * attempt to cope with receivers who signal RTN in ECM Phase D (23 Sep 2021)
  * fix hfaxd build when LDAP libs are not present (23 Sep 2021)
  * handle PPR echo after fourth PPR (22 Sep 2021)
  * don't use CRP when waiting for CFR following training (15 Sep 2021)
  * attempt to cope with receivers which signal CFR after PPS (14 Sep 2021)
  * cope with senders who signal FTT in Phase D (10 Sep 2021)
  * fix problem with handling NSF/CSI/DIS frame after CTC/EOR (9 Sep 2021)
  * cope with senders who signal PPS without the PPS FCF (9 Sep 2021)
  * handle echo of PPR when expecting CTC/EOR (8 Sep 2021)
  * add failure messages for unspecified training failures (7 Sep 2021)
  * don't use CRP when waiting for CTR (7 Sep 2021)
  * handle echo of EOR, don't use CRP when waiting for ERR (7 Sep 2021)
  * repeat PIN if sender repeats post-page or partial-page message (7-8 Sep 2021)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1654344000">- Project and download links switched to https
  libtiff44.diff added for tiff 4.x compatibility</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1672056000">- version 7.0.6
  * add support for libtiff v4.4 (10 Jun 2022)
  * libtiff44.diff removed
  * cope with SSL Fax senders who skip Phase C (5 May 2022)
  * add ability to trace SSL Fax data reception (3 May 2022)
  * handle timeout OK response to +FRH=3 and +FRM=n (25 Apr 2022)
  * don't leave the modem waiting for a response when in SSL Fax (25 Apr 2022)
  * improve recovery from unexpected SSL Fax terminations during ECM (15, 18, 26 Apr 2022)
  * try to cope with false "no dialtone" results (4, 8 Apr 2022)
  * add initial support for SSL Fax Proxy servers (4, 23 Feb; 4, 19 Apr; 10, 24 Jun 2022)
  * buildrequirement for libssl added (Thanks Dimstar)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1673524800">- tiff_450.diff added
  updated to trunk r2695 for tiff 4.5 support - See CHANGES for details</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1674561600">- version 7.0.7
  * tiff_450.diff removed
  * constrain job priority to 0-255 (20 Jan 2023)
  * add support for libtiff v4.5.0 (4-5 Jan 2023)
  * add some Si2435 configuration considerations (27 Dec 2022, 20 Jan 2023)
  * if Class1RecvAbortOK is 0 then don't bother with the CAN byte at all (31 Oct 2022)
  * check that the modem isn't trying to deliver a message when we're trying to send
    binary data to it (16-17 Oct 2022)
  * prevent inherited values from creeping into subsequent xferfaxlog data (26 Aug 2022)
  * add external reference feature in dialrules (18 Aug 2022)</changelog>
</package>
<package pkgid="0adb99cb9c2546d6652d89e74fcf5f409f131173106cb796640c569b1b44ec89" name="hylafax+" arch="s390x">
  <version epoch="0" ver="7.0.7" rel="bp154.2.6.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1547812800">- faxgetty@ service removed from %pre section, as it is only a placeholder</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548244800">- Reduce boilerplate generated from %service_* by calling it just
  once.</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1563451200">- Version 7.0.0
  * add LDAP features for compatibility with ActiveDirectory (25 Mar-1 Apr 2019)
  * fix recovery after SSL Fax "accept failure" (18 Mar 2019)
  * add TextFormat overstrike option and disable by default (6 Feb 2019)
  * fix the page size of cover sheets returned via notify (8 Jan 2019)
  * fix or silence numerous compiler warnings (19, 22, 28 Dec 2018)
  * fix pagehandling updating after a proxy has been used (7-8 Dec 2018)
  * add faxmail stderr output of RFC2047 decoding results (5 Dec 2018)
  * fix faxmail handling of headers encoded with UTF-8 (4 Dec 2018)
  * fix faxmail handling of base64-encoded text parts (4 Dec 2018)
  * add SSL Fax support (9-26, 29 Nov; 11, 18, 25 Dec 2018; 2, 7, 23 Jan 2019)</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1574424000">- build fails with libtiff 4.1: pretend, that 4.1 is similar to 4.0</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1574424001">- Version 7.0.1
  * create a client timeout setting and change the default from 60 to
  3600 seconds (26 Sep 2019)
  * extend timeout for receiving ECM frames (21 Aug 2019)
  * fix timeout in Class 1 frame reception (5 Aug 2019)
  * improve Class 1 protocol handling when MaxRecvPages exceeded (31 Jul 2019)
  * fix ModemGroup limit default (11 Jul 2019)
  * fix recovery for SSL Fax write failures (6 Jun 2019)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1581681600">- Version 7.0.2
  * change FIXEDWIDTH default to better accommodate auto-rotation (13 Dec 2019)
  * prevent SSL_accept() from blocking (5 Dec 2019)
  * support libtiff v4.1 (5 Dec 2019)
  * fix ignoremodembusy feature broken by ModemGroup limits feature (16 Nov 2019)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1591704000">- fix for boo#1172731
  VUL-0: EMBARGOED: CVE-2020-8024: hylafax+: Problematic permissions allow
    escalation from uucp to other users
  * adjusted authorisation
  * adjusted pre*/post* snipplets</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1597147200">- version 7.0.3
  * add UseSSLFax feature in sendfax, sendfax.conf, hyla.conf, and JobControl
  (31 Jul 2020)
  * be more resilient in listening for the Phase C carrier (30 Jul 2020)
  * make sure to return to command mode if HDLC receive times out (29 Jul 2020)
  * make faxmail ignore boundaries on parts other than multiparts (29 Jul 2020)
  * don't attempt to write zero bytes of data to a TIFF (29 Jul 2020)
  * don't ever respond to CRP with CRP (28 Jul 2020)
  * secure setup.cache/setup.modem - CVE-2020-15397 (27, 30 Jul 2020)
  * reset frame counter when a sender retransmits PPS for a previously confirmed
  ECM block (26 Jul 2020)
  * scrutinize PPM before concluding that the sender missed our MCF (23 Jul 2020)
  * fix modem recovery after SSL Fax failure (22, 26 Jul 2020)
  * ignore echo of PPR, RTN, CRP (10, 13, 21 Jul 2020)
  * attempt to handle NSF/CSI/DIS in Class 1 sending Phase D (6 Jul 2020)
  * run scripts directly rather than invoking them via a shell for security
  hardening (3-5 Jul 2020)
  * add senderFumblesECM feature (3 Jul 2020)
  * add support for PIN/PIP/PRI-Q/PPS-PRI-Q signals, add senderConfusesPIN
  feature, and utilize PIN for rare conditions where it may be helpful
  (2, 6, 13-14 Jul 2020)
  * add senderConfusesRTN feature (25-26 Jun 2020)
  * add MissedPageHandling feature (24 Jun 2020)
  * use and handle CFR in Phase D to retransmit Phase C (16, 23 Jun 2020)
  * cope with hearing echo of RR, CTC during Class 1 sending (15-17 Jun 2020)
  * fix listening for retransmission of MPS/EOP/EOM if it was received
  corrupt on the first attempt (15 Jun 2020)
  * secure temporary directory creation for faxsetup, faxaddmodem, and
  probemodem - CVE-2020-15396 (13 Jun 2020)
  * don't use CRP when receiving PPS/PPM as some senders think
  we are sending MCF (12 Jun 2020)
  * add BR_SSLFAX to show SSL Fax in notify and faxinfo output (1 Jun 2020)
  * have faxinfo put units on non-standard page dimensions (28 May 2020)
  * improve error messages for JobHost connection errors (22 May 2020)
  * fix perpetual blocking of jobs when a job preparation fails,
  attempt to fix similar blocking problems for bad jobs in
  batches, and add "unblock" faxconfig feature (21 May 2020)
  * ignore TCF if we're receiving an SSL Fax (31 Jan 2020)
  * fixes for build on FreeBSD 12.1 (31 Jan - 3 Feb 2020)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1602244800">- rearrange files-section (boo#1172731)</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1611662400">- Fix TW build by pretending tiff 4.2 is as good enough as 4.{0,1}</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1620475200">- Fix TW build by pretending tiff 4.4 is as good enough as 4.{0,1}</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1626091200">- Add hylafax service and helper for use with firewalld, and
  explain the details in README.SUSE.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1632312000">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * hylafax-faxgetty@.service
  * hylafax-faxq.service
  * hylafax-faxqclean.service
  * hylafax-hfaxd.service
  * hylafax-usage.service</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1634558400">- version 7.0.4
  * README.SUSE renamed
  * hylafax.diff added for boo#1191571 (pre-correction)
  * Dependencies on systemd-services adjusted
  * retry training twice at the same bitrate unless FTT (26 Aug 2021)
  * add missing reason messages for session failures (21 Aug 2021)
  * stop attempts to send or receive signals if the call ended prematurely (16-19 Aug 2021)
  * add Class1HasRMHookIndication (16 Aug 2021)
  * don't attempt sending DCN if we're already on hook (15, 17 Aug 2021)
  * end session sooner if receiver hangs up immediately after TCF or during prologue (14 Aug 2021)
  * fix some behavior following frame reception timeouts (13 Aug 2021)
  * improve behavior if procedural interrupt fails (12 Aug 2021)
  * handle sender repeating RR after we transmit MCF (10 Aug 2021)
  * add session logging of receipt of CFR/FTT signals (3 Aug 2021)
  * cope with receipt of PPR following CTC (3 Aug 2021)
  * attempt to cope with NSF/CSI/DIS after PPS, CTR, ERR, RR and improve coping with
    the same after MPS/EOP/EOM (2, 12, 14, 18 Aug 2021)
  * identify DCN after PPS as a receiver abort (2 Aug 2021)
  * attempt to cope with receipt of CTR after sending PPS (2 Aug 2021)
  * remove use of deprecated libtiff integer types and "register" storage class specifier (25 Jul 2021)
  * don't employ senderFumblesECM if V.34-Fax was negotiated (25 Jul 2021)
  * update configure to accept libtiff v4.2 and v4.3 (24 Jul 2021)
  * fix page handling "botch" if a job's first and previous attempts were on a proxy (20 Jul 2021)
  * fix data timeout for bitrates less than 14400 bps when non-zero scanline time (15 Jul 2021)
  * try to cope with T.38 invite stutter at beginning of send (15 Jul 2021)
  * decouple session logging from direct filesystem I/O (15 Jul 2021)
  * try to help receivers who may expect initial 1-bits to start high-speed data (8, 9 Jul, 4 Aug 2021)
  * improve tenacity of "persistent" ECM (26 Jun 2021)
  * maintain the same SSL Fax passcode during a single session (20 May 2021)
  * log detection of binary file transfer support in receivers (1 Apr 2021)
  * add support for SiLabs Si2417/Si2435 (5 Feb 2021)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648900800">- version 7.0.5
  * hylafax.diff removed - included in source
  * extend Class1RecvAbortOK = 0 timeout to 500 ms (4 Dec 2021)
  * cope with Si2435 V.34/V.8 connection glitch (17, 19 Nov 2021)
  * cope with spurious +FCERROR or other delayed messages from modem (26 Oct 2021)
  * avoid letting corrupt RTC signals lead to RTN (26 Oct 2021)
  * don't refer to DCN as an invalid response in error messages (20 Oct 2021)
  * handle TSI during procedural interrupt (19 Oct 2021)
  * do better with waiting on prologue frames from receiver (13 Oct 2021)
  * cope with echo of ERR (13 Oct 2021)
  * run ps2fax, pdf2fax, tiff2fax, pcl2fax coverters as fax user (12 Oct 2021)
  * attempt to cope with receivers who signal RTN in ECM Phase D (23 Sep 2021)
  * fix hfaxd build when LDAP libs are not present (23 Sep 2021)
  * handle PPR echo after fourth PPR (22 Sep 2021)
  * don't use CRP when waiting for CFR following training (15 Sep 2021)
  * attempt to cope with receivers which signal CFR after PPS (14 Sep 2021)
  * cope with senders who signal FTT in Phase D (10 Sep 2021)
  * fix problem with handling NSF/CSI/DIS frame after CTC/EOR (9 Sep 2021)
  * cope with senders who signal PPS without the PPS FCF (9 Sep 2021)
  * handle echo of PPR when expecting CTC/EOR (8 Sep 2021)
  * add failure messages for unspecified training failures (7 Sep 2021)
  * don't use CRP when waiting for CTR (7 Sep 2021)
  * handle echo of EOR, don't use CRP when waiting for ERR (7 Sep 2021)
  * repeat PIN if sender repeats post-page or partial-page message (7-8 Sep 2021)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1654344000">- Project and download links switched to https
  libtiff44.diff added for tiff 4.x compatibility</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1672056000">- version 7.0.6
  * add support for libtiff v4.4 (10 Jun 2022)
  * libtiff44.diff removed
  * cope with SSL Fax senders who skip Phase C (5 May 2022)
  * add ability to trace SSL Fax data reception (3 May 2022)
  * handle timeout OK response to +FRH=3 and +FRM=n (25 Apr 2022)
  * don't leave the modem waiting for a response when in SSL Fax (25 Apr 2022)
  * improve recovery from unexpected SSL Fax terminations during ECM (15, 18, 26 Apr 2022)
  * try to cope with false "no dialtone" results (4, 8 Apr 2022)
  * add initial support for SSL Fax Proxy servers (4, 23 Feb; 4, 19 Apr; 10, 24 Jun 2022)
  * buildrequirement for libssl added (Thanks Dimstar)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1673524800">- tiff_450.diff added
  updated to trunk r2695 for tiff 4.5 support - See CHANGES for details</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1674561600">- version 7.0.7
  * tiff_450.diff removed
  * constrain job priority to 0-255 (20 Jan 2023)
  * add support for libtiff v4.5.0 (4-5 Jan 2023)
  * add some Si2435 configuration considerations (27 Dec 2022, 20 Jan 2023)
  * if Class1RecvAbortOK is 0 then don't bother with the CAN byte at all (31 Oct 2022)
  * check that the modem isn't trying to deliver a message when we're trying to send
    binary data to it (16-17 Oct 2022)
  * prevent inherited values from creeping into subsequent xferfaxlog data (26 Aug 2022)
  * add external reference feature in dialrules (18 Aug 2022)</changelog>
</package>
<package pkgid="9fb3dedc05a84c99a058095dd2da797e602b2f70727ef472b8515c89590bc14f" name="hylafax+" arch="src">
  <version epoch="0" ver="7.0.7" rel="bp154.2.6.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1547812800">- faxgetty@ service removed from %pre section, as it is only a placeholder</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548244800">- Reduce boilerplate generated from %service_* by calling it just
  once.</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1563451200">- Version 7.0.0
  * add LDAP features for compatibility with ActiveDirectory (25 Mar-1 Apr 2019)
  * fix recovery after SSL Fax "accept failure" (18 Mar 2019)
  * add TextFormat overstrike option and disable by default (6 Feb 2019)
  * fix the page size of cover sheets returned via notify (8 Jan 2019)
  * fix or silence numerous compiler warnings (19, 22, 28 Dec 2018)
  * fix pagehandling updating after a proxy has been used (7-8 Dec 2018)
  * add faxmail stderr output of RFC2047 decoding results (5 Dec 2018)
  * fix faxmail handling of headers encoded with UTF-8 (4 Dec 2018)
  * fix faxmail handling of base64-encoded text parts (4 Dec 2018)
  * add SSL Fax support (9-26, 29 Nov; 11, 18, 25 Dec 2018; 2, 7, 23 Jan 2019)</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1574424000">- build fails with libtiff 4.1: pretend, that 4.1 is similar to 4.0</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1574424001">- Version 7.0.1
  * create a client timeout setting and change the default from 60 to
  3600 seconds (26 Sep 2019)
  * extend timeout for receiving ECM frames (21 Aug 2019)
  * fix timeout in Class 1 frame reception (5 Aug 2019)
  * improve Class 1 protocol handling when MaxRecvPages exceeded (31 Jul 2019)
  * fix ModemGroup limit default (11 Jul 2019)
  * fix recovery for SSL Fax write failures (6 Jun 2019)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1581681600">- Version 7.0.2
  * change FIXEDWIDTH default to better accommodate auto-rotation (13 Dec 2019)
  * prevent SSL_accept() from blocking (5 Dec 2019)
  * support libtiff v4.1 (5 Dec 2019)
  * fix ignoremodembusy feature broken by ModemGroup limits feature (16 Nov 2019)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1591704000">- fix for boo#1172731
  VUL-0: EMBARGOED: CVE-2020-8024: hylafax+: Problematic permissions allow
    escalation from uucp to other users
  * adjusted authorisation
  * adjusted pre*/post* snipplets</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1597147200">- version 7.0.3
  * add UseSSLFax feature in sendfax, sendfax.conf, hyla.conf, and JobControl
  (31 Jul 2020)
  * be more resilient in listening for the Phase C carrier (30 Jul 2020)
  * make sure to return to command mode if HDLC receive times out (29 Jul 2020)
  * make faxmail ignore boundaries on parts other than multiparts (29 Jul 2020)
  * don't attempt to write zero bytes of data to a TIFF (29 Jul 2020)
  * don't ever respond to CRP with CRP (28 Jul 2020)
  * secure setup.cache/setup.modem - CVE-2020-15397 (27, 30 Jul 2020)
  * reset frame counter when a sender retransmits PPS for a previously confirmed
  ECM block (26 Jul 2020)
  * scrutinize PPM before concluding that the sender missed our MCF (23 Jul 2020)
  * fix modem recovery after SSL Fax failure (22, 26 Jul 2020)
  * ignore echo of PPR, RTN, CRP (10, 13, 21 Jul 2020)
  * attempt to handle NSF/CSI/DIS in Class 1 sending Phase D (6 Jul 2020)
  * run scripts directly rather than invoking them via a shell for security
  hardening (3-5 Jul 2020)
  * add senderFumblesECM feature (3 Jul 2020)
  * add support for PIN/PIP/PRI-Q/PPS-PRI-Q signals, add senderConfusesPIN
  feature, and utilize PIN for rare conditions where it may be helpful
  (2, 6, 13-14 Jul 2020)
  * add senderConfusesRTN feature (25-26 Jun 2020)
  * add MissedPageHandling feature (24 Jun 2020)
  * use and handle CFR in Phase D to retransmit Phase C (16, 23 Jun 2020)
  * cope with hearing echo of RR, CTC during Class 1 sending (15-17 Jun 2020)
  * fix listening for retransmission of MPS/EOP/EOM if it was received
  corrupt on the first attempt (15 Jun 2020)
  * secure temporary directory creation for faxsetup, faxaddmodem, and
  probemodem - CVE-2020-15396 (13 Jun 2020)
  * don't use CRP when receiving PPS/PPM as some senders think
  we are sending MCF (12 Jun 2020)
  * add BR_SSLFAX to show SSL Fax in notify and faxinfo output (1 Jun 2020)
  * have faxinfo put units on non-standard page dimensions (28 May 2020)
  * improve error messages for JobHost connection errors (22 May 2020)
  * fix perpetual blocking of jobs when a job preparation fails,
  attempt to fix similar blocking problems for bad jobs in
  batches, and add "unblock" faxconfig feature (21 May 2020)
  * ignore TCF if we're receiving an SSL Fax (31 Jan 2020)
  * fixes for build on FreeBSD 12.1 (31 Jan - 3 Feb 2020)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1602244800">- rearrange files-section (boo#1172731)</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1611662400">- Fix TW build by pretending tiff 4.2 is as good enough as 4.{0,1}</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1620475200">- Fix TW build by pretending tiff 4.4 is as good enough as 4.{0,1}</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1626091200">- Add hylafax service and helper for use with firewalld, and
  explain the details in README.SUSE.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1632312000">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * hylafax-faxgetty@.service
  * hylafax-faxq.service
  * hylafax-faxqclean.service
  * hylafax-hfaxd.service
  * hylafax-usage.service</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1634558400">- version 7.0.4
  * README.SUSE renamed
  * hylafax.diff added for boo#1191571 (pre-correction)
  * Dependencies on systemd-services adjusted
  * retry training twice at the same bitrate unless FTT (26 Aug 2021)
  * add missing reason messages for session failures (21 Aug 2021)
  * stop attempts to send or receive signals if the call ended prematurely (16-19 Aug 2021)
  * add Class1HasRMHookIndication (16 Aug 2021)
  * don't attempt sending DCN if we're already on hook (15, 17 Aug 2021)
  * end session sooner if receiver hangs up immediately after TCF or during prologue (14 Aug 2021)
  * fix some behavior following frame reception timeouts (13 Aug 2021)
  * improve behavior if procedural interrupt fails (12 Aug 2021)
  * handle sender repeating RR after we transmit MCF (10 Aug 2021)
  * add session logging of receipt of CFR/FTT signals (3 Aug 2021)
  * cope with receipt of PPR following CTC (3 Aug 2021)
  * attempt to cope with NSF/CSI/DIS after PPS, CTR, ERR, RR and improve coping with
    the same after MPS/EOP/EOM (2, 12, 14, 18 Aug 2021)
  * identify DCN after PPS as a receiver abort (2 Aug 2021)
  * attempt to cope with receipt of CTR after sending PPS (2 Aug 2021)
  * remove use of deprecated libtiff integer types and "register" storage class specifier (25 Jul 2021)
  * don't employ senderFumblesECM if V.34-Fax was negotiated (25 Jul 2021)
  * update configure to accept libtiff v4.2 and v4.3 (24 Jul 2021)
  * fix page handling "botch" if a job's first and previous attempts were on a proxy (20 Jul 2021)
  * fix data timeout for bitrates less than 14400 bps when non-zero scanline time (15 Jul 2021)
  * try to cope with T.38 invite stutter at beginning of send (15 Jul 2021)
  * decouple session logging from direct filesystem I/O (15 Jul 2021)
  * try to help receivers who may expect initial 1-bits to start high-speed data (8, 9 Jul, 4 Aug 2021)
  * improve tenacity of "persistent" ECM (26 Jun 2021)
  * maintain the same SSL Fax passcode during a single session (20 May 2021)
  * log detection of binary file transfer support in receivers (1 Apr 2021)
  * add support for SiLabs Si2417/Si2435 (5 Feb 2021)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648900800">- version 7.0.5
  * hylafax.diff removed - included in source
  * extend Class1RecvAbortOK = 0 timeout to 500 ms (4 Dec 2021)
  * cope with Si2435 V.34/V.8 connection glitch (17, 19 Nov 2021)
  * cope with spurious +FCERROR or other delayed messages from modem (26 Oct 2021)
  * avoid letting corrupt RTC signals lead to RTN (26 Oct 2021)
  * don't refer to DCN as an invalid response in error messages (20 Oct 2021)
  * handle TSI during procedural interrupt (19 Oct 2021)
  * do better with waiting on prologue frames from receiver (13 Oct 2021)
  * cope with echo of ERR (13 Oct 2021)
  * run ps2fax, pdf2fax, tiff2fax, pcl2fax coverters as fax user (12 Oct 2021)
  * attempt to cope with receivers who signal RTN in ECM Phase D (23 Sep 2021)
  * fix hfaxd build when LDAP libs are not present (23 Sep 2021)
  * handle PPR echo after fourth PPR (22 Sep 2021)
  * don't use CRP when waiting for CFR following training (15 Sep 2021)
  * attempt to cope with receivers which signal CFR after PPS (14 Sep 2021)
  * cope with senders who signal FTT in Phase D (10 Sep 2021)
  * fix problem with handling NSF/CSI/DIS frame after CTC/EOR (9 Sep 2021)
  * cope with senders who signal PPS without the PPS FCF (9 Sep 2021)
  * handle echo of PPR when expecting CTC/EOR (8 Sep 2021)
  * add failure messages for unspecified training failures (7 Sep 2021)
  * don't use CRP when waiting for CTR (7 Sep 2021)
  * handle echo of EOR, don't use CRP when waiting for ERR (7 Sep 2021)
  * repeat PIN if sender repeats post-page or partial-page message (7-8 Sep 2021)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1654344000">- Project and download links switched to https
  libtiff44.diff added for tiff 4.x compatibility</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1672056000">- version 7.0.6
  * add support for libtiff v4.4 (10 Jun 2022)
  * libtiff44.diff removed
  * cope with SSL Fax senders who skip Phase C (5 May 2022)
  * add ability to trace SSL Fax data reception (3 May 2022)
  * handle timeout OK response to +FRH=3 and +FRM=n (25 Apr 2022)
  * don't leave the modem waiting for a response when in SSL Fax (25 Apr 2022)
  * improve recovery from unexpected SSL Fax terminations during ECM (15, 18, 26 Apr 2022)
  * try to cope with false "no dialtone" results (4, 8 Apr 2022)
  * add initial support for SSL Fax Proxy servers (4, 23 Feb; 4, 19 Apr; 10, 24 Jun 2022)
  * buildrequirement for libssl added (Thanks Dimstar)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1673524800">- tiff_450.diff added
  updated to trunk r2695 for tiff 4.5 support - See CHANGES for details</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1674561600">- version 7.0.7
  * tiff_450.diff removed
  * constrain job priority to 0-255 (20 Jan 2023)
  * add support for libtiff v4.5.0 (4-5 Jan 2023)
  * add some Si2435 configuration considerations (27 Dec 2022, 20 Jan 2023)
  * if Class1RecvAbortOK is 0 then don't bother with the CAN byte at all (31 Oct 2022)
  * check that the modem isn't trying to deliver a message when we're trying to send
    binary data to it (16-17 Oct 2022)
  * prevent inherited values from creeping into subsequent xferfaxlog data (26 Aug 2022)
  * add external reference feature in dialrules (18 Aug 2022)</changelog>
</package>
<package pkgid="7d169e0270b18cf7cf5e620aabe23811468e4af9af696bf6ad1296b1f0498c1d" name="hylafax+" arch="x86_64">
  <version epoch="0" ver="7.0.7" rel="bp154.2.6.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1547812800">- faxgetty@ service removed from %pre section, as it is only a placeholder</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548244800">- Reduce boilerplate generated from %service_* by calling it just
  once.</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1563451200">- Version 7.0.0
  * add LDAP features for compatibility with ActiveDirectory (25 Mar-1 Apr 2019)
  * fix recovery after SSL Fax "accept failure" (18 Mar 2019)
  * add TextFormat overstrike option and disable by default (6 Feb 2019)
  * fix the page size of cover sheets returned via notify (8 Jan 2019)
  * fix or silence numerous compiler warnings (19, 22, 28 Dec 2018)
  * fix pagehandling updating after a proxy has been used (7-8 Dec 2018)
  * add faxmail stderr output of RFC2047 decoding results (5 Dec 2018)
  * fix faxmail handling of headers encoded with UTF-8 (4 Dec 2018)
  * fix faxmail handling of base64-encoded text parts (4 Dec 2018)
  * add SSL Fax support (9-26, 29 Nov; 11, 18, 25 Dec 2018; 2, 7, 23 Jan 2019)</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1574424000">- build fails with libtiff 4.1: pretend, that 4.1 is similar to 4.0</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1574424001">- Version 7.0.1
  * create a client timeout setting and change the default from 60 to
  3600 seconds (26 Sep 2019)
  * extend timeout for receiving ECM frames (21 Aug 2019)
  * fix timeout in Class 1 frame reception (5 Aug 2019)
  * improve Class 1 protocol handling when MaxRecvPages exceeded (31 Jul 2019)
  * fix ModemGroup limit default (11 Jul 2019)
  * fix recovery for SSL Fax write failures (6 Jun 2019)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1581681600">- Version 7.0.2
  * change FIXEDWIDTH default to better accommodate auto-rotation (13 Dec 2019)
  * prevent SSL_accept() from blocking (5 Dec 2019)
  * support libtiff v4.1 (5 Dec 2019)
  * fix ignoremodembusy feature broken by ModemGroup limits feature (16 Nov 2019)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1591704000">- fix for boo#1172731
  VUL-0: EMBARGOED: CVE-2020-8024: hylafax+: Problematic permissions allow
    escalation from uucp to other users
  * adjusted authorisation
  * adjusted pre*/post* snipplets</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1597147200">- version 7.0.3
  * add UseSSLFax feature in sendfax, sendfax.conf, hyla.conf, and JobControl
  (31 Jul 2020)
  * be more resilient in listening for the Phase C carrier (30 Jul 2020)
  * make sure to return to command mode if HDLC receive times out (29 Jul 2020)
  * make faxmail ignore boundaries on parts other than multiparts (29 Jul 2020)
  * don't attempt to write zero bytes of data to a TIFF (29 Jul 2020)
  * don't ever respond to CRP with CRP (28 Jul 2020)
  * secure setup.cache/setup.modem - CVE-2020-15397 (27, 30 Jul 2020)
  * reset frame counter when a sender retransmits PPS for a previously confirmed
  ECM block (26 Jul 2020)
  * scrutinize PPM before concluding that the sender missed our MCF (23 Jul 2020)
  * fix modem recovery after SSL Fax failure (22, 26 Jul 2020)
  * ignore echo of PPR, RTN, CRP (10, 13, 21 Jul 2020)
  * attempt to handle NSF/CSI/DIS in Class 1 sending Phase D (6 Jul 2020)
  * run scripts directly rather than invoking them via a shell for security
  hardening (3-5 Jul 2020)
  * add senderFumblesECM feature (3 Jul 2020)
  * add support for PIN/PIP/PRI-Q/PPS-PRI-Q signals, add senderConfusesPIN
  feature, and utilize PIN for rare conditions where it may be helpful
  (2, 6, 13-14 Jul 2020)
  * add senderConfusesRTN feature (25-26 Jun 2020)
  * add MissedPageHandling feature (24 Jun 2020)
  * use and handle CFR in Phase D to retransmit Phase C (16, 23 Jun 2020)
  * cope with hearing echo of RR, CTC during Class 1 sending (15-17 Jun 2020)
  * fix listening for retransmission of MPS/EOP/EOM if it was received
  corrupt on the first attempt (15 Jun 2020)
  * secure temporary directory creation for faxsetup, faxaddmodem, and
  probemodem - CVE-2020-15396 (13 Jun 2020)
  * don't use CRP when receiving PPS/PPM as some senders think
  we are sending MCF (12 Jun 2020)
  * add BR_SSLFAX to show SSL Fax in notify and faxinfo output (1 Jun 2020)
  * have faxinfo put units on non-standard page dimensions (28 May 2020)
  * improve error messages for JobHost connection errors (22 May 2020)
  * fix perpetual blocking of jobs when a job preparation fails,
  attempt to fix similar blocking problems for bad jobs in
  batches, and add "unblock" faxconfig feature (21 May 2020)
  * ignore TCF if we're receiving an SSL Fax (31 Jan 2020)
  * fixes for build on FreeBSD 12.1 (31 Jan - 3 Feb 2020)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1602244800">- rearrange files-section (boo#1172731)</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1611662400">- Fix TW build by pretending tiff 4.2 is as good enough as 4.{0,1}</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1620475200">- Fix TW build by pretending tiff 4.4 is as good enough as 4.{0,1}</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1626091200">- Add hylafax service and helper for use with firewalld, and
  explain the details in README.SUSE.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1632312000">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * hylafax-faxgetty@.service
  * hylafax-faxq.service
  * hylafax-faxqclean.service
  * hylafax-hfaxd.service
  * hylafax-usage.service</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1634558400">- version 7.0.4
  * README.SUSE renamed
  * hylafax.diff added for boo#1191571 (pre-correction)
  * Dependencies on systemd-services adjusted
  * retry training twice at the same bitrate unless FTT (26 Aug 2021)
  * add missing reason messages for session failures (21 Aug 2021)
  * stop attempts to send or receive signals if the call ended prematurely (16-19 Aug 2021)
  * add Class1HasRMHookIndication (16 Aug 2021)
  * don't attempt sending DCN if we're already on hook (15, 17 Aug 2021)
  * end session sooner if receiver hangs up immediately after TCF or during prologue (14 Aug 2021)
  * fix some behavior following frame reception timeouts (13 Aug 2021)
  * improve behavior if procedural interrupt fails (12 Aug 2021)
  * handle sender repeating RR after we transmit MCF (10 Aug 2021)
  * add session logging of receipt of CFR/FTT signals (3 Aug 2021)
  * cope with receipt of PPR following CTC (3 Aug 2021)
  * attempt to cope with NSF/CSI/DIS after PPS, CTR, ERR, RR and improve coping with
    the same after MPS/EOP/EOM (2, 12, 14, 18 Aug 2021)
  * identify DCN after PPS as a receiver abort (2 Aug 2021)
  * attempt to cope with receipt of CTR after sending PPS (2 Aug 2021)
  * remove use of deprecated libtiff integer types and "register" storage class specifier (25 Jul 2021)
  * don't employ senderFumblesECM if V.34-Fax was negotiated (25 Jul 2021)
  * update configure to accept libtiff v4.2 and v4.3 (24 Jul 2021)
  * fix page handling "botch" if a job's first and previous attempts were on a proxy (20 Jul 2021)
  * fix data timeout for bitrates less than 14400 bps when non-zero scanline time (15 Jul 2021)
  * try to cope with T.38 invite stutter at beginning of send (15 Jul 2021)
  * decouple session logging from direct filesystem I/O (15 Jul 2021)
  * try to help receivers who may expect initial 1-bits to start high-speed data (8, 9 Jul, 4 Aug 2021)
  * improve tenacity of "persistent" ECM (26 Jun 2021)
  * maintain the same SSL Fax passcode during a single session (20 May 2021)
  * log detection of binary file transfer support in receivers (1 Apr 2021)
  * add support for SiLabs Si2417/Si2435 (5 Feb 2021)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648900800">- version 7.0.5
  * hylafax.diff removed - included in source
  * extend Class1RecvAbortOK = 0 timeout to 500 ms (4 Dec 2021)
  * cope with Si2435 V.34/V.8 connection glitch (17, 19 Nov 2021)
  * cope with spurious +FCERROR or other delayed messages from modem (26 Oct 2021)
  * avoid letting corrupt RTC signals lead to RTN (26 Oct 2021)
  * don't refer to DCN as an invalid response in error messages (20 Oct 2021)
  * handle TSI during procedural interrupt (19 Oct 2021)
  * do better with waiting on prologue frames from receiver (13 Oct 2021)
  * cope with echo of ERR (13 Oct 2021)
  * run ps2fax, pdf2fax, tiff2fax, pcl2fax coverters as fax user (12 Oct 2021)
  * attempt to cope with receivers who signal RTN in ECM Phase D (23 Sep 2021)
  * fix hfaxd build when LDAP libs are not present (23 Sep 2021)
  * handle PPR echo after fourth PPR (22 Sep 2021)
  * don't use CRP when waiting for CFR following training (15 Sep 2021)
  * attempt to cope with receivers which signal CFR after PPS (14 Sep 2021)
  * cope with senders who signal FTT in Phase D (10 Sep 2021)
  * fix problem with handling NSF/CSI/DIS frame after CTC/EOR (9 Sep 2021)
  * cope with senders who signal PPS without the PPS FCF (9 Sep 2021)
  * handle echo of PPR when expecting CTC/EOR (8 Sep 2021)
  * add failure messages for unspecified training failures (7 Sep 2021)
  * don't use CRP when waiting for CTR (7 Sep 2021)
  * handle echo of EOR, don't use CRP when waiting for ERR (7 Sep 2021)
  * repeat PIN if sender repeats post-page or partial-page message (7-8 Sep 2021)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1654344000">- Project and download links switched to https
  libtiff44.diff added for tiff 4.x compatibility</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1672056000">- version 7.0.6
  * add support for libtiff v4.4 (10 Jun 2022)
  * libtiff44.diff removed
  * cope with SSL Fax senders who skip Phase C (5 May 2022)
  * add ability to trace SSL Fax data reception (3 May 2022)
  * handle timeout OK response to +FRH=3 and +FRM=n (25 Apr 2022)
  * don't leave the modem waiting for a response when in SSL Fax (25 Apr 2022)
  * improve recovery from unexpected SSL Fax terminations during ECM (15, 18, 26 Apr 2022)
  * try to cope with false "no dialtone" results (4, 8 Apr 2022)
  * add initial support for SSL Fax Proxy servers (4, 23 Feb; 4, 19 Apr; 10, 24 Jun 2022)
  * buildrequirement for libssl added (Thanks Dimstar)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1673524800">- tiff_450.diff added
  updated to trunk r2695 for tiff 4.5 support - See CHANGES for details</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1674561600">- version 7.0.7
  * tiff_450.diff removed
  * constrain job priority to 0-255 (20 Jan 2023)
  * add support for libtiff v4.5.0 (4-5 Jan 2023)
  * add some Si2435 configuration considerations (27 Dec 2022, 20 Jan 2023)
  * if Class1RecvAbortOK is 0 then don't bother with the CAN byte at all (31 Oct 2022)
  * check that the modem isn't trying to deliver a message when we're trying to send
    binary data to it (16-17 Oct 2022)
  * prevent inherited values from creeping into subsequent xferfaxlog data (26 Aug 2022)
  * add external reference feature in dialrules (18 Aug 2022)</changelog>
</package>
<package pkgid="5e4dfa010c370ac4f4bde652d8e652276f9231f794426d9985c3de67427cbfa9" name="hylafax+-client" arch="aarch64">
  <version epoch="0" ver="7.0.6" rel="bp154.2.3.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1546948800">- migrate from cron to systemd timers (boo#1115442)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1547640000">- Dependency on hylafax-hfaxd for timers added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1547812800">- faxgetty@ service removed from %pre section, as it is only a placeholder</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548244800">- Reduce boilerplate generated from %service_* by calling it just
  once.</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1563451200">- Version 7.0.0
  * add LDAP features for compatibility with ActiveDirectory (25 Mar-1 Apr 2019)
  * fix recovery after SSL Fax "accept failure" (18 Mar 2019)
  * add TextFormat overstrike option and disable by default (6 Feb 2019)
  * fix the page size of cover sheets returned via notify (8 Jan 2019)
  * fix or silence numerous compiler warnings (19, 22, 28 Dec 2018)
  * fix pagehandling updating after a proxy has been used (7-8 Dec 2018)
  * add faxmail stderr output of RFC2047 decoding results (5 Dec 2018)
  * fix faxmail handling of headers encoded with UTF-8 (4 Dec 2018)
  * fix faxmail handling of base64-encoded text parts (4 Dec 2018)
  * add SSL Fax support (9-26, 29 Nov; 11, 18, 25 Dec 2018; 2, 7, 23 Jan 2019)</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1574424000">- build fails with libtiff 4.1: pretend, that 4.1 is similar to 4.0</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1574424001">- Version 7.0.1
  * create a client timeout setting and change the default from 60 to
  3600 seconds (26 Sep 2019)
  * extend timeout for receiving ECM frames (21 Aug 2019)
  * fix timeout in Class 1 frame reception (5 Aug 2019)
  * improve Class 1 protocol handling when MaxRecvPages exceeded (31 Jul 2019)
  * fix ModemGroup limit default (11 Jul 2019)
  * fix recovery for SSL Fax write failures (6 Jun 2019)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1581681600">- Version 7.0.2
  * change FIXEDWIDTH default to better accommodate auto-rotation (13 Dec 2019)
  * prevent SSL_accept() from blocking (5 Dec 2019)
  * support libtiff v4.1 (5 Dec 2019)
  * fix ignoremodembusy feature broken by ModemGroup limits feature (16 Nov 2019)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1591704000">- fix for boo#1172731
  VUL-0: EMBARGOED: CVE-2020-8024: hylafax+: Problematic permissions allow
    escalation from uucp to other users
  * adjusted authorisation
  * adjusted pre*/post* snipplets</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1597147200">- version 7.0.3
  * add UseSSLFax feature in sendfax, sendfax.conf, hyla.conf, and JobControl
  (31 Jul 2020)
  * be more resilient in listening for the Phase C carrier (30 Jul 2020)
  * make sure to return to command mode if HDLC receive times out (29 Jul 2020)
  * make faxmail ignore boundaries on parts other than multiparts (29 Jul 2020)
  * don't attempt to write zero bytes of data to a TIFF (29 Jul 2020)
  * don't ever respond to CRP with CRP (28 Jul 2020)
  * secure setup.cache/setup.modem - CVE-2020-15397 (27, 30 Jul 2020)
  * reset frame counter when a sender retransmits PPS for a previously confirmed
  ECM block (26 Jul 2020)
  * scrutinize PPM before concluding that the sender missed our MCF (23 Jul 2020)
  * fix modem recovery after SSL Fax failure (22, 26 Jul 2020)
  * ignore echo of PPR, RTN, CRP (10, 13, 21 Jul 2020)
  * attempt to handle NSF/CSI/DIS in Class 1 sending Phase D (6 Jul 2020)
  * run scripts directly rather than invoking them via a shell for security
  hardening (3-5 Jul 2020)
  * add senderFumblesECM feature (3 Jul 2020)
  * add support for PIN/PIP/PRI-Q/PPS-PRI-Q signals, add senderConfusesPIN
  feature, and utilize PIN for rare conditions where it may be helpful
  (2, 6, 13-14 Jul 2020)
  * add senderConfusesRTN feature (25-26 Jun 2020)
  * add MissedPageHandling feature (24 Jun 2020)
  * use and handle CFR in Phase D to retransmit Phase C (16, 23 Jun 2020)
  * cope with hearing echo of RR, CTC during Class 1 sending (15-17 Jun 2020)
  * fix listening for retransmission of MPS/EOP/EOM if it was received
  corrupt on the first attempt (15 Jun 2020)
  * secure temporary directory creation for faxsetup, faxaddmodem, and
  probemodem - CVE-2020-15396 (13 Jun 2020)
  * don't use CRP when receiving PPS/PPM as some senders think
  we are sending MCF (12 Jun 2020)
  * add BR_SSLFAX to show SSL Fax in notify and faxinfo output (1 Jun 2020)
  * have faxinfo put units on non-standard page dimensions (28 May 2020)
  * improve error messages for JobHost connection errors (22 May 2020)
  * fix perpetual blocking of jobs when a job preparation fails,
  attempt to fix similar blocking problems for bad jobs in
  batches, and add "unblock" faxconfig feature (21 May 2020)
  * ignore TCF if we're receiving an SSL Fax (31 Jan 2020)
  * fixes for build on FreeBSD 12.1 (31 Jan - 3 Feb 2020)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1602244800">- rearrange files-section (boo#1172731)</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1611662400">- Fix TW build by pretending tiff 4.2 is as good enough as 4.{0,1}</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1620475200">- Fix TW build by pretending tiff 4.4 is as good enough as 4.{0,1}</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1626091200">- Add hylafax service and helper for use with firewalld, and
  explain the details in README.SUSE.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1632312000">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * hylafax-faxgetty@.service
  * hylafax-faxq.service
  * hylafax-faxqclean.service
  * hylafax-hfaxd.service
  * hylafax-usage.service</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1634558400">- version 7.0.4
  * README.SUSE renamed
  * hylafax.diff added for boo#1191571 (pre-correction)
  * Dependencies on systemd-services adjusted
  * retry training twice at the same bitrate unless FTT (26 Aug 2021)
  * add missing reason messages for session failures (21 Aug 2021)
  * stop attempts to send or receive signals if the call ended prematurely (16-19 Aug 2021)
  * add Class1HasRMHookIndication (16 Aug 2021)
  * don't attempt sending DCN if we're already on hook (15, 17 Aug 2021)
  * end session sooner if receiver hangs up immediately after TCF or during prologue (14 Aug 2021)
  * fix some behavior following frame reception timeouts (13 Aug 2021)
  * improve behavior if procedural interrupt fails (12 Aug 2021)
  * handle sender repeating RR after we transmit MCF (10 Aug 2021)
  * add session logging of receipt of CFR/FTT signals (3 Aug 2021)
  * cope with receipt of PPR following CTC (3 Aug 2021)
  * attempt to cope with NSF/CSI/DIS after PPS, CTR, ERR, RR and improve coping with
    the same after MPS/EOP/EOM (2, 12, 14, 18 Aug 2021)
  * identify DCN after PPS as a receiver abort (2 Aug 2021)
  * attempt to cope with receipt of CTR after sending PPS (2 Aug 2021)
  * remove use of deprecated libtiff integer types and "register" storage class specifier (25 Jul 2021)
  * don't employ senderFumblesECM if V.34-Fax was negotiated (25 Jul 2021)
  * update configure to accept libtiff v4.2 and v4.3 (24 Jul 2021)
  * fix page handling "botch" if a job's first and previous attempts were on a proxy (20 Jul 2021)
  * fix data timeout for bitrates less than 14400 bps when non-zero scanline time (15 Jul 2021)
  * try to cope with T.38 invite stutter at beginning of send (15 Jul 2021)
  * decouple session logging from direct filesystem I/O (15 Jul 2021)
  * try to help receivers who may expect initial 1-bits to start high-speed data (8, 9 Jul, 4 Aug 2021)
  * improve tenacity of "persistent" ECM (26 Jun 2021)
  * maintain the same SSL Fax passcode during a single session (20 May 2021)
  * log detection of binary file transfer support in receivers (1 Apr 2021)
  * add support for SiLabs Si2417/Si2435 (5 Feb 2021)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648900800">- version 7.0.5
  * hylafax.diff removed - included in source
  * extend Class1RecvAbortOK = 0 timeout to 500 ms (4 Dec 2021)
  * cope with Si2435 V.34/V.8 connection glitch (17, 19 Nov 2021)
  * cope with spurious +FCERROR or other delayed messages from modem (26 Oct 2021)
  * avoid letting corrupt RTC signals lead to RTN (26 Oct 2021)
  * don't refer to DCN as an invalid response in error messages (20 Oct 2021)
  * handle TSI during procedural interrupt (19 Oct 2021)
  * do better with waiting on prologue frames from receiver (13 Oct 2021)
  * cope with echo of ERR (13 Oct 2021)
  * run ps2fax, pdf2fax, tiff2fax, pcl2fax coverters as fax user (12 Oct 2021)
  * attempt to cope with receivers who signal RTN in ECM Phase D (23 Sep 2021)
  * fix hfaxd build when LDAP libs are not present (23 Sep 2021)
  * handle PPR echo after fourth PPR (22 Sep 2021)
  * don't use CRP when waiting for CFR following training (15 Sep 2021)
  * attempt to cope with receivers which signal CFR after PPS (14 Sep 2021)
  * cope with senders who signal FTT in Phase D (10 Sep 2021)
  * fix problem with handling NSF/CSI/DIS frame after CTC/EOR (9 Sep 2021)
  * cope with senders who signal PPS without the PPS FCF (9 Sep 2021)
  * handle echo of PPR when expecting CTC/EOR (8 Sep 2021)
  * add failure messages for unspecified training failures (7 Sep 2021)
  * don't use CRP when waiting for CTR (7 Sep 2021)
  * handle echo of EOR, don't use CRP when waiting for ERR (7 Sep 2021)
  * repeat PIN if sender repeats post-page or partial-page message (7-8 Sep 2021)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1654344000">- Project and download links switched to https
  libtiff44.diff added for tiff 4.x compatibility</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1672056000">- version 7.0.6
  * add support for libtiff v4.4 (10 Jun 2022)
  * libtiff44.diff removed
  * cope with SSL Fax senders who skip Phase C (5 May 2022)
  * add ability to trace SSL Fax data reception (3 May 2022)
  * handle timeout OK response to +FRH=3 and +FRM=n (25 Apr 2022)
  * don't leave the modem waiting for a response when in SSL Fax (25 Apr 2022)
  * improve recovery from unexpected SSL Fax terminations during ECM (15, 18, 26 Apr 2022)
  * try to cope with false "no dialtone" results (4, 8 Apr 2022)
  * add initial support for SSL Fax Proxy servers (4, 23 Feb; 4, 19 Apr; 10, 24 Jun 2022)
  * buildrequirement for libssl added (Thanks Dimstar)</changelog>
</package>
<package pkgid="2f52a23e5e7e34881b7d485f00dbea58471450a6be3cb2fdb0db2eb25f0c3b99" name="hylafax+-client" arch="i586">
  <version epoch="0" ver="7.0.6" rel="bp154.2.3.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1546948800">- migrate from cron to systemd timers (boo#1115442)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1547640000">- Dependency on hylafax-hfaxd for timers added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1547812800">- faxgetty@ service removed from %pre section, as it is only a placeholder</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548244800">- Reduce boilerplate generated from %service_* by calling it just
  once.</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1563451200">- Version 7.0.0
  * add LDAP features for compatibility with ActiveDirectory (25 Mar-1 Apr 2019)
  * fix recovery after SSL Fax "accept failure" (18 Mar 2019)
  * add TextFormat overstrike option and disable by default (6 Feb 2019)
  * fix the page size of cover sheets returned via notify (8 Jan 2019)
  * fix or silence numerous compiler warnings (19, 22, 28 Dec 2018)
  * fix pagehandling updating after a proxy has been used (7-8 Dec 2018)
  * add faxmail stderr output of RFC2047 decoding results (5 Dec 2018)
  * fix faxmail handling of headers encoded with UTF-8 (4 Dec 2018)
  * fix faxmail handling of base64-encoded text parts (4 Dec 2018)
  * add SSL Fax support (9-26, 29 Nov; 11, 18, 25 Dec 2018; 2, 7, 23 Jan 2019)</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1574424000">- build fails with libtiff 4.1: pretend, that 4.1 is similar to 4.0</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1574424001">- Version 7.0.1
  * create a client timeout setting and change the default from 60 to
  3600 seconds (26 Sep 2019)
  * extend timeout for receiving ECM frames (21 Aug 2019)
  * fix timeout in Class 1 frame reception (5 Aug 2019)
  * improve Class 1 protocol handling when MaxRecvPages exceeded (31 Jul 2019)
  * fix ModemGroup limit default (11 Jul 2019)
  * fix recovery for SSL Fax write failures (6 Jun 2019)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1581681600">- Version 7.0.2
  * change FIXEDWIDTH default to better accommodate auto-rotation (13 Dec 2019)
  * prevent SSL_accept() from blocking (5 Dec 2019)
  * support libtiff v4.1 (5 Dec 2019)
  * fix ignoremodembusy feature broken by ModemGroup limits feature (16 Nov 2019)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1591704000">- fix for boo#1172731
  VUL-0: EMBARGOED: CVE-2020-8024: hylafax+: Problematic permissions allow
    escalation from uucp to other users
  * adjusted authorisation
  * adjusted pre*/post* snipplets</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1597147200">- version 7.0.3
  * add UseSSLFax feature in sendfax, sendfax.conf, hyla.conf, and JobControl
  (31 Jul 2020)
  * be more resilient in listening for the Phase C carrier (30 Jul 2020)
  * make sure to return to command mode if HDLC receive times out (29 Jul 2020)
  * make faxmail ignore boundaries on parts other than multiparts (29 Jul 2020)
  * don't attempt to write zero bytes of data to a TIFF (29 Jul 2020)
  * don't ever respond to CRP with CRP (28 Jul 2020)
  * secure setup.cache/setup.modem - CVE-2020-15397 (27, 30 Jul 2020)
  * reset frame counter when a sender retransmits PPS for a previously confirmed
  ECM block (26 Jul 2020)
  * scrutinize PPM before concluding that the sender missed our MCF (23 Jul 2020)
  * fix modem recovery after SSL Fax failure (22, 26 Jul 2020)
  * ignore echo of PPR, RTN, CRP (10, 13, 21 Jul 2020)
  * attempt to handle NSF/CSI/DIS in Class 1 sending Phase D (6 Jul 2020)
  * run scripts directly rather than invoking them via a shell for security
  hardening (3-5 Jul 2020)
  * add senderFumblesECM feature (3 Jul 2020)
  * add support for PIN/PIP/PRI-Q/PPS-PRI-Q signals, add senderConfusesPIN
  feature, and utilize PIN for rare conditions where it may be helpful
  (2, 6, 13-14 Jul 2020)
  * add senderConfusesRTN feature (25-26 Jun 2020)
  * add MissedPageHandling feature (24 Jun 2020)
  * use and handle CFR in Phase D to retransmit Phase C (16, 23 Jun 2020)
  * cope with hearing echo of RR, CTC during Class 1 sending (15-17 Jun 2020)
  * fix listening for retransmission of MPS/EOP/EOM if it was received
  corrupt on the first attempt (15 Jun 2020)
  * secure temporary directory creation for faxsetup, faxaddmodem, and
  probemodem - CVE-2020-15396 (13 Jun 2020)
  * don't use CRP when receiving PPS/PPM as some senders think
  we are sending MCF (12 Jun 2020)
  * add BR_SSLFAX to show SSL Fax in notify and faxinfo output (1 Jun 2020)
  * have faxinfo put units on non-standard page dimensions (28 May 2020)
  * improve error messages for JobHost connection errors (22 May 2020)
  * fix perpetual blocking of jobs when a job preparation fails,
  attempt to fix similar blocking problems for bad jobs in
  batches, and add "unblock" faxconfig feature (21 May 2020)
  * ignore TCF if we're receiving an SSL Fax (31 Jan 2020)
  * fixes for build on FreeBSD 12.1 (31 Jan - 3 Feb 2020)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1602244800">- rearrange files-section (boo#1172731)</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1611662400">- Fix TW build by pretending tiff 4.2 is as good enough as 4.{0,1}</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1620475200">- Fix TW build by pretending tiff 4.4 is as good enough as 4.{0,1}</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1626091200">- Add hylafax service and helper for use with firewalld, and
  explain the details in README.SUSE.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1632312000">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * hylafax-faxgetty@.service
  * hylafax-faxq.service
  * hylafax-faxqclean.service
  * hylafax-hfaxd.service
  * hylafax-usage.service</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1634558400">- version 7.0.4
  * README.SUSE renamed
  * hylafax.diff added for boo#1191571 (pre-correction)
  * Dependencies on systemd-services adjusted
  * retry training twice at the same bitrate unless FTT (26 Aug 2021)
  * add missing reason messages for session failures (21 Aug 2021)
  * stop attempts to send or receive signals if the call ended prematurely (16-19 Aug 2021)
  * add Class1HasRMHookIndication (16 Aug 2021)
  * don't attempt sending DCN if we're already on hook (15, 17 Aug 2021)
  * end session sooner if receiver hangs up immediately after TCF or during prologue (14 Aug 2021)
  * fix some behavior following frame reception timeouts (13 Aug 2021)
  * improve behavior if procedural interrupt fails (12 Aug 2021)
  * handle sender repeating RR after we transmit MCF (10 Aug 2021)
  * add session logging of receipt of CFR/FTT signals (3 Aug 2021)
  * cope with receipt of PPR following CTC (3 Aug 2021)
  * attempt to cope with NSF/CSI/DIS after PPS, CTR, ERR, RR and improve coping with
    the same after MPS/EOP/EOM (2, 12, 14, 18 Aug 2021)
  * identify DCN after PPS as a receiver abort (2 Aug 2021)
  * attempt to cope with receipt of CTR after sending PPS (2 Aug 2021)
  * remove use of deprecated libtiff integer types and "register" storage class specifier (25 Jul 2021)
  * don't employ senderFumblesECM if V.34-Fax was negotiated (25 Jul 2021)
  * update configure to accept libtiff v4.2 and v4.3 (24 Jul 2021)
  * fix page handling "botch" if a job's first and previous attempts were on a proxy (20 Jul 2021)
  * fix data timeout for bitrates less than 14400 bps when non-zero scanline time (15 Jul 2021)
  * try to cope with T.38 invite stutter at beginning of send (15 Jul 2021)
  * decouple session logging from direct filesystem I/O (15 Jul 2021)
  * try to help receivers who may expect initial 1-bits to start high-speed data (8, 9 Jul, 4 Aug 2021)
  * improve tenacity of "persistent" ECM (26 Jun 2021)
  * maintain the same SSL Fax passcode during a single session (20 May 2021)
  * log detection of binary file transfer support in receivers (1 Apr 2021)
  * add support for SiLabs Si2417/Si2435 (5 Feb 2021)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648900800">- version 7.0.5
  * hylafax.diff removed - included in source
  * extend Class1RecvAbortOK = 0 timeout to 500 ms (4 Dec 2021)
  * cope with Si2435 V.34/V.8 connection glitch (17, 19 Nov 2021)
  * cope with spurious +FCERROR or other delayed messages from modem (26 Oct 2021)
  * avoid letting corrupt RTC signals lead to RTN (26 Oct 2021)
  * don't refer to DCN as an invalid response in error messages (20 Oct 2021)
  * handle TSI during procedural interrupt (19 Oct 2021)
  * do better with waiting on prologue frames from receiver (13 Oct 2021)
  * cope with echo of ERR (13 Oct 2021)
  * run ps2fax, pdf2fax, tiff2fax, pcl2fax coverters as fax user (12 Oct 2021)
  * attempt to cope with receivers who signal RTN in ECM Phase D (23 Sep 2021)
  * fix hfaxd build when LDAP libs are not present (23 Sep 2021)
  * handle PPR echo after fourth PPR (22 Sep 2021)
  * don't use CRP when waiting for CFR following training (15 Sep 2021)
  * attempt to cope with receivers which signal CFR after PPS (14 Sep 2021)
  * cope with senders who signal FTT in Phase D (10 Sep 2021)
  * fix problem with handling NSF/CSI/DIS frame after CTC/EOR (9 Sep 2021)
  * cope with senders who signal PPS without the PPS FCF (9 Sep 2021)
  * handle echo of PPR when expecting CTC/EOR (8 Sep 2021)
  * add failure messages for unspecified training failures (7 Sep 2021)
  * don't use CRP when waiting for CTR (7 Sep 2021)
  * handle echo of EOR, don't use CRP when waiting for ERR (7 Sep 2021)
  * repeat PIN if sender repeats post-page or partial-page message (7-8 Sep 2021)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1654344000">- Project and download links switched to https
  libtiff44.diff added for tiff 4.x compatibility</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1672056000">- version 7.0.6
  * add support for libtiff v4.4 (10 Jun 2022)
  * libtiff44.diff removed
  * cope with SSL Fax senders who skip Phase C (5 May 2022)
  * add ability to trace SSL Fax data reception (3 May 2022)
  * handle timeout OK response to +FRH=3 and +FRM=n (25 Apr 2022)
  * don't leave the modem waiting for a response when in SSL Fax (25 Apr 2022)
  * improve recovery from unexpected SSL Fax terminations during ECM (15, 18, 26 Apr 2022)
  * try to cope with false "no dialtone" results (4, 8 Apr 2022)
  * add initial support for SSL Fax Proxy servers (4, 23 Feb; 4, 19 Apr; 10, 24 Jun 2022)
  * buildrequirement for libssl added (Thanks Dimstar)</changelog>
</package>
<package pkgid="47fcb011081701eac37e0f1061cd3b6a850440b0ed1775c0e98b384cb6949e70" name="hylafax+-client" arch="ppc64le">
  <version epoch="0" ver="7.0.6" rel="bp154.2.3.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1546948800">- migrate from cron to systemd timers (boo#1115442)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1547640000">- Dependency on hylafax-hfaxd for timers added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1547812800">- faxgetty@ service removed from %pre section, as it is only a placeholder</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548244800">- Reduce boilerplate generated from %service_* by calling it just
  once.</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1563451200">- Version 7.0.0
  * add LDAP features for compatibility with ActiveDirectory (25 Mar-1 Apr 2019)
  * fix recovery after SSL Fax "accept failure" (18 Mar 2019)
  * add TextFormat overstrike option and disable by default (6 Feb 2019)
  * fix the page size of cover sheets returned via notify (8 Jan 2019)
  * fix or silence numerous compiler warnings (19, 22, 28 Dec 2018)
  * fix pagehandling updating after a proxy has been used (7-8 Dec 2018)
  * add faxmail stderr output of RFC2047 decoding results (5 Dec 2018)
  * fix faxmail handling of headers encoded with UTF-8 (4 Dec 2018)
  * fix faxmail handling of base64-encoded text parts (4 Dec 2018)
  * add SSL Fax support (9-26, 29 Nov; 11, 18, 25 Dec 2018; 2, 7, 23 Jan 2019)</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1574424000">- build fails with libtiff 4.1: pretend, that 4.1 is similar to 4.0</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1574424001">- Version 7.0.1
  * create a client timeout setting and change the default from 60 to
  3600 seconds (26 Sep 2019)
  * extend timeout for receiving ECM frames (21 Aug 2019)
  * fix timeout in Class 1 frame reception (5 Aug 2019)
  * improve Class 1 protocol handling when MaxRecvPages exceeded (31 Jul 2019)
  * fix ModemGroup limit default (11 Jul 2019)
  * fix recovery for SSL Fax write failures (6 Jun 2019)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1581681600">- Version 7.0.2
  * change FIXEDWIDTH default to better accommodate auto-rotation (13 Dec 2019)
  * prevent SSL_accept() from blocking (5 Dec 2019)
  * support libtiff v4.1 (5 Dec 2019)
  * fix ignoremodembusy feature broken by ModemGroup limits feature (16 Nov 2019)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1591704000">- fix for boo#1172731
  VUL-0: EMBARGOED: CVE-2020-8024: hylafax+: Problematic permissions allow
    escalation from uucp to other users
  * adjusted authorisation
  * adjusted pre*/post* snipplets</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1597147200">- version 7.0.3
  * add UseSSLFax feature in sendfax, sendfax.conf, hyla.conf, and JobControl
  (31 Jul 2020)
  * be more resilient in listening for the Phase C carrier (30 Jul 2020)
  * make sure to return to command mode if HDLC receive times out (29 Jul 2020)
  * make faxmail ignore boundaries on parts other than multiparts (29 Jul 2020)
  * don't attempt to write zero bytes of data to a TIFF (29 Jul 2020)
  * don't ever respond to CRP with CRP (28 Jul 2020)
  * secure setup.cache/setup.modem - CVE-2020-15397 (27, 30 Jul 2020)
  * reset frame counter when a sender retransmits PPS for a previously confirmed
  ECM block (26 Jul 2020)
  * scrutinize PPM before concluding that the sender missed our MCF (23 Jul 2020)
  * fix modem recovery after SSL Fax failure (22, 26 Jul 2020)
  * ignore echo of PPR, RTN, CRP (10, 13, 21 Jul 2020)
  * attempt to handle NSF/CSI/DIS in Class 1 sending Phase D (6 Jul 2020)
  * run scripts directly rather than invoking them via a shell for security
  hardening (3-5 Jul 2020)
  * add senderFumblesECM feature (3 Jul 2020)
  * add support for PIN/PIP/PRI-Q/PPS-PRI-Q signals, add senderConfusesPIN
  feature, and utilize PIN for rare conditions where it may be helpful
  (2, 6, 13-14 Jul 2020)
  * add senderConfusesRTN feature (25-26 Jun 2020)
  * add MissedPageHandling feature (24 Jun 2020)
  * use and handle CFR in Phase D to retransmit Phase C (16, 23 Jun 2020)
  * cope with hearing echo of RR, CTC during Class 1 sending (15-17 Jun 2020)
  * fix listening for retransmission of MPS/EOP/EOM if it was received
  corrupt on the first attempt (15 Jun 2020)
  * secure temporary directory creation for faxsetup, faxaddmodem, and
  probemodem - CVE-2020-15396 (13 Jun 2020)
  * don't use CRP when receiving PPS/PPM as some senders think
  we are sending MCF (12 Jun 2020)
  * add BR_SSLFAX to show SSL Fax in notify and faxinfo output (1 Jun 2020)
  * have faxinfo put units on non-standard page dimensions (28 May 2020)
  * improve error messages for JobHost connection errors (22 May 2020)
  * fix perpetual blocking of jobs when a job preparation fails,
  attempt to fix similar blocking problems for bad jobs in
  batches, and add "unblock" faxconfig feature (21 May 2020)
  * ignore TCF if we're receiving an SSL Fax (31 Jan 2020)
  * fixes for build on FreeBSD 12.1 (31 Jan - 3 Feb 2020)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1602244800">- rearrange files-section (boo#1172731)</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1611662400">- Fix TW build by pretending tiff 4.2 is as good enough as 4.{0,1}</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1620475200">- Fix TW build by pretending tiff 4.4 is as good enough as 4.{0,1}</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1626091200">- Add hylafax service and helper for use with firewalld, and
  explain the details in README.SUSE.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1632312000">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * hylafax-faxgetty@.service
  * hylafax-faxq.service
  * hylafax-faxqclean.service
  * hylafax-hfaxd.service
  * hylafax-usage.service</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1634558400">- version 7.0.4
  * README.SUSE renamed
  * hylafax.diff added for boo#1191571 (pre-correction)
  * Dependencies on systemd-services adjusted
  * retry training twice at the same bitrate unless FTT (26 Aug 2021)
  * add missing reason messages for session failures (21 Aug 2021)
  * stop attempts to send or receive signals if the call ended prematurely (16-19 Aug 2021)
  * add Class1HasRMHookIndication (16 Aug 2021)
  * don't attempt sending DCN if we're already on hook (15, 17 Aug 2021)
  * end session sooner if receiver hangs up immediately after TCF or during prologue (14 Aug 2021)
  * fix some behavior following frame reception timeouts (13 Aug 2021)
  * improve behavior if procedural interrupt fails (12 Aug 2021)
  * handle sender repeating RR after we transmit MCF (10 Aug 2021)
  * add session logging of receipt of CFR/FTT signals (3 Aug 2021)
  * cope with receipt of PPR following CTC (3 Aug 2021)
  * attempt to cope with NSF/CSI/DIS after PPS, CTR, ERR, RR and improve coping with
    the same after MPS/EOP/EOM (2, 12, 14, 18 Aug 2021)
  * identify DCN after PPS as a receiver abort (2 Aug 2021)
  * attempt to cope with receipt of CTR after sending PPS (2 Aug 2021)
  * remove use of deprecated libtiff integer types and "register" storage class specifier (25 Jul 2021)
  * don't employ senderFumblesECM if V.34-Fax was negotiated (25 Jul 2021)
  * update configure to accept libtiff v4.2 and v4.3 (24 Jul 2021)
  * fix page handling "botch" if a job's first and previous attempts were on a proxy (20 Jul 2021)
  * fix data timeout for bitrates less than 14400 bps when non-zero scanline time (15 Jul 2021)
  * try to cope with T.38 invite stutter at beginning of send (15 Jul 2021)
  * decouple session logging from direct filesystem I/O (15 Jul 2021)
  * try to help receivers who may expect initial 1-bits to start high-speed data (8, 9 Jul, 4 Aug 2021)
  * improve tenacity of "persistent" ECM (26 Jun 2021)
  * maintain the same SSL Fax passcode during a single session (20 May 2021)
  * log detection of binary file transfer support in receivers (1 Apr 2021)
  * add support for SiLabs Si2417/Si2435 (5 Feb 2021)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648900800">- version 7.0.5
  * hylafax.diff removed - included in source
  * extend Class1RecvAbortOK = 0 timeout to 500 ms (4 Dec 2021)
  * cope with Si2435 V.34/V.8 connection glitch (17, 19 Nov 2021)
  * cope with spurious +FCERROR or other delayed messages from modem (26 Oct 2021)
  * avoid letting corrupt RTC signals lead to RTN (26 Oct 2021)
  * don't refer to DCN as an invalid response in error messages (20 Oct 2021)
  * handle TSI during procedural interrupt (19 Oct 2021)
  * do better with waiting on prologue frames from receiver (13 Oct 2021)
  * cope with echo of ERR (13 Oct 2021)
  * run ps2fax, pdf2fax, tiff2fax, pcl2fax coverters as fax user (12 Oct 2021)
  * attempt to cope with receivers who signal RTN in ECM Phase D (23 Sep 2021)
  * fix hfaxd build when LDAP libs are not present (23 Sep 2021)
  * handle PPR echo after fourth PPR (22 Sep 2021)
  * don't use CRP when waiting for CFR following training (15 Sep 2021)
  * attempt to cope with receivers which signal CFR after PPS (14 Sep 2021)
  * cope with senders who signal FTT in Phase D (10 Sep 2021)
  * fix problem with handling NSF/CSI/DIS frame after CTC/EOR (9 Sep 2021)
  * cope with senders who signal PPS without the PPS FCF (9 Sep 2021)
  * handle echo of PPR when expecting CTC/EOR (8 Sep 2021)
  * add failure messages for unspecified training failures (7 Sep 2021)
  * don't use CRP when waiting for CTR (7 Sep 2021)
  * handle echo of EOR, don't use CRP when waiting for ERR (7 Sep 2021)
  * repeat PIN if sender repeats post-page or partial-page message (7-8 Sep 2021)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1654344000">- Project and download links switched to https
  libtiff44.diff added for tiff 4.x compatibility</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1672056000">- version 7.0.6
  * add support for libtiff v4.4 (10 Jun 2022)
  * libtiff44.diff removed
  * cope with SSL Fax senders who skip Phase C (5 May 2022)
  * add ability to trace SSL Fax data reception (3 May 2022)
  * handle timeout OK response to +FRH=3 and +FRM=n (25 Apr 2022)
  * don't leave the modem waiting for a response when in SSL Fax (25 Apr 2022)
  * improve recovery from unexpected SSL Fax terminations during ECM (15, 18, 26 Apr 2022)
  * try to cope with false "no dialtone" results (4, 8 Apr 2022)
  * add initial support for SSL Fax Proxy servers (4, 23 Feb; 4, 19 Apr; 10, 24 Jun 2022)
  * buildrequirement for libssl added (Thanks Dimstar)</changelog>
</package>
<package pkgid="b1842636de0d4236b324f12f63ac57e68e1e86c54f319d94b2704045192b95fd" name="hylafax+-client" arch="s390x">
  <version epoch="0" ver="7.0.6" rel="bp154.2.3.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1546948800">- migrate from cron to systemd timers (boo#1115442)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1547640000">- Dependency on hylafax-hfaxd for timers added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1547812800">- faxgetty@ service removed from %pre section, as it is only a placeholder</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548244800">- Reduce boilerplate generated from %service_* by calling it just
  once.</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1563451200">- Version 7.0.0
  * add LDAP features for compatibility with ActiveDirectory (25 Mar-1 Apr 2019)
  * fix recovery after SSL Fax "accept failure" (18 Mar 2019)
  * add TextFormat overstrike option and disable by default (6 Feb 2019)
  * fix the page size of cover sheets returned via notify (8 Jan 2019)
  * fix or silence numerous compiler warnings (19, 22, 28 Dec 2018)
  * fix pagehandling updating after a proxy has been used (7-8 Dec 2018)
  * add faxmail stderr output of RFC2047 decoding results (5 Dec 2018)
  * fix faxmail handling of headers encoded with UTF-8 (4 Dec 2018)
  * fix faxmail handling of base64-encoded text parts (4 Dec 2018)
  * add SSL Fax support (9-26, 29 Nov; 11, 18, 25 Dec 2018; 2, 7, 23 Jan 2019)</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1574424000">- build fails with libtiff 4.1: pretend, that 4.1 is similar to 4.0</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1574424001">- Version 7.0.1
  * create a client timeout setting and change the default from 60 to
  3600 seconds (26 Sep 2019)
  * extend timeout for receiving ECM frames (21 Aug 2019)
  * fix timeout in Class 1 frame reception (5 Aug 2019)
  * improve Class 1 protocol handling when MaxRecvPages exceeded (31 Jul 2019)
  * fix ModemGroup limit default (11 Jul 2019)
  * fix recovery for SSL Fax write failures (6 Jun 2019)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1581681600">- Version 7.0.2
  * change FIXEDWIDTH default to better accommodate auto-rotation (13 Dec 2019)
  * prevent SSL_accept() from blocking (5 Dec 2019)
  * support libtiff v4.1 (5 Dec 2019)
  * fix ignoremodembusy feature broken by ModemGroup limits feature (16 Nov 2019)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1591704000">- fix for boo#1172731
  VUL-0: EMBARGOED: CVE-2020-8024: hylafax+: Problematic permissions allow
    escalation from uucp to other users
  * adjusted authorisation
  * adjusted pre*/post* snipplets</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1597147200">- version 7.0.3
  * add UseSSLFax feature in sendfax, sendfax.conf, hyla.conf, and JobControl
  (31 Jul 2020)
  * be more resilient in listening for the Phase C carrier (30 Jul 2020)
  * make sure to return to command mode if HDLC receive times out (29 Jul 2020)
  * make faxmail ignore boundaries on parts other than multiparts (29 Jul 2020)
  * don't attempt to write zero bytes of data to a TIFF (29 Jul 2020)
  * don't ever respond to CRP with CRP (28 Jul 2020)
  * secure setup.cache/setup.modem - CVE-2020-15397 (27, 30 Jul 2020)
  * reset frame counter when a sender retransmits PPS for a previously confirmed
  ECM block (26 Jul 2020)
  * scrutinize PPM before concluding that the sender missed our MCF (23 Jul 2020)
  * fix modem recovery after SSL Fax failure (22, 26 Jul 2020)
  * ignore echo of PPR, RTN, CRP (10, 13, 21 Jul 2020)
  * attempt to handle NSF/CSI/DIS in Class 1 sending Phase D (6 Jul 2020)
  * run scripts directly rather than invoking them via a shell for security
  hardening (3-5 Jul 2020)
  * add senderFumblesECM feature (3 Jul 2020)
  * add support for PIN/PIP/PRI-Q/PPS-PRI-Q signals, add senderConfusesPIN
  feature, and utilize PIN for rare conditions where it may be helpful
  (2, 6, 13-14 Jul 2020)
  * add senderConfusesRTN feature (25-26 Jun 2020)
  * add MissedPageHandling feature (24 Jun 2020)
  * use and handle CFR in Phase D to retransmit Phase C (16, 23 Jun 2020)
  * cope with hearing echo of RR, CTC during Class 1 sending (15-17 Jun 2020)
  * fix listening for retransmission of MPS/EOP/EOM if it was received
  corrupt on the first attempt (15 Jun 2020)
  * secure temporary directory creation for faxsetup, faxaddmodem, and
  probemodem - CVE-2020-15396 (13 Jun 2020)
  * don't use CRP when receiving PPS/PPM as some senders think
  we are sending MCF (12 Jun 2020)
  * add BR_SSLFAX to show SSL Fax in notify and faxinfo output (1 Jun 2020)
  * have faxinfo put units on non-standard page dimensions (28 May 2020)
  * improve error messages for JobHost connection errors (22 May 2020)
  * fix perpetual blocking of jobs when a job preparation fails,
  attempt to fix similar blocking problems for bad jobs in
  batches, and add "unblock" faxconfig feature (21 May 2020)
  * ignore TCF if we're receiving an SSL Fax (31 Jan 2020)
  * fixes for build on FreeBSD 12.1 (31 Jan - 3 Feb 2020)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1602244800">- rearrange files-section (boo#1172731)</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1611662400">- Fix TW build by pretending tiff 4.2 is as good enough as 4.{0,1}</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1620475200">- Fix TW build by pretending tiff 4.4 is as good enough as 4.{0,1}</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1626091200">- Add hylafax service and helper for use with firewalld, and
  explain the details in README.SUSE.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1632312000">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * hylafax-faxgetty@.service
  * hylafax-faxq.service
  * hylafax-faxqclean.service
  * hylafax-hfaxd.service
  * hylafax-usage.service</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1634558400">- version 7.0.4
  * README.SUSE renamed
  * hylafax.diff added for boo#1191571 (pre-correction)
  * Dependencies on systemd-services adjusted
  * retry training twice at the same bitrate unless FTT (26 Aug 2021)
  * add missing reason messages for session failures (21 Aug 2021)
  * stop attempts to send or receive signals if the call ended prematurely (16-19 Aug 2021)
  * add Class1HasRMHookIndication (16 Aug 2021)
  * don't attempt sending DCN if we're already on hook (15, 17 Aug 2021)
  * end session sooner if receiver hangs up immediately after TCF or during prologue (14 Aug 2021)
  * fix some behavior following frame reception timeouts (13 Aug 2021)
  * improve behavior if procedural interrupt fails (12 Aug 2021)
  * handle sender repeating RR after we transmit MCF (10 Aug 2021)
  * add session logging of receipt of CFR/FTT signals (3 Aug 2021)
  * cope with receipt of PPR following CTC (3 Aug 2021)
  * attempt to cope with NSF/CSI/DIS after PPS, CTR, ERR, RR and improve coping with
    the same after MPS/EOP/EOM (2, 12, 14, 18 Aug 2021)
  * identify DCN after PPS as a receiver abort (2 Aug 2021)
  * attempt to cope with receipt of CTR after sending PPS (2 Aug 2021)
  * remove use of deprecated libtiff integer types and "register" storage class specifier (25 Jul 2021)
  * don't employ senderFumblesECM if V.34-Fax was negotiated (25 Jul 2021)
  * update configure to accept libtiff v4.2 and v4.3 (24 Jul 2021)
  * fix page handling "botch" if a job's first and previous attempts were on a proxy (20 Jul 2021)
  * fix data timeout for bitrates less than 14400 bps when non-zero scanline time (15 Jul 2021)
  * try to cope with T.38 invite stutter at beginning of send (15 Jul 2021)
  * decouple session logging from direct filesystem I/O (15 Jul 2021)
  * try to help receivers who may expect initial 1-bits to start high-speed data (8, 9 Jul, 4 Aug 2021)
  * improve tenacity of "persistent" ECM (26 Jun 2021)
  * maintain the same SSL Fax passcode during a single session (20 May 2021)
  * log detection of binary file transfer support in receivers (1 Apr 2021)
  * add support for SiLabs Si2417/Si2435 (5 Feb 2021)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648900800">- version 7.0.5
  * hylafax.diff removed - included in source
  * extend Class1RecvAbortOK = 0 timeout to 500 ms (4 Dec 2021)
  * cope with Si2435 V.34/V.8 connection glitch (17, 19 Nov 2021)
  * cope with spurious +FCERROR or other delayed messages from modem (26 Oct 2021)
  * avoid letting corrupt RTC signals lead to RTN (26 Oct 2021)
  * don't refer to DCN as an invalid response in error messages (20 Oct 2021)
  * handle TSI during procedural interrupt (19 Oct 2021)
  * do better with waiting on prologue frames from receiver (13 Oct 2021)
  * cope with echo of ERR (13 Oct 2021)
  * run ps2fax, pdf2fax, tiff2fax, pcl2fax coverters as fax user (12 Oct 2021)
  * attempt to cope with receivers who signal RTN in ECM Phase D (23 Sep 2021)
  * fix hfaxd build when LDAP libs are not present (23 Sep 2021)
  * handle PPR echo after fourth PPR (22 Sep 2021)
  * don't use CRP when waiting for CFR following training (15 Sep 2021)
  * attempt to cope with receivers which signal CFR after PPS (14 Sep 2021)
  * cope with senders who signal FTT in Phase D (10 Sep 2021)
  * fix problem with handling NSF/CSI/DIS frame after CTC/EOR (9 Sep 2021)
  * cope with senders who signal PPS without the PPS FCF (9 Sep 2021)
  * handle echo of PPR when expecting CTC/EOR (8 Sep 2021)
  * add failure messages for unspecified training failures (7 Sep 2021)
  * don't use CRP when waiting for CTR (7 Sep 2021)
  * handle echo of EOR, don't use CRP when waiting for ERR (7 Sep 2021)
  * repeat PIN if sender repeats post-page or partial-page message (7-8 Sep 2021)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1654344000">- Project and download links switched to https
  libtiff44.diff added for tiff 4.x compatibility</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1672056000">- version 7.0.6
  * add support for libtiff v4.4 (10 Jun 2022)
  * libtiff44.diff removed
  * cope with SSL Fax senders who skip Phase C (5 May 2022)
  * add ability to trace SSL Fax data reception (3 May 2022)
  * handle timeout OK response to +FRH=3 and +FRM=n (25 Apr 2022)
  * don't leave the modem waiting for a response when in SSL Fax (25 Apr 2022)
  * improve recovery from unexpected SSL Fax terminations during ECM (15, 18, 26 Apr 2022)
  * try to cope with false "no dialtone" results (4, 8 Apr 2022)
  * add initial support for SSL Fax Proxy servers (4, 23 Feb; 4, 19 Apr; 10, 24 Jun 2022)
  * buildrequirement for libssl added (Thanks Dimstar)</changelog>
</package>
<package pkgid="e14ac9d5ad52509e676ea058149a78d0ae146df8a3f9c1fd4590d0f17a953d7a" name="hylafax+-client" arch="x86_64">
  <version epoch="0" ver="7.0.6" rel="bp154.2.3.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1546948800">- migrate from cron to systemd timers (boo#1115442)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1547640000">- Dependency on hylafax-hfaxd for timers added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1547812800">- faxgetty@ service removed from %pre section, as it is only a placeholder</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548244800">- Reduce boilerplate generated from %service_* by calling it just
  once.</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1563451200">- Version 7.0.0
  * add LDAP features for compatibility with ActiveDirectory (25 Mar-1 Apr 2019)
  * fix recovery after SSL Fax "accept failure" (18 Mar 2019)
  * add TextFormat overstrike option and disable by default (6 Feb 2019)
  * fix the page size of cover sheets returned via notify (8 Jan 2019)
  * fix or silence numerous compiler warnings (19, 22, 28 Dec 2018)
  * fix pagehandling updating after a proxy has been used (7-8 Dec 2018)
  * add faxmail stderr output of RFC2047 decoding results (5 Dec 2018)
  * fix faxmail handling of headers encoded with UTF-8 (4 Dec 2018)
  * fix faxmail handling of base64-encoded text parts (4 Dec 2018)
  * add SSL Fax support (9-26, 29 Nov; 11, 18, 25 Dec 2018; 2, 7, 23 Jan 2019)</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1574424000">- build fails with libtiff 4.1: pretend, that 4.1 is similar to 4.0</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1574424001">- Version 7.0.1
  * create a client timeout setting and change the default from 60 to
  3600 seconds (26 Sep 2019)
  * extend timeout for receiving ECM frames (21 Aug 2019)
  * fix timeout in Class 1 frame reception (5 Aug 2019)
  * improve Class 1 protocol handling when MaxRecvPages exceeded (31 Jul 2019)
  * fix ModemGroup limit default (11 Jul 2019)
  * fix recovery for SSL Fax write failures (6 Jun 2019)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1581681600">- Version 7.0.2
  * change FIXEDWIDTH default to better accommodate auto-rotation (13 Dec 2019)
  * prevent SSL_accept() from blocking (5 Dec 2019)
  * support libtiff v4.1 (5 Dec 2019)
  * fix ignoremodembusy feature broken by ModemGroup limits feature (16 Nov 2019)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1591704000">- fix for boo#1172731
  VUL-0: EMBARGOED: CVE-2020-8024: hylafax+: Problematic permissions allow
    escalation from uucp to other users
  * adjusted authorisation
  * adjusted pre*/post* snipplets</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1597147200">- version 7.0.3
  * add UseSSLFax feature in sendfax, sendfax.conf, hyla.conf, and JobControl
  (31 Jul 2020)
  * be more resilient in listening for the Phase C carrier (30 Jul 2020)
  * make sure to return to command mode if HDLC receive times out (29 Jul 2020)
  * make faxmail ignore boundaries on parts other than multiparts (29 Jul 2020)
  * don't attempt to write zero bytes of data to a TIFF (29 Jul 2020)
  * don't ever respond to CRP with CRP (28 Jul 2020)
  * secure setup.cache/setup.modem - CVE-2020-15397 (27, 30 Jul 2020)
  * reset frame counter when a sender retransmits PPS for a previously confirmed
  ECM block (26 Jul 2020)
  * scrutinize PPM before concluding that the sender missed our MCF (23 Jul 2020)
  * fix modem recovery after SSL Fax failure (22, 26 Jul 2020)
  * ignore echo of PPR, RTN, CRP (10, 13, 21 Jul 2020)
  * attempt to handle NSF/CSI/DIS in Class 1 sending Phase D (6 Jul 2020)
  * run scripts directly rather than invoking them via a shell for security
  hardening (3-5 Jul 2020)
  * add senderFumblesECM feature (3 Jul 2020)
  * add support for PIN/PIP/PRI-Q/PPS-PRI-Q signals, add senderConfusesPIN
  feature, and utilize PIN for rare conditions where it may be helpful
  (2, 6, 13-14 Jul 2020)
  * add senderConfusesRTN feature (25-26 Jun 2020)
  * add MissedPageHandling feature (24 Jun 2020)
  * use and handle CFR in Phase D to retransmit Phase C (16, 23 Jun 2020)
  * cope with hearing echo of RR, CTC during Class 1 sending (15-17 Jun 2020)
  * fix listening for retransmission of MPS/EOP/EOM if it was received
  corrupt on the first attempt (15 Jun 2020)
  * secure temporary directory creation for faxsetup, faxaddmodem, and
  probemodem - CVE-2020-15396 (13 Jun 2020)
  * don't use CRP when receiving PPS/PPM as some senders think
  we are sending MCF (12 Jun 2020)
  * add BR_SSLFAX to show SSL Fax in notify and faxinfo output (1 Jun 2020)
  * have faxinfo put units on non-standard page dimensions (28 May 2020)
  * improve error messages for JobHost connection errors (22 May 2020)
  * fix perpetual blocking of jobs when a job preparation fails,
  attempt to fix similar blocking problems for bad jobs in
  batches, and add "unblock" faxconfig feature (21 May 2020)
  * ignore TCF if we're receiving an SSL Fax (31 Jan 2020)
  * fixes for build on FreeBSD 12.1 (31 Jan - 3 Feb 2020)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1602244800">- rearrange files-section (boo#1172731)</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1611662400">- Fix TW build by pretending tiff 4.2 is as good enough as 4.{0,1}</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1620475200">- Fix TW build by pretending tiff 4.4 is as good enough as 4.{0,1}</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1626091200">- Add hylafax service and helper for use with firewalld, and
  explain the details in README.SUSE.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1632312000">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * hylafax-faxgetty@.service
  * hylafax-faxq.service
  * hylafax-faxqclean.service
  * hylafax-hfaxd.service
  * hylafax-usage.service</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1634558400">- version 7.0.4
  * README.SUSE renamed
  * hylafax.diff added for boo#1191571 (pre-correction)
  * Dependencies on systemd-services adjusted
  * retry training twice at the same bitrate unless FTT (26 Aug 2021)
  * add missing reason messages for session failures (21 Aug 2021)
  * stop attempts to send or receive signals if the call ended prematurely (16-19 Aug 2021)
  * add Class1HasRMHookIndication (16 Aug 2021)
  * don't attempt sending DCN if we're already on hook (15, 17 Aug 2021)
  * end session sooner if receiver hangs up immediately after TCF or during prologue (14 Aug 2021)
  * fix some behavior following frame reception timeouts (13 Aug 2021)
  * improve behavior if procedural interrupt fails (12 Aug 2021)
  * handle sender repeating RR after we transmit MCF (10 Aug 2021)
  * add session logging of receipt of CFR/FTT signals (3 Aug 2021)
  * cope with receipt of PPR following CTC (3 Aug 2021)
  * attempt to cope with NSF/CSI/DIS after PPS, CTR, ERR, RR and improve coping with
    the same after MPS/EOP/EOM (2, 12, 14, 18 Aug 2021)
  * identify DCN after PPS as a receiver abort (2 Aug 2021)
  * attempt to cope with receipt of CTR after sending PPS (2 Aug 2021)
  * remove use of deprecated libtiff integer types and "register" storage class specifier (25 Jul 2021)
  * don't employ senderFumblesECM if V.34-Fax was negotiated (25 Jul 2021)
  * update configure to accept libtiff v4.2 and v4.3 (24 Jul 2021)
  * fix page handling "botch" if a job's first and previous attempts were on a proxy (20 Jul 2021)
  * fix data timeout for bitrates less than 14400 bps when non-zero scanline time (15 Jul 2021)
  * try to cope with T.38 invite stutter at beginning of send (15 Jul 2021)
  * decouple session logging from direct filesystem I/O (15 Jul 2021)
  * try to help receivers who may expect initial 1-bits to start high-speed data (8, 9 Jul, 4 Aug 2021)
  * improve tenacity of "persistent" ECM (26 Jun 2021)
  * maintain the same SSL Fax passcode during a single session (20 May 2021)
  * log detection of binary file transfer support in receivers (1 Apr 2021)
  * add support for SiLabs Si2417/Si2435 (5 Feb 2021)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648900800">- version 7.0.5
  * hylafax.diff removed - included in source
  * extend Class1RecvAbortOK = 0 timeout to 500 ms (4 Dec 2021)
  * cope with Si2435 V.34/V.8 connection glitch (17, 19 Nov 2021)
  * cope with spurious +FCERROR or other delayed messages from modem (26 Oct 2021)
  * avoid letting corrupt RTC signals lead to RTN (26 Oct 2021)
  * don't refer to DCN as an invalid response in error messages (20 Oct 2021)
  * handle TSI during procedural interrupt (19 Oct 2021)
  * do better with waiting on prologue frames from receiver (13 Oct 2021)
  * cope with echo of ERR (13 Oct 2021)
  * run ps2fax, pdf2fax, tiff2fax, pcl2fax coverters as fax user (12 Oct 2021)
  * attempt to cope with receivers who signal RTN in ECM Phase D (23 Sep 2021)
  * fix hfaxd build when LDAP libs are not present (23 Sep 2021)
  * handle PPR echo after fourth PPR (22 Sep 2021)
  * don't use CRP when waiting for CFR following training (15 Sep 2021)
  * attempt to cope with receivers which signal CFR after PPS (14 Sep 2021)
  * cope with senders who signal FTT in Phase D (10 Sep 2021)
  * fix problem with handling NSF/CSI/DIS frame after CTC/EOR (9 Sep 2021)
  * cope with senders who signal PPS without the PPS FCF (9 Sep 2021)
  * handle echo of PPR when expecting CTC/EOR (8 Sep 2021)
  * add failure messages for unspecified training failures (7 Sep 2021)
  * don't use CRP when waiting for CTR (7 Sep 2021)
  * handle echo of EOR, don't use CRP when waiting for ERR (7 Sep 2021)
  * repeat PIN if sender repeats post-page or partial-page message (7-8 Sep 2021)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1654344000">- Project and download links switched to https
  libtiff44.diff added for tiff 4.x compatibility</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1672056000">- version 7.0.6
  * add support for libtiff v4.4 (10 Jun 2022)
  * libtiff44.diff removed
  * cope with SSL Fax senders who skip Phase C (5 May 2022)
  * add ability to trace SSL Fax data reception (3 May 2022)
  * handle timeout OK response to +FRH=3 and +FRM=n (25 Apr 2022)
  * don't leave the modem waiting for a response when in SSL Fax (25 Apr 2022)
  * improve recovery from unexpected SSL Fax terminations during ECM (15, 18, 26 Apr 2022)
  * try to cope with false "no dialtone" results (4, 8 Apr 2022)
  * add initial support for SSL Fax Proxy servers (4, 23 Feb; 4, 19 Apr; 10, 24 Jun 2022)
  * buildrequirement for libssl added (Thanks Dimstar)</changelog>
</package>
<package pkgid="dc0c8e1a7afb6386c7982d42b47f03139bb97b7bf3536e8a5d81f6d4158c9f4d" name="hylafax+-client" arch="aarch64">
  <version epoch="0" ver="7.0.7" rel="bp154.2.6.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1547812800">- faxgetty@ service removed from %pre section, as it is only a placeholder</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548244800">- Reduce boilerplate generated from %service_* by calling it just
  once.</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1563451200">- Version 7.0.0
  * add LDAP features for compatibility with ActiveDirectory (25 Mar-1 Apr 2019)
  * fix recovery after SSL Fax "accept failure" (18 Mar 2019)
  * add TextFormat overstrike option and disable by default (6 Feb 2019)
  * fix the page size of cover sheets returned via notify (8 Jan 2019)
  * fix or silence numerous compiler warnings (19, 22, 28 Dec 2018)
  * fix pagehandling updating after a proxy has been used (7-8 Dec 2018)
  * add faxmail stderr output of RFC2047 decoding results (5 Dec 2018)
  * fix faxmail handling of headers encoded with UTF-8 (4 Dec 2018)
  * fix faxmail handling of base64-encoded text parts (4 Dec 2018)
  * add SSL Fax support (9-26, 29 Nov; 11, 18, 25 Dec 2018; 2, 7, 23 Jan 2019)</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1574424000">- build fails with libtiff 4.1: pretend, that 4.1 is similar to 4.0</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1574424001">- Version 7.0.1
  * create a client timeout setting and change the default from 60 to
  3600 seconds (26 Sep 2019)
  * extend timeout for receiving ECM frames (21 Aug 2019)
  * fix timeout in Class 1 frame reception (5 Aug 2019)
  * improve Class 1 protocol handling when MaxRecvPages exceeded (31 Jul 2019)
  * fix ModemGroup limit default (11 Jul 2019)
  * fix recovery for SSL Fax write failures (6 Jun 2019)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1581681600">- Version 7.0.2
  * change FIXEDWIDTH default to better accommodate auto-rotation (13 Dec 2019)
  * prevent SSL_accept() from blocking (5 Dec 2019)
  * support libtiff v4.1 (5 Dec 2019)
  * fix ignoremodembusy feature broken by ModemGroup limits feature (16 Nov 2019)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1591704000">- fix for boo#1172731
  VUL-0: EMBARGOED: CVE-2020-8024: hylafax+: Problematic permissions allow
    escalation from uucp to other users
  * adjusted authorisation
  * adjusted pre*/post* snipplets</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1597147200">- version 7.0.3
  * add UseSSLFax feature in sendfax, sendfax.conf, hyla.conf, and JobControl
  (31 Jul 2020)
  * be more resilient in listening for the Phase C carrier (30 Jul 2020)
  * make sure to return to command mode if HDLC receive times out (29 Jul 2020)
  * make faxmail ignore boundaries on parts other than multiparts (29 Jul 2020)
  * don't attempt to write zero bytes of data to a TIFF (29 Jul 2020)
  * don't ever respond to CRP with CRP (28 Jul 2020)
  * secure setup.cache/setup.modem - CVE-2020-15397 (27, 30 Jul 2020)
  * reset frame counter when a sender retransmits PPS for a previously confirmed
  ECM block (26 Jul 2020)
  * scrutinize PPM before concluding that the sender missed our MCF (23 Jul 2020)
  * fix modem recovery after SSL Fax failure (22, 26 Jul 2020)
  * ignore echo of PPR, RTN, CRP (10, 13, 21 Jul 2020)
  * attempt to handle NSF/CSI/DIS in Class 1 sending Phase D (6 Jul 2020)
  * run scripts directly rather than invoking them via a shell for security
  hardening (3-5 Jul 2020)
  * add senderFumblesECM feature (3 Jul 2020)
  * add support for PIN/PIP/PRI-Q/PPS-PRI-Q signals, add senderConfusesPIN
  feature, and utilize PIN for rare conditions where it may be helpful
  (2, 6, 13-14 Jul 2020)
  * add senderConfusesRTN feature (25-26 Jun 2020)
  * add MissedPageHandling feature (24 Jun 2020)
  * use and handle CFR in Phase D to retransmit Phase C (16, 23 Jun 2020)
  * cope with hearing echo of RR, CTC during Class 1 sending (15-17 Jun 2020)
  * fix listening for retransmission of MPS/EOP/EOM if it was received
  corrupt on the first attempt (15 Jun 2020)
  * secure temporary directory creation for faxsetup, faxaddmodem, and
  probemodem - CVE-2020-15396 (13 Jun 2020)
  * don't use CRP when receiving PPS/PPM as some senders think
  we are sending MCF (12 Jun 2020)
  * add BR_SSLFAX to show SSL Fax in notify and faxinfo output (1 Jun 2020)
  * have faxinfo put units on non-standard page dimensions (28 May 2020)
  * improve error messages for JobHost connection errors (22 May 2020)
  * fix perpetual blocking of jobs when a job preparation fails,
  attempt to fix similar blocking problems for bad jobs in
  batches, and add "unblock" faxconfig feature (21 May 2020)
  * ignore TCF if we're receiving an SSL Fax (31 Jan 2020)
  * fixes for build on FreeBSD 12.1 (31 Jan - 3 Feb 2020)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1602244800">- rearrange files-section (boo#1172731)</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1611662400">- Fix TW build by pretending tiff 4.2 is as good enough as 4.{0,1}</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1620475200">- Fix TW build by pretending tiff 4.4 is as good enough as 4.{0,1}</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1626091200">- Add hylafax service and helper for use with firewalld, and
  explain the details in README.SUSE.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1632312000">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * hylafax-faxgetty@.service
  * hylafax-faxq.service
  * hylafax-faxqclean.service
  * hylafax-hfaxd.service
  * hylafax-usage.service</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1634558400">- version 7.0.4
  * README.SUSE renamed
  * hylafax.diff added for boo#1191571 (pre-correction)
  * Dependencies on systemd-services adjusted
  * retry training twice at the same bitrate unless FTT (26 Aug 2021)
  * add missing reason messages for session failures (21 Aug 2021)
  * stop attempts to send or receive signals if the call ended prematurely (16-19 Aug 2021)
  * add Class1HasRMHookIndication (16 Aug 2021)
  * don't attempt sending DCN if we're already on hook (15, 17 Aug 2021)
  * end session sooner if receiver hangs up immediately after TCF or during prologue (14 Aug 2021)
  * fix some behavior following frame reception timeouts (13 Aug 2021)
  * improve behavior if procedural interrupt fails (12 Aug 2021)
  * handle sender repeating RR after we transmit MCF (10 Aug 2021)
  * add session logging of receipt of CFR/FTT signals (3 Aug 2021)
  * cope with receipt of PPR following CTC (3 Aug 2021)
  * attempt to cope with NSF/CSI/DIS after PPS, CTR, ERR, RR and improve coping with
    the same after MPS/EOP/EOM (2, 12, 14, 18 Aug 2021)
  * identify DCN after PPS as a receiver abort (2 Aug 2021)
  * attempt to cope with receipt of CTR after sending PPS (2 Aug 2021)
  * remove use of deprecated libtiff integer types and "register" storage class specifier (25 Jul 2021)
  * don't employ senderFumblesECM if V.34-Fax was negotiated (25 Jul 2021)
  * update configure to accept libtiff v4.2 and v4.3 (24 Jul 2021)
  * fix page handling "botch" if a job's first and previous attempts were on a proxy (20 Jul 2021)
  * fix data timeout for bitrates less than 14400 bps when non-zero scanline time (15 Jul 2021)
  * try to cope with T.38 invite stutter at beginning of send (15 Jul 2021)
  * decouple session logging from direct filesystem I/O (15 Jul 2021)
  * try to help receivers who may expect initial 1-bits to start high-speed data (8, 9 Jul, 4 Aug 2021)
  * improve tenacity of "persistent" ECM (26 Jun 2021)
  * maintain the same SSL Fax passcode during a single session (20 May 2021)
  * log detection of binary file transfer support in receivers (1 Apr 2021)
  * add support for SiLabs Si2417/Si2435 (5 Feb 2021)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648900800">- version 7.0.5
  * hylafax.diff removed - included in source
  * extend Class1RecvAbortOK = 0 timeout to 500 ms (4 Dec 2021)
  * cope with Si2435 V.34/V.8 connection glitch (17, 19 Nov 2021)
  * cope with spurious +FCERROR or other delayed messages from modem (26 Oct 2021)
  * avoid letting corrupt RTC signals lead to RTN (26 Oct 2021)
  * don't refer to DCN as an invalid response in error messages (20 Oct 2021)
  * handle TSI during procedural interrupt (19 Oct 2021)
  * do better with waiting on prologue frames from receiver (13 Oct 2021)
  * cope with echo of ERR (13 Oct 2021)
  * run ps2fax, pdf2fax, tiff2fax, pcl2fax coverters as fax user (12 Oct 2021)
  * attempt to cope with receivers who signal RTN in ECM Phase D (23 Sep 2021)
  * fix hfaxd build when LDAP libs are not present (23 Sep 2021)
  * handle PPR echo after fourth PPR (22 Sep 2021)
  * don't use CRP when waiting for CFR following training (15 Sep 2021)
  * attempt to cope with receivers which signal CFR after PPS (14 Sep 2021)
  * cope with senders who signal FTT in Phase D (10 Sep 2021)
  * fix problem with handling NSF/CSI/DIS frame after CTC/EOR (9 Sep 2021)
  * cope with senders who signal PPS without the PPS FCF (9 Sep 2021)
  * handle echo of PPR when expecting CTC/EOR (8 Sep 2021)
  * add failure messages for unspecified training failures (7 Sep 2021)
  * don't use CRP when waiting for CTR (7 Sep 2021)
  * handle echo of EOR, don't use CRP when waiting for ERR (7 Sep 2021)
  * repeat PIN if sender repeats post-page or partial-page message (7-8 Sep 2021)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1654344000">- Project and download links switched to https
  libtiff44.diff added for tiff 4.x compatibility</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1672056000">- version 7.0.6
  * add support for libtiff v4.4 (10 Jun 2022)
  * libtiff44.diff removed
  * cope with SSL Fax senders who skip Phase C (5 May 2022)
  * add ability to trace SSL Fax data reception (3 May 2022)
  * handle timeout OK response to +FRH=3 and +FRM=n (25 Apr 2022)
  * don't leave the modem waiting for a response when in SSL Fax (25 Apr 2022)
  * improve recovery from unexpected SSL Fax terminations during ECM (15, 18, 26 Apr 2022)
  * try to cope with false "no dialtone" results (4, 8 Apr 2022)
  * add initial support for SSL Fax Proxy servers (4, 23 Feb; 4, 19 Apr; 10, 24 Jun 2022)
  * buildrequirement for libssl added (Thanks Dimstar)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1673524800">- tiff_450.diff added
  updated to trunk r2695 for tiff 4.5 support - See CHANGES for details</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1674561600">- version 7.0.7
  * tiff_450.diff removed
  * constrain job priority to 0-255 (20 Jan 2023)
  * add support for libtiff v4.5.0 (4-5 Jan 2023)
  * add some Si2435 configuration considerations (27 Dec 2022, 20 Jan 2023)
  * if Class1RecvAbortOK is 0 then don't bother with the CAN byte at all (31 Oct 2022)
  * check that the modem isn't trying to deliver a message when we're trying to send
    binary data to it (16-17 Oct 2022)
  * prevent inherited values from creeping into subsequent xferfaxlog data (26 Aug 2022)
  * add external reference feature in dialrules (18 Aug 2022)</changelog>
</package>
<package pkgid="57d45e8ab0921400dfa3bf1a3ac8e3f268dcc29d24b33c7105bc0e068631af70" name="hylafax+-client" arch="i586">
  <version epoch="0" ver="7.0.7" rel="bp154.2.6.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1547812800">- faxgetty@ service removed from %pre section, as it is only a placeholder</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548244800">- Reduce boilerplate generated from %service_* by calling it just
  once.</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1563451200">- Version 7.0.0
  * add LDAP features for compatibility with ActiveDirectory (25 Mar-1 Apr 2019)
  * fix recovery after SSL Fax "accept failure" (18 Mar 2019)
  * add TextFormat overstrike option and disable by default (6 Feb 2019)
  * fix the page size of cover sheets returned via notify (8 Jan 2019)
  * fix or silence numerous compiler warnings (19, 22, 28 Dec 2018)
  * fix pagehandling updating after a proxy has been used (7-8 Dec 2018)
  * add faxmail stderr output of RFC2047 decoding results (5 Dec 2018)
  * fix faxmail handling of headers encoded with UTF-8 (4 Dec 2018)
  * fix faxmail handling of base64-encoded text parts (4 Dec 2018)
  * add SSL Fax support (9-26, 29 Nov; 11, 18, 25 Dec 2018; 2, 7, 23 Jan 2019)</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1574424000">- build fails with libtiff 4.1: pretend, that 4.1 is similar to 4.0</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1574424001">- Version 7.0.1
  * create a client timeout setting and change the default from 60 to
  3600 seconds (26 Sep 2019)
  * extend timeout for receiving ECM frames (21 Aug 2019)
  * fix timeout in Class 1 frame reception (5 Aug 2019)
  * improve Class 1 protocol handling when MaxRecvPages exceeded (31 Jul 2019)
  * fix ModemGroup limit default (11 Jul 2019)
  * fix recovery for SSL Fax write failures (6 Jun 2019)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1581681600">- Version 7.0.2
  * change FIXEDWIDTH default to better accommodate auto-rotation (13 Dec 2019)
  * prevent SSL_accept() from blocking (5 Dec 2019)
  * support libtiff v4.1 (5 Dec 2019)
  * fix ignoremodembusy feature broken by ModemGroup limits feature (16 Nov 2019)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1591704000">- fix for boo#1172731
  VUL-0: EMBARGOED: CVE-2020-8024: hylafax+: Problematic permissions allow
    escalation from uucp to other users
  * adjusted authorisation
  * adjusted pre*/post* snipplets</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1597147200">- version 7.0.3
  * add UseSSLFax feature in sendfax, sendfax.conf, hyla.conf, and JobControl
  (31 Jul 2020)
  * be more resilient in listening for the Phase C carrier (30 Jul 2020)
  * make sure to return to command mode if HDLC receive times out (29 Jul 2020)
  * make faxmail ignore boundaries on parts other than multiparts (29 Jul 2020)
  * don't attempt to write zero bytes of data to a TIFF (29 Jul 2020)
  * don't ever respond to CRP with CRP (28 Jul 2020)
  * secure setup.cache/setup.modem - CVE-2020-15397 (27, 30 Jul 2020)
  * reset frame counter when a sender retransmits PPS for a previously confirmed
  ECM block (26 Jul 2020)
  * scrutinize PPM before concluding that the sender missed our MCF (23 Jul 2020)
  * fix modem recovery after SSL Fax failure (22, 26 Jul 2020)
  * ignore echo of PPR, RTN, CRP (10, 13, 21 Jul 2020)
  * attempt to handle NSF/CSI/DIS in Class 1 sending Phase D (6 Jul 2020)
  * run scripts directly rather than invoking them via a shell for security
  hardening (3-5 Jul 2020)
  * add senderFumblesECM feature (3 Jul 2020)
  * add support for PIN/PIP/PRI-Q/PPS-PRI-Q signals, add senderConfusesPIN
  feature, and utilize PIN for rare conditions where it may be helpful
  (2, 6, 13-14 Jul 2020)
  * add senderConfusesRTN feature (25-26 Jun 2020)
  * add MissedPageHandling feature (24 Jun 2020)
  * use and handle CFR in Phase D to retransmit Phase C (16, 23 Jun 2020)
  * cope with hearing echo of RR, CTC during Class 1 sending (15-17 Jun 2020)
  * fix listening for retransmission of MPS/EOP/EOM if it was received
  corrupt on the first attempt (15 Jun 2020)
  * secure temporary directory creation for faxsetup, faxaddmodem, and
  probemodem - CVE-2020-15396 (13 Jun 2020)
  * don't use CRP when receiving PPS/PPM as some senders think
  we are sending MCF (12 Jun 2020)
  * add BR_SSLFAX to show SSL Fax in notify and faxinfo output (1 Jun 2020)
  * have faxinfo put units on non-standard page dimensions (28 May 2020)
  * improve error messages for JobHost connection errors (22 May 2020)
  * fix perpetual blocking of jobs when a job preparation fails,
  attempt to fix similar blocking problems for bad jobs in
  batches, and add "unblock" faxconfig feature (21 May 2020)
  * ignore TCF if we're receiving an SSL Fax (31 Jan 2020)
  * fixes for build on FreeBSD 12.1 (31 Jan - 3 Feb 2020)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1602244800">- rearrange files-section (boo#1172731)</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1611662400">- Fix TW build by pretending tiff 4.2 is as good enough as 4.{0,1}</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1620475200">- Fix TW build by pretending tiff 4.4 is as good enough as 4.{0,1}</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1626091200">- Add hylafax service and helper for use with firewalld, and
  explain the details in README.SUSE.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1632312000">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * hylafax-faxgetty@.service
  * hylafax-faxq.service
  * hylafax-faxqclean.service
  * hylafax-hfaxd.service
  * hylafax-usage.service</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1634558400">- version 7.0.4
  * README.SUSE renamed
  * hylafax.diff added for boo#1191571 (pre-correction)
  * Dependencies on systemd-services adjusted
  * retry training twice at the same bitrate unless FTT (26 Aug 2021)
  * add missing reason messages for session failures (21 Aug 2021)
  * stop attempts to send or receive signals if the call ended prematurely (16-19 Aug 2021)
  * add Class1HasRMHookIndication (16 Aug 2021)
  * don't attempt sending DCN if we're already on hook (15, 17 Aug 2021)
  * end session sooner if receiver hangs up immediately after TCF or during prologue (14 Aug 2021)
  * fix some behavior following frame reception timeouts (13 Aug 2021)
  * improve behavior if procedural interrupt fails (12 Aug 2021)
  * handle sender repeating RR after we transmit MCF (10 Aug 2021)
  * add session logging of receipt of CFR/FTT signals (3 Aug 2021)
  * cope with receipt of PPR following CTC (3 Aug 2021)
  * attempt to cope with NSF/CSI/DIS after PPS, CTR, ERR, RR and improve coping with
    the same after MPS/EOP/EOM (2, 12, 14, 18 Aug 2021)
  * identify DCN after PPS as a receiver abort (2 Aug 2021)
  * attempt to cope with receipt of CTR after sending PPS (2 Aug 2021)
  * remove use of deprecated libtiff integer types and "register" storage class specifier (25 Jul 2021)
  * don't employ senderFumblesECM if V.34-Fax was negotiated (25 Jul 2021)
  * update configure to accept libtiff v4.2 and v4.3 (24 Jul 2021)
  * fix page handling "botch" if a job's first and previous attempts were on a proxy (20 Jul 2021)
  * fix data timeout for bitrates less than 14400 bps when non-zero scanline time (15 Jul 2021)
  * try to cope with T.38 invite stutter at beginning of send (15 Jul 2021)
  * decouple session logging from direct filesystem I/O (15 Jul 2021)
  * try to help receivers who may expect initial 1-bits to start high-speed data (8, 9 Jul, 4 Aug 2021)
  * improve tenacity of "persistent" ECM (26 Jun 2021)
  * maintain the same SSL Fax passcode during a single session (20 May 2021)
  * log detection of binary file transfer support in receivers (1 Apr 2021)
  * add support for SiLabs Si2417/Si2435 (5 Feb 2021)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648900800">- version 7.0.5
  * hylafax.diff removed - included in source
  * extend Class1RecvAbortOK = 0 timeout to 500 ms (4 Dec 2021)
  * cope with Si2435 V.34/V.8 connection glitch (17, 19 Nov 2021)
  * cope with spurious +FCERROR or other delayed messages from modem (26 Oct 2021)
  * avoid letting corrupt RTC signals lead to RTN (26 Oct 2021)
  * don't refer to DCN as an invalid response in error messages (20 Oct 2021)
  * handle TSI during procedural interrupt (19 Oct 2021)
  * do better with waiting on prologue frames from receiver (13 Oct 2021)
  * cope with echo of ERR (13 Oct 2021)
  * run ps2fax, pdf2fax, tiff2fax, pcl2fax coverters as fax user (12 Oct 2021)
  * attempt to cope with receivers who signal RTN in ECM Phase D (23 Sep 2021)
  * fix hfaxd build when LDAP libs are not present (23 Sep 2021)
  * handle PPR echo after fourth PPR (22 Sep 2021)
  * don't use CRP when waiting for CFR following training (15 Sep 2021)
  * attempt to cope with receivers which signal CFR after PPS (14 Sep 2021)
  * cope with senders who signal FTT in Phase D (10 Sep 2021)
  * fix problem with handling NSF/CSI/DIS frame after CTC/EOR (9 Sep 2021)
  * cope with senders who signal PPS without the PPS FCF (9 Sep 2021)
  * handle echo of PPR when expecting CTC/EOR (8 Sep 2021)
  * add failure messages for unspecified training failures (7 Sep 2021)
  * don't use CRP when waiting for CTR (7 Sep 2021)
  * handle echo of EOR, don't use CRP when waiting for ERR (7 Sep 2021)
  * repeat PIN if sender repeats post-page or partial-page message (7-8 Sep 2021)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1654344000">- Project and download links switched to https
  libtiff44.diff added for tiff 4.x compatibility</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1672056000">- version 7.0.6
  * add support for libtiff v4.4 (10 Jun 2022)
  * libtiff44.diff removed
  * cope with SSL Fax senders who skip Phase C (5 May 2022)
  * add ability to trace SSL Fax data reception (3 May 2022)
  * handle timeout OK response to +FRH=3 and +FRM=n (25 Apr 2022)
  * don't leave the modem waiting for a response when in SSL Fax (25 Apr 2022)
  * improve recovery from unexpected SSL Fax terminations during ECM (15, 18, 26 Apr 2022)
  * try to cope with false "no dialtone" results (4, 8 Apr 2022)
  * add initial support for SSL Fax Proxy servers (4, 23 Feb; 4, 19 Apr; 10, 24 Jun 2022)
  * buildrequirement for libssl added (Thanks Dimstar)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1673524800">- tiff_450.diff added
  updated to trunk r2695 for tiff 4.5 support - See CHANGES for details</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1674561600">- version 7.0.7
  * tiff_450.diff removed
  * constrain job priority to 0-255 (20 Jan 2023)
  * add support for libtiff v4.5.0 (4-5 Jan 2023)
  * add some Si2435 configuration considerations (27 Dec 2022, 20 Jan 2023)
  * if Class1RecvAbortOK is 0 then don't bother with the CAN byte at all (31 Oct 2022)
  * check that the modem isn't trying to deliver a message when we're trying to send
    binary data to it (16-17 Oct 2022)
  * prevent inherited values from creeping into subsequent xferfaxlog data (26 Aug 2022)
  * add external reference feature in dialrules (18 Aug 2022)</changelog>
</package>
<package pkgid="8e7a596dd606775ab57172aa29b68638850b36a91799599d9964911b282cd62a" name="hylafax+-client" arch="ppc64le">
  <version epoch="0" ver="7.0.7" rel="bp154.2.6.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1547812800">- faxgetty@ service removed from %pre section, as it is only a placeholder</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548244800">- Reduce boilerplate generated from %service_* by calling it just
  once.</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1563451200">- Version 7.0.0
  * add LDAP features for compatibility with ActiveDirectory (25 Mar-1 Apr 2019)
  * fix recovery after SSL Fax "accept failure" (18 Mar 2019)
  * add TextFormat overstrike option and disable by default (6 Feb 2019)
  * fix the page size of cover sheets returned via notify (8 Jan 2019)
  * fix or silence numerous compiler warnings (19, 22, 28 Dec 2018)
  * fix pagehandling updating after a proxy has been used (7-8 Dec 2018)
  * add faxmail stderr output of RFC2047 decoding results (5 Dec 2018)
  * fix faxmail handling of headers encoded with UTF-8 (4 Dec 2018)
  * fix faxmail handling of base64-encoded text parts (4 Dec 2018)
  * add SSL Fax support (9-26, 29 Nov; 11, 18, 25 Dec 2018; 2, 7, 23 Jan 2019)</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1574424000">- build fails with libtiff 4.1: pretend, that 4.1 is similar to 4.0</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1574424001">- Version 7.0.1
  * create a client timeout setting and change the default from 60 to
  3600 seconds (26 Sep 2019)
  * extend timeout for receiving ECM frames (21 Aug 2019)
  * fix timeout in Class 1 frame reception (5 Aug 2019)
  * improve Class 1 protocol handling when MaxRecvPages exceeded (31 Jul 2019)
  * fix ModemGroup limit default (11 Jul 2019)
  * fix recovery for SSL Fax write failures (6 Jun 2019)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1581681600">- Version 7.0.2
  * change FIXEDWIDTH default to better accommodate auto-rotation (13 Dec 2019)
  * prevent SSL_accept() from blocking (5 Dec 2019)
  * support libtiff v4.1 (5 Dec 2019)
  * fix ignoremodembusy feature broken by ModemGroup limits feature (16 Nov 2019)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1591704000">- fix for boo#1172731
  VUL-0: EMBARGOED: CVE-2020-8024: hylafax+: Problematic permissions allow
    escalation from uucp to other users
  * adjusted authorisation
  * adjusted pre*/post* snipplets</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1597147200">- version 7.0.3
  * add UseSSLFax feature in sendfax, sendfax.conf, hyla.conf, and JobControl
  (31 Jul 2020)
  * be more resilient in listening for the Phase C carrier (30 Jul 2020)
  * make sure to return to command mode if HDLC receive times out (29 Jul 2020)
  * make faxmail ignore boundaries on parts other than multiparts (29 Jul 2020)
  * don't attempt to write zero bytes of data to a TIFF (29 Jul 2020)
  * don't ever respond to CRP with CRP (28 Jul 2020)
  * secure setup.cache/setup.modem - CVE-2020-15397 (27, 30 Jul 2020)
  * reset frame counter when a sender retransmits PPS for a previously confirmed
  ECM block (26 Jul 2020)
  * scrutinize PPM before concluding that the sender missed our MCF (23 Jul 2020)
  * fix modem recovery after SSL Fax failure (22, 26 Jul 2020)
  * ignore echo of PPR, RTN, CRP (10, 13, 21 Jul 2020)
  * attempt to handle NSF/CSI/DIS in Class 1 sending Phase D (6 Jul 2020)
  * run scripts directly rather than invoking them via a shell for security
  hardening (3-5 Jul 2020)
  * add senderFumblesECM feature (3 Jul 2020)
  * add support for PIN/PIP/PRI-Q/PPS-PRI-Q signals, add senderConfusesPIN
  feature, and utilize PIN for rare conditions where it may be helpful
  (2, 6, 13-14 Jul 2020)
  * add senderConfusesRTN feature (25-26 Jun 2020)
  * add MissedPageHandling feature (24 Jun 2020)
  * use and handle CFR in Phase D to retransmit Phase C (16, 23 Jun 2020)
  * cope with hearing echo of RR, CTC during Class 1 sending (15-17 Jun 2020)
  * fix listening for retransmission of MPS/EOP/EOM if it was received
  corrupt on the first attempt (15 Jun 2020)
  * secure temporary directory creation for faxsetup, faxaddmodem, and
  probemodem - CVE-2020-15396 (13 Jun 2020)
  * don't use CRP when receiving PPS/PPM as some senders think
  we are sending MCF (12 Jun 2020)
  * add BR_SSLFAX to show SSL Fax in notify and faxinfo output (1 Jun 2020)
  * have faxinfo put units on non-standard page dimensions (28 May 2020)
  * improve error messages for JobHost connection errors (22 May 2020)
  * fix perpetual blocking of jobs when a job preparation fails,
  attempt to fix similar blocking problems for bad jobs in
  batches, and add "unblock" faxconfig feature (21 May 2020)
  * ignore TCF if we're receiving an SSL Fax (31 Jan 2020)
  * fixes for build on FreeBSD 12.1 (31 Jan - 3 Feb 2020)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1602244800">- rearrange files-section (boo#1172731)</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1611662400">- Fix TW build by pretending tiff 4.2 is as good enough as 4.{0,1}</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1620475200">- Fix TW build by pretending tiff 4.4 is as good enough as 4.{0,1}</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1626091200">- Add hylafax service and helper for use with firewalld, and
  explain the details in README.SUSE.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1632312000">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * hylafax-faxgetty@.service
  * hylafax-faxq.service
  * hylafax-faxqclean.service
  * hylafax-hfaxd.service
  * hylafax-usage.service</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1634558400">- version 7.0.4
  * README.SUSE renamed
  * hylafax.diff added for boo#1191571 (pre-correction)
  * Dependencies on systemd-services adjusted
  * retry training twice at the same bitrate unless FTT (26 Aug 2021)
  * add missing reason messages for session failures (21 Aug 2021)
  * stop attempts to send or receive signals if the call ended prematurely (16-19 Aug 2021)
  * add Class1HasRMHookIndication (16 Aug 2021)
  * don't attempt sending DCN if we're already on hook (15, 17 Aug 2021)
  * end session sooner if receiver hangs up immediately after TCF or during prologue (14 Aug 2021)
  * fix some behavior following frame reception timeouts (13 Aug 2021)
  * improve behavior if procedural interrupt fails (12 Aug 2021)
  * handle sender repeating RR after we transmit MCF (10 Aug 2021)
  * add session logging of receipt of CFR/FTT signals (3 Aug 2021)
  * cope with receipt of PPR following CTC (3 Aug 2021)
  * attempt to cope with NSF/CSI/DIS after PPS, CTR, ERR, RR and improve coping with
    the same after MPS/EOP/EOM (2, 12, 14, 18 Aug 2021)
  * identify DCN after PPS as a receiver abort (2 Aug 2021)
  * attempt to cope with receipt of CTR after sending PPS (2 Aug 2021)
  * remove use of deprecated libtiff integer types and "register" storage class specifier (25 Jul 2021)
  * don't employ senderFumblesECM if V.34-Fax was negotiated (25 Jul 2021)
  * update configure to accept libtiff v4.2 and v4.3 (24 Jul 2021)
  * fix page handling "botch" if a job's first and previous attempts were on a proxy (20 Jul 2021)
  * fix data timeout for bitrates less than 14400 bps when non-zero scanline time (15 Jul 2021)
  * try to cope with T.38 invite stutter at beginning of send (15 Jul 2021)
  * decouple session logging from direct filesystem I/O (15 Jul 2021)
  * try to help receivers who may expect initial 1-bits to start high-speed data (8, 9 Jul, 4 Aug 2021)
  * improve tenacity of "persistent" ECM (26 Jun 2021)
  * maintain the same SSL Fax passcode during a single session (20 May 2021)
  * log detection of binary file transfer support in receivers (1 Apr 2021)
  * add support for SiLabs Si2417/Si2435 (5 Feb 2021)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648900800">- version 7.0.5
  * hylafax.diff removed - included in source
  * extend Class1RecvAbortOK = 0 timeout to 500 ms (4 Dec 2021)
  * cope with Si2435 V.34/V.8 connection glitch (17, 19 Nov 2021)
  * cope with spurious +FCERROR or other delayed messages from modem (26 Oct 2021)
  * avoid letting corrupt RTC signals lead to RTN (26 Oct 2021)
  * don't refer to DCN as an invalid response in error messages (20 Oct 2021)
  * handle TSI during procedural interrupt (19 Oct 2021)
  * do better with waiting on prologue frames from receiver (13 Oct 2021)
  * cope with echo of ERR (13 Oct 2021)
  * run ps2fax, pdf2fax, tiff2fax, pcl2fax coverters as fax user (12 Oct 2021)
  * attempt to cope with receivers who signal RTN in ECM Phase D (23 Sep 2021)
  * fix hfaxd build when LDAP libs are not present (23 Sep 2021)
  * handle PPR echo after fourth PPR (22 Sep 2021)
  * don't use CRP when waiting for CFR following training (15 Sep 2021)
  * attempt to cope with receivers which signal CFR after PPS (14 Sep 2021)
  * cope with senders who signal FTT in Phase D (10 Sep 2021)
  * fix problem with handling NSF/CSI/DIS frame after CTC/EOR (9 Sep 2021)
  * cope with senders who signal PPS without the PPS FCF (9 Sep 2021)
  * handle echo of PPR when expecting CTC/EOR (8 Sep 2021)
  * add failure messages for unspecified training failures (7 Sep 2021)
  * don't use CRP when waiting for CTR (7 Sep 2021)
  * handle echo of EOR, don't use CRP when waiting for ERR (7 Sep 2021)
  * repeat PIN if sender repeats post-page or partial-page message (7-8 Sep 2021)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1654344000">- Project and download links switched to https
  libtiff44.diff added for tiff 4.x compatibility</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1672056000">- version 7.0.6
  * add support for libtiff v4.4 (10 Jun 2022)
  * libtiff44.diff removed
  * cope with SSL Fax senders who skip Phase C (5 May 2022)
  * add ability to trace SSL Fax data reception (3 May 2022)
  * handle timeout OK response to +FRH=3 and +FRM=n (25 Apr 2022)
  * don't leave the modem waiting for a response when in SSL Fax (25 Apr 2022)
  * improve recovery from unexpected SSL Fax terminations during ECM (15, 18, 26 Apr 2022)
  * try to cope with false "no dialtone" results (4, 8 Apr 2022)
  * add initial support for SSL Fax Proxy servers (4, 23 Feb; 4, 19 Apr; 10, 24 Jun 2022)
  * buildrequirement for libssl added (Thanks Dimstar)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1673524800">- tiff_450.diff added
  updated to trunk r2695 for tiff 4.5 support - See CHANGES for details</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1674561600">- version 7.0.7
  * tiff_450.diff removed
  * constrain job priority to 0-255 (20 Jan 2023)
  * add support for libtiff v4.5.0 (4-5 Jan 2023)
  * add some Si2435 configuration considerations (27 Dec 2022, 20 Jan 2023)
  * if Class1RecvAbortOK is 0 then don't bother with the CAN byte at all (31 Oct 2022)
  * check that the modem isn't trying to deliver a message when we're trying to send
    binary data to it (16-17 Oct 2022)
  * prevent inherited values from creeping into subsequent xferfaxlog data (26 Aug 2022)
  * add external reference feature in dialrules (18 Aug 2022)</changelog>
</package>
<package pkgid="3f541d039eb91a152ce28bf21929ea92b2227ef3912f3b2f97c48ef090e0fed3" name="hylafax+-client" arch="s390x">
  <version epoch="0" ver="7.0.7" rel="bp154.2.6.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1547812800">- faxgetty@ service removed from %pre section, as it is only a placeholder</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548244800">- Reduce boilerplate generated from %service_* by calling it just
  once.</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1563451200">- Version 7.0.0
  * add LDAP features for compatibility with ActiveDirectory (25 Mar-1 Apr 2019)
  * fix recovery after SSL Fax "accept failure" (18 Mar 2019)
  * add TextFormat overstrike option and disable by default (6 Feb 2019)
  * fix the page size of cover sheets returned via notify (8 Jan 2019)
  * fix or silence numerous compiler warnings (19, 22, 28 Dec 2018)
  * fix pagehandling updating after a proxy has been used (7-8 Dec 2018)
  * add faxmail stderr output of RFC2047 decoding results (5 Dec 2018)
  * fix faxmail handling of headers encoded with UTF-8 (4 Dec 2018)
  * fix faxmail handling of base64-encoded text parts (4 Dec 2018)
  * add SSL Fax support (9-26, 29 Nov; 11, 18, 25 Dec 2018; 2, 7, 23 Jan 2019)</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1574424000">- build fails with libtiff 4.1: pretend, that 4.1 is similar to 4.0</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1574424001">- Version 7.0.1
  * create a client timeout setting and change the default from 60 to
  3600 seconds (26 Sep 2019)
  * extend timeout for receiving ECM frames (21 Aug 2019)
  * fix timeout in Class 1 frame reception (5 Aug 2019)
  * improve Class 1 protocol handling when MaxRecvPages exceeded (31 Jul 2019)
  * fix ModemGroup limit default (11 Jul 2019)
  * fix recovery for SSL Fax write failures (6 Jun 2019)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1581681600">- Version 7.0.2
  * change FIXEDWIDTH default to better accommodate auto-rotation (13 Dec 2019)
  * prevent SSL_accept() from blocking (5 Dec 2019)
  * support libtiff v4.1 (5 Dec 2019)
  * fix ignoremodembusy feature broken by ModemGroup limits feature (16 Nov 2019)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1591704000">- fix for boo#1172731
  VUL-0: EMBARGOED: CVE-2020-8024: hylafax+: Problematic permissions allow
    escalation from uucp to other users
  * adjusted authorisation
  * adjusted pre*/post* snipplets</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1597147200">- version 7.0.3
  * add UseSSLFax feature in sendfax, sendfax.conf, hyla.conf, and JobControl
  (31 Jul 2020)
  * be more resilient in listening for the Phase C carrier (30 Jul 2020)
  * make sure to return to command mode if HDLC receive times out (29 Jul 2020)
  * make faxmail ignore boundaries on parts other than multiparts (29 Jul 2020)
  * don't attempt to write zero bytes of data to a TIFF (29 Jul 2020)
  * don't ever respond to CRP with CRP (28 Jul 2020)
  * secure setup.cache/setup.modem - CVE-2020-15397 (27, 30 Jul 2020)
  * reset frame counter when a sender retransmits PPS for a previously confirmed
  ECM block (26 Jul 2020)
  * scrutinize PPM before concluding that the sender missed our MCF (23 Jul 2020)
  * fix modem recovery after SSL Fax failure (22, 26 Jul 2020)
  * ignore echo of PPR, RTN, CRP (10, 13, 21 Jul 2020)
  * attempt to handle NSF/CSI/DIS in Class 1 sending Phase D (6 Jul 2020)
  * run scripts directly rather than invoking them via a shell for security
  hardening (3-5 Jul 2020)
  * add senderFumblesECM feature (3 Jul 2020)
  * add support for PIN/PIP/PRI-Q/PPS-PRI-Q signals, add senderConfusesPIN
  feature, and utilize PIN for rare conditions where it may be helpful
  (2, 6, 13-14 Jul 2020)
  * add senderConfusesRTN feature (25-26 Jun 2020)
  * add MissedPageHandling feature (24 Jun 2020)
  * use and handle CFR in Phase D to retransmit Phase C (16, 23 Jun 2020)
  * cope with hearing echo of RR, CTC during Class 1 sending (15-17 Jun 2020)
  * fix listening for retransmission of MPS/EOP/EOM if it was received
  corrupt on the first attempt (15 Jun 2020)
  * secure temporary directory creation for faxsetup, faxaddmodem, and
  probemodem - CVE-2020-15396 (13 Jun 2020)
  * don't use CRP when receiving PPS/PPM as some senders think
  we are sending MCF (12 Jun 2020)
  * add BR_SSLFAX to show SSL Fax in notify and faxinfo output (1 Jun 2020)
  * have faxinfo put units on non-standard page dimensions (28 May 2020)
  * improve error messages for JobHost connection errors (22 May 2020)
  * fix perpetual blocking of jobs when a job preparation fails,
  attempt to fix similar blocking problems for bad jobs in
  batches, and add "unblock" faxconfig feature (21 May 2020)
  * ignore TCF if we're receiving an SSL Fax (31 Jan 2020)
  * fixes for build on FreeBSD 12.1 (31 Jan - 3 Feb 2020)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1602244800">- rearrange files-section (boo#1172731)</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1611662400">- Fix TW build by pretending tiff 4.2 is as good enough as 4.{0,1}</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1620475200">- Fix TW build by pretending tiff 4.4 is as good enough as 4.{0,1}</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1626091200">- Add hylafax service and helper for use with firewalld, and
  explain the details in README.SUSE.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1632312000">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * hylafax-faxgetty@.service
  * hylafax-faxq.service
  * hylafax-faxqclean.service
  * hylafax-hfaxd.service
  * hylafax-usage.service</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1634558400">- version 7.0.4
  * README.SUSE renamed
  * hylafax.diff added for boo#1191571 (pre-correction)
  * Dependencies on systemd-services adjusted
  * retry training twice at the same bitrate unless FTT (26 Aug 2021)
  * add missing reason messages for session failures (21 Aug 2021)
  * stop attempts to send or receive signals if the call ended prematurely (16-19 Aug 2021)
  * add Class1HasRMHookIndication (16 Aug 2021)
  * don't attempt sending DCN if we're already on hook (15, 17 Aug 2021)
  * end session sooner if receiver hangs up immediately after TCF or during prologue (14 Aug 2021)
  * fix some behavior following frame reception timeouts (13 Aug 2021)
  * improve behavior if procedural interrupt fails (12 Aug 2021)
  * handle sender repeating RR after we transmit MCF (10 Aug 2021)
  * add session logging of receipt of CFR/FTT signals (3 Aug 2021)
  * cope with receipt of PPR following CTC (3 Aug 2021)
  * attempt to cope with NSF/CSI/DIS after PPS, CTR, ERR, RR and improve coping with
    the same after MPS/EOP/EOM (2, 12, 14, 18 Aug 2021)
  * identify DCN after PPS as a receiver abort (2 Aug 2021)
  * attempt to cope with receipt of CTR after sending PPS (2 Aug 2021)
  * remove use of deprecated libtiff integer types and "register" storage class specifier (25 Jul 2021)
  * don't employ senderFumblesECM if V.34-Fax was negotiated (25 Jul 2021)
  * update configure to accept libtiff v4.2 and v4.3 (24 Jul 2021)
  * fix page handling "botch" if a job's first and previous attempts were on a proxy (20 Jul 2021)
  * fix data timeout for bitrates less than 14400 bps when non-zero scanline time (15 Jul 2021)
  * try to cope with T.38 invite stutter at beginning of send (15 Jul 2021)
  * decouple session logging from direct filesystem I/O (15 Jul 2021)
  * try to help receivers who may expect initial 1-bits to start high-speed data (8, 9 Jul, 4 Aug 2021)
  * improve tenacity of "persistent" ECM (26 Jun 2021)
  * maintain the same SSL Fax passcode during a single session (20 May 2021)
  * log detection of binary file transfer support in receivers (1 Apr 2021)
  * add support for SiLabs Si2417/Si2435 (5 Feb 2021)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648900800">- version 7.0.5
  * hylafax.diff removed - included in source
  * extend Class1RecvAbortOK = 0 timeout to 500 ms (4 Dec 2021)
  * cope with Si2435 V.34/V.8 connection glitch (17, 19 Nov 2021)
  * cope with spurious +FCERROR or other delayed messages from modem (26 Oct 2021)
  * avoid letting corrupt RTC signals lead to RTN (26 Oct 2021)
  * don't refer to DCN as an invalid response in error messages (20 Oct 2021)
  * handle TSI during procedural interrupt (19 Oct 2021)
  * do better with waiting on prologue frames from receiver (13 Oct 2021)
  * cope with echo of ERR (13 Oct 2021)
  * run ps2fax, pdf2fax, tiff2fax, pcl2fax coverters as fax user (12 Oct 2021)
  * attempt to cope with receivers who signal RTN in ECM Phase D (23 Sep 2021)
  * fix hfaxd build when LDAP libs are not present (23 Sep 2021)
  * handle PPR echo after fourth PPR (22 Sep 2021)
  * don't use CRP when waiting for CFR following training (15 Sep 2021)
  * attempt to cope with receivers which signal CFR after PPS (14 Sep 2021)
  * cope with senders who signal FTT in Phase D (10 Sep 2021)
  * fix problem with handling NSF/CSI/DIS frame after CTC/EOR (9 Sep 2021)
  * cope with senders who signal PPS without the PPS FCF (9 Sep 2021)
  * handle echo of PPR when expecting CTC/EOR (8 Sep 2021)
  * add failure messages for unspecified training failures (7 Sep 2021)
  * don't use CRP when waiting for CTR (7 Sep 2021)
  * handle echo of EOR, don't use CRP when waiting for ERR (7 Sep 2021)
  * repeat PIN if sender repeats post-page or partial-page message (7-8 Sep 2021)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1654344000">- Project and download links switched to https
  libtiff44.diff added for tiff 4.x compatibility</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1672056000">- version 7.0.6
  * add support for libtiff v4.4 (10 Jun 2022)
  * libtiff44.diff removed
  * cope with SSL Fax senders who skip Phase C (5 May 2022)
  * add ability to trace SSL Fax data reception (3 May 2022)
  * handle timeout OK response to +FRH=3 and +FRM=n (25 Apr 2022)
  * don't leave the modem waiting for a response when in SSL Fax (25 Apr 2022)
  * improve recovery from unexpected SSL Fax terminations during ECM (15, 18, 26 Apr 2022)
  * try to cope with false "no dialtone" results (4, 8 Apr 2022)
  * add initial support for SSL Fax Proxy servers (4, 23 Feb; 4, 19 Apr; 10, 24 Jun 2022)
  * buildrequirement for libssl added (Thanks Dimstar)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1673524800">- tiff_450.diff added
  updated to trunk r2695 for tiff 4.5 support - See CHANGES for details</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1674561600">- version 7.0.7
  * tiff_450.diff removed
  * constrain job priority to 0-255 (20 Jan 2023)
  * add support for libtiff v4.5.0 (4-5 Jan 2023)
  * add some Si2435 configuration considerations (27 Dec 2022, 20 Jan 2023)
  * if Class1RecvAbortOK is 0 then don't bother with the CAN byte at all (31 Oct 2022)
  * check that the modem isn't trying to deliver a message when we're trying to send
    binary data to it (16-17 Oct 2022)
  * prevent inherited values from creeping into subsequent xferfaxlog data (26 Aug 2022)
  * add external reference feature in dialrules (18 Aug 2022)</changelog>
</package>
<package pkgid="9bef38ad9b85f1b9a214baf765ca5a88f9f93d70fa5149645b3eec74819b4e61" name="hylafax+-client" arch="x86_64">
  <version epoch="0" ver="7.0.7" rel="bp154.2.6.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1547812800">- faxgetty@ service removed from %pre section, as it is only a placeholder</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548244800">- Reduce boilerplate generated from %service_* by calling it just
  once.</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1563451200">- Version 7.0.0
  * add LDAP features for compatibility with ActiveDirectory (25 Mar-1 Apr 2019)
  * fix recovery after SSL Fax "accept failure" (18 Mar 2019)
  * add TextFormat overstrike option and disable by default (6 Feb 2019)
  * fix the page size of cover sheets returned via notify (8 Jan 2019)
  * fix or silence numerous compiler warnings (19, 22, 28 Dec 2018)
  * fix pagehandling updating after a proxy has been used (7-8 Dec 2018)
  * add faxmail stderr output of RFC2047 decoding results (5 Dec 2018)
  * fix faxmail handling of headers encoded with UTF-8 (4 Dec 2018)
  * fix faxmail handling of base64-encoded text parts (4 Dec 2018)
  * add SSL Fax support (9-26, 29 Nov; 11, 18, 25 Dec 2018; 2, 7, 23 Jan 2019)</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1574424000">- build fails with libtiff 4.1: pretend, that 4.1 is similar to 4.0</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1574424001">- Version 7.0.1
  * create a client timeout setting and change the default from 60 to
  3600 seconds (26 Sep 2019)
  * extend timeout for receiving ECM frames (21 Aug 2019)
  * fix timeout in Class 1 frame reception (5 Aug 2019)
  * improve Class 1 protocol handling when MaxRecvPages exceeded (31 Jul 2019)
  * fix ModemGroup limit default (11 Jul 2019)
  * fix recovery for SSL Fax write failures (6 Jun 2019)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1581681600">- Version 7.0.2
  * change FIXEDWIDTH default to better accommodate auto-rotation (13 Dec 2019)
  * prevent SSL_accept() from blocking (5 Dec 2019)
  * support libtiff v4.1 (5 Dec 2019)
  * fix ignoremodembusy feature broken by ModemGroup limits feature (16 Nov 2019)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1591704000">- fix for boo#1172731
  VUL-0: EMBARGOED: CVE-2020-8024: hylafax+: Problematic permissions allow
    escalation from uucp to other users
  * adjusted authorisation
  * adjusted pre*/post* snipplets</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1597147200">- version 7.0.3
  * add UseSSLFax feature in sendfax, sendfax.conf, hyla.conf, and JobControl
  (31 Jul 2020)
  * be more resilient in listening for the Phase C carrier (30 Jul 2020)
  * make sure to return to command mode if HDLC receive times out (29 Jul 2020)
  * make faxmail ignore boundaries on parts other than multiparts (29 Jul 2020)
  * don't attempt to write zero bytes of data to a TIFF (29 Jul 2020)
  * don't ever respond to CRP with CRP (28 Jul 2020)
  * secure setup.cache/setup.modem - CVE-2020-15397 (27, 30 Jul 2020)
  * reset frame counter when a sender retransmits PPS for a previously confirmed
  ECM block (26 Jul 2020)
  * scrutinize PPM before concluding that the sender missed our MCF (23 Jul 2020)
  * fix modem recovery after SSL Fax failure (22, 26 Jul 2020)
  * ignore echo of PPR, RTN, CRP (10, 13, 21 Jul 2020)
  * attempt to handle NSF/CSI/DIS in Class 1 sending Phase D (6 Jul 2020)
  * run scripts directly rather than invoking them via a shell for security
  hardening (3-5 Jul 2020)
  * add senderFumblesECM feature (3 Jul 2020)
  * add support for PIN/PIP/PRI-Q/PPS-PRI-Q signals, add senderConfusesPIN
  feature, and utilize PIN for rare conditions where it may be helpful
  (2, 6, 13-14 Jul 2020)
  * add senderConfusesRTN feature (25-26 Jun 2020)
  * add MissedPageHandling feature (24 Jun 2020)
  * use and handle CFR in Phase D to retransmit Phase C (16, 23 Jun 2020)
  * cope with hearing echo of RR, CTC during Class 1 sending (15-17 Jun 2020)
  * fix listening for retransmission of MPS/EOP/EOM if it was received
  corrupt on the first attempt (15 Jun 2020)
  * secure temporary directory creation for faxsetup, faxaddmodem, and
  probemodem - CVE-2020-15396 (13 Jun 2020)
  * don't use CRP when receiving PPS/PPM as some senders think
  we are sending MCF (12 Jun 2020)
  * add BR_SSLFAX to show SSL Fax in notify and faxinfo output (1 Jun 2020)
  * have faxinfo put units on non-standard page dimensions (28 May 2020)
  * improve error messages for JobHost connection errors (22 May 2020)
  * fix perpetual blocking of jobs when a job preparation fails,
  attempt to fix similar blocking problems for bad jobs in
  batches, and add "unblock" faxconfig feature (21 May 2020)
  * ignore TCF if we're receiving an SSL Fax (31 Jan 2020)
  * fixes for build on FreeBSD 12.1 (31 Jan - 3 Feb 2020)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1602244800">- rearrange files-section (boo#1172731)</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1611662400">- Fix TW build by pretending tiff 4.2 is as good enough as 4.{0,1}</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1620475200">- Fix TW build by pretending tiff 4.4 is as good enough as 4.{0,1}</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1626091200">- Add hylafax service and helper for use with firewalld, and
  explain the details in README.SUSE.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1632312000">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * hylafax-faxgetty@.service
  * hylafax-faxq.service
  * hylafax-faxqclean.service
  * hylafax-hfaxd.service
  * hylafax-usage.service</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1634558400">- version 7.0.4
  * README.SUSE renamed
  * hylafax.diff added for boo#1191571 (pre-correction)
  * Dependencies on systemd-services adjusted
  * retry training twice at the same bitrate unless FTT (26 Aug 2021)
  * add missing reason messages for session failures (21 Aug 2021)
  * stop attempts to send or receive signals if the call ended prematurely (16-19 Aug 2021)
  * add Class1HasRMHookIndication (16 Aug 2021)
  * don't attempt sending DCN if we're already on hook (15, 17 Aug 2021)
  * end session sooner if receiver hangs up immediately after TCF or during prologue (14 Aug 2021)
  * fix some behavior following frame reception timeouts (13 Aug 2021)
  * improve behavior if procedural interrupt fails (12 Aug 2021)
  * handle sender repeating RR after we transmit MCF (10 Aug 2021)
  * add session logging of receipt of CFR/FTT signals (3 Aug 2021)
  * cope with receipt of PPR following CTC (3 Aug 2021)
  * attempt to cope with NSF/CSI/DIS after PPS, CTR, ERR, RR and improve coping with
    the same after MPS/EOP/EOM (2, 12, 14, 18 Aug 2021)
  * identify DCN after PPS as a receiver abort (2 Aug 2021)
  * attempt to cope with receipt of CTR after sending PPS (2 Aug 2021)
  * remove use of deprecated libtiff integer types and "register" storage class specifier (25 Jul 2021)
  * don't employ senderFumblesECM if V.34-Fax was negotiated (25 Jul 2021)
  * update configure to accept libtiff v4.2 and v4.3 (24 Jul 2021)
  * fix page handling "botch" if a job's first and previous attempts were on a proxy (20 Jul 2021)
  * fix data timeout for bitrates less than 14400 bps when non-zero scanline time (15 Jul 2021)
  * try to cope with T.38 invite stutter at beginning of send (15 Jul 2021)
  * decouple session logging from direct filesystem I/O (15 Jul 2021)
  * try to help receivers who may expect initial 1-bits to start high-speed data (8, 9 Jul, 4 Aug 2021)
  * improve tenacity of "persistent" ECM (26 Jun 2021)
  * maintain the same SSL Fax passcode during a single session (20 May 2021)
  * log detection of binary file transfer support in receivers (1 Apr 2021)
  * add support for SiLabs Si2417/Si2435 (5 Feb 2021)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648900800">- version 7.0.5
  * hylafax.diff removed - included in source
  * extend Class1RecvAbortOK = 0 timeout to 500 ms (4 Dec 2021)
  * cope with Si2435 V.34/V.8 connection glitch (17, 19 Nov 2021)
  * cope with spurious +FCERROR or other delayed messages from modem (26 Oct 2021)
  * avoid letting corrupt RTC signals lead to RTN (26 Oct 2021)
  * don't refer to DCN as an invalid response in error messages (20 Oct 2021)
  * handle TSI during procedural interrupt (19 Oct 2021)
  * do better with waiting on prologue frames from receiver (13 Oct 2021)
  * cope with echo of ERR (13 Oct 2021)
  * run ps2fax, pdf2fax, tiff2fax, pcl2fax coverters as fax user (12 Oct 2021)
  * attempt to cope with receivers who signal RTN in ECM Phase D (23 Sep 2021)
  * fix hfaxd build when LDAP libs are not present (23 Sep 2021)
  * handle PPR echo after fourth PPR (22 Sep 2021)
  * don't use CRP when waiting for CFR following training (15 Sep 2021)
  * attempt to cope with receivers which signal CFR after PPS (14 Sep 2021)
  * cope with senders who signal FTT in Phase D (10 Sep 2021)
  * fix problem with handling NSF/CSI/DIS frame after CTC/EOR (9 Sep 2021)
  * cope with senders who signal PPS without the PPS FCF (9 Sep 2021)
  * handle echo of PPR when expecting CTC/EOR (8 Sep 2021)
  * add failure messages for unspecified training failures (7 Sep 2021)
  * don't use CRP when waiting for CTR (7 Sep 2021)
  * handle echo of EOR, don't use CRP when waiting for ERR (7 Sep 2021)
  * repeat PIN if sender repeats post-page or partial-page message (7-8 Sep 2021)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1654344000">- Project and download links switched to https
  libtiff44.diff added for tiff 4.x compatibility</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1672056000">- version 7.0.6
  * add support for libtiff v4.4 (10 Jun 2022)
  * libtiff44.diff removed
  * cope with SSL Fax senders who skip Phase C (5 May 2022)
  * add ability to trace SSL Fax data reception (3 May 2022)
  * handle timeout OK response to +FRH=3 and +FRM=n (25 Apr 2022)
  * don't leave the modem waiting for a response when in SSL Fax (25 Apr 2022)
  * improve recovery from unexpected SSL Fax terminations during ECM (15, 18, 26 Apr 2022)
  * try to cope with false "no dialtone" results (4, 8 Apr 2022)
  * add initial support for SSL Fax Proxy servers (4, 23 Feb; 4, 19 Apr; 10, 24 Jun 2022)
  * buildrequirement for libssl added (Thanks Dimstar)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1673524800">- tiff_450.diff added
  updated to trunk r2695 for tiff 4.5 support - See CHANGES for details</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1674561600">- version 7.0.7
  * tiff_450.diff removed
  * constrain job priority to 0-255 (20 Jan 2023)
  * add support for libtiff v4.5.0 (4-5 Jan 2023)
  * add some Si2435 configuration considerations (27 Dec 2022, 20 Jan 2023)
  * if Class1RecvAbortOK is 0 then don't bother with the CAN byte at all (31 Oct 2022)
  * check that the modem isn't trying to deliver a message when we're trying to send
    binary data to it (16-17 Oct 2022)
  * prevent inherited values from creeping into subsequent xferfaxlog data (26 Aug 2022)
  * add external reference feature in dialrules (18 Aug 2022)</changelog>
</package>
<package pkgid="b297d0acfa3150ea69f88435276a0cc968df6fe41e1706908355c11c86299aaa" name="jhead" arch="aarch64">
  <version epoch="0" ver="3.06.0.1" rel="bp154.2.3.1"/>
  <changelog author="toganm@opensuse.org" date="1332244800">- Updated to version 2.95
  * Handle very large unsigned rational numbers in exif header</changelog>
  <changelog author="toganm@opensuse.org" date="1341230400">- Update to version 2.96
  * Fix printing file info when -ft option is used
  * Do not skip readonle files with -st option</changelog>
  <changelog author="toganm@opensuse.org" date="1362916800">- Update to version 2.97
  * Add feature to show quality of jpeg, (by Andy Spiegel)
  * Fix crash on some corrupt files bug, clarify time adjustment
    syntax in help</changelog>
  <changelog author="mpluskal@suse.com" date="1430136000">- Update to version 3.00
  * Make max comment size 16000
  * Added "-zt" option to trim 32k of trailing zeroes from Nikon 1
    J2 and J3 images.
  * Add ability to reset invalid rotation tag (from Moultrie
    game cameras)
- Use url for source
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="kbabioch@suse.com" date="1517832000">- Added CVE-2018-6612.patch: Fix of a heap-based buffer over-read
  (boo#1079349 CVE-2018-6612)</changelog>
  <changelog author="sbrabec@suse.com" date="1536926400">-  Integer overflow fixes (boo#1108480, CVE-2016-3822,
  CVE-2018-16554, CVE-2016-3822.patch, CVE-2018-16554.patch.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1540382400">- Renamed CVE-2018-16554.patch to CVE-2018-17088.patch, because
  it is in fact fix of boo#1108672
- Buffer overflow fix (boo#1108480) CVE-2018-16554.patch</changelog>
  <changelog author="Wang Jun &lt;jgwang@suse.com&gt;" date="1611316800">- Update to version 3.04
  * Apply a whole bunch of patches from Debian.
  * Spell check and fuzz test stuff from Debian, nothing useful to
    human users.
  * Add option to set exif date from date from another file.
  * Bug fixes relating to fuzz testing.
  * Fix bug where thumbnail replacement DID NOT WORK.
  * Fix bug when no orientation tag is present
  * Fix bug of not clearing exif information when processing images
    with an without exif data in one invocation.
  * Remove some unnecessary warnings with some types of GPS data
  * Remove multiple copies of the same type of section when deleting
    section types
  * Modify the patch CVE-2018-17088.patch because source code changed
- Remove these patches because of including upstream code
  * CVE-2018-6612.patch, CVE-2016-3822.patch, CVE-2018-16554.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1618833600">- version update to 3.06.0.1
  * lot of fuzztest fixes, e. g. CVE-2021-3496 [bsc#1184756]
- deleted patches
  - CVE-2018-17088.patch (upstreamed)</changelog>
  <changelog author="David Anes &lt;david.anes@suse.com&gt;" date="1666872000">- security fix [bsc#1204409, CVE-2022-41751]
  * arbitrary OS commands by placing them in a JPEG filename
  * Added patch jhead-CVE-2022-41751-1.patch
  * Added patch jhead-CVE-2022-41751-2.patch</changelog>
</package>
<package pkgid="f82c53239f81a983ef2a6272736a9c4b42e9d10d177c569e51b37d57da46d9c7" name="jhead" arch="i586">
  <version epoch="0" ver="3.06.0.1" rel="bp154.2.3.1"/>
  <changelog author="toganm@opensuse.org" date="1332244800">- Updated to version 2.95
  * Handle very large unsigned rational numbers in exif header</changelog>
  <changelog author="toganm@opensuse.org" date="1341230400">- Update to version 2.96
  * Fix printing file info when -ft option is used
  * Do not skip readonle files with -st option</changelog>
  <changelog author="toganm@opensuse.org" date="1362916800">- Update to version 2.97
  * Add feature to show quality of jpeg, (by Andy Spiegel)
  * Fix crash on some corrupt files bug, clarify time adjustment
    syntax in help</changelog>
  <changelog author="mpluskal@suse.com" date="1430136000">- Update to version 3.00
  * Make max comment size 16000
  * Added "-zt" option to trim 32k of trailing zeroes from Nikon 1
    J2 and J3 images.
  * Add ability to reset invalid rotation tag (from Moultrie
    game cameras)
- Use url for source
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="kbabioch@suse.com" date="1517832000">- Added CVE-2018-6612.patch: Fix of a heap-based buffer over-read
  (boo#1079349 CVE-2018-6612)</changelog>
  <changelog author="sbrabec@suse.com" date="1536926400">-  Integer overflow fixes (boo#1108480, CVE-2016-3822,
  CVE-2018-16554, CVE-2016-3822.patch, CVE-2018-16554.patch.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1540382400">- Renamed CVE-2018-16554.patch to CVE-2018-17088.patch, because
  it is in fact fix of boo#1108672
- Buffer overflow fix (boo#1108480) CVE-2018-16554.patch</changelog>
  <changelog author="Wang Jun &lt;jgwang@suse.com&gt;" date="1611316800">- Update to version 3.04
  * Apply a whole bunch of patches from Debian.
  * Spell check and fuzz test stuff from Debian, nothing useful to
    human users.
  * Add option to set exif date from date from another file.
  * Bug fixes relating to fuzz testing.
  * Fix bug where thumbnail replacement DID NOT WORK.
  * Fix bug when no orientation tag is present
  * Fix bug of not clearing exif information when processing images
    with an without exif data in one invocation.
  * Remove some unnecessary warnings with some types of GPS data
  * Remove multiple copies of the same type of section when deleting
    section types
  * Modify the patch CVE-2018-17088.patch because source code changed
- Remove these patches because of including upstream code
  * CVE-2018-6612.patch, CVE-2016-3822.patch, CVE-2018-16554.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1618833600">- version update to 3.06.0.1
  * lot of fuzztest fixes, e. g. CVE-2021-3496 [bsc#1184756]
- deleted patches
  - CVE-2018-17088.patch (upstreamed)</changelog>
  <changelog author="David Anes &lt;david.anes@suse.com&gt;" date="1666872000">- security fix [bsc#1204409, CVE-2022-41751]
  * arbitrary OS commands by placing them in a JPEG filename
  * Added patch jhead-CVE-2022-41751-1.patch
  * Added patch jhead-CVE-2022-41751-2.patch</changelog>
</package>
<package pkgid="bc24be207a20c0096dad1b3618fbb9799942a2ca8f5aa46682df320d0156ed6c" name="jhead" arch="ppc64le">
  <version epoch="0" ver="3.06.0.1" rel="bp154.2.3.1"/>
  <changelog author="toganm@opensuse.org" date="1332244800">- Updated to version 2.95
  * Handle very large unsigned rational numbers in exif header</changelog>
  <changelog author="toganm@opensuse.org" date="1341230400">- Update to version 2.96
  * Fix printing file info when -ft option is used
  * Do not skip readonle files with -st option</changelog>
  <changelog author="toganm@opensuse.org" date="1362916800">- Update to version 2.97
  * Add feature to show quality of jpeg, (by Andy Spiegel)
  * Fix crash on some corrupt files bug, clarify time adjustment
    syntax in help</changelog>
  <changelog author="mpluskal@suse.com" date="1430136000">- Update to version 3.00
  * Make max comment size 16000
  * Added "-zt" option to trim 32k of trailing zeroes from Nikon 1
    J2 and J3 images.
  * Add ability to reset invalid rotation tag (from Moultrie
    game cameras)
- Use url for source
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="kbabioch@suse.com" date="1517832000">- Added CVE-2018-6612.patch: Fix of a heap-based buffer over-read
  (boo#1079349 CVE-2018-6612)</changelog>
  <changelog author="sbrabec@suse.com" date="1536926400">-  Integer overflow fixes (boo#1108480, CVE-2016-3822,
  CVE-2018-16554, CVE-2016-3822.patch, CVE-2018-16554.patch.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1540382400">- Renamed CVE-2018-16554.patch to CVE-2018-17088.patch, because
  it is in fact fix of boo#1108672
- Buffer overflow fix (boo#1108480) CVE-2018-16554.patch</changelog>
  <changelog author="Wang Jun &lt;jgwang@suse.com&gt;" date="1611316800">- Update to version 3.04
  * Apply a whole bunch of patches from Debian.
  * Spell check and fuzz test stuff from Debian, nothing useful to
    human users.
  * Add option to set exif date from date from another file.
  * Bug fixes relating to fuzz testing.
  * Fix bug where thumbnail replacement DID NOT WORK.
  * Fix bug when no orientation tag is present
  * Fix bug of not clearing exif information when processing images
    with an without exif data in one invocation.
  * Remove some unnecessary warnings with some types of GPS data
  * Remove multiple copies of the same type of section when deleting
    section types
  * Modify the patch CVE-2018-17088.patch because source code changed
- Remove these patches because of including upstream code
  * CVE-2018-6612.patch, CVE-2016-3822.patch, CVE-2018-16554.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1618833600">- version update to 3.06.0.1
  * lot of fuzztest fixes, e. g. CVE-2021-3496 [bsc#1184756]
- deleted patches
  - CVE-2018-17088.patch (upstreamed)</changelog>
  <changelog author="David Anes &lt;david.anes@suse.com&gt;" date="1666872000">- security fix [bsc#1204409, CVE-2022-41751]
  * arbitrary OS commands by placing them in a JPEG filename
  * Added patch jhead-CVE-2022-41751-1.patch
  * Added patch jhead-CVE-2022-41751-2.patch</changelog>
</package>
<package pkgid="ca57e4887ccf7e8dfb1b0c6de8e7d3beff5b5dc5210321064a3148190213def7" name="jhead" arch="s390x">
  <version epoch="0" ver="3.06.0.1" rel="bp154.2.3.1"/>
  <changelog author="toganm@opensuse.org" date="1332244800">- Updated to version 2.95
  * Handle very large unsigned rational numbers in exif header</changelog>
  <changelog author="toganm@opensuse.org" date="1341230400">- Update to version 2.96
  * Fix printing file info when -ft option is used
  * Do not skip readonle files with -st option</changelog>
  <changelog author="toganm@opensuse.org" date="1362916800">- Update to version 2.97
  * Add feature to show quality of jpeg, (by Andy Spiegel)
  * Fix crash on some corrupt files bug, clarify time adjustment
    syntax in help</changelog>
  <changelog author="mpluskal@suse.com" date="1430136000">- Update to version 3.00
  * Make max comment size 16000
  * Added "-zt" option to trim 32k of trailing zeroes from Nikon 1
    J2 and J3 images.
  * Add ability to reset invalid rotation tag (from Moultrie
    game cameras)
- Use url for source
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="kbabioch@suse.com" date="1517832000">- Added CVE-2018-6612.patch: Fix of a heap-based buffer over-read
  (boo#1079349 CVE-2018-6612)</changelog>
  <changelog author="sbrabec@suse.com" date="1536926400">-  Integer overflow fixes (boo#1108480, CVE-2016-3822,
  CVE-2018-16554, CVE-2016-3822.patch, CVE-2018-16554.patch.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1540382400">- Renamed CVE-2018-16554.patch to CVE-2018-17088.patch, because
  it is in fact fix of boo#1108672
- Buffer overflow fix (boo#1108480) CVE-2018-16554.patch</changelog>
  <changelog author="Wang Jun &lt;jgwang@suse.com&gt;" date="1611316800">- Update to version 3.04
  * Apply a whole bunch of patches from Debian.
  * Spell check and fuzz test stuff from Debian, nothing useful to
    human users.
  * Add option to set exif date from date from another file.
  * Bug fixes relating to fuzz testing.
  * Fix bug where thumbnail replacement DID NOT WORK.
  * Fix bug when no orientation tag is present
  * Fix bug of not clearing exif information when processing images
    with an without exif data in one invocation.
  * Remove some unnecessary warnings with some types of GPS data
  * Remove multiple copies of the same type of section when deleting
    section types
  * Modify the patch CVE-2018-17088.patch because source code changed
- Remove these patches because of including upstream code
  * CVE-2018-6612.patch, CVE-2016-3822.patch, CVE-2018-16554.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1618833600">- version update to 3.06.0.1
  * lot of fuzztest fixes, e. g. CVE-2021-3496 [bsc#1184756]
- deleted patches
  - CVE-2018-17088.patch (upstreamed)</changelog>
  <changelog author="David Anes &lt;david.anes@suse.com&gt;" date="1666872000">- security fix [bsc#1204409, CVE-2022-41751]
  * arbitrary OS commands by placing them in a JPEG filename
  * Added patch jhead-CVE-2022-41751-1.patch
  * Added patch jhead-CVE-2022-41751-2.patch</changelog>
</package>
<package pkgid="137200196a681539d85981a8a12562d7c27c6641b6c7b9d52a45e1ec9a1972b4" name="jhead" arch="src">
  <version epoch="0" ver="3.06.0.1" rel="bp154.2.3.1"/>
  <changelog author="sbrabec@suse.cz" date="1161345600">- Updated to version 2.6:
  * Compilation and bug fixes
  * Fix shutter speed display in '-c' mode for very long shutter
    speeds
  * Fix a bug in autorot when rotating filenames with spaces in
    them.
  * Improved handling of corrupt exif linkages in exif header.
  * Added -a (rename associated files) options.</changelog>
  <changelog author="prusnak@suse.cz" date="1166270400">- fixed comparison with string literal (strcmp.patch) [#226477]</changelog>
  <changelog author="sbrabec@suse.cz" date="1186401600">- Updated to version 2.7:
  * Remove maximum jpeg sections limit
  * Added -ds option
  * On clearing rotation, clear the image and the optional
    thumbnail rotation tags.
  * Add -mkexif option to make a new exif header.</changelog>
  <changelog author="sbrabec@suse.cz" date="1195214400">- Updated to version 2.8:
  * Added IPTC handling
  * Added -q option
  * Fix handling of corrupted GPS directory.
  * Extract focus distance from canon makernote.
  * Extract subject range (pentax and fuji cameras)</changelog>
  <changelog author="sbrabec@suse.cz" date="1207569600">- Updated to version 2.82:
  * Make jhead aware of XMP data and not delete it.
  * Improve IPTC handling a little.
  * Change how date is encoded with -mkexif section to make it more
    compatible.</changelog>
  <changelog author="sbrabec@suse.cz" date="1224158400">- Updated to version 2.84:
  * Decode more exif tags for '-v' mode.
  * Fix a bunch of potential string overflows (bnc#435979,
    CVE-2008-4575)
  * Fix bug where IPTC sction was not deleted by -purejpg
  * Fix GPS altitude decode bug</changelog>
  <changelog author="sbrabec@suse.cz" date="1231156800">- Fixed arbitrary command vulnerability in DoCommand (bnc#435979,
  CVE-2008-4641).
- Fixed dependencies.</changelog>
  <changelog author="sbrabec@suse.cz" date="1249473600">- Updated to version 2.87:
  * Added the ability to move files with the -n option.
  * Minor fixes.</changelog>
  <changelog author="toganm@opensuse.org" date="1331812800">- Updated to version 2.93: For details please read changes.txt
  * Fixed bug in jhead -cmd that caused metatdata to be deleted.</changelog>
  <changelog author="toganm@opensuse.org" date="1331899200">- Fixed file-contains-date-and-time rpmlint warning. Date is set as
  last date in the changes file.</changelog>
  <changelog author="toganm@opensuse.org" date="1332244800">- Updated to version 2.95
  * Handle very large unsigned rational numbers in exif header</changelog>
  <changelog author="toganm@opensuse.org" date="1341230400">- Update to version 2.96
  * Fix printing file info when -ft option is used
  * Do not skip readonle files with -st option</changelog>
  <changelog author="toganm@opensuse.org" date="1362916800">- Update to version 2.97
  * Add feature to show quality of jpeg, (by Andy Spiegel)
  * Fix crash on some corrupt files bug, clarify time adjustment
    syntax in help</changelog>
  <changelog author="mpluskal@suse.com" date="1430136000">- Update to version 3.00
  * Make max comment size 16000
  * Added "-zt" option to trim 32k of trailing zeroes from Nikon 1
    J2 and J3 images.
  * Add ability to reset invalid rotation tag (from Moultrie
    game cameras)
- Use url for source
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="kbabioch@suse.com" date="1517832000">- Added CVE-2018-6612.patch: Fix of a heap-based buffer over-read
  (boo#1079349 CVE-2018-6612)</changelog>
  <changelog author="sbrabec@suse.com" date="1536926400">-  Integer overflow fixes (boo#1108480, CVE-2016-3822,
  CVE-2018-16554, CVE-2016-3822.patch, CVE-2018-16554.patch.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1540382400">- Renamed CVE-2018-16554.patch to CVE-2018-17088.patch, because
  it is in fact fix of boo#1108672
- Buffer overflow fix (boo#1108480) CVE-2018-16554.patch</changelog>
  <changelog author="Wang Jun &lt;jgwang@suse.com&gt;" date="1611316800">- Update to version 3.04
  * Apply a whole bunch of patches from Debian.
  * Spell check and fuzz test stuff from Debian, nothing useful to
    human users.
  * Add option to set exif date from date from another file.
  * Bug fixes relating to fuzz testing.
  * Fix bug where thumbnail replacement DID NOT WORK.
  * Fix bug when no orientation tag is present
  * Fix bug of not clearing exif information when processing images
    with an without exif data in one invocation.
  * Remove some unnecessary warnings with some types of GPS data
  * Remove multiple copies of the same type of section when deleting
    section types
  * Modify the patch CVE-2018-17088.patch because source code changed
- Remove these patches because of including upstream code
  * CVE-2018-6612.patch, CVE-2016-3822.patch, CVE-2018-16554.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1618833600">- version update to 3.06.0.1
  * lot of fuzztest fixes, e. g. CVE-2021-3496 [bsc#1184756]
- deleted patches
  - CVE-2018-17088.patch (upstreamed)</changelog>
  <changelog author="David Anes &lt;david.anes@suse.com&gt;" date="1666872000">- security fix [bsc#1204409, CVE-2022-41751]
  * arbitrary OS commands by placing them in a JPEG filename
  * Added patch jhead-CVE-2022-41751-1.patch
  * Added patch jhead-CVE-2022-41751-2.patch</changelog>
</package>
<package pkgid="bdab96307faae890771130aa5ea8163e99d5bf1f1742ce472ce1e0b2fe325951" name="jhead" arch="x86_64">
  <version epoch="0" ver="3.06.0.1" rel="bp154.2.3.1"/>
  <changelog author="toganm@opensuse.org" date="1332244800">- Updated to version 2.95
  * Handle very large unsigned rational numbers in exif header</changelog>
  <changelog author="toganm@opensuse.org" date="1341230400">- Update to version 2.96
  * Fix printing file info when -ft option is used
  * Do not skip readonle files with -st option</changelog>
  <changelog author="toganm@opensuse.org" date="1362916800">- Update to version 2.97
  * Add feature to show quality of jpeg, (by Andy Spiegel)
  * Fix crash on some corrupt files bug, clarify time adjustment
    syntax in help</changelog>
  <changelog author="mpluskal@suse.com" date="1430136000">- Update to version 3.00
  * Make max comment size 16000
  * Added "-zt" option to trim 32k of trailing zeroes from Nikon 1
    J2 and J3 images.
  * Add ability to reset invalid rotation tag (from Moultrie
    game cameras)
- Use url for source
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="kbabioch@suse.com" date="1517832000">- Added CVE-2018-6612.patch: Fix of a heap-based buffer over-read
  (boo#1079349 CVE-2018-6612)</changelog>
  <changelog author="sbrabec@suse.com" date="1536926400">-  Integer overflow fixes (boo#1108480, CVE-2016-3822,
  CVE-2018-16554, CVE-2016-3822.patch, CVE-2018-16554.patch.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1540382400">- Renamed CVE-2018-16554.patch to CVE-2018-17088.patch, because
  it is in fact fix of boo#1108672
- Buffer overflow fix (boo#1108480) CVE-2018-16554.patch</changelog>
  <changelog author="Wang Jun &lt;jgwang@suse.com&gt;" date="1611316800">- Update to version 3.04
  * Apply a whole bunch of patches from Debian.
  * Spell check and fuzz test stuff from Debian, nothing useful to
    human users.
  * Add option to set exif date from date from another file.
  * Bug fixes relating to fuzz testing.
  * Fix bug where thumbnail replacement DID NOT WORK.
  * Fix bug when no orientation tag is present
  * Fix bug of not clearing exif information when processing images
    with an without exif data in one invocation.
  * Remove some unnecessary warnings with some types of GPS data
  * Remove multiple copies of the same type of section when deleting
    section types
  * Modify the patch CVE-2018-17088.patch because source code changed
- Remove these patches because of including upstream code
  * CVE-2018-6612.patch, CVE-2016-3822.patch, CVE-2018-16554.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1618833600">- version update to 3.06.0.1
  * lot of fuzztest fixes, e. g. CVE-2021-3496 [bsc#1184756]
- deleted patches
  - CVE-2018-17088.patch (upstreamed)</changelog>
  <changelog author="David Anes &lt;david.anes@suse.com&gt;" date="1666872000">- security fix [bsc#1204409, CVE-2022-41751]
  * arbitrary OS commands by placing them in a JPEG filename
  * Added patch jhead-CVE-2022-41751-1.patch
  * Added patch jhead-CVE-2022-41751-2.patch</changelog>
</package>
<package pkgid="c448050c85ba222a875532639facb9799f2e2d3fdbda10a19a7c958fd2409902" name="jhead" arch="aarch64">
  <version epoch="0" ver="3.06.0.1" rel="bp154.2.6.1"/>
  <changelog author="toganm@opensuse.org" date="1341230400">- Update to version 2.96
  * Fix printing file info when -ft option is used
  * Do not skip readonle files with -st option</changelog>
  <changelog author="toganm@opensuse.org" date="1362916800">- Update to version 2.97
  * Add feature to show quality of jpeg, (by Andy Spiegel)
  * Fix crash on some corrupt files bug, clarify time adjustment
    syntax in help</changelog>
  <changelog author="mpluskal@suse.com" date="1430136000">- Update to version 3.00
  * Make max comment size 16000
  * Added "-zt" option to trim 32k of trailing zeroes from Nikon 1
    J2 and J3 images.
  * Add ability to reset invalid rotation tag (from Moultrie
    game cameras)
- Use url for source
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="kbabioch@suse.com" date="1517832000">- Added CVE-2018-6612.patch: Fix of a heap-based buffer over-read
  (boo#1079349 CVE-2018-6612)</changelog>
  <changelog author="sbrabec@suse.com" date="1536926400">-  Integer overflow fixes (boo#1108480, CVE-2016-3822,
  CVE-2018-16554, CVE-2016-3822.patch, CVE-2018-16554.patch.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1540382400">- Renamed CVE-2018-16554.patch to CVE-2018-17088.patch, because
  it is in fact fix of boo#1108672
- Buffer overflow fix (boo#1108480) CVE-2018-16554.patch</changelog>
  <changelog author="Wang Jun &lt;jgwang@suse.com&gt;" date="1611316800">- Update to version 3.04
  * Apply a whole bunch of patches from Debian.
  * Spell check and fuzz test stuff from Debian, nothing useful to
    human users.
  * Add option to set exif date from date from another file.
  * Bug fixes relating to fuzz testing.
  * Fix bug where thumbnail replacement DID NOT WORK.
  * Fix bug when no orientation tag is present
  * Fix bug of not clearing exif information when processing images
    with an without exif data in one invocation.
  * Remove some unnecessary warnings with some types of GPS data
  * Remove multiple copies of the same type of section when deleting
    section types
  * Modify the patch CVE-2018-17088.patch because source code changed
- Remove these patches because of including upstream code
  * CVE-2018-6612.patch, CVE-2016-3822.patch, CVE-2018-16554.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1618833600">- version update to 3.06.0.1
  * lot of fuzztest fixes, e. g. CVE-2021-3496 [bsc#1184756]
- deleted patches
  - CVE-2018-17088.patch (upstreamed)</changelog>
  <changelog author="David Anes &lt;david.anes@suse.com&gt;" date="1666872000">- security fix [bsc#1204409, CVE-2022-41751]
  * arbitrary OS commands by placing them in a JPEG filename
  * Added patch jhead-CVE-2022-41751-1.patch
  * Added patch jhead-CVE-2022-41751-2.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1667908800">- Added jhead-CVE-2021-34055.patch
  * Fix out of bounds write in ClearOrientation() due to unchecked error
  * [bsc#1205167]
  * CVE-2021-34055</changelog>
</package>
<package pkgid="ee435bb1385963eab6e9b100813fead49e3eb5b5c91683bd80ef6504895ab836" name="jhead" arch="i586">
  <version epoch="0" ver="3.06.0.1" rel="bp154.2.6.1"/>
  <changelog author="toganm@opensuse.org" date="1341230400">- Update to version 2.96
  * Fix printing file info when -ft option is used
  * Do not skip readonle files with -st option</changelog>
  <changelog author="toganm@opensuse.org" date="1362916800">- Update to version 2.97
  * Add feature to show quality of jpeg, (by Andy Spiegel)
  * Fix crash on some corrupt files bug, clarify time adjustment
    syntax in help</changelog>
  <changelog author="mpluskal@suse.com" date="1430136000">- Update to version 3.00
  * Make max comment size 16000
  * Added "-zt" option to trim 32k of trailing zeroes from Nikon 1
    J2 and J3 images.
  * Add ability to reset invalid rotation tag (from Moultrie
    game cameras)
- Use url for source
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="kbabioch@suse.com" date="1517832000">- Added CVE-2018-6612.patch: Fix of a heap-based buffer over-read
  (boo#1079349 CVE-2018-6612)</changelog>
  <changelog author="sbrabec@suse.com" date="1536926400">-  Integer overflow fixes (boo#1108480, CVE-2016-3822,
  CVE-2018-16554, CVE-2016-3822.patch, CVE-2018-16554.patch.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1540382400">- Renamed CVE-2018-16554.patch to CVE-2018-17088.patch, because
  it is in fact fix of boo#1108672
- Buffer overflow fix (boo#1108480) CVE-2018-16554.patch</changelog>
  <changelog author="Wang Jun &lt;jgwang@suse.com&gt;" date="1611316800">- Update to version 3.04
  * Apply a whole bunch of patches from Debian.
  * Spell check and fuzz test stuff from Debian, nothing useful to
    human users.
  * Add option to set exif date from date from another file.
  * Bug fixes relating to fuzz testing.
  * Fix bug where thumbnail replacement DID NOT WORK.
  * Fix bug when no orientation tag is present
  * Fix bug of not clearing exif information when processing images
    with an without exif data in one invocation.
  * Remove some unnecessary warnings with some types of GPS data
  * Remove multiple copies of the same type of section when deleting
    section types
  * Modify the patch CVE-2018-17088.patch because source code changed
- Remove these patches because of including upstream code
  * CVE-2018-6612.patch, CVE-2016-3822.patch, CVE-2018-16554.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1618833600">- version update to 3.06.0.1
  * lot of fuzztest fixes, e. g. CVE-2021-3496 [bsc#1184756]
- deleted patches
  - CVE-2018-17088.patch (upstreamed)</changelog>
  <changelog author="David Anes &lt;david.anes@suse.com&gt;" date="1666872000">- security fix [bsc#1204409, CVE-2022-41751]
  * arbitrary OS commands by placing them in a JPEG filename
  * Added patch jhead-CVE-2022-41751-1.patch
  * Added patch jhead-CVE-2022-41751-2.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1667908800">- Added jhead-CVE-2021-34055.patch
  * Fix out of bounds write in ClearOrientation() due to unchecked error
  * [bsc#1205167]
  * CVE-2021-34055</changelog>
</package>
<package pkgid="6b809726d26a5676b5811d2122c05bc170bf384a5782844cd122f9729407926d" name="jhead" arch="ppc64le">
  <version epoch="0" ver="3.06.0.1" rel="bp154.2.6.1"/>
  <changelog author="toganm@opensuse.org" date="1341230400">- Update to version 2.96
  * Fix printing file info when -ft option is used
  * Do not skip readonle files with -st option</changelog>
  <changelog author="toganm@opensuse.org" date="1362916800">- Update to version 2.97
  * Add feature to show quality of jpeg, (by Andy Spiegel)
  * Fix crash on some corrupt files bug, clarify time adjustment
    syntax in help</changelog>
  <changelog author="mpluskal@suse.com" date="1430136000">- Update to version 3.00
  * Make max comment size 16000
  * Added "-zt" option to trim 32k of trailing zeroes from Nikon 1
    J2 and J3 images.
  * Add ability to reset invalid rotation tag (from Moultrie
    game cameras)
- Use url for source
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="kbabioch@suse.com" date="1517832000">- Added CVE-2018-6612.patch: Fix of a heap-based buffer over-read
  (boo#1079349 CVE-2018-6612)</changelog>
  <changelog author="sbrabec@suse.com" date="1536926400">-  Integer overflow fixes (boo#1108480, CVE-2016-3822,
  CVE-2018-16554, CVE-2016-3822.patch, CVE-2018-16554.patch.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1540382400">- Renamed CVE-2018-16554.patch to CVE-2018-17088.patch, because
  it is in fact fix of boo#1108672
- Buffer overflow fix (boo#1108480) CVE-2018-16554.patch</changelog>
  <changelog author="Wang Jun &lt;jgwang@suse.com&gt;" date="1611316800">- Update to version 3.04
  * Apply a whole bunch of patches from Debian.
  * Spell check and fuzz test stuff from Debian, nothing useful to
    human users.
  * Add option to set exif date from date from another file.
  * Bug fixes relating to fuzz testing.
  * Fix bug where thumbnail replacement DID NOT WORK.
  * Fix bug when no orientation tag is present
  * Fix bug of not clearing exif information when processing images
    with an without exif data in one invocation.
  * Remove some unnecessary warnings with some types of GPS data
  * Remove multiple copies of the same type of section when deleting
    section types
  * Modify the patch CVE-2018-17088.patch because source code changed
- Remove these patches because of including upstream code
  * CVE-2018-6612.patch, CVE-2016-3822.patch, CVE-2018-16554.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1618833600">- version update to 3.06.0.1
  * lot of fuzztest fixes, e. g. CVE-2021-3496 [bsc#1184756]
- deleted patches
  - CVE-2018-17088.patch (upstreamed)</changelog>
  <changelog author="David Anes &lt;david.anes@suse.com&gt;" date="1666872000">- security fix [bsc#1204409, CVE-2022-41751]
  * arbitrary OS commands by placing them in a JPEG filename
  * Added patch jhead-CVE-2022-41751-1.patch
  * Added patch jhead-CVE-2022-41751-2.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1667908800">- Added jhead-CVE-2021-34055.patch
  * Fix out of bounds write in ClearOrientation() due to unchecked error
  * [bsc#1205167]
  * CVE-2021-34055</changelog>
</package>
<package pkgid="12f8d10ba7cf5dd9777d7d7e4d29b1a5a35bd5613f05dbe616aeec64c2b2bb9c" name="jhead" arch="s390x">
  <version epoch="0" ver="3.06.0.1" rel="bp154.2.6.1"/>
  <changelog author="toganm@opensuse.org" date="1341230400">- Update to version 2.96
  * Fix printing file info when -ft option is used
  * Do not skip readonle files with -st option</changelog>
  <changelog author="toganm@opensuse.org" date="1362916800">- Update to version 2.97
  * Add feature to show quality of jpeg, (by Andy Spiegel)
  * Fix crash on some corrupt files bug, clarify time adjustment
    syntax in help</changelog>
  <changelog author="mpluskal@suse.com" date="1430136000">- Update to version 3.00
  * Make max comment size 16000
  * Added "-zt" option to trim 32k of trailing zeroes from Nikon 1
    J2 and J3 images.
  * Add ability to reset invalid rotation tag (from Moultrie
    game cameras)
- Use url for source
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="kbabioch@suse.com" date="1517832000">- Added CVE-2018-6612.patch: Fix of a heap-based buffer over-read
  (boo#1079349 CVE-2018-6612)</changelog>
  <changelog author="sbrabec@suse.com" date="1536926400">-  Integer overflow fixes (boo#1108480, CVE-2016-3822,
  CVE-2018-16554, CVE-2016-3822.patch, CVE-2018-16554.patch.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1540382400">- Renamed CVE-2018-16554.patch to CVE-2018-17088.patch, because
  it is in fact fix of boo#1108672
- Buffer overflow fix (boo#1108480) CVE-2018-16554.patch</changelog>
  <changelog author="Wang Jun &lt;jgwang@suse.com&gt;" date="1611316800">- Update to version 3.04
  * Apply a whole bunch of patches from Debian.
  * Spell check and fuzz test stuff from Debian, nothing useful to
    human users.
  * Add option to set exif date from date from another file.
  * Bug fixes relating to fuzz testing.
  * Fix bug where thumbnail replacement DID NOT WORK.
  * Fix bug when no orientation tag is present
  * Fix bug of not clearing exif information when processing images
    with an without exif data in one invocation.
  * Remove some unnecessary warnings with some types of GPS data
  * Remove multiple copies of the same type of section when deleting
    section types
  * Modify the patch CVE-2018-17088.patch because source code changed
- Remove these patches because of including upstream code
  * CVE-2018-6612.patch, CVE-2016-3822.patch, CVE-2018-16554.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1618833600">- version update to 3.06.0.1
  * lot of fuzztest fixes, e. g. CVE-2021-3496 [bsc#1184756]
- deleted patches
  - CVE-2018-17088.patch (upstreamed)</changelog>
  <changelog author="David Anes &lt;david.anes@suse.com&gt;" date="1666872000">- security fix [bsc#1204409, CVE-2022-41751]
  * arbitrary OS commands by placing them in a JPEG filename
  * Added patch jhead-CVE-2022-41751-1.patch
  * Added patch jhead-CVE-2022-41751-2.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1667908800">- Added jhead-CVE-2021-34055.patch
  * Fix out of bounds write in ClearOrientation() due to unchecked error
  * [bsc#1205167]
  * CVE-2021-34055</changelog>
</package>
<package pkgid="39c1e73c40ccdf02102f91925d12b3e83ecb296e5acc79aadd7aeb000fceaf70" name="jhead" arch="src">
  <version epoch="0" ver="3.06.0.1" rel="bp154.2.6.1"/>
  <changelog author="prusnak@suse.cz" date="1166270400">- fixed comparison with string literal (strcmp.patch) [#226477]</changelog>
  <changelog author="sbrabec@suse.cz" date="1186401600">- Updated to version 2.7:
  * Remove maximum jpeg sections limit
  * Added -ds option
  * On clearing rotation, clear the image and the optional
    thumbnail rotation tags.
  * Add -mkexif option to make a new exif header.</changelog>
  <changelog author="sbrabec@suse.cz" date="1195214400">- Updated to version 2.8:
  * Added IPTC handling
  * Added -q option
  * Fix handling of corrupted GPS directory.
  * Extract focus distance from canon makernote.
  * Extract subject range (pentax and fuji cameras)</changelog>
  <changelog author="sbrabec@suse.cz" date="1207569600">- Updated to version 2.82:
  * Make jhead aware of XMP data and not delete it.
  * Improve IPTC handling a little.
  * Change how date is encoded with -mkexif section to make it more
    compatible.</changelog>
  <changelog author="sbrabec@suse.cz" date="1224158400">- Updated to version 2.84:
  * Decode more exif tags for '-v' mode.
  * Fix a bunch of potential string overflows (bnc#435979,
    CVE-2008-4575)
  * Fix bug where IPTC sction was not deleted by -purejpg
  * Fix GPS altitude decode bug</changelog>
  <changelog author="sbrabec@suse.cz" date="1231156800">- Fixed arbitrary command vulnerability in DoCommand (bnc#435979,
  CVE-2008-4641).
- Fixed dependencies.</changelog>
  <changelog author="sbrabec@suse.cz" date="1249473600">- Updated to version 2.87:
  * Added the ability to move files with the -n option.
  * Minor fixes.</changelog>
  <changelog author="toganm@opensuse.org" date="1331812800">- Updated to version 2.93: For details please read changes.txt
  * Fixed bug in jhead -cmd that caused metatdata to be deleted.</changelog>
  <changelog author="toganm@opensuse.org" date="1331899200">- Fixed file-contains-date-and-time rpmlint warning. Date is set as
  last date in the changes file.</changelog>
  <changelog author="toganm@opensuse.org" date="1332244800">- Updated to version 2.95
  * Handle very large unsigned rational numbers in exif header</changelog>
  <changelog author="toganm@opensuse.org" date="1341230400">- Update to version 2.96
  * Fix printing file info when -ft option is used
  * Do not skip readonle files with -st option</changelog>
  <changelog author="toganm@opensuse.org" date="1362916800">- Update to version 2.97
  * Add feature to show quality of jpeg, (by Andy Spiegel)
  * Fix crash on some corrupt files bug, clarify time adjustment
    syntax in help</changelog>
  <changelog author="mpluskal@suse.com" date="1430136000">- Update to version 3.00
  * Make max comment size 16000
  * Added "-zt" option to trim 32k of trailing zeroes from Nikon 1
    J2 and J3 images.
  * Add ability to reset invalid rotation tag (from Moultrie
    game cameras)
- Use url for source
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="kbabioch@suse.com" date="1517832000">- Added CVE-2018-6612.patch: Fix of a heap-based buffer over-read
  (boo#1079349 CVE-2018-6612)</changelog>
  <changelog author="sbrabec@suse.com" date="1536926400">-  Integer overflow fixes (boo#1108480, CVE-2016-3822,
  CVE-2018-16554, CVE-2016-3822.patch, CVE-2018-16554.patch.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1540382400">- Renamed CVE-2018-16554.patch to CVE-2018-17088.patch, because
  it is in fact fix of boo#1108672
- Buffer overflow fix (boo#1108480) CVE-2018-16554.patch</changelog>
  <changelog author="Wang Jun &lt;jgwang@suse.com&gt;" date="1611316800">- Update to version 3.04
  * Apply a whole bunch of patches from Debian.
  * Spell check and fuzz test stuff from Debian, nothing useful to
    human users.
  * Add option to set exif date from date from another file.
  * Bug fixes relating to fuzz testing.
  * Fix bug where thumbnail replacement DID NOT WORK.
  * Fix bug when no orientation tag is present
  * Fix bug of not clearing exif information when processing images
    with an without exif data in one invocation.
  * Remove some unnecessary warnings with some types of GPS data
  * Remove multiple copies of the same type of section when deleting
    section types
  * Modify the patch CVE-2018-17088.patch because source code changed
- Remove these patches because of including upstream code
  * CVE-2018-6612.patch, CVE-2016-3822.patch, CVE-2018-16554.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1618833600">- version update to 3.06.0.1
  * lot of fuzztest fixes, e. g. CVE-2021-3496 [bsc#1184756]
- deleted patches
  - CVE-2018-17088.patch (upstreamed)</changelog>
  <changelog author="David Anes &lt;david.anes@suse.com&gt;" date="1666872000">- security fix [bsc#1204409, CVE-2022-41751]
  * arbitrary OS commands by placing them in a JPEG filename
  * Added patch jhead-CVE-2022-41751-1.patch
  * Added patch jhead-CVE-2022-41751-2.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1667908800">- Added jhead-CVE-2021-34055.patch
  * Fix out of bounds write in ClearOrientation() due to unchecked error
  * [bsc#1205167]
  * CVE-2021-34055</changelog>
</package>
<package pkgid="14671034e3755326ca1a88db4d106881352d1835ad010bc6604d1b0dccd46327" name="jhead" arch="x86_64">
  <version epoch="0" ver="3.06.0.1" rel="bp154.2.6.1"/>
  <changelog author="toganm@opensuse.org" date="1341230400">- Update to version 2.96
  * Fix printing file info when -ft option is used
  * Do not skip readonle files with -st option</changelog>
  <changelog author="toganm@opensuse.org" date="1362916800">- Update to version 2.97
  * Add feature to show quality of jpeg, (by Andy Spiegel)
  * Fix crash on some corrupt files bug, clarify time adjustment
    syntax in help</changelog>
  <changelog author="mpluskal@suse.com" date="1430136000">- Update to version 3.00
  * Make max comment size 16000
  * Added "-zt" option to trim 32k of trailing zeroes from Nikon 1
    J2 and J3 images.
  * Add ability to reset invalid rotation tag (from Moultrie
    game cameras)
- Use url for source
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="kbabioch@suse.com" date="1517832000">- Added CVE-2018-6612.patch: Fix of a heap-based buffer over-read
  (boo#1079349 CVE-2018-6612)</changelog>
  <changelog author="sbrabec@suse.com" date="1536926400">-  Integer overflow fixes (boo#1108480, CVE-2016-3822,
  CVE-2018-16554, CVE-2016-3822.patch, CVE-2018-16554.patch.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1540382400">- Renamed CVE-2018-16554.patch to CVE-2018-17088.patch, because
  it is in fact fix of boo#1108672
- Buffer overflow fix (boo#1108480) CVE-2018-16554.patch</changelog>
  <changelog author="Wang Jun &lt;jgwang@suse.com&gt;" date="1611316800">- Update to version 3.04
  * Apply a whole bunch of patches from Debian.
  * Spell check and fuzz test stuff from Debian, nothing useful to
    human users.
  * Add option to set exif date from date from another file.
  * Bug fixes relating to fuzz testing.
  * Fix bug where thumbnail replacement DID NOT WORK.
  * Fix bug when no orientation tag is present
  * Fix bug of not clearing exif information when processing images
    with an without exif data in one invocation.
  * Remove some unnecessary warnings with some types of GPS data
  * Remove multiple copies of the same type of section when deleting
    section types
  * Modify the patch CVE-2018-17088.patch because source code changed
- Remove these patches because of including upstream code
  * CVE-2018-6612.patch, CVE-2016-3822.patch, CVE-2018-16554.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1618833600">- version update to 3.06.0.1
  * lot of fuzztest fixes, e. g. CVE-2021-3496 [bsc#1184756]
- deleted patches
  - CVE-2018-17088.patch (upstreamed)</changelog>
  <changelog author="David Anes &lt;david.anes@suse.com&gt;" date="1666872000">- security fix [bsc#1204409, CVE-2022-41751]
  * arbitrary OS commands by placing them in a JPEG filename
  * Added patch jhead-CVE-2022-41751-1.patch
  * Added patch jhead-CVE-2022-41751-2.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1667908800">- Added jhead-CVE-2021-34055.patch
  * Fix out of bounds write in ClearOrientation() due to unchecked error
  * [bsc#1205167]
  * CVE-2021-34055</changelog>
</package>
<package pkgid="91d24632b72f0a11ed1b83e3b9ec1a0e3ab816e4577ec1dc9806fc78a20a1506" name="jhead" arch="aarch64">
  <version epoch="0" ver="3.06.0.1" rel="bp154.2.9.1"/>
  <changelog author="toganm@opensuse.org" date="1362916800">- Update to version 2.97
  * Add feature to show quality of jpeg, (by Andy Spiegel)
  * Fix crash on some corrupt files bug, clarify time adjustment
    syntax in help</changelog>
  <changelog author="mpluskal@suse.com" date="1430136000">- Update to version 3.00
  * Make max comment size 16000
  * Added "-zt" option to trim 32k of trailing zeroes from Nikon 1
    J2 and J3 images.
  * Add ability to reset invalid rotation tag (from Moultrie
    game cameras)
- Use url for source
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="kbabioch@suse.com" date="1517832000">- Added CVE-2018-6612.patch: Fix of a heap-based buffer over-read
  (boo#1079349 CVE-2018-6612)</changelog>
  <changelog author="sbrabec@suse.com" date="1536926400">-  Integer overflow fixes (boo#1108480, CVE-2016-3822,
  CVE-2018-16554, CVE-2016-3822.patch, CVE-2018-16554.patch.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1540382400">- Renamed CVE-2018-16554.patch to CVE-2018-17088.patch, because
  it is in fact fix of boo#1108672
- Buffer overflow fix (boo#1108480) CVE-2018-16554.patch</changelog>
  <changelog author="Wang Jun &lt;jgwang@suse.com&gt;" date="1611316800">- Update to version 3.04
  * Apply a whole bunch of patches from Debian.
  * Spell check and fuzz test stuff from Debian, nothing useful to
    human users.
  * Add option to set exif date from date from another file.
  * Bug fixes relating to fuzz testing.
  * Fix bug where thumbnail replacement DID NOT WORK.
  * Fix bug when no orientation tag is present
  * Fix bug of not clearing exif information when processing images
    with an without exif data in one invocation.
  * Remove some unnecessary warnings with some types of GPS data
  * Remove multiple copies of the same type of section when deleting
    section types
  * Modify the patch CVE-2018-17088.patch because source code changed
- Remove these patches because of including upstream code
  * CVE-2018-6612.patch, CVE-2016-3822.patch, CVE-2018-16554.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1618833600">- version update to 3.06.0.1
  * lot of fuzztest fixes, e. g. CVE-2021-3496 [bsc#1184756]
- deleted patches
  - CVE-2018-17088.patch (upstreamed)</changelog>
  <changelog author="David Anes &lt;david.anes@suse.com&gt;" date="1666872000">- security fix [bsc#1204409, CVE-2022-41751]
  * arbitrary OS commands by placing them in a JPEG filename
  * Added patch jhead-CVE-2022-41751-1.patch
  * Added patch jhead-CVE-2022-41751-2.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1667908800">- Added jhead-CVE-2021-34055.patch
  * Fix out of bounds write in ClearOrientation() due to unchecked error
  * [bsc#1205167]
  * CVE-2021-34055</changelog>
  <changelog author="pgajdos@suse.com" date="1676030400">- added patches
  fix [bsc#1207150]
  https://github.com/Matthias-Wandel/jhead/commit/2a237d866581b3774ebe63d6c312e76459bd0866
  + jhead-CVE-2022-41751-3.patch</changelog>
</package>
<package pkgid="f92d92751fe60cac56734a0e6b25bc33e68b96530b9368109719e1b4f2b1411e" name="jhead" arch="i586">
  <version epoch="0" ver="3.06.0.1" rel="bp154.2.9.1"/>
  <changelog author="toganm@opensuse.org" date="1362916800">- Update to version 2.97
  * Add feature to show quality of jpeg, (by Andy Spiegel)
  * Fix crash on some corrupt files bug, clarify time adjustment
    syntax in help</changelog>
  <changelog author="mpluskal@suse.com" date="1430136000">- Update to version 3.00
  * Make max comment size 16000
  * Added "-zt" option to trim 32k of trailing zeroes from Nikon 1
    J2 and J3 images.
  * Add ability to reset invalid rotation tag (from Moultrie
    game cameras)
- Use url for source
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="kbabioch@suse.com" date="1517832000">- Added CVE-2018-6612.patch: Fix of a heap-based buffer over-read
  (boo#1079349 CVE-2018-6612)</changelog>
  <changelog author="sbrabec@suse.com" date="1536926400">-  Integer overflow fixes (boo#1108480, CVE-2016-3822,
  CVE-2018-16554, CVE-2016-3822.patch, CVE-2018-16554.patch.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1540382400">- Renamed CVE-2018-16554.patch to CVE-2018-17088.patch, because
  it is in fact fix of boo#1108672
- Buffer overflow fix (boo#1108480) CVE-2018-16554.patch</changelog>
  <changelog author="Wang Jun &lt;jgwang@suse.com&gt;" date="1611316800">- Update to version 3.04
  * Apply a whole bunch of patches from Debian.
  * Spell check and fuzz test stuff from Debian, nothing useful to
    human users.
  * Add option to set exif date from date from another file.
  * Bug fixes relating to fuzz testing.
  * Fix bug where thumbnail replacement DID NOT WORK.
  * Fix bug when no orientation tag is present
  * Fix bug of not clearing exif information when processing images
    with an without exif data in one invocation.
  * Remove some unnecessary warnings with some types of GPS data
  * Remove multiple copies of the same type of section when deleting
    section types
  * Modify the patch CVE-2018-17088.patch because source code changed
- Remove these patches because of including upstream code
  * CVE-2018-6612.patch, CVE-2016-3822.patch, CVE-2018-16554.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1618833600">- version update to 3.06.0.1
  * lot of fuzztest fixes, e. g. CVE-2021-3496 [bsc#1184756]
- deleted patches
  - CVE-2018-17088.patch (upstreamed)</changelog>
  <changelog author="David Anes &lt;david.anes@suse.com&gt;" date="1666872000">- security fix [bsc#1204409, CVE-2022-41751]
  * arbitrary OS commands by placing them in a JPEG filename
  * Added patch jhead-CVE-2022-41751-1.patch
  * Added patch jhead-CVE-2022-41751-2.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1667908800">- Added jhead-CVE-2021-34055.patch
  * Fix out of bounds write in ClearOrientation() due to unchecked error
  * [bsc#1205167]
  * CVE-2021-34055</changelog>
  <changelog author="pgajdos@suse.com" date="1676030400">- added patches
  fix [bsc#1207150]
  https://github.com/Matthias-Wandel/jhead/commit/2a237d866581b3774ebe63d6c312e76459bd0866
  + jhead-CVE-2022-41751-3.patch</changelog>
</package>
<package pkgid="793e44a82c8dca973ca2e12d1f81667949cc0b3d8f2dedb2bf206ec6a99da7ba" name="jhead" arch="ppc64le">
  <version epoch="0" ver="3.06.0.1" rel="bp154.2.9.1"/>
  <changelog author="toganm@opensuse.org" date="1362916800">- Update to version 2.97
  * Add feature to show quality of jpeg, (by Andy Spiegel)
  * Fix crash on some corrupt files bug, clarify time adjustment
    syntax in help</changelog>
  <changelog author="mpluskal@suse.com" date="1430136000">- Update to version 3.00
  * Make max comment size 16000
  * Added "-zt" option to trim 32k of trailing zeroes from Nikon 1
    J2 and J3 images.
  * Add ability to reset invalid rotation tag (from Moultrie
    game cameras)
- Use url for source
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="kbabioch@suse.com" date="1517832000">- Added CVE-2018-6612.patch: Fix of a heap-based buffer over-read
  (boo#1079349 CVE-2018-6612)</changelog>
  <changelog author="sbrabec@suse.com" date="1536926400">-  Integer overflow fixes (boo#1108480, CVE-2016-3822,
  CVE-2018-16554, CVE-2016-3822.patch, CVE-2018-16554.patch.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1540382400">- Renamed CVE-2018-16554.patch to CVE-2018-17088.patch, because
  it is in fact fix of boo#1108672
- Buffer overflow fix (boo#1108480) CVE-2018-16554.patch</changelog>
  <changelog author="Wang Jun &lt;jgwang@suse.com&gt;" date="1611316800">- Update to version 3.04
  * Apply a whole bunch of patches from Debian.
  * Spell check and fuzz test stuff from Debian, nothing useful to
    human users.
  * Add option to set exif date from date from another file.
  * Bug fixes relating to fuzz testing.
  * Fix bug where thumbnail replacement DID NOT WORK.
  * Fix bug when no orientation tag is present
  * Fix bug of not clearing exif information when processing images
    with an without exif data in one invocation.
  * Remove some unnecessary warnings with some types of GPS data
  * Remove multiple copies of the same type of section when deleting
    section types
  * Modify the patch CVE-2018-17088.patch because source code changed
- Remove these patches because of including upstream code
  * CVE-2018-6612.patch, CVE-2016-3822.patch, CVE-2018-16554.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1618833600">- version update to 3.06.0.1
  * lot of fuzztest fixes, e. g. CVE-2021-3496 [bsc#1184756]
- deleted patches
  - CVE-2018-17088.patch (upstreamed)</changelog>
  <changelog author="David Anes &lt;david.anes@suse.com&gt;" date="1666872000">- security fix [bsc#1204409, CVE-2022-41751]
  * arbitrary OS commands by placing them in a JPEG filename
  * Added patch jhead-CVE-2022-41751-1.patch
  * Added patch jhead-CVE-2022-41751-2.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1667908800">- Added jhead-CVE-2021-34055.patch
  * Fix out of bounds write in ClearOrientation() due to unchecked error
  * [bsc#1205167]
  * CVE-2021-34055</changelog>
  <changelog author="pgajdos@suse.com" date="1676030400">- added patches
  fix [bsc#1207150]
  https://github.com/Matthias-Wandel/jhead/commit/2a237d866581b3774ebe63d6c312e76459bd0866
  + jhead-CVE-2022-41751-3.patch</changelog>
</package>
<package pkgid="4e2daebae92d0992893cf4a4af852dfd703cb2c897a8fa7fca7beb19f22a83a1" name="jhead" arch="s390x">
  <version epoch="0" ver="3.06.0.1" rel="bp154.2.9.1"/>
  <changelog author="toganm@opensuse.org" date="1362916800">- Update to version 2.97
  * Add feature to show quality of jpeg, (by Andy Spiegel)
  * Fix crash on some corrupt files bug, clarify time adjustment
    syntax in help</changelog>
  <changelog author="mpluskal@suse.com" date="1430136000">- Update to version 3.00
  * Make max comment size 16000
  * Added "-zt" option to trim 32k of trailing zeroes from Nikon 1
    J2 and J3 images.
  * Add ability to reset invalid rotation tag (from Moultrie
    game cameras)
- Use url for source
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="kbabioch@suse.com" date="1517832000">- Added CVE-2018-6612.patch: Fix of a heap-based buffer over-read
  (boo#1079349 CVE-2018-6612)</changelog>
  <changelog author="sbrabec@suse.com" date="1536926400">-  Integer overflow fixes (boo#1108480, CVE-2016-3822,
  CVE-2018-16554, CVE-2016-3822.patch, CVE-2018-16554.patch.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1540382400">- Renamed CVE-2018-16554.patch to CVE-2018-17088.patch, because
  it is in fact fix of boo#1108672
- Buffer overflow fix (boo#1108480) CVE-2018-16554.patch</changelog>
  <changelog author="Wang Jun &lt;jgwang@suse.com&gt;" date="1611316800">- Update to version 3.04
  * Apply a whole bunch of patches from Debian.
  * Spell check and fuzz test stuff from Debian, nothing useful to
    human users.
  * Add option to set exif date from date from another file.
  * Bug fixes relating to fuzz testing.
  * Fix bug where thumbnail replacement DID NOT WORK.
  * Fix bug when no orientation tag is present
  * Fix bug of not clearing exif information when processing images
    with an without exif data in one invocation.
  * Remove some unnecessary warnings with some types of GPS data
  * Remove multiple copies of the same type of section when deleting
    section types
  * Modify the patch CVE-2018-17088.patch because source code changed
- Remove these patches because of including upstream code
  * CVE-2018-6612.patch, CVE-2016-3822.patch, CVE-2018-16554.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1618833600">- version update to 3.06.0.1
  * lot of fuzztest fixes, e. g. CVE-2021-3496 [bsc#1184756]
- deleted patches
  - CVE-2018-17088.patch (upstreamed)</changelog>
  <changelog author="David Anes &lt;david.anes@suse.com&gt;" date="1666872000">- security fix [bsc#1204409, CVE-2022-41751]
  * arbitrary OS commands by placing them in a JPEG filename
  * Added patch jhead-CVE-2022-41751-1.patch
  * Added patch jhead-CVE-2022-41751-2.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1667908800">- Added jhead-CVE-2021-34055.patch
  * Fix out of bounds write in ClearOrientation() due to unchecked error
  * [bsc#1205167]
  * CVE-2021-34055</changelog>
  <changelog author="pgajdos@suse.com" date="1676030400">- added patches
  fix [bsc#1207150]
  https://github.com/Matthias-Wandel/jhead/commit/2a237d866581b3774ebe63d6c312e76459bd0866
  + jhead-CVE-2022-41751-3.patch</changelog>
</package>
<package pkgid="8dcf58ed3cdb9b62bcf59ce17b16e282382ea0764e73aeeff9c993e11fb33303" name="jhead" arch="src">
  <version epoch="0" ver="3.06.0.1" rel="bp154.2.9.1"/>
  <changelog author="sbrabec@suse.cz" date="1186401600">- Updated to version 2.7:
  * Remove maximum jpeg sections limit
  * Added -ds option
  * On clearing rotation, clear the image and the optional
    thumbnail rotation tags.
  * Add -mkexif option to make a new exif header.</changelog>
  <changelog author="sbrabec@suse.cz" date="1195214400">- Updated to version 2.8:
  * Added IPTC handling
  * Added -q option
  * Fix handling of corrupted GPS directory.
  * Extract focus distance from canon makernote.
  * Extract subject range (pentax and fuji cameras)</changelog>
  <changelog author="sbrabec@suse.cz" date="1207569600">- Updated to version 2.82:
  * Make jhead aware of XMP data and not delete it.
  * Improve IPTC handling a little.
  * Change how date is encoded with -mkexif section to make it more
    compatible.</changelog>
  <changelog author="sbrabec@suse.cz" date="1224158400">- Updated to version 2.84:
  * Decode more exif tags for '-v' mode.
  * Fix a bunch of potential string overflows (bnc#435979,
    CVE-2008-4575)
  * Fix bug where IPTC sction was not deleted by -purejpg
  * Fix GPS altitude decode bug</changelog>
  <changelog author="sbrabec@suse.cz" date="1231156800">- Fixed arbitrary command vulnerability in DoCommand (bnc#435979,
  CVE-2008-4641).
- Fixed dependencies.</changelog>
  <changelog author="sbrabec@suse.cz" date="1249473600">- Updated to version 2.87:
  * Added the ability to move files with the -n option.
  * Minor fixes.</changelog>
  <changelog author="toganm@opensuse.org" date="1331812800">- Updated to version 2.93: For details please read changes.txt
  * Fixed bug in jhead -cmd that caused metatdata to be deleted.</changelog>
  <changelog author="toganm@opensuse.org" date="1331899200">- Fixed file-contains-date-and-time rpmlint warning. Date is set as
  last date in the changes file.</changelog>
  <changelog author="toganm@opensuse.org" date="1332244800">- Updated to version 2.95
  * Handle very large unsigned rational numbers in exif header</changelog>
  <changelog author="toganm@opensuse.org" date="1341230400">- Update to version 2.96
  * Fix printing file info when -ft option is used
  * Do not skip readonle files with -st option</changelog>
  <changelog author="toganm@opensuse.org" date="1362916800">- Update to version 2.97
  * Add feature to show quality of jpeg, (by Andy Spiegel)
  * Fix crash on some corrupt files bug, clarify time adjustment
    syntax in help</changelog>
  <changelog author="mpluskal@suse.com" date="1430136000">- Update to version 3.00
  * Make max comment size 16000
  * Added "-zt" option to trim 32k of trailing zeroes from Nikon 1
    J2 and J3 images.
  * Add ability to reset invalid rotation tag (from Moultrie
    game cameras)
- Use url for source
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="kbabioch@suse.com" date="1517832000">- Added CVE-2018-6612.patch: Fix of a heap-based buffer over-read
  (boo#1079349 CVE-2018-6612)</changelog>
  <changelog author="sbrabec@suse.com" date="1536926400">-  Integer overflow fixes (boo#1108480, CVE-2016-3822,
  CVE-2018-16554, CVE-2016-3822.patch, CVE-2018-16554.patch.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1540382400">- Renamed CVE-2018-16554.patch to CVE-2018-17088.patch, because
  it is in fact fix of boo#1108672
- Buffer overflow fix (boo#1108480) CVE-2018-16554.patch</changelog>
  <changelog author="Wang Jun &lt;jgwang@suse.com&gt;" date="1611316800">- Update to version 3.04
  * Apply a whole bunch of patches from Debian.
  * Spell check and fuzz test stuff from Debian, nothing useful to
    human users.
  * Add option to set exif date from date from another file.
  * Bug fixes relating to fuzz testing.
  * Fix bug where thumbnail replacement DID NOT WORK.
  * Fix bug when no orientation tag is present
  * Fix bug of not clearing exif information when processing images
    with an without exif data in one invocation.
  * Remove some unnecessary warnings with some types of GPS data
  * Remove multiple copies of the same type of section when deleting
    section types
  * Modify the patch CVE-2018-17088.patch because source code changed
- Remove these patches because of including upstream code
  * CVE-2018-6612.patch, CVE-2016-3822.patch, CVE-2018-16554.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1618833600">- version update to 3.06.0.1
  * lot of fuzztest fixes, e. g. CVE-2021-3496 [bsc#1184756]
- deleted patches
  - CVE-2018-17088.patch (upstreamed)</changelog>
  <changelog author="David Anes &lt;david.anes@suse.com&gt;" date="1666872000">- security fix [bsc#1204409, CVE-2022-41751]
  * arbitrary OS commands by placing them in a JPEG filename
  * Added patch jhead-CVE-2022-41751-1.patch
  * Added patch jhead-CVE-2022-41751-2.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1667908800">- Added jhead-CVE-2021-34055.patch
  * Fix out of bounds write in ClearOrientation() due to unchecked error
  * [bsc#1205167]
  * CVE-2021-34055</changelog>
  <changelog author="pgajdos@suse.com" date="1676030400">- added patches
  fix [bsc#1207150]
  https://github.com/Matthias-Wandel/jhead/commit/2a237d866581b3774ebe63d6c312e76459bd0866
  + jhead-CVE-2022-41751-3.patch</changelog>
</package>
<package pkgid="40c29ab9bdebe7ddb639cc1ef488a2255acedeffe782f9950c6d2294b11d5929" name="jhead" arch="x86_64">
  <version epoch="0" ver="3.06.0.1" rel="bp154.2.9.1"/>
  <changelog author="toganm@opensuse.org" date="1362916800">- Update to version 2.97
  * Add feature to show quality of jpeg, (by Andy Spiegel)
  * Fix crash on some corrupt files bug, clarify time adjustment
    syntax in help</changelog>
  <changelog author="mpluskal@suse.com" date="1430136000">- Update to version 3.00
  * Make max comment size 16000
  * Added "-zt" option to trim 32k of trailing zeroes from Nikon 1
    J2 and J3 images.
  * Add ability to reset invalid rotation tag (from Moultrie
    game cameras)
- Use url for source
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="kbabioch@suse.com" date="1517832000">- Added CVE-2018-6612.patch: Fix of a heap-based buffer over-read
  (boo#1079349 CVE-2018-6612)</changelog>
  <changelog author="sbrabec@suse.com" date="1536926400">-  Integer overflow fixes (boo#1108480, CVE-2016-3822,
  CVE-2018-16554, CVE-2016-3822.patch, CVE-2018-16554.patch.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1540382400">- Renamed CVE-2018-16554.patch to CVE-2018-17088.patch, because
  it is in fact fix of boo#1108672
- Buffer overflow fix (boo#1108480) CVE-2018-16554.patch</changelog>
  <changelog author="Wang Jun &lt;jgwang@suse.com&gt;" date="1611316800">- Update to version 3.04
  * Apply a whole bunch of patches from Debian.
  * Spell check and fuzz test stuff from Debian, nothing useful to
    human users.
  * Add option to set exif date from date from another file.
  * Bug fixes relating to fuzz testing.
  * Fix bug where thumbnail replacement DID NOT WORK.
  * Fix bug when no orientation tag is present
  * Fix bug of not clearing exif information when processing images
    with an without exif data in one invocation.
  * Remove some unnecessary warnings with some types of GPS data
  * Remove multiple copies of the same type of section when deleting
    section types
  * Modify the patch CVE-2018-17088.patch because source code changed
- Remove these patches because of including upstream code
  * CVE-2018-6612.patch, CVE-2016-3822.patch, CVE-2018-16554.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1618833600">- version update to 3.06.0.1
  * lot of fuzztest fixes, e. g. CVE-2021-3496 [bsc#1184756]
- deleted patches
  - CVE-2018-17088.patch (upstreamed)</changelog>
  <changelog author="David Anes &lt;david.anes@suse.com&gt;" date="1666872000">- security fix [bsc#1204409, CVE-2022-41751]
  * arbitrary OS commands by placing them in a JPEG filename
  * Added patch jhead-CVE-2022-41751-1.patch
  * Added patch jhead-CVE-2022-41751-2.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1667908800">- Added jhead-CVE-2021-34055.patch
  * Fix out of bounds write in ClearOrientation() due to unchecked error
  * [bsc#1205167]
  * CVE-2021-34055</changelog>
  <changelog author="pgajdos@suse.com" date="1676030400">- added patches
  fix [bsc#1207150]
  https://github.com/Matthias-Wandel/jhead/commit/2a237d866581b3774ebe63d6c312e76459bd0866
  + jhead-CVE-2022-41751-3.patch</changelog>
</package>
<package pkgid="63424fc7209bf9bb03b033c41c726f04610b51517986b691ee3eab8c787019db" name="jupyter-jupyterlab" arch="noarch">
  <version epoch="0" ver="2.2.10" rel="bp154.2.3.1"/>
  <changelog author="toddrme2178@gmail.com" date="1524139200">- Update to version 0.32.0
  * Better handling of a corrupted or invalid state database ([#3619](https://github.com/jupyterlab/jupyterlab/issues/3619), [#3622](https://github.com/jupyterlab/jupyterlab/issues/3622), [#3687](https://github.com/jupyterlab/jupyterlab/issues/3687), [#4114](https://github.com/jupyterlab/jupyterlab/issues/4114)).
  * Fixing file dirty status indicator ([#3652](https://github.com/jupyterlab/jupyterlab/issues/3652)).
  * New option for whether to autosave documents ([#3734](https://github.com/jupyterlab/jupyterlab/issues/3734)).
  * More commands in the notebook context menu ([#3770](https://github.com/jupyterlab/jupyterlab/issues/3770), [#3909](https://github.com/jupyterlab/jupyterlab/issues/3909))
  * Defensively checking for completion metadata from kernels ([#3888](https://github.com/jupyterlab/jupyterlab/issues/3888))
  * New "Shutdown all" button  in the Running panel ([#3764](https://github.com/jupyterlab/jupyterlab/issues/3764))
  * Performance improvements wherein non-focused documents poll the server less ([#3931](https://github.com/jupyterlab/jupyterlab/issues/3931))
  * Changing the keyboard shortcut for singled-document-mode to something less easy to trigger ([#3889](https://github.com/jupyterlab/jupyterlab/issues/3889))
  * Performance improvements for rendering text streams, especially around progress bars ([#4045](https://github.com/jupyterlab/jupyterlab/issues/4045)).
  * Canceling a "Restart Kernel" now functions correctly ([#3703](https://github.com/jupyterlab/jupyterlab/issues/3703)).
  * Defer loading file contents until after the application has been restored ([#4087](https://github.com/jupyterlab/jupyterlab/issues/4087)).
  * Ability to rotate, flip, and invert images in the image viewer ([#4000](https://github.com/jupyterlab/jupyterlab/issues/4000))
  * Major performance improvements for large CSV viewing ([#3997](https://github.com/jupyterlab/jupyterlab/issues/3997)).
  * Always show the context menu in the file browser, even for an empty directory ([#4264](https://github.com/jupyterlab/jupyterlab/issues/4264)).
  * Handle asynchronous comm messages in the services library more correctly (Note: this means `@jupyterlab/services` is now at version 2.0!) ([[#4115](https://github.com/jupyterlab/jupyterlab/issues/4115)](https://github.com/jupyterlab/jupyterlab/pull/4115)).
  * Display the kernel banner in the console when a kernel is restarted to mark the restart ([[#3663](https://github.com/jupyterlab/jupyterlab/issues/3663)](https://github.com/jupyterlab/jupyterlab/pull/3663)).
  * Many tweaks to the UI, as well as better error handling.</changelog>
  <changelog author="jengelh@inai.de" date="1525262400">- Trim filler wording from description.
- Replace bashisms in %install.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1533211200">- Update to 0.33.4
  + Key Features:
  * No longer in beta
  * Workspaces
  * Menu items
  * Keyboard shortcuts
  * Command palette items
  * Settings
  * Larger file uploads
  * Extension management and installation
  * Interface changes
  * Renderers
  * Changes for developers
  * Other fixes</changelog>
  <changelog author="toddrme2178@gmail.com" date="1536321600">- Update to 0.34.7
  * Notebooks, consoles, and text files now have access to completions for local
    tokens.
  * Python 3.5+ is now required to use JupyterLab. Python 2 kernels can still be
    run within JupyterLab.
  * Added the pipe (``|``) character as a CSV delimiter option.
  * Added "Open From Path..."" to top level ``File`` menu.
  * Added "Copy Download Link" to context menu for files.</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1538136000">- Update to 0.34.12
  * add sidebar min-width css variable
  * use encodeURI instead of encodeURIComponent for shareable links
  * expand JupyterLab.IOptions to allow for custom DocumentRegistry
  * Rename package.json to package.json.orig when copying it to build folder
  * fix python versions of build wheels by removing the universal flag
  * Hide quit entry for older notebook versions
  * Notebook 4.3 Shim</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1546603200">- Update to 0.35.4
  + Features
  * A notebook cell can now be readonly, reflecting its ``enabled`` metadata. (`#5401 &lt;https://github.com/jupyterlab/jupyterlab/pull/5401&gt;`__, `#1312 &lt;https://github.com/jupyterlab/jupyterlab/issues/1312&gt;`__)
  * Add "Go To Line" in the Edit menu for text editors. (`#5377 &lt;https://github.com/jupyterlab/jupyterlab/pull/5377&gt;`__)
  * Sidebar panels can now be switched between left and right sidebars. Right-click on a sidebar tab to move it to the other sidebar. (`#5347 &lt;https://github.com/jupyterlab/jupyterlab/pull/5347&gt;`__, `#5054 &lt;https://github.com/jupyterlab/jupyterlab/  issues/5054&gt;`__, `#3707 &lt;https://github.com/jupyterlab/jupyterlab/issues/3707&gt;`__)
  * Make the sidebar a bit narrower, and make the minimum width adjustable from a theme. (`#5245 &lt;https://github.com/jupyterlab/jupyterlab/pull/5245&gt;`__)
  * Populate the File, Export Notebook As... submenu from the server nbconvert capabilities. (`#5217 &lt;https://github.com/jupyterlab/jupyterlab/pull/5217&gt;`__)
  * Server contents managers can now tell JupyterLab to open files as notebooks. For example, several custom contents managers save and open notebooks as Markdown files. (`#5247 &lt;https://github.com/jupyterlab/jupyterlab/pull/5247&gt;`__, `#4924 &lt;https://github.com/jupyterlab/jupyterlab/issues/4924&gt;`__)
  * Add a command-line interface for managing workspaces. (`#5166 &lt;https://github.com/jupyterlab/jupyterlab/pull/5166&gt;`__)
  * Allow safe inline CSS styles in Markdown. (`#5012 &lt;https://github.com/jupyterlab/jupyterlab/pull/5012&gt;`__, `#1812 &lt;https://github.com/jupyterlab/jupyterlab/issues/1812&gt;`__)
  * Add Quit to File menu when appropriate. (`#5226 &lt;https://github.com/jupyterlab/jupyterlab/pull/5226&gt;`__, `#5252 &lt;https://github.com/jupyterlab/jupyterlab/pull/5252&gt;`__, `#5246 &lt;https://github.com/jupyterlab/jupyterlab/issues/5246&gt;`__, `#5280 &lt;https://github.com/jupyterlab/jupyterlab/pull/5280&gt;`__)
  * Rework extension manager user experience. (`#5147 &lt;https://github.com/jupyterlab/jupyterlab/pull/5147&gt;`__, `#5042 &lt;https://github.com/jupyterlab/jupyterlab/issues/5042&gt;`__)
  + Dark theme
  * Show a dark splash screen when using a dark theme. (`#5339 &lt;https://github.com/jupyterlab/jupyterlab/pull/5339&gt;`__, `#5338 &lt;https://github.com/jupyterlab/jupyterlab/issues/5338&gt;`__, `#5403 &lt;https://github.com/jupyterlab/jupyterlab/pull/5403&gt;`__)
  * Fix code completion menu for a dark theme. (`#5364 &lt;https://github.com/jupyterlab/jupyterlab/pull/5364&gt;`__, `#5349 &lt;https://github.com/jupyterlab/jupyterlab/issues/5349&gt;`__)
  * Style CSV viewer for a dark theme. (`#5304 &lt;https://github.com/jupyterlab/jupyterlab/pull/5304&gt;`__, `#3456 &lt;https://github.com/jupyterlab/jupyterlab/issues/3456&gt;`__)
  * Make Matplotlib figures legible in a dark theme. (`#5232 &lt;https://github.com/jupyterlab/jupyterlab/pull/5232&gt;`__)
  * Fix notebook cell dropdown legibility in a dark theme. (`#5168 &lt;https://github.com/jupyterlab/jupyterlab/issues/5168&gt;`__)
  + Bug fixes
  * Various save options in the file menu and toolbar are now disabled when a file is not writable. (`#5376 &lt;https://github.com/jupyterlab/jupyterlab/pull/5376&gt;`__, `#5391 &lt;https://github.com/jupyterlab/jupyterlab/pull/5391&gt;`__)
  * Kernel selector dialog no longer cuts off kernel names. (`#5260 &lt;https://github.com/jupyterlab/jupyterlab/pull/5260&gt;`__, `#5181 &lt;https://github.com/jupyterlab/jupyterlab/issues/5181&gt;`__)
  * Fix focus issues with the toolbar. (`#5344 &lt;https://github.com/jupyterlab/jupyterlab/pull/5344&gt;`__, `#5324 &lt;https://github.com/jupyterlab/jupyterlab/pull/5324&gt;`__, `#2995 &lt;https://github.com/jupyterlab/jupyterlab/issues/2995&gt;`__, `#5328 &lt;https://github.com/jupyterlab/jupyterlab/pull/5328&gt;`__)
  * Fix toolbar button enabled/disabled status. (`#5278 &lt;https://github.com/jupyterlab/jupyterlab/pull/5278&gt;`__)
  * Table alignment is now respected in Markdown. (`#5301 &lt;https://github.com/jupyterlab/jupyterlab/pull/5301&gt;`__, `#3180 &lt;https://github.com/jupyterlab/jupyterlab/issues/3180&gt;`__)
  * Fix syntax highlighting for Markdown lists. (`#5297 &lt;https://github.com/jupyterlab/jupyterlab/pull/5297&gt;`__, `#2741 &lt;https://github.com/jupyterlab/jupyterlab/issues/2741&gt;`__)
  * Use the current filebrowser instead of the default one for various commands. (`#5390 &lt;https://github.com/jupyterlab/jupyterlab/pull/5390&gt;`__)
  * Fix escaping in link handling to conform to Markdown syntax. This means that spaces in link references now need to be encoded as ``%20``. (`#5383 &lt;https://github.com/jupyterlab/jupyterlab/pull/5383&gt;`__, `#5340 &lt;https://github.com/jupyterlab/jupyterlab/pull/5340&gt;`__, `#5153 &lt;https://github.com/jupyterlab/jupyterlab/issues/5153&gt;`__)
  + Build system
  * Use Typescript 3.1. (`#5360 &lt;https://github.com/jupyterlab/jupyterlab/pull/5360&gt;`__)
  * Use Lerna 3.2.1. (`#5262 &lt;https://github.com/jupyterlab/jupyterlab/pull/5262&gt;`__)
  * Node &gt;=6.11.5 is now required. (`#5227 &lt;https://github.com/jupyterlab/jupyterlab/pull/5227&gt;`__)
  * Pin vega-embed version to 3.18.2. (`#5342 &lt;https://github.com/jupyterlab/jupyterlab/pull/5342&gt;`__)
  * Use Jest for services tests. (`#5251 &lt;https://github.com/jupyterlab/jupyterlab/pull/5251&gt;`__, `#5282 &lt;https://github.com/jupyterlab/jupyterlab/pull/5282&gt;`__)
  * Make it easier for third party extensions to use the JupyterLab test app and testing utilities. (`#5415 &lt;https://github.com/jupyterlab/jupyterlab/pull/5415&gt;`__)
  * Fix ``jupyter lab clean`` on Windows. (`#5400 &lt;https://github.com/jupyterlab/jupyterlab/pull/5400&gt;`__, `#5397 &lt;https://github.com/jupyterlab/jupyterlab/issues/5397&gt;`__)
  * Fix ``jupyter lab build`` on NFS. (`#5237 &lt;https://github.com/jupyterlab/jupyterlab/pull/5237&gt;`__, `#5233 &lt;https://github.com/jupyterlab/jupyterlab/issues/5233&gt;`__)
  * Build wheels for Python 3 only. (`#5287 &lt;https://github.com/jupyterlab/jupyterlab/pull/5287&gt;`__)
  * Migrate to using ``jupyterlab_server`` instead of ``jupyterlab_launcher`` and fix the app example. (`#5316 &lt;https://github.com/jupyterlab/jupyterlab/pull/5316&gt;`__)
  * Move Mathjax 2 typesetter to a library package. (`#5259 &lt;https://github.com/jupyterlab/jupyterlab/pull/5259&gt;`__, `#5257 &lt;https://github.com/jupyterlab/jupyterlab/issues/5257&gt;`__)
  + For Developers
  * Default toolbar buttons can be overridden, and mime renderers can now specify toolbar buttons. (`#5398 &lt;https://github.com/jupyterlab/jupyterlab/pull/5398&gt;`__, `#5370 &lt;https://github.com/jupyterlab/jupyterlab/pull/5370&gt;`__, `#5363 &lt;https://github.com/jupyterlab/jupyterlab/issues/5363&gt;`__)
  * A JupyterLab application instance can now be given a document registry, service manager, and command linker. (`#5291 &lt;https://github.com/jupyterlab/jupyterlab/pull/5291&gt;`__)</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1556193600">- Update to 0.35.5
  * use target=_blank for download links
  * Release filebrowser@0.19.4
- Rename to to match jupyter package naming guidelines.
- Add rpm macros</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1557835200">- Update to 0.35.6
  * Publish outputarea 0.19.2
  * Make sure the cached value of `_lastStream` reflects the removed
    characters so we don't have to remove them over and over again.
- Split directories and macros into separate package.</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1566302400">- Update to 1.0.6
  + User Facing Changes
  * We have added first class support for find and replace across JupyterLab. It is currently supported in notebooks and text files and is extensible for other widgets who wish to support it.
  * We have integrated the JupyterLab Status Bar package into the core distribution. Extensions can add their own status to it as well.
  * We now include the JupyterHub extension in core JupyterLab, so you no longer need to install ``@jupyterlab/hub-extension``.
  * JupyterLab now has a File &gt; Logout menu entry when running with JupyterHub
  * now have a printing system that allows extensions to customize how documents and activities are printed.
  * The launcher displays longer kernel names and supports keyboard navigation
  * Notebook outputs without any valid MimeType renderers will not be displayed, instead of displaying an error
  * Add tooltip to file browser root breadcrumb icon showing the server root, if it is available
  * Downloading a file will no longer open a new browser window
  * Rename the help "Inspector" to "Contextual Help" and move it to the "Help" menu
  * Update many of the icons to make them more consistent
  * Update the settings UI to remove the table view
  * Replace FAQ Extension with link to JupyterLab documentation
  * Change the default keyboard shortcut for closing a tab to be ``Alt+w`` instead of ``Cmd/Ctrl+w`` to avoid conflicts with operating systems.
  * Show help text in Inspector window to describe you should select a function
  * Fixes SVG rendering
  * Add support for dropping a tab in the tab bar area.
  * Switch some default shortcuts to use ``Accel`` instead of ``Ctrl`` so they are more natural for Mac users
  * Add ability to tell between hover and selected command palette items
  * Hide the "Last Modified" column when the file browser is narrow
  * Support copy/paste in terminal and Mac OS using ``Ctrl+C`` and ``Ctrl+V``
  * Support scrolling in running kernels panel
  * Adds ability to "Merge Selected Cells" in the context menu in the notebook
  * Turn On Accessibility In Xterm.js to make it more compatible for screen readers
  * When selecting cells using the keyboard shortcuts, we now skip collapsed cells
  * Supporting opening ``.geojson`` files in JSON viewer
  * Performance fixes for text-based progress bars
  * Add support for rendering Vega 5 and Vega Lite 3 while keeping the existing Vega 4 and Vega Lite 2 renderers
  * Drag and drop console cells into a notebook or text editor
  * Drag and drop notebook cells into a console or text editor
  * The extension manager search now sorts extensions by the score assigned to them by NPM instead of alphabetically
  * Notify the user when a kernel is automatically restarted, for example, if crashes from an out of memory error
  * Expose the extension manager in a command and menu item
  * Add command to render all Markdown cells
  * Supports using shift to select text in output area
  * Output areas that opened in new views are restored properly now on reload
  * Add support for managing notebook metadata under a new "Advanced Tools" section in the cell tools area. The cell and notebook metadata now always reflect the current state of the notebook
  * Inherit terminal theme from core theme
  * Adds a built-in HTML viewer so that you can view HTML files
  * New workspaces are now automatically generated when you create a new window with the same workspace name.
  * We now add a hint to the context menu to describe how you can access the native browser menu
  * The tabs on the left panel have changed to make them more understandable
  * Start a new terminal when the page is refreshed and the old terminal has died
  * Add a command to open the main menus, which can be assigned to a keyboard shortcut to open and navigate menus without a mouse
  * The contextual help now updates based on changes in the cursor from the mouse instead of just from the keyboard
  * The launcher now updates when the kernels change on the server
  * Retain cell auto scroll behavior even when a cell output is cleared
  * If you link to a relative path that is not a file in a markdown cell, this will now be preserved instead of changing it to a file URL
  * Adds the ability to link to a certain row in a CSV file and have the viewer open to that row
  * We have improved the performance of switching to a large notebook
  * The vdom extension now supports event handling, so that you can have kernel code run in response to user interaction with the UI
  * Adds the ability to run "Run All Code" and "Restart Kernel and Run All Code" in code and markdown files
  * We now remember what line ending a text file has when loading it, so that files with ``CRLF`` line endings will properly be saved with the same endings
  * Fixes rendering of SVG elements in HTML MimeType output
  * Allow copying files by holding down ``Ctrl`` when dragging them in the file browser
  * Switch the hover modified time in the file browser to use the local format
  * We have added a default keyboard shortcut of ``Ctrl Shift Q`` for closing and cleaning up a file
  * Adds the ability to find and go to a certain line in the CSV viewer
  * Add the ability to create new text and markdown files from the launcher and command palette
  * A "New Folder" option has been added to the file browser context menu
  * The ANSI colors are now the same as those in the classic notebook
  * Send complete statements instead of current lines when stepping through code in a cell
  * Description list styles (``dl``, ``dt``, ``dd``) are improved to be consistent with the nteract project
  + Settings
  * The settings system has been rewritten and now uses json5 as the syntax, which supports comments and other features for better human readability.
  * The keyboard shortcut system has been rewritten and now displays a list of system commands in the settings comments.
  * There are new settings for many following items, including:
    &gt; Adds an option to shut down terminals and notebook kernels when they are closed
    &gt; Scrolling past the end of a notebooks and text editor document
    &gt; Text editor code folding, rulers, and active line highlighting
    &gt; Markdown viewer options
    &gt; Terminal scrollback and other settings
    &gt; The autosave interval
    &gt; The file browser showing the current active file
    &gt; Custom scrollbar styling for dark themes
  + Command Line Changes
  * Installing extensions will be quieter and adds a ``--debug`` to extension installing
  * We now support running JupyterLab when its application directory is a symlink
  * Add ``--all`` flag to ``labextension uninstall`` to remove all extensions
  * Adds the ability to override the base URLs from the config
  * Updates to workspaces CLI command
  + Extension Development Changes
  * We have rewritten how extensions provide keyboard shortcuts and interact with the settings system. If you previously defined keyboard shortcuts or used the settings mechanism, you will need to update your extension
  * We have renamed the plugin type from ``JupyterLabPlugin`` to ``JupyterFrontEndPlugin``. The application arg is also renamed from ``JupyterLab`` to  ``JupyterFrontEnd`` and some its functionality has been moved to a separate ``ILabShell`` plugin
  * The lab shell ``addToMainArea``, ``addToLeftArea``, ``addToTopArea``, ``addToRightArea``, and ``addToBottomArea`` functions have been replaced with a single ``add()`` function that takes the area as an argument. Replace ``addToMainArea(widget, options)`` with ``add(widget, 'main', options)``, etc.
  * Rename ``pageUrl`` to ``appUrl`` in the server connection
  * ``MainAreaWidget`` instances now forward update requests to their ``content``
  * The theme data attributes are renamed and moved to the document body element. If you are relying on these attributes in CSS to conditionally style based on the theme, you should update their names. For example ``data-theme-light`` is now ``data-jp-theme-light``.
  * Extensions which require CSS should no longer import their CSS files into their Javascript files. Instead, they should specify a root CSS file in the ``style`` attribute in their ``package.json``, and JupyterLab will automatically import that CSS file.
  * ``Dialog.prompt`` has been replaced by a number of type-specific dialogs such as ``InputDialog.getString``, ``InputDialog.getBoolean``, etc.
  * When a ``RenderMime`` widget is re-rendered, the default behavior is to remove any existing content in the DOM. This can be overridden if needed.
  * We have updated our internal TypeScript version to 3.5.1 and our compile target to ``ES2017``. Extensions may need to upgrade their TypeScript version and target as well.
  * We have updated the typings for some of the Kernel messages so that they better match the spec.
  * A ``connectionFailure`` signal has been added to some of the manager classes, which can be used to detect when a connection to the server is lost
  * Add rate limiting and polling utilities to ``coreutils``  to use for throttling and debouncing of API requests
  * Require session when instantiating terminal widget
  * Provides a signal to see what items are opened in a directory listing
  * Ads the ability to add widget above the main work area to a top header area
  * Renames ``contextMenuFirst`` to  ``contextMenuHitTest`` in the ``JupyterFrontEnd``
  * Removes the ``initialCommand`` arg from the terminal creation command.
  * Adds ``--jp-code-cursor-width0``, ``--jp-code-cursor-width1``, and ``--jp-code-cursor-width2`` variables to the themes to support changing the cursor width if you change the font size
  * Adds the ability to insert a new item to the toolbar before or after another item
  * Adds the ability for extensions to register new CodeMirror modes
  * We have removed the ``JUPYTERLAB_xxx_LOADER`` Webpack loaders, instead you should use the loader directly in the URL as Webpack supports it
  * Adds the ability to handle fragments for document widgets
  * We have added a  ``@jupyterlab/ui-components`` package that contains reusable React components to be used internally and in extensions. Feel free to use this to create extension UIs with consistent styles
  * The ``showErrorMessage`` function now lets you customize the buttons it uses
  * We now provide helpers for using React components within JupyterLab. If you were previously using ``ReactElementWidget`` you should switch to using ``ReactWidget``.
  * The share link command has been moved to its own extension so that it can be overridden
  * Creating a new services session now requires passing a kernel model instead of a kernel instance
  * We upgraded the Webpack raw file loader. The new version of the raw loader exports ES2015 modules, so this may require changes in extensions that import files using the raw loader. For example, if you did ``require('myfile.md')`` to get the content of `myfile.md` as a string, you now should import it using ES2015 `import` syntax, or use `require('myfile.md').default`.
  * Widget factories now can support custom cloning behavior from an optional source widget
  * We have renamed the type ``InstanceTracker`` to ``WidgetTracker``.
  * In order to add widgets to the main area (e.g. as in the old XKCD extension tutorial), the correct syntax is now ``app.shell.add(widget)`` or ``app.shell.add(widget, 'main')``,</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1566561600">- Update to 1.0.9
  * integrity
  * update packages
  * fix package name
  * enforce jinja2 requirement
- jupyterlab-discovery has been merged into jupyterlab</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1566820800">- Use better way to handle tornado version compatibility.</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1573560000">- Update to version 1.2.2
  + User-facing changes
  * Select cells from the current cell to the top of the notebook with ``Shift Home``, to the bottom of the notebook with ``Shift End``
  * Add a log console extension to display unhandled messages and other activity
  * Allow the npm ``max-old-space`` option to be specified outside of JupyterLab
  * Only display node structure in a JSON tree view for arrays and empty objects
  * Make much smaller distribution packages by not building JavaScript source maps for releases.
  * Add support for pasting cell attachments and dragging attachments from the file browser
  * Add a new ``registry`` configuration parameter to override the default yarn repository when building
  + For developers
  * Update the Markdown renderer (``marked``) to 0.7.0
  * Remove datagrid as a singleton, allowing extensions to use newer versions
  * Add metadata to the kernelspec information
  * Allow different mimetypes for the clipboard data
  * Add inline svg icon support to toolbar buttons
  * Add PageConfig functions to query if a plugin is deferred or disabled
  * Allow for renderers for nbformat.ierror to be created
  * Refactor ``fileeditor-extension`` for modularization
  * Add execution timing to cells
  + Bugfixes
  * Fix the ``file-browser-path`` query parameter
  * Skip custom click behavior on links when the download attribute is set
  * Fix opening multiple browser tabs in Safari
  * Fix context menus on SVG icons
  * Fix overwriting of target attribute of anchors rendered by ``IPython.display``
  * Fix multi-cursor backspacing
  * Fix mult-cursor cell splitting</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1575892800">- Update to version 1.2.3
  * Update status bar index.css to be hand-curated
  * fix dropdown option style issue in Windows
  * Update the ui-components css to reflect the correct dependencies.
- Rename spec file to python-jupyterlab to work better
  with OSC python tooling.</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1575979200">- Use pyproject_install macro (boo#1094323)</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1579089600">- Update to 1.2.4
  * update yarn.lock
  * update terser dep</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1580212800">- Update to 1.2.6
  * Update dependencies</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1583236800">- Update to 2.0.0
  + User-facing changes
  * New user interface for notebook cell tags
  * File info display when hovering on a file in the file browser
  * Support for searching outputs in notebooks
  * ``Ctrl Shift .`` and ``Ctrl Shift ,`` shortcuts move focus to the next and previous tab bar in the main area, respectively
  * ``Shift Home`` and ``Shift End`` shortcuts in a notebook select all cells from the current cell to the top or bottom of a notebook, respectively
  * Explicit "No Kernel" button in the kernel selection dialog for new notebooks
  * Notebook ``recordTiming`` advanced setting to control whether execution timing information is stored in notebook files
  * "Select current running or last run cell" command added (requires notebook ``recordTiming`` advanced setting to be set to true)
  * Codemirror ``lineWiseCopyCut`` advanced setting to control the behavior of the copy/cut keyboard shortcuts when there is no selection
  * Refreshed the command palette and property inspector sidebar icons and user interfaces
  * "New File" and "New Markdown File" items in file browser context menu
  * "Download" item in File menu
  * "Restart Kernel and Run up to Selected Cell" item in notebook Kernel menu
  * In extension manager, the "enable" button is now only shown for installed extensions
  * Dialogs can now be closed by clicking outside of them
  * ``documentsearch:startWithReplace`` command to open the document find overlay with replace. There is not currently a default keyboard shortcut for this, but one can be assigned as a custom keyboard shortcut in Advanced Settings.
  * ``#`` added to the CSV Viewer delimiter options
  * The JSON viewer now only displays structure hints for arrays and empty objects for a more streamlined feel
  * Optional platform-aware keyboard shortcut fields ``linuxKeys``, ``macKeys``, and ``winKeys`` in keyboard shortcut definitions
  * Added options for ``jupyter lab clean`` to clean specific parts of the build, such as ``--extensions``, ``--settings``, ``--static``, and ``--all``
  * Removed the vega 4 and vega-lite 2 renderers (vega 5 and vega-lite 4 is included in JupyterLab by default). These legacy renderers may be available via custom extensions
  * JupyterHub users should use the ``c.Spawner.default_url = '/lab'`` setting instead of the deprecated and now removed ``labhubapp``
  + Backward incompatible changes
  * Switch from ``@phosphor`` to ``@lumino`` dependencies.
  * Factor out the ``settingsregistry`` and ``statedb`` packages from coreutils
  * Rework services architecture (sessions, kernels, terminals) and rename ``ClientSession`` to ``SessionContext``
  * Upgrade to TypeScript 3.7
  * Remove ``polling`` from coreutils in favor for ``@lumino/polling``
  * TypeScript strict null checking in core packages
  * Update state database list method to query based on namespace match.
  * Address code todo items and deprecations for 2.0
  * Update Console panel tracker widgets
  * Update contribution guide to require node v12+
  * New API for the ``Running`` sidebar extension
  * Clean up handling of icons under unified LabIcon
  + Other changes
  * New property inspector used to display the properties of the currently selected main area widget
  * Allow metadata for launcher items
  * Allow default file browser to restore manually.
  * Upgrade bundled yarn to 1.21.1
  * Make session dialogs configurable
  * Support transient editor configs
  * Optionally force new browser tab
  * Update core dependencies (e.g., ``codemirror``, ``xterm.js``, ``markdown``, ``fontawesome``, etc.)
  * Add storybook to ``ui-components``
  * Add explicit documentation encouraging people to re-use lab components
  * Enable TypeScript sourcemaps for debugging locally installed labextensions
  * Add ``UseSignal`` example to the docs
  * Add ``env`` prop to kernel options
  * Add kernelspec metadata
  * Allow different mimetypes for the clipboard data
  * Add password dialog to apputils
  * Alias phosphor packages to lumino to allow a deprecation period for phosphor
  * Match react version in ui-components peerdependencies
  * Fix lint-staged for both win and mac
  * Update websocket workaround for node environments
  * Fix handling of linked extensions
  * Fix extension compatibility checks for prereleases and extensions supporting multiple major versions of JupyterLab
  * Teach update-dependency about more range specifiers and make it adopt the current range for any tag
  * Add support for giving a rank to items in the top area
  * Apply all options to the initial JupyterLab application instance
  + Bugfixes
  * "Copy Shareable Link" in the file browser context menu now properly works in JupyterHub
  * Update Mathjax CDN in the cell and console examples
  * Revert ensure-max-old-space now that Node 12+ has better default memory ceilings
  * Resolve race condition between default file browser and tree urls.
  * Fix handling of code editor refresh
  * Start new notebooks in edit mode
  * Use consistent versions of React
  * Add scrollbar styles to nbconvert-css
  * Close output views when corresponding notebooks are closed
  * Fixed incorrect white background for new command palette icon
  * Block fetching the settings for a plugin that is disabled
  * When timing metadata changes, ensure signal fires
  * Prevent memory leaks in Vega renderer
  * Handle cell execution cancellation when cell is disposed
  * Fix dropdown option style issue on Windows
  * Make sure label is linked to a control when checking for element type
  * Refine log console message UX
  * Fix multicursor backspacing
  * Reset log display and count when non-notebook tab gets activated
  * Fix Safari multiple tabs by working around a Safari bug.
  * Skip custom click behavior on links when the download attribute is set
  * Fix context menu hit test to deal with SVG nodes.
  * Fix overwriting of target attribute of anchors rendered by ``IPython.display``
  * Fix file browser location in tree view
  * Stop too many fetch calls in docmanager-extension
  * Ensures that ``Shift Tab`` dedent shortcut works correctly in the file editor
  * Fix unexpected jump to last search result when using documentsearch
  * Fixed refresh issue for html viewer
  * Fix for center-aligned images with IPython.display.image
  * Changes to setting editor should trigger application dirty state
  * Move vega from "devdependencies" to "dependencies"
  * Restore default file browser manually.
  * Use default ``app_dir`` when ``app_dir`` is ``''``</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1583496000">- Requires nodejs/npm &gt;= 10</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1585742400">- We should work with tornado 4, 5 and 6.
- The bugs were found in tornado 6.0.1 and 6.0.2 were fixed
  by upstream developers</changelog>
  <changelog author="Steve Kowalik &lt;steven.kowalik@suse.com&gt;" date="1659009600">- Update to 2.2.10:
  * Remove `form` tags' `action` attribute during sanitizing, to prevent an
    XSS (CVE-2021-32797) (bsc#1196663)
  * Header ?Content-Type? should not be overwritten
  * Do not use token parameters in websocket urls
  * Properly handle errors in async browser_check
  * Cells can no longer be executed while kernels are terminating or
    restarting. There is a new status for these events on the Kernel Indicator
  * Add styling for high memory usage warning in status bar with nbresuse
  * Adds support for Python version 3.10
  * Support live editing of SVG with updating rendering
  * Lazy load codemirror theme stylesheets
  * Add feature request template + slight reorg in readme
  * Add link to react example in extension-examples repo
  * Close correct tab with close tab
  * Remove unused css rules
  * Simplified multicursor backspace code
  * Fix recent breaking changes to normalizepath in filebrowser
  * Handle quit_button when launched as an extension
  * Add worker-loader
  * Fix icon sidebar height for third party extensions
  * Scrolls cells into view after deletion
  * Support Node.js 10+
  * Select search text when focusing the search overlay
  * Throttle fetch requests in the setting registry?s data connector
  * Avoid redundant checkpoint calls on loading a notebook</changelog>
</package>
<package pkgid="e158953473889af05c1d6f45a939a02b900ca8690d3ea7bc12d7079603b18fb2" name="jupyter-jupyterlab-server" arch="noarch">
  <version epoch="0" ver="1.2.0" rel="bp154.2.3.3"/>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1546862400">- Initial version (0.2.0)</changelog>
  <changelog author="Arun Persaud &lt;arun@gmx.de&gt;" date="1551528000">- specfile:
  * remove devel from noarch
  * be more specific in %files section
- update to version 0.3.0:
  * Update workspaces listing to include values.</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1552305600">- Simplify files somewhat
- Grammar fix in summary</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1556193600">- Roll back to version 0.2.0, jupyterlab is not compatible with 0.3.0.
- Rename to to match jupyter package naming guidelines.</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1558008000">- Fix conflict with newer version on openSUSE:Factory</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1564228800">- Update to 1.0.5
  * require jinja2 to make tojson always safe
- Update to 1.0.4
  * use escape instead of urlencode for urls
- Update to 1.0.3
  * Escape template values in Jinja
- Update to 1.0.2
  * Add store ID to page config
- Update to 1.0.1
  * fix page config escaping
- Update to 1.0.0
  * jupyterlab 1.0.0 support</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1566302400">- This replaces jupyterlab-launcher</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1566302401">- Update to 1.0.6
  * Add .json.orig files to sdists
- Disable spurious rpmlint checks.
  They are incorrectly flagging valid test files.
  These tests are used by other packages besides this one,
  so they need to stay in.</changelog>
  <changelog author="Steve Kowalik &lt;steven.kowalik@suse.com&gt;" date="1658404800">- Update to 1.2.0:
  * Expose settings API to other handlers.
  * Always wait for process to finish
  * ensure the 'WHICH' command returns absolute path instead of relative path
  * Clean up terminate logic
  * Kill the subprocess if it does not stop
  * Do not try to close the watch process file handle
  * Update nodejs error message to not give an outdated version.
  * Black and White Listings Handler
  * Fix URL prefixing for absolute URLs</changelog>
</package>
<package pkgid="8c954a7d21740e57a230bdb725c1037ee0d726b288e07cd8241d1c6a97e0024e" name="jupyter-jupyterlab-server" arch="src">
  <version epoch="0" ver="1.2.0" rel="bp154.2.3.3"/>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1546862400">- Initial version (0.2.0)</changelog>
  <changelog author="Arun Persaud &lt;arun@gmx.de&gt;" date="1551528000">- specfile:
  * remove devel from noarch
  * be more specific in %files section
- update to version 0.3.0:
  * Update workspaces listing to include values.</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1552305600">- Simplify files somewhat
- Grammar fix in summary</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1556193600">- Roll back to version 0.2.0, jupyterlab is not compatible with 0.3.0.
- Rename to to match jupyter package naming guidelines.</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1558008000">- Fix conflict with newer version on openSUSE:Factory</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1564228800">- Update to 1.0.5
  * require jinja2 to make tojson always safe
- Update to 1.0.4
  * use escape instead of urlencode for urls
- Update to 1.0.3
  * Escape template values in Jinja
- Update to 1.0.2
  * Add store ID to page config
- Update to 1.0.1
  * fix page config escaping
- Update to 1.0.0
  * jupyterlab 1.0.0 support</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1566302400">- This replaces jupyterlab-launcher</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1566302401">- Update to 1.0.6
  * Add .json.orig files to sdists
- Disable spurious rpmlint checks.
  They are incorrectly flagging valid test files.
  These tests are used by other packages besides this one,
  so they need to stay in.</changelog>
  <changelog author="Steve Kowalik &lt;steven.kowalik@suse.com&gt;" date="1658404800">- Update to 1.2.0:
  * Expose settings API to other handlers.
  * Always wait for process to finish
  * ensure the 'WHICH' command returns absolute path instead of relative path
  * Clean up terminate logic
  * Kill the subprocess if it does not stop
  * Do not try to close the watch process file handle
  * Update nodejs error message to not give an outdated version.
  * Black and White Listings Handler
  * Fix URL prefixing for absolute URLs</changelog>
</package>
<package pkgid="c101f89e92c0bddb7943dc9d087ba160323c0e748cbc90641f21b8bf35ebde6e" name="kcmutils" arch="src">
  <version epoch="0" ver="5.90.0" rel="bp154.2.3.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1599393600">- Update to 5.74.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.74.0
- Changes since 5.73.0:
  * KCModuleData: Fix headers, improve api doc and rename method
  * Convert header to SPDX
  * Fix KCModuleData revertToDefaults signature bool -&gt; void
  * Extend KCModuleData with revertToDefaults and matchQuery functionnality
  * Fix typo
  * Try to avoid horizontal scrollbar in KCMultiDialog
  * Remove obsolete COPYING files
  * Add KCModuleData as base class for plugin
  * Allow extra button to be added to KPluginSelector
  * KCM-Utils: Convert copyright statements to SPDX expressions</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1601899200">- Update to 5.75.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.75.0
- Changes since 5.74.0:
  * Remove handling for inside events from tab hack (kde#423080)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1604750400">- Update to 5.76.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.76.0
- Too many changes to list here.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1607169600">- Update to 5.77.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.77.0
- Changes since 5.76.0:
  * Pass parent to Q*Layout ctor instead of calling setLayout()
  * remove hack that broke multi level kcms in icon mode</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1609934400">- Update to 5.78.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.78.0
- Changes since 5.77.0:
  * Remove ifdefs, we require Qt 5.14 now
  * KPluginSelector implement default highlight indicator
  * kcmoduleqml: don't bind column width to view width (kde#428727)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1612785600">- Update to 5.79.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.79.0
- Changes since 5.78.0:
  * Ensure single column mode
  * remove window dragging hack</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1615118400">- Update to 5.80.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.80.0
- Changes since 5.79.0:
  * Add .git-blame-ignore-revs file
  * Run clang-format
  * Add clang-format configuration
  * Add test for kcmutils_generate_module_data macro
  * Fix wrong margins on QML-based KCMs (kde#431855)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1617624000">- Update to 5.81.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.81.0
- Changes since 5.80.0:
  * Add loaded signal to KCModuleData to handle delayed loading</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1619870400">- Update to 5.82.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.82.0
- Changes since 5.81.0:
  * [KCModuleProxy] Refactor loadModule() for simplicity
  * Force autotest as C language
  * Remove unused file
  * Port QDBusConnectionInterface::serviceOwnerChanged to QDBusServiceWatcher
  * Use new connect() signal/slot syntax
  * Remove ComponentsDialog class, not used anywhere
  * Don't forward declaration when we already include file
  * Clean up unused KPackage linking + includes
  * Deprecate unused KSettingsWidgetAdaptor class
  * kcmutils_generate_module_data: Fix moc warning in generated files</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1622894400">- Update to 5.83.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.83.0
- Changes since 5.82.0:
  * Bump required CMake version to 3.16
  * Call ki18n_install() unconditionally</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1625400000">- Update to 5.84.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.84.0
- Changes since 5.83.0:
  * Download missing LicenseRef-KDE-Accepted-LGPL license
  * Fix loading help documentation for KPluginMetaData KCMs
  * Make KPluginMetaData accessible from KCModuleProxy class
  * Allow loading of KCModules using KPluginMetaData
  * WIP: KSettings::Dialog: port away from Dispatcher</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1628251200">- Update to 5.85.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.85.0
- Changes since 5.84.0:
  * Officially specify X-DocPath in the KCModule desktop file definition
  * Deprecate KCModuleProxy::aboutData
  * Add overload to pass in args in KCMultiDialog::addModule
  * Deprecate X-KDE-FactoryName and KCModuleInfo::handle
  * Deprecate KCMultiDialog::configCommitted(QByteArray) signal
  * Deprecate KSettings and KCModuleInfo based methods
  * Fix generation of documentation for deprecated methods
  * help:/ urls are already handled by KUrlHandler from KGuiAddons</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1630929600">- Update to 5.86.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.86.0
- Changes since 5.85.0:
  * We depend against c++-17 so we can use qOverload directly
  * Port away from deprecated KPluginLoader
  * Minor typo and wording fixes for KCModuleInfo API doc</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1631707200">- Drop the unneeded baselibs.conf.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1633262400">- Update to 5.87.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
  * Add Gitlab CI configuration
  * Fix Warning: Property type "Int" is not a known QVariant type
  * Add support for static builds
  * Add compat code for KService based plugin loading
  * Introduce KCModuleProxy::isChanged method
  * Un-overload KCModuleProxy:changed signal</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1636286400">- Update to 5.88.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.88.0
- Changes since 5.87.0:
  * KPluginSelector: Make sure to check if metaData/moduleInfo is valid before accessing it
  * KPluginSelector: Allow KCMs to be loaded using X-KDE-ConfigModule keyword
  * Remove unused internal method in KPluginSelector
  * Deprecate KCModuleInfo in favor of KPluginMetaData API
  * KCMultiDialog: Use deprecation macros to wrap internal KCModuleInfo API usage
  * KCModuleLoader: Deprecate overloads using KCModuleInfo
  * KPluginSelector: Port internally deprecated KCModuleInfo usage
  * KCModuleProxy: Deprecate KService/KCModuleInfo overloads for constructor
  * Add FreeBSD CI</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1636286401">- Strip 'Source' URL for faster submissions</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638619200">- Update to 5.89.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.89.0
- Changes since 5.88.0:
  * Set initial page using initialPage property, rather than pushing
  * Do not reset KPluginModel if there are no plugins
  * Implement KPluginSelector replacement not based around KPluginInfo
  * Do not try to unload static plugins
  * Support static plugins for X-KDE-ConfigModule property</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1641211200">- Update to 5.90.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.90.0
- Changes since 5.89.0:
  * Remove QDesktopWidget include, not used any where
  * Change build system for building against qt6
  * Wrap deprecated KDelarative::ConfigModule::aboutData method call in
    deprecation wrappers
  * Deprecate KPluginSelector class
  * Allow KCMUtils to build without deprecated KCoreAddons methods
  * Update showNavigationButtons to use enum type
  * Fix PluginPage deprecation docs</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1670241600">- Add patch from upstream included in 5.95 to fix a crash due to
  a double delete:
  * 0001-kcmultidialog-Fix-crash-in-clear.patch</changelog>
</package>
<package pkgid="a816782062cca194fa78e857731f4af4c6a874f565c15646d9a1235bbac3b624" name="kcmutils-devel" arch="aarch64">
  <version epoch="0" ver="5.90.0" rel="bp154.2.3.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1599393600">- Update to 5.74.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.74.0
- Changes since 5.73.0:
  * KCModuleData: Fix headers, improve api doc and rename method
  * Convert header to SPDX
  * Fix KCModuleData revertToDefaults signature bool -&gt; void
  * Extend KCModuleData with revertToDefaults and matchQuery functionnality
  * Fix typo
  * Try to avoid horizontal scrollbar in KCMultiDialog
  * Remove obsolete COPYING files
  * Add KCModuleData as base class for plugin
  * Allow extra button to be added to KPluginSelector
  * KCM-Utils: Convert copyright statements to SPDX expressions</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1601899200">- Update to 5.75.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.75.0
- Changes since 5.74.0:
  * Remove handling for inside events from tab hack (kde#423080)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1604750400">- Update to 5.76.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.76.0
- Too many changes to list here.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1607169600">- Update to 5.77.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.77.0
- Changes since 5.76.0:
  * Pass parent to Q*Layout ctor instead of calling setLayout()
  * remove hack that broke multi level kcms in icon mode</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1609934400">- Update to 5.78.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.78.0
- Changes since 5.77.0:
  * Remove ifdefs, we require Qt 5.14 now
  * KPluginSelector implement default highlight indicator
  * kcmoduleqml: don't bind column width to view width (kde#428727)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1612785600">- Update to 5.79.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.79.0
- Changes since 5.78.0:
  * Ensure single column mode
  * remove window dragging hack</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1615118400">- Update to 5.80.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.80.0
- Changes since 5.79.0:
  * Add .git-blame-ignore-revs file
  * Run clang-format
  * Add clang-format configuration
  * Add test for kcmutils_generate_module_data macro
  * Fix wrong margins on QML-based KCMs (kde#431855)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1617624000">- Update to 5.81.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.81.0
- Changes since 5.80.0:
  * Add loaded signal to KCModuleData to handle delayed loading</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1619870400">- Update to 5.82.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.82.0
- Changes since 5.81.0:
  * [KCModuleProxy] Refactor loadModule() for simplicity
  * Force autotest as C language
  * Remove unused file
  * Port QDBusConnectionInterface::serviceOwnerChanged to QDBusServiceWatcher
  * Use new connect() signal/slot syntax
  * Remove ComponentsDialog class, not used anywhere
  * Don't forward declaration when we already include file
  * Clean up unused KPackage linking + includes
  * Deprecate unused KSettingsWidgetAdaptor class
  * kcmutils_generate_module_data: Fix moc warning in generated files</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1622894400">- Update to 5.83.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.83.0
- Changes since 5.82.0:
  * Bump required CMake version to 3.16
  * Call ki18n_install() unconditionally</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1625400000">- Update to 5.84.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.84.0
- Changes since 5.83.0:
  * Download missing LicenseRef-KDE-Accepted-LGPL license
  * Fix loading help documentation for KPluginMetaData KCMs
  * Make KPluginMetaData accessible from KCModuleProxy class
  * Allow loading of KCModules using KPluginMetaData
  * WIP: KSettings::Dialog: port away from Dispatcher</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1628251200">- Update to 5.85.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.85.0
- Changes since 5.84.0:
  * Officially specify X-DocPath in the KCModule desktop file definition
  * Deprecate KCModuleProxy::aboutData
  * Add overload to pass in args in KCMultiDialog::addModule
  * Deprecate X-KDE-FactoryName and KCModuleInfo::handle
  * Deprecate KCMultiDialog::configCommitted(QByteArray) signal
  * Deprecate KSettings and KCModuleInfo based methods
  * Fix generation of documentation for deprecated methods
  * help:/ urls are already handled by KUrlHandler from KGuiAddons</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1630929600">- Update to 5.86.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.86.0
- Changes since 5.85.0:
  * We depend against c++-17 so we can use qOverload directly
  * Port away from deprecated KPluginLoader
  * Minor typo and wording fixes for KCModuleInfo API doc</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1631707200">- Drop the unneeded baselibs.conf.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1633262400">- Update to 5.87.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
  * Add Gitlab CI configuration
  * Fix Warning: Property type "Int" is not a known QVariant type
  * Add support for static builds
  * Add compat code for KService based plugin loading
  * Introduce KCModuleProxy::isChanged method
  * Un-overload KCModuleProxy:changed signal</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1636286400">- Update to 5.88.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.88.0
- Changes since 5.87.0:
  * KPluginSelector: Make sure to check if metaData/moduleInfo is valid before accessing it
  * KPluginSelector: Allow KCMs to be loaded using X-KDE-ConfigModule keyword
  * Remove unused internal method in KPluginSelector
  * Deprecate KCModuleInfo in favor of KPluginMetaData API
  * KCMultiDialog: Use deprecation macros to wrap internal KCModuleInfo API usage
  * KCModuleLoader: Deprecate overloads using KCModuleInfo
  * KPluginSelector: Port internally deprecated KCModuleInfo usage
  * KCModuleProxy: Deprecate KService/KCModuleInfo overloads for constructor
  * Add FreeBSD CI</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1636286401">- Strip 'Source' URL for faster submissions</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638619200">- Update to 5.89.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.89.0
- Changes since 5.88.0:
  * Set initial page using initialPage property, rather than pushing
  * Do not reset KPluginModel if there are no plugins
  * Implement KPluginSelector replacement not based around KPluginInfo
  * Do not try to unload static plugins
  * Support static plugins for X-KDE-ConfigModule property</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1641211200">- Update to 5.90.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.90.0
- Changes since 5.89.0:
  * Remove QDesktopWidget include, not used any where
  * Change build system for building against qt6
  * Wrap deprecated KDelarative::ConfigModule::aboutData method call in
    deprecation wrappers
  * Deprecate KPluginSelector class
  * Allow KCMUtils to build without deprecated KCoreAddons methods
  * Update showNavigationButtons to use enum type
  * Fix PluginPage deprecation docs</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1670241600">- Add patch from upstream included in 5.95 to fix a crash due to
  a double delete:
  * 0001-kcmultidialog-Fix-crash-in-clear.patch</changelog>
</package>
<package pkgid="2a6b5de4aaa20834d4b41c9ea303ea4beb0d153c9444b653f7df1ec0b212c461" name="kcmutils-devel" arch="ppc64le">
  <version epoch="0" ver="5.90.0" rel="bp154.2.3.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1599393600">- Update to 5.74.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.74.0
- Changes since 5.73.0:
  * KCModuleData: Fix headers, improve api doc and rename method
  * Convert header to SPDX
  * Fix KCModuleData revertToDefaults signature bool -&gt; void
  * Extend KCModuleData with revertToDefaults and matchQuery functionnality
  * Fix typo
  * Try to avoid horizontal scrollbar in KCMultiDialog
  * Remove obsolete COPYING files
  * Add KCModuleData as base class for plugin
  * Allow extra button to be added to KPluginSelector
  * KCM-Utils: Convert copyright statements to SPDX expressions</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1601899200">- Update to 5.75.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.75.0
- Changes since 5.74.0:
  * Remove handling for inside events from tab hack (kde#423080)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1604750400">- Update to 5.76.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.76.0
- Too many changes to list here.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1607169600">- Update to 5.77.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.77.0
- Changes since 5.76.0:
  * Pass parent to Q*Layout ctor instead of calling setLayout()
  * remove hack that broke multi level kcms in icon mode</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1609934400">- Update to 5.78.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.78.0
- Changes since 5.77.0:
  * Remove ifdefs, we require Qt 5.14 now
  * KPluginSelector implement default highlight indicator
  * kcmoduleqml: don't bind column width to view width (kde#428727)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1612785600">- Update to 5.79.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.79.0
- Changes since 5.78.0:
  * Ensure single column mode
  * remove window dragging hack</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1615118400">- Update to 5.80.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.80.0
- Changes since 5.79.0:
  * Add .git-blame-ignore-revs file
  * Run clang-format
  * Add clang-format configuration
  * Add test for kcmutils_generate_module_data macro
  * Fix wrong margins on QML-based KCMs (kde#431855)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1617624000">- Update to 5.81.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.81.0
- Changes since 5.80.0:
  * Add loaded signal to KCModuleData to handle delayed loading</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1619870400">- Update to 5.82.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.82.0
- Changes since 5.81.0:
  * [KCModuleProxy] Refactor loadModule() for simplicity
  * Force autotest as C language
  * Remove unused file
  * Port QDBusConnectionInterface::serviceOwnerChanged to QDBusServiceWatcher
  * Use new connect() signal/slot syntax
  * Remove ComponentsDialog class, not used anywhere
  * Don't forward declaration when we already include file
  * Clean up unused KPackage linking + includes
  * Deprecate unused KSettingsWidgetAdaptor class
  * kcmutils_generate_module_data: Fix moc warning in generated files</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1622894400">- Update to 5.83.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.83.0
- Changes since 5.82.0:
  * Bump required CMake version to 3.16
  * Call ki18n_install() unconditionally</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1625400000">- Update to 5.84.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.84.0
- Changes since 5.83.0:
  * Download missing LicenseRef-KDE-Accepted-LGPL license
  * Fix loading help documentation for KPluginMetaData KCMs
  * Make KPluginMetaData accessible from KCModuleProxy class
  * Allow loading of KCModules using KPluginMetaData
  * WIP: KSettings::Dialog: port away from Dispatcher</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1628251200">- Update to 5.85.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.85.0
- Changes since 5.84.0:
  * Officially specify X-DocPath in the KCModule desktop file definition
  * Deprecate KCModuleProxy::aboutData
  * Add overload to pass in args in KCMultiDialog::addModule
  * Deprecate X-KDE-FactoryName and KCModuleInfo::handle
  * Deprecate KCMultiDialog::configCommitted(QByteArray) signal
  * Deprecate KSettings and KCModuleInfo based methods
  * Fix generation of documentation for deprecated methods
  * help:/ urls are already handled by KUrlHandler from KGuiAddons</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1630929600">- Update to 5.86.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.86.0
- Changes since 5.85.0:
  * We depend against c++-17 so we can use qOverload directly
  * Port away from deprecated KPluginLoader
  * Minor typo and wording fixes for KCModuleInfo API doc</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1631707200">- Drop the unneeded baselibs.conf.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1633262400">- Update to 5.87.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
  * Add Gitlab CI configuration
  * Fix Warning: Property type "Int" is not a known QVariant type
  * Add support for static builds
  * Add compat code for KService based plugin loading
  * Introduce KCModuleProxy::isChanged method
  * Un-overload KCModuleProxy:changed signal</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1636286400">- Update to 5.88.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.88.0
- Changes since 5.87.0:
  * KPluginSelector: Make sure to check if metaData/moduleInfo is valid before accessing it
  * KPluginSelector: Allow KCMs to be loaded using X-KDE-ConfigModule keyword
  * Remove unused internal method in KPluginSelector
  * Deprecate KCModuleInfo in favor of KPluginMetaData API
  * KCMultiDialog: Use deprecation macros to wrap internal KCModuleInfo API usage
  * KCModuleLoader: Deprecate overloads using KCModuleInfo
  * KPluginSelector: Port internally deprecated KCModuleInfo usage
  * KCModuleProxy: Deprecate KService/KCModuleInfo overloads for constructor
  * Add FreeBSD CI</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1636286401">- Strip 'Source' URL for faster submissions</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638619200">- Update to 5.89.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.89.0
- Changes since 5.88.0:
  * Set initial page using initialPage property, rather than pushing
  * Do not reset KPluginModel if there are no plugins
  * Implement KPluginSelector replacement not based around KPluginInfo
  * Do not try to unload static plugins
  * Support static plugins for X-KDE-ConfigModule property</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1641211200">- Update to 5.90.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.90.0
- Changes since 5.89.0:
  * Remove QDesktopWidget include, not used any where
  * Change build system for building against qt6
  * Wrap deprecated KDelarative::ConfigModule::aboutData method call in
    deprecation wrappers
  * Deprecate KPluginSelector class
  * Allow KCMUtils to build without deprecated KCoreAddons methods
  * Update showNavigationButtons to use enum type
  * Fix PluginPage deprecation docs</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1670241600">- Add patch from upstream included in 5.95 to fix a crash due to
  a double delete:
  * 0001-kcmultidialog-Fix-crash-in-clear.patch</changelog>
</package>
<package pkgid="21b9a2b2a102ad7da3a7c81bb1a8888490cc7b5645845343684893c149e27033" name="kcmutils-devel" arch="s390x">
  <version epoch="0" ver="5.90.0" rel="bp154.2.3.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1599393600">- Update to 5.74.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.74.0
- Changes since 5.73.0:
  * KCModuleData: Fix headers, improve api doc and rename method
  * Convert header to SPDX
  * Fix KCModuleData revertToDefaults signature bool -&gt; void
  * Extend KCModuleData with revertToDefaults and matchQuery functionnality
  * Fix typo
  * Try to avoid horizontal scrollbar in KCMultiDialog
  * Remove obsolete COPYING files
  * Add KCModuleData as base class for plugin
  * Allow extra button to be added to KPluginSelector
  * KCM-Utils: Convert copyright statements to SPDX expressions</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1601899200">- Update to 5.75.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.75.0
- Changes since 5.74.0:
  * Remove handling for inside events from tab hack (kde#423080)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1604750400">- Update to 5.76.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.76.0
- Too many changes to list here.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1607169600">- Update to 5.77.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.77.0
- Changes since 5.76.0:
  * Pass parent to Q*Layout ctor instead of calling setLayout()
  * remove hack that broke multi level kcms in icon mode</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1609934400">- Update to 5.78.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.78.0
- Changes since 5.77.0:
  * Remove ifdefs, we require Qt 5.14 now
  * KPluginSelector implement default highlight indicator
  * kcmoduleqml: don't bind column width to view width (kde#428727)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1612785600">- Update to 5.79.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.79.0
- Changes since 5.78.0:
  * Ensure single column mode
  * remove window dragging hack</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1615118400">- Update to 5.80.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.80.0
- Changes since 5.79.0:
  * Add .git-blame-ignore-revs file
  * Run clang-format
  * Add clang-format configuration
  * Add test for kcmutils_generate_module_data macro
  * Fix wrong margins on QML-based KCMs (kde#431855)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1617624000">- Update to 5.81.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.81.0
- Changes since 5.80.0:
  * Add loaded signal to KCModuleData to handle delayed loading</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1619870400">- Update to 5.82.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.82.0
- Changes since 5.81.0:
  * [KCModuleProxy] Refactor loadModule() for simplicity
  * Force autotest as C language
  * Remove unused file
  * Port QDBusConnectionInterface::serviceOwnerChanged to QDBusServiceWatcher
  * Use new connect() signal/slot syntax
  * Remove ComponentsDialog class, not used anywhere
  * Don't forward declaration when we already include file
  * Clean up unused KPackage linking + includes
  * Deprecate unused KSettingsWidgetAdaptor class
  * kcmutils_generate_module_data: Fix moc warning in generated files</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1622894400">- Update to 5.83.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.83.0
- Changes since 5.82.0:
  * Bump required CMake version to 3.16
  * Call ki18n_install() unconditionally</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1625400000">- Update to 5.84.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.84.0
- Changes since 5.83.0:
  * Download missing LicenseRef-KDE-Accepted-LGPL license
  * Fix loading help documentation for KPluginMetaData KCMs
  * Make KPluginMetaData accessible from KCModuleProxy class
  * Allow loading of KCModules using KPluginMetaData
  * WIP: KSettings::Dialog: port away from Dispatcher</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1628251200">- Update to 5.85.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.85.0
- Changes since 5.84.0:
  * Officially specify X-DocPath in the KCModule desktop file definition
  * Deprecate KCModuleProxy::aboutData
  * Add overload to pass in args in KCMultiDialog::addModule
  * Deprecate X-KDE-FactoryName and KCModuleInfo::handle
  * Deprecate KCMultiDialog::configCommitted(QByteArray) signal
  * Deprecate KSettings and KCModuleInfo based methods
  * Fix generation of documentation for deprecated methods
  * help:/ urls are already handled by KUrlHandler from KGuiAddons</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1630929600">- Update to 5.86.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.86.0
- Changes since 5.85.0:
  * We depend against c++-17 so we can use qOverload directly
  * Port away from deprecated KPluginLoader
  * Minor typo and wording fixes for KCModuleInfo API doc</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1631707200">- Drop the unneeded baselibs.conf.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1633262400">- Update to 5.87.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
  * Add Gitlab CI configuration
  * Fix Warning: Property type "Int" is not a known QVariant type
  * Add support for static builds
  * Add compat code for KService based plugin loading
  * Introduce KCModuleProxy::isChanged method
  * Un-overload KCModuleProxy:changed signal</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1636286400">- Update to 5.88.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.88.0
- Changes since 5.87.0:
  * KPluginSelector: Make sure to check if metaData/moduleInfo is valid before accessing it
  * KPluginSelector: Allow KCMs to be loaded using X-KDE-ConfigModule keyword
  * Remove unused internal method in KPluginSelector
  * Deprecate KCModuleInfo in favor of KPluginMetaData API
  * KCMultiDialog: Use deprecation macros to wrap internal KCModuleInfo API usage
  * KCModuleLoader: Deprecate overloads using KCModuleInfo
  * KPluginSelector: Port internally deprecated KCModuleInfo usage
  * KCModuleProxy: Deprecate KService/KCModuleInfo overloads for constructor
  * Add FreeBSD CI</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1636286401">- Strip 'Source' URL for faster submissions</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638619200">- Update to 5.89.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.89.0
- Changes since 5.88.0:
  * Set initial page using initialPage property, rather than pushing
  * Do not reset KPluginModel if there are no plugins
  * Implement KPluginSelector replacement not based around KPluginInfo
  * Do not try to unload static plugins
  * Support static plugins for X-KDE-ConfigModule property</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1641211200">- Update to 5.90.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.90.0
- Changes since 5.89.0:
  * Remove QDesktopWidget include, not used any where
  * Change build system for building against qt6
  * Wrap deprecated KDelarative::ConfigModule::aboutData method call in
    deprecation wrappers
  * Deprecate KPluginSelector class
  * Allow KCMUtils to build without deprecated KCoreAddons methods
  * Update showNavigationButtons to use enum type
  * Fix PluginPage deprecation docs</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1670241600">- Add patch from upstream included in 5.95 to fix a crash due to
  a double delete:
  * 0001-kcmultidialog-Fix-crash-in-clear.patch</changelog>
</package>
<package pkgid="387fe2823d96a975e08c6b67b67cdac2840d78bbfa640978a2f5106321262540" name="kcmutils-devel" arch="x86_64">
  <version epoch="0" ver="5.90.0" rel="bp154.2.3.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1599393600">- Update to 5.74.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.74.0
- Changes since 5.73.0:
  * KCModuleData: Fix headers, improve api doc and rename method
  * Convert header to SPDX
  * Fix KCModuleData revertToDefaults signature bool -&gt; void
  * Extend KCModuleData with revertToDefaults and matchQuery functionnality
  * Fix typo
  * Try to avoid horizontal scrollbar in KCMultiDialog
  * Remove obsolete COPYING files
  * Add KCModuleData as base class for plugin
  * Allow extra button to be added to KPluginSelector
  * KCM-Utils: Convert copyright statements to SPDX expressions</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1601899200">- Update to 5.75.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.75.0
- Changes since 5.74.0:
  * Remove handling for inside events from tab hack (kde#423080)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1604750400">- Update to 5.76.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.76.0
- Too many changes to list here.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1607169600">- Update to 5.77.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.77.0
- Changes since 5.76.0:
  * Pass parent to Q*Layout ctor instead of calling setLayout()
  * remove hack that broke multi level kcms in icon mode</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1609934400">- Update to 5.78.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.78.0
- Changes since 5.77.0:
  * Remove ifdefs, we require Qt 5.14 now
  * KPluginSelector implement default highlight indicator
  * kcmoduleqml: don't bind column width to view width (kde#428727)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1612785600">- Update to 5.79.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.79.0
- Changes since 5.78.0:
  * Ensure single column mode
  * remove window dragging hack</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1615118400">- Update to 5.80.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.80.0
- Changes since 5.79.0:
  * Add .git-blame-ignore-revs file
  * Run clang-format
  * Add clang-format configuration
  * Add test for kcmutils_generate_module_data macro
  * Fix wrong margins on QML-based KCMs (kde#431855)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1617624000">- Update to 5.81.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.81.0
- Changes since 5.80.0:
  * Add loaded signal to KCModuleData to handle delayed loading</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1619870400">- Update to 5.82.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.82.0
- Changes since 5.81.0:
  * [KCModuleProxy] Refactor loadModule() for simplicity
  * Force autotest as C language
  * Remove unused file
  * Port QDBusConnectionInterface::serviceOwnerChanged to QDBusServiceWatcher
  * Use new connect() signal/slot syntax
  * Remove ComponentsDialog class, not used anywhere
  * Don't forward declaration when we already include file
  * Clean up unused KPackage linking + includes
  * Deprecate unused KSettingsWidgetAdaptor class
  * kcmutils_generate_module_data: Fix moc warning in generated files</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1622894400">- Update to 5.83.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.83.0
- Changes since 5.82.0:
  * Bump required CMake version to 3.16
  * Call ki18n_install() unconditionally</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1625400000">- Update to 5.84.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.84.0
- Changes since 5.83.0:
  * Download missing LicenseRef-KDE-Accepted-LGPL license
  * Fix loading help documentation for KPluginMetaData KCMs
  * Make KPluginMetaData accessible from KCModuleProxy class
  * Allow loading of KCModules using KPluginMetaData
  * WIP: KSettings::Dialog: port away from Dispatcher</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1628251200">- Update to 5.85.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.85.0
- Changes since 5.84.0:
  * Officially specify X-DocPath in the KCModule desktop file definition
  * Deprecate KCModuleProxy::aboutData
  * Add overload to pass in args in KCMultiDialog::addModule
  * Deprecate X-KDE-FactoryName and KCModuleInfo::handle
  * Deprecate KCMultiDialog::configCommitted(QByteArray) signal
  * Deprecate KSettings and KCModuleInfo based methods
  * Fix generation of documentation for deprecated methods
  * help:/ urls are already handled by KUrlHandler from KGuiAddons</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1630929600">- Update to 5.86.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.86.0
- Changes since 5.85.0:
  * We depend against c++-17 so we can use qOverload directly
  * Port away from deprecated KPluginLoader
  * Minor typo and wording fixes for KCModuleInfo API doc</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1631707200">- Drop the unneeded baselibs.conf.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1633262400">- Update to 5.87.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
  * Add Gitlab CI configuration
  * Fix Warning: Property type "Int" is not a known QVariant type
  * Add support for static builds
  * Add compat code for KService based plugin loading
  * Introduce KCModuleProxy::isChanged method
  * Un-overload KCModuleProxy:changed signal</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1636286400">- Update to 5.88.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.88.0
- Changes since 5.87.0:
  * KPluginSelector: Make sure to check if metaData/moduleInfo is valid before accessing it
  * KPluginSelector: Allow KCMs to be loaded using X-KDE-ConfigModule keyword
  * Remove unused internal method in KPluginSelector
  * Deprecate KCModuleInfo in favor of KPluginMetaData API
  * KCMultiDialog: Use deprecation macros to wrap internal KCModuleInfo API usage
  * KCModuleLoader: Deprecate overloads using KCModuleInfo
  * KPluginSelector: Port internally deprecated KCModuleInfo usage
  * KCModuleProxy: Deprecate KService/KCModuleInfo overloads for constructor
  * Add FreeBSD CI</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1636286401">- Strip 'Source' URL for faster submissions</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638619200">- Update to 5.89.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.89.0
- Changes since 5.88.0:
  * Set initial page using initialPage property, rather than pushing
  * Do not reset KPluginModel if there are no plugins
  * Implement KPluginSelector replacement not based around KPluginInfo
  * Do not try to unload static plugins
  * Support static plugins for X-KDE-ConfigModule property</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1641211200">- Update to 5.90.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.90.0
- Changes since 5.89.0:
  * Remove QDesktopWidget include, not used any where
  * Change build system for building against qt6
  * Wrap deprecated KDelarative::ConfigModule::aboutData method call in
    deprecation wrappers
  * Deprecate KPluginSelector class
  * Allow KCMUtils to build without deprecated KCoreAddons methods
  * Update showNavigationButtons to use enum type
  * Fix PluginPage deprecation docs</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1670241600">- Add patch from upstream included in 5.95 to fix a crash due to
  a double delete:
  * 0001-kcmultidialog-Fix-crash-in-clear.patch</changelog>
</package>
<package pkgid="c7586f7187faeb594d9c28a8947c44d77ddc182300ebb04129fe9412b6d1c8f3" name="keepassxc" arch="ppc64le">
  <version epoch="0" ver="2.6.6" rel="bp154.3.2.1"/>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1555070400">- update to 2.4.1
  - Fix database deletion when using unsafe saves to a different
    file system [#2889]
  - Fix opening databases with legacy key files that contain '/'
    [#2872]
  - Fix opening database files from the command line [#2919]
  - Fix crash when editing master key [#2836]
  - Fix multiple issues with apply button behavior [#2947]
  - Fix issues on application startup (tab order, --pw-stdin, etc.)
    [#2830]
  - Fix building without WITH_XC_KEESHARE
  - Fix reference entry coloring on macOS dark mode [#2984]
  - Hide window when performing entry auto-type on macOS [#2969]
  - Improve UX of update checker; reduce checks to every 7 days
    [#2968]
  - KeeShare improvements [#2946, #2978, #2824]
  - Re-enable Ctrl+C to copy password from search box [#2947]
  - Add KeePassXC-Browser integration for Brave browser [#2933]
  - SSH Agent: Re-Add keys on database unlock [#2982]
  - SSH Agent: Only remove keys on app exit if they are removed on
    lock [#2985]
  - CLI: Add --no-password option [#2708]
  - CLI: Improve database extraction to XML [#2698]
  - CLI: Don't call mandb on build [#2774]
  - CLI: Add debug info [#2714]
  - Improve support for Snap theming [#2832]
  - Add support for building on Haiku OS [#2859]
  - Ctrl+PgDn now goes to the next tab and Ctrl+PgUp to the
    previous
  - Fix compiling on GCC 5 / Xenial [#2990]
  - Add .gitrev output to tarball for third-party builds [#2970]
  - Add WITH_XC_UPDATECHECK compile flag to toggle the update
    checker [#2968]
- disable update check
- no longer use our gitrev hack in favor for upstream solution</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1559563200">- update to 2.4.2
  - Improve resilience against memory attacks - overwrite memory
    before free [#3020]
  - Prevent infinite save loop when location is unavailable [#3026]
  - Attempt to fix quitting application when shutdown or logout
    issued [#3199]
  - Support merging database custom data [#3002]
  - Fix opening URL's with non-http schemes [#3153]
  - Fix data loss due to not reading all database attachments if
    duplicates exist [#3180]
  - Fix entry context menu disabling when using keyboard navigation
    [#3199]
  - Fix behaviors when canceling an entry edit [#3199]
  - Fix processing of tray icon click and doubleclick [#3112]
  - Update group in preview widget when focused [#3199]
  - Prefer DuckDuckGo service over direct icon download (increases
    resolution) [#2996]
  - Remove apply button in application settings [#3019]
  - Use winqtdeploy on Windows to correct deployment issues [#3025]
  - Don't mark entry edit as modified when attribute selection
    changes [#3041]
  - Use console code page CP_UTF8 on Windows if supported [#3050]
  - Snap: Fix locking database with session lock [#3046]
  - Snap: Fix theming across Linux distributions [#3057]
  - Snap: Use SNAP_USER_COMMON and SNAP_USER_DATA directories
    [#3131]
  - KeeShare: Automatically enable WITH_XC_KEESHARE_SECURE if
    quazip is found [#3088]
  - macOS: Fix toolbar text when in dark mode [#2998]
  - macOS: Lock database on switching user [#3097]
  - macOS: Fix global Auto-Type when the database is locked [#3138]
  - Browser: Close popups when database is locked [#3093]
  - Browser: Add tests [#3016]
  - Browser: Don't create default group if custom group is enabled
    [#3127]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1560340800">- update to 2.4.3
  - Fix library loading issues in the Snap and macOS releases
    [#3247]
  - Fix various keyboard navigation issues [#3248]
  - Fix main window toggling regression when clicking the tray icon
    on KDE [#3258]
  - Add documentation for keyboard shortcuts to source code
    distribution [#3215]</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1567425600">- Disable lto for keepassxc. It causes a build error.
- Provide/Obsolete keepassx. Keepassx still depends on Qt4 and shall be
  dropped shortly. (boo#1148401)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1572091200">- update to 2.5.0
  https://github.com/keepassxreboot/keepassxc/releases/tag/2.5.0</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1575892800">- Update to version 2.5.1:
  * https://github.com/keepassxreboot/keepassxc/releases/tag/2.5.1</changelog>
  <changelog author="droidmonkey &lt;support@dmapps.us&gt;" date="1578139200">- Update to version 2.5.2:
  * https://github.com/keepassxreboot/keepassxc/releases/tag/2.5.2</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1579435200">- Update to version 2.5.3:
  * https://github.com/keepassxreboot/keepassxc/releases/tag/2.5.3</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1582891200">- Clicking the tray icon momentarily shows and immediately hides window. Make
  it stick (boo#1165293).
- Fix window not minimizing to tray.
  + add keepassxc-Fix-window-hiding-after-shown.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1586433600">- Update to version 2.5.4:
  * https://github.com/keepassxreboot/keepassxc/releases/tag/2.5.4</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1589198400">- Drop build/requirement on libgcrypt20-hmac boo#1171438</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1594123200">- Update to version 2.6.0:
  * https://keepassxc.org/blog/2020-07-07-2.6.0-released/
  * https://github.com/keepassxreboot/keepassxc/releases/tag/2.6.0
- drop keepassxc-Fix-window-hiding-after-shown.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1594123201">- add BR for asciidoctor</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1594209600">- add _constraints with 6GB to fix build on ppc64 hopefully</changelog>
  <changelog author="Carsten Ziepke &lt;kieltux@gmail.com&gt;" date="1598788800">- Update to version 2.6.1:
  - Add menu entries for auto-typing only username or only
    password [#4891]
  - Browser: Add command for retrieving current TOTP [#5278]
  - Improve man pages [#5010]
  - Linux: Support Xfce screen lock signals [#4971]
  - Linux: Add OARS metadata to AppStream markup [#5031]
  - SSH Agent: Substitute tilde with %USERPROFILE% on Windows
    [#5116]
  - Improve password generator UI and UX [#5129]
  - Do not prompt to restart if switching the theme back and
    forth [#5084]
  - Change actions for F1, F2, and F3 keys [#5082]
  - Skip referenced passwords in health check report [#5056]
  - Check system-wide Qt translations directory for downstream
  - translations packaging [#5064]
  - macOS: Change password visibility toggle shortcut to Ctrl+H to
  - avoid conflict with system shortcut [#5114]
  - Browser: Only display domain name in browser access confirm
    dialog to avoid overly wide window sizes [#5214]
  - Fix clipboard not being cleared when database is locked while
    timeout is still active [#5184]
  - Fix list of previous databases not being cleared in some
    cases [#5123]
  - Fix saving of non-data changes on database lock [#5210]
  - Fix search results banner theming [#5197]
  - Don?t enforce theme palette in Classic theme mode and add hover
    effect for buttons [#5122, #5267]
  - Fix label clipping in settings on high-DPI screens [#5227]
  - Fix excessive memory usage by icons on systems with high-DPI
    screens [#5266]
  - Fix crash if number of TOTP digits exceeds ten [#5106]
  - Fix slot detection when first YubiKey is configured on the second
    slot [#5004]
  - Prevent crash if focus widget gets deleted during saving [#5005]
  - Always show buttons for opening or saving attachments [#4956]
  - Update link to Auto-Type help [#5228]
  - Fix build errors with Ninja [#5121]
  - CLI: Fix db-info command wrongly labelled as db-show in
    usage listing [#5140]
  - Windows: Use Classic theme by default if high-contrast mode
    is on [#5191]
  - Linux: Add workaround for qt5ct bug, causing icons not to show
    up [#5011]
  - Linux: Correct high-DPI display by not allowing fractional
    scaling [#5185]
  - Browser: Consider subdomain and path when requesting only
    ?best-matching credentials? [#4832]
  - SSH Agent: Always forget all keys on lock [#5115]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1603368000">- Update to version 2.6.2
  - Added
  - Add option to keep window always on top to view menu [#5542]
  - Move show/hide usernames and passwords to view menu [#5542]
  - Add command line options and environment variables for
    changing the config locations [#5452]
  - Include TOTP settings in CSV import/export and add support
    for ISO datetimes [#5346]
  - Changed
  - Mask sensitive information in command execution confirmation
    prompt [#5542]
  - SSH Agent: Avoid shortcut conflict on macOS by changing "Add
    key" to Ctrl+H on all platforms [#5484]
  - Fixed
  - Prevent data loss with drag and drop between databases
    [#5536]
  - Fix crash when toggling Capslock rapidly [#5545]
  - Don't mark URL references as invalid URL [#5380]
  - Reset entry preview after search [#5483]
  - Set Qt::Dialog flag on database open dialog [#5356]
  - Fix sorting of database report columns [#5426]
  - Fix IfDevice matching logic [#5344]
  - Fix layout issues and a stray scrollbar appearing on top of
    the entry edit screen [#5424]
  - Fix tabbing into the notes field [#5424]
  - Fix password generator ignoring settings on load [#5340]
  - Restore natural entry sort order on application load [#5438]
  - Fix paperclip and TOTP columns not saving state [#5327]
  - Enforce fixed password font in entry preview [#5454]
  - Add scrollbar when new database wizard exceeds screen size
    [#5560]
  - Do not mark database as modified when viewing Auto-Type
    associations [#5542]
  - CLI: Fix two heap-use-after-free crashes [#5368, #5470]
  - Browser: Fix key exchange not working with multiple
    simultaneous users on Windows [#5485]
  - Browser: Fix entry retrieval when "only best matching" is
    enabled [#5316]
  - Browser: Ignore recycle bin on KeePassHTTP migration [#5481]
  - KeeShare: Fix import crash [#5542]
  - macOS: Fix toolbar theming and breadcrumb display issues
    [#5482]
  - macOS: Fix file dialog randomly closing [#5479]
  - macOS: Fix being unable to select OPVault files for import
    [#5341]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1610452800">- Update to version 2.6.3
  - Added
  - Support Argon2id KDF [#5778]
  - Support XMLv2 key files [#5798]
  - Changed
  - Improve CSV Import/Export, include time fields and TOTP
    [#5346]
  - Support empty area dragging of the application window [#5860]
  - Display default Auto-Type sequence in preview pane [#5654]
  - Remove strict length limit on generated passwords [#5748]
  - Hide key file path by default when unlocking database [#5779]
  - Document browser extension use with Edge in managed mode
    [#5692]
  - Windows: Prevent clipboard history and cloud sync [#5853]
  - macOS: Update the application icon to Big Sur styling [#5851]
  - Fixed
  - Re-select previously selected entry on database unlock
    [#5559]
  - Properly save special character choice in password generator
    [#5610]
  - Fix crash in browser integration with multiple similar
    entries [#5653]
  - Remove offset on username field in classic theme [#5788]
  - Ensure entry history is copied when drag/dropping entries and
    groups [#5817]
  - Close modal dialogs when database is locked [#5820]
  - Prevent crash when KeeShare modifies an entry that is
    currently being edited [#5827]
  - Improve preview of entry attributes [#5834]
  - Always activate/focus database open dialog preventing mistype
    [#5878]
  - Reports: fix calculation of average password length [#5862]
  - Linux: Delay startup on login to correct tray icon issues
    [#5724]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1612267200">- Update to 2.6.4
  - Added
  - Automatically adapt to light/dark system theme changes
    (Windows/macOS only) [#6034]
  - Changed
  - Show window title as tooltip on system tray [#5948]
  - Compress Snap release as LZO for faster initial startup
    [#5877]
  - Password generator: Set maximum selectable password length to
    999 [#5937]
  - Fixed
  - Fix crash on app close when using SSH agent [#5935]
  - Fix KDF selection showing wrong item when using Argon2id
    [#5923]
  - Automatically close About dialog on database lock if it is
    still open [#5947]
  - Linux: Fix automatic launch at system startup with AppImages
    [#5901]
  - Linux: Fix click-to-move on empty area activating when using
    menus [#5971]
  - Linux: Try multiple times to show tray icon if tray is not
    ready yet [#5948]
  - macOS: Fix KeePassXC blocking clean shutdown [#6002]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1623931200">- Update to 2.6.6
  - Fixed
  - Fix focusing search when pressing hotkey #6603
  - Trim whitespace from TOTP key input prior to processing #6604
  - Fix building on macOS #6598
  - Resolve compiler warnings for unused return values #6607
- Changes from 2.6.5
  - Added
  - Show search bar when toolbar is hidden or in overflow #6279
  - Show countdown for clipboard clearing in status bar #6333
  - Command line option to lock all open databases #6511
  - Allow CSV import of bare TOTP secrets #6211
  - Retain file creation time when saving database #6576
  - Set permissions of saved attachments to be private to the
    current user #6363
  - OPVault: Use Text instead of Name for attribute names #6334
  - Changed
  - Reports: Allow resizing of reports columns #6435
  - Reports: Toggle showing expired entries #6534
  - Save Always on Top setting #6236
  - Password generator can exclude additional lookalike
    characters (6/G, 8/B) #6196
  - Fixed
  - Allow setting MSI properties in unattended install #6196
  - Update MainWindow minimum size to enable smaller verticle
    space #6196
  - Use application font size when setting default or monospace
    fonts #6332
  - Fix notes not clearing in entry preview panel in some cases
    [#6481]
  - macOS: Correct window activation when restoring from tray
    [#6575]
  - macOS: Better handling of minimize after unlock when using
    browser integration #6338
  - Linux: Start after the system tray is available on LXQt #6216
  - Linux: Allow selection of modal dialogs on X11 in Auto-Type
    [#6204]
  - KeeShare: prevent crash when file extension is missing #6174</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1623931201">- newer version of fedora now have the sane cmake macros too.</changelog>
</package>
<package pkgid="f9b36bf79d3b2b5191894f65e78ac99717474acbe5b352cc32718d8ecf70233f" name="keepassxc" arch="src">
  <version epoch="0" ver="2.6.6" rel="bp154.3.2.1"/>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1555070400">- update to 2.4.1
  - Fix database deletion when using unsafe saves to a different
    file system [#2889]
  - Fix opening databases with legacy key files that contain '/'
    [#2872]
  - Fix opening database files from the command line [#2919]
  - Fix crash when editing master key [#2836]
  - Fix multiple issues with apply button behavior [#2947]
  - Fix issues on application startup (tab order, --pw-stdin, etc.)
    [#2830]
  - Fix building without WITH_XC_KEESHARE
  - Fix reference entry coloring on macOS dark mode [#2984]
  - Hide window when performing entry auto-type on macOS [#2969]
  - Improve UX of update checker; reduce checks to every 7 days
    [#2968]
  - KeeShare improvements [#2946, #2978, #2824]
  - Re-enable Ctrl+C to copy password from search box [#2947]
  - Add KeePassXC-Browser integration for Brave browser [#2933]
  - SSH Agent: Re-Add keys on database unlock [#2982]
  - SSH Agent: Only remove keys on app exit if they are removed on
    lock [#2985]
  - CLI: Add --no-password option [#2708]
  - CLI: Improve database extraction to XML [#2698]
  - CLI: Don't call mandb on build [#2774]
  - CLI: Add debug info [#2714]
  - Improve support for Snap theming [#2832]
  - Add support for building on Haiku OS [#2859]
  - Ctrl+PgDn now goes to the next tab and Ctrl+PgUp to the
    previous
  - Fix compiling on GCC 5 / Xenial [#2990]
  - Add .gitrev output to tarball for third-party builds [#2970]
  - Add WITH_XC_UPDATECHECK compile flag to toggle the update
    checker [#2968]
- disable update check
- no longer use our gitrev hack in favor for upstream solution</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1559563200">- update to 2.4.2
  - Improve resilience against memory attacks - overwrite memory
    before free [#3020]
  - Prevent infinite save loop when location is unavailable [#3026]
  - Attempt to fix quitting application when shutdown or logout
    issued [#3199]
  - Support merging database custom data [#3002]
  - Fix opening URL's with non-http schemes [#3153]
  - Fix data loss due to not reading all database attachments if
    duplicates exist [#3180]
  - Fix entry context menu disabling when using keyboard navigation
    [#3199]
  - Fix behaviors when canceling an entry edit [#3199]
  - Fix processing of tray icon click and doubleclick [#3112]
  - Update group in preview widget when focused [#3199]
  - Prefer DuckDuckGo service over direct icon download (increases
    resolution) [#2996]
  - Remove apply button in application settings [#3019]
  - Use winqtdeploy on Windows to correct deployment issues [#3025]
  - Don't mark entry edit as modified when attribute selection
    changes [#3041]
  - Use console code page CP_UTF8 on Windows if supported [#3050]
  - Snap: Fix locking database with session lock [#3046]
  - Snap: Fix theming across Linux distributions [#3057]
  - Snap: Use SNAP_USER_COMMON and SNAP_USER_DATA directories
    [#3131]
  - KeeShare: Automatically enable WITH_XC_KEESHARE_SECURE if
    quazip is found [#3088]
  - macOS: Fix toolbar text when in dark mode [#2998]
  - macOS: Lock database on switching user [#3097]
  - macOS: Fix global Auto-Type when the database is locked [#3138]
  - Browser: Close popups when database is locked [#3093]
  - Browser: Add tests [#3016]
  - Browser: Don't create default group if custom group is enabled
    [#3127]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1560340800">- update to 2.4.3
  - Fix library loading issues in the Snap and macOS releases
    [#3247]
  - Fix various keyboard navigation issues [#3248]
  - Fix main window toggling regression when clicking the tray icon
    on KDE [#3258]
  - Add documentation for keyboard shortcuts to source code
    distribution [#3215]</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1567425600">- Disable lto for keepassxc. It causes a build error.
- Provide/Obsolete keepassx. Keepassx still depends on Qt4 and shall be
  dropped shortly. (boo#1148401)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1572091200">- update to 2.5.0
  https://github.com/keepassxreboot/keepassxc/releases/tag/2.5.0</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1575892800">- Update to version 2.5.1:
  * https://github.com/keepassxreboot/keepassxc/releases/tag/2.5.1</changelog>
  <changelog author="droidmonkey &lt;support@dmapps.us&gt;" date="1578139200">- Update to version 2.5.2:
  * https://github.com/keepassxreboot/keepassxc/releases/tag/2.5.2</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1579435200">- Update to version 2.5.3:
  * https://github.com/keepassxreboot/keepassxc/releases/tag/2.5.3</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1582891200">- Clicking the tray icon momentarily shows and immediately hides window. Make
  it stick (boo#1165293).
- Fix window not minimizing to tray.
  + add keepassxc-Fix-window-hiding-after-shown.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1586433600">- Update to version 2.5.4:
  * https://github.com/keepassxreboot/keepassxc/releases/tag/2.5.4</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1589198400">- Drop build/requirement on libgcrypt20-hmac boo#1171438</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1594123200">- Update to version 2.6.0:
  * https://keepassxc.org/blog/2020-07-07-2.6.0-released/
  * https://github.com/keepassxreboot/keepassxc/releases/tag/2.6.0
- drop keepassxc-Fix-window-hiding-after-shown.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1594123201">- add BR for asciidoctor</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1594209600">- add _constraints with 6GB to fix build on ppc64 hopefully</changelog>
  <changelog author="Carsten Ziepke &lt;kieltux@gmail.com&gt;" date="1598788800">- Update to version 2.6.1:
  - Add menu entries for auto-typing only username or only
    password [#4891]
  - Browser: Add command for retrieving current TOTP [#5278]
  - Improve man pages [#5010]
  - Linux: Support Xfce screen lock signals [#4971]
  - Linux: Add OARS metadata to AppStream markup [#5031]
  - SSH Agent: Substitute tilde with %USERPROFILE% on Windows
    [#5116]
  - Improve password generator UI and UX [#5129]
  - Do not prompt to restart if switching the theme back and
    forth [#5084]
  - Change actions for F1, F2, and F3 keys [#5082]
  - Skip referenced passwords in health check report [#5056]
  - Check system-wide Qt translations directory for downstream
  - translations packaging [#5064]
  - macOS: Change password visibility toggle shortcut to Ctrl+H to
  - avoid conflict with system shortcut [#5114]
  - Browser: Only display domain name in browser access confirm
    dialog to avoid overly wide window sizes [#5214]
  - Fix clipboard not being cleared when database is locked while
    timeout is still active [#5184]
  - Fix list of previous databases not being cleared in some
    cases [#5123]
  - Fix saving of non-data changes on database lock [#5210]
  - Fix search results banner theming [#5197]
  - Don?t enforce theme palette in Classic theme mode and add hover
    effect for buttons [#5122, #5267]
  - Fix label clipping in settings on high-DPI screens [#5227]
  - Fix excessive memory usage by icons on systems with high-DPI
    screens [#5266]
  - Fix crash if number of TOTP digits exceeds ten [#5106]
  - Fix slot detection when first YubiKey is configured on the second
    slot [#5004]
  - Prevent crash if focus widget gets deleted during saving [#5005]
  - Always show buttons for opening or saving attachments [#4956]
  - Update link to Auto-Type help [#5228]
  - Fix build errors with Ninja [#5121]
  - CLI: Fix db-info command wrongly labelled as db-show in
    usage listing [#5140]
  - Windows: Use Classic theme by default if high-contrast mode
    is on [#5191]
  - Linux: Add workaround for qt5ct bug, causing icons not to show
    up [#5011]
  - Linux: Correct high-DPI display by not allowing fractional
    scaling [#5185]
  - Browser: Consider subdomain and path when requesting only
    ?best-matching credentials? [#4832]
  - SSH Agent: Always forget all keys on lock [#5115]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1603368000">- Update to version 2.6.2
  - Added
  - Add option to keep window always on top to view menu [#5542]
  - Move show/hide usernames and passwords to view menu [#5542]
  - Add command line options and environment variables for
    changing the config locations [#5452]
  - Include TOTP settings in CSV import/export and add support
    for ISO datetimes [#5346]
  - Changed
  - Mask sensitive information in command execution confirmation
    prompt [#5542]
  - SSH Agent: Avoid shortcut conflict on macOS by changing "Add
    key" to Ctrl+H on all platforms [#5484]
  - Fixed
  - Prevent data loss with drag and drop between databases
    [#5536]
  - Fix crash when toggling Capslock rapidly [#5545]
  - Don't mark URL references as invalid URL [#5380]
  - Reset entry preview after search [#5483]
  - Set Qt::Dialog flag on database open dialog [#5356]
  - Fix sorting of database report columns [#5426]
  - Fix IfDevice matching logic [#5344]
  - Fix layout issues and a stray scrollbar appearing on top of
    the entry edit screen [#5424]
  - Fix tabbing into the notes field [#5424]
  - Fix password generator ignoring settings on load [#5340]
  - Restore natural entry sort order on application load [#5438]
  - Fix paperclip and TOTP columns not saving state [#5327]
  - Enforce fixed password font in entry preview [#5454]
  - Add scrollbar when new database wizard exceeds screen size
    [#5560]
  - Do not mark database as modified when viewing Auto-Type
    associations [#5542]
  - CLI: Fix two heap-use-after-free crashes [#5368, #5470]
  - Browser: Fix key exchange not working with multiple
    simultaneous users on Windows [#5485]
  - Browser: Fix entry retrieval when "only best matching" is
    enabled [#5316]
  - Browser: Ignore recycle bin on KeePassHTTP migration [#5481]
  - KeeShare: Fix import crash [#5542]
  - macOS: Fix toolbar theming and breadcrumb display issues
    [#5482]
  - macOS: Fix file dialog randomly closing [#5479]
  - macOS: Fix being unable to select OPVault files for import
    [#5341]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1610452800">- Update to version 2.6.3
  - Added
  - Support Argon2id KDF [#5778]
  - Support XMLv2 key files [#5798]
  - Changed
  - Improve CSV Import/Export, include time fields and TOTP
    [#5346]
  - Support empty area dragging of the application window [#5860]
  - Display default Auto-Type sequence in preview pane [#5654]
  - Remove strict length limit on generated passwords [#5748]
  - Hide key file path by default when unlocking database [#5779]
  - Document browser extension use with Edge in managed mode
    [#5692]
  - Windows: Prevent clipboard history and cloud sync [#5853]
  - macOS: Update the application icon to Big Sur styling [#5851]
  - Fixed
  - Re-select previously selected entry on database unlock
    [#5559]
  - Properly save special character choice in password generator
    [#5610]
  - Fix crash in browser integration with multiple similar
    entries [#5653]
  - Remove offset on username field in classic theme [#5788]
  - Ensure entry history is copied when drag/dropping entries and
    groups [#5817]
  - Close modal dialogs when database is locked [#5820]
  - Prevent crash when KeeShare modifies an entry that is
    currently being edited [#5827]
  - Improve preview of entry attributes [#5834]
  - Always activate/focus database open dialog preventing mistype
    [#5878]
  - Reports: fix calculation of average password length [#5862]
  - Linux: Delay startup on login to correct tray icon issues
    [#5724]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1612267200">- Update to 2.6.4
  - Added
  - Automatically adapt to light/dark system theme changes
    (Windows/macOS only) [#6034]
  - Changed
  - Show window title as tooltip on system tray [#5948]
  - Compress Snap release as LZO for faster initial startup
    [#5877]
  - Password generator: Set maximum selectable password length to
    999 [#5937]
  - Fixed
  - Fix crash on app close when using SSH agent [#5935]
  - Fix KDF selection showing wrong item when using Argon2id
    [#5923]
  - Automatically close About dialog on database lock if it is
    still open [#5947]
  - Linux: Fix automatic launch at system startup with AppImages
    [#5901]
  - Linux: Fix click-to-move on empty area activating when using
    menus [#5971]
  - Linux: Try multiple times to show tray icon if tray is not
    ready yet [#5948]
  - macOS: Fix KeePassXC blocking clean shutdown [#6002]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1623931200">- Update to 2.6.6
  - Fixed
  - Fix focusing search when pressing hotkey #6603
  - Trim whitespace from TOTP key input prior to processing #6604
  - Fix building on macOS #6598
  - Resolve compiler warnings for unused return values #6607
- Changes from 2.6.5
  - Added
  - Show search bar when toolbar is hidden or in overflow #6279
  - Show countdown for clipboard clearing in status bar #6333
  - Command line option to lock all open databases #6511
  - Allow CSV import of bare TOTP secrets #6211
  - Retain file creation time when saving database #6576
  - Set permissions of saved attachments to be private to the
    current user #6363
  - OPVault: Use Text instead of Name for attribute names #6334
  - Changed
  - Reports: Allow resizing of reports columns #6435
  - Reports: Toggle showing expired entries #6534
  - Save Always on Top setting #6236
  - Password generator can exclude additional lookalike
    characters (6/G, 8/B) #6196
  - Fixed
  - Allow setting MSI properties in unattended install #6196
  - Update MainWindow minimum size to enable smaller verticle
    space #6196
  - Use application font size when setting default or monospace
    fonts #6332
  - Fix notes not clearing in entry preview panel in some cases
    [#6481]
  - macOS: Correct window activation when restoring from tray
    [#6575]
  - macOS: Better handling of minimize after unlock when using
    browser integration #6338
  - Linux: Start after the system tray is available on LXQt #6216
  - Linux: Allow selection of modal dialogs on X11 in Auto-Type
    [#6204]
  - KeeShare: prevent crash when file extension is missing #6174</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1623931201">- newer version of fedora now have the sane cmake macros too.</changelog>
</package>
<package pkgid="189fca1100fd94bc3809aff0b82a467edb63b88b7e4cf045693536c66c258440" name="keepassxc" arch="aarch64">
  <version epoch="0" ver="2.7.1" rel="bp154.3.3.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1567425600">- Disable lto for keepassxc. It causes a build error.
- Provide/Obsolete keepassx. Keepassx still depends on Qt4 and shall be
  dropped shortly. (boo#1148401)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1572091200">- update to 2.5.0
  https://github.com/keepassxreboot/keepassxc/releases/tag/2.5.0</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1575892800">- Update to version 2.5.1:
  * https://github.com/keepassxreboot/keepassxc/releases/tag/2.5.1</changelog>
  <changelog author="droidmonkey &lt;support@dmapps.us&gt;" date="1578139200">- Update to version 2.5.2:
  * https://github.com/keepassxreboot/keepassxc/releases/tag/2.5.2</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1579435200">- Update to version 2.5.3:
  * https://github.com/keepassxreboot/keepassxc/releases/tag/2.5.3</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1582891200">- Clicking the tray icon momentarily shows and immediately hides window. Make
  it stick (boo#1165293).
- Fix window not minimizing to tray.
  + add keepassxc-Fix-window-hiding-after-shown.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1586433600">- Update to version 2.5.4:
  * https://github.com/keepassxreboot/keepassxc/releases/tag/2.5.4</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1589198400">- Drop build/requirement on libgcrypt20-hmac boo#1171438</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1594123200">- Update to version 2.6.0:
  * https://keepassxc.org/blog/2020-07-07-2.6.0-released/
  * https://github.com/keepassxreboot/keepassxc/releases/tag/2.6.0
- drop keepassxc-Fix-window-hiding-after-shown.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1594123201">- add BR for asciidoctor</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1594209600">- add _constraints with 6GB to fix build on ppc64 hopefully</changelog>
  <changelog author="Carsten Ziepke &lt;kieltux@gmail.com&gt;" date="1598788800">- Update to version 2.6.1:
  - Add menu entries for auto-typing only username or only
    password [#4891]
  - Browser: Add command for retrieving current TOTP [#5278]
  - Improve man pages [#5010]
  - Linux: Support Xfce screen lock signals [#4971]
  - Linux: Add OARS metadata to AppStream markup [#5031]
  - SSH Agent: Substitute tilde with %USERPROFILE% on Windows
    [#5116]
  - Improve password generator UI and UX [#5129]
  - Do not prompt to restart if switching the theme back and
    forth [#5084]
  - Change actions for F1, F2, and F3 keys [#5082]
  - Skip referenced passwords in health check report [#5056]
  - Check system-wide Qt translations directory for downstream
  - translations packaging [#5064]
  - macOS: Change password visibility toggle shortcut to Ctrl+H to
  - avoid conflict with system shortcut [#5114]
  - Browser: Only display domain name in browser access confirm
    dialog to avoid overly wide window sizes [#5214]
  - Fix clipboard not being cleared when database is locked while
    timeout is still active [#5184]
  - Fix list of previous databases not being cleared in some
    cases [#5123]
  - Fix saving of non-data changes on database lock [#5210]
  - Fix search results banner theming [#5197]
  - Don?t enforce theme palette in Classic theme mode and add hover
    effect for buttons [#5122, #5267]
  - Fix label clipping in settings on high-DPI screens [#5227]
  - Fix excessive memory usage by icons on systems with high-DPI
    screens [#5266]
  - Fix crash if number of TOTP digits exceeds ten [#5106]
  - Fix slot detection when first YubiKey is configured on the second
    slot [#5004]
  - Prevent crash if focus widget gets deleted during saving [#5005]
  - Always show buttons for opening or saving attachments [#4956]
  - Update link to Auto-Type help [#5228]
  - Fix build errors with Ninja [#5121]
  - CLI: Fix db-info command wrongly labelled as db-show in
    usage listing [#5140]
  - Windows: Use Classic theme by default if high-contrast mode
    is on [#5191]
  - Linux: Add workaround for qt5ct bug, causing icons not to show
    up [#5011]
  - Linux: Correct high-DPI display by not allowing fractional
    scaling [#5185]
  - Browser: Consider subdomain and path when requesting only
    ?best-matching credentials? [#4832]
  - SSH Agent: Always forget all keys on lock [#5115]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1603368000">- Update to version 2.6.2
  - Added
  - Add option to keep window always on top to view menu [#5542]
  - Move show/hide usernames and passwords to view menu [#5542]
  - Add command line options and environment variables for
    changing the config locations [#5452]
  - Include TOTP settings in CSV import/export and add support
    for ISO datetimes [#5346]
  - Changed
  - Mask sensitive information in command execution confirmation
    prompt [#5542]
  - SSH Agent: Avoid shortcut conflict on macOS by changing "Add
    key" to Ctrl+H on all platforms [#5484]
  - Fixed
  - Prevent data loss with drag and drop between databases
    [#5536]
  - Fix crash when toggling Capslock rapidly [#5545]
  - Don't mark URL references as invalid URL [#5380]
  - Reset entry preview after search [#5483]
  - Set Qt::Dialog flag on database open dialog [#5356]
  - Fix sorting of database report columns [#5426]
  - Fix IfDevice matching logic [#5344]
  - Fix layout issues and a stray scrollbar appearing on top of
    the entry edit screen [#5424]
  - Fix tabbing into the notes field [#5424]
  - Fix password generator ignoring settings on load [#5340]
  - Restore natural entry sort order on application load [#5438]
  - Fix paperclip and TOTP columns not saving state [#5327]
  - Enforce fixed password font in entry preview [#5454]
  - Add scrollbar when new database wizard exceeds screen size
    [#5560]
  - Do not mark database as modified when viewing Auto-Type
    associations [#5542]
  - CLI: Fix two heap-use-after-free crashes [#5368, #5470]
  - Browser: Fix key exchange not working with multiple
    simultaneous users on Windows [#5485]
  - Browser: Fix entry retrieval when "only best matching" is
    enabled [#5316]
  - Browser: Ignore recycle bin on KeePassHTTP migration [#5481]
  - KeeShare: Fix import crash [#5542]
  - macOS: Fix toolbar theming and breadcrumb display issues
    [#5482]
  - macOS: Fix file dialog randomly closing [#5479]
  - macOS: Fix being unable to select OPVault files for import
    [#5341]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1610452800">- Update to version 2.6.3
  - Added
  - Support Argon2id KDF [#5778]
  - Support XMLv2 key files [#5798]
  - Changed
  - Improve CSV Import/Export, include time fields and TOTP
    [#5346]
  - Support empty area dragging of the application window [#5860]
  - Display default Auto-Type sequence in preview pane [#5654]
  - Remove strict length limit on generated passwords [#5748]
  - Hide key file path by default when unlocking database [#5779]
  - Document browser extension use with Edge in managed mode
    [#5692]
  - Windows: Prevent clipboard history and cloud sync [#5853]
  - macOS: Update the application icon to Big Sur styling [#5851]
  - Fixed
  - Re-select previously selected entry on database unlock
    [#5559]
  - Properly save special character choice in password generator
    [#5610]
  - Fix crash in browser integration with multiple similar
    entries [#5653]
  - Remove offset on username field in classic theme [#5788]
  - Ensure entry history is copied when drag/dropping entries and
    groups [#5817]
  - Close modal dialogs when database is locked [#5820]
  - Prevent crash when KeeShare modifies an entry that is
    currently being edited [#5827]
  - Improve preview of entry attributes [#5834]
  - Always activate/focus database open dialog preventing mistype
    [#5878]
  - Reports: fix calculation of average password length [#5862]
  - Linux: Delay startup on login to correct tray icon issues
    [#5724]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1612267200">- Update to 2.6.4
  - Added
  - Automatically adapt to light/dark system theme changes
    (Windows/macOS only) [#6034]
  - Changed
  - Show window title as tooltip on system tray [#5948]
  - Compress Snap release as LZO for faster initial startup
    [#5877]
  - Password generator: Set maximum selectable password length to
    999 [#5937]
  - Fixed
  - Fix crash on app close when using SSH agent [#5935]
  - Fix KDF selection showing wrong item when using Argon2id
    [#5923]
  - Automatically close About dialog on database lock if it is
    still open [#5947]
  - Linux: Fix automatic launch at system startup with AppImages
    [#5901]
  - Linux: Fix click-to-move on empty area activating when using
    menus [#5971]
  - Linux: Try multiple times to show tray icon if tray is not
    ready yet [#5948]
  - macOS: Fix KeePassXC blocking clean shutdown [#6002]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1623931200">- Update to 2.6.6
  - Fixed
  - Fix focusing search when pressing hotkey #6603
  - Trim whitespace from TOTP key input prior to processing #6604
  - Fix building on macOS #6598
  - Resolve compiler warnings for unused return values #6607
- Changes from 2.6.5
  - Added
  - Show search bar when toolbar is hidden or in overflow #6279
  - Show countdown for clipboard clearing in status bar #6333
  - Command line option to lock all open databases #6511
  - Allow CSV import of bare TOTP secrets #6211
  - Retain file creation time when saving database #6576
  - Set permissions of saved attachments to be private to the
    current user #6363
  - OPVault: Use Text instead of Name for attribute names #6334
  - Changed
  - Reports: Allow resizing of reports columns #6435
  - Reports: Toggle showing expired entries #6534
  - Save Always on Top setting #6236
  - Password generator can exclude additional lookalike
    characters (6/G, 8/B) #6196
  - Fixed
  - Allow setting MSI properties in unattended install #6196
  - Update MainWindow minimum size to enable smaller verticle
    space #6196
  - Use application font size when setting default or monospace
    fonts #6332
  - Fix notes not clearing in entry preview panel in some cases
    [#6481]
  - macOS: Correct window activation when restoring from tray
    [#6575]
  - macOS: Better handling of minimize after unlock when using
    browser integration #6338
  - Linux: Start after the system tray is available on LXQt #6216
  - Linux: Allow selection of modal dialogs on X11 in Auto-Type
    [#6204]
  - KeeShare: prevent crash when file extension is missing #6174</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1623931201">- newer version of fedora now have the sane cmake macros too.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1634126400">- add https://patch-diff.githubusercontent.com/raw/keepassxreboot/keepassxc/pull/7045.patch
  and adapt it for 2.6.6: This allows us building with LTO</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1648123200">- Update to 2.7.0
  - Major Additions
  - Implement KDBX 4.1 [#7114]
  - Add direct write save option for cloud storage and GVFS
    [#6594]
  - Prevent screen capture on Windows and macOS [#6030]
  - Support quick unlock using Windows Hello [#7384]
  - Support quick unlock using Apple Watch [#5526]
  - Allow specifying database backup paths [#7035]
  - Add tag functionality [#6487][#7436][#7446]
  - Add password rating column to entry view [#4797]
  - Add group clone action [#6124]
  - Show modifications between entry history items [#6789]
  - Ability to bulk-delete and purge unused custom icons [#5970]
  - Support adding custom passphrase wordlists [#6799]
  - Support passphrase wordlists in numbered and PGP-signed
    formats [#6791]
  - Implement support for hardware keys via wireless NFC [#6895]
  - SSH Agent: Add support for OpenSSH 8.2 FIDO/U2F keys [#6371]
  - CLI: Implement attachment handling [#5538]
  - CLI: Add support for okon in offline HIBP checks [#5478]
  - CLI: Implement search command and remove locate [#6805]
  - CLI: Add db statistic output to db-info command [#7032]
  - CLI: Add -i/--include option to generate command. [#7112]
  - CLI: Add a -n (--notes) option to add and edit commands
    [#4646]
  - CLI: Add keyfile option to import command [#5402]
  - CLI: Adding a best option to clip to copy a password of the
    best match [#4489]
  - Browser: Add Microsoft Edge support on Linux [#7100]
  - Browser: Support native password generator from the extension
    [#6529]
  - Browser: Add group settings [#4180]
  - Browser: Add feature to ignore entries for HTTP-Auth Logins
    [#5394]
  - Browser: Support triggering Auto-Type from browser extension
    [#6272]
  - Browser: Add delete-entry command to API [#6899]
  - Browser: Add search 'by-path' url to API [#5535]
  - Browser: search for entries by UUID to API [#4763]
  - Browser: Support auto-download of favicon on entry addition
    [#7179]
  - Auto-Type: Major improvements to Auto-Type
    [#5864][#7463][#7435][#7391][#7129][#6400][#6364][#6361][#5283][#7507]
  - Auto-Type: Fix typing to virtual machines on Windows [#7366]
  - Auto-Type: Re-implement X11 keysym emulation [#7098]
  - Auto-Type: Support multiple Xkb layouts [#6247]
  - Auto-Type: Abort keystroke if modifiers held on X11
    [#6351][#6357]
  - Auto-Type: Add TOTP option to entry level Auto-Type menu
    [#6675]
  - FdoSecrets: Major Refactor and Code Consolidation
    [#5747][#5660][#7043][#6915]
  - FdoSecrets: Implement unlock before search [#6943]
  - Reports: Add browser statistics report [#7197]
  - Major Changes
  - Port crypto backend to Botan [#6209]
  - Improve attachment handling and security
    [#6606][#5034][#7083]
  - Allow selecting any open database in unlock dialog [#5427]
  - KeeShare: Remove checking signed container and QuaZip
    dependency [#7223]
  - Introduce security option to enable copy on double click
    (default off) [#6433]
  - Add 'delete entry without confirm' functionality [#5812]
  - Improve macOS and Windows platform integration [#5851]
  - Lock only the current database by default [#6652]
  - Show expired entries on DB unlock [#7290]
  - Update D-Bus adaptor interface class name to match definition
    file [#7523]
  - Other Changes and Fixes
  - Add countdown progress bar to TOTP preview [#6930]
  - Enter favicon url directly on icons page [#6614]
  - Set C++17 as standard in the build system [#7180]
  - Internalize ykcore into code base [#6654]
  - Transition to Visual Studio builds on Windows [#5874]
  - Ability to delete entries from health check reports [#6537]
  - Enhance remembering last-used directories [#6711]
  - Implement org.freedesktop.appearance.color-scheme support on
    Linux [#7422]
  - Support sorting HTML export [#7011]
  - Add display number of characters in passphrases [#5449]
  - Use Alt+Tab on macOS to switch between databases [#5407]
  - Add feature to sort groups using shortcut keys [#6999]
  - Add CTRL+Enter to apply password generator changes [#6414]
  - Display Database created timestamp on statistics report
    [#6876]
  - Browser: Improve best matching credentials setting [#6893]
  - SSH Agent: Use both Pageant and OpenSSH agent simultaneously
    on Windows [#6288]
  - SSH Agent: Allow using database path to resolve keys [#6365]
  - SSH Agent: Show correct error messages in main window [#7166]
  - Multiple fixes for MSI installer [#6630]
  - Fix tab order for CSV import dialog to match screen order
    [#7315]
  - Don't mark kdbx:// urls as invalid [#7221]
  - Make selected text copyable instead of copying password
    [#7209]
  - Detect timestamp resolution for CSV files [#7196]
  - Fix crash while downloading favicon [#7104]
  - Correct naming of newly generated keyx files [#7010]
  - Place the 'Recycle Bin' at the bottom of the list when groups
    are sorted [#7004]
  - Handle tilde with custom browser paths [#6659]
  - Don't scroll up when deleting an entry [#6833]
  - Set the MIME-Type to text/plain when using wl-copy on wayland
    [#6832]
  - Fix adaptive icon painting [#5989][#6033]
  - Fix favicon download from URL with non-standard port [#5509]
  - Ignore recycle bin on KeePassHTTP migration [#5481]
  - Fix keepassxc-cr-recovery utility [#7521]
  - Fix Auto-Type not working when audio recording indicator is
    active on macOS 12.2+ [#7526]
- drop 7045.patch
- adapt build requires to the new version</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1649505600">- update to 2.7.1:
  * Show when tags are changed in entry history
  * Improve tags editing and allow spaces in tags
  * Improve layout of entry preview panel
  * Incorporate patches to support Flatpak distribution
  * Add expiration presets for 12 and 24 hours
  * Fix crash when building history change list
  * Fix hiding password on database unlock
  * Fix AES KDF slow transform speed
  * Auto-Type: Correct timing issue on macOS and Linux that prevented typing
  * Auto-Type: Fix use of Ctrl/Alt/Shift/Win modifiers on Windows
  * Auto-Type: Reduce/eliminate delay when searching for entries
  * Auto-Type: Map ASCII dead keys on Linux for international keyboards
  * CLI: Fix detection of hardware keys (YubiKey)
  * CLI: Add missing parameter -c to add/edit entries command
  * Secret Service: Fix crash when multiple prompts are shown
  * SSH Agent: Fix default agent selection on Windows
  * Fix database unlock dialog not being the top window on Linux
  * Fix drag/drop entries between tabs on Wayland
  * Fix compiling with minizip-ng</changelog>
</package>
<package pkgid="c77f2a5d1b38013c0f23b22c00d50271f3a420f1fc5232381af0459338e8f62e" name="keepassxc" arch="s390x">
  <version epoch="0" ver="2.7.1" rel="bp154.3.3.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1567425600">- Disable lto for keepassxc. It causes a build error.
- Provide/Obsolete keepassx. Keepassx still depends on Qt4 and shall be
  dropped shortly. (boo#1148401)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1572091200">- update to 2.5.0
  https://github.com/keepassxreboot/keepassxc/releases/tag/2.5.0</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1575892800">- Update to version 2.5.1:
  * https://github.com/keepassxreboot/keepassxc/releases/tag/2.5.1</changelog>
  <changelog author="droidmonkey &lt;support@dmapps.us&gt;" date="1578139200">- Update to version 2.5.2:
  * https://github.com/keepassxreboot/keepassxc/releases/tag/2.5.2</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1579435200">- Update to version 2.5.3:
  * https://github.com/keepassxreboot/keepassxc/releases/tag/2.5.3</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1582891200">- Clicking the tray icon momentarily shows and immediately hides window. Make
  it stick (boo#1165293).
- Fix window not minimizing to tray.
  + add keepassxc-Fix-window-hiding-after-shown.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1586433600">- Update to version 2.5.4:
  * https://github.com/keepassxreboot/keepassxc/releases/tag/2.5.4</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1589198400">- Drop build/requirement on libgcrypt20-hmac boo#1171438</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1594123200">- Update to version 2.6.0:
  * https://keepassxc.org/blog/2020-07-07-2.6.0-released/
  * https://github.com/keepassxreboot/keepassxc/releases/tag/2.6.0
- drop keepassxc-Fix-window-hiding-after-shown.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1594123201">- add BR for asciidoctor</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1594209600">- add _constraints with 6GB to fix build on ppc64 hopefully</changelog>
  <changelog author="Carsten Ziepke &lt;kieltux@gmail.com&gt;" date="1598788800">- Update to version 2.6.1:
  - Add menu entries for auto-typing only username or only
    password [#4891]
  - Browser: Add command for retrieving current TOTP [#5278]
  - Improve man pages [#5010]
  - Linux: Support Xfce screen lock signals [#4971]
  - Linux: Add OARS metadata to AppStream markup [#5031]
  - SSH Agent: Substitute tilde with %USERPROFILE% on Windows
    [#5116]
  - Improve password generator UI and UX [#5129]
  - Do not prompt to restart if switching the theme back and
    forth [#5084]
  - Change actions for F1, F2, and F3 keys [#5082]
  - Skip referenced passwords in health check report [#5056]
  - Check system-wide Qt translations directory for downstream
  - translations packaging [#5064]
  - macOS: Change password visibility toggle shortcut to Ctrl+H to
  - avoid conflict with system shortcut [#5114]
  - Browser: Only display domain name in browser access confirm
    dialog to avoid overly wide window sizes [#5214]
  - Fix clipboard not being cleared when database is locked while
    timeout is still active [#5184]
  - Fix list of previous databases not being cleared in some
    cases [#5123]
  - Fix saving of non-data changes on database lock [#5210]
  - Fix search results banner theming [#5197]
  - Don?t enforce theme palette in Classic theme mode and add hover
    effect for buttons [#5122, #5267]
  - Fix label clipping in settings on high-DPI screens [#5227]
  - Fix excessive memory usage by icons on systems with high-DPI
    screens [#5266]
  - Fix crash if number of TOTP digits exceeds ten [#5106]
  - Fix slot detection when first YubiKey is configured on the second
    slot [#5004]
  - Prevent crash if focus widget gets deleted during saving [#5005]
  - Always show buttons for opening or saving attachments [#4956]
  - Update link to Auto-Type help [#5228]
  - Fix build errors with Ninja [#5121]
  - CLI: Fix db-info command wrongly labelled as db-show in
    usage listing [#5140]
  - Windows: Use Classic theme by default if high-contrast mode
    is on [#5191]
  - Linux: Add workaround for qt5ct bug, causing icons not to show
    up [#5011]
  - Linux: Correct high-DPI display by not allowing fractional
    scaling [#5185]
  - Browser: Consider subdomain and path when requesting only
    ?best-matching credentials? [#4832]
  - SSH Agent: Always forget all keys on lock [#5115]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1603368000">- Update to version 2.6.2
  - Added
  - Add option to keep window always on top to view menu [#5542]
  - Move show/hide usernames and passwords to view menu [#5542]
  - Add command line options and environment variables for
    changing the config locations [#5452]
  - Include TOTP settings in CSV import/export and add support
    for ISO datetimes [#5346]
  - Changed
  - Mask sensitive information in command execution confirmation
    prompt [#5542]
  - SSH Agent: Avoid shortcut conflict on macOS by changing "Add
    key" to Ctrl+H on all platforms [#5484]
  - Fixed
  - Prevent data loss with drag and drop between databases
    [#5536]
  - Fix crash when toggling Capslock rapidly [#5545]
  - Don't mark URL references as invalid URL [#5380]
  - Reset entry preview after search [#5483]
  - Set Qt::Dialog flag on database open dialog [#5356]
  - Fix sorting of database report columns [#5426]
  - Fix IfDevice matching logic [#5344]
  - Fix layout issues and a stray scrollbar appearing on top of
    the entry edit screen [#5424]
  - Fix tabbing into the notes field [#5424]
  - Fix password generator ignoring settings on load [#5340]
  - Restore natural entry sort order on application load [#5438]
  - Fix paperclip and TOTP columns not saving state [#5327]
  - Enforce fixed password font in entry preview [#5454]
  - Add scrollbar when new database wizard exceeds screen size
    [#5560]
  - Do not mark database as modified when viewing Auto-Type
    associations [#5542]
  - CLI: Fix two heap-use-after-free crashes [#5368, #5470]
  - Browser: Fix key exchange not working with multiple
    simultaneous users on Windows [#5485]
  - Browser: Fix entry retrieval when "only best matching" is
    enabled [#5316]
  - Browser: Ignore recycle bin on KeePassHTTP migration [#5481]
  - KeeShare: Fix import crash [#5542]
  - macOS: Fix toolbar theming and breadcrumb display issues
    [#5482]
  - macOS: Fix file dialog randomly closing [#5479]
  - macOS: Fix being unable to select OPVault files for import
    [#5341]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1610452800">- Update to version 2.6.3
  - Added
  - Support Argon2id KDF [#5778]
  - Support XMLv2 key files [#5798]
  - Changed
  - Improve CSV Import/Export, include time fields and TOTP
    [#5346]
  - Support empty area dragging of the application window [#5860]
  - Display default Auto-Type sequence in preview pane [#5654]
  - Remove strict length limit on generated passwords [#5748]
  - Hide key file path by default when unlocking database [#5779]
  - Document browser extension use with Edge in managed mode
    [#5692]
  - Windows: Prevent clipboard history and cloud sync [#5853]
  - macOS: Update the application icon to Big Sur styling [#5851]
  - Fixed
  - Re-select previously selected entry on database unlock
    [#5559]
  - Properly save special character choice in password generator
    [#5610]
  - Fix crash in browser integration with multiple similar
    entries [#5653]
  - Remove offset on username field in classic theme [#5788]
  - Ensure entry history is copied when drag/dropping entries and
    groups [#5817]
  - Close modal dialogs when database is locked [#5820]
  - Prevent crash when KeeShare modifies an entry that is
    currently being edited [#5827]
  - Improve preview of entry attributes [#5834]
  - Always activate/focus database open dialog preventing mistype
    [#5878]
  - Reports: fix calculation of average password length [#5862]
  - Linux: Delay startup on login to correct tray icon issues
    [#5724]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1612267200">- Update to 2.6.4
  - Added
  - Automatically adapt to light/dark system theme changes
    (Windows/macOS only) [#6034]
  - Changed
  - Show window title as tooltip on system tray [#5948]
  - Compress Snap release as LZO for faster initial startup
    [#5877]
  - Password generator: Set maximum selectable password length to
    999 [#5937]
  - Fixed
  - Fix crash on app close when using SSH agent [#5935]
  - Fix KDF selection showing wrong item when using Argon2id
    [#5923]
  - Automatically close About dialog on database lock if it is
    still open [#5947]
  - Linux: Fix automatic launch at system startup with AppImages
    [#5901]
  - Linux: Fix click-to-move on empty area activating when using
    menus [#5971]
  - Linux: Try multiple times to show tray icon if tray is not
    ready yet [#5948]
  - macOS: Fix KeePassXC blocking clean shutdown [#6002]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1623931200">- Update to 2.6.6
  - Fixed
  - Fix focusing search when pressing hotkey #6603
  - Trim whitespace from TOTP key input prior to processing #6604
  - Fix building on macOS #6598
  - Resolve compiler warnings for unused return values #6607
- Changes from 2.6.5
  - Added
  - Show search bar when toolbar is hidden or in overflow #6279
  - Show countdown for clipboard clearing in status bar #6333
  - Command line option to lock all open databases #6511
  - Allow CSV import of bare TOTP secrets #6211
  - Retain file creation time when saving database #6576
  - Set permissions of saved attachments to be private to the
    current user #6363
  - OPVault: Use Text instead of Name for attribute names #6334
  - Changed
  - Reports: Allow resizing of reports columns #6435
  - Reports: Toggle showing expired entries #6534
  - Save Always on Top setting #6236
  - Password generator can exclude additional lookalike
    characters (6/G, 8/B) #6196
  - Fixed
  - Allow setting MSI properties in unattended install #6196
  - Update MainWindow minimum size to enable smaller verticle
    space #6196
  - Use application font size when setting default or monospace
    fonts #6332
  - Fix notes not clearing in entry preview panel in some cases
    [#6481]
  - macOS: Correct window activation when restoring from tray
    [#6575]
  - macOS: Better handling of minimize after unlock when using
    browser integration #6338
  - Linux: Start after the system tray is available on LXQt #6216
  - Linux: Allow selection of modal dialogs on X11 in Auto-Type
    [#6204]
  - KeeShare: prevent crash when file extension is missing #6174</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1623931201">- newer version of fedora now have the sane cmake macros too.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1634126400">- add https://patch-diff.githubusercontent.com/raw/keepassxreboot/keepassxc/pull/7045.patch
  and adapt it for 2.6.6: This allows us building with LTO</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1648123200">- Update to 2.7.0
  - Major Additions
  - Implement KDBX 4.1 [#7114]
  - Add direct write save option for cloud storage and GVFS
    [#6594]
  - Prevent screen capture on Windows and macOS [#6030]
  - Support quick unlock using Windows Hello [#7384]
  - Support quick unlock using Apple Watch [#5526]
  - Allow specifying database backup paths [#7035]
  - Add tag functionality [#6487][#7436][#7446]
  - Add password rating column to entry view [#4797]
  - Add group clone action [#6124]
  - Show modifications between entry history items [#6789]
  - Ability to bulk-delete and purge unused custom icons [#5970]
  - Support adding custom passphrase wordlists [#6799]
  - Support passphrase wordlists in numbered and PGP-signed
    formats [#6791]
  - Implement support for hardware keys via wireless NFC [#6895]
  - SSH Agent: Add support for OpenSSH 8.2 FIDO/U2F keys [#6371]
  - CLI: Implement attachment handling [#5538]
  - CLI: Add support for okon in offline HIBP checks [#5478]
  - CLI: Implement search command and remove locate [#6805]
  - CLI: Add db statistic output to db-info command [#7032]
  - CLI: Add -i/--include option to generate command. [#7112]
  - CLI: Add a -n (--notes) option to add and edit commands
    [#4646]
  - CLI: Add keyfile option to import command [#5402]
  - CLI: Adding a best option to clip to copy a password of the
    best match [#4489]
  - Browser: Add Microsoft Edge support on Linux [#7100]
  - Browser: Support native password generator from the extension
    [#6529]
  - Browser: Add group settings [#4180]
  - Browser: Add feature to ignore entries for HTTP-Auth Logins
    [#5394]
  - Browser: Support triggering Auto-Type from browser extension
    [#6272]
  - Browser: Add delete-entry command to API [#6899]
  - Browser: Add search 'by-path' url to API [#5535]
  - Browser: search for entries by UUID to API [#4763]
  - Browser: Support auto-download of favicon on entry addition
    [#7179]
  - Auto-Type: Major improvements to Auto-Type
    [#5864][#7463][#7435][#7391][#7129][#6400][#6364][#6361][#5283][#7507]
  - Auto-Type: Fix typing to virtual machines on Windows [#7366]
  - Auto-Type: Re-implement X11 keysym emulation [#7098]
  - Auto-Type: Support multiple Xkb layouts [#6247]
  - Auto-Type: Abort keystroke if modifiers held on X11
    [#6351][#6357]
  - Auto-Type: Add TOTP option to entry level Auto-Type menu
    [#6675]
  - FdoSecrets: Major Refactor and Code Consolidation
    [#5747][#5660][#7043][#6915]
  - FdoSecrets: Implement unlock before search [#6943]
  - Reports: Add browser statistics report [#7197]
  - Major Changes
  - Port crypto backend to Botan [#6209]
  - Improve attachment handling and security
    [#6606][#5034][#7083]
  - Allow selecting any open database in unlock dialog [#5427]
  - KeeShare: Remove checking signed container and QuaZip
    dependency [#7223]
  - Introduce security option to enable copy on double click
    (default off) [#6433]
  - Add 'delete entry without confirm' functionality [#5812]
  - Improve macOS and Windows platform integration [#5851]
  - Lock only the current database by default [#6652]
  - Show expired entries on DB unlock [#7290]
  - Update D-Bus adaptor interface class name to match definition
    file [#7523]
  - Other Changes and Fixes
  - Add countdown progress bar to TOTP preview [#6930]
  - Enter favicon url directly on icons page [#6614]
  - Set C++17 as standard in the build system [#7180]
  - Internalize ykcore into code base [#6654]
  - Transition to Visual Studio builds on Windows [#5874]
  - Ability to delete entries from health check reports [#6537]
  - Enhance remembering last-used directories [#6711]
  - Implement org.freedesktop.appearance.color-scheme support on
    Linux [#7422]
  - Support sorting HTML export [#7011]
  - Add display number of characters in passphrases [#5449]
  - Use Alt+Tab on macOS to switch between databases [#5407]
  - Add feature to sort groups using shortcut keys [#6999]
  - Add CTRL+Enter to apply password generator changes [#6414]
  - Display Database created timestamp on statistics report
    [#6876]
  - Browser: Improve best matching credentials setting [#6893]
  - SSH Agent: Use both Pageant and OpenSSH agent simultaneously
    on Windows [#6288]
  - SSH Agent: Allow using database path to resolve keys [#6365]
  - SSH Agent: Show correct error messages in main window [#7166]
  - Multiple fixes for MSI installer [#6630]
  - Fix tab order for CSV import dialog to match screen order
    [#7315]
  - Don't mark kdbx:// urls as invalid [#7221]
  - Make selected text copyable instead of copying password
    [#7209]
  - Detect timestamp resolution for CSV files [#7196]
  - Fix crash while downloading favicon [#7104]
  - Correct naming of newly generated keyx files [#7010]
  - Place the 'Recycle Bin' at the bottom of the list when groups
    are sorted [#7004]
  - Handle tilde with custom browser paths [#6659]
  - Don't scroll up when deleting an entry [#6833]
  - Set the MIME-Type to text/plain when using wl-copy on wayland
    [#6832]
  - Fix adaptive icon painting [#5989][#6033]
  - Fix favicon download from URL with non-standard port [#5509]
  - Ignore recycle bin on KeePassHTTP migration [#5481]
  - Fix keepassxc-cr-recovery utility [#7521]
  - Fix Auto-Type not working when audio recording indicator is
    active on macOS 12.2+ [#7526]
- drop 7045.patch
- adapt build requires to the new version</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1649505600">- update to 2.7.1:
  * Show when tags are changed in entry history
  * Improve tags editing and allow spaces in tags
  * Improve layout of entry preview panel
  * Incorporate patches to support Flatpak distribution
  * Add expiration presets for 12 and 24 hours
  * Fix crash when building history change list
  * Fix hiding password on database unlock
  * Fix AES KDF slow transform speed
  * Auto-Type: Correct timing issue on macOS and Linux that prevented typing
  * Auto-Type: Fix use of Ctrl/Alt/Shift/Win modifiers on Windows
  * Auto-Type: Reduce/eliminate delay when searching for entries
  * Auto-Type: Map ASCII dead keys on Linux for international keyboards
  * CLI: Fix detection of hardware keys (YubiKey)
  * CLI: Add missing parameter -c to add/edit entries command
  * Secret Service: Fix crash when multiple prompts are shown
  * SSH Agent: Fix default agent selection on Windows
  * Fix database unlock dialog not being the top window on Linux
  * Fix drag/drop entries between tabs on Wayland
  * Fix compiling with minizip-ng</changelog>
</package>
<package pkgid="16bf889637d42642bf8779c1df0f2ffb5c81a5327ba09997ee6b11f794934c2b" name="keepassxc" arch="src">
  <version epoch="0" ver="2.7.1" rel="bp154.3.3.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1567425600">- Disable lto for keepassxc. It causes a build error.
- Provide/Obsolete keepassx. Keepassx still depends on Qt4 and shall be
  dropped shortly. (boo#1148401)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1572091200">- update to 2.5.0
  https://github.com/keepassxreboot/keepassxc/releases/tag/2.5.0</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1575892800">- Update to version 2.5.1:
  * https://github.com/keepassxreboot/keepassxc/releases/tag/2.5.1</changelog>
  <changelog author="droidmonkey &lt;support@dmapps.us&gt;" date="1578139200">- Update to version 2.5.2:
  * https://github.com/keepassxreboot/keepassxc/releases/tag/2.5.2</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1579435200">- Update to version 2.5.3:
  * https://github.com/keepassxreboot/keepassxc/releases/tag/2.5.3</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1582891200">- Clicking the tray icon momentarily shows and immediately hides window. Make
  it stick (boo#1165293).
- Fix window not minimizing to tray.
  + add keepassxc-Fix-window-hiding-after-shown.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1586433600">- Update to version 2.5.4:
  * https://github.com/keepassxreboot/keepassxc/releases/tag/2.5.4</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1589198400">- Drop build/requirement on libgcrypt20-hmac boo#1171438</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1594123200">- Update to version 2.6.0:
  * https://keepassxc.org/blog/2020-07-07-2.6.0-released/
  * https://github.com/keepassxreboot/keepassxc/releases/tag/2.6.0
- drop keepassxc-Fix-window-hiding-after-shown.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1594123201">- add BR for asciidoctor</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1594209600">- add _constraints with 6GB to fix build on ppc64 hopefully</changelog>
  <changelog author="Carsten Ziepke &lt;kieltux@gmail.com&gt;" date="1598788800">- Update to version 2.6.1:
  - Add menu entries for auto-typing only username or only
    password [#4891]
  - Browser: Add command for retrieving current TOTP [#5278]
  - Improve man pages [#5010]
  - Linux: Support Xfce screen lock signals [#4971]
  - Linux: Add OARS metadata to AppStream markup [#5031]
  - SSH Agent: Substitute tilde with %USERPROFILE% on Windows
    [#5116]
  - Improve password generator UI and UX [#5129]
  - Do not prompt to restart if switching the theme back and
    forth [#5084]
  - Change actions for F1, F2, and F3 keys [#5082]
  - Skip referenced passwords in health check report [#5056]
  - Check system-wide Qt translations directory for downstream
  - translations packaging [#5064]
  - macOS: Change password visibility toggle shortcut to Ctrl+H to
  - avoid conflict with system shortcut [#5114]
  - Browser: Only display domain name in browser access confirm
    dialog to avoid overly wide window sizes [#5214]
  - Fix clipboard not being cleared when database is locked while
    timeout is still active [#5184]
  - Fix list of previous databases not being cleared in some
    cases [#5123]
  - Fix saving of non-data changes on database lock [#5210]
  - Fix search results banner theming [#5197]
  - Don?t enforce theme palette in Classic theme mode and add hover
    effect for buttons [#5122, #5267]
  - Fix label clipping in settings on high-DPI screens [#5227]
  - Fix excessive memory usage by icons on systems with high-DPI
    screens [#5266]
  - Fix crash if number of TOTP digits exceeds ten [#5106]
  - Fix slot detection when first YubiKey is configured on the second
    slot [#5004]
  - Prevent crash if focus widget gets deleted during saving [#5005]
  - Always show buttons for opening or saving attachments [#4956]
  - Update link to Auto-Type help [#5228]
  - Fix build errors with Ninja [#5121]
  - CLI: Fix db-info command wrongly labelled as db-show in
    usage listing [#5140]
  - Windows: Use Classic theme by default if high-contrast mode
    is on [#5191]
  - Linux: Add workaround for qt5ct bug, causing icons not to show
    up [#5011]
  - Linux: Correct high-DPI display by not allowing fractional
    scaling [#5185]
  - Browser: Consider subdomain and path when requesting only
    ?best-matching credentials? [#4832]
  - SSH Agent: Always forget all keys on lock [#5115]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1603368000">- Update to version 2.6.2
  - Added
  - Add option to keep window always on top to view menu [#5542]
  - Move show/hide usernames and passwords to view menu [#5542]
  - Add command line options and environment variables for
    changing the config locations [#5452]
  - Include TOTP settings in CSV import/export and add support
    for ISO datetimes [#5346]
  - Changed
  - Mask sensitive information in command execution confirmation
    prompt [#5542]
  - SSH Agent: Avoid shortcut conflict on macOS by changing "Add
    key" to Ctrl+H on all platforms [#5484]
  - Fixed
  - Prevent data loss with drag and drop between databases
    [#5536]
  - Fix crash when toggling Capslock rapidly [#5545]
  - Don't mark URL references as invalid URL [#5380]
  - Reset entry preview after search [#5483]
  - Set Qt::Dialog flag on database open dialog [#5356]
  - Fix sorting of database report columns [#5426]
  - Fix IfDevice matching logic [#5344]
  - Fix layout issues and a stray scrollbar appearing on top of
    the entry edit screen [#5424]
  - Fix tabbing into the notes field [#5424]
  - Fix password generator ignoring settings on load [#5340]
  - Restore natural entry sort order on application load [#5438]
  - Fix paperclip and TOTP columns not saving state [#5327]
  - Enforce fixed password font in entry preview [#5454]
  - Add scrollbar when new database wizard exceeds screen size
    [#5560]
  - Do not mark database as modified when viewing Auto-Type
    associations [#5542]
  - CLI: Fix two heap-use-after-free crashes [#5368, #5470]
  - Browser: Fix key exchange not working with multiple
    simultaneous users on Windows [#5485]
  - Browser: Fix entry retrieval when "only best matching" is
    enabled [#5316]
  - Browser: Ignore recycle bin on KeePassHTTP migration [#5481]
  - KeeShare: Fix import crash [#5542]
  - macOS: Fix toolbar theming and breadcrumb display issues
    [#5482]
  - macOS: Fix file dialog randomly closing [#5479]
  - macOS: Fix being unable to select OPVault files for import
    [#5341]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1610452800">- Update to version 2.6.3
  - Added
  - Support Argon2id KDF [#5778]
  - Support XMLv2 key files [#5798]
  - Changed
  - Improve CSV Import/Export, include time fields and TOTP
    [#5346]
  - Support empty area dragging of the application window [#5860]
  - Display default Auto-Type sequence in preview pane [#5654]
  - Remove strict length limit on generated passwords [#5748]
  - Hide key file path by default when unlocking database [#5779]
  - Document browser extension use with Edge in managed mode
    [#5692]
  - Windows: Prevent clipboard history and cloud sync [#5853]
  - macOS: Update the application icon to Big Sur styling [#5851]
  - Fixed
  - Re-select previously selected entry on database unlock
    [#5559]
  - Properly save special character choice in password generator
    [#5610]
  - Fix crash in browser integration with multiple similar
    entries [#5653]
  - Remove offset on username field in classic theme [#5788]
  - Ensure entry history is copied when drag/dropping entries and
    groups [#5817]
  - Close modal dialogs when database is locked [#5820]
  - Prevent crash when KeeShare modifies an entry that is
    currently being edited [#5827]
  - Improve preview of entry attributes [#5834]
  - Always activate/focus database open dialog preventing mistype
    [#5878]
  - Reports: fix calculation of average password length [#5862]
  - Linux: Delay startup on login to correct tray icon issues
    [#5724]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1612267200">- Update to 2.6.4
  - Added
  - Automatically adapt to light/dark system theme changes
    (Windows/macOS only) [#6034]
  - Changed
  - Show window title as tooltip on system tray [#5948]
  - Compress Snap release as LZO for faster initial startup
    [#5877]
  - Password generator: Set maximum selectable password length to
    999 [#5937]
  - Fixed
  - Fix crash on app close when using SSH agent [#5935]
  - Fix KDF selection showing wrong item when using Argon2id
    [#5923]
  - Automatically close About dialog on database lock if it is
    still open [#5947]
  - Linux: Fix automatic launch at system startup with AppImages
    [#5901]
  - Linux: Fix click-to-move on empty area activating when using
    menus [#5971]
  - Linux: Try multiple times to show tray icon if tray is not
    ready yet [#5948]
  - macOS: Fix KeePassXC blocking clean shutdown [#6002]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1623931200">- Update to 2.6.6
  - Fixed
  - Fix focusing search when pressing hotkey #6603
  - Trim whitespace from TOTP key input prior to processing #6604
  - Fix building on macOS #6598
  - Resolve compiler warnings for unused return values #6607
- Changes from 2.6.5
  - Added
  - Show search bar when toolbar is hidden or in overflow #6279
  - Show countdown for clipboard clearing in status bar #6333
  - Command line option to lock all open databases #6511
  - Allow CSV import of bare TOTP secrets #6211
  - Retain file creation time when saving database #6576
  - Set permissions of saved attachments to be private to the
    current user #6363
  - OPVault: Use Text instead of Name for attribute names #6334
  - Changed
  - Reports: Allow resizing of reports columns #6435
  - Reports: Toggle showing expired entries #6534
  - Save Always on Top setting #6236
  - Password generator can exclude additional lookalike
    characters (6/G, 8/B) #6196
  - Fixed
  - Allow setting MSI properties in unattended install #6196
  - Update MainWindow minimum size to enable smaller verticle
    space #6196
  - Use application font size when setting default or monospace
    fonts #6332
  - Fix notes not clearing in entry preview panel in some cases
    [#6481]
  - macOS: Correct window activation when restoring from tray
    [#6575]
  - macOS: Better handling of minimize after unlock when using
    browser integration #6338
  - Linux: Start after the system tray is available on LXQt #6216
  - Linux: Allow selection of modal dialogs on X11 in Auto-Type
    [#6204]
  - KeeShare: prevent crash when file extension is missing #6174</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1623931201">- newer version of fedora now have the sane cmake macros too.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1634126400">- add https://patch-diff.githubusercontent.com/raw/keepassxreboot/keepassxc/pull/7045.patch
  and adapt it for 2.6.6: This allows us building with LTO</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1648123200">- Update to 2.7.0
  - Major Additions
  - Implement KDBX 4.1 [#7114]
  - Add direct write save option for cloud storage and GVFS
    [#6594]
  - Prevent screen capture on Windows and macOS [#6030]
  - Support quick unlock using Windows Hello [#7384]
  - Support quick unlock using Apple Watch [#5526]
  - Allow specifying database backup paths [#7035]
  - Add tag functionality [#6487][#7436][#7446]
  - Add password rating column to entry view [#4797]
  - Add group clone action [#6124]
  - Show modifications between entry history items [#6789]
  - Ability to bulk-delete and purge unused custom icons [#5970]
  - Support adding custom passphrase wordlists [#6799]
  - Support passphrase wordlists in numbered and PGP-signed
    formats [#6791]
  - Implement support for hardware keys via wireless NFC [#6895]
  - SSH Agent: Add support for OpenSSH 8.2 FIDO/U2F keys [#6371]
  - CLI: Implement attachment handling [#5538]
  - CLI: Add support for okon in offline HIBP checks [#5478]
  - CLI: Implement search command and remove locate [#6805]
  - CLI: Add db statistic output to db-info command [#7032]
  - CLI: Add -i/--include option to generate command. [#7112]
  - CLI: Add a -n (--notes) option to add and edit commands
    [#4646]
  - CLI: Add keyfile option to import command [#5402]
  - CLI: Adding a best option to clip to copy a password of the
    best match [#4489]
  - Browser: Add Microsoft Edge support on Linux [#7100]
  - Browser: Support native password generator from the extension
    [#6529]
  - Browser: Add group settings [#4180]
  - Browser: Add feature to ignore entries for HTTP-Auth Logins
    [#5394]
  - Browser: Support triggering Auto-Type from browser extension
    [#6272]
  - Browser: Add delete-entry command to API [#6899]
  - Browser: Add search 'by-path' url to API [#5535]
  - Browser: search for entries by UUID to API [#4763]
  - Browser: Support auto-download of favicon on entry addition
    [#7179]
  - Auto-Type: Major improvements to Auto-Type
    [#5864][#7463][#7435][#7391][#7129][#6400][#6364][#6361][#5283][#7507]
  - Auto-Type: Fix typing to virtual machines on Windows [#7366]
  - Auto-Type: Re-implement X11 keysym emulation [#7098]
  - Auto-Type: Support multiple Xkb layouts [#6247]
  - Auto-Type: Abort keystroke if modifiers held on X11
    [#6351][#6357]
  - Auto-Type: Add TOTP option to entry level Auto-Type menu
    [#6675]
  - FdoSecrets: Major Refactor and Code Consolidation
    [#5747][#5660][#7043][#6915]
  - FdoSecrets: Implement unlock before search [#6943]
  - Reports: Add browser statistics report [#7197]
  - Major Changes
  - Port crypto backend to Botan [#6209]
  - Improve attachment handling and security
    [#6606][#5034][#7083]
  - Allow selecting any open database in unlock dialog [#5427]
  - KeeShare: Remove checking signed container and QuaZip
    dependency [#7223]
  - Introduce security option to enable copy on double click
    (default off) [#6433]
  - Add 'delete entry without confirm' functionality [#5812]
  - Improve macOS and Windows platform integration [#5851]
  - Lock only the current database by default [#6652]
  - Show expired entries on DB unlock [#7290]
  - Update D-Bus adaptor interface class name to match definition
    file [#7523]
  - Other Changes and Fixes
  - Add countdown progress bar to TOTP preview [#6930]
  - Enter favicon url directly on icons page [#6614]
  - Set C++17 as standard in the build system [#7180]
  - Internalize ykcore into code base [#6654]
  - Transition to Visual Studio builds on Windows [#5874]
  - Ability to delete entries from health check reports [#6537]
  - Enhance remembering last-used directories [#6711]
  - Implement org.freedesktop.appearance.color-scheme support on
    Linux [#7422]
  - Support sorting HTML export [#7011]
  - Add display number of characters in passphrases [#5449]
  - Use Alt+Tab on macOS to switch between databases [#5407]
  - Add feature to sort groups using shortcut keys [#6999]
  - Add CTRL+Enter to apply password generator changes [#6414]
  - Display Database created timestamp on statistics report
    [#6876]
  - Browser: Improve best matching credentials setting [#6893]
  - SSH Agent: Use both Pageant and OpenSSH agent simultaneously
    on Windows [#6288]
  - SSH Agent: Allow using database path to resolve keys [#6365]
  - SSH Agent: Show correct error messages in main window [#7166]
  - Multiple fixes for MSI installer [#6630]
  - Fix tab order for CSV import dialog to match screen order
    [#7315]
  - Don't mark kdbx:// urls as invalid [#7221]
  - Make selected text copyable instead of copying password
    [#7209]
  - Detect timestamp resolution for CSV files [#7196]
  - Fix crash while downloading favicon [#7104]
  - Correct naming of newly generated keyx files [#7010]
  - Place the 'Recycle Bin' at the bottom of the list when groups
    are sorted [#7004]
  - Handle tilde with custom browser paths [#6659]
  - Don't scroll up when deleting an entry [#6833]
  - Set the MIME-Type to text/plain when using wl-copy on wayland
    [#6832]
  - Fix adaptive icon painting [#5989][#6033]
  - Fix favicon download from URL with non-standard port [#5509]
  - Ignore recycle bin on KeePassHTTP migration [#5481]
  - Fix keepassxc-cr-recovery utility [#7521]
  - Fix Auto-Type not working when audio recording indicator is
    active on macOS 12.2+ [#7526]
- drop 7045.patch
- adapt build requires to the new version</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1649505600">- update to 2.7.1:
  * Show when tags are changed in entry history
  * Improve tags editing and allow spaces in tags
  * Improve layout of entry preview panel
  * Incorporate patches to support Flatpak distribution
  * Add expiration presets for 12 and 24 hours
  * Fix crash when building history change list
  * Fix hiding password on database unlock
  * Fix AES KDF slow transform speed
  * Auto-Type: Correct timing issue on macOS and Linux that prevented typing
  * Auto-Type: Fix use of Ctrl/Alt/Shift/Win modifiers on Windows
  * Auto-Type: Reduce/eliminate delay when searching for entries
  * Auto-Type: Map ASCII dead keys on Linux for international keyboards
  * CLI: Fix detection of hardware keys (YubiKey)
  * CLI: Add missing parameter -c to add/edit entries command
  * Secret Service: Fix crash when multiple prompts are shown
  * SSH Agent: Fix default agent selection on Windows
  * Fix database unlock dialog not being the top window on Linux
  * Fix drag/drop entries between tabs on Wayland
  * Fix compiling with minizip-ng</changelog>
</package>
<package pkgid="37d1edf7d3ee1f3df71abba2d2dba25e662464d4edca0669824b2fd936eb5ee4" name="keepassxc" arch="x86_64">
  <version epoch="0" ver="2.7.1" rel="bp154.3.3.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1567425600">- Disable lto for keepassxc. It causes a build error.
- Provide/Obsolete keepassx. Keepassx still depends on Qt4 and shall be
  dropped shortly. (boo#1148401)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1572091200">- update to 2.5.0
  https://github.com/keepassxreboot/keepassxc/releases/tag/2.5.0</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1575892800">- Update to version 2.5.1:
  * https://github.com/keepassxreboot/keepassxc/releases/tag/2.5.1</changelog>
  <changelog author="droidmonkey &lt;support@dmapps.us&gt;" date="1578139200">- Update to version 2.5.2:
  * https://github.com/keepassxreboot/keepassxc/releases/tag/2.5.2</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1579435200">- Update to version 2.5.3:
  * https://github.com/keepassxreboot/keepassxc/releases/tag/2.5.3</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1582891200">- Clicking the tray icon momentarily shows and immediately hides window. Make
  it stick (boo#1165293).
- Fix window not minimizing to tray.
  + add keepassxc-Fix-window-hiding-after-shown.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1586433600">- Update to version 2.5.4:
  * https://github.com/keepassxreboot/keepassxc/releases/tag/2.5.4</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1589198400">- Drop build/requirement on libgcrypt20-hmac boo#1171438</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1594123200">- Update to version 2.6.0:
  * https://keepassxc.org/blog/2020-07-07-2.6.0-released/
  * https://github.com/keepassxreboot/keepassxc/releases/tag/2.6.0
- drop keepassxc-Fix-window-hiding-after-shown.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1594123201">- add BR for asciidoctor</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1594209600">- add _constraints with 6GB to fix build on ppc64 hopefully</changelog>
  <changelog author="Carsten Ziepke &lt;kieltux@gmail.com&gt;" date="1598788800">- Update to version 2.6.1:
  - Add menu entries for auto-typing only username or only
    password [#4891]
  - Browser: Add command for retrieving current TOTP [#5278]
  - Improve man pages [#5010]
  - Linux: Support Xfce screen lock signals [#4971]
  - Linux: Add OARS metadata to AppStream markup [#5031]
  - SSH Agent: Substitute tilde with %USERPROFILE% on Windows
    [#5116]
  - Improve password generator UI and UX [#5129]
  - Do not prompt to restart if switching the theme back and
    forth [#5084]
  - Change actions for F1, F2, and F3 keys [#5082]
  - Skip referenced passwords in health check report [#5056]
  - Check system-wide Qt translations directory for downstream
  - translations packaging [#5064]
  - macOS: Change password visibility toggle shortcut to Ctrl+H to
  - avoid conflict with system shortcut [#5114]
  - Browser: Only display domain name in browser access confirm
    dialog to avoid overly wide window sizes [#5214]
  - Fix clipboard not being cleared when database is locked while
    timeout is still active [#5184]
  - Fix list of previous databases not being cleared in some
    cases [#5123]
  - Fix saving of non-data changes on database lock [#5210]
  - Fix search results banner theming [#5197]
  - Don?t enforce theme palette in Classic theme mode and add hover
    effect for buttons [#5122, #5267]
  - Fix label clipping in settings on high-DPI screens [#5227]
  - Fix excessive memory usage by icons on systems with high-DPI
    screens [#5266]
  - Fix crash if number of TOTP digits exceeds ten [#5106]
  - Fix slot detection when first YubiKey is configured on the second
    slot [#5004]
  - Prevent crash if focus widget gets deleted during saving [#5005]
  - Always show buttons for opening or saving attachments [#4956]
  - Update link to Auto-Type help [#5228]
  - Fix build errors with Ninja [#5121]
  - CLI: Fix db-info command wrongly labelled as db-show in
    usage listing [#5140]
  - Windows: Use Classic theme by default if high-contrast mode
    is on [#5191]
  - Linux: Add workaround for qt5ct bug, causing icons not to show
    up [#5011]
  - Linux: Correct high-DPI display by not allowing fractional
    scaling [#5185]
  - Browser: Consider subdomain and path when requesting only
    ?best-matching credentials? [#4832]
  - SSH Agent: Always forget all keys on lock [#5115]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1603368000">- Update to version 2.6.2
  - Added
  - Add option to keep window always on top to view menu [#5542]
  - Move show/hide usernames and passwords to view menu [#5542]
  - Add command line options and environment variables for
    changing the config locations [#5452]
  - Include TOTP settings in CSV import/export and add support
    for ISO datetimes [#5346]
  - Changed
  - Mask sensitive information in command execution confirmation
    prompt [#5542]
  - SSH Agent: Avoid shortcut conflict on macOS by changing "Add
    key" to Ctrl+H on all platforms [#5484]
  - Fixed
  - Prevent data loss with drag and drop between databases
    [#5536]
  - Fix crash when toggling Capslock rapidly [#5545]
  - Don't mark URL references as invalid URL [#5380]
  - Reset entry preview after search [#5483]
  - Set Qt::Dialog flag on database open dialog [#5356]
  - Fix sorting of database report columns [#5426]
  - Fix IfDevice matching logic [#5344]
  - Fix layout issues and a stray scrollbar appearing on top of
    the entry edit screen [#5424]
  - Fix tabbing into the notes field [#5424]
  - Fix password generator ignoring settings on load [#5340]
  - Restore natural entry sort order on application load [#5438]
  - Fix paperclip and TOTP columns not saving state [#5327]
  - Enforce fixed password font in entry preview [#5454]
  - Add scrollbar when new database wizard exceeds screen size
    [#5560]
  - Do not mark database as modified when viewing Auto-Type
    associations [#5542]
  - CLI: Fix two heap-use-after-free crashes [#5368, #5470]
  - Browser: Fix key exchange not working with multiple
    simultaneous users on Windows [#5485]
  - Browser: Fix entry retrieval when "only best matching" is
    enabled [#5316]
  - Browser: Ignore recycle bin on KeePassHTTP migration [#5481]
  - KeeShare: Fix import crash [#5542]
  - macOS: Fix toolbar theming and breadcrumb display issues
    [#5482]
  - macOS: Fix file dialog randomly closing [#5479]
  - macOS: Fix being unable to select OPVault files for import
    [#5341]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1610452800">- Update to version 2.6.3
  - Added
  - Support Argon2id KDF [#5778]
  - Support XMLv2 key files [#5798]
  - Changed
  - Improve CSV Import/Export, include time fields and TOTP
    [#5346]
  - Support empty area dragging of the application window [#5860]
  - Display default Auto-Type sequence in preview pane [#5654]
  - Remove strict length limit on generated passwords [#5748]
  - Hide key file path by default when unlocking database [#5779]
  - Document browser extension use with Edge in managed mode
    [#5692]
  - Windows: Prevent clipboard history and cloud sync [#5853]
  - macOS: Update the application icon to Big Sur styling [#5851]
  - Fixed
  - Re-select previously selected entry on database unlock
    [#5559]
  - Properly save special character choice in password generator
    [#5610]
  - Fix crash in browser integration with multiple similar
    entries [#5653]
  - Remove offset on username field in classic theme [#5788]
  - Ensure entry history is copied when drag/dropping entries and
    groups [#5817]
  - Close modal dialogs when database is locked [#5820]
  - Prevent crash when KeeShare modifies an entry that is
    currently being edited [#5827]
  - Improve preview of entry attributes [#5834]
  - Always activate/focus database open dialog preventing mistype
    [#5878]
  - Reports: fix calculation of average password length [#5862]
  - Linux: Delay startup on login to correct tray icon issues
    [#5724]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1612267200">- Update to 2.6.4
  - Added
  - Automatically adapt to light/dark system theme changes
    (Windows/macOS only) [#6034]
  - Changed
  - Show window title as tooltip on system tray [#5948]
  - Compress Snap release as LZO for faster initial startup
    [#5877]
  - Password generator: Set maximum selectable password length to
    999 [#5937]
  - Fixed
  - Fix crash on app close when using SSH agent [#5935]
  - Fix KDF selection showing wrong item when using Argon2id
    [#5923]
  - Automatically close About dialog on database lock if it is
    still open [#5947]
  - Linux: Fix automatic launch at system startup with AppImages
    [#5901]
  - Linux: Fix click-to-move on empty area activating when using
    menus [#5971]
  - Linux: Try multiple times to show tray icon if tray is not
    ready yet [#5948]
  - macOS: Fix KeePassXC blocking clean shutdown [#6002]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1623931200">- Update to 2.6.6
  - Fixed
  - Fix focusing search when pressing hotkey #6603
  - Trim whitespace from TOTP key input prior to processing #6604
  - Fix building on macOS #6598
  - Resolve compiler warnings for unused return values #6607
- Changes from 2.6.5
  - Added
  - Show search bar when toolbar is hidden or in overflow #6279
  - Show countdown for clipboard clearing in status bar #6333
  - Command line option to lock all open databases #6511
  - Allow CSV import of bare TOTP secrets #6211
  - Retain file creation time when saving database #6576
  - Set permissions of saved attachments to be private to the
    current user #6363
  - OPVault: Use Text instead of Name for attribute names #6334
  - Changed
  - Reports: Allow resizing of reports columns #6435
  - Reports: Toggle showing expired entries #6534
  - Save Always on Top setting #6236
  - Password generator can exclude additional lookalike
    characters (6/G, 8/B) #6196
  - Fixed
  - Allow setting MSI properties in unattended install #6196
  - Update MainWindow minimum size to enable smaller verticle
    space #6196
  - Use application font size when setting default or monospace
    fonts #6332
  - Fix notes not clearing in entry preview panel in some cases
    [#6481]
  - macOS: Correct window activation when restoring from tray
    [#6575]
  - macOS: Better handling of minimize after unlock when using
    browser integration #6338
  - Linux: Start after the system tray is available on LXQt #6216
  - Linux: Allow selection of modal dialogs on X11 in Auto-Type
    [#6204]
  - KeeShare: prevent crash when file extension is missing #6174</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1623931201">- newer version of fedora now have the sane cmake macros too.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1634126400">- add https://patch-diff.githubusercontent.com/raw/keepassxreboot/keepassxc/pull/7045.patch
  and adapt it for 2.6.6: This allows us building with LTO</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1648123200">- Update to 2.7.0
  - Major Additions
  - Implement KDBX 4.1 [#7114]
  - Add direct write save option for cloud storage and GVFS
    [#6594]
  - Prevent screen capture on Windows and macOS [#6030]
  - Support quick unlock using Windows Hello [#7384]
  - Support quick unlock using Apple Watch [#5526]
  - Allow specifying database backup paths [#7035]
  - Add tag functionality [#6487][#7436][#7446]
  - Add password rating column to entry view [#4797]
  - Add group clone action [#6124]
  - Show modifications between entry history items [#6789]
  - Ability to bulk-delete and purge unused custom icons [#5970]
  - Support adding custom passphrase wordlists [#6799]
  - Support passphrase wordlists in numbered and PGP-signed
    formats [#6791]
  - Implement support for hardware keys via wireless NFC [#6895]
  - SSH Agent: Add support for OpenSSH 8.2 FIDO/U2F keys [#6371]
  - CLI: Implement attachment handling [#5538]
  - CLI: Add support for okon in offline HIBP checks [#5478]
  - CLI: Implement search command and remove locate [#6805]
  - CLI: Add db statistic output to db-info command [#7032]
  - CLI: Add -i/--include option to generate command. [#7112]
  - CLI: Add a -n (--notes) option to add and edit commands
    [#4646]
  - CLI: Add keyfile option to import command [#5402]
  - CLI: Adding a best option to clip to copy a password of the
    best match [#4489]
  - Browser: Add Microsoft Edge support on Linux [#7100]
  - Browser: Support native password generator from the extension
    [#6529]
  - Browser: Add group settings [#4180]
  - Browser: Add feature to ignore entries for HTTP-Auth Logins
    [#5394]
  - Browser: Support triggering Auto-Type from browser extension
    [#6272]
  - Browser: Add delete-entry command to API [#6899]
  - Browser: Add search 'by-path' url to API [#5535]
  - Browser: search for entries by UUID to API [#4763]
  - Browser: Support auto-download of favicon on entry addition
    [#7179]
  - Auto-Type: Major improvements to Auto-Type
    [#5864][#7463][#7435][#7391][#7129][#6400][#6364][#6361][#5283][#7507]
  - Auto-Type: Fix typing to virtual machines on Windows [#7366]
  - Auto-Type: Re-implement X11 keysym emulation [#7098]
  - Auto-Type: Support multiple Xkb layouts [#6247]
  - Auto-Type: Abort keystroke if modifiers held on X11
    [#6351][#6357]
  - Auto-Type: Add TOTP option to entry level Auto-Type menu
    [#6675]
  - FdoSecrets: Major Refactor and Code Consolidation
    [#5747][#5660][#7043][#6915]
  - FdoSecrets: Implement unlock before search [#6943]
  - Reports: Add browser statistics report [#7197]
  - Major Changes
  - Port crypto backend to Botan [#6209]
  - Improve attachment handling and security
    [#6606][#5034][#7083]
  - Allow selecting any open database in unlock dialog [#5427]
  - KeeShare: Remove checking signed container and QuaZip
    dependency [#7223]
  - Introduce security option to enable copy on double click
    (default off) [#6433]
  - Add 'delete entry without confirm' functionality [#5812]
  - Improve macOS and Windows platform integration [#5851]
  - Lock only the current database by default [#6652]
  - Show expired entries on DB unlock [#7290]
  - Update D-Bus adaptor interface class name to match definition
    file [#7523]
  - Other Changes and Fixes
  - Add countdown progress bar to TOTP preview [#6930]
  - Enter favicon url directly on icons page [#6614]
  - Set C++17 as standard in the build system [#7180]
  - Internalize ykcore into code base [#6654]
  - Transition to Visual Studio builds on Windows [#5874]
  - Ability to delete entries from health check reports [#6537]
  - Enhance remembering last-used directories [#6711]
  - Implement org.freedesktop.appearance.color-scheme support on
    Linux [#7422]
  - Support sorting HTML export [#7011]
  - Add display number of characters in passphrases [#5449]
  - Use Alt+Tab on macOS to switch between databases [#5407]
  - Add feature to sort groups using shortcut keys [#6999]
  - Add CTRL+Enter to apply password generator changes [#6414]
  - Display Database created timestamp on statistics report
    [#6876]
  - Browser: Improve best matching credentials setting [#6893]
  - SSH Agent: Use both Pageant and OpenSSH agent simultaneously
    on Windows [#6288]
  - SSH Agent: Allow using database path to resolve keys [#6365]
  - SSH Agent: Show correct error messages in main window [#7166]
  - Multiple fixes for MSI installer [#6630]
  - Fix tab order for CSV import dialog to match screen order
    [#7315]
  - Don't mark kdbx:// urls as invalid [#7221]
  - Make selected text copyable instead of copying password
    [#7209]
  - Detect timestamp resolution for CSV files [#7196]
  - Fix crash while downloading favicon [#7104]
  - Correct naming of newly generated keyx files [#7010]
  - Place the 'Recycle Bin' at the bottom of the list when groups
    are sorted [#7004]
  - Handle tilde with custom browser paths [#6659]
  - Don't scroll up when deleting an entry [#6833]
  - Set the MIME-Type to text/plain when using wl-copy on wayland
    [#6832]
  - Fix adaptive icon painting [#5989][#6033]
  - Fix favicon download from URL with non-standard port [#5509]
  - Ignore recycle bin on KeePassHTTP migration [#5481]
  - Fix keepassxc-cr-recovery utility [#7521]
  - Fix Auto-Type not working when audio recording indicator is
    active on macOS 12.2+ [#7526]
- drop 7045.patch
- adapt build requires to the new version</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1649505600">- update to 2.7.1:
  * Show when tags are changed in entry history
  * Improve tags editing and allow spaces in tags
  * Improve layout of entry preview panel
  * Incorporate patches to support Flatpak distribution
  * Add expiration presets for 12 and 24 hours
  * Fix crash when building history change list
  * Fix hiding password on database unlock
  * Fix AES KDF slow transform speed
  * Auto-Type: Correct timing issue on macOS and Linux that prevented typing
  * Auto-Type: Fix use of Ctrl/Alt/Shift/Win modifiers on Windows
  * Auto-Type: Reduce/eliminate delay when searching for entries
  * Auto-Type: Map ASCII dead keys on Linux for international keyboards
  * CLI: Fix detection of hardware keys (YubiKey)
  * CLI: Add missing parameter -c to add/edit entries command
  * Secret Service: Fix crash when multiple prompts are shown
  * SSH Agent: Fix default agent selection on Windows
  * Fix database unlock dialog not being the top window on Linux
  * Fix drag/drop entries between tabs on Wayland
  * Fix compiling with minizip-ng</changelog>
</package>
<package pkgid="10920e17097e22af8eb66b1da739658e0e2eacab83795fffa0c12441264267a1" name="keepassxc" arch="aarch64">
  <version epoch="0" ver="2.7.3" rel="bp154.3.6.1"/>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1572091200">- update to 2.5.0
  https://github.com/keepassxreboot/keepassxc/releases/tag/2.5.0</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1575892800">- Update to version 2.5.1:
  * https://github.com/keepassxreboot/keepassxc/releases/tag/2.5.1</changelog>
  <changelog author="droidmonkey &lt;support@dmapps.us&gt;" date="1578139200">- Update to version 2.5.2:
  * https://github.com/keepassxreboot/keepassxc/releases/tag/2.5.2</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1579435200">- Update to version 2.5.3:
  * https://github.com/keepassxreboot/keepassxc/releases/tag/2.5.3</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1582891200">- Clicking the tray icon momentarily shows and immediately hides window. Make
  it stick (boo#1165293).
- Fix window not minimizing to tray.
  + add keepassxc-Fix-window-hiding-after-shown.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1586433600">- Update to version 2.5.4:
  * https://github.com/keepassxreboot/keepassxc/releases/tag/2.5.4</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1589198400">- Drop build/requirement on libgcrypt20-hmac boo#1171438</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1594123200">- Update to version 2.6.0:
  * https://keepassxc.org/blog/2020-07-07-2.6.0-released/
  * https://github.com/keepassxreboot/keepassxc/releases/tag/2.6.0
- drop keepassxc-Fix-window-hiding-after-shown.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1594123201">- add BR for asciidoctor</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1594209600">- add _constraints with 6GB to fix build on ppc64 hopefully</changelog>
  <changelog author="Carsten Ziepke &lt;kieltux@gmail.com&gt;" date="1598788800">- Update to version 2.6.1:
  - Add menu entries for auto-typing only username or only
    password [#4891]
  - Browser: Add command for retrieving current TOTP [#5278]
  - Improve man pages [#5010]
  - Linux: Support Xfce screen lock signals [#4971]
  - Linux: Add OARS metadata to AppStream markup [#5031]
  - SSH Agent: Substitute tilde with %USERPROFILE% on Windows
    [#5116]
  - Improve password generator UI and UX [#5129]
  - Do not prompt to restart if switching the theme back and
    forth [#5084]
  - Change actions for F1, F2, and F3 keys [#5082]
  - Skip referenced passwords in health check report [#5056]
  - Check system-wide Qt translations directory for downstream
  - translations packaging [#5064]
  - macOS: Change password visibility toggle shortcut to Ctrl+H to
  - avoid conflict with system shortcut [#5114]
  - Browser: Only display domain name in browser access confirm
    dialog to avoid overly wide window sizes [#5214]
  - Fix clipboard not being cleared when database is locked while
    timeout is still active [#5184]
  - Fix list of previous databases not being cleared in some
    cases [#5123]
  - Fix saving of non-data changes on database lock [#5210]
  - Fix search results banner theming [#5197]
  - Don?t enforce theme palette in Classic theme mode and add hover
    effect for buttons [#5122, #5267]
  - Fix label clipping in settings on high-DPI screens [#5227]
  - Fix excessive memory usage by icons on systems with high-DPI
    screens [#5266]
  - Fix crash if number of TOTP digits exceeds ten [#5106]
  - Fix slot detection when first YubiKey is configured on the second
    slot [#5004]
  - Prevent crash if focus widget gets deleted during saving [#5005]
  - Always show buttons for opening or saving attachments [#4956]
  - Update link to Auto-Type help [#5228]
  - Fix build errors with Ninja [#5121]
  - CLI: Fix db-info command wrongly labelled as db-show in
    usage listing [#5140]
  - Windows: Use Classic theme by default if high-contrast mode
    is on [#5191]
  - Linux: Add workaround for qt5ct bug, causing icons not to show
    up [#5011]
  - Linux: Correct high-DPI display by not allowing fractional
    scaling [#5185]
  - Browser: Consider subdomain and path when requesting only
    ?best-matching credentials? [#4832]
  - SSH Agent: Always forget all keys on lock [#5115]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1603368000">- Update to version 2.6.2
  - Added
  - Add option to keep window always on top to view menu [#5542]
  - Move show/hide usernames and passwords to view menu [#5542]
  - Add command line options and environment variables for
    changing the config locations [#5452]
  - Include TOTP settings in CSV import/export and add support
    for ISO datetimes [#5346]
  - Changed
  - Mask sensitive information in command execution confirmation
    prompt [#5542]
  - SSH Agent: Avoid shortcut conflict on macOS by changing "Add
    key" to Ctrl+H on all platforms [#5484]
  - Fixed
  - Prevent data loss with drag and drop between databases
    [#5536]
  - Fix crash when toggling Capslock rapidly [#5545]
  - Don't mark URL references as invalid URL [#5380]
  - Reset entry preview after search [#5483]
  - Set Qt::Dialog flag on database open dialog [#5356]
  - Fix sorting of database report columns [#5426]
  - Fix IfDevice matching logic [#5344]
  - Fix layout issues and a stray scrollbar appearing on top of
    the entry edit screen [#5424]
  - Fix tabbing into the notes field [#5424]
  - Fix password generator ignoring settings on load [#5340]
  - Restore natural entry sort order on application load [#5438]
  - Fix paperclip and TOTP columns not saving state [#5327]
  - Enforce fixed password font in entry preview [#5454]
  - Add scrollbar when new database wizard exceeds screen size
    [#5560]
  - Do not mark database as modified when viewing Auto-Type
    associations [#5542]
  - CLI: Fix two heap-use-after-free crashes [#5368, #5470]
  - Browser: Fix key exchange not working with multiple
    simultaneous users on Windows [#5485]
  - Browser: Fix entry retrieval when "only best matching" is
    enabled [#5316]
  - Browser: Ignore recycle bin on KeePassHTTP migration [#5481]
  - KeeShare: Fix import crash [#5542]
  - macOS: Fix toolbar theming and breadcrumb display issues
    [#5482]
  - macOS: Fix file dialog randomly closing [#5479]
  - macOS: Fix being unable to select OPVault files for import
    [#5341]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1610452800">- Update to version 2.6.3
  - Added
  - Support Argon2id KDF [#5778]
  - Support XMLv2 key files [#5798]
  - Changed
  - Improve CSV Import/Export, include time fields and TOTP
    [#5346]
  - Support empty area dragging of the application window [#5860]
  - Display default Auto-Type sequence in preview pane [#5654]
  - Remove strict length limit on generated passwords [#5748]
  - Hide key file path by default when unlocking database [#5779]
  - Document browser extension use with Edge in managed mode
    [#5692]
  - Windows: Prevent clipboard history and cloud sync [#5853]
  - macOS: Update the application icon to Big Sur styling [#5851]
  - Fixed
  - Re-select previously selected entry on database unlock
    [#5559]
  - Properly save special character choice in password generator
    [#5610]
  - Fix crash in browser integration with multiple similar
    entries [#5653]
  - Remove offset on username field in classic theme [#5788]
  - Ensure entry history is copied when drag/dropping entries and
    groups [#5817]
  - Close modal dialogs when database is locked [#5820]
  - Prevent crash when KeeShare modifies an entry that is
    currently being edited [#5827]
  - Improve preview of entry attributes [#5834]
  - Always activate/focus database open dialog preventing mistype
    [#5878]
  - Reports: fix calculation of average password length [#5862]
  - Linux: Delay startup on login to correct tray icon issues
    [#5724]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1612267200">- Update to 2.6.4
  - Added
  - Automatically adapt to light/dark system theme changes
    (Windows/macOS only) [#6034]
  - Changed
  - Show window title as tooltip on system tray [#5948]
  - Compress Snap release as LZO for faster initial startup
    [#5877]
  - Password generator: Set maximum selectable password length to
    999 [#5937]
  - Fixed
  - Fix crash on app close when using SSH agent [#5935]
  - Fix KDF selection showing wrong item when using Argon2id
    [#5923]
  - Automatically close About dialog on database lock if it is
    still open [#5947]
  - Linux: Fix automatic launch at system startup with AppImages
    [#5901]
  - Linux: Fix click-to-move on empty area activating when using
    menus [#5971]
  - Linux: Try multiple times to show tray icon if tray is not
    ready yet [#5948]
  - macOS: Fix KeePassXC blocking clean shutdown [#6002]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1623931200">- Update to 2.6.6
  - Fixed
  - Fix focusing search when pressing hotkey #6603
  - Trim whitespace from TOTP key input prior to processing #6604
  - Fix building on macOS #6598
  - Resolve compiler warnings for unused return values #6607
- Changes from 2.6.5
  - Added
  - Show search bar when toolbar is hidden or in overflow #6279
  - Show countdown for clipboard clearing in status bar #6333
  - Command line option to lock all open databases #6511
  - Allow CSV import of bare TOTP secrets #6211
  - Retain file creation time when saving database #6576
  - Set permissions of saved attachments to be private to the
    current user #6363
  - OPVault: Use Text instead of Name for attribute names #6334
  - Changed
  - Reports: Allow resizing of reports columns #6435
  - Reports: Toggle showing expired entries #6534
  - Save Always on Top setting #6236
  - Password generator can exclude additional lookalike
    characters (6/G, 8/B) #6196
  - Fixed
  - Allow setting MSI properties in unattended install #6196
  - Update MainWindow minimum size to enable smaller verticle
    space #6196
  - Use application font size when setting default or monospace
    fonts #6332
  - Fix notes not clearing in entry preview panel in some cases
    [#6481]
  - macOS: Correct window activation when restoring from tray
    [#6575]
  - macOS: Better handling of minimize after unlock when using
    browser integration #6338
  - Linux: Start after the system tray is available on LXQt #6216
  - Linux: Allow selection of modal dialogs on X11 in Auto-Type
    [#6204]
  - KeeShare: prevent crash when file extension is missing #6174</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1623931201">- newer version of fedora now have the sane cmake macros too.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1634126400">- add https://patch-diff.githubusercontent.com/raw/keepassxreboot/keepassxc/pull/7045.patch
  and adapt it for 2.6.6: This allows us building with LTO</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1648123200">- Update to 2.7.0
  - Major Additions
  - Implement KDBX 4.1 [#7114]
  - Add direct write save option for cloud storage and GVFS
    [#6594]
  - Prevent screen capture on Windows and macOS [#6030]
  - Support quick unlock using Windows Hello [#7384]
  - Support quick unlock using Apple Watch [#5526]
  - Allow specifying database backup paths [#7035]
  - Add tag functionality [#6487][#7436][#7446]
  - Add password rating column to entry view [#4797]
  - Add group clone action [#6124]
  - Show modifications between entry history items [#6789]
  - Ability to bulk-delete and purge unused custom icons [#5970]
  - Support adding custom passphrase wordlists [#6799]
  - Support passphrase wordlists in numbered and PGP-signed
    formats [#6791]
  - Implement support for hardware keys via wireless NFC [#6895]
  - SSH Agent: Add support for OpenSSH 8.2 FIDO/U2F keys [#6371]
  - CLI: Implement attachment handling [#5538]
  - CLI: Add support for okon in offline HIBP checks [#5478]
  - CLI: Implement search command and remove locate [#6805]
  - CLI: Add db statistic output to db-info command [#7032]
  - CLI: Add -i/--include option to generate command. [#7112]
  - CLI: Add a -n (--notes) option to add and edit commands
    [#4646]
  - CLI: Add keyfile option to import command [#5402]
  - CLI: Adding a best option to clip to copy a password of the
    best match [#4489]
  - Browser: Add Microsoft Edge support on Linux [#7100]
  - Browser: Support native password generator from the extension
    [#6529]
  - Browser: Add group settings [#4180]
  - Browser: Add feature to ignore entries for HTTP-Auth Logins
    [#5394]
  - Browser: Support triggering Auto-Type from browser extension
    [#6272]
  - Browser: Add delete-entry command to API [#6899]
  - Browser: Add search 'by-path' url to API [#5535]
  - Browser: search for entries by UUID to API [#4763]
  - Browser: Support auto-download of favicon on entry addition
    [#7179]
  - Auto-Type: Major improvements to Auto-Type
    [#5864][#7463][#7435][#7391][#7129][#6400][#6364][#6361][#5283][#7507]
  - Auto-Type: Fix typing to virtual machines on Windows [#7366]
  - Auto-Type: Re-implement X11 keysym emulation [#7098]
  - Auto-Type: Support multiple Xkb layouts [#6247]
  - Auto-Type: Abort keystroke if modifiers held on X11
    [#6351][#6357]
  - Auto-Type: Add TOTP option to entry level Auto-Type menu
    [#6675]
  - FdoSecrets: Major Refactor and Code Consolidation
    [#5747][#5660][#7043][#6915]
  - FdoSecrets: Implement unlock before search [#6943]
  - Reports: Add browser statistics report [#7197]
  - Major Changes
  - Port crypto backend to Botan [#6209]
  - Improve attachment handling and security
    [#6606][#5034][#7083]
  - Allow selecting any open database in unlock dialog [#5427]
  - KeeShare: Remove checking signed container and QuaZip
    dependency [#7223]
  - Introduce security option to enable copy on double click
    (default off) [#6433]
  - Add 'delete entry without confirm' functionality [#5812]
  - Improve macOS and Windows platform integration [#5851]
  - Lock only the current database by default [#6652]
  - Show expired entries on DB unlock [#7290]
  - Update D-Bus adaptor interface class name to match definition
    file [#7523]
  - Other Changes and Fixes
  - Add countdown progress bar to TOTP preview [#6930]
  - Enter favicon url directly on icons page [#6614]
  - Set C++17 as standard in the build system [#7180]
  - Internalize ykcore into code base [#6654]
  - Transition to Visual Studio builds on Windows [#5874]
  - Ability to delete entries from health check reports [#6537]
  - Enhance remembering last-used directories [#6711]
  - Implement org.freedesktop.appearance.color-scheme support on
    Linux [#7422]
  - Support sorting HTML export [#7011]
  - Add display number of characters in passphrases [#5449]
  - Use Alt+Tab on macOS to switch between databases [#5407]
  - Add feature to sort groups using shortcut keys [#6999]
  - Add CTRL+Enter to apply password generator changes [#6414]
  - Display Database created timestamp on statistics report
    [#6876]
  - Browser: Improve best matching credentials setting [#6893]
  - SSH Agent: Use both Pageant and OpenSSH agent simultaneously
    on Windows [#6288]
  - SSH Agent: Allow using database path to resolve keys [#6365]
  - SSH Agent: Show correct error messages in main window [#7166]
  - Multiple fixes for MSI installer [#6630]
  - Fix tab order for CSV import dialog to match screen order
    [#7315]
  - Don't mark kdbx:// urls as invalid [#7221]
  - Make selected text copyable instead of copying password
    [#7209]
  - Detect timestamp resolution for CSV files [#7196]
  - Fix crash while downloading favicon [#7104]
  - Correct naming of newly generated keyx files [#7010]
  - Place the 'Recycle Bin' at the bottom of the list when groups
    are sorted [#7004]
  - Handle tilde with custom browser paths [#6659]
  - Don't scroll up when deleting an entry [#6833]
  - Set the MIME-Type to text/plain when using wl-copy on wayland
    [#6832]
  - Fix adaptive icon painting [#5989][#6033]
  - Fix favicon download from URL with non-standard port [#5509]
  - Ignore recycle bin on KeePassHTTP migration [#5481]
  - Fix keepassxc-cr-recovery utility [#7521]
  - Fix Auto-Type not working when audio recording indicator is
    active on macOS 12.2+ [#7526]
- drop 7045.patch
- adapt build requires to the new version</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1649505600">- update to 2.7.1:
  * Show when tags are changed in entry history
  * Improve tags editing and allow spaces in tags
  * Improve layout of entry preview panel
  * Incorporate patches to support Flatpak distribution
  * Add expiration presets for 12 and 24 hours
  * Fix crash when building history change list
  * Fix hiding password on database unlock
  * Fix AES KDF slow transform speed
  * Auto-Type: Correct timing issue on macOS and Linux that prevented typing
  * Auto-Type: Fix use of Ctrl/Alt/Shift/Win modifiers on Windows
  * Auto-Type: Reduce/eliminate delay when searching for entries
  * Auto-Type: Map ASCII dead keys on Linux for international keyboards
  * CLI: Fix detection of hardware keys (YubiKey)
  * CLI: Add missing parameter -c to add/edit entries command
  * Secret Service: Fix crash when multiple prompts are shown
  * SSH Agent: Fix default agent selection on Windows
  * Fix database unlock dialog not being the top window on Linux
  * Fix drag/drop entries between tabs on Wayland
  * Fix compiling with minizip-ng</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1666612800">- update to 2.7.3:
  Due to a bug in macOS window behavior, 2.7.2 has been immediately
  superseded by 2.7.3.
  - Changes
  - Enhance Tags Support and Add Saved Searches [#8435, #8607]
  - Significant improvements to entry preview panel [#7993]
  - Add password strength indicator to all password fields [#7885]
  - Limit zxcvbn entropy estimation length to 128 characters [#7748]
  - Try full URL path when fetching favicon [#8565]
  - Hide usernames in preview panel when hidden in entry view [#8608]
  - Enable dark title bar on windows when accent color is not used [#8498]
  - Add option to display passwords in color in preview panel [#7097]
  - Add XML Export option to GUI [#8524]
  - Increase entropy required for a "good" password rating to 75 [#8523]
  - Add shortcut to copy password with TOTP appended [#8443]
  - Show entry count in status bar [#8435]
  - Allow KeePassXC to be built without X11 [#8147]
  - Enable use of VivoKey Apex and Dangerous Things FlexSecure tokens [#8332]
  - Add setting for number of recent files [#8239]
  - Add Ctrl+Tab shortcut to cycle databases in unlock dialog [#8168]
  - Replace offensive words in eff_large.wordlist [#7968]
  - Auto-Type: PICKCHARS can specify attribute and ignore BEEP [#8118]
  - Linux: Add isHardwareKeySupported and refreshHardwareKeys to DBus methods [#8055]
  - Add config variable to specify default database file name [#8042]
  - Support numeric aware sorting on Windows and macOS [#8363]
  - CLI: Add db-edit command [#8400]
  - CLI: Add option to display all attributes with show command [#8256]
  - CLI: Show UUID and tags with show and clip commands [#8241]
  - Browser: Move socket into separate directory on Linux [#8030]
  - Browser: Add group setting to omit WWW subdomain when matching URLs [#7988]
  - FdoSecrets: Ask to unlock the database when creating items [#8022, #8028]
  - FdoSecrets: Skip entries in recycle bin when searching [#8021]
  - Fixes
  - Fix potential deadlock in UI when saving [#8606]
  - Fix newlines when copying notes from preview panel [#8542]
  - Fix dark mode detection on Linux [#8477]
  - Fix crash when deleting items in recycle bin while searching [#8117]
  - Fix crash when trying to close database during unlock [#8144]
  - Fix tabbing around the interface [#8435, #8520]
  - Fix OPVault import when there are multiple OTP fields [#8436]
  - Fix various Windows Hello bugs [#8354]
  - Fix use of Apple Watch for Quick Unlock [#8311]
  - Better handling of "Lock on Minimize" setting [#8202]
  - Check for write permission before entering portable mode [#8447]
  - Correct regex escape logic to prevent parse errors [#7778]
  - Normalize slashes and file case for last used databases [#7864, #7214]
  - Link ykcore against pthread [#7807]
  - Auto-Type: Fix menu entries in selection dialog on Windows [#7987]
  - Auto-Type: Fix use of modifiers under macOS [#8111]
  - CLI: Fix output when using clip with the -t flag [#8271]
  - Browser: Use asynchronous access confirm dialog [#8273]
  - Browser: Always send database locked/unlocked status [#8114]</changelog>
</package>
<package pkgid="abdd729b5eb008f75f3856f6e8b882e5d73082abb190a0f708ab3afc379dfb71" name="keepassxc" arch="s390x">
  <version epoch="0" ver="2.7.3" rel="bp154.3.6.1"/>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1572091200">- update to 2.5.0
  https://github.com/keepassxreboot/keepassxc/releases/tag/2.5.0</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1575892800">- Update to version 2.5.1:
  * https://github.com/keepassxreboot/keepassxc/releases/tag/2.5.1</changelog>
  <changelog author="droidmonkey &lt;support@dmapps.us&gt;" date="1578139200">- Update to version 2.5.2:
  * https://github.com/keepassxreboot/keepassxc/releases/tag/2.5.2</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1579435200">- Update to version 2.5.3:
  * https://github.com/keepassxreboot/keepassxc/releases/tag/2.5.3</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1582891200">- Clicking the tray icon momentarily shows and immediately hides window. Make
  it stick (boo#1165293).
- Fix window not minimizing to tray.
  + add keepassxc-Fix-window-hiding-after-shown.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1586433600">- Update to version 2.5.4:
  * https://github.com/keepassxreboot/keepassxc/releases/tag/2.5.4</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1589198400">- Drop build/requirement on libgcrypt20-hmac boo#1171438</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1594123200">- Update to version 2.6.0:
  * https://keepassxc.org/blog/2020-07-07-2.6.0-released/
  * https://github.com/keepassxreboot/keepassxc/releases/tag/2.6.0
- drop keepassxc-Fix-window-hiding-after-shown.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1594123201">- add BR for asciidoctor</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1594209600">- add _constraints with 6GB to fix build on ppc64 hopefully</changelog>
  <changelog author="Carsten Ziepke &lt;kieltux@gmail.com&gt;" date="1598788800">- Update to version 2.6.1:
  - Add menu entries for auto-typing only username or only
    password [#4891]
  - Browser: Add command for retrieving current TOTP [#5278]
  - Improve man pages [#5010]
  - Linux: Support Xfce screen lock signals [#4971]
  - Linux: Add OARS metadata to AppStream markup [#5031]
  - SSH Agent: Substitute tilde with %USERPROFILE% on Windows
    [#5116]
  - Improve password generator UI and UX [#5129]
  - Do not prompt to restart if switching the theme back and
    forth [#5084]
  - Change actions for F1, F2, and F3 keys [#5082]
  - Skip referenced passwords in health check report [#5056]
  - Check system-wide Qt translations directory for downstream
  - translations packaging [#5064]
  - macOS: Change password visibility toggle shortcut to Ctrl+H to
  - avoid conflict with system shortcut [#5114]
  - Browser: Only display domain name in browser access confirm
    dialog to avoid overly wide window sizes [#5214]
  - Fix clipboard not being cleared when database is locked while
    timeout is still active [#5184]
  - Fix list of previous databases not being cleared in some
    cases [#5123]
  - Fix saving of non-data changes on database lock [#5210]
  - Fix search results banner theming [#5197]
  - Don?t enforce theme palette in Classic theme mode and add hover
    effect for buttons [#5122, #5267]
  - Fix label clipping in settings on high-DPI screens [#5227]
  - Fix excessive memory usage by icons on systems with high-DPI
    screens [#5266]
  - Fix crash if number of TOTP digits exceeds ten [#5106]
  - Fix slot detection when first YubiKey is configured on the second
    slot [#5004]
  - Prevent crash if focus widget gets deleted during saving [#5005]
  - Always show buttons for opening or saving attachments [#4956]
  - Update link to Auto-Type help [#5228]
  - Fix build errors with Ninja [#5121]
  - CLI: Fix db-info command wrongly labelled as db-show in
    usage listing [#5140]
  - Windows: Use Classic theme by default if high-contrast mode
    is on [#5191]
  - Linux: Add workaround for qt5ct bug, causing icons not to show
    up [#5011]
  - Linux: Correct high-DPI display by not allowing fractional
    scaling [#5185]
  - Browser: Consider subdomain and path when requesting only
    ?best-matching credentials? [#4832]
  - SSH Agent: Always forget all keys on lock [#5115]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1603368000">- Update to version 2.6.2
  - Added
  - Add option to keep window always on top to view menu [#5542]
  - Move show/hide usernames and passwords to view menu [#5542]
  - Add command line options and environment variables for
    changing the config locations [#5452]
  - Include TOTP settings in CSV import/export and add support
    for ISO datetimes [#5346]
  - Changed
  - Mask sensitive information in command execution confirmation
    prompt [#5542]
  - SSH Agent: Avoid shortcut conflict on macOS by changing "Add
    key" to Ctrl+H on all platforms [#5484]
  - Fixed
  - Prevent data loss with drag and drop between databases
    [#5536]
  - Fix crash when toggling Capslock rapidly [#5545]
  - Don't mark URL references as invalid URL [#5380]
  - Reset entry preview after search [#5483]
  - Set Qt::Dialog flag on database open dialog [#5356]
  - Fix sorting of database report columns [#5426]
  - Fix IfDevice matching logic [#5344]
  - Fix layout issues and a stray scrollbar appearing on top of
    the entry edit screen [#5424]
  - Fix tabbing into the notes field [#5424]
  - Fix password generator ignoring settings on load [#5340]
  - Restore natural entry sort order on application load [#5438]
  - Fix paperclip and TOTP columns not saving state [#5327]
  - Enforce fixed password font in entry preview [#5454]
  - Add scrollbar when new database wizard exceeds screen size
    [#5560]
  - Do not mark database as modified when viewing Auto-Type
    associations [#5542]
  - CLI: Fix two heap-use-after-free crashes [#5368, #5470]
  - Browser: Fix key exchange not working with multiple
    simultaneous users on Windows [#5485]
  - Browser: Fix entry retrieval when "only best matching" is
    enabled [#5316]
  - Browser: Ignore recycle bin on KeePassHTTP migration [#5481]
  - KeeShare: Fix import crash [#5542]
  - macOS: Fix toolbar theming and breadcrumb display issues
    [#5482]
  - macOS: Fix file dialog randomly closing [#5479]
  - macOS: Fix being unable to select OPVault files for import
    [#5341]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1610452800">- Update to version 2.6.3
  - Added
  - Support Argon2id KDF [#5778]
  - Support XMLv2 key files [#5798]
  - Changed
  - Improve CSV Import/Export, include time fields and TOTP
    [#5346]
  - Support empty area dragging of the application window [#5860]
  - Display default Auto-Type sequence in preview pane [#5654]
  - Remove strict length limit on generated passwords [#5748]
  - Hide key file path by default when unlocking database [#5779]
  - Document browser extension use with Edge in managed mode
    [#5692]
  - Windows: Prevent clipboard history and cloud sync [#5853]
  - macOS: Update the application icon to Big Sur styling [#5851]
  - Fixed
  - Re-select previously selected entry on database unlock
    [#5559]
  - Properly save special character choice in password generator
    [#5610]
  - Fix crash in browser integration with multiple similar
    entries [#5653]
  - Remove offset on username field in classic theme [#5788]
  - Ensure entry history is copied when drag/dropping entries and
    groups [#5817]
  - Close modal dialogs when database is locked [#5820]
  - Prevent crash when KeeShare modifies an entry that is
    currently being edited [#5827]
  - Improve preview of entry attributes [#5834]
  - Always activate/focus database open dialog preventing mistype
    [#5878]
  - Reports: fix calculation of average password length [#5862]
  - Linux: Delay startup on login to correct tray icon issues
    [#5724]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1612267200">- Update to 2.6.4
  - Added
  - Automatically adapt to light/dark system theme changes
    (Windows/macOS only) [#6034]
  - Changed
  - Show window title as tooltip on system tray [#5948]
  - Compress Snap release as LZO for faster initial startup
    [#5877]
  - Password generator: Set maximum selectable password length to
    999 [#5937]
  - Fixed
  - Fix crash on app close when using SSH agent [#5935]
  - Fix KDF selection showing wrong item when using Argon2id
    [#5923]
  - Automatically close About dialog on database lock if it is
    still open [#5947]
  - Linux: Fix automatic launch at system startup with AppImages
    [#5901]
  - Linux: Fix click-to-move on empty area activating when using
    menus [#5971]
  - Linux: Try multiple times to show tray icon if tray is not
    ready yet [#5948]
  - macOS: Fix KeePassXC blocking clean shutdown [#6002]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1623931200">- Update to 2.6.6
  - Fixed
  - Fix focusing search when pressing hotkey #6603
  - Trim whitespace from TOTP key input prior to processing #6604
  - Fix building on macOS #6598
  - Resolve compiler warnings for unused return values #6607
- Changes from 2.6.5
  - Added
  - Show search bar when toolbar is hidden or in overflow #6279
  - Show countdown for clipboard clearing in status bar #6333
  - Command line option to lock all open databases #6511
  - Allow CSV import of bare TOTP secrets #6211
  - Retain file creation time when saving database #6576
  - Set permissions of saved attachments to be private to the
    current user #6363
  - OPVault: Use Text instead of Name for attribute names #6334
  - Changed
  - Reports: Allow resizing of reports columns #6435
  - Reports: Toggle showing expired entries #6534
  - Save Always on Top setting #6236
  - Password generator can exclude additional lookalike
    characters (6/G, 8/B) #6196
  - Fixed
  - Allow setting MSI properties in unattended install #6196
  - Update MainWindow minimum size to enable smaller verticle
    space #6196
  - Use application font size when setting default or monospace
    fonts #6332
  - Fix notes not clearing in entry preview panel in some cases
    [#6481]
  - macOS: Correct window activation when restoring from tray
    [#6575]
  - macOS: Better handling of minimize after unlock when using
    browser integration #6338
  - Linux: Start after the system tray is available on LXQt #6216
  - Linux: Allow selection of modal dialogs on X11 in Auto-Type
    [#6204]
  - KeeShare: prevent crash when file extension is missing #6174</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1623931201">- newer version of fedora now have the sane cmake macros too.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1634126400">- add https://patch-diff.githubusercontent.com/raw/keepassxreboot/keepassxc/pull/7045.patch
  and adapt it for 2.6.6: This allows us building with LTO</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1648123200">- Update to 2.7.0
  - Major Additions
  - Implement KDBX 4.1 [#7114]
  - Add direct write save option for cloud storage and GVFS
    [#6594]
  - Prevent screen capture on Windows and macOS [#6030]
  - Support quick unlock using Windows Hello [#7384]
  - Support quick unlock using Apple Watch [#5526]
  - Allow specifying database backup paths [#7035]
  - Add tag functionality [#6487][#7436][#7446]
  - Add password rating column to entry view [#4797]
  - Add group clone action [#6124]
  - Show modifications between entry history items [#6789]
  - Ability to bulk-delete and purge unused custom icons [#5970]
  - Support adding custom passphrase wordlists [#6799]
  - Support passphrase wordlists in numbered and PGP-signed
    formats [#6791]
  - Implement support for hardware keys via wireless NFC [#6895]
  - SSH Agent: Add support for OpenSSH 8.2 FIDO/U2F keys [#6371]
  - CLI: Implement attachment handling [#5538]
  - CLI: Add support for okon in offline HIBP checks [#5478]
  - CLI: Implement search command and remove locate [#6805]
  - CLI: Add db statistic output to db-info command [#7032]
  - CLI: Add -i/--include option to generate command. [#7112]
  - CLI: Add a -n (--notes) option to add and edit commands
    [#4646]
  - CLI: Add keyfile option to import command [#5402]
  - CLI: Adding a best option to clip to copy a password of the
    best match [#4489]
  - Browser: Add Microsoft Edge support on Linux [#7100]
  - Browser: Support native password generator from the extension
    [#6529]
  - Browser: Add group settings [#4180]
  - Browser: Add feature to ignore entries for HTTP-Auth Logins
    [#5394]
  - Browser: Support triggering Auto-Type from browser extension
    [#6272]
  - Browser: Add delete-entry command to API [#6899]
  - Browser: Add search 'by-path' url to API [#5535]
  - Browser: search for entries by UUID to API [#4763]
  - Browser: Support auto-download of favicon on entry addition
    [#7179]
  - Auto-Type: Major improvements to Auto-Type
    [#5864][#7463][#7435][#7391][#7129][#6400][#6364][#6361][#5283][#7507]
  - Auto-Type: Fix typing to virtual machines on Windows [#7366]
  - Auto-Type: Re-implement X11 keysym emulation [#7098]
  - Auto-Type: Support multiple Xkb layouts [#6247]
  - Auto-Type: Abort keystroke if modifiers held on X11
    [#6351][#6357]
  - Auto-Type: Add TOTP option to entry level Auto-Type menu
    [#6675]
  - FdoSecrets: Major Refactor and Code Consolidation
    [#5747][#5660][#7043][#6915]
  - FdoSecrets: Implement unlock before search [#6943]
  - Reports: Add browser statistics report [#7197]
  - Major Changes
  - Port crypto backend to Botan [#6209]
  - Improve attachment handling and security
    [#6606][#5034][#7083]
  - Allow selecting any open database in unlock dialog [#5427]
  - KeeShare: Remove checking signed container and QuaZip
    dependency [#7223]
  - Introduce security option to enable copy on double click
    (default off) [#6433]
  - Add 'delete entry without confirm' functionality [#5812]
  - Improve macOS and Windows platform integration [#5851]
  - Lock only the current database by default [#6652]
  - Show expired entries on DB unlock [#7290]
  - Update D-Bus adaptor interface class name to match definition
    file [#7523]
  - Other Changes and Fixes
  - Add countdown progress bar to TOTP preview [#6930]
  - Enter favicon url directly on icons page [#6614]
  - Set C++17 as standard in the build system [#7180]
  - Internalize ykcore into code base [#6654]
  - Transition to Visual Studio builds on Windows [#5874]
  - Ability to delete entries from health check reports [#6537]
  - Enhance remembering last-used directories [#6711]
  - Implement org.freedesktop.appearance.color-scheme support on
    Linux [#7422]
  - Support sorting HTML export [#7011]
  - Add display number of characters in passphrases [#5449]
  - Use Alt+Tab on macOS to switch between databases [#5407]
  - Add feature to sort groups using shortcut keys [#6999]
  - Add CTRL+Enter to apply password generator changes [#6414]
  - Display Database created timestamp on statistics report
    [#6876]
  - Browser: Improve best matching credentials setting [#6893]
  - SSH Agent: Use both Pageant and OpenSSH agent simultaneously
    on Windows [#6288]
  - SSH Agent: Allow using database path to resolve keys [#6365]
  - SSH Agent: Show correct error messages in main window [#7166]
  - Multiple fixes for MSI installer [#6630]
  - Fix tab order for CSV import dialog to match screen order
    [#7315]
  - Don't mark kdbx:// urls as invalid [#7221]
  - Make selected text copyable instead of copying password
    [#7209]
  - Detect timestamp resolution for CSV files [#7196]
  - Fix crash while downloading favicon [#7104]
  - Correct naming of newly generated keyx files [#7010]
  - Place the 'Recycle Bin' at the bottom of the list when groups
    are sorted [#7004]
  - Handle tilde with custom browser paths [#6659]
  - Don't scroll up when deleting an entry [#6833]
  - Set the MIME-Type to text/plain when using wl-copy on wayland
    [#6832]
  - Fix adaptive icon painting [#5989][#6033]
  - Fix favicon download from URL with non-standard port [#5509]
  - Ignore recycle bin on KeePassHTTP migration [#5481]
  - Fix keepassxc-cr-recovery utility [#7521]
  - Fix Auto-Type not working when audio recording indicator is
    active on macOS 12.2+ [#7526]
- drop 7045.patch
- adapt build requires to the new version</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1649505600">- update to 2.7.1:
  * Show when tags are changed in entry history
  * Improve tags editing and allow spaces in tags
  * Improve layout of entry preview panel
  * Incorporate patches to support Flatpak distribution
  * Add expiration presets for 12 and 24 hours
  * Fix crash when building history change list
  * Fix hiding password on database unlock
  * Fix AES KDF slow transform speed
  * Auto-Type: Correct timing issue on macOS and Linux that prevented typing
  * Auto-Type: Fix use of Ctrl/Alt/Shift/Win modifiers on Windows
  * Auto-Type: Reduce/eliminate delay when searching for entries
  * Auto-Type: Map ASCII dead keys on Linux for international keyboards
  * CLI: Fix detection of hardware keys (YubiKey)
  * CLI: Add missing parameter -c to add/edit entries command
  * Secret Service: Fix crash when multiple prompts are shown
  * SSH Agent: Fix default agent selection on Windows
  * Fix database unlock dialog not being the top window on Linux
  * Fix drag/drop entries between tabs on Wayland
  * Fix compiling with minizip-ng</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1666612800">- update to 2.7.3:
  Due to a bug in macOS window behavior, 2.7.2 has been immediately
  superseded by 2.7.3.
  - Changes
  - Enhance Tags Support and Add Saved Searches [#8435, #8607]
  - Significant improvements to entry preview panel [#7993]
  - Add password strength indicator to all password fields [#7885]
  - Limit zxcvbn entropy estimation length to 128 characters [#7748]
  - Try full URL path when fetching favicon [#8565]
  - Hide usernames in preview panel when hidden in entry view [#8608]
  - Enable dark title bar on windows when accent color is not used [#8498]
  - Add option to display passwords in color in preview panel [#7097]
  - Add XML Export option to GUI [#8524]
  - Increase entropy required for a "good" password rating to 75 [#8523]
  - Add shortcut to copy password with TOTP appended [#8443]
  - Show entry count in status bar [#8435]
  - Allow KeePassXC to be built without X11 [#8147]
  - Enable use of VivoKey Apex and Dangerous Things FlexSecure tokens [#8332]
  - Add setting for number of recent files [#8239]
  - Add Ctrl+Tab shortcut to cycle databases in unlock dialog [#8168]
  - Replace offensive words in eff_large.wordlist [#7968]
  - Auto-Type: PICKCHARS can specify attribute and ignore BEEP [#8118]
  - Linux: Add isHardwareKeySupported and refreshHardwareKeys to DBus methods [#8055]
  - Add config variable to specify default database file name [#8042]
  - Support numeric aware sorting on Windows and macOS [#8363]
  - CLI: Add db-edit command [#8400]
  - CLI: Add option to display all attributes with show command [#8256]
  - CLI: Show UUID and tags with show and clip commands [#8241]
  - Browser: Move socket into separate directory on Linux [#8030]
  - Browser: Add group setting to omit WWW subdomain when matching URLs [#7988]
  - FdoSecrets: Ask to unlock the database when creating items [#8022, #8028]
  - FdoSecrets: Skip entries in recycle bin when searching [#8021]
  - Fixes
  - Fix potential deadlock in UI when saving [#8606]
  - Fix newlines when copying notes from preview panel [#8542]
  - Fix dark mode detection on Linux [#8477]
  - Fix crash when deleting items in recycle bin while searching [#8117]
  - Fix crash when trying to close database during unlock [#8144]
  - Fix tabbing around the interface [#8435, #8520]
  - Fix OPVault import when there are multiple OTP fields [#8436]
  - Fix various Windows Hello bugs [#8354]
  - Fix use of Apple Watch for Quick Unlock [#8311]
  - Better handling of "Lock on Minimize" setting [#8202]
  - Check for write permission before entering portable mode [#8447]
  - Correct regex escape logic to prevent parse errors [#7778]
  - Normalize slashes and file case for last used databases [#7864, #7214]
  - Link ykcore against pthread [#7807]
  - Auto-Type: Fix menu entries in selection dialog on Windows [#7987]
  - Auto-Type: Fix use of modifiers under macOS [#8111]
  - CLI: Fix output when using clip with the -t flag [#8271]
  - Browser: Use asynchronous access confirm dialog [#8273]
  - Browser: Always send database locked/unlocked status [#8114]</changelog>
</package>
<package pkgid="ecee3761aa3a4c14d8c73c63ca3db0f495ab16a1f138da3b5010e085cb6361f1" name="keepassxc" arch="src">
  <version epoch="0" ver="2.7.3" rel="bp154.3.6.1"/>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1572091200">- update to 2.5.0
  https://github.com/keepassxreboot/keepassxc/releases/tag/2.5.0</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1575892800">- Update to version 2.5.1:
  * https://github.com/keepassxreboot/keepassxc/releases/tag/2.5.1</changelog>
  <changelog author="droidmonkey &lt;support@dmapps.us&gt;" date="1578139200">- Update to version 2.5.2:
  * https://github.com/keepassxreboot/keepassxc/releases/tag/2.5.2</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1579435200">- Update to version 2.5.3:
  * https://github.com/keepassxreboot/keepassxc/releases/tag/2.5.3</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1582891200">- Clicking the tray icon momentarily shows and immediately hides window. Make
  it stick (boo#1165293).
- Fix window not minimizing to tray.
  + add keepassxc-Fix-window-hiding-after-shown.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1586433600">- Update to version 2.5.4:
  * https://github.com/keepassxreboot/keepassxc/releases/tag/2.5.4</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1589198400">- Drop build/requirement on libgcrypt20-hmac boo#1171438</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1594123200">- Update to version 2.6.0:
  * https://keepassxc.org/blog/2020-07-07-2.6.0-released/
  * https://github.com/keepassxreboot/keepassxc/releases/tag/2.6.0
- drop keepassxc-Fix-window-hiding-after-shown.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1594123201">- add BR for asciidoctor</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1594209600">- add _constraints with 6GB to fix build on ppc64 hopefully</changelog>
  <changelog author="Carsten Ziepke &lt;kieltux@gmail.com&gt;" date="1598788800">- Update to version 2.6.1:
  - Add menu entries for auto-typing only username or only
    password [#4891]
  - Browser: Add command for retrieving current TOTP [#5278]
  - Improve man pages [#5010]
  - Linux: Support Xfce screen lock signals [#4971]
  - Linux: Add OARS metadata to AppStream markup [#5031]
  - SSH Agent: Substitute tilde with %USERPROFILE% on Windows
    [#5116]
  - Improve password generator UI and UX [#5129]
  - Do not prompt to restart if switching the theme back and
    forth [#5084]
  - Change actions for F1, F2, and F3 keys [#5082]
  - Skip referenced passwords in health check report [#5056]
  - Check system-wide Qt translations directory for downstream
  - translations packaging [#5064]
  - macOS: Change password visibility toggle shortcut to Ctrl+H to
  - avoid conflict with system shortcut [#5114]
  - Browser: Only display domain name in browser access confirm
    dialog to avoid overly wide window sizes [#5214]
  - Fix clipboard not being cleared when database is locked while
    timeout is still active [#5184]
  - Fix list of previous databases not being cleared in some
    cases [#5123]
  - Fix saving of non-data changes on database lock [#5210]
  - Fix search results banner theming [#5197]
  - Don?t enforce theme palette in Classic theme mode and add hover
    effect for buttons [#5122, #5267]
  - Fix label clipping in settings on high-DPI screens [#5227]
  - Fix excessive memory usage by icons on systems with high-DPI
    screens [#5266]
  - Fix crash if number of TOTP digits exceeds ten [#5106]
  - Fix slot detection when first YubiKey is configured on the second
    slot [#5004]
  - Prevent crash if focus widget gets deleted during saving [#5005]
  - Always show buttons for opening or saving attachments [#4956]
  - Update link to Auto-Type help [#5228]
  - Fix build errors with Ninja [#5121]
  - CLI: Fix db-info command wrongly labelled as db-show in
    usage listing [#5140]
  - Windows: Use Classic theme by default if high-contrast mode
    is on [#5191]
  - Linux: Add workaround for qt5ct bug, causing icons not to show
    up [#5011]
  - Linux: Correct high-DPI display by not allowing fractional
    scaling [#5185]
  - Browser: Consider subdomain and path when requesting only
    ?best-matching credentials? [#4832]
  - SSH Agent: Always forget all keys on lock [#5115]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1603368000">- Update to version 2.6.2
  - Added
  - Add option to keep window always on top to view menu [#5542]
  - Move show/hide usernames and passwords to view menu [#5542]
  - Add command line options and environment variables for
    changing the config locations [#5452]
  - Include TOTP settings in CSV import/export and add support
    for ISO datetimes [#5346]
  - Changed
  - Mask sensitive information in command execution confirmation
    prompt [#5542]
  - SSH Agent: Avoid shortcut conflict on macOS by changing "Add
    key" to Ctrl+H on all platforms [#5484]
  - Fixed
  - Prevent data loss with drag and drop between databases
    [#5536]
  - Fix crash when toggling Capslock rapidly [#5545]
  - Don't mark URL references as invalid URL [#5380]
  - Reset entry preview after search [#5483]
  - Set Qt::Dialog flag on database open dialog [#5356]
  - Fix sorting of database report columns [#5426]
  - Fix IfDevice matching logic [#5344]
  - Fix layout issues and a stray scrollbar appearing on top of
    the entry edit screen [#5424]
  - Fix tabbing into the notes field [#5424]
  - Fix password generator ignoring settings on load [#5340]
  - Restore natural entry sort order on application load [#5438]
  - Fix paperclip and TOTP columns not saving state [#5327]
  - Enforce fixed password font in entry preview [#5454]
  - Add scrollbar when new database wizard exceeds screen size
    [#5560]
  - Do not mark database as modified when viewing Auto-Type
    associations [#5542]
  - CLI: Fix two heap-use-after-free crashes [#5368, #5470]
  - Browser: Fix key exchange not working with multiple
    simultaneous users on Windows [#5485]
  - Browser: Fix entry retrieval when "only best matching" is
    enabled [#5316]
  - Browser: Ignore recycle bin on KeePassHTTP migration [#5481]
  - KeeShare: Fix import crash [#5542]
  - macOS: Fix toolbar theming and breadcrumb display issues
    [#5482]
  - macOS: Fix file dialog randomly closing [#5479]
  - macOS: Fix being unable to select OPVault files for import
    [#5341]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1610452800">- Update to version 2.6.3
  - Added
  - Support Argon2id KDF [#5778]
  - Support XMLv2 key files [#5798]
  - Changed
  - Improve CSV Import/Export, include time fields and TOTP
    [#5346]
  - Support empty area dragging of the application window [#5860]
  - Display default Auto-Type sequence in preview pane [#5654]
  - Remove strict length limit on generated passwords [#5748]
  - Hide key file path by default when unlocking database [#5779]
  - Document browser extension use with Edge in managed mode
    [#5692]
  - Windows: Prevent clipboard history and cloud sync [#5853]
  - macOS: Update the application icon to Big Sur styling [#5851]
  - Fixed
  - Re-select previously selected entry on database unlock
    [#5559]
  - Properly save special character choice in password generator
    [#5610]
  - Fix crash in browser integration with multiple similar
    entries [#5653]
  - Remove offset on username field in classic theme [#5788]
  - Ensure entry history is copied when drag/dropping entries and
    groups [#5817]
  - Close modal dialogs when database is locked [#5820]
  - Prevent crash when KeeShare modifies an entry that is
    currently being edited [#5827]
  - Improve preview of entry attributes [#5834]
  - Always activate/focus database open dialog preventing mistype
    [#5878]
  - Reports: fix calculation of average password length [#5862]
  - Linux: Delay startup on login to correct tray icon issues
    [#5724]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1612267200">- Update to 2.6.4
  - Added
  - Automatically adapt to light/dark system theme changes
    (Windows/macOS only) [#6034]
  - Changed
  - Show window title as tooltip on system tray [#5948]
  - Compress Snap release as LZO for faster initial startup
    [#5877]
  - Password generator: Set maximum selectable password length to
    999 [#5937]
  - Fixed
  - Fix crash on app close when using SSH agent [#5935]
  - Fix KDF selection showing wrong item when using Argon2id
    [#5923]
  - Automatically close About dialog on database lock if it is
    still open [#5947]
  - Linux: Fix automatic launch at system startup with AppImages
    [#5901]
  - Linux: Fix click-to-move on empty area activating when using
    menus [#5971]
  - Linux: Try multiple times to show tray icon if tray is not
    ready yet [#5948]
  - macOS: Fix KeePassXC blocking clean shutdown [#6002]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1623931200">- Update to 2.6.6
  - Fixed
  - Fix focusing search when pressing hotkey #6603
  - Trim whitespace from TOTP key input prior to processing #6604
  - Fix building on macOS #6598
  - Resolve compiler warnings for unused return values #6607
- Changes from 2.6.5
  - Added
  - Show search bar when toolbar is hidden or in overflow #6279
  - Show countdown for clipboard clearing in status bar #6333
  - Command line option to lock all open databases #6511
  - Allow CSV import of bare TOTP secrets #6211
  - Retain file creation time when saving database #6576
  - Set permissions of saved attachments to be private to the
    current user #6363
  - OPVault: Use Text instead of Name for attribute names #6334
  - Changed
  - Reports: Allow resizing of reports columns #6435
  - Reports: Toggle showing expired entries #6534
  - Save Always on Top setting #6236
  - Password generator can exclude additional lookalike
    characters (6/G, 8/B) #6196
  - Fixed
  - Allow setting MSI properties in unattended install #6196
  - Update MainWindow minimum size to enable smaller verticle
    space #6196
  - Use application font size when setting default or monospace
    fonts #6332
  - Fix notes not clearing in entry preview panel in some cases
    [#6481]
  - macOS: Correct window activation when restoring from tray
    [#6575]
  - macOS: Better handling of minimize after unlock when using
    browser integration #6338
  - Linux: Start after the system tray is available on LXQt #6216
  - Linux: Allow selection of modal dialogs on X11 in Auto-Type
    [#6204]
  - KeeShare: prevent crash when file extension is missing #6174</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1623931201">- newer version of fedora now have the sane cmake macros too.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1634126400">- add https://patch-diff.githubusercontent.com/raw/keepassxreboot/keepassxc/pull/7045.patch
  and adapt it for 2.6.6: This allows us building with LTO</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1648123200">- Update to 2.7.0
  - Major Additions
  - Implement KDBX 4.1 [#7114]
  - Add direct write save option for cloud storage and GVFS
    [#6594]
  - Prevent screen capture on Windows and macOS [#6030]
  - Support quick unlock using Windows Hello [#7384]
  - Support quick unlock using Apple Watch [#5526]
  - Allow specifying database backup paths [#7035]
  - Add tag functionality [#6487][#7436][#7446]
  - Add password rating column to entry view [#4797]
  - Add group clone action [#6124]
  - Show modifications between entry history items [#6789]
  - Ability to bulk-delete and purge unused custom icons [#5970]
  - Support adding custom passphrase wordlists [#6799]
  - Support passphrase wordlists in numbered and PGP-signed
    formats [#6791]
  - Implement support for hardware keys via wireless NFC [#6895]
  - SSH Agent: Add support for OpenSSH 8.2 FIDO/U2F keys [#6371]
  - CLI: Implement attachment handling [#5538]
  - CLI: Add support for okon in offline HIBP checks [#5478]
  - CLI: Implement search command and remove locate [#6805]
  - CLI: Add db statistic output to db-info command [#7032]
  - CLI: Add -i/--include option to generate command. [#7112]
  - CLI: Add a -n (--notes) option to add and edit commands
    [#4646]
  - CLI: Add keyfile option to import command [#5402]
  - CLI: Adding a best option to clip to copy a password of the
    best match [#4489]
  - Browser: Add Microsoft Edge support on Linux [#7100]
  - Browser: Support native password generator from the extension
    [#6529]
  - Browser: Add group settings [#4180]
  - Browser: Add feature to ignore entries for HTTP-Auth Logins
    [#5394]
  - Browser: Support triggering Auto-Type from browser extension
    [#6272]
  - Browser: Add delete-entry command to API [#6899]
  - Browser: Add search 'by-path' url to API [#5535]
  - Browser: search for entries by UUID to API [#4763]
  - Browser: Support auto-download of favicon on entry addition
    [#7179]
  - Auto-Type: Major improvements to Auto-Type
    [#5864][#7463][#7435][#7391][#7129][#6400][#6364][#6361][#5283][#7507]
  - Auto-Type: Fix typing to virtual machines on Windows [#7366]
  - Auto-Type: Re-implement X11 keysym emulation [#7098]
  - Auto-Type: Support multiple Xkb layouts [#6247]
  - Auto-Type: Abort keystroke if modifiers held on X11
    [#6351][#6357]
  - Auto-Type: Add TOTP option to entry level Auto-Type menu
    [#6675]
  - FdoSecrets: Major Refactor and Code Consolidation
    [#5747][#5660][#7043][#6915]
  - FdoSecrets: Implement unlock before search [#6943]
  - Reports: Add browser statistics report [#7197]
  - Major Changes
  - Port crypto backend to Botan [#6209]
  - Improve attachment handling and security
    [#6606][#5034][#7083]
  - Allow selecting any open database in unlock dialog [#5427]
  - KeeShare: Remove checking signed container and QuaZip
    dependency [#7223]
  - Introduce security option to enable copy on double click
    (default off) [#6433]
  - Add 'delete entry without confirm' functionality [#5812]
  - Improve macOS and Windows platform integration [#5851]
  - Lock only the current database by default [#6652]
  - Show expired entries on DB unlock [#7290]
  - Update D-Bus adaptor interface class name to match definition
    file [#7523]
  - Other Changes and Fixes
  - Add countdown progress bar to TOTP preview [#6930]
  - Enter favicon url directly on icons page [#6614]
  - Set C++17 as standard in the build system [#7180]
  - Internalize ykcore into code base [#6654]
  - Transition to Visual Studio builds on Windows [#5874]
  - Ability to delete entries from health check reports [#6537]
  - Enhance remembering last-used directories [#6711]
  - Implement org.freedesktop.appearance.color-scheme support on
    Linux [#7422]
  - Support sorting HTML export [#7011]
  - Add display number of characters in passphrases [#5449]
  - Use Alt+Tab on macOS to switch between databases [#5407]
  - Add feature to sort groups using shortcut keys [#6999]
  - Add CTRL+Enter to apply password generator changes [#6414]
  - Display Database created timestamp on statistics report
    [#6876]
  - Browser: Improve best matching credentials setting [#6893]
  - SSH Agent: Use both Pageant and OpenSSH agent simultaneously
    on Windows [#6288]
  - SSH Agent: Allow using database path to resolve keys [#6365]
  - SSH Agent: Show correct error messages in main window [#7166]
  - Multiple fixes for MSI installer [#6630]
  - Fix tab order for CSV import dialog to match screen order
    [#7315]
  - Don't mark kdbx:// urls as invalid [#7221]
  - Make selected text copyable instead of copying password
    [#7209]
  - Detect timestamp resolution for CSV files [#7196]
  - Fix crash while downloading favicon [#7104]
  - Correct naming of newly generated keyx files [#7010]
  - Place the 'Recycle Bin' at the bottom of the list when groups
    are sorted [#7004]
  - Handle tilde with custom browser paths [#6659]
  - Don't scroll up when deleting an entry [#6833]
  - Set the MIME-Type to text/plain when using wl-copy on wayland
    [#6832]
  - Fix adaptive icon painting [#5989][#6033]
  - Fix favicon download from URL with non-standard port [#5509]
  - Ignore recycle bin on KeePassHTTP migration [#5481]
  - Fix keepassxc-cr-recovery utility [#7521]
  - Fix Auto-Type not working when audio recording indicator is
    active on macOS 12.2+ [#7526]
- drop 7045.patch
- adapt build requires to the new version</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1649505600">- update to 2.7.1:
  * Show when tags are changed in entry history
  * Improve tags editing and allow spaces in tags
  * Improve layout of entry preview panel
  * Incorporate patches to support Flatpak distribution
  * Add expiration presets for 12 and 24 hours
  * Fix crash when building history change list
  * Fix hiding password on database unlock
  * Fix AES KDF slow transform speed
  * Auto-Type: Correct timing issue on macOS and Linux that prevented typing
  * Auto-Type: Fix use of Ctrl/Alt/Shift/Win modifiers on Windows
  * Auto-Type: Reduce/eliminate delay when searching for entries
  * Auto-Type: Map ASCII dead keys on Linux for international keyboards
  * CLI: Fix detection of hardware keys (YubiKey)
  * CLI: Add missing parameter -c to add/edit entries command
  * Secret Service: Fix crash when multiple prompts are shown
  * SSH Agent: Fix default agent selection on Windows
  * Fix database unlock dialog not being the top window on Linux
  * Fix drag/drop entries between tabs on Wayland
  * Fix compiling with minizip-ng</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1666612800">- update to 2.7.3:
  Due to a bug in macOS window behavior, 2.7.2 has been immediately
  superseded by 2.7.3.
  - Changes
  - Enhance Tags Support and Add Saved Searches [#8435, #8607]
  - Significant improvements to entry preview panel [#7993]
  - Add password strength indicator to all password fields [#7885]
  - Limit zxcvbn entropy estimation length to 128 characters [#7748]
  - Try full URL path when fetching favicon [#8565]
  - Hide usernames in preview panel when hidden in entry view [#8608]
  - Enable dark title bar on windows when accent color is not used [#8498]
  - Add option to display passwords in color in preview panel [#7097]
  - Add XML Export option to GUI [#8524]
  - Increase entropy required for a "good" password rating to 75 [#8523]
  - Add shortcut to copy password with TOTP appended [#8443]
  - Show entry count in status bar [#8435]
  - Allow KeePassXC to be built without X11 [#8147]
  - Enable use of VivoKey Apex and Dangerous Things FlexSecure tokens [#8332]
  - Add setting for number of recent files [#8239]
  - Add Ctrl+Tab shortcut to cycle databases in unlock dialog [#8168]
  - Replace offensive words in eff_large.wordlist [#7968]
  - Auto-Type: PICKCHARS can specify attribute and ignore BEEP [#8118]
  - Linux: Add isHardwareKeySupported and refreshHardwareKeys to DBus methods [#8055]
  - Add config variable to specify default database file name [#8042]
  - Support numeric aware sorting on Windows and macOS [#8363]
  - CLI: Add db-edit command [#8400]
  - CLI: Add option to display all attributes with show command [#8256]
  - CLI: Show UUID and tags with show and clip commands [#8241]
  - Browser: Move socket into separate directory on Linux [#8030]
  - Browser: Add group setting to omit WWW subdomain when matching URLs [#7988]
  - FdoSecrets: Ask to unlock the database when creating items [#8022, #8028]
  - FdoSecrets: Skip entries in recycle bin when searching [#8021]
  - Fixes
  - Fix potential deadlock in UI when saving [#8606]
  - Fix newlines when copying notes from preview panel [#8542]
  - Fix dark mode detection on Linux [#8477]
  - Fix crash when deleting items in recycle bin while searching [#8117]
  - Fix crash when trying to close database during unlock [#8144]
  - Fix tabbing around the interface [#8435, #8520]
  - Fix OPVault import when there are multiple OTP fields [#8436]
  - Fix various Windows Hello bugs [#8354]
  - Fix use of Apple Watch for Quick Unlock [#8311]
  - Better handling of "Lock on Minimize" setting [#8202]
  - Check for write permission before entering portable mode [#8447]
  - Correct regex escape logic to prevent parse errors [#7778]
  - Normalize slashes and file case for last used databases [#7864, #7214]
  - Link ykcore against pthread [#7807]
  - Auto-Type: Fix menu entries in selection dialog on Windows [#7987]
  - Auto-Type: Fix use of modifiers under macOS [#8111]
  - CLI: Fix output when using clip with the -t flag [#8271]
  - Browser: Use asynchronous access confirm dialog [#8273]
  - Browser: Always send database locked/unlocked status [#8114]</changelog>
</package>
<package pkgid="fd190fdf92cf339488e9996c838b7c774abd6714fa8e904f7aaea764d27393c1" name="keepassxc" arch="x86_64">
  <version epoch="0" ver="2.7.3" rel="bp154.3.6.1"/>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1572091200">- update to 2.5.0
  https://github.com/keepassxreboot/keepassxc/releases/tag/2.5.0</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1575892800">- Update to version 2.5.1:
  * https://github.com/keepassxreboot/keepassxc/releases/tag/2.5.1</changelog>
  <changelog author="droidmonkey &lt;support@dmapps.us&gt;" date="1578139200">- Update to version 2.5.2:
  * https://github.com/keepassxreboot/keepassxc/releases/tag/2.5.2</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1579435200">- Update to version 2.5.3:
  * https://github.com/keepassxreboot/keepassxc/releases/tag/2.5.3</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1582891200">- Clicking the tray icon momentarily shows and immediately hides window. Make
  it stick (boo#1165293).
- Fix window not minimizing to tray.
  + add keepassxc-Fix-window-hiding-after-shown.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1586433600">- Update to version 2.5.4:
  * https://github.com/keepassxreboot/keepassxc/releases/tag/2.5.4</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1589198400">- Drop build/requirement on libgcrypt20-hmac boo#1171438</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1594123200">- Update to version 2.6.0:
  * https://keepassxc.org/blog/2020-07-07-2.6.0-released/
  * https://github.com/keepassxreboot/keepassxc/releases/tag/2.6.0
- drop keepassxc-Fix-window-hiding-after-shown.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1594123201">- add BR for asciidoctor</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1594209600">- add _constraints with 6GB to fix build on ppc64 hopefully</changelog>
  <changelog author="Carsten Ziepke &lt;kieltux@gmail.com&gt;" date="1598788800">- Update to version 2.6.1:
  - Add menu entries for auto-typing only username or only
    password [#4891]
  - Browser: Add command for retrieving current TOTP [#5278]
  - Improve man pages [#5010]
  - Linux: Support Xfce screen lock signals [#4971]
  - Linux: Add OARS metadata to AppStream markup [#5031]
  - SSH Agent: Substitute tilde with %USERPROFILE% on Windows
    [#5116]
  - Improve password generator UI and UX [#5129]
  - Do not prompt to restart if switching the theme back and
    forth [#5084]
  - Change actions for F1, F2, and F3 keys [#5082]
  - Skip referenced passwords in health check report [#5056]
  - Check system-wide Qt translations directory for downstream
  - translations packaging [#5064]
  - macOS: Change password visibility toggle shortcut to Ctrl+H to
  - avoid conflict with system shortcut [#5114]
  - Browser: Only display domain name in browser access confirm
    dialog to avoid overly wide window sizes [#5214]
  - Fix clipboard not being cleared when database is locked while
    timeout is still active [#5184]
  - Fix list of previous databases not being cleared in some
    cases [#5123]
  - Fix saving of non-data changes on database lock [#5210]
  - Fix search results banner theming [#5197]
  - Don?t enforce theme palette in Classic theme mode and add hover
    effect for buttons [#5122, #5267]
  - Fix label clipping in settings on high-DPI screens [#5227]
  - Fix excessive memory usage by icons on systems with high-DPI
    screens [#5266]
  - Fix crash if number of TOTP digits exceeds ten [#5106]
  - Fix slot detection when first YubiKey is configured on the second
    slot [#5004]
  - Prevent crash if focus widget gets deleted during saving [#5005]
  - Always show buttons for opening or saving attachments [#4956]
  - Update link to Auto-Type help [#5228]
  - Fix build errors with Ninja [#5121]
  - CLI: Fix db-info command wrongly labelled as db-show in
    usage listing [#5140]
  - Windows: Use Classic theme by default if high-contrast mode
    is on [#5191]
  - Linux: Add workaround for qt5ct bug, causing icons not to show
    up [#5011]
  - Linux: Correct high-DPI display by not allowing fractional
    scaling [#5185]
  - Browser: Consider subdomain and path when requesting only
    ?best-matching credentials? [#4832]
  - SSH Agent: Always forget all keys on lock [#5115]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1603368000">- Update to version 2.6.2
  - Added
  - Add option to keep window always on top to view menu [#5542]
  - Move show/hide usernames and passwords to view menu [#5542]
  - Add command line options and environment variables for
    changing the config locations [#5452]
  - Include TOTP settings in CSV import/export and add support
    for ISO datetimes [#5346]
  - Changed
  - Mask sensitive information in command execution confirmation
    prompt [#5542]
  - SSH Agent: Avoid shortcut conflict on macOS by changing "Add
    key" to Ctrl+H on all platforms [#5484]
  - Fixed
  - Prevent data loss with drag and drop between databases
    [#5536]
  - Fix crash when toggling Capslock rapidly [#5545]
  - Don't mark URL references as invalid URL [#5380]
  - Reset entry preview after search [#5483]
  - Set Qt::Dialog flag on database open dialog [#5356]
  - Fix sorting of database report columns [#5426]
  - Fix IfDevice matching logic [#5344]
  - Fix layout issues and a stray scrollbar appearing on top of
    the entry edit screen [#5424]
  - Fix tabbing into the notes field [#5424]
  - Fix password generator ignoring settings on load [#5340]
  - Restore natural entry sort order on application load [#5438]
  - Fix paperclip and TOTP columns not saving state [#5327]
  - Enforce fixed password font in entry preview [#5454]
  - Add scrollbar when new database wizard exceeds screen size
    [#5560]
  - Do not mark database as modified when viewing Auto-Type
    associations [#5542]
  - CLI: Fix two heap-use-after-free crashes [#5368, #5470]
  - Browser: Fix key exchange not working with multiple
    simultaneous users on Windows [#5485]
  - Browser: Fix entry retrieval when "only best matching" is
    enabled [#5316]
  - Browser: Ignore recycle bin on KeePassHTTP migration [#5481]
  - KeeShare: Fix import crash [#5542]
  - macOS: Fix toolbar theming and breadcrumb display issues
    [#5482]
  - macOS: Fix file dialog randomly closing [#5479]
  - macOS: Fix being unable to select OPVault files for import
    [#5341]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1610452800">- Update to version 2.6.3
  - Added
  - Support Argon2id KDF [#5778]
  - Support XMLv2 key files [#5798]
  - Changed
  - Improve CSV Import/Export, include time fields and TOTP
    [#5346]
  - Support empty area dragging of the application window [#5860]
  - Display default Auto-Type sequence in preview pane [#5654]
  - Remove strict length limit on generated passwords [#5748]
  - Hide key file path by default when unlocking database [#5779]
  - Document browser extension use with Edge in managed mode
    [#5692]
  - Windows: Prevent clipboard history and cloud sync [#5853]
  - macOS: Update the application icon to Big Sur styling [#5851]
  - Fixed
  - Re-select previously selected entry on database unlock
    [#5559]
  - Properly save special character choice in password generator
    [#5610]
  - Fix crash in browser integration with multiple similar
    entries [#5653]
  - Remove offset on username field in classic theme [#5788]
  - Ensure entry history is copied when drag/dropping entries and
    groups [#5817]
  - Close modal dialogs when database is locked [#5820]
  - Prevent crash when KeeShare modifies an entry that is
    currently being edited [#5827]
  - Improve preview of entry attributes [#5834]
  - Always activate/focus database open dialog preventing mistype
    [#5878]
  - Reports: fix calculation of average password length [#5862]
  - Linux: Delay startup on login to correct tray icon issues
    [#5724]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1612267200">- Update to 2.6.4
  - Added
  - Automatically adapt to light/dark system theme changes
    (Windows/macOS only) [#6034]
  - Changed
  - Show window title as tooltip on system tray [#5948]
  - Compress Snap release as LZO for faster initial startup
    [#5877]
  - Password generator: Set maximum selectable password length to
    999 [#5937]
  - Fixed
  - Fix crash on app close when using SSH agent [#5935]
  - Fix KDF selection showing wrong item when using Argon2id
    [#5923]
  - Automatically close About dialog on database lock if it is
    still open [#5947]
  - Linux: Fix automatic launch at system startup with AppImages
    [#5901]
  - Linux: Fix click-to-move on empty area activating when using
    menus [#5971]
  - Linux: Try multiple times to show tray icon if tray is not
    ready yet [#5948]
  - macOS: Fix KeePassXC blocking clean shutdown [#6002]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1623931200">- Update to 2.6.6
  - Fixed
  - Fix focusing search when pressing hotkey #6603
  - Trim whitespace from TOTP key input prior to processing #6604
  - Fix building on macOS #6598
  - Resolve compiler warnings for unused return values #6607
- Changes from 2.6.5
  - Added
  - Show search bar when toolbar is hidden or in overflow #6279
  - Show countdown for clipboard clearing in status bar #6333
  - Command line option to lock all open databases #6511
  - Allow CSV import of bare TOTP secrets #6211
  - Retain file creation time when saving database #6576
  - Set permissions of saved attachments to be private to the
    current user #6363
  - OPVault: Use Text instead of Name for attribute names #6334
  - Changed
  - Reports: Allow resizing of reports columns #6435
  - Reports: Toggle showing expired entries #6534
  - Save Always on Top setting #6236
  - Password generator can exclude additional lookalike
    characters (6/G, 8/B) #6196
  - Fixed
  - Allow setting MSI properties in unattended install #6196
  - Update MainWindow minimum size to enable smaller verticle
    space #6196
  - Use application font size when setting default or monospace
    fonts #6332
  - Fix notes not clearing in entry preview panel in some cases
    [#6481]
  - macOS: Correct window activation when restoring from tray
    [#6575]
  - macOS: Better handling of minimize after unlock when using
    browser integration #6338
  - Linux: Start after the system tray is available on LXQt #6216
  - Linux: Allow selection of modal dialogs on X11 in Auto-Type
    [#6204]
  - KeeShare: prevent crash when file extension is missing #6174</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1623931201">- newer version of fedora now have the sane cmake macros too.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1634126400">- add https://patch-diff.githubusercontent.com/raw/keepassxreboot/keepassxc/pull/7045.patch
  and adapt it for 2.6.6: This allows us building with LTO</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1648123200">- Update to 2.7.0
  - Major Additions
  - Implement KDBX 4.1 [#7114]
  - Add direct write save option for cloud storage and GVFS
    [#6594]
  - Prevent screen capture on Windows and macOS [#6030]
  - Support quick unlock using Windows Hello [#7384]
  - Support quick unlock using Apple Watch [#5526]
  - Allow specifying database backup paths [#7035]
  - Add tag functionality [#6487][#7436][#7446]
  - Add password rating column to entry view [#4797]
  - Add group clone action [#6124]
  - Show modifications between entry history items [#6789]
  - Ability to bulk-delete and purge unused custom icons [#5970]
  - Support adding custom passphrase wordlists [#6799]
  - Support passphrase wordlists in numbered and PGP-signed
    formats [#6791]
  - Implement support for hardware keys via wireless NFC [#6895]
  - SSH Agent: Add support for OpenSSH 8.2 FIDO/U2F keys [#6371]
  - CLI: Implement attachment handling [#5538]
  - CLI: Add support for okon in offline HIBP checks [#5478]
  - CLI: Implement search command and remove locate [#6805]
  - CLI: Add db statistic output to db-info command [#7032]
  - CLI: Add -i/--include option to generate command. [#7112]
  - CLI: Add a -n (--notes) option to add and edit commands
    [#4646]
  - CLI: Add keyfile option to import command [#5402]
  - CLI: Adding a best option to clip to copy a password of the
    best match [#4489]
  - Browser: Add Microsoft Edge support on Linux [#7100]
  - Browser: Support native password generator from the extension
    [#6529]
  - Browser: Add group settings [#4180]
  - Browser: Add feature to ignore entries for HTTP-Auth Logins
    [#5394]
  - Browser: Support triggering Auto-Type from browser extension
    [#6272]
  - Browser: Add delete-entry command to API [#6899]
  - Browser: Add search 'by-path' url to API [#5535]
  - Browser: search for entries by UUID to API [#4763]
  - Browser: Support auto-download of favicon on entry addition
    [#7179]
  - Auto-Type: Major improvements to Auto-Type
    [#5864][#7463][#7435][#7391][#7129][#6400][#6364][#6361][#5283][#7507]
  - Auto-Type: Fix typing to virtual machines on Windows [#7366]
  - Auto-Type: Re-implement X11 keysym emulation [#7098]
  - Auto-Type: Support multiple Xkb layouts [#6247]
  - Auto-Type: Abort keystroke if modifiers held on X11
    [#6351][#6357]
  - Auto-Type: Add TOTP option to entry level Auto-Type menu
    [#6675]
  - FdoSecrets: Major Refactor and Code Consolidation
    [#5747][#5660][#7043][#6915]
  - FdoSecrets: Implement unlock before search [#6943]
  - Reports: Add browser statistics report [#7197]
  - Major Changes
  - Port crypto backend to Botan [#6209]
  - Improve attachment handling and security
    [#6606][#5034][#7083]
  - Allow selecting any open database in unlock dialog [#5427]
  - KeeShare: Remove checking signed container and QuaZip
    dependency [#7223]
  - Introduce security option to enable copy on double click
    (default off) [#6433]
  - Add 'delete entry without confirm' functionality [#5812]
  - Improve macOS and Windows platform integration [#5851]
  - Lock only the current database by default [#6652]
  - Show expired entries on DB unlock [#7290]
  - Update D-Bus adaptor interface class name to match definition
    file [#7523]
  - Other Changes and Fixes
  - Add countdown progress bar to TOTP preview [#6930]
  - Enter favicon url directly on icons page [#6614]
  - Set C++17 as standard in the build system [#7180]
  - Internalize ykcore into code base [#6654]
  - Transition to Visual Studio builds on Windows [#5874]
  - Ability to delete entries from health check reports [#6537]
  - Enhance remembering last-used directories [#6711]
  - Implement org.freedesktop.appearance.color-scheme support on
    Linux [#7422]
  - Support sorting HTML export [#7011]
  - Add display number of characters in passphrases [#5449]
  - Use Alt+Tab on macOS to switch between databases [#5407]
  - Add feature to sort groups using shortcut keys [#6999]
  - Add CTRL+Enter to apply password generator changes [#6414]
  - Display Database created timestamp on statistics report
    [#6876]
  - Browser: Improve best matching credentials setting [#6893]
  - SSH Agent: Use both Pageant and OpenSSH agent simultaneously
    on Windows [#6288]
  - SSH Agent: Allow using database path to resolve keys [#6365]
  - SSH Agent: Show correct error messages in main window [#7166]
  - Multiple fixes for MSI installer [#6630]
  - Fix tab order for CSV import dialog to match screen order
    [#7315]
  - Don't mark kdbx:// urls as invalid [#7221]
  - Make selected text copyable instead of copying password
    [#7209]
  - Detect timestamp resolution for CSV files [#7196]
  - Fix crash while downloading favicon [#7104]
  - Correct naming of newly generated keyx files [#7010]
  - Place the 'Recycle Bin' at the bottom of the list when groups
    are sorted [#7004]
  - Handle tilde with custom browser paths [#6659]
  - Don't scroll up when deleting an entry [#6833]
  - Set the MIME-Type to text/plain when using wl-copy on wayland
    [#6832]
  - Fix adaptive icon painting [#5989][#6033]
  - Fix favicon download from URL with non-standard port [#5509]
  - Ignore recycle bin on KeePassHTTP migration [#5481]
  - Fix keepassxc-cr-recovery utility [#7521]
  - Fix Auto-Type not working when audio recording indicator is
    active on macOS 12.2+ [#7526]
- drop 7045.patch
- adapt build requires to the new version</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1649505600">- update to 2.7.1:
  * Show when tags are changed in entry history
  * Improve tags editing and allow spaces in tags
  * Improve layout of entry preview panel
  * Incorporate patches to support Flatpak distribution
  * Add expiration presets for 12 and 24 hours
  * Fix crash when building history change list
  * Fix hiding password on database unlock
  * Fix AES KDF slow transform speed
  * Auto-Type: Correct timing issue on macOS and Linux that prevented typing
  * Auto-Type: Fix use of Ctrl/Alt/Shift/Win modifiers on Windows
  * Auto-Type: Reduce/eliminate delay when searching for entries
  * Auto-Type: Map ASCII dead keys on Linux for international keyboards
  * CLI: Fix detection of hardware keys (YubiKey)
  * CLI: Add missing parameter -c to add/edit entries command
  * Secret Service: Fix crash when multiple prompts are shown
  * SSH Agent: Fix default agent selection on Windows
  * Fix database unlock dialog not being the top window on Linux
  * Fix drag/drop entries between tabs on Wayland
  * Fix compiling with minizip-ng</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1666612800">- update to 2.7.3:
  Due to a bug in macOS window behavior, 2.7.2 has been immediately
  superseded by 2.7.3.
  - Changes
  - Enhance Tags Support and Add Saved Searches [#8435, #8607]
  - Significant improvements to entry preview panel [#7993]
  - Add password strength indicator to all password fields [#7885]
  - Limit zxcvbn entropy estimation length to 128 characters [#7748]
  - Try full URL path when fetching favicon [#8565]
  - Hide usernames in preview panel when hidden in entry view [#8608]
  - Enable dark title bar on windows when accent color is not used [#8498]
  - Add option to display passwords in color in preview panel [#7097]
  - Add XML Export option to GUI [#8524]
  - Increase entropy required for a "good" password rating to 75 [#8523]
  - Add shortcut to copy password with TOTP appended [#8443]
  - Show entry count in status bar [#8435]
  - Allow KeePassXC to be built without X11 [#8147]
  - Enable use of VivoKey Apex and Dangerous Things FlexSecure tokens [#8332]
  - Add setting for number of recent files [#8239]
  - Add Ctrl+Tab shortcut to cycle databases in unlock dialog [#8168]
  - Replace offensive words in eff_large.wordlist [#7968]
  - Auto-Type: PICKCHARS can specify attribute and ignore BEEP [#8118]
  - Linux: Add isHardwareKeySupported and refreshHardwareKeys to DBus methods [#8055]
  - Add config variable to specify default database file name [#8042]
  - Support numeric aware sorting on Windows and macOS [#8363]
  - CLI: Add db-edit command [#8400]
  - CLI: Add option to display all attributes with show command [#8256]
  - CLI: Show UUID and tags with show and clip commands [#8241]
  - Browser: Move socket into separate directory on Linux [#8030]
  - Browser: Add group setting to omit WWW subdomain when matching URLs [#7988]
  - FdoSecrets: Ask to unlock the database when creating items [#8022, #8028]
  - FdoSecrets: Skip entries in recycle bin when searching [#8021]
  - Fixes
  - Fix potential deadlock in UI when saving [#8606]
  - Fix newlines when copying notes from preview panel [#8542]
  - Fix dark mode detection on Linux [#8477]
  - Fix crash when deleting items in recycle bin while searching [#8117]
  - Fix crash when trying to close database during unlock [#8144]
  - Fix tabbing around the interface [#8435, #8520]
  - Fix OPVault import when there are multiple OTP fields [#8436]
  - Fix various Windows Hello bugs [#8354]
  - Fix use of Apple Watch for Quick Unlock [#8311]
  - Better handling of "Lock on Minimize" setting [#8202]
  - Check for write permission before entering portable mode [#8447]
  - Correct regex escape logic to prevent parse errors [#7778]
  - Normalize slashes and file case for last used databases [#7864, #7214]
  - Link ykcore against pthread [#7807]
  - Auto-Type: Fix menu entries in selection dialog on Windows [#7987]
  - Auto-Type: Fix use of modifiers under macOS [#8111]
  - CLI: Fix output when using clip with the -t flag [#8271]
  - Browser: Use asynchronous access confirm dialog [#8273]
  - Browser: Always send database locked/unlocked status [#8114]</changelog>
</package>
<package pkgid="ae38ae60a3ea24ff052a5b112816940e3bc6594e33b942f278204a7d52031509" name="keepassxc" arch="aarch64">
  <version epoch="0" ver="2.7.4" rel="bp154.3.9.1"/>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1575892800">- Update to version 2.5.1:
  * https://github.com/keepassxreboot/keepassxc/releases/tag/2.5.1</changelog>
  <changelog author="droidmonkey &lt;support@dmapps.us&gt;" date="1578139200">- Update to version 2.5.2:
  * https://github.com/keepassxreboot/keepassxc/releases/tag/2.5.2</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1579435200">- Update to version 2.5.3:
  * https://github.com/keepassxreboot/keepassxc/releases/tag/2.5.3</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1582891200">- Clicking the tray icon momentarily shows and immediately hides window. Make
  it stick (boo#1165293).
- Fix window not minimizing to tray.
  + add keepassxc-Fix-window-hiding-after-shown.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1586433600">- Update to version 2.5.4:
  * https://github.com/keepassxreboot/keepassxc/releases/tag/2.5.4</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1589198400">- Drop build/requirement on libgcrypt20-hmac boo#1171438</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1594123200">- Update to version 2.6.0:
  * https://keepassxc.org/blog/2020-07-07-2.6.0-released/
  * https://github.com/keepassxreboot/keepassxc/releases/tag/2.6.0
- drop keepassxc-Fix-window-hiding-after-shown.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1594123201">- add BR for asciidoctor</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1594209600">- add _constraints with 6GB to fix build on ppc64 hopefully</changelog>
  <changelog author="Carsten Ziepke &lt;kieltux@gmail.com&gt;" date="1598788800">- Update to version 2.6.1:
  - Add menu entries for auto-typing only username or only
    password [#4891]
  - Browser: Add command for retrieving current TOTP [#5278]
  - Improve man pages [#5010]
  - Linux: Support Xfce screen lock signals [#4971]
  - Linux: Add OARS metadata to AppStream markup [#5031]
  - SSH Agent: Substitute tilde with %USERPROFILE% on Windows
    [#5116]
  - Improve password generator UI and UX [#5129]
  - Do not prompt to restart if switching the theme back and
    forth [#5084]
  - Change actions for F1, F2, and F3 keys [#5082]
  - Skip referenced passwords in health check report [#5056]
  - Check system-wide Qt translations directory for downstream
  - translations packaging [#5064]
  - macOS: Change password visibility toggle shortcut to Ctrl+H to
  - avoid conflict with system shortcut [#5114]
  - Browser: Only display domain name in browser access confirm
    dialog to avoid overly wide window sizes [#5214]
  - Fix clipboard not being cleared when database is locked while
    timeout is still active [#5184]
  - Fix list of previous databases not being cleared in some
    cases [#5123]
  - Fix saving of non-data changes on database lock [#5210]
  - Fix search results banner theming [#5197]
  - Don?t enforce theme palette in Classic theme mode and add hover
    effect for buttons [#5122, #5267]
  - Fix label clipping in settings on high-DPI screens [#5227]
  - Fix excessive memory usage by icons on systems with high-DPI
    screens [#5266]
  - Fix crash if number of TOTP digits exceeds ten [#5106]
  - Fix slot detection when first YubiKey is configured on the second
    slot [#5004]
  - Prevent crash if focus widget gets deleted during saving [#5005]
  - Always show buttons for opening or saving attachments [#4956]
  - Update link to Auto-Type help [#5228]
  - Fix build errors with Ninja [#5121]
  - CLI: Fix db-info command wrongly labelled as db-show in
    usage listing [#5140]
  - Windows: Use Classic theme by default if high-contrast mode
    is on [#5191]
  - Linux: Add workaround for qt5ct bug, causing icons not to show
    up [#5011]
  - Linux: Correct high-DPI display by not allowing fractional
    scaling [#5185]
  - Browser: Consider subdomain and path when requesting only
    ?best-matching credentials? [#4832]
  - SSH Agent: Always forget all keys on lock [#5115]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1603368000">- Update to version 2.6.2
  - Added
  - Add option to keep window always on top to view menu [#5542]
  - Move show/hide usernames and passwords to view menu [#5542]
  - Add command line options and environment variables for
    changing the config locations [#5452]
  - Include TOTP settings in CSV import/export and add support
    for ISO datetimes [#5346]
  - Changed
  - Mask sensitive information in command execution confirmation
    prompt [#5542]
  - SSH Agent: Avoid shortcut conflict on macOS by changing "Add
    key" to Ctrl+H on all platforms [#5484]
  - Fixed
  - Prevent data loss with drag and drop between databases
    [#5536]
  - Fix crash when toggling Capslock rapidly [#5545]
  - Don't mark URL references as invalid URL [#5380]
  - Reset entry preview after search [#5483]
  - Set Qt::Dialog flag on database open dialog [#5356]
  - Fix sorting of database report columns [#5426]
  - Fix IfDevice matching logic [#5344]
  - Fix layout issues and a stray scrollbar appearing on top of
    the entry edit screen [#5424]
  - Fix tabbing into the notes field [#5424]
  - Fix password generator ignoring settings on load [#5340]
  - Restore natural entry sort order on application load [#5438]
  - Fix paperclip and TOTP columns not saving state [#5327]
  - Enforce fixed password font in entry preview [#5454]
  - Add scrollbar when new database wizard exceeds screen size
    [#5560]
  - Do not mark database as modified when viewing Auto-Type
    associations [#5542]
  - CLI: Fix two heap-use-after-free crashes [#5368, #5470]
  - Browser: Fix key exchange not working with multiple
    simultaneous users on Windows [#5485]
  - Browser: Fix entry retrieval when "only best matching" is
    enabled [#5316]
  - Browser: Ignore recycle bin on KeePassHTTP migration [#5481]
  - KeeShare: Fix import crash [#5542]
  - macOS: Fix toolbar theming and breadcrumb display issues
    [#5482]
  - macOS: Fix file dialog randomly closing [#5479]
  - macOS: Fix being unable to select OPVault files for import
    [#5341]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1610452800">- Update to version 2.6.3
  - Added
  - Support Argon2id KDF [#5778]
  - Support XMLv2 key files [#5798]
  - Changed
  - Improve CSV Import/Export, include time fields and TOTP
    [#5346]
  - Support empty area dragging of the application window [#5860]
  - Display default Auto-Type sequence in preview pane [#5654]
  - Remove strict length limit on generated passwords [#5748]
  - Hide key file path by default when unlocking database [#5779]
  - Document browser extension use with Edge in managed mode
    [#5692]
  - Windows: Prevent clipboard history and cloud sync [#5853]
  - macOS: Update the application icon to Big Sur styling [#5851]
  - Fixed
  - Re-select previously selected entry on database unlock
    [#5559]
  - Properly save special character choice in password generator
    [#5610]
  - Fix crash in browser integration with multiple similar
    entries [#5653]
  - Remove offset on username field in classic theme [#5788]
  - Ensure entry history is copied when drag/dropping entries and
    groups [#5817]
  - Close modal dialogs when database is locked [#5820]
  - Prevent crash when KeeShare modifies an entry that is
    currently being edited [#5827]
  - Improve preview of entry attributes [#5834]
  - Always activate/focus database open dialog preventing mistype
    [#5878]
  - Reports: fix calculation of average password length [#5862]
  - Linux: Delay startup on login to correct tray icon issues
    [#5724]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1612267200">- Update to 2.6.4
  - Added
  - Automatically adapt to light/dark system theme changes
    (Windows/macOS only) [#6034]
  - Changed
  - Show window title as tooltip on system tray [#5948]
  - Compress Snap release as LZO for faster initial startup
    [#5877]
  - Password generator: Set maximum selectable password length to
    999 [#5937]
  - Fixed
  - Fix crash on app close when using SSH agent [#5935]
  - Fix KDF selection showing wrong item when using Argon2id
    [#5923]
  - Automatically close About dialog on database lock if it is
    still open [#5947]
  - Linux: Fix automatic launch at system startup with AppImages
    [#5901]
  - Linux: Fix click-to-move on empty area activating when using
    menus [#5971]
  - Linux: Try multiple times to show tray icon if tray is not
    ready yet [#5948]
  - macOS: Fix KeePassXC blocking clean shutdown [#6002]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1623931200">- Update to 2.6.6
  - Fixed
  - Fix focusing search when pressing hotkey #6603
  - Trim whitespace from TOTP key input prior to processing #6604
  - Fix building on macOS #6598
  - Resolve compiler warnings for unused return values #6607
- Changes from 2.6.5
  - Added
  - Show search bar when toolbar is hidden or in overflow #6279
  - Show countdown for clipboard clearing in status bar #6333
  - Command line option to lock all open databases #6511
  - Allow CSV import of bare TOTP secrets #6211
  - Retain file creation time when saving database #6576
  - Set permissions of saved attachments to be private to the
    current user #6363
  - OPVault: Use Text instead of Name for attribute names #6334
  - Changed
  - Reports: Allow resizing of reports columns #6435
  - Reports: Toggle showing expired entries #6534
  - Save Always on Top setting #6236
  - Password generator can exclude additional lookalike
    characters (6/G, 8/B) #6196
  - Fixed
  - Allow setting MSI properties in unattended install #6196
  - Update MainWindow minimum size to enable smaller verticle
    space #6196
  - Use application font size when setting default or monospace
    fonts #6332
  - Fix notes not clearing in entry preview panel in some cases
    [#6481]
  - macOS: Correct window activation when restoring from tray
    [#6575]
  - macOS: Better handling of minimize after unlock when using
    browser integration #6338
  - Linux: Start after the system tray is available on LXQt #6216
  - Linux: Allow selection of modal dialogs on X11 in Auto-Type
    [#6204]
  - KeeShare: prevent crash when file extension is missing #6174</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1623931201">- newer version of fedora now have the sane cmake macros too.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1634126400">- add https://patch-diff.githubusercontent.com/raw/keepassxreboot/keepassxc/pull/7045.patch
  and adapt it for 2.6.6: This allows us building with LTO</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1648123200">- Update to 2.7.0
  - Major Additions
  - Implement KDBX 4.1 [#7114]
  - Add direct write save option for cloud storage and GVFS
    [#6594]
  - Prevent screen capture on Windows and macOS [#6030]
  - Support quick unlock using Windows Hello [#7384]
  - Support quick unlock using Apple Watch [#5526]
  - Allow specifying database backup paths [#7035]
  - Add tag functionality [#6487][#7436][#7446]
  - Add password rating column to entry view [#4797]
  - Add group clone action [#6124]
  - Show modifications between entry history items [#6789]
  - Ability to bulk-delete and purge unused custom icons [#5970]
  - Support adding custom passphrase wordlists [#6799]
  - Support passphrase wordlists in numbered and PGP-signed
    formats [#6791]
  - Implement support for hardware keys via wireless NFC [#6895]
  - SSH Agent: Add support for OpenSSH 8.2 FIDO/U2F keys [#6371]
  - CLI: Implement attachment handling [#5538]
  - CLI: Add support for okon in offline HIBP checks [#5478]
  - CLI: Implement search command and remove locate [#6805]
  - CLI: Add db statistic output to db-info command [#7032]
  - CLI: Add -i/--include option to generate command. [#7112]
  - CLI: Add a -n (--notes) option to add and edit commands
    [#4646]
  - CLI: Add keyfile option to import command [#5402]
  - CLI: Adding a best option to clip to copy a password of the
    best match [#4489]
  - Browser: Add Microsoft Edge support on Linux [#7100]
  - Browser: Support native password generator from the extension
    [#6529]
  - Browser: Add group settings [#4180]
  - Browser: Add feature to ignore entries for HTTP-Auth Logins
    [#5394]
  - Browser: Support triggering Auto-Type from browser extension
    [#6272]
  - Browser: Add delete-entry command to API [#6899]
  - Browser: Add search 'by-path' url to API [#5535]
  - Browser: search for entries by UUID to API [#4763]
  - Browser: Support auto-download of favicon on entry addition
    [#7179]
  - Auto-Type: Major improvements to Auto-Type
    [#5864][#7463][#7435][#7391][#7129][#6400][#6364][#6361][#5283][#7507]
  - Auto-Type: Fix typing to virtual machines on Windows [#7366]
  - Auto-Type: Re-implement X11 keysym emulation [#7098]
  - Auto-Type: Support multiple Xkb layouts [#6247]
  - Auto-Type: Abort keystroke if modifiers held on X11
    [#6351][#6357]
  - Auto-Type: Add TOTP option to entry level Auto-Type menu
    [#6675]
  - FdoSecrets: Major Refactor and Code Consolidation
    [#5747][#5660][#7043][#6915]
  - FdoSecrets: Implement unlock before search [#6943]
  - Reports: Add browser statistics report [#7197]
  - Major Changes
  - Port crypto backend to Botan [#6209]
  - Improve attachment handling and security
    [#6606][#5034][#7083]
  - Allow selecting any open database in unlock dialog [#5427]
  - KeeShare: Remove checking signed container and QuaZip
    dependency [#7223]
  - Introduce security option to enable copy on double click
    (default off) [#6433]
  - Add 'delete entry without confirm' functionality [#5812]
  - Improve macOS and Windows platform integration [#5851]
  - Lock only the current database by default [#6652]
  - Show expired entries on DB unlock [#7290]
  - Update D-Bus adaptor interface class name to match definition
    file [#7523]
  - Other Changes and Fixes
  - Add countdown progress bar to TOTP preview [#6930]
  - Enter favicon url directly on icons page [#6614]
  - Set C++17 as standard in the build system [#7180]
  - Internalize ykcore into code base [#6654]
  - Transition to Visual Studio builds on Windows [#5874]
  - Ability to delete entries from health check reports [#6537]
  - Enhance remembering last-used directories [#6711]
  - Implement org.freedesktop.appearance.color-scheme support on
    Linux [#7422]
  - Support sorting HTML export [#7011]
  - Add display number of characters in passphrases [#5449]
  - Use Alt+Tab on macOS to switch between databases [#5407]
  - Add feature to sort groups using shortcut keys [#6999]
  - Add CTRL+Enter to apply password generator changes [#6414]
  - Display Database created timestamp on statistics report
    [#6876]
  - Browser: Improve best matching credentials setting [#6893]
  - SSH Agent: Use both Pageant and OpenSSH agent simultaneously
    on Windows [#6288]
  - SSH Agent: Allow using database path to resolve keys [#6365]
  - SSH Agent: Show correct error messages in main window [#7166]
  - Multiple fixes for MSI installer [#6630]
  - Fix tab order for CSV import dialog to match screen order
    [#7315]
  - Don't mark kdbx:// urls as invalid [#7221]
  - Make selected text copyable instead of copying password
    [#7209]
  - Detect timestamp resolution for CSV files [#7196]
  - Fix crash while downloading favicon [#7104]
  - Correct naming of newly generated keyx files [#7010]
  - Place the 'Recycle Bin' at the bottom of the list when groups
    are sorted [#7004]
  - Handle tilde with custom browser paths [#6659]
  - Don't scroll up when deleting an entry [#6833]
  - Set the MIME-Type to text/plain when using wl-copy on wayland
    [#6832]
  - Fix adaptive icon painting [#5989][#6033]
  - Fix favicon download from URL with non-standard port [#5509]
  - Ignore recycle bin on KeePassHTTP migration [#5481]
  - Fix keepassxc-cr-recovery utility [#7521]
  - Fix Auto-Type not working when audio recording indicator is
    active on macOS 12.2+ [#7526]
- drop 7045.patch
- adapt build requires to the new version</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1649505600">- update to 2.7.1:
  * Show when tags are changed in entry history
  * Improve tags editing and allow spaces in tags
  * Improve layout of entry preview panel
  * Incorporate patches to support Flatpak distribution
  * Add expiration presets for 12 and 24 hours
  * Fix crash when building history change list
  * Fix hiding password on database unlock
  * Fix AES KDF slow transform speed
  * Auto-Type: Correct timing issue on macOS and Linux that prevented typing
  * Auto-Type: Fix use of Ctrl/Alt/Shift/Win modifiers on Windows
  * Auto-Type: Reduce/eliminate delay when searching for entries
  * Auto-Type: Map ASCII dead keys on Linux for international keyboards
  * CLI: Fix detection of hardware keys (YubiKey)
  * CLI: Add missing parameter -c to add/edit entries command
  * Secret Service: Fix crash when multiple prompts are shown
  * SSH Agent: Fix default agent selection on Windows
  * Fix database unlock dialog not being the top window on Linux
  * Fix drag/drop entries between tabs on Wayland
  * Fix compiling with minizip-ng</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1666612800">- update to 2.7.3:
  Due to a bug in macOS window behavior, 2.7.2 has been immediately
  superseded by 2.7.3.
  - Changes
  - Enhance Tags Support and Add Saved Searches [#8435, #8607]
  - Significant improvements to entry preview panel [#7993]
  - Add password strength indicator to all password fields [#7885]
  - Limit zxcvbn entropy estimation length to 128 characters [#7748]
  - Try full URL path when fetching favicon [#8565]
  - Hide usernames in preview panel when hidden in entry view [#8608]
  - Enable dark title bar on windows when accent color is not used [#8498]
  - Add option to display passwords in color in preview panel [#7097]
  - Add XML Export option to GUI [#8524]
  - Increase entropy required for a "good" password rating to 75 [#8523]
  - Add shortcut to copy password with TOTP appended [#8443]
  - Show entry count in status bar [#8435]
  - Allow KeePassXC to be built without X11 [#8147]
  - Enable use of VivoKey Apex and Dangerous Things FlexSecure tokens [#8332]
  - Add setting for number of recent files [#8239]
  - Add Ctrl+Tab shortcut to cycle databases in unlock dialog [#8168]
  - Replace offensive words in eff_large.wordlist [#7968]
  - Auto-Type: PICKCHARS can specify attribute and ignore BEEP [#8118]
  - Linux: Add isHardwareKeySupported and refreshHardwareKeys to DBus methods [#8055]
  - Add config variable to specify default database file name [#8042]
  - Support numeric aware sorting on Windows and macOS [#8363]
  - CLI: Add db-edit command [#8400]
  - CLI: Add option to display all attributes with show command [#8256]
  - CLI: Show UUID and tags with show and clip commands [#8241]
  - Browser: Move socket into separate directory on Linux [#8030]
  - Browser: Add group setting to omit WWW subdomain when matching URLs [#7988]
  - FdoSecrets: Ask to unlock the database when creating items [#8022, #8028]
  - FdoSecrets: Skip entries in recycle bin when searching [#8021]
  - Fixes
  - Fix potential deadlock in UI when saving [#8606]
  - Fix newlines when copying notes from preview panel [#8542]
  - Fix dark mode detection on Linux [#8477]
  - Fix crash when deleting items in recycle bin while searching [#8117]
  - Fix crash when trying to close database during unlock [#8144]
  - Fix tabbing around the interface [#8435, #8520]
  - Fix OPVault import when there are multiple OTP fields [#8436]
  - Fix various Windows Hello bugs [#8354]
  - Fix use of Apple Watch for Quick Unlock [#8311]
  - Better handling of "Lock on Minimize" setting [#8202]
  - Check for write permission before entering portable mode [#8447]
  - Correct regex escape logic to prevent parse errors [#7778]
  - Normalize slashes and file case for last used databases [#7864, #7214]
  - Link ykcore against pthread [#7807]
  - Auto-Type: Fix menu entries in selection dialog on Windows [#7987]
  - Auto-Type: Fix use of modifiers under macOS [#8111]
  - CLI: Fix output when using clip with the -t flag [#8271]
  - Browser: Use asynchronous access confirm dialog [#8273]
  - Browser: Always send database locked/unlocked status [#8114]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1667217600">- update to 2.7.4:
  - Changes
  - Add 2 months expiration preset [#8687]
  - CLI: Add Unicode support on Windows [#8618]
  - Fixes
  - Fix crash on macOS when unlocking database [#8676]
  - Fix display of passwords in preview panel [#8633]
  - Fix clicking links in entry preview panel [#8644]
  - Prevent expired entries search if no results returned [#8643]
  - Browser: Revert code causing connection problems [#8665]
  - Browser: Fix socket file symbolic link on Linux [#8656]
  - Flatpak: Fix launching browser proxy service [#8680]
  - SSH Agent: Fix paegent support on Windows [#8619]</changelog>
</package>
<package pkgid="1140dca0f373d27dd8fd890bcc9cfe7ef9199d6411214d42a867716dad4c03bf" name="keepassxc" arch="s390x">
  <version epoch="0" ver="2.7.4" rel="bp154.3.9.1"/>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1575892800">- Update to version 2.5.1:
  * https://github.com/keepassxreboot/keepassxc/releases/tag/2.5.1</changelog>
  <changelog author="droidmonkey &lt;support@dmapps.us&gt;" date="1578139200">- Update to version 2.5.2:
  * https://github.com/keepassxreboot/keepassxc/releases/tag/2.5.2</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1579435200">- Update to version 2.5.3:
  * https://github.com/keepassxreboot/keepassxc/releases/tag/2.5.3</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1582891200">- Clicking the tray icon momentarily shows and immediately hides window. Make
  it stick (boo#1165293).
- Fix window not minimizing to tray.
  + add keepassxc-Fix-window-hiding-after-shown.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1586433600">- Update to version 2.5.4:
  * https://github.com/keepassxreboot/keepassxc/releases/tag/2.5.4</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1589198400">- Drop build/requirement on libgcrypt20-hmac boo#1171438</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1594123200">- Update to version 2.6.0:
  * https://keepassxc.org/blog/2020-07-07-2.6.0-released/
  * https://github.com/keepassxreboot/keepassxc/releases/tag/2.6.0
- drop keepassxc-Fix-window-hiding-after-shown.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1594123201">- add BR for asciidoctor</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1594209600">- add _constraints with 6GB to fix build on ppc64 hopefully</changelog>
  <changelog author="Carsten Ziepke &lt;kieltux@gmail.com&gt;" date="1598788800">- Update to version 2.6.1:
  - Add menu entries for auto-typing only username or only
    password [#4891]
  - Browser: Add command for retrieving current TOTP [#5278]
  - Improve man pages [#5010]
  - Linux: Support Xfce screen lock signals [#4971]
  - Linux: Add OARS metadata to AppStream markup [#5031]
  - SSH Agent: Substitute tilde with %USERPROFILE% on Windows
    [#5116]
  - Improve password generator UI and UX [#5129]
  - Do not prompt to restart if switching the theme back and
    forth [#5084]
  - Change actions for F1, F2, and F3 keys [#5082]
  - Skip referenced passwords in health check report [#5056]
  - Check system-wide Qt translations directory for downstream
  - translations packaging [#5064]
  - macOS: Change password visibility toggle shortcut to Ctrl+H to
  - avoid conflict with system shortcut [#5114]
  - Browser: Only display domain name in browser access confirm
    dialog to avoid overly wide window sizes [#5214]
  - Fix clipboard not being cleared when database is locked while
    timeout is still active [#5184]
  - Fix list of previous databases not being cleared in some
    cases [#5123]
  - Fix saving of non-data changes on database lock [#5210]
  - Fix search results banner theming [#5197]
  - Don?t enforce theme palette in Classic theme mode and add hover
    effect for buttons [#5122, #5267]
  - Fix label clipping in settings on high-DPI screens [#5227]
  - Fix excessive memory usage by icons on systems with high-DPI
    screens [#5266]
  - Fix crash if number of TOTP digits exceeds ten [#5106]
  - Fix slot detection when first YubiKey is configured on the second
    slot [#5004]
  - Prevent crash if focus widget gets deleted during saving [#5005]
  - Always show buttons for opening or saving attachments [#4956]
  - Update link to Auto-Type help [#5228]
  - Fix build errors with Ninja [#5121]
  - CLI: Fix db-info command wrongly labelled as db-show in
    usage listing [#5140]
  - Windows: Use Classic theme by default if high-contrast mode
    is on [#5191]
  - Linux: Add workaround for qt5ct bug, causing icons not to show
    up [#5011]
  - Linux: Correct high-DPI display by not allowing fractional
    scaling [#5185]
  - Browser: Consider subdomain and path when requesting only
    ?best-matching credentials? [#4832]
  - SSH Agent: Always forget all keys on lock [#5115]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1603368000">- Update to version 2.6.2
  - Added
  - Add option to keep window always on top to view menu [#5542]
  - Move show/hide usernames and passwords to view menu [#5542]
  - Add command line options and environment variables for
    changing the config locations [#5452]
  - Include TOTP settings in CSV import/export and add support
    for ISO datetimes [#5346]
  - Changed
  - Mask sensitive information in command execution confirmation
    prompt [#5542]
  - SSH Agent: Avoid shortcut conflict on macOS by changing "Add
    key" to Ctrl+H on all platforms [#5484]
  - Fixed
  - Prevent data loss with drag and drop between databases
    [#5536]
  - Fix crash when toggling Capslock rapidly [#5545]
  - Don't mark URL references as invalid URL [#5380]
  - Reset entry preview after search [#5483]
  - Set Qt::Dialog flag on database open dialog [#5356]
  - Fix sorting of database report columns [#5426]
  - Fix IfDevice matching logic [#5344]
  - Fix layout issues and a stray scrollbar appearing on top of
    the entry edit screen [#5424]
  - Fix tabbing into the notes field [#5424]
  - Fix password generator ignoring settings on load [#5340]
  - Restore natural entry sort order on application load [#5438]
  - Fix paperclip and TOTP columns not saving state [#5327]
  - Enforce fixed password font in entry preview [#5454]
  - Add scrollbar when new database wizard exceeds screen size
    [#5560]
  - Do not mark database as modified when viewing Auto-Type
    associations [#5542]
  - CLI: Fix two heap-use-after-free crashes [#5368, #5470]
  - Browser: Fix key exchange not working with multiple
    simultaneous users on Windows [#5485]
  - Browser: Fix entry retrieval when "only best matching" is
    enabled [#5316]
  - Browser: Ignore recycle bin on KeePassHTTP migration [#5481]
  - KeeShare: Fix import crash [#5542]
  - macOS: Fix toolbar theming and breadcrumb display issues
    [#5482]
  - macOS: Fix file dialog randomly closing [#5479]
  - macOS: Fix being unable to select OPVault files for import
    [#5341]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1610452800">- Update to version 2.6.3
  - Added
  - Support Argon2id KDF [#5778]
  - Support XMLv2 key files [#5798]
  - Changed
  - Improve CSV Import/Export, include time fields and TOTP
    [#5346]
  - Support empty area dragging of the application window [#5860]
  - Display default Auto-Type sequence in preview pane [#5654]
  - Remove strict length limit on generated passwords [#5748]
  - Hide key file path by default when unlocking database [#5779]
  - Document browser extension use with Edge in managed mode
    [#5692]
  - Windows: Prevent clipboard history and cloud sync [#5853]
  - macOS: Update the application icon to Big Sur styling [#5851]
  - Fixed
  - Re-select previously selected entry on database unlock
    [#5559]
  - Properly save special character choice in password generator
    [#5610]
  - Fix crash in browser integration with multiple similar
    entries [#5653]
  - Remove offset on username field in classic theme [#5788]
  - Ensure entry history is copied when drag/dropping entries and
    groups [#5817]
  - Close modal dialogs when database is locked [#5820]
  - Prevent crash when KeeShare modifies an entry that is
    currently being edited [#5827]
  - Improve preview of entry attributes [#5834]
  - Always activate/focus database open dialog preventing mistype
    [#5878]
  - Reports: fix calculation of average password length [#5862]
  - Linux: Delay startup on login to correct tray icon issues
    [#5724]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1612267200">- Update to 2.6.4
  - Added
  - Automatically adapt to light/dark system theme changes
    (Windows/macOS only) [#6034]
  - Changed
  - Show window title as tooltip on system tray [#5948]
  - Compress Snap release as LZO for faster initial startup
    [#5877]
  - Password generator: Set maximum selectable password length to
    999 [#5937]
  - Fixed
  - Fix crash on app close when using SSH agent [#5935]
  - Fix KDF selection showing wrong item when using Argon2id
    [#5923]
  - Automatically close About dialog on database lock if it is
    still open [#5947]
  - Linux: Fix automatic launch at system startup with AppImages
    [#5901]
  - Linux: Fix click-to-move on empty area activating when using
    menus [#5971]
  - Linux: Try multiple times to show tray icon if tray is not
    ready yet [#5948]
  - macOS: Fix KeePassXC blocking clean shutdown [#6002]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1623931200">- Update to 2.6.6
  - Fixed
  - Fix focusing search when pressing hotkey #6603
  - Trim whitespace from TOTP key input prior to processing #6604
  - Fix building on macOS #6598
  - Resolve compiler warnings for unused return values #6607
- Changes from 2.6.5
  - Added
  - Show search bar when toolbar is hidden or in overflow #6279
  - Show countdown for clipboard clearing in status bar #6333
  - Command line option to lock all open databases #6511
  - Allow CSV import of bare TOTP secrets #6211
  - Retain file creation time when saving database #6576
  - Set permissions of saved attachments to be private to the
    current user #6363
  - OPVault: Use Text instead of Name for attribute names #6334
  - Changed
  - Reports: Allow resizing of reports columns #6435
  - Reports: Toggle showing expired entries #6534
  - Save Always on Top setting #6236
  - Password generator can exclude additional lookalike
    characters (6/G, 8/B) #6196
  - Fixed
  - Allow setting MSI properties in unattended install #6196
  - Update MainWindow minimum size to enable smaller verticle
    space #6196
  - Use application font size when setting default or monospace
    fonts #6332
  - Fix notes not clearing in entry preview panel in some cases
    [#6481]
  - macOS: Correct window activation when restoring from tray
    [#6575]
  - macOS: Better handling of minimize after unlock when using
    browser integration #6338
  - Linux: Start after the system tray is available on LXQt #6216
  - Linux: Allow selection of modal dialogs on X11 in Auto-Type
    [#6204]
  - KeeShare: prevent crash when file extension is missing #6174</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1623931201">- newer version of fedora now have the sane cmake macros too.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1634126400">- add https://patch-diff.githubusercontent.com/raw/keepassxreboot/keepassxc/pull/7045.patch
  and adapt it for 2.6.6: This allows us building with LTO</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1648123200">- Update to 2.7.0
  - Major Additions
  - Implement KDBX 4.1 [#7114]
  - Add direct write save option for cloud storage and GVFS
    [#6594]
  - Prevent screen capture on Windows and macOS [#6030]
  - Support quick unlock using Windows Hello [#7384]
  - Support quick unlock using Apple Watch [#5526]
  - Allow specifying database backup paths [#7035]
  - Add tag functionality [#6487][#7436][#7446]
  - Add password rating column to entry view [#4797]
  - Add group clone action [#6124]
  - Show modifications between entry history items [#6789]
  - Ability to bulk-delete and purge unused custom icons [#5970]
  - Support adding custom passphrase wordlists [#6799]
  - Support passphrase wordlists in numbered and PGP-signed
    formats [#6791]
  - Implement support for hardware keys via wireless NFC [#6895]
  - SSH Agent: Add support for OpenSSH 8.2 FIDO/U2F keys [#6371]
  - CLI: Implement attachment handling [#5538]
  - CLI: Add support for okon in offline HIBP checks [#5478]
  - CLI: Implement search command and remove locate [#6805]
  - CLI: Add db statistic output to db-info command [#7032]
  - CLI: Add -i/--include option to generate command. [#7112]
  - CLI: Add a -n (--notes) option to add and edit commands
    [#4646]
  - CLI: Add keyfile option to import command [#5402]
  - CLI: Adding a best option to clip to copy a password of the
    best match [#4489]
  - Browser: Add Microsoft Edge support on Linux [#7100]
  - Browser: Support native password generator from the extension
    [#6529]
  - Browser: Add group settings [#4180]
  - Browser: Add feature to ignore entries for HTTP-Auth Logins
    [#5394]
  - Browser: Support triggering Auto-Type from browser extension
    [#6272]
  - Browser: Add delete-entry command to API [#6899]
  - Browser: Add search 'by-path' url to API [#5535]
  - Browser: search for entries by UUID to API [#4763]
  - Browser: Support auto-download of favicon on entry addition
    [#7179]
  - Auto-Type: Major improvements to Auto-Type
    [#5864][#7463][#7435][#7391][#7129][#6400][#6364][#6361][#5283][#7507]
  - Auto-Type: Fix typing to virtual machines on Windows [#7366]
  - Auto-Type: Re-implement X11 keysym emulation [#7098]
  - Auto-Type: Support multiple Xkb layouts [#6247]
  - Auto-Type: Abort keystroke if modifiers held on X11
    [#6351][#6357]
  - Auto-Type: Add TOTP option to entry level Auto-Type menu
    [#6675]
  - FdoSecrets: Major Refactor and Code Consolidation
    [#5747][#5660][#7043][#6915]
  - FdoSecrets: Implement unlock before search [#6943]
  - Reports: Add browser statistics report [#7197]
  - Major Changes
  - Port crypto backend to Botan [#6209]
  - Improve attachment handling and security
    [#6606][#5034][#7083]
  - Allow selecting any open database in unlock dialog [#5427]
  - KeeShare: Remove checking signed container and QuaZip
    dependency [#7223]
  - Introduce security option to enable copy on double click
    (default off) [#6433]
  - Add 'delete entry without confirm' functionality [#5812]
  - Improve macOS and Windows platform integration [#5851]
  - Lock only the current database by default [#6652]
  - Show expired entries on DB unlock [#7290]
  - Update D-Bus adaptor interface class name to match definition
    file [#7523]
  - Other Changes and Fixes
  - Add countdown progress bar to TOTP preview [#6930]
  - Enter favicon url directly on icons page [#6614]
  - Set C++17 as standard in the build system [#7180]
  - Internalize ykcore into code base [#6654]
  - Transition to Visual Studio builds on Windows [#5874]
  - Ability to delete entries from health check reports [#6537]
  - Enhance remembering last-used directories [#6711]
  - Implement org.freedesktop.appearance.color-scheme support on
    Linux [#7422]
  - Support sorting HTML export [#7011]
  - Add display number of characters in passphrases [#5449]
  - Use Alt+Tab on macOS to switch between databases [#5407]
  - Add feature to sort groups using shortcut keys [#6999]
  - Add CTRL+Enter to apply password generator changes [#6414]
  - Display Database created timestamp on statistics report
    [#6876]
  - Browser: Improve best matching credentials setting [#6893]
  - SSH Agent: Use both Pageant and OpenSSH agent simultaneously
    on Windows [#6288]
  - SSH Agent: Allow using database path to resolve keys [#6365]
  - SSH Agent: Show correct error messages in main window [#7166]
  - Multiple fixes for MSI installer [#6630]
  - Fix tab order for CSV import dialog to match screen order
    [#7315]
  - Don't mark kdbx:// urls as invalid [#7221]
  - Make selected text copyable instead of copying password
    [#7209]
  - Detect timestamp resolution for CSV files [#7196]
  - Fix crash while downloading favicon [#7104]
  - Correct naming of newly generated keyx files [#7010]
  - Place the 'Recycle Bin' at the bottom of the list when groups
    are sorted [#7004]
  - Handle tilde with custom browser paths [#6659]
  - Don't scroll up when deleting an entry [#6833]
  - Set the MIME-Type to text/plain when using wl-copy on wayland
    [#6832]
  - Fix adaptive icon painting [#5989][#6033]
  - Fix favicon download from URL with non-standard port [#5509]
  - Ignore recycle bin on KeePassHTTP migration [#5481]
  - Fix keepassxc-cr-recovery utility [#7521]
  - Fix Auto-Type not working when audio recording indicator is
    active on macOS 12.2+ [#7526]
- drop 7045.patch
- adapt build requires to the new version</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1649505600">- update to 2.7.1:
  * Show when tags are changed in entry history
  * Improve tags editing and allow spaces in tags
  * Improve layout of entry preview panel
  * Incorporate patches to support Flatpak distribution
  * Add expiration presets for 12 and 24 hours
  * Fix crash when building history change list
  * Fix hiding password on database unlock
  * Fix AES KDF slow transform speed
  * Auto-Type: Correct timing issue on macOS and Linux that prevented typing
  * Auto-Type: Fix use of Ctrl/Alt/Shift/Win modifiers on Windows
  * Auto-Type: Reduce/eliminate delay when searching for entries
  * Auto-Type: Map ASCII dead keys on Linux for international keyboards
  * CLI: Fix detection of hardware keys (YubiKey)
  * CLI: Add missing parameter -c to add/edit entries command
  * Secret Service: Fix crash when multiple prompts are shown
  * SSH Agent: Fix default agent selection on Windows
  * Fix database unlock dialog not being the top window on Linux
  * Fix drag/drop entries between tabs on Wayland
  * Fix compiling with minizip-ng</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1666612800">- update to 2.7.3:
  Due to a bug in macOS window behavior, 2.7.2 has been immediately
  superseded by 2.7.3.
  - Changes
  - Enhance Tags Support and Add Saved Searches [#8435, #8607]
  - Significant improvements to entry preview panel [#7993]
  - Add password strength indicator to all password fields [#7885]
  - Limit zxcvbn entropy estimation length to 128 characters [#7748]
  - Try full URL path when fetching favicon [#8565]
  - Hide usernames in preview panel when hidden in entry view [#8608]
  - Enable dark title bar on windows when accent color is not used [#8498]
  - Add option to display passwords in color in preview panel [#7097]
  - Add XML Export option to GUI [#8524]
  - Increase entropy required for a "good" password rating to 75 [#8523]
  - Add shortcut to copy password with TOTP appended [#8443]
  - Show entry count in status bar [#8435]
  - Allow KeePassXC to be built without X11 [#8147]
  - Enable use of VivoKey Apex and Dangerous Things FlexSecure tokens [#8332]
  - Add setting for number of recent files [#8239]
  - Add Ctrl+Tab shortcut to cycle databases in unlock dialog [#8168]
  - Replace offensive words in eff_large.wordlist [#7968]
  - Auto-Type: PICKCHARS can specify attribute and ignore BEEP [#8118]
  - Linux: Add isHardwareKeySupported and refreshHardwareKeys to DBus methods [#8055]
  - Add config variable to specify default database file name [#8042]
  - Support numeric aware sorting on Windows and macOS [#8363]
  - CLI: Add db-edit command [#8400]
  - CLI: Add option to display all attributes with show command [#8256]
  - CLI: Show UUID and tags with show and clip commands [#8241]
  - Browser: Move socket into separate directory on Linux [#8030]
  - Browser: Add group setting to omit WWW subdomain when matching URLs [#7988]
  - FdoSecrets: Ask to unlock the database when creating items [#8022, #8028]
  - FdoSecrets: Skip entries in recycle bin when searching [#8021]
  - Fixes
  - Fix potential deadlock in UI when saving [#8606]
  - Fix newlines when copying notes from preview panel [#8542]
  - Fix dark mode detection on Linux [#8477]
  - Fix crash when deleting items in recycle bin while searching [#8117]
  - Fix crash when trying to close database during unlock [#8144]
  - Fix tabbing around the interface [#8435, #8520]
  - Fix OPVault import when there are multiple OTP fields [#8436]
  - Fix various Windows Hello bugs [#8354]
  - Fix use of Apple Watch for Quick Unlock [#8311]
  - Better handling of "Lock on Minimize" setting [#8202]
  - Check for write permission before entering portable mode [#8447]
  - Correct regex escape logic to prevent parse errors [#7778]
  - Normalize slashes and file case for last used databases [#7864, #7214]
  - Link ykcore against pthread [#7807]
  - Auto-Type: Fix menu entries in selection dialog on Windows [#7987]
  - Auto-Type: Fix use of modifiers under macOS [#8111]
  - CLI: Fix output when using clip with the -t flag [#8271]
  - Browser: Use asynchronous access confirm dialog [#8273]
  - Browser: Always send database locked/unlocked status [#8114]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1667217600">- update to 2.7.4:
  - Changes
  - Add 2 months expiration preset [#8687]
  - CLI: Add Unicode support on Windows [#8618]
  - Fixes
  - Fix crash on macOS when unlocking database [#8676]
  - Fix display of passwords in preview panel [#8633]
  - Fix clicking links in entry preview panel [#8644]
  - Prevent expired entries search if no results returned [#8643]
  - Browser: Revert code causing connection problems [#8665]
  - Browser: Fix socket file symbolic link on Linux [#8656]
  - Flatpak: Fix launching browser proxy service [#8680]
  - SSH Agent: Fix paegent support on Windows [#8619]</changelog>
</package>
<package pkgid="25143af567984fe85090c025d7ccc2d4cd378ff3d60e97c2c13d5e1ab2650f08" name="keepassxc" arch="src">
  <version epoch="0" ver="2.7.4" rel="bp154.3.9.1"/>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1575892800">- Update to version 2.5.1:
  * https://github.com/keepassxreboot/keepassxc/releases/tag/2.5.1</changelog>
  <changelog author="droidmonkey &lt;support@dmapps.us&gt;" date="1578139200">- Update to version 2.5.2:
  * https://github.com/keepassxreboot/keepassxc/releases/tag/2.5.2</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1579435200">- Update to version 2.5.3:
  * https://github.com/keepassxreboot/keepassxc/releases/tag/2.5.3</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1582891200">- Clicking the tray icon momentarily shows and immediately hides window. Make
  it stick (boo#1165293).
- Fix window not minimizing to tray.
  + add keepassxc-Fix-window-hiding-after-shown.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1586433600">- Update to version 2.5.4:
  * https://github.com/keepassxreboot/keepassxc/releases/tag/2.5.4</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1589198400">- Drop build/requirement on libgcrypt20-hmac boo#1171438</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1594123200">- Update to version 2.6.0:
  * https://keepassxc.org/blog/2020-07-07-2.6.0-released/
  * https://github.com/keepassxreboot/keepassxc/releases/tag/2.6.0
- drop keepassxc-Fix-window-hiding-after-shown.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1594123201">- add BR for asciidoctor</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1594209600">- add _constraints with 6GB to fix build on ppc64 hopefully</changelog>
  <changelog author="Carsten Ziepke &lt;kieltux@gmail.com&gt;" date="1598788800">- Update to version 2.6.1:
  - Add menu entries for auto-typing only username or only
    password [#4891]
  - Browser: Add command for retrieving current TOTP [#5278]
  - Improve man pages [#5010]
  - Linux: Support Xfce screen lock signals [#4971]
  - Linux: Add OARS metadata to AppStream markup [#5031]
  - SSH Agent: Substitute tilde with %USERPROFILE% on Windows
    [#5116]
  - Improve password generator UI and UX [#5129]
  - Do not prompt to restart if switching the theme back and
    forth [#5084]
  - Change actions for F1, F2, and F3 keys [#5082]
  - Skip referenced passwords in health check report [#5056]
  - Check system-wide Qt translations directory for downstream
  - translations packaging [#5064]
  - macOS: Change password visibility toggle shortcut to Ctrl+H to
  - avoid conflict with system shortcut [#5114]
  - Browser: Only display domain name in browser access confirm
    dialog to avoid overly wide window sizes [#5214]
  - Fix clipboard not being cleared when database is locked while
    timeout is still active [#5184]
  - Fix list of previous databases not being cleared in some
    cases [#5123]
  - Fix saving of non-data changes on database lock [#5210]
  - Fix search results banner theming [#5197]
  - Don?t enforce theme palette in Classic theme mode and add hover
    effect for buttons [#5122, #5267]
  - Fix label clipping in settings on high-DPI screens [#5227]
  - Fix excessive memory usage by icons on systems with high-DPI
    screens [#5266]
  - Fix crash if number of TOTP digits exceeds ten [#5106]
  - Fix slot detection when first YubiKey is configured on the second
    slot [#5004]
  - Prevent crash if focus widget gets deleted during saving [#5005]
  - Always show buttons for opening or saving attachments [#4956]
  - Update link to Auto-Type help [#5228]
  - Fix build errors with Ninja [#5121]
  - CLI: Fix db-info command wrongly labelled as db-show in
    usage listing [#5140]
  - Windows: Use Classic theme by default if high-contrast mode
    is on [#5191]
  - Linux: Add workaround for qt5ct bug, causing icons not to show
    up [#5011]
  - Linux: Correct high-DPI display by not allowing fractional
    scaling [#5185]
  - Browser: Consider subdomain and path when requesting only
    ?best-matching credentials? [#4832]
  - SSH Agent: Always forget all keys on lock [#5115]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1603368000">- Update to version 2.6.2
  - Added
  - Add option to keep window always on top to view menu [#5542]
  - Move show/hide usernames and passwords to view menu [#5542]
  - Add command line options and environment variables for
    changing the config locations [#5452]
  - Include TOTP settings in CSV import/export and add support
    for ISO datetimes [#5346]
  - Changed
  - Mask sensitive information in command execution confirmation
    prompt [#5542]
  - SSH Agent: Avoid shortcut conflict on macOS by changing "Add
    key" to Ctrl+H on all platforms [#5484]
  - Fixed
  - Prevent data loss with drag and drop between databases
    [#5536]
  - Fix crash when toggling Capslock rapidly [#5545]
  - Don't mark URL references as invalid URL [#5380]
  - Reset entry preview after search [#5483]
  - Set Qt::Dialog flag on database open dialog [#5356]
  - Fix sorting of database report columns [#5426]
  - Fix IfDevice matching logic [#5344]
  - Fix layout issues and a stray scrollbar appearing on top of
    the entry edit screen [#5424]
  - Fix tabbing into the notes field [#5424]
  - Fix password generator ignoring settings on load [#5340]
  - Restore natural entry sort order on application load [#5438]
  - Fix paperclip and TOTP columns not saving state [#5327]
  - Enforce fixed password font in entry preview [#5454]
  - Add scrollbar when new database wizard exceeds screen size
    [#5560]
  - Do not mark database as modified when viewing Auto-Type
    associations [#5542]
  - CLI: Fix two heap-use-after-free crashes [#5368, #5470]
  - Browser: Fix key exchange not working with multiple
    simultaneous users on Windows [#5485]
  - Browser: Fix entry retrieval when "only best matching" is
    enabled [#5316]
  - Browser: Ignore recycle bin on KeePassHTTP migration [#5481]
  - KeeShare: Fix import crash [#5542]
  - macOS: Fix toolbar theming and breadcrumb display issues
    [#5482]
  - macOS: Fix file dialog randomly closing [#5479]
  - macOS: Fix being unable to select OPVault files for import
    [#5341]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1610452800">- Update to version 2.6.3
  - Added
  - Support Argon2id KDF [#5778]
  - Support XMLv2 key files [#5798]
  - Changed
  - Improve CSV Import/Export, include time fields and TOTP
    [#5346]
  - Support empty area dragging of the application window [#5860]
  - Display default Auto-Type sequence in preview pane [#5654]
  - Remove strict length limit on generated passwords [#5748]
  - Hide key file path by default when unlocking database [#5779]
  - Document browser extension use with Edge in managed mode
    [#5692]
  - Windows: Prevent clipboard history and cloud sync [#5853]
  - macOS: Update the application icon to Big Sur styling [#5851]
  - Fixed
  - Re-select previously selected entry on database unlock
    [#5559]
  - Properly save special character choice in password generator
    [#5610]
  - Fix crash in browser integration with multiple similar
    entries [#5653]
  - Remove offset on username field in classic theme [#5788]
  - Ensure entry history is copied when drag/dropping entries and
    groups [#5817]
  - Close modal dialogs when database is locked [#5820]
  - Prevent crash when KeeShare modifies an entry that is
    currently being edited [#5827]
  - Improve preview of entry attributes [#5834]
  - Always activate/focus database open dialog preventing mistype
    [#5878]
  - Reports: fix calculation of average password length [#5862]
  - Linux: Delay startup on login to correct tray icon issues
    [#5724]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1612267200">- Update to 2.6.4
  - Added
  - Automatically adapt to light/dark system theme changes
    (Windows/macOS only) [#6034]
  - Changed
  - Show window title as tooltip on system tray [#5948]
  - Compress Snap release as LZO for faster initial startup
    [#5877]
  - Password generator: Set maximum selectable password length to
    999 [#5937]
  - Fixed
  - Fix crash on app close when using SSH agent [#5935]
  - Fix KDF selection showing wrong item when using Argon2id
    [#5923]
  - Automatically close About dialog on database lock if it is
    still open [#5947]
  - Linux: Fix automatic launch at system startup with AppImages
    [#5901]
  - Linux: Fix click-to-move on empty area activating when using
    menus [#5971]
  - Linux: Try multiple times to show tray icon if tray is not
    ready yet [#5948]
  - macOS: Fix KeePassXC blocking clean shutdown [#6002]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1623931200">- Update to 2.6.6
  - Fixed
  - Fix focusing search when pressing hotkey #6603
  - Trim whitespace from TOTP key input prior to processing #6604
  - Fix building on macOS #6598
  - Resolve compiler warnings for unused return values #6607
- Changes from 2.6.5
  - Added
  - Show search bar when toolbar is hidden or in overflow #6279
  - Show countdown for clipboard clearing in status bar #6333
  - Command line option to lock all open databases #6511
  - Allow CSV import of bare TOTP secrets #6211
  - Retain file creation time when saving database #6576
  - Set permissions of saved attachments to be private to the
    current user #6363
  - OPVault: Use Text instead of Name for attribute names #6334
  - Changed
  - Reports: Allow resizing of reports columns #6435
  - Reports: Toggle showing expired entries #6534
  - Save Always on Top setting #6236
  - Password generator can exclude additional lookalike
    characters (6/G, 8/B) #6196
  - Fixed
  - Allow setting MSI properties in unattended install #6196
  - Update MainWindow minimum size to enable smaller verticle
    space #6196
  - Use application font size when setting default or monospace
    fonts #6332
  - Fix notes not clearing in entry preview panel in some cases
    [#6481]
  - macOS: Correct window activation when restoring from tray
    [#6575]
  - macOS: Better handling of minimize after unlock when using
    browser integration #6338
  - Linux: Start after the system tray is available on LXQt #6216
  - Linux: Allow selection of modal dialogs on X11 in Auto-Type
    [#6204]
  - KeeShare: prevent crash when file extension is missing #6174</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1623931201">- newer version of fedora now have the sane cmake macros too.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1634126400">- add https://patch-diff.githubusercontent.com/raw/keepassxreboot/keepassxc/pull/7045.patch
  and adapt it for 2.6.6: This allows us building with LTO</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1648123200">- Update to 2.7.0
  - Major Additions
  - Implement KDBX 4.1 [#7114]
  - Add direct write save option for cloud storage and GVFS
    [#6594]
  - Prevent screen capture on Windows and macOS [#6030]
  - Support quick unlock using Windows Hello [#7384]
  - Support quick unlock using Apple Watch [#5526]
  - Allow specifying database backup paths [#7035]
  - Add tag functionality [#6487][#7436][#7446]
  - Add password rating column to entry view [#4797]
  - Add group clone action [#6124]
  - Show modifications between entry history items [#6789]
  - Ability to bulk-delete and purge unused custom icons [#5970]
  - Support adding custom passphrase wordlists [#6799]
  - Support passphrase wordlists in numbered and PGP-signed
    formats [#6791]
  - Implement support for hardware keys via wireless NFC [#6895]
  - SSH Agent: Add support for OpenSSH 8.2 FIDO/U2F keys [#6371]
  - CLI: Implement attachment handling [#5538]
  - CLI: Add support for okon in offline HIBP checks [#5478]
  - CLI: Implement search command and remove locate [#6805]
  - CLI: Add db statistic output to db-info command [#7032]
  - CLI: Add -i/--include option to generate command. [#7112]
  - CLI: Add a -n (--notes) option to add and edit commands
    [#4646]
  - CLI: Add keyfile option to import command [#5402]
  - CLI: Adding a best option to clip to copy a password of the
    best match [#4489]
  - Browser: Add Microsoft Edge support on Linux [#7100]
  - Browser: Support native password generator from the extension
    [#6529]
  - Browser: Add group settings [#4180]
  - Browser: Add feature to ignore entries for HTTP-Auth Logins
    [#5394]
  - Browser: Support triggering Auto-Type from browser extension
    [#6272]
  - Browser: Add delete-entry command to API [#6899]
  - Browser: Add search 'by-path' url to API [#5535]
  - Browser: search for entries by UUID to API [#4763]
  - Browser: Support auto-download of favicon on entry addition
    [#7179]
  - Auto-Type: Major improvements to Auto-Type
    [#5864][#7463][#7435][#7391][#7129][#6400][#6364][#6361][#5283][#7507]
  - Auto-Type: Fix typing to virtual machines on Windows [#7366]
  - Auto-Type: Re-implement X11 keysym emulation [#7098]
  - Auto-Type: Support multiple Xkb layouts [#6247]
  - Auto-Type: Abort keystroke if modifiers held on X11
    [#6351][#6357]
  - Auto-Type: Add TOTP option to entry level Auto-Type menu
    [#6675]
  - FdoSecrets: Major Refactor and Code Consolidation
    [#5747][#5660][#7043][#6915]
  - FdoSecrets: Implement unlock before search [#6943]
  - Reports: Add browser statistics report [#7197]
  - Major Changes
  - Port crypto backend to Botan [#6209]
  - Improve attachment handling and security
    [#6606][#5034][#7083]
  - Allow selecting any open database in unlock dialog [#5427]
  - KeeShare: Remove checking signed container and QuaZip
    dependency [#7223]
  - Introduce security option to enable copy on double click
    (default off) [#6433]
  - Add 'delete entry without confirm' functionality [#5812]
  - Improve macOS and Windows platform integration [#5851]
  - Lock only the current database by default [#6652]
  - Show expired entries on DB unlock [#7290]
  - Update D-Bus adaptor interface class name to match definition
    file [#7523]
  - Other Changes and Fixes
  - Add countdown progress bar to TOTP preview [#6930]
  - Enter favicon url directly on icons page [#6614]
  - Set C++17 as standard in the build system [#7180]
  - Internalize ykcore into code base [#6654]
  - Transition to Visual Studio builds on Windows [#5874]
  - Ability to delete entries from health check reports [#6537]
  - Enhance remembering last-used directories [#6711]
  - Implement org.freedesktop.appearance.color-scheme support on
    Linux [#7422]
  - Support sorting HTML export [#7011]
  - Add display number of characters in passphrases [#5449]
  - Use Alt+Tab on macOS to switch between databases [#5407]
  - Add feature to sort groups using shortcut keys [#6999]
  - Add CTRL+Enter to apply password generator changes [#6414]
  - Display Database created timestamp on statistics report
    [#6876]
  - Browser: Improve best matching credentials setting [#6893]
  - SSH Agent: Use both Pageant and OpenSSH agent simultaneously
    on Windows [#6288]
  - SSH Agent: Allow using database path to resolve keys [#6365]
  - SSH Agent: Show correct error messages in main window [#7166]
  - Multiple fixes for MSI installer [#6630]
  - Fix tab order for CSV import dialog to match screen order
    [#7315]
  - Don't mark kdbx:// urls as invalid [#7221]
  - Make selected text copyable instead of copying password
    [#7209]
  - Detect timestamp resolution for CSV files [#7196]
  - Fix crash while downloading favicon [#7104]
  - Correct naming of newly generated keyx files [#7010]
  - Place the 'Recycle Bin' at the bottom of the list when groups
    are sorted [#7004]
  - Handle tilde with custom browser paths [#6659]
  - Don't scroll up when deleting an entry [#6833]
  - Set the MIME-Type to text/plain when using wl-copy on wayland
    [#6832]
  - Fix adaptive icon painting [#5989][#6033]
  - Fix favicon download from URL with non-standard port [#5509]
  - Ignore recycle bin on KeePassHTTP migration [#5481]
  - Fix keepassxc-cr-recovery utility [#7521]
  - Fix Auto-Type not working when audio recording indicator is
    active on macOS 12.2+ [#7526]
- drop 7045.patch
- adapt build requires to the new version</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1649505600">- update to 2.7.1:
  * Show when tags are changed in entry history
  * Improve tags editing and allow spaces in tags
  * Improve layout of entry preview panel
  * Incorporate patches to support Flatpak distribution
  * Add expiration presets for 12 and 24 hours
  * Fix crash when building history change list
  * Fix hiding password on database unlock
  * Fix AES KDF slow transform speed
  * Auto-Type: Correct timing issue on macOS and Linux that prevented typing
  * Auto-Type: Fix use of Ctrl/Alt/Shift/Win modifiers on Windows
  * Auto-Type: Reduce/eliminate delay when searching for entries
  * Auto-Type: Map ASCII dead keys on Linux for international keyboards
  * CLI: Fix detection of hardware keys (YubiKey)
  * CLI: Add missing parameter -c to add/edit entries command
  * Secret Service: Fix crash when multiple prompts are shown
  * SSH Agent: Fix default agent selection on Windows
  * Fix database unlock dialog not being the top window on Linux
  * Fix drag/drop entries between tabs on Wayland
  * Fix compiling with minizip-ng</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1666612800">- update to 2.7.3:
  Due to a bug in macOS window behavior, 2.7.2 has been immediately
  superseded by 2.7.3.
  - Changes
  - Enhance Tags Support and Add Saved Searches [#8435, #8607]
  - Significant improvements to entry preview panel [#7993]
  - Add password strength indicator to all password fields [#7885]
  - Limit zxcvbn entropy estimation length to 128 characters [#7748]
  - Try full URL path when fetching favicon [#8565]
  - Hide usernames in preview panel when hidden in entry view [#8608]
  - Enable dark title bar on windows when accent color is not used [#8498]
  - Add option to display passwords in color in preview panel [#7097]
  - Add XML Export option to GUI [#8524]
  - Increase entropy required for a "good" password rating to 75 [#8523]
  - Add shortcut to copy password with TOTP appended [#8443]
  - Show entry count in status bar [#8435]
  - Allow KeePassXC to be built without X11 [#8147]
  - Enable use of VivoKey Apex and Dangerous Things FlexSecure tokens [#8332]
  - Add setting for number of recent files [#8239]
  - Add Ctrl+Tab shortcut to cycle databases in unlock dialog [#8168]
  - Replace offensive words in eff_large.wordlist [#7968]
  - Auto-Type: PICKCHARS can specify attribute and ignore BEEP [#8118]
  - Linux: Add isHardwareKeySupported and refreshHardwareKeys to DBus methods [#8055]
  - Add config variable to specify default database file name [#8042]
  - Support numeric aware sorting on Windows and macOS [#8363]
  - CLI: Add db-edit command [#8400]
  - CLI: Add option to display all attributes with show command [#8256]
  - CLI: Show UUID and tags with show and clip commands [#8241]
  - Browser: Move socket into separate directory on Linux [#8030]
  - Browser: Add group setting to omit WWW subdomain when matching URLs [#7988]
  - FdoSecrets: Ask to unlock the database when creating items [#8022, #8028]
  - FdoSecrets: Skip entries in recycle bin when searching [#8021]
  - Fixes
  - Fix potential deadlock in UI when saving [#8606]
  - Fix newlines when copying notes from preview panel [#8542]
  - Fix dark mode detection on Linux [#8477]
  - Fix crash when deleting items in recycle bin while searching [#8117]
  - Fix crash when trying to close database during unlock [#8144]
  - Fix tabbing around the interface [#8435, #8520]
  - Fix OPVault import when there are multiple OTP fields [#8436]
  - Fix various Windows Hello bugs [#8354]
  - Fix use of Apple Watch for Quick Unlock [#8311]
  - Better handling of "Lock on Minimize" setting [#8202]
  - Check for write permission before entering portable mode [#8447]
  - Correct regex escape logic to prevent parse errors [#7778]
  - Normalize slashes and file case for last used databases [#7864, #7214]
  - Link ykcore against pthread [#7807]
  - Auto-Type: Fix menu entries in selection dialog on Windows [#7987]
  - Auto-Type: Fix use of modifiers under macOS [#8111]
  - CLI: Fix output when using clip with the -t flag [#8271]
  - Browser: Use asynchronous access confirm dialog [#8273]
  - Browser: Always send database locked/unlocked status [#8114]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1667217600">- update to 2.7.4:
  - Changes
  - Add 2 months expiration preset [#8687]
  - CLI: Add Unicode support on Windows [#8618]
  - Fixes
  - Fix crash on macOS when unlocking database [#8676]
  - Fix display of passwords in preview panel [#8633]
  - Fix clicking links in entry preview panel [#8644]
  - Prevent expired entries search if no results returned [#8643]
  - Browser: Revert code causing connection problems [#8665]
  - Browser: Fix socket file symbolic link on Linux [#8656]
  - Flatpak: Fix launching browser proxy service [#8680]
  - SSH Agent: Fix paegent support on Windows [#8619]</changelog>
</package>
<package pkgid="be92d2f5e634b5d32adbecfe66eeefa135e24a684a9528c6c09ce86153b791ca" name="keepassxc" arch="x86_64">
  <version epoch="0" ver="2.7.4" rel="bp154.3.9.1"/>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1575892800">- Update to version 2.5.1:
  * https://github.com/keepassxreboot/keepassxc/releases/tag/2.5.1</changelog>
  <changelog author="droidmonkey &lt;support@dmapps.us&gt;" date="1578139200">- Update to version 2.5.2:
  * https://github.com/keepassxreboot/keepassxc/releases/tag/2.5.2</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1579435200">- Update to version 2.5.3:
  * https://github.com/keepassxreboot/keepassxc/releases/tag/2.5.3</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1582891200">- Clicking the tray icon momentarily shows and immediately hides window. Make
  it stick (boo#1165293).
- Fix window not minimizing to tray.
  + add keepassxc-Fix-window-hiding-after-shown.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1586433600">- Update to version 2.5.4:
  * https://github.com/keepassxreboot/keepassxc/releases/tag/2.5.4</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1589198400">- Drop build/requirement on libgcrypt20-hmac boo#1171438</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1594123200">- Update to version 2.6.0:
  * https://keepassxc.org/blog/2020-07-07-2.6.0-released/
  * https://github.com/keepassxreboot/keepassxc/releases/tag/2.6.0
- drop keepassxc-Fix-window-hiding-after-shown.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1594123201">- add BR for asciidoctor</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1594209600">- add _constraints with 6GB to fix build on ppc64 hopefully</changelog>
  <changelog author="Carsten Ziepke &lt;kieltux@gmail.com&gt;" date="1598788800">- Update to version 2.6.1:
  - Add menu entries for auto-typing only username or only
    password [#4891]
  - Browser: Add command for retrieving current TOTP [#5278]
  - Improve man pages [#5010]
  - Linux: Support Xfce screen lock signals [#4971]
  - Linux: Add OARS metadata to AppStream markup [#5031]
  - SSH Agent: Substitute tilde with %USERPROFILE% on Windows
    [#5116]
  - Improve password generator UI and UX [#5129]
  - Do not prompt to restart if switching the theme back and
    forth [#5084]
  - Change actions for F1, F2, and F3 keys [#5082]
  - Skip referenced passwords in health check report [#5056]
  - Check system-wide Qt translations directory for downstream
  - translations packaging [#5064]
  - macOS: Change password visibility toggle shortcut to Ctrl+H to
  - avoid conflict with system shortcut [#5114]
  - Browser: Only display domain name in browser access confirm
    dialog to avoid overly wide window sizes [#5214]
  - Fix clipboard not being cleared when database is locked while
    timeout is still active [#5184]
  - Fix list of previous databases not being cleared in some
    cases [#5123]
  - Fix saving of non-data changes on database lock [#5210]
  - Fix search results banner theming [#5197]
  - Don?t enforce theme palette in Classic theme mode and add hover
    effect for buttons [#5122, #5267]
  - Fix label clipping in settings on high-DPI screens [#5227]
  - Fix excessive memory usage by icons on systems with high-DPI
    screens [#5266]
  - Fix crash if number of TOTP digits exceeds ten [#5106]
  - Fix slot detection when first YubiKey is configured on the second
    slot [#5004]
  - Prevent crash if focus widget gets deleted during saving [#5005]
  - Always show buttons for opening or saving attachments [#4956]
  - Update link to Auto-Type help [#5228]
  - Fix build errors with Ninja [#5121]
  - CLI: Fix db-info command wrongly labelled as db-show in
    usage listing [#5140]
  - Windows: Use Classic theme by default if high-contrast mode
    is on [#5191]
  - Linux: Add workaround for qt5ct bug, causing icons not to show
    up [#5011]
  - Linux: Correct high-DPI display by not allowing fractional
    scaling [#5185]
  - Browser: Consider subdomain and path when requesting only
    ?best-matching credentials? [#4832]
  - SSH Agent: Always forget all keys on lock [#5115]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1603368000">- Update to version 2.6.2
  - Added
  - Add option to keep window always on top to view menu [#5542]
  - Move show/hide usernames and passwords to view menu [#5542]
  - Add command line options and environment variables for
    changing the config locations [#5452]
  - Include TOTP settings in CSV import/export and add support
    for ISO datetimes [#5346]
  - Changed
  - Mask sensitive information in command execution confirmation
    prompt [#5542]
  - SSH Agent: Avoid shortcut conflict on macOS by changing "Add
    key" to Ctrl+H on all platforms [#5484]
  - Fixed
  - Prevent data loss with drag and drop between databases
    [#5536]
  - Fix crash when toggling Capslock rapidly [#5545]
  - Don't mark URL references as invalid URL [#5380]
  - Reset entry preview after search [#5483]
  - Set Qt::Dialog flag on database open dialog [#5356]
  - Fix sorting of database report columns [#5426]
  - Fix IfDevice matching logic [#5344]
  - Fix layout issues and a stray scrollbar appearing on top of
    the entry edit screen [#5424]
  - Fix tabbing into the notes field [#5424]
  - Fix password generator ignoring settings on load [#5340]
  - Restore natural entry sort order on application load [#5438]
  - Fix paperclip and TOTP columns not saving state [#5327]
  - Enforce fixed password font in entry preview [#5454]
  - Add scrollbar when new database wizard exceeds screen size
    [#5560]
  - Do not mark database as modified when viewing Auto-Type
    associations [#5542]
  - CLI: Fix two heap-use-after-free crashes [#5368, #5470]
  - Browser: Fix key exchange not working with multiple
    simultaneous users on Windows [#5485]
  - Browser: Fix entry retrieval when "only best matching" is
    enabled [#5316]
  - Browser: Ignore recycle bin on KeePassHTTP migration [#5481]
  - KeeShare: Fix import crash [#5542]
  - macOS: Fix toolbar theming and breadcrumb display issues
    [#5482]
  - macOS: Fix file dialog randomly closing [#5479]
  - macOS: Fix being unable to select OPVault files for import
    [#5341]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1610452800">- Update to version 2.6.3
  - Added
  - Support Argon2id KDF [#5778]
  - Support XMLv2 key files [#5798]
  - Changed
  - Improve CSV Import/Export, include time fields and TOTP
    [#5346]
  - Support empty area dragging of the application window [#5860]
  - Display default Auto-Type sequence in preview pane [#5654]
  - Remove strict length limit on generated passwords [#5748]
  - Hide key file path by default when unlocking database [#5779]
  - Document browser extension use with Edge in managed mode
    [#5692]
  - Windows: Prevent clipboard history and cloud sync [#5853]
  - macOS: Update the application icon to Big Sur styling [#5851]
  - Fixed
  - Re-select previously selected entry on database unlock
    [#5559]
  - Properly save special character choice in password generator
    [#5610]
  - Fix crash in browser integration with multiple similar
    entries [#5653]
  - Remove offset on username field in classic theme [#5788]
  - Ensure entry history is copied when drag/dropping entries and
    groups [#5817]
  - Close modal dialogs when database is locked [#5820]
  - Prevent crash when KeeShare modifies an entry that is
    currently being edited [#5827]
  - Improve preview of entry attributes [#5834]
  - Always activate/focus database open dialog preventing mistype
    [#5878]
  - Reports: fix calculation of average password length [#5862]
  - Linux: Delay startup on login to correct tray icon issues
    [#5724]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1612267200">- Update to 2.6.4
  - Added
  - Automatically adapt to light/dark system theme changes
    (Windows/macOS only) [#6034]
  - Changed
  - Show window title as tooltip on system tray [#5948]
  - Compress Snap release as LZO for faster initial startup
    [#5877]
  - Password generator: Set maximum selectable password length to
    999 [#5937]
  - Fixed
  - Fix crash on app close when using SSH agent [#5935]
  - Fix KDF selection showing wrong item when using Argon2id
    [#5923]
  - Automatically close About dialog on database lock if it is
    still open [#5947]
  - Linux: Fix automatic launch at system startup with AppImages
    [#5901]
  - Linux: Fix click-to-move on empty area activating when using
    menus [#5971]
  - Linux: Try multiple times to show tray icon if tray is not
    ready yet [#5948]
  - macOS: Fix KeePassXC blocking clean shutdown [#6002]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1623931200">- Update to 2.6.6
  - Fixed
  - Fix focusing search when pressing hotkey #6603
  - Trim whitespace from TOTP key input prior to processing #6604
  - Fix building on macOS #6598
  - Resolve compiler warnings for unused return values #6607
- Changes from 2.6.5
  - Added
  - Show search bar when toolbar is hidden or in overflow #6279
  - Show countdown for clipboard clearing in status bar #6333
  - Command line option to lock all open databases #6511
  - Allow CSV import of bare TOTP secrets #6211
  - Retain file creation time when saving database #6576
  - Set permissions of saved attachments to be private to the
    current user #6363
  - OPVault: Use Text instead of Name for attribute names #6334
  - Changed
  - Reports: Allow resizing of reports columns #6435
  - Reports: Toggle showing expired entries #6534
  - Save Always on Top setting #6236
  - Password generator can exclude additional lookalike
    characters (6/G, 8/B) #6196
  - Fixed
  - Allow setting MSI properties in unattended install #6196
  - Update MainWindow minimum size to enable smaller verticle
    space #6196
  - Use application font size when setting default or monospace
    fonts #6332
  - Fix notes not clearing in entry preview panel in some cases
    [#6481]
  - macOS: Correct window activation when restoring from tray
    [#6575]
  - macOS: Better handling of minimize after unlock when using
    browser integration #6338
  - Linux: Start after the system tray is available on LXQt #6216
  - Linux: Allow selection of modal dialogs on X11 in Auto-Type
    [#6204]
  - KeeShare: prevent crash when file extension is missing #6174</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1623931201">- newer version of fedora now have the sane cmake macros too.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1634126400">- add https://patch-diff.githubusercontent.com/raw/keepassxreboot/keepassxc/pull/7045.patch
  and adapt it for 2.6.6: This allows us building with LTO</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1648123200">- Update to 2.7.0
  - Major Additions
  - Implement KDBX 4.1 [#7114]
  - Add direct write save option for cloud storage and GVFS
    [#6594]
  - Prevent screen capture on Windows and macOS [#6030]
  - Support quick unlock using Windows Hello [#7384]
  - Support quick unlock using Apple Watch [#5526]
  - Allow specifying database backup paths [#7035]
  - Add tag functionality [#6487][#7436][#7446]
  - Add password rating column to entry view [#4797]
  - Add group clone action [#6124]
  - Show modifications between entry history items [#6789]
  - Ability to bulk-delete and purge unused custom icons [#5970]
  - Support adding custom passphrase wordlists [#6799]
  - Support passphrase wordlists in numbered and PGP-signed
    formats [#6791]
  - Implement support for hardware keys via wireless NFC [#6895]
  - SSH Agent: Add support for OpenSSH 8.2 FIDO/U2F keys [#6371]
  - CLI: Implement attachment handling [#5538]
  - CLI: Add support for okon in offline HIBP checks [#5478]
  - CLI: Implement search command and remove locate [#6805]
  - CLI: Add db statistic output to db-info command [#7032]
  - CLI: Add -i/--include option to generate command. [#7112]
  - CLI: Add a -n (--notes) option to add and edit commands
    [#4646]
  - CLI: Add keyfile option to import command [#5402]
  - CLI: Adding a best option to clip to copy a password of the
    best match [#4489]
  - Browser: Add Microsoft Edge support on Linux [#7100]
  - Browser: Support native password generator from the extension
    [#6529]
  - Browser: Add group settings [#4180]
  - Browser: Add feature to ignore entries for HTTP-Auth Logins
    [#5394]
  - Browser: Support triggering Auto-Type from browser extension
    [#6272]
  - Browser: Add delete-entry command to API [#6899]
  - Browser: Add search 'by-path' url to API [#5535]
  - Browser: search for entries by UUID to API [#4763]
  - Browser: Support auto-download of favicon on entry addition
    [#7179]
  - Auto-Type: Major improvements to Auto-Type
    [#5864][#7463][#7435][#7391][#7129][#6400][#6364][#6361][#5283][#7507]
  - Auto-Type: Fix typing to virtual machines on Windows [#7366]
  - Auto-Type: Re-implement X11 keysym emulation [#7098]
  - Auto-Type: Support multiple Xkb layouts [#6247]
  - Auto-Type: Abort keystroke if modifiers held on X11
    [#6351][#6357]
  - Auto-Type: Add TOTP option to entry level Auto-Type menu
    [#6675]
  - FdoSecrets: Major Refactor and Code Consolidation
    [#5747][#5660][#7043][#6915]
  - FdoSecrets: Implement unlock before search [#6943]
  - Reports: Add browser statistics report [#7197]
  - Major Changes
  - Port crypto backend to Botan [#6209]
  - Improve attachment handling and security
    [#6606][#5034][#7083]
  - Allow selecting any open database in unlock dialog [#5427]
  - KeeShare: Remove checking signed container and QuaZip
    dependency [#7223]
  - Introduce security option to enable copy on double click
    (default off) [#6433]
  - Add 'delete entry without confirm' functionality [#5812]
  - Improve macOS and Windows platform integration [#5851]
  - Lock only the current database by default [#6652]
  - Show expired entries on DB unlock [#7290]
  - Update D-Bus adaptor interface class name to match definition
    file [#7523]
  - Other Changes and Fixes
  - Add countdown progress bar to TOTP preview [#6930]
  - Enter favicon url directly on icons page [#6614]
  - Set C++17 as standard in the build system [#7180]
  - Internalize ykcore into code base [#6654]
  - Transition to Visual Studio builds on Windows [#5874]
  - Ability to delete entries from health check reports [#6537]
  - Enhance remembering last-used directories [#6711]
  - Implement org.freedesktop.appearance.color-scheme support on
    Linux [#7422]
  - Support sorting HTML export [#7011]
  - Add display number of characters in passphrases [#5449]
  - Use Alt+Tab on macOS to switch between databases [#5407]
  - Add feature to sort groups using shortcut keys [#6999]
  - Add CTRL+Enter to apply password generator changes [#6414]
  - Display Database created timestamp on statistics report
    [#6876]
  - Browser: Improve best matching credentials setting [#6893]
  - SSH Agent: Use both Pageant and OpenSSH agent simultaneously
    on Windows [#6288]
  - SSH Agent: Allow using database path to resolve keys [#6365]
  - SSH Agent: Show correct error messages in main window [#7166]
  - Multiple fixes for MSI installer [#6630]
  - Fix tab order for CSV import dialog to match screen order
    [#7315]
  - Don't mark kdbx:// urls as invalid [#7221]
  - Make selected text copyable instead of copying password
    [#7209]
  - Detect timestamp resolution for CSV files [#7196]
  - Fix crash while downloading favicon [#7104]
  - Correct naming of newly generated keyx files [#7010]
  - Place the 'Recycle Bin' at the bottom of the list when groups
    are sorted [#7004]
  - Handle tilde with custom browser paths [#6659]
  - Don't scroll up when deleting an entry [#6833]
  - Set the MIME-Type to text/plain when using wl-copy on wayland
    [#6832]
  - Fix adaptive icon painting [#5989][#6033]
  - Fix favicon download from URL with non-standard port [#5509]
  - Ignore recycle bin on KeePassHTTP migration [#5481]
  - Fix keepassxc-cr-recovery utility [#7521]
  - Fix Auto-Type not working when audio recording indicator is
    active on macOS 12.2+ [#7526]
- drop 7045.patch
- adapt build requires to the new version</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1649505600">- update to 2.7.1:
  * Show when tags are changed in entry history
  * Improve tags editing and allow spaces in tags
  * Improve layout of entry preview panel
  * Incorporate patches to support Flatpak distribution
  * Add expiration presets for 12 and 24 hours
  * Fix crash when building history change list
  * Fix hiding password on database unlock
  * Fix AES KDF slow transform speed
  * Auto-Type: Correct timing issue on macOS and Linux that prevented typing
  * Auto-Type: Fix use of Ctrl/Alt/Shift/Win modifiers on Windows
  * Auto-Type: Reduce/eliminate delay when searching for entries
  * Auto-Type: Map ASCII dead keys on Linux for international keyboards
  * CLI: Fix detection of hardware keys (YubiKey)
  * CLI: Add missing parameter -c to add/edit entries command
  * Secret Service: Fix crash when multiple prompts are shown
  * SSH Agent: Fix default agent selection on Windows
  * Fix database unlock dialog not being the top window on Linux
  * Fix drag/drop entries between tabs on Wayland
  * Fix compiling with minizip-ng</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1666612800">- update to 2.7.3:
  Due to a bug in macOS window behavior, 2.7.2 has been immediately
  superseded by 2.7.3.
  - Changes
  - Enhance Tags Support and Add Saved Searches [#8435, #8607]
  - Significant improvements to entry preview panel [#7993]
  - Add password strength indicator to all password fields [#7885]
  - Limit zxcvbn entropy estimation length to 128 characters [#7748]
  - Try full URL path when fetching favicon [#8565]
  - Hide usernames in preview panel when hidden in entry view [#8608]
  - Enable dark title bar on windows when accent color is not used [#8498]
  - Add option to display passwords in color in preview panel [#7097]
  - Add XML Export option to GUI [#8524]
  - Increase entropy required for a "good" password rating to 75 [#8523]
  - Add shortcut to copy password with TOTP appended [#8443]
  - Show entry count in status bar [#8435]
  - Allow KeePassXC to be built without X11 [#8147]
  - Enable use of VivoKey Apex and Dangerous Things FlexSecure tokens [#8332]
  - Add setting for number of recent files [#8239]
  - Add Ctrl+Tab shortcut to cycle databases in unlock dialog [#8168]
  - Replace offensive words in eff_large.wordlist [#7968]
  - Auto-Type: PICKCHARS can specify attribute and ignore BEEP [#8118]
  - Linux: Add isHardwareKeySupported and refreshHardwareKeys to DBus methods [#8055]
  - Add config variable to specify default database file name [#8042]
  - Support numeric aware sorting on Windows and macOS [#8363]
  - CLI: Add db-edit command [#8400]
  - CLI: Add option to display all attributes with show command [#8256]
  - CLI: Show UUID and tags with show and clip commands [#8241]
  - Browser: Move socket into separate directory on Linux [#8030]
  - Browser: Add group setting to omit WWW subdomain when matching URLs [#7988]
  - FdoSecrets: Ask to unlock the database when creating items [#8022, #8028]
  - FdoSecrets: Skip entries in recycle bin when searching [#8021]
  - Fixes
  - Fix potential deadlock in UI when saving [#8606]
  - Fix newlines when copying notes from preview panel [#8542]
  - Fix dark mode detection on Linux [#8477]
  - Fix crash when deleting items in recycle bin while searching [#8117]
  - Fix crash when trying to close database during unlock [#8144]
  - Fix tabbing around the interface [#8435, #8520]
  - Fix OPVault import when there are multiple OTP fields [#8436]
  - Fix various Windows Hello bugs [#8354]
  - Fix use of Apple Watch for Quick Unlock [#8311]
  - Better handling of "Lock on Minimize" setting [#8202]
  - Check for write permission before entering portable mode [#8447]
  - Correct regex escape logic to prevent parse errors [#7778]
  - Normalize slashes and file case for last used databases [#7864, #7214]
  - Link ykcore against pthread [#7807]
  - Auto-Type: Fix menu entries in selection dialog on Windows [#7987]
  - Auto-Type: Fix use of modifiers under macOS [#8111]
  - CLI: Fix output when using clip with the -t flag [#8271]
  - Browser: Use asynchronous access confirm dialog [#8273]
  - Browser: Always send database locked/unlocked status [#8114]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1667217600">- update to 2.7.4:
  - Changes
  - Add 2 months expiration preset [#8687]
  - CLI: Add Unicode support on Windows [#8618]
  - Fixes
  - Fix crash on macOS when unlocking database [#8676]
  - Fix display of passwords in preview panel [#8633]
  - Fix clicking links in entry preview panel [#8644]
  - Prevent expired entries search if no results returned [#8643]
  - Browser: Revert code causing connection problems [#8665]
  - Browser: Fix socket file symbolic link on Linux [#8656]
  - Flatpak: Fix launching browser proxy service [#8680]
  - SSH Agent: Fix paegent support on Windows [#8619]</changelog>
</package>
<package pkgid="e7284d9f4144cc72e5834c466da62ed9688a717f7655888b4a777fa28ac03a3f" name="keepassxc-lang" arch="noarch">
  <version epoch="0" ver="2.6.6" rel="bp154.3.2.1"/>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1555070400">- update to 2.4.1
  - Fix database deletion when using unsafe saves to a different
    file system [#2889]
  - Fix opening databases with legacy key files that contain '/'
    [#2872]
  - Fix opening database files from the command line [#2919]
  - Fix crash when editing master key [#2836]
  - Fix multiple issues with apply button behavior [#2947]
  - Fix issues on application startup (tab order, --pw-stdin, etc.)
    [#2830]
  - Fix building without WITH_XC_KEESHARE
  - Fix reference entry coloring on macOS dark mode [#2984]
  - Hide window when performing entry auto-type on macOS [#2969]
  - Improve UX of update checker; reduce checks to every 7 days
    [#2968]
  - KeeShare improvements [#2946, #2978, #2824]
  - Re-enable Ctrl+C to copy password from search box [#2947]
  - Add KeePassXC-Browser integration for Brave browser [#2933]
  - SSH Agent: Re-Add keys on database unlock [#2982]
  - SSH Agent: Only remove keys on app exit if they are removed on
    lock [#2985]
  - CLI: Add --no-password option [#2708]
  - CLI: Improve database extraction to XML [#2698]
  - CLI: Don't call mandb on build [#2774]
  - CLI: Add debug info [#2714]
  - Improve support for Snap theming [#2832]
  - Add support for building on Haiku OS [#2859]
  - Ctrl+PgDn now goes to the next tab and Ctrl+PgUp to the
    previous
  - Fix compiling on GCC 5 / Xenial [#2990]
  - Add .gitrev output to tarball for third-party builds [#2970]
  - Add WITH_XC_UPDATECHECK compile flag to toggle the update
    checker [#2968]
- disable update check
- no longer use our gitrev hack in favor for upstream solution</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1559563200">- update to 2.4.2
  - Improve resilience against memory attacks - overwrite memory
    before free [#3020]
  - Prevent infinite save loop when location is unavailable [#3026]
  - Attempt to fix quitting application when shutdown or logout
    issued [#3199]
  - Support merging database custom data [#3002]
  - Fix opening URL's with non-http schemes [#3153]
  - Fix data loss due to not reading all database attachments if
    duplicates exist [#3180]
  - Fix entry context menu disabling when using keyboard navigation
    [#3199]
  - Fix behaviors when canceling an entry edit [#3199]
  - Fix processing of tray icon click and doubleclick [#3112]
  - Update group in preview widget when focused [#3199]
  - Prefer DuckDuckGo service over direct icon download (increases
    resolution) [#2996]
  - Remove apply button in application settings [#3019]
  - Use winqtdeploy on Windows to correct deployment issues [#3025]
  - Don't mark entry edit as modified when attribute selection
    changes [#3041]
  - Use console code page CP_UTF8 on Windows if supported [#3050]
  - Snap: Fix locking database with session lock [#3046]
  - Snap: Fix theming across Linux distributions [#3057]
  - Snap: Use SNAP_USER_COMMON and SNAP_USER_DATA directories
    [#3131]
  - KeeShare: Automatically enable WITH_XC_KEESHARE_SECURE if
    quazip is found [#3088]
  - macOS: Fix toolbar text when in dark mode [#2998]
  - macOS: Lock database on switching user [#3097]
  - macOS: Fix global Auto-Type when the database is locked [#3138]
  - Browser: Close popups when database is locked [#3093]
  - Browser: Add tests [#3016]
  - Browser: Don't create default group if custom group is enabled
    [#3127]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1560340800">- update to 2.4.3
  - Fix library loading issues in the Snap and macOS releases
    [#3247]
  - Fix various keyboard navigation issues [#3248]
  - Fix main window toggling regression when clicking the tray icon
    on KDE [#3258]
  - Add documentation for keyboard shortcuts to source code
    distribution [#3215]</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1567425600">- Disable lto for keepassxc. It causes a build error.
- Provide/Obsolete keepassx. Keepassx still depends on Qt4 and shall be
  dropped shortly. (boo#1148401)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1572091200">- update to 2.5.0
  https://github.com/keepassxreboot/keepassxc/releases/tag/2.5.0</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1575892800">- Update to version 2.5.1:
  * https://github.com/keepassxreboot/keepassxc/releases/tag/2.5.1</changelog>
  <changelog author="droidmonkey &lt;support@dmapps.us&gt;" date="1578139200">- Update to version 2.5.2:
  * https://github.com/keepassxreboot/keepassxc/releases/tag/2.5.2</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1579435200">- Update to version 2.5.3:
  * https://github.com/keepassxreboot/keepassxc/releases/tag/2.5.3</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1582891200">- Clicking the tray icon momentarily shows and immediately hides window. Make
  it stick (boo#1165293).
- Fix window not minimizing to tray.
  + add keepassxc-Fix-window-hiding-after-shown.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1586433600">- Update to version 2.5.4:
  * https://github.com/keepassxreboot/keepassxc/releases/tag/2.5.4</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1589198400">- Drop build/requirement on libgcrypt20-hmac boo#1171438</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1594123200">- Update to version 2.6.0:
  * https://keepassxc.org/blog/2020-07-07-2.6.0-released/
  * https://github.com/keepassxreboot/keepassxc/releases/tag/2.6.0
- drop keepassxc-Fix-window-hiding-after-shown.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1594123201">- add BR for asciidoctor</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1594209600">- add _constraints with 6GB to fix build on ppc64 hopefully</changelog>
  <changelog author="Carsten Ziepke &lt;kieltux@gmail.com&gt;" date="1598788800">- Update to version 2.6.1:
  - Add menu entries for auto-typing only username or only
    password [#4891]
  - Browser: Add command for retrieving current TOTP [#5278]
  - Improve man pages [#5010]
  - Linux: Support Xfce screen lock signals [#4971]
  - Linux: Add OARS metadata to AppStream markup [#5031]
  - SSH Agent: Substitute tilde with %USERPROFILE% on Windows
    [#5116]
  - Improve password generator UI and UX [#5129]
  - Do not prompt to restart if switching the theme back and
    forth [#5084]
  - Change actions for F1, F2, and F3 keys [#5082]
  - Skip referenced passwords in health check report [#5056]
  - Check system-wide Qt translations directory for downstream
  - translations packaging [#5064]
  - macOS: Change password visibility toggle shortcut to Ctrl+H to
  - avoid conflict with system shortcut [#5114]
  - Browser: Only display domain name in browser access confirm
    dialog to avoid overly wide window sizes [#5214]
  - Fix clipboard not being cleared when database is locked while
    timeout is still active [#5184]
  - Fix list of previous databases not being cleared in some
    cases [#5123]
  - Fix saving of non-data changes on database lock [#5210]
  - Fix search results banner theming [#5197]
  - Don?t enforce theme palette in Classic theme mode and add hover
    effect for buttons [#5122, #5267]
  - Fix label clipping in settings on high-DPI screens [#5227]
  - Fix excessive memory usage by icons on systems with high-DPI
    screens [#5266]
  - Fix crash if number of TOTP digits exceeds ten [#5106]
  - Fix slot detection when first YubiKey is configured on the second
    slot [#5004]
  - Prevent crash if focus widget gets deleted during saving [#5005]
  - Always show buttons for opening or saving attachments [#4956]
  - Update link to Auto-Type help [#5228]
  - Fix build errors with Ninja [#5121]
  - CLI: Fix db-info command wrongly labelled as db-show in
    usage listing [#5140]
  - Windows: Use Classic theme by default if high-contrast mode
    is on [#5191]
  - Linux: Add workaround for qt5ct bug, causing icons not to show
    up [#5011]
  - Linux: Correct high-DPI display by not allowing fractional
    scaling [#5185]
  - Browser: Consider subdomain and path when requesting only
    ?best-matching credentials? [#4832]
  - SSH Agent: Always forget all keys on lock [#5115]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1603368000">- Update to version 2.6.2
  - Added
  - Add option to keep window always on top to view menu [#5542]
  - Move show/hide usernames and passwords to view menu [#5542]
  - Add command line options and environment variables for
    changing the config locations [#5452]
  - Include TOTP settings in CSV import/export and add support
    for ISO datetimes [#5346]
  - Changed
  - Mask sensitive information in command execution confirmation
    prompt [#5542]
  - SSH Agent: Avoid shortcut conflict on macOS by changing "Add
    key" to Ctrl+H on all platforms [#5484]
  - Fixed
  - Prevent data loss with drag and drop between databases
    [#5536]
  - Fix crash when toggling Capslock rapidly [#5545]
  - Don't mark URL references as invalid URL [#5380]
  - Reset entry preview after search [#5483]
  - Set Qt::Dialog flag on database open dialog [#5356]
  - Fix sorting of database report columns [#5426]
  - Fix IfDevice matching logic [#5344]
  - Fix layout issues and a stray scrollbar appearing on top of
    the entry edit screen [#5424]
  - Fix tabbing into the notes field [#5424]
  - Fix password generator ignoring settings on load [#5340]
  - Restore natural entry sort order on application load [#5438]
  - Fix paperclip and TOTP columns not saving state [#5327]
  - Enforce fixed password font in entry preview [#5454]
  - Add scrollbar when new database wizard exceeds screen size
    [#5560]
  - Do not mark database as modified when viewing Auto-Type
    associations [#5542]
  - CLI: Fix two heap-use-after-free crashes [#5368, #5470]
  - Browser: Fix key exchange not working with multiple
    simultaneous users on Windows [#5485]
  - Browser: Fix entry retrieval when "only best matching" is
    enabled [#5316]
  - Browser: Ignore recycle bin on KeePassHTTP migration [#5481]
  - KeeShare: Fix import crash [#5542]
  - macOS: Fix toolbar theming and breadcrumb display issues
    [#5482]
  - macOS: Fix file dialog randomly closing [#5479]
  - macOS: Fix being unable to select OPVault files for import
    [#5341]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1610452800">- Update to version 2.6.3
  - Added
  - Support Argon2id KDF [#5778]
  - Support XMLv2 key files [#5798]
  - Changed
  - Improve CSV Import/Export, include time fields and TOTP
    [#5346]
  - Support empty area dragging of the application window [#5860]
  - Display default Auto-Type sequence in preview pane [#5654]
  - Remove strict length limit on generated passwords [#5748]
  - Hide key file path by default when unlocking database [#5779]
  - Document browser extension use with Edge in managed mode
    [#5692]
  - Windows: Prevent clipboard history and cloud sync [#5853]
  - macOS: Update the application icon to Big Sur styling [#5851]
  - Fixed
  - Re-select previously selected entry on database unlock
    [#5559]
  - Properly save special character choice in password generator
    [#5610]
  - Fix crash in browser integration with multiple similar
    entries [#5653]
  - Remove offset on username field in classic theme [#5788]
  - Ensure entry history is copied when drag/dropping entries and
    groups [#5817]
  - Close modal dialogs when database is locked [#5820]
  - Prevent crash when KeeShare modifies an entry that is
    currently being edited [#5827]
  - Improve preview of entry attributes [#5834]
  - Always activate/focus database open dialog preventing mistype
    [#5878]
  - Reports: fix calculation of average password length [#5862]
  - Linux: Delay startup on login to correct tray icon issues
    [#5724]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1612267200">- Update to 2.6.4
  - Added
  - Automatically adapt to light/dark system theme changes
    (Windows/macOS only) [#6034]
  - Changed
  - Show window title as tooltip on system tray [#5948]
  - Compress Snap release as LZO for faster initial startup
    [#5877]
  - Password generator: Set maximum selectable password length to
    999 [#5937]
  - Fixed
  - Fix crash on app close when using SSH agent [#5935]
  - Fix KDF selection showing wrong item when using Argon2id
    [#5923]
  - Automatically close About dialog on database lock if it is
    still open [#5947]
  - Linux: Fix automatic launch at system startup with AppImages
    [#5901]
  - Linux: Fix click-to-move on empty area activating when using
    menus [#5971]
  - Linux: Try multiple times to show tray icon if tray is not
    ready yet [#5948]
  - macOS: Fix KeePassXC blocking clean shutdown [#6002]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1623931200">- Update to 2.6.6
  - Fixed
  - Fix focusing search when pressing hotkey #6603
  - Trim whitespace from TOTP key input prior to processing #6604
  - Fix building on macOS #6598
  - Resolve compiler warnings for unused return values #6607
- Changes from 2.6.5
  - Added
  - Show search bar when toolbar is hidden or in overflow #6279
  - Show countdown for clipboard clearing in status bar #6333
  - Command line option to lock all open databases #6511
  - Allow CSV import of bare TOTP secrets #6211
  - Retain file creation time when saving database #6576
  - Set permissions of saved attachments to be private to the
    current user #6363
  - OPVault: Use Text instead of Name for attribute names #6334
  - Changed
  - Reports: Allow resizing of reports columns #6435
  - Reports: Toggle showing expired entries #6534
  - Save Always on Top setting #6236
  - Password generator can exclude additional lookalike
    characters (6/G, 8/B) #6196
  - Fixed
  - Allow setting MSI properties in unattended install #6196
  - Update MainWindow minimum size to enable smaller verticle
    space #6196
  - Use application font size when setting default or monospace
    fonts #6332
  - Fix notes not clearing in entry preview panel in some cases
    [#6481]
  - macOS: Correct window activation when restoring from tray
    [#6575]
  - macOS: Better handling of minimize after unlock when using
    browser integration #6338
  - Linux: Start after the system tray is available on LXQt #6216
  - Linux: Allow selection of modal dialogs on X11 in Auto-Type
    [#6204]
  - KeeShare: prevent crash when file extension is missing #6174</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1623931201">- newer version of fedora now have the sane cmake macros too.</changelog>
</package>
<package pkgid="fb0d31a0e54b4a05e041145600bbf8f207549e19e0674efd2155e0474dcf5286" name="keepassxc-lang" arch="noarch">
  <version epoch="0" ver="2.7.1" rel="bp154.3.3.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1567425600">- Disable lto for keepassxc. It causes a build error.
- Provide/Obsolete keepassx. Keepassx still depends on Qt4 and shall be
  dropped shortly. (boo#1148401)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1572091200">- update to 2.5.0
  https://github.com/keepassxreboot/keepassxc/releases/tag/2.5.0</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1575892800">- Update to version 2.5.1:
  * https://github.com/keepassxreboot/keepassxc/releases/tag/2.5.1</changelog>
  <changelog author="droidmonkey &lt;support@dmapps.us&gt;" date="1578139200">- Update to version 2.5.2:
  * https://github.com/keepassxreboot/keepassxc/releases/tag/2.5.2</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1579435200">- Update to version 2.5.3:
  * https://github.com/keepassxreboot/keepassxc/releases/tag/2.5.3</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1582891200">- Clicking the tray icon momentarily shows and immediately hides window. Make
  it stick (boo#1165293).
- Fix window not minimizing to tray.
  + add keepassxc-Fix-window-hiding-after-shown.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1586433600">- Update to version 2.5.4:
  * https://github.com/keepassxreboot/keepassxc/releases/tag/2.5.4</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1589198400">- Drop build/requirement on libgcrypt20-hmac boo#1171438</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1594123200">- Update to version 2.6.0:
  * https://keepassxc.org/blog/2020-07-07-2.6.0-released/
  * https://github.com/keepassxreboot/keepassxc/releases/tag/2.6.0
- drop keepassxc-Fix-window-hiding-after-shown.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1594123201">- add BR for asciidoctor</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1594209600">- add _constraints with 6GB to fix build on ppc64 hopefully</changelog>
  <changelog author="Carsten Ziepke &lt;kieltux@gmail.com&gt;" date="1598788800">- Update to version 2.6.1:
  - Add menu entries for auto-typing only username or only
    password [#4891]
  - Browser: Add command for retrieving current TOTP [#5278]
  - Improve man pages [#5010]
  - Linux: Support Xfce screen lock signals [#4971]
  - Linux: Add OARS metadata to AppStream markup [#5031]
  - SSH Agent: Substitute tilde with %USERPROFILE% on Windows
    [#5116]
  - Improve password generator UI and UX [#5129]
  - Do not prompt to restart if switching the theme back and
    forth [#5084]
  - Change actions for F1, F2, and F3 keys [#5082]
  - Skip referenced passwords in health check report [#5056]
  - Check system-wide Qt translations directory for downstream
  - translations packaging [#5064]
  - macOS: Change password visibility toggle shortcut to Ctrl+H to
  - avoid conflict with system shortcut [#5114]
  - Browser: Only display domain name in browser access confirm
    dialog to avoid overly wide window sizes [#5214]
  - Fix clipboard not being cleared when database is locked while
    timeout is still active [#5184]
  - Fix list of previous databases not being cleared in some
    cases [#5123]
  - Fix saving of non-data changes on database lock [#5210]
  - Fix search results banner theming [#5197]
  - Don?t enforce theme palette in Classic theme mode and add hover
    effect for buttons [#5122, #5267]
  - Fix label clipping in settings on high-DPI screens [#5227]
  - Fix excessive memory usage by icons on systems with high-DPI
    screens [#5266]
  - Fix crash if number of TOTP digits exceeds ten [#5106]
  - Fix slot detection when first YubiKey is configured on the second
    slot [#5004]
  - Prevent crash if focus widget gets deleted during saving [#5005]
  - Always show buttons for opening or saving attachments [#4956]
  - Update link to Auto-Type help [#5228]
  - Fix build errors with Ninja [#5121]
  - CLI: Fix db-info command wrongly labelled as db-show in
    usage listing [#5140]
  - Windows: Use Classic theme by default if high-contrast mode
    is on [#5191]
  - Linux: Add workaround for qt5ct bug, causing icons not to show
    up [#5011]
  - Linux: Correct high-DPI display by not allowing fractional
    scaling [#5185]
  - Browser: Consider subdomain and path when requesting only
    ?best-matching credentials? [#4832]
  - SSH Agent: Always forget all keys on lock [#5115]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1603368000">- Update to version 2.6.2
  - Added
  - Add option to keep window always on top to view menu [#5542]
  - Move show/hide usernames and passwords to view menu [#5542]
  - Add command line options and environment variables for
    changing the config locations [#5452]
  - Include TOTP settings in CSV import/export and add support
    for ISO datetimes [#5346]
  - Changed
  - Mask sensitive information in command execution confirmation
    prompt [#5542]
  - SSH Agent: Avoid shortcut conflict on macOS by changing "Add
    key" to Ctrl+H on all platforms [#5484]
  - Fixed
  - Prevent data loss with drag and drop between databases
    [#5536]
  - Fix crash when toggling Capslock rapidly [#5545]
  - Don't mark URL references as invalid URL [#5380]
  - Reset entry preview after search [#5483]
  - Set Qt::Dialog flag on database open dialog [#5356]
  - Fix sorting of database report columns [#5426]
  - Fix IfDevice matching logic [#5344]
  - Fix layout issues and a stray scrollbar appearing on top of
    the entry edit screen [#5424]
  - Fix tabbing into the notes field [#5424]
  - Fix password generator ignoring settings on load [#5340]
  - Restore natural entry sort order on application load [#5438]
  - Fix paperclip and TOTP columns not saving state [#5327]
  - Enforce fixed password font in entry preview [#5454]
  - Add scrollbar when new database wizard exceeds screen size
    [#5560]
  - Do not mark database as modified when viewing Auto-Type
    associations [#5542]
  - CLI: Fix two heap-use-after-free crashes [#5368, #5470]
  - Browser: Fix key exchange not working with multiple
    simultaneous users on Windows [#5485]
  - Browser: Fix entry retrieval when "only best matching" is
    enabled [#5316]
  - Browser: Ignore recycle bin on KeePassHTTP migration [#5481]
  - KeeShare: Fix import crash [#5542]
  - macOS: Fix toolbar theming and breadcrumb display issues
    [#5482]
  - macOS: Fix file dialog randomly closing [#5479]
  - macOS: Fix being unable to select OPVault files for import
    [#5341]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1610452800">- Update to version 2.6.3
  - Added
  - Support Argon2id KDF [#5778]
  - Support XMLv2 key files [#5798]
  - Changed
  - Improve CSV Import/Export, include time fields and TOTP
    [#5346]
  - Support empty area dragging of the application window [#5860]
  - Display default Auto-Type sequence in preview pane [#5654]
  - Remove strict length limit on generated passwords [#5748]
  - Hide key file path by default when unlocking database [#5779]
  - Document browser extension use with Edge in managed mode
    [#5692]
  - Windows: Prevent clipboard history and cloud sync [#5853]
  - macOS: Update the application icon to Big Sur styling [#5851]
  - Fixed
  - Re-select previously selected entry on database unlock
    [#5559]
  - Properly save special character choice in password generator
    [#5610]
  - Fix crash in browser integration with multiple similar
    entries [#5653]
  - Remove offset on username field in classic theme [#5788]
  - Ensure entry history is copied when drag/dropping entries and
    groups [#5817]
  - Close modal dialogs when database is locked [#5820]
  - Prevent crash when KeeShare modifies an entry that is
    currently being edited [#5827]
  - Improve preview of entry attributes [#5834]
  - Always activate/focus database open dialog preventing mistype
    [#5878]
  - Reports: fix calculation of average password length [#5862]
  - Linux: Delay startup on login to correct tray icon issues
    [#5724]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1612267200">- Update to 2.6.4
  - Added
  - Automatically adapt to light/dark system theme changes
    (Windows/macOS only) [#6034]
  - Changed
  - Show window title as tooltip on system tray [#5948]
  - Compress Snap release as LZO for faster initial startup
    [#5877]
  - Password generator: Set maximum selectable password length to
    999 [#5937]
  - Fixed
  - Fix crash on app close when using SSH agent [#5935]
  - Fix KDF selection showing wrong item when using Argon2id
    [#5923]
  - Automatically close About dialog on database lock if it is
    still open [#5947]
  - Linux: Fix automatic launch at system startup with AppImages
    [#5901]
  - Linux: Fix click-to-move on empty area activating when using
    menus [#5971]
  - Linux: Try multiple times to show tray icon if tray is not
    ready yet [#5948]
  - macOS: Fix KeePassXC blocking clean shutdown [#6002]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1623931200">- Update to 2.6.6
  - Fixed
  - Fix focusing search when pressing hotkey #6603
  - Trim whitespace from TOTP key input prior to processing #6604
  - Fix building on macOS #6598
  - Resolve compiler warnings for unused return values #6607
- Changes from 2.6.5
  - Added
  - Show search bar when toolbar is hidden or in overflow #6279
  - Show countdown for clipboard clearing in status bar #6333
  - Command line option to lock all open databases #6511
  - Allow CSV import of bare TOTP secrets #6211
  - Retain file creation time when saving database #6576
  - Set permissions of saved attachments to be private to the
    current user #6363
  - OPVault: Use Text instead of Name for attribute names #6334
  - Changed
  - Reports: Allow resizing of reports columns #6435
  - Reports: Toggle showing expired entries #6534
  - Save Always on Top setting #6236
  - Password generator can exclude additional lookalike
    characters (6/G, 8/B) #6196
  - Fixed
  - Allow setting MSI properties in unattended install #6196
  - Update MainWindow minimum size to enable smaller verticle
    space #6196
  - Use application font size when setting default or monospace
    fonts #6332
  - Fix notes not clearing in entry preview panel in some cases
    [#6481]
  - macOS: Correct window activation when restoring from tray
    [#6575]
  - macOS: Better handling of minimize after unlock when using
    browser integration #6338
  - Linux: Start after the system tray is available on LXQt #6216
  - Linux: Allow selection of modal dialogs on X11 in Auto-Type
    [#6204]
  - KeeShare: prevent crash when file extension is missing #6174</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1623931201">- newer version of fedora now have the sane cmake macros too.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1634126400">- add https://patch-diff.githubusercontent.com/raw/keepassxreboot/keepassxc/pull/7045.patch
  and adapt it for 2.6.6: This allows us building with LTO</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1648123200">- Update to 2.7.0
  - Major Additions
  - Implement KDBX 4.1 [#7114]
  - Add direct write save option for cloud storage and GVFS
    [#6594]
  - Prevent screen capture on Windows and macOS [#6030]
  - Support quick unlock using Windows Hello [#7384]
  - Support quick unlock using Apple Watch [#5526]
  - Allow specifying database backup paths [#7035]
  - Add tag functionality [#6487][#7436][#7446]
  - Add password rating column to entry view [#4797]
  - Add group clone action [#6124]
  - Show modifications between entry history items [#6789]
  - Ability to bulk-delete and purge unused custom icons [#5970]
  - Support adding custom passphrase wordlists [#6799]
  - Support passphrase wordlists in numbered and PGP-signed
    formats [#6791]
  - Implement support for hardware keys via wireless NFC [#6895]
  - SSH Agent: Add support for OpenSSH 8.2 FIDO/U2F keys [#6371]
  - CLI: Implement attachment handling [#5538]
  - CLI: Add support for okon in offline HIBP checks [#5478]
  - CLI: Implement search command and remove locate [#6805]
  - CLI: Add db statistic output to db-info command [#7032]
  - CLI: Add -i/--include option to generate command. [#7112]
  - CLI: Add a -n (--notes) option to add and edit commands
    [#4646]
  - CLI: Add keyfile option to import command [#5402]
  - CLI: Adding a best option to clip to copy a password of the
    best match [#4489]
  - Browser: Add Microsoft Edge support on Linux [#7100]
  - Browser: Support native password generator from the extension
    [#6529]
  - Browser: Add group settings [#4180]
  - Browser: Add feature to ignore entries for HTTP-Auth Logins
    [#5394]
  - Browser: Support triggering Auto-Type from browser extension
    [#6272]
  - Browser: Add delete-entry command to API [#6899]
  - Browser: Add search 'by-path' url to API [#5535]
  - Browser: search for entries by UUID to API [#4763]
  - Browser: Support auto-download of favicon on entry addition
    [#7179]
  - Auto-Type: Major improvements to Auto-Type
    [#5864][#7463][#7435][#7391][#7129][#6400][#6364][#6361][#5283][#7507]
  - Auto-Type: Fix typing to virtual machines on Windows [#7366]
  - Auto-Type: Re-implement X11 keysym emulation [#7098]
  - Auto-Type: Support multiple Xkb layouts [#6247]
  - Auto-Type: Abort keystroke if modifiers held on X11
    [#6351][#6357]
  - Auto-Type: Add TOTP option to entry level Auto-Type menu
    [#6675]
  - FdoSecrets: Major Refactor and Code Consolidation
    [#5747][#5660][#7043][#6915]
  - FdoSecrets: Implement unlock before search [#6943]
  - Reports: Add browser statistics report [#7197]
  - Major Changes
  - Port crypto backend to Botan [#6209]
  - Improve attachment handling and security
    [#6606][#5034][#7083]
  - Allow selecting any open database in unlock dialog [#5427]
  - KeeShare: Remove checking signed container and QuaZip
    dependency [#7223]
  - Introduce security option to enable copy on double click
    (default off) [#6433]
  - Add 'delete entry without confirm' functionality [#5812]
  - Improve macOS and Windows platform integration [#5851]
  - Lock only the current database by default [#6652]
  - Show expired entries on DB unlock [#7290]
  - Update D-Bus adaptor interface class name to match definition
    file [#7523]
  - Other Changes and Fixes
  - Add countdown progress bar to TOTP preview [#6930]
  - Enter favicon url directly on icons page [#6614]
  - Set C++17 as standard in the build system [#7180]
  - Internalize ykcore into code base [#6654]
  - Transition to Visual Studio builds on Windows [#5874]
  - Ability to delete entries from health check reports [#6537]
  - Enhance remembering last-used directories [#6711]
  - Implement org.freedesktop.appearance.color-scheme support on
    Linux [#7422]
  - Support sorting HTML export [#7011]
  - Add display number of characters in passphrases [#5449]
  - Use Alt+Tab on macOS to switch between databases [#5407]
  - Add feature to sort groups using shortcut keys [#6999]
  - Add CTRL+Enter to apply password generator changes [#6414]
  - Display Database created timestamp on statistics report
    [#6876]
  - Browser: Improve best matching credentials setting [#6893]
  - SSH Agent: Use both Pageant and OpenSSH agent simultaneously
    on Windows [#6288]
  - SSH Agent: Allow using database path to resolve keys [#6365]
  - SSH Agent: Show correct error messages in main window [#7166]
  - Multiple fixes for MSI installer [#6630]
  - Fix tab order for CSV import dialog to match screen order
    [#7315]
  - Don't mark kdbx:// urls as invalid [#7221]
  - Make selected text copyable instead of copying password
    [#7209]
  - Detect timestamp resolution for CSV files [#7196]
  - Fix crash while downloading favicon [#7104]
  - Correct naming of newly generated keyx files [#7010]
  - Place the 'Recycle Bin' at the bottom of the list when groups
    are sorted [#7004]
  - Handle tilde with custom browser paths [#6659]
  - Don't scroll up when deleting an entry [#6833]
  - Set the MIME-Type to text/plain when using wl-copy on wayland
    [#6832]
  - Fix adaptive icon painting [#5989][#6033]
  - Fix favicon download from URL with non-standard port [#5509]
  - Ignore recycle bin on KeePassHTTP migration [#5481]
  - Fix keepassxc-cr-recovery utility [#7521]
  - Fix Auto-Type not working when audio recording indicator is
    active on macOS 12.2+ [#7526]
- drop 7045.patch
- adapt build requires to the new version</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1649505600">- update to 2.7.1:
  * Show when tags are changed in entry history
  * Improve tags editing and allow spaces in tags
  * Improve layout of entry preview panel
  * Incorporate patches to support Flatpak distribution
  * Add expiration presets for 12 and 24 hours
  * Fix crash when building history change list
  * Fix hiding password on database unlock
  * Fix AES KDF slow transform speed
  * Auto-Type: Correct timing issue on macOS and Linux that prevented typing
  * Auto-Type: Fix use of Ctrl/Alt/Shift/Win modifiers on Windows
  * Auto-Type: Reduce/eliminate delay when searching for entries
  * Auto-Type: Map ASCII dead keys on Linux for international keyboards
  * CLI: Fix detection of hardware keys (YubiKey)
  * CLI: Add missing parameter -c to add/edit entries command
  * Secret Service: Fix crash when multiple prompts are shown
  * SSH Agent: Fix default agent selection on Windows
  * Fix database unlock dialog not being the top window on Linux
  * Fix drag/drop entries between tabs on Wayland
  * Fix compiling with minizip-ng</changelog>
</package>
<package pkgid="8eb4314ef3479239907039d388e22b41f9025bd2994ba6449eaa8f8b146f8ca1" name="keepassxc-lang" arch="noarch">
  <version epoch="0" ver="2.7.3" rel="bp154.3.6.1"/>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1572091200">- update to 2.5.0
  https://github.com/keepassxreboot/keepassxc/releases/tag/2.5.0</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1575892800">- Update to version 2.5.1:
  * https://github.com/keepassxreboot/keepassxc/releases/tag/2.5.1</changelog>
  <changelog author="droidmonkey &lt;support@dmapps.us&gt;" date="1578139200">- Update to version 2.5.2:
  * https://github.com/keepassxreboot/keepassxc/releases/tag/2.5.2</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1579435200">- Update to version 2.5.3:
  * https://github.com/keepassxreboot/keepassxc/releases/tag/2.5.3</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1582891200">- Clicking the tray icon momentarily shows and immediately hides window. Make
  it stick (boo#1165293).
- Fix window not minimizing to tray.
  + add keepassxc-Fix-window-hiding-after-shown.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1586433600">- Update to version 2.5.4:
  * https://github.com/keepassxreboot/keepassxc/releases/tag/2.5.4</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1589198400">- Drop build/requirement on libgcrypt20-hmac boo#1171438</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1594123200">- Update to version 2.6.0:
  * https://keepassxc.org/blog/2020-07-07-2.6.0-released/
  * https://github.com/keepassxreboot/keepassxc/releases/tag/2.6.0
- drop keepassxc-Fix-window-hiding-after-shown.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1594123201">- add BR for asciidoctor</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1594209600">- add _constraints with 6GB to fix build on ppc64 hopefully</changelog>
  <changelog author="Carsten Ziepke &lt;kieltux@gmail.com&gt;" date="1598788800">- Update to version 2.6.1:
  - Add menu entries for auto-typing only username or only
    password [#4891]
  - Browser: Add command for retrieving current TOTP [#5278]
  - Improve man pages [#5010]
  - Linux: Support Xfce screen lock signals [#4971]
  - Linux: Add OARS metadata to AppStream markup [#5031]
  - SSH Agent: Substitute tilde with %USERPROFILE% on Windows
    [#5116]
  - Improve password generator UI and UX [#5129]
  - Do not prompt to restart if switching the theme back and
    forth [#5084]
  - Change actions for F1, F2, and F3 keys [#5082]
  - Skip referenced passwords in health check report [#5056]
  - Check system-wide Qt translations directory for downstream
  - translations packaging [#5064]
  - macOS: Change password visibility toggle shortcut to Ctrl+H to
  - avoid conflict with system shortcut [#5114]
  - Browser: Only display domain name in browser access confirm
    dialog to avoid overly wide window sizes [#5214]
  - Fix clipboard not being cleared when database is locked while
    timeout is still active [#5184]
  - Fix list of previous databases not being cleared in some
    cases [#5123]
  - Fix saving of non-data changes on database lock [#5210]
  - Fix search results banner theming [#5197]
  - Don?t enforce theme palette in Classic theme mode and add hover
    effect for buttons [#5122, #5267]
  - Fix label clipping in settings on high-DPI screens [#5227]
  - Fix excessive memory usage by icons on systems with high-DPI
    screens [#5266]
  - Fix crash if number of TOTP digits exceeds ten [#5106]
  - Fix slot detection when first YubiKey is configured on the second
    slot [#5004]
  - Prevent crash if focus widget gets deleted during saving [#5005]
  - Always show buttons for opening or saving attachments [#4956]
  - Update link to Auto-Type help [#5228]
  - Fix build errors with Ninja [#5121]
  - CLI: Fix db-info command wrongly labelled as db-show in
    usage listing [#5140]
  - Windows: Use Classic theme by default if high-contrast mode
    is on [#5191]
  - Linux: Add workaround for qt5ct bug, causing icons not to show
    up [#5011]
  - Linux: Correct high-DPI display by not allowing fractional
    scaling [#5185]
  - Browser: Consider subdomain and path when requesting only
    ?best-matching credentials? [#4832]
  - SSH Agent: Always forget all keys on lock [#5115]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1603368000">- Update to version 2.6.2
  - Added
  - Add option to keep window always on top to view menu [#5542]
  - Move show/hide usernames and passwords to view menu [#5542]
  - Add command line options and environment variables for
    changing the config locations [#5452]
  - Include TOTP settings in CSV import/export and add support
    for ISO datetimes [#5346]
  - Changed
  - Mask sensitive information in command execution confirmation
    prompt [#5542]
  - SSH Agent: Avoid shortcut conflict on macOS by changing "Add
    key" to Ctrl+H on all platforms [#5484]
  - Fixed
  - Prevent data loss with drag and drop between databases
    [#5536]
  - Fix crash when toggling Capslock rapidly [#5545]
  - Don't mark URL references as invalid URL [#5380]
  - Reset entry preview after search [#5483]
  - Set Qt::Dialog flag on database open dialog [#5356]
  - Fix sorting of database report columns [#5426]
  - Fix IfDevice matching logic [#5344]
  - Fix layout issues and a stray scrollbar appearing on top of
    the entry edit screen [#5424]
  - Fix tabbing into the notes field [#5424]
  - Fix password generator ignoring settings on load [#5340]
  - Restore natural entry sort order on application load [#5438]
  - Fix paperclip and TOTP columns not saving state [#5327]
  - Enforce fixed password font in entry preview [#5454]
  - Add scrollbar when new database wizard exceeds screen size
    [#5560]
  - Do not mark database as modified when viewing Auto-Type
    associations [#5542]
  - CLI: Fix two heap-use-after-free crashes [#5368, #5470]
  - Browser: Fix key exchange not working with multiple
    simultaneous users on Windows [#5485]
  - Browser: Fix entry retrieval when "only best matching" is
    enabled [#5316]
  - Browser: Ignore recycle bin on KeePassHTTP migration [#5481]
  - KeeShare: Fix import crash [#5542]
  - macOS: Fix toolbar theming and breadcrumb display issues
    [#5482]
  - macOS: Fix file dialog randomly closing [#5479]
  - macOS: Fix being unable to select OPVault files for import
    [#5341]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1610452800">- Update to version 2.6.3
  - Added
  - Support Argon2id KDF [#5778]
  - Support XMLv2 key files [#5798]
  - Changed
  - Improve CSV Import/Export, include time fields and TOTP
    [#5346]
  - Support empty area dragging of the application window [#5860]
  - Display default Auto-Type sequence in preview pane [#5654]
  - Remove strict length limit on generated passwords [#5748]
  - Hide key file path by default when unlocking database [#5779]
  - Document browser extension use with Edge in managed mode
    [#5692]
  - Windows: Prevent clipboard history and cloud sync [#5853]
  - macOS: Update the application icon to Big Sur styling [#5851]
  - Fixed
  - Re-select previously selected entry on database unlock
    [#5559]
  - Properly save special character choice in password generator
    [#5610]
  - Fix crash in browser integration with multiple similar
    entries [#5653]
  - Remove offset on username field in classic theme [#5788]
  - Ensure entry history is copied when drag/dropping entries and
    groups [#5817]
  - Close modal dialogs when database is locked [#5820]
  - Prevent crash when KeeShare modifies an entry that is
    currently being edited [#5827]
  - Improve preview of entry attributes [#5834]
  - Always activate/focus database open dialog preventing mistype
    [#5878]
  - Reports: fix calculation of average password length [#5862]
  - Linux: Delay startup on login to correct tray icon issues
    [#5724]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1612267200">- Update to 2.6.4
  - Added
  - Automatically adapt to light/dark system theme changes
    (Windows/macOS only) [#6034]
  - Changed
  - Show window title as tooltip on system tray [#5948]
  - Compress Snap release as LZO for faster initial startup
    [#5877]
  - Password generator: Set maximum selectable password length to
    999 [#5937]
  - Fixed
  - Fix crash on app close when using SSH agent [#5935]
  - Fix KDF selection showing wrong item when using Argon2id
    [#5923]
  - Automatically close About dialog on database lock if it is
    still open [#5947]
  - Linux: Fix automatic launch at system startup with AppImages
    [#5901]
  - Linux: Fix click-to-move on empty area activating when using
    menus [#5971]
  - Linux: Try multiple times to show tray icon if tray is not
    ready yet [#5948]
  - macOS: Fix KeePassXC blocking clean shutdown [#6002]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1623931200">- Update to 2.6.6
  - Fixed
  - Fix focusing search when pressing hotkey #6603
  - Trim whitespace from TOTP key input prior to processing #6604
  - Fix building on macOS #6598
  - Resolve compiler warnings for unused return values #6607
- Changes from 2.6.5
  - Added
  - Show search bar when toolbar is hidden or in overflow #6279
  - Show countdown for clipboard clearing in status bar #6333
  - Command line option to lock all open databases #6511
  - Allow CSV import of bare TOTP secrets #6211
  - Retain file creation time when saving database #6576
  - Set permissions of saved attachments to be private to the
    current user #6363
  - OPVault: Use Text instead of Name for attribute names #6334
  - Changed
  - Reports: Allow resizing of reports columns #6435
  - Reports: Toggle showing expired entries #6534
  - Save Always on Top setting #6236
  - Password generator can exclude additional lookalike
    characters (6/G, 8/B) #6196
  - Fixed
  - Allow setting MSI properties in unattended install #6196
  - Update MainWindow minimum size to enable smaller verticle
    space #6196
  - Use application font size when setting default or monospace
    fonts #6332
  - Fix notes not clearing in entry preview panel in some cases
    [#6481]
  - macOS: Correct window activation when restoring from tray
    [#6575]
  - macOS: Better handling of minimize after unlock when using
    browser integration #6338
  - Linux: Start after the system tray is available on LXQt #6216
  - Linux: Allow selection of modal dialogs on X11 in Auto-Type
    [#6204]
  - KeeShare: prevent crash when file extension is missing #6174</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1623931201">- newer version of fedora now have the sane cmake macros too.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1634126400">- add https://patch-diff.githubusercontent.com/raw/keepassxreboot/keepassxc/pull/7045.patch
  and adapt it for 2.6.6: This allows us building with LTO</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1648123200">- Update to 2.7.0
  - Major Additions
  - Implement KDBX 4.1 [#7114]
  - Add direct write save option for cloud storage and GVFS
    [#6594]
  - Prevent screen capture on Windows and macOS [#6030]
  - Support quick unlock using Windows Hello [#7384]
  - Support quick unlock using Apple Watch [#5526]
  - Allow specifying database backup paths [#7035]
  - Add tag functionality [#6487][#7436][#7446]
  - Add password rating column to entry view [#4797]
  - Add group clone action [#6124]
  - Show modifications between entry history items [#6789]
  - Ability to bulk-delete and purge unused custom icons [#5970]
  - Support adding custom passphrase wordlists [#6799]
  - Support passphrase wordlists in numbered and PGP-signed
    formats [#6791]
  - Implement support for hardware keys via wireless NFC [#6895]
  - SSH Agent: Add support for OpenSSH 8.2 FIDO/U2F keys [#6371]
  - CLI: Implement attachment handling [#5538]
  - CLI: Add support for okon in offline HIBP checks [#5478]
  - CLI: Implement search command and remove locate [#6805]
  - CLI: Add db statistic output to db-info command [#7032]
  - CLI: Add -i/--include option to generate command. [#7112]
  - CLI: Add a -n (--notes) option to add and edit commands
    [#4646]
  - CLI: Add keyfile option to import command [#5402]
  - CLI: Adding a best option to clip to copy a password of the
    best match [#4489]
  - Browser: Add Microsoft Edge support on Linux [#7100]
  - Browser: Support native password generator from the extension
    [#6529]
  - Browser: Add group settings [#4180]
  - Browser: Add feature to ignore entries for HTTP-Auth Logins
    [#5394]
  - Browser: Support triggering Auto-Type from browser extension
    [#6272]
  - Browser: Add delete-entry command to API [#6899]
  - Browser: Add search 'by-path' url to API [#5535]
  - Browser: search for entries by UUID to API [#4763]
  - Browser: Support auto-download of favicon on entry addition
    [#7179]
  - Auto-Type: Major improvements to Auto-Type
    [#5864][#7463][#7435][#7391][#7129][#6400][#6364][#6361][#5283][#7507]
  - Auto-Type: Fix typing to virtual machines on Windows [#7366]
  - Auto-Type: Re-implement X11 keysym emulation [#7098]
  - Auto-Type: Support multiple Xkb layouts [#6247]
  - Auto-Type: Abort keystroke if modifiers held on X11
    [#6351][#6357]
  - Auto-Type: Add TOTP option to entry level Auto-Type menu
    [#6675]
  - FdoSecrets: Major Refactor and Code Consolidation
    [#5747][#5660][#7043][#6915]
  - FdoSecrets: Implement unlock before search [#6943]
  - Reports: Add browser statistics report [#7197]
  - Major Changes
  - Port crypto backend to Botan [#6209]
  - Improve attachment handling and security
    [#6606][#5034][#7083]
  - Allow selecting any open database in unlock dialog [#5427]
  - KeeShare: Remove checking signed container and QuaZip
    dependency [#7223]
  - Introduce security option to enable copy on double click
    (default off) [#6433]
  - Add 'delete entry without confirm' functionality [#5812]
  - Improve macOS and Windows platform integration [#5851]
  - Lock only the current database by default [#6652]
  - Show expired entries on DB unlock [#7290]
  - Update D-Bus adaptor interface class name to match definition
    file [#7523]
  - Other Changes and Fixes
  - Add countdown progress bar to TOTP preview [#6930]
  - Enter favicon url directly on icons page [#6614]
  - Set C++17 as standard in the build system [#7180]
  - Internalize ykcore into code base [#6654]
  - Transition to Visual Studio builds on Windows [#5874]
  - Ability to delete entries from health check reports [#6537]
  - Enhance remembering last-used directories [#6711]
  - Implement org.freedesktop.appearance.color-scheme support on
    Linux [#7422]
  - Support sorting HTML export [#7011]
  - Add display number of characters in passphrases [#5449]
  - Use Alt+Tab on macOS to switch between databases [#5407]
  - Add feature to sort groups using shortcut keys [#6999]
  - Add CTRL+Enter to apply password generator changes [#6414]
  - Display Database created timestamp on statistics report
    [#6876]
  - Browser: Improve best matching credentials setting [#6893]
  - SSH Agent: Use both Pageant and OpenSSH agent simultaneously
    on Windows [#6288]
  - SSH Agent: Allow using database path to resolve keys [#6365]
  - SSH Agent: Show correct error messages in main window [#7166]
  - Multiple fixes for MSI installer [#6630]
  - Fix tab order for CSV import dialog to match screen order
    [#7315]
  - Don't mark kdbx:// urls as invalid [#7221]
  - Make selected text copyable instead of copying password
    [#7209]
  - Detect timestamp resolution for CSV files [#7196]
  - Fix crash while downloading favicon [#7104]
  - Correct naming of newly generated keyx files [#7010]
  - Place the 'Recycle Bin' at the bottom of the list when groups
    are sorted [#7004]
  - Handle tilde with custom browser paths [#6659]
  - Don't scroll up when deleting an entry [#6833]
  - Set the MIME-Type to text/plain when using wl-copy on wayland
    [#6832]
  - Fix adaptive icon painting [#5989][#6033]
  - Fix favicon download from URL with non-standard port [#5509]
  - Ignore recycle bin on KeePassHTTP migration [#5481]
  - Fix keepassxc-cr-recovery utility [#7521]
  - Fix Auto-Type not working when audio recording indicator is
    active on macOS 12.2+ [#7526]
- drop 7045.patch
- adapt build requires to the new version</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1649505600">- update to 2.7.1:
  * Show when tags are changed in entry history
  * Improve tags editing and allow spaces in tags
  * Improve layout of entry preview panel
  * Incorporate patches to support Flatpak distribution
  * Add expiration presets for 12 and 24 hours
  * Fix crash when building history change list
  * Fix hiding password on database unlock
  * Fix AES KDF slow transform speed
  * Auto-Type: Correct timing issue on macOS and Linux that prevented typing
  * Auto-Type: Fix use of Ctrl/Alt/Shift/Win modifiers on Windows
  * Auto-Type: Reduce/eliminate delay when searching for entries
  * Auto-Type: Map ASCII dead keys on Linux for international keyboards
  * CLI: Fix detection of hardware keys (YubiKey)
  * CLI: Add missing parameter -c to add/edit entries command
  * Secret Service: Fix crash when multiple prompts are shown
  * SSH Agent: Fix default agent selection on Windows
  * Fix database unlock dialog not being the top window on Linux
  * Fix drag/drop entries between tabs on Wayland
  * Fix compiling with minizip-ng</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1666612800">- update to 2.7.3:
  Due to a bug in macOS window behavior, 2.7.2 has been immediately
  superseded by 2.7.3.
  - Changes
  - Enhance Tags Support and Add Saved Searches [#8435, #8607]
  - Significant improvements to entry preview panel [#7993]
  - Add password strength indicator to all password fields [#7885]
  - Limit zxcvbn entropy estimation length to 128 characters [#7748]
  - Try full URL path when fetching favicon [#8565]
  - Hide usernames in preview panel when hidden in entry view [#8608]
  - Enable dark title bar on windows when accent color is not used [#8498]
  - Add option to display passwords in color in preview panel [#7097]
  - Add XML Export option to GUI [#8524]
  - Increase entropy required for a "good" password rating to 75 [#8523]
  - Add shortcut to copy password with TOTP appended [#8443]
  - Show entry count in status bar [#8435]
  - Allow KeePassXC to be built without X11 [#8147]
  - Enable use of VivoKey Apex and Dangerous Things FlexSecure tokens [#8332]
  - Add setting for number of recent files [#8239]
  - Add Ctrl+Tab shortcut to cycle databases in unlock dialog [#8168]
  - Replace offensive words in eff_large.wordlist [#7968]
  - Auto-Type: PICKCHARS can specify attribute and ignore BEEP [#8118]
  - Linux: Add isHardwareKeySupported and refreshHardwareKeys to DBus methods [#8055]
  - Add config variable to specify default database file name [#8042]
  - Support numeric aware sorting on Windows and macOS [#8363]
  - CLI: Add db-edit command [#8400]
  - CLI: Add option to display all attributes with show command [#8256]
  - CLI: Show UUID and tags with show and clip commands [#8241]
  - Browser: Move socket into separate directory on Linux [#8030]
  - Browser: Add group setting to omit WWW subdomain when matching URLs [#7988]
  - FdoSecrets: Ask to unlock the database when creating items [#8022, #8028]
  - FdoSecrets: Skip entries in recycle bin when searching [#8021]
  - Fixes
  - Fix potential deadlock in UI when saving [#8606]
  - Fix newlines when copying notes from preview panel [#8542]
  - Fix dark mode detection on Linux [#8477]
  - Fix crash when deleting items in recycle bin while searching [#8117]
  - Fix crash when trying to close database during unlock [#8144]
  - Fix tabbing around the interface [#8435, #8520]
  - Fix OPVault import when there are multiple OTP fields [#8436]
  - Fix various Windows Hello bugs [#8354]
  - Fix use of Apple Watch for Quick Unlock [#8311]
  - Better handling of "Lock on Minimize" setting [#8202]
  - Check for write permission before entering portable mode [#8447]
  - Correct regex escape logic to prevent parse errors [#7778]
  - Normalize slashes and file case for last used databases [#7864, #7214]
  - Link ykcore against pthread [#7807]
  - Auto-Type: Fix menu entries in selection dialog on Windows [#7987]
  - Auto-Type: Fix use of modifiers under macOS [#8111]
  - CLI: Fix output when using clip with the -t flag [#8271]
  - Browser: Use asynchronous access confirm dialog [#8273]
  - Browser: Always send database locked/unlocked status [#8114]</changelog>
</package>
<package pkgid="30e66b780fbc76a35e83f589e6bef686863c4f8ed4c080f7123c4017ef723ca8" name="keepassxc-lang" arch="noarch">
  <version epoch="0" ver="2.7.4" rel="bp154.3.9.1"/>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1575892800">- Update to version 2.5.1:
  * https://github.com/keepassxreboot/keepassxc/releases/tag/2.5.1</changelog>
  <changelog author="droidmonkey &lt;support@dmapps.us&gt;" date="1578139200">- Update to version 2.5.2:
  * https://github.com/keepassxreboot/keepassxc/releases/tag/2.5.2</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1579435200">- Update to version 2.5.3:
  * https://github.com/keepassxreboot/keepassxc/releases/tag/2.5.3</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1582891200">- Clicking the tray icon momentarily shows and immediately hides window. Make
  it stick (boo#1165293).
- Fix window not minimizing to tray.
  + add keepassxc-Fix-window-hiding-after-shown.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1586433600">- Update to version 2.5.4:
  * https://github.com/keepassxreboot/keepassxc/releases/tag/2.5.4</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1589198400">- Drop build/requirement on libgcrypt20-hmac boo#1171438</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1594123200">- Update to version 2.6.0:
  * https://keepassxc.org/blog/2020-07-07-2.6.0-released/
  * https://github.com/keepassxreboot/keepassxc/releases/tag/2.6.0
- drop keepassxc-Fix-window-hiding-after-shown.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1594123201">- add BR for asciidoctor</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1594209600">- add _constraints with 6GB to fix build on ppc64 hopefully</changelog>
  <changelog author="Carsten Ziepke &lt;kieltux@gmail.com&gt;" date="1598788800">- Update to version 2.6.1:
  - Add menu entries for auto-typing only username or only
    password [#4891]
  - Browser: Add command for retrieving current TOTP [#5278]
  - Improve man pages [#5010]
  - Linux: Support Xfce screen lock signals [#4971]
  - Linux: Add OARS metadata to AppStream markup [#5031]
  - SSH Agent: Substitute tilde with %USERPROFILE% on Windows
    [#5116]
  - Improve password generator UI and UX [#5129]
  - Do not prompt to restart if switching the theme back and
    forth [#5084]
  - Change actions for F1, F2, and F3 keys [#5082]
  - Skip referenced passwords in health check report [#5056]
  - Check system-wide Qt translations directory for downstream
  - translations packaging [#5064]
  - macOS: Change password visibility toggle shortcut to Ctrl+H to
  - avoid conflict with system shortcut [#5114]
  - Browser: Only display domain name in browser access confirm
    dialog to avoid overly wide window sizes [#5214]
  - Fix clipboard not being cleared when database is locked while
    timeout is still active [#5184]
  - Fix list of previous databases not being cleared in some
    cases [#5123]
  - Fix saving of non-data changes on database lock [#5210]
  - Fix search results banner theming [#5197]
  - Don?t enforce theme palette in Classic theme mode and add hover
    effect for buttons [#5122, #5267]
  - Fix label clipping in settings on high-DPI screens [#5227]
  - Fix excessive memory usage by icons on systems with high-DPI
    screens [#5266]
  - Fix crash if number of TOTP digits exceeds ten [#5106]
  - Fix slot detection when first YubiKey is configured on the second
    slot [#5004]
  - Prevent crash if focus widget gets deleted during saving [#5005]
  - Always show buttons for opening or saving attachments [#4956]
  - Update link to Auto-Type help [#5228]
  - Fix build errors with Ninja [#5121]
  - CLI: Fix db-info command wrongly labelled as db-show in
    usage listing [#5140]
  - Windows: Use Classic theme by default if high-contrast mode
    is on [#5191]
  - Linux: Add workaround for qt5ct bug, causing icons not to show
    up [#5011]
  - Linux: Correct high-DPI display by not allowing fractional
    scaling [#5185]
  - Browser: Consider subdomain and path when requesting only
    ?best-matching credentials? [#4832]
  - SSH Agent: Always forget all keys on lock [#5115]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1603368000">- Update to version 2.6.2
  - Added
  - Add option to keep window always on top to view menu [#5542]
  - Move show/hide usernames and passwords to view menu [#5542]
  - Add command line options and environment variables for
    changing the config locations [#5452]
  - Include TOTP settings in CSV import/export and add support
    for ISO datetimes [#5346]
  - Changed
  - Mask sensitive information in command execution confirmation
    prompt [#5542]
  - SSH Agent: Avoid shortcut conflict on macOS by changing "Add
    key" to Ctrl+H on all platforms [#5484]
  - Fixed
  - Prevent data loss with drag and drop between databases
    [#5536]
  - Fix crash when toggling Capslock rapidly [#5545]
  - Don't mark URL references as invalid URL [#5380]
  - Reset entry preview after search [#5483]
  - Set Qt::Dialog flag on database open dialog [#5356]
  - Fix sorting of database report columns [#5426]
  - Fix IfDevice matching logic [#5344]
  - Fix layout issues and a stray scrollbar appearing on top of
    the entry edit screen [#5424]
  - Fix tabbing into the notes field [#5424]
  - Fix password generator ignoring settings on load [#5340]
  - Restore natural entry sort order on application load [#5438]
  - Fix paperclip and TOTP columns not saving state [#5327]
  - Enforce fixed password font in entry preview [#5454]
  - Add scrollbar when new database wizard exceeds screen size
    [#5560]
  - Do not mark database as modified when viewing Auto-Type
    associations [#5542]
  - CLI: Fix two heap-use-after-free crashes [#5368, #5470]
  - Browser: Fix key exchange not working with multiple
    simultaneous users on Windows [#5485]
  - Browser: Fix entry retrieval when "only best matching" is
    enabled [#5316]
  - Browser: Ignore recycle bin on KeePassHTTP migration [#5481]
  - KeeShare: Fix import crash [#5542]
  - macOS: Fix toolbar theming and breadcrumb display issues
    [#5482]
  - macOS: Fix file dialog randomly closing [#5479]
  - macOS: Fix being unable to select OPVault files for import
    [#5341]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1610452800">- Update to version 2.6.3
  - Added
  - Support Argon2id KDF [#5778]
  - Support XMLv2 key files [#5798]
  - Changed
  - Improve CSV Import/Export, include time fields and TOTP
    [#5346]
  - Support empty area dragging of the application window [#5860]
  - Display default Auto-Type sequence in preview pane [#5654]
  - Remove strict length limit on generated passwords [#5748]
  - Hide key file path by default when unlocking database [#5779]
  - Document browser extension use with Edge in managed mode
    [#5692]
  - Windows: Prevent clipboard history and cloud sync [#5853]
  - macOS: Update the application icon to Big Sur styling [#5851]
  - Fixed
  - Re-select previously selected entry on database unlock
    [#5559]
  - Properly save special character choice in password generator
    [#5610]
  - Fix crash in browser integration with multiple similar
    entries [#5653]
  - Remove offset on username field in classic theme [#5788]
  - Ensure entry history is copied when drag/dropping entries and
    groups [#5817]
  - Close modal dialogs when database is locked [#5820]
  - Prevent crash when KeeShare modifies an entry that is
    currently being edited [#5827]
  - Improve preview of entry attributes [#5834]
  - Always activate/focus database open dialog preventing mistype
    [#5878]
  - Reports: fix calculation of average password length [#5862]
  - Linux: Delay startup on login to correct tray icon issues
    [#5724]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1612267200">- Update to 2.6.4
  - Added
  - Automatically adapt to light/dark system theme changes
    (Windows/macOS only) [#6034]
  - Changed
  - Show window title as tooltip on system tray [#5948]
  - Compress Snap release as LZO for faster initial startup
    [#5877]
  - Password generator: Set maximum selectable password length to
    999 [#5937]
  - Fixed
  - Fix crash on app close when using SSH agent [#5935]
  - Fix KDF selection showing wrong item when using Argon2id
    [#5923]
  - Automatically close About dialog on database lock if it is
    still open [#5947]
  - Linux: Fix automatic launch at system startup with AppImages
    [#5901]
  - Linux: Fix click-to-move on empty area activating when using
    menus [#5971]
  - Linux: Try multiple times to show tray icon if tray is not
    ready yet [#5948]
  - macOS: Fix KeePassXC blocking clean shutdown [#6002]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1623931200">- Update to 2.6.6
  - Fixed
  - Fix focusing search when pressing hotkey #6603
  - Trim whitespace from TOTP key input prior to processing #6604
  - Fix building on macOS #6598
  - Resolve compiler warnings for unused return values #6607
- Changes from 2.6.5
  - Added
  - Show search bar when toolbar is hidden or in overflow #6279
  - Show countdown for clipboard clearing in status bar #6333
  - Command line option to lock all open databases #6511
  - Allow CSV import of bare TOTP secrets #6211
  - Retain file creation time when saving database #6576
  - Set permissions of saved attachments to be private to the
    current user #6363
  - OPVault: Use Text instead of Name for attribute names #6334
  - Changed
  - Reports: Allow resizing of reports columns #6435
  - Reports: Toggle showing expired entries #6534
  - Save Always on Top setting #6236
  - Password generator can exclude additional lookalike
    characters (6/G, 8/B) #6196
  - Fixed
  - Allow setting MSI properties in unattended install #6196
  - Update MainWindow minimum size to enable smaller verticle
    space #6196
  - Use application font size when setting default or monospace
    fonts #6332
  - Fix notes not clearing in entry preview panel in some cases
    [#6481]
  - macOS: Correct window activation when restoring from tray
    [#6575]
  - macOS: Better handling of minimize after unlock when using
    browser integration #6338
  - Linux: Start after the system tray is available on LXQt #6216
  - Linux: Allow selection of modal dialogs on X11 in Auto-Type
    [#6204]
  - KeeShare: prevent crash when file extension is missing #6174</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1623931201">- newer version of fedora now have the sane cmake macros too.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1634126400">- add https://patch-diff.githubusercontent.com/raw/keepassxreboot/keepassxc/pull/7045.patch
  and adapt it for 2.6.6: This allows us building with LTO</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1648123200">- Update to 2.7.0
  - Major Additions
  - Implement KDBX 4.1 [#7114]
  - Add direct write save option for cloud storage and GVFS
    [#6594]
  - Prevent screen capture on Windows and macOS [#6030]
  - Support quick unlock using Windows Hello [#7384]
  - Support quick unlock using Apple Watch [#5526]
  - Allow specifying database backup paths [#7035]
  - Add tag functionality [#6487][#7436][#7446]
  - Add password rating column to entry view [#4797]
  - Add group clone action [#6124]
  - Show modifications between entry history items [#6789]
  - Ability to bulk-delete and purge unused custom icons [#5970]
  - Support adding custom passphrase wordlists [#6799]
  - Support passphrase wordlists in numbered and PGP-signed
    formats [#6791]
  - Implement support for hardware keys via wireless NFC [#6895]
  - SSH Agent: Add support for OpenSSH 8.2 FIDO/U2F keys [#6371]
  - CLI: Implement attachment handling [#5538]
  - CLI: Add support for okon in offline HIBP checks [#5478]
  - CLI: Implement search command and remove locate [#6805]
  - CLI: Add db statistic output to db-info command [#7032]
  - CLI: Add -i/--include option to generate command. [#7112]
  - CLI: Add a -n (--notes) option to add and edit commands
    [#4646]
  - CLI: Add keyfile option to import command [#5402]
  - CLI: Adding a best option to clip to copy a password of the
    best match [#4489]
  - Browser: Add Microsoft Edge support on Linux [#7100]
  - Browser: Support native password generator from the extension
    [#6529]
  - Browser: Add group settings [#4180]
  - Browser: Add feature to ignore entries for HTTP-Auth Logins
    [#5394]
  - Browser: Support triggering Auto-Type from browser extension
    [#6272]
  - Browser: Add delete-entry command to API [#6899]
  - Browser: Add search 'by-path' url to API [#5535]
  - Browser: search for entries by UUID to API [#4763]
  - Browser: Support auto-download of favicon on entry addition
    [#7179]
  - Auto-Type: Major improvements to Auto-Type
    [#5864][#7463][#7435][#7391][#7129][#6400][#6364][#6361][#5283][#7507]
  - Auto-Type: Fix typing to virtual machines on Windows [#7366]
  - Auto-Type: Re-implement X11 keysym emulation [#7098]
  - Auto-Type: Support multiple Xkb layouts [#6247]
  - Auto-Type: Abort keystroke if modifiers held on X11
    [#6351][#6357]
  - Auto-Type: Add TOTP option to entry level Auto-Type menu
    [#6675]
  - FdoSecrets: Major Refactor and Code Consolidation
    [#5747][#5660][#7043][#6915]
  - FdoSecrets: Implement unlock before search [#6943]
  - Reports: Add browser statistics report [#7197]
  - Major Changes
  - Port crypto backend to Botan [#6209]
  - Improve attachment handling and security
    [#6606][#5034][#7083]
  - Allow selecting any open database in unlock dialog [#5427]
  - KeeShare: Remove checking signed container and QuaZip
    dependency [#7223]
  - Introduce security option to enable copy on double click
    (default off) [#6433]
  - Add 'delete entry without confirm' functionality [#5812]
  - Improve macOS and Windows platform integration [#5851]
  - Lock only the current database by default [#6652]
  - Show expired entries on DB unlock [#7290]
  - Update D-Bus adaptor interface class name to match definition
    file [#7523]
  - Other Changes and Fixes
  - Add countdown progress bar to TOTP preview [#6930]
  - Enter favicon url directly on icons page [#6614]
  - Set C++17 as standard in the build system [#7180]
  - Internalize ykcore into code base [#6654]
  - Transition to Visual Studio builds on Windows [#5874]
  - Ability to delete entries from health check reports [#6537]
  - Enhance remembering last-used directories [#6711]
  - Implement org.freedesktop.appearance.color-scheme support on
    Linux [#7422]
  - Support sorting HTML export [#7011]
  - Add display number of characters in passphrases [#5449]
  - Use Alt+Tab on macOS to switch between databases [#5407]
  - Add feature to sort groups using shortcut keys [#6999]
  - Add CTRL+Enter to apply password generator changes [#6414]
  - Display Database created timestamp on statistics report
    [#6876]
  - Browser: Improve best matching credentials setting [#6893]
  - SSH Agent: Use both Pageant and OpenSSH agent simultaneously
    on Windows [#6288]
  - SSH Agent: Allow using database path to resolve keys [#6365]
  - SSH Agent: Show correct error messages in main window [#7166]
  - Multiple fixes for MSI installer [#6630]
  - Fix tab order for CSV import dialog to match screen order
    [#7315]
  - Don't mark kdbx:// urls as invalid [#7221]
  - Make selected text copyable instead of copying password
    [#7209]
  - Detect timestamp resolution for CSV files [#7196]
  - Fix crash while downloading favicon [#7104]
  - Correct naming of newly generated keyx files [#7010]
  - Place the 'Recycle Bin' at the bottom of the list when groups
    are sorted [#7004]
  - Handle tilde with custom browser paths [#6659]
  - Don't scroll up when deleting an entry [#6833]
  - Set the MIME-Type to text/plain when using wl-copy on wayland
    [#6832]
  - Fix adaptive icon painting [#5989][#6033]
  - Fix favicon download from URL with non-standard port [#5509]
  - Ignore recycle bin on KeePassHTTP migration [#5481]
  - Fix keepassxc-cr-recovery utility [#7521]
  - Fix Auto-Type not working when audio recording indicator is
    active on macOS 12.2+ [#7526]
- drop 7045.patch
- adapt build requires to the new version</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1649505600">- update to 2.7.1:
  * Show when tags are changed in entry history
  * Improve tags editing and allow spaces in tags
  * Improve layout of entry preview panel
  * Incorporate patches to support Flatpak distribution
  * Add expiration presets for 12 and 24 hours
  * Fix crash when building history change list
  * Fix hiding password on database unlock
  * Fix AES KDF slow transform speed
  * Auto-Type: Correct timing issue on macOS and Linux that prevented typing
  * Auto-Type: Fix use of Ctrl/Alt/Shift/Win modifiers on Windows
  * Auto-Type: Reduce/eliminate delay when searching for entries
  * Auto-Type: Map ASCII dead keys on Linux for international keyboards
  * CLI: Fix detection of hardware keys (YubiKey)
  * CLI: Add missing parameter -c to add/edit entries command
  * Secret Service: Fix crash when multiple prompts are shown
  * SSH Agent: Fix default agent selection on Windows
  * Fix database unlock dialog not being the top window on Linux
  * Fix drag/drop entries between tabs on Wayland
  * Fix compiling with minizip-ng</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1666612800">- update to 2.7.3:
  Due to a bug in macOS window behavior, 2.7.2 has been immediately
  superseded by 2.7.3.
  - Changes
  - Enhance Tags Support and Add Saved Searches [#8435, #8607]
  - Significant improvements to entry preview panel [#7993]
  - Add password strength indicator to all password fields [#7885]
  - Limit zxcvbn entropy estimation length to 128 characters [#7748]
  - Try full URL path when fetching favicon [#8565]
  - Hide usernames in preview panel when hidden in entry view [#8608]
  - Enable dark title bar on windows when accent color is not used [#8498]
  - Add option to display passwords in color in preview panel [#7097]
  - Add XML Export option to GUI [#8524]
  - Increase entropy required for a "good" password rating to 75 [#8523]
  - Add shortcut to copy password with TOTP appended [#8443]
  - Show entry count in status bar [#8435]
  - Allow KeePassXC to be built without X11 [#8147]
  - Enable use of VivoKey Apex and Dangerous Things FlexSecure tokens [#8332]
  - Add setting for number of recent files [#8239]
  - Add Ctrl+Tab shortcut to cycle databases in unlock dialog [#8168]
  - Replace offensive words in eff_large.wordlist [#7968]
  - Auto-Type: PICKCHARS can specify attribute and ignore BEEP [#8118]
  - Linux: Add isHardwareKeySupported and refreshHardwareKeys to DBus methods [#8055]
  - Add config variable to specify default database file name [#8042]
  - Support numeric aware sorting on Windows and macOS [#8363]
  - CLI: Add db-edit command [#8400]
  - CLI: Add option to display all attributes with show command [#8256]
  - CLI: Show UUID and tags with show and clip commands [#8241]
  - Browser: Move socket into separate directory on Linux [#8030]
  - Browser: Add group setting to omit WWW subdomain when matching URLs [#7988]
  - FdoSecrets: Ask to unlock the database when creating items [#8022, #8028]
  - FdoSecrets: Skip entries in recycle bin when searching [#8021]
  - Fixes
  - Fix potential deadlock in UI when saving [#8606]
  - Fix newlines when copying notes from preview panel [#8542]
  - Fix dark mode detection on Linux [#8477]
  - Fix crash when deleting items in recycle bin while searching [#8117]
  - Fix crash when trying to close database during unlock [#8144]
  - Fix tabbing around the interface [#8435, #8520]
  - Fix OPVault import when there are multiple OTP fields [#8436]
  - Fix various Windows Hello bugs [#8354]
  - Fix use of Apple Watch for Quick Unlock [#8311]
  - Better handling of "Lock on Minimize" setting [#8202]
  - Check for write permission before entering portable mode [#8447]
  - Correct regex escape logic to prevent parse errors [#7778]
  - Normalize slashes and file case for last used databases [#7864, #7214]
  - Link ykcore against pthread [#7807]
  - Auto-Type: Fix menu entries in selection dialog on Windows [#7987]
  - Auto-Type: Fix use of modifiers under macOS [#8111]
  - CLI: Fix output when using clip with the -t flag [#8271]
  - Browser: Use asynchronous access confirm dialog [#8273]
  - Browser: Always send database locked/unlocked status [#8114]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1667217600">- update to 2.7.4:
  - Changes
  - Add 2 months expiration preset [#8687]
  - CLI: Add Unicode support on Windows [#8618]
  - Fixes
  - Fix crash on macOS when unlocking database [#8676]
  - Fix display of passwords in preview panel [#8633]
  - Fix clicking links in entry preview panel [#8644]
  - Prevent expired entries search if no results returned [#8643]
  - Browser: Revert code causing connection problems [#8665]
  - Browser: Fix socket file symbolic link on Linux [#8656]
  - Flatpak: Fix launching browser proxy service [#8680]
  - SSH Agent: Fix paegent support on Windows [#8619]</changelog>
</package>
<package pkgid="e73f3c4fb42d3cc758cd02fb5875c79876f9165e7b90489ae28356ba9e58a688" name="kio_iso" arch="aarch64">
  <version epoch="0" ver="2.7.2" rel="bp154.3.3.1"/>
  <changelog author="baiduzhyi.devel@gmail.com" date="1427284800">- Require libktexteditor instead of kate to solve installation conflicts
  when using KF5.</changelog>
  <changelog author="tchvatal@suse.com" date="1432641600">- Only suggest documentation, do not recommend it.</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1477224000">- Update to 2.5.0
  * Added actions: Select files with the same name / extension
  * Changed disabled build of synchronizer by default, since it
    is unmaintained - build togglable with cmake variable
  - DENABLE_SYNCHRONIZER=true|false
  * Fixed (kde#143927) file search: "s" accelerator is doubled -
    new shortcut for "Search in" is ALT+h
  * Fixed (kde#308386) Duplicate shortcut on Search window -
    new shortcut for "Remote content search" is ALT+n
  * Fixed (kde#206926) Search doesn't work in sftp session
    (it returns too many results)
  * Fixed (kde#269542) Krusader search - Containing text
    still used when disabled
  * Fixed (kde#324737) symlinks with a target path length
    of over 255 do not work
  * Fixed (kde#189943) toolbar position settings are not remembered
  * Fixed (kde#316031) crash when loading previews
  * Fixed (kde#238672) When saving checksums fails,
    they are lost. No 2nd chance to save elsewhere.
  * Fixed (kde#315764) "application/x-source-rpm" isn't linked
    to krarc protocol by default
  * Fixed (kde#294816) Krusader needs to restart to apply
    new color scheme to panel
  * Fixed (kde#308727) external editor command isn't properly parsed
  * Fixed (kde#304233) empty main view on startup
  * Fixed (kde#315856) main view splitter sizes are not restored
  * Fixed (kde#248691) incorrect layout / wrong buttons
    in queue manager
  * Fixed (kde#315357) krarc silently fails to display
    contents of some zip files containing paths with "." as a
    path component are still not handled, but now krarc reports an
    error instead silently failing
  * Fixed (kde#310722) viewer crash when opening file
  * Fixed search result view always displays owner and group as "root"
    (may not work for remote search)
  * Fixed (kde#217711) directory chooser dialog does not allow
    to choose a directory
  * Fixed (kde#309119) Wrong "New directory" dialog behavior:
    can't clear all typed text
  * Fixed (kde#309159) Crash in video files preview on F3
  * Fixed (kde#310191) krusader still installs locolor icons
  * Fixed (kde#317510 ] icon-size-and-directory-name-mismatch
- Package ported to KF5, changed all the BuildRequires to KF5 ones
- Swap krusader-2.4.0-beta2-generate-manpage.patch for
  krusader-2.5.0-generate-manpage.patch
- Drop upstreamed bug309159.patch
- Added 0001-Don-t-hardcode-appdata-location.patch</changelog>
  <changelog author="wbauer@tmo.at" date="1479729600">- Add Remove-non-archive-mimetypes-from-krarc-archive-mime-type-list.patch
  to fix dolphin opening e.g. LibreOffice files as archives
  (boo#1011320, kde#371765)</changelog>
  <changelog author="wbauer@tmo.at" date="1482408000">- Add add-service-actions-to-right-click-popup-menu.patch to add
  KDE's service actions to the right click popup menu in krusader
  again (boo#1016980, kde#372231)</changelog>
  <changelog author="wbauer@tmo.at" date="1483617600">- Add Handle-arrow-key-press-in-brief-view.patch to fix the
  behavior when pressing the left/right cursor keys in brief view
  (boo#1017533, kde#374238)</changelog>
  <changelog author="wbauer@tmo.at" date="1491912000">- Update to 2.6.0
  * FIXED: (kde#335993) save checksum does not work as expected
  * FIXED: (kde#375639) Allow typing special characters (e.g. with
    accent or acute) in search bar
  * FIXED: (kde#328068) Send SIGINT before own input command to
    embedded terminal
  * FIXED: (kde#375135) segfault on viewing html files with Generic
    viewer
  * FIXED: (kde#269820) Fullscreen terminal emulator shows empty
    window when terminal emulator was minimized
  * FIXED: (kde#374813) Multi rename with KRename does not work
    when selecting non-local files/folders (ftp, smb, virt, ...)
  * FIXED: (kde#309300) Esc as the default shortcut of "Set Focus
    to The Panel" is problematic for the embedded terminal
  * FIXED: (kde#374175) wrong date format parsing using date filter
    in search dialog
  * FIXED: (kde#293370) After a file deletion old file name is
    still shown in the status bar
  * FIXED: (kde#374322) Visually indicated shortcut ALT+o not
    working in copy/F5 and move/F6 KrDialog
  * FIXED: (kde#374238) Handle left/right arrow key press in brief
    view (previously filtered by search bar).
  * FIXED: when dragged from list panel use correct drop action if
    invoked with modifier keys
  * FIXED: added save/restore or toolbar positions in mainwindow
  * FIXED: (kde#372231) Added KDE's service actions again to
    right-click popup menu
  * ADDED: new undo action to job manager for undoing KIO job
    operations
  * FIXED: (kde#372067) Wrong path when showing non local files and
    folders from search dialog in panel
  * ADDED: job manager as replacement for queue manager. Part of
    cleaning VFS
  * FIXED: (kde#365105) Workaround for bug in KF5+QSystemTrayIcon
  * ADDED: Reimplementation of "minimize to system tray" feature.
  * FIXED: Krusader does not show the new file in a directory that
    is a symbolic link until is not refresh directory
  * FIXED: Wrong window position after restart in fluxbox
  * FIXED: Error on opening file folder after clicking on any file
    result of a remote search (FTP / smb)
  * FIXED: Terminal opens in full window
  * FIXED: copy location/path bar (feature request)
  * FIXED: krusader cannot calculate size of remote directory (ftp
    or sftp)
  * FIXED: Some files with weird characters (non UTF) cause krusader
    to miscalculate folder size
  * FIXED: No way to focus fullscreen embedded terminal emulator.
  * FIXED: Don't delete first letter in "new folder" dialog (F7)
  * FIXED: Use Shift+Delete for delete or move selected files to
    trash
  * FIXED: Dialog "File" -&gt; "Verify checksum" improvement
  * FIXED: Option for show copy/move progress in dialog (not in
    notifications)
  * FIXED: Documents suddenly open as archives
  * CHANGED: Avoiding root mode
  * CHANGED: Duplicated tab should not be locked
  * CHANGED: New PagePanel: do not refresh until panel becomes
    visible
  * CHANGED: Change suggested command for "edit as root" user
    action to a more secure alternative
  * CHANGED: Do not configure kdesu path and remove kdesudo support
    again
  * CHANGED: Panel: Do not select .. in a filtered view if there
    are other entries
  * CHANGED: Duplicate tab settings when duplicating tabs
  * CHANGED: Some fixes and simpifying startup settings.
- Drop upstream patches:
  * krusader-2.5.0-generate-manpage.patch
  * 0001-Don-t-hardcode-appdata-location.patch
  * Remove-non-archive-mimetypes-from-krarc-archive-mime-type-list.patch
  * add-service-actions-to-right-click-popup-menu.patch
  * Handle-arrow-key-press-in-brief-view.patch</changelog>
  <changelog author="wbauer@tmo.at" date="1494158400">- Add fix-build-with-gcc48.patch to fix build on Leap 42</changelog>
  <changelog author="wbauer@tmo.at" date="1494849600">- Add org.kde.krusader.root-mode.desktop, it got removed in 2.6.0</changelog>
  <changelog author="wbauer@tmo.at" date="1515758400">- Add Panel-fixed-actions-in-PanelContextMenu-ignored.patch to fix
  the "Create New" context menu not working when the '..' entry is
  selected (boo#1075690, kde#383544)</changelog>
  <changelog author="wbauer@tmo.at" date="1526299200">- Update to 2.7.0
  * New feature: Quick Search in Bookmark menu
  * New feature: Tab pinning
  * New feature: Tooltip with file information when you hover a
    file name
  * New feature: Extended options for Tree Panel
  * New feature: Debug output option
  * Improved icon theme handling
  * Fixed 40+ issues including some regressions
- Drop patches merged upstream:
  * fix-build-with-gcc48.patch
  * Panel-fixed-actions-in-PanelContextMenu-ignored.patch
- Mark license file as %license instead of %doc
- Adjust file lists</changelog>
  <changelog author="wbauer@tmo.at" date="1534075200">- Update to 2.7.1
  * ADDED: Default shortcut for quick selection mode = Ctrl+Shift+S
  * FIXED: When calculating occupied space of ".." , krusader
    selects all directories (kde#150247)
  * FIXED: Bad default in the New Text File dialog (kde#282069)
  * FIXED: ISO files listing/extracting broken (kde#372023)
  * FIXED: Details section is empty in 'Do not know which files to
    compare.' window (kde#383567)
  * FIXED: Default mode in 'Find in folder' is not preserved
    (kde#391946)
  * FIXED: Files fed to listbox (and all other files in virt://)
    cannot be deleted (kde#394896)
  * FIXED: Enter key not working when cursor in search bar
    (kde#394939)
  * FIXED: The quicksearch bar is still opened after deleting a
    file (kde#395285)
  * FIXED: In the Manage User Actions dialog: the tab order is not
    the expected one (kde#396652)</changelog>
  <changelog author="wbauer@tmo.at" date="1552392000">- Add Prefer-to-find-oktetapart-by-desktop-file.patch to make it
  compatible with the upcoming okteta 0.26 release</changelog>
  <changelog author="wbauer@tmo.at" date="1566820800">- Update to 2.7.2
  * FIXED: Memory leak in the Locate dialog
  * FIXED: UDSEntry::insert deprecation warnings
  * FIXED: synchronize directory window: column widths
    are incorrect (kde#167410)
  * FIXED: Context menu item "copy selected to clipboard" copies
    all result items (kde#328918)
  * FIXED: "Information - Krusader" dialog does not fit to screen
    width; text non-copyable (kde#330788)
  * FIXED: After trying to rename the file that's being updated,
    rename function stops working on any file on this tab
    (kde#392750)
  * FIXED: New Text File is created with 600 (-rw-------)
    permissions (kde#395609)
  * FIXED: Misleading ?Created? date in file properties
    (kde#397398)
  * FIXED: Compilation error because of QOverload usage
    (kde#405212)
  * FIXED: The list of search results doesn't get the focus
    (kde#410118)
  * FIXED: Krusader does not search correctly if the "Follow links"
    checkbox is disabled (kde#410120)
  * FIXED: Okteta support for versions &gt;= 0.26 (due to oktetapart
    file layout change)
- Drop Prefer-to-find-oktetapart-by-desktop-file.patch, merged
  upstream
- Don't add -fpermissive to compiler options, no longer necessary
- Run spec-cleaner</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1598529600">- Spec cleanup</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1656504000">- Add patch to fix the 'Compress' menu (boo#1198725, boo#1203225, kde#441376)
  * 0001-Fixed-non-working-actions-for-create-extract-archive.patch</changelog>
</package>
<package pkgid="36e4ebeac35bcf2d99900787f66894fa09bb65114fd99bc8615a4c1adb07cf1a" name="kio_iso" arch="ppc64le">
  <version epoch="0" ver="2.7.2" rel="bp154.3.3.1"/>
  <changelog author="baiduzhyi.devel@gmail.com" date="1427284800">- Require libktexteditor instead of kate to solve installation conflicts
  when using KF5.</changelog>
  <changelog author="tchvatal@suse.com" date="1432641600">- Only suggest documentation, do not recommend it.</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1477224000">- Update to 2.5.0
  * Added actions: Select files with the same name / extension
  * Changed disabled build of synchronizer by default, since it
    is unmaintained - build togglable with cmake variable
  - DENABLE_SYNCHRONIZER=true|false
  * Fixed (kde#143927) file search: "s" accelerator is doubled -
    new shortcut for "Search in" is ALT+h
  * Fixed (kde#308386) Duplicate shortcut on Search window -
    new shortcut for "Remote content search" is ALT+n
  * Fixed (kde#206926) Search doesn't work in sftp session
    (it returns too many results)
  * Fixed (kde#269542) Krusader search - Containing text
    still used when disabled
  * Fixed (kde#324737) symlinks with a target path length
    of over 255 do not work
  * Fixed (kde#189943) toolbar position settings are not remembered
  * Fixed (kde#316031) crash when loading previews
  * Fixed (kde#238672) When saving checksums fails,
    they are lost. No 2nd chance to save elsewhere.
  * Fixed (kde#315764) "application/x-source-rpm" isn't linked
    to krarc protocol by default
  * Fixed (kde#294816) Krusader needs to restart to apply
    new color scheme to panel
  * Fixed (kde#308727) external editor command isn't properly parsed
  * Fixed (kde#304233) empty main view on startup
  * Fixed (kde#315856) main view splitter sizes are not restored
  * Fixed (kde#248691) incorrect layout / wrong buttons
    in queue manager
  * Fixed (kde#315357) krarc silently fails to display
    contents of some zip files containing paths with "." as a
    path component are still not handled, but now krarc reports an
    error instead silently failing
  * Fixed (kde#310722) viewer crash when opening file
  * Fixed search result view always displays owner and group as "root"
    (may not work for remote search)
  * Fixed (kde#217711) directory chooser dialog does not allow
    to choose a directory
  * Fixed (kde#309119) Wrong "New directory" dialog behavior:
    can't clear all typed text
  * Fixed (kde#309159) Crash in video files preview on F3
  * Fixed (kde#310191) krusader still installs locolor icons
  * Fixed (kde#317510 ] icon-size-and-directory-name-mismatch
- Package ported to KF5, changed all the BuildRequires to KF5 ones
- Swap krusader-2.4.0-beta2-generate-manpage.patch for
  krusader-2.5.0-generate-manpage.patch
- Drop upstreamed bug309159.patch
- Added 0001-Don-t-hardcode-appdata-location.patch</changelog>
  <changelog author="wbauer@tmo.at" date="1479729600">- Add Remove-non-archive-mimetypes-from-krarc-archive-mime-type-list.patch
  to fix dolphin opening e.g. LibreOffice files as archives
  (boo#1011320, kde#371765)</changelog>
  <changelog author="wbauer@tmo.at" date="1482408000">- Add add-service-actions-to-right-click-popup-menu.patch to add
  KDE's service actions to the right click popup menu in krusader
  again (boo#1016980, kde#372231)</changelog>
  <changelog author="wbauer@tmo.at" date="1483617600">- Add Handle-arrow-key-press-in-brief-view.patch to fix the
  behavior when pressing the left/right cursor keys in brief view
  (boo#1017533, kde#374238)</changelog>
  <changelog author="wbauer@tmo.at" date="1491912000">- Update to 2.6.0
  * FIXED: (kde#335993) save checksum does not work as expected
  * FIXED: (kde#375639) Allow typing special characters (e.g. with
    accent or acute) in search bar
  * FIXED: (kde#328068) Send SIGINT before own input command to
    embedded terminal
  * FIXED: (kde#375135) segfault on viewing html files with Generic
    viewer
  * FIXED: (kde#269820) Fullscreen terminal emulator shows empty
    window when terminal emulator was minimized
  * FIXED: (kde#374813) Multi rename with KRename does not work
    when selecting non-local files/folders (ftp, smb, virt, ...)
  * FIXED: (kde#309300) Esc as the default shortcut of "Set Focus
    to The Panel" is problematic for the embedded terminal
  * FIXED: (kde#374175) wrong date format parsing using date filter
    in search dialog
  * FIXED: (kde#293370) After a file deletion old file name is
    still shown in the status bar
  * FIXED: (kde#374322) Visually indicated shortcut ALT+o not
    working in copy/F5 and move/F6 KrDialog
  * FIXED: (kde#374238) Handle left/right arrow key press in brief
    view (previously filtered by search bar).
  * FIXED: when dragged from list panel use correct drop action if
    invoked with modifier keys
  * FIXED: added save/restore or toolbar positions in mainwindow
  * FIXED: (kde#372231) Added KDE's service actions again to
    right-click popup menu
  * ADDED: new undo action to job manager for undoing KIO job
    operations
  * FIXED: (kde#372067) Wrong path when showing non local files and
    folders from search dialog in panel
  * ADDED: job manager as replacement for queue manager. Part of
    cleaning VFS
  * FIXED: (kde#365105) Workaround for bug in KF5+QSystemTrayIcon
  * ADDED: Reimplementation of "minimize to system tray" feature.
  * FIXED: Krusader does not show the new file in a directory that
    is a symbolic link until is not refresh directory
  * FIXED: Wrong window position after restart in fluxbox
  * FIXED: Error on opening file folder after clicking on any file
    result of a remote search (FTP / smb)
  * FIXED: Terminal opens in full window
  * FIXED: copy location/path bar (feature request)
  * FIXED: krusader cannot calculate size of remote directory (ftp
    or sftp)
  * FIXED: Some files with weird characters (non UTF) cause krusader
    to miscalculate folder size
  * FIXED: No way to focus fullscreen embedded terminal emulator.
  * FIXED: Don't delete first letter in "new folder" dialog (F7)
  * FIXED: Use Shift+Delete for delete or move selected files to
    trash
  * FIXED: Dialog "File" -&gt; "Verify checksum" improvement
  * FIXED: Option for show copy/move progress in dialog (not in
    notifications)
  * FIXED: Documents suddenly open as archives
  * CHANGED: Avoiding root mode
  * CHANGED: Duplicated tab should not be locked
  * CHANGED: New PagePanel: do not refresh until panel becomes
    visible
  * CHANGED: Change suggested command for "edit as root" user
    action to a more secure alternative
  * CHANGED: Do not configure kdesu path and remove kdesudo support
    again
  * CHANGED: Panel: Do not select .. in a filtered view if there
    are other entries
  * CHANGED: Duplicate tab settings when duplicating tabs
  * CHANGED: Some fixes and simpifying startup settings.
- Drop upstream patches:
  * krusader-2.5.0-generate-manpage.patch
  * 0001-Don-t-hardcode-appdata-location.patch
  * Remove-non-archive-mimetypes-from-krarc-archive-mime-type-list.patch
  * add-service-actions-to-right-click-popup-menu.patch
  * Handle-arrow-key-press-in-brief-view.patch</changelog>
  <changelog author="wbauer@tmo.at" date="1494158400">- Add fix-build-with-gcc48.patch to fix build on Leap 42</changelog>
  <changelog author="wbauer@tmo.at" date="1494849600">- Add org.kde.krusader.root-mode.desktop, it got removed in 2.6.0</changelog>
  <changelog author="wbauer@tmo.at" date="1515758400">- Add Panel-fixed-actions-in-PanelContextMenu-ignored.patch to fix
  the "Create New" context menu not working when the '..' entry is
  selected (boo#1075690, kde#383544)</changelog>
  <changelog author="wbauer@tmo.at" date="1526299200">- Update to 2.7.0
  * New feature: Quick Search in Bookmark menu
  * New feature: Tab pinning
  * New feature: Tooltip with file information when you hover a
    file name
  * New feature: Extended options for Tree Panel
  * New feature: Debug output option
  * Improved icon theme handling
  * Fixed 40+ issues including some regressions
- Drop patches merged upstream:
  * fix-build-with-gcc48.patch
  * Panel-fixed-actions-in-PanelContextMenu-ignored.patch
- Mark license file as %license instead of %doc
- Adjust file lists</changelog>
  <changelog author="wbauer@tmo.at" date="1534075200">- Update to 2.7.1
  * ADDED: Default shortcut for quick selection mode = Ctrl+Shift+S
  * FIXED: When calculating occupied space of ".." , krusader
    selects all directories (kde#150247)
  * FIXED: Bad default in the New Text File dialog (kde#282069)
  * FIXED: ISO files listing/extracting broken (kde#372023)
  * FIXED: Details section is empty in 'Do not know which files to
    compare.' window (kde#383567)
  * FIXED: Default mode in 'Find in folder' is not preserved
    (kde#391946)
  * FIXED: Files fed to listbox (and all other files in virt://)
    cannot be deleted (kde#394896)
  * FIXED: Enter key not working when cursor in search bar
    (kde#394939)
  * FIXED: The quicksearch bar is still opened after deleting a
    file (kde#395285)
  * FIXED: In the Manage User Actions dialog: the tab order is not
    the expected one (kde#396652)</changelog>
  <changelog author="wbauer@tmo.at" date="1552392000">- Add Prefer-to-find-oktetapart-by-desktop-file.patch to make it
  compatible with the upcoming okteta 0.26 release</changelog>
  <changelog author="wbauer@tmo.at" date="1566820800">- Update to 2.7.2
  * FIXED: Memory leak in the Locate dialog
  * FIXED: UDSEntry::insert deprecation warnings
  * FIXED: synchronize directory window: column widths
    are incorrect (kde#167410)
  * FIXED: Context menu item "copy selected to clipboard" copies
    all result items (kde#328918)
  * FIXED: "Information - Krusader" dialog does not fit to screen
    width; text non-copyable (kde#330788)
  * FIXED: After trying to rename the file that's being updated,
    rename function stops working on any file on this tab
    (kde#392750)
  * FIXED: New Text File is created with 600 (-rw-------)
    permissions (kde#395609)
  * FIXED: Misleading ?Created? date in file properties
    (kde#397398)
  * FIXED: Compilation error because of QOverload usage
    (kde#405212)
  * FIXED: The list of search results doesn't get the focus
    (kde#410118)
  * FIXED: Krusader does not search correctly if the "Follow links"
    checkbox is disabled (kde#410120)
  * FIXED: Okteta support for versions &gt;= 0.26 (due to oktetapart
    file layout change)
- Drop Prefer-to-find-oktetapart-by-desktop-file.patch, merged
  upstream
- Don't add -fpermissive to compiler options, no longer necessary
- Run spec-cleaner</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1598529600">- Spec cleanup</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1656504000">- Add patch to fix the 'Compress' menu (boo#1198725, boo#1203225, kde#441376)
  * 0001-Fixed-non-working-actions-for-create-extract-archive.patch</changelog>
</package>
<package pkgid="afa451f7363801bd05ecefd8f7c266b6f9d9d45d9dbd8242eb65ac81f695a0b5" name="kio_iso" arch="s390x">
  <version epoch="0" ver="2.7.2" rel="bp154.3.3.1"/>
  <changelog author="baiduzhyi.devel@gmail.com" date="1427284800">- Require libktexteditor instead of kate to solve installation conflicts
  when using KF5.</changelog>
  <changelog author="tchvatal@suse.com" date="1432641600">- Only suggest documentation, do not recommend it.</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1477224000">- Update to 2.5.0
  * Added actions: Select files with the same name / extension
  * Changed disabled build of synchronizer by default, since it
    is unmaintained - build togglable with cmake variable
  - DENABLE_SYNCHRONIZER=true|false
  * Fixed (kde#143927) file search: "s" accelerator is doubled -
    new shortcut for "Search in" is ALT+h
  * Fixed (kde#308386) Duplicate shortcut on Search window -
    new shortcut for "Remote content search" is ALT+n
  * Fixed (kde#206926) Search doesn't work in sftp session
    (it returns too many results)
  * Fixed (kde#269542) Krusader search - Containing text
    still used when disabled
  * Fixed (kde#324737) symlinks with a target path length
    of over 255 do not work
  * Fixed (kde#189943) toolbar position settings are not remembered
  * Fixed (kde#316031) crash when loading previews
  * Fixed (kde#238672) When saving checksums fails,
    they are lost. No 2nd chance to save elsewhere.
  * Fixed (kde#315764) "application/x-source-rpm" isn't linked
    to krarc protocol by default
  * Fixed (kde#294816) Krusader needs to restart to apply
    new color scheme to panel
  * Fixed (kde#308727) external editor command isn't properly parsed
  * Fixed (kde#304233) empty main view on startup
  * Fixed (kde#315856) main view splitter sizes are not restored
  * Fixed (kde#248691) incorrect layout / wrong buttons
    in queue manager
  * Fixed (kde#315357) krarc silently fails to display
    contents of some zip files containing paths with "." as a
    path component are still not handled, but now krarc reports an
    error instead silently failing
  * Fixed (kde#310722) viewer crash when opening file
  * Fixed search result view always displays owner and group as "root"
    (may not work for remote search)
  * Fixed (kde#217711) directory chooser dialog does not allow
    to choose a directory
  * Fixed (kde#309119) Wrong "New directory" dialog behavior:
    can't clear all typed text
  * Fixed (kde#309159) Crash in video files preview on F3
  * Fixed (kde#310191) krusader still installs locolor icons
  * Fixed (kde#317510 ] icon-size-and-directory-name-mismatch
- Package ported to KF5, changed all the BuildRequires to KF5 ones
- Swap krusader-2.4.0-beta2-generate-manpage.patch for
  krusader-2.5.0-generate-manpage.patch
- Drop upstreamed bug309159.patch
- Added 0001-Don-t-hardcode-appdata-location.patch</changelog>
  <changelog author="wbauer@tmo.at" date="1479729600">- Add Remove-non-archive-mimetypes-from-krarc-archive-mime-type-list.patch
  to fix dolphin opening e.g. LibreOffice files as archives
  (boo#1011320, kde#371765)</changelog>
  <changelog author="wbauer@tmo.at" date="1482408000">- Add add-service-actions-to-right-click-popup-menu.patch to add
  KDE's service actions to the right click popup menu in krusader
  again (boo#1016980, kde#372231)</changelog>
  <changelog author="wbauer@tmo.at" date="1483617600">- Add Handle-arrow-key-press-in-brief-view.patch to fix the
  behavior when pressing the left/right cursor keys in brief view
  (boo#1017533, kde#374238)</changelog>
  <changelog author="wbauer@tmo.at" date="1491912000">- Update to 2.6.0
  * FIXED: (kde#335993) save checksum does not work as expected
  * FIXED: (kde#375639) Allow typing special characters (e.g. with
    accent or acute) in search bar
  * FIXED: (kde#328068) Send SIGINT before own input command to
    embedded terminal
  * FIXED: (kde#375135) segfault on viewing html files with Generic
    viewer
  * FIXED: (kde#269820) Fullscreen terminal emulator shows empty
    window when terminal emulator was minimized
  * FIXED: (kde#374813) Multi rename with KRename does not work
    when selecting non-local files/folders (ftp, smb, virt, ...)
  * FIXED: (kde#309300) Esc as the default shortcut of "Set Focus
    to The Panel" is problematic for the embedded terminal
  * FIXED: (kde#374175) wrong date format parsing using date filter
    in search dialog
  * FIXED: (kde#293370) After a file deletion old file name is
    still shown in the status bar
  * FIXED: (kde#374322) Visually indicated shortcut ALT+o not
    working in copy/F5 and move/F6 KrDialog
  * FIXED: (kde#374238) Handle left/right arrow key press in brief
    view (previously filtered by search bar).
  * FIXED: when dragged from list panel use correct drop action if
    invoked with modifier keys
  * FIXED: added save/restore or toolbar positions in mainwindow
  * FIXED: (kde#372231) Added KDE's service actions again to
    right-click popup menu
  * ADDED: new undo action to job manager for undoing KIO job
    operations
  * FIXED: (kde#372067) Wrong path when showing non local files and
    folders from search dialog in panel
  * ADDED: job manager as replacement for queue manager. Part of
    cleaning VFS
  * FIXED: (kde#365105) Workaround for bug in KF5+QSystemTrayIcon
  * ADDED: Reimplementation of "minimize to system tray" feature.
  * FIXED: Krusader does not show the new file in a directory that
    is a symbolic link until is not refresh directory
  * FIXED: Wrong window position after restart in fluxbox
  * FIXED: Error on opening file folder after clicking on any file
    result of a remote search (FTP / smb)
  * FIXED: Terminal opens in full window
  * FIXED: copy location/path bar (feature request)
  * FIXED: krusader cannot calculate size of remote directory (ftp
    or sftp)
  * FIXED: Some files with weird characters (non UTF) cause krusader
    to miscalculate folder size
  * FIXED: No way to focus fullscreen embedded terminal emulator.
  * FIXED: Don't delete first letter in "new folder" dialog (F7)
  * FIXED: Use Shift+Delete for delete or move selected files to
    trash
  * FIXED: Dialog "File" -&gt; "Verify checksum" improvement
  * FIXED: Option for show copy/move progress in dialog (not in
    notifications)
  * FIXED: Documents suddenly open as archives
  * CHANGED: Avoiding root mode
  * CHANGED: Duplicated tab should not be locked
  * CHANGED: New PagePanel: do not refresh until panel becomes
    visible
  * CHANGED: Change suggested command for "edit as root" user
    action to a more secure alternative
  * CHANGED: Do not configure kdesu path and remove kdesudo support
    again
  * CHANGED: Panel: Do not select .. in a filtered view if there
    are other entries
  * CHANGED: Duplicate tab settings when duplicating tabs
  * CHANGED: Some fixes and simpifying startup settings.
- Drop upstream patches:
  * krusader-2.5.0-generate-manpage.patch
  * 0001-Don-t-hardcode-appdata-location.patch
  * Remove-non-archive-mimetypes-from-krarc-archive-mime-type-list.patch
  * add-service-actions-to-right-click-popup-menu.patch
  * Handle-arrow-key-press-in-brief-view.patch</changelog>
  <changelog author="wbauer@tmo.at" date="1494158400">- Add fix-build-with-gcc48.patch to fix build on Leap 42</changelog>
  <changelog author="wbauer@tmo.at" date="1494849600">- Add org.kde.krusader.root-mode.desktop, it got removed in 2.6.0</changelog>
  <changelog author="wbauer@tmo.at" date="1515758400">- Add Panel-fixed-actions-in-PanelContextMenu-ignored.patch to fix
  the "Create New" context menu not working when the '..' entry is
  selected (boo#1075690, kde#383544)</changelog>
  <changelog author="wbauer@tmo.at" date="1526299200">- Update to 2.7.0
  * New feature: Quick Search in Bookmark menu
  * New feature: Tab pinning
  * New feature: Tooltip with file information when you hover a
    file name
  * New feature: Extended options for Tree Panel
  * New feature: Debug output option
  * Improved icon theme handling
  * Fixed 40+ issues including some regressions
- Drop patches merged upstream:
  * fix-build-with-gcc48.patch
  * Panel-fixed-actions-in-PanelContextMenu-ignored.patch
- Mark license file as %license instead of %doc
- Adjust file lists</changelog>
  <changelog author="wbauer@tmo.at" date="1534075200">- Update to 2.7.1
  * ADDED: Default shortcut for quick selection mode = Ctrl+Shift+S
  * FIXED: When calculating occupied space of ".." , krusader
    selects all directories (kde#150247)
  * FIXED: Bad default in the New Text File dialog (kde#282069)
  * FIXED: ISO files listing/extracting broken (kde#372023)
  * FIXED: Details section is empty in 'Do not know which files to
    compare.' window (kde#383567)
  * FIXED: Default mode in 'Find in folder' is not preserved
    (kde#391946)
  * FIXED: Files fed to listbox (and all other files in virt://)
    cannot be deleted (kde#394896)
  * FIXED: Enter key not working when cursor in search bar
    (kde#394939)
  * FIXED: The quicksearch bar is still opened after deleting a
    file (kde#395285)
  * FIXED: In the Manage User Actions dialog: the tab order is not
    the expected one (kde#396652)</changelog>
  <changelog author="wbauer@tmo.at" date="1552392000">- Add Prefer-to-find-oktetapart-by-desktop-file.patch to make it
  compatible with the upcoming okteta 0.26 release</changelog>
  <changelog author="wbauer@tmo.at" date="1566820800">- Update to 2.7.2
  * FIXED: Memory leak in the Locate dialog
  * FIXED: UDSEntry::insert deprecation warnings
  * FIXED: synchronize directory window: column widths
    are incorrect (kde#167410)
  * FIXED: Context menu item "copy selected to clipboard" copies
    all result items (kde#328918)
  * FIXED: "Information - Krusader" dialog does not fit to screen
    width; text non-copyable (kde#330788)
  * FIXED: After trying to rename the file that's being updated,
    rename function stops working on any file on this tab
    (kde#392750)
  * FIXED: New Text File is created with 600 (-rw-------)
    permissions (kde#395609)
  * FIXED: Misleading ?Created? date in file properties
    (kde#397398)
  * FIXED: Compilation error because of QOverload usage
    (kde#405212)
  * FIXED: The list of search results doesn't get the focus
    (kde#410118)
  * FIXED: Krusader does not search correctly if the "Follow links"
    checkbox is disabled (kde#410120)
  * FIXED: Okteta support for versions &gt;= 0.26 (due to oktetapart
    file layout change)
- Drop Prefer-to-find-oktetapart-by-desktop-file.patch, merged
  upstream
- Don't add -fpermissive to compiler options, no longer necessary
- Run spec-cleaner</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1598529600">- Spec cleanup</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1656504000">- Add patch to fix the 'Compress' menu (boo#1198725, boo#1203225, kde#441376)
  * 0001-Fixed-non-working-actions-for-create-extract-archive.patch</changelog>
</package>
<package pkgid="a4844a44c20e9505ee462a3772322876a9dcb2674b5ad06fbd48467ce993ab61" name="kio_iso" arch="x86_64">
  <version epoch="0" ver="2.7.2" rel="bp154.3.3.1"/>
  <changelog author="baiduzhyi.devel@gmail.com" date="1427284800">- Require libktexteditor instead of kate to solve installation conflicts
  when using KF5.</changelog>
  <changelog author="tchvatal@suse.com" date="1432641600">- Only suggest documentation, do not recommend it.</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1477224000">- Update to 2.5.0
  * Added actions: Select files with the same name / extension
  * Changed disabled build of synchronizer by default, since it
    is unmaintained - build togglable with cmake variable
  - DENABLE_SYNCHRONIZER=true|false
  * Fixed (kde#143927) file search: "s" accelerator is doubled -
    new shortcut for "Search in" is ALT+h
  * Fixed (kde#308386) Duplicate shortcut on Search window -
    new shortcut for "Remote content search" is ALT+n
  * Fixed (kde#206926) Search doesn't work in sftp session
    (it returns too many results)
  * Fixed (kde#269542) Krusader search - Containing text
    still used when disabled
  * Fixed (kde#324737) symlinks with a target path length
    of over 255 do not work
  * Fixed (kde#189943) toolbar position settings are not remembered
  * Fixed (kde#316031) crash when loading previews
  * Fixed (kde#238672) When saving checksums fails,
    they are lost. No 2nd chance to save elsewhere.
  * Fixed (kde#315764) "application/x-source-rpm" isn't linked
    to krarc protocol by default
  * Fixed (kde#294816) Krusader needs to restart to apply
    new color scheme to panel
  * Fixed (kde#308727) external editor command isn't properly parsed
  * Fixed (kde#304233) empty main view on startup
  * Fixed (kde#315856) main view splitter sizes are not restored
  * Fixed (kde#248691) incorrect layout / wrong buttons
    in queue manager
  * Fixed (kde#315357) krarc silently fails to display
    contents of some zip files containing paths with "." as a
    path component are still not handled, but now krarc reports an
    error instead silently failing
  * Fixed (kde#310722) viewer crash when opening file
  * Fixed search result view always displays owner and group as "root"
    (may not work for remote search)
  * Fixed (kde#217711) directory chooser dialog does not allow
    to choose a directory
  * Fixed (kde#309119) Wrong "New directory" dialog behavior:
    can't clear all typed text
  * Fixed (kde#309159) Crash in video files preview on F3
  * Fixed (kde#310191) krusader still installs locolor icons
  * Fixed (kde#317510 ] icon-size-and-directory-name-mismatch
- Package ported to KF5, changed all the BuildRequires to KF5 ones
- Swap krusader-2.4.0-beta2-generate-manpage.patch for
  krusader-2.5.0-generate-manpage.patch
- Drop upstreamed bug309159.patch
- Added 0001-Don-t-hardcode-appdata-location.patch</changelog>
  <changelog author="wbauer@tmo.at" date="1479729600">- Add Remove-non-archive-mimetypes-from-krarc-archive-mime-type-list.patch
  to fix dolphin opening e.g. LibreOffice files as archives
  (boo#1011320, kde#371765)</changelog>
  <changelog author="wbauer@tmo.at" date="1482408000">- Add add-service-actions-to-right-click-popup-menu.patch to add
  KDE's service actions to the right click popup menu in krusader
  again (boo#1016980, kde#372231)</changelog>
  <changelog author="wbauer@tmo.at" date="1483617600">- Add Handle-arrow-key-press-in-brief-view.patch to fix the
  behavior when pressing the left/right cursor keys in brief view
  (boo#1017533, kde#374238)</changelog>
  <changelog author="wbauer@tmo.at" date="1491912000">- Update to 2.6.0
  * FIXED: (kde#335993) save checksum does not work as expected
  * FIXED: (kde#375639) Allow typing special characters (e.g. with
    accent or acute) in search bar
  * FIXED: (kde#328068) Send SIGINT before own input command to
    embedded terminal
  * FIXED: (kde#375135) segfault on viewing html files with Generic
    viewer
  * FIXED: (kde#269820) Fullscreen terminal emulator shows empty
    window when terminal emulator was minimized
  * FIXED: (kde#374813) Multi rename with KRename does not work
    when selecting non-local files/folders (ftp, smb, virt, ...)
  * FIXED: (kde#309300) Esc as the default shortcut of "Set Focus
    to The Panel" is problematic for the embedded terminal
  * FIXED: (kde#374175) wrong date format parsing using date filter
    in search dialog
  * FIXED: (kde#293370) After a file deletion old file name is
    still shown in the status bar
  * FIXED: (kde#374322) Visually indicated shortcut ALT+o not
    working in copy/F5 and move/F6 KrDialog
  * FIXED: (kde#374238) Handle left/right arrow key press in brief
    view (previously filtered by search bar).
  * FIXED: when dragged from list panel use correct drop action if
    invoked with modifier keys
  * FIXED: added save/restore or toolbar positions in mainwindow
  * FIXED: (kde#372231) Added KDE's service actions again to
    right-click popup menu
  * ADDED: new undo action to job manager for undoing KIO job
    operations
  * FIXED: (kde#372067) Wrong path when showing non local files and
    folders from search dialog in panel
  * ADDED: job manager as replacement for queue manager. Part of
    cleaning VFS
  * FIXED: (kde#365105) Workaround for bug in KF5+QSystemTrayIcon
  * ADDED: Reimplementation of "minimize to system tray" feature.
  * FIXED: Krusader does not show the new file in a directory that
    is a symbolic link until is not refresh directory
  * FIXED: Wrong window position after restart in fluxbox
  * FIXED: Error on opening file folder after clicking on any file
    result of a remote search (FTP / smb)
  * FIXED: Terminal opens in full window
  * FIXED: copy location/path bar (feature request)
  * FIXED: krusader cannot calculate size of remote directory (ftp
    or sftp)
  * FIXED: Some files with weird characters (non UTF) cause krusader
    to miscalculate folder size
  * FIXED: No way to focus fullscreen embedded terminal emulator.
  * FIXED: Don't delete first letter in "new folder" dialog (F7)
  * FIXED: Use Shift+Delete for delete or move selected files to
    trash
  * FIXED: Dialog "File" -&gt; "Verify checksum" improvement
  * FIXED: Option for show copy/move progress in dialog (not in
    notifications)
  * FIXED: Documents suddenly open as archives
  * CHANGED: Avoiding root mode
  * CHANGED: Duplicated tab should not be locked
  * CHANGED: New PagePanel: do not refresh until panel becomes
    visible
  * CHANGED: Change suggested command for "edit as root" user
    action to a more secure alternative
  * CHANGED: Do not configure kdesu path and remove kdesudo support
    again
  * CHANGED: Panel: Do not select .. in a filtered view if there
    are other entries
  * CHANGED: Duplicate tab settings when duplicating tabs
  * CHANGED: Some fixes and simpifying startup settings.
- Drop upstream patches:
  * krusader-2.5.0-generate-manpage.patch
  * 0001-Don-t-hardcode-appdata-location.patch
  * Remove-non-archive-mimetypes-from-krarc-archive-mime-type-list.patch
  * add-service-actions-to-right-click-popup-menu.patch
  * Handle-arrow-key-press-in-brief-view.patch</changelog>
  <changelog author="wbauer@tmo.at" date="1494158400">- Add fix-build-with-gcc48.patch to fix build on Leap 42</changelog>
  <changelog author="wbauer@tmo.at" date="1494849600">- Add org.kde.krusader.root-mode.desktop, it got removed in 2.6.0</changelog>
  <changelog author="wbauer@tmo.at" date="1515758400">- Add Panel-fixed-actions-in-PanelContextMenu-ignored.patch to fix
  the "Create New" context menu not working when the '..' entry is
  selected (boo#1075690, kde#383544)</changelog>
  <changelog author="wbauer@tmo.at" date="1526299200">- Update to 2.7.0
  * New feature: Quick Search in Bookmark menu
  * New feature: Tab pinning
  * New feature: Tooltip with file information when you hover a
    file name
  * New feature: Extended options for Tree Panel
  * New feature: Debug output option
  * Improved icon theme handling
  * Fixed 40+ issues including some regressions
- Drop patches merged upstream:
  * fix-build-with-gcc48.patch
  * Panel-fixed-actions-in-PanelContextMenu-ignored.patch
- Mark license file as %license instead of %doc
- Adjust file lists</changelog>
  <changelog author="wbauer@tmo.at" date="1534075200">- Update to 2.7.1
  * ADDED: Default shortcut for quick selection mode = Ctrl+Shift+S
  * FIXED: When calculating occupied space of ".." , krusader
    selects all directories (kde#150247)
  * FIXED: Bad default in the New Text File dialog (kde#282069)
  * FIXED: ISO files listing/extracting broken (kde#372023)
  * FIXED: Details section is empty in 'Do not know which files to
    compare.' window (kde#383567)
  * FIXED: Default mode in 'Find in folder' is not preserved
    (kde#391946)
  * FIXED: Files fed to listbox (and all other files in virt://)
    cannot be deleted (kde#394896)
  * FIXED: Enter key not working when cursor in search bar
    (kde#394939)
  * FIXED: The quicksearch bar is still opened after deleting a
    file (kde#395285)
  * FIXED: In the Manage User Actions dialog: the tab order is not
    the expected one (kde#396652)</changelog>
  <changelog author="wbauer@tmo.at" date="1552392000">- Add Prefer-to-find-oktetapart-by-desktop-file.patch to make it
  compatible with the upcoming okteta 0.26 release</changelog>
  <changelog author="wbauer@tmo.at" date="1566820800">- Update to 2.7.2
  * FIXED: Memory leak in the Locate dialog
  * FIXED: UDSEntry::insert deprecation warnings
  * FIXED: synchronize directory window: column widths
    are incorrect (kde#167410)
  * FIXED: Context menu item "copy selected to clipboard" copies
    all result items (kde#328918)
  * FIXED: "Information - Krusader" dialog does not fit to screen
    width; text non-copyable (kde#330788)
  * FIXED: After trying to rename the file that's being updated,
    rename function stops working on any file on this tab
    (kde#392750)
  * FIXED: New Text File is created with 600 (-rw-------)
    permissions (kde#395609)
  * FIXED: Misleading ?Created? date in file properties
    (kde#397398)
  * FIXED: Compilation error because of QOverload usage
    (kde#405212)
  * FIXED: The list of search results doesn't get the focus
    (kde#410118)
  * FIXED: Krusader does not search correctly if the "Follow links"
    checkbox is disabled (kde#410120)
  * FIXED: Okteta support for versions &gt;= 0.26 (due to oktetapart
    file layout change)
- Drop Prefer-to-find-oktetapart-by-desktop-file.patch, merged
  upstream
- Don't add -fpermissive to compiler options, no longer necessary
- Run spec-cleaner</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1598529600">- Spec cleanup</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1656504000">- Add patch to fix the 'Compress' menu (boo#1198725, boo#1203225, kde#441376)
  * 0001-Fixed-non-working-actions-for-create-extract-archive.patch</changelog>
</package>
<package pkgid="7b65fb6560d45a17f5c310d3136250d4034803829b67f2e4a3488b93837a1e55" name="knewstuff" arch="aarch64">
  <version epoch="0" ver="5.90.0" rel="bp154.3.3.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1607169600">- Update to 5.77.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.77.0
- Too many changes since 5.76.0, only listing bugfixes:
  * Reuse QWidgets dialog (kde#416328)
  * Fix entry disappearing too early from updatable page (kde#427801)
  * Remove entry from cache before inserting new entry (kde#424919)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1609934400">- Update to 5.78.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.78.0
- Changes since 5.77.0:
  * Deprecate standardAction and standardActionUpload methods
  * Fix QtQuick model if there is only a payload, but no download links
  * Add trailing comma to enum values
  * Add clang-format target
  * Add a dptr to Cache, and move the throttle timer there to fix crash (kde#429442)
  * Refactor KNS3::Button to use new dialog internally
  * Create wrapper class for QML dialog
  * Fix unit tests for kmoretools
  * Check if version is empty before concatenating version</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1612785600">- Update to 5.79.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.79.0
- Too many changes to list here.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1615118400">- Update to 5.80.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.80.0
- Too many changes since 5.79.0, only listing bugfixes:
  * Fix preview delegate's update badge being cut off (kde#433535)
  * qtquickengine: Do not emit entriesChanged signal when we clear an empty list (kde#431568)
  * qtquickengine: Check if KNSCore::Engine is valid before searching (kde#402432)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1617624000">- Update to 5.81.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.81.0
- Changes since 5.80.0:
  * qtquickengine: Do not forward intermediate states
  * quickengine: Emit entryEvent signal with enum which is exposed to QML
  * Create a NewStuff.Action component, add NewStuff.Settings global
  * Fix minor typos
  * Less risk of infinite spinner on uninstalling KPackage based things (kde#434371)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1619870400">- Update to 5.82.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.82.0
- Changes since 5.81.0:
  * Deprecate quickengine changedEntries &amp; related methods
  * Do not show error when installation is canceled (kde#436355)
  * Port away from QStringRef
  * Fix mem leak in autotests found by asan
  * NewStuff Dialog: Forward entryEvent signal
  * NewStuff Button: Forward entryEvent signal
  * Make QML GHNS dialog a tiny bit wider (kde#435547)
  * ensure .desktop files are executable</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1622894400">- Update to 5.83.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.83.0
- Too many changes to list here.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1625400000">- Update to 5.84.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.84.0
- Too many changes to list here.
- Only install the license files once</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1628251200">- Update to 5.85.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.85.0
- Changes since 5.84.0:
  * It's deprecated in 5.85 not 5.80
  * Rework UploadDialog, add QML version, and a new ProvidersModel
  * Simplify lookup of knsrc files using KFileUtils::findAllUniqueFiles method
  * Forward Attica provider icons to KNSCore::Provider
  * Handle payload-only entries during update operations</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1630929600">- Update to 5.86.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.86.0
- Changes since 5.85.0:
  * replace "MacOSX" with "macOS"
  * Port from KMountPoint to QStorageInfo
  * Set KLocalizedContext for QtQuickDialogWrapper
  * Use QToolButton for reset button as we have the same style</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1631707200">- Drop the unneeded baselibs.conf.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1632830400">- Add fix-crash.patch. This patch fixes a crash in DownloadWidget.
  (kde#443025)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1633089600">- Add upstream patch:
  * 0001-Include-a-user-agent-on-KNS-requests.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1633262400">- Update to 5.87.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.87.0
- Too many changes since 5.86.0, only listing bugfixes:
  * Fix crash in DownloadWidget (kde#443025)
- Drop upstream patches:
  * 0001-Include-a-user-agent-on-KNS-requests.patch
  * fix-crash.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1636286400">- Update to 5.88.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.88.0
- Changes since 5.87.0:
  * Port to enum values for KAuthorized::authorizeAction
  * Make sure that we query KService with lowercase desktop names since it
    seems that KService stores everything lowercase. (kde#417575)
  * Add FreeBSD CI</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1636286401">- Strip 'Source' URL for faster submissions</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638619200">- Update to 5.89.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.89.0
- Changes since 5.88.0:
  * Improve presentation of multi-file download sheet
  * Use RTL half-star rating icon when in RTL mode</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1641211200">- Update to 5.90.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.90.0
- Changes since 5.89.0:
  * Drop lib prefix when building for Windows (kde#446950)
  * Remove defunct manual khotnewstuff_upload test
  * Compile fixes for Qt 6
  * Fix i18n* functions for knewstuff-dialog not existing
  * Port all KF deprecations until 5.89
  * Unnest private classes, use std::unique_ptr to manage lifetime
  * Generate own export header for KNSWidgets module
  * Fix include install directory
  * Fix library name
  * Move KNS3::Action class to new KNSWidgets submodule
  * New class: KNS3::Action</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1645272000">- Add patches to reduce requests to download.kde.org (boo#1196199):
  * 0001-Add-http2-to-KNewStuff-requests.patch
  * 0002-Engine-Ensure-we-are-not-using-the-wrong-ProvidersUr.patch
  * 0003-Add-conditional-cache-preference-to-http-requests.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1653912000">- Add patch to fix content downloading (boo#1200014)
  * 0001-Do-not-set-user-visible-name-as-additional-agent-inf.patch</changelog>
</package>
<package pkgid="0a1cf59a94ce47f04f4107f3c6b24659c0520b938b3dbbc59d7311ce68a4540f" name="knewstuff" arch="ppc64le">
  <version epoch="0" ver="5.90.0" rel="bp154.3.3.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1607169600">- Update to 5.77.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.77.0
- Too many changes since 5.76.0, only listing bugfixes:
  * Reuse QWidgets dialog (kde#416328)
  * Fix entry disappearing too early from updatable page (kde#427801)
  * Remove entry from cache before inserting new entry (kde#424919)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1609934400">- Update to 5.78.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.78.0
- Changes since 5.77.0:
  * Deprecate standardAction and standardActionUpload methods
  * Fix QtQuick model if there is only a payload, but no download links
  * Add trailing comma to enum values
  * Add clang-format target
  * Add a dptr to Cache, and move the throttle timer there to fix crash (kde#429442)
  * Refactor KNS3::Button to use new dialog internally
  * Create wrapper class for QML dialog
  * Fix unit tests for kmoretools
  * Check if version is empty before concatenating version</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1612785600">- Update to 5.79.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.79.0
- Too many changes to list here.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1615118400">- Update to 5.80.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.80.0
- Too many changes since 5.79.0, only listing bugfixes:
  * Fix preview delegate's update badge being cut off (kde#433535)
  * qtquickengine: Do not emit entriesChanged signal when we clear an empty list (kde#431568)
  * qtquickengine: Check if KNSCore::Engine is valid before searching (kde#402432)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1617624000">- Update to 5.81.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.81.0
- Changes since 5.80.0:
  * qtquickengine: Do not forward intermediate states
  * quickengine: Emit entryEvent signal with enum which is exposed to QML
  * Create a NewStuff.Action component, add NewStuff.Settings global
  * Fix minor typos
  * Less risk of infinite spinner on uninstalling KPackage based things (kde#434371)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1619870400">- Update to 5.82.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.82.0
- Changes since 5.81.0:
  * Deprecate quickengine changedEntries &amp; related methods
  * Do not show error when installation is canceled (kde#436355)
  * Port away from QStringRef
  * Fix mem leak in autotests found by asan
  * NewStuff Dialog: Forward entryEvent signal
  * NewStuff Button: Forward entryEvent signal
  * Make QML GHNS dialog a tiny bit wider (kde#435547)
  * ensure .desktop files are executable</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1622894400">- Update to 5.83.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.83.0
- Too many changes to list here.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1625400000">- Update to 5.84.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.84.0
- Too many changes to list here.
- Only install the license files once</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1628251200">- Update to 5.85.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.85.0
- Changes since 5.84.0:
  * It's deprecated in 5.85 not 5.80
  * Rework UploadDialog, add QML version, and a new ProvidersModel
  * Simplify lookup of knsrc files using KFileUtils::findAllUniqueFiles method
  * Forward Attica provider icons to KNSCore::Provider
  * Handle payload-only entries during update operations</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1630929600">- Update to 5.86.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.86.0
- Changes since 5.85.0:
  * replace "MacOSX" with "macOS"
  * Port from KMountPoint to QStorageInfo
  * Set KLocalizedContext for QtQuickDialogWrapper
  * Use QToolButton for reset button as we have the same style</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1631707200">- Drop the unneeded baselibs.conf.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1632830400">- Add fix-crash.patch. This patch fixes a crash in DownloadWidget.
  (kde#443025)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1633089600">- Add upstream patch:
  * 0001-Include-a-user-agent-on-KNS-requests.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1633262400">- Update to 5.87.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.87.0
- Too many changes since 5.86.0, only listing bugfixes:
  * Fix crash in DownloadWidget (kde#443025)
- Drop upstream patches:
  * 0001-Include-a-user-agent-on-KNS-requests.patch
  * fix-crash.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1636286400">- Update to 5.88.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.88.0
- Changes since 5.87.0:
  * Port to enum values for KAuthorized::authorizeAction
  * Make sure that we query KService with lowercase desktop names since it
    seems that KService stores everything lowercase. (kde#417575)
  * Add FreeBSD CI</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1636286401">- Strip 'Source' URL for faster submissions</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638619200">- Update to 5.89.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.89.0
- Changes since 5.88.0:
  * Improve presentation of multi-file download sheet
  * Use RTL half-star rating icon when in RTL mode</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1641211200">- Update to 5.90.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.90.0
- Changes since 5.89.0:
  * Drop lib prefix when building for Windows (kde#446950)
  * Remove defunct manual khotnewstuff_upload test
  * Compile fixes for Qt 6
  * Fix i18n* functions for knewstuff-dialog not existing
  * Port all KF deprecations until 5.89
  * Unnest private classes, use std::unique_ptr to manage lifetime
  * Generate own export header for KNSWidgets module
  * Fix include install directory
  * Fix library name
  * Move KNS3::Action class to new KNSWidgets submodule
  * New class: KNS3::Action</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1645272000">- Add patches to reduce requests to download.kde.org (boo#1196199):
  * 0001-Add-http2-to-KNewStuff-requests.patch
  * 0002-Engine-Ensure-we-are-not-using-the-wrong-ProvidersUr.patch
  * 0003-Add-conditional-cache-preference-to-http-requests.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1653912000">- Add patch to fix content downloading (boo#1200014)
  * 0001-Do-not-set-user-visible-name-as-additional-agent-inf.patch</changelog>
</package>
<package pkgid="df1c1386c6c6838f56ffaeb8bb57e7d6173afa265a95e59b76afa5b5605ded45" name="knewstuff" arch="s390x">
  <version epoch="0" ver="5.90.0" rel="bp154.3.3.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1607169600">- Update to 5.77.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.77.0
- Too many changes since 5.76.0, only listing bugfixes:
  * Reuse QWidgets dialog (kde#416328)
  * Fix entry disappearing too early from updatable page (kde#427801)
  * Remove entry from cache before inserting new entry (kde#424919)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1609934400">- Update to 5.78.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.78.0
- Changes since 5.77.0:
  * Deprecate standardAction and standardActionUpload methods
  * Fix QtQuick model if there is only a payload, but no download links
  * Add trailing comma to enum values
  * Add clang-format target
  * Add a dptr to Cache, and move the throttle timer there to fix crash (kde#429442)
  * Refactor KNS3::Button to use new dialog internally
  * Create wrapper class for QML dialog
  * Fix unit tests for kmoretools
  * Check if version is empty before concatenating version</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1612785600">- Update to 5.79.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.79.0
- Too many changes to list here.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1615118400">- Update to 5.80.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.80.0
- Too many changes since 5.79.0, only listing bugfixes:
  * Fix preview delegate's update badge being cut off (kde#433535)
  * qtquickengine: Do not emit entriesChanged signal when we clear an empty list (kde#431568)
  * qtquickengine: Check if KNSCore::Engine is valid before searching (kde#402432)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1617624000">- Update to 5.81.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.81.0
- Changes since 5.80.0:
  * qtquickengine: Do not forward intermediate states
  * quickengine: Emit entryEvent signal with enum which is exposed to QML
  * Create a NewStuff.Action component, add NewStuff.Settings global
  * Fix minor typos
  * Less risk of infinite spinner on uninstalling KPackage based things (kde#434371)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1619870400">- Update to 5.82.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.82.0
- Changes since 5.81.0:
  * Deprecate quickengine changedEntries &amp; related methods
  * Do not show error when installation is canceled (kde#436355)
  * Port away from QStringRef
  * Fix mem leak in autotests found by asan
  * NewStuff Dialog: Forward entryEvent signal
  * NewStuff Button: Forward entryEvent signal
  * Make QML GHNS dialog a tiny bit wider (kde#435547)
  * ensure .desktop files are executable</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1622894400">- Update to 5.83.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.83.0
- Too many changes to list here.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1625400000">- Update to 5.84.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.84.0
- Too many changes to list here.
- Only install the license files once</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1628251200">- Update to 5.85.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.85.0
- Changes since 5.84.0:
  * It's deprecated in 5.85 not 5.80
  * Rework UploadDialog, add QML version, and a new ProvidersModel
  * Simplify lookup of knsrc files using KFileUtils::findAllUniqueFiles method
  * Forward Attica provider icons to KNSCore::Provider
  * Handle payload-only entries during update operations</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1630929600">- Update to 5.86.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.86.0
- Changes since 5.85.0:
  * replace "MacOSX" with "macOS"
  * Port from KMountPoint to QStorageInfo
  * Set KLocalizedContext for QtQuickDialogWrapper
  * Use QToolButton for reset button as we have the same style</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1631707200">- Drop the unneeded baselibs.conf.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1632830400">- Add fix-crash.patch. This patch fixes a crash in DownloadWidget.
  (kde#443025)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1633089600">- Add upstream patch:
  * 0001-Include-a-user-agent-on-KNS-requests.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1633262400">- Update to 5.87.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.87.0
- Too many changes since 5.86.0, only listing bugfixes:
  * Fix crash in DownloadWidget (kde#443025)
- Drop upstream patches:
  * 0001-Include-a-user-agent-on-KNS-requests.patch
  * fix-crash.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1636286400">- Update to 5.88.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.88.0
- Changes since 5.87.0:
  * Port to enum values for KAuthorized::authorizeAction
  * Make sure that we query KService with lowercase desktop names since it
    seems that KService stores everything lowercase. (kde#417575)
  * Add FreeBSD CI</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1636286401">- Strip 'Source' URL for faster submissions</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638619200">- Update to 5.89.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.89.0
- Changes since 5.88.0:
  * Improve presentation of multi-file download sheet
  * Use RTL half-star rating icon when in RTL mode</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1641211200">- Update to 5.90.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.90.0
- Changes since 5.89.0:
  * Drop lib prefix when building for Windows (kde#446950)
  * Remove defunct manual khotnewstuff_upload test
  * Compile fixes for Qt 6
  * Fix i18n* functions for knewstuff-dialog not existing
  * Port all KF deprecations until 5.89
  * Unnest private classes, use std::unique_ptr to manage lifetime
  * Generate own export header for KNSWidgets module
  * Fix include install directory
  * Fix library name
  * Move KNS3::Action class to new KNSWidgets submodule
  * New class: KNS3::Action</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1645272000">- Add patches to reduce requests to download.kde.org (boo#1196199):
  * 0001-Add-http2-to-KNewStuff-requests.patch
  * 0002-Engine-Ensure-we-are-not-using-the-wrong-ProvidersUr.patch
  * 0003-Add-conditional-cache-preference-to-http-requests.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1653912000">- Add patch to fix content downloading (boo#1200014)
  * 0001-Do-not-set-user-visible-name-as-additional-agent-inf.patch</changelog>
</package>
<package pkgid="668dfb595e66cd8d2428a9006c9abf6ecb60318d3f97a040e4a9b5299e935933" name="knewstuff" arch="src">
  <version epoch="0" ver="5.90.0" rel="bp154.3.3.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1607169600">- Update to 5.77.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.77.0
- Too many changes since 5.76.0, only listing bugfixes:
  * Reuse QWidgets dialog (kde#416328)
  * Fix entry disappearing too early from updatable page (kde#427801)
  * Remove entry from cache before inserting new entry (kde#424919)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1609934400">- Update to 5.78.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.78.0
- Changes since 5.77.0:
  * Deprecate standardAction and standardActionUpload methods
  * Fix QtQuick model if there is only a payload, but no download links
  * Add trailing comma to enum values
  * Add clang-format target
  * Add a dptr to Cache, and move the throttle timer there to fix crash (kde#429442)
  * Refactor KNS3::Button to use new dialog internally
  * Create wrapper class for QML dialog
  * Fix unit tests for kmoretools
  * Check if version is empty before concatenating version</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1612785600">- Update to 5.79.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.79.0
- Too many changes to list here.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1615118400">- Update to 5.80.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.80.0
- Too many changes since 5.79.0, only listing bugfixes:
  * Fix preview delegate's update badge being cut off (kde#433535)
  * qtquickengine: Do not emit entriesChanged signal when we clear an empty list (kde#431568)
  * qtquickengine: Check if KNSCore::Engine is valid before searching (kde#402432)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1617624000">- Update to 5.81.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.81.0
- Changes since 5.80.0:
  * qtquickengine: Do not forward intermediate states
  * quickengine: Emit entryEvent signal with enum which is exposed to QML
  * Create a NewStuff.Action component, add NewStuff.Settings global
  * Fix minor typos
  * Less risk of infinite spinner on uninstalling KPackage based things (kde#434371)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1619870400">- Update to 5.82.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.82.0
- Changes since 5.81.0:
  * Deprecate quickengine changedEntries &amp; related methods
  * Do not show error when installation is canceled (kde#436355)
  * Port away from QStringRef
  * Fix mem leak in autotests found by asan
  * NewStuff Dialog: Forward entryEvent signal
  * NewStuff Button: Forward entryEvent signal
  * Make QML GHNS dialog a tiny bit wider (kde#435547)
  * ensure .desktop files are executable</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1622894400">- Update to 5.83.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.83.0
- Too many changes to list here.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1625400000">- Update to 5.84.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.84.0
- Too many changes to list here.
- Only install the license files once</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1628251200">- Update to 5.85.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.85.0
- Changes since 5.84.0:
  * It's deprecated in 5.85 not 5.80
  * Rework UploadDialog, add QML version, and a new ProvidersModel
  * Simplify lookup of knsrc files using KFileUtils::findAllUniqueFiles method
  * Forward Attica provider icons to KNSCore::Provider
  * Handle payload-only entries during update operations</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1630929600">- Update to 5.86.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.86.0
- Changes since 5.85.0:
  * replace "MacOSX" with "macOS"
  * Port from KMountPoint to QStorageInfo
  * Set KLocalizedContext for QtQuickDialogWrapper
  * Use QToolButton for reset button as we have the same style</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1631707200">- Drop the unneeded baselibs.conf.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1632830400">- Add fix-crash.patch. This patch fixes a crash in DownloadWidget.
  (kde#443025)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1633089600">- Add upstream patch:
  * 0001-Include-a-user-agent-on-KNS-requests.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1633262400">- Update to 5.87.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.87.0
- Too many changes since 5.86.0, only listing bugfixes:
  * Fix crash in DownloadWidget (kde#443025)
- Drop upstream patches:
  * 0001-Include-a-user-agent-on-KNS-requests.patch
  * fix-crash.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1636286400">- Update to 5.88.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.88.0
- Changes since 5.87.0:
  * Port to enum values for KAuthorized::authorizeAction
  * Make sure that we query KService with lowercase desktop names since it
    seems that KService stores everything lowercase. (kde#417575)
  * Add FreeBSD CI</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1636286401">- Strip 'Source' URL for faster submissions</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638619200">- Update to 5.89.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.89.0
- Changes since 5.88.0:
  * Improve presentation of multi-file download sheet
  * Use RTL half-star rating icon when in RTL mode</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1641211200">- Update to 5.90.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.90.0
- Changes since 5.89.0:
  * Drop lib prefix when building for Windows (kde#446950)
  * Remove defunct manual khotnewstuff_upload test
  * Compile fixes for Qt 6
  * Fix i18n* functions for knewstuff-dialog not existing
  * Port all KF deprecations until 5.89
  * Unnest private classes, use std::unique_ptr to manage lifetime
  * Generate own export header for KNSWidgets module
  * Fix include install directory
  * Fix library name
  * Move KNS3::Action class to new KNSWidgets submodule
  * New class: KNS3::Action</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1645272000">- Add patches to reduce requests to download.kde.org (boo#1196199):
  * 0001-Add-http2-to-KNewStuff-requests.patch
  * 0002-Engine-Ensure-we-are-not-using-the-wrong-ProvidersUr.patch
  * 0003-Add-conditional-cache-preference-to-http-requests.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1653912000">- Add patch to fix content downloading (boo#1200014)
  * 0001-Do-not-set-user-visible-name-as-additional-agent-inf.patch</changelog>
</package>
<package pkgid="43b55b3ea1b72fa60310b90498a4e0b1b6e45ee42f80eff48c2e0885e895d5e5" name="knewstuff" arch="x86_64">
  <version epoch="0" ver="5.90.0" rel="bp154.3.3.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1607169600">- Update to 5.77.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.77.0
- Too many changes since 5.76.0, only listing bugfixes:
  * Reuse QWidgets dialog (kde#416328)
  * Fix entry disappearing too early from updatable page (kde#427801)
  * Remove entry from cache before inserting new entry (kde#424919)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1609934400">- Update to 5.78.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.78.0
- Changes since 5.77.0:
  * Deprecate standardAction and standardActionUpload methods
  * Fix QtQuick model if there is only a payload, but no download links
  * Add trailing comma to enum values
  * Add clang-format target
  * Add a dptr to Cache, and move the throttle timer there to fix crash (kde#429442)
  * Refactor KNS3::Button to use new dialog internally
  * Create wrapper class for QML dialog
  * Fix unit tests for kmoretools
  * Check if version is empty before concatenating version</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1612785600">- Update to 5.79.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.79.0
- Too many changes to list here.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1615118400">- Update to 5.80.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.80.0
- Too many changes since 5.79.0, only listing bugfixes:
  * Fix preview delegate's update badge being cut off (kde#433535)
  * qtquickengine: Do not emit entriesChanged signal when we clear an empty list (kde#431568)
  * qtquickengine: Check if KNSCore::Engine is valid before searching (kde#402432)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1617624000">- Update to 5.81.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.81.0
- Changes since 5.80.0:
  * qtquickengine: Do not forward intermediate states
  * quickengine: Emit entryEvent signal with enum which is exposed to QML
  * Create a NewStuff.Action component, add NewStuff.Settings global
  * Fix minor typos
  * Less risk of infinite spinner on uninstalling KPackage based things (kde#434371)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1619870400">- Update to 5.82.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.82.0
- Changes since 5.81.0:
  * Deprecate quickengine changedEntries &amp; related methods
  * Do not show error when installation is canceled (kde#436355)
  * Port away from QStringRef
  * Fix mem leak in autotests found by asan
  * NewStuff Dialog: Forward entryEvent signal
  * NewStuff Button: Forward entryEvent signal
  * Make QML GHNS dialog a tiny bit wider (kde#435547)
  * ensure .desktop files are executable</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1622894400">- Update to 5.83.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.83.0
- Too many changes to list here.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1625400000">- Update to 5.84.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.84.0
- Too many changes to list here.
- Only install the license files once</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1628251200">- Update to 5.85.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.85.0
- Changes since 5.84.0:
  * It's deprecated in 5.85 not 5.80
  * Rework UploadDialog, add QML version, and a new ProvidersModel
  * Simplify lookup of knsrc files using KFileUtils::findAllUniqueFiles method
  * Forward Attica provider icons to KNSCore::Provider
  * Handle payload-only entries during update operations</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1630929600">- Update to 5.86.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.86.0
- Changes since 5.85.0:
  * replace "MacOSX" with "macOS"
  * Port from KMountPoint to QStorageInfo
  * Set KLocalizedContext for QtQuickDialogWrapper
  * Use QToolButton for reset button as we have the same style</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1631707200">- Drop the unneeded baselibs.conf.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1632830400">- Add fix-crash.patch. This patch fixes a crash in DownloadWidget.
  (kde#443025)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1633089600">- Add upstream patch:
  * 0001-Include-a-user-agent-on-KNS-requests.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1633262400">- Update to 5.87.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.87.0
- Too many changes since 5.86.0, only listing bugfixes:
  * Fix crash in DownloadWidget (kde#443025)
- Drop upstream patches:
  * 0001-Include-a-user-agent-on-KNS-requests.patch
  * fix-crash.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1636286400">- Update to 5.88.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.88.0
- Changes since 5.87.0:
  * Port to enum values for KAuthorized::authorizeAction
  * Make sure that we query KService with lowercase desktop names since it
    seems that KService stores everything lowercase. (kde#417575)
  * Add FreeBSD CI</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1636286401">- Strip 'Source' URL for faster submissions</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638619200">- Update to 5.89.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.89.0
- Changes since 5.88.0:
  * Improve presentation of multi-file download sheet
  * Use RTL half-star rating icon when in RTL mode</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1641211200">- Update to 5.90.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.90.0
- Changes since 5.89.0:
  * Drop lib prefix when building for Windows (kde#446950)
  * Remove defunct manual khotnewstuff_upload test
  * Compile fixes for Qt 6
  * Fix i18n* functions for knewstuff-dialog not existing
  * Port all KF deprecations until 5.89
  * Unnest private classes, use std::unique_ptr to manage lifetime
  * Generate own export header for KNSWidgets module
  * Fix include install directory
  * Fix library name
  * Move KNS3::Action class to new KNSWidgets submodule
  * New class: KNS3::Action</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1645272000">- Add patches to reduce requests to download.kde.org (boo#1196199):
  * 0001-Add-http2-to-KNewStuff-requests.patch
  * 0002-Engine-Ensure-we-are-not-using-the-wrong-ProvidersUr.patch
  * 0003-Add-conditional-cache-preference-to-http-requests.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1653912000">- Add patch to fix content downloading (boo#1200014)
  * 0001-Do-not-set-user-visible-name-as-additional-agent-inf.patch</changelog>
</package>
<package pkgid="16343fbfdf03777b499214ed61495ccd7a847bf719109e3731374814282891d7" name="knewstuff-core-devel" arch="aarch64">
  <version epoch="0" ver="5.90.0" rel="bp154.3.3.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1607169600">- Update to 5.77.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.77.0
- Too many changes since 5.76.0, only listing bugfixes:
  * Reuse QWidgets dialog (kde#416328)
  * Fix entry disappearing too early from updatable page (kde#427801)
  * Remove entry from cache before inserting new entry (kde#424919)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1609934400">- Update to 5.78.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.78.0
- Changes since 5.77.0:
  * Deprecate standardAction and standardActionUpload methods
  * Fix QtQuick model if there is only a payload, but no download links
  * Add trailing comma to enum values
  * Add clang-format target
  * Add a dptr to Cache, and move the throttle timer there to fix crash (kde#429442)
  * Refactor KNS3::Button to use new dialog internally
  * Create wrapper class for QML dialog
  * Fix unit tests for kmoretools
  * Check if version is empty before concatenating version</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1612785600">- Update to 5.79.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.79.0
- Too many changes to list here.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1615118400">- Update to 5.80.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.80.0
- Too many changes since 5.79.0, only listing bugfixes:
  * Fix preview delegate's update badge being cut off (kde#433535)
  * qtquickengine: Do not emit entriesChanged signal when we clear an empty list (kde#431568)
  * qtquickengine: Check if KNSCore::Engine is valid before searching (kde#402432)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1617624000">- Update to 5.81.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.81.0
- Changes since 5.80.0:
  * qtquickengine: Do not forward intermediate states
  * quickengine: Emit entryEvent signal with enum which is exposed to QML
  * Create a NewStuff.Action component, add NewStuff.Settings global
  * Fix minor typos
  * Less risk of infinite spinner on uninstalling KPackage based things (kde#434371)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1619870400">- Update to 5.82.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.82.0
- Changes since 5.81.0:
  * Deprecate quickengine changedEntries &amp; related methods
  * Do not show error when installation is canceled (kde#436355)
  * Port away from QStringRef
  * Fix mem leak in autotests found by asan
  * NewStuff Dialog: Forward entryEvent signal
  * NewStuff Button: Forward entryEvent signal
  * Make QML GHNS dialog a tiny bit wider (kde#435547)
  * ensure .desktop files are executable</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1622894400">- Update to 5.83.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.83.0
- Too many changes to list here.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1625400000">- Update to 5.84.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.84.0
- Too many changes to list here.
- Only install the license files once</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1628251200">- Update to 5.85.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.85.0
- Changes since 5.84.0:
  * It's deprecated in 5.85 not 5.80
  * Rework UploadDialog, add QML version, and a new ProvidersModel
  * Simplify lookup of knsrc files using KFileUtils::findAllUniqueFiles method
  * Forward Attica provider icons to KNSCore::Provider
  * Handle payload-only entries during update operations</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1630929600">- Update to 5.86.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.86.0
- Changes since 5.85.0:
  * replace "MacOSX" with "macOS"
  * Port from KMountPoint to QStorageInfo
  * Set KLocalizedContext for QtQuickDialogWrapper
  * Use QToolButton for reset button as we have the same style</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1631707200">- Drop the unneeded baselibs.conf.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1632830400">- Add fix-crash.patch. This patch fixes a crash in DownloadWidget.
  (kde#443025)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1633089600">- Add upstream patch:
  * 0001-Include-a-user-agent-on-KNS-requests.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1633262400">- Update to 5.87.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.87.0
- Too many changes since 5.86.0, only listing bugfixes:
  * Fix crash in DownloadWidget (kde#443025)
- Drop upstream patches:
  * 0001-Include-a-user-agent-on-KNS-requests.patch
  * fix-crash.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1636286400">- Update to 5.88.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.88.0
- Changes since 5.87.0:
  * Port to enum values for KAuthorized::authorizeAction
  * Make sure that we query KService with lowercase desktop names since it
    seems that KService stores everything lowercase. (kde#417575)
  * Add FreeBSD CI</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1636286401">- Strip 'Source' URL for faster submissions</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638619200">- Update to 5.89.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.89.0
- Changes since 5.88.0:
  * Improve presentation of multi-file download sheet
  * Use RTL half-star rating icon when in RTL mode</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1641211200">- Update to 5.90.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.90.0
- Changes since 5.89.0:
  * Drop lib prefix when building for Windows (kde#446950)
  * Remove defunct manual khotnewstuff_upload test
  * Compile fixes for Qt 6
  * Fix i18n* functions for knewstuff-dialog not existing
  * Port all KF deprecations until 5.89
  * Unnest private classes, use std::unique_ptr to manage lifetime
  * Generate own export header for KNSWidgets module
  * Fix include install directory
  * Fix library name
  * Move KNS3::Action class to new KNSWidgets submodule
  * New class: KNS3::Action</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1645272000">- Add patches to reduce requests to download.kde.org (boo#1196199):
  * 0001-Add-http2-to-KNewStuff-requests.patch
  * 0002-Engine-Ensure-we-are-not-using-the-wrong-ProvidersUr.patch
  * 0003-Add-conditional-cache-preference-to-http-requests.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1653912000">- Add patch to fix content downloading (boo#1200014)
  * 0001-Do-not-set-user-visible-name-as-additional-agent-inf.patch</changelog>
</package>
<package pkgid="03be3364445ccd933e7ea9484a5a337078967787acc1636fa43874bcb938d243" name="knewstuff-core-devel" arch="ppc64le">
  <version epoch="0" ver="5.90.0" rel="bp154.3.3.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1607169600">- Update to 5.77.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.77.0
- Too many changes since 5.76.0, only listing bugfixes:
  * Reuse QWidgets dialog (kde#416328)
  * Fix entry disappearing too early from updatable page (kde#427801)
  * Remove entry from cache before inserting new entry (kde#424919)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1609934400">- Update to 5.78.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.78.0
- Changes since 5.77.0:
  * Deprecate standardAction and standardActionUpload methods
  * Fix QtQuick model if there is only a payload, but no download links
  * Add trailing comma to enum values
  * Add clang-format target
  * Add a dptr to Cache, and move the throttle timer there to fix crash (kde#429442)
  * Refactor KNS3::Button to use new dialog internally
  * Create wrapper class for QML dialog
  * Fix unit tests for kmoretools
  * Check if version is empty before concatenating version</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1612785600">- Update to 5.79.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.79.0
- Too many changes to list here.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1615118400">- Update to 5.80.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.80.0
- Too many changes since 5.79.0, only listing bugfixes:
  * Fix preview delegate's update badge being cut off (kde#433535)
  * qtquickengine: Do not emit entriesChanged signal when we clear an empty list (kde#431568)
  * qtquickengine: Check if KNSCore::Engine is valid before searching (kde#402432)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1617624000">- Update to 5.81.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.81.0
- Changes since 5.80.0:
  * qtquickengine: Do not forward intermediate states
  * quickengine: Emit entryEvent signal with enum which is exposed to QML
  * Create a NewStuff.Action component, add NewStuff.Settings global
  * Fix minor typos
  * Less risk of infinite spinner on uninstalling KPackage based things (kde#434371)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1619870400">- Update to 5.82.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.82.0
- Changes since 5.81.0:
  * Deprecate quickengine changedEntries &amp; related methods
  * Do not show error when installation is canceled (kde#436355)
  * Port away from QStringRef
  * Fix mem leak in autotests found by asan
  * NewStuff Dialog: Forward entryEvent signal
  * NewStuff Button: Forward entryEvent signal
  * Make QML GHNS dialog a tiny bit wider (kde#435547)
  * ensure .desktop files are executable</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1622894400">- Update to 5.83.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.83.0
- Too many changes to list here.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1625400000">- Update to 5.84.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.84.0
- Too many changes to list here.
- Only install the license files once</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1628251200">- Update to 5.85.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.85.0
- Changes since 5.84.0:
  * It's deprecated in 5.85 not 5.80
  * Rework UploadDialog, add QML version, and a new ProvidersModel
  * Simplify lookup of knsrc files using KFileUtils::findAllUniqueFiles method
  * Forward Attica provider icons to KNSCore::Provider
  * Handle payload-only entries during update operations</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1630929600">- Update to 5.86.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.86.0
- Changes since 5.85.0:
  * replace "MacOSX" with "macOS"
  * Port from KMountPoint to QStorageInfo
  * Set KLocalizedContext for QtQuickDialogWrapper
  * Use QToolButton for reset button as we have the same style</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1631707200">- Drop the unneeded baselibs.conf.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1632830400">- Add fix-crash.patch. This patch fixes a crash in DownloadWidget.
  (kde#443025)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1633089600">- Add upstream patch:
  * 0001-Include-a-user-agent-on-KNS-requests.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1633262400">- Update to 5.87.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.87.0
- Too many changes since 5.86.0, only listing bugfixes:
  * Fix crash in DownloadWidget (kde#443025)
- Drop upstream patches:
  * 0001-Include-a-user-agent-on-KNS-requests.patch
  * fix-crash.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1636286400">- Update to 5.88.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.88.0
- Changes since 5.87.0:
  * Port to enum values for KAuthorized::authorizeAction
  * Make sure that we query KService with lowercase desktop names since it
    seems that KService stores everything lowercase. (kde#417575)
  * Add FreeBSD CI</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1636286401">- Strip 'Source' URL for faster submissions</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638619200">- Update to 5.89.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.89.0
- Changes since 5.88.0:
  * Improve presentation of multi-file download sheet
  * Use RTL half-star rating icon when in RTL mode</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1641211200">- Update to 5.90.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.90.0
- Changes since 5.89.0:
  * Drop lib prefix when building for Windows (kde#446950)
  * Remove defunct manual khotnewstuff_upload test
  * Compile fixes for Qt 6
  * Fix i18n* functions for knewstuff-dialog not existing
  * Port all KF deprecations until 5.89
  * Unnest private classes, use std::unique_ptr to manage lifetime
  * Generate own export header for KNSWidgets module
  * Fix include install directory
  * Fix library name
  * Move KNS3::Action class to new KNSWidgets submodule
  * New class: KNS3::Action</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1645272000">- Add patches to reduce requests to download.kde.org (boo#1196199):
  * 0001-Add-http2-to-KNewStuff-requests.patch
  * 0002-Engine-Ensure-we-are-not-using-the-wrong-ProvidersUr.patch
  * 0003-Add-conditional-cache-preference-to-http-requests.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1653912000">- Add patch to fix content downloading (boo#1200014)
  * 0001-Do-not-set-user-visible-name-as-additional-agent-inf.patch</changelog>
</package>
<package pkgid="4bd20427ac28e4aeb9821ed839a7cadd4bfe49ef7226815484d6592db4d4483f" name="knewstuff-core-devel" arch="s390x">
  <version epoch="0" ver="5.90.0" rel="bp154.3.3.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1607169600">- Update to 5.77.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.77.0
- Too many changes since 5.76.0, only listing bugfixes:
  * Reuse QWidgets dialog (kde#416328)
  * Fix entry disappearing too early from updatable page (kde#427801)
  * Remove entry from cache before inserting new entry (kde#424919)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1609934400">- Update to 5.78.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.78.0
- Changes since 5.77.0:
  * Deprecate standardAction and standardActionUpload methods
  * Fix QtQuick model if there is only a payload, but no download links
  * Add trailing comma to enum values
  * Add clang-format target
  * Add a dptr to Cache, and move the throttle timer there to fix crash (kde#429442)
  * Refactor KNS3::Button to use new dialog internally
  * Create wrapper class for QML dialog
  * Fix unit tests for kmoretools
  * Check if version is empty before concatenating version</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1612785600">- Update to 5.79.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.79.0
- Too many changes to list here.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1615118400">- Update to 5.80.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.80.0
- Too many changes since 5.79.0, only listing bugfixes:
  * Fix preview delegate's update badge being cut off (kde#433535)
  * qtquickengine: Do not emit entriesChanged signal when we clear an empty list (kde#431568)
  * qtquickengine: Check if KNSCore::Engine is valid before searching (kde#402432)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1617624000">- Update to 5.81.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.81.0
- Changes since 5.80.0:
  * qtquickengine: Do not forward intermediate states
  * quickengine: Emit entryEvent signal with enum which is exposed to QML
  * Create a NewStuff.Action component, add NewStuff.Settings global
  * Fix minor typos
  * Less risk of infinite spinner on uninstalling KPackage based things (kde#434371)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1619870400">- Update to 5.82.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.82.0
- Changes since 5.81.0:
  * Deprecate quickengine changedEntries &amp; related methods
  * Do not show error when installation is canceled (kde#436355)
  * Port away from QStringRef
  * Fix mem leak in autotests found by asan
  * NewStuff Dialog: Forward entryEvent signal
  * NewStuff Button: Forward entryEvent signal
  * Make QML GHNS dialog a tiny bit wider (kde#435547)
  * ensure .desktop files are executable</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1622894400">- Update to 5.83.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.83.0
- Too many changes to list here.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1625400000">- Update to 5.84.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.84.0
- Too many changes to list here.
- Only install the license files once</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1628251200">- Update to 5.85.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.85.0
- Changes since 5.84.0:
  * It's deprecated in 5.85 not 5.80
  * Rework UploadDialog, add QML version, and a new ProvidersModel
  * Simplify lookup of knsrc files using KFileUtils::findAllUniqueFiles method
  * Forward Attica provider icons to KNSCore::Provider
  * Handle payload-only entries during update operations</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1630929600">- Update to 5.86.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.86.0
- Changes since 5.85.0:
  * replace "MacOSX" with "macOS"
  * Port from KMountPoint to QStorageInfo
  * Set KLocalizedContext for QtQuickDialogWrapper
  * Use QToolButton for reset button as we have the same style</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1631707200">- Drop the unneeded baselibs.conf.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1632830400">- Add fix-crash.patch. This patch fixes a crash in DownloadWidget.
  (kde#443025)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1633089600">- Add upstream patch:
  * 0001-Include-a-user-agent-on-KNS-requests.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1633262400">- Update to 5.87.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.87.0
- Too many changes since 5.86.0, only listing bugfixes:
  * Fix crash in DownloadWidget (kde#443025)
- Drop upstream patches:
  * 0001-Include-a-user-agent-on-KNS-requests.patch
  * fix-crash.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1636286400">- Update to 5.88.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.88.0
- Changes since 5.87.0:
  * Port to enum values for KAuthorized::authorizeAction
  * Make sure that we query KService with lowercase desktop names since it
    seems that KService stores everything lowercase. (kde#417575)
  * Add FreeBSD CI</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1636286401">- Strip 'Source' URL for faster submissions</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638619200">- Update to 5.89.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.89.0
- Changes since 5.88.0:
  * Improve presentation of multi-file download sheet
  * Use RTL half-star rating icon when in RTL mode</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1641211200">- Update to 5.90.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.90.0
- Changes since 5.89.0:
  * Drop lib prefix when building for Windows (kde#446950)
  * Remove defunct manual khotnewstuff_upload test
  * Compile fixes for Qt 6
  * Fix i18n* functions for knewstuff-dialog not existing
  * Port all KF deprecations until 5.89
  * Unnest private classes, use std::unique_ptr to manage lifetime
  * Generate own export header for KNSWidgets module
  * Fix include install directory
  * Fix library name
  * Move KNS3::Action class to new KNSWidgets submodule
  * New class: KNS3::Action</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1645272000">- Add patches to reduce requests to download.kde.org (boo#1196199):
  * 0001-Add-http2-to-KNewStuff-requests.patch
  * 0002-Engine-Ensure-we-are-not-using-the-wrong-ProvidersUr.patch
  * 0003-Add-conditional-cache-preference-to-http-requests.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1653912000">- Add patch to fix content downloading (boo#1200014)
  * 0001-Do-not-set-user-visible-name-as-additional-agent-inf.patch</changelog>
</package>
<package pkgid="e9d9ad00f293cc5f3feb487cba61f09467a75190105957bbfbd16a4784543d8b" name="knewstuff-core-devel" arch="x86_64">
  <version epoch="0" ver="5.90.0" rel="bp154.3.3.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1607169600">- Update to 5.77.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.77.0
- Too many changes since 5.76.0, only listing bugfixes:
  * Reuse QWidgets dialog (kde#416328)
  * Fix entry disappearing too early from updatable page (kde#427801)
  * Remove entry from cache before inserting new entry (kde#424919)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1609934400">- Update to 5.78.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.78.0
- Changes since 5.77.0:
  * Deprecate standardAction and standardActionUpload methods
  * Fix QtQuick model if there is only a payload, but no download links
  * Add trailing comma to enum values
  * Add clang-format target
  * Add a dptr to Cache, and move the throttle timer there to fix crash (kde#429442)
  * Refactor KNS3::Button to use new dialog internally
  * Create wrapper class for QML dialog
  * Fix unit tests for kmoretools
  * Check if version is empty before concatenating version</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1612785600">- Update to 5.79.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.79.0
- Too many changes to list here.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1615118400">- Update to 5.80.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.80.0
- Too many changes since 5.79.0, only listing bugfixes:
  * Fix preview delegate's update badge being cut off (kde#433535)
  * qtquickengine: Do not emit entriesChanged signal when we clear an empty list (kde#431568)
  * qtquickengine: Check if KNSCore::Engine is valid before searching (kde#402432)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1617624000">- Update to 5.81.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.81.0
- Changes since 5.80.0:
  * qtquickengine: Do not forward intermediate states
  * quickengine: Emit entryEvent signal with enum which is exposed to QML
  * Create a NewStuff.Action component, add NewStuff.Settings global
  * Fix minor typos
  * Less risk of infinite spinner on uninstalling KPackage based things (kde#434371)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1619870400">- Update to 5.82.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.82.0
- Changes since 5.81.0:
  * Deprecate quickengine changedEntries &amp; related methods
  * Do not show error when installation is canceled (kde#436355)
  * Port away from QStringRef
  * Fix mem leak in autotests found by asan
  * NewStuff Dialog: Forward entryEvent signal
  * NewStuff Button: Forward entryEvent signal
  * Make QML GHNS dialog a tiny bit wider (kde#435547)
  * ensure .desktop files are executable</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1622894400">- Update to 5.83.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.83.0
- Too many changes to list here.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1625400000">- Update to 5.84.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.84.0
- Too many changes to list here.
- Only install the license files once</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1628251200">- Update to 5.85.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.85.0
- Changes since 5.84.0:
  * It's deprecated in 5.85 not 5.80
  * Rework UploadDialog, add QML version, and a new ProvidersModel
  * Simplify lookup of knsrc files using KFileUtils::findAllUniqueFiles method
  * Forward Attica provider icons to KNSCore::Provider
  * Handle payload-only entries during update operations</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1630929600">- Update to 5.86.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.86.0
- Changes since 5.85.0:
  * replace "MacOSX" with "macOS"
  * Port from KMountPoint to QStorageInfo
  * Set KLocalizedContext for QtQuickDialogWrapper
  * Use QToolButton for reset button as we have the same style</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1631707200">- Drop the unneeded baselibs.conf.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1632830400">- Add fix-crash.patch. This patch fixes a crash in DownloadWidget.
  (kde#443025)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1633089600">- Add upstream patch:
  * 0001-Include-a-user-agent-on-KNS-requests.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1633262400">- Update to 5.87.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.87.0
- Too many changes since 5.86.0, only listing bugfixes:
  * Fix crash in DownloadWidget (kde#443025)
- Drop upstream patches:
  * 0001-Include-a-user-agent-on-KNS-requests.patch
  * fix-crash.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1636286400">- Update to 5.88.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.88.0
- Changes since 5.87.0:
  * Port to enum values for KAuthorized::authorizeAction
  * Make sure that we query KService with lowercase desktop names since it
    seems that KService stores everything lowercase. (kde#417575)
  * Add FreeBSD CI</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1636286401">- Strip 'Source' URL for faster submissions</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638619200">- Update to 5.89.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.89.0
- Changes since 5.88.0:
  * Improve presentation of multi-file download sheet
  * Use RTL half-star rating icon when in RTL mode</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1641211200">- Update to 5.90.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.90.0
- Changes since 5.89.0:
  * Drop lib prefix when building for Windows (kde#446950)
  * Remove defunct manual khotnewstuff_upload test
  * Compile fixes for Qt 6
  * Fix i18n* functions for knewstuff-dialog not existing
  * Port all KF deprecations until 5.89
  * Unnest private classes, use std::unique_ptr to manage lifetime
  * Generate own export header for KNSWidgets module
  * Fix include install directory
  * Fix library name
  * Move KNS3::Action class to new KNSWidgets submodule
  * New class: KNS3::Action</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1645272000">- Add patches to reduce requests to download.kde.org (boo#1196199):
  * 0001-Add-http2-to-KNewStuff-requests.patch
  * 0002-Engine-Ensure-we-are-not-using-the-wrong-ProvidersUr.patch
  * 0003-Add-conditional-cache-preference-to-http-requests.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1653912000">- Add patch to fix content downloading (boo#1200014)
  * 0001-Do-not-set-user-visible-name-as-additional-agent-inf.patch</changelog>
</package>
<package pkgid="cdd6b307ddec0ed4551ed0fec3a6882febbd9092f8a87547d97d5fe7d9a03821" name="knewstuff-devel" arch="aarch64">
  <version epoch="0" ver="5.90.0" rel="bp154.3.3.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1607169600">- Update to 5.77.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.77.0
- Too many changes since 5.76.0, only listing bugfixes:
  * Reuse QWidgets dialog (kde#416328)
  * Fix entry disappearing too early from updatable page (kde#427801)
  * Remove entry from cache before inserting new entry (kde#424919)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1609934400">- Update to 5.78.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.78.0
- Changes since 5.77.0:
  * Deprecate standardAction and standardActionUpload methods
  * Fix QtQuick model if there is only a payload, but no download links
  * Add trailing comma to enum values
  * Add clang-format target
  * Add a dptr to Cache, and move the throttle timer there to fix crash (kde#429442)
  * Refactor KNS3::Button to use new dialog internally
  * Create wrapper class for QML dialog
  * Fix unit tests for kmoretools
  * Check if version is empty before concatenating version</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1612785600">- Update to 5.79.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.79.0
- Too many changes to list here.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1615118400">- Update to 5.80.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.80.0
- Too many changes since 5.79.0, only listing bugfixes:
  * Fix preview delegate's update badge being cut off (kde#433535)
  * qtquickengine: Do not emit entriesChanged signal when we clear an empty list (kde#431568)
  * qtquickengine: Check if KNSCore::Engine is valid before searching (kde#402432)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1617624000">- Update to 5.81.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.81.0
- Changes since 5.80.0:
  * qtquickengine: Do not forward intermediate states
  * quickengine: Emit entryEvent signal with enum which is exposed to QML
  * Create a NewStuff.Action component, add NewStuff.Settings global
  * Fix minor typos
  * Less risk of infinite spinner on uninstalling KPackage based things (kde#434371)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1619870400">- Update to 5.82.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.82.0
- Changes since 5.81.0:
  * Deprecate quickengine changedEntries &amp; related methods
  * Do not show error when installation is canceled (kde#436355)
  * Port away from QStringRef
  * Fix mem leak in autotests found by asan
  * NewStuff Dialog: Forward entryEvent signal
  * NewStuff Button: Forward entryEvent signal
  * Make QML GHNS dialog a tiny bit wider (kde#435547)
  * ensure .desktop files are executable</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1622894400">- Update to 5.83.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.83.0
- Too many changes to list here.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1625400000">- Update to 5.84.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.84.0
- Too many changes to list here.
- Only install the license files once</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1628251200">- Update to 5.85.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.85.0
- Changes since 5.84.0:
  * It's deprecated in 5.85 not 5.80
  * Rework UploadDialog, add QML version, and a new ProvidersModel
  * Simplify lookup of knsrc files using KFileUtils::findAllUniqueFiles method
  * Forward Attica provider icons to KNSCore::Provider
  * Handle payload-only entries during update operations</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1630929600">- Update to 5.86.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.86.0
- Changes since 5.85.0:
  * replace "MacOSX" with "macOS"
  * Port from KMountPoint to QStorageInfo
  * Set KLocalizedContext for QtQuickDialogWrapper
  * Use QToolButton for reset button as we have the same style</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1631707200">- Drop the unneeded baselibs.conf.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1632830400">- Add fix-crash.patch. This patch fixes a crash in DownloadWidget.
  (kde#443025)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1633089600">- Add upstream patch:
  * 0001-Include-a-user-agent-on-KNS-requests.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1633262400">- Update to 5.87.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.87.0
- Too many changes since 5.86.0, only listing bugfixes:
  * Fix crash in DownloadWidget (kde#443025)
- Drop upstream patches:
  * 0001-Include-a-user-agent-on-KNS-requests.patch
  * fix-crash.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1636286400">- Update to 5.88.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.88.0
- Changes since 5.87.0:
  * Port to enum values for KAuthorized::authorizeAction
  * Make sure that we query KService with lowercase desktop names since it
    seems that KService stores everything lowercase. (kde#417575)
  * Add FreeBSD CI</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1636286401">- Strip 'Source' URL for faster submissions</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638619200">- Update to 5.89.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.89.0
- Changes since 5.88.0:
  * Improve presentation of multi-file download sheet
  * Use RTL half-star rating icon when in RTL mode</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1641211200">- Update to 5.90.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.90.0
- Changes since 5.89.0:
  * Drop lib prefix when building for Windows (kde#446950)
  * Remove defunct manual khotnewstuff_upload test
  * Compile fixes for Qt 6
  * Fix i18n* functions for knewstuff-dialog not existing
  * Port all KF deprecations until 5.89
  * Unnest private classes, use std::unique_ptr to manage lifetime
  * Generate own export header for KNSWidgets module
  * Fix include install directory
  * Fix library name
  * Move KNS3::Action class to new KNSWidgets submodule
  * New class: KNS3::Action</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1645272000">- Add patches to reduce requests to download.kde.org (boo#1196199):
  * 0001-Add-http2-to-KNewStuff-requests.patch
  * 0002-Engine-Ensure-we-are-not-using-the-wrong-ProvidersUr.patch
  * 0003-Add-conditional-cache-preference-to-http-requests.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1653912000">- Add patch to fix content downloading (boo#1200014)
  * 0001-Do-not-set-user-visible-name-as-additional-agent-inf.patch</changelog>
</package>
<package pkgid="df07d4a57a5e57d83fefc77bc388bfd9e9c128fc246368e78fb52bb8c151faf8" name="knewstuff-devel" arch="ppc64le">
  <version epoch="0" ver="5.90.0" rel="bp154.3.3.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1607169600">- Update to 5.77.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.77.0
- Too many changes since 5.76.0, only listing bugfixes:
  * Reuse QWidgets dialog (kde#416328)
  * Fix entry disappearing too early from updatable page (kde#427801)
  * Remove entry from cache before inserting new entry (kde#424919)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1609934400">- Update to 5.78.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.78.0
- Changes since 5.77.0:
  * Deprecate standardAction and standardActionUpload methods
  * Fix QtQuick model if there is only a payload, but no download links
  * Add trailing comma to enum values
  * Add clang-format target
  * Add a dptr to Cache, and move the throttle timer there to fix crash (kde#429442)
  * Refactor KNS3::Button to use new dialog internally
  * Create wrapper class for QML dialog
  * Fix unit tests for kmoretools
  * Check if version is empty before concatenating version</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1612785600">- Update to 5.79.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.79.0
- Too many changes to list here.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1615118400">- Update to 5.80.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.80.0
- Too many changes since 5.79.0, only listing bugfixes:
  * Fix preview delegate's update badge being cut off (kde#433535)
  * qtquickengine: Do not emit entriesChanged signal when we clear an empty list (kde#431568)
  * qtquickengine: Check if KNSCore::Engine is valid before searching (kde#402432)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1617624000">- Update to 5.81.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.81.0
- Changes since 5.80.0:
  * qtquickengine: Do not forward intermediate states
  * quickengine: Emit entryEvent signal with enum which is exposed to QML
  * Create a NewStuff.Action component, add NewStuff.Settings global
  * Fix minor typos
  * Less risk of infinite spinner on uninstalling KPackage based things (kde#434371)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1619870400">- Update to 5.82.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.82.0
- Changes since 5.81.0:
  * Deprecate quickengine changedEntries &amp; related methods
  * Do not show error when installation is canceled (kde#436355)
  * Port away from QStringRef
  * Fix mem leak in autotests found by asan
  * NewStuff Dialog: Forward entryEvent signal
  * NewStuff Button: Forward entryEvent signal
  * Make QML GHNS dialog a tiny bit wider (kde#435547)
  * ensure .desktop files are executable</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1622894400">- Update to 5.83.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.83.0
- Too many changes to list here.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1625400000">- Update to 5.84.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.84.0
- Too many changes to list here.
- Only install the license files once</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1628251200">- Update to 5.85.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.85.0
- Changes since 5.84.0:
  * It's deprecated in 5.85 not 5.80
  * Rework UploadDialog, add QML version, and a new ProvidersModel
  * Simplify lookup of knsrc files using KFileUtils::findAllUniqueFiles method
  * Forward Attica provider icons to KNSCore::Provider
  * Handle payload-only entries during update operations</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1630929600">- Update to 5.86.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.86.0
- Changes since 5.85.0:
  * replace "MacOSX" with "macOS"
  * Port from KMountPoint to QStorageInfo
  * Set KLocalizedContext for QtQuickDialogWrapper
  * Use QToolButton for reset button as we have the same style</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1631707200">- Drop the unneeded baselibs.conf.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1632830400">- Add fix-crash.patch. This patch fixes a crash in DownloadWidget.
  (kde#443025)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1633089600">- Add upstream patch:
  * 0001-Include-a-user-agent-on-KNS-requests.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1633262400">- Update to 5.87.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.87.0
- Too many changes since 5.86.0, only listing bugfixes:
  * Fix crash in DownloadWidget (kde#443025)
- Drop upstream patches:
  * 0001-Include-a-user-agent-on-KNS-requests.patch
  * fix-crash.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1636286400">- Update to 5.88.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.88.0
- Changes since 5.87.0:
  * Port to enum values for KAuthorized::authorizeAction
  * Make sure that we query KService with lowercase desktop names since it
    seems that KService stores everything lowercase. (kde#417575)
  * Add FreeBSD CI</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1636286401">- Strip 'Source' URL for faster submissions</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638619200">- Update to 5.89.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.89.0
- Changes since 5.88.0:
  * Improve presentation of multi-file download sheet
  * Use RTL half-star rating icon when in RTL mode</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1641211200">- Update to 5.90.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.90.0
- Changes since 5.89.0:
  * Drop lib prefix when building for Windows (kde#446950)
  * Remove defunct manual khotnewstuff_upload test
  * Compile fixes for Qt 6
  * Fix i18n* functions for knewstuff-dialog not existing
  * Port all KF deprecations until 5.89
  * Unnest private classes, use std::unique_ptr to manage lifetime
  * Generate own export header for KNSWidgets module
  * Fix include install directory
  * Fix library name
  * Move KNS3::Action class to new KNSWidgets submodule
  * New class: KNS3::Action</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1645272000">- Add patches to reduce requests to download.kde.org (boo#1196199):
  * 0001-Add-http2-to-KNewStuff-requests.patch
  * 0002-Engine-Ensure-we-are-not-using-the-wrong-ProvidersUr.patch
  * 0003-Add-conditional-cache-preference-to-http-requests.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1653912000">- Add patch to fix content downloading (boo#1200014)
  * 0001-Do-not-set-user-visible-name-as-additional-agent-inf.patch</changelog>
</package>
<package pkgid="f9b20e6eba2f688f8b05ef09a71277aa356815baef2cea538832874916c3d63f" name="knewstuff-devel" arch="s390x">
  <version epoch="0" ver="5.90.0" rel="bp154.3.3.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1607169600">- Update to 5.77.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.77.0
- Too many changes since 5.76.0, only listing bugfixes:
  * Reuse QWidgets dialog (kde#416328)
  * Fix entry disappearing too early from updatable page (kde#427801)
  * Remove entry from cache before inserting new entry (kde#424919)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1609934400">- Update to 5.78.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.78.0
- Changes since 5.77.0:
  * Deprecate standardAction and standardActionUpload methods
  * Fix QtQuick model if there is only a payload, but no download links
  * Add trailing comma to enum values
  * Add clang-format target
  * Add a dptr to Cache, and move the throttle timer there to fix crash (kde#429442)
  * Refactor KNS3::Button to use new dialog internally
  * Create wrapper class for QML dialog
  * Fix unit tests for kmoretools
  * Check if version is empty before concatenating version</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1612785600">- Update to 5.79.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.79.0
- Too many changes to list here.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1615118400">- Update to 5.80.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.80.0
- Too many changes since 5.79.0, only listing bugfixes:
  * Fix preview delegate's update badge being cut off (kde#433535)
  * qtquickengine: Do not emit entriesChanged signal when we clear an empty list (kde#431568)
  * qtquickengine: Check if KNSCore::Engine is valid before searching (kde#402432)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1617624000">- Update to 5.81.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.81.0
- Changes since 5.80.0:
  * qtquickengine: Do not forward intermediate states
  * quickengine: Emit entryEvent signal with enum which is exposed to QML
  * Create a NewStuff.Action component, add NewStuff.Settings global
  * Fix minor typos
  * Less risk of infinite spinner on uninstalling KPackage based things (kde#434371)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1619870400">- Update to 5.82.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.82.0
- Changes since 5.81.0:
  * Deprecate quickengine changedEntries &amp; related methods
  * Do not show error when installation is canceled (kde#436355)
  * Port away from QStringRef
  * Fix mem leak in autotests found by asan
  * NewStuff Dialog: Forward entryEvent signal
  * NewStuff Button: Forward entryEvent signal
  * Make QML GHNS dialog a tiny bit wider (kde#435547)
  * ensure .desktop files are executable</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1622894400">- Update to 5.83.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.83.0
- Too many changes to list here.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1625400000">- Update to 5.84.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.84.0
- Too many changes to list here.
- Only install the license files once</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1628251200">- Update to 5.85.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.85.0
- Changes since 5.84.0:
  * It's deprecated in 5.85 not 5.80
  * Rework UploadDialog, add QML version, and a new ProvidersModel
  * Simplify lookup of knsrc files using KFileUtils::findAllUniqueFiles method
  * Forward Attica provider icons to KNSCore::Provider
  * Handle payload-only entries during update operations</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1630929600">- Update to 5.86.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.86.0
- Changes since 5.85.0:
  * replace "MacOSX" with "macOS"
  * Port from KMountPoint to QStorageInfo
  * Set KLocalizedContext for QtQuickDialogWrapper
  * Use QToolButton for reset button as we have the same style</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1631707200">- Drop the unneeded baselibs.conf.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1632830400">- Add fix-crash.patch. This patch fixes a crash in DownloadWidget.
  (kde#443025)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1633089600">- Add upstream patch:
  * 0001-Include-a-user-agent-on-KNS-requests.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1633262400">- Update to 5.87.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.87.0
- Too many changes since 5.86.0, only listing bugfixes:
  * Fix crash in DownloadWidget (kde#443025)
- Drop upstream patches:
  * 0001-Include-a-user-agent-on-KNS-requests.patch
  * fix-crash.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1636286400">- Update to 5.88.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.88.0
- Changes since 5.87.0:
  * Port to enum values for KAuthorized::authorizeAction
  * Make sure that we query KService with lowercase desktop names since it
    seems that KService stores everything lowercase. (kde#417575)
  * Add FreeBSD CI</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1636286401">- Strip 'Source' URL for faster submissions</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638619200">- Update to 5.89.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.89.0
- Changes since 5.88.0:
  * Improve presentation of multi-file download sheet
  * Use RTL half-star rating icon when in RTL mode</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1641211200">- Update to 5.90.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.90.0
- Changes since 5.89.0:
  * Drop lib prefix when building for Windows (kde#446950)
  * Remove defunct manual khotnewstuff_upload test
  * Compile fixes for Qt 6
  * Fix i18n* functions for knewstuff-dialog not existing
  * Port all KF deprecations until 5.89
  * Unnest private classes, use std::unique_ptr to manage lifetime
  * Generate own export header for KNSWidgets module
  * Fix include install directory
  * Fix library name
  * Move KNS3::Action class to new KNSWidgets submodule
  * New class: KNS3::Action</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1645272000">- Add patches to reduce requests to download.kde.org (boo#1196199):
  * 0001-Add-http2-to-KNewStuff-requests.patch
  * 0002-Engine-Ensure-we-are-not-using-the-wrong-ProvidersUr.patch
  * 0003-Add-conditional-cache-preference-to-http-requests.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1653912000">- Add patch to fix content downloading (boo#1200014)
  * 0001-Do-not-set-user-visible-name-as-additional-agent-inf.patch</changelog>
</package>
<package pkgid="393f25c26862cd2eb40d79317915ec9cda85a9cf78724d3fb1a5396a2c796af2" name="knewstuff-devel" arch="x86_64">
  <version epoch="0" ver="5.90.0" rel="bp154.3.3.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1607169600">- Update to 5.77.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.77.0
- Too many changes since 5.76.0, only listing bugfixes:
  * Reuse QWidgets dialog (kde#416328)
  * Fix entry disappearing too early from updatable page (kde#427801)
  * Remove entry from cache before inserting new entry (kde#424919)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1609934400">- Update to 5.78.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.78.0
- Changes since 5.77.0:
  * Deprecate standardAction and standardActionUpload methods
  * Fix QtQuick model if there is only a payload, but no download links
  * Add trailing comma to enum values
  * Add clang-format target
  * Add a dptr to Cache, and move the throttle timer there to fix crash (kde#429442)
  * Refactor KNS3::Button to use new dialog internally
  * Create wrapper class for QML dialog
  * Fix unit tests for kmoretools
  * Check if version is empty before concatenating version</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1612785600">- Update to 5.79.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.79.0
- Too many changes to list here.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1615118400">- Update to 5.80.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.80.0
- Too many changes since 5.79.0, only listing bugfixes:
  * Fix preview delegate's update badge being cut off (kde#433535)
  * qtquickengine: Do not emit entriesChanged signal when we clear an empty list (kde#431568)
  * qtquickengine: Check if KNSCore::Engine is valid before searching (kde#402432)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1617624000">- Update to 5.81.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.81.0
- Changes since 5.80.0:
  * qtquickengine: Do not forward intermediate states
  * quickengine: Emit entryEvent signal with enum which is exposed to QML
  * Create a NewStuff.Action component, add NewStuff.Settings global
  * Fix minor typos
  * Less risk of infinite spinner on uninstalling KPackage based things (kde#434371)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1619870400">- Update to 5.82.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.82.0
- Changes since 5.81.0:
  * Deprecate quickengine changedEntries &amp; related methods
  * Do not show error when installation is canceled (kde#436355)
  * Port away from QStringRef
  * Fix mem leak in autotests found by asan
  * NewStuff Dialog: Forward entryEvent signal
  * NewStuff Button: Forward entryEvent signal
  * Make QML GHNS dialog a tiny bit wider (kde#435547)
  * ensure .desktop files are executable</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1622894400">- Update to 5.83.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.83.0
- Too many changes to list here.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1625400000">- Update to 5.84.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.84.0
- Too many changes to list here.
- Only install the license files once</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1628251200">- Update to 5.85.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.85.0
- Changes since 5.84.0:
  * It's deprecated in 5.85 not 5.80
  * Rework UploadDialog, add QML version, and a new ProvidersModel
  * Simplify lookup of knsrc files using KFileUtils::findAllUniqueFiles method
  * Forward Attica provider icons to KNSCore::Provider
  * Handle payload-only entries during update operations</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1630929600">- Update to 5.86.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.86.0
- Changes since 5.85.0:
  * replace "MacOSX" with "macOS"
  * Port from KMountPoint to QStorageInfo
  * Set KLocalizedContext for QtQuickDialogWrapper
  * Use QToolButton for reset button as we have the same style</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1631707200">- Drop the unneeded baselibs.conf.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1632830400">- Add fix-crash.patch. This patch fixes a crash in DownloadWidget.
  (kde#443025)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1633089600">- Add upstream patch:
  * 0001-Include-a-user-agent-on-KNS-requests.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1633262400">- Update to 5.87.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.87.0
- Too many changes since 5.86.0, only listing bugfixes:
  * Fix crash in DownloadWidget (kde#443025)
- Drop upstream patches:
  * 0001-Include-a-user-agent-on-KNS-requests.patch
  * fix-crash.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1636286400">- Update to 5.88.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.88.0
- Changes since 5.87.0:
  * Port to enum values for KAuthorized::authorizeAction
  * Make sure that we query KService with lowercase desktop names since it
    seems that KService stores everything lowercase. (kde#417575)
  * Add FreeBSD CI</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1636286401">- Strip 'Source' URL for faster submissions</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638619200">- Update to 5.89.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.89.0
- Changes since 5.88.0:
  * Improve presentation of multi-file download sheet
  * Use RTL half-star rating icon when in RTL mode</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1641211200">- Update to 5.90.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.90.0
- Changes since 5.89.0:
  * Drop lib prefix when building for Windows (kde#446950)
  * Remove defunct manual khotnewstuff_upload test
  * Compile fixes for Qt 6
  * Fix i18n* functions for knewstuff-dialog not existing
  * Port all KF deprecations until 5.89
  * Unnest private classes, use std::unique_ptr to manage lifetime
  * Generate own export header for KNSWidgets module
  * Fix include install directory
  * Fix library name
  * Move KNS3::Action class to new KNSWidgets submodule
  * New class: KNS3::Action</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1645272000">- Add patches to reduce requests to download.kde.org (boo#1196199):
  * 0001-Add-http2-to-KNewStuff-requests.patch
  * 0002-Engine-Ensure-we-are-not-using-the-wrong-ProvidersUr.patch
  * 0003-Add-conditional-cache-preference-to-http-requests.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1653912000">- Add patch to fix content downloading (boo#1200014)
  * 0001-Do-not-set-user-visible-name-as-additional-agent-inf.patch</changelog>
</package>
<package pkgid="5c82a0d90b80db8553538ffae1ea50c3e681f5b1810cc4c1778bb07f079b3f9c" name="knewstuff-imports" arch="aarch64">
  <version epoch="0" ver="5.90.0" rel="bp154.3.3.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1607169600">- Update to 5.77.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.77.0
- Too many changes since 5.76.0, only listing bugfixes:
  * Reuse QWidgets dialog (kde#416328)
  * Fix entry disappearing too early from updatable page (kde#427801)
  * Remove entry from cache before inserting new entry (kde#424919)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1609934400">- Update to 5.78.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.78.0
- Changes since 5.77.0:
  * Deprecate standardAction and standardActionUpload methods
  * Fix QtQuick model if there is only a payload, but no download links
  * Add trailing comma to enum values
  * Add clang-format target
  * Add a dptr to Cache, and move the throttle timer there to fix crash (kde#429442)
  * Refactor KNS3::Button to use new dialog internally
  * Create wrapper class for QML dialog
  * Fix unit tests for kmoretools
  * Check if version is empty before concatenating version</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1612785600">- Update to 5.79.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.79.0
- Too many changes to list here.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1615118400">- Update to 5.80.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.80.0
- Too many changes since 5.79.0, only listing bugfixes:
  * Fix preview delegate's update badge being cut off (kde#433535)
  * qtquickengine: Do not emit entriesChanged signal when we clear an empty list (kde#431568)
  * qtquickengine: Check if KNSCore::Engine is valid before searching (kde#402432)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1617624000">- Update to 5.81.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.81.0
- Changes since 5.80.0:
  * qtquickengine: Do not forward intermediate states
  * quickengine: Emit entryEvent signal with enum which is exposed to QML
  * Create a NewStuff.Action component, add NewStuff.Settings global
  * Fix minor typos
  * Less risk of infinite spinner on uninstalling KPackage based things (kde#434371)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1619870400">- Update to 5.82.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.82.0
- Changes since 5.81.0:
  * Deprecate quickengine changedEntries &amp; related methods
  * Do not show error when installation is canceled (kde#436355)
  * Port away from QStringRef
  * Fix mem leak in autotests found by asan
  * NewStuff Dialog: Forward entryEvent signal
  * NewStuff Button: Forward entryEvent signal
  * Make QML GHNS dialog a tiny bit wider (kde#435547)
  * ensure .desktop files are executable</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1622894400">- Update to 5.83.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.83.0
- Too many changes to list here.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1625400000">- Update to 5.84.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.84.0
- Too many changes to list here.
- Only install the license files once</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1628251200">- Update to 5.85.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.85.0
- Changes since 5.84.0:
  * It's deprecated in 5.85 not 5.80
  * Rework UploadDialog, add QML version, and a new ProvidersModel
  * Simplify lookup of knsrc files using KFileUtils::findAllUniqueFiles method
  * Forward Attica provider icons to KNSCore::Provider
  * Handle payload-only entries during update operations</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1630929600">- Update to 5.86.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.86.0
- Changes since 5.85.0:
  * replace "MacOSX" with "macOS"
  * Port from KMountPoint to QStorageInfo
  * Set KLocalizedContext for QtQuickDialogWrapper
  * Use QToolButton for reset button as we have the same style</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1631707200">- Drop the unneeded baselibs.conf.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1632830400">- Add fix-crash.patch. This patch fixes a crash in DownloadWidget.
  (kde#443025)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1633089600">- Add upstream patch:
  * 0001-Include-a-user-agent-on-KNS-requests.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1633262400">- Update to 5.87.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.87.0
- Too many changes since 5.86.0, only listing bugfixes:
  * Fix crash in DownloadWidget (kde#443025)
- Drop upstream patches:
  * 0001-Include-a-user-agent-on-KNS-requests.patch
  * fix-crash.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1636286400">- Update to 5.88.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.88.0
- Changes since 5.87.0:
  * Port to enum values for KAuthorized::authorizeAction
  * Make sure that we query KService with lowercase desktop names since it
    seems that KService stores everything lowercase. (kde#417575)
  * Add FreeBSD CI</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1636286401">- Strip 'Source' URL for faster submissions</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638619200">- Update to 5.89.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.89.0
- Changes since 5.88.0:
  * Improve presentation of multi-file download sheet
  * Use RTL half-star rating icon when in RTL mode</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1641211200">- Update to 5.90.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.90.0
- Changes since 5.89.0:
  * Drop lib prefix when building for Windows (kde#446950)
  * Remove defunct manual khotnewstuff_upload test
  * Compile fixes for Qt 6
  * Fix i18n* functions for knewstuff-dialog not existing
  * Port all KF deprecations until 5.89
  * Unnest private classes, use std::unique_ptr to manage lifetime
  * Generate own export header for KNSWidgets module
  * Fix include install directory
  * Fix library name
  * Move KNS3::Action class to new KNSWidgets submodule
  * New class: KNS3::Action</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1645272000">- Add patches to reduce requests to download.kde.org (boo#1196199):
  * 0001-Add-http2-to-KNewStuff-requests.patch
  * 0002-Engine-Ensure-we-are-not-using-the-wrong-ProvidersUr.patch
  * 0003-Add-conditional-cache-preference-to-http-requests.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1653912000">- Add patch to fix content downloading (boo#1200014)
  * 0001-Do-not-set-user-visible-name-as-additional-agent-inf.patch</changelog>
</package>
<package pkgid="778fa9fe79777fbcc9077aeb37e50653110431bf2145d6a34be504ba2fd8ed5b" name="knewstuff-imports" arch="ppc64le">
  <version epoch="0" ver="5.90.0" rel="bp154.3.3.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1607169600">- Update to 5.77.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.77.0
- Too many changes since 5.76.0, only listing bugfixes:
  * Reuse QWidgets dialog (kde#416328)
  * Fix entry disappearing too early from updatable page (kde#427801)
  * Remove entry from cache before inserting new entry (kde#424919)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1609934400">- Update to 5.78.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.78.0
- Changes since 5.77.0:
  * Deprecate standardAction and standardActionUpload methods
  * Fix QtQuick model if there is only a payload, but no download links
  * Add trailing comma to enum values
  * Add clang-format target
  * Add a dptr to Cache, and move the throttle timer there to fix crash (kde#429442)
  * Refactor KNS3::Button to use new dialog internally
  * Create wrapper class for QML dialog
  * Fix unit tests for kmoretools
  * Check if version is empty before concatenating version</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1612785600">- Update to 5.79.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.79.0
- Too many changes to list here.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1615118400">- Update to 5.80.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.80.0
- Too many changes since 5.79.0, only listing bugfixes:
  * Fix preview delegate's update badge being cut off (kde#433535)
  * qtquickengine: Do not emit entriesChanged signal when we clear an empty list (kde#431568)
  * qtquickengine: Check if KNSCore::Engine is valid before searching (kde#402432)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1617624000">- Update to 5.81.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.81.0
- Changes since 5.80.0:
  * qtquickengine: Do not forward intermediate states
  * quickengine: Emit entryEvent signal with enum which is exposed to QML
  * Create a NewStuff.Action component, add NewStuff.Settings global
  * Fix minor typos
  * Less risk of infinite spinner on uninstalling KPackage based things (kde#434371)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1619870400">- Update to 5.82.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.82.0
- Changes since 5.81.0:
  * Deprecate quickengine changedEntries &amp; related methods
  * Do not show error when installation is canceled (kde#436355)
  * Port away from QStringRef
  * Fix mem leak in autotests found by asan
  * NewStuff Dialog: Forward entryEvent signal
  * NewStuff Button: Forward entryEvent signal
  * Make QML GHNS dialog a tiny bit wider (kde#435547)
  * ensure .desktop files are executable</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1622894400">- Update to 5.83.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.83.0
- Too many changes to list here.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1625400000">- Update to 5.84.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.84.0
- Too many changes to list here.
- Only install the license files once</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1628251200">- Update to 5.85.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.85.0
- Changes since 5.84.0:
  * It's deprecated in 5.85 not 5.80
  * Rework UploadDialog, add QML version, and a new ProvidersModel
  * Simplify lookup of knsrc files using KFileUtils::findAllUniqueFiles method
  * Forward Attica provider icons to KNSCore::Provider
  * Handle payload-only entries during update operations</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1630929600">- Update to 5.86.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.86.0
- Changes since 5.85.0:
  * replace "MacOSX" with "macOS"
  * Port from KMountPoint to QStorageInfo
  * Set KLocalizedContext for QtQuickDialogWrapper
  * Use QToolButton for reset button as we have the same style</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1631707200">- Drop the unneeded baselibs.conf.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1632830400">- Add fix-crash.patch. This patch fixes a crash in DownloadWidget.
  (kde#443025)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1633089600">- Add upstream patch:
  * 0001-Include-a-user-agent-on-KNS-requests.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1633262400">- Update to 5.87.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.87.0
- Too many changes since 5.86.0, only listing bugfixes:
  * Fix crash in DownloadWidget (kde#443025)
- Drop upstream patches:
  * 0001-Include-a-user-agent-on-KNS-requests.patch
  * fix-crash.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1636286400">- Update to 5.88.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.88.0
- Changes since 5.87.0:
  * Port to enum values for KAuthorized::authorizeAction
  * Make sure that we query KService with lowercase desktop names since it
    seems that KService stores everything lowercase. (kde#417575)
  * Add FreeBSD CI</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1636286401">- Strip 'Source' URL for faster submissions</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638619200">- Update to 5.89.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.89.0
- Changes since 5.88.0:
  * Improve presentation of multi-file download sheet
  * Use RTL half-star rating icon when in RTL mode</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1641211200">- Update to 5.90.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.90.0
- Changes since 5.89.0:
  * Drop lib prefix when building for Windows (kde#446950)
  * Remove defunct manual khotnewstuff_upload test
  * Compile fixes for Qt 6
  * Fix i18n* functions for knewstuff-dialog not existing
  * Port all KF deprecations until 5.89
  * Unnest private classes, use std::unique_ptr to manage lifetime
  * Generate own export header for KNSWidgets module
  * Fix include install directory
  * Fix library name
  * Move KNS3::Action class to new KNSWidgets submodule
  * New class: KNS3::Action</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1645272000">- Add patches to reduce requests to download.kde.org (boo#1196199):
  * 0001-Add-http2-to-KNewStuff-requests.patch
  * 0002-Engine-Ensure-we-are-not-using-the-wrong-ProvidersUr.patch
  * 0003-Add-conditional-cache-preference-to-http-requests.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1653912000">- Add patch to fix content downloading (boo#1200014)
  * 0001-Do-not-set-user-visible-name-as-additional-agent-inf.patch</changelog>
</package>
<package pkgid="d4ea3c7fe1374658ae3607bca44aaba97ad3b48fadf05f4323aa9ed1a6121480" name="knewstuff-imports" arch="s390x">
  <version epoch="0" ver="5.90.0" rel="bp154.3.3.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1607169600">- Update to 5.77.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.77.0
- Too many changes since 5.76.0, only listing bugfixes:
  * Reuse QWidgets dialog (kde#416328)
  * Fix entry disappearing too early from updatable page (kde#427801)
  * Remove entry from cache before inserting new entry (kde#424919)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1609934400">- Update to 5.78.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.78.0
- Changes since 5.77.0:
  * Deprecate standardAction and standardActionUpload methods
  * Fix QtQuick model if there is only a payload, but no download links
  * Add trailing comma to enum values
  * Add clang-format target
  * Add a dptr to Cache, and move the throttle timer there to fix crash (kde#429442)
  * Refactor KNS3::Button to use new dialog internally
  * Create wrapper class for QML dialog
  * Fix unit tests for kmoretools
  * Check if version is empty before concatenating version</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1612785600">- Update to 5.79.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.79.0
- Too many changes to list here.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1615118400">- Update to 5.80.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.80.0
- Too many changes since 5.79.0, only listing bugfixes:
  * Fix preview delegate's update badge being cut off (kde#433535)
  * qtquickengine: Do not emit entriesChanged signal when we clear an empty list (kde#431568)
  * qtquickengine: Check if KNSCore::Engine is valid before searching (kde#402432)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1617624000">- Update to 5.81.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.81.0
- Changes since 5.80.0:
  * qtquickengine: Do not forward intermediate states
  * quickengine: Emit entryEvent signal with enum which is exposed to QML
  * Create a NewStuff.Action component, add NewStuff.Settings global
  * Fix minor typos
  * Less risk of infinite spinner on uninstalling KPackage based things (kde#434371)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1619870400">- Update to 5.82.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.82.0
- Changes since 5.81.0:
  * Deprecate quickengine changedEntries &amp; related methods
  * Do not show error when installation is canceled (kde#436355)
  * Port away from QStringRef
  * Fix mem leak in autotests found by asan
  * NewStuff Dialog: Forward entryEvent signal
  * NewStuff Button: Forward entryEvent signal
  * Make QML GHNS dialog a tiny bit wider (kde#435547)
  * ensure .desktop files are executable</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1622894400">- Update to 5.83.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.83.0
- Too many changes to list here.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1625400000">- Update to 5.84.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.84.0
- Too many changes to list here.
- Only install the license files once</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1628251200">- Update to 5.85.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.85.0
- Changes since 5.84.0:
  * It's deprecated in 5.85 not 5.80
  * Rework UploadDialog, add QML version, and a new ProvidersModel
  * Simplify lookup of knsrc files using KFileUtils::findAllUniqueFiles method
  * Forward Attica provider icons to KNSCore::Provider
  * Handle payload-only entries during update operations</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1630929600">- Update to 5.86.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.86.0
- Changes since 5.85.0:
  * replace "MacOSX" with "macOS"
  * Port from KMountPoint to QStorageInfo
  * Set KLocalizedContext for QtQuickDialogWrapper
  * Use QToolButton for reset button as we have the same style</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1631707200">- Drop the unneeded baselibs.conf.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1632830400">- Add fix-crash.patch. This patch fixes a crash in DownloadWidget.
  (kde#443025)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1633089600">- Add upstream patch:
  * 0001-Include-a-user-agent-on-KNS-requests.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1633262400">- Update to 5.87.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.87.0
- Too many changes since 5.86.0, only listing bugfixes:
  * Fix crash in DownloadWidget (kde#443025)
- Drop upstream patches:
  * 0001-Include-a-user-agent-on-KNS-requests.patch
  * fix-crash.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1636286400">- Update to 5.88.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.88.0
- Changes since 5.87.0:
  * Port to enum values for KAuthorized::authorizeAction
  * Make sure that we query KService with lowercase desktop names since it
    seems that KService stores everything lowercase. (kde#417575)
  * Add FreeBSD CI</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1636286401">- Strip 'Source' URL for faster submissions</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638619200">- Update to 5.89.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.89.0
- Changes since 5.88.0:
  * Improve presentation of multi-file download sheet
  * Use RTL half-star rating icon when in RTL mode</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1641211200">- Update to 5.90.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.90.0
- Changes since 5.89.0:
  * Drop lib prefix when building for Windows (kde#446950)
  * Remove defunct manual khotnewstuff_upload test
  * Compile fixes for Qt 6
  * Fix i18n* functions for knewstuff-dialog not existing
  * Port all KF deprecations until 5.89
  * Unnest private classes, use std::unique_ptr to manage lifetime
  * Generate own export header for KNSWidgets module
  * Fix include install directory
  * Fix library name
  * Move KNS3::Action class to new KNSWidgets submodule
  * New class: KNS3::Action</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1645272000">- Add patches to reduce requests to download.kde.org (boo#1196199):
  * 0001-Add-http2-to-KNewStuff-requests.patch
  * 0002-Engine-Ensure-we-are-not-using-the-wrong-ProvidersUr.patch
  * 0003-Add-conditional-cache-preference-to-http-requests.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1653912000">- Add patch to fix content downloading (boo#1200014)
  * 0001-Do-not-set-user-visible-name-as-additional-agent-inf.patch</changelog>
</package>
<package pkgid="9a20fcda6246d9cbf1248e27cf83fcfa0cde6024b379bb6492726370cf27c008" name="knewstuff-imports" arch="x86_64">
  <version epoch="0" ver="5.90.0" rel="bp154.3.3.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1607169600">- Update to 5.77.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.77.0
- Too many changes since 5.76.0, only listing bugfixes:
  * Reuse QWidgets dialog (kde#416328)
  * Fix entry disappearing too early from updatable page (kde#427801)
  * Remove entry from cache before inserting new entry (kde#424919)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1609934400">- Update to 5.78.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.78.0
- Changes since 5.77.0:
  * Deprecate standardAction and standardActionUpload methods
  * Fix QtQuick model if there is only a payload, but no download links
  * Add trailing comma to enum values
  * Add clang-format target
  * Add a dptr to Cache, and move the throttle timer there to fix crash (kde#429442)
  * Refactor KNS3::Button to use new dialog internally
  * Create wrapper class for QML dialog
  * Fix unit tests for kmoretools
  * Check if version is empty before concatenating version</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1612785600">- Update to 5.79.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.79.0
- Too many changes to list here.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1615118400">- Update to 5.80.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.80.0
- Too many changes since 5.79.0, only listing bugfixes:
  * Fix preview delegate's update badge being cut off (kde#433535)
  * qtquickengine: Do not emit entriesChanged signal when we clear an empty list (kde#431568)
  * qtquickengine: Check if KNSCore::Engine is valid before searching (kde#402432)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1617624000">- Update to 5.81.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.81.0
- Changes since 5.80.0:
  * qtquickengine: Do not forward intermediate states
  * quickengine: Emit entryEvent signal with enum which is exposed to QML
  * Create a NewStuff.Action component, add NewStuff.Settings global
  * Fix minor typos
  * Less risk of infinite spinner on uninstalling KPackage based things (kde#434371)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1619870400">- Update to 5.82.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.82.0
- Changes since 5.81.0:
  * Deprecate quickengine changedEntries &amp; related methods
  * Do not show error when installation is canceled (kde#436355)
  * Port away from QStringRef
  * Fix mem leak in autotests found by asan
  * NewStuff Dialog: Forward entryEvent signal
  * NewStuff Button: Forward entryEvent signal
  * Make QML GHNS dialog a tiny bit wider (kde#435547)
  * ensure .desktop files are executable</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1622894400">- Update to 5.83.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.83.0
- Too many changes to list here.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1625400000">- Update to 5.84.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.84.0
- Too many changes to list here.
- Only install the license files once</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1628251200">- Update to 5.85.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.85.0
- Changes since 5.84.0:
  * It's deprecated in 5.85 not 5.80
  * Rework UploadDialog, add QML version, and a new ProvidersModel
  * Simplify lookup of knsrc files using KFileUtils::findAllUniqueFiles method
  * Forward Attica provider icons to KNSCore::Provider
  * Handle payload-only entries during update operations</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1630929600">- Update to 5.86.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.86.0
- Changes since 5.85.0:
  * replace "MacOSX" with "macOS"
  * Port from KMountPoint to QStorageInfo
  * Set KLocalizedContext for QtQuickDialogWrapper
  * Use QToolButton for reset button as we have the same style</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1631707200">- Drop the unneeded baselibs.conf.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1632830400">- Add fix-crash.patch. This patch fixes a crash in DownloadWidget.
  (kde#443025)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1633089600">- Add upstream patch:
  * 0001-Include-a-user-agent-on-KNS-requests.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1633262400">- Update to 5.87.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.87.0
- Too many changes since 5.86.0, only listing bugfixes:
  * Fix crash in DownloadWidget (kde#443025)
- Drop upstream patches:
  * 0001-Include-a-user-agent-on-KNS-requests.patch
  * fix-crash.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1636286400">- Update to 5.88.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.88.0
- Changes since 5.87.0:
  * Port to enum values for KAuthorized::authorizeAction
  * Make sure that we query KService with lowercase desktop names since it
    seems that KService stores everything lowercase. (kde#417575)
  * Add FreeBSD CI</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1636286401">- Strip 'Source' URL for faster submissions</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638619200">- Update to 5.89.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.89.0
- Changes since 5.88.0:
  * Improve presentation of multi-file download sheet
  * Use RTL half-star rating icon when in RTL mode</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1641211200">- Update to 5.90.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.90.0
- Changes since 5.89.0:
  * Drop lib prefix when building for Windows (kde#446950)
  * Remove defunct manual khotnewstuff_upload test
  * Compile fixes for Qt 6
  * Fix i18n* functions for knewstuff-dialog not existing
  * Port all KF deprecations until 5.89
  * Unnest private classes, use std::unique_ptr to manage lifetime
  * Generate own export header for KNSWidgets module
  * Fix include install directory
  * Fix library name
  * Move KNS3::Action class to new KNSWidgets submodule
  * New class: KNS3::Action</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1645272000">- Add patches to reduce requests to download.kde.org (boo#1196199):
  * 0001-Add-http2-to-KNewStuff-requests.patch
  * 0002-Engine-Ensure-we-are-not-using-the-wrong-ProvidersUr.patch
  * 0003-Add-conditional-cache-preference-to-http-requests.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1653912000">- Add patch to fix content downloading (boo#1200014)
  * 0001-Do-not-set-user-visible-name-as-additional-agent-inf.patch</changelog>
</package>
<package pkgid="8f6b6d4c14add92c30f8fe33b6963dff292c5cca3575924ff821ff569a2d432d" name="knewstuff-quick-devel" arch="aarch64">
  <version epoch="0" ver="5.90.0" rel="bp154.3.3.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1607169600">- Update to 5.77.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.77.0
- Too many changes since 5.76.0, only listing bugfixes:
  * Reuse QWidgets dialog (kde#416328)
  * Fix entry disappearing too early from updatable page (kde#427801)
  * Remove entry from cache before inserting new entry (kde#424919)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1609934400">- Update to 5.78.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.78.0
- Changes since 5.77.0:
  * Deprecate standardAction and standardActionUpload methods
  * Fix QtQuick model if there is only a payload, but no download links
  * Add trailing comma to enum values
  * Add clang-format target
  * Add a dptr to Cache, and move the throttle timer there to fix crash (kde#429442)
  * Refactor KNS3::Button to use new dialog internally
  * Create wrapper class for QML dialog
  * Fix unit tests for kmoretools
  * Check if version is empty before concatenating version</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1612785600">- Update to 5.79.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.79.0
- Too many changes to list here.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1615118400">- Update to 5.80.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.80.0
- Too many changes since 5.79.0, only listing bugfixes:
  * Fix preview delegate's update badge being cut off (kde#433535)
  * qtquickengine: Do not emit entriesChanged signal when we clear an empty list (kde#431568)
  * qtquickengine: Check if KNSCore::Engine is valid before searching (kde#402432)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1617624000">- Update to 5.81.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.81.0
- Changes since 5.80.0:
  * qtquickengine: Do not forward intermediate states
  * quickengine: Emit entryEvent signal with enum which is exposed to QML
  * Create a NewStuff.Action component, add NewStuff.Settings global
  * Fix minor typos
  * Less risk of infinite spinner on uninstalling KPackage based things (kde#434371)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1619870400">- Update to 5.82.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.82.0
- Changes since 5.81.0:
  * Deprecate quickengine changedEntries &amp; related methods
  * Do not show error when installation is canceled (kde#436355)
  * Port away from QStringRef
  * Fix mem leak in autotests found by asan
  * NewStuff Dialog: Forward entryEvent signal
  * NewStuff Button: Forward entryEvent signal
  * Make QML GHNS dialog a tiny bit wider (kde#435547)
  * ensure .desktop files are executable</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1622894400">- Update to 5.83.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.83.0
- Too many changes to list here.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1625400000">- Update to 5.84.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.84.0
- Too many changes to list here.
- Only install the license files once</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1628251200">- Update to 5.85.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.85.0
- Changes since 5.84.0:
  * It's deprecated in 5.85 not 5.80
  * Rework UploadDialog, add QML version, and a new ProvidersModel
  * Simplify lookup of knsrc files using KFileUtils::findAllUniqueFiles method
  * Forward Attica provider icons to KNSCore::Provider
  * Handle payload-only entries during update operations</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1630929600">- Update to 5.86.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.86.0
- Changes since 5.85.0:
  * replace "MacOSX" with "macOS"
  * Port from KMountPoint to QStorageInfo
  * Set KLocalizedContext for QtQuickDialogWrapper
  * Use QToolButton for reset button as we have the same style</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1631707200">- Drop the unneeded baselibs.conf.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1632830400">- Add fix-crash.patch. This patch fixes a crash in DownloadWidget.
  (kde#443025)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1633089600">- Add upstream patch:
  * 0001-Include-a-user-agent-on-KNS-requests.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1633262400">- Update to 5.87.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.87.0
- Too many changes since 5.86.0, only listing bugfixes:
  * Fix crash in DownloadWidget (kde#443025)
- Drop upstream patches:
  * 0001-Include-a-user-agent-on-KNS-requests.patch
  * fix-crash.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1636286400">- Update to 5.88.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.88.0
- Changes since 5.87.0:
  * Port to enum values for KAuthorized::authorizeAction
  * Make sure that we query KService with lowercase desktop names since it
    seems that KService stores everything lowercase. (kde#417575)
  * Add FreeBSD CI</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1636286401">- Strip 'Source' URL for faster submissions</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638619200">- Update to 5.89.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.89.0
- Changes since 5.88.0:
  * Improve presentation of multi-file download sheet
  * Use RTL half-star rating icon when in RTL mode</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1641211200">- Update to 5.90.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.90.0
- Changes since 5.89.0:
  * Drop lib prefix when building for Windows (kde#446950)
  * Remove defunct manual khotnewstuff_upload test
  * Compile fixes for Qt 6
  * Fix i18n* functions for knewstuff-dialog not existing
  * Port all KF deprecations until 5.89
  * Unnest private classes, use std::unique_ptr to manage lifetime
  * Generate own export header for KNSWidgets module
  * Fix include install directory
  * Fix library name
  * Move KNS3::Action class to new KNSWidgets submodule
  * New class: KNS3::Action</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1645272000">- Add patches to reduce requests to download.kde.org (boo#1196199):
  * 0001-Add-http2-to-KNewStuff-requests.patch
  * 0002-Engine-Ensure-we-are-not-using-the-wrong-ProvidersUr.patch
  * 0003-Add-conditional-cache-preference-to-http-requests.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1653912000">- Add patch to fix content downloading (boo#1200014)
  * 0001-Do-not-set-user-visible-name-as-additional-agent-inf.patch</changelog>
</package>
<package pkgid="f74977c38d6fbee6b896620ef3aa25183764529bc029a0e56c841bf475bbbfa3" name="knewstuff-quick-devel" arch="ppc64le">
  <version epoch="0" ver="5.90.0" rel="bp154.3.3.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1607169600">- Update to 5.77.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.77.0
- Too many changes since 5.76.0, only listing bugfixes:
  * Reuse QWidgets dialog (kde#416328)
  * Fix entry disappearing too early from updatable page (kde#427801)
  * Remove entry from cache before inserting new entry (kde#424919)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1609934400">- Update to 5.78.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.78.0
- Changes since 5.77.0:
  * Deprecate standardAction and standardActionUpload methods
  * Fix QtQuick model if there is only a payload, but no download links
  * Add trailing comma to enum values
  * Add clang-format target
  * Add a dptr to Cache, and move the throttle timer there to fix crash (kde#429442)
  * Refactor KNS3::Button to use new dialog internally
  * Create wrapper class for QML dialog
  * Fix unit tests for kmoretools
  * Check if version is empty before concatenating version</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1612785600">- Update to 5.79.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.79.0
- Too many changes to list here.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1615118400">- Update to 5.80.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.80.0
- Too many changes since 5.79.0, only listing bugfixes:
  * Fix preview delegate's update badge being cut off (kde#433535)
  * qtquickengine: Do not emit entriesChanged signal when we clear an empty list (kde#431568)
  * qtquickengine: Check if KNSCore::Engine is valid before searching (kde#402432)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1617624000">- Update to 5.81.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.81.0
- Changes since 5.80.0:
  * qtquickengine: Do not forward intermediate states
  * quickengine: Emit entryEvent signal with enum which is exposed to QML
  * Create a NewStuff.Action component, add NewStuff.Settings global
  * Fix minor typos
  * Less risk of infinite spinner on uninstalling KPackage based things (kde#434371)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1619870400">- Update to 5.82.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.82.0
- Changes since 5.81.0:
  * Deprecate quickengine changedEntries &amp; related methods
  * Do not show error when installation is canceled (kde#436355)
  * Port away from QStringRef
  * Fix mem leak in autotests found by asan
  * NewStuff Dialog: Forward entryEvent signal
  * NewStuff Button: Forward entryEvent signal
  * Make QML GHNS dialog a tiny bit wider (kde#435547)
  * ensure .desktop files are executable</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1622894400">- Update to 5.83.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.83.0
- Too many changes to list here.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1625400000">- Update to 5.84.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.84.0
- Too many changes to list here.
- Only install the license files once</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1628251200">- Update to 5.85.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.85.0
- Changes since 5.84.0:
  * It's deprecated in 5.85 not 5.80
  * Rework UploadDialog, add QML version, and a new ProvidersModel
  * Simplify lookup of knsrc files using KFileUtils::findAllUniqueFiles method
  * Forward Attica provider icons to KNSCore::Provider
  * Handle payload-only entries during update operations</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1630929600">- Update to 5.86.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.86.0
- Changes since 5.85.0:
  * replace "MacOSX" with "macOS"
  * Port from KMountPoint to QStorageInfo
  * Set KLocalizedContext for QtQuickDialogWrapper
  * Use QToolButton for reset button as we have the same style</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1631707200">- Drop the unneeded baselibs.conf.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1632830400">- Add fix-crash.patch. This patch fixes a crash in DownloadWidget.
  (kde#443025)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1633089600">- Add upstream patch:
  * 0001-Include-a-user-agent-on-KNS-requests.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1633262400">- Update to 5.87.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.87.0
- Too many changes since 5.86.0, only listing bugfixes:
  * Fix crash in DownloadWidget (kde#443025)
- Drop upstream patches:
  * 0001-Include-a-user-agent-on-KNS-requests.patch
  * fix-crash.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1636286400">- Update to 5.88.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.88.0
- Changes since 5.87.0:
  * Port to enum values for KAuthorized::authorizeAction
  * Make sure that we query KService with lowercase desktop names since it
    seems that KService stores everything lowercase. (kde#417575)
  * Add FreeBSD CI</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1636286401">- Strip 'Source' URL for faster submissions</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638619200">- Update to 5.89.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.89.0
- Changes since 5.88.0:
  * Improve presentation of multi-file download sheet
  * Use RTL half-star rating icon when in RTL mode</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1641211200">- Update to 5.90.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.90.0
- Changes since 5.89.0:
  * Drop lib prefix when building for Windows (kde#446950)
  * Remove defunct manual khotnewstuff_upload test
  * Compile fixes for Qt 6
  * Fix i18n* functions for knewstuff-dialog not existing
  * Port all KF deprecations until 5.89
  * Unnest private classes, use std::unique_ptr to manage lifetime
  * Generate own export header for KNSWidgets module
  * Fix include install directory
  * Fix library name
  * Move KNS3::Action class to new KNSWidgets submodule
  * New class: KNS3::Action</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1645272000">- Add patches to reduce requests to download.kde.org (boo#1196199):
  * 0001-Add-http2-to-KNewStuff-requests.patch
  * 0002-Engine-Ensure-we-are-not-using-the-wrong-ProvidersUr.patch
  * 0003-Add-conditional-cache-preference-to-http-requests.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1653912000">- Add patch to fix content downloading (boo#1200014)
  * 0001-Do-not-set-user-visible-name-as-additional-agent-inf.patch</changelog>
</package>
<package pkgid="813046d89665f60e7803396e4f57da3a4c2c93e5758d5bbfcc9db0059f22dfe5" name="knewstuff-quick-devel" arch="s390x">
  <version epoch="0" ver="5.90.0" rel="bp154.3.3.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1607169600">- Update to 5.77.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.77.0
- Too many changes since 5.76.0, only listing bugfixes:
  * Reuse QWidgets dialog (kde#416328)
  * Fix entry disappearing too early from updatable page (kde#427801)
  * Remove entry from cache before inserting new entry (kde#424919)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1609934400">- Update to 5.78.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.78.0
- Changes since 5.77.0:
  * Deprecate standardAction and standardActionUpload methods
  * Fix QtQuick model if there is only a payload, but no download links
  * Add trailing comma to enum values
  * Add clang-format target
  * Add a dptr to Cache, and move the throttle timer there to fix crash (kde#429442)
  * Refactor KNS3::Button to use new dialog internally
  * Create wrapper class for QML dialog
  * Fix unit tests for kmoretools
  * Check if version is empty before concatenating version</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1612785600">- Update to 5.79.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.79.0
- Too many changes to list here.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1615118400">- Update to 5.80.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.80.0
- Too many changes since 5.79.0, only listing bugfixes:
  * Fix preview delegate's update badge being cut off (kde#433535)
  * qtquickengine: Do not emit entriesChanged signal when we clear an empty list (kde#431568)
  * qtquickengine: Check if KNSCore::Engine is valid before searching (kde#402432)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1617624000">- Update to 5.81.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.81.0
- Changes since 5.80.0:
  * qtquickengine: Do not forward intermediate states
  * quickengine: Emit entryEvent signal with enum which is exposed to QML
  * Create a NewStuff.Action component, add NewStuff.Settings global
  * Fix minor typos
  * Less risk of infinite spinner on uninstalling KPackage based things (kde#434371)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1619870400">- Update to 5.82.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.82.0
- Changes since 5.81.0:
  * Deprecate quickengine changedEntries &amp; related methods
  * Do not show error when installation is canceled (kde#436355)
  * Port away from QStringRef
  * Fix mem leak in autotests found by asan
  * NewStuff Dialog: Forward entryEvent signal
  * NewStuff Button: Forward entryEvent signal
  * Make QML GHNS dialog a tiny bit wider (kde#435547)
  * ensure .desktop files are executable</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1622894400">- Update to 5.83.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.83.0
- Too many changes to list here.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1625400000">- Update to 5.84.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.84.0
- Too many changes to list here.
- Only install the license files once</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1628251200">- Update to 5.85.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.85.0
- Changes since 5.84.0:
  * It's deprecated in 5.85 not 5.80
  * Rework UploadDialog, add QML version, and a new ProvidersModel
  * Simplify lookup of knsrc files using KFileUtils::findAllUniqueFiles method
  * Forward Attica provider icons to KNSCore::Provider
  * Handle payload-only entries during update operations</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1630929600">- Update to 5.86.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.86.0
- Changes since 5.85.0:
  * replace "MacOSX" with "macOS"
  * Port from KMountPoint to QStorageInfo
  * Set KLocalizedContext for QtQuickDialogWrapper
  * Use QToolButton for reset button as we have the same style</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1631707200">- Drop the unneeded baselibs.conf.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1632830400">- Add fix-crash.patch. This patch fixes a crash in DownloadWidget.
  (kde#443025)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1633089600">- Add upstream patch:
  * 0001-Include-a-user-agent-on-KNS-requests.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1633262400">- Update to 5.87.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.87.0
- Too many changes since 5.86.0, only listing bugfixes:
  * Fix crash in DownloadWidget (kde#443025)
- Drop upstream patches:
  * 0001-Include-a-user-agent-on-KNS-requests.patch
  * fix-crash.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1636286400">- Update to 5.88.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.88.0
- Changes since 5.87.0:
  * Port to enum values for KAuthorized::authorizeAction
  * Make sure that we query KService with lowercase desktop names since it
    seems that KService stores everything lowercase. (kde#417575)
  * Add FreeBSD CI</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1636286401">- Strip 'Source' URL for faster submissions</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638619200">- Update to 5.89.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.89.0
- Changes since 5.88.0:
  * Improve presentation of multi-file download sheet
  * Use RTL half-star rating icon when in RTL mode</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1641211200">- Update to 5.90.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.90.0
- Changes since 5.89.0:
  * Drop lib prefix when building for Windows (kde#446950)
  * Remove defunct manual khotnewstuff_upload test
  * Compile fixes for Qt 6
  * Fix i18n* functions for knewstuff-dialog not existing
  * Port all KF deprecations until 5.89
  * Unnest private classes, use std::unique_ptr to manage lifetime
  * Generate own export header for KNSWidgets module
  * Fix include install directory
  * Fix library name
  * Move KNS3::Action class to new KNSWidgets submodule
  * New class: KNS3::Action</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1645272000">- Add patches to reduce requests to download.kde.org (boo#1196199):
  * 0001-Add-http2-to-KNewStuff-requests.patch
  * 0002-Engine-Ensure-we-are-not-using-the-wrong-ProvidersUr.patch
  * 0003-Add-conditional-cache-preference-to-http-requests.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1653912000">- Add patch to fix content downloading (boo#1200014)
  * 0001-Do-not-set-user-visible-name-as-additional-agent-inf.patch</changelog>
</package>
<package pkgid="1aaed9e9ad61ba484eea0d56f7025813595360013c65857cfd6a6b827347fa0d" name="knewstuff-quick-devel" arch="x86_64">
  <version epoch="0" ver="5.90.0" rel="bp154.3.3.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1607169600">- Update to 5.77.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.77.0
- Too many changes since 5.76.0, only listing bugfixes:
  * Reuse QWidgets dialog (kde#416328)
  * Fix entry disappearing too early from updatable page (kde#427801)
  * Remove entry from cache before inserting new entry (kde#424919)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1609934400">- Update to 5.78.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.78.0
- Changes since 5.77.0:
  * Deprecate standardAction and standardActionUpload methods
  * Fix QtQuick model if there is only a payload, but no download links
  * Add trailing comma to enum values
  * Add clang-format target
  * Add a dptr to Cache, and move the throttle timer there to fix crash (kde#429442)
  * Refactor KNS3::Button to use new dialog internally
  * Create wrapper class for QML dialog
  * Fix unit tests for kmoretools
  * Check if version is empty before concatenating version</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1612785600">- Update to 5.79.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.79.0
- Too many changes to list here.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1615118400">- Update to 5.80.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.80.0
- Too many changes since 5.79.0, only listing bugfixes:
  * Fix preview delegate's update badge being cut off (kde#433535)
  * qtquickengine: Do not emit entriesChanged signal when we clear an empty list (kde#431568)
  * qtquickengine: Check if KNSCore::Engine is valid before searching (kde#402432)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1617624000">- Update to 5.81.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.81.0
- Changes since 5.80.0:
  * qtquickengine: Do not forward intermediate states
  * quickengine: Emit entryEvent signal with enum which is exposed to QML
  * Create a NewStuff.Action component, add NewStuff.Settings global
  * Fix minor typos
  * Less risk of infinite spinner on uninstalling KPackage based things (kde#434371)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1619870400">- Update to 5.82.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.82.0
- Changes since 5.81.0:
  * Deprecate quickengine changedEntries &amp; related methods
  * Do not show error when installation is canceled (kde#436355)
  * Port away from QStringRef
  * Fix mem leak in autotests found by asan
  * NewStuff Dialog: Forward entryEvent signal
  * NewStuff Button: Forward entryEvent signal
  * Make QML GHNS dialog a tiny bit wider (kde#435547)
  * ensure .desktop files are executable</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1622894400">- Update to 5.83.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.83.0
- Too many changes to list here.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1625400000">- Update to 5.84.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.84.0
- Too many changes to list here.
- Only install the license files once</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1628251200">- Update to 5.85.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.85.0
- Changes since 5.84.0:
  * It's deprecated in 5.85 not 5.80
  * Rework UploadDialog, add QML version, and a new ProvidersModel
  * Simplify lookup of knsrc files using KFileUtils::findAllUniqueFiles method
  * Forward Attica provider icons to KNSCore::Provider
  * Handle payload-only entries during update operations</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1630929600">- Update to 5.86.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.86.0
- Changes since 5.85.0:
  * replace "MacOSX" with "macOS"
  * Port from KMountPoint to QStorageInfo
  * Set KLocalizedContext for QtQuickDialogWrapper
  * Use QToolButton for reset button as we have the same style</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1631707200">- Drop the unneeded baselibs.conf.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1632830400">- Add fix-crash.patch. This patch fixes a crash in DownloadWidget.
  (kde#443025)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1633089600">- Add upstream patch:
  * 0001-Include-a-user-agent-on-KNS-requests.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1633262400">- Update to 5.87.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.87.0
- Too many changes since 5.86.0, only listing bugfixes:
  * Fix crash in DownloadWidget (kde#443025)
- Drop upstream patches:
  * 0001-Include-a-user-agent-on-KNS-requests.patch
  * fix-crash.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1636286400">- Update to 5.88.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.88.0
- Changes since 5.87.0:
  * Port to enum values for KAuthorized::authorizeAction
  * Make sure that we query KService with lowercase desktop names since it
    seems that KService stores everything lowercase. (kde#417575)
  * Add FreeBSD CI</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1636286401">- Strip 'Source' URL for faster submissions</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638619200">- Update to 5.89.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.89.0
- Changes since 5.88.0:
  * Improve presentation of multi-file download sheet
  * Use RTL half-star rating icon when in RTL mode</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1641211200">- Update to 5.90.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.90.0
- Changes since 5.89.0:
  * Drop lib prefix when building for Windows (kde#446950)
  * Remove defunct manual khotnewstuff_upload test
  * Compile fixes for Qt 6
  * Fix i18n* functions for knewstuff-dialog not existing
  * Port all KF deprecations until 5.89
  * Unnest private classes, use std::unique_ptr to manage lifetime
  * Generate own export header for KNSWidgets module
  * Fix include install directory
  * Fix library name
  * Move KNS3::Action class to new KNSWidgets submodule
  * New class: KNS3::Action</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1645272000">- Add patches to reduce requests to download.kde.org (boo#1196199):
  * 0001-Add-http2-to-KNewStuff-requests.patch
  * 0002-Engine-Ensure-we-are-not-using-the-wrong-ProvidersUr.patch
  * 0003-Add-conditional-cache-preference-to-http-requests.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1653912000">- Add patch to fix content downloading (boo#1200014)
  * 0001-Do-not-set-user-visible-name-as-additional-agent-inf.patch</changelog>
</package>
<package pkgid="e8538804a1feb742e6645696b095f35983af38c59ff0722d304e383d4b6df27e" name="krusader" arch="aarch64">
  <version epoch="0" ver="2.7.2" rel="bp154.3.3.1"/>
  <changelog author="baiduzhyi.devel@gmail.com" date="1427284800">- Require libktexteditor instead of kate to solve installation conflicts
  when using KF5.</changelog>
  <changelog author="tchvatal@suse.com" date="1432641600">- Only suggest documentation, do not recommend it.</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1477224000">- Update to 2.5.0
  * Added actions: Select files with the same name / extension
  * Changed disabled build of synchronizer by default, since it
    is unmaintained - build togglable with cmake variable
  - DENABLE_SYNCHRONIZER=true|false
  * Fixed (kde#143927) file search: "s" accelerator is doubled -
    new shortcut for "Search in" is ALT+h
  * Fixed (kde#308386) Duplicate shortcut on Search window -
    new shortcut for "Remote content search" is ALT+n
  * Fixed (kde#206926) Search doesn't work in sftp session
    (it returns too many results)
  * Fixed (kde#269542) Krusader search - Containing text
    still used when disabled
  * Fixed (kde#324737) symlinks with a target path length
    of over 255 do not work
  * Fixed (kde#189943) toolbar position settings are not remembered
  * Fixed (kde#316031) crash when loading previews
  * Fixed (kde#238672) When saving checksums fails,
    they are lost. No 2nd chance to save elsewhere.
  * Fixed (kde#315764) "application/x-source-rpm" isn't linked
    to krarc protocol by default
  * Fixed (kde#294816) Krusader needs to restart to apply
    new color scheme to panel
  * Fixed (kde#308727) external editor command isn't properly parsed
  * Fixed (kde#304233) empty main view on startup
  * Fixed (kde#315856) main view splitter sizes are not restored
  * Fixed (kde#248691) incorrect layout / wrong buttons
    in queue manager
  * Fixed (kde#315357) krarc silently fails to display
    contents of some zip files containing paths with "." as a
    path component are still not handled, but now krarc reports an
    error instead silently failing
  * Fixed (kde#310722) viewer crash when opening file
  * Fixed search result view always displays owner and group as "root"
    (may not work for remote search)
  * Fixed (kde#217711) directory chooser dialog does not allow
    to choose a directory
  * Fixed (kde#309119) Wrong "New directory" dialog behavior:
    can't clear all typed text
  * Fixed (kde#309159) Crash in video files preview on F3
  * Fixed (kde#310191) krusader still installs locolor icons
  * Fixed (kde#317510 ] icon-size-and-directory-name-mismatch
- Package ported to KF5, changed all the BuildRequires to KF5 ones
- Swap krusader-2.4.0-beta2-generate-manpage.patch for
  krusader-2.5.0-generate-manpage.patch
- Drop upstreamed bug309159.patch
- Added 0001-Don-t-hardcode-appdata-location.patch</changelog>
  <changelog author="wbauer@tmo.at" date="1479729600">- Add Remove-non-archive-mimetypes-from-krarc-archive-mime-type-list.patch
  to fix dolphin opening e.g. LibreOffice files as archives
  (boo#1011320, kde#371765)</changelog>
  <changelog author="wbauer@tmo.at" date="1482408000">- Add add-service-actions-to-right-click-popup-menu.patch to add
  KDE's service actions to the right click popup menu in krusader
  again (boo#1016980, kde#372231)</changelog>
  <changelog author="wbauer@tmo.at" date="1483617600">- Add Handle-arrow-key-press-in-brief-view.patch to fix the
  behavior when pressing the left/right cursor keys in brief view
  (boo#1017533, kde#374238)</changelog>
  <changelog author="wbauer@tmo.at" date="1491912000">- Update to 2.6.0
  * FIXED: (kde#335993) save checksum does not work as expected
  * FIXED: (kde#375639) Allow typing special characters (e.g. with
    accent or acute) in search bar
  * FIXED: (kde#328068) Send SIGINT before own input command to
    embedded terminal
  * FIXED: (kde#375135) segfault on viewing html files with Generic
    viewer
  * FIXED: (kde#269820) Fullscreen terminal emulator shows empty
    window when terminal emulator was minimized
  * FIXED: (kde#374813) Multi rename with KRename does not work
    when selecting non-local files/folders (ftp, smb, virt, ...)
  * FIXED: (kde#309300) Esc as the default shortcut of "Set Focus
    to The Panel" is problematic for the embedded terminal
  * FIXED: (kde#374175) wrong date format parsing using date filter
    in search dialog
  * FIXED: (kde#293370) After a file deletion old file name is
    still shown in the status bar
  * FIXED: (kde#374322) Visually indicated shortcut ALT+o not
    working in copy/F5 and move/F6 KrDialog
  * FIXED: (kde#374238) Handle left/right arrow key press in brief
    view (previously filtered by search bar).
  * FIXED: when dragged from list panel use correct drop action if
    invoked with modifier keys
  * FIXED: added save/restore or toolbar positions in mainwindow
  * FIXED: (kde#372231) Added KDE's service actions again to
    right-click popup menu
  * ADDED: new undo action to job manager for undoing KIO job
    operations
  * FIXED: (kde#372067) Wrong path when showing non local files and
    folders from search dialog in panel
  * ADDED: job manager as replacement for queue manager. Part of
    cleaning VFS
  * FIXED: (kde#365105) Workaround for bug in KF5+QSystemTrayIcon
  * ADDED: Reimplementation of "minimize to system tray" feature.
  * FIXED: Krusader does not show the new file in a directory that
    is a symbolic link until is not refresh directory
  * FIXED: Wrong window position after restart in fluxbox
  * FIXED: Error on opening file folder after clicking on any file
    result of a remote search (FTP / smb)
  * FIXED: Terminal opens in full window
  * FIXED: copy location/path bar (feature request)
  * FIXED: krusader cannot calculate size of remote directory (ftp
    or sftp)
  * FIXED: Some files with weird characters (non UTF) cause krusader
    to miscalculate folder size
  * FIXED: No way to focus fullscreen embedded terminal emulator.
  * FIXED: Don't delete first letter in "new folder" dialog (F7)
  * FIXED: Use Shift+Delete for delete or move selected files to
    trash
  * FIXED: Dialog "File" -&gt; "Verify checksum" improvement
  * FIXED: Option for show copy/move progress in dialog (not in
    notifications)
  * FIXED: Documents suddenly open as archives
  * CHANGED: Avoiding root mode
  * CHANGED: Duplicated tab should not be locked
  * CHANGED: New PagePanel: do not refresh until panel becomes
    visible
  * CHANGED: Change suggested command for "edit as root" user
    action to a more secure alternative
  * CHANGED: Do not configure kdesu path and remove kdesudo support
    again
  * CHANGED: Panel: Do not select .. in a filtered view if there
    are other entries
  * CHANGED: Duplicate tab settings when duplicating tabs
  * CHANGED: Some fixes and simpifying startup settings.
- Drop upstream patches:
  * krusader-2.5.0-generate-manpage.patch
  * 0001-Don-t-hardcode-appdata-location.patch
  * Remove-non-archive-mimetypes-from-krarc-archive-mime-type-list.patch
  * add-service-actions-to-right-click-popup-menu.patch
  * Handle-arrow-key-press-in-brief-view.patch</changelog>
  <changelog author="wbauer@tmo.at" date="1494158400">- Add fix-build-with-gcc48.patch to fix build on Leap 42</changelog>
  <changelog author="wbauer@tmo.at" date="1494849600">- Add org.kde.krusader.root-mode.desktop, it got removed in 2.6.0</changelog>
  <changelog author="wbauer@tmo.at" date="1515758400">- Add Panel-fixed-actions-in-PanelContextMenu-ignored.patch to fix
  the "Create New" context menu not working when the '..' entry is
  selected (boo#1075690, kde#383544)</changelog>
  <changelog author="wbauer@tmo.at" date="1526299200">- Update to 2.7.0
  * New feature: Quick Search in Bookmark menu
  * New feature: Tab pinning
  * New feature: Tooltip with file information when you hover a
    file name
  * New feature: Extended options for Tree Panel
  * New feature: Debug output option
  * Improved icon theme handling
  * Fixed 40+ issues including some regressions
- Drop patches merged upstream:
  * fix-build-with-gcc48.patch
  * Panel-fixed-actions-in-PanelContextMenu-ignored.patch
- Mark license file as %license instead of %doc
- Adjust file lists</changelog>
  <changelog author="wbauer@tmo.at" date="1534075200">- Update to 2.7.1
  * ADDED: Default shortcut for quick selection mode = Ctrl+Shift+S
  * FIXED: When calculating occupied space of ".." , krusader
    selects all directories (kde#150247)
  * FIXED: Bad default in the New Text File dialog (kde#282069)
  * FIXED: ISO files listing/extracting broken (kde#372023)
  * FIXED: Details section is empty in 'Do not know which files to
    compare.' window (kde#383567)
  * FIXED: Default mode in 'Find in folder' is not preserved
    (kde#391946)
  * FIXED: Files fed to listbox (and all other files in virt://)
    cannot be deleted (kde#394896)
  * FIXED: Enter key not working when cursor in search bar
    (kde#394939)
  * FIXED: The quicksearch bar is still opened after deleting a
    file (kde#395285)
  * FIXED: In the Manage User Actions dialog: the tab order is not
    the expected one (kde#396652)</changelog>
  <changelog author="wbauer@tmo.at" date="1552392000">- Add Prefer-to-find-oktetapart-by-desktop-file.patch to make it
  compatible with the upcoming okteta 0.26 release</changelog>
  <changelog author="wbauer@tmo.at" date="1566820800">- Update to 2.7.2
  * FIXED: Memory leak in the Locate dialog
  * FIXED: UDSEntry::insert deprecation warnings
  * FIXED: synchronize directory window: column widths
    are incorrect (kde#167410)
  * FIXED: Context menu item "copy selected to clipboard" copies
    all result items (kde#328918)
  * FIXED: "Information - Krusader" dialog does not fit to screen
    width; text non-copyable (kde#330788)
  * FIXED: After trying to rename the file that's being updated,
    rename function stops working on any file on this tab
    (kde#392750)
  * FIXED: New Text File is created with 600 (-rw-------)
    permissions (kde#395609)
  * FIXED: Misleading ?Created? date in file properties
    (kde#397398)
  * FIXED: Compilation error because of QOverload usage
    (kde#405212)
  * FIXED: The list of search results doesn't get the focus
    (kde#410118)
  * FIXED: Krusader does not search correctly if the "Follow links"
    checkbox is disabled (kde#410120)
  * FIXED: Okteta support for versions &gt;= 0.26 (due to oktetapart
    file layout change)
- Drop Prefer-to-find-oktetapart-by-desktop-file.patch, merged
  upstream
- Don't add -fpermissive to compiler options, no longer necessary
- Run spec-cleaner</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1598529600">- Spec cleanup</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1656504000">- Add patch to fix the 'Compress' menu (boo#1198725, boo#1203225, kde#441376)
  * 0001-Fixed-non-working-actions-for-create-extract-archive.patch</changelog>
</package>
<package pkgid="6f1def738ed646630e2788a8fdb4783865ac5e11e0365fbf17f61ef116fe8c2e" name="krusader" arch="ppc64le">
  <version epoch="0" ver="2.7.2" rel="bp154.3.3.1"/>
  <changelog author="baiduzhyi.devel@gmail.com" date="1427284800">- Require libktexteditor instead of kate to solve installation conflicts
  when using KF5.</changelog>
  <changelog author="tchvatal@suse.com" date="1432641600">- Only suggest documentation, do not recommend it.</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1477224000">- Update to 2.5.0
  * Added actions: Select files with the same name / extension
  * Changed disabled build of synchronizer by default, since it
    is unmaintained - build togglable with cmake variable
  - DENABLE_SYNCHRONIZER=true|false
  * Fixed (kde#143927) file search: "s" accelerator is doubled -
    new shortcut for "Search in" is ALT+h
  * Fixed (kde#308386) Duplicate shortcut on Search window -
    new shortcut for "Remote content search" is ALT+n
  * Fixed (kde#206926) Search doesn't work in sftp session
    (it returns too many results)
  * Fixed (kde#269542) Krusader search - Containing text
    still used when disabled
  * Fixed (kde#324737) symlinks with a target path length
    of over 255 do not work
  * Fixed (kde#189943) toolbar position settings are not remembered
  * Fixed (kde#316031) crash when loading previews
  * Fixed (kde#238672) When saving checksums fails,
    they are lost. No 2nd chance to save elsewhere.
  * Fixed (kde#315764) "application/x-source-rpm" isn't linked
    to krarc protocol by default
  * Fixed (kde#294816) Krusader needs to restart to apply
    new color scheme to panel
  * Fixed (kde#308727) external editor command isn't properly parsed
  * Fixed (kde#304233) empty main view on startup
  * Fixed (kde#315856) main view splitter sizes are not restored
  * Fixed (kde#248691) incorrect layout / wrong buttons
    in queue manager
  * Fixed (kde#315357) krarc silently fails to display
    contents of some zip files containing paths with "." as a
    path component are still not handled, but now krarc reports an
    error instead silently failing
  * Fixed (kde#310722) viewer crash when opening file
  * Fixed search result view always displays owner and group as "root"
    (may not work for remote search)
  * Fixed (kde#217711) directory chooser dialog does not allow
    to choose a directory
  * Fixed (kde#309119) Wrong "New directory" dialog behavior:
    can't clear all typed text
  * Fixed (kde#309159) Crash in video files preview on F3
  * Fixed (kde#310191) krusader still installs locolor icons
  * Fixed (kde#317510 ] icon-size-and-directory-name-mismatch
- Package ported to KF5, changed all the BuildRequires to KF5 ones
- Swap krusader-2.4.0-beta2-generate-manpage.patch for
  krusader-2.5.0-generate-manpage.patch
- Drop upstreamed bug309159.patch
- Added 0001-Don-t-hardcode-appdata-location.patch</changelog>
  <changelog author="wbauer@tmo.at" date="1479729600">- Add Remove-non-archive-mimetypes-from-krarc-archive-mime-type-list.patch
  to fix dolphin opening e.g. LibreOffice files as archives
  (boo#1011320, kde#371765)</changelog>
  <changelog author="wbauer@tmo.at" date="1482408000">- Add add-service-actions-to-right-click-popup-menu.patch to add
  KDE's service actions to the right click popup menu in krusader
  again (boo#1016980, kde#372231)</changelog>
  <changelog author="wbauer@tmo.at" date="1483617600">- Add Handle-arrow-key-press-in-brief-view.patch to fix the
  behavior when pressing the left/right cursor keys in brief view
  (boo#1017533, kde#374238)</changelog>
  <changelog author="wbauer@tmo.at" date="1491912000">- Update to 2.6.0
  * FIXED: (kde#335993) save checksum does not work as expected
  * FIXED: (kde#375639) Allow typing special characters (e.g. with
    accent or acute) in search bar
  * FIXED: (kde#328068) Send SIGINT before own input command to
    embedded terminal
  * FIXED: (kde#375135) segfault on viewing html files with Generic
    viewer
  * FIXED: (kde#269820) Fullscreen terminal emulator shows empty
    window when terminal emulator was minimized
  * FIXED: (kde#374813) Multi rename with KRename does not work
    when selecting non-local files/folders (ftp, smb, virt, ...)
  * FIXED: (kde#309300) Esc as the default shortcut of "Set Focus
    to The Panel" is problematic for the embedded terminal
  * FIXED: (kde#374175) wrong date format parsing using date filter
    in search dialog
  * FIXED: (kde#293370) After a file deletion old file name is
    still shown in the status bar
  * FIXED: (kde#374322) Visually indicated shortcut ALT+o not
    working in copy/F5 and move/F6 KrDialog
  * FIXED: (kde#374238) Handle left/right arrow key press in brief
    view (previously filtered by search bar).
  * FIXED: when dragged from list panel use correct drop action if
    invoked with modifier keys
  * FIXED: added save/restore or toolbar positions in mainwindow
  * FIXED: (kde#372231) Added KDE's service actions again to
    right-click popup menu
  * ADDED: new undo action to job manager for undoing KIO job
    operations
  * FIXED: (kde#372067) Wrong path when showing non local files and
    folders from search dialog in panel
  * ADDED: job manager as replacement for queue manager. Part of
    cleaning VFS
  * FIXED: (kde#365105) Workaround for bug in KF5+QSystemTrayIcon
  * ADDED: Reimplementation of "minimize to system tray" feature.
  * FIXED: Krusader does not show the new file in a directory that
    is a symbolic link until is not refresh directory
  * FIXED: Wrong window position after restart in fluxbox
  * FIXED: Error on opening file folder after clicking on any file
    result of a remote search (FTP / smb)
  * FIXED: Terminal opens in full window
  * FIXED: copy location/path bar (feature request)
  * FIXED: krusader cannot calculate size of remote directory (ftp
    or sftp)
  * FIXED: Some files with weird characters (non UTF) cause krusader
    to miscalculate folder size
  * FIXED: No way to focus fullscreen embedded terminal emulator.
  * FIXED: Don't delete first letter in "new folder" dialog (F7)
  * FIXED: Use Shift+Delete for delete or move selected files to
    trash
  * FIXED: Dialog "File" -&gt; "Verify checksum" improvement
  * FIXED: Option for show copy/move progress in dialog (not in
    notifications)
  * FIXED: Documents suddenly open as archives
  * CHANGED: Avoiding root mode
  * CHANGED: Duplicated tab should not be locked
  * CHANGED: New PagePanel: do not refresh until panel becomes
    visible
  * CHANGED: Change suggested command for "edit as root" user
    action to a more secure alternative
  * CHANGED: Do not configure kdesu path and remove kdesudo support
    again
  * CHANGED: Panel: Do not select .. in a filtered view if there
    are other entries
  * CHANGED: Duplicate tab settings when duplicating tabs
  * CHANGED: Some fixes and simpifying startup settings.
- Drop upstream patches:
  * krusader-2.5.0-generate-manpage.patch
  * 0001-Don-t-hardcode-appdata-location.patch
  * Remove-non-archive-mimetypes-from-krarc-archive-mime-type-list.patch
  * add-service-actions-to-right-click-popup-menu.patch
  * Handle-arrow-key-press-in-brief-view.patch</changelog>
  <changelog author="wbauer@tmo.at" date="1494158400">- Add fix-build-with-gcc48.patch to fix build on Leap 42</changelog>
  <changelog author="wbauer@tmo.at" date="1494849600">- Add org.kde.krusader.root-mode.desktop, it got removed in 2.6.0</changelog>
  <changelog author="wbauer@tmo.at" date="1515758400">- Add Panel-fixed-actions-in-PanelContextMenu-ignored.patch to fix
  the "Create New" context menu not working when the '..' entry is
  selected (boo#1075690, kde#383544)</changelog>
  <changelog author="wbauer@tmo.at" date="1526299200">- Update to 2.7.0
  * New feature: Quick Search in Bookmark menu
  * New feature: Tab pinning
  * New feature: Tooltip with file information when you hover a
    file name
  * New feature: Extended options for Tree Panel
  * New feature: Debug output option
  * Improved icon theme handling
  * Fixed 40+ issues including some regressions
- Drop patches merged upstream:
  * fix-build-with-gcc48.patch
  * Panel-fixed-actions-in-PanelContextMenu-ignored.patch
- Mark license file as %license instead of %doc
- Adjust file lists</changelog>
  <changelog author="wbauer@tmo.at" date="1534075200">- Update to 2.7.1
  * ADDED: Default shortcut for quick selection mode = Ctrl+Shift+S
  * FIXED: When calculating occupied space of ".." , krusader
    selects all directories (kde#150247)
  * FIXED: Bad default in the New Text File dialog (kde#282069)
  * FIXED: ISO files listing/extracting broken (kde#372023)
  * FIXED: Details section is empty in 'Do not know which files to
    compare.' window (kde#383567)
  * FIXED: Default mode in 'Find in folder' is not preserved
    (kde#391946)
  * FIXED: Files fed to listbox (and all other files in virt://)
    cannot be deleted (kde#394896)
  * FIXED: Enter key not working when cursor in search bar
    (kde#394939)
  * FIXED: The quicksearch bar is still opened after deleting a
    file (kde#395285)
  * FIXED: In the Manage User Actions dialog: the tab order is not
    the expected one (kde#396652)</changelog>
  <changelog author="wbauer@tmo.at" date="1552392000">- Add Prefer-to-find-oktetapart-by-desktop-file.patch to make it
  compatible with the upcoming okteta 0.26 release</changelog>
  <changelog author="wbauer@tmo.at" date="1566820800">- Update to 2.7.2
  * FIXED: Memory leak in the Locate dialog
  * FIXED: UDSEntry::insert deprecation warnings
  * FIXED: synchronize directory window: column widths
    are incorrect (kde#167410)
  * FIXED: Context menu item "copy selected to clipboard" copies
    all result items (kde#328918)
  * FIXED: "Information - Krusader" dialog does not fit to screen
    width; text non-copyable (kde#330788)
  * FIXED: After trying to rename the file that's being updated,
    rename function stops working on any file on this tab
    (kde#392750)
  * FIXED: New Text File is created with 600 (-rw-------)
    permissions (kde#395609)
  * FIXED: Misleading ?Created? date in file properties
    (kde#397398)
  * FIXED: Compilation error because of QOverload usage
    (kde#405212)
  * FIXED: The list of search results doesn't get the focus
    (kde#410118)
  * FIXED: Krusader does not search correctly if the "Follow links"
    checkbox is disabled (kde#410120)
  * FIXED: Okteta support for versions &gt;= 0.26 (due to oktetapart
    file layout change)
- Drop Prefer-to-find-oktetapart-by-desktop-file.patch, merged
  upstream
- Don't add -fpermissive to compiler options, no longer necessary
- Run spec-cleaner</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1598529600">- Spec cleanup</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1656504000">- Add patch to fix the 'Compress' menu (boo#1198725, boo#1203225, kde#441376)
  * 0001-Fixed-non-working-actions-for-create-extract-archive.patch</changelog>
</package>
<package pkgid="a9025e6a86c05e4c6185786bbde71cb3325acd6a13144340eeca052bb1b349a7" name="krusader" arch="s390x">
  <version epoch="0" ver="2.7.2" rel="bp154.3.3.1"/>
  <changelog author="baiduzhyi.devel@gmail.com" date="1427284800">- Require libktexteditor instead of kate to solve installation conflicts
  when using KF5.</changelog>
  <changelog author="tchvatal@suse.com" date="1432641600">- Only suggest documentation, do not recommend it.</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1477224000">- Update to 2.5.0
  * Added actions: Select files with the same name / extension
  * Changed disabled build of synchronizer by default, since it
    is unmaintained - build togglable with cmake variable
  - DENABLE_SYNCHRONIZER=true|false
  * Fixed (kde#143927) file search: "s" accelerator is doubled -
    new shortcut for "Search in" is ALT+h
  * Fixed (kde#308386) Duplicate shortcut on Search window -
    new shortcut for "Remote content search" is ALT+n
  * Fixed (kde#206926) Search doesn't work in sftp session
    (it returns too many results)
  * Fixed (kde#269542) Krusader search - Containing text
    still used when disabled
  * Fixed (kde#324737) symlinks with a target path length
    of over 255 do not work
  * Fixed (kde#189943) toolbar position settings are not remembered
  * Fixed (kde#316031) crash when loading previews
  * Fixed (kde#238672) When saving checksums fails,
    they are lost. No 2nd chance to save elsewhere.
  * Fixed (kde#315764) "application/x-source-rpm" isn't linked
    to krarc protocol by default
  * Fixed (kde#294816) Krusader needs to restart to apply
    new color scheme to panel
  * Fixed (kde#308727) external editor command isn't properly parsed
  * Fixed (kde#304233) empty main view on startup
  * Fixed (kde#315856) main view splitter sizes are not restored
  * Fixed (kde#248691) incorrect layout / wrong buttons
    in queue manager
  * Fixed (kde#315357) krarc silently fails to display
    contents of some zip files containing paths with "." as a
    path component are still not handled, but now krarc reports an
    error instead silently failing
  * Fixed (kde#310722) viewer crash when opening file
  * Fixed search result view always displays owner and group as "root"
    (may not work for remote search)
  * Fixed (kde#217711) directory chooser dialog does not allow
    to choose a directory
  * Fixed (kde#309119) Wrong "New directory" dialog behavior:
    can't clear all typed text
  * Fixed (kde#309159) Crash in video files preview on F3
  * Fixed (kde#310191) krusader still installs locolor icons
  * Fixed (kde#317510 ] icon-size-and-directory-name-mismatch
- Package ported to KF5, changed all the BuildRequires to KF5 ones
- Swap krusader-2.4.0-beta2-generate-manpage.patch for
  krusader-2.5.0-generate-manpage.patch
- Drop upstreamed bug309159.patch
- Added 0001-Don-t-hardcode-appdata-location.patch</changelog>
  <changelog author="wbauer@tmo.at" date="1479729600">- Add Remove-non-archive-mimetypes-from-krarc-archive-mime-type-list.patch
  to fix dolphin opening e.g. LibreOffice files as archives
  (boo#1011320, kde#371765)</changelog>
  <changelog author="wbauer@tmo.at" date="1482408000">- Add add-service-actions-to-right-click-popup-menu.patch to add
  KDE's service actions to the right click popup menu in krusader
  again (boo#1016980, kde#372231)</changelog>
  <changelog author="wbauer@tmo.at" date="1483617600">- Add Handle-arrow-key-press-in-brief-view.patch to fix the
  behavior when pressing the left/right cursor keys in brief view
  (boo#1017533, kde#374238)</changelog>
  <changelog author="wbauer@tmo.at" date="1491912000">- Update to 2.6.0
  * FIXED: (kde#335993) save checksum does not work as expected
  * FIXED: (kde#375639) Allow typing special characters (e.g. with
    accent or acute) in search bar
  * FIXED: (kde#328068) Send SIGINT before own input command to
    embedded terminal
  * FIXED: (kde#375135) segfault on viewing html files with Generic
    viewer
  * FIXED: (kde#269820) Fullscreen terminal emulator shows empty
    window when terminal emulator was minimized
  * FIXED: (kde#374813) Multi rename with KRename does not work
    when selecting non-local files/folders (ftp, smb, virt, ...)
  * FIXED: (kde#309300) Esc as the default shortcut of "Set Focus
    to The Panel" is problematic for the embedded terminal
  * FIXED: (kde#374175) wrong date format parsing using date filter
    in search dialog
  * FIXED: (kde#293370) After a file deletion old file name is
    still shown in the status bar
  * FIXED: (kde#374322) Visually indicated shortcut ALT+o not
    working in copy/F5 and move/F6 KrDialog
  * FIXED: (kde#374238) Handle left/right arrow key press in brief
    view (previously filtered by search bar).
  * FIXED: when dragged from list panel use correct drop action if
    invoked with modifier keys
  * FIXED: added save/restore or toolbar positions in mainwindow
  * FIXED: (kde#372231) Added KDE's service actions again to
    right-click popup menu
  * ADDED: new undo action to job manager for undoing KIO job
    operations
  * FIXED: (kde#372067) Wrong path when showing non local files and
    folders from search dialog in panel
  * ADDED: job manager as replacement for queue manager. Part of
    cleaning VFS
  * FIXED: (kde#365105) Workaround for bug in KF5+QSystemTrayIcon
  * ADDED: Reimplementation of "minimize to system tray" feature.
  * FIXED: Krusader does not show the new file in a directory that
    is a symbolic link until is not refresh directory
  * FIXED: Wrong window position after restart in fluxbox
  * FIXED: Error on opening file folder after clicking on any file
    result of a remote search (FTP / smb)
  * FIXED: Terminal opens in full window
  * FIXED: copy location/path bar (feature request)
  * FIXED: krusader cannot calculate size of remote directory (ftp
    or sftp)
  * FIXED: Some files with weird characters (non UTF) cause krusader
    to miscalculate folder size
  * FIXED: No way to focus fullscreen embedded terminal emulator.
  * FIXED: Don't delete first letter in "new folder" dialog (F7)
  * FIXED: Use Shift+Delete for delete or move selected files to
    trash
  * FIXED: Dialog "File" -&gt; "Verify checksum" improvement
  * FIXED: Option for show copy/move progress in dialog (not in
    notifications)
  * FIXED: Documents suddenly open as archives
  * CHANGED: Avoiding root mode
  * CHANGED: Duplicated tab should not be locked
  * CHANGED: New PagePanel: do not refresh until panel becomes
    visible
  * CHANGED: Change suggested command for "edit as root" user
    action to a more secure alternative
  * CHANGED: Do not configure kdesu path and remove kdesudo support
    again
  * CHANGED: Panel: Do not select .. in a filtered view if there
    are other entries
  * CHANGED: Duplicate tab settings when duplicating tabs
  * CHANGED: Some fixes and simpifying startup settings.
- Drop upstream patches:
  * krusader-2.5.0-generate-manpage.patch
  * 0001-Don-t-hardcode-appdata-location.patch
  * Remove-non-archive-mimetypes-from-krarc-archive-mime-type-list.patch
  * add-service-actions-to-right-click-popup-menu.patch
  * Handle-arrow-key-press-in-brief-view.patch</changelog>
  <changelog author="wbauer@tmo.at" date="1494158400">- Add fix-build-with-gcc48.patch to fix build on Leap 42</changelog>
  <changelog author="wbauer@tmo.at" date="1494849600">- Add org.kde.krusader.root-mode.desktop, it got removed in 2.6.0</changelog>
  <changelog author="wbauer@tmo.at" date="1515758400">- Add Panel-fixed-actions-in-PanelContextMenu-ignored.patch to fix
  the "Create New" context menu not working when the '..' entry is
  selected (boo#1075690, kde#383544)</changelog>
  <changelog author="wbauer@tmo.at" date="1526299200">- Update to 2.7.0
  * New feature: Quick Search in Bookmark menu
  * New feature: Tab pinning
  * New feature: Tooltip with file information when you hover a
    file name
  * New feature: Extended options for Tree Panel
  * New feature: Debug output option
  * Improved icon theme handling
  * Fixed 40+ issues including some regressions
- Drop patches merged upstream:
  * fix-build-with-gcc48.patch
  * Panel-fixed-actions-in-PanelContextMenu-ignored.patch
- Mark license file as %license instead of %doc
- Adjust file lists</changelog>
  <changelog author="wbauer@tmo.at" date="1534075200">- Update to 2.7.1
  * ADDED: Default shortcut for quick selection mode = Ctrl+Shift+S
  * FIXED: When calculating occupied space of ".." , krusader
    selects all directories (kde#150247)
  * FIXED: Bad default in the New Text File dialog (kde#282069)
  * FIXED: ISO files listing/extracting broken (kde#372023)
  * FIXED: Details section is empty in 'Do not know which files to
    compare.' window (kde#383567)
  * FIXED: Default mode in 'Find in folder' is not preserved
    (kde#391946)
  * FIXED: Files fed to listbox (and all other files in virt://)
    cannot be deleted (kde#394896)
  * FIXED: Enter key not working when cursor in search bar
    (kde#394939)
  * FIXED: The quicksearch bar is still opened after deleting a
    file (kde#395285)
  * FIXED: In the Manage User Actions dialog: the tab order is not
    the expected one (kde#396652)</changelog>
  <changelog author="wbauer@tmo.at" date="1552392000">- Add Prefer-to-find-oktetapart-by-desktop-file.patch to make it
  compatible with the upcoming okteta 0.26 release</changelog>
  <changelog author="wbauer@tmo.at" date="1566820800">- Update to 2.7.2
  * FIXED: Memory leak in the Locate dialog
  * FIXED: UDSEntry::insert deprecation warnings
  * FIXED: synchronize directory window: column widths
    are incorrect (kde#167410)
  * FIXED: Context menu item "copy selected to clipboard" copies
    all result items (kde#328918)
  * FIXED: "Information - Krusader" dialog does not fit to screen
    width; text non-copyable (kde#330788)
  * FIXED: After trying to rename the file that's being updated,
    rename function stops working on any file on this tab
    (kde#392750)
  * FIXED: New Text File is created with 600 (-rw-------)
    permissions (kde#395609)
  * FIXED: Misleading ?Created? date in file properties
    (kde#397398)
  * FIXED: Compilation error because of QOverload usage
    (kde#405212)
  * FIXED: The list of search results doesn't get the focus
    (kde#410118)
  * FIXED: Krusader does not search correctly if the "Follow links"
    checkbox is disabled (kde#410120)
  * FIXED: Okteta support for versions &gt;= 0.26 (due to oktetapart
    file layout change)
- Drop Prefer-to-find-oktetapart-by-desktop-file.patch, merged
  upstream
- Don't add -fpermissive to compiler options, no longer necessary
- Run spec-cleaner</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1598529600">- Spec cleanup</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1656504000">- Add patch to fix the 'Compress' menu (boo#1198725, boo#1203225, kde#441376)
  * 0001-Fixed-non-working-actions-for-create-extract-archive.patch</changelog>
</package>
<package pkgid="05366f14025fd8d2d419921fe212130ff5c2f192a06a5b958e73f4257b2a662b" name="krusader" arch="src">
  <version epoch="0" ver="2.7.2" rel="bp154.3.3.1"/>
  <changelog author="toddrme2178@gmail.com" date="1316174400">- Added %kde4_runtime_requires macro (fix for RPMLINT warning)
- Fixed self-obsoletes (fix for RPMLINT warning)
- Cleaned up spec file formatting</changelog>
  <changelog author="ctrippe@opensuse.org" date="1321876800">- Require kate as this is needed at runtime for the view and edit
  dialog (bnc#712179)</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1352548800">- Update to 2.4.0-beta3
  Changes since 2.0.0:
  * FIXED: crash when trying to open/(un)mount ejectable device via media menu
  * ADDED: options: Panel &gt; Media Menu &gt;
    Show Mount Path
    Show File Sytem Type
    Show Size (Always | When Device has no Label | Never)
  * ADDED: pressing CTRL+RETURN when media menu is open (un)mounts the highlighted device
  * ADDED: action: Bring Main Window to Top (global shortcut possible)
  * ADDED: option: General &gt; Viewer/Editor &gt; Viewer &gt; Use Okteta As Hex Viewer
    (default: on)
  * ADDED: option: Archives &gt; krarc &gt; Enable Write Support
  * ADDED: splitter option: Overwrite files without confirmation
  * ADDED: action: Go to Other Panel's Directory - shortcut: CTRL+=
  * CHANGED: krarc write support is disabled by default
  * CHANGED: user action manager starts with the "Basic Properties" tab active
  * CHANGED: detailed view: "Automatically Resize Columns" setting is remembered
  * FIXED: [ 306472 ] Krusader fails to build when using clang as compiler -
    thanks to Jekyll Wu
  * FIXED: [ 308193 ] Krusader closes the search window after file editing -
    thanks to Alexander
  * FIXED: pressing the context menu key when the media menu is shown
    opens the context menu for a random item instead of the current
  * FIXED: [ 300514 ] no warning if terminal emulator can't be created
  * FIXED: [ 303209 ] passwords for remote connections are stored in config
    NOTE: passwords already stored in krusaderrc may still be left
  * FIXED: [ 280946 ] viewer: incorrect tab's file names when moving tabs
  * FIXED: user actions: "run in the embedded terminal emulator" setting is not saved
  * FIXED: mountman: mount list is not refreshed if /etc/mtab is a symlink to /proc/mounts
  * FIXED: [ 148866 ] create new directory: spaces are stripped out
  * FIXED: [ 305069 ] list panel is not autoscrolled to the cursor (in brief view)
  * FIXED: [ 173690 ] file ACLs are not displayed correctly in properties dialog
  - thanks to Eugeny Shkrigunov
  * FIXED: It is impossible to select a non-default folder in the search dialog
  * FIXED: splitter overwrites files without confirmation
  * FIXED: [ 274483 ] crash when selecting items from popup-menu
  * FIXED: [ 285778 ] View or edit files doesn't work
  * FIXED: viewer tries to load obsolete libkhexedit2 part as hex viewer -
    use okteta part instead
  * FIXED: crash when trying to view files with embedded KOrganizer part
    (avoids KOrganizer bug 205713)
  * FIXED: "apply settings to other tab" action doesn't apply icon size
  * FIXED: [ 198996 ] crash when closing viewer
  * FIXED: [ 294501 ] toolbar "equal" has no shortcut
  * FIXED: [ 108892 ] "Combine Files" overwrites existing target file without confirmation
  * FIXED: Queue manager closed when any of the queues finished
  * FIXED: [ 300922 ] crash when pause sftp transfer via queue on quit
  * FIXED: [ 271265 ] krusader should search for kdesu executable in /usr/lib{64,}/kde4/libexec/
  - thanks to Anssi Hannula / Ahmad Samir
  * FIXED: [ 290304 ] Panel option "always sort dirs by name" doesn't work
  * FIXED: [ 297926 ] state of the menu item 'Show hidden files' and the current setting is different
  * FIXED: [ 234296 ] crash when closing disk usage view
  * FIXED: [ 296718 ] execution of files that have spaces in their path doesn't work anymore
  * FIXED: [ 294618 ] using "open with" on video files
    causes their thumbnails to be created, even when not needed
  * FIXED: root mode action doesn't work if a panel url contains spaces
  * FIXED: relative url completion in address-bar only works in home dir
  * FIXED: [ 242566 ] Cannot F3-View .vcf vCard files
  * FIXED: Root action (which opens the root dir of the local filesystem)
    is disabled in the root dir of nonlocal filesystems
  * FIXED: when cutting to clipboard from virt:/ the virtual entries are immediately removed
  * FIXED: Unselecting files before copy/move operation doesn't work for copy&amp;paste
  * FIXED: [ 277259 ] Unselecting files before copy/move operation doesn't work in the same panel
    this also fixes the selection of the other panel being cleared instead
  * FIXED: [ 276310 ] crash when trying to delete already deleted file
  * FIXED: [ 277578 ] Crash on cancelling calculation of occupied space on smb share
  * FIXED: krusader hangs for some time when opening a bz2(and possibly gzip)-compressed archive
  * FIXED: loading defaults on the Panel page in Konfigurator has no effect
  * FIXED: changes to "Show new/close tab buttons" don't take effect immediately
  * FIXED: when options requiring a gui restart are changed, the panel history is lost
  * FIXED: [ 277838 ] Swap Panels no longer works
  * ADDED: option: Panel &gt; Status/Totalsbar &gt; Show space information
  * ADDED: Konfigurator: reset button
  * ADDED: option: Startup &gt; User Interface &gt; Show actions toolbar
  * ADDED: options: Panel &gt; Layout: "Compact", "Classic"
  * ADDED: mountman gui option: Show only removable devices
  * ADDED: tabs have close buttons
  * ADDED: reset button for filter dialog
  * ADDED: option: Panel &gt; Operation &gt; Filter dialog remembers settings
  * ADDED: tabs can be dragged to the other side
  * ADDED: action: Move Current Tab to Other Side - shortcut: CTRL + SHIFT + O
  * ADDED: view: iconsizes 64, 128, 256
  * ADDED: history is saved/restored
  * ADDED: action: Restore Selection
  * ADDED: option: Panel &gt; Operation &gt; Unselect files before copy/move
  * ADDED: support for xz archives
  * CHANGED: new default panel layout
  * CHANGED: option: Panel &gt; View &gt; Show previews -&gt; Show previews by default
  * CHANGED: removed option "Show free disk space in the Totalsbar"
    since that setting is controlled by the layout chosen in Panel &gt;
    Layout
  * CHANGED: removed option "Preserve Attributes" - KIO always preserves
    Attributes
  * CHANGED: option: Panel &gt; Filelist icon size -&gt; Default icon size
  * CHANGED: quickfilter follows case sensivity setting of quicksearch
  * CHANGED: quickfilter expands wildcards
  * CHANGED: duplicate tab / open in new tab:
    create the new tab next to the current one.
  * CHANGED: filter settings are saved/restored individually for each tab.
  * CHANGED: filter settings are remembered when changing view type
  * CHANGED: All view settings are saved/restored individually for each tab.
  * FIXED: [ 3222819 (sf.net) ] Alt-Enter is not showing selected files'
    properties
  * FIXED: [ 274083 ] Search results list shows wrong extension when dir path
    has a dot in it
  * FIXED: [ 262761 ] krusader crashed on viewing text file with internal viewer
    this was probably already fixed in 2.3.0-beta1
  * FIXED: [ 229489 ] Seg fault moving ISO image files from USB Flash drive to
    USB SATA HD
  - thanks to Anssi Hannula
  * FIXED: mountman gui might add the same mountpoint to the list multiple times
  * FIXED: [ 3044425 (sf.net) ] Desktop freeze when opening a context menu
  * FIXED: [ 217203 ] Krusader crashed when accessing sftp after resume from
    sleep
  * FIXED: [ 243716, 270605, 270588 ] crash when moving files
  * FIXED: [ 256794 ] crash when file is deleted while a preview is being loaded
    for it (and it is the only file for which a preview is being loaded)
  * FIXED: [ 274732 ] Weird functionality after "directory doesn't exist"
  * FIXED: [ 3216624 (sf.net) ] Krusader saves newly created files with
    incorrect permissions
  * FIXED: [ 2773302 (sf.net) ] krarc can't handle brackets in file paths inside
    ZIP archive
  * FIXED: [ 272876, 274269 ] crash when refreshing view
  * FIXED: [ 3191155 (sf.net) ] Moving a symbolic link changes attributes of
    target file
  * FIXED: [ 2998795 (sf.net) ] "Show actions toolbar" setting is not saved
  * FIXED: Url commandline argument opens a new tab instead of switching to an
    existing one
  * FIXED: root mode action does not work with newer versions of kdesu,
    thanks to CyberCastle
  * FIXED: switching tabs sometimes doesn't switch the panel
  * FIXED: [ 3004510 (sf.net) ] Double-clicking executables start in
    ~/Documents folder
  * FIXED: [ 2996188 (sf.net) ] relative path for custom folder icon doesn't
    work
  * FIXED: [ 2915020 (sf.net) ] wrong icon for directory symlink
  * FIXED: when switching tabs, sometimes the new tab isn't set active
  * FIXED: [ 263253 ] View displays wrong total size in some circumstances.
  * FIXED in 2.3.0-beta1, but not recorded in Changelog at release time:
    [ 259495 ] crash when closing search dialog
  * ADDED: option: Panel &gt; General &gt; Flat Origin Bar
  * ADDED: option: Panel &gt; Buttons &gt; Toolbar buttons have icons
  * ADDED: listpanel buttons: Back, Forward
  * ADDED: options: Panel &gt; Layout &gt;
    Layout / Frame Color / Frame Shape / Frame Shadow
  * ADDED: QuickFilter - default shortcut: CTRL+i
  * ADDED: option: Panel &gt; View &gt; Show directories first
  * ADDED: actions: Back/Forward in history
  * ADDED: action: Set Focus to the Panel - shortcut: ESC
  * ADDED: actions: Move Focus Up/Down - shortcut: CTRL+SHIFT+Up/Down
  * ADDED: selection dialog option: Apply selection to directories
  * ADDED: option: Startup &gt; User Interface &gt; Update default panel settings
  * ADDED: dbus interface: org.krusader.Instance.openUrl(QString url)
  * ADDED: search dialog &gt; feed to listbox:
    search parameters are saved as metadata in the virtual fs and
    displayed in panel's statusbar
  * ADDED: filter option: Apply filter to directories
  * ADDED: action: view &gt; Apply settings to other tabs
  * ADDED: action: view &gt; Save settings as default (for new instances of this
    view type)
  * ADDED: option: Panel &gt; View &gt; Locale aware sorting
  * CHANGED: Media Button shows Solid Icon for currently opened device
  * CHANGED: Removed options Panel &gt; General &gt; Status/Totalsbar &gt;
    Statusbar Frame / Statusbar Background / Show Statusbar /
    Show Totalsbar. They are customizable in layout.xml.
  * CHANGED: Use KrView for displaying search results,
    which is much faster than the previously used QTreeWidget.
  * CHANGED: Removed default shortcuts for the Left/Right Bookmarks actions,
    as they conflict with the Back/Forward actions.
  * CHANGED: After failed refresh, only focus location bar if the url was entered
    manually.
  * CHANGED: Removed default shortcut for 'Cancel Refresh of View' as it conflicts
    with the 'Set Focus to the Panel' action. Unless a shortcut is
    assigned manually, ESC cancels the refresh when the panel is focused.
  * CHANGED: Konfigurator: "apply" takes effect immediately.
  * CHANGED: Url commandline argument: if there is already a tab open with that
    url, it is activated, otherwise a new tab is opened in the active
    panel.
  * FIXED: When trying to close Konfigurator but canceling the
    "Apply changes ?" dialog, Konfigurator it is closed anyway.
  * FIXED: [ 3073211 ] Wrong quoting when opening file in external editor
  * FIXED: [ 3059457 ] new panel uses default columns instead of configured
    ones
  * FIXED: [ 2898151 ] also in view-mode (F3) possible to edit, thanks to Kevin
    Kofler
  * FIXED: panelpopup viewer: error messageboxes when file cannot be displayed
  * FIXED: [ 2981303 ] Viewer/editor unused submenu Game, thanks to Kevin
    Kofler
  * FIXED: regression making single-click mode unusable, thanks to Kevin Kofler
  * FIXED: [ 3003338 ] Rename selects extension regression, thanks to Kevin
    Kofler
  * FIXED: [ 2980201 ] KrViewer doesn't handle binary files well (this fix
    works only for local files !)
  * FIXED: "sort by" useractions change sorting direction randomly
  * FIXED: [ 3028599 ] Sorting criteria is not saved at exit
  * FIXED: [ 2949337 ] splitter ui bug
  * FIXED: [ 2843749 ] view item is deselected when updated
  * FIXED: [ 268037 (bugs.kde.org) ] brief view: mouse wheel doesn't work
  * FIXED: brief view: mouse selection doesn't work in columns &gt; columns per
    page
  * FIXED: selecting a bigger number of files is very slow
  * FIXED: [ 2969403 ] KrViewer shows old file content if file is overwritten,
    thanks to Kevin Kofler
  * FIXED: [ 246424 (bugs.kde.org) ] krusader tries to load WHOLE big file into
    memory on F3
  * FIXED: [ 2154760 ] Krusader erases files when opening for editing
  * FIXED: changing sort direction is slow
  * FIXED: [ 3015094 ] krusader doesn't exit at closing the application
  * FIXED: right clicking on media button doesn't work
  * FIXED: tabs were no longer movable, thanks to Victor (kernel_daemon)
  * FIXED: 3 valgrind fixes by Alexander Stein
  * FIXED: viewer would show empty menus, thanks to CtHx
  * FIXED: crash when changing view type
  * ADDED: option: Panel &gt; General &gt; Tabs &gt; Show new/close tab buttons
  * ADDED: options: Panel &gt; Buttons &gt; Show Media/History/Bookmarks Button
  * ADDED: options: Panel &gt; General &gt; Status/Totalsbar settings &gt;
    Show Statusbar, Show Totalsbar, Show Size In Bytes,
    Show free disk space in the Totalsbar
  * ADDED: option: Look&amp;Feel &gt; Quicksearch &gt; "Up/Down cancels Quicksearch"
  * ADDED: dbus interface: org.krusader.PanelManager.newTab(QString url) /
    newTabs(QStringList)
  * ADDED: url command-line argument
  * ADDED: action "Show View Options Menu"
  * ADDED: detailed view context-menu option "Automatically Resize Columns"
  * ADDED: action "cancel refresh" triggered by ESC by default
  * ADDED: change icon size individually per view
  * ADDED: thumbnails - toggleable by mainmenu &gt; view &gt; Show Previews
  * ADDED: 128x128 pixel versions of the application icon, needed by Mac OS X
  * ADDED: Konfigurator options: Look&amp;Feel &gt; Panel &gt;
    Status/Totalsbar settings &gt; Draw frame / Fill background
  * ADDED: Konfigurator option: Colors &gt; Colors &gt; Other &gt; Statusbar
  * ADDED: Konfigurator option: Look&amp;Feel &gt; Panel &gt; Panel layout &gt;
    Quicksearch position / Tab Bar position
  * ADDED: buttons "(un)mount" and "eject" in mountman gui
  * ADDED: KMountMan::removable(), KMountMan::networkFilesystem()
  * CHANGED: reorganize Konfigurator: "Look &amp; Feel" page becomes "Panel" /
    move several options to new places
  * CHANGED: when open/refresh of a dir fails, don't annoy the user with a message
    box, but display the error embedded into the panel
  * CHANGED: icon size, icons/previews on/off are set separately per view type
  * CHANGED: dim icons in unfocused panel (if dim colors is activated)
  * CHANGED: mountman gui: retrieve icons from Solid
  * CHANGED: mountman gui: change mount check interval from 3000 to 500 ms
  * CHANGED: mountman gui: current selection persists refresh of mountlist,
    mountlist is focused after refresh
  * CHANGED: dont't execute a process if the correct working dir cannot be set
  * CHANGED: dont't retrieve working dir of the cmdline from the label which might
    get truncated - store it in a string instead
  * FIXED: brief view: clicking on the space below a column selects the first
    item of the next column
  * FIXED: if refresh has failed, the origin bar is focused even if the panel is
    not active
  * FIXED: if the path of an inactive panel changes, the embedded cmdline is set
    to that path
  * FIXED: useraction commands, or those entered in the embedded cmdline, are
    sometimes not executed in the correct working dir
  * FIXED: when multiple commands are entered in the embedded cmdline or a
    useraction, and execution mode is set to terminal, only the first
    command is executed in a new terminal and the others in the same
    terminal (if any) as krusader
  * FIXED: commands entered via command line are mixed up with history
  * FIXED: [ 2790819, 2892768, 2915192 ] Can't resize columns properly
  * FIXED: disk usage dialog layout problem
  * FIXED: [ 2907607 ] crash while closing
  * FIXED: if a panel is focused by clicking on the header, the colors/actions
    are not updated
  * FIXED: mountman: unmounting is not possible if currently opened dir is below
    the mountpoint
  * FIXED: [ 2860400 ] Drag'n'drop to kmail broken
  * FIXED: [ 2904850 ] panels are not repainted
  * FIXED: deadlock when trying to display error message after failed mount
  * FIXED: [ 2858133 ] wrong background color in listviews
  * ADDED: file regex in quick search, thanks to GregC
  * ADDED: lister: a fast text/hex viewer for Krusader
  * ADDED: service menu, thanks to Tomasz Kalkosinski
  * ADDED: queued packing / unpacking
  * ADDED: lock tabs, close inactive tabs, close duplicated tabs
  * ADDED: better trash integration
  * CHANGED: the packer/unpacker/archive tester are job based now
  * CHANGED: the old views were replaced by the interviews
  * FIXED: [ 2857663 ] deadlock when trying to display error message after
    failed unmount
  * FIXED: problem with autorefresh in the new interviews
  * FIXED: [ 2609505 ] problem with directory refresh
  * FIXED: [ 2793916 ] KHistoryComboBox content can change the window width
  * FIXED: [ 2805624 ] ctrl-left/right arrow with locked tabs on the other panel
  * FIXED: panels sometimes lose focus
  * FIXED: directory compare modes don't work
  * FIXED: [ 2609483 ] unpacking to directories with international characters</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1352721600">- Add bug309159.patch from upstream, to fix crashes with previewing video files
- Properly annotate previous patch (krusader-2.4.0-beta2-generate-manpage.patch)</changelog>
  <changelog author="baiduzhyi.devel@gmail.com" date="1427284800">- Require libktexteditor instead of kate to solve installation conflicts
  when using KF5.</changelog>
  <changelog author="tchvatal@suse.com" date="1432641600">- Only suggest documentation, do not recommend it.</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1477224000">- Update to 2.5.0
  * Added actions: Select files with the same name / extension
  * Changed disabled build of synchronizer by default, since it
    is unmaintained - build togglable with cmake variable
  - DENABLE_SYNCHRONIZER=true|false
  * Fixed (kde#143927) file search: "s" accelerator is doubled -
    new shortcut for "Search in" is ALT+h
  * Fixed (kde#308386) Duplicate shortcut on Search window -
    new shortcut for "Remote content search" is ALT+n
  * Fixed (kde#206926) Search doesn't work in sftp session
    (it returns too many results)
  * Fixed (kde#269542) Krusader search - Containing text
    still used when disabled
  * Fixed (kde#324737) symlinks with a target path length
    of over 255 do not work
  * Fixed (kde#189943) toolbar position settings are not remembered
  * Fixed (kde#316031) crash when loading previews
  * Fixed (kde#238672) When saving checksums fails,
    they are lost. No 2nd chance to save elsewhere.
  * Fixed (kde#315764) "application/x-source-rpm" isn't linked
    to krarc protocol by default
  * Fixed (kde#294816) Krusader needs to restart to apply
    new color scheme to panel
  * Fixed (kde#308727) external editor command isn't properly parsed
  * Fixed (kde#304233) empty main view on startup
  * Fixed (kde#315856) main view splitter sizes are not restored
  * Fixed (kde#248691) incorrect layout / wrong buttons
    in queue manager
  * Fixed (kde#315357) krarc silently fails to display
    contents of some zip files containing paths with "." as a
    path component are still not handled, but now krarc reports an
    error instead silently failing
  * Fixed (kde#310722) viewer crash when opening file
  * Fixed search result view always displays owner and group as "root"
    (may not work for remote search)
  * Fixed (kde#217711) directory chooser dialog does not allow
    to choose a directory
  * Fixed (kde#309119) Wrong "New directory" dialog behavior:
    can't clear all typed text
  * Fixed (kde#309159) Crash in video files preview on F3
  * Fixed (kde#310191) krusader still installs locolor icons
  * Fixed (kde#317510 ] icon-size-and-directory-name-mismatch
- Package ported to KF5, changed all the BuildRequires to KF5 ones
- Swap krusader-2.4.0-beta2-generate-manpage.patch for
  krusader-2.5.0-generate-manpage.patch
- Drop upstreamed bug309159.patch
- Added 0001-Don-t-hardcode-appdata-location.patch</changelog>
  <changelog author="wbauer@tmo.at" date="1479729600">- Add Remove-non-archive-mimetypes-from-krarc-archive-mime-type-list.patch
  to fix dolphin opening e.g. LibreOffice files as archives
  (boo#1011320, kde#371765)</changelog>
  <changelog author="wbauer@tmo.at" date="1482408000">- Add add-service-actions-to-right-click-popup-menu.patch to add
  KDE's service actions to the right click popup menu in krusader
  again (boo#1016980, kde#372231)</changelog>
  <changelog author="wbauer@tmo.at" date="1483617600">- Add Handle-arrow-key-press-in-brief-view.patch to fix the
  behavior when pressing the left/right cursor keys in brief view
  (boo#1017533, kde#374238)</changelog>
  <changelog author="wbauer@tmo.at" date="1491912000">- Update to 2.6.0
  * FIXED: (kde#335993) save checksum does not work as expected
  * FIXED: (kde#375639) Allow typing special characters (e.g. with
    accent or acute) in search bar
  * FIXED: (kde#328068) Send SIGINT before own input command to
    embedded terminal
  * FIXED: (kde#375135) segfault on viewing html files with Generic
    viewer
  * FIXED: (kde#269820) Fullscreen terminal emulator shows empty
    window when terminal emulator was minimized
  * FIXED: (kde#374813) Multi rename with KRename does not work
    when selecting non-local files/folders (ftp, smb, virt, ...)
  * FIXED: (kde#309300) Esc as the default shortcut of "Set Focus
    to The Panel" is problematic for the embedded terminal
  * FIXED: (kde#374175) wrong date format parsing using date filter
    in search dialog
  * FIXED: (kde#293370) After a file deletion old file name is
    still shown in the status bar
  * FIXED: (kde#374322) Visually indicated shortcut ALT+o not
    working in copy/F5 and move/F6 KrDialog
  * FIXED: (kde#374238) Handle left/right arrow key press in brief
    view (previously filtered by search bar).
  * FIXED: when dragged from list panel use correct drop action if
    invoked with modifier keys
  * FIXED: added save/restore or toolbar positions in mainwindow
  * FIXED: (kde#372231) Added KDE's service actions again to
    right-click popup menu
  * ADDED: new undo action to job manager for undoing KIO job
    operations
  * FIXED: (kde#372067) Wrong path when showing non local files and
    folders from search dialog in panel
  * ADDED: job manager as replacement for queue manager. Part of
    cleaning VFS
  * FIXED: (kde#365105) Workaround for bug in KF5+QSystemTrayIcon
  * ADDED: Reimplementation of "minimize to system tray" feature.
  * FIXED: Krusader does not show the new file in a directory that
    is a symbolic link until is not refresh directory
  * FIXED: Wrong window position after restart in fluxbox
  * FIXED: Error on opening file folder after clicking on any file
    result of a remote search (FTP / smb)
  * FIXED: Terminal opens in full window
  * FIXED: copy location/path bar (feature request)
  * FIXED: krusader cannot calculate size of remote directory (ftp
    or sftp)
  * FIXED: Some files with weird characters (non UTF) cause krusader
    to miscalculate folder size
  * FIXED: No way to focus fullscreen embedded terminal emulator.
  * FIXED: Don't delete first letter in "new folder" dialog (F7)
  * FIXED: Use Shift+Delete for delete or move selected files to
    trash
  * FIXED: Dialog "File" -&gt; "Verify checksum" improvement
  * FIXED: Option for show copy/move progress in dialog (not in
    notifications)
  * FIXED: Documents suddenly open as archives
  * CHANGED: Avoiding root mode
  * CHANGED: Duplicated tab should not be locked
  * CHANGED: New PagePanel: do not refresh until panel becomes
    visible
  * CHANGED: Change suggested command for "edit as root" user
    action to a more secure alternative
  * CHANGED: Do not configure kdesu path and remove kdesudo support
    again
  * CHANGED: Panel: Do not select .. in a filtered view if there
    are other entries
  * CHANGED: Duplicate tab settings when duplicating tabs
  * CHANGED: Some fixes and simpifying startup settings.
- Drop upstream patches:
  * krusader-2.5.0-generate-manpage.patch
  * 0001-Don-t-hardcode-appdata-location.patch
  * Remove-non-archive-mimetypes-from-krarc-archive-mime-type-list.patch
  * add-service-actions-to-right-click-popup-menu.patch
  * Handle-arrow-key-press-in-brief-view.patch</changelog>
  <changelog author="wbauer@tmo.at" date="1494158400">- Add fix-build-with-gcc48.patch to fix build on Leap 42</changelog>
  <changelog author="wbauer@tmo.at" date="1494849600">- Add org.kde.krusader.root-mode.desktop, it got removed in 2.6.0</changelog>
  <changelog author="wbauer@tmo.at" date="1515758400">- Add Panel-fixed-actions-in-PanelContextMenu-ignored.patch to fix
  the "Create New" context menu not working when the '..' entry is
  selected (boo#1075690, kde#383544)</changelog>
  <changelog author="wbauer@tmo.at" date="1526299200">- Update to 2.7.0
  * New feature: Quick Search in Bookmark menu
  * New feature: Tab pinning
  * New feature: Tooltip with file information when you hover a
    file name
  * New feature: Extended options for Tree Panel
  * New feature: Debug output option
  * Improved icon theme handling
  * Fixed 40+ issues including some regressions
- Drop patches merged upstream:
  * fix-build-with-gcc48.patch
  * Panel-fixed-actions-in-PanelContextMenu-ignored.patch
- Mark license file as %license instead of %doc
- Adjust file lists</changelog>
  <changelog author="wbauer@tmo.at" date="1534075200">- Update to 2.7.1
  * ADDED: Default shortcut for quick selection mode = Ctrl+Shift+S
  * FIXED: When calculating occupied space of ".." , krusader
    selects all directories (kde#150247)
  * FIXED: Bad default in the New Text File dialog (kde#282069)
  * FIXED: ISO files listing/extracting broken (kde#372023)
  * FIXED: Details section is empty in 'Do not know which files to
    compare.' window (kde#383567)
  * FIXED: Default mode in 'Find in folder' is not preserved
    (kde#391946)
  * FIXED: Files fed to listbox (and all other files in virt://)
    cannot be deleted (kde#394896)
  * FIXED: Enter key not working when cursor in search bar
    (kde#394939)
  * FIXED: The quicksearch bar is still opened after deleting a
    file (kde#395285)
  * FIXED: In the Manage User Actions dialog: the tab order is not
    the expected one (kde#396652)</changelog>
  <changelog author="wbauer@tmo.at" date="1552392000">- Add Prefer-to-find-oktetapart-by-desktop-file.patch to make it
  compatible with the upcoming okteta 0.26 release</changelog>
  <changelog author="wbauer@tmo.at" date="1566820800">- Update to 2.7.2
  * FIXED: Memory leak in the Locate dialog
  * FIXED: UDSEntry::insert deprecation warnings
  * FIXED: synchronize directory window: column widths
    are incorrect (kde#167410)
  * FIXED: Context menu item "copy selected to clipboard" copies
    all result items (kde#328918)
  * FIXED: "Information - Krusader" dialog does not fit to screen
    width; text non-copyable (kde#330788)
  * FIXED: After trying to rename the file that's being updated,
    rename function stops working on any file on this tab
    (kde#392750)
  * FIXED: New Text File is created with 600 (-rw-------)
    permissions (kde#395609)
  * FIXED: Misleading ?Created? date in file properties
    (kde#397398)
  * FIXED: Compilation error because of QOverload usage
    (kde#405212)
  * FIXED: The list of search results doesn't get the focus
    (kde#410118)
  * FIXED: Krusader does not search correctly if the "Follow links"
    checkbox is disabled (kde#410120)
  * FIXED: Okteta support for versions &gt;= 0.26 (due to oktetapart
    file layout change)
- Drop Prefer-to-find-oktetapart-by-desktop-file.patch, merged
  upstream
- Don't add -fpermissive to compiler options, no longer necessary
- Run spec-cleaner</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1598529600">- Spec cleanup</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1656504000">- Add patch to fix the 'Compress' menu (boo#1198725, boo#1203225, kde#441376)
  * 0001-Fixed-non-working-actions-for-create-extract-archive.patch</changelog>
</package>
<package pkgid="f7f8311535529f05c696e87a9f96f6f13602e03f90c595a8c2b99c1782b9c38e" name="krusader" arch="x86_64">
  <version epoch="0" ver="2.7.2" rel="bp154.3.3.1"/>
  <changelog author="baiduzhyi.devel@gmail.com" date="1427284800">- Require libktexteditor instead of kate to solve installation conflicts
  when using KF5.</changelog>
  <changelog author="tchvatal@suse.com" date="1432641600">- Only suggest documentation, do not recommend it.</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1477224000">- Update to 2.5.0
  * Added actions: Select files with the same name / extension
  * Changed disabled build of synchronizer by default, since it
    is unmaintained - build togglable with cmake variable
  - DENABLE_SYNCHRONIZER=true|false
  * Fixed (kde#143927) file search: "s" accelerator is doubled -
    new shortcut for "Search in" is ALT+h
  * Fixed (kde#308386) Duplicate shortcut on Search window -
    new shortcut for "Remote content search" is ALT+n
  * Fixed (kde#206926) Search doesn't work in sftp session
    (it returns too many results)
  * Fixed (kde#269542) Krusader search - Containing text
    still used when disabled
  * Fixed (kde#324737) symlinks with a target path length
    of over 255 do not work
  * Fixed (kde#189943) toolbar position settings are not remembered
  * Fixed (kde#316031) crash when loading previews
  * Fixed (kde#238672) When saving checksums fails,
    they are lost. No 2nd chance to save elsewhere.
  * Fixed (kde#315764) "application/x-source-rpm" isn't linked
    to krarc protocol by default
  * Fixed (kde#294816) Krusader needs to restart to apply
    new color scheme to panel
  * Fixed (kde#308727) external editor command isn't properly parsed
  * Fixed (kde#304233) empty main view on startup
  * Fixed (kde#315856) main view splitter sizes are not restored
  * Fixed (kde#248691) incorrect layout / wrong buttons
    in queue manager
  * Fixed (kde#315357) krarc silently fails to display
    contents of some zip files containing paths with "." as a
    path component are still not handled, but now krarc reports an
    error instead silently failing
  * Fixed (kde#310722) viewer crash when opening file
  * Fixed search result view always displays owner and group as "root"
    (may not work for remote search)
  * Fixed (kde#217711) directory chooser dialog does not allow
    to choose a directory
  * Fixed (kde#309119) Wrong "New directory" dialog behavior:
    can't clear all typed text
  * Fixed (kde#309159) Crash in video files preview on F3
  * Fixed (kde#310191) krusader still installs locolor icons
  * Fixed (kde#317510 ] icon-size-and-directory-name-mismatch
- Package ported to KF5, changed all the BuildRequires to KF5 ones
- Swap krusader-2.4.0-beta2-generate-manpage.patch for
  krusader-2.5.0-generate-manpage.patch
- Drop upstreamed bug309159.patch
- Added 0001-Don-t-hardcode-appdata-location.patch</changelog>
  <changelog author="wbauer@tmo.at" date="1479729600">- Add Remove-non-archive-mimetypes-from-krarc-archive-mime-type-list.patch
  to fix dolphin opening e.g. LibreOffice files as archives
  (boo#1011320, kde#371765)</changelog>
  <changelog author="wbauer@tmo.at" date="1482408000">- Add add-service-actions-to-right-click-popup-menu.patch to add
  KDE's service actions to the right click popup menu in krusader
  again (boo#1016980, kde#372231)</changelog>
  <changelog author="wbauer@tmo.at" date="1483617600">- Add Handle-arrow-key-press-in-brief-view.patch to fix the
  behavior when pressing the left/right cursor keys in brief view
  (boo#1017533, kde#374238)</changelog>
  <changelog author="wbauer@tmo.at" date="1491912000">- Update to 2.6.0
  * FIXED: (kde#335993) save checksum does not work as expected
  * FIXED: (kde#375639) Allow typing special characters (e.g. with
    accent or acute) in search bar
  * FIXED: (kde#328068) Send SIGINT before own input command to
    embedded terminal
  * FIXED: (kde#375135) segfault on viewing html files with Generic
    viewer
  * FIXED: (kde#269820) Fullscreen terminal emulator shows empty
    window when terminal emulator was minimized
  * FIXED: (kde#374813) Multi rename with KRename does not work
    when selecting non-local files/folders (ftp, smb, virt, ...)
  * FIXED: (kde#309300) Esc as the default shortcut of "Set Focus
    to The Panel" is problematic for the embedded terminal
  * FIXED: (kde#374175) wrong date format parsing using date filter
    in search dialog
  * FIXED: (kde#293370) After a file deletion old file name is
    still shown in the status bar
  * FIXED: (kde#374322) Visually indicated shortcut ALT+o not
    working in copy/F5 and move/F6 KrDialog
  * FIXED: (kde#374238) Handle left/right arrow key press in brief
    view (previously filtered by search bar).
  * FIXED: when dragged from list panel use correct drop action if
    invoked with modifier keys
  * FIXED: added save/restore or toolbar positions in mainwindow
  * FIXED: (kde#372231) Added KDE's service actions again to
    right-click popup menu
  * ADDED: new undo action to job manager for undoing KIO job
    operations
  * FIXED: (kde#372067) Wrong path when showing non local files and
    folders from search dialog in panel
  * ADDED: job manager as replacement for queue manager. Part of
    cleaning VFS
  * FIXED: (kde#365105) Workaround for bug in KF5+QSystemTrayIcon
  * ADDED: Reimplementation of "minimize to system tray" feature.
  * FIXED: Krusader does not show the new file in a directory that
    is a symbolic link until is not refresh directory
  * FIXED: Wrong window position after restart in fluxbox
  * FIXED: Error on opening file folder after clicking on any file
    result of a remote search (FTP / smb)
  * FIXED: Terminal opens in full window
  * FIXED: copy location/path bar (feature request)
  * FIXED: krusader cannot calculate size of remote directory (ftp
    or sftp)
  * FIXED: Some files with weird characters (non UTF) cause krusader
    to miscalculate folder size
  * FIXED: No way to focus fullscreen embedded terminal emulator.
  * FIXED: Don't delete first letter in "new folder" dialog (F7)
  * FIXED: Use Shift+Delete for delete or move selected files to
    trash
  * FIXED: Dialog "File" -&gt; "Verify checksum" improvement
  * FIXED: Option for show copy/move progress in dialog (not in
    notifications)
  * FIXED: Documents suddenly open as archives
  * CHANGED: Avoiding root mode
  * CHANGED: Duplicated tab should not be locked
  * CHANGED: New PagePanel: do not refresh until panel becomes
    visible
  * CHANGED: Change suggested command for "edit as root" user
    action to a more secure alternative
  * CHANGED: Do not configure kdesu path and remove kdesudo support
    again
  * CHANGED: Panel: Do not select .. in a filtered view if there
    are other entries
  * CHANGED: Duplicate tab settings when duplicating tabs
  * CHANGED: Some fixes and simpifying startup settings.
- Drop upstream patches:
  * krusader-2.5.0-generate-manpage.patch
  * 0001-Don-t-hardcode-appdata-location.patch
  * Remove-non-archive-mimetypes-from-krarc-archive-mime-type-list.patch
  * add-service-actions-to-right-click-popup-menu.patch
  * Handle-arrow-key-press-in-brief-view.patch</changelog>
  <changelog author="wbauer@tmo.at" date="1494158400">- Add fix-build-with-gcc48.patch to fix build on Leap 42</changelog>
  <changelog author="wbauer@tmo.at" date="1494849600">- Add org.kde.krusader.root-mode.desktop, it got removed in 2.6.0</changelog>
  <changelog author="wbauer@tmo.at" date="1515758400">- Add Panel-fixed-actions-in-PanelContextMenu-ignored.patch to fix
  the "Create New" context menu not working when the '..' entry is
  selected (boo#1075690, kde#383544)</changelog>
  <changelog author="wbauer@tmo.at" date="1526299200">- Update to 2.7.0
  * New feature: Quick Search in Bookmark menu
  * New feature: Tab pinning
  * New feature: Tooltip with file information when you hover a
    file name
  * New feature: Extended options for Tree Panel
  * New feature: Debug output option
  * Improved icon theme handling
  * Fixed 40+ issues including some regressions
- Drop patches merged upstream:
  * fix-build-with-gcc48.patch
  * Panel-fixed-actions-in-PanelContextMenu-ignored.patch
- Mark license file as %license instead of %doc
- Adjust file lists</changelog>
  <changelog author="wbauer@tmo.at" date="1534075200">- Update to 2.7.1
  * ADDED: Default shortcut for quick selection mode = Ctrl+Shift+S
  * FIXED: When calculating occupied space of ".." , krusader
    selects all directories (kde#150247)
  * FIXED: Bad default in the New Text File dialog (kde#282069)
  * FIXED: ISO files listing/extracting broken (kde#372023)
  * FIXED: Details section is empty in 'Do not know which files to
    compare.' window (kde#383567)
  * FIXED: Default mode in 'Find in folder' is not preserved
    (kde#391946)
  * FIXED: Files fed to listbox (and all other files in virt://)
    cannot be deleted (kde#394896)
  * FIXED: Enter key not working when cursor in search bar
    (kde#394939)
  * FIXED: The quicksearch bar is still opened after deleting a
    file (kde#395285)
  * FIXED: In the Manage User Actions dialog: the tab order is not
    the expected one (kde#396652)</changelog>
  <changelog author="wbauer@tmo.at" date="1552392000">- Add Prefer-to-find-oktetapart-by-desktop-file.patch to make it
  compatible with the upcoming okteta 0.26 release</changelog>
  <changelog author="wbauer@tmo.at" date="1566820800">- Update to 2.7.2
  * FIXED: Memory leak in the Locate dialog
  * FIXED: UDSEntry::insert deprecation warnings
  * FIXED: synchronize directory window: column widths
    are incorrect (kde#167410)
  * FIXED: Context menu item "copy selected to clipboard" copies
    all result items (kde#328918)
  * FIXED: "Information - Krusader" dialog does not fit to screen
    width; text non-copyable (kde#330788)
  * FIXED: After trying to rename the file that's being updated,
    rename function stops working on any file on this tab
    (kde#392750)
  * FIXED: New Text File is created with 600 (-rw-------)
    permissions (kde#395609)
  * FIXED: Misleading ?Created? date in file properties
    (kde#397398)
  * FIXED: Compilation error because of QOverload usage
    (kde#405212)
  * FIXED: The list of search results doesn't get the focus
    (kde#410118)
  * FIXED: Krusader does not search correctly if the "Follow links"
    checkbox is disabled (kde#410120)
  * FIXED: Okteta support for versions &gt;= 0.26 (due to oktetapart
    file layout change)
- Drop Prefer-to-find-oktetapart-by-desktop-file.patch, merged
  upstream
- Don't add -fpermissive to compiler options, no longer necessary
- Run spec-cleaner</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1598529600">- Spec cleanup</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1656504000">- Add patch to fix the 'Compress' menu (boo#1198725, boo#1203225, kde#441376)
  * 0001-Fixed-non-working-actions-for-create-extract-archive.patch</changelog>
</package>
<package pkgid="791121d0d93ecff1e7ec8c38a139632cbc22a33bd10e6c75fa428f781b7cced6" name="krusader-doc" arch="aarch64">
  <version epoch="0" ver="2.7.2" rel="bp154.3.3.1"/>
  <changelog author="baiduzhyi.devel@gmail.com" date="1427284800">- Require libktexteditor instead of kate to solve installation conflicts
  when using KF5.</changelog>
  <changelog author="tchvatal@suse.com" date="1432641600">- Only suggest documentation, do not recommend it.</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1477224000">- Update to 2.5.0
  * Added actions: Select files with the same name / extension
  * Changed disabled build of synchronizer by default, since it
    is unmaintained - build togglable with cmake variable
  - DENABLE_SYNCHRONIZER=true|false
  * Fixed (kde#143927) file search: "s" accelerator is doubled -
    new shortcut for "Search in" is ALT+h
  * Fixed (kde#308386) Duplicate shortcut on Search window -
    new shortcut for "Remote content search" is ALT+n
  * Fixed (kde#206926) Search doesn't work in sftp session
    (it returns too many results)
  * Fixed (kde#269542) Krusader search - Containing text
    still used when disabled
  * Fixed (kde#324737) symlinks with a target path length
    of over 255 do not work
  * Fixed (kde#189943) toolbar position settings are not remembered
  * Fixed (kde#316031) crash when loading previews
  * Fixed (kde#238672) When saving checksums fails,
    they are lost. No 2nd chance to save elsewhere.
  * Fixed (kde#315764) "application/x-source-rpm" isn't linked
    to krarc protocol by default
  * Fixed (kde#294816) Krusader needs to restart to apply
    new color scheme to panel
  * Fixed (kde#308727) external editor command isn't properly parsed
  * Fixed (kde#304233) empty main view on startup
  * Fixed (kde#315856) main view splitter sizes are not restored
  * Fixed (kde#248691) incorrect layout / wrong buttons
    in queue manager
  * Fixed (kde#315357) krarc silently fails to display
    contents of some zip files containing paths with "." as a
    path component are still not handled, but now krarc reports an
    error instead silently failing
  * Fixed (kde#310722) viewer crash when opening file
  * Fixed search result view always displays owner and group as "root"
    (may not work for remote search)
  * Fixed (kde#217711) directory chooser dialog does not allow
    to choose a directory
  * Fixed (kde#309119) Wrong "New directory" dialog behavior:
    can't clear all typed text
  * Fixed (kde#309159) Crash in video files preview on F3
  * Fixed (kde#310191) krusader still installs locolor icons
  * Fixed (kde#317510 ] icon-size-and-directory-name-mismatch
- Package ported to KF5, changed all the BuildRequires to KF5 ones
- Swap krusader-2.4.0-beta2-generate-manpage.patch for
  krusader-2.5.0-generate-manpage.patch
- Drop upstreamed bug309159.patch
- Added 0001-Don-t-hardcode-appdata-location.patch</changelog>
  <changelog author="wbauer@tmo.at" date="1479729600">- Add Remove-non-archive-mimetypes-from-krarc-archive-mime-type-list.patch
  to fix dolphin opening e.g. LibreOffice files as archives
  (boo#1011320, kde#371765)</changelog>
  <changelog author="wbauer@tmo.at" date="1482408000">- Add add-service-actions-to-right-click-popup-menu.patch to add
  KDE's service actions to the right click popup menu in krusader
  again (boo#1016980, kde#372231)</changelog>
  <changelog author="wbauer@tmo.at" date="1483617600">- Add Handle-arrow-key-press-in-brief-view.patch to fix the
  behavior when pressing the left/right cursor keys in brief view
  (boo#1017533, kde#374238)</changelog>
  <changelog author="wbauer@tmo.at" date="1491912000">- Update to 2.6.0
  * FIXED: (kde#335993) save checksum does not work as expected
  * FIXED: (kde#375639) Allow typing special characters (e.g. with
    accent or acute) in search bar
  * FIXED: (kde#328068) Send SIGINT before own input command to
    embedded terminal
  * FIXED: (kde#375135) segfault on viewing html files with Generic
    viewer
  * FIXED: (kde#269820) Fullscreen terminal emulator shows empty
    window when terminal emulator was minimized
  * FIXED: (kde#374813) Multi rename with KRename does not work
    when selecting non-local files/folders (ftp, smb, virt, ...)
  * FIXED: (kde#309300) Esc as the default shortcut of "Set Focus
    to The Panel" is problematic for the embedded terminal
  * FIXED: (kde#374175) wrong date format parsing using date filter
    in search dialog
  * FIXED: (kde#293370) After a file deletion old file name is
    still shown in the status bar
  * FIXED: (kde#374322) Visually indicated shortcut ALT+o not
    working in copy/F5 and move/F6 KrDialog
  * FIXED: (kde#374238) Handle left/right arrow key press in brief
    view (previously filtered by search bar).
  * FIXED: when dragged from list panel use correct drop action if
    invoked with modifier keys
  * FIXED: added save/restore or toolbar positions in mainwindow
  * FIXED: (kde#372231) Added KDE's service actions again to
    right-click popup menu
  * ADDED: new undo action to job manager for undoing KIO job
    operations
  * FIXED: (kde#372067) Wrong path when showing non local files and
    folders from search dialog in panel
  * ADDED: job manager as replacement for queue manager. Part of
    cleaning VFS
  * FIXED: (kde#365105) Workaround for bug in KF5+QSystemTrayIcon
  * ADDED: Reimplementation of "minimize to system tray" feature.
  * FIXED: Krusader does not show the new file in a directory that
    is a symbolic link until is not refresh directory
  * FIXED: Wrong window position after restart in fluxbox
  * FIXED: Error on opening file folder after clicking on any file
    result of a remote search (FTP / smb)
  * FIXED: Terminal opens in full window
  * FIXED: copy location/path bar (feature request)
  * FIXED: krusader cannot calculate size of remote directory (ftp
    or sftp)
  * FIXED: Some files with weird characters (non UTF) cause krusader
    to miscalculate folder size
  * FIXED: No way to focus fullscreen embedded terminal emulator.
  * FIXED: Don't delete first letter in "new folder" dialog (F7)
  * FIXED: Use Shift+Delete for delete or move selected files to
    trash
  * FIXED: Dialog "File" -&gt; "Verify checksum" improvement
  * FIXED: Option for show copy/move progress in dialog (not in
    notifications)
  * FIXED: Documents suddenly open as archives
  * CHANGED: Avoiding root mode
  * CHANGED: Duplicated tab should not be locked
  * CHANGED: New PagePanel: do not refresh until panel becomes
    visible
  * CHANGED: Change suggested command for "edit as root" user
    action to a more secure alternative
  * CHANGED: Do not configure kdesu path and remove kdesudo support
    again
  * CHANGED: Panel: Do not select .. in a filtered view if there
    are other entries
  * CHANGED: Duplicate tab settings when duplicating tabs
  * CHANGED: Some fixes and simpifying startup settings.
- Drop upstream patches:
  * krusader-2.5.0-generate-manpage.patch
  * 0001-Don-t-hardcode-appdata-location.patch
  * Remove-non-archive-mimetypes-from-krarc-archive-mime-type-list.patch
  * add-service-actions-to-right-click-popup-menu.patch
  * Handle-arrow-key-press-in-brief-view.patch</changelog>
  <changelog author="wbauer@tmo.at" date="1494158400">- Add fix-build-with-gcc48.patch to fix build on Leap 42</changelog>
  <changelog author="wbauer@tmo.at" date="1494849600">- Add org.kde.krusader.root-mode.desktop, it got removed in 2.6.0</changelog>
  <changelog author="wbauer@tmo.at" date="1515758400">- Add Panel-fixed-actions-in-PanelContextMenu-ignored.patch to fix
  the "Create New" context menu not working when the '..' entry is
  selected (boo#1075690, kde#383544)</changelog>
  <changelog author="wbauer@tmo.at" date="1526299200">- Update to 2.7.0
  * New feature: Quick Search in Bookmark menu
  * New feature: Tab pinning
  * New feature: Tooltip with file information when you hover a
    file name
  * New feature: Extended options for Tree Panel
  * New feature: Debug output option
  * Improved icon theme handling
  * Fixed 40+ issues including some regressions
- Drop patches merged upstream:
  * fix-build-with-gcc48.patch
  * Panel-fixed-actions-in-PanelContextMenu-ignored.patch
- Mark license file as %license instead of %doc
- Adjust file lists</changelog>
  <changelog author="wbauer@tmo.at" date="1534075200">- Update to 2.7.1
  * ADDED: Default shortcut for quick selection mode = Ctrl+Shift+S
  * FIXED: When calculating occupied space of ".." , krusader
    selects all directories (kde#150247)
  * FIXED: Bad default in the New Text File dialog (kde#282069)
  * FIXED: ISO files listing/extracting broken (kde#372023)
  * FIXED: Details section is empty in 'Do not know which files to
    compare.' window (kde#383567)
  * FIXED: Default mode in 'Find in folder' is not preserved
    (kde#391946)
  * FIXED: Files fed to listbox (and all other files in virt://)
    cannot be deleted (kde#394896)
  * FIXED: Enter key not working when cursor in search bar
    (kde#394939)
  * FIXED: The quicksearch bar is still opened after deleting a
    file (kde#395285)
  * FIXED: In the Manage User Actions dialog: the tab order is not
    the expected one (kde#396652)</changelog>
  <changelog author="wbauer@tmo.at" date="1552392000">- Add Prefer-to-find-oktetapart-by-desktop-file.patch to make it
  compatible with the upcoming okteta 0.26 release</changelog>
  <changelog author="wbauer@tmo.at" date="1566820800">- Update to 2.7.2
  * FIXED: Memory leak in the Locate dialog
  * FIXED: UDSEntry::insert deprecation warnings
  * FIXED: synchronize directory window: column widths
    are incorrect (kde#167410)
  * FIXED: Context menu item "copy selected to clipboard" copies
    all result items (kde#328918)
  * FIXED: "Information - Krusader" dialog does not fit to screen
    width; text non-copyable (kde#330788)
  * FIXED: After trying to rename the file that's being updated,
    rename function stops working on any file on this tab
    (kde#392750)
  * FIXED: New Text File is created with 600 (-rw-------)
    permissions (kde#395609)
  * FIXED: Misleading ?Created? date in file properties
    (kde#397398)
  * FIXED: Compilation error because of QOverload usage
    (kde#405212)
  * FIXED: The list of search results doesn't get the focus
    (kde#410118)
  * FIXED: Krusader does not search correctly if the "Follow links"
    checkbox is disabled (kde#410120)
  * FIXED: Okteta support for versions &gt;= 0.26 (due to oktetapart
    file layout change)
- Drop Prefer-to-find-oktetapart-by-desktop-file.patch, merged
  upstream
- Don't add -fpermissive to compiler options, no longer necessary
- Run spec-cleaner</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1598529600">- Spec cleanup</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1656504000">- Add patch to fix the 'Compress' menu (boo#1198725, boo#1203225, kde#441376)
  * 0001-Fixed-non-working-actions-for-create-extract-archive.patch</changelog>
</package>
<package pkgid="83ca2e78f931d0a05e66ee7a1ef74bdad881437ad074b872c784c3a9e6c67f78" name="krusader-doc" arch="ppc64le">
  <version epoch="0" ver="2.7.2" rel="bp154.3.3.1"/>
  <changelog author="baiduzhyi.devel@gmail.com" date="1427284800">- Require libktexteditor instead of kate to solve installation conflicts
  when using KF5.</changelog>
  <changelog author="tchvatal@suse.com" date="1432641600">- Only suggest documentation, do not recommend it.</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1477224000">- Update to 2.5.0
  * Added actions: Select files with the same name / extension
  * Changed disabled build of synchronizer by default, since it
    is unmaintained - build togglable with cmake variable
  - DENABLE_SYNCHRONIZER=true|false
  * Fixed (kde#143927) file search: "s" accelerator is doubled -
    new shortcut for "Search in" is ALT+h
  * Fixed (kde#308386) Duplicate shortcut on Search window -
    new shortcut for "Remote content search" is ALT+n
  * Fixed (kde#206926) Search doesn't work in sftp session
    (it returns too many results)
  * Fixed (kde#269542) Krusader search - Containing text
    still used when disabled
  * Fixed (kde#324737) symlinks with a target path length
    of over 255 do not work
  * Fixed (kde#189943) toolbar position settings are not remembered
  * Fixed (kde#316031) crash when loading previews
  * Fixed (kde#238672) When saving checksums fails,
    they are lost. No 2nd chance to save elsewhere.
  * Fixed (kde#315764) "application/x-source-rpm" isn't linked
    to krarc protocol by default
  * Fixed (kde#294816) Krusader needs to restart to apply
    new color scheme to panel
  * Fixed (kde#308727) external editor command isn't properly parsed
  * Fixed (kde#304233) empty main view on startup
  * Fixed (kde#315856) main view splitter sizes are not restored
  * Fixed (kde#248691) incorrect layout / wrong buttons
    in queue manager
  * Fixed (kde#315357) krarc silently fails to display
    contents of some zip files containing paths with "." as a
    path component are still not handled, but now krarc reports an
    error instead silently failing
  * Fixed (kde#310722) viewer crash when opening file
  * Fixed search result view always displays owner and group as "root"
    (may not work for remote search)
  * Fixed (kde#217711) directory chooser dialog does not allow
    to choose a directory
  * Fixed (kde#309119) Wrong "New directory" dialog behavior:
    can't clear all typed text
  * Fixed (kde#309159) Crash in video files preview on F3
  * Fixed (kde#310191) krusader still installs locolor icons
  * Fixed (kde#317510 ] icon-size-and-directory-name-mismatch
- Package ported to KF5, changed all the BuildRequires to KF5 ones
- Swap krusader-2.4.0-beta2-generate-manpage.patch for
  krusader-2.5.0-generate-manpage.patch
- Drop upstreamed bug309159.patch
- Added 0001-Don-t-hardcode-appdata-location.patch</changelog>
  <changelog author="wbauer@tmo.at" date="1479729600">- Add Remove-non-archive-mimetypes-from-krarc-archive-mime-type-list.patch
  to fix dolphin opening e.g. LibreOffice files as archives
  (boo#1011320, kde#371765)</changelog>
  <changelog author="wbauer@tmo.at" date="1482408000">- Add add-service-actions-to-right-click-popup-menu.patch to add
  KDE's service actions to the right click popup menu in krusader
  again (boo#1016980, kde#372231)</changelog>
  <changelog author="wbauer@tmo.at" date="1483617600">- Add Handle-arrow-key-press-in-brief-view.patch to fix the
  behavior when pressing the left/right cursor keys in brief view
  (boo#1017533, kde#374238)</changelog>
  <changelog author="wbauer@tmo.at" date="1491912000">- Update to 2.6.0
  * FIXED: (kde#335993) save checksum does not work as expected
  * FIXED: (kde#375639) Allow typing special characters (e.g. with
    accent or acute) in search bar
  * FIXED: (kde#328068) Send SIGINT before own input command to
    embedded terminal
  * FIXED: (kde#375135) segfault on viewing html files with Generic
    viewer
  * FIXED: (kde#269820) Fullscreen terminal emulator shows empty
    window when terminal emulator was minimized
  * FIXED: (kde#374813) Multi rename with KRename does not work
    when selecting non-local files/folders (ftp, smb, virt, ...)
  * FIXED: (kde#309300) Esc as the default shortcut of "Set Focus
    to The Panel" is problematic for the embedded terminal
  * FIXED: (kde#374175) wrong date format parsing using date filter
    in search dialog
  * FIXED: (kde#293370) After a file deletion old file name is
    still shown in the status bar
  * FIXED: (kde#374322) Visually indicated shortcut ALT+o not
    working in copy/F5 and move/F6 KrDialog
  * FIXED: (kde#374238) Handle left/right arrow key press in brief
    view (previously filtered by search bar).
  * FIXED: when dragged from list panel use correct drop action if
    invoked with modifier keys
  * FIXED: added save/restore or toolbar positions in mainwindow
  * FIXED: (kde#372231) Added KDE's service actions again to
    right-click popup menu
  * ADDED: new undo action to job manager for undoing KIO job
    operations
  * FIXED: (kde#372067) Wrong path when showing non local files and
    folders from search dialog in panel
  * ADDED: job manager as replacement for queue manager. Part of
    cleaning VFS
  * FIXED: (kde#365105) Workaround for bug in KF5+QSystemTrayIcon
  * ADDED: Reimplementation of "minimize to system tray" feature.
  * FIXED: Krusader does not show the new file in a directory that
    is a symbolic link until is not refresh directory
  * FIXED: Wrong window position after restart in fluxbox
  * FIXED: Error on opening file folder after clicking on any file
    result of a remote search (FTP / smb)
  * FIXED: Terminal opens in full window
  * FIXED: copy location/path bar (feature request)
  * FIXED: krusader cannot calculate size of remote directory (ftp
    or sftp)
  * FIXED: Some files with weird characters (non UTF) cause krusader
    to miscalculate folder size
  * FIXED: No way to focus fullscreen embedded terminal emulator.
  * FIXED: Don't delete first letter in "new folder" dialog (F7)
  * FIXED: Use Shift+Delete for delete or move selected files to
    trash
  * FIXED: Dialog "File" -&gt; "Verify checksum" improvement
  * FIXED: Option for show copy/move progress in dialog (not in
    notifications)
  * FIXED: Documents suddenly open as archives
  * CHANGED: Avoiding root mode
  * CHANGED: Duplicated tab should not be locked
  * CHANGED: New PagePanel: do not refresh until panel becomes
    visible
  * CHANGED: Change suggested command for "edit as root" user
    action to a more secure alternative
  * CHANGED: Do not configure kdesu path and remove kdesudo support
    again
  * CHANGED: Panel: Do not select .. in a filtered view if there
    are other entries
  * CHANGED: Duplicate tab settings when duplicating tabs
  * CHANGED: Some fixes and simpifying startup settings.
- Drop upstream patches:
  * krusader-2.5.0-generate-manpage.patch
  * 0001-Don-t-hardcode-appdata-location.patch
  * Remove-non-archive-mimetypes-from-krarc-archive-mime-type-list.patch
  * add-service-actions-to-right-click-popup-menu.patch
  * Handle-arrow-key-press-in-brief-view.patch</changelog>
  <changelog author="wbauer@tmo.at" date="1494158400">- Add fix-build-with-gcc48.patch to fix build on Leap 42</changelog>
  <changelog author="wbauer@tmo.at" date="1494849600">- Add org.kde.krusader.root-mode.desktop, it got removed in 2.6.0</changelog>
  <changelog author="wbauer@tmo.at" date="1515758400">- Add Panel-fixed-actions-in-PanelContextMenu-ignored.patch to fix
  the "Create New" context menu not working when the '..' entry is
  selected (boo#1075690, kde#383544)</changelog>
  <changelog author="wbauer@tmo.at" date="1526299200">- Update to 2.7.0
  * New feature: Quick Search in Bookmark menu
  * New feature: Tab pinning
  * New feature: Tooltip with file information when you hover a
    file name
  * New feature: Extended options for Tree Panel
  * New feature: Debug output option
  * Improved icon theme handling
  * Fixed 40+ issues including some regressions
- Drop patches merged upstream:
  * fix-build-with-gcc48.patch
  * Panel-fixed-actions-in-PanelContextMenu-ignored.patch
- Mark license file as %license instead of %doc
- Adjust file lists</changelog>
  <changelog author="wbauer@tmo.at" date="1534075200">- Update to 2.7.1
  * ADDED: Default shortcut for quick selection mode = Ctrl+Shift+S
  * FIXED: When calculating occupied space of ".." , krusader
    selects all directories (kde#150247)
  * FIXED: Bad default in the New Text File dialog (kde#282069)
  * FIXED: ISO files listing/extracting broken (kde#372023)
  * FIXED: Details section is empty in 'Do not know which files to
    compare.' window (kde#383567)
  * FIXED: Default mode in 'Find in folder' is not preserved
    (kde#391946)
  * FIXED: Files fed to listbox (and all other files in virt://)
    cannot be deleted (kde#394896)
  * FIXED: Enter key not working when cursor in search bar
    (kde#394939)
  * FIXED: The quicksearch bar is still opened after deleting a
    file (kde#395285)
  * FIXED: In the Manage User Actions dialog: the tab order is not
    the expected one (kde#396652)</changelog>
  <changelog author="wbauer@tmo.at" date="1552392000">- Add Prefer-to-find-oktetapart-by-desktop-file.patch to make it
  compatible with the upcoming okteta 0.26 release</changelog>
  <changelog author="wbauer@tmo.at" date="1566820800">- Update to 2.7.2
  * FIXED: Memory leak in the Locate dialog
  * FIXED: UDSEntry::insert deprecation warnings
  * FIXED: synchronize directory window: column widths
    are incorrect (kde#167410)
  * FIXED: Context menu item "copy selected to clipboard" copies
    all result items (kde#328918)
  * FIXED: "Information - Krusader" dialog does not fit to screen
    width; text non-copyable (kde#330788)
  * FIXED: After trying to rename the file that's being updated,
    rename function stops working on any file on this tab
    (kde#392750)
  * FIXED: New Text File is created with 600 (-rw-------)
    permissions (kde#395609)
  * FIXED: Misleading ?Created? date in file properties
    (kde#397398)
  * FIXED: Compilation error because of QOverload usage
    (kde#405212)
  * FIXED: The list of search results doesn't get the focus
    (kde#410118)
  * FIXED: Krusader does not search correctly if the "Follow links"
    checkbox is disabled (kde#410120)
  * FIXED: Okteta support for versions &gt;= 0.26 (due to oktetapart
    file layout change)
- Drop Prefer-to-find-oktetapart-by-desktop-file.patch, merged
  upstream
- Don't add -fpermissive to compiler options, no longer necessary
- Run spec-cleaner</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1598529600">- Spec cleanup</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1656504000">- Add patch to fix the 'Compress' menu (boo#1198725, boo#1203225, kde#441376)
  * 0001-Fixed-non-working-actions-for-create-extract-archive.patch</changelog>
</package>
<package pkgid="59fd62d56a6e31310d2b5f42ef8b8b121c58c804a9c203db8585fc988a51cca3" name="krusader-doc" arch="s390x">
  <version epoch="0" ver="2.7.2" rel="bp154.3.3.1"/>
  <changelog author="baiduzhyi.devel@gmail.com" date="1427284800">- Require libktexteditor instead of kate to solve installation conflicts
  when using KF5.</changelog>
  <changelog author="tchvatal@suse.com" date="1432641600">- Only suggest documentation, do not recommend it.</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1477224000">- Update to 2.5.0
  * Added actions: Select files with the same name / extension
  * Changed disabled build of synchronizer by default, since it
    is unmaintained - build togglable with cmake variable
  - DENABLE_SYNCHRONIZER=true|false
  * Fixed (kde#143927) file search: "s" accelerator is doubled -
    new shortcut for "Search in" is ALT+h
  * Fixed (kde#308386) Duplicate shortcut on Search window -
    new shortcut for "Remote content search" is ALT+n
  * Fixed (kde#206926) Search doesn't work in sftp session
    (it returns too many results)
  * Fixed (kde#269542) Krusader search - Containing text
    still used when disabled
  * Fixed (kde#324737) symlinks with a target path length
    of over 255 do not work
  * Fixed (kde#189943) toolbar position settings are not remembered
  * Fixed (kde#316031) crash when loading previews
  * Fixed (kde#238672) When saving checksums fails,
    they are lost. No 2nd chance to save elsewhere.
  * Fixed (kde#315764) "application/x-source-rpm" isn't linked
    to krarc protocol by default
  * Fixed (kde#294816) Krusader needs to restart to apply
    new color scheme to panel
  * Fixed (kde#308727) external editor command isn't properly parsed
  * Fixed (kde#304233) empty main view on startup
  * Fixed (kde#315856) main view splitter sizes are not restored
  * Fixed (kde#248691) incorrect layout / wrong buttons
    in queue manager
  * Fixed (kde#315357) krarc silently fails to display
    contents of some zip files containing paths with "." as a
    path component are still not handled, but now krarc reports an
    error instead silently failing
  * Fixed (kde#310722) viewer crash when opening file
  * Fixed search result view always displays owner and group as "root"
    (may not work for remote search)
  * Fixed (kde#217711) directory chooser dialog does not allow
    to choose a directory
  * Fixed (kde#309119) Wrong "New directory" dialog behavior:
    can't clear all typed text
  * Fixed (kde#309159) Crash in video files preview on F3
  * Fixed (kde#310191) krusader still installs locolor icons
  * Fixed (kde#317510 ] icon-size-and-directory-name-mismatch
- Package ported to KF5, changed all the BuildRequires to KF5 ones
- Swap krusader-2.4.0-beta2-generate-manpage.patch for
  krusader-2.5.0-generate-manpage.patch
- Drop upstreamed bug309159.patch
- Added 0001-Don-t-hardcode-appdata-location.patch</changelog>
  <changelog author="wbauer@tmo.at" date="1479729600">- Add Remove-non-archive-mimetypes-from-krarc-archive-mime-type-list.patch
  to fix dolphin opening e.g. LibreOffice files as archives
  (boo#1011320, kde#371765)</changelog>
  <changelog author="wbauer@tmo.at" date="1482408000">- Add add-service-actions-to-right-click-popup-menu.patch to add
  KDE's service actions to the right click popup menu in krusader
  again (boo#1016980, kde#372231)</changelog>
  <changelog author="wbauer@tmo.at" date="1483617600">- Add Handle-arrow-key-press-in-brief-view.patch to fix the
  behavior when pressing the left/right cursor keys in brief view
  (boo#1017533, kde#374238)</changelog>
  <changelog author="wbauer@tmo.at" date="1491912000">- Update to 2.6.0
  * FIXED: (kde#335993) save checksum does not work as expected
  * FIXED: (kde#375639) Allow typing special characters (e.g. with
    accent or acute) in search bar
  * FIXED: (kde#328068) Send SIGINT before own input command to
    embedded terminal
  * FIXED: (kde#375135) segfault on viewing html files with Generic
    viewer
  * FIXED: (kde#269820) Fullscreen terminal emulator shows empty
    window when terminal emulator was minimized
  * FIXED: (kde#374813) Multi rename with KRename does not work
    when selecting non-local files/folders (ftp, smb, virt, ...)
  * FIXED: (kde#309300) Esc as the default shortcut of "Set Focus
    to The Panel" is problematic for the embedded terminal
  * FIXED: (kde#374175) wrong date format parsing using date filter
    in search dialog
  * FIXED: (kde#293370) After a file deletion old file name is
    still shown in the status bar
  * FIXED: (kde#374322) Visually indicated shortcut ALT+o not
    working in copy/F5 and move/F6 KrDialog
  * FIXED: (kde#374238) Handle left/right arrow key press in brief
    view (previously filtered by search bar).
  * FIXED: when dragged from list panel use correct drop action if
    invoked with modifier keys
  * FIXED: added save/restore or toolbar positions in mainwindow
  * FIXED: (kde#372231) Added KDE's service actions again to
    right-click popup menu
  * ADDED: new undo action to job manager for undoing KIO job
    operations
  * FIXED: (kde#372067) Wrong path when showing non local files and
    folders from search dialog in panel
  * ADDED: job manager as replacement for queue manager. Part of
    cleaning VFS
  * FIXED: (kde#365105) Workaround for bug in KF5+QSystemTrayIcon
  * ADDED: Reimplementation of "minimize to system tray" feature.
  * FIXED: Krusader does not show the new file in a directory that
    is a symbolic link until is not refresh directory
  * FIXED: Wrong window position after restart in fluxbox
  * FIXED: Error on opening file folder after clicking on any file
    result of a remote search (FTP / smb)
  * FIXED: Terminal opens in full window
  * FIXED: copy location/path bar (feature request)
  * FIXED: krusader cannot calculate size of remote directory (ftp
    or sftp)
  * FIXED: Some files with weird characters (non UTF) cause krusader
    to miscalculate folder size
  * FIXED: No way to focus fullscreen embedded terminal emulator.
  * FIXED: Don't delete first letter in "new folder" dialog (F7)
  * FIXED: Use Shift+Delete for delete or move selected files to
    trash
  * FIXED: Dialog "File" -&gt; "Verify checksum" improvement
  * FIXED: Option for show copy/move progress in dialog (not in
    notifications)
  * FIXED: Documents suddenly open as archives
  * CHANGED: Avoiding root mode
  * CHANGED: Duplicated tab should not be locked
  * CHANGED: New PagePanel: do not refresh until panel becomes
    visible
  * CHANGED: Change suggested command for "edit as root" user
    action to a more secure alternative
  * CHANGED: Do not configure kdesu path and remove kdesudo support
    again
  * CHANGED: Panel: Do not select .. in a filtered view if there
    are other entries
  * CHANGED: Duplicate tab settings when duplicating tabs
  * CHANGED: Some fixes and simpifying startup settings.
- Drop upstream patches:
  * krusader-2.5.0-generate-manpage.patch
  * 0001-Don-t-hardcode-appdata-location.patch
  * Remove-non-archive-mimetypes-from-krarc-archive-mime-type-list.patch
  * add-service-actions-to-right-click-popup-menu.patch
  * Handle-arrow-key-press-in-brief-view.patch</changelog>
  <changelog author="wbauer@tmo.at" date="1494158400">- Add fix-build-with-gcc48.patch to fix build on Leap 42</changelog>
  <changelog author="wbauer@tmo.at" date="1494849600">- Add org.kde.krusader.root-mode.desktop, it got removed in 2.6.0</changelog>
  <changelog author="wbauer@tmo.at" date="1515758400">- Add Panel-fixed-actions-in-PanelContextMenu-ignored.patch to fix
  the "Create New" context menu not working when the '..' entry is
  selected (boo#1075690, kde#383544)</changelog>
  <changelog author="wbauer@tmo.at" date="1526299200">- Update to 2.7.0
  * New feature: Quick Search in Bookmark menu
  * New feature: Tab pinning
  * New feature: Tooltip with file information when you hover a
    file name
  * New feature: Extended options for Tree Panel
  * New feature: Debug output option
  * Improved icon theme handling
  * Fixed 40+ issues including some regressions
- Drop patches merged upstream:
  * fix-build-with-gcc48.patch
  * Panel-fixed-actions-in-PanelContextMenu-ignored.patch
- Mark license file as %license instead of %doc
- Adjust file lists</changelog>
  <changelog author="wbauer@tmo.at" date="1534075200">- Update to 2.7.1
  * ADDED: Default shortcut for quick selection mode = Ctrl+Shift+S
  * FIXED: When calculating occupied space of ".." , krusader
    selects all directories (kde#150247)
  * FIXED: Bad default in the New Text File dialog (kde#282069)
  * FIXED: ISO files listing/extracting broken (kde#372023)
  * FIXED: Details section is empty in 'Do not know which files to
    compare.' window (kde#383567)
  * FIXED: Default mode in 'Find in folder' is not preserved
    (kde#391946)
  * FIXED: Files fed to listbox (and all other files in virt://)
    cannot be deleted (kde#394896)
  * FIXED: Enter key not working when cursor in search bar
    (kde#394939)
  * FIXED: The quicksearch bar is still opened after deleting a
    file (kde#395285)
  * FIXED: In the Manage User Actions dialog: the tab order is not
    the expected one (kde#396652)</changelog>
  <changelog author="wbauer@tmo.at" date="1552392000">- Add Prefer-to-find-oktetapart-by-desktop-file.patch to make it
  compatible with the upcoming okteta 0.26 release</changelog>
  <changelog author="wbauer@tmo.at" date="1566820800">- Update to 2.7.2
  * FIXED: Memory leak in the Locate dialog
  * FIXED: UDSEntry::insert deprecation warnings
  * FIXED: synchronize directory window: column widths
    are incorrect (kde#167410)
  * FIXED: Context menu item "copy selected to clipboard" copies
    all result items (kde#328918)
  * FIXED: "Information - Krusader" dialog does not fit to screen
    width; text non-copyable (kde#330788)
  * FIXED: After trying to rename the file that's being updated,
    rename function stops working on any file on this tab
    (kde#392750)
  * FIXED: New Text File is created with 600 (-rw-------)
    permissions (kde#395609)
  * FIXED: Misleading ?Created? date in file properties
    (kde#397398)
  * FIXED: Compilation error because of QOverload usage
    (kde#405212)
  * FIXED: The list of search results doesn't get the focus
    (kde#410118)
  * FIXED: Krusader does not search correctly if the "Follow links"
    checkbox is disabled (kde#410120)
  * FIXED: Okteta support for versions &gt;= 0.26 (due to oktetapart
    file layout change)
- Drop Prefer-to-find-oktetapart-by-desktop-file.patch, merged
  upstream
- Don't add -fpermissive to compiler options, no longer necessary
- Run spec-cleaner</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1598529600">- Spec cleanup</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1656504000">- Add patch to fix the 'Compress' menu (boo#1198725, boo#1203225, kde#441376)
  * 0001-Fixed-non-working-actions-for-create-extract-archive.patch</changelog>
</package>
<package pkgid="4d906bc8132d3b4d641d005b02ad28bcb2a81a9f4241d3a06614bef470163bdf" name="krusader-doc" arch="x86_64">
  <version epoch="0" ver="2.7.2" rel="bp154.3.3.1"/>
  <changelog author="baiduzhyi.devel@gmail.com" date="1427284800">- Require libktexteditor instead of kate to solve installation conflicts
  when using KF5.</changelog>
  <changelog author="tchvatal@suse.com" date="1432641600">- Only suggest documentation, do not recommend it.</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1477224000">- Update to 2.5.0
  * Added actions: Select files with the same name / extension
  * Changed disabled build of synchronizer by default, since it
    is unmaintained - build togglable with cmake variable
  - DENABLE_SYNCHRONIZER=true|false
  * Fixed (kde#143927) file search: "s" accelerator is doubled -
    new shortcut for "Search in" is ALT+h
  * Fixed (kde#308386) Duplicate shortcut on Search window -
    new shortcut for "Remote content search" is ALT+n
  * Fixed (kde#206926) Search doesn't work in sftp session
    (it returns too many results)
  * Fixed (kde#269542) Krusader search - Containing text
    still used when disabled
  * Fixed (kde#324737) symlinks with a target path length
    of over 255 do not work
  * Fixed (kde#189943) toolbar position settings are not remembered
  * Fixed (kde#316031) crash when loading previews
  * Fixed (kde#238672) When saving checksums fails,
    they are lost. No 2nd chance to save elsewhere.
  * Fixed (kde#315764) "application/x-source-rpm" isn't linked
    to krarc protocol by default
  * Fixed (kde#294816) Krusader needs to restart to apply
    new color scheme to panel
  * Fixed (kde#308727) external editor command isn't properly parsed
  * Fixed (kde#304233) empty main view on startup
  * Fixed (kde#315856) main view splitter sizes are not restored
  * Fixed (kde#248691) incorrect layout / wrong buttons
    in queue manager
  * Fixed (kde#315357) krarc silently fails to display
    contents of some zip files containing paths with "." as a
    path component are still not handled, but now krarc reports an
    error instead silently failing
  * Fixed (kde#310722) viewer crash when opening file
  * Fixed search result view always displays owner and group as "root"
    (may not work for remote search)
  * Fixed (kde#217711) directory chooser dialog does not allow
    to choose a directory
  * Fixed (kde#309119) Wrong "New directory" dialog behavior:
    can't clear all typed text
  * Fixed (kde#309159) Crash in video files preview on F3
  * Fixed (kde#310191) krusader still installs locolor icons
  * Fixed (kde#317510 ] icon-size-and-directory-name-mismatch
- Package ported to KF5, changed all the BuildRequires to KF5 ones
- Swap krusader-2.4.0-beta2-generate-manpage.patch for
  krusader-2.5.0-generate-manpage.patch
- Drop upstreamed bug309159.patch
- Added 0001-Don-t-hardcode-appdata-location.patch</changelog>
  <changelog author="wbauer@tmo.at" date="1479729600">- Add Remove-non-archive-mimetypes-from-krarc-archive-mime-type-list.patch
  to fix dolphin opening e.g. LibreOffice files as archives
  (boo#1011320, kde#371765)</changelog>
  <changelog author="wbauer@tmo.at" date="1482408000">- Add add-service-actions-to-right-click-popup-menu.patch to add
  KDE's service actions to the right click popup menu in krusader
  again (boo#1016980, kde#372231)</changelog>
  <changelog author="wbauer@tmo.at" date="1483617600">- Add Handle-arrow-key-press-in-brief-view.patch to fix the
  behavior when pressing the left/right cursor keys in brief view
  (boo#1017533, kde#374238)</changelog>
  <changelog author="wbauer@tmo.at" date="1491912000">- Update to 2.6.0
  * FIXED: (kde#335993) save checksum does not work as expected
  * FIXED: (kde#375639) Allow typing special characters (e.g. with
    accent or acute) in search bar
  * FIXED: (kde#328068) Send SIGINT before own input command to
    embedded terminal
  * FIXED: (kde#375135) segfault on viewing html files with Generic
    viewer
  * FIXED: (kde#269820) Fullscreen terminal emulator shows empty
    window when terminal emulator was minimized
  * FIXED: (kde#374813) Multi rename with KRename does not work
    when selecting non-local files/folders (ftp, smb, virt, ...)
  * FIXED: (kde#309300) Esc as the default shortcut of "Set Focus
    to The Panel" is problematic for the embedded terminal
  * FIXED: (kde#374175) wrong date format parsing using date filter
    in search dialog
  * FIXED: (kde#293370) After a file deletion old file name is
    still shown in the status bar
  * FIXED: (kde#374322) Visually indicated shortcut ALT+o not
    working in copy/F5 and move/F6 KrDialog
  * FIXED: (kde#374238) Handle left/right arrow key press in brief
    view (previously filtered by search bar).
  * FIXED: when dragged from list panel use correct drop action if
    invoked with modifier keys
  * FIXED: added save/restore or toolbar positions in mainwindow
  * FIXED: (kde#372231) Added KDE's service actions again to
    right-click popup menu
  * ADDED: new undo action to job manager for undoing KIO job
    operations
  * FIXED: (kde#372067) Wrong path when showing non local files and
    folders from search dialog in panel
  * ADDED: job manager as replacement for queue manager. Part of
    cleaning VFS
  * FIXED: (kde#365105) Workaround for bug in KF5+QSystemTrayIcon
  * ADDED: Reimplementation of "minimize to system tray" feature.
  * FIXED: Krusader does not show the new file in a directory that
    is a symbolic link until is not refresh directory
  * FIXED: Wrong window position after restart in fluxbox
  * FIXED: Error on opening file folder after clicking on any file
    result of a remote search (FTP / smb)
  * FIXED: Terminal opens in full window
  * FIXED: copy location/path bar (feature request)
  * FIXED: krusader cannot calculate size of remote directory (ftp
    or sftp)
  * FIXED: Some files with weird characters (non UTF) cause krusader
    to miscalculate folder size
  * FIXED: No way to focus fullscreen embedded terminal emulator.
  * FIXED: Don't delete first letter in "new folder" dialog (F7)
  * FIXED: Use Shift+Delete for delete or move selected files to
    trash
  * FIXED: Dialog "File" -&gt; "Verify checksum" improvement
  * FIXED: Option for show copy/move progress in dialog (not in
    notifications)
  * FIXED: Documents suddenly open as archives
  * CHANGED: Avoiding root mode
  * CHANGED: Duplicated tab should not be locked
  * CHANGED: New PagePanel: do not refresh until panel becomes
    visible
  * CHANGED: Change suggested command for "edit as root" user
    action to a more secure alternative
  * CHANGED: Do not configure kdesu path and remove kdesudo support
    again
  * CHANGED: Panel: Do not select .. in a filtered view if there
    are other entries
  * CHANGED: Duplicate tab settings when duplicating tabs
  * CHANGED: Some fixes and simpifying startup settings.
- Drop upstream patches:
  * krusader-2.5.0-generate-manpage.patch
  * 0001-Don-t-hardcode-appdata-location.patch
  * Remove-non-archive-mimetypes-from-krarc-archive-mime-type-list.patch
  * add-service-actions-to-right-click-popup-menu.patch
  * Handle-arrow-key-press-in-brief-view.patch</changelog>
  <changelog author="wbauer@tmo.at" date="1494158400">- Add fix-build-with-gcc48.patch to fix build on Leap 42</changelog>
  <changelog author="wbauer@tmo.at" date="1494849600">- Add org.kde.krusader.root-mode.desktop, it got removed in 2.6.0</changelog>
  <changelog author="wbauer@tmo.at" date="1515758400">- Add Panel-fixed-actions-in-PanelContextMenu-ignored.patch to fix
  the "Create New" context menu not working when the '..' entry is
  selected (boo#1075690, kde#383544)</changelog>
  <changelog author="wbauer@tmo.at" date="1526299200">- Update to 2.7.0
  * New feature: Quick Search in Bookmark menu
  * New feature: Tab pinning
  * New feature: Tooltip with file information when you hover a
    file name
  * New feature: Extended options for Tree Panel
  * New feature: Debug output option
  * Improved icon theme handling
  * Fixed 40+ issues including some regressions
- Drop patches merged upstream:
  * fix-build-with-gcc48.patch
  * Panel-fixed-actions-in-PanelContextMenu-ignored.patch
- Mark license file as %license instead of %doc
- Adjust file lists</changelog>
  <changelog author="wbauer@tmo.at" date="1534075200">- Update to 2.7.1
  * ADDED: Default shortcut for quick selection mode = Ctrl+Shift+S
  * FIXED: When calculating occupied space of ".." , krusader
    selects all directories (kde#150247)
  * FIXED: Bad default in the New Text File dialog (kde#282069)
  * FIXED: ISO files listing/extracting broken (kde#372023)
  * FIXED: Details section is empty in 'Do not know which files to
    compare.' window (kde#383567)
  * FIXED: Default mode in 'Find in folder' is not preserved
    (kde#391946)
  * FIXED: Files fed to listbox (and all other files in virt://)
    cannot be deleted (kde#394896)
  * FIXED: Enter key not working when cursor in search bar
    (kde#394939)
  * FIXED: The quicksearch bar is still opened after deleting a
    file (kde#395285)
  * FIXED: In the Manage User Actions dialog: the tab order is not
    the expected one (kde#396652)</changelog>
  <changelog author="wbauer@tmo.at" date="1552392000">- Add Prefer-to-find-oktetapart-by-desktop-file.patch to make it
  compatible with the upcoming okteta 0.26 release</changelog>
  <changelog author="wbauer@tmo.at" date="1566820800">- Update to 2.7.2
  * FIXED: Memory leak in the Locate dialog
  * FIXED: UDSEntry::insert deprecation warnings
  * FIXED: synchronize directory window: column widths
    are incorrect (kde#167410)
  * FIXED: Context menu item "copy selected to clipboard" copies
    all result items (kde#328918)
  * FIXED: "Information - Krusader" dialog does not fit to screen
    width; text non-copyable (kde#330788)
  * FIXED: After trying to rename the file that's being updated,
    rename function stops working on any file on this tab
    (kde#392750)
  * FIXED: New Text File is created with 600 (-rw-------)
    permissions (kde#395609)
  * FIXED: Misleading ?Created? date in file properties
    (kde#397398)
  * FIXED: Compilation error because of QOverload usage
    (kde#405212)
  * FIXED: The list of search results doesn't get the focus
    (kde#410118)
  * FIXED: Krusader does not search correctly if the "Follow links"
    checkbox is disabled (kde#410120)
  * FIXED: Okteta support for versions &gt;= 0.26 (due to oktetapart
    file layout change)
- Drop Prefer-to-find-oktetapart-by-desktop-file.patch, merged
  upstream
- Don't add -fpermissive to compiler options, no longer necessary
- Run spec-cleaner</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1598529600">- Spec cleanup</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1656504000">- Add patch to fix the 'Compress' menu (boo#1198725, boo#1203225, kde#441376)
  * 0001-Fixed-non-working-actions-for-create-extract-archive.patch</changelog>
</package>
<package pkgid="cd7dca82b161de798e839918673758daf3f41463f47cf8e7e10bb59633e4fda8" name="ksysguardsystemstats-data" arch="aarch64">
  <version epoch="0" ver="5.24.5" rel="bp154.2.3.2"/>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1627387200">- Update to 5.22.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.22.4
- No code changes since 5.22.3</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1630411200">- Update to 5.22.5
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.22.5
- No code changes since 5.22.4</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1631793600">- Update to 5.22.90
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.22.90
- Too many changes to list here</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1633608000">- Update to 5.23.0
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.0
- Changes since 5.22.90:
  * Add Plasma System Monitor to "Tools" menu
- Add new key + signature to plasma.keyring</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1634644800">- Update to 5.23.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.1
- No code changes since 5.23.0</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1635249600">- Update to 5.23.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.2
- No code changes since 5.23.1</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1636459200">- Update to 5.23.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.3
- Changes since 5.23.2:
  * Fix ksgrd_network_helper crash on exit afer a failure (kde#444921)
  * Fix incorrect string termination in ConnectionMapping</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1637582400">- Add libksysguard5-rpmlintrc (boo#1191766)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1638273600">- Update to 5.23.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.4
- Changes since 5.23.3:
  * Don't update SensorsFeatureSensor if it is not subscribed</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1641297600">- Update to 5.23.5
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.5
- Changes since 5.23.4:
  * Handle process parent changes in ProcessDataModel (kde#446534)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1642075200">- Update to 5.23.90
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.90
- Changes since 5.23.5:
  * ConfigAppearance: Set Layout.preferredWidth in updateRateLimitSpinBox
  * Add support for bits per second (kde#418968)
  * Fix compile error against qt6
  * Use Q_EMIT here
  * Fix typos in l10n string comments
  * Port some Q_FOREACH
  * Handle process parent changes in ProcessDataModel (kde#446534)
  * piechart: Fix punctuation of labels in config
  * ProcessCore: Check the actual previous values when updating IO rates (kde#444127)
  * ProcessCore: Ignore elapsedTime &lt; 0 when updating process usage
  * Fix various typos
  * Don't update SensorsFeatureSensor if it is not subscribed
  * Fix accounting of children in Processes
  * New and improved tests
  * Correct behavior of ProcessSensor::cgroupData
  * Remove Accumulator::stop and Capture::stop
  * Fix ksgrd_network_helper crash on exit afer a failure (kde#444921)
  * Fix ksgrd_network_helper crash on readlinkat failure
  * Update SensorUnitModel.cpp to compile with clang+libcxx
  * Fix incorrect string termination in ConnectionMapping
  * We depend against kf5.86
  * Add FreeBSD CI
  * Add Linux CI
  * Add .kde-ci.yml
  * Add Plasma System Monitor to "Tools" menu</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1644062400">- Update to 5.24.0
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.0
- Changes since 5.23.90:
  * Allow specifying initial value for SysctlSensor
  * BarChart: Make spacing proportional to total width and number of bars (kde#444585)
  * Set an initial value of 0 for SensorsFeatureSensor
  * Allow providing an initial value for AggregateSensor and SysFsSensor
  * Check initial value is valid before resetting in SensorProperty::unsubscribe
  * Support changing sensor label names for the Grid face (kde#448980)
  * Only rate-limit sensors if we already have a valid value (kde#446372)
  * faces/facegrid: Filter out some display styles from the config (kde#447847)
  * Fix compilation on Plasma/5.24 branch
  * faces/textonly: Set grouped header to fill width so it elides properly (kde#440592)
  * Port SensorFaceController to support JSON plugin metadata
  * Fix build with GCC 12, missing include</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1644926400">- Update to 5.24.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.1
- Changes since 5.24.0:
  * Fix showing icons in KSysguard</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1645531200">- Update to 5.24.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.2
- No code changes since 5.24.1</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1646654400">- Replace %_libdir/libexec with %_libexecdir (boo#1174075)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1646740800">- Update to 5.24.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.3
- Changes since 5.24.2:
  * Fixed computational bug for bar chart spacing (kde#449868)
- Restore compatibility with older kf5-filesystem</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1648555200">- Force PIE when building with gcc-10 (boo#1195628, boo#1197641)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1648555201">- Update to 5.24.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.4
- No code changes since 5.24.3</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1651579200">- Update to 5.24.5
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.5
- No code changes since 5.24.4</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1653998400">- Recommend the plugins package (boo#1199851)</changelog>
</package>
<package pkgid="5defd21deb214cb4a0a996a3c6341c77e2788cf06f2dea44611ab452c705e473" name="ksysguardsystemstats-data" arch="ppc64le">
  <version epoch="0" ver="5.24.5" rel="bp154.2.3.2"/>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1627387200">- Update to 5.22.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.22.4
- No code changes since 5.22.3</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1630411200">- Update to 5.22.5
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.22.5
- No code changes since 5.22.4</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1631793600">- Update to 5.22.90
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.22.90
- Too many changes to list here</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1633608000">- Update to 5.23.0
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.0
- Changes since 5.22.90:
  * Add Plasma System Monitor to "Tools" menu
- Add new key + signature to plasma.keyring</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1634644800">- Update to 5.23.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.1
- No code changes since 5.23.0</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1635249600">- Update to 5.23.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.2
- No code changes since 5.23.1</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1636459200">- Update to 5.23.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.3
- Changes since 5.23.2:
  * Fix ksgrd_network_helper crash on exit afer a failure (kde#444921)
  * Fix incorrect string termination in ConnectionMapping</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1637582400">- Add libksysguard5-rpmlintrc (boo#1191766)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1638273600">- Update to 5.23.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.4
- Changes since 5.23.3:
  * Don't update SensorsFeatureSensor if it is not subscribed</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1641297600">- Update to 5.23.5
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.5
- Changes since 5.23.4:
  * Handle process parent changes in ProcessDataModel (kde#446534)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1642075200">- Update to 5.23.90
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.90
- Changes since 5.23.5:
  * ConfigAppearance: Set Layout.preferredWidth in updateRateLimitSpinBox
  * Add support for bits per second (kde#418968)
  * Fix compile error against qt6
  * Use Q_EMIT here
  * Fix typos in l10n string comments
  * Port some Q_FOREACH
  * Handle process parent changes in ProcessDataModel (kde#446534)
  * piechart: Fix punctuation of labels in config
  * ProcessCore: Check the actual previous values when updating IO rates (kde#444127)
  * ProcessCore: Ignore elapsedTime &lt; 0 when updating process usage
  * Fix various typos
  * Don't update SensorsFeatureSensor if it is not subscribed
  * Fix accounting of children in Processes
  * New and improved tests
  * Correct behavior of ProcessSensor::cgroupData
  * Remove Accumulator::stop and Capture::stop
  * Fix ksgrd_network_helper crash on exit afer a failure (kde#444921)
  * Fix ksgrd_network_helper crash on readlinkat failure
  * Update SensorUnitModel.cpp to compile with clang+libcxx
  * Fix incorrect string termination in ConnectionMapping
  * We depend against kf5.86
  * Add FreeBSD CI
  * Add Linux CI
  * Add .kde-ci.yml
  * Add Plasma System Monitor to "Tools" menu</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1644062400">- Update to 5.24.0
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.0
- Changes since 5.23.90:
  * Allow specifying initial value for SysctlSensor
  * BarChart: Make spacing proportional to total width and number of bars (kde#444585)
  * Set an initial value of 0 for SensorsFeatureSensor
  * Allow providing an initial value for AggregateSensor and SysFsSensor
  * Check initial value is valid before resetting in SensorProperty::unsubscribe
  * Support changing sensor label names for the Grid face (kde#448980)
  * Only rate-limit sensors if we already have a valid value (kde#446372)
  * faces/facegrid: Filter out some display styles from the config (kde#447847)
  * Fix compilation on Plasma/5.24 branch
  * faces/textonly: Set grouped header to fill width so it elides properly (kde#440592)
  * Port SensorFaceController to support JSON plugin metadata
  * Fix build with GCC 12, missing include</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1644926400">- Update to 5.24.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.1
- Changes since 5.24.0:
  * Fix showing icons in KSysguard</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1645531200">- Update to 5.24.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.2
- No code changes since 5.24.1</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1646654400">- Replace %_libdir/libexec with %_libexecdir (boo#1174075)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1646740800">- Update to 5.24.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.3
- Changes since 5.24.2:
  * Fixed computational bug for bar chart spacing (kde#449868)
- Restore compatibility with older kf5-filesystem</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1648555200">- Force PIE when building with gcc-10 (boo#1195628, boo#1197641)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1648555201">- Update to 5.24.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.4
- No code changes since 5.24.3</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1651579200">- Update to 5.24.5
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.5
- No code changes since 5.24.4</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1653998400">- Recommend the plugins package (boo#1199851)</changelog>
</package>
<package pkgid="b990a0c4eadaab2bddfd466f812838858b46648212bf998bcb242bbb1c6fe364" name="ksysguardsystemstats-data" arch="x86_64">
  <version epoch="0" ver="5.24.5" rel="bp154.2.3.2"/>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1627387200">- Update to 5.22.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.22.4
- No code changes since 5.22.3</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1630411200">- Update to 5.22.5
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.22.5
- No code changes since 5.22.4</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1631793600">- Update to 5.22.90
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.22.90
- Too many changes to list here</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1633608000">- Update to 5.23.0
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.0
- Changes since 5.22.90:
  * Add Plasma System Monitor to "Tools" menu
- Add new key + signature to plasma.keyring</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1634644800">- Update to 5.23.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.1
- No code changes since 5.23.0</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1635249600">- Update to 5.23.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.2
- No code changes since 5.23.1</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1636459200">- Update to 5.23.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.3
- Changes since 5.23.2:
  * Fix ksgrd_network_helper crash on exit afer a failure (kde#444921)
  * Fix incorrect string termination in ConnectionMapping</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1637582400">- Add libksysguard5-rpmlintrc (boo#1191766)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1638273600">- Update to 5.23.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.4
- Changes since 5.23.3:
  * Don't update SensorsFeatureSensor if it is not subscribed</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1641297600">- Update to 5.23.5
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.5
- Changes since 5.23.4:
  * Handle process parent changes in ProcessDataModel (kde#446534)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1642075200">- Update to 5.23.90
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.90
- Changes since 5.23.5:
  * ConfigAppearance: Set Layout.preferredWidth in updateRateLimitSpinBox
  * Add support for bits per second (kde#418968)
  * Fix compile error against qt6
  * Use Q_EMIT here
  * Fix typos in l10n string comments
  * Port some Q_FOREACH
  * Handle process parent changes in ProcessDataModel (kde#446534)
  * piechart: Fix punctuation of labels in config
  * ProcessCore: Check the actual previous values when updating IO rates (kde#444127)
  * ProcessCore: Ignore elapsedTime &lt; 0 when updating process usage
  * Fix various typos
  * Don't update SensorsFeatureSensor if it is not subscribed
  * Fix accounting of children in Processes
  * New and improved tests
  * Correct behavior of ProcessSensor::cgroupData
  * Remove Accumulator::stop and Capture::stop
  * Fix ksgrd_network_helper crash on exit afer a failure (kde#444921)
  * Fix ksgrd_network_helper crash on readlinkat failure
  * Update SensorUnitModel.cpp to compile with clang+libcxx
  * Fix incorrect string termination in ConnectionMapping
  * We depend against kf5.86
  * Add FreeBSD CI
  * Add Linux CI
  * Add .kde-ci.yml
  * Add Plasma System Monitor to "Tools" menu</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1644062400">- Update to 5.24.0
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.0
- Changes since 5.23.90:
  * Allow specifying initial value for SysctlSensor
  * BarChart: Make spacing proportional to total width and number of bars (kde#444585)
  * Set an initial value of 0 for SensorsFeatureSensor
  * Allow providing an initial value for AggregateSensor and SysFsSensor
  * Check initial value is valid before resetting in SensorProperty::unsubscribe
  * Support changing sensor label names for the Grid face (kde#448980)
  * Only rate-limit sensors if we already have a valid value (kde#446372)
  * faces/facegrid: Filter out some display styles from the config (kde#447847)
  * Fix compilation on Plasma/5.24 branch
  * faces/textonly: Set grouped header to fill width so it elides properly (kde#440592)
  * Port SensorFaceController to support JSON plugin metadata
  * Fix build with GCC 12, missing include</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1644926400">- Update to 5.24.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.1
- Changes since 5.24.0:
  * Fix showing icons in KSysguard</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1645531200">- Update to 5.24.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.2
- No code changes since 5.24.1</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1646654400">- Replace %_libdir/libexec with %_libexecdir (boo#1174075)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1646740800">- Update to 5.24.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.3
- Changes since 5.24.2:
  * Fixed computational bug for bar chart spacing (kde#449868)
- Restore compatibility with older kf5-filesystem</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1648555200">- Force PIE when building with gcc-10 (boo#1195628, boo#1197641)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1648555201">- Update to 5.24.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.4
- No code changes since 5.24.3</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1651579200">- Update to 5.24.5
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.5
- No code changes since 5.24.4</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1653998400">- Recommend the plugins package (boo#1199851)</changelog>
</package>
<package pkgid="5f7faa750d927c275a318180a758ff48597e46fedbf12ebfa2aa26aadb730ef0" name="libKF5AkonadiAgentBase5" arch="aarch64">
  <version epoch="0" ver="21.12.3" rel="bp154.2.3.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1617969600">- Update to 21.03.90
  * New feature release
- No code change since 21.03.80</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1618574400">- Update to 21.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/21.04
- No code change since 21.03.90</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1620820800">- Update to 21.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/21.04.1
- No code change since 21.04.0</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1622721600">- Install AppArmor profiles (as -apparmor subpackage)
- add akonadi-apparmor-opensuse.diff to adjust the profiles to
  openSUSE paths, and to add 'abi' rules to the profiles</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1623153600">- Update to 21.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.04.2
- No code change since 21.04.1</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1625659200">- Update to 21.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.04.3
- No code change since 21.04.2</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1626004800">- update akonadi-apparmor-opensuse.diff: add openSUSE Postgresql
  path in AppArmor profiles (and make it a variable to keep the
  profiles readable) and some more rules for Postgresql</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1626523200">- Update to 21.07.80
  * New feature release
- Changes since 21.04.3:
  * Make sure that we don't cancel dialog
  * Use KSharedConfig::openStateConfig
  * Allow to exclude unified folder
  * Add roleNames to AgentTypeModel for easier interfacing with QML
  * USe QStringView here
  * Fix some clazy warning
  * Add support for subquery as table expression
  * Modernize code
  * Remove references to innodb_additional_mem_pool_size
  * use forward declaration here
  * AgentServer: remove unnecessary QWidgets import
  * kde4 Migration code will be removed in kf6
  * Remove the std::auto_ptr and std::unique_ptr payload checks
  * Make the recently accessed folder list globally accessible
  * Fix Clazy exclusion for 'old-style-connect', causes CI to fail
  * It will create mem leak here too I think
  * Fix memory leak detected by ASAN, by passing qApp as parent to QTranslator.
  * [favoriteproxytest] Link against KConfig
  * StandardActionManager is now based on QAction
  * CMake: replace most include_directories calls
  * CMake: use target_compile_definitions when possible
  * Add trailing comma to enums
- Only install the license files once</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1627646400">- Update to 21.07.90
  * New feature release
- No code change since 21.07.80</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1628251200">- Update to 21.08.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/21.08.0
- No code change since 21.07.90</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1630497600">- Update to 21.08.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.08.1
- Changes since 21.08.0:
  * Add a missing static storage class</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1633435200">- Update to 21.08.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1635854400">- Update to 21.08.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.08.3/
- No code change since 21.08.2</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1636804800">- Update to 21.11.80
  * New feature release
- Too many changes to list here.
- Drop upstream patch:
  * akonadi-apparmor-opensuse.diff</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638014400">- Update to 21.11.90
  * New feature release
- No code change since 21.11.80</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638532800">- Update to 21.12.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/21.12.0/
- Changes since 21.11.90:
  * Enable new GitLab CI on stable branch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1641297600">- Update to 21.12.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.12.1/
- Changes since 21.12.0:
  * Fix min required libaccounts-qt version</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1643716800">- Update to 21.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.12.2/
- Changes since 21.12.1:
  * Use all interface include dirs needed for LibXml2 (unbreak Windows build)
  * Fix build with GCC 12 (standard attributes in middle of decl-specifiers)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1646136000">- Update to 21.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.12.3/
- Changes since 21.12.2:
  * Use exec variable
  * Check executables exist in PATH before passing them to QProcess</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1666094400">- In SLE-15-SP3 we had patches that made akonadi fall back to
  sqlite if the mysql backend is not available. Those patches were
  already merged by upstream so we can let the package Recommend
  mysql instead of Require it, since it's not available in SLED.
  The Requires are set unless branding-SLE is installed so the
  requirements are used in Leap/TW but not in SLE where it's only
  a Recommends and an alternate Requirements is used in that case
  where the sqlite backend is installed if mysql is not available.</changelog>
</package>
<package pkgid="27c0566bed7b5f5ac415ffba906535c62f93e48d5f2ef002f6d9c494eadec90b" name="libKF5AkonadiAgentBase5" arch="ppc64le">
  <version epoch="0" ver="21.12.3" rel="bp154.2.3.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1617969600">- Update to 21.03.90
  * New feature release
- No code change since 21.03.80</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1618574400">- Update to 21.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/21.04
- No code change since 21.03.90</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1620820800">- Update to 21.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/21.04.1
- No code change since 21.04.0</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1622721600">- Install AppArmor profiles (as -apparmor subpackage)
- add akonadi-apparmor-opensuse.diff to adjust the profiles to
  openSUSE paths, and to add 'abi' rules to the profiles</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1623153600">- Update to 21.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.04.2
- No code change since 21.04.1</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1625659200">- Update to 21.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.04.3
- No code change since 21.04.2</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1626004800">- update akonadi-apparmor-opensuse.diff: add openSUSE Postgresql
  path in AppArmor profiles (and make it a variable to keep the
  profiles readable) and some more rules for Postgresql</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1626523200">- Update to 21.07.80
  * New feature release
- Changes since 21.04.3:
  * Make sure that we don't cancel dialog
  * Use KSharedConfig::openStateConfig
  * Allow to exclude unified folder
  * Add roleNames to AgentTypeModel for easier interfacing with QML
  * USe QStringView here
  * Fix some clazy warning
  * Add support for subquery as table expression
  * Modernize code
  * Remove references to innodb_additional_mem_pool_size
  * use forward declaration here
  * AgentServer: remove unnecessary QWidgets import
  * kde4 Migration code will be removed in kf6
  * Remove the std::auto_ptr and std::unique_ptr payload checks
  * Make the recently accessed folder list globally accessible
  * Fix Clazy exclusion for 'old-style-connect', causes CI to fail
  * It will create mem leak here too I think
  * Fix memory leak detected by ASAN, by passing qApp as parent to QTranslator.
  * [favoriteproxytest] Link against KConfig
  * StandardActionManager is now based on QAction
  * CMake: replace most include_directories calls
  * CMake: use target_compile_definitions when possible
  * Add trailing comma to enums
- Only install the license files once</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1627646400">- Update to 21.07.90
  * New feature release
- No code change since 21.07.80</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1628251200">- Update to 21.08.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/21.08.0
- No code change since 21.07.90</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1630497600">- Update to 21.08.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.08.1
- Changes since 21.08.0:
  * Add a missing static storage class</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1633435200">- Update to 21.08.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1635854400">- Update to 21.08.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.08.3/
- No code change since 21.08.2</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1636804800">- Update to 21.11.80
  * New feature release
- Too many changes to list here.
- Drop upstream patch:
  * akonadi-apparmor-opensuse.diff</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638014400">- Update to 21.11.90
  * New feature release
- No code change since 21.11.80</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638532800">- Update to 21.12.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/21.12.0/
- Changes since 21.11.90:
  * Enable new GitLab CI on stable branch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1641297600">- Update to 21.12.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.12.1/
- Changes since 21.12.0:
  * Fix min required libaccounts-qt version</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1643716800">- Update to 21.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.12.2/
- Changes since 21.12.1:
  * Use all interface include dirs needed for LibXml2 (unbreak Windows build)
  * Fix build with GCC 12 (standard attributes in middle of decl-specifiers)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1646136000">- Update to 21.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.12.3/
- Changes since 21.12.2:
  * Use exec variable
  * Check executables exist in PATH before passing them to QProcess</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1666094400">- In SLE-15-SP3 we had patches that made akonadi fall back to
  sqlite if the mysql backend is not available. Those patches were
  already merged by upstream so we can let the package Recommend
  mysql instead of Require it, since it's not available in SLED.
  The Requires are set unless branding-SLE is installed so the
  requirements are used in Leap/TW but not in SLE where it's only
  a Recommends and an alternate Requirements is used in that case
  where the sqlite backend is installed if mysql is not available.</changelog>
</package>
<package pkgid="3c2b24d858e509bd664c2c579ead2ef669f4d066944ea5c39a4f922e1f425a9b" name="libKF5AkonadiAgentBase5" arch="s390x">
  <version epoch="0" ver="21.12.3" rel="bp154.2.3.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1617969600">- Update to 21.03.90
  * New feature release
- No code change since 21.03.80</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1618574400">- Update to 21.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/21.04
- No code change since 21.03.90</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1620820800">- Update to 21.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/21.04.1
- No code change since 21.04.0</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1622721600">- Install AppArmor profiles (as -apparmor subpackage)
- add akonadi-apparmor-opensuse.diff to adjust the profiles to
  openSUSE paths, and to add 'abi' rules to the profiles</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1623153600">- Update to 21.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.04.2
- No code change since 21.04.1</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1625659200">- Update to 21.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.04.3
- No code change since 21.04.2</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1626004800">- update akonadi-apparmor-opensuse.diff: add openSUSE Postgresql
  path in AppArmor profiles (and make it a variable to keep the
  profiles readable) and some more rules for Postgresql</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1626523200">- Update to 21.07.80
  * New feature release
- Changes since 21.04.3:
  * Make sure that we don't cancel dialog
  * Use KSharedConfig::openStateConfig
  * Allow to exclude unified folder
  * Add roleNames to AgentTypeModel for easier interfacing with QML
  * USe QStringView here
  * Fix some clazy warning
  * Add support for subquery as table expression
  * Modernize code
  * Remove references to innodb_additional_mem_pool_size
  * use forward declaration here
  * AgentServer: remove unnecessary QWidgets import
  * kde4 Migration code will be removed in kf6
  * Remove the std::auto_ptr and std::unique_ptr payload checks
  * Make the recently accessed folder list globally accessible
  * Fix Clazy exclusion for 'old-style-connect', causes CI to fail
  * It will create mem leak here too I think
  * Fix memory leak detected by ASAN, by passing qApp as parent to QTranslator.
  * [favoriteproxytest] Link against KConfig
  * StandardActionManager is now based on QAction
  * CMake: replace most include_directories calls
  * CMake: use target_compile_definitions when possible
  * Add trailing comma to enums
- Only install the license files once</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1627646400">- Update to 21.07.90
  * New feature release
- No code change since 21.07.80</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1628251200">- Update to 21.08.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/21.08.0
- No code change since 21.07.90</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1630497600">- Update to 21.08.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.08.1
- Changes since 21.08.0:
  * Add a missing static storage class</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1633435200">- Update to 21.08.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1635854400">- Update to 21.08.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.08.3/
- No code change since 21.08.2</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1636804800">- Update to 21.11.80
  * New feature release
- Too many changes to list here.
- Drop upstream patch:
  * akonadi-apparmor-opensuse.diff</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638014400">- Update to 21.11.90
  * New feature release
- No code change since 21.11.80</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638532800">- Update to 21.12.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/21.12.0/
- Changes since 21.11.90:
  * Enable new GitLab CI on stable branch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1641297600">- Update to 21.12.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.12.1/
- Changes since 21.12.0:
  * Fix min required libaccounts-qt version</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1643716800">- Update to 21.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.12.2/
- Changes since 21.12.1:
  * Use all interface include dirs needed for LibXml2 (unbreak Windows build)
  * Fix build with GCC 12 (standard attributes in middle of decl-specifiers)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1646136000">- Update to 21.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.12.3/
- Changes since 21.12.2:
  * Use exec variable
  * Check executables exist in PATH before passing them to QProcess</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1666094400">- In SLE-15-SP3 we had patches that made akonadi fall back to
  sqlite if the mysql backend is not available. Those patches were
  already merged by upstream so we can let the package Recommend
  mysql instead of Require it, since it's not available in SLED.
  The Requires are set unless branding-SLE is installed so the
  requirements are used in Leap/TW but not in SLE where it's only
  a Recommends and an alternate Requirements is used in that case
  where the sqlite backend is installed if mysql is not available.</changelog>
</package>
<package pkgid="91adfb6314ff667a43d3a38d80b54c7b59fbcd68a88297dd090c808d701e8a64" name="libKF5AkonadiAgentBase5" arch="x86_64">
  <version epoch="0" ver="21.12.3" rel="bp154.2.3.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1617969600">- Update to 21.03.90
  * New feature release
- No code change since 21.03.80</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1618574400">- Update to 21.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/21.04
- No code change since 21.03.90</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1620820800">- Update to 21.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/21.04.1
- No code change since 21.04.0</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1622721600">- Install AppArmor profiles (as -apparmor subpackage)
- add akonadi-apparmor-opensuse.diff to adjust the profiles to
  openSUSE paths, and to add 'abi' rules to the profiles</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1623153600">- Update to 21.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.04.2
- No code change since 21.04.1</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1625659200">- Update to 21.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.04.3
- No code change since 21.04.2</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1626004800">- update akonadi-apparmor-opensuse.diff: add openSUSE Postgresql
  path in AppArmor profiles (and make it a variable to keep the
  profiles readable) and some more rules for Postgresql</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1626523200">- Update to 21.07.80
  * New feature release
- Changes since 21.04.3:
  * Make sure that we don't cancel dialog
  * Use KSharedConfig::openStateConfig
  * Allow to exclude unified folder
  * Add roleNames to AgentTypeModel for easier interfacing with QML
  * USe QStringView here
  * Fix some clazy warning
  * Add support for subquery as table expression
  * Modernize code
  * Remove references to innodb_additional_mem_pool_size
  * use forward declaration here
  * AgentServer: remove unnecessary QWidgets import
  * kde4 Migration code will be removed in kf6
  * Remove the std::auto_ptr and std::unique_ptr payload checks
  * Make the recently accessed folder list globally accessible
  * Fix Clazy exclusion for 'old-style-connect', causes CI to fail
  * It will create mem leak here too I think
  * Fix memory leak detected by ASAN, by passing qApp as parent to QTranslator.
  * [favoriteproxytest] Link against KConfig
  * StandardActionManager is now based on QAction
  * CMake: replace most include_directories calls
  * CMake: use target_compile_definitions when possible
  * Add trailing comma to enums
- Only install the license files once</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1627646400">- Update to 21.07.90
  * New feature release
- No code change since 21.07.80</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1628251200">- Update to 21.08.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/21.08.0
- No code change since 21.07.90</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1630497600">- Update to 21.08.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.08.1
- Changes since 21.08.0:
  * Add a missing static storage class</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1633435200">- Update to 21.08.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1635854400">- Update to 21.08.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.08.3/
- No code change since 21.08.2</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1636804800">- Update to 21.11.80
  * New feature release
- Too many changes to list here.
- Drop upstream patch:
  * akonadi-apparmor-opensuse.diff</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638014400">- Update to 21.11.90
  * New feature release
- No code change since 21.11.80</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638532800">- Update to 21.12.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/21.12.0/
- Changes since 21.11.90:
  * Enable new GitLab CI on stable branch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1641297600">- Update to 21.12.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.12.1/
- Changes since 21.12.0:
  * Fix min required libaccounts-qt version</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1643716800">- Update to 21.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.12.2/
- Changes since 21.12.1:
  * Use all interface include dirs needed for LibXml2 (unbreak Windows build)
  * Fix build with GCC 12 (standard attributes in middle of decl-specifiers)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1646136000">- Update to 21.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.12.3/
- Changes since 21.12.2:
  * Use exec variable
  * Check executables exist in PATH before passing them to QProcess</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1666094400">- In SLE-15-SP3 we had patches that made akonadi fall back to
  sqlite if the mysql backend is not available. Those patches were
  already merged by upstream so we can let the package Recommend
  mysql instead of Require it, since it's not available in SLED.
  The Requires are set unless branding-SLE is installed so the
  requirements are used in Leap/TW but not in SLE where it's only
  a Recommends and an alternate Requirements is used in that case
  where the sqlite backend is installed if mysql is not available.</changelog>
</package>
<package pkgid="1160d26a0f5dedf7a301c1d6c2b65ee637c6771d2f79dab62a9f938264ea775b" name="libKF5AkonadiCore5" arch="aarch64">
  <version epoch="0" ver="21.12.3" rel="bp154.2.3.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1617969600">- Update to 21.03.90
  * New feature release
- No code change since 21.03.80</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1618574400">- Update to 21.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/21.04
- No code change since 21.03.90</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1620820800">- Update to 21.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/21.04.1
- No code change since 21.04.0</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1622721600">- Install AppArmor profiles (as -apparmor subpackage)
- add akonadi-apparmor-opensuse.diff to adjust the profiles to
  openSUSE paths, and to add 'abi' rules to the profiles</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1623153600">- Update to 21.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.04.2
- No code change since 21.04.1</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1625659200">- Update to 21.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.04.3
- No code change since 21.04.2</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1626004800">- update akonadi-apparmor-opensuse.diff: add openSUSE Postgresql
  path in AppArmor profiles (and make it a variable to keep the
  profiles readable) and some more rules for Postgresql</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1626523200">- Update to 21.07.80
  * New feature release
- Changes since 21.04.3:
  * Make sure that we don't cancel dialog
  * Use KSharedConfig::openStateConfig
  * Allow to exclude unified folder
  * Add roleNames to AgentTypeModel for easier interfacing with QML
  * USe QStringView here
  * Fix some clazy warning
  * Add support for subquery as table expression
  * Modernize code
  * Remove references to innodb_additional_mem_pool_size
  * use forward declaration here
  * AgentServer: remove unnecessary QWidgets import
  * kde4 Migration code will be removed in kf6
  * Remove the std::auto_ptr and std::unique_ptr payload checks
  * Make the recently accessed folder list globally accessible
  * Fix Clazy exclusion for 'old-style-connect', causes CI to fail
  * It will create mem leak here too I think
  * Fix memory leak detected by ASAN, by passing qApp as parent to QTranslator.
  * [favoriteproxytest] Link against KConfig
  * StandardActionManager is now based on QAction
  * CMake: replace most include_directories calls
  * CMake: use target_compile_definitions when possible
  * Add trailing comma to enums
- Only install the license files once</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1627646400">- Update to 21.07.90
  * New feature release
- No code change since 21.07.80</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1628251200">- Update to 21.08.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/21.08.0
- No code change since 21.07.90</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1630497600">- Update to 21.08.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.08.1
- Changes since 21.08.0:
  * Add a missing static storage class</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1633435200">- Update to 21.08.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1635854400">- Update to 21.08.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.08.3/
- No code change since 21.08.2</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1636804800">- Update to 21.11.80
  * New feature release
- Too many changes to list here.
- Drop upstream patch:
  * akonadi-apparmor-opensuse.diff</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638014400">- Update to 21.11.90
  * New feature release
- No code change since 21.11.80</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638532800">- Update to 21.12.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/21.12.0/
- Changes since 21.11.90:
  * Enable new GitLab CI on stable branch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1641297600">- Update to 21.12.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.12.1/
- Changes since 21.12.0:
  * Fix min required libaccounts-qt version</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1643716800">- Update to 21.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.12.2/
- Changes since 21.12.1:
  * Use all interface include dirs needed for LibXml2 (unbreak Windows build)
  * Fix build with GCC 12 (standard attributes in middle of decl-specifiers)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1646136000">- Update to 21.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.12.3/
- Changes since 21.12.2:
  * Use exec variable
  * Check executables exist in PATH before passing them to QProcess</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1666094400">- In SLE-15-SP3 we had patches that made akonadi fall back to
  sqlite if the mysql backend is not available. Those patches were
  already merged by upstream so we can let the package Recommend
  mysql instead of Require it, since it's not available in SLED.
  The Requires are set unless branding-SLE is installed so the
  requirements are used in Leap/TW but not in SLE where it's only
  a Recommends and an alternate Requirements is used in that case
  where the sqlite backend is installed if mysql is not available.</changelog>
</package>
<package pkgid="cacb8ee3c7eb3a3c90d39326779346afd13e610d7949130f33d1e205769b1f40" name="libKF5AkonadiCore5" arch="ppc64le">
  <version epoch="0" ver="21.12.3" rel="bp154.2.3.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1617969600">- Update to 21.03.90
  * New feature release
- No code change since 21.03.80</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1618574400">- Update to 21.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/21.04
- No code change since 21.03.90</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1620820800">- Update to 21.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/21.04.1
- No code change since 21.04.0</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1622721600">- Install AppArmor profiles (as -apparmor subpackage)
- add akonadi-apparmor-opensuse.diff to adjust the profiles to
  openSUSE paths, and to add 'abi' rules to the profiles</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1623153600">- Update to 21.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.04.2
- No code change since 21.04.1</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1625659200">- Update to 21.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.04.3
- No code change since 21.04.2</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1626004800">- update akonadi-apparmor-opensuse.diff: add openSUSE Postgresql
  path in AppArmor profiles (and make it a variable to keep the
  profiles readable) and some more rules for Postgresql</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1626523200">- Update to 21.07.80
  * New feature release
- Changes since 21.04.3:
  * Make sure that we don't cancel dialog
  * Use KSharedConfig::openStateConfig
  * Allow to exclude unified folder
  * Add roleNames to AgentTypeModel for easier interfacing with QML
  * USe QStringView here
  * Fix some clazy warning
  * Add support for subquery as table expression
  * Modernize code
  * Remove references to innodb_additional_mem_pool_size
  * use forward declaration here
  * AgentServer: remove unnecessary QWidgets import
  * kde4 Migration code will be removed in kf6
  * Remove the std::auto_ptr and std::unique_ptr payload checks
  * Make the recently accessed folder list globally accessible
  * Fix Clazy exclusion for 'old-style-connect', causes CI to fail
  * It will create mem leak here too I think
  * Fix memory leak detected by ASAN, by passing qApp as parent to QTranslator.
  * [favoriteproxytest] Link against KConfig
  * StandardActionManager is now based on QAction
  * CMake: replace most include_directories calls
  * CMake: use target_compile_definitions when possible
  * Add trailing comma to enums
- Only install the license files once</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1627646400">- Update to 21.07.90
  * New feature release
- No code change since 21.07.80</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1628251200">- Update to 21.08.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/21.08.0
- No code change since 21.07.90</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1630497600">- Update to 21.08.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.08.1
- Changes since 21.08.0:
  * Add a missing static storage class</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1633435200">- Update to 21.08.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1635854400">- Update to 21.08.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.08.3/
- No code change since 21.08.2</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1636804800">- Update to 21.11.80
  * New feature release
- Too many changes to list here.
- Drop upstream patch:
  * akonadi-apparmor-opensuse.diff</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638014400">- Update to 21.11.90
  * New feature release
- No code change since 21.11.80</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638532800">- Update to 21.12.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/21.12.0/
- Changes since 21.11.90:
  * Enable new GitLab CI on stable branch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1641297600">- Update to 21.12.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.12.1/
- Changes since 21.12.0:
  * Fix min required libaccounts-qt version</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1643716800">- Update to 21.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.12.2/
- Changes since 21.12.1:
  * Use all interface include dirs needed for LibXml2 (unbreak Windows build)
  * Fix build with GCC 12 (standard attributes in middle of decl-specifiers)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1646136000">- Update to 21.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.12.3/
- Changes since 21.12.2:
  * Use exec variable
  * Check executables exist in PATH before passing them to QProcess</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1666094400">- In SLE-15-SP3 we had patches that made akonadi fall back to
  sqlite if the mysql backend is not available. Those patches were
  already merged by upstream so we can let the package Recommend
  mysql instead of Require it, since it's not available in SLED.
  The Requires are set unless branding-SLE is installed so the
  requirements are used in Leap/TW but not in SLE where it's only
  a Recommends and an alternate Requirements is used in that case
  where the sqlite backend is installed if mysql is not available.</changelog>
</package>
<package pkgid="1329dc40b666bb9dc53fea4530dbb6e08a340df6b5067375836da3c5efd4c49d" name="libKF5AkonadiCore5" arch="s390x">
  <version epoch="0" ver="21.12.3" rel="bp154.2.3.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1617969600">- Update to 21.03.90
  * New feature release
- No code change since 21.03.80</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1618574400">- Update to 21.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/21.04
- No code change since 21.03.90</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1620820800">- Update to 21.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/21.04.1
- No code change since 21.04.0</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1622721600">- Install AppArmor profiles (as -apparmor subpackage)
- add akonadi-apparmor-opensuse.diff to adjust the profiles to
  openSUSE paths, and to add 'abi' rules to the profiles</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1623153600">- Update to 21.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.04.2
- No code change since 21.04.1</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1625659200">- Update to 21.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.04.3
- No code change since 21.04.2</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1626004800">- update akonadi-apparmor-opensuse.diff: add openSUSE Postgresql
  path in AppArmor profiles (and make it a variable to keep the
  profiles readable) and some more rules for Postgresql</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1626523200">- Update to 21.07.80
  * New feature release
- Changes since 21.04.3:
  * Make sure that we don't cancel dialog
  * Use KSharedConfig::openStateConfig
  * Allow to exclude unified folder
  * Add roleNames to AgentTypeModel for easier interfacing with QML
  * USe QStringView here
  * Fix some clazy warning
  * Add support for subquery as table expression
  * Modernize code
  * Remove references to innodb_additional_mem_pool_size
  * use forward declaration here
  * AgentServer: remove unnecessary QWidgets import
  * kde4 Migration code will be removed in kf6
  * Remove the std::auto_ptr and std::unique_ptr payload checks
  * Make the recently accessed folder list globally accessible
  * Fix Clazy exclusion for 'old-style-connect', causes CI to fail
  * It will create mem leak here too I think
  * Fix memory leak detected by ASAN, by passing qApp as parent to QTranslator.
  * [favoriteproxytest] Link against KConfig
  * StandardActionManager is now based on QAction
  * CMake: replace most include_directories calls
  * CMake: use target_compile_definitions when possible
  * Add trailing comma to enums
- Only install the license files once</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1627646400">- Update to 21.07.90
  * New feature release
- No code change since 21.07.80</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1628251200">- Update to 21.08.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/21.08.0
- No code change since 21.07.90</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1630497600">- Update to 21.08.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.08.1
- Changes since 21.08.0:
  * Add a missing static storage class</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1633435200">- Update to 21.08.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1635854400">- Update to 21.08.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.08.3/
- No code change since 21.08.2</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1636804800">- Update to 21.11.80
  * New feature release
- Too many changes to list here.
- Drop upstream patch:
  * akonadi-apparmor-opensuse.diff</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638014400">- Update to 21.11.90
  * New feature release
- No code change since 21.11.80</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638532800">- Update to 21.12.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/21.12.0/
- Changes since 21.11.90:
  * Enable new GitLab CI on stable branch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1641297600">- Update to 21.12.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.12.1/
- Changes since 21.12.0:
  * Fix min required libaccounts-qt version</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1643716800">- Update to 21.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.12.2/
- Changes since 21.12.1:
  * Use all interface include dirs needed for LibXml2 (unbreak Windows build)
  * Fix build with GCC 12 (standard attributes in middle of decl-specifiers)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1646136000">- Update to 21.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.12.3/
- Changes since 21.12.2:
  * Use exec variable
  * Check executables exist in PATH before passing them to QProcess</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1666094400">- In SLE-15-SP3 we had patches that made akonadi fall back to
  sqlite if the mysql backend is not available. Those patches were
  already merged by upstream so we can let the package Recommend
  mysql instead of Require it, since it's not available in SLED.
  The Requires are set unless branding-SLE is installed so the
  requirements are used in Leap/TW but not in SLE where it's only
  a Recommends and an alternate Requirements is used in that case
  where the sqlite backend is installed if mysql is not available.</changelog>
</package>
<package pkgid="bbc8eec1599bb22e7cbc8b034dadfbc337722caeeb67ed08da34898fb4580b75" name="libKF5AkonadiCore5" arch="x86_64">
  <version epoch="0" ver="21.12.3" rel="bp154.2.3.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1617969600">- Update to 21.03.90
  * New feature release
- No code change since 21.03.80</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1618574400">- Update to 21.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/21.04
- No code change since 21.03.90</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1620820800">- Update to 21.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/21.04.1
- No code change since 21.04.0</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1622721600">- Install AppArmor profiles (as -apparmor subpackage)
- add akonadi-apparmor-opensuse.diff to adjust the profiles to
  openSUSE paths, and to add 'abi' rules to the profiles</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1623153600">- Update to 21.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.04.2
- No code change since 21.04.1</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1625659200">- Update to 21.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.04.3
- No code change since 21.04.2</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1626004800">- update akonadi-apparmor-opensuse.diff: add openSUSE Postgresql
  path in AppArmor profiles (and make it a variable to keep the
  profiles readable) and some more rules for Postgresql</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1626523200">- Update to 21.07.80
  * New feature release
- Changes since 21.04.3:
  * Make sure that we don't cancel dialog
  * Use KSharedConfig::openStateConfig
  * Allow to exclude unified folder
  * Add roleNames to AgentTypeModel for easier interfacing with QML
  * USe QStringView here
  * Fix some clazy warning
  * Add support for subquery as table expression
  * Modernize code
  * Remove references to innodb_additional_mem_pool_size
  * use forward declaration here
  * AgentServer: remove unnecessary QWidgets import
  * kde4 Migration code will be removed in kf6
  * Remove the std::auto_ptr and std::unique_ptr payload checks
  * Make the recently accessed folder list globally accessible
  * Fix Clazy exclusion for 'old-style-connect', causes CI to fail
  * It will create mem leak here too I think
  * Fix memory leak detected by ASAN, by passing qApp as parent to QTranslator.
  * [favoriteproxytest] Link against KConfig
  * StandardActionManager is now based on QAction
  * CMake: replace most include_directories calls
  * CMake: use target_compile_definitions when possible
  * Add trailing comma to enums
- Only install the license files once</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1627646400">- Update to 21.07.90
  * New feature release
- No code change since 21.07.80</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1628251200">- Update to 21.08.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/21.08.0
- No code change since 21.07.90</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1630497600">- Update to 21.08.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.08.1
- Changes since 21.08.0:
  * Add a missing static storage class</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1633435200">- Update to 21.08.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1635854400">- Update to 21.08.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.08.3/
- No code change since 21.08.2</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1636804800">- Update to 21.11.80
  * New feature release
- Too many changes to list here.
- Drop upstream patch:
  * akonadi-apparmor-opensuse.diff</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638014400">- Update to 21.11.90
  * New feature release
- No code change since 21.11.80</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638532800">- Update to 21.12.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/21.12.0/
- Changes since 21.11.90:
  * Enable new GitLab CI on stable branch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1641297600">- Update to 21.12.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.12.1/
- Changes since 21.12.0:
  * Fix min required libaccounts-qt version</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1643716800">- Update to 21.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.12.2/
- Changes since 21.12.1:
  * Use all interface include dirs needed for LibXml2 (unbreak Windows build)
  * Fix build with GCC 12 (standard attributes in middle of decl-specifiers)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1646136000">- Update to 21.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.12.3/
- Changes since 21.12.2:
  * Use exec variable
  * Check executables exist in PATH before passing them to QProcess</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1666094400">- In SLE-15-SP3 we had patches that made akonadi fall back to
  sqlite if the mysql backend is not available. Those patches were
  already merged by upstream so we can let the package Recommend
  mysql instead of Require it, since it's not available in SLED.
  The Requires are set unless branding-SLE is installed so the
  requirements are used in Leap/TW but not in SLE where it's only
  a Recommends and an alternate Requirements is used in that case
  where the sqlite backend is installed if mysql is not available.</changelog>
</package>
<package pkgid="bf1f89835b6a9ec5e4a50ea519fe256002ae6f5b31037dbc2ea4ef42edcfbbf4" name="libKF5AkonadiPrivate5" arch="aarch64">
  <version epoch="0" ver="21.12.3" rel="bp154.2.3.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1617969600">- Update to 21.03.90
  * New feature release
- No code change since 21.03.80</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1618574400">- Update to 21.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/21.04
- No code change since 21.03.90</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1620820800">- Update to 21.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/21.04.1
- No code change since 21.04.0</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1622721600">- Install AppArmor profiles (as -apparmor subpackage)
- add akonadi-apparmor-opensuse.diff to adjust the profiles to
  openSUSE paths, and to add 'abi' rules to the profiles</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1623153600">- Update to 21.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.04.2
- No code change since 21.04.1</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1625659200">- Update to 21.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.04.3
- No code change since 21.04.2</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1626004800">- update akonadi-apparmor-opensuse.diff: add openSUSE Postgresql
  path in AppArmor profiles (and make it a variable to keep the
  profiles readable) and some more rules for Postgresql</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1626523200">- Update to 21.07.80
  * New feature release
- Changes since 21.04.3:
  * Make sure that we don't cancel dialog
  * Use KSharedConfig::openStateConfig
  * Allow to exclude unified folder
  * Add roleNames to AgentTypeModel for easier interfacing with QML
  * USe QStringView here
  * Fix some clazy warning
  * Add support for subquery as table expression
  * Modernize code
  * Remove references to innodb_additional_mem_pool_size
  * use forward declaration here
  * AgentServer: remove unnecessary QWidgets import
  * kde4 Migration code will be removed in kf6
  * Remove the std::auto_ptr and std::unique_ptr payload checks
  * Make the recently accessed folder list globally accessible
  * Fix Clazy exclusion for 'old-style-connect', causes CI to fail
  * It will create mem leak here too I think
  * Fix memory leak detected by ASAN, by passing qApp as parent to QTranslator.
  * [favoriteproxytest] Link against KConfig
  * StandardActionManager is now based on QAction
  * CMake: replace most include_directories calls
  * CMake: use target_compile_definitions when possible
  * Add trailing comma to enums
- Only install the license files once</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1627646400">- Update to 21.07.90
  * New feature release
- No code change since 21.07.80</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1628251200">- Update to 21.08.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/21.08.0
- No code change since 21.07.90</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1630497600">- Update to 21.08.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.08.1
- Changes since 21.08.0:
  * Add a missing static storage class</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1633435200">- Update to 21.08.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1635854400">- Update to 21.08.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.08.3/
- No code change since 21.08.2</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1636804800">- Update to 21.11.80
  * New feature release
- Too many changes to list here.
- Drop upstream patch:
  * akonadi-apparmor-opensuse.diff</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638014400">- Update to 21.11.90
  * New feature release
- No code change since 21.11.80</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638532800">- Update to 21.12.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/21.12.0/
- Changes since 21.11.90:
  * Enable new GitLab CI on stable branch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1641297600">- Update to 21.12.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.12.1/
- Changes since 21.12.0:
  * Fix min required libaccounts-qt version</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1643716800">- Update to 21.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.12.2/
- Changes since 21.12.1:
  * Use all interface include dirs needed for LibXml2 (unbreak Windows build)
  * Fix build with GCC 12 (standard attributes in middle of decl-specifiers)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1646136000">- Update to 21.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.12.3/
- Changes since 21.12.2:
  * Use exec variable
  * Check executables exist in PATH before passing them to QProcess</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1666094400">- In SLE-15-SP3 we had patches that made akonadi fall back to
  sqlite if the mysql backend is not available. Those patches were
  already merged by upstream so we can let the package Recommend
  mysql instead of Require it, since it's not available in SLED.
  The Requires are set unless branding-SLE is installed so the
  requirements are used in Leap/TW but not in SLE where it's only
  a Recommends and an alternate Requirements is used in that case
  where the sqlite backend is installed if mysql is not available.</changelog>
</package>
<package pkgid="119068d2047bbc0b70761b0539328cf0963d00003afb4a214687282abebf5f98" name="libKF5AkonadiPrivate5" arch="ppc64le">
  <version epoch="0" ver="21.12.3" rel="bp154.2.3.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1617969600">- Update to 21.03.90
  * New feature release
- No code change since 21.03.80</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1618574400">- Update to 21.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/21.04
- No code change since 21.03.90</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1620820800">- Update to 21.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/21.04.1
- No code change since 21.04.0</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1622721600">- Install AppArmor profiles (as -apparmor subpackage)
- add akonadi-apparmor-opensuse.diff to adjust the profiles to
  openSUSE paths, and to add 'abi' rules to the profiles</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1623153600">- Update to 21.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.04.2
- No code change since 21.04.1</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1625659200">- Update to 21.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.04.3
- No code change since 21.04.2</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1626004800">- update akonadi-apparmor-opensuse.diff: add openSUSE Postgresql
  path in AppArmor profiles (and make it a variable to keep the
  profiles readable) and some more rules for Postgresql</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1626523200">- Update to 21.07.80
  * New feature release
- Changes since 21.04.3:
  * Make sure that we don't cancel dialog
  * Use KSharedConfig::openStateConfig
  * Allow to exclude unified folder
  * Add roleNames to AgentTypeModel for easier interfacing with QML
  * USe QStringView here
  * Fix some clazy warning
  * Add support for subquery as table expression
  * Modernize code
  * Remove references to innodb_additional_mem_pool_size
  * use forward declaration here
  * AgentServer: remove unnecessary QWidgets import
  * kde4 Migration code will be removed in kf6
  * Remove the std::auto_ptr and std::unique_ptr payload checks
  * Make the recently accessed folder list globally accessible
  * Fix Clazy exclusion for 'old-style-connect', causes CI to fail
  * It will create mem leak here too I think
  * Fix memory leak detected by ASAN, by passing qApp as parent to QTranslator.
  * [favoriteproxytest] Link against KConfig
  * StandardActionManager is now based on QAction
  * CMake: replace most include_directories calls
  * CMake: use target_compile_definitions when possible
  * Add trailing comma to enums
- Only install the license files once</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1627646400">- Update to 21.07.90
  * New feature release
- No code change since 21.07.80</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1628251200">- Update to 21.08.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/21.08.0
- No code change since 21.07.90</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1630497600">- Update to 21.08.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.08.1
- Changes since 21.08.0:
  * Add a missing static storage class</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1633435200">- Update to 21.08.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1635854400">- Update to 21.08.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.08.3/
- No code change since 21.08.2</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1636804800">- Update to 21.11.80
  * New feature release
- Too many changes to list here.
- Drop upstream patch:
  * akonadi-apparmor-opensuse.diff</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638014400">- Update to 21.11.90
  * New feature release
- No code change since 21.11.80</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638532800">- Update to 21.12.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/21.12.0/
- Changes since 21.11.90:
  * Enable new GitLab CI on stable branch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1641297600">- Update to 21.12.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.12.1/
- Changes since 21.12.0:
  * Fix min required libaccounts-qt version</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1643716800">- Update to 21.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.12.2/
- Changes since 21.12.1:
  * Use all interface include dirs needed for LibXml2 (unbreak Windows build)
  * Fix build with GCC 12 (standard attributes in middle of decl-specifiers)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1646136000">- Update to 21.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.12.3/
- Changes since 21.12.2:
  * Use exec variable
  * Check executables exist in PATH before passing them to QProcess</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1666094400">- In SLE-15-SP3 we had patches that made akonadi fall back to
  sqlite if the mysql backend is not available. Those patches were
  already merged by upstream so we can let the package Recommend
  mysql instead of Require it, since it's not available in SLED.
  The Requires are set unless branding-SLE is installed so the
  requirements are used in Leap/TW but not in SLE where it's only
  a Recommends and an alternate Requirements is used in that case
  where the sqlite backend is installed if mysql is not available.</changelog>
</package>
<package pkgid="ad63681f1d62c44cf5d1752ad150c14bf12af50e7155252315ac05e6dbfd9db2" name="libKF5AkonadiPrivate5" arch="s390x">
  <version epoch="0" ver="21.12.3" rel="bp154.2.3.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1617969600">- Update to 21.03.90
  * New feature release
- No code change since 21.03.80</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1618574400">- Update to 21.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/21.04
- No code change since 21.03.90</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1620820800">- Update to 21.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/21.04.1
- No code change since 21.04.0</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1622721600">- Install AppArmor profiles (as -apparmor subpackage)
- add akonadi-apparmor-opensuse.diff to adjust the profiles to
  openSUSE paths, and to add 'abi' rules to the profiles</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1623153600">- Update to 21.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.04.2
- No code change since 21.04.1</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1625659200">- Update to 21.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.04.3
- No code change since 21.04.2</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1626004800">- update akonadi-apparmor-opensuse.diff: add openSUSE Postgresql
  path in AppArmor profiles (and make it a variable to keep the
  profiles readable) and some more rules for Postgresql</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1626523200">- Update to 21.07.80
  * New feature release
- Changes since 21.04.3:
  * Make sure that we don't cancel dialog
  * Use KSharedConfig::openStateConfig
  * Allow to exclude unified folder
  * Add roleNames to AgentTypeModel for easier interfacing with QML
  * USe QStringView here
  * Fix some clazy warning
  * Add support for subquery as table expression
  * Modernize code
  * Remove references to innodb_additional_mem_pool_size
  * use forward declaration here
  * AgentServer: remove unnecessary QWidgets import
  * kde4 Migration code will be removed in kf6
  * Remove the std::auto_ptr and std::unique_ptr payload checks
  * Make the recently accessed folder list globally accessible
  * Fix Clazy exclusion for 'old-style-connect', causes CI to fail
  * It will create mem leak here too I think
  * Fix memory leak detected by ASAN, by passing qApp as parent to QTranslator.
  * [favoriteproxytest] Link against KConfig
  * StandardActionManager is now based on QAction
  * CMake: replace most include_directories calls
  * CMake: use target_compile_definitions when possible
  * Add trailing comma to enums
- Only install the license files once</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1627646400">- Update to 21.07.90
  * New feature release
- No code change since 21.07.80</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1628251200">- Update to 21.08.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/21.08.0
- No code change since 21.07.90</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1630497600">- Update to 21.08.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.08.1
- Changes since 21.08.0:
  * Add a missing static storage class</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1633435200">- Update to 21.08.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1635854400">- Update to 21.08.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.08.3/
- No code change since 21.08.2</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1636804800">- Update to 21.11.80
  * New feature release
- Too many changes to list here.
- Drop upstream patch:
  * akonadi-apparmor-opensuse.diff</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638014400">- Update to 21.11.90
  * New feature release
- No code change since 21.11.80</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638532800">- Update to 21.12.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/21.12.0/
- Changes since 21.11.90:
  * Enable new GitLab CI on stable branch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1641297600">- Update to 21.12.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.12.1/
- Changes since 21.12.0:
  * Fix min required libaccounts-qt version</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1643716800">- Update to 21.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.12.2/
- Changes since 21.12.1:
  * Use all interface include dirs needed for LibXml2 (unbreak Windows build)
  * Fix build with GCC 12 (standard attributes in middle of decl-specifiers)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1646136000">- Update to 21.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.12.3/
- Changes since 21.12.2:
  * Use exec variable
  * Check executables exist in PATH before passing them to QProcess</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1666094400">- In SLE-15-SP3 we had patches that made akonadi fall back to
  sqlite if the mysql backend is not available. Those patches were
  already merged by upstream so we can let the package Recommend
  mysql instead of Require it, since it's not available in SLED.
  The Requires are set unless branding-SLE is installed so the
  requirements are used in Leap/TW but not in SLE where it's only
  a Recommends and an alternate Requirements is used in that case
  where the sqlite backend is installed if mysql is not available.</changelog>
</package>
<package pkgid="54d4ff6a9f819d41ba075e40c7e2357fd4402b0bfa3d7b3be9f7e725d779c443" name="libKF5AkonadiPrivate5" arch="x86_64">
  <version epoch="0" ver="21.12.3" rel="bp154.2.3.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1617969600">- Update to 21.03.90
  * New feature release
- No code change since 21.03.80</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1618574400">- Update to 21.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/21.04
- No code change since 21.03.90</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1620820800">- Update to 21.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/21.04.1
- No code change since 21.04.0</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1622721600">- Install AppArmor profiles (as -apparmor subpackage)
- add akonadi-apparmor-opensuse.diff to adjust the profiles to
  openSUSE paths, and to add 'abi' rules to the profiles</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1623153600">- Update to 21.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.04.2
- No code change since 21.04.1</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1625659200">- Update to 21.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.04.3
- No code change since 21.04.2</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1626004800">- update akonadi-apparmor-opensuse.diff: add openSUSE Postgresql
  path in AppArmor profiles (and make it a variable to keep the
  profiles readable) and some more rules for Postgresql</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1626523200">- Update to 21.07.80
  * New feature release
- Changes since 21.04.3:
  * Make sure that we don't cancel dialog
  * Use KSharedConfig::openStateConfig
  * Allow to exclude unified folder
  * Add roleNames to AgentTypeModel for easier interfacing with QML
  * USe QStringView here
  * Fix some clazy warning
  * Add support for subquery as table expression
  * Modernize code
  * Remove references to innodb_additional_mem_pool_size
  * use forward declaration here
  * AgentServer: remove unnecessary QWidgets import
  * kde4 Migration code will be removed in kf6
  * Remove the std::auto_ptr and std::unique_ptr payload checks
  * Make the recently accessed folder list globally accessible
  * Fix Clazy exclusion for 'old-style-connect', causes CI to fail
  * It will create mem leak here too I think
  * Fix memory leak detected by ASAN, by passing qApp as parent to QTranslator.
  * [favoriteproxytest] Link against KConfig
  * StandardActionManager is now based on QAction
  * CMake: replace most include_directories calls
  * CMake: use target_compile_definitions when possible
  * Add trailing comma to enums
- Only install the license files once</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1627646400">- Update to 21.07.90
  * New feature release
- No code change since 21.07.80</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1628251200">- Update to 21.08.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/21.08.0
- No code change since 21.07.90</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1630497600">- Update to 21.08.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.08.1
- Changes since 21.08.0:
  * Add a missing static storage class</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1633435200">- Update to 21.08.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1635854400">- Update to 21.08.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.08.3/
- No code change since 21.08.2</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1636804800">- Update to 21.11.80
  * New feature release
- Too many changes to list here.
- Drop upstream patch:
  * akonadi-apparmor-opensuse.diff</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638014400">- Update to 21.11.90
  * New feature release
- No code change since 21.11.80</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638532800">- Update to 21.12.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/21.12.0/
- Changes since 21.11.90:
  * Enable new GitLab CI on stable branch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1641297600">- Update to 21.12.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.12.1/
- Changes since 21.12.0:
  * Fix min required libaccounts-qt version</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1643716800">- Update to 21.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.12.2/
- Changes since 21.12.1:
  * Use all interface include dirs needed for LibXml2 (unbreak Windows build)
  * Fix build with GCC 12 (standard attributes in middle of decl-specifiers)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1646136000">- Update to 21.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.12.3/
- Changes since 21.12.2:
  * Use exec variable
  * Check executables exist in PATH before passing them to QProcess</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1666094400">- In SLE-15-SP3 we had patches that made akonadi fall back to
  sqlite if the mysql backend is not available. Those patches were
  already merged by upstream so we can let the package Recommend
  mysql instead of Require it, since it's not available in SLED.
  The Requires are set unless branding-SLE is installed so the
  requirements are used in Leap/TW but not in SLE where it's only
  a Recommends and an alternate Requirements is used in that case
  where the sqlite backend is installed if mysql is not available.</changelog>
</package>
<package pkgid="e9444ccc0a1a705774bffc5cefc88aa007b6c99c71c490d8997b27245c849384" name="libKF5AkonadiWidgets5" arch="aarch64">
  <version epoch="0" ver="21.12.3" rel="bp154.2.3.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1617969600">- Update to 21.03.90
  * New feature release
- No code change since 21.03.80</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1618574400">- Update to 21.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/21.04
- No code change since 21.03.90</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1620820800">- Update to 21.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/21.04.1
- No code change since 21.04.0</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1622721600">- Install AppArmor profiles (as -apparmor subpackage)
- add akonadi-apparmor-opensuse.diff to adjust the profiles to
  openSUSE paths, and to add 'abi' rules to the profiles</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1623153600">- Update to 21.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.04.2
- No code change since 21.04.1</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1625659200">- Update to 21.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.04.3
- No code change since 21.04.2</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1626004800">- update akonadi-apparmor-opensuse.diff: add openSUSE Postgresql
  path in AppArmor profiles (and make it a variable to keep the
  profiles readable) and some more rules for Postgresql</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1626523200">- Update to 21.07.80
  * New feature release
- Changes since 21.04.3:
  * Make sure that we don't cancel dialog
  * Use KSharedConfig::openStateConfig
  * Allow to exclude unified folder
  * Add roleNames to AgentTypeModel for easier interfacing with QML
  * USe QStringView here
  * Fix some clazy warning
  * Add support for subquery as table expression
  * Modernize code
  * Remove references to innodb_additional_mem_pool_size
  * use forward declaration here
  * AgentServer: remove unnecessary QWidgets import
  * kde4 Migration code will be removed in kf6
  * Remove the std::auto_ptr and std::unique_ptr payload checks
  * Make the recently accessed folder list globally accessible
  * Fix Clazy exclusion for 'old-style-connect', causes CI to fail
  * It will create mem leak here too I think
  * Fix memory leak detected by ASAN, by passing qApp as parent to QTranslator.
  * [favoriteproxytest] Link against KConfig
  * StandardActionManager is now based on QAction
  * CMake: replace most include_directories calls
  * CMake: use target_compile_definitions when possible
  * Add trailing comma to enums
- Only install the license files once</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1627646400">- Update to 21.07.90
  * New feature release
- No code change since 21.07.80</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1628251200">- Update to 21.08.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/21.08.0
- No code change since 21.07.90</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1630497600">- Update to 21.08.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.08.1
- Changes since 21.08.0:
  * Add a missing static storage class</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1633435200">- Update to 21.08.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1635854400">- Update to 21.08.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.08.3/
- No code change since 21.08.2</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1636804800">- Update to 21.11.80
  * New feature release
- Too many changes to list here.
- Drop upstream patch:
  * akonadi-apparmor-opensuse.diff</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638014400">- Update to 21.11.90
  * New feature release
- No code change since 21.11.80</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638532800">- Update to 21.12.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/21.12.0/
- Changes since 21.11.90:
  * Enable new GitLab CI on stable branch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1641297600">- Update to 21.12.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.12.1/
- Changes since 21.12.0:
  * Fix min required libaccounts-qt version</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1643716800">- Update to 21.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.12.2/
- Changes since 21.12.1:
  * Use all interface include dirs needed for LibXml2 (unbreak Windows build)
  * Fix build with GCC 12 (standard attributes in middle of decl-specifiers)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1646136000">- Update to 21.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.12.3/
- Changes since 21.12.2:
  * Use exec variable
  * Check executables exist in PATH before passing them to QProcess</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1666094400">- In SLE-15-SP3 we had patches that made akonadi fall back to
  sqlite if the mysql backend is not available. Those patches were
  already merged by upstream so we can let the package Recommend
  mysql instead of Require it, since it's not available in SLED.
  The Requires are set unless branding-SLE is installed so the
  requirements are used in Leap/TW but not in SLE where it's only
  a Recommends and an alternate Requirements is used in that case
  where the sqlite backend is installed if mysql is not available.</changelog>
</package>
<package pkgid="ea9522f55e94b8c6fd3cef783250d7275e75209f2e90cb96b581033aa20b50b6" name="libKF5AkonadiWidgets5" arch="ppc64le">
  <version epoch="0" ver="21.12.3" rel="bp154.2.3.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1617969600">- Update to 21.03.90
  * New feature release
- No code change since 21.03.80</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1618574400">- Update to 21.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/21.04
- No code change since 21.03.90</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1620820800">- Update to 21.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/21.04.1
- No code change since 21.04.0</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1622721600">- Install AppArmor profiles (as -apparmor subpackage)
- add akonadi-apparmor-opensuse.diff to adjust the profiles to
  openSUSE paths, and to add 'abi' rules to the profiles</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1623153600">- Update to 21.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.04.2
- No code change since 21.04.1</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1625659200">- Update to 21.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.04.3
- No code change since 21.04.2</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1626004800">- update akonadi-apparmor-opensuse.diff: add openSUSE Postgresql
  path in AppArmor profiles (and make it a variable to keep the
  profiles readable) and some more rules for Postgresql</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1626523200">- Update to 21.07.80
  * New feature release
- Changes since 21.04.3:
  * Make sure that we don't cancel dialog
  * Use KSharedConfig::openStateConfig
  * Allow to exclude unified folder
  * Add roleNames to AgentTypeModel for easier interfacing with QML
  * USe QStringView here
  * Fix some clazy warning
  * Add support for subquery as table expression
  * Modernize code
  * Remove references to innodb_additional_mem_pool_size
  * use forward declaration here
  * AgentServer: remove unnecessary QWidgets import
  * kde4 Migration code will be removed in kf6
  * Remove the std::auto_ptr and std::unique_ptr payload checks
  * Make the recently accessed folder list globally accessible
  * Fix Clazy exclusion for 'old-style-connect', causes CI to fail
  * It will create mem leak here too I think
  * Fix memory leak detected by ASAN, by passing qApp as parent to QTranslator.
  * [favoriteproxytest] Link against KConfig
  * StandardActionManager is now based on QAction
  * CMake: replace most include_directories calls
  * CMake: use target_compile_definitions when possible
  * Add trailing comma to enums
- Only install the license files once</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1627646400">- Update to 21.07.90
  * New feature release
- No code change since 21.07.80</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1628251200">- Update to 21.08.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/21.08.0
- No code change since 21.07.90</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1630497600">- Update to 21.08.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.08.1
- Changes since 21.08.0:
  * Add a missing static storage class</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1633435200">- Update to 21.08.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1635854400">- Update to 21.08.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.08.3/
- No code change since 21.08.2</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1636804800">- Update to 21.11.80
  * New feature release
- Too many changes to list here.
- Drop upstream patch:
  * akonadi-apparmor-opensuse.diff</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638014400">- Update to 21.11.90
  * New feature release
- No code change since 21.11.80</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638532800">- Update to 21.12.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/21.12.0/
- Changes since 21.11.90:
  * Enable new GitLab CI on stable branch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1641297600">- Update to 21.12.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.12.1/
- Changes since 21.12.0:
  * Fix min required libaccounts-qt version</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1643716800">- Update to 21.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.12.2/
- Changes since 21.12.1:
  * Use all interface include dirs needed for LibXml2 (unbreak Windows build)
  * Fix build with GCC 12 (standard attributes in middle of decl-specifiers)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1646136000">- Update to 21.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.12.3/
- Changes since 21.12.2:
  * Use exec variable
  * Check executables exist in PATH before passing them to QProcess</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1666094400">- In SLE-15-SP3 we had patches that made akonadi fall back to
  sqlite if the mysql backend is not available. Those patches were
  already merged by upstream so we can let the package Recommend
  mysql instead of Require it, since it's not available in SLED.
  The Requires are set unless branding-SLE is installed so the
  requirements are used in Leap/TW but not in SLE where it's only
  a Recommends and an alternate Requirements is used in that case
  where the sqlite backend is installed if mysql is not available.</changelog>
</package>
<package pkgid="6d82bbc2ed3377ae584ded2bcdc287285e93d721c0647667984bbc29847cea59" name="libKF5AkonadiWidgets5" arch="s390x">
  <version epoch="0" ver="21.12.3" rel="bp154.2.3.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1617969600">- Update to 21.03.90
  * New feature release
- No code change since 21.03.80</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1618574400">- Update to 21.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/21.04
- No code change since 21.03.90</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1620820800">- Update to 21.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/21.04.1
- No code change since 21.04.0</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1622721600">- Install AppArmor profiles (as -apparmor subpackage)
- add akonadi-apparmor-opensuse.diff to adjust the profiles to
  openSUSE paths, and to add 'abi' rules to the profiles</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1623153600">- Update to 21.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.04.2
- No code change since 21.04.1</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1625659200">- Update to 21.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.04.3
- No code change since 21.04.2</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1626004800">- update akonadi-apparmor-opensuse.diff: add openSUSE Postgresql
  path in AppArmor profiles (and make it a variable to keep the
  profiles readable) and some more rules for Postgresql</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1626523200">- Update to 21.07.80
  * New feature release
- Changes since 21.04.3:
  * Make sure that we don't cancel dialog
  * Use KSharedConfig::openStateConfig
  * Allow to exclude unified folder
  * Add roleNames to AgentTypeModel for easier interfacing with QML
  * USe QStringView here
  * Fix some clazy warning
  * Add support for subquery as table expression
  * Modernize code
  * Remove references to innodb_additional_mem_pool_size
  * use forward declaration here
  * AgentServer: remove unnecessary QWidgets import
  * kde4 Migration code will be removed in kf6
  * Remove the std::auto_ptr and std::unique_ptr payload checks
  * Make the recently accessed folder list globally accessible
  * Fix Clazy exclusion for 'old-style-connect', causes CI to fail
  * It will create mem leak here too I think
  * Fix memory leak detected by ASAN, by passing qApp as parent to QTranslator.
  * [favoriteproxytest] Link against KConfig
  * StandardActionManager is now based on QAction
  * CMake: replace most include_directories calls
  * CMake: use target_compile_definitions when possible
  * Add trailing comma to enums
- Only install the license files once</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1627646400">- Update to 21.07.90
  * New feature release
- No code change since 21.07.80</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1628251200">- Update to 21.08.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/21.08.0
- No code change since 21.07.90</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1630497600">- Update to 21.08.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.08.1
- Changes since 21.08.0:
  * Add a missing static storage class</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1633435200">- Update to 21.08.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1635854400">- Update to 21.08.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.08.3/
- No code change since 21.08.2</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1636804800">- Update to 21.11.80
  * New feature release
- Too many changes to list here.
- Drop upstream patch:
  * akonadi-apparmor-opensuse.diff</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638014400">- Update to 21.11.90
  * New feature release
- No code change since 21.11.80</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638532800">- Update to 21.12.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/21.12.0/
- Changes since 21.11.90:
  * Enable new GitLab CI on stable branch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1641297600">- Update to 21.12.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.12.1/
- Changes since 21.12.0:
  * Fix min required libaccounts-qt version</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1643716800">- Update to 21.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.12.2/
- Changes since 21.12.1:
  * Use all interface include dirs needed for LibXml2 (unbreak Windows build)
  * Fix build with GCC 12 (standard attributes in middle of decl-specifiers)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1646136000">- Update to 21.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.12.3/
- Changes since 21.12.2:
  * Use exec variable
  * Check executables exist in PATH before passing them to QProcess</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1666094400">- In SLE-15-SP3 we had patches that made akonadi fall back to
  sqlite if the mysql backend is not available. Those patches were
  already merged by upstream so we can let the package Recommend
  mysql instead of Require it, since it's not available in SLED.
  The Requires are set unless branding-SLE is installed so the
  requirements are used in Leap/TW but not in SLE where it's only
  a Recommends and an alternate Requirements is used in that case
  where the sqlite backend is installed if mysql is not available.</changelog>
</package>
<package pkgid="b61f8202e4de8f7ac54571be3c25af173192994735e95f1e03d5987324050be2" name="libKF5AkonadiWidgets5" arch="x86_64">
  <version epoch="0" ver="21.12.3" rel="bp154.2.3.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1617969600">- Update to 21.03.90
  * New feature release
- No code change since 21.03.80</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1618574400">- Update to 21.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/21.04
- No code change since 21.03.90</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1620820800">- Update to 21.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/21.04.1
- No code change since 21.04.0</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1622721600">- Install AppArmor profiles (as -apparmor subpackage)
- add akonadi-apparmor-opensuse.diff to adjust the profiles to
  openSUSE paths, and to add 'abi' rules to the profiles</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1623153600">- Update to 21.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.04.2
- No code change since 21.04.1</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1625659200">- Update to 21.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.04.3
- No code change since 21.04.2</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1626004800">- update akonadi-apparmor-opensuse.diff: add openSUSE Postgresql
  path in AppArmor profiles (and make it a variable to keep the
  profiles readable) and some more rules for Postgresql</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1626523200">- Update to 21.07.80
  * New feature release
- Changes since 21.04.3:
  * Make sure that we don't cancel dialog
  * Use KSharedConfig::openStateConfig
  * Allow to exclude unified folder
  * Add roleNames to AgentTypeModel for easier interfacing with QML
  * USe QStringView here
  * Fix some clazy warning
  * Add support for subquery as table expression
  * Modernize code
  * Remove references to innodb_additional_mem_pool_size
  * use forward declaration here
  * AgentServer: remove unnecessary QWidgets import
  * kde4 Migration code will be removed in kf6
  * Remove the std::auto_ptr and std::unique_ptr payload checks
  * Make the recently accessed folder list globally accessible
  * Fix Clazy exclusion for 'old-style-connect', causes CI to fail
  * It will create mem leak here too I think
  * Fix memory leak detected by ASAN, by passing qApp as parent to QTranslator.
  * [favoriteproxytest] Link against KConfig
  * StandardActionManager is now based on QAction
  * CMake: replace most include_directories calls
  * CMake: use target_compile_definitions when possible
  * Add trailing comma to enums
- Only install the license files once</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1627646400">- Update to 21.07.90
  * New feature release
- No code change since 21.07.80</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1628251200">- Update to 21.08.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/21.08.0
- No code change since 21.07.90</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1630497600">- Update to 21.08.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.08.1
- Changes since 21.08.0:
  * Add a missing static storage class</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1633435200">- Update to 21.08.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1635854400">- Update to 21.08.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.08.3/
- No code change since 21.08.2</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1636804800">- Update to 21.11.80
  * New feature release
- Too many changes to list here.
- Drop upstream patch:
  * akonadi-apparmor-opensuse.diff</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638014400">- Update to 21.11.90
  * New feature release
- No code change since 21.11.80</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638532800">- Update to 21.12.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/21.12.0/
- Changes since 21.11.90:
  * Enable new GitLab CI on stable branch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1641297600">- Update to 21.12.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.12.1/
- Changes since 21.12.0:
  * Fix min required libaccounts-qt version</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1643716800">- Update to 21.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.12.2/
- Changes since 21.12.1:
  * Use all interface include dirs needed for LibXml2 (unbreak Windows build)
  * Fix build with GCC 12 (standard attributes in middle of decl-specifiers)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1646136000">- Update to 21.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.12.3/
- Changes since 21.12.2:
  * Use exec variable
  * Check executables exist in PATH before passing them to QProcess</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1666094400">- In SLE-15-SP3 we had patches that made akonadi fall back to
  sqlite if the mysql backend is not available. Those patches were
  already merged by upstream so we can let the package Recommend
  mysql instead of Require it, since it's not available in SLED.
  The Requires are set unless branding-SLE is installed so the
  requirements are used in Leap/TW but not in SLE where it's only
  a Recommends and an alternate Requirements is used in that case
  where the sqlite backend is installed if mysql is not available.</changelog>
</package>
<package pkgid="6a72bed67dd1d1976c4ce6b9176df5f6a842d7ea1a66dbf1574f658a1328b2cc" name="libKF5AkonadiXml5" arch="aarch64">
  <version epoch="0" ver="21.12.3" rel="bp154.2.3.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1617969600">- Update to 21.03.90
  * New feature release
- No code change since 21.03.80</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1618574400">- Update to 21.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/21.04
- No code change since 21.03.90</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1620820800">- Update to 21.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/21.04.1
- No code change since 21.04.0</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1622721600">- Install AppArmor profiles (as -apparmor subpackage)
- add akonadi-apparmor-opensuse.diff to adjust the profiles to
  openSUSE paths, and to add 'abi' rules to the profiles</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1623153600">- Update to 21.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.04.2
- No code change since 21.04.1</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1625659200">- Update to 21.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.04.3
- No code change since 21.04.2</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1626004800">- update akonadi-apparmor-opensuse.diff: add openSUSE Postgresql
  path in AppArmor profiles (and make it a variable to keep the
  profiles readable) and some more rules for Postgresql</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1626523200">- Update to 21.07.80
  * New feature release
- Changes since 21.04.3:
  * Make sure that we don't cancel dialog
  * Use KSharedConfig::openStateConfig
  * Allow to exclude unified folder
  * Add roleNames to AgentTypeModel for easier interfacing with QML
  * USe QStringView here
  * Fix some clazy warning
  * Add support for subquery as table expression
  * Modernize code
  * Remove references to innodb_additional_mem_pool_size
  * use forward declaration here
  * AgentServer: remove unnecessary QWidgets import
  * kde4 Migration code will be removed in kf6
  * Remove the std::auto_ptr and std::unique_ptr payload checks
  * Make the recently accessed folder list globally accessible
  * Fix Clazy exclusion for 'old-style-connect', causes CI to fail
  * It will create mem leak here too I think
  * Fix memory leak detected by ASAN, by passing qApp as parent to QTranslator.
  * [favoriteproxytest] Link against KConfig
  * StandardActionManager is now based on QAction
  * CMake: replace most include_directories calls
  * CMake: use target_compile_definitions when possible
  * Add trailing comma to enums
- Only install the license files once</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1627646400">- Update to 21.07.90
  * New feature release
- No code change since 21.07.80</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1628251200">- Update to 21.08.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/21.08.0
- No code change since 21.07.90</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1630497600">- Update to 21.08.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.08.1
- Changes since 21.08.0:
  * Add a missing static storage class</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1633435200">- Update to 21.08.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1635854400">- Update to 21.08.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.08.3/
- No code change since 21.08.2</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1636804800">- Update to 21.11.80
  * New feature release
- Too many changes to list here.
- Drop upstream patch:
  * akonadi-apparmor-opensuse.diff</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638014400">- Update to 21.11.90
  * New feature release
- No code change since 21.11.80</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638532800">- Update to 21.12.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/21.12.0/
- Changes since 21.11.90:
  * Enable new GitLab CI on stable branch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1641297600">- Update to 21.12.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.12.1/
- Changes since 21.12.0:
  * Fix min required libaccounts-qt version</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1643716800">- Update to 21.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.12.2/
- Changes since 21.12.1:
  * Use all interface include dirs needed for LibXml2 (unbreak Windows build)
  * Fix build with GCC 12 (standard attributes in middle of decl-specifiers)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1646136000">- Update to 21.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.12.3/
- Changes since 21.12.2:
  * Use exec variable
  * Check executables exist in PATH before passing them to QProcess</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1666094400">- In SLE-15-SP3 we had patches that made akonadi fall back to
  sqlite if the mysql backend is not available. Those patches were
  already merged by upstream so we can let the package Recommend
  mysql instead of Require it, since it's not available in SLED.
  The Requires are set unless branding-SLE is installed so the
  requirements are used in Leap/TW but not in SLE where it's only
  a Recommends and an alternate Requirements is used in that case
  where the sqlite backend is installed if mysql is not available.</changelog>
</package>
<package pkgid="08d0860bcfe74acdfde010b7f0b628b0c77fa0d62ae34391b1275575909b9d08" name="libKF5AkonadiXml5" arch="ppc64le">
  <version epoch="0" ver="21.12.3" rel="bp154.2.3.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1617969600">- Update to 21.03.90
  * New feature release
- No code change since 21.03.80</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1618574400">- Update to 21.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/21.04
- No code change since 21.03.90</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1620820800">- Update to 21.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/21.04.1
- No code change since 21.04.0</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1622721600">- Install AppArmor profiles (as -apparmor subpackage)
- add akonadi-apparmor-opensuse.diff to adjust the profiles to
  openSUSE paths, and to add 'abi' rules to the profiles</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1623153600">- Update to 21.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.04.2
- No code change since 21.04.1</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1625659200">- Update to 21.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.04.3
- No code change since 21.04.2</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1626004800">- update akonadi-apparmor-opensuse.diff: add openSUSE Postgresql
  path in AppArmor profiles (and make it a variable to keep the
  profiles readable) and some more rules for Postgresql</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1626523200">- Update to 21.07.80
  * New feature release
- Changes since 21.04.3:
  * Make sure that we don't cancel dialog
  * Use KSharedConfig::openStateConfig
  * Allow to exclude unified folder
  * Add roleNames to AgentTypeModel for easier interfacing with QML
  * USe QStringView here
  * Fix some clazy warning
  * Add support for subquery as table expression
  * Modernize code
  * Remove references to innodb_additional_mem_pool_size
  * use forward declaration here
  * AgentServer: remove unnecessary QWidgets import
  * kde4 Migration code will be removed in kf6
  * Remove the std::auto_ptr and std::unique_ptr payload checks
  * Make the recently accessed folder list globally accessible
  * Fix Clazy exclusion for 'old-style-connect', causes CI to fail
  * It will create mem leak here too I think
  * Fix memory leak detected by ASAN, by passing qApp as parent to QTranslator.
  * [favoriteproxytest] Link against KConfig
  * StandardActionManager is now based on QAction
  * CMake: replace most include_directories calls
  * CMake: use target_compile_definitions when possible
  * Add trailing comma to enums
- Only install the license files once</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1627646400">- Update to 21.07.90
  * New feature release
- No code change since 21.07.80</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1628251200">- Update to 21.08.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/21.08.0
- No code change since 21.07.90</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1630497600">- Update to 21.08.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.08.1
- Changes since 21.08.0:
  * Add a missing static storage class</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1633435200">- Update to 21.08.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1635854400">- Update to 21.08.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.08.3/
- No code change since 21.08.2</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1636804800">- Update to 21.11.80
  * New feature release
- Too many changes to list here.
- Drop upstream patch:
  * akonadi-apparmor-opensuse.diff</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638014400">- Update to 21.11.90
  * New feature release
- No code change since 21.11.80</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638532800">- Update to 21.12.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/21.12.0/
- Changes since 21.11.90:
  * Enable new GitLab CI on stable branch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1641297600">- Update to 21.12.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.12.1/
- Changes since 21.12.0:
  * Fix min required libaccounts-qt version</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1643716800">- Update to 21.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.12.2/
- Changes since 21.12.1:
  * Use all interface include dirs needed for LibXml2 (unbreak Windows build)
  * Fix build with GCC 12 (standard attributes in middle of decl-specifiers)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1646136000">- Update to 21.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.12.3/
- Changes since 21.12.2:
  * Use exec variable
  * Check executables exist in PATH before passing them to QProcess</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1666094400">- In SLE-15-SP3 we had patches that made akonadi fall back to
  sqlite if the mysql backend is not available. Those patches were
  already merged by upstream so we can let the package Recommend
  mysql instead of Require it, since it's not available in SLED.
  The Requires are set unless branding-SLE is installed so the
  requirements are used in Leap/TW but not in SLE where it's only
  a Recommends and an alternate Requirements is used in that case
  where the sqlite backend is installed if mysql is not available.</changelog>
</package>
<package pkgid="23bd8b4538af5e060349c4e850973e1588073bc89a852bbb6c931d288dbf3da7" name="libKF5AkonadiXml5" arch="s390x">
  <version epoch="0" ver="21.12.3" rel="bp154.2.3.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1617969600">- Update to 21.03.90
  * New feature release
- No code change since 21.03.80</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1618574400">- Update to 21.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/21.04
- No code change since 21.03.90</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1620820800">- Update to 21.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/21.04.1
- No code change since 21.04.0</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1622721600">- Install AppArmor profiles (as -apparmor subpackage)
- add akonadi-apparmor-opensuse.diff to adjust the profiles to
  openSUSE paths, and to add 'abi' rules to the profiles</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1623153600">- Update to 21.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.04.2
- No code change since 21.04.1</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1625659200">- Update to 21.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.04.3
- No code change since 21.04.2</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1626004800">- update akonadi-apparmor-opensuse.diff: add openSUSE Postgresql
  path in AppArmor profiles (and make it a variable to keep the
  profiles readable) and some more rules for Postgresql</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1626523200">- Update to 21.07.80
  * New feature release
- Changes since 21.04.3:
  * Make sure that we don't cancel dialog
  * Use KSharedConfig::openStateConfig
  * Allow to exclude unified folder
  * Add roleNames to AgentTypeModel for easier interfacing with QML
  * USe QStringView here
  * Fix some clazy warning
  * Add support for subquery as table expression
  * Modernize code
  * Remove references to innodb_additional_mem_pool_size
  * use forward declaration here
  * AgentServer: remove unnecessary QWidgets import
  * kde4 Migration code will be removed in kf6
  * Remove the std::auto_ptr and std::unique_ptr payload checks
  * Make the recently accessed folder list globally accessible
  * Fix Clazy exclusion for 'old-style-connect', causes CI to fail
  * It will create mem leak here too I think
  * Fix memory leak detected by ASAN, by passing qApp as parent to QTranslator.
  * [favoriteproxytest] Link against KConfig
  * StandardActionManager is now based on QAction
  * CMake: replace most include_directories calls
  * CMake: use target_compile_definitions when possible
  * Add trailing comma to enums
- Only install the license files once</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1627646400">- Update to 21.07.90
  * New feature release
- No code change since 21.07.80</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1628251200">- Update to 21.08.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/21.08.0
- No code change since 21.07.90</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1630497600">- Update to 21.08.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.08.1
- Changes since 21.08.0:
  * Add a missing static storage class</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1633435200">- Update to 21.08.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1635854400">- Update to 21.08.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.08.3/
- No code change since 21.08.2</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1636804800">- Update to 21.11.80
  * New feature release
- Too many changes to list here.
- Drop upstream patch:
  * akonadi-apparmor-opensuse.diff</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638014400">- Update to 21.11.90
  * New feature release
- No code change since 21.11.80</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638532800">- Update to 21.12.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/21.12.0/
- Changes since 21.11.90:
  * Enable new GitLab CI on stable branch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1641297600">- Update to 21.12.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.12.1/
- Changes since 21.12.0:
  * Fix min required libaccounts-qt version</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1643716800">- Update to 21.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.12.2/
- Changes since 21.12.1:
  * Use all interface include dirs needed for LibXml2 (unbreak Windows build)
  * Fix build with GCC 12 (standard attributes in middle of decl-specifiers)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1646136000">- Update to 21.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.12.3/
- Changes since 21.12.2:
  * Use exec variable
  * Check executables exist in PATH before passing them to QProcess</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1666094400">- In SLE-15-SP3 we had patches that made akonadi fall back to
  sqlite if the mysql backend is not available. Those patches were
  already merged by upstream so we can let the package Recommend
  mysql instead of Require it, since it's not available in SLED.
  The Requires are set unless branding-SLE is installed so the
  requirements are used in Leap/TW but not in SLE where it's only
  a Recommends and an alternate Requirements is used in that case
  where the sqlite backend is installed if mysql is not available.</changelog>
</package>
<package pkgid="10bb605e6a858657fe99af151c31d0a7ee2d041390154a75fca1bad80da8a1f7" name="libKF5AkonadiXml5" arch="x86_64">
  <version epoch="0" ver="21.12.3" rel="bp154.2.3.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1617969600">- Update to 21.03.90
  * New feature release
- No code change since 21.03.80</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1618574400">- Update to 21.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/21.04
- No code change since 21.03.90</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1620820800">- Update to 21.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/21.04.1
- No code change since 21.04.0</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1622721600">- Install AppArmor profiles (as -apparmor subpackage)
- add akonadi-apparmor-opensuse.diff to adjust the profiles to
  openSUSE paths, and to add 'abi' rules to the profiles</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1623153600">- Update to 21.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.04.2
- No code change since 21.04.1</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1625659200">- Update to 21.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.04.3
- No code change since 21.04.2</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1626004800">- update akonadi-apparmor-opensuse.diff: add openSUSE Postgresql
  path in AppArmor profiles (and make it a variable to keep the
  profiles readable) and some more rules for Postgresql</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1626523200">- Update to 21.07.80
  * New feature release
- Changes since 21.04.3:
  * Make sure that we don't cancel dialog
  * Use KSharedConfig::openStateConfig
  * Allow to exclude unified folder
  * Add roleNames to AgentTypeModel for easier interfacing with QML
  * USe QStringView here
  * Fix some clazy warning
  * Add support for subquery as table expression
  * Modernize code
  * Remove references to innodb_additional_mem_pool_size
  * use forward declaration here
  * AgentServer: remove unnecessary QWidgets import
  * kde4 Migration code will be removed in kf6
  * Remove the std::auto_ptr and std::unique_ptr payload checks
  * Make the recently accessed folder list globally accessible
  * Fix Clazy exclusion for 'old-style-connect', causes CI to fail
  * It will create mem leak here too I think
  * Fix memory leak detected by ASAN, by passing qApp as parent to QTranslator.
  * [favoriteproxytest] Link against KConfig
  * StandardActionManager is now based on QAction
  * CMake: replace most include_directories calls
  * CMake: use target_compile_definitions when possible
  * Add trailing comma to enums
- Only install the license files once</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1627646400">- Update to 21.07.90
  * New feature release
- No code change since 21.07.80</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1628251200">- Update to 21.08.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/21.08.0
- No code change since 21.07.90</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1630497600">- Update to 21.08.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.08.1
- Changes since 21.08.0:
  * Add a missing static storage class</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1633435200">- Update to 21.08.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1635854400">- Update to 21.08.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.08.3/
- No code change since 21.08.2</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1636804800">- Update to 21.11.80
  * New feature release
- Too many changes to list here.
- Drop upstream patch:
  * akonadi-apparmor-opensuse.diff</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638014400">- Update to 21.11.90
  * New feature release
- No code change since 21.11.80</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638532800">- Update to 21.12.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/21.12.0/
- Changes since 21.11.90:
  * Enable new GitLab CI on stable branch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1641297600">- Update to 21.12.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.12.1/
- Changes since 21.12.0:
  * Fix min required libaccounts-qt version</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1643716800">- Update to 21.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.12.2/
- Changes since 21.12.1:
  * Use all interface include dirs needed for LibXml2 (unbreak Windows build)
  * Fix build with GCC 12 (standard attributes in middle of decl-specifiers)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1646136000">- Update to 21.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/21.12.3/
- Changes since 21.12.2:
  * Use exec variable
  * Check executables exist in PATH before passing them to QProcess</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1666094400">- In SLE-15-SP3 we had patches that made akonadi fall back to
  sqlite if the mysql backend is not available. Those patches were
  already merged by upstream so we can let the package Recommend
  mysql instead of Require it, since it's not available in SLED.
  The Requires are set unless branding-SLE is installed so the
  requirements are used in Leap/TW but not in SLE where it's only
  a Recommends and an alternate Requirements is used in that case
  where the sqlite backend is installed if mysql is not available.</changelog>
</package>
<package pkgid="24bc2416b61a9db3262520955b077e9b6fb468e92d322cf7094d6e4fdcb03eca" name="libKF5KCMUtils5" arch="aarch64">
  <version epoch="0" ver="5.90.0" rel="bp154.2.3.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1599393600">- Update to 5.74.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.74.0
- Changes since 5.73.0:
  * KCModuleData: Fix headers, improve api doc and rename method
  * Convert header to SPDX
  * Fix KCModuleData revertToDefaults signature bool -&gt; void
  * Extend KCModuleData with revertToDefaults and matchQuery functionnality
  * Fix typo
  * Try to avoid horizontal scrollbar in KCMultiDialog
  * Remove obsolete COPYING files
  * Add KCModuleData as base class for plugin
  * Allow extra button to be added to KPluginSelector
  * KCM-Utils: Convert copyright statements to SPDX expressions</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1601899200">- Update to 5.75.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.75.0
- Changes since 5.74.0:
  * Remove handling for inside events from tab hack (kde#423080)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1604750400">- Update to 5.76.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.76.0
- Too many changes to list here.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1607169600">- Update to 5.77.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.77.0
- Changes since 5.76.0:
  * Pass parent to Q*Layout ctor instead of calling setLayout()
  * remove hack that broke multi level kcms in icon mode</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1609934400">- Update to 5.78.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.78.0
- Changes since 5.77.0:
  * Remove ifdefs, we require Qt 5.14 now
  * KPluginSelector implement default highlight indicator
  * kcmoduleqml: don't bind column width to view width (kde#428727)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1612785600">- Update to 5.79.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.79.0
- Changes since 5.78.0:
  * Ensure single column mode
  * remove window dragging hack</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1615118400">- Update to 5.80.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.80.0
- Changes since 5.79.0:
  * Add .git-blame-ignore-revs file
  * Run clang-format
  * Add clang-format configuration
  * Add test for kcmutils_generate_module_data macro
  * Fix wrong margins on QML-based KCMs (kde#431855)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1617624000">- Update to 5.81.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.81.0
- Changes since 5.80.0:
  * Add loaded signal to KCModuleData to handle delayed loading</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1619870400">- Update to 5.82.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.82.0
- Changes since 5.81.0:
  * [KCModuleProxy] Refactor loadModule() for simplicity
  * Force autotest as C language
  * Remove unused file
  * Port QDBusConnectionInterface::serviceOwnerChanged to QDBusServiceWatcher
  * Use new connect() signal/slot syntax
  * Remove ComponentsDialog class, not used anywhere
  * Don't forward declaration when we already include file
  * Clean up unused KPackage linking + includes
  * Deprecate unused KSettingsWidgetAdaptor class
  * kcmutils_generate_module_data: Fix moc warning in generated files</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1622894400">- Update to 5.83.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.83.0
- Changes since 5.82.0:
  * Bump required CMake version to 3.16
  * Call ki18n_install() unconditionally</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1625400000">- Update to 5.84.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.84.0
- Changes since 5.83.0:
  * Download missing LicenseRef-KDE-Accepted-LGPL license
  * Fix loading help documentation for KPluginMetaData KCMs
  * Make KPluginMetaData accessible from KCModuleProxy class
  * Allow loading of KCModules using KPluginMetaData
  * WIP: KSettings::Dialog: port away from Dispatcher</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1628251200">- Update to 5.85.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.85.0
- Changes since 5.84.0:
  * Officially specify X-DocPath in the KCModule desktop file definition
  * Deprecate KCModuleProxy::aboutData
  * Add overload to pass in args in KCMultiDialog::addModule
  * Deprecate X-KDE-FactoryName and KCModuleInfo::handle
  * Deprecate KCMultiDialog::configCommitted(QByteArray) signal
  * Deprecate KSettings and KCModuleInfo based methods
  * Fix generation of documentation for deprecated methods
  * help:/ urls are already handled by KUrlHandler from KGuiAddons</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1630929600">- Update to 5.86.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.86.0
- Changes since 5.85.0:
  * We depend against c++-17 so we can use qOverload directly
  * Port away from deprecated KPluginLoader
  * Minor typo and wording fixes for KCModuleInfo API doc</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1631707200">- Drop the unneeded baselibs.conf.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1633262400">- Update to 5.87.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
  * Add Gitlab CI configuration
  * Fix Warning: Property type "Int" is not a known QVariant type
  * Add support for static builds
  * Add compat code for KService based plugin loading
  * Introduce KCModuleProxy::isChanged method
  * Un-overload KCModuleProxy:changed signal</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1636286400">- Update to 5.88.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.88.0
- Changes since 5.87.0:
  * KPluginSelector: Make sure to check if metaData/moduleInfo is valid before accessing it
  * KPluginSelector: Allow KCMs to be loaded using X-KDE-ConfigModule keyword
  * Remove unused internal method in KPluginSelector
  * Deprecate KCModuleInfo in favor of KPluginMetaData API
  * KCMultiDialog: Use deprecation macros to wrap internal KCModuleInfo API usage
  * KCModuleLoader: Deprecate overloads using KCModuleInfo
  * KPluginSelector: Port internally deprecated KCModuleInfo usage
  * KCModuleProxy: Deprecate KService/KCModuleInfo overloads for constructor
  * Add FreeBSD CI</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1636286401">- Strip 'Source' URL for faster submissions</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638619200">- Update to 5.89.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.89.0
- Changes since 5.88.0:
  * Set initial page using initialPage property, rather than pushing
  * Do not reset KPluginModel if there are no plugins
  * Implement KPluginSelector replacement not based around KPluginInfo
  * Do not try to unload static plugins
  * Support static plugins for X-KDE-ConfigModule property</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1641211200">- Update to 5.90.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.90.0
- Changes since 5.89.0:
  * Remove QDesktopWidget include, not used any where
  * Change build system for building against qt6
  * Wrap deprecated KDelarative::ConfigModule::aboutData method call in
    deprecation wrappers
  * Deprecate KPluginSelector class
  * Allow KCMUtils to build without deprecated KCoreAddons methods
  * Update showNavigationButtons to use enum type
  * Fix PluginPage deprecation docs</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1670241600">- Add patch from upstream included in 5.95 to fix a crash due to
  a double delete:
  * 0001-kcmultidialog-Fix-crash-in-clear.patch</changelog>
</package>
<package pkgid="cc312c412c02eeca8e3d4c49da29f99bf09821e090dd60694fcd817c81a6e932" name="libKF5KCMUtils5" arch="ppc64le">
  <version epoch="0" ver="5.90.0" rel="bp154.2.3.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1599393600">- Update to 5.74.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.74.0
- Changes since 5.73.0:
  * KCModuleData: Fix headers, improve api doc and rename method
  * Convert header to SPDX
  * Fix KCModuleData revertToDefaults signature bool -&gt; void
  * Extend KCModuleData with revertToDefaults and matchQuery functionnality
  * Fix typo
  * Try to avoid horizontal scrollbar in KCMultiDialog
  * Remove obsolete COPYING files
  * Add KCModuleData as base class for plugin
  * Allow extra button to be added to KPluginSelector
  * KCM-Utils: Convert copyright statements to SPDX expressions</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1601899200">- Update to 5.75.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.75.0
- Changes since 5.74.0:
  * Remove handling for inside events from tab hack (kde#423080)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1604750400">- Update to 5.76.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.76.0
- Too many changes to list here.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1607169600">- Update to 5.77.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.77.0
- Changes since 5.76.0:
  * Pass parent to Q*Layout ctor instead of calling setLayout()
  * remove hack that broke multi level kcms in icon mode</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1609934400">- Update to 5.78.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.78.0
- Changes since 5.77.0:
  * Remove ifdefs, we require Qt 5.14 now
  * KPluginSelector implement default highlight indicator
  * kcmoduleqml: don't bind column width to view width (kde#428727)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1612785600">- Update to 5.79.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.79.0
- Changes since 5.78.0:
  * Ensure single column mode
  * remove window dragging hack</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1615118400">- Update to 5.80.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.80.0
- Changes since 5.79.0:
  * Add .git-blame-ignore-revs file
  * Run clang-format
  * Add clang-format configuration
  * Add test for kcmutils_generate_module_data macro
  * Fix wrong margins on QML-based KCMs (kde#431855)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1617624000">- Update to 5.81.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.81.0
- Changes since 5.80.0:
  * Add loaded signal to KCModuleData to handle delayed loading</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1619870400">- Update to 5.82.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.82.0
- Changes since 5.81.0:
  * [KCModuleProxy] Refactor loadModule() for simplicity
  * Force autotest as C language
  * Remove unused file
  * Port QDBusConnectionInterface::serviceOwnerChanged to QDBusServiceWatcher
  * Use new connect() signal/slot syntax
  * Remove ComponentsDialog class, not used anywhere
  * Don't forward declaration when we already include file
  * Clean up unused KPackage linking + includes
  * Deprecate unused KSettingsWidgetAdaptor class
  * kcmutils_generate_module_data: Fix moc warning in generated files</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1622894400">- Update to 5.83.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.83.0
- Changes since 5.82.0:
  * Bump required CMake version to 3.16
  * Call ki18n_install() unconditionally</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1625400000">- Update to 5.84.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.84.0
- Changes since 5.83.0:
  * Download missing LicenseRef-KDE-Accepted-LGPL license
  * Fix loading help documentation for KPluginMetaData KCMs
  * Make KPluginMetaData accessible from KCModuleProxy class
  * Allow loading of KCModules using KPluginMetaData
  * WIP: KSettings::Dialog: port away from Dispatcher</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1628251200">- Update to 5.85.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.85.0
- Changes since 5.84.0:
  * Officially specify X-DocPath in the KCModule desktop file definition
  * Deprecate KCModuleProxy::aboutData
  * Add overload to pass in args in KCMultiDialog::addModule
  * Deprecate X-KDE-FactoryName and KCModuleInfo::handle
  * Deprecate KCMultiDialog::configCommitted(QByteArray) signal
  * Deprecate KSettings and KCModuleInfo based methods
  * Fix generation of documentation for deprecated methods
  * help:/ urls are already handled by KUrlHandler from KGuiAddons</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1630929600">- Update to 5.86.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.86.0
- Changes since 5.85.0:
  * We depend against c++-17 so we can use qOverload directly
  * Port away from deprecated KPluginLoader
  * Minor typo and wording fixes for KCModuleInfo API doc</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1631707200">- Drop the unneeded baselibs.conf.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1633262400">- Update to 5.87.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
  * Add Gitlab CI configuration
  * Fix Warning: Property type "Int" is not a known QVariant type
  * Add support for static builds
  * Add compat code for KService based plugin loading
  * Introduce KCModuleProxy::isChanged method
  * Un-overload KCModuleProxy:changed signal</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1636286400">- Update to 5.88.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.88.0
- Changes since 5.87.0:
  * KPluginSelector: Make sure to check if metaData/moduleInfo is valid before accessing it
  * KPluginSelector: Allow KCMs to be loaded using X-KDE-ConfigModule keyword
  * Remove unused internal method in KPluginSelector
  * Deprecate KCModuleInfo in favor of KPluginMetaData API
  * KCMultiDialog: Use deprecation macros to wrap internal KCModuleInfo API usage
  * KCModuleLoader: Deprecate overloads using KCModuleInfo
  * KPluginSelector: Port internally deprecated KCModuleInfo usage
  * KCModuleProxy: Deprecate KService/KCModuleInfo overloads for constructor
  * Add FreeBSD CI</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1636286401">- Strip 'Source' URL for faster submissions</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638619200">- Update to 5.89.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.89.0
- Changes since 5.88.0:
  * Set initial page using initialPage property, rather than pushing
  * Do not reset KPluginModel if there are no plugins
  * Implement KPluginSelector replacement not based around KPluginInfo
  * Do not try to unload static plugins
  * Support static plugins for X-KDE-ConfigModule property</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1641211200">- Update to 5.90.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.90.0
- Changes since 5.89.0:
  * Remove QDesktopWidget include, not used any where
  * Change build system for building against qt6
  * Wrap deprecated KDelarative::ConfigModule::aboutData method call in
    deprecation wrappers
  * Deprecate KPluginSelector class
  * Allow KCMUtils to build without deprecated KCoreAddons methods
  * Update showNavigationButtons to use enum type
  * Fix PluginPage deprecation docs</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1670241600">- Add patch from upstream included in 5.95 to fix a crash due to
  a double delete:
  * 0001-kcmultidialog-Fix-crash-in-clear.patch</changelog>
</package>
<package pkgid="2a9fba82a64ea14ae7787de3274a784ab5fb0fc6df1b8e99f4f23466910898e1" name="libKF5KCMUtils5" arch="s390x">
  <version epoch="0" ver="5.90.0" rel="bp154.2.3.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1599393600">- Update to 5.74.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.74.0
- Changes since 5.73.0:
  * KCModuleData: Fix headers, improve api doc and rename method
  * Convert header to SPDX
  * Fix KCModuleData revertToDefaults signature bool -&gt; void
  * Extend KCModuleData with revertToDefaults and matchQuery functionnality
  * Fix typo
  * Try to avoid horizontal scrollbar in KCMultiDialog
  * Remove obsolete COPYING files
  * Add KCModuleData as base class for plugin
  * Allow extra button to be added to KPluginSelector
  * KCM-Utils: Convert copyright statements to SPDX expressions</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1601899200">- Update to 5.75.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.75.0
- Changes since 5.74.0:
  * Remove handling for inside events from tab hack (kde#423080)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1604750400">- Update to 5.76.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.76.0
- Too many changes to list here.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1607169600">- Update to 5.77.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.77.0
- Changes since 5.76.0:
  * Pass parent to Q*Layout ctor instead of calling setLayout()
  * remove hack that broke multi level kcms in icon mode</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1609934400">- Update to 5.78.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.78.0
- Changes since 5.77.0:
  * Remove ifdefs, we require Qt 5.14 now
  * KPluginSelector implement default highlight indicator
  * kcmoduleqml: don't bind column width to view width (kde#428727)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1612785600">- Update to 5.79.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.79.0
- Changes since 5.78.0:
  * Ensure single column mode
  * remove window dragging hack</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1615118400">- Update to 5.80.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.80.0
- Changes since 5.79.0:
  * Add .git-blame-ignore-revs file
  * Run clang-format
  * Add clang-format configuration
  * Add test for kcmutils_generate_module_data macro
  * Fix wrong margins on QML-based KCMs (kde#431855)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1617624000">- Update to 5.81.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.81.0
- Changes since 5.80.0:
  * Add loaded signal to KCModuleData to handle delayed loading</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1619870400">- Update to 5.82.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.82.0
- Changes since 5.81.0:
  * [KCModuleProxy] Refactor loadModule() for simplicity
  * Force autotest as C language
  * Remove unused file
  * Port QDBusConnectionInterface::serviceOwnerChanged to QDBusServiceWatcher
  * Use new connect() signal/slot syntax
  * Remove ComponentsDialog class, not used anywhere
  * Don't forward declaration when we already include file
  * Clean up unused KPackage linking + includes
  * Deprecate unused KSettingsWidgetAdaptor class
  * kcmutils_generate_module_data: Fix moc warning in generated files</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1622894400">- Update to 5.83.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.83.0
- Changes since 5.82.0:
  * Bump required CMake version to 3.16
  * Call ki18n_install() unconditionally</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1625400000">- Update to 5.84.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.84.0
- Changes since 5.83.0:
  * Download missing LicenseRef-KDE-Accepted-LGPL license
  * Fix loading help documentation for KPluginMetaData KCMs
  * Make KPluginMetaData accessible from KCModuleProxy class
  * Allow loading of KCModules using KPluginMetaData
  * WIP: KSettings::Dialog: port away from Dispatcher</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1628251200">- Update to 5.85.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.85.0
- Changes since 5.84.0:
  * Officially specify X-DocPath in the KCModule desktop file definition
  * Deprecate KCModuleProxy::aboutData
  * Add overload to pass in args in KCMultiDialog::addModule
  * Deprecate X-KDE-FactoryName and KCModuleInfo::handle
  * Deprecate KCMultiDialog::configCommitted(QByteArray) signal
  * Deprecate KSettings and KCModuleInfo based methods
  * Fix generation of documentation for deprecated methods
  * help:/ urls are already handled by KUrlHandler from KGuiAddons</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1630929600">- Update to 5.86.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.86.0
- Changes since 5.85.0:
  * We depend against c++-17 so we can use qOverload directly
  * Port away from deprecated KPluginLoader
  * Minor typo and wording fixes for KCModuleInfo API doc</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1631707200">- Drop the unneeded baselibs.conf.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1633262400">- Update to 5.87.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
  * Add Gitlab CI configuration
  * Fix Warning: Property type "Int" is not a known QVariant type
  * Add support for static builds
  * Add compat code for KService based plugin loading
  * Introduce KCModuleProxy::isChanged method
  * Un-overload KCModuleProxy:changed signal</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1636286400">- Update to 5.88.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.88.0
- Changes since 5.87.0:
  * KPluginSelector: Make sure to check if metaData/moduleInfo is valid before accessing it
  * KPluginSelector: Allow KCMs to be loaded using X-KDE-ConfigModule keyword
  * Remove unused internal method in KPluginSelector
  * Deprecate KCModuleInfo in favor of KPluginMetaData API
  * KCMultiDialog: Use deprecation macros to wrap internal KCModuleInfo API usage
  * KCModuleLoader: Deprecate overloads using KCModuleInfo
  * KPluginSelector: Port internally deprecated KCModuleInfo usage
  * KCModuleProxy: Deprecate KService/KCModuleInfo overloads for constructor
  * Add FreeBSD CI</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1636286401">- Strip 'Source' URL for faster submissions</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638619200">- Update to 5.89.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.89.0
- Changes since 5.88.0:
  * Set initial page using initialPage property, rather than pushing
  * Do not reset KPluginModel if there are no plugins
  * Implement KPluginSelector replacement not based around KPluginInfo
  * Do not try to unload static plugins
  * Support static plugins for X-KDE-ConfigModule property</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1641211200">- Update to 5.90.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.90.0
- Changes since 5.89.0:
  * Remove QDesktopWidget include, not used any where
  * Change build system for building against qt6
  * Wrap deprecated KDelarative::ConfigModule::aboutData method call in
    deprecation wrappers
  * Deprecate KPluginSelector class
  * Allow KCMUtils to build without deprecated KCoreAddons methods
  * Update showNavigationButtons to use enum type
  * Fix PluginPage deprecation docs</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1670241600">- Add patch from upstream included in 5.95 to fix a crash due to
  a double delete:
  * 0001-kcmultidialog-Fix-crash-in-clear.patch</changelog>
</package>
<package pkgid="653f5bf273be8a587f8448b37f9f7f32d5512a9067ad833fde7ef9f90db3c072" name="libKF5KCMUtils5" arch="x86_64">
  <version epoch="0" ver="5.90.0" rel="bp154.2.3.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1599393600">- Update to 5.74.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.74.0
- Changes since 5.73.0:
  * KCModuleData: Fix headers, improve api doc and rename method
  * Convert header to SPDX
  * Fix KCModuleData revertToDefaults signature bool -&gt; void
  * Extend KCModuleData with revertToDefaults and matchQuery functionnality
  * Fix typo
  * Try to avoid horizontal scrollbar in KCMultiDialog
  * Remove obsolete COPYING files
  * Add KCModuleData as base class for plugin
  * Allow extra button to be added to KPluginSelector
  * KCM-Utils: Convert copyright statements to SPDX expressions</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1601899200">- Update to 5.75.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.75.0
- Changes since 5.74.0:
  * Remove handling for inside events from tab hack (kde#423080)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1604750400">- Update to 5.76.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.76.0
- Too many changes to list here.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1607169600">- Update to 5.77.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.77.0
- Changes since 5.76.0:
  * Pass parent to Q*Layout ctor instead of calling setLayout()
  * remove hack that broke multi level kcms in icon mode</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1609934400">- Update to 5.78.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.78.0
- Changes since 5.77.0:
  * Remove ifdefs, we require Qt 5.14 now
  * KPluginSelector implement default highlight indicator
  * kcmoduleqml: don't bind column width to view width (kde#428727)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1612785600">- Update to 5.79.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.79.0
- Changes since 5.78.0:
  * Ensure single column mode
  * remove window dragging hack</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1615118400">- Update to 5.80.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.80.0
- Changes since 5.79.0:
  * Add .git-blame-ignore-revs file
  * Run clang-format
  * Add clang-format configuration
  * Add test for kcmutils_generate_module_data macro
  * Fix wrong margins on QML-based KCMs (kde#431855)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1617624000">- Update to 5.81.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.81.0
- Changes since 5.80.0:
  * Add loaded signal to KCModuleData to handle delayed loading</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1619870400">- Update to 5.82.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.82.0
- Changes since 5.81.0:
  * [KCModuleProxy] Refactor loadModule() for simplicity
  * Force autotest as C language
  * Remove unused file
  * Port QDBusConnectionInterface::serviceOwnerChanged to QDBusServiceWatcher
  * Use new connect() signal/slot syntax
  * Remove ComponentsDialog class, not used anywhere
  * Don't forward declaration when we already include file
  * Clean up unused KPackage linking + includes
  * Deprecate unused KSettingsWidgetAdaptor class
  * kcmutils_generate_module_data: Fix moc warning in generated files</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1622894400">- Update to 5.83.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.83.0
- Changes since 5.82.0:
  * Bump required CMake version to 3.16
  * Call ki18n_install() unconditionally</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1625400000">- Update to 5.84.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.84.0
- Changes since 5.83.0:
  * Download missing LicenseRef-KDE-Accepted-LGPL license
  * Fix loading help documentation for KPluginMetaData KCMs
  * Make KPluginMetaData accessible from KCModuleProxy class
  * Allow loading of KCModules using KPluginMetaData
  * WIP: KSettings::Dialog: port away from Dispatcher</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1628251200">- Update to 5.85.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.85.0
- Changes since 5.84.0:
  * Officially specify X-DocPath in the KCModule desktop file definition
  * Deprecate KCModuleProxy::aboutData
  * Add overload to pass in args in KCMultiDialog::addModule
  * Deprecate X-KDE-FactoryName and KCModuleInfo::handle
  * Deprecate KCMultiDialog::configCommitted(QByteArray) signal
  * Deprecate KSettings and KCModuleInfo based methods
  * Fix generation of documentation for deprecated methods
  * help:/ urls are already handled by KUrlHandler from KGuiAddons</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1630929600">- Update to 5.86.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.86.0
- Changes since 5.85.0:
  * We depend against c++-17 so we can use qOverload directly
  * Port away from deprecated KPluginLoader
  * Minor typo and wording fixes for KCModuleInfo API doc</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1631707200">- Drop the unneeded baselibs.conf.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1633262400">- Update to 5.87.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
  * Add Gitlab CI configuration
  * Fix Warning: Property type "Int" is not a known QVariant type
  * Add support for static builds
  * Add compat code for KService based plugin loading
  * Introduce KCModuleProxy::isChanged method
  * Un-overload KCModuleProxy:changed signal</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1636286400">- Update to 5.88.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.88.0
- Changes since 5.87.0:
  * KPluginSelector: Make sure to check if metaData/moduleInfo is valid before accessing it
  * KPluginSelector: Allow KCMs to be loaded using X-KDE-ConfigModule keyword
  * Remove unused internal method in KPluginSelector
  * Deprecate KCModuleInfo in favor of KPluginMetaData API
  * KCMultiDialog: Use deprecation macros to wrap internal KCModuleInfo API usage
  * KCModuleLoader: Deprecate overloads using KCModuleInfo
  * KPluginSelector: Port internally deprecated KCModuleInfo usage
  * KCModuleProxy: Deprecate KService/KCModuleInfo overloads for constructor
  * Add FreeBSD CI</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1636286401">- Strip 'Source' URL for faster submissions</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638619200">- Update to 5.89.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.89.0
- Changes since 5.88.0:
  * Set initial page using initialPage property, rather than pushing
  * Do not reset KPluginModel if there are no plugins
  * Implement KPluginSelector replacement not based around KPluginInfo
  * Do not try to unload static plugins
  * Support static plugins for X-KDE-ConfigModule property</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1641211200">- Update to 5.90.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.90.0
- Changes since 5.89.0:
  * Remove QDesktopWidget include, not used any where
  * Change build system for building against qt6
  * Wrap deprecated KDelarative::ConfigModule::aboutData method call in
    deprecation wrappers
  * Deprecate KPluginSelector class
  * Allow KCMUtils to build without deprecated KCoreAddons methods
  * Update showNavigationButtons to use enum type
  * Fix PluginPage deprecation docs</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1670241600">- Add patch from upstream included in 5.95 to fix a crash due to
  a double delete:
  * 0001-kcmultidialog-Fix-crash-in-clear.patch</changelog>
</package>
<package pkgid="55a9781c735f617413f34459fa6d48217d669fb2d49329a453c01b815a5dba3a" name="libKF5KCMUtils5-lang" arch="noarch">
  <version epoch="0" ver="5.90.0" rel="bp154.2.3.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1599393600">- Update to 5.74.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.74.0
- Changes since 5.73.0:
  * KCModuleData: Fix headers, improve api doc and rename method
  * Convert header to SPDX
  * Fix KCModuleData revertToDefaults signature bool -&gt; void
  * Extend KCModuleData with revertToDefaults and matchQuery functionnality
  * Fix typo
  * Try to avoid horizontal scrollbar in KCMultiDialog
  * Remove obsolete COPYING files
  * Add KCModuleData as base class for plugin
  * Allow extra button to be added to KPluginSelector
  * KCM-Utils: Convert copyright statements to SPDX expressions</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1601899200">- Update to 5.75.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.75.0
- Changes since 5.74.0:
  * Remove handling for inside events from tab hack (kde#423080)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1604750400">- Update to 5.76.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.76.0
- Too many changes to list here.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1607169600">- Update to 5.77.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.77.0
- Changes since 5.76.0:
  * Pass parent to Q*Layout ctor instead of calling setLayout()
  * remove hack that broke multi level kcms in icon mode</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1609934400">- Update to 5.78.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.78.0
- Changes since 5.77.0:
  * Remove ifdefs, we require Qt 5.14 now
  * KPluginSelector implement default highlight indicator
  * kcmoduleqml: don't bind column width to view width (kde#428727)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1612785600">- Update to 5.79.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.79.0
- Changes since 5.78.0:
  * Ensure single column mode
  * remove window dragging hack</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1615118400">- Update to 5.80.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.80.0
- Changes since 5.79.0:
  * Add .git-blame-ignore-revs file
  * Run clang-format
  * Add clang-format configuration
  * Add test for kcmutils_generate_module_data macro
  * Fix wrong margins on QML-based KCMs (kde#431855)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1617624000">- Update to 5.81.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.81.0
- Changes since 5.80.0:
  * Add loaded signal to KCModuleData to handle delayed loading</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1619870400">- Update to 5.82.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.82.0
- Changes since 5.81.0:
  * [KCModuleProxy] Refactor loadModule() for simplicity
  * Force autotest as C language
  * Remove unused file
  * Port QDBusConnectionInterface::serviceOwnerChanged to QDBusServiceWatcher
  * Use new connect() signal/slot syntax
  * Remove ComponentsDialog class, not used anywhere
  * Don't forward declaration when we already include file
  * Clean up unused KPackage linking + includes
  * Deprecate unused KSettingsWidgetAdaptor class
  * kcmutils_generate_module_data: Fix moc warning in generated files</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1622894400">- Update to 5.83.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.83.0
- Changes since 5.82.0:
  * Bump required CMake version to 3.16
  * Call ki18n_install() unconditionally</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1625400000">- Update to 5.84.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.84.0
- Changes since 5.83.0:
  * Download missing LicenseRef-KDE-Accepted-LGPL license
  * Fix loading help documentation for KPluginMetaData KCMs
  * Make KPluginMetaData accessible from KCModuleProxy class
  * Allow loading of KCModules using KPluginMetaData
  * WIP: KSettings::Dialog: port away from Dispatcher</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1628251200">- Update to 5.85.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.85.0
- Changes since 5.84.0:
  * Officially specify X-DocPath in the KCModule desktop file definition
  * Deprecate KCModuleProxy::aboutData
  * Add overload to pass in args in KCMultiDialog::addModule
  * Deprecate X-KDE-FactoryName and KCModuleInfo::handle
  * Deprecate KCMultiDialog::configCommitted(QByteArray) signal
  * Deprecate KSettings and KCModuleInfo based methods
  * Fix generation of documentation for deprecated methods
  * help:/ urls are already handled by KUrlHandler from KGuiAddons</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1630929600">- Update to 5.86.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.86.0
- Changes since 5.85.0:
  * We depend against c++-17 so we can use qOverload directly
  * Port away from deprecated KPluginLoader
  * Minor typo and wording fixes for KCModuleInfo API doc</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1631707200">- Drop the unneeded baselibs.conf.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1633262400">- Update to 5.87.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
  * Add Gitlab CI configuration
  * Fix Warning: Property type "Int" is not a known QVariant type
  * Add support for static builds
  * Add compat code for KService based plugin loading
  * Introduce KCModuleProxy::isChanged method
  * Un-overload KCModuleProxy:changed signal</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1636286400">- Update to 5.88.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.88.0
- Changes since 5.87.0:
  * KPluginSelector: Make sure to check if metaData/moduleInfo is valid before accessing it
  * KPluginSelector: Allow KCMs to be loaded using X-KDE-ConfigModule keyword
  * Remove unused internal method in KPluginSelector
  * Deprecate KCModuleInfo in favor of KPluginMetaData API
  * KCMultiDialog: Use deprecation macros to wrap internal KCModuleInfo API usage
  * KCModuleLoader: Deprecate overloads using KCModuleInfo
  * KPluginSelector: Port internally deprecated KCModuleInfo usage
  * KCModuleProxy: Deprecate KService/KCModuleInfo overloads for constructor
  * Add FreeBSD CI</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1636286401">- Strip 'Source' URL for faster submissions</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638619200">- Update to 5.89.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.89.0
- Changes since 5.88.0:
  * Set initial page using initialPage property, rather than pushing
  * Do not reset KPluginModel if there are no plugins
  * Implement KPluginSelector replacement not based around KPluginInfo
  * Do not try to unload static plugins
  * Support static plugins for X-KDE-ConfigModule property</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1641211200">- Update to 5.90.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.90.0
- Changes since 5.89.0:
  * Remove QDesktopWidget include, not used any where
  * Change build system for building against qt6
  * Wrap deprecated KDelarative::ConfigModule::aboutData method call in
    deprecation wrappers
  * Deprecate KPluginSelector class
  * Allow KCMUtils to build without deprecated KCoreAddons methods
  * Update showNavigationButtons to use enum type
  * Fix PluginPage deprecation docs</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1670241600">- Add patch from upstream included in 5.95 to fix a crash due to
  a double delete:
  * 0001-kcmultidialog-Fix-crash-in-clear.patch</changelog>
</package>
<package pkgid="dcf56e0e625ee5080b2c349f7074d3b4ac78dc8bf168eed662ef3bdaabe0377f" name="libKF5NewStuff5" arch="aarch64">
  <version epoch="0" ver="5.90.0" rel="bp154.3.3.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1607169600">- Update to 5.77.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.77.0
- Too many changes since 5.76.0, only listing bugfixes:
  * Reuse QWidgets dialog (kde#416328)
  * Fix entry disappearing too early from updatable page (kde#427801)
  * Remove entry from cache before inserting new entry (kde#424919)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1609934400">- Update to 5.78.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.78.0
- Changes since 5.77.0:
  * Deprecate standardAction and standardActionUpload methods
  * Fix QtQuick model if there is only a payload, but no download links
  * Add trailing comma to enum values
  * Add clang-format target
  * Add a dptr to Cache, and move the throttle timer there to fix crash (kde#429442)
  * Refactor KNS3::Button to use new dialog internally
  * Create wrapper class for QML dialog
  * Fix unit tests for kmoretools
  * Check if version is empty before concatenating version</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1612785600">- Update to 5.79.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.79.0
- Too many changes to list here.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1615118400">- Update to 5.80.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.80.0
- Too many changes since 5.79.0, only listing bugfixes:
  * Fix preview delegate's update badge being cut off (kde#433535)
  * qtquickengine: Do not emit entriesChanged signal when we clear an empty list (kde#431568)
  * qtquickengine: Check if KNSCore::Engine is valid before searching (kde#402432)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1617624000">- Update to 5.81.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.81.0
- Changes since 5.80.0:
  * qtquickengine: Do not forward intermediate states
  * quickengine: Emit entryEvent signal with enum which is exposed to QML
  * Create a NewStuff.Action component, add NewStuff.Settings global
  * Fix minor typos
  * Less risk of infinite spinner on uninstalling KPackage based things (kde#434371)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1619870400">- Update to 5.82.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.82.0
- Changes since 5.81.0:
  * Deprecate quickengine changedEntries &amp; related methods
  * Do not show error when installation is canceled (kde#436355)
  * Port away from QStringRef
  * Fix mem leak in autotests found by asan
  * NewStuff Dialog: Forward entryEvent signal
  * NewStuff Button: Forward entryEvent signal
  * Make QML GHNS dialog a tiny bit wider (kde#435547)
  * ensure .desktop files are executable</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1622894400">- Update to 5.83.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.83.0
- Too many changes to list here.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1625400000">- Update to 5.84.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.84.0
- Too many changes to list here.
- Only install the license files once</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1628251200">- Update to 5.85.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.85.0
- Changes since 5.84.0:
  * It's deprecated in 5.85 not 5.80
  * Rework UploadDialog, add QML version, and a new ProvidersModel
  * Simplify lookup of knsrc files using KFileUtils::findAllUniqueFiles method
  * Forward Attica provider icons to KNSCore::Provider
  * Handle payload-only entries during update operations</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1630929600">- Update to 5.86.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.86.0
- Changes since 5.85.0:
  * replace "MacOSX" with "macOS"
  * Port from KMountPoint to QStorageInfo
  * Set KLocalizedContext for QtQuickDialogWrapper
  * Use QToolButton for reset button as we have the same style</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1631707200">- Drop the unneeded baselibs.conf.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1632830400">- Add fix-crash.patch. This patch fixes a crash in DownloadWidget.
  (kde#443025)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1633089600">- Add upstream patch:
  * 0001-Include-a-user-agent-on-KNS-requests.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1633262400">- Update to 5.87.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.87.0
- Too many changes since 5.86.0, only listing bugfixes:
  * Fix crash in DownloadWidget (kde#443025)
- Drop upstream patches:
  * 0001-Include-a-user-agent-on-KNS-requests.patch
  * fix-crash.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1636286400">- Update to 5.88.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.88.0
- Changes since 5.87.0:
  * Port to enum values for KAuthorized::authorizeAction
  * Make sure that we query KService with lowercase desktop names since it
    seems that KService stores everything lowercase. (kde#417575)
  * Add FreeBSD CI</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1636286401">- Strip 'Source' URL for faster submissions</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638619200">- Update to 5.89.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.89.0
- Changes since 5.88.0:
  * Improve presentation of multi-file download sheet
  * Use RTL half-star rating icon when in RTL mode</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1641211200">- Update to 5.90.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.90.0
- Changes since 5.89.0:
  * Drop lib prefix when building for Windows (kde#446950)
  * Remove defunct manual khotnewstuff_upload test
  * Compile fixes for Qt 6
  * Fix i18n* functions for knewstuff-dialog not existing
  * Port all KF deprecations until 5.89
  * Unnest private classes, use std::unique_ptr to manage lifetime
  * Generate own export header for KNSWidgets module
  * Fix include install directory
  * Fix library name
  * Move KNS3::Action class to new KNSWidgets submodule
  * New class: KNS3::Action</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1645272000">- Add patches to reduce requests to download.kde.org (boo#1196199):
  * 0001-Add-http2-to-KNewStuff-requests.patch
  * 0002-Engine-Ensure-we-are-not-using-the-wrong-ProvidersUr.patch
  * 0003-Add-conditional-cache-preference-to-http-requests.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1653912000">- Add patch to fix content downloading (boo#1200014)
  * 0001-Do-not-set-user-visible-name-as-additional-agent-inf.patch</changelog>
</package>
<package pkgid="3cc2472632d765ea1f9ab703e24f3c78ebaca1d9ade8944ef4ade126b93727da" name="libKF5NewStuff5" arch="ppc64le">
  <version epoch="0" ver="5.90.0" rel="bp154.3.3.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1607169600">- Update to 5.77.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.77.0
- Too many changes since 5.76.0, only listing bugfixes:
  * Reuse QWidgets dialog (kde#416328)
  * Fix entry disappearing too early from updatable page (kde#427801)
  * Remove entry from cache before inserting new entry (kde#424919)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1609934400">- Update to 5.78.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.78.0
- Changes since 5.77.0:
  * Deprecate standardAction and standardActionUpload methods
  * Fix QtQuick model if there is only a payload, but no download links
  * Add trailing comma to enum values
  * Add clang-format target
  * Add a dptr to Cache, and move the throttle timer there to fix crash (kde#429442)
  * Refactor KNS3::Button to use new dialog internally
  * Create wrapper class for QML dialog
  * Fix unit tests for kmoretools
  * Check if version is empty before concatenating version</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1612785600">- Update to 5.79.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.79.0
- Too many changes to list here.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1615118400">- Update to 5.80.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.80.0
- Too many changes since 5.79.0, only listing bugfixes:
  * Fix preview delegate's update badge being cut off (kde#433535)
  * qtquickengine: Do not emit entriesChanged signal when we clear an empty list (kde#431568)
  * qtquickengine: Check if KNSCore::Engine is valid before searching (kde#402432)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1617624000">- Update to 5.81.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.81.0
- Changes since 5.80.0:
  * qtquickengine: Do not forward intermediate states
  * quickengine: Emit entryEvent signal with enum which is exposed to QML
  * Create a NewStuff.Action component, add NewStuff.Settings global
  * Fix minor typos
  * Less risk of infinite spinner on uninstalling KPackage based things (kde#434371)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1619870400">- Update to 5.82.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.82.0
- Changes since 5.81.0:
  * Deprecate quickengine changedEntries &amp; related methods
  * Do not show error when installation is canceled (kde#436355)
  * Port away from QStringRef
  * Fix mem leak in autotests found by asan
  * NewStuff Dialog: Forward entryEvent signal
  * NewStuff Button: Forward entryEvent signal
  * Make QML GHNS dialog a tiny bit wider (kde#435547)
  * ensure .desktop files are executable</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1622894400">- Update to 5.83.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.83.0
- Too many changes to list here.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1625400000">- Update to 5.84.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.84.0
- Too many changes to list here.
- Only install the license files once</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1628251200">- Update to 5.85.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.85.0
- Changes since 5.84.0:
  * It's deprecated in 5.85 not 5.80
  * Rework UploadDialog, add QML version, and a new ProvidersModel
  * Simplify lookup of knsrc files using KFileUtils::findAllUniqueFiles method
  * Forward Attica provider icons to KNSCore::Provider
  * Handle payload-only entries during update operations</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1630929600">- Update to 5.86.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.86.0
- Changes since 5.85.0:
  * replace "MacOSX" with "macOS"
  * Port from KMountPoint to QStorageInfo
  * Set KLocalizedContext for QtQuickDialogWrapper
  * Use QToolButton for reset button as we have the same style</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1631707200">- Drop the unneeded baselibs.conf.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1632830400">- Add fix-crash.patch. This patch fixes a crash in DownloadWidget.
  (kde#443025)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1633089600">- Add upstream patch:
  * 0001-Include-a-user-agent-on-KNS-requests.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1633262400">- Update to 5.87.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.87.0
- Too many changes since 5.86.0, only listing bugfixes:
  * Fix crash in DownloadWidget (kde#443025)
- Drop upstream patches:
  * 0001-Include-a-user-agent-on-KNS-requests.patch
  * fix-crash.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1636286400">- Update to 5.88.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.88.0
- Changes since 5.87.0:
  * Port to enum values for KAuthorized::authorizeAction
  * Make sure that we query KService with lowercase desktop names since it
    seems that KService stores everything lowercase. (kde#417575)
  * Add FreeBSD CI</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1636286401">- Strip 'Source' URL for faster submissions</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638619200">- Update to 5.89.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.89.0
- Changes since 5.88.0:
  * Improve presentation of multi-file download sheet
  * Use RTL half-star rating icon when in RTL mode</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1641211200">- Update to 5.90.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.90.0
- Changes since 5.89.0:
  * Drop lib prefix when building for Windows (kde#446950)
  * Remove defunct manual khotnewstuff_upload test
  * Compile fixes for Qt 6
  * Fix i18n* functions for knewstuff-dialog not existing
  * Port all KF deprecations until 5.89
  * Unnest private classes, use std::unique_ptr to manage lifetime
  * Generate own export header for KNSWidgets module
  * Fix include install directory
  * Fix library name
  * Move KNS3::Action class to new KNSWidgets submodule
  * New class: KNS3::Action</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1645272000">- Add patches to reduce requests to download.kde.org (boo#1196199):
  * 0001-Add-http2-to-KNewStuff-requests.patch
  * 0002-Engine-Ensure-we-are-not-using-the-wrong-ProvidersUr.patch
  * 0003-Add-conditional-cache-preference-to-http-requests.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1653912000">- Add patch to fix content downloading (boo#1200014)
  * 0001-Do-not-set-user-visible-name-as-additional-agent-inf.patch</changelog>
</package>
<package pkgid="183fd166b2309dbf78762fed2f82f124009f8ecf7c3d79c67993627ff3bfebd2" name="libKF5NewStuff5" arch="s390x">
  <version epoch="0" ver="5.90.0" rel="bp154.3.3.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1607169600">- Update to 5.77.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.77.0
- Too many changes since 5.76.0, only listing bugfixes:
  * Reuse QWidgets dialog (kde#416328)
  * Fix entry disappearing too early from updatable page (kde#427801)
  * Remove entry from cache before inserting new entry (kde#424919)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1609934400">- Update to 5.78.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.78.0
- Changes since 5.77.0:
  * Deprecate standardAction and standardActionUpload methods
  * Fix QtQuick model if there is only a payload, but no download links
  * Add trailing comma to enum values
  * Add clang-format target
  * Add a dptr to Cache, and move the throttle timer there to fix crash (kde#429442)
  * Refactor KNS3::Button to use new dialog internally
  * Create wrapper class for QML dialog
  * Fix unit tests for kmoretools
  * Check if version is empty before concatenating version</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1612785600">- Update to 5.79.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.79.0
- Too many changes to list here.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1615118400">- Update to 5.80.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.80.0
- Too many changes since 5.79.0, only listing bugfixes:
  * Fix preview delegate's update badge being cut off (kde#433535)
  * qtquickengine: Do not emit entriesChanged signal when we clear an empty list (kde#431568)
  * qtquickengine: Check if KNSCore::Engine is valid before searching (kde#402432)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1617624000">- Update to 5.81.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.81.0
- Changes since 5.80.0:
  * qtquickengine: Do not forward intermediate states
  * quickengine: Emit entryEvent signal with enum which is exposed to QML
  * Create a NewStuff.Action component, add NewStuff.Settings global
  * Fix minor typos
  * Less risk of infinite spinner on uninstalling KPackage based things (kde#434371)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1619870400">- Update to 5.82.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.82.0
- Changes since 5.81.0:
  * Deprecate quickengine changedEntries &amp; related methods
  * Do not show error when installation is canceled (kde#436355)
  * Port away from QStringRef
  * Fix mem leak in autotests found by asan
  * NewStuff Dialog: Forward entryEvent signal
  * NewStuff Button: Forward entryEvent signal
  * Make QML GHNS dialog a tiny bit wider (kde#435547)
  * ensure .desktop files are executable</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1622894400">- Update to 5.83.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.83.0
- Too many changes to list here.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1625400000">- Update to 5.84.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.84.0
- Too many changes to list here.
- Only install the license files once</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1628251200">- Update to 5.85.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.85.0
- Changes since 5.84.0:
  * It's deprecated in 5.85 not 5.80
  * Rework UploadDialog, add QML version, and a new ProvidersModel
  * Simplify lookup of knsrc files using KFileUtils::findAllUniqueFiles method
  * Forward Attica provider icons to KNSCore::Provider
  * Handle payload-only entries during update operations</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1630929600">- Update to 5.86.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.86.0
- Changes since 5.85.0:
  * replace "MacOSX" with "macOS"
  * Port from KMountPoint to QStorageInfo
  * Set KLocalizedContext for QtQuickDialogWrapper
  * Use QToolButton for reset button as we have the same style</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1631707200">- Drop the unneeded baselibs.conf.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1632830400">- Add fix-crash.patch. This patch fixes a crash in DownloadWidget.
  (kde#443025)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1633089600">- Add upstream patch:
  * 0001-Include-a-user-agent-on-KNS-requests.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1633262400">- Update to 5.87.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.87.0
- Too many changes since 5.86.0, only listing bugfixes:
  * Fix crash in DownloadWidget (kde#443025)
- Drop upstream patches:
  * 0001-Include-a-user-agent-on-KNS-requests.patch
  * fix-crash.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1636286400">- Update to 5.88.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.88.0
- Changes since 5.87.0:
  * Port to enum values for KAuthorized::authorizeAction
  * Make sure that we query KService with lowercase desktop names since it
    seems that KService stores everything lowercase. (kde#417575)
  * Add FreeBSD CI</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1636286401">- Strip 'Source' URL for faster submissions</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638619200">- Update to 5.89.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.89.0
- Changes since 5.88.0:
  * Improve presentation of multi-file download sheet
  * Use RTL half-star rating icon when in RTL mode</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1641211200">- Update to 5.90.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.90.0
- Changes since 5.89.0:
  * Drop lib prefix when building for Windows (kde#446950)
  * Remove defunct manual khotnewstuff_upload test
  * Compile fixes for Qt 6
  * Fix i18n* functions for knewstuff-dialog not existing
  * Port all KF deprecations until 5.89
  * Unnest private classes, use std::unique_ptr to manage lifetime
  * Generate own export header for KNSWidgets module
  * Fix include install directory
  * Fix library name
  * Move KNS3::Action class to new KNSWidgets submodule
  * New class: KNS3::Action</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1645272000">- Add patches to reduce requests to download.kde.org (boo#1196199):
  * 0001-Add-http2-to-KNewStuff-requests.patch
  * 0002-Engine-Ensure-we-are-not-using-the-wrong-ProvidersUr.patch
  * 0003-Add-conditional-cache-preference-to-http-requests.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1653912000">- Add patch to fix content downloading (boo#1200014)
  * 0001-Do-not-set-user-visible-name-as-additional-agent-inf.patch</changelog>
</package>
<package pkgid="27ddd298198ba4a6898751dbfd00c080bae145640cbdec5b5c4eb4b15aed5304" name="libKF5NewStuff5" arch="x86_64">
  <version epoch="0" ver="5.90.0" rel="bp154.3.3.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1607169600">- Update to 5.77.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.77.0
- Too many changes since 5.76.0, only listing bugfixes:
  * Reuse QWidgets dialog (kde#416328)
  * Fix entry disappearing too early from updatable page (kde#427801)
  * Remove entry from cache before inserting new entry (kde#424919)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1609934400">- Update to 5.78.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.78.0
- Changes since 5.77.0:
  * Deprecate standardAction and standardActionUpload methods
  * Fix QtQuick model if there is only a payload, but no download links
  * Add trailing comma to enum values
  * Add clang-format target
  * Add a dptr to Cache, and move the throttle timer there to fix crash (kde#429442)
  * Refactor KNS3::Button to use new dialog internally
  * Create wrapper class for QML dialog
  * Fix unit tests for kmoretools
  * Check if version is empty before concatenating version</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1612785600">- Update to 5.79.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.79.0
- Too many changes to list here.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1615118400">- Update to 5.80.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.80.0
- Too many changes since 5.79.0, only listing bugfixes:
  * Fix preview delegate's update badge being cut off (kde#433535)
  * qtquickengine: Do not emit entriesChanged signal when we clear an empty list (kde#431568)
  * qtquickengine: Check if KNSCore::Engine is valid before searching (kde#402432)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1617624000">- Update to 5.81.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.81.0
- Changes since 5.80.0:
  * qtquickengine: Do not forward intermediate states
  * quickengine: Emit entryEvent signal with enum which is exposed to QML
  * Create a NewStuff.Action component, add NewStuff.Settings global
  * Fix minor typos
  * Less risk of infinite spinner on uninstalling KPackage based things (kde#434371)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1619870400">- Update to 5.82.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.82.0
- Changes since 5.81.0:
  * Deprecate quickengine changedEntries &amp; related methods
  * Do not show error when installation is canceled (kde#436355)
  * Port away from QStringRef
  * Fix mem leak in autotests found by asan
  * NewStuff Dialog: Forward entryEvent signal
  * NewStuff Button: Forward entryEvent signal
  * Make QML GHNS dialog a tiny bit wider (kde#435547)
  * ensure .desktop files are executable</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1622894400">- Update to 5.83.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.83.0
- Too many changes to list here.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1625400000">- Update to 5.84.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.84.0
- Too many changes to list here.
- Only install the license files once</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1628251200">- Update to 5.85.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.85.0
- Changes since 5.84.0:
  * It's deprecated in 5.85 not 5.80
  * Rework UploadDialog, add QML version, and a new ProvidersModel
  * Simplify lookup of knsrc files using KFileUtils::findAllUniqueFiles method
  * Forward Attica provider icons to KNSCore::Provider
  * Handle payload-only entries during update operations</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1630929600">- Update to 5.86.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.86.0
- Changes since 5.85.0:
  * replace "MacOSX" with "macOS"
  * Port from KMountPoint to QStorageInfo
  * Set KLocalizedContext for QtQuickDialogWrapper
  * Use QToolButton for reset button as we have the same style</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1631707200">- Drop the unneeded baselibs.conf.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1632830400">- Add fix-crash.patch. This patch fixes a crash in DownloadWidget.
  (kde#443025)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1633089600">- Add upstream patch:
  * 0001-Include-a-user-agent-on-KNS-requests.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1633262400">- Update to 5.87.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.87.0
- Too many changes since 5.86.0, only listing bugfixes:
  * Fix crash in DownloadWidget (kde#443025)
- Drop upstream patches:
  * 0001-Include-a-user-agent-on-KNS-requests.patch
  * fix-crash.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1636286400">- Update to 5.88.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.88.0
- Changes since 5.87.0:
  * Port to enum values for KAuthorized::authorizeAction
  * Make sure that we query KService with lowercase desktop names since it
    seems that KService stores everything lowercase. (kde#417575)
  * Add FreeBSD CI</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1636286401">- Strip 'Source' URL for faster submissions</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638619200">- Update to 5.89.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.89.0
- Changes since 5.88.0:
  * Improve presentation of multi-file download sheet
  * Use RTL half-star rating icon when in RTL mode</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1641211200">- Update to 5.90.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.90.0
- Changes since 5.89.0:
  * Drop lib prefix when building for Windows (kde#446950)
  * Remove defunct manual khotnewstuff_upload test
  * Compile fixes for Qt 6
  * Fix i18n* functions for knewstuff-dialog not existing
  * Port all KF deprecations until 5.89
  * Unnest private classes, use std::unique_ptr to manage lifetime
  * Generate own export header for KNSWidgets module
  * Fix include install directory
  * Fix library name
  * Move KNS3::Action class to new KNSWidgets submodule
  * New class: KNS3::Action</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1645272000">- Add patches to reduce requests to download.kde.org (boo#1196199):
  * 0001-Add-http2-to-KNewStuff-requests.patch
  * 0002-Engine-Ensure-we-are-not-using-the-wrong-ProvidersUr.patch
  * 0003-Add-conditional-cache-preference-to-http-requests.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1653912000">- Add patch to fix content downloading (boo#1200014)
  * 0001-Do-not-set-user-visible-name-as-additional-agent-inf.patch</changelog>
</package>
<package pkgid="808d129e2bd673e95ce93e3dc9fc735c806f325d40b6d629247bbd9e54702dcb" name="libKF5NewStuff5-lang" arch="noarch">
  <version epoch="0" ver="5.90.0" rel="bp154.3.3.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1607169600">- Update to 5.77.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.77.0
- Too many changes since 5.76.0, only listing bugfixes:
  * Reuse QWidgets dialog (kde#416328)
  * Fix entry disappearing too early from updatable page (kde#427801)
  * Remove entry from cache before inserting new entry (kde#424919)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1609934400">- Update to 5.78.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.78.0
- Changes since 5.77.0:
  * Deprecate standardAction and standardActionUpload methods
  * Fix QtQuick model if there is only a payload, but no download links
  * Add trailing comma to enum values
  * Add clang-format target
  * Add a dptr to Cache, and move the throttle timer there to fix crash (kde#429442)
  * Refactor KNS3::Button to use new dialog internally
  * Create wrapper class for QML dialog
  * Fix unit tests for kmoretools
  * Check if version is empty before concatenating version</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1612785600">- Update to 5.79.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.79.0
- Too many changes to list here.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1615118400">- Update to 5.80.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.80.0
- Too many changes since 5.79.0, only listing bugfixes:
  * Fix preview delegate's update badge being cut off (kde#433535)
  * qtquickengine: Do not emit entriesChanged signal when we clear an empty list (kde#431568)
  * qtquickengine: Check if KNSCore::Engine is valid before searching (kde#402432)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1617624000">- Update to 5.81.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.81.0
- Changes since 5.80.0:
  * qtquickengine: Do not forward intermediate states
  * quickengine: Emit entryEvent signal with enum which is exposed to QML
  * Create a NewStuff.Action component, add NewStuff.Settings global
  * Fix minor typos
  * Less risk of infinite spinner on uninstalling KPackage based things (kde#434371)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1619870400">- Update to 5.82.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.82.0
- Changes since 5.81.0:
  * Deprecate quickengine changedEntries &amp; related methods
  * Do not show error when installation is canceled (kde#436355)
  * Port away from QStringRef
  * Fix mem leak in autotests found by asan
  * NewStuff Dialog: Forward entryEvent signal
  * NewStuff Button: Forward entryEvent signal
  * Make QML GHNS dialog a tiny bit wider (kde#435547)
  * ensure .desktop files are executable</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1622894400">- Update to 5.83.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.83.0
- Too many changes to list here.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1625400000">- Update to 5.84.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.84.0
- Too many changes to list here.
- Only install the license files once</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1628251200">- Update to 5.85.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.85.0
- Changes since 5.84.0:
  * It's deprecated in 5.85 not 5.80
  * Rework UploadDialog, add QML version, and a new ProvidersModel
  * Simplify lookup of knsrc files using KFileUtils::findAllUniqueFiles method
  * Forward Attica provider icons to KNSCore::Provider
  * Handle payload-only entries during update operations</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1630929600">- Update to 5.86.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.86.0
- Changes since 5.85.0:
  * replace "MacOSX" with "macOS"
  * Port from KMountPoint to QStorageInfo
  * Set KLocalizedContext for QtQuickDialogWrapper
  * Use QToolButton for reset button as we have the same style</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1631707200">- Drop the unneeded baselibs.conf.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1632830400">- Add fix-crash.patch. This patch fixes a crash in DownloadWidget.
  (kde#443025)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1633089600">- Add upstream patch:
  * 0001-Include-a-user-agent-on-KNS-requests.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1633262400">- Update to 5.87.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.87.0
- Too many changes since 5.86.0, only listing bugfixes:
  * Fix crash in DownloadWidget (kde#443025)
- Drop upstream patches:
  * 0001-Include-a-user-agent-on-KNS-requests.patch
  * fix-crash.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1636286400">- Update to 5.88.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.88.0
- Changes since 5.87.0:
  * Port to enum values for KAuthorized::authorizeAction
  * Make sure that we query KService with lowercase desktop names since it
    seems that KService stores everything lowercase. (kde#417575)
  * Add FreeBSD CI</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1636286401">- Strip 'Source' URL for faster submissions</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638619200">- Update to 5.89.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.89.0
- Changes since 5.88.0:
  * Improve presentation of multi-file download sheet
  * Use RTL half-star rating icon when in RTL mode</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1641211200">- Update to 5.90.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.90.0
- Changes since 5.89.0:
  * Drop lib prefix when building for Windows (kde#446950)
  * Remove defunct manual khotnewstuff_upload test
  * Compile fixes for Qt 6
  * Fix i18n* functions for knewstuff-dialog not existing
  * Port all KF deprecations until 5.89
  * Unnest private classes, use std::unique_ptr to manage lifetime
  * Generate own export header for KNSWidgets module
  * Fix include install directory
  * Fix library name
  * Move KNS3::Action class to new KNSWidgets submodule
  * New class: KNS3::Action</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1645272000">- Add patches to reduce requests to download.kde.org (boo#1196199):
  * 0001-Add-http2-to-KNewStuff-requests.patch
  * 0002-Engine-Ensure-we-are-not-using-the-wrong-ProvidersUr.patch
  * 0003-Add-conditional-cache-preference-to-http-requests.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1653912000">- Add patch to fix content downloading (boo#1200014)
  * 0001-Do-not-set-user-visible-name-as-additional-agent-inf.patch</changelog>
</package>
<package pkgid="686bb51880620168b03961aa034c48fece5b503596d67b994abca480ff47b17b" name="libKF5NewStuffCore5" arch="aarch64">
  <version epoch="0" ver="5.90.0" rel="bp154.3.3.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1607169600">- Update to 5.77.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.77.0
- Too many changes since 5.76.0, only listing bugfixes:
  * Reuse QWidgets dialog (kde#416328)
  * Fix entry disappearing too early from updatable page (kde#427801)
  * Remove entry from cache before inserting new entry (kde#424919)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1609934400">- Update to 5.78.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.78.0
- Changes since 5.77.0:
  * Deprecate standardAction and standardActionUpload methods
  * Fix QtQuick model if there is only a payload, but no download links
  * Add trailing comma to enum values
  * Add clang-format target
  * Add a dptr to Cache, and move the throttle timer there to fix crash (kde#429442)
  * Refactor KNS3::Button to use new dialog internally
  * Create wrapper class for QML dialog
  * Fix unit tests for kmoretools
  * Check if version is empty before concatenating version</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1612785600">- Update to 5.79.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.79.0
- Too many changes to list here.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1615118400">- Update to 5.80.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.80.0
- Too many changes since 5.79.0, only listing bugfixes:
  * Fix preview delegate's update badge being cut off (kde#433535)
  * qtquickengine: Do not emit entriesChanged signal when we clear an empty list (kde#431568)
  * qtquickengine: Check if KNSCore::Engine is valid before searching (kde#402432)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1617624000">- Update to 5.81.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.81.0
- Changes since 5.80.0:
  * qtquickengine: Do not forward intermediate states
  * quickengine: Emit entryEvent signal with enum which is exposed to QML
  * Create a NewStuff.Action component, add NewStuff.Settings global
  * Fix minor typos
  * Less risk of infinite spinner on uninstalling KPackage based things (kde#434371)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1619870400">- Update to 5.82.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.82.0
- Changes since 5.81.0:
  * Deprecate quickengine changedEntries &amp; related methods
  * Do not show error when installation is canceled (kde#436355)
  * Port away from QStringRef
  * Fix mem leak in autotests found by asan
  * NewStuff Dialog: Forward entryEvent signal
  * NewStuff Button: Forward entryEvent signal
  * Make QML GHNS dialog a tiny bit wider (kde#435547)
  * ensure .desktop files are executable</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1622894400">- Update to 5.83.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.83.0
- Too many changes to list here.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1625400000">- Update to 5.84.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.84.0
- Too many changes to list here.
- Only install the license files once</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1628251200">- Update to 5.85.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.85.0
- Changes since 5.84.0:
  * It's deprecated in 5.85 not 5.80
  * Rework UploadDialog, add QML version, and a new ProvidersModel
  * Simplify lookup of knsrc files using KFileUtils::findAllUniqueFiles method
  * Forward Attica provider icons to KNSCore::Provider
  * Handle payload-only entries during update operations</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1630929600">- Update to 5.86.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.86.0
- Changes since 5.85.0:
  * replace "MacOSX" with "macOS"
  * Port from KMountPoint to QStorageInfo
  * Set KLocalizedContext for QtQuickDialogWrapper
  * Use QToolButton for reset button as we have the same style</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1631707200">- Drop the unneeded baselibs.conf.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1632830400">- Add fix-crash.patch. This patch fixes a crash in DownloadWidget.
  (kde#443025)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1633089600">- Add upstream patch:
  * 0001-Include-a-user-agent-on-KNS-requests.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1633262400">- Update to 5.87.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.87.0
- Too many changes since 5.86.0, only listing bugfixes:
  * Fix crash in DownloadWidget (kde#443025)
- Drop upstream patches:
  * 0001-Include-a-user-agent-on-KNS-requests.patch
  * fix-crash.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1636286400">- Update to 5.88.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.88.0
- Changes since 5.87.0:
  * Port to enum values for KAuthorized::authorizeAction
  * Make sure that we query KService with lowercase desktop names since it
    seems that KService stores everything lowercase. (kde#417575)
  * Add FreeBSD CI</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1636286401">- Strip 'Source' URL for faster submissions</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638619200">- Update to 5.89.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.89.0
- Changes since 5.88.0:
  * Improve presentation of multi-file download sheet
  * Use RTL half-star rating icon when in RTL mode</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1641211200">- Update to 5.90.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.90.0
- Changes since 5.89.0:
  * Drop lib prefix when building for Windows (kde#446950)
  * Remove defunct manual khotnewstuff_upload test
  * Compile fixes for Qt 6
  * Fix i18n* functions for knewstuff-dialog not existing
  * Port all KF deprecations until 5.89
  * Unnest private classes, use std::unique_ptr to manage lifetime
  * Generate own export header for KNSWidgets module
  * Fix include install directory
  * Fix library name
  * Move KNS3::Action class to new KNSWidgets submodule
  * New class: KNS3::Action</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1645272000">- Add patches to reduce requests to download.kde.org (boo#1196199):
  * 0001-Add-http2-to-KNewStuff-requests.patch
  * 0002-Engine-Ensure-we-are-not-using-the-wrong-ProvidersUr.patch
  * 0003-Add-conditional-cache-preference-to-http-requests.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1653912000">- Add patch to fix content downloading (boo#1200014)
  * 0001-Do-not-set-user-visible-name-as-additional-agent-inf.patch</changelog>
</package>
<package pkgid="dceef3c86a4dd5255ca7fa454f72d2e7b1ebdbf393a35b4157827014fc3ab08b" name="libKF5NewStuffCore5" arch="ppc64le">
  <version epoch="0" ver="5.90.0" rel="bp154.3.3.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1607169600">- Update to 5.77.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.77.0
- Too many changes since 5.76.0, only listing bugfixes:
  * Reuse QWidgets dialog (kde#416328)
  * Fix entry disappearing too early from updatable page (kde#427801)
  * Remove entry from cache before inserting new entry (kde#424919)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1609934400">- Update to 5.78.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.78.0
- Changes since 5.77.0:
  * Deprecate standardAction and standardActionUpload methods
  * Fix QtQuick model if there is only a payload, but no download links
  * Add trailing comma to enum values
  * Add clang-format target
  * Add a dptr to Cache, and move the throttle timer there to fix crash (kde#429442)
  * Refactor KNS3::Button to use new dialog internally
  * Create wrapper class for QML dialog
  * Fix unit tests for kmoretools
  * Check if version is empty before concatenating version</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1612785600">- Update to 5.79.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.79.0
- Too many changes to list here.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1615118400">- Update to 5.80.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.80.0
- Too many changes since 5.79.0, only listing bugfixes:
  * Fix preview delegate's update badge being cut off (kde#433535)
  * qtquickengine: Do not emit entriesChanged signal when we clear an empty list (kde#431568)
  * qtquickengine: Check if KNSCore::Engine is valid before searching (kde#402432)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1617624000">- Update to 5.81.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.81.0
- Changes since 5.80.0:
  * qtquickengine: Do not forward intermediate states
  * quickengine: Emit entryEvent signal with enum which is exposed to QML
  * Create a NewStuff.Action component, add NewStuff.Settings global
  * Fix minor typos
  * Less risk of infinite spinner on uninstalling KPackage based things (kde#434371)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1619870400">- Update to 5.82.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.82.0
- Changes since 5.81.0:
  * Deprecate quickengine changedEntries &amp; related methods
  * Do not show error when installation is canceled (kde#436355)
  * Port away from QStringRef
  * Fix mem leak in autotests found by asan
  * NewStuff Dialog: Forward entryEvent signal
  * NewStuff Button: Forward entryEvent signal
  * Make QML GHNS dialog a tiny bit wider (kde#435547)
  * ensure .desktop files are executable</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1622894400">- Update to 5.83.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.83.0
- Too many changes to list here.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1625400000">- Update to 5.84.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.84.0
- Too many changes to list here.
- Only install the license files once</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1628251200">- Update to 5.85.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.85.0
- Changes since 5.84.0:
  * It's deprecated in 5.85 not 5.80
  * Rework UploadDialog, add QML version, and a new ProvidersModel
  * Simplify lookup of knsrc files using KFileUtils::findAllUniqueFiles method
  * Forward Attica provider icons to KNSCore::Provider
  * Handle payload-only entries during update operations</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1630929600">- Update to 5.86.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.86.0
- Changes since 5.85.0:
  * replace "MacOSX" with "macOS"
  * Port from KMountPoint to QStorageInfo
  * Set KLocalizedContext for QtQuickDialogWrapper
  * Use QToolButton for reset button as we have the same style</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1631707200">- Drop the unneeded baselibs.conf.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1632830400">- Add fix-crash.patch. This patch fixes a crash in DownloadWidget.
  (kde#443025)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1633089600">- Add upstream patch:
  * 0001-Include-a-user-agent-on-KNS-requests.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1633262400">- Update to 5.87.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.87.0
- Too many changes since 5.86.0, only listing bugfixes:
  * Fix crash in DownloadWidget (kde#443025)
- Drop upstream patches:
  * 0001-Include-a-user-agent-on-KNS-requests.patch
  * fix-crash.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1636286400">- Update to 5.88.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.88.0
- Changes since 5.87.0:
  * Port to enum values for KAuthorized::authorizeAction
  * Make sure that we query KService with lowercase desktop names since it
    seems that KService stores everything lowercase. (kde#417575)
  * Add FreeBSD CI</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1636286401">- Strip 'Source' URL for faster submissions</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638619200">- Update to 5.89.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.89.0
- Changes since 5.88.0:
  * Improve presentation of multi-file download sheet
  * Use RTL half-star rating icon when in RTL mode</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1641211200">- Update to 5.90.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.90.0
- Changes since 5.89.0:
  * Drop lib prefix when building for Windows (kde#446950)
  * Remove defunct manual khotnewstuff_upload test
  * Compile fixes for Qt 6
  * Fix i18n* functions for knewstuff-dialog not existing
  * Port all KF deprecations until 5.89
  * Unnest private classes, use std::unique_ptr to manage lifetime
  * Generate own export header for KNSWidgets module
  * Fix include install directory
  * Fix library name
  * Move KNS3::Action class to new KNSWidgets submodule
  * New class: KNS3::Action</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1645272000">- Add patches to reduce requests to download.kde.org (boo#1196199):
  * 0001-Add-http2-to-KNewStuff-requests.patch
  * 0002-Engine-Ensure-we-are-not-using-the-wrong-ProvidersUr.patch
  * 0003-Add-conditional-cache-preference-to-http-requests.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1653912000">- Add patch to fix content downloading (boo#1200014)
  * 0001-Do-not-set-user-visible-name-as-additional-agent-inf.patch</changelog>
</package>
<package pkgid="51783039e681551d3d29508652d62354b4e38684b156a559292f58a20ed60f6e" name="libKF5NewStuffCore5" arch="s390x">
  <version epoch="0" ver="5.90.0" rel="bp154.3.3.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1607169600">- Update to 5.77.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.77.0
- Too many changes since 5.76.0, only listing bugfixes:
  * Reuse QWidgets dialog (kde#416328)
  * Fix entry disappearing too early from updatable page (kde#427801)
  * Remove entry from cache before inserting new entry (kde#424919)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1609934400">- Update to 5.78.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.78.0
- Changes since 5.77.0:
  * Deprecate standardAction and standardActionUpload methods
  * Fix QtQuick model if there is only a payload, but no download links
  * Add trailing comma to enum values
  * Add clang-format target
  * Add a dptr to Cache, and move the throttle timer there to fix crash (kde#429442)
  * Refactor KNS3::Button to use new dialog internally
  * Create wrapper class for QML dialog
  * Fix unit tests for kmoretools
  * Check if version is empty before concatenating version</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1612785600">- Update to 5.79.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.79.0
- Too many changes to list here.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1615118400">- Update to 5.80.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.80.0
- Too many changes since 5.79.0, only listing bugfixes:
  * Fix preview delegate's update badge being cut off (kde#433535)
  * qtquickengine: Do not emit entriesChanged signal when we clear an empty list (kde#431568)
  * qtquickengine: Check if KNSCore::Engine is valid before searching (kde#402432)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1617624000">- Update to 5.81.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.81.0
- Changes since 5.80.0:
  * qtquickengine: Do not forward intermediate states
  * quickengine: Emit entryEvent signal with enum which is exposed to QML
  * Create a NewStuff.Action component, add NewStuff.Settings global
  * Fix minor typos
  * Less risk of infinite spinner on uninstalling KPackage based things (kde#434371)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1619870400">- Update to 5.82.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.82.0
- Changes since 5.81.0:
  * Deprecate quickengine changedEntries &amp; related methods
  * Do not show error when installation is canceled (kde#436355)
  * Port away from QStringRef
  * Fix mem leak in autotests found by asan
  * NewStuff Dialog: Forward entryEvent signal
  * NewStuff Button: Forward entryEvent signal
  * Make QML GHNS dialog a tiny bit wider (kde#435547)
  * ensure .desktop files are executable</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1622894400">- Update to 5.83.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.83.0
- Too many changes to list here.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1625400000">- Update to 5.84.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.84.0
- Too many changes to list here.
- Only install the license files once</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1628251200">- Update to 5.85.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.85.0
- Changes since 5.84.0:
  * It's deprecated in 5.85 not 5.80
  * Rework UploadDialog, add QML version, and a new ProvidersModel
  * Simplify lookup of knsrc files using KFileUtils::findAllUniqueFiles method
  * Forward Attica provider icons to KNSCore::Provider
  * Handle payload-only entries during update operations</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1630929600">- Update to 5.86.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.86.0
- Changes since 5.85.0:
  * replace "MacOSX" with "macOS"
  * Port from KMountPoint to QStorageInfo
  * Set KLocalizedContext for QtQuickDialogWrapper
  * Use QToolButton for reset button as we have the same style</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1631707200">- Drop the unneeded baselibs.conf.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1632830400">- Add fix-crash.patch. This patch fixes a crash in DownloadWidget.
  (kde#443025)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1633089600">- Add upstream patch:
  * 0001-Include-a-user-agent-on-KNS-requests.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1633262400">- Update to 5.87.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.87.0
- Too many changes since 5.86.0, only listing bugfixes:
  * Fix crash in DownloadWidget (kde#443025)
- Drop upstream patches:
  * 0001-Include-a-user-agent-on-KNS-requests.patch
  * fix-crash.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1636286400">- Update to 5.88.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.88.0
- Changes since 5.87.0:
  * Port to enum values for KAuthorized::authorizeAction
  * Make sure that we query KService with lowercase desktop names since it
    seems that KService stores everything lowercase. (kde#417575)
  * Add FreeBSD CI</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1636286401">- Strip 'Source' URL for faster submissions</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638619200">- Update to 5.89.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.89.0
- Changes since 5.88.0:
  * Improve presentation of multi-file download sheet
  * Use RTL half-star rating icon when in RTL mode</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1641211200">- Update to 5.90.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.90.0
- Changes since 5.89.0:
  * Drop lib prefix when building for Windows (kde#446950)
  * Remove defunct manual khotnewstuff_upload test
  * Compile fixes for Qt 6
  * Fix i18n* functions for knewstuff-dialog not existing
  * Port all KF deprecations until 5.89
  * Unnest private classes, use std::unique_ptr to manage lifetime
  * Generate own export header for KNSWidgets module
  * Fix include install directory
  * Fix library name
  * Move KNS3::Action class to new KNSWidgets submodule
  * New class: KNS3::Action</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1645272000">- Add patches to reduce requests to download.kde.org (boo#1196199):
  * 0001-Add-http2-to-KNewStuff-requests.patch
  * 0002-Engine-Ensure-we-are-not-using-the-wrong-ProvidersUr.patch
  * 0003-Add-conditional-cache-preference-to-http-requests.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1653912000">- Add patch to fix content downloading (boo#1200014)
  * 0001-Do-not-set-user-visible-name-as-additional-agent-inf.patch</changelog>
</package>
<package pkgid="e92e0571e20437eb2cce19b12e66cd4ef6f05d6f7490988e7ee6d2e8b3d741c1" name="libKF5NewStuffCore5" arch="x86_64">
  <version epoch="0" ver="5.90.0" rel="bp154.3.3.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1607169600">- Update to 5.77.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.77.0
- Too many changes since 5.76.0, only listing bugfixes:
  * Reuse QWidgets dialog (kde#416328)
  * Fix entry disappearing too early from updatable page (kde#427801)
  * Remove entry from cache before inserting new entry (kde#424919)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1609934400">- Update to 5.78.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.78.0
- Changes since 5.77.0:
  * Deprecate standardAction and standardActionUpload methods
  * Fix QtQuick model if there is only a payload, but no download links
  * Add trailing comma to enum values
  * Add clang-format target
  * Add a dptr to Cache, and move the throttle timer there to fix crash (kde#429442)
  * Refactor KNS3::Button to use new dialog internally
  * Create wrapper class for QML dialog
  * Fix unit tests for kmoretools
  * Check if version is empty before concatenating version</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1612785600">- Update to 5.79.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.79.0
- Too many changes to list here.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1615118400">- Update to 5.80.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.80.0
- Too many changes since 5.79.0, only listing bugfixes:
  * Fix preview delegate's update badge being cut off (kde#433535)
  * qtquickengine: Do not emit entriesChanged signal when we clear an empty list (kde#431568)
  * qtquickengine: Check if KNSCore::Engine is valid before searching (kde#402432)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1617624000">- Update to 5.81.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.81.0
- Changes since 5.80.0:
  * qtquickengine: Do not forward intermediate states
  * quickengine: Emit entryEvent signal with enum which is exposed to QML
  * Create a NewStuff.Action component, add NewStuff.Settings global
  * Fix minor typos
  * Less risk of infinite spinner on uninstalling KPackage based things (kde#434371)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1619870400">- Update to 5.82.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.82.0
- Changes since 5.81.0:
  * Deprecate quickengine changedEntries &amp; related methods
  * Do not show error when installation is canceled (kde#436355)
  * Port away from QStringRef
  * Fix mem leak in autotests found by asan
  * NewStuff Dialog: Forward entryEvent signal
  * NewStuff Button: Forward entryEvent signal
  * Make QML GHNS dialog a tiny bit wider (kde#435547)
  * ensure .desktop files are executable</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1622894400">- Update to 5.83.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.83.0
- Too many changes to list here.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1625400000">- Update to 5.84.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.84.0
- Too many changes to list here.
- Only install the license files once</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1628251200">- Update to 5.85.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.85.0
- Changes since 5.84.0:
  * It's deprecated in 5.85 not 5.80
  * Rework UploadDialog, add QML version, and a new ProvidersModel
  * Simplify lookup of knsrc files using KFileUtils::findAllUniqueFiles method
  * Forward Attica provider icons to KNSCore::Provider
  * Handle payload-only entries during update operations</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1630929600">- Update to 5.86.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.86.0
- Changes since 5.85.0:
  * replace "MacOSX" with "macOS"
  * Port from KMountPoint to QStorageInfo
  * Set KLocalizedContext for QtQuickDialogWrapper
  * Use QToolButton for reset button as we have the same style</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1631707200">- Drop the unneeded baselibs.conf.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1632830400">- Add fix-crash.patch. This patch fixes a crash in DownloadWidget.
  (kde#443025)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1633089600">- Add upstream patch:
  * 0001-Include-a-user-agent-on-KNS-requests.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1633262400">- Update to 5.87.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.87.0
- Too many changes since 5.86.0, only listing bugfixes:
  * Fix crash in DownloadWidget (kde#443025)
- Drop upstream patches:
  * 0001-Include-a-user-agent-on-KNS-requests.patch
  * fix-crash.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1636286400">- Update to 5.88.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.88.0
- Changes since 5.87.0:
  * Port to enum values for KAuthorized::authorizeAction
  * Make sure that we query KService with lowercase desktop names since it
    seems that KService stores everything lowercase. (kde#417575)
  * Add FreeBSD CI</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1636286401">- Strip 'Source' URL for faster submissions</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638619200">- Update to 5.89.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.89.0
- Changes since 5.88.0:
  * Improve presentation of multi-file download sheet
  * Use RTL half-star rating icon when in RTL mode</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1641211200">- Update to 5.90.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.90.0
- Changes since 5.89.0:
  * Drop lib prefix when building for Windows (kde#446950)
  * Remove defunct manual khotnewstuff_upload test
  * Compile fixes for Qt 6
  * Fix i18n* functions for knewstuff-dialog not existing
  * Port all KF deprecations until 5.89
  * Unnest private classes, use std::unique_ptr to manage lifetime
  * Generate own export header for KNSWidgets module
  * Fix include install directory
  * Fix library name
  * Move KNS3::Action class to new KNSWidgets submodule
  * New class: KNS3::Action</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1645272000">- Add patches to reduce requests to download.kde.org (boo#1196199):
  * 0001-Add-http2-to-KNewStuff-requests.patch
  * 0002-Engine-Ensure-we-are-not-using-the-wrong-ProvidersUr.patch
  * 0003-Add-conditional-cache-preference-to-http-requests.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1653912000">- Add patch to fix content downloading (boo#1200014)
  * 0001-Do-not-set-user-visible-name-as-additional-agent-inf.patch</changelog>
</package>
<package pkgid="726ce4a563ac923f4dcee058a8a5f899400d47ed176ec787a8f0344f02d9dd53" name="libKF5NewStuffWidgets5" arch="aarch64">
  <version epoch="0" ver="5.90.0" rel="bp154.3.3.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1607169600">- Update to 5.77.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.77.0
- Too many changes since 5.76.0, only listing bugfixes:
  * Reuse QWidgets dialog (kde#416328)
  * Fix entry disappearing too early from updatable page (kde#427801)
  * Remove entry from cache before inserting new entry (kde#424919)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1609934400">- Update to 5.78.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.78.0
- Changes since 5.77.0:
  * Deprecate standardAction and standardActionUpload methods
  * Fix QtQuick model if there is only a payload, but no download links
  * Add trailing comma to enum values
  * Add clang-format target
  * Add a dptr to Cache, and move the throttle timer there to fix crash (kde#429442)
  * Refactor KNS3::Button to use new dialog internally
  * Create wrapper class for QML dialog
  * Fix unit tests for kmoretools
  * Check if version is empty before concatenating version</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1612785600">- Update to 5.79.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.79.0
- Too many changes to list here.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1615118400">- Update to 5.80.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.80.0
- Too many changes since 5.79.0, only listing bugfixes:
  * Fix preview delegate's update badge being cut off (kde#433535)
  * qtquickengine: Do not emit entriesChanged signal when we clear an empty list (kde#431568)
  * qtquickengine: Check if KNSCore::Engine is valid before searching (kde#402432)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1617624000">- Update to 5.81.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.81.0
- Changes since 5.80.0:
  * qtquickengine: Do not forward intermediate states
  * quickengine: Emit entryEvent signal with enum which is exposed to QML
  * Create a NewStuff.Action component, add NewStuff.Settings global
  * Fix minor typos
  * Less risk of infinite spinner on uninstalling KPackage based things (kde#434371)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1619870400">- Update to 5.82.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.82.0
- Changes since 5.81.0:
  * Deprecate quickengine changedEntries &amp; related methods
  * Do not show error when installation is canceled (kde#436355)
  * Port away from QStringRef
  * Fix mem leak in autotests found by asan
  * NewStuff Dialog: Forward entryEvent signal
  * NewStuff Button: Forward entryEvent signal
  * Make QML GHNS dialog a tiny bit wider (kde#435547)
  * ensure .desktop files are executable</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1622894400">- Update to 5.83.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.83.0
- Too many changes to list here.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1625400000">- Update to 5.84.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.84.0
- Too many changes to list here.
- Only install the license files once</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1628251200">- Update to 5.85.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.85.0
- Changes since 5.84.0:
  * It's deprecated in 5.85 not 5.80
  * Rework UploadDialog, add QML version, and a new ProvidersModel
  * Simplify lookup of knsrc files using KFileUtils::findAllUniqueFiles method
  * Forward Attica provider icons to KNSCore::Provider
  * Handle payload-only entries during update operations</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1630929600">- Update to 5.86.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.86.0
- Changes since 5.85.0:
  * replace "MacOSX" with "macOS"
  * Port from KMountPoint to QStorageInfo
  * Set KLocalizedContext for QtQuickDialogWrapper
  * Use QToolButton for reset button as we have the same style</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1631707200">- Drop the unneeded baselibs.conf.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1632830400">- Add fix-crash.patch. This patch fixes a crash in DownloadWidget.
  (kde#443025)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1633089600">- Add upstream patch:
  * 0001-Include-a-user-agent-on-KNS-requests.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1633262400">- Update to 5.87.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.87.0
- Too many changes since 5.86.0, only listing bugfixes:
  * Fix crash in DownloadWidget (kde#443025)
- Drop upstream patches:
  * 0001-Include-a-user-agent-on-KNS-requests.patch
  * fix-crash.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1636286400">- Update to 5.88.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.88.0
- Changes since 5.87.0:
  * Port to enum values for KAuthorized::authorizeAction
  * Make sure that we query KService with lowercase desktop names since it
    seems that KService stores everything lowercase. (kde#417575)
  * Add FreeBSD CI</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1636286401">- Strip 'Source' URL for faster submissions</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638619200">- Update to 5.89.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.89.0
- Changes since 5.88.0:
  * Improve presentation of multi-file download sheet
  * Use RTL half-star rating icon when in RTL mode</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1641211200">- Update to 5.90.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.90.0
- Changes since 5.89.0:
  * Drop lib prefix when building for Windows (kde#446950)
  * Remove defunct manual khotnewstuff_upload test
  * Compile fixes for Qt 6
  * Fix i18n* functions for knewstuff-dialog not existing
  * Port all KF deprecations until 5.89
  * Unnest private classes, use std::unique_ptr to manage lifetime
  * Generate own export header for KNSWidgets module
  * Fix include install directory
  * Fix library name
  * Move KNS3::Action class to new KNSWidgets submodule
  * New class: KNS3::Action</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1645272000">- Add patches to reduce requests to download.kde.org (boo#1196199):
  * 0001-Add-http2-to-KNewStuff-requests.patch
  * 0002-Engine-Ensure-we-are-not-using-the-wrong-ProvidersUr.patch
  * 0003-Add-conditional-cache-preference-to-http-requests.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1653912000">- Add patch to fix content downloading (boo#1200014)
  * 0001-Do-not-set-user-visible-name-as-additional-agent-inf.patch</changelog>
</package>
<package pkgid="861da644e30911d17a8378fc7718d99bfc28278e84e6518c461b9ebd613ec47c" name="libKF5NewStuffWidgets5" arch="ppc64le">
  <version epoch="0" ver="5.90.0" rel="bp154.3.3.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1607169600">- Update to 5.77.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.77.0
- Too many changes since 5.76.0, only listing bugfixes:
  * Reuse QWidgets dialog (kde#416328)
  * Fix entry disappearing too early from updatable page (kde#427801)
  * Remove entry from cache before inserting new entry (kde#424919)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1609934400">- Update to 5.78.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.78.0
- Changes since 5.77.0:
  * Deprecate standardAction and standardActionUpload methods
  * Fix QtQuick model if there is only a payload, but no download links
  * Add trailing comma to enum values
  * Add clang-format target
  * Add a dptr to Cache, and move the throttle timer there to fix crash (kde#429442)
  * Refactor KNS3::Button to use new dialog internally
  * Create wrapper class for QML dialog
  * Fix unit tests for kmoretools
  * Check if version is empty before concatenating version</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1612785600">- Update to 5.79.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.79.0
- Too many changes to list here.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1615118400">- Update to 5.80.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.80.0
- Too many changes since 5.79.0, only listing bugfixes:
  * Fix preview delegate's update badge being cut off (kde#433535)
  * qtquickengine: Do not emit entriesChanged signal when we clear an empty list (kde#431568)
  * qtquickengine: Check if KNSCore::Engine is valid before searching (kde#402432)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1617624000">- Update to 5.81.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.81.0
- Changes since 5.80.0:
  * qtquickengine: Do not forward intermediate states
  * quickengine: Emit entryEvent signal with enum which is exposed to QML
  * Create a NewStuff.Action component, add NewStuff.Settings global
  * Fix minor typos
  * Less risk of infinite spinner on uninstalling KPackage based things (kde#434371)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1619870400">- Update to 5.82.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.82.0
- Changes since 5.81.0:
  * Deprecate quickengine changedEntries &amp; related methods
  * Do not show error when installation is canceled (kde#436355)
  * Port away from QStringRef
  * Fix mem leak in autotests found by asan
  * NewStuff Dialog: Forward entryEvent signal
  * NewStuff Button: Forward entryEvent signal
  * Make QML GHNS dialog a tiny bit wider (kde#435547)
  * ensure .desktop files are executable</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1622894400">- Update to 5.83.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.83.0
- Too many changes to list here.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1625400000">- Update to 5.84.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.84.0
- Too many changes to list here.
- Only install the license files once</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1628251200">- Update to 5.85.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.85.0
- Changes since 5.84.0:
  * It's deprecated in 5.85 not 5.80
  * Rework UploadDialog, add QML version, and a new ProvidersModel
  * Simplify lookup of knsrc files using KFileUtils::findAllUniqueFiles method
  * Forward Attica provider icons to KNSCore::Provider
  * Handle payload-only entries during update operations</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1630929600">- Update to 5.86.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.86.0
- Changes since 5.85.0:
  * replace "MacOSX" with "macOS"
  * Port from KMountPoint to QStorageInfo
  * Set KLocalizedContext for QtQuickDialogWrapper
  * Use QToolButton for reset button as we have the same style</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1631707200">- Drop the unneeded baselibs.conf.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1632830400">- Add fix-crash.patch. This patch fixes a crash in DownloadWidget.
  (kde#443025)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1633089600">- Add upstream patch:
  * 0001-Include-a-user-agent-on-KNS-requests.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1633262400">- Update to 5.87.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.87.0
- Too many changes since 5.86.0, only listing bugfixes:
  * Fix crash in DownloadWidget (kde#443025)
- Drop upstream patches:
  * 0001-Include-a-user-agent-on-KNS-requests.patch
  * fix-crash.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1636286400">- Update to 5.88.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.88.0
- Changes since 5.87.0:
  * Port to enum values for KAuthorized::authorizeAction
  * Make sure that we query KService with lowercase desktop names since it
    seems that KService stores everything lowercase. (kde#417575)
  * Add FreeBSD CI</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1636286401">- Strip 'Source' URL for faster submissions</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638619200">- Update to 5.89.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.89.0
- Changes since 5.88.0:
  * Improve presentation of multi-file download sheet
  * Use RTL half-star rating icon when in RTL mode</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1641211200">- Update to 5.90.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.90.0
- Changes since 5.89.0:
  * Drop lib prefix when building for Windows (kde#446950)
  * Remove defunct manual khotnewstuff_upload test
  * Compile fixes for Qt 6
  * Fix i18n* functions for knewstuff-dialog not existing
  * Port all KF deprecations until 5.89
  * Unnest private classes, use std::unique_ptr to manage lifetime
  * Generate own export header for KNSWidgets module
  * Fix include install directory
  * Fix library name
  * Move KNS3::Action class to new KNSWidgets submodule
  * New class: KNS3::Action</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1645272000">- Add patches to reduce requests to download.kde.org (boo#1196199):
  * 0001-Add-http2-to-KNewStuff-requests.patch
  * 0002-Engine-Ensure-we-are-not-using-the-wrong-ProvidersUr.patch
  * 0003-Add-conditional-cache-preference-to-http-requests.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1653912000">- Add patch to fix content downloading (boo#1200014)
  * 0001-Do-not-set-user-visible-name-as-additional-agent-inf.patch</changelog>
</package>
<package pkgid="01e45d2f7c69cdc6e966e7d51b8f381c0384d2099478424a6f53ad251016cbb0" name="libKF5NewStuffWidgets5" arch="s390x">
  <version epoch="0" ver="5.90.0" rel="bp154.3.3.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1607169600">- Update to 5.77.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.77.0
- Too many changes since 5.76.0, only listing bugfixes:
  * Reuse QWidgets dialog (kde#416328)
  * Fix entry disappearing too early from updatable page (kde#427801)
  * Remove entry from cache before inserting new entry (kde#424919)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1609934400">- Update to 5.78.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.78.0
- Changes since 5.77.0:
  * Deprecate standardAction and standardActionUpload methods
  * Fix QtQuick model if there is only a payload, but no download links
  * Add trailing comma to enum values
  * Add clang-format target
  * Add a dptr to Cache, and move the throttle timer there to fix crash (kde#429442)
  * Refactor KNS3::Button to use new dialog internally
  * Create wrapper class for QML dialog
  * Fix unit tests for kmoretools
  * Check if version is empty before concatenating version</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1612785600">- Update to 5.79.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.79.0
- Too many changes to list here.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1615118400">- Update to 5.80.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.80.0
- Too many changes since 5.79.0, only listing bugfixes:
  * Fix preview delegate's update badge being cut off (kde#433535)
  * qtquickengine: Do not emit entriesChanged signal when we clear an empty list (kde#431568)
  * qtquickengine: Check if KNSCore::Engine is valid before searching (kde#402432)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1617624000">- Update to 5.81.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.81.0
- Changes since 5.80.0:
  * qtquickengine: Do not forward intermediate states
  * quickengine: Emit entryEvent signal with enum which is exposed to QML
  * Create a NewStuff.Action component, add NewStuff.Settings global
  * Fix minor typos
  * Less risk of infinite spinner on uninstalling KPackage based things (kde#434371)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1619870400">- Update to 5.82.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.82.0
- Changes since 5.81.0:
  * Deprecate quickengine changedEntries &amp; related methods
  * Do not show error when installation is canceled (kde#436355)
  * Port away from QStringRef
  * Fix mem leak in autotests found by asan
  * NewStuff Dialog: Forward entryEvent signal
  * NewStuff Button: Forward entryEvent signal
  * Make QML GHNS dialog a tiny bit wider (kde#435547)
  * ensure .desktop files are executable</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1622894400">- Update to 5.83.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.83.0
- Too many changes to list here.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1625400000">- Update to 5.84.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.84.0
- Too many changes to list here.
- Only install the license files once</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1628251200">- Update to 5.85.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.85.0
- Changes since 5.84.0:
  * It's deprecated in 5.85 not 5.80
  * Rework UploadDialog, add QML version, and a new ProvidersModel
  * Simplify lookup of knsrc files using KFileUtils::findAllUniqueFiles method
  * Forward Attica provider icons to KNSCore::Provider
  * Handle payload-only entries during update operations</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1630929600">- Update to 5.86.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.86.0
- Changes since 5.85.0:
  * replace "MacOSX" with "macOS"
  * Port from KMountPoint to QStorageInfo
  * Set KLocalizedContext for QtQuickDialogWrapper
  * Use QToolButton for reset button as we have the same style</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1631707200">- Drop the unneeded baselibs.conf.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1632830400">- Add fix-crash.patch. This patch fixes a crash in DownloadWidget.
  (kde#443025)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1633089600">- Add upstream patch:
  * 0001-Include-a-user-agent-on-KNS-requests.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1633262400">- Update to 5.87.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.87.0
- Too many changes since 5.86.0, only listing bugfixes:
  * Fix crash in DownloadWidget (kde#443025)
- Drop upstream patches:
  * 0001-Include-a-user-agent-on-KNS-requests.patch
  * fix-crash.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1636286400">- Update to 5.88.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.88.0
- Changes since 5.87.0:
  * Port to enum values for KAuthorized::authorizeAction
  * Make sure that we query KService with lowercase desktop names since it
    seems that KService stores everything lowercase. (kde#417575)
  * Add FreeBSD CI</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1636286401">- Strip 'Source' URL for faster submissions</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638619200">- Update to 5.89.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.89.0
- Changes since 5.88.0:
  * Improve presentation of multi-file download sheet
  * Use RTL half-star rating icon when in RTL mode</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1641211200">- Update to 5.90.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.90.0
- Changes since 5.89.0:
  * Drop lib prefix when building for Windows (kde#446950)
  * Remove defunct manual khotnewstuff_upload test
  * Compile fixes for Qt 6
  * Fix i18n* functions for knewstuff-dialog not existing
  * Port all KF deprecations until 5.89
  * Unnest private classes, use std::unique_ptr to manage lifetime
  * Generate own export header for KNSWidgets module
  * Fix include install directory
  * Fix library name
  * Move KNS3::Action class to new KNSWidgets submodule
  * New class: KNS3::Action</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1645272000">- Add patches to reduce requests to download.kde.org (boo#1196199):
  * 0001-Add-http2-to-KNewStuff-requests.patch
  * 0002-Engine-Ensure-we-are-not-using-the-wrong-ProvidersUr.patch
  * 0003-Add-conditional-cache-preference-to-http-requests.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1653912000">- Add patch to fix content downloading (boo#1200014)
  * 0001-Do-not-set-user-visible-name-as-additional-agent-inf.patch</changelog>
</package>
<package pkgid="c3cbc4460be76061aa59be6b54b2dd83be4859aa24cd1ace39aad95b7dfcfbb2" name="libKF5NewStuffWidgets5" arch="x86_64">
  <version epoch="0" ver="5.90.0" rel="bp154.3.3.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1607169600">- Update to 5.77.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.77.0
- Too many changes since 5.76.0, only listing bugfixes:
  * Reuse QWidgets dialog (kde#416328)
  * Fix entry disappearing too early from updatable page (kde#427801)
  * Remove entry from cache before inserting new entry (kde#424919)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1609934400">- Update to 5.78.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.78.0
- Changes since 5.77.0:
  * Deprecate standardAction and standardActionUpload methods
  * Fix QtQuick model if there is only a payload, but no download links
  * Add trailing comma to enum values
  * Add clang-format target
  * Add a dptr to Cache, and move the throttle timer there to fix crash (kde#429442)
  * Refactor KNS3::Button to use new dialog internally
  * Create wrapper class for QML dialog
  * Fix unit tests for kmoretools
  * Check if version is empty before concatenating version</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1612785600">- Update to 5.79.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.79.0
- Too many changes to list here.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1615118400">- Update to 5.80.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.80.0
- Too many changes since 5.79.0, only listing bugfixes:
  * Fix preview delegate's update badge being cut off (kde#433535)
  * qtquickengine: Do not emit entriesChanged signal when we clear an empty list (kde#431568)
  * qtquickengine: Check if KNSCore::Engine is valid before searching (kde#402432)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1617624000">- Update to 5.81.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.81.0
- Changes since 5.80.0:
  * qtquickengine: Do not forward intermediate states
  * quickengine: Emit entryEvent signal with enum which is exposed to QML
  * Create a NewStuff.Action component, add NewStuff.Settings global
  * Fix minor typos
  * Less risk of infinite spinner on uninstalling KPackage based things (kde#434371)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1619870400">- Update to 5.82.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.82.0
- Changes since 5.81.0:
  * Deprecate quickengine changedEntries &amp; related methods
  * Do not show error when installation is canceled (kde#436355)
  * Port away from QStringRef
  * Fix mem leak in autotests found by asan
  * NewStuff Dialog: Forward entryEvent signal
  * NewStuff Button: Forward entryEvent signal
  * Make QML GHNS dialog a tiny bit wider (kde#435547)
  * ensure .desktop files are executable</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1622894400">- Update to 5.83.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.83.0
- Too many changes to list here.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1625400000">- Update to 5.84.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.84.0
- Too many changes to list here.
- Only install the license files once</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1628251200">- Update to 5.85.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.85.0
- Changes since 5.84.0:
  * It's deprecated in 5.85 not 5.80
  * Rework UploadDialog, add QML version, and a new ProvidersModel
  * Simplify lookup of knsrc files using KFileUtils::findAllUniqueFiles method
  * Forward Attica provider icons to KNSCore::Provider
  * Handle payload-only entries during update operations</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1630929600">- Update to 5.86.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.86.0
- Changes since 5.85.0:
  * replace "MacOSX" with "macOS"
  * Port from KMountPoint to QStorageInfo
  * Set KLocalizedContext for QtQuickDialogWrapper
  * Use QToolButton for reset button as we have the same style</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1631707200">- Drop the unneeded baselibs.conf.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1632830400">- Add fix-crash.patch. This patch fixes a crash in DownloadWidget.
  (kde#443025)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1633089600">- Add upstream patch:
  * 0001-Include-a-user-agent-on-KNS-requests.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1633262400">- Update to 5.87.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.87.0
- Too many changes since 5.86.0, only listing bugfixes:
  * Fix crash in DownloadWidget (kde#443025)
- Drop upstream patches:
  * 0001-Include-a-user-agent-on-KNS-requests.patch
  * fix-crash.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1636286400">- Update to 5.88.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.88.0
- Changes since 5.87.0:
  * Port to enum values for KAuthorized::authorizeAction
  * Make sure that we query KService with lowercase desktop names since it
    seems that KService stores everything lowercase. (kde#417575)
  * Add FreeBSD CI</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1636286401">- Strip 'Source' URL for faster submissions</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638619200">- Update to 5.89.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.89.0
- Changes since 5.88.0:
  * Improve presentation of multi-file download sheet
  * Use RTL half-star rating icon when in RTL mode</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1641211200">- Update to 5.90.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.90.0
- Changes since 5.89.0:
  * Drop lib prefix when building for Windows (kde#446950)
  * Remove defunct manual khotnewstuff_upload test
  * Compile fixes for Qt 6
  * Fix i18n* functions for knewstuff-dialog not existing
  * Port all KF deprecations until 5.89
  * Unnest private classes, use std::unique_ptr to manage lifetime
  * Generate own export header for KNSWidgets module
  * Fix include install directory
  * Fix library name
  * Move KNS3::Action class to new KNSWidgets submodule
  * New class: KNS3::Action</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1645272000">- Add patches to reduce requests to download.kde.org (boo#1196199):
  * 0001-Add-http2-to-KNewStuff-requests.patch
  * 0002-Engine-Ensure-we-are-not-using-the-wrong-ProvidersUr.patch
  * 0003-Add-conditional-cache-preference-to-http-requests.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1653912000">- Add patch to fix content downloading (boo#1200014)
  * 0001-Do-not-set-user-visible-name-as-additional-agent-inf.patch</changelog>
</package>
<package pkgid="44292fd7e12216602aa3754360c9a70887c20ee8507dd5115ea55926767d5513" name="libKSysGuardSystemStats1" arch="aarch64">
  <version epoch="0" ver="5.24.5" rel="bp154.2.3.2"/>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1627387200">- Update to 5.22.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.22.4
- No code changes since 5.22.3</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1630411200">- Update to 5.22.5
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.22.5
- No code changes since 5.22.4</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1631793600">- Update to 5.22.90
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.22.90
- Too many changes to list here</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1633608000">- Update to 5.23.0
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.0
- Changes since 5.22.90:
  * Add Plasma System Monitor to "Tools" menu
- Add new key + signature to plasma.keyring</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1634644800">- Update to 5.23.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.1
- No code changes since 5.23.0</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1635249600">- Update to 5.23.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.2
- No code changes since 5.23.1</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1636459200">- Update to 5.23.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.3
- Changes since 5.23.2:
  * Fix ksgrd_network_helper crash on exit afer a failure (kde#444921)
  * Fix incorrect string termination in ConnectionMapping</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1637582400">- Add libksysguard5-rpmlintrc (boo#1191766)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1638273600">- Update to 5.23.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.4
- Changes since 5.23.3:
  * Don't update SensorsFeatureSensor if it is not subscribed</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1641297600">- Update to 5.23.5
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.5
- Changes since 5.23.4:
  * Handle process parent changes in ProcessDataModel (kde#446534)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1642075200">- Update to 5.23.90
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.90
- Changes since 5.23.5:
  * ConfigAppearance: Set Layout.preferredWidth in updateRateLimitSpinBox
  * Add support for bits per second (kde#418968)
  * Fix compile error against qt6
  * Use Q_EMIT here
  * Fix typos in l10n string comments
  * Port some Q_FOREACH
  * Handle process parent changes in ProcessDataModel (kde#446534)
  * piechart: Fix punctuation of labels in config
  * ProcessCore: Check the actual previous values when updating IO rates (kde#444127)
  * ProcessCore: Ignore elapsedTime &lt; 0 when updating process usage
  * Fix various typos
  * Don't update SensorsFeatureSensor if it is not subscribed
  * Fix accounting of children in Processes
  * New and improved tests
  * Correct behavior of ProcessSensor::cgroupData
  * Remove Accumulator::stop and Capture::stop
  * Fix ksgrd_network_helper crash on exit afer a failure (kde#444921)
  * Fix ksgrd_network_helper crash on readlinkat failure
  * Update SensorUnitModel.cpp to compile with clang+libcxx
  * Fix incorrect string termination in ConnectionMapping
  * We depend against kf5.86
  * Add FreeBSD CI
  * Add Linux CI
  * Add .kde-ci.yml
  * Add Plasma System Monitor to "Tools" menu</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1644062400">- Update to 5.24.0
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.0
- Changes since 5.23.90:
  * Allow specifying initial value for SysctlSensor
  * BarChart: Make spacing proportional to total width and number of bars (kde#444585)
  * Set an initial value of 0 for SensorsFeatureSensor
  * Allow providing an initial value for AggregateSensor and SysFsSensor
  * Check initial value is valid before resetting in SensorProperty::unsubscribe
  * Support changing sensor label names for the Grid face (kde#448980)
  * Only rate-limit sensors if we already have a valid value (kde#446372)
  * faces/facegrid: Filter out some display styles from the config (kde#447847)
  * Fix compilation on Plasma/5.24 branch
  * faces/textonly: Set grouped header to fill width so it elides properly (kde#440592)
  * Port SensorFaceController to support JSON plugin metadata
  * Fix build with GCC 12, missing include</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1644926400">- Update to 5.24.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.1
- Changes since 5.24.0:
  * Fix showing icons in KSysguard</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1645531200">- Update to 5.24.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.2
- No code changes since 5.24.1</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1646654400">- Replace %_libdir/libexec with %_libexecdir (boo#1174075)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1646740800">- Update to 5.24.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.3
- Changes since 5.24.2:
  * Fixed computational bug for bar chart spacing (kde#449868)
- Restore compatibility with older kf5-filesystem</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1648555200">- Force PIE when building with gcc-10 (boo#1195628, boo#1197641)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1648555201">- Update to 5.24.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.4
- No code changes since 5.24.3</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1651579200">- Update to 5.24.5
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.5
- No code changes since 5.24.4</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1653998400">- Recommend the plugins package (boo#1199851)</changelog>
</package>
<package pkgid="6f0a29228800c2d9357a49c229e09e5ecb25fbadd301164429a430cd3b6d4c45" name="libKSysGuardSystemStats1" arch="ppc64le">
  <version epoch="0" ver="5.24.5" rel="bp154.2.3.2"/>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1627387200">- Update to 5.22.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.22.4
- No code changes since 5.22.3</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1630411200">- Update to 5.22.5
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.22.5
- No code changes since 5.22.4</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1631793600">- Update to 5.22.90
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.22.90
- Too many changes to list here</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1633608000">- Update to 5.23.0
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.0
- Changes since 5.22.90:
  * Add Plasma System Monitor to "Tools" menu
- Add new key + signature to plasma.keyring</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1634644800">- Update to 5.23.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.1
- No code changes since 5.23.0</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1635249600">- Update to 5.23.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.2
- No code changes since 5.23.1</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1636459200">- Update to 5.23.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.3
- Changes since 5.23.2:
  * Fix ksgrd_network_helper crash on exit afer a failure (kde#444921)
  * Fix incorrect string termination in ConnectionMapping</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1637582400">- Add libksysguard5-rpmlintrc (boo#1191766)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1638273600">- Update to 5.23.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.4
- Changes since 5.23.3:
  * Don't update SensorsFeatureSensor if it is not subscribed</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1641297600">- Update to 5.23.5
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.5
- Changes since 5.23.4:
  * Handle process parent changes in ProcessDataModel (kde#446534)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1642075200">- Update to 5.23.90
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.90
- Changes since 5.23.5:
  * ConfigAppearance: Set Layout.preferredWidth in updateRateLimitSpinBox
  * Add support for bits per second (kde#418968)
  * Fix compile error against qt6
  * Use Q_EMIT here
  * Fix typos in l10n string comments
  * Port some Q_FOREACH
  * Handle process parent changes in ProcessDataModel (kde#446534)
  * piechart: Fix punctuation of labels in config
  * ProcessCore: Check the actual previous values when updating IO rates (kde#444127)
  * ProcessCore: Ignore elapsedTime &lt; 0 when updating process usage
  * Fix various typos
  * Don't update SensorsFeatureSensor if it is not subscribed
  * Fix accounting of children in Processes
  * New and improved tests
  * Correct behavior of ProcessSensor::cgroupData
  * Remove Accumulator::stop and Capture::stop
  * Fix ksgrd_network_helper crash on exit afer a failure (kde#444921)
  * Fix ksgrd_network_helper crash on readlinkat failure
  * Update SensorUnitModel.cpp to compile with clang+libcxx
  * Fix incorrect string termination in ConnectionMapping
  * We depend against kf5.86
  * Add FreeBSD CI
  * Add Linux CI
  * Add .kde-ci.yml
  * Add Plasma System Monitor to "Tools" menu</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1644062400">- Update to 5.24.0
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.0
- Changes since 5.23.90:
  * Allow specifying initial value for SysctlSensor
  * BarChart: Make spacing proportional to total width and number of bars (kde#444585)
  * Set an initial value of 0 for SensorsFeatureSensor
  * Allow providing an initial value for AggregateSensor and SysFsSensor
  * Check initial value is valid before resetting in SensorProperty::unsubscribe
  * Support changing sensor label names for the Grid face (kde#448980)
  * Only rate-limit sensors if we already have a valid value (kde#446372)
  * faces/facegrid: Filter out some display styles from the config (kde#447847)
  * Fix compilation on Plasma/5.24 branch
  * faces/textonly: Set grouped header to fill width so it elides properly (kde#440592)
  * Port SensorFaceController to support JSON plugin metadata
  * Fix build with GCC 12, missing include</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1644926400">- Update to 5.24.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.1
- Changes since 5.24.0:
  * Fix showing icons in KSysguard</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1645531200">- Update to 5.24.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.2
- No code changes since 5.24.1</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1646654400">- Replace %_libdir/libexec with %_libexecdir (boo#1174075)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1646740800">- Update to 5.24.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.3
- Changes since 5.24.2:
  * Fixed computational bug for bar chart spacing (kde#449868)
- Restore compatibility with older kf5-filesystem</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1648555200">- Force PIE when building with gcc-10 (boo#1195628, boo#1197641)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1648555201">- Update to 5.24.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.4
- No code changes since 5.24.3</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1651579200">- Update to 5.24.5
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.5
- No code changes since 5.24.4</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1653998400">- Recommend the plugins package (boo#1199851)</changelog>
</package>
<package pkgid="329532a6b02d6b46df3f3209a34ae547d078a74b08f2c5e6c278ded3c531b908" name="libKSysGuardSystemStats1" arch="x86_64">
  <version epoch="0" ver="5.24.5" rel="bp154.2.3.2"/>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1627387200">- Update to 5.22.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.22.4
- No code changes since 5.22.3</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1630411200">- Update to 5.22.5
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.22.5
- No code changes since 5.22.4</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1631793600">- Update to 5.22.90
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.22.90
- Too many changes to list here</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1633608000">- Update to 5.23.0
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.0
- Changes since 5.22.90:
  * Add Plasma System Monitor to "Tools" menu
- Add new key + signature to plasma.keyring</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1634644800">- Update to 5.23.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.1
- No code changes since 5.23.0</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1635249600">- Update to 5.23.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.2
- No code changes since 5.23.1</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1636459200">- Update to 5.23.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.3
- Changes since 5.23.2:
  * Fix ksgrd_network_helper crash on exit afer a failure (kde#444921)
  * Fix incorrect string termination in ConnectionMapping</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1637582400">- Add libksysguard5-rpmlintrc (boo#1191766)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1638273600">- Update to 5.23.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.4
- Changes since 5.23.3:
  * Don't update SensorsFeatureSensor if it is not subscribed</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1641297600">- Update to 5.23.5
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.5
- Changes since 5.23.4:
  * Handle process parent changes in ProcessDataModel (kde#446534)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1642075200">- Update to 5.23.90
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.90
- Changes since 5.23.5:
  * ConfigAppearance: Set Layout.preferredWidth in updateRateLimitSpinBox
  * Add support for bits per second (kde#418968)
  * Fix compile error against qt6
  * Use Q_EMIT here
  * Fix typos in l10n string comments
  * Port some Q_FOREACH
  * Handle process parent changes in ProcessDataModel (kde#446534)
  * piechart: Fix punctuation of labels in config
  * ProcessCore: Check the actual previous values when updating IO rates (kde#444127)
  * ProcessCore: Ignore elapsedTime &lt; 0 when updating process usage
  * Fix various typos
  * Don't update SensorsFeatureSensor if it is not subscribed
  * Fix accounting of children in Processes
  * New and improved tests
  * Correct behavior of ProcessSensor::cgroupData
  * Remove Accumulator::stop and Capture::stop
  * Fix ksgrd_network_helper crash on exit afer a failure (kde#444921)
  * Fix ksgrd_network_helper crash on readlinkat failure
  * Update SensorUnitModel.cpp to compile with clang+libcxx
  * Fix incorrect string termination in ConnectionMapping
  * We depend against kf5.86
  * Add FreeBSD CI
  * Add Linux CI
  * Add .kde-ci.yml
  * Add Plasma System Monitor to "Tools" menu</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1644062400">- Update to 5.24.0
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.0
- Changes since 5.23.90:
  * Allow specifying initial value for SysctlSensor
  * BarChart: Make spacing proportional to total width and number of bars (kde#444585)
  * Set an initial value of 0 for SensorsFeatureSensor
  * Allow providing an initial value for AggregateSensor and SysFsSensor
  * Check initial value is valid before resetting in SensorProperty::unsubscribe
  * Support changing sensor label names for the Grid face (kde#448980)
  * Only rate-limit sensors if we already have a valid value (kde#446372)
  * faces/facegrid: Filter out some display styles from the config (kde#447847)
  * Fix compilation on Plasma/5.24 branch
  * faces/textonly: Set grouped header to fill width so it elides properly (kde#440592)
  * Port SensorFaceController to support JSON plugin metadata
  * Fix build with GCC 12, missing include</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1644926400">- Update to 5.24.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.1
- Changes since 5.24.0:
  * Fix showing icons in KSysguard</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1645531200">- Update to 5.24.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.2
- No code changes since 5.24.1</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1646654400">- Replace %_libdir/libexec with %_libexecdir (boo#1174075)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1646740800">- Update to 5.24.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.3
- Changes since 5.24.2:
  * Fixed computational bug for bar chart spacing (kde#449868)
- Restore compatibility with older kf5-filesystem</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1648555200">- Force PIE when building with gcc-10 (boo#1195628, boo#1197641)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1648555201">- Update to 5.24.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.4
- No code changes since 5.24.3</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1651579200">- Update to 5.24.5
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.5
- No code changes since 5.24.4</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1653998400">- Recommend the plugins package (boo#1199851)</changelog>
</package>
<package pkgid="6b801b073d7d903b5ff920ca1b7618106f15e2fad181a3f88c5e9927a42410eb" name="libQt5Pdf5" arch="aarch64">
  <version epoch="0" ver="5.15.10" rel="bp154.2.3.2"/>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1613563200">- Add patch to fix sandbox with glibc 2.33 on 32bit:
  * sandbox-statx-futex_time64.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1615377600">- Can't use system_vpx on Leap 15.3</changelog>
  <changelog author="christophe@krop.fr" date="1616587200">- Update to version 5.15.3:
  * Fix spelling and coding style
  * Fix new view request handling (QTBUG-87378)
  * Fix getDefaultScreenId on X11
  * Fix flaky tst_QWebEngineView::textSelectionOutOfInputField test
  * Move touch input tests to separate testcase
  * Add touch input tests for scrolling and pinch zooming
  * Fix rare duplicate ids forming in touch point id's mapping
  * Use the module's version number for QtWebEngineProcess
  * Touch handling: provide id mapping without modifying TouchPoint instance
    (QTBUG-88001)
  * Touch handling: fix mapped ids cleanup for TouchCancel event
  * et custom headers from QWebEngineUrlRequestInfo before triggering redirect
    (QTBUG-88861)
  * Forward modifier flags for lock keys (QTBUG-89001)
  * Fix handling of more than one finger for touch event (QTBUG-86389)
  * Stabilize load signals emitting (QTBUG-65223, QTBUG-87089)
  * Fix building against 5.12 on most CIs
  * Update minimum HarfBuzz version to 2.4.0 (QTBUG-88976)
  * Fix building against Qt 5.14
  * Migrate user script IPC to mojo
  * Fix crashes in user resource controller when single process
  * Minor. Fix namespace for user resource controller
  * Minor. RenderThreadObserverQt is really a RenderConfiguration
  * Remove RenderViewObserverHelper from UserResourceController
  * Cache mojo interface bindings to UserResourceControllerRenderFrame
  * Cache mojo interface bindings for WebChannelIPCTransport
  * Migrate render_view_observer_qt to mojo
  * Fix crash on linkedin.com (QTBUG-89740)
  * Suppress error pages also for http errors if they are disabled
  * Fix leak in QQuickWebEngineViewPrivate::contextMenuRequested
  * Register PerformanceNode early enough
  * Quiet log on webrtc usage
  * Remove configure option that doesn't work
  * Remove Java build dependency
  * Fix blank popups in qml (QTBUG-86034)
  * Fix position of popup on qml (QTBUG-86034, QTBUG-89358)
  * Enable hangout services extension (QTBUG-85731)
  * Allow to fallback to default locale for non existent data packs (QTBUG-90490)
  * Support devtools close button
  * Do not extract download file names from certain url schemes (QTBUG-90355)
  * Leave room for the null-termination byte when checking remote drive path
    (QTBUG-90347)
  * Do not set open files limit for linking if not necessary
  * Remove even more remains of non network service code
  * Add back prefers-color-scheme support (QTBUG-89753)
  * Start supporting chrome.resourcesPrivate API (QTBUG-90035)
  * Enable chrome://user-actions WebUI
  * Remove remains of chrome://flash
  * Fix loadFinished signal if page has content but server sends HTTP error
    (QTBUG-90517)
  * Fix devtools page resource loading as raw data instead of html string
  * Remove frame metadata observer (RenderWidgetHostViewQt) on destroy
  * Resolve installed interceptors right before interception point (QTBUG-86286)
  * Update searches faster
  * Remove more leftovers of the old compositor
  * Enable webrtc logging and the corresponding WebUI
  * Support mips64el platform CPU(loongson 3A4000)
  * Add tracing UI resources
  * Fix crash on meet.google.com
  * Fix mad popup qquickwindows on wayland
  * Fix crashes on BrowserContext destruction
  * Fix crash on exit in quicknanobrowser when popup
  * Remove QtPdf dependency on nss at build-time
  * Avoid accessing profileAdapter when profile is shutting down (QTBUG-91187)
  * Do not flush messages form profile destructor
  * Ignore QQuickWebEngineNewViewRequest if it is unhandled
  * Fix ScopedGLContextChecker with QTWEBENGINE_DISABLE_GPU_THREAD=1
  * Don't send duplicate load progress values
  * Fix neon support in libpng
  * Do not call deprecated profile interceptor on ui thread (QTBUG-86267)
  * Add certificate error message for ERR_SSL_OBSOLETE_VERSION
  * Fix assert in WebContentsAdapter::devToolsFrontendDestroyed
  * Avoid to reject a certificate error twice in Quick
  * Fix PDF viewer plugin
  * FIXUP: Fix swap condition in DisplayGLOutputSurface::updatePaintNode
    (QTBUG-86599)
  * Fix favicon engine under device pixel scaling
  * Do not pass a native keycode matching the menu key when it is remapped
    (QTBUG-86672)
  * Optimize WebEngineSettings::testAttribute
  * Warn about QtWebengineProcess launching from network share (QTBUG-84632)
  * Handle non-ascii names for pulseaudio (QTBUG-85363)
  * Do not set audio device for desktop capture if audio loopback is unsupported
  * Fix new view request handling (QTBUG-87378)
  * Fix getDefaultScreenId on X11
  * Touch handling: provide id mapping without modifying TouchPoint instance
    (QTBUG-88001)
  * Set custom headers from QWebEngineUrlRequestInfo before triggering redirect
    (QTBUG-88861)
  * Stabilize load signals emitting (QTBUG-65223)
- CVE fixes backported in chromium updates:
  * CVE-2020-16044: Use after free in WebRTC
  * CVE-2021-21118: Heap buffer overflow in Blink
  * CVE-2021-21119: Use after free in Media
  * CVE-2021-21120: Use after free in WebSQL
  * CVE-2021-21121: Use after free in Omnibox
  * CVE-2021-21122: Use after free in Blink
  * CVE-2021-21123: Insufficient data validation in File System API
  * CVE-2021-21125: Insufficient policy enforcement in File System API
  * CVE-2021-21126: Insufficient policy enforcement in extensions
  * CVE-2021-21127: Insufficient policy enforcement in extensions
  * CVE-2021-21128: Heap buffer overflow in Blink
  * CVE-2021-21129: Insufficient policy enforcement in File System API
  * CVE-2021-21130: Insufficient policy enforcement in File System API
  * CVE-2021-21131: Insufficient policy enforcement in File System API
  * CVE-2021-21132: Inappropriate implementation in DevTools
  * CVE-2021-21135: Inappropriate implementation in Performance API
  * CVE-2021-21137: Inappropriate implementation in DevTools
  * CVE-2021-21140: Uninitialized Use in USB
  * CVE-2021-21141: Insufficient policy enforcement in File System API
  * CVE-2021-21145: Use after free in Fonts
  * CVE-2021-21146: Use after free in Navigation
  * CVE-2021-21147: Inappropriate implementation in Skia
  * CVE-2021-21148: Heap buffer overflow in V8
  * CVE-2021-21149: Stack overflow in Data Transfer
  * CVE-2021-21150: Use after free in Downloads
  * CVE-2021-21152: Heap buffer overflow in Media
  * CVE-2021-21153: Stack overflow in GPU Process
  * CVE-2021-21156: Heap buffer overflow in V8
  * CVE-2021-21157: Use after free in Web Sockets
- Drop obsolete patches:
  * icu-68.patch
  * icu-68-2.patch
- Rebase patches:
  * fix1163766.patch
  * sandbox-statx-futex_time64.patch
  * rtc-dont-use-h264.patch
  * chromium-glibc-2.33.patch
- Add patch to fix crash with certain locales:
  * 0001-Fix-normalization-of-app-locales.patch
- Clean the spec file a bit</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1618315200">- Add back missing part in fix1163766.patch (boo#1184610)</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1618401600">- Update _constraints to avoid OOM</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1618401601">- Add patch to fix build with GCC 11:
  * 0001-Fix-build-with-GCC-11.patch</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1620302400">- Add patch to fix build with ICU 69:
  * 0001-Fix-build-with-system-ICU-69.patch</changelog>
  <changelog author="christophe@krop.fr" date="1624363200">- Update to version 5.15.5:
  * Abort findText also right on explicit navigation request
  * Adapt to new Connections syntax
  * Add devtools eyedropper support
  * Add more tests to tst_loadsignals
  * Add support for Keyboard.getLayoutMap()
  * Add web-ui chrome://net-internals
  * Allow leaving OCSP off
  * Always send phased wheel events beginning with Began
  * Avoid accessing profileAdapter when profile is shutting down
  * Avoid unknownFunc messages in qmltests
  * Blacklist CertificateError::test_error for macOS
  * Blacklist NewViewRequest::test_loadNewViewRequest on macOS
  * Blacklist handleError on macos until we merge the fix
  * Blacklist numberOfStartedAndFinishedSignalsIsSame on b2q CIs
  * Depend on QCoreApplication::startingUp() for checking
    existence of app
  * Do not allow WebBluetooth to continue
  * Do not hide virtual keyboard if the focused node is editable
  * Doc: Add a note about navigation within a page to a fragment
  * Docs: Suggest to use higher DPI for printing
  * Fix FilePickerController's path validation for windows and
    corresponding tests
  * Fix application locales again
  * Fix embedded PDFs when plugins are disabled
  * Fix first party url for cookie filter
  * Fix inconsistent number of load signals and their order
  * Fix normalization of app locales
  * Fix not working certificates on mac &gt; 10.14
  * Fix prl files on ios
  * Fix qmltests::WebEngineViewNavigationHistory auto tests
  * Fix qtpdf static builds on windows
  * Fix static build of qml qtpdf
  * Follow InProcessGpuThread::Init() on thread priority
  * Generate mojo bindings before compiling extension API
    registration
  * Implement PluginServiceFilterQt
  * Load signals test: use focusProxy for link clicking test
  * Make able to override disabled features from command line
  * Notify canGoBack/canGoForward changes based on web actions
  * Only disconnect QWebEnginePage signals that QWebEngineView
    connected
  * Package devtools inspector overlay
  * Remove ResourceTypeSubFrame check after website update
  * Remove obsolete loadSignals test
    secondLoadForError_WhenErrorPageEnabled
  * Remove qquickwebengineprofile test
  * Remove tracking of frame which load error page
  * Remove ui/snapshot overrides for aura
  * Report server directs in navigation type
  * Return to using the default devtools page
  * Set enumaration root directory for File.webkitRelativePath API
  * Set more Display properties
  * Show PDF viewer in a guest view
  * Support devtools close button in QuickNanoBrowser
  * Support zoom-in, zoom-out and cell web cursors on macOS
  * Unblacklist and fix load signals test for file download
  * Update Chromium and adapt PermissionManagerQt
  * Update platform notes
  * View: test signal for deletion of external page set to view
- Drop patches:
  * 0001-Fix-normalization-of-app-locales.patch
  * 0001-Fix-build-with-GCC-11.patch
  * 0001-Fix-build-with-system-ICU-69.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1624536000">- Update the CMake version workaround to get qtbase's real version</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1628078400">- Add patch to fix build with glibc 2.34 (boo#1189095)
  * 0001-Fix-build-with-glibc-2.34.patch</changelog>
  <changelog author="christophe@krop.fr" date="1631188800">- Update to version 5.15.6:
  * Update Chromium:
    + [Backport] CVE-2021-30560: Use after free in Blink XSLT
    + [Backport] CVE-2021-30566: Stack buffer overflow in Printing
    + [Backport] CVE-2021-30585: Use after free in sensor handling
    + Bump V8_PATCH_LEVEL
    + [Backport] Security bug 1228036
    + [Backport] CVE-2021-30604: Use after free in ANGLE
    + [Backport] CVE-2021-30603: Race in WebAudio
    + [Backport] CVE-2021-30602: Use after free in WebRTC
    + [Backport] CVE-2021-30599: Type Confusion in V8
    + [Backport] CVE-2021-30598: Type Confusion in V8
    + [Backport] Security bug 1227933
    + [Backport] Security bug 1205059
    + [Backport] Security bug 1184294
    + [Backport] Security bug 1198385
    + [Backport] CVE-2021-30588: Type Confusion in V8
    + [Backport] CVE-2021-30587: Inappropriate implementation in Compositing on Windows
    + [Backport] CVE-2021-30573: Use after free in GPU
    + [Backport] CVE-2021-30569, security bugs 1198216 and 1204814
    + [Backport] CVE-2021-30568: Heap buffer overflow in WebGL
    + [Backport] CVE-2021-30541: Use after free in V8
    + [Backport] Security bugs 1197786 and 1194330
    + [Backport] Security bug 1194689
    + [Backport] CVE-2021-30563: Type Confusion in V8
    + [Backport] Security bug 1211215
    + [Backport] Security bug 1209558
    + [Backport] CVE-2021-30553: Use after free in Network service
    + [Backport] CVE-2021-30548: Use after free in Loader
    + [Backport] CVE-2021-30547: Out of bounds write in ANGLE
    + [Backport] CVE-2021-30556: Use after free in WebAudio
    + [Backport] CVE-2021-30559: Out of bounds write in ANGLE
    + [Backport] CVE-2021-30533: Insufficient policy enforcement in PopupBlocker
    + [Backport] Security bug 1202534
    + [Backport] CVE-2021-30536: Out of bounds read in V8
    + [Backport] CVE-2021-30522: Use after free in WebAudio
    + [Backport] CVE-2021-30554 Use after free in WebGL
    + [Backport] CVE-2021-30551: Type Confusion in V8
    + [Backport] CVE-2021-30544: Use after free in BFCache
    + [Backport] CVE-2021-30535: Double free in ICU
    + [Backport] CVE-2021-30534: Insufficient policy enforcement in iFrameSandbox
    + [Backport] CVE-2021-30530: Out of bounds memory access in WebAudio
    + [Backport] CVE-2021-30523: Use after free in WebRTC
    + Generate mojo bindings before compiling extension API registration
  * Bump version from 5.15.5 to 5.15.6
  * Always send phased wheel events beginning with Began
- Import patch from the chromium package:
  * 0001-return-ENOSYS-for-clone3.patch
- Add changes from the chromium package to
  0001-Fix-build-with-glibc-2.34.patch</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1632225600">- Add patches from Arch to fix build with HarfBuzz 3.0.0:
  * chromium-harfbuzz-3.0.0.patch
  * skia-harfbuzz-3.0.0.patch
- ... but don't break with &lt; 2.9.0:
  * chromium-older-harfbuzz.patch</changelog>
  <changelog author="christophe@krop.fr" date="1635508800">- Update to version 5.15.7:
  * Update Chromium:
    [Backport] Linux sandbox: update syscalls numbers on 32-bit platforms
    [Backport] sandbox: linux: allow clock_nanosleep &amp; gettime64
    [Backport] Linux sandbox: update syscall numbers for all platforms.
    [Backport] Ease HarfBuzz API change with feature detection
    [Backport] Security bug 1248665
    [Backport] CVE-2021-37975 : Use after free in V8
    [Backport] CVE-2021-37980 : Inappropriate implementation in Sandbox
    [Backport] CVE-2021-37979 : Heap buffer overflow in WebRTC (2/2)
    [Backport] CVE-2021-37979 : Heap buffer overflow in WebRTC (1/2)
    [Backport] CVE-2021-37978 : Heap buffer overflow in Blink
    [Backport] CVE-2021-30616: Use after free in Media.
    [Backport] CVE-2021-37962 : Use after free in Performance Manager (2/2)
    [Backport] CVE-2021-37962 : Use after free in Performance Manager (1/2)
    [Backport] CVE-2021-37973 : Use after free in Portals
    [Backport] CVE-2021-37971 : Incorrect security UI in Web Browser UI.
    [Backport] CVE-2021-37968 : Inappropriate implementation in Background Fetch API
    [Backport] CVE-2021-37967 : Inappropriate implementation in Background Fetch API
    [Backport] Linux sandbox: return ENOSYS for clone3
    [Backport] Linux sandbox: fix fstatat() crash
    [Backport] Reland "Reland "Linux sandbox syscall broker: use struct kernel_stat""
    [Backport] Security bug 1238178 (2/2)
    [Backport] Security bug 1238178 (1/2)
    [Backport] CVE-2021-30633: Use after free in Indexed DB API (2/2)
    [Backport] CVE-2021-30633: Use after free in Indexed DB API (1/2)
    [Backport] CVE-2021-30630: Inappropriate implementation in Blink
    [Backport] CVE-2021-30629: Use after free in Permissions
    [Backport] CVE-2021-30628: Stack buffer overflow in ANGLE
    [Backport] CVE-2021-30627: Type Confusion in Blink layout
    [Backport] CVE-2021-30626: Out of bounds memory access in ANGLE
    [Backport] CVE-2021-30625: Use after free in Selection API
    [Backport] Security bug 1206289
    [Backport] CVE-2021-30613: Use after free in Base internals
    [Backport] Security bug 1227228
    [Backport] CVE-2021-30618: Inappropriate implementation in DevTools
  * Update patch level
  * Blacklist certificate test until certicates have been renewed
  * Block CORS from local URLs when remote access is not enabled
  * Do not wait on weak_pointer for termination errors
  * Support MSVC_VER 16.8
  * Fix wrong save file filter for Markdown Editor example
  * Add Chromium version source documentation
  * Bump version from 5.15.6 to 5.15.7
  * Fix crash when clicking on a link in PDF
- Drop openSUSE patches:
  * fix1163766.patch. Should be addressed with:
    https://github.com/qt/qtwebengine-chromium/commit/652f834de
    https://github.com/qt/qtwebengine-chromium/commit/faae106ed
    https://github.com/qt/qtwebengine-chromium/commit/6b7b3f1bf
  * chromium-glibc-2.33.patch. Should be addressed with the
    [Backport] Linux sandbox: fix fstatat() crash and
    Reland "Reland "Linux sandbox syscall broker: use struct kernel_stat""
    changes.
  * chromium-older-harfbuzz.patch
- Drop upstream changes:
  * 0001-return-ENOSYS-for-clone3.patch
  * chromium-harfbuzz-3.0.0.patch
  * skia-harfbuzz-3.0.0.patch
- Rebase patches:
  * sandbox-statx-futex_time64.patch</changelog>
  <changelog author="christophe@krop.fr" date="1641297600">- Update to version 5.15.8:
  * Update Chromium:
    [Backport] CVE-2021-3517: libxml2: Heap-based buffer overflow
    in xmlEncodeEntitiesInternal() in entities.c
    [Backport] CVE-2021-3541 libxml2: Exponential entity expansion
    attack bypasses all existing protection mechanisms
    [Backport] CVE-2021-37984 : Heap buffer overflow in PDFium
    [Backport] CVE-2021-37987 : Use after free in Network APIs
    [Backport] CVE-2021-37989 : Inappropriate implementation in Blink
    [Backport] CVE-2021-37992 : Out of bounds read in WebAudio
    [Backport] CVE-2021-37993 : Use after free in PDF Accessibility
    [Backport] CVE-2021-37996 : Insufficient validation of untrusted
    input in Downloads
    [Backport] CVE-2021-38001 : Type Confusion in V8
    [Backport] CVE-2021-38003 : Inappropriate implementation in V8
    [Backport] CVE-2021-38005: Use after free in loader (1/3)
    [Backport] CVE-2021-38005: Use after free in loader (2/3)
    [Backport] CVE-2021-38005: Use after free in loader (3/3)
    [Backport] CVE-2021-38007: Type Confusion in V8
    [Backport] CVE-2021-38009: Inappropriate implementation in cache
    [Backport] CVE-2021-38010: Inappropriate implementation in serviceworkers
    [Backport] CVE-2021-38012: Type Confusion in V8
    [Backport] CVE-2021-38015: Inappropriate implementation in input
    [Backport] CVE-2021-38017: Insufficient policy enforcement in iframe
    sandbox
    [Backport] CVE-2021-38018: Inappropriate implementation in navigation
    [Backport] CVE-2021-38019: Insufficient policy enforcement in CORS
    [Backport] CVE-2021-38021: Inappropriate implementation in referrer
    [Backport] CVE-2021-38022: Inappropriate implementation in WebAuthentication
    [Backport] CVE-2021-4057: Use after free in file API
    [Backport] CVE-2021-4058: Heap buffer overflow in ANGLE (1/2)
    [Backport] CVE-2021-4058: Heap buffer overflow in ANGLE (2/2)
    [Backport] CVE-2021-4059: Insufficient data validation in loader
    [Backport] CVE-2021-4062: Heap buffer overflow in BFCache
    [Backport] CVE-2021-4078: Type confusion in V8
    [Backport] CVE-2021-4079: Out of bounds write in WebRTC
    [Backport] CVE-2021-4098: Insufficient data validation in Mojo
    [Backport] CVE-2021-4099: Use after free in Swiftshader
    [Backport] CVE-2021-4101: Heap buffer overflow in Swiftshader.
    [Backport] CVE-2021-4102: Use after free in V8
    [Backport] Dependency for CVE-2021-37989
    [Backport] Dependency for CVE-2021-38009
    [Backport] Security bug 1245870
    [Backport] Security bug 1252858
    [Backport] Security bug 1259899
    Bump V8_PATCH_LEVEL
    Compile with GCC 11 -std=c++20
    Fix stack overflow on gpu channel recreate with an error
    Use wglSetPixelFormat directly only if in software mode
    [Backport] Handle long SIGSTKSZ in glibc &gt; 2.33
    [Backport] abseil-cpp: Fixes build with latest glibc
  * Handle qtpdf compilation with static runtime
  * Add bitcode support for qtpdf on ios
  * Do not access accessibility from qt post routines
  * Blacklist javascriptClipboard test on ubuntu 20.04
  * Re-enable network-service-in-process
  * Bump version from 5.15.7 to 5.15.8
  * Update patch level
  * Fix pinch gesture
  * Fix leak of properties after XkbRF_GetNamesProp
  * Fix leak on getDefaultScreeenId
- Drop patch:
  * 0001-Fix-build-with-glibc-2.34.patch</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1648209600">- Add patch to fix build with GCC 12:
  * 0001-skia-Some-includes-to-fix-build-with-GCC-12.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1649073600">- Add security fixes:
  * CVE-2022-0971-qtwebengine-5.15.patch (CVE-2022-0971, boo#1197163)
  * CVE-2022-1096-qtwebengine-5.15.patch (CVE-2022-1096, boo#1197552)</changelog>
  <changelog author="christophe@krop.fr" date="1649246400">- Update to version 5.15.9:
  * QPdfView: scale page rendering according to devicePixelRatio
  * Update documented Chromium version
  * Use IsSameDocument() rather than IsLoadingToDifferentDocument()
  * Update module-split for installer
  * Fix printing PDF files
  * Do not override signal handlers
  * Avoid using xkbcommon in non-X11 builds
  * Update documentation
  * Update Chromium:
  * Bump V8_PATCH_LEVEL
  * Do not overwrite signal handlers in the browser process.
  * Replace base::ranges::set_union with std::set_union to fix
    MSVC2017 build
  * [Backport] CVE-2022-0100: Heap buffer overflow in Media
    streams API
  * [Backport] CVE-2022-0102: Type Confusion in V8
  * [Backport] CVE-2022-0103: Use after free in SwiftShader
  * [Backport] CVE-2022-0104: Heap buffer overflow in ANGLE
  * [Backport] CVE-2022-0108: Inappropriate implementation
    in Navigation
  * [Backport] CVE-2022-0109: Inappropriate implementation
    in Autofill
  * [Backport] CVE-2022-0111 and CVE-2022-0117
  * [Backport] CVE-2022-0113: Inappropriate implementatio
    n in Blink
  * [Backport] CVE-2022-0116: Inappropriate implementation
    in Compositing
  * [Backport] CVE-2022-0289: Use after free in Safe browsing
  * [Backport] CVE-2022-0291: Inappropriate implementation
    in Storage
  * [Backport] CVE-2022-0293: Use after free in Web packaging
  * [Backport] CVE-2022-0298: Use after free in Scheduling
  * [Backport] CVE-2022-0305: Inappropriate implementation in
    Service Worker API
  * [Backport] CVE-2022-0306: Heap buffer overflow in PDFium
  * [Backport] CVE-2022-0310 and CVE-0311: Heap buffer overflow
    in Task Manager
  * [Backport] CVE-2022-0456: Use after free in Web Search
  * [Backport] CVE-2022-0459: Use after free in Screen Capture
  * [Backport] CVE-2022-0460: Use after free in Window Dialog
  * [Backport] CVE-2022-0461: Policy bypass in COOP
  * [Backport] CVE-2022-0606: Use after free in ANGLE
  * [Backport] CVE-2022-0607: Use after free in GPU
  * [Backport] CVE-2022-0608: Integer overflow in Mojo
  * [Backport] CVE-2022-0609: Use after free in Animation
  * [Backport] CVE-2022-0610: Inappropriate implementation
    in Gamepad API
  * [Backport] CVE-2022-0971 (boo#1197163)
  * [Backport] CVE-2022-1096 (boo#1197552)
  * [Backport] CVE-2022-23852
  * [Backport] Copy 'name_' member during StyleRuleProperty::Copy
  * [Backport] Security bug 1256885
  * [Backport] Security bug 1258603
  * [Backport] Security bug 1259557
  * [Backport] Security bug 1261415
  * [Backport] Security bug 1265570
  * [Backport] Security bug 1268448
  * [Backport] Security bug 1270014
  * [Backport] Security bug 1274113
  * [Backport] Security bug 1276331
  * [Backport] Security bug 1280743
  * [Backport] Security bug 1289394
  * [Backport] Security bug 1292537
  * [Backport] sandbox: build if glibc 2.34+ dynamic stack size
    is enabled
- Drop patches, now upstream:
  * CVE-2022-0971-qtwebengine-5.15.patch
  * CVE-2022-1096-qtwebengine-5.15.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1651060800">- Add libqt5-qtwebengine-rpmlintrc to silence the
  'shlib-policy-name-error' rpmlint error</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1651492800">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1654689600">- Update to version 5.15.10:
  * Fix top level build with no widget
  * Fix read-after-free on EGL extensions
  * Update Chromium
  * Add workaround for unstable gn on macOS in ci
  * Pass archiver to gn build
  * Fix navigation to non-local URLs
  * Add support for universal builds for qtwebengine and qtpdf
  * Enable Apple Silicon support
  * Fix cross compilation x86_64-&gt;arm64 on mac
  * Bump version to 5.15.10
  * CustomDialogs: Make custom input fields readable in dark mode
  * CookieBrowser: Make alternating rows readable in dark mode
  * Update Chromium:
  * Bump V8_PATCH_LEVEL
  * Fix clang set-but-unused-variable warning
  * Fix mac toolchain python linker script call
  * Fix missing dependency for gpu sources
  * Fix python calls
  * Fix undefined symbol for universal link
  * Quick fix for regression in service workers by reverting
    backports
  * [Backport] CVE-2022-0797: Out of bounds memory access
    in Mojo
  * [Backport] CVE-2022-1125
  * [Backport] CVE-2022-1138: Inappropriate implementation
    in Web Cursor.
  * [Backport] CVE-2022-1305: Use after free in storage
  * [Backport] CVE-2022-1310: Use after free in regular
    expressions
  * [Backport] CVE-2022-1314: Type Confusion in V8
  * [Backport] CVE-2022-1493: Use after free in Dev Tools
  * [Backport] On arm64 hosts, set host_cpu to 'arm64', not 'arm'
  * [Backport] Security Bug 1296876
  * [Backport] Security bug 1269999
  * [Backport] Security bug 1280852
  * [Backport] Security bug 1292905
  * [Backport] Security bug 1304659
  * [Backport] Security bug 1306507</changelog>
</package>
<package pkgid="589b7a811e32fba00c50f405d1f9ac48f603580f4e75f3f0f7deca7aa8d1a86b" name="libQt5Pdf5" arch="x86_64">
  <version epoch="0" ver="5.15.10" rel="bp154.2.3.2"/>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1613563200">- Add patch to fix sandbox with glibc 2.33 on 32bit:
  * sandbox-statx-futex_time64.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1615377600">- Can't use system_vpx on Leap 15.3</changelog>
  <changelog author="christophe@krop.fr" date="1616587200">- Update to version 5.15.3:
  * Fix spelling and coding style
  * Fix new view request handling (QTBUG-87378)
  * Fix getDefaultScreenId on X11
  * Fix flaky tst_QWebEngineView::textSelectionOutOfInputField test
  * Move touch input tests to separate testcase
  * Add touch input tests for scrolling and pinch zooming
  * Fix rare duplicate ids forming in touch point id's mapping
  * Use the module's version number for QtWebEngineProcess
  * Touch handling: provide id mapping without modifying TouchPoint instance
    (QTBUG-88001)
  * Touch handling: fix mapped ids cleanup for TouchCancel event
  * et custom headers from QWebEngineUrlRequestInfo before triggering redirect
    (QTBUG-88861)
  * Forward modifier flags for lock keys (QTBUG-89001)
  * Fix handling of more than one finger for touch event (QTBUG-86389)
  * Stabilize load signals emitting (QTBUG-65223, QTBUG-87089)
  * Fix building against 5.12 on most CIs
  * Update minimum HarfBuzz version to 2.4.0 (QTBUG-88976)
  * Fix building against Qt 5.14
  * Migrate user script IPC to mojo
  * Fix crashes in user resource controller when single process
  * Minor. Fix namespace for user resource controller
  * Minor. RenderThreadObserverQt is really a RenderConfiguration
  * Remove RenderViewObserverHelper from UserResourceController
  * Cache mojo interface bindings to UserResourceControllerRenderFrame
  * Cache mojo interface bindings for WebChannelIPCTransport
  * Migrate render_view_observer_qt to mojo
  * Fix crash on linkedin.com (QTBUG-89740)
  * Suppress error pages also for http errors if they are disabled
  * Fix leak in QQuickWebEngineViewPrivate::contextMenuRequested
  * Register PerformanceNode early enough
  * Quiet log on webrtc usage
  * Remove configure option that doesn't work
  * Remove Java build dependency
  * Fix blank popups in qml (QTBUG-86034)
  * Fix position of popup on qml (QTBUG-86034, QTBUG-89358)
  * Enable hangout services extension (QTBUG-85731)
  * Allow to fallback to default locale for non existent data packs (QTBUG-90490)
  * Support devtools close button
  * Do not extract download file names from certain url schemes (QTBUG-90355)
  * Leave room for the null-termination byte when checking remote drive path
    (QTBUG-90347)
  * Do not set open files limit for linking if not necessary
  * Remove even more remains of non network service code
  * Add back prefers-color-scheme support (QTBUG-89753)
  * Start supporting chrome.resourcesPrivate API (QTBUG-90035)
  * Enable chrome://user-actions WebUI
  * Remove remains of chrome://flash
  * Fix loadFinished signal if page has content but server sends HTTP error
    (QTBUG-90517)
  * Fix devtools page resource loading as raw data instead of html string
  * Remove frame metadata observer (RenderWidgetHostViewQt) on destroy
  * Resolve installed interceptors right before interception point (QTBUG-86286)
  * Update searches faster
  * Remove more leftovers of the old compositor
  * Enable webrtc logging and the corresponding WebUI
  * Support mips64el platform CPU(loongson 3A4000)
  * Add tracing UI resources
  * Fix crash on meet.google.com
  * Fix mad popup qquickwindows on wayland
  * Fix crashes on BrowserContext destruction
  * Fix crash on exit in quicknanobrowser when popup
  * Remove QtPdf dependency on nss at build-time
  * Avoid accessing profileAdapter when profile is shutting down (QTBUG-91187)
  * Do not flush messages form profile destructor
  * Ignore QQuickWebEngineNewViewRequest if it is unhandled
  * Fix ScopedGLContextChecker with QTWEBENGINE_DISABLE_GPU_THREAD=1
  * Don't send duplicate load progress values
  * Fix neon support in libpng
  * Do not call deprecated profile interceptor on ui thread (QTBUG-86267)
  * Add certificate error message for ERR_SSL_OBSOLETE_VERSION
  * Fix assert in WebContentsAdapter::devToolsFrontendDestroyed
  * Avoid to reject a certificate error twice in Quick
  * Fix PDF viewer plugin
  * FIXUP: Fix swap condition in DisplayGLOutputSurface::updatePaintNode
    (QTBUG-86599)
  * Fix favicon engine under device pixel scaling
  * Do not pass a native keycode matching the menu key when it is remapped
    (QTBUG-86672)
  * Optimize WebEngineSettings::testAttribute
  * Warn about QtWebengineProcess launching from network share (QTBUG-84632)
  * Handle non-ascii names for pulseaudio (QTBUG-85363)
  * Do not set audio device for desktop capture if audio loopback is unsupported
  * Fix new view request handling (QTBUG-87378)
  * Fix getDefaultScreenId on X11
  * Touch handling: provide id mapping without modifying TouchPoint instance
    (QTBUG-88001)
  * Set custom headers from QWebEngineUrlRequestInfo before triggering redirect
    (QTBUG-88861)
  * Stabilize load signals emitting (QTBUG-65223)
- CVE fixes backported in chromium updates:
  * CVE-2020-16044: Use after free in WebRTC
  * CVE-2021-21118: Heap buffer overflow in Blink
  * CVE-2021-21119: Use after free in Media
  * CVE-2021-21120: Use after free in WebSQL
  * CVE-2021-21121: Use after free in Omnibox
  * CVE-2021-21122: Use after free in Blink
  * CVE-2021-21123: Insufficient data validation in File System API
  * CVE-2021-21125: Insufficient policy enforcement in File System API
  * CVE-2021-21126: Insufficient policy enforcement in extensions
  * CVE-2021-21127: Insufficient policy enforcement in extensions
  * CVE-2021-21128: Heap buffer overflow in Blink
  * CVE-2021-21129: Insufficient policy enforcement in File System API
  * CVE-2021-21130: Insufficient policy enforcement in File System API
  * CVE-2021-21131: Insufficient policy enforcement in File System API
  * CVE-2021-21132: Inappropriate implementation in DevTools
  * CVE-2021-21135: Inappropriate implementation in Performance API
  * CVE-2021-21137: Inappropriate implementation in DevTools
  * CVE-2021-21140: Uninitialized Use in USB
  * CVE-2021-21141: Insufficient policy enforcement in File System API
  * CVE-2021-21145: Use after free in Fonts
  * CVE-2021-21146: Use after free in Navigation
  * CVE-2021-21147: Inappropriate implementation in Skia
  * CVE-2021-21148: Heap buffer overflow in V8
  * CVE-2021-21149: Stack overflow in Data Transfer
  * CVE-2021-21150: Use after free in Downloads
  * CVE-2021-21152: Heap buffer overflow in Media
  * CVE-2021-21153: Stack overflow in GPU Process
  * CVE-2021-21156: Heap buffer overflow in V8
  * CVE-2021-21157: Use after free in Web Sockets
- Drop obsolete patches:
  * icu-68.patch
  * icu-68-2.patch
- Rebase patches:
  * fix1163766.patch
  * sandbox-statx-futex_time64.patch
  * rtc-dont-use-h264.patch
  * chromium-glibc-2.33.patch
- Add patch to fix crash with certain locales:
  * 0001-Fix-normalization-of-app-locales.patch
- Clean the spec file a bit</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1618315200">- Add back missing part in fix1163766.patch (boo#1184610)</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1618401600">- Update _constraints to avoid OOM</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1618401601">- Add patch to fix build with GCC 11:
  * 0001-Fix-build-with-GCC-11.patch</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1620302400">- Add patch to fix build with ICU 69:
  * 0001-Fix-build-with-system-ICU-69.patch</changelog>
  <changelog author="christophe@krop.fr" date="1624363200">- Update to version 5.15.5:
  * Abort findText also right on explicit navigation request
  * Adapt to new Connections syntax
  * Add devtools eyedropper support
  * Add more tests to tst_loadsignals
  * Add support for Keyboard.getLayoutMap()
  * Add web-ui chrome://net-internals
  * Allow leaving OCSP off
  * Always send phased wheel events beginning with Began
  * Avoid accessing profileAdapter when profile is shutting down
  * Avoid unknownFunc messages in qmltests
  * Blacklist CertificateError::test_error for macOS
  * Blacklist NewViewRequest::test_loadNewViewRequest on macOS
  * Blacklist handleError on macos until we merge the fix
  * Blacklist numberOfStartedAndFinishedSignalsIsSame on b2q CIs
  * Depend on QCoreApplication::startingUp() for checking
    existence of app
  * Do not allow WebBluetooth to continue
  * Do not hide virtual keyboard if the focused node is editable
  * Doc: Add a note about navigation within a page to a fragment
  * Docs: Suggest to use higher DPI for printing
  * Fix FilePickerController's path validation for windows and
    corresponding tests
  * Fix application locales again
  * Fix embedded PDFs when plugins are disabled
  * Fix first party url for cookie filter
  * Fix inconsistent number of load signals and their order
  * Fix normalization of app locales
  * Fix not working certificates on mac &gt; 10.14
  * Fix prl files on ios
  * Fix qmltests::WebEngineViewNavigationHistory auto tests
  * Fix qtpdf static builds on windows
  * Fix static build of qml qtpdf
  * Follow InProcessGpuThread::Init() on thread priority
  * Generate mojo bindings before compiling extension API
    registration
  * Implement PluginServiceFilterQt
  * Load signals test: use focusProxy for link clicking test
  * Make able to override disabled features from command line
  * Notify canGoBack/canGoForward changes based on web actions
  * Only disconnect QWebEnginePage signals that QWebEngineView
    connected
  * Package devtools inspector overlay
  * Remove ResourceTypeSubFrame check after website update
  * Remove obsolete loadSignals test
    secondLoadForError_WhenErrorPageEnabled
  * Remove qquickwebengineprofile test
  * Remove tracking of frame which load error page
  * Remove ui/snapshot overrides for aura
  * Report server directs in navigation type
  * Return to using the default devtools page
  * Set enumaration root directory for File.webkitRelativePath API
  * Set more Display properties
  * Show PDF viewer in a guest view
  * Support devtools close button in QuickNanoBrowser
  * Support zoom-in, zoom-out and cell web cursors on macOS
  * Unblacklist and fix load signals test for file download
  * Update Chromium and adapt PermissionManagerQt
  * Update platform notes
  * View: test signal for deletion of external page set to view
- Drop patches:
  * 0001-Fix-normalization-of-app-locales.patch
  * 0001-Fix-build-with-GCC-11.patch
  * 0001-Fix-build-with-system-ICU-69.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1624536000">- Update the CMake version workaround to get qtbase's real version</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1628078400">- Add patch to fix build with glibc 2.34 (boo#1189095)
  * 0001-Fix-build-with-glibc-2.34.patch</changelog>
  <changelog author="christophe@krop.fr" date="1631188800">- Update to version 5.15.6:
  * Update Chromium:
    + [Backport] CVE-2021-30560: Use after free in Blink XSLT
    + [Backport] CVE-2021-30566: Stack buffer overflow in Printing
    + [Backport] CVE-2021-30585: Use after free in sensor handling
    + Bump V8_PATCH_LEVEL
    + [Backport] Security bug 1228036
    + [Backport] CVE-2021-30604: Use after free in ANGLE
    + [Backport] CVE-2021-30603: Race in WebAudio
    + [Backport] CVE-2021-30602: Use after free in WebRTC
    + [Backport] CVE-2021-30599: Type Confusion in V8
    + [Backport] CVE-2021-30598: Type Confusion in V8
    + [Backport] Security bug 1227933
    + [Backport] Security bug 1205059
    + [Backport] Security bug 1184294
    + [Backport] Security bug 1198385
    + [Backport] CVE-2021-30588: Type Confusion in V8
    + [Backport] CVE-2021-30587: Inappropriate implementation in Compositing on Windows
    + [Backport] CVE-2021-30573: Use after free in GPU
    + [Backport] CVE-2021-30569, security bugs 1198216 and 1204814
    + [Backport] CVE-2021-30568: Heap buffer overflow in WebGL
    + [Backport] CVE-2021-30541: Use after free in V8
    + [Backport] Security bugs 1197786 and 1194330
    + [Backport] Security bug 1194689
    + [Backport] CVE-2021-30563: Type Confusion in V8
    + [Backport] Security bug 1211215
    + [Backport] Security bug 1209558
    + [Backport] CVE-2021-30553: Use after free in Network service
    + [Backport] CVE-2021-30548: Use after free in Loader
    + [Backport] CVE-2021-30547: Out of bounds write in ANGLE
    + [Backport] CVE-2021-30556: Use after free in WebAudio
    + [Backport] CVE-2021-30559: Out of bounds write in ANGLE
    + [Backport] CVE-2021-30533: Insufficient policy enforcement in PopupBlocker
    + [Backport] Security bug 1202534
    + [Backport] CVE-2021-30536: Out of bounds read in V8
    + [Backport] CVE-2021-30522: Use after free in WebAudio
    + [Backport] CVE-2021-30554 Use after free in WebGL
    + [Backport] CVE-2021-30551: Type Confusion in V8
    + [Backport] CVE-2021-30544: Use after free in BFCache
    + [Backport] CVE-2021-30535: Double free in ICU
    + [Backport] CVE-2021-30534: Insufficient policy enforcement in iFrameSandbox
    + [Backport] CVE-2021-30530: Out of bounds memory access in WebAudio
    + [Backport] CVE-2021-30523: Use after free in WebRTC
    + Generate mojo bindings before compiling extension API registration
  * Bump version from 5.15.5 to 5.15.6
  * Always send phased wheel events beginning with Began
- Import patch from the chromium package:
  * 0001-return-ENOSYS-for-clone3.patch
- Add changes from the chromium package to
  0001-Fix-build-with-glibc-2.34.patch</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1632225600">- Add patches from Arch to fix build with HarfBuzz 3.0.0:
  * chromium-harfbuzz-3.0.0.patch
  * skia-harfbuzz-3.0.0.patch
- ... but don't break with &lt; 2.9.0:
  * chromium-older-harfbuzz.patch</changelog>
  <changelog author="christophe@krop.fr" date="1635508800">- Update to version 5.15.7:
  * Update Chromium:
    [Backport] Linux sandbox: update syscalls numbers on 32-bit platforms
    [Backport] sandbox: linux: allow clock_nanosleep &amp; gettime64
    [Backport] Linux sandbox: update syscall numbers for all platforms.
    [Backport] Ease HarfBuzz API change with feature detection
    [Backport] Security bug 1248665
    [Backport] CVE-2021-37975 : Use after free in V8
    [Backport] CVE-2021-37980 : Inappropriate implementation in Sandbox
    [Backport] CVE-2021-37979 : Heap buffer overflow in WebRTC (2/2)
    [Backport] CVE-2021-37979 : Heap buffer overflow in WebRTC (1/2)
    [Backport] CVE-2021-37978 : Heap buffer overflow in Blink
    [Backport] CVE-2021-30616: Use after free in Media.
    [Backport] CVE-2021-37962 : Use after free in Performance Manager (2/2)
    [Backport] CVE-2021-37962 : Use after free in Performance Manager (1/2)
    [Backport] CVE-2021-37973 : Use after free in Portals
    [Backport] CVE-2021-37971 : Incorrect security UI in Web Browser UI.
    [Backport] CVE-2021-37968 : Inappropriate implementation in Background Fetch API
    [Backport] CVE-2021-37967 : Inappropriate implementation in Background Fetch API
    [Backport] Linux sandbox: return ENOSYS for clone3
    [Backport] Linux sandbox: fix fstatat() crash
    [Backport] Reland "Reland "Linux sandbox syscall broker: use struct kernel_stat""
    [Backport] Security bug 1238178 (2/2)
    [Backport] Security bug 1238178 (1/2)
    [Backport] CVE-2021-30633: Use after free in Indexed DB API (2/2)
    [Backport] CVE-2021-30633: Use after free in Indexed DB API (1/2)
    [Backport] CVE-2021-30630: Inappropriate implementation in Blink
    [Backport] CVE-2021-30629: Use after free in Permissions
    [Backport] CVE-2021-30628: Stack buffer overflow in ANGLE
    [Backport] CVE-2021-30627: Type Confusion in Blink layout
    [Backport] CVE-2021-30626: Out of bounds memory access in ANGLE
    [Backport] CVE-2021-30625: Use after free in Selection API
    [Backport] Security bug 1206289
    [Backport] CVE-2021-30613: Use after free in Base internals
    [Backport] Security bug 1227228
    [Backport] CVE-2021-30618: Inappropriate implementation in DevTools
  * Update patch level
  * Blacklist certificate test until certicates have been renewed
  * Block CORS from local URLs when remote access is not enabled
  * Do not wait on weak_pointer for termination errors
  * Support MSVC_VER 16.8
  * Fix wrong save file filter for Markdown Editor example
  * Add Chromium version source documentation
  * Bump version from 5.15.6 to 5.15.7
  * Fix crash when clicking on a link in PDF
- Drop openSUSE patches:
  * fix1163766.patch. Should be addressed with:
    https://github.com/qt/qtwebengine-chromium/commit/652f834de
    https://github.com/qt/qtwebengine-chromium/commit/faae106ed
    https://github.com/qt/qtwebengine-chromium/commit/6b7b3f1bf
  * chromium-glibc-2.33.patch. Should be addressed with the
    [Backport] Linux sandbox: fix fstatat() crash and
    Reland "Reland "Linux sandbox syscall broker: use struct kernel_stat""
    changes.
  * chromium-older-harfbuzz.patch
- Drop upstream changes:
  * 0001-return-ENOSYS-for-clone3.patch
  * chromium-harfbuzz-3.0.0.patch
  * skia-harfbuzz-3.0.0.patch
- Rebase patches:
  * sandbox-statx-futex_time64.patch</changelog>
  <changelog author="christophe@krop.fr" date="1641297600">- Update to version 5.15.8:
  * Update Chromium:
    [Backport] CVE-2021-3517: libxml2: Heap-based buffer overflow
    in xmlEncodeEntitiesInternal() in entities.c
    [Backport] CVE-2021-3541 libxml2: Exponential entity expansion
    attack bypasses all existing protection mechanisms
    [Backport] CVE-2021-37984 : Heap buffer overflow in PDFium
    [Backport] CVE-2021-37987 : Use after free in Network APIs
    [Backport] CVE-2021-37989 : Inappropriate implementation in Blink
    [Backport] CVE-2021-37992 : Out of bounds read in WebAudio
    [Backport] CVE-2021-37993 : Use after free in PDF Accessibility
    [Backport] CVE-2021-37996 : Insufficient validation of untrusted
    input in Downloads
    [Backport] CVE-2021-38001 : Type Confusion in V8
    [Backport] CVE-2021-38003 : Inappropriate implementation in V8
    [Backport] CVE-2021-38005: Use after free in loader (1/3)
    [Backport] CVE-2021-38005: Use after free in loader (2/3)
    [Backport] CVE-2021-38005: Use after free in loader (3/3)
    [Backport] CVE-2021-38007: Type Confusion in V8
    [Backport] CVE-2021-38009: Inappropriate implementation in cache
    [Backport] CVE-2021-38010: Inappropriate implementation in serviceworkers
    [Backport] CVE-2021-38012: Type Confusion in V8
    [Backport] CVE-2021-38015: Inappropriate implementation in input
    [Backport] CVE-2021-38017: Insufficient policy enforcement in iframe
    sandbox
    [Backport] CVE-2021-38018: Inappropriate implementation in navigation
    [Backport] CVE-2021-38019: Insufficient policy enforcement in CORS
    [Backport] CVE-2021-38021: Inappropriate implementation in referrer
    [Backport] CVE-2021-38022: Inappropriate implementation in WebAuthentication
    [Backport] CVE-2021-4057: Use after free in file API
    [Backport] CVE-2021-4058: Heap buffer overflow in ANGLE (1/2)
    [Backport] CVE-2021-4058: Heap buffer overflow in ANGLE (2/2)
    [Backport] CVE-2021-4059: Insufficient data validation in loader
    [Backport] CVE-2021-4062: Heap buffer overflow in BFCache
    [Backport] CVE-2021-4078: Type confusion in V8
    [Backport] CVE-2021-4079: Out of bounds write in WebRTC
    [Backport] CVE-2021-4098: Insufficient data validation in Mojo
    [Backport] CVE-2021-4099: Use after free in Swiftshader
    [Backport] CVE-2021-4101: Heap buffer overflow in Swiftshader.
    [Backport] CVE-2021-4102: Use after free in V8
    [Backport] Dependency for CVE-2021-37989
    [Backport] Dependency for CVE-2021-38009
    [Backport] Security bug 1245870
    [Backport] Security bug 1252858
    [Backport] Security bug 1259899
    Bump V8_PATCH_LEVEL
    Compile with GCC 11 -std=c++20
    Fix stack overflow on gpu channel recreate with an error
    Use wglSetPixelFormat directly only if in software mode
    [Backport] Handle long SIGSTKSZ in glibc &gt; 2.33
    [Backport] abseil-cpp: Fixes build with latest glibc
  * Handle qtpdf compilation with static runtime
  * Add bitcode support for qtpdf on ios
  * Do not access accessibility from qt post routines
  * Blacklist javascriptClipboard test on ubuntu 20.04
  * Re-enable network-service-in-process
  * Bump version from 5.15.7 to 5.15.8
  * Update patch level
  * Fix pinch gesture
  * Fix leak of properties after XkbRF_GetNamesProp
  * Fix leak on getDefaultScreeenId
- Drop patch:
  * 0001-Fix-build-with-glibc-2.34.patch</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1648209600">- Add patch to fix build with GCC 12:
  * 0001-skia-Some-includes-to-fix-build-with-GCC-12.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1649073600">- Add security fixes:
  * CVE-2022-0971-qtwebengine-5.15.patch (CVE-2022-0971, boo#1197163)
  * CVE-2022-1096-qtwebengine-5.15.patch (CVE-2022-1096, boo#1197552)</changelog>
  <changelog author="christophe@krop.fr" date="1649246400">- Update to version 5.15.9:
  * QPdfView: scale page rendering according to devicePixelRatio
  * Update documented Chromium version
  * Use IsSameDocument() rather than IsLoadingToDifferentDocument()
  * Update module-split for installer
  * Fix printing PDF files
  * Do not override signal handlers
  * Avoid using xkbcommon in non-X11 builds
  * Update documentation
  * Update Chromium:
  * Bump V8_PATCH_LEVEL
  * Do not overwrite signal handlers in the browser process.
  * Replace base::ranges::set_union with std::set_union to fix
    MSVC2017 build
  * [Backport] CVE-2022-0100: Heap buffer overflow in Media
    streams API
  * [Backport] CVE-2022-0102: Type Confusion in V8
  * [Backport] CVE-2022-0103: Use after free in SwiftShader
  * [Backport] CVE-2022-0104: Heap buffer overflow in ANGLE
  * [Backport] CVE-2022-0108: Inappropriate implementation
    in Navigation
  * [Backport] CVE-2022-0109: Inappropriate implementation
    in Autofill
  * [Backport] CVE-2022-0111 and CVE-2022-0117
  * [Backport] CVE-2022-0113: Inappropriate implementatio
    n in Blink
  * [Backport] CVE-2022-0116: Inappropriate implementation
    in Compositing
  * [Backport] CVE-2022-0289: Use after free in Safe browsing
  * [Backport] CVE-2022-0291: Inappropriate implementation
    in Storage
  * [Backport] CVE-2022-0293: Use after free in Web packaging
  * [Backport] CVE-2022-0298: Use after free in Scheduling
  * [Backport] CVE-2022-0305: Inappropriate implementation in
    Service Worker API
  * [Backport] CVE-2022-0306: Heap buffer overflow in PDFium
  * [Backport] CVE-2022-0310 and CVE-0311: Heap buffer overflow
    in Task Manager
  * [Backport] CVE-2022-0456: Use after free in Web Search
  * [Backport] CVE-2022-0459: Use after free in Screen Capture
  * [Backport] CVE-2022-0460: Use after free in Window Dialog
  * [Backport] CVE-2022-0461: Policy bypass in COOP
  * [Backport] CVE-2022-0606: Use after free in ANGLE
  * [Backport] CVE-2022-0607: Use after free in GPU
  * [Backport] CVE-2022-0608: Integer overflow in Mojo
  * [Backport] CVE-2022-0609: Use after free in Animation
  * [Backport] CVE-2022-0610: Inappropriate implementation
    in Gamepad API
  * [Backport] CVE-2022-0971 (boo#1197163)
  * [Backport] CVE-2022-1096 (boo#1197552)
  * [Backport] CVE-2022-23852
  * [Backport] Copy 'name_' member during StyleRuleProperty::Copy
  * [Backport] Security bug 1256885
  * [Backport] Security bug 1258603
  * [Backport] Security bug 1259557
  * [Backport] Security bug 1261415
  * [Backport] Security bug 1265570
  * [Backport] Security bug 1268448
  * [Backport] Security bug 1270014
  * [Backport] Security bug 1274113
  * [Backport] Security bug 1276331
  * [Backport] Security bug 1280743
  * [Backport] Security bug 1289394
  * [Backport] Security bug 1292537
  * [Backport] sandbox: build if glibc 2.34+ dynamic stack size
    is enabled
- Drop patches, now upstream:
  * CVE-2022-0971-qtwebengine-5.15.patch
  * CVE-2022-1096-qtwebengine-5.15.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1651060800">- Add libqt5-qtwebengine-rpmlintrc to silence the
  'shlib-policy-name-error' rpmlint error</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1651492800">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1654689600">- Update to version 5.15.10:
  * Fix top level build with no widget
  * Fix read-after-free on EGL extensions
  * Update Chromium
  * Add workaround for unstable gn on macOS in ci
  * Pass archiver to gn build
  * Fix navigation to non-local URLs
  * Add support for universal builds for qtwebengine and qtpdf
  * Enable Apple Silicon support
  * Fix cross compilation x86_64-&gt;arm64 on mac
  * Bump version to 5.15.10
  * CustomDialogs: Make custom input fields readable in dark mode
  * CookieBrowser: Make alternating rows readable in dark mode
  * Update Chromium:
  * Bump V8_PATCH_LEVEL
  * Fix clang set-but-unused-variable warning
  * Fix mac toolchain python linker script call
  * Fix missing dependency for gpu sources
  * Fix python calls
  * Fix undefined symbol for universal link
  * Quick fix for regression in service workers by reverting
    backports
  * [Backport] CVE-2022-0797: Out of bounds memory access
    in Mojo
  * [Backport] CVE-2022-1125
  * [Backport] CVE-2022-1138: Inappropriate implementation
    in Web Cursor.
  * [Backport] CVE-2022-1305: Use after free in storage
  * [Backport] CVE-2022-1310: Use after free in regular
    expressions
  * [Backport] CVE-2022-1314: Type Confusion in V8
  * [Backport] CVE-2022-1493: Use after free in Dev Tools
  * [Backport] On arm64 hosts, set host_cpu to 'arm64', not 'arm'
  * [Backport] Security Bug 1296876
  * [Backport] Security bug 1269999
  * [Backport] Security bug 1280852
  * [Backport] Security bug 1292905
  * [Backport] Security bug 1304659
  * [Backport] Security bug 1306507</changelog>
</package>
<package pkgid="cfa5bcb0cc7d063e18315d712d87ac009859e4d656a097368adb5abbc6fd9f20" name="libQt5PdfWidgets5" arch="aarch64">
  <version epoch="0" ver="5.15.10" rel="bp154.2.3.2"/>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1613563200">- Add patch to fix sandbox with glibc 2.33 on 32bit:
  * sandbox-statx-futex_time64.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1615377600">- Can't use system_vpx on Leap 15.3</changelog>
  <changelog author="christophe@krop.fr" date="1616587200">- Update to version 5.15.3:
  * Fix spelling and coding style
  * Fix new view request handling (QTBUG-87378)
  * Fix getDefaultScreenId on X11
  * Fix flaky tst_QWebEngineView::textSelectionOutOfInputField test
  * Move touch input tests to separate testcase
  * Add touch input tests for scrolling and pinch zooming
  * Fix rare duplicate ids forming in touch point id's mapping
  * Use the module's version number for QtWebEngineProcess
  * Touch handling: provide id mapping without modifying TouchPoint instance
    (QTBUG-88001)
  * Touch handling: fix mapped ids cleanup for TouchCancel event
  * et custom headers from QWebEngineUrlRequestInfo before triggering redirect
    (QTBUG-88861)
  * Forward modifier flags for lock keys (QTBUG-89001)
  * Fix handling of more than one finger for touch event (QTBUG-86389)
  * Stabilize load signals emitting (QTBUG-65223, QTBUG-87089)
  * Fix building against 5.12 on most CIs
  * Update minimum HarfBuzz version to 2.4.0 (QTBUG-88976)
  * Fix building against Qt 5.14
  * Migrate user script IPC to mojo
  * Fix crashes in user resource controller when single process
  * Minor. Fix namespace for user resource controller
  * Minor. RenderThreadObserverQt is really a RenderConfiguration
  * Remove RenderViewObserverHelper from UserResourceController
  * Cache mojo interface bindings to UserResourceControllerRenderFrame
  * Cache mojo interface bindings for WebChannelIPCTransport
  * Migrate render_view_observer_qt to mojo
  * Fix crash on linkedin.com (QTBUG-89740)
  * Suppress error pages also for http errors if they are disabled
  * Fix leak in QQuickWebEngineViewPrivate::contextMenuRequested
  * Register PerformanceNode early enough
  * Quiet log on webrtc usage
  * Remove configure option that doesn't work
  * Remove Java build dependency
  * Fix blank popups in qml (QTBUG-86034)
  * Fix position of popup on qml (QTBUG-86034, QTBUG-89358)
  * Enable hangout services extension (QTBUG-85731)
  * Allow to fallback to default locale for non existent data packs (QTBUG-90490)
  * Support devtools close button
  * Do not extract download file names from certain url schemes (QTBUG-90355)
  * Leave room for the null-termination byte when checking remote drive path
    (QTBUG-90347)
  * Do not set open files limit for linking if not necessary
  * Remove even more remains of non network service code
  * Add back prefers-color-scheme support (QTBUG-89753)
  * Start supporting chrome.resourcesPrivate API (QTBUG-90035)
  * Enable chrome://user-actions WebUI
  * Remove remains of chrome://flash
  * Fix loadFinished signal if page has content but server sends HTTP error
    (QTBUG-90517)
  * Fix devtools page resource loading as raw data instead of html string
  * Remove frame metadata observer (RenderWidgetHostViewQt) on destroy
  * Resolve installed interceptors right before interception point (QTBUG-86286)
  * Update searches faster
  * Remove more leftovers of the old compositor
  * Enable webrtc logging and the corresponding WebUI
  * Support mips64el platform CPU(loongson 3A4000)
  * Add tracing UI resources
  * Fix crash on meet.google.com
  * Fix mad popup qquickwindows on wayland
  * Fix crashes on BrowserContext destruction
  * Fix crash on exit in quicknanobrowser when popup
  * Remove QtPdf dependency on nss at build-time
  * Avoid accessing profileAdapter when profile is shutting down (QTBUG-91187)
  * Do not flush messages form profile destructor
  * Ignore QQuickWebEngineNewViewRequest if it is unhandled
  * Fix ScopedGLContextChecker with QTWEBENGINE_DISABLE_GPU_THREAD=1
  * Don't send duplicate load progress values
  * Fix neon support in libpng
  * Do not call deprecated profile interceptor on ui thread (QTBUG-86267)
  * Add certificate error message for ERR_SSL_OBSOLETE_VERSION
  * Fix assert in WebContentsAdapter::devToolsFrontendDestroyed
  * Avoid to reject a certificate error twice in Quick
  * Fix PDF viewer plugin
  * FIXUP: Fix swap condition in DisplayGLOutputSurface::updatePaintNode
    (QTBUG-86599)
  * Fix favicon engine under device pixel scaling
  * Do not pass a native keycode matching the menu key when it is remapped
    (QTBUG-86672)
  * Optimize WebEngineSettings::testAttribute
  * Warn about QtWebengineProcess launching from network share (QTBUG-84632)
  * Handle non-ascii names for pulseaudio (QTBUG-85363)
  * Do not set audio device for desktop capture if audio loopback is unsupported
  * Fix new view request handling (QTBUG-87378)
  * Fix getDefaultScreenId on X11
  * Touch handling: provide id mapping without modifying TouchPoint instance
    (QTBUG-88001)
  * Set custom headers from QWebEngineUrlRequestInfo before triggering redirect
    (QTBUG-88861)
  * Stabilize load signals emitting (QTBUG-65223)
- CVE fixes backported in chromium updates:
  * CVE-2020-16044: Use after free in WebRTC
  * CVE-2021-21118: Heap buffer overflow in Blink
  * CVE-2021-21119: Use after free in Media
  * CVE-2021-21120: Use after free in WebSQL
  * CVE-2021-21121: Use after free in Omnibox
  * CVE-2021-21122: Use after free in Blink
  * CVE-2021-21123: Insufficient data validation in File System API
  * CVE-2021-21125: Insufficient policy enforcement in File System API
  * CVE-2021-21126: Insufficient policy enforcement in extensions
  * CVE-2021-21127: Insufficient policy enforcement in extensions
  * CVE-2021-21128: Heap buffer overflow in Blink
  * CVE-2021-21129: Insufficient policy enforcement in File System API
  * CVE-2021-21130: Insufficient policy enforcement in File System API
  * CVE-2021-21131: Insufficient policy enforcement in File System API
  * CVE-2021-21132: Inappropriate implementation in DevTools
  * CVE-2021-21135: Inappropriate implementation in Performance API
  * CVE-2021-21137: Inappropriate implementation in DevTools
  * CVE-2021-21140: Uninitialized Use in USB
  * CVE-2021-21141: Insufficient policy enforcement in File System API
  * CVE-2021-21145: Use after free in Fonts
  * CVE-2021-21146: Use after free in Navigation
  * CVE-2021-21147: Inappropriate implementation in Skia
  * CVE-2021-21148: Heap buffer overflow in V8
  * CVE-2021-21149: Stack overflow in Data Transfer
  * CVE-2021-21150: Use after free in Downloads
  * CVE-2021-21152: Heap buffer overflow in Media
  * CVE-2021-21153: Stack overflow in GPU Process
  * CVE-2021-21156: Heap buffer overflow in V8
  * CVE-2021-21157: Use after free in Web Sockets
- Drop obsolete patches:
  * icu-68.patch
  * icu-68-2.patch
- Rebase patches:
  * fix1163766.patch
  * sandbox-statx-futex_time64.patch
  * rtc-dont-use-h264.patch
  * chromium-glibc-2.33.patch
- Add patch to fix crash with certain locales:
  * 0001-Fix-normalization-of-app-locales.patch
- Clean the spec file a bit</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1618315200">- Add back missing part in fix1163766.patch (boo#1184610)</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1618401600">- Update _constraints to avoid OOM</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1618401601">- Add patch to fix build with GCC 11:
  * 0001-Fix-build-with-GCC-11.patch</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1620302400">- Add patch to fix build with ICU 69:
  * 0001-Fix-build-with-system-ICU-69.patch</changelog>
  <changelog author="christophe@krop.fr" date="1624363200">- Update to version 5.15.5:
  * Abort findText also right on explicit navigation request
  * Adapt to new Connections syntax
  * Add devtools eyedropper support
  * Add more tests to tst_loadsignals
  * Add support for Keyboard.getLayoutMap()
  * Add web-ui chrome://net-internals
  * Allow leaving OCSP off
  * Always send phased wheel events beginning with Began
  * Avoid accessing profileAdapter when profile is shutting down
  * Avoid unknownFunc messages in qmltests
  * Blacklist CertificateError::test_error for macOS
  * Blacklist NewViewRequest::test_loadNewViewRequest on macOS
  * Blacklist handleError on macos until we merge the fix
  * Blacklist numberOfStartedAndFinishedSignalsIsSame on b2q CIs
  * Depend on QCoreApplication::startingUp() for checking
    existence of app
  * Do not allow WebBluetooth to continue
  * Do not hide virtual keyboard if the focused node is editable
  * Doc: Add a note about navigation within a page to a fragment
  * Docs: Suggest to use higher DPI for printing
  * Fix FilePickerController's path validation for windows and
    corresponding tests
  * Fix application locales again
  * Fix embedded PDFs when plugins are disabled
  * Fix first party url for cookie filter
  * Fix inconsistent number of load signals and their order
  * Fix normalization of app locales
  * Fix not working certificates on mac &gt; 10.14
  * Fix prl files on ios
  * Fix qmltests::WebEngineViewNavigationHistory auto tests
  * Fix qtpdf static builds on windows
  * Fix static build of qml qtpdf
  * Follow InProcessGpuThread::Init() on thread priority
  * Generate mojo bindings before compiling extension API
    registration
  * Implement PluginServiceFilterQt
  * Load signals test: use focusProxy for link clicking test
  * Make able to override disabled features from command line
  * Notify canGoBack/canGoForward changes based on web actions
  * Only disconnect QWebEnginePage signals that QWebEngineView
    connected
  * Package devtools inspector overlay
  * Remove ResourceTypeSubFrame check after website update
  * Remove obsolete loadSignals test
    secondLoadForError_WhenErrorPageEnabled
  * Remove qquickwebengineprofile test
  * Remove tracking of frame which load error page
  * Remove ui/snapshot overrides for aura
  * Report server directs in navigation type
  * Return to using the default devtools page
  * Set enumaration root directory for File.webkitRelativePath API
  * Set more Display properties
  * Show PDF viewer in a guest view
  * Support devtools close button in QuickNanoBrowser
  * Support zoom-in, zoom-out and cell web cursors on macOS
  * Unblacklist and fix load signals test for file download
  * Update Chromium and adapt PermissionManagerQt
  * Update platform notes
  * View: test signal for deletion of external page set to view
- Drop patches:
  * 0001-Fix-normalization-of-app-locales.patch
  * 0001-Fix-build-with-GCC-11.patch
  * 0001-Fix-build-with-system-ICU-69.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1624536000">- Update the CMake version workaround to get qtbase's real version</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1628078400">- Add patch to fix build with glibc 2.34 (boo#1189095)
  * 0001-Fix-build-with-glibc-2.34.patch</changelog>
  <changelog author="christophe@krop.fr" date="1631188800">- Update to version 5.15.6:
  * Update Chromium:
    + [Backport] CVE-2021-30560: Use after free in Blink XSLT
    + [Backport] CVE-2021-30566: Stack buffer overflow in Printing
    + [Backport] CVE-2021-30585: Use after free in sensor handling
    + Bump V8_PATCH_LEVEL
    + [Backport] Security bug 1228036
    + [Backport] CVE-2021-30604: Use after free in ANGLE
    + [Backport] CVE-2021-30603: Race in WebAudio
    + [Backport] CVE-2021-30602: Use after free in WebRTC
    + [Backport] CVE-2021-30599: Type Confusion in V8
    + [Backport] CVE-2021-30598: Type Confusion in V8
    + [Backport] Security bug 1227933
    + [Backport] Security bug 1205059
    + [Backport] Security bug 1184294
    + [Backport] Security bug 1198385
    + [Backport] CVE-2021-30588: Type Confusion in V8
    + [Backport] CVE-2021-30587: Inappropriate implementation in Compositing on Windows
    + [Backport] CVE-2021-30573: Use after free in GPU
    + [Backport] CVE-2021-30569, security bugs 1198216 and 1204814
    + [Backport] CVE-2021-30568: Heap buffer overflow in WebGL
    + [Backport] CVE-2021-30541: Use after free in V8
    + [Backport] Security bugs 1197786 and 1194330
    + [Backport] Security bug 1194689
    + [Backport] CVE-2021-30563: Type Confusion in V8
    + [Backport] Security bug 1211215
    + [Backport] Security bug 1209558
    + [Backport] CVE-2021-30553: Use after free in Network service
    + [Backport] CVE-2021-30548: Use after free in Loader
    + [Backport] CVE-2021-30547: Out of bounds write in ANGLE
    + [Backport] CVE-2021-30556: Use after free in WebAudio
    + [Backport] CVE-2021-30559: Out of bounds write in ANGLE
    + [Backport] CVE-2021-30533: Insufficient policy enforcement in PopupBlocker
    + [Backport] Security bug 1202534
    + [Backport] CVE-2021-30536: Out of bounds read in V8
    + [Backport] CVE-2021-30522: Use after free in WebAudio
    + [Backport] CVE-2021-30554 Use after free in WebGL
    + [Backport] CVE-2021-30551: Type Confusion in V8
    + [Backport] CVE-2021-30544: Use after free in BFCache
    + [Backport] CVE-2021-30535: Double free in ICU
    + [Backport] CVE-2021-30534: Insufficient policy enforcement in iFrameSandbox
    + [Backport] CVE-2021-30530: Out of bounds memory access in WebAudio
    + [Backport] CVE-2021-30523: Use after free in WebRTC
    + Generate mojo bindings before compiling extension API registration
  * Bump version from 5.15.5 to 5.15.6
  * Always send phased wheel events beginning with Began
- Import patch from the chromium package:
  * 0001-return-ENOSYS-for-clone3.patch
- Add changes from the chromium package to
  0001-Fix-build-with-glibc-2.34.patch</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1632225600">- Add patches from Arch to fix build with HarfBuzz 3.0.0:
  * chromium-harfbuzz-3.0.0.patch
  * skia-harfbuzz-3.0.0.patch
- ... but don't break with &lt; 2.9.0:
  * chromium-older-harfbuzz.patch</changelog>
  <changelog author="christophe@krop.fr" date="1635508800">- Update to version 5.15.7:
  * Update Chromium:
    [Backport] Linux sandbox: update syscalls numbers on 32-bit platforms
    [Backport] sandbox: linux: allow clock_nanosleep &amp; gettime64
    [Backport] Linux sandbox: update syscall numbers for all platforms.
    [Backport] Ease HarfBuzz API change with feature detection
    [Backport] Security bug 1248665
    [Backport] CVE-2021-37975 : Use after free in V8
    [Backport] CVE-2021-37980 : Inappropriate implementation in Sandbox
    [Backport] CVE-2021-37979 : Heap buffer overflow in WebRTC (2/2)
    [Backport] CVE-2021-37979 : Heap buffer overflow in WebRTC (1/2)
    [Backport] CVE-2021-37978 : Heap buffer overflow in Blink
    [Backport] CVE-2021-30616: Use after free in Media.
    [Backport] CVE-2021-37962 : Use after free in Performance Manager (2/2)
    [Backport] CVE-2021-37962 : Use after free in Performance Manager (1/2)
    [Backport] CVE-2021-37973 : Use after free in Portals
    [Backport] CVE-2021-37971 : Incorrect security UI in Web Browser UI.
    [Backport] CVE-2021-37968 : Inappropriate implementation in Background Fetch API
    [Backport] CVE-2021-37967 : Inappropriate implementation in Background Fetch API
    [Backport] Linux sandbox: return ENOSYS for clone3
    [Backport] Linux sandbox: fix fstatat() crash
    [Backport] Reland "Reland "Linux sandbox syscall broker: use struct kernel_stat""
    [Backport] Security bug 1238178 (2/2)
    [Backport] Security bug 1238178 (1/2)
    [Backport] CVE-2021-30633: Use after free in Indexed DB API (2/2)
    [Backport] CVE-2021-30633: Use after free in Indexed DB API (1/2)
    [Backport] CVE-2021-30630: Inappropriate implementation in Blink
    [Backport] CVE-2021-30629: Use after free in Permissions
    [Backport] CVE-2021-30628: Stack buffer overflow in ANGLE
    [Backport] CVE-2021-30627: Type Confusion in Blink layout
    [Backport] CVE-2021-30626: Out of bounds memory access in ANGLE
    [Backport] CVE-2021-30625: Use after free in Selection API
    [Backport] Security bug 1206289
    [Backport] CVE-2021-30613: Use after free in Base internals
    [Backport] Security bug 1227228
    [Backport] CVE-2021-30618: Inappropriate implementation in DevTools
  * Update patch level
  * Blacklist certificate test until certicates have been renewed
  * Block CORS from local URLs when remote access is not enabled
  * Do not wait on weak_pointer for termination errors
  * Support MSVC_VER 16.8
  * Fix wrong save file filter for Markdown Editor example
  * Add Chromium version source documentation
  * Bump version from 5.15.6 to 5.15.7
  * Fix crash when clicking on a link in PDF
- Drop openSUSE patches:
  * fix1163766.patch. Should be addressed with:
    https://github.com/qt/qtwebengine-chromium/commit/652f834de
    https://github.com/qt/qtwebengine-chromium/commit/faae106ed
    https://github.com/qt/qtwebengine-chromium/commit/6b7b3f1bf
  * chromium-glibc-2.33.patch. Should be addressed with the
    [Backport] Linux sandbox: fix fstatat() crash and
    Reland "Reland "Linux sandbox syscall broker: use struct kernel_stat""
    changes.
  * chromium-older-harfbuzz.patch
- Drop upstream changes:
  * 0001-return-ENOSYS-for-clone3.patch
  * chromium-harfbuzz-3.0.0.patch
  * skia-harfbuzz-3.0.0.patch
- Rebase patches:
  * sandbox-statx-futex_time64.patch</changelog>
  <changelog author="christophe@krop.fr" date="1641297600">- Update to version 5.15.8:
  * Update Chromium:
    [Backport] CVE-2021-3517: libxml2: Heap-based buffer overflow
    in xmlEncodeEntitiesInternal() in entities.c
    [Backport] CVE-2021-3541 libxml2: Exponential entity expansion
    attack bypasses all existing protection mechanisms
    [Backport] CVE-2021-37984 : Heap buffer overflow in PDFium
    [Backport] CVE-2021-37987 : Use after free in Network APIs
    [Backport] CVE-2021-37989 : Inappropriate implementation in Blink
    [Backport] CVE-2021-37992 : Out of bounds read in WebAudio
    [Backport] CVE-2021-37993 : Use after free in PDF Accessibility
    [Backport] CVE-2021-37996 : Insufficient validation of untrusted
    input in Downloads
    [Backport] CVE-2021-38001 : Type Confusion in V8
    [Backport] CVE-2021-38003 : Inappropriate implementation in V8
    [Backport] CVE-2021-38005: Use after free in loader (1/3)
    [Backport] CVE-2021-38005: Use after free in loader (2/3)
    [Backport] CVE-2021-38005: Use after free in loader (3/3)
    [Backport] CVE-2021-38007: Type Confusion in V8
    [Backport] CVE-2021-38009: Inappropriate implementation in cache
    [Backport] CVE-2021-38010: Inappropriate implementation in serviceworkers
    [Backport] CVE-2021-38012: Type Confusion in V8
    [Backport] CVE-2021-38015: Inappropriate implementation in input
    [Backport] CVE-2021-38017: Insufficient policy enforcement in iframe
    sandbox
    [Backport] CVE-2021-38018: Inappropriate implementation in navigation
    [Backport] CVE-2021-38019: Insufficient policy enforcement in CORS
    [Backport] CVE-2021-38021: Inappropriate implementation in referrer
    [Backport] CVE-2021-38022: Inappropriate implementation in WebAuthentication
    [Backport] CVE-2021-4057: Use after free in file API
    [Backport] CVE-2021-4058: Heap buffer overflow in ANGLE (1/2)
    [Backport] CVE-2021-4058: Heap buffer overflow in ANGLE (2/2)
    [Backport] CVE-2021-4059: Insufficient data validation in loader
    [Backport] CVE-2021-4062: Heap buffer overflow in BFCache
    [Backport] CVE-2021-4078: Type confusion in V8
    [Backport] CVE-2021-4079: Out of bounds write in WebRTC
    [Backport] CVE-2021-4098: Insufficient data validation in Mojo
    [Backport] CVE-2021-4099: Use after free in Swiftshader
    [Backport] CVE-2021-4101: Heap buffer overflow in Swiftshader.
    [Backport] CVE-2021-4102: Use after free in V8
    [Backport] Dependency for CVE-2021-37989
    [Backport] Dependency for CVE-2021-38009
    [Backport] Security bug 1245870
    [Backport] Security bug 1252858
    [Backport] Security bug 1259899
    Bump V8_PATCH_LEVEL
    Compile with GCC 11 -std=c++20
    Fix stack overflow on gpu channel recreate with an error
    Use wglSetPixelFormat directly only if in software mode
    [Backport] Handle long SIGSTKSZ in glibc &gt; 2.33
    [Backport] abseil-cpp: Fixes build with latest glibc
  * Handle qtpdf compilation with static runtime
  * Add bitcode support for qtpdf on ios
  * Do not access accessibility from qt post routines
  * Blacklist javascriptClipboard test on ubuntu 20.04
  * Re-enable network-service-in-process
  * Bump version from 5.15.7 to 5.15.8
  * Update patch level
  * Fix pinch gesture
  * Fix leak of properties after XkbRF_GetNamesProp
  * Fix leak on getDefaultScreeenId
- Drop patch:
  * 0001-Fix-build-with-glibc-2.34.patch</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1648209600">- Add patch to fix build with GCC 12:
  * 0001-skia-Some-includes-to-fix-build-with-GCC-12.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1649073600">- Add security fixes:
  * CVE-2022-0971-qtwebengine-5.15.patch (CVE-2022-0971, boo#1197163)
  * CVE-2022-1096-qtwebengine-5.15.patch (CVE-2022-1096, boo#1197552)</changelog>
  <changelog author="christophe@krop.fr" date="1649246400">- Update to version 5.15.9:
  * QPdfView: scale page rendering according to devicePixelRatio
  * Update documented Chromium version
  * Use IsSameDocument() rather than IsLoadingToDifferentDocument()
  * Update module-split for installer
  * Fix printing PDF files
  * Do not override signal handlers
  * Avoid using xkbcommon in non-X11 builds
  * Update documentation
  * Update Chromium:
  * Bump V8_PATCH_LEVEL
  * Do not overwrite signal handlers in the browser process.
  * Replace base::ranges::set_union with std::set_union to fix
    MSVC2017 build
  * [Backport] CVE-2022-0100: Heap buffer overflow in Media
    streams API
  * [Backport] CVE-2022-0102: Type Confusion in V8
  * [Backport] CVE-2022-0103: Use after free in SwiftShader
  * [Backport] CVE-2022-0104: Heap buffer overflow in ANGLE
  * [Backport] CVE-2022-0108: Inappropriate implementation
    in Navigation
  * [Backport] CVE-2022-0109: Inappropriate implementation
    in Autofill
  * [Backport] CVE-2022-0111 and CVE-2022-0117
  * [Backport] CVE-2022-0113: Inappropriate implementatio
    n in Blink
  * [Backport] CVE-2022-0116: Inappropriate implementation
    in Compositing
  * [Backport] CVE-2022-0289: Use after free in Safe browsing
  * [Backport] CVE-2022-0291: Inappropriate implementation
    in Storage
  * [Backport] CVE-2022-0293: Use after free in Web packaging
  * [Backport] CVE-2022-0298: Use after free in Scheduling
  * [Backport] CVE-2022-0305: Inappropriate implementation in
    Service Worker API
  * [Backport] CVE-2022-0306: Heap buffer overflow in PDFium
  * [Backport] CVE-2022-0310 and CVE-0311: Heap buffer overflow
    in Task Manager
  * [Backport] CVE-2022-0456: Use after free in Web Search
  * [Backport] CVE-2022-0459: Use after free in Screen Capture
  * [Backport] CVE-2022-0460: Use after free in Window Dialog
  * [Backport] CVE-2022-0461: Policy bypass in COOP
  * [Backport] CVE-2022-0606: Use after free in ANGLE
  * [Backport] CVE-2022-0607: Use after free in GPU
  * [Backport] CVE-2022-0608: Integer overflow in Mojo
  * [Backport] CVE-2022-0609: Use after free in Animation
  * [Backport] CVE-2022-0610: Inappropriate implementation
    in Gamepad API
  * [Backport] CVE-2022-0971 (boo#1197163)
  * [Backport] CVE-2022-1096 (boo#1197552)
  * [Backport] CVE-2022-23852
  * [Backport] Copy 'name_' member during StyleRuleProperty::Copy
  * [Backport] Security bug 1256885
  * [Backport] Security bug 1258603
  * [Backport] Security bug 1259557
  * [Backport] Security bug 1261415
  * [Backport] Security bug 1265570
  * [Backport] Security bug 1268448
  * [Backport] Security bug 1270014
  * [Backport] Security bug 1274113
  * [Backport] Security bug 1276331
  * [Backport] Security bug 1280743
  * [Backport] Security bug 1289394
  * [Backport] Security bug 1292537
  * [Backport] sandbox: build if glibc 2.34+ dynamic stack size
    is enabled
- Drop patches, now upstream:
  * CVE-2022-0971-qtwebengine-5.15.patch
  * CVE-2022-1096-qtwebengine-5.15.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1651060800">- Add libqt5-qtwebengine-rpmlintrc to silence the
  'shlib-policy-name-error' rpmlint error</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1651492800">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1654689600">- Update to version 5.15.10:
  * Fix top level build with no widget
  * Fix read-after-free on EGL extensions
  * Update Chromium
  * Add workaround for unstable gn on macOS in ci
  * Pass archiver to gn build
  * Fix navigation to non-local URLs
  * Add support for universal builds for qtwebengine and qtpdf
  * Enable Apple Silicon support
  * Fix cross compilation x86_64-&gt;arm64 on mac
  * Bump version to 5.15.10
  * CustomDialogs: Make custom input fields readable in dark mode
  * CookieBrowser: Make alternating rows readable in dark mode
  * Update Chromium:
  * Bump V8_PATCH_LEVEL
  * Fix clang set-but-unused-variable warning
  * Fix mac toolchain python linker script call
  * Fix missing dependency for gpu sources
  * Fix python calls
  * Fix undefined symbol for universal link
  * Quick fix for regression in service workers by reverting
    backports
  * [Backport] CVE-2022-0797: Out of bounds memory access
    in Mojo
  * [Backport] CVE-2022-1125
  * [Backport] CVE-2022-1138: Inappropriate implementation
    in Web Cursor.
  * [Backport] CVE-2022-1305: Use after free in storage
  * [Backport] CVE-2022-1310: Use after free in regular
    expressions
  * [Backport] CVE-2022-1314: Type Confusion in V8
  * [Backport] CVE-2022-1493: Use after free in Dev Tools
  * [Backport] On arm64 hosts, set host_cpu to 'arm64', not 'arm'
  * [Backport] Security Bug 1296876
  * [Backport] Security bug 1269999
  * [Backport] Security bug 1280852
  * [Backport] Security bug 1292905
  * [Backport] Security bug 1304659
  * [Backport] Security bug 1306507</changelog>
</package>
<package pkgid="1e32387101a911df97201c2fd37b8ceec032ee807cd651e1f7f915498902aa4a" name="libQt5PdfWidgets5" arch="x86_64">
  <version epoch="0" ver="5.15.10" rel="bp154.2.3.2"/>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1613563200">- Add patch to fix sandbox with glibc 2.33 on 32bit:
  * sandbox-statx-futex_time64.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1615377600">- Can't use system_vpx on Leap 15.3</changelog>
  <changelog author="christophe@krop.fr" date="1616587200">- Update to version 5.15.3:
  * Fix spelling and coding style
  * Fix new view request handling (QTBUG-87378)
  * Fix getDefaultScreenId on X11
  * Fix flaky tst_QWebEngineView::textSelectionOutOfInputField test
  * Move touch input tests to separate testcase
  * Add touch input tests for scrolling and pinch zooming
  * Fix rare duplicate ids forming in touch point id's mapping
  * Use the module's version number for QtWebEngineProcess
  * Touch handling: provide id mapping without modifying TouchPoint instance
    (QTBUG-88001)
  * Touch handling: fix mapped ids cleanup for TouchCancel event
  * et custom headers from QWebEngineUrlRequestInfo before triggering redirect
    (QTBUG-88861)
  * Forward modifier flags for lock keys (QTBUG-89001)
  * Fix handling of more than one finger for touch event (QTBUG-86389)
  * Stabilize load signals emitting (QTBUG-65223, QTBUG-87089)
  * Fix building against 5.12 on most CIs
  * Update minimum HarfBuzz version to 2.4.0 (QTBUG-88976)
  * Fix building against Qt 5.14
  * Migrate user script IPC to mojo
  * Fix crashes in user resource controller when single process
  * Minor. Fix namespace for user resource controller
  * Minor. RenderThreadObserverQt is really a RenderConfiguration
  * Remove RenderViewObserverHelper from UserResourceController
  * Cache mojo interface bindings to UserResourceControllerRenderFrame
  * Cache mojo interface bindings for WebChannelIPCTransport
  * Migrate render_view_observer_qt to mojo
  * Fix crash on linkedin.com (QTBUG-89740)
  * Suppress error pages also for http errors if they are disabled
  * Fix leak in QQuickWebEngineViewPrivate::contextMenuRequested
  * Register PerformanceNode early enough
  * Quiet log on webrtc usage
  * Remove configure option that doesn't work
  * Remove Java build dependency
  * Fix blank popups in qml (QTBUG-86034)
  * Fix position of popup on qml (QTBUG-86034, QTBUG-89358)
  * Enable hangout services extension (QTBUG-85731)
  * Allow to fallback to default locale for non existent data packs (QTBUG-90490)
  * Support devtools close button
  * Do not extract download file names from certain url schemes (QTBUG-90355)
  * Leave room for the null-termination byte when checking remote drive path
    (QTBUG-90347)
  * Do not set open files limit for linking if not necessary
  * Remove even more remains of non network service code
  * Add back prefers-color-scheme support (QTBUG-89753)
  * Start supporting chrome.resourcesPrivate API (QTBUG-90035)
  * Enable chrome://user-actions WebUI
  * Remove remains of chrome://flash
  * Fix loadFinished signal if page has content but server sends HTTP error
    (QTBUG-90517)
  * Fix devtools page resource loading as raw data instead of html string
  * Remove frame metadata observer (RenderWidgetHostViewQt) on destroy
  * Resolve installed interceptors right before interception point (QTBUG-86286)
  * Update searches faster
  * Remove more leftovers of the old compositor
  * Enable webrtc logging and the corresponding WebUI
  * Support mips64el platform CPU(loongson 3A4000)
  * Add tracing UI resources
  * Fix crash on meet.google.com
  * Fix mad popup qquickwindows on wayland
  * Fix crashes on BrowserContext destruction
  * Fix crash on exit in quicknanobrowser when popup
  * Remove QtPdf dependency on nss at build-time
  * Avoid accessing profileAdapter when profile is shutting down (QTBUG-91187)
  * Do not flush messages form profile destructor
  * Ignore QQuickWebEngineNewViewRequest if it is unhandled
  * Fix ScopedGLContextChecker with QTWEBENGINE_DISABLE_GPU_THREAD=1
  * Don't send duplicate load progress values
  * Fix neon support in libpng
  * Do not call deprecated profile interceptor on ui thread (QTBUG-86267)
  * Add certificate error message for ERR_SSL_OBSOLETE_VERSION
  * Fix assert in WebContentsAdapter::devToolsFrontendDestroyed
  * Avoid to reject a certificate error twice in Quick
  * Fix PDF viewer plugin
  * FIXUP: Fix swap condition in DisplayGLOutputSurface::updatePaintNode
    (QTBUG-86599)
  * Fix favicon engine under device pixel scaling
  * Do not pass a native keycode matching the menu key when it is remapped
    (QTBUG-86672)
  * Optimize WebEngineSettings::testAttribute
  * Warn about QtWebengineProcess launching from network share (QTBUG-84632)
  * Handle non-ascii names for pulseaudio (QTBUG-85363)
  * Do not set audio device for desktop capture if audio loopback is unsupported
  * Fix new view request handling (QTBUG-87378)
  * Fix getDefaultScreenId on X11
  * Touch handling: provide id mapping without modifying TouchPoint instance
    (QTBUG-88001)
  * Set custom headers from QWebEngineUrlRequestInfo before triggering redirect
    (QTBUG-88861)
  * Stabilize load signals emitting (QTBUG-65223)
- CVE fixes backported in chromium updates:
  * CVE-2020-16044: Use after free in WebRTC
  * CVE-2021-21118: Heap buffer overflow in Blink
  * CVE-2021-21119: Use after free in Media
  * CVE-2021-21120: Use after free in WebSQL
  * CVE-2021-21121: Use after free in Omnibox
  * CVE-2021-21122: Use after free in Blink
  * CVE-2021-21123: Insufficient data validation in File System API
  * CVE-2021-21125: Insufficient policy enforcement in File System API
  * CVE-2021-21126: Insufficient policy enforcement in extensions
  * CVE-2021-21127: Insufficient policy enforcement in extensions
  * CVE-2021-21128: Heap buffer overflow in Blink
  * CVE-2021-21129: Insufficient policy enforcement in File System API
  * CVE-2021-21130: Insufficient policy enforcement in File System API
  * CVE-2021-21131: Insufficient policy enforcement in File System API
  * CVE-2021-21132: Inappropriate implementation in DevTools
  * CVE-2021-21135: Inappropriate implementation in Performance API
  * CVE-2021-21137: Inappropriate implementation in DevTools
  * CVE-2021-21140: Uninitialized Use in USB
  * CVE-2021-21141: Insufficient policy enforcement in File System API
  * CVE-2021-21145: Use after free in Fonts
  * CVE-2021-21146: Use after free in Navigation
  * CVE-2021-21147: Inappropriate implementation in Skia
  * CVE-2021-21148: Heap buffer overflow in V8
  * CVE-2021-21149: Stack overflow in Data Transfer
  * CVE-2021-21150: Use after free in Downloads
  * CVE-2021-21152: Heap buffer overflow in Media
  * CVE-2021-21153: Stack overflow in GPU Process
  * CVE-2021-21156: Heap buffer overflow in V8
  * CVE-2021-21157: Use after free in Web Sockets
- Drop obsolete patches:
  * icu-68.patch
  * icu-68-2.patch
- Rebase patches:
  * fix1163766.patch
  * sandbox-statx-futex_time64.patch
  * rtc-dont-use-h264.patch
  * chromium-glibc-2.33.patch
- Add patch to fix crash with certain locales:
  * 0001-Fix-normalization-of-app-locales.patch
- Clean the spec file a bit</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1618315200">- Add back missing part in fix1163766.patch (boo#1184610)</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1618401600">- Update _constraints to avoid OOM</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1618401601">- Add patch to fix build with GCC 11:
  * 0001-Fix-build-with-GCC-11.patch</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1620302400">- Add patch to fix build with ICU 69:
  * 0001-Fix-build-with-system-ICU-69.patch</changelog>
  <changelog author="christophe@krop.fr" date="1624363200">- Update to version 5.15.5:
  * Abort findText also right on explicit navigation request
  * Adapt to new Connections syntax
  * Add devtools eyedropper support
  * Add more tests to tst_loadsignals
  * Add support for Keyboard.getLayoutMap()
  * Add web-ui chrome://net-internals
  * Allow leaving OCSP off
  * Always send phased wheel events beginning with Began
  * Avoid accessing profileAdapter when profile is shutting down
  * Avoid unknownFunc messages in qmltests
  * Blacklist CertificateError::test_error for macOS
  * Blacklist NewViewRequest::test_loadNewViewRequest on macOS
  * Blacklist handleError on macos until we merge the fix
  * Blacklist numberOfStartedAndFinishedSignalsIsSame on b2q CIs
  * Depend on QCoreApplication::startingUp() for checking
    existence of app
  * Do not allow WebBluetooth to continue
  * Do not hide virtual keyboard if the focused node is editable
  * Doc: Add a note about navigation within a page to a fragment
  * Docs: Suggest to use higher DPI for printing
  * Fix FilePickerController's path validation for windows and
    corresponding tests
  * Fix application locales again
  * Fix embedded PDFs when plugins are disabled
  * Fix first party url for cookie filter
  * Fix inconsistent number of load signals and their order
  * Fix normalization of app locales
  * Fix not working certificates on mac &gt; 10.14
  * Fix prl files on ios
  * Fix qmltests::WebEngineViewNavigationHistory auto tests
  * Fix qtpdf static builds on windows
  * Fix static build of qml qtpdf
  * Follow InProcessGpuThread::Init() on thread priority
  * Generate mojo bindings before compiling extension API
    registration
  * Implement PluginServiceFilterQt
  * Load signals test: use focusProxy for link clicking test
  * Make able to override disabled features from command line
  * Notify canGoBack/canGoForward changes based on web actions
  * Only disconnect QWebEnginePage signals that QWebEngineView
    connected
  * Package devtools inspector overlay
  * Remove ResourceTypeSubFrame check after website update
  * Remove obsolete loadSignals test
    secondLoadForError_WhenErrorPageEnabled
  * Remove qquickwebengineprofile test
  * Remove tracking of frame which load error page
  * Remove ui/snapshot overrides for aura
  * Report server directs in navigation type
  * Return to using the default devtools page
  * Set enumaration root directory for File.webkitRelativePath API
  * Set more Display properties
  * Show PDF viewer in a guest view
  * Support devtools close button in QuickNanoBrowser
  * Support zoom-in, zoom-out and cell web cursors on macOS
  * Unblacklist and fix load signals test for file download
  * Update Chromium and adapt PermissionManagerQt
  * Update platform notes
  * View: test signal for deletion of external page set to view
- Drop patches:
  * 0001-Fix-normalization-of-app-locales.patch
  * 0001-Fix-build-with-GCC-11.patch
  * 0001-Fix-build-with-system-ICU-69.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1624536000">- Update the CMake version workaround to get qtbase's real version</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1628078400">- Add patch to fix build with glibc 2.34 (boo#1189095)
  * 0001-Fix-build-with-glibc-2.34.patch</changelog>
  <changelog author="christophe@krop.fr" date="1631188800">- Update to version 5.15.6:
  * Update Chromium:
    + [Backport] CVE-2021-30560: Use after free in Blink XSLT
    + [Backport] CVE-2021-30566: Stack buffer overflow in Printing
    + [Backport] CVE-2021-30585: Use after free in sensor handling
    + Bump V8_PATCH_LEVEL
    + [Backport] Security bug 1228036
    + [Backport] CVE-2021-30604: Use after free in ANGLE
    + [Backport] CVE-2021-30603: Race in WebAudio
    + [Backport] CVE-2021-30602: Use after free in WebRTC
    + [Backport] CVE-2021-30599: Type Confusion in V8
    + [Backport] CVE-2021-30598: Type Confusion in V8
    + [Backport] Security bug 1227933
    + [Backport] Security bug 1205059
    + [Backport] Security bug 1184294
    + [Backport] Security bug 1198385
    + [Backport] CVE-2021-30588: Type Confusion in V8
    + [Backport] CVE-2021-30587: Inappropriate implementation in Compositing on Windows
    + [Backport] CVE-2021-30573: Use after free in GPU
    + [Backport] CVE-2021-30569, security bugs 1198216 and 1204814
    + [Backport] CVE-2021-30568: Heap buffer overflow in WebGL
    + [Backport] CVE-2021-30541: Use after free in V8
    + [Backport] Security bugs 1197786 and 1194330
    + [Backport] Security bug 1194689
    + [Backport] CVE-2021-30563: Type Confusion in V8
    + [Backport] Security bug 1211215
    + [Backport] Security bug 1209558
    + [Backport] CVE-2021-30553: Use after free in Network service
    + [Backport] CVE-2021-30548: Use after free in Loader
    + [Backport] CVE-2021-30547: Out of bounds write in ANGLE
    + [Backport] CVE-2021-30556: Use after free in WebAudio
    + [Backport] CVE-2021-30559: Out of bounds write in ANGLE
    + [Backport] CVE-2021-30533: Insufficient policy enforcement in PopupBlocker
    + [Backport] Security bug 1202534
    + [Backport] CVE-2021-30536: Out of bounds read in V8
    + [Backport] CVE-2021-30522: Use after free in WebAudio
    + [Backport] CVE-2021-30554 Use after free in WebGL
    + [Backport] CVE-2021-30551: Type Confusion in V8
    + [Backport] CVE-2021-30544: Use after free in BFCache
    + [Backport] CVE-2021-30535: Double free in ICU
    + [Backport] CVE-2021-30534: Insufficient policy enforcement in iFrameSandbox
    + [Backport] CVE-2021-30530: Out of bounds memory access in WebAudio
    + [Backport] CVE-2021-30523: Use after free in WebRTC
    + Generate mojo bindings before compiling extension API registration
  * Bump version from 5.15.5 to 5.15.6
  * Always send phased wheel events beginning with Began
- Import patch from the chromium package:
  * 0001-return-ENOSYS-for-clone3.patch
- Add changes from the chromium package to
  0001-Fix-build-with-glibc-2.34.patch</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1632225600">- Add patches from Arch to fix build with HarfBuzz 3.0.0:
  * chromium-harfbuzz-3.0.0.patch
  * skia-harfbuzz-3.0.0.patch
- ... but don't break with &lt; 2.9.0:
  * chromium-older-harfbuzz.patch</changelog>
  <changelog author="christophe@krop.fr" date="1635508800">- Update to version 5.15.7:
  * Update Chromium:
    [Backport] Linux sandbox: update syscalls numbers on 32-bit platforms
    [Backport] sandbox: linux: allow clock_nanosleep &amp; gettime64
    [Backport] Linux sandbox: update syscall numbers for all platforms.
    [Backport] Ease HarfBuzz API change with feature detection
    [Backport] Security bug 1248665
    [Backport] CVE-2021-37975 : Use after free in V8
    [Backport] CVE-2021-37980 : Inappropriate implementation in Sandbox
    [Backport] CVE-2021-37979 : Heap buffer overflow in WebRTC (2/2)
    [Backport] CVE-2021-37979 : Heap buffer overflow in WebRTC (1/2)
    [Backport] CVE-2021-37978 : Heap buffer overflow in Blink
    [Backport] CVE-2021-30616: Use after free in Media.
    [Backport] CVE-2021-37962 : Use after free in Performance Manager (2/2)
    [Backport] CVE-2021-37962 : Use after free in Performance Manager (1/2)
    [Backport] CVE-2021-37973 : Use after free in Portals
    [Backport] CVE-2021-37971 : Incorrect security UI in Web Browser UI.
    [Backport] CVE-2021-37968 : Inappropriate implementation in Background Fetch API
    [Backport] CVE-2021-37967 : Inappropriate implementation in Background Fetch API
    [Backport] Linux sandbox: return ENOSYS for clone3
    [Backport] Linux sandbox: fix fstatat() crash
    [Backport] Reland "Reland "Linux sandbox syscall broker: use struct kernel_stat""
    [Backport] Security bug 1238178 (2/2)
    [Backport] Security bug 1238178 (1/2)
    [Backport] CVE-2021-30633: Use after free in Indexed DB API (2/2)
    [Backport] CVE-2021-30633: Use after free in Indexed DB API (1/2)
    [Backport] CVE-2021-30630: Inappropriate implementation in Blink
    [Backport] CVE-2021-30629: Use after free in Permissions
    [Backport] CVE-2021-30628: Stack buffer overflow in ANGLE
    [Backport] CVE-2021-30627: Type Confusion in Blink layout
    [Backport] CVE-2021-30626: Out of bounds memory access in ANGLE
    [Backport] CVE-2021-30625: Use after free in Selection API
    [Backport] Security bug 1206289
    [Backport] CVE-2021-30613: Use after free in Base internals
    [Backport] Security bug 1227228
    [Backport] CVE-2021-30618: Inappropriate implementation in DevTools
  * Update patch level
  * Blacklist certificate test until certicates have been renewed
  * Block CORS from local URLs when remote access is not enabled
  * Do not wait on weak_pointer for termination errors
  * Support MSVC_VER 16.8
  * Fix wrong save file filter for Markdown Editor example
  * Add Chromium version source documentation
  * Bump version from 5.15.6 to 5.15.7
  * Fix crash when clicking on a link in PDF
- Drop openSUSE patches:
  * fix1163766.patch. Should be addressed with:
    https://github.com/qt/qtwebengine-chromium/commit/652f834de
    https://github.com/qt/qtwebengine-chromium/commit/faae106ed
    https://github.com/qt/qtwebengine-chromium/commit/6b7b3f1bf
  * chromium-glibc-2.33.patch. Should be addressed with the
    [Backport] Linux sandbox: fix fstatat() crash and
    Reland "Reland "Linux sandbox syscall broker: use struct kernel_stat""
    changes.
  * chromium-older-harfbuzz.patch
- Drop upstream changes:
  * 0001-return-ENOSYS-for-clone3.patch
  * chromium-harfbuzz-3.0.0.patch
  * skia-harfbuzz-3.0.0.patch
- Rebase patches:
  * sandbox-statx-futex_time64.patch</changelog>
  <changelog author="christophe@krop.fr" date="1641297600">- Update to version 5.15.8:
  * Update Chromium:
    [Backport] CVE-2021-3517: libxml2: Heap-based buffer overflow
    in xmlEncodeEntitiesInternal() in entities.c
    [Backport] CVE-2021-3541 libxml2: Exponential entity expansion
    attack bypasses all existing protection mechanisms
    [Backport] CVE-2021-37984 : Heap buffer overflow in PDFium
    [Backport] CVE-2021-37987 : Use after free in Network APIs
    [Backport] CVE-2021-37989 : Inappropriate implementation in Blink
    [Backport] CVE-2021-37992 : Out of bounds read in WebAudio
    [Backport] CVE-2021-37993 : Use after free in PDF Accessibility
    [Backport] CVE-2021-37996 : Insufficient validation of untrusted
    input in Downloads
    [Backport] CVE-2021-38001 : Type Confusion in V8
    [Backport] CVE-2021-38003 : Inappropriate implementation in V8
    [Backport] CVE-2021-38005: Use after free in loader (1/3)
    [Backport] CVE-2021-38005: Use after free in loader (2/3)
    [Backport] CVE-2021-38005: Use after free in loader (3/3)
    [Backport] CVE-2021-38007: Type Confusion in V8
    [Backport] CVE-2021-38009: Inappropriate implementation in cache
    [Backport] CVE-2021-38010: Inappropriate implementation in serviceworkers
    [Backport] CVE-2021-38012: Type Confusion in V8
    [Backport] CVE-2021-38015: Inappropriate implementation in input
    [Backport] CVE-2021-38017: Insufficient policy enforcement in iframe
    sandbox
    [Backport] CVE-2021-38018: Inappropriate implementation in navigation
    [Backport] CVE-2021-38019: Insufficient policy enforcement in CORS
    [Backport] CVE-2021-38021: Inappropriate implementation in referrer
    [Backport] CVE-2021-38022: Inappropriate implementation in WebAuthentication
    [Backport] CVE-2021-4057: Use after free in file API
    [Backport] CVE-2021-4058: Heap buffer overflow in ANGLE (1/2)
    [Backport] CVE-2021-4058: Heap buffer overflow in ANGLE (2/2)
    [Backport] CVE-2021-4059: Insufficient data validation in loader
    [Backport] CVE-2021-4062: Heap buffer overflow in BFCache
    [Backport] CVE-2021-4078: Type confusion in V8
    [Backport] CVE-2021-4079: Out of bounds write in WebRTC
    [Backport] CVE-2021-4098: Insufficient data validation in Mojo
    [Backport] CVE-2021-4099: Use after free in Swiftshader
    [Backport] CVE-2021-4101: Heap buffer overflow in Swiftshader.
    [Backport] CVE-2021-4102: Use after free in V8
    [Backport] Dependency for CVE-2021-37989
    [Backport] Dependency for CVE-2021-38009
    [Backport] Security bug 1245870
    [Backport] Security bug 1252858
    [Backport] Security bug 1259899
    Bump V8_PATCH_LEVEL
    Compile with GCC 11 -std=c++20
    Fix stack overflow on gpu channel recreate with an error
    Use wglSetPixelFormat directly only if in software mode
    [Backport] Handle long SIGSTKSZ in glibc &gt; 2.33
    [Backport] abseil-cpp: Fixes build with latest glibc
  * Handle qtpdf compilation with static runtime
  * Add bitcode support for qtpdf on ios
  * Do not access accessibility from qt post routines
  * Blacklist javascriptClipboard test on ubuntu 20.04
  * Re-enable network-service-in-process
  * Bump version from 5.15.7 to 5.15.8
  * Update patch level
  * Fix pinch gesture
  * Fix leak of properties after XkbRF_GetNamesProp
  * Fix leak on getDefaultScreeenId
- Drop patch:
  * 0001-Fix-build-with-glibc-2.34.patch</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1648209600">- Add patch to fix build with GCC 12:
  * 0001-skia-Some-includes-to-fix-build-with-GCC-12.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1649073600">- Add security fixes:
  * CVE-2022-0971-qtwebengine-5.15.patch (CVE-2022-0971, boo#1197163)
  * CVE-2022-1096-qtwebengine-5.15.patch (CVE-2022-1096, boo#1197552)</changelog>
  <changelog author="christophe@krop.fr" date="1649246400">- Update to version 5.15.9:
  * QPdfView: scale page rendering according to devicePixelRatio
  * Update documented Chromium version
  * Use IsSameDocument() rather than IsLoadingToDifferentDocument()
  * Update module-split for installer
  * Fix printing PDF files
  * Do not override signal handlers
  * Avoid using xkbcommon in non-X11 builds
  * Update documentation
  * Update Chromium:
  * Bump V8_PATCH_LEVEL
  * Do not overwrite signal handlers in the browser process.
  * Replace base::ranges::set_union with std::set_union to fix
    MSVC2017 build
  * [Backport] CVE-2022-0100: Heap buffer overflow in Media
    streams API
  * [Backport] CVE-2022-0102: Type Confusion in V8
  * [Backport] CVE-2022-0103: Use after free in SwiftShader
  * [Backport] CVE-2022-0104: Heap buffer overflow in ANGLE
  * [Backport] CVE-2022-0108: Inappropriate implementation
    in Navigation
  * [Backport] CVE-2022-0109: Inappropriate implementation
    in Autofill
  * [Backport] CVE-2022-0111 and CVE-2022-0117
  * [Backport] CVE-2022-0113: Inappropriate implementatio
    n in Blink
  * [Backport] CVE-2022-0116: Inappropriate implementation
    in Compositing
  * [Backport] CVE-2022-0289: Use after free in Safe browsing
  * [Backport] CVE-2022-0291: Inappropriate implementation
    in Storage
  * [Backport] CVE-2022-0293: Use after free in Web packaging
  * [Backport] CVE-2022-0298: Use after free in Scheduling
  * [Backport] CVE-2022-0305: Inappropriate implementation in
    Service Worker API
  * [Backport] CVE-2022-0306: Heap buffer overflow in PDFium
  * [Backport] CVE-2022-0310 and CVE-0311: Heap buffer overflow
    in Task Manager
  * [Backport] CVE-2022-0456: Use after free in Web Search
  * [Backport] CVE-2022-0459: Use after free in Screen Capture
  * [Backport] CVE-2022-0460: Use after free in Window Dialog
  * [Backport] CVE-2022-0461: Policy bypass in COOP
  * [Backport] CVE-2022-0606: Use after free in ANGLE
  * [Backport] CVE-2022-0607: Use after free in GPU
  * [Backport] CVE-2022-0608: Integer overflow in Mojo
  * [Backport] CVE-2022-0609: Use after free in Animation
  * [Backport] CVE-2022-0610: Inappropriate implementation
    in Gamepad API
  * [Backport] CVE-2022-0971 (boo#1197163)
  * [Backport] CVE-2022-1096 (boo#1197552)
  * [Backport] CVE-2022-23852
  * [Backport] Copy 'name_' member during StyleRuleProperty::Copy
  * [Backport] Security bug 1256885
  * [Backport] Security bug 1258603
  * [Backport] Security bug 1259557
  * [Backport] Security bug 1261415
  * [Backport] Security bug 1265570
  * [Backport] Security bug 1268448
  * [Backport] Security bug 1270014
  * [Backport] Security bug 1274113
  * [Backport] Security bug 1276331
  * [Backport] Security bug 1280743
  * [Backport] Security bug 1289394
  * [Backport] Security bug 1292537
  * [Backport] sandbox: build if glibc 2.34+ dynamic stack size
    is enabled
- Drop patches, now upstream:
  * CVE-2022-0971-qtwebengine-5.15.patch
  * CVE-2022-1096-qtwebengine-5.15.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1651060800">- Add libqt5-qtwebengine-rpmlintrc to silence the
  'shlib-policy-name-error' rpmlint error</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1651492800">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1654689600">- Update to version 5.15.10:
  * Fix top level build with no widget
  * Fix read-after-free on EGL extensions
  * Update Chromium
  * Add workaround for unstable gn on macOS in ci
  * Pass archiver to gn build
  * Fix navigation to non-local URLs
  * Add support for universal builds for qtwebengine and qtpdf
  * Enable Apple Silicon support
  * Fix cross compilation x86_64-&gt;arm64 on mac
  * Bump version to 5.15.10
  * CustomDialogs: Make custom input fields readable in dark mode
  * CookieBrowser: Make alternating rows readable in dark mode
  * Update Chromium:
  * Bump V8_PATCH_LEVEL
  * Fix clang set-but-unused-variable warning
  * Fix mac toolchain python linker script call
  * Fix missing dependency for gpu sources
  * Fix python calls
  * Fix undefined symbol for universal link
  * Quick fix for regression in service workers by reverting
    backports
  * [Backport] CVE-2022-0797: Out of bounds memory access
    in Mojo
  * [Backport] CVE-2022-1125
  * [Backport] CVE-2022-1138: Inappropriate implementation
    in Web Cursor.
  * [Backport] CVE-2022-1305: Use after free in storage
  * [Backport] CVE-2022-1310: Use after free in regular
    expressions
  * [Backport] CVE-2022-1314: Type Confusion in V8
  * [Backport] CVE-2022-1493: Use after free in Dev Tools
  * [Backport] On arm64 hosts, set host_cpu to 'arm64', not 'arm'
  * [Backport] Security Bug 1296876
  * [Backport] Security bug 1269999
  * [Backport] Security bug 1280852
  * [Backport] Security bug 1292905
  * [Backport] Security bug 1304659
  * [Backport] Security bug 1306507</changelog>
</package>
<package pkgid="8857101208f4bc2c32cc434d2f78c65472087b834cdaae2eaa4d40aea935ef93" name="libSoQt20" arch="aarch64">
  <version epoch="0" ver="1.6.0" rel="bp154.2.3.1"/>
  <changelog author="malcolmlewis@opensuse.org" date="1288958400">- Spec file fixes based on rpmlint report</changelog>
  <changelog author="adrian@suse.de" date="1467720000">- update to version 1.5.0
- use Qt4 instead of Qt3 ....</changelog>
  <changelog author="jengelh@inai.de" date="1470225600">- Rectify RPM groups. Use smp_mflags for parallel building.
  Drop redundant export CFLAGS lines. Rename %soname to %sover
  because it did not contain the soname.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1539086400">- Cleanup spec file:
  - move soqt-default.cfg to devel package, it is only used by soqt-config
  - make doc subpackage noarch
  - use %_docdir</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1557144000">- update to current snapshot
- fix URL, old coin3d.org site has been shut down
- using cmake build system now</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1557748800">- Run spec-cleaner
- Install the license file
- Add 0001-Use-a-Find-module-to-find-older-Coin-versions.patch
  This will allow using the stable Coin package to build the SoQt
  snapshot.
- Drop fix-cmake-install.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1557748801">- Drop invalid requires of doc sub package</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1574683200">- Fix invalid Requires: in pkgconfig file, replace Qt(4) with Qt5.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1615204800">- update to final 1.6.0:
  * see https://raw.githubusercontent.com/coin3d/soqt/SoQt-1.6.0/NEWS</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1645531200">- Adapt for Coin4, remove
  0001-Use-a-Find-module-to-find-older-Coin-versions.patch
- Fix License, SoQt since 1.6.0 is BSD-3-Clause
- Drop irrelevant SoQt-man3.patch</changelog>
</package>
<package pkgid="b3a02e64b75ce8be25cd7bf4179738374cc09fd372a45f2b254c71d96db3f84b" name="libSoQt20" arch="ppc64le">
  <version epoch="0" ver="1.6.0" rel="bp154.2.3.1"/>
  <changelog author="malcolmlewis@opensuse.org" date="1288958400">- Spec file fixes based on rpmlint report</changelog>
  <changelog author="adrian@suse.de" date="1467720000">- update to version 1.5.0
- use Qt4 instead of Qt3 ....</changelog>
  <changelog author="jengelh@inai.de" date="1470225600">- Rectify RPM groups. Use smp_mflags for parallel building.
  Drop redundant export CFLAGS lines. Rename %soname to %sover
  because it did not contain the soname.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1539086400">- Cleanup spec file:
  - move soqt-default.cfg to devel package, it is only used by soqt-config
  - make doc subpackage noarch
  - use %_docdir</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1557144000">- update to current snapshot
- fix URL, old coin3d.org site has been shut down
- using cmake build system now</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1557748800">- Run spec-cleaner
- Install the license file
- Add 0001-Use-a-Find-module-to-find-older-Coin-versions.patch
  This will allow using the stable Coin package to build the SoQt
  snapshot.
- Drop fix-cmake-install.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1557748801">- Drop invalid requires of doc sub package</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1574683200">- Fix invalid Requires: in pkgconfig file, replace Qt(4) with Qt5.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1615204800">- update to final 1.6.0:
  * see https://raw.githubusercontent.com/coin3d/soqt/SoQt-1.6.0/NEWS</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1645531200">- Adapt for Coin4, remove
  0001-Use-a-Find-module-to-find-older-Coin-versions.patch
- Fix License, SoQt since 1.6.0 is BSD-3-Clause
- Drop irrelevant SoQt-man3.patch</changelog>
</package>
<package pkgid="a8fab9c60d1d7d0549afac0855a0f6ed71505321fb191aa0160a97f108ce2728" name="libSoQt20" arch="s390x">
  <version epoch="0" ver="1.6.0" rel="bp154.2.3.1"/>
  <changelog author="malcolmlewis@opensuse.org" date="1288958400">- Spec file fixes based on rpmlint report</changelog>
  <changelog author="adrian@suse.de" date="1467720000">- update to version 1.5.0
- use Qt4 instead of Qt3 ....</changelog>
  <changelog author="jengelh@inai.de" date="1470225600">- Rectify RPM groups. Use smp_mflags for parallel building.
  Drop redundant export CFLAGS lines. Rename %soname to %sover
  because it did not contain the soname.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1539086400">- Cleanup spec file:
  - move soqt-default.cfg to devel package, it is only used by soqt-config
  - make doc subpackage noarch
  - use %_docdir</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1557144000">- update to current snapshot
- fix URL, old coin3d.org site has been shut down
- using cmake build system now</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1557748800">- Run spec-cleaner
- Install the license file
- Add 0001-Use-a-Find-module-to-find-older-Coin-versions.patch
  This will allow using the stable Coin package to build the SoQt
  snapshot.
- Drop fix-cmake-install.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1557748801">- Drop invalid requires of doc sub package</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1574683200">- Fix invalid Requires: in pkgconfig file, replace Qt(4) with Qt5.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1615204800">- update to final 1.6.0:
  * see https://raw.githubusercontent.com/coin3d/soqt/SoQt-1.6.0/NEWS</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1645531200">- Adapt for Coin4, remove
  0001-Use-a-Find-module-to-find-older-Coin-versions.patch
- Fix License, SoQt since 1.6.0 is BSD-3-Clause
- Drop irrelevant SoQt-man3.patch</changelog>
</package>
<package pkgid="a26fa94e660fb42a4a1ba89f9ccba9508f7baa842b7693384299589bfb749221" name="libSoQt20" arch="x86_64">
  <version epoch="0" ver="1.6.0" rel="bp154.2.3.1"/>
  <changelog author="malcolmlewis@opensuse.org" date="1288958400">- Spec file fixes based on rpmlint report</changelog>
  <changelog author="adrian@suse.de" date="1467720000">- update to version 1.5.0
- use Qt4 instead of Qt3 ....</changelog>
  <changelog author="jengelh@inai.de" date="1470225600">- Rectify RPM groups. Use smp_mflags for parallel building.
  Drop redundant export CFLAGS lines. Rename %soname to %sover
  because it did not contain the soname.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1539086400">- Cleanup spec file:
  - move soqt-default.cfg to devel package, it is only used by soqt-config
  - make doc subpackage noarch
  - use %_docdir</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1557144000">- update to current snapshot
- fix URL, old coin3d.org site has been shut down
- using cmake build system now</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1557748800">- Run spec-cleaner
- Install the license file
- Add 0001-Use-a-Find-module-to-find-older-Coin-versions.patch
  This will allow using the stable Coin package to build the SoQt
  snapshot.
- Drop fix-cmake-install.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1557748801">- Drop invalid requires of doc sub package</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1574683200">- Fix invalid Requires: in pkgconfig file, replace Qt(4) with Qt5.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1615204800">- update to final 1.6.0:
  * see https://raw.githubusercontent.com/coin3d/soqt/SoQt-1.6.0/NEWS</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1645531200">- Adapt for Coin4, remove
  0001-Use-a-Find-module-to-find-older-Coin-versions.patch
- Fix License, SoQt since 1.6.0 is BSD-3-Clause
- Drop irrelevant SoQt-man3.patch</changelog>
</package>
<package pkgid="3445a85e60b0493e3169b3dd14ffcd50485d034ef956e39c188c54ec03bdba7b" name="libasn1-8" arch="aarch64">
  <version epoch="0" ver="7.8.0" rel="bp154.2.4.1"/>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1440936000">- Initial package, version 1.6rc2
- Added patch heimdal-version-script-client.map.patch to add file
  version-script-client.map (File is present in git for tag 1.6rc2
  but missing in tarball).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441108800">- Some changes in spec file to enable build for SLES.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441195200">- Added Conflicts tags to spec file because devel package conflicts
  with krb5-devel and krb5-mini-devel.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441454400">- Added a patched instead of the original tarball because only
  shared libraries will be build and source files of these (not to
  be build) programs have problematic licenses.
- Added script heimdal-patch-source.sh to sources.
- Added patch heimdal-patched.diff that fixes configure.ac and
  several Makefile.am files to successfully build patched source.
- Removed unneeded dependencies in spec file for build.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1483790400">- Update to version 7.1.0
- Removed heimdal-version-script-client.map.patch, fixed upstream.
- Fixed heimdal-patched.diff.
- Unfortunately there is no updated changelog file in tarball,
  changes can be seen in source code version control systems
  history log.</changelog>
  <changelog author="jengelh@inai.de" date="1486036800">- Summary and RPM group update. Do a direct call to ldconfig
  where possible.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1497528000">- Update to version 7.3.0
  - Security
    + Fix transit path validation. Commit f469fc6 (2010-10-02)
    inadvertently caused the previous hop realm to not be added
    to the transit path of issued tickets. This may, in some
    cases, enable bypass of capath policy in Heimdal versions 1.5
    through 7.2.
    Note, this may break sites that rely on the bug. With the bug
    some incomplete [capaths] worked, that should not have.
    These may now break authentication in some cross-realm
    configurations. (CVE-2017-6594)
- Version 7.2.0
  - Bug fixes
    + Portability improvements.
    + More strict parsing of encoded URI components in HTTP KDC.
    + Fixed memory leak in malloc error recovery in NTLM GSSAPI
    mechanism.
    + Avoid overly specific CPU info in krb5-config in aid of
    reproducible builds.
    + Don't do AFS string-to-key tests when feature is disabled.
    + Skip mdb_stat test when the command is not available.
    + Windows: update SHA2 timestamp server.
    + hdb: add missing export
    hdb_generate_key_set_password_with_ks_tuple.
    + Fix signature of hdb_generate_key_set_password().
    + Windows: enable KX509 support in the KDC.
    + kdc: fix kx509 service principal match.
    + iprop: handle case where master sends nothing new.
    + ipropd-slave: fix incorrect error codes.
    + Allow choice of sqlite for HDB pref.
    + check-iprop: don't fail to kill daemons.
    + roken: pidfile -&gt; rk_pidfile.
    + kdc: _kdc_do_kx509 fix use after free error.
    + Do not detect x32 as 64-bit platform.
    + No sys/ttydefaults.h on CYGWIN.
    + Fix check-iprop races.
    + roken_detach_prep() close pipe.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1501761600">- Update to version 7.4.0
  - Security
  - Fix CVE-2017-11103: Orpheus' Lyre KDC-REP service name
    validation.
    This is a critical vulnerability.
    In _krb5_extract_ticket() the KDC-REP service name must be
    obtained from encrypted version stored in 'enc_part' instead
    of the unencrypted version stored in 'ticket'.
    Use of the unecrypted version provides an opportunity for
    successful server impersonation and other attacks.
    Identified by Jeffrey Altman, Viktor Duchovni and
    Nico Williams.
    See https://www.orpheus-lyre.info/ for more details.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1512648000">- Added Avoid_NULL_structure_pointer_member_dereference.patch,
  fixes (bsc#1071675).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1514548800">- Update to version 7.5.0
  - Security
  - Fix CVE-2017-17439, which is a remote denial of service
    vulnerability:
    In Heimdal 7.1 through 7.4, remote unauthenticated attackers
    are able to crash the KDC by sending a crafted UDP packet
    containing empty data fields for client name or realm.
  - Bug fixes
  - Handle long input lines when reloading database dumps.
  - In pre-forked mode (default on Unix), correctly clear the
    process ids of exited children, allowing new child processes
    to replace the old.
  - Fixed incorrect KDC response when no-cross realm TGT exists,
    allowing client requests to fail quickly rather than time
    out after trying to get a correct answer from each KDC.
- Fixed heimdal-patched.diff.
- Removed Avoid_NULL_structure_pointer_member_dereference.patch,
  fixed upstream.</changelog>
  <changelog author="bwiedemann@suse.com" date="1533643200">- Add reproducible.patch to override build date (boo#1047218)
- Use constant hostname (boo#1084909)</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1561291200">- Update to version 7.7.0
  + Bug fixes:
  - PKCS#11 hcrypto back-end:
    + initialize the p11_module_load function list
    + verify that not only is a mechanism present but that its
    mechanism info states that it offers the required
    encryption, decryption or digest services
  - krb5:
    + Starting with 7.6, Heimdal permitted requesting
    authenticated anonymous tickets. However, it did not
    verify that a KDC in fact returned an anonymous ticket
    when one was requested.
    + Cease setting the KDCOption reaquest_anonymous flag when
    issuing S4UProxy (constrained delegation) TGS requests.
    + when the Win2K PKINIT compatibility option is set, do not
    require krbtgt otherName to match when validating KDC
    certificate.
    + set PKINIT_BTMM flag per Apple implementation
    + use memset_s() instead of memset()
  - kdc:
    + When generating KRB5SignedPath in the AS, use the reply
    client name rather than the one from the request, so
    validation will work correctly in the TGS.
    + allow checksum of PA-FOR-USER to be HMAC_MD5. Even if TGT
    used an enctype with a different checksum. Per [MS-SFU]
    2.2.1 PA-FOR-USER the checksum is always HMAC_MD5, and
    that's what Windows and MIT clients send.
    In Heimdal both the client and kdc use instead the
    checksum of the TGT, and therefore work with each other
    but Windows and MIT clients fail against Heimdal KDC.
    Both Windows and MIT KDC would allow any keyed checksum
    to be used so Heimdal client work fine against it.
    Change Heimdal KDC to allow HMAC_MD5 even for non RC4
    based TGT in order to support per-spec clients.
    + use memset_s() instead of memset()
    + Detect Heimdal 1.0 through 7.6 clients that issue
    S4UProxy (constrained delegation) TGS Requests with the
    request anonymous flag set. These requests will be
    treated as S4UProxy requests and not anonymous requests.
  - HDB:
    + Set SQLite3 backend default page size to 8KB.
    + Add hdb_set_sync() method
  - kadmind:
    + disable HDB sync during database load avoiding
    unnecessary disk i/o.
  - ipropd:
    + disable HDB sync during receive_everything. Doing an
    fsync per-record when receiving the complete HDB is a
    performance disaster. Among other things, if the HDB is
    very large, then one slave receving a full HDB can cause
    other slaves to timeout and, if HDB write activity is
    high enough to cause iprop log truncation, then also need
    full syncs, which leads to a cycle of full syncs for all
    slaves until HDB write activity drops.
    Allowing the iprop log to be larger helps, but improving
    receive_everything() performance helps even more.
  - kinit:
    + Anonymous PKINIT tickets discard the realm information
    used to locate the issuing AS. Store the issuing realm in
    the credentials cache in order to locate a KDC which can
    renew them.
    + Do not leak the result of krb5_cc_get_config() when
    determining anonymous PKINIT start realm.
  - klist:
    + Show transited-policy-checked, ok-as-delegate and
    anonymous flags when listing credentials.
  - tests:
    + Regenerate certs so that they expire before the 2038
    armageddon so the test suite will pass on 32-bit
    operating systems until the underlying issues can be
    resolved.
  - Solaris:
    + Define _STDC_C11_BCI for memset_s prototype
  - build tooling:
    + Convert from python 2 to python 3
  - documentation:
    + rename verify-password to verify-password-quality
    + hprop default mode is encrypt
    + kadmind "all" permission does not include "get-keys"
    + verify-password-quality might not be stateless
- Version 7.6.0
  + Security (#555):
  - CVE-2018-16860 Heimdal KDC: Reject PA-S4U2Self with unkeyed
    checksum
    When the Heimdal KDC checks the checksum that is placed on
    the S4U2Self packet by the server to protect the requested
    principal against modification, it does not confirm that
    the checksum algorithm that protects the user name
    (principal) in the request is keyed. This allows a
    man-in-the-middle attacker who can intercept the request to
    the KDC to modify the packet by replacing the user name
    (principal) in the request with any desired user name
    (principal) that exists in the KDC and replace the checksum
    protecting that name with a CRC32 checksum (which requires
    no prior knowledge to compute).
    This would allow a S4U2Self ticket requested on behalf of
    user name (principal) user@EXAMPLE.COM to any service to be
    changed to a S4U2Self ticket with a user name (principal) of
    Administrator@EXAMPLE.COM. This ticket would then contain
    the PAC of the modified user name (principal).
  - CVE-2019-12098, client-only:
    RFC8062 Section 7 requires verification of the PA-PKINIT-KX
    key exchange when anonymous PKINIT is used. Failure to do
    so can permit an active attacker to become a
    man-in-the-middle.
  + Bug fixes:
  - Happy eyeballs: Don't wait for responses from
    known-unreachable KDCs.
  - kdc:
    + check return copy_Realm, copy_PrincipalName,
    copy_EncryptionKey
  - kinit:
    + cleanup temporary ccaches
    + see man page for "kinit --anonymous" command line syntax
    change
  - kdc:
    + Make anonymous AS-requests more RFC8062-compliant.
    Updated expired test certificates
  - Solaris:
    + PKCS#11 hcrypto backend broken since 7.0.1
    + Building with Sun Pro C
  + Features:
  - kuser: support authenticated anonymous AS-REQs in kinit
  - kdc: support for anonymous TGS-REQs
  - kgetcred support for anonymous service tickets
  - Support builds with OpenSSL 1.1.1
- fixed heimdal-patched.diff and reproducible.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1653480000">- Apply Shared Library Packaging Policy and resolve rpmlint
  errors like "libheimdal.x86_64: E: shlib-policy-name-error
  SONAME: libasn1.so.8, expected package suffix: 8"</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656417600">- Add heimdal-7.7.0-autoconf-2.70.patch: Fix build with autoconf
  2.70 (gh#heimdal/heimdal#856).</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656590400">- Add ldconfig scriptlets.
- Fix 'Conflicts:' tags.
- Remove obsolete macros and conditionals.
- Ran spec-cleaner.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1671624000">- Update to version 7.8.0
  + This release includes both the Heimdal 7.7.1 Security
    Vulnerability fixes and non-Security bug fixes/improvements.
  + Security Vulnerabilities:
  - CVE-2022-42898 PAC parse integer overflows
  - CVE-2022-3437 Overflows and non-constant time leaks in
    DES{,3} and arcfour
  - CVE-2022-41916 Fix Unicode normalization read of 1 bytes past
    end of array
  - CVE-2021-44758 A null pointer de-reference DoS in SPNEGO
    acceptors
  - CVE-2021-3671 A null pointer de-reference when handling
    missing sname in TGS-REQ
  - CVE-2022-44640 Heimdal KDC: invalid free in ASN.1 codec
    Note that CVE-2022-44640 is a severe vulnerability,
    possibly a 10.0 on the Common Vulnerability Scoring
    System (CVSS) v3, as we believe it should be possible to
    get an RCE on a KDC, which means that credentials can be
    compromised that can be used to impersonate anyone in a
    realm or forest of realms.
    Heimdal's ASN.1 compiler generates code that allows
    specially crafted DER encodings of CHOICEs to invoke the
    wrong free function on the decoded structure upon decode
    error. This is known to impact the Heimdal KDC, leading to
    an invalid free() of an address partly or wholly under the
    control of the attacker, in turn leading to a potential
    remote code execution (RCE) vulnerability.
    This error affects the DER codec for all extensible CHOICE
    types used in Heimdal, though not all cases will be
    exploitable. We have not completed a thorough analysis of
    all the Heimdal components affected, thus the Kerberos
    client, the X.509 library, and other parts, may be affected
    as well.
    This bug has been in Heimdal's ASN.1 compiler since 2005,
    but it may only affect Heimdal 1.6 and up. It was first
    reported by Douglas Bagnall, though it had been found
    independently by the Heimdal maintainers via fuzzing a few
    weeks earlier.
    While no zero-day exploit is known, such an exploit will
    likely be available soon after public disclosure.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  + Other changes:
  - Bugs found by UBSAN (including the incorrect encoding of
    unconstrained INTEGER value -1).
  - Errors found by the LLVM scan-build static analyzer.
  - Errors found by the valgrind memory debugger.
  - Work around GCC Bug 95189 (memcmp wrongly stripped like
    strcmp).
  - Correct ASN.1 OID typo for SHA-384
  - Fix a deadlock in in the MEMORY ccache type.
  - TGS: strip forwardable and proxiable flags if the server is
    disallowed.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  - Incremental HDB propagation improvements
    Refactor send_diffs making it progressive
    Handle partial writes on non-blocking sockets
    Disable Nagle in iprop master and slave
    Use async I/O
    Don't send I_HAVE in response to AYT
    Do not recover log in kadm5_get_principal()
    Don't send diffs to slaves with not yet known version
    Don't stutter in send_diffs
  - Optional backwards-compatible anon-pkinit behavior
- Removed heimdal-7.7.0-autoconf-2.70.patch, fixed upstream.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1673352000">- replace libheimdal conflicts by obsoletes / provides to provide a
  smooth update in the new libheimdal-devel.</changelog>
</package>
<package pkgid="d3ba81e0b386406c8a3d17d57d0280760808dde36cfa0ae5ef668341df63c792" name="libasn1-8" arch="i586">
  <version epoch="0" ver="7.8.0" rel="bp154.2.4.1"/>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1440936000">- Initial package, version 1.6rc2
- Added patch heimdal-version-script-client.map.patch to add file
  version-script-client.map (File is present in git for tag 1.6rc2
  but missing in tarball).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441108800">- Some changes in spec file to enable build for SLES.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441195200">- Added Conflicts tags to spec file because devel package conflicts
  with krb5-devel and krb5-mini-devel.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441454400">- Added a patched instead of the original tarball because only
  shared libraries will be build and source files of these (not to
  be build) programs have problematic licenses.
- Added script heimdal-patch-source.sh to sources.
- Added patch heimdal-patched.diff that fixes configure.ac and
  several Makefile.am files to successfully build patched source.
- Removed unneeded dependencies in spec file for build.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1483790400">- Update to version 7.1.0
- Removed heimdal-version-script-client.map.patch, fixed upstream.
- Fixed heimdal-patched.diff.
- Unfortunately there is no updated changelog file in tarball,
  changes can be seen in source code version control systems
  history log.</changelog>
  <changelog author="jengelh@inai.de" date="1486036800">- Summary and RPM group update. Do a direct call to ldconfig
  where possible.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1497528000">- Update to version 7.3.0
  - Security
    + Fix transit path validation. Commit f469fc6 (2010-10-02)
    inadvertently caused the previous hop realm to not be added
    to the transit path of issued tickets. This may, in some
    cases, enable bypass of capath policy in Heimdal versions 1.5
    through 7.2.
    Note, this may break sites that rely on the bug. With the bug
    some incomplete [capaths] worked, that should not have.
    These may now break authentication in some cross-realm
    configurations. (CVE-2017-6594)
- Version 7.2.0
  - Bug fixes
    + Portability improvements.
    + More strict parsing of encoded URI components in HTTP KDC.
    + Fixed memory leak in malloc error recovery in NTLM GSSAPI
    mechanism.
    + Avoid overly specific CPU info in krb5-config in aid of
    reproducible builds.
    + Don't do AFS string-to-key tests when feature is disabled.
    + Skip mdb_stat test when the command is not available.
    + Windows: update SHA2 timestamp server.
    + hdb: add missing export
    hdb_generate_key_set_password_with_ks_tuple.
    + Fix signature of hdb_generate_key_set_password().
    + Windows: enable KX509 support in the KDC.
    + kdc: fix kx509 service principal match.
    + iprop: handle case where master sends nothing new.
    + ipropd-slave: fix incorrect error codes.
    + Allow choice of sqlite for HDB pref.
    + check-iprop: don't fail to kill daemons.
    + roken: pidfile -&gt; rk_pidfile.
    + kdc: _kdc_do_kx509 fix use after free error.
    + Do not detect x32 as 64-bit platform.
    + No sys/ttydefaults.h on CYGWIN.
    + Fix check-iprop races.
    + roken_detach_prep() close pipe.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1501761600">- Update to version 7.4.0
  - Security
  - Fix CVE-2017-11103: Orpheus' Lyre KDC-REP service name
    validation.
    This is a critical vulnerability.
    In _krb5_extract_ticket() the KDC-REP service name must be
    obtained from encrypted version stored in 'enc_part' instead
    of the unencrypted version stored in 'ticket'.
    Use of the unecrypted version provides an opportunity for
    successful server impersonation and other attacks.
    Identified by Jeffrey Altman, Viktor Duchovni and
    Nico Williams.
    See https://www.orpheus-lyre.info/ for more details.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1512648000">- Added Avoid_NULL_structure_pointer_member_dereference.patch,
  fixes (bsc#1071675).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1514548800">- Update to version 7.5.0
  - Security
  - Fix CVE-2017-17439, which is a remote denial of service
    vulnerability:
    In Heimdal 7.1 through 7.4, remote unauthenticated attackers
    are able to crash the KDC by sending a crafted UDP packet
    containing empty data fields for client name or realm.
  - Bug fixes
  - Handle long input lines when reloading database dumps.
  - In pre-forked mode (default on Unix), correctly clear the
    process ids of exited children, allowing new child processes
    to replace the old.
  - Fixed incorrect KDC response when no-cross realm TGT exists,
    allowing client requests to fail quickly rather than time
    out after trying to get a correct answer from each KDC.
- Fixed heimdal-patched.diff.
- Removed Avoid_NULL_structure_pointer_member_dereference.patch,
  fixed upstream.</changelog>
  <changelog author="bwiedemann@suse.com" date="1533643200">- Add reproducible.patch to override build date (boo#1047218)
- Use constant hostname (boo#1084909)</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1561291200">- Update to version 7.7.0
  + Bug fixes:
  - PKCS#11 hcrypto back-end:
    + initialize the p11_module_load function list
    + verify that not only is a mechanism present but that its
    mechanism info states that it offers the required
    encryption, decryption or digest services
  - krb5:
    + Starting with 7.6, Heimdal permitted requesting
    authenticated anonymous tickets. However, it did not
    verify that a KDC in fact returned an anonymous ticket
    when one was requested.
    + Cease setting the KDCOption reaquest_anonymous flag when
    issuing S4UProxy (constrained delegation) TGS requests.
    + when the Win2K PKINIT compatibility option is set, do not
    require krbtgt otherName to match when validating KDC
    certificate.
    + set PKINIT_BTMM flag per Apple implementation
    + use memset_s() instead of memset()
  - kdc:
    + When generating KRB5SignedPath in the AS, use the reply
    client name rather than the one from the request, so
    validation will work correctly in the TGS.
    + allow checksum of PA-FOR-USER to be HMAC_MD5. Even if TGT
    used an enctype with a different checksum. Per [MS-SFU]
    2.2.1 PA-FOR-USER the checksum is always HMAC_MD5, and
    that's what Windows and MIT clients send.
    In Heimdal both the client and kdc use instead the
    checksum of the TGT, and therefore work with each other
    but Windows and MIT clients fail against Heimdal KDC.
    Both Windows and MIT KDC would allow any keyed checksum
    to be used so Heimdal client work fine against it.
    Change Heimdal KDC to allow HMAC_MD5 even for non RC4
    based TGT in order to support per-spec clients.
    + use memset_s() instead of memset()
    + Detect Heimdal 1.0 through 7.6 clients that issue
    S4UProxy (constrained delegation) TGS Requests with the
    request anonymous flag set. These requests will be
    treated as S4UProxy requests and not anonymous requests.
  - HDB:
    + Set SQLite3 backend default page size to 8KB.
    + Add hdb_set_sync() method
  - kadmind:
    + disable HDB sync during database load avoiding
    unnecessary disk i/o.
  - ipropd:
    + disable HDB sync during receive_everything. Doing an
    fsync per-record when receiving the complete HDB is a
    performance disaster. Among other things, if the HDB is
    very large, then one slave receving a full HDB can cause
    other slaves to timeout and, if HDB write activity is
    high enough to cause iprop log truncation, then also need
    full syncs, which leads to a cycle of full syncs for all
    slaves until HDB write activity drops.
    Allowing the iprop log to be larger helps, but improving
    receive_everything() performance helps even more.
  - kinit:
    + Anonymous PKINIT tickets discard the realm information
    used to locate the issuing AS. Store the issuing realm in
    the credentials cache in order to locate a KDC which can
    renew them.
    + Do not leak the result of krb5_cc_get_config() when
    determining anonymous PKINIT start realm.
  - klist:
    + Show transited-policy-checked, ok-as-delegate and
    anonymous flags when listing credentials.
  - tests:
    + Regenerate certs so that they expire before the 2038
    armageddon so the test suite will pass on 32-bit
    operating systems until the underlying issues can be
    resolved.
  - Solaris:
    + Define _STDC_C11_BCI for memset_s prototype
  - build tooling:
    + Convert from python 2 to python 3
  - documentation:
    + rename verify-password to verify-password-quality
    + hprop default mode is encrypt
    + kadmind "all" permission does not include "get-keys"
    + verify-password-quality might not be stateless
- Version 7.6.0
  + Security (#555):
  - CVE-2018-16860 Heimdal KDC: Reject PA-S4U2Self with unkeyed
    checksum
    When the Heimdal KDC checks the checksum that is placed on
    the S4U2Self packet by the server to protect the requested
    principal against modification, it does not confirm that
    the checksum algorithm that protects the user name
    (principal) in the request is keyed. This allows a
    man-in-the-middle attacker who can intercept the request to
    the KDC to modify the packet by replacing the user name
    (principal) in the request with any desired user name
    (principal) that exists in the KDC and replace the checksum
    protecting that name with a CRC32 checksum (which requires
    no prior knowledge to compute).
    This would allow a S4U2Self ticket requested on behalf of
    user name (principal) user@EXAMPLE.COM to any service to be
    changed to a S4U2Self ticket with a user name (principal) of
    Administrator@EXAMPLE.COM. This ticket would then contain
    the PAC of the modified user name (principal).
  - CVE-2019-12098, client-only:
    RFC8062 Section 7 requires verification of the PA-PKINIT-KX
    key exchange when anonymous PKINIT is used. Failure to do
    so can permit an active attacker to become a
    man-in-the-middle.
  + Bug fixes:
  - Happy eyeballs: Don't wait for responses from
    known-unreachable KDCs.
  - kdc:
    + check return copy_Realm, copy_PrincipalName,
    copy_EncryptionKey
  - kinit:
    + cleanup temporary ccaches
    + see man page for "kinit --anonymous" command line syntax
    change
  - kdc:
    + Make anonymous AS-requests more RFC8062-compliant.
    Updated expired test certificates
  - Solaris:
    + PKCS#11 hcrypto backend broken since 7.0.1
    + Building with Sun Pro C
  + Features:
  - kuser: support authenticated anonymous AS-REQs in kinit
  - kdc: support for anonymous TGS-REQs
  - kgetcred support for anonymous service tickets
  - Support builds with OpenSSL 1.1.1
- fixed heimdal-patched.diff and reproducible.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1653480000">- Apply Shared Library Packaging Policy and resolve rpmlint
  errors like "libheimdal.x86_64: E: shlib-policy-name-error
  SONAME: libasn1.so.8, expected package suffix: 8"</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656417600">- Add heimdal-7.7.0-autoconf-2.70.patch: Fix build with autoconf
  2.70 (gh#heimdal/heimdal#856).</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656590400">- Add ldconfig scriptlets.
- Fix 'Conflicts:' tags.
- Remove obsolete macros and conditionals.
- Ran spec-cleaner.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1671624000">- Update to version 7.8.0
  + This release includes both the Heimdal 7.7.1 Security
    Vulnerability fixes and non-Security bug fixes/improvements.
  + Security Vulnerabilities:
  - CVE-2022-42898 PAC parse integer overflows
  - CVE-2022-3437 Overflows and non-constant time leaks in
    DES{,3} and arcfour
  - CVE-2022-41916 Fix Unicode normalization read of 1 bytes past
    end of array
  - CVE-2021-44758 A null pointer de-reference DoS in SPNEGO
    acceptors
  - CVE-2021-3671 A null pointer de-reference when handling
    missing sname in TGS-REQ
  - CVE-2022-44640 Heimdal KDC: invalid free in ASN.1 codec
    Note that CVE-2022-44640 is a severe vulnerability,
    possibly a 10.0 on the Common Vulnerability Scoring
    System (CVSS) v3, as we believe it should be possible to
    get an RCE on a KDC, which means that credentials can be
    compromised that can be used to impersonate anyone in a
    realm or forest of realms.
    Heimdal's ASN.1 compiler generates code that allows
    specially crafted DER encodings of CHOICEs to invoke the
    wrong free function on the decoded structure upon decode
    error. This is known to impact the Heimdal KDC, leading to
    an invalid free() of an address partly or wholly under the
    control of the attacker, in turn leading to a potential
    remote code execution (RCE) vulnerability.
    This error affects the DER codec for all extensible CHOICE
    types used in Heimdal, though not all cases will be
    exploitable. We have not completed a thorough analysis of
    all the Heimdal components affected, thus the Kerberos
    client, the X.509 library, and other parts, may be affected
    as well.
    This bug has been in Heimdal's ASN.1 compiler since 2005,
    but it may only affect Heimdal 1.6 and up. It was first
    reported by Douglas Bagnall, though it had been found
    independently by the Heimdal maintainers via fuzzing a few
    weeks earlier.
    While no zero-day exploit is known, such an exploit will
    likely be available soon after public disclosure.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  + Other changes:
  - Bugs found by UBSAN (including the incorrect encoding of
    unconstrained INTEGER value -1).
  - Errors found by the LLVM scan-build static analyzer.
  - Errors found by the valgrind memory debugger.
  - Work around GCC Bug 95189 (memcmp wrongly stripped like
    strcmp).
  - Correct ASN.1 OID typo for SHA-384
  - Fix a deadlock in in the MEMORY ccache type.
  - TGS: strip forwardable and proxiable flags if the server is
    disallowed.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  - Incremental HDB propagation improvements
    Refactor send_diffs making it progressive
    Handle partial writes on non-blocking sockets
    Disable Nagle in iprop master and slave
    Use async I/O
    Don't send I_HAVE in response to AYT
    Do not recover log in kadm5_get_principal()
    Don't send diffs to slaves with not yet known version
    Don't stutter in send_diffs
  - Optional backwards-compatible anon-pkinit behavior
- Removed heimdal-7.7.0-autoconf-2.70.patch, fixed upstream.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1673352000">- replace libheimdal conflicts by obsoletes / provides to provide a
  smooth update in the new libheimdal-devel.</changelog>
</package>
<package pkgid="81937b3949e4407887a50c69264414734c232f8bc1f6ecb2199a47555a6c954b" name="libasn1-8" arch="ppc64le">
  <version epoch="0" ver="7.8.0" rel="bp154.2.4.1"/>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1440936000">- Initial package, version 1.6rc2
- Added patch heimdal-version-script-client.map.patch to add file
  version-script-client.map (File is present in git for tag 1.6rc2
  but missing in tarball).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441108800">- Some changes in spec file to enable build for SLES.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441195200">- Added Conflicts tags to spec file because devel package conflicts
  with krb5-devel and krb5-mini-devel.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441454400">- Added a patched instead of the original tarball because only
  shared libraries will be build and source files of these (not to
  be build) programs have problematic licenses.
- Added script heimdal-patch-source.sh to sources.
- Added patch heimdal-patched.diff that fixes configure.ac and
  several Makefile.am files to successfully build patched source.
- Removed unneeded dependencies in spec file for build.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1483790400">- Update to version 7.1.0
- Removed heimdal-version-script-client.map.patch, fixed upstream.
- Fixed heimdal-patched.diff.
- Unfortunately there is no updated changelog file in tarball,
  changes can be seen in source code version control systems
  history log.</changelog>
  <changelog author="jengelh@inai.de" date="1486036800">- Summary and RPM group update. Do a direct call to ldconfig
  where possible.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1497528000">- Update to version 7.3.0
  - Security
    + Fix transit path validation. Commit f469fc6 (2010-10-02)
    inadvertently caused the previous hop realm to not be added
    to the transit path of issued tickets. This may, in some
    cases, enable bypass of capath policy in Heimdal versions 1.5
    through 7.2.
    Note, this may break sites that rely on the bug. With the bug
    some incomplete [capaths] worked, that should not have.
    These may now break authentication in some cross-realm
    configurations. (CVE-2017-6594)
- Version 7.2.0
  - Bug fixes
    + Portability improvements.
    + More strict parsing of encoded URI components in HTTP KDC.
    + Fixed memory leak in malloc error recovery in NTLM GSSAPI
    mechanism.
    + Avoid overly specific CPU info in krb5-config in aid of
    reproducible builds.
    + Don't do AFS string-to-key tests when feature is disabled.
    + Skip mdb_stat test when the command is not available.
    + Windows: update SHA2 timestamp server.
    + hdb: add missing export
    hdb_generate_key_set_password_with_ks_tuple.
    + Fix signature of hdb_generate_key_set_password().
    + Windows: enable KX509 support in the KDC.
    + kdc: fix kx509 service principal match.
    + iprop: handle case where master sends nothing new.
    + ipropd-slave: fix incorrect error codes.
    + Allow choice of sqlite for HDB pref.
    + check-iprop: don't fail to kill daemons.
    + roken: pidfile -&gt; rk_pidfile.
    + kdc: _kdc_do_kx509 fix use after free error.
    + Do not detect x32 as 64-bit platform.
    + No sys/ttydefaults.h on CYGWIN.
    + Fix check-iprop races.
    + roken_detach_prep() close pipe.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1501761600">- Update to version 7.4.0
  - Security
  - Fix CVE-2017-11103: Orpheus' Lyre KDC-REP service name
    validation.
    This is a critical vulnerability.
    In _krb5_extract_ticket() the KDC-REP service name must be
    obtained from encrypted version stored in 'enc_part' instead
    of the unencrypted version stored in 'ticket'.
    Use of the unecrypted version provides an opportunity for
    successful server impersonation and other attacks.
    Identified by Jeffrey Altman, Viktor Duchovni and
    Nico Williams.
    See https://www.orpheus-lyre.info/ for more details.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1512648000">- Added Avoid_NULL_structure_pointer_member_dereference.patch,
  fixes (bsc#1071675).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1514548800">- Update to version 7.5.0
  - Security
  - Fix CVE-2017-17439, which is a remote denial of service
    vulnerability:
    In Heimdal 7.1 through 7.4, remote unauthenticated attackers
    are able to crash the KDC by sending a crafted UDP packet
    containing empty data fields for client name or realm.
  - Bug fixes
  - Handle long input lines when reloading database dumps.
  - In pre-forked mode (default on Unix), correctly clear the
    process ids of exited children, allowing new child processes
    to replace the old.
  - Fixed incorrect KDC response when no-cross realm TGT exists,
    allowing client requests to fail quickly rather than time
    out after trying to get a correct answer from each KDC.
- Fixed heimdal-patched.diff.
- Removed Avoid_NULL_structure_pointer_member_dereference.patch,
  fixed upstream.</changelog>
  <changelog author="bwiedemann@suse.com" date="1533643200">- Add reproducible.patch to override build date (boo#1047218)
- Use constant hostname (boo#1084909)</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1561291200">- Update to version 7.7.0
  + Bug fixes:
  - PKCS#11 hcrypto back-end:
    + initialize the p11_module_load function list
    + verify that not only is a mechanism present but that its
    mechanism info states that it offers the required
    encryption, decryption or digest services
  - krb5:
    + Starting with 7.6, Heimdal permitted requesting
    authenticated anonymous tickets. However, it did not
    verify that a KDC in fact returned an anonymous ticket
    when one was requested.
    + Cease setting the KDCOption reaquest_anonymous flag when
    issuing S4UProxy (constrained delegation) TGS requests.
    + when the Win2K PKINIT compatibility option is set, do not
    require krbtgt otherName to match when validating KDC
    certificate.
    + set PKINIT_BTMM flag per Apple implementation
    + use memset_s() instead of memset()
  - kdc:
    + When generating KRB5SignedPath in the AS, use the reply
    client name rather than the one from the request, so
    validation will work correctly in the TGS.
    + allow checksum of PA-FOR-USER to be HMAC_MD5. Even if TGT
    used an enctype with a different checksum. Per [MS-SFU]
    2.2.1 PA-FOR-USER the checksum is always HMAC_MD5, and
    that's what Windows and MIT clients send.
    In Heimdal both the client and kdc use instead the
    checksum of the TGT, and therefore work with each other
    but Windows and MIT clients fail against Heimdal KDC.
    Both Windows and MIT KDC would allow any keyed checksum
    to be used so Heimdal client work fine against it.
    Change Heimdal KDC to allow HMAC_MD5 even for non RC4
    based TGT in order to support per-spec clients.
    + use memset_s() instead of memset()
    + Detect Heimdal 1.0 through 7.6 clients that issue
    S4UProxy (constrained delegation) TGS Requests with the
    request anonymous flag set. These requests will be
    treated as S4UProxy requests and not anonymous requests.
  - HDB:
    + Set SQLite3 backend default page size to 8KB.
    + Add hdb_set_sync() method
  - kadmind:
    + disable HDB sync during database load avoiding
    unnecessary disk i/o.
  - ipropd:
    + disable HDB sync during receive_everything. Doing an
    fsync per-record when receiving the complete HDB is a
    performance disaster. Among other things, if the HDB is
    very large, then one slave receving a full HDB can cause
    other slaves to timeout and, if HDB write activity is
    high enough to cause iprop log truncation, then also need
    full syncs, which leads to a cycle of full syncs for all
    slaves until HDB write activity drops.
    Allowing the iprop log to be larger helps, but improving
    receive_everything() performance helps even more.
  - kinit:
    + Anonymous PKINIT tickets discard the realm information
    used to locate the issuing AS. Store the issuing realm in
    the credentials cache in order to locate a KDC which can
    renew them.
    + Do not leak the result of krb5_cc_get_config() when
    determining anonymous PKINIT start realm.
  - klist:
    + Show transited-policy-checked, ok-as-delegate and
    anonymous flags when listing credentials.
  - tests:
    + Regenerate certs so that they expire before the 2038
    armageddon so the test suite will pass on 32-bit
    operating systems until the underlying issues can be
    resolved.
  - Solaris:
    + Define _STDC_C11_BCI for memset_s prototype
  - build tooling:
    + Convert from python 2 to python 3
  - documentation:
    + rename verify-password to verify-password-quality
    + hprop default mode is encrypt
    + kadmind "all" permission does not include "get-keys"
    + verify-password-quality might not be stateless
- Version 7.6.0
  + Security (#555):
  - CVE-2018-16860 Heimdal KDC: Reject PA-S4U2Self with unkeyed
    checksum
    When the Heimdal KDC checks the checksum that is placed on
    the S4U2Self packet by the server to protect the requested
    principal against modification, it does not confirm that
    the checksum algorithm that protects the user name
    (principal) in the request is keyed. This allows a
    man-in-the-middle attacker who can intercept the request to
    the KDC to modify the packet by replacing the user name
    (principal) in the request with any desired user name
    (principal) that exists in the KDC and replace the checksum
    protecting that name with a CRC32 checksum (which requires
    no prior knowledge to compute).
    This would allow a S4U2Self ticket requested on behalf of
    user name (principal) user@EXAMPLE.COM to any service to be
    changed to a S4U2Self ticket with a user name (principal) of
    Administrator@EXAMPLE.COM. This ticket would then contain
    the PAC of the modified user name (principal).
  - CVE-2019-12098, client-only:
    RFC8062 Section 7 requires verification of the PA-PKINIT-KX
    key exchange when anonymous PKINIT is used. Failure to do
    so can permit an active attacker to become a
    man-in-the-middle.
  + Bug fixes:
  - Happy eyeballs: Don't wait for responses from
    known-unreachable KDCs.
  - kdc:
    + check return copy_Realm, copy_PrincipalName,
    copy_EncryptionKey
  - kinit:
    + cleanup temporary ccaches
    + see man page for "kinit --anonymous" command line syntax
    change
  - kdc:
    + Make anonymous AS-requests more RFC8062-compliant.
    Updated expired test certificates
  - Solaris:
    + PKCS#11 hcrypto backend broken since 7.0.1
    + Building with Sun Pro C
  + Features:
  - kuser: support authenticated anonymous AS-REQs in kinit
  - kdc: support for anonymous TGS-REQs
  - kgetcred support for anonymous service tickets
  - Support builds with OpenSSL 1.1.1
- fixed heimdal-patched.diff and reproducible.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1653480000">- Apply Shared Library Packaging Policy and resolve rpmlint
  errors like "libheimdal.x86_64: E: shlib-policy-name-error
  SONAME: libasn1.so.8, expected package suffix: 8"</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656417600">- Add heimdal-7.7.0-autoconf-2.70.patch: Fix build with autoconf
  2.70 (gh#heimdal/heimdal#856).</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656590400">- Add ldconfig scriptlets.
- Fix 'Conflicts:' tags.
- Remove obsolete macros and conditionals.
- Ran spec-cleaner.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1671624000">- Update to version 7.8.0
  + This release includes both the Heimdal 7.7.1 Security
    Vulnerability fixes and non-Security bug fixes/improvements.
  + Security Vulnerabilities:
  - CVE-2022-42898 PAC parse integer overflows
  - CVE-2022-3437 Overflows and non-constant time leaks in
    DES{,3} and arcfour
  - CVE-2022-41916 Fix Unicode normalization read of 1 bytes past
    end of array
  - CVE-2021-44758 A null pointer de-reference DoS in SPNEGO
    acceptors
  - CVE-2021-3671 A null pointer de-reference when handling
    missing sname in TGS-REQ
  - CVE-2022-44640 Heimdal KDC: invalid free in ASN.1 codec
    Note that CVE-2022-44640 is a severe vulnerability,
    possibly a 10.0 on the Common Vulnerability Scoring
    System (CVSS) v3, as we believe it should be possible to
    get an RCE on a KDC, which means that credentials can be
    compromised that can be used to impersonate anyone in a
    realm or forest of realms.
    Heimdal's ASN.1 compiler generates code that allows
    specially crafted DER encodings of CHOICEs to invoke the
    wrong free function on the decoded structure upon decode
    error. This is known to impact the Heimdal KDC, leading to
    an invalid free() of an address partly or wholly under the
    control of the attacker, in turn leading to a potential
    remote code execution (RCE) vulnerability.
    This error affects the DER codec for all extensible CHOICE
    types used in Heimdal, though not all cases will be
    exploitable. We have not completed a thorough analysis of
    all the Heimdal components affected, thus the Kerberos
    client, the X.509 library, and other parts, may be affected
    as well.
    This bug has been in Heimdal's ASN.1 compiler since 2005,
    but it may only affect Heimdal 1.6 and up. It was first
    reported by Douglas Bagnall, though it had been found
    independently by the Heimdal maintainers via fuzzing a few
    weeks earlier.
    While no zero-day exploit is known, such an exploit will
    likely be available soon after public disclosure.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  + Other changes:
  - Bugs found by UBSAN (including the incorrect encoding of
    unconstrained INTEGER value -1).
  - Errors found by the LLVM scan-build static analyzer.
  - Errors found by the valgrind memory debugger.
  - Work around GCC Bug 95189 (memcmp wrongly stripped like
    strcmp).
  - Correct ASN.1 OID typo for SHA-384
  - Fix a deadlock in in the MEMORY ccache type.
  - TGS: strip forwardable and proxiable flags if the server is
    disallowed.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  - Incremental HDB propagation improvements
    Refactor send_diffs making it progressive
    Handle partial writes on non-blocking sockets
    Disable Nagle in iprop master and slave
    Use async I/O
    Don't send I_HAVE in response to AYT
    Do not recover log in kadm5_get_principal()
    Don't send diffs to slaves with not yet known version
    Don't stutter in send_diffs
  - Optional backwards-compatible anon-pkinit behavior
- Removed heimdal-7.7.0-autoconf-2.70.patch, fixed upstream.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1673352000">- replace libheimdal conflicts by obsoletes / provides to provide a
  smooth update in the new libheimdal-devel.</changelog>
</package>
<package pkgid="8ef9c32e7e61c371e208db8aa06ea30321042088a14af5e1951c2649da138134" name="libasn1-8" arch="s390x">
  <version epoch="0" ver="7.8.0" rel="bp154.2.4.1"/>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1440936000">- Initial package, version 1.6rc2
- Added patch heimdal-version-script-client.map.patch to add file
  version-script-client.map (File is present in git for tag 1.6rc2
  but missing in tarball).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441108800">- Some changes in spec file to enable build for SLES.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441195200">- Added Conflicts tags to spec file because devel package conflicts
  with krb5-devel and krb5-mini-devel.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441454400">- Added a patched instead of the original tarball because only
  shared libraries will be build and source files of these (not to
  be build) programs have problematic licenses.
- Added script heimdal-patch-source.sh to sources.
- Added patch heimdal-patched.diff that fixes configure.ac and
  several Makefile.am files to successfully build patched source.
- Removed unneeded dependencies in spec file for build.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1483790400">- Update to version 7.1.0
- Removed heimdal-version-script-client.map.patch, fixed upstream.
- Fixed heimdal-patched.diff.
- Unfortunately there is no updated changelog file in tarball,
  changes can be seen in source code version control systems
  history log.</changelog>
  <changelog author="jengelh@inai.de" date="1486036800">- Summary and RPM group update. Do a direct call to ldconfig
  where possible.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1497528000">- Update to version 7.3.0
  - Security
    + Fix transit path validation. Commit f469fc6 (2010-10-02)
    inadvertently caused the previous hop realm to not be added
    to the transit path of issued tickets. This may, in some
    cases, enable bypass of capath policy in Heimdal versions 1.5
    through 7.2.
    Note, this may break sites that rely on the bug. With the bug
    some incomplete [capaths] worked, that should not have.
    These may now break authentication in some cross-realm
    configurations. (CVE-2017-6594)
- Version 7.2.0
  - Bug fixes
    + Portability improvements.
    + More strict parsing of encoded URI components in HTTP KDC.
    + Fixed memory leak in malloc error recovery in NTLM GSSAPI
    mechanism.
    + Avoid overly specific CPU info in krb5-config in aid of
    reproducible builds.
    + Don't do AFS string-to-key tests when feature is disabled.
    + Skip mdb_stat test when the command is not available.
    + Windows: update SHA2 timestamp server.
    + hdb: add missing export
    hdb_generate_key_set_password_with_ks_tuple.
    + Fix signature of hdb_generate_key_set_password().
    + Windows: enable KX509 support in the KDC.
    + kdc: fix kx509 service principal match.
    + iprop: handle case where master sends nothing new.
    + ipropd-slave: fix incorrect error codes.
    + Allow choice of sqlite for HDB pref.
    + check-iprop: don't fail to kill daemons.
    + roken: pidfile -&gt; rk_pidfile.
    + kdc: _kdc_do_kx509 fix use after free error.
    + Do not detect x32 as 64-bit platform.
    + No sys/ttydefaults.h on CYGWIN.
    + Fix check-iprop races.
    + roken_detach_prep() close pipe.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1501761600">- Update to version 7.4.0
  - Security
  - Fix CVE-2017-11103: Orpheus' Lyre KDC-REP service name
    validation.
    This is a critical vulnerability.
    In _krb5_extract_ticket() the KDC-REP service name must be
    obtained from encrypted version stored in 'enc_part' instead
    of the unencrypted version stored in 'ticket'.
    Use of the unecrypted version provides an opportunity for
    successful server impersonation and other attacks.
    Identified by Jeffrey Altman, Viktor Duchovni and
    Nico Williams.
    See https://www.orpheus-lyre.info/ for more details.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1512648000">- Added Avoid_NULL_structure_pointer_member_dereference.patch,
  fixes (bsc#1071675).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1514548800">- Update to version 7.5.0
  - Security
  - Fix CVE-2017-17439, which is a remote denial of service
    vulnerability:
    In Heimdal 7.1 through 7.4, remote unauthenticated attackers
    are able to crash the KDC by sending a crafted UDP packet
    containing empty data fields for client name or realm.
  - Bug fixes
  - Handle long input lines when reloading database dumps.
  - In pre-forked mode (default on Unix), correctly clear the
    process ids of exited children, allowing new child processes
    to replace the old.
  - Fixed incorrect KDC response when no-cross realm TGT exists,
    allowing client requests to fail quickly rather than time
    out after trying to get a correct answer from each KDC.
- Fixed heimdal-patched.diff.
- Removed Avoid_NULL_structure_pointer_member_dereference.patch,
  fixed upstream.</changelog>
  <changelog author="bwiedemann@suse.com" date="1533643200">- Add reproducible.patch to override build date (boo#1047218)
- Use constant hostname (boo#1084909)</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1561291200">- Update to version 7.7.0
  + Bug fixes:
  - PKCS#11 hcrypto back-end:
    + initialize the p11_module_load function list
    + verify that not only is a mechanism present but that its
    mechanism info states that it offers the required
    encryption, decryption or digest services
  - krb5:
    + Starting with 7.6, Heimdal permitted requesting
    authenticated anonymous tickets. However, it did not
    verify that a KDC in fact returned an anonymous ticket
    when one was requested.
    + Cease setting the KDCOption reaquest_anonymous flag when
    issuing S4UProxy (constrained delegation) TGS requests.
    + when the Win2K PKINIT compatibility option is set, do not
    require krbtgt otherName to match when validating KDC
    certificate.
    + set PKINIT_BTMM flag per Apple implementation
    + use memset_s() instead of memset()
  - kdc:
    + When generating KRB5SignedPath in the AS, use the reply
    client name rather than the one from the request, so
    validation will work correctly in the TGS.
    + allow checksum of PA-FOR-USER to be HMAC_MD5. Even if TGT
    used an enctype with a different checksum. Per [MS-SFU]
    2.2.1 PA-FOR-USER the checksum is always HMAC_MD5, and
    that's what Windows and MIT clients send.
    In Heimdal both the client and kdc use instead the
    checksum of the TGT, and therefore work with each other
    but Windows and MIT clients fail against Heimdal KDC.
    Both Windows and MIT KDC would allow any keyed checksum
    to be used so Heimdal client work fine against it.
    Change Heimdal KDC to allow HMAC_MD5 even for non RC4
    based TGT in order to support per-spec clients.
    + use memset_s() instead of memset()
    + Detect Heimdal 1.0 through 7.6 clients that issue
    S4UProxy (constrained delegation) TGS Requests with the
    request anonymous flag set. These requests will be
    treated as S4UProxy requests and not anonymous requests.
  - HDB:
    + Set SQLite3 backend default page size to 8KB.
    + Add hdb_set_sync() method
  - kadmind:
    + disable HDB sync during database load avoiding
    unnecessary disk i/o.
  - ipropd:
    + disable HDB sync during receive_everything. Doing an
    fsync per-record when receiving the complete HDB is a
    performance disaster. Among other things, if the HDB is
    very large, then one slave receving a full HDB can cause
    other slaves to timeout and, if HDB write activity is
    high enough to cause iprop log truncation, then also need
    full syncs, which leads to a cycle of full syncs for all
    slaves until HDB write activity drops.
    Allowing the iprop log to be larger helps, but improving
    receive_everything() performance helps even more.
  - kinit:
    + Anonymous PKINIT tickets discard the realm information
    used to locate the issuing AS. Store the issuing realm in
    the credentials cache in order to locate a KDC which can
    renew them.
    + Do not leak the result of krb5_cc_get_config() when
    determining anonymous PKINIT start realm.
  - klist:
    + Show transited-policy-checked, ok-as-delegate and
    anonymous flags when listing credentials.
  - tests:
    + Regenerate certs so that they expire before the 2038
    armageddon so the test suite will pass on 32-bit
    operating systems until the underlying issues can be
    resolved.
  - Solaris:
    + Define _STDC_C11_BCI for memset_s prototype
  - build tooling:
    + Convert from python 2 to python 3
  - documentation:
    + rename verify-password to verify-password-quality
    + hprop default mode is encrypt
    + kadmind "all" permission does not include "get-keys"
    + verify-password-quality might not be stateless
- Version 7.6.0
  + Security (#555):
  - CVE-2018-16860 Heimdal KDC: Reject PA-S4U2Self with unkeyed
    checksum
    When the Heimdal KDC checks the checksum that is placed on
    the S4U2Self packet by the server to protect the requested
    principal against modification, it does not confirm that
    the checksum algorithm that protects the user name
    (principal) in the request is keyed. This allows a
    man-in-the-middle attacker who can intercept the request to
    the KDC to modify the packet by replacing the user name
    (principal) in the request with any desired user name
    (principal) that exists in the KDC and replace the checksum
    protecting that name with a CRC32 checksum (which requires
    no prior knowledge to compute).
    This would allow a S4U2Self ticket requested on behalf of
    user name (principal) user@EXAMPLE.COM to any service to be
    changed to a S4U2Self ticket with a user name (principal) of
    Administrator@EXAMPLE.COM. This ticket would then contain
    the PAC of the modified user name (principal).
  - CVE-2019-12098, client-only:
    RFC8062 Section 7 requires verification of the PA-PKINIT-KX
    key exchange when anonymous PKINIT is used. Failure to do
    so can permit an active attacker to become a
    man-in-the-middle.
  + Bug fixes:
  - Happy eyeballs: Don't wait for responses from
    known-unreachable KDCs.
  - kdc:
    + check return copy_Realm, copy_PrincipalName,
    copy_EncryptionKey
  - kinit:
    + cleanup temporary ccaches
    + see man page for "kinit --anonymous" command line syntax
    change
  - kdc:
    + Make anonymous AS-requests more RFC8062-compliant.
    Updated expired test certificates
  - Solaris:
    + PKCS#11 hcrypto backend broken since 7.0.1
    + Building with Sun Pro C
  + Features:
  - kuser: support authenticated anonymous AS-REQs in kinit
  - kdc: support for anonymous TGS-REQs
  - kgetcred support for anonymous service tickets
  - Support builds with OpenSSL 1.1.1
- fixed heimdal-patched.diff and reproducible.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1653480000">- Apply Shared Library Packaging Policy and resolve rpmlint
  errors like "libheimdal.x86_64: E: shlib-policy-name-error
  SONAME: libasn1.so.8, expected package suffix: 8"</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656417600">- Add heimdal-7.7.0-autoconf-2.70.patch: Fix build with autoconf
  2.70 (gh#heimdal/heimdal#856).</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656590400">- Add ldconfig scriptlets.
- Fix 'Conflicts:' tags.
- Remove obsolete macros and conditionals.
- Ran spec-cleaner.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1671624000">- Update to version 7.8.0
  + This release includes both the Heimdal 7.7.1 Security
    Vulnerability fixes and non-Security bug fixes/improvements.
  + Security Vulnerabilities:
  - CVE-2022-42898 PAC parse integer overflows
  - CVE-2022-3437 Overflows and non-constant time leaks in
    DES{,3} and arcfour
  - CVE-2022-41916 Fix Unicode normalization read of 1 bytes past
    end of array
  - CVE-2021-44758 A null pointer de-reference DoS in SPNEGO
    acceptors
  - CVE-2021-3671 A null pointer de-reference when handling
    missing sname in TGS-REQ
  - CVE-2022-44640 Heimdal KDC: invalid free in ASN.1 codec
    Note that CVE-2022-44640 is a severe vulnerability,
    possibly a 10.0 on the Common Vulnerability Scoring
    System (CVSS) v3, as we believe it should be possible to
    get an RCE on a KDC, which means that credentials can be
    compromised that can be used to impersonate anyone in a
    realm or forest of realms.
    Heimdal's ASN.1 compiler generates code that allows
    specially crafted DER encodings of CHOICEs to invoke the
    wrong free function on the decoded structure upon decode
    error. This is known to impact the Heimdal KDC, leading to
    an invalid free() of an address partly or wholly under the
    control of the attacker, in turn leading to a potential
    remote code execution (RCE) vulnerability.
    This error affects the DER codec for all extensible CHOICE
    types used in Heimdal, though not all cases will be
    exploitable. We have not completed a thorough analysis of
    all the Heimdal components affected, thus the Kerberos
    client, the X.509 library, and other parts, may be affected
    as well.
    This bug has been in Heimdal's ASN.1 compiler since 2005,
    but it may only affect Heimdal 1.6 and up. It was first
    reported by Douglas Bagnall, though it had been found
    independently by the Heimdal maintainers via fuzzing a few
    weeks earlier.
    While no zero-day exploit is known, such an exploit will
    likely be available soon after public disclosure.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  + Other changes:
  - Bugs found by UBSAN (including the incorrect encoding of
    unconstrained INTEGER value -1).
  - Errors found by the LLVM scan-build static analyzer.
  - Errors found by the valgrind memory debugger.
  - Work around GCC Bug 95189 (memcmp wrongly stripped like
    strcmp).
  - Correct ASN.1 OID typo for SHA-384
  - Fix a deadlock in in the MEMORY ccache type.
  - TGS: strip forwardable and proxiable flags if the server is
    disallowed.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  - Incremental HDB propagation improvements
    Refactor send_diffs making it progressive
    Handle partial writes on non-blocking sockets
    Disable Nagle in iprop master and slave
    Use async I/O
    Don't send I_HAVE in response to AYT
    Do not recover log in kadm5_get_principal()
    Don't send diffs to slaves with not yet known version
    Don't stutter in send_diffs
  - Optional backwards-compatible anon-pkinit behavior
- Removed heimdal-7.7.0-autoconf-2.70.patch, fixed upstream.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1673352000">- replace libheimdal conflicts by obsoletes / provides to provide a
  smooth update in the new libheimdal-devel.</changelog>
</package>
<package pkgid="ee71eea68c8f45bb1e1c625f55021e78cde9c5a6bd3e3d08000d3304588a989d" name="libasn1-8" arch="x86_64">
  <version epoch="0" ver="7.8.0" rel="bp154.2.4.1"/>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1440936000">- Initial package, version 1.6rc2
- Added patch heimdal-version-script-client.map.patch to add file
  version-script-client.map (File is present in git for tag 1.6rc2
  but missing in tarball).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441108800">- Some changes in spec file to enable build for SLES.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441195200">- Added Conflicts tags to spec file because devel package conflicts
  with krb5-devel and krb5-mini-devel.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441454400">- Added a patched instead of the original tarball because only
  shared libraries will be build and source files of these (not to
  be build) programs have problematic licenses.
- Added script heimdal-patch-source.sh to sources.
- Added patch heimdal-patched.diff that fixes configure.ac and
  several Makefile.am files to successfully build patched source.
- Removed unneeded dependencies in spec file for build.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1483790400">- Update to version 7.1.0
- Removed heimdal-version-script-client.map.patch, fixed upstream.
- Fixed heimdal-patched.diff.
- Unfortunately there is no updated changelog file in tarball,
  changes can be seen in source code version control systems
  history log.</changelog>
  <changelog author="jengelh@inai.de" date="1486036800">- Summary and RPM group update. Do a direct call to ldconfig
  where possible.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1497528000">- Update to version 7.3.0
  - Security
    + Fix transit path validation. Commit f469fc6 (2010-10-02)
    inadvertently caused the previous hop realm to not be added
    to the transit path of issued tickets. This may, in some
    cases, enable bypass of capath policy in Heimdal versions 1.5
    through 7.2.
    Note, this may break sites that rely on the bug. With the bug
    some incomplete [capaths] worked, that should not have.
    These may now break authentication in some cross-realm
    configurations. (CVE-2017-6594)
- Version 7.2.0
  - Bug fixes
    + Portability improvements.
    + More strict parsing of encoded URI components in HTTP KDC.
    + Fixed memory leak in malloc error recovery in NTLM GSSAPI
    mechanism.
    + Avoid overly specific CPU info in krb5-config in aid of
    reproducible builds.
    + Don't do AFS string-to-key tests when feature is disabled.
    + Skip mdb_stat test when the command is not available.
    + Windows: update SHA2 timestamp server.
    + hdb: add missing export
    hdb_generate_key_set_password_with_ks_tuple.
    + Fix signature of hdb_generate_key_set_password().
    + Windows: enable KX509 support in the KDC.
    + kdc: fix kx509 service principal match.
    + iprop: handle case where master sends nothing new.
    + ipropd-slave: fix incorrect error codes.
    + Allow choice of sqlite for HDB pref.
    + check-iprop: don't fail to kill daemons.
    + roken: pidfile -&gt; rk_pidfile.
    + kdc: _kdc_do_kx509 fix use after free error.
    + Do not detect x32 as 64-bit platform.
    + No sys/ttydefaults.h on CYGWIN.
    + Fix check-iprop races.
    + roken_detach_prep() close pipe.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1501761600">- Update to version 7.4.0
  - Security
  - Fix CVE-2017-11103: Orpheus' Lyre KDC-REP service name
    validation.
    This is a critical vulnerability.
    In _krb5_extract_ticket() the KDC-REP service name must be
    obtained from encrypted version stored in 'enc_part' instead
    of the unencrypted version stored in 'ticket'.
    Use of the unecrypted version provides an opportunity for
    successful server impersonation and other attacks.
    Identified by Jeffrey Altman, Viktor Duchovni and
    Nico Williams.
    See https://www.orpheus-lyre.info/ for more details.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1512648000">- Added Avoid_NULL_structure_pointer_member_dereference.patch,
  fixes (bsc#1071675).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1514548800">- Update to version 7.5.0
  - Security
  - Fix CVE-2017-17439, which is a remote denial of service
    vulnerability:
    In Heimdal 7.1 through 7.4, remote unauthenticated attackers
    are able to crash the KDC by sending a crafted UDP packet
    containing empty data fields for client name or realm.
  - Bug fixes
  - Handle long input lines when reloading database dumps.
  - In pre-forked mode (default on Unix), correctly clear the
    process ids of exited children, allowing new child processes
    to replace the old.
  - Fixed incorrect KDC response when no-cross realm TGT exists,
    allowing client requests to fail quickly rather than time
    out after trying to get a correct answer from each KDC.
- Fixed heimdal-patched.diff.
- Removed Avoid_NULL_structure_pointer_member_dereference.patch,
  fixed upstream.</changelog>
  <changelog author="bwiedemann@suse.com" date="1533643200">- Add reproducible.patch to override build date (boo#1047218)
- Use constant hostname (boo#1084909)</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1561291200">- Update to version 7.7.0
  + Bug fixes:
  - PKCS#11 hcrypto back-end:
    + initialize the p11_module_load function list
    + verify that not only is a mechanism present but that its
    mechanism info states that it offers the required
    encryption, decryption or digest services
  - krb5:
    + Starting with 7.6, Heimdal permitted requesting
    authenticated anonymous tickets. However, it did not
    verify that a KDC in fact returned an anonymous ticket
    when one was requested.
    + Cease setting the KDCOption reaquest_anonymous flag when
    issuing S4UProxy (constrained delegation) TGS requests.
    + when the Win2K PKINIT compatibility option is set, do not
    require krbtgt otherName to match when validating KDC
    certificate.
    + set PKINIT_BTMM flag per Apple implementation
    + use memset_s() instead of memset()
  - kdc:
    + When generating KRB5SignedPath in the AS, use the reply
    client name rather than the one from the request, so
    validation will work correctly in the TGS.
    + allow checksum of PA-FOR-USER to be HMAC_MD5. Even if TGT
    used an enctype with a different checksum. Per [MS-SFU]
    2.2.1 PA-FOR-USER the checksum is always HMAC_MD5, and
    that's what Windows and MIT clients send.
    In Heimdal both the client and kdc use instead the
    checksum of the TGT, and therefore work with each other
    but Windows and MIT clients fail against Heimdal KDC.
    Both Windows and MIT KDC would allow any keyed checksum
    to be used so Heimdal client work fine against it.
    Change Heimdal KDC to allow HMAC_MD5 even for non RC4
    based TGT in order to support per-spec clients.
    + use memset_s() instead of memset()
    + Detect Heimdal 1.0 through 7.6 clients that issue
    S4UProxy (constrained delegation) TGS Requests with the
    request anonymous flag set. These requests will be
    treated as S4UProxy requests and not anonymous requests.
  - HDB:
    + Set SQLite3 backend default page size to 8KB.
    + Add hdb_set_sync() method
  - kadmind:
    + disable HDB sync during database load avoiding
    unnecessary disk i/o.
  - ipropd:
    + disable HDB sync during receive_everything. Doing an
    fsync per-record when receiving the complete HDB is a
    performance disaster. Among other things, if the HDB is
    very large, then one slave receving a full HDB can cause
    other slaves to timeout and, if HDB write activity is
    high enough to cause iprop log truncation, then also need
    full syncs, which leads to a cycle of full syncs for all
    slaves until HDB write activity drops.
    Allowing the iprop log to be larger helps, but improving
    receive_everything() performance helps even more.
  - kinit:
    + Anonymous PKINIT tickets discard the realm information
    used to locate the issuing AS. Store the issuing realm in
    the credentials cache in order to locate a KDC which can
    renew them.
    + Do not leak the result of krb5_cc_get_config() when
    determining anonymous PKINIT start realm.
  - klist:
    + Show transited-policy-checked, ok-as-delegate and
    anonymous flags when listing credentials.
  - tests:
    + Regenerate certs so that they expire before the 2038
    armageddon so the test suite will pass on 32-bit
    operating systems until the underlying issues can be
    resolved.
  - Solaris:
    + Define _STDC_C11_BCI for memset_s prototype
  - build tooling:
    + Convert from python 2 to python 3
  - documentation:
    + rename verify-password to verify-password-quality
    + hprop default mode is encrypt
    + kadmind "all" permission does not include "get-keys"
    + verify-password-quality might not be stateless
- Version 7.6.0
  + Security (#555):
  - CVE-2018-16860 Heimdal KDC: Reject PA-S4U2Self with unkeyed
    checksum
    When the Heimdal KDC checks the checksum that is placed on
    the S4U2Self packet by the server to protect the requested
    principal against modification, it does not confirm that
    the checksum algorithm that protects the user name
    (principal) in the request is keyed. This allows a
    man-in-the-middle attacker who can intercept the request to
    the KDC to modify the packet by replacing the user name
    (principal) in the request with any desired user name
    (principal) that exists in the KDC and replace the checksum
    protecting that name with a CRC32 checksum (which requires
    no prior knowledge to compute).
    This would allow a S4U2Self ticket requested on behalf of
    user name (principal) user@EXAMPLE.COM to any service to be
    changed to a S4U2Self ticket with a user name (principal) of
    Administrator@EXAMPLE.COM. This ticket would then contain
    the PAC of the modified user name (principal).
  - CVE-2019-12098, client-only:
    RFC8062 Section 7 requires verification of the PA-PKINIT-KX
    key exchange when anonymous PKINIT is used. Failure to do
    so can permit an active attacker to become a
    man-in-the-middle.
  + Bug fixes:
  - Happy eyeballs: Don't wait for responses from
    known-unreachable KDCs.
  - kdc:
    + check return copy_Realm, copy_PrincipalName,
    copy_EncryptionKey
  - kinit:
    + cleanup temporary ccaches
    + see man page for "kinit --anonymous" command line syntax
    change
  - kdc:
    + Make anonymous AS-requests more RFC8062-compliant.
    Updated expired test certificates
  - Solaris:
    + PKCS#11 hcrypto backend broken since 7.0.1
    + Building with Sun Pro C
  + Features:
  - kuser: support authenticated anonymous AS-REQs in kinit
  - kdc: support for anonymous TGS-REQs
  - kgetcred support for anonymous service tickets
  - Support builds with OpenSSL 1.1.1
- fixed heimdal-patched.diff and reproducible.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1653480000">- Apply Shared Library Packaging Policy and resolve rpmlint
  errors like "libheimdal.x86_64: E: shlib-policy-name-error
  SONAME: libasn1.so.8, expected package suffix: 8"</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656417600">- Add heimdal-7.7.0-autoconf-2.70.patch: Fix build with autoconf
  2.70 (gh#heimdal/heimdal#856).</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656590400">- Add ldconfig scriptlets.
- Fix 'Conflicts:' tags.
- Remove obsolete macros and conditionals.
- Ran spec-cleaner.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1671624000">- Update to version 7.8.0
  + This release includes both the Heimdal 7.7.1 Security
    Vulnerability fixes and non-Security bug fixes/improvements.
  + Security Vulnerabilities:
  - CVE-2022-42898 PAC parse integer overflows
  - CVE-2022-3437 Overflows and non-constant time leaks in
    DES{,3} and arcfour
  - CVE-2022-41916 Fix Unicode normalization read of 1 bytes past
    end of array
  - CVE-2021-44758 A null pointer de-reference DoS in SPNEGO
    acceptors
  - CVE-2021-3671 A null pointer de-reference when handling
    missing sname in TGS-REQ
  - CVE-2022-44640 Heimdal KDC: invalid free in ASN.1 codec
    Note that CVE-2022-44640 is a severe vulnerability,
    possibly a 10.0 on the Common Vulnerability Scoring
    System (CVSS) v3, as we believe it should be possible to
    get an RCE on a KDC, which means that credentials can be
    compromised that can be used to impersonate anyone in a
    realm or forest of realms.
    Heimdal's ASN.1 compiler generates code that allows
    specially crafted DER encodings of CHOICEs to invoke the
    wrong free function on the decoded structure upon decode
    error. This is known to impact the Heimdal KDC, leading to
    an invalid free() of an address partly or wholly under the
    control of the attacker, in turn leading to a potential
    remote code execution (RCE) vulnerability.
    This error affects the DER codec for all extensible CHOICE
    types used in Heimdal, though not all cases will be
    exploitable. We have not completed a thorough analysis of
    all the Heimdal components affected, thus the Kerberos
    client, the X.509 library, and other parts, may be affected
    as well.
    This bug has been in Heimdal's ASN.1 compiler since 2005,
    but it may only affect Heimdal 1.6 and up. It was first
    reported by Douglas Bagnall, though it had been found
    independently by the Heimdal maintainers via fuzzing a few
    weeks earlier.
    While no zero-day exploit is known, such an exploit will
    likely be available soon after public disclosure.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  + Other changes:
  - Bugs found by UBSAN (including the incorrect encoding of
    unconstrained INTEGER value -1).
  - Errors found by the LLVM scan-build static analyzer.
  - Errors found by the valgrind memory debugger.
  - Work around GCC Bug 95189 (memcmp wrongly stripped like
    strcmp).
  - Correct ASN.1 OID typo for SHA-384
  - Fix a deadlock in in the MEMORY ccache type.
  - TGS: strip forwardable and proxiable flags if the server is
    disallowed.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  - Incremental HDB propagation improvements
    Refactor send_diffs making it progressive
    Handle partial writes on non-blocking sockets
    Disable Nagle in iprop master and slave
    Use async I/O
    Don't send I_HAVE in response to AYT
    Do not recover log in kadm5_get_principal()
    Don't send diffs to slaves with not yet known version
    Don't stutter in send_diffs
  - Optional backwards-compatible anon-pkinit behavior
- Removed heimdal-7.7.0-autoconf-2.70.patch, fixed upstream.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1673352000">- replace libheimdal conflicts by obsoletes / provides to provide a
  smooth update in the new libheimdal-devel.</changelog>
</package>
<package pkgid="746115c546a779129929572074d7e93f67d4a14240c2832937eecd49f448056f" name="libathemecore1" arch="aarch64">
  <version epoch="0" ver="7.2.12" rel="bp154.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1417694400">- Update to new upstream release 7.2.1
  * NickServ:
  * Make `VHOST` set cloak assigner and timestamp the same way HostServ does
  * Make `INFO` call the `user_info_noexist` hook for queries that don't match an account
  * Make `REGAIN` log you in if successful.
  * Allow implementing custom filters for `LIST`
  * nickserv/multimark: new module which allows multiple MARK entries per nickname.
  * ChanServ:
  * Add a `$server:` exttarget accepting server masks
  * Add `PUBACL` flag which allows the channel access to be public.
  * Don't allow `DEOP` or `KICK` of a services bot.
  * Don't try to expand extbans in various commands.
  * Allow users with +O or +V flags to op/voice themselves, since they can regain op/voice
  by cycling the channel anyway.
  * chanserv/clear_akicks: new module providing a `CLEAR AKICKS` command.</changelog>
  <changelog author="jengelh@inai.de" date="1428062400">- Update to new upstream release 7.2.5
  * pbkdf2v2: Newer module implementing PBKDF2-HMAC digest scheme</changelog>
  <changelog author="jengelh@inai.de" date="1462276800">- Update to new upstream release 7.2.6
  * avoid potential NULL dereference in language code
  * Add NOPASSWORD criterion to nickserv/list helpfile
  * new nickserv/list criterion VACATION
- Add 0001-Do-not-copy-more-bytes-than-were-allocated.patch
  [CVE-2016-4478]
- Add 0001-chanserv-flags-make-Anope-FLAGS-compatibility-an-opt.patch
  [CVE-2014-9773, boo#978170]
- Add atheme-serno.diff, a build fix</changelog>
  <changelog author="jengelh@inai.de" date="1479643200">- Update to new upstream release 7.2.7
  * NickServ:
  * Make `VHOST` set cloak assigner and timestamp the same way
    HostServ does
  * Make `INFO` call the `user_info_noexist` hook for queries
    that don't match an account
  * Make `REGAIN` log you in if successful.
  * ChanServ:
  * Add a `$server:` exttarget accepting server masks
  * Add `PUBACL` flag which allows the channel access to be public.
  * Don't allow `DEOP` or `KICK` of a services bot.
  * Don't try to expand extbans in various commands.
  * Allow users with +O or +V flags to op/voice themselves, since
    they can regain op/voice by cycling the channel anyway.
- +e added to chanserv{} templates and founder_flags
- Remove 0001-Do-not-copy-more-bytes-than-were-allocated.patch
  and 0001-chanserv-flags-make-Anope-FLAGS-compatibility-an-opt.patch
  (applied upstream)
- Abort installation if user/group cannot be created</changelog>
  <changelog author="jengelh@inai.de" date="1490875200">- Update to new upstream release 7.2.8
  * Close a memory leak that could be exploited by attackers to
    potentially cause a denial of service.
    [CVE-2017-6384, boo#1027614]
- Update to new upstream release 7.2.9
  * Fixing use after free that could potentially be used by an
    attacker already having the privilege to use SASL impersonation
    to cause a denial of service.</changelog>
  <changelog author="jengelh@inai.de" date="1509710400">- Rename the tools dbverify and ecdsakeygen with an "atheme-"
  prefix. This is possible since they do not appear to get invoked
  by the server, but only by the user.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566388800">- Update to new upstream release 7.2.10.r2
  * Fix potential NULL dereference in modules/crypto/posix.
  * Bump E-Mail address maximum length to 254 characters.
  * Use flags setter information in modules/chanserv/access &amp;
    modules/chanserv/flags.
  * Fix issue where modules/misc/httpd was not closing its
    listening socket on deinit.
  * Fix GroupServ data loss issue when a group was the founder of
    another group.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1600084800">- Fix misuse of %_libexecdir for /usr/lib/tmpfiles
  [boo#1174075]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1614513600">- Update to release 7.2.11
  * Add a preliminary Turkish translation
  * Add HMAC-MD5 verify-only support to crypto/pbkdf2v2
  * modules/chanserv/akick: fix unload crash with akicks that
    have timeouts
  * modules/nickserv/multimark: use IRC case canonicalisation
    for restored nicks
  * modules/nickserv/multimark: forbid unloading due to the
    potential for data loss
  * CA_ constants: include CA_EXEMPT (+e) where appropriate
- Drop atheme-serno.diff (no longer applies)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1615118400">- Redownload atheme-services-v7.2.11.tar.xz
  because they changed it</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1643630400">- Update to release 7.2.12
  * Fix CVE-2022-24976 [boo#1195989]
  * Track SASL login EID</changelog>
</package>
<package pkgid="5f3aa4567d579666721d30c2abb11ac67d6a0c0339c85ff82928aa71ac18779b" name="libathemecore1" arch="i586">
  <version epoch="0" ver="7.2.12" rel="bp154.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1417694400">- Update to new upstream release 7.2.1
  * NickServ:
  * Make `VHOST` set cloak assigner and timestamp the same way HostServ does
  * Make `INFO` call the `user_info_noexist` hook for queries that don't match an account
  * Make `REGAIN` log you in if successful.
  * Allow implementing custom filters for `LIST`
  * nickserv/multimark: new module which allows multiple MARK entries per nickname.
  * ChanServ:
  * Add a `$server:` exttarget accepting server masks
  * Add `PUBACL` flag which allows the channel access to be public.
  * Don't allow `DEOP` or `KICK` of a services bot.
  * Don't try to expand extbans in various commands.
  * Allow users with +O or +V flags to op/voice themselves, since they can regain op/voice
  by cycling the channel anyway.
  * chanserv/clear_akicks: new module providing a `CLEAR AKICKS` command.</changelog>
  <changelog author="jengelh@inai.de" date="1428062400">- Update to new upstream release 7.2.5
  * pbkdf2v2: Newer module implementing PBKDF2-HMAC digest scheme</changelog>
  <changelog author="jengelh@inai.de" date="1462276800">- Update to new upstream release 7.2.6
  * avoid potential NULL dereference in language code
  * Add NOPASSWORD criterion to nickserv/list helpfile
  * new nickserv/list criterion VACATION
- Add 0001-Do-not-copy-more-bytes-than-were-allocated.patch
  [CVE-2016-4478]
- Add 0001-chanserv-flags-make-Anope-FLAGS-compatibility-an-opt.patch
  [CVE-2014-9773, boo#978170]
- Add atheme-serno.diff, a build fix</changelog>
  <changelog author="jengelh@inai.de" date="1479643200">- Update to new upstream release 7.2.7
  * NickServ:
  * Make `VHOST` set cloak assigner and timestamp the same way
    HostServ does
  * Make `INFO` call the `user_info_noexist` hook for queries
    that don't match an account
  * Make `REGAIN` log you in if successful.
  * ChanServ:
  * Add a `$server:` exttarget accepting server masks
  * Add `PUBACL` flag which allows the channel access to be public.
  * Don't allow `DEOP` or `KICK` of a services bot.
  * Don't try to expand extbans in various commands.
  * Allow users with +O or +V flags to op/voice themselves, since
    they can regain op/voice by cycling the channel anyway.
- +e added to chanserv{} templates and founder_flags
- Remove 0001-Do-not-copy-more-bytes-than-were-allocated.patch
  and 0001-chanserv-flags-make-Anope-FLAGS-compatibility-an-opt.patch
  (applied upstream)
- Abort installation if user/group cannot be created</changelog>
  <changelog author="jengelh@inai.de" date="1490875200">- Update to new upstream release 7.2.8
  * Close a memory leak that could be exploited by attackers to
    potentially cause a denial of service.
    [CVE-2017-6384, boo#1027614]
- Update to new upstream release 7.2.9
  * Fixing use after free that could potentially be used by an
    attacker already having the privilege to use SASL impersonation
    to cause a denial of service.</changelog>
  <changelog author="jengelh@inai.de" date="1509710400">- Rename the tools dbverify and ecdsakeygen with an "atheme-"
  prefix. This is possible since they do not appear to get invoked
  by the server, but only by the user.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566388800">- Update to new upstream release 7.2.10.r2
  * Fix potential NULL dereference in modules/crypto/posix.
  * Bump E-Mail address maximum length to 254 characters.
  * Use flags setter information in modules/chanserv/access &amp;
    modules/chanserv/flags.
  * Fix issue where modules/misc/httpd was not closing its
    listening socket on deinit.
  * Fix GroupServ data loss issue when a group was the founder of
    another group.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1600084800">- Fix misuse of %_libexecdir for /usr/lib/tmpfiles
  [boo#1174075]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1614513600">- Update to release 7.2.11
  * Add a preliminary Turkish translation
  * Add HMAC-MD5 verify-only support to crypto/pbkdf2v2
  * modules/chanserv/akick: fix unload crash with akicks that
    have timeouts
  * modules/nickserv/multimark: use IRC case canonicalisation
    for restored nicks
  * modules/nickserv/multimark: forbid unloading due to the
    potential for data loss
  * CA_ constants: include CA_EXEMPT (+e) where appropriate
- Drop atheme-serno.diff (no longer applies)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1615118400">- Redownload atheme-services-v7.2.11.tar.xz
  because they changed it</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1643630400">- Update to release 7.2.12
  * Fix CVE-2022-24976 [boo#1195989]
  * Track SASL login EID</changelog>
</package>
<package pkgid="b1525049d915b1d6a160867a9d35ec3ba5d91ef9f09a8a80af8818ffa90cad7b" name="libathemecore1" arch="ppc64le">
  <version epoch="0" ver="7.2.12" rel="bp154.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1417694400">- Update to new upstream release 7.2.1
  * NickServ:
  * Make `VHOST` set cloak assigner and timestamp the same way HostServ does
  * Make `INFO` call the `user_info_noexist` hook for queries that don't match an account
  * Make `REGAIN` log you in if successful.
  * Allow implementing custom filters for `LIST`
  * nickserv/multimark: new module which allows multiple MARK entries per nickname.
  * ChanServ:
  * Add a `$server:` exttarget accepting server masks
  * Add `PUBACL` flag which allows the channel access to be public.
  * Don't allow `DEOP` or `KICK` of a services bot.
  * Don't try to expand extbans in various commands.
  * Allow users with +O or +V flags to op/voice themselves, since they can regain op/voice
  by cycling the channel anyway.
  * chanserv/clear_akicks: new module providing a `CLEAR AKICKS` command.</changelog>
  <changelog author="jengelh@inai.de" date="1428062400">- Update to new upstream release 7.2.5
  * pbkdf2v2: Newer module implementing PBKDF2-HMAC digest scheme</changelog>
  <changelog author="jengelh@inai.de" date="1462276800">- Update to new upstream release 7.2.6
  * avoid potential NULL dereference in language code
  * Add NOPASSWORD criterion to nickserv/list helpfile
  * new nickserv/list criterion VACATION
- Add 0001-Do-not-copy-more-bytes-than-were-allocated.patch
  [CVE-2016-4478]
- Add 0001-chanserv-flags-make-Anope-FLAGS-compatibility-an-opt.patch
  [CVE-2014-9773, boo#978170]
- Add atheme-serno.diff, a build fix</changelog>
  <changelog author="jengelh@inai.de" date="1479643200">- Update to new upstream release 7.2.7
  * NickServ:
  * Make `VHOST` set cloak assigner and timestamp the same way
    HostServ does
  * Make `INFO` call the `user_info_noexist` hook for queries
    that don't match an account
  * Make `REGAIN` log you in if successful.
  * ChanServ:
  * Add a `$server:` exttarget accepting server masks
  * Add `PUBACL` flag which allows the channel access to be public.
  * Don't allow `DEOP` or `KICK` of a services bot.
  * Don't try to expand extbans in various commands.
  * Allow users with +O or +V flags to op/voice themselves, since
    they can regain op/voice by cycling the channel anyway.
- +e added to chanserv{} templates and founder_flags
- Remove 0001-Do-not-copy-more-bytes-than-were-allocated.patch
  and 0001-chanserv-flags-make-Anope-FLAGS-compatibility-an-opt.patch
  (applied upstream)
- Abort installation if user/group cannot be created</changelog>
  <changelog author="jengelh@inai.de" date="1490875200">- Update to new upstream release 7.2.8
  * Close a memory leak that could be exploited by attackers to
    potentially cause a denial of service.
    [CVE-2017-6384, boo#1027614]
- Update to new upstream release 7.2.9
  * Fixing use after free that could potentially be used by an
    attacker already having the privilege to use SASL impersonation
    to cause a denial of service.</changelog>
  <changelog author="jengelh@inai.de" date="1509710400">- Rename the tools dbverify and ecdsakeygen with an "atheme-"
  prefix. This is possible since they do not appear to get invoked
  by the server, but only by the user.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566388800">- Update to new upstream release 7.2.10.r2
  * Fix potential NULL dereference in modules/crypto/posix.
  * Bump E-Mail address maximum length to 254 characters.
  * Use flags setter information in modules/chanserv/access &amp;
    modules/chanserv/flags.
  * Fix issue where modules/misc/httpd was not closing its
    listening socket on deinit.
  * Fix GroupServ data loss issue when a group was the founder of
    another group.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1600084800">- Fix misuse of %_libexecdir for /usr/lib/tmpfiles
  [boo#1174075]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1614513600">- Update to release 7.2.11
  * Add a preliminary Turkish translation
  * Add HMAC-MD5 verify-only support to crypto/pbkdf2v2
  * modules/chanserv/akick: fix unload crash with akicks that
    have timeouts
  * modules/nickserv/multimark: use IRC case canonicalisation
    for restored nicks
  * modules/nickserv/multimark: forbid unloading due to the
    potential for data loss
  * CA_ constants: include CA_EXEMPT (+e) where appropriate
- Drop atheme-serno.diff (no longer applies)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1615118400">- Redownload atheme-services-v7.2.11.tar.xz
  because they changed it</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1643630400">- Update to release 7.2.12
  * Fix CVE-2022-24976 [boo#1195989]
  * Track SASL login EID</changelog>
</package>
<package pkgid="ac6345dc49c09b0fa47fd13474a835dd2137024c74e4c98b87a740f168c229e4" name="libathemecore1" arch="s390x">
  <version epoch="0" ver="7.2.12" rel="bp154.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1417694400">- Update to new upstream release 7.2.1
  * NickServ:
  * Make `VHOST` set cloak assigner and timestamp the same way HostServ does
  * Make `INFO` call the `user_info_noexist` hook for queries that don't match an account
  * Make `REGAIN` log you in if successful.
  * Allow implementing custom filters for `LIST`
  * nickserv/multimark: new module which allows multiple MARK entries per nickname.
  * ChanServ:
  * Add a `$server:` exttarget accepting server masks
  * Add `PUBACL` flag which allows the channel access to be public.
  * Don't allow `DEOP` or `KICK` of a services bot.
  * Don't try to expand extbans in various commands.
  * Allow users with +O or +V flags to op/voice themselves, since they can regain op/voice
  by cycling the channel anyway.
  * chanserv/clear_akicks: new module providing a `CLEAR AKICKS` command.</changelog>
  <changelog author="jengelh@inai.de" date="1428062400">- Update to new upstream release 7.2.5
  * pbkdf2v2: Newer module implementing PBKDF2-HMAC digest scheme</changelog>
  <changelog author="jengelh@inai.de" date="1462276800">- Update to new upstream release 7.2.6
  * avoid potential NULL dereference in language code
  * Add NOPASSWORD criterion to nickserv/list helpfile
  * new nickserv/list criterion VACATION
- Add 0001-Do-not-copy-more-bytes-than-were-allocated.patch
  [CVE-2016-4478]
- Add 0001-chanserv-flags-make-Anope-FLAGS-compatibility-an-opt.patch
  [CVE-2014-9773, boo#978170]
- Add atheme-serno.diff, a build fix</changelog>
  <changelog author="jengelh@inai.de" date="1479643200">- Update to new upstream release 7.2.7
  * NickServ:
  * Make `VHOST` set cloak assigner and timestamp the same way
    HostServ does
  * Make `INFO` call the `user_info_noexist` hook for queries
    that don't match an account
  * Make `REGAIN` log you in if successful.
  * ChanServ:
  * Add a `$server:` exttarget accepting server masks
  * Add `PUBACL` flag which allows the channel access to be public.
  * Don't allow `DEOP` or `KICK` of a services bot.
  * Don't try to expand extbans in various commands.
  * Allow users with +O or +V flags to op/voice themselves, since
    they can regain op/voice by cycling the channel anyway.
- +e added to chanserv{} templates and founder_flags
- Remove 0001-Do-not-copy-more-bytes-than-were-allocated.patch
  and 0001-chanserv-flags-make-Anope-FLAGS-compatibility-an-opt.patch
  (applied upstream)
- Abort installation if user/group cannot be created</changelog>
  <changelog author="jengelh@inai.de" date="1490875200">- Update to new upstream release 7.2.8
  * Close a memory leak that could be exploited by attackers to
    potentially cause a denial of service.
    [CVE-2017-6384, boo#1027614]
- Update to new upstream release 7.2.9
  * Fixing use after free that could potentially be used by an
    attacker already having the privilege to use SASL impersonation
    to cause a denial of service.</changelog>
  <changelog author="jengelh@inai.de" date="1509710400">- Rename the tools dbverify and ecdsakeygen with an "atheme-"
  prefix. This is possible since they do not appear to get invoked
  by the server, but only by the user.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566388800">- Update to new upstream release 7.2.10.r2
  * Fix potential NULL dereference in modules/crypto/posix.
  * Bump E-Mail address maximum length to 254 characters.
  * Use flags setter information in modules/chanserv/access &amp;
    modules/chanserv/flags.
  * Fix issue where modules/misc/httpd was not closing its
    listening socket on deinit.
  * Fix GroupServ data loss issue when a group was the founder of
    another group.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1600084800">- Fix misuse of %_libexecdir for /usr/lib/tmpfiles
  [boo#1174075]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1614513600">- Update to release 7.2.11
  * Add a preliminary Turkish translation
  * Add HMAC-MD5 verify-only support to crypto/pbkdf2v2
  * modules/chanserv/akick: fix unload crash with akicks that
    have timeouts
  * modules/nickserv/multimark: use IRC case canonicalisation
    for restored nicks
  * modules/nickserv/multimark: forbid unloading due to the
    potential for data loss
  * CA_ constants: include CA_EXEMPT (+e) where appropriate
- Drop atheme-serno.diff (no longer applies)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1615118400">- Redownload atheme-services-v7.2.11.tar.xz
  because they changed it</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1643630400">- Update to release 7.2.12
  * Fix CVE-2022-24976 [boo#1195989]
  * Track SASL login EID</changelog>
</package>
<package pkgid="44cb938e3a9ac3648ce380a0802b0159db74f40cc508eae01afdc25a646e53f8" name="libathemecore1" arch="x86_64">
  <version epoch="0" ver="7.2.12" rel="bp154.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1417694400">- Update to new upstream release 7.2.1
  * NickServ:
  * Make `VHOST` set cloak assigner and timestamp the same way HostServ does
  * Make `INFO` call the `user_info_noexist` hook for queries that don't match an account
  * Make `REGAIN` log you in if successful.
  * Allow implementing custom filters for `LIST`
  * nickserv/multimark: new module which allows multiple MARK entries per nickname.
  * ChanServ:
  * Add a `$server:` exttarget accepting server masks
  * Add `PUBACL` flag which allows the channel access to be public.
  * Don't allow `DEOP` or `KICK` of a services bot.
  * Don't try to expand extbans in various commands.
  * Allow users with +O or +V flags to op/voice themselves, since they can regain op/voice
  by cycling the channel anyway.
  * chanserv/clear_akicks: new module providing a `CLEAR AKICKS` command.</changelog>
  <changelog author="jengelh@inai.de" date="1428062400">- Update to new upstream release 7.2.5
  * pbkdf2v2: Newer module implementing PBKDF2-HMAC digest scheme</changelog>
  <changelog author="jengelh@inai.de" date="1462276800">- Update to new upstream release 7.2.6
  * avoid potential NULL dereference in language code
  * Add NOPASSWORD criterion to nickserv/list helpfile
  * new nickserv/list criterion VACATION
- Add 0001-Do-not-copy-more-bytes-than-were-allocated.patch
  [CVE-2016-4478]
- Add 0001-chanserv-flags-make-Anope-FLAGS-compatibility-an-opt.patch
  [CVE-2014-9773, boo#978170]
- Add atheme-serno.diff, a build fix</changelog>
  <changelog author="jengelh@inai.de" date="1479643200">- Update to new upstream release 7.2.7
  * NickServ:
  * Make `VHOST` set cloak assigner and timestamp the same way
    HostServ does
  * Make `INFO` call the `user_info_noexist` hook for queries
    that don't match an account
  * Make `REGAIN` log you in if successful.
  * ChanServ:
  * Add a `$server:` exttarget accepting server masks
  * Add `PUBACL` flag which allows the channel access to be public.
  * Don't allow `DEOP` or `KICK` of a services bot.
  * Don't try to expand extbans in various commands.
  * Allow users with +O or +V flags to op/voice themselves, since
    they can regain op/voice by cycling the channel anyway.
- +e added to chanserv{} templates and founder_flags
- Remove 0001-Do-not-copy-more-bytes-than-were-allocated.patch
  and 0001-chanserv-flags-make-Anope-FLAGS-compatibility-an-opt.patch
  (applied upstream)
- Abort installation if user/group cannot be created</changelog>
  <changelog author="jengelh@inai.de" date="1490875200">- Update to new upstream release 7.2.8
  * Close a memory leak that could be exploited by attackers to
    potentially cause a denial of service.
    [CVE-2017-6384, boo#1027614]
- Update to new upstream release 7.2.9
  * Fixing use after free that could potentially be used by an
    attacker already having the privilege to use SASL impersonation
    to cause a denial of service.</changelog>
  <changelog author="jengelh@inai.de" date="1509710400">- Rename the tools dbverify and ecdsakeygen with an "atheme-"
  prefix. This is possible since they do not appear to get invoked
  by the server, but only by the user.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566388800">- Update to new upstream release 7.2.10.r2
  * Fix potential NULL dereference in modules/crypto/posix.
  * Bump E-Mail address maximum length to 254 characters.
  * Use flags setter information in modules/chanserv/access &amp;
    modules/chanserv/flags.
  * Fix issue where modules/misc/httpd was not closing its
    listening socket on deinit.
  * Fix GroupServ data loss issue when a group was the founder of
    another group.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1600084800">- Fix misuse of %_libexecdir for /usr/lib/tmpfiles
  [boo#1174075]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1614513600">- Update to release 7.2.11
  * Add a preliminary Turkish translation
  * Add HMAC-MD5 verify-only support to crypto/pbkdf2v2
  * modules/chanserv/akick: fix unload crash with akicks that
    have timeouts
  * modules/nickserv/multimark: use IRC case canonicalisation
    for restored nicks
  * modules/nickserv/multimark: forbid unloading due to the
    potential for data loss
  * CA_ constants: include CA_EXEMPT (+e) where appropriate
- Drop atheme-serno.diff (no longer applies)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1615118400">- Redownload atheme-services-v7.2.11.tar.xz
  because they changed it</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1643630400">- Update to release 7.2.12
  * Fix CVE-2022-24976 [boo#1195989]
  * Track SASL login EID</changelog>
</package>
<package pkgid="1afc036fa5ddf574653e7d70a5d74f653be399ba31afc90666e2454a82c469c8" name="libautotrace3" arch="aarch64">
  <version epoch="0" ver="0.31.1" rel="bp154.3.3.1"/>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="crrodriguez@suse.de" date="1240315200">- remove static libraries and "la" files
- cleanup spec file a bit</changelog>
  <changelog author="mls@suse.de" date="1251288000">- make patch0 usage consistent</changelog>
  <changelog author="meissner@suse.de" date="1292846400">- libexif does not seem to be directly required</changelog>
  <changelog author="sbrabec@suse.cz" date="1299499200">- Split according to shared library packaging rules.
- Enabled ImageMagick support.</changelog>
  <changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="coolo@suse.com" date="1362052800">- update license to new format</changelog>
  <changelog author="sfalken@opensuse.org" date="1407844800">- Add 0001-fix_input_png.patch:  Corrects build failure against libpng15
- Updated .spec file to use %make_install macro</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1652443200">- biWidth*biBitCnt integer overflow fix (bsc#1182158,
  CVE-2019-19004, CVE-2019-19004.patch).
- Bitmap double free fix (bsc1182159, CVE-2019-19005,
  CVE-2017-9182, CVE-2017-9190, CVE-2019-19005.patch).</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1667908800">- Added CVE-2022-32323.patch
  * [bsc#1201529, CVE-2022-32323]
  * Fixes Heap overflow in ReadImage()</changelog>
</package>
<package pkgid="56a867fdebd1beca1b49ea87391d80df59b4008e19cf2a35c6f44f0ce40cbd31" name="libautotrace3" arch="i586">
  <version epoch="0" ver="0.31.1" rel="bp154.3.3.1"/>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="crrodriguez@suse.de" date="1240315200">- remove static libraries and "la" files
- cleanup spec file a bit</changelog>
  <changelog author="mls@suse.de" date="1251288000">- make patch0 usage consistent</changelog>
  <changelog author="meissner@suse.de" date="1292846400">- libexif does not seem to be directly required</changelog>
  <changelog author="sbrabec@suse.cz" date="1299499200">- Split according to shared library packaging rules.
- Enabled ImageMagick support.</changelog>
  <changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="coolo@suse.com" date="1362052800">- update license to new format</changelog>
  <changelog author="sfalken@opensuse.org" date="1407844800">- Add 0001-fix_input_png.patch:  Corrects build failure against libpng15
- Updated .spec file to use %make_install macro</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1652443200">- biWidth*biBitCnt integer overflow fix (bsc#1182158,
  CVE-2019-19004, CVE-2019-19004.patch).
- Bitmap double free fix (bsc1182159, CVE-2019-19005,
  CVE-2017-9182, CVE-2017-9190, CVE-2019-19005.patch).</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1667908800">- Added CVE-2022-32323.patch
  * [bsc#1201529, CVE-2022-32323]
  * Fixes Heap overflow in ReadImage()</changelog>
</package>
<package pkgid="9ab8011061fac9ae89f258e9847f8be9654377ded0dc0c70f5bb036c7884f509" name="libautotrace3" arch="ppc64le">
  <version epoch="0" ver="0.31.1" rel="bp154.3.3.1"/>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="crrodriguez@suse.de" date="1240315200">- remove static libraries and "la" files
- cleanup spec file a bit</changelog>
  <changelog author="mls@suse.de" date="1251288000">- make patch0 usage consistent</changelog>
  <changelog author="meissner@suse.de" date="1292846400">- libexif does not seem to be directly required</changelog>
  <changelog author="sbrabec@suse.cz" date="1299499200">- Split according to shared library packaging rules.
- Enabled ImageMagick support.</changelog>
  <changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="coolo@suse.com" date="1362052800">- update license to new format</changelog>
  <changelog author="sfalken@opensuse.org" date="1407844800">- Add 0001-fix_input_png.patch:  Corrects build failure against libpng15
- Updated .spec file to use %make_install macro</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1652443200">- biWidth*biBitCnt integer overflow fix (bsc#1182158,
  CVE-2019-19004, CVE-2019-19004.patch).
- Bitmap double free fix (bsc1182159, CVE-2019-19005,
  CVE-2017-9182, CVE-2017-9190, CVE-2019-19005.patch).</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1667908800">- Added CVE-2022-32323.patch
  * [bsc#1201529, CVE-2022-32323]
  * Fixes Heap overflow in ReadImage()</changelog>
</package>
<package pkgid="7b69dd48327634f846b3b8946908e53de1308e180119d32fdd1b6bead5191fe9" name="libautotrace3" arch="s390x">
  <version epoch="0" ver="0.31.1" rel="bp154.3.3.1"/>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="crrodriguez@suse.de" date="1240315200">- remove static libraries and "la" files
- cleanup spec file a bit</changelog>
  <changelog author="mls@suse.de" date="1251288000">- make patch0 usage consistent</changelog>
  <changelog author="meissner@suse.de" date="1292846400">- libexif does not seem to be directly required</changelog>
  <changelog author="sbrabec@suse.cz" date="1299499200">- Split according to shared library packaging rules.
- Enabled ImageMagick support.</changelog>
  <changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="coolo@suse.com" date="1362052800">- update license to new format</changelog>
  <changelog author="sfalken@opensuse.org" date="1407844800">- Add 0001-fix_input_png.patch:  Corrects build failure against libpng15
- Updated .spec file to use %make_install macro</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1652443200">- biWidth*biBitCnt integer overflow fix (bsc#1182158,
  CVE-2019-19004, CVE-2019-19004.patch).
- Bitmap double free fix (bsc1182159, CVE-2019-19005,
  CVE-2017-9182, CVE-2017-9190, CVE-2019-19005.patch).</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1667908800">- Added CVE-2022-32323.patch
  * [bsc#1201529, CVE-2022-32323]
  * Fixes Heap overflow in ReadImage()</changelog>
</package>
<package pkgid="271ad6bc706924f2354f55c0f4e7fa0bd261fad86d66baf29f677462461c0bf6" name="libautotrace3" arch="x86_64">
  <version epoch="0" ver="0.31.1" rel="bp154.3.3.1"/>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="crrodriguez@suse.de" date="1240315200">- remove static libraries and "la" files
- cleanup spec file a bit</changelog>
  <changelog author="mls@suse.de" date="1251288000">- make patch0 usage consistent</changelog>
  <changelog author="meissner@suse.de" date="1292846400">- libexif does not seem to be directly required</changelog>
  <changelog author="sbrabec@suse.cz" date="1299499200">- Split according to shared library packaging rules.
- Enabled ImageMagick support.</changelog>
  <changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="coolo@suse.com" date="1362052800">- update license to new format</changelog>
  <changelog author="sfalken@opensuse.org" date="1407844800">- Add 0001-fix_input_png.patch:  Corrects build failure against libpng15
- Updated .spec file to use %make_install macro</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1652443200">- biWidth*biBitCnt integer overflow fix (bsc#1182158,
  CVE-2019-19004, CVE-2019-19004.patch).
- Bitmap double free fix (bsc1182159, CVE-2019-19005,
  CVE-2017-9182, CVE-2017-9190, CVE-2019-19005.patch).</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1667908800">- Added CVE-2022-32323.patch
  * [bsc#1201529, CVE-2022-32323]
  * Fixes Heap overflow in ReadImage()</changelog>
</package>
<package pkgid="832042af751a657f72f22ddfd733ea0abb7e86ece2ad7b523e2b7e80d70e820b" name="libbotan-2-18" arch="aarch64">
  <version epoch="0" ver="2.18.2" rel="bp154.2.3.1"/>
  <changelog author="adam.majer@suse.de" date="1518436800">- Don't drop -fstack-clash-protection for openSUSE 42.3 - we just
  need the Update repository present.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1518609600">- change group of libbotan-%{version_suffix} to 'System/Libraries' as
  requested on review</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1518782400">- drop explicit package requirements
- split binary package and documentation from dynamic library package
  and make documentation package noarch
- merge back Botan2 package to Botan with changelog history
- drop Botan patches
    aarch64-support.patch - doesn't seem to be required anymore
    Botan-fix_install_paths.patch - doesn't seem to be required
    no-cpuid-header.patch - SLE11 not target anymore
    Botan-fix_pkgconfig.patch - this seem to be wrong
    Botan-no-buildtime.patch - not needed anymore
    dont-set-mach-value.diff - doesn't apply, unclear and undocumented why it is there
    Botan-inttypes.patch - not required
    Botan-ull_constants.patch.bz2 - no reason anymore</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1522756800">- Update to Botan 2.5
  * Fix error in certificate wildcard matching (CVE-2018-9127), where a
    wildcard cert for b*.example.com would be accepted as a match for any host
    with name *b*.example.com (GH #1519)
  * Add support for RSA-PSS signatures in TLS (GH #1285)
  * Ed25519 certificates are now supported (GH #1501)
  * Many optimizations in ECC operations. ECDSA signatures are 8-10 times
    faster. ECDSA verification is about twice as fast. ECDH key agreement is
    3-4 times faster. (GH #1457 #1478)
  * Implement product scanning Montgomery reduction, which improves
    Diffie-Hellman and RSA performance by 10 to 20% on most platforms. (GH
    [#1472])
  * DSA signing and verification performance has improved by 30-50%.
  * Add a new Credentials_Manager callback that specifies which CAs the server
    has indicated it trusts (GH #1395 fixing #1261)
  * Add new TLS::Callbacks methods that allow creating or removing extensions,
    as well as examining extensions sent by the peer (GH #1394 #1186)
  * Add new TLS::Callbacks methods that allow an application to negotiate use
    of custom elliptic curves. (GH #1448)
  * Add ability to create custom elliptic curves (GH #1441 #1444)
  * Add support for POWER8 AES instructions (GH #1459 #1393 #1206)
  * Fix DSA/ECDSA handling of hashes longer than the group order (GH #1502
    [#986])
  * The default encoding of ECC public keys has changed from compressed to
    uncompressed point representation. This improves compatability with some
    common software packages including Golang?s standard library. (GH #1480
    [#1483])
  * It is now possible to create DNs with custom components. (GH #1490 #1492)
  * It is now possible to specify the serial number of created certificates,
    instead of using the default 128-bit random integer. (GH #1489 #1491)
  * Change DL_Group and EC_Group to store their data as shared_ptr for fast
    copying. Also both classes precompute additional useful values (eg for
    modular reductions). (GH #1435 #1454)
  * Make it possible for PKCS10 requests to include custom extensions. This
    also makes it possible to use muliple SubjectAlternativeNames of a single
    type in a request, which was previously not possible. (GH #1429 #1428)
  * Add new optimized interface for FE1 format preserving encryption. By
    caching a number of values computed in the course of the FPE calculation,
    it provides a 6-7x speedup versus the old API. (GH #1469)
  * Add DSA and ElGamal keygen functions to FFI (#1426)
  * Add Pipe::prepend_filter to replace Pipe::prepend (GH #1402)
  * Fix a memory leak in the OpenSSL block cipher integration, introduced in
  * 2.2.0
  * Use an improved algorithm for generating safe primes which is several tens
    of times faster. Also, fix a bug in the prime sieving algorithm which
    caused standard prime generation (like for RSA keys) to be slower than
    necessary. (GH #1413 #1411)
  * Correct the return value of PK_Encryptor::maximum_input_size which reported
    a much too small value (GH #1410)
  * Remove use of CPU specific optimization flags, instead the user should set
    these via CXXFLAGS if desired. (GH #1392)
  * Resolve an issue that would cause a crash in the tests if they were run on
    a machine without SSE2/NEON/VMX instructions. (GH #1495)
  * The Python module now tries to load DLLs from a list of names and uses the
    first one which successfully loads and indicates it supports the desired
    API level. (GH #1497)
  * Various minor optimizations for SHA-3 (GH #1433 #1434)
  * The output of botan --help has been improved (GH #1387)
  * Add --der-format flag to command line utils, making it possible verify
    DSA/ECDSA signatures generated by OpenSSL command line (GH #1409)
  * Add support for --library-suffix option to configure.py (GH #1405 #1404)
  * Use feature flags to enable/disable system specific code (GH #1378)
  * Add --msvc-runtime option to allow using static runtime (GH #1499 #210)
  * Add ?enable-sanitizers= option to allow specifying which sanitizers to
    enable. The existing --with-sanitizers option just enables some default set
    which is known to work with the minimum required compiler versions.
  * Use either rst2man or rst2man.py for generating man page as distributions
    differ on where this program is installed (GH #1516)
  * The threefish module has been renamed threefish_512 since that is the
    algorithm it provides. (GH #1477)
  * The Perl XS based wrapper has been removed, as it was unmaintained and
    broken. (GH #1412)
  * The sqlite3 encryption patch under contrib has been removed. It is still
    maintained by the original author at
    https://github.com/OlivierJG/botansqlite3</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1523361600">- Update to Botan 2.6
  * CVE-2018-9860 Fix a bug decrypting TLS CBC ciphertexts which could for a
    malformed ciphertext cause the decryptor to read and HMAC an additional 64K
    bytes of data which is not part of the record. This could cause a crash if
    the read went into unmapped memory. No information leak or out of bounds
    write occurs.
  * Add support for OAEP labels (GH #1508)
  * RSA signing is about 15% faster (GH #1523) and RSA verification is about 50% faster.
  * Add exponent blinding to RSA (GH #1523)
  * Add Cipher_Mode::create and AEAD_Mode::create (GH #1527)
  * Fix bug in TLS server introduced in 2.5 which caused connection to fail if
    the client offered any signature algorithm not known to the server (for
    example RSA/SHA-224).
  * Fix a bug in inline asm that would with GCC 7.3 cause incorrect
    computations and an infinite loop during the tests. (GH #1524 #1529)</changelog>
  <changelog author="kasimir_@outlook.de" date="1523534400">- fixed to build on armv6 and armv7</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1531224000">- Update to Botan 2.7
  * CVE-2018-12435 Avoid a side channel in ECDSA signature generation (GH
    [#1604])
  * Avoid a side channel in RSA key generation due to use of a non-constant
    time gcd algorithm. (GH #1542 #1556)
  * Optimize prime generation, especially improving RSA key generation. (GH
    [#1542])
  * Make Karatsuba multiplication, Montgomery field operations, Barrett
    reduction and Montgomery exponentiation const time (GH #1540 #1606 #1609
    [#1610])
  * Optimizations for elliptic curve operations especially improving reductions
    and inversions modulo NIST primes (GH #1534 #1538 #1545 #1546 #1547 #1550)
  * Add 24 word wide Comba multiplication, improving 3072-bit RSA and DH by
    ~25%. (GH #1564)
  * Unroll Montgomery reduction for specific sizes (GH #1603)
  * Improved performance of signature verification in ECGDSA, ECKCDSA, SM2 and
    GOST by 10-15%.
  * XMSS optimizations (GH #1583 #1585)
  * Fix an error that meant XMSS would only sign half as many signatures as is
    allowed (GH #1582)
  * Add support for base32 encoding/decoding (GH #1541)
  * Add BMI2 optimized version of SHA-256, 40% faster on Skylake (GH #1584)
  * Allow the year to be up to 2200 in ASN.1 time objects. Previously this was
    limited to 2100. (GH #1536)
  * Add support for Scrypt password hashing (GH #1570)
  * Add support for using Scrypt for private key encryption (GH #1574)
  * Optimizations for DES/3DES, approx 50% faster when used in certain modes
    such as CBC decrypt or CTR.
  * XMSS signature verification did not check that the signature was of the
    expected length which could lead to a crash. (GH #1537)
  * The bcrypt variants 2b and 2y are now supported.
  * Support for 192-bit Suite B TLS profile is now implemented, as the 128-bit
    Suite B is since 2015 not allowed anymore.
  * Previously botan allowed GCM to be used with an empty nonce, which is not
    allowed by the specification. Now such nonces are rejected.
  * Avoid problems on Windows when compiling in Unicode mode (GH #1615 #1616)
  * Previously for ASN.1 encoded signatures (eg ECDSA) Botan would accept any
    valid BER encoding. Now only the single valid DER encoding is accepted.
  * Correct an error that could in rare cases cause an internal error exception
    when doing computations with the P-224 curve.
  * Optimizations to reduce allocations/copies during DER encoding and BER
    decoding (GH #1571 #1572 #1600)
  * Botan generates X.509 subject key IDs by hashing the public key with
    whatever hash function is being used to sign the certificate. However
    especially for SHA-512 this caused SKIDs that were far longer than
    necessary. Now all SKIDs are truncated to 192 bits.
  * In the test suite use mkstemp to create temporary files instead of creating
    them in the current working directory. (GH #1533 #1530)
  * It is now possible to safely override CXX when invoking make in addition to
    when configure.py is run. (GH #1579)
  * OIDs for Camellia and SM4 in CBC and GCM mode are now defined, making it
    possible to use this algorithms for private key encryption.
  * Avoid creating symlinks to the shared object on OpenBSD (#1535)
  * The factor command runs much faster on larger inputs now.
  * Support for Windows Phone/UWP was deprecated starting in 2.5. This
    deprecation has been reversed as it seems UWP is still actively used. (GH
    [#1586] #1587)
  * Support for Visual C++ 2013 is deprecated, and will be removed in Jan 2019.
  * Added support for GCC?s ?sysroot option to configure.py for
    cross-compiling.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1533038400">- Fix version in baselibs.conf</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1547121600">- Update to Botan 2.9
  * Bump SONAME
  * CVE-2018-20187 Address a side channel during ECC key generation, which used an
    unblinded Montgomery ladder. As a result, a timing attack can reveal
    information about the high bits of the secret key.
  * Fix bugs in TLS which caused negotiation failures when the client used an
    unknown signature algorithm or version (GH #1711 #1709 #1708)
  * Fix bug affecting GCM, EAX and ChaCha20Poly1305 where if the associated data
    was set after starting a message, the new AD was not reflected in the produced
    tag. Now with these modes setting an AD after beginning a message throws an
    exception.
  * Use a smaller sieve which improves performance of prime generation.
  * Fixed a bug that caused ChaCha to produce incorrect output after encrypting 256
    GB. (GH #1728)
  * Add NEON and AltiVec implementations of ChaCha (GH #1719 #1728 #1729)
  * Optimize AVX2 ChaCha (GH #1730)
  * Many more operations in BigInt, ECC and RSA code paths are either fully const
    time or avoid problematic branches that could potentially be exploited in a
    side channel attack. (GH #1738 #1750 #1754 #1755 #1757 #1758 #1759 #1762 #1765
    [#1770] #1773 #1774 #1779 #1780 #1794 #1795 #1796 #1797)
  * Several optimizations for BigInt and ECC, improving ECDSA performance by as
    much as 30%. (GH #1734 #1737 #1777 #1750 #1737 #1788)
  * Support recovering an ECDSA public key from a message/signature pair (GH #664
    [#1784])
  * Add base58 encoding/decoding functions (GH #1783)
  * In the command line interface, add support for reading passphrases from the
    terminal with echo disabled (GH #1756)
  * Add CT::Mask type to simplify const-time programming (GH #1751)
  * Add new configure options --disable-bmi2, --disable-rdrand, and
  - -disable-rdseed to prevent use of those instruction sets.
  * Add error_type and error_code functions to Exception type (GH #1744)
  * Now on POSIX systems posix_memalign is used instead of mmap for allocating the
    page-locked memory pool. This avoids issues with fork. (GH #602 #1798)
  * When available, use RDRAND to generate the additional data in
    Stateful_RNG::randomize_with_ts_input
  * Use vzeroall/vzeroupper intrinsics to avoid AVX2/SSE transition penalties.
  * Support for Visual C++ 2013 has been removed (GH #1557 #1697)
  * Resolve a memory leak when verifying ECDSA signatures with versions of OpenSSL
    before 1.1.0 (GH #1698)
  * Resolve a memory leak using ECDH via OpenSSL (GH #1767)
  * Fix an error in XTS which prohibited encrypting values which were exactly the
    same length as the underlying block size. Messages of this size are allowed by
    the standard and other XTS implementations. (GH #1706)
  * Resolve a bug in TSS which resulted in it using an incorrect length field in
    the shares. Now the correct length is encoded, but either correct or buggy
    lengths are accepted when decoding. (GH #1722)
  * Correct a bug when reducing a negative BigInt modulo a small power of 2. (GH
    [#1755])
  * Add CLI utils for threshold secret splitting. (GH #1722)
  * Fix a bug introduced in 2.8.0 that caused compilation failure if using a single
    amalgamation file with AVX2 enabled. (GH #1700)
  * Add an explicit OS target for Emscripten and improve support for it. (GH #1702)
  * Fix small issues when building for QNX
  * Switch the Travis CI build to using Ubuntu 16.04 (GH #1767)
  * Add options to configure.py to disable generation of pkg-config file, and (for
    systems where pkg-config support defaults to off, like Windows), to enable
    generating it. (GH #1268)
  * Modify configure.py to accept empty lists or trailing/extra commas. (GH #1705)
- Update to Botan 2.8
  * Add support for using Apple CommonCrypto library for hashing (GH #1667),
    cipher modes (GH #1674) and block ciphers (GH #1673).
  * Support for negotiating TLS versions 1.0 and 1.1 is disabled in the default
    TLS policy. In addition, support for negotiating TLS ciphersuites using CBC
    or CCM mode is disabled by default. Applications which need to interop with
    old peers must enable these in their TLS policy object. (GH #1651)
  * During primality testing, use a Lucas test in addition to Miller-Rabin. It
    is possible to construct a composite integer which passes n Miller-Rabin
    tests with probability (1/4)^n. So for a incautious verifier using a small
    number of tests (under 16 or so) it is possible if unlikely they would
    accept such a composite as prime. Adding a Lucas test precludes such an
    attack. (GH #1636)
  * Add XChaCha and XChaCha20Poly1305 (GH #1640)
  * Add AVX2 implementations of ChaCha (GH #1662) and Serpent (GH #1660)
  * Add a new password hashing interface in pwdhash.h (GH #1670)
  * C binding improvements. Added functions to get name and supported
    keylengths of cipher, hash and MAC objects, support for FE1 format
    preserving encryption (GH #1625 #1646), functions to load and save RSA keys
    in PKCS #1 format (GH #1621), HOTP and TOTP algorithms, scrypt, certificate
    verification (GH #1647), functions to get the output length of public key
    operations (GH #1642), and functions for loading and serializing X25519
    keys (GH #1681)
  * Support for building with BOTAN_MP_WORD_BITS set to 8 or 16 has been removed.
  * Previously SM2 had two distinct key types, one for signatures and another
    for encryption. They have now been merged into a single key type since in
    practice it seems the same key is at times used for both operations. (GH
    [#1637])
  * The Cipher_Mode class now derives from SymmetricAlgorithm (GH #1639)
  * Add support for using the ARMv8 instructions for SM4 encryption (GH #1622)
  * The entropy source using SecRandomCopyBytes has been removed as it was
    redundant with other entropy sources (GH #1668)
  * The Python module has much better error checking and reporting, and offers
    new functionality such as scrypt, MPI and FPE. (GH #1643 #1646)
  * Fixed a bug that caused CCM to fail with an exception when used with L=8 (GH #1631 #1632)
  * The default bcrypt work factor has been increased from 10 to 12.
  * The default algorithm used in passhash9 has changed from SHA-256 to
    SHA-512, and the default work factor increased from 10 to 15.
  * In ECC private keys, include the public key data for compatibility with GnuTLS (GH #1634 #1635)
  * Add support for using Linux getrandom syscall to access the system PRNG.
    This is disabled by default, use --with-os-feature=getrandom to enable.
  * It is now possible to encrypt private keys using SIV mode.
  * The FFI function botan_privkey_load now ignores its rng argument.
  * Resolve a problem when building under Visual C++ 15.8 (GH #1624)
  * Fix a bug in XSalsa20 (192-bit Salsa nonces) where if set_iv was called
    twice without calling set_key, the resulting encryption was incorrect. (GH
    [#1640])
  * Handle an error seen when verifying invalid ECDSA signatures using LibreSSL
    on non x86-64 platforms (GH #1627 #1628)
  * Fix bugs in PKCS7 and X9.23 CBC padding schemes, which would ignore the
    first byte in the event the padding took up the entire block. (GH #1690)
  * Correct bugs which would cause CFB, OCB, and GCM modes to crash when they
    were used in an unkeyed state. (GH #1639)
  * Optimizations for SM4 and Poly1305
  * Avoid a cache side channel in the AES key schedule
  * Add pk_encrypt and pk_decrypt CLI operations
  * Now asn1print CLI defaults to printing context-specific fields.
  * Use codec_base for Base64, which matches how Base32 is implemented (GH #1597)
  * The cast module has been split up into cast128 and cast256 (GH #1685)
  * When building under Visual C++ 2013, the user must acknowledge the upcoming
    removal of support using the configure.py flag --ack-vc2013-deprecated (GH
    [#1557])</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1554206400">- Update to Botan 2.10
  * Bump SONAME
  * Warning: XMSS currently implements draft-06 which is not compatible with
    the final RFC 8391 specification. A PR is open to fix this, however it will
    break all current uses of XMSS. If you are currently using XMSS please
    comment at https://github.com/randombit/botan/pull/1858. Otherwise the PR
    will be merged and support for draft-06 will be removed starting in 2.11.
  * Added a new certificate store implementation that can access the MacOS
    keychain certificate store. (GH #1830)
  * Redesigned Memory_Pool class, which services allocations out of a set of
    pages locked into memory (using mlock/VirtualLock). It is now faster and
    with improved exploit mitigations. (GH #1800)
  * Add BMI2 implementations of SHA-512 and SHA-3 which improve performance by
    25-35% on common CPUs. (GH #1815)
  * Unroll SHA-3 computation improving performance by 10-12% (GH #1838)
  * Add a Thread_Pool class. It is now possible to run the tests in multiple
    threads with --test-threads=N flag to select the number of threads to use.
    Use --test-threads=0 to run with as many CPU cores as are available on the
    current system. The default remains single threaded. (GH #1819)
  * XMSS signatures now uses a global thread pool instead of spawning new
    threads for each usage. This improves signature generation performance by
    between 10% and 60% depending on architecture and core count. (GH #1864)
  * Some functions related to encoding and decoding BigInts have been
    deprecated. (GH #1817)
  * Binary encoding and decoding of BigInts has been optimized by performing
    word-size operations when possible. (GH #1817)
  * Rename the exception Integrity_Failure to Invalid_Authentication_Tag to
    make its meaning and usage more clear. The old name remains as a typedef.
    (GH #1816)
  * Support for using Boost filesystem and MSVC?s std::filesystem have been
    removed, since already POSIX and Win32 versions had to be maintained for
    portability. (GH #1814)
  * Newly generated McEliece and XMSS keys now default to being encrypted using
    SIV mode, support for which was added in 2.8.0. Previously GCM was used by
    default for these algorithms.
  * Use arc4random on Android systems (GH #1851)
  * Fix the encoding of PGP-S2K iteration counts (GH #1853 #1854)
  * Add a facility for sandboxing the command line util. Currently FreeBSD
    (Capsicum) and OpenBSD (pledge) sandboxes are supported. (GH #1808)
  * Use if constexpr when available.
  * Disable building shared libs on iOS as it was broken and it is not clear
    shared libraries are ever useful on iOS (GH #1865)
  * Renamed the darwin build target to macos. This should not cause any
    user-visible change. (GH #1866)
  * Add support for using sccache to cache the Windows CI build (GH #1807)
  * Add --extra-cxxflags option which allows adding compilation flags without
    overriding the default set. (GH #1826)
  * Add --format= option to the hash cli which allows formatting the output as
    base64 or base58, default output remains hex.
  * Add base58_enc and base58_dec cli utils for base58 encoding/decoding. (GH #1848)
  * Enable getentropy by default on macOS (GH #1862)
  * Avoid using -momit-leaf-frame-pointer flags, since -fomit-frame-pointer is
    already the default with recent versions of GCC.
  * Fix XLC sanitizer flags.
  * Rename Blake2b class to BLAKE2b to match the official name. There is a typedef for compat.
  * Fix a bug where loading a raw Ed25519_PublicKey of incorrect length would
    lead to a crash. (GH #1850)
  * Fix a bug that caused compilation problems using CryptoNG PRNG. (GH #1832)
  * Extended SHAKE-128 cipher to support any key between 1 and 160 bytes,
    instead of only multiples of 8 bytes.
  * Minor HMAC optimizations.
  * Build fixes for GNU/Hurd.
  * Fix a bug that prevented generating or verifying Ed25519 signatures in the
    CLI (GH #1828 #1829)
  * Fix a compilation error when building the amalgamation outside of the
    original source directory when AVX2 was enabled. (GH #1812)
  * Fix a crash when creating the amalgamation if a header file was edited on
    Windows but then the amalgamation was built on Linux (GH #1763)</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1586347200">- Update to Botan 2.14:
  * Add support for using POWER8+ VPSUMD instruction to accelerate GCM (GH #2247)
  * Optimize the vector permute AES implementation, especially improving
    performance on ARMv7, Aarch64, and POWER. (GH #2243)
  * Use a new algorithm for modular inversions which is both faster
    and more resistant to side channel attacks. (GH #2287 #2296 #2301)
  * Address an issue in CBC padding which would leak the length of the plaintext
    which was being padded. Unpadding during decryption was not affected.
  * Optimize NIST prime field reductions, improving ECDSA by 3-9% (GH #2295)
  * Increase the size of the ECC blinding mask and scale it based on the
    size of the group order. (GH #880 #893 #2308)
  * Add server side support for the TLS asio wrapper. (GH #2229)
  * Add support for using Windows certificate store on MinGW (GH #2280)
  * Add a CLI utility cpu_clock which estimates the speed of the processor cycle counter.
  * Add Roughtime client (GH #2143 #1842)
  * Add support for XMSS X.509 certificates (GH #2172)
  * Add support for X.509 CRLs in FFI layer and Python wrapper (GH #2213)
  * Add AVX2 implementation of SHACAL2 (GH #2196)
  * Support more functionality for X.509 in the Python API (GH #2165)
  * Add generic CPU target useful when building for some new or unusual platform.
  * Disable MD5 in BSI or NIST modes (GH #2188)
  * Many currently public headers are being deprecated. If any such header is included by
    an application, a warning is issued at compile time.
    Headers issuing this warning will be made internal in a future major release.
  * RSA signature performance improvements (GH #2068 #2070)
  * Performance improvements for GCM (GH #2024 #2099 #2119), OCB (#2122), XTS (#2123) and
    ChaCha20Poly1305 (GH #2117), especially for small messages.
  * Add support for constant time AES using NEON and AltiVec (GH #2093 #2095 #2100)
  * Improve performance of POWER8 AES instructions (GH #2096)
  * Add support for the POWER9 hardware random number generator (GH #2026)
  * Add support for 64-bit version of RDRAND, doubling performance on x86-64 (GH #934 #2022)
  * In DTLS server, support a client crashing and then reconnecting from the same
    source port, as described in RFC 6347 sec 4.2.8 (GH #2029)
  * Optimize DTLS MTU splitting to split precisely to the set MTU (GH #2042)
  * Add support for the TLS v1.3 downgrade indicator. (GH #2027)
  * Add Argon2 PBKDF and password hash (GH #459 #1981 #1987)
  * Add Bcrypt-PBKDF (GH #1990)
  * Add server side support for issuing DTLS HelloVerifyRequest messages (GH #1999)
  * Add support for the TLS v1.3 supported_versions extension. (GH #1976)
  * Add Ed25519ph compatible with RFC 8032 (GH #1699 #2000)
  * Add support for OCSP stapling on server side. (GH #1703 #1967)
  * Add a boost::asio TLS stream compatible with boost::asio::ssl. (GH #1839 #1927 #1992)
  * Add a certificate store for Linux/Unix systems. (GH #1885 #1936)
  * Various Fixes</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597579200">- update to 2.15:
  Fix a bug where the name constraint extension did not constrain the alternative
  DN field which can be included in a subject alternative name. This would allow
  a corrupted sub-CA which was otherwise constrained by a name constraint to
  issue a certificate with a prohibited DN.
  Fix a bug in the TLS server during client authentication where where if a
  (disabled by default) static RSA ciphersuite was selected, then no certificate
  request would be sent. This would have an equivalent effect to a client which
  simply replied with an empty Certificate message. (GH #2367)
  Replace the T-Tables implementation of AES with a 32-bit bitsliced version. As
  a result AES is now constant time on all processors. (GH #2346 #2348 #2353
  [#2329] #2355)
  In TLS, enforce that the key usage given in the server certificate allows the
  operation being performed in the ciphersuite. (GH #2367)
  In X.509 certificates, verify that the algorithm parameters are the expected
  NULL or empty. (GH #2367)
  Change the HMAC key schedule to attempt to reduce the information leaked from
  the key schedule with regards to the length of the key, as this is at times (as
  for example in PBKDF2) sensitive information. (GH #2362)
  Add Processor_RNG which wraps RDRAND or the POWER DARN RNG instructions. The
  previous RDRAND_RNG interface is deprecated. (GH #2352)
  The documentation claimed that mlocked pages were created with a guard page
  both before and after. However only a trailing guard page was used. Add a
  leading guard page. (GH #2334)
  Add support for generating and verifying DER-encoded ECDSA signatures in the C
  and Python interfaces. (GH #2357 #2356)
  Workaround a bug in GCC?s UbSan which triggered on a code sequence in XMSS (GH
  [#2322])
  When building documentation using Sphinx avoid parallel builds with version 3.0
  due to a bug in that version (GH #2326 #2324)
  Fix a memory leak in the CommonCrypto block cipher calls (GH #2371)
  Fix a flaky test that would occasionally fail when running the tests with a
  large number of threads. (GH #2325 #2197)
  Additional algorithms are now deprecated: XTEA, GOST, and Tiger. They will be
  removed in a future major release.</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1603800000">- Update to 2.16.0:
  * Now userspace PRNG objects (such as AutoSeeded_RNG and HMAC_DRBG)
    use an internal lock, which allows safe concurrent use. This
    however is purely a precaution in case of accidental sharing of
    such RNG objects; for performance reasons it is always preferable
    to use a RNG per thread if a userspace RNG is needed.
  * DL_Group and EC_Group objects now track if they were created
    from a known trusted group (such as P-256 or an IPsec DH
    parameter). If so, then verification tests can be relaxed, as
    compared to parameters which may have been maliciously
    constructed in order to pass primality checks.
  * RandomNumberGenerator::add_entropy_T assumed its input was a POD
    type but did not verify this.
  * Support OCSP responders that live on a non-standard port.
  * Add support for Solaris sandbox.
  * Support suffixes on release numbers for alpha/beta releases.
  * Fix a bug in EAX which allowed requesting a 0 length tag, which
    had the effect of using a full length tag. Instead omit the
    length field, or request the full tag length explicitly.
  * Fix a memory leak in GCM where if passed an unsuitable block
    cipher (eg not 128 bit) it would throw an exception and leak
    the cipher object.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1604750400">- Botan 2.17.1:
  * Fix bugs in ECDSA signature generation and verifications under
    specific circumstances
  * developer visible changes, including deprecation with warnings
  * optimization in the non-hardware assisted AES key generation
  * Add more detection logic for AVX-512 features
  * Fix a bug parsing deeply nested cipher names
  * Prevent requesting DER encoding of signatures when the
    algorithm did not support it</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1605268800">- Botan 2.17.2:
  * Fix build problem on ppc64
  * Resolve an issue in the modular square root algorithm</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1608724800">- Botan 2.17.3:
  * Harden against side-channels from decoding secret values by
    changing the base64, base58, base32, and hex encoding and
    decoding opearations to run in constant time</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1618574400">- Botan 2.18.0
  * Add support for implementing custom RNG objects through the FFI
    interface
  * Improve safegcd bounds, improving runtime performance
  * Reject non-TLS messages as quickly as possible without waiting
    for a full record.
  * Fixes for TLS::Stream::async_shutdown
- Removed unneeded GNU MP build requirement, support was dropped
  with version 1.11.10
- Enabled check target, verify integrity of build library</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1620648000">- Botan 2.18.1:
  * Fix a build regression in 2.18.0 which caused linker flags
    which contain -l within them (such as -fuse-linker-plugin)
    to be misinterpreted
  * Fix a bug which caused decoding a certificate which contained
    more than one name in a single RDN
  * Fix a bug which caused OID lookup failures when run in a locale
    which uses thousands separators (pt_BR was reported as having
    this issue)
  * DNS names in name constraints were compared with case
    sensitivity, which could cause valid certificates to be
    rejected
  * X.509 name constraint extensions were rejected if non-critical.
    RFC 5280 requires conforming CAs issue such extensions as
    critical, but not all certificates are compliant, and all other
    known implementations do not require this
  * X.509 name constraints were incorrectly applied to the
    certificate which included the constraint
- build with lzma compression support
- build with SQLite support
- build with TPM support
- fix SLE 12 build</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1637755200">- update to 2.18.2:
  * Avoid using short exponents when encrypting in ElGamal, as some PGP
    implementations generate keys with parameters that are weak when
    short exponents are used CVE-2021-40529 boo#1190244
  * Fix a low risk OAEP decryption side channel
  * Work around a miscompilation of SHA-3 caused by a bug in Clang 12
    and XCode 13
  * Remove support in OpenSSL provider for algorithms which are
    disabled by default in OpenSSL 3.0
  * Add CI based on GitHub actions to replace Travis CI
  * Fix the online OCSP test, as the certificate involved had expired.
  * Fix some test failures induced by the expiration of the trust root
    "DST Root CA X3"</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1668686400">- Fixed [CVE-2022-43705,bsc#1205509]
  * Added Botan-CVE-2022-43705.patch
  * Added Botan-CVE-2022-43705-certs.tgz
  * validate that an embedded certificate was issued by the end-entity
    issuing certificate authority when checking OCSP responses.</changelog>
</package>
<package pkgid="3f7f0e18af5fea6110ce065fa716350f91caf12b5a12d01b1bae9367079fed69" name="libbotan-2-18" arch="i586">
  <version epoch="0" ver="2.18.2" rel="bp154.2.3.1"/>
  <changelog author="adam.majer@suse.de" date="1518436800">- Don't drop -fstack-clash-protection for openSUSE 42.3 - we just
  need the Update repository present.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1518609600">- change group of libbotan-%{version_suffix} to 'System/Libraries' as
  requested on review</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1518782400">- drop explicit package requirements
- split binary package and documentation from dynamic library package
  and make documentation package noarch
- merge back Botan2 package to Botan with changelog history
- drop Botan patches
    aarch64-support.patch - doesn't seem to be required anymore
    Botan-fix_install_paths.patch - doesn't seem to be required
    no-cpuid-header.patch - SLE11 not target anymore
    Botan-fix_pkgconfig.patch - this seem to be wrong
    Botan-no-buildtime.patch - not needed anymore
    dont-set-mach-value.diff - doesn't apply, unclear and undocumented why it is there
    Botan-inttypes.patch - not required
    Botan-ull_constants.patch.bz2 - no reason anymore</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1522756800">- Update to Botan 2.5
  * Fix error in certificate wildcard matching (CVE-2018-9127), where a
    wildcard cert for b*.example.com would be accepted as a match for any host
    with name *b*.example.com (GH #1519)
  * Add support for RSA-PSS signatures in TLS (GH #1285)
  * Ed25519 certificates are now supported (GH #1501)
  * Many optimizations in ECC operations. ECDSA signatures are 8-10 times
    faster. ECDSA verification is about twice as fast. ECDH key agreement is
    3-4 times faster. (GH #1457 #1478)
  * Implement product scanning Montgomery reduction, which improves
    Diffie-Hellman and RSA performance by 10 to 20% on most platforms. (GH
    [#1472])
  * DSA signing and verification performance has improved by 30-50%.
  * Add a new Credentials_Manager callback that specifies which CAs the server
    has indicated it trusts (GH #1395 fixing #1261)
  * Add new TLS::Callbacks methods that allow creating or removing extensions,
    as well as examining extensions sent by the peer (GH #1394 #1186)
  * Add new TLS::Callbacks methods that allow an application to negotiate use
    of custom elliptic curves. (GH #1448)
  * Add ability to create custom elliptic curves (GH #1441 #1444)
  * Add support for POWER8 AES instructions (GH #1459 #1393 #1206)
  * Fix DSA/ECDSA handling of hashes longer than the group order (GH #1502
    [#986])
  * The default encoding of ECC public keys has changed from compressed to
    uncompressed point representation. This improves compatability with some
    common software packages including Golang?s standard library. (GH #1480
    [#1483])
  * It is now possible to create DNs with custom components. (GH #1490 #1492)
  * It is now possible to specify the serial number of created certificates,
    instead of using the default 128-bit random integer. (GH #1489 #1491)
  * Change DL_Group and EC_Group to store their data as shared_ptr for fast
    copying. Also both classes precompute additional useful values (eg for
    modular reductions). (GH #1435 #1454)
  * Make it possible for PKCS10 requests to include custom extensions. This
    also makes it possible to use muliple SubjectAlternativeNames of a single
    type in a request, which was previously not possible. (GH #1429 #1428)
  * Add new optimized interface for FE1 format preserving encryption. By
    caching a number of values computed in the course of the FPE calculation,
    it provides a 6-7x speedup versus the old API. (GH #1469)
  * Add DSA and ElGamal keygen functions to FFI (#1426)
  * Add Pipe::prepend_filter to replace Pipe::prepend (GH #1402)
  * Fix a memory leak in the OpenSSL block cipher integration, introduced in
  * 2.2.0
  * Use an improved algorithm for generating safe primes which is several tens
    of times faster. Also, fix a bug in the prime sieving algorithm which
    caused standard prime generation (like for RSA keys) to be slower than
    necessary. (GH #1413 #1411)
  * Correct the return value of PK_Encryptor::maximum_input_size which reported
    a much too small value (GH #1410)
  * Remove use of CPU specific optimization flags, instead the user should set
    these via CXXFLAGS if desired. (GH #1392)
  * Resolve an issue that would cause a crash in the tests if they were run on
    a machine without SSE2/NEON/VMX instructions. (GH #1495)
  * The Python module now tries to load DLLs from a list of names and uses the
    first one which successfully loads and indicates it supports the desired
    API level. (GH #1497)
  * Various minor optimizations for SHA-3 (GH #1433 #1434)
  * The output of botan --help has been improved (GH #1387)
  * Add --der-format flag to command line utils, making it possible verify
    DSA/ECDSA signatures generated by OpenSSL command line (GH #1409)
  * Add support for --library-suffix option to configure.py (GH #1405 #1404)
  * Use feature flags to enable/disable system specific code (GH #1378)
  * Add --msvc-runtime option to allow using static runtime (GH #1499 #210)
  * Add ?enable-sanitizers= option to allow specifying which sanitizers to
    enable. The existing --with-sanitizers option just enables some default set
    which is known to work with the minimum required compiler versions.
  * Use either rst2man or rst2man.py for generating man page as distributions
    differ on where this program is installed (GH #1516)
  * The threefish module has been renamed threefish_512 since that is the
    algorithm it provides. (GH #1477)
  * The Perl XS based wrapper has been removed, as it was unmaintained and
    broken. (GH #1412)
  * The sqlite3 encryption patch under contrib has been removed. It is still
    maintained by the original author at
    https://github.com/OlivierJG/botansqlite3</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1523361600">- Update to Botan 2.6
  * CVE-2018-9860 Fix a bug decrypting TLS CBC ciphertexts which could for a
    malformed ciphertext cause the decryptor to read and HMAC an additional 64K
    bytes of data which is not part of the record. This could cause a crash if
    the read went into unmapped memory. No information leak or out of bounds
    write occurs.
  * Add support for OAEP labels (GH #1508)
  * RSA signing is about 15% faster (GH #1523) and RSA verification is about 50% faster.
  * Add exponent blinding to RSA (GH #1523)
  * Add Cipher_Mode::create and AEAD_Mode::create (GH #1527)
  * Fix bug in TLS server introduced in 2.5 which caused connection to fail if
    the client offered any signature algorithm not known to the server (for
    example RSA/SHA-224).
  * Fix a bug in inline asm that would with GCC 7.3 cause incorrect
    computations and an infinite loop during the tests. (GH #1524 #1529)</changelog>
  <changelog author="kasimir_@outlook.de" date="1523534400">- fixed to build on armv6 and armv7</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1531224000">- Update to Botan 2.7
  * CVE-2018-12435 Avoid a side channel in ECDSA signature generation (GH
    [#1604])
  * Avoid a side channel in RSA key generation due to use of a non-constant
    time gcd algorithm. (GH #1542 #1556)
  * Optimize prime generation, especially improving RSA key generation. (GH
    [#1542])
  * Make Karatsuba multiplication, Montgomery field operations, Barrett
    reduction and Montgomery exponentiation const time (GH #1540 #1606 #1609
    [#1610])
  * Optimizations for elliptic curve operations especially improving reductions
    and inversions modulo NIST primes (GH #1534 #1538 #1545 #1546 #1547 #1550)
  * Add 24 word wide Comba multiplication, improving 3072-bit RSA and DH by
    ~25%. (GH #1564)
  * Unroll Montgomery reduction for specific sizes (GH #1603)
  * Improved performance of signature verification in ECGDSA, ECKCDSA, SM2 and
    GOST by 10-15%.
  * XMSS optimizations (GH #1583 #1585)
  * Fix an error that meant XMSS would only sign half as many signatures as is
    allowed (GH #1582)
  * Add support for base32 encoding/decoding (GH #1541)
  * Add BMI2 optimized version of SHA-256, 40% faster on Skylake (GH #1584)
  * Allow the year to be up to 2200 in ASN.1 time objects. Previously this was
    limited to 2100. (GH #1536)
  * Add support for Scrypt password hashing (GH #1570)
  * Add support for using Scrypt for private key encryption (GH #1574)
  * Optimizations for DES/3DES, approx 50% faster when used in certain modes
    such as CBC decrypt or CTR.
  * XMSS signature verification did not check that the signature was of the
    expected length which could lead to a crash. (GH #1537)
  * The bcrypt variants 2b and 2y are now supported.
  * Support for 192-bit Suite B TLS profile is now implemented, as the 128-bit
    Suite B is since 2015 not allowed anymore.
  * Previously botan allowed GCM to be used with an empty nonce, which is not
    allowed by the specification. Now such nonces are rejected.
  * Avoid problems on Windows when compiling in Unicode mode (GH #1615 #1616)
  * Previously for ASN.1 encoded signatures (eg ECDSA) Botan would accept any
    valid BER encoding. Now only the single valid DER encoding is accepted.
  * Correct an error that could in rare cases cause an internal error exception
    when doing computations with the P-224 curve.
  * Optimizations to reduce allocations/copies during DER encoding and BER
    decoding (GH #1571 #1572 #1600)
  * Botan generates X.509 subject key IDs by hashing the public key with
    whatever hash function is being used to sign the certificate. However
    especially for SHA-512 this caused SKIDs that were far longer than
    necessary. Now all SKIDs are truncated to 192 bits.
  * In the test suite use mkstemp to create temporary files instead of creating
    them in the current working directory. (GH #1533 #1530)
  * It is now possible to safely override CXX when invoking make in addition to
    when configure.py is run. (GH #1579)
  * OIDs for Camellia and SM4 in CBC and GCM mode are now defined, making it
    possible to use this algorithms for private key encryption.
  * Avoid creating symlinks to the shared object on OpenBSD (#1535)
  * The factor command runs much faster on larger inputs now.
  * Support for Windows Phone/UWP was deprecated starting in 2.5. This
    deprecation has been reversed as it seems UWP is still actively used. (GH
    [#1586] #1587)
  * Support for Visual C++ 2013 is deprecated, and will be removed in Jan 2019.
  * Added support for GCC?s ?sysroot option to configure.py for
    cross-compiling.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1533038400">- Fix version in baselibs.conf</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1547121600">- Update to Botan 2.9
  * Bump SONAME
  * CVE-2018-20187 Address a side channel during ECC key generation, which used an
    unblinded Montgomery ladder. As a result, a timing attack can reveal
    information about the high bits of the secret key.
  * Fix bugs in TLS which caused negotiation failures when the client used an
    unknown signature algorithm or version (GH #1711 #1709 #1708)
  * Fix bug affecting GCM, EAX and ChaCha20Poly1305 where if the associated data
    was set after starting a message, the new AD was not reflected in the produced
    tag. Now with these modes setting an AD after beginning a message throws an
    exception.
  * Use a smaller sieve which improves performance of prime generation.
  * Fixed a bug that caused ChaCha to produce incorrect output after encrypting 256
    GB. (GH #1728)
  * Add NEON and AltiVec implementations of ChaCha (GH #1719 #1728 #1729)
  * Optimize AVX2 ChaCha (GH #1730)
  * Many more operations in BigInt, ECC and RSA code paths are either fully const
    time or avoid problematic branches that could potentially be exploited in a
    side channel attack. (GH #1738 #1750 #1754 #1755 #1757 #1758 #1759 #1762 #1765
    [#1770] #1773 #1774 #1779 #1780 #1794 #1795 #1796 #1797)
  * Several optimizations for BigInt and ECC, improving ECDSA performance by as
    much as 30%. (GH #1734 #1737 #1777 #1750 #1737 #1788)
  * Support recovering an ECDSA public key from a message/signature pair (GH #664
    [#1784])
  * Add base58 encoding/decoding functions (GH #1783)
  * In the command line interface, add support for reading passphrases from the
    terminal with echo disabled (GH #1756)
  * Add CT::Mask type to simplify const-time programming (GH #1751)
  * Add new configure options --disable-bmi2, --disable-rdrand, and
  - -disable-rdseed to prevent use of those instruction sets.
  * Add error_type and error_code functions to Exception type (GH #1744)
  * Now on POSIX systems posix_memalign is used instead of mmap for allocating the
    page-locked memory pool. This avoids issues with fork. (GH #602 #1798)
  * When available, use RDRAND to generate the additional data in
    Stateful_RNG::randomize_with_ts_input
  * Use vzeroall/vzeroupper intrinsics to avoid AVX2/SSE transition penalties.
  * Support for Visual C++ 2013 has been removed (GH #1557 #1697)
  * Resolve a memory leak when verifying ECDSA signatures with versions of OpenSSL
    before 1.1.0 (GH #1698)
  * Resolve a memory leak using ECDH via OpenSSL (GH #1767)
  * Fix an error in XTS which prohibited encrypting values which were exactly the
    same length as the underlying block size. Messages of this size are allowed by
    the standard and other XTS implementations. (GH #1706)
  * Resolve a bug in TSS which resulted in it using an incorrect length field in
    the shares. Now the correct length is encoded, but either correct or buggy
    lengths are accepted when decoding. (GH #1722)
  * Correct a bug when reducing a negative BigInt modulo a small power of 2. (GH
    [#1755])
  * Add CLI utils for threshold secret splitting. (GH #1722)
  * Fix a bug introduced in 2.8.0 that caused compilation failure if using a single
    amalgamation file with AVX2 enabled. (GH #1700)
  * Add an explicit OS target for Emscripten and improve support for it. (GH #1702)
  * Fix small issues when building for QNX
  * Switch the Travis CI build to using Ubuntu 16.04 (GH #1767)
  * Add options to configure.py to disable generation of pkg-config file, and (for
    systems where pkg-config support defaults to off, like Windows), to enable
    generating it. (GH #1268)
  * Modify configure.py to accept empty lists or trailing/extra commas. (GH #1705)
- Update to Botan 2.8
  * Add support for using Apple CommonCrypto library for hashing (GH #1667),
    cipher modes (GH #1674) and block ciphers (GH #1673).
  * Support for negotiating TLS versions 1.0 and 1.1 is disabled in the default
    TLS policy. In addition, support for negotiating TLS ciphersuites using CBC
    or CCM mode is disabled by default. Applications which need to interop with
    old peers must enable these in their TLS policy object. (GH #1651)
  * During primality testing, use a Lucas test in addition to Miller-Rabin. It
    is possible to construct a composite integer which passes n Miller-Rabin
    tests with probability (1/4)^n. So for a incautious verifier using a small
    number of tests (under 16 or so) it is possible if unlikely they would
    accept such a composite as prime. Adding a Lucas test precludes such an
    attack. (GH #1636)
  * Add XChaCha and XChaCha20Poly1305 (GH #1640)
  * Add AVX2 implementations of ChaCha (GH #1662) and Serpent (GH #1660)
  * Add a new password hashing interface in pwdhash.h (GH #1670)
  * C binding improvements. Added functions to get name and supported
    keylengths of cipher, hash and MAC objects, support for FE1 format
    preserving encryption (GH #1625 #1646), functions to load and save RSA keys
    in PKCS #1 format (GH #1621), HOTP and TOTP algorithms, scrypt, certificate
    verification (GH #1647), functions to get the output length of public key
    operations (GH #1642), and functions for loading and serializing X25519
    keys (GH #1681)
  * Support for building with BOTAN_MP_WORD_BITS set to 8 or 16 has been removed.
  * Previously SM2 had two distinct key types, one for signatures and another
    for encryption. They have now been merged into a single key type since in
    practice it seems the same key is at times used for both operations. (GH
    [#1637])
  * The Cipher_Mode class now derives from SymmetricAlgorithm (GH #1639)
  * Add support for using the ARMv8 instructions for SM4 encryption (GH #1622)
  * The entropy source using SecRandomCopyBytes has been removed as it was
    redundant with other entropy sources (GH #1668)
  * The Python module has much better error checking and reporting, and offers
    new functionality such as scrypt, MPI and FPE. (GH #1643 #1646)
  * Fixed a bug that caused CCM to fail with an exception when used with L=8 (GH #1631 #1632)
  * The default bcrypt work factor has been increased from 10 to 12.
  * The default algorithm used in passhash9 has changed from SHA-256 to
    SHA-512, and the default work factor increased from 10 to 15.
  * In ECC private keys, include the public key data for compatibility with GnuTLS (GH #1634 #1635)
  * Add support for using Linux getrandom syscall to access the system PRNG.
    This is disabled by default, use --with-os-feature=getrandom to enable.
  * It is now possible to encrypt private keys using SIV mode.
  * The FFI function botan_privkey_load now ignores its rng argument.
  * Resolve a problem when building under Visual C++ 15.8 (GH #1624)
  * Fix a bug in XSalsa20 (192-bit Salsa nonces) where if set_iv was called
    twice without calling set_key, the resulting encryption was incorrect. (GH
    [#1640])
  * Handle an error seen when verifying invalid ECDSA signatures using LibreSSL
    on non x86-64 platforms (GH #1627 #1628)
  * Fix bugs in PKCS7 and X9.23 CBC padding schemes, which would ignore the
    first byte in the event the padding took up the entire block. (GH #1690)
  * Correct bugs which would cause CFB, OCB, and GCM modes to crash when they
    were used in an unkeyed state. (GH #1639)
  * Optimizations for SM4 and Poly1305
  * Avoid a cache side channel in the AES key schedule
  * Add pk_encrypt and pk_decrypt CLI operations
  * Now asn1print CLI defaults to printing context-specific fields.
  * Use codec_base for Base64, which matches how Base32 is implemented (GH #1597)
  * The cast module has been split up into cast128 and cast256 (GH #1685)
  * When building under Visual C++ 2013, the user must acknowledge the upcoming
    removal of support using the configure.py flag --ack-vc2013-deprecated (GH
    [#1557])</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1554206400">- Update to Botan 2.10
  * Bump SONAME
  * Warning: XMSS currently implements draft-06 which is not compatible with
    the final RFC 8391 specification. A PR is open to fix this, however it will
    break all current uses of XMSS. If you are currently using XMSS please
    comment at https://github.com/randombit/botan/pull/1858. Otherwise the PR
    will be merged and support for draft-06 will be removed starting in 2.11.
  * Added a new certificate store implementation that can access the MacOS
    keychain certificate store. (GH #1830)
  * Redesigned Memory_Pool class, which services allocations out of a set of
    pages locked into memory (using mlock/VirtualLock). It is now faster and
    with improved exploit mitigations. (GH #1800)
  * Add BMI2 implementations of SHA-512 and SHA-3 which improve performance by
    25-35% on common CPUs. (GH #1815)
  * Unroll SHA-3 computation improving performance by 10-12% (GH #1838)
  * Add a Thread_Pool class. It is now possible to run the tests in multiple
    threads with --test-threads=N flag to select the number of threads to use.
    Use --test-threads=0 to run with as many CPU cores as are available on the
    current system. The default remains single threaded. (GH #1819)
  * XMSS signatures now uses a global thread pool instead of spawning new
    threads for each usage. This improves signature generation performance by
    between 10% and 60% depending on architecture and core count. (GH #1864)
  * Some functions related to encoding and decoding BigInts have been
    deprecated. (GH #1817)
  * Binary encoding and decoding of BigInts has been optimized by performing
    word-size operations when possible. (GH #1817)
  * Rename the exception Integrity_Failure to Invalid_Authentication_Tag to
    make its meaning and usage more clear. The old name remains as a typedef.
    (GH #1816)
  * Support for using Boost filesystem and MSVC?s std::filesystem have been
    removed, since already POSIX and Win32 versions had to be maintained for
    portability. (GH #1814)
  * Newly generated McEliece and XMSS keys now default to being encrypted using
    SIV mode, support for which was added in 2.8.0. Previously GCM was used by
    default for these algorithms.
  * Use arc4random on Android systems (GH #1851)
  * Fix the encoding of PGP-S2K iteration counts (GH #1853 #1854)
  * Add a facility for sandboxing the command line util. Currently FreeBSD
    (Capsicum) and OpenBSD (pledge) sandboxes are supported. (GH #1808)
  * Use if constexpr when available.
  * Disable building shared libs on iOS as it was broken and it is not clear
    shared libraries are ever useful on iOS (GH #1865)
  * Renamed the darwin build target to macos. This should not cause any
    user-visible change. (GH #1866)
  * Add support for using sccache to cache the Windows CI build (GH #1807)
  * Add --extra-cxxflags option which allows adding compilation flags without
    overriding the default set. (GH #1826)
  * Add --format= option to the hash cli which allows formatting the output as
    base64 or base58, default output remains hex.
  * Add base58_enc and base58_dec cli utils for base58 encoding/decoding. (GH #1848)
  * Enable getentropy by default on macOS (GH #1862)
  * Avoid using -momit-leaf-frame-pointer flags, since -fomit-frame-pointer is
    already the default with recent versions of GCC.
  * Fix XLC sanitizer flags.
  * Rename Blake2b class to BLAKE2b to match the official name. There is a typedef for compat.
  * Fix a bug where loading a raw Ed25519_PublicKey of incorrect length would
    lead to a crash. (GH #1850)
  * Fix a bug that caused compilation problems using CryptoNG PRNG. (GH #1832)
  * Extended SHAKE-128 cipher to support any key between 1 and 160 bytes,
    instead of only multiples of 8 bytes.
  * Minor HMAC optimizations.
  * Build fixes for GNU/Hurd.
  * Fix a bug that prevented generating or verifying Ed25519 signatures in the
    CLI (GH #1828 #1829)
  * Fix a compilation error when building the amalgamation outside of the
    original source directory when AVX2 was enabled. (GH #1812)
  * Fix a crash when creating the amalgamation if a header file was edited on
    Windows but then the amalgamation was built on Linux (GH #1763)</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1586347200">- Update to Botan 2.14:
  * Add support for using POWER8+ VPSUMD instruction to accelerate GCM (GH #2247)
  * Optimize the vector permute AES implementation, especially improving
    performance on ARMv7, Aarch64, and POWER. (GH #2243)
  * Use a new algorithm for modular inversions which is both faster
    and more resistant to side channel attacks. (GH #2287 #2296 #2301)
  * Address an issue in CBC padding which would leak the length of the plaintext
    which was being padded. Unpadding during decryption was not affected.
  * Optimize NIST prime field reductions, improving ECDSA by 3-9% (GH #2295)
  * Increase the size of the ECC blinding mask and scale it based on the
    size of the group order. (GH #880 #893 #2308)
  * Add server side support for the TLS asio wrapper. (GH #2229)
  * Add support for using Windows certificate store on MinGW (GH #2280)
  * Add a CLI utility cpu_clock which estimates the speed of the processor cycle counter.
  * Add Roughtime client (GH #2143 #1842)
  * Add support for XMSS X.509 certificates (GH #2172)
  * Add support for X.509 CRLs in FFI layer and Python wrapper (GH #2213)
  * Add AVX2 implementation of SHACAL2 (GH #2196)
  * Support more functionality for X.509 in the Python API (GH #2165)
  * Add generic CPU target useful when building for some new or unusual platform.
  * Disable MD5 in BSI or NIST modes (GH #2188)
  * Many currently public headers are being deprecated. If any such header is included by
    an application, a warning is issued at compile time.
    Headers issuing this warning will be made internal in a future major release.
  * RSA signature performance improvements (GH #2068 #2070)
  * Performance improvements for GCM (GH #2024 #2099 #2119), OCB (#2122), XTS (#2123) and
    ChaCha20Poly1305 (GH #2117), especially for small messages.
  * Add support for constant time AES using NEON and AltiVec (GH #2093 #2095 #2100)
  * Improve performance of POWER8 AES instructions (GH #2096)
  * Add support for the POWER9 hardware random number generator (GH #2026)
  * Add support for 64-bit version of RDRAND, doubling performance on x86-64 (GH #934 #2022)
  * In DTLS server, support a client crashing and then reconnecting from the same
    source port, as described in RFC 6347 sec 4.2.8 (GH #2029)
  * Optimize DTLS MTU splitting to split precisely to the set MTU (GH #2042)
  * Add support for the TLS v1.3 downgrade indicator. (GH #2027)
  * Add Argon2 PBKDF and password hash (GH #459 #1981 #1987)
  * Add Bcrypt-PBKDF (GH #1990)
  * Add server side support for issuing DTLS HelloVerifyRequest messages (GH #1999)
  * Add support for the TLS v1.3 supported_versions extension. (GH #1976)
  * Add Ed25519ph compatible with RFC 8032 (GH #1699 #2000)
  * Add support for OCSP stapling on server side. (GH #1703 #1967)
  * Add a boost::asio TLS stream compatible with boost::asio::ssl. (GH #1839 #1927 #1992)
  * Add a certificate store for Linux/Unix systems. (GH #1885 #1936)
  * Various Fixes</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597579200">- update to 2.15:
  Fix a bug where the name constraint extension did not constrain the alternative
  DN field which can be included in a subject alternative name. This would allow
  a corrupted sub-CA which was otherwise constrained by a name constraint to
  issue a certificate with a prohibited DN.
  Fix a bug in the TLS server during client authentication where where if a
  (disabled by default) static RSA ciphersuite was selected, then no certificate
  request would be sent. This would have an equivalent effect to a client which
  simply replied with an empty Certificate message. (GH #2367)
  Replace the T-Tables implementation of AES with a 32-bit bitsliced version. As
  a result AES is now constant time on all processors. (GH #2346 #2348 #2353
  [#2329] #2355)
  In TLS, enforce that the key usage given in the server certificate allows the
  operation being performed in the ciphersuite. (GH #2367)
  In X.509 certificates, verify that the algorithm parameters are the expected
  NULL or empty. (GH #2367)
  Change the HMAC key schedule to attempt to reduce the information leaked from
  the key schedule with regards to the length of the key, as this is at times (as
  for example in PBKDF2) sensitive information. (GH #2362)
  Add Processor_RNG which wraps RDRAND or the POWER DARN RNG instructions. The
  previous RDRAND_RNG interface is deprecated. (GH #2352)
  The documentation claimed that mlocked pages were created with a guard page
  both before and after. However only a trailing guard page was used. Add a
  leading guard page. (GH #2334)
  Add support for generating and verifying DER-encoded ECDSA signatures in the C
  and Python interfaces. (GH #2357 #2356)
  Workaround a bug in GCC?s UbSan which triggered on a code sequence in XMSS (GH
  [#2322])
  When building documentation using Sphinx avoid parallel builds with version 3.0
  due to a bug in that version (GH #2326 #2324)
  Fix a memory leak in the CommonCrypto block cipher calls (GH #2371)
  Fix a flaky test that would occasionally fail when running the tests with a
  large number of threads. (GH #2325 #2197)
  Additional algorithms are now deprecated: XTEA, GOST, and Tiger. They will be
  removed in a future major release.</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1603800000">- Update to 2.16.0:
  * Now userspace PRNG objects (such as AutoSeeded_RNG and HMAC_DRBG)
    use an internal lock, which allows safe concurrent use. This
    however is purely a precaution in case of accidental sharing of
    such RNG objects; for performance reasons it is always preferable
    to use a RNG per thread if a userspace RNG is needed.
  * DL_Group and EC_Group objects now track if they were created
    from a known trusted group (such as P-256 or an IPsec DH
    parameter). If so, then verification tests can be relaxed, as
    compared to parameters which may have been maliciously
    constructed in order to pass primality checks.
  * RandomNumberGenerator::add_entropy_T assumed its input was a POD
    type but did not verify this.
  * Support OCSP responders that live on a non-standard port.
  * Add support for Solaris sandbox.
  * Support suffixes on release numbers for alpha/beta releases.
  * Fix a bug in EAX which allowed requesting a 0 length tag, which
    had the effect of using a full length tag. Instead omit the
    length field, or request the full tag length explicitly.
  * Fix a memory leak in GCM where if passed an unsuitable block
    cipher (eg not 128 bit) it would throw an exception and leak
    the cipher object.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1604750400">- Botan 2.17.1:
  * Fix bugs in ECDSA signature generation and verifications under
    specific circumstances
  * developer visible changes, including deprecation with warnings
  * optimization in the non-hardware assisted AES key generation
  * Add more detection logic for AVX-512 features
  * Fix a bug parsing deeply nested cipher names
  * Prevent requesting DER encoding of signatures when the
    algorithm did not support it</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1605268800">- Botan 2.17.2:
  * Fix build problem on ppc64
  * Resolve an issue in the modular square root algorithm</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1608724800">- Botan 2.17.3:
  * Harden against side-channels from decoding secret values by
    changing the base64, base58, base32, and hex encoding and
    decoding opearations to run in constant time</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1618574400">- Botan 2.18.0
  * Add support for implementing custom RNG objects through the FFI
    interface
  * Improve safegcd bounds, improving runtime performance
  * Reject non-TLS messages as quickly as possible without waiting
    for a full record.
  * Fixes for TLS::Stream::async_shutdown
- Removed unneeded GNU MP build requirement, support was dropped
  with version 1.11.10
- Enabled check target, verify integrity of build library</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1620648000">- Botan 2.18.1:
  * Fix a build regression in 2.18.0 which caused linker flags
    which contain -l within them (such as -fuse-linker-plugin)
    to be misinterpreted
  * Fix a bug which caused decoding a certificate which contained
    more than one name in a single RDN
  * Fix a bug which caused OID lookup failures when run in a locale
    which uses thousands separators (pt_BR was reported as having
    this issue)
  * DNS names in name constraints were compared with case
    sensitivity, which could cause valid certificates to be
    rejected
  * X.509 name constraint extensions were rejected if non-critical.
    RFC 5280 requires conforming CAs issue such extensions as
    critical, but not all certificates are compliant, and all other
    known implementations do not require this
  * X.509 name constraints were incorrectly applied to the
    certificate which included the constraint
- build with lzma compression support
- build with SQLite support
- build with TPM support
- fix SLE 12 build</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1637755200">- update to 2.18.2:
  * Avoid using short exponents when encrypting in ElGamal, as some PGP
    implementations generate keys with parameters that are weak when
    short exponents are used CVE-2021-40529 boo#1190244
  * Fix a low risk OAEP decryption side channel
  * Work around a miscompilation of SHA-3 caused by a bug in Clang 12
    and XCode 13
  * Remove support in OpenSSL provider for algorithms which are
    disabled by default in OpenSSL 3.0
  * Add CI based on GitHub actions to replace Travis CI
  * Fix the online OCSP test, as the certificate involved had expired.
  * Fix some test failures induced by the expiration of the trust root
    "DST Root CA X3"</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1668686400">- Fixed [CVE-2022-43705,bsc#1205509]
  * Added Botan-CVE-2022-43705.patch
  * Added Botan-CVE-2022-43705-certs.tgz
  * validate that an embedded certificate was issued by the end-entity
    issuing certificate authority when checking OCSP responses.</changelog>
</package>
<package pkgid="7ba8f1e64ee197bd2134f4112c8438689f185240d190f01a5cc650535eaf02cd" name="libbotan-2-18" arch="s390x">
  <version epoch="0" ver="2.18.2" rel="bp154.2.3.1"/>
  <changelog author="adam.majer@suse.de" date="1518436800">- Don't drop -fstack-clash-protection for openSUSE 42.3 - we just
  need the Update repository present.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1518609600">- change group of libbotan-%{version_suffix} to 'System/Libraries' as
  requested on review</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1518782400">- drop explicit package requirements
- split binary package and documentation from dynamic library package
  and make documentation package noarch
- merge back Botan2 package to Botan with changelog history
- drop Botan patches
    aarch64-support.patch - doesn't seem to be required anymore
    Botan-fix_install_paths.patch - doesn't seem to be required
    no-cpuid-header.patch - SLE11 not target anymore
    Botan-fix_pkgconfig.patch - this seem to be wrong
    Botan-no-buildtime.patch - not needed anymore
    dont-set-mach-value.diff - doesn't apply, unclear and undocumented why it is there
    Botan-inttypes.patch - not required
    Botan-ull_constants.patch.bz2 - no reason anymore</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1522756800">- Update to Botan 2.5
  * Fix error in certificate wildcard matching (CVE-2018-9127), where a
    wildcard cert for b*.example.com would be accepted as a match for any host
    with name *b*.example.com (GH #1519)
  * Add support for RSA-PSS signatures in TLS (GH #1285)
  * Ed25519 certificates are now supported (GH #1501)
  * Many optimizations in ECC operations. ECDSA signatures are 8-10 times
    faster. ECDSA verification is about twice as fast. ECDH key agreement is
    3-4 times faster. (GH #1457 #1478)
  * Implement product scanning Montgomery reduction, which improves
    Diffie-Hellman and RSA performance by 10 to 20% on most platforms. (GH
    [#1472])
  * DSA signing and verification performance has improved by 30-50%.
  * Add a new Credentials_Manager callback that specifies which CAs the server
    has indicated it trusts (GH #1395 fixing #1261)
  * Add new TLS::Callbacks methods that allow creating or removing extensions,
    as well as examining extensions sent by the peer (GH #1394 #1186)
  * Add new TLS::Callbacks methods that allow an application to negotiate use
    of custom elliptic curves. (GH #1448)
  * Add ability to create custom elliptic curves (GH #1441 #1444)
  * Add support for POWER8 AES instructions (GH #1459 #1393 #1206)
  * Fix DSA/ECDSA handling of hashes longer than the group order (GH #1502
    [#986])
  * The default encoding of ECC public keys has changed from compressed to
    uncompressed point representation. This improves compatability with some
    common software packages including Golang?s standard library. (GH #1480
    [#1483])
  * It is now possible to create DNs with custom components. (GH #1490 #1492)
  * It is now possible to specify the serial number of created certificates,
    instead of using the default 128-bit random integer. (GH #1489 #1491)
  * Change DL_Group and EC_Group to store their data as shared_ptr for fast
    copying. Also both classes precompute additional useful values (eg for
    modular reductions). (GH #1435 #1454)
  * Make it possible for PKCS10 requests to include custom extensions. This
    also makes it possible to use muliple SubjectAlternativeNames of a single
    type in a request, which was previously not possible. (GH #1429 #1428)
  * Add new optimized interface for FE1 format preserving encryption. By
    caching a number of values computed in the course of the FPE calculation,
    it provides a 6-7x speedup versus the old API. (GH #1469)
  * Add DSA and ElGamal keygen functions to FFI (#1426)
  * Add Pipe::prepend_filter to replace Pipe::prepend (GH #1402)
  * Fix a memory leak in the OpenSSL block cipher integration, introduced in
  * 2.2.0
  * Use an improved algorithm for generating safe primes which is several tens
    of times faster. Also, fix a bug in the prime sieving algorithm which
    caused standard prime generation (like for RSA keys) to be slower than
    necessary. (GH #1413 #1411)
  * Correct the return value of PK_Encryptor::maximum_input_size which reported
    a much too small value (GH #1410)
  * Remove use of CPU specific optimization flags, instead the user should set
    these via CXXFLAGS if desired. (GH #1392)
  * Resolve an issue that would cause a crash in the tests if they were run on
    a machine without SSE2/NEON/VMX instructions. (GH #1495)
  * The Python module now tries to load DLLs from a list of names and uses the
    first one which successfully loads and indicates it supports the desired
    API level. (GH #1497)
  * Various minor optimizations for SHA-3 (GH #1433 #1434)
  * The output of botan --help has been improved (GH #1387)
  * Add --der-format flag to command line utils, making it possible verify
    DSA/ECDSA signatures generated by OpenSSL command line (GH #1409)
  * Add support for --library-suffix option to configure.py (GH #1405 #1404)
  * Use feature flags to enable/disable system specific code (GH #1378)
  * Add --msvc-runtime option to allow using static runtime (GH #1499 #210)
  * Add ?enable-sanitizers= option to allow specifying which sanitizers to
    enable. The existing --with-sanitizers option just enables some default set
    which is known to work with the minimum required compiler versions.
  * Use either rst2man or rst2man.py for generating man page as distributions
    differ on where this program is installed (GH #1516)
  * The threefish module has been renamed threefish_512 since that is the
    algorithm it provides. (GH #1477)
  * The Perl XS based wrapper has been removed, as it was unmaintained and
    broken. (GH #1412)
  * The sqlite3 encryption patch under contrib has been removed. It is still
    maintained by the original author at
    https://github.com/OlivierJG/botansqlite3</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1523361600">- Update to Botan 2.6
  * CVE-2018-9860 Fix a bug decrypting TLS CBC ciphertexts which could for a
    malformed ciphertext cause the decryptor to read and HMAC an additional 64K
    bytes of data which is not part of the record. This could cause a crash if
    the read went into unmapped memory. No information leak or out of bounds
    write occurs.
  * Add support for OAEP labels (GH #1508)
  * RSA signing is about 15% faster (GH #1523) and RSA verification is about 50% faster.
  * Add exponent blinding to RSA (GH #1523)
  * Add Cipher_Mode::create and AEAD_Mode::create (GH #1527)
  * Fix bug in TLS server introduced in 2.5 which caused connection to fail if
    the client offered any signature algorithm not known to the server (for
    example RSA/SHA-224).
  * Fix a bug in inline asm that would with GCC 7.3 cause incorrect
    computations and an infinite loop during the tests. (GH #1524 #1529)</changelog>
  <changelog author="kasimir_@outlook.de" date="1523534400">- fixed to build on armv6 and armv7</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1531224000">- Update to Botan 2.7
  * CVE-2018-12435 Avoid a side channel in ECDSA signature generation (GH
    [#1604])
  * Avoid a side channel in RSA key generation due to use of a non-constant
    time gcd algorithm. (GH #1542 #1556)
  * Optimize prime generation, especially improving RSA key generation. (GH
    [#1542])
  * Make Karatsuba multiplication, Montgomery field operations, Barrett
    reduction and Montgomery exponentiation const time (GH #1540 #1606 #1609
    [#1610])
  * Optimizations for elliptic curve operations especially improving reductions
    and inversions modulo NIST primes (GH #1534 #1538 #1545 #1546 #1547 #1550)
  * Add 24 word wide Comba multiplication, improving 3072-bit RSA and DH by
    ~25%. (GH #1564)
  * Unroll Montgomery reduction for specific sizes (GH #1603)
  * Improved performance of signature verification in ECGDSA, ECKCDSA, SM2 and
    GOST by 10-15%.
  * XMSS optimizations (GH #1583 #1585)
  * Fix an error that meant XMSS would only sign half as many signatures as is
    allowed (GH #1582)
  * Add support for base32 encoding/decoding (GH #1541)
  * Add BMI2 optimized version of SHA-256, 40% faster on Skylake (GH #1584)
  * Allow the year to be up to 2200 in ASN.1 time objects. Previously this was
    limited to 2100. (GH #1536)
  * Add support for Scrypt password hashing (GH #1570)
  * Add support for using Scrypt for private key encryption (GH #1574)
  * Optimizations for DES/3DES, approx 50% faster when used in certain modes
    such as CBC decrypt or CTR.
  * XMSS signature verification did not check that the signature was of the
    expected length which could lead to a crash. (GH #1537)
  * The bcrypt variants 2b and 2y are now supported.
  * Support for 192-bit Suite B TLS profile is now implemented, as the 128-bit
    Suite B is since 2015 not allowed anymore.
  * Previously botan allowed GCM to be used with an empty nonce, which is not
    allowed by the specification. Now such nonces are rejected.
  * Avoid problems on Windows when compiling in Unicode mode (GH #1615 #1616)
  * Previously for ASN.1 encoded signatures (eg ECDSA) Botan would accept any
    valid BER encoding. Now only the single valid DER encoding is accepted.
  * Correct an error that could in rare cases cause an internal error exception
    when doing computations with the P-224 curve.
  * Optimizations to reduce allocations/copies during DER encoding and BER
    decoding (GH #1571 #1572 #1600)
  * Botan generates X.509 subject key IDs by hashing the public key with
    whatever hash function is being used to sign the certificate. However
    especially for SHA-512 this caused SKIDs that were far longer than
    necessary. Now all SKIDs are truncated to 192 bits.
  * In the test suite use mkstemp to create temporary files instead of creating
    them in the current working directory. (GH #1533 #1530)
  * It is now possible to safely override CXX when invoking make in addition to
    when configure.py is run. (GH #1579)
  * OIDs for Camellia and SM4 in CBC and GCM mode are now defined, making it
    possible to use this algorithms for private key encryption.
  * Avoid creating symlinks to the shared object on OpenBSD (#1535)
  * The factor command runs much faster on larger inputs now.
  * Support for Windows Phone/UWP was deprecated starting in 2.5. This
    deprecation has been reversed as it seems UWP is still actively used. (GH
    [#1586] #1587)
  * Support for Visual C++ 2013 is deprecated, and will be removed in Jan 2019.
  * Added support for GCC?s ?sysroot option to configure.py for
    cross-compiling.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1533038400">- Fix version in baselibs.conf</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1547121600">- Update to Botan 2.9
  * Bump SONAME
  * CVE-2018-20187 Address a side channel during ECC key generation, which used an
    unblinded Montgomery ladder. As a result, a timing attack can reveal
    information about the high bits of the secret key.
  * Fix bugs in TLS which caused negotiation failures when the client used an
    unknown signature algorithm or version (GH #1711 #1709 #1708)
  * Fix bug affecting GCM, EAX and ChaCha20Poly1305 where if the associated data
    was set after starting a message, the new AD was not reflected in the produced
    tag. Now with these modes setting an AD after beginning a message throws an
    exception.
  * Use a smaller sieve which improves performance of prime generation.
  * Fixed a bug that caused ChaCha to produce incorrect output after encrypting 256
    GB. (GH #1728)
  * Add NEON and AltiVec implementations of ChaCha (GH #1719 #1728 #1729)
  * Optimize AVX2 ChaCha (GH #1730)
  * Many more operations in BigInt, ECC and RSA code paths are either fully const
    time or avoid problematic branches that could potentially be exploited in a
    side channel attack. (GH #1738 #1750 #1754 #1755 #1757 #1758 #1759 #1762 #1765
    [#1770] #1773 #1774 #1779 #1780 #1794 #1795 #1796 #1797)
  * Several optimizations for BigInt and ECC, improving ECDSA performance by as
    much as 30%. (GH #1734 #1737 #1777 #1750 #1737 #1788)
  * Support recovering an ECDSA public key from a message/signature pair (GH #664
    [#1784])
  * Add base58 encoding/decoding functions (GH #1783)
  * In the command line interface, add support for reading passphrases from the
    terminal with echo disabled (GH #1756)
  * Add CT::Mask type to simplify const-time programming (GH #1751)
  * Add new configure options --disable-bmi2, --disable-rdrand, and
  - -disable-rdseed to prevent use of those instruction sets.
  * Add error_type and error_code functions to Exception type (GH #1744)
  * Now on POSIX systems posix_memalign is used instead of mmap for allocating the
    page-locked memory pool. This avoids issues with fork. (GH #602 #1798)
  * When available, use RDRAND to generate the additional data in
    Stateful_RNG::randomize_with_ts_input
  * Use vzeroall/vzeroupper intrinsics to avoid AVX2/SSE transition penalties.
  * Support for Visual C++ 2013 has been removed (GH #1557 #1697)
  * Resolve a memory leak when verifying ECDSA signatures with versions of OpenSSL
    before 1.1.0 (GH #1698)
  * Resolve a memory leak using ECDH via OpenSSL (GH #1767)
  * Fix an error in XTS which prohibited encrypting values which were exactly the
    same length as the underlying block size. Messages of this size are allowed by
    the standard and other XTS implementations. (GH #1706)
  * Resolve a bug in TSS which resulted in it using an incorrect length field in
    the shares. Now the correct length is encoded, but either correct or buggy
    lengths are accepted when decoding. (GH #1722)
  * Correct a bug when reducing a negative BigInt modulo a small power of 2. (GH
    [#1755])
  * Add CLI utils for threshold secret splitting. (GH #1722)
  * Fix a bug introduced in 2.8.0 that caused compilation failure if using a single
    amalgamation file with AVX2 enabled. (GH #1700)
  * Add an explicit OS target for Emscripten and improve support for it. (GH #1702)
  * Fix small issues when building for QNX
  * Switch the Travis CI build to using Ubuntu 16.04 (GH #1767)
  * Add options to configure.py to disable generation of pkg-config file, and (for
    systems where pkg-config support defaults to off, like Windows), to enable
    generating it. (GH #1268)
  * Modify configure.py to accept empty lists or trailing/extra commas. (GH #1705)
- Update to Botan 2.8
  * Add support for using Apple CommonCrypto library for hashing (GH #1667),
    cipher modes (GH #1674) and block ciphers (GH #1673).
  * Support for negotiating TLS versions 1.0 and 1.1 is disabled in the default
    TLS policy. In addition, support for negotiating TLS ciphersuites using CBC
    or CCM mode is disabled by default. Applications which need to interop with
    old peers must enable these in their TLS policy object. (GH #1651)
  * During primality testing, use a Lucas test in addition to Miller-Rabin. It
    is possible to construct a composite integer which passes n Miller-Rabin
    tests with probability (1/4)^n. So for a incautious verifier using a small
    number of tests (under 16 or so) it is possible if unlikely they would
    accept such a composite as prime. Adding a Lucas test precludes such an
    attack. (GH #1636)
  * Add XChaCha and XChaCha20Poly1305 (GH #1640)
  * Add AVX2 implementations of ChaCha (GH #1662) and Serpent (GH #1660)
  * Add a new password hashing interface in pwdhash.h (GH #1670)
  * C binding improvements. Added functions to get name and supported
    keylengths of cipher, hash and MAC objects, support for FE1 format
    preserving encryption (GH #1625 #1646), functions to load and save RSA keys
    in PKCS #1 format (GH #1621), HOTP and TOTP algorithms, scrypt, certificate
    verification (GH #1647), functions to get the output length of public key
    operations (GH #1642), and functions for loading and serializing X25519
    keys (GH #1681)
  * Support for building with BOTAN_MP_WORD_BITS set to 8 or 16 has been removed.
  * Previously SM2 had two distinct key types, one for signatures and another
    for encryption. They have now been merged into a single key type since in
    practice it seems the same key is at times used for both operations. (GH
    [#1637])
  * The Cipher_Mode class now derives from SymmetricAlgorithm (GH #1639)
  * Add support for using the ARMv8 instructions for SM4 encryption (GH #1622)
  * The entropy source using SecRandomCopyBytes has been removed as it was
    redundant with other entropy sources (GH #1668)
  * The Python module has much better error checking and reporting, and offers
    new functionality such as scrypt, MPI and FPE. (GH #1643 #1646)
  * Fixed a bug that caused CCM to fail with an exception when used with L=8 (GH #1631 #1632)
  * The default bcrypt work factor has been increased from 10 to 12.
  * The default algorithm used in passhash9 has changed from SHA-256 to
    SHA-512, and the default work factor increased from 10 to 15.
  * In ECC private keys, include the public key data for compatibility with GnuTLS (GH #1634 #1635)
  * Add support for using Linux getrandom syscall to access the system PRNG.
    This is disabled by default, use --with-os-feature=getrandom to enable.
  * It is now possible to encrypt private keys using SIV mode.
  * The FFI function botan_privkey_load now ignores its rng argument.
  * Resolve a problem when building under Visual C++ 15.8 (GH #1624)
  * Fix a bug in XSalsa20 (192-bit Salsa nonces) where if set_iv was called
    twice without calling set_key, the resulting encryption was incorrect. (GH
    [#1640])
  * Handle an error seen when verifying invalid ECDSA signatures using LibreSSL
    on non x86-64 platforms (GH #1627 #1628)
  * Fix bugs in PKCS7 and X9.23 CBC padding schemes, which would ignore the
    first byte in the event the padding took up the entire block. (GH #1690)
  * Correct bugs which would cause CFB, OCB, and GCM modes to crash when they
    were used in an unkeyed state. (GH #1639)
  * Optimizations for SM4 and Poly1305
  * Avoid a cache side channel in the AES key schedule
  * Add pk_encrypt and pk_decrypt CLI operations
  * Now asn1print CLI defaults to printing context-specific fields.
  * Use codec_base for Base64, which matches how Base32 is implemented (GH #1597)
  * The cast module has been split up into cast128 and cast256 (GH #1685)
  * When building under Visual C++ 2013, the user must acknowledge the upcoming
    removal of support using the configure.py flag --ack-vc2013-deprecated (GH
    [#1557])</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1554206400">- Update to Botan 2.10
  * Bump SONAME
  * Warning: XMSS currently implements draft-06 which is not compatible with
    the final RFC 8391 specification. A PR is open to fix this, however it will
    break all current uses of XMSS. If you are currently using XMSS please
    comment at https://github.com/randombit/botan/pull/1858. Otherwise the PR
    will be merged and support for draft-06 will be removed starting in 2.11.
  * Added a new certificate store implementation that can access the MacOS
    keychain certificate store. (GH #1830)
  * Redesigned Memory_Pool class, which services allocations out of a set of
    pages locked into memory (using mlock/VirtualLock). It is now faster and
    with improved exploit mitigations. (GH #1800)
  * Add BMI2 implementations of SHA-512 and SHA-3 which improve performance by
    25-35% on common CPUs. (GH #1815)
  * Unroll SHA-3 computation improving performance by 10-12% (GH #1838)
  * Add a Thread_Pool class. It is now possible to run the tests in multiple
    threads with --test-threads=N flag to select the number of threads to use.
    Use --test-threads=0 to run with as many CPU cores as are available on the
    current system. The default remains single threaded. (GH #1819)
  * XMSS signatures now uses a global thread pool instead of spawning new
    threads for each usage. This improves signature generation performance by
    between 10% and 60% depending on architecture and core count. (GH #1864)
  * Some functions related to encoding and decoding BigInts have been
    deprecated. (GH #1817)
  * Binary encoding and decoding of BigInts has been optimized by performing
    word-size operations when possible. (GH #1817)
  * Rename the exception Integrity_Failure to Invalid_Authentication_Tag to
    make its meaning and usage more clear. The old name remains as a typedef.
    (GH #1816)
  * Support for using Boost filesystem and MSVC?s std::filesystem have been
    removed, since already POSIX and Win32 versions had to be maintained for
    portability. (GH #1814)
  * Newly generated McEliece and XMSS keys now default to being encrypted using
    SIV mode, support for which was added in 2.8.0. Previously GCM was used by
    default for these algorithms.
  * Use arc4random on Android systems (GH #1851)
  * Fix the encoding of PGP-S2K iteration counts (GH #1853 #1854)
  * Add a facility for sandboxing the command line util. Currently FreeBSD
    (Capsicum) and OpenBSD (pledge) sandboxes are supported. (GH #1808)
  * Use if constexpr when available.
  * Disable building shared libs on iOS as it was broken and it is not clear
    shared libraries are ever useful on iOS (GH #1865)
  * Renamed the darwin build target to macos. This should not cause any
    user-visible change. (GH #1866)
  * Add support for using sccache to cache the Windows CI build (GH #1807)
  * Add --extra-cxxflags option which allows adding compilation flags without
    overriding the default set. (GH #1826)
  * Add --format= option to the hash cli which allows formatting the output as
    base64 or base58, default output remains hex.
  * Add base58_enc and base58_dec cli utils for base58 encoding/decoding. (GH #1848)
  * Enable getentropy by default on macOS (GH #1862)
  * Avoid using -momit-leaf-frame-pointer flags, since -fomit-frame-pointer is
    already the default with recent versions of GCC.
  * Fix XLC sanitizer flags.
  * Rename Blake2b class to BLAKE2b to match the official name. There is a typedef for compat.
  * Fix a bug where loading a raw Ed25519_PublicKey of incorrect length would
    lead to a crash. (GH #1850)
  * Fix a bug that caused compilation problems using CryptoNG PRNG. (GH #1832)
  * Extended SHAKE-128 cipher to support any key between 1 and 160 bytes,
    instead of only multiples of 8 bytes.
  * Minor HMAC optimizations.
  * Build fixes for GNU/Hurd.
  * Fix a bug that prevented generating or verifying Ed25519 signatures in the
    CLI (GH #1828 #1829)
  * Fix a compilation error when building the amalgamation outside of the
    original source directory when AVX2 was enabled. (GH #1812)
  * Fix a crash when creating the amalgamation if a header file was edited on
    Windows but then the amalgamation was built on Linux (GH #1763)</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1586347200">- Update to Botan 2.14:
  * Add support for using POWER8+ VPSUMD instruction to accelerate GCM (GH #2247)
  * Optimize the vector permute AES implementation, especially improving
    performance on ARMv7, Aarch64, and POWER. (GH #2243)
  * Use a new algorithm for modular inversions which is both faster
    and more resistant to side channel attacks. (GH #2287 #2296 #2301)
  * Address an issue in CBC padding which would leak the length of the plaintext
    which was being padded. Unpadding during decryption was not affected.
  * Optimize NIST prime field reductions, improving ECDSA by 3-9% (GH #2295)
  * Increase the size of the ECC blinding mask and scale it based on the
    size of the group order. (GH #880 #893 #2308)
  * Add server side support for the TLS asio wrapper. (GH #2229)
  * Add support for using Windows certificate store on MinGW (GH #2280)
  * Add a CLI utility cpu_clock which estimates the speed of the processor cycle counter.
  * Add Roughtime client (GH #2143 #1842)
  * Add support for XMSS X.509 certificates (GH #2172)
  * Add support for X.509 CRLs in FFI layer and Python wrapper (GH #2213)
  * Add AVX2 implementation of SHACAL2 (GH #2196)
  * Support more functionality for X.509 in the Python API (GH #2165)
  * Add generic CPU target useful when building for some new or unusual platform.
  * Disable MD5 in BSI or NIST modes (GH #2188)
  * Many currently public headers are being deprecated. If any such header is included by
    an application, a warning is issued at compile time.
    Headers issuing this warning will be made internal in a future major release.
  * RSA signature performance improvements (GH #2068 #2070)
  * Performance improvements for GCM (GH #2024 #2099 #2119), OCB (#2122), XTS (#2123) and
    ChaCha20Poly1305 (GH #2117), especially for small messages.
  * Add support for constant time AES using NEON and AltiVec (GH #2093 #2095 #2100)
  * Improve performance of POWER8 AES instructions (GH #2096)
  * Add support for the POWER9 hardware random number generator (GH #2026)
  * Add support for 64-bit version of RDRAND, doubling performance on x86-64 (GH #934 #2022)
  * In DTLS server, support a client crashing and then reconnecting from the same
    source port, as described in RFC 6347 sec 4.2.8 (GH #2029)
  * Optimize DTLS MTU splitting to split precisely to the set MTU (GH #2042)
  * Add support for the TLS v1.3 downgrade indicator. (GH #2027)
  * Add Argon2 PBKDF and password hash (GH #459 #1981 #1987)
  * Add Bcrypt-PBKDF (GH #1990)
  * Add server side support for issuing DTLS HelloVerifyRequest messages (GH #1999)
  * Add support for the TLS v1.3 supported_versions extension. (GH #1976)
  * Add Ed25519ph compatible with RFC 8032 (GH #1699 #2000)
  * Add support for OCSP stapling on server side. (GH #1703 #1967)
  * Add a boost::asio TLS stream compatible with boost::asio::ssl. (GH #1839 #1927 #1992)
  * Add a certificate store for Linux/Unix systems. (GH #1885 #1936)
  * Various Fixes</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597579200">- update to 2.15:
  Fix a bug where the name constraint extension did not constrain the alternative
  DN field which can be included in a subject alternative name. This would allow
  a corrupted sub-CA which was otherwise constrained by a name constraint to
  issue a certificate with a prohibited DN.
  Fix a bug in the TLS server during client authentication where where if a
  (disabled by default) static RSA ciphersuite was selected, then no certificate
  request would be sent. This would have an equivalent effect to a client which
  simply replied with an empty Certificate message. (GH #2367)
  Replace the T-Tables implementation of AES with a 32-bit bitsliced version. As
  a result AES is now constant time on all processors. (GH #2346 #2348 #2353
  [#2329] #2355)
  In TLS, enforce that the key usage given in the server certificate allows the
  operation being performed in the ciphersuite. (GH #2367)
  In X.509 certificates, verify that the algorithm parameters are the expected
  NULL or empty. (GH #2367)
  Change the HMAC key schedule to attempt to reduce the information leaked from
  the key schedule with regards to the length of the key, as this is at times (as
  for example in PBKDF2) sensitive information. (GH #2362)
  Add Processor_RNG which wraps RDRAND or the POWER DARN RNG instructions. The
  previous RDRAND_RNG interface is deprecated. (GH #2352)
  The documentation claimed that mlocked pages were created with a guard page
  both before and after. However only a trailing guard page was used. Add a
  leading guard page. (GH #2334)
  Add support for generating and verifying DER-encoded ECDSA signatures in the C
  and Python interfaces. (GH #2357 #2356)
  Workaround a bug in GCC?s UbSan which triggered on a code sequence in XMSS (GH
  [#2322])
  When building documentation using Sphinx avoid parallel builds with version 3.0
  due to a bug in that version (GH #2326 #2324)
  Fix a memory leak in the CommonCrypto block cipher calls (GH #2371)
  Fix a flaky test that would occasionally fail when running the tests with a
  large number of threads. (GH #2325 #2197)
  Additional algorithms are now deprecated: XTEA, GOST, and Tiger. They will be
  removed in a future major release.</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1603800000">- Update to 2.16.0:
  * Now userspace PRNG objects (such as AutoSeeded_RNG and HMAC_DRBG)
    use an internal lock, which allows safe concurrent use. This
    however is purely a precaution in case of accidental sharing of
    such RNG objects; for performance reasons it is always preferable
    to use a RNG per thread if a userspace RNG is needed.
  * DL_Group and EC_Group objects now track if they were created
    from a known trusted group (such as P-256 or an IPsec DH
    parameter). If so, then verification tests can be relaxed, as
    compared to parameters which may have been maliciously
    constructed in order to pass primality checks.
  * RandomNumberGenerator::add_entropy_T assumed its input was a POD
    type but did not verify this.
  * Support OCSP responders that live on a non-standard port.
  * Add support for Solaris sandbox.
  * Support suffixes on release numbers for alpha/beta releases.
  * Fix a bug in EAX which allowed requesting a 0 length tag, which
    had the effect of using a full length tag. Instead omit the
    length field, or request the full tag length explicitly.
  * Fix a memory leak in GCM where if passed an unsuitable block
    cipher (eg not 128 bit) it would throw an exception and leak
    the cipher object.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1604750400">- Botan 2.17.1:
  * Fix bugs in ECDSA signature generation and verifications under
    specific circumstances
  * developer visible changes, including deprecation with warnings
  * optimization in the non-hardware assisted AES key generation
  * Add more detection logic for AVX-512 features
  * Fix a bug parsing deeply nested cipher names
  * Prevent requesting DER encoding of signatures when the
    algorithm did not support it</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1605268800">- Botan 2.17.2:
  * Fix build problem on ppc64
  * Resolve an issue in the modular square root algorithm</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1608724800">- Botan 2.17.3:
  * Harden against side-channels from decoding secret values by
    changing the base64, base58, base32, and hex encoding and
    decoding opearations to run in constant time</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1618574400">- Botan 2.18.0
  * Add support for implementing custom RNG objects through the FFI
    interface
  * Improve safegcd bounds, improving runtime performance
  * Reject non-TLS messages as quickly as possible without waiting
    for a full record.
  * Fixes for TLS::Stream::async_shutdown
- Removed unneeded GNU MP build requirement, support was dropped
  with version 1.11.10
- Enabled check target, verify integrity of build library</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1620648000">- Botan 2.18.1:
  * Fix a build regression in 2.18.0 which caused linker flags
    which contain -l within them (such as -fuse-linker-plugin)
    to be misinterpreted
  * Fix a bug which caused decoding a certificate which contained
    more than one name in a single RDN
  * Fix a bug which caused OID lookup failures when run in a locale
    which uses thousands separators (pt_BR was reported as having
    this issue)
  * DNS names in name constraints were compared with case
    sensitivity, which could cause valid certificates to be
    rejected
  * X.509 name constraint extensions were rejected if non-critical.
    RFC 5280 requires conforming CAs issue such extensions as
    critical, but not all certificates are compliant, and all other
    known implementations do not require this
  * X.509 name constraints were incorrectly applied to the
    certificate which included the constraint
- build with lzma compression support
- build with SQLite support
- build with TPM support
- fix SLE 12 build</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1637755200">- update to 2.18.2:
  * Avoid using short exponents when encrypting in ElGamal, as some PGP
    implementations generate keys with parameters that are weak when
    short exponents are used CVE-2021-40529 boo#1190244
  * Fix a low risk OAEP decryption side channel
  * Work around a miscompilation of SHA-3 caused by a bug in Clang 12
    and XCode 13
  * Remove support in OpenSSL provider for algorithms which are
    disabled by default in OpenSSL 3.0
  * Add CI based on GitHub actions to replace Travis CI
  * Fix the online OCSP test, as the certificate involved had expired.
  * Fix some test failures induced by the expiration of the trust root
    "DST Root CA X3"</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1668686400">- Fixed [CVE-2022-43705,bsc#1205509]
  * Added Botan-CVE-2022-43705.patch
  * Added Botan-CVE-2022-43705-certs.tgz
  * validate that an embedded certificate was issued by the end-entity
    issuing certificate authority when checking OCSP responses.</changelog>
</package>
<package pkgid="e9bd59b5f6706bed026d4d28ae42947d9327dd3de9c5ba63b52148e0589391ea" name="libbotan-2-18" arch="x86_64">
  <version epoch="0" ver="2.18.2" rel="bp154.2.3.1"/>
  <changelog author="adam.majer@suse.de" date="1518436800">- Don't drop -fstack-clash-protection for openSUSE 42.3 - we just
  need the Update repository present.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1518609600">- change group of libbotan-%{version_suffix} to 'System/Libraries' as
  requested on review</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1518782400">- drop explicit package requirements
- split binary package and documentation from dynamic library package
  and make documentation package noarch
- merge back Botan2 package to Botan with changelog history
- drop Botan patches
    aarch64-support.patch - doesn't seem to be required anymore
    Botan-fix_install_paths.patch - doesn't seem to be required
    no-cpuid-header.patch - SLE11 not target anymore
    Botan-fix_pkgconfig.patch - this seem to be wrong
    Botan-no-buildtime.patch - not needed anymore
    dont-set-mach-value.diff - doesn't apply, unclear and undocumented why it is there
    Botan-inttypes.patch - not required
    Botan-ull_constants.patch.bz2 - no reason anymore</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1522756800">- Update to Botan 2.5
  * Fix error in certificate wildcard matching (CVE-2018-9127), where a
    wildcard cert for b*.example.com would be accepted as a match for any host
    with name *b*.example.com (GH #1519)
  * Add support for RSA-PSS signatures in TLS (GH #1285)
  * Ed25519 certificates are now supported (GH #1501)
  * Many optimizations in ECC operations. ECDSA signatures are 8-10 times
    faster. ECDSA verification is about twice as fast. ECDH key agreement is
    3-4 times faster. (GH #1457 #1478)
  * Implement product scanning Montgomery reduction, which improves
    Diffie-Hellman and RSA performance by 10 to 20% on most platforms. (GH
    [#1472])
  * DSA signing and verification performance has improved by 30-50%.
  * Add a new Credentials_Manager callback that specifies which CAs the server
    has indicated it trusts (GH #1395 fixing #1261)
  * Add new TLS::Callbacks methods that allow creating or removing extensions,
    as well as examining extensions sent by the peer (GH #1394 #1186)
  * Add new TLS::Callbacks methods that allow an application to negotiate use
    of custom elliptic curves. (GH #1448)
  * Add ability to create custom elliptic curves (GH #1441 #1444)
  * Add support for POWER8 AES instructions (GH #1459 #1393 #1206)
  * Fix DSA/ECDSA handling of hashes longer than the group order (GH #1502
    [#986])
  * The default encoding of ECC public keys has changed from compressed to
    uncompressed point representation. This improves compatability with some
    common software packages including Golang?s standard library. (GH #1480
    [#1483])
  * It is now possible to create DNs with custom components. (GH #1490 #1492)
  * It is now possible to specify the serial number of created certificates,
    instead of using the default 128-bit random integer. (GH #1489 #1491)
  * Change DL_Group and EC_Group to store their data as shared_ptr for fast
    copying. Also both classes precompute additional useful values (eg for
    modular reductions). (GH #1435 #1454)
  * Make it possible for PKCS10 requests to include custom extensions. This
    also makes it possible to use muliple SubjectAlternativeNames of a single
    type in a request, which was previously not possible. (GH #1429 #1428)
  * Add new optimized interface for FE1 format preserving encryption. By
    caching a number of values computed in the course of the FPE calculation,
    it provides a 6-7x speedup versus the old API. (GH #1469)
  * Add DSA and ElGamal keygen functions to FFI (#1426)
  * Add Pipe::prepend_filter to replace Pipe::prepend (GH #1402)
  * Fix a memory leak in the OpenSSL block cipher integration, introduced in
  * 2.2.0
  * Use an improved algorithm for generating safe primes which is several tens
    of times faster. Also, fix a bug in the prime sieving algorithm which
    caused standard prime generation (like for RSA keys) to be slower than
    necessary. (GH #1413 #1411)
  * Correct the return value of PK_Encryptor::maximum_input_size which reported
    a much too small value (GH #1410)
  * Remove use of CPU specific optimization flags, instead the user should set
    these via CXXFLAGS if desired. (GH #1392)
  * Resolve an issue that would cause a crash in the tests if they were run on
    a machine without SSE2/NEON/VMX instructions. (GH #1495)
  * The Python module now tries to load DLLs from a list of names and uses the
    first one which successfully loads and indicates it supports the desired
    API level. (GH #1497)
  * Various minor optimizations for SHA-3 (GH #1433 #1434)
  * The output of botan --help has been improved (GH #1387)
  * Add --der-format flag to command line utils, making it possible verify
    DSA/ECDSA signatures generated by OpenSSL command line (GH #1409)
  * Add support for --library-suffix option to configure.py (GH #1405 #1404)
  * Use feature flags to enable/disable system specific code (GH #1378)
  * Add --msvc-runtime option to allow using static runtime (GH #1499 #210)
  * Add ?enable-sanitizers= option to allow specifying which sanitizers to
    enable. The existing --with-sanitizers option just enables some default set
    which is known to work with the minimum required compiler versions.
  * Use either rst2man or rst2man.py for generating man page as distributions
    differ on where this program is installed (GH #1516)
  * The threefish module has been renamed threefish_512 since that is the
    algorithm it provides. (GH #1477)
  * The Perl XS based wrapper has been removed, as it was unmaintained and
    broken. (GH #1412)
  * The sqlite3 encryption patch under contrib has been removed. It is still
    maintained by the original author at
    https://github.com/OlivierJG/botansqlite3</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1523361600">- Update to Botan 2.6
  * CVE-2018-9860 Fix a bug decrypting TLS CBC ciphertexts which could for a
    malformed ciphertext cause the decryptor to read and HMAC an additional 64K
    bytes of data which is not part of the record. This could cause a crash if
    the read went into unmapped memory. No information leak or out of bounds
    write occurs.
  * Add support for OAEP labels (GH #1508)
  * RSA signing is about 15% faster (GH #1523) and RSA verification is about 50% faster.
  * Add exponent blinding to RSA (GH #1523)
  * Add Cipher_Mode::create and AEAD_Mode::create (GH #1527)
  * Fix bug in TLS server introduced in 2.5 which caused connection to fail if
    the client offered any signature algorithm not known to the server (for
    example RSA/SHA-224).
  * Fix a bug in inline asm that would with GCC 7.3 cause incorrect
    computations and an infinite loop during the tests. (GH #1524 #1529)</changelog>
  <changelog author="kasimir_@outlook.de" date="1523534400">- fixed to build on armv6 and armv7</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1531224000">- Update to Botan 2.7
  * CVE-2018-12435 Avoid a side channel in ECDSA signature generation (GH
    [#1604])
  * Avoid a side channel in RSA key generation due to use of a non-constant
    time gcd algorithm. (GH #1542 #1556)
  * Optimize prime generation, especially improving RSA key generation. (GH
    [#1542])
  * Make Karatsuba multiplication, Montgomery field operations, Barrett
    reduction and Montgomery exponentiation const time (GH #1540 #1606 #1609
    [#1610])
  * Optimizations for elliptic curve operations especially improving reductions
    and inversions modulo NIST primes (GH #1534 #1538 #1545 #1546 #1547 #1550)
  * Add 24 word wide Comba multiplication, improving 3072-bit RSA and DH by
    ~25%. (GH #1564)
  * Unroll Montgomery reduction for specific sizes (GH #1603)
  * Improved performance of signature verification in ECGDSA, ECKCDSA, SM2 and
    GOST by 10-15%.
  * XMSS optimizations (GH #1583 #1585)
  * Fix an error that meant XMSS would only sign half as many signatures as is
    allowed (GH #1582)
  * Add support for base32 encoding/decoding (GH #1541)
  * Add BMI2 optimized version of SHA-256, 40% faster on Skylake (GH #1584)
  * Allow the year to be up to 2200 in ASN.1 time objects. Previously this was
    limited to 2100. (GH #1536)
  * Add support for Scrypt password hashing (GH #1570)
  * Add support for using Scrypt for private key encryption (GH #1574)
  * Optimizations for DES/3DES, approx 50% faster when used in certain modes
    such as CBC decrypt or CTR.
  * XMSS signature verification did not check that the signature was of the
    expected length which could lead to a crash. (GH #1537)
  * The bcrypt variants 2b and 2y are now supported.
  * Support for 192-bit Suite B TLS profile is now implemented, as the 128-bit
    Suite B is since 2015 not allowed anymore.
  * Previously botan allowed GCM to be used with an empty nonce, which is not
    allowed by the specification. Now such nonces are rejected.
  * Avoid problems on Windows when compiling in Unicode mode (GH #1615 #1616)
  * Previously for ASN.1 encoded signatures (eg ECDSA) Botan would accept any
    valid BER encoding. Now only the single valid DER encoding is accepted.
  * Correct an error that could in rare cases cause an internal error exception
    when doing computations with the P-224 curve.
  * Optimizations to reduce allocations/copies during DER encoding and BER
    decoding (GH #1571 #1572 #1600)
  * Botan generates X.509 subject key IDs by hashing the public key with
    whatever hash function is being used to sign the certificate. However
    especially for SHA-512 this caused SKIDs that were far longer than
    necessary. Now all SKIDs are truncated to 192 bits.
  * In the test suite use mkstemp to create temporary files instead of creating
    them in the current working directory. (GH #1533 #1530)
  * It is now possible to safely override CXX when invoking make in addition to
    when configure.py is run. (GH #1579)
  * OIDs for Camellia and SM4 in CBC and GCM mode are now defined, making it
    possible to use this algorithms for private key encryption.
  * Avoid creating symlinks to the shared object on OpenBSD (#1535)
  * The factor command runs much faster on larger inputs now.
  * Support for Windows Phone/UWP was deprecated starting in 2.5. This
    deprecation has been reversed as it seems UWP is still actively used. (GH
    [#1586] #1587)
  * Support for Visual C++ 2013 is deprecated, and will be removed in Jan 2019.
  * Added support for GCC?s ?sysroot option to configure.py for
    cross-compiling.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1533038400">- Fix version in baselibs.conf</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1547121600">- Update to Botan 2.9
  * Bump SONAME
  * CVE-2018-20187 Address a side channel during ECC key generation, which used an
    unblinded Montgomery ladder. As a result, a timing attack can reveal
    information about the high bits of the secret key.
  * Fix bugs in TLS which caused negotiation failures when the client used an
    unknown signature algorithm or version (GH #1711 #1709 #1708)
  * Fix bug affecting GCM, EAX and ChaCha20Poly1305 where if the associated data
    was set after starting a message, the new AD was not reflected in the produced
    tag. Now with these modes setting an AD after beginning a message throws an
    exception.
  * Use a smaller sieve which improves performance of prime generation.
  * Fixed a bug that caused ChaCha to produce incorrect output after encrypting 256
    GB. (GH #1728)
  * Add NEON and AltiVec implementations of ChaCha (GH #1719 #1728 #1729)
  * Optimize AVX2 ChaCha (GH #1730)
  * Many more operations in BigInt, ECC and RSA code paths are either fully const
    time or avoid problematic branches that could potentially be exploited in a
    side channel attack. (GH #1738 #1750 #1754 #1755 #1757 #1758 #1759 #1762 #1765
    [#1770] #1773 #1774 #1779 #1780 #1794 #1795 #1796 #1797)
  * Several optimizations for BigInt and ECC, improving ECDSA performance by as
    much as 30%. (GH #1734 #1737 #1777 #1750 #1737 #1788)
  * Support recovering an ECDSA public key from a message/signature pair (GH #664
    [#1784])
  * Add base58 encoding/decoding functions (GH #1783)
  * In the command line interface, add support for reading passphrases from the
    terminal with echo disabled (GH #1756)
  * Add CT::Mask type to simplify const-time programming (GH #1751)
  * Add new configure options --disable-bmi2, --disable-rdrand, and
  - -disable-rdseed to prevent use of those instruction sets.
  * Add error_type and error_code functions to Exception type (GH #1744)
  * Now on POSIX systems posix_memalign is used instead of mmap for allocating the
    page-locked memory pool. This avoids issues with fork. (GH #602 #1798)
  * When available, use RDRAND to generate the additional data in
    Stateful_RNG::randomize_with_ts_input
  * Use vzeroall/vzeroupper intrinsics to avoid AVX2/SSE transition penalties.
  * Support for Visual C++ 2013 has been removed (GH #1557 #1697)
  * Resolve a memory leak when verifying ECDSA signatures with versions of OpenSSL
    before 1.1.0 (GH #1698)
  * Resolve a memory leak using ECDH via OpenSSL (GH #1767)
  * Fix an error in XTS which prohibited encrypting values which were exactly the
    same length as the underlying block size. Messages of this size are allowed by
    the standard and other XTS implementations. (GH #1706)
  * Resolve a bug in TSS which resulted in it using an incorrect length field in
    the shares. Now the correct length is encoded, but either correct or buggy
    lengths are accepted when decoding. (GH #1722)
  * Correct a bug when reducing a negative BigInt modulo a small power of 2. (GH
    [#1755])
  * Add CLI utils for threshold secret splitting. (GH #1722)
  * Fix a bug introduced in 2.8.0 that caused compilation failure if using a single
    amalgamation file with AVX2 enabled. (GH #1700)
  * Add an explicit OS target for Emscripten and improve support for it. (GH #1702)
  * Fix small issues when building for QNX
  * Switch the Travis CI build to using Ubuntu 16.04 (GH #1767)
  * Add options to configure.py to disable generation of pkg-config file, and (for
    systems where pkg-config support defaults to off, like Windows), to enable
    generating it. (GH #1268)
  * Modify configure.py to accept empty lists or trailing/extra commas. (GH #1705)
- Update to Botan 2.8
  * Add support for using Apple CommonCrypto library for hashing (GH #1667),
    cipher modes (GH #1674) and block ciphers (GH #1673).
  * Support for negotiating TLS versions 1.0 and 1.1 is disabled in the default
    TLS policy. In addition, support for negotiating TLS ciphersuites using CBC
    or CCM mode is disabled by default. Applications which need to interop with
    old peers must enable these in their TLS policy object. (GH #1651)
  * During primality testing, use a Lucas test in addition to Miller-Rabin. It
    is possible to construct a composite integer which passes n Miller-Rabin
    tests with probability (1/4)^n. So for a incautious verifier using a small
    number of tests (under 16 or so) it is possible if unlikely they would
    accept such a composite as prime. Adding a Lucas test precludes such an
    attack. (GH #1636)
  * Add XChaCha and XChaCha20Poly1305 (GH #1640)
  * Add AVX2 implementations of ChaCha (GH #1662) and Serpent (GH #1660)
  * Add a new password hashing interface in pwdhash.h (GH #1670)
  * C binding improvements. Added functions to get name and supported
    keylengths of cipher, hash and MAC objects, support for FE1 format
    preserving encryption (GH #1625 #1646), functions to load and save RSA keys
    in PKCS #1 format (GH #1621), HOTP and TOTP algorithms, scrypt, certificate
    verification (GH #1647), functions to get the output length of public key
    operations (GH #1642), and functions for loading and serializing X25519
    keys (GH #1681)
  * Support for building with BOTAN_MP_WORD_BITS set to 8 or 16 has been removed.
  * Previously SM2 had two distinct key types, one for signatures and another
    for encryption. They have now been merged into a single key type since in
    practice it seems the same key is at times used for both operations. (GH
    [#1637])
  * The Cipher_Mode class now derives from SymmetricAlgorithm (GH #1639)
  * Add support for using the ARMv8 instructions for SM4 encryption (GH #1622)
  * The entropy source using SecRandomCopyBytes has been removed as it was
    redundant with other entropy sources (GH #1668)
  * The Python module has much better error checking and reporting, and offers
    new functionality such as scrypt, MPI and FPE. (GH #1643 #1646)
  * Fixed a bug that caused CCM to fail with an exception when used with L=8 (GH #1631 #1632)
  * The default bcrypt work factor has been increased from 10 to 12.
  * The default algorithm used in passhash9 has changed from SHA-256 to
    SHA-512, and the default work factor increased from 10 to 15.
  * In ECC private keys, include the public key data for compatibility with GnuTLS (GH #1634 #1635)
  * Add support for using Linux getrandom syscall to access the system PRNG.
    This is disabled by default, use --with-os-feature=getrandom to enable.
  * It is now possible to encrypt private keys using SIV mode.
  * The FFI function botan_privkey_load now ignores its rng argument.
  * Resolve a problem when building under Visual C++ 15.8 (GH #1624)
  * Fix a bug in XSalsa20 (192-bit Salsa nonces) where if set_iv was called
    twice without calling set_key, the resulting encryption was incorrect. (GH
    [#1640])
  * Handle an error seen when verifying invalid ECDSA signatures using LibreSSL
    on non x86-64 platforms (GH #1627 #1628)
  * Fix bugs in PKCS7 and X9.23 CBC padding schemes, which would ignore the
    first byte in the event the padding took up the entire block. (GH #1690)
  * Correct bugs which would cause CFB, OCB, and GCM modes to crash when they
    were used in an unkeyed state. (GH #1639)
  * Optimizations for SM4 and Poly1305
  * Avoid a cache side channel in the AES key schedule
  * Add pk_encrypt and pk_decrypt CLI operations
  * Now asn1print CLI defaults to printing context-specific fields.
  * Use codec_base for Base64, which matches how Base32 is implemented (GH #1597)
  * The cast module has been split up into cast128 and cast256 (GH #1685)
  * When building under Visual C++ 2013, the user must acknowledge the upcoming
    removal of support using the configure.py flag --ack-vc2013-deprecated (GH
    [#1557])</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1554206400">- Update to Botan 2.10
  * Bump SONAME
  * Warning: XMSS currently implements draft-06 which is not compatible with
    the final RFC 8391 specification. A PR is open to fix this, however it will
    break all current uses of XMSS. If you are currently using XMSS please
    comment at https://github.com/randombit/botan/pull/1858. Otherwise the PR
    will be merged and support for draft-06 will be removed starting in 2.11.
  * Added a new certificate store implementation that can access the MacOS
    keychain certificate store. (GH #1830)
  * Redesigned Memory_Pool class, which services allocations out of a set of
    pages locked into memory (using mlock/VirtualLock). It is now faster and
    with improved exploit mitigations. (GH #1800)
  * Add BMI2 implementations of SHA-512 and SHA-3 which improve performance by
    25-35% on common CPUs. (GH #1815)
  * Unroll SHA-3 computation improving performance by 10-12% (GH #1838)
  * Add a Thread_Pool class. It is now possible to run the tests in multiple
    threads with --test-threads=N flag to select the number of threads to use.
    Use --test-threads=0 to run with as many CPU cores as are available on the
    current system. The default remains single threaded. (GH #1819)
  * XMSS signatures now uses a global thread pool instead of spawning new
    threads for each usage. This improves signature generation performance by
    between 10% and 60% depending on architecture and core count. (GH #1864)
  * Some functions related to encoding and decoding BigInts have been
    deprecated. (GH #1817)
  * Binary encoding and decoding of BigInts has been optimized by performing
    word-size operations when possible. (GH #1817)
  * Rename the exception Integrity_Failure to Invalid_Authentication_Tag to
    make its meaning and usage more clear. The old name remains as a typedef.
    (GH #1816)
  * Support for using Boost filesystem and MSVC?s std::filesystem have been
    removed, since already POSIX and Win32 versions had to be maintained for
    portability. (GH #1814)
  * Newly generated McEliece and XMSS keys now default to being encrypted using
    SIV mode, support for which was added in 2.8.0. Previously GCM was used by
    default for these algorithms.
  * Use arc4random on Android systems (GH #1851)
  * Fix the encoding of PGP-S2K iteration counts (GH #1853 #1854)
  * Add a facility for sandboxing the command line util. Currently FreeBSD
    (Capsicum) and OpenBSD (pledge) sandboxes are supported. (GH #1808)
  * Use if constexpr when available.
  * Disable building shared libs on iOS as it was broken and it is not clear
    shared libraries are ever useful on iOS (GH #1865)
  * Renamed the darwin build target to macos. This should not cause any
    user-visible change. (GH #1866)
  * Add support for using sccache to cache the Windows CI build (GH #1807)
  * Add --extra-cxxflags option which allows adding compilation flags without
    overriding the default set. (GH #1826)
  * Add --format= option to the hash cli which allows formatting the output as
    base64 or base58, default output remains hex.
  * Add base58_enc and base58_dec cli utils for base58 encoding/decoding. (GH #1848)
  * Enable getentropy by default on macOS (GH #1862)
  * Avoid using -momit-leaf-frame-pointer flags, since -fomit-frame-pointer is
    already the default with recent versions of GCC.
  * Fix XLC sanitizer flags.
  * Rename Blake2b class to BLAKE2b to match the official name. There is a typedef for compat.
  * Fix a bug where loading a raw Ed25519_PublicKey of incorrect length would
    lead to a crash. (GH #1850)
  * Fix a bug that caused compilation problems using CryptoNG PRNG. (GH #1832)
  * Extended SHAKE-128 cipher to support any key between 1 and 160 bytes,
    instead of only multiples of 8 bytes.
  * Minor HMAC optimizations.
  * Build fixes for GNU/Hurd.
  * Fix a bug that prevented generating or verifying Ed25519 signatures in the
    CLI (GH #1828 #1829)
  * Fix a compilation error when building the amalgamation outside of the
    original source directory when AVX2 was enabled. (GH #1812)
  * Fix a crash when creating the amalgamation if a header file was edited on
    Windows but then the amalgamation was built on Linux (GH #1763)</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1586347200">- Update to Botan 2.14:
  * Add support for using POWER8+ VPSUMD instruction to accelerate GCM (GH #2247)
  * Optimize the vector permute AES implementation, especially improving
    performance on ARMv7, Aarch64, and POWER. (GH #2243)
  * Use a new algorithm for modular inversions which is both faster
    and more resistant to side channel attacks. (GH #2287 #2296 #2301)
  * Address an issue in CBC padding which would leak the length of the plaintext
    which was being padded. Unpadding during decryption was not affected.
  * Optimize NIST prime field reductions, improving ECDSA by 3-9% (GH #2295)
  * Increase the size of the ECC blinding mask and scale it based on the
    size of the group order. (GH #880 #893 #2308)
  * Add server side support for the TLS asio wrapper. (GH #2229)
  * Add support for using Windows certificate store on MinGW (GH #2280)
  * Add a CLI utility cpu_clock which estimates the speed of the processor cycle counter.
  * Add Roughtime client (GH #2143 #1842)
  * Add support for XMSS X.509 certificates (GH #2172)
  * Add support for X.509 CRLs in FFI layer and Python wrapper (GH #2213)
  * Add AVX2 implementation of SHACAL2 (GH #2196)
  * Support more functionality for X.509 in the Python API (GH #2165)
  * Add generic CPU target useful when building for some new or unusual platform.
  * Disable MD5 in BSI or NIST modes (GH #2188)
  * Many currently public headers are being deprecated. If any such header is included by
    an application, a warning is issued at compile time.
    Headers issuing this warning will be made internal in a future major release.
  * RSA signature performance improvements (GH #2068 #2070)
  * Performance improvements for GCM (GH #2024 #2099 #2119), OCB (#2122), XTS (#2123) and
    ChaCha20Poly1305 (GH #2117), especially for small messages.
  * Add support for constant time AES using NEON and AltiVec (GH #2093 #2095 #2100)
  * Improve performance of POWER8 AES instructions (GH #2096)
  * Add support for the POWER9 hardware random number generator (GH #2026)
  * Add support for 64-bit version of RDRAND, doubling performance on x86-64 (GH #934 #2022)
  * In DTLS server, support a client crashing and then reconnecting from the same
    source port, as described in RFC 6347 sec 4.2.8 (GH #2029)
  * Optimize DTLS MTU splitting to split precisely to the set MTU (GH #2042)
  * Add support for the TLS v1.3 downgrade indicator. (GH #2027)
  * Add Argon2 PBKDF and password hash (GH #459 #1981 #1987)
  * Add Bcrypt-PBKDF (GH #1990)
  * Add server side support for issuing DTLS HelloVerifyRequest messages (GH #1999)
  * Add support for the TLS v1.3 supported_versions extension. (GH #1976)
  * Add Ed25519ph compatible with RFC 8032 (GH #1699 #2000)
  * Add support for OCSP stapling on server side. (GH #1703 #1967)
  * Add a boost::asio TLS stream compatible with boost::asio::ssl. (GH #1839 #1927 #1992)
  * Add a certificate store for Linux/Unix systems. (GH #1885 #1936)
  * Various Fixes</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597579200">- update to 2.15:
  Fix a bug where the name constraint extension did not constrain the alternative
  DN field which can be included in a subject alternative name. This would allow
  a corrupted sub-CA which was otherwise constrained by a name constraint to
  issue a certificate with a prohibited DN.
  Fix a bug in the TLS server during client authentication where where if a
  (disabled by default) static RSA ciphersuite was selected, then no certificate
  request would be sent. This would have an equivalent effect to a client which
  simply replied with an empty Certificate message. (GH #2367)
  Replace the T-Tables implementation of AES with a 32-bit bitsliced version. As
  a result AES is now constant time on all processors. (GH #2346 #2348 #2353
  [#2329] #2355)
  In TLS, enforce that the key usage given in the server certificate allows the
  operation being performed in the ciphersuite. (GH #2367)
  In X.509 certificates, verify that the algorithm parameters are the expected
  NULL or empty. (GH #2367)
  Change the HMAC key schedule to attempt to reduce the information leaked from
  the key schedule with regards to the length of the key, as this is at times (as
  for example in PBKDF2) sensitive information. (GH #2362)
  Add Processor_RNG which wraps RDRAND or the POWER DARN RNG instructions. The
  previous RDRAND_RNG interface is deprecated. (GH #2352)
  The documentation claimed that mlocked pages were created with a guard page
  both before and after. However only a trailing guard page was used. Add a
  leading guard page. (GH #2334)
  Add support for generating and verifying DER-encoded ECDSA signatures in the C
  and Python interfaces. (GH #2357 #2356)
  Workaround a bug in GCC?s UbSan which triggered on a code sequence in XMSS (GH
  [#2322])
  When building documentation using Sphinx avoid parallel builds with version 3.0
  due to a bug in that version (GH #2326 #2324)
  Fix a memory leak in the CommonCrypto block cipher calls (GH #2371)
  Fix a flaky test that would occasionally fail when running the tests with a
  large number of threads. (GH #2325 #2197)
  Additional algorithms are now deprecated: XTEA, GOST, and Tiger. They will be
  removed in a future major release.</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1603800000">- Update to 2.16.0:
  * Now userspace PRNG objects (such as AutoSeeded_RNG and HMAC_DRBG)
    use an internal lock, which allows safe concurrent use. This
    however is purely a precaution in case of accidental sharing of
    such RNG objects; for performance reasons it is always preferable
    to use a RNG per thread if a userspace RNG is needed.
  * DL_Group and EC_Group objects now track if they were created
    from a known trusted group (such as P-256 or an IPsec DH
    parameter). If so, then verification tests can be relaxed, as
    compared to parameters which may have been maliciously
    constructed in order to pass primality checks.
  * RandomNumberGenerator::add_entropy_T assumed its input was a POD
    type but did not verify this.
  * Support OCSP responders that live on a non-standard port.
  * Add support for Solaris sandbox.
  * Support suffixes on release numbers for alpha/beta releases.
  * Fix a bug in EAX which allowed requesting a 0 length tag, which
    had the effect of using a full length tag. Instead omit the
    length field, or request the full tag length explicitly.
  * Fix a memory leak in GCM where if passed an unsuitable block
    cipher (eg not 128 bit) it would throw an exception and leak
    the cipher object.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1604750400">- Botan 2.17.1:
  * Fix bugs in ECDSA signature generation and verifications under
    specific circumstances
  * developer visible changes, including deprecation with warnings
  * optimization in the non-hardware assisted AES key generation
  * Add more detection logic for AVX-512 features
  * Fix a bug parsing deeply nested cipher names
  * Prevent requesting DER encoding of signatures when the
    algorithm did not support it</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1605268800">- Botan 2.17.2:
  * Fix build problem on ppc64
  * Resolve an issue in the modular square root algorithm</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1608724800">- Botan 2.17.3:
  * Harden against side-channels from decoding secret values by
    changing the base64, base58, base32, and hex encoding and
    decoding opearations to run in constant time</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1618574400">- Botan 2.18.0
  * Add support for implementing custom RNG objects through the FFI
    interface
  * Improve safegcd bounds, improving runtime performance
  * Reject non-TLS messages as quickly as possible without waiting
    for a full record.
  * Fixes for TLS::Stream::async_shutdown
- Removed unneeded GNU MP build requirement, support was dropped
  with version 1.11.10
- Enabled check target, verify integrity of build library</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1620648000">- Botan 2.18.1:
  * Fix a build regression in 2.18.0 which caused linker flags
    which contain -l within them (such as -fuse-linker-plugin)
    to be misinterpreted
  * Fix a bug which caused decoding a certificate which contained
    more than one name in a single RDN
  * Fix a bug which caused OID lookup failures when run in a locale
    which uses thousands separators (pt_BR was reported as having
    this issue)
  * DNS names in name constraints were compared with case
    sensitivity, which could cause valid certificates to be
    rejected
  * X.509 name constraint extensions were rejected if non-critical.
    RFC 5280 requires conforming CAs issue such extensions as
    critical, but not all certificates are compliant, and all other
    known implementations do not require this
  * X.509 name constraints were incorrectly applied to the
    certificate which included the constraint
- build with lzma compression support
- build with SQLite support
- build with TPM support
- fix SLE 12 build</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1637755200">- update to 2.18.2:
  * Avoid using short exponents when encrypting in ElGamal, as some PGP
    implementations generate keys with parameters that are weak when
    short exponents are used CVE-2021-40529 boo#1190244
  * Fix a low risk OAEP decryption side channel
  * Work around a miscompilation of SHA-3 caused by a bug in Clang 12
    and XCode 13
  * Remove support in OpenSSL provider for algorithms which are
    disabled by default in OpenSSL 3.0
  * Add CI based on GitHub actions to replace Travis CI
  * Fix the online OCSP test, as the certificate involved had expired.
  * Fix some test failures induced by the expiration of the trust root
    "DST Root CA X3"</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1668686400">- Fixed [CVE-2022-43705,bsc#1205509]
  * Added Botan-CVE-2022-43705.patch
  * Added Botan-CVE-2022-43705-certs.tgz
  * validate that an embedded certificate was issued by the end-entity
    issuing certificate authority when checking OCSP responses.</changelog>
</package>
<package pkgid="3b4c220271a3601d87a7d223dacb7d74b41d937aed9c63de312e2e8b9b6b3f4c" name="libbotan-2-18-32bit" arch="x86_64">
  <version epoch="0" ver="2.18.2" rel="bp154.2.3.1"/>
  <changelog author="adam.majer@suse.de" date="1518436800">- Don't drop -fstack-clash-protection for openSUSE 42.3 - we just
  need the Update repository present.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1518609600">- change group of libbotan-%{version_suffix} to 'System/Libraries' as
  requested on review</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1518782400">- drop explicit package requirements
- split binary package and documentation from dynamic library package
  and make documentation package noarch
- merge back Botan2 package to Botan with changelog history
- drop Botan patches
    aarch64-support.patch - doesn't seem to be required anymore
    Botan-fix_install_paths.patch - doesn't seem to be required
    no-cpuid-header.patch - SLE11 not target anymore
    Botan-fix_pkgconfig.patch - this seem to be wrong
    Botan-no-buildtime.patch - not needed anymore
    dont-set-mach-value.diff - doesn't apply, unclear and undocumented why it is there
    Botan-inttypes.patch - not required
    Botan-ull_constants.patch.bz2 - no reason anymore</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1522756800">- Update to Botan 2.5
  * Fix error in certificate wildcard matching (CVE-2018-9127), where a
    wildcard cert for b*.example.com would be accepted as a match for any host
    with name *b*.example.com (GH #1519)
  * Add support for RSA-PSS signatures in TLS (GH #1285)
  * Ed25519 certificates are now supported (GH #1501)
  * Many optimizations in ECC operations. ECDSA signatures are 8-10 times
    faster. ECDSA verification is about twice as fast. ECDH key agreement is
    3-4 times faster. (GH #1457 #1478)
  * Implement product scanning Montgomery reduction, which improves
    Diffie-Hellman and RSA performance by 10 to 20% on most platforms. (GH
    [#1472])
  * DSA signing and verification performance has improved by 30-50%.
  * Add a new Credentials_Manager callback that specifies which CAs the server
    has indicated it trusts (GH #1395 fixing #1261)
  * Add new TLS::Callbacks methods that allow creating or removing extensions,
    as well as examining extensions sent by the peer (GH #1394 #1186)
  * Add new TLS::Callbacks methods that allow an application to negotiate use
    of custom elliptic curves. (GH #1448)
  * Add ability to create custom elliptic curves (GH #1441 #1444)
  * Add support for POWER8 AES instructions (GH #1459 #1393 #1206)
  * Fix DSA/ECDSA handling of hashes longer than the group order (GH #1502
    [#986])
  * The default encoding of ECC public keys has changed from compressed to
    uncompressed point representation. This improves compatability with some
    common software packages including Golang?s standard library. (GH #1480
    [#1483])
  * It is now possible to create DNs with custom components. (GH #1490 #1492)
  * It is now possible to specify the serial number of created certificates,
    instead of using the default 128-bit random integer. (GH #1489 #1491)
  * Change DL_Group and EC_Group to store their data as shared_ptr for fast
    copying. Also both classes precompute additional useful values (eg for
    modular reductions). (GH #1435 #1454)
  * Make it possible for PKCS10 requests to include custom extensions. This
    also makes it possible to use muliple SubjectAlternativeNames of a single
    type in a request, which was previously not possible. (GH #1429 #1428)
  * Add new optimized interface for FE1 format preserving encryption. By
    caching a number of values computed in the course of the FPE calculation,
    it provides a 6-7x speedup versus the old API. (GH #1469)
  * Add DSA and ElGamal keygen functions to FFI (#1426)
  * Add Pipe::prepend_filter to replace Pipe::prepend (GH #1402)
  * Fix a memory leak in the OpenSSL block cipher integration, introduced in
  * 2.2.0
  * Use an improved algorithm for generating safe primes which is several tens
    of times faster. Also, fix a bug in the prime sieving algorithm which
    caused standard prime generation (like for RSA keys) to be slower than
    necessary. (GH #1413 #1411)
  * Correct the return value of PK_Encryptor::maximum_input_size which reported
    a much too small value (GH #1410)
  * Remove use of CPU specific optimization flags, instead the user should set
    these via CXXFLAGS if desired. (GH #1392)
  * Resolve an issue that would cause a crash in the tests if they were run on
    a machine without SSE2/NEON/VMX instructions. (GH #1495)
  * The Python module now tries to load DLLs from a list of names and uses the
    first one which successfully loads and indicates it supports the desired
    API level. (GH #1497)
  * Various minor optimizations for SHA-3 (GH #1433 #1434)
  * The output of botan --help has been improved (GH #1387)
  * Add --der-format flag to command line utils, making it possible verify
    DSA/ECDSA signatures generated by OpenSSL command line (GH #1409)
  * Add support for --library-suffix option to configure.py (GH #1405 #1404)
  * Use feature flags to enable/disable system specific code (GH #1378)
  * Add --msvc-runtime option to allow using static runtime (GH #1499 #210)
  * Add ?enable-sanitizers= option to allow specifying which sanitizers to
    enable. The existing --with-sanitizers option just enables some default set
    which is known to work with the minimum required compiler versions.
  * Use either rst2man or rst2man.py for generating man page as distributions
    differ on where this program is installed (GH #1516)
  * The threefish module has been renamed threefish_512 since that is the
    algorithm it provides. (GH #1477)
  * The Perl XS based wrapper has been removed, as it was unmaintained and
    broken. (GH #1412)
  * The sqlite3 encryption patch under contrib has been removed. It is still
    maintained by the original author at
    https://github.com/OlivierJG/botansqlite3</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1523361600">- Update to Botan 2.6
  * CVE-2018-9860 Fix a bug decrypting TLS CBC ciphertexts which could for a
    malformed ciphertext cause the decryptor to read and HMAC an additional 64K
    bytes of data which is not part of the record. This could cause a crash if
    the read went into unmapped memory. No information leak or out of bounds
    write occurs.
  * Add support for OAEP labels (GH #1508)
  * RSA signing is about 15% faster (GH #1523) and RSA verification is about 50% faster.
  * Add exponent blinding to RSA (GH #1523)
  * Add Cipher_Mode::create and AEAD_Mode::create (GH #1527)
  * Fix bug in TLS server introduced in 2.5 which caused connection to fail if
    the client offered any signature algorithm not known to the server (for
    example RSA/SHA-224).
  * Fix a bug in inline asm that would with GCC 7.3 cause incorrect
    computations and an infinite loop during the tests. (GH #1524 #1529)</changelog>
  <changelog author="kasimir_@outlook.de" date="1523534400">- fixed to build on armv6 and armv7</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1531224000">- Update to Botan 2.7
  * CVE-2018-12435 Avoid a side channel in ECDSA signature generation (GH
    [#1604])
  * Avoid a side channel in RSA key generation due to use of a non-constant
    time gcd algorithm. (GH #1542 #1556)
  * Optimize prime generation, especially improving RSA key generation. (GH
    [#1542])
  * Make Karatsuba multiplication, Montgomery field operations, Barrett
    reduction and Montgomery exponentiation const time (GH #1540 #1606 #1609
    [#1610])
  * Optimizations for elliptic curve operations especially improving reductions
    and inversions modulo NIST primes (GH #1534 #1538 #1545 #1546 #1547 #1550)
  * Add 24 word wide Comba multiplication, improving 3072-bit RSA and DH by
    ~25%. (GH #1564)
  * Unroll Montgomery reduction for specific sizes (GH #1603)
  * Improved performance of signature verification in ECGDSA, ECKCDSA, SM2 and
    GOST by 10-15%.
  * XMSS optimizations (GH #1583 #1585)
  * Fix an error that meant XMSS would only sign half as many signatures as is
    allowed (GH #1582)
  * Add support for base32 encoding/decoding (GH #1541)
  * Add BMI2 optimized version of SHA-256, 40% faster on Skylake (GH #1584)
  * Allow the year to be up to 2200 in ASN.1 time objects. Previously this was
    limited to 2100. (GH #1536)
  * Add support for Scrypt password hashing (GH #1570)
  * Add support for using Scrypt for private key encryption (GH #1574)
  * Optimizations for DES/3DES, approx 50% faster when used in certain modes
    such as CBC decrypt or CTR.
  * XMSS signature verification did not check that the signature was of the
    expected length which could lead to a crash. (GH #1537)
  * The bcrypt variants 2b and 2y are now supported.
  * Support for 192-bit Suite B TLS profile is now implemented, as the 128-bit
    Suite B is since 2015 not allowed anymore.
  * Previously botan allowed GCM to be used with an empty nonce, which is not
    allowed by the specification. Now such nonces are rejected.
  * Avoid problems on Windows when compiling in Unicode mode (GH #1615 #1616)
  * Previously for ASN.1 encoded signatures (eg ECDSA) Botan would accept any
    valid BER encoding. Now only the single valid DER encoding is accepted.
  * Correct an error that could in rare cases cause an internal error exception
    when doing computations with the P-224 curve.
  * Optimizations to reduce allocations/copies during DER encoding and BER
    decoding (GH #1571 #1572 #1600)
  * Botan generates X.509 subject key IDs by hashing the public key with
    whatever hash function is being used to sign the certificate. However
    especially for SHA-512 this caused SKIDs that were far longer than
    necessary. Now all SKIDs are truncated to 192 bits.
  * In the test suite use mkstemp to create temporary files instead of creating
    them in the current working directory. (GH #1533 #1530)
  * It is now possible to safely override CXX when invoking make in addition to
    when configure.py is run. (GH #1579)
  * OIDs for Camellia and SM4 in CBC and GCM mode are now defined, making it
    possible to use this algorithms for private key encryption.
  * Avoid creating symlinks to the shared object on OpenBSD (#1535)
  * The factor command runs much faster on larger inputs now.
  * Support for Windows Phone/UWP was deprecated starting in 2.5. This
    deprecation has been reversed as it seems UWP is still actively used. (GH
    [#1586] #1587)
  * Support for Visual C++ 2013 is deprecated, and will be removed in Jan 2019.
  * Added support for GCC?s ?sysroot option to configure.py for
    cross-compiling.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1533038400">- Fix version in baselibs.conf</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1547121600">- Update to Botan 2.9
  * Bump SONAME
  * CVE-2018-20187 Address a side channel during ECC key generation, which used an
    unblinded Montgomery ladder. As a result, a timing attack can reveal
    information about the high bits of the secret key.
  * Fix bugs in TLS which caused negotiation failures when the client used an
    unknown signature algorithm or version (GH #1711 #1709 #1708)
  * Fix bug affecting GCM, EAX and ChaCha20Poly1305 where if the associated data
    was set after starting a message, the new AD was not reflected in the produced
    tag. Now with these modes setting an AD after beginning a message throws an
    exception.
  * Use a smaller sieve which improves performance of prime generation.
  * Fixed a bug that caused ChaCha to produce incorrect output after encrypting 256
    GB. (GH #1728)
  * Add NEON and AltiVec implementations of ChaCha (GH #1719 #1728 #1729)
  * Optimize AVX2 ChaCha (GH #1730)
  * Many more operations in BigInt, ECC and RSA code paths are either fully const
    time or avoid problematic branches that could potentially be exploited in a
    side channel attack. (GH #1738 #1750 #1754 #1755 #1757 #1758 #1759 #1762 #1765
    [#1770] #1773 #1774 #1779 #1780 #1794 #1795 #1796 #1797)
  * Several optimizations for BigInt and ECC, improving ECDSA performance by as
    much as 30%. (GH #1734 #1737 #1777 #1750 #1737 #1788)
  * Support recovering an ECDSA public key from a message/signature pair (GH #664
    [#1784])
  * Add base58 encoding/decoding functions (GH #1783)
  * In the command line interface, add support for reading passphrases from the
    terminal with echo disabled (GH #1756)
  * Add CT::Mask type to simplify const-time programming (GH #1751)
  * Add new configure options --disable-bmi2, --disable-rdrand, and
  - -disable-rdseed to prevent use of those instruction sets.
  * Add error_type and error_code functions to Exception type (GH #1744)
  * Now on POSIX systems posix_memalign is used instead of mmap for allocating the
    page-locked memory pool. This avoids issues with fork. (GH #602 #1798)
  * When available, use RDRAND to generate the additional data in
    Stateful_RNG::randomize_with_ts_input
  * Use vzeroall/vzeroupper intrinsics to avoid AVX2/SSE transition penalties.
  * Support for Visual C++ 2013 has been removed (GH #1557 #1697)
  * Resolve a memory leak when verifying ECDSA signatures with versions of OpenSSL
    before 1.1.0 (GH #1698)
  * Resolve a memory leak using ECDH via OpenSSL (GH #1767)
  * Fix an error in XTS which prohibited encrypting values which were exactly the
    same length as the underlying block size. Messages of this size are allowed by
    the standard and other XTS implementations. (GH #1706)
  * Resolve a bug in TSS which resulted in it using an incorrect length field in
    the shares. Now the correct length is encoded, but either correct or buggy
    lengths are accepted when decoding. (GH #1722)
  * Correct a bug when reducing a negative BigInt modulo a small power of 2. (GH
    [#1755])
  * Add CLI utils for threshold secret splitting. (GH #1722)
  * Fix a bug introduced in 2.8.0 that caused compilation failure if using a single
    amalgamation file with AVX2 enabled. (GH #1700)
  * Add an explicit OS target for Emscripten and improve support for it. (GH #1702)
  * Fix small issues when building for QNX
  * Switch the Travis CI build to using Ubuntu 16.04 (GH #1767)
  * Add options to configure.py to disable generation of pkg-config file, and (for
    systems where pkg-config support defaults to off, like Windows), to enable
    generating it. (GH #1268)
  * Modify configure.py to accept empty lists or trailing/extra commas. (GH #1705)
- Update to Botan 2.8
  * Add support for using Apple CommonCrypto library for hashing (GH #1667),
    cipher modes (GH #1674) and block ciphers (GH #1673).
  * Support for negotiating TLS versions 1.0 and 1.1 is disabled in the default
    TLS policy. In addition, support for negotiating TLS ciphersuites using CBC
    or CCM mode is disabled by default. Applications which need to interop with
    old peers must enable these in their TLS policy object. (GH #1651)
  * During primality testing, use a Lucas test in addition to Miller-Rabin. It
    is possible to construct a composite integer which passes n Miller-Rabin
    tests with probability (1/4)^n. So for a incautious verifier using a small
    number of tests (under 16 or so) it is possible if unlikely they would
    accept such a composite as prime. Adding a Lucas test precludes such an
    attack. (GH #1636)
  * Add XChaCha and XChaCha20Poly1305 (GH #1640)
  * Add AVX2 implementations of ChaCha (GH #1662) and Serpent (GH #1660)
  * Add a new password hashing interface in pwdhash.h (GH #1670)
  * C binding improvements. Added functions to get name and supported
    keylengths of cipher, hash and MAC objects, support for FE1 format
    preserving encryption (GH #1625 #1646), functions to load and save RSA keys
    in PKCS #1 format (GH #1621), HOTP and TOTP algorithms, scrypt, certificate
    verification (GH #1647), functions to get the output length of public key
    operations (GH #1642), and functions for loading and serializing X25519
    keys (GH #1681)
  * Support for building with BOTAN_MP_WORD_BITS set to 8 or 16 has been removed.
  * Previously SM2 had two distinct key types, one for signatures and another
    for encryption. They have now been merged into a single key type since in
    practice it seems the same key is at times used for both operations. (GH
    [#1637])
  * The Cipher_Mode class now derives from SymmetricAlgorithm (GH #1639)
  * Add support for using the ARMv8 instructions for SM4 encryption (GH #1622)
  * The entropy source using SecRandomCopyBytes has been removed as it was
    redundant with other entropy sources (GH #1668)
  * The Python module has much better error checking and reporting, and offers
    new functionality such as scrypt, MPI and FPE. (GH #1643 #1646)
  * Fixed a bug that caused CCM to fail with an exception when used with L=8 (GH #1631 #1632)
  * The default bcrypt work factor has been increased from 10 to 12.
  * The default algorithm used in passhash9 has changed from SHA-256 to
    SHA-512, and the default work factor increased from 10 to 15.
  * In ECC private keys, include the public key data for compatibility with GnuTLS (GH #1634 #1635)
  * Add support for using Linux getrandom syscall to access the system PRNG.
    This is disabled by default, use --with-os-feature=getrandom to enable.
  * It is now possible to encrypt private keys using SIV mode.
  * The FFI function botan_privkey_load now ignores its rng argument.
  * Resolve a problem when building under Visual C++ 15.8 (GH #1624)
  * Fix a bug in XSalsa20 (192-bit Salsa nonces) where if set_iv was called
    twice without calling set_key, the resulting encryption was incorrect. (GH
    [#1640])
  * Handle an error seen when verifying invalid ECDSA signatures using LibreSSL
    on non x86-64 platforms (GH #1627 #1628)
  * Fix bugs in PKCS7 and X9.23 CBC padding schemes, which would ignore the
    first byte in the event the padding took up the entire block. (GH #1690)
  * Correct bugs which would cause CFB, OCB, and GCM modes to crash when they
    were used in an unkeyed state. (GH #1639)
  * Optimizations for SM4 and Poly1305
  * Avoid a cache side channel in the AES key schedule
  * Add pk_encrypt and pk_decrypt CLI operations
  * Now asn1print CLI defaults to printing context-specific fields.
  * Use codec_base for Base64, which matches how Base32 is implemented (GH #1597)
  * The cast module has been split up into cast128 and cast256 (GH #1685)
  * When building under Visual C++ 2013, the user must acknowledge the upcoming
    removal of support using the configure.py flag --ack-vc2013-deprecated (GH
    [#1557])</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1554206400">- Update to Botan 2.10
  * Bump SONAME
  * Warning: XMSS currently implements draft-06 which is not compatible with
    the final RFC 8391 specification. A PR is open to fix this, however it will
    break all current uses of XMSS. If you are currently using XMSS please
    comment at https://github.com/randombit/botan/pull/1858. Otherwise the PR
    will be merged and support for draft-06 will be removed starting in 2.11.
  * Added a new certificate store implementation that can access the MacOS
    keychain certificate store. (GH #1830)
  * Redesigned Memory_Pool class, which services allocations out of a set of
    pages locked into memory (using mlock/VirtualLock). It is now faster and
    with improved exploit mitigations. (GH #1800)
  * Add BMI2 implementations of SHA-512 and SHA-3 which improve performance by
    25-35% on common CPUs. (GH #1815)
  * Unroll SHA-3 computation improving performance by 10-12% (GH #1838)
  * Add a Thread_Pool class. It is now possible to run the tests in multiple
    threads with --test-threads=N flag to select the number of threads to use.
    Use --test-threads=0 to run with as many CPU cores as are available on the
    current system. The default remains single threaded. (GH #1819)
  * XMSS signatures now uses a global thread pool instead of spawning new
    threads for each usage. This improves signature generation performance by
    between 10% and 60% depending on architecture and core count. (GH #1864)
  * Some functions related to encoding and decoding BigInts have been
    deprecated. (GH #1817)
  * Binary encoding and decoding of BigInts has been optimized by performing
    word-size operations when possible. (GH #1817)
  * Rename the exception Integrity_Failure to Invalid_Authentication_Tag to
    make its meaning and usage more clear. The old name remains as a typedef.
    (GH #1816)
  * Support for using Boost filesystem and MSVC?s std::filesystem have been
    removed, since already POSIX and Win32 versions had to be maintained for
    portability. (GH #1814)
  * Newly generated McEliece and XMSS keys now default to being encrypted using
    SIV mode, support for which was added in 2.8.0. Previously GCM was used by
    default for these algorithms.
  * Use arc4random on Android systems (GH #1851)
  * Fix the encoding of PGP-S2K iteration counts (GH #1853 #1854)
  * Add a facility for sandboxing the command line util. Currently FreeBSD
    (Capsicum) and OpenBSD (pledge) sandboxes are supported. (GH #1808)
  * Use if constexpr when available.
  * Disable building shared libs on iOS as it was broken and it is not clear
    shared libraries are ever useful on iOS (GH #1865)
  * Renamed the darwin build target to macos. This should not cause any
    user-visible change. (GH #1866)
  * Add support for using sccache to cache the Windows CI build (GH #1807)
  * Add --extra-cxxflags option which allows adding compilation flags without
    overriding the default set. (GH #1826)
  * Add --format= option to the hash cli which allows formatting the output as
    base64 or base58, default output remains hex.
  * Add base58_enc and base58_dec cli utils for base58 encoding/decoding. (GH #1848)
  * Enable getentropy by default on macOS (GH #1862)
  * Avoid using -momit-leaf-frame-pointer flags, since -fomit-frame-pointer is
    already the default with recent versions of GCC.
  * Fix XLC sanitizer flags.
  * Rename Blake2b class to BLAKE2b to match the official name. There is a typedef for compat.
  * Fix a bug where loading a raw Ed25519_PublicKey of incorrect length would
    lead to a crash. (GH #1850)
  * Fix a bug that caused compilation problems using CryptoNG PRNG. (GH #1832)
  * Extended SHAKE-128 cipher to support any key between 1 and 160 bytes,
    instead of only multiples of 8 bytes.
  * Minor HMAC optimizations.
  * Build fixes for GNU/Hurd.
  * Fix a bug that prevented generating or verifying Ed25519 signatures in the
    CLI (GH #1828 #1829)
  * Fix a compilation error when building the amalgamation outside of the
    original source directory when AVX2 was enabled. (GH #1812)
  * Fix a crash when creating the amalgamation if a header file was edited on
    Windows but then the amalgamation was built on Linux (GH #1763)</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1586347200">- Update to Botan 2.14:
  * Add support for using POWER8+ VPSUMD instruction to accelerate GCM (GH #2247)
  * Optimize the vector permute AES implementation, especially improving
    performance on ARMv7, Aarch64, and POWER. (GH #2243)
  * Use a new algorithm for modular inversions which is both faster
    and more resistant to side channel attacks. (GH #2287 #2296 #2301)
  * Address an issue in CBC padding which would leak the length of the plaintext
    which was being padded. Unpadding during decryption was not affected.
  * Optimize NIST prime field reductions, improving ECDSA by 3-9% (GH #2295)
  * Increase the size of the ECC blinding mask and scale it based on the
    size of the group order. (GH #880 #893 #2308)
  * Add server side support for the TLS asio wrapper. (GH #2229)
  * Add support for using Windows certificate store on MinGW (GH #2280)
  * Add a CLI utility cpu_clock which estimates the speed of the processor cycle counter.
  * Add Roughtime client (GH #2143 #1842)
  * Add support for XMSS X.509 certificates (GH #2172)
  * Add support for X.509 CRLs in FFI layer and Python wrapper (GH #2213)
  * Add AVX2 implementation of SHACAL2 (GH #2196)
  * Support more functionality for X.509 in the Python API (GH #2165)
  * Add generic CPU target useful when building for some new or unusual platform.
  * Disable MD5 in BSI or NIST modes (GH #2188)
  * Many currently public headers are being deprecated. If any such header is included by
    an application, a warning is issued at compile time.
    Headers issuing this warning will be made internal in a future major release.
  * RSA signature performance improvements (GH #2068 #2070)
  * Performance improvements for GCM (GH #2024 #2099 #2119), OCB (#2122), XTS (#2123) and
    ChaCha20Poly1305 (GH #2117), especially for small messages.
  * Add support for constant time AES using NEON and AltiVec (GH #2093 #2095 #2100)
  * Improve performance of POWER8 AES instructions (GH #2096)
  * Add support for the POWER9 hardware random number generator (GH #2026)
  * Add support for 64-bit version of RDRAND, doubling performance on x86-64 (GH #934 #2022)
  * In DTLS server, support a client crashing and then reconnecting from the same
    source port, as described in RFC 6347 sec 4.2.8 (GH #2029)
  * Optimize DTLS MTU splitting to split precisely to the set MTU (GH #2042)
  * Add support for the TLS v1.3 downgrade indicator. (GH #2027)
  * Add Argon2 PBKDF and password hash (GH #459 #1981 #1987)
  * Add Bcrypt-PBKDF (GH #1990)
  * Add server side support for issuing DTLS HelloVerifyRequest messages (GH #1999)
  * Add support for the TLS v1.3 supported_versions extension. (GH #1976)
  * Add Ed25519ph compatible with RFC 8032 (GH #1699 #2000)
  * Add support for OCSP stapling on server side. (GH #1703 #1967)
  * Add a boost::asio TLS stream compatible with boost::asio::ssl. (GH #1839 #1927 #1992)
  * Add a certificate store for Linux/Unix systems. (GH #1885 #1936)
  * Various Fixes</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597579200">- update to 2.15:
  Fix a bug where the name constraint extension did not constrain the alternative
  DN field which can be included in a subject alternative name. This would allow
  a corrupted sub-CA which was otherwise constrained by a name constraint to
  issue a certificate with a prohibited DN.
  Fix a bug in the TLS server during client authentication where where if a
  (disabled by default) static RSA ciphersuite was selected, then no certificate
  request would be sent. This would have an equivalent effect to a client which
  simply replied with an empty Certificate message. (GH #2367)
  Replace the T-Tables implementation of AES with a 32-bit bitsliced version. As
  a result AES is now constant time on all processors. (GH #2346 #2348 #2353
  [#2329] #2355)
  In TLS, enforce that the key usage given in the server certificate allows the
  operation being performed in the ciphersuite. (GH #2367)
  In X.509 certificates, verify that the algorithm parameters are the expected
  NULL or empty. (GH #2367)
  Change the HMAC key schedule to attempt to reduce the information leaked from
  the key schedule with regards to the length of the key, as this is at times (as
  for example in PBKDF2) sensitive information. (GH #2362)
  Add Processor_RNG which wraps RDRAND or the POWER DARN RNG instructions. The
  previous RDRAND_RNG interface is deprecated. (GH #2352)
  The documentation claimed that mlocked pages were created with a guard page
  both before and after. However only a trailing guard page was used. Add a
  leading guard page. (GH #2334)
  Add support for generating and verifying DER-encoded ECDSA signatures in the C
  and Python interfaces. (GH #2357 #2356)
  Workaround a bug in GCC?s UbSan which triggered on a code sequence in XMSS (GH
  [#2322])
  When building documentation using Sphinx avoid parallel builds with version 3.0
  due to a bug in that version (GH #2326 #2324)
  Fix a memory leak in the CommonCrypto block cipher calls (GH #2371)
  Fix a flaky test that would occasionally fail when running the tests with a
  large number of threads. (GH #2325 #2197)
  Additional algorithms are now deprecated: XTEA, GOST, and Tiger. They will be
  removed in a future major release.</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1603800000">- Update to 2.16.0:
  * Now userspace PRNG objects (such as AutoSeeded_RNG and HMAC_DRBG)
    use an internal lock, which allows safe concurrent use. This
    however is purely a precaution in case of accidental sharing of
    such RNG objects; for performance reasons it is always preferable
    to use a RNG per thread if a userspace RNG is needed.
  * DL_Group and EC_Group objects now track if they were created
    from a known trusted group (such as P-256 or an IPsec DH
    parameter). If so, then verification tests can be relaxed, as
    compared to parameters which may have been maliciously
    constructed in order to pass primality checks.
  * RandomNumberGenerator::add_entropy_T assumed its input was a POD
    type but did not verify this.
  * Support OCSP responders that live on a non-standard port.
  * Add support for Solaris sandbox.
  * Support suffixes on release numbers for alpha/beta releases.
  * Fix a bug in EAX which allowed requesting a 0 length tag, which
    had the effect of using a full length tag. Instead omit the
    length field, or request the full tag length explicitly.
  * Fix a memory leak in GCM where if passed an unsuitable block
    cipher (eg not 128 bit) it would throw an exception and leak
    the cipher object.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1604750400">- Botan 2.17.1:
  * Fix bugs in ECDSA signature generation and verifications under
    specific circumstances
  * developer visible changes, including deprecation with warnings
  * optimization in the non-hardware assisted AES key generation
  * Add more detection logic for AVX-512 features
  * Fix a bug parsing deeply nested cipher names
  * Prevent requesting DER encoding of signatures when the
    algorithm did not support it</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1605268800">- Botan 2.17.2:
  * Fix build problem on ppc64
  * Resolve an issue in the modular square root algorithm</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1608724800">- Botan 2.17.3:
  * Harden against side-channels from decoding secret values by
    changing the base64, base58, base32, and hex encoding and
    decoding opearations to run in constant time</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1618574400">- Botan 2.18.0
  * Add support for implementing custom RNG objects through the FFI
    interface
  * Improve safegcd bounds, improving runtime performance
  * Reject non-TLS messages as quickly as possible without waiting
    for a full record.
  * Fixes for TLS::Stream::async_shutdown
- Removed unneeded GNU MP build requirement, support was dropped
  with version 1.11.10
- Enabled check target, verify integrity of build library</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1620648000">- Botan 2.18.1:
  * Fix a build regression in 2.18.0 which caused linker flags
    which contain -l within them (such as -fuse-linker-plugin)
    to be misinterpreted
  * Fix a bug which caused decoding a certificate which contained
    more than one name in a single RDN
  * Fix a bug which caused OID lookup failures when run in a locale
    which uses thousands separators (pt_BR was reported as having
    this issue)
  * DNS names in name constraints were compared with case
    sensitivity, which could cause valid certificates to be
    rejected
  * X.509 name constraint extensions were rejected if non-critical.
    RFC 5280 requires conforming CAs issue such extensions as
    critical, but not all certificates are compliant, and all other
    known implementations do not require this
  * X.509 name constraints were incorrectly applied to the
    certificate which included the constraint
- build with lzma compression support
- build with SQLite support
- build with TPM support
- fix SLE 12 build</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1637755200">- update to 2.18.2:
  * Avoid using short exponents when encrypting in ElGamal, as some PGP
    implementations generate keys with parameters that are weak when
    short exponents are used CVE-2021-40529 boo#1190244
  * Fix a low risk OAEP decryption side channel
  * Work around a miscompilation of SHA-3 caused by a bug in Clang 12
    and XCode 13
  * Remove support in OpenSSL provider for algorithms which are
    disabled by default in OpenSSL 3.0
  * Add CI based on GitHub actions to replace Travis CI
  * Fix the online OCSP test, as the certificate involved had expired.
  * Fix some test failures induced by the expiration of the trust root
    "DST Root CA X3"</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1668686400">- Fixed [CVE-2022-43705,bsc#1205509]
  * Added Botan-CVE-2022-43705.patch
  * Added Botan-CVE-2022-43705-certs.tgz
  * validate that an embedded certificate was issued by the end-entity
    issuing certificate authority when checking OCSP responses.</changelog>
</package>
<package pkgid="636322f71dfdacbbedf296ec8d343b1041c4883a144953c949d83ae4c95abbea" name="libbotan-2-18-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="2.18.2" rel="bp154.2.3.1"/>
  <changelog author="adam.majer@suse.de" date="1518436800">- Don't drop -fstack-clash-protection for openSUSE 42.3 - we just
  need the Update repository present.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1518609600">- change group of libbotan-%{version_suffix} to 'System/Libraries' as
  requested on review</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1518782400">- drop explicit package requirements
- split binary package and documentation from dynamic library package
  and make documentation package noarch
- merge back Botan2 package to Botan with changelog history
- drop Botan patches
    aarch64-support.patch - doesn't seem to be required anymore
    Botan-fix_install_paths.patch - doesn't seem to be required
    no-cpuid-header.patch - SLE11 not target anymore
    Botan-fix_pkgconfig.patch - this seem to be wrong
    Botan-no-buildtime.patch - not needed anymore
    dont-set-mach-value.diff - doesn't apply, unclear and undocumented why it is there
    Botan-inttypes.patch - not required
    Botan-ull_constants.patch.bz2 - no reason anymore</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1522756800">- Update to Botan 2.5
  * Fix error in certificate wildcard matching (CVE-2018-9127), where a
    wildcard cert for b*.example.com would be accepted as a match for any host
    with name *b*.example.com (GH #1519)
  * Add support for RSA-PSS signatures in TLS (GH #1285)
  * Ed25519 certificates are now supported (GH #1501)
  * Many optimizations in ECC operations. ECDSA signatures are 8-10 times
    faster. ECDSA verification is about twice as fast. ECDH key agreement is
    3-4 times faster. (GH #1457 #1478)
  * Implement product scanning Montgomery reduction, which improves
    Diffie-Hellman and RSA performance by 10 to 20% on most platforms. (GH
    [#1472])
  * DSA signing and verification performance has improved by 30-50%.
  * Add a new Credentials_Manager callback that specifies which CAs the server
    has indicated it trusts (GH #1395 fixing #1261)
  * Add new TLS::Callbacks methods that allow creating or removing extensions,
    as well as examining extensions sent by the peer (GH #1394 #1186)
  * Add new TLS::Callbacks methods that allow an application to negotiate use
    of custom elliptic curves. (GH #1448)
  * Add ability to create custom elliptic curves (GH #1441 #1444)
  * Add support for POWER8 AES instructions (GH #1459 #1393 #1206)
  * Fix DSA/ECDSA handling of hashes longer than the group order (GH #1502
    [#986])
  * The default encoding of ECC public keys has changed from compressed to
    uncompressed point representation. This improves compatability with some
    common software packages including Golang?s standard library. (GH #1480
    [#1483])
  * It is now possible to create DNs with custom components. (GH #1490 #1492)
  * It is now possible to specify the serial number of created certificates,
    instead of using the default 128-bit random integer. (GH #1489 #1491)
  * Change DL_Group and EC_Group to store their data as shared_ptr for fast
    copying. Also both classes precompute additional useful values (eg for
    modular reductions). (GH #1435 #1454)
  * Make it possible for PKCS10 requests to include custom extensions. This
    also makes it possible to use muliple SubjectAlternativeNames of a single
    type in a request, which was previously not possible. (GH #1429 #1428)
  * Add new optimized interface for FE1 format preserving encryption. By
    caching a number of values computed in the course of the FPE calculation,
    it provides a 6-7x speedup versus the old API. (GH #1469)
  * Add DSA and ElGamal keygen functions to FFI (#1426)
  * Add Pipe::prepend_filter to replace Pipe::prepend (GH #1402)
  * Fix a memory leak in the OpenSSL block cipher integration, introduced in
  * 2.2.0
  * Use an improved algorithm for generating safe primes which is several tens
    of times faster. Also, fix a bug in the prime sieving algorithm which
    caused standard prime generation (like for RSA keys) to be slower than
    necessary. (GH #1413 #1411)
  * Correct the return value of PK_Encryptor::maximum_input_size which reported
    a much too small value (GH #1410)
  * Remove use of CPU specific optimization flags, instead the user should set
    these via CXXFLAGS if desired. (GH #1392)
  * Resolve an issue that would cause a crash in the tests if they were run on
    a machine without SSE2/NEON/VMX instructions. (GH #1495)
  * The Python module now tries to load DLLs from a list of names and uses the
    first one which successfully loads and indicates it supports the desired
    API level. (GH #1497)
  * Various minor optimizations for SHA-3 (GH #1433 #1434)
  * The output of botan --help has been improved (GH #1387)
  * Add --der-format flag to command line utils, making it possible verify
    DSA/ECDSA signatures generated by OpenSSL command line (GH #1409)
  * Add support for --library-suffix option to configure.py (GH #1405 #1404)
  * Use feature flags to enable/disable system specific code (GH #1378)
  * Add --msvc-runtime option to allow using static runtime (GH #1499 #210)
  * Add ?enable-sanitizers= option to allow specifying which sanitizers to
    enable. The existing --with-sanitizers option just enables some default set
    which is known to work with the minimum required compiler versions.
  * Use either rst2man or rst2man.py for generating man page as distributions
    differ on where this program is installed (GH #1516)
  * The threefish module has been renamed threefish_512 since that is the
    algorithm it provides. (GH #1477)
  * The Perl XS based wrapper has been removed, as it was unmaintained and
    broken. (GH #1412)
  * The sqlite3 encryption patch under contrib has been removed. It is still
    maintained by the original author at
    https://github.com/OlivierJG/botansqlite3</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1523361600">- Update to Botan 2.6
  * CVE-2018-9860 Fix a bug decrypting TLS CBC ciphertexts which could for a
    malformed ciphertext cause the decryptor to read and HMAC an additional 64K
    bytes of data which is not part of the record. This could cause a crash if
    the read went into unmapped memory. No information leak or out of bounds
    write occurs.
  * Add support for OAEP labels (GH #1508)
  * RSA signing is about 15% faster (GH #1523) and RSA verification is about 50% faster.
  * Add exponent blinding to RSA (GH #1523)
  * Add Cipher_Mode::create and AEAD_Mode::create (GH #1527)
  * Fix bug in TLS server introduced in 2.5 which caused connection to fail if
    the client offered any signature algorithm not known to the server (for
    example RSA/SHA-224).
  * Fix a bug in inline asm that would with GCC 7.3 cause incorrect
    computations and an infinite loop during the tests. (GH #1524 #1529)</changelog>
  <changelog author="kasimir_@outlook.de" date="1523534400">- fixed to build on armv6 and armv7</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1531224000">- Update to Botan 2.7
  * CVE-2018-12435 Avoid a side channel in ECDSA signature generation (GH
    [#1604])
  * Avoid a side channel in RSA key generation due to use of a non-constant
    time gcd algorithm. (GH #1542 #1556)
  * Optimize prime generation, especially improving RSA key generation. (GH
    [#1542])
  * Make Karatsuba multiplication, Montgomery field operations, Barrett
    reduction and Montgomery exponentiation const time (GH #1540 #1606 #1609
    [#1610])
  * Optimizations for elliptic curve operations especially improving reductions
    and inversions modulo NIST primes (GH #1534 #1538 #1545 #1546 #1547 #1550)
  * Add 24 word wide Comba multiplication, improving 3072-bit RSA and DH by
    ~25%. (GH #1564)
  * Unroll Montgomery reduction for specific sizes (GH #1603)
  * Improved performance of signature verification in ECGDSA, ECKCDSA, SM2 and
    GOST by 10-15%.
  * XMSS optimizations (GH #1583 #1585)
  * Fix an error that meant XMSS would only sign half as many signatures as is
    allowed (GH #1582)
  * Add support for base32 encoding/decoding (GH #1541)
  * Add BMI2 optimized version of SHA-256, 40% faster on Skylake (GH #1584)
  * Allow the year to be up to 2200 in ASN.1 time objects. Previously this was
    limited to 2100. (GH #1536)
  * Add support for Scrypt password hashing (GH #1570)
  * Add support for using Scrypt for private key encryption (GH #1574)
  * Optimizations for DES/3DES, approx 50% faster when used in certain modes
    such as CBC decrypt or CTR.
  * XMSS signature verification did not check that the signature was of the
    expected length which could lead to a crash. (GH #1537)
  * The bcrypt variants 2b and 2y are now supported.
  * Support for 192-bit Suite B TLS profile is now implemented, as the 128-bit
    Suite B is since 2015 not allowed anymore.
  * Previously botan allowed GCM to be used with an empty nonce, which is not
    allowed by the specification. Now such nonces are rejected.
  * Avoid problems on Windows when compiling in Unicode mode (GH #1615 #1616)
  * Previously for ASN.1 encoded signatures (eg ECDSA) Botan would accept any
    valid BER encoding. Now only the single valid DER encoding is accepted.
  * Correct an error that could in rare cases cause an internal error exception
    when doing computations with the P-224 curve.
  * Optimizations to reduce allocations/copies during DER encoding and BER
    decoding (GH #1571 #1572 #1600)
  * Botan generates X.509 subject key IDs by hashing the public key with
    whatever hash function is being used to sign the certificate. However
    especially for SHA-512 this caused SKIDs that were far longer than
    necessary. Now all SKIDs are truncated to 192 bits.
  * In the test suite use mkstemp to create temporary files instead of creating
    them in the current working directory. (GH #1533 #1530)
  * It is now possible to safely override CXX when invoking make in addition to
    when configure.py is run. (GH #1579)
  * OIDs for Camellia and SM4 in CBC and GCM mode are now defined, making it
    possible to use this algorithms for private key encryption.
  * Avoid creating symlinks to the shared object on OpenBSD (#1535)
  * The factor command runs much faster on larger inputs now.
  * Support for Windows Phone/UWP was deprecated starting in 2.5. This
    deprecation has been reversed as it seems UWP is still actively used. (GH
    [#1586] #1587)
  * Support for Visual C++ 2013 is deprecated, and will be removed in Jan 2019.
  * Added support for GCC?s ?sysroot option to configure.py for
    cross-compiling.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1533038400">- Fix version in baselibs.conf</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1547121600">- Update to Botan 2.9
  * Bump SONAME
  * CVE-2018-20187 Address a side channel during ECC key generation, which used an
    unblinded Montgomery ladder. As a result, a timing attack can reveal
    information about the high bits of the secret key.
  * Fix bugs in TLS which caused negotiation failures when the client used an
    unknown signature algorithm or version (GH #1711 #1709 #1708)
  * Fix bug affecting GCM, EAX and ChaCha20Poly1305 where if the associated data
    was set after starting a message, the new AD was not reflected in the produced
    tag. Now with these modes setting an AD after beginning a message throws an
    exception.
  * Use a smaller sieve which improves performance of prime generation.
  * Fixed a bug that caused ChaCha to produce incorrect output after encrypting 256
    GB. (GH #1728)
  * Add NEON and AltiVec implementations of ChaCha (GH #1719 #1728 #1729)
  * Optimize AVX2 ChaCha (GH #1730)
  * Many more operations in BigInt, ECC and RSA code paths are either fully const
    time or avoid problematic branches that could potentially be exploited in a
    side channel attack. (GH #1738 #1750 #1754 #1755 #1757 #1758 #1759 #1762 #1765
    [#1770] #1773 #1774 #1779 #1780 #1794 #1795 #1796 #1797)
  * Several optimizations for BigInt and ECC, improving ECDSA performance by as
    much as 30%. (GH #1734 #1737 #1777 #1750 #1737 #1788)
  * Support recovering an ECDSA public key from a message/signature pair (GH #664
    [#1784])
  * Add base58 encoding/decoding functions (GH #1783)
  * In the command line interface, add support for reading passphrases from the
    terminal with echo disabled (GH #1756)
  * Add CT::Mask type to simplify const-time programming (GH #1751)
  * Add new configure options --disable-bmi2, --disable-rdrand, and
  - -disable-rdseed to prevent use of those instruction sets.
  * Add error_type and error_code functions to Exception type (GH #1744)
  * Now on POSIX systems posix_memalign is used instead of mmap for allocating the
    page-locked memory pool. This avoids issues with fork. (GH #602 #1798)
  * When available, use RDRAND to generate the additional data in
    Stateful_RNG::randomize_with_ts_input
  * Use vzeroall/vzeroupper intrinsics to avoid AVX2/SSE transition penalties.
  * Support for Visual C++ 2013 has been removed (GH #1557 #1697)
  * Resolve a memory leak when verifying ECDSA signatures with versions of OpenSSL
    before 1.1.0 (GH #1698)
  * Resolve a memory leak using ECDH via OpenSSL (GH #1767)
  * Fix an error in XTS which prohibited encrypting values which were exactly the
    same length as the underlying block size. Messages of this size are allowed by
    the standard and other XTS implementations. (GH #1706)
  * Resolve a bug in TSS which resulted in it using an incorrect length field in
    the shares. Now the correct length is encoded, but either correct or buggy
    lengths are accepted when decoding. (GH #1722)
  * Correct a bug when reducing a negative BigInt modulo a small power of 2. (GH
    [#1755])
  * Add CLI utils for threshold secret splitting. (GH #1722)
  * Fix a bug introduced in 2.8.0 that caused compilation failure if using a single
    amalgamation file with AVX2 enabled. (GH #1700)
  * Add an explicit OS target for Emscripten and improve support for it. (GH #1702)
  * Fix small issues when building for QNX
  * Switch the Travis CI build to using Ubuntu 16.04 (GH #1767)
  * Add options to configure.py to disable generation of pkg-config file, and (for
    systems where pkg-config support defaults to off, like Windows), to enable
    generating it. (GH #1268)
  * Modify configure.py to accept empty lists or trailing/extra commas. (GH #1705)
- Update to Botan 2.8
  * Add support for using Apple CommonCrypto library for hashing (GH #1667),
    cipher modes (GH #1674) and block ciphers (GH #1673).
  * Support for negotiating TLS versions 1.0 and 1.1 is disabled in the default
    TLS policy. In addition, support for negotiating TLS ciphersuites using CBC
    or CCM mode is disabled by default. Applications which need to interop with
    old peers must enable these in their TLS policy object. (GH #1651)
  * During primality testing, use a Lucas test in addition to Miller-Rabin. It
    is possible to construct a composite integer which passes n Miller-Rabin
    tests with probability (1/4)^n. So for a incautious verifier using a small
    number of tests (under 16 or so) it is possible if unlikely they would
    accept such a composite as prime. Adding a Lucas test precludes such an
    attack. (GH #1636)
  * Add XChaCha and XChaCha20Poly1305 (GH #1640)
  * Add AVX2 implementations of ChaCha (GH #1662) and Serpent (GH #1660)
  * Add a new password hashing interface in pwdhash.h (GH #1670)
  * C binding improvements. Added functions to get name and supported
    keylengths of cipher, hash and MAC objects, support for FE1 format
    preserving encryption (GH #1625 #1646), functions to load and save RSA keys
    in PKCS #1 format (GH #1621), HOTP and TOTP algorithms, scrypt, certificate
    verification (GH #1647), functions to get the output length of public key
    operations (GH #1642), and functions for loading and serializing X25519
    keys (GH #1681)
  * Support for building with BOTAN_MP_WORD_BITS set to 8 or 16 has been removed.
  * Previously SM2 had two distinct key types, one for signatures and another
    for encryption. They have now been merged into a single key type since in
    practice it seems the same key is at times used for both operations. (GH
    [#1637])
  * The Cipher_Mode class now derives from SymmetricAlgorithm (GH #1639)
  * Add support for using the ARMv8 instructions for SM4 encryption (GH #1622)
  * The entropy source using SecRandomCopyBytes has been removed as it was
    redundant with other entropy sources (GH #1668)
  * The Python module has much better error checking and reporting, and offers
    new functionality such as scrypt, MPI and FPE. (GH #1643 #1646)
  * Fixed a bug that caused CCM to fail with an exception when used with L=8 (GH #1631 #1632)
  * The default bcrypt work factor has been increased from 10 to 12.
  * The default algorithm used in passhash9 has changed from SHA-256 to
    SHA-512, and the default work factor increased from 10 to 15.
  * In ECC private keys, include the public key data for compatibility with GnuTLS (GH #1634 #1635)
  * Add support for using Linux getrandom syscall to access the system PRNG.
    This is disabled by default, use --with-os-feature=getrandom to enable.
  * It is now possible to encrypt private keys using SIV mode.
  * The FFI function botan_privkey_load now ignores its rng argument.
  * Resolve a problem when building under Visual C++ 15.8 (GH #1624)
  * Fix a bug in XSalsa20 (192-bit Salsa nonces) where if set_iv was called
    twice without calling set_key, the resulting encryption was incorrect. (GH
    [#1640])
  * Handle an error seen when verifying invalid ECDSA signatures using LibreSSL
    on non x86-64 platforms (GH #1627 #1628)
  * Fix bugs in PKCS7 and X9.23 CBC padding schemes, which would ignore the
    first byte in the event the padding took up the entire block. (GH #1690)
  * Correct bugs which would cause CFB, OCB, and GCM modes to crash when they
    were used in an unkeyed state. (GH #1639)
  * Optimizations for SM4 and Poly1305
  * Avoid a cache side channel in the AES key schedule
  * Add pk_encrypt and pk_decrypt CLI operations
  * Now asn1print CLI defaults to printing context-specific fields.
  * Use codec_base for Base64, which matches how Base32 is implemented (GH #1597)
  * The cast module has been split up into cast128 and cast256 (GH #1685)
  * When building under Visual C++ 2013, the user must acknowledge the upcoming
    removal of support using the configure.py flag --ack-vc2013-deprecated (GH
    [#1557])</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1554206400">- Update to Botan 2.10
  * Bump SONAME
  * Warning: XMSS currently implements draft-06 which is not compatible with
    the final RFC 8391 specification. A PR is open to fix this, however it will
    break all current uses of XMSS. If you are currently using XMSS please
    comment at https://github.com/randombit/botan/pull/1858. Otherwise the PR
    will be merged and support for draft-06 will be removed starting in 2.11.
  * Added a new certificate store implementation that can access the MacOS
    keychain certificate store. (GH #1830)
  * Redesigned Memory_Pool class, which services allocations out of a set of
    pages locked into memory (using mlock/VirtualLock). It is now faster and
    with improved exploit mitigations. (GH #1800)
  * Add BMI2 implementations of SHA-512 and SHA-3 which improve performance by
    25-35% on common CPUs. (GH #1815)
  * Unroll SHA-3 computation improving performance by 10-12% (GH #1838)
  * Add a Thread_Pool class. It is now possible to run the tests in multiple
    threads with --test-threads=N flag to select the number of threads to use.
    Use --test-threads=0 to run with as many CPU cores as are available on the
    current system. The default remains single threaded. (GH #1819)
  * XMSS signatures now uses a global thread pool instead of spawning new
    threads for each usage. This improves signature generation performance by
    between 10% and 60% depending on architecture and core count. (GH #1864)
  * Some functions related to encoding and decoding BigInts have been
    deprecated. (GH #1817)
  * Binary encoding and decoding of BigInts has been optimized by performing
    word-size operations when possible. (GH #1817)
  * Rename the exception Integrity_Failure to Invalid_Authentication_Tag to
    make its meaning and usage more clear. The old name remains as a typedef.
    (GH #1816)
  * Support for using Boost filesystem and MSVC?s std::filesystem have been
    removed, since already POSIX and Win32 versions had to be maintained for
    portability. (GH #1814)
  * Newly generated McEliece and XMSS keys now default to being encrypted using
    SIV mode, support for which was added in 2.8.0. Previously GCM was used by
    default for these algorithms.
  * Use arc4random on Android systems (GH #1851)
  * Fix the encoding of PGP-S2K iteration counts (GH #1853 #1854)
  * Add a facility for sandboxing the command line util. Currently FreeBSD
    (Capsicum) and OpenBSD (pledge) sandboxes are supported. (GH #1808)
  * Use if constexpr when available.
  * Disable building shared libs on iOS as it was broken and it is not clear
    shared libraries are ever useful on iOS (GH #1865)
  * Renamed the darwin build target to macos. This should not cause any
    user-visible change. (GH #1866)
  * Add support for using sccache to cache the Windows CI build (GH #1807)
  * Add --extra-cxxflags option which allows adding compilation flags without
    overriding the default set. (GH #1826)
  * Add --format= option to the hash cli which allows formatting the output as
    base64 or base58, default output remains hex.
  * Add base58_enc and base58_dec cli utils for base58 encoding/decoding. (GH #1848)
  * Enable getentropy by default on macOS (GH #1862)
  * Avoid using -momit-leaf-frame-pointer flags, since -fomit-frame-pointer is
    already the default with recent versions of GCC.
  * Fix XLC sanitizer flags.
  * Rename Blake2b class to BLAKE2b to match the official name. There is a typedef for compat.
  * Fix a bug where loading a raw Ed25519_PublicKey of incorrect length would
    lead to a crash. (GH #1850)
  * Fix a bug that caused compilation problems using CryptoNG PRNG. (GH #1832)
  * Extended SHAKE-128 cipher to support any key between 1 and 160 bytes,
    instead of only multiples of 8 bytes.
  * Minor HMAC optimizations.
  * Build fixes for GNU/Hurd.
  * Fix a bug that prevented generating or verifying Ed25519 signatures in the
    CLI (GH #1828 #1829)
  * Fix a compilation error when building the amalgamation outside of the
    original source directory when AVX2 was enabled. (GH #1812)
  * Fix a crash when creating the amalgamation if a header file was edited on
    Windows but then the amalgamation was built on Linux (GH #1763)</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1586347200">- Update to Botan 2.14:
  * Add support for using POWER8+ VPSUMD instruction to accelerate GCM (GH #2247)
  * Optimize the vector permute AES implementation, especially improving
    performance on ARMv7, Aarch64, and POWER. (GH #2243)
  * Use a new algorithm for modular inversions which is both faster
    and more resistant to side channel attacks. (GH #2287 #2296 #2301)
  * Address an issue in CBC padding which would leak the length of the plaintext
    which was being padded. Unpadding during decryption was not affected.
  * Optimize NIST prime field reductions, improving ECDSA by 3-9% (GH #2295)
  * Increase the size of the ECC blinding mask and scale it based on the
    size of the group order. (GH #880 #893 #2308)
  * Add server side support for the TLS asio wrapper. (GH #2229)
  * Add support for using Windows certificate store on MinGW (GH #2280)
  * Add a CLI utility cpu_clock which estimates the speed of the processor cycle counter.
  * Add Roughtime client (GH #2143 #1842)
  * Add support for XMSS X.509 certificates (GH #2172)
  * Add support for X.509 CRLs in FFI layer and Python wrapper (GH #2213)
  * Add AVX2 implementation of SHACAL2 (GH #2196)
  * Support more functionality for X.509 in the Python API (GH #2165)
  * Add generic CPU target useful when building for some new or unusual platform.
  * Disable MD5 in BSI or NIST modes (GH #2188)
  * Many currently public headers are being deprecated. If any such header is included by
    an application, a warning is issued at compile time.
    Headers issuing this warning will be made internal in a future major release.
  * RSA signature performance improvements (GH #2068 #2070)
  * Performance improvements for GCM (GH #2024 #2099 #2119), OCB (#2122), XTS (#2123) and
    ChaCha20Poly1305 (GH #2117), especially for small messages.
  * Add support for constant time AES using NEON and AltiVec (GH #2093 #2095 #2100)
  * Improve performance of POWER8 AES instructions (GH #2096)
  * Add support for the POWER9 hardware random number generator (GH #2026)
  * Add support for 64-bit version of RDRAND, doubling performance on x86-64 (GH #934 #2022)
  * In DTLS server, support a client crashing and then reconnecting from the same
    source port, as described in RFC 6347 sec 4.2.8 (GH #2029)
  * Optimize DTLS MTU splitting to split precisely to the set MTU (GH #2042)
  * Add support for the TLS v1.3 downgrade indicator. (GH #2027)
  * Add Argon2 PBKDF and password hash (GH #459 #1981 #1987)
  * Add Bcrypt-PBKDF (GH #1990)
  * Add server side support for issuing DTLS HelloVerifyRequest messages (GH #1999)
  * Add support for the TLS v1.3 supported_versions extension. (GH #1976)
  * Add Ed25519ph compatible with RFC 8032 (GH #1699 #2000)
  * Add support for OCSP stapling on server side. (GH #1703 #1967)
  * Add a boost::asio TLS stream compatible with boost::asio::ssl. (GH #1839 #1927 #1992)
  * Add a certificate store for Linux/Unix systems. (GH #1885 #1936)
  * Various Fixes</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597579200">- update to 2.15:
  Fix a bug where the name constraint extension did not constrain the alternative
  DN field which can be included in a subject alternative name. This would allow
  a corrupted sub-CA which was otherwise constrained by a name constraint to
  issue a certificate with a prohibited DN.
  Fix a bug in the TLS server during client authentication where where if a
  (disabled by default) static RSA ciphersuite was selected, then no certificate
  request would be sent. This would have an equivalent effect to a client which
  simply replied with an empty Certificate message. (GH #2367)
  Replace the T-Tables implementation of AES with a 32-bit bitsliced version. As
  a result AES is now constant time on all processors. (GH #2346 #2348 #2353
  [#2329] #2355)
  In TLS, enforce that the key usage given in the server certificate allows the
  operation being performed in the ciphersuite. (GH #2367)
  In X.509 certificates, verify that the algorithm parameters are the expected
  NULL or empty. (GH #2367)
  Change the HMAC key schedule to attempt to reduce the information leaked from
  the key schedule with regards to the length of the key, as this is at times (as
  for example in PBKDF2) sensitive information. (GH #2362)
  Add Processor_RNG which wraps RDRAND or the POWER DARN RNG instructions. The
  previous RDRAND_RNG interface is deprecated. (GH #2352)
  The documentation claimed that mlocked pages were created with a guard page
  both before and after. However only a trailing guard page was used. Add a
  leading guard page. (GH #2334)
  Add support for generating and verifying DER-encoded ECDSA signatures in the C
  and Python interfaces. (GH #2357 #2356)
  Workaround a bug in GCC?s UbSan which triggered on a code sequence in XMSS (GH
  [#2322])
  When building documentation using Sphinx avoid parallel builds with version 3.0
  due to a bug in that version (GH #2326 #2324)
  Fix a memory leak in the CommonCrypto block cipher calls (GH #2371)
  Fix a flaky test that would occasionally fail when running the tests with a
  large number of threads. (GH #2325 #2197)
  Additional algorithms are now deprecated: XTEA, GOST, and Tiger. They will be
  removed in a future major release.</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1603800000">- Update to 2.16.0:
  * Now userspace PRNG objects (such as AutoSeeded_RNG and HMAC_DRBG)
    use an internal lock, which allows safe concurrent use. This
    however is purely a precaution in case of accidental sharing of
    such RNG objects; for performance reasons it is always preferable
    to use a RNG per thread if a userspace RNG is needed.
  * DL_Group and EC_Group objects now track if they were created
    from a known trusted group (such as P-256 or an IPsec DH
    parameter). If so, then verification tests can be relaxed, as
    compared to parameters which may have been maliciously
    constructed in order to pass primality checks.
  * RandomNumberGenerator::add_entropy_T assumed its input was a POD
    type but did not verify this.
  * Support OCSP responders that live on a non-standard port.
  * Add support for Solaris sandbox.
  * Support suffixes on release numbers for alpha/beta releases.
  * Fix a bug in EAX which allowed requesting a 0 length tag, which
    had the effect of using a full length tag. Instead omit the
    length field, or request the full tag length explicitly.
  * Fix a memory leak in GCM where if passed an unsuitable block
    cipher (eg not 128 bit) it would throw an exception and leak
    the cipher object.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1604750400">- Botan 2.17.1:
  * Fix bugs in ECDSA signature generation and verifications under
    specific circumstances
  * developer visible changes, including deprecation with warnings
  * optimization in the non-hardware assisted AES key generation
  * Add more detection logic for AVX-512 features
  * Fix a bug parsing deeply nested cipher names
  * Prevent requesting DER encoding of signatures when the
    algorithm did not support it</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1605268800">- Botan 2.17.2:
  * Fix build problem on ppc64
  * Resolve an issue in the modular square root algorithm</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1608724800">- Botan 2.17.3:
  * Harden against side-channels from decoding secret values by
    changing the base64, base58, base32, and hex encoding and
    decoding opearations to run in constant time</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1618574400">- Botan 2.18.0
  * Add support for implementing custom RNG objects through the FFI
    interface
  * Improve safegcd bounds, improving runtime performance
  * Reject non-TLS messages as quickly as possible without waiting
    for a full record.
  * Fixes for TLS::Stream::async_shutdown
- Removed unneeded GNU MP build requirement, support was dropped
  with version 1.11.10
- Enabled check target, verify integrity of build library</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1620648000">- Botan 2.18.1:
  * Fix a build regression in 2.18.0 which caused linker flags
    which contain -l within them (such as -fuse-linker-plugin)
    to be misinterpreted
  * Fix a bug which caused decoding a certificate which contained
    more than one name in a single RDN
  * Fix a bug which caused OID lookup failures when run in a locale
    which uses thousands separators (pt_BR was reported as having
    this issue)
  * DNS names in name constraints were compared with case
    sensitivity, which could cause valid certificates to be
    rejected
  * X.509 name constraint extensions were rejected if non-critical.
    RFC 5280 requires conforming CAs issue such extensions as
    critical, but not all certificates are compliant, and all other
    known implementations do not require this
  * X.509 name constraints were incorrectly applied to the
    certificate which included the constraint
- build with lzma compression support
- build with SQLite support
- build with TPM support
- fix SLE 12 build</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1637755200">- update to 2.18.2:
  * Avoid using short exponents when encrypting in ElGamal, as some PGP
    implementations generate keys with parameters that are weak when
    short exponents are used CVE-2021-40529 boo#1190244
  * Fix a low risk OAEP decryption side channel
  * Work around a miscompilation of SHA-3 caused by a bug in Clang 12
    and XCode 13
  * Remove support in OpenSSL provider for algorithms which are
    disabled by default in OpenSSL 3.0
  * Add CI based on GitHub actions to replace Travis CI
  * Fix the online OCSP test, as the certificate involved had expired.
  * Fix some test failures induced by the expiration of the trust root
    "DST Root CA X3"</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1668686400">- Fixed [CVE-2022-43705,bsc#1205509]
  * Added Botan-CVE-2022-43705.patch
  * Added Botan-CVE-2022-43705-certs.tgz
  * validate that an embedded certificate was issued by the end-entity
    issuing certificate authority when checking OCSP responses.</changelog>
</package>
<package pkgid="cfd19bc96116976c9b799fbbd9f7d05f98f75142eaee2f7b6d64715260b289ef" name="libbotan-devel" arch="aarch64">
  <version epoch="0" ver="2.18.2" rel="bp154.2.3.1"/>
  <changelog author="adam.majer@suse.de" date="1518436800">- Don't drop -fstack-clash-protection for openSUSE 42.3 - we just
  need the Update repository present.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1518609600">- change group of libbotan-%{version_suffix} to 'System/Libraries' as
  requested on review</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1518782400">- drop explicit package requirements
- split binary package and documentation from dynamic library package
  and make documentation package noarch
- merge back Botan2 package to Botan with changelog history
- drop Botan patches
    aarch64-support.patch - doesn't seem to be required anymore
    Botan-fix_install_paths.patch - doesn't seem to be required
    no-cpuid-header.patch - SLE11 not target anymore
    Botan-fix_pkgconfig.patch - this seem to be wrong
    Botan-no-buildtime.patch - not needed anymore
    dont-set-mach-value.diff - doesn't apply, unclear and undocumented why it is there
    Botan-inttypes.patch - not required
    Botan-ull_constants.patch.bz2 - no reason anymore</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1522756800">- Update to Botan 2.5
  * Fix error in certificate wildcard matching (CVE-2018-9127), where a
    wildcard cert for b*.example.com would be accepted as a match for any host
    with name *b*.example.com (GH #1519)
  * Add support for RSA-PSS signatures in TLS (GH #1285)
  * Ed25519 certificates are now supported (GH #1501)
  * Many optimizations in ECC operations. ECDSA signatures are 8-10 times
    faster. ECDSA verification is about twice as fast. ECDH key agreement is
    3-4 times faster. (GH #1457 #1478)
  * Implement product scanning Montgomery reduction, which improves
    Diffie-Hellman and RSA performance by 10 to 20% on most platforms. (GH
    [#1472])
  * DSA signing and verification performance has improved by 30-50%.
  * Add a new Credentials_Manager callback that specifies which CAs the server
    has indicated it trusts (GH #1395 fixing #1261)
  * Add new TLS::Callbacks methods that allow creating or removing extensions,
    as well as examining extensions sent by the peer (GH #1394 #1186)
  * Add new TLS::Callbacks methods that allow an application to negotiate use
    of custom elliptic curves. (GH #1448)
  * Add ability to create custom elliptic curves (GH #1441 #1444)
  * Add support for POWER8 AES instructions (GH #1459 #1393 #1206)
  * Fix DSA/ECDSA handling of hashes longer than the group order (GH #1502
    [#986])
  * The default encoding of ECC public keys has changed from compressed to
    uncompressed point representation. This improves compatability with some
    common software packages including Golang?s standard library. (GH #1480
    [#1483])
  * It is now possible to create DNs with custom components. (GH #1490 #1492)
  * It is now possible to specify the serial number of created certificates,
    instead of using the default 128-bit random integer. (GH #1489 #1491)
  * Change DL_Group and EC_Group to store their data as shared_ptr for fast
    copying. Also both classes precompute additional useful values (eg for
    modular reductions). (GH #1435 #1454)
  * Make it possible for PKCS10 requests to include custom extensions. This
    also makes it possible to use muliple SubjectAlternativeNames of a single
    type in a request, which was previously not possible. (GH #1429 #1428)
  * Add new optimized interface for FE1 format preserving encryption. By
    caching a number of values computed in the course of the FPE calculation,
    it provides a 6-7x speedup versus the old API. (GH #1469)
  * Add DSA and ElGamal keygen functions to FFI (#1426)
  * Add Pipe::prepend_filter to replace Pipe::prepend (GH #1402)
  * Fix a memory leak in the OpenSSL block cipher integration, introduced in
  * 2.2.0
  * Use an improved algorithm for generating safe primes which is several tens
    of times faster. Also, fix a bug in the prime sieving algorithm which
    caused standard prime generation (like for RSA keys) to be slower than
    necessary. (GH #1413 #1411)
  * Correct the return value of PK_Encryptor::maximum_input_size which reported
    a much too small value (GH #1410)
  * Remove use of CPU specific optimization flags, instead the user should set
    these via CXXFLAGS if desired. (GH #1392)
  * Resolve an issue that would cause a crash in the tests if they were run on
    a machine without SSE2/NEON/VMX instructions. (GH #1495)
  * The Python module now tries to load DLLs from a list of names and uses the
    first one which successfully loads and indicates it supports the desired
    API level. (GH #1497)
  * Various minor optimizations for SHA-3 (GH #1433 #1434)
  * The output of botan --help has been improved (GH #1387)
  * Add --der-format flag to command line utils, making it possible verify
    DSA/ECDSA signatures generated by OpenSSL command line (GH #1409)
  * Add support for --library-suffix option to configure.py (GH #1405 #1404)
  * Use feature flags to enable/disable system specific code (GH #1378)
  * Add --msvc-runtime option to allow using static runtime (GH #1499 #210)
  * Add ?enable-sanitizers= option to allow specifying which sanitizers to
    enable. The existing --with-sanitizers option just enables some default set
    which is known to work with the minimum required compiler versions.
  * Use either rst2man or rst2man.py for generating man page as distributions
    differ on where this program is installed (GH #1516)
  * The threefish module has been renamed threefish_512 since that is the
    algorithm it provides. (GH #1477)
  * The Perl XS based wrapper has been removed, as it was unmaintained and
    broken. (GH #1412)
  * The sqlite3 encryption patch under contrib has been removed. It is still
    maintained by the original author at
    https://github.com/OlivierJG/botansqlite3</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1523361600">- Update to Botan 2.6
  * CVE-2018-9860 Fix a bug decrypting TLS CBC ciphertexts which could for a
    malformed ciphertext cause the decryptor to read and HMAC an additional 64K
    bytes of data which is not part of the record. This could cause a crash if
    the read went into unmapped memory. No information leak or out of bounds
    write occurs.
  * Add support for OAEP labels (GH #1508)
  * RSA signing is about 15% faster (GH #1523) and RSA verification is about 50% faster.
  * Add exponent blinding to RSA (GH #1523)
  * Add Cipher_Mode::create and AEAD_Mode::create (GH #1527)
  * Fix bug in TLS server introduced in 2.5 which caused connection to fail if
    the client offered any signature algorithm not known to the server (for
    example RSA/SHA-224).
  * Fix a bug in inline asm that would with GCC 7.3 cause incorrect
    computations and an infinite loop during the tests. (GH #1524 #1529)</changelog>
  <changelog author="kasimir_@outlook.de" date="1523534400">- fixed to build on armv6 and armv7</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1531224000">- Update to Botan 2.7
  * CVE-2018-12435 Avoid a side channel in ECDSA signature generation (GH
    [#1604])
  * Avoid a side channel in RSA key generation due to use of a non-constant
    time gcd algorithm. (GH #1542 #1556)
  * Optimize prime generation, especially improving RSA key generation. (GH
    [#1542])
  * Make Karatsuba multiplication, Montgomery field operations, Barrett
    reduction and Montgomery exponentiation const time (GH #1540 #1606 #1609
    [#1610])
  * Optimizations for elliptic curve operations especially improving reductions
    and inversions modulo NIST primes (GH #1534 #1538 #1545 #1546 #1547 #1550)
  * Add 24 word wide Comba multiplication, improving 3072-bit RSA and DH by
    ~25%. (GH #1564)
  * Unroll Montgomery reduction for specific sizes (GH #1603)
  * Improved performance of signature verification in ECGDSA, ECKCDSA, SM2 and
    GOST by 10-15%.
  * XMSS optimizations (GH #1583 #1585)
  * Fix an error that meant XMSS would only sign half as many signatures as is
    allowed (GH #1582)
  * Add support for base32 encoding/decoding (GH #1541)
  * Add BMI2 optimized version of SHA-256, 40% faster on Skylake (GH #1584)
  * Allow the year to be up to 2200 in ASN.1 time objects. Previously this was
    limited to 2100. (GH #1536)
  * Add support for Scrypt password hashing (GH #1570)
  * Add support for using Scrypt for private key encryption (GH #1574)
  * Optimizations for DES/3DES, approx 50% faster when used in certain modes
    such as CBC decrypt or CTR.
  * XMSS signature verification did not check that the signature was of the
    expected length which could lead to a crash. (GH #1537)
  * The bcrypt variants 2b and 2y are now supported.
  * Support for 192-bit Suite B TLS profile is now implemented, as the 128-bit
    Suite B is since 2015 not allowed anymore.
  * Previously botan allowed GCM to be used with an empty nonce, which is not
    allowed by the specification. Now such nonces are rejected.
  * Avoid problems on Windows when compiling in Unicode mode (GH #1615 #1616)
  * Previously for ASN.1 encoded signatures (eg ECDSA) Botan would accept any
    valid BER encoding. Now only the single valid DER encoding is accepted.
  * Correct an error that could in rare cases cause an internal error exception
    when doing computations with the P-224 curve.
  * Optimizations to reduce allocations/copies during DER encoding and BER
    decoding (GH #1571 #1572 #1600)
  * Botan generates X.509 subject key IDs by hashing the public key with
    whatever hash function is being used to sign the certificate. However
    especially for SHA-512 this caused SKIDs that were far longer than
    necessary. Now all SKIDs are truncated to 192 bits.
  * In the test suite use mkstemp to create temporary files instead of creating
    them in the current working directory. (GH #1533 #1530)
  * It is now possible to safely override CXX when invoking make in addition to
    when configure.py is run. (GH #1579)
  * OIDs for Camellia and SM4 in CBC and GCM mode are now defined, making it
    possible to use this algorithms for private key encryption.
  * Avoid creating symlinks to the shared object on OpenBSD (#1535)
  * The factor command runs much faster on larger inputs now.
  * Support for Windows Phone/UWP was deprecated starting in 2.5. This
    deprecation has been reversed as it seems UWP is still actively used. (GH
    [#1586] #1587)
  * Support for Visual C++ 2013 is deprecated, and will be removed in Jan 2019.
  * Added support for GCC?s ?sysroot option to configure.py for
    cross-compiling.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1533038400">- Fix version in baselibs.conf</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1547121600">- Update to Botan 2.9
  * Bump SONAME
  * CVE-2018-20187 Address a side channel during ECC key generation, which used an
    unblinded Montgomery ladder. As a result, a timing attack can reveal
    information about the high bits of the secret key.
  * Fix bugs in TLS which caused negotiation failures when the client used an
    unknown signature algorithm or version (GH #1711 #1709 #1708)
  * Fix bug affecting GCM, EAX and ChaCha20Poly1305 where if the associated data
    was set after starting a message, the new AD was not reflected in the produced
    tag. Now with these modes setting an AD after beginning a message throws an
    exception.
  * Use a smaller sieve which improves performance of prime generation.
  * Fixed a bug that caused ChaCha to produce incorrect output after encrypting 256
    GB. (GH #1728)
  * Add NEON and AltiVec implementations of ChaCha (GH #1719 #1728 #1729)
  * Optimize AVX2 ChaCha (GH #1730)
  * Many more operations in BigInt, ECC and RSA code paths are either fully const
    time or avoid problematic branches that could potentially be exploited in a
    side channel attack. (GH #1738 #1750 #1754 #1755 #1757 #1758 #1759 #1762 #1765
    [#1770] #1773 #1774 #1779 #1780 #1794 #1795 #1796 #1797)
  * Several optimizations for BigInt and ECC, improving ECDSA performance by as
    much as 30%. (GH #1734 #1737 #1777 #1750 #1737 #1788)
  * Support recovering an ECDSA public key from a message/signature pair (GH #664
    [#1784])
  * Add base58 encoding/decoding functions (GH #1783)
  * In the command line interface, add support for reading passphrases from the
    terminal with echo disabled (GH #1756)
  * Add CT::Mask type to simplify const-time programming (GH #1751)
  * Add new configure options --disable-bmi2, --disable-rdrand, and
  - -disable-rdseed to prevent use of those instruction sets.
  * Add error_type and error_code functions to Exception type (GH #1744)
  * Now on POSIX systems posix_memalign is used instead of mmap for allocating the
    page-locked memory pool. This avoids issues with fork. (GH #602 #1798)
  * When available, use RDRAND to generate the additional data in
    Stateful_RNG::randomize_with_ts_input
  * Use vzeroall/vzeroupper intrinsics to avoid AVX2/SSE transition penalties.
  * Support for Visual C++ 2013 has been removed (GH #1557 #1697)
  * Resolve a memory leak when verifying ECDSA signatures with versions of OpenSSL
    before 1.1.0 (GH #1698)
  * Resolve a memory leak using ECDH via OpenSSL (GH #1767)
  * Fix an error in XTS which prohibited encrypting values which were exactly the
    same length as the underlying block size. Messages of this size are allowed by
    the standard and other XTS implementations. (GH #1706)
  * Resolve a bug in TSS which resulted in it using an incorrect length field in
    the shares. Now the correct length is encoded, but either correct or buggy
    lengths are accepted when decoding. (GH #1722)
  * Correct a bug when reducing a negative BigInt modulo a small power of 2. (GH
    [#1755])
  * Add CLI utils for threshold secret splitting. (GH #1722)
  * Fix a bug introduced in 2.8.0 that caused compilation failure if using a single
    amalgamation file with AVX2 enabled. (GH #1700)
  * Add an explicit OS target for Emscripten and improve support for it. (GH #1702)
  * Fix small issues when building for QNX
  * Switch the Travis CI build to using Ubuntu 16.04 (GH #1767)
  * Add options to configure.py to disable generation of pkg-config file, and (for
    systems where pkg-config support defaults to off, like Windows), to enable
    generating it. (GH #1268)
  * Modify configure.py to accept empty lists or trailing/extra commas. (GH #1705)
- Update to Botan 2.8
  * Add support for using Apple CommonCrypto library for hashing (GH #1667),
    cipher modes (GH #1674) and block ciphers (GH #1673).
  * Support for negotiating TLS versions 1.0 and 1.1 is disabled in the default
    TLS policy. In addition, support for negotiating TLS ciphersuites using CBC
    or CCM mode is disabled by default. Applications which need to interop with
    old peers must enable these in their TLS policy object. (GH #1651)
  * During primality testing, use a Lucas test in addition to Miller-Rabin. It
    is possible to construct a composite integer which passes n Miller-Rabin
    tests with probability (1/4)^n. So for a incautious verifier using a small
    number of tests (under 16 or so) it is possible if unlikely they would
    accept such a composite as prime. Adding a Lucas test precludes such an
    attack. (GH #1636)
  * Add XChaCha and XChaCha20Poly1305 (GH #1640)
  * Add AVX2 implementations of ChaCha (GH #1662) and Serpent (GH #1660)
  * Add a new password hashing interface in pwdhash.h (GH #1670)
  * C binding improvements. Added functions to get name and supported
    keylengths of cipher, hash and MAC objects, support for FE1 format
    preserving encryption (GH #1625 #1646), functions to load and save RSA keys
    in PKCS #1 format (GH #1621), HOTP and TOTP algorithms, scrypt, certificate
    verification (GH #1647), functions to get the output length of public key
    operations (GH #1642), and functions for loading and serializing X25519
    keys (GH #1681)
  * Support for building with BOTAN_MP_WORD_BITS set to 8 or 16 has been removed.
  * Previously SM2 had two distinct key types, one for signatures and another
    for encryption. They have now been merged into a single key type since in
    practice it seems the same key is at times used for both operations. (GH
    [#1637])
  * The Cipher_Mode class now derives from SymmetricAlgorithm (GH #1639)
  * Add support for using the ARMv8 instructions for SM4 encryption (GH #1622)
  * The entropy source using SecRandomCopyBytes has been removed as it was
    redundant with other entropy sources (GH #1668)
  * The Python module has much better error checking and reporting, and offers
    new functionality such as scrypt, MPI and FPE. (GH #1643 #1646)
  * Fixed a bug that caused CCM to fail with an exception when used with L=8 (GH #1631 #1632)
  * The default bcrypt work factor has been increased from 10 to 12.
  * The default algorithm used in passhash9 has changed from SHA-256 to
    SHA-512, and the default work factor increased from 10 to 15.
  * In ECC private keys, include the public key data for compatibility with GnuTLS (GH #1634 #1635)
  * Add support for using Linux getrandom syscall to access the system PRNG.
    This is disabled by default, use --with-os-feature=getrandom to enable.
  * It is now possible to encrypt private keys using SIV mode.
  * The FFI function botan_privkey_load now ignores its rng argument.
  * Resolve a problem when building under Visual C++ 15.8 (GH #1624)
  * Fix a bug in XSalsa20 (192-bit Salsa nonces) where if set_iv was called
    twice without calling set_key, the resulting encryption was incorrect. (GH
    [#1640])
  * Handle an error seen when verifying invalid ECDSA signatures using LibreSSL
    on non x86-64 platforms (GH #1627 #1628)
  * Fix bugs in PKCS7 and X9.23 CBC padding schemes, which would ignore the
    first byte in the event the padding took up the entire block. (GH #1690)
  * Correct bugs which would cause CFB, OCB, and GCM modes to crash when they
    were used in an unkeyed state. (GH #1639)
  * Optimizations for SM4 and Poly1305
  * Avoid a cache side channel in the AES key schedule
  * Add pk_encrypt and pk_decrypt CLI operations
  * Now asn1print CLI defaults to printing context-specific fields.
  * Use codec_base for Base64, which matches how Base32 is implemented (GH #1597)
  * The cast module has been split up into cast128 and cast256 (GH #1685)
  * When building under Visual C++ 2013, the user must acknowledge the upcoming
    removal of support using the configure.py flag --ack-vc2013-deprecated (GH
    [#1557])</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1554206400">- Update to Botan 2.10
  * Bump SONAME
  * Warning: XMSS currently implements draft-06 which is not compatible with
    the final RFC 8391 specification. A PR is open to fix this, however it will
    break all current uses of XMSS. If you are currently using XMSS please
    comment at https://github.com/randombit/botan/pull/1858. Otherwise the PR
    will be merged and support for draft-06 will be removed starting in 2.11.
  * Added a new certificate store implementation that can access the MacOS
    keychain certificate store. (GH #1830)
  * Redesigned Memory_Pool class, which services allocations out of a set of
    pages locked into memory (using mlock/VirtualLock). It is now faster and
    with improved exploit mitigations. (GH #1800)
  * Add BMI2 implementations of SHA-512 and SHA-3 which improve performance by
    25-35% on common CPUs. (GH #1815)
  * Unroll SHA-3 computation improving performance by 10-12% (GH #1838)
  * Add a Thread_Pool class. It is now possible to run the tests in multiple
    threads with --test-threads=N flag to select the number of threads to use.
    Use --test-threads=0 to run with as many CPU cores as are available on the
    current system. The default remains single threaded. (GH #1819)
  * XMSS signatures now uses a global thread pool instead of spawning new
    threads for each usage. This improves signature generation performance by
    between 10% and 60% depending on architecture and core count. (GH #1864)
  * Some functions related to encoding and decoding BigInts have been
    deprecated. (GH #1817)
  * Binary encoding and decoding of BigInts has been optimized by performing
    word-size operations when possible. (GH #1817)
  * Rename the exception Integrity_Failure to Invalid_Authentication_Tag to
    make its meaning and usage more clear. The old name remains as a typedef.
    (GH #1816)
  * Support for using Boost filesystem and MSVC?s std::filesystem have been
    removed, since already POSIX and Win32 versions had to be maintained for
    portability. (GH #1814)
  * Newly generated McEliece and XMSS keys now default to being encrypted using
    SIV mode, support for which was added in 2.8.0. Previously GCM was used by
    default for these algorithms.
  * Use arc4random on Android systems (GH #1851)
  * Fix the encoding of PGP-S2K iteration counts (GH #1853 #1854)
  * Add a facility for sandboxing the command line util. Currently FreeBSD
    (Capsicum) and OpenBSD (pledge) sandboxes are supported. (GH #1808)
  * Use if constexpr when available.
  * Disable building shared libs on iOS as it was broken and it is not clear
    shared libraries are ever useful on iOS (GH #1865)
  * Renamed the darwin build target to macos. This should not cause any
    user-visible change. (GH #1866)
  * Add support for using sccache to cache the Windows CI build (GH #1807)
  * Add --extra-cxxflags option which allows adding compilation flags without
    overriding the default set. (GH #1826)
  * Add --format= option to the hash cli which allows formatting the output as
    base64 or base58, default output remains hex.
  * Add base58_enc and base58_dec cli utils for base58 encoding/decoding. (GH #1848)
  * Enable getentropy by default on macOS (GH #1862)
  * Avoid using -momit-leaf-frame-pointer flags, since -fomit-frame-pointer is
    already the default with recent versions of GCC.
  * Fix XLC sanitizer flags.
  * Rename Blake2b class to BLAKE2b to match the official name. There is a typedef for compat.
  * Fix a bug where loading a raw Ed25519_PublicKey of incorrect length would
    lead to a crash. (GH #1850)
  * Fix a bug that caused compilation problems using CryptoNG PRNG. (GH #1832)
  * Extended SHAKE-128 cipher to support any key between 1 and 160 bytes,
    instead of only multiples of 8 bytes.
  * Minor HMAC optimizations.
  * Build fixes for GNU/Hurd.
  * Fix a bug that prevented generating or verifying Ed25519 signatures in the
    CLI (GH #1828 #1829)
  * Fix a compilation error when building the amalgamation outside of the
    original source directory when AVX2 was enabled. (GH #1812)
  * Fix a crash when creating the amalgamation if a header file was edited on
    Windows but then the amalgamation was built on Linux (GH #1763)</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1586347200">- Update to Botan 2.14:
  * Add support for using POWER8+ VPSUMD instruction to accelerate GCM (GH #2247)
  * Optimize the vector permute AES implementation, especially improving
    performance on ARMv7, Aarch64, and POWER. (GH #2243)
  * Use a new algorithm for modular inversions which is both faster
    and more resistant to side channel attacks. (GH #2287 #2296 #2301)
  * Address an issue in CBC padding which would leak the length of the plaintext
    which was being padded. Unpadding during decryption was not affected.
  * Optimize NIST prime field reductions, improving ECDSA by 3-9% (GH #2295)
  * Increase the size of the ECC blinding mask and scale it based on the
    size of the group order. (GH #880 #893 #2308)
  * Add server side support for the TLS asio wrapper. (GH #2229)
  * Add support for using Windows certificate store on MinGW (GH #2280)
  * Add a CLI utility cpu_clock which estimates the speed of the processor cycle counter.
  * Add Roughtime client (GH #2143 #1842)
  * Add support for XMSS X.509 certificates (GH #2172)
  * Add support for X.509 CRLs in FFI layer and Python wrapper (GH #2213)
  * Add AVX2 implementation of SHACAL2 (GH #2196)
  * Support more functionality for X.509 in the Python API (GH #2165)
  * Add generic CPU target useful when building for some new or unusual platform.
  * Disable MD5 in BSI or NIST modes (GH #2188)
  * Many currently public headers are being deprecated. If any such header is included by
    an application, a warning is issued at compile time.
    Headers issuing this warning will be made internal in a future major release.
  * RSA signature performance improvements (GH #2068 #2070)
  * Performance improvements for GCM (GH #2024 #2099 #2119), OCB (#2122), XTS (#2123) and
    ChaCha20Poly1305 (GH #2117), especially for small messages.
  * Add support for constant time AES using NEON and AltiVec (GH #2093 #2095 #2100)
  * Improve performance of POWER8 AES instructions (GH #2096)
  * Add support for the POWER9 hardware random number generator (GH #2026)
  * Add support for 64-bit version of RDRAND, doubling performance on x86-64 (GH #934 #2022)
  * In DTLS server, support a client crashing and then reconnecting from the same
    source port, as described in RFC 6347 sec 4.2.8 (GH #2029)
  * Optimize DTLS MTU splitting to split precisely to the set MTU (GH #2042)
  * Add support for the TLS v1.3 downgrade indicator. (GH #2027)
  * Add Argon2 PBKDF and password hash (GH #459 #1981 #1987)
  * Add Bcrypt-PBKDF (GH #1990)
  * Add server side support for issuing DTLS HelloVerifyRequest messages (GH #1999)
  * Add support for the TLS v1.3 supported_versions extension. (GH #1976)
  * Add Ed25519ph compatible with RFC 8032 (GH #1699 #2000)
  * Add support for OCSP stapling on server side. (GH #1703 #1967)
  * Add a boost::asio TLS stream compatible with boost::asio::ssl. (GH #1839 #1927 #1992)
  * Add a certificate store for Linux/Unix systems. (GH #1885 #1936)
  * Various Fixes</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597579200">- update to 2.15:
  Fix a bug where the name constraint extension did not constrain the alternative
  DN field which can be included in a subject alternative name. This would allow
  a corrupted sub-CA which was otherwise constrained by a name constraint to
  issue a certificate with a prohibited DN.
  Fix a bug in the TLS server during client authentication where where if a
  (disabled by default) static RSA ciphersuite was selected, then no certificate
  request would be sent. This would have an equivalent effect to a client which
  simply replied with an empty Certificate message. (GH #2367)
  Replace the T-Tables implementation of AES with a 32-bit bitsliced version. As
  a result AES is now constant time on all processors. (GH #2346 #2348 #2353
  [#2329] #2355)
  In TLS, enforce that the key usage given in the server certificate allows the
  operation being performed in the ciphersuite. (GH #2367)
  In X.509 certificates, verify that the algorithm parameters are the expected
  NULL or empty. (GH #2367)
  Change the HMAC key schedule to attempt to reduce the information leaked from
  the key schedule with regards to the length of the key, as this is at times (as
  for example in PBKDF2) sensitive information. (GH #2362)
  Add Processor_RNG which wraps RDRAND or the POWER DARN RNG instructions. The
  previous RDRAND_RNG interface is deprecated. (GH #2352)
  The documentation claimed that mlocked pages were created with a guard page
  both before and after. However only a trailing guard page was used. Add a
  leading guard page. (GH #2334)
  Add support for generating and verifying DER-encoded ECDSA signatures in the C
  and Python interfaces. (GH #2357 #2356)
  Workaround a bug in GCC?s UbSan which triggered on a code sequence in XMSS (GH
  [#2322])
  When building documentation using Sphinx avoid parallel builds with version 3.0
  due to a bug in that version (GH #2326 #2324)
  Fix a memory leak in the CommonCrypto block cipher calls (GH #2371)
  Fix a flaky test that would occasionally fail when running the tests with a
  large number of threads. (GH #2325 #2197)
  Additional algorithms are now deprecated: XTEA, GOST, and Tiger. They will be
  removed in a future major release.</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1603800000">- Update to 2.16.0:
  * Now userspace PRNG objects (such as AutoSeeded_RNG and HMAC_DRBG)
    use an internal lock, which allows safe concurrent use. This
    however is purely a precaution in case of accidental sharing of
    such RNG objects; for performance reasons it is always preferable
    to use a RNG per thread if a userspace RNG is needed.
  * DL_Group and EC_Group objects now track if they were created
    from a known trusted group (such as P-256 or an IPsec DH
    parameter). If so, then verification tests can be relaxed, as
    compared to parameters which may have been maliciously
    constructed in order to pass primality checks.
  * RandomNumberGenerator::add_entropy_T assumed its input was a POD
    type but did not verify this.
  * Support OCSP responders that live on a non-standard port.
  * Add support for Solaris sandbox.
  * Support suffixes on release numbers for alpha/beta releases.
  * Fix a bug in EAX which allowed requesting a 0 length tag, which
    had the effect of using a full length tag. Instead omit the
    length field, or request the full tag length explicitly.
  * Fix a memory leak in GCM where if passed an unsuitable block
    cipher (eg not 128 bit) it would throw an exception and leak
    the cipher object.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1604750400">- Botan 2.17.1:
  * Fix bugs in ECDSA signature generation and verifications under
    specific circumstances
  * developer visible changes, including deprecation with warnings
  * optimization in the non-hardware assisted AES key generation
  * Add more detection logic for AVX-512 features
  * Fix a bug parsing deeply nested cipher names
  * Prevent requesting DER encoding of signatures when the
    algorithm did not support it</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1605268800">- Botan 2.17.2:
  * Fix build problem on ppc64
  * Resolve an issue in the modular square root algorithm</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1608724800">- Botan 2.17.3:
  * Harden against side-channels from decoding secret values by
    changing the base64, base58, base32, and hex encoding and
    decoding opearations to run in constant time</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1618574400">- Botan 2.18.0
  * Add support for implementing custom RNG objects through the FFI
    interface
  * Improve safegcd bounds, improving runtime performance
  * Reject non-TLS messages as quickly as possible without waiting
    for a full record.
  * Fixes for TLS::Stream::async_shutdown
- Removed unneeded GNU MP build requirement, support was dropped
  with version 1.11.10
- Enabled check target, verify integrity of build library</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1620648000">- Botan 2.18.1:
  * Fix a build regression in 2.18.0 which caused linker flags
    which contain -l within them (such as -fuse-linker-plugin)
    to be misinterpreted
  * Fix a bug which caused decoding a certificate which contained
    more than one name in a single RDN
  * Fix a bug which caused OID lookup failures when run in a locale
    which uses thousands separators (pt_BR was reported as having
    this issue)
  * DNS names in name constraints were compared with case
    sensitivity, which could cause valid certificates to be
    rejected
  * X.509 name constraint extensions were rejected if non-critical.
    RFC 5280 requires conforming CAs issue such extensions as
    critical, but not all certificates are compliant, and all other
    known implementations do not require this
  * X.509 name constraints were incorrectly applied to the
    certificate which included the constraint
- build with lzma compression support
- build with SQLite support
- build with TPM support
- fix SLE 12 build</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1637755200">- update to 2.18.2:
  * Avoid using short exponents when encrypting in ElGamal, as some PGP
    implementations generate keys with parameters that are weak when
    short exponents are used CVE-2021-40529 boo#1190244
  * Fix a low risk OAEP decryption side channel
  * Work around a miscompilation of SHA-3 caused by a bug in Clang 12
    and XCode 13
  * Remove support in OpenSSL provider for algorithms which are
    disabled by default in OpenSSL 3.0
  * Add CI based on GitHub actions to replace Travis CI
  * Fix the online OCSP test, as the certificate involved had expired.
  * Fix some test failures induced by the expiration of the trust root
    "DST Root CA X3"</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1668686400">- Fixed [CVE-2022-43705,bsc#1205509]
  * Added Botan-CVE-2022-43705.patch
  * Added Botan-CVE-2022-43705-certs.tgz
  * validate that an embedded certificate was issued by the end-entity
    issuing certificate authority when checking OCSP responses.</changelog>
</package>
<package pkgid="4fe0fea2382141e5dd778448773be418c2f303dd497235b9914018d6669b881e" name="libbotan-devel" arch="i586">
  <version epoch="0" ver="2.18.2" rel="bp154.2.3.1"/>
  <changelog author="adam.majer@suse.de" date="1518436800">- Don't drop -fstack-clash-protection for openSUSE 42.3 - we just
  need the Update repository present.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1518609600">- change group of libbotan-%{version_suffix} to 'System/Libraries' as
  requested on review</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1518782400">- drop explicit package requirements
- split binary package and documentation from dynamic library package
  and make documentation package noarch
- merge back Botan2 package to Botan with changelog history
- drop Botan patches
    aarch64-support.patch - doesn't seem to be required anymore
    Botan-fix_install_paths.patch - doesn't seem to be required
    no-cpuid-header.patch - SLE11 not target anymore
    Botan-fix_pkgconfig.patch - this seem to be wrong
    Botan-no-buildtime.patch - not needed anymore
    dont-set-mach-value.diff - doesn't apply, unclear and undocumented why it is there
    Botan-inttypes.patch - not required
    Botan-ull_constants.patch.bz2 - no reason anymore</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1522756800">- Update to Botan 2.5
  * Fix error in certificate wildcard matching (CVE-2018-9127), where a
    wildcard cert for b*.example.com would be accepted as a match for any host
    with name *b*.example.com (GH #1519)
  * Add support for RSA-PSS signatures in TLS (GH #1285)
  * Ed25519 certificates are now supported (GH #1501)
  * Many optimizations in ECC operations. ECDSA signatures are 8-10 times
    faster. ECDSA verification is about twice as fast. ECDH key agreement is
    3-4 times faster. (GH #1457 #1478)
  * Implement product scanning Montgomery reduction, which improves
    Diffie-Hellman and RSA performance by 10 to 20% on most platforms. (GH
    [#1472])
  * DSA signing and verification performance has improved by 30-50%.
  * Add a new Credentials_Manager callback that specifies which CAs the server
    has indicated it trusts (GH #1395 fixing #1261)
  * Add new TLS::Callbacks methods that allow creating or removing extensions,
    as well as examining extensions sent by the peer (GH #1394 #1186)
  * Add new TLS::Callbacks methods that allow an application to negotiate use
    of custom elliptic curves. (GH #1448)
  * Add ability to create custom elliptic curves (GH #1441 #1444)
  * Add support for POWER8 AES instructions (GH #1459 #1393 #1206)
  * Fix DSA/ECDSA handling of hashes longer than the group order (GH #1502
    [#986])
  * The default encoding of ECC public keys has changed from compressed to
    uncompressed point representation. This improves compatability with some
    common software packages including Golang?s standard library. (GH #1480
    [#1483])
  * It is now possible to create DNs with custom components. (GH #1490 #1492)
  * It is now possible to specify the serial number of created certificates,
    instead of using the default 128-bit random integer. (GH #1489 #1491)
  * Change DL_Group and EC_Group to store their data as shared_ptr for fast
    copying. Also both classes precompute additional useful values (eg for
    modular reductions). (GH #1435 #1454)
  * Make it possible for PKCS10 requests to include custom extensions. This
    also makes it possible to use muliple SubjectAlternativeNames of a single
    type in a request, which was previously not possible. (GH #1429 #1428)
  * Add new optimized interface for FE1 format preserving encryption. By
    caching a number of values computed in the course of the FPE calculation,
    it provides a 6-7x speedup versus the old API. (GH #1469)
  * Add DSA and ElGamal keygen functions to FFI (#1426)
  * Add Pipe::prepend_filter to replace Pipe::prepend (GH #1402)
  * Fix a memory leak in the OpenSSL block cipher integration, introduced in
  * 2.2.0
  * Use an improved algorithm for generating safe primes which is several tens
    of times faster. Also, fix a bug in the prime sieving algorithm which
    caused standard prime generation (like for RSA keys) to be slower than
    necessary. (GH #1413 #1411)
  * Correct the return value of PK_Encryptor::maximum_input_size which reported
    a much too small value (GH #1410)
  * Remove use of CPU specific optimization flags, instead the user should set
    these via CXXFLAGS if desired. (GH #1392)
  * Resolve an issue that would cause a crash in the tests if they were run on
    a machine without SSE2/NEON/VMX instructions. (GH #1495)
  * The Python module now tries to load DLLs from a list of names and uses the
    first one which successfully loads and indicates it supports the desired
    API level. (GH #1497)
  * Various minor optimizations for SHA-3 (GH #1433 #1434)
  * The output of botan --help has been improved (GH #1387)
  * Add --der-format flag to command line utils, making it possible verify
    DSA/ECDSA signatures generated by OpenSSL command line (GH #1409)
  * Add support for --library-suffix option to configure.py (GH #1405 #1404)
  * Use feature flags to enable/disable system specific code (GH #1378)
  * Add --msvc-runtime option to allow using static runtime (GH #1499 #210)
  * Add ?enable-sanitizers= option to allow specifying which sanitizers to
    enable. The existing --with-sanitizers option just enables some default set
    which is known to work with the minimum required compiler versions.
  * Use either rst2man or rst2man.py for generating man page as distributions
    differ on where this program is installed (GH #1516)
  * The threefish module has been renamed threefish_512 since that is the
    algorithm it provides. (GH #1477)
  * The Perl XS based wrapper has been removed, as it was unmaintained and
    broken. (GH #1412)
  * The sqlite3 encryption patch under contrib has been removed. It is still
    maintained by the original author at
    https://github.com/OlivierJG/botansqlite3</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1523361600">- Update to Botan 2.6
  * CVE-2018-9860 Fix a bug decrypting TLS CBC ciphertexts which could for a
    malformed ciphertext cause the decryptor to read and HMAC an additional 64K
    bytes of data which is not part of the record. This could cause a crash if
    the read went into unmapped memory. No information leak or out of bounds
    write occurs.
  * Add support for OAEP labels (GH #1508)
  * RSA signing is about 15% faster (GH #1523) and RSA verification is about 50% faster.
  * Add exponent blinding to RSA (GH #1523)
  * Add Cipher_Mode::create and AEAD_Mode::create (GH #1527)
  * Fix bug in TLS server introduced in 2.5 which caused connection to fail if
    the client offered any signature algorithm not known to the server (for
    example RSA/SHA-224).
  * Fix a bug in inline asm that would with GCC 7.3 cause incorrect
    computations and an infinite loop during the tests. (GH #1524 #1529)</changelog>
  <changelog author="kasimir_@outlook.de" date="1523534400">- fixed to build on armv6 and armv7</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1531224000">- Update to Botan 2.7
  * CVE-2018-12435 Avoid a side channel in ECDSA signature generation (GH
    [#1604])
  * Avoid a side channel in RSA key generation due to use of a non-constant
    time gcd algorithm. (GH #1542 #1556)
  * Optimize prime generation, especially improving RSA key generation. (GH
    [#1542])
  * Make Karatsuba multiplication, Montgomery field operations, Barrett
    reduction and Montgomery exponentiation const time (GH #1540 #1606 #1609
    [#1610])
  * Optimizations for elliptic curve operations especially improving reductions
    and inversions modulo NIST primes (GH #1534 #1538 #1545 #1546 #1547 #1550)
  * Add 24 word wide Comba multiplication, improving 3072-bit RSA and DH by
    ~25%. (GH #1564)
  * Unroll Montgomery reduction for specific sizes (GH #1603)
  * Improved performance of signature verification in ECGDSA, ECKCDSA, SM2 and
    GOST by 10-15%.
  * XMSS optimizations (GH #1583 #1585)
  * Fix an error that meant XMSS would only sign half as many signatures as is
    allowed (GH #1582)
  * Add support for base32 encoding/decoding (GH #1541)
  * Add BMI2 optimized version of SHA-256, 40% faster on Skylake (GH #1584)
  * Allow the year to be up to 2200 in ASN.1 time objects. Previously this was
    limited to 2100. (GH #1536)
  * Add support for Scrypt password hashing (GH #1570)
  * Add support for using Scrypt for private key encryption (GH #1574)
  * Optimizations for DES/3DES, approx 50% faster when used in certain modes
    such as CBC decrypt or CTR.
  * XMSS signature verification did not check that the signature was of the
    expected length which could lead to a crash. (GH #1537)
  * The bcrypt variants 2b and 2y are now supported.
  * Support for 192-bit Suite B TLS profile is now implemented, as the 128-bit
    Suite B is since 2015 not allowed anymore.
  * Previously botan allowed GCM to be used with an empty nonce, which is not
    allowed by the specification. Now such nonces are rejected.
  * Avoid problems on Windows when compiling in Unicode mode (GH #1615 #1616)
  * Previously for ASN.1 encoded signatures (eg ECDSA) Botan would accept any
    valid BER encoding. Now only the single valid DER encoding is accepted.
  * Correct an error that could in rare cases cause an internal error exception
    when doing computations with the P-224 curve.
  * Optimizations to reduce allocations/copies during DER encoding and BER
    decoding (GH #1571 #1572 #1600)
  * Botan generates X.509 subject key IDs by hashing the public key with
    whatever hash function is being used to sign the certificate. However
    especially for SHA-512 this caused SKIDs that were far longer than
    necessary. Now all SKIDs are truncated to 192 bits.
  * In the test suite use mkstemp to create temporary files instead of creating
    them in the current working directory. (GH #1533 #1530)
  * It is now possible to safely override CXX when invoking make in addition to
    when configure.py is run. (GH #1579)
  * OIDs for Camellia and SM4 in CBC and GCM mode are now defined, making it
    possible to use this algorithms for private key encryption.
  * Avoid creating symlinks to the shared object on OpenBSD (#1535)
  * The factor command runs much faster on larger inputs now.
  * Support for Windows Phone/UWP was deprecated starting in 2.5. This
    deprecation has been reversed as it seems UWP is still actively used. (GH
    [#1586] #1587)
  * Support for Visual C++ 2013 is deprecated, and will be removed in Jan 2019.
  * Added support for GCC?s ?sysroot option to configure.py for
    cross-compiling.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1533038400">- Fix version in baselibs.conf</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1547121600">- Update to Botan 2.9
  * Bump SONAME
  * CVE-2018-20187 Address a side channel during ECC key generation, which used an
    unblinded Montgomery ladder. As a result, a timing attack can reveal
    information about the high bits of the secret key.
  * Fix bugs in TLS which caused negotiation failures when the client used an
    unknown signature algorithm or version (GH #1711 #1709 #1708)
  * Fix bug affecting GCM, EAX and ChaCha20Poly1305 where if the associated data
    was set after starting a message, the new AD was not reflected in the produced
    tag. Now with these modes setting an AD after beginning a message throws an
    exception.
  * Use a smaller sieve which improves performance of prime generation.
  * Fixed a bug that caused ChaCha to produce incorrect output after encrypting 256
    GB. (GH #1728)
  * Add NEON and AltiVec implementations of ChaCha (GH #1719 #1728 #1729)
  * Optimize AVX2 ChaCha (GH #1730)
  * Many more operations in BigInt, ECC and RSA code paths are either fully const
    time or avoid problematic branches that could potentially be exploited in a
    side channel attack. (GH #1738 #1750 #1754 #1755 #1757 #1758 #1759 #1762 #1765
    [#1770] #1773 #1774 #1779 #1780 #1794 #1795 #1796 #1797)
  * Several optimizations for BigInt and ECC, improving ECDSA performance by as
    much as 30%. (GH #1734 #1737 #1777 #1750 #1737 #1788)
  * Support recovering an ECDSA public key from a message/signature pair (GH #664
    [#1784])
  * Add base58 encoding/decoding functions (GH #1783)
  * In the command line interface, add support for reading passphrases from the
    terminal with echo disabled (GH #1756)
  * Add CT::Mask type to simplify const-time programming (GH #1751)
  * Add new configure options --disable-bmi2, --disable-rdrand, and
  - -disable-rdseed to prevent use of those instruction sets.
  * Add error_type and error_code functions to Exception type (GH #1744)
  * Now on POSIX systems posix_memalign is used instead of mmap for allocating the
    page-locked memory pool. This avoids issues with fork. (GH #602 #1798)
  * When available, use RDRAND to generate the additional data in
    Stateful_RNG::randomize_with_ts_input
  * Use vzeroall/vzeroupper intrinsics to avoid AVX2/SSE transition penalties.
  * Support for Visual C++ 2013 has been removed (GH #1557 #1697)
  * Resolve a memory leak when verifying ECDSA signatures with versions of OpenSSL
    before 1.1.0 (GH #1698)
  * Resolve a memory leak using ECDH via OpenSSL (GH #1767)
  * Fix an error in XTS which prohibited encrypting values which were exactly the
    same length as the underlying block size. Messages of this size are allowed by
    the standard and other XTS implementations. (GH #1706)
  * Resolve a bug in TSS which resulted in it using an incorrect length field in
    the shares. Now the correct length is encoded, but either correct or buggy
    lengths are accepted when decoding. (GH #1722)
  * Correct a bug when reducing a negative BigInt modulo a small power of 2. (GH
    [#1755])
  * Add CLI utils for threshold secret splitting. (GH #1722)
  * Fix a bug introduced in 2.8.0 that caused compilation failure if using a single
    amalgamation file with AVX2 enabled. (GH #1700)
  * Add an explicit OS target for Emscripten and improve support for it. (GH #1702)
  * Fix small issues when building for QNX
  * Switch the Travis CI build to using Ubuntu 16.04 (GH #1767)
  * Add options to configure.py to disable generation of pkg-config file, and (for
    systems where pkg-config support defaults to off, like Windows), to enable
    generating it. (GH #1268)
  * Modify configure.py to accept empty lists or trailing/extra commas. (GH #1705)
- Update to Botan 2.8
  * Add support for using Apple CommonCrypto library for hashing (GH #1667),
    cipher modes (GH #1674) and block ciphers (GH #1673).
  * Support for negotiating TLS versions 1.0 and 1.1 is disabled in the default
    TLS policy. In addition, support for negotiating TLS ciphersuites using CBC
    or CCM mode is disabled by default. Applications which need to interop with
    old peers must enable these in their TLS policy object. (GH #1651)
  * During primality testing, use a Lucas test in addition to Miller-Rabin. It
    is possible to construct a composite integer which passes n Miller-Rabin
    tests with probability (1/4)^n. So for a incautious verifier using a small
    number of tests (under 16 or so) it is possible if unlikely they would
    accept such a composite as prime. Adding a Lucas test precludes such an
    attack. (GH #1636)
  * Add XChaCha and XChaCha20Poly1305 (GH #1640)
  * Add AVX2 implementations of ChaCha (GH #1662) and Serpent (GH #1660)
  * Add a new password hashing interface in pwdhash.h (GH #1670)
  * C binding improvements. Added functions to get name and supported
    keylengths of cipher, hash and MAC objects, support for FE1 format
    preserving encryption (GH #1625 #1646), functions to load and save RSA keys
    in PKCS #1 format (GH #1621), HOTP and TOTP algorithms, scrypt, certificate
    verification (GH #1647), functions to get the output length of public key
    operations (GH #1642), and functions for loading and serializing X25519
    keys (GH #1681)
  * Support for building with BOTAN_MP_WORD_BITS set to 8 or 16 has been removed.
  * Previously SM2 had two distinct key types, one for signatures and another
    for encryption. They have now been merged into a single key type since in
    practice it seems the same key is at times used for both operations. (GH
    [#1637])
  * The Cipher_Mode class now derives from SymmetricAlgorithm (GH #1639)
  * Add support for using the ARMv8 instructions for SM4 encryption (GH #1622)
  * The entropy source using SecRandomCopyBytes has been removed as it was
    redundant with other entropy sources (GH #1668)
  * The Python module has much better error checking and reporting, and offers
    new functionality such as scrypt, MPI and FPE. (GH #1643 #1646)
  * Fixed a bug that caused CCM to fail with an exception when used with L=8 (GH #1631 #1632)
  * The default bcrypt work factor has been increased from 10 to 12.
  * The default algorithm used in passhash9 has changed from SHA-256 to
    SHA-512, and the default work factor increased from 10 to 15.
  * In ECC private keys, include the public key data for compatibility with GnuTLS (GH #1634 #1635)
  * Add support for using Linux getrandom syscall to access the system PRNG.
    This is disabled by default, use --with-os-feature=getrandom to enable.
  * It is now possible to encrypt private keys using SIV mode.
  * The FFI function botan_privkey_load now ignores its rng argument.
  * Resolve a problem when building under Visual C++ 15.8 (GH #1624)
  * Fix a bug in XSalsa20 (192-bit Salsa nonces) where if set_iv was called
    twice without calling set_key, the resulting encryption was incorrect. (GH
    [#1640])
  * Handle an error seen when verifying invalid ECDSA signatures using LibreSSL
    on non x86-64 platforms (GH #1627 #1628)
  * Fix bugs in PKCS7 and X9.23 CBC padding schemes, which would ignore the
    first byte in the event the padding took up the entire block. (GH #1690)
  * Correct bugs which would cause CFB, OCB, and GCM modes to crash when they
    were used in an unkeyed state. (GH #1639)
  * Optimizations for SM4 and Poly1305
  * Avoid a cache side channel in the AES key schedule
  * Add pk_encrypt and pk_decrypt CLI operations
  * Now asn1print CLI defaults to printing context-specific fields.
  * Use codec_base for Base64, which matches how Base32 is implemented (GH #1597)
  * The cast module has been split up into cast128 and cast256 (GH #1685)
  * When building under Visual C++ 2013, the user must acknowledge the upcoming
    removal of support using the configure.py flag --ack-vc2013-deprecated (GH
    [#1557])</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1554206400">- Update to Botan 2.10
  * Bump SONAME
  * Warning: XMSS currently implements draft-06 which is not compatible with
    the final RFC 8391 specification. A PR is open to fix this, however it will
    break all current uses of XMSS. If you are currently using XMSS please
    comment at https://github.com/randombit/botan/pull/1858. Otherwise the PR
    will be merged and support for draft-06 will be removed starting in 2.11.
  * Added a new certificate store implementation that can access the MacOS
    keychain certificate store. (GH #1830)
  * Redesigned Memory_Pool class, which services allocations out of a set of
    pages locked into memory (using mlock/VirtualLock). It is now faster and
    with improved exploit mitigations. (GH #1800)
  * Add BMI2 implementations of SHA-512 and SHA-3 which improve performance by
    25-35% on common CPUs. (GH #1815)
  * Unroll SHA-3 computation improving performance by 10-12% (GH #1838)
  * Add a Thread_Pool class. It is now possible to run the tests in multiple
    threads with --test-threads=N flag to select the number of threads to use.
    Use --test-threads=0 to run with as many CPU cores as are available on the
    current system. The default remains single threaded. (GH #1819)
  * XMSS signatures now uses a global thread pool instead of spawning new
    threads for each usage. This improves signature generation performance by
    between 10% and 60% depending on architecture and core count. (GH #1864)
  * Some functions related to encoding and decoding BigInts have been
    deprecated. (GH #1817)
  * Binary encoding and decoding of BigInts has been optimized by performing
    word-size operations when possible. (GH #1817)
  * Rename the exception Integrity_Failure to Invalid_Authentication_Tag to
    make its meaning and usage more clear. The old name remains as a typedef.
    (GH #1816)
  * Support for using Boost filesystem and MSVC?s std::filesystem have been
    removed, since already POSIX and Win32 versions had to be maintained for
    portability. (GH #1814)
  * Newly generated McEliece and XMSS keys now default to being encrypted using
    SIV mode, support for which was added in 2.8.0. Previously GCM was used by
    default for these algorithms.
  * Use arc4random on Android systems (GH #1851)
  * Fix the encoding of PGP-S2K iteration counts (GH #1853 #1854)
  * Add a facility for sandboxing the command line util. Currently FreeBSD
    (Capsicum) and OpenBSD (pledge) sandboxes are supported. (GH #1808)
  * Use if constexpr when available.
  * Disable building shared libs on iOS as it was broken and it is not clear
    shared libraries are ever useful on iOS (GH #1865)
  * Renamed the darwin build target to macos. This should not cause any
    user-visible change. (GH #1866)
  * Add support for using sccache to cache the Windows CI build (GH #1807)
  * Add --extra-cxxflags option which allows adding compilation flags without
    overriding the default set. (GH #1826)
  * Add --format= option to the hash cli which allows formatting the output as
    base64 or base58, default output remains hex.
  * Add base58_enc and base58_dec cli utils for base58 encoding/decoding. (GH #1848)
  * Enable getentropy by default on macOS (GH #1862)
  * Avoid using -momit-leaf-frame-pointer flags, since -fomit-frame-pointer is
    already the default with recent versions of GCC.
  * Fix XLC sanitizer flags.
  * Rename Blake2b class to BLAKE2b to match the official name. There is a typedef for compat.
  * Fix a bug where loading a raw Ed25519_PublicKey of incorrect length would
    lead to a crash. (GH #1850)
  * Fix a bug that caused compilation problems using CryptoNG PRNG. (GH #1832)
  * Extended SHAKE-128 cipher to support any key between 1 and 160 bytes,
    instead of only multiples of 8 bytes.
  * Minor HMAC optimizations.
  * Build fixes for GNU/Hurd.
  * Fix a bug that prevented generating or verifying Ed25519 signatures in the
    CLI (GH #1828 #1829)
  * Fix a compilation error when building the amalgamation outside of the
    original source directory when AVX2 was enabled. (GH #1812)
  * Fix a crash when creating the amalgamation if a header file was edited on
    Windows but then the amalgamation was built on Linux (GH #1763)</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1586347200">- Update to Botan 2.14:
  * Add support for using POWER8+ VPSUMD instruction to accelerate GCM (GH #2247)
  * Optimize the vector permute AES implementation, especially improving
    performance on ARMv7, Aarch64, and POWER. (GH #2243)
  * Use a new algorithm for modular inversions which is both faster
    and more resistant to side channel attacks. (GH #2287 #2296 #2301)
  * Address an issue in CBC padding which would leak the length of the plaintext
    which was being padded. Unpadding during decryption was not affected.
  * Optimize NIST prime field reductions, improving ECDSA by 3-9% (GH #2295)
  * Increase the size of the ECC blinding mask and scale it based on the
    size of the group order. (GH #880 #893 #2308)
  * Add server side support for the TLS asio wrapper. (GH #2229)
  * Add support for using Windows certificate store on MinGW (GH #2280)
  * Add a CLI utility cpu_clock which estimates the speed of the processor cycle counter.
  * Add Roughtime client (GH #2143 #1842)
  * Add support for XMSS X.509 certificates (GH #2172)
  * Add support for X.509 CRLs in FFI layer and Python wrapper (GH #2213)
  * Add AVX2 implementation of SHACAL2 (GH #2196)
  * Support more functionality for X.509 in the Python API (GH #2165)
  * Add generic CPU target useful when building for some new or unusual platform.
  * Disable MD5 in BSI or NIST modes (GH #2188)
  * Many currently public headers are being deprecated. If any such header is included by
    an application, a warning is issued at compile time.
    Headers issuing this warning will be made internal in a future major release.
  * RSA signature performance improvements (GH #2068 #2070)
  * Performance improvements for GCM (GH #2024 #2099 #2119), OCB (#2122), XTS (#2123) and
    ChaCha20Poly1305 (GH #2117), especially for small messages.
  * Add support for constant time AES using NEON and AltiVec (GH #2093 #2095 #2100)
  * Improve performance of POWER8 AES instructions (GH #2096)
  * Add support for the POWER9 hardware random number generator (GH #2026)
  * Add support for 64-bit version of RDRAND, doubling performance on x86-64 (GH #934 #2022)
  * In DTLS server, support a client crashing and then reconnecting from the same
    source port, as described in RFC 6347 sec 4.2.8 (GH #2029)
  * Optimize DTLS MTU splitting to split precisely to the set MTU (GH #2042)
  * Add support for the TLS v1.3 downgrade indicator. (GH #2027)
  * Add Argon2 PBKDF and password hash (GH #459 #1981 #1987)
  * Add Bcrypt-PBKDF (GH #1990)
  * Add server side support for issuing DTLS HelloVerifyRequest messages (GH #1999)
  * Add support for the TLS v1.3 supported_versions extension. (GH #1976)
  * Add Ed25519ph compatible with RFC 8032 (GH #1699 #2000)
  * Add support for OCSP stapling on server side. (GH #1703 #1967)
  * Add a boost::asio TLS stream compatible with boost::asio::ssl. (GH #1839 #1927 #1992)
  * Add a certificate store for Linux/Unix systems. (GH #1885 #1936)
  * Various Fixes</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597579200">- update to 2.15:
  Fix a bug where the name constraint extension did not constrain the alternative
  DN field which can be included in a subject alternative name. This would allow
  a corrupted sub-CA which was otherwise constrained by a name constraint to
  issue a certificate with a prohibited DN.
  Fix a bug in the TLS server during client authentication where where if a
  (disabled by default) static RSA ciphersuite was selected, then no certificate
  request would be sent. This would have an equivalent effect to a client which
  simply replied with an empty Certificate message. (GH #2367)
  Replace the T-Tables implementation of AES with a 32-bit bitsliced version. As
  a result AES is now constant time on all processors. (GH #2346 #2348 #2353
  [#2329] #2355)
  In TLS, enforce that the key usage given in the server certificate allows the
  operation being performed in the ciphersuite. (GH #2367)
  In X.509 certificates, verify that the algorithm parameters are the expected
  NULL or empty. (GH #2367)
  Change the HMAC key schedule to attempt to reduce the information leaked from
  the key schedule with regards to the length of the key, as this is at times (as
  for example in PBKDF2) sensitive information. (GH #2362)
  Add Processor_RNG which wraps RDRAND or the POWER DARN RNG instructions. The
  previous RDRAND_RNG interface is deprecated. (GH #2352)
  The documentation claimed that mlocked pages were created with a guard page
  both before and after. However only a trailing guard page was used. Add a
  leading guard page. (GH #2334)
  Add support for generating and verifying DER-encoded ECDSA signatures in the C
  and Python interfaces. (GH #2357 #2356)
  Workaround a bug in GCC?s UbSan which triggered on a code sequence in XMSS (GH
  [#2322])
  When building documentation using Sphinx avoid parallel builds with version 3.0
  due to a bug in that version (GH #2326 #2324)
  Fix a memory leak in the CommonCrypto block cipher calls (GH #2371)
  Fix a flaky test that would occasionally fail when running the tests with a
  large number of threads. (GH #2325 #2197)
  Additional algorithms are now deprecated: XTEA, GOST, and Tiger. They will be
  removed in a future major release.</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1603800000">- Update to 2.16.0:
  * Now userspace PRNG objects (such as AutoSeeded_RNG and HMAC_DRBG)
    use an internal lock, which allows safe concurrent use. This
    however is purely a precaution in case of accidental sharing of
    such RNG objects; for performance reasons it is always preferable
    to use a RNG per thread if a userspace RNG is needed.
  * DL_Group and EC_Group objects now track if they were created
    from a known trusted group (such as P-256 or an IPsec DH
    parameter). If so, then verification tests can be relaxed, as
    compared to parameters which may have been maliciously
    constructed in order to pass primality checks.
  * RandomNumberGenerator::add_entropy_T assumed its input was a POD
    type but did not verify this.
  * Support OCSP responders that live on a non-standard port.
  * Add support for Solaris sandbox.
  * Support suffixes on release numbers for alpha/beta releases.
  * Fix a bug in EAX which allowed requesting a 0 length tag, which
    had the effect of using a full length tag. Instead omit the
    length field, or request the full tag length explicitly.
  * Fix a memory leak in GCM where if passed an unsuitable block
    cipher (eg not 128 bit) it would throw an exception and leak
    the cipher object.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1604750400">- Botan 2.17.1:
  * Fix bugs in ECDSA signature generation and verifications under
    specific circumstances
  * developer visible changes, including deprecation with warnings
  * optimization in the non-hardware assisted AES key generation
  * Add more detection logic for AVX-512 features
  * Fix a bug parsing deeply nested cipher names
  * Prevent requesting DER encoding of signatures when the
    algorithm did not support it</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1605268800">- Botan 2.17.2:
  * Fix build problem on ppc64
  * Resolve an issue in the modular square root algorithm</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1608724800">- Botan 2.17.3:
  * Harden against side-channels from decoding secret values by
    changing the base64, base58, base32, and hex encoding and
    decoding opearations to run in constant time</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1618574400">- Botan 2.18.0
  * Add support for implementing custom RNG objects through the FFI
    interface
  * Improve safegcd bounds, improving runtime performance
  * Reject non-TLS messages as quickly as possible without waiting
    for a full record.
  * Fixes for TLS::Stream::async_shutdown
- Removed unneeded GNU MP build requirement, support was dropped
  with version 1.11.10
- Enabled check target, verify integrity of build library</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1620648000">- Botan 2.18.1:
  * Fix a build regression in 2.18.0 which caused linker flags
    which contain -l within them (such as -fuse-linker-plugin)
    to be misinterpreted
  * Fix a bug which caused decoding a certificate which contained
    more than one name in a single RDN
  * Fix a bug which caused OID lookup failures when run in a locale
    which uses thousands separators (pt_BR was reported as having
    this issue)
  * DNS names in name constraints were compared with case
    sensitivity, which could cause valid certificates to be
    rejected
  * X.509 name constraint extensions were rejected if non-critical.
    RFC 5280 requires conforming CAs issue such extensions as
    critical, but not all certificates are compliant, and all other
    known implementations do not require this
  * X.509 name constraints were incorrectly applied to the
    certificate which included the constraint
- build with lzma compression support
- build with SQLite support
- build with TPM support
- fix SLE 12 build</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1637755200">- update to 2.18.2:
  * Avoid using short exponents when encrypting in ElGamal, as some PGP
    implementations generate keys with parameters that are weak when
    short exponents are used CVE-2021-40529 boo#1190244
  * Fix a low risk OAEP decryption side channel
  * Work around a miscompilation of SHA-3 caused by a bug in Clang 12
    and XCode 13
  * Remove support in OpenSSL provider for algorithms which are
    disabled by default in OpenSSL 3.0
  * Add CI based on GitHub actions to replace Travis CI
  * Fix the online OCSP test, as the certificate involved had expired.
  * Fix some test failures induced by the expiration of the trust root
    "DST Root CA X3"</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1668686400">- Fixed [CVE-2022-43705,bsc#1205509]
  * Added Botan-CVE-2022-43705.patch
  * Added Botan-CVE-2022-43705-certs.tgz
  * validate that an embedded certificate was issued by the end-entity
    issuing certificate authority when checking OCSP responses.</changelog>
</package>
<package pkgid="ca1c84ba359b073513077a6da2634b6657f6e43eb9ee31f15f863153ade306cf" name="libbotan-devel" arch="s390x">
  <version epoch="0" ver="2.18.2" rel="bp154.2.3.1"/>
  <changelog author="adam.majer@suse.de" date="1518436800">- Don't drop -fstack-clash-protection for openSUSE 42.3 - we just
  need the Update repository present.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1518609600">- change group of libbotan-%{version_suffix} to 'System/Libraries' as
  requested on review</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1518782400">- drop explicit package requirements
- split binary package and documentation from dynamic library package
  and make documentation package noarch
- merge back Botan2 package to Botan with changelog history
- drop Botan patches
    aarch64-support.patch - doesn't seem to be required anymore
    Botan-fix_install_paths.patch - doesn't seem to be required
    no-cpuid-header.patch - SLE11 not target anymore
    Botan-fix_pkgconfig.patch - this seem to be wrong
    Botan-no-buildtime.patch - not needed anymore
    dont-set-mach-value.diff - doesn't apply, unclear and undocumented why it is there
    Botan-inttypes.patch - not required
    Botan-ull_constants.patch.bz2 - no reason anymore</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1522756800">- Update to Botan 2.5
  * Fix error in certificate wildcard matching (CVE-2018-9127), where a
    wildcard cert for b*.example.com would be accepted as a match for any host
    with name *b*.example.com (GH #1519)
  * Add support for RSA-PSS signatures in TLS (GH #1285)
  * Ed25519 certificates are now supported (GH #1501)
  * Many optimizations in ECC operations. ECDSA signatures are 8-10 times
    faster. ECDSA verification is about twice as fast. ECDH key agreement is
    3-4 times faster. (GH #1457 #1478)
  * Implement product scanning Montgomery reduction, which improves
    Diffie-Hellman and RSA performance by 10 to 20% on most platforms. (GH
    [#1472])
  * DSA signing and verification performance has improved by 30-50%.
  * Add a new Credentials_Manager callback that specifies which CAs the server
    has indicated it trusts (GH #1395 fixing #1261)
  * Add new TLS::Callbacks methods that allow creating or removing extensions,
    as well as examining extensions sent by the peer (GH #1394 #1186)
  * Add new TLS::Callbacks methods that allow an application to negotiate use
    of custom elliptic curves. (GH #1448)
  * Add ability to create custom elliptic curves (GH #1441 #1444)
  * Add support for POWER8 AES instructions (GH #1459 #1393 #1206)
  * Fix DSA/ECDSA handling of hashes longer than the group order (GH #1502
    [#986])
  * The default encoding of ECC public keys has changed from compressed to
    uncompressed point representation. This improves compatability with some
    common software packages including Golang?s standard library. (GH #1480
    [#1483])
  * It is now possible to create DNs with custom components. (GH #1490 #1492)
  * It is now possible to specify the serial number of created certificates,
    instead of using the default 128-bit random integer. (GH #1489 #1491)
  * Change DL_Group and EC_Group to store their data as shared_ptr for fast
    copying. Also both classes precompute additional useful values (eg for
    modular reductions). (GH #1435 #1454)
  * Make it possible for PKCS10 requests to include custom extensions. This
    also makes it possible to use muliple SubjectAlternativeNames of a single
    type in a request, which was previously not possible. (GH #1429 #1428)
  * Add new optimized interface for FE1 format preserving encryption. By
    caching a number of values computed in the course of the FPE calculation,
    it provides a 6-7x speedup versus the old API. (GH #1469)
  * Add DSA and ElGamal keygen functions to FFI (#1426)
  * Add Pipe::prepend_filter to replace Pipe::prepend (GH #1402)
  * Fix a memory leak in the OpenSSL block cipher integration, introduced in
  * 2.2.0
  * Use an improved algorithm for generating safe primes which is several tens
    of times faster. Also, fix a bug in the prime sieving algorithm which
    caused standard prime generation (like for RSA keys) to be slower than
    necessary. (GH #1413 #1411)
  * Correct the return value of PK_Encryptor::maximum_input_size which reported
    a much too small value (GH #1410)
  * Remove use of CPU specific optimization flags, instead the user should set
    these via CXXFLAGS if desired. (GH #1392)
  * Resolve an issue that would cause a crash in the tests if they were run on
    a machine without SSE2/NEON/VMX instructions. (GH #1495)
  * The Python module now tries to load DLLs from a list of names and uses the
    first one which successfully loads and indicates it supports the desired
    API level. (GH #1497)
  * Various minor optimizations for SHA-3 (GH #1433 #1434)
  * The output of botan --help has been improved (GH #1387)
  * Add --der-format flag to command line utils, making it possible verify
    DSA/ECDSA signatures generated by OpenSSL command line (GH #1409)
  * Add support for --library-suffix option to configure.py (GH #1405 #1404)
  * Use feature flags to enable/disable system specific code (GH #1378)
  * Add --msvc-runtime option to allow using static runtime (GH #1499 #210)
  * Add ?enable-sanitizers= option to allow specifying which sanitizers to
    enable. The existing --with-sanitizers option just enables some default set
    which is known to work with the minimum required compiler versions.
  * Use either rst2man or rst2man.py for generating man page as distributions
    differ on where this program is installed (GH #1516)
  * The threefish module has been renamed threefish_512 since that is the
    algorithm it provides. (GH #1477)
  * The Perl XS based wrapper has been removed, as it was unmaintained and
    broken. (GH #1412)
  * The sqlite3 encryption patch under contrib has been removed. It is still
    maintained by the original author at
    https://github.com/OlivierJG/botansqlite3</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1523361600">- Update to Botan 2.6
  * CVE-2018-9860 Fix a bug decrypting TLS CBC ciphertexts which could for a
    malformed ciphertext cause the decryptor to read and HMAC an additional 64K
    bytes of data which is not part of the record. This could cause a crash if
    the read went into unmapped memory. No information leak or out of bounds
    write occurs.
  * Add support for OAEP labels (GH #1508)
  * RSA signing is about 15% faster (GH #1523) and RSA verification is about 50% faster.
  * Add exponent blinding to RSA (GH #1523)
  * Add Cipher_Mode::create and AEAD_Mode::create (GH #1527)
  * Fix bug in TLS server introduced in 2.5 which caused connection to fail if
    the client offered any signature algorithm not known to the server (for
    example RSA/SHA-224).
  * Fix a bug in inline asm that would with GCC 7.3 cause incorrect
    computations and an infinite loop during the tests. (GH #1524 #1529)</changelog>
  <changelog author="kasimir_@outlook.de" date="1523534400">- fixed to build on armv6 and armv7</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1531224000">- Update to Botan 2.7
  * CVE-2018-12435 Avoid a side channel in ECDSA signature generation (GH
    [#1604])
  * Avoid a side channel in RSA key generation due to use of a non-constant
    time gcd algorithm. (GH #1542 #1556)
  * Optimize prime generation, especially improving RSA key generation. (GH
    [#1542])
  * Make Karatsuba multiplication, Montgomery field operations, Barrett
    reduction and Montgomery exponentiation const time (GH #1540 #1606 #1609
    [#1610])
  * Optimizations for elliptic curve operations especially improving reductions
    and inversions modulo NIST primes (GH #1534 #1538 #1545 #1546 #1547 #1550)
  * Add 24 word wide Comba multiplication, improving 3072-bit RSA and DH by
    ~25%. (GH #1564)
  * Unroll Montgomery reduction for specific sizes (GH #1603)
  * Improved performance of signature verification in ECGDSA, ECKCDSA, SM2 and
    GOST by 10-15%.
  * XMSS optimizations (GH #1583 #1585)
  * Fix an error that meant XMSS would only sign half as many signatures as is
    allowed (GH #1582)
  * Add support for base32 encoding/decoding (GH #1541)
  * Add BMI2 optimized version of SHA-256, 40% faster on Skylake (GH #1584)
  * Allow the year to be up to 2200 in ASN.1 time objects. Previously this was
    limited to 2100. (GH #1536)
  * Add support for Scrypt password hashing (GH #1570)
  * Add support for using Scrypt for private key encryption (GH #1574)
  * Optimizations for DES/3DES, approx 50% faster when used in certain modes
    such as CBC decrypt or CTR.
  * XMSS signature verification did not check that the signature was of the
    expected length which could lead to a crash. (GH #1537)
  * The bcrypt variants 2b and 2y are now supported.
  * Support for 192-bit Suite B TLS profile is now implemented, as the 128-bit
    Suite B is since 2015 not allowed anymore.
  * Previously botan allowed GCM to be used with an empty nonce, which is not
    allowed by the specification. Now such nonces are rejected.
  * Avoid problems on Windows when compiling in Unicode mode (GH #1615 #1616)
  * Previously for ASN.1 encoded signatures (eg ECDSA) Botan would accept any
    valid BER encoding. Now only the single valid DER encoding is accepted.
  * Correct an error that could in rare cases cause an internal error exception
    when doing computations with the P-224 curve.
  * Optimizations to reduce allocations/copies during DER encoding and BER
    decoding (GH #1571 #1572 #1600)
  * Botan generates X.509 subject key IDs by hashing the public key with
    whatever hash function is being used to sign the certificate. However
    especially for SHA-512 this caused SKIDs that were far longer than
    necessary. Now all SKIDs are truncated to 192 bits.
  * In the test suite use mkstemp to create temporary files instead of creating
    them in the current working directory. (GH #1533 #1530)
  * It is now possible to safely override CXX when invoking make in addition to
    when configure.py is run. (GH #1579)
  * OIDs for Camellia and SM4 in CBC and GCM mode are now defined, making it
    possible to use this algorithms for private key encryption.
  * Avoid creating symlinks to the shared object on OpenBSD (#1535)
  * The factor command runs much faster on larger inputs now.
  * Support for Windows Phone/UWP was deprecated starting in 2.5. This
    deprecation has been reversed as it seems UWP is still actively used. (GH
    [#1586] #1587)
  * Support for Visual C++ 2013 is deprecated, and will be removed in Jan 2019.
  * Added support for GCC?s ?sysroot option to configure.py for
    cross-compiling.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1533038400">- Fix version in baselibs.conf</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1547121600">- Update to Botan 2.9
  * Bump SONAME
  * CVE-2018-20187 Address a side channel during ECC key generation, which used an
    unblinded Montgomery ladder. As a result, a timing attack can reveal
    information about the high bits of the secret key.
  * Fix bugs in TLS which caused negotiation failures when the client used an
    unknown signature algorithm or version (GH #1711 #1709 #1708)
  * Fix bug affecting GCM, EAX and ChaCha20Poly1305 where if the associated data
    was set after starting a message, the new AD was not reflected in the produced
    tag. Now with these modes setting an AD after beginning a message throws an
    exception.
  * Use a smaller sieve which improves performance of prime generation.
  * Fixed a bug that caused ChaCha to produce incorrect output after encrypting 256
    GB. (GH #1728)
  * Add NEON and AltiVec implementations of ChaCha (GH #1719 #1728 #1729)
  * Optimize AVX2 ChaCha (GH #1730)
  * Many more operations in BigInt, ECC and RSA code paths are either fully const
    time or avoid problematic branches that could potentially be exploited in a
    side channel attack. (GH #1738 #1750 #1754 #1755 #1757 #1758 #1759 #1762 #1765
    [#1770] #1773 #1774 #1779 #1780 #1794 #1795 #1796 #1797)
  * Several optimizations for BigInt and ECC, improving ECDSA performance by as
    much as 30%. (GH #1734 #1737 #1777 #1750 #1737 #1788)
  * Support recovering an ECDSA public key from a message/signature pair (GH #664
    [#1784])
  * Add base58 encoding/decoding functions (GH #1783)
  * In the command line interface, add support for reading passphrases from the
    terminal with echo disabled (GH #1756)
  * Add CT::Mask type to simplify const-time programming (GH #1751)
  * Add new configure options --disable-bmi2, --disable-rdrand, and
  - -disable-rdseed to prevent use of those instruction sets.
  * Add error_type and error_code functions to Exception type (GH #1744)
  * Now on POSIX systems posix_memalign is used instead of mmap for allocating the
    page-locked memory pool. This avoids issues with fork. (GH #602 #1798)
  * When available, use RDRAND to generate the additional data in
    Stateful_RNG::randomize_with_ts_input
  * Use vzeroall/vzeroupper intrinsics to avoid AVX2/SSE transition penalties.
  * Support for Visual C++ 2013 has been removed (GH #1557 #1697)
  * Resolve a memory leak when verifying ECDSA signatures with versions of OpenSSL
    before 1.1.0 (GH #1698)
  * Resolve a memory leak using ECDH via OpenSSL (GH #1767)
  * Fix an error in XTS which prohibited encrypting values which were exactly the
    same length as the underlying block size. Messages of this size are allowed by
    the standard and other XTS implementations. (GH #1706)
  * Resolve a bug in TSS which resulted in it using an incorrect length field in
    the shares. Now the correct length is encoded, but either correct or buggy
    lengths are accepted when decoding. (GH #1722)
  * Correct a bug when reducing a negative BigInt modulo a small power of 2. (GH
    [#1755])
  * Add CLI utils for threshold secret splitting. (GH #1722)
  * Fix a bug introduced in 2.8.0 that caused compilation failure if using a single
    amalgamation file with AVX2 enabled. (GH #1700)
  * Add an explicit OS target for Emscripten and improve support for it. (GH #1702)
  * Fix small issues when building for QNX
  * Switch the Travis CI build to using Ubuntu 16.04 (GH #1767)
  * Add options to configure.py to disable generation of pkg-config file, and (for
    systems where pkg-config support defaults to off, like Windows), to enable
    generating it. (GH #1268)
  * Modify configure.py to accept empty lists or trailing/extra commas. (GH #1705)
- Update to Botan 2.8
  * Add support for using Apple CommonCrypto library for hashing (GH #1667),
    cipher modes (GH #1674) and block ciphers (GH #1673).
  * Support for negotiating TLS versions 1.0 and 1.1 is disabled in the default
    TLS policy. In addition, support for negotiating TLS ciphersuites using CBC
    or CCM mode is disabled by default. Applications which need to interop with
    old peers must enable these in their TLS policy object. (GH #1651)
  * During primality testing, use a Lucas test in addition to Miller-Rabin. It
    is possible to construct a composite integer which passes n Miller-Rabin
    tests with probability (1/4)^n. So for a incautious verifier using a small
    number of tests (under 16 or so) it is possible if unlikely they would
    accept such a composite as prime. Adding a Lucas test precludes such an
    attack. (GH #1636)
  * Add XChaCha and XChaCha20Poly1305 (GH #1640)
  * Add AVX2 implementations of ChaCha (GH #1662) and Serpent (GH #1660)
  * Add a new password hashing interface in pwdhash.h (GH #1670)
  * C binding improvements. Added functions to get name and supported
    keylengths of cipher, hash and MAC objects, support for FE1 format
    preserving encryption (GH #1625 #1646), functions to load and save RSA keys
    in PKCS #1 format (GH #1621), HOTP and TOTP algorithms, scrypt, certificate
    verification (GH #1647), functions to get the output length of public key
    operations (GH #1642), and functions for loading and serializing X25519
    keys (GH #1681)
  * Support for building with BOTAN_MP_WORD_BITS set to 8 or 16 has been removed.
  * Previously SM2 had two distinct key types, one for signatures and another
    for encryption. They have now been merged into a single key type since in
    practice it seems the same key is at times used for both operations. (GH
    [#1637])
  * The Cipher_Mode class now derives from SymmetricAlgorithm (GH #1639)
  * Add support for using the ARMv8 instructions for SM4 encryption (GH #1622)
  * The entropy source using SecRandomCopyBytes has been removed as it was
    redundant with other entropy sources (GH #1668)
  * The Python module has much better error checking and reporting, and offers
    new functionality such as scrypt, MPI and FPE. (GH #1643 #1646)
  * Fixed a bug that caused CCM to fail with an exception when used with L=8 (GH #1631 #1632)
  * The default bcrypt work factor has been increased from 10 to 12.
  * The default algorithm used in passhash9 has changed from SHA-256 to
    SHA-512, and the default work factor increased from 10 to 15.
  * In ECC private keys, include the public key data for compatibility with GnuTLS (GH #1634 #1635)
  * Add support for using Linux getrandom syscall to access the system PRNG.
    This is disabled by default, use --with-os-feature=getrandom to enable.
  * It is now possible to encrypt private keys using SIV mode.
  * The FFI function botan_privkey_load now ignores its rng argument.
  * Resolve a problem when building under Visual C++ 15.8 (GH #1624)
  * Fix a bug in XSalsa20 (192-bit Salsa nonces) where if set_iv was called
    twice without calling set_key, the resulting encryption was incorrect. (GH
    [#1640])
  * Handle an error seen when verifying invalid ECDSA signatures using LibreSSL
    on non x86-64 platforms (GH #1627 #1628)
  * Fix bugs in PKCS7 and X9.23 CBC padding schemes, which would ignore the
    first byte in the event the padding took up the entire block. (GH #1690)
  * Correct bugs which would cause CFB, OCB, and GCM modes to crash when they
    were used in an unkeyed state. (GH #1639)
  * Optimizations for SM4 and Poly1305
  * Avoid a cache side channel in the AES key schedule
  * Add pk_encrypt and pk_decrypt CLI operations
  * Now asn1print CLI defaults to printing context-specific fields.
  * Use codec_base for Base64, which matches how Base32 is implemented (GH #1597)
  * The cast module has been split up into cast128 and cast256 (GH #1685)
  * When building under Visual C++ 2013, the user must acknowledge the upcoming
    removal of support using the configure.py flag --ack-vc2013-deprecated (GH
    [#1557])</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1554206400">- Update to Botan 2.10
  * Bump SONAME
  * Warning: XMSS currently implements draft-06 which is not compatible with
    the final RFC 8391 specification. A PR is open to fix this, however it will
    break all current uses of XMSS. If you are currently using XMSS please
    comment at https://github.com/randombit/botan/pull/1858. Otherwise the PR
    will be merged and support for draft-06 will be removed starting in 2.11.
  * Added a new certificate store implementation that can access the MacOS
    keychain certificate store. (GH #1830)
  * Redesigned Memory_Pool class, which services allocations out of a set of
    pages locked into memory (using mlock/VirtualLock). It is now faster and
    with improved exploit mitigations. (GH #1800)
  * Add BMI2 implementations of SHA-512 and SHA-3 which improve performance by
    25-35% on common CPUs. (GH #1815)
  * Unroll SHA-3 computation improving performance by 10-12% (GH #1838)
  * Add a Thread_Pool class. It is now possible to run the tests in multiple
    threads with --test-threads=N flag to select the number of threads to use.
    Use --test-threads=0 to run with as many CPU cores as are available on the
    current system. The default remains single threaded. (GH #1819)
  * XMSS signatures now uses a global thread pool instead of spawning new
    threads for each usage. This improves signature generation performance by
    between 10% and 60% depending on architecture and core count. (GH #1864)
  * Some functions related to encoding and decoding BigInts have been
    deprecated. (GH #1817)
  * Binary encoding and decoding of BigInts has been optimized by performing
    word-size operations when possible. (GH #1817)
  * Rename the exception Integrity_Failure to Invalid_Authentication_Tag to
    make its meaning and usage more clear. The old name remains as a typedef.
    (GH #1816)
  * Support for using Boost filesystem and MSVC?s std::filesystem have been
    removed, since already POSIX and Win32 versions had to be maintained for
    portability. (GH #1814)
  * Newly generated McEliece and XMSS keys now default to being encrypted using
    SIV mode, support for which was added in 2.8.0. Previously GCM was used by
    default for these algorithms.
  * Use arc4random on Android systems (GH #1851)
  * Fix the encoding of PGP-S2K iteration counts (GH #1853 #1854)
  * Add a facility for sandboxing the command line util. Currently FreeBSD
    (Capsicum) and OpenBSD (pledge) sandboxes are supported. (GH #1808)
  * Use if constexpr when available.
  * Disable building shared libs on iOS as it was broken and it is not clear
    shared libraries are ever useful on iOS (GH #1865)
  * Renamed the darwin build target to macos. This should not cause any
    user-visible change. (GH #1866)
  * Add support for using sccache to cache the Windows CI build (GH #1807)
  * Add --extra-cxxflags option which allows adding compilation flags without
    overriding the default set. (GH #1826)
  * Add --format= option to the hash cli which allows formatting the output as
    base64 or base58, default output remains hex.
  * Add base58_enc and base58_dec cli utils for base58 encoding/decoding. (GH #1848)
  * Enable getentropy by default on macOS (GH #1862)
  * Avoid using -momit-leaf-frame-pointer flags, since -fomit-frame-pointer is
    already the default with recent versions of GCC.
  * Fix XLC sanitizer flags.
  * Rename Blake2b class to BLAKE2b to match the official name. There is a typedef for compat.
  * Fix a bug where loading a raw Ed25519_PublicKey of incorrect length would
    lead to a crash. (GH #1850)
  * Fix a bug that caused compilation problems using CryptoNG PRNG. (GH #1832)
  * Extended SHAKE-128 cipher to support any key between 1 and 160 bytes,
    instead of only multiples of 8 bytes.
  * Minor HMAC optimizations.
  * Build fixes for GNU/Hurd.
  * Fix a bug that prevented generating or verifying Ed25519 signatures in the
    CLI (GH #1828 #1829)
  * Fix a compilation error when building the amalgamation outside of the
    original source directory when AVX2 was enabled. (GH #1812)
  * Fix a crash when creating the amalgamation if a header file was edited on
    Windows but then the amalgamation was built on Linux (GH #1763)</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1586347200">- Update to Botan 2.14:
  * Add support for using POWER8+ VPSUMD instruction to accelerate GCM (GH #2247)
  * Optimize the vector permute AES implementation, especially improving
    performance on ARMv7, Aarch64, and POWER. (GH #2243)
  * Use a new algorithm for modular inversions which is both faster
    and more resistant to side channel attacks. (GH #2287 #2296 #2301)
  * Address an issue in CBC padding which would leak the length of the plaintext
    which was being padded. Unpadding during decryption was not affected.
  * Optimize NIST prime field reductions, improving ECDSA by 3-9% (GH #2295)
  * Increase the size of the ECC blinding mask and scale it based on the
    size of the group order. (GH #880 #893 #2308)
  * Add server side support for the TLS asio wrapper. (GH #2229)
  * Add support for using Windows certificate store on MinGW (GH #2280)
  * Add a CLI utility cpu_clock which estimates the speed of the processor cycle counter.
  * Add Roughtime client (GH #2143 #1842)
  * Add support for XMSS X.509 certificates (GH #2172)
  * Add support for X.509 CRLs in FFI layer and Python wrapper (GH #2213)
  * Add AVX2 implementation of SHACAL2 (GH #2196)
  * Support more functionality for X.509 in the Python API (GH #2165)
  * Add generic CPU target useful when building for some new or unusual platform.
  * Disable MD5 in BSI or NIST modes (GH #2188)
  * Many currently public headers are being deprecated. If any such header is included by
    an application, a warning is issued at compile time.
    Headers issuing this warning will be made internal in a future major release.
  * RSA signature performance improvements (GH #2068 #2070)
  * Performance improvements for GCM (GH #2024 #2099 #2119), OCB (#2122), XTS (#2123) and
    ChaCha20Poly1305 (GH #2117), especially for small messages.
  * Add support for constant time AES using NEON and AltiVec (GH #2093 #2095 #2100)
  * Improve performance of POWER8 AES instructions (GH #2096)
  * Add support for the POWER9 hardware random number generator (GH #2026)
  * Add support for 64-bit version of RDRAND, doubling performance on x86-64 (GH #934 #2022)
  * In DTLS server, support a client crashing and then reconnecting from the same
    source port, as described in RFC 6347 sec 4.2.8 (GH #2029)
  * Optimize DTLS MTU splitting to split precisely to the set MTU (GH #2042)
  * Add support for the TLS v1.3 downgrade indicator. (GH #2027)
  * Add Argon2 PBKDF and password hash (GH #459 #1981 #1987)
  * Add Bcrypt-PBKDF (GH #1990)
  * Add server side support for issuing DTLS HelloVerifyRequest messages (GH #1999)
  * Add support for the TLS v1.3 supported_versions extension. (GH #1976)
  * Add Ed25519ph compatible with RFC 8032 (GH #1699 #2000)
  * Add support for OCSP stapling on server side. (GH #1703 #1967)
  * Add a boost::asio TLS stream compatible with boost::asio::ssl. (GH #1839 #1927 #1992)
  * Add a certificate store for Linux/Unix systems. (GH #1885 #1936)
  * Various Fixes</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597579200">- update to 2.15:
  Fix a bug where the name constraint extension did not constrain the alternative
  DN field which can be included in a subject alternative name. This would allow
  a corrupted sub-CA which was otherwise constrained by a name constraint to
  issue a certificate with a prohibited DN.
  Fix a bug in the TLS server during client authentication where where if a
  (disabled by default) static RSA ciphersuite was selected, then no certificate
  request would be sent. This would have an equivalent effect to a client which
  simply replied with an empty Certificate message. (GH #2367)
  Replace the T-Tables implementation of AES with a 32-bit bitsliced version. As
  a result AES is now constant time on all processors. (GH #2346 #2348 #2353
  [#2329] #2355)
  In TLS, enforce that the key usage given in the server certificate allows the
  operation being performed in the ciphersuite. (GH #2367)
  In X.509 certificates, verify that the algorithm parameters are the expected
  NULL or empty. (GH #2367)
  Change the HMAC key schedule to attempt to reduce the information leaked from
  the key schedule with regards to the length of the key, as this is at times (as
  for example in PBKDF2) sensitive information. (GH #2362)
  Add Processor_RNG which wraps RDRAND or the POWER DARN RNG instructions. The
  previous RDRAND_RNG interface is deprecated. (GH #2352)
  The documentation claimed that mlocked pages were created with a guard page
  both before and after. However only a trailing guard page was used. Add a
  leading guard page. (GH #2334)
  Add support for generating and verifying DER-encoded ECDSA signatures in the C
  and Python interfaces. (GH #2357 #2356)
  Workaround a bug in GCC?s UbSan which triggered on a code sequence in XMSS (GH
  [#2322])
  When building documentation using Sphinx avoid parallel builds with version 3.0
  due to a bug in that version (GH #2326 #2324)
  Fix a memory leak in the CommonCrypto block cipher calls (GH #2371)
  Fix a flaky test that would occasionally fail when running the tests with a
  large number of threads. (GH #2325 #2197)
  Additional algorithms are now deprecated: XTEA, GOST, and Tiger. They will be
  removed in a future major release.</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1603800000">- Update to 2.16.0:
  * Now userspace PRNG objects (such as AutoSeeded_RNG and HMAC_DRBG)
    use an internal lock, which allows safe concurrent use. This
    however is purely a precaution in case of accidental sharing of
    such RNG objects; for performance reasons it is always preferable
    to use a RNG per thread if a userspace RNG is needed.
  * DL_Group and EC_Group objects now track if they were created
    from a known trusted group (such as P-256 or an IPsec DH
    parameter). If so, then verification tests can be relaxed, as
    compared to parameters which may have been maliciously
    constructed in order to pass primality checks.
  * RandomNumberGenerator::add_entropy_T assumed its input was a POD
    type but did not verify this.
  * Support OCSP responders that live on a non-standard port.
  * Add support for Solaris sandbox.
  * Support suffixes on release numbers for alpha/beta releases.
  * Fix a bug in EAX which allowed requesting a 0 length tag, which
    had the effect of using a full length tag. Instead omit the
    length field, or request the full tag length explicitly.
  * Fix a memory leak in GCM where if passed an unsuitable block
    cipher (eg not 128 bit) it would throw an exception and leak
    the cipher object.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1604750400">- Botan 2.17.1:
  * Fix bugs in ECDSA signature generation and verifications under
    specific circumstances
  * developer visible changes, including deprecation with warnings
  * optimization in the non-hardware assisted AES key generation
  * Add more detection logic for AVX-512 features
  * Fix a bug parsing deeply nested cipher names
  * Prevent requesting DER encoding of signatures when the
    algorithm did not support it</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1605268800">- Botan 2.17.2:
  * Fix build problem on ppc64
  * Resolve an issue in the modular square root algorithm</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1608724800">- Botan 2.17.3:
  * Harden against side-channels from decoding secret values by
    changing the base64, base58, base32, and hex encoding and
    decoding opearations to run in constant time</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1618574400">- Botan 2.18.0
  * Add support for implementing custom RNG objects through the FFI
    interface
  * Improve safegcd bounds, improving runtime performance
  * Reject non-TLS messages as quickly as possible without waiting
    for a full record.
  * Fixes for TLS::Stream::async_shutdown
- Removed unneeded GNU MP build requirement, support was dropped
  with version 1.11.10
- Enabled check target, verify integrity of build library</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1620648000">- Botan 2.18.1:
  * Fix a build regression in 2.18.0 which caused linker flags
    which contain -l within them (such as -fuse-linker-plugin)
    to be misinterpreted
  * Fix a bug which caused decoding a certificate which contained
    more than one name in a single RDN
  * Fix a bug which caused OID lookup failures when run in a locale
    which uses thousands separators (pt_BR was reported as having
    this issue)
  * DNS names in name constraints were compared with case
    sensitivity, which could cause valid certificates to be
    rejected
  * X.509 name constraint extensions were rejected if non-critical.
    RFC 5280 requires conforming CAs issue such extensions as
    critical, but not all certificates are compliant, and all other
    known implementations do not require this
  * X.509 name constraints were incorrectly applied to the
    certificate which included the constraint
- build with lzma compression support
- build with SQLite support
- build with TPM support
- fix SLE 12 build</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1637755200">- update to 2.18.2:
  * Avoid using short exponents when encrypting in ElGamal, as some PGP
    implementations generate keys with parameters that are weak when
    short exponents are used CVE-2021-40529 boo#1190244
  * Fix a low risk OAEP decryption side channel
  * Work around a miscompilation of SHA-3 caused by a bug in Clang 12
    and XCode 13
  * Remove support in OpenSSL provider for algorithms which are
    disabled by default in OpenSSL 3.0
  * Add CI based on GitHub actions to replace Travis CI
  * Fix the online OCSP test, as the certificate involved had expired.
  * Fix some test failures induced by the expiration of the trust root
    "DST Root CA X3"</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1668686400">- Fixed [CVE-2022-43705,bsc#1205509]
  * Added Botan-CVE-2022-43705.patch
  * Added Botan-CVE-2022-43705-certs.tgz
  * validate that an embedded certificate was issued by the end-entity
    issuing certificate authority when checking OCSP responses.</changelog>
</package>
<package pkgid="0090c10d7ea341e2d8d999717dc289cf14ac0ff9b0f3e937b2a3492ba6846632" name="libbotan-devel" arch="x86_64">
  <version epoch="0" ver="2.18.2" rel="bp154.2.3.1"/>
  <changelog author="adam.majer@suse.de" date="1518436800">- Don't drop -fstack-clash-protection for openSUSE 42.3 - we just
  need the Update repository present.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1518609600">- change group of libbotan-%{version_suffix} to 'System/Libraries' as
  requested on review</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1518782400">- drop explicit package requirements
- split binary package and documentation from dynamic library package
  and make documentation package noarch
- merge back Botan2 package to Botan with changelog history
- drop Botan patches
    aarch64-support.patch - doesn't seem to be required anymore
    Botan-fix_install_paths.patch - doesn't seem to be required
    no-cpuid-header.patch - SLE11 not target anymore
    Botan-fix_pkgconfig.patch - this seem to be wrong
    Botan-no-buildtime.patch - not needed anymore
    dont-set-mach-value.diff - doesn't apply, unclear and undocumented why it is there
    Botan-inttypes.patch - not required
    Botan-ull_constants.patch.bz2 - no reason anymore</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1522756800">- Update to Botan 2.5
  * Fix error in certificate wildcard matching (CVE-2018-9127), where a
    wildcard cert for b*.example.com would be accepted as a match for any host
    with name *b*.example.com (GH #1519)
  * Add support for RSA-PSS signatures in TLS (GH #1285)
  * Ed25519 certificates are now supported (GH #1501)
  * Many optimizations in ECC operations. ECDSA signatures are 8-10 times
    faster. ECDSA verification is about twice as fast. ECDH key agreement is
    3-4 times faster. (GH #1457 #1478)
  * Implement product scanning Montgomery reduction, which improves
    Diffie-Hellman and RSA performance by 10 to 20% on most platforms. (GH
    [#1472])
  * DSA signing and verification performance has improved by 30-50%.
  * Add a new Credentials_Manager callback that specifies which CAs the server
    has indicated it trusts (GH #1395 fixing #1261)
  * Add new TLS::Callbacks methods that allow creating or removing extensions,
    as well as examining extensions sent by the peer (GH #1394 #1186)
  * Add new TLS::Callbacks methods that allow an application to negotiate use
    of custom elliptic curves. (GH #1448)
  * Add ability to create custom elliptic curves (GH #1441 #1444)
  * Add support for POWER8 AES instructions (GH #1459 #1393 #1206)
  * Fix DSA/ECDSA handling of hashes longer than the group order (GH #1502
    [#986])
  * The default encoding of ECC public keys has changed from compressed to
    uncompressed point representation. This improves compatability with some
    common software packages including Golang?s standard library. (GH #1480
    [#1483])
  * It is now possible to create DNs with custom components. (GH #1490 #1492)
  * It is now possible to specify the serial number of created certificates,
    instead of using the default 128-bit random integer. (GH #1489 #1491)
  * Change DL_Group and EC_Group to store their data as shared_ptr for fast
    copying. Also both classes precompute additional useful values (eg for
    modular reductions). (GH #1435 #1454)
  * Make it possible for PKCS10 requests to include custom extensions. This
    also makes it possible to use muliple SubjectAlternativeNames of a single
    type in a request, which was previously not possible. (GH #1429 #1428)
  * Add new optimized interface for FE1 format preserving encryption. By
    caching a number of values computed in the course of the FPE calculation,
    it provides a 6-7x speedup versus the old API. (GH #1469)
  * Add DSA and ElGamal keygen functions to FFI (#1426)
  * Add Pipe::prepend_filter to replace Pipe::prepend (GH #1402)
  * Fix a memory leak in the OpenSSL block cipher integration, introduced in
  * 2.2.0
  * Use an improved algorithm for generating safe primes which is several tens
    of times faster. Also, fix a bug in the prime sieving algorithm which
    caused standard prime generation (like for RSA keys) to be slower than
    necessary. (GH #1413 #1411)
  * Correct the return value of PK_Encryptor::maximum_input_size which reported
    a much too small value (GH #1410)
  * Remove use of CPU specific optimization flags, instead the user should set
    these via CXXFLAGS if desired. (GH #1392)
  * Resolve an issue that would cause a crash in the tests if they were run on
    a machine without SSE2/NEON/VMX instructions. (GH #1495)
  * The Python module now tries to load DLLs from a list of names and uses the
    first one which successfully loads and indicates it supports the desired
    API level. (GH #1497)
  * Various minor optimizations for SHA-3 (GH #1433 #1434)
  * The output of botan --help has been improved (GH #1387)
  * Add --der-format flag to command line utils, making it possible verify
    DSA/ECDSA signatures generated by OpenSSL command line (GH #1409)
  * Add support for --library-suffix option to configure.py (GH #1405 #1404)
  * Use feature flags to enable/disable system specific code (GH #1378)
  * Add --msvc-runtime option to allow using static runtime (GH #1499 #210)
  * Add ?enable-sanitizers= option to allow specifying which sanitizers to
    enable. The existing --with-sanitizers option just enables some default set
    which is known to work with the minimum required compiler versions.
  * Use either rst2man or rst2man.py for generating man page as distributions
    differ on where this program is installed (GH #1516)
  * The threefish module has been renamed threefish_512 since that is the
    algorithm it provides. (GH #1477)
  * The Perl XS based wrapper has been removed, as it was unmaintained and
    broken. (GH #1412)
  * The sqlite3 encryption patch under contrib has been removed. It is still
    maintained by the original author at
    https://github.com/OlivierJG/botansqlite3</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1523361600">- Update to Botan 2.6
  * CVE-2018-9860 Fix a bug decrypting TLS CBC ciphertexts which could for a
    malformed ciphertext cause the decryptor to read and HMAC an additional 64K
    bytes of data which is not part of the record. This could cause a crash if
    the read went into unmapped memory. No information leak or out of bounds
    write occurs.
  * Add support for OAEP labels (GH #1508)
  * RSA signing is about 15% faster (GH #1523) and RSA verification is about 50% faster.
  * Add exponent blinding to RSA (GH #1523)
  * Add Cipher_Mode::create and AEAD_Mode::create (GH #1527)
  * Fix bug in TLS server introduced in 2.5 which caused connection to fail if
    the client offered any signature algorithm not known to the server (for
    example RSA/SHA-224).
  * Fix a bug in inline asm that would with GCC 7.3 cause incorrect
    computations and an infinite loop during the tests. (GH #1524 #1529)</changelog>
  <changelog author="kasimir_@outlook.de" date="1523534400">- fixed to build on armv6 and armv7</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1531224000">- Update to Botan 2.7
  * CVE-2018-12435 Avoid a side channel in ECDSA signature generation (GH
    [#1604])
  * Avoid a side channel in RSA key generation due to use of a non-constant
    time gcd algorithm. (GH #1542 #1556)
  * Optimize prime generation, especially improving RSA key generation. (GH
    [#1542])
  * Make Karatsuba multiplication, Montgomery field operations, Barrett
    reduction and Montgomery exponentiation const time (GH #1540 #1606 #1609
    [#1610])
  * Optimizations for elliptic curve operations especially improving reductions
    and inversions modulo NIST primes (GH #1534 #1538 #1545 #1546 #1547 #1550)
  * Add 24 word wide Comba multiplication, improving 3072-bit RSA and DH by
    ~25%. (GH #1564)
  * Unroll Montgomery reduction for specific sizes (GH #1603)
  * Improved performance of signature verification in ECGDSA, ECKCDSA, SM2 and
    GOST by 10-15%.
  * XMSS optimizations (GH #1583 #1585)
  * Fix an error that meant XMSS would only sign half as many signatures as is
    allowed (GH #1582)
  * Add support for base32 encoding/decoding (GH #1541)
  * Add BMI2 optimized version of SHA-256, 40% faster on Skylake (GH #1584)
  * Allow the year to be up to 2200 in ASN.1 time objects. Previously this was
    limited to 2100. (GH #1536)
  * Add support for Scrypt password hashing (GH #1570)
  * Add support for using Scrypt for private key encryption (GH #1574)
  * Optimizations for DES/3DES, approx 50% faster when used in certain modes
    such as CBC decrypt or CTR.
  * XMSS signature verification did not check that the signature was of the
    expected length which could lead to a crash. (GH #1537)
  * The bcrypt variants 2b and 2y are now supported.
  * Support for 192-bit Suite B TLS profile is now implemented, as the 128-bit
    Suite B is since 2015 not allowed anymore.
  * Previously botan allowed GCM to be used with an empty nonce, which is not
    allowed by the specification. Now such nonces are rejected.
  * Avoid problems on Windows when compiling in Unicode mode (GH #1615 #1616)
  * Previously for ASN.1 encoded signatures (eg ECDSA) Botan would accept any
    valid BER encoding. Now only the single valid DER encoding is accepted.
  * Correct an error that could in rare cases cause an internal error exception
    when doing computations with the P-224 curve.
  * Optimizations to reduce allocations/copies during DER encoding and BER
    decoding (GH #1571 #1572 #1600)
  * Botan generates X.509 subject key IDs by hashing the public key with
    whatever hash function is being used to sign the certificate. However
    especially for SHA-512 this caused SKIDs that were far longer than
    necessary. Now all SKIDs are truncated to 192 bits.
  * In the test suite use mkstemp to create temporary files instead of creating
    them in the current working directory. (GH #1533 #1530)
  * It is now possible to safely override CXX when invoking make in addition to
    when configure.py is run. (GH #1579)
  * OIDs for Camellia and SM4 in CBC and GCM mode are now defined, making it
    possible to use this algorithms for private key encryption.
  * Avoid creating symlinks to the shared object on OpenBSD (#1535)
  * The factor command runs much faster on larger inputs now.
  * Support for Windows Phone/UWP was deprecated starting in 2.5. This
    deprecation has been reversed as it seems UWP is still actively used. (GH
    [#1586] #1587)
  * Support for Visual C++ 2013 is deprecated, and will be removed in Jan 2019.
  * Added support for GCC?s ?sysroot option to configure.py for
    cross-compiling.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1533038400">- Fix version in baselibs.conf</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1547121600">- Update to Botan 2.9
  * Bump SONAME
  * CVE-2018-20187 Address a side channel during ECC key generation, which used an
    unblinded Montgomery ladder. As a result, a timing attack can reveal
    information about the high bits of the secret key.
  * Fix bugs in TLS which caused negotiation failures when the client used an
    unknown signature algorithm or version (GH #1711 #1709 #1708)
  * Fix bug affecting GCM, EAX and ChaCha20Poly1305 where if the associated data
    was set after starting a message, the new AD was not reflected in the produced
    tag. Now with these modes setting an AD after beginning a message throws an
    exception.
  * Use a smaller sieve which improves performance of prime generation.
  * Fixed a bug that caused ChaCha to produce incorrect output after encrypting 256
    GB. (GH #1728)
  * Add NEON and AltiVec implementations of ChaCha (GH #1719 #1728 #1729)
  * Optimize AVX2 ChaCha (GH #1730)
  * Many more operations in BigInt, ECC and RSA code paths are either fully const
    time or avoid problematic branches that could potentially be exploited in a
    side channel attack. (GH #1738 #1750 #1754 #1755 #1757 #1758 #1759 #1762 #1765
    [#1770] #1773 #1774 #1779 #1780 #1794 #1795 #1796 #1797)
  * Several optimizations for BigInt and ECC, improving ECDSA performance by as
    much as 30%. (GH #1734 #1737 #1777 #1750 #1737 #1788)
  * Support recovering an ECDSA public key from a message/signature pair (GH #664
    [#1784])
  * Add base58 encoding/decoding functions (GH #1783)
  * In the command line interface, add support for reading passphrases from the
    terminal with echo disabled (GH #1756)
  * Add CT::Mask type to simplify const-time programming (GH #1751)
  * Add new configure options --disable-bmi2, --disable-rdrand, and
  - -disable-rdseed to prevent use of those instruction sets.
  * Add error_type and error_code functions to Exception type (GH #1744)
  * Now on POSIX systems posix_memalign is used instead of mmap for allocating the
    page-locked memory pool. This avoids issues with fork. (GH #602 #1798)
  * When available, use RDRAND to generate the additional data in
    Stateful_RNG::randomize_with_ts_input
  * Use vzeroall/vzeroupper intrinsics to avoid AVX2/SSE transition penalties.
  * Support for Visual C++ 2013 has been removed (GH #1557 #1697)
  * Resolve a memory leak when verifying ECDSA signatures with versions of OpenSSL
    before 1.1.0 (GH #1698)
  * Resolve a memory leak using ECDH via OpenSSL (GH #1767)
  * Fix an error in XTS which prohibited encrypting values which were exactly the
    same length as the underlying block size. Messages of this size are allowed by
    the standard and other XTS implementations. (GH #1706)
  * Resolve a bug in TSS which resulted in it using an incorrect length field in
    the shares. Now the correct length is encoded, but either correct or buggy
    lengths are accepted when decoding. (GH #1722)
  * Correct a bug when reducing a negative BigInt modulo a small power of 2. (GH
    [#1755])
  * Add CLI utils for threshold secret splitting. (GH #1722)
  * Fix a bug introduced in 2.8.0 that caused compilation failure if using a single
    amalgamation file with AVX2 enabled. (GH #1700)
  * Add an explicit OS target for Emscripten and improve support for it. (GH #1702)
  * Fix small issues when building for QNX
  * Switch the Travis CI build to using Ubuntu 16.04 (GH #1767)
  * Add options to configure.py to disable generation of pkg-config file, and (for
    systems where pkg-config support defaults to off, like Windows), to enable
    generating it. (GH #1268)
  * Modify configure.py to accept empty lists or trailing/extra commas. (GH #1705)
- Update to Botan 2.8
  * Add support for using Apple CommonCrypto library for hashing (GH #1667),
    cipher modes (GH #1674) and block ciphers (GH #1673).
  * Support for negotiating TLS versions 1.0 and 1.1 is disabled in the default
    TLS policy. In addition, support for negotiating TLS ciphersuites using CBC
    or CCM mode is disabled by default. Applications which need to interop with
    old peers must enable these in their TLS policy object. (GH #1651)
  * During primality testing, use a Lucas test in addition to Miller-Rabin. It
    is possible to construct a composite integer which passes n Miller-Rabin
    tests with probability (1/4)^n. So for a incautious verifier using a small
    number of tests (under 16 or so) it is possible if unlikely they would
    accept such a composite as prime. Adding a Lucas test precludes such an
    attack. (GH #1636)
  * Add XChaCha and XChaCha20Poly1305 (GH #1640)
  * Add AVX2 implementations of ChaCha (GH #1662) and Serpent (GH #1660)
  * Add a new password hashing interface in pwdhash.h (GH #1670)
  * C binding improvements. Added functions to get name and supported
    keylengths of cipher, hash and MAC objects, support for FE1 format
    preserving encryption (GH #1625 #1646), functions to load and save RSA keys
    in PKCS #1 format (GH #1621), HOTP and TOTP algorithms, scrypt, certificate
    verification (GH #1647), functions to get the output length of public key
    operations (GH #1642), and functions for loading and serializing X25519
    keys (GH #1681)
  * Support for building with BOTAN_MP_WORD_BITS set to 8 or 16 has been removed.
  * Previously SM2 had two distinct key types, one for signatures and another
    for encryption. They have now been merged into a single key type since in
    practice it seems the same key is at times used for both operations. (GH
    [#1637])
  * The Cipher_Mode class now derives from SymmetricAlgorithm (GH #1639)
  * Add support for using the ARMv8 instructions for SM4 encryption (GH #1622)
  * The entropy source using SecRandomCopyBytes has been removed as it was
    redundant with other entropy sources (GH #1668)
  * The Python module has much better error checking and reporting, and offers
    new functionality such as scrypt, MPI and FPE. (GH #1643 #1646)
  * Fixed a bug that caused CCM to fail with an exception when used with L=8 (GH #1631 #1632)
  * The default bcrypt work factor has been increased from 10 to 12.
  * The default algorithm used in passhash9 has changed from SHA-256 to
    SHA-512, and the default work factor increased from 10 to 15.
  * In ECC private keys, include the public key data for compatibility with GnuTLS (GH #1634 #1635)
  * Add support for using Linux getrandom syscall to access the system PRNG.
    This is disabled by default, use --with-os-feature=getrandom to enable.
  * It is now possible to encrypt private keys using SIV mode.
  * The FFI function botan_privkey_load now ignores its rng argument.
  * Resolve a problem when building under Visual C++ 15.8 (GH #1624)
  * Fix a bug in XSalsa20 (192-bit Salsa nonces) where if set_iv was called
    twice without calling set_key, the resulting encryption was incorrect. (GH
    [#1640])
  * Handle an error seen when verifying invalid ECDSA signatures using LibreSSL
    on non x86-64 platforms (GH #1627 #1628)
  * Fix bugs in PKCS7 and X9.23 CBC padding schemes, which would ignore the
    first byte in the event the padding took up the entire block. (GH #1690)
  * Correct bugs which would cause CFB, OCB, and GCM modes to crash when they
    were used in an unkeyed state. (GH #1639)
  * Optimizations for SM4 and Poly1305
  * Avoid a cache side channel in the AES key schedule
  * Add pk_encrypt and pk_decrypt CLI operations
  * Now asn1print CLI defaults to printing context-specific fields.
  * Use codec_base for Base64, which matches how Base32 is implemented (GH #1597)
  * The cast module has been split up into cast128 and cast256 (GH #1685)
  * When building under Visual C++ 2013, the user must acknowledge the upcoming
    removal of support using the configure.py flag --ack-vc2013-deprecated (GH
    [#1557])</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1554206400">- Update to Botan 2.10
  * Bump SONAME
  * Warning: XMSS currently implements draft-06 which is not compatible with
    the final RFC 8391 specification. A PR is open to fix this, however it will
    break all current uses of XMSS. If you are currently using XMSS please
    comment at https://github.com/randombit/botan/pull/1858. Otherwise the PR
    will be merged and support for draft-06 will be removed starting in 2.11.
  * Added a new certificate store implementation that can access the MacOS
    keychain certificate store. (GH #1830)
  * Redesigned Memory_Pool class, which services allocations out of a set of
    pages locked into memory (using mlock/VirtualLock). It is now faster and
    with improved exploit mitigations. (GH #1800)
  * Add BMI2 implementations of SHA-512 and SHA-3 which improve performance by
    25-35% on common CPUs. (GH #1815)
  * Unroll SHA-3 computation improving performance by 10-12% (GH #1838)
  * Add a Thread_Pool class. It is now possible to run the tests in multiple
    threads with --test-threads=N flag to select the number of threads to use.
    Use --test-threads=0 to run with as many CPU cores as are available on the
    current system. The default remains single threaded. (GH #1819)
  * XMSS signatures now uses a global thread pool instead of spawning new
    threads for each usage. This improves signature generation performance by
    between 10% and 60% depending on architecture and core count. (GH #1864)
  * Some functions related to encoding and decoding BigInts have been
    deprecated. (GH #1817)
  * Binary encoding and decoding of BigInts has been optimized by performing
    word-size operations when possible. (GH #1817)
  * Rename the exception Integrity_Failure to Invalid_Authentication_Tag to
    make its meaning and usage more clear. The old name remains as a typedef.
    (GH #1816)
  * Support for using Boost filesystem and MSVC?s std::filesystem have been
    removed, since already POSIX and Win32 versions had to be maintained for
    portability. (GH #1814)
  * Newly generated McEliece and XMSS keys now default to being encrypted using
    SIV mode, support for which was added in 2.8.0. Previously GCM was used by
    default for these algorithms.
  * Use arc4random on Android systems (GH #1851)
  * Fix the encoding of PGP-S2K iteration counts (GH #1853 #1854)
  * Add a facility for sandboxing the command line util. Currently FreeBSD
    (Capsicum) and OpenBSD (pledge) sandboxes are supported. (GH #1808)
  * Use if constexpr when available.
  * Disable building shared libs on iOS as it was broken and it is not clear
    shared libraries are ever useful on iOS (GH #1865)
  * Renamed the darwin build target to macos. This should not cause any
    user-visible change. (GH #1866)
  * Add support for using sccache to cache the Windows CI build (GH #1807)
  * Add --extra-cxxflags option which allows adding compilation flags without
    overriding the default set. (GH #1826)
  * Add --format= option to the hash cli which allows formatting the output as
    base64 or base58, default output remains hex.
  * Add base58_enc and base58_dec cli utils for base58 encoding/decoding. (GH #1848)
  * Enable getentropy by default on macOS (GH #1862)
  * Avoid using -momit-leaf-frame-pointer flags, since -fomit-frame-pointer is
    already the default with recent versions of GCC.
  * Fix XLC sanitizer flags.
  * Rename Blake2b class to BLAKE2b to match the official name. There is a typedef for compat.
  * Fix a bug where loading a raw Ed25519_PublicKey of incorrect length would
    lead to a crash. (GH #1850)
  * Fix a bug that caused compilation problems using CryptoNG PRNG. (GH #1832)
  * Extended SHAKE-128 cipher to support any key between 1 and 160 bytes,
    instead of only multiples of 8 bytes.
  * Minor HMAC optimizations.
  * Build fixes for GNU/Hurd.
  * Fix a bug that prevented generating or verifying Ed25519 signatures in the
    CLI (GH #1828 #1829)
  * Fix a compilation error when building the amalgamation outside of the
    original source directory when AVX2 was enabled. (GH #1812)
  * Fix a crash when creating the amalgamation if a header file was edited on
    Windows but then the amalgamation was built on Linux (GH #1763)</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1586347200">- Update to Botan 2.14:
  * Add support for using POWER8+ VPSUMD instruction to accelerate GCM (GH #2247)
  * Optimize the vector permute AES implementation, especially improving
    performance on ARMv7, Aarch64, and POWER. (GH #2243)
  * Use a new algorithm for modular inversions which is both faster
    and more resistant to side channel attacks. (GH #2287 #2296 #2301)
  * Address an issue in CBC padding which would leak the length of the plaintext
    which was being padded. Unpadding during decryption was not affected.
  * Optimize NIST prime field reductions, improving ECDSA by 3-9% (GH #2295)
  * Increase the size of the ECC blinding mask and scale it based on the
    size of the group order. (GH #880 #893 #2308)
  * Add server side support for the TLS asio wrapper. (GH #2229)
  * Add support for using Windows certificate store on MinGW (GH #2280)
  * Add a CLI utility cpu_clock which estimates the speed of the processor cycle counter.
  * Add Roughtime client (GH #2143 #1842)
  * Add support for XMSS X.509 certificates (GH #2172)
  * Add support for X.509 CRLs in FFI layer and Python wrapper (GH #2213)
  * Add AVX2 implementation of SHACAL2 (GH #2196)
  * Support more functionality for X.509 in the Python API (GH #2165)
  * Add generic CPU target useful when building for some new or unusual platform.
  * Disable MD5 in BSI or NIST modes (GH #2188)
  * Many currently public headers are being deprecated. If any such header is included by
    an application, a warning is issued at compile time.
    Headers issuing this warning will be made internal in a future major release.
  * RSA signature performance improvements (GH #2068 #2070)
  * Performance improvements for GCM (GH #2024 #2099 #2119), OCB (#2122), XTS (#2123) and
    ChaCha20Poly1305 (GH #2117), especially for small messages.
  * Add support for constant time AES using NEON and AltiVec (GH #2093 #2095 #2100)
  * Improve performance of POWER8 AES instructions (GH #2096)
  * Add support for the POWER9 hardware random number generator (GH #2026)
  * Add support for 64-bit version of RDRAND, doubling performance on x86-64 (GH #934 #2022)
  * In DTLS server, support a client crashing and then reconnecting from the same
    source port, as described in RFC 6347 sec 4.2.8 (GH #2029)
  * Optimize DTLS MTU splitting to split precisely to the set MTU (GH #2042)
  * Add support for the TLS v1.3 downgrade indicator. (GH #2027)
  * Add Argon2 PBKDF and password hash (GH #459 #1981 #1987)
  * Add Bcrypt-PBKDF (GH #1990)
  * Add server side support for issuing DTLS HelloVerifyRequest messages (GH #1999)
  * Add support for the TLS v1.3 supported_versions extension. (GH #1976)
  * Add Ed25519ph compatible with RFC 8032 (GH #1699 #2000)
  * Add support for OCSP stapling on server side. (GH #1703 #1967)
  * Add a boost::asio TLS stream compatible with boost::asio::ssl. (GH #1839 #1927 #1992)
  * Add a certificate store for Linux/Unix systems. (GH #1885 #1936)
  * Various Fixes</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597579200">- update to 2.15:
  Fix a bug where the name constraint extension did not constrain the alternative
  DN field which can be included in a subject alternative name. This would allow
  a corrupted sub-CA which was otherwise constrained by a name constraint to
  issue a certificate with a prohibited DN.
  Fix a bug in the TLS server during client authentication where where if a
  (disabled by default) static RSA ciphersuite was selected, then no certificate
  request would be sent. This would have an equivalent effect to a client which
  simply replied with an empty Certificate message. (GH #2367)
  Replace the T-Tables implementation of AES with a 32-bit bitsliced version. As
  a result AES is now constant time on all processors. (GH #2346 #2348 #2353
  [#2329] #2355)
  In TLS, enforce that the key usage given in the server certificate allows the
  operation being performed in the ciphersuite. (GH #2367)
  In X.509 certificates, verify that the algorithm parameters are the expected
  NULL or empty. (GH #2367)
  Change the HMAC key schedule to attempt to reduce the information leaked from
  the key schedule with regards to the length of the key, as this is at times (as
  for example in PBKDF2) sensitive information. (GH #2362)
  Add Processor_RNG which wraps RDRAND or the POWER DARN RNG instructions. The
  previous RDRAND_RNG interface is deprecated. (GH #2352)
  The documentation claimed that mlocked pages were created with a guard page
  both before and after. However only a trailing guard page was used. Add a
  leading guard page. (GH #2334)
  Add support for generating and verifying DER-encoded ECDSA signatures in the C
  and Python interfaces. (GH #2357 #2356)
  Workaround a bug in GCC?s UbSan which triggered on a code sequence in XMSS (GH
  [#2322])
  When building documentation using Sphinx avoid parallel builds with version 3.0
  due to a bug in that version (GH #2326 #2324)
  Fix a memory leak in the CommonCrypto block cipher calls (GH #2371)
  Fix a flaky test that would occasionally fail when running the tests with a
  large number of threads. (GH #2325 #2197)
  Additional algorithms are now deprecated: XTEA, GOST, and Tiger. They will be
  removed in a future major release.</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1603800000">- Update to 2.16.0:
  * Now userspace PRNG objects (such as AutoSeeded_RNG and HMAC_DRBG)
    use an internal lock, which allows safe concurrent use. This
    however is purely a precaution in case of accidental sharing of
    such RNG objects; for performance reasons it is always preferable
    to use a RNG per thread if a userspace RNG is needed.
  * DL_Group and EC_Group objects now track if they were created
    from a known trusted group (such as P-256 or an IPsec DH
    parameter). If so, then verification tests can be relaxed, as
    compared to parameters which may have been maliciously
    constructed in order to pass primality checks.
  * RandomNumberGenerator::add_entropy_T assumed its input was a POD
    type but did not verify this.
  * Support OCSP responders that live on a non-standard port.
  * Add support for Solaris sandbox.
  * Support suffixes on release numbers for alpha/beta releases.
  * Fix a bug in EAX which allowed requesting a 0 length tag, which
    had the effect of using a full length tag. Instead omit the
    length field, or request the full tag length explicitly.
  * Fix a memory leak in GCM where if passed an unsuitable block
    cipher (eg not 128 bit) it would throw an exception and leak
    the cipher object.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1604750400">- Botan 2.17.1:
  * Fix bugs in ECDSA signature generation and verifications under
    specific circumstances
  * developer visible changes, including deprecation with warnings
  * optimization in the non-hardware assisted AES key generation
  * Add more detection logic for AVX-512 features
  * Fix a bug parsing deeply nested cipher names
  * Prevent requesting DER encoding of signatures when the
    algorithm did not support it</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1605268800">- Botan 2.17.2:
  * Fix build problem on ppc64
  * Resolve an issue in the modular square root algorithm</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1608724800">- Botan 2.17.3:
  * Harden against side-channels from decoding secret values by
    changing the base64, base58, base32, and hex encoding and
    decoding opearations to run in constant time</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1618574400">- Botan 2.18.0
  * Add support for implementing custom RNG objects through the FFI
    interface
  * Improve safegcd bounds, improving runtime performance
  * Reject non-TLS messages as quickly as possible without waiting
    for a full record.
  * Fixes for TLS::Stream::async_shutdown
- Removed unneeded GNU MP build requirement, support was dropped
  with version 1.11.10
- Enabled check target, verify integrity of build library</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1620648000">- Botan 2.18.1:
  * Fix a build regression in 2.18.0 which caused linker flags
    which contain -l within them (such as -fuse-linker-plugin)
    to be misinterpreted
  * Fix a bug which caused decoding a certificate which contained
    more than one name in a single RDN
  * Fix a bug which caused OID lookup failures when run in a locale
    which uses thousands separators (pt_BR was reported as having
    this issue)
  * DNS names in name constraints were compared with case
    sensitivity, which could cause valid certificates to be
    rejected
  * X.509 name constraint extensions were rejected if non-critical.
    RFC 5280 requires conforming CAs issue such extensions as
    critical, but not all certificates are compliant, and all other
    known implementations do not require this
  * X.509 name constraints were incorrectly applied to the
    certificate which included the constraint
- build with lzma compression support
- build with SQLite support
- build with TPM support
- fix SLE 12 build</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1637755200">- update to 2.18.2:
  * Avoid using short exponents when encrypting in ElGamal, as some PGP
    implementations generate keys with parameters that are weak when
    short exponents are used CVE-2021-40529 boo#1190244
  * Fix a low risk OAEP decryption side channel
  * Work around a miscompilation of SHA-3 caused by a bug in Clang 12
    and XCode 13
  * Remove support in OpenSSL provider for algorithms which are
    disabled by default in OpenSSL 3.0
  * Add CI based on GitHub actions to replace Travis CI
  * Fix the online OCSP test, as the certificate involved had expired.
  * Fix some test failures induced by the expiration of the trust root
    "DST Root CA X3"</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1668686400">- Fixed [CVE-2022-43705,bsc#1205509]
  * Added Botan-CVE-2022-43705.patch
  * Added Botan-CVE-2022-43705-certs.tgz
  * validate that an embedded certificate was issued by the end-entity
    issuing certificate authority when checking OCSP responses.</changelog>
</package>
<package pkgid="0292f4b4b461546723e5eaa9ec6c85bde019e980c1e808709b251ff7a1d8da05" name="libbotan-devel-32bit" arch="x86_64">
  <version epoch="0" ver="2.18.2" rel="bp154.2.3.1"/>
  <changelog author="adam.majer@suse.de" date="1518436800">- Don't drop -fstack-clash-protection for openSUSE 42.3 - we just
  need the Update repository present.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1518609600">- change group of libbotan-%{version_suffix} to 'System/Libraries' as
  requested on review</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1518782400">- drop explicit package requirements
- split binary package and documentation from dynamic library package
  and make documentation package noarch
- merge back Botan2 package to Botan with changelog history
- drop Botan patches
    aarch64-support.patch - doesn't seem to be required anymore
    Botan-fix_install_paths.patch - doesn't seem to be required
    no-cpuid-header.patch - SLE11 not target anymore
    Botan-fix_pkgconfig.patch - this seem to be wrong
    Botan-no-buildtime.patch - not needed anymore
    dont-set-mach-value.diff - doesn't apply, unclear and undocumented why it is there
    Botan-inttypes.patch - not required
    Botan-ull_constants.patch.bz2 - no reason anymore</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1522756800">- Update to Botan 2.5
  * Fix error in certificate wildcard matching (CVE-2018-9127), where a
    wildcard cert for b*.example.com would be accepted as a match for any host
    with name *b*.example.com (GH #1519)
  * Add support for RSA-PSS signatures in TLS (GH #1285)
  * Ed25519 certificates are now supported (GH #1501)
  * Many optimizations in ECC operations. ECDSA signatures are 8-10 times
    faster. ECDSA verification is about twice as fast. ECDH key agreement is
    3-4 times faster. (GH #1457 #1478)
  * Implement product scanning Montgomery reduction, which improves
    Diffie-Hellman and RSA performance by 10 to 20% on most platforms. (GH
    [#1472])
  * DSA signing and verification performance has improved by 30-50%.
  * Add a new Credentials_Manager callback that specifies which CAs the server
    has indicated it trusts (GH #1395 fixing #1261)
  * Add new TLS::Callbacks methods that allow creating or removing extensions,
    as well as examining extensions sent by the peer (GH #1394 #1186)
  * Add new TLS::Callbacks methods that allow an application to negotiate use
    of custom elliptic curves. (GH #1448)
  * Add ability to create custom elliptic curves (GH #1441 #1444)
  * Add support for POWER8 AES instructions (GH #1459 #1393 #1206)
  * Fix DSA/ECDSA handling of hashes longer than the group order (GH #1502
    [#986])
  * The default encoding of ECC public keys has changed from compressed to
    uncompressed point representation. This improves compatability with some
    common software packages including Golang?s standard library. (GH #1480
    [#1483])
  * It is now possible to create DNs with custom components. (GH #1490 #1492)
  * It is now possible to specify the serial number of created certificates,
    instead of using the default 128-bit random integer. (GH #1489 #1491)
  * Change DL_Group and EC_Group to store their data as shared_ptr for fast
    copying. Also both classes precompute additional useful values (eg for
    modular reductions). (GH #1435 #1454)
  * Make it possible for PKCS10 requests to include custom extensions. This
    also makes it possible to use muliple SubjectAlternativeNames of a single
    type in a request, which was previously not possible. (GH #1429 #1428)
  * Add new optimized interface for FE1 format preserving encryption. By
    caching a number of values computed in the course of the FPE calculation,
    it provides a 6-7x speedup versus the old API. (GH #1469)
  * Add DSA and ElGamal keygen functions to FFI (#1426)
  * Add Pipe::prepend_filter to replace Pipe::prepend (GH #1402)
  * Fix a memory leak in the OpenSSL block cipher integration, introduced in
  * 2.2.0
  * Use an improved algorithm for generating safe primes which is several tens
    of times faster. Also, fix a bug in the prime sieving algorithm which
    caused standard prime generation (like for RSA keys) to be slower than
    necessary. (GH #1413 #1411)
  * Correct the return value of PK_Encryptor::maximum_input_size which reported
    a much too small value (GH #1410)
  * Remove use of CPU specific optimization flags, instead the user should set
    these via CXXFLAGS if desired. (GH #1392)
  * Resolve an issue that would cause a crash in the tests if they were run on
    a machine without SSE2/NEON/VMX instructions. (GH #1495)
  * The Python module now tries to load DLLs from a list of names and uses the
    first one which successfully loads and indicates it supports the desired
    API level. (GH #1497)
  * Various minor optimizations for SHA-3 (GH #1433 #1434)
  * The output of botan --help has been improved (GH #1387)
  * Add --der-format flag to command line utils, making it possible verify
    DSA/ECDSA signatures generated by OpenSSL command line (GH #1409)
  * Add support for --library-suffix option to configure.py (GH #1405 #1404)
  * Use feature flags to enable/disable system specific code (GH #1378)
  * Add --msvc-runtime option to allow using static runtime (GH #1499 #210)
  * Add ?enable-sanitizers= option to allow specifying which sanitizers to
    enable. The existing --with-sanitizers option just enables some default set
    which is known to work with the minimum required compiler versions.
  * Use either rst2man or rst2man.py for generating man page as distributions
    differ on where this program is installed (GH #1516)
  * The threefish module has been renamed threefish_512 since that is the
    algorithm it provides. (GH #1477)
  * The Perl XS based wrapper has been removed, as it was unmaintained and
    broken. (GH #1412)
  * The sqlite3 encryption patch under contrib has been removed. It is still
    maintained by the original author at
    https://github.com/OlivierJG/botansqlite3</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1523361600">- Update to Botan 2.6
  * CVE-2018-9860 Fix a bug decrypting TLS CBC ciphertexts which could for a
    malformed ciphertext cause the decryptor to read and HMAC an additional 64K
    bytes of data which is not part of the record. This could cause a crash if
    the read went into unmapped memory. No information leak or out of bounds
    write occurs.
  * Add support for OAEP labels (GH #1508)
  * RSA signing is about 15% faster (GH #1523) and RSA verification is about 50% faster.
  * Add exponent blinding to RSA (GH #1523)
  * Add Cipher_Mode::create and AEAD_Mode::create (GH #1527)
  * Fix bug in TLS server introduced in 2.5 which caused connection to fail if
    the client offered any signature algorithm not known to the server (for
    example RSA/SHA-224).
  * Fix a bug in inline asm that would with GCC 7.3 cause incorrect
    computations and an infinite loop during the tests. (GH #1524 #1529)</changelog>
  <changelog author="kasimir_@outlook.de" date="1523534400">- fixed to build on armv6 and armv7</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1531224000">- Update to Botan 2.7
  * CVE-2018-12435 Avoid a side channel in ECDSA signature generation (GH
    [#1604])
  * Avoid a side channel in RSA key generation due to use of a non-constant
    time gcd algorithm. (GH #1542 #1556)
  * Optimize prime generation, especially improving RSA key generation. (GH
    [#1542])
  * Make Karatsuba multiplication, Montgomery field operations, Barrett
    reduction and Montgomery exponentiation const time (GH #1540 #1606 #1609
    [#1610])
  * Optimizations for elliptic curve operations especially improving reductions
    and inversions modulo NIST primes (GH #1534 #1538 #1545 #1546 #1547 #1550)
  * Add 24 word wide Comba multiplication, improving 3072-bit RSA and DH by
    ~25%. (GH #1564)
  * Unroll Montgomery reduction for specific sizes (GH #1603)
  * Improved performance of signature verification in ECGDSA, ECKCDSA, SM2 and
    GOST by 10-15%.
  * XMSS optimizations (GH #1583 #1585)
  * Fix an error that meant XMSS would only sign half as many signatures as is
    allowed (GH #1582)
  * Add support for base32 encoding/decoding (GH #1541)
  * Add BMI2 optimized version of SHA-256, 40% faster on Skylake (GH #1584)
  * Allow the year to be up to 2200 in ASN.1 time objects. Previously this was
    limited to 2100. (GH #1536)
  * Add support for Scrypt password hashing (GH #1570)
  * Add support for using Scrypt for private key encryption (GH #1574)
  * Optimizations for DES/3DES, approx 50% faster when used in certain modes
    such as CBC decrypt or CTR.
  * XMSS signature verification did not check that the signature was of the
    expected length which could lead to a crash. (GH #1537)
  * The bcrypt variants 2b and 2y are now supported.
  * Support for 192-bit Suite B TLS profile is now implemented, as the 128-bit
    Suite B is since 2015 not allowed anymore.
  * Previously botan allowed GCM to be used with an empty nonce, which is not
    allowed by the specification. Now such nonces are rejected.
  * Avoid problems on Windows when compiling in Unicode mode (GH #1615 #1616)
  * Previously for ASN.1 encoded signatures (eg ECDSA) Botan would accept any
    valid BER encoding. Now only the single valid DER encoding is accepted.
  * Correct an error that could in rare cases cause an internal error exception
    when doing computations with the P-224 curve.
  * Optimizations to reduce allocations/copies during DER encoding and BER
    decoding (GH #1571 #1572 #1600)
  * Botan generates X.509 subject key IDs by hashing the public key with
    whatever hash function is being used to sign the certificate. However
    especially for SHA-512 this caused SKIDs that were far longer than
    necessary. Now all SKIDs are truncated to 192 bits.
  * In the test suite use mkstemp to create temporary files instead of creating
    them in the current working directory. (GH #1533 #1530)
  * It is now possible to safely override CXX when invoking make in addition to
    when configure.py is run. (GH #1579)
  * OIDs for Camellia and SM4 in CBC and GCM mode are now defined, making it
    possible to use this algorithms for private key encryption.
  * Avoid creating symlinks to the shared object on OpenBSD (#1535)
  * The factor command runs much faster on larger inputs now.
  * Support for Windows Phone/UWP was deprecated starting in 2.5. This
    deprecation has been reversed as it seems UWP is still actively used. (GH
    [#1586] #1587)
  * Support for Visual C++ 2013 is deprecated, and will be removed in Jan 2019.
  * Added support for GCC?s ?sysroot option to configure.py for
    cross-compiling.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1533038400">- Fix version in baselibs.conf</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1547121600">- Update to Botan 2.9
  * Bump SONAME
  * CVE-2018-20187 Address a side channel during ECC key generation, which used an
    unblinded Montgomery ladder. As a result, a timing attack can reveal
    information about the high bits of the secret key.
  * Fix bugs in TLS which caused negotiation failures when the client used an
    unknown signature algorithm or version (GH #1711 #1709 #1708)
  * Fix bug affecting GCM, EAX and ChaCha20Poly1305 where if the associated data
    was set after starting a message, the new AD was not reflected in the produced
    tag. Now with these modes setting an AD after beginning a message throws an
    exception.
  * Use a smaller sieve which improves performance of prime generation.
  * Fixed a bug that caused ChaCha to produce incorrect output after encrypting 256
    GB. (GH #1728)
  * Add NEON and AltiVec implementations of ChaCha (GH #1719 #1728 #1729)
  * Optimize AVX2 ChaCha (GH #1730)
  * Many more operations in BigInt, ECC and RSA code paths are either fully const
    time or avoid problematic branches that could potentially be exploited in a
    side channel attack. (GH #1738 #1750 #1754 #1755 #1757 #1758 #1759 #1762 #1765
    [#1770] #1773 #1774 #1779 #1780 #1794 #1795 #1796 #1797)
  * Several optimizations for BigInt and ECC, improving ECDSA performance by as
    much as 30%. (GH #1734 #1737 #1777 #1750 #1737 #1788)
  * Support recovering an ECDSA public key from a message/signature pair (GH #664
    [#1784])
  * Add base58 encoding/decoding functions (GH #1783)
  * In the command line interface, add support for reading passphrases from the
    terminal with echo disabled (GH #1756)
  * Add CT::Mask type to simplify const-time programming (GH #1751)
  * Add new configure options --disable-bmi2, --disable-rdrand, and
  - -disable-rdseed to prevent use of those instruction sets.
  * Add error_type and error_code functions to Exception type (GH #1744)
  * Now on POSIX systems posix_memalign is used instead of mmap for allocating the
    page-locked memory pool. This avoids issues with fork. (GH #602 #1798)
  * When available, use RDRAND to generate the additional data in
    Stateful_RNG::randomize_with_ts_input
  * Use vzeroall/vzeroupper intrinsics to avoid AVX2/SSE transition penalties.
  * Support for Visual C++ 2013 has been removed (GH #1557 #1697)
  * Resolve a memory leak when verifying ECDSA signatures with versions of OpenSSL
    before 1.1.0 (GH #1698)
  * Resolve a memory leak using ECDH via OpenSSL (GH #1767)
  * Fix an error in XTS which prohibited encrypting values which were exactly the
    same length as the underlying block size. Messages of this size are allowed by
    the standard and other XTS implementations. (GH #1706)
  * Resolve a bug in TSS which resulted in it using an incorrect length field in
    the shares. Now the correct length is encoded, but either correct or buggy
    lengths are accepted when decoding. (GH #1722)
  * Correct a bug when reducing a negative BigInt modulo a small power of 2. (GH
    [#1755])
  * Add CLI utils for threshold secret splitting. (GH #1722)
  * Fix a bug introduced in 2.8.0 that caused compilation failure if using a single
    amalgamation file with AVX2 enabled. (GH #1700)
  * Add an explicit OS target for Emscripten and improve support for it. (GH #1702)
  * Fix small issues when building for QNX
  * Switch the Travis CI build to using Ubuntu 16.04 (GH #1767)
  * Add options to configure.py to disable generation of pkg-config file, and (for
    systems where pkg-config support defaults to off, like Windows), to enable
    generating it. (GH #1268)
  * Modify configure.py to accept empty lists or trailing/extra commas. (GH #1705)
- Update to Botan 2.8
  * Add support for using Apple CommonCrypto library for hashing (GH #1667),
    cipher modes (GH #1674) and block ciphers (GH #1673).
  * Support for negotiating TLS versions 1.0 and 1.1 is disabled in the default
    TLS policy. In addition, support for negotiating TLS ciphersuites using CBC
    or CCM mode is disabled by default. Applications which need to interop with
    old peers must enable these in their TLS policy object. (GH #1651)
  * During primality testing, use a Lucas test in addition to Miller-Rabin. It
    is possible to construct a composite integer which passes n Miller-Rabin
    tests with probability (1/4)^n. So for a incautious verifier using a small
    number of tests (under 16 or so) it is possible if unlikely they would
    accept such a composite as prime. Adding a Lucas test precludes such an
    attack. (GH #1636)
  * Add XChaCha and XChaCha20Poly1305 (GH #1640)
  * Add AVX2 implementations of ChaCha (GH #1662) and Serpent (GH #1660)
  * Add a new password hashing interface in pwdhash.h (GH #1670)
  * C binding improvements. Added functions to get name and supported
    keylengths of cipher, hash and MAC objects, support for FE1 format
    preserving encryption (GH #1625 #1646), functions to load and save RSA keys
    in PKCS #1 format (GH #1621), HOTP and TOTP algorithms, scrypt, certificate
    verification (GH #1647), functions to get the output length of public key
    operations (GH #1642), and functions for loading and serializing X25519
    keys (GH #1681)
  * Support for building with BOTAN_MP_WORD_BITS set to 8 or 16 has been removed.
  * Previously SM2 had two distinct key types, one for signatures and another
    for encryption. They have now been merged into a single key type since in
    practice it seems the same key is at times used for both operations. (GH
    [#1637])
  * The Cipher_Mode class now derives from SymmetricAlgorithm (GH #1639)
  * Add support for using the ARMv8 instructions for SM4 encryption (GH #1622)
  * The entropy source using SecRandomCopyBytes has been removed as it was
    redundant with other entropy sources (GH #1668)
  * The Python module has much better error checking and reporting, and offers
    new functionality such as scrypt, MPI and FPE. (GH #1643 #1646)
  * Fixed a bug that caused CCM to fail with an exception when used with L=8 (GH #1631 #1632)
  * The default bcrypt work factor has been increased from 10 to 12.
  * The default algorithm used in passhash9 has changed from SHA-256 to
    SHA-512, and the default work factor increased from 10 to 15.
  * In ECC private keys, include the public key data for compatibility with GnuTLS (GH #1634 #1635)
  * Add support for using Linux getrandom syscall to access the system PRNG.
    This is disabled by default, use --with-os-feature=getrandom to enable.
  * It is now possible to encrypt private keys using SIV mode.
  * The FFI function botan_privkey_load now ignores its rng argument.
  * Resolve a problem when building under Visual C++ 15.8 (GH #1624)
  * Fix a bug in XSalsa20 (192-bit Salsa nonces) where if set_iv was called
    twice without calling set_key, the resulting encryption was incorrect. (GH
    [#1640])
  * Handle an error seen when verifying invalid ECDSA signatures using LibreSSL
    on non x86-64 platforms (GH #1627 #1628)
  * Fix bugs in PKCS7 and X9.23 CBC padding schemes, which would ignore the
    first byte in the event the padding took up the entire block. (GH #1690)
  * Correct bugs which would cause CFB, OCB, and GCM modes to crash when they
    were used in an unkeyed state. (GH #1639)
  * Optimizations for SM4 and Poly1305
  * Avoid a cache side channel in the AES key schedule
  * Add pk_encrypt and pk_decrypt CLI operations
  * Now asn1print CLI defaults to printing context-specific fields.
  * Use codec_base for Base64, which matches how Base32 is implemented (GH #1597)
  * The cast module has been split up into cast128 and cast256 (GH #1685)
  * When building under Visual C++ 2013, the user must acknowledge the upcoming
    removal of support using the configure.py flag --ack-vc2013-deprecated (GH
    [#1557])</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1554206400">- Update to Botan 2.10
  * Bump SONAME
  * Warning: XMSS currently implements draft-06 which is not compatible with
    the final RFC 8391 specification. A PR is open to fix this, however it will
    break all current uses of XMSS. If you are currently using XMSS please
    comment at https://github.com/randombit/botan/pull/1858. Otherwise the PR
    will be merged and support for draft-06 will be removed starting in 2.11.
  * Added a new certificate store implementation that can access the MacOS
    keychain certificate store. (GH #1830)
  * Redesigned Memory_Pool class, which services allocations out of a set of
    pages locked into memory (using mlock/VirtualLock). It is now faster and
    with improved exploit mitigations. (GH #1800)
  * Add BMI2 implementations of SHA-512 and SHA-3 which improve performance by
    25-35% on common CPUs. (GH #1815)
  * Unroll SHA-3 computation improving performance by 10-12% (GH #1838)
  * Add a Thread_Pool class. It is now possible to run the tests in multiple
    threads with --test-threads=N flag to select the number of threads to use.
    Use --test-threads=0 to run with as many CPU cores as are available on the
    current system. The default remains single threaded. (GH #1819)
  * XMSS signatures now uses a global thread pool instead of spawning new
    threads for each usage. This improves signature generation performance by
    between 10% and 60% depending on architecture and core count. (GH #1864)
  * Some functions related to encoding and decoding BigInts have been
    deprecated. (GH #1817)
  * Binary encoding and decoding of BigInts has been optimized by performing
    word-size operations when possible. (GH #1817)
  * Rename the exception Integrity_Failure to Invalid_Authentication_Tag to
    make its meaning and usage more clear. The old name remains as a typedef.
    (GH #1816)
  * Support for using Boost filesystem and MSVC?s std::filesystem have been
    removed, since already POSIX and Win32 versions had to be maintained for
    portability. (GH #1814)
  * Newly generated McEliece and XMSS keys now default to being encrypted using
    SIV mode, support for which was added in 2.8.0. Previously GCM was used by
    default for these algorithms.
  * Use arc4random on Android systems (GH #1851)
  * Fix the encoding of PGP-S2K iteration counts (GH #1853 #1854)
  * Add a facility for sandboxing the command line util. Currently FreeBSD
    (Capsicum) and OpenBSD (pledge) sandboxes are supported. (GH #1808)
  * Use if constexpr when available.
  * Disable building shared libs on iOS as it was broken and it is not clear
    shared libraries are ever useful on iOS (GH #1865)
  * Renamed the darwin build target to macos. This should not cause any
    user-visible change. (GH #1866)
  * Add support for using sccache to cache the Windows CI build (GH #1807)
  * Add --extra-cxxflags option which allows adding compilation flags without
    overriding the default set. (GH #1826)
  * Add --format= option to the hash cli which allows formatting the output as
    base64 or base58, default output remains hex.
  * Add base58_enc and base58_dec cli utils for base58 encoding/decoding. (GH #1848)
  * Enable getentropy by default on macOS (GH #1862)
  * Avoid using -momit-leaf-frame-pointer flags, since -fomit-frame-pointer is
    already the default with recent versions of GCC.
  * Fix XLC sanitizer flags.
  * Rename Blake2b class to BLAKE2b to match the official name. There is a typedef for compat.
  * Fix a bug where loading a raw Ed25519_PublicKey of incorrect length would
    lead to a crash. (GH #1850)
  * Fix a bug that caused compilation problems using CryptoNG PRNG. (GH #1832)
  * Extended SHAKE-128 cipher to support any key between 1 and 160 bytes,
    instead of only multiples of 8 bytes.
  * Minor HMAC optimizations.
  * Build fixes for GNU/Hurd.
  * Fix a bug that prevented generating or verifying Ed25519 signatures in the
    CLI (GH #1828 #1829)
  * Fix a compilation error when building the amalgamation outside of the
    original source directory when AVX2 was enabled. (GH #1812)
  * Fix a crash when creating the amalgamation if a header file was edited on
    Windows but then the amalgamation was built on Linux (GH #1763)</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1586347200">- Update to Botan 2.14:
  * Add support for using POWER8+ VPSUMD instruction to accelerate GCM (GH #2247)
  * Optimize the vector permute AES implementation, especially improving
    performance on ARMv7, Aarch64, and POWER. (GH #2243)
  * Use a new algorithm for modular inversions which is both faster
    and more resistant to side channel attacks. (GH #2287 #2296 #2301)
  * Address an issue in CBC padding which would leak the length of the plaintext
    which was being padded. Unpadding during decryption was not affected.
  * Optimize NIST prime field reductions, improving ECDSA by 3-9% (GH #2295)
  * Increase the size of the ECC blinding mask and scale it based on the
    size of the group order. (GH #880 #893 #2308)
  * Add server side support for the TLS asio wrapper. (GH #2229)
  * Add support for using Windows certificate store on MinGW (GH #2280)
  * Add a CLI utility cpu_clock which estimates the speed of the processor cycle counter.
  * Add Roughtime client (GH #2143 #1842)
  * Add support for XMSS X.509 certificates (GH #2172)
  * Add support for X.509 CRLs in FFI layer and Python wrapper (GH #2213)
  * Add AVX2 implementation of SHACAL2 (GH #2196)
  * Support more functionality for X.509 in the Python API (GH #2165)
  * Add generic CPU target useful when building for some new or unusual platform.
  * Disable MD5 in BSI or NIST modes (GH #2188)
  * Many currently public headers are being deprecated. If any such header is included by
    an application, a warning is issued at compile time.
    Headers issuing this warning will be made internal in a future major release.
  * RSA signature performance improvements (GH #2068 #2070)
  * Performance improvements for GCM (GH #2024 #2099 #2119), OCB (#2122), XTS (#2123) and
    ChaCha20Poly1305 (GH #2117), especially for small messages.
  * Add support for constant time AES using NEON and AltiVec (GH #2093 #2095 #2100)
  * Improve performance of POWER8 AES instructions (GH #2096)
  * Add support for the POWER9 hardware random number generator (GH #2026)
  * Add support for 64-bit version of RDRAND, doubling performance on x86-64 (GH #934 #2022)
  * In DTLS server, support a client crashing and then reconnecting from the same
    source port, as described in RFC 6347 sec 4.2.8 (GH #2029)
  * Optimize DTLS MTU splitting to split precisely to the set MTU (GH #2042)
  * Add support for the TLS v1.3 downgrade indicator. (GH #2027)
  * Add Argon2 PBKDF and password hash (GH #459 #1981 #1987)
  * Add Bcrypt-PBKDF (GH #1990)
  * Add server side support for issuing DTLS HelloVerifyRequest messages (GH #1999)
  * Add support for the TLS v1.3 supported_versions extension. (GH #1976)
  * Add Ed25519ph compatible with RFC 8032 (GH #1699 #2000)
  * Add support for OCSP stapling on server side. (GH #1703 #1967)
  * Add a boost::asio TLS stream compatible with boost::asio::ssl. (GH #1839 #1927 #1992)
  * Add a certificate store for Linux/Unix systems. (GH #1885 #1936)
  * Various Fixes</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597579200">- update to 2.15:
  Fix a bug where the name constraint extension did not constrain the alternative
  DN field which can be included in a subject alternative name. This would allow
  a corrupted sub-CA which was otherwise constrained by a name constraint to
  issue a certificate with a prohibited DN.
  Fix a bug in the TLS server during client authentication where where if a
  (disabled by default) static RSA ciphersuite was selected, then no certificate
  request would be sent. This would have an equivalent effect to a client which
  simply replied with an empty Certificate message. (GH #2367)
  Replace the T-Tables implementation of AES with a 32-bit bitsliced version. As
  a result AES is now constant time on all processors. (GH #2346 #2348 #2353
  [#2329] #2355)
  In TLS, enforce that the key usage given in the server certificate allows the
  operation being performed in the ciphersuite. (GH #2367)
  In X.509 certificates, verify that the algorithm parameters are the expected
  NULL or empty. (GH #2367)
  Change the HMAC key schedule to attempt to reduce the information leaked from
  the key schedule with regards to the length of the key, as this is at times (as
  for example in PBKDF2) sensitive information. (GH #2362)
  Add Processor_RNG which wraps RDRAND or the POWER DARN RNG instructions. The
  previous RDRAND_RNG interface is deprecated. (GH #2352)
  The documentation claimed that mlocked pages were created with a guard page
  both before and after. However only a trailing guard page was used. Add a
  leading guard page. (GH #2334)
  Add support for generating and verifying DER-encoded ECDSA signatures in the C
  and Python interfaces. (GH #2357 #2356)
  Workaround a bug in GCC?s UbSan which triggered on a code sequence in XMSS (GH
  [#2322])
  When building documentation using Sphinx avoid parallel builds with version 3.0
  due to a bug in that version (GH #2326 #2324)
  Fix a memory leak in the CommonCrypto block cipher calls (GH #2371)
  Fix a flaky test that would occasionally fail when running the tests with a
  large number of threads. (GH #2325 #2197)
  Additional algorithms are now deprecated: XTEA, GOST, and Tiger. They will be
  removed in a future major release.</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1603800000">- Update to 2.16.0:
  * Now userspace PRNG objects (such as AutoSeeded_RNG and HMAC_DRBG)
    use an internal lock, which allows safe concurrent use. This
    however is purely a precaution in case of accidental sharing of
    such RNG objects; for performance reasons it is always preferable
    to use a RNG per thread if a userspace RNG is needed.
  * DL_Group and EC_Group objects now track if they were created
    from a known trusted group (such as P-256 or an IPsec DH
    parameter). If so, then verification tests can be relaxed, as
    compared to parameters which may have been maliciously
    constructed in order to pass primality checks.
  * RandomNumberGenerator::add_entropy_T assumed its input was a POD
    type but did not verify this.
  * Support OCSP responders that live on a non-standard port.
  * Add support for Solaris sandbox.
  * Support suffixes on release numbers for alpha/beta releases.
  * Fix a bug in EAX which allowed requesting a 0 length tag, which
    had the effect of using a full length tag. Instead omit the
    length field, or request the full tag length explicitly.
  * Fix a memory leak in GCM where if passed an unsuitable block
    cipher (eg not 128 bit) it would throw an exception and leak
    the cipher object.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1604750400">- Botan 2.17.1:
  * Fix bugs in ECDSA signature generation and verifications under
    specific circumstances
  * developer visible changes, including deprecation with warnings
  * optimization in the non-hardware assisted AES key generation
  * Add more detection logic for AVX-512 features
  * Fix a bug parsing deeply nested cipher names
  * Prevent requesting DER encoding of signatures when the
    algorithm did not support it</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1605268800">- Botan 2.17.2:
  * Fix build problem on ppc64
  * Resolve an issue in the modular square root algorithm</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1608724800">- Botan 2.17.3:
  * Harden against side-channels from decoding secret values by
    changing the base64, base58, base32, and hex encoding and
    decoding opearations to run in constant time</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1618574400">- Botan 2.18.0
  * Add support for implementing custom RNG objects through the FFI
    interface
  * Improve safegcd bounds, improving runtime performance
  * Reject non-TLS messages as quickly as possible without waiting
    for a full record.
  * Fixes for TLS::Stream::async_shutdown
- Removed unneeded GNU MP build requirement, support was dropped
  with version 1.11.10
- Enabled check target, verify integrity of build library</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1620648000">- Botan 2.18.1:
  * Fix a build regression in 2.18.0 which caused linker flags
    which contain -l within them (such as -fuse-linker-plugin)
    to be misinterpreted
  * Fix a bug which caused decoding a certificate which contained
    more than one name in a single RDN
  * Fix a bug which caused OID lookup failures when run in a locale
    which uses thousands separators (pt_BR was reported as having
    this issue)
  * DNS names in name constraints were compared with case
    sensitivity, which could cause valid certificates to be
    rejected
  * X.509 name constraint extensions were rejected if non-critical.
    RFC 5280 requires conforming CAs issue such extensions as
    critical, but not all certificates are compliant, and all other
    known implementations do not require this
  * X.509 name constraints were incorrectly applied to the
    certificate which included the constraint
- build with lzma compression support
- build with SQLite support
- build with TPM support
- fix SLE 12 build</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1637755200">- update to 2.18.2:
  * Avoid using short exponents when encrypting in ElGamal, as some PGP
    implementations generate keys with parameters that are weak when
    short exponents are used CVE-2021-40529 boo#1190244
  * Fix a low risk OAEP decryption side channel
  * Work around a miscompilation of SHA-3 caused by a bug in Clang 12
    and XCode 13
  * Remove support in OpenSSL provider for algorithms which are
    disabled by default in OpenSSL 3.0
  * Add CI based on GitHub actions to replace Travis CI
  * Fix the online OCSP test, as the certificate involved had expired.
  * Fix some test failures induced by the expiration of the trust root
    "DST Root CA X3"</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1668686400">- Fixed [CVE-2022-43705,bsc#1205509]
  * Added Botan-CVE-2022-43705.patch
  * Added Botan-CVE-2022-43705-certs.tgz
  * validate that an embedded certificate was issued by the end-entity
    issuing certificate authority when checking OCSP responses.</changelog>
</package>
<package pkgid="6698bca2b68fa1831c2de564a2f5a06e0971d37f4786cabae21030d1d485752b" name="libbotan-devel-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="2.18.2" rel="bp154.2.3.1"/>
  <changelog author="adam.majer@suse.de" date="1518436800">- Don't drop -fstack-clash-protection for openSUSE 42.3 - we just
  need the Update repository present.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1518609600">- change group of libbotan-%{version_suffix} to 'System/Libraries' as
  requested on review</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1518782400">- drop explicit package requirements
- split binary package and documentation from dynamic library package
  and make documentation package noarch
- merge back Botan2 package to Botan with changelog history
- drop Botan patches
    aarch64-support.patch - doesn't seem to be required anymore
    Botan-fix_install_paths.patch - doesn't seem to be required
    no-cpuid-header.patch - SLE11 not target anymore
    Botan-fix_pkgconfig.patch - this seem to be wrong
    Botan-no-buildtime.patch - not needed anymore
    dont-set-mach-value.diff - doesn't apply, unclear and undocumented why it is there
    Botan-inttypes.patch - not required
    Botan-ull_constants.patch.bz2 - no reason anymore</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1522756800">- Update to Botan 2.5
  * Fix error in certificate wildcard matching (CVE-2018-9127), where a
    wildcard cert for b*.example.com would be accepted as a match for any host
    with name *b*.example.com (GH #1519)
  * Add support for RSA-PSS signatures in TLS (GH #1285)
  * Ed25519 certificates are now supported (GH #1501)
  * Many optimizations in ECC operations. ECDSA signatures are 8-10 times
    faster. ECDSA verification is about twice as fast. ECDH key agreement is
    3-4 times faster. (GH #1457 #1478)
  * Implement product scanning Montgomery reduction, which improves
    Diffie-Hellman and RSA performance by 10 to 20% on most platforms. (GH
    [#1472])
  * DSA signing and verification performance has improved by 30-50%.
  * Add a new Credentials_Manager callback that specifies which CAs the server
    has indicated it trusts (GH #1395 fixing #1261)
  * Add new TLS::Callbacks methods that allow creating or removing extensions,
    as well as examining extensions sent by the peer (GH #1394 #1186)
  * Add new TLS::Callbacks methods that allow an application to negotiate use
    of custom elliptic curves. (GH #1448)
  * Add ability to create custom elliptic curves (GH #1441 #1444)
  * Add support for POWER8 AES instructions (GH #1459 #1393 #1206)
  * Fix DSA/ECDSA handling of hashes longer than the group order (GH #1502
    [#986])
  * The default encoding of ECC public keys has changed from compressed to
    uncompressed point representation. This improves compatability with some
    common software packages including Golang?s standard library. (GH #1480
    [#1483])
  * It is now possible to create DNs with custom components. (GH #1490 #1492)
  * It is now possible to specify the serial number of created certificates,
    instead of using the default 128-bit random integer. (GH #1489 #1491)
  * Change DL_Group and EC_Group to store their data as shared_ptr for fast
    copying. Also both classes precompute additional useful values (eg for
    modular reductions). (GH #1435 #1454)
  * Make it possible for PKCS10 requests to include custom extensions. This
    also makes it possible to use muliple SubjectAlternativeNames of a single
    type in a request, which was previously not possible. (GH #1429 #1428)
  * Add new optimized interface for FE1 format preserving encryption. By
    caching a number of values computed in the course of the FPE calculation,
    it provides a 6-7x speedup versus the old API. (GH #1469)
  * Add DSA and ElGamal keygen functions to FFI (#1426)
  * Add Pipe::prepend_filter to replace Pipe::prepend (GH #1402)
  * Fix a memory leak in the OpenSSL block cipher integration, introduced in
  * 2.2.0
  * Use an improved algorithm for generating safe primes which is several tens
    of times faster. Also, fix a bug in the prime sieving algorithm which
    caused standard prime generation (like for RSA keys) to be slower than
    necessary. (GH #1413 #1411)
  * Correct the return value of PK_Encryptor::maximum_input_size which reported
    a much too small value (GH #1410)
  * Remove use of CPU specific optimization flags, instead the user should set
    these via CXXFLAGS if desired. (GH #1392)
  * Resolve an issue that would cause a crash in the tests if they were run on
    a machine without SSE2/NEON/VMX instructions. (GH #1495)
  * The Python module now tries to load DLLs from a list of names and uses the
    first one which successfully loads and indicates it supports the desired
    API level. (GH #1497)
  * Various minor optimizations for SHA-3 (GH #1433 #1434)
  * The output of botan --help has been improved (GH #1387)
  * Add --der-format flag to command line utils, making it possible verify
    DSA/ECDSA signatures generated by OpenSSL command line (GH #1409)
  * Add support for --library-suffix option to configure.py (GH #1405 #1404)
  * Use feature flags to enable/disable system specific code (GH #1378)
  * Add --msvc-runtime option to allow using static runtime (GH #1499 #210)
  * Add ?enable-sanitizers= option to allow specifying which sanitizers to
    enable. The existing --with-sanitizers option just enables some default set
    which is known to work with the minimum required compiler versions.
  * Use either rst2man or rst2man.py for generating man page as distributions
    differ on where this program is installed (GH #1516)
  * The threefish module has been renamed threefish_512 since that is the
    algorithm it provides. (GH #1477)
  * The Perl XS based wrapper has been removed, as it was unmaintained and
    broken. (GH #1412)
  * The sqlite3 encryption patch under contrib has been removed. It is still
    maintained by the original author at
    https://github.com/OlivierJG/botansqlite3</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1523361600">- Update to Botan 2.6
  * CVE-2018-9860 Fix a bug decrypting TLS CBC ciphertexts which could for a
    malformed ciphertext cause the decryptor to read and HMAC an additional 64K
    bytes of data which is not part of the record. This could cause a crash if
    the read went into unmapped memory. No information leak or out of bounds
    write occurs.
  * Add support for OAEP labels (GH #1508)
  * RSA signing is about 15% faster (GH #1523) and RSA verification is about 50% faster.
  * Add exponent blinding to RSA (GH #1523)
  * Add Cipher_Mode::create and AEAD_Mode::create (GH #1527)
  * Fix bug in TLS server introduced in 2.5 which caused connection to fail if
    the client offered any signature algorithm not known to the server (for
    example RSA/SHA-224).
  * Fix a bug in inline asm that would with GCC 7.3 cause incorrect
    computations and an infinite loop during the tests. (GH #1524 #1529)</changelog>
  <changelog author="kasimir_@outlook.de" date="1523534400">- fixed to build on armv6 and armv7</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1531224000">- Update to Botan 2.7
  * CVE-2018-12435 Avoid a side channel in ECDSA signature generation (GH
    [#1604])
  * Avoid a side channel in RSA key generation due to use of a non-constant
    time gcd algorithm. (GH #1542 #1556)
  * Optimize prime generation, especially improving RSA key generation. (GH
    [#1542])
  * Make Karatsuba multiplication, Montgomery field operations, Barrett
    reduction and Montgomery exponentiation const time (GH #1540 #1606 #1609
    [#1610])
  * Optimizations for elliptic curve operations especially improving reductions
    and inversions modulo NIST primes (GH #1534 #1538 #1545 #1546 #1547 #1550)
  * Add 24 word wide Comba multiplication, improving 3072-bit RSA and DH by
    ~25%. (GH #1564)
  * Unroll Montgomery reduction for specific sizes (GH #1603)
  * Improved performance of signature verification in ECGDSA, ECKCDSA, SM2 and
    GOST by 10-15%.
  * XMSS optimizations (GH #1583 #1585)
  * Fix an error that meant XMSS would only sign half as many signatures as is
    allowed (GH #1582)
  * Add support for base32 encoding/decoding (GH #1541)
  * Add BMI2 optimized version of SHA-256, 40% faster on Skylake (GH #1584)
  * Allow the year to be up to 2200 in ASN.1 time objects. Previously this was
    limited to 2100. (GH #1536)
  * Add support for Scrypt password hashing (GH #1570)
  * Add support for using Scrypt for private key encryption (GH #1574)
  * Optimizations for DES/3DES, approx 50% faster when used in certain modes
    such as CBC decrypt or CTR.
  * XMSS signature verification did not check that the signature was of the
    expected length which could lead to a crash. (GH #1537)
  * The bcrypt variants 2b and 2y are now supported.
  * Support for 192-bit Suite B TLS profile is now implemented, as the 128-bit
    Suite B is since 2015 not allowed anymore.
  * Previously botan allowed GCM to be used with an empty nonce, which is not
    allowed by the specification. Now such nonces are rejected.
  * Avoid problems on Windows when compiling in Unicode mode (GH #1615 #1616)
  * Previously for ASN.1 encoded signatures (eg ECDSA) Botan would accept any
    valid BER encoding. Now only the single valid DER encoding is accepted.
  * Correct an error that could in rare cases cause an internal error exception
    when doing computations with the P-224 curve.
  * Optimizations to reduce allocations/copies during DER encoding and BER
    decoding (GH #1571 #1572 #1600)
  * Botan generates X.509 subject key IDs by hashing the public key with
    whatever hash function is being used to sign the certificate. However
    especially for SHA-512 this caused SKIDs that were far longer than
    necessary. Now all SKIDs are truncated to 192 bits.
  * In the test suite use mkstemp to create temporary files instead of creating
    them in the current working directory. (GH #1533 #1530)
  * It is now possible to safely override CXX when invoking make in addition to
    when configure.py is run. (GH #1579)
  * OIDs for Camellia and SM4 in CBC and GCM mode are now defined, making it
    possible to use this algorithms for private key encryption.
  * Avoid creating symlinks to the shared object on OpenBSD (#1535)
  * The factor command runs much faster on larger inputs now.
  * Support for Windows Phone/UWP was deprecated starting in 2.5. This
    deprecation has been reversed as it seems UWP is still actively used. (GH
    [#1586] #1587)
  * Support for Visual C++ 2013 is deprecated, and will be removed in Jan 2019.
  * Added support for GCC?s ?sysroot option to configure.py for
    cross-compiling.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1533038400">- Fix version in baselibs.conf</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1547121600">- Update to Botan 2.9
  * Bump SONAME
  * CVE-2018-20187 Address a side channel during ECC key generation, which used an
    unblinded Montgomery ladder. As a result, a timing attack can reveal
    information about the high bits of the secret key.
  * Fix bugs in TLS which caused negotiation failures when the client used an
    unknown signature algorithm or version (GH #1711 #1709 #1708)
  * Fix bug affecting GCM, EAX and ChaCha20Poly1305 where if the associated data
    was set after starting a message, the new AD was not reflected in the produced
    tag. Now with these modes setting an AD after beginning a message throws an
    exception.
  * Use a smaller sieve which improves performance of prime generation.
  * Fixed a bug that caused ChaCha to produce incorrect output after encrypting 256
    GB. (GH #1728)
  * Add NEON and AltiVec implementations of ChaCha (GH #1719 #1728 #1729)
  * Optimize AVX2 ChaCha (GH #1730)
  * Many more operations in BigInt, ECC and RSA code paths are either fully const
    time or avoid problematic branches that could potentially be exploited in a
    side channel attack. (GH #1738 #1750 #1754 #1755 #1757 #1758 #1759 #1762 #1765
    [#1770] #1773 #1774 #1779 #1780 #1794 #1795 #1796 #1797)
  * Several optimizations for BigInt and ECC, improving ECDSA performance by as
    much as 30%. (GH #1734 #1737 #1777 #1750 #1737 #1788)
  * Support recovering an ECDSA public key from a message/signature pair (GH #664
    [#1784])
  * Add base58 encoding/decoding functions (GH #1783)
  * In the command line interface, add support for reading passphrases from the
    terminal with echo disabled (GH #1756)
  * Add CT::Mask type to simplify const-time programming (GH #1751)
  * Add new configure options --disable-bmi2, --disable-rdrand, and
  - -disable-rdseed to prevent use of those instruction sets.
  * Add error_type and error_code functions to Exception type (GH #1744)
  * Now on POSIX systems posix_memalign is used instead of mmap for allocating the
    page-locked memory pool. This avoids issues with fork. (GH #602 #1798)
  * When available, use RDRAND to generate the additional data in
    Stateful_RNG::randomize_with_ts_input
  * Use vzeroall/vzeroupper intrinsics to avoid AVX2/SSE transition penalties.
  * Support for Visual C++ 2013 has been removed (GH #1557 #1697)
  * Resolve a memory leak when verifying ECDSA signatures with versions of OpenSSL
    before 1.1.0 (GH #1698)
  * Resolve a memory leak using ECDH via OpenSSL (GH #1767)
  * Fix an error in XTS which prohibited encrypting values which were exactly the
    same length as the underlying block size. Messages of this size are allowed by
    the standard and other XTS implementations. (GH #1706)
  * Resolve a bug in TSS which resulted in it using an incorrect length field in
    the shares. Now the correct length is encoded, but either correct or buggy
    lengths are accepted when decoding. (GH #1722)
  * Correct a bug when reducing a negative BigInt modulo a small power of 2. (GH
    [#1755])
  * Add CLI utils for threshold secret splitting. (GH #1722)
  * Fix a bug introduced in 2.8.0 that caused compilation failure if using a single
    amalgamation file with AVX2 enabled. (GH #1700)
  * Add an explicit OS target for Emscripten and improve support for it. (GH #1702)
  * Fix small issues when building for QNX
  * Switch the Travis CI build to using Ubuntu 16.04 (GH #1767)
  * Add options to configure.py to disable generation of pkg-config file, and (for
    systems where pkg-config support defaults to off, like Windows), to enable
    generating it. (GH #1268)
  * Modify configure.py to accept empty lists or trailing/extra commas. (GH #1705)
- Update to Botan 2.8
  * Add support for using Apple CommonCrypto library for hashing (GH #1667),
    cipher modes (GH #1674) and block ciphers (GH #1673).
  * Support for negotiating TLS versions 1.0 and 1.1 is disabled in the default
    TLS policy. In addition, support for negotiating TLS ciphersuites using CBC
    or CCM mode is disabled by default. Applications which need to interop with
    old peers must enable these in their TLS policy object. (GH #1651)
  * During primality testing, use a Lucas test in addition to Miller-Rabin. It
    is possible to construct a composite integer which passes n Miller-Rabin
    tests with probability (1/4)^n. So for a incautious verifier using a small
    number of tests (under 16 or so) it is possible if unlikely they would
    accept such a composite as prime. Adding a Lucas test precludes such an
    attack. (GH #1636)
  * Add XChaCha and XChaCha20Poly1305 (GH #1640)
  * Add AVX2 implementations of ChaCha (GH #1662) and Serpent (GH #1660)
  * Add a new password hashing interface in pwdhash.h (GH #1670)
  * C binding improvements. Added functions to get name and supported
    keylengths of cipher, hash and MAC objects, support for FE1 format
    preserving encryption (GH #1625 #1646), functions to load and save RSA keys
    in PKCS #1 format (GH #1621), HOTP and TOTP algorithms, scrypt, certificate
    verification (GH #1647), functions to get the output length of public key
    operations (GH #1642), and functions for loading and serializing X25519
    keys (GH #1681)
  * Support for building with BOTAN_MP_WORD_BITS set to 8 or 16 has been removed.
  * Previously SM2 had two distinct key types, one for signatures and another
    for encryption. They have now been merged into a single key type since in
    practice it seems the same key is at times used for both operations. (GH
    [#1637])
  * The Cipher_Mode class now derives from SymmetricAlgorithm (GH #1639)
  * Add support for using the ARMv8 instructions for SM4 encryption (GH #1622)
  * The entropy source using SecRandomCopyBytes has been removed as it was
    redundant with other entropy sources (GH #1668)
  * The Python module has much better error checking and reporting, and offers
    new functionality such as scrypt, MPI and FPE. (GH #1643 #1646)
  * Fixed a bug that caused CCM to fail with an exception when used with L=8 (GH #1631 #1632)
  * The default bcrypt work factor has been increased from 10 to 12.
  * The default algorithm used in passhash9 has changed from SHA-256 to
    SHA-512, and the default work factor increased from 10 to 15.
  * In ECC private keys, include the public key data for compatibility with GnuTLS (GH #1634 #1635)
  * Add support for using Linux getrandom syscall to access the system PRNG.
    This is disabled by default, use --with-os-feature=getrandom to enable.
  * It is now possible to encrypt private keys using SIV mode.
  * The FFI function botan_privkey_load now ignores its rng argument.
  * Resolve a problem when building under Visual C++ 15.8 (GH #1624)
  * Fix a bug in XSalsa20 (192-bit Salsa nonces) where if set_iv was called
    twice without calling set_key, the resulting encryption was incorrect. (GH
    [#1640])
  * Handle an error seen when verifying invalid ECDSA signatures using LibreSSL
    on non x86-64 platforms (GH #1627 #1628)
  * Fix bugs in PKCS7 and X9.23 CBC padding schemes, which would ignore the
    first byte in the event the padding took up the entire block. (GH #1690)
  * Correct bugs which would cause CFB, OCB, and GCM modes to crash when they
    were used in an unkeyed state. (GH #1639)
  * Optimizations for SM4 and Poly1305
  * Avoid a cache side channel in the AES key schedule
  * Add pk_encrypt and pk_decrypt CLI operations
  * Now asn1print CLI defaults to printing context-specific fields.
  * Use codec_base for Base64, which matches how Base32 is implemented (GH #1597)
  * The cast module has been split up into cast128 and cast256 (GH #1685)
  * When building under Visual C++ 2013, the user must acknowledge the upcoming
    removal of support using the configure.py flag --ack-vc2013-deprecated (GH
    [#1557])</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1554206400">- Update to Botan 2.10
  * Bump SONAME
  * Warning: XMSS currently implements draft-06 which is not compatible with
    the final RFC 8391 specification. A PR is open to fix this, however it will
    break all current uses of XMSS. If you are currently using XMSS please
    comment at https://github.com/randombit/botan/pull/1858. Otherwise the PR
    will be merged and support for draft-06 will be removed starting in 2.11.
  * Added a new certificate store implementation that can access the MacOS
    keychain certificate store. (GH #1830)
  * Redesigned Memory_Pool class, which services allocations out of a set of
    pages locked into memory (using mlock/VirtualLock). It is now faster and
    with improved exploit mitigations. (GH #1800)
  * Add BMI2 implementations of SHA-512 and SHA-3 which improve performance by
    25-35% on common CPUs. (GH #1815)
  * Unroll SHA-3 computation improving performance by 10-12% (GH #1838)
  * Add a Thread_Pool class. It is now possible to run the tests in multiple
    threads with --test-threads=N flag to select the number of threads to use.
    Use --test-threads=0 to run with as many CPU cores as are available on the
    current system. The default remains single threaded. (GH #1819)
  * XMSS signatures now uses a global thread pool instead of spawning new
    threads for each usage. This improves signature generation performance by
    between 10% and 60% depending on architecture and core count. (GH #1864)
  * Some functions related to encoding and decoding BigInts have been
    deprecated. (GH #1817)
  * Binary encoding and decoding of BigInts has been optimized by performing
    word-size operations when possible. (GH #1817)
  * Rename the exception Integrity_Failure to Invalid_Authentication_Tag to
    make its meaning and usage more clear. The old name remains as a typedef.
    (GH #1816)
  * Support for using Boost filesystem and MSVC?s std::filesystem have been
    removed, since already POSIX and Win32 versions had to be maintained for
    portability. (GH #1814)
  * Newly generated McEliece and XMSS keys now default to being encrypted using
    SIV mode, support for which was added in 2.8.0. Previously GCM was used by
    default for these algorithms.
  * Use arc4random on Android systems (GH #1851)
  * Fix the encoding of PGP-S2K iteration counts (GH #1853 #1854)
  * Add a facility for sandboxing the command line util. Currently FreeBSD
    (Capsicum) and OpenBSD (pledge) sandboxes are supported. (GH #1808)
  * Use if constexpr when available.
  * Disable building shared libs on iOS as it was broken and it is not clear
    shared libraries are ever useful on iOS (GH #1865)
  * Renamed the darwin build target to macos. This should not cause any
    user-visible change. (GH #1866)
  * Add support for using sccache to cache the Windows CI build (GH #1807)
  * Add --extra-cxxflags option which allows adding compilation flags without
    overriding the default set. (GH #1826)
  * Add --format= option to the hash cli which allows formatting the output as
    base64 or base58, default output remains hex.
  * Add base58_enc and base58_dec cli utils for base58 encoding/decoding. (GH #1848)
  * Enable getentropy by default on macOS (GH #1862)
  * Avoid using -momit-leaf-frame-pointer flags, since -fomit-frame-pointer is
    already the default with recent versions of GCC.
  * Fix XLC sanitizer flags.
  * Rename Blake2b class to BLAKE2b to match the official name. There is a typedef for compat.
  * Fix a bug where loading a raw Ed25519_PublicKey of incorrect length would
    lead to a crash. (GH #1850)
  * Fix a bug that caused compilation problems using CryptoNG PRNG. (GH #1832)
  * Extended SHAKE-128 cipher to support any key between 1 and 160 bytes,
    instead of only multiples of 8 bytes.
  * Minor HMAC optimizations.
  * Build fixes for GNU/Hurd.
  * Fix a bug that prevented generating or verifying Ed25519 signatures in the
    CLI (GH #1828 #1829)
  * Fix a compilation error when building the amalgamation outside of the
    original source directory when AVX2 was enabled. (GH #1812)
  * Fix a crash when creating the amalgamation if a header file was edited on
    Windows but then the amalgamation was built on Linux (GH #1763)</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1586347200">- Update to Botan 2.14:
  * Add support for using POWER8+ VPSUMD instruction to accelerate GCM (GH #2247)
  * Optimize the vector permute AES implementation, especially improving
    performance on ARMv7, Aarch64, and POWER. (GH #2243)
  * Use a new algorithm for modular inversions which is both faster
    and more resistant to side channel attacks. (GH #2287 #2296 #2301)
  * Address an issue in CBC padding which would leak the length of the plaintext
    which was being padded. Unpadding during decryption was not affected.
  * Optimize NIST prime field reductions, improving ECDSA by 3-9% (GH #2295)
  * Increase the size of the ECC blinding mask and scale it based on the
    size of the group order. (GH #880 #893 #2308)
  * Add server side support for the TLS asio wrapper. (GH #2229)
  * Add support for using Windows certificate store on MinGW (GH #2280)
  * Add a CLI utility cpu_clock which estimates the speed of the processor cycle counter.
  * Add Roughtime client (GH #2143 #1842)
  * Add support for XMSS X.509 certificates (GH #2172)
  * Add support for X.509 CRLs in FFI layer and Python wrapper (GH #2213)
  * Add AVX2 implementation of SHACAL2 (GH #2196)
  * Support more functionality for X.509 in the Python API (GH #2165)
  * Add generic CPU target useful when building for some new or unusual platform.
  * Disable MD5 in BSI or NIST modes (GH #2188)
  * Many currently public headers are being deprecated. If any such header is included by
    an application, a warning is issued at compile time.
    Headers issuing this warning will be made internal in a future major release.
  * RSA signature performance improvements (GH #2068 #2070)
  * Performance improvements for GCM (GH #2024 #2099 #2119), OCB (#2122), XTS (#2123) and
    ChaCha20Poly1305 (GH #2117), especially for small messages.
  * Add support for constant time AES using NEON and AltiVec (GH #2093 #2095 #2100)
  * Improve performance of POWER8 AES instructions (GH #2096)
  * Add support for the POWER9 hardware random number generator (GH #2026)
  * Add support for 64-bit version of RDRAND, doubling performance on x86-64 (GH #934 #2022)
  * In DTLS server, support a client crashing and then reconnecting from the same
    source port, as described in RFC 6347 sec 4.2.8 (GH #2029)
  * Optimize DTLS MTU splitting to split precisely to the set MTU (GH #2042)
  * Add support for the TLS v1.3 downgrade indicator. (GH #2027)
  * Add Argon2 PBKDF and password hash (GH #459 #1981 #1987)
  * Add Bcrypt-PBKDF (GH #1990)
  * Add server side support for issuing DTLS HelloVerifyRequest messages (GH #1999)
  * Add support for the TLS v1.3 supported_versions extension. (GH #1976)
  * Add Ed25519ph compatible with RFC 8032 (GH #1699 #2000)
  * Add support for OCSP stapling on server side. (GH #1703 #1967)
  * Add a boost::asio TLS stream compatible with boost::asio::ssl. (GH #1839 #1927 #1992)
  * Add a certificate store for Linux/Unix systems. (GH #1885 #1936)
  * Various Fixes</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597579200">- update to 2.15:
  Fix a bug where the name constraint extension did not constrain the alternative
  DN field which can be included in a subject alternative name. This would allow
  a corrupted sub-CA which was otherwise constrained by a name constraint to
  issue a certificate with a prohibited DN.
  Fix a bug in the TLS server during client authentication where where if a
  (disabled by default) static RSA ciphersuite was selected, then no certificate
  request would be sent. This would have an equivalent effect to a client which
  simply replied with an empty Certificate message. (GH #2367)
  Replace the T-Tables implementation of AES with a 32-bit bitsliced version. As
  a result AES is now constant time on all processors. (GH #2346 #2348 #2353
  [#2329] #2355)
  In TLS, enforce that the key usage given in the server certificate allows the
  operation being performed in the ciphersuite. (GH #2367)
  In X.509 certificates, verify that the algorithm parameters are the expected
  NULL or empty. (GH #2367)
  Change the HMAC key schedule to attempt to reduce the information leaked from
  the key schedule with regards to the length of the key, as this is at times (as
  for example in PBKDF2) sensitive information. (GH #2362)
  Add Processor_RNG which wraps RDRAND or the POWER DARN RNG instructions. The
  previous RDRAND_RNG interface is deprecated. (GH #2352)
  The documentation claimed that mlocked pages were created with a guard page
  both before and after. However only a trailing guard page was used. Add a
  leading guard page. (GH #2334)
  Add support for generating and verifying DER-encoded ECDSA signatures in the C
  and Python interfaces. (GH #2357 #2356)
  Workaround a bug in GCC?s UbSan which triggered on a code sequence in XMSS (GH
  [#2322])
  When building documentation using Sphinx avoid parallel builds with version 3.0
  due to a bug in that version (GH #2326 #2324)
  Fix a memory leak in the CommonCrypto block cipher calls (GH #2371)
  Fix a flaky test that would occasionally fail when running the tests with a
  large number of threads. (GH #2325 #2197)
  Additional algorithms are now deprecated: XTEA, GOST, and Tiger. They will be
  removed in a future major release.</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1603800000">- Update to 2.16.0:
  * Now userspace PRNG objects (such as AutoSeeded_RNG and HMAC_DRBG)
    use an internal lock, which allows safe concurrent use. This
    however is purely a precaution in case of accidental sharing of
    such RNG objects; for performance reasons it is always preferable
    to use a RNG per thread if a userspace RNG is needed.
  * DL_Group and EC_Group objects now track if they were created
    from a known trusted group (such as P-256 or an IPsec DH
    parameter). If so, then verification tests can be relaxed, as
    compared to parameters which may have been maliciously
    constructed in order to pass primality checks.
  * RandomNumberGenerator::add_entropy_T assumed its input was a POD
    type but did not verify this.
  * Support OCSP responders that live on a non-standard port.
  * Add support for Solaris sandbox.
  * Support suffixes on release numbers for alpha/beta releases.
  * Fix a bug in EAX which allowed requesting a 0 length tag, which
    had the effect of using a full length tag. Instead omit the
    length field, or request the full tag length explicitly.
  * Fix a memory leak in GCM where if passed an unsuitable block
    cipher (eg not 128 bit) it would throw an exception and leak
    the cipher object.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1604750400">- Botan 2.17.1:
  * Fix bugs in ECDSA signature generation and verifications under
    specific circumstances
  * developer visible changes, including deprecation with warnings
  * optimization in the non-hardware assisted AES key generation
  * Add more detection logic for AVX-512 features
  * Fix a bug parsing deeply nested cipher names
  * Prevent requesting DER encoding of signatures when the
    algorithm did not support it</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1605268800">- Botan 2.17.2:
  * Fix build problem on ppc64
  * Resolve an issue in the modular square root algorithm</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1608724800">- Botan 2.17.3:
  * Harden against side-channels from decoding secret values by
    changing the base64, base58, base32, and hex encoding and
    decoding opearations to run in constant time</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1618574400">- Botan 2.18.0
  * Add support for implementing custom RNG objects through the FFI
    interface
  * Improve safegcd bounds, improving runtime performance
  * Reject non-TLS messages as quickly as possible without waiting
    for a full record.
  * Fixes for TLS::Stream::async_shutdown
- Removed unneeded GNU MP build requirement, support was dropped
  with version 1.11.10
- Enabled check target, verify integrity of build library</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1620648000">- Botan 2.18.1:
  * Fix a build regression in 2.18.0 which caused linker flags
    which contain -l within them (such as -fuse-linker-plugin)
    to be misinterpreted
  * Fix a bug which caused decoding a certificate which contained
    more than one name in a single RDN
  * Fix a bug which caused OID lookup failures when run in a locale
    which uses thousands separators (pt_BR was reported as having
    this issue)
  * DNS names in name constraints were compared with case
    sensitivity, which could cause valid certificates to be
    rejected
  * X.509 name constraint extensions were rejected if non-critical.
    RFC 5280 requires conforming CAs issue such extensions as
    critical, but not all certificates are compliant, and all other
    known implementations do not require this
  * X.509 name constraints were incorrectly applied to the
    certificate which included the constraint
- build with lzma compression support
- build with SQLite support
- build with TPM support
- fix SLE 12 build</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1637755200">- update to 2.18.2:
  * Avoid using short exponents when encrypting in ElGamal, as some PGP
    implementations generate keys with parameters that are weak when
    short exponents are used CVE-2021-40529 boo#1190244
  * Fix a low risk OAEP decryption side channel
  * Work around a miscompilation of SHA-3 caused by a bug in Clang 12
    and XCode 13
  * Remove support in OpenSSL provider for algorithms which are
    disabled by default in OpenSSL 3.0
  * Add CI based on GitHub actions to replace Travis CI
  * Fix the online OCSP test, as the certificate involved had expired.
  * Fix some test failures induced by the expiration of the trust root
    "DST Root CA X3"</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1668686400">- Fixed [CVE-2022-43705,bsc#1205509]
  * Added Botan-CVE-2022-43705.patch
  * Added Botan-CVE-2022-43705-certs.tgz
  * validate that an embedded certificate was issued by the end-entity
    issuing certificate authority when checking OCSP responses.</changelog>
</package>
<package pkgid="5e04ddd26bd0b743e87e30ffd677a41e3b82d6127d53fc7d87a8b61d96e9bcd5" name="libchafa0" arch="aarch64">
  <version epoch="0" ver="1.8.0" rel="bp154.3.3.1"/>
  <changelog author="mvetter@suse.com" date="1549627200">- Initial package chafa 1.0.1 for openSUSE</changelog>
  <changelog author="mvetter@suse.com" date="1565006400">- Update to 1.2.0:
  * Added --dither, --dither-grain and --dither-intensity options.
    These allow for sub-cell dithering in quantized modes (none,
    2, 16, 240 and 256). Especially beneficial when used with
  - p off.
  * Added API for ordered and diffusion-based dithering in quantization.
  * Added API support for multiple 8bpc pixel modes: RGB, BGR, RGBA,
    BGRA, ARGB, ABGR with either premultiplied or unassociated alpha channels.
  * Smooth scaling is now done internally, meaning libchafa
    consumers no longer need to prescale images.
  * Implemented a machine learning tool that can generate custom
    fonts for efficient image reproduction from a provided dataset.
    This is left uninstalled since it's still experimental
  * Throughput improvements:
    + GIF animations now start playing instantly.
    + GIF CPU overhead reduced by 75%, peak memory use down 95%-99% (!).
    + XWD common case CPU overhead down 60-70%, peak memory down 70%.
    + Additional halving of CPU overhead in 240- and 256-color modes.
    + Streamlined pixel pipeline for better parallelization.
  * Installation instructions:
    + New: Guix (Guy Fleury Iteriteka).
    + New: openSUSE (@jubalh).
  * Bug fixes:
    + [unfiled] Certain SVGs had transparency replaced with a white background (nemo).
    + [unfiled] -lm dependency belongs in libchafa, not frontend.</changelog>
  <changelog author="mvetter@suse.com" date="1566302400">- Update to 1.2.1:
  * Detect kitty and mlterm virtual terminals and apply optimal
    defaults accordingly
  * Make Automake build more strict and fix a few compatibility nits
  * Fix #30 - Failed to build on hurd-i386
  * Fix crash on certain broken GIFs</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566648000">- Update descriptions.
- Avoid double-shipping documentation, and make docs noarch.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1583323200">- Update to 1.2.2:
  * Fix #34 Cannot compile example</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1585828800">- Update to 1.4.0:
  * Added sixel graphics support. Chafa will automatically produce sixels
    if the connected terminal supports it. It can also be forced using the
    new -f or --format flag. This is a new implementation written from the
    ground up to maximize throughput.
  * Added the --glyph-file option, which loads glyph-symbol mappings from
    any file format supported by FreeType (TTF, PCF, etc). This allows for
    custom font support and improved symbol selection.
  * Added the --speed option specifying animation speed. It accepts a
    unitless multiplier, a specific number of frames per second, or max
    for maximum throughput.
  * There are now two ways to assign colors to symbol cells. Formerly,
    this was done based on the average color of the covered area. The new
    default is to use the median color, which produces sharper edges,
    but is slightly more prone to high-frequency noise. The new option
  - -color-extractor selects the method to employ.
  * When displaying multiple files, the default delay between files has
    been changed from three seconds to zero. Animations will still play
    through once. This can be overridden on the chafa command line with -d
    or --duration.
  * Minor tweaks to built-in symbols.
  Performance improvements:
  * Halved pixel storage requirements from 64 bits to 32 bits,
    resulting in significant memory savings.
  * Now builds with -ffast-math, yielding a big speedup for DIN99d.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1586692800">- Update to 1.4.1:
  * Added configure option --disable-rpath. This allows packagers to
    prevent the hard-coded library search path from being embedded in
    the chafa command-line tool (Mo Zhou, #39).
  * Added defaults for the yaft terminal.
  Bug fixes:
  * #40 - Fails to build on hurd-i386 + other i386 (reported by Mo
    Zhou).
  * [unfiled] - Rare failed assert with mostly transparent sixel image
    (reported by Reddit user spryfigure).
  * [unfiled] - Minor typo in function docstring.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1610712000">- Update to 1.6.0:
  * Added support for fullwidth symbols that take up two character
    cells. These are common in East Asian scripts. Single-cell and
    double-cell symbols can be mixed, and -f symbols mode will use
    both if possible.
  * New symbol tags: alpha, digit, alnum, narrow, wide, ambiguous,
    ugly, bad. "Ambiguous" symbols have uncertain widths and may
    render poorly in some terminals. "Ugly" denotes symbols that
    are unsuitable for Chafa's cell-based graphics (multicolor
    emoji, ideographic descriptors, etc). "Bad" is a superset of
    these two categories. Bad symbols are always excluded unless
    explicitly enabled with e.g. CHAFA_SYMBOL_TAG_BAD (--symbols
    +bad in the frontend).
  * The font loader (--glyph-file option) now does a better job
    with proportional fonts.
  * Added options for controlling lossless optimization of output.
    Currently, attribute reuse and character repetition (REP
    sequence) are implemented.
  * Added -O option to the frontend. This controls the optimization
    level.
  * Added a simple abstraction layer for terminal control sequences
    (ChafaTermInfo and ChafaTermDb). This allows for improved
    terminal support.
  * FbTerm is now supported with TERM=fbterm in the environment.
  * Bug fixes:
  - #43 Fix signal handler.
  - [unfiled] Crash when invalid font paths were passed on command line.
  - [unfiled] Small typo in fontgen's READM).
  - [unfiled] Bad contrast adjustment in images with transparency.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1623067200">- Update to 1.6.1:
  * Add NOCONFIGURE variable to autogen.sh to skip configure
  Bug fixes:
  * #50 SIGBUS while loading huge GIFs
  * #52 Produces small glitches in output with some images
  * #54 Haiku port fails on 32bit
  * [unfiled] Exclude RTL code points that could break the output.
  * [unfiled] Apple Terminal lacks truecolor support, so make it
    default to 256 colors
  * [unfiled] Fix typo affecting middle dot symbol.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1630497600">- Update to 1.8.0:
  * Added basic support for the Kitty and iTerm2 graphics protocols.
    These are enabled automatically when corresponding terminal support
    is detected, or manually with -f kitty or -f iterm.
  * Implemented an 8-color mode, selectable with -c 8
  * Implemented a foreground-only switch, --fg-only. This produces
    character art using foreground colors only, and will avoid
    modifying or resetting the background color. Looks best with
    non-contiguous symbols (e.g. ascii).
  * Added builtins for Japanese kana fullwidth symbols. These can
    now be used without loading any external fonts (try -c none --symbols wide).
  * Added builtins for legacy computer symbols (mainly wedges and
    sextant blocks). These were widely used in PETSCII and Teletext,
    and can be enabled using --symbols or --fill with their respective
    tags: legacy, wedge and sextant (@hodefoting).
  * Since there is a growing number of builtin symbols that may not
    be available everywhere, the default selection has been restricted
    to the widely supported block and border sets.
  * If possible, we now select a visually blank character from the
    specified symbol/fill sets instead of hardcoding ASCII space for
    featureless cells. One practical upshot of this is that the constant-width
    braille range can be used to produce consistent images even in contexts
    with variable-width fonts. U+2800 (BRAILLE PATTERN BLANK) will then be used in blank cells.
  * Improved terminal size detection when used with pipelines and redirection.
    This should now produce an image properly sized for your terminal:
    curl https://i.imgur.com/WFDEFVg.jpeg | chafa - | tee out
  * ChafaCanvas gained API functions for programmatically getting and
    setting character cell contents. These are used in a new example
    in tests/ncurses.c demonstrating ncurses integration.
  * Made --disable-rpath the default in order to simplify packaging.
  * Added a HACKING file featuring a much needed release checklist.
  * Improved terminal support:
    + Ctx will now use optimizing REP sequences at high -O levels.
    + foot now defaults to sixels.
    + iTerm2 now defaults to the iTerm2 protocol.
    + Kitty now defaults to the Kitty protocol.
    + st now defaults to truecolor symbols.
  * Bug fixes:
    + #44 Missing error handling on stdout writes.
    + [unfiled] Solid symbols erroneously replaced by fill in FGBG mode.
    + [unfiled] Integer formatter was not using fast path for 8-bit values.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1651147200">- bsc#1198965 (CVE-2022-1507): Fix NULL pointer deref in gif_internal_decode_frame
  * Add chafa-CVE-2022-1507.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1655294400">- bsc#1200510 (CVE-2022-2061): Fix heap based buffer overflow
  in lzw_decode
  * Add chafa-CVE-2022-2061.patch</changelog>
</package>
<package pkgid="b67867a94a559be8bec1cc44f40d1ed5f0b111de5fb4e0ae8b49c76b03e58b84" name="libchafa0" arch="i586">
  <version epoch="0" ver="1.8.0" rel="bp154.3.3.1"/>
  <changelog author="mvetter@suse.com" date="1549627200">- Initial package chafa 1.0.1 for openSUSE</changelog>
  <changelog author="mvetter@suse.com" date="1565006400">- Update to 1.2.0:
  * Added --dither, --dither-grain and --dither-intensity options.
    These allow for sub-cell dithering in quantized modes (none,
    2, 16, 240 and 256). Especially beneficial when used with
  - p off.
  * Added API for ordered and diffusion-based dithering in quantization.
  * Added API support for multiple 8bpc pixel modes: RGB, BGR, RGBA,
    BGRA, ARGB, ABGR with either premultiplied or unassociated alpha channels.
  * Smooth scaling is now done internally, meaning libchafa
    consumers no longer need to prescale images.
  * Implemented a machine learning tool that can generate custom
    fonts for efficient image reproduction from a provided dataset.
    This is left uninstalled since it's still experimental
  * Throughput improvements:
    + GIF animations now start playing instantly.
    + GIF CPU overhead reduced by 75%, peak memory use down 95%-99% (!).
    + XWD common case CPU overhead down 60-70%, peak memory down 70%.
    + Additional halving of CPU overhead in 240- and 256-color modes.
    + Streamlined pixel pipeline for better parallelization.
  * Installation instructions:
    + New: Guix (Guy Fleury Iteriteka).
    + New: openSUSE (@jubalh).
  * Bug fixes:
    + [unfiled] Certain SVGs had transparency replaced with a white background (nemo).
    + [unfiled] -lm dependency belongs in libchafa, not frontend.</changelog>
  <changelog author="mvetter@suse.com" date="1566302400">- Update to 1.2.1:
  * Detect kitty and mlterm virtual terminals and apply optimal
    defaults accordingly
  * Make Automake build more strict and fix a few compatibility nits
  * Fix #30 - Failed to build on hurd-i386
  * Fix crash on certain broken GIFs</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566648000">- Update descriptions.
- Avoid double-shipping documentation, and make docs noarch.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1583323200">- Update to 1.2.2:
  * Fix #34 Cannot compile example</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1585828800">- Update to 1.4.0:
  * Added sixel graphics support. Chafa will automatically produce sixels
    if the connected terminal supports it. It can also be forced using the
    new -f or --format flag. This is a new implementation written from the
    ground up to maximize throughput.
  * Added the --glyph-file option, which loads glyph-symbol mappings from
    any file format supported by FreeType (TTF, PCF, etc). This allows for
    custom font support and improved symbol selection.
  * Added the --speed option specifying animation speed. It accepts a
    unitless multiplier, a specific number of frames per second, or max
    for maximum throughput.
  * There are now two ways to assign colors to symbol cells. Formerly,
    this was done based on the average color of the covered area. The new
    default is to use the median color, which produces sharper edges,
    but is slightly more prone to high-frequency noise. The new option
  - -color-extractor selects the method to employ.
  * When displaying multiple files, the default delay between files has
    been changed from three seconds to zero. Animations will still play
    through once. This can be overridden on the chafa command line with -d
    or --duration.
  * Minor tweaks to built-in symbols.
  Performance improvements:
  * Halved pixel storage requirements from 64 bits to 32 bits,
    resulting in significant memory savings.
  * Now builds with -ffast-math, yielding a big speedup for DIN99d.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1586692800">- Update to 1.4.1:
  * Added configure option --disable-rpath. This allows packagers to
    prevent the hard-coded library search path from being embedded in
    the chafa command-line tool (Mo Zhou, #39).
  * Added defaults for the yaft terminal.
  Bug fixes:
  * #40 - Fails to build on hurd-i386 + other i386 (reported by Mo
    Zhou).
  * [unfiled] - Rare failed assert with mostly transparent sixel image
    (reported by Reddit user spryfigure).
  * [unfiled] - Minor typo in function docstring.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1610712000">- Update to 1.6.0:
  * Added support for fullwidth symbols that take up two character
    cells. These are common in East Asian scripts. Single-cell and
    double-cell symbols can be mixed, and -f symbols mode will use
    both if possible.
  * New symbol tags: alpha, digit, alnum, narrow, wide, ambiguous,
    ugly, bad. "Ambiguous" symbols have uncertain widths and may
    render poorly in some terminals. "Ugly" denotes symbols that
    are unsuitable for Chafa's cell-based graphics (multicolor
    emoji, ideographic descriptors, etc). "Bad" is a superset of
    these two categories. Bad symbols are always excluded unless
    explicitly enabled with e.g. CHAFA_SYMBOL_TAG_BAD (--symbols
    +bad in the frontend).
  * The font loader (--glyph-file option) now does a better job
    with proportional fonts.
  * Added options for controlling lossless optimization of output.
    Currently, attribute reuse and character repetition (REP
    sequence) are implemented.
  * Added -O option to the frontend. This controls the optimization
    level.
  * Added a simple abstraction layer for terminal control sequences
    (ChafaTermInfo and ChafaTermDb). This allows for improved
    terminal support.
  * FbTerm is now supported with TERM=fbterm in the environment.
  * Bug fixes:
  - #43 Fix signal handler.
  - [unfiled] Crash when invalid font paths were passed on command line.
  - [unfiled] Small typo in fontgen's READM).
  - [unfiled] Bad contrast adjustment in images with transparency.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1623067200">- Update to 1.6.1:
  * Add NOCONFIGURE variable to autogen.sh to skip configure
  Bug fixes:
  * #50 SIGBUS while loading huge GIFs
  * #52 Produces small glitches in output with some images
  * #54 Haiku port fails on 32bit
  * [unfiled] Exclude RTL code points that could break the output.
  * [unfiled] Apple Terminal lacks truecolor support, so make it
    default to 256 colors
  * [unfiled] Fix typo affecting middle dot symbol.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1630497600">- Update to 1.8.0:
  * Added basic support for the Kitty and iTerm2 graphics protocols.
    These are enabled automatically when corresponding terminal support
    is detected, or manually with -f kitty or -f iterm.
  * Implemented an 8-color mode, selectable with -c 8
  * Implemented a foreground-only switch, --fg-only. This produces
    character art using foreground colors only, and will avoid
    modifying or resetting the background color. Looks best with
    non-contiguous symbols (e.g. ascii).
  * Added builtins for Japanese kana fullwidth symbols. These can
    now be used without loading any external fonts (try -c none --symbols wide).
  * Added builtins for legacy computer symbols (mainly wedges and
    sextant blocks). These were widely used in PETSCII and Teletext,
    and can be enabled using --symbols or --fill with their respective
    tags: legacy, wedge and sextant (@hodefoting).
  * Since there is a growing number of builtin symbols that may not
    be available everywhere, the default selection has been restricted
    to the widely supported block and border sets.
  * If possible, we now select a visually blank character from the
    specified symbol/fill sets instead of hardcoding ASCII space for
    featureless cells. One practical upshot of this is that the constant-width
    braille range can be used to produce consistent images even in contexts
    with variable-width fonts. U+2800 (BRAILLE PATTERN BLANK) will then be used in blank cells.
  * Improved terminal size detection when used with pipelines and redirection.
    This should now produce an image properly sized for your terminal:
    curl https://i.imgur.com/WFDEFVg.jpeg | chafa - | tee out
  * ChafaCanvas gained API functions for programmatically getting and
    setting character cell contents. These are used in a new example
    in tests/ncurses.c demonstrating ncurses integration.
  * Made --disable-rpath the default in order to simplify packaging.
  * Added a HACKING file featuring a much needed release checklist.
  * Improved terminal support:
    + Ctx will now use optimizing REP sequences at high -O levels.
    + foot now defaults to sixels.
    + iTerm2 now defaults to the iTerm2 protocol.
    + Kitty now defaults to the Kitty protocol.
    + st now defaults to truecolor symbols.
  * Bug fixes:
    + #44 Missing error handling on stdout writes.
    + [unfiled] Solid symbols erroneously replaced by fill in FGBG mode.
    + [unfiled] Integer formatter was not using fast path for 8-bit values.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1651147200">- bsc#1198965 (CVE-2022-1507): Fix NULL pointer deref in gif_internal_decode_frame
  * Add chafa-CVE-2022-1507.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1655294400">- bsc#1200510 (CVE-2022-2061): Fix heap based buffer overflow
  in lzw_decode
  * Add chafa-CVE-2022-2061.patch</changelog>
</package>
<package pkgid="195c0756397b87959043658719c63c6c9ff59bc66afc7bc37c958badf8ab11f5" name="libchafa0" arch="ppc64le">
  <version epoch="0" ver="1.8.0" rel="bp154.3.3.1"/>
  <changelog author="mvetter@suse.com" date="1549627200">- Initial package chafa 1.0.1 for openSUSE</changelog>
  <changelog author="mvetter@suse.com" date="1565006400">- Update to 1.2.0:
  * Added --dither, --dither-grain and --dither-intensity options.
    These allow for sub-cell dithering in quantized modes (none,
    2, 16, 240 and 256). Especially beneficial when used with
  - p off.
  * Added API for ordered and diffusion-based dithering in quantization.
  * Added API support for multiple 8bpc pixel modes: RGB, BGR, RGBA,
    BGRA, ARGB, ABGR with either premultiplied or unassociated alpha channels.
  * Smooth scaling is now done internally, meaning libchafa
    consumers no longer need to prescale images.
  * Implemented a machine learning tool that can generate custom
    fonts for efficient image reproduction from a provided dataset.
    This is left uninstalled since it's still experimental
  * Throughput improvements:
    + GIF animations now start playing instantly.
    + GIF CPU overhead reduced by 75%, peak memory use down 95%-99% (!).
    + XWD common case CPU overhead down 60-70%, peak memory down 70%.
    + Additional halving of CPU overhead in 240- and 256-color modes.
    + Streamlined pixel pipeline for better parallelization.
  * Installation instructions:
    + New: Guix (Guy Fleury Iteriteka).
    + New: openSUSE (@jubalh).
  * Bug fixes:
    + [unfiled] Certain SVGs had transparency replaced with a white background (nemo).
    + [unfiled] -lm dependency belongs in libchafa, not frontend.</changelog>
  <changelog author="mvetter@suse.com" date="1566302400">- Update to 1.2.1:
  * Detect kitty and mlterm virtual terminals and apply optimal
    defaults accordingly
  * Make Automake build more strict and fix a few compatibility nits
  * Fix #30 - Failed to build on hurd-i386
  * Fix crash on certain broken GIFs</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566648000">- Update descriptions.
- Avoid double-shipping documentation, and make docs noarch.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1583323200">- Update to 1.2.2:
  * Fix #34 Cannot compile example</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1585828800">- Update to 1.4.0:
  * Added sixel graphics support. Chafa will automatically produce sixels
    if the connected terminal supports it. It can also be forced using the
    new -f or --format flag. This is a new implementation written from the
    ground up to maximize throughput.
  * Added the --glyph-file option, which loads glyph-symbol mappings from
    any file format supported by FreeType (TTF, PCF, etc). This allows for
    custom font support and improved symbol selection.
  * Added the --speed option specifying animation speed. It accepts a
    unitless multiplier, a specific number of frames per second, or max
    for maximum throughput.
  * There are now two ways to assign colors to symbol cells. Formerly,
    this was done based on the average color of the covered area. The new
    default is to use the median color, which produces sharper edges,
    but is slightly more prone to high-frequency noise. The new option
  - -color-extractor selects the method to employ.
  * When displaying multiple files, the default delay between files has
    been changed from three seconds to zero. Animations will still play
    through once. This can be overridden on the chafa command line with -d
    or --duration.
  * Minor tweaks to built-in symbols.
  Performance improvements:
  * Halved pixel storage requirements from 64 bits to 32 bits,
    resulting in significant memory savings.
  * Now builds with -ffast-math, yielding a big speedup for DIN99d.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1586692800">- Update to 1.4.1:
  * Added configure option --disable-rpath. This allows packagers to
    prevent the hard-coded library search path from being embedded in
    the chafa command-line tool (Mo Zhou, #39).
  * Added defaults for the yaft terminal.
  Bug fixes:
  * #40 - Fails to build on hurd-i386 + other i386 (reported by Mo
    Zhou).
  * [unfiled] - Rare failed assert with mostly transparent sixel image
    (reported by Reddit user spryfigure).
  * [unfiled] - Minor typo in function docstring.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1610712000">- Update to 1.6.0:
  * Added support for fullwidth symbols that take up two character
    cells. These are common in East Asian scripts. Single-cell and
    double-cell symbols can be mixed, and -f symbols mode will use
    both if possible.
  * New symbol tags: alpha, digit, alnum, narrow, wide, ambiguous,
    ugly, bad. "Ambiguous" symbols have uncertain widths and may
    render poorly in some terminals. "Ugly" denotes symbols that
    are unsuitable for Chafa's cell-based graphics (multicolor
    emoji, ideographic descriptors, etc). "Bad" is a superset of
    these two categories. Bad symbols are always excluded unless
    explicitly enabled with e.g. CHAFA_SYMBOL_TAG_BAD (--symbols
    +bad in the frontend).
  * The font loader (--glyph-file option) now does a better job
    with proportional fonts.
  * Added options for controlling lossless optimization of output.
    Currently, attribute reuse and character repetition (REP
    sequence) are implemented.
  * Added -O option to the frontend. This controls the optimization
    level.
  * Added a simple abstraction layer for terminal control sequences
    (ChafaTermInfo and ChafaTermDb). This allows for improved
    terminal support.
  * FbTerm is now supported with TERM=fbterm in the environment.
  * Bug fixes:
  - #43 Fix signal handler.
  - [unfiled] Crash when invalid font paths were passed on command line.
  - [unfiled] Small typo in fontgen's READM).
  - [unfiled] Bad contrast adjustment in images with transparency.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1623067200">- Update to 1.6.1:
  * Add NOCONFIGURE variable to autogen.sh to skip configure
  Bug fixes:
  * #50 SIGBUS while loading huge GIFs
  * #52 Produces small glitches in output with some images
  * #54 Haiku port fails on 32bit
  * [unfiled] Exclude RTL code points that could break the output.
  * [unfiled] Apple Terminal lacks truecolor support, so make it
    default to 256 colors
  * [unfiled] Fix typo affecting middle dot symbol.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1630497600">- Update to 1.8.0:
  * Added basic support for the Kitty and iTerm2 graphics protocols.
    These are enabled automatically when corresponding terminal support
    is detected, or manually with -f kitty or -f iterm.
  * Implemented an 8-color mode, selectable with -c 8
  * Implemented a foreground-only switch, --fg-only. This produces
    character art using foreground colors only, and will avoid
    modifying or resetting the background color. Looks best with
    non-contiguous symbols (e.g. ascii).
  * Added builtins for Japanese kana fullwidth symbols. These can
    now be used without loading any external fonts (try -c none --symbols wide).
  * Added builtins for legacy computer symbols (mainly wedges and
    sextant blocks). These were widely used in PETSCII and Teletext,
    and can be enabled using --symbols or --fill with their respective
    tags: legacy, wedge and sextant (@hodefoting).
  * Since there is a growing number of builtin symbols that may not
    be available everywhere, the default selection has been restricted
    to the widely supported block and border sets.
  * If possible, we now select a visually blank character from the
    specified symbol/fill sets instead of hardcoding ASCII space for
    featureless cells. One practical upshot of this is that the constant-width
    braille range can be used to produce consistent images even in contexts
    with variable-width fonts. U+2800 (BRAILLE PATTERN BLANK) will then be used in blank cells.
  * Improved terminal size detection when used with pipelines and redirection.
    This should now produce an image properly sized for your terminal:
    curl https://i.imgur.com/WFDEFVg.jpeg | chafa - | tee out
  * ChafaCanvas gained API functions for programmatically getting and
    setting character cell contents. These are used in a new example
    in tests/ncurses.c demonstrating ncurses integration.
  * Made --disable-rpath the default in order to simplify packaging.
  * Added a HACKING file featuring a much needed release checklist.
  * Improved terminal support:
    + Ctx will now use optimizing REP sequences at high -O levels.
    + foot now defaults to sixels.
    + iTerm2 now defaults to the iTerm2 protocol.
    + Kitty now defaults to the Kitty protocol.
    + st now defaults to truecolor symbols.
  * Bug fixes:
    + #44 Missing error handling on stdout writes.
    + [unfiled] Solid symbols erroneously replaced by fill in FGBG mode.
    + [unfiled] Integer formatter was not using fast path for 8-bit values.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1651147200">- bsc#1198965 (CVE-2022-1507): Fix NULL pointer deref in gif_internal_decode_frame
  * Add chafa-CVE-2022-1507.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1655294400">- bsc#1200510 (CVE-2022-2061): Fix heap based buffer overflow
  in lzw_decode
  * Add chafa-CVE-2022-2061.patch</changelog>
</package>
<package pkgid="e50fb236a264e2f8bba352a7d8ea35baab78329cfd0ebcfe69d2314fc04e109a" name="libchafa0" arch="s390x">
  <version epoch="0" ver="1.8.0" rel="bp154.3.3.1"/>
  <changelog author="mvetter@suse.com" date="1549627200">- Initial package chafa 1.0.1 for openSUSE</changelog>
  <changelog author="mvetter@suse.com" date="1565006400">- Update to 1.2.0:
  * Added --dither, --dither-grain and --dither-intensity options.
    These allow for sub-cell dithering in quantized modes (none,
    2, 16, 240 and 256). Especially beneficial when used with
  - p off.
  * Added API for ordered and diffusion-based dithering in quantization.
  * Added API support for multiple 8bpc pixel modes: RGB, BGR, RGBA,
    BGRA, ARGB, ABGR with either premultiplied or unassociated alpha channels.
  * Smooth scaling is now done internally, meaning libchafa
    consumers no longer need to prescale images.
  * Implemented a machine learning tool that can generate custom
    fonts for efficient image reproduction from a provided dataset.
    This is left uninstalled since it's still experimental
  * Throughput improvements:
    + GIF animations now start playing instantly.
    + GIF CPU overhead reduced by 75%, peak memory use down 95%-99% (!).
    + XWD common case CPU overhead down 60-70%, peak memory down 70%.
    + Additional halving of CPU overhead in 240- and 256-color modes.
    + Streamlined pixel pipeline for better parallelization.
  * Installation instructions:
    + New: Guix (Guy Fleury Iteriteka).
    + New: openSUSE (@jubalh).
  * Bug fixes:
    + [unfiled] Certain SVGs had transparency replaced with a white background (nemo).
    + [unfiled] -lm dependency belongs in libchafa, not frontend.</changelog>
  <changelog author="mvetter@suse.com" date="1566302400">- Update to 1.2.1:
  * Detect kitty and mlterm virtual terminals and apply optimal
    defaults accordingly
  * Make Automake build more strict and fix a few compatibility nits
  * Fix #30 - Failed to build on hurd-i386
  * Fix crash on certain broken GIFs</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566648000">- Update descriptions.
- Avoid double-shipping documentation, and make docs noarch.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1583323200">- Update to 1.2.2:
  * Fix #34 Cannot compile example</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1585828800">- Update to 1.4.0:
  * Added sixel graphics support. Chafa will automatically produce sixels
    if the connected terminal supports it. It can also be forced using the
    new -f or --format flag. This is a new implementation written from the
    ground up to maximize throughput.
  * Added the --glyph-file option, which loads glyph-symbol mappings from
    any file format supported by FreeType (TTF, PCF, etc). This allows for
    custom font support and improved symbol selection.
  * Added the --speed option specifying animation speed. It accepts a
    unitless multiplier, a specific number of frames per second, or max
    for maximum throughput.
  * There are now two ways to assign colors to symbol cells. Formerly,
    this was done based on the average color of the covered area. The new
    default is to use the median color, which produces sharper edges,
    but is slightly more prone to high-frequency noise. The new option
  - -color-extractor selects the method to employ.
  * When displaying multiple files, the default delay between files has
    been changed from three seconds to zero. Animations will still play
    through once. This can be overridden on the chafa command line with -d
    or --duration.
  * Minor tweaks to built-in symbols.
  Performance improvements:
  * Halved pixel storage requirements from 64 bits to 32 bits,
    resulting in significant memory savings.
  * Now builds with -ffast-math, yielding a big speedup for DIN99d.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1586692800">- Update to 1.4.1:
  * Added configure option --disable-rpath. This allows packagers to
    prevent the hard-coded library search path from being embedded in
    the chafa command-line tool (Mo Zhou, #39).
  * Added defaults for the yaft terminal.
  Bug fixes:
  * #40 - Fails to build on hurd-i386 + other i386 (reported by Mo
    Zhou).
  * [unfiled] - Rare failed assert with mostly transparent sixel image
    (reported by Reddit user spryfigure).
  * [unfiled] - Minor typo in function docstring.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1610712000">- Update to 1.6.0:
  * Added support for fullwidth symbols that take up two character
    cells. These are common in East Asian scripts. Single-cell and
    double-cell symbols can be mixed, and -f symbols mode will use
    both if possible.
  * New symbol tags: alpha, digit, alnum, narrow, wide, ambiguous,
    ugly, bad. "Ambiguous" symbols have uncertain widths and may
    render poorly in some terminals. "Ugly" denotes symbols that
    are unsuitable for Chafa's cell-based graphics (multicolor
    emoji, ideographic descriptors, etc). "Bad" is a superset of
    these two categories. Bad symbols are always excluded unless
    explicitly enabled with e.g. CHAFA_SYMBOL_TAG_BAD (--symbols
    +bad in the frontend).
  * The font loader (--glyph-file option) now does a better job
    with proportional fonts.
  * Added options for controlling lossless optimization of output.
    Currently, attribute reuse and character repetition (REP
    sequence) are implemented.
  * Added -O option to the frontend. This controls the optimization
    level.
  * Added a simple abstraction layer for terminal control sequences
    (ChafaTermInfo and ChafaTermDb). This allows for improved
    terminal support.
  * FbTerm is now supported with TERM=fbterm in the environment.
  * Bug fixes:
  - #43 Fix signal handler.
  - [unfiled] Crash when invalid font paths were passed on command line.
  - [unfiled] Small typo in fontgen's READM).
  - [unfiled] Bad contrast adjustment in images with transparency.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1623067200">- Update to 1.6.1:
  * Add NOCONFIGURE variable to autogen.sh to skip configure
  Bug fixes:
  * #50 SIGBUS while loading huge GIFs
  * #52 Produces small glitches in output with some images
  * #54 Haiku port fails on 32bit
  * [unfiled] Exclude RTL code points that could break the output.
  * [unfiled] Apple Terminal lacks truecolor support, so make it
    default to 256 colors
  * [unfiled] Fix typo affecting middle dot symbol.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1630497600">- Update to 1.8.0:
  * Added basic support for the Kitty and iTerm2 graphics protocols.
    These are enabled automatically when corresponding terminal support
    is detected, or manually with -f kitty or -f iterm.
  * Implemented an 8-color mode, selectable with -c 8
  * Implemented a foreground-only switch, --fg-only. This produces
    character art using foreground colors only, and will avoid
    modifying or resetting the background color. Looks best with
    non-contiguous symbols (e.g. ascii).
  * Added builtins for Japanese kana fullwidth symbols. These can
    now be used without loading any external fonts (try -c none --symbols wide).
  * Added builtins for legacy computer symbols (mainly wedges and
    sextant blocks). These were widely used in PETSCII and Teletext,
    and can be enabled using --symbols or --fill with their respective
    tags: legacy, wedge and sextant (@hodefoting).
  * Since there is a growing number of builtin symbols that may not
    be available everywhere, the default selection has been restricted
    to the widely supported block and border sets.
  * If possible, we now select a visually blank character from the
    specified symbol/fill sets instead of hardcoding ASCII space for
    featureless cells. One practical upshot of this is that the constant-width
    braille range can be used to produce consistent images even in contexts
    with variable-width fonts. U+2800 (BRAILLE PATTERN BLANK) will then be used in blank cells.
  * Improved terminal size detection when used with pipelines and redirection.
    This should now produce an image properly sized for your terminal:
    curl https://i.imgur.com/WFDEFVg.jpeg | chafa - | tee out
  * ChafaCanvas gained API functions for programmatically getting and
    setting character cell contents. These are used in a new example
    in tests/ncurses.c demonstrating ncurses integration.
  * Made --disable-rpath the default in order to simplify packaging.
  * Added a HACKING file featuring a much needed release checklist.
  * Improved terminal support:
    + Ctx will now use optimizing REP sequences at high -O levels.
    + foot now defaults to sixels.
    + iTerm2 now defaults to the iTerm2 protocol.
    + Kitty now defaults to the Kitty protocol.
    + st now defaults to truecolor symbols.
  * Bug fixes:
    + #44 Missing error handling on stdout writes.
    + [unfiled] Solid symbols erroneously replaced by fill in FGBG mode.
    + [unfiled] Integer formatter was not using fast path for 8-bit values.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1651147200">- bsc#1198965 (CVE-2022-1507): Fix NULL pointer deref in gif_internal_decode_frame
  * Add chafa-CVE-2022-1507.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1655294400">- bsc#1200510 (CVE-2022-2061): Fix heap based buffer overflow
  in lzw_decode
  * Add chafa-CVE-2022-2061.patch</changelog>
</package>
<package pkgid="3cf6fdcc402bd9c30a1f6856479be7c70e80be1ef2f86e12d7431e8ccb734ff3" name="libchafa0" arch="x86_64">
  <version epoch="0" ver="1.8.0" rel="bp154.3.3.1"/>
  <changelog author="mvetter@suse.com" date="1549627200">- Initial package chafa 1.0.1 for openSUSE</changelog>
  <changelog author="mvetter@suse.com" date="1565006400">- Update to 1.2.0:
  * Added --dither, --dither-grain and --dither-intensity options.
    These allow for sub-cell dithering in quantized modes (none,
    2, 16, 240 and 256). Especially beneficial when used with
  - p off.
  * Added API for ordered and diffusion-based dithering in quantization.
  * Added API support for multiple 8bpc pixel modes: RGB, BGR, RGBA,
    BGRA, ARGB, ABGR with either premultiplied or unassociated alpha channels.
  * Smooth scaling is now done internally, meaning libchafa
    consumers no longer need to prescale images.
  * Implemented a machine learning tool that can generate custom
    fonts for efficient image reproduction from a provided dataset.
    This is left uninstalled since it's still experimental
  * Throughput improvements:
    + GIF animations now start playing instantly.
    + GIF CPU overhead reduced by 75%, peak memory use down 95%-99% (!).
    + XWD common case CPU overhead down 60-70%, peak memory down 70%.
    + Additional halving of CPU overhead in 240- and 256-color modes.
    + Streamlined pixel pipeline for better parallelization.
  * Installation instructions:
    + New: Guix (Guy Fleury Iteriteka).
    + New: openSUSE (@jubalh).
  * Bug fixes:
    + [unfiled] Certain SVGs had transparency replaced with a white background (nemo).
    + [unfiled] -lm dependency belongs in libchafa, not frontend.</changelog>
  <changelog author="mvetter@suse.com" date="1566302400">- Update to 1.2.1:
  * Detect kitty and mlterm virtual terminals and apply optimal
    defaults accordingly
  * Make Automake build more strict and fix a few compatibility nits
  * Fix #30 - Failed to build on hurd-i386
  * Fix crash on certain broken GIFs</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566648000">- Update descriptions.
- Avoid double-shipping documentation, and make docs noarch.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1583323200">- Update to 1.2.2:
  * Fix #34 Cannot compile example</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1585828800">- Update to 1.4.0:
  * Added sixel graphics support. Chafa will automatically produce sixels
    if the connected terminal supports it. It can also be forced using the
    new -f or --format flag. This is a new implementation written from the
    ground up to maximize throughput.
  * Added the --glyph-file option, which loads glyph-symbol mappings from
    any file format supported by FreeType (TTF, PCF, etc). This allows for
    custom font support and improved symbol selection.
  * Added the --speed option specifying animation speed. It accepts a
    unitless multiplier, a specific number of frames per second, or max
    for maximum throughput.
  * There are now two ways to assign colors to symbol cells. Formerly,
    this was done based on the average color of the covered area. The new
    default is to use the median color, which produces sharper edges,
    but is slightly more prone to high-frequency noise. The new option
  - -color-extractor selects the method to employ.
  * When displaying multiple files, the default delay between files has
    been changed from three seconds to zero. Animations will still play
    through once. This can be overridden on the chafa command line with -d
    or --duration.
  * Minor tweaks to built-in symbols.
  Performance improvements:
  * Halved pixel storage requirements from 64 bits to 32 bits,
    resulting in significant memory savings.
  * Now builds with -ffast-math, yielding a big speedup for DIN99d.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1586692800">- Update to 1.4.1:
  * Added configure option --disable-rpath. This allows packagers to
    prevent the hard-coded library search path from being embedded in
    the chafa command-line tool (Mo Zhou, #39).
  * Added defaults for the yaft terminal.
  Bug fixes:
  * #40 - Fails to build on hurd-i386 + other i386 (reported by Mo
    Zhou).
  * [unfiled] - Rare failed assert with mostly transparent sixel image
    (reported by Reddit user spryfigure).
  * [unfiled] - Minor typo in function docstring.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1610712000">- Update to 1.6.0:
  * Added support for fullwidth symbols that take up two character
    cells. These are common in East Asian scripts. Single-cell and
    double-cell symbols can be mixed, and -f symbols mode will use
    both if possible.
  * New symbol tags: alpha, digit, alnum, narrow, wide, ambiguous,
    ugly, bad. "Ambiguous" symbols have uncertain widths and may
    render poorly in some terminals. "Ugly" denotes symbols that
    are unsuitable for Chafa's cell-based graphics (multicolor
    emoji, ideographic descriptors, etc). "Bad" is a superset of
    these two categories. Bad symbols are always excluded unless
    explicitly enabled with e.g. CHAFA_SYMBOL_TAG_BAD (--symbols
    +bad in the frontend).
  * The font loader (--glyph-file option) now does a better job
    with proportional fonts.
  * Added options for controlling lossless optimization of output.
    Currently, attribute reuse and character repetition (REP
    sequence) are implemented.
  * Added -O option to the frontend. This controls the optimization
    level.
  * Added a simple abstraction layer for terminal control sequences
    (ChafaTermInfo and ChafaTermDb). This allows for improved
    terminal support.
  * FbTerm is now supported with TERM=fbterm in the environment.
  * Bug fixes:
  - #43 Fix signal handler.
  - [unfiled] Crash when invalid font paths were passed on command line.
  - [unfiled] Small typo in fontgen's READM).
  - [unfiled] Bad contrast adjustment in images with transparency.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1623067200">- Update to 1.6.1:
  * Add NOCONFIGURE variable to autogen.sh to skip configure
  Bug fixes:
  * #50 SIGBUS while loading huge GIFs
  * #52 Produces small glitches in output with some images
  * #54 Haiku port fails on 32bit
  * [unfiled] Exclude RTL code points that could break the output.
  * [unfiled] Apple Terminal lacks truecolor support, so make it
    default to 256 colors
  * [unfiled] Fix typo affecting middle dot symbol.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1630497600">- Update to 1.8.0:
  * Added basic support for the Kitty and iTerm2 graphics protocols.
    These are enabled automatically when corresponding terminal support
    is detected, or manually with -f kitty or -f iterm.
  * Implemented an 8-color mode, selectable with -c 8
  * Implemented a foreground-only switch, --fg-only. This produces
    character art using foreground colors only, and will avoid
    modifying or resetting the background color. Looks best with
    non-contiguous symbols (e.g. ascii).
  * Added builtins for Japanese kana fullwidth symbols. These can
    now be used without loading any external fonts (try -c none --symbols wide).
  * Added builtins for legacy computer symbols (mainly wedges and
    sextant blocks). These were widely used in PETSCII and Teletext,
    and can be enabled using --symbols or --fill with their respective
    tags: legacy, wedge and sextant (@hodefoting).
  * Since there is a growing number of builtin symbols that may not
    be available everywhere, the default selection has been restricted
    to the widely supported block and border sets.
  * If possible, we now select a visually blank character from the
    specified symbol/fill sets instead of hardcoding ASCII space for
    featureless cells. One practical upshot of this is that the constant-width
    braille range can be used to produce consistent images even in contexts
    with variable-width fonts. U+2800 (BRAILLE PATTERN BLANK) will then be used in blank cells.
  * Improved terminal size detection when used with pipelines and redirection.
    This should now produce an image properly sized for your terminal:
    curl https://i.imgur.com/WFDEFVg.jpeg | chafa - | tee out
  * ChafaCanvas gained API functions for programmatically getting and
    setting character cell contents. These are used in a new example
    in tests/ncurses.c demonstrating ncurses integration.
  * Made --disable-rpath the default in order to simplify packaging.
  * Added a HACKING file featuring a much needed release checklist.
  * Improved terminal support:
    + Ctx will now use optimizing REP sequences at high -O levels.
    + foot now defaults to sixels.
    + iTerm2 now defaults to the iTerm2 protocol.
    + Kitty now defaults to the Kitty protocol.
    + st now defaults to truecolor symbols.
  * Bug fixes:
    + #44 Missing error handling on stdout writes.
    + [unfiled] Solid symbols erroneously replaced by fill in FGBG mode.
    + [unfiled] Integer formatter was not using fast path for 8-bit values.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1651147200">- bsc#1198965 (CVE-2022-1507): Fix NULL pointer deref in gif_internal_decode_frame
  * Add chafa-CVE-2022-1507.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1655294400">- bsc#1200510 (CVE-2022-2061): Fix heap based buffer overflow
  in lzw_decode
  * Add chafa-CVE-2022-2061.patch</changelog>
</package>
<package pkgid="1289a5aff3da463d48b80fb7a7b5b52842758b0715ebf454862356732e459310" name="libchafa0" arch="aarch64">
  <version epoch="0" ver="1.8.0" rel="bp154.3.8.1"/>
  <changelog author="mvetter@suse.com" date="1549627200">- Initial package chafa 1.0.1 for openSUSE</changelog>
  <changelog author="mvetter@suse.com" date="1565006400">- Update to 1.2.0:
  * Added --dither, --dither-grain and --dither-intensity options.
    These allow for sub-cell dithering in quantized modes (none,
    2, 16, 240 and 256). Especially beneficial when used with
  - p off.
  * Added API for ordered and diffusion-based dithering in quantization.
  * Added API support for multiple 8bpc pixel modes: RGB, BGR, RGBA,
    BGRA, ARGB, ABGR with either premultiplied or unassociated alpha channels.
  * Smooth scaling is now done internally, meaning libchafa
    consumers no longer need to prescale images.
  * Implemented a machine learning tool that can generate custom
    fonts for efficient image reproduction from a provided dataset.
    This is left uninstalled since it's still experimental
  * Throughput improvements:
    + GIF animations now start playing instantly.
    + GIF CPU overhead reduced by 75%, peak memory use down 95%-99% (!).
    + XWD common case CPU overhead down 60-70%, peak memory down 70%.
    + Additional halving of CPU overhead in 240- and 256-color modes.
    + Streamlined pixel pipeline for better parallelization.
  * Installation instructions:
    + New: Guix (Guy Fleury Iteriteka).
    + New: openSUSE (@jubalh).
  * Bug fixes:
    + [unfiled] Certain SVGs had transparency replaced with a white background (nemo).
    + [unfiled] -lm dependency belongs in libchafa, not frontend.</changelog>
  <changelog author="mvetter@suse.com" date="1566302400">- Update to 1.2.1:
  * Detect kitty and mlterm virtual terminals and apply optimal
    defaults accordingly
  * Make Automake build more strict and fix a few compatibility nits
  * Fix #30 - Failed to build on hurd-i386
  * Fix crash on certain broken GIFs</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566648000">- Update descriptions.
- Avoid double-shipping documentation, and make docs noarch.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1583323200">- Update to 1.2.2:
  * Fix #34 Cannot compile example</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1585828800">- Update to 1.4.0:
  * Added sixel graphics support. Chafa will automatically produce sixels
    if the connected terminal supports it. It can also be forced using the
    new -f or --format flag. This is a new implementation written from the
    ground up to maximize throughput.
  * Added the --glyph-file option, which loads glyph-symbol mappings from
    any file format supported by FreeType (TTF, PCF, etc). This allows for
    custom font support and improved symbol selection.
  * Added the --speed option specifying animation speed. It accepts a
    unitless multiplier, a specific number of frames per second, or max
    for maximum throughput.
  * There are now two ways to assign colors to symbol cells. Formerly,
    this was done based on the average color of the covered area. The new
    default is to use the median color, which produces sharper edges,
    but is slightly more prone to high-frequency noise. The new option
  - -color-extractor selects the method to employ.
  * When displaying multiple files, the default delay between files has
    been changed from three seconds to zero. Animations will still play
    through once. This can be overridden on the chafa command line with -d
    or --duration.
  * Minor tweaks to built-in symbols.
  Performance improvements:
  * Halved pixel storage requirements from 64 bits to 32 bits,
    resulting in significant memory savings.
  * Now builds with -ffast-math, yielding a big speedup for DIN99d.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1586692800">- Update to 1.4.1:
  * Added configure option --disable-rpath. This allows packagers to
    prevent the hard-coded library search path from being embedded in
    the chafa command-line tool (Mo Zhou, #39).
  * Added defaults for the yaft terminal.
  Bug fixes:
  * #40 - Fails to build on hurd-i386 + other i386 (reported by Mo
    Zhou).
  * [unfiled] - Rare failed assert with mostly transparent sixel image
    (reported by Reddit user spryfigure).
  * [unfiled] - Minor typo in function docstring.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1610712000">- Update to 1.6.0:
  * Added support for fullwidth symbols that take up two character
    cells. These are common in East Asian scripts. Single-cell and
    double-cell symbols can be mixed, and -f symbols mode will use
    both if possible.
  * New symbol tags: alpha, digit, alnum, narrow, wide, ambiguous,
    ugly, bad. "Ambiguous" symbols have uncertain widths and may
    render poorly in some terminals. "Ugly" denotes symbols that
    are unsuitable for Chafa's cell-based graphics (multicolor
    emoji, ideographic descriptors, etc). "Bad" is a superset of
    these two categories. Bad symbols are always excluded unless
    explicitly enabled with e.g. CHAFA_SYMBOL_TAG_BAD (--symbols
    +bad in the frontend).
  * The font loader (--glyph-file option) now does a better job
    with proportional fonts.
  * Added options for controlling lossless optimization of output.
    Currently, attribute reuse and character repetition (REP
    sequence) are implemented.
  * Added -O option to the frontend. This controls the optimization
    level.
  * Added a simple abstraction layer for terminal control sequences
    (ChafaTermInfo and ChafaTermDb). This allows for improved
    terminal support.
  * FbTerm is now supported with TERM=fbterm in the environment.
  * Bug fixes:
  - #43 Fix signal handler.
  - [unfiled] Crash when invalid font paths were passed on command line.
  - [unfiled] Small typo in fontgen's READM).
  - [unfiled] Bad contrast adjustment in images with transparency.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1623067200">- Update to 1.6.1:
  * Add NOCONFIGURE variable to autogen.sh to skip configure
  Bug fixes:
  * #50 SIGBUS while loading huge GIFs
  * #52 Produces small glitches in output with some images
  * #54 Haiku port fails on 32bit
  * [unfiled] Exclude RTL code points that could break the output.
  * [unfiled] Apple Terminal lacks truecolor support, so make it
    default to 256 colors
  * [unfiled] Fix typo affecting middle dot symbol.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1630497600">- Update to 1.8.0:
  * Added basic support for the Kitty and iTerm2 graphics protocols.
    These are enabled automatically when corresponding terminal support
    is detected, or manually with -f kitty or -f iterm.
  * Implemented an 8-color mode, selectable with -c 8
  * Implemented a foreground-only switch, --fg-only. This produces
    character art using foreground colors only, and will avoid
    modifying or resetting the background color. Looks best with
    non-contiguous symbols (e.g. ascii).
  * Added builtins for Japanese kana fullwidth symbols. These can
    now be used without loading any external fonts (try -c none --symbols wide).
  * Added builtins for legacy computer symbols (mainly wedges and
    sextant blocks). These were widely used in PETSCII and Teletext,
    and can be enabled using --symbols or --fill with their respective
    tags: legacy, wedge and sextant (@hodefoting).
  * Since there is a growing number of builtin symbols that may not
    be available everywhere, the default selection has been restricted
    to the widely supported block and border sets.
  * If possible, we now select a visually blank character from the
    specified symbol/fill sets instead of hardcoding ASCII space for
    featureless cells. One practical upshot of this is that the constant-width
    braille range can be used to produce consistent images even in contexts
    with variable-width fonts. U+2800 (BRAILLE PATTERN BLANK) will then be used in blank cells.
  * Improved terminal size detection when used with pipelines and redirection.
    This should now produce an image properly sized for your terminal:
    curl https://i.imgur.com/WFDEFVg.jpeg | chafa - | tee out
  * ChafaCanvas gained API functions for programmatically getting and
    setting character cell contents. These are used in a new example
    in tests/ncurses.c demonstrating ncurses integration.
  * Made --disable-rpath the default in order to simplify packaging.
  * Added a HACKING file featuring a much needed release checklist.
  * Improved terminal support:
    + Ctx will now use optimizing REP sequences at high -O levels.
    + foot now defaults to sixels.
    + iTerm2 now defaults to the iTerm2 protocol.
    + Kitty now defaults to the Kitty protocol.
    + st now defaults to truecolor symbols.
  * Bug fixes:
    + #44 Missing error handling on stdout writes.
    + [unfiled] Solid symbols erroneously replaced by fill in FGBG mode.
    + [unfiled] Integer formatter was not using fast path for 8-bit values.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1651147200">- bsc#1198965 (CVE-2022-1507): Fix NULL pointer deref in gif_internal_decode_frame
  * Add chafa-CVE-2022-1507.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1655294400">- bsc#1200510 (CVE-2022-2061): Fix heap based buffer overflow
  in lzw_decode
  * Add chafa-CVE-2022-2061.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1657022400">- bsc#1201211 (CVE-2022-2301): Fix buffer over-read
  * Add chafa-CVE-2022-2301.patch</changelog>
</package>
<package pkgid="8c111dfdbf53ad2f4116963a811f3c9c6af519f5f57c31a1ae5897b640934bde" name="libchafa0" arch="i586">
  <version epoch="0" ver="1.8.0" rel="bp154.3.8.1"/>
  <changelog author="mvetter@suse.com" date="1549627200">- Initial package chafa 1.0.1 for openSUSE</changelog>
  <changelog author="mvetter@suse.com" date="1565006400">- Update to 1.2.0:
  * Added --dither, --dither-grain and --dither-intensity options.
    These allow for sub-cell dithering in quantized modes (none,
    2, 16, 240 and 256). Especially beneficial when used with
  - p off.
  * Added API for ordered and diffusion-based dithering in quantization.
  * Added API support for multiple 8bpc pixel modes: RGB, BGR, RGBA,
    BGRA, ARGB, ABGR with either premultiplied or unassociated alpha channels.
  * Smooth scaling is now done internally, meaning libchafa
    consumers no longer need to prescale images.
  * Implemented a machine learning tool that can generate custom
    fonts for efficient image reproduction from a provided dataset.
    This is left uninstalled since it's still experimental
  * Throughput improvements:
    + GIF animations now start playing instantly.
    + GIF CPU overhead reduced by 75%, peak memory use down 95%-99% (!).
    + XWD common case CPU overhead down 60-70%, peak memory down 70%.
    + Additional halving of CPU overhead in 240- and 256-color modes.
    + Streamlined pixel pipeline for better parallelization.
  * Installation instructions:
    + New: Guix (Guy Fleury Iteriteka).
    + New: openSUSE (@jubalh).
  * Bug fixes:
    + [unfiled] Certain SVGs had transparency replaced with a white background (nemo).
    + [unfiled] -lm dependency belongs in libchafa, not frontend.</changelog>
  <changelog author="mvetter@suse.com" date="1566302400">- Update to 1.2.1:
  * Detect kitty and mlterm virtual terminals and apply optimal
    defaults accordingly
  * Make Automake build more strict and fix a few compatibility nits
  * Fix #30 - Failed to build on hurd-i386
  * Fix crash on certain broken GIFs</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566648000">- Update descriptions.
- Avoid double-shipping documentation, and make docs noarch.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1583323200">- Update to 1.2.2:
  * Fix #34 Cannot compile example</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1585828800">- Update to 1.4.0:
  * Added sixel graphics support. Chafa will automatically produce sixels
    if the connected terminal supports it. It can also be forced using the
    new -f or --format flag. This is a new implementation written from the
    ground up to maximize throughput.
  * Added the --glyph-file option, which loads glyph-symbol mappings from
    any file format supported by FreeType (TTF, PCF, etc). This allows for
    custom font support and improved symbol selection.
  * Added the --speed option specifying animation speed. It accepts a
    unitless multiplier, a specific number of frames per second, or max
    for maximum throughput.
  * There are now two ways to assign colors to symbol cells. Formerly,
    this was done based on the average color of the covered area. The new
    default is to use the median color, which produces sharper edges,
    but is slightly more prone to high-frequency noise. The new option
  - -color-extractor selects the method to employ.
  * When displaying multiple files, the default delay between files has
    been changed from three seconds to zero. Animations will still play
    through once. This can be overridden on the chafa command line with -d
    or --duration.
  * Minor tweaks to built-in symbols.
  Performance improvements:
  * Halved pixel storage requirements from 64 bits to 32 bits,
    resulting in significant memory savings.
  * Now builds with -ffast-math, yielding a big speedup for DIN99d.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1586692800">- Update to 1.4.1:
  * Added configure option --disable-rpath. This allows packagers to
    prevent the hard-coded library search path from being embedded in
    the chafa command-line tool (Mo Zhou, #39).
  * Added defaults for the yaft terminal.
  Bug fixes:
  * #40 - Fails to build on hurd-i386 + other i386 (reported by Mo
    Zhou).
  * [unfiled] - Rare failed assert with mostly transparent sixel image
    (reported by Reddit user spryfigure).
  * [unfiled] - Minor typo in function docstring.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1610712000">- Update to 1.6.0:
  * Added support for fullwidth symbols that take up two character
    cells. These are common in East Asian scripts. Single-cell and
    double-cell symbols can be mixed, and -f symbols mode will use
    both if possible.
  * New symbol tags: alpha, digit, alnum, narrow, wide, ambiguous,
    ugly, bad. "Ambiguous" symbols have uncertain widths and may
    render poorly in some terminals. "Ugly" denotes symbols that
    are unsuitable for Chafa's cell-based graphics (multicolor
    emoji, ideographic descriptors, etc). "Bad" is a superset of
    these two categories. Bad symbols are always excluded unless
    explicitly enabled with e.g. CHAFA_SYMBOL_TAG_BAD (--symbols
    +bad in the frontend).
  * The font loader (--glyph-file option) now does a better job
    with proportional fonts.
  * Added options for controlling lossless optimization of output.
    Currently, attribute reuse and character repetition (REP
    sequence) are implemented.
  * Added -O option to the frontend. This controls the optimization
    level.
  * Added a simple abstraction layer for terminal control sequences
    (ChafaTermInfo and ChafaTermDb). This allows for improved
    terminal support.
  * FbTerm is now supported with TERM=fbterm in the environment.
  * Bug fixes:
  - #43 Fix signal handler.
  - [unfiled] Crash when invalid font paths were passed on command line.
  - [unfiled] Small typo in fontgen's READM).
  - [unfiled] Bad contrast adjustment in images with transparency.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1623067200">- Update to 1.6.1:
  * Add NOCONFIGURE variable to autogen.sh to skip configure
  Bug fixes:
  * #50 SIGBUS while loading huge GIFs
  * #52 Produces small glitches in output with some images
  * #54 Haiku port fails on 32bit
  * [unfiled] Exclude RTL code points that could break the output.
  * [unfiled] Apple Terminal lacks truecolor support, so make it
    default to 256 colors
  * [unfiled] Fix typo affecting middle dot symbol.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1630497600">- Update to 1.8.0:
  * Added basic support for the Kitty and iTerm2 graphics protocols.
    These are enabled automatically when corresponding terminal support
    is detected, or manually with -f kitty or -f iterm.
  * Implemented an 8-color mode, selectable with -c 8
  * Implemented a foreground-only switch, --fg-only. This produces
    character art using foreground colors only, and will avoid
    modifying or resetting the background color. Looks best with
    non-contiguous symbols (e.g. ascii).
  * Added builtins for Japanese kana fullwidth symbols. These can
    now be used without loading any external fonts (try -c none --symbols wide).
  * Added builtins for legacy computer symbols (mainly wedges and
    sextant blocks). These were widely used in PETSCII and Teletext,
    and can be enabled using --symbols or --fill with their respective
    tags: legacy, wedge and sextant (@hodefoting).
  * Since there is a growing number of builtin symbols that may not
    be available everywhere, the default selection has been restricted
    to the widely supported block and border sets.
  * If possible, we now select a visually blank character from the
    specified symbol/fill sets instead of hardcoding ASCII space for
    featureless cells. One practical upshot of this is that the constant-width
    braille range can be used to produce consistent images even in contexts
    with variable-width fonts. U+2800 (BRAILLE PATTERN BLANK) will then be used in blank cells.
  * Improved terminal size detection when used with pipelines and redirection.
    This should now produce an image properly sized for your terminal:
    curl https://i.imgur.com/WFDEFVg.jpeg | chafa - | tee out
  * ChafaCanvas gained API functions for programmatically getting and
    setting character cell contents. These are used in a new example
    in tests/ncurses.c demonstrating ncurses integration.
  * Made --disable-rpath the default in order to simplify packaging.
  * Added a HACKING file featuring a much needed release checklist.
  * Improved terminal support:
    + Ctx will now use optimizing REP sequences at high -O levels.
    + foot now defaults to sixels.
    + iTerm2 now defaults to the iTerm2 protocol.
    + Kitty now defaults to the Kitty protocol.
    + st now defaults to truecolor symbols.
  * Bug fixes:
    + #44 Missing error handling on stdout writes.
    + [unfiled] Solid symbols erroneously replaced by fill in FGBG mode.
    + [unfiled] Integer formatter was not using fast path for 8-bit values.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1651147200">- bsc#1198965 (CVE-2022-1507): Fix NULL pointer deref in gif_internal_decode_frame
  * Add chafa-CVE-2022-1507.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1655294400">- bsc#1200510 (CVE-2022-2061): Fix heap based buffer overflow
  in lzw_decode
  * Add chafa-CVE-2022-2061.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1657022400">- bsc#1201211 (CVE-2022-2301): Fix buffer over-read
  * Add chafa-CVE-2022-2301.patch</changelog>
</package>
<package pkgid="df684fcd604858d54e89120846867d91bcd60b72906add5ee47f78ad87ccc60d" name="libchafa0" arch="ppc64le">
  <version epoch="0" ver="1.8.0" rel="bp154.3.8.1"/>
  <changelog author="mvetter@suse.com" date="1549627200">- Initial package chafa 1.0.1 for openSUSE</changelog>
  <changelog author="mvetter@suse.com" date="1565006400">- Update to 1.2.0:
  * Added --dither, --dither-grain and --dither-intensity options.
    These allow for sub-cell dithering in quantized modes (none,
    2, 16, 240 and 256). Especially beneficial when used with
  - p off.
  * Added API for ordered and diffusion-based dithering in quantization.
  * Added API support for multiple 8bpc pixel modes: RGB, BGR, RGBA,
    BGRA, ARGB, ABGR with either premultiplied or unassociated alpha channels.
  * Smooth scaling is now done internally, meaning libchafa
    consumers no longer need to prescale images.
  * Implemented a machine learning tool that can generate custom
    fonts for efficient image reproduction from a provided dataset.
    This is left uninstalled since it's still experimental
  * Throughput improvements:
    + GIF animations now start playing instantly.
    + GIF CPU overhead reduced by 75%, peak memory use down 95%-99% (!).
    + XWD common case CPU overhead down 60-70%, peak memory down 70%.
    + Additional halving of CPU overhead in 240- and 256-color modes.
    + Streamlined pixel pipeline for better parallelization.
  * Installation instructions:
    + New: Guix (Guy Fleury Iteriteka).
    + New: openSUSE (@jubalh).
  * Bug fixes:
    + [unfiled] Certain SVGs had transparency replaced with a white background (nemo).
    + [unfiled] -lm dependency belongs in libchafa, not frontend.</changelog>
  <changelog author="mvetter@suse.com" date="1566302400">- Update to 1.2.1:
  * Detect kitty and mlterm virtual terminals and apply optimal
    defaults accordingly
  * Make Automake build more strict and fix a few compatibility nits
  * Fix #30 - Failed to build on hurd-i386
  * Fix crash on certain broken GIFs</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566648000">- Update descriptions.
- Avoid double-shipping documentation, and make docs noarch.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1583323200">- Update to 1.2.2:
  * Fix #34 Cannot compile example</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1585828800">- Update to 1.4.0:
  * Added sixel graphics support. Chafa will automatically produce sixels
    if the connected terminal supports it. It can also be forced using the
    new -f or --format flag. This is a new implementation written from the
    ground up to maximize throughput.
  * Added the --glyph-file option, which loads glyph-symbol mappings from
    any file format supported by FreeType (TTF, PCF, etc). This allows for
    custom font support and improved symbol selection.
  * Added the --speed option specifying animation speed. It accepts a
    unitless multiplier, a specific number of frames per second, or max
    for maximum throughput.
  * There are now two ways to assign colors to symbol cells. Formerly,
    this was done based on the average color of the covered area. The new
    default is to use the median color, which produces sharper edges,
    but is slightly more prone to high-frequency noise. The new option
  - -color-extractor selects the method to employ.
  * When displaying multiple files, the default delay between files has
    been changed from three seconds to zero. Animations will still play
    through once. This can be overridden on the chafa command line with -d
    or --duration.
  * Minor tweaks to built-in symbols.
  Performance improvements:
  * Halved pixel storage requirements from 64 bits to 32 bits,
    resulting in significant memory savings.
  * Now builds with -ffast-math, yielding a big speedup for DIN99d.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1586692800">- Update to 1.4.1:
  * Added configure option --disable-rpath. This allows packagers to
    prevent the hard-coded library search path from being embedded in
    the chafa command-line tool (Mo Zhou, #39).
  * Added defaults for the yaft terminal.
  Bug fixes:
  * #40 - Fails to build on hurd-i386 + other i386 (reported by Mo
    Zhou).
  * [unfiled] - Rare failed assert with mostly transparent sixel image
    (reported by Reddit user spryfigure).
  * [unfiled] - Minor typo in function docstring.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1610712000">- Update to 1.6.0:
  * Added support for fullwidth symbols that take up two character
    cells. These are common in East Asian scripts. Single-cell and
    double-cell symbols can be mixed, and -f symbols mode will use
    both if possible.
  * New symbol tags: alpha, digit, alnum, narrow, wide, ambiguous,
    ugly, bad. "Ambiguous" symbols have uncertain widths and may
    render poorly in some terminals. "Ugly" denotes symbols that
    are unsuitable for Chafa's cell-based graphics (multicolor
    emoji, ideographic descriptors, etc). "Bad" is a superset of
    these two categories. Bad symbols are always excluded unless
    explicitly enabled with e.g. CHAFA_SYMBOL_TAG_BAD (--symbols
    +bad in the frontend).
  * The font loader (--glyph-file option) now does a better job
    with proportional fonts.
  * Added options for controlling lossless optimization of output.
    Currently, attribute reuse and character repetition (REP
    sequence) are implemented.
  * Added -O option to the frontend. This controls the optimization
    level.
  * Added a simple abstraction layer for terminal control sequences
    (ChafaTermInfo and ChafaTermDb). This allows for improved
    terminal support.
  * FbTerm is now supported with TERM=fbterm in the environment.
  * Bug fixes:
  - #43 Fix signal handler.
  - [unfiled] Crash when invalid font paths were passed on command line.
  - [unfiled] Small typo in fontgen's READM).
  - [unfiled] Bad contrast adjustment in images with transparency.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1623067200">- Update to 1.6.1:
  * Add NOCONFIGURE variable to autogen.sh to skip configure
  Bug fixes:
  * #50 SIGBUS while loading huge GIFs
  * #52 Produces small glitches in output with some images
  * #54 Haiku port fails on 32bit
  * [unfiled] Exclude RTL code points that could break the output.
  * [unfiled] Apple Terminal lacks truecolor support, so make it
    default to 256 colors
  * [unfiled] Fix typo affecting middle dot symbol.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1630497600">- Update to 1.8.0:
  * Added basic support for the Kitty and iTerm2 graphics protocols.
    These are enabled automatically when corresponding terminal support
    is detected, or manually with -f kitty or -f iterm.
  * Implemented an 8-color mode, selectable with -c 8
  * Implemented a foreground-only switch, --fg-only. This produces
    character art using foreground colors only, and will avoid
    modifying or resetting the background color. Looks best with
    non-contiguous symbols (e.g. ascii).
  * Added builtins for Japanese kana fullwidth symbols. These can
    now be used without loading any external fonts (try -c none --symbols wide).
  * Added builtins for legacy computer symbols (mainly wedges and
    sextant blocks). These were widely used in PETSCII and Teletext,
    and can be enabled using --symbols or --fill with their respective
    tags: legacy, wedge and sextant (@hodefoting).
  * Since there is a growing number of builtin symbols that may not
    be available everywhere, the default selection has been restricted
    to the widely supported block and border sets.
  * If possible, we now select a visually blank character from the
    specified symbol/fill sets instead of hardcoding ASCII space for
    featureless cells. One practical upshot of this is that the constant-width
    braille range can be used to produce consistent images even in contexts
    with variable-width fonts. U+2800 (BRAILLE PATTERN BLANK) will then be used in blank cells.
  * Improved terminal size detection when used with pipelines and redirection.
    This should now produce an image properly sized for your terminal:
    curl https://i.imgur.com/WFDEFVg.jpeg | chafa - | tee out
  * ChafaCanvas gained API functions for programmatically getting and
    setting character cell contents. These are used in a new example
    in tests/ncurses.c demonstrating ncurses integration.
  * Made --disable-rpath the default in order to simplify packaging.
  * Added a HACKING file featuring a much needed release checklist.
  * Improved terminal support:
    + Ctx will now use optimizing REP sequences at high -O levels.
    + foot now defaults to sixels.
    + iTerm2 now defaults to the iTerm2 protocol.
    + Kitty now defaults to the Kitty protocol.
    + st now defaults to truecolor symbols.
  * Bug fixes:
    + #44 Missing error handling on stdout writes.
    + [unfiled] Solid symbols erroneously replaced by fill in FGBG mode.
    + [unfiled] Integer formatter was not using fast path for 8-bit values.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1651147200">- bsc#1198965 (CVE-2022-1507): Fix NULL pointer deref in gif_internal_decode_frame
  * Add chafa-CVE-2022-1507.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1655294400">- bsc#1200510 (CVE-2022-2061): Fix heap based buffer overflow
  in lzw_decode
  * Add chafa-CVE-2022-2061.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1657022400">- bsc#1201211 (CVE-2022-2301): Fix buffer over-read
  * Add chafa-CVE-2022-2301.patch</changelog>
</package>
<package pkgid="3d7788da5d870eaec10a640c3c01e6819fcb856fed62aaca17bf1dd6d1735433" name="libchafa0" arch="s390x">
  <version epoch="0" ver="1.8.0" rel="bp154.3.8.1"/>
  <changelog author="mvetter@suse.com" date="1549627200">- Initial package chafa 1.0.1 for openSUSE</changelog>
  <changelog author="mvetter@suse.com" date="1565006400">- Update to 1.2.0:
  * Added --dither, --dither-grain and --dither-intensity options.
    These allow for sub-cell dithering in quantized modes (none,
    2, 16, 240 and 256). Especially beneficial when used with
  - p off.
  * Added API for ordered and diffusion-based dithering in quantization.
  * Added API support for multiple 8bpc pixel modes: RGB, BGR, RGBA,
    BGRA, ARGB, ABGR with either premultiplied or unassociated alpha channels.
  * Smooth scaling is now done internally, meaning libchafa
    consumers no longer need to prescale images.
  * Implemented a machine learning tool that can generate custom
    fonts for efficient image reproduction from a provided dataset.
    This is left uninstalled since it's still experimental
  * Throughput improvements:
    + GIF animations now start playing instantly.
    + GIF CPU overhead reduced by 75%, peak memory use down 95%-99% (!).
    + XWD common case CPU overhead down 60-70%, peak memory down 70%.
    + Additional halving of CPU overhead in 240- and 256-color modes.
    + Streamlined pixel pipeline for better parallelization.
  * Installation instructions:
    + New: Guix (Guy Fleury Iteriteka).
    + New: openSUSE (@jubalh).
  * Bug fixes:
    + [unfiled] Certain SVGs had transparency replaced with a white background (nemo).
    + [unfiled] -lm dependency belongs in libchafa, not frontend.</changelog>
  <changelog author="mvetter@suse.com" date="1566302400">- Update to 1.2.1:
  * Detect kitty and mlterm virtual terminals and apply optimal
    defaults accordingly
  * Make Automake build more strict and fix a few compatibility nits
  * Fix #30 - Failed to build on hurd-i386
  * Fix crash on certain broken GIFs</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566648000">- Update descriptions.
- Avoid double-shipping documentation, and make docs noarch.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1583323200">- Update to 1.2.2:
  * Fix #34 Cannot compile example</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1585828800">- Update to 1.4.0:
  * Added sixel graphics support. Chafa will automatically produce sixels
    if the connected terminal supports it. It can also be forced using the
    new -f or --format flag. This is a new implementation written from the
    ground up to maximize throughput.
  * Added the --glyph-file option, which loads glyph-symbol mappings from
    any file format supported by FreeType (TTF, PCF, etc). This allows for
    custom font support and improved symbol selection.
  * Added the --speed option specifying animation speed. It accepts a
    unitless multiplier, a specific number of frames per second, or max
    for maximum throughput.
  * There are now two ways to assign colors to symbol cells. Formerly,
    this was done based on the average color of the covered area. The new
    default is to use the median color, which produces sharper edges,
    but is slightly more prone to high-frequency noise. The new option
  - -color-extractor selects the method to employ.
  * When displaying multiple files, the default delay between files has
    been changed from three seconds to zero. Animations will still play
    through once. This can be overridden on the chafa command line with -d
    or --duration.
  * Minor tweaks to built-in symbols.
  Performance improvements:
  * Halved pixel storage requirements from 64 bits to 32 bits,
    resulting in significant memory savings.
  * Now builds with -ffast-math, yielding a big speedup for DIN99d.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1586692800">- Update to 1.4.1:
  * Added configure option --disable-rpath. This allows packagers to
    prevent the hard-coded library search path from being embedded in
    the chafa command-line tool (Mo Zhou, #39).
  * Added defaults for the yaft terminal.
  Bug fixes:
  * #40 - Fails to build on hurd-i386 + other i386 (reported by Mo
    Zhou).
  * [unfiled] - Rare failed assert with mostly transparent sixel image
    (reported by Reddit user spryfigure).
  * [unfiled] - Minor typo in function docstring.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1610712000">- Update to 1.6.0:
  * Added support for fullwidth symbols that take up two character
    cells. These are common in East Asian scripts. Single-cell and
    double-cell symbols can be mixed, and -f symbols mode will use
    both if possible.
  * New symbol tags: alpha, digit, alnum, narrow, wide, ambiguous,
    ugly, bad. "Ambiguous" symbols have uncertain widths and may
    render poorly in some terminals. "Ugly" denotes symbols that
    are unsuitable for Chafa's cell-based graphics (multicolor
    emoji, ideographic descriptors, etc). "Bad" is a superset of
    these two categories. Bad symbols are always excluded unless
    explicitly enabled with e.g. CHAFA_SYMBOL_TAG_BAD (--symbols
    +bad in the frontend).
  * The font loader (--glyph-file option) now does a better job
    with proportional fonts.
  * Added options for controlling lossless optimization of output.
    Currently, attribute reuse and character repetition (REP
    sequence) are implemented.
  * Added -O option to the frontend. This controls the optimization
    level.
  * Added a simple abstraction layer for terminal control sequences
    (ChafaTermInfo and ChafaTermDb). This allows for improved
    terminal support.
  * FbTerm is now supported with TERM=fbterm in the environment.
  * Bug fixes:
  - #43 Fix signal handler.
  - [unfiled] Crash when invalid font paths were passed on command line.
  - [unfiled] Small typo in fontgen's READM).
  - [unfiled] Bad contrast adjustment in images with transparency.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1623067200">- Update to 1.6.1:
  * Add NOCONFIGURE variable to autogen.sh to skip configure
  Bug fixes:
  * #50 SIGBUS while loading huge GIFs
  * #52 Produces small glitches in output with some images
  * #54 Haiku port fails on 32bit
  * [unfiled] Exclude RTL code points that could break the output.
  * [unfiled] Apple Terminal lacks truecolor support, so make it
    default to 256 colors
  * [unfiled] Fix typo affecting middle dot symbol.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1630497600">- Update to 1.8.0:
  * Added basic support for the Kitty and iTerm2 graphics protocols.
    These are enabled automatically when corresponding terminal support
    is detected, or manually with -f kitty or -f iterm.
  * Implemented an 8-color mode, selectable with -c 8
  * Implemented a foreground-only switch, --fg-only. This produces
    character art using foreground colors only, and will avoid
    modifying or resetting the background color. Looks best with
    non-contiguous symbols (e.g. ascii).
  * Added builtins for Japanese kana fullwidth symbols. These can
    now be used without loading any external fonts (try -c none --symbols wide).
  * Added builtins for legacy computer symbols (mainly wedges and
    sextant blocks). These were widely used in PETSCII and Teletext,
    and can be enabled using --symbols or --fill with their respective
    tags: legacy, wedge and sextant (@hodefoting).
  * Since there is a growing number of builtin symbols that may not
    be available everywhere, the default selection has been restricted
    to the widely supported block and border sets.
  * If possible, we now select a visually blank character from the
    specified symbol/fill sets instead of hardcoding ASCII space for
    featureless cells. One practical upshot of this is that the constant-width
    braille range can be used to produce consistent images even in contexts
    with variable-width fonts. U+2800 (BRAILLE PATTERN BLANK) will then be used in blank cells.
  * Improved terminal size detection when used with pipelines and redirection.
    This should now produce an image properly sized for your terminal:
    curl https://i.imgur.com/WFDEFVg.jpeg | chafa - | tee out
  * ChafaCanvas gained API functions for programmatically getting and
    setting character cell contents. These are used in a new example
    in tests/ncurses.c demonstrating ncurses integration.
  * Made --disable-rpath the default in order to simplify packaging.
  * Added a HACKING file featuring a much needed release checklist.
  * Improved terminal support:
    + Ctx will now use optimizing REP sequences at high -O levels.
    + foot now defaults to sixels.
    + iTerm2 now defaults to the iTerm2 protocol.
    + Kitty now defaults to the Kitty protocol.
    + st now defaults to truecolor symbols.
  * Bug fixes:
    + #44 Missing error handling on stdout writes.
    + [unfiled] Solid symbols erroneously replaced by fill in FGBG mode.
    + [unfiled] Integer formatter was not using fast path for 8-bit values.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1651147200">- bsc#1198965 (CVE-2022-1507): Fix NULL pointer deref in gif_internal_decode_frame
  * Add chafa-CVE-2022-1507.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1655294400">- bsc#1200510 (CVE-2022-2061): Fix heap based buffer overflow
  in lzw_decode
  * Add chafa-CVE-2022-2061.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1657022400">- bsc#1201211 (CVE-2022-2301): Fix buffer over-read
  * Add chafa-CVE-2022-2301.patch</changelog>
</package>
<package pkgid="4027f2b26619332f24d7d3827a589024ed6d590c814bb7046a6973a73598a85f" name="libchafa0" arch="x86_64">
  <version epoch="0" ver="1.8.0" rel="bp154.3.8.1"/>
  <changelog author="mvetter@suse.com" date="1549627200">- Initial package chafa 1.0.1 for openSUSE</changelog>
  <changelog author="mvetter@suse.com" date="1565006400">- Update to 1.2.0:
  * Added --dither, --dither-grain and --dither-intensity options.
    These allow for sub-cell dithering in quantized modes (none,
    2, 16, 240 and 256). Especially beneficial when used with
  - p off.
  * Added API for ordered and diffusion-based dithering in quantization.
  * Added API support for multiple 8bpc pixel modes: RGB, BGR, RGBA,
    BGRA, ARGB, ABGR with either premultiplied or unassociated alpha channels.
  * Smooth scaling is now done internally, meaning libchafa
    consumers no longer need to prescale images.
  * Implemented a machine learning tool that can generate custom
    fonts for efficient image reproduction from a provided dataset.
    This is left uninstalled since it's still experimental
  * Throughput improvements:
    + GIF animations now start playing instantly.
    + GIF CPU overhead reduced by 75%, peak memory use down 95%-99% (!).
    + XWD common case CPU overhead down 60-70%, peak memory down 70%.
    + Additional halving of CPU overhead in 240- and 256-color modes.
    + Streamlined pixel pipeline for better parallelization.
  * Installation instructions:
    + New: Guix (Guy Fleury Iteriteka).
    + New: openSUSE (@jubalh).
  * Bug fixes:
    + [unfiled] Certain SVGs had transparency replaced with a white background (nemo).
    + [unfiled] -lm dependency belongs in libchafa, not frontend.</changelog>
  <changelog author="mvetter@suse.com" date="1566302400">- Update to 1.2.1:
  * Detect kitty and mlterm virtual terminals and apply optimal
    defaults accordingly
  * Make Automake build more strict and fix a few compatibility nits
  * Fix #30 - Failed to build on hurd-i386
  * Fix crash on certain broken GIFs</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566648000">- Update descriptions.
- Avoid double-shipping documentation, and make docs noarch.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1583323200">- Update to 1.2.2:
  * Fix #34 Cannot compile example</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1585828800">- Update to 1.4.0:
  * Added sixel graphics support. Chafa will automatically produce sixels
    if the connected terminal supports it. It can also be forced using the
    new -f or --format flag. This is a new implementation written from the
    ground up to maximize throughput.
  * Added the --glyph-file option, which loads glyph-symbol mappings from
    any file format supported by FreeType (TTF, PCF, etc). This allows for
    custom font support and improved symbol selection.
  * Added the --speed option specifying animation speed. It accepts a
    unitless multiplier, a specific number of frames per second, or max
    for maximum throughput.
  * There are now two ways to assign colors to symbol cells. Formerly,
    this was done based on the average color of the covered area. The new
    default is to use the median color, which produces sharper edges,
    but is slightly more prone to high-frequency noise. The new option
  - -color-extractor selects the method to employ.
  * When displaying multiple files, the default delay between files has
    been changed from three seconds to zero. Animations will still play
    through once. This can be overridden on the chafa command line with -d
    or --duration.
  * Minor tweaks to built-in symbols.
  Performance improvements:
  * Halved pixel storage requirements from 64 bits to 32 bits,
    resulting in significant memory savings.
  * Now builds with -ffast-math, yielding a big speedup for DIN99d.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1586692800">- Update to 1.4.1:
  * Added configure option --disable-rpath. This allows packagers to
    prevent the hard-coded library search path from being embedded in
    the chafa command-line tool (Mo Zhou, #39).
  * Added defaults for the yaft terminal.
  Bug fixes:
  * #40 - Fails to build on hurd-i386 + other i386 (reported by Mo
    Zhou).
  * [unfiled] - Rare failed assert with mostly transparent sixel image
    (reported by Reddit user spryfigure).
  * [unfiled] - Minor typo in function docstring.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1610712000">- Update to 1.6.0:
  * Added support for fullwidth symbols that take up two character
    cells. These are common in East Asian scripts. Single-cell and
    double-cell symbols can be mixed, and -f symbols mode will use
    both if possible.
  * New symbol tags: alpha, digit, alnum, narrow, wide, ambiguous,
    ugly, bad. "Ambiguous" symbols have uncertain widths and may
    render poorly in some terminals. "Ugly" denotes symbols that
    are unsuitable for Chafa's cell-based graphics (multicolor
    emoji, ideographic descriptors, etc). "Bad" is a superset of
    these two categories. Bad symbols are always excluded unless
    explicitly enabled with e.g. CHAFA_SYMBOL_TAG_BAD (--symbols
    +bad in the frontend).
  * The font loader (--glyph-file option) now does a better job
    with proportional fonts.
  * Added options for controlling lossless optimization of output.
    Currently, attribute reuse and character repetition (REP
    sequence) are implemented.
  * Added -O option to the frontend. This controls the optimization
    level.
  * Added a simple abstraction layer for terminal control sequences
    (ChafaTermInfo and ChafaTermDb). This allows for improved
    terminal support.
  * FbTerm is now supported with TERM=fbterm in the environment.
  * Bug fixes:
  - #43 Fix signal handler.
  - [unfiled] Crash when invalid font paths were passed on command line.
  - [unfiled] Small typo in fontgen's READM).
  - [unfiled] Bad contrast adjustment in images with transparency.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1623067200">- Update to 1.6.1:
  * Add NOCONFIGURE variable to autogen.sh to skip configure
  Bug fixes:
  * #50 SIGBUS while loading huge GIFs
  * #52 Produces small glitches in output with some images
  * #54 Haiku port fails on 32bit
  * [unfiled] Exclude RTL code points that could break the output.
  * [unfiled] Apple Terminal lacks truecolor support, so make it
    default to 256 colors
  * [unfiled] Fix typo affecting middle dot symbol.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1630497600">- Update to 1.8.0:
  * Added basic support for the Kitty and iTerm2 graphics protocols.
    These are enabled automatically when corresponding terminal support
    is detected, or manually with -f kitty or -f iterm.
  * Implemented an 8-color mode, selectable with -c 8
  * Implemented a foreground-only switch, --fg-only. This produces
    character art using foreground colors only, and will avoid
    modifying or resetting the background color. Looks best with
    non-contiguous symbols (e.g. ascii).
  * Added builtins for Japanese kana fullwidth symbols. These can
    now be used without loading any external fonts (try -c none --symbols wide).
  * Added builtins for legacy computer symbols (mainly wedges and
    sextant blocks). These were widely used in PETSCII and Teletext,
    and can be enabled using --symbols or --fill with their respective
    tags: legacy, wedge and sextant (@hodefoting).
  * Since there is a growing number of builtin symbols that may not
    be available everywhere, the default selection has been restricted
    to the widely supported block and border sets.
  * If possible, we now select a visually blank character from the
    specified symbol/fill sets instead of hardcoding ASCII space for
    featureless cells. One practical upshot of this is that the constant-width
    braille range can be used to produce consistent images even in contexts
    with variable-width fonts. U+2800 (BRAILLE PATTERN BLANK) will then be used in blank cells.
  * Improved terminal size detection when used with pipelines and redirection.
    This should now produce an image properly sized for your terminal:
    curl https://i.imgur.com/WFDEFVg.jpeg | chafa - | tee out
  * ChafaCanvas gained API functions for programmatically getting and
    setting character cell contents. These are used in a new example
    in tests/ncurses.c demonstrating ncurses integration.
  * Made --disable-rpath the default in order to simplify packaging.
  * Added a HACKING file featuring a much needed release checklist.
  * Improved terminal support:
    + Ctx will now use optimizing REP sequences at high -O levels.
    + foot now defaults to sixels.
    + iTerm2 now defaults to the iTerm2 protocol.
    + Kitty now defaults to the Kitty protocol.
    + st now defaults to truecolor symbols.
  * Bug fixes:
    + #44 Missing error handling on stdout writes.
    + [unfiled] Solid symbols erroneously replaced by fill in FGBG mode.
    + [unfiled] Integer formatter was not using fast path for 8-bit values.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1651147200">- bsc#1198965 (CVE-2022-1507): Fix NULL pointer deref in gif_internal_decode_frame
  * Add chafa-CVE-2022-1507.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1655294400">- bsc#1200510 (CVE-2022-2061): Fix heap based buffer overflow
  in lzw_decode
  * Add chafa-CVE-2022-2061.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1657022400">- bsc#1201211 (CVE-2022-2301): Fix buffer over-read
  * Add chafa-CVE-2022-2301.patch</changelog>
</package>
<package pkgid="d842195ddcaa7a0b83625fc61f8cb83de60e6741b427c5caaa236cfa7e1bfe4e" name="libdnf" arch="src">
  <version epoch="0" ver="0.65.0" rel="bp154.2.1"/>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1594123200">- Update to version 0.48.0
  + Add prereq_ignoreinst &amp; regular_requires properties for pkg (rh#1543449)
  + Reset active modules when no module enabled or default (rh#1767351)
  + Add comment option to transaction (rh#1773679)
  + Failing to get module defauls is a recoverable error
  + Baseurl is not exclusive with mirrorlist/metalink (rh#1775184)
  + Add new function to reset all modules in C API (dnf_context_reset_all_modules)
  + [context] Fix to preserve additionalMetadata content (rh#1808677)
  + Fix filtering of DepSolvables with source rpms (rh#1812596)
  + Add setter for running kernel protection setting
  + Handle situation when an unprivileged user cannot create history database (rh#1634385)
  + Add query filter: latest by priority
  + Add DNF_NO_PROTECTED flag to allow empty list of protected packages
  + Remove 'dim' option from terminal colors to make them more readable (rh#1807774, rh#1814563)
  + [context] Error when main config file can't be opened (rh#1794864)
  + [context] Add function function dnf_context_is_set_config_file_path
  + swdb: Catch only SQLite3 exceptions and simplify the messages
  + MergedTransaction list multiple comments (rh#1773679)
  + Modify CMake to pull *.po files from weblate
  + Optimize DependencyContainer creation from an existing queue
  + fix a memory leak in dnf_package_get_requires()
  + Fix memory leaks on g_build_filename()
  + Fix memory leak in dnf_context_setup()
  + Add `hy_goal_favor` and `hy_goal_disfavor`
  + Define a cleanup function for `DnfPackageSet`
  + dnf-repo: fix dnf_repo_get_public_keys double-free
  + Do not cache RPMDB
  + Use single-quotes around string literals used in SQL statements
  + SQLite3: Do not close the database if it wasn't opened (rh#1761976)
  + Don't create a new history DB connection for in-memory DB
  + transaction/Swdb: Use a single logger variable in constructor
  + utils: Add a safe version of pathExists()
  + swdb: Handle the case when pathExists() fails on e.g. permission
  + Repo: prepend "file://" if a local path is used as baseurl
  + Move urlEncode() to utils
  + utils: Add 'exclude' argument to urlEncode()
  + Encode package URL for downloading through librepo (rh#1817130)
  + Replace std::runtime_error with libdnf::RepoError
  + Fixes and error handling improvements of the File class
  + [context] Use ConfigRepo for gpgkey and baseurl (rh#1807864)
  + [context] support "priority" option in .repo config file (rh#1797265)
- Drop obsolete patch: libdnf-0.45.0-handle-all-rpmdb-variants.patch
- Refresh patch for static linking libsolvext
  + Remove patch: libdnf-0.39.1-with-static-libsolvext.patch
  + Add patch: libdnf-0.48.0-with-static-libsolvext.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1598011200">- Backport fix from upstream to fix building against check &gt;= 0.15
  + Patch: 0001-tests-Fix-incorrect-usage-of-the-fail_unless-macro.patch
- Clean up spec comments about patches</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1603540800">- Update to version 0.54.2
  + history: Fix dnf history rollback when a package was removed (rh#1683134)
  + Add support for HY_GT, HY_LT in query nevra_strict
  + Fix parsing empty lines in config files
  + Accept '==' as an operator in reldeps (rh#1847946)
  + Add log file level main config option (rh#1802074)
  + Add protect_running_kernel configuration option (rh#1698145)
  + Context part of libdnf cannot assume zchunk is on (rh#1851841, rh#1779104)
  + Fix memory leak of resultingModuleIndex and handle g_object refs
  + Redirect librepo logs to libdnf logs with different source
  + Add hy_goal_lock
  + Enum/String conversions for Transaction Store/Replay
  + utils: Add a method to decode URLs
  + Unify hawkey.log line format with the rest of the logs
- Drop patches included in this release
  + Patch: 0001-tests-Fix-incorrect-usage-of-the-fail_unless-macro.patch
- Refresh patch for reposdir paths
  + Remove patch: libdnf-0.39.1-Switch-default-reposdir-to-etc-dnf-repos.d.patch
  + Add patch: libdnf-0.54.2-Switch-default-reposdir-to-etc-dnf-repos.d.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1606651200">- Update to version 0.55.0
  + Add vendor to dnf API (rh#1876561)
  + Add formatting function for solver error
  + Add error types in ModulePackageContainer
  + Implement module enable for context part
  + Improve string formatting for translation
  + Remove redundant printf and change logging info to notice (rh#1827424)
  + Add allow_vendor_change option (rh#1788371) (rh#1788371)
- Backport patches from upstream
  + Patch: 0001-Support-allow_vendor_change-setting-in-dnf-context-A.patch
  + Patch: 0001-context-dnf_keyring_add_public_keys-not-generate-err.patch
- Add patch to turn off changing vendors by default
  + Patch: libdnf-0.55.0-Switch-allow_vendor_change-off.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1607256000">- Update to version 0.55.2
  + Improve performance of query installed() and available()
  + Swdb: Add a method to get the current transaction
  + [modules] Add special handling for src artifacts (rh#1809314)
  + Better msgs if "basecachedir" or "proxy_password" isn't set (rh#1888946)
  + Add new options module_stream_switch
  + Support allow_vendor_change setting in dnf context API
- Drop patches incorporated into this release
  + Patch: 0001-Support-allow_vendor_change-setting-in-dnf-context-A.patch
  + Patch: 0001-context-dnf_keyring_add_public_keys-not-generate-err.patch
- Use cmake_build and cmake_install macros</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1609761600">- Add patch to support armv6hl and RISC-V architectures
  + Patch: 0001-context-Sync-missing-arches-from-DNF.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1612267200">- Update to version 0.58.0
  + Option: Add reset() method
  + Add OptionBinds::getOption() method
  + [context] Add dnf_repo_conf_from_gkeyfile() and dnf_repo_conf_reset()
  + [context] Add support for options: minrate, throttle, bandwidth, timeout
  + [context] Remove g_key_file_get_string() from dnf_repo_set_keyfile_data()
  + Allow loading ext metadata even if only cache (solv) is present
  + Add ASAN_OPTIONS for test_libdnf_main
  + [context,API] Functions for accessing main/global configuration options
  + [context,API] Function for adding setopt
  + Add getter for modular obsoletes from ModuleMetadata
  + Add ModulePackage.getStaticContext() and getRequires()
  + Add compatible layer for MdDocuments v2
  + Fix modular queries with the new solver
  + Improve formatting of error string for modules
  + Change mechanism of module conflicts
  + Fix load/update FailSafe
- Drop patch included in this release
  + Patch: 0001-context-Sync-missing-arches-from-DNF.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1613131200">- Backport fixes to add controls for installonlypkgs and protected_packages
  + Patch: 0001-context-Support-config-file-option-installonlypkgs.patch
  + Patch: 0002-context-Support-config-file-option-protected_package.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1613217600">- Add patch to move directory for dnf state data to /usr/lib/sysimage
  + Patch: libdnf-0.58.0-Use-usr-lib-sysimage-for-the-persistent-state-dir.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1613217601">- Backport another fix for adding controls to installonlypkgs
  + Patch: 0001-context-Fix-dnf_package_is_installonly-RhBug-1928056.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1614081600">- Backport support for using certificates for repository authorization
  + Patch: 0001-Fix-librepo-version-required-in-CMakeList.txt-1.12.0.patch
  + Patch: 0002-Fix-Fully-set-ssl-in-newHandle-function.patch
  + Patch: 0003-conf-Add-options-for-working-with-certificates-used-.patch
  + Patch: 0004-Apply-proxy-certificate-options.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1614254400">- Add repo-config-zypp subpackage to allow easily using Zypper
  repository configuration</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1614340800">- Backport more fixes for using certs for repo authorization
  + Patch: 0001-Deduplicate-code-create-Repo-Impl-stringToProxyAuthM.patch
  + Patch: 0002-context-Support-config-file-option-proxy_auth_method.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1614686400">- Update to 0.60.0
  + Fix repo.fresh() implementation
  + Fix: Fully set ssl in newHandle function
  + [conf] Add options for working with certificates used with proxy
  + Apply proxy certificate options
  + lock: Switch return-if-fail to assert to quiet gcc -fanalyzer
  + build-sys: Clean up message about Python bindings
  + Modify module NSVCA parsing - context definition (rh#1926771)
  + [context] Fix: dnf_package_is_installonly (rh#1928056)
  + Fix problematic language
  + Add getApplicablePackages to advisory and isApplicable to advisorymodule
  + Keep isAdvisoryApplicable to preserve API
  + Run ModulePackageContainerTest tests in tmpdir, merge interdependent
  + [context] Support config file option "proxy_auth_method", defaults "any"
  + Properly handle multiple collections in updateinfo.xml (rh#1804234)
  + Support main config file option "installonlypkgs"
  + Support main config file option "protected_packages"
- Drop patches now part of this release
  + Patch: 0001-context-Support-config-file-option-installonlypkgs.patch
  + Patch: 0002-context-Support-config-file-option-protected_package.patch
  + Patch: 0001-context-Fix-dnf_package_is_installonly-RhBug-1928056.patch
  + Patch: 0001-Fix-librepo-version-required-in-CMakeList.txt-1.12.0.patch
  + Patch: 0002-Fix-Fully-set-ssl-in-newHandle-function.patch
  + Patch: 0003-conf-Add-options-for-working-with-certificates-used-.patch
  + Patch: 0004-Apply-proxy-certificate-options.patch
  + Patch: 0001-Deduplicate-code-create-Repo-Impl-stringToProxyAuthM.patch
  + Patch: 0002-context-Support-config-file-option-proxy_auth_method.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1614686401">- Fix dependency for repo-config-zypp subpackage to work with SLE</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1618315200">- Update to 0.62.0
  + Change order of TransactionItemReason (rh#1921063)
  + Add two new comperators for security filters (rh#1918475)
  + Apply security filters for candidates with lower priority
  + Fix: Goal - translation of messages in global maps
  + Enhance description of modular solvables
  + Improve performance for module query
  + Change mechanism of modular errata applicability (rh#1804234)
  + dnf_transaction_commit(): Remove second call to rpmtsSetVSFlags
  + Fix a couple of memory leaks
  + Fix: Setting of librepo handle in newHandle function
  + Remove failsafe data when module is not enabled (rh#1847035)
  + Expose librepo's checksum functions via SWIG
  + Fix: Mising check of "hy_split_nevra()" return code
  + Do not allow 1 as installonly_limit value (rh#1926261)
  + Fix check whether the subkey can be used for signing
  + Hardening: add signature check with rpmcliVerifySignatures
    (CVE-2021-3445, CVE-2021-3421, CVE-2021-20271, rh#1932079, rh#1932089, rh#1932090, boo#1183779)
  + Add a config option sslverifystatus, defaults to false (rh#1814383)
  + [context] Add API for distro-sync</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1618488000">- Add patch to fix crash when loading DVD repositories
  + Patch: 0001-Fix-a-crash-when-repoId-not-found-in-loaded-conf-gke.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1630065600">- Update to 0.63.1
  + ModuleProfile: add isDefault()
  + ModulePackage: add getDefaultProfile()
  + Add new dnf_context_module_install() C API
  + Fix a crash when [media] section in .treeinfo is missing for bootable media (rh#1946024)
  + Add hy_query_get_advisory_pkgs to C API (rh#1960561)
  + Add dnf_advisorypkg_get_advisory()
  + DNF does not fail on non UTF-8 file names in a package (rh#1893176)
  + Improve error-reporting for modular functions
- Drop patch included in this release
  + Patch: 0001-Fix-a-crash-when-repoId-not-found-in-loaded-conf-gke.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1635940800">- Update to 0.65.0
  + Add support for excluding packages to be installed as weak dependencies
  + Add support for autodetecting packages to be excluded from being installed as weak dependencies
  + Turn off strict validation of modulemd documents (rh#2004853, rh#2007166, rh#2007167)
  + Implement logic for demodularization of modular rpms (rh#1805260)
  + DnfContext: fix handling of default module profiles
  + ModuleMetadata: gracefully handle modules with no defaults
  + Remove failovermethod config option (rh#1961083)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1647259200">- Skip rich deps for autodetection of unmet dependencies (rh#2033130)
  + Patch: 0001-Skip-rich-deps-for-autodetection-of-unmet-dependencies.patch</changelog>
</package>
<package pkgid="97060a3446ce487065804f45a05369cd67f3012ff23e941983d3329b211011b3" name="libdnf-devel" arch="aarch64">
  <version epoch="0" ver="0.65.0" rel="bp154.2.1"/>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1594123200">- Update to version 0.48.0
  + Add prereq_ignoreinst &amp; regular_requires properties for pkg (rh#1543449)
  + Reset active modules when no module enabled or default (rh#1767351)
  + Add comment option to transaction (rh#1773679)
  + Failing to get module defauls is a recoverable error
  + Baseurl is not exclusive with mirrorlist/metalink (rh#1775184)
  + Add new function to reset all modules in C API (dnf_context_reset_all_modules)
  + [context] Fix to preserve additionalMetadata content (rh#1808677)
  + Fix filtering of DepSolvables with source rpms (rh#1812596)
  + Add setter for running kernel protection setting
  + Handle situation when an unprivileged user cannot create history database (rh#1634385)
  + Add query filter: latest by priority
  + Add DNF_NO_PROTECTED flag to allow empty list of protected packages
  + Remove 'dim' option from terminal colors to make them more readable (rh#1807774, rh#1814563)
  + [context] Error when main config file can't be opened (rh#1794864)
  + [context] Add function function dnf_context_is_set_config_file_path
  + swdb: Catch only SQLite3 exceptions and simplify the messages
  + MergedTransaction list multiple comments (rh#1773679)
  + Modify CMake to pull *.po files from weblate
  + Optimize DependencyContainer creation from an existing queue
  + fix a memory leak in dnf_package_get_requires()
  + Fix memory leaks on g_build_filename()
  + Fix memory leak in dnf_context_setup()
  + Add `hy_goal_favor` and `hy_goal_disfavor`
  + Define a cleanup function for `DnfPackageSet`
  + dnf-repo: fix dnf_repo_get_public_keys double-free
  + Do not cache RPMDB
  + Use single-quotes around string literals used in SQL statements
  + SQLite3: Do not close the database if it wasn't opened (rh#1761976)
  + Don't create a new history DB connection for in-memory DB
  + transaction/Swdb: Use a single logger variable in constructor
  + utils: Add a safe version of pathExists()
  + swdb: Handle the case when pathExists() fails on e.g. permission
  + Repo: prepend "file://" if a local path is used as baseurl
  + Move urlEncode() to utils
  + utils: Add 'exclude' argument to urlEncode()
  + Encode package URL for downloading through librepo (rh#1817130)
  + Replace std::runtime_error with libdnf::RepoError
  + Fixes and error handling improvements of the File class
  + [context] Use ConfigRepo for gpgkey and baseurl (rh#1807864)
  + [context] support "priority" option in .repo config file (rh#1797265)
- Drop obsolete patch: libdnf-0.45.0-handle-all-rpmdb-variants.patch
- Refresh patch for static linking libsolvext
  + Remove patch: libdnf-0.39.1-with-static-libsolvext.patch
  + Add patch: libdnf-0.48.0-with-static-libsolvext.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1598011200">- Backport fix from upstream to fix building against check &gt;= 0.15
  + Patch: 0001-tests-Fix-incorrect-usage-of-the-fail_unless-macro.patch
- Clean up spec comments about patches</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1603540800">- Update to version 0.54.2
  + history: Fix dnf history rollback when a package was removed (rh#1683134)
  + Add support for HY_GT, HY_LT in query nevra_strict
  + Fix parsing empty lines in config files
  + Accept '==' as an operator in reldeps (rh#1847946)
  + Add log file level main config option (rh#1802074)
  + Add protect_running_kernel configuration option (rh#1698145)
  + Context part of libdnf cannot assume zchunk is on (rh#1851841, rh#1779104)
  + Fix memory leak of resultingModuleIndex and handle g_object refs
  + Redirect librepo logs to libdnf logs with different source
  + Add hy_goal_lock
  + Enum/String conversions for Transaction Store/Replay
  + utils: Add a method to decode URLs
  + Unify hawkey.log line format with the rest of the logs
- Drop patches included in this release
  + Patch: 0001-tests-Fix-incorrect-usage-of-the-fail_unless-macro.patch
- Refresh patch for reposdir paths
  + Remove patch: libdnf-0.39.1-Switch-default-reposdir-to-etc-dnf-repos.d.patch
  + Add patch: libdnf-0.54.2-Switch-default-reposdir-to-etc-dnf-repos.d.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1606651200">- Update to version 0.55.0
  + Add vendor to dnf API (rh#1876561)
  + Add formatting function for solver error
  + Add error types in ModulePackageContainer
  + Implement module enable for context part
  + Improve string formatting for translation
  + Remove redundant printf and change logging info to notice (rh#1827424)
  + Add allow_vendor_change option (rh#1788371) (rh#1788371)
- Backport patches from upstream
  + Patch: 0001-Support-allow_vendor_change-setting-in-dnf-context-A.patch
  + Patch: 0001-context-dnf_keyring_add_public_keys-not-generate-err.patch
- Add patch to turn off changing vendors by default
  + Patch: libdnf-0.55.0-Switch-allow_vendor_change-off.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1607256000">- Update to version 0.55.2
  + Improve performance of query installed() and available()
  + Swdb: Add a method to get the current transaction
  + [modules] Add special handling for src artifacts (rh#1809314)
  + Better msgs if "basecachedir" or "proxy_password" isn't set (rh#1888946)
  + Add new options module_stream_switch
  + Support allow_vendor_change setting in dnf context API
- Drop patches incorporated into this release
  + Patch: 0001-Support-allow_vendor_change-setting-in-dnf-context-A.patch
  + Patch: 0001-context-dnf_keyring_add_public_keys-not-generate-err.patch
- Use cmake_build and cmake_install macros</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1609761600">- Add patch to support armv6hl and RISC-V architectures
  + Patch: 0001-context-Sync-missing-arches-from-DNF.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1612267200">- Update to version 0.58.0
  + Option: Add reset() method
  + Add OptionBinds::getOption() method
  + [context] Add dnf_repo_conf_from_gkeyfile() and dnf_repo_conf_reset()
  + [context] Add support for options: minrate, throttle, bandwidth, timeout
  + [context] Remove g_key_file_get_string() from dnf_repo_set_keyfile_data()
  + Allow loading ext metadata even if only cache (solv) is present
  + Add ASAN_OPTIONS for test_libdnf_main
  + [context,API] Functions for accessing main/global configuration options
  + [context,API] Function for adding setopt
  + Add getter for modular obsoletes from ModuleMetadata
  + Add ModulePackage.getStaticContext() and getRequires()
  + Add compatible layer for MdDocuments v2
  + Fix modular queries with the new solver
  + Improve formatting of error string for modules
  + Change mechanism of module conflicts
  + Fix load/update FailSafe
- Drop patch included in this release
  + Patch: 0001-context-Sync-missing-arches-from-DNF.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1613131200">- Backport fixes to add controls for installonlypkgs and protected_packages
  + Patch: 0001-context-Support-config-file-option-installonlypkgs.patch
  + Patch: 0002-context-Support-config-file-option-protected_package.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1613217600">- Add patch to move directory for dnf state data to /usr/lib/sysimage
  + Patch: libdnf-0.58.0-Use-usr-lib-sysimage-for-the-persistent-state-dir.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1613217601">- Backport another fix for adding controls to installonlypkgs
  + Patch: 0001-context-Fix-dnf_package_is_installonly-RhBug-1928056.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1614081600">- Backport support for using certificates for repository authorization
  + Patch: 0001-Fix-librepo-version-required-in-CMakeList.txt-1.12.0.patch
  + Patch: 0002-Fix-Fully-set-ssl-in-newHandle-function.patch
  + Patch: 0003-conf-Add-options-for-working-with-certificates-used-.patch
  + Patch: 0004-Apply-proxy-certificate-options.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1614254400">- Add repo-config-zypp subpackage to allow easily using Zypper
  repository configuration</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1614340800">- Backport more fixes for using certs for repo authorization
  + Patch: 0001-Deduplicate-code-create-Repo-Impl-stringToProxyAuthM.patch
  + Patch: 0002-context-Support-config-file-option-proxy_auth_method.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1614686400">- Update to 0.60.0
  + Fix repo.fresh() implementation
  + Fix: Fully set ssl in newHandle function
  + [conf] Add options for working with certificates used with proxy
  + Apply proxy certificate options
  + lock: Switch return-if-fail to assert to quiet gcc -fanalyzer
  + build-sys: Clean up message about Python bindings
  + Modify module NSVCA parsing - context definition (rh#1926771)
  + [context] Fix: dnf_package_is_installonly (rh#1928056)
  + Fix problematic language
  + Add getApplicablePackages to advisory and isApplicable to advisorymodule
  + Keep isAdvisoryApplicable to preserve API
  + Run ModulePackageContainerTest tests in tmpdir, merge interdependent
  + [context] Support config file option "proxy_auth_method", defaults "any"
  + Properly handle multiple collections in updateinfo.xml (rh#1804234)
  + Support main config file option "installonlypkgs"
  + Support main config file option "protected_packages"
- Drop patches now part of this release
  + Patch: 0001-context-Support-config-file-option-installonlypkgs.patch
  + Patch: 0002-context-Support-config-file-option-protected_package.patch
  + Patch: 0001-context-Fix-dnf_package_is_installonly-RhBug-1928056.patch
  + Patch: 0001-Fix-librepo-version-required-in-CMakeList.txt-1.12.0.patch
  + Patch: 0002-Fix-Fully-set-ssl-in-newHandle-function.patch
  + Patch: 0003-conf-Add-options-for-working-with-certificates-used-.patch
  + Patch: 0004-Apply-proxy-certificate-options.patch
  + Patch: 0001-Deduplicate-code-create-Repo-Impl-stringToProxyAuthM.patch
  + Patch: 0002-context-Support-config-file-option-proxy_auth_method.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1614686401">- Fix dependency for repo-config-zypp subpackage to work with SLE</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1618315200">- Update to 0.62.0
  + Change order of TransactionItemReason (rh#1921063)
  + Add two new comperators for security filters (rh#1918475)
  + Apply security filters for candidates with lower priority
  + Fix: Goal - translation of messages in global maps
  + Enhance description of modular solvables
  + Improve performance for module query
  + Change mechanism of modular errata applicability (rh#1804234)
  + dnf_transaction_commit(): Remove second call to rpmtsSetVSFlags
  + Fix a couple of memory leaks
  + Fix: Setting of librepo handle in newHandle function
  + Remove failsafe data when module is not enabled (rh#1847035)
  + Expose librepo's checksum functions via SWIG
  + Fix: Mising check of "hy_split_nevra()" return code
  + Do not allow 1 as installonly_limit value (rh#1926261)
  + Fix check whether the subkey can be used for signing
  + Hardening: add signature check with rpmcliVerifySignatures
    (CVE-2021-3445, CVE-2021-3421, CVE-2021-20271, rh#1932079, rh#1932089, rh#1932090, boo#1183779)
  + Add a config option sslverifystatus, defaults to false (rh#1814383)
  + [context] Add API for distro-sync</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1618488000">- Add patch to fix crash when loading DVD repositories
  + Patch: 0001-Fix-a-crash-when-repoId-not-found-in-loaded-conf-gke.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1630065600">- Update to 0.63.1
  + ModuleProfile: add isDefault()
  + ModulePackage: add getDefaultProfile()
  + Add new dnf_context_module_install() C API
  + Fix a crash when [media] section in .treeinfo is missing for bootable media (rh#1946024)
  + Add hy_query_get_advisory_pkgs to C API (rh#1960561)
  + Add dnf_advisorypkg_get_advisory()
  + DNF does not fail on non UTF-8 file names in a package (rh#1893176)
  + Improve error-reporting for modular functions
- Drop patch included in this release
  + Patch: 0001-Fix-a-crash-when-repoId-not-found-in-loaded-conf-gke.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1635940800">- Update to 0.65.0
  + Add support for excluding packages to be installed as weak dependencies
  + Add support for autodetecting packages to be excluded from being installed as weak dependencies
  + Turn off strict validation of modulemd documents (rh#2004853, rh#2007166, rh#2007167)
  + Implement logic for demodularization of modular rpms (rh#1805260)
  + DnfContext: fix handling of default module profiles
  + ModuleMetadata: gracefully handle modules with no defaults
  + Remove failovermethod config option (rh#1961083)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1647259200">- Skip rich deps for autodetection of unmet dependencies (rh#2033130)
  + Patch: 0001-Skip-rich-deps-for-autodetection-of-unmet-dependencies.patch</changelog>
</package>
<package pkgid="8f61494ab5e169e7cd08bf2ea6f9c003979de34bcf8c576f37e2dccd452af422" name="libdnf-devel" arch="i586">
  <version epoch="0" ver="0.65.0" rel="bp154.2.1"/>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1594123200">- Update to version 0.48.0
  + Add prereq_ignoreinst &amp; regular_requires properties for pkg (rh#1543449)
  + Reset active modules when no module enabled or default (rh#1767351)
  + Add comment option to transaction (rh#1773679)
  + Failing to get module defauls is a recoverable error
  + Baseurl is not exclusive with mirrorlist/metalink (rh#1775184)
  + Add new function to reset all modules in C API (dnf_context_reset_all_modules)
  + [context] Fix to preserve additionalMetadata content (rh#1808677)
  + Fix filtering of DepSolvables with source rpms (rh#1812596)
  + Add setter for running kernel protection setting
  + Handle situation when an unprivileged user cannot create history database (rh#1634385)
  + Add query filter: latest by priority
  + Add DNF_NO_PROTECTED flag to allow empty list of protected packages
  + Remove 'dim' option from terminal colors to make them more readable (rh#1807774, rh#1814563)
  + [context] Error when main config file can't be opened (rh#1794864)
  + [context] Add function function dnf_context_is_set_config_file_path
  + swdb: Catch only SQLite3 exceptions and simplify the messages
  + MergedTransaction list multiple comments (rh#1773679)
  + Modify CMake to pull *.po files from weblate
  + Optimize DependencyContainer creation from an existing queue
  + fix a memory leak in dnf_package_get_requires()
  + Fix memory leaks on g_build_filename()
  + Fix memory leak in dnf_context_setup()
  + Add `hy_goal_favor` and `hy_goal_disfavor`
  + Define a cleanup function for `DnfPackageSet`
  + dnf-repo: fix dnf_repo_get_public_keys double-free
  + Do not cache RPMDB
  + Use single-quotes around string literals used in SQL statements
  + SQLite3: Do not close the database if it wasn't opened (rh#1761976)
  + Don't create a new history DB connection for in-memory DB
  + transaction/Swdb: Use a single logger variable in constructor
  + utils: Add a safe version of pathExists()
  + swdb: Handle the case when pathExists() fails on e.g. permission
  + Repo: prepend "file://" if a local path is used as baseurl
  + Move urlEncode() to utils
  + utils: Add 'exclude' argument to urlEncode()
  + Encode package URL for downloading through librepo (rh#1817130)
  + Replace std::runtime_error with libdnf::RepoError
  + Fixes and error handling improvements of the File class
  + [context] Use ConfigRepo for gpgkey and baseurl (rh#1807864)
  + [context] support "priority" option in .repo config file (rh#1797265)
- Drop obsolete patch: libdnf-0.45.0-handle-all-rpmdb-variants.patch
- Refresh patch for static linking libsolvext
  + Remove patch: libdnf-0.39.1-with-static-libsolvext.patch
  + Add patch: libdnf-0.48.0-with-static-libsolvext.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1598011200">- Backport fix from upstream to fix building against check &gt;= 0.15
  + Patch: 0001-tests-Fix-incorrect-usage-of-the-fail_unless-macro.patch
- Clean up spec comments about patches</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1603540800">- Update to version 0.54.2
  + history: Fix dnf history rollback when a package was removed (rh#1683134)
  + Add support for HY_GT, HY_LT in query nevra_strict
  + Fix parsing empty lines in config files
  + Accept '==' as an operator in reldeps (rh#1847946)
  + Add log file level main config option (rh#1802074)
  + Add protect_running_kernel configuration option (rh#1698145)
  + Context part of libdnf cannot assume zchunk is on (rh#1851841, rh#1779104)
  + Fix memory leak of resultingModuleIndex and handle g_object refs
  + Redirect librepo logs to libdnf logs with different source
  + Add hy_goal_lock
  + Enum/String conversions for Transaction Store/Replay
  + utils: Add a method to decode URLs
  + Unify hawkey.log line format with the rest of the logs
- Drop patches included in this release
  + Patch: 0001-tests-Fix-incorrect-usage-of-the-fail_unless-macro.patch
- Refresh patch for reposdir paths
  + Remove patch: libdnf-0.39.1-Switch-default-reposdir-to-etc-dnf-repos.d.patch
  + Add patch: libdnf-0.54.2-Switch-default-reposdir-to-etc-dnf-repos.d.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1606651200">- Update to version 0.55.0
  + Add vendor to dnf API (rh#1876561)
  + Add formatting function for solver error
  + Add error types in ModulePackageContainer
  + Implement module enable for context part
  + Improve string formatting for translation
  + Remove redundant printf and change logging info to notice (rh#1827424)
  + Add allow_vendor_change option (rh#1788371) (rh#1788371)
- Backport patches from upstream
  + Patch: 0001-Support-allow_vendor_change-setting-in-dnf-context-A.patch
  + Patch: 0001-context-dnf_keyring_add_public_keys-not-generate-err.patch
- Add patch to turn off changing vendors by default
  + Patch: libdnf-0.55.0-Switch-allow_vendor_change-off.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1607256000">- Update to version 0.55.2
  + Improve performance of query installed() and available()
  + Swdb: Add a method to get the current transaction
  + [modules] Add special handling for src artifacts (rh#1809314)
  + Better msgs if "basecachedir" or "proxy_password" isn't set (rh#1888946)
  + Add new options module_stream_switch
  + Support allow_vendor_change setting in dnf context API
- Drop patches incorporated into this release
  + Patch: 0001-Support-allow_vendor_change-setting-in-dnf-context-A.patch
  + Patch: 0001-context-dnf_keyring_add_public_keys-not-generate-err.patch
- Use cmake_build and cmake_install macros</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1609761600">- Add patch to support armv6hl and RISC-V architectures
  + Patch: 0001-context-Sync-missing-arches-from-DNF.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1612267200">- Update to version 0.58.0
  + Option: Add reset() method
  + Add OptionBinds::getOption() method
  + [context] Add dnf_repo_conf_from_gkeyfile() and dnf_repo_conf_reset()
  + [context] Add support for options: minrate, throttle, bandwidth, timeout
  + [context] Remove g_key_file_get_string() from dnf_repo_set_keyfile_data()
  + Allow loading ext metadata even if only cache (solv) is present
  + Add ASAN_OPTIONS for test_libdnf_main
  + [context,API] Functions for accessing main/global configuration options
  + [context,API] Function for adding setopt
  + Add getter for modular obsoletes from ModuleMetadata
  + Add ModulePackage.getStaticContext() and getRequires()
  + Add compatible layer for MdDocuments v2
  + Fix modular queries with the new solver
  + Improve formatting of error string for modules
  + Change mechanism of module conflicts
  + Fix load/update FailSafe
- Drop patch included in this release
  + Patch: 0001-context-Sync-missing-arches-from-DNF.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1613131200">- Backport fixes to add controls for installonlypkgs and protected_packages
  + Patch: 0001-context-Support-config-file-option-installonlypkgs.patch
  + Patch: 0002-context-Support-config-file-option-protected_package.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1613217600">- Add patch to move directory for dnf state data to /usr/lib/sysimage
  + Patch: libdnf-0.58.0-Use-usr-lib-sysimage-for-the-persistent-state-dir.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1613217601">- Backport another fix for adding controls to installonlypkgs
  + Patch: 0001-context-Fix-dnf_package_is_installonly-RhBug-1928056.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1614081600">- Backport support for using certificates for repository authorization
  + Patch: 0001-Fix-librepo-version-required-in-CMakeList.txt-1.12.0.patch
  + Patch: 0002-Fix-Fully-set-ssl-in-newHandle-function.patch
  + Patch: 0003-conf-Add-options-for-working-with-certificates-used-.patch
  + Patch: 0004-Apply-proxy-certificate-options.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1614254400">- Add repo-config-zypp subpackage to allow easily using Zypper
  repository configuration</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1614340800">- Backport more fixes for using certs for repo authorization
  + Patch: 0001-Deduplicate-code-create-Repo-Impl-stringToProxyAuthM.patch
  + Patch: 0002-context-Support-config-file-option-proxy_auth_method.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1614686400">- Update to 0.60.0
  + Fix repo.fresh() implementation
  + Fix: Fully set ssl in newHandle function
  + [conf] Add options for working with certificates used with proxy
  + Apply proxy certificate options
  + lock: Switch return-if-fail to assert to quiet gcc -fanalyzer
  + build-sys: Clean up message about Python bindings
  + Modify module NSVCA parsing - context definition (rh#1926771)
  + [context] Fix: dnf_package_is_installonly (rh#1928056)
  + Fix problematic language
  + Add getApplicablePackages to advisory and isApplicable to advisorymodule
  + Keep isAdvisoryApplicable to preserve API
  + Run ModulePackageContainerTest tests in tmpdir, merge interdependent
  + [context] Support config file option "proxy_auth_method", defaults "any"
  + Properly handle multiple collections in updateinfo.xml (rh#1804234)
  + Support main config file option "installonlypkgs"
  + Support main config file option "protected_packages"
- Drop patches now part of this release
  + Patch: 0001-context-Support-config-file-option-installonlypkgs.patch
  + Patch: 0002-context-Support-config-file-option-protected_package.patch
  + Patch: 0001-context-Fix-dnf_package_is_installonly-RhBug-1928056.patch
  + Patch: 0001-Fix-librepo-version-required-in-CMakeList.txt-1.12.0.patch
  + Patch: 0002-Fix-Fully-set-ssl-in-newHandle-function.patch
  + Patch: 0003-conf-Add-options-for-working-with-certificates-used-.patch
  + Patch: 0004-Apply-proxy-certificate-options.patch
  + Patch: 0001-Deduplicate-code-create-Repo-Impl-stringToProxyAuthM.patch
  + Patch: 0002-context-Support-config-file-option-proxy_auth_method.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1614686401">- Fix dependency for repo-config-zypp subpackage to work with SLE</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1618315200">- Update to 0.62.0
  + Change order of TransactionItemReason (rh#1921063)
  + Add two new comperators for security filters (rh#1918475)
  + Apply security filters for candidates with lower priority
  + Fix: Goal - translation of messages in global maps
  + Enhance description of modular solvables
  + Improve performance for module query
  + Change mechanism of modular errata applicability (rh#1804234)
  + dnf_transaction_commit(): Remove second call to rpmtsSetVSFlags
  + Fix a couple of memory leaks
  + Fix: Setting of librepo handle in newHandle function
  + Remove failsafe data when module is not enabled (rh#1847035)
  + Expose librepo's checksum functions via SWIG
  + Fix: Mising check of "hy_split_nevra()" return code
  + Do not allow 1 as installonly_limit value (rh#1926261)
  + Fix check whether the subkey can be used for signing
  + Hardening: add signature check with rpmcliVerifySignatures
    (CVE-2021-3445, CVE-2021-3421, CVE-2021-20271, rh#1932079, rh#1932089, rh#1932090, boo#1183779)
  + Add a config option sslverifystatus, defaults to false (rh#1814383)
  + [context] Add API for distro-sync</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1618488000">- Add patch to fix crash when loading DVD repositories
  + Patch: 0001-Fix-a-crash-when-repoId-not-found-in-loaded-conf-gke.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1630065600">- Update to 0.63.1
  + ModuleProfile: add isDefault()
  + ModulePackage: add getDefaultProfile()
  + Add new dnf_context_module_install() C API
  + Fix a crash when [media] section in .treeinfo is missing for bootable media (rh#1946024)
  + Add hy_query_get_advisory_pkgs to C API (rh#1960561)
  + Add dnf_advisorypkg_get_advisory()
  + DNF does not fail on non UTF-8 file names in a package (rh#1893176)
  + Improve error-reporting for modular functions
- Drop patch included in this release
  + Patch: 0001-Fix-a-crash-when-repoId-not-found-in-loaded-conf-gke.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1635940800">- Update to 0.65.0
  + Add support for excluding packages to be installed as weak dependencies
  + Add support for autodetecting packages to be excluded from being installed as weak dependencies
  + Turn off strict validation of modulemd documents (rh#2004853, rh#2007166, rh#2007167)
  + Implement logic for demodularization of modular rpms (rh#1805260)
  + DnfContext: fix handling of default module profiles
  + ModuleMetadata: gracefully handle modules with no defaults
  + Remove failovermethod config option (rh#1961083)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1647259200">- Skip rich deps for autodetection of unmet dependencies (rh#2033130)
  + Patch: 0001-Skip-rich-deps-for-autodetection-of-unmet-dependencies.patch</changelog>
</package>
<package pkgid="6cd52e1e3ed204a2d28c7590de30546683346ad91e872939dfd3184899de012a" name="libdnf-devel" arch="ppc64le">
  <version epoch="0" ver="0.65.0" rel="bp154.2.1"/>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1594123200">- Update to version 0.48.0
  + Add prereq_ignoreinst &amp; regular_requires properties for pkg (rh#1543449)
  + Reset active modules when no module enabled or default (rh#1767351)
  + Add comment option to transaction (rh#1773679)
  + Failing to get module defauls is a recoverable error
  + Baseurl is not exclusive with mirrorlist/metalink (rh#1775184)
  + Add new function to reset all modules in C API (dnf_context_reset_all_modules)
  + [context] Fix to preserve additionalMetadata content (rh#1808677)
  + Fix filtering of DepSolvables with source rpms (rh#1812596)
  + Add setter for running kernel protection setting
  + Handle situation when an unprivileged user cannot create history database (rh#1634385)
  + Add query filter: latest by priority
  + Add DNF_NO_PROTECTED flag to allow empty list of protected packages
  + Remove 'dim' option from terminal colors to make them more readable (rh#1807774, rh#1814563)
  + [context] Error when main config file can't be opened (rh#1794864)
  + [context] Add function function dnf_context_is_set_config_file_path
  + swdb: Catch only SQLite3 exceptions and simplify the messages
  + MergedTransaction list multiple comments (rh#1773679)
  + Modify CMake to pull *.po files from weblate
  + Optimize DependencyContainer creation from an existing queue
  + fix a memory leak in dnf_package_get_requires()
  + Fix memory leaks on g_build_filename()
  + Fix memory leak in dnf_context_setup()
  + Add `hy_goal_favor` and `hy_goal_disfavor`
  + Define a cleanup function for `DnfPackageSet`
  + dnf-repo: fix dnf_repo_get_public_keys double-free
  + Do not cache RPMDB
  + Use single-quotes around string literals used in SQL statements
  + SQLite3: Do not close the database if it wasn't opened (rh#1761976)
  + Don't create a new history DB connection for in-memory DB
  + transaction/Swdb: Use a single logger variable in constructor
  + utils: Add a safe version of pathExists()
  + swdb: Handle the case when pathExists() fails on e.g. permission
  + Repo: prepend "file://" if a local path is used as baseurl
  + Move urlEncode() to utils
  + utils: Add 'exclude' argument to urlEncode()
  + Encode package URL for downloading through librepo (rh#1817130)
  + Replace std::runtime_error with libdnf::RepoError
  + Fixes and error handling improvements of the File class
  + [context] Use ConfigRepo for gpgkey and baseurl (rh#1807864)
  + [context] support "priority" option in .repo config file (rh#1797265)
- Drop obsolete patch: libdnf-0.45.0-handle-all-rpmdb-variants.patch
- Refresh patch for static linking libsolvext
  + Remove patch: libdnf-0.39.1-with-static-libsolvext.patch
  + Add patch: libdnf-0.48.0-with-static-libsolvext.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1598011200">- Backport fix from upstream to fix building against check &gt;= 0.15
  + Patch: 0001-tests-Fix-incorrect-usage-of-the-fail_unless-macro.patch
- Clean up spec comments about patches</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1603540800">- Update to version 0.54.2
  + history: Fix dnf history rollback when a package was removed (rh#1683134)
  + Add support for HY_GT, HY_LT in query nevra_strict
  + Fix parsing empty lines in config files
  + Accept '==' as an operator in reldeps (rh#1847946)
  + Add log file level main config option (rh#1802074)
  + Add protect_running_kernel configuration option (rh#1698145)
  + Context part of libdnf cannot assume zchunk is on (rh#1851841, rh#1779104)
  + Fix memory leak of resultingModuleIndex and handle g_object refs
  + Redirect librepo logs to libdnf logs with different source
  + Add hy_goal_lock
  + Enum/String conversions for Transaction Store/Replay
  + utils: Add a method to decode URLs
  + Unify hawkey.log line format with the rest of the logs
- Drop patches included in this release
  + Patch: 0001-tests-Fix-incorrect-usage-of-the-fail_unless-macro.patch
- Refresh patch for reposdir paths
  + Remove patch: libdnf-0.39.1-Switch-default-reposdir-to-etc-dnf-repos.d.patch
  + Add patch: libdnf-0.54.2-Switch-default-reposdir-to-etc-dnf-repos.d.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1606651200">- Update to version 0.55.0
  + Add vendor to dnf API (rh#1876561)
  + Add formatting function for solver error
  + Add error types in ModulePackageContainer
  + Implement module enable for context part
  + Improve string formatting for translation
  + Remove redundant printf and change logging info to notice (rh#1827424)
  + Add allow_vendor_change option (rh#1788371) (rh#1788371)
- Backport patches from upstream
  + Patch: 0001-Support-allow_vendor_change-setting-in-dnf-context-A.patch
  + Patch: 0001-context-dnf_keyring_add_public_keys-not-generate-err.patch
- Add patch to turn off changing vendors by default
  + Patch: libdnf-0.55.0-Switch-allow_vendor_change-off.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1607256000">- Update to version 0.55.2
  + Improve performance of query installed() and available()
  + Swdb: Add a method to get the current transaction
  + [modules] Add special handling for src artifacts (rh#1809314)
  + Better msgs if "basecachedir" or "proxy_password" isn't set (rh#1888946)
  + Add new options module_stream_switch
  + Support allow_vendor_change setting in dnf context API
- Drop patches incorporated into this release
  + Patch: 0001-Support-allow_vendor_change-setting-in-dnf-context-A.patch
  + Patch: 0001-context-dnf_keyring_add_public_keys-not-generate-err.patch
- Use cmake_build and cmake_install macros</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1609761600">- Add patch to support armv6hl and RISC-V architectures
  + Patch: 0001-context-Sync-missing-arches-from-DNF.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1612267200">- Update to version 0.58.0
  + Option: Add reset() method
  + Add OptionBinds::getOption() method
  + [context] Add dnf_repo_conf_from_gkeyfile() and dnf_repo_conf_reset()
  + [context] Add support for options: minrate, throttle, bandwidth, timeout
  + [context] Remove g_key_file_get_string() from dnf_repo_set_keyfile_data()
  + Allow loading ext metadata even if only cache (solv) is present
  + Add ASAN_OPTIONS for test_libdnf_main
  + [context,API] Functions for accessing main/global configuration options
  + [context,API] Function for adding setopt
  + Add getter for modular obsoletes from ModuleMetadata
  + Add ModulePackage.getStaticContext() and getRequires()
  + Add compatible layer for MdDocuments v2
  + Fix modular queries with the new solver
  + Improve formatting of error string for modules
  + Change mechanism of module conflicts
  + Fix load/update FailSafe
- Drop patch included in this release
  + Patch: 0001-context-Sync-missing-arches-from-DNF.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1613131200">- Backport fixes to add controls for installonlypkgs and protected_packages
  + Patch: 0001-context-Support-config-file-option-installonlypkgs.patch
  + Patch: 0002-context-Support-config-file-option-protected_package.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1613217600">- Add patch to move directory for dnf state data to /usr/lib/sysimage
  + Patch: libdnf-0.58.0-Use-usr-lib-sysimage-for-the-persistent-state-dir.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1613217601">- Backport another fix for adding controls to installonlypkgs
  + Patch: 0001-context-Fix-dnf_package_is_installonly-RhBug-1928056.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1614081600">- Backport support for using certificates for repository authorization
  + Patch: 0001-Fix-librepo-version-required-in-CMakeList.txt-1.12.0.patch
  + Patch: 0002-Fix-Fully-set-ssl-in-newHandle-function.patch
  + Patch: 0003-conf-Add-options-for-working-with-certificates-used-.patch
  + Patch: 0004-Apply-proxy-certificate-options.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1614254400">- Add repo-config-zypp subpackage to allow easily using Zypper
  repository configuration</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1614340800">- Backport more fixes for using certs for repo authorization
  + Patch: 0001-Deduplicate-code-create-Repo-Impl-stringToProxyAuthM.patch
  + Patch: 0002-context-Support-config-file-option-proxy_auth_method.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1614686400">- Update to 0.60.0
  + Fix repo.fresh() implementation
  + Fix: Fully set ssl in newHandle function
  + [conf] Add options for working with certificates used with proxy
  + Apply proxy certificate options
  + lock: Switch return-if-fail to assert to quiet gcc -fanalyzer
  + build-sys: Clean up message about Python bindings
  + Modify module NSVCA parsing - context definition (rh#1926771)
  + [context] Fix: dnf_package_is_installonly (rh#1928056)
  + Fix problematic language
  + Add getApplicablePackages to advisory and isApplicable to advisorymodule
  + Keep isAdvisoryApplicable to preserve API
  + Run ModulePackageContainerTest tests in tmpdir, merge interdependent
  + [context] Support config file option "proxy_auth_method", defaults "any"
  + Properly handle multiple collections in updateinfo.xml (rh#1804234)
  + Support main config file option "installonlypkgs"
  + Support main config file option "protected_packages"
- Drop patches now part of this release
  + Patch: 0001-context-Support-config-file-option-installonlypkgs.patch
  + Patch: 0002-context-Support-config-file-option-protected_package.patch
  + Patch: 0001-context-Fix-dnf_package_is_installonly-RhBug-1928056.patch
  + Patch: 0001-Fix-librepo-version-required-in-CMakeList.txt-1.12.0.patch
  + Patch: 0002-Fix-Fully-set-ssl-in-newHandle-function.patch
  + Patch: 0003-conf-Add-options-for-working-with-certificates-used-.patch
  + Patch: 0004-Apply-proxy-certificate-options.patch
  + Patch: 0001-Deduplicate-code-create-Repo-Impl-stringToProxyAuthM.patch
  + Patch: 0002-context-Support-config-file-option-proxy_auth_method.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1614686401">- Fix dependency for repo-config-zypp subpackage to work with SLE</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1618315200">- Update to 0.62.0
  + Change order of TransactionItemReason (rh#1921063)
  + Add two new comperators for security filters (rh#1918475)
  + Apply security filters for candidates with lower priority
  + Fix: Goal - translation of messages in global maps
  + Enhance description of modular solvables
  + Improve performance for module query
  + Change mechanism of modular errata applicability (rh#1804234)
  + dnf_transaction_commit(): Remove second call to rpmtsSetVSFlags
  + Fix a couple of memory leaks
  + Fix: Setting of librepo handle in newHandle function
  + Remove failsafe data when module is not enabled (rh#1847035)
  + Expose librepo's checksum functions via SWIG
  + Fix: Mising check of "hy_split_nevra()" return code
  + Do not allow 1 as installonly_limit value (rh#1926261)
  + Fix check whether the subkey can be used for signing
  + Hardening: add signature check with rpmcliVerifySignatures
    (CVE-2021-3445, CVE-2021-3421, CVE-2021-20271, rh#1932079, rh#1932089, rh#1932090, boo#1183779)
  + Add a config option sslverifystatus, defaults to false (rh#1814383)
  + [context] Add API for distro-sync</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1618488000">- Add patch to fix crash when loading DVD repositories
  + Patch: 0001-Fix-a-crash-when-repoId-not-found-in-loaded-conf-gke.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1630065600">- Update to 0.63.1
  + ModuleProfile: add isDefault()
  + ModulePackage: add getDefaultProfile()
  + Add new dnf_context_module_install() C API
  + Fix a crash when [media] section in .treeinfo is missing for bootable media (rh#1946024)
  + Add hy_query_get_advisory_pkgs to C API (rh#1960561)
  + Add dnf_advisorypkg_get_advisory()
  + DNF does not fail on non UTF-8 file names in a package (rh#1893176)
  + Improve error-reporting for modular functions
- Drop patch included in this release
  + Patch: 0001-Fix-a-crash-when-repoId-not-found-in-loaded-conf-gke.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1635940800">- Update to 0.65.0
  + Add support for excluding packages to be installed as weak dependencies
  + Add support for autodetecting packages to be excluded from being installed as weak dependencies
  + Turn off strict validation of modulemd documents (rh#2004853, rh#2007166, rh#2007167)
  + Implement logic for demodularization of modular rpms (rh#1805260)
  + DnfContext: fix handling of default module profiles
  + ModuleMetadata: gracefully handle modules with no defaults
  + Remove failovermethod config option (rh#1961083)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1647259200">- Skip rich deps for autodetection of unmet dependencies (rh#2033130)
  + Patch: 0001-Skip-rich-deps-for-autodetection-of-unmet-dependencies.patch</changelog>
</package>
<package pkgid="8f4364a66107ec96227960d23e72d44a1704f4fd2673e269121291225bfe6d48" name="libdnf-devel" arch="s390x">
  <version epoch="0" ver="0.65.0" rel="bp154.2.1"/>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1594123200">- Update to version 0.48.0
  + Add prereq_ignoreinst &amp; regular_requires properties for pkg (rh#1543449)
  + Reset active modules when no module enabled or default (rh#1767351)
  + Add comment option to transaction (rh#1773679)
  + Failing to get module defauls is a recoverable error
  + Baseurl is not exclusive with mirrorlist/metalink (rh#1775184)
  + Add new function to reset all modules in C API (dnf_context_reset_all_modules)
  + [context] Fix to preserve additionalMetadata content (rh#1808677)
  + Fix filtering of DepSolvables with source rpms (rh#1812596)
  + Add setter for running kernel protection setting
  + Handle situation when an unprivileged user cannot create history database (rh#1634385)
  + Add query filter: latest by priority
  + Add DNF_NO_PROTECTED flag to allow empty list of protected packages
  + Remove 'dim' option from terminal colors to make them more readable (rh#1807774, rh#1814563)
  + [context] Error when main config file can't be opened (rh#1794864)
  + [context] Add function function dnf_context_is_set_config_file_path
  + swdb: Catch only SQLite3 exceptions and simplify the messages
  + MergedTransaction list multiple comments (rh#1773679)
  + Modify CMake to pull *.po files from weblate
  + Optimize DependencyContainer creation from an existing queue
  + fix a memory leak in dnf_package_get_requires()
  + Fix memory leaks on g_build_filename()
  + Fix memory leak in dnf_context_setup()
  + Add `hy_goal_favor` and `hy_goal_disfavor`
  + Define a cleanup function for `DnfPackageSet`
  + dnf-repo: fix dnf_repo_get_public_keys double-free
  + Do not cache RPMDB
  + Use single-quotes around string literals used in SQL statements
  + SQLite3: Do not close the database if it wasn't opened (rh#1761976)
  + Don't create a new history DB connection for in-memory DB
  + transaction/Swdb: Use a single logger variable in constructor
  + utils: Add a safe version of pathExists()
  + swdb: Handle the case when pathExists() fails on e.g. permission
  + Repo: prepend "file://" if a local path is used as baseurl
  + Move urlEncode() to utils
  + utils: Add 'exclude' argument to urlEncode()
  + Encode package URL for downloading through librepo (rh#1817130)
  + Replace std::runtime_error with libdnf::RepoError
  + Fixes and error handling improvements of the File class
  + [context] Use ConfigRepo for gpgkey and baseurl (rh#1807864)
  + [context] support "priority" option in .repo config file (rh#1797265)
- Drop obsolete patch: libdnf-0.45.0-handle-all-rpmdb-variants.patch
- Refresh patch for static linking libsolvext
  + Remove patch: libdnf-0.39.1-with-static-libsolvext.patch
  + Add patch: libdnf-0.48.0-with-static-libsolvext.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1598011200">- Backport fix from upstream to fix building against check &gt;= 0.15
  + Patch: 0001-tests-Fix-incorrect-usage-of-the-fail_unless-macro.patch
- Clean up spec comments about patches</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1603540800">- Update to version 0.54.2
  + history: Fix dnf history rollback when a package was removed (rh#1683134)
  + Add support for HY_GT, HY_LT in query nevra_strict
  + Fix parsing empty lines in config files
  + Accept '==' as an operator in reldeps (rh#1847946)
  + Add log file level main config option (rh#1802074)
  + Add protect_running_kernel configuration option (rh#1698145)
  + Context part of libdnf cannot assume zchunk is on (rh#1851841, rh#1779104)
  + Fix memory leak of resultingModuleIndex and handle g_object refs
  + Redirect librepo logs to libdnf logs with different source
  + Add hy_goal_lock
  + Enum/String conversions for Transaction Store/Replay
  + utils: Add a method to decode URLs
  + Unify hawkey.log line format with the rest of the logs
- Drop patches included in this release
  + Patch: 0001-tests-Fix-incorrect-usage-of-the-fail_unless-macro.patch
- Refresh patch for reposdir paths
  + Remove patch: libdnf-0.39.1-Switch-default-reposdir-to-etc-dnf-repos.d.patch
  + Add patch: libdnf-0.54.2-Switch-default-reposdir-to-etc-dnf-repos.d.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1606651200">- Update to version 0.55.0
  + Add vendor to dnf API (rh#1876561)
  + Add formatting function for solver error
  + Add error types in ModulePackageContainer
  + Implement module enable for context part
  + Improve string formatting for translation
  + Remove redundant printf and change logging info to notice (rh#1827424)
  + Add allow_vendor_change option (rh#1788371) (rh#1788371)
- Backport patches from upstream
  + Patch: 0001-Support-allow_vendor_change-setting-in-dnf-context-A.patch
  + Patch: 0001-context-dnf_keyring_add_public_keys-not-generate-err.patch
- Add patch to turn off changing vendors by default
  + Patch: libdnf-0.55.0-Switch-allow_vendor_change-off.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1607256000">- Update to version 0.55.2
  + Improve performance of query installed() and available()
  + Swdb: Add a method to get the current transaction
  + [modules] Add special handling for src artifacts (rh#1809314)
  + Better msgs if "basecachedir" or "proxy_password" isn't set (rh#1888946)
  + Add new options module_stream_switch
  + Support allow_vendor_change setting in dnf context API
- Drop patches incorporated into this release
  + Patch: 0001-Support-allow_vendor_change-setting-in-dnf-context-A.patch
  + Patch: 0001-context-dnf_keyring_add_public_keys-not-generate-err.patch
- Use cmake_build and cmake_install macros</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1609761600">- Add patch to support armv6hl and RISC-V architectures
  + Patch: 0001-context-Sync-missing-arches-from-DNF.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1612267200">- Update to version 0.58.0
  + Option: Add reset() method
  + Add OptionBinds::getOption() method
  + [context] Add dnf_repo_conf_from_gkeyfile() and dnf_repo_conf_reset()
  + [context] Add support for options: minrate, throttle, bandwidth, timeout
  + [context] Remove g_key_file_get_string() from dnf_repo_set_keyfile_data()
  + Allow loading ext metadata even if only cache (solv) is present
  + Add ASAN_OPTIONS for test_libdnf_main
  + [context,API] Functions for accessing main/global configuration options
  + [context,API] Function for adding setopt
  + Add getter for modular obsoletes from ModuleMetadata
  + Add ModulePackage.getStaticContext() and getRequires()
  + Add compatible layer for MdDocuments v2
  + Fix modular queries with the new solver
  + Improve formatting of error string for modules
  + Change mechanism of module conflicts
  + Fix load/update FailSafe
- Drop patch included in this release
  + Patch: 0001-context-Sync-missing-arches-from-DNF.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1613131200">- Backport fixes to add controls for installonlypkgs and protected_packages
  + Patch: 0001-context-Support-config-file-option-installonlypkgs.patch
  + Patch: 0002-context-Support-config-file-option-protected_package.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1613217600">- Add patch to move directory for dnf state data to /usr/lib/sysimage
  + Patch: libdnf-0.58.0-Use-usr-lib-sysimage-for-the-persistent-state-dir.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1613217601">- Backport another fix for adding controls to installonlypkgs
  + Patch: 0001-context-Fix-dnf_package_is_installonly-RhBug-1928056.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1614081600">- Backport support for using certificates for repository authorization
  + Patch: 0001-Fix-librepo-version-required-in-CMakeList.txt-1.12.0.patch
  + Patch: 0002-Fix-Fully-set-ssl-in-newHandle-function.patch
  + Patch: 0003-conf-Add-options-for-working-with-certificates-used-.patch
  + Patch: 0004-Apply-proxy-certificate-options.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1614254400">- Add repo-config-zypp subpackage to allow easily using Zypper
  repository configuration</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1614340800">- Backport more fixes for using certs for repo authorization
  + Patch: 0001-Deduplicate-code-create-Repo-Impl-stringToProxyAuthM.patch
  + Patch: 0002-context-Support-config-file-option-proxy_auth_method.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1614686400">- Update to 0.60.0
  + Fix repo.fresh() implementation
  + Fix: Fully set ssl in newHandle function
  + [conf] Add options for working with certificates used with proxy
  + Apply proxy certificate options
  + lock: Switch return-if-fail to assert to quiet gcc -fanalyzer
  + build-sys: Clean up message about Python bindings
  + Modify module NSVCA parsing - context definition (rh#1926771)
  + [context] Fix: dnf_package_is_installonly (rh#1928056)
  + Fix problematic language
  + Add getApplicablePackages to advisory and isApplicable to advisorymodule
  + Keep isAdvisoryApplicable to preserve API
  + Run ModulePackageContainerTest tests in tmpdir, merge interdependent
  + [context] Support config file option "proxy_auth_method", defaults "any"
  + Properly handle multiple collections in updateinfo.xml (rh#1804234)
  + Support main config file option "installonlypkgs"
  + Support main config file option "protected_packages"
- Drop patches now part of this release
  + Patch: 0001-context-Support-config-file-option-installonlypkgs.patch
  + Patch: 0002-context-Support-config-file-option-protected_package.patch
  + Patch: 0001-context-Fix-dnf_package_is_installonly-RhBug-1928056.patch
  + Patch: 0001-Fix-librepo-version-required-in-CMakeList.txt-1.12.0.patch
  + Patch: 0002-Fix-Fully-set-ssl-in-newHandle-function.patch
  + Patch: 0003-conf-Add-options-for-working-with-certificates-used-.patch
  + Patch: 0004-Apply-proxy-certificate-options.patch
  + Patch: 0001-Deduplicate-code-create-Repo-Impl-stringToProxyAuthM.patch
  + Patch: 0002-context-Support-config-file-option-proxy_auth_method.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1614686401">- Fix dependency for repo-config-zypp subpackage to work with SLE</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1618315200">- Update to 0.62.0
  + Change order of TransactionItemReason (rh#1921063)
  + Add two new comperators for security filters (rh#1918475)
  + Apply security filters for candidates with lower priority
  + Fix: Goal - translation of messages in global maps
  + Enhance description of modular solvables
  + Improve performance for module query
  + Change mechanism of modular errata applicability (rh#1804234)
  + dnf_transaction_commit(): Remove second call to rpmtsSetVSFlags
  + Fix a couple of memory leaks
  + Fix: Setting of librepo handle in newHandle function
  + Remove failsafe data when module is not enabled (rh#1847035)
  + Expose librepo's checksum functions via SWIG
  + Fix: Mising check of "hy_split_nevra()" return code
  + Do not allow 1 as installonly_limit value (rh#1926261)
  + Fix check whether the subkey can be used for signing
  + Hardening: add signature check with rpmcliVerifySignatures
    (CVE-2021-3445, CVE-2021-3421, CVE-2021-20271, rh#1932079, rh#1932089, rh#1932090, boo#1183779)
  + Add a config option sslverifystatus, defaults to false (rh#1814383)
  + [context] Add API for distro-sync</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1618488000">- Add patch to fix crash when loading DVD repositories
  + Patch: 0001-Fix-a-crash-when-repoId-not-found-in-loaded-conf-gke.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1630065600">- Update to 0.63.1
  + ModuleProfile: add isDefault()
  + ModulePackage: add getDefaultProfile()
  + Add new dnf_context_module_install() C API
  + Fix a crash when [media] section in .treeinfo is missing for bootable media (rh#1946024)
  + Add hy_query_get_advisory_pkgs to C API (rh#1960561)
  + Add dnf_advisorypkg_get_advisory()
  + DNF does not fail on non UTF-8 file names in a package (rh#1893176)
  + Improve error-reporting for modular functions
- Drop patch included in this release
  + Patch: 0001-Fix-a-crash-when-repoId-not-found-in-loaded-conf-gke.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1635940800">- Update to 0.65.0
  + Add support for excluding packages to be installed as weak dependencies
  + Add support for autodetecting packages to be excluded from being installed as weak dependencies
  + Turn off strict validation of modulemd documents (rh#2004853, rh#2007166, rh#2007167)
  + Implement logic for demodularization of modular rpms (rh#1805260)
  + DnfContext: fix handling of default module profiles
  + ModuleMetadata: gracefully handle modules with no defaults
  + Remove failovermethod config option (rh#1961083)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1647259200">- Skip rich deps for autodetection of unmet dependencies (rh#2033130)
  + Patch: 0001-Skip-rich-deps-for-autodetection-of-unmet-dependencies.patch</changelog>
</package>
<package pkgid="f545afb8cd0c766b402354a311754bb00fd31362e4b5fb764c7b13852358247a" name="libdnf-devel" arch="x86_64">
  <version epoch="0" ver="0.65.0" rel="bp154.2.1"/>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1594123200">- Update to version 0.48.0
  + Add prereq_ignoreinst &amp; regular_requires properties for pkg (rh#1543449)
  + Reset active modules when no module enabled or default (rh#1767351)
  + Add comment option to transaction (rh#1773679)
  + Failing to get module defauls is a recoverable error
  + Baseurl is not exclusive with mirrorlist/metalink (rh#1775184)
  + Add new function to reset all modules in C API (dnf_context_reset_all_modules)
  + [context] Fix to preserve additionalMetadata content (rh#1808677)
  + Fix filtering of DepSolvables with source rpms (rh#1812596)
  + Add setter for running kernel protection setting
  + Handle situation when an unprivileged user cannot create history database (rh#1634385)
  + Add query filter: latest by priority
  + Add DNF_NO_PROTECTED flag to allow empty list of protected packages
  + Remove 'dim' option from terminal colors to make them more readable (rh#1807774, rh#1814563)
  + [context] Error when main config file can't be opened (rh#1794864)
  + [context] Add function function dnf_context_is_set_config_file_path
  + swdb: Catch only SQLite3 exceptions and simplify the messages
  + MergedTransaction list multiple comments (rh#1773679)
  + Modify CMake to pull *.po files from weblate
  + Optimize DependencyContainer creation from an existing queue
  + fix a memory leak in dnf_package_get_requires()
  + Fix memory leaks on g_build_filename()
  + Fix memory leak in dnf_context_setup()
  + Add `hy_goal_favor` and `hy_goal_disfavor`
  + Define a cleanup function for `DnfPackageSet`
  + dnf-repo: fix dnf_repo_get_public_keys double-free
  + Do not cache RPMDB
  + Use single-quotes around string literals used in SQL statements
  + SQLite3: Do not close the database if it wasn't opened (rh#1761976)
  + Don't create a new history DB connection for in-memory DB
  + transaction/Swdb: Use a single logger variable in constructor
  + utils: Add a safe version of pathExists()
  + swdb: Handle the case when pathExists() fails on e.g. permission
  + Repo: prepend "file://" if a local path is used as baseurl
  + Move urlEncode() to utils
  + utils: Add 'exclude' argument to urlEncode()
  + Encode package URL for downloading through librepo (rh#1817130)
  + Replace std::runtime_error with libdnf::RepoError
  + Fixes and error handling improvements of the File class
  + [context] Use ConfigRepo for gpgkey and baseurl (rh#1807864)
  + [context] support "priority" option in .repo config file (rh#1797265)
- Drop obsolete patch: libdnf-0.45.0-handle-all-rpmdb-variants.patch
- Refresh patch for static linking libsolvext
  + Remove patch: libdnf-0.39.1-with-static-libsolvext.patch
  + Add patch: libdnf-0.48.0-with-static-libsolvext.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1598011200">- Backport fix from upstream to fix building against check &gt;= 0.15
  + Patch: 0001-tests-Fix-incorrect-usage-of-the-fail_unless-macro.patch
- Clean up spec comments about patches</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1603540800">- Update to version 0.54.2
  + history: Fix dnf history rollback when a package was removed (rh#1683134)
  + Add support for HY_GT, HY_LT in query nevra_strict
  + Fix parsing empty lines in config files
  + Accept '==' as an operator in reldeps (rh#1847946)
  + Add log file level main config option (rh#1802074)
  + Add protect_running_kernel configuration option (rh#1698145)
  + Context part of libdnf cannot assume zchunk is on (rh#1851841, rh#1779104)
  + Fix memory leak of resultingModuleIndex and handle g_object refs
  + Redirect librepo logs to libdnf logs with different source
  + Add hy_goal_lock
  + Enum/String conversions for Transaction Store/Replay
  + utils: Add a method to decode URLs
  + Unify hawkey.log line format with the rest of the logs
- Drop patches included in this release
  + Patch: 0001-tests-Fix-incorrect-usage-of-the-fail_unless-macro.patch
- Refresh patch for reposdir paths
  + Remove patch: libdnf-0.39.1-Switch-default-reposdir-to-etc-dnf-repos.d.patch
  + Add patch: libdnf-0.54.2-Switch-default-reposdir-to-etc-dnf-repos.d.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1606651200">- Update to version 0.55.0
  + Add vendor to dnf API (rh#1876561)
  + Add formatting function for solver error
  + Add error types in ModulePackageContainer
  + Implement module enable for context part
  + Improve string formatting for translation
  + Remove redundant printf and change logging info to notice (rh#1827424)
  + Add allow_vendor_change option (rh#1788371) (rh#1788371)
- Backport patches from upstream
  + Patch: 0001-Support-allow_vendor_change-setting-in-dnf-context-A.patch
  + Patch: 0001-context-dnf_keyring_add_public_keys-not-generate-err.patch
- Add patch to turn off changing vendors by default
  + Patch: libdnf-0.55.0-Switch-allow_vendor_change-off.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1607256000">- Update to version 0.55.2
  + Improve performance of query installed() and available()
  + Swdb: Add a method to get the current transaction
  + [modules] Add special handling for src artifacts (rh#1809314)
  + Better msgs if "basecachedir" or "proxy_password" isn't set (rh#1888946)
  + Add new options module_stream_switch
  + Support allow_vendor_change setting in dnf context API
- Drop patches incorporated into this release
  + Patch: 0001-Support-allow_vendor_change-setting-in-dnf-context-A.patch
  + Patch: 0001-context-dnf_keyring_add_public_keys-not-generate-err.patch
- Use cmake_build and cmake_install macros</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1609761600">- Add patch to support armv6hl and RISC-V architectures
  + Patch: 0001-context-Sync-missing-arches-from-DNF.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1612267200">- Update to version 0.58.0
  + Option: Add reset() method
  + Add OptionBinds::getOption() method
  + [context] Add dnf_repo_conf_from_gkeyfile() and dnf_repo_conf_reset()
  + [context] Add support for options: minrate, throttle, bandwidth, timeout
  + [context] Remove g_key_file_get_string() from dnf_repo_set_keyfile_data()
  + Allow loading ext metadata even if only cache (solv) is present
  + Add ASAN_OPTIONS for test_libdnf_main
  + [context,API] Functions for accessing main/global configuration options
  + [context,API] Function for adding setopt
  + Add getter for modular obsoletes from ModuleMetadata
  + Add ModulePackage.getStaticContext() and getRequires()
  + Add compatible layer for MdDocuments v2
  + Fix modular queries with the new solver
  + Improve formatting of error string for modules
  + Change mechanism of module conflicts
  + Fix load/update FailSafe
- Drop patch included in this release
  + Patch: 0001-context-Sync-missing-arches-from-DNF.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1613131200">- Backport fixes to add controls for installonlypkgs and protected_packages
  + Patch: 0001-context-Support-config-file-option-installonlypkgs.patch
  + Patch: 0002-context-Support-config-file-option-protected_package.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1613217600">- Add patch to move directory for dnf state data to /usr/lib/sysimage
  + Patch: libdnf-0.58.0-Use-usr-lib-sysimage-for-the-persistent-state-dir.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1613217601">- Backport another fix for adding controls to installonlypkgs
  + Patch: 0001-context-Fix-dnf_package_is_installonly-RhBug-1928056.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1614081600">- Backport support for using certificates for repository authorization
  + Patch: 0001-Fix-librepo-version-required-in-CMakeList.txt-1.12.0.patch
  + Patch: 0002-Fix-Fully-set-ssl-in-newHandle-function.patch
  + Patch: 0003-conf-Add-options-for-working-with-certificates-used-.patch
  + Patch: 0004-Apply-proxy-certificate-options.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1614254400">- Add repo-config-zypp subpackage to allow easily using Zypper
  repository configuration</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1614340800">- Backport more fixes for using certs for repo authorization
  + Patch: 0001-Deduplicate-code-create-Repo-Impl-stringToProxyAuthM.patch
  + Patch: 0002-context-Support-config-file-option-proxy_auth_method.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1614686400">- Update to 0.60.0
  + Fix repo.fresh() implementation
  + Fix: Fully set ssl in newHandle function
  + [conf] Add options for working with certificates used with proxy
  + Apply proxy certificate options
  + lock: Switch return-if-fail to assert to quiet gcc -fanalyzer
  + build-sys: Clean up message about Python bindings
  + Modify module NSVCA parsing - context definition (rh#1926771)
  + [context] Fix: dnf_package_is_installonly (rh#1928056)
  + Fix problematic language
  + Add getApplicablePackages to advisory and isApplicable to advisorymodule
  + Keep isAdvisoryApplicable to preserve API
  + Run ModulePackageContainerTest tests in tmpdir, merge interdependent
  + [context] Support config file option "proxy_auth_method", defaults "any"
  + Properly handle multiple collections in updateinfo.xml (rh#1804234)
  + Support main config file option "installonlypkgs"
  + Support main config file option "protected_packages"
- Drop patches now part of this release
  + Patch: 0001-context-Support-config-file-option-installonlypkgs.patch
  + Patch: 0002-context-Support-config-file-option-protected_package.patch
  + Patch: 0001-context-Fix-dnf_package_is_installonly-RhBug-1928056.patch
  + Patch: 0001-Fix-librepo-version-required-in-CMakeList.txt-1.12.0.patch
  + Patch: 0002-Fix-Fully-set-ssl-in-newHandle-function.patch
  + Patch: 0003-conf-Add-options-for-working-with-certificates-used-.patch
  + Patch: 0004-Apply-proxy-certificate-options.patch
  + Patch: 0001-Deduplicate-code-create-Repo-Impl-stringToProxyAuthM.patch
  + Patch: 0002-context-Support-config-file-option-proxy_auth_method.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1614686401">- Fix dependency for repo-config-zypp subpackage to work with SLE</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1618315200">- Update to 0.62.0
  + Change order of TransactionItemReason (rh#1921063)
  + Add two new comperators for security filters (rh#1918475)
  + Apply security filters for candidates with lower priority
  + Fix: Goal - translation of messages in global maps
  + Enhance description of modular solvables
  + Improve performance for module query
  + Change mechanism of modular errata applicability (rh#1804234)
  + dnf_transaction_commit(): Remove second call to rpmtsSetVSFlags
  + Fix a couple of memory leaks
  + Fix: Setting of librepo handle in newHandle function
  + Remove failsafe data when module is not enabled (rh#1847035)
  + Expose librepo's checksum functions via SWIG
  + Fix: Mising check of "hy_split_nevra()" return code
  + Do not allow 1 as installonly_limit value (rh#1926261)
  + Fix check whether the subkey can be used for signing
  + Hardening: add signature check with rpmcliVerifySignatures
    (CVE-2021-3445, CVE-2021-3421, CVE-2021-20271, rh#1932079, rh#1932089, rh#1932090, boo#1183779)
  + Add a config option sslverifystatus, defaults to false (rh#1814383)
  + [context] Add API for distro-sync</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1618488000">- Add patch to fix crash when loading DVD repositories
  + Patch: 0001-Fix-a-crash-when-repoId-not-found-in-loaded-conf-gke.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1630065600">- Update to 0.63.1
  + ModuleProfile: add isDefault()
  + ModulePackage: add getDefaultProfile()
  + Add new dnf_context_module_install() C API
  + Fix a crash when [media] section in .treeinfo is missing for bootable media (rh#1946024)
  + Add hy_query_get_advisory_pkgs to C API (rh#1960561)
  + Add dnf_advisorypkg_get_advisory()
  + DNF does not fail on non UTF-8 file names in a package (rh#1893176)
  + Improve error-reporting for modular functions
- Drop patch included in this release
  + Patch: 0001-Fix-a-crash-when-repoId-not-found-in-loaded-conf-gke.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1635940800">- Update to 0.65.0
  + Add support for excluding packages to be installed as weak dependencies
  + Add support for autodetecting packages to be excluded from being installed as weak dependencies
  + Turn off strict validation of modulemd documents (rh#2004853, rh#2007166, rh#2007167)
  + Implement logic for demodularization of modular rpms (rh#1805260)
  + DnfContext: fix handling of default module profiles
  + ModuleMetadata: gracefully handle modules with no defaults
  + Remove failovermethod config option (rh#1961083)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1647259200">- Skip rich deps for autodetection of unmet dependencies (rh#2033130)
  + Patch: 0001-Skip-rich-deps-for-autodetection-of-unmet-dependencies.patch</changelog>
</package>
<package pkgid="728b5e366d92ab7e9330ff395bbab50d51dc28e709d7aa31d09d6134070d799a" name="libdnf-repo-config-zypp" arch="aarch64">
  <version epoch="0" ver="0.65.0" rel="bp154.2.1"/>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1594123200">- Update to version 0.48.0
  + Add prereq_ignoreinst &amp; regular_requires properties for pkg (rh#1543449)
  + Reset active modules when no module enabled or default (rh#1767351)
  + Add comment option to transaction (rh#1773679)
  + Failing to get module defauls is a recoverable error
  + Baseurl is not exclusive with mirrorlist/metalink (rh#1775184)
  + Add new function to reset all modules in C API (dnf_context_reset_all_modules)
  + [context] Fix to preserve additionalMetadata content (rh#1808677)
  + Fix filtering of DepSolvables with source rpms (rh#1812596)
  + Add setter for running kernel protection setting
  + Handle situation when an unprivileged user cannot create history database (rh#1634385)
  + Add query filter: latest by priority
  + Add DNF_NO_PROTECTED flag to allow empty list of protected packages
  + Remove 'dim' option from terminal colors to make them more readable (rh#1807774, rh#1814563)
  + [context] Error when main config file can't be opened (rh#1794864)
  + [context] Add function function dnf_context_is_set_config_file_path
  + swdb: Catch only SQLite3 exceptions and simplify the messages
  + MergedTransaction list multiple comments (rh#1773679)
  + Modify CMake to pull *.po files from weblate
  + Optimize DependencyContainer creation from an existing queue
  + fix a memory leak in dnf_package_get_requires()
  + Fix memory leaks on g_build_filename()
  + Fix memory leak in dnf_context_setup()
  + Add `hy_goal_favor` and `hy_goal_disfavor`
  + Define a cleanup function for `DnfPackageSet`
  + dnf-repo: fix dnf_repo_get_public_keys double-free
  + Do not cache RPMDB
  + Use single-quotes around string literals used in SQL statements
  + SQLite3: Do not close the database if it wasn't opened (rh#1761976)
  + Don't create a new history DB connection for in-memory DB
  + transaction/Swdb: Use a single logger variable in constructor
  + utils: Add a safe version of pathExists()
  + swdb: Handle the case when pathExists() fails on e.g. permission
  + Repo: prepend "file://" if a local path is used as baseurl
  + Move urlEncode() to utils
  + utils: Add 'exclude' argument to urlEncode()
  + Encode package URL for downloading through librepo (rh#1817130)
  + Replace std::runtime_error with libdnf::RepoError
  + Fixes and error handling improvements of the File class
  + [context] Use ConfigRepo for gpgkey and baseurl (rh#1807864)
  + [context] support "priority" option in .repo config file (rh#1797265)
- Drop obsolete patch: libdnf-0.45.0-handle-all-rpmdb-variants.patch
- Refresh patch for static linking libsolvext
  + Remove patch: libdnf-0.39.1-with-static-libsolvext.patch
  + Add patch: libdnf-0.48.0-with-static-libsolvext.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1598011200">- Backport fix from upstream to fix building against check &gt;= 0.15
  + Patch: 0001-tests-Fix-incorrect-usage-of-the-fail_unless-macro.patch
- Clean up spec comments about patches</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1603540800">- Update to version 0.54.2
  + history: Fix dnf history rollback when a package was removed (rh#1683134)
  + Add support for HY_GT, HY_LT in query nevra_strict
  + Fix parsing empty lines in config files
  + Accept '==' as an operator in reldeps (rh#1847946)
  + Add log file level main config option (rh#1802074)
  + Add protect_running_kernel configuration option (rh#1698145)
  + Context part of libdnf cannot assume zchunk is on (rh#1851841, rh#1779104)
  + Fix memory leak of resultingModuleIndex and handle g_object refs
  + Redirect librepo logs to libdnf logs with different source
  + Add hy_goal_lock
  + Enum/String conversions for Transaction Store/Replay
  + utils: Add a method to decode URLs
  + Unify hawkey.log line format with the rest of the logs
- Drop patches included in this release
  + Patch: 0001-tests-Fix-incorrect-usage-of-the-fail_unless-macro.patch
- Refresh patch for reposdir paths
  + Remove patch: libdnf-0.39.1-Switch-default-reposdir-to-etc-dnf-repos.d.patch
  + Add patch: libdnf-0.54.2-Switch-default-reposdir-to-etc-dnf-repos.d.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1606651200">- Update to version 0.55.0
  + Add vendor to dnf API (rh#1876561)
  + Add formatting function for solver error
  + Add error types in ModulePackageContainer
  + Implement module enable for context part
  + Improve string formatting for translation
  + Remove redundant printf and change logging info to notice (rh#1827424)
  + Add allow_vendor_change option (rh#1788371) (rh#1788371)
- Backport patches from upstream
  + Patch: 0001-Support-allow_vendor_change-setting-in-dnf-context-A.patch
  + Patch: 0001-context-dnf_keyring_add_public_keys-not-generate-err.patch
- Add patch to turn off changing vendors by default
  + Patch: libdnf-0.55.0-Switch-allow_vendor_change-off.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1607256000">- Update to version 0.55.2
  + Improve performance of query installed() and available()
  + Swdb: Add a method to get the current transaction
  + [modules] Add special handling for src artifacts (rh#1809314)
  + Better msgs if "basecachedir" or "proxy_password" isn't set (rh#1888946)
  + Add new options module_stream_switch
  + Support allow_vendor_change setting in dnf context API
- Drop patches incorporated into this release
  + Patch: 0001-Support-allow_vendor_change-setting-in-dnf-context-A.patch
  + Patch: 0001-context-dnf_keyring_add_public_keys-not-generate-err.patch
- Use cmake_build and cmake_install macros</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1609761600">- Add patch to support armv6hl and RISC-V architectures
  + Patch: 0001-context-Sync-missing-arches-from-DNF.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1612267200">- Update to version 0.58.0
  + Option: Add reset() method
  + Add OptionBinds::getOption() method
  + [context] Add dnf_repo_conf_from_gkeyfile() and dnf_repo_conf_reset()
  + [context] Add support for options: minrate, throttle, bandwidth, timeout
  + [context] Remove g_key_file_get_string() from dnf_repo_set_keyfile_data()
  + Allow loading ext metadata even if only cache (solv) is present
  + Add ASAN_OPTIONS for test_libdnf_main
  + [context,API] Functions for accessing main/global configuration options
  + [context,API] Function for adding setopt
  + Add getter for modular obsoletes from ModuleMetadata
  + Add ModulePackage.getStaticContext() and getRequires()
  + Add compatible layer for MdDocuments v2
  + Fix modular queries with the new solver
  + Improve formatting of error string for modules
  + Change mechanism of module conflicts
  + Fix load/update FailSafe
- Drop patch included in this release
  + Patch: 0001-context-Sync-missing-arches-from-DNF.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1613131200">- Backport fixes to add controls for installonlypkgs and protected_packages
  + Patch: 0001-context-Support-config-file-option-installonlypkgs.patch
  + Patch: 0002-context-Support-config-file-option-protected_package.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1613217600">- Add patch to move directory for dnf state data to /usr/lib/sysimage
  + Patch: libdnf-0.58.0-Use-usr-lib-sysimage-for-the-persistent-state-dir.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1613217601">- Backport another fix for adding controls to installonlypkgs
  + Patch: 0001-context-Fix-dnf_package_is_installonly-RhBug-1928056.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1614081600">- Backport support for using certificates for repository authorization
  + Patch: 0001-Fix-librepo-version-required-in-CMakeList.txt-1.12.0.patch
  + Patch: 0002-Fix-Fully-set-ssl-in-newHandle-function.patch
  + Patch: 0003-conf-Add-options-for-working-with-certificates-used-.patch
  + Patch: 0004-Apply-proxy-certificate-options.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1614254400">- Add repo-config-zypp subpackage to allow easily using Zypper
  repository configuration</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1614340800">- Backport more fixes for using certs for repo authorization
  + Patch: 0001-Deduplicate-code-create-Repo-Impl-stringToProxyAuthM.patch
  + Patch: 0002-context-Support-config-file-option-proxy_auth_method.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1614686400">- Update to 0.60.0
  + Fix repo.fresh() implementation
  + Fix: Fully set ssl in newHandle function
  + [conf] Add options for working with certificates used with proxy
  + Apply proxy certificate options
  + lock: Switch return-if-fail to assert to quiet gcc -fanalyzer
  + build-sys: Clean up message about Python bindings
  + Modify module NSVCA parsing - context definition (rh#1926771)
  + [context] Fix: dnf_package_is_installonly (rh#1928056)
  + Fix problematic language
  + Add getApplicablePackages to advisory and isApplicable to advisorymodule
  + Keep isAdvisoryApplicable to preserve API
  + Run ModulePackageContainerTest tests in tmpdir, merge interdependent
  + [context] Support config file option "proxy_auth_method", defaults "any"
  + Properly handle multiple collections in updateinfo.xml (rh#1804234)
  + Support main config file option "installonlypkgs"
  + Support main config file option "protected_packages"
- Drop patches now part of this release
  + Patch: 0001-context-Support-config-file-option-installonlypkgs.patch
  + Patch: 0002-context-Support-config-file-option-protected_package.patch
  + Patch: 0001-context-Fix-dnf_package_is_installonly-RhBug-1928056.patch
  + Patch: 0001-Fix-librepo-version-required-in-CMakeList.txt-1.12.0.patch
  + Patch: 0002-Fix-Fully-set-ssl-in-newHandle-function.patch
  + Patch: 0003-conf-Add-options-for-working-with-certificates-used-.patch
  + Patch: 0004-Apply-proxy-certificate-options.patch
  + Patch: 0001-Deduplicate-code-create-Repo-Impl-stringToProxyAuthM.patch
  + Patch: 0002-context-Support-config-file-option-proxy_auth_method.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1614686401">- Fix dependency for repo-config-zypp subpackage to work with SLE</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1618315200">- Update to 0.62.0
  + Change order of TransactionItemReason (rh#1921063)
  + Add two new comperators for security filters (rh#1918475)
  + Apply security filters for candidates with lower priority
  + Fix: Goal - translation of messages in global maps
  + Enhance description of modular solvables
  + Improve performance for module query
  + Change mechanism of modular errata applicability (rh#1804234)
  + dnf_transaction_commit(): Remove second call to rpmtsSetVSFlags
  + Fix a couple of memory leaks
  + Fix: Setting of librepo handle in newHandle function
  + Remove failsafe data when module is not enabled (rh#1847035)
  + Expose librepo's checksum functions via SWIG
  + Fix: Mising check of "hy_split_nevra()" return code
  + Do not allow 1 as installonly_limit value (rh#1926261)
  + Fix check whether the subkey can be used for signing
  + Hardening: add signature check with rpmcliVerifySignatures
    (CVE-2021-3445, CVE-2021-3421, CVE-2021-20271, rh#1932079, rh#1932089, rh#1932090, boo#1183779)
  + Add a config option sslverifystatus, defaults to false (rh#1814383)
  + [context] Add API for distro-sync</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1618488000">- Add patch to fix crash when loading DVD repositories
  + Patch: 0001-Fix-a-crash-when-repoId-not-found-in-loaded-conf-gke.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1630065600">- Update to 0.63.1
  + ModuleProfile: add isDefault()
  + ModulePackage: add getDefaultProfile()
  + Add new dnf_context_module_install() C API
  + Fix a crash when [media] section in .treeinfo is missing for bootable media (rh#1946024)
  + Add hy_query_get_advisory_pkgs to C API (rh#1960561)
  + Add dnf_advisorypkg_get_advisory()
  + DNF does not fail on non UTF-8 file names in a package (rh#1893176)
  + Improve error-reporting for modular functions
- Drop patch included in this release
  + Patch: 0001-Fix-a-crash-when-repoId-not-found-in-loaded-conf-gke.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1635940800">- Update to 0.65.0
  + Add support for excluding packages to be installed as weak dependencies
  + Add support for autodetecting packages to be excluded from being installed as weak dependencies
  + Turn off strict validation of modulemd documents (rh#2004853, rh#2007166, rh#2007167)
  + Implement logic for demodularization of modular rpms (rh#1805260)
  + DnfContext: fix handling of default module profiles
  + ModuleMetadata: gracefully handle modules with no defaults
  + Remove failovermethod config option (rh#1961083)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1647259200">- Skip rich deps for autodetection of unmet dependencies (rh#2033130)
  + Patch: 0001-Skip-rich-deps-for-autodetection-of-unmet-dependencies.patch</changelog>
</package>
<package pkgid="bd1a4ecedaa15dc358aff0948b33e5064daaa2b8a8cd2ebf6ad436f4b1563b36" name="libdnf-repo-config-zypp" arch="i586">
  <version epoch="0" ver="0.65.0" rel="bp154.2.1"/>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1594123200">- Update to version 0.48.0
  + Add prereq_ignoreinst &amp; regular_requires properties for pkg (rh#1543449)
  + Reset active modules when no module enabled or default (rh#1767351)
  + Add comment option to transaction (rh#1773679)
  + Failing to get module defauls is a recoverable error
  + Baseurl is not exclusive with mirrorlist/metalink (rh#1775184)
  + Add new function to reset all modules in C API (dnf_context_reset_all_modules)
  + [context] Fix to preserve additionalMetadata content (rh#1808677)
  + Fix filtering of DepSolvables with source rpms (rh#1812596)
  + Add setter for running kernel protection setting
  + Handle situation when an unprivileged user cannot create history database (rh#1634385)
  + Add query filter: latest by priority
  + Add DNF_NO_PROTECTED flag to allow empty list of protected packages
  + Remove 'dim' option from terminal colors to make them more readable (rh#1807774, rh#1814563)
  + [context] Error when main config file can't be opened (rh#1794864)
  + [context] Add function function dnf_context_is_set_config_file_path
  + swdb: Catch only SQLite3 exceptions and simplify the messages
  + MergedTransaction list multiple comments (rh#1773679)
  + Modify CMake to pull *.po files from weblate
  + Optimize DependencyContainer creation from an existing queue
  + fix a memory leak in dnf_package_get_requires()
  + Fix memory leaks on g_build_filename()
  + Fix memory leak in dnf_context_setup()
  + Add `hy_goal_favor` and `hy_goal_disfavor`
  + Define a cleanup function for `DnfPackageSet`
  + dnf-repo: fix dnf_repo_get_public_keys double-free
  + Do not cache RPMDB
  + Use single-quotes around string literals used in SQL statements
  + SQLite3: Do not close the database if it wasn't opened (rh#1761976)
  + Don't create a new history DB connection for in-memory DB
  + transaction/Swdb: Use a single logger variable in constructor
  + utils: Add a safe version of pathExists()
  + swdb: Handle the case when pathExists() fails on e.g. permission
  + Repo: prepend "file://" if a local path is used as baseurl
  + Move urlEncode() to utils
  + utils: Add 'exclude' argument to urlEncode()
  + Encode package URL for downloading through librepo (rh#1817130)
  + Replace std::runtime_error with libdnf::RepoError
  + Fixes and error handling improvements of the File class
  + [context] Use ConfigRepo for gpgkey and baseurl (rh#1807864)
  + [context] support "priority" option in .repo config file (rh#1797265)
- Drop obsolete patch: libdnf-0.45.0-handle-all-rpmdb-variants.patch
- Refresh patch for static linking libsolvext
  + Remove patch: libdnf-0.39.1-with-static-libsolvext.patch
  + Add patch: libdnf-0.48.0-with-static-libsolvext.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1598011200">- Backport fix from upstream to fix building against check &gt;= 0.15
  + Patch: 0001-tests-Fix-incorrect-usage-of-the-fail_unless-macro.patch
- Clean up spec comments about patches</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1603540800">- Update to version 0.54.2
  + history: Fix dnf history rollback when a package was removed (rh#1683134)
  + Add support for HY_GT, HY_LT in query nevra_strict
  + Fix parsing empty lines in config files
  + Accept '==' as an operator in reldeps (rh#1847946)
  + Add log file level main config option (rh#1802074)
  + Add protect_running_kernel configuration option (rh#1698145)
  + Context part of libdnf cannot assume zchunk is on (rh#1851841, rh#1779104)
  + Fix memory leak of resultingModuleIndex and handle g_object refs
  + Redirect librepo logs to libdnf logs with different source
  + Add hy_goal_lock
  + Enum/String conversions for Transaction Store/Replay
  + utils: Add a method to decode URLs
  + Unify hawkey.log line format with the rest of the logs
- Drop patches included in this release
  + Patch: 0001-tests-Fix-incorrect-usage-of-the-fail_unless-macro.patch
- Refresh patch for reposdir paths
  + Remove patch: libdnf-0.39.1-Switch-default-reposdir-to-etc-dnf-repos.d.patch
  + Add patch: libdnf-0.54.2-Switch-default-reposdir-to-etc-dnf-repos.d.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1606651200">- Update to version 0.55.0
  + Add vendor to dnf API (rh#1876561)
  + Add formatting function for solver error
  + Add error types in ModulePackageContainer
  + Implement module enable for context part
  + Improve string formatting for translation
  + Remove redundant printf and change logging info to notice (rh#1827424)
  + Add allow_vendor_change option (rh#1788371) (rh#1788371)
- Backport patches from upstream
  + Patch: 0001-Support-allow_vendor_change-setting-in-dnf-context-A.patch
  + Patch: 0001-context-dnf_keyring_add_public_keys-not-generate-err.patch
- Add patch to turn off changing vendors by default
  + Patch: libdnf-0.55.0-Switch-allow_vendor_change-off.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1607256000">- Update to version 0.55.2
  + Improve performance of query installed() and available()
  + Swdb: Add a method to get the current transaction
  + [modules] Add special handling for src artifacts (rh#1809314)
  + Better msgs if "basecachedir" or "proxy_password" isn't set (rh#1888946)
  + Add new options module_stream_switch
  + Support allow_vendor_change setting in dnf context API
- Drop patches incorporated into this release
  + Patch: 0001-Support-allow_vendor_change-setting-in-dnf-context-A.patch
  + Patch: 0001-context-dnf_keyring_add_public_keys-not-generate-err.patch
- Use cmake_build and cmake_install macros</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1609761600">- Add patch to support armv6hl and RISC-V architectures
  + Patch: 0001-context-Sync-missing-arches-from-DNF.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1612267200">- Update to version 0.58.0
  + Option: Add reset() method
  + Add OptionBinds::getOption() method
  + [context] Add dnf_repo_conf_from_gkeyfile() and dnf_repo_conf_reset()
  + [context] Add support for options: minrate, throttle, bandwidth, timeout
  + [context] Remove g_key_file_get_string() from dnf_repo_set_keyfile_data()
  + Allow loading ext metadata even if only cache (solv) is present
  + Add ASAN_OPTIONS for test_libdnf_main
  + [context,API] Functions for accessing main/global configuration options
  + [context,API] Function for adding setopt
  + Add getter for modular obsoletes from ModuleMetadata
  + Add ModulePackage.getStaticContext() and getRequires()
  + Add compatible layer for MdDocuments v2
  + Fix modular queries with the new solver
  + Improve formatting of error string for modules
  + Change mechanism of module conflicts
  + Fix load/update FailSafe
- Drop patch included in this release
  + Patch: 0001-context-Sync-missing-arches-from-DNF.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1613131200">- Backport fixes to add controls for installonlypkgs and protected_packages
  + Patch: 0001-context-Support-config-file-option-installonlypkgs.patch
  + Patch: 0002-context-Support-config-file-option-protected_package.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1613217600">- Add patch to move directory for dnf state data to /usr/lib/sysimage
  + Patch: libdnf-0.58.0-Use-usr-lib-sysimage-for-the-persistent-state-dir.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1613217601">- Backport another fix for adding controls to installonlypkgs
  + Patch: 0001-context-Fix-dnf_package_is_installonly-RhBug-1928056.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1614081600">- Backport support for using certificates for repository authorization
  + Patch: 0001-Fix-librepo-version-required-in-CMakeList.txt-1.12.0.patch
  + Patch: 0002-Fix-Fully-set-ssl-in-newHandle-function.patch
  + Patch: 0003-conf-Add-options-for-working-with-certificates-used-.patch
  + Patch: 0004-Apply-proxy-certificate-options.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1614254400">- Add repo-config-zypp subpackage to allow easily using Zypper
  repository configuration</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1614340800">- Backport more fixes for using certs for repo authorization
  + Patch: 0001-Deduplicate-code-create-Repo-Impl-stringToProxyAuthM.patch
  + Patch: 0002-context-Support-config-file-option-proxy_auth_method.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1614686400">- Update to 0.60.0
  + Fix repo.fresh() implementation
  + Fix: Fully set ssl in newHandle function
  + [conf] Add options for working with certificates used with proxy
  + Apply proxy certificate options
  + lock: Switch return-if-fail to assert to quiet gcc -fanalyzer
  + build-sys: Clean up message about Python bindings
  + Modify module NSVCA parsing - context definition (rh#1926771)
  + [context] Fix: dnf_package_is_installonly (rh#1928056)
  + Fix problematic language
  + Add getApplicablePackages to advisory and isApplicable to advisorymodule
  + Keep isAdvisoryApplicable to preserve API
  + Run ModulePackageContainerTest tests in tmpdir, merge interdependent
  + [context] Support config file option "proxy_auth_method", defaults "any"
  + Properly handle multiple collections in updateinfo.xml (rh#1804234)
  + Support main config file option "installonlypkgs"
  + Support main config file option "protected_packages"
- Drop patches now part of this release
  + Patch: 0001-context-Support-config-file-option-installonlypkgs.patch
  + Patch: 0002-context-Support-config-file-option-protected_package.patch
  + Patch: 0001-context-Fix-dnf_package_is_installonly-RhBug-1928056.patch
  + Patch: 0001-Fix-librepo-version-required-in-CMakeList.txt-1.12.0.patch
  + Patch: 0002-Fix-Fully-set-ssl-in-newHandle-function.patch
  + Patch: 0003-conf-Add-options-for-working-with-certificates-used-.patch
  + Patch: 0004-Apply-proxy-certificate-options.patch
  + Patch: 0001-Deduplicate-code-create-Repo-Impl-stringToProxyAuthM.patch
  + Patch: 0002-context-Support-config-file-option-proxy_auth_method.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1614686401">- Fix dependency for repo-config-zypp subpackage to work with SLE</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1618315200">- Update to 0.62.0
  + Change order of TransactionItemReason (rh#1921063)
  + Add two new comperators for security filters (rh#1918475)
  + Apply security filters for candidates with lower priority
  + Fix: Goal - translation of messages in global maps
  + Enhance description of modular solvables
  + Improve performance for module query
  + Change mechanism of modular errata applicability (rh#1804234)
  + dnf_transaction_commit(): Remove second call to rpmtsSetVSFlags
  + Fix a couple of memory leaks
  + Fix: Setting of librepo handle in newHandle function
  + Remove failsafe data when module is not enabled (rh#1847035)
  + Expose librepo's checksum functions via SWIG
  + Fix: Mising check of "hy_split_nevra()" return code
  + Do not allow 1 as installonly_limit value (rh#1926261)
  + Fix check whether the subkey can be used for signing
  + Hardening: add signature check with rpmcliVerifySignatures
    (CVE-2021-3445, CVE-2021-3421, CVE-2021-20271, rh#1932079, rh#1932089, rh#1932090, boo#1183779)
  + Add a config option sslverifystatus, defaults to false (rh#1814383)
  + [context] Add API for distro-sync</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1618488000">- Add patch to fix crash when loading DVD repositories
  + Patch: 0001-Fix-a-crash-when-repoId-not-found-in-loaded-conf-gke.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1630065600">- Update to 0.63.1
  + ModuleProfile: add isDefault()
  + ModulePackage: add getDefaultProfile()
  + Add new dnf_context_module_install() C API
  + Fix a crash when [media] section in .treeinfo is missing for bootable media (rh#1946024)
  + Add hy_query_get_advisory_pkgs to C API (rh#1960561)
  + Add dnf_advisorypkg_get_advisory()
  + DNF does not fail on non UTF-8 file names in a package (rh#1893176)
  + Improve error-reporting for modular functions
- Drop patch included in this release
  + Patch: 0001-Fix-a-crash-when-repoId-not-found-in-loaded-conf-gke.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1635940800">- Update to 0.65.0
  + Add support for excluding packages to be installed as weak dependencies
  + Add support for autodetecting packages to be excluded from being installed as weak dependencies
  + Turn off strict validation of modulemd documents (rh#2004853, rh#2007166, rh#2007167)
  + Implement logic for demodularization of modular rpms (rh#1805260)
  + DnfContext: fix handling of default module profiles
  + ModuleMetadata: gracefully handle modules with no defaults
  + Remove failovermethod config option (rh#1961083)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1647259200">- Skip rich deps for autodetection of unmet dependencies (rh#2033130)
  + Patch: 0001-Skip-rich-deps-for-autodetection-of-unmet-dependencies.patch</changelog>
</package>
<package pkgid="1ddbdcfd681b9e86c6beec124225e7ffab567f383b7d7095091cb7266fe305b3" name="libdnf-repo-config-zypp" arch="ppc64le">
  <version epoch="0" ver="0.65.0" rel="bp154.2.1"/>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1594123200">- Update to version 0.48.0
  + Add prereq_ignoreinst &amp; regular_requires properties for pkg (rh#1543449)
  + Reset active modules when no module enabled or default (rh#1767351)
  + Add comment option to transaction (rh#1773679)
  + Failing to get module defauls is a recoverable error
  + Baseurl is not exclusive with mirrorlist/metalink (rh#1775184)
  + Add new function to reset all modules in C API (dnf_context_reset_all_modules)
  + [context] Fix to preserve additionalMetadata content (rh#1808677)
  + Fix filtering of DepSolvables with source rpms (rh#1812596)
  + Add setter for running kernel protection setting
  + Handle situation when an unprivileged user cannot create history database (rh#1634385)
  + Add query filter: latest by priority
  + Add DNF_NO_PROTECTED flag to allow empty list of protected packages
  + Remove 'dim' option from terminal colors to make them more readable (rh#1807774, rh#1814563)
  + [context] Error when main config file can't be opened (rh#1794864)
  + [context] Add function function dnf_context_is_set_config_file_path
  + swdb: Catch only SQLite3 exceptions and simplify the messages
  + MergedTransaction list multiple comments (rh#1773679)
  + Modify CMake to pull *.po files from weblate
  + Optimize DependencyContainer creation from an existing queue
  + fix a memory leak in dnf_package_get_requires()
  + Fix memory leaks on g_build_filename()
  + Fix memory leak in dnf_context_setup()
  + Add `hy_goal_favor` and `hy_goal_disfavor`
  + Define a cleanup function for `DnfPackageSet`
  + dnf-repo: fix dnf_repo_get_public_keys double-free
  + Do not cache RPMDB
  + Use single-quotes around string literals used in SQL statements
  + SQLite3: Do not close the database if it wasn't opened (rh#1761976)
  + Don't create a new history DB connection for in-memory DB
  + transaction/Swdb: Use a single logger variable in constructor
  + utils: Add a safe version of pathExists()
  + swdb: Handle the case when pathExists() fails on e.g. permission
  + Repo: prepend "file://" if a local path is used as baseurl
  + Move urlEncode() to utils
  + utils: Add 'exclude' argument to urlEncode()
  + Encode package URL for downloading through librepo (rh#1817130)
  + Replace std::runtime_error with libdnf::RepoError
  + Fixes and error handling improvements of the File class
  + [context] Use ConfigRepo for gpgkey and baseurl (rh#1807864)
  + [context] support "priority" option in .repo config file (rh#1797265)
- Drop obsolete patch: libdnf-0.45.0-handle-all-rpmdb-variants.patch
- Refresh patch for static linking libsolvext
  + Remove patch: libdnf-0.39.1-with-static-libsolvext.patch
  + Add patch: libdnf-0.48.0-with-static-libsolvext.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1598011200">- Backport fix from upstream to fix building against check &gt;= 0.15
  + Patch: 0001-tests-Fix-incorrect-usage-of-the-fail_unless-macro.patch
- Clean up spec comments about patches</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1603540800">- Update to version 0.54.2
  + history: Fix dnf history rollback when a package was removed (rh#1683134)
  + Add support for HY_GT, HY_LT in query nevra_strict
  + Fix parsing empty lines in config files
  + Accept '==' as an operator in reldeps (rh#1847946)
  + Add log file level main config option (rh#1802074)
  + Add protect_running_kernel configuration option (rh#1698145)
  + Context part of libdnf cannot assume zchunk is on (rh#1851841, rh#1779104)
  + Fix memory leak of resultingModuleIndex and handle g_object refs
  + Redirect librepo logs to libdnf logs with different source
  + Add hy_goal_lock
  + Enum/String conversions for Transaction Store/Replay
  + utils: Add a method to decode URLs
  + Unify hawkey.log line format with the rest of the logs
- Drop patches included in this release
  + Patch: 0001-tests-Fix-incorrect-usage-of-the-fail_unless-macro.patch
- Refresh patch for reposdir paths
  + Remove patch: libdnf-0.39.1-Switch-default-reposdir-to-etc-dnf-repos.d.patch
  + Add patch: libdnf-0.54.2-Switch-default-reposdir-to-etc-dnf-repos.d.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1606651200">- Update to version 0.55.0
  + Add vendor to dnf API (rh#1876561)
  + Add formatting function for solver error
  + Add error types in ModulePackageContainer
  + Implement module enable for context part
  + Improve string formatting for translation
  + Remove redundant printf and change logging info to notice (rh#1827424)
  + Add allow_vendor_change option (rh#1788371) (rh#1788371)
- Backport patches from upstream
  + Patch: 0001-Support-allow_vendor_change-setting-in-dnf-context-A.patch
  + Patch: 0001-context-dnf_keyring_add_public_keys-not-generate-err.patch
- Add patch to turn off changing vendors by default
  + Patch: libdnf-0.55.0-Switch-allow_vendor_change-off.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1607256000">- Update to version 0.55.2
  + Improve performance of query installed() and available()
  + Swdb: Add a method to get the current transaction
  + [modules] Add special handling for src artifacts (rh#1809314)
  + Better msgs if "basecachedir" or "proxy_password" isn't set (rh#1888946)
  + Add new options module_stream_switch
  + Support allow_vendor_change setting in dnf context API
- Drop patches incorporated into this release
  + Patch: 0001-Support-allow_vendor_change-setting-in-dnf-context-A.patch
  + Patch: 0001-context-dnf_keyring_add_public_keys-not-generate-err.patch
- Use cmake_build and cmake_install macros</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1609761600">- Add patch to support armv6hl and RISC-V architectures
  + Patch: 0001-context-Sync-missing-arches-from-DNF.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1612267200">- Update to version 0.58.0
  + Option: Add reset() method
  + Add OptionBinds::getOption() method
  + [context] Add dnf_repo_conf_from_gkeyfile() and dnf_repo_conf_reset()
  + [context] Add support for options: minrate, throttle, bandwidth, timeout
  + [context] Remove g_key_file_get_string() from dnf_repo_set_keyfile_data()
  + Allow loading ext metadata even if only cache (solv) is present
  + Add ASAN_OPTIONS for test_libdnf_main
  + [context,API] Functions for accessing main/global configuration options
  + [context,API] Function for adding setopt
  + Add getter for modular obsoletes from ModuleMetadata
  + Add ModulePackage.getStaticContext() and getRequires()
  + Add compatible layer for MdDocuments v2
  + Fix modular queries with the new solver
  + Improve formatting of error string for modules
  + Change mechanism of module conflicts
  + Fix load/update FailSafe
- Drop patch included in this release
  + Patch: 0001-context-Sync-missing-arches-from-DNF.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1613131200">- Backport fixes to add controls for installonlypkgs and protected_packages
  + Patch: 0001-context-Support-config-file-option-installonlypkgs.patch
  + Patch: 0002-context-Support-config-file-option-protected_package.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1613217600">- Add patch to move directory for dnf state data to /usr/lib/sysimage
  + Patch: libdnf-0.58.0-Use-usr-lib-sysimage-for-the-persistent-state-dir.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1613217601">- Backport another fix for adding controls to installonlypkgs
  + Patch: 0001-context-Fix-dnf_package_is_installonly-RhBug-1928056.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1614081600">- Backport support for using certificates for repository authorization
  + Patch: 0001-Fix-librepo-version-required-in-CMakeList.txt-1.12.0.patch
  + Patch: 0002-Fix-Fully-set-ssl-in-newHandle-function.patch
  + Patch: 0003-conf-Add-options-for-working-with-certificates-used-.patch
  + Patch: 0004-Apply-proxy-certificate-options.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1614254400">- Add repo-config-zypp subpackage to allow easily using Zypper
  repository configuration</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1614340800">- Backport more fixes for using certs for repo authorization
  + Patch: 0001-Deduplicate-code-create-Repo-Impl-stringToProxyAuthM.patch
  + Patch: 0002-context-Support-config-file-option-proxy_auth_method.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1614686400">- Update to 0.60.0
  + Fix repo.fresh() implementation
  + Fix: Fully set ssl in newHandle function
  + [conf] Add options for working with certificates used with proxy
  + Apply proxy certificate options
  + lock: Switch return-if-fail to assert to quiet gcc -fanalyzer
  + build-sys: Clean up message about Python bindings
  + Modify module NSVCA parsing - context definition (rh#1926771)
  + [context] Fix: dnf_package_is_installonly (rh#1928056)
  + Fix problematic language
  + Add getApplicablePackages to advisory and isApplicable to advisorymodule
  + Keep isAdvisoryApplicable to preserve API
  + Run ModulePackageContainerTest tests in tmpdir, merge interdependent
  + [context] Support config file option "proxy_auth_method", defaults "any"
  + Properly handle multiple collections in updateinfo.xml (rh#1804234)
  + Support main config file option "installonlypkgs"
  + Support main config file option "protected_packages"
- Drop patches now part of this release
  + Patch: 0001-context-Support-config-file-option-installonlypkgs.patch
  + Patch: 0002-context-Support-config-file-option-protected_package.patch
  + Patch: 0001-context-Fix-dnf_package_is_installonly-RhBug-1928056.patch
  + Patch: 0001-Fix-librepo-version-required-in-CMakeList.txt-1.12.0.patch
  + Patch: 0002-Fix-Fully-set-ssl-in-newHandle-function.patch
  + Patch: 0003-conf-Add-options-for-working-with-certificates-used-.patch
  + Patch: 0004-Apply-proxy-certificate-options.patch
  + Patch: 0001-Deduplicate-code-create-Repo-Impl-stringToProxyAuthM.patch
  + Patch: 0002-context-Support-config-file-option-proxy_auth_method.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1614686401">- Fix dependency for repo-config-zypp subpackage to work with SLE</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1618315200">- Update to 0.62.0
  + Change order of TransactionItemReason (rh#1921063)
  + Add two new comperators for security filters (rh#1918475)
  + Apply security filters for candidates with lower priority
  + Fix: Goal - translation of messages in global maps
  + Enhance description of modular solvables
  + Improve performance for module query
  + Change mechanism of modular errata applicability (rh#1804234)
  + dnf_transaction_commit(): Remove second call to rpmtsSetVSFlags
  + Fix a couple of memory leaks
  + Fix: Setting of librepo handle in newHandle function
  + Remove failsafe data when module is not enabled (rh#1847035)
  + Expose librepo's checksum functions via SWIG
  + Fix: Mising check of "hy_split_nevra()" return code
  + Do not allow 1 as installonly_limit value (rh#1926261)
  + Fix check whether the subkey can be used for signing
  + Hardening: add signature check with rpmcliVerifySignatures
    (CVE-2021-3445, CVE-2021-3421, CVE-2021-20271, rh#1932079, rh#1932089, rh#1932090, boo#1183779)
  + Add a config option sslverifystatus, defaults to false (rh#1814383)
  + [context] Add API for distro-sync</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1618488000">- Add patch to fix crash when loading DVD repositories
  + Patch: 0001-Fix-a-crash-when-repoId-not-found-in-loaded-conf-gke.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1630065600">- Update to 0.63.1
  + ModuleProfile: add isDefault()
  + ModulePackage: add getDefaultProfile()
  + Add new dnf_context_module_install() C API
  + Fix a crash when [media] section in .treeinfo is missing for bootable media (rh#1946024)
  + Add hy_query_get_advisory_pkgs to C API (rh#1960561)
  + Add dnf_advisorypkg_get_advisory()
  + DNF does not fail on non UTF-8 file names in a package (rh#1893176)
  + Improve error-reporting for modular functions
- Drop patch included in this release
  + Patch: 0001-Fix-a-crash-when-repoId-not-found-in-loaded-conf-gke.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1635940800">- Update to 0.65.0
  + Add support for excluding packages to be installed as weak dependencies
  + Add support for autodetecting packages to be excluded from being installed as weak dependencies
  + Turn off strict validation of modulemd documents (rh#2004853, rh#2007166, rh#2007167)
  + Implement logic for demodularization of modular rpms (rh#1805260)
  + DnfContext: fix handling of default module profiles
  + ModuleMetadata: gracefully handle modules with no defaults
  + Remove failovermethod config option (rh#1961083)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1647259200">- Skip rich deps for autodetection of unmet dependencies (rh#2033130)
  + Patch: 0001-Skip-rich-deps-for-autodetection-of-unmet-dependencies.patch</changelog>
</package>
<package pkgid="3b5c2735eb42711bbb89ad53064422c17bc8d8832f9697b3fd8d18f2783c35e6" name="libdnf-repo-config-zypp" arch="s390x">
  <version epoch="0" ver="0.65.0" rel="bp154.2.1"/>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1594123200">- Update to version 0.48.0
  + Add prereq_ignoreinst &amp; regular_requires properties for pkg (rh#1543449)
  + Reset active modules when no module enabled or default (rh#1767351)
  + Add comment option to transaction (rh#1773679)
  + Failing to get module defauls is a recoverable error
  + Baseurl is not exclusive with mirrorlist/metalink (rh#1775184)
  + Add new function to reset all modules in C API (dnf_context_reset_all_modules)
  + [context] Fix to preserve additionalMetadata content (rh#1808677)
  + Fix filtering of DepSolvables with source rpms (rh#1812596)
  + Add setter for running kernel protection setting
  + Handle situation when an unprivileged user cannot create history database (rh#1634385)
  + Add query filter: latest by priority
  + Add DNF_NO_PROTECTED flag to allow empty list of protected packages
  + Remove 'dim' option from terminal colors to make them more readable (rh#1807774, rh#1814563)
  + [context] Error when main config file can't be opened (rh#1794864)
  + [context] Add function function dnf_context_is_set_config_file_path
  + swdb: Catch only SQLite3 exceptions and simplify the messages
  + MergedTransaction list multiple comments (rh#1773679)
  + Modify CMake to pull *.po files from weblate
  + Optimize DependencyContainer creation from an existing queue
  + fix a memory leak in dnf_package_get_requires()
  + Fix memory leaks on g_build_filename()
  + Fix memory leak in dnf_context_setup()
  + Add `hy_goal_favor` and `hy_goal_disfavor`
  + Define a cleanup function for `DnfPackageSet`
  + dnf-repo: fix dnf_repo_get_public_keys double-free
  + Do not cache RPMDB
  + Use single-quotes around string literals used in SQL statements
  + SQLite3: Do not close the database if it wasn't opened (rh#1761976)
  + Don't create a new history DB connection for in-memory DB
  + transaction/Swdb: Use a single logger variable in constructor
  + utils: Add a safe version of pathExists()
  + swdb: Handle the case when pathExists() fails on e.g. permission
  + Repo: prepend "file://" if a local path is used as baseurl
  + Move urlEncode() to utils
  + utils: Add 'exclude' argument to urlEncode()
  + Encode package URL for downloading through librepo (rh#1817130)
  + Replace std::runtime_error with libdnf::RepoError
  + Fixes and error handling improvements of the File class
  + [context] Use ConfigRepo for gpgkey and baseurl (rh#1807864)
  + [context] support "priority" option in .repo config file (rh#1797265)
- Drop obsolete patch: libdnf-0.45.0-handle-all-rpmdb-variants.patch
- Refresh patch for static linking libsolvext
  + Remove patch: libdnf-0.39.1-with-static-libsolvext.patch
  + Add patch: libdnf-0.48.0-with-static-libsolvext.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1598011200">- Backport fix from upstream to fix building against check &gt;= 0.15
  + Patch: 0001-tests-Fix-incorrect-usage-of-the-fail_unless-macro.patch
- Clean up spec comments about patches</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1603540800">- Update to version 0.54.2
  + history: Fix dnf history rollback when a package was removed (rh#1683134)
  + Add support for HY_GT, HY_LT in query nevra_strict
  + Fix parsing empty lines in config files
  + Accept '==' as an operator in reldeps (rh#1847946)
  + Add log file level main config option (rh#1802074)
  + Add protect_running_kernel configuration option (rh#1698145)
  + Context part of libdnf cannot assume zchunk is on (rh#1851841, rh#1779104)
  + Fix memory leak of resultingModuleIndex and handle g_object refs
  + Redirect librepo logs to libdnf logs with different source
  + Add hy_goal_lock
  + Enum/String conversions for Transaction Store/Replay
  + utils: Add a method to decode URLs
  + Unify hawkey.log line format with the rest of the logs
- Drop patches included in this release
  + Patch: 0001-tests-Fix-incorrect-usage-of-the-fail_unless-macro.patch
- Refresh patch for reposdir paths
  + Remove patch: libdnf-0.39.1-Switch-default-reposdir-to-etc-dnf-repos.d.patch
  + Add patch: libdnf-0.54.2-Switch-default-reposdir-to-etc-dnf-repos.d.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1606651200">- Update to version 0.55.0
  + Add vendor to dnf API (rh#1876561)
  + Add formatting function for solver error
  + Add error types in ModulePackageContainer
  + Implement module enable for context part
  + Improve string formatting for translation
  + Remove redundant printf and change logging info to notice (rh#1827424)
  + Add allow_vendor_change option (rh#1788371) (rh#1788371)
- Backport patches from upstream
  + Patch: 0001-Support-allow_vendor_change-setting-in-dnf-context-A.patch
  + Patch: 0001-context-dnf_keyring_add_public_keys-not-generate-err.patch
- Add patch to turn off changing vendors by default
  + Patch: libdnf-0.55.0-Switch-allow_vendor_change-off.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1607256000">- Update to version 0.55.2
  + Improve performance of query installed() and available()
  + Swdb: Add a method to get the current transaction
  + [modules] Add special handling for src artifacts (rh#1809314)
  + Better msgs if "basecachedir" or "proxy_password" isn't set (rh#1888946)
  + Add new options module_stream_switch
  + Support allow_vendor_change setting in dnf context API
- Drop patches incorporated into this release
  + Patch: 0001-Support-allow_vendor_change-setting-in-dnf-context-A.patch
  + Patch: 0001-context-dnf_keyring_add_public_keys-not-generate-err.patch
- Use cmake_build and cmake_install macros</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1609761600">- Add patch to support armv6hl and RISC-V architectures
  + Patch: 0001-context-Sync-missing-arches-from-DNF.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1612267200">- Update to version 0.58.0
  + Option: Add reset() method
  + Add OptionBinds::getOption() method
  + [context] Add dnf_repo_conf_from_gkeyfile() and dnf_repo_conf_reset()
  + [context] Add support for options: minrate, throttle, bandwidth, timeout
  + [context] Remove g_key_file_get_string() from dnf_repo_set_keyfile_data()
  + Allow loading ext metadata even if only cache (solv) is present
  + Add ASAN_OPTIONS for test_libdnf_main
  + [context,API] Functions for accessing main/global configuration options
  + [context,API] Function for adding setopt
  + Add getter for modular obsoletes from ModuleMetadata
  + Add ModulePackage.getStaticContext() and getRequires()
  + Add compatible layer for MdDocuments v2
  + Fix modular queries with the new solver
  + Improve formatting of error string for modules
  + Change mechanism of module conflicts
  + Fix load/update FailSafe
- Drop patch included in this release
  + Patch: 0001-context-Sync-missing-arches-from-DNF.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1613131200">- Backport fixes to add controls for installonlypkgs and protected_packages
  + Patch: 0001-context-Support-config-file-option-installonlypkgs.patch
  + Patch: 0002-context-Support-config-file-option-protected_package.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1613217600">- Add patch to move directory for dnf state data to /usr/lib/sysimage
  + Patch: libdnf-0.58.0-Use-usr-lib-sysimage-for-the-persistent-state-dir.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1613217601">- Backport another fix for adding controls to installonlypkgs
  + Patch: 0001-context-Fix-dnf_package_is_installonly-RhBug-1928056.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1614081600">- Backport support for using certificates for repository authorization
  + Patch: 0001-Fix-librepo-version-required-in-CMakeList.txt-1.12.0.patch
  + Patch: 0002-Fix-Fully-set-ssl-in-newHandle-function.patch
  + Patch: 0003-conf-Add-options-for-working-with-certificates-used-.patch
  + Patch: 0004-Apply-proxy-certificate-options.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1614254400">- Add repo-config-zypp subpackage to allow easily using Zypper
  repository configuration</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1614340800">- Backport more fixes for using certs for repo authorization
  + Patch: 0001-Deduplicate-code-create-Repo-Impl-stringToProxyAuthM.patch
  + Patch: 0002-context-Support-config-file-option-proxy_auth_method.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1614686400">- Update to 0.60.0
  + Fix repo.fresh() implementation
  + Fix: Fully set ssl in newHandle function
  + [conf] Add options for working with certificates used with proxy
  + Apply proxy certificate options
  + lock: Switch return-if-fail to assert to quiet gcc -fanalyzer
  + build-sys: Clean up message about Python bindings
  + Modify module NSVCA parsing - context definition (rh#1926771)
  + [context] Fix: dnf_package_is_installonly (rh#1928056)
  + Fix problematic language
  + Add getApplicablePackages to advisory and isApplicable to advisorymodule
  + Keep isAdvisoryApplicable to preserve API
  + Run ModulePackageContainerTest tests in tmpdir, merge interdependent
  + [context] Support config file option "proxy_auth_method", defaults "any"
  + Properly handle multiple collections in updateinfo.xml (rh#1804234)
  + Support main config file option "installonlypkgs"
  + Support main config file option "protected_packages"
- Drop patches now part of this release
  + Patch: 0001-context-Support-config-file-option-installonlypkgs.patch
  + Patch: 0002-context-Support-config-file-option-protected_package.patch
  + Patch: 0001-context-Fix-dnf_package_is_installonly-RhBug-1928056.patch
  + Patch: 0001-Fix-librepo-version-required-in-CMakeList.txt-1.12.0.patch
  + Patch: 0002-Fix-Fully-set-ssl-in-newHandle-function.patch
  + Patch: 0003-conf-Add-options-for-working-with-certificates-used-.patch
  + Patch: 0004-Apply-proxy-certificate-options.patch
  + Patch: 0001-Deduplicate-code-create-Repo-Impl-stringToProxyAuthM.patch
  + Patch: 0002-context-Support-config-file-option-proxy_auth_method.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1614686401">- Fix dependency for repo-config-zypp subpackage to work with SLE</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1618315200">- Update to 0.62.0
  + Change order of TransactionItemReason (rh#1921063)
  + Add two new comperators for security filters (rh#1918475)
  + Apply security filters for candidates with lower priority
  + Fix: Goal - translation of messages in global maps
  + Enhance description of modular solvables
  + Improve performance for module query
  + Change mechanism of modular errata applicability (rh#1804234)
  + dnf_transaction_commit(): Remove second call to rpmtsSetVSFlags
  + Fix a couple of memory leaks
  + Fix: Setting of librepo handle in newHandle function
  + Remove failsafe data when module is not enabled (rh#1847035)
  + Expose librepo's checksum functions via SWIG
  + Fix: Mising check of "hy_split_nevra()" return code
  + Do not allow 1 as installonly_limit value (rh#1926261)
  + Fix check whether the subkey can be used for signing
  + Hardening: add signature check with rpmcliVerifySignatures
    (CVE-2021-3445, CVE-2021-3421, CVE-2021-20271, rh#1932079, rh#1932089, rh#1932090, boo#1183779)
  + Add a config option sslverifystatus, defaults to false (rh#1814383)
  + [context] Add API for distro-sync</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1618488000">- Add patch to fix crash when loading DVD repositories
  + Patch: 0001-Fix-a-crash-when-repoId-not-found-in-loaded-conf-gke.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1630065600">- Update to 0.63.1
  + ModuleProfile: add isDefault()
  + ModulePackage: add getDefaultProfile()
  + Add new dnf_context_module_install() C API
  + Fix a crash when [media] section in .treeinfo is missing for bootable media (rh#1946024)
  + Add hy_query_get_advisory_pkgs to C API (rh#1960561)
  + Add dnf_advisorypkg_get_advisory()
  + DNF does not fail on non UTF-8 file names in a package (rh#1893176)
  + Improve error-reporting for modular functions
- Drop patch included in this release
  + Patch: 0001-Fix-a-crash-when-repoId-not-found-in-loaded-conf-gke.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1635940800">- Update to 0.65.0
  + Add support for excluding packages to be installed as weak dependencies
  + Add support for autodetecting packages to be excluded from being installed as weak dependencies
  + Turn off strict validation of modulemd documents (rh#2004853, rh#2007166, rh#2007167)
  + Implement logic for demodularization of modular rpms (rh#1805260)
  + DnfContext: fix handling of default module profiles
  + ModuleMetadata: gracefully handle modules with no defaults
  + Remove failovermethod config option (rh#1961083)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1647259200">- Skip rich deps for autodetection of unmet dependencies (rh#2033130)
  + Patch: 0001-Skip-rich-deps-for-autodetection-of-unmet-dependencies.patch</changelog>
</package>
<package pkgid="e4a016ac24eb28fec032baff799921f1080dea3eefc9448f1a5a2bf5137f30f6" name="libdnf-repo-config-zypp" arch="x86_64">
  <version epoch="0" ver="0.65.0" rel="bp154.2.1"/>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1594123200">- Update to version 0.48.0
  + Add prereq_ignoreinst &amp; regular_requires properties for pkg (rh#1543449)
  + Reset active modules when no module enabled or default (rh#1767351)
  + Add comment option to transaction (rh#1773679)
  + Failing to get module defauls is a recoverable error
  + Baseurl is not exclusive with mirrorlist/metalink (rh#1775184)
  + Add new function to reset all modules in C API (dnf_context_reset_all_modules)
  + [context] Fix to preserve additionalMetadata content (rh#1808677)
  + Fix filtering of DepSolvables with source rpms (rh#1812596)
  + Add setter for running kernel protection setting
  + Handle situation when an unprivileged user cannot create history database (rh#1634385)
  + Add query filter: latest by priority
  + Add DNF_NO_PROTECTED flag to allow empty list of protected packages
  + Remove 'dim' option from terminal colors to make them more readable (rh#1807774, rh#1814563)
  + [context] Error when main config file can't be opened (rh#1794864)
  + [context] Add function function dnf_context_is_set_config_file_path
  + swdb: Catch only SQLite3 exceptions and simplify the messages
  + MergedTransaction list multiple comments (rh#1773679)
  + Modify CMake to pull *.po files from weblate
  + Optimize DependencyContainer creation from an existing queue
  + fix a memory leak in dnf_package_get_requires()
  + Fix memory leaks on g_build_filename()
  + Fix memory leak in dnf_context_setup()
  + Add `hy_goal_favor` and `hy_goal_disfavor`
  + Define a cleanup function for `DnfPackageSet`
  + dnf-repo: fix dnf_repo_get_public_keys double-free
  + Do not cache RPMDB
  + Use single-quotes around string literals used in SQL statements
  + SQLite3: Do not close the database if it wasn't opened (rh#1761976)
  + Don't create a new history DB connection for in-memory DB
  + transaction/Swdb: Use a single logger variable in constructor
  + utils: Add a safe version of pathExists()
  + swdb: Handle the case when pathExists() fails on e.g. permission
  + Repo: prepend "file://" if a local path is used as baseurl
  + Move urlEncode() to utils
  + utils: Add 'exclude' argument to urlEncode()
  + Encode package URL for downloading through librepo (rh#1817130)
  + Replace std::runtime_error with libdnf::RepoError
  + Fixes and error handling improvements of the File class
  + [context] Use ConfigRepo for gpgkey and baseurl (rh#1807864)
  + [context] support "priority" option in .repo config file (rh#1797265)
- Drop obsolete patch: libdnf-0.45.0-handle-all-rpmdb-variants.patch
- Refresh patch for static linking libsolvext
  + Remove patch: libdnf-0.39.1-with-static-libsolvext.patch
  + Add patch: libdnf-0.48.0-with-static-libsolvext.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1598011200">- Backport fix from upstream to fix building against check &gt;= 0.15
  + Patch: 0001-tests-Fix-incorrect-usage-of-the-fail_unless-macro.patch
- Clean up spec comments about patches</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1603540800">- Update to version 0.54.2
  + history: Fix dnf history rollback when a package was removed (rh#1683134)
  + Add support for HY_GT, HY_LT in query nevra_strict
  + Fix parsing empty lines in config files
  + Accept '==' as an operator in reldeps (rh#1847946)
  + Add log file level main config option (rh#1802074)
  + Add protect_running_kernel configuration option (rh#1698145)
  + Context part of libdnf cannot assume zchunk is on (rh#1851841, rh#1779104)
  + Fix memory leak of resultingModuleIndex and handle g_object refs
  + Redirect librepo logs to libdnf logs with different source
  + Add hy_goal_lock
  + Enum/String conversions for Transaction Store/Replay
  + utils: Add a method to decode URLs
  + Unify hawkey.log line format with the rest of the logs
- Drop patches included in this release
  + Patch: 0001-tests-Fix-incorrect-usage-of-the-fail_unless-macro.patch
- Refresh patch for reposdir paths
  + Remove patch: libdnf-0.39.1-Switch-default-reposdir-to-etc-dnf-repos.d.patch
  + Add patch: libdnf-0.54.2-Switch-default-reposdir-to-etc-dnf-repos.d.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1606651200">- Update to version 0.55.0
  + Add vendor to dnf API (rh#1876561)
  + Add formatting function for solver error
  + Add error types in ModulePackageContainer
  + Implement module enable for context part
  + Improve string formatting for translation
  + Remove redundant printf and change logging info to notice (rh#1827424)
  + Add allow_vendor_change option (rh#1788371) (rh#1788371)
- Backport patches from upstream
  + Patch: 0001-Support-allow_vendor_change-setting-in-dnf-context-A.patch
  + Patch: 0001-context-dnf_keyring_add_public_keys-not-generate-err.patch
- Add patch to turn off changing vendors by default
  + Patch: libdnf-0.55.0-Switch-allow_vendor_change-off.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1607256000">- Update to version 0.55.2
  + Improve performance of query installed() and available()
  + Swdb: Add a method to get the current transaction
  + [modules] Add special handling for src artifacts (rh#1809314)
  + Better msgs if "basecachedir" or "proxy_password" isn't set (rh#1888946)
  + Add new options module_stream_switch
  + Support allow_vendor_change setting in dnf context API
- Drop patches incorporated into this release
  + Patch: 0001-Support-allow_vendor_change-setting-in-dnf-context-A.patch
  + Patch: 0001-context-dnf_keyring_add_public_keys-not-generate-err.patch
- Use cmake_build and cmake_install macros</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1609761600">- Add patch to support armv6hl and RISC-V architectures
  + Patch: 0001-context-Sync-missing-arches-from-DNF.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1612267200">- Update to version 0.58.0
  + Option: Add reset() method
  + Add OptionBinds::getOption() method
  + [context] Add dnf_repo_conf_from_gkeyfile() and dnf_repo_conf_reset()
  + [context] Add support for options: minrate, throttle, bandwidth, timeout
  + [context] Remove g_key_file_get_string() from dnf_repo_set_keyfile_data()
  + Allow loading ext metadata even if only cache (solv) is present
  + Add ASAN_OPTIONS for test_libdnf_main
  + [context,API] Functions for accessing main/global configuration options
  + [context,API] Function for adding setopt
  + Add getter for modular obsoletes from ModuleMetadata
  + Add ModulePackage.getStaticContext() and getRequires()
  + Add compatible layer for MdDocuments v2
  + Fix modular queries with the new solver
  + Improve formatting of error string for modules
  + Change mechanism of module conflicts
  + Fix load/update FailSafe
- Drop patch included in this release
  + Patch: 0001-context-Sync-missing-arches-from-DNF.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1613131200">- Backport fixes to add controls for installonlypkgs and protected_packages
  + Patch: 0001-context-Support-config-file-option-installonlypkgs.patch
  + Patch: 0002-context-Support-config-file-option-protected_package.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1613217600">- Add patch to move directory for dnf state data to /usr/lib/sysimage
  + Patch: libdnf-0.58.0-Use-usr-lib-sysimage-for-the-persistent-state-dir.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1613217601">- Backport another fix for adding controls to installonlypkgs
  + Patch: 0001-context-Fix-dnf_package_is_installonly-RhBug-1928056.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1614081600">- Backport support for using certificates for repository authorization
  + Patch: 0001-Fix-librepo-version-required-in-CMakeList.txt-1.12.0.patch
  + Patch: 0002-Fix-Fully-set-ssl-in-newHandle-function.patch
  + Patch: 0003-conf-Add-options-for-working-with-certificates-used-.patch
  + Patch: 0004-Apply-proxy-certificate-options.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1614254400">- Add repo-config-zypp subpackage to allow easily using Zypper
  repository configuration</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1614340800">- Backport more fixes for using certs for repo authorization
  + Patch: 0001-Deduplicate-code-create-Repo-Impl-stringToProxyAuthM.patch
  + Patch: 0002-context-Support-config-file-option-proxy_auth_method.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1614686400">- Update to 0.60.0
  + Fix repo.fresh() implementation
  + Fix: Fully set ssl in newHandle function
  + [conf] Add options for working with certificates used with proxy
  + Apply proxy certificate options
  + lock: Switch return-if-fail to assert to quiet gcc -fanalyzer
  + build-sys: Clean up message about Python bindings
  + Modify module NSVCA parsing - context definition (rh#1926771)
  + [context] Fix: dnf_package_is_installonly (rh#1928056)
  + Fix problematic language
  + Add getApplicablePackages to advisory and isApplicable to advisorymodule
  + Keep isAdvisoryApplicable to preserve API
  + Run ModulePackageContainerTest tests in tmpdir, merge interdependent
  + [context] Support config file option "proxy_auth_method", defaults "any"
  + Properly handle multiple collections in updateinfo.xml (rh#1804234)
  + Support main config file option "installonlypkgs"
  + Support main config file option "protected_packages"
- Drop patches now part of this release
  + Patch: 0001-context-Support-config-file-option-installonlypkgs.patch
  + Patch: 0002-context-Support-config-file-option-protected_package.patch
  + Patch: 0001-context-Fix-dnf_package_is_installonly-RhBug-1928056.patch
  + Patch: 0001-Fix-librepo-version-required-in-CMakeList.txt-1.12.0.patch
  + Patch: 0002-Fix-Fully-set-ssl-in-newHandle-function.patch
  + Patch: 0003-conf-Add-options-for-working-with-certificates-used-.patch
  + Patch: 0004-Apply-proxy-certificate-options.patch
  + Patch: 0001-Deduplicate-code-create-Repo-Impl-stringToProxyAuthM.patch
  + Patch: 0002-context-Support-config-file-option-proxy_auth_method.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1614686401">- Fix dependency for repo-config-zypp subpackage to work with SLE</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1618315200">- Update to 0.62.0
  + Change order of TransactionItemReason (rh#1921063)
  + Add two new comperators for security filters (rh#1918475)
  + Apply security filters for candidates with lower priority
  + Fix: Goal - translation of messages in global maps
  + Enhance description of modular solvables
  + Improve performance for module query
  + Change mechanism of modular errata applicability (rh#1804234)
  + dnf_transaction_commit(): Remove second call to rpmtsSetVSFlags
  + Fix a couple of memory leaks
  + Fix: Setting of librepo handle in newHandle function
  + Remove failsafe data when module is not enabled (rh#1847035)
  + Expose librepo's checksum functions via SWIG
  + Fix: Mising check of "hy_split_nevra()" return code
  + Do not allow 1 as installonly_limit value (rh#1926261)
  + Fix check whether the subkey can be used for signing
  + Hardening: add signature check with rpmcliVerifySignatures
    (CVE-2021-3445, CVE-2021-3421, CVE-2021-20271, rh#1932079, rh#1932089, rh#1932090, boo#1183779)
  + Add a config option sslverifystatus, defaults to false (rh#1814383)
  + [context] Add API for distro-sync</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1618488000">- Add patch to fix crash when loading DVD repositories
  + Patch: 0001-Fix-a-crash-when-repoId-not-found-in-loaded-conf-gke.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1630065600">- Update to 0.63.1
  + ModuleProfile: add isDefault()
  + ModulePackage: add getDefaultProfile()
  + Add new dnf_context_module_install() C API
  + Fix a crash when [media] section in .treeinfo is missing for bootable media (rh#1946024)
  + Add hy_query_get_advisory_pkgs to C API (rh#1960561)
  + Add dnf_advisorypkg_get_advisory()
  + DNF does not fail on non UTF-8 file names in a package (rh#1893176)
  + Improve error-reporting for modular functions
- Drop patch included in this release
  + Patch: 0001-Fix-a-crash-when-repoId-not-found-in-loaded-conf-gke.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1635940800">- Update to 0.65.0
  + Add support for excluding packages to be installed as weak dependencies
  + Add support for autodetecting packages to be excluded from being installed as weak dependencies
  + Turn off strict validation of modulemd documents (rh#2004853, rh#2007166, rh#2007167)
  + Implement logic for demodularization of modular rpms (rh#1805260)
  + DnfContext: fix handling of default module profiles
  + ModuleMetadata: gracefully handle modules with no defaults
  + Remove failovermethod config option (rh#1961083)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1647259200">- Skip rich deps for autodetection of unmet dependencies (rh#2033130)
  + Patch: 0001-Skip-rich-deps-for-autodetection-of-unmet-dependencies.patch</changelog>
</package>
<package pkgid="313b6420820b67907e3ac3dbc740c037f8e1efe427b85d201935b308680c57d8" name="libdnf2" arch="aarch64">
  <version epoch="0" ver="0.65.0" rel="bp154.2.1"/>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1594123200">- Update to version 0.48.0
  + Add prereq_ignoreinst &amp; regular_requires properties for pkg (rh#1543449)
  + Reset active modules when no module enabled or default (rh#1767351)
  + Add comment option to transaction (rh#1773679)
  + Failing to get module defauls is a recoverable error
  + Baseurl is not exclusive with mirrorlist/metalink (rh#1775184)
  + Add new function to reset all modules in C API (dnf_context_reset_all_modules)
  + [context] Fix to preserve additionalMetadata content (rh#1808677)
  + Fix filtering of DepSolvables with source rpms (rh#1812596)
  + Add setter for running kernel protection setting
  + Handle situation when an unprivileged user cannot create history database (rh#1634385)
  + Add query filter: latest by priority
  + Add DNF_NO_PROTECTED flag to allow empty list of protected packages
  + Remove 'dim' option from terminal colors to make them more readable (rh#1807774, rh#1814563)
  + [context] Error when main config file can't be opened (rh#1794864)
  + [context] Add function function dnf_context_is_set_config_file_path
  + swdb: Catch only SQLite3 exceptions and simplify the messages
  + MergedTransaction list multiple comments (rh#1773679)
  + Modify CMake to pull *.po files from weblate
  + Optimize DependencyContainer creation from an existing queue
  + fix a memory leak in dnf_package_get_requires()
  + Fix memory leaks on g_build_filename()
  + Fix memory leak in dnf_context_setup()
  + Add `hy_goal_favor` and `hy_goal_disfavor`
  + Define a cleanup function for `DnfPackageSet`
  + dnf-repo: fix dnf_repo_get_public_keys double-free
  + Do not cache RPMDB
  + Use single-quotes around string literals used in SQL statements
  + SQLite3: Do not close the database if it wasn't opened (rh#1761976)
  + Don't create a new history DB connection for in-memory DB
  + transaction/Swdb: Use a single logger variable in constructor
  + utils: Add a safe version of pathExists()
  + swdb: Handle the case when pathExists() fails on e.g. permission
  + Repo: prepend "file://" if a local path is used as baseurl
  + Move urlEncode() to utils
  + utils: Add 'exclude' argument to urlEncode()
  + Encode package URL for downloading through librepo (rh#1817130)
  + Replace std::runtime_error with libdnf::RepoError
  + Fixes and error handling improvements of the File class
  + [context] Use ConfigRepo for gpgkey and baseurl (rh#1807864)
  + [context] support "priority" option in .repo config file (rh#1797265)
- Drop obsolete patch: libdnf-0.45.0-handle-all-rpmdb-variants.patch
- Refresh patch for static linking libsolvext
  + Remove patch: libdnf-0.39.1-with-static-libsolvext.patch
  + Add patch: libdnf-0.48.0-with-static-libsolvext.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1598011200">- Backport fix from upstream to fix building against check &gt;= 0.15
  + Patch: 0001-tests-Fix-incorrect-usage-of-the-fail_unless-macro.patch
- Clean up spec comments about patches</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1603540800">- Update to version 0.54.2
  + history: Fix dnf history rollback when a package was removed (rh#1683134)
  + Add support for HY_GT, HY_LT in query nevra_strict
  + Fix parsing empty lines in config files
  + Accept '==' as an operator in reldeps (rh#1847946)
  + Add log file level main config option (rh#1802074)
  + Add protect_running_kernel configuration option (rh#1698145)
  + Context part of libdnf cannot assume zchunk is on (rh#1851841, rh#1779104)
  + Fix memory leak of resultingModuleIndex and handle g_object refs
  + Redirect librepo logs to libdnf logs with different source
  + Add hy_goal_lock
  + Enum/String conversions for Transaction Store/Replay
  + utils: Add a method to decode URLs
  + Unify hawkey.log line format with the rest of the logs
- Drop patches included in this release
  + Patch: 0001-tests-Fix-incorrect-usage-of-the-fail_unless-macro.patch
- Refresh patch for reposdir paths
  + Remove patch: libdnf-0.39.1-Switch-default-reposdir-to-etc-dnf-repos.d.patch
  + Add patch: libdnf-0.54.2-Switch-default-reposdir-to-etc-dnf-repos.d.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1606651200">- Update to version 0.55.0
  + Add vendor to dnf API (rh#1876561)
  + Add formatting function for solver error
  + Add error types in ModulePackageContainer
  + Implement module enable for context part
  + Improve string formatting for translation
  + Remove redundant printf and change logging info to notice (rh#1827424)
  + Add allow_vendor_change option (rh#1788371) (rh#1788371)
- Backport patches from upstream
  + Patch: 0001-Support-allow_vendor_change-setting-in-dnf-context-A.patch
  + Patch: 0001-context-dnf_keyring_add_public_keys-not-generate-err.patch
- Add patch to turn off changing vendors by default
  + Patch: libdnf-0.55.0-Switch-allow_vendor_change-off.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1607256000">- Update to version 0.55.2
  + Improve performance of query installed() and available()
  + Swdb: Add a method to get the current transaction
  + [modules] Add special handling for src artifacts (rh#1809314)
  + Better msgs if "basecachedir" or "proxy_password" isn't set (rh#1888946)
  + Add new options module_stream_switch
  + Support allow_vendor_change setting in dnf context API
- Drop patches incorporated into this release
  + Patch: 0001-Support-allow_vendor_change-setting-in-dnf-context-A.patch
  + Patch: 0001-context-dnf_keyring_add_public_keys-not-generate-err.patch
- Use cmake_build and cmake_install macros</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1609761600">- Add patch to support armv6hl and RISC-V architectures
  + Patch: 0001-context-Sync-missing-arches-from-DNF.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1612267200">- Update to version 0.58.0
  + Option: Add reset() method
  + Add OptionBinds::getOption() method
  + [context] Add dnf_repo_conf_from_gkeyfile() and dnf_repo_conf_reset()
  + [context] Add support for options: minrate, throttle, bandwidth, timeout
  + [context] Remove g_key_file_get_string() from dnf_repo_set_keyfile_data()
  + Allow loading ext metadata even if only cache (solv) is present
  + Add ASAN_OPTIONS for test_libdnf_main
  + [context,API] Functions for accessing main/global configuration options
  + [context,API] Function for adding setopt
  + Add getter for modular obsoletes from ModuleMetadata
  + Add ModulePackage.getStaticContext() and getRequires()
  + Add compatible layer for MdDocuments v2
  + Fix modular queries with the new solver
  + Improve formatting of error string for modules
  + Change mechanism of module conflicts
  + Fix load/update FailSafe
- Drop patch included in this release
  + Patch: 0001-context-Sync-missing-arches-from-DNF.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1613131200">- Backport fixes to add controls for installonlypkgs and protected_packages
  + Patch: 0001-context-Support-config-file-option-installonlypkgs.patch
  + Patch: 0002-context-Support-config-file-option-protected_package.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1613217600">- Add patch to move directory for dnf state data to /usr/lib/sysimage
  + Patch: libdnf-0.58.0-Use-usr-lib-sysimage-for-the-persistent-state-dir.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1613217601">- Backport another fix for adding controls to installonlypkgs
  + Patch: 0001-context-Fix-dnf_package_is_installonly-RhBug-1928056.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1614081600">- Backport support for using certificates for repository authorization
  + Patch: 0001-Fix-librepo-version-required-in-CMakeList.txt-1.12.0.patch
  + Patch: 0002-Fix-Fully-set-ssl-in-newHandle-function.patch
  + Patch: 0003-conf-Add-options-for-working-with-certificates-used-.patch
  + Patch: 0004-Apply-proxy-certificate-options.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1614254400">- Add repo-config-zypp subpackage to allow easily using Zypper
  repository configuration</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1614340800">- Backport more fixes for using certs for repo authorization
  + Patch: 0001-Deduplicate-code-create-Repo-Impl-stringToProxyAuthM.patch
  + Patch: 0002-context-Support-config-file-option-proxy_auth_method.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1614686400">- Update to 0.60.0
  + Fix repo.fresh() implementation
  + Fix: Fully set ssl in newHandle function
  + [conf] Add options for working with certificates used with proxy
  + Apply proxy certificate options
  + lock: Switch return-if-fail to assert to quiet gcc -fanalyzer
  + build-sys: Clean up message about Python bindings
  + Modify module NSVCA parsing - context definition (rh#1926771)
  + [context] Fix: dnf_package_is_installonly (rh#1928056)
  + Fix problematic language
  + Add getApplicablePackages to advisory and isApplicable to advisorymodule
  + Keep isAdvisoryApplicable to preserve API
  + Run ModulePackageContainerTest tests in tmpdir, merge interdependent
  + [context] Support config file option "proxy_auth_method", defaults "any"
  + Properly handle multiple collections in updateinfo.xml (rh#1804234)
  + Support main config file option "installonlypkgs"
  + Support main config file option "protected_packages"
- Drop patches now part of this release
  + Patch: 0001-context-Support-config-file-option-installonlypkgs.patch
  + Patch: 0002-context-Support-config-file-option-protected_package.patch
  + Patch: 0001-context-Fix-dnf_package_is_installonly-RhBug-1928056.patch
  + Patch: 0001-Fix-librepo-version-required-in-CMakeList.txt-1.12.0.patch
  + Patch: 0002-Fix-Fully-set-ssl-in-newHandle-function.patch
  + Patch: 0003-conf-Add-options-for-working-with-certificates-used-.patch
  + Patch: 0004-Apply-proxy-certificate-options.patch
  + Patch: 0001-Deduplicate-code-create-Repo-Impl-stringToProxyAuthM.patch
  + Patch: 0002-context-Support-config-file-option-proxy_auth_method.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1614686401">- Fix dependency for repo-config-zypp subpackage to work with SLE</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1618315200">- Update to 0.62.0
  + Change order of TransactionItemReason (rh#1921063)
  + Add two new comperators for security filters (rh#1918475)
  + Apply security filters for candidates with lower priority
  + Fix: Goal - translation of messages in global maps
  + Enhance description of modular solvables
  + Improve performance for module query
  + Change mechanism of modular errata applicability (rh#1804234)
  + dnf_transaction_commit(): Remove second call to rpmtsSetVSFlags
  + Fix a couple of memory leaks
  + Fix: Setting of librepo handle in newHandle function
  + Remove failsafe data when module is not enabled (rh#1847035)
  + Expose librepo's checksum functions via SWIG
  + Fix: Mising check of "hy_split_nevra()" return code
  + Do not allow 1 as installonly_limit value (rh#1926261)
  + Fix check whether the subkey can be used for signing
  + Hardening: add signature check with rpmcliVerifySignatures
    (CVE-2021-3445, CVE-2021-3421, CVE-2021-20271, rh#1932079, rh#1932089, rh#1932090, boo#1183779)
  + Add a config option sslverifystatus, defaults to false (rh#1814383)
  + [context] Add API for distro-sync</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1618488000">- Add patch to fix crash when loading DVD repositories
  + Patch: 0001-Fix-a-crash-when-repoId-not-found-in-loaded-conf-gke.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1630065600">- Update to 0.63.1
  + ModuleProfile: add isDefault()
  + ModulePackage: add getDefaultProfile()
  + Add new dnf_context_module_install() C API
  + Fix a crash when [media] section in .treeinfo is missing for bootable media (rh#1946024)
  + Add hy_query_get_advisory_pkgs to C API (rh#1960561)
  + Add dnf_advisorypkg_get_advisory()
  + DNF does not fail on non UTF-8 file names in a package (rh#1893176)
  + Improve error-reporting for modular functions
- Drop patch included in this release
  + Patch: 0001-Fix-a-crash-when-repoId-not-found-in-loaded-conf-gke.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1635940800">- Update to 0.65.0
  + Add support for excluding packages to be installed as weak dependencies
  + Add support for autodetecting packages to be excluded from being installed as weak dependencies
  + Turn off strict validation of modulemd documents (rh#2004853, rh#2007166, rh#2007167)
  + Implement logic for demodularization of modular rpms (rh#1805260)
  + DnfContext: fix handling of default module profiles
  + ModuleMetadata: gracefully handle modules with no defaults
  + Remove failovermethod config option (rh#1961083)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1647259200">- Skip rich deps for autodetection of unmet dependencies (rh#2033130)
  + Patch: 0001-Skip-rich-deps-for-autodetection-of-unmet-dependencies.patch</changelog>
</package>
<package pkgid="044240ded324534544581cda834695bd8cea122bf3ade99911032ca9413175b4" name="libdnf2" arch="i586">
  <version epoch="0" ver="0.65.0" rel="bp154.2.1"/>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1594123200">- Update to version 0.48.0
  + Add prereq_ignoreinst &amp; regular_requires properties for pkg (rh#1543449)
  + Reset active modules when no module enabled or default (rh#1767351)
  + Add comment option to transaction (rh#1773679)
  + Failing to get module defauls is a recoverable error
  + Baseurl is not exclusive with mirrorlist/metalink (rh#1775184)
  + Add new function to reset all modules in C API (dnf_context_reset_all_modules)
  + [context] Fix to preserve additionalMetadata content (rh#1808677)
  + Fix filtering of DepSolvables with source rpms (rh#1812596)
  + Add setter for running kernel protection setting
  + Handle situation when an unprivileged user cannot create history database (rh#1634385)
  + Add query filter: latest by priority
  + Add DNF_NO_PROTECTED flag to allow empty list of protected packages
  + Remove 'dim' option from terminal colors to make them more readable (rh#1807774, rh#1814563)
  + [context] Error when main config file can't be opened (rh#1794864)
  + [context] Add function function dnf_context_is_set_config_file_path
  + swdb: Catch only SQLite3 exceptions and simplify the messages
  + MergedTransaction list multiple comments (rh#1773679)
  + Modify CMake to pull *.po files from weblate
  + Optimize DependencyContainer creation from an existing queue
  + fix a memory leak in dnf_package_get_requires()
  + Fix memory leaks on g_build_filename()
  + Fix memory leak in dnf_context_setup()
  + Add `hy_goal_favor` and `hy_goal_disfavor`
  + Define a cleanup function for `DnfPackageSet`
  + dnf-repo: fix dnf_repo_get_public_keys double-free
  + Do not cache RPMDB
  + Use single-quotes around string literals used in SQL statements
  + SQLite3: Do not close the database if it wasn't opened (rh#1761976)
  + Don't create a new history DB connection for in-memory DB
  + transaction/Swdb: Use a single logger variable in constructor
  + utils: Add a safe version of pathExists()
  + swdb: Handle the case when pathExists() fails on e.g. permission
  + Repo: prepend "file://" if a local path is used as baseurl
  + Move urlEncode() to utils
  + utils: Add 'exclude' argument to urlEncode()
  + Encode package URL for downloading through librepo (rh#1817130)
  + Replace std::runtime_error with libdnf::RepoError
  + Fixes and error handling improvements of the File class
  + [context] Use ConfigRepo for gpgkey and baseurl (rh#1807864)
  + [context] support "priority" option in .repo config file (rh#1797265)
- Drop obsolete patch: libdnf-0.45.0-handle-all-rpmdb-variants.patch
- Refresh patch for static linking libsolvext
  + Remove patch: libdnf-0.39.1-with-static-libsolvext.patch
  + Add patch: libdnf-0.48.0-with-static-libsolvext.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1598011200">- Backport fix from upstream to fix building against check &gt;= 0.15
  + Patch: 0001-tests-Fix-incorrect-usage-of-the-fail_unless-macro.patch
- Clean up spec comments about patches</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1603540800">- Update to version 0.54.2
  + history: Fix dnf history rollback when a package was removed (rh#1683134)
  + Add support for HY_GT, HY_LT in query nevra_strict
  + Fix parsing empty lines in config files
  + Accept '==' as an operator in reldeps (rh#1847946)
  + Add log file level main config option (rh#1802074)
  + Add protect_running_kernel configuration option (rh#1698145)
  + Context part of libdnf cannot assume zchunk is on (rh#1851841, rh#1779104)
  + Fix memory leak of resultingModuleIndex and handle g_object refs
  + Redirect librepo logs to libdnf logs with different source
  + Add hy_goal_lock
  + Enum/String conversions for Transaction Store/Replay
  + utils: Add a method to decode URLs
  + Unify hawkey.log line format with the rest of the logs
- Drop patches included in this release
  + Patch: 0001-tests-Fix-incorrect-usage-of-the-fail_unless-macro.patch
- Refresh patch for reposdir paths
  + Remove patch: libdnf-0.39.1-Switch-default-reposdir-to-etc-dnf-repos.d.patch
  + Add patch: libdnf-0.54.2-Switch-default-reposdir-to-etc-dnf-repos.d.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1606651200">- Update to version 0.55.0
  + Add vendor to dnf API (rh#1876561)
  + Add formatting function for solver error
  + Add error types in ModulePackageContainer
  + Implement module enable for context part
  + Improve string formatting for translation
  + Remove redundant printf and change logging info to notice (rh#1827424)
  + Add allow_vendor_change option (rh#1788371) (rh#1788371)
- Backport patches from upstream
  + Patch: 0001-Support-allow_vendor_change-setting-in-dnf-context-A.patch
  + Patch: 0001-context-dnf_keyring_add_public_keys-not-generate-err.patch
- Add patch to turn off changing vendors by default
  + Patch: libdnf-0.55.0-Switch-allow_vendor_change-off.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1607256000">- Update to version 0.55.2
  + Improve performance of query installed() and available()
  + Swdb: Add a method to get the current transaction
  + [modules] Add special handling for src artifacts (rh#1809314)
  + Better msgs if "basecachedir" or "proxy_password" isn't set (rh#1888946)
  + Add new options module_stream_switch
  + Support allow_vendor_change setting in dnf context API
- Drop patches incorporated into this release
  + Patch: 0001-Support-allow_vendor_change-setting-in-dnf-context-A.patch
  + Patch: 0001-context-dnf_keyring_add_public_keys-not-generate-err.patch
- Use cmake_build and cmake_install macros</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1609761600">- Add patch to support armv6hl and RISC-V architectures
  + Patch: 0001-context-Sync-missing-arches-from-DNF.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1612267200">- Update to version 0.58.0
  + Option: Add reset() method
  + Add OptionBinds::getOption() method
  + [context] Add dnf_repo_conf_from_gkeyfile() and dnf_repo_conf_reset()
  + [context] Add support for options: minrate, throttle, bandwidth, timeout
  + [context] Remove g_key_file_get_string() from dnf_repo_set_keyfile_data()
  + Allow loading ext metadata even if only cache (solv) is present
  + Add ASAN_OPTIONS for test_libdnf_main
  + [context,API] Functions for accessing main/global configuration options
  + [context,API] Function for adding setopt
  + Add getter for modular obsoletes from ModuleMetadata
  + Add ModulePackage.getStaticContext() and getRequires()
  + Add compatible layer for MdDocuments v2
  + Fix modular queries with the new solver
  + Improve formatting of error string for modules
  + Change mechanism of module conflicts
  + Fix load/update FailSafe
- Drop patch included in this release
  + Patch: 0001-context-Sync-missing-arches-from-DNF.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1613131200">- Backport fixes to add controls for installonlypkgs and protected_packages
  + Patch: 0001-context-Support-config-file-option-installonlypkgs.patch
  + Patch: 0002-context-Support-config-file-option-protected_package.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1613217600">- Add patch to move directory for dnf state data to /usr/lib/sysimage
  + Patch: libdnf-0.58.0-Use-usr-lib-sysimage-for-the-persistent-state-dir.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1613217601">- Backport another fix for adding controls to installonlypkgs
  + Patch: 0001-context-Fix-dnf_package_is_installonly-RhBug-1928056.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1614081600">- Backport support for using certificates for repository authorization
  + Patch: 0001-Fix-librepo-version-required-in-CMakeList.txt-1.12.0.patch
  + Patch: 0002-Fix-Fully-set-ssl-in-newHandle-function.patch
  + Patch: 0003-conf-Add-options-for-working-with-certificates-used-.patch
  + Patch: 0004-Apply-proxy-certificate-options.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1614254400">- Add repo-config-zypp subpackage to allow easily using Zypper
  repository configuration</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1614340800">- Backport more fixes for using certs for repo authorization
  + Patch: 0001-Deduplicate-code-create-Repo-Impl-stringToProxyAuthM.patch
  + Patch: 0002-context-Support-config-file-option-proxy_auth_method.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1614686400">- Update to 0.60.0
  + Fix repo.fresh() implementation
  + Fix: Fully set ssl in newHandle function
  + [conf] Add options for working with certificates used with proxy
  + Apply proxy certificate options
  + lock: Switch return-if-fail to assert to quiet gcc -fanalyzer
  + build-sys: Clean up message about Python bindings
  + Modify module NSVCA parsing - context definition (rh#1926771)
  + [context] Fix: dnf_package_is_installonly (rh#1928056)
  + Fix problematic language
  + Add getApplicablePackages to advisory and isApplicable to advisorymodule
  + Keep isAdvisoryApplicable to preserve API
  + Run ModulePackageContainerTest tests in tmpdir, merge interdependent
  + [context] Support config file option "proxy_auth_method", defaults "any"
  + Properly handle multiple collections in updateinfo.xml (rh#1804234)
  + Support main config file option "installonlypkgs"
  + Support main config file option "protected_packages"
- Drop patches now part of this release
  + Patch: 0001-context-Support-config-file-option-installonlypkgs.patch
  + Patch: 0002-context-Support-config-file-option-protected_package.patch
  + Patch: 0001-context-Fix-dnf_package_is_installonly-RhBug-1928056.patch
  + Patch: 0001-Fix-librepo-version-required-in-CMakeList.txt-1.12.0.patch
  + Patch: 0002-Fix-Fully-set-ssl-in-newHandle-function.patch
  + Patch: 0003-conf-Add-options-for-working-with-certificates-used-.patch
  + Patch: 0004-Apply-proxy-certificate-options.patch
  + Patch: 0001-Deduplicate-code-create-Repo-Impl-stringToProxyAuthM.patch
  + Patch: 0002-context-Support-config-file-option-proxy_auth_method.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1614686401">- Fix dependency for repo-config-zypp subpackage to work with SLE</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1618315200">- Update to 0.62.0
  + Change order of TransactionItemReason (rh#1921063)
  + Add two new comperators for security filters (rh#1918475)
  + Apply security filters for candidates with lower priority
  + Fix: Goal - translation of messages in global maps
  + Enhance description of modular solvables
  + Improve performance for module query
  + Change mechanism of modular errata applicability (rh#1804234)
  + dnf_transaction_commit(): Remove second call to rpmtsSetVSFlags
  + Fix a couple of memory leaks
  + Fix: Setting of librepo handle in newHandle function
  + Remove failsafe data when module is not enabled (rh#1847035)
  + Expose librepo's checksum functions via SWIG
  + Fix: Mising check of "hy_split_nevra()" return code
  + Do not allow 1 as installonly_limit value (rh#1926261)
  + Fix check whether the subkey can be used for signing
  + Hardening: add signature check with rpmcliVerifySignatures
    (CVE-2021-3445, CVE-2021-3421, CVE-2021-20271, rh#1932079, rh#1932089, rh#1932090, boo#1183779)
  + Add a config option sslverifystatus, defaults to false (rh#1814383)
  + [context] Add API for distro-sync</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1618488000">- Add patch to fix crash when loading DVD repositories
  + Patch: 0001-Fix-a-crash-when-repoId-not-found-in-loaded-conf-gke.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1630065600">- Update to 0.63.1
  + ModuleProfile: add isDefault()
  + ModulePackage: add getDefaultProfile()
  + Add new dnf_context_module_install() C API
  + Fix a crash when [media] section in .treeinfo is missing for bootable media (rh#1946024)
  + Add hy_query_get_advisory_pkgs to C API (rh#1960561)
  + Add dnf_advisorypkg_get_advisory()
  + DNF does not fail on non UTF-8 file names in a package (rh#1893176)
  + Improve error-reporting for modular functions
- Drop patch included in this release
  + Patch: 0001-Fix-a-crash-when-repoId-not-found-in-loaded-conf-gke.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1635940800">- Update to 0.65.0
  + Add support for excluding packages to be installed as weak dependencies
  + Add support for autodetecting packages to be excluded from being installed as weak dependencies
  + Turn off strict validation of modulemd documents (rh#2004853, rh#2007166, rh#2007167)
  + Implement logic for demodularization of modular rpms (rh#1805260)
  + DnfContext: fix handling of default module profiles
  + ModuleMetadata: gracefully handle modules with no defaults
  + Remove failovermethod config option (rh#1961083)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1647259200">- Skip rich deps for autodetection of unmet dependencies (rh#2033130)
  + Patch: 0001-Skip-rich-deps-for-autodetection-of-unmet-dependencies.patch</changelog>
</package>
<package pkgid="41235d1e68275c219d7819b313ca7427d8c9d92cdf8cbda5a88b2160d6de38c7" name="libdnf2" arch="ppc64le">
  <version epoch="0" ver="0.65.0" rel="bp154.2.1"/>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1594123200">- Update to version 0.48.0
  + Add prereq_ignoreinst &amp; regular_requires properties for pkg (rh#1543449)
  + Reset active modules when no module enabled or default (rh#1767351)
  + Add comment option to transaction (rh#1773679)
  + Failing to get module defauls is a recoverable error
  + Baseurl is not exclusive with mirrorlist/metalink (rh#1775184)
  + Add new function to reset all modules in C API (dnf_context_reset_all_modules)
  + [context] Fix to preserve additionalMetadata content (rh#1808677)
  + Fix filtering of DepSolvables with source rpms (rh#1812596)
  + Add setter for running kernel protection setting
  + Handle situation when an unprivileged user cannot create history database (rh#1634385)
  + Add query filter: latest by priority
  + Add DNF_NO_PROTECTED flag to allow empty list of protected packages
  + Remove 'dim' option from terminal colors to make them more readable (rh#1807774, rh#1814563)
  + [context] Error when main config file can't be opened (rh#1794864)
  + [context] Add function function dnf_context_is_set_config_file_path
  + swdb: Catch only SQLite3 exceptions and simplify the messages
  + MergedTransaction list multiple comments (rh#1773679)
  + Modify CMake to pull *.po files from weblate
  + Optimize DependencyContainer creation from an existing queue
  + fix a memory leak in dnf_package_get_requires()
  + Fix memory leaks on g_build_filename()
  + Fix memory leak in dnf_context_setup()
  + Add `hy_goal_favor` and `hy_goal_disfavor`
  + Define a cleanup function for `DnfPackageSet`
  + dnf-repo: fix dnf_repo_get_public_keys double-free
  + Do not cache RPMDB
  + Use single-quotes around string literals used in SQL statements
  + SQLite3: Do not close the database if it wasn't opened (rh#1761976)
  + Don't create a new history DB connection for in-memory DB
  + transaction/Swdb: Use a single logger variable in constructor
  + utils: Add a safe version of pathExists()
  + swdb: Handle the case when pathExists() fails on e.g. permission
  + Repo: prepend "file://" if a local path is used as baseurl
  + Move urlEncode() to utils
  + utils: Add 'exclude' argument to urlEncode()
  + Encode package URL for downloading through librepo (rh#1817130)
  + Replace std::runtime_error with libdnf::RepoError
  + Fixes and error handling improvements of the File class
  + [context] Use ConfigRepo for gpgkey and baseurl (rh#1807864)
  + [context] support "priority" option in .repo config file (rh#1797265)
- Drop obsolete patch: libdnf-0.45.0-handle-all-rpmdb-variants.patch
- Refresh patch for static linking libsolvext
  + Remove patch: libdnf-0.39.1-with-static-libsolvext.patch
  + Add patch: libdnf-0.48.0-with-static-libsolvext.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1598011200">- Backport fix from upstream to fix building against check &gt;= 0.15
  + Patch: 0001-tests-Fix-incorrect-usage-of-the-fail_unless-macro.patch
- Clean up spec comments about patches</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1603540800">- Update to version 0.54.2
  + history: Fix dnf history rollback when a package was removed (rh#1683134)
  + Add support for HY_GT, HY_LT in query nevra_strict
  + Fix parsing empty lines in config files
  + Accept '==' as an operator in reldeps (rh#1847946)
  + Add log file level main config option (rh#1802074)
  + Add protect_running_kernel configuration option (rh#1698145)
  + Context part of libdnf cannot assume zchunk is on (rh#1851841, rh#1779104)
  + Fix memory leak of resultingModuleIndex and handle g_object refs
  + Redirect librepo logs to libdnf logs with different source
  + Add hy_goal_lock
  + Enum/String conversions for Transaction Store/Replay
  + utils: Add a method to decode URLs
  + Unify hawkey.log line format with the rest of the logs
- Drop patches included in this release
  + Patch: 0001-tests-Fix-incorrect-usage-of-the-fail_unless-macro.patch
- Refresh patch for reposdir paths
  + Remove patch: libdnf-0.39.1-Switch-default-reposdir-to-etc-dnf-repos.d.patch
  + Add patch: libdnf-0.54.2-Switch-default-reposdir-to-etc-dnf-repos.d.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1606651200">- Update to version 0.55.0
  + Add vendor to dnf API (rh#1876561)
  + Add formatting function for solver error
  + Add error types in ModulePackageContainer
  + Implement module enable for context part
  + Improve string formatting for translation
  + Remove redundant printf and change logging info to notice (rh#1827424)
  + Add allow_vendor_change option (rh#1788371) (rh#1788371)
- Backport patches from upstream
  + Patch: 0001-Support-allow_vendor_change-setting-in-dnf-context-A.patch
  + Patch: 0001-context-dnf_keyring_add_public_keys-not-generate-err.patch
- Add patch to turn off changing vendors by default
  + Patch: libdnf-0.55.0-Switch-allow_vendor_change-off.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1607256000">- Update to version 0.55.2
  + Improve performance of query installed() and available()
  + Swdb: Add a method to get the current transaction
  + [modules] Add special handling for src artifacts (rh#1809314)
  + Better msgs if "basecachedir" or "proxy_password" isn't set (rh#1888946)
  + Add new options module_stream_switch
  + Support allow_vendor_change setting in dnf context API
- Drop patches incorporated into this release
  + Patch: 0001-Support-allow_vendor_change-setting-in-dnf-context-A.patch
  + Patch: 0001-context-dnf_keyring_add_public_keys-not-generate-err.patch
- Use cmake_build and cmake_install macros</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1609761600">- Add patch to support armv6hl and RISC-V architectures
  + Patch: 0001-context-Sync-missing-arches-from-DNF.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1612267200">- Update to version 0.58.0
  + Option: Add reset() method
  + Add OptionBinds::getOption() method
  + [context] Add dnf_repo_conf_from_gkeyfile() and dnf_repo_conf_reset()
  + [context] Add support for options: minrate, throttle, bandwidth, timeout
  + [context] Remove g_key_file_get_string() from dnf_repo_set_keyfile_data()
  + Allow loading ext metadata even if only cache (solv) is present
  + Add ASAN_OPTIONS for test_libdnf_main
  + [context,API] Functions for accessing main/global configuration options
  + [context,API] Function for adding setopt
  + Add getter for modular obsoletes from ModuleMetadata
  + Add ModulePackage.getStaticContext() and getRequires()
  + Add compatible layer for MdDocuments v2
  + Fix modular queries with the new solver
  + Improve formatting of error string for modules
  + Change mechanism of module conflicts
  + Fix load/update FailSafe
- Drop patch included in this release
  + Patch: 0001-context-Sync-missing-arches-from-DNF.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1613131200">- Backport fixes to add controls for installonlypkgs and protected_packages
  + Patch: 0001-context-Support-config-file-option-installonlypkgs.patch
  + Patch: 0002-context-Support-config-file-option-protected_package.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1613217600">- Add patch to move directory for dnf state data to /usr/lib/sysimage
  + Patch: libdnf-0.58.0-Use-usr-lib-sysimage-for-the-persistent-state-dir.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1613217601">- Backport another fix for adding controls to installonlypkgs
  + Patch: 0001-context-Fix-dnf_package_is_installonly-RhBug-1928056.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1614081600">- Backport support for using certificates for repository authorization
  + Patch: 0001-Fix-librepo-version-required-in-CMakeList.txt-1.12.0.patch
  + Patch: 0002-Fix-Fully-set-ssl-in-newHandle-function.patch
  + Patch: 0003-conf-Add-options-for-working-with-certificates-used-.patch
  + Patch: 0004-Apply-proxy-certificate-options.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1614254400">- Add repo-config-zypp subpackage to allow easily using Zypper
  repository configuration</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1614340800">- Backport more fixes for using certs for repo authorization
  + Patch: 0001-Deduplicate-code-create-Repo-Impl-stringToProxyAuthM.patch
  + Patch: 0002-context-Support-config-file-option-proxy_auth_method.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1614686400">- Update to 0.60.0
  + Fix repo.fresh() implementation
  + Fix: Fully set ssl in newHandle function
  + [conf] Add options for working with certificates used with proxy
  + Apply proxy certificate options
  + lock: Switch return-if-fail to assert to quiet gcc -fanalyzer
  + build-sys: Clean up message about Python bindings
  + Modify module NSVCA parsing - context definition (rh#1926771)
  + [context] Fix: dnf_package_is_installonly (rh#1928056)
  + Fix problematic language
  + Add getApplicablePackages to advisory and isApplicable to advisorymodule
  + Keep isAdvisoryApplicable to preserve API
  + Run ModulePackageContainerTest tests in tmpdir, merge interdependent
  + [context] Support config file option "proxy_auth_method", defaults "any"
  + Properly handle multiple collections in updateinfo.xml (rh#1804234)
  + Support main config file option "installonlypkgs"
  + Support main config file option "protected_packages"
- Drop patches now part of this release
  + Patch: 0001-context-Support-config-file-option-installonlypkgs.patch
  + Patch: 0002-context-Support-config-file-option-protected_package.patch
  + Patch: 0001-context-Fix-dnf_package_is_installonly-RhBug-1928056.patch
  + Patch: 0001-Fix-librepo-version-required-in-CMakeList.txt-1.12.0.patch
  + Patch: 0002-Fix-Fully-set-ssl-in-newHandle-function.patch
  + Patch: 0003-conf-Add-options-for-working-with-certificates-used-.patch
  + Patch: 0004-Apply-proxy-certificate-options.patch
  + Patch: 0001-Deduplicate-code-create-Repo-Impl-stringToProxyAuthM.patch
  + Patch: 0002-context-Support-config-file-option-proxy_auth_method.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1614686401">- Fix dependency for repo-config-zypp subpackage to work with SLE</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1618315200">- Update to 0.62.0
  + Change order of TransactionItemReason (rh#1921063)
  + Add two new comperators for security filters (rh#1918475)
  + Apply security filters for candidates with lower priority
  + Fix: Goal - translation of messages in global maps
  + Enhance description of modular solvables
  + Improve performance for module query
  + Change mechanism of modular errata applicability (rh#1804234)
  + dnf_transaction_commit(): Remove second call to rpmtsSetVSFlags
  + Fix a couple of memory leaks
  + Fix: Setting of librepo handle in newHandle function
  + Remove failsafe data when module is not enabled (rh#1847035)
  + Expose librepo's checksum functions via SWIG
  + Fix: Mising check of "hy_split_nevra()" return code
  + Do not allow 1 as installonly_limit value (rh#1926261)
  + Fix check whether the subkey can be used for signing
  + Hardening: add signature check with rpmcliVerifySignatures
    (CVE-2021-3445, CVE-2021-3421, CVE-2021-20271, rh#1932079, rh#1932089, rh#1932090, boo#1183779)
  + Add a config option sslverifystatus, defaults to false (rh#1814383)
  + [context] Add API for distro-sync</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1618488000">- Add patch to fix crash when loading DVD repositories
  + Patch: 0001-Fix-a-crash-when-repoId-not-found-in-loaded-conf-gke.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1630065600">- Update to 0.63.1
  + ModuleProfile: add isDefault()
  + ModulePackage: add getDefaultProfile()
  + Add new dnf_context_module_install() C API
  + Fix a crash when [media] section in .treeinfo is missing for bootable media (rh#1946024)
  + Add hy_query_get_advisory_pkgs to C API (rh#1960561)
  + Add dnf_advisorypkg_get_advisory()
  + DNF does not fail on non UTF-8 file names in a package (rh#1893176)
  + Improve error-reporting for modular functions
- Drop patch included in this release
  + Patch: 0001-Fix-a-crash-when-repoId-not-found-in-loaded-conf-gke.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1635940800">- Update to 0.65.0
  + Add support for excluding packages to be installed as weak dependencies
  + Add support for autodetecting packages to be excluded from being installed as weak dependencies
  + Turn off strict validation of modulemd documents (rh#2004853, rh#2007166, rh#2007167)
  + Implement logic for demodularization of modular rpms (rh#1805260)
  + DnfContext: fix handling of default module profiles
  + ModuleMetadata: gracefully handle modules with no defaults
  + Remove failovermethod config option (rh#1961083)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1647259200">- Skip rich deps for autodetection of unmet dependencies (rh#2033130)
  + Patch: 0001-Skip-rich-deps-for-autodetection-of-unmet-dependencies.patch</changelog>
</package>
<package pkgid="d6585f941c322aa2bc1fa180f253307507057390b89fa4664c10eb1e719bc878" name="libdnf2" arch="s390x">
  <version epoch="0" ver="0.65.0" rel="bp154.2.1"/>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1594123200">- Update to version 0.48.0
  + Add prereq_ignoreinst &amp; regular_requires properties for pkg (rh#1543449)
  + Reset active modules when no module enabled or default (rh#1767351)
  + Add comment option to transaction (rh#1773679)
  + Failing to get module defauls is a recoverable error
  + Baseurl is not exclusive with mirrorlist/metalink (rh#1775184)
  + Add new function to reset all modules in C API (dnf_context_reset_all_modules)
  + [context] Fix to preserve additionalMetadata content (rh#1808677)
  + Fix filtering of DepSolvables with source rpms (rh#1812596)
  + Add setter for running kernel protection setting
  + Handle situation when an unprivileged user cannot create history database (rh#1634385)
  + Add query filter: latest by priority
  + Add DNF_NO_PROTECTED flag to allow empty list of protected packages
  + Remove 'dim' option from terminal colors to make them more readable (rh#1807774, rh#1814563)
  + [context] Error when main config file can't be opened (rh#1794864)
  + [context] Add function function dnf_context_is_set_config_file_path
  + swdb: Catch only SQLite3 exceptions and simplify the messages
  + MergedTransaction list multiple comments (rh#1773679)
  + Modify CMake to pull *.po files from weblate
  + Optimize DependencyContainer creation from an existing queue
  + fix a memory leak in dnf_package_get_requires()
  + Fix memory leaks on g_build_filename()
  + Fix memory leak in dnf_context_setup()
  + Add `hy_goal_favor` and `hy_goal_disfavor`
  + Define a cleanup function for `DnfPackageSet`
  + dnf-repo: fix dnf_repo_get_public_keys double-free
  + Do not cache RPMDB
  + Use single-quotes around string literals used in SQL statements
  + SQLite3: Do not close the database if it wasn't opened (rh#1761976)
  + Don't create a new history DB connection for in-memory DB
  + transaction/Swdb: Use a single logger variable in constructor
  + utils: Add a safe version of pathExists()
  + swdb: Handle the case when pathExists() fails on e.g. permission
  + Repo: prepend "file://" if a local path is used as baseurl
  + Move urlEncode() to utils
  + utils: Add 'exclude' argument to urlEncode()
  + Encode package URL for downloading through librepo (rh#1817130)
  + Replace std::runtime_error with libdnf::RepoError
  + Fixes and error handling improvements of the File class
  + [context] Use ConfigRepo for gpgkey and baseurl (rh#1807864)
  + [context] support "priority" option in .repo config file (rh#1797265)
- Drop obsolete patch: libdnf-0.45.0-handle-all-rpmdb-variants.patch
- Refresh patch for static linking libsolvext
  + Remove patch: libdnf-0.39.1-with-static-libsolvext.patch
  + Add patch: libdnf-0.48.0-with-static-libsolvext.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1598011200">- Backport fix from upstream to fix building against check &gt;= 0.15
  + Patch: 0001-tests-Fix-incorrect-usage-of-the-fail_unless-macro.patch
- Clean up spec comments about patches</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1603540800">- Update to version 0.54.2
  + history: Fix dnf history rollback when a package was removed (rh#1683134)
  + Add support for HY_GT, HY_LT in query nevra_strict
  + Fix parsing empty lines in config files
  + Accept '==' as an operator in reldeps (rh#1847946)
  + Add log file level main config option (rh#1802074)
  + Add protect_running_kernel configuration option (rh#1698145)
  + Context part of libdnf cannot assume zchunk is on (rh#1851841, rh#1779104)
  + Fix memory leak of resultingModuleIndex and handle g_object refs
  + Redirect librepo logs to libdnf logs with different source
  + Add hy_goal_lock
  + Enum/String conversions for Transaction Store/Replay
  + utils: Add a method to decode URLs
  + Unify hawkey.log line format with the rest of the logs
- Drop patches included in this release
  + Patch: 0001-tests-Fix-incorrect-usage-of-the-fail_unless-macro.patch
- Refresh patch for reposdir paths
  + Remove patch: libdnf-0.39.1-Switch-default-reposdir-to-etc-dnf-repos.d.patch
  + Add patch: libdnf-0.54.2-Switch-default-reposdir-to-etc-dnf-repos.d.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1606651200">- Update to version 0.55.0
  + Add vendor to dnf API (rh#1876561)
  + Add formatting function for solver error
  + Add error types in ModulePackageContainer
  + Implement module enable for context part
  + Improve string formatting for translation
  + Remove redundant printf and change logging info to notice (rh#1827424)
  + Add allow_vendor_change option (rh#1788371) (rh#1788371)
- Backport patches from upstream
  + Patch: 0001-Support-allow_vendor_change-setting-in-dnf-context-A.patch
  + Patch: 0001-context-dnf_keyring_add_public_keys-not-generate-err.patch
- Add patch to turn off changing vendors by default
  + Patch: libdnf-0.55.0-Switch-allow_vendor_change-off.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1607256000">- Update to version 0.55.2
  + Improve performance of query installed() and available()
  + Swdb: Add a method to get the current transaction
  + [modules] Add special handling for src artifacts (rh#1809314)
  + Better msgs if "basecachedir" or "proxy_password" isn't set (rh#1888946)
  + Add new options module_stream_switch
  + Support allow_vendor_change setting in dnf context API
- Drop patches incorporated into this release
  + Patch: 0001-Support-allow_vendor_change-setting-in-dnf-context-A.patch
  + Patch: 0001-context-dnf_keyring_add_public_keys-not-generate-err.patch
- Use cmake_build and cmake_install macros</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1609761600">- Add patch to support armv6hl and RISC-V architectures
  + Patch: 0001-context-Sync-missing-arches-from-DNF.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1612267200">- Update to version 0.58.0
  + Option: Add reset() method
  + Add OptionBinds::getOption() method
  + [context] Add dnf_repo_conf_from_gkeyfile() and dnf_repo_conf_reset()
  + [context] Add support for options: minrate, throttle, bandwidth, timeout
  + [context] Remove g_key_file_get_string() from dnf_repo_set_keyfile_data()
  + Allow loading ext metadata even if only cache (solv) is present
  + Add ASAN_OPTIONS for test_libdnf_main
  + [context,API] Functions for accessing main/global configuration options
  + [context,API] Function for adding setopt
  + Add getter for modular obsoletes from ModuleMetadata
  + Add ModulePackage.getStaticContext() and getRequires()
  + Add compatible layer for MdDocuments v2
  + Fix modular queries with the new solver
  + Improve formatting of error string for modules
  + Change mechanism of module conflicts
  + Fix load/update FailSafe
- Drop patch included in this release
  + Patch: 0001-context-Sync-missing-arches-from-DNF.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1613131200">- Backport fixes to add controls for installonlypkgs and protected_packages
  + Patch: 0001-context-Support-config-file-option-installonlypkgs.patch
  + Patch: 0002-context-Support-config-file-option-protected_package.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1613217600">- Add patch to move directory for dnf state data to /usr/lib/sysimage
  + Patch: libdnf-0.58.0-Use-usr-lib-sysimage-for-the-persistent-state-dir.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1613217601">- Backport another fix for adding controls to installonlypkgs
  + Patch: 0001-context-Fix-dnf_package_is_installonly-RhBug-1928056.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1614081600">- Backport support for using certificates for repository authorization
  + Patch: 0001-Fix-librepo-version-required-in-CMakeList.txt-1.12.0.patch
  + Patch: 0002-Fix-Fully-set-ssl-in-newHandle-function.patch
  + Patch: 0003-conf-Add-options-for-working-with-certificates-used-.patch
  + Patch: 0004-Apply-proxy-certificate-options.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1614254400">- Add repo-config-zypp subpackage to allow easily using Zypper
  repository configuration</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1614340800">- Backport more fixes for using certs for repo authorization
  + Patch: 0001-Deduplicate-code-create-Repo-Impl-stringToProxyAuthM.patch
  + Patch: 0002-context-Support-config-file-option-proxy_auth_method.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1614686400">- Update to 0.60.0
  + Fix repo.fresh() implementation
  + Fix: Fully set ssl in newHandle function
  + [conf] Add options for working with certificates used with proxy
  + Apply proxy certificate options
  + lock: Switch return-if-fail to assert to quiet gcc -fanalyzer
  + build-sys: Clean up message about Python bindings
  + Modify module NSVCA parsing - context definition (rh#1926771)
  + [context] Fix: dnf_package_is_installonly (rh#1928056)
  + Fix problematic language
  + Add getApplicablePackages to advisory and isApplicable to advisorymodule
  + Keep isAdvisoryApplicable to preserve API
  + Run ModulePackageContainerTest tests in tmpdir, merge interdependent
  + [context] Support config file option "proxy_auth_method", defaults "any"
  + Properly handle multiple collections in updateinfo.xml (rh#1804234)
  + Support main config file option "installonlypkgs"
  + Support main config file option "protected_packages"
- Drop patches now part of this release
  + Patch: 0001-context-Support-config-file-option-installonlypkgs.patch
  + Patch: 0002-context-Support-config-file-option-protected_package.patch
  + Patch: 0001-context-Fix-dnf_package_is_installonly-RhBug-1928056.patch
  + Patch: 0001-Fix-librepo-version-required-in-CMakeList.txt-1.12.0.patch
  + Patch: 0002-Fix-Fully-set-ssl-in-newHandle-function.patch
  + Patch: 0003-conf-Add-options-for-working-with-certificates-used-.patch
  + Patch: 0004-Apply-proxy-certificate-options.patch
  + Patch: 0001-Deduplicate-code-create-Repo-Impl-stringToProxyAuthM.patch
  + Patch: 0002-context-Support-config-file-option-proxy_auth_method.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1614686401">- Fix dependency for repo-config-zypp subpackage to work with SLE</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1618315200">- Update to 0.62.0
  + Change order of TransactionItemReason (rh#1921063)
  + Add two new comperators for security filters (rh#1918475)
  + Apply security filters for candidates with lower priority
  + Fix: Goal - translation of messages in global maps
  + Enhance description of modular solvables
  + Improve performance for module query
  + Change mechanism of modular errata applicability (rh#1804234)
  + dnf_transaction_commit(): Remove second call to rpmtsSetVSFlags
  + Fix a couple of memory leaks
  + Fix: Setting of librepo handle in newHandle function
  + Remove failsafe data when module is not enabled (rh#1847035)
  + Expose librepo's checksum functions via SWIG
  + Fix: Mising check of "hy_split_nevra()" return code
  + Do not allow 1 as installonly_limit value (rh#1926261)
  + Fix check whether the subkey can be used for signing
  + Hardening: add signature check with rpmcliVerifySignatures
    (CVE-2021-3445, CVE-2021-3421, CVE-2021-20271, rh#1932079, rh#1932089, rh#1932090, boo#1183779)
  + Add a config option sslverifystatus, defaults to false (rh#1814383)
  + [context] Add API for distro-sync</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1618488000">- Add patch to fix crash when loading DVD repositories
  + Patch: 0001-Fix-a-crash-when-repoId-not-found-in-loaded-conf-gke.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1630065600">- Update to 0.63.1
  + ModuleProfile: add isDefault()
  + ModulePackage: add getDefaultProfile()
  + Add new dnf_context_module_install() C API
  + Fix a crash when [media] section in .treeinfo is missing for bootable media (rh#1946024)
  + Add hy_query_get_advisory_pkgs to C API (rh#1960561)
  + Add dnf_advisorypkg_get_advisory()
  + DNF does not fail on non UTF-8 file names in a package (rh#1893176)
  + Improve error-reporting for modular functions
- Drop patch included in this release
  + Patch: 0001-Fix-a-crash-when-repoId-not-found-in-loaded-conf-gke.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1635940800">- Update to 0.65.0
  + Add support for excluding packages to be installed as weak dependencies
  + Add support for autodetecting packages to be excluded from being installed as weak dependencies
  + Turn off strict validation of modulemd documents (rh#2004853, rh#2007166, rh#2007167)
  + Implement logic for demodularization of modular rpms (rh#1805260)
  + DnfContext: fix handling of default module profiles
  + ModuleMetadata: gracefully handle modules with no defaults
  + Remove failovermethod config option (rh#1961083)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1647259200">- Skip rich deps for autodetection of unmet dependencies (rh#2033130)
  + Patch: 0001-Skip-rich-deps-for-autodetection-of-unmet-dependencies.patch</changelog>
</package>
<package pkgid="3d8505b40e1887b90afcd937da5eb753508a7027504d3a816af57444342f4a35" name="libdnf2" arch="x86_64">
  <version epoch="0" ver="0.65.0" rel="bp154.2.1"/>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1594123200">- Update to version 0.48.0
  + Add prereq_ignoreinst &amp; regular_requires properties for pkg (rh#1543449)
  + Reset active modules when no module enabled or default (rh#1767351)
  + Add comment option to transaction (rh#1773679)
  + Failing to get module defauls is a recoverable error
  + Baseurl is not exclusive with mirrorlist/metalink (rh#1775184)
  + Add new function to reset all modules in C API (dnf_context_reset_all_modules)
  + [context] Fix to preserve additionalMetadata content (rh#1808677)
  + Fix filtering of DepSolvables with source rpms (rh#1812596)
  + Add setter for running kernel protection setting
  + Handle situation when an unprivileged user cannot create history database (rh#1634385)
  + Add query filter: latest by priority
  + Add DNF_NO_PROTECTED flag to allow empty list of protected packages
  + Remove 'dim' option from terminal colors to make them more readable (rh#1807774, rh#1814563)
  + [context] Error when main config file can't be opened (rh#1794864)
  + [context] Add function function dnf_context_is_set_config_file_path
  + swdb: Catch only SQLite3 exceptions and simplify the messages
  + MergedTransaction list multiple comments (rh#1773679)
  + Modify CMake to pull *.po files from weblate
  + Optimize DependencyContainer creation from an existing queue
  + fix a memory leak in dnf_package_get_requires()
  + Fix memory leaks on g_build_filename()
  + Fix memory leak in dnf_context_setup()
  + Add `hy_goal_favor` and `hy_goal_disfavor`
  + Define a cleanup function for `DnfPackageSet`
  + dnf-repo: fix dnf_repo_get_public_keys double-free
  + Do not cache RPMDB
  + Use single-quotes around string literals used in SQL statements
  + SQLite3: Do not close the database if it wasn't opened (rh#1761976)
  + Don't create a new history DB connection for in-memory DB
  + transaction/Swdb: Use a single logger variable in constructor
  + utils: Add a safe version of pathExists()
  + swdb: Handle the case when pathExists() fails on e.g. permission
  + Repo: prepend "file://" if a local path is used as baseurl
  + Move urlEncode() to utils
  + utils: Add 'exclude' argument to urlEncode()
  + Encode package URL for downloading through librepo (rh#1817130)
  + Replace std::runtime_error with libdnf::RepoError
  + Fixes and error handling improvements of the File class
  + [context] Use ConfigRepo for gpgkey and baseurl (rh#1807864)
  + [context] support "priority" option in .repo config file (rh#1797265)
- Drop obsolete patch: libdnf-0.45.0-handle-all-rpmdb-variants.patch
- Refresh patch for static linking libsolvext
  + Remove patch: libdnf-0.39.1-with-static-libsolvext.patch
  + Add patch: libdnf-0.48.0-with-static-libsolvext.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1598011200">- Backport fix from upstream to fix building against check &gt;= 0.15
  + Patch: 0001-tests-Fix-incorrect-usage-of-the-fail_unless-macro.patch
- Clean up spec comments about patches</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1603540800">- Update to version 0.54.2
  + history: Fix dnf history rollback when a package was removed (rh#1683134)
  + Add support for HY_GT, HY_LT in query nevra_strict
  + Fix parsing empty lines in config files
  + Accept '==' as an operator in reldeps (rh#1847946)
  + Add log file level main config option (rh#1802074)
  + Add protect_running_kernel configuration option (rh#1698145)
  + Context part of libdnf cannot assume zchunk is on (rh#1851841, rh#1779104)
  + Fix memory leak of resultingModuleIndex and handle g_object refs
  + Redirect librepo logs to libdnf logs with different source
  + Add hy_goal_lock
  + Enum/String conversions for Transaction Store/Replay
  + utils: Add a method to decode URLs
  + Unify hawkey.log line format with the rest of the logs
- Drop patches included in this release
  + Patch: 0001-tests-Fix-incorrect-usage-of-the-fail_unless-macro.patch
- Refresh patch for reposdir paths
  + Remove patch: libdnf-0.39.1-Switch-default-reposdir-to-etc-dnf-repos.d.patch
  + Add patch: libdnf-0.54.2-Switch-default-reposdir-to-etc-dnf-repos.d.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1606651200">- Update to version 0.55.0
  + Add vendor to dnf API (rh#1876561)
  + Add formatting function for solver error
  + Add error types in ModulePackageContainer
  + Implement module enable for context part
  + Improve string formatting for translation
  + Remove redundant printf and change logging info to notice (rh#1827424)
  + Add allow_vendor_change option (rh#1788371) (rh#1788371)
- Backport patches from upstream
  + Patch: 0001-Support-allow_vendor_change-setting-in-dnf-context-A.patch
  + Patch: 0001-context-dnf_keyring_add_public_keys-not-generate-err.patch
- Add patch to turn off changing vendors by default
  + Patch: libdnf-0.55.0-Switch-allow_vendor_change-off.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1607256000">- Update to version 0.55.2
  + Improve performance of query installed() and available()
  + Swdb: Add a method to get the current transaction
  + [modules] Add special handling for src artifacts (rh#1809314)
  + Better msgs if "basecachedir" or "proxy_password" isn't set (rh#1888946)
  + Add new options module_stream_switch
  + Support allow_vendor_change setting in dnf context API
- Drop patches incorporated into this release
  + Patch: 0001-Support-allow_vendor_change-setting-in-dnf-context-A.patch
  + Patch: 0001-context-dnf_keyring_add_public_keys-not-generate-err.patch
- Use cmake_build and cmake_install macros</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1609761600">- Add patch to support armv6hl and RISC-V architectures
  + Patch: 0001-context-Sync-missing-arches-from-DNF.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1612267200">- Update to version 0.58.0
  + Option: Add reset() method
  + Add OptionBinds::getOption() method
  + [context] Add dnf_repo_conf_from_gkeyfile() and dnf_repo_conf_reset()
  + [context] Add support for options: minrate, throttle, bandwidth, timeout
  + [context] Remove g_key_file_get_string() from dnf_repo_set_keyfile_data()
  + Allow loading ext metadata even if only cache (solv) is present
  + Add ASAN_OPTIONS for test_libdnf_main
  + [context,API] Functions for accessing main/global configuration options
  + [context,API] Function for adding setopt
  + Add getter for modular obsoletes from ModuleMetadata
  + Add ModulePackage.getStaticContext() and getRequires()
  + Add compatible layer for MdDocuments v2
  + Fix modular queries with the new solver
  + Improve formatting of error string for modules
  + Change mechanism of module conflicts
  + Fix load/update FailSafe
- Drop patch included in this release
  + Patch: 0001-context-Sync-missing-arches-from-DNF.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1613131200">- Backport fixes to add controls for installonlypkgs and protected_packages
  + Patch: 0001-context-Support-config-file-option-installonlypkgs.patch
  + Patch: 0002-context-Support-config-file-option-protected_package.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1613217600">- Add patch to move directory for dnf state data to /usr/lib/sysimage
  + Patch: libdnf-0.58.0-Use-usr-lib-sysimage-for-the-persistent-state-dir.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1613217601">- Backport another fix for adding controls to installonlypkgs
  + Patch: 0001-context-Fix-dnf_package_is_installonly-RhBug-1928056.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1614081600">- Backport support for using certificates for repository authorization
  + Patch: 0001-Fix-librepo-version-required-in-CMakeList.txt-1.12.0.patch
  + Patch: 0002-Fix-Fully-set-ssl-in-newHandle-function.patch
  + Patch: 0003-conf-Add-options-for-working-with-certificates-used-.patch
  + Patch: 0004-Apply-proxy-certificate-options.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1614254400">- Add repo-config-zypp subpackage to allow easily using Zypper
  repository configuration</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1614340800">- Backport more fixes for using certs for repo authorization
  + Patch: 0001-Deduplicate-code-create-Repo-Impl-stringToProxyAuthM.patch
  + Patch: 0002-context-Support-config-file-option-proxy_auth_method.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1614686400">- Update to 0.60.0
  + Fix repo.fresh() implementation
  + Fix: Fully set ssl in newHandle function
  + [conf] Add options for working with certificates used with proxy
  + Apply proxy certificate options
  + lock: Switch return-if-fail to assert to quiet gcc -fanalyzer
  + build-sys: Clean up message about Python bindings
  + Modify module NSVCA parsing - context definition (rh#1926771)
  + [context] Fix: dnf_package_is_installonly (rh#1928056)
  + Fix problematic language
  + Add getApplicablePackages to advisory and isApplicable to advisorymodule
  + Keep isAdvisoryApplicable to preserve API
  + Run ModulePackageContainerTest tests in tmpdir, merge interdependent
  + [context] Support config file option "proxy_auth_method", defaults "any"
  + Properly handle multiple collections in updateinfo.xml (rh#1804234)
  + Support main config file option "installonlypkgs"
  + Support main config file option "protected_packages"
- Drop patches now part of this release
  + Patch: 0001-context-Support-config-file-option-installonlypkgs.patch
  + Patch: 0002-context-Support-config-file-option-protected_package.patch
  + Patch: 0001-context-Fix-dnf_package_is_installonly-RhBug-1928056.patch
  + Patch: 0001-Fix-librepo-version-required-in-CMakeList.txt-1.12.0.patch
  + Patch: 0002-Fix-Fully-set-ssl-in-newHandle-function.patch
  + Patch: 0003-conf-Add-options-for-working-with-certificates-used-.patch
  + Patch: 0004-Apply-proxy-certificate-options.patch
  + Patch: 0001-Deduplicate-code-create-Repo-Impl-stringToProxyAuthM.patch
  + Patch: 0002-context-Support-config-file-option-proxy_auth_method.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1614686401">- Fix dependency for repo-config-zypp subpackage to work with SLE</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1618315200">- Update to 0.62.0
  + Change order of TransactionItemReason (rh#1921063)
  + Add two new comperators for security filters (rh#1918475)
  + Apply security filters for candidates with lower priority
  + Fix: Goal - translation of messages in global maps
  + Enhance description of modular solvables
  + Improve performance for module query
  + Change mechanism of modular errata applicability (rh#1804234)
  + dnf_transaction_commit(): Remove second call to rpmtsSetVSFlags
  + Fix a couple of memory leaks
  + Fix: Setting of librepo handle in newHandle function
  + Remove failsafe data when module is not enabled (rh#1847035)
  + Expose librepo's checksum functions via SWIG
  + Fix: Mising check of "hy_split_nevra()" return code
  + Do not allow 1 as installonly_limit value (rh#1926261)
  + Fix check whether the subkey can be used for signing
  + Hardening: add signature check with rpmcliVerifySignatures
    (CVE-2021-3445, CVE-2021-3421, CVE-2021-20271, rh#1932079, rh#1932089, rh#1932090, boo#1183779)
  + Add a config option sslverifystatus, defaults to false (rh#1814383)
  + [context] Add API for distro-sync</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1618488000">- Add patch to fix crash when loading DVD repositories
  + Patch: 0001-Fix-a-crash-when-repoId-not-found-in-loaded-conf-gke.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1630065600">- Update to 0.63.1
  + ModuleProfile: add isDefault()
  + ModulePackage: add getDefaultProfile()
  + Add new dnf_context_module_install() C API
  + Fix a crash when [media] section in .treeinfo is missing for bootable media (rh#1946024)
  + Add hy_query_get_advisory_pkgs to C API (rh#1960561)
  + Add dnf_advisorypkg_get_advisory()
  + DNF does not fail on non UTF-8 file names in a package (rh#1893176)
  + Improve error-reporting for modular functions
- Drop patch included in this release
  + Patch: 0001-Fix-a-crash-when-repoId-not-found-in-loaded-conf-gke.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1635940800">- Update to 0.65.0
  + Add support for excluding packages to be installed as weak dependencies
  + Add support for autodetecting packages to be excluded from being installed as weak dependencies
  + Turn off strict validation of modulemd documents (rh#2004853, rh#2007166, rh#2007167)
  + Implement logic for demodularization of modular rpms (rh#1805260)
  + DnfContext: fix handling of default module profiles
  + ModuleMetadata: gracefully handle modules with no defaults
  + Remove failovermethod config option (rh#1961083)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1647259200">- Skip rich deps for autodetection of unmet dependencies (rh#2033130)
  + Patch: 0001-Skip-rich-deps-for-autodetection-of-unmet-dependencies.patch</changelog>
</package>
<package pkgid="6ee9430a00a0fb8c92f976d18e94baf364fa749481cf12d9969548917af92a5b" name="libdxfrw" arch="src">
  <version epoch="0" ver="1.0.1+git.20220109" rel="bp154.2.3.1"/>
  <changelog author="asterios.dramis@gmail.com" date="1392811200">- Initial rpm release (version 0.5.11).</changelog>
  <changelog author="jengelh@inai.de" date="1399636800">- Set RPM group to more usual values</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1407499200">- Update to version 0.5.12:
  * Detailed changelog not available.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1441800000">- Update to version 0.6.1:
  * Detailed changelog not available.
  From version 0.6.0:
  * First version with dwg read support.</changelog>
  <changelog author="p.drouand@gmail.com" date="1449576000">- Update to version 0.6.3
  * No changelog available for this version</changelog>
  <changelog author="jslaby@suse.com" date="1465300800">- add libdxfrw-LibreCad-2.1.0-changes.patch
- we need -std=c++11 for that patch to work</changelog>
  <changelog author="jslaby@suse.com" date="1558267200">- switch from sourceforge to more up-to-date github repo
- Update to version 0.6.3+git.20190501:
  * Add build status and update example link
  * Add Travis-CI script
  * [#10] Fix compilation on GCC
  * Fix bugs with .dwg import of TEXT and MTEXT entities
  * This was unnecessary
  * Link libdxfrw against libstdc++
  * Return an error when the file ends prematurely
  * Add version getter
  * Fix polyline 2d/3d write
  * Initialize return buffers in GetRawChar8 et al.
- add
  * 0001-cmake-use-GNUInstallDirs.patch
  * 0002-cmake-set-library-VERSIONs.patch
  * 0003-cmake-add-one-for-dwg2dxf.patch
  * 0004-cmake-generate-and-install-pkgconfig.patch
- remove
  * libdxfrw-LibreCad-2.1.0-changes.patch</changelog>
  <changelog author="jslaby@suse.cz" date="1620129600">- Update to version 1.0.1+git.20200429:
  * Fix includes install dir
  * Export target as libdxfrw::libdxfrw to keep consistency with Conan packages
  * Add archive destination in install
  * Install DXFRW::dxfrw target
  * Remove duplicate target properties
  * Remove version from pkg-config file
  * Let CMake handle C++11 compiler definition
  * Change minimal required CMake version to 3.0
  * cmake: add doc target
  * README.md: fix typo
  * cmake: generate and install pkgconfig
  * cmake: add one for dwg2dxf
  * cmake: set library VERSIONs
  * cmake: use GNUInstallDirs
- add patches (build fixes)
  * libdxfrw.pc.in-fix-expansion-and-include-path.patch
  * drw_header-fix-indentation-level.patch
- remove patches (they got upstreamed)
  * 0001-cmake-use-GNUInstallDirs.patch
  * 0002-cmake-set-library-VERSIONs.patch
  * 0003-cmake-add-one-for-dwg2dxf.patch
  * 0004-cmake-generate-and-install-pkgconfig.patch</changelog>
  <changelog author="jslaby@suse.cz" date="1640001600">- Update to version 1.0.1+git.20211110:
  * fixed heap use after free vulnerability CVE-2021-21900 (bsc#1192938)
  * minor improvements to dwg2dxf, formatting and message output on success
  * fixed heap buffer overflow vulnerability CVE-2021-21899 (bsc#1192937)
  * dwg2dxf - enable debug output of libdxfrw by command line switch
  * fixed out-of-bounds write vulnerability CVE-2021-21898 (bsc#1192936)
  * fixed please note section formatting
  * updated README.md for LibreCAD_3 branch and sf.net successor
  * fixed LibreCAD 2 issue #1371, read failed with binary DXF
  * Use ununordered_map instead of map
  * manual merge changes from LibreCAD2
  * and much more
- added
  * 0001-fix-Vertex-ID-printout.patch
- removed (they are upstream)
  * drw_header-fix-indentation-level.patch
  * libdxfrw.pc.in-fix-expansion-and-include-path.patch</changelog>
  <changelog author="jslaby@suse.cz" date="1642507200">- Update to version 1.0.1+git.20220109:
  * fixed ambiguous error for DRW_Dimension::parseDwg()
  * fixed enless while()-loop for pre 2004 versions
  * dwgReader::readDwgObjects() stop reading after 1st error
  * dwgReader::readDwgEntities() stop reading after 1st error
  * replace ENTRY_PARSE macro with template method
  * remove unused DRW_Class::parseCode() method
  * protect vector&lt;&gt;.reserve() calls
  * Added NULL check for hatch code 93
  * Fix bounds check in DRW_LWPolyline
  * fix, check maxClassNum for valid value
  * fixed wrong 2010+ check for 64-bit size
  * Set compiler warnings on by default, because makes harder for bugs to go undetected. 	modified:   CMakeLists.txt
  * Fixed fall through and other warnings (#54)
  * fix "Vertex ID" printout
- remove (it is upstream)
  * 0001-fix-Vertex-ID-printout.patch</changelog>
</package>
<package pkgid="15878458c5a6cf128c2bfce89812bb3a7d1f5de40db68c54952877e7b806397a" name="libdxfrw-devel" arch="aarch64">
  <version epoch="0" ver="1.0.1+git.20220109" rel="bp154.2.3.1"/>
  <changelog author="asterios.dramis@gmail.com" date="1392811200">- Initial rpm release (version 0.5.11).</changelog>
  <changelog author="jengelh@inai.de" date="1399636800">- Set RPM group to more usual values</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1407499200">- Update to version 0.5.12:
  * Detailed changelog not available.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1441800000">- Update to version 0.6.1:
  * Detailed changelog not available.
  From version 0.6.0:
  * First version with dwg read support.</changelog>
  <changelog author="p.drouand@gmail.com" date="1449576000">- Update to version 0.6.3
  * No changelog available for this version</changelog>
  <changelog author="jslaby@suse.com" date="1465300800">- add libdxfrw-LibreCad-2.1.0-changes.patch
- we need -std=c++11 for that patch to work</changelog>
  <changelog author="jslaby@suse.com" date="1558267200">- switch from sourceforge to more up-to-date github repo
- Update to version 0.6.3+git.20190501:
  * Add build status and update example link
  * Add Travis-CI script
  * [#10] Fix compilation on GCC
  * Fix bugs with .dwg import of TEXT and MTEXT entities
  * This was unnecessary
  * Link libdxfrw against libstdc++
  * Return an error when the file ends prematurely
  * Add version getter
  * Fix polyline 2d/3d write
  * Initialize return buffers in GetRawChar8 et al.
- add
  * 0001-cmake-use-GNUInstallDirs.patch
  * 0002-cmake-set-library-VERSIONs.patch
  * 0003-cmake-add-one-for-dwg2dxf.patch
  * 0004-cmake-generate-and-install-pkgconfig.patch
- remove
  * libdxfrw-LibreCad-2.1.0-changes.patch</changelog>
  <changelog author="jslaby@suse.cz" date="1620129600">- Update to version 1.0.1+git.20200429:
  * Fix includes install dir
  * Export target as libdxfrw::libdxfrw to keep consistency with Conan packages
  * Add archive destination in install
  * Install DXFRW::dxfrw target
  * Remove duplicate target properties
  * Remove version from pkg-config file
  * Let CMake handle C++11 compiler definition
  * Change minimal required CMake version to 3.0
  * cmake: add doc target
  * README.md: fix typo
  * cmake: generate and install pkgconfig
  * cmake: add one for dwg2dxf
  * cmake: set library VERSIONs
  * cmake: use GNUInstallDirs
- add patches (build fixes)
  * libdxfrw.pc.in-fix-expansion-and-include-path.patch
  * drw_header-fix-indentation-level.patch
- remove patches (they got upstreamed)
  * 0001-cmake-use-GNUInstallDirs.patch
  * 0002-cmake-set-library-VERSIONs.patch
  * 0003-cmake-add-one-for-dwg2dxf.patch
  * 0004-cmake-generate-and-install-pkgconfig.patch</changelog>
  <changelog author="jslaby@suse.cz" date="1640001600">- Update to version 1.0.1+git.20211110:
  * fixed heap use after free vulnerability CVE-2021-21900 (bsc#1192938)
  * minor improvements to dwg2dxf, formatting and message output on success
  * fixed heap buffer overflow vulnerability CVE-2021-21899 (bsc#1192937)
  * dwg2dxf - enable debug output of libdxfrw by command line switch
  * fixed out-of-bounds write vulnerability CVE-2021-21898 (bsc#1192936)
  * fixed please note section formatting
  * updated README.md for LibreCAD_3 branch and sf.net successor
  * fixed LibreCAD 2 issue #1371, read failed with binary DXF
  * Use ununordered_map instead of map
  * manual merge changes from LibreCAD2
  * and much more
- added
  * 0001-fix-Vertex-ID-printout.patch
- removed (they are upstream)
  * drw_header-fix-indentation-level.patch
  * libdxfrw.pc.in-fix-expansion-and-include-path.patch</changelog>
  <changelog author="jslaby@suse.cz" date="1642507200">- Update to version 1.0.1+git.20220109:
  * fixed ambiguous error for DRW_Dimension::parseDwg()
  * fixed enless while()-loop for pre 2004 versions
  * dwgReader::readDwgObjects() stop reading after 1st error
  * dwgReader::readDwgEntities() stop reading after 1st error
  * replace ENTRY_PARSE macro with template method
  * remove unused DRW_Class::parseCode() method
  * protect vector&lt;&gt;.reserve() calls
  * Added NULL check for hatch code 93
  * Fix bounds check in DRW_LWPolyline
  * fix, check maxClassNum for valid value
  * fixed wrong 2010+ check for 64-bit size
  * Set compiler warnings on by default, because makes harder for bugs to go undetected. 	modified:   CMakeLists.txt
  * Fixed fall through and other warnings (#54)
  * fix "Vertex ID" printout
- remove (it is upstream)
  * 0001-fix-Vertex-ID-printout.patch</changelog>
</package>
<package pkgid="c14a0ba21fc2af17f0f4664e678ea56c7b8d39e1ff5ee3896034a55d72e2e599" name="libdxfrw-devel" arch="i586">
  <version epoch="0" ver="1.0.1+git.20220109" rel="bp154.2.3.1"/>
  <changelog author="asterios.dramis@gmail.com" date="1392811200">- Initial rpm release (version 0.5.11).</changelog>
  <changelog author="jengelh@inai.de" date="1399636800">- Set RPM group to more usual values</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1407499200">- Update to version 0.5.12:
  * Detailed changelog not available.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1441800000">- Update to version 0.6.1:
  * Detailed changelog not available.
  From version 0.6.0:
  * First version with dwg read support.</changelog>
  <changelog author="p.drouand@gmail.com" date="1449576000">- Update to version 0.6.3
  * No changelog available for this version</changelog>
  <changelog author="jslaby@suse.com" date="1465300800">- add libdxfrw-LibreCad-2.1.0-changes.patch
- we need -std=c++11 for that patch to work</changelog>
  <changelog author="jslaby@suse.com" date="1558267200">- switch from sourceforge to more up-to-date github repo
- Update to version 0.6.3+git.20190501:
  * Add build status and update example link
  * Add Travis-CI script
  * [#10] Fix compilation on GCC
  * Fix bugs with .dwg import of TEXT and MTEXT entities
  * This was unnecessary
  * Link libdxfrw against libstdc++
  * Return an error when the file ends prematurely
  * Add version getter
  * Fix polyline 2d/3d write
  * Initialize return buffers in GetRawChar8 et al.
- add
  * 0001-cmake-use-GNUInstallDirs.patch
  * 0002-cmake-set-library-VERSIONs.patch
  * 0003-cmake-add-one-for-dwg2dxf.patch
  * 0004-cmake-generate-and-install-pkgconfig.patch
- remove
  * libdxfrw-LibreCad-2.1.0-changes.patch</changelog>
  <changelog author="jslaby@suse.cz" date="1620129600">- Update to version 1.0.1+git.20200429:
  * Fix includes install dir
  * Export target as libdxfrw::libdxfrw to keep consistency with Conan packages
  * Add archive destination in install
  * Install DXFRW::dxfrw target
  * Remove duplicate target properties
  * Remove version from pkg-config file
  * Let CMake handle C++11 compiler definition
  * Change minimal required CMake version to 3.0
  * cmake: add doc target
  * README.md: fix typo
  * cmake: generate and install pkgconfig
  * cmake: add one for dwg2dxf
  * cmake: set library VERSIONs
  * cmake: use GNUInstallDirs
- add patches (build fixes)
  * libdxfrw.pc.in-fix-expansion-and-include-path.patch
  * drw_header-fix-indentation-level.patch
- remove patches (they got upstreamed)
  * 0001-cmake-use-GNUInstallDirs.patch
  * 0002-cmake-set-library-VERSIONs.patch
  * 0003-cmake-add-one-for-dwg2dxf.patch
  * 0004-cmake-generate-and-install-pkgconfig.patch</changelog>
  <changelog author="jslaby@suse.cz" date="1640001600">- Update to version 1.0.1+git.20211110:
  * fixed heap use after free vulnerability CVE-2021-21900 (bsc#1192938)
  * minor improvements to dwg2dxf, formatting and message output on success
  * fixed heap buffer overflow vulnerability CVE-2021-21899 (bsc#1192937)
  * dwg2dxf - enable debug output of libdxfrw by command line switch
  * fixed out-of-bounds write vulnerability CVE-2021-21898 (bsc#1192936)
  * fixed please note section formatting
  * updated README.md for LibreCAD_3 branch and sf.net successor
  * fixed LibreCAD 2 issue #1371, read failed with binary DXF
  * Use ununordered_map instead of map
  * manual merge changes from LibreCAD2
  * and much more
- added
  * 0001-fix-Vertex-ID-printout.patch
- removed (they are upstream)
  * drw_header-fix-indentation-level.patch
  * libdxfrw.pc.in-fix-expansion-and-include-path.patch</changelog>
  <changelog author="jslaby@suse.cz" date="1642507200">- Update to version 1.0.1+git.20220109:
  * fixed ambiguous error for DRW_Dimension::parseDwg()
  * fixed enless while()-loop for pre 2004 versions
  * dwgReader::readDwgObjects() stop reading after 1st error
  * dwgReader::readDwgEntities() stop reading after 1st error
  * replace ENTRY_PARSE macro with template method
  * remove unused DRW_Class::parseCode() method
  * protect vector&lt;&gt;.reserve() calls
  * Added NULL check for hatch code 93
  * Fix bounds check in DRW_LWPolyline
  * fix, check maxClassNum for valid value
  * fixed wrong 2010+ check for 64-bit size
  * Set compiler warnings on by default, because makes harder for bugs to go undetected. 	modified:   CMakeLists.txt
  * Fixed fall through and other warnings (#54)
  * fix "Vertex ID" printout
- remove (it is upstream)
  * 0001-fix-Vertex-ID-printout.patch</changelog>
</package>
<package pkgid="8ee0dc5053de1a6d6e21c598750047864417e4c8ba22f3f9482e5e3ca9543ad8" name="libdxfrw-devel" arch="ppc64le">
  <version epoch="0" ver="1.0.1+git.20220109" rel="bp154.2.3.1"/>
  <changelog author="asterios.dramis@gmail.com" date="1392811200">- Initial rpm release (version 0.5.11).</changelog>
  <changelog author="jengelh@inai.de" date="1399636800">- Set RPM group to more usual values</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1407499200">- Update to version 0.5.12:
  * Detailed changelog not available.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1441800000">- Update to version 0.6.1:
  * Detailed changelog not available.
  From version 0.6.0:
  * First version with dwg read support.</changelog>
  <changelog author="p.drouand@gmail.com" date="1449576000">- Update to version 0.6.3
  * No changelog available for this version</changelog>
  <changelog author="jslaby@suse.com" date="1465300800">- add libdxfrw-LibreCad-2.1.0-changes.patch
- we need -std=c++11 for that patch to work</changelog>
  <changelog author="jslaby@suse.com" date="1558267200">- switch from sourceforge to more up-to-date github repo
- Update to version 0.6.3+git.20190501:
  * Add build status and update example link
  * Add Travis-CI script
  * [#10] Fix compilation on GCC
  * Fix bugs with .dwg import of TEXT and MTEXT entities
  * This was unnecessary
  * Link libdxfrw against libstdc++
  * Return an error when the file ends prematurely
  * Add version getter
  * Fix polyline 2d/3d write
  * Initialize return buffers in GetRawChar8 et al.
- add
  * 0001-cmake-use-GNUInstallDirs.patch
  * 0002-cmake-set-library-VERSIONs.patch
  * 0003-cmake-add-one-for-dwg2dxf.patch
  * 0004-cmake-generate-and-install-pkgconfig.patch
- remove
  * libdxfrw-LibreCad-2.1.0-changes.patch</changelog>
  <changelog author="jslaby@suse.cz" date="1620129600">- Update to version 1.0.1+git.20200429:
  * Fix includes install dir
  * Export target as libdxfrw::libdxfrw to keep consistency with Conan packages
  * Add archive destination in install
  * Install DXFRW::dxfrw target
  * Remove duplicate target properties
  * Remove version from pkg-config file
  * Let CMake handle C++11 compiler definition
  * Change minimal required CMake version to 3.0
  * cmake: add doc target
  * README.md: fix typo
  * cmake: generate and install pkgconfig
  * cmake: add one for dwg2dxf
  * cmake: set library VERSIONs
  * cmake: use GNUInstallDirs
- add patches (build fixes)
  * libdxfrw.pc.in-fix-expansion-and-include-path.patch
  * drw_header-fix-indentation-level.patch
- remove patches (they got upstreamed)
  * 0001-cmake-use-GNUInstallDirs.patch
  * 0002-cmake-set-library-VERSIONs.patch
  * 0003-cmake-add-one-for-dwg2dxf.patch
  * 0004-cmake-generate-and-install-pkgconfig.patch</changelog>
  <changelog author="jslaby@suse.cz" date="1640001600">- Update to version 1.0.1+git.20211110:
  * fixed heap use after free vulnerability CVE-2021-21900 (bsc#1192938)
  * minor improvements to dwg2dxf, formatting and message output on success
  * fixed heap buffer overflow vulnerability CVE-2021-21899 (bsc#1192937)
  * dwg2dxf - enable debug output of libdxfrw by command line switch
  * fixed out-of-bounds write vulnerability CVE-2021-21898 (bsc#1192936)
  * fixed please note section formatting
  * updated README.md for LibreCAD_3 branch and sf.net successor
  * fixed LibreCAD 2 issue #1371, read failed with binary DXF
  * Use ununordered_map instead of map
  * manual merge changes from LibreCAD2
  * and much more
- added
  * 0001-fix-Vertex-ID-printout.patch
- removed (they are upstream)
  * drw_header-fix-indentation-level.patch
  * libdxfrw.pc.in-fix-expansion-and-include-path.patch</changelog>
  <changelog author="jslaby@suse.cz" date="1642507200">- Update to version 1.0.1+git.20220109:
  * fixed ambiguous error for DRW_Dimension::parseDwg()
  * fixed enless while()-loop for pre 2004 versions
  * dwgReader::readDwgObjects() stop reading after 1st error
  * dwgReader::readDwgEntities() stop reading after 1st error
  * replace ENTRY_PARSE macro with template method
  * remove unused DRW_Class::parseCode() method
  * protect vector&lt;&gt;.reserve() calls
  * Added NULL check for hatch code 93
  * Fix bounds check in DRW_LWPolyline
  * fix, check maxClassNum for valid value
  * fixed wrong 2010+ check for 64-bit size
  * Set compiler warnings on by default, because makes harder for bugs to go undetected. 	modified:   CMakeLists.txt
  * Fixed fall through and other warnings (#54)
  * fix "Vertex ID" printout
- remove (it is upstream)
  * 0001-fix-Vertex-ID-printout.patch</changelog>
</package>
<package pkgid="54d94bc5042200f11b3dd3f6a28decaeedcbc968823f5ed1922eb864d3b71dae" name="libdxfrw-devel" arch="s390x">
  <version epoch="0" ver="1.0.1+git.20220109" rel="bp154.2.3.1"/>
  <changelog author="asterios.dramis@gmail.com" date="1392811200">- Initial rpm release (version 0.5.11).</changelog>
  <changelog author="jengelh@inai.de" date="1399636800">- Set RPM group to more usual values</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1407499200">- Update to version 0.5.12:
  * Detailed changelog not available.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1441800000">- Update to version 0.6.1:
  * Detailed changelog not available.
  From version 0.6.0:
  * First version with dwg read support.</changelog>
  <changelog author="p.drouand@gmail.com" date="1449576000">- Update to version 0.6.3
  * No changelog available for this version</changelog>
  <changelog author="jslaby@suse.com" date="1465300800">- add libdxfrw-LibreCad-2.1.0-changes.patch
- we need -std=c++11 for that patch to work</changelog>
  <changelog author="jslaby@suse.com" date="1558267200">- switch from sourceforge to more up-to-date github repo
- Update to version 0.6.3+git.20190501:
  * Add build status and update example link
  * Add Travis-CI script
  * [#10] Fix compilation on GCC
  * Fix bugs with .dwg import of TEXT and MTEXT entities
  * This was unnecessary
  * Link libdxfrw against libstdc++
  * Return an error when the file ends prematurely
  * Add version getter
  * Fix polyline 2d/3d write
  * Initialize return buffers in GetRawChar8 et al.
- add
  * 0001-cmake-use-GNUInstallDirs.patch
  * 0002-cmake-set-library-VERSIONs.patch
  * 0003-cmake-add-one-for-dwg2dxf.patch
  * 0004-cmake-generate-and-install-pkgconfig.patch
- remove
  * libdxfrw-LibreCad-2.1.0-changes.patch</changelog>
  <changelog author="jslaby@suse.cz" date="1620129600">- Update to version 1.0.1+git.20200429:
  * Fix includes install dir
  * Export target as libdxfrw::libdxfrw to keep consistency with Conan packages
  * Add archive destination in install
  * Install DXFRW::dxfrw target
  * Remove duplicate target properties
  * Remove version from pkg-config file
  * Let CMake handle C++11 compiler definition
  * Change minimal required CMake version to 3.0
  * cmake: add doc target
  * README.md: fix typo
  * cmake: generate and install pkgconfig
  * cmake: add one for dwg2dxf
  * cmake: set library VERSIONs
  * cmake: use GNUInstallDirs
- add patches (build fixes)
  * libdxfrw.pc.in-fix-expansion-and-include-path.patch
  * drw_header-fix-indentation-level.patch
- remove patches (they got upstreamed)
  * 0001-cmake-use-GNUInstallDirs.patch
  * 0002-cmake-set-library-VERSIONs.patch
  * 0003-cmake-add-one-for-dwg2dxf.patch
  * 0004-cmake-generate-and-install-pkgconfig.patch</changelog>
  <changelog author="jslaby@suse.cz" date="1640001600">- Update to version 1.0.1+git.20211110:
  * fixed heap use after free vulnerability CVE-2021-21900 (bsc#1192938)
  * minor improvements to dwg2dxf, formatting and message output on success
  * fixed heap buffer overflow vulnerability CVE-2021-21899 (bsc#1192937)
  * dwg2dxf - enable debug output of libdxfrw by command line switch
  * fixed out-of-bounds write vulnerability CVE-2021-21898 (bsc#1192936)
  * fixed please note section formatting
  * updated README.md for LibreCAD_3 branch and sf.net successor
  * fixed LibreCAD 2 issue #1371, read failed with binary DXF
  * Use ununordered_map instead of map
  * manual merge changes from LibreCAD2
  * and much more
- added
  * 0001-fix-Vertex-ID-printout.patch
- removed (they are upstream)
  * drw_header-fix-indentation-level.patch
  * libdxfrw.pc.in-fix-expansion-and-include-path.patch</changelog>
  <changelog author="jslaby@suse.cz" date="1642507200">- Update to version 1.0.1+git.20220109:
  * fixed ambiguous error for DRW_Dimension::parseDwg()
  * fixed enless while()-loop for pre 2004 versions
  * dwgReader::readDwgObjects() stop reading after 1st error
  * dwgReader::readDwgEntities() stop reading after 1st error
  * replace ENTRY_PARSE macro with template method
  * remove unused DRW_Class::parseCode() method
  * protect vector&lt;&gt;.reserve() calls
  * Added NULL check for hatch code 93
  * Fix bounds check in DRW_LWPolyline
  * fix, check maxClassNum for valid value
  * fixed wrong 2010+ check for 64-bit size
  * Set compiler warnings on by default, because makes harder for bugs to go undetected. 	modified:   CMakeLists.txt
  * Fixed fall through and other warnings (#54)
  * fix "Vertex ID" printout
- remove (it is upstream)
  * 0001-fix-Vertex-ID-printout.patch</changelog>
</package>
<package pkgid="1e01a9ea3914aef2772e1202d469fd48a596df23f4d2d5a3c6a9656817e9dacd" name="libdxfrw-devel" arch="x86_64">
  <version epoch="0" ver="1.0.1+git.20220109" rel="bp154.2.3.1"/>
  <changelog author="asterios.dramis@gmail.com" date="1392811200">- Initial rpm release (version 0.5.11).</changelog>
  <changelog author="jengelh@inai.de" date="1399636800">- Set RPM group to more usual values</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1407499200">- Update to version 0.5.12:
  * Detailed changelog not available.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1441800000">- Update to version 0.6.1:
  * Detailed changelog not available.
  From version 0.6.0:
  * First version with dwg read support.</changelog>
  <changelog author="p.drouand@gmail.com" date="1449576000">- Update to version 0.6.3
  * No changelog available for this version</changelog>
  <changelog author="jslaby@suse.com" date="1465300800">- add libdxfrw-LibreCad-2.1.0-changes.patch
- we need -std=c++11 for that patch to work</changelog>
  <changelog author="jslaby@suse.com" date="1558267200">- switch from sourceforge to more up-to-date github repo
- Update to version 0.6.3+git.20190501:
  * Add build status and update example link
  * Add Travis-CI script
  * [#10] Fix compilation on GCC
  * Fix bugs with .dwg import of TEXT and MTEXT entities
  * This was unnecessary
  * Link libdxfrw against libstdc++
  * Return an error when the file ends prematurely
  * Add version getter
  * Fix polyline 2d/3d write
  * Initialize return buffers in GetRawChar8 et al.
- add
  * 0001-cmake-use-GNUInstallDirs.patch
  * 0002-cmake-set-library-VERSIONs.patch
  * 0003-cmake-add-one-for-dwg2dxf.patch
  * 0004-cmake-generate-and-install-pkgconfig.patch
- remove
  * libdxfrw-LibreCad-2.1.0-changes.patch</changelog>
  <changelog author="jslaby@suse.cz" date="1620129600">- Update to version 1.0.1+git.20200429:
  * Fix includes install dir
  * Export target as libdxfrw::libdxfrw to keep consistency with Conan packages
  * Add archive destination in install
  * Install DXFRW::dxfrw target
  * Remove duplicate target properties
  * Remove version from pkg-config file
  * Let CMake handle C++11 compiler definition
  * Change minimal required CMake version to 3.0
  * cmake: add doc target
  * README.md: fix typo
  * cmake: generate and install pkgconfig
  * cmake: add one for dwg2dxf
  * cmake: set library VERSIONs
  * cmake: use GNUInstallDirs
- add patches (build fixes)
  * libdxfrw.pc.in-fix-expansion-and-include-path.patch
  * drw_header-fix-indentation-level.patch
- remove patches (they got upstreamed)
  * 0001-cmake-use-GNUInstallDirs.patch
  * 0002-cmake-set-library-VERSIONs.patch
  * 0003-cmake-add-one-for-dwg2dxf.patch
  * 0004-cmake-generate-and-install-pkgconfig.patch</changelog>
  <changelog author="jslaby@suse.cz" date="1640001600">- Update to version 1.0.1+git.20211110:
  * fixed heap use after free vulnerability CVE-2021-21900 (bsc#1192938)
  * minor improvements to dwg2dxf, formatting and message output on success
  * fixed heap buffer overflow vulnerability CVE-2021-21899 (bsc#1192937)
  * dwg2dxf - enable debug output of libdxfrw by command line switch
  * fixed out-of-bounds write vulnerability CVE-2021-21898 (bsc#1192936)
  * fixed please note section formatting
  * updated README.md for LibreCAD_3 branch and sf.net successor
  * fixed LibreCAD 2 issue #1371, read failed with binary DXF
  * Use ununordered_map instead of map
  * manual merge changes from LibreCAD2
  * and much more
- added
  * 0001-fix-Vertex-ID-printout.patch
- removed (they are upstream)
  * drw_header-fix-indentation-level.patch
  * libdxfrw.pc.in-fix-expansion-and-include-path.patch</changelog>
  <changelog author="jslaby@suse.cz" date="1642507200">- Update to version 1.0.1+git.20220109:
  * fixed ambiguous error for DRW_Dimension::parseDwg()
  * fixed enless while()-loop for pre 2004 versions
  * dwgReader::readDwgObjects() stop reading after 1st error
  * dwgReader::readDwgEntities() stop reading after 1st error
  * replace ENTRY_PARSE macro with template method
  * remove unused DRW_Class::parseCode() method
  * protect vector&lt;&gt;.reserve() calls
  * Added NULL check for hatch code 93
  * Fix bounds check in DRW_LWPolyline
  * fix, check maxClassNum for valid value
  * fixed wrong 2010+ check for 64-bit size
  * Set compiler warnings on by default, because makes harder for bugs to go undetected. 	modified:   CMakeLists.txt
  * Fixed fall through and other warnings (#54)
  * fix "Vertex ID" printout
- remove (it is upstream)
  * 0001-fix-Vertex-ID-printout.patch</changelog>
</package>
<package pkgid="bbc77659439069866fc93c10be7af210ea1340e86b993c6f2cb05d8f8cac5784" name="libdxfrw-tools" arch="aarch64">
  <version epoch="0" ver="1.0.1+git.20220109" rel="bp154.2.3.1"/>
  <changelog author="asterios.dramis@gmail.com" date="1392811200">- Initial rpm release (version 0.5.11).</changelog>
  <changelog author="jengelh@inai.de" date="1399636800">- Set RPM group to more usual values</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1407499200">- Update to version 0.5.12:
  * Detailed changelog not available.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1441800000">- Update to version 0.6.1:
  * Detailed changelog not available.
  From version 0.6.0:
  * First version with dwg read support.</changelog>
  <changelog author="p.drouand@gmail.com" date="1449576000">- Update to version 0.6.3
  * No changelog available for this version</changelog>
  <changelog author="jslaby@suse.com" date="1465300800">- add libdxfrw-LibreCad-2.1.0-changes.patch
- we need -std=c++11 for that patch to work</changelog>
  <changelog author="jslaby@suse.com" date="1558267200">- switch from sourceforge to more up-to-date github repo
- Update to version 0.6.3+git.20190501:
  * Add build status and update example link
  * Add Travis-CI script
  * [#10] Fix compilation on GCC
  * Fix bugs with .dwg import of TEXT and MTEXT entities
  * This was unnecessary
  * Link libdxfrw against libstdc++
  * Return an error when the file ends prematurely
  * Add version getter
  * Fix polyline 2d/3d write
  * Initialize return buffers in GetRawChar8 et al.
- add
  * 0001-cmake-use-GNUInstallDirs.patch
  * 0002-cmake-set-library-VERSIONs.patch
  * 0003-cmake-add-one-for-dwg2dxf.patch
  * 0004-cmake-generate-and-install-pkgconfig.patch
- remove
  * libdxfrw-LibreCad-2.1.0-changes.patch</changelog>
  <changelog author="jslaby@suse.cz" date="1620129600">- Update to version 1.0.1+git.20200429:
  * Fix includes install dir
  * Export target as libdxfrw::libdxfrw to keep consistency with Conan packages
  * Add archive destination in install
  * Install DXFRW::dxfrw target
  * Remove duplicate target properties
  * Remove version from pkg-config file
  * Let CMake handle C++11 compiler definition
  * Change minimal required CMake version to 3.0
  * cmake: add doc target
  * README.md: fix typo
  * cmake: generate and install pkgconfig
  * cmake: add one for dwg2dxf
  * cmake: set library VERSIONs
  * cmake: use GNUInstallDirs
- add patches (build fixes)
  * libdxfrw.pc.in-fix-expansion-and-include-path.patch
  * drw_header-fix-indentation-level.patch
- remove patches (they got upstreamed)
  * 0001-cmake-use-GNUInstallDirs.patch
  * 0002-cmake-set-library-VERSIONs.patch
  * 0003-cmake-add-one-for-dwg2dxf.patch
  * 0004-cmake-generate-and-install-pkgconfig.patch</changelog>
  <changelog author="jslaby@suse.cz" date="1640001600">- Update to version 1.0.1+git.20211110:
  * fixed heap use after free vulnerability CVE-2021-21900 (bsc#1192938)
  * minor improvements to dwg2dxf, formatting and message output on success
  * fixed heap buffer overflow vulnerability CVE-2021-21899 (bsc#1192937)
  * dwg2dxf - enable debug output of libdxfrw by command line switch
  * fixed out-of-bounds write vulnerability CVE-2021-21898 (bsc#1192936)
  * fixed please note section formatting
  * updated README.md for LibreCAD_3 branch and sf.net successor
  * fixed LibreCAD 2 issue #1371, read failed with binary DXF
  * Use ununordered_map instead of map
  * manual merge changes from LibreCAD2
  * and much more
- added
  * 0001-fix-Vertex-ID-printout.patch
- removed (they are upstream)
  * drw_header-fix-indentation-level.patch
  * libdxfrw.pc.in-fix-expansion-and-include-path.patch</changelog>
  <changelog author="jslaby@suse.cz" date="1642507200">- Update to version 1.0.1+git.20220109:
  * fixed ambiguous error for DRW_Dimension::parseDwg()
  * fixed enless while()-loop for pre 2004 versions
  * dwgReader::readDwgObjects() stop reading after 1st error
  * dwgReader::readDwgEntities() stop reading after 1st error
  * replace ENTRY_PARSE macro with template method
  * remove unused DRW_Class::parseCode() method
  * protect vector&lt;&gt;.reserve() calls
  * Added NULL check for hatch code 93
  * Fix bounds check in DRW_LWPolyline
  * fix, check maxClassNum for valid value
  * fixed wrong 2010+ check for 64-bit size
  * Set compiler warnings on by default, because makes harder for bugs to go undetected. 	modified:   CMakeLists.txt
  * Fixed fall through and other warnings (#54)
  * fix "Vertex ID" printout
- remove (it is upstream)
  * 0001-fix-Vertex-ID-printout.patch</changelog>
</package>
<package pkgid="6b22cd19969b8c86298a33e1fcddecde41737f9432a272adce6e58fd19993829" name="libdxfrw-tools" arch="i586">
  <version epoch="0" ver="1.0.1+git.20220109" rel="bp154.2.3.1"/>
  <changelog author="asterios.dramis@gmail.com" date="1392811200">- Initial rpm release (version 0.5.11).</changelog>
  <changelog author="jengelh@inai.de" date="1399636800">- Set RPM group to more usual values</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1407499200">- Update to version 0.5.12:
  * Detailed changelog not available.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1441800000">- Update to version 0.6.1:
  * Detailed changelog not available.
  From version 0.6.0:
  * First version with dwg read support.</changelog>
  <changelog author="p.drouand@gmail.com" date="1449576000">- Update to version 0.6.3
  * No changelog available for this version</changelog>
  <changelog author="jslaby@suse.com" date="1465300800">- add libdxfrw-LibreCad-2.1.0-changes.patch
- we need -std=c++11 for that patch to work</changelog>
  <changelog author="jslaby@suse.com" date="1558267200">- switch from sourceforge to more up-to-date github repo
- Update to version 0.6.3+git.20190501:
  * Add build status and update example link
  * Add Travis-CI script
  * [#10] Fix compilation on GCC
  * Fix bugs with .dwg import of TEXT and MTEXT entities
  * This was unnecessary
  * Link libdxfrw against libstdc++
  * Return an error when the file ends prematurely
  * Add version getter
  * Fix polyline 2d/3d write
  * Initialize return buffers in GetRawChar8 et al.
- add
  * 0001-cmake-use-GNUInstallDirs.patch
  * 0002-cmake-set-library-VERSIONs.patch
  * 0003-cmake-add-one-for-dwg2dxf.patch
  * 0004-cmake-generate-and-install-pkgconfig.patch
- remove
  * libdxfrw-LibreCad-2.1.0-changes.patch</changelog>
  <changelog author="jslaby@suse.cz" date="1620129600">- Update to version 1.0.1+git.20200429:
  * Fix includes install dir
  * Export target as libdxfrw::libdxfrw to keep consistency with Conan packages
  * Add archive destination in install
  * Install DXFRW::dxfrw target
  * Remove duplicate target properties
  * Remove version from pkg-config file
  * Let CMake handle C++11 compiler definition
  * Change minimal required CMake version to 3.0
  * cmake: add doc target
  * README.md: fix typo
  * cmake: generate and install pkgconfig
  * cmake: add one for dwg2dxf
  * cmake: set library VERSIONs
  * cmake: use GNUInstallDirs
- add patches (build fixes)
  * libdxfrw.pc.in-fix-expansion-and-include-path.patch
  * drw_header-fix-indentation-level.patch
- remove patches (they got upstreamed)
  * 0001-cmake-use-GNUInstallDirs.patch
  * 0002-cmake-set-library-VERSIONs.patch
  * 0003-cmake-add-one-for-dwg2dxf.patch
  * 0004-cmake-generate-and-install-pkgconfig.patch</changelog>
  <changelog author="jslaby@suse.cz" date="1640001600">- Update to version 1.0.1+git.20211110:
  * fixed heap use after free vulnerability CVE-2021-21900 (bsc#1192938)
  * minor improvements to dwg2dxf, formatting and message output on success
  * fixed heap buffer overflow vulnerability CVE-2021-21899 (bsc#1192937)
  * dwg2dxf - enable debug output of libdxfrw by command line switch
  * fixed out-of-bounds write vulnerability CVE-2021-21898 (bsc#1192936)
  * fixed please note section formatting
  * updated README.md for LibreCAD_3 branch and sf.net successor
  * fixed LibreCAD 2 issue #1371, read failed with binary DXF
  * Use ununordered_map instead of map
  * manual merge changes from LibreCAD2
  * and much more
- added
  * 0001-fix-Vertex-ID-printout.patch
- removed (they are upstream)
  * drw_header-fix-indentation-level.patch
  * libdxfrw.pc.in-fix-expansion-and-include-path.patch</changelog>
  <changelog author="jslaby@suse.cz" date="1642507200">- Update to version 1.0.1+git.20220109:
  * fixed ambiguous error for DRW_Dimension::parseDwg()
  * fixed enless while()-loop for pre 2004 versions
  * dwgReader::readDwgObjects() stop reading after 1st error
  * dwgReader::readDwgEntities() stop reading after 1st error
  * replace ENTRY_PARSE macro with template method
  * remove unused DRW_Class::parseCode() method
  * protect vector&lt;&gt;.reserve() calls
  * Added NULL check for hatch code 93
  * Fix bounds check in DRW_LWPolyline
  * fix, check maxClassNum for valid value
  * fixed wrong 2010+ check for 64-bit size
  * Set compiler warnings on by default, because makes harder for bugs to go undetected. 	modified:   CMakeLists.txt
  * Fixed fall through and other warnings (#54)
  * fix "Vertex ID" printout
- remove (it is upstream)
  * 0001-fix-Vertex-ID-printout.patch</changelog>
</package>
<package pkgid="4bd1390c34870544343940a43294feab7e7db82879688c56dc00250784aa46f2" name="libdxfrw-tools" arch="ppc64le">
  <version epoch="0" ver="1.0.1+git.20220109" rel="bp154.2.3.1"/>
  <changelog author="asterios.dramis@gmail.com" date="1392811200">- Initial rpm release (version 0.5.11).</changelog>
  <changelog author="jengelh@inai.de" date="1399636800">- Set RPM group to more usual values</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1407499200">- Update to version 0.5.12:
  * Detailed changelog not available.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1441800000">- Update to version 0.6.1:
  * Detailed changelog not available.
  From version 0.6.0:
  * First version with dwg read support.</changelog>
  <changelog author="p.drouand@gmail.com" date="1449576000">- Update to version 0.6.3
  * No changelog available for this version</changelog>
  <changelog author="jslaby@suse.com" date="1465300800">- add libdxfrw-LibreCad-2.1.0-changes.patch
- we need -std=c++11 for that patch to work</changelog>
  <changelog author="jslaby@suse.com" date="1558267200">- switch from sourceforge to more up-to-date github repo
- Update to version 0.6.3+git.20190501:
  * Add build status and update example link
  * Add Travis-CI script
  * [#10] Fix compilation on GCC
  * Fix bugs with .dwg import of TEXT and MTEXT entities
  * This was unnecessary
  * Link libdxfrw against libstdc++
  * Return an error when the file ends prematurely
  * Add version getter
  * Fix polyline 2d/3d write
  * Initialize return buffers in GetRawChar8 et al.
- add
  * 0001-cmake-use-GNUInstallDirs.patch
  * 0002-cmake-set-library-VERSIONs.patch
  * 0003-cmake-add-one-for-dwg2dxf.patch
  * 0004-cmake-generate-and-install-pkgconfig.patch
- remove
  * libdxfrw-LibreCad-2.1.0-changes.patch</changelog>
  <changelog author="jslaby@suse.cz" date="1620129600">- Update to version 1.0.1+git.20200429:
  * Fix includes install dir
  * Export target as libdxfrw::libdxfrw to keep consistency with Conan packages
  * Add archive destination in install
  * Install DXFRW::dxfrw target
  * Remove duplicate target properties
  * Remove version from pkg-config file
  * Let CMake handle C++11 compiler definition
  * Change minimal required CMake version to 3.0
  * cmake: add doc target
  * README.md: fix typo
  * cmake: generate and install pkgconfig
  * cmake: add one for dwg2dxf
  * cmake: set library VERSIONs
  * cmake: use GNUInstallDirs
- add patches (build fixes)
  * libdxfrw.pc.in-fix-expansion-and-include-path.patch
  * drw_header-fix-indentation-level.patch
- remove patches (they got upstreamed)
  * 0001-cmake-use-GNUInstallDirs.patch
  * 0002-cmake-set-library-VERSIONs.patch
  * 0003-cmake-add-one-for-dwg2dxf.patch
  * 0004-cmake-generate-and-install-pkgconfig.patch</changelog>
  <changelog author="jslaby@suse.cz" date="1640001600">- Update to version 1.0.1+git.20211110:
  * fixed heap use after free vulnerability CVE-2021-21900 (bsc#1192938)
  * minor improvements to dwg2dxf, formatting and message output on success
  * fixed heap buffer overflow vulnerability CVE-2021-21899 (bsc#1192937)
  * dwg2dxf - enable debug output of libdxfrw by command line switch
  * fixed out-of-bounds write vulnerability CVE-2021-21898 (bsc#1192936)
  * fixed please note section formatting
  * updated README.md for LibreCAD_3 branch and sf.net successor
  * fixed LibreCAD 2 issue #1371, read failed with binary DXF
  * Use ununordered_map instead of map
  * manual merge changes from LibreCAD2
  * and much more
- added
  * 0001-fix-Vertex-ID-printout.patch
- removed (they are upstream)
  * drw_header-fix-indentation-level.patch
  * libdxfrw.pc.in-fix-expansion-and-include-path.patch</changelog>
  <changelog author="jslaby@suse.cz" date="1642507200">- Update to version 1.0.1+git.20220109:
  * fixed ambiguous error for DRW_Dimension::parseDwg()
  * fixed enless while()-loop for pre 2004 versions
  * dwgReader::readDwgObjects() stop reading after 1st error
  * dwgReader::readDwgEntities() stop reading after 1st error
  * replace ENTRY_PARSE macro with template method
  * remove unused DRW_Class::parseCode() method
  * protect vector&lt;&gt;.reserve() calls
  * Added NULL check for hatch code 93
  * Fix bounds check in DRW_LWPolyline
  * fix, check maxClassNum for valid value
  * fixed wrong 2010+ check for 64-bit size
  * Set compiler warnings on by default, because makes harder for bugs to go undetected. 	modified:   CMakeLists.txt
  * Fixed fall through and other warnings (#54)
  * fix "Vertex ID" printout
- remove (it is upstream)
  * 0001-fix-Vertex-ID-printout.patch</changelog>
</package>
<package pkgid="f84790755aefacd6781100429381491662dc03ffbb993eb7ad45f4414b977dc9" name="libdxfrw-tools" arch="s390x">
  <version epoch="0" ver="1.0.1+git.20220109" rel="bp154.2.3.1"/>
  <changelog author="asterios.dramis@gmail.com" date="1392811200">- Initial rpm release (version 0.5.11).</changelog>
  <changelog author="jengelh@inai.de" date="1399636800">- Set RPM group to more usual values</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1407499200">- Update to version 0.5.12:
  * Detailed changelog not available.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1441800000">- Update to version 0.6.1:
  * Detailed changelog not available.
  From version 0.6.0:
  * First version with dwg read support.</changelog>
  <changelog author="p.drouand@gmail.com" date="1449576000">- Update to version 0.6.3
  * No changelog available for this version</changelog>
  <changelog author="jslaby@suse.com" date="1465300800">- add libdxfrw-LibreCad-2.1.0-changes.patch
- we need -std=c++11 for that patch to work</changelog>
  <changelog author="jslaby@suse.com" date="1558267200">- switch from sourceforge to more up-to-date github repo
- Update to version 0.6.3+git.20190501:
  * Add build status and update example link
  * Add Travis-CI script
  * [#10] Fix compilation on GCC
  * Fix bugs with .dwg import of TEXT and MTEXT entities
  * This was unnecessary
  * Link libdxfrw against libstdc++
  * Return an error when the file ends prematurely
  * Add version getter
  * Fix polyline 2d/3d write
  * Initialize return buffers in GetRawChar8 et al.
- add
  * 0001-cmake-use-GNUInstallDirs.patch
  * 0002-cmake-set-library-VERSIONs.patch
  * 0003-cmake-add-one-for-dwg2dxf.patch
  * 0004-cmake-generate-and-install-pkgconfig.patch
- remove
  * libdxfrw-LibreCad-2.1.0-changes.patch</changelog>
  <changelog author="jslaby@suse.cz" date="1620129600">- Update to version 1.0.1+git.20200429:
  * Fix includes install dir
  * Export target as libdxfrw::libdxfrw to keep consistency with Conan packages
  * Add archive destination in install
  * Install DXFRW::dxfrw target
  * Remove duplicate target properties
  * Remove version from pkg-config file
  * Let CMake handle C++11 compiler definition
  * Change minimal required CMake version to 3.0
  * cmake: add doc target
  * README.md: fix typo
  * cmake: generate and install pkgconfig
  * cmake: add one for dwg2dxf
  * cmake: set library VERSIONs
  * cmake: use GNUInstallDirs
- add patches (build fixes)
  * libdxfrw.pc.in-fix-expansion-and-include-path.patch
  * drw_header-fix-indentation-level.patch
- remove patches (they got upstreamed)
  * 0001-cmake-use-GNUInstallDirs.patch
  * 0002-cmake-set-library-VERSIONs.patch
  * 0003-cmake-add-one-for-dwg2dxf.patch
  * 0004-cmake-generate-and-install-pkgconfig.patch</changelog>
  <changelog author="jslaby@suse.cz" date="1640001600">- Update to version 1.0.1+git.20211110:
  * fixed heap use after free vulnerability CVE-2021-21900 (bsc#1192938)
  * minor improvements to dwg2dxf, formatting and message output on success
  * fixed heap buffer overflow vulnerability CVE-2021-21899 (bsc#1192937)
  * dwg2dxf - enable debug output of libdxfrw by command line switch
  * fixed out-of-bounds write vulnerability CVE-2021-21898 (bsc#1192936)
  * fixed please note section formatting
  * updated README.md for LibreCAD_3 branch and sf.net successor
  * fixed LibreCAD 2 issue #1371, read failed with binary DXF
  * Use ununordered_map instead of map
  * manual merge changes from LibreCAD2
  * and much more
- added
  * 0001-fix-Vertex-ID-printout.patch
- removed (they are upstream)
  * drw_header-fix-indentation-level.patch
  * libdxfrw.pc.in-fix-expansion-and-include-path.patch</changelog>
  <changelog author="jslaby@suse.cz" date="1642507200">- Update to version 1.0.1+git.20220109:
  * fixed ambiguous error for DRW_Dimension::parseDwg()
  * fixed enless while()-loop for pre 2004 versions
  * dwgReader::readDwgObjects() stop reading after 1st error
  * dwgReader::readDwgEntities() stop reading after 1st error
  * replace ENTRY_PARSE macro with template method
  * remove unused DRW_Class::parseCode() method
  * protect vector&lt;&gt;.reserve() calls
  * Added NULL check for hatch code 93
  * Fix bounds check in DRW_LWPolyline
  * fix, check maxClassNum for valid value
  * fixed wrong 2010+ check for 64-bit size
  * Set compiler warnings on by default, because makes harder for bugs to go undetected. 	modified:   CMakeLists.txt
  * Fixed fall through and other warnings (#54)
  * fix "Vertex ID" printout
- remove (it is upstream)
  * 0001-fix-Vertex-ID-printout.patch</changelog>
</package>
<package pkgid="ba4de889a81f7dbccf691c511fc47f001006fa5897963812ffeb92416942383e" name="libdxfrw-tools" arch="x86_64">
  <version epoch="0" ver="1.0.1+git.20220109" rel="bp154.2.3.1"/>
  <changelog author="asterios.dramis@gmail.com" date="1392811200">- Initial rpm release (version 0.5.11).</changelog>
  <changelog author="jengelh@inai.de" date="1399636800">- Set RPM group to more usual values</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1407499200">- Update to version 0.5.12:
  * Detailed changelog not available.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1441800000">- Update to version 0.6.1:
  * Detailed changelog not available.
  From version 0.6.0:
  * First version with dwg read support.</changelog>
  <changelog author="p.drouand@gmail.com" date="1449576000">- Update to version 0.6.3
  * No changelog available for this version</changelog>
  <changelog author="jslaby@suse.com" date="1465300800">- add libdxfrw-LibreCad-2.1.0-changes.patch
- we need -std=c++11 for that patch to work</changelog>
  <changelog author="jslaby@suse.com" date="1558267200">- switch from sourceforge to more up-to-date github repo
- Update to version 0.6.3+git.20190501:
  * Add build status and update example link
  * Add Travis-CI script
  * [#10] Fix compilation on GCC
  * Fix bugs with .dwg import of TEXT and MTEXT entities
  * This was unnecessary
  * Link libdxfrw against libstdc++
  * Return an error when the file ends prematurely
  * Add version getter
  * Fix polyline 2d/3d write
  * Initialize return buffers in GetRawChar8 et al.
- add
  * 0001-cmake-use-GNUInstallDirs.patch
  * 0002-cmake-set-library-VERSIONs.patch
  * 0003-cmake-add-one-for-dwg2dxf.patch
  * 0004-cmake-generate-and-install-pkgconfig.patch
- remove
  * libdxfrw-LibreCad-2.1.0-changes.patch</changelog>
  <changelog author="jslaby@suse.cz" date="1620129600">- Update to version 1.0.1+git.20200429:
  * Fix includes install dir
  * Export target as libdxfrw::libdxfrw to keep consistency with Conan packages
  * Add archive destination in install
  * Install DXFRW::dxfrw target
  * Remove duplicate target properties
  * Remove version from pkg-config file
  * Let CMake handle C++11 compiler definition
  * Change minimal required CMake version to 3.0
  * cmake: add doc target
  * README.md: fix typo
  * cmake: generate and install pkgconfig
  * cmake: add one for dwg2dxf
  * cmake: set library VERSIONs
  * cmake: use GNUInstallDirs
- add patches (build fixes)
  * libdxfrw.pc.in-fix-expansion-and-include-path.patch
  * drw_header-fix-indentation-level.patch
- remove patches (they got upstreamed)
  * 0001-cmake-use-GNUInstallDirs.patch
  * 0002-cmake-set-library-VERSIONs.patch
  * 0003-cmake-add-one-for-dwg2dxf.patch
  * 0004-cmake-generate-and-install-pkgconfig.patch</changelog>
  <changelog author="jslaby@suse.cz" date="1640001600">- Update to version 1.0.1+git.20211110:
  * fixed heap use after free vulnerability CVE-2021-21900 (bsc#1192938)
  * minor improvements to dwg2dxf, formatting and message output on success
  * fixed heap buffer overflow vulnerability CVE-2021-21899 (bsc#1192937)
  * dwg2dxf - enable debug output of libdxfrw by command line switch
  * fixed out-of-bounds write vulnerability CVE-2021-21898 (bsc#1192936)
  * fixed please note section formatting
  * updated README.md for LibreCAD_3 branch and sf.net successor
  * fixed LibreCAD 2 issue #1371, read failed with binary DXF
  * Use ununordered_map instead of map
  * manual merge changes from LibreCAD2
  * and much more
- added
  * 0001-fix-Vertex-ID-printout.patch
- removed (they are upstream)
  * drw_header-fix-indentation-level.patch
  * libdxfrw.pc.in-fix-expansion-and-include-path.patch</changelog>
  <changelog author="jslaby@suse.cz" date="1642507200">- Update to version 1.0.1+git.20220109:
  * fixed ambiguous error for DRW_Dimension::parseDwg()
  * fixed enless while()-loop for pre 2004 versions
  * dwgReader::readDwgObjects() stop reading after 1st error
  * dwgReader::readDwgEntities() stop reading after 1st error
  * replace ENTRY_PARSE macro with template method
  * remove unused DRW_Class::parseCode() method
  * protect vector&lt;&gt;.reserve() calls
  * Added NULL check for hatch code 93
  * Fix bounds check in DRW_LWPolyline
  * fix, check maxClassNum for valid value
  * fixed wrong 2010+ check for 64-bit size
  * Set compiler warnings on by default, because makes harder for bugs to go undetected. 	modified:   CMakeLists.txt
  * Fixed fall through and other warnings (#54)
  * fix "Vertex ID" printout
- remove (it is upstream)
  * 0001-fix-Vertex-ID-printout.patch</changelog>
</package>
<package pkgid="4f59222f2ae9744b4777a8701f4e57ffcb35ce70c5d5f5dc076b9973de0d59a7" name="libdxfrw1" arch="aarch64">
  <version epoch="0" ver="1.0.1+git.20220109" rel="bp154.2.3.1"/>
  <changelog author="asterios.dramis@gmail.com" date="1392811200">- Initial rpm release (version 0.5.11).</changelog>
  <changelog author="jengelh@inai.de" date="1399636800">- Set RPM group to more usual values</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1407499200">- Update to version 0.5.12:
  * Detailed changelog not available.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1441800000">- Update to version 0.6.1:
  * Detailed changelog not available.
  From version 0.6.0:
  * First version with dwg read support.</changelog>
  <changelog author="p.drouand@gmail.com" date="1449576000">- Update to version 0.6.3
  * No changelog available for this version</changelog>
  <changelog author="jslaby@suse.com" date="1465300800">- add libdxfrw-LibreCad-2.1.0-changes.patch
- we need -std=c++11 for that patch to work</changelog>
  <changelog author="jslaby@suse.com" date="1558267200">- switch from sourceforge to more up-to-date github repo
- Update to version 0.6.3+git.20190501:
  * Add build status and update example link
  * Add Travis-CI script
  * [#10] Fix compilation on GCC
  * Fix bugs with .dwg import of TEXT and MTEXT entities
  * This was unnecessary
  * Link libdxfrw against libstdc++
  * Return an error when the file ends prematurely
  * Add version getter
  * Fix polyline 2d/3d write
  * Initialize return buffers in GetRawChar8 et al.
- add
  * 0001-cmake-use-GNUInstallDirs.patch
  * 0002-cmake-set-library-VERSIONs.patch
  * 0003-cmake-add-one-for-dwg2dxf.patch
  * 0004-cmake-generate-and-install-pkgconfig.patch
- remove
  * libdxfrw-LibreCad-2.1.0-changes.patch</changelog>
  <changelog author="jslaby@suse.cz" date="1620129600">- Update to version 1.0.1+git.20200429:
  * Fix includes install dir
  * Export target as libdxfrw::libdxfrw to keep consistency with Conan packages
  * Add archive destination in install
  * Install DXFRW::dxfrw target
  * Remove duplicate target properties
  * Remove version from pkg-config file
  * Let CMake handle C++11 compiler definition
  * Change minimal required CMake version to 3.0
  * cmake: add doc target
  * README.md: fix typo
  * cmake: generate and install pkgconfig
  * cmake: add one for dwg2dxf
  * cmake: set library VERSIONs
  * cmake: use GNUInstallDirs
- add patches (build fixes)
  * libdxfrw.pc.in-fix-expansion-and-include-path.patch
  * drw_header-fix-indentation-level.patch
- remove patches (they got upstreamed)
  * 0001-cmake-use-GNUInstallDirs.patch
  * 0002-cmake-set-library-VERSIONs.patch
  * 0003-cmake-add-one-for-dwg2dxf.patch
  * 0004-cmake-generate-and-install-pkgconfig.patch</changelog>
  <changelog author="jslaby@suse.cz" date="1640001600">- Update to version 1.0.1+git.20211110:
  * fixed heap use after free vulnerability CVE-2021-21900 (bsc#1192938)
  * minor improvements to dwg2dxf, formatting and message output on success
  * fixed heap buffer overflow vulnerability CVE-2021-21899 (bsc#1192937)
  * dwg2dxf - enable debug output of libdxfrw by command line switch
  * fixed out-of-bounds write vulnerability CVE-2021-21898 (bsc#1192936)
  * fixed please note section formatting
  * updated README.md for LibreCAD_3 branch and sf.net successor
  * fixed LibreCAD 2 issue #1371, read failed with binary DXF
  * Use ununordered_map instead of map
  * manual merge changes from LibreCAD2
  * and much more
- added
  * 0001-fix-Vertex-ID-printout.patch
- removed (they are upstream)
  * drw_header-fix-indentation-level.patch
  * libdxfrw.pc.in-fix-expansion-and-include-path.patch</changelog>
  <changelog author="jslaby@suse.cz" date="1642507200">- Update to version 1.0.1+git.20220109:
  * fixed ambiguous error for DRW_Dimension::parseDwg()
  * fixed enless while()-loop for pre 2004 versions
  * dwgReader::readDwgObjects() stop reading after 1st error
  * dwgReader::readDwgEntities() stop reading after 1st error
  * replace ENTRY_PARSE macro with template method
  * remove unused DRW_Class::parseCode() method
  * protect vector&lt;&gt;.reserve() calls
  * Added NULL check for hatch code 93
  * Fix bounds check in DRW_LWPolyline
  * fix, check maxClassNum for valid value
  * fixed wrong 2010+ check for 64-bit size
  * Set compiler warnings on by default, because makes harder for bugs to go undetected. 	modified:   CMakeLists.txt
  * Fixed fall through and other warnings (#54)
  * fix "Vertex ID" printout
- remove (it is upstream)
  * 0001-fix-Vertex-ID-printout.patch</changelog>
</package>
<package pkgid="010df72f9b640df40cdef81d830b181dbb8605d6474ea8276ef7c8b46ba94f8f" name="libdxfrw1" arch="i586">
  <version epoch="0" ver="1.0.1+git.20220109" rel="bp154.2.3.1"/>
  <changelog author="asterios.dramis@gmail.com" date="1392811200">- Initial rpm release (version 0.5.11).</changelog>
  <changelog author="jengelh@inai.de" date="1399636800">- Set RPM group to more usual values</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1407499200">- Update to version 0.5.12:
  * Detailed changelog not available.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1441800000">- Update to version 0.6.1:
  * Detailed changelog not available.
  From version 0.6.0:
  * First version with dwg read support.</changelog>
  <changelog author="p.drouand@gmail.com" date="1449576000">- Update to version 0.6.3
  * No changelog available for this version</changelog>
  <changelog author="jslaby@suse.com" date="1465300800">- add libdxfrw-LibreCad-2.1.0-changes.patch
- we need -std=c++11 for that patch to work</changelog>
  <changelog author="jslaby@suse.com" date="1558267200">- switch from sourceforge to more up-to-date github repo
- Update to version 0.6.3+git.20190501:
  * Add build status and update example link
  * Add Travis-CI script
  * [#10] Fix compilation on GCC
  * Fix bugs with .dwg import of TEXT and MTEXT entities
  * This was unnecessary
  * Link libdxfrw against libstdc++
  * Return an error when the file ends prematurely
  * Add version getter
  * Fix polyline 2d/3d write
  * Initialize return buffers in GetRawChar8 et al.
- add
  * 0001-cmake-use-GNUInstallDirs.patch
  * 0002-cmake-set-library-VERSIONs.patch
  * 0003-cmake-add-one-for-dwg2dxf.patch
  * 0004-cmake-generate-and-install-pkgconfig.patch
- remove
  * libdxfrw-LibreCad-2.1.0-changes.patch</changelog>
  <changelog author="jslaby@suse.cz" date="1620129600">- Update to version 1.0.1+git.20200429:
  * Fix includes install dir
  * Export target as libdxfrw::libdxfrw to keep consistency with Conan packages
  * Add archive destination in install
  * Install DXFRW::dxfrw target
  * Remove duplicate target properties
  * Remove version from pkg-config file
  * Let CMake handle C++11 compiler definition
  * Change minimal required CMake version to 3.0
  * cmake: add doc target
  * README.md: fix typo
  * cmake: generate and install pkgconfig
  * cmake: add one for dwg2dxf
  * cmake: set library VERSIONs
  * cmake: use GNUInstallDirs
- add patches (build fixes)
  * libdxfrw.pc.in-fix-expansion-and-include-path.patch
  * drw_header-fix-indentation-level.patch
- remove patches (they got upstreamed)
  * 0001-cmake-use-GNUInstallDirs.patch
  * 0002-cmake-set-library-VERSIONs.patch
  * 0003-cmake-add-one-for-dwg2dxf.patch
  * 0004-cmake-generate-and-install-pkgconfig.patch</changelog>
  <changelog author="jslaby@suse.cz" date="1640001600">- Update to version 1.0.1+git.20211110:
  * fixed heap use after free vulnerability CVE-2021-21900 (bsc#1192938)
  * minor improvements to dwg2dxf, formatting and message output on success
  * fixed heap buffer overflow vulnerability CVE-2021-21899 (bsc#1192937)
  * dwg2dxf - enable debug output of libdxfrw by command line switch
  * fixed out-of-bounds write vulnerability CVE-2021-21898 (bsc#1192936)
  * fixed please note section formatting
  * updated README.md for LibreCAD_3 branch and sf.net successor
  * fixed LibreCAD 2 issue #1371, read failed with binary DXF
  * Use ununordered_map instead of map
  * manual merge changes from LibreCAD2
  * and much more
- added
  * 0001-fix-Vertex-ID-printout.patch
- removed (they are upstream)
  * drw_header-fix-indentation-level.patch
  * libdxfrw.pc.in-fix-expansion-and-include-path.patch</changelog>
  <changelog author="jslaby@suse.cz" date="1642507200">- Update to version 1.0.1+git.20220109:
  * fixed ambiguous error for DRW_Dimension::parseDwg()
  * fixed enless while()-loop for pre 2004 versions
  * dwgReader::readDwgObjects() stop reading after 1st error
  * dwgReader::readDwgEntities() stop reading after 1st error
  * replace ENTRY_PARSE macro with template method
  * remove unused DRW_Class::parseCode() method
  * protect vector&lt;&gt;.reserve() calls
  * Added NULL check for hatch code 93
  * Fix bounds check in DRW_LWPolyline
  * fix, check maxClassNum for valid value
  * fixed wrong 2010+ check for 64-bit size
  * Set compiler warnings on by default, because makes harder for bugs to go undetected. 	modified:   CMakeLists.txt
  * Fixed fall through and other warnings (#54)
  * fix "Vertex ID" printout
- remove (it is upstream)
  * 0001-fix-Vertex-ID-printout.patch</changelog>
</package>
<package pkgid="36bfad327383c2e215a4105434a4ed494dabf172aa551d63a5561f042255a23e" name="libdxfrw1" arch="ppc64le">
  <version epoch="0" ver="1.0.1+git.20220109" rel="bp154.2.3.1"/>
  <changelog author="asterios.dramis@gmail.com" date="1392811200">- Initial rpm release (version 0.5.11).</changelog>
  <changelog author="jengelh@inai.de" date="1399636800">- Set RPM group to more usual values</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1407499200">- Update to version 0.5.12:
  * Detailed changelog not available.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1441800000">- Update to version 0.6.1:
  * Detailed changelog not available.
  From version 0.6.0:
  * First version with dwg read support.</changelog>
  <changelog author="p.drouand@gmail.com" date="1449576000">- Update to version 0.6.3
  * No changelog available for this version</changelog>
  <changelog author="jslaby@suse.com" date="1465300800">- add libdxfrw-LibreCad-2.1.0-changes.patch
- we need -std=c++11 for that patch to work</changelog>
  <changelog author="jslaby@suse.com" date="1558267200">- switch from sourceforge to more up-to-date github repo
- Update to version 0.6.3+git.20190501:
  * Add build status and update example link
  * Add Travis-CI script
  * [#10] Fix compilation on GCC
  * Fix bugs with .dwg import of TEXT and MTEXT entities
  * This was unnecessary
  * Link libdxfrw against libstdc++
  * Return an error when the file ends prematurely
  * Add version getter
  * Fix polyline 2d/3d write
  * Initialize return buffers in GetRawChar8 et al.
- add
  * 0001-cmake-use-GNUInstallDirs.patch
  * 0002-cmake-set-library-VERSIONs.patch
  * 0003-cmake-add-one-for-dwg2dxf.patch
  * 0004-cmake-generate-and-install-pkgconfig.patch
- remove
  * libdxfrw-LibreCad-2.1.0-changes.patch</changelog>
  <changelog author="jslaby@suse.cz" date="1620129600">- Update to version 1.0.1+git.20200429:
  * Fix includes install dir
  * Export target as libdxfrw::libdxfrw to keep consistency with Conan packages
  * Add archive destination in install
  * Install DXFRW::dxfrw target
  * Remove duplicate target properties
  * Remove version from pkg-config file
  * Let CMake handle C++11 compiler definition
  * Change minimal required CMake version to 3.0
  * cmake: add doc target
  * README.md: fix typo
  * cmake: generate and install pkgconfig
  * cmake: add one for dwg2dxf
  * cmake: set library VERSIONs
  * cmake: use GNUInstallDirs
- add patches (build fixes)
  * libdxfrw.pc.in-fix-expansion-and-include-path.patch
  * drw_header-fix-indentation-level.patch
- remove patches (they got upstreamed)
  * 0001-cmake-use-GNUInstallDirs.patch
  * 0002-cmake-set-library-VERSIONs.patch
  * 0003-cmake-add-one-for-dwg2dxf.patch
  * 0004-cmake-generate-and-install-pkgconfig.patch</changelog>
  <changelog author="jslaby@suse.cz" date="1640001600">- Update to version 1.0.1+git.20211110:
  * fixed heap use after free vulnerability CVE-2021-21900 (bsc#1192938)
  * minor improvements to dwg2dxf, formatting and message output on success
  * fixed heap buffer overflow vulnerability CVE-2021-21899 (bsc#1192937)
  * dwg2dxf - enable debug output of libdxfrw by command line switch
  * fixed out-of-bounds write vulnerability CVE-2021-21898 (bsc#1192936)
  * fixed please note section formatting
  * updated README.md for LibreCAD_3 branch and sf.net successor
  * fixed LibreCAD 2 issue #1371, read failed with binary DXF
  * Use ununordered_map instead of map
  * manual merge changes from LibreCAD2
  * and much more
- added
  * 0001-fix-Vertex-ID-printout.patch
- removed (they are upstream)
  * drw_header-fix-indentation-level.patch
  * libdxfrw.pc.in-fix-expansion-and-include-path.patch</changelog>
  <changelog author="jslaby@suse.cz" date="1642507200">- Update to version 1.0.1+git.20220109:
  * fixed ambiguous error for DRW_Dimension::parseDwg()
  * fixed enless while()-loop for pre 2004 versions
  * dwgReader::readDwgObjects() stop reading after 1st error
  * dwgReader::readDwgEntities() stop reading after 1st error
  * replace ENTRY_PARSE macro with template method
  * remove unused DRW_Class::parseCode() method
  * protect vector&lt;&gt;.reserve() calls
  * Added NULL check for hatch code 93
  * Fix bounds check in DRW_LWPolyline
  * fix, check maxClassNum for valid value
  * fixed wrong 2010+ check for 64-bit size
  * Set compiler warnings on by default, because makes harder for bugs to go undetected. 	modified:   CMakeLists.txt
  * Fixed fall through and other warnings (#54)
  * fix "Vertex ID" printout
- remove (it is upstream)
  * 0001-fix-Vertex-ID-printout.patch</changelog>
</package>
<package pkgid="64d5608bd3077f2d7c6d88dac09e3e78a96d341a6dd542b4fab16f05dc72cfba" name="libdxfrw1" arch="s390x">
  <version epoch="0" ver="1.0.1+git.20220109" rel="bp154.2.3.1"/>
  <changelog author="asterios.dramis@gmail.com" date="1392811200">- Initial rpm release (version 0.5.11).</changelog>
  <changelog author="jengelh@inai.de" date="1399636800">- Set RPM group to more usual values</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1407499200">- Update to version 0.5.12:
  * Detailed changelog not available.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1441800000">- Update to version 0.6.1:
  * Detailed changelog not available.
  From version 0.6.0:
  * First version with dwg read support.</changelog>
  <changelog author="p.drouand@gmail.com" date="1449576000">- Update to version 0.6.3
  * No changelog available for this version</changelog>
  <changelog author="jslaby@suse.com" date="1465300800">- add libdxfrw-LibreCad-2.1.0-changes.patch
- we need -std=c++11 for that patch to work</changelog>
  <changelog author="jslaby@suse.com" date="1558267200">- switch from sourceforge to more up-to-date github repo
- Update to version 0.6.3+git.20190501:
  * Add build status and update example link
  * Add Travis-CI script
  * [#10] Fix compilation on GCC
  * Fix bugs with .dwg import of TEXT and MTEXT entities
  * This was unnecessary
  * Link libdxfrw against libstdc++
  * Return an error when the file ends prematurely
  * Add version getter
  * Fix polyline 2d/3d write
  * Initialize return buffers in GetRawChar8 et al.
- add
  * 0001-cmake-use-GNUInstallDirs.patch
  * 0002-cmake-set-library-VERSIONs.patch
  * 0003-cmake-add-one-for-dwg2dxf.patch
  * 0004-cmake-generate-and-install-pkgconfig.patch
- remove
  * libdxfrw-LibreCad-2.1.0-changes.patch</changelog>
  <changelog author="jslaby@suse.cz" date="1620129600">- Update to version 1.0.1+git.20200429:
  * Fix includes install dir
  * Export target as libdxfrw::libdxfrw to keep consistency with Conan packages
  * Add archive destination in install
  * Install DXFRW::dxfrw target
  * Remove duplicate target properties
  * Remove version from pkg-config file
  * Let CMake handle C++11 compiler definition
  * Change minimal required CMake version to 3.0
  * cmake: add doc target
  * README.md: fix typo
  * cmake: generate and install pkgconfig
  * cmake: add one for dwg2dxf
  * cmake: set library VERSIONs
  * cmake: use GNUInstallDirs
- add patches (build fixes)
  * libdxfrw.pc.in-fix-expansion-and-include-path.patch
  * drw_header-fix-indentation-level.patch
- remove patches (they got upstreamed)
  * 0001-cmake-use-GNUInstallDirs.patch
  * 0002-cmake-set-library-VERSIONs.patch
  * 0003-cmake-add-one-for-dwg2dxf.patch
  * 0004-cmake-generate-and-install-pkgconfig.patch</changelog>
  <changelog author="jslaby@suse.cz" date="1640001600">- Update to version 1.0.1+git.20211110:
  * fixed heap use after free vulnerability CVE-2021-21900 (bsc#1192938)
  * minor improvements to dwg2dxf, formatting and message output on success
  * fixed heap buffer overflow vulnerability CVE-2021-21899 (bsc#1192937)
  * dwg2dxf - enable debug output of libdxfrw by command line switch
  * fixed out-of-bounds write vulnerability CVE-2021-21898 (bsc#1192936)
  * fixed please note section formatting
  * updated README.md for LibreCAD_3 branch and sf.net successor
  * fixed LibreCAD 2 issue #1371, read failed with binary DXF
  * Use ununordered_map instead of map
  * manual merge changes from LibreCAD2
  * and much more
- added
  * 0001-fix-Vertex-ID-printout.patch
- removed (they are upstream)
  * drw_header-fix-indentation-level.patch
  * libdxfrw.pc.in-fix-expansion-and-include-path.patch</changelog>
  <changelog author="jslaby@suse.cz" date="1642507200">- Update to version 1.0.1+git.20220109:
  * fixed ambiguous error for DRW_Dimension::parseDwg()
  * fixed enless while()-loop for pre 2004 versions
  * dwgReader::readDwgObjects() stop reading after 1st error
  * dwgReader::readDwgEntities() stop reading after 1st error
  * replace ENTRY_PARSE macro with template method
  * remove unused DRW_Class::parseCode() method
  * protect vector&lt;&gt;.reserve() calls
  * Added NULL check for hatch code 93
  * Fix bounds check in DRW_LWPolyline
  * fix, check maxClassNum for valid value
  * fixed wrong 2010+ check for 64-bit size
  * Set compiler warnings on by default, because makes harder for bugs to go undetected. 	modified:   CMakeLists.txt
  * Fixed fall through and other warnings (#54)
  * fix "Vertex ID" printout
- remove (it is upstream)
  * 0001-fix-Vertex-ID-printout.patch</changelog>
</package>
<package pkgid="29286cd8c2575726f76599c10fbc562d424b53d50ab1f72dd4ebea484d77cc47" name="libdxfrw1" arch="x86_64">
  <version epoch="0" ver="1.0.1+git.20220109" rel="bp154.2.3.1"/>
  <changelog author="asterios.dramis@gmail.com" date="1392811200">- Initial rpm release (version 0.5.11).</changelog>
  <changelog author="jengelh@inai.de" date="1399636800">- Set RPM group to more usual values</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1407499200">- Update to version 0.5.12:
  * Detailed changelog not available.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1441800000">- Update to version 0.6.1:
  * Detailed changelog not available.
  From version 0.6.0:
  * First version with dwg read support.</changelog>
  <changelog author="p.drouand@gmail.com" date="1449576000">- Update to version 0.6.3
  * No changelog available for this version</changelog>
  <changelog author="jslaby@suse.com" date="1465300800">- add libdxfrw-LibreCad-2.1.0-changes.patch
- we need -std=c++11 for that patch to work</changelog>
  <changelog author="jslaby@suse.com" date="1558267200">- switch from sourceforge to more up-to-date github repo
- Update to version 0.6.3+git.20190501:
  * Add build status and update example link
  * Add Travis-CI script
  * [#10] Fix compilation on GCC
  * Fix bugs with .dwg import of TEXT and MTEXT entities
  * This was unnecessary
  * Link libdxfrw against libstdc++
  * Return an error when the file ends prematurely
  * Add version getter
  * Fix polyline 2d/3d write
  * Initialize return buffers in GetRawChar8 et al.
- add
  * 0001-cmake-use-GNUInstallDirs.patch
  * 0002-cmake-set-library-VERSIONs.patch
  * 0003-cmake-add-one-for-dwg2dxf.patch
  * 0004-cmake-generate-and-install-pkgconfig.patch
- remove
  * libdxfrw-LibreCad-2.1.0-changes.patch</changelog>
  <changelog author="jslaby@suse.cz" date="1620129600">- Update to version 1.0.1+git.20200429:
  * Fix includes install dir
  * Export target as libdxfrw::libdxfrw to keep consistency with Conan packages
  * Add archive destination in install
  * Install DXFRW::dxfrw target
  * Remove duplicate target properties
  * Remove version from pkg-config file
  * Let CMake handle C++11 compiler definition
  * Change minimal required CMake version to 3.0
  * cmake: add doc target
  * README.md: fix typo
  * cmake: generate and install pkgconfig
  * cmake: add one for dwg2dxf
  * cmake: set library VERSIONs
  * cmake: use GNUInstallDirs
- add patches (build fixes)
  * libdxfrw.pc.in-fix-expansion-and-include-path.patch
  * drw_header-fix-indentation-level.patch
- remove patches (they got upstreamed)
  * 0001-cmake-use-GNUInstallDirs.patch
  * 0002-cmake-set-library-VERSIONs.patch
  * 0003-cmake-add-one-for-dwg2dxf.patch
  * 0004-cmake-generate-and-install-pkgconfig.patch</changelog>
  <changelog author="jslaby@suse.cz" date="1640001600">- Update to version 1.0.1+git.20211110:
  * fixed heap use after free vulnerability CVE-2021-21900 (bsc#1192938)
  * minor improvements to dwg2dxf, formatting and message output on success
  * fixed heap buffer overflow vulnerability CVE-2021-21899 (bsc#1192937)
  * dwg2dxf - enable debug output of libdxfrw by command line switch
  * fixed out-of-bounds write vulnerability CVE-2021-21898 (bsc#1192936)
  * fixed please note section formatting
  * updated README.md for LibreCAD_3 branch and sf.net successor
  * fixed LibreCAD 2 issue #1371, read failed with binary DXF
  * Use ununordered_map instead of map
  * manual merge changes from LibreCAD2
  * and much more
- added
  * 0001-fix-Vertex-ID-printout.patch
- removed (they are upstream)
  * drw_header-fix-indentation-level.patch
  * libdxfrw.pc.in-fix-expansion-and-include-path.patch</changelog>
  <changelog author="jslaby@suse.cz" date="1642507200">- Update to version 1.0.1+git.20220109:
  * fixed ambiguous error for DRW_Dimension::parseDwg()
  * fixed enless while()-loop for pre 2004 versions
  * dwgReader::readDwgObjects() stop reading after 1st error
  * dwgReader::readDwgEntities() stop reading after 1st error
  * replace ENTRY_PARSE macro with template method
  * remove unused DRW_Class::parseCode() method
  * protect vector&lt;&gt;.reserve() calls
  * Added NULL check for hatch code 93
  * Fix bounds check in DRW_LWPolyline
  * fix, check maxClassNum for valid value
  * fixed wrong 2010+ check for 64-bit size
  * Set compiler warnings on by default, because makes harder for bugs to go undetected. 	modified:   CMakeLists.txt
  * Fixed fall through and other warnings (#54)
  * fix "Vertex ID" printout
- remove (it is upstream)
  * 0001-fix-Vertex-ID-printout.patch</changelog>
</package>
<package pkgid="b8103512c933ba60573e2bfef621b60110df8e040fcb3024d8315f725520c884" name="libevtlog-3_35-0" arch="aarch64">
  <version epoch="0" ver="3.35.1" rel="bp154.3.3.1"/>
  <changelog author="peter@czanik.hu" date="1545048000">- updated to 3.19.1
- changed summary again</changelog>
  <changelog author="schwab@suse.de" date="1545393600">- Allow building with java 1.8.0.
- Use %license</changelog>
  <changelog author="peter@czanik.hu" date="1546948800">- added 2482.patch to resolve GPL-2.0 vs. BSD-4-Clause
  compatibility problem.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1548849600">- Dynamically detect used python3 version.</changelog>
  <changelog author="root &lt;peter@czanik.hu&gt;" date="1555070400">- oops, forgot to update version in syslog-ng.conf again...
- moved slack SCL to curl sub-package to silence warning
  on startup</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1567512000">- updated to 3.23.1 to resolve bnc#1143190
- removed 2482.patch as it was merged upstream
- add wensense &amp; netskope parsers
- add collectd support
- update syslog-ng.conf due to an undocumented include
  syntax used in the config was removed by uspstream
- add SCL to support Elasticsearch destination using
  the http() destination driver
- add SCL to parse junos and checkpoint logs
- changed the location of debuggercli files
- disabled native connector (Rust support)
- "ExcludeArch: i586 s390x" as workaround until bison is fixed</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1574856000">- remove ExcludeArch as bison workaround no more needed
- remove dependency on libgeoip to fix bnc#1156203
  (of course libmaxminddb is still supported)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1576152000">- update to 3.25.1
- many bug fixes, improved Redis destination performance</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1580731200">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  allow OBS to shortcut through -mini flavors.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1582891200">- Fix fixing Python shebang</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1583841600">- Update to 3.26.1
  * added a new option to multi-line file sources
  * python-http-header: added this new plugin, which makes it possible
    for users to implement HTTP header plugins in Python language
  * azure-auth-header: Added this new plugin, which generates
    authorization header for applications connecting to Azure
  * set-severity(): Added this new rewrite rule for changing message severity.
  * $(list-search): Added a new template function, which returns
    the first index of a pattern in a list.
  * other minor improvements
  * many bug fixes</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1586952000">- fix libevtlog package name</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1589198400">- fix bnc#1169385 by removing creating news log files from post,
  adding syslog-ng.conf options to create files/directories
  automatically, and commenting the relevant part out.</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1606392000">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt; 3.30.1-0" date="1607428800">- update to 3.30.1
- follow up snmp support changes
- add secure logging
- add PAN-OS parser
- add SumoLogic destination</changelog>
  <changelog author="Steve Kowalik &lt;steven.kowalik@suse.com&gt;" date="1626436800">- Set shebang for merge-grammar.py to be /usr/bin/python3.</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1627473600">- update to 3.33.2
- added support for parsing CEE and Fortigate logs
- added Discord destination
- added MQTT destination support
- python3 workdaround removed (commented out for now, fixed upstream)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1638792000">- update to 3.35.1
- remove "news" user creation, as it is no more referenced
  from the configuration file
- packaging fixes to remove a few warnings</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1645185600">- disable Java support for ARMv7 (compilation crashes)</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1674734400">- CVE-2022-38725: fix integer overflow in parsers (bsc#1207460)
  add 0001-Fix-buffer-handling-of-syslog-and-timestamp-parsers.patch</changelog>
</package>
<package pkgid="965dde394149628f6b254080b2961b9ea08039ef418393f667a3a73a8aba2100" name="libevtlog-3_35-0" arch="ppc64le">
  <version epoch="0" ver="3.35.1" rel="bp154.3.3.1"/>
  <changelog author="peter@czanik.hu" date="1545048000">- updated to 3.19.1
- changed summary again</changelog>
  <changelog author="schwab@suse.de" date="1545393600">- Allow building with java 1.8.0.
- Use %license</changelog>
  <changelog author="peter@czanik.hu" date="1546948800">- added 2482.patch to resolve GPL-2.0 vs. BSD-4-Clause
  compatibility problem.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1548849600">- Dynamically detect used python3 version.</changelog>
  <changelog author="root &lt;peter@czanik.hu&gt;" date="1555070400">- oops, forgot to update version in syslog-ng.conf again...
- moved slack SCL to curl sub-package to silence warning
  on startup</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1567512000">- updated to 3.23.1 to resolve bnc#1143190
- removed 2482.patch as it was merged upstream
- add wensense &amp; netskope parsers
- add collectd support
- update syslog-ng.conf due to an undocumented include
  syntax used in the config was removed by uspstream
- add SCL to support Elasticsearch destination using
  the http() destination driver
- add SCL to parse junos and checkpoint logs
- changed the location of debuggercli files
- disabled native connector (Rust support)
- "ExcludeArch: i586 s390x" as workaround until bison is fixed</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1574856000">- remove ExcludeArch as bison workaround no more needed
- remove dependency on libgeoip to fix bnc#1156203
  (of course libmaxminddb is still supported)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1576152000">- update to 3.25.1
- many bug fixes, improved Redis destination performance</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1580731200">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  allow OBS to shortcut through -mini flavors.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1582891200">- Fix fixing Python shebang</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1583841600">- Update to 3.26.1
  * added a new option to multi-line file sources
  * python-http-header: added this new plugin, which makes it possible
    for users to implement HTTP header plugins in Python language
  * azure-auth-header: Added this new plugin, which generates
    authorization header for applications connecting to Azure
  * set-severity(): Added this new rewrite rule for changing message severity.
  * $(list-search): Added a new template function, which returns
    the first index of a pattern in a list.
  * other minor improvements
  * many bug fixes</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1586952000">- fix libevtlog package name</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1589198400">- fix bnc#1169385 by removing creating news log files from post,
  adding syslog-ng.conf options to create files/directories
  automatically, and commenting the relevant part out.</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1606392000">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt; 3.30.1-0" date="1607428800">- update to 3.30.1
- follow up snmp support changes
- add secure logging
- add PAN-OS parser
- add SumoLogic destination</changelog>
  <changelog author="Steve Kowalik &lt;steven.kowalik@suse.com&gt;" date="1626436800">- Set shebang for merge-grammar.py to be /usr/bin/python3.</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1627473600">- update to 3.33.2
- added support for parsing CEE and Fortigate logs
- added Discord destination
- added MQTT destination support
- python3 workdaround removed (commented out for now, fixed upstream)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1638792000">- update to 3.35.1
- remove "news" user creation, as it is no more referenced
  from the configuration file
- packaging fixes to remove a few warnings</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1645185600">- disable Java support for ARMv7 (compilation crashes)</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1674734400">- CVE-2022-38725: fix integer overflow in parsers (bsc#1207460)
  add 0001-Fix-buffer-handling-of-syslog-and-timestamp-parsers.patch</changelog>
</package>
<package pkgid="46f7f18cca0d8346330bac92ab6ebc4b299556d16e3dd91a2f42ff5f7ea2ec31" name="libevtlog-3_35-0" arch="s390x">
  <version epoch="0" ver="3.35.1" rel="bp154.3.3.1"/>
  <changelog author="peter@czanik.hu" date="1545048000">- updated to 3.19.1
- changed summary again</changelog>
  <changelog author="schwab@suse.de" date="1545393600">- Allow building with java 1.8.0.
- Use %license</changelog>
  <changelog author="peter@czanik.hu" date="1546948800">- added 2482.patch to resolve GPL-2.0 vs. BSD-4-Clause
  compatibility problem.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1548849600">- Dynamically detect used python3 version.</changelog>
  <changelog author="root &lt;peter@czanik.hu&gt;" date="1555070400">- oops, forgot to update version in syslog-ng.conf again...
- moved slack SCL to curl sub-package to silence warning
  on startup</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1567512000">- updated to 3.23.1 to resolve bnc#1143190
- removed 2482.patch as it was merged upstream
- add wensense &amp; netskope parsers
- add collectd support
- update syslog-ng.conf due to an undocumented include
  syntax used in the config was removed by uspstream
- add SCL to support Elasticsearch destination using
  the http() destination driver
- add SCL to parse junos and checkpoint logs
- changed the location of debuggercli files
- disabled native connector (Rust support)
- "ExcludeArch: i586 s390x" as workaround until bison is fixed</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1574856000">- remove ExcludeArch as bison workaround no more needed
- remove dependency on libgeoip to fix bnc#1156203
  (of course libmaxminddb is still supported)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1576152000">- update to 3.25.1
- many bug fixes, improved Redis destination performance</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1580731200">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  allow OBS to shortcut through -mini flavors.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1582891200">- Fix fixing Python shebang</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1583841600">- Update to 3.26.1
  * added a new option to multi-line file sources
  * python-http-header: added this new plugin, which makes it possible
    for users to implement HTTP header plugins in Python language
  * azure-auth-header: Added this new plugin, which generates
    authorization header for applications connecting to Azure
  * set-severity(): Added this new rewrite rule for changing message severity.
  * $(list-search): Added a new template function, which returns
    the first index of a pattern in a list.
  * other minor improvements
  * many bug fixes</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1586952000">- fix libevtlog package name</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1589198400">- fix bnc#1169385 by removing creating news log files from post,
  adding syslog-ng.conf options to create files/directories
  automatically, and commenting the relevant part out.</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1606392000">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt; 3.30.1-0" date="1607428800">- update to 3.30.1
- follow up snmp support changes
- add secure logging
- add PAN-OS parser
- add SumoLogic destination</changelog>
  <changelog author="Steve Kowalik &lt;steven.kowalik@suse.com&gt;" date="1626436800">- Set shebang for merge-grammar.py to be /usr/bin/python3.</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1627473600">- update to 3.33.2
- added support for parsing CEE and Fortigate logs
- added Discord destination
- added MQTT destination support
- python3 workdaround removed (commented out for now, fixed upstream)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1638792000">- update to 3.35.1
- remove "news" user creation, as it is no more referenced
  from the configuration file
- packaging fixes to remove a few warnings</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1645185600">- disable Java support for ARMv7 (compilation crashes)</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1674734400">- CVE-2022-38725: fix integer overflow in parsers (bsc#1207460)
  add 0001-Fix-buffer-handling-of-syslog-and-timestamp-parsers.patch</changelog>
</package>
<package pkgid="8dde8e8571d0e708e8b354417df7a40d3bb1d355ad7cb7b38ee2232523a8f226" name="libevtlog-3_35-0" arch="x86_64">
  <version epoch="0" ver="3.35.1" rel="bp154.3.3.1"/>
  <changelog author="peter@czanik.hu" date="1545048000">- updated to 3.19.1
- changed summary again</changelog>
  <changelog author="schwab@suse.de" date="1545393600">- Allow building with java 1.8.0.
- Use %license</changelog>
  <changelog author="peter@czanik.hu" date="1546948800">- added 2482.patch to resolve GPL-2.0 vs. BSD-4-Clause
  compatibility problem.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1548849600">- Dynamically detect used python3 version.</changelog>
  <changelog author="root &lt;peter@czanik.hu&gt;" date="1555070400">- oops, forgot to update version in syslog-ng.conf again...
- moved slack SCL to curl sub-package to silence warning
  on startup</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1567512000">- updated to 3.23.1 to resolve bnc#1143190
- removed 2482.patch as it was merged upstream
- add wensense &amp; netskope parsers
- add collectd support
- update syslog-ng.conf due to an undocumented include
  syntax used in the config was removed by uspstream
- add SCL to support Elasticsearch destination using
  the http() destination driver
- add SCL to parse junos and checkpoint logs
- changed the location of debuggercli files
- disabled native connector (Rust support)
- "ExcludeArch: i586 s390x" as workaround until bison is fixed</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1574856000">- remove ExcludeArch as bison workaround no more needed
- remove dependency on libgeoip to fix bnc#1156203
  (of course libmaxminddb is still supported)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1576152000">- update to 3.25.1
- many bug fixes, improved Redis destination performance</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1580731200">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  allow OBS to shortcut through -mini flavors.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1582891200">- Fix fixing Python shebang</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1583841600">- Update to 3.26.1
  * added a new option to multi-line file sources
  * python-http-header: added this new plugin, which makes it possible
    for users to implement HTTP header plugins in Python language
  * azure-auth-header: Added this new plugin, which generates
    authorization header for applications connecting to Azure
  * set-severity(): Added this new rewrite rule for changing message severity.
  * $(list-search): Added a new template function, which returns
    the first index of a pattern in a list.
  * other minor improvements
  * many bug fixes</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1586952000">- fix libevtlog package name</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1589198400">- fix bnc#1169385 by removing creating news log files from post,
  adding syslog-ng.conf options to create files/directories
  automatically, and commenting the relevant part out.</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1606392000">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt; 3.30.1-0" date="1607428800">- update to 3.30.1
- follow up snmp support changes
- add secure logging
- add PAN-OS parser
- add SumoLogic destination</changelog>
  <changelog author="Steve Kowalik &lt;steven.kowalik@suse.com&gt;" date="1626436800">- Set shebang for merge-grammar.py to be /usr/bin/python3.</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1627473600">- update to 3.33.2
- added support for parsing CEE and Fortigate logs
- added Discord destination
- added MQTT destination support
- python3 workdaround removed (commented out for now, fixed upstream)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1638792000">- update to 3.35.1
- remove "news" user creation, as it is no more referenced
  from the configuration file
- packaging fixes to remove a few warnings</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1645185600">- disable Java support for ARMv7 (compilation crashes)</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1674734400">- CVE-2022-38725: fix integer overflow in parsers (bsc#1207460)
  add 0001-Fix-buffer-handling-of-syslog-and-timestamp-parsers.patch</changelog>
</package>
<package pkgid="cf6d317f768509ba39569401666b81196a7b792a549394e7abbb9c50a863e30d" name="libfaxutil7_0_6" arch="aarch64">
  <version epoch="0" ver="7.0.6" rel="bp154.2.3.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1546948800">- migrate from cron to systemd timers (boo#1115442)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1547640000">- Dependency on hylafax-hfaxd for timers added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1547812800">- faxgetty@ service removed from %pre section, as it is only a placeholder</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548244800">- Reduce boilerplate generated from %service_* by calling it just
  once.</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1563451200">- Version 7.0.0
  * add LDAP features for compatibility with ActiveDirectory (25 Mar-1 Apr 2019)
  * fix recovery after SSL Fax "accept failure" (18 Mar 2019)
  * add TextFormat overstrike option and disable by default (6 Feb 2019)
  * fix the page size of cover sheets returned via notify (8 Jan 2019)
  * fix or silence numerous compiler warnings (19, 22, 28 Dec 2018)
  * fix pagehandling updating after a proxy has been used (7-8 Dec 2018)
  * add faxmail stderr output of RFC2047 decoding results (5 Dec 2018)
  * fix faxmail handling of headers encoded with UTF-8 (4 Dec 2018)
  * fix faxmail handling of base64-encoded text parts (4 Dec 2018)
  * add SSL Fax support (9-26, 29 Nov; 11, 18, 25 Dec 2018; 2, 7, 23 Jan 2019)</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1574424000">- build fails with libtiff 4.1: pretend, that 4.1 is similar to 4.0</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1574424001">- Version 7.0.1
  * create a client timeout setting and change the default from 60 to
  3600 seconds (26 Sep 2019)
  * extend timeout for receiving ECM frames (21 Aug 2019)
  * fix timeout in Class 1 frame reception (5 Aug 2019)
  * improve Class 1 protocol handling when MaxRecvPages exceeded (31 Jul 2019)
  * fix ModemGroup limit default (11 Jul 2019)
  * fix recovery for SSL Fax write failures (6 Jun 2019)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1581681600">- Version 7.0.2
  * change FIXEDWIDTH default to better accommodate auto-rotation (13 Dec 2019)
  * prevent SSL_accept() from blocking (5 Dec 2019)
  * support libtiff v4.1 (5 Dec 2019)
  * fix ignoremodembusy feature broken by ModemGroup limits feature (16 Nov 2019)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1591704000">- fix for boo#1172731
  VUL-0: EMBARGOED: CVE-2020-8024: hylafax+: Problematic permissions allow
    escalation from uucp to other users
  * adjusted authorisation
  * adjusted pre*/post* snipplets</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1597147200">- version 7.0.3
  * add UseSSLFax feature in sendfax, sendfax.conf, hyla.conf, and JobControl
  (31 Jul 2020)
  * be more resilient in listening for the Phase C carrier (30 Jul 2020)
  * make sure to return to command mode if HDLC receive times out (29 Jul 2020)
  * make faxmail ignore boundaries on parts other than multiparts (29 Jul 2020)
  * don't attempt to write zero bytes of data to a TIFF (29 Jul 2020)
  * don't ever respond to CRP with CRP (28 Jul 2020)
  * secure setup.cache/setup.modem - CVE-2020-15397 (27, 30 Jul 2020)
  * reset frame counter when a sender retransmits PPS for a previously confirmed
  ECM block (26 Jul 2020)
  * scrutinize PPM before concluding that the sender missed our MCF (23 Jul 2020)
  * fix modem recovery after SSL Fax failure (22, 26 Jul 2020)
  * ignore echo of PPR, RTN, CRP (10, 13, 21 Jul 2020)
  * attempt to handle NSF/CSI/DIS in Class 1 sending Phase D (6 Jul 2020)
  * run scripts directly rather than invoking them via a shell for security
  hardening (3-5 Jul 2020)
  * add senderFumblesECM feature (3 Jul 2020)
  * add support for PIN/PIP/PRI-Q/PPS-PRI-Q signals, add senderConfusesPIN
  feature, and utilize PIN for rare conditions where it may be helpful
  (2, 6, 13-14 Jul 2020)
  * add senderConfusesRTN feature (25-26 Jun 2020)
  * add MissedPageHandling feature (24 Jun 2020)
  * use and handle CFR in Phase D to retransmit Phase C (16, 23 Jun 2020)
  * cope with hearing echo of RR, CTC during Class 1 sending (15-17 Jun 2020)
  * fix listening for retransmission of MPS/EOP/EOM if it was received
  corrupt on the first attempt (15 Jun 2020)
  * secure temporary directory creation for faxsetup, faxaddmodem, and
  probemodem - CVE-2020-15396 (13 Jun 2020)
  * don't use CRP when receiving PPS/PPM as some senders think
  we are sending MCF (12 Jun 2020)
  * add BR_SSLFAX to show SSL Fax in notify and faxinfo output (1 Jun 2020)
  * have faxinfo put units on non-standard page dimensions (28 May 2020)
  * improve error messages for JobHost connection errors (22 May 2020)
  * fix perpetual blocking of jobs when a job preparation fails,
  attempt to fix similar blocking problems for bad jobs in
  batches, and add "unblock" faxconfig feature (21 May 2020)
  * ignore TCF if we're receiving an SSL Fax (31 Jan 2020)
  * fixes for build on FreeBSD 12.1 (31 Jan - 3 Feb 2020)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1602244800">- rearrange files-section (boo#1172731)</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1611662400">- Fix TW build by pretending tiff 4.2 is as good enough as 4.{0,1}</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1620475200">- Fix TW build by pretending tiff 4.4 is as good enough as 4.{0,1}</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1626091200">- Add hylafax service and helper for use with firewalld, and
  explain the details in README.SUSE.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1632312000">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * hylafax-faxgetty@.service
  * hylafax-faxq.service
  * hylafax-faxqclean.service
  * hylafax-hfaxd.service
  * hylafax-usage.service</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1634558400">- version 7.0.4
  * README.SUSE renamed
  * hylafax.diff added for boo#1191571 (pre-correction)
  * Dependencies on systemd-services adjusted
  * retry training twice at the same bitrate unless FTT (26 Aug 2021)
  * add missing reason messages for session failures (21 Aug 2021)
  * stop attempts to send or receive signals if the call ended prematurely (16-19 Aug 2021)
  * add Class1HasRMHookIndication (16 Aug 2021)
  * don't attempt sending DCN if we're already on hook (15, 17 Aug 2021)
  * end session sooner if receiver hangs up immediately after TCF or during prologue (14 Aug 2021)
  * fix some behavior following frame reception timeouts (13 Aug 2021)
  * improve behavior if procedural interrupt fails (12 Aug 2021)
  * handle sender repeating RR after we transmit MCF (10 Aug 2021)
  * add session logging of receipt of CFR/FTT signals (3 Aug 2021)
  * cope with receipt of PPR following CTC (3 Aug 2021)
  * attempt to cope with NSF/CSI/DIS after PPS, CTR, ERR, RR and improve coping with
    the same after MPS/EOP/EOM (2, 12, 14, 18 Aug 2021)
  * identify DCN after PPS as a receiver abort (2 Aug 2021)
  * attempt to cope with receipt of CTR after sending PPS (2 Aug 2021)
  * remove use of deprecated libtiff integer types and "register" storage class specifier (25 Jul 2021)
  * don't employ senderFumblesECM if V.34-Fax was negotiated (25 Jul 2021)
  * update configure to accept libtiff v4.2 and v4.3 (24 Jul 2021)
  * fix page handling "botch" if a job's first and previous attempts were on a proxy (20 Jul 2021)
  * fix data timeout for bitrates less than 14400 bps when non-zero scanline time (15 Jul 2021)
  * try to cope with T.38 invite stutter at beginning of send (15 Jul 2021)
  * decouple session logging from direct filesystem I/O (15 Jul 2021)
  * try to help receivers who may expect initial 1-bits to start high-speed data (8, 9 Jul, 4 Aug 2021)
  * improve tenacity of "persistent" ECM (26 Jun 2021)
  * maintain the same SSL Fax passcode during a single session (20 May 2021)
  * log detection of binary file transfer support in receivers (1 Apr 2021)
  * add support for SiLabs Si2417/Si2435 (5 Feb 2021)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648900800">- version 7.0.5
  * hylafax.diff removed - included in source
  * extend Class1RecvAbortOK = 0 timeout to 500 ms (4 Dec 2021)
  * cope with Si2435 V.34/V.8 connection glitch (17, 19 Nov 2021)
  * cope with spurious +FCERROR or other delayed messages from modem (26 Oct 2021)
  * avoid letting corrupt RTC signals lead to RTN (26 Oct 2021)
  * don't refer to DCN as an invalid response in error messages (20 Oct 2021)
  * handle TSI during procedural interrupt (19 Oct 2021)
  * do better with waiting on prologue frames from receiver (13 Oct 2021)
  * cope with echo of ERR (13 Oct 2021)
  * run ps2fax, pdf2fax, tiff2fax, pcl2fax coverters as fax user (12 Oct 2021)
  * attempt to cope with receivers who signal RTN in ECM Phase D (23 Sep 2021)
  * fix hfaxd build when LDAP libs are not present (23 Sep 2021)
  * handle PPR echo after fourth PPR (22 Sep 2021)
  * don't use CRP when waiting for CFR following training (15 Sep 2021)
  * attempt to cope with receivers which signal CFR after PPS (14 Sep 2021)
  * cope with senders who signal FTT in Phase D (10 Sep 2021)
  * fix problem with handling NSF/CSI/DIS frame after CTC/EOR (9 Sep 2021)
  * cope with senders who signal PPS without the PPS FCF (9 Sep 2021)
  * handle echo of PPR when expecting CTC/EOR (8 Sep 2021)
  * add failure messages for unspecified training failures (7 Sep 2021)
  * don't use CRP when waiting for CTR (7 Sep 2021)
  * handle echo of EOR, don't use CRP when waiting for ERR (7 Sep 2021)
  * repeat PIN if sender repeats post-page or partial-page message (7-8 Sep 2021)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1654344000">- Project and download links switched to https
  libtiff44.diff added for tiff 4.x compatibility</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1672056000">- version 7.0.6
  * add support for libtiff v4.4 (10 Jun 2022)
  * libtiff44.diff removed
  * cope with SSL Fax senders who skip Phase C (5 May 2022)
  * add ability to trace SSL Fax data reception (3 May 2022)
  * handle timeout OK response to +FRH=3 and +FRM=n (25 Apr 2022)
  * don't leave the modem waiting for a response when in SSL Fax (25 Apr 2022)
  * improve recovery from unexpected SSL Fax terminations during ECM (15, 18, 26 Apr 2022)
  * try to cope with false "no dialtone" results (4, 8 Apr 2022)
  * add initial support for SSL Fax Proxy servers (4, 23 Feb; 4, 19 Apr; 10, 24 Jun 2022)
  * buildrequirement for libssl added (Thanks Dimstar)</changelog>
</package>
<package pkgid="eb2918d3b699951619baa55e16eb7f88608c6cfa0f9c9a2c2e3e8b377c2edcfc" name="libfaxutil7_0_6" arch="i586">
  <version epoch="0" ver="7.0.6" rel="bp154.2.3.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1546948800">- migrate from cron to systemd timers (boo#1115442)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1547640000">- Dependency on hylafax-hfaxd for timers added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1547812800">- faxgetty@ service removed from %pre section, as it is only a placeholder</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548244800">- Reduce boilerplate generated from %service_* by calling it just
  once.</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1563451200">- Version 7.0.0
  * add LDAP features for compatibility with ActiveDirectory (25 Mar-1 Apr 2019)
  * fix recovery after SSL Fax "accept failure" (18 Mar 2019)
  * add TextFormat overstrike option and disable by default (6 Feb 2019)
  * fix the page size of cover sheets returned via notify (8 Jan 2019)
  * fix or silence numerous compiler warnings (19, 22, 28 Dec 2018)
  * fix pagehandling updating after a proxy has been used (7-8 Dec 2018)
  * add faxmail stderr output of RFC2047 decoding results (5 Dec 2018)
  * fix faxmail handling of headers encoded with UTF-8 (4 Dec 2018)
  * fix faxmail handling of base64-encoded text parts (4 Dec 2018)
  * add SSL Fax support (9-26, 29 Nov; 11, 18, 25 Dec 2018; 2, 7, 23 Jan 2019)</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1574424000">- build fails with libtiff 4.1: pretend, that 4.1 is similar to 4.0</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1574424001">- Version 7.0.1
  * create a client timeout setting and change the default from 60 to
  3600 seconds (26 Sep 2019)
  * extend timeout for receiving ECM frames (21 Aug 2019)
  * fix timeout in Class 1 frame reception (5 Aug 2019)
  * improve Class 1 protocol handling when MaxRecvPages exceeded (31 Jul 2019)
  * fix ModemGroup limit default (11 Jul 2019)
  * fix recovery for SSL Fax write failures (6 Jun 2019)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1581681600">- Version 7.0.2
  * change FIXEDWIDTH default to better accommodate auto-rotation (13 Dec 2019)
  * prevent SSL_accept() from blocking (5 Dec 2019)
  * support libtiff v4.1 (5 Dec 2019)
  * fix ignoremodembusy feature broken by ModemGroup limits feature (16 Nov 2019)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1591704000">- fix for boo#1172731
  VUL-0: EMBARGOED: CVE-2020-8024: hylafax+: Problematic permissions allow
    escalation from uucp to other users
  * adjusted authorisation
  * adjusted pre*/post* snipplets</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1597147200">- version 7.0.3
  * add UseSSLFax feature in sendfax, sendfax.conf, hyla.conf, and JobControl
  (31 Jul 2020)
  * be more resilient in listening for the Phase C carrier (30 Jul 2020)
  * make sure to return to command mode if HDLC receive times out (29 Jul 2020)
  * make faxmail ignore boundaries on parts other than multiparts (29 Jul 2020)
  * don't attempt to write zero bytes of data to a TIFF (29 Jul 2020)
  * don't ever respond to CRP with CRP (28 Jul 2020)
  * secure setup.cache/setup.modem - CVE-2020-15397 (27, 30 Jul 2020)
  * reset frame counter when a sender retransmits PPS for a previously confirmed
  ECM block (26 Jul 2020)
  * scrutinize PPM before concluding that the sender missed our MCF (23 Jul 2020)
  * fix modem recovery after SSL Fax failure (22, 26 Jul 2020)
  * ignore echo of PPR, RTN, CRP (10, 13, 21 Jul 2020)
  * attempt to handle NSF/CSI/DIS in Class 1 sending Phase D (6 Jul 2020)
  * run scripts directly rather than invoking them via a shell for security
  hardening (3-5 Jul 2020)
  * add senderFumblesECM feature (3 Jul 2020)
  * add support for PIN/PIP/PRI-Q/PPS-PRI-Q signals, add senderConfusesPIN
  feature, and utilize PIN for rare conditions where it may be helpful
  (2, 6, 13-14 Jul 2020)
  * add senderConfusesRTN feature (25-26 Jun 2020)
  * add MissedPageHandling feature (24 Jun 2020)
  * use and handle CFR in Phase D to retransmit Phase C (16, 23 Jun 2020)
  * cope with hearing echo of RR, CTC during Class 1 sending (15-17 Jun 2020)
  * fix listening for retransmission of MPS/EOP/EOM if it was received
  corrupt on the first attempt (15 Jun 2020)
  * secure temporary directory creation for faxsetup, faxaddmodem, and
  probemodem - CVE-2020-15396 (13 Jun 2020)
  * don't use CRP when receiving PPS/PPM as some senders think
  we are sending MCF (12 Jun 2020)
  * add BR_SSLFAX to show SSL Fax in notify and faxinfo output (1 Jun 2020)
  * have faxinfo put units on non-standard page dimensions (28 May 2020)
  * improve error messages for JobHost connection errors (22 May 2020)
  * fix perpetual blocking of jobs when a job preparation fails,
  attempt to fix similar blocking problems for bad jobs in
  batches, and add "unblock" faxconfig feature (21 May 2020)
  * ignore TCF if we're receiving an SSL Fax (31 Jan 2020)
  * fixes for build on FreeBSD 12.1 (31 Jan - 3 Feb 2020)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1602244800">- rearrange files-section (boo#1172731)</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1611662400">- Fix TW build by pretending tiff 4.2 is as good enough as 4.{0,1}</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1620475200">- Fix TW build by pretending tiff 4.4 is as good enough as 4.{0,1}</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1626091200">- Add hylafax service and helper for use with firewalld, and
  explain the details in README.SUSE.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1632312000">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * hylafax-faxgetty@.service
  * hylafax-faxq.service
  * hylafax-faxqclean.service
  * hylafax-hfaxd.service
  * hylafax-usage.service</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1634558400">- version 7.0.4
  * README.SUSE renamed
  * hylafax.diff added for boo#1191571 (pre-correction)
  * Dependencies on systemd-services adjusted
  * retry training twice at the same bitrate unless FTT (26 Aug 2021)
  * add missing reason messages for session failures (21 Aug 2021)
  * stop attempts to send or receive signals if the call ended prematurely (16-19 Aug 2021)
  * add Class1HasRMHookIndication (16 Aug 2021)
  * don't attempt sending DCN if we're already on hook (15, 17 Aug 2021)
  * end session sooner if receiver hangs up immediately after TCF or during prologue (14 Aug 2021)
  * fix some behavior following frame reception timeouts (13 Aug 2021)
  * improve behavior if procedural interrupt fails (12 Aug 2021)
  * handle sender repeating RR after we transmit MCF (10 Aug 2021)
  * add session logging of receipt of CFR/FTT signals (3 Aug 2021)
  * cope with receipt of PPR following CTC (3 Aug 2021)
  * attempt to cope with NSF/CSI/DIS after PPS, CTR, ERR, RR and improve coping with
    the same after MPS/EOP/EOM (2, 12, 14, 18 Aug 2021)
  * identify DCN after PPS as a receiver abort (2 Aug 2021)
  * attempt to cope with receipt of CTR after sending PPS (2 Aug 2021)
  * remove use of deprecated libtiff integer types and "register" storage class specifier (25 Jul 2021)
  * don't employ senderFumblesECM if V.34-Fax was negotiated (25 Jul 2021)
  * update configure to accept libtiff v4.2 and v4.3 (24 Jul 2021)
  * fix page handling "botch" if a job's first and previous attempts were on a proxy (20 Jul 2021)
  * fix data timeout for bitrates less than 14400 bps when non-zero scanline time (15 Jul 2021)
  * try to cope with T.38 invite stutter at beginning of send (15 Jul 2021)
  * decouple session logging from direct filesystem I/O (15 Jul 2021)
  * try to help receivers who may expect initial 1-bits to start high-speed data (8, 9 Jul, 4 Aug 2021)
  * improve tenacity of "persistent" ECM (26 Jun 2021)
  * maintain the same SSL Fax passcode during a single session (20 May 2021)
  * log detection of binary file transfer support in receivers (1 Apr 2021)
  * add support for SiLabs Si2417/Si2435 (5 Feb 2021)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648900800">- version 7.0.5
  * hylafax.diff removed - included in source
  * extend Class1RecvAbortOK = 0 timeout to 500 ms (4 Dec 2021)
  * cope with Si2435 V.34/V.8 connection glitch (17, 19 Nov 2021)
  * cope with spurious +FCERROR or other delayed messages from modem (26 Oct 2021)
  * avoid letting corrupt RTC signals lead to RTN (26 Oct 2021)
  * don't refer to DCN as an invalid response in error messages (20 Oct 2021)
  * handle TSI during procedural interrupt (19 Oct 2021)
  * do better with waiting on prologue frames from receiver (13 Oct 2021)
  * cope with echo of ERR (13 Oct 2021)
  * run ps2fax, pdf2fax, tiff2fax, pcl2fax coverters as fax user (12 Oct 2021)
  * attempt to cope with receivers who signal RTN in ECM Phase D (23 Sep 2021)
  * fix hfaxd build when LDAP libs are not present (23 Sep 2021)
  * handle PPR echo after fourth PPR (22 Sep 2021)
  * don't use CRP when waiting for CFR following training (15 Sep 2021)
  * attempt to cope with receivers which signal CFR after PPS (14 Sep 2021)
  * cope with senders who signal FTT in Phase D (10 Sep 2021)
  * fix problem with handling NSF/CSI/DIS frame after CTC/EOR (9 Sep 2021)
  * cope with senders who signal PPS without the PPS FCF (9 Sep 2021)
  * handle echo of PPR when expecting CTC/EOR (8 Sep 2021)
  * add failure messages for unspecified training failures (7 Sep 2021)
  * don't use CRP when waiting for CTR (7 Sep 2021)
  * handle echo of EOR, don't use CRP when waiting for ERR (7 Sep 2021)
  * repeat PIN if sender repeats post-page or partial-page message (7-8 Sep 2021)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1654344000">- Project and download links switched to https
  libtiff44.diff added for tiff 4.x compatibility</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1672056000">- version 7.0.6
  * add support for libtiff v4.4 (10 Jun 2022)
  * libtiff44.diff removed
  * cope with SSL Fax senders who skip Phase C (5 May 2022)
  * add ability to trace SSL Fax data reception (3 May 2022)
  * handle timeout OK response to +FRH=3 and +FRM=n (25 Apr 2022)
  * don't leave the modem waiting for a response when in SSL Fax (25 Apr 2022)
  * improve recovery from unexpected SSL Fax terminations during ECM (15, 18, 26 Apr 2022)
  * try to cope with false "no dialtone" results (4, 8 Apr 2022)
  * add initial support for SSL Fax Proxy servers (4, 23 Feb; 4, 19 Apr; 10, 24 Jun 2022)
  * buildrequirement for libssl added (Thanks Dimstar)</changelog>
</package>
<package pkgid="ea440153b3e1b2a1e2c826d07139c18f362b6938a42bc010ebcb9817739db970" name="libfaxutil7_0_6" arch="ppc64le">
  <version epoch="0" ver="7.0.6" rel="bp154.2.3.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1546948800">- migrate from cron to systemd timers (boo#1115442)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1547640000">- Dependency on hylafax-hfaxd for timers added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1547812800">- faxgetty@ service removed from %pre section, as it is only a placeholder</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548244800">- Reduce boilerplate generated from %service_* by calling it just
  once.</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1563451200">- Version 7.0.0
  * add LDAP features for compatibility with ActiveDirectory (25 Mar-1 Apr 2019)
  * fix recovery after SSL Fax "accept failure" (18 Mar 2019)
  * add TextFormat overstrike option and disable by default (6 Feb 2019)
  * fix the page size of cover sheets returned via notify (8 Jan 2019)
  * fix or silence numerous compiler warnings (19, 22, 28 Dec 2018)
  * fix pagehandling updating after a proxy has been used (7-8 Dec 2018)
  * add faxmail stderr output of RFC2047 decoding results (5 Dec 2018)
  * fix faxmail handling of headers encoded with UTF-8 (4 Dec 2018)
  * fix faxmail handling of base64-encoded text parts (4 Dec 2018)
  * add SSL Fax support (9-26, 29 Nov; 11, 18, 25 Dec 2018; 2, 7, 23 Jan 2019)</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1574424000">- build fails with libtiff 4.1: pretend, that 4.1 is similar to 4.0</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1574424001">- Version 7.0.1
  * create a client timeout setting and change the default from 60 to
  3600 seconds (26 Sep 2019)
  * extend timeout for receiving ECM frames (21 Aug 2019)
  * fix timeout in Class 1 frame reception (5 Aug 2019)
  * improve Class 1 protocol handling when MaxRecvPages exceeded (31 Jul 2019)
  * fix ModemGroup limit default (11 Jul 2019)
  * fix recovery for SSL Fax write failures (6 Jun 2019)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1581681600">- Version 7.0.2
  * change FIXEDWIDTH default to better accommodate auto-rotation (13 Dec 2019)
  * prevent SSL_accept() from blocking (5 Dec 2019)
  * support libtiff v4.1 (5 Dec 2019)
  * fix ignoremodembusy feature broken by ModemGroup limits feature (16 Nov 2019)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1591704000">- fix for boo#1172731
  VUL-0: EMBARGOED: CVE-2020-8024: hylafax+: Problematic permissions allow
    escalation from uucp to other users
  * adjusted authorisation
  * adjusted pre*/post* snipplets</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1597147200">- version 7.0.3
  * add UseSSLFax feature in sendfax, sendfax.conf, hyla.conf, and JobControl
  (31 Jul 2020)
  * be more resilient in listening for the Phase C carrier (30 Jul 2020)
  * make sure to return to command mode if HDLC receive times out (29 Jul 2020)
  * make faxmail ignore boundaries on parts other than multiparts (29 Jul 2020)
  * don't attempt to write zero bytes of data to a TIFF (29 Jul 2020)
  * don't ever respond to CRP with CRP (28 Jul 2020)
  * secure setup.cache/setup.modem - CVE-2020-15397 (27, 30 Jul 2020)
  * reset frame counter when a sender retransmits PPS for a previously confirmed
  ECM block (26 Jul 2020)
  * scrutinize PPM before concluding that the sender missed our MCF (23 Jul 2020)
  * fix modem recovery after SSL Fax failure (22, 26 Jul 2020)
  * ignore echo of PPR, RTN, CRP (10, 13, 21 Jul 2020)
  * attempt to handle NSF/CSI/DIS in Class 1 sending Phase D (6 Jul 2020)
  * run scripts directly rather than invoking them via a shell for security
  hardening (3-5 Jul 2020)
  * add senderFumblesECM feature (3 Jul 2020)
  * add support for PIN/PIP/PRI-Q/PPS-PRI-Q signals, add senderConfusesPIN
  feature, and utilize PIN for rare conditions where it may be helpful
  (2, 6, 13-14 Jul 2020)
  * add senderConfusesRTN feature (25-26 Jun 2020)
  * add MissedPageHandling feature (24 Jun 2020)
  * use and handle CFR in Phase D to retransmit Phase C (16, 23 Jun 2020)
  * cope with hearing echo of RR, CTC during Class 1 sending (15-17 Jun 2020)
  * fix listening for retransmission of MPS/EOP/EOM if it was received
  corrupt on the first attempt (15 Jun 2020)
  * secure temporary directory creation for faxsetup, faxaddmodem, and
  probemodem - CVE-2020-15396 (13 Jun 2020)
  * don't use CRP when receiving PPS/PPM as some senders think
  we are sending MCF (12 Jun 2020)
  * add BR_SSLFAX to show SSL Fax in notify and faxinfo output (1 Jun 2020)
  * have faxinfo put units on non-standard page dimensions (28 May 2020)
  * improve error messages for JobHost connection errors (22 May 2020)
  * fix perpetual blocking of jobs when a job preparation fails,
  attempt to fix similar blocking problems for bad jobs in
  batches, and add "unblock" faxconfig feature (21 May 2020)
  * ignore TCF if we're receiving an SSL Fax (31 Jan 2020)
  * fixes for build on FreeBSD 12.1 (31 Jan - 3 Feb 2020)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1602244800">- rearrange files-section (boo#1172731)</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1611662400">- Fix TW build by pretending tiff 4.2 is as good enough as 4.{0,1}</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1620475200">- Fix TW build by pretending tiff 4.4 is as good enough as 4.{0,1}</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1626091200">- Add hylafax service and helper for use with firewalld, and
  explain the details in README.SUSE.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1632312000">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * hylafax-faxgetty@.service
  * hylafax-faxq.service
  * hylafax-faxqclean.service
  * hylafax-hfaxd.service
  * hylafax-usage.service</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1634558400">- version 7.0.4
  * README.SUSE renamed
  * hylafax.diff added for boo#1191571 (pre-correction)
  * Dependencies on systemd-services adjusted
  * retry training twice at the same bitrate unless FTT (26 Aug 2021)
  * add missing reason messages for session failures (21 Aug 2021)
  * stop attempts to send or receive signals if the call ended prematurely (16-19 Aug 2021)
  * add Class1HasRMHookIndication (16 Aug 2021)
  * don't attempt sending DCN if we're already on hook (15, 17 Aug 2021)
  * end session sooner if receiver hangs up immediately after TCF or during prologue (14 Aug 2021)
  * fix some behavior following frame reception timeouts (13 Aug 2021)
  * improve behavior if procedural interrupt fails (12 Aug 2021)
  * handle sender repeating RR after we transmit MCF (10 Aug 2021)
  * add session logging of receipt of CFR/FTT signals (3 Aug 2021)
  * cope with receipt of PPR following CTC (3 Aug 2021)
  * attempt to cope with NSF/CSI/DIS after PPS, CTR, ERR, RR and improve coping with
    the same after MPS/EOP/EOM (2, 12, 14, 18 Aug 2021)
  * identify DCN after PPS as a receiver abort (2 Aug 2021)
  * attempt to cope with receipt of CTR after sending PPS (2 Aug 2021)
  * remove use of deprecated libtiff integer types and "register" storage class specifier (25 Jul 2021)
  * don't employ senderFumblesECM if V.34-Fax was negotiated (25 Jul 2021)
  * update configure to accept libtiff v4.2 and v4.3 (24 Jul 2021)
  * fix page handling "botch" if a job's first and previous attempts were on a proxy (20 Jul 2021)
  * fix data timeout for bitrates less than 14400 bps when non-zero scanline time (15 Jul 2021)
  * try to cope with T.38 invite stutter at beginning of send (15 Jul 2021)
  * decouple session logging from direct filesystem I/O (15 Jul 2021)
  * try to help receivers who may expect initial 1-bits to start high-speed data (8, 9 Jul, 4 Aug 2021)
  * improve tenacity of "persistent" ECM (26 Jun 2021)
  * maintain the same SSL Fax passcode during a single session (20 May 2021)
  * log detection of binary file transfer support in receivers (1 Apr 2021)
  * add support for SiLabs Si2417/Si2435 (5 Feb 2021)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648900800">- version 7.0.5
  * hylafax.diff removed - included in source
  * extend Class1RecvAbortOK = 0 timeout to 500 ms (4 Dec 2021)
  * cope with Si2435 V.34/V.8 connection glitch (17, 19 Nov 2021)
  * cope with spurious +FCERROR or other delayed messages from modem (26 Oct 2021)
  * avoid letting corrupt RTC signals lead to RTN (26 Oct 2021)
  * don't refer to DCN as an invalid response in error messages (20 Oct 2021)
  * handle TSI during procedural interrupt (19 Oct 2021)
  * do better with waiting on prologue frames from receiver (13 Oct 2021)
  * cope with echo of ERR (13 Oct 2021)
  * run ps2fax, pdf2fax, tiff2fax, pcl2fax coverters as fax user (12 Oct 2021)
  * attempt to cope with receivers who signal RTN in ECM Phase D (23 Sep 2021)
  * fix hfaxd build when LDAP libs are not present (23 Sep 2021)
  * handle PPR echo after fourth PPR (22 Sep 2021)
  * don't use CRP when waiting for CFR following training (15 Sep 2021)
  * attempt to cope with receivers which signal CFR after PPS (14 Sep 2021)
  * cope with senders who signal FTT in Phase D (10 Sep 2021)
  * fix problem with handling NSF/CSI/DIS frame after CTC/EOR (9 Sep 2021)
  * cope with senders who signal PPS without the PPS FCF (9 Sep 2021)
  * handle echo of PPR when expecting CTC/EOR (8 Sep 2021)
  * add failure messages for unspecified training failures (7 Sep 2021)
  * don't use CRP when waiting for CTR (7 Sep 2021)
  * handle echo of EOR, don't use CRP when waiting for ERR (7 Sep 2021)
  * repeat PIN if sender repeats post-page or partial-page message (7-8 Sep 2021)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1654344000">- Project and download links switched to https
  libtiff44.diff added for tiff 4.x compatibility</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1672056000">- version 7.0.6
  * add support for libtiff v4.4 (10 Jun 2022)
  * libtiff44.diff removed
  * cope with SSL Fax senders who skip Phase C (5 May 2022)
  * add ability to trace SSL Fax data reception (3 May 2022)
  * handle timeout OK response to +FRH=3 and +FRM=n (25 Apr 2022)
  * don't leave the modem waiting for a response when in SSL Fax (25 Apr 2022)
  * improve recovery from unexpected SSL Fax terminations during ECM (15, 18, 26 Apr 2022)
  * try to cope with false "no dialtone" results (4, 8 Apr 2022)
  * add initial support for SSL Fax Proxy servers (4, 23 Feb; 4, 19 Apr; 10, 24 Jun 2022)
  * buildrequirement for libssl added (Thanks Dimstar)</changelog>
</package>
<package pkgid="5a67ef0d002b1177074b5268d15398c8345643eeba322a4ac669368b925a941e" name="libfaxutil7_0_6" arch="s390x">
  <version epoch="0" ver="7.0.6" rel="bp154.2.3.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1546948800">- migrate from cron to systemd timers (boo#1115442)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1547640000">- Dependency on hylafax-hfaxd for timers added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1547812800">- faxgetty@ service removed from %pre section, as it is only a placeholder</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548244800">- Reduce boilerplate generated from %service_* by calling it just
  once.</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1563451200">- Version 7.0.0
  * add LDAP features for compatibility with ActiveDirectory (25 Mar-1 Apr 2019)
  * fix recovery after SSL Fax "accept failure" (18 Mar 2019)
  * add TextFormat overstrike option and disable by default (6 Feb 2019)
  * fix the page size of cover sheets returned via notify (8 Jan 2019)
  * fix or silence numerous compiler warnings (19, 22, 28 Dec 2018)
  * fix pagehandling updating after a proxy has been used (7-8 Dec 2018)
  * add faxmail stderr output of RFC2047 decoding results (5 Dec 2018)
  * fix faxmail handling of headers encoded with UTF-8 (4 Dec 2018)
  * fix faxmail handling of base64-encoded text parts (4 Dec 2018)
  * add SSL Fax support (9-26, 29 Nov; 11, 18, 25 Dec 2018; 2, 7, 23 Jan 2019)</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1574424000">- build fails with libtiff 4.1: pretend, that 4.1 is similar to 4.0</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1574424001">- Version 7.0.1
  * create a client timeout setting and change the default from 60 to
  3600 seconds (26 Sep 2019)
  * extend timeout for receiving ECM frames (21 Aug 2019)
  * fix timeout in Class 1 frame reception (5 Aug 2019)
  * improve Class 1 protocol handling when MaxRecvPages exceeded (31 Jul 2019)
  * fix ModemGroup limit default (11 Jul 2019)
  * fix recovery for SSL Fax write failures (6 Jun 2019)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1581681600">- Version 7.0.2
  * change FIXEDWIDTH default to better accommodate auto-rotation (13 Dec 2019)
  * prevent SSL_accept() from blocking (5 Dec 2019)
  * support libtiff v4.1 (5 Dec 2019)
  * fix ignoremodembusy feature broken by ModemGroup limits feature (16 Nov 2019)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1591704000">- fix for boo#1172731
  VUL-0: EMBARGOED: CVE-2020-8024: hylafax+: Problematic permissions allow
    escalation from uucp to other users
  * adjusted authorisation
  * adjusted pre*/post* snipplets</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1597147200">- version 7.0.3
  * add UseSSLFax feature in sendfax, sendfax.conf, hyla.conf, and JobControl
  (31 Jul 2020)
  * be more resilient in listening for the Phase C carrier (30 Jul 2020)
  * make sure to return to command mode if HDLC receive times out (29 Jul 2020)
  * make faxmail ignore boundaries on parts other than multiparts (29 Jul 2020)
  * don't attempt to write zero bytes of data to a TIFF (29 Jul 2020)
  * don't ever respond to CRP with CRP (28 Jul 2020)
  * secure setup.cache/setup.modem - CVE-2020-15397 (27, 30 Jul 2020)
  * reset frame counter when a sender retransmits PPS for a previously confirmed
  ECM block (26 Jul 2020)
  * scrutinize PPM before concluding that the sender missed our MCF (23 Jul 2020)
  * fix modem recovery after SSL Fax failure (22, 26 Jul 2020)
  * ignore echo of PPR, RTN, CRP (10, 13, 21 Jul 2020)
  * attempt to handle NSF/CSI/DIS in Class 1 sending Phase D (6 Jul 2020)
  * run scripts directly rather than invoking them via a shell for security
  hardening (3-5 Jul 2020)
  * add senderFumblesECM feature (3 Jul 2020)
  * add support for PIN/PIP/PRI-Q/PPS-PRI-Q signals, add senderConfusesPIN
  feature, and utilize PIN for rare conditions where it may be helpful
  (2, 6, 13-14 Jul 2020)
  * add senderConfusesRTN feature (25-26 Jun 2020)
  * add MissedPageHandling feature (24 Jun 2020)
  * use and handle CFR in Phase D to retransmit Phase C (16, 23 Jun 2020)
  * cope with hearing echo of RR, CTC during Class 1 sending (15-17 Jun 2020)
  * fix listening for retransmission of MPS/EOP/EOM if it was received
  corrupt on the first attempt (15 Jun 2020)
  * secure temporary directory creation for faxsetup, faxaddmodem, and
  probemodem - CVE-2020-15396 (13 Jun 2020)
  * don't use CRP when receiving PPS/PPM as some senders think
  we are sending MCF (12 Jun 2020)
  * add BR_SSLFAX to show SSL Fax in notify and faxinfo output (1 Jun 2020)
  * have faxinfo put units on non-standard page dimensions (28 May 2020)
  * improve error messages for JobHost connection errors (22 May 2020)
  * fix perpetual blocking of jobs when a job preparation fails,
  attempt to fix similar blocking problems for bad jobs in
  batches, and add "unblock" faxconfig feature (21 May 2020)
  * ignore TCF if we're receiving an SSL Fax (31 Jan 2020)
  * fixes for build on FreeBSD 12.1 (31 Jan - 3 Feb 2020)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1602244800">- rearrange files-section (boo#1172731)</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1611662400">- Fix TW build by pretending tiff 4.2 is as good enough as 4.{0,1}</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1620475200">- Fix TW build by pretending tiff 4.4 is as good enough as 4.{0,1}</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1626091200">- Add hylafax service and helper for use with firewalld, and
  explain the details in README.SUSE.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1632312000">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * hylafax-faxgetty@.service
  * hylafax-faxq.service
  * hylafax-faxqclean.service
  * hylafax-hfaxd.service
  * hylafax-usage.service</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1634558400">- version 7.0.4
  * README.SUSE renamed
  * hylafax.diff added for boo#1191571 (pre-correction)
  * Dependencies on systemd-services adjusted
  * retry training twice at the same bitrate unless FTT (26 Aug 2021)
  * add missing reason messages for session failures (21 Aug 2021)
  * stop attempts to send or receive signals if the call ended prematurely (16-19 Aug 2021)
  * add Class1HasRMHookIndication (16 Aug 2021)
  * don't attempt sending DCN if we're already on hook (15, 17 Aug 2021)
  * end session sooner if receiver hangs up immediately after TCF or during prologue (14 Aug 2021)
  * fix some behavior following frame reception timeouts (13 Aug 2021)
  * improve behavior if procedural interrupt fails (12 Aug 2021)
  * handle sender repeating RR after we transmit MCF (10 Aug 2021)
  * add session logging of receipt of CFR/FTT signals (3 Aug 2021)
  * cope with receipt of PPR following CTC (3 Aug 2021)
  * attempt to cope with NSF/CSI/DIS after PPS, CTR, ERR, RR and improve coping with
    the same after MPS/EOP/EOM (2, 12, 14, 18 Aug 2021)
  * identify DCN after PPS as a receiver abort (2 Aug 2021)
  * attempt to cope with receipt of CTR after sending PPS (2 Aug 2021)
  * remove use of deprecated libtiff integer types and "register" storage class specifier (25 Jul 2021)
  * don't employ senderFumblesECM if V.34-Fax was negotiated (25 Jul 2021)
  * update configure to accept libtiff v4.2 and v4.3 (24 Jul 2021)
  * fix page handling "botch" if a job's first and previous attempts were on a proxy (20 Jul 2021)
  * fix data timeout for bitrates less than 14400 bps when non-zero scanline time (15 Jul 2021)
  * try to cope with T.38 invite stutter at beginning of send (15 Jul 2021)
  * decouple session logging from direct filesystem I/O (15 Jul 2021)
  * try to help receivers who may expect initial 1-bits to start high-speed data (8, 9 Jul, 4 Aug 2021)
  * improve tenacity of "persistent" ECM (26 Jun 2021)
  * maintain the same SSL Fax passcode during a single session (20 May 2021)
  * log detection of binary file transfer support in receivers (1 Apr 2021)
  * add support for SiLabs Si2417/Si2435 (5 Feb 2021)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648900800">- version 7.0.5
  * hylafax.diff removed - included in source
  * extend Class1RecvAbortOK = 0 timeout to 500 ms (4 Dec 2021)
  * cope with Si2435 V.34/V.8 connection glitch (17, 19 Nov 2021)
  * cope with spurious +FCERROR or other delayed messages from modem (26 Oct 2021)
  * avoid letting corrupt RTC signals lead to RTN (26 Oct 2021)
  * don't refer to DCN as an invalid response in error messages (20 Oct 2021)
  * handle TSI during procedural interrupt (19 Oct 2021)
  * do better with waiting on prologue frames from receiver (13 Oct 2021)
  * cope with echo of ERR (13 Oct 2021)
  * run ps2fax, pdf2fax, tiff2fax, pcl2fax coverters as fax user (12 Oct 2021)
  * attempt to cope with receivers who signal RTN in ECM Phase D (23 Sep 2021)
  * fix hfaxd build when LDAP libs are not present (23 Sep 2021)
  * handle PPR echo after fourth PPR (22 Sep 2021)
  * don't use CRP when waiting for CFR following training (15 Sep 2021)
  * attempt to cope with receivers which signal CFR after PPS (14 Sep 2021)
  * cope with senders who signal FTT in Phase D (10 Sep 2021)
  * fix problem with handling NSF/CSI/DIS frame after CTC/EOR (9 Sep 2021)
  * cope with senders who signal PPS without the PPS FCF (9 Sep 2021)
  * handle echo of PPR when expecting CTC/EOR (8 Sep 2021)
  * add failure messages for unspecified training failures (7 Sep 2021)
  * don't use CRP when waiting for CTR (7 Sep 2021)
  * handle echo of EOR, don't use CRP when waiting for ERR (7 Sep 2021)
  * repeat PIN if sender repeats post-page or partial-page message (7-8 Sep 2021)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1654344000">- Project and download links switched to https
  libtiff44.diff added for tiff 4.x compatibility</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1672056000">- version 7.0.6
  * add support for libtiff v4.4 (10 Jun 2022)
  * libtiff44.diff removed
  * cope with SSL Fax senders who skip Phase C (5 May 2022)
  * add ability to trace SSL Fax data reception (3 May 2022)
  * handle timeout OK response to +FRH=3 and +FRM=n (25 Apr 2022)
  * don't leave the modem waiting for a response when in SSL Fax (25 Apr 2022)
  * improve recovery from unexpected SSL Fax terminations during ECM (15, 18, 26 Apr 2022)
  * try to cope with false "no dialtone" results (4, 8 Apr 2022)
  * add initial support for SSL Fax Proxy servers (4, 23 Feb; 4, 19 Apr; 10, 24 Jun 2022)
  * buildrequirement for libssl added (Thanks Dimstar)</changelog>
</package>
<package pkgid="e7dbf3bc5675a97bd8cf6ee2ff207b15c65cfb5df840e0d2056dc2a1f910344a" name="libfaxutil7_0_6" arch="x86_64">
  <version epoch="0" ver="7.0.6" rel="bp154.2.3.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1546948800">- migrate from cron to systemd timers (boo#1115442)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1547640000">- Dependency on hylafax-hfaxd for timers added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1547812800">- faxgetty@ service removed from %pre section, as it is only a placeholder</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548244800">- Reduce boilerplate generated from %service_* by calling it just
  once.</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1563451200">- Version 7.0.0
  * add LDAP features for compatibility with ActiveDirectory (25 Mar-1 Apr 2019)
  * fix recovery after SSL Fax "accept failure" (18 Mar 2019)
  * add TextFormat overstrike option and disable by default (6 Feb 2019)
  * fix the page size of cover sheets returned via notify (8 Jan 2019)
  * fix or silence numerous compiler warnings (19, 22, 28 Dec 2018)
  * fix pagehandling updating after a proxy has been used (7-8 Dec 2018)
  * add faxmail stderr output of RFC2047 decoding results (5 Dec 2018)
  * fix faxmail handling of headers encoded with UTF-8 (4 Dec 2018)
  * fix faxmail handling of base64-encoded text parts (4 Dec 2018)
  * add SSL Fax support (9-26, 29 Nov; 11, 18, 25 Dec 2018; 2, 7, 23 Jan 2019)</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1574424000">- build fails with libtiff 4.1: pretend, that 4.1 is similar to 4.0</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1574424001">- Version 7.0.1
  * create a client timeout setting and change the default from 60 to
  3600 seconds (26 Sep 2019)
  * extend timeout for receiving ECM frames (21 Aug 2019)
  * fix timeout in Class 1 frame reception (5 Aug 2019)
  * improve Class 1 protocol handling when MaxRecvPages exceeded (31 Jul 2019)
  * fix ModemGroup limit default (11 Jul 2019)
  * fix recovery for SSL Fax write failures (6 Jun 2019)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1581681600">- Version 7.0.2
  * change FIXEDWIDTH default to better accommodate auto-rotation (13 Dec 2019)
  * prevent SSL_accept() from blocking (5 Dec 2019)
  * support libtiff v4.1 (5 Dec 2019)
  * fix ignoremodembusy feature broken by ModemGroup limits feature (16 Nov 2019)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1591704000">- fix for boo#1172731
  VUL-0: EMBARGOED: CVE-2020-8024: hylafax+: Problematic permissions allow
    escalation from uucp to other users
  * adjusted authorisation
  * adjusted pre*/post* snipplets</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1597147200">- version 7.0.3
  * add UseSSLFax feature in sendfax, sendfax.conf, hyla.conf, and JobControl
  (31 Jul 2020)
  * be more resilient in listening for the Phase C carrier (30 Jul 2020)
  * make sure to return to command mode if HDLC receive times out (29 Jul 2020)
  * make faxmail ignore boundaries on parts other than multiparts (29 Jul 2020)
  * don't attempt to write zero bytes of data to a TIFF (29 Jul 2020)
  * don't ever respond to CRP with CRP (28 Jul 2020)
  * secure setup.cache/setup.modem - CVE-2020-15397 (27, 30 Jul 2020)
  * reset frame counter when a sender retransmits PPS for a previously confirmed
  ECM block (26 Jul 2020)
  * scrutinize PPM before concluding that the sender missed our MCF (23 Jul 2020)
  * fix modem recovery after SSL Fax failure (22, 26 Jul 2020)
  * ignore echo of PPR, RTN, CRP (10, 13, 21 Jul 2020)
  * attempt to handle NSF/CSI/DIS in Class 1 sending Phase D (6 Jul 2020)
  * run scripts directly rather than invoking them via a shell for security
  hardening (3-5 Jul 2020)
  * add senderFumblesECM feature (3 Jul 2020)
  * add support for PIN/PIP/PRI-Q/PPS-PRI-Q signals, add senderConfusesPIN
  feature, and utilize PIN for rare conditions where it may be helpful
  (2, 6, 13-14 Jul 2020)
  * add senderConfusesRTN feature (25-26 Jun 2020)
  * add MissedPageHandling feature (24 Jun 2020)
  * use and handle CFR in Phase D to retransmit Phase C (16, 23 Jun 2020)
  * cope with hearing echo of RR, CTC during Class 1 sending (15-17 Jun 2020)
  * fix listening for retransmission of MPS/EOP/EOM if it was received
  corrupt on the first attempt (15 Jun 2020)
  * secure temporary directory creation for faxsetup, faxaddmodem, and
  probemodem - CVE-2020-15396 (13 Jun 2020)
  * don't use CRP when receiving PPS/PPM as some senders think
  we are sending MCF (12 Jun 2020)
  * add BR_SSLFAX to show SSL Fax in notify and faxinfo output (1 Jun 2020)
  * have faxinfo put units on non-standard page dimensions (28 May 2020)
  * improve error messages for JobHost connection errors (22 May 2020)
  * fix perpetual blocking of jobs when a job preparation fails,
  attempt to fix similar blocking problems for bad jobs in
  batches, and add "unblock" faxconfig feature (21 May 2020)
  * ignore TCF if we're receiving an SSL Fax (31 Jan 2020)
  * fixes for build on FreeBSD 12.1 (31 Jan - 3 Feb 2020)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1602244800">- rearrange files-section (boo#1172731)</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1611662400">- Fix TW build by pretending tiff 4.2 is as good enough as 4.{0,1}</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1620475200">- Fix TW build by pretending tiff 4.4 is as good enough as 4.{0,1}</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1626091200">- Add hylafax service and helper for use with firewalld, and
  explain the details in README.SUSE.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1632312000">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * hylafax-faxgetty@.service
  * hylafax-faxq.service
  * hylafax-faxqclean.service
  * hylafax-hfaxd.service
  * hylafax-usage.service</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1634558400">- version 7.0.4
  * README.SUSE renamed
  * hylafax.diff added for boo#1191571 (pre-correction)
  * Dependencies on systemd-services adjusted
  * retry training twice at the same bitrate unless FTT (26 Aug 2021)
  * add missing reason messages for session failures (21 Aug 2021)
  * stop attempts to send or receive signals if the call ended prematurely (16-19 Aug 2021)
  * add Class1HasRMHookIndication (16 Aug 2021)
  * don't attempt sending DCN if we're already on hook (15, 17 Aug 2021)
  * end session sooner if receiver hangs up immediately after TCF or during prologue (14 Aug 2021)
  * fix some behavior following frame reception timeouts (13 Aug 2021)
  * improve behavior if procedural interrupt fails (12 Aug 2021)
  * handle sender repeating RR after we transmit MCF (10 Aug 2021)
  * add session logging of receipt of CFR/FTT signals (3 Aug 2021)
  * cope with receipt of PPR following CTC (3 Aug 2021)
  * attempt to cope with NSF/CSI/DIS after PPS, CTR, ERR, RR and improve coping with
    the same after MPS/EOP/EOM (2, 12, 14, 18 Aug 2021)
  * identify DCN after PPS as a receiver abort (2 Aug 2021)
  * attempt to cope with receipt of CTR after sending PPS (2 Aug 2021)
  * remove use of deprecated libtiff integer types and "register" storage class specifier (25 Jul 2021)
  * don't employ senderFumblesECM if V.34-Fax was negotiated (25 Jul 2021)
  * update configure to accept libtiff v4.2 and v4.3 (24 Jul 2021)
  * fix page handling "botch" if a job's first and previous attempts were on a proxy (20 Jul 2021)
  * fix data timeout for bitrates less than 14400 bps when non-zero scanline time (15 Jul 2021)
  * try to cope with T.38 invite stutter at beginning of send (15 Jul 2021)
  * decouple session logging from direct filesystem I/O (15 Jul 2021)
  * try to help receivers who may expect initial 1-bits to start high-speed data (8, 9 Jul, 4 Aug 2021)
  * improve tenacity of "persistent" ECM (26 Jun 2021)
  * maintain the same SSL Fax passcode during a single session (20 May 2021)
  * log detection of binary file transfer support in receivers (1 Apr 2021)
  * add support for SiLabs Si2417/Si2435 (5 Feb 2021)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648900800">- version 7.0.5
  * hylafax.diff removed - included in source
  * extend Class1RecvAbortOK = 0 timeout to 500 ms (4 Dec 2021)
  * cope with Si2435 V.34/V.8 connection glitch (17, 19 Nov 2021)
  * cope with spurious +FCERROR or other delayed messages from modem (26 Oct 2021)
  * avoid letting corrupt RTC signals lead to RTN (26 Oct 2021)
  * don't refer to DCN as an invalid response in error messages (20 Oct 2021)
  * handle TSI during procedural interrupt (19 Oct 2021)
  * do better with waiting on prologue frames from receiver (13 Oct 2021)
  * cope with echo of ERR (13 Oct 2021)
  * run ps2fax, pdf2fax, tiff2fax, pcl2fax coverters as fax user (12 Oct 2021)
  * attempt to cope with receivers who signal RTN in ECM Phase D (23 Sep 2021)
  * fix hfaxd build when LDAP libs are not present (23 Sep 2021)
  * handle PPR echo after fourth PPR (22 Sep 2021)
  * don't use CRP when waiting for CFR following training (15 Sep 2021)
  * attempt to cope with receivers which signal CFR after PPS (14 Sep 2021)
  * cope with senders who signal FTT in Phase D (10 Sep 2021)
  * fix problem with handling NSF/CSI/DIS frame after CTC/EOR (9 Sep 2021)
  * cope with senders who signal PPS without the PPS FCF (9 Sep 2021)
  * handle echo of PPR when expecting CTC/EOR (8 Sep 2021)
  * add failure messages for unspecified training failures (7 Sep 2021)
  * don't use CRP when waiting for CTR (7 Sep 2021)
  * handle echo of EOR, don't use CRP when waiting for ERR (7 Sep 2021)
  * repeat PIN if sender repeats post-page or partial-page message (7-8 Sep 2021)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1654344000">- Project and download links switched to https
  libtiff44.diff added for tiff 4.x compatibility</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1672056000">- version 7.0.6
  * add support for libtiff v4.4 (10 Jun 2022)
  * libtiff44.diff removed
  * cope with SSL Fax senders who skip Phase C (5 May 2022)
  * add ability to trace SSL Fax data reception (3 May 2022)
  * handle timeout OK response to +FRH=3 and +FRM=n (25 Apr 2022)
  * don't leave the modem waiting for a response when in SSL Fax (25 Apr 2022)
  * improve recovery from unexpected SSL Fax terminations during ECM (15, 18, 26 Apr 2022)
  * try to cope with false "no dialtone" results (4, 8 Apr 2022)
  * add initial support for SSL Fax Proxy servers (4, 23 Feb; 4, 19 Apr; 10, 24 Jun 2022)
  * buildrequirement for libssl added (Thanks Dimstar)</changelog>
</package>
<package pkgid="a7ca6de138b474c7d029729dc024dcbba157370c8004ecd99ec8583d41c997b8" name="libfaxutil7_0_7" arch="aarch64">
  <version epoch="0" ver="7.0.7" rel="bp154.2.6.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1547812800">- faxgetty@ service removed from %pre section, as it is only a placeholder</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548244800">- Reduce boilerplate generated from %service_* by calling it just
  once.</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1563451200">- Version 7.0.0
  * add LDAP features for compatibility with ActiveDirectory (25 Mar-1 Apr 2019)
  * fix recovery after SSL Fax "accept failure" (18 Mar 2019)
  * add TextFormat overstrike option and disable by default (6 Feb 2019)
  * fix the page size of cover sheets returned via notify (8 Jan 2019)
  * fix or silence numerous compiler warnings (19, 22, 28 Dec 2018)
  * fix pagehandling updating after a proxy has been used (7-8 Dec 2018)
  * add faxmail stderr output of RFC2047 decoding results (5 Dec 2018)
  * fix faxmail handling of headers encoded with UTF-8 (4 Dec 2018)
  * fix faxmail handling of base64-encoded text parts (4 Dec 2018)
  * add SSL Fax support (9-26, 29 Nov; 11, 18, 25 Dec 2018; 2, 7, 23 Jan 2019)</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1574424000">- build fails with libtiff 4.1: pretend, that 4.1 is similar to 4.0</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1574424001">- Version 7.0.1
  * create a client timeout setting and change the default from 60 to
  3600 seconds (26 Sep 2019)
  * extend timeout for receiving ECM frames (21 Aug 2019)
  * fix timeout in Class 1 frame reception (5 Aug 2019)
  * improve Class 1 protocol handling when MaxRecvPages exceeded (31 Jul 2019)
  * fix ModemGroup limit default (11 Jul 2019)
  * fix recovery for SSL Fax write failures (6 Jun 2019)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1581681600">- Version 7.0.2
  * change FIXEDWIDTH default to better accommodate auto-rotation (13 Dec 2019)
  * prevent SSL_accept() from blocking (5 Dec 2019)
  * support libtiff v4.1 (5 Dec 2019)
  * fix ignoremodembusy feature broken by ModemGroup limits feature (16 Nov 2019)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1591704000">- fix for boo#1172731
  VUL-0: EMBARGOED: CVE-2020-8024: hylafax+: Problematic permissions allow
    escalation from uucp to other users
  * adjusted authorisation
  * adjusted pre*/post* snipplets</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1597147200">- version 7.0.3
  * add UseSSLFax feature in sendfax, sendfax.conf, hyla.conf, and JobControl
  (31 Jul 2020)
  * be more resilient in listening for the Phase C carrier (30 Jul 2020)
  * make sure to return to command mode if HDLC receive times out (29 Jul 2020)
  * make faxmail ignore boundaries on parts other than multiparts (29 Jul 2020)
  * don't attempt to write zero bytes of data to a TIFF (29 Jul 2020)
  * don't ever respond to CRP with CRP (28 Jul 2020)
  * secure setup.cache/setup.modem - CVE-2020-15397 (27, 30 Jul 2020)
  * reset frame counter when a sender retransmits PPS for a previously confirmed
  ECM block (26 Jul 2020)
  * scrutinize PPM before concluding that the sender missed our MCF (23 Jul 2020)
  * fix modem recovery after SSL Fax failure (22, 26 Jul 2020)
  * ignore echo of PPR, RTN, CRP (10, 13, 21 Jul 2020)
  * attempt to handle NSF/CSI/DIS in Class 1 sending Phase D (6 Jul 2020)
  * run scripts directly rather than invoking them via a shell for security
  hardening (3-5 Jul 2020)
  * add senderFumblesECM feature (3 Jul 2020)
  * add support for PIN/PIP/PRI-Q/PPS-PRI-Q signals, add senderConfusesPIN
  feature, and utilize PIN for rare conditions where it may be helpful
  (2, 6, 13-14 Jul 2020)
  * add senderConfusesRTN feature (25-26 Jun 2020)
  * add MissedPageHandling feature (24 Jun 2020)
  * use and handle CFR in Phase D to retransmit Phase C (16, 23 Jun 2020)
  * cope with hearing echo of RR, CTC during Class 1 sending (15-17 Jun 2020)
  * fix listening for retransmission of MPS/EOP/EOM if it was received
  corrupt on the first attempt (15 Jun 2020)
  * secure temporary directory creation for faxsetup, faxaddmodem, and
  probemodem - CVE-2020-15396 (13 Jun 2020)
  * don't use CRP when receiving PPS/PPM as some senders think
  we are sending MCF (12 Jun 2020)
  * add BR_SSLFAX to show SSL Fax in notify and faxinfo output (1 Jun 2020)
  * have faxinfo put units on non-standard page dimensions (28 May 2020)
  * improve error messages for JobHost connection errors (22 May 2020)
  * fix perpetual blocking of jobs when a job preparation fails,
  attempt to fix similar blocking problems for bad jobs in
  batches, and add "unblock" faxconfig feature (21 May 2020)
  * ignore TCF if we're receiving an SSL Fax (31 Jan 2020)
  * fixes for build on FreeBSD 12.1 (31 Jan - 3 Feb 2020)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1602244800">- rearrange files-section (boo#1172731)</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1611662400">- Fix TW build by pretending tiff 4.2 is as good enough as 4.{0,1}</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1620475200">- Fix TW build by pretending tiff 4.4 is as good enough as 4.{0,1}</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1626091200">- Add hylafax service and helper for use with firewalld, and
  explain the details in README.SUSE.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1632312000">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * hylafax-faxgetty@.service
  * hylafax-faxq.service
  * hylafax-faxqclean.service
  * hylafax-hfaxd.service
  * hylafax-usage.service</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1634558400">- version 7.0.4
  * README.SUSE renamed
  * hylafax.diff added for boo#1191571 (pre-correction)
  * Dependencies on systemd-services adjusted
  * retry training twice at the same bitrate unless FTT (26 Aug 2021)
  * add missing reason messages for session failures (21 Aug 2021)
  * stop attempts to send or receive signals if the call ended prematurely (16-19 Aug 2021)
  * add Class1HasRMHookIndication (16 Aug 2021)
  * don't attempt sending DCN if we're already on hook (15, 17 Aug 2021)
  * end session sooner if receiver hangs up immediately after TCF or during prologue (14 Aug 2021)
  * fix some behavior following frame reception timeouts (13 Aug 2021)
  * improve behavior if procedural interrupt fails (12 Aug 2021)
  * handle sender repeating RR after we transmit MCF (10 Aug 2021)
  * add session logging of receipt of CFR/FTT signals (3 Aug 2021)
  * cope with receipt of PPR following CTC (3 Aug 2021)
  * attempt to cope with NSF/CSI/DIS after PPS, CTR, ERR, RR and improve coping with
    the same after MPS/EOP/EOM (2, 12, 14, 18 Aug 2021)
  * identify DCN after PPS as a receiver abort (2 Aug 2021)
  * attempt to cope with receipt of CTR after sending PPS (2 Aug 2021)
  * remove use of deprecated libtiff integer types and "register" storage class specifier (25 Jul 2021)
  * don't employ senderFumblesECM if V.34-Fax was negotiated (25 Jul 2021)
  * update configure to accept libtiff v4.2 and v4.3 (24 Jul 2021)
  * fix page handling "botch" if a job's first and previous attempts were on a proxy (20 Jul 2021)
  * fix data timeout for bitrates less than 14400 bps when non-zero scanline time (15 Jul 2021)
  * try to cope with T.38 invite stutter at beginning of send (15 Jul 2021)
  * decouple session logging from direct filesystem I/O (15 Jul 2021)
  * try to help receivers who may expect initial 1-bits to start high-speed data (8, 9 Jul, 4 Aug 2021)
  * improve tenacity of "persistent" ECM (26 Jun 2021)
  * maintain the same SSL Fax passcode during a single session (20 May 2021)
  * log detection of binary file transfer support in receivers (1 Apr 2021)
  * add support for SiLabs Si2417/Si2435 (5 Feb 2021)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648900800">- version 7.0.5
  * hylafax.diff removed - included in source
  * extend Class1RecvAbortOK = 0 timeout to 500 ms (4 Dec 2021)
  * cope with Si2435 V.34/V.8 connection glitch (17, 19 Nov 2021)
  * cope with spurious +FCERROR or other delayed messages from modem (26 Oct 2021)
  * avoid letting corrupt RTC signals lead to RTN (26 Oct 2021)
  * don't refer to DCN as an invalid response in error messages (20 Oct 2021)
  * handle TSI during procedural interrupt (19 Oct 2021)
  * do better with waiting on prologue frames from receiver (13 Oct 2021)
  * cope with echo of ERR (13 Oct 2021)
  * run ps2fax, pdf2fax, tiff2fax, pcl2fax coverters as fax user (12 Oct 2021)
  * attempt to cope with receivers who signal RTN in ECM Phase D (23 Sep 2021)
  * fix hfaxd build when LDAP libs are not present (23 Sep 2021)
  * handle PPR echo after fourth PPR (22 Sep 2021)
  * don't use CRP when waiting for CFR following training (15 Sep 2021)
  * attempt to cope with receivers which signal CFR after PPS (14 Sep 2021)
  * cope with senders who signal FTT in Phase D (10 Sep 2021)
  * fix problem with handling NSF/CSI/DIS frame after CTC/EOR (9 Sep 2021)
  * cope with senders who signal PPS without the PPS FCF (9 Sep 2021)
  * handle echo of PPR when expecting CTC/EOR (8 Sep 2021)
  * add failure messages for unspecified training failures (7 Sep 2021)
  * don't use CRP when waiting for CTR (7 Sep 2021)
  * handle echo of EOR, don't use CRP when waiting for ERR (7 Sep 2021)
  * repeat PIN if sender repeats post-page or partial-page message (7-8 Sep 2021)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1654344000">- Project and download links switched to https
  libtiff44.diff added for tiff 4.x compatibility</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1672056000">- version 7.0.6
  * add support for libtiff v4.4 (10 Jun 2022)
  * libtiff44.diff removed
  * cope with SSL Fax senders who skip Phase C (5 May 2022)
  * add ability to trace SSL Fax data reception (3 May 2022)
  * handle timeout OK response to +FRH=3 and +FRM=n (25 Apr 2022)
  * don't leave the modem waiting for a response when in SSL Fax (25 Apr 2022)
  * improve recovery from unexpected SSL Fax terminations during ECM (15, 18, 26 Apr 2022)
  * try to cope with false "no dialtone" results (4, 8 Apr 2022)
  * add initial support for SSL Fax Proxy servers (4, 23 Feb; 4, 19 Apr; 10, 24 Jun 2022)
  * buildrequirement for libssl added (Thanks Dimstar)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1673524800">- tiff_450.diff added
  updated to trunk r2695 for tiff 4.5 support - See CHANGES for details</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1674561600">- version 7.0.7
  * tiff_450.diff removed
  * constrain job priority to 0-255 (20 Jan 2023)
  * add support for libtiff v4.5.0 (4-5 Jan 2023)
  * add some Si2435 configuration considerations (27 Dec 2022, 20 Jan 2023)
  * if Class1RecvAbortOK is 0 then don't bother with the CAN byte at all (31 Oct 2022)
  * check that the modem isn't trying to deliver a message when we're trying to send
    binary data to it (16-17 Oct 2022)
  * prevent inherited values from creeping into subsequent xferfaxlog data (26 Aug 2022)
  * add external reference feature in dialrules (18 Aug 2022)</changelog>
</package>
<package pkgid="d6e1a78536e6800d5b0e02d9c12954789ad54c53befd338f57b2b11c739243ae" name="libfaxutil7_0_7" arch="i586">
  <version epoch="0" ver="7.0.7" rel="bp154.2.6.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1547812800">- faxgetty@ service removed from %pre section, as it is only a placeholder</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548244800">- Reduce boilerplate generated from %service_* by calling it just
  once.</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1563451200">- Version 7.0.0
  * add LDAP features for compatibility with ActiveDirectory (25 Mar-1 Apr 2019)
  * fix recovery after SSL Fax "accept failure" (18 Mar 2019)
  * add TextFormat overstrike option and disable by default (6 Feb 2019)
  * fix the page size of cover sheets returned via notify (8 Jan 2019)
  * fix or silence numerous compiler warnings (19, 22, 28 Dec 2018)
  * fix pagehandling updating after a proxy has been used (7-8 Dec 2018)
  * add faxmail stderr output of RFC2047 decoding results (5 Dec 2018)
  * fix faxmail handling of headers encoded with UTF-8 (4 Dec 2018)
  * fix faxmail handling of base64-encoded text parts (4 Dec 2018)
  * add SSL Fax support (9-26, 29 Nov; 11, 18, 25 Dec 2018; 2, 7, 23 Jan 2019)</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1574424000">- build fails with libtiff 4.1: pretend, that 4.1 is similar to 4.0</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1574424001">- Version 7.0.1
  * create a client timeout setting and change the default from 60 to
  3600 seconds (26 Sep 2019)
  * extend timeout for receiving ECM frames (21 Aug 2019)
  * fix timeout in Class 1 frame reception (5 Aug 2019)
  * improve Class 1 protocol handling when MaxRecvPages exceeded (31 Jul 2019)
  * fix ModemGroup limit default (11 Jul 2019)
  * fix recovery for SSL Fax write failures (6 Jun 2019)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1581681600">- Version 7.0.2
  * change FIXEDWIDTH default to better accommodate auto-rotation (13 Dec 2019)
  * prevent SSL_accept() from blocking (5 Dec 2019)
  * support libtiff v4.1 (5 Dec 2019)
  * fix ignoremodembusy feature broken by ModemGroup limits feature (16 Nov 2019)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1591704000">- fix for boo#1172731
  VUL-0: EMBARGOED: CVE-2020-8024: hylafax+: Problematic permissions allow
    escalation from uucp to other users
  * adjusted authorisation
  * adjusted pre*/post* snipplets</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1597147200">- version 7.0.3
  * add UseSSLFax feature in sendfax, sendfax.conf, hyla.conf, and JobControl
  (31 Jul 2020)
  * be more resilient in listening for the Phase C carrier (30 Jul 2020)
  * make sure to return to command mode if HDLC receive times out (29 Jul 2020)
  * make faxmail ignore boundaries on parts other than multiparts (29 Jul 2020)
  * don't attempt to write zero bytes of data to a TIFF (29 Jul 2020)
  * don't ever respond to CRP with CRP (28 Jul 2020)
  * secure setup.cache/setup.modem - CVE-2020-15397 (27, 30 Jul 2020)
  * reset frame counter when a sender retransmits PPS for a previously confirmed
  ECM block (26 Jul 2020)
  * scrutinize PPM before concluding that the sender missed our MCF (23 Jul 2020)
  * fix modem recovery after SSL Fax failure (22, 26 Jul 2020)
  * ignore echo of PPR, RTN, CRP (10, 13, 21 Jul 2020)
  * attempt to handle NSF/CSI/DIS in Class 1 sending Phase D (6 Jul 2020)
  * run scripts directly rather than invoking them via a shell for security
  hardening (3-5 Jul 2020)
  * add senderFumblesECM feature (3 Jul 2020)
  * add support for PIN/PIP/PRI-Q/PPS-PRI-Q signals, add senderConfusesPIN
  feature, and utilize PIN for rare conditions where it may be helpful
  (2, 6, 13-14 Jul 2020)
  * add senderConfusesRTN feature (25-26 Jun 2020)
  * add MissedPageHandling feature (24 Jun 2020)
  * use and handle CFR in Phase D to retransmit Phase C (16, 23 Jun 2020)
  * cope with hearing echo of RR, CTC during Class 1 sending (15-17 Jun 2020)
  * fix listening for retransmission of MPS/EOP/EOM if it was received
  corrupt on the first attempt (15 Jun 2020)
  * secure temporary directory creation for faxsetup, faxaddmodem, and
  probemodem - CVE-2020-15396 (13 Jun 2020)
  * don't use CRP when receiving PPS/PPM as some senders think
  we are sending MCF (12 Jun 2020)
  * add BR_SSLFAX to show SSL Fax in notify and faxinfo output (1 Jun 2020)
  * have faxinfo put units on non-standard page dimensions (28 May 2020)
  * improve error messages for JobHost connection errors (22 May 2020)
  * fix perpetual blocking of jobs when a job preparation fails,
  attempt to fix similar blocking problems for bad jobs in
  batches, and add "unblock" faxconfig feature (21 May 2020)
  * ignore TCF if we're receiving an SSL Fax (31 Jan 2020)
  * fixes for build on FreeBSD 12.1 (31 Jan - 3 Feb 2020)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1602244800">- rearrange files-section (boo#1172731)</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1611662400">- Fix TW build by pretending tiff 4.2 is as good enough as 4.{0,1}</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1620475200">- Fix TW build by pretending tiff 4.4 is as good enough as 4.{0,1}</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1626091200">- Add hylafax service and helper for use with firewalld, and
  explain the details in README.SUSE.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1632312000">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * hylafax-faxgetty@.service
  * hylafax-faxq.service
  * hylafax-faxqclean.service
  * hylafax-hfaxd.service
  * hylafax-usage.service</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1634558400">- version 7.0.4
  * README.SUSE renamed
  * hylafax.diff added for boo#1191571 (pre-correction)
  * Dependencies on systemd-services adjusted
  * retry training twice at the same bitrate unless FTT (26 Aug 2021)
  * add missing reason messages for session failures (21 Aug 2021)
  * stop attempts to send or receive signals if the call ended prematurely (16-19 Aug 2021)
  * add Class1HasRMHookIndication (16 Aug 2021)
  * don't attempt sending DCN if we're already on hook (15, 17 Aug 2021)
  * end session sooner if receiver hangs up immediately after TCF or during prologue (14 Aug 2021)
  * fix some behavior following frame reception timeouts (13 Aug 2021)
  * improve behavior if procedural interrupt fails (12 Aug 2021)
  * handle sender repeating RR after we transmit MCF (10 Aug 2021)
  * add session logging of receipt of CFR/FTT signals (3 Aug 2021)
  * cope with receipt of PPR following CTC (3 Aug 2021)
  * attempt to cope with NSF/CSI/DIS after PPS, CTR, ERR, RR and improve coping with
    the same after MPS/EOP/EOM (2, 12, 14, 18 Aug 2021)
  * identify DCN after PPS as a receiver abort (2 Aug 2021)
  * attempt to cope with receipt of CTR after sending PPS (2 Aug 2021)
  * remove use of deprecated libtiff integer types and "register" storage class specifier (25 Jul 2021)
  * don't employ senderFumblesECM if V.34-Fax was negotiated (25 Jul 2021)
  * update configure to accept libtiff v4.2 and v4.3 (24 Jul 2021)
  * fix page handling "botch" if a job's first and previous attempts were on a proxy (20 Jul 2021)
  * fix data timeout for bitrates less than 14400 bps when non-zero scanline time (15 Jul 2021)
  * try to cope with T.38 invite stutter at beginning of send (15 Jul 2021)
  * decouple session logging from direct filesystem I/O (15 Jul 2021)
  * try to help receivers who may expect initial 1-bits to start high-speed data (8, 9 Jul, 4 Aug 2021)
  * improve tenacity of "persistent" ECM (26 Jun 2021)
  * maintain the same SSL Fax passcode during a single session (20 May 2021)
  * log detection of binary file transfer support in receivers (1 Apr 2021)
  * add support for SiLabs Si2417/Si2435 (5 Feb 2021)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648900800">- version 7.0.5
  * hylafax.diff removed - included in source
  * extend Class1RecvAbortOK = 0 timeout to 500 ms (4 Dec 2021)
  * cope with Si2435 V.34/V.8 connection glitch (17, 19 Nov 2021)
  * cope with spurious +FCERROR or other delayed messages from modem (26 Oct 2021)
  * avoid letting corrupt RTC signals lead to RTN (26 Oct 2021)
  * don't refer to DCN as an invalid response in error messages (20 Oct 2021)
  * handle TSI during procedural interrupt (19 Oct 2021)
  * do better with waiting on prologue frames from receiver (13 Oct 2021)
  * cope with echo of ERR (13 Oct 2021)
  * run ps2fax, pdf2fax, tiff2fax, pcl2fax coverters as fax user (12 Oct 2021)
  * attempt to cope with receivers who signal RTN in ECM Phase D (23 Sep 2021)
  * fix hfaxd build when LDAP libs are not present (23 Sep 2021)
  * handle PPR echo after fourth PPR (22 Sep 2021)
  * don't use CRP when waiting for CFR following training (15 Sep 2021)
  * attempt to cope with receivers which signal CFR after PPS (14 Sep 2021)
  * cope with senders who signal FTT in Phase D (10 Sep 2021)
  * fix problem with handling NSF/CSI/DIS frame after CTC/EOR (9 Sep 2021)
  * cope with senders who signal PPS without the PPS FCF (9 Sep 2021)
  * handle echo of PPR when expecting CTC/EOR (8 Sep 2021)
  * add failure messages for unspecified training failures (7 Sep 2021)
  * don't use CRP when waiting for CTR (7 Sep 2021)
  * handle echo of EOR, don't use CRP when waiting for ERR (7 Sep 2021)
  * repeat PIN if sender repeats post-page or partial-page message (7-8 Sep 2021)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1654344000">- Project and download links switched to https
  libtiff44.diff added for tiff 4.x compatibility</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1672056000">- version 7.0.6
  * add support for libtiff v4.4 (10 Jun 2022)
  * libtiff44.diff removed
  * cope with SSL Fax senders who skip Phase C (5 May 2022)
  * add ability to trace SSL Fax data reception (3 May 2022)
  * handle timeout OK response to +FRH=3 and +FRM=n (25 Apr 2022)
  * don't leave the modem waiting for a response when in SSL Fax (25 Apr 2022)
  * improve recovery from unexpected SSL Fax terminations during ECM (15, 18, 26 Apr 2022)
  * try to cope with false "no dialtone" results (4, 8 Apr 2022)
  * add initial support for SSL Fax Proxy servers (4, 23 Feb; 4, 19 Apr; 10, 24 Jun 2022)
  * buildrequirement for libssl added (Thanks Dimstar)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1673524800">- tiff_450.diff added
  updated to trunk r2695 for tiff 4.5 support - See CHANGES for details</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1674561600">- version 7.0.7
  * tiff_450.diff removed
  * constrain job priority to 0-255 (20 Jan 2023)
  * add support for libtiff v4.5.0 (4-5 Jan 2023)
  * add some Si2435 configuration considerations (27 Dec 2022, 20 Jan 2023)
  * if Class1RecvAbortOK is 0 then don't bother with the CAN byte at all (31 Oct 2022)
  * check that the modem isn't trying to deliver a message when we're trying to send
    binary data to it (16-17 Oct 2022)
  * prevent inherited values from creeping into subsequent xferfaxlog data (26 Aug 2022)
  * add external reference feature in dialrules (18 Aug 2022)</changelog>
</package>
<package pkgid="e2922e8049a6410b4bf8b4c95bfa0112821254ce3be215150ed972400d535c28" name="libfaxutil7_0_7" arch="ppc64le">
  <version epoch="0" ver="7.0.7" rel="bp154.2.6.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1547812800">- faxgetty@ service removed from %pre section, as it is only a placeholder</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548244800">- Reduce boilerplate generated from %service_* by calling it just
  once.</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1563451200">- Version 7.0.0
  * add LDAP features for compatibility with ActiveDirectory (25 Mar-1 Apr 2019)
  * fix recovery after SSL Fax "accept failure" (18 Mar 2019)
  * add TextFormat overstrike option and disable by default (6 Feb 2019)
  * fix the page size of cover sheets returned via notify (8 Jan 2019)
  * fix or silence numerous compiler warnings (19, 22, 28 Dec 2018)
  * fix pagehandling updating after a proxy has been used (7-8 Dec 2018)
  * add faxmail stderr output of RFC2047 decoding results (5 Dec 2018)
  * fix faxmail handling of headers encoded with UTF-8 (4 Dec 2018)
  * fix faxmail handling of base64-encoded text parts (4 Dec 2018)
  * add SSL Fax support (9-26, 29 Nov; 11, 18, 25 Dec 2018; 2, 7, 23 Jan 2019)</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1574424000">- build fails with libtiff 4.1: pretend, that 4.1 is similar to 4.0</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1574424001">- Version 7.0.1
  * create a client timeout setting and change the default from 60 to
  3600 seconds (26 Sep 2019)
  * extend timeout for receiving ECM frames (21 Aug 2019)
  * fix timeout in Class 1 frame reception (5 Aug 2019)
  * improve Class 1 protocol handling when MaxRecvPages exceeded (31 Jul 2019)
  * fix ModemGroup limit default (11 Jul 2019)
  * fix recovery for SSL Fax write failures (6 Jun 2019)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1581681600">- Version 7.0.2
  * change FIXEDWIDTH default to better accommodate auto-rotation (13 Dec 2019)
  * prevent SSL_accept() from blocking (5 Dec 2019)
  * support libtiff v4.1 (5 Dec 2019)
  * fix ignoremodembusy feature broken by ModemGroup limits feature (16 Nov 2019)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1591704000">- fix for boo#1172731
  VUL-0: EMBARGOED: CVE-2020-8024: hylafax+: Problematic permissions allow
    escalation from uucp to other users
  * adjusted authorisation
  * adjusted pre*/post* snipplets</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1597147200">- version 7.0.3
  * add UseSSLFax feature in sendfax, sendfax.conf, hyla.conf, and JobControl
  (31 Jul 2020)
  * be more resilient in listening for the Phase C carrier (30 Jul 2020)
  * make sure to return to command mode if HDLC receive times out (29 Jul 2020)
  * make faxmail ignore boundaries on parts other than multiparts (29 Jul 2020)
  * don't attempt to write zero bytes of data to a TIFF (29 Jul 2020)
  * don't ever respond to CRP with CRP (28 Jul 2020)
  * secure setup.cache/setup.modem - CVE-2020-15397 (27, 30 Jul 2020)
  * reset frame counter when a sender retransmits PPS for a previously confirmed
  ECM block (26 Jul 2020)
  * scrutinize PPM before concluding that the sender missed our MCF (23 Jul 2020)
  * fix modem recovery after SSL Fax failure (22, 26 Jul 2020)
  * ignore echo of PPR, RTN, CRP (10, 13, 21 Jul 2020)
  * attempt to handle NSF/CSI/DIS in Class 1 sending Phase D (6 Jul 2020)
  * run scripts directly rather than invoking them via a shell for security
  hardening (3-5 Jul 2020)
  * add senderFumblesECM feature (3 Jul 2020)
  * add support for PIN/PIP/PRI-Q/PPS-PRI-Q signals, add senderConfusesPIN
  feature, and utilize PIN for rare conditions where it may be helpful
  (2, 6, 13-14 Jul 2020)
  * add senderConfusesRTN feature (25-26 Jun 2020)
  * add MissedPageHandling feature (24 Jun 2020)
  * use and handle CFR in Phase D to retransmit Phase C (16, 23 Jun 2020)
  * cope with hearing echo of RR, CTC during Class 1 sending (15-17 Jun 2020)
  * fix listening for retransmission of MPS/EOP/EOM if it was received
  corrupt on the first attempt (15 Jun 2020)
  * secure temporary directory creation for faxsetup, faxaddmodem, and
  probemodem - CVE-2020-15396 (13 Jun 2020)
  * don't use CRP when receiving PPS/PPM as some senders think
  we are sending MCF (12 Jun 2020)
  * add BR_SSLFAX to show SSL Fax in notify and faxinfo output (1 Jun 2020)
  * have faxinfo put units on non-standard page dimensions (28 May 2020)
  * improve error messages for JobHost connection errors (22 May 2020)
  * fix perpetual blocking of jobs when a job preparation fails,
  attempt to fix similar blocking problems for bad jobs in
  batches, and add "unblock" faxconfig feature (21 May 2020)
  * ignore TCF if we're receiving an SSL Fax (31 Jan 2020)
  * fixes for build on FreeBSD 12.1 (31 Jan - 3 Feb 2020)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1602244800">- rearrange files-section (boo#1172731)</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1611662400">- Fix TW build by pretending tiff 4.2 is as good enough as 4.{0,1}</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1620475200">- Fix TW build by pretending tiff 4.4 is as good enough as 4.{0,1}</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1626091200">- Add hylafax service and helper for use with firewalld, and
  explain the details in README.SUSE.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1632312000">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * hylafax-faxgetty@.service
  * hylafax-faxq.service
  * hylafax-faxqclean.service
  * hylafax-hfaxd.service
  * hylafax-usage.service</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1634558400">- version 7.0.4
  * README.SUSE renamed
  * hylafax.diff added for boo#1191571 (pre-correction)
  * Dependencies on systemd-services adjusted
  * retry training twice at the same bitrate unless FTT (26 Aug 2021)
  * add missing reason messages for session failures (21 Aug 2021)
  * stop attempts to send or receive signals if the call ended prematurely (16-19 Aug 2021)
  * add Class1HasRMHookIndication (16 Aug 2021)
  * don't attempt sending DCN if we're already on hook (15, 17 Aug 2021)
  * end session sooner if receiver hangs up immediately after TCF or during prologue (14 Aug 2021)
  * fix some behavior following frame reception timeouts (13 Aug 2021)
  * improve behavior if procedural interrupt fails (12 Aug 2021)
  * handle sender repeating RR after we transmit MCF (10 Aug 2021)
  * add session logging of receipt of CFR/FTT signals (3 Aug 2021)
  * cope with receipt of PPR following CTC (3 Aug 2021)
  * attempt to cope with NSF/CSI/DIS after PPS, CTR, ERR, RR and improve coping with
    the same after MPS/EOP/EOM (2, 12, 14, 18 Aug 2021)
  * identify DCN after PPS as a receiver abort (2 Aug 2021)
  * attempt to cope with receipt of CTR after sending PPS (2 Aug 2021)
  * remove use of deprecated libtiff integer types and "register" storage class specifier (25 Jul 2021)
  * don't employ senderFumblesECM if V.34-Fax was negotiated (25 Jul 2021)
  * update configure to accept libtiff v4.2 and v4.3 (24 Jul 2021)
  * fix page handling "botch" if a job's first and previous attempts were on a proxy (20 Jul 2021)
  * fix data timeout for bitrates less than 14400 bps when non-zero scanline time (15 Jul 2021)
  * try to cope with T.38 invite stutter at beginning of send (15 Jul 2021)
  * decouple session logging from direct filesystem I/O (15 Jul 2021)
  * try to help receivers who may expect initial 1-bits to start high-speed data (8, 9 Jul, 4 Aug 2021)
  * improve tenacity of "persistent" ECM (26 Jun 2021)
  * maintain the same SSL Fax passcode during a single session (20 May 2021)
  * log detection of binary file transfer support in receivers (1 Apr 2021)
  * add support for SiLabs Si2417/Si2435 (5 Feb 2021)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648900800">- version 7.0.5
  * hylafax.diff removed - included in source
  * extend Class1RecvAbortOK = 0 timeout to 500 ms (4 Dec 2021)
  * cope with Si2435 V.34/V.8 connection glitch (17, 19 Nov 2021)
  * cope with spurious +FCERROR or other delayed messages from modem (26 Oct 2021)
  * avoid letting corrupt RTC signals lead to RTN (26 Oct 2021)
  * don't refer to DCN as an invalid response in error messages (20 Oct 2021)
  * handle TSI during procedural interrupt (19 Oct 2021)
  * do better with waiting on prologue frames from receiver (13 Oct 2021)
  * cope with echo of ERR (13 Oct 2021)
  * run ps2fax, pdf2fax, tiff2fax, pcl2fax coverters as fax user (12 Oct 2021)
  * attempt to cope with receivers who signal RTN in ECM Phase D (23 Sep 2021)
  * fix hfaxd build when LDAP libs are not present (23 Sep 2021)
  * handle PPR echo after fourth PPR (22 Sep 2021)
  * don't use CRP when waiting for CFR following training (15 Sep 2021)
  * attempt to cope with receivers which signal CFR after PPS (14 Sep 2021)
  * cope with senders who signal FTT in Phase D (10 Sep 2021)
  * fix problem with handling NSF/CSI/DIS frame after CTC/EOR (9 Sep 2021)
  * cope with senders who signal PPS without the PPS FCF (9 Sep 2021)
  * handle echo of PPR when expecting CTC/EOR (8 Sep 2021)
  * add failure messages for unspecified training failures (7 Sep 2021)
  * don't use CRP when waiting for CTR (7 Sep 2021)
  * handle echo of EOR, don't use CRP when waiting for ERR (7 Sep 2021)
  * repeat PIN if sender repeats post-page or partial-page message (7-8 Sep 2021)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1654344000">- Project and download links switched to https
  libtiff44.diff added for tiff 4.x compatibility</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1672056000">- version 7.0.6
  * add support for libtiff v4.4 (10 Jun 2022)
  * libtiff44.diff removed
  * cope with SSL Fax senders who skip Phase C (5 May 2022)
  * add ability to trace SSL Fax data reception (3 May 2022)
  * handle timeout OK response to +FRH=3 and +FRM=n (25 Apr 2022)
  * don't leave the modem waiting for a response when in SSL Fax (25 Apr 2022)
  * improve recovery from unexpected SSL Fax terminations during ECM (15, 18, 26 Apr 2022)
  * try to cope with false "no dialtone" results (4, 8 Apr 2022)
  * add initial support for SSL Fax Proxy servers (4, 23 Feb; 4, 19 Apr; 10, 24 Jun 2022)
  * buildrequirement for libssl added (Thanks Dimstar)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1673524800">- tiff_450.diff added
  updated to trunk r2695 for tiff 4.5 support - See CHANGES for details</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1674561600">- version 7.0.7
  * tiff_450.diff removed
  * constrain job priority to 0-255 (20 Jan 2023)
  * add support for libtiff v4.5.0 (4-5 Jan 2023)
  * add some Si2435 configuration considerations (27 Dec 2022, 20 Jan 2023)
  * if Class1RecvAbortOK is 0 then don't bother with the CAN byte at all (31 Oct 2022)
  * check that the modem isn't trying to deliver a message when we're trying to send
    binary data to it (16-17 Oct 2022)
  * prevent inherited values from creeping into subsequent xferfaxlog data (26 Aug 2022)
  * add external reference feature in dialrules (18 Aug 2022)</changelog>
</package>
<package pkgid="93830b9542d2ca5a2a5f72af41577b5dbe038d3ae36063422c4d97f7c714fde4" name="libfaxutil7_0_7" arch="s390x">
  <version epoch="0" ver="7.0.7" rel="bp154.2.6.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1547812800">- faxgetty@ service removed from %pre section, as it is only a placeholder</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548244800">- Reduce boilerplate generated from %service_* by calling it just
  once.</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1563451200">- Version 7.0.0
  * add LDAP features for compatibility with ActiveDirectory (25 Mar-1 Apr 2019)
  * fix recovery after SSL Fax "accept failure" (18 Mar 2019)
  * add TextFormat overstrike option and disable by default (6 Feb 2019)
  * fix the page size of cover sheets returned via notify (8 Jan 2019)
  * fix or silence numerous compiler warnings (19, 22, 28 Dec 2018)
  * fix pagehandling updating after a proxy has been used (7-8 Dec 2018)
  * add faxmail stderr output of RFC2047 decoding results (5 Dec 2018)
  * fix faxmail handling of headers encoded with UTF-8 (4 Dec 2018)
  * fix faxmail handling of base64-encoded text parts (4 Dec 2018)
  * add SSL Fax support (9-26, 29 Nov; 11, 18, 25 Dec 2018; 2, 7, 23 Jan 2019)</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1574424000">- build fails with libtiff 4.1: pretend, that 4.1 is similar to 4.0</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1574424001">- Version 7.0.1
  * create a client timeout setting and change the default from 60 to
  3600 seconds (26 Sep 2019)
  * extend timeout for receiving ECM frames (21 Aug 2019)
  * fix timeout in Class 1 frame reception (5 Aug 2019)
  * improve Class 1 protocol handling when MaxRecvPages exceeded (31 Jul 2019)
  * fix ModemGroup limit default (11 Jul 2019)
  * fix recovery for SSL Fax write failures (6 Jun 2019)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1581681600">- Version 7.0.2
  * change FIXEDWIDTH default to better accommodate auto-rotation (13 Dec 2019)
  * prevent SSL_accept() from blocking (5 Dec 2019)
  * support libtiff v4.1 (5 Dec 2019)
  * fix ignoremodembusy feature broken by ModemGroup limits feature (16 Nov 2019)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1591704000">- fix for boo#1172731
  VUL-0: EMBARGOED: CVE-2020-8024: hylafax+: Problematic permissions allow
    escalation from uucp to other users
  * adjusted authorisation
  * adjusted pre*/post* snipplets</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1597147200">- version 7.0.3
  * add UseSSLFax feature in sendfax, sendfax.conf, hyla.conf, and JobControl
  (31 Jul 2020)
  * be more resilient in listening for the Phase C carrier (30 Jul 2020)
  * make sure to return to command mode if HDLC receive times out (29 Jul 2020)
  * make faxmail ignore boundaries on parts other than multiparts (29 Jul 2020)
  * don't attempt to write zero bytes of data to a TIFF (29 Jul 2020)
  * don't ever respond to CRP with CRP (28 Jul 2020)
  * secure setup.cache/setup.modem - CVE-2020-15397 (27, 30 Jul 2020)
  * reset frame counter when a sender retransmits PPS for a previously confirmed
  ECM block (26 Jul 2020)
  * scrutinize PPM before concluding that the sender missed our MCF (23 Jul 2020)
  * fix modem recovery after SSL Fax failure (22, 26 Jul 2020)
  * ignore echo of PPR, RTN, CRP (10, 13, 21 Jul 2020)
  * attempt to handle NSF/CSI/DIS in Class 1 sending Phase D (6 Jul 2020)
  * run scripts directly rather than invoking them via a shell for security
  hardening (3-5 Jul 2020)
  * add senderFumblesECM feature (3 Jul 2020)
  * add support for PIN/PIP/PRI-Q/PPS-PRI-Q signals, add senderConfusesPIN
  feature, and utilize PIN for rare conditions where it may be helpful
  (2, 6, 13-14 Jul 2020)
  * add senderConfusesRTN feature (25-26 Jun 2020)
  * add MissedPageHandling feature (24 Jun 2020)
  * use and handle CFR in Phase D to retransmit Phase C (16, 23 Jun 2020)
  * cope with hearing echo of RR, CTC during Class 1 sending (15-17 Jun 2020)
  * fix listening for retransmission of MPS/EOP/EOM if it was received
  corrupt on the first attempt (15 Jun 2020)
  * secure temporary directory creation for faxsetup, faxaddmodem, and
  probemodem - CVE-2020-15396 (13 Jun 2020)
  * don't use CRP when receiving PPS/PPM as some senders think
  we are sending MCF (12 Jun 2020)
  * add BR_SSLFAX to show SSL Fax in notify and faxinfo output (1 Jun 2020)
  * have faxinfo put units on non-standard page dimensions (28 May 2020)
  * improve error messages for JobHost connection errors (22 May 2020)
  * fix perpetual blocking of jobs when a job preparation fails,
  attempt to fix similar blocking problems for bad jobs in
  batches, and add "unblock" faxconfig feature (21 May 2020)
  * ignore TCF if we're receiving an SSL Fax (31 Jan 2020)
  * fixes for build on FreeBSD 12.1 (31 Jan - 3 Feb 2020)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1602244800">- rearrange files-section (boo#1172731)</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1611662400">- Fix TW build by pretending tiff 4.2 is as good enough as 4.{0,1}</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1620475200">- Fix TW build by pretending tiff 4.4 is as good enough as 4.{0,1}</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1626091200">- Add hylafax service and helper for use with firewalld, and
  explain the details in README.SUSE.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1632312000">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * hylafax-faxgetty@.service
  * hylafax-faxq.service
  * hylafax-faxqclean.service
  * hylafax-hfaxd.service
  * hylafax-usage.service</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1634558400">- version 7.0.4
  * README.SUSE renamed
  * hylafax.diff added for boo#1191571 (pre-correction)
  * Dependencies on systemd-services adjusted
  * retry training twice at the same bitrate unless FTT (26 Aug 2021)
  * add missing reason messages for session failures (21 Aug 2021)
  * stop attempts to send or receive signals if the call ended prematurely (16-19 Aug 2021)
  * add Class1HasRMHookIndication (16 Aug 2021)
  * don't attempt sending DCN if we're already on hook (15, 17 Aug 2021)
  * end session sooner if receiver hangs up immediately after TCF or during prologue (14 Aug 2021)
  * fix some behavior following frame reception timeouts (13 Aug 2021)
  * improve behavior if procedural interrupt fails (12 Aug 2021)
  * handle sender repeating RR after we transmit MCF (10 Aug 2021)
  * add session logging of receipt of CFR/FTT signals (3 Aug 2021)
  * cope with receipt of PPR following CTC (3 Aug 2021)
  * attempt to cope with NSF/CSI/DIS after PPS, CTR, ERR, RR and improve coping with
    the same after MPS/EOP/EOM (2, 12, 14, 18 Aug 2021)
  * identify DCN after PPS as a receiver abort (2 Aug 2021)
  * attempt to cope with receipt of CTR after sending PPS (2 Aug 2021)
  * remove use of deprecated libtiff integer types and "register" storage class specifier (25 Jul 2021)
  * don't employ senderFumblesECM if V.34-Fax was negotiated (25 Jul 2021)
  * update configure to accept libtiff v4.2 and v4.3 (24 Jul 2021)
  * fix page handling "botch" if a job's first and previous attempts were on a proxy (20 Jul 2021)
  * fix data timeout for bitrates less than 14400 bps when non-zero scanline time (15 Jul 2021)
  * try to cope with T.38 invite stutter at beginning of send (15 Jul 2021)
  * decouple session logging from direct filesystem I/O (15 Jul 2021)
  * try to help receivers who may expect initial 1-bits to start high-speed data (8, 9 Jul, 4 Aug 2021)
  * improve tenacity of "persistent" ECM (26 Jun 2021)
  * maintain the same SSL Fax passcode during a single session (20 May 2021)
  * log detection of binary file transfer support in receivers (1 Apr 2021)
  * add support for SiLabs Si2417/Si2435 (5 Feb 2021)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648900800">- version 7.0.5
  * hylafax.diff removed - included in source
  * extend Class1RecvAbortOK = 0 timeout to 500 ms (4 Dec 2021)
  * cope with Si2435 V.34/V.8 connection glitch (17, 19 Nov 2021)
  * cope with spurious +FCERROR or other delayed messages from modem (26 Oct 2021)
  * avoid letting corrupt RTC signals lead to RTN (26 Oct 2021)
  * don't refer to DCN as an invalid response in error messages (20 Oct 2021)
  * handle TSI during procedural interrupt (19 Oct 2021)
  * do better with waiting on prologue frames from receiver (13 Oct 2021)
  * cope with echo of ERR (13 Oct 2021)
  * run ps2fax, pdf2fax, tiff2fax, pcl2fax coverters as fax user (12 Oct 2021)
  * attempt to cope with receivers who signal RTN in ECM Phase D (23 Sep 2021)
  * fix hfaxd build when LDAP libs are not present (23 Sep 2021)
  * handle PPR echo after fourth PPR (22 Sep 2021)
  * don't use CRP when waiting for CFR following training (15 Sep 2021)
  * attempt to cope with receivers which signal CFR after PPS (14 Sep 2021)
  * cope with senders who signal FTT in Phase D (10 Sep 2021)
  * fix problem with handling NSF/CSI/DIS frame after CTC/EOR (9 Sep 2021)
  * cope with senders who signal PPS without the PPS FCF (9 Sep 2021)
  * handle echo of PPR when expecting CTC/EOR (8 Sep 2021)
  * add failure messages for unspecified training failures (7 Sep 2021)
  * don't use CRP when waiting for CTR (7 Sep 2021)
  * handle echo of EOR, don't use CRP when waiting for ERR (7 Sep 2021)
  * repeat PIN if sender repeats post-page or partial-page message (7-8 Sep 2021)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1654344000">- Project and download links switched to https
  libtiff44.diff added for tiff 4.x compatibility</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1672056000">- version 7.0.6
  * add support for libtiff v4.4 (10 Jun 2022)
  * libtiff44.diff removed
  * cope with SSL Fax senders who skip Phase C (5 May 2022)
  * add ability to trace SSL Fax data reception (3 May 2022)
  * handle timeout OK response to +FRH=3 and +FRM=n (25 Apr 2022)
  * don't leave the modem waiting for a response when in SSL Fax (25 Apr 2022)
  * improve recovery from unexpected SSL Fax terminations during ECM (15, 18, 26 Apr 2022)
  * try to cope with false "no dialtone" results (4, 8 Apr 2022)
  * add initial support for SSL Fax Proxy servers (4, 23 Feb; 4, 19 Apr; 10, 24 Jun 2022)
  * buildrequirement for libssl added (Thanks Dimstar)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1673524800">- tiff_450.diff added
  updated to trunk r2695 for tiff 4.5 support - See CHANGES for details</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1674561600">- version 7.0.7
  * tiff_450.diff removed
  * constrain job priority to 0-255 (20 Jan 2023)
  * add support for libtiff v4.5.0 (4-5 Jan 2023)
  * add some Si2435 configuration considerations (27 Dec 2022, 20 Jan 2023)
  * if Class1RecvAbortOK is 0 then don't bother with the CAN byte at all (31 Oct 2022)
  * check that the modem isn't trying to deliver a message when we're trying to send
    binary data to it (16-17 Oct 2022)
  * prevent inherited values from creeping into subsequent xferfaxlog data (26 Aug 2022)
  * add external reference feature in dialrules (18 Aug 2022)</changelog>
</package>
<package pkgid="ff830b4c296562098dc4ce1858b0c60b0f45b20e12a309a36772131097d1f63d" name="libfaxutil7_0_7" arch="x86_64">
  <version epoch="0" ver="7.0.7" rel="bp154.2.6.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1547812800">- faxgetty@ service removed from %pre section, as it is only a placeholder</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548244800">- Reduce boilerplate generated from %service_* by calling it just
  once.</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1563451200">- Version 7.0.0
  * add LDAP features for compatibility with ActiveDirectory (25 Mar-1 Apr 2019)
  * fix recovery after SSL Fax "accept failure" (18 Mar 2019)
  * add TextFormat overstrike option and disable by default (6 Feb 2019)
  * fix the page size of cover sheets returned via notify (8 Jan 2019)
  * fix or silence numerous compiler warnings (19, 22, 28 Dec 2018)
  * fix pagehandling updating after a proxy has been used (7-8 Dec 2018)
  * add faxmail stderr output of RFC2047 decoding results (5 Dec 2018)
  * fix faxmail handling of headers encoded with UTF-8 (4 Dec 2018)
  * fix faxmail handling of base64-encoded text parts (4 Dec 2018)
  * add SSL Fax support (9-26, 29 Nov; 11, 18, 25 Dec 2018; 2, 7, 23 Jan 2019)</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1574424000">- build fails with libtiff 4.1: pretend, that 4.1 is similar to 4.0</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1574424001">- Version 7.0.1
  * create a client timeout setting and change the default from 60 to
  3600 seconds (26 Sep 2019)
  * extend timeout for receiving ECM frames (21 Aug 2019)
  * fix timeout in Class 1 frame reception (5 Aug 2019)
  * improve Class 1 protocol handling when MaxRecvPages exceeded (31 Jul 2019)
  * fix ModemGroup limit default (11 Jul 2019)
  * fix recovery for SSL Fax write failures (6 Jun 2019)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1581681600">- Version 7.0.2
  * change FIXEDWIDTH default to better accommodate auto-rotation (13 Dec 2019)
  * prevent SSL_accept() from blocking (5 Dec 2019)
  * support libtiff v4.1 (5 Dec 2019)
  * fix ignoremodembusy feature broken by ModemGroup limits feature (16 Nov 2019)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1591704000">- fix for boo#1172731
  VUL-0: EMBARGOED: CVE-2020-8024: hylafax+: Problematic permissions allow
    escalation from uucp to other users
  * adjusted authorisation
  * adjusted pre*/post* snipplets</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1597147200">- version 7.0.3
  * add UseSSLFax feature in sendfax, sendfax.conf, hyla.conf, and JobControl
  (31 Jul 2020)
  * be more resilient in listening for the Phase C carrier (30 Jul 2020)
  * make sure to return to command mode if HDLC receive times out (29 Jul 2020)
  * make faxmail ignore boundaries on parts other than multiparts (29 Jul 2020)
  * don't attempt to write zero bytes of data to a TIFF (29 Jul 2020)
  * don't ever respond to CRP with CRP (28 Jul 2020)
  * secure setup.cache/setup.modem - CVE-2020-15397 (27, 30 Jul 2020)
  * reset frame counter when a sender retransmits PPS for a previously confirmed
  ECM block (26 Jul 2020)
  * scrutinize PPM before concluding that the sender missed our MCF (23 Jul 2020)
  * fix modem recovery after SSL Fax failure (22, 26 Jul 2020)
  * ignore echo of PPR, RTN, CRP (10, 13, 21 Jul 2020)
  * attempt to handle NSF/CSI/DIS in Class 1 sending Phase D (6 Jul 2020)
  * run scripts directly rather than invoking them via a shell for security
  hardening (3-5 Jul 2020)
  * add senderFumblesECM feature (3 Jul 2020)
  * add support for PIN/PIP/PRI-Q/PPS-PRI-Q signals, add senderConfusesPIN
  feature, and utilize PIN for rare conditions where it may be helpful
  (2, 6, 13-14 Jul 2020)
  * add senderConfusesRTN feature (25-26 Jun 2020)
  * add MissedPageHandling feature (24 Jun 2020)
  * use and handle CFR in Phase D to retransmit Phase C (16, 23 Jun 2020)
  * cope with hearing echo of RR, CTC during Class 1 sending (15-17 Jun 2020)
  * fix listening for retransmission of MPS/EOP/EOM if it was received
  corrupt on the first attempt (15 Jun 2020)
  * secure temporary directory creation for faxsetup, faxaddmodem, and
  probemodem - CVE-2020-15396 (13 Jun 2020)
  * don't use CRP when receiving PPS/PPM as some senders think
  we are sending MCF (12 Jun 2020)
  * add BR_SSLFAX to show SSL Fax in notify and faxinfo output (1 Jun 2020)
  * have faxinfo put units on non-standard page dimensions (28 May 2020)
  * improve error messages for JobHost connection errors (22 May 2020)
  * fix perpetual blocking of jobs when a job preparation fails,
  attempt to fix similar blocking problems for bad jobs in
  batches, and add "unblock" faxconfig feature (21 May 2020)
  * ignore TCF if we're receiving an SSL Fax (31 Jan 2020)
  * fixes for build on FreeBSD 12.1 (31 Jan - 3 Feb 2020)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1602244800">- rearrange files-section (boo#1172731)</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1611662400">- Fix TW build by pretending tiff 4.2 is as good enough as 4.{0,1}</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1620475200">- Fix TW build by pretending tiff 4.4 is as good enough as 4.{0,1}</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1626091200">- Add hylafax service and helper for use with firewalld, and
  explain the details in README.SUSE.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1632312000">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * hylafax-faxgetty@.service
  * hylafax-faxq.service
  * hylafax-faxqclean.service
  * hylafax-hfaxd.service
  * hylafax-usage.service</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1634558400">- version 7.0.4
  * README.SUSE renamed
  * hylafax.diff added for boo#1191571 (pre-correction)
  * Dependencies on systemd-services adjusted
  * retry training twice at the same bitrate unless FTT (26 Aug 2021)
  * add missing reason messages for session failures (21 Aug 2021)
  * stop attempts to send or receive signals if the call ended prematurely (16-19 Aug 2021)
  * add Class1HasRMHookIndication (16 Aug 2021)
  * don't attempt sending DCN if we're already on hook (15, 17 Aug 2021)
  * end session sooner if receiver hangs up immediately after TCF or during prologue (14 Aug 2021)
  * fix some behavior following frame reception timeouts (13 Aug 2021)
  * improve behavior if procedural interrupt fails (12 Aug 2021)
  * handle sender repeating RR after we transmit MCF (10 Aug 2021)
  * add session logging of receipt of CFR/FTT signals (3 Aug 2021)
  * cope with receipt of PPR following CTC (3 Aug 2021)
  * attempt to cope with NSF/CSI/DIS after PPS, CTR, ERR, RR and improve coping with
    the same after MPS/EOP/EOM (2, 12, 14, 18 Aug 2021)
  * identify DCN after PPS as a receiver abort (2 Aug 2021)
  * attempt to cope with receipt of CTR after sending PPS (2 Aug 2021)
  * remove use of deprecated libtiff integer types and "register" storage class specifier (25 Jul 2021)
  * don't employ senderFumblesECM if V.34-Fax was negotiated (25 Jul 2021)
  * update configure to accept libtiff v4.2 and v4.3 (24 Jul 2021)
  * fix page handling "botch" if a job's first and previous attempts were on a proxy (20 Jul 2021)
  * fix data timeout for bitrates less than 14400 bps when non-zero scanline time (15 Jul 2021)
  * try to cope with T.38 invite stutter at beginning of send (15 Jul 2021)
  * decouple session logging from direct filesystem I/O (15 Jul 2021)
  * try to help receivers who may expect initial 1-bits to start high-speed data (8, 9 Jul, 4 Aug 2021)
  * improve tenacity of "persistent" ECM (26 Jun 2021)
  * maintain the same SSL Fax passcode during a single session (20 May 2021)
  * log detection of binary file transfer support in receivers (1 Apr 2021)
  * add support for SiLabs Si2417/Si2435 (5 Feb 2021)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648900800">- version 7.0.5
  * hylafax.diff removed - included in source
  * extend Class1RecvAbortOK = 0 timeout to 500 ms (4 Dec 2021)
  * cope with Si2435 V.34/V.8 connection glitch (17, 19 Nov 2021)
  * cope with spurious +FCERROR or other delayed messages from modem (26 Oct 2021)
  * avoid letting corrupt RTC signals lead to RTN (26 Oct 2021)
  * don't refer to DCN as an invalid response in error messages (20 Oct 2021)
  * handle TSI during procedural interrupt (19 Oct 2021)
  * do better with waiting on prologue frames from receiver (13 Oct 2021)
  * cope with echo of ERR (13 Oct 2021)
  * run ps2fax, pdf2fax, tiff2fax, pcl2fax coverters as fax user (12 Oct 2021)
  * attempt to cope with receivers who signal RTN in ECM Phase D (23 Sep 2021)
  * fix hfaxd build when LDAP libs are not present (23 Sep 2021)
  * handle PPR echo after fourth PPR (22 Sep 2021)
  * don't use CRP when waiting for CFR following training (15 Sep 2021)
  * attempt to cope with receivers which signal CFR after PPS (14 Sep 2021)
  * cope with senders who signal FTT in Phase D (10 Sep 2021)
  * fix problem with handling NSF/CSI/DIS frame after CTC/EOR (9 Sep 2021)
  * cope with senders who signal PPS without the PPS FCF (9 Sep 2021)
  * handle echo of PPR when expecting CTC/EOR (8 Sep 2021)
  * add failure messages for unspecified training failures (7 Sep 2021)
  * don't use CRP when waiting for CTR (7 Sep 2021)
  * handle echo of EOR, don't use CRP when waiting for ERR (7 Sep 2021)
  * repeat PIN if sender repeats post-page or partial-page message (7-8 Sep 2021)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1654344000">- Project and download links switched to https
  libtiff44.diff added for tiff 4.x compatibility</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1672056000">- version 7.0.6
  * add support for libtiff v4.4 (10 Jun 2022)
  * libtiff44.diff removed
  * cope with SSL Fax senders who skip Phase C (5 May 2022)
  * add ability to trace SSL Fax data reception (3 May 2022)
  * handle timeout OK response to +FRH=3 and +FRM=n (25 Apr 2022)
  * don't leave the modem waiting for a response when in SSL Fax (25 Apr 2022)
  * improve recovery from unexpected SSL Fax terminations during ECM (15, 18, 26 Apr 2022)
  * try to cope with false "no dialtone" results (4, 8 Apr 2022)
  * add initial support for SSL Fax Proxy servers (4, 23 Feb; 4, 19 Apr; 10, 24 Jun 2022)
  * buildrequirement for libssl added (Thanks Dimstar)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1673524800">- tiff_450.diff added
  updated to trunk r2695 for tiff 4.5 support - See CHANGES for details</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1674561600">- version 7.0.7
  * tiff_450.diff removed
  * constrain job priority to 0-255 (20 Jan 2023)
  * add support for libtiff v4.5.0 (4-5 Jan 2023)
  * add some Si2435 configuration considerations (27 Dec 2022, 20 Jan 2023)
  * if Class1RecvAbortOK is 0 then don't bother with the CAN byte at all (31 Oct 2022)
  * check that the modem isn't trying to deliver a message when we're trying to send
    binary data to it (16-17 Oct 2022)
  * prevent inherited values from creeping into subsequent xferfaxlog data (26 Aug 2022)
  * add external reference feature in dialrules (18 Aug 2022)</changelog>
</package>
<package pkgid="a37fd61326f1401b585044bde2892de21fa63fecb913a089ea818c9315dda740" name="libgdal30" arch="aarch64">
  <version epoch="0" ver="3.4.1" rel="bp154.2.2.1"/>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1593518400">- Update to 3.1.1 version with full changelog
  https://github.com/OSGeo/gdal/blob/v3.1.1/gdal/NEWS
- Packaging:
  + drop merged upstream gdal-fix-docs.patch
  + Rework our way to deliver the package:
  - Remove building doc as we don't deliver it
  - Use upstream man page already present in tar
  - Simplify all %if doc related stuff
  + Lower again a bit _constraints: 2.5G RAM 4.0G HDD</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1594123200">- Update to 3.1.2 version bug fix release see changelog
  https://github.com/OSGeo/gdal/blob/v3.1.1/gdal/NEWS</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595160000">- Work-around occasional build failures due to incomplete ordering
  in Makefile. (https://github.com/OSGeo/gdal/issues/2777)
- Avoid double gdal prefix for /usr/share/gdal/gdal/*</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1599566400">- Update to 3.1.3 version bug fix release see changelog
  https://github.com/OSGeo/gdal/blob/v3.1.3/gdal/NEWS</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1603540800">- Update to 3.1.4 version bug fix release see changelog
  https://github.com/OSGeo/gdal/blob/v3.1.4/gdal/NEWS</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1604491200">- Update to 3.2.0:
  * Full changelog
    https://github.com/OSGeo/gdal/blob/v3.2.0/gdal/NEWS
- Packaging:
  + Add python3-GDAL as require in gdal package
  + Remove shebang where it's not allowed in python's scripts</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1609761600">- Update to 3.2.1:
  * Full changelog
    https://github.com/OSGeo/gdal/blob/v3.2.1/gdal/NEWS
- Packaging:
  + Update copyright year</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1615550400">- Update to 3.2.2 (bug fix release):
  * Full changelog
    https://github.com/OSGeo/gdal/blob/v3.2.2/gdal/NEWS</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1620129600">- Update to 3.2.3 (bug fix release)
  * Full changelog
    https://github.com/OSGeo/gdal/blob/v3.2.3/gdal/NEWS
- Be warned about ahead changes with future 3.3.x version
    https://github.com/OSGeo/gdal/blob/v3.3.0/gdal/NEWS</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1621252800">- remove bundled libraries, use system provided ones</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1621857600">- Update to 3.3.0 version
  * Full changelog
    https://github.com/OSGeo/gdal/blob/v3.3.0/gdal/NEWS
  * Main changes python2 is now gone
- Packaging
  + bump libso version to 2.9
  + Remove python2 related stuff
  + Add support for heif,pcre,kml,sfcgal
    make conditionnal support of libkml, sfcgal, heif
  + Prepare tests also conditionnal
  + Several small cleanup (merged, no more)
  + Remove autoreconf upstream is using last available</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1626004800">- Update to version 3.3.1 bugfix release
  + Full changelog
    https://github.com/OSGeo/gdal/blob/v3.3.1/gdal/NEWS</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1631016000">- Update to version 3.3.2 bugfix release
  + Full changelog
    https://github.com/OSGeo/gdal/blob/v3.3.2/gdal/NEWS</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1634731200">- Fix build with poppler 2.10:
  * gdal-poppler-2.10-a.patch
  * gdal-poppler-2.10-b.patch</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1635768000">- Update to version 3.3.3 bugfix release
  + Full changelog https://github.com/OSGeo/gdal/blob/v3.3.3/gdal/NEWS
- Removed upstream patches
  + gdal-poppler-2.10-a.patch
  + gdal-poppler-2.10-b.patch</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1638187200">- Fix xerces detection by adding --with-xerces-inc parameter</changelog>
  <changelog author="D. Berge &lt;opensuse@navlost.eu&gt;" date="1640952000">- Fix build on Leap 15.3</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1641297600">- Upgrade to version 3.4.1 bugfix release
  + Full changelog https://github.com/OSGeo/gdal/blob/v3.4.0/gdal/NEWS
  + Explicitly add a call to autogen.sh
  + Upstream PCIDSK: fix write heap-buffer-overflow boo#1194263
- Removed GDALmake.opt.in.patch due to cc1plus: warning:
  - I gcore: No such file or directory [-Wmissing-include-dirs]
- Add conditionnal support for hdf4 boo#1192614 on Leap
  build -with hdf4_support can be enabled
- Update copyright year</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1646654400">- Add gdal-fix-build-poppler.patch: Fix build with poppler 22.03.0
  and newer.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1646740800">- Add gdal-fix-poppler-leap.patch: Fix build on Leap 15.4 and
  poppler.
- Add fdups macro, BuildRequires already in place, remove
  duplicate files.</changelog>
</package>
<package pkgid="79eb3d354d01b47d1c978085ba6c830f88d23c99572e43304e3407ec2c8caa47" name="libgdal30" arch="ppc64le">
  <version epoch="0" ver="3.4.1" rel="bp154.2.2.1"/>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1593518400">- Update to 3.1.1 version with full changelog
  https://github.com/OSGeo/gdal/blob/v3.1.1/gdal/NEWS
- Packaging:
  + drop merged upstream gdal-fix-docs.patch
  + Rework our way to deliver the package:
  - Remove building doc as we don't deliver it
  - Use upstream man page already present in tar
  - Simplify all %if doc related stuff
  + Lower again a bit _constraints: 2.5G RAM 4.0G HDD</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1594123200">- Update to 3.1.2 version bug fix release see changelog
  https://github.com/OSGeo/gdal/blob/v3.1.1/gdal/NEWS</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595160000">- Work-around occasional build failures due to incomplete ordering
  in Makefile. (https://github.com/OSGeo/gdal/issues/2777)
- Avoid double gdal prefix for /usr/share/gdal/gdal/*</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1599566400">- Update to 3.1.3 version bug fix release see changelog
  https://github.com/OSGeo/gdal/blob/v3.1.3/gdal/NEWS</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1603540800">- Update to 3.1.4 version bug fix release see changelog
  https://github.com/OSGeo/gdal/blob/v3.1.4/gdal/NEWS</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1604491200">- Update to 3.2.0:
  * Full changelog
    https://github.com/OSGeo/gdal/blob/v3.2.0/gdal/NEWS
- Packaging:
  + Add python3-GDAL as require in gdal package
  + Remove shebang where it's not allowed in python's scripts</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1609761600">- Update to 3.2.1:
  * Full changelog
    https://github.com/OSGeo/gdal/blob/v3.2.1/gdal/NEWS
- Packaging:
  + Update copyright year</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1615550400">- Update to 3.2.2 (bug fix release):
  * Full changelog
    https://github.com/OSGeo/gdal/blob/v3.2.2/gdal/NEWS</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1620129600">- Update to 3.2.3 (bug fix release)
  * Full changelog
    https://github.com/OSGeo/gdal/blob/v3.2.3/gdal/NEWS
- Be warned about ahead changes with future 3.3.x version
    https://github.com/OSGeo/gdal/blob/v3.3.0/gdal/NEWS</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1621252800">- remove bundled libraries, use system provided ones</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1621857600">- Update to 3.3.0 version
  * Full changelog
    https://github.com/OSGeo/gdal/blob/v3.3.0/gdal/NEWS
  * Main changes python2 is now gone
- Packaging
  + bump libso version to 2.9
  + Remove python2 related stuff
  + Add support for heif,pcre,kml,sfcgal
    make conditionnal support of libkml, sfcgal, heif
  + Prepare tests also conditionnal
  + Several small cleanup (merged, no more)
  + Remove autoreconf upstream is using last available</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1626004800">- Update to version 3.3.1 bugfix release
  + Full changelog
    https://github.com/OSGeo/gdal/blob/v3.3.1/gdal/NEWS</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1631016000">- Update to version 3.3.2 bugfix release
  + Full changelog
    https://github.com/OSGeo/gdal/blob/v3.3.2/gdal/NEWS</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1634731200">- Fix build with poppler 2.10:
  * gdal-poppler-2.10-a.patch
  * gdal-poppler-2.10-b.patch</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1635768000">- Update to version 3.3.3 bugfix release
  + Full changelog https://github.com/OSGeo/gdal/blob/v3.3.3/gdal/NEWS
- Removed upstream patches
  + gdal-poppler-2.10-a.patch
  + gdal-poppler-2.10-b.patch</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1638187200">- Fix xerces detection by adding --with-xerces-inc parameter</changelog>
  <changelog author="D. Berge &lt;opensuse@navlost.eu&gt;" date="1640952000">- Fix build on Leap 15.3</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1641297600">- Upgrade to version 3.4.1 bugfix release
  + Full changelog https://github.com/OSGeo/gdal/blob/v3.4.0/gdal/NEWS
  + Explicitly add a call to autogen.sh
  + Upstream PCIDSK: fix write heap-buffer-overflow boo#1194263
- Removed GDALmake.opt.in.patch due to cc1plus: warning:
  - I gcore: No such file or directory [-Wmissing-include-dirs]
- Add conditionnal support for hdf4 boo#1192614 on Leap
  build -with hdf4_support can be enabled
- Update copyright year</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1646654400">- Add gdal-fix-build-poppler.patch: Fix build with poppler 22.03.0
  and newer.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1646740800">- Add gdal-fix-poppler-leap.patch: Fix build on Leap 15.4 and
  poppler.
- Add fdups macro, BuildRequires already in place, remove
  duplicate files.</changelog>
</package>
<package pkgid="bce0c04cd1494bb7219bf0c8b8b9f1205480b8974b416c573a1bbc0599b8a756" name="libgdal30" arch="s390x">
  <version epoch="0" ver="3.4.1" rel="bp154.2.2.1"/>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1593518400">- Update to 3.1.1 version with full changelog
  https://github.com/OSGeo/gdal/blob/v3.1.1/gdal/NEWS
- Packaging:
  + drop merged upstream gdal-fix-docs.patch
  + Rework our way to deliver the package:
  - Remove building doc as we don't deliver it
  - Use upstream man page already present in tar
  - Simplify all %if doc related stuff
  + Lower again a bit _constraints: 2.5G RAM 4.0G HDD</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1594123200">- Update to 3.1.2 version bug fix release see changelog
  https://github.com/OSGeo/gdal/blob/v3.1.1/gdal/NEWS</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595160000">- Work-around occasional build failures due to incomplete ordering
  in Makefile. (https://github.com/OSGeo/gdal/issues/2777)
- Avoid double gdal prefix for /usr/share/gdal/gdal/*</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1599566400">- Update to 3.1.3 version bug fix release see changelog
  https://github.com/OSGeo/gdal/blob/v3.1.3/gdal/NEWS</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1603540800">- Update to 3.1.4 version bug fix release see changelog
  https://github.com/OSGeo/gdal/blob/v3.1.4/gdal/NEWS</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1604491200">- Update to 3.2.0:
  * Full changelog
    https://github.com/OSGeo/gdal/blob/v3.2.0/gdal/NEWS
- Packaging:
  + Add python3-GDAL as require in gdal package
  + Remove shebang where it's not allowed in python's scripts</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1609761600">- Update to 3.2.1:
  * Full changelog
    https://github.com/OSGeo/gdal/blob/v3.2.1/gdal/NEWS
- Packaging:
  + Update copyright year</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1615550400">- Update to 3.2.2 (bug fix release):
  * Full changelog
    https://github.com/OSGeo/gdal/blob/v3.2.2/gdal/NEWS</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1620129600">- Update to 3.2.3 (bug fix release)
  * Full changelog
    https://github.com/OSGeo/gdal/blob/v3.2.3/gdal/NEWS
- Be warned about ahead changes with future 3.3.x version
    https://github.com/OSGeo/gdal/blob/v3.3.0/gdal/NEWS</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1621252800">- remove bundled libraries, use system provided ones</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1621857600">- Update to 3.3.0 version
  * Full changelog
    https://github.com/OSGeo/gdal/blob/v3.3.0/gdal/NEWS
  * Main changes python2 is now gone
- Packaging
  + bump libso version to 2.9
  + Remove python2 related stuff
  + Add support for heif,pcre,kml,sfcgal
    make conditionnal support of libkml, sfcgal, heif
  + Prepare tests also conditionnal
  + Several small cleanup (merged, no more)
  + Remove autoreconf upstream is using last available</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1626004800">- Update to version 3.3.1 bugfix release
  + Full changelog
    https://github.com/OSGeo/gdal/blob/v3.3.1/gdal/NEWS</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1631016000">- Update to version 3.3.2 bugfix release
  + Full changelog
    https://github.com/OSGeo/gdal/blob/v3.3.2/gdal/NEWS</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1634731200">- Fix build with poppler 2.10:
  * gdal-poppler-2.10-a.patch
  * gdal-poppler-2.10-b.patch</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1635768000">- Update to version 3.3.3 bugfix release
  + Full changelog https://github.com/OSGeo/gdal/blob/v3.3.3/gdal/NEWS
- Removed upstream patches
  + gdal-poppler-2.10-a.patch
  + gdal-poppler-2.10-b.patch</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1638187200">- Fix xerces detection by adding --with-xerces-inc parameter</changelog>
  <changelog author="D. Berge &lt;opensuse@navlost.eu&gt;" date="1640952000">- Fix build on Leap 15.3</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1641297600">- Upgrade to version 3.4.1 bugfix release
  + Full changelog https://github.com/OSGeo/gdal/blob/v3.4.0/gdal/NEWS
  + Explicitly add a call to autogen.sh
  + Upstream PCIDSK: fix write heap-buffer-overflow boo#1194263
- Removed GDALmake.opt.in.patch due to cc1plus: warning:
  - I gcore: No such file or directory [-Wmissing-include-dirs]
- Add conditionnal support for hdf4 boo#1192614 on Leap
  build -with hdf4_support can be enabled
- Update copyright year</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1646654400">- Add gdal-fix-build-poppler.patch: Fix build with poppler 22.03.0
  and newer.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1646740800">- Add gdal-fix-poppler-leap.patch: Fix build on Leap 15.4 and
  poppler.
- Add fdups macro, BuildRequires already in place, remove
  duplicate files.</changelog>
</package>
<package pkgid="56878cda74b2c3dff86d594566485c6ca246be1eafc473f079086a621bbc0292" name="libgdal30" arch="x86_64">
  <version epoch="0" ver="3.4.1" rel="bp154.2.2.1"/>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1593518400">- Update to 3.1.1 version with full changelog
  https://github.com/OSGeo/gdal/blob/v3.1.1/gdal/NEWS
- Packaging:
  + drop merged upstream gdal-fix-docs.patch
  + Rework our way to deliver the package:
  - Remove building doc as we don't deliver it
  - Use upstream man page already present in tar
  - Simplify all %if doc related stuff
  + Lower again a bit _constraints: 2.5G RAM 4.0G HDD</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1594123200">- Update to 3.1.2 version bug fix release see changelog
  https://github.com/OSGeo/gdal/blob/v3.1.1/gdal/NEWS</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595160000">- Work-around occasional build failures due to incomplete ordering
  in Makefile. (https://github.com/OSGeo/gdal/issues/2777)
- Avoid double gdal prefix for /usr/share/gdal/gdal/*</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1599566400">- Update to 3.1.3 version bug fix release see changelog
  https://github.com/OSGeo/gdal/blob/v3.1.3/gdal/NEWS</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1603540800">- Update to 3.1.4 version bug fix release see changelog
  https://github.com/OSGeo/gdal/blob/v3.1.4/gdal/NEWS</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1604491200">- Update to 3.2.0:
  * Full changelog
    https://github.com/OSGeo/gdal/blob/v3.2.0/gdal/NEWS
- Packaging:
  + Add python3-GDAL as require in gdal package
  + Remove shebang where it's not allowed in python's scripts</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1609761600">- Update to 3.2.1:
  * Full changelog
    https://github.com/OSGeo/gdal/blob/v3.2.1/gdal/NEWS
- Packaging:
  + Update copyright year</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1615550400">- Update to 3.2.2 (bug fix release):
  * Full changelog
    https://github.com/OSGeo/gdal/blob/v3.2.2/gdal/NEWS</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1620129600">- Update to 3.2.3 (bug fix release)
  * Full changelog
    https://github.com/OSGeo/gdal/blob/v3.2.3/gdal/NEWS
- Be warned about ahead changes with future 3.3.x version
    https://github.com/OSGeo/gdal/blob/v3.3.0/gdal/NEWS</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1621252800">- remove bundled libraries, use system provided ones</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1621857600">- Update to 3.3.0 version
  * Full changelog
    https://github.com/OSGeo/gdal/blob/v3.3.0/gdal/NEWS
  * Main changes python2 is now gone
- Packaging
  + bump libso version to 2.9
  + Remove python2 related stuff
  + Add support for heif,pcre,kml,sfcgal
    make conditionnal support of libkml, sfcgal, heif
  + Prepare tests also conditionnal
  + Several small cleanup (merged, no more)
  + Remove autoreconf upstream is using last available</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1626004800">- Update to version 3.3.1 bugfix release
  + Full changelog
    https://github.com/OSGeo/gdal/blob/v3.3.1/gdal/NEWS</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1631016000">- Update to version 3.3.2 bugfix release
  + Full changelog
    https://github.com/OSGeo/gdal/blob/v3.3.2/gdal/NEWS</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1634731200">- Fix build with poppler 2.10:
  * gdal-poppler-2.10-a.patch
  * gdal-poppler-2.10-b.patch</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1635768000">- Update to version 3.3.3 bugfix release
  + Full changelog https://github.com/OSGeo/gdal/blob/v3.3.3/gdal/NEWS
- Removed upstream patches
  + gdal-poppler-2.10-a.patch
  + gdal-poppler-2.10-b.patch</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1638187200">- Fix xerces detection by adding --with-xerces-inc parameter</changelog>
  <changelog author="D. Berge &lt;opensuse@navlost.eu&gt;" date="1640952000">- Fix build on Leap 15.3</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1641297600">- Upgrade to version 3.4.1 bugfix release
  + Full changelog https://github.com/OSGeo/gdal/blob/v3.4.0/gdal/NEWS
  + Explicitly add a call to autogen.sh
  + Upstream PCIDSK: fix write heap-buffer-overflow boo#1194263
- Removed GDALmake.opt.in.patch due to cc1plus: warning:
  - I gcore: No such file or directory [-Wmissing-include-dirs]
- Add conditionnal support for hdf4 boo#1192614 on Leap
  build -with hdf4_support can be enabled
- Update copyright year</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1646654400">- Add gdal-fix-build-poppler.patch: Fix build with poppler 22.03.0
  and newer.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1646740800">- Add gdal-fix-poppler-leap.patch: Fix build on Leap 15.4 and
  poppler.
- Add fdups macro, BuildRequires already in place, remove
  duplicate files.</changelog>
</package>
<package pkgid="30814a824ee6ed8b8373c51c2afe4f9f664239a2d92a7c1d793565e15d2c5728" name="libgdcm3_0" arch="aarch64">
  <version epoch="0" ver="3.0.19" rel="bp154.2.5.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1582027200">- version 3.0.5
  * fix for API change in poppler</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1585483200">- poppler_api.patch added to fix API changes in poppler in TW</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1586865600">- Update poppler_api.patch to make UnicodeMap* const.
- Compile with -fpermissive so that this works on Leap 15.2 too</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1591617600">- Add patch to fix build on aarch64:
  * gdcm-2.8.8-dont_use_EOF.patch</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1591704000">- version 3.0.6
  * no changelog available
  * poppler_api.patch removed (included in source)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1593518400">- version 3.0.7
  * no changelog available
  * gdcm-2.8.8-dont_use_EOF.patch removed (included in 3.0.7)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1602936000">- version 3.0.8
  * Fix TestScanner1 test</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1604404800">- fixed build system
  fix_charls2_patch removed
  0001-Fix-build-with-CharLS-2.1.0.patch added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1604577600">- typo corrected: fix_charls_2.patch removed</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1622808000">- 0002-gcc11-changes.diff added to fix TW build failure</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1627387200">- version 3.0.9 (no changelog)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1628510400">- Trim filler wording from some descriptions. Change the other
  descriptions to describe the package, rather than give
  instructions to the user.</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1639396800">- version 3.0.10 (no changelog)
  * 0002-gcc11-changes.diff removed (included in source)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1646740800">- use compiler gcc11-c++ to fix Leap 15.4 build</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648209600">- version 3.0.11
  * Fix for a significant issue with JPEG-LS and RGB color space
  * tons of small bug fixes</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648814400">- version 3.0.12
  * support for poppler 22.03 added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1663588800">- version 3.0.18
  no changelog</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1663934400">- rename of gdcm-libgdcm3_0 to libgdcm3_0 (proposal S. Brüns)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664798400">- Provides/obsoletes moved to lbgdcm-package (Thx DimStar)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664971200">- version 3.0.19 - no changelog
  'Provides' Tag removed from ligdcm</changelog>
</package>
<package pkgid="ce2b81ca5023dd9d706f8e63a40894085247e81427d1fc0fe572a5b9f8966a99" name="libgdcm3_0" arch="ppc64le">
  <version epoch="0" ver="3.0.19" rel="bp154.2.5.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1582027200">- version 3.0.5
  * fix for API change in poppler</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1585483200">- poppler_api.patch added to fix API changes in poppler in TW</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1586865600">- Update poppler_api.patch to make UnicodeMap* const.
- Compile with -fpermissive so that this works on Leap 15.2 too</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1591617600">- Add patch to fix build on aarch64:
  * gdcm-2.8.8-dont_use_EOF.patch</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1591704000">- version 3.0.6
  * no changelog available
  * poppler_api.patch removed (included in source)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1593518400">- version 3.0.7
  * no changelog available
  * gdcm-2.8.8-dont_use_EOF.patch removed (included in 3.0.7)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1602936000">- version 3.0.8
  * Fix TestScanner1 test</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1604404800">- fixed build system
  fix_charls2_patch removed
  0001-Fix-build-with-CharLS-2.1.0.patch added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1604577600">- typo corrected: fix_charls_2.patch removed</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1622808000">- 0002-gcc11-changes.diff added to fix TW build failure</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1627387200">- version 3.0.9 (no changelog)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1628510400">- Trim filler wording from some descriptions. Change the other
  descriptions to describe the package, rather than give
  instructions to the user.</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1639396800">- version 3.0.10 (no changelog)
  * 0002-gcc11-changes.diff removed (included in source)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1646740800">- use compiler gcc11-c++ to fix Leap 15.4 build</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648209600">- version 3.0.11
  * Fix for a significant issue with JPEG-LS and RGB color space
  * tons of small bug fixes</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648814400">- version 3.0.12
  * support for poppler 22.03 added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1663588800">- version 3.0.18
  no changelog</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1663934400">- rename of gdcm-libgdcm3_0 to libgdcm3_0 (proposal S. Brüns)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664798400">- Provides/obsoletes moved to lbgdcm-package (Thx DimStar)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664971200">- version 3.0.19 - no changelog
  'Provides' Tag removed from ligdcm</changelog>
</package>
<package pkgid="3c9f2703a8220ab42c0d8b21348a24da1fa2c701b846835fc778f3b72192cf58" name="libgdcm3_0" arch="s390x">
  <version epoch="0" ver="3.0.19" rel="bp154.2.5.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1582027200">- version 3.0.5
  * fix for API change in poppler</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1585483200">- poppler_api.patch added to fix API changes in poppler in TW</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1586865600">- Update poppler_api.patch to make UnicodeMap* const.
- Compile with -fpermissive so that this works on Leap 15.2 too</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1591617600">- Add patch to fix build on aarch64:
  * gdcm-2.8.8-dont_use_EOF.patch</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1591704000">- version 3.0.6
  * no changelog available
  * poppler_api.patch removed (included in source)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1593518400">- version 3.0.7
  * no changelog available
  * gdcm-2.8.8-dont_use_EOF.patch removed (included in 3.0.7)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1602936000">- version 3.0.8
  * Fix TestScanner1 test</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1604404800">- fixed build system
  fix_charls2_patch removed
  0001-Fix-build-with-CharLS-2.1.0.patch added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1604577600">- typo corrected: fix_charls_2.patch removed</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1622808000">- 0002-gcc11-changes.diff added to fix TW build failure</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1627387200">- version 3.0.9 (no changelog)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1628510400">- Trim filler wording from some descriptions. Change the other
  descriptions to describe the package, rather than give
  instructions to the user.</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1639396800">- version 3.0.10 (no changelog)
  * 0002-gcc11-changes.diff removed (included in source)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1646740800">- use compiler gcc11-c++ to fix Leap 15.4 build</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648209600">- version 3.0.11
  * Fix for a significant issue with JPEG-LS and RGB color space
  * tons of small bug fixes</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648814400">- version 3.0.12
  * support for poppler 22.03 added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1663588800">- version 3.0.18
  no changelog</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1663934400">- rename of gdcm-libgdcm3_0 to libgdcm3_0 (proposal S. Brüns)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664798400">- Provides/obsoletes moved to lbgdcm-package (Thx DimStar)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664971200">- version 3.0.19 - no changelog
  'Provides' Tag removed from ligdcm</changelog>
</package>
<package pkgid="9549569ef29201517516e178d62a096be816902250ac56e8aafc10bf38b2e34a" name="libgdcm3_0" arch="x86_64">
  <version epoch="0" ver="3.0.19" rel="bp154.2.5.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1582027200">- version 3.0.5
  * fix for API change in poppler</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1585483200">- poppler_api.patch added to fix API changes in poppler in TW</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1586865600">- Update poppler_api.patch to make UnicodeMap* const.
- Compile with -fpermissive so that this works on Leap 15.2 too</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1591617600">- Add patch to fix build on aarch64:
  * gdcm-2.8.8-dont_use_EOF.patch</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1591704000">- version 3.0.6
  * no changelog available
  * poppler_api.patch removed (included in source)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1593518400">- version 3.0.7
  * no changelog available
  * gdcm-2.8.8-dont_use_EOF.patch removed (included in 3.0.7)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1602936000">- version 3.0.8
  * Fix TestScanner1 test</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1604404800">- fixed build system
  fix_charls2_patch removed
  0001-Fix-build-with-CharLS-2.1.0.patch added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1604577600">- typo corrected: fix_charls_2.patch removed</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1622808000">- 0002-gcc11-changes.diff added to fix TW build failure</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1627387200">- version 3.0.9 (no changelog)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1628510400">- Trim filler wording from some descriptions. Change the other
  descriptions to describe the package, rather than give
  instructions to the user.</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1639396800">- version 3.0.10 (no changelog)
  * 0002-gcc11-changes.diff removed (included in source)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1646740800">- use compiler gcc11-c++ to fix Leap 15.4 build</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648209600">- version 3.0.11
  * Fix for a significant issue with JPEG-LS and RGB color space
  * tons of small bug fixes</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648814400">- version 3.0.12
  * support for poppler 22.03 added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1663588800">- version 3.0.18
  no changelog</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1663934400">- rename of gdcm-libgdcm3_0 to libgdcm3_0 (proposal S. Brüns)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664798400">- Provides/obsoletes moved to lbgdcm-package (Thx DimStar)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664971200">- version 3.0.19 - no changelog
  'Provides' Tag removed from ligdcm</changelog>
</package>
<package pkgid="37c5ef893e17e3caa92952aefa25268516206d1148e3b73352600f7a2f64456f" name="libgfapi0" arch="aarch64">
  <version epoch="0" ver="9.3" rel="bp154.2.3.1"/>
  <changelog author="scorot@free.fr" date="1445947200">- Update to version 3.6.6
  * No ChangeLog available</changelog>
  <changelog author="vcizek@suse.com" date="1503489600">- Update to version 3.8.15
  * fixes build with OpenSSL 1.1 (bsc#1055466)
  * Mandatory lock support for Multiprotocol environment
  * Gluster/NFS disabled by default
  * Geo-replication for Sharded Volumes
  * Tiering aware Geo-replication
  * Enhance Quota enable/disable in glusterd
  * Automagic unsplit-brain by [ctime|mtime|size|majority] for AFR
  * Granular Entry self-heal for AFR
  * Tons of bugfixes
  * for more details see the NEWS file
- spec cleanup
- Install License files/docu</changelog>
  <changelog author="vcizek@suse.com" date="1508328000">- Add missing Requires: libacl-devel to the devel subpackage
  * glfs.h #includes &lt;sys/acl.h&gt;</changelog>
  <changelog author="mpluskal@suse.com" date="1509710400">- Explicitly require python2 as python3 is not yet supported</changelog>
  <changelog author="kukuk@suse.de" date="1510574400">- glusterfs-tirpc.diff: fallback to libtirpc if there is no sunrpc
  support in glibc</changelog>
  <changelog author="jengelh@inai.de" date="1512388800">- Update to new release 3.12.3
  * -- Features introduced in 3.10
  * Brick multiplexing
  * Support to display op-version information from clients
  * Support for rebalance time to completion estimation
  * Separation of tier as its own service
  * Statedump support for gfapi based applications
  * Disabled creation of trash directory by default
  * Implemented parallel readdirp with distribute xlator
  * -- Features introduced in 3.12:
  * Ability to mount sub-directories using the Gluster
    FUSE protocol
  * GFID to path conversion is enabled by default
  * Provided an option to set a limit on number of bricks
    multiplexed in a processes
  * Enhanced the option to export statfs data for bricks
    sharing the same backend filesystem
  * Provided a means to resolve GFID split-brain using
    the gluster CLI
  * Introduction of new api glfs_fd_set_lkowner() to set lock owner
- Remove glusterfs-date.diff (no longer applies)</changelog>
  <changelog author="jengelh@inai.de" date="1513252800">- Add 0001-build-restore-ability-to-control-verbosity-settings.patch
- Replace xdr_sizeof.c with an empty file</changelog>
  <changelog author="jengelh@inai.de" date="1525348800">- Update to new upstream release 4.0.2
  * GlusterD2 (GD2) is a new management daemon for Gluster-4.0,
    glustercli is the command-line interface for it.
    It is a preview release. GD2 is not backwards compatible with
    the older GlusterD. Heterogeneous clusters running both GD2
    and GlusterD are not possible.
  * Not all commands from GlusterD have been implemented for GD2.
  * GD2 does not (yet) work well in 2-node clusters.
  * Self Heal feature integrated for the new Volumes created
    using Glusterd2.</changelog>
  <changelog author="seanlew@opensuse.org" date="1547899200">- Update to new upstream version 5.3 (4.0 is EOL)
  * 5.3 brings hundreds of improvements, see complete relnote at
  https://docs.gluster.org/en/latest/release-notes/5.0/
  * Fixed a number of bugs:
    CVE-2018-1088, CVE-2018-1112 [boo#1090084],
    CVE-2018-10904 [boo#1107018], CVE-2018-10907 [boo#1107019],
    CVE-2018-10911 [boo#1107020], CVE-2018-10913 [boo#1107021],
    CVE-2018-10914 [boo#1107022], CVE-2018-10923 [boo#1107023],
    CVE-2018-10924 [boo#1107024], CVE-2018-10926 [boo#1107025],
    CVE-2018-10927 [boo#1107026], CVE-2018-10928 [boo#1107027],
    CVE-2018-10928 [boo#1107027], CVE-2018-10929 [boo#1107028],
    CVE-2018-10930 [boo#1107029], boo#1105776 .
- Remove patches no longer needed in 5.x:
  * 0001-build-restore-ability-to-control-verbosity-settings.patch
  * glusterfs-tirpc.diff</changelog>
  <changelog author="seanlew@opensuse.org" date="1551528000">- Update to new upstream version 5.4
  * FUSE Client memory leak fixed (#1623107)
  * fail to sync non-ascii utf8 file and dir names (#1648642)
  * Tracker bug for all leases related issues (#1651323)
  * gluster-blockd segfaults because of a null-deref (#1659563)
  * Memory leak: dict_t leak in rda_opendir (#1659676)
  * dht_revalidate may not heal attrs on the brick root (#1660736)
  * Fix tests/bugs/shard/zero-flag.t (#1660932)
  * NL cache: fix typos (#1662200)</changelog>
  <changelog author="seanlew@opensuse.org" date="1552824000">- Update to new upstream version 5.5
  * No changelog yet available in release notes</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Disable LTO (boo#1133088).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Move definition of _lto_cflags into %build.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1576238400">- Update to release 7.0
  * Latency based read child to improve read workload latency in
    a cluster, especially in a cloud setup. Also provides a load
    balancing with the outstanding pending request.
  * Thin-arbiter integration with GD1.
  * If a client older than glusterfs-4.x (i.e. 3.x clients)
    accesses a volume which has the `fips-mode-rchecksum` volume
    option enabled, it can cause erroneous checksum computation/
    unwanted behaviour during afr self-heal.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1577361600">- Fix the name of the Python bindings subpackage
- Properly mark Python bindings subpackage as noarch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1578571200">- Update to release 7.1
  * Fix rebalance causing IO Error - File descriptor in bad state
  * Fix geo-replication sessions going faulty
  * Fix memory leak in glusterfsd process
  * Fix GlusterFS brick process crash
- Add nocommon.patch [boo#1160392]</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1591272000">- Fixes for %_libexecdir changing to /usr/libexec</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1619697600">- Update to release 9.1
  * Implemented seek file operation for open-behind
  * Added io_uring support for Gluster
  * Added Support for 5K volumes
  * Enabled granular-entry-heal by default
  * Added support for monitoring the epoll/rpc layer
  * Improve rebalance of sparse files
- Drop nocommon.patch (merged)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632830400">- Update to release 9.3
  * New reset-brick command
  * Ability to get node level status of a cluster
  * Multi-threaded self-heal for Disperse volumes
  * Lock revocation feature
  * On-demand scrubbing for bitrot detection
  * Real time Cluster notifications using Events APIs
- Move mount helper to /usr/sbin [boo#1191062]</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1657800000">- add explicit Requires for the dependencies, so we make sure
  the dependencies are installed in the same version</changelog>
</package>
<package pkgid="adeb91d11c45d46f690041ec1bf3b4affe827d5b90f515696a0686b1370477c3" name="libgfapi0" arch="i586">
  <version epoch="0" ver="9.3" rel="bp154.2.3.1"/>
  <changelog author="scorot@free.fr" date="1445947200">- Update to version 3.6.6
  * No ChangeLog available</changelog>
  <changelog author="vcizek@suse.com" date="1503489600">- Update to version 3.8.15
  * fixes build with OpenSSL 1.1 (bsc#1055466)
  * Mandatory lock support for Multiprotocol environment
  * Gluster/NFS disabled by default
  * Geo-replication for Sharded Volumes
  * Tiering aware Geo-replication
  * Enhance Quota enable/disable in glusterd
  * Automagic unsplit-brain by [ctime|mtime|size|majority] for AFR
  * Granular Entry self-heal for AFR
  * Tons of bugfixes
  * for more details see the NEWS file
- spec cleanup
- Install License files/docu</changelog>
  <changelog author="vcizek@suse.com" date="1508328000">- Add missing Requires: libacl-devel to the devel subpackage
  * glfs.h #includes &lt;sys/acl.h&gt;</changelog>
  <changelog author="mpluskal@suse.com" date="1509710400">- Explicitly require python2 as python3 is not yet supported</changelog>
  <changelog author="kukuk@suse.de" date="1510574400">- glusterfs-tirpc.diff: fallback to libtirpc if there is no sunrpc
  support in glibc</changelog>
  <changelog author="jengelh@inai.de" date="1512388800">- Update to new release 3.12.3
  * -- Features introduced in 3.10
  * Brick multiplexing
  * Support to display op-version information from clients
  * Support for rebalance time to completion estimation
  * Separation of tier as its own service
  * Statedump support for gfapi based applications
  * Disabled creation of trash directory by default
  * Implemented parallel readdirp with distribute xlator
  * -- Features introduced in 3.12:
  * Ability to mount sub-directories using the Gluster
    FUSE protocol
  * GFID to path conversion is enabled by default
  * Provided an option to set a limit on number of bricks
    multiplexed in a processes
  * Enhanced the option to export statfs data for bricks
    sharing the same backend filesystem
  * Provided a means to resolve GFID split-brain using
    the gluster CLI
  * Introduction of new api glfs_fd_set_lkowner() to set lock owner
- Remove glusterfs-date.diff (no longer applies)</changelog>
  <changelog author="jengelh@inai.de" date="1513252800">- Add 0001-build-restore-ability-to-control-verbosity-settings.patch
- Replace xdr_sizeof.c with an empty file</changelog>
  <changelog author="jengelh@inai.de" date="1525348800">- Update to new upstream release 4.0.2
  * GlusterD2 (GD2) is a new management daemon for Gluster-4.0,
    glustercli is the command-line interface for it.
    It is a preview release. GD2 is not backwards compatible with
    the older GlusterD. Heterogeneous clusters running both GD2
    and GlusterD are not possible.
  * Not all commands from GlusterD have been implemented for GD2.
  * GD2 does not (yet) work well in 2-node clusters.
  * Self Heal feature integrated for the new Volumes created
    using Glusterd2.</changelog>
  <changelog author="seanlew@opensuse.org" date="1547899200">- Update to new upstream version 5.3 (4.0 is EOL)
  * 5.3 brings hundreds of improvements, see complete relnote at
  https://docs.gluster.org/en/latest/release-notes/5.0/
  * Fixed a number of bugs:
    CVE-2018-1088, CVE-2018-1112 [boo#1090084],
    CVE-2018-10904 [boo#1107018], CVE-2018-10907 [boo#1107019],
    CVE-2018-10911 [boo#1107020], CVE-2018-10913 [boo#1107021],
    CVE-2018-10914 [boo#1107022], CVE-2018-10923 [boo#1107023],
    CVE-2018-10924 [boo#1107024], CVE-2018-10926 [boo#1107025],
    CVE-2018-10927 [boo#1107026], CVE-2018-10928 [boo#1107027],
    CVE-2018-10928 [boo#1107027], CVE-2018-10929 [boo#1107028],
    CVE-2018-10930 [boo#1107029], boo#1105776 .
- Remove patches no longer needed in 5.x:
  * 0001-build-restore-ability-to-control-verbosity-settings.patch
  * glusterfs-tirpc.diff</changelog>
  <changelog author="seanlew@opensuse.org" date="1551528000">- Update to new upstream version 5.4
  * FUSE Client memory leak fixed (#1623107)
  * fail to sync non-ascii utf8 file and dir names (#1648642)
  * Tracker bug for all leases related issues (#1651323)
  * gluster-blockd segfaults because of a null-deref (#1659563)
  * Memory leak: dict_t leak in rda_opendir (#1659676)
  * dht_revalidate may not heal attrs on the brick root (#1660736)
  * Fix tests/bugs/shard/zero-flag.t (#1660932)
  * NL cache: fix typos (#1662200)</changelog>
  <changelog author="seanlew@opensuse.org" date="1552824000">- Update to new upstream version 5.5
  * No changelog yet available in release notes</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Disable LTO (boo#1133088).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Move definition of _lto_cflags into %build.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1576238400">- Update to release 7.0
  * Latency based read child to improve read workload latency in
    a cluster, especially in a cloud setup. Also provides a load
    balancing with the outstanding pending request.
  * Thin-arbiter integration with GD1.
  * If a client older than glusterfs-4.x (i.e. 3.x clients)
    accesses a volume which has the `fips-mode-rchecksum` volume
    option enabled, it can cause erroneous checksum computation/
    unwanted behaviour during afr self-heal.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1577361600">- Fix the name of the Python bindings subpackage
- Properly mark Python bindings subpackage as noarch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1578571200">- Update to release 7.1
  * Fix rebalance causing IO Error - File descriptor in bad state
  * Fix geo-replication sessions going faulty
  * Fix memory leak in glusterfsd process
  * Fix GlusterFS brick process crash
- Add nocommon.patch [boo#1160392]</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1591272000">- Fixes for %_libexecdir changing to /usr/libexec</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1619697600">- Update to release 9.1
  * Implemented seek file operation for open-behind
  * Added io_uring support for Gluster
  * Added Support for 5K volumes
  * Enabled granular-entry-heal by default
  * Added support for monitoring the epoll/rpc layer
  * Improve rebalance of sparse files
- Drop nocommon.patch (merged)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632830400">- Update to release 9.3
  * New reset-brick command
  * Ability to get node level status of a cluster
  * Multi-threaded self-heal for Disperse volumes
  * Lock revocation feature
  * On-demand scrubbing for bitrot detection
  * Real time Cluster notifications using Events APIs
- Move mount helper to /usr/sbin [boo#1191062]</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1657800000">- add explicit Requires for the dependencies, so we make sure
  the dependencies are installed in the same version</changelog>
</package>
<package pkgid="3abb5601375452e6058783fbe7fb2f06a5a2ff28038b664e39934c3f4adfe6a2" name="libgfapi0" arch="ppc64le">
  <version epoch="0" ver="9.3" rel="bp154.2.3.1"/>
  <changelog author="scorot@free.fr" date="1445947200">- Update to version 3.6.6
  * No ChangeLog available</changelog>
  <changelog author="vcizek@suse.com" date="1503489600">- Update to version 3.8.15
  * fixes build with OpenSSL 1.1 (bsc#1055466)
  * Mandatory lock support for Multiprotocol environment
  * Gluster/NFS disabled by default
  * Geo-replication for Sharded Volumes
  * Tiering aware Geo-replication
  * Enhance Quota enable/disable in glusterd
  * Automagic unsplit-brain by [ctime|mtime|size|majority] for AFR
  * Granular Entry self-heal for AFR
  * Tons of bugfixes
  * for more details see the NEWS file
- spec cleanup
- Install License files/docu</changelog>
  <changelog author="vcizek@suse.com" date="1508328000">- Add missing Requires: libacl-devel to the devel subpackage
  * glfs.h #includes &lt;sys/acl.h&gt;</changelog>
  <changelog author="mpluskal@suse.com" date="1509710400">- Explicitly require python2 as python3 is not yet supported</changelog>
  <changelog author="kukuk@suse.de" date="1510574400">- glusterfs-tirpc.diff: fallback to libtirpc if there is no sunrpc
  support in glibc</changelog>
  <changelog author="jengelh@inai.de" date="1512388800">- Update to new release 3.12.3
  * -- Features introduced in 3.10
  * Brick multiplexing
  * Support to display op-version information from clients
  * Support for rebalance time to completion estimation
  * Separation of tier as its own service
  * Statedump support for gfapi based applications
  * Disabled creation of trash directory by default
  * Implemented parallel readdirp with distribute xlator
  * -- Features introduced in 3.12:
  * Ability to mount sub-directories using the Gluster
    FUSE protocol
  * GFID to path conversion is enabled by default
  * Provided an option to set a limit on number of bricks
    multiplexed in a processes
  * Enhanced the option to export statfs data for bricks
    sharing the same backend filesystem
  * Provided a means to resolve GFID split-brain using
    the gluster CLI
  * Introduction of new api glfs_fd_set_lkowner() to set lock owner
- Remove glusterfs-date.diff (no longer applies)</changelog>
  <changelog author="jengelh@inai.de" date="1513252800">- Add 0001-build-restore-ability-to-control-verbosity-settings.patch
- Replace xdr_sizeof.c with an empty file</changelog>
  <changelog author="jengelh@inai.de" date="1525348800">- Update to new upstream release 4.0.2
  * GlusterD2 (GD2) is a new management daemon for Gluster-4.0,
    glustercli is the command-line interface for it.
    It is a preview release. GD2 is not backwards compatible with
    the older GlusterD. Heterogeneous clusters running both GD2
    and GlusterD are not possible.
  * Not all commands from GlusterD have been implemented for GD2.
  * GD2 does not (yet) work well in 2-node clusters.
  * Self Heal feature integrated for the new Volumes created
    using Glusterd2.</changelog>
  <changelog author="seanlew@opensuse.org" date="1547899200">- Update to new upstream version 5.3 (4.0 is EOL)
  * 5.3 brings hundreds of improvements, see complete relnote at
  https://docs.gluster.org/en/latest/release-notes/5.0/
  * Fixed a number of bugs:
    CVE-2018-1088, CVE-2018-1112 [boo#1090084],
    CVE-2018-10904 [boo#1107018], CVE-2018-10907 [boo#1107019],
    CVE-2018-10911 [boo#1107020], CVE-2018-10913 [boo#1107021],
    CVE-2018-10914 [boo#1107022], CVE-2018-10923 [boo#1107023],
    CVE-2018-10924 [boo#1107024], CVE-2018-10926 [boo#1107025],
    CVE-2018-10927 [boo#1107026], CVE-2018-10928 [boo#1107027],
    CVE-2018-10928 [boo#1107027], CVE-2018-10929 [boo#1107028],
    CVE-2018-10930 [boo#1107029], boo#1105776 .
- Remove patches no longer needed in 5.x:
  * 0001-build-restore-ability-to-control-verbosity-settings.patch
  * glusterfs-tirpc.diff</changelog>
  <changelog author="seanlew@opensuse.org" date="1551528000">- Update to new upstream version 5.4
  * FUSE Client memory leak fixed (#1623107)
  * fail to sync non-ascii utf8 file and dir names (#1648642)
  * Tracker bug for all leases related issues (#1651323)
  * gluster-blockd segfaults because of a null-deref (#1659563)
  * Memory leak: dict_t leak in rda_opendir (#1659676)
  * dht_revalidate may not heal attrs on the brick root (#1660736)
  * Fix tests/bugs/shard/zero-flag.t (#1660932)
  * NL cache: fix typos (#1662200)</changelog>
  <changelog author="seanlew@opensuse.org" date="1552824000">- Update to new upstream version 5.5
  * No changelog yet available in release notes</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Disable LTO (boo#1133088).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Move definition of _lto_cflags into %build.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1576238400">- Update to release 7.0
  * Latency based read child to improve read workload latency in
    a cluster, especially in a cloud setup. Also provides a load
    balancing with the outstanding pending request.
  * Thin-arbiter integration with GD1.
  * If a client older than glusterfs-4.x (i.e. 3.x clients)
    accesses a volume which has the `fips-mode-rchecksum` volume
    option enabled, it can cause erroneous checksum computation/
    unwanted behaviour during afr self-heal.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1577361600">- Fix the name of the Python bindings subpackage
- Properly mark Python bindings subpackage as noarch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1578571200">- Update to release 7.1
  * Fix rebalance causing IO Error - File descriptor in bad state
  * Fix geo-replication sessions going faulty
  * Fix memory leak in glusterfsd process
  * Fix GlusterFS brick process crash
- Add nocommon.patch [boo#1160392]</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1591272000">- Fixes for %_libexecdir changing to /usr/libexec</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1619697600">- Update to release 9.1
  * Implemented seek file operation for open-behind
  * Added io_uring support for Gluster
  * Added Support for 5K volumes
  * Enabled granular-entry-heal by default
  * Added support for monitoring the epoll/rpc layer
  * Improve rebalance of sparse files
- Drop nocommon.patch (merged)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632830400">- Update to release 9.3
  * New reset-brick command
  * Ability to get node level status of a cluster
  * Multi-threaded self-heal for Disperse volumes
  * Lock revocation feature
  * On-demand scrubbing for bitrot detection
  * Real time Cluster notifications using Events APIs
- Move mount helper to /usr/sbin [boo#1191062]</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1657800000">- add explicit Requires for the dependencies, so we make sure
  the dependencies are installed in the same version</changelog>
</package>
<package pkgid="9b7a52f31c419a4d2c430f6af53c6c0c83382a2fb08bff425e86c185ed4d261e" name="libgfapi0" arch="s390x">
  <version epoch="0" ver="9.3" rel="bp154.2.3.1"/>
  <changelog author="scorot@free.fr" date="1445947200">- Update to version 3.6.6
  * No ChangeLog available</changelog>
  <changelog author="vcizek@suse.com" date="1503489600">- Update to version 3.8.15
  * fixes build with OpenSSL 1.1 (bsc#1055466)
  * Mandatory lock support for Multiprotocol environment
  * Gluster/NFS disabled by default
  * Geo-replication for Sharded Volumes
  * Tiering aware Geo-replication
  * Enhance Quota enable/disable in glusterd
  * Automagic unsplit-brain by [ctime|mtime|size|majority] for AFR
  * Granular Entry self-heal for AFR
  * Tons of bugfixes
  * for more details see the NEWS file
- spec cleanup
- Install License files/docu</changelog>
  <changelog author="vcizek@suse.com" date="1508328000">- Add missing Requires: libacl-devel to the devel subpackage
  * glfs.h #includes &lt;sys/acl.h&gt;</changelog>
  <changelog author="mpluskal@suse.com" date="1509710400">- Explicitly require python2 as python3 is not yet supported</changelog>
  <changelog author="kukuk@suse.de" date="1510574400">- glusterfs-tirpc.diff: fallback to libtirpc if there is no sunrpc
  support in glibc</changelog>
  <changelog author="jengelh@inai.de" date="1512388800">- Update to new release 3.12.3
  * -- Features introduced in 3.10
  * Brick multiplexing
  * Support to display op-version information from clients
  * Support for rebalance time to completion estimation
  * Separation of tier as its own service
  * Statedump support for gfapi based applications
  * Disabled creation of trash directory by default
  * Implemented parallel readdirp with distribute xlator
  * -- Features introduced in 3.12:
  * Ability to mount sub-directories using the Gluster
    FUSE protocol
  * GFID to path conversion is enabled by default
  * Provided an option to set a limit on number of bricks
    multiplexed in a processes
  * Enhanced the option to export statfs data for bricks
    sharing the same backend filesystem
  * Provided a means to resolve GFID split-brain using
    the gluster CLI
  * Introduction of new api glfs_fd_set_lkowner() to set lock owner
- Remove glusterfs-date.diff (no longer applies)</changelog>
  <changelog author="jengelh@inai.de" date="1513252800">- Add 0001-build-restore-ability-to-control-verbosity-settings.patch
- Replace xdr_sizeof.c with an empty file</changelog>
  <changelog author="jengelh@inai.de" date="1525348800">- Update to new upstream release 4.0.2
  * GlusterD2 (GD2) is a new management daemon for Gluster-4.0,
    glustercli is the command-line interface for it.
    It is a preview release. GD2 is not backwards compatible with
    the older GlusterD. Heterogeneous clusters running both GD2
    and GlusterD are not possible.
  * Not all commands from GlusterD have been implemented for GD2.
  * GD2 does not (yet) work well in 2-node clusters.
  * Self Heal feature integrated for the new Volumes created
    using Glusterd2.</changelog>
  <changelog author="seanlew@opensuse.org" date="1547899200">- Update to new upstream version 5.3 (4.0 is EOL)
  * 5.3 brings hundreds of improvements, see complete relnote at
  https://docs.gluster.org/en/latest/release-notes/5.0/
  * Fixed a number of bugs:
    CVE-2018-1088, CVE-2018-1112 [boo#1090084],
    CVE-2018-10904 [boo#1107018], CVE-2018-10907 [boo#1107019],
    CVE-2018-10911 [boo#1107020], CVE-2018-10913 [boo#1107021],
    CVE-2018-10914 [boo#1107022], CVE-2018-10923 [boo#1107023],
    CVE-2018-10924 [boo#1107024], CVE-2018-10926 [boo#1107025],
    CVE-2018-10927 [boo#1107026], CVE-2018-10928 [boo#1107027],
    CVE-2018-10928 [boo#1107027], CVE-2018-10929 [boo#1107028],
    CVE-2018-10930 [boo#1107029], boo#1105776 .
- Remove patches no longer needed in 5.x:
  * 0001-build-restore-ability-to-control-verbosity-settings.patch
  * glusterfs-tirpc.diff</changelog>
  <changelog author="seanlew@opensuse.org" date="1551528000">- Update to new upstream version 5.4
  * FUSE Client memory leak fixed (#1623107)
  * fail to sync non-ascii utf8 file and dir names (#1648642)
  * Tracker bug for all leases related issues (#1651323)
  * gluster-blockd segfaults because of a null-deref (#1659563)
  * Memory leak: dict_t leak in rda_opendir (#1659676)
  * dht_revalidate may not heal attrs on the brick root (#1660736)
  * Fix tests/bugs/shard/zero-flag.t (#1660932)
  * NL cache: fix typos (#1662200)</changelog>
  <changelog author="seanlew@opensuse.org" date="1552824000">- Update to new upstream version 5.5
  * No changelog yet available in release notes</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Disable LTO (boo#1133088).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Move definition of _lto_cflags into %build.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1576238400">- Update to release 7.0
  * Latency based read child to improve read workload latency in
    a cluster, especially in a cloud setup. Also provides a load
    balancing with the outstanding pending request.
  * Thin-arbiter integration with GD1.
  * If a client older than glusterfs-4.x (i.e. 3.x clients)
    accesses a volume which has the `fips-mode-rchecksum` volume
    option enabled, it can cause erroneous checksum computation/
    unwanted behaviour during afr self-heal.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1577361600">- Fix the name of the Python bindings subpackage
- Properly mark Python bindings subpackage as noarch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1578571200">- Update to release 7.1
  * Fix rebalance causing IO Error - File descriptor in bad state
  * Fix geo-replication sessions going faulty
  * Fix memory leak in glusterfsd process
  * Fix GlusterFS brick process crash
- Add nocommon.patch [boo#1160392]</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1591272000">- Fixes for %_libexecdir changing to /usr/libexec</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1619697600">- Update to release 9.1
  * Implemented seek file operation for open-behind
  * Added io_uring support for Gluster
  * Added Support for 5K volumes
  * Enabled granular-entry-heal by default
  * Added support for monitoring the epoll/rpc layer
  * Improve rebalance of sparse files
- Drop nocommon.patch (merged)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632830400">- Update to release 9.3
  * New reset-brick command
  * Ability to get node level status of a cluster
  * Multi-threaded self-heal for Disperse volumes
  * Lock revocation feature
  * On-demand scrubbing for bitrot detection
  * Real time Cluster notifications using Events APIs
- Move mount helper to /usr/sbin [boo#1191062]</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1657800000">- add explicit Requires for the dependencies, so we make sure
  the dependencies are installed in the same version</changelog>
</package>
<package pkgid="dbd76fface22769e09aef18ac0959b5dbfdc9fe61d5d3ffa3106017b6963aefd" name="libgfapi0" arch="x86_64">
  <version epoch="0" ver="9.3" rel="bp154.2.3.1"/>
  <changelog author="scorot@free.fr" date="1445947200">- Update to version 3.6.6
  * No ChangeLog available</changelog>
  <changelog author="vcizek@suse.com" date="1503489600">- Update to version 3.8.15
  * fixes build with OpenSSL 1.1 (bsc#1055466)
  * Mandatory lock support for Multiprotocol environment
  * Gluster/NFS disabled by default
  * Geo-replication for Sharded Volumes
  * Tiering aware Geo-replication
  * Enhance Quota enable/disable in glusterd
  * Automagic unsplit-brain by [ctime|mtime|size|majority] for AFR
  * Granular Entry self-heal for AFR
  * Tons of bugfixes
  * for more details see the NEWS file
- spec cleanup
- Install License files/docu</changelog>
  <changelog author="vcizek@suse.com" date="1508328000">- Add missing Requires: libacl-devel to the devel subpackage
  * glfs.h #includes &lt;sys/acl.h&gt;</changelog>
  <changelog author="mpluskal@suse.com" date="1509710400">- Explicitly require python2 as python3 is not yet supported</changelog>
  <changelog author="kukuk@suse.de" date="1510574400">- glusterfs-tirpc.diff: fallback to libtirpc if there is no sunrpc
  support in glibc</changelog>
  <changelog author="jengelh@inai.de" date="1512388800">- Update to new release 3.12.3
  * -- Features introduced in 3.10
  * Brick multiplexing
  * Support to display op-version information from clients
  * Support for rebalance time to completion estimation
  * Separation of tier as its own service
  * Statedump support for gfapi based applications
  * Disabled creation of trash directory by default
  * Implemented parallel readdirp with distribute xlator
  * -- Features introduced in 3.12:
  * Ability to mount sub-directories using the Gluster
    FUSE protocol
  * GFID to path conversion is enabled by default
  * Provided an option to set a limit on number of bricks
    multiplexed in a processes
  * Enhanced the option to export statfs data for bricks
    sharing the same backend filesystem
  * Provided a means to resolve GFID split-brain using
    the gluster CLI
  * Introduction of new api glfs_fd_set_lkowner() to set lock owner
- Remove glusterfs-date.diff (no longer applies)</changelog>
  <changelog author="jengelh@inai.de" date="1513252800">- Add 0001-build-restore-ability-to-control-verbosity-settings.patch
- Replace xdr_sizeof.c with an empty file</changelog>
  <changelog author="jengelh@inai.de" date="1525348800">- Update to new upstream release 4.0.2
  * GlusterD2 (GD2) is a new management daemon for Gluster-4.0,
    glustercli is the command-line interface for it.
    It is a preview release. GD2 is not backwards compatible with
    the older GlusterD. Heterogeneous clusters running both GD2
    and GlusterD are not possible.
  * Not all commands from GlusterD have been implemented for GD2.
  * GD2 does not (yet) work well in 2-node clusters.
  * Self Heal feature integrated for the new Volumes created
    using Glusterd2.</changelog>
  <changelog author="seanlew@opensuse.org" date="1547899200">- Update to new upstream version 5.3 (4.0 is EOL)
  * 5.3 brings hundreds of improvements, see complete relnote at
  https://docs.gluster.org/en/latest/release-notes/5.0/
  * Fixed a number of bugs:
    CVE-2018-1088, CVE-2018-1112 [boo#1090084],
    CVE-2018-10904 [boo#1107018], CVE-2018-10907 [boo#1107019],
    CVE-2018-10911 [boo#1107020], CVE-2018-10913 [boo#1107021],
    CVE-2018-10914 [boo#1107022], CVE-2018-10923 [boo#1107023],
    CVE-2018-10924 [boo#1107024], CVE-2018-10926 [boo#1107025],
    CVE-2018-10927 [boo#1107026], CVE-2018-10928 [boo#1107027],
    CVE-2018-10928 [boo#1107027], CVE-2018-10929 [boo#1107028],
    CVE-2018-10930 [boo#1107029], boo#1105776 .
- Remove patches no longer needed in 5.x:
  * 0001-build-restore-ability-to-control-verbosity-settings.patch
  * glusterfs-tirpc.diff</changelog>
  <changelog author="seanlew@opensuse.org" date="1551528000">- Update to new upstream version 5.4
  * FUSE Client memory leak fixed (#1623107)
  * fail to sync non-ascii utf8 file and dir names (#1648642)
  * Tracker bug for all leases related issues (#1651323)
  * gluster-blockd segfaults because of a null-deref (#1659563)
  * Memory leak: dict_t leak in rda_opendir (#1659676)
  * dht_revalidate may not heal attrs on the brick root (#1660736)
  * Fix tests/bugs/shard/zero-flag.t (#1660932)
  * NL cache: fix typos (#1662200)</changelog>
  <changelog author="seanlew@opensuse.org" date="1552824000">- Update to new upstream version 5.5
  * No changelog yet available in release notes</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Disable LTO (boo#1133088).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Move definition of _lto_cflags into %build.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1576238400">- Update to release 7.0
  * Latency based read child to improve read workload latency in
    a cluster, especially in a cloud setup. Also provides a load
    balancing with the outstanding pending request.
  * Thin-arbiter integration with GD1.
  * If a client older than glusterfs-4.x (i.e. 3.x clients)
    accesses a volume which has the `fips-mode-rchecksum` volume
    option enabled, it can cause erroneous checksum computation/
    unwanted behaviour during afr self-heal.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1577361600">- Fix the name of the Python bindings subpackage
- Properly mark Python bindings subpackage as noarch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1578571200">- Update to release 7.1
  * Fix rebalance causing IO Error - File descriptor in bad state
  * Fix geo-replication sessions going faulty
  * Fix memory leak in glusterfsd process
  * Fix GlusterFS brick process crash
- Add nocommon.patch [boo#1160392]</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1591272000">- Fixes for %_libexecdir changing to /usr/libexec</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1619697600">- Update to release 9.1
  * Implemented seek file operation for open-behind
  * Added io_uring support for Gluster
  * Added Support for 5K volumes
  * Enabled granular-entry-heal by default
  * Added support for monitoring the epoll/rpc layer
  * Improve rebalance of sparse files
- Drop nocommon.patch (merged)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632830400">- Update to release 9.3
  * New reset-brick command
  * Ability to get node level status of a cluster
  * Multi-threaded self-heal for Disperse volumes
  * Lock revocation feature
  * On-demand scrubbing for bitrot detection
  * Real time Cluster notifications using Events APIs
- Move mount helper to /usr/sbin [boo#1191062]</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1657800000">- add explicit Requires for the dependencies, so we make sure
  the dependencies are installed in the same version</changelog>
</package>
<package pkgid="c9ae8f58d60b22f81b1d802f931851204c457755dd509ee6876cecad0eccec82" name="libgfchangelog0" arch="aarch64">
  <version epoch="0" ver="9.3" rel="bp154.2.3.1"/>
  <changelog author="scorot@free.fr" date="1445947200">- Update to version 3.6.6
  * No ChangeLog available</changelog>
  <changelog author="vcizek@suse.com" date="1503489600">- Update to version 3.8.15
  * fixes build with OpenSSL 1.1 (bsc#1055466)
  * Mandatory lock support for Multiprotocol environment
  * Gluster/NFS disabled by default
  * Geo-replication for Sharded Volumes
  * Tiering aware Geo-replication
  * Enhance Quota enable/disable in glusterd
  * Automagic unsplit-brain by [ctime|mtime|size|majority] for AFR
  * Granular Entry self-heal for AFR
  * Tons of bugfixes
  * for more details see the NEWS file
- spec cleanup
- Install License files/docu</changelog>
  <changelog author="vcizek@suse.com" date="1508328000">- Add missing Requires: libacl-devel to the devel subpackage
  * glfs.h #includes &lt;sys/acl.h&gt;</changelog>
  <changelog author="mpluskal@suse.com" date="1509710400">- Explicitly require python2 as python3 is not yet supported</changelog>
  <changelog author="kukuk@suse.de" date="1510574400">- glusterfs-tirpc.diff: fallback to libtirpc if there is no sunrpc
  support in glibc</changelog>
  <changelog author="jengelh@inai.de" date="1512388800">- Update to new release 3.12.3
  * -- Features introduced in 3.10
  * Brick multiplexing
  * Support to display op-version information from clients
  * Support for rebalance time to completion estimation
  * Separation of tier as its own service
  * Statedump support for gfapi based applications
  * Disabled creation of trash directory by default
  * Implemented parallel readdirp with distribute xlator
  * -- Features introduced in 3.12:
  * Ability to mount sub-directories using the Gluster
    FUSE protocol
  * GFID to path conversion is enabled by default
  * Provided an option to set a limit on number of bricks
    multiplexed in a processes
  * Enhanced the option to export statfs data for bricks
    sharing the same backend filesystem
  * Provided a means to resolve GFID split-brain using
    the gluster CLI
  * Introduction of new api glfs_fd_set_lkowner() to set lock owner
- Remove glusterfs-date.diff (no longer applies)</changelog>
  <changelog author="jengelh@inai.de" date="1513252800">- Add 0001-build-restore-ability-to-control-verbosity-settings.patch
- Replace xdr_sizeof.c with an empty file</changelog>
  <changelog author="jengelh@inai.de" date="1525348800">- Update to new upstream release 4.0.2
  * GlusterD2 (GD2) is a new management daemon for Gluster-4.0,
    glustercli is the command-line interface for it.
    It is a preview release. GD2 is not backwards compatible with
    the older GlusterD. Heterogeneous clusters running both GD2
    and GlusterD are not possible.
  * Not all commands from GlusterD have been implemented for GD2.
  * GD2 does not (yet) work well in 2-node clusters.
  * Self Heal feature integrated for the new Volumes created
    using Glusterd2.</changelog>
  <changelog author="seanlew@opensuse.org" date="1547899200">- Update to new upstream version 5.3 (4.0 is EOL)
  * 5.3 brings hundreds of improvements, see complete relnote at
  https://docs.gluster.org/en/latest/release-notes/5.0/
  * Fixed a number of bugs:
    CVE-2018-1088, CVE-2018-1112 [boo#1090084],
    CVE-2018-10904 [boo#1107018], CVE-2018-10907 [boo#1107019],
    CVE-2018-10911 [boo#1107020], CVE-2018-10913 [boo#1107021],
    CVE-2018-10914 [boo#1107022], CVE-2018-10923 [boo#1107023],
    CVE-2018-10924 [boo#1107024], CVE-2018-10926 [boo#1107025],
    CVE-2018-10927 [boo#1107026], CVE-2018-10928 [boo#1107027],
    CVE-2018-10928 [boo#1107027], CVE-2018-10929 [boo#1107028],
    CVE-2018-10930 [boo#1107029], boo#1105776 .
- Remove patches no longer needed in 5.x:
  * 0001-build-restore-ability-to-control-verbosity-settings.patch
  * glusterfs-tirpc.diff</changelog>
  <changelog author="seanlew@opensuse.org" date="1551528000">- Update to new upstream version 5.4
  * FUSE Client memory leak fixed (#1623107)
  * fail to sync non-ascii utf8 file and dir names (#1648642)
  * Tracker bug for all leases related issues (#1651323)
  * gluster-blockd segfaults because of a null-deref (#1659563)
  * Memory leak: dict_t leak in rda_opendir (#1659676)
  * dht_revalidate may not heal attrs on the brick root (#1660736)
  * Fix tests/bugs/shard/zero-flag.t (#1660932)
  * NL cache: fix typos (#1662200)</changelog>
  <changelog author="seanlew@opensuse.org" date="1552824000">- Update to new upstream version 5.5
  * No changelog yet available in release notes</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Disable LTO (boo#1133088).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Move definition of _lto_cflags into %build.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1576238400">- Update to release 7.0
  * Latency based read child to improve read workload latency in
    a cluster, especially in a cloud setup. Also provides a load
    balancing with the outstanding pending request.
  * Thin-arbiter integration with GD1.
  * If a client older than glusterfs-4.x (i.e. 3.x clients)
    accesses a volume which has the `fips-mode-rchecksum` volume
    option enabled, it can cause erroneous checksum computation/
    unwanted behaviour during afr self-heal.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1577361600">- Fix the name of the Python bindings subpackage
- Properly mark Python bindings subpackage as noarch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1578571200">- Update to release 7.1
  * Fix rebalance causing IO Error - File descriptor in bad state
  * Fix geo-replication sessions going faulty
  * Fix memory leak in glusterfsd process
  * Fix GlusterFS brick process crash
- Add nocommon.patch [boo#1160392]</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1591272000">- Fixes for %_libexecdir changing to /usr/libexec</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1619697600">- Update to release 9.1
  * Implemented seek file operation for open-behind
  * Added io_uring support for Gluster
  * Added Support for 5K volumes
  * Enabled granular-entry-heal by default
  * Added support for monitoring the epoll/rpc layer
  * Improve rebalance of sparse files
- Drop nocommon.patch (merged)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632830400">- Update to release 9.3
  * New reset-brick command
  * Ability to get node level status of a cluster
  * Multi-threaded self-heal for Disperse volumes
  * Lock revocation feature
  * On-demand scrubbing for bitrot detection
  * Real time Cluster notifications using Events APIs
- Move mount helper to /usr/sbin [boo#1191062]</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1657800000">- add explicit Requires for the dependencies, so we make sure
  the dependencies are installed in the same version</changelog>
</package>
<package pkgid="d0c29c8aef0ee30b6e085800c83ad2f0b594eb393585c3e27adec59ff39ec4b1" name="libgfchangelog0" arch="i586">
  <version epoch="0" ver="9.3" rel="bp154.2.3.1"/>
  <changelog author="scorot@free.fr" date="1445947200">- Update to version 3.6.6
  * No ChangeLog available</changelog>
  <changelog author="vcizek@suse.com" date="1503489600">- Update to version 3.8.15
  * fixes build with OpenSSL 1.1 (bsc#1055466)
  * Mandatory lock support for Multiprotocol environment
  * Gluster/NFS disabled by default
  * Geo-replication for Sharded Volumes
  * Tiering aware Geo-replication
  * Enhance Quota enable/disable in glusterd
  * Automagic unsplit-brain by [ctime|mtime|size|majority] for AFR
  * Granular Entry self-heal for AFR
  * Tons of bugfixes
  * for more details see the NEWS file
- spec cleanup
- Install License files/docu</changelog>
  <changelog author="vcizek@suse.com" date="1508328000">- Add missing Requires: libacl-devel to the devel subpackage
  * glfs.h #includes &lt;sys/acl.h&gt;</changelog>
  <changelog author="mpluskal@suse.com" date="1509710400">- Explicitly require python2 as python3 is not yet supported</changelog>
  <changelog author="kukuk@suse.de" date="1510574400">- glusterfs-tirpc.diff: fallback to libtirpc if there is no sunrpc
  support in glibc</changelog>
  <changelog author="jengelh@inai.de" date="1512388800">- Update to new release 3.12.3
  * -- Features introduced in 3.10
  * Brick multiplexing
  * Support to display op-version information from clients
  * Support for rebalance time to completion estimation
  * Separation of tier as its own service
  * Statedump support for gfapi based applications
  * Disabled creation of trash directory by default
  * Implemented parallel readdirp with distribute xlator
  * -- Features introduced in 3.12:
  * Ability to mount sub-directories using the Gluster
    FUSE protocol
  * GFID to path conversion is enabled by default
  * Provided an option to set a limit on number of bricks
    multiplexed in a processes
  * Enhanced the option to export statfs data for bricks
    sharing the same backend filesystem
  * Provided a means to resolve GFID split-brain using
    the gluster CLI
  * Introduction of new api glfs_fd_set_lkowner() to set lock owner
- Remove glusterfs-date.diff (no longer applies)</changelog>
  <changelog author="jengelh@inai.de" date="1513252800">- Add 0001-build-restore-ability-to-control-verbosity-settings.patch
- Replace xdr_sizeof.c with an empty file</changelog>
  <changelog author="jengelh@inai.de" date="1525348800">- Update to new upstream release 4.0.2
  * GlusterD2 (GD2) is a new management daemon for Gluster-4.0,
    glustercli is the command-line interface for it.
    It is a preview release. GD2 is not backwards compatible with
    the older GlusterD. Heterogeneous clusters running both GD2
    and GlusterD are not possible.
  * Not all commands from GlusterD have been implemented for GD2.
  * GD2 does not (yet) work well in 2-node clusters.
  * Self Heal feature integrated for the new Volumes created
    using Glusterd2.</changelog>
  <changelog author="seanlew@opensuse.org" date="1547899200">- Update to new upstream version 5.3 (4.0 is EOL)
  * 5.3 brings hundreds of improvements, see complete relnote at
  https://docs.gluster.org/en/latest/release-notes/5.0/
  * Fixed a number of bugs:
    CVE-2018-1088, CVE-2018-1112 [boo#1090084],
    CVE-2018-10904 [boo#1107018], CVE-2018-10907 [boo#1107019],
    CVE-2018-10911 [boo#1107020], CVE-2018-10913 [boo#1107021],
    CVE-2018-10914 [boo#1107022], CVE-2018-10923 [boo#1107023],
    CVE-2018-10924 [boo#1107024], CVE-2018-10926 [boo#1107025],
    CVE-2018-10927 [boo#1107026], CVE-2018-10928 [boo#1107027],
    CVE-2018-10928 [boo#1107027], CVE-2018-10929 [boo#1107028],
    CVE-2018-10930 [boo#1107029], boo#1105776 .
- Remove patches no longer needed in 5.x:
  * 0001-build-restore-ability-to-control-verbosity-settings.patch
  * glusterfs-tirpc.diff</changelog>
  <changelog author="seanlew@opensuse.org" date="1551528000">- Update to new upstream version 5.4
  * FUSE Client memory leak fixed (#1623107)
  * fail to sync non-ascii utf8 file and dir names (#1648642)
  * Tracker bug for all leases related issues (#1651323)
  * gluster-blockd segfaults because of a null-deref (#1659563)
  * Memory leak: dict_t leak in rda_opendir (#1659676)
  * dht_revalidate may not heal attrs on the brick root (#1660736)
  * Fix tests/bugs/shard/zero-flag.t (#1660932)
  * NL cache: fix typos (#1662200)</changelog>
  <changelog author="seanlew@opensuse.org" date="1552824000">- Update to new upstream version 5.5
  * No changelog yet available in release notes</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Disable LTO (boo#1133088).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Move definition of _lto_cflags into %build.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1576238400">- Update to release 7.0
  * Latency based read child to improve read workload latency in
    a cluster, especially in a cloud setup. Also provides a load
    balancing with the outstanding pending request.
  * Thin-arbiter integration with GD1.
  * If a client older than glusterfs-4.x (i.e. 3.x clients)
    accesses a volume which has the `fips-mode-rchecksum` volume
    option enabled, it can cause erroneous checksum computation/
    unwanted behaviour during afr self-heal.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1577361600">- Fix the name of the Python bindings subpackage
- Properly mark Python bindings subpackage as noarch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1578571200">- Update to release 7.1
  * Fix rebalance causing IO Error - File descriptor in bad state
  * Fix geo-replication sessions going faulty
  * Fix memory leak in glusterfsd process
  * Fix GlusterFS brick process crash
- Add nocommon.patch [boo#1160392]</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1591272000">- Fixes for %_libexecdir changing to /usr/libexec</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1619697600">- Update to release 9.1
  * Implemented seek file operation for open-behind
  * Added io_uring support for Gluster
  * Added Support for 5K volumes
  * Enabled granular-entry-heal by default
  * Added support for monitoring the epoll/rpc layer
  * Improve rebalance of sparse files
- Drop nocommon.patch (merged)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632830400">- Update to release 9.3
  * New reset-brick command
  * Ability to get node level status of a cluster
  * Multi-threaded self-heal for Disperse volumes
  * Lock revocation feature
  * On-demand scrubbing for bitrot detection
  * Real time Cluster notifications using Events APIs
- Move mount helper to /usr/sbin [boo#1191062]</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1657800000">- add explicit Requires for the dependencies, so we make sure
  the dependencies are installed in the same version</changelog>
</package>
<package pkgid="d5d926707be1dd80513b8b370cfa55beb65a0a7a166ab2a5684bb976750af3fa" name="libgfchangelog0" arch="ppc64le">
  <version epoch="0" ver="9.3" rel="bp154.2.3.1"/>
  <changelog author="scorot@free.fr" date="1445947200">- Update to version 3.6.6
  * No ChangeLog available</changelog>
  <changelog author="vcizek@suse.com" date="1503489600">- Update to version 3.8.15
  * fixes build with OpenSSL 1.1 (bsc#1055466)
  * Mandatory lock support for Multiprotocol environment
  * Gluster/NFS disabled by default
  * Geo-replication for Sharded Volumes
  * Tiering aware Geo-replication
  * Enhance Quota enable/disable in glusterd
  * Automagic unsplit-brain by [ctime|mtime|size|majority] for AFR
  * Granular Entry self-heal for AFR
  * Tons of bugfixes
  * for more details see the NEWS file
- spec cleanup
- Install License files/docu</changelog>
  <changelog author="vcizek@suse.com" date="1508328000">- Add missing Requires: libacl-devel to the devel subpackage
  * glfs.h #includes &lt;sys/acl.h&gt;</changelog>
  <changelog author="mpluskal@suse.com" date="1509710400">- Explicitly require python2 as python3 is not yet supported</changelog>
  <changelog author="kukuk@suse.de" date="1510574400">- glusterfs-tirpc.diff: fallback to libtirpc if there is no sunrpc
  support in glibc</changelog>
  <changelog author="jengelh@inai.de" date="1512388800">- Update to new release 3.12.3
  * -- Features introduced in 3.10
  * Brick multiplexing
  * Support to display op-version information from clients
  * Support for rebalance time to completion estimation
  * Separation of tier as its own service
  * Statedump support for gfapi based applications
  * Disabled creation of trash directory by default
  * Implemented parallel readdirp with distribute xlator
  * -- Features introduced in 3.12:
  * Ability to mount sub-directories using the Gluster
    FUSE protocol
  * GFID to path conversion is enabled by default
  * Provided an option to set a limit on number of bricks
    multiplexed in a processes
  * Enhanced the option to export statfs data for bricks
    sharing the same backend filesystem
  * Provided a means to resolve GFID split-brain using
    the gluster CLI
  * Introduction of new api glfs_fd_set_lkowner() to set lock owner
- Remove glusterfs-date.diff (no longer applies)</changelog>
  <changelog author="jengelh@inai.de" date="1513252800">- Add 0001-build-restore-ability-to-control-verbosity-settings.patch
- Replace xdr_sizeof.c with an empty file</changelog>
  <changelog author="jengelh@inai.de" date="1525348800">- Update to new upstream release 4.0.2
  * GlusterD2 (GD2) is a new management daemon for Gluster-4.0,
    glustercli is the command-line interface for it.
    It is a preview release. GD2 is not backwards compatible with
    the older GlusterD. Heterogeneous clusters running both GD2
    and GlusterD are not possible.
  * Not all commands from GlusterD have been implemented for GD2.
  * GD2 does not (yet) work well in 2-node clusters.
  * Self Heal feature integrated for the new Volumes created
    using Glusterd2.</changelog>
  <changelog author="seanlew@opensuse.org" date="1547899200">- Update to new upstream version 5.3 (4.0 is EOL)
  * 5.3 brings hundreds of improvements, see complete relnote at
  https://docs.gluster.org/en/latest/release-notes/5.0/
  * Fixed a number of bugs:
    CVE-2018-1088, CVE-2018-1112 [boo#1090084],
    CVE-2018-10904 [boo#1107018], CVE-2018-10907 [boo#1107019],
    CVE-2018-10911 [boo#1107020], CVE-2018-10913 [boo#1107021],
    CVE-2018-10914 [boo#1107022], CVE-2018-10923 [boo#1107023],
    CVE-2018-10924 [boo#1107024], CVE-2018-10926 [boo#1107025],
    CVE-2018-10927 [boo#1107026], CVE-2018-10928 [boo#1107027],
    CVE-2018-10928 [boo#1107027], CVE-2018-10929 [boo#1107028],
    CVE-2018-10930 [boo#1107029], boo#1105776 .
- Remove patches no longer needed in 5.x:
  * 0001-build-restore-ability-to-control-verbosity-settings.patch
  * glusterfs-tirpc.diff</changelog>
  <changelog author="seanlew@opensuse.org" date="1551528000">- Update to new upstream version 5.4
  * FUSE Client memory leak fixed (#1623107)
  * fail to sync non-ascii utf8 file and dir names (#1648642)
  * Tracker bug for all leases related issues (#1651323)
  * gluster-blockd segfaults because of a null-deref (#1659563)
  * Memory leak: dict_t leak in rda_opendir (#1659676)
  * dht_revalidate may not heal attrs on the brick root (#1660736)
  * Fix tests/bugs/shard/zero-flag.t (#1660932)
  * NL cache: fix typos (#1662200)</changelog>
  <changelog author="seanlew@opensuse.org" date="1552824000">- Update to new upstream version 5.5
  * No changelog yet available in release notes</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Disable LTO (boo#1133088).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Move definition of _lto_cflags into %build.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1576238400">- Update to release 7.0
  * Latency based read child to improve read workload latency in
    a cluster, especially in a cloud setup. Also provides a load
    balancing with the outstanding pending request.
  * Thin-arbiter integration with GD1.
  * If a client older than glusterfs-4.x (i.e. 3.x clients)
    accesses a volume which has the `fips-mode-rchecksum` volume
    option enabled, it can cause erroneous checksum computation/
    unwanted behaviour during afr self-heal.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1577361600">- Fix the name of the Python bindings subpackage
- Properly mark Python bindings subpackage as noarch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1578571200">- Update to release 7.1
  * Fix rebalance causing IO Error - File descriptor in bad state
  * Fix geo-replication sessions going faulty
  * Fix memory leak in glusterfsd process
  * Fix GlusterFS brick process crash
- Add nocommon.patch [boo#1160392]</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1591272000">- Fixes for %_libexecdir changing to /usr/libexec</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1619697600">- Update to release 9.1
  * Implemented seek file operation for open-behind
  * Added io_uring support for Gluster
  * Added Support for 5K volumes
  * Enabled granular-entry-heal by default
  * Added support for monitoring the epoll/rpc layer
  * Improve rebalance of sparse files
- Drop nocommon.patch (merged)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632830400">- Update to release 9.3
  * New reset-brick command
  * Ability to get node level status of a cluster
  * Multi-threaded self-heal for Disperse volumes
  * Lock revocation feature
  * On-demand scrubbing for bitrot detection
  * Real time Cluster notifications using Events APIs
- Move mount helper to /usr/sbin [boo#1191062]</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1657800000">- add explicit Requires for the dependencies, so we make sure
  the dependencies are installed in the same version</changelog>
</package>
<package pkgid="fcb31ca3b1bad4e92d699e925dd29d6d8afb44f8783113abf38724ca1fde6b18" name="libgfchangelog0" arch="s390x">
  <version epoch="0" ver="9.3" rel="bp154.2.3.1"/>
  <changelog author="scorot@free.fr" date="1445947200">- Update to version 3.6.6
  * No ChangeLog available</changelog>
  <changelog author="vcizek@suse.com" date="1503489600">- Update to version 3.8.15
  * fixes build with OpenSSL 1.1 (bsc#1055466)
  * Mandatory lock support for Multiprotocol environment
  * Gluster/NFS disabled by default
  * Geo-replication for Sharded Volumes
  * Tiering aware Geo-replication
  * Enhance Quota enable/disable in glusterd
  * Automagic unsplit-brain by [ctime|mtime|size|majority] for AFR
  * Granular Entry self-heal for AFR
  * Tons of bugfixes
  * for more details see the NEWS file
- spec cleanup
- Install License files/docu</changelog>
  <changelog author="vcizek@suse.com" date="1508328000">- Add missing Requires: libacl-devel to the devel subpackage
  * glfs.h #includes &lt;sys/acl.h&gt;</changelog>
  <changelog author="mpluskal@suse.com" date="1509710400">- Explicitly require python2 as python3 is not yet supported</changelog>
  <changelog author="kukuk@suse.de" date="1510574400">- glusterfs-tirpc.diff: fallback to libtirpc if there is no sunrpc
  support in glibc</changelog>
  <changelog author="jengelh@inai.de" date="1512388800">- Update to new release 3.12.3
  * -- Features introduced in 3.10
  * Brick multiplexing
  * Support to display op-version information from clients
  * Support for rebalance time to completion estimation
  * Separation of tier as its own service
  * Statedump support for gfapi based applications
  * Disabled creation of trash directory by default
  * Implemented parallel readdirp with distribute xlator
  * -- Features introduced in 3.12:
  * Ability to mount sub-directories using the Gluster
    FUSE protocol
  * GFID to path conversion is enabled by default
  * Provided an option to set a limit on number of bricks
    multiplexed in a processes
  * Enhanced the option to export statfs data for bricks
    sharing the same backend filesystem
  * Provided a means to resolve GFID split-brain using
    the gluster CLI
  * Introduction of new api glfs_fd_set_lkowner() to set lock owner
- Remove glusterfs-date.diff (no longer applies)</changelog>
  <changelog author="jengelh@inai.de" date="1513252800">- Add 0001-build-restore-ability-to-control-verbosity-settings.patch
- Replace xdr_sizeof.c with an empty file</changelog>
  <changelog author="jengelh@inai.de" date="1525348800">- Update to new upstream release 4.0.2
  * GlusterD2 (GD2) is a new management daemon for Gluster-4.0,
    glustercli is the command-line interface for it.
    It is a preview release. GD2 is not backwards compatible with
    the older GlusterD. Heterogeneous clusters running both GD2
    and GlusterD are not possible.
  * Not all commands from GlusterD have been implemented for GD2.
  * GD2 does not (yet) work well in 2-node clusters.
  * Self Heal feature integrated for the new Volumes created
    using Glusterd2.</changelog>
  <changelog author="seanlew@opensuse.org" date="1547899200">- Update to new upstream version 5.3 (4.0 is EOL)
  * 5.3 brings hundreds of improvements, see complete relnote at
  https://docs.gluster.org/en/latest/release-notes/5.0/
  * Fixed a number of bugs:
    CVE-2018-1088, CVE-2018-1112 [boo#1090084],
    CVE-2018-10904 [boo#1107018], CVE-2018-10907 [boo#1107019],
    CVE-2018-10911 [boo#1107020], CVE-2018-10913 [boo#1107021],
    CVE-2018-10914 [boo#1107022], CVE-2018-10923 [boo#1107023],
    CVE-2018-10924 [boo#1107024], CVE-2018-10926 [boo#1107025],
    CVE-2018-10927 [boo#1107026], CVE-2018-10928 [boo#1107027],
    CVE-2018-10928 [boo#1107027], CVE-2018-10929 [boo#1107028],
    CVE-2018-10930 [boo#1107029], boo#1105776 .
- Remove patches no longer needed in 5.x:
  * 0001-build-restore-ability-to-control-verbosity-settings.patch
  * glusterfs-tirpc.diff</changelog>
  <changelog author="seanlew@opensuse.org" date="1551528000">- Update to new upstream version 5.4
  * FUSE Client memory leak fixed (#1623107)
  * fail to sync non-ascii utf8 file and dir names (#1648642)
  * Tracker bug for all leases related issues (#1651323)
  * gluster-blockd segfaults because of a null-deref (#1659563)
  * Memory leak: dict_t leak in rda_opendir (#1659676)
  * dht_revalidate may not heal attrs on the brick root (#1660736)
  * Fix tests/bugs/shard/zero-flag.t (#1660932)
  * NL cache: fix typos (#1662200)</changelog>
  <changelog author="seanlew@opensuse.org" date="1552824000">- Update to new upstream version 5.5
  * No changelog yet available in release notes</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Disable LTO (boo#1133088).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Move definition of _lto_cflags into %build.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1576238400">- Update to release 7.0
  * Latency based read child to improve read workload latency in
    a cluster, especially in a cloud setup. Also provides a load
    balancing with the outstanding pending request.
  * Thin-arbiter integration with GD1.
  * If a client older than glusterfs-4.x (i.e. 3.x clients)
    accesses a volume which has the `fips-mode-rchecksum` volume
    option enabled, it can cause erroneous checksum computation/
    unwanted behaviour during afr self-heal.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1577361600">- Fix the name of the Python bindings subpackage
- Properly mark Python bindings subpackage as noarch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1578571200">- Update to release 7.1
  * Fix rebalance causing IO Error - File descriptor in bad state
  * Fix geo-replication sessions going faulty
  * Fix memory leak in glusterfsd process
  * Fix GlusterFS brick process crash
- Add nocommon.patch [boo#1160392]</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1591272000">- Fixes for %_libexecdir changing to /usr/libexec</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1619697600">- Update to release 9.1
  * Implemented seek file operation for open-behind
  * Added io_uring support for Gluster
  * Added Support for 5K volumes
  * Enabled granular-entry-heal by default
  * Added support for monitoring the epoll/rpc layer
  * Improve rebalance of sparse files
- Drop nocommon.patch (merged)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632830400">- Update to release 9.3
  * New reset-brick command
  * Ability to get node level status of a cluster
  * Multi-threaded self-heal for Disperse volumes
  * Lock revocation feature
  * On-demand scrubbing for bitrot detection
  * Real time Cluster notifications using Events APIs
- Move mount helper to /usr/sbin [boo#1191062]</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1657800000">- add explicit Requires for the dependencies, so we make sure
  the dependencies are installed in the same version</changelog>
</package>
<package pkgid="79566eb316722a831538f663c729398c63f5eada716bdc27851260b346caf1be" name="libgfchangelog0" arch="x86_64">
  <version epoch="0" ver="9.3" rel="bp154.2.3.1"/>
  <changelog author="scorot@free.fr" date="1445947200">- Update to version 3.6.6
  * No ChangeLog available</changelog>
  <changelog author="vcizek@suse.com" date="1503489600">- Update to version 3.8.15
  * fixes build with OpenSSL 1.1 (bsc#1055466)
  * Mandatory lock support for Multiprotocol environment
  * Gluster/NFS disabled by default
  * Geo-replication for Sharded Volumes
  * Tiering aware Geo-replication
  * Enhance Quota enable/disable in glusterd
  * Automagic unsplit-brain by [ctime|mtime|size|majority] for AFR
  * Granular Entry self-heal for AFR
  * Tons of bugfixes
  * for more details see the NEWS file
- spec cleanup
- Install License files/docu</changelog>
  <changelog author="vcizek@suse.com" date="1508328000">- Add missing Requires: libacl-devel to the devel subpackage
  * glfs.h #includes &lt;sys/acl.h&gt;</changelog>
  <changelog author="mpluskal@suse.com" date="1509710400">- Explicitly require python2 as python3 is not yet supported</changelog>
  <changelog author="kukuk@suse.de" date="1510574400">- glusterfs-tirpc.diff: fallback to libtirpc if there is no sunrpc
  support in glibc</changelog>
  <changelog author="jengelh@inai.de" date="1512388800">- Update to new release 3.12.3
  * -- Features introduced in 3.10
  * Brick multiplexing
  * Support to display op-version information from clients
  * Support for rebalance time to completion estimation
  * Separation of tier as its own service
  * Statedump support for gfapi based applications
  * Disabled creation of trash directory by default
  * Implemented parallel readdirp with distribute xlator
  * -- Features introduced in 3.12:
  * Ability to mount sub-directories using the Gluster
    FUSE protocol
  * GFID to path conversion is enabled by default
  * Provided an option to set a limit on number of bricks
    multiplexed in a processes
  * Enhanced the option to export statfs data for bricks
    sharing the same backend filesystem
  * Provided a means to resolve GFID split-brain using
    the gluster CLI
  * Introduction of new api glfs_fd_set_lkowner() to set lock owner
- Remove glusterfs-date.diff (no longer applies)</changelog>
  <changelog author="jengelh@inai.de" date="1513252800">- Add 0001-build-restore-ability-to-control-verbosity-settings.patch
- Replace xdr_sizeof.c with an empty file</changelog>
  <changelog author="jengelh@inai.de" date="1525348800">- Update to new upstream release 4.0.2
  * GlusterD2 (GD2) is a new management daemon for Gluster-4.0,
    glustercli is the command-line interface for it.
    It is a preview release. GD2 is not backwards compatible with
    the older GlusterD. Heterogeneous clusters running both GD2
    and GlusterD are not possible.
  * Not all commands from GlusterD have been implemented for GD2.
  * GD2 does not (yet) work well in 2-node clusters.
  * Self Heal feature integrated for the new Volumes created
    using Glusterd2.</changelog>
  <changelog author="seanlew@opensuse.org" date="1547899200">- Update to new upstream version 5.3 (4.0 is EOL)
  * 5.3 brings hundreds of improvements, see complete relnote at
  https://docs.gluster.org/en/latest/release-notes/5.0/
  * Fixed a number of bugs:
    CVE-2018-1088, CVE-2018-1112 [boo#1090084],
    CVE-2018-10904 [boo#1107018], CVE-2018-10907 [boo#1107019],
    CVE-2018-10911 [boo#1107020], CVE-2018-10913 [boo#1107021],
    CVE-2018-10914 [boo#1107022], CVE-2018-10923 [boo#1107023],
    CVE-2018-10924 [boo#1107024], CVE-2018-10926 [boo#1107025],
    CVE-2018-10927 [boo#1107026], CVE-2018-10928 [boo#1107027],
    CVE-2018-10928 [boo#1107027], CVE-2018-10929 [boo#1107028],
    CVE-2018-10930 [boo#1107029], boo#1105776 .
- Remove patches no longer needed in 5.x:
  * 0001-build-restore-ability-to-control-verbosity-settings.patch
  * glusterfs-tirpc.diff</changelog>
  <changelog author="seanlew@opensuse.org" date="1551528000">- Update to new upstream version 5.4
  * FUSE Client memory leak fixed (#1623107)
  * fail to sync non-ascii utf8 file and dir names (#1648642)
  * Tracker bug for all leases related issues (#1651323)
  * gluster-blockd segfaults because of a null-deref (#1659563)
  * Memory leak: dict_t leak in rda_opendir (#1659676)
  * dht_revalidate may not heal attrs on the brick root (#1660736)
  * Fix tests/bugs/shard/zero-flag.t (#1660932)
  * NL cache: fix typos (#1662200)</changelog>
  <changelog author="seanlew@opensuse.org" date="1552824000">- Update to new upstream version 5.5
  * No changelog yet available in release notes</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Disable LTO (boo#1133088).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Move definition of _lto_cflags into %build.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1576238400">- Update to release 7.0
  * Latency based read child to improve read workload latency in
    a cluster, especially in a cloud setup. Also provides a load
    balancing with the outstanding pending request.
  * Thin-arbiter integration with GD1.
  * If a client older than glusterfs-4.x (i.e. 3.x clients)
    accesses a volume which has the `fips-mode-rchecksum` volume
    option enabled, it can cause erroneous checksum computation/
    unwanted behaviour during afr self-heal.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1577361600">- Fix the name of the Python bindings subpackage
- Properly mark Python bindings subpackage as noarch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1578571200">- Update to release 7.1
  * Fix rebalance causing IO Error - File descriptor in bad state
  * Fix geo-replication sessions going faulty
  * Fix memory leak in glusterfsd process
  * Fix GlusterFS brick process crash
- Add nocommon.patch [boo#1160392]</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1591272000">- Fixes for %_libexecdir changing to /usr/libexec</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1619697600">- Update to release 9.1
  * Implemented seek file operation for open-behind
  * Added io_uring support for Gluster
  * Added Support for 5K volumes
  * Enabled granular-entry-heal by default
  * Added support for monitoring the epoll/rpc layer
  * Improve rebalance of sparse files
- Drop nocommon.patch (merged)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632830400">- Update to release 9.3
  * New reset-brick command
  * Ability to get node level status of a cluster
  * Multi-threaded self-heal for Disperse volumes
  * Lock revocation feature
  * On-demand scrubbing for bitrot detection
  * Real time Cluster notifications using Events APIs
- Move mount helper to /usr/sbin [boo#1191062]</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1657800000">- add explicit Requires for the dependencies, so we make sure
  the dependencies are installed in the same version</changelog>
</package>
<package pkgid="7d3f63dd1ab4d045959f8cc6b325b0ed36d3efb66c85eec40e1e3992701e45f1" name="libgfrpc0" arch="aarch64">
  <version epoch="0" ver="9.3" rel="bp154.2.3.1"/>
  <changelog author="scorot@free.fr" date="1445947200">- Update to version 3.6.6
  * No ChangeLog available</changelog>
  <changelog author="vcizek@suse.com" date="1503489600">- Update to version 3.8.15
  * fixes build with OpenSSL 1.1 (bsc#1055466)
  * Mandatory lock support for Multiprotocol environment
  * Gluster/NFS disabled by default
  * Geo-replication for Sharded Volumes
  * Tiering aware Geo-replication
  * Enhance Quota enable/disable in glusterd
  * Automagic unsplit-brain by [ctime|mtime|size|majority] for AFR
  * Granular Entry self-heal for AFR
  * Tons of bugfixes
  * for more details see the NEWS file
- spec cleanup
- Install License files/docu</changelog>
  <changelog author="vcizek@suse.com" date="1508328000">- Add missing Requires: libacl-devel to the devel subpackage
  * glfs.h #includes &lt;sys/acl.h&gt;</changelog>
  <changelog author="mpluskal@suse.com" date="1509710400">- Explicitly require python2 as python3 is not yet supported</changelog>
  <changelog author="kukuk@suse.de" date="1510574400">- glusterfs-tirpc.diff: fallback to libtirpc if there is no sunrpc
  support in glibc</changelog>
  <changelog author="jengelh@inai.de" date="1512388800">- Update to new release 3.12.3
  * -- Features introduced in 3.10
  * Brick multiplexing
  * Support to display op-version information from clients
  * Support for rebalance time to completion estimation
  * Separation of tier as its own service
  * Statedump support for gfapi based applications
  * Disabled creation of trash directory by default
  * Implemented parallel readdirp with distribute xlator
  * -- Features introduced in 3.12:
  * Ability to mount sub-directories using the Gluster
    FUSE protocol
  * GFID to path conversion is enabled by default
  * Provided an option to set a limit on number of bricks
    multiplexed in a processes
  * Enhanced the option to export statfs data for bricks
    sharing the same backend filesystem
  * Provided a means to resolve GFID split-brain using
    the gluster CLI
  * Introduction of new api glfs_fd_set_lkowner() to set lock owner
- Remove glusterfs-date.diff (no longer applies)</changelog>
  <changelog author="jengelh@inai.de" date="1513252800">- Add 0001-build-restore-ability-to-control-verbosity-settings.patch
- Replace xdr_sizeof.c with an empty file</changelog>
  <changelog author="jengelh@inai.de" date="1525348800">- Update to new upstream release 4.0.2
  * GlusterD2 (GD2) is a new management daemon for Gluster-4.0,
    glustercli is the command-line interface for it.
    It is a preview release. GD2 is not backwards compatible with
    the older GlusterD. Heterogeneous clusters running both GD2
    and GlusterD are not possible.
  * Not all commands from GlusterD have been implemented for GD2.
  * GD2 does not (yet) work well in 2-node clusters.
  * Self Heal feature integrated for the new Volumes created
    using Glusterd2.</changelog>
  <changelog author="seanlew@opensuse.org" date="1547899200">- Update to new upstream version 5.3 (4.0 is EOL)
  * 5.3 brings hundreds of improvements, see complete relnote at
  https://docs.gluster.org/en/latest/release-notes/5.0/
  * Fixed a number of bugs:
    CVE-2018-1088, CVE-2018-1112 [boo#1090084],
    CVE-2018-10904 [boo#1107018], CVE-2018-10907 [boo#1107019],
    CVE-2018-10911 [boo#1107020], CVE-2018-10913 [boo#1107021],
    CVE-2018-10914 [boo#1107022], CVE-2018-10923 [boo#1107023],
    CVE-2018-10924 [boo#1107024], CVE-2018-10926 [boo#1107025],
    CVE-2018-10927 [boo#1107026], CVE-2018-10928 [boo#1107027],
    CVE-2018-10928 [boo#1107027], CVE-2018-10929 [boo#1107028],
    CVE-2018-10930 [boo#1107029], boo#1105776 .
- Remove patches no longer needed in 5.x:
  * 0001-build-restore-ability-to-control-verbosity-settings.patch
  * glusterfs-tirpc.diff</changelog>
  <changelog author="seanlew@opensuse.org" date="1551528000">- Update to new upstream version 5.4
  * FUSE Client memory leak fixed (#1623107)
  * fail to sync non-ascii utf8 file and dir names (#1648642)
  * Tracker bug for all leases related issues (#1651323)
  * gluster-blockd segfaults because of a null-deref (#1659563)
  * Memory leak: dict_t leak in rda_opendir (#1659676)
  * dht_revalidate may not heal attrs on the brick root (#1660736)
  * Fix tests/bugs/shard/zero-flag.t (#1660932)
  * NL cache: fix typos (#1662200)</changelog>
  <changelog author="seanlew@opensuse.org" date="1552824000">- Update to new upstream version 5.5
  * No changelog yet available in release notes</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Disable LTO (boo#1133088).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Move definition of _lto_cflags into %build.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1576238400">- Update to release 7.0
  * Latency based read child to improve read workload latency in
    a cluster, especially in a cloud setup. Also provides a load
    balancing with the outstanding pending request.
  * Thin-arbiter integration with GD1.
  * If a client older than glusterfs-4.x (i.e. 3.x clients)
    accesses a volume which has the `fips-mode-rchecksum` volume
    option enabled, it can cause erroneous checksum computation/
    unwanted behaviour during afr self-heal.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1577361600">- Fix the name of the Python bindings subpackage
- Properly mark Python bindings subpackage as noarch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1578571200">- Update to release 7.1
  * Fix rebalance causing IO Error - File descriptor in bad state
  * Fix geo-replication sessions going faulty
  * Fix memory leak in glusterfsd process
  * Fix GlusterFS brick process crash
- Add nocommon.patch [boo#1160392]</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1591272000">- Fixes for %_libexecdir changing to /usr/libexec</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1619697600">- Update to release 9.1
  * Implemented seek file operation for open-behind
  * Added io_uring support for Gluster
  * Added Support for 5K volumes
  * Enabled granular-entry-heal by default
  * Added support for monitoring the epoll/rpc layer
  * Improve rebalance of sparse files
- Drop nocommon.patch (merged)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632830400">- Update to release 9.3
  * New reset-brick command
  * Ability to get node level status of a cluster
  * Multi-threaded self-heal for Disperse volumes
  * Lock revocation feature
  * On-demand scrubbing for bitrot detection
  * Real time Cluster notifications using Events APIs
- Move mount helper to /usr/sbin [boo#1191062]</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1657800000">- add explicit Requires for the dependencies, so we make sure
  the dependencies are installed in the same version</changelog>
</package>
<package pkgid="88b146d143f806b1e4d9d2c67470abaab7cbb4a71014d29fb923b458a7db0ca6" name="libgfrpc0" arch="i586">
  <version epoch="0" ver="9.3" rel="bp154.2.3.1"/>
  <changelog author="scorot@free.fr" date="1445947200">- Update to version 3.6.6
  * No ChangeLog available</changelog>
  <changelog author="vcizek@suse.com" date="1503489600">- Update to version 3.8.15
  * fixes build with OpenSSL 1.1 (bsc#1055466)
  * Mandatory lock support for Multiprotocol environment
  * Gluster/NFS disabled by default
  * Geo-replication for Sharded Volumes
  * Tiering aware Geo-replication
  * Enhance Quota enable/disable in glusterd
  * Automagic unsplit-brain by [ctime|mtime|size|majority] for AFR
  * Granular Entry self-heal for AFR
  * Tons of bugfixes
  * for more details see the NEWS file
- spec cleanup
- Install License files/docu</changelog>
  <changelog author="vcizek@suse.com" date="1508328000">- Add missing Requires: libacl-devel to the devel subpackage
  * glfs.h #includes &lt;sys/acl.h&gt;</changelog>
  <changelog author="mpluskal@suse.com" date="1509710400">- Explicitly require python2 as python3 is not yet supported</changelog>
  <changelog author="kukuk@suse.de" date="1510574400">- glusterfs-tirpc.diff: fallback to libtirpc if there is no sunrpc
  support in glibc</changelog>
  <changelog author="jengelh@inai.de" date="1512388800">- Update to new release 3.12.3
  * -- Features introduced in 3.10
  * Brick multiplexing
  * Support to display op-version information from clients
  * Support for rebalance time to completion estimation
  * Separation of tier as its own service
  * Statedump support for gfapi based applications
  * Disabled creation of trash directory by default
  * Implemented parallel readdirp with distribute xlator
  * -- Features introduced in 3.12:
  * Ability to mount sub-directories using the Gluster
    FUSE protocol
  * GFID to path conversion is enabled by default
  * Provided an option to set a limit on number of bricks
    multiplexed in a processes
  * Enhanced the option to export statfs data for bricks
    sharing the same backend filesystem
  * Provided a means to resolve GFID split-brain using
    the gluster CLI
  * Introduction of new api glfs_fd_set_lkowner() to set lock owner
- Remove glusterfs-date.diff (no longer applies)</changelog>
  <changelog author="jengelh@inai.de" date="1513252800">- Add 0001-build-restore-ability-to-control-verbosity-settings.patch
- Replace xdr_sizeof.c with an empty file</changelog>
  <changelog author="jengelh@inai.de" date="1525348800">- Update to new upstream release 4.0.2
  * GlusterD2 (GD2) is a new management daemon for Gluster-4.0,
    glustercli is the command-line interface for it.
    It is a preview release. GD2 is not backwards compatible with
    the older GlusterD. Heterogeneous clusters running both GD2
    and GlusterD are not possible.
  * Not all commands from GlusterD have been implemented for GD2.
  * GD2 does not (yet) work well in 2-node clusters.
  * Self Heal feature integrated for the new Volumes created
    using Glusterd2.</changelog>
  <changelog author="seanlew@opensuse.org" date="1547899200">- Update to new upstream version 5.3 (4.0 is EOL)
  * 5.3 brings hundreds of improvements, see complete relnote at
  https://docs.gluster.org/en/latest/release-notes/5.0/
  * Fixed a number of bugs:
    CVE-2018-1088, CVE-2018-1112 [boo#1090084],
    CVE-2018-10904 [boo#1107018], CVE-2018-10907 [boo#1107019],
    CVE-2018-10911 [boo#1107020], CVE-2018-10913 [boo#1107021],
    CVE-2018-10914 [boo#1107022], CVE-2018-10923 [boo#1107023],
    CVE-2018-10924 [boo#1107024], CVE-2018-10926 [boo#1107025],
    CVE-2018-10927 [boo#1107026], CVE-2018-10928 [boo#1107027],
    CVE-2018-10928 [boo#1107027], CVE-2018-10929 [boo#1107028],
    CVE-2018-10930 [boo#1107029], boo#1105776 .
- Remove patches no longer needed in 5.x:
  * 0001-build-restore-ability-to-control-verbosity-settings.patch
  * glusterfs-tirpc.diff</changelog>
  <changelog author="seanlew@opensuse.org" date="1551528000">- Update to new upstream version 5.4
  * FUSE Client memory leak fixed (#1623107)
  * fail to sync non-ascii utf8 file and dir names (#1648642)
  * Tracker bug for all leases related issues (#1651323)
  * gluster-blockd segfaults because of a null-deref (#1659563)
  * Memory leak: dict_t leak in rda_opendir (#1659676)
  * dht_revalidate may not heal attrs on the brick root (#1660736)
  * Fix tests/bugs/shard/zero-flag.t (#1660932)
  * NL cache: fix typos (#1662200)</changelog>
  <changelog author="seanlew@opensuse.org" date="1552824000">- Update to new upstream version 5.5
  * No changelog yet available in release notes</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Disable LTO (boo#1133088).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Move definition of _lto_cflags into %build.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1576238400">- Update to release 7.0
  * Latency based read child to improve read workload latency in
    a cluster, especially in a cloud setup. Also provides a load
    balancing with the outstanding pending request.
  * Thin-arbiter integration with GD1.
  * If a client older than glusterfs-4.x (i.e. 3.x clients)
    accesses a volume which has the `fips-mode-rchecksum` volume
    option enabled, it can cause erroneous checksum computation/
    unwanted behaviour during afr self-heal.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1577361600">- Fix the name of the Python bindings subpackage
- Properly mark Python bindings subpackage as noarch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1578571200">- Update to release 7.1
  * Fix rebalance causing IO Error - File descriptor in bad state
  * Fix geo-replication sessions going faulty
  * Fix memory leak in glusterfsd process
  * Fix GlusterFS brick process crash
- Add nocommon.patch [boo#1160392]</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1591272000">- Fixes for %_libexecdir changing to /usr/libexec</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1619697600">- Update to release 9.1
  * Implemented seek file operation for open-behind
  * Added io_uring support for Gluster
  * Added Support for 5K volumes
  * Enabled granular-entry-heal by default
  * Added support for monitoring the epoll/rpc layer
  * Improve rebalance of sparse files
- Drop nocommon.patch (merged)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632830400">- Update to release 9.3
  * New reset-brick command
  * Ability to get node level status of a cluster
  * Multi-threaded self-heal for Disperse volumes
  * Lock revocation feature
  * On-demand scrubbing for bitrot detection
  * Real time Cluster notifications using Events APIs
- Move mount helper to /usr/sbin [boo#1191062]</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1657800000">- add explicit Requires for the dependencies, so we make sure
  the dependencies are installed in the same version</changelog>
</package>
<package pkgid="1afcd7a0451c12df75381406a61a48af3eda617d6c6ddc1d79972c1dbaf57f75" name="libgfrpc0" arch="ppc64le">
  <version epoch="0" ver="9.3" rel="bp154.2.3.1"/>
  <changelog author="scorot@free.fr" date="1445947200">- Update to version 3.6.6
  * No ChangeLog available</changelog>
  <changelog author="vcizek@suse.com" date="1503489600">- Update to version 3.8.15
  * fixes build with OpenSSL 1.1 (bsc#1055466)
  * Mandatory lock support for Multiprotocol environment
  * Gluster/NFS disabled by default
  * Geo-replication for Sharded Volumes
  * Tiering aware Geo-replication
  * Enhance Quota enable/disable in glusterd
  * Automagic unsplit-brain by [ctime|mtime|size|majority] for AFR
  * Granular Entry self-heal for AFR
  * Tons of bugfixes
  * for more details see the NEWS file
- spec cleanup
- Install License files/docu</changelog>
  <changelog author="vcizek@suse.com" date="1508328000">- Add missing Requires: libacl-devel to the devel subpackage
  * glfs.h #includes &lt;sys/acl.h&gt;</changelog>
  <changelog author="mpluskal@suse.com" date="1509710400">- Explicitly require python2 as python3 is not yet supported</changelog>
  <changelog author="kukuk@suse.de" date="1510574400">- glusterfs-tirpc.diff: fallback to libtirpc if there is no sunrpc
  support in glibc</changelog>
  <changelog author="jengelh@inai.de" date="1512388800">- Update to new release 3.12.3
  * -- Features introduced in 3.10
  * Brick multiplexing
  * Support to display op-version information from clients
  * Support for rebalance time to completion estimation
  * Separation of tier as its own service
  * Statedump support for gfapi based applications
  * Disabled creation of trash directory by default
  * Implemented parallel readdirp with distribute xlator
  * -- Features introduced in 3.12:
  * Ability to mount sub-directories using the Gluster
    FUSE protocol
  * GFID to path conversion is enabled by default
  * Provided an option to set a limit on number of bricks
    multiplexed in a processes
  * Enhanced the option to export statfs data for bricks
    sharing the same backend filesystem
  * Provided a means to resolve GFID split-brain using
    the gluster CLI
  * Introduction of new api glfs_fd_set_lkowner() to set lock owner
- Remove glusterfs-date.diff (no longer applies)</changelog>
  <changelog author="jengelh@inai.de" date="1513252800">- Add 0001-build-restore-ability-to-control-verbosity-settings.patch
- Replace xdr_sizeof.c with an empty file</changelog>
  <changelog author="jengelh@inai.de" date="1525348800">- Update to new upstream release 4.0.2
  * GlusterD2 (GD2) is a new management daemon for Gluster-4.0,
    glustercli is the command-line interface for it.
    It is a preview release. GD2 is not backwards compatible with
    the older GlusterD. Heterogeneous clusters running both GD2
    and GlusterD are not possible.
  * Not all commands from GlusterD have been implemented for GD2.
  * GD2 does not (yet) work well in 2-node clusters.
  * Self Heal feature integrated for the new Volumes created
    using Glusterd2.</changelog>
  <changelog author="seanlew@opensuse.org" date="1547899200">- Update to new upstream version 5.3 (4.0 is EOL)
  * 5.3 brings hundreds of improvements, see complete relnote at
  https://docs.gluster.org/en/latest/release-notes/5.0/
  * Fixed a number of bugs:
    CVE-2018-1088, CVE-2018-1112 [boo#1090084],
    CVE-2018-10904 [boo#1107018], CVE-2018-10907 [boo#1107019],
    CVE-2018-10911 [boo#1107020], CVE-2018-10913 [boo#1107021],
    CVE-2018-10914 [boo#1107022], CVE-2018-10923 [boo#1107023],
    CVE-2018-10924 [boo#1107024], CVE-2018-10926 [boo#1107025],
    CVE-2018-10927 [boo#1107026], CVE-2018-10928 [boo#1107027],
    CVE-2018-10928 [boo#1107027], CVE-2018-10929 [boo#1107028],
    CVE-2018-10930 [boo#1107029], boo#1105776 .
- Remove patches no longer needed in 5.x:
  * 0001-build-restore-ability-to-control-verbosity-settings.patch
  * glusterfs-tirpc.diff</changelog>
  <changelog author="seanlew@opensuse.org" date="1551528000">- Update to new upstream version 5.4
  * FUSE Client memory leak fixed (#1623107)
  * fail to sync non-ascii utf8 file and dir names (#1648642)
  * Tracker bug for all leases related issues (#1651323)
  * gluster-blockd segfaults because of a null-deref (#1659563)
  * Memory leak: dict_t leak in rda_opendir (#1659676)
  * dht_revalidate may not heal attrs on the brick root (#1660736)
  * Fix tests/bugs/shard/zero-flag.t (#1660932)
  * NL cache: fix typos (#1662200)</changelog>
  <changelog author="seanlew@opensuse.org" date="1552824000">- Update to new upstream version 5.5
  * No changelog yet available in release notes</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Disable LTO (boo#1133088).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Move definition of _lto_cflags into %build.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1576238400">- Update to release 7.0
  * Latency based read child to improve read workload latency in
    a cluster, especially in a cloud setup. Also provides a load
    balancing with the outstanding pending request.
  * Thin-arbiter integration with GD1.
  * If a client older than glusterfs-4.x (i.e. 3.x clients)
    accesses a volume which has the `fips-mode-rchecksum` volume
    option enabled, it can cause erroneous checksum computation/
    unwanted behaviour during afr self-heal.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1577361600">- Fix the name of the Python bindings subpackage
- Properly mark Python bindings subpackage as noarch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1578571200">- Update to release 7.1
  * Fix rebalance causing IO Error - File descriptor in bad state
  * Fix geo-replication sessions going faulty
  * Fix memory leak in glusterfsd process
  * Fix GlusterFS brick process crash
- Add nocommon.patch [boo#1160392]</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1591272000">- Fixes for %_libexecdir changing to /usr/libexec</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1619697600">- Update to release 9.1
  * Implemented seek file operation for open-behind
  * Added io_uring support for Gluster
  * Added Support for 5K volumes
  * Enabled granular-entry-heal by default
  * Added support for monitoring the epoll/rpc layer
  * Improve rebalance of sparse files
- Drop nocommon.patch (merged)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632830400">- Update to release 9.3
  * New reset-brick command
  * Ability to get node level status of a cluster
  * Multi-threaded self-heal for Disperse volumes
  * Lock revocation feature
  * On-demand scrubbing for bitrot detection
  * Real time Cluster notifications using Events APIs
- Move mount helper to /usr/sbin [boo#1191062]</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1657800000">- add explicit Requires for the dependencies, so we make sure
  the dependencies are installed in the same version</changelog>
</package>
<package pkgid="befeefa4e7d33328c4640707378b702ddde4334c3c57ba1ae064162a7b2fa8f8" name="libgfrpc0" arch="s390x">
  <version epoch="0" ver="9.3" rel="bp154.2.3.1"/>
  <changelog author="scorot@free.fr" date="1445947200">- Update to version 3.6.6
  * No ChangeLog available</changelog>
  <changelog author="vcizek@suse.com" date="1503489600">- Update to version 3.8.15
  * fixes build with OpenSSL 1.1 (bsc#1055466)
  * Mandatory lock support for Multiprotocol environment
  * Gluster/NFS disabled by default
  * Geo-replication for Sharded Volumes
  * Tiering aware Geo-replication
  * Enhance Quota enable/disable in glusterd
  * Automagic unsplit-brain by [ctime|mtime|size|majority] for AFR
  * Granular Entry self-heal for AFR
  * Tons of bugfixes
  * for more details see the NEWS file
- spec cleanup
- Install License files/docu</changelog>
  <changelog author="vcizek@suse.com" date="1508328000">- Add missing Requires: libacl-devel to the devel subpackage
  * glfs.h #includes &lt;sys/acl.h&gt;</changelog>
  <changelog author="mpluskal@suse.com" date="1509710400">- Explicitly require python2 as python3 is not yet supported</changelog>
  <changelog author="kukuk@suse.de" date="1510574400">- glusterfs-tirpc.diff: fallback to libtirpc if there is no sunrpc
  support in glibc</changelog>
  <changelog author="jengelh@inai.de" date="1512388800">- Update to new release 3.12.3
  * -- Features introduced in 3.10
  * Brick multiplexing
  * Support to display op-version information from clients
  * Support for rebalance time to completion estimation
  * Separation of tier as its own service
  * Statedump support for gfapi based applications
  * Disabled creation of trash directory by default
  * Implemented parallel readdirp with distribute xlator
  * -- Features introduced in 3.12:
  * Ability to mount sub-directories using the Gluster
    FUSE protocol
  * GFID to path conversion is enabled by default
  * Provided an option to set a limit on number of bricks
    multiplexed in a processes
  * Enhanced the option to export statfs data for bricks
    sharing the same backend filesystem
  * Provided a means to resolve GFID split-brain using
    the gluster CLI
  * Introduction of new api glfs_fd_set_lkowner() to set lock owner
- Remove glusterfs-date.diff (no longer applies)</changelog>
  <changelog author="jengelh@inai.de" date="1513252800">- Add 0001-build-restore-ability-to-control-verbosity-settings.patch
- Replace xdr_sizeof.c with an empty file</changelog>
  <changelog author="jengelh@inai.de" date="1525348800">- Update to new upstream release 4.0.2
  * GlusterD2 (GD2) is a new management daemon for Gluster-4.0,
    glustercli is the command-line interface for it.
    It is a preview release. GD2 is not backwards compatible with
    the older GlusterD. Heterogeneous clusters running both GD2
    and GlusterD are not possible.
  * Not all commands from GlusterD have been implemented for GD2.
  * GD2 does not (yet) work well in 2-node clusters.
  * Self Heal feature integrated for the new Volumes created
    using Glusterd2.</changelog>
  <changelog author="seanlew@opensuse.org" date="1547899200">- Update to new upstream version 5.3 (4.0 is EOL)
  * 5.3 brings hundreds of improvements, see complete relnote at
  https://docs.gluster.org/en/latest/release-notes/5.0/
  * Fixed a number of bugs:
    CVE-2018-1088, CVE-2018-1112 [boo#1090084],
    CVE-2018-10904 [boo#1107018], CVE-2018-10907 [boo#1107019],
    CVE-2018-10911 [boo#1107020], CVE-2018-10913 [boo#1107021],
    CVE-2018-10914 [boo#1107022], CVE-2018-10923 [boo#1107023],
    CVE-2018-10924 [boo#1107024], CVE-2018-10926 [boo#1107025],
    CVE-2018-10927 [boo#1107026], CVE-2018-10928 [boo#1107027],
    CVE-2018-10928 [boo#1107027], CVE-2018-10929 [boo#1107028],
    CVE-2018-10930 [boo#1107029], boo#1105776 .
- Remove patches no longer needed in 5.x:
  * 0001-build-restore-ability-to-control-verbosity-settings.patch
  * glusterfs-tirpc.diff</changelog>
  <changelog author="seanlew@opensuse.org" date="1551528000">- Update to new upstream version 5.4
  * FUSE Client memory leak fixed (#1623107)
  * fail to sync non-ascii utf8 file and dir names (#1648642)
  * Tracker bug for all leases related issues (#1651323)
  * gluster-blockd segfaults because of a null-deref (#1659563)
  * Memory leak: dict_t leak in rda_opendir (#1659676)
  * dht_revalidate may not heal attrs on the brick root (#1660736)
  * Fix tests/bugs/shard/zero-flag.t (#1660932)
  * NL cache: fix typos (#1662200)</changelog>
  <changelog author="seanlew@opensuse.org" date="1552824000">- Update to new upstream version 5.5
  * No changelog yet available in release notes</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Disable LTO (boo#1133088).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Move definition of _lto_cflags into %build.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1576238400">- Update to release 7.0
  * Latency based read child to improve read workload latency in
    a cluster, especially in a cloud setup. Also provides a load
    balancing with the outstanding pending request.
  * Thin-arbiter integration with GD1.
  * If a client older than glusterfs-4.x (i.e. 3.x clients)
    accesses a volume which has the `fips-mode-rchecksum` volume
    option enabled, it can cause erroneous checksum computation/
    unwanted behaviour during afr self-heal.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1577361600">- Fix the name of the Python bindings subpackage
- Properly mark Python bindings subpackage as noarch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1578571200">- Update to release 7.1
  * Fix rebalance causing IO Error - File descriptor in bad state
  * Fix geo-replication sessions going faulty
  * Fix memory leak in glusterfsd process
  * Fix GlusterFS brick process crash
- Add nocommon.patch [boo#1160392]</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1591272000">- Fixes for %_libexecdir changing to /usr/libexec</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1619697600">- Update to release 9.1
  * Implemented seek file operation for open-behind
  * Added io_uring support for Gluster
  * Added Support for 5K volumes
  * Enabled granular-entry-heal by default
  * Added support for monitoring the epoll/rpc layer
  * Improve rebalance of sparse files
- Drop nocommon.patch (merged)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632830400">- Update to release 9.3
  * New reset-brick command
  * Ability to get node level status of a cluster
  * Multi-threaded self-heal for Disperse volumes
  * Lock revocation feature
  * On-demand scrubbing for bitrot detection
  * Real time Cluster notifications using Events APIs
- Move mount helper to /usr/sbin [boo#1191062]</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1657800000">- add explicit Requires for the dependencies, so we make sure
  the dependencies are installed in the same version</changelog>
</package>
<package pkgid="b2dd731943313f519fd71716d8c576b6f26c75602d099de84230528c5970ab6c" name="libgfrpc0" arch="x86_64">
  <version epoch="0" ver="9.3" rel="bp154.2.3.1"/>
  <changelog author="scorot@free.fr" date="1445947200">- Update to version 3.6.6
  * No ChangeLog available</changelog>
  <changelog author="vcizek@suse.com" date="1503489600">- Update to version 3.8.15
  * fixes build with OpenSSL 1.1 (bsc#1055466)
  * Mandatory lock support for Multiprotocol environment
  * Gluster/NFS disabled by default
  * Geo-replication for Sharded Volumes
  * Tiering aware Geo-replication
  * Enhance Quota enable/disable in glusterd
  * Automagic unsplit-brain by [ctime|mtime|size|majority] for AFR
  * Granular Entry self-heal for AFR
  * Tons of bugfixes
  * for more details see the NEWS file
- spec cleanup
- Install License files/docu</changelog>
  <changelog author="vcizek@suse.com" date="1508328000">- Add missing Requires: libacl-devel to the devel subpackage
  * glfs.h #includes &lt;sys/acl.h&gt;</changelog>
  <changelog author="mpluskal@suse.com" date="1509710400">- Explicitly require python2 as python3 is not yet supported</changelog>
  <changelog author="kukuk@suse.de" date="1510574400">- glusterfs-tirpc.diff: fallback to libtirpc if there is no sunrpc
  support in glibc</changelog>
  <changelog author="jengelh@inai.de" date="1512388800">- Update to new release 3.12.3
  * -- Features introduced in 3.10
  * Brick multiplexing
  * Support to display op-version information from clients
  * Support for rebalance time to completion estimation
  * Separation of tier as its own service
  * Statedump support for gfapi based applications
  * Disabled creation of trash directory by default
  * Implemented parallel readdirp with distribute xlator
  * -- Features introduced in 3.12:
  * Ability to mount sub-directories using the Gluster
    FUSE protocol
  * GFID to path conversion is enabled by default
  * Provided an option to set a limit on number of bricks
    multiplexed in a processes
  * Enhanced the option to export statfs data for bricks
    sharing the same backend filesystem
  * Provided a means to resolve GFID split-brain using
    the gluster CLI
  * Introduction of new api glfs_fd_set_lkowner() to set lock owner
- Remove glusterfs-date.diff (no longer applies)</changelog>
  <changelog author="jengelh@inai.de" date="1513252800">- Add 0001-build-restore-ability-to-control-verbosity-settings.patch
- Replace xdr_sizeof.c with an empty file</changelog>
  <changelog author="jengelh@inai.de" date="1525348800">- Update to new upstream release 4.0.2
  * GlusterD2 (GD2) is a new management daemon for Gluster-4.0,
    glustercli is the command-line interface for it.
    It is a preview release. GD2 is not backwards compatible with
    the older GlusterD. Heterogeneous clusters running both GD2
    and GlusterD are not possible.
  * Not all commands from GlusterD have been implemented for GD2.
  * GD2 does not (yet) work well in 2-node clusters.
  * Self Heal feature integrated for the new Volumes created
    using Glusterd2.</changelog>
  <changelog author="seanlew@opensuse.org" date="1547899200">- Update to new upstream version 5.3 (4.0 is EOL)
  * 5.3 brings hundreds of improvements, see complete relnote at
  https://docs.gluster.org/en/latest/release-notes/5.0/
  * Fixed a number of bugs:
    CVE-2018-1088, CVE-2018-1112 [boo#1090084],
    CVE-2018-10904 [boo#1107018], CVE-2018-10907 [boo#1107019],
    CVE-2018-10911 [boo#1107020], CVE-2018-10913 [boo#1107021],
    CVE-2018-10914 [boo#1107022], CVE-2018-10923 [boo#1107023],
    CVE-2018-10924 [boo#1107024], CVE-2018-10926 [boo#1107025],
    CVE-2018-10927 [boo#1107026], CVE-2018-10928 [boo#1107027],
    CVE-2018-10928 [boo#1107027], CVE-2018-10929 [boo#1107028],
    CVE-2018-10930 [boo#1107029], boo#1105776 .
- Remove patches no longer needed in 5.x:
  * 0001-build-restore-ability-to-control-verbosity-settings.patch
  * glusterfs-tirpc.diff</changelog>
  <changelog author="seanlew@opensuse.org" date="1551528000">- Update to new upstream version 5.4
  * FUSE Client memory leak fixed (#1623107)
  * fail to sync non-ascii utf8 file and dir names (#1648642)
  * Tracker bug for all leases related issues (#1651323)
  * gluster-blockd segfaults because of a null-deref (#1659563)
  * Memory leak: dict_t leak in rda_opendir (#1659676)
  * dht_revalidate may not heal attrs on the brick root (#1660736)
  * Fix tests/bugs/shard/zero-flag.t (#1660932)
  * NL cache: fix typos (#1662200)</changelog>
  <changelog author="seanlew@opensuse.org" date="1552824000">- Update to new upstream version 5.5
  * No changelog yet available in release notes</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Disable LTO (boo#1133088).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Move definition of _lto_cflags into %build.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1576238400">- Update to release 7.0
  * Latency based read child to improve read workload latency in
    a cluster, especially in a cloud setup. Also provides a load
    balancing with the outstanding pending request.
  * Thin-arbiter integration with GD1.
  * If a client older than glusterfs-4.x (i.e. 3.x clients)
    accesses a volume which has the `fips-mode-rchecksum` volume
    option enabled, it can cause erroneous checksum computation/
    unwanted behaviour during afr self-heal.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1577361600">- Fix the name of the Python bindings subpackage
- Properly mark Python bindings subpackage as noarch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1578571200">- Update to release 7.1
  * Fix rebalance causing IO Error - File descriptor in bad state
  * Fix geo-replication sessions going faulty
  * Fix memory leak in glusterfsd process
  * Fix GlusterFS brick process crash
- Add nocommon.patch [boo#1160392]</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1591272000">- Fixes for %_libexecdir changing to /usr/libexec</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1619697600">- Update to release 9.1
  * Implemented seek file operation for open-behind
  * Added io_uring support for Gluster
  * Added Support for 5K volumes
  * Enabled granular-entry-heal by default
  * Added support for monitoring the epoll/rpc layer
  * Improve rebalance of sparse files
- Drop nocommon.patch (merged)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632830400">- Update to release 9.3
  * New reset-brick command
  * Ability to get node level status of a cluster
  * Multi-threaded self-heal for Disperse volumes
  * Lock revocation feature
  * On-demand scrubbing for bitrot detection
  * Real time Cluster notifications using Events APIs
- Move mount helper to /usr/sbin [boo#1191062]</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1657800000">- add explicit Requires for the dependencies, so we make sure
  the dependencies are installed in the same version</changelog>
</package>
<package pkgid="31d9593eeda47e3eb2bca6c15386cc4eeaea5b4eca6eb38326ca5303811a229a" name="libgfxdr0" arch="aarch64">
  <version epoch="0" ver="9.3" rel="bp154.2.3.1"/>
  <changelog author="scorot@free.fr" date="1445947200">- Update to version 3.6.6
  * No ChangeLog available</changelog>
  <changelog author="vcizek@suse.com" date="1503489600">- Update to version 3.8.15
  * fixes build with OpenSSL 1.1 (bsc#1055466)
  * Mandatory lock support for Multiprotocol environment
  * Gluster/NFS disabled by default
  * Geo-replication for Sharded Volumes
  * Tiering aware Geo-replication
  * Enhance Quota enable/disable in glusterd
  * Automagic unsplit-brain by [ctime|mtime|size|majority] for AFR
  * Granular Entry self-heal for AFR
  * Tons of bugfixes
  * for more details see the NEWS file
- spec cleanup
- Install License files/docu</changelog>
  <changelog author="vcizek@suse.com" date="1508328000">- Add missing Requires: libacl-devel to the devel subpackage
  * glfs.h #includes &lt;sys/acl.h&gt;</changelog>
  <changelog author="mpluskal@suse.com" date="1509710400">- Explicitly require python2 as python3 is not yet supported</changelog>
  <changelog author="kukuk@suse.de" date="1510574400">- glusterfs-tirpc.diff: fallback to libtirpc if there is no sunrpc
  support in glibc</changelog>
  <changelog author="jengelh@inai.de" date="1512388800">- Update to new release 3.12.3
  * -- Features introduced in 3.10
  * Brick multiplexing
  * Support to display op-version information from clients
  * Support for rebalance time to completion estimation
  * Separation of tier as its own service
  * Statedump support for gfapi based applications
  * Disabled creation of trash directory by default
  * Implemented parallel readdirp with distribute xlator
  * -- Features introduced in 3.12:
  * Ability to mount sub-directories using the Gluster
    FUSE protocol
  * GFID to path conversion is enabled by default
  * Provided an option to set a limit on number of bricks
    multiplexed in a processes
  * Enhanced the option to export statfs data for bricks
    sharing the same backend filesystem
  * Provided a means to resolve GFID split-brain using
    the gluster CLI
  * Introduction of new api glfs_fd_set_lkowner() to set lock owner
- Remove glusterfs-date.diff (no longer applies)</changelog>
  <changelog author="jengelh@inai.de" date="1513252800">- Add 0001-build-restore-ability-to-control-verbosity-settings.patch
- Replace xdr_sizeof.c with an empty file</changelog>
  <changelog author="jengelh@inai.de" date="1525348800">- Update to new upstream release 4.0.2
  * GlusterD2 (GD2) is a new management daemon for Gluster-4.0,
    glustercli is the command-line interface for it.
    It is a preview release. GD2 is not backwards compatible with
    the older GlusterD. Heterogeneous clusters running both GD2
    and GlusterD are not possible.
  * Not all commands from GlusterD have been implemented for GD2.
  * GD2 does not (yet) work well in 2-node clusters.
  * Self Heal feature integrated for the new Volumes created
    using Glusterd2.</changelog>
  <changelog author="seanlew@opensuse.org" date="1547899200">- Update to new upstream version 5.3 (4.0 is EOL)
  * 5.3 brings hundreds of improvements, see complete relnote at
  https://docs.gluster.org/en/latest/release-notes/5.0/
  * Fixed a number of bugs:
    CVE-2018-1088, CVE-2018-1112 [boo#1090084],
    CVE-2018-10904 [boo#1107018], CVE-2018-10907 [boo#1107019],
    CVE-2018-10911 [boo#1107020], CVE-2018-10913 [boo#1107021],
    CVE-2018-10914 [boo#1107022], CVE-2018-10923 [boo#1107023],
    CVE-2018-10924 [boo#1107024], CVE-2018-10926 [boo#1107025],
    CVE-2018-10927 [boo#1107026], CVE-2018-10928 [boo#1107027],
    CVE-2018-10928 [boo#1107027], CVE-2018-10929 [boo#1107028],
    CVE-2018-10930 [boo#1107029], boo#1105776 .
- Remove patches no longer needed in 5.x:
  * 0001-build-restore-ability-to-control-verbosity-settings.patch
  * glusterfs-tirpc.diff</changelog>
  <changelog author="seanlew@opensuse.org" date="1551528000">- Update to new upstream version 5.4
  * FUSE Client memory leak fixed (#1623107)
  * fail to sync non-ascii utf8 file and dir names (#1648642)
  * Tracker bug for all leases related issues (#1651323)
  * gluster-blockd segfaults because of a null-deref (#1659563)
  * Memory leak: dict_t leak in rda_opendir (#1659676)
  * dht_revalidate may not heal attrs on the brick root (#1660736)
  * Fix tests/bugs/shard/zero-flag.t (#1660932)
  * NL cache: fix typos (#1662200)</changelog>
  <changelog author="seanlew@opensuse.org" date="1552824000">- Update to new upstream version 5.5
  * No changelog yet available in release notes</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Disable LTO (boo#1133088).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Move definition of _lto_cflags into %build.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1576238400">- Update to release 7.0
  * Latency based read child to improve read workload latency in
    a cluster, especially in a cloud setup. Also provides a load
    balancing with the outstanding pending request.
  * Thin-arbiter integration with GD1.
  * If a client older than glusterfs-4.x (i.e. 3.x clients)
    accesses a volume which has the `fips-mode-rchecksum` volume
    option enabled, it can cause erroneous checksum computation/
    unwanted behaviour during afr self-heal.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1577361600">- Fix the name of the Python bindings subpackage
- Properly mark Python bindings subpackage as noarch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1578571200">- Update to release 7.1
  * Fix rebalance causing IO Error - File descriptor in bad state
  * Fix geo-replication sessions going faulty
  * Fix memory leak in glusterfsd process
  * Fix GlusterFS brick process crash
- Add nocommon.patch [boo#1160392]</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1591272000">- Fixes for %_libexecdir changing to /usr/libexec</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1619697600">- Update to release 9.1
  * Implemented seek file operation for open-behind
  * Added io_uring support for Gluster
  * Added Support for 5K volumes
  * Enabled granular-entry-heal by default
  * Added support for monitoring the epoll/rpc layer
  * Improve rebalance of sparse files
- Drop nocommon.patch (merged)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632830400">- Update to release 9.3
  * New reset-brick command
  * Ability to get node level status of a cluster
  * Multi-threaded self-heal for Disperse volumes
  * Lock revocation feature
  * On-demand scrubbing for bitrot detection
  * Real time Cluster notifications using Events APIs
- Move mount helper to /usr/sbin [boo#1191062]</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1657800000">- add explicit Requires for the dependencies, so we make sure
  the dependencies are installed in the same version</changelog>
</package>
<package pkgid="c51f340a8ad2a2c06e8bd30a6131f0f14ef0213e742f842b17a52140a066e1d9" name="libgfxdr0" arch="i586">
  <version epoch="0" ver="9.3" rel="bp154.2.3.1"/>
  <changelog author="scorot@free.fr" date="1445947200">- Update to version 3.6.6
  * No ChangeLog available</changelog>
  <changelog author="vcizek@suse.com" date="1503489600">- Update to version 3.8.15
  * fixes build with OpenSSL 1.1 (bsc#1055466)
  * Mandatory lock support for Multiprotocol environment
  * Gluster/NFS disabled by default
  * Geo-replication for Sharded Volumes
  * Tiering aware Geo-replication
  * Enhance Quota enable/disable in glusterd
  * Automagic unsplit-brain by [ctime|mtime|size|majority] for AFR
  * Granular Entry self-heal for AFR
  * Tons of bugfixes
  * for more details see the NEWS file
- spec cleanup
- Install License files/docu</changelog>
  <changelog author="vcizek@suse.com" date="1508328000">- Add missing Requires: libacl-devel to the devel subpackage
  * glfs.h #includes &lt;sys/acl.h&gt;</changelog>
  <changelog author="mpluskal@suse.com" date="1509710400">- Explicitly require python2 as python3 is not yet supported</changelog>
  <changelog author="kukuk@suse.de" date="1510574400">- glusterfs-tirpc.diff: fallback to libtirpc if there is no sunrpc
  support in glibc</changelog>
  <changelog author="jengelh@inai.de" date="1512388800">- Update to new release 3.12.3
  * -- Features introduced in 3.10
  * Brick multiplexing
  * Support to display op-version information from clients
  * Support for rebalance time to completion estimation
  * Separation of tier as its own service
  * Statedump support for gfapi based applications
  * Disabled creation of trash directory by default
  * Implemented parallel readdirp with distribute xlator
  * -- Features introduced in 3.12:
  * Ability to mount sub-directories using the Gluster
    FUSE protocol
  * GFID to path conversion is enabled by default
  * Provided an option to set a limit on number of bricks
    multiplexed in a processes
  * Enhanced the option to export statfs data for bricks
    sharing the same backend filesystem
  * Provided a means to resolve GFID split-brain using
    the gluster CLI
  * Introduction of new api glfs_fd_set_lkowner() to set lock owner
- Remove glusterfs-date.diff (no longer applies)</changelog>
  <changelog author="jengelh@inai.de" date="1513252800">- Add 0001-build-restore-ability-to-control-verbosity-settings.patch
- Replace xdr_sizeof.c with an empty file</changelog>
  <changelog author="jengelh@inai.de" date="1525348800">- Update to new upstream release 4.0.2
  * GlusterD2 (GD2) is a new management daemon for Gluster-4.0,
    glustercli is the command-line interface for it.
    It is a preview release. GD2 is not backwards compatible with
    the older GlusterD. Heterogeneous clusters running both GD2
    and GlusterD are not possible.
  * Not all commands from GlusterD have been implemented for GD2.
  * GD2 does not (yet) work well in 2-node clusters.
  * Self Heal feature integrated for the new Volumes created
    using Glusterd2.</changelog>
  <changelog author="seanlew@opensuse.org" date="1547899200">- Update to new upstream version 5.3 (4.0 is EOL)
  * 5.3 brings hundreds of improvements, see complete relnote at
  https://docs.gluster.org/en/latest/release-notes/5.0/
  * Fixed a number of bugs:
    CVE-2018-1088, CVE-2018-1112 [boo#1090084],
    CVE-2018-10904 [boo#1107018], CVE-2018-10907 [boo#1107019],
    CVE-2018-10911 [boo#1107020], CVE-2018-10913 [boo#1107021],
    CVE-2018-10914 [boo#1107022], CVE-2018-10923 [boo#1107023],
    CVE-2018-10924 [boo#1107024], CVE-2018-10926 [boo#1107025],
    CVE-2018-10927 [boo#1107026], CVE-2018-10928 [boo#1107027],
    CVE-2018-10928 [boo#1107027], CVE-2018-10929 [boo#1107028],
    CVE-2018-10930 [boo#1107029], boo#1105776 .
- Remove patches no longer needed in 5.x:
  * 0001-build-restore-ability-to-control-verbosity-settings.patch
  * glusterfs-tirpc.diff</changelog>
  <changelog author="seanlew@opensuse.org" date="1551528000">- Update to new upstream version 5.4
  * FUSE Client memory leak fixed (#1623107)
  * fail to sync non-ascii utf8 file and dir names (#1648642)
  * Tracker bug for all leases related issues (#1651323)
  * gluster-blockd segfaults because of a null-deref (#1659563)
  * Memory leak: dict_t leak in rda_opendir (#1659676)
  * dht_revalidate may not heal attrs on the brick root (#1660736)
  * Fix tests/bugs/shard/zero-flag.t (#1660932)
  * NL cache: fix typos (#1662200)</changelog>
  <changelog author="seanlew@opensuse.org" date="1552824000">- Update to new upstream version 5.5
  * No changelog yet available in release notes</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Disable LTO (boo#1133088).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Move definition of _lto_cflags into %build.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1576238400">- Update to release 7.0
  * Latency based read child to improve read workload latency in
    a cluster, especially in a cloud setup. Also provides a load
    balancing with the outstanding pending request.
  * Thin-arbiter integration with GD1.
  * If a client older than glusterfs-4.x (i.e. 3.x clients)
    accesses a volume which has the `fips-mode-rchecksum` volume
    option enabled, it can cause erroneous checksum computation/
    unwanted behaviour during afr self-heal.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1577361600">- Fix the name of the Python bindings subpackage
- Properly mark Python bindings subpackage as noarch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1578571200">- Update to release 7.1
  * Fix rebalance causing IO Error - File descriptor in bad state
  * Fix geo-replication sessions going faulty
  * Fix memory leak in glusterfsd process
  * Fix GlusterFS brick process crash
- Add nocommon.patch [boo#1160392]</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1591272000">- Fixes for %_libexecdir changing to /usr/libexec</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1619697600">- Update to release 9.1
  * Implemented seek file operation for open-behind
  * Added io_uring support for Gluster
  * Added Support for 5K volumes
  * Enabled granular-entry-heal by default
  * Added support for monitoring the epoll/rpc layer
  * Improve rebalance of sparse files
- Drop nocommon.patch (merged)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632830400">- Update to release 9.3
  * New reset-brick command
  * Ability to get node level status of a cluster
  * Multi-threaded self-heal for Disperse volumes
  * Lock revocation feature
  * On-demand scrubbing for bitrot detection
  * Real time Cluster notifications using Events APIs
- Move mount helper to /usr/sbin [boo#1191062]</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1657800000">- add explicit Requires for the dependencies, so we make sure
  the dependencies are installed in the same version</changelog>
</package>
<package pkgid="4314d0b04166ba2cbb113402dfbd39f6b4992e11590e302cbde27607066c16bf" name="libgfxdr0" arch="ppc64le">
  <version epoch="0" ver="9.3" rel="bp154.2.3.1"/>
  <changelog author="scorot@free.fr" date="1445947200">- Update to version 3.6.6
  * No ChangeLog available</changelog>
  <changelog author="vcizek@suse.com" date="1503489600">- Update to version 3.8.15
  * fixes build with OpenSSL 1.1 (bsc#1055466)
  * Mandatory lock support for Multiprotocol environment
  * Gluster/NFS disabled by default
  * Geo-replication for Sharded Volumes
  * Tiering aware Geo-replication
  * Enhance Quota enable/disable in glusterd
  * Automagic unsplit-brain by [ctime|mtime|size|majority] for AFR
  * Granular Entry self-heal for AFR
  * Tons of bugfixes
  * for more details see the NEWS file
- spec cleanup
- Install License files/docu</changelog>
  <changelog author="vcizek@suse.com" date="1508328000">- Add missing Requires: libacl-devel to the devel subpackage
  * glfs.h #includes &lt;sys/acl.h&gt;</changelog>
  <changelog author="mpluskal@suse.com" date="1509710400">- Explicitly require python2 as python3 is not yet supported</changelog>
  <changelog author="kukuk@suse.de" date="1510574400">- glusterfs-tirpc.diff: fallback to libtirpc if there is no sunrpc
  support in glibc</changelog>
  <changelog author="jengelh@inai.de" date="1512388800">- Update to new release 3.12.3
  * -- Features introduced in 3.10
  * Brick multiplexing
  * Support to display op-version information from clients
  * Support for rebalance time to completion estimation
  * Separation of tier as its own service
  * Statedump support for gfapi based applications
  * Disabled creation of trash directory by default
  * Implemented parallel readdirp with distribute xlator
  * -- Features introduced in 3.12:
  * Ability to mount sub-directories using the Gluster
    FUSE protocol
  * GFID to path conversion is enabled by default
  * Provided an option to set a limit on number of bricks
    multiplexed in a processes
  * Enhanced the option to export statfs data for bricks
    sharing the same backend filesystem
  * Provided a means to resolve GFID split-brain using
    the gluster CLI
  * Introduction of new api glfs_fd_set_lkowner() to set lock owner
- Remove glusterfs-date.diff (no longer applies)</changelog>
  <changelog author="jengelh@inai.de" date="1513252800">- Add 0001-build-restore-ability-to-control-verbosity-settings.patch
- Replace xdr_sizeof.c with an empty file</changelog>
  <changelog author="jengelh@inai.de" date="1525348800">- Update to new upstream release 4.0.2
  * GlusterD2 (GD2) is a new management daemon for Gluster-4.0,
    glustercli is the command-line interface for it.
    It is a preview release. GD2 is not backwards compatible with
    the older GlusterD. Heterogeneous clusters running both GD2
    and GlusterD are not possible.
  * Not all commands from GlusterD have been implemented for GD2.
  * GD2 does not (yet) work well in 2-node clusters.
  * Self Heal feature integrated for the new Volumes created
    using Glusterd2.</changelog>
  <changelog author="seanlew@opensuse.org" date="1547899200">- Update to new upstream version 5.3 (4.0 is EOL)
  * 5.3 brings hundreds of improvements, see complete relnote at
  https://docs.gluster.org/en/latest/release-notes/5.0/
  * Fixed a number of bugs:
    CVE-2018-1088, CVE-2018-1112 [boo#1090084],
    CVE-2018-10904 [boo#1107018], CVE-2018-10907 [boo#1107019],
    CVE-2018-10911 [boo#1107020], CVE-2018-10913 [boo#1107021],
    CVE-2018-10914 [boo#1107022], CVE-2018-10923 [boo#1107023],
    CVE-2018-10924 [boo#1107024], CVE-2018-10926 [boo#1107025],
    CVE-2018-10927 [boo#1107026], CVE-2018-10928 [boo#1107027],
    CVE-2018-10928 [boo#1107027], CVE-2018-10929 [boo#1107028],
    CVE-2018-10930 [boo#1107029], boo#1105776 .
- Remove patches no longer needed in 5.x:
  * 0001-build-restore-ability-to-control-verbosity-settings.patch
  * glusterfs-tirpc.diff</changelog>
  <changelog author="seanlew@opensuse.org" date="1551528000">- Update to new upstream version 5.4
  * FUSE Client memory leak fixed (#1623107)
  * fail to sync non-ascii utf8 file and dir names (#1648642)
  * Tracker bug for all leases related issues (#1651323)
  * gluster-blockd segfaults because of a null-deref (#1659563)
  * Memory leak: dict_t leak in rda_opendir (#1659676)
  * dht_revalidate may not heal attrs on the brick root (#1660736)
  * Fix tests/bugs/shard/zero-flag.t (#1660932)
  * NL cache: fix typos (#1662200)</changelog>
  <changelog author="seanlew@opensuse.org" date="1552824000">- Update to new upstream version 5.5
  * No changelog yet available in release notes</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Disable LTO (boo#1133088).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Move definition of _lto_cflags into %build.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1576238400">- Update to release 7.0
  * Latency based read child to improve read workload latency in
    a cluster, especially in a cloud setup. Also provides a load
    balancing with the outstanding pending request.
  * Thin-arbiter integration with GD1.
  * If a client older than glusterfs-4.x (i.e. 3.x clients)
    accesses a volume which has the `fips-mode-rchecksum` volume
    option enabled, it can cause erroneous checksum computation/
    unwanted behaviour during afr self-heal.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1577361600">- Fix the name of the Python bindings subpackage
- Properly mark Python bindings subpackage as noarch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1578571200">- Update to release 7.1
  * Fix rebalance causing IO Error - File descriptor in bad state
  * Fix geo-replication sessions going faulty
  * Fix memory leak in glusterfsd process
  * Fix GlusterFS brick process crash
- Add nocommon.patch [boo#1160392]</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1591272000">- Fixes for %_libexecdir changing to /usr/libexec</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1619697600">- Update to release 9.1
  * Implemented seek file operation for open-behind
  * Added io_uring support for Gluster
  * Added Support for 5K volumes
  * Enabled granular-entry-heal by default
  * Added support for monitoring the epoll/rpc layer
  * Improve rebalance of sparse files
- Drop nocommon.patch (merged)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632830400">- Update to release 9.3
  * New reset-brick command
  * Ability to get node level status of a cluster
  * Multi-threaded self-heal for Disperse volumes
  * Lock revocation feature
  * On-demand scrubbing for bitrot detection
  * Real time Cluster notifications using Events APIs
- Move mount helper to /usr/sbin [boo#1191062]</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1657800000">- add explicit Requires for the dependencies, so we make sure
  the dependencies are installed in the same version</changelog>
</package>
<package pkgid="1a90ac3c75994bf4e9070d81a9be07c1c778d22d500e1b502e9a56c35a8d11bd" name="libgfxdr0" arch="s390x">
  <version epoch="0" ver="9.3" rel="bp154.2.3.1"/>
  <changelog author="scorot@free.fr" date="1445947200">- Update to version 3.6.6
  * No ChangeLog available</changelog>
  <changelog author="vcizek@suse.com" date="1503489600">- Update to version 3.8.15
  * fixes build with OpenSSL 1.1 (bsc#1055466)
  * Mandatory lock support for Multiprotocol environment
  * Gluster/NFS disabled by default
  * Geo-replication for Sharded Volumes
  * Tiering aware Geo-replication
  * Enhance Quota enable/disable in glusterd
  * Automagic unsplit-brain by [ctime|mtime|size|majority] for AFR
  * Granular Entry self-heal for AFR
  * Tons of bugfixes
  * for more details see the NEWS file
- spec cleanup
- Install License files/docu</changelog>
  <changelog author="vcizek@suse.com" date="1508328000">- Add missing Requires: libacl-devel to the devel subpackage
  * glfs.h #includes &lt;sys/acl.h&gt;</changelog>
  <changelog author="mpluskal@suse.com" date="1509710400">- Explicitly require python2 as python3 is not yet supported</changelog>
  <changelog author="kukuk@suse.de" date="1510574400">- glusterfs-tirpc.diff: fallback to libtirpc if there is no sunrpc
  support in glibc</changelog>
  <changelog author="jengelh@inai.de" date="1512388800">- Update to new release 3.12.3
  * -- Features introduced in 3.10
  * Brick multiplexing
  * Support to display op-version information from clients
  * Support for rebalance time to completion estimation
  * Separation of tier as its own service
  * Statedump support for gfapi based applications
  * Disabled creation of trash directory by default
  * Implemented parallel readdirp with distribute xlator
  * -- Features introduced in 3.12:
  * Ability to mount sub-directories using the Gluster
    FUSE protocol
  * GFID to path conversion is enabled by default
  * Provided an option to set a limit on number of bricks
    multiplexed in a processes
  * Enhanced the option to export statfs data for bricks
    sharing the same backend filesystem
  * Provided a means to resolve GFID split-brain using
    the gluster CLI
  * Introduction of new api glfs_fd_set_lkowner() to set lock owner
- Remove glusterfs-date.diff (no longer applies)</changelog>
  <changelog author="jengelh@inai.de" date="1513252800">- Add 0001-build-restore-ability-to-control-verbosity-settings.patch
- Replace xdr_sizeof.c with an empty file</changelog>
  <changelog author="jengelh@inai.de" date="1525348800">- Update to new upstream release 4.0.2
  * GlusterD2 (GD2) is a new management daemon for Gluster-4.0,
    glustercli is the command-line interface for it.
    It is a preview release. GD2 is not backwards compatible with
    the older GlusterD. Heterogeneous clusters running both GD2
    and GlusterD are not possible.
  * Not all commands from GlusterD have been implemented for GD2.
  * GD2 does not (yet) work well in 2-node clusters.
  * Self Heal feature integrated for the new Volumes created
    using Glusterd2.</changelog>
  <changelog author="seanlew@opensuse.org" date="1547899200">- Update to new upstream version 5.3 (4.0 is EOL)
  * 5.3 brings hundreds of improvements, see complete relnote at
  https://docs.gluster.org/en/latest/release-notes/5.0/
  * Fixed a number of bugs:
    CVE-2018-1088, CVE-2018-1112 [boo#1090084],
    CVE-2018-10904 [boo#1107018], CVE-2018-10907 [boo#1107019],
    CVE-2018-10911 [boo#1107020], CVE-2018-10913 [boo#1107021],
    CVE-2018-10914 [boo#1107022], CVE-2018-10923 [boo#1107023],
    CVE-2018-10924 [boo#1107024], CVE-2018-10926 [boo#1107025],
    CVE-2018-10927 [boo#1107026], CVE-2018-10928 [boo#1107027],
    CVE-2018-10928 [boo#1107027], CVE-2018-10929 [boo#1107028],
    CVE-2018-10930 [boo#1107029], boo#1105776 .
- Remove patches no longer needed in 5.x:
  * 0001-build-restore-ability-to-control-verbosity-settings.patch
  * glusterfs-tirpc.diff</changelog>
  <changelog author="seanlew@opensuse.org" date="1551528000">- Update to new upstream version 5.4
  * FUSE Client memory leak fixed (#1623107)
  * fail to sync non-ascii utf8 file and dir names (#1648642)
  * Tracker bug for all leases related issues (#1651323)
  * gluster-blockd segfaults because of a null-deref (#1659563)
  * Memory leak: dict_t leak in rda_opendir (#1659676)
  * dht_revalidate may not heal attrs on the brick root (#1660736)
  * Fix tests/bugs/shard/zero-flag.t (#1660932)
  * NL cache: fix typos (#1662200)</changelog>
  <changelog author="seanlew@opensuse.org" date="1552824000">- Update to new upstream version 5.5
  * No changelog yet available in release notes</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Disable LTO (boo#1133088).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Move definition of _lto_cflags into %build.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1576238400">- Update to release 7.0
  * Latency based read child to improve read workload latency in
    a cluster, especially in a cloud setup. Also provides a load
    balancing with the outstanding pending request.
  * Thin-arbiter integration with GD1.
  * If a client older than glusterfs-4.x (i.e. 3.x clients)
    accesses a volume which has the `fips-mode-rchecksum` volume
    option enabled, it can cause erroneous checksum computation/
    unwanted behaviour during afr self-heal.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1577361600">- Fix the name of the Python bindings subpackage
- Properly mark Python bindings subpackage as noarch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1578571200">- Update to release 7.1
  * Fix rebalance causing IO Error - File descriptor in bad state
  * Fix geo-replication sessions going faulty
  * Fix memory leak in glusterfsd process
  * Fix GlusterFS brick process crash
- Add nocommon.patch [boo#1160392]</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1591272000">- Fixes for %_libexecdir changing to /usr/libexec</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1619697600">- Update to release 9.1
  * Implemented seek file operation for open-behind
  * Added io_uring support for Gluster
  * Added Support for 5K volumes
  * Enabled granular-entry-heal by default
  * Added support for monitoring the epoll/rpc layer
  * Improve rebalance of sparse files
- Drop nocommon.patch (merged)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632830400">- Update to release 9.3
  * New reset-brick command
  * Ability to get node level status of a cluster
  * Multi-threaded self-heal for Disperse volumes
  * Lock revocation feature
  * On-demand scrubbing for bitrot detection
  * Real time Cluster notifications using Events APIs
- Move mount helper to /usr/sbin [boo#1191062]</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1657800000">- add explicit Requires for the dependencies, so we make sure
  the dependencies are installed in the same version</changelog>
</package>
<package pkgid="5e983f58e6fc3c07fbbd51773fd319fed0c609c8b4eec8324d4409363f1d9c16" name="libgfxdr0" arch="x86_64">
  <version epoch="0" ver="9.3" rel="bp154.2.3.1"/>
  <changelog author="scorot@free.fr" date="1445947200">- Update to version 3.6.6
  * No ChangeLog available</changelog>
  <changelog author="vcizek@suse.com" date="1503489600">- Update to version 3.8.15
  * fixes build with OpenSSL 1.1 (bsc#1055466)
  * Mandatory lock support for Multiprotocol environment
  * Gluster/NFS disabled by default
  * Geo-replication for Sharded Volumes
  * Tiering aware Geo-replication
  * Enhance Quota enable/disable in glusterd
  * Automagic unsplit-brain by [ctime|mtime|size|majority] for AFR
  * Granular Entry self-heal for AFR
  * Tons of bugfixes
  * for more details see the NEWS file
- spec cleanup
- Install License files/docu</changelog>
  <changelog author="vcizek@suse.com" date="1508328000">- Add missing Requires: libacl-devel to the devel subpackage
  * glfs.h #includes &lt;sys/acl.h&gt;</changelog>
  <changelog author="mpluskal@suse.com" date="1509710400">- Explicitly require python2 as python3 is not yet supported</changelog>
  <changelog author="kukuk@suse.de" date="1510574400">- glusterfs-tirpc.diff: fallback to libtirpc if there is no sunrpc
  support in glibc</changelog>
  <changelog author="jengelh@inai.de" date="1512388800">- Update to new release 3.12.3
  * -- Features introduced in 3.10
  * Brick multiplexing
  * Support to display op-version information from clients
  * Support for rebalance time to completion estimation
  * Separation of tier as its own service
  * Statedump support for gfapi based applications
  * Disabled creation of trash directory by default
  * Implemented parallel readdirp with distribute xlator
  * -- Features introduced in 3.12:
  * Ability to mount sub-directories using the Gluster
    FUSE protocol
  * GFID to path conversion is enabled by default
  * Provided an option to set a limit on number of bricks
    multiplexed in a processes
  * Enhanced the option to export statfs data for bricks
    sharing the same backend filesystem
  * Provided a means to resolve GFID split-brain using
    the gluster CLI
  * Introduction of new api glfs_fd_set_lkowner() to set lock owner
- Remove glusterfs-date.diff (no longer applies)</changelog>
  <changelog author="jengelh@inai.de" date="1513252800">- Add 0001-build-restore-ability-to-control-verbosity-settings.patch
- Replace xdr_sizeof.c with an empty file</changelog>
  <changelog author="jengelh@inai.de" date="1525348800">- Update to new upstream release 4.0.2
  * GlusterD2 (GD2) is a new management daemon for Gluster-4.0,
    glustercli is the command-line interface for it.
    It is a preview release. GD2 is not backwards compatible with
    the older GlusterD. Heterogeneous clusters running both GD2
    and GlusterD are not possible.
  * Not all commands from GlusterD have been implemented for GD2.
  * GD2 does not (yet) work well in 2-node clusters.
  * Self Heal feature integrated for the new Volumes created
    using Glusterd2.</changelog>
  <changelog author="seanlew@opensuse.org" date="1547899200">- Update to new upstream version 5.3 (4.0 is EOL)
  * 5.3 brings hundreds of improvements, see complete relnote at
  https://docs.gluster.org/en/latest/release-notes/5.0/
  * Fixed a number of bugs:
    CVE-2018-1088, CVE-2018-1112 [boo#1090084],
    CVE-2018-10904 [boo#1107018], CVE-2018-10907 [boo#1107019],
    CVE-2018-10911 [boo#1107020], CVE-2018-10913 [boo#1107021],
    CVE-2018-10914 [boo#1107022], CVE-2018-10923 [boo#1107023],
    CVE-2018-10924 [boo#1107024], CVE-2018-10926 [boo#1107025],
    CVE-2018-10927 [boo#1107026], CVE-2018-10928 [boo#1107027],
    CVE-2018-10928 [boo#1107027], CVE-2018-10929 [boo#1107028],
    CVE-2018-10930 [boo#1107029], boo#1105776 .
- Remove patches no longer needed in 5.x:
  * 0001-build-restore-ability-to-control-verbosity-settings.patch
  * glusterfs-tirpc.diff</changelog>
  <changelog author="seanlew@opensuse.org" date="1551528000">- Update to new upstream version 5.4
  * FUSE Client memory leak fixed (#1623107)
  * fail to sync non-ascii utf8 file and dir names (#1648642)
  * Tracker bug for all leases related issues (#1651323)
  * gluster-blockd segfaults because of a null-deref (#1659563)
  * Memory leak: dict_t leak in rda_opendir (#1659676)
  * dht_revalidate may not heal attrs on the brick root (#1660736)
  * Fix tests/bugs/shard/zero-flag.t (#1660932)
  * NL cache: fix typos (#1662200)</changelog>
  <changelog author="seanlew@opensuse.org" date="1552824000">- Update to new upstream version 5.5
  * No changelog yet available in release notes</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Disable LTO (boo#1133088).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Move definition of _lto_cflags into %build.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1576238400">- Update to release 7.0
  * Latency based read child to improve read workload latency in
    a cluster, especially in a cloud setup. Also provides a load
    balancing with the outstanding pending request.
  * Thin-arbiter integration with GD1.
  * If a client older than glusterfs-4.x (i.e. 3.x clients)
    accesses a volume which has the `fips-mode-rchecksum` volume
    option enabled, it can cause erroneous checksum computation/
    unwanted behaviour during afr self-heal.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1577361600">- Fix the name of the Python bindings subpackage
- Properly mark Python bindings subpackage as noarch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1578571200">- Update to release 7.1
  * Fix rebalance causing IO Error - File descriptor in bad state
  * Fix geo-replication sessions going faulty
  * Fix memory leak in glusterfsd process
  * Fix GlusterFS brick process crash
- Add nocommon.patch [boo#1160392]</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1591272000">- Fixes for %_libexecdir changing to /usr/libexec</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1619697600">- Update to release 9.1
  * Implemented seek file operation for open-behind
  * Added io_uring support for Gluster
  * Added Support for 5K volumes
  * Enabled granular-entry-heal by default
  * Added support for monitoring the epoll/rpc layer
  * Improve rebalance of sparse files
- Drop nocommon.patch (merged)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632830400">- Update to release 9.3
  * New reset-brick command
  * Ability to get node level status of a cluster
  * Multi-threaded self-heal for Disperse volumes
  * Lock revocation feature
  * On-demand scrubbing for bitrot detection
  * Real time Cluster notifications using Events APIs
- Move mount helper to /usr/sbin [boo#1191062]</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1657800000">- add explicit Requires for the dependencies, so we make sure
  the dependencies are installed in the same version</changelog>
</package>
<package pkgid="95c03a9fa5fbc55e7e17caad6ca64fd5c2bee855ea3bad3cc9aacfe8bfa7a238" name="libglusterd0" arch="aarch64">
  <version epoch="0" ver="9.3" rel="bp154.2.3.1"/>
  <changelog author="scorot@free.fr" date="1445947200">- Update to version 3.6.6
  * No ChangeLog available</changelog>
  <changelog author="vcizek@suse.com" date="1503489600">- Update to version 3.8.15
  * fixes build with OpenSSL 1.1 (bsc#1055466)
  * Mandatory lock support for Multiprotocol environment
  * Gluster/NFS disabled by default
  * Geo-replication for Sharded Volumes
  * Tiering aware Geo-replication
  * Enhance Quota enable/disable in glusterd
  * Automagic unsplit-brain by [ctime|mtime|size|majority] for AFR
  * Granular Entry self-heal for AFR
  * Tons of bugfixes
  * for more details see the NEWS file
- spec cleanup
- Install License files/docu</changelog>
  <changelog author="vcizek@suse.com" date="1508328000">- Add missing Requires: libacl-devel to the devel subpackage
  * glfs.h #includes &lt;sys/acl.h&gt;</changelog>
  <changelog author="mpluskal@suse.com" date="1509710400">- Explicitly require python2 as python3 is not yet supported</changelog>
  <changelog author="kukuk@suse.de" date="1510574400">- glusterfs-tirpc.diff: fallback to libtirpc if there is no sunrpc
  support in glibc</changelog>
  <changelog author="jengelh@inai.de" date="1512388800">- Update to new release 3.12.3
  * -- Features introduced in 3.10
  * Brick multiplexing
  * Support to display op-version information from clients
  * Support for rebalance time to completion estimation
  * Separation of tier as its own service
  * Statedump support for gfapi based applications
  * Disabled creation of trash directory by default
  * Implemented parallel readdirp with distribute xlator
  * -- Features introduced in 3.12:
  * Ability to mount sub-directories using the Gluster
    FUSE protocol
  * GFID to path conversion is enabled by default
  * Provided an option to set a limit on number of bricks
    multiplexed in a processes
  * Enhanced the option to export statfs data for bricks
    sharing the same backend filesystem
  * Provided a means to resolve GFID split-brain using
    the gluster CLI
  * Introduction of new api glfs_fd_set_lkowner() to set lock owner
- Remove glusterfs-date.diff (no longer applies)</changelog>
  <changelog author="jengelh@inai.de" date="1513252800">- Add 0001-build-restore-ability-to-control-verbosity-settings.patch
- Replace xdr_sizeof.c with an empty file</changelog>
  <changelog author="jengelh@inai.de" date="1525348800">- Update to new upstream release 4.0.2
  * GlusterD2 (GD2) is a new management daemon for Gluster-4.0,
    glustercli is the command-line interface for it.
    It is a preview release. GD2 is not backwards compatible with
    the older GlusterD. Heterogeneous clusters running both GD2
    and GlusterD are not possible.
  * Not all commands from GlusterD have been implemented for GD2.
  * GD2 does not (yet) work well in 2-node clusters.
  * Self Heal feature integrated for the new Volumes created
    using Glusterd2.</changelog>
  <changelog author="seanlew@opensuse.org" date="1547899200">- Update to new upstream version 5.3 (4.0 is EOL)
  * 5.3 brings hundreds of improvements, see complete relnote at
  https://docs.gluster.org/en/latest/release-notes/5.0/
  * Fixed a number of bugs:
    CVE-2018-1088, CVE-2018-1112 [boo#1090084],
    CVE-2018-10904 [boo#1107018], CVE-2018-10907 [boo#1107019],
    CVE-2018-10911 [boo#1107020], CVE-2018-10913 [boo#1107021],
    CVE-2018-10914 [boo#1107022], CVE-2018-10923 [boo#1107023],
    CVE-2018-10924 [boo#1107024], CVE-2018-10926 [boo#1107025],
    CVE-2018-10927 [boo#1107026], CVE-2018-10928 [boo#1107027],
    CVE-2018-10928 [boo#1107027], CVE-2018-10929 [boo#1107028],
    CVE-2018-10930 [boo#1107029], boo#1105776 .
- Remove patches no longer needed in 5.x:
  * 0001-build-restore-ability-to-control-verbosity-settings.patch
  * glusterfs-tirpc.diff</changelog>
  <changelog author="seanlew@opensuse.org" date="1551528000">- Update to new upstream version 5.4
  * FUSE Client memory leak fixed (#1623107)
  * fail to sync non-ascii utf8 file and dir names (#1648642)
  * Tracker bug for all leases related issues (#1651323)
  * gluster-blockd segfaults because of a null-deref (#1659563)
  * Memory leak: dict_t leak in rda_opendir (#1659676)
  * dht_revalidate may not heal attrs on the brick root (#1660736)
  * Fix tests/bugs/shard/zero-flag.t (#1660932)
  * NL cache: fix typos (#1662200)</changelog>
  <changelog author="seanlew@opensuse.org" date="1552824000">- Update to new upstream version 5.5
  * No changelog yet available in release notes</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Disable LTO (boo#1133088).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Move definition of _lto_cflags into %build.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1576238400">- Update to release 7.0
  * Latency based read child to improve read workload latency in
    a cluster, especially in a cloud setup. Also provides a load
    balancing with the outstanding pending request.
  * Thin-arbiter integration with GD1.
  * If a client older than glusterfs-4.x (i.e. 3.x clients)
    accesses a volume which has the `fips-mode-rchecksum` volume
    option enabled, it can cause erroneous checksum computation/
    unwanted behaviour during afr self-heal.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1577361600">- Fix the name of the Python bindings subpackage
- Properly mark Python bindings subpackage as noarch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1578571200">- Update to release 7.1
  * Fix rebalance causing IO Error - File descriptor in bad state
  * Fix geo-replication sessions going faulty
  * Fix memory leak in glusterfsd process
  * Fix GlusterFS brick process crash
- Add nocommon.patch [boo#1160392]</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1591272000">- Fixes for %_libexecdir changing to /usr/libexec</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1619697600">- Update to release 9.1
  * Implemented seek file operation for open-behind
  * Added io_uring support for Gluster
  * Added Support for 5K volumes
  * Enabled granular-entry-heal by default
  * Added support for monitoring the epoll/rpc layer
  * Improve rebalance of sparse files
- Drop nocommon.patch (merged)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632830400">- Update to release 9.3
  * New reset-brick command
  * Ability to get node level status of a cluster
  * Multi-threaded self-heal for Disperse volumes
  * Lock revocation feature
  * On-demand scrubbing for bitrot detection
  * Real time Cluster notifications using Events APIs
- Move mount helper to /usr/sbin [boo#1191062]</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1657800000">- add explicit Requires for the dependencies, so we make sure
  the dependencies are installed in the same version</changelog>
</package>
<package pkgid="21d58ff7a05d36f7a544b764e5abdf334ba56dab33445537ebc921bf313ff004" name="libglusterd0" arch="i586">
  <version epoch="0" ver="9.3" rel="bp154.2.3.1"/>
  <changelog author="scorot@free.fr" date="1445947200">- Update to version 3.6.6
  * No ChangeLog available</changelog>
  <changelog author="vcizek@suse.com" date="1503489600">- Update to version 3.8.15
  * fixes build with OpenSSL 1.1 (bsc#1055466)
  * Mandatory lock support for Multiprotocol environment
  * Gluster/NFS disabled by default
  * Geo-replication for Sharded Volumes
  * Tiering aware Geo-replication
  * Enhance Quota enable/disable in glusterd
  * Automagic unsplit-brain by [ctime|mtime|size|majority] for AFR
  * Granular Entry self-heal for AFR
  * Tons of bugfixes
  * for more details see the NEWS file
- spec cleanup
- Install License files/docu</changelog>
  <changelog author="vcizek@suse.com" date="1508328000">- Add missing Requires: libacl-devel to the devel subpackage
  * glfs.h #includes &lt;sys/acl.h&gt;</changelog>
  <changelog author="mpluskal@suse.com" date="1509710400">- Explicitly require python2 as python3 is not yet supported</changelog>
  <changelog author="kukuk@suse.de" date="1510574400">- glusterfs-tirpc.diff: fallback to libtirpc if there is no sunrpc
  support in glibc</changelog>
  <changelog author="jengelh@inai.de" date="1512388800">- Update to new release 3.12.3
  * -- Features introduced in 3.10
  * Brick multiplexing
  * Support to display op-version information from clients
  * Support for rebalance time to completion estimation
  * Separation of tier as its own service
  * Statedump support for gfapi based applications
  * Disabled creation of trash directory by default
  * Implemented parallel readdirp with distribute xlator
  * -- Features introduced in 3.12:
  * Ability to mount sub-directories using the Gluster
    FUSE protocol
  * GFID to path conversion is enabled by default
  * Provided an option to set a limit on number of bricks
    multiplexed in a processes
  * Enhanced the option to export statfs data for bricks
    sharing the same backend filesystem
  * Provided a means to resolve GFID split-brain using
    the gluster CLI
  * Introduction of new api glfs_fd_set_lkowner() to set lock owner
- Remove glusterfs-date.diff (no longer applies)</changelog>
  <changelog author="jengelh@inai.de" date="1513252800">- Add 0001-build-restore-ability-to-control-verbosity-settings.patch
- Replace xdr_sizeof.c with an empty file</changelog>
  <changelog author="jengelh@inai.de" date="1525348800">- Update to new upstream release 4.0.2
  * GlusterD2 (GD2) is a new management daemon for Gluster-4.0,
    glustercli is the command-line interface for it.
    It is a preview release. GD2 is not backwards compatible with
    the older GlusterD. Heterogeneous clusters running both GD2
    and GlusterD are not possible.
  * Not all commands from GlusterD have been implemented for GD2.
  * GD2 does not (yet) work well in 2-node clusters.
  * Self Heal feature integrated for the new Volumes created
    using Glusterd2.</changelog>
  <changelog author="seanlew@opensuse.org" date="1547899200">- Update to new upstream version 5.3 (4.0 is EOL)
  * 5.3 brings hundreds of improvements, see complete relnote at
  https://docs.gluster.org/en/latest/release-notes/5.0/
  * Fixed a number of bugs:
    CVE-2018-1088, CVE-2018-1112 [boo#1090084],
    CVE-2018-10904 [boo#1107018], CVE-2018-10907 [boo#1107019],
    CVE-2018-10911 [boo#1107020], CVE-2018-10913 [boo#1107021],
    CVE-2018-10914 [boo#1107022], CVE-2018-10923 [boo#1107023],
    CVE-2018-10924 [boo#1107024], CVE-2018-10926 [boo#1107025],
    CVE-2018-10927 [boo#1107026], CVE-2018-10928 [boo#1107027],
    CVE-2018-10928 [boo#1107027], CVE-2018-10929 [boo#1107028],
    CVE-2018-10930 [boo#1107029], boo#1105776 .
- Remove patches no longer needed in 5.x:
  * 0001-build-restore-ability-to-control-verbosity-settings.patch
  * glusterfs-tirpc.diff</changelog>
  <changelog author="seanlew@opensuse.org" date="1551528000">- Update to new upstream version 5.4
  * FUSE Client memory leak fixed (#1623107)
  * fail to sync non-ascii utf8 file and dir names (#1648642)
  * Tracker bug for all leases related issues (#1651323)
  * gluster-blockd segfaults because of a null-deref (#1659563)
  * Memory leak: dict_t leak in rda_opendir (#1659676)
  * dht_revalidate may not heal attrs on the brick root (#1660736)
  * Fix tests/bugs/shard/zero-flag.t (#1660932)
  * NL cache: fix typos (#1662200)</changelog>
  <changelog author="seanlew@opensuse.org" date="1552824000">- Update to new upstream version 5.5
  * No changelog yet available in release notes</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Disable LTO (boo#1133088).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Move definition of _lto_cflags into %build.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1576238400">- Update to release 7.0
  * Latency based read child to improve read workload latency in
    a cluster, especially in a cloud setup. Also provides a load
    balancing with the outstanding pending request.
  * Thin-arbiter integration with GD1.
  * If a client older than glusterfs-4.x (i.e. 3.x clients)
    accesses a volume which has the `fips-mode-rchecksum` volume
    option enabled, it can cause erroneous checksum computation/
    unwanted behaviour during afr self-heal.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1577361600">- Fix the name of the Python bindings subpackage
- Properly mark Python bindings subpackage as noarch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1578571200">- Update to release 7.1
  * Fix rebalance causing IO Error - File descriptor in bad state
  * Fix geo-replication sessions going faulty
  * Fix memory leak in glusterfsd process
  * Fix GlusterFS brick process crash
- Add nocommon.patch [boo#1160392]</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1591272000">- Fixes for %_libexecdir changing to /usr/libexec</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1619697600">- Update to release 9.1
  * Implemented seek file operation for open-behind
  * Added io_uring support for Gluster
  * Added Support for 5K volumes
  * Enabled granular-entry-heal by default
  * Added support for monitoring the epoll/rpc layer
  * Improve rebalance of sparse files
- Drop nocommon.patch (merged)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632830400">- Update to release 9.3
  * New reset-brick command
  * Ability to get node level status of a cluster
  * Multi-threaded self-heal for Disperse volumes
  * Lock revocation feature
  * On-demand scrubbing for bitrot detection
  * Real time Cluster notifications using Events APIs
- Move mount helper to /usr/sbin [boo#1191062]</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1657800000">- add explicit Requires for the dependencies, so we make sure
  the dependencies are installed in the same version</changelog>
</package>
<package pkgid="3025c1c4e919f25cf1cd304a46e95c73438da926f0d566d5265be822485f852d" name="libglusterd0" arch="ppc64le">
  <version epoch="0" ver="9.3" rel="bp154.2.3.1"/>
  <changelog author="scorot@free.fr" date="1445947200">- Update to version 3.6.6
  * No ChangeLog available</changelog>
  <changelog author="vcizek@suse.com" date="1503489600">- Update to version 3.8.15
  * fixes build with OpenSSL 1.1 (bsc#1055466)
  * Mandatory lock support for Multiprotocol environment
  * Gluster/NFS disabled by default
  * Geo-replication for Sharded Volumes
  * Tiering aware Geo-replication
  * Enhance Quota enable/disable in glusterd
  * Automagic unsplit-brain by [ctime|mtime|size|majority] for AFR
  * Granular Entry self-heal for AFR
  * Tons of bugfixes
  * for more details see the NEWS file
- spec cleanup
- Install License files/docu</changelog>
  <changelog author="vcizek@suse.com" date="1508328000">- Add missing Requires: libacl-devel to the devel subpackage
  * glfs.h #includes &lt;sys/acl.h&gt;</changelog>
  <changelog author="mpluskal@suse.com" date="1509710400">- Explicitly require python2 as python3 is not yet supported</changelog>
  <changelog author="kukuk@suse.de" date="1510574400">- glusterfs-tirpc.diff: fallback to libtirpc if there is no sunrpc
  support in glibc</changelog>
  <changelog author="jengelh@inai.de" date="1512388800">- Update to new release 3.12.3
  * -- Features introduced in 3.10
  * Brick multiplexing
  * Support to display op-version information from clients
  * Support for rebalance time to completion estimation
  * Separation of tier as its own service
  * Statedump support for gfapi based applications
  * Disabled creation of trash directory by default
  * Implemented parallel readdirp with distribute xlator
  * -- Features introduced in 3.12:
  * Ability to mount sub-directories using the Gluster
    FUSE protocol
  * GFID to path conversion is enabled by default
  * Provided an option to set a limit on number of bricks
    multiplexed in a processes
  * Enhanced the option to export statfs data for bricks
    sharing the same backend filesystem
  * Provided a means to resolve GFID split-brain using
    the gluster CLI
  * Introduction of new api glfs_fd_set_lkowner() to set lock owner
- Remove glusterfs-date.diff (no longer applies)</changelog>
  <changelog author="jengelh@inai.de" date="1513252800">- Add 0001-build-restore-ability-to-control-verbosity-settings.patch
- Replace xdr_sizeof.c with an empty file</changelog>
  <changelog author="jengelh@inai.de" date="1525348800">- Update to new upstream release 4.0.2
  * GlusterD2 (GD2) is a new management daemon for Gluster-4.0,
    glustercli is the command-line interface for it.
    It is a preview release. GD2 is not backwards compatible with
    the older GlusterD. Heterogeneous clusters running both GD2
    and GlusterD are not possible.
  * Not all commands from GlusterD have been implemented for GD2.
  * GD2 does not (yet) work well in 2-node clusters.
  * Self Heal feature integrated for the new Volumes created
    using Glusterd2.</changelog>
  <changelog author="seanlew@opensuse.org" date="1547899200">- Update to new upstream version 5.3 (4.0 is EOL)
  * 5.3 brings hundreds of improvements, see complete relnote at
  https://docs.gluster.org/en/latest/release-notes/5.0/
  * Fixed a number of bugs:
    CVE-2018-1088, CVE-2018-1112 [boo#1090084],
    CVE-2018-10904 [boo#1107018], CVE-2018-10907 [boo#1107019],
    CVE-2018-10911 [boo#1107020], CVE-2018-10913 [boo#1107021],
    CVE-2018-10914 [boo#1107022], CVE-2018-10923 [boo#1107023],
    CVE-2018-10924 [boo#1107024], CVE-2018-10926 [boo#1107025],
    CVE-2018-10927 [boo#1107026], CVE-2018-10928 [boo#1107027],
    CVE-2018-10928 [boo#1107027], CVE-2018-10929 [boo#1107028],
    CVE-2018-10930 [boo#1107029], boo#1105776 .
- Remove patches no longer needed in 5.x:
  * 0001-build-restore-ability-to-control-verbosity-settings.patch
  * glusterfs-tirpc.diff</changelog>
  <changelog author="seanlew@opensuse.org" date="1551528000">- Update to new upstream version 5.4
  * FUSE Client memory leak fixed (#1623107)
  * fail to sync non-ascii utf8 file and dir names (#1648642)
  * Tracker bug for all leases related issues (#1651323)
  * gluster-blockd segfaults because of a null-deref (#1659563)
  * Memory leak: dict_t leak in rda_opendir (#1659676)
  * dht_revalidate may not heal attrs on the brick root (#1660736)
  * Fix tests/bugs/shard/zero-flag.t (#1660932)
  * NL cache: fix typos (#1662200)</changelog>
  <changelog author="seanlew@opensuse.org" date="1552824000">- Update to new upstream version 5.5
  * No changelog yet available in release notes</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Disable LTO (boo#1133088).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Move definition of _lto_cflags into %build.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1576238400">- Update to release 7.0
  * Latency based read child to improve read workload latency in
    a cluster, especially in a cloud setup. Also provides a load
    balancing with the outstanding pending request.
  * Thin-arbiter integration with GD1.
  * If a client older than glusterfs-4.x (i.e. 3.x clients)
    accesses a volume which has the `fips-mode-rchecksum` volume
    option enabled, it can cause erroneous checksum computation/
    unwanted behaviour during afr self-heal.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1577361600">- Fix the name of the Python bindings subpackage
- Properly mark Python bindings subpackage as noarch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1578571200">- Update to release 7.1
  * Fix rebalance causing IO Error - File descriptor in bad state
  * Fix geo-replication sessions going faulty
  * Fix memory leak in glusterfsd process
  * Fix GlusterFS brick process crash
- Add nocommon.patch [boo#1160392]</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1591272000">- Fixes for %_libexecdir changing to /usr/libexec</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1619697600">- Update to release 9.1
  * Implemented seek file operation for open-behind
  * Added io_uring support for Gluster
  * Added Support for 5K volumes
  * Enabled granular-entry-heal by default
  * Added support for monitoring the epoll/rpc layer
  * Improve rebalance of sparse files
- Drop nocommon.patch (merged)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632830400">- Update to release 9.3
  * New reset-brick command
  * Ability to get node level status of a cluster
  * Multi-threaded self-heal for Disperse volumes
  * Lock revocation feature
  * On-demand scrubbing for bitrot detection
  * Real time Cluster notifications using Events APIs
- Move mount helper to /usr/sbin [boo#1191062]</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1657800000">- add explicit Requires for the dependencies, so we make sure
  the dependencies are installed in the same version</changelog>
</package>
<package pkgid="4deb42ea1528f7d0c1f1b43d705603c13c7bf5736a8dbd0e42c4df447588f2af" name="libglusterd0" arch="s390x">
  <version epoch="0" ver="9.3" rel="bp154.2.3.1"/>
  <changelog author="scorot@free.fr" date="1445947200">- Update to version 3.6.6
  * No ChangeLog available</changelog>
  <changelog author="vcizek@suse.com" date="1503489600">- Update to version 3.8.15
  * fixes build with OpenSSL 1.1 (bsc#1055466)
  * Mandatory lock support for Multiprotocol environment
  * Gluster/NFS disabled by default
  * Geo-replication for Sharded Volumes
  * Tiering aware Geo-replication
  * Enhance Quota enable/disable in glusterd
  * Automagic unsplit-brain by [ctime|mtime|size|majority] for AFR
  * Granular Entry self-heal for AFR
  * Tons of bugfixes
  * for more details see the NEWS file
- spec cleanup
- Install License files/docu</changelog>
  <changelog author="vcizek@suse.com" date="1508328000">- Add missing Requires: libacl-devel to the devel subpackage
  * glfs.h #includes &lt;sys/acl.h&gt;</changelog>
  <changelog author="mpluskal@suse.com" date="1509710400">- Explicitly require python2 as python3 is not yet supported</changelog>
  <changelog author="kukuk@suse.de" date="1510574400">- glusterfs-tirpc.diff: fallback to libtirpc if there is no sunrpc
  support in glibc</changelog>
  <changelog author="jengelh@inai.de" date="1512388800">- Update to new release 3.12.3
  * -- Features introduced in 3.10
  * Brick multiplexing
  * Support to display op-version information from clients
  * Support for rebalance time to completion estimation
  * Separation of tier as its own service
  * Statedump support for gfapi based applications
  * Disabled creation of trash directory by default
  * Implemented parallel readdirp with distribute xlator
  * -- Features introduced in 3.12:
  * Ability to mount sub-directories using the Gluster
    FUSE protocol
  * GFID to path conversion is enabled by default
  * Provided an option to set a limit on number of bricks
    multiplexed in a processes
  * Enhanced the option to export statfs data for bricks
    sharing the same backend filesystem
  * Provided a means to resolve GFID split-brain using
    the gluster CLI
  * Introduction of new api glfs_fd_set_lkowner() to set lock owner
- Remove glusterfs-date.diff (no longer applies)</changelog>
  <changelog author="jengelh@inai.de" date="1513252800">- Add 0001-build-restore-ability-to-control-verbosity-settings.patch
- Replace xdr_sizeof.c with an empty file</changelog>
  <changelog author="jengelh@inai.de" date="1525348800">- Update to new upstream release 4.0.2
  * GlusterD2 (GD2) is a new management daemon for Gluster-4.0,
    glustercli is the command-line interface for it.
    It is a preview release. GD2 is not backwards compatible with
    the older GlusterD. Heterogeneous clusters running both GD2
    and GlusterD are not possible.
  * Not all commands from GlusterD have been implemented for GD2.
  * GD2 does not (yet) work well in 2-node clusters.
  * Self Heal feature integrated for the new Volumes created
    using Glusterd2.</changelog>
  <changelog author="seanlew@opensuse.org" date="1547899200">- Update to new upstream version 5.3 (4.0 is EOL)
  * 5.3 brings hundreds of improvements, see complete relnote at
  https://docs.gluster.org/en/latest/release-notes/5.0/
  * Fixed a number of bugs:
    CVE-2018-1088, CVE-2018-1112 [boo#1090084],
    CVE-2018-10904 [boo#1107018], CVE-2018-10907 [boo#1107019],
    CVE-2018-10911 [boo#1107020], CVE-2018-10913 [boo#1107021],
    CVE-2018-10914 [boo#1107022], CVE-2018-10923 [boo#1107023],
    CVE-2018-10924 [boo#1107024], CVE-2018-10926 [boo#1107025],
    CVE-2018-10927 [boo#1107026], CVE-2018-10928 [boo#1107027],
    CVE-2018-10928 [boo#1107027], CVE-2018-10929 [boo#1107028],
    CVE-2018-10930 [boo#1107029], boo#1105776 .
- Remove patches no longer needed in 5.x:
  * 0001-build-restore-ability-to-control-verbosity-settings.patch
  * glusterfs-tirpc.diff</changelog>
  <changelog author="seanlew@opensuse.org" date="1551528000">- Update to new upstream version 5.4
  * FUSE Client memory leak fixed (#1623107)
  * fail to sync non-ascii utf8 file and dir names (#1648642)
  * Tracker bug for all leases related issues (#1651323)
  * gluster-blockd segfaults because of a null-deref (#1659563)
  * Memory leak: dict_t leak in rda_opendir (#1659676)
  * dht_revalidate may not heal attrs on the brick root (#1660736)
  * Fix tests/bugs/shard/zero-flag.t (#1660932)
  * NL cache: fix typos (#1662200)</changelog>
  <changelog author="seanlew@opensuse.org" date="1552824000">- Update to new upstream version 5.5
  * No changelog yet available in release notes</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Disable LTO (boo#1133088).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Move definition of _lto_cflags into %build.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1576238400">- Update to release 7.0
  * Latency based read child to improve read workload latency in
    a cluster, especially in a cloud setup. Also provides a load
    balancing with the outstanding pending request.
  * Thin-arbiter integration with GD1.
  * If a client older than glusterfs-4.x (i.e. 3.x clients)
    accesses a volume which has the `fips-mode-rchecksum` volume
    option enabled, it can cause erroneous checksum computation/
    unwanted behaviour during afr self-heal.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1577361600">- Fix the name of the Python bindings subpackage
- Properly mark Python bindings subpackage as noarch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1578571200">- Update to release 7.1
  * Fix rebalance causing IO Error - File descriptor in bad state
  * Fix geo-replication sessions going faulty
  * Fix memory leak in glusterfsd process
  * Fix GlusterFS brick process crash
- Add nocommon.patch [boo#1160392]</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1591272000">- Fixes for %_libexecdir changing to /usr/libexec</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1619697600">- Update to release 9.1
  * Implemented seek file operation for open-behind
  * Added io_uring support for Gluster
  * Added Support for 5K volumes
  * Enabled granular-entry-heal by default
  * Added support for monitoring the epoll/rpc layer
  * Improve rebalance of sparse files
- Drop nocommon.patch (merged)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632830400">- Update to release 9.3
  * New reset-brick command
  * Ability to get node level status of a cluster
  * Multi-threaded self-heal for Disperse volumes
  * Lock revocation feature
  * On-demand scrubbing for bitrot detection
  * Real time Cluster notifications using Events APIs
- Move mount helper to /usr/sbin [boo#1191062]</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1657800000">- add explicit Requires for the dependencies, so we make sure
  the dependencies are installed in the same version</changelog>
</package>
<package pkgid="993d07c229151276eeed5d6df2e10fca920b380e3b7a1ad512f6608c90a5696e" name="libglusterd0" arch="x86_64">
  <version epoch="0" ver="9.3" rel="bp154.2.3.1"/>
  <changelog author="scorot@free.fr" date="1445947200">- Update to version 3.6.6
  * No ChangeLog available</changelog>
  <changelog author="vcizek@suse.com" date="1503489600">- Update to version 3.8.15
  * fixes build with OpenSSL 1.1 (bsc#1055466)
  * Mandatory lock support for Multiprotocol environment
  * Gluster/NFS disabled by default
  * Geo-replication for Sharded Volumes
  * Tiering aware Geo-replication
  * Enhance Quota enable/disable in glusterd
  * Automagic unsplit-brain by [ctime|mtime|size|majority] for AFR
  * Granular Entry self-heal for AFR
  * Tons of bugfixes
  * for more details see the NEWS file
- spec cleanup
- Install License files/docu</changelog>
  <changelog author="vcizek@suse.com" date="1508328000">- Add missing Requires: libacl-devel to the devel subpackage
  * glfs.h #includes &lt;sys/acl.h&gt;</changelog>
  <changelog author="mpluskal@suse.com" date="1509710400">- Explicitly require python2 as python3 is not yet supported</changelog>
  <changelog author="kukuk@suse.de" date="1510574400">- glusterfs-tirpc.diff: fallback to libtirpc if there is no sunrpc
  support in glibc</changelog>
  <changelog author="jengelh@inai.de" date="1512388800">- Update to new release 3.12.3
  * -- Features introduced in 3.10
  * Brick multiplexing
  * Support to display op-version information from clients
  * Support for rebalance time to completion estimation
  * Separation of tier as its own service
  * Statedump support for gfapi based applications
  * Disabled creation of trash directory by default
  * Implemented parallel readdirp with distribute xlator
  * -- Features introduced in 3.12:
  * Ability to mount sub-directories using the Gluster
    FUSE protocol
  * GFID to path conversion is enabled by default
  * Provided an option to set a limit on number of bricks
    multiplexed in a processes
  * Enhanced the option to export statfs data for bricks
    sharing the same backend filesystem
  * Provided a means to resolve GFID split-brain using
    the gluster CLI
  * Introduction of new api glfs_fd_set_lkowner() to set lock owner
- Remove glusterfs-date.diff (no longer applies)</changelog>
  <changelog author="jengelh@inai.de" date="1513252800">- Add 0001-build-restore-ability-to-control-verbosity-settings.patch
- Replace xdr_sizeof.c with an empty file</changelog>
  <changelog author="jengelh@inai.de" date="1525348800">- Update to new upstream release 4.0.2
  * GlusterD2 (GD2) is a new management daemon for Gluster-4.0,
    glustercli is the command-line interface for it.
    It is a preview release. GD2 is not backwards compatible with
    the older GlusterD. Heterogeneous clusters running both GD2
    and GlusterD are not possible.
  * Not all commands from GlusterD have been implemented for GD2.
  * GD2 does not (yet) work well in 2-node clusters.
  * Self Heal feature integrated for the new Volumes created
    using Glusterd2.</changelog>
  <changelog author="seanlew@opensuse.org" date="1547899200">- Update to new upstream version 5.3 (4.0 is EOL)
  * 5.3 brings hundreds of improvements, see complete relnote at
  https://docs.gluster.org/en/latest/release-notes/5.0/
  * Fixed a number of bugs:
    CVE-2018-1088, CVE-2018-1112 [boo#1090084],
    CVE-2018-10904 [boo#1107018], CVE-2018-10907 [boo#1107019],
    CVE-2018-10911 [boo#1107020], CVE-2018-10913 [boo#1107021],
    CVE-2018-10914 [boo#1107022], CVE-2018-10923 [boo#1107023],
    CVE-2018-10924 [boo#1107024], CVE-2018-10926 [boo#1107025],
    CVE-2018-10927 [boo#1107026], CVE-2018-10928 [boo#1107027],
    CVE-2018-10928 [boo#1107027], CVE-2018-10929 [boo#1107028],
    CVE-2018-10930 [boo#1107029], boo#1105776 .
- Remove patches no longer needed in 5.x:
  * 0001-build-restore-ability-to-control-verbosity-settings.patch
  * glusterfs-tirpc.diff</changelog>
  <changelog author="seanlew@opensuse.org" date="1551528000">- Update to new upstream version 5.4
  * FUSE Client memory leak fixed (#1623107)
  * fail to sync non-ascii utf8 file and dir names (#1648642)
  * Tracker bug for all leases related issues (#1651323)
  * gluster-blockd segfaults because of a null-deref (#1659563)
  * Memory leak: dict_t leak in rda_opendir (#1659676)
  * dht_revalidate may not heal attrs on the brick root (#1660736)
  * Fix tests/bugs/shard/zero-flag.t (#1660932)
  * NL cache: fix typos (#1662200)</changelog>
  <changelog author="seanlew@opensuse.org" date="1552824000">- Update to new upstream version 5.5
  * No changelog yet available in release notes</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Disable LTO (boo#1133088).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Move definition of _lto_cflags into %build.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1576238400">- Update to release 7.0
  * Latency based read child to improve read workload latency in
    a cluster, especially in a cloud setup. Also provides a load
    balancing with the outstanding pending request.
  * Thin-arbiter integration with GD1.
  * If a client older than glusterfs-4.x (i.e. 3.x clients)
    accesses a volume which has the `fips-mode-rchecksum` volume
    option enabled, it can cause erroneous checksum computation/
    unwanted behaviour during afr self-heal.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1577361600">- Fix the name of the Python bindings subpackage
- Properly mark Python bindings subpackage as noarch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1578571200">- Update to release 7.1
  * Fix rebalance causing IO Error - File descriptor in bad state
  * Fix geo-replication sessions going faulty
  * Fix memory leak in glusterfsd process
  * Fix GlusterFS brick process crash
- Add nocommon.patch [boo#1160392]</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1591272000">- Fixes for %_libexecdir changing to /usr/libexec</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1619697600">- Update to release 9.1
  * Implemented seek file operation for open-behind
  * Added io_uring support for Gluster
  * Added Support for 5K volumes
  * Enabled granular-entry-heal by default
  * Added support for monitoring the epoll/rpc layer
  * Improve rebalance of sparse files
- Drop nocommon.patch (merged)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632830400">- Update to release 9.3
  * New reset-brick command
  * Ability to get node level status of a cluster
  * Multi-threaded self-heal for Disperse volumes
  * Lock revocation feature
  * On-demand scrubbing for bitrot detection
  * Real time Cluster notifications using Events APIs
- Move mount helper to /usr/sbin [boo#1191062]</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1657800000">- add explicit Requires for the dependencies, so we make sure
  the dependencies are installed in the same version</changelog>
</package>
<package pkgid="faeb57ca291155efa0bd3ebb98c17c745c5adae29b13a169a688bb745e701284" name="libglusterfs0" arch="aarch64">
  <version epoch="0" ver="9.3" rel="bp154.2.3.1"/>
  <changelog author="scorot@free.fr" date="1445947200">- Update to version 3.6.6
  * No ChangeLog available</changelog>
  <changelog author="vcizek@suse.com" date="1503489600">- Update to version 3.8.15
  * fixes build with OpenSSL 1.1 (bsc#1055466)
  * Mandatory lock support for Multiprotocol environment
  * Gluster/NFS disabled by default
  * Geo-replication for Sharded Volumes
  * Tiering aware Geo-replication
  * Enhance Quota enable/disable in glusterd
  * Automagic unsplit-brain by [ctime|mtime|size|majority] for AFR
  * Granular Entry self-heal for AFR
  * Tons of bugfixes
  * for more details see the NEWS file
- spec cleanup
- Install License files/docu</changelog>
  <changelog author="vcizek@suse.com" date="1508328000">- Add missing Requires: libacl-devel to the devel subpackage
  * glfs.h #includes &lt;sys/acl.h&gt;</changelog>
  <changelog author="mpluskal@suse.com" date="1509710400">- Explicitly require python2 as python3 is not yet supported</changelog>
  <changelog author="kukuk@suse.de" date="1510574400">- glusterfs-tirpc.diff: fallback to libtirpc if there is no sunrpc
  support in glibc</changelog>
  <changelog author="jengelh@inai.de" date="1512388800">- Update to new release 3.12.3
  * -- Features introduced in 3.10
  * Brick multiplexing
  * Support to display op-version information from clients
  * Support for rebalance time to completion estimation
  * Separation of tier as its own service
  * Statedump support for gfapi based applications
  * Disabled creation of trash directory by default
  * Implemented parallel readdirp with distribute xlator
  * -- Features introduced in 3.12:
  * Ability to mount sub-directories using the Gluster
    FUSE protocol
  * GFID to path conversion is enabled by default
  * Provided an option to set a limit on number of bricks
    multiplexed in a processes
  * Enhanced the option to export statfs data for bricks
    sharing the same backend filesystem
  * Provided a means to resolve GFID split-brain using
    the gluster CLI
  * Introduction of new api glfs_fd_set_lkowner() to set lock owner
- Remove glusterfs-date.diff (no longer applies)</changelog>
  <changelog author="jengelh@inai.de" date="1513252800">- Add 0001-build-restore-ability-to-control-verbosity-settings.patch
- Replace xdr_sizeof.c with an empty file</changelog>
  <changelog author="jengelh@inai.de" date="1525348800">- Update to new upstream release 4.0.2
  * GlusterD2 (GD2) is a new management daemon for Gluster-4.0,
    glustercli is the command-line interface for it.
    It is a preview release. GD2 is not backwards compatible with
    the older GlusterD. Heterogeneous clusters running both GD2
    and GlusterD are not possible.
  * Not all commands from GlusterD have been implemented for GD2.
  * GD2 does not (yet) work well in 2-node clusters.
  * Self Heal feature integrated for the new Volumes created
    using Glusterd2.</changelog>
  <changelog author="seanlew@opensuse.org" date="1547899200">- Update to new upstream version 5.3 (4.0 is EOL)
  * 5.3 brings hundreds of improvements, see complete relnote at
  https://docs.gluster.org/en/latest/release-notes/5.0/
  * Fixed a number of bugs:
    CVE-2018-1088, CVE-2018-1112 [boo#1090084],
    CVE-2018-10904 [boo#1107018], CVE-2018-10907 [boo#1107019],
    CVE-2018-10911 [boo#1107020], CVE-2018-10913 [boo#1107021],
    CVE-2018-10914 [boo#1107022], CVE-2018-10923 [boo#1107023],
    CVE-2018-10924 [boo#1107024], CVE-2018-10926 [boo#1107025],
    CVE-2018-10927 [boo#1107026], CVE-2018-10928 [boo#1107027],
    CVE-2018-10928 [boo#1107027], CVE-2018-10929 [boo#1107028],
    CVE-2018-10930 [boo#1107029], boo#1105776 .
- Remove patches no longer needed in 5.x:
  * 0001-build-restore-ability-to-control-verbosity-settings.patch
  * glusterfs-tirpc.diff</changelog>
  <changelog author="seanlew@opensuse.org" date="1551528000">- Update to new upstream version 5.4
  * FUSE Client memory leak fixed (#1623107)
  * fail to sync non-ascii utf8 file and dir names (#1648642)
  * Tracker bug for all leases related issues (#1651323)
  * gluster-blockd segfaults because of a null-deref (#1659563)
  * Memory leak: dict_t leak in rda_opendir (#1659676)
  * dht_revalidate may not heal attrs on the brick root (#1660736)
  * Fix tests/bugs/shard/zero-flag.t (#1660932)
  * NL cache: fix typos (#1662200)</changelog>
  <changelog author="seanlew@opensuse.org" date="1552824000">- Update to new upstream version 5.5
  * No changelog yet available in release notes</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Disable LTO (boo#1133088).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Move definition of _lto_cflags into %build.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1576238400">- Update to release 7.0
  * Latency based read child to improve read workload latency in
    a cluster, especially in a cloud setup. Also provides a load
    balancing with the outstanding pending request.
  * Thin-arbiter integration with GD1.
  * If a client older than glusterfs-4.x (i.e. 3.x clients)
    accesses a volume which has the `fips-mode-rchecksum` volume
    option enabled, it can cause erroneous checksum computation/
    unwanted behaviour during afr self-heal.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1577361600">- Fix the name of the Python bindings subpackage
- Properly mark Python bindings subpackage as noarch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1578571200">- Update to release 7.1
  * Fix rebalance causing IO Error - File descriptor in bad state
  * Fix geo-replication sessions going faulty
  * Fix memory leak in glusterfsd process
  * Fix GlusterFS brick process crash
- Add nocommon.patch [boo#1160392]</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1591272000">- Fixes for %_libexecdir changing to /usr/libexec</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1619697600">- Update to release 9.1
  * Implemented seek file operation for open-behind
  * Added io_uring support for Gluster
  * Added Support for 5K volumes
  * Enabled granular-entry-heal by default
  * Added support for monitoring the epoll/rpc layer
  * Improve rebalance of sparse files
- Drop nocommon.patch (merged)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632830400">- Update to release 9.3
  * New reset-brick command
  * Ability to get node level status of a cluster
  * Multi-threaded self-heal for Disperse volumes
  * Lock revocation feature
  * On-demand scrubbing for bitrot detection
  * Real time Cluster notifications using Events APIs
- Move mount helper to /usr/sbin [boo#1191062]</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1657800000">- add explicit Requires for the dependencies, so we make sure
  the dependencies are installed in the same version</changelog>
</package>
<package pkgid="d934cd8475cfecf7593b95407ca64a0213c25a1a3ae701e9a70f7212938a431a" name="libglusterfs0" arch="i586">
  <version epoch="0" ver="9.3" rel="bp154.2.3.1"/>
  <changelog author="scorot@free.fr" date="1445947200">- Update to version 3.6.6
  * No ChangeLog available</changelog>
  <changelog author="vcizek@suse.com" date="1503489600">- Update to version 3.8.15
  * fixes build with OpenSSL 1.1 (bsc#1055466)
  * Mandatory lock support for Multiprotocol environment
  * Gluster/NFS disabled by default
  * Geo-replication for Sharded Volumes
  * Tiering aware Geo-replication
  * Enhance Quota enable/disable in glusterd
  * Automagic unsplit-brain by [ctime|mtime|size|majority] for AFR
  * Granular Entry self-heal for AFR
  * Tons of bugfixes
  * for more details see the NEWS file
- spec cleanup
- Install License files/docu</changelog>
  <changelog author="vcizek@suse.com" date="1508328000">- Add missing Requires: libacl-devel to the devel subpackage
  * glfs.h #includes &lt;sys/acl.h&gt;</changelog>
  <changelog author="mpluskal@suse.com" date="1509710400">- Explicitly require python2 as python3 is not yet supported</changelog>
  <changelog author="kukuk@suse.de" date="1510574400">- glusterfs-tirpc.diff: fallback to libtirpc if there is no sunrpc
  support in glibc</changelog>
  <changelog author="jengelh@inai.de" date="1512388800">- Update to new release 3.12.3
  * -- Features introduced in 3.10
  * Brick multiplexing
  * Support to display op-version information from clients
  * Support for rebalance time to completion estimation
  * Separation of tier as its own service
  * Statedump support for gfapi based applications
  * Disabled creation of trash directory by default
  * Implemented parallel readdirp with distribute xlator
  * -- Features introduced in 3.12:
  * Ability to mount sub-directories using the Gluster
    FUSE protocol
  * GFID to path conversion is enabled by default
  * Provided an option to set a limit on number of bricks
    multiplexed in a processes
  * Enhanced the option to export statfs data for bricks
    sharing the same backend filesystem
  * Provided a means to resolve GFID split-brain using
    the gluster CLI
  * Introduction of new api glfs_fd_set_lkowner() to set lock owner
- Remove glusterfs-date.diff (no longer applies)</changelog>
  <changelog author="jengelh@inai.de" date="1513252800">- Add 0001-build-restore-ability-to-control-verbosity-settings.patch
- Replace xdr_sizeof.c with an empty file</changelog>
  <changelog author="jengelh@inai.de" date="1525348800">- Update to new upstream release 4.0.2
  * GlusterD2 (GD2) is a new management daemon for Gluster-4.0,
    glustercli is the command-line interface for it.
    It is a preview release. GD2 is not backwards compatible with
    the older GlusterD. Heterogeneous clusters running both GD2
    and GlusterD are not possible.
  * Not all commands from GlusterD have been implemented for GD2.
  * GD2 does not (yet) work well in 2-node clusters.
  * Self Heal feature integrated for the new Volumes created
    using Glusterd2.</changelog>
  <changelog author="seanlew@opensuse.org" date="1547899200">- Update to new upstream version 5.3 (4.0 is EOL)
  * 5.3 brings hundreds of improvements, see complete relnote at
  https://docs.gluster.org/en/latest/release-notes/5.0/
  * Fixed a number of bugs:
    CVE-2018-1088, CVE-2018-1112 [boo#1090084],
    CVE-2018-10904 [boo#1107018], CVE-2018-10907 [boo#1107019],
    CVE-2018-10911 [boo#1107020], CVE-2018-10913 [boo#1107021],
    CVE-2018-10914 [boo#1107022], CVE-2018-10923 [boo#1107023],
    CVE-2018-10924 [boo#1107024], CVE-2018-10926 [boo#1107025],
    CVE-2018-10927 [boo#1107026], CVE-2018-10928 [boo#1107027],
    CVE-2018-10928 [boo#1107027], CVE-2018-10929 [boo#1107028],
    CVE-2018-10930 [boo#1107029], boo#1105776 .
- Remove patches no longer needed in 5.x:
  * 0001-build-restore-ability-to-control-verbosity-settings.patch
  * glusterfs-tirpc.diff</changelog>
  <changelog author="seanlew@opensuse.org" date="1551528000">- Update to new upstream version 5.4
  * FUSE Client memory leak fixed (#1623107)
  * fail to sync non-ascii utf8 file and dir names (#1648642)
  * Tracker bug for all leases related issues (#1651323)
  * gluster-blockd segfaults because of a null-deref (#1659563)
  * Memory leak: dict_t leak in rda_opendir (#1659676)
  * dht_revalidate may not heal attrs on the brick root (#1660736)
  * Fix tests/bugs/shard/zero-flag.t (#1660932)
  * NL cache: fix typos (#1662200)</changelog>
  <changelog author="seanlew@opensuse.org" date="1552824000">- Update to new upstream version 5.5
  * No changelog yet available in release notes</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Disable LTO (boo#1133088).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Move definition of _lto_cflags into %build.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1576238400">- Update to release 7.0
  * Latency based read child to improve read workload latency in
    a cluster, especially in a cloud setup. Also provides a load
    balancing with the outstanding pending request.
  * Thin-arbiter integration with GD1.
  * If a client older than glusterfs-4.x (i.e. 3.x clients)
    accesses a volume which has the `fips-mode-rchecksum` volume
    option enabled, it can cause erroneous checksum computation/
    unwanted behaviour during afr self-heal.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1577361600">- Fix the name of the Python bindings subpackage
- Properly mark Python bindings subpackage as noarch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1578571200">- Update to release 7.1
  * Fix rebalance causing IO Error - File descriptor in bad state
  * Fix geo-replication sessions going faulty
  * Fix memory leak in glusterfsd process
  * Fix GlusterFS brick process crash
- Add nocommon.patch [boo#1160392]</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1591272000">- Fixes for %_libexecdir changing to /usr/libexec</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1619697600">- Update to release 9.1
  * Implemented seek file operation for open-behind
  * Added io_uring support for Gluster
  * Added Support for 5K volumes
  * Enabled granular-entry-heal by default
  * Added support for monitoring the epoll/rpc layer
  * Improve rebalance of sparse files
- Drop nocommon.patch (merged)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632830400">- Update to release 9.3
  * New reset-brick command
  * Ability to get node level status of a cluster
  * Multi-threaded self-heal for Disperse volumes
  * Lock revocation feature
  * On-demand scrubbing for bitrot detection
  * Real time Cluster notifications using Events APIs
- Move mount helper to /usr/sbin [boo#1191062]</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1657800000">- add explicit Requires for the dependencies, so we make sure
  the dependencies are installed in the same version</changelog>
</package>
<package pkgid="36e57a62611f17c47a43277d5e906821a270e76c80646692f01970c03b94b6c1" name="libglusterfs0" arch="ppc64le">
  <version epoch="0" ver="9.3" rel="bp154.2.3.1"/>
  <changelog author="scorot@free.fr" date="1445947200">- Update to version 3.6.6
  * No ChangeLog available</changelog>
  <changelog author="vcizek@suse.com" date="1503489600">- Update to version 3.8.15
  * fixes build with OpenSSL 1.1 (bsc#1055466)
  * Mandatory lock support for Multiprotocol environment
  * Gluster/NFS disabled by default
  * Geo-replication for Sharded Volumes
  * Tiering aware Geo-replication
  * Enhance Quota enable/disable in glusterd
  * Automagic unsplit-brain by [ctime|mtime|size|majority] for AFR
  * Granular Entry self-heal for AFR
  * Tons of bugfixes
  * for more details see the NEWS file
- spec cleanup
- Install License files/docu</changelog>
  <changelog author="vcizek@suse.com" date="1508328000">- Add missing Requires: libacl-devel to the devel subpackage
  * glfs.h #includes &lt;sys/acl.h&gt;</changelog>
  <changelog author="mpluskal@suse.com" date="1509710400">- Explicitly require python2 as python3 is not yet supported</changelog>
  <changelog author="kukuk@suse.de" date="1510574400">- glusterfs-tirpc.diff: fallback to libtirpc if there is no sunrpc
  support in glibc</changelog>
  <changelog author="jengelh@inai.de" date="1512388800">- Update to new release 3.12.3
  * -- Features introduced in 3.10
  * Brick multiplexing
  * Support to display op-version information from clients
  * Support for rebalance time to completion estimation
  * Separation of tier as its own service
  * Statedump support for gfapi based applications
  * Disabled creation of trash directory by default
  * Implemented parallel readdirp with distribute xlator
  * -- Features introduced in 3.12:
  * Ability to mount sub-directories using the Gluster
    FUSE protocol
  * GFID to path conversion is enabled by default
  * Provided an option to set a limit on number of bricks
    multiplexed in a processes
  * Enhanced the option to export statfs data for bricks
    sharing the same backend filesystem
  * Provided a means to resolve GFID split-brain using
    the gluster CLI
  * Introduction of new api glfs_fd_set_lkowner() to set lock owner
- Remove glusterfs-date.diff (no longer applies)</changelog>
  <changelog author="jengelh@inai.de" date="1513252800">- Add 0001-build-restore-ability-to-control-verbosity-settings.patch
- Replace xdr_sizeof.c with an empty file</changelog>
  <changelog author="jengelh@inai.de" date="1525348800">- Update to new upstream release 4.0.2
  * GlusterD2 (GD2) is a new management daemon for Gluster-4.0,
    glustercli is the command-line interface for it.
    It is a preview release. GD2 is not backwards compatible with
    the older GlusterD. Heterogeneous clusters running both GD2
    and GlusterD are not possible.
  * Not all commands from GlusterD have been implemented for GD2.
  * GD2 does not (yet) work well in 2-node clusters.
  * Self Heal feature integrated for the new Volumes created
    using Glusterd2.</changelog>
  <changelog author="seanlew@opensuse.org" date="1547899200">- Update to new upstream version 5.3 (4.0 is EOL)
  * 5.3 brings hundreds of improvements, see complete relnote at
  https://docs.gluster.org/en/latest/release-notes/5.0/
  * Fixed a number of bugs:
    CVE-2018-1088, CVE-2018-1112 [boo#1090084],
    CVE-2018-10904 [boo#1107018], CVE-2018-10907 [boo#1107019],
    CVE-2018-10911 [boo#1107020], CVE-2018-10913 [boo#1107021],
    CVE-2018-10914 [boo#1107022], CVE-2018-10923 [boo#1107023],
    CVE-2018-10924 [boo#1107024], CVE-2018-10926 [boo#1107025],
    CVE-2018-10927 [boo#1107026], CVE-2018-10928 [boo#1107027],
    CVE-2018-10928 [boo#1107027], CVE-2018-10929 [boo#1107028],
    CVE-2018-10930 [boo#1107029], boo#1105776 .
- Remove patches no longer needed in 5.x:
  * 0001-build-restore-ability-to-control-verbosity-settings.patch
  * glusterfs-tirpc.diff</changelog>
  <changelog author="seanlew@opensuse.org" date="1551528000">- Update to new upstream version 5.4
  * FUSE Client memory leak fixed (#1623107)
  * fail to sync non-ascii utf8 file and dir names (#1648642)
  * Tracker bug for all leases related issues (#1651323)
  * gluster-blockd segfaults because of a null-deref (#1659563)
  * Memory leak: dict_t leak in rda_opendir (#1659676)
  * dht_revalidate may not heal attrs on the brick root (#1660736)
  * Fix tests/bugs/shard/zero-flag.t (#1660932)
  * NL cache: fix typos (#1662200)</changelog>
  <changelog author="seanlew@opensuse.org" date="1552824000">- Update to new upstream version 5.5
  * No changelog yet available in release notes</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Disable LTO (boo#1133088).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Move definition of _lto_cflags into %build.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1576238400">- Update to release 7.0
  * Latency based read child to improve read workload latency in
    a cluster, especially in a cloud setup. Also provides a load
    balancing with the outstanding pending request.
  * Thin-arbiter integration with GD1.
  * If a client older than glusterfs-4.x (i.e. 3.x clients)
    accesses a volume which has the `fips-mode-rchecksum` volume
    option enabled, it can cause erroneous checksum computation/
    unwanted behaviour during afr self-heal.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1577361600">- Fix the name of the Python bindings subpackage
- Properly mark Python bindings subpackage as noarch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1578571200">- Update to release 7.1
  * Fix rebalance causing IO Error - File descriptor in bad state
  * Fix geo-replication sessions going faulty
  * Fix memory leak in glusterfsd process
  * Fix GlusterFS brick process crash
- Add nocommon.patch [boo#1160392]</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1591272000">- Fixes for %_libexecdir changing to /usr/libexec</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1619697600">- Update to release 9.1
  * Implemented seek file operation for open-behind
  * Added io_uring support for Gluster
  * Added Support for 5K volumes
  * Enabled granular-entry-heal by default
  * Added support for monitoring the epoll/rpc layer
  * Improve rebalance of sparse files
- Drop nocommon.patch (merged)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632830400">- Update to release 9.3
  * New reset-brick command
  * Ability to get node level status of a cluster
  * Multi-threaded self-heal for Disperse volumes
  * Lock revocation feature
  * On-demand scrubbing for bitrot detection
  * Real time Cluster notifications using Events APIs
- Move mount helper to /usr/sbin [boo#1191062]</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1657800000">- add explicit Requires for the dependencies, so we make sure
  the dependencies are installed in the same version</changelog>
</package>
<package pkgid="4ca37f5a3f24fa9f64c92ce8ec35a123f6e3a50a9243564c3570bbe686c26697" name="libglusterfs0" arch="s390x">
  <version epoch="0" ver="9.3" rel="bp154.2.3.1"/>
  <changelog author="scorot@free.fr" date="1445947200">- Update to version 3.6.6
  * No ChangeLog available</changelog>
  <changelog author="vcizek@suse.com" date="1503489600">- Update to version 3.8.15
  * fixes build with OpenSSL 1.1 (bsc#1055466)
  * Mandatory lock support for Multiprotocol environment
  * Gluster/NFS disabled by default
  * Geo-replication for Sharded Volumes
  * Tiering aware Geo-replication
  * Enhance Quota enable/disable in glusterd
  * Automagic unsplit-brain by [ctime|mtime|size|majority] for AFR
  * Granular Entry self-heal for AFR
  * Tons of bugfixes
  * for more details see the NEWS file
- spec cleanup
- Install License files/docu</changelog>
  <changelog author="vcizek@suse.com" date="1508328000">- Add missing Requires: libacl-devel to the devel subpackage
  * glfs.h #includes &lt;sys/acl.h&gt;</changelog>
  <changelog author="mpluskal@suse.com" date="1509710400">- Explicitly require python2 as python3 is not yet supported</changelog>
  <changelog author="kukuk@suse.de" date="1510574400">- glusterfs-tirpc.diff: fallback to libtirpc if there is no sunrpc
  support in glibc</changelog>
  <changelog author="jengelh@inai.de" date="1512388800">- Update to new release 3.12.3
  * -- Features introduced in 3.10
  * Brick multiplexing
  * Support to display op-version information from clients
  * Support for rebalance time to completion estimation
  * Separation of tier as its own service
  * Statedump support for gfapi based applications
  * Disabled creation of trash directory by default
  * Implemented parallel readdirp with distribute xlator
  * -- Features introduced in 3.12:
  * Ability to mount sub-directories using the Gluster
    FUSE protocol
  * GFID to path conversion is enabled by default
  * Provided an option to set a limit on number of bricks
    multiplexed in a processes
  * Enhanced the option to export statfs data for bricks
    sharing the same backend filesystem
  * Provided a means to resolve GFID split-brain using
    the gluster CLI
  * Introduction of new api glfs_fd_set_lkowner() to set lock owner
- Remove glusterfs-date.diff (no longer applies)</changelog>
  <changelog author="jengelh@inai.de" date="1513252800">- Add 0001-build-restore-ability-to-control-verbosity-settings.patch
- Replace xdr_sizeof.c with an empty file</changelog>
  <changelog author="jengelh@inai.de" date="1525348800">- Update to new upstream release 4.0.2
  * GlusterD2 (GD2) is a new management daemon for Gluster-4.0,
    glustercli is the command-line interface for it.
    It is a preview release. GD2 is not backwards compatible with
    the older GlusterD. Heterogeneous clusters running both GD2
    and GlusterD are not possible.
  * Not all commands from GlusterD have been implemented for GD2.
  * GD2 does not (yet) work well in 2-node clusters.
  * Self Heal feature integrated for the new Volumes created
    using Glusterd2.</changelog>
  <changelog author="seanlew@opensuse.org" date="1547899200">- Update to new upstream version 5.3 (4.0 is EOL)
  * 5.3 brings hundreds of improvements, see complete relnote at
  https://docs.gluster.org/en/latest/release-notes/5.0/
  * Fixed a number of bugs:
    CVE-2018-1088, CVE-2018-1112 [boo#1090084],
    CVE-2018-10904 [boo#1107018], CVE-2018-10907 [boo#1107019],
    CVE-2018-10911 [boo#1107020], CVE-2018-10913 [boo#1107021],
    CVE-2018-10914 [boo#1107022], CVE-2018-10923 [boo#1107023],
    CVE-2018-10924 [boo#1107024], CVE-2018-10926 [boo#1107025],
    CVE-2018-10927 [boo#1107026], CVE-2018-10928 [boo#1107027],
    CVE-2018-10928 [boo#1107027], CVE-2018-10929 [boo#1107028],
    CVE-2018-10930 [boo#1107029], boo#1105776 .
- Remove patches no longer needed in 5.x:
  * 0001-build-restore-ability-to-control-verbosity-settings.patch
  * glusterfs-tirpc.diff</changelog>
  <changelog author="seanlew@opensuse.org" date="1551528000">- Update to new upstream version 5.4
  * FUSE Client memory leak fixed (#1623107)
  * fail to sync non-ascii utf8 file and dir names (#1648642)
  * Tracker bug for all leases related issues (#1651323)
  * gluster-blockd segfaults because of a null-deref (#1659563)
  * Memory leak: dict_t leak in rda_opendir (#1659676)
  * dht_revalidate may not heal attrs on the brick root (#1660736)
  * Fix tests/bugs/shard/zero-flag.t (#1660932)
  * NL cache: fix typos (#1662200)</changelog>
  <changelog author="seanlew@opensuse.org" date="1552824000">- Update to new upstream version 5.5
  * No changelog yet available in release notes</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Disable LTO (boo#1133088).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Move definition of _lto_cflags into %build.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1576238400">- Update to release 7.0
  * Latency based read child to improve read workload latency in
    a cluster, especially in a cloud setup. Also provides a load
    balancing with the outstanding pending request.
  * Thin-arbiter integration with GD1.
  * If a client older than glusterfs-4.x (i.e. 3.x clients)
    accesses a volume which has the `fips-mode-rchecksum` volume
    option enabled, it can cause erroneous checksum computation/
    unwanted behaviour during afr self-heal.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1577361600">- Fix the name of the Python bindings subpackage
- Properly mark Python bindings subpackage as noarch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1578571200">- Update to release 7.1
  * Fix rebalance causing IO Error - File descriptor in bad state
  * Fix geo-replication sessions going faulty
  * Fix memory leak in glusterfsd process
  * Fix GlusterFS brick process crash
- Add nocommon.patch [boo#1160392]</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1591272000">- Fixes for %_libexecdir changing to /usr/libexec</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1619697600">- Update to release 9.1
  * Implemented seek file operation for open-behind
  * Added io_uring support for Gluster
  * Added Support for 5K volumes
  * Enabled granular-entry-heal by default
  * Added support for monitoring the epoll/rpc layer
  * Improve rebalance of sparse files
- Drop nocommon.patch (merged)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632830400">- Update to release 9.3
  * New reset-brick command
  * Ability to get node level status of a cluster
  * Multi-threaded self-heal for Disperse volumes
  * Lock revocation feature
  * On-demand scrubbing for bitrot detection
  * Real time Cluster notifications using Events APIs
- Move mount helper to /usr/sbin [boo#1191062]</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1657800000">- add explicit Requires for the dependencies, so we make sure
  the dependencies are installed in the same version</changelog>
</package>
<package pkgid="983b0bfcacafb28282fd16a997b677af58451627d79e40e80491add155ebbec2" name="libglusterfs0" arch="x86_64">
  <version epoch="0" ver="9.3" rel="bp154.2.3.1"/>
  <changelog author="scorot@free.fr" date="1445947200">- Update to version 3.6.6
  * No ChangeLog available</changelog>
  <changelog author="vcizek@suse.com" date="1503489600">- Update to version 3.8.15
  * fixes build with OpenSSL 1.1 (bsc#1055466)
  * Mandatory lock support for Multiprotocol environment
  * Gluster/NFS disabled by default
  * Geo-replication for Sharded Volumes
  * Tiering aware Geo-replication
  * Enhance Quota enable/disable in glusterd
  * Automagic unsplit-brain by [ctime|mtime|size|majority] for AFR
  * Granular Entry self-heal for AFR
  * Tons of bugfixes
  * for more details see the NEWS file
- spec cleanup
- Install License files/docu</changelog>
  <changelog author="vcizek@suse.com" date="1508328000">- Add missing Requires: libacl-devel to the devel subpackage
  * glfs.h #includes &lt;sys/acl.h&gt;</changelog>
  <changelog author="mpluskal@suse.com" date="1509710400">- Explicitly require python2 as python3 is not yet supported</changelog>
  <changelog author="kukuk@suse.de" date="1510574400">- glusterfs-tirpc.diff: fallback to libtirpc if there is no sunrpc
  support in glibc</changelog>
  <changelog author="jengelh@inai.de" date="1512388800">- Update to new release 3.12.3
  * -- Features introduced in 3.10
  * Brick multiplexing
  * Support to display op-version information from clients
  * Support for rebalance time to completion estimation
  * Separation of tier as its own service
  * Statedump support for gfapi based applications
  * Disabled creation of trash directory by default
  * Implemented parallel readdirp with distribute xlator
  * -- Features introduced in 3.12:
  * Ability to mount sub-directories using the Gluster
    FUSE protocol
  * GFID to path conversion is enabled by default
  * Provided an option to set a limit on number of bricks
    multiplexed in a processes
  * Enhanced the option to export statfs data for bricks
    sharing the same backend filesystem
  * Provided a means to resolve GFID split-brain using
    the gluster CLI
  * Introduction of new api glfs_fd_set_lkowner() to set lock owner
- Remove glusterfs-date.diff (no longer applies)</changelog>
  <changelog author="jengelh@inai.de" date="1513252800">- Add 0001-build-restore-ability-to-control-verbosity-settings.patch
- Replace xdr_sizeof.c with an empty file</changelog>
  <changelog author="jengelh@inai.de" date="1525348800">- Update to new upstream release 4.0.2
  * GlusterD2 (GD2) is a new management daemon for Gluster-4.0,
    glustercli is the command-line interface for it.
    It is a preview release. GD2 is not backwards compatible with
    the older GlusterD. Heterogeneous clusters running both GD2
    and GlusterD are not possible.
  * Not all commands from GlusterD have been implemented for GD2.
  * GD2 does not (yet) work well in 2-node clusters.
  * Self Heal feature integrated for the new Volumes created
    using Glusterd2.</changelog>
  <changelog author="seanlew@opensuse.org" date="1547899200">- Update to new upstream version 5.3 (4.0 is EOL)
  * 5.3 brings hundreds of improvements, see complete relnote at
  https://docs.gluster.org/en/latest/release-notes/5.0/
  * Fixed a number of bugs:
    CVE-2018-1088, CVE-2018-1112 [boo#1090084],
    CVE-2018-10904 [boo#1107018], CVE-2018-10907 [boo#1107019],
    CVE-2018-10911 [boo#1107020], CVE-2018-10913 [boo#1107021],
    CVE-2018-10914 [boo#1107022], CVE-2018-10923 [boo#1107023],
    CVE-2018-10924 [boo#1107024], CVE-2018-10926 [boo#1107025],
    CVE-2018-10927 [boo#1107026], CVE-2018-10928 [boo#1107027],
    CVE-2018-10928 [boo#1107027], CVE-2018-10929 [boo#1107028],
    CVE-2018-10930 [boo#1107029], boo#1105776 .
- Remove patches no longer needed in 5.x:
  * 0001-build-restore-ability-to-control-verbosity-settings.patch
  * glusterfs-tirpc.diff</changelog>
  <changelog author="seanlew@opensuse.org" date="1551528000">- Update to new upstream version 5.4
  * FUSE Client memory leak fixed (#1623107)
  * fail to sync non-ascii utf8 file and dir names (#1648642)
  * Tracker bug for all leases related issues (#1651323)
  * gluster-blockd segfaults because of a null-deref (#1659563)
  * Memory leak: dict_t leak in rda_opendir (#1659676)
  * dht_revalidate may not heal attrs on the brick root (#1660736)
  * Fix tests/bugs/shard/zero-flag.t (#1660932)
  * NL cache: fix typos (#1662200)</changelog>
  <changelog author="seanlew@opensuse.org" date="1552824000">- Update to new upstream version 5.5
  * No changelog yet available in release notes</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Disable LTO (boo#1133088).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Move definition of _lto_cflags into %build.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1576238400">- Update to release 7.0
  * Latency based read child to improve read workload latency in
    a cluster, especially in a cloud setup. Also provides a load
    balancing with the outstanding pending request.
  * Thin-arbiter integration with GD1.
  * If a client older than glusterfs-4.x (i.e. 3.x clients)
    accesses a volume which has the `fips-mode-rchecksum` volume
    option enabled, it can cause erroneous checksum computation/
    unwanted behaviour during afr self-heal.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1577361600">- Fix the name of the Python bindings subpackage
- Properly mark Python bindings subpackage as noarch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1578571200">- Update to release 7.1
  * Fix rebalance causing IO Error - File descriptor in bad state
  * Fix geo-replication sessions going faulty
  * Fix memory leak in glusterfsd process
  * Fix GlusterFS brick process crash
- Add nocommon.patch [boo#1160392]</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1591272000">- Fixes for %_libexecdir changing to /usr/libexec</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1619697600">- Update to release 9.1
  * Implemented seek file operation for open-behind
  * Added io_uring support for Gluster
  * Added Support for 5K volumes
  * Enabled granular-entry-heal by default
  * Added support for monitoring the epoll/rpc layer
  * Improve rebalance of sparse files
- Drop nocommon.patch (merged)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632830400">- Update to release 9.3
  * New reset-brick command
  * Ability to get node level status of a cluster
  * Multi-threaded self-heal for Disperse volumes
  * Lock revocation feature
  * On-demand scrubbing for bitrot detection
  * Real time Cluster notifications using Events APIs
- Move mount helper to /usr/sbin [boo#1191062]</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1657800000">- add explicit Requires for the dependencies, so we make sure
  the dependencies are installed in the same version</changelog>
</package>
<package pkgid="e9792465ee7ae09634315f4658bab00f396a6cc0dc30381d2f9a532eb6943b42" name="libgssapi3" arch="aarch64">
  <version epoch="0" ver="7.8.0" rel="bp154.2.4.1"/>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1440936000">- Initial package, version 1.6rc2
- Added patch heimdal-version-script-client.map.patch to add file
  version-script-client.map (File is present in git for tag 1.6rc2
  but missing in tarball).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441108800">- Some changes in spec file to enable build for SLES.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441195200">- Added Conflicts tags to spec file because devel package conflicts
  with krb5-devel and krb5-mini-devel.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441454400">- Added a patched instead of the original tarball because only
  shared libraries will be build and source files of these (not to
  be build) programs have problematic licenses.
- Added script heimdal-patch-source.sh to sources.
- Added patch heimdal-patched.diff that fixes configure.ac and
  several Makefile.am files to successfully build patched source.
- Removed unneeded dependencies in spec file for build.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1483790400">- Update to version 7.1.0
- Removed heimdal-version-script-client.map.patch, fixed upstream.
- Fixed heimdal-patched.diff.
- Unfortunately there is no updated changelog file in tarball,
  changes can be seen in source code version control systems
  history log.</changelog>
  <changelog author="jengelh@inai.de" date="1486036800">- Summary and RPM group update. Do a direct call to ldconfig
  where possible.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1497528000">- Update to version 7.3.0
  - Security
    + Fix transit path validation. Commit f469fc6 (2010-10-02)
    inadvertently caused the previous hop realm to not be added
    to the transit path of issued tickets. This may, in some
    cases, enable bypass of capath policy in Heimdal versions 1.5
    through 7.2.
    Note, this may break sites that rely on the bug. With the bug
    some incomplete [capaths] worked, that should not have.
    These may now break authentication in some cross-realm
    configurations. (CVE-2017-6594)
- Version 7.2.0
  - Bug fixes
    + Portability improvements.
    + More strict parsing of encoded URI components in HTTP KDC.
    + Fixed memory leak in malloc error recovery in NTLM GSSAPI
    mechanism.
    + Avoid overly specific CPU info in krb5-config in aid of
    reproducible builds.
    + Don't do AFS string-to-key tests when feature is disabled.
    + Skip mdb_stat test when the command is not available.
    + Windows: update SHA2 timestamp server.
    + hdb: add missing export
    hdb_generate_key_set_password_with_ks_tuple.
    + Fix signature of hdb_generate_key_set_password().
    + Windows: enable KX509 support in the KDC.
    + kdc: fix kx509 service principal match.
    + iprop: handle case where master sends nothing new.
    + ipropd-slave: fix incorrect error codes.
    + Allow choice of sqlite for HDB pref.
    + check-iprop: don't fail to kill daemons.
    + roken: pidfile -&gt; rk_pidfile.
    + kdc: _kdc_do_kx509 fix use after free error.
    + Do not detect x32 as 64-bit platform.
    + No sys/ttydefaults.h on CYGWIN.
    + Fix check-iprop races.
    + roken_detach_prep() close pipe.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1501761600">- Update to version 7.4.0
  - Security
  - Fix CVE-2017-11103: Orpheus' Lyre KDC-REP service name
    validation.
    This is a critical vulnerability.
    In _krb5_extract_ticket() the KDC-REP service name must be
    obtained from encrypted version stored in 'enc_part' instead
    of the unencrypted version stored in 'ticket'.
    Use of the unecrypted version provides an opportunity for
    successful server impersonation and other attacks.
    Identified by Jeffrey Altman, Viktor Duchovni and
    Nico Williams.
    See https://www.orpheus-lyre.info/ for more details.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1512648000">- Added Avoid_NULL_structure_pointer_member_dereference.patch,
  fixes (bsc#1071675).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1514548800">- Update to version 7.5.0
  - Security
  - Fix CVE-2017-17439, which is a remote denial of service
    vulnerability:
    In Heimdal 7.1 through 7.4, remote unauthenticated attackers
    are able to crash the KDC by sending a crafted UDP packet
    containing empty data fields for client name or realm.
  - Bug fixes
  - Handle long input lines when reloading database dumps.
  - In pre-forked mode (default on Unix), correctly clear the
    process ids of exited children, allowing new child processes
    to replace the old.
  - Fixed incorrect KDC response when no-cross realm TGT exists,
    allowing client requests to fail quickly rather than time
    out after trying to get a correct answer from each KDC.
- Fixed heimdal-patched.diff.
- Removed Avoid_NULL_structure_pointer_member_dereference.patch,
  fixed upstream.</changelog>
  <changelog author="bwiedemann@suse.com" date="1533643200">- Add reproducible.patch to override build date (boo#1047218)
- Use constant hostname (boo#1084909)</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1561291200">- Update to version 7.7.0
  + Bug fixes:
  - PKCS#11 hcrypto back-end:
    + initialize the p11_module_load function list
    + verify that not only is a mechanism present but that its
    mechanism info states that it offers the required
    encryption, decryption or digest services
  - krb5:
    + Starting with 7.6, Heimdal permitted requesting
    authenticated anonymous tickets. However, it did not
    verify that a KDC in fact returned an anonymous ticket
    when one was requested.
    + Cease setting the KDCOption reaquest_anonymous flag when
    issuing S4UProxy (constrained delegation) TGS requests.
    + when the Win2K PKINIT compatibility option is set, do not
    require krbtgt otherName to match when validating KDC
    certificate.
    + set PKINIT_BTMM flag per Apple implementation
    + use memset_s() instead of memset()
  - kdc:
    + When generating KRB5SignedPath in the AS, use the reply
    client name rather than the one from the request, so
    validation will work correctly in the TGS.
    + allow checksum of PA-FOR-USER to be HMAC_MD5. Even if TGT
    used an enctype with a different checksum. Per [MS-SFU]
    2.2.1 PA-FOR-USER the checksum is always HMAC_MD5, and
    that's what Windows and MIT clients send.
    In Heimdal both the client and kdc use instead the
    checksum of the TGT, and therefore work with each other
    but Windows and MIT clients fail against Heimdal KDC.
    Both Windows and MIT KDC would allow any keyed checksum
    to be used so Heimdal client work fine against it.
    Change Heimdal KDC to allow HMAC_MD5 even for non RC4
    based TGT in order to support per-spec clients.
    + use memset_s() instead of memset()
    + Detect Heimdal 1.0 through 7.6 clients that issue
    S4UProxy (constrained delegation) TGS Requests with the
    request anonymous flag set. These requests will be
    treated as S4UProxy requests and not anonymous requests.
  - HDB:
    + Set SQLite3 backend default page size to 8KB.
    + Add hdb_set_sync() method
  - kadmind:
    + disable HDB sync during database load avoiding
    unnecessary disk i/o.
  - ipropd:
    + disable HDB sync during receive_everything. Doing an
    fsync per-record when receiving the complete HDB is a
    performance disaster. Among other things, if the HDB is
    very large, then one slave receving a full HDB can cause
    other slaves to timeout and, if HDB write activity is
    high enough to cause iprop log truncation, then also need
    full syncs, which leads to a cycle of full syncs for all
    slaves until HDB write activity drops.
    Allowing the iprop log to be larger helps, but improving
    receive_everything() performance helps even more.
  - kinit:
    + Anonymous PKINIT tickets discard the realm information
    used to locate the issuing AS. Store the issuing realm in
    the credentials cache in order to locate a KDC which can
    renew them.
    + Do not leak the result of krb5_cc_get_config() when
    determining anonymous PKINIT start realm.
  - klist:
    + Show transited-policy-checked, ok-as-delegate and
    anonymous flags when listing credentials.
  - tests:
    + Regenerate certs so that they expire before the 2038
    armageddon so the test suite will pass on 32-bit
    operating systems until the underlying issues can be
    resolved.
  - Solaris:
    + Define _STDC_C11_BCI for memset_s prototype
  - build tooling:
    + Convert from python 2 to python 3
  - documentation:
    + rename verify-password to verify-password-quality
    + hprop default mode is encrypt
    + kadmind "all" permission does not include "get-keys"
    + verify-password-quality might not be stateless
- Version 7.6.0
  + Security (#555):
  - CVE-2018-16860 Heimdal KDC: Reject PA-S4U2Self with unkeyed
    checksum
    When the Heimdal KDC checks the checksum that is placed on
    the S4U2Self packet by the server to protect the requested
    principal against modification, it does not confirm that
    the checksum algorithm that protects the user name
    (principal) in the request is keyed. This allows a
    man-in-the-middle attacker who can intercept the request to
    the KDC to modify the packet by replacing the user name
    (principal) in the request with any desired user name
    (principal) that exists in the KDC and replace the checksum
    protecting that name with a CRC32 checksum (which requires
    no prior knowledge to compute).
    This would allow a S4U2Self ticket requested on behalf of
    user name (principal) user@EXAMPLE.COM to any service to be
    changed to a S4U2Self ticket with a user name (principal) of
    Administrator@EXAMPLE.COM. This ticket would then contain
    the PAC of the modified user name (principal).
  - CVE-2019-12098, client-only:
    RFC8062 Section 7 requires verification of the PA-PKINIT-KX
    key exchange when anonymous PKINIT is used. Failure to do
    so can permit an active attacker to become a
    man-in-the-middle.
  + Bug fixes:
  - Happy eyeballs: Don't wait for responses from
    known-unreachable KDCs.
  - kdc:
    + check return copy_Realm, copy_PrincipalName,
    copy_EncryptionKey
  - kinit:
    + cleanup temporary ccaches
    + see man page for "kinit --anonymous" command line syntax
    change
  - kdc:
    + Make anonymous AS-requests more RFC8062-compliant.
    Updated expired test certificates
  - Solaris:
    + PKCS#11 hcrypto backend broken since 7.0.1
    + Building with Sun Pro C
  + Features:
  - kuser: support authenticated anonymous AS-REQs in kinit
  - kdc: support for anonymous TGS-REQs
  - kgetcred support for anonymous service tickets
  - Support builds with OpenSSL 1.1.1
- fixed heimdal-patched.diff and reproducible.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1653480000">- Apply Shared Library Packaging Policy and resolve rpmlint
  errors like "libheimdal.x86_64: E: shlib-policy-name-error
  SONAME: libasn1.so.8, expected package suffix: 8"</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656417600">- Add heimdal-7.7.0-autoconf-2.70.patch: Fix build with autoconf
  2.70 (gh#heimdal/heimdal#856).</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656590400">- Add ldconfig scriptlets.
- Fix 'Conflicts:' tags.
- Remove obsolete macros and conditionals.
- Ran spec-cleaner.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1671624000">- Update to version 7.8.0
  + This release includes both the Heimdal 7.7.1 Security
    Vulnerability fixes and non-Security bug fixes/improvements.
  + Security Vulnerabilities:
  - CVE-2022-42898 PAC parse integer overflows
  - CVE-2022-3437 Overflows and non-constant time leaks in
    DES{,3} and arcfour
  - CVE-2022-41916 Fix Unicode normalization read of 1 bytes past
    end of array
  - CVE-2021-44758 A null pointer de-reference DoS in SPNEGO
    acceptors
  - CVE-2021-3671 A null pointer de-reference when handling
    missing sname in TGS-REQ
  - CVE-2022-44640 Heimdal KDC: invalid free in ASN.1 codec
    Note that CVE-2022-44640 is a severe vulnerability,
    possibly a 10.0 on the Common Vulnerability Scoring
    System (CVSS) v3, as we believe it should be possible to
    get an RCE on a KDC, which means that credentials can be
    compromised that can be used to impersonate anyone in a
    realm or forest of realms.
    Heimdal's ASN.1 compiler generates code that allows
    specially crafted DER encodings of CHOICEs to invoke the
    wrong free function on the decoded structure upon decode
    error. This is known to impact the Heimdal KDC, leading to
    an invalid free() of an address partly or wholly under the
    control of the attacker, in turn leading to a potential
    remote code execution (RCE) vulnerability.
    This error affects the DER codec for all extensible CHOICE
    types used in Heimdal, though not all cases will be
    exploitable. We have not completed a thorough analysis of
    all the Heimdal components affected, thus the Kerberos
    client, the X.509 library, and other parts, may be affected
    as well.
    This bug has been in Heimdal's ASN.1 compiler since 2005,
    but it may only affect Heimdal 1.6 and up. It was first
    reported by Douglas Bagnall, though it had been found
    independently by the Heimdal maintainers via fuzzing a few
    weeks earlier.
    While no zero-day exploit is known, such an exploit will
    likely be available soon after public disclosure.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  + Other changes:
  - Bugs found by UBSAN (including the incorrect encoding of
    unconstrained INTEGER value -1).
  - Errors found by the LLVM scan-build static analyzer.
  - Errors found by the valgrind memory debugger.
  - Work around GCC Bug 95189 (memcmp wrongly stripped like
    strcmp).
  - Correct ASN.1 OID typo for SHA-384
  - Fix a deadlock in in the MEMORY ccache type.
  - TGS: strip forwardable and proxiable flags if the server is
    disallowed.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  - Incremental HDB propagation improvements
    Refactor send_diffs making it progressive
    Handle partial writes on non-blocking sockets
    Disable Nagle in iprop master and slave
    Use async I/O
    Don't send I_HAVE in response to AYT
    Do not recover log in kadm5_get_principal()
    Don't send diffs to slaves with not yet known version
    Don't stutter in send_diffs
  - Optional backwards-compatible anon-pkinit behavior
- Removed heimdal-7.7.0-autoconf-2.70.patch, fixed upstream.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1673352000">- replace libheimdal conflicts by obsoletes / provides to provide a
  smooth update in the new libheimdal-devel.</changelog>
</package>
<package pkgid="73faa826f457bcf5a188b7d3287dc79d99058e642cdc4cc3aa177b4fda693fe7" name="libgssapi3" arch="i586">
  <version epoch="0" ver="7.8.0" rel="bp154.2.4.1"/>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1440936000">- Initial package, version 1.6rc2
- Added patch heimdal-version-script-client.map.patch to add file
  version-script-client.map (File is present in git for tag 1.6rc2
  but missing in tarball).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441108800">- Some changes in spec file to enable build for SLES.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441195200">- Added Conflicts tags to spec file because devel package conflicts
  with krb5-devel and krb5-mini-devel.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441454400">- Added a patched instead of the original tarball because only
  shared libraries will be build and source files of these (not to
  be build) programs have problematic licenses.
- Added script heimdal-patch-source.sh to sources.
- Added patch heimdal-patched.diff that fixes configure.ac and
  several Makefile.am files to successfully build patched source.
- Removed unneeded dependencies in spec file for build.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1483790400">- Update to version 7.1.0
- Removed heimdal-version-script-client.map.patch, fixed upstream.
- Fixed heimdal-patched.diff.
- Unfortunately there is no updated changelog file in tarball,
  changes can be seen in source code version control systems
  history log.</changelog>
  <changelog author="jengelh@inai.de" date="1486036800">- Summary and RPM group update. Do a direct call to ldconfig
  where possible.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1497528000">- Update to version 7.3.0
  - Security
    + Fix transit path validation. Commit f469fc6 (2010-10-02)
    inadvertently caused the previous hop realm to not be added
    to the transit path of issued tickets. This may, in some
    cases, enable bypass of capath policy in Heimdal versions 1.5
    through 7.2.
    Note, this may break sites that rely on the bug. With the bug
    some incomplete [capaths] worked, that should not have.
    These may now break authentication in some cross-realm
    configurations. (CVE-2017-6594)
- Version 7.2.0
  - Bug fixes
    + Portability improvements.
    + More strict parsing of encoded URI components in HTTP KDC.
    + Fixed memory leak in malloc error recovery in NTLM GSSAPI
    mechanism.
    + Avoid overly specific CPU info in krb5-config in aid of
    reproducible builds.
    + Don't do AFS string-to-key tests when feature is disabled.
    + Skip mdb_stat test when the command is not available.
    + Windows: update SHA2 timestamp server.
    + hdb: add missing export
    hdb_generate_key_set_password_with_ks_tuple.
    + Fix signature of hdb_generate_key_set_password().
    + Windows: enable KX509 support in the KDC.
    + kdc: fix kx509 service principal match.
    + iprop: handle case where master sends nothing new.
    + ipropd-slave: fix incorrect error codes.
    + Allow choice of sqlite for HDB pref.
    + check-iprop: don't fail to kill daemons.
    + roken: pidfile -&gt; rk_pidfile.
    + kdc: _kdc_do_kx509 fix use after free error.
    + Do not detect x32 as 64-bit platform.
    + No sys/ttydefaults.h on CYGWIN.
    + Fix check-iprop races.
    + roken_detach_prep() close pipe.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1501761600">- Update to version 7.4.0
  - Security
  - Fix CVE-2017-11103: Orpheus' Lyre KDC-REP service name
    validation.
    This is a critical vulnerability.
    In _krb5_extract_ticket() the KDC-REP service name must be
    obtained from encrypted version stored in 'enc_part' instead
    of the unencrypted version stored in 'ticket'.
    Use of the unecrypted version provides an opportunity for
    successful server impersonation and other attacks.
    Identified by Jeffrey Altman, Viktor Duchovni and
    Nico Williams.
    See https://www.orpheus-lyre.info/ for more details.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1512648000">- Added Avoid_NULL_structure_pointer_member_dereference.patch,
  fixes (bsc#1071675).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1514548800">- Update to version 7.5.0
  - Security
  - Fix CVE-2017-17439, which is a remote denial of service
    vulnerability:
    In Heimdal 7.1 through 7.4, remote unauthenticated attackers
    are able to crash the KDC by sending a crafted UDP packet
    containing empty data fields for client name or realm.
  - Bug fixes
  - Handle long input lines when reloading database dumps.
  - In pre-forked mode (default on Unix), correctly clear the
    process ids of exited children, allowing new child processes
    to replace the old.
  - Fixed incorrect KDC response when no-cross realm TGT exists,
    allowing client requests to fail quickly rather than time
    out after trying to get a correct answer from each KDC.
- Fixed heimdal-patched.diff.
- Removed Avoid_NULL_structure_pointer_member_dereference.patch,
  fixed upstream.</changelog>
  <changelog author="bwiedemann@suse.com" date="1533643200">- Add reproducible.patch to override build date (boo#1047218)
- Use constant hostname (boo#1084909)</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1561291200">- Update to version 7.7.0
  + Bug fixes:
  - PKCS#11 hcrypto back-end:
    + initialize the p11_module_load function list
    + verify that not only is a mechanism present but that its
    mechanism info states that it offers the required
    encryption, decryption or digest services
  - krb5:
    + Starting with 7.6, Heimdal permitted requesting
    authenticated anonymous tickets. However, it did not
    verify that a KDC in fact returned an anonymous ticket
    when one was requested.
    + Cease setting the KDCOption reaquest_anonymous flag when
    issuing S4UProxy (constrained delegation) TGS requests.
    + when the Win2K PKINIT compatibility option is set, do not
    require krbtgt otherName to match when validating KDC
    certificate.
    + set PKINIT_BTMM flag per Apple implementation
    + use memset_s() instead of memset()
  - kdc:
    + When generating KRB5SignedPath in the AS, use the reply
    client name rather than the one from the request, so
    validation will work correctly in the TGS.
    + allow checksum of PA-FOR-USER to be HMAC_MD5. Even if TGT
    used an enctype with a different checksum. Per [MS-SFU]
    2.2.1 PA-FOR-USER the checksum is always HMAC_MD5, and
    that's what Windows and MIT clients send.
    In Heimdal both the client and kdc use instead the
    checksum of the TGT, and therefore work with each other
    but Windows and MIT clients fail against Heimdal KDC.
    Both Windows and MIT KDC would allow any keyed checksum
    to be used so Heimdal client work fine against it.
    Change Heimdal KDC to allow HMAC_MD5 even for non RC4
    based TGT in order to support per-spec clients.
    + use memset_s() instead of memset()
    + Detect Heimdal 1.0 through 7.6 clients that issue
    S4UProxy (constrained delegation) TGS Requests with the
    request anonymous flag set. These requests will be
    treated as S4UProxy requests and not anonymous requests.
  - HDB:
    + Set SQLite3 backend default page size to 8KB.
    + Add hdb_set_sync() method
  - kadmind:
    + disable HDB sync during database load avoiding
    unnecessary disk i/o.
  - ipropd:
    + disable HDB sync during receive_everything. Doing an
    fsync per-record when receiving the complete HDB is a
    performance disaster. Among other things, if the HDB is
    very large, then one slave receving a full HDB can cause
    other slaves to timeout and, if HDB write activity is
    high enough to cause iprop log truncation, then also need
    full syncs, which leads to a cycle of full syncs for all
    slaves until HDB write activity drops.
    Allowing the iprop log to be larger helps, but improving
    receive_everything() performance helps even more.
  - kinit:
    + Anonymous PKINIT tickets discard the realm information
    used to locate the issuing AS. Store the issuing realm in
    the credentials cache in order to locate a KDC which can
    renew them.
    + Do not leak the result of krb5_cc_get_config() when
    determining anonymous PKINIT start realm.
  - klist:
    + Show transited-policy-checked, ok-as-delegate and
    anonymous flags when listing credentials.
  - tests:
    + Regenerate certs so that they expire before the 2038
    armageddon so the test suite will pass on 32-bit
    operating systems until the underlying issues can be
    resolved.
  - Solaris:
    + Define _STDC_C11_BCI for memset_s prototype
  - build tooling:
    + Convert from python 2 to python 3
  - documentation:
    + rename verify-password to verify-password-quality
    + hprop default mode is encrypt
    + kadmind "all" permission does not include "get-keys"
    + verify-password-quality might not be stateless
- Version 7.6.0
  + Security (#555):
  - CVE-2018-16860 Heimdal KDC: Reject PA-S4U2Self with unkeyed
    checksum
    When the Heimdal KDC checks the checksum that is placed on
    the S4U2Self packet by the server to protect the requested
    principal against modification, it does not confirm that
    the checksum algorithm that protects the user name
    (principal) in the request is keyed. This allows a
    man-in-the-middle attacker who can intercept the request to
    the KDC to modify the packet by replacing the user name
    (principal) in the request with any desired user name
    (principal) that exists in the KDC and replace the checksum
    protecting that name with a CRC32 checksum (which requires
    no prior knowledge to compute).
    This would allow a S4U2Self ticket requested on behalf of
    user name (principal) user@EXAMPLE.COM to any service to be
    changed to a S4U2Self ticket with a user name (principal) of
    Administrator@EXAMPLE.COM. This ticket would then contain
    the PAC of the modified user name (principal).
  - CVE-2019-12098, client-only:
    RFC8062 Section 7 requires verification of the PA-PKINIT-KX
    key exchange when anonymous PKINIT is used. Failure to do
    so can permit an active attacker to become a
    man-in-the-middle.
  + Bug fixes:
  - Happy eyeballs: Don't wait for responses from
    known-unreachable KDCs.
  - kdc:
    + check return copy_Realm, copy_PrincipalName,
    copy_EncryptionKey
  - kinit:
    + cleanup temporary ccaches
    + see man page for "kinit --anonymous" command line syntax
    change
  - kdc:
    + Make anonymous AS-requests more RFC8062-compliant.
    Updated expired test certificates
  - Solaris:
    + PKCS#11 hcrypto backend broken since 7.0.1
    + Building with Sun Pro C
  + Features:
  - kuser: support authenticated anonymous AS-REQs in kinit
  - kdc: support for anonymous TGS-REQs
  - kgetcred support for anonymous service tickets
  - Support builds with OpenSSL 1.1.1
- fixed heimdal-patched.diff and reproducible.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1653480000">- Apply Shared Library Packaging Policy and resolve rpmlint
  errors like "libheimdal.x86_64: E: shlib-policy-name-error
  SONAME: libasn1.so.8, expected package suffix: 8"</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656417600">- Add heimdal-7.7.0-autoconf-2.70.patch: Fix build with autoconf
  2.70 (gh#heimdal/heimdal#856).</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656590400">- Add ldconfig scriptlets.
- Fix 'Conflicts:' tags.
- Remove obsolete macros and conditionals.
- Ran spec-cleaner.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1671624000">- Update to version 7.8.0
  + This release includes both the Heimdal 7.7.1 Security
    Vulnerability fixes and non-Security bug fixes/improvements.
  + Security Vulnerabilities:
  - CVE-2022-42898 PAC parse integer overflows
  - CVE-2022-3437 Overflows and non-constant time leaks in
    DES{,3} and arcfour
  - CVE-2022-41916 Fix Unicode normalization read of 1 bytes past
    end of array
  - CVE-2021-44758 A null pointer de-reference DoS in SPNEGO
    acceptors
  - CVE-2021-3671 A null pointer de-reference when handling
    missing sname in TGS-REQ
  - CVE-2022-44640 Heimdal KDC: invalid free in ASN.1 codec
    Note that CVE-2022-44640 is a severe vulnerability,
    possibly a 10.0 on the Common Vulnerability Scoring
    System (CVSS) v3, as we believe it should be possible to
    get an RCE on a KDC, which means that credentials can be
    compromised that can be used to impersonate anyone in a
    realm or forest of realms.
    Heimdal's ASN.1 compiler generates code that allows
    specially crafted DER encodings of CHOICEs to invoke the
    wrong free function on the decoded structure upon decode
    error. This is known to impact the Heimdal KDC, leading to
    an invalid free() of an address partly or wholly under the
    control of the attacker, in turn leading to a potential
    remote code execution (RCE) vulnerability.
    This error affects the DER codec for all extensible CHOICE
    types used in Heimdal, though not all cases will be
    exploitable. We have not completed a thorough analysis of
    all the Heimdal components affected, thus the Kerberos
    client, the X.509 library, and other parts, may be affected
    as well.
    This bug has been in Heimdal's ASN.1 compiler since 2005,
    but it may only affect Heimdal 1.6 and up. It was first
    reported by Douglas Bagnall, though it had been found
    independently by the Heimdal maintainers via fuzzing a few
    weeks earlier.
    While no zero-day exploit is known, such an exploit will
    likely be available soon after public disclosure.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  + Other changes:
  - Bugs found by UBSAN (including the incorrect encoding of
    unconstrained INTEGER value -1).
  - Errors found by the LLVM scan-build static analyzer.
  - Errors found by the valgrind memory debugger.
  - Work around GCC Bug 95189 (memcmp wrongly stripped like
    strcmp).
  - Correct ASN.1 OID typo for SHA-384
  - Fix a deadlock in in the MEMORY ccache type.
  - TGS: strip forwardable and proxiable flags if the server is
    disallowed.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  - Incremental HDB propagation improvements
    Refactor send_diffs making it progressive
    Handle partial writes on non-blocking sockets
    Disable Nagle in iprop master and slave
    Use async I/O
    Don't send I_HAVE in response to AYT
    Do not recover log in kadm5_get_principal()
    Don't send diffs to slaves with not yet known version
    Don't stutter in send_diffs
  - Optional backwards-compatible anon-pkinit behavior
- Removed heimdal-7.7.0-autoconf-2.70.patch, fixed upstream.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1673352000">- replace libheimdal conflicts by obsoletes / provides to provide a
  smooth update in the new libheimdal-devel.</changelog>
</package>
<package pkgid="24eefe6fb1d7a1bb7186fd45b70072b930287551db6f29b3185329bfb7d663e9" name="libgssapi3" arch="ppc64le">
  <version epoch="0" ver="7.8.0" rel="bp154.2.4.1"/>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1440936000">- Initial package, version 1.6rc2
- Added patch heimdal-version-script-client.map.patch to add file
  version-script-client.map (File is present in git for tag 1.6rc2
  but missing in tarball).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441108800">- Some changes in spec file to enable build for SLES.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441195200">- Added Conflicts tags to spec file because devel package conflicts
  with krb5-devel and krb5-mini-devel.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441454400">- Added a patched instead of the original tarball because only
  shared libraries will be build and source files of these (not to
  be build) programs have problematic licenses.
- Added script heimdal-patch-source.sh to sources.
- Added patch heimdal-patched.diff that fixes configure.ac and
  several Makefile.am files to successfully build patched source.
- Removed unneeded dependencies in spec file for build.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1483790400">- Update to version 7.1.0
- Removed heimdal-version-script-client.map.patch, fixed upstream.
- Fixed heimdal-patched.diff.
- Unfortunately there is no updated changelog file in tarball,
  changes can be seen in source code version control systems
  history log.</changelog>
  <changelog author="jengelh@inai.de" date="1486036800">- Summary and RPM group update. Do a direct call to ldconfig
  where possible.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1497528000">- Update to version 7.3.0
  - Security
    + Fix transit path validation. Commit f469fc6 (2010-10-02)
    inadvertently caused the previous hop realm to not be added
    to the transit path of issued tickets. This may, in some
    cases, enable bypass of capath policy in Heimdal versions 1.5
    through 7.2.
    Note, this may break sites that rely on the bug. With the bug
    some incomplete [capaths] worked, that should not have.
    These may now break authentication in some cross-realm
    configurations. (CVE-2017-6594)
- Version 7.2.0
  - Bug fixes
    + Portability improvements.
    + More strict parsing of encoded URI components in HTTP KDC.
    + Fixed memory leak in malloc error recovery in NTLM GSSAPI
    mechanism.
    + Avoid overly specific CPU info in krb5-config in aid of
    reproducible builds.
    + Don't do AFS string-to-key tests when feature is disabled.
    + Skip mdb_stat test when the command is not available.
    + Windows: update SHA2 timestamp server.
    + hdb: add missing export
    hdb_generate_key_set_password_with_ks_tuple.
    + Fix signature of hdb_generate_key_set_password().
    + Windows: enable KX509 support in the KDC.
    + kdc: fix kx509 service principal match.
    + iprop: handle case where master sends nothing new.
    + ipropd-slave: fix incorrect error codes.
    + Allow choice of sqlite for HDB pref.
    + check-iprop: don't fail to kill daemons.
    + roken: pidfile -&gt; rk_pidfile.
    + kdc: _kdc_do_kx509 fix use after free error.
    + Do not detect x32 as 64-bit platform.
    + No sys/ttydefaults.h on CYGWIN.
    + Fix check-iprop races.
    + roken_detach_prep() close pipe.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1501761600">- Update to version 7.4.0
  - Security
  - Fix CVE-2017-11103: Orpheus' Lyre KDC-REP service name
    validation.
    This is a critical vulnerability.
    In _krb5_extract_ticket() the KDC-REP service name must be
    obtained from encrypted version stored in 'enc_part' instead
    of the unencrypted version stored in 'ticket'.
    Use of the unecrypted version provides an opportunity for
    successful server impersonation and other attacks.
    Identified by Jeffrey Altman, Viktor Duchovni and
    Nico Williams.
    See https://www.orpheus-lyre.info/ for more details.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1512648000">- Added Avoid_NULL_structure_pointer_member_dereference.patch,
  fixes (bsc#1071675).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1514548800">- Update to version 7.5.0
  - Security
  - Fix CVE-2017-17439, which is a remote denial of service
    vulnerability:
    In Heimdal 7.1 through 7.4, remote unauthenticated attackers
    are able to crash the KDC by sending a crafted UDP packet
    containing empty data fields for client name or realm.
  - Bug fixes
  - Handle long input lines when reloading database dumps.
  - In pre-forked mode (default on Unix), correctly clear the
    process ids of exited children, allowing new child processes
    to replace the old.
  - Fixed incorrect KDC response when no-cross realm TGT exists,
    allowing client requests to fail quickly rather than time
    out after trying to get a correct answer from each KDC.
- Fixed heimdal-patched.diff.
- Removed Avoid_NULL_structure_pointer_member_dereference.patch,
  fixed upstream.</changelog>
  <changelog author="bwiedemann@suse.com" date="1533643200">- Add reproducible.patch to override build date (boo#1047218)
- Use constant hostname (boo#1084909)</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1561291200">- Update to version 7.7.0
  + Bug fixes:
  - PKCS#11 hcrypto back-end:
    + initialize the p11_module_load function list
    + verify that not only is a mechanism present but that its
    mechanism info states that it offers the required
    encryption, decryption or digest services
  - krb5:
    + Starting with 7.6, Heimdal permitted requesting
    authenticated anonymous tickets. However, it did not
    verify that a KDC in fact returned an anonymous ticket
    when one was requested.
    + Cease setting the KDCOption reaquest_anonymous flag when
    issuing S4UProxy (constrained delegation) TGS requests.
    + when the Win2K PKINIT compatibility option is set, do not
    require krbtgt otherName to match when validating KDC
    certificate.
    + set PKINIT_BTMM flag per Apple implementation
    + use memset_s() instead of memset()
  - kdc:
    + When generating KRB5SignedPath in the AS, use the reply
    client name rather than the one from the request, so
    validation will work correctly in the TGS.
    + allow checksum of PA-FOR-USER to be HMAC_MD5. Even if TGT
    used an enctype with a different checksum. Per [MS-SFU]
    2.2.1 PA-FOR-USER the checksum is always HMAC_MD5, and
    that's what Windows and MIT clients send.
    In Heimdal both the client and kdc use instead the
    checksum of the TGT, and therefore work with each other
    but Windows and MIT clients fail against Heimdal KDC.
    Both Windows and MIT KDC would allow any keyed checksum
    to be used so Heimdal client work fine against it.
    Change Heimdal KDC to allow HMAC_MD5 even for non RC4
    based TGT in order to support per-spec clients.
    + use memset_s() instead of memset()
    + Detect Heimdal 1.0 through 7.6 clients that issue
    S4UProxy (constrained delegation) TGS Requests with the
    request anonymous flag set. These requests will be
    treated as S4UProxy requests and not anonymous requests.
  - HDB:
    + Set SQLite3 backend default page size to 8KB.
    + Add hdb_set_sync() method
  - kadmind:
    + disable HDB sync during database load avoiding
    unnecessary disk i/o.
  - ipropd:
    + disable HDB sync during receive_everything. Doing an
    fsync per-record when receiving the complete HDB is a
    performance disaster. Among other things, if the HDB is
    very large, then one slave receving a full HDB can cause
    other slaves to timeout and, if HDB write activity is
    high enough to cause iprop log truncation, then also need
    full syncs, which leads to a cycle of full syncs for all
    slaves until HDB write activity drops.
    Allowing the iprop log to be larger helps, but improving
    receive_everything() performance helps even more.
  - kinit:
    + Anonymous PKINIT tickets discard the realm information
    used to locate the issuing AS. Store the issuing realm in
    the credentials cache in order to locate a KDC which can
    renew them.
    + Do not leak the result of krb5_cc_get_config() when
    determining anonymous PKINIT start realm.
  - klist:
    + Show transited-policy-checked, ok-as-delegate and
    anonymous flags when listing credentials.
  - tests:
    + Regenerate certs so that they expire before the 2038
    armageddon so the test suite will pass on 32-bit
    operating systems until the underlying issues can be
    resolved.
  - Solaris:
    + Define _STDC_C11_BCI for memset_s prototype
  - build tooling:
    + Convert from python 2 to python 3
  - documentation:
    + rename verify-password to verify-password-quality
    + hprop default mode is encrypt
    + kadmind "all" permission does not include "get-keys"
    + verify-password-quality might not be stateless
- Version 7.6.0
  + Security (#555):
  - CVE-2018-16860 Heimdal KDC: Reject PA-S4U2Self with unkeyed
    checksum
    When the Heimdal KDC checks the checksum that is placed on
    the S4U2Self packet by the server to protect the requested
    principal against modification, it does not confirm that
    the checksum algorithm that protects the user name
    (principal) in the request is keyed. This allows a
    man-in-the-middle attacker who can intercept the request to
    the KDC to modify the packet by replacing the user name
    (principal) in the request with any desired user name
    (principal) that exists in the KDC and replace the checksum
    protecting that name with a CRC32 checksum (which requires
    no prior knowledge to compute).
    This would allow a S4U2Self ticket requested on behalf of
    user name (principal) user@EXAMPLE.COM to any service to be
    changed to a S4U2Self ticket with a user name (principal) of
    Administrator@EXAMPLE.COM. This ticket would then contain
    the PAC of the modified user name (principal).
  - CVE-2019-12098, client-only:
    RFC8062 Section 7 requires verification of the PA-PKINIT-KX
    key exchange when anonymous PKINIT is used. Failure to do
    so can permit an active attacker to become a
    man-in-the-middle.
  + Bug fixes:
  - Happy eyeballs: Don't wait for responses from
    known-unreachable KDCs.
  - kdc:
    + check return copy_Realm, copy_PrincipalName,
    copy_EncryptionKey
  - kinit:
    + cleanup temporary ccaches
    + see man page for "kinit --anonymous" command line syntax
    change
  - kdc:
    + Make anonymous AS-requests more RFC8062-compliant.
    Updated expired test certificates
  - Solaris:
    + PKCS#11 hcrypto backend broken since 7.0.1
    + Building with Sun Pro C
  + Features:
  - kuser: support authenticated anonymous AS-REQs in kinit
  - kdc: support for anonymous TGS-REQs
  - kgetcred support for anonymous service tickets
  - Support builds with OpenSSL 1.1.1
- fixed heimdal-patched.diff and reproducible.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1653480000">- Apply Shared Library Packaging Policy and resolve rpmlint
  errors like "libheimdal.x86_64: E: shlib-policy-name-error
  SONAME: libasn1.so.8, expected package suffix: 8"</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656417600">- Add heimdal-7.7.0-autoconf-2.70.patch: Fix build with autoconf
  2.70 (gh#heimdal/heimdal#856).</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656590400">- Add ldconfig scriptlets.
- Fix 'Conflicts:' tags.
- Remove obsolete macros and conditionals.
- Ran spec-cleaner.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1671624000">- Update to version 7.8.0
  + This release includes both the Heimdal 7.7.1 Security
    Vulnerability fixes and non-Security bug fixes/improvements.
  + Security Vulnerabilities:
  - CVE-2022-42898 PAC parse integer overflows
  - CVE-2022-3437 Overflows and non-constant time leaks in
    DES{,3} and arcfour
  - CVE-2022-41916 Fix Unicode normalization read of 1 bytes past
    end of array
  - CVE-2021-44758 A null pointer de-reference DoS in SPNEGO
    acceptors
  - CVE-2021-3671 A null pointer de-reference when handling
    missing sname in TGS-REQ
  - CVE-2022-44640 Heimdal KDC: invalid free in ASN.1 codec
    Note that CVE-2022-44640 is a severe vulnerability,
    possibly a 10.0 on the Common Vulnerability Scoring
    System (CVSS) v3, as we believe it should be possible to
    get an RCE on a KDC, which means that credentials can be
    compromised that can be used to impersonate anyone in a
    realm or forest of realms.
    Heimdal's ASN.1 compiler generates code that allows
    specially crafted DER encodings of CHOICEs to invoke the
    wrong free function on the decoded structure upon decode
    error. This is known to impact the Heimdal KDC, leading to
    an invalid free() of an address partly or wholly under the
    control of the attacker, in turn leading to a potential
    remote code execution (RCE) vulnerability.
    This error affects the DER codec for all extensible CHOICE
    types used in Heimdal, though not all cases will be
    exploitable. We have not completed a thorough analysis of
    all the Heimdal components affected, thus the Kerberos
    client, the X.509 library, and other parts, may be affected
    as well.
    This bug has been in Heimdal's ASN.1 compiler since 2005,
    but it may only affect Heimdal 1.6 and up. It was first
    reported by Douglas Bagnall, though it had been found
    independently by the Heimdal maintainers via fuzzing a few
    weeks earlier.
    While no zero-day exploit is known, such an exploit will
    likely be available soon after public disclosure.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  + Other changes:
  - Bugs found by UBSAN (including the incorrect encoding of
    unconstrained INTEGER value -1).
  - Errors found by the LLVM scan-build static analyzer.
  - Errors found by the valgrind memory debugger.
  - Work around GCC Bug 95189 (memcmp wrongly stripped like
    strcmp).
  - Correct ASN.1 OID typo for SHA-384
  - Fix a deadlock in in the MEMORY ccache type.
  - TGS: strip forwardable and proxiable flags if the server is
    disallowed.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  - Incremental HDB propagation improvements
    Refactor send_diffs making it progressive
    Handle partial writes on non-blocking sockets
    Disable Nagle in iprop master and slave
    Use async I/O
    Don't send I_HAVE in response to AYT
    Do not recover log in kadm5_get_principal()
    Don't send diffs to slaves with not yet known version
    Don't stutter in send_diffs
  - Optional backwards-compatible anon-pkinit behavior
- Removed heimdal-7.7.0-autoconf-2.70.patch, fixed upstream.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1673352000">- replace libheimdal conflicts by obsoletes / provides to provide a
  smooth update in the new libheimdal-devel.</changelog>
</package>
<package pkgid="0a2fc4d4b1dccf08a1f21d9900b300dfa199fc220e7a1592dd656ad108383617" name="libgssapi3" arch="s390x">
  <version epoch="0" ver="7.8.0" rel="bp154.2.4.1"/>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1440936000">- Initial package, version 1.6rc2
- Added patch heimdal-version-script-client.map.patch to add file
  version-script-client.map (File is present in git for tag 1.6rc2
  but missing in tarball).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441108800">- Some changes in spec file to enable build for SLES.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441195200">- Added Conflicts tags to spec file because devel package conflicts
  with krb5-devel and krb5-mini-devel.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441454400">- Added a patched instead of the original tarball because only
  shared libraries will be build and source files of these (not to
  be build) programs have problematic licenses.
- Added script heimdal-patch-source.sh to sources.
- Added patch heimdal-patched.diff that fixes configure.ac and
  several Makefile.am files to successfully build patched source.
- Removed unneeded dependencies in spec file for build.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1483790400">- Update to version 7.1.0
- Removed heimdal-version-script-client.map.patch, fixed upstream.
- Fixed heimdal-patched.diff.
- Unfortunately there is no updated changelog file in tarball,
  changes can be seen in source code version control systems
  history log.</changelog>
  <changelog author="jengelh@inai.de" date="1486036800">- Summary and RPM group update. Do a direct call to ldconfig
  where possible.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1497528000">- Update to version 7.3.0
  - Security
    + Fix transit path validation. Commit f469fc6 (2010-10-02)
    inadvertently caused the previous hop realm to not be added
    to the transit path of issued tickets. This may, in some
    cases, enable bypass of capath policy in Heimdal versions 1.5
    through 7.2.
    Note, this may break sites that rely on the bug. With the bug
    some incomplete [capaths] worked, that should not have.
    These may now break authentication in some cross-realm
    configurations. (CVE-2017-6594)
- Version 7.2.0
  - Bug fixes
    + Portability improvements.
    + More strict parsing of encoded URI components in HTTP KDC.
    + Fixed memory leak in malloc error recovery in NTLM GSSAPI
    mechanism.
    + Avoid overly specific CPU info in krb5-config in aid of
    reproducible builds.
    + Don't do AFS string-to-key tests when feature is disabled.
    + Skip mdb_stat test when the command is not available.
    + Windows: update SHA2 timestamp server.
    + hdb: add missing export
    hdb_generate_key_set_password_with_ks_tuple.
    + Fix signature of hdb_generate_key_set_password().
    + Windows: enable KX509 support in the KDC.
    + kdc: fix kx509 service principal match.
    + iprop: handle case where master sends nothing new.
    + ipropd-slave: fix incorrect error codes.
    + Allow choice of sqlite for HDB pref.
    + check-iprop: don't fail to kill daemons.
    + roken: pidfile -&gt; rk_pidfile.
    + kdc: _kdc_do_kx509 fix use after free error.
    + Do not detect x32 as 64-bit platform.
    + No sys/ttydefaults.h on CYGWIN.
    + Fix check-iprop races.
    + roken_detach_prep() close pipe.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1501761600">- Update to version 7.4.0
  - Security
  - Fix CVE-2017-11103: Orpheus' Lyre KDC-REP service name
    validation.
    This is a critical vulnerability.
    In _krb5_extract_ticket() the KDC-REP service name must be
    obtained from encrypted version stored in 'enc_part' instead
    of the unencrypted version stored in 'ticket'.
    Use of the unecrypted version provides an opportunity for
    successful server impersonation and other attacks.
    Identified by Jeffrey Altman, Viktor Duchovni and
    Nico Williams.
    See https://www.orpheus-lyre.info/ for more details.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1512648000">- Added Avoid_NULL_structure_pointer_member_dereference.patch,
  fixes (bsc#1071675).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1514548800">- Update to version 7.5.0
  - Security
  - Fix CVE-2017-17439, which is a remote denial of service
    vulnerability:
    In Heimdal 7.1 through 7.4, remote unauthenticated attackers
    are able to crash the KDC by sending a crafted UDP packet
    containing empty data fields for client name or realm.
  - Bug fixes
  - Handle long input lines when reloading database dumps.
  - In pre-forked mode (default on Unix), correctly clear the
    process ids of exited children, allowing new child processes
    to replace the old.
  - Fixed incorrect KDC response when no-cross realm TGT exists,
    allowing client requests to fail quickly rather than time
    out after trying to get a correct answer from each KDC.
- Fixed heimdal-patched.diff.
- Removed Avoid_NULL_structure_pointer_member_dereference.patch,
  fixed upstream.</changelog>
  <changelog author="bwiedemann@suse.com" date="1533643200">- Add reproducible.patch to override build date (boo#1047218)
- Use constant hostname (boo#1084909)</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1561291200">- Update to version 7.7.0
  + Bug fixes:
  - PKCS#11 hcrypto back-end:
    + initialize the p11_module_load function list
    + verify that not only is a mechanism present but that its
    mechanism info states that it offers the required
    encryption, decryption or digest services
  - krb5:
    + Starting with 7.6, Heimdal permitted requesting
    authenticated anonymous tickets. However, it did not
    verify that a KDC in fact returned an anonymous ticket
    when one was requested.
    + Cease setting the KDCOption reaquest_anonymous flag when
    issuing S4UProxy (constrained delegation) TGS requests.
    + when the Win2K PKINIT compatibility option is set, do not
    require krbtgt otherName to match when validating KDC
    certificate.
    + set PKINIT_BTMM flag per Apple implementation
    + use memset_s() instead of memset()
  - kdc:
    + When generating KRB5SignedPath in the AS, use the reply
    client name rather than the one from the request, so
    validation will work correctly in the TGS.
    + allow checksum of PA-FOR-USER to be HMAC_MD5. Even if TGT
    used an enctype with a different checksum. Per [MS-SFU]
    2.2.1 PA-FOR-USER the checksum is always HMAC_MD5, and
    that's what Windows and MIT clients send.
    In Heimdal both the client and kdc use instead the
    checksum of the TGT, and therefore work with each other
    but Windows and MIT clients fail against Heimdal KDC.
    Both Windows and MIT KDC would allow any keyed checksum
    to be used so Heimdal client work fine against it.
    Change Heimdal KDC to allow HMAC_MD5 even for non RC4
    based TGT in order to support per-spec clients.
    + use memset_s() instead of memset()
    + Detect Heimdal 1.0 through 7.6 clients that issue
    S4UProxy (constrained delegation) TGS Requests with the
    request anonymous flag set. These requests will be
    treated as S4UProxy requests and not anonymous requests.
  - HDB:
    + Set SQLite3 backend default page size to 8KB.
    + Add hdb_set_sync() method
  - kadmind:
    + disable HDB sync during database load avoiding
    unnecessary disk i/o.
  - ipropd:
    + disable HDB sync during receive_everything. Doing an
    fsync per-record when receiving the complete HDB is a
    performance disaster. Among other things, if the HDB is
    very large, then one slave receving a full HDB can cause
    other slaves to timeout and, if HDB write activity is
    high enough to cause iprop log truncation, then also need
    full syncs, which leads to a cycle of full syncs for all
    slaves until HDB write activity drops.
    Allowing the iprop log to be larger helps, but improving
    receive_everything() performance helps even more.
  - kinit:
    + Anonymous PKINIT tickets discard the realm information
    used to locate the issuing AS. Store the issuing realm in
    the credentials cache in order to locate a KDC which can
    renew them.
    + Do not leak the result of krb5_cc_get_config() when
    determining anonymous PKINIT start realm.
  - klist:
    + Show transited-policy-checked, ok-as-delegate and
    anonymous flags when listing credentials.
  - tests:
    + Regenerate certs so that they expire before the 2038
    armageddon so the test suite will pass on 32-bit
    operating systems until the underlying issues can be
    resolved.
  - Solaris:
    + Define _STDC_C11_BCI for memset_s prototype
  - build tooling:
    + Convert from python 2 to python 3
  - documentation:
    + rename verify-password to verify-password-quality
    + hprop default mode is encrypt
    + kadmind "all" permission does not include "get-keys"
    + verify-password-quality might not be stateless
- Version 7.6.0
  + Security (#555):
  - CVE-2018-16860 Heimdal KDC: Reject PA-S4U2Self with unkeyed
    checksum
    When the Heimdal KDC checks the checksum that is placed on
    the S4U2Self packet by the server to protect the requested
    principal against modification, it does not confirm that
    the checksum algorithm that protects the user name
    (principal) in the request is keyed. This allows a
    man-in-the-middle attacker who can intercept the request to
    the KDC to modify the packet by replacing the user name
    (principal) in the request with any desired user name
    (principal) that exists in the KDC and replace the checksum
    protecting that name with a CRC32 checksum (which requires
    no prior knowledge to compute).
    This would allow a S4U2Self ticket requested on behalf of
    user name (principal) user@EXAMPLE.COM to any service to be
    changed to a S4U2Self ticket with a user name (principal) of
    Administrator@EXAMPLE.COM. This ticket would then contain
    the PAC of the modified user name (principal).
  - CVE-2019-12098, client-only:
    RFC8062 Section 7 requires verification of the PA-PKINIT-KX
    key exchange when anonymous PKINIT is used. Failure to do
    so can permit an active attacker to become a
    man-in-the-middle.
  + Bug fixes:
  - Happy eyeballs: Don't wait for responses from
    known-unreachable KDCs.
  - kdc:
    + check return copy_Realm, copy_PrincipalName,
    copy_EncryptionKey
  - kinit:
    + cleanup temporary ccaches
    + see man page for "kinit --anonymous" command line syntax
    change
  - kdc:
    + Make anonymous AS-requests more RFC8062-compliant.
    Updated expired test certificates
  - Solaris:
    + PKCS#11 hcrypto backend broken since 7.0.1
    + Building with Sun Pro C
  + Features:
  - kuser: support authenticated anonymous AS-REQs in kinit
  - kdc: support for anonymous TGS-REQs
  - kgetcred support for anonymous service tickets
  - Support builds with OpenSSL 1.1.1
- fixed heimdal-patched.diff and reproducible.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1653480000">- Apply Shared Library Packaging Policy and resolve rpmlint
  errors like "libheimdal.x86_64: E: shlib-policy-name-error
  SONAME: libasn1.so.8, expected package suffix: 8"</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656417600">- Add heimdal-7.7.0-autoconf-2.70.patch: Fix build with autoconf
  2.70 (gh#heimdal/heimdal#856).</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656590400">- Add ldconfig scriptlets.
- Fix 'Conflicts:' tags.
- Remove obsolete macros and conditionals.
- Ran spec-cleaner.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1671624000">- Update to version 7.8.0
  + This release includes both the Heimdal 7.7.1 Security
    Vulnerability fixes and non-Security bug fixes/improvements.
  + Security Vulnerabilities:
  - CVE-2022-42898 PAC parse integer overflows
  - CVE-2022-3437 Overflows and non-constant time leaks in
    DES{,3} and arcfour
  - CVE-2022-41916 Fix Unicode normalization read of 1 bytes past
    end of array
  - CVE-2021-44758 A null pointer de-reference DoS in SPNEGO
    acceptors
  - CVE-2021-3671 A null pointer de-reference when handling
    missing sname in TGS-REQ
  - CVE-2022-44640 Heimdal KDC: invalid free in ASN.1 codec
    Note that CVE-2022-44640 is a severe vulnerability,
    possibly a 10.0 on the Common Vulnerability Scoring
    System (CVSS) v3, as we believe it should be possible to
    get an RCE on a KDC, which means that credentials can be
    compromised that can be used to impersonate anyone in a
    realm or forest of realms.
    Heimdal's ASN.1 compiler generates code that allows
    specially crafted DER encodings of CHOICEs to invoke the
    wrong free function on the decoded structure upon decode
    error. This is known to impact the Heimdal KDC, leading to
    an invalid free() of an address partly or wholly under the
    control of the attacker, in turn leading to a potential
    remote code execution (RCE) vulnerability.
    This error affects the DER codec for all extensible CHOICE
    types used in Heimdal, though not all cases will be
    exploitable. We have not completed a thorough analysis of
    all the Heimdal components affected, thus the Kerberos
    client, the X.509 library, and other parts, may be affected
    as well.
    This bug has been in Heimdal's ASN.1 compiler since 2005,
    but it may only affect Heimdal 1.6 and up. It was first
    reported by Douglas Bagnall, though it had been found
    independently by the Heimdal maintainers via fuzzing a few
    weeks earlier.
    While no zero-day exploit is known, such an exploit will
    likely be available soon after public disclosure.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  + Other changes:
  - Bugs found by UBSAN (including the incorrect encoding of
    unconstrained INTEGER value -1).
  - Errors found by the LLVM scan-build static analyzer.
  - Errors found by the valgrind memory debugger.
  - Work around GCC Bug 95189 (memcmp wrongly stripped like
    strcmp).
  - Correct ASN.1 OID typo for SHA-384
  - Fix a deadlock in in the MEMORY ccache type.
  - TGS: strip forwardable and proxiable flags if the server is
    disallowed.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  - Incremental HDB propagation improvements
    Refactor send_diffs making it progressive
    Handle partial writes on non-blocking sockets
    Disable Nagle in iprop master and slave
    Use async I/O
    Don't send I_HAVE in response to AYT
    Do not recover log in kadm5_get_principal()
    Don't send diffs to slaves with not yet known version
    Don't stutter in send_diffs
  - Optional backwards-compatible anon-pkinit behavior
- Removed heimdal-7.7.0-autoconf-2.70.patch, fixed upstream.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1673352000">- replace libheimdal conflicts by obsoletes / provides to provide a
  smooth update in the new libheimdal-devel.</changelog>
</package>
<package pkgid="3d7d0d065bc5b48fbd954beb81c88965e08769424108420632e4ef820595da40" name="libgssapi3" arch="x86_64">
  <version epoch="0" ver="7.8.0" rel="bp154.2.4.1"/>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1440936000">- Initial package, version 1.6rc2
- Added patch heimdal-version-script-client.map.patch to add file
  version-script-client.map (File is present in git for tag 1.6rc2
  but missing in tarball).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441108800">- Some changes in spec file to enable build for SLES.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441195200">- Added Conflicts tags to spec file because devel package conflicts
  with krb5-devel and krb5-mini-devel.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441454400">- Added a patched instead of the original tarball because only
  shared libraries will be build and source files of these (not to
  be build) programs have problematic licenses.
- Added script heimdal-patch-source.sh to sources.
- Added patch heimdal-patched.diff that fixes configure.ac and
  several Makefile.am files to successfully build patched source.
- Removed unneeded dependencies in spec file for build.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1483790400">- Update to version 7.1.0
- Removed heimdal-version-script-client.map.patch, fixed upstream.
- Fixed heimdal-patched.diff.
- Unfortunately there is no updated changelog file in tarball,
  changes can be seen in source code version control systems
  history log.</changelog>
  <changelog author="jengelh@inai.de" date="1486036800">- Summary and RPM group update. Do a direct call to ldconfig
  where possible.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1497528000">- Update to version 7.3.0
  - Security
    + Fix transit path validation. Commit f469fc6 (2010-10-02)
    inadvertently caused the previous hop realm to not be added
    to the transit path of issued tickets. This may, in some
    cases, enable bypass of capath policy in Heimdal versions 1.5
    through 7.2.
    Note, this may break sites that rely on the bug. With the bug
    some incomplete [capaths] worked, that should not have.
    These may now break authentication in some cross-realm
    configurations. (CVE-2017-6594)
- Version 7.2.0
  - Bug fixes
    + Portability improvements.
    + More strict parsing of encoded URI components in HTTP KDC.
    + Fixed memory leak in malloc error recovery in NTLM GSSAPI
    mechanism.
    + Avoid overly specific CPU info in krb5-config in aid of
    reproducible builds.
    + Don't do AFS string-to-key tests when feature is disabled.
    + Skip mdb_stat test when the command is not available.
    + Windows: update SHA2 timestamp server.
    + hdb: add missing export
    hdb_generate_key_set_password_with_ks_tuple.
    + Fix signature of hdb_generate_key_set_password().
    + Windows: enable KX509 support in the KDC.
    + kdc: fix kx509 service principal match.
    + iprop: handle case where master sends nothing new.
    + ipropd-slave: fix incorrect error codes.
    + Allow choice of sqlite for HDB pref.
    + check-iprop: don't fail to kill daemons.
    + roken: pidfile -&gt; rk_pidfile.
    + kdc: _kdc_do_kx509 fix use after free error.
    + Do not detect x32 as 64-bit platform.
    + No sys/ttydefaults.h on CYGWIN.
    + Fix check-iprop races.
    + roken_detach_prep() close pipe.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1501761600">- Update to version 7.4.0
  - Security
  - Fix CVE-2017-11103: Orpheus' Lyre KDC-REP service name
    validation.
    This is a critical vulnerability.
    In _krb5_extract_ticket() the KDC-REP service name must be
    obtained from encrypted version stored in 'enc_part' instead
    of the unencrypted version stored in 'ticket'.
    Use of the unecrypted version provides an opportunity for
    successful server impersonation and other attacks.
    Identified by Jeffrey Altman, Viktor Duchovni and
    Nico Williams.
    See https://www.orpheus-lyre.info/ for more details.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1512648000">- Added Avoid_NULL_structure_pointer_member_dereference.patch,
  fixes (bsc#1071675).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1514548800">- Update to version 7.5.0
  - Security
  - Fix CVE-2017-17439, which is a remote denial of service
    vulnerability:
    In Heimdal 7.1 through 7.4, remote unauthenticated attackers
    are able to crash the KDC by sending a crafted UDP packet
    containing empty data fields for client name or realm.
  - Bug fixes
  - Handle long input lines when reloading database dumps.
  - In pre-forked mode (default on Unix), correctly clear the
    process ids of exited children, allowing new child processes
    to replace the old.
  - Fixed incorrect KDC response when no-cross realm TGT exists,
    allowing client requests to fail quickly rather than time
    out after trying to get a correct answer from each KDC.
- Fixed heimdal-patched.diff.
- Removed Avoid_NULL_structure_pointer_member_dereference.patch,
  fixed upstream.</changelog>
  <changelog author="bwiedemann@suse.com" date="1533643200">- Add reproducible.patch to override build date (boo#1047218)
- Use constant hostname (boo#1084909)</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1561291200">- Update to version 7.7.0
  + Bug fixes:
  - PKCS#11 hcrypto back-end:
    + initialize the p11_module_load function list
    + verify that not only is a mechanism present but that its
    mechanism info states that it offers the required
    encryption, decryption or digest services
  - krb5:
    + Starting with 7.6, Heimdal permitted requesting
    authenticated anonymous tickets. However, it did not
    verify that a KDC in fact returned an anonymous ticket
    when one was requested.
    + Cease setting the KDCOption reaquest_anonymous flag when
    issuing S4UProxy (constrained delegation) TGS requests.
    + when the Win2K PKINIT compatibility option is set, do not
    require krbtgt otherName to match when validating KDC
    certificate.
    + set PKINIT_BTMM flag per Apple implementation
    + use memset_s() instead of memset()
  - kdc:
    + When generating KRB5SignedPath in the AS, use the reply
    client name rather than the one from the request, so
    validation will work correctly in the TGS.
    + allow checksum of PA-FOR-USER to be HMAC_MD5. Even if TGT
    used an enctype with a different checksum. Per [MS-SFU]
    2.2.1 PA-FOR-USER the checksum is always HMAC_MD5, and
    that's what Windows and MIT clients send.
    In Heimdal both the client and kdc use instead the
    checksum of the TGT, and therefore work with each other
    but Windows and MIT clients fail against Heimdal KDC.
    Both Windows and MIT KDC would allow any keyed checksum
    to be used so Heimdal client work fine against it.
    Change Heimdal KDC to allow HMAC_MD5 even for non RC4
    based TGT in order to support per-spec clients.
    + use memset_s() instead of memset()
    + Detect Heimdal 1.0 through 7.6 clients that issue
    S4UProxy (constrained delegation) TGS Requests with the
    request anonymous flag set. These requests will be
    treated as S4UProxy requests and not anonymous requests.
  - HDB:
    + Set SQLite3 backend default page size to 8KB.
    + Add hdb_set_sync() method
  - kadmind:
    + disable HDB sync during database load avoiding
    unnecessary disk i/o.
  - ipropd:
    + disable HDB sync during receive_everything. Doing an
    fsync per-record when receiving the complete HDB is a
    performance disaster. Among other things, if the HDB is
    very large, then one slave receving a full HDB can cause
    other slaves to timeout and, if HDB write activity is
    high enough to cause iprop log truncation, then also need
    full syncs, which leads to a cycle of full syncs for all
    slaves until HDB write activity drops.
    Allowing the iprop log to be larger helps, but improving
    receive_everything() performance helps even more.
  - kinit:
    + Anonymous PKINIT tickets discard the realm information
    used to locate the issuing AS. Store the issuing realm in
    the credentials cache in order to locate a KDC which can
    renew them.
    + Do not leak the result of krb5_cc_get_config() when
    determining anonymous PKINIT start realm.
  - klist:
    + Show transited-policy-checked, ok-as-delegate and
    anonymous flags when listing credentials.
  - tests:
    + Regenerate certs so that they expire before the 2038
    armageddon so the test suite will pass on 32-bit
    operating systems until the underlying issues can be
    resolved.
  - Solaris:
    + Define _STDC_C11_BCI for memset_s prototype
  - build tooling:
    + Convert from python 2 to python 3
  - documentation:
    + rename verify-password to verify-password-quality
    + hprop default mode is encrypt
    + kadmind "all" permission does not include "get-keys"
    + verify-password-quality might not be stateless
- Version 7.6.0
  + Security (#555):
  - CVE-2018-16860 Heimdal KDC: Reject PA-S4U2Self with unkeyed
    checksum
    When the Heimdal KDC checks the checksum that is placed on
    the S4U2Self packet by the server to protect the requested
    principal against modification, it does not confirm that
    the checksum algorithm that protects the user name
    (principal) in the request is keyed. This allows a
    man-in-the-middle attacker who can intercept the request to
    the KDC to modify the packet by replacing the user name
    (principal) in the request with any desired user name
    (principal) that exists in the KDC and replace the checksum
    protecting that name with a CRC32 checksum (which requires
    no prior knowledge to compute).
    This would allow a S4U2Self ticket requested on behalf of
    user name (principal) user@EXAMPLE.COM to any service to be
    changed to a S4U2Self ticket with a user name (principal) of
    Administrator@EXAMPLE.COM. This ticket would then contain
    the PAC of the modified user name (principal).
  - CVE-2019-12098, client-only:
    RFC8062 Section 7 requires verification of the PA-PKINIT-KX
    key exchange when anonymous PKINIT is used. Failure to do
    so can permit an active attacker to become a
    man-in-the-middle.
  + Bug fixes:
  - Happy eyeballs: Don't wait for responses from
    known-unreachable KDCs.
  - kdc:
    + check return copy_Realm, copy_PrincipalName,
    copy_EncryptionKey
  - kinit:
    + cleanup temporary ccaches
    + see man page for "kinit --anonymous" command line syntax
    change
  - kdc:
    + Make anonymous AS-requests more RFC8062-compliant.
    Updated expired test certificates
  - Solaris:
    + PKCS#11 hcrypto backend broken since 7.0.1
    + Building with Sun Pro C
  + Features:
  - kuser: support authenticated anonymous AS-REQs in kinit
  - kdc: support for anonymous TGS-REQs
  - kgetcred support for anonymous service tickets
  - Support builds with OpenSSL 1.1.1
- fixed heimdal-patched.diff and reproducible.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1653480000">- Apply Shared Library Packaging Policy and resolve rpmlint
  errors like "libheimdal.x86_64: E: shlib-policy-name-error
  SONAME: libasn1.so.8, expected package suffix: 8"</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656417600">- Add heimdal-7.7.0-autoconf-2.70.patch: Fix build with autoconf
  2.70 (gh#heimdal/heimdal#856).</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656590400">- Add ldconfig scriptlets.
- Fix 'Conflicts:' tags.
- Remove obsolete macros and conditionals.
- Ran spec-cleaner.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1671624000">- Update to version 7.8.0
  + This release includes both the Heimdal 7.7.1 Security
    Vulnerability fixes and non-Security bug fixes/improvements.
  + Security Vulnerabilities:
  - CVE-2022-42898 PAC parse integer overflows
  - CVE-2022-3437 Overflows and non-constant time leaks in
    DES{,3} and arcfour
  - CVE-2022-41916 Fix Unicode normalization read of 1 bytes past
    end of array
  - CVE-2021-44758 A null pointer de-reference DoS in SPNEGO
    acceptors
  - CVE-2021-3671 A null pointer de-reference when handling
    missing sname in TGS-REQ
  - CVE-2022-44640 Heimdal KDC: invalid free in ASN.1 codec
    Note that CVE-2022-44640 is a severe vulnerability,
    possibly a 10.0 on the Common Vulnerability Scoring
    System (CVSS) v3, as we believe it should be possible to
    get an RCE on a KDC, which means that credentials can be
    compromised that can be used to impersonate anyone in a
    realm or forest of realms.
    Heimdal's ASN.1 compiler generates code that allows
    specially crafted DER encodings of CHOICEs to invoke the
    wrong free function on the decoded structure upon decode
    error. This is known to impact the Heimdal KDC, leading to
    an invalid free() of an address partly or wholly under the
    control of the attacker, in turn leading to a potential
    remote code execution (RCE) vulnerability.
    This error affects the DER codec for all extensible CHOICE
    types used in Heimdal, though not all cases will be
    exploitable. We have not completed a thorough analysis of
    all the Heimdal components affected, thus the Kerberos
    client, the X.509 library, and other parts, may be affected
    as well.
    This bug has been in Heimdal's ASN.1 compiler since 2005,
    but it may only affect Heimdal 1.6 and up. It was first
    reported by Douglas Bagnall, though it had been found
    independently by the Heimdal maintainers via fuzzing a few
    weeks earlier.
    While no zero-day exploit is known, such an exploit will
    likely be available soon after public disclosure.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  + Other changes:
  - Bugs found by UBSAN (including the incorrect encoding of
    unconstrained INTEGER value -1).
  - Errors found by the LLVM scan-build static analyzer.
  - Errors found by the valgrind memory debugger.
  - Work around GCC Bug 95189 (memcmp wrongly stripped like
    strcmp).
  - Correct ASN.1 OID typo for SHA-384
  - Fix a deadlock in in the MEMORY ccache type.
  - TGS: strip forwardable and proxiable flags if the server is
    disallowed.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  - Incremental HDB propagation improvements
    Refactor send_diffs making it progressive
    Handle partial writes on non-blocking sockets
    Disable Nagle in iprop master and slave
    Use async I/O
    Don't send I_HAVE in response to AYT
    Do not recover log in kadm5_get_principal()
    Don't send diffs to slaves with not yet known version
    Don't stutter in send_diffs
  - Optional backwards-compatible anon-pkinit behavior
- Removed heimdal-7.7.0-autoconf-2.70.patch, fixed upstream.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1673352000">- replace libheimdal conflicts by obsoletes / provides to provide a
  smooth update in the new libheimdal-devel.</changelog>
</package>
<package pkgid="36f4aaed60d04746104596a24f9c5b5b767373b92180a68bedaa99a45ac8901f" name="libhcrypto4" arch="aarch64">
  <version epoch="0" ver="7.8.0" rel="bp154.2.4.1"/>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1440936000">- Initial package, version 1.6rc2
- Added patch heimdal-version-script-client.map.patch to add file
  version-script-client.map (File is present in git for tag 1.6rc2
  but missing in tarball).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441108800">- Some changes in spec file to enable build for SLES.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441195200">- Added Conflicts tags to spec file because devel package conflicts
  with krb5-devel and krb5-mini-devel.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441454400">- Added a patched instead of the original tarball because only
  shared libraries will be build and source files of these (not to
  be build) programs have problematic licenses.
- Added script heimdal-patch-source.sh to sources.
- Added patch heimdal-patched.diff that fixes configure.ac and
  several Makefile.am files to successfully build patched source.
- Removed unneeded dependencies in spec file for build.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1483790400">- Update to version 7.1.0
- Removed heimdal-version-script-client.map.patch, fixed upstream.
- Fixed heimdal-patched.diff.
- Unfortunately there is no updated changelog file in tarball,
  changes can be seen in source code version control systems
  history log.</changelog>
  <changelog author="jengelh@inai.de" date="1486036800">- Summary and RPM group update. Do a direct call to ldconfig
  where possible.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1497528000">- Update to version 7.3.0
  - Security
    + Fix transit path validation. Commit f469fc6 (2010-10-02)
    inadvertently caused the previous hop realm to not be added
    to the transit path of issued tickets. This may, in some
    cases, enable bypass of capath policy in Heimdal versions 1.5
    through 7.2.
    Note, this may break sites that rely on the bug. With the bug
    some incomplete [capaths] worked, that should not have.
    These may now break authentication in some cross-realm
    configurations. (CVE-2017-6594)
- Version 7.2.0
  - Bug fixes
    + Portability improvements.
    + More strict parsing of encoded URI components in HTTP KDC.
    + Fixed memory leak in malloc error recovery in NTLM GSSAPI
    mechanism.
    + Avoid overly specific CPU info in krb5-config in aid of
    reproducible builds.
    + Don't do AFS string-to-key tests when feature is disabled.
    + Skip mdb_stat test when the command is not available.
    + Windows: update SHA2 timestamp server.
    + hdb: add missing export
    hdb_generate_key_set_password_with_ks_tuple.
    + Fix signature of hdb_generate_key_set_password().
    + Windows: enable KX509 support in the KDC.
    + kdc: fix kx509 service principal match.
    + iprop: handle case where master sends nothing new.
    + ipropd-slave: fix incorrect error codes.
    + Allow choice of sqlite for HDB pref.
    + check-iprop: don't fail to kill daemons.
    + roken: pidfile -&gt; rk_pidfile.
    + kdc: _kdc_do_kx509 fix use after free error.
    + Do not detect x32 as 64-bit platform.
    + No sys/ttydefaults.h on CYGWIN.
    + Fix check-iprop races.
    + roken_detach_prep() close pipe.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1501761600">- Update to version 7.4.0
  - Security
  - Fix CVE-2017-11103: Orpheus' Lyre KDC-REP service name
    validation.
    This is a critical vulnerability.
    In _krb5_extract_ticket() the KDC-REP service name must be
    obtained from encrypted version stored in 'enc_part' instead
    of the unencrypted version stored in 'ticket'.
    Use of the unecrypted version provides an opportunity for
    successful server impersonation and other attacks.
    Identified by Jeffrey Altman, Viktor Duchovni and
    Nico Williams.
    See https://www.orpheus-lyre.info/ for more details.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1512648000">- Added Avoid_NULL_structure_pointer_member_dereference.patch,
  fixes (bsc#1071675).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1514548800">- Update to version 7.5.0
  - Security
  - Fix CVE-2017-17439, which is a remote denial of service
    vulnerability:
    In Heimdal 7.1 through 7.4, remote unauthenticated attackers
    are able to crash the KDC by sending a crafted UDP packet
    containing empty data fields for client name or realm.
  - Bug fixes
  - Handle long input lines when reloading database dumps.
  - In pre-forked mode (default on Unix), correctly clear the
    process ids of exited children, allowing new child processes
    to replace the old.
  - Fixed incorrect KDC response when no-cross realm TGT exists,
    allowing client requests to fail quickly rather than time
    out after trying to get a correct answer from each KDC.
- Fixed heimdal-patched.diff.
- Removed Avoid_NULL_structure_pointer_member_dereference.patch,
  fixed upstream.</changelog>
  <changelog author="bwiedemann@suse.com" date="1533643200">- Add reproducible.patch to override build date (boo#1047218)
- Use constant hostname (boo#1084909)</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1561291200">- Update to version 7.7.0
  + Bug fixes:
  - PKCS#11 hcrypto back-end:
    + initialize the p11_module_load function list
    + verify that not only is a mechanism present but that its
    mechanism info states that it offers the required
    encryption, decryption or digest services
  - krb5:
    + Starting with 7.6, Heimdal permitted requesting
    authenticated anonymous tickets. However, it did not
    verify that a KDC in fact returned an anonymous ticket
    when one was requested.
    + Cease setting the KDCOption reaquest_anonymous flag when
    issuing S4UProxy (constrained delegation) TGS requests.
    + when the Win2K PKINIT compatibility option is set, do not
    require krbtgt otherName to match when validating KDC
    certificate.
    + set PKINIT_BTMM flag per Apple implementation
    + use memset_s() instead of memset()
  - kdc:
    + When generating KRB5SignedPath in the AS, use the reply
    client name rather than the one from the request, so
    validation will work correctly in the TGS.
    + allow checksum of PA-FOR-USER to be HMAC_MD5. Even if TGT
    used an enctype with a different checksum. Per [MS-SFU]
    2.2.1 PA-FOR-USER the checksum is always HMAC_MD5, and
    that's what Windows and MIT clients send.
    In Heimdal both the client and kdc use instead the
    checksum of the TGT, and therefore work with each other
    but Windows and MIT clients fail against Heimdal KDC.
    Both Windows and MIT KDC would allow any keyed checksum
    to be used so Heimdal client work fine against it.
    Change Heimdal KDC to allow HMAC_MD5 even for non RC4
    based TGT in order to support per-spec clients.
    + use memset_s() instead of memset()
    + Detect Heimdal 1.0 through 7.6 clients that issue
    S4UProxy (constrained delegation) TGS Requests with the
    request anonymous flag set. These requests will be
    treated as S4UProxy requests and not anonymous requests.
  - HDB:
    + Set SQLite3 backend default page size to 8KB.
    + Add hdb_set_sync() method
  - kadmind:
    + disable HDB sync during database load avoiding
    unnecessary disk i/o.
  - ipropd:
    + disable HDB sync during receive_everything. Doing an
    fsync per-record when receiving the complete HDB is a
    performance disaster. Among other things, if the HDB is
    very large, then one slave receving a full HDB can cause
    other slaves to timeout and, if HDB write activity is
    high enough to cause iprop log truncation, then also need
    full syncs, which leads to a cycle of full syncs for all
    slaves until HDB write activity drops.
    Allowing the iprop log to be larger helps, but improving
    receive_everything() performance helps even more.
  - kinit:
    + Anonymous PKINIT tickets discard the realm information
    used to locate the issuing AS. Store the issuing realm in
    the credentials cache in order to locate a KDC which can
    renew them.
    + Do not leak the result of krb5_cc_get_config() when
    determining anonymous PKINIT start realm.
  - klist:
    + Show transited-policy-checked, ok-as-delegate and
    anonymous flags when listing credentials.
  - tests:
    + Regenerate certs so that they expire before the 2038
    armageddon so the test suite will pass on 32-bit
    operating systems until the underlying issues can be
    resolved.
  - Solaris:
    + Define _STDC_C11_BCI for memset_s prototype
  - build tooling:
    + Convert from python 2 to python 3
  - documentation:
    + rename verify-password to verify-password-quality
    + hprop default mode is encrypt
    + kadmind "all" permission does not include "get-keys"
    + verify-password-quality might not be stateless
- Version 7.6.0
  + Security (#555):
  - CVE-2018-16860 Heimdal KDC: Reject PA-S4U2Self with unkeyed
    checksum
    When the Heimdal KDC checks the checksum that is placed on
    the S4U2Self packet by the server to protect the requested
    principal against modification, it does not confirm that
    the checksum algorithm that protects the user name
    (principal) in the request is keyed. This allows a
    man-in-the-middle attacker who can intercept the request to
    the KDC to modify the packet by replacing the user name
    (principal) in the request with any desired user name
    (principal) that exists in the KDC and replace the checksum
    protecting that name with a CRC32 checksum (which requires
    no prior knowledge to compute).
    This would allow a S4U2Self ticket requested on behalf of
    user name (principal) user@EXAMPLE.COM to any service to be
    changed to a S4U2Self ticket with a user name (principal) of
    Administrator@EXAMPLE.COM. This ticket would then contain
    the PAC of the modified user name (principal).
  - CVE-2019-12098, client-only:
    RFC8062 Section 7 requires verification of the PA-PKINIT-KX
    key exchange when anonymous PKINIT is used. Failure to do
    so can permit an active attacker to become a
    man-in-the-middle.
  + Bug fixes:
  - Happy eyeballs: Don't wait for responses from
    known-unreachable KDCs.
  - kdc:
    + check return copy_Realm, copy_PrincipalName,
    copy_EncryptionKey
  - kinit:
    + cleanup temporary ccaches
    + see man page for "kinit --anonymous" command line syntax
    change
  - kdc:
    + Make anonymous AS-requests more RFC8062-compliant.
    Updated expired test certificates
  - Solaris:
    + PKCS#11 hcrypto backend broken since 7.0.1
    + Building with Sun Pro C
  + Features:
  - kuser: support authenticated anonymous AS-REQs in kinit
  - kdc: support for anonymous TGS-REQs
  - kgetcred support for anonymous service tickets
  - Support builds with OpenSSL 1.1.1
- fixed heimdal-patched.diff and reproducible.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1653480000">- Apply Shared Library Packaging Policy and resolve rpmlint
  errors like "libheimdal.x86_64: E: shlib-policy-name-error
  SONAME: libasn1.so.8, expected package suffix: 8"</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656417600">- Add heimdal-7.7.0-autoconf-2.70.patch: Fix build with autoconf
  2.70 (gh#heimdal/heimdal#856).</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656590400">- Add ldconfig scriptlets.
- Fix 'Conflicts:' tags.
- Remove obsolete macros and conditionals.
- Ran spec-cleaner.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1671624000">- Update to version 7.8.0
  + This release includes both the Heimdal 7.7.1 Security
    Vulnerability fixes and non-Security bug fixes/improvements.
  + Security Vulnerabilities:
  - CVE-2022-42898 PAC parse integer overflows
  - CVE-2022-3437 Overflows and non-constant time leaks in
    DES{,3} and arcfour
  - CVE-2022-41916 Fix Unicode normalization read of 1 bytes past
    end of array
  - CVE-2021-44758 A null pointer de-reference DoS in SPNEGO
    acceptors
  - CVE-2021-3671 A null pointer de-reference when handling
    missing sname in TGS-REQ
  - CVE-2022-44640 Heimdal KDC: invalid free in ASN.1 codec
    Note that CVE-2022-44640 is a severe vulnerability,
    possibly a 10.0 on the Common Vulnerability Scoring
    System (CVSS) v3, as we believe it should be possible to
    get an RCE on a KDC, which means that credentials can be
    compromised that can be used to impersonate anyone in a
    realm or forest of realms.
    Heimdal's ASN.1 compiler generates code that allows
    specially crafted DER encodings of CHOICEs to invoke the
    wrong free function on the decoded structure upon decode
    error. This is known to impact the Heimdal KDC, leading to
    an invalid free() of an address partly or wholly under the
    control of the attacker, in turn leading to a potential
    remote code execution (RCE) vulnerability.
    This error affects the DER codec for all extensible CHOICE
    types used in Heimdal, though not all cases will be
    exploitable. We have not completed a thorough analysis of
    all the Heimdal components affected, thus the Kerberos
    client, the X.509 library, and other parts, may be affected
    as well.
    This bug has been in Heimdal's ASN.1 compiler since 2005,
    but it may only affect Heimdal 1.6 and up. It was first
    reported by Douglas Bagnall, though it had been found
    independently by the Heimdal maintainers via fuzzing a few
    weeks earlier.
    While no zero-day exploit is known, such an exploit will
    likely be available soon after public disclosure.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  + Other changes:
  - Bugs found by UBSAN (including the incorrect encoding of
    unconstrained INTEGER value -1).
  - Errors found by the LLVM scan-build static analyzer.
  - Errors found by the valgrind memory debugger.
  - Work around GCC Bug 95189 (memcmp wrongly stripped like
    strcmp).
  - Correct ASN.1 OID typo for SHA-384
  - Fix a deadlock in in the MEMORY ccache type.
  - TGS: strip forwardable and proxiable flags if the server is
    disallowed.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  - Incremental HDB propagation improvements
    Refactor send_diffs making it progressive
    Handle partial writes on non-blocking sockets
    Disable Nagle in iprop master and slave
    Use async I/O
    Don't send I_HAVE in response to AYT
    Do not recover log in kadm5_get_principal()
    Don't send diffs to slaves with not yet known version
    Don't stutter in send_diffs
  - Optional backwards-compatible anon-pkinit behavior
- Removed heimdal-7.7.0-autoconf-2.70.patch, fixed upstream.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1673352000">- replace libheimdal conflicts by obsoletes / provides to provide a
  smooth update in the new libheimdal-devel.</changelog>
</package>
<package pkgid="2d5bb9df237367c8851dbcd6dca3ea19a46bf3a127cee52bd6cd70199a41dd85" name="libhcrypto4" arch="i586">
  <version epoch="0" ver="7.8.0" rel="bp154.2.4.1"/>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1440936000">- Initial package, version 1.6rc2
- Added patch heimdal-version-script-client.map.patch to add file
  version-script-client.map (File is present in git for tag 1.6rc2
  but missing in tarball).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441108800">- Some changes in spec file to enable build for SLES.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441195200">- Added Conflicts tags to spec file because devel package conflicts
  with krb5-devel and krb5-mini-devel.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441454400">- Added a patched instead of the original tarball because only
  shared libraries will be build and source files of these (not to
  be build) programs have problematic licenses.
- Added script heimdal-patch-source.sh to sources.
- Added patch heimdal-patched.diff that fixes configure.ac and
  several Makefile.am files to successfully build patched source.
- Removed unneeded dependencies in spec file for build.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1483790400">- Update to version 7.1.0
- Removed heimdal-version-script-client.map.patch, fixed upstream.
- Fixed heimdal-patched.diff.
- Unfortunately there is no updated changelog file in tarball,
  changes can be seen in source code version control systems
  history log.</changelog>
  <changelog author="jengelh@inai.de" date="1486036800">- Summary and RPM group update. Do a direct call to ldconfig
  where possible.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1497528000">- Update to version 7.3.0
  - Security
    + Fix transit path validation. Commit f469fc6 (2010-10-02)
    inadvertently caused the previous hop realm to not be added
    to the transit path of issued tickets. This may, in some
    cases, enable bypass of capath policy in Heimdal versions 1.5
    through 7.2.
    Note, this may break sites that rely on the bug. With the bug
    some incomplete [capaths] worked, that should not have.
    These may now break authentication in some cross-realm
    configurations. (CVE-2017-6594)
- Version 7.2.0
  - Bug fixes
    + Portability improvements.
    + More strict parsing of encoded URI components in HTTP KDC.
    + Fixed memory leak in malloc error recovery in NTLM GSSAPI
    mechanism.
    + Avoid overly specific CPU info in krb5-config in aid of
    reproducible builds.
    + Don't do AFS string-to-key tests when feature is disabled.
    + Skip mdb_stat test when the command is not available.
    + Windows: update SHA2 timestamp server.
    + hdb: add missing export
    hdb_generate_key_set_password_with_ks_tuple.
    + Fix signature of hdb_generate_key_set_password().
    + Windows: enable KX509 support in the KDC.
    + kdc: fix kx509 service principal match.
    + iprop: handle case where master sends nothing new.
    + ipropd-slave: fix incorrect error codes.
    + Allow choice of sqlite for HDB pref.
    + check-iprop: don't fail to kill daemons.
    + roken: pidfile -&gt; rk_pidfile.
    + kdc: _kdc_do_kx509 fix use after free error.
    + Do not detect x32 as 64-bit platform.
    + No sys/ttydefaults.h on CYGWIN.
    + Fix check-iprop races.
    + roken_detach_prep() close pipe.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1501761600">- Update to version 7.4.0
  - Security
  - Fix CVE-2017-11103: Orpheus' Lyre KDC-REP service name
    validation.
    This is a critical vulnerability.
    In _krb5_extract_ticket() the KDC-REP service name must be
    obtained from encrypted version stored in 'enc_part' instead
    of the unencrypted version stored in 'ticket'.
    Use of the unecrypted version provides an opportunity for
    successful server impersonation and other attacks.
    Identified by Jeffrey Altman, Viktor Duchovni and
    Nico Williams.
    See https://www.orpheus-lyre.info/ for more details.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1512648000">- Added Avoid_NULL_structure_pointer_member_dereference.patch,
  fixes (bsc#1071675).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1514548800">- Update to version 7.5.0
  - Security
  - Fix CVE-2017-17439, which is a remote denial of service
    vulnerability:
    In Heimdal 7.1 through 7.4, remote unauthenticated attackers
    are able to crash the KDC by sending a crafted UDP packet
    containing empty data fields for client name or realm.
  - Bug fixes
  - Handle long input lines when reloading database dumps.
  - In pre-forked mode (default on Unix), correctly clear the
    process ids of exited children, allowing new child processes
    to replace the old.
  - Fixed incorrect KDC response when no-cross realm TGT exists,
    allowing client requests to fail quickly rather than time
    out after trying to get a correct answer from each KDC.
- Fixed heimdal-patched.diff.
- Removed Avoid_NULL_structure_pointer_member_dereference.patch,
  fixed upstream.</changelog>
  <changelog author="bwiedemann@suse.com" date="1533643200">- Add reproducible.patch to override build date (boo#1047218)
- Use constant hostname (boo#1084909)</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1561291200">- Update to version 7.7.0
  + Bug fixes:
  - PKCS#11 hcrypto back-end:
    + initialize the p11_module_load function list
    + verify that not only is a mechanism present but that its
    mechanism info states that it offers the required
    encryption, decryption or digest services
  - krb5:
    + Starting with 7.6, Heimdal permitted requesting
    authenticated anonymous tickets. However, it did not
    verify that a KDC in fact returned an anonymous ticket
    when one was requested.
    + Cease setting the KDCOption reaquest_anonymous flag when
    issuing S4UProxy (constrained delegation) TGS requests.
    + when the Win2K PKINIT compatibility option is set, do not
    require krbtgt otherName to match when validating KDC
    certificate.
    + set PKINIT_BTMM flag per Apple implementation
    + use memset_s() instead of memset()
  - kdc:
    + When generating KRB5SignedPath in the AS, use the reply
    client name rather than the one from the request, so
    validation will work correctly in the TGS.
    + allow checksum of PA-FOR-USER to be HMAC_MD5. Even if TGT
    used an enctype with a different checksum. Per [MS-SFU]
    2.2.1 PA-FOR-USER the checksum is always HMAC_MD5, and
    that's what Windows and MIT clients send.
    In Heimdal both the client and kdc use instead the
    checksum of the TGT, and therefore work with each other
    but Windows and MIT clients fail against Heimdal KDC.
    Both Windows and MIT KDC would allow any keyed checksum
    to be used so Heimdal client work fine against it.
    Change Heimdal KDC to allow HMAC_MD5 even for non RC4
    based TGT in order to support per-spec clients.
    + use memset_s() instead of memset()
    + Detect Heimdal 1.0 through 7.6 clients that issue
    S4UProxy (constrained delegation) TGS Requests with the
    request anonymous flag set. These requests will be
    treated as S4UProxy requests and not anonymous requests.
  - HDB:
    + Set SQLite3 backend default page size to 8KB.
    + Add hdb_set_sync() method
  - kadmind:
    + disable HDB sync during database load avoiding
    unnecessary disk i/o.
  - ipropd:
    + disable HDB sync during receive_everything. Doing an
    fsync per-record when receiving the complete HDB is a
    performance disaster. Among other things, if the HDB is
    very large, then one slave receving a full HDB can cause
    other slaves to timeout and, if HDB write activity is
    high enough to cause iprop log truncation, then also need
    full syncs, which leads to a cycle of full syncs for all
    slaves until HDB write activity drops.
    Allowing the iprop log to be larger helps, but improving
    receive_everything() performance helps even more.
  - kinit:
    + Anonymous PKINIT tickets discard the realm information
    used to locate the issuing AS. Store the issuing realm in
    the credentials cache in order to locate a KDC which can
    renew them.
    + Do not leak the result of krb5_cc_get_config() when
    determining anonymous PKINIT start realm.
  - klist:
    + Show transited-policy-checked, ok-as-delegate and
    anonymous flags when listing credentials.
  - tests:
    + Regenerate certs so that they expire before the 2038
    armageddon so the test suite will pass on 32-bit
    operating systems until the underlying issues can be
    resolved.
  - Solaris:
    + Define _STDC_C11_BCI for memset_s prototype
  - build tooling:
    + Convert from python 2 to python 3
  - documentation:
    + rename verify-password to verify-password-quality
    + hprop default mode is encrypt
    + kadmind "all" permission does not include "get-keys"
    + verify-password-quality might not be stateless
- Version 7.6.0
  + Security (#555):
  - CVE-2018-16860 Heimdal KDC: Reject PA-S4U2Self with unkeyed
    checksum
    When the Heimdal KDC checks the checksum that is placed on
    the S4U2Self packet by the server to protect the requested
    principal against modification, it does not confirm that
    the checksum algorithm that protects the user name
    (principal) in the request is keyed. This allows a
    man-in-the-middle attacker who can intercept the request to
    the KDC to modify the packet by replacing the user name
    (principal) in the request with any desired user name
    (principal) that exists in the KDC and replace the checksum
    protecting that name with a CRC32 checksum (which requires
    no prior knowledge to compute).
    This would allow a S4U2Self ticket requested on behalf of
    user name (principal) user@EXAMPLE.COM to any service to be
    changed to a S4U2Self ticket with a user name (principal) of
    Administrator@EXAMPLE.COM. This ticket would then contain
    the PAC of the modified user name (principal).
  - CVE-2019-12098, client-only:
    RFC8062 Section 7 requires verification of the PA-PKINIT-KX
    key exchange when anonymous PKINIT is used. Failure to do
    so can permit an active attacker to become a
    man-in-the-middle.
  + Bug fixes:
  - Happy eyeballs: Don't wait for responses from
    known-unreachable KDCs.
  - kdc:
    + check return copy_Realm, copy_PrincipalName,
    copy_EncryptionKey
  - kinit:
    + cleanup temporary ccaches
    + see man page for "kinit --anonymous" command line syntax
    change
  - kdc:
    + Make anonymous AS-requests more RFC8062-compliant.
    Updated expired test certificates
  - Solaris:
    + PKCS#11 hcrypto backend broken since 7.0.1
    + Building with Sun Pro C
  + Features:
  - kuser: support authenticated anonymous AS-REQs in kinit
  - kdc: support for anonymous TGS-REQs
  - kgetcred support for anonymous service tickets
  - Support builds with OpenSSL 1.1.1
- fixed heimdal-patched.diff and reproducible.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1653480000">- Apply Shared Library Packaging Policy and resolve rpmlint
  errors like "libheimdal.x86_64: E: shlib-policy-name-error
  SONAME: libasn1.so.8, expected package suffix: 8"</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656417600">- Add heimdal-7.7.0-autoconf-2.70.patch: Fix build with autoconf
  2.70 (gh#heimdal/heimdal#856).</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656590400">- Add ldconfig scriptlets.
- Fix 'Conflicts:' tags.
- Remove obsolete macros and conditionals.
- Ran spec-cleaner.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1671624000">- Update to version 7.8.0
  + This release includes both the Heimdal 7.7.1 Security
    Vulnerability fixes and non-Security bug fixes/improvements.
  + Security Vulnerabilities:
  - CVE-2022-42898 PAC parse integer overflows
  - CVE-2022-3437 Overflows and non-constant time leaks in
    DES{,3} and arcfour
  - CVE-2022-41916 Fix Unicode normalization read of 1 bytes past
    end of array
  - CVE-2021-44758 A null pointer de-reference DoS in SPNEGO
    acceptors
  - CVE-2021-3671 A null pointer de-reference when handling
    missing sname in TGS-REQ
  - CVE-2022-44640 Heimdal KDC: invalid free in ASN.1 codec
    Note that CVE-2022-44640 is a severe vulnerability,
    possibly a 10.0 on the Common Vulnerability Scoring
    System (CVSS) v3, as we believe it should be possible to
    get an RCE on a KDC, which means that credentials can be
    compromised that can be used to impersonate anyone in a
    realm or forest of realms.
    Heimdal's ASN.1 compiler generates code that allows
    specially crafted DER encodings of CHOICEs to invoke the
    wrong free function on the decoded structure upon decode
    error. This is known to impact the Heimdal KDC, leading to
    an invalid free() of an address partly or wholly under the
    control of the attacker, in turn leading to a potential
    remote code execution (RCE) vulnerability.
    This error affects the DER codec for all extensible CHOICE
    types used in Heimdal, though not all cases will be
    exploitable. We have not completed a thorough analysis of
    all the Heimdal components affected, thus the Kerberos
    client, the X.509 library, and other parts, may be affected
    as well.
    This bug has been in Heimdal's ASN.1 compiler since 2005,
    but it may only affect Heimdal 1.6 and up. It was first
    reported by Douglas Bagnall, though it had been found
    independently by the Heimdal maintainers via fuzzing a few
    weeks earlier.
    While no zero-day exploit is known, such an exploit will
    likely be available soon after public disclosure.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  + Other changes:
  - Bugs found by UBSAN (including the incorrect encoding of
    unconstrained INTEGER value -1).
  - Errors found by the LLVM scan-build static analyzer.
  - Errors found by the valgrind memory debugger.
  - Work around GCC Bug 95189 (memcmp wrongly stripped like
    strcmp).
  - Correct ASN.1 OID typo for SHA-384
  - Fix a deadlock in in the MEMORY ccache type.
  - TGS: strip forwardable and proxiable flags if the server is
    disallowed.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  - Incremental HDB propagation improvements
    Refactor send_diffs making it progressive
    Handle partial writes on non-blocking sockets
    Disable Nagle in iprop master and slave
    Use async I/O
    Don't send I_HAVE in response to AYT
    Do not recover log in kadm5_get_principal()
    Don't send diffs to slaves with not yet known version
    Don't stutter in send_diffs
  - Optional backwards-compatible anon-pkinit behavior
- Removed heimdal-7.7.0-autoconf-2.70.patch, fixed upstream.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1673352000">- replace libheimdal conflicts by obsoletes / provides to provide a
  smooth update in the new libheimdal-devel.</changelog>
</package>
<package pkgid="5cca3a8b80a7bb2d21fce9e64610db61dda65a93f5041cf5ce7949ccb4e5ecef" name="libhcrypto4" arch="ppc64le">
  <version epoch="0" ver="7.8.0" rel="bp154.2.4.1"/>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1440936000">- Initial package, version 1.6rc2
- Added patch heimdal-version-script-client.map.patch to add file
  version-script-client.map (File is present in git for tag 1.6rc2
  but missing in tarball).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441108800">- Some changes in spec file to enable build for SLES.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441195200">- Added Conflicts tags to spec file because devel package conflicts
  with krb5-devel and krb5-mini-devel.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441454400">- Added a patched instead of the original tarball because only
  shared libraries will be build and source files of these (not to
  be build) programs have problematic licenses.
- Added script heimdal-patch-source.sh to sources.
- Added patch heimdal-patched.diff that fixes configure.ac and
  several Makefile.am files to successfully build patched source.
- Removed unneeded dependencies in spec file for build.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1483790400">- Update to version 7.1.0
- Removed heimdal-version-script-client.map.patch, fixed upstream.
- Fixed heimdal-patched.diff.
- Unfortunately there is no updated changelog file in tarball,
  changes can be seen in source code version control systems
  history log.</changelog>
  <changelog author="jengelh@inai.de" date="1486036800">- Summary and RPM group update. Do a direct call to ldconfig
  where possible.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1497528000">- Update to version 7.3.0
  - Security
    + Fix transit path validation. Commit f469fc6 (2010-10-02)
    inadvertently caused the previous hop realm to not be added
    to the transit path of issued tickets. This may, in some
    cases, enable bypass of capath policy in Heimdal versions 1.5
    through 7.2.
    Note, this may break sites that rely on the bug. With the bug
    some incomplete [capaths] worked, that should not have.
    These may now break authentication in some cross-realm
    configurations. (CVE-2017-6594)
- Version 7.2.0
  - Bug fixes
    + Portability improvements.
    + More strict parsing of encoded URI components in HTTP KDC.
    + Fixed memory leak in malloc error recovery in NTLM GSSAPI
    mechanism.
    + Avoid overly specific CPU info in krb5-config in aid of
    reproducible builds.
    + Don't do AFS string-to-key tests when feature is disabled.
    + Skip mdb_stat test when the command is not available.
    + Windows: update SHA2 timestamp server.
    + hdb: add missing export
    hdb_generate_key_set_password_with_ks_tuple.
    + Fix signature of hdb_generate_key_set_password().
    + Windows: enable KX509 support in the KDC.
    + kdc: fix kx509 service principal match.
    + iprop: handle case where master sends nothing new.
    + ipropd-slave: fix incorrect error codes.
    + Allow choice of sqlite for HDB pref.
    + check-iprop: don't fail to kill daemons.
    + roken: pidfile -&gt; rk_pidfile.
    + kdc: _kdc_do_kx509 fix use after free error.
    + Do not detect x32 as 64-bit platform.
    + No sys/ttydefaults.h on CYGWIN.
    + Fix check-iprop races.
    + roken_detach_prep() close pipe.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1501761600">- Update to version 7.4.0
  - Security
  - Fix CVE-2017-11103: Orpheus' Lyre KDC-REP service name
    validation.
    This is a critical vulnerability.
    In _krb5_extract_ticket() the KDC-REP service name must be
    obtained from encrypted version stored in 'enc_part' instead
    of the unencrypted version stored in 'ticket'.
    Use of the unecrypted version provides an opportunity for
    successful server impersonation and other attacks.
    Identified by Jeffrey Altman, Viktor Duchovni and
    Nico Williams.
    See https://www.orpheus-lyre.info/ for more details.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1512648000">- Added Avoid_NULL_structure_pointer_member_dereference.patch,
  fixes (bsc#1071675).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1514548800">- Update to version 7.5.0
  - Security
  - Fix CVE-2017-17439, which is a remote denial of service
    vulnerability:
    In Heimdal 7.1 through 7.4, remote unauthenticated attackers
    are able to crash the KDC by sending a crafted UDP packet
    containing empty data fields for client name or realm.
  - Bug fixes
  - Handle long input lines when reloading database dumps.
  - In pre-forked mode (default on Unix), correctly clear the
    process ids of exited children, allowing new child processes
    to replace the old.
  - Fixed incorrect KDC response when no-cross realm TGT exists,
    allowing client requests to fail quickly rather than time
    out after trying to get a correct answer from each KDC.
- Fixed heimdal-patched.diff.
- Removed Avoid_NULL_structure_pointer_member_dereference.patch,
  fixed upstream.</changelog>
  <changelog author="bwiedemann@suse.com" date="1533643200">- Add reproducible.patch to override build date (boo#1047218)
- Use constant hostname (boo#1084909)</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1561291200">- Update to version 7.7.0
  + Bug fixes:
  - PKCS#11 hcrypto back-end:
    + initialize the p11_module_load function list
    + verify that not only is a mechanism present but that its
    mechanism info states that it offers the required
    encryption, decryption or digest services
  - krb5:
    + Starting with 7.6, Heimdal permitted requesting
    authenticated anonymous tickets. However, it did not
    verify that a KDC in fact returned an anonymous ticket
    when one was requested.
    + Cease setting the KDCOption reaquest_anonymous flag when
    issuing S4UProxy (constrained delegation) TGS requests.
    + when the Win2K PKINIT compatibility option is set, do not
    require krbtgt otherName to match when validating KDC
    certificate.
    + set PKINIT_BTMM flag per Apple implementation
    + use memset_s() instead of memset()
  - kdc:
    + When generating KRB5SignedPath in the AS, use the reply
    client name rather than the one from the request, so
    validation will work correctly in the TGS.
    + allow checksum of PA-FOR-USER to be HMAC_MD5. Even if TGT
    used an enctype with a different checksum. Per [MS-SFU]
    2.2.1 PA-FOR-USER the checksum is always HMAC_MD5, and
    that's what Windows and MIT clients send.
    In Heimdal both the client and kdc use instead the
    checksum of the TGT, and therefore work with each other
    but Windows and MIT clients fail against Heimdal KDC.
    Both Windows and MIT KDC would allow any keyed checksum
    to be used so Heimdal client work fine against it.
    Change Heimdal KDC to allow HMAC_MD5 even for non RC4
    based TGT in order to support per-spec clients.
    + use memset_s() instead of memset()
    + Detect Heimdal 1.0 through 7.6 clients that issue
    S4UProxy (constrained delegation) TGS Requests with the
    request anonymous flag set. These requests will be
    treated as S4UProxy requests and not anonymous requests.
  - HDB:
    + Set SQLite3 backend default page size to 8KB.
    + Add hdb_set_sync() method
  - kadmind:
    + disable HDB sync during database load avoiding
    unnecessary disk i/o.
  - ipropd:
    + disable HDB sync during receive_everything. Doing an
    fsync per-record when receiving the complete HDB is a
    performance disaster. Among other things, if the HDB is
    very large, then one slave receving a full HDB can cause
    other slaves to timeout and, if HDB write activity is
    high enough to cause iprop log truncation, then also need
    full syncs, which leads to a cycle of full syncs for all
    slaves until HDB write activity drops.
    Allowing the iprop log to be larger helps, but improving
    receive_everything() performance helps even more.
  - kinit:
    + Anonymous PKINIT tickets discard the realm information
    used to locate the issuing AS. Store the issuing realm in
    the credentials cache in order to locate a KDC which can
    renew them.
    + Do not leak the result of krb5_cc_get_config() when
    determining anonymous PKINIT start realm.
  - klist:
    + Show transited-policy-checked, ok-as-delegate and
    anonymous flags when listing credentials.
  - tests:
    + Regenerate certs so that they expire before the 2038
    armageddon so the test suite will pass on 32-bit
    operating systems until the underlying issues can be
    resolved.
  - Solaris:
    + Define _STDC_C11_BCI for memset_s prototype
  - build tooling:
    + Convert from python 2 to python 3
  - documentation:
    + rename verify-password to verify-password-quality
    + hprop default mode is encrypt
    + kadmind "all" permission does not include "get-keys"
    + verify-password-quality might not be stateless
- Version 7.6.0
  + Security (#555):
  - CVE-2018-16860 Heimdal KDC: Reject PA-S4U2Self with unkeyed
    checksum
    When the Heimdal KDC checks the checksum that is placed on
    the S4U2Self packet by the server to protect the requested
    principal against modification, it does not confirm that
    the checksum algorithm that protects the user name
    (principal) in the request is keyed. This allows a
    man-in-the-middle attacker who can intercept the request to
    the KDC to modify the packet by replacing the user name
    (principal) in the request with any desired user name
    (principal) that exists in the KDC and replace the checksum
    protecting that name with a CRC32 checksum (which requires
    no prior knowledge to compute).
    This would allow a S4U2Self ticket requested on behalf of
    user name (principal) user@EXAMPLE.COM to any service to be
    changed to a S4U2Self ticket with a user name (principal) of
    Administrator@EXAMPLE.COM. This ticket would then contain
    the PAC of the modified user name (principal).
  - CVE-2019-12098, client-only:
    RFC8062 Section 7 requires verification of the PA-PKINIT-KX
    key exchange when anonymous PKINIT is used. Failure to do
    so can permit an active attacker to become a
    man-in-the-middle.
  + Bug fixes:
  - Happy eyeballs: Don't wait for responses from
    known-unreachable KDCs.
  - kdc:
    + check return copy_Realm, copy_PrincipalName,
    copy_EncryptionKey
  - kinit:
    + cleanup temporary ccaches
    + see man page for "kinit --anonymous" command line syntax
    change
  - kdc:
    + Make anonymous AS-requests more RFC8062-compliant.
    Updated expired test certificates
  - Solaris:
    + PKCS#11 hcrypto backend broken since 7.0.1
    + Building with Sun Pro C
  + Features:
  - kuser: support authenticated anonymous AS-REQs in kinit
  - kdc: support for anonymous TGS-REQs
  - kgetcred support for anonymous service tickets
  - Support builds with OpenSSL 1.1.1
- fixed heimdal-patched.diff and reproducible.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1653480000">- Apply Shared Library Packaging Policy and resolve rpmlint
  errors like "libheimdal.x86_64: E: shlib-policy-name-error
  SONAME: libasn1.so.8, expected package suffix: 8"</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656417600">- Add heimdal-7.7.0-autoconf-2.70.patch: Fix build with autoconf
  2.70 (gh#heimdal/heimdal#856).</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656590400">- Add ldconfig scriptlets.
- Fix 'Conflicts:' tags.
- Remove obsolete macros and conditionals.
- Ran spec-cleaner.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1671624000">- Update to version 7.8.0
  + This release includes both the Heimdal 7.7.1 Security
    Vulnerability fixes and non-Security bug fixes/improvements.
  + Security Vulnerabilities:
  - CVE-2022-42898 PAC parse integer overflows
  - CVE-2022-3437 Overflows and non-constant time leaks in
    DES{,3} and arcfour
  - CVE-2022-41916 Fix Unicode normalization read of 1 bytes past
    end of array
  - CVE-2021-44758 A null pointer de-reference DoS in SPNEGO
    acceptors
  - CVE-2021-3671 A null pointer de-reference when handling
    missing sname in TGS-REQ
  - CVE-2022-44640 Heimdal KDC: invalid free in ASN.1 codec
    Note that CVE-2022-44640 is a severe vulnerability,
    possibly a 10.0 on the Common Vulnerability Scoring
    System (CVSS) v3, as we believe it should be possible to
    get an RCE on a KDC, which means that credentials can be
    compromised that can be used to impersonate anyone in a
    realm or forest of realms.
    Heimdal's ASN.1 compiler generates code that allows
    specially crafted DER encodings of CHOICEs to invoke the
    wrong free function on the decoded structure upon decode
    error. This is known to impact the Heimdal KDC, leading to
    an invalid free() of an address partly or wholly under the
    control of the attacker, in turn leading to a potential
    remote code execution (RCE) vulnerability.
    This error affects the DER codec for all extensible CHOICE
    types used in Heimdal, though not all cases will be
    exploitable. We have not completed a thorough analysis of
    all the Heimdal components affected, thus the Kerberos
    client, the X.509 library, and other parts, may be affected
    as well.
    This bug has been in Heimdal's ASN.1 compiler since 2005,
    but it may only affect Heimdal 1.6 and up. It was first
    reported by Douglas Bagnall, though it had been found
    independently by the Heimdal maintainers via fuzzing a few
    weeks earlier.
    While no zero-day exploit is known, such an exploit will
    likely be available soon after public disclosure.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  + Other changes:
  - Bugs found by UBSAN (including the incorrect encoding of
    unconstrained INTEGER value -1).
  - Errors found by the LLVM scan-build static analyzer.
  - Errors found by the valgrind memory debugger.
  - Work around GCC Bug 95189 (memcmp wrongly stripped like
    strcmp).
  - Correct ASN.1 OID typo for SHA-384
  - Fix a deadlock in in the MEMORY ccache type.
  - TGS: strip forwardable and proxiable flags if the server is
    disallowed.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  - Incremental HDB propagation improvements
    Refactor send_diffs making it progressive
    Handle partial writes on non-blocking sockets
    Disable Nagle in iprop master and slave
    Use async I/O
    Don't send I_HAVE in response to AYT
    Do not recover log in kadm5_get_principal()
    Don't send diffs to slaves with not yet known version
    Don't stutter in send_diffs
  - Optional backwards-compatible anon-pkinit behavior
- Removed heimdal-7.7.0-autoconf-2.70.patch, fixed upstream.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1673352000">- replace libheimdal conflicts by obsoletes / provides to provide a
  smooth update in the new libheimdal-devel.</changelog>
</package>
<package pkgid="bf3c42ad4c1bfef2b93fe67fdc3afe6fb4c1ab589676d6b9899ff6abc03282c1" name="libhcrypto4" arch="s390x">
  <version epoch="0" ver="7.8.0" rel="bp154.2.4.1"/>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1440936000">- Initial package, version 1.6rc2
- Added patch heimdal-version-script-client.map.patch to add file
  version-script-client.map (File is present in git for tag 1.6rc2
  but missing in tarball).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441108800">- Some changes in spec file to enable build for SLES.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441195200">- Added Conflicts tags to spec file because devel package conflicts
  with krb5-devel and krb5-mini-devel.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441454400">- Added a patched instead of the original tarball because only
  shared libraries will be build and source files of these (not to
  be build) programs have problematic licenses.
- Added script heimdal-patch-source.sh to sources.
- Added patch heimdal-patched.diff that fixes configure.ac and
  several Makefile.am files to successfully build patched source.
- Removed unneeded dependencies in spec file for build.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1483790400">- Update to version 7.1.0
- Removed heimdal-version-script-client.map.patch, fixed upstream.
- Fixed heimdal-patched.diff.
- Unfortunately there is no updated changelog file in tarball,
  changes can be seen in source code version control systems
  history log.</changelog>
  <changelog author="jengelh@inai.de" date="1486036800">- Summary and RPM group update. Do a direct call to ldconfig
  where possible.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1497528000">- Update to version 7.3.0
  - Security
    + Fix transit path validation. Commit f469fc6 (2010-10-02)
    inadvertently caused the previous hop realm to not be added
    to the transit path of issued tickets. This may, in some
    cases, enable bypass of capath policy in Heimdal versions 1.5
    through 7.2.
    Note, this may break sites that rely on the bug. With the bug
    some incomplete [capaths] worked, that should not have.
    These may now break authentication in some cross-realm
    configurations. (CVE-2017-6594)
- Version 7.2.0
  - Bug fixes
    + Portability improvements.
    + More strict parsing of encoded URI components in HTTP KDC.
    + Fixed memory leak in malloc error recovery in NTLM GSSAPI
    mechanism.
    + Avoid overly specific CPU info in krb5-config in aid of
    reproducible builds.
    + Don't do AFS string-to-key tests when feature is disabled.
    + Skip mdb_stat test when the command is not available.
    + Windows: update SHA2 timestamp server.
    + hdb: add missing export
    hdb_generate_key_set_password_with_ks_tuple.
    + Fix signature of hdb_generate_key_set_password().
    + Windows: enable KX509 support in the KDC.
    + kdc: fix kx509 service principal match.
    + iprop: handle case where master sends nothing new.
    + ipropd-slave: fix incorrect error codes.
    + Allow choice of sqlite for HDB pref.
    + check-iprop: don't fail to kill daemons.
    + roken: pidfile -&gt; rk_pidfile.
    + kdc: _kdc_do_kx509 fix use after free error.
    + Do not detect x32 as 64-bit platform.
    + No sys/ttydefaults.h on CYGWIN.
    + Fix check-iprop races.
    + roken_detach_prep() close pipe.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1501761600">- Update to version 7.4.0
  - Security
  - Fix CVE-2017-11103: Orpheus' Lyre KDC-REP service name
    validation.
    This is a critical vulnerability.
    In _krb5_extract_ticket() the KDC-REP service name must be
    obtained from encrypted version stored in 'enc_part' instead
    of the unencrypted version stored in 'ticket'.
    Use of the unecrypted version provides an opportunity for
    successful server impersonation and other attacks.
    Identified by Jeffrey Altman, Viktor Duchovni and
    Nico Williams.
    See https://www.orpheus-lyre.info/ for more details.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1512648000">- Added Avoid_NULL_structure_pointer_member_dereference.patch,
  fixes (bsc#1071675).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1514548800">- Update to version 7.5.0
  - Security
  - Fix CVE-2017-17439, which is a remote denial of service
    vulnerability:
    In Heimdal 7.1 through 7.4, remote unauthenticated attackers
    are able to crash the KDC by sending a crafted UDP packet
    containing empty data fields for client name or realm.
  - Bug fixes
  - Handle long input lines when reloading database dumps.
  - In pre-forked mode (default on Unix), correctly clear the
    process ids of exited children, allowing new child processes
    to replace the old.
  - Fixed incorrect KDC response when no-cross realm TGT exists,
    allowing client requests to fail quickly rather than time
    out after trying to get a correct answer from each KDC.
- Fixed heimdal-patched.diff.
- Removed Avoid_NULL_structure_pointer_member_dereference.patch,
  fixed upstream.</changelog>
  <changelog author="bwiedemann@suse.com" date="1533643200">- Add reproducible.patch to override build date (boo#1047218)
- Use constant hostname (boo#1084909)</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1561291200">- Update to version 7.7.0
  + Bug fixes:
  - PKCS#11 hcrypto back-end:
    + initialize the p11_module_load function list
    + verify that not only is a mechanism present but that its
    mechanism info states that it offers the required
    encryption, decryption or digest services
  - krb5:
    + Starting with 7.6, Heimdal permitted requesting
    authenticated anonymous tickets. However, it did not
    verify that a KDC in fact returned an anonymous ticket
    when one was requested.
    + Cease setting the KDCOption reaquest_anonymous flag when
    issuing S4UProxy (constrained delegation) TGS requests.
    + when the Win2K PKINIT compatibility option is set, do not
    require krbtgt otherName to match when validating KDC
    certificate.
    + set PKINIT_BTMM flag per Apple implementation
    + use memset_s() instead of memset()
  - kdc:
    + When generating KRB5SignedPath in the AS, use the reply
    client name rather than the one from the request, so
    validation will work correctly in the TGS.
    + allow checksum of PA-FOR-USER to be HMAC_MD5. Even if TGT
    used an enctype with a different checksum. Per [MS-SFU]
    2.2.1 PA-FOR-USER the checksum is always HMAC_MD5, and
    that's what Windows and MIT clients send.
    In Heimdal both the client and kdc use instead the
    checksum of the TGT, and therefore work with each other
    but Windows and MIT clients fail against Heimdal KDC.
    Both Windows and MIT KDC would allow any keyed checksum
    to be used so Heimdal client work fine against it.
    Change Heimdal KDC to allow HMAC_MD5 even for non RC4
    based TGT in order to support per-spec clients.
    + use memset_s() instead of memset()
    + Detect Heimdal 1.0 through 7.6 clients that issue
    S4UProxy (constrained delegation) TGS Requests with the
    request anonymous flag set. These requests will be
    treated as S4UProxy requests and not anonymous requests.
  - HDB:
    + Set SQLite3 backend default page size to 8KB.
    + Add hdb_set_sync() method
  - kadmind:
    + disable HDB sync during database load avoiding
    unnecessary disk i/o.
  - ipropd:
    + disable HDB sync during receive_everything. Doing an
    fsync per-record when receiving the complete HDB is a
    performance disaster. Among other things, if the HDB is
    very large, then one slave receving a full HDB can cause
    other slaves to timeout and, if HDB write activity is
    high enough to cause iprop log truncation, then also need
    full syncs, which leads to a cycle of full syncs for all
    slaves until HDB write activity drops.
    Allowing the iprop log to be larger helps, but improving
    receive_everything() performance helps even more.
  - kinit:
    + Anonymous PKINIT tickets discard the realm information
    used to locate the issuing AS. Store the issuing realm in
    the credentials cache in order to locate a KDC which can
    renew them.
    + Do not leak the result of krb5_cc_get_config() when
    determining anonymous PKINIT start realm.
  - klist:
    + Show transited-policy-checked, ok-as-delegate and
    anonymous flags when listing credentials.
  - tests:
    + Regenerate certs so that they expire before the 2038
    armageddon so the test suite will pass on 32-bit
    operating systems until the underlying issues can be
    resolved.
  - Solaris:
    + Define _STDC_C11_BCI for memset_s prototype
  - build tooling:
    + Convert from python 2 to python 3
  - documentation:
    + rename verify-password to verify-password-quality
    + hprop default mode is encrypt
    + kadmind "all" permission does not include "get-keys"
    + verify-password-quality might not be stateless
- Version 7.6.0
  + Security (#555):
  - CVE-2018-16860 Heimdal KDC: Reject PA-S4U2Self with unkeyed
    checksum
    When the Heimdal KDC checks the checksum that is placed on
    the S4U2Self packet by the server to protect the requested
    principal against modification, it does not confirm that
    the checksum algorithm that protects the user name
    (principal) in the request is keyed. This allows a
    man-in-the-middle attacker who can intercept the request to
    the KDC to modify the packet by replacing the user name
    (principal) in the request with any desired user name
    (principal) that exists in the KDC and replace the checksum
    protecting that name with a CRC32 checksum (which requires
    no prior knowledge to compute).
    This would allow a S4U2Self ticket requested on behalf of
    user name (principal) user@EXAMPLE.COM to any service to be
    changed to a S4U2Self ticket with a user name (principal) of
    Administrator@EXAMPLE.COM. This ticket would then contain
    the PAC of the modified user name (principal).
  - CVE-2019-12098, client-only:
    RFC8062 Section 7 requires verification of the PA-PKINIT-KX
    key exchange when anonymous PKINIT is used. Failure to do
    so can permit an active attacker to become a
    man-in-the-middle.
  + Bug fixes:
  - Happy eyeballs: Don't wait for responses from
    known-unreachable KDCs.
  - kdc:
    + check return copy_Realm, copy_PrincipalName,
    copy_EncryptionKey
  - kinit:
    + cleanup temporary ccaches
    + see man page for "kinit --anonymous" command line syntax
    change
  - kdc:
    + Make anonymous AS-requests more RFC8062-compliant.
    Updated expired test certificates
  - Solaris:
    + PKCS#11 hcrypto backend broken since 7.0.1
    + Building with Sun Pro C
  + Features:
  - kuser: support authenticated anonymous AS-REQs in kinit
  - kdc: support for anonymous TGS-REQs
  - kgetcred support for anonymous service tickets
  - Support builds with OpenSSL 1.1.1
- fixed heimdal-patched.diff and reproducible.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1653480000">- Apply Shared Library Packaging Policy and resolve rpmlint
  errors like "libheimdal.x86_64: E: shlib-policy-name-error
  SONAME: libasn1.so.8, expected package suffix: 8"</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656417600">- Add heimdal-7.7.0-autoconf-2.70.patch: Fix build with autoconf
  2.70 (gh#heimdal/heimdal#856).</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656590400">- Add ldconfig scriptlets.
- Fix 'Conflicts:' tags.
- Remove obsolete macros and conditionals.
- Ran spec-cleaner.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1671624000">- Update to version 7.8.0
  + This release includes both the Heimdal 7.7.1 Security
    Vulnerability fixes and non-Security bug fixes/improvements.
  + Security Vulnerabilities:
  - CVE-2022-42898 PAC parse integer overflows
  - CVE-2022-3437 Overflows and non-constant time leaks in
    DES{,3} and arcfour
  - CVE-2022-41916 Fix Unicode normalization read of 1 bytes past
    end of array
  - CVE-2021-44758 A null pointer de-reference DoS in SPNEGO
    acceptors
  - CVE-2021-3671 A null pointer de-reference when handling
    missing sname in TGS-REQ
  - CVE-2022-44640 Heimdal KDC: invalid free in ASN.1 codec
    Note that CVE-2022-44640 is a severe vulnerability,
    possibly a 10.0 on the Common Vulnerability Scoring
    System (CVSS) v3, as we believe it should be possible to
    get an RCE on a KDC, which means that credentials can be
    compromised that can be used to impersonate anyone in a
    realm or forest of realms.
    Heimdal's ASN.1 compiler generates code that allows
    specially crafted DER encodings of CHOICEs to invoke the
    wrong free function on the decoded structure upon decode
    error. This is known to impact the Heimdal KDC, leading to
    an invalid free() of an address partly or wholly under the
    control of the attacker, in turn leading to a potential
    remote code execution (RCE) vulnerability.
    This error affects the DER codec for all extensible CHOICE
    types used in Heimdal, though not all cases will be
    exploitable. We have not completed a thorough analysis of
    all the Heimdal components affected, thus the Kerberos
    client, the X.509 library, and other parts, may be affected
    as well.
    This bug has been in Heimdal's ASN.1 compiler since 2005,
    but it may only affect Heimdal 1.6 and up. It was first
    reported by Douglas Bagnall, though it had been found
    independently by the Heimdal maintainers via fuzzing a few
    weeks earlier.
    While no zero-day exploit is known, such an exploit will
    likely be available soon after public disclosure.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  + Other changes:
  - Bugs found by UBSAN (including the incorrect encoding of
    unconstrained INTEGER value -1).
  - Errors found by the LLVM scan-build static analyzer.
  - Errors found by the valgrind memory debugger.
  - Work around GCC Bug 95189 (memcmp wrongly stripped like
    strcmp).
  - Correct ASN.1 OID typo for SHA-384
  - Fix a deadlock in in the MEMORY ccache type.
  - TGS: strip forwardable and proxiable flags if the server is
    disallowed.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  - Incremental HDB propagation improvements
    Refactor send_diffs making it progressive
    Handle partial writes on non-blocking sockets
    Disable Nagle in iprop master and slave
    Use async I/O
    Don't send I_HAVE in response to AYT
    Do not recover log in kadm5_get_principal()
    Don't send diffs to slaves with not yet known version
    Don't stutter in send_diffs
  - Optional backwards-compatible anon-pkinit behavior
- Removed heimdal-7.7.0-autoconf-2.70.patch, fixed upstream.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1673352000">- replace libheimdal conflicts by obsoletes / provides to provide a
  smooth update in the new libheimdal-devel.</changelog>
</package>
<package pkgid="9e658ca51007dee7b46d7974fadbe53a86fa176b6c9136e94b602d9c77a5e995" name="libhcrypto4" arch="x86_64">
  <version epoch="0" ver="7.8.0" rel="bp154.2.4.1"/>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1440936000">- Initial package, version 1.6rc2
- Added patch heimdal-version-script-client.map.patch to add file
  version-script-client.map (File is present in git for tag 1.6rc2
  but missing in tarball).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441108800">- Some changes in spec file to enable build for SLES.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441195200">- Added Conflicts tags to spec file because devel package conflicts
  with krb5-devel and krb5-mini-devel.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441454400">- Added a patched instead of the original tarball because only
  shared libraries will be build and source files of these (not to
  be build) programs have problematic licenses.
- Added script heimdal-patch-source.sh to sources.
- Added patch heimdal-patched.diff that fixes configure.ac and
  several Makefile.am files to successfully build patched source.
- Removed unneeded dependencies in spec file for build.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1483790400">- Update to version 7.1.0
- Removed heimdal-version-script-client.map.patch, fixed upstream.
- Fixed heimdal-patched.diff.
- Unfortunately there is no updated changelog file in tarball,
  changes can be seen in source code version control systems
  history log.</changelog>
  <changelog author="jengelh@inai.de" date="1486036800">- Summary and RPM group update. Do a direct call to ldconfig
  where possible.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1497528000">- Update to version 7.3.0
  - Security
    + Fix transit path validation. Commit f469fc6 (2010-10-02)
    inadvertently caused the previous hop realm to not be added
    to the transit path of issued tickets. This may, in some
    cases, enable bypass of capath policy in Heimdal versions 1.5
    through 7.2.
    Note, this may break sites that rely on the bug. With the bug
    some incomplete [capaths] worked, that should not have.
    These may now break authentication in some cross-realm
    configurations. (CVE-2017-6594)
- Version 7.2.0
  - Bug fixes
    + Portability improvements.
    + More strict parsing of encoded URI components in HTTP KDC.
    + Fixed memory leak in malloc error recovery in NTLM GSSAPI
    mechanism.
    + Avoid overly specific CPU info in krb5-config in aid of
    reproducible builds.
    + Don't do AFS string-to-key tests when feature is disabled.
    + Skip mdb_stat test when the command is not available.
    + Windows: update SHA2 timestamp server.
    + hdb: add missing export
    hdb_generate_key_set_password_with_ks_tuple.
    + Fix signature of hdb_generate_key_set_password().
    + Windows: enable KX509 support in the KDC.
    + kdc: fix kx509 service principal match.
    + iprop: handle case where master sends nothing new.
    + ipropd-slave: fix incorrect error codes.
    + Allow choice of sqlite for HDB pref.
    + check-iprop: don't fail to kill daemons.
    + roken: pidfile -&gt; rk_pidfile.
    + kdc: _kdc_do_kx509 fix use after free error.
    + Do not detect x32 as 64-bit platform.
    + No sys/ttydefaults.h on CYGWIN.
    + Fix check-iprop races.
    + roken_detach_prep() close pipe.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1501761600">- Update to version 7.4.0
  - Security
  - Fix CVE-2017-11103: Orpheus' Lyre KDC-REP service name
    validation.
    This is a critical vulnerability.
    In _krb5_extract_ticket() the KDC-REP service name must be
    obtained from encrypted version stored in 'enc_part' instead
    of the unencrypted version stored in 'ticket'.
    Use of the unecrypted version provides an opportunity for
    successful server impersonation and other attacks.
    Identified by Jeffrey Altman, Viktor Duchovni and
    Nico Williams.
    See https://www.orpheus-lyre.info/ for more details.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1512648000">- Added Avoid_NULL_structure_pointer_member_dereference.patch,
  fixes (bsc#1071675).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1514548800">- Update to version 7.5.0
  - Security
  - Fix CVE-2017-17439, which is a remote denial of service
    vulnerability:
    In Heimdal 7.1 through 7.4, remote unauthenticated attackers
    are able to crash the KDC by sending a crafted UDP packet
    containing empty data fields for client name or realm.
  - Bug fixes
  - Handle long input lines when reloading database dumps.
  - In pre-forked mode (default on Unix), correctly clear the
    process ids of exited children, allowing new child processes
    to replace the old.
  - Fixed incorrect KDC response when no-cross realm TGT exists,
    allowing client requests to fail quickly rather than time
    out after trying to get a correct answer from each KDC.
- Fixed heimdal-patched.diff.
- Removed Avoid_NULL_structure_pointer_member_dereference.patch,
  fixed upstream.</changelog>
  <changelog author="bwiedemann@suse.com" date="1533643200">- Add reproducible.patch to override build date (boo#1047218)
- Use constant hostname (boo#1084909)</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1561291200">- Update to version 7.7.0
  + Bug fixes:
  - PKCS#11 hcrypto back-end:
    + initialize the p11_module_load function list
    + verify that not only is a mechanism present but that its
    mechanism info states that it offers the required
    encryption, decryption or digest services
  - krb5:
    + Starting with 7.6, Heimdal permitted requesting
    authenticated anonymous tickets. However, it did not
    verify that a KDC in fact returned an anonymous ticket
    when one was requested.
    + Cease setting the KDCOption reaquest_anonymous flag when
    issuing S4UProxy (constrained delegation) TGS requests.
    + when the Win2K PKINIT compatibility option is set, do not
    require krbtgt otherName to match when validating KDC
    certificate.
    + set PKINIT_BTMM flag per Apple implementation
    + use memset_s() instead of memset()
  - kdc:
    + When generating KRB5SignedPath in the AS, use the reply
    client name rather than the one from the request, so
    validation will work correctly in the TGS.
    + allow checksum of PA-FOR-USER to be HMAC_MD5. Even if TGT
    used an enctype with a different checksum. Per [MS-SFU]
    2.2.1 PA-FOR-USER the checksum is always HMAC_MD5, and
    that's what Windows and MIT clients send.
    In Heimdal both the client and kdc use instead the
    checksum of the TGT, and therefore work with each other
    but Windows and MIT clients fail against Heimdal KDC.
    Both Windows and MIT KDC would allow any keyed checksum
    to be used so Heimdal client work fine against it.
    Change Heimdal KDC to allow HMAC_MD5 even for non RC4
    based TGT in order to support per-spec clients.
    + use memset_s() instead of memset()
    + Detect Heimdal 1.0 through 7.6 clients that issue
    S4UProxy (constrained delegation) TGS Requests with the
    request anonymous flag set. These requests will be
    treated as S4UProxy requests and not anonymous requests.
  - HDB:
    + Set SQLite3 backend default page size to 8KB.
    + Add hdb_set_sync() method
  - kadmind:
    + disable HDB sync during database load avoiding
    unnecessary disk i/o.
  - ipropd:
    + disable HDB sync during receive_everything. Doing an
    fsync per-record when receiving the complete HDB is a
    performance disaster. Among other things, if the HDB is
    very large, then one slave receving a full HDB can cause
    other slaves to timeout and, if HDB write activity is
    high enough to cause iprop log truncation, then also need
    full syncs, which leads to a cycle of full syncs for all
    slaves until HDB write activity drops.
    Allowing the iprop log to be larger helps, but improving
    receive_everything() performance helps even more.
  - kinit:
    + Anonymous PKINIT tickets discard the realm information
    used to locate the issuing AS. Store the issuing realm in
    the credentials cache in order to locate a KDC which can
    renew them.
    + Do not leak the result of krb5_cc_get_config() when
    determining anonymous PKINIT start realm.
  - klist:
    + Show transited-policy-checked, ok-as-delegate and
    anonymous flags when listing credentials.
  - tests:
    + Regenerate certs so that they expire before the 2038
    armageddon so the test suite will pass on 32-bit
    operating systems until the underlying issues can be
    resolved.
  - Solaris:
    + Define _STDC_C11_BCI for memset_s prototype
  - build tooling:
    + Convert from python 2 to python 3
  - documentation:
    + rename verify-password to verify-password-quality
    + hprop default mode is encrypt
    + kadmind "all" permission does not include "get-keys"
    + verify-password-quality might not be stateless
- Version 7.6.0
  + Security (#555):
  - CVE-2018-16860 Heimdal KDC: Reject PA-S4U2Self with unkeyed
    checksum
    When the Heimdal KDC checks the checksum that is placed on
    the S4U2Self packet by the server to protect the requested
    principal against modification, it does not confirm that
    the checksum algorithm that protects the user name
    (principal) in the request is keyed. This allows a
    man-in-the-middle attacker who can intercept the request to
    the KDC to modify the packet by replacing the user name
    (principal) in the request with any desired user name
    (principal) that exists in the KDC and replace the checksum
    protecting that name with a CRC32 checksum (which requires
    no prior knowledge to compute).
    This would allow a S4U2Self ticket requested on behalf of
    user name (principal) user@EXAMPLE.COM to any service to be
    changed to a S4U2Self ticket with a user name (principal) of
    Administrator@EXAMPLE.COM. This ticket would then contain
    the PAC of the modified user name (principal).
  - CVE-2019-12098, client-only:
    RFC8062 Section 7 requires verification of the PA-PKINIT-KX
    key exchange when anonymous PKINIT is used. Failure to do
    so can permit an active attacker to become a
    man-in-the-middle.
  + Bug fixes:
  - Happy eyeballs: Don't wait for responses from
    known-unreachable KDCs.
  - kdc:
    + check return copy_Realm, copy_PrincipalName,
    copy_EncryptionKey
  - kinit:
    + cleanup temporary ccaches
    + see man page for "kinit --anonymous" command line syntax
    change
  - kdc:
    + Make anonymous AS-requests more RFC8062-compliant.
    Updated expired test certificates
  - Solaris:
    + PKCS#11 hcrypto backend broken since 7.0.1
    + Building with Sun Pro C
  + Features:
  - kuser: support authenticated anonymous AS-REQs in kinit
  - kdc: support for anonymous TGS-REQs
  - kgetcred support for anonymous service tickets
  - Support builds with OpenSSL 1.1.1
- fixed heimdal-patched.diff and reproducible.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1653480000">- Apply Shared Library Packaging Policy and resolve rpmlint
  errors like "libheimdal.x86_64: E: shlib-policy-name-error
  SONAME: libasn1.so.8, expected package suffix: 8"</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656417600">- Add heimdal-7.7.0-autoconf-2.70.patch: Fix build with autoconf
  2.70 (gh#heimdal/heimdal#856).</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656590400">- Add ldconfig scriptlets.
- Fix 'Conflicts:' tags.
- Remove obsolete macros and conditionals.
- Ran spec-cleaner.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1671624000">- Update to version 7.8.0
  + This release includes both the Heimdal 7.7.1 Security
    Vulnerability fixes and non-Security bug fixes/improvements.
  + Security Vulnerabilities:
  - CVE-2022-42898 PAC parse integer overflows
  - CVE-2022-3437 Overflows and non-constant time leaks in
    DES{,3} and arcfour
  - CVE-2022-41916 Fix Unicode normalization read of 1 bytes past
    end of array
  - CVE-2021-44758 A null pointer de-reference DoS in SPNEGO
    acceptors
  - CVE-2021-3671 A null pointer de-reference when handling
    missing sname in TGS-REQ
  - CVE-2022-44640 Heimdal KDC: invalid free in ASN.1 codec
    Note that CVE-2022-44640 is a severe vulnerability,
    possibly a 10.0 on the Common Vulnerability Scoring
    System (CVSS) v3, as we believe it should be possible to
    get an RCE on a KDC, which means that credentials can be
    compromised that can be used to impersonate anyone in a
    realm or forest of realms.
    Heimdal's ASN.1 compiler generates code that allows
    specially crafted DER encodings of CHOICEs to invoke the
    wrong free function on the decoded structure upon decode
    error. This is known to impact the Heimdal KDC, leading to
    an invalid free() of an address partly or wholly under the
    control of the attacker, in turn leading to a potential
    remote code execution (RCE) vulnerability.
    This error affects the DER codec for all extensible CHOICE
    types used in Heimdal, though not all cases will be
    exploitable. We have not completed a thorough analysis of
    all the Heimdal components affected, thus the Kerberos
    client, the X.509 library, and other parts, may be affected
    as well.
    This bug has been in Heimdal's ASN.1 compiler since 2005,
    but it may only affect Heimdal 1.6 and up. It was first
    reported by Douglas Bagnall, though it had been found
    independently by the Heimdal maintainers via fuzzing a few
    weeks earlier.
    While no zero-day exploit is known, such an exploit will
    likely be available soon after public disclosure.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  + Other changes:
  - Bugs found by UBSAN (including the incorrect encoding of
    unconstrained INTEGER value -1).
  - Errors found by the LLVM scan-build static analyzer.
  - Errors found by the valgrind memory debugger.
  - Work around GCC Bug 95189 (memcmp wrongly stripped like
    strcmp).
  - Correct ASN.1 OID typo for SHA-384
  - Fix a deadlock in in the MEMORY ccache type.
  - TGS: strip forwardable and proxiable flags if the server is
    disallowed.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  - Incremental HDB propagation improvements
    Refactor send_diffs making it progressive
    Handle partial writes on non-blocking sockets
    Disable Nagle in iprop master and slave
    Use async I/O
    Don't send I_HAVE in response to AYT
    Do not recover log in kadm5_get_principal()
    Don't send diffs to slaves with not yet known version
    Don't stutter in send_diffs
  - Optional backwards-compatible anon-pkinit behavior
- Removed heimdal-7.7.0-autoconf-2.70.patch, fixed upstream.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1673352000">- replace libheimdal conflicts by obsoletes / provides to provide a
  smooth update in the new libheimdal-devel.</changelog>
</package>
<package pkgid="f827244d465be0a1c0c660e64da4ccd5441294f43c5f5a46a215d948e61441a1" name="libhdb9" arch="aarch64">
  <version epoch="0" ver="7.8.0" rel="bp154.2.4.1"/>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1440936000">- Initial package, version 1.6rc2
- Added patch heimdal-version-script-client.map.patch to add file
  version-script-client.map (File is present in git for tag 1.6rc2
  but missing in tarball).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441108800">- Some changes in spec file to enable build for SLES.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441195200">- Added Conflicts tags to spec file because devel package conflicts
  with krb5-devel and krb5-mini-devel.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441454400">- Added a patched instead of the original tarball because only
  shared libraries will be build and source files of these (not to
  be build) programs have problematic licenses.
- Added script heimdal-patch-source.sh to sources.
- Added patch heimdal-patched.diff that fixes configure.ac and
  several Makefile.am files to successfully build patched source.
- Removed unneeded dependencies in spec file for build.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1483790400">- Update to version 7.1.0
- Removed heimdal-version-script-client.map.patch, fixed upstream.
- Fixed heimdal-patched.diff.
- Unfortunately there is no updated changelog file in tarball,
  changes can be seen in source code version control systems
  history log.</changelog>
  <changelog author="jengelh@inai.de" date="1486036800">- Summary and RPM group update. Do a direct call to ldconfig
  where possible.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1497528000">- Update to version 7.3.0
  - Security
    + Fix transit path validation. Commit f469fc6 (2010-10-02)
    inadvertently caused the previous hop realm to not be added
    to the transit path of issued tickets. This may, in some
    cases, enable bypass of capath policy in Heimdal versions 1.5
    through 7.2.
    Note, this may break sites that rely on the bug. With the bug
    some incomplete [capaths] worked, that should not have.
    These may now break authentication in some cross-realm
    configurations. (CVE-2017-6594)
- Version 7.2.0
  - Bug fixes
    + Portability improvements.
    + More strict parsing of encoded URI components in HTTP KDC.
    + Fixed memory leak in malloc error recovery in NTLM GSSAPI
    mechanism.
    + Avoid overly specific CPU info in krb5-config in aid of
    reproducible builds.
    + Don't do AFS string-to-key tests when feature is disabled.
    + Skip mdb_stat test when the command is not available.
    + Windows: update SHA2 timestamp server.
    + hdb: add missing export
    hdb_generate_key_set_password_with_ks_tuple.
    + Fix signature of hdb_generate_key_set_password().
    + Windows: enable KX509 support in the KDC.
    + kdc: fix kx509 service principal match.
    + iprop: handle case where master sends nothing new.
    + ipropd-slave: fix incorrect error codes.
    + Allow choice of sqlite for HDB pref.
    + check-iprop: don't fail to kill daemons.
    + roken: pidfile -&gt; rk_pidfile.
    + kdc: _kdc_do_kx509 fix use after free error.
    + Do not detect x32 as 64-bit platform.
    + No sys/ttydefaults.h on CYGWIN.
    + Fix check-iprop races.
    + roken_detach_prep() close pipe.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1501761600">- Update to version 7.4.0
  - Security
  - Fix CVE-2017-11103: Orpheus' Lyre KDC-REP service name
    validation.
    This is a critical vulnerability.
    In _krb5_extract_ticket() the KDC-REP service name must be
    obtained from encrypted version stored in 'enc_part' instead
    of the unencrypted version stored in 'ticket'.
    Use of the unecrypted version provides an opportunity for
    successful server impersonation and other attacks.
    Identified by Jeffrey Altman, Viktor Duchovni and
    Nico Williams.
    See https://www.orpheus-lyre.info/ for more details.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1512648000">- Added Avoid_NULL_structure_pointer_member_dereference.patch,
  fixes (bsc#1071675).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1514548800">- Update to version 7.5.0
  - Security
  - Fix CVE-2017-17439, which is a remote denial of service
    vulnerability:
    In Heimdal 7.1 through 7.4, remote unauthenticated attackers
    are able to crash the KDC by sending a crafted UDP packet
    containing empty data fields for client name or realm.
  - Bug fixes
  - Handle long input lines when reloading database dumps.
  - In pre-forked mode (default on Unix), correctly clear the
    process ids of exited children, allowing new child processes
    to replace the old.
  - Fixed incorrect KDC response when no-cross realm TGT exists,
    allowing client requests to fail quickly rather than time
    out after trying to get a correct answer from each KDC.
- Fixed heimdal-patched.diff.
- Removed Avoid_NULL_structure_pointer_member_dereference.patch,
  fixed upstream.</changelog>
  <changelog author="bwiedemann@suse.com" date="1533643200">- Add reproducible.patch to override build date (boo#1047218)
- Use constant hostname (boo#1084909)</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1561291200">- Update to version 7.7.0
  + Bug fixes:
  - PKCS#11 hcrypto back-end:
    + initialize the p11_module_load function list
    + verify that not only is a mechanism present but that its
    mechanism info states that it offers the required
    encryption, decryption or digest services
  - krb5:
    + Starting with 7.6, Heimdal permitted requesting
    authenticated anonymous tickets. However, it did not
    verify that a KDC in fact returned an anonymous ticket
    when one was requested.
    + Cease setting the KDCOption reaquest_anonymous flag when
    issuing S4UProxy (constrained delegation) TGS requests.
    + when the Win2K PKINIT compatibility option is set, do not
    require krbtgt otherName to match when validating KDC
    certificate.
    + set PKINIT_BTMM flag per Apple implementation
    + use memset_s() instead of memset()
  - kdc:
    + When generating KRB5SignedPath in the AS, use the reply
    client name rather than the one from the request, so
    validation will work correctly in the TGS.
    + allow checksum of PA-FOR-USER to be HMAC_MD5. Even if TGT
    used an enctype with a different checksum. Per [MS-SFU]
    2.2.1 PA-FOR-USER the checksum is always HMAC_MD5, and
    that's what Windows and MIT clients send.
    In Heimdal both the client and kdc use instead the
    checksum of the TGT, and therefore work with each other
    but Windows and MIT clients fail against Heimdal KDC.
    Both Windows and MIT KDC would allow any keyed checksum
    to be used so Heimdal client work fine against it.
    Change Heimdal KDC to allow HMAC_MD5 even for non RC4
    based TGT in order to support per-spec clients.
    + use memset_s() instead of memset()
    + Detect Heimdal 1.0 through 7.6 clients that issue
    S4UProxy (constrained delegation) TGS Requests with the
    request anonymous flag set. These requests will be
    treated as S4UProxy requests and not anonymous requests.
  - HDB:
    + Set SQLite3 backend default page size to 8KB.
    + Add hdb_set_sync() method
  - kadmind:
    + disable HDB sync during database load avoiding
    unnecessary disk i/o.
  - ipropd:
    + disable HDB sync during receive_everything. Doing an
    fsync per-record when receiving the complete HDB is a
    performance disaster. Among other things, if the HDB is
    very large, then one slave receving a full HDB can cause
    other slaves to timeout and, if HDB write activity is
    high enough to cause iprop log truncation, then also need
    full syncs, which leads to a cycle of full syncs for all
    slaves until HDB write activity drops.
    Allowing the iprop log to be larger helps, but improving
    receive_everything() performance helps even more.
  - kinit:
    + Anonymous PKINIT tickets discard the realm information
    used to locate the issuing AS. Store the issuing realm in
    the credentials cache in order to locate a KDC which can
    renew them.
    + Do not leak the result of krb5_cc_get_config() when
    determining anonymous PKINIT start realm.
  - klist:
    + Show transited-policy-checked, ok-as-delegate and
    anonymous flags when listing credentials.
  - tests:
    + Regenerate certs so that they expire before the 2038
    armageddon so the test suite will pass on 32-bit
    operating systems until the underlying issues can be
    resolved.
  - Solaris:
    + Define _STDC_C11_BCI for memset_s prototype
  - build tooling:
    + Convert from python 2 to python 3
  - documentation:
    + rename verify-password to verify-password-quality
    + hprop default mode is encrypt
    + kadmind "all" permission does not include "get-keys"
    + verify-password-quality might not be stateless
- Version 7.6.0
  + Security (#555):
  - CVE-2018-16860 Heimdal KDC: Reject PA-S4U2Self with unkeyed
    checksum
    When the Heimdal KDC checks the checksum that is placed on
    the S4U2Self packet by the server to protect the requested
    principal against modification, it does not confirm that
    the checksum algorithm that protects the user name
    (principal) in the request is keyed. This allows a
    man-in-the-middle attacker who can intercept the request to
    the KDC to modify the packet by replacing the user name
    (principal) in the request with any desired user name
    (principal) that exists in the KDC and replace the checksum
    protecting that name with a CRC32 checksum (which requires
    no prior knowledge to compute).
    This would allow a S4U2Self ticket requested on behalf of
    user name (principal) user@EXAMPLE.COM to any service to be
    changed to a S4U2Self ticket with a user name (principal) of
    Administrator@EXAMPLE.COM. This ticket would then contain
    the PAC of the modified user name (principal).
  - CVE-2019-12098, client-only:
    RFC8062 Section 7 requires verification of the PA-PKINIT-KX
    key exchange when anonymous PKINIT is used. Failure to do
    so can permit an active attacker to become a
    man-in-the-middle.
  + Bug fixes:
  - Happy eyeballs: Don't wait for responses from
    known-unreachable KDCs.
  - kdc:
    + check return copy_Realm, copy_PrincipalName,
    copy_EncryptionKey
  - kinit:
    + cleanup temporary ccaches
    + see man page for "kinit --anonymous" command line syntax
    change
  - kdc:
    + Make anonymous AS-requests more RFC8062-compliant.
    Updated expired test certificates
  - Solaris:
    + PKCS#11 hcrypto backend broken since 7.0.1
    + Building with Sun Pro C
  + Features:
  - kuser: support authenticated anonymous AS-REQs in kinit
  - kdc: support for anonymous TGS-REQs
  - kgetcred support for anonymous service tickets
  - Support builds with OpenSSL 1.1.1
- fixed heimdal-patched.diff and reproducible.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1653480000">- Apply Shared Library Packaging Policy and resolve rpmlint
  errors like "libheimdal.x86_64: E: shlib-policy-name-error
  SONAME: libasn1.so.8, expected package suffix: 8"</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656417600">- Add heimdal-7.7.0-autoconf-2.70.patch: Fix build with autoconf
  2.70 (gh#heimdal/heimdal#856).</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656590400">- Add ldconfig scriptlets.
- Fix 'Conflicts:' tags.
- Remove obsolete macros and conditionals.
- Ran spec-cleaner.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1671624000">- Update to version 7.8.0
  + This release includes both the Heimdal 7.7.1 Security
    Vulnerability fixes and non-Security bug fixes/improvements.
  + Security Vulnerabilities:
  - CVE-2022-42898 PAC parse integer overflows
  - CVE-2022-3437 Overflows and non-constant time leaks in
    DES{,3} and arcfour
  - CVE-2022-41916 Fix Unicode normalization read of 1 bytes past
    end of array
  - CVE-2021-44758 A null pointer de-reference DoS in SPNEGO
    acceptors
  - CVE-2021-3671 A null pointer de-reference when handling
    missing sname in TGS-REQ
  - CVE-2022-44640 Heimdal KDC: invalid free in ASN.1 codec
    Note that CVE-2022-44640 is a severe vulnerability,
    possibly a 10.0 on the Common Vulnerability Scoring
    System (CVSS) v3, as we believe it should be possible to
    get an RCE on a KDC, which means that credentials can be
    compromised that can be used to impersonate anyone in a
    realm or forest of realms.
    Heimdal's ASN.1 compiler generates code that allows
    specially crafted DER encodings of CHOICEs to invoke the
    wrong free function on the decoded structure upon decode
    error. This is known to impact the Heimdal KDC, leading to
    an invalid free() of an address partly or wholly under the
    control of the attacker, in turn leading to a potential
    remote code execution (RCE) vulnerability.
    This error affects the DER codec for all extensible CHOICE
    types used in Heimdal, though not all cases will be
    exploitable. We have not completed a thorough analysis of
    all the Heimdal components affected, thus the Kerberos
    client, the X.509 library, and other parts, may be affected
    as well.
    This bug has been in Heimdal's ASN.1 compiler since 2005,
    but it may only affect Heimdal 1.6 and up. It was first
    reported by Douglas Bagnall, though it had been found
    independently by the Heimdal maintainers via fuzzing a few
    weeks earlier.
    While no zero-day exploit is known, such an exploit will
    likely be available soon after public disclosure.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  + Other changes:
  - Bugs found by UBSAN (including the incorrect encoding of
    unconstrained INTEGER value -1).
  - Errors found by the LLVM scan-build static analyzer.
  - Errors found by the valgrind memory debugger.
  - Work around GCC Bug 95189 (memcmp wrongly stripped like
    strcmp).
  - Correct ASN.1 OID typo for SHA-384
  - Fix a deadlock in in the MEMORY ccache type.
  - TGS: strip forwardable and proxiable flags if the server is
    disallowed.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  - Incremental HDB propagation improvements
    Refactor send_diffs making it progressive
    Handle partial writes on non-blocking sockets
    Disable Nagle in iprop master and slave
    Use async I/O
    Don't send I_HAVE in response to AYT
    Do not recover log in kadm5_get_principal()
    Don't send diffs to slaves with not yet known version
    Don't stutter in send_diffs
  - Optional backwards-compatible anon-pkinit behavior
- Removed heimdal-7.7.0-autoconf-2.70.patch, fixed upstream.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1673352000">- replace libheimdal conflicts by obsoletes / provides to provide a
  smooth update in the new libheimdal-devel.</changelog>
</package>
<package pkgid="dd38375997d462e4d19404598f9fba1d6222d28bf2530296f0208df435eab28c" name="libhdb9" arch="i586">
  <version epoch="0" ver="7.8.0" rel="bp154.2.4.1"/>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1440936000">- Initial package, version 1.6rc2
- Added patch heimdal-version-script-client.map.patch to add file
  version-script-client.map (File is present in git for tag 1.6rc2
  but missing in tarball).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441108800">- Some changes in spec file to enable build for SLES.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441195200">- Added Conflicts tags to spec file because devel package conflicts
  with krb5-devel and krb5-mini-devel.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441454400">- Added a patched instead of the original tarball because only
  shared libraries will be build and source files of these (not to
  be build) programs have problematic licenses.
- Added script heimdal-patch-source.sh to sources.
- Added patch heimdal-patched.diff that fixes configure.ac and
  several Makefile.am files to successfully build patched source.
- Removed unneeded dependencies in spec file for build.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1483790400">- Update to version 7.1.0
- Removed heimdal-version-script-client.map.patch, fixed upstream.
- Fixed heimdal-patched.diff.
- Unfortunately there is no updated changelog file in tarball,
  changes can be seen in source code version control systems
  history log.</changelog>
  <changelog author="jengelh@inai.de" date="1486036800">- Summary and RPM group update. Do a direct call to ldconfig
  where possible.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1497528000">- Update to version 7.3.0
  - Security
    + Fix transit path validation. Commit f469fc6 (2010-10-02)
    inadvertently caused the previous hop realm to not be added
    to the transit path of issued tickets. This may, in some
    cases, enable bypass of capath policy in Heimdal versions 1.5
    through 7.2.
    Note, this may break sites that rely on the bug. With the bug
    some incomplete [capaths] worked, that should not have.
    These may now break authentication in some cross-realm
    configurations. (CVE-2017-6594)
- Version 7.2.0
  - Bug fixes
    + Portability improvements.
    + More strict parsing of encoded URI components in HTTP KDC.
    + Fixed memory leak in malloc error recovery in NTLM GSSAPI
    mechanism.
    + Avoid overly specific CPU info in krb5-config in aid of
    reproducible builds.
    + Don't do AFS string-to-key tests when feature is disabled.
    + Skip mdb_stat test when the command is not available.
    + Windows: update SHA2 timestamp server.
    + hdb: add missing export
    hdb_generate_key_set_password_with_ks_tuple.
    + Fix signature of hdb_generate_key_set_password().
    + Windows: enable KX509 support in the KDC.
    + kdc: fix kx509 service principal match.
    + iprop: handle case where master sends nothing new.
    + ipropd-slave: fix incorrect error codes.
    + Allow choice of sqlite for HDB pref.
    + check-iprop: don't fail to kill daemons.
    + roken: pidfile -&gt; rk_pidfile.
    + kdc: _kdc_do_kx509 fix use after free error.
    + Do not detect x32 as 64-bit platform.
    + No sys/ttydefaults.h on CYGWIN.
    + Fix check-iprop races.
    + roken_detach_prep() close pipe.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1501761600">- Update to version 7.4.0
  - Security
  - Fix CVE-2017-11103: Orpheus' Lyre KDC-REP service name
    validation.
    This is a critical vulnerability.
    In _krb5_extract_ticket() the KDC-REP service name must be
    obtained from encrypted version stored in 'enc_part' instead
    of the unencrypted version stored in 'ticket'.
    Use of the unecrypted version provides an opportunity for
    successful server impersonation and other attacks.
    Identified by Jeffrey Altman, Viktor Duchovni and
    Nico Williams.
    See https://www.orpheus-lyre.info/ for more details.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1512648000">- Added Avoid_NULL_structure_pointer_member_dereference.patch,
  fixes (bsc#1071675).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1514548800">- Update to version 7.5.0
  - Security
  - Fix CVE-2017-17439, which is a remote denial of service
    vulnerability:
    In Heimdal 7.1 through 7.4, remote unauthenticated attackers
    are able to crash the KDC by sending a crafted UDP packet
    containing empty data fields for client name or realm.
  - Bug fixes
  - Handle long input lines when reloading database dumps.
  - In pre-forked mode (default on Unix), correctly clear the
    process ids of exited children, allowing new child processes
    to replace the old.
  - Fixed incorrect KDC response when no-cross realm TGT exists,
    allowing client requests to fail quickly rather than time
    out after trying to get a correct answer from each KDC.
- Fixed heimdal-patched.diff.
- Removed Avoid_NULL_structure_pointer_member_dereference.patch,
  fixed upstream.</changelog>
  <changelog author="bwiedemann@suse.com" date="1533643200">- Add reproducible.patch to override build date (boo#1047218)
- Use constant hostname (boo#1084909)</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1561291200">- Update to version 7.7.0
  + Bug fixes:
  - PKCS#11 hcrypto back-end:
    + initialize the p11_module_load function list
    + verify that not only is a mechanism present but that its
    mechanism info states that it offers the required
    encryption, decryption or digest services
  - krb5:
    + Starting with 7.6, Heimdal permitted requesting
    authenticated anonymous tickets. However, it did not
    verify that a KDC in fact returned an anonymous ticket
    when one was requested.
    + Cease setting the KDCOption reaquest_anonymous flag when
    issuing S4UProxy (constrained delegation) TGS requests.
    + when the Win2K PKINIT compatibility option is set, do not
    require krbtgt otherName to match when validating KDC
    certificate.
    + set PKINIT_BTMM flag per Apple implementation
    + use memset_s() instead of memset()
  - kdc:
    + When generating KRB5SignedPath in the AS, use the reply
    client name rather than the one from the request, so
    validation will work correctly in the TGS.
    + allow checksum of PA-FOR-USER to be HMAC_MD5. Even if TGT
    used an enctype with a different checksum. Per [MS-SFU]
    2.2.1 PA-FOR-USER the checksum is always HMAC_MD5, and
    that's what Windows and MIT clients send.
    In Heimdal both the client and kdc use instead the
    checksum of the TGT, and therefore work with each other
    but Windows and MIT clients fail against Heimdal KDC.
    Both Windows and MIT KDC would allow any keyed checksum
    to be used so Heimdal client work fine against it.
    Change Heimdal KDC to allow HMAC_MD5 even for non RC4
    based TGT in order to support per-spec clients.
    + use memset_s() instead of memset()
    + Detect Heimdal 1.0 through 7.6 clients that issue
    S4UProxy (constrained delegation) TGS Requests with the
    request anonymous flag set. These requests will be
    treated as S4UProxy requests and not anonymous requests.
  - HDB:
    + Set SQLite3 backend default page size to 8KB.
    + Add hdb_set_sync() method
  - kadmind:
    + disable HDB sync during database load avoiding
    unnecessary disk i/o.
  - ipropd:
    + disable HDB sync during receive_everything. Doing an
    fsync per-record when receiving the complete HDB is a
    performance disaster. Among other things, if the HDB is
    very large, then one slave receving a full HDB can cause
    other slaves to timeout and, if HDB write activity is
    high enough to cause iprop log truncation, then also need
    full syncs, which leads to a cycle of full syncs for all
    slaves until HDB write activity drops.
    Allowing the iprop log to be larger helps, but improving
    receive_everything() performance helps even more.
  - kinit:
    + Anonymous PKINIT tickets discard the realm information
    used to locate the issuing AS. Store the issuing realm in
    the credentials cache in order to locate a KDC which can
    renew them.
    + Do not leak the result of krb5_cc_get_config() when
    determining anonymous PKINIT start realm.
  - klist:
    + Show transited-policy-checked, ok-as-delegate and
    anonymous flags when listing credentials.
  - tests:
    + Regenerate certs so that they expire before the 2038
    armageddon so the test suite will pass on 32-bit
    operating systems until the underlying issues can be
    resolved.
  - Solaris:
    + Define _STDC_C11_BCI for memset_s prototype
  - build tooling:
    + Convert from python 2 to python 3
  - documentation:
    + rename verify-password to verify-password-quality
    + hprop default mode is encrypt
    + kadmind "all" permission does not include "get-keys"
    + verify-password-quality might not be stateless
- Version 7.6.0
  + Security (#555):
  - CVE-2018-16860 Heimdal KDC: Reject PA-S4U2Self with unkeyed
    checksum
    When the Heimdal KDC checks the checksum that is placed on
    the S4U2Self packet by the server to protect the requested
    principal against modification, it does not confirm that
    the checksum algorithm that protects the user name
    (principal) in the request is keyed. This allows a
    man-in-the-middle attacker who can intercept the request to
    the KDC to modify the packet by replacing the user name
    (principal) in the request with any desired user name
    (principal) that exists in the KDC and replace the checksum
    protecting that name with a CRC32 checksum (which requires
    no prior knowledge to compute).
    This would allow a S4U2Self ticket requested on behalf of
    user name (principal) user@EXAMPLE.COM to any service to be
    changed to a S4U2Self ticket with a user name (principal) of
    Administrator@EXAMPLE.COM. This ticket would then contain
    the PAC of the modified user name (principal).
  - CVE-2019-12098, client-only:
    RFC8062 Section 7 requires verification of the PA-PKINIT-KX
    key exchange when anonymous PKINIT is used. Failure to do
    so can permit an active attacker to become a
    man-in-the-middle.
  + Bug fixes:
  - Happy eyeballs: Don't wait for responses from
    known-unreachable KDCs.
  - kdc:
    + check return copy_Realm, copy_PrincipalName,
    copy_EncryptionKey
  - kinit:
    + cleanup temporary ccaches
    + see man page for "kinit --anonymous" command line syntax
    change
  - kdc:
    + Make anonymous AS-requests more RFC8062-compliant.
    Updated expired test certificates
  - Solaris:
    + PKCS#11 hcrypto backend broken since 7.0.1
    + Building with Sun Pro C
  + Features:
  - kuser: support authenticated anonymous AS-REQs in kinit
  - kdc: support for anonymous TGS-REQs
  - kgetcred support for anonymous service tickets
  - Support builds with OpenSSL 1.1.1
- fixed heimdal-patched.diff and reproducible.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1653480000">- Apply Shared Library Packaging Policy and resolve rpmlint
  errors like "libheimdal.x86_64: E: shlib-policy-name-error
  SONAME: libasn1.so.8, expected package suffix: 8"</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656417600">- Add heimdal-7.7.0-autoconf-2.70.patch: Fix build with autoconf
  2.70 (gh#heimdal/heimdal#856).</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656590400">- Add ldconfig scriptlets.
- Fix 'Conflicts:' tags.
- Remove obsolete macros and conditionals.
- Ran spec-cleaner.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1671624000">- Update to version 7.8.0
  + This release includes both the Heimdal 7.7.1 Security
    Vulnerability fixes and non-Security bug fixes/improvements.
  + Security Vulnerabilities:
  - CVE-2022-42898 PAC parse integer overflows
  - CVE-2022-3437 Overflows and non-constant time leaks in
    DES{,3} and arcfour
  - CVE-2022-41916 Fix Unicode normalization read of 1 bytes past
    end of array
  - CVE-2021-44758 A null pointer de-reference DoS in SPNEGO
    acceptors
  - CVE-2021-3671 A null pointer de-reference when handling
    missing sname in TGS-REQ
  - CVE-2022-44640 Heimdal KDC: invalid free in ASN.1 codec
    Note that CVE-2022-44640 is a severe vulnerability,
    possibly a 10.0 on the Common Vulnerability Scoring
    System (CVSS) v3, as we believe it should be possible to
    get an RCE on a KDC, which means that credentials can be
    compromised that can be used to impersonate anyone in a
    realm or forest of realms.
    Heimdal's ASN.1 compiler generates code that allows
    specially crafted DER encodings of CHOICEs to invoke the
    wrong free function on the decoded structure upon decode
    error. This is known to impact the Heimdal KDC, leading to
    an invalid free() of an address partly or wholly under the
    control of the attacker, in turn leading to a potential
    remote code execution (RCE) vulnerability.
    This error affects the DER codec for all extensible CHOICE
    types used in Heimdal, though not all cases will be
    exploitable. We have not completed a thorough analysis of
    all the Heimdal components affected, thus the Kerberos
    client, the X.509 library, and other parts, may be affected
    as well.
    This bug has been in Heimdal's ASN.1 compiler since 2005,
    but it may only affect Heimdal 1.6 and up. It was first
    reported by Douglas Bagnall, though it had been found
    independently by the Heimdal maintainers via fuzzing a few
    weeks earlier.
    While no zero-day exploit is known, such an exploit will
    likely be available soon after public disclosure.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  + Other changes:
  - Bugs found by UBSAN (including the incorrect encoding of
    unconstrained INTEGER value -1).
  - Errors found by the LLVM scan-build static analyzer.
  - Errors found by the valgrind memory debugger.
  - Work around GCC Bug 95189 (memcmp wrongly stripped like
    strcmp).
  - Correct ASN.1 OID typo for SHA-384
  - Fix a deadlock in in the MEMORY ccache type.
  - TGS: strip forwardable and proxiable flags if the server is
    disallowed.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  - Incremental HDB propagation improvements
    Refactor send_diffs making it progressive
    Handle partial writes on non-blocking sockets
    Disable Nagle in iprop master and slave
    Use async I/O
    Don't send I_HAVE in response to AYT
    Do not recover log in kadm5_get_principal()
    Don't send diffs to slaves with not yet known version
    Don't stutter in send_diffs
  - Optional backwards-compatible anon-pkinit behavior
- Removed heimdal-7.7.0-autoconf-2.70.patch, fixed upstream.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1673352000">- replace libheimdal conflicts by obsoletes / provides to provide a
  smooth update in the new libheimdal-devel.</changelog>
</package>
<package pkgid="7b4fc77d07d8ae0d06ed4e3a76b6468933bcc9673c0d6e1b624ff6b508c96a58" name="libhdb9" arch="ppc64le">
  <version epoch="0" ver="7.8.0" rel="bp154.2.4.1"/>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1440936000">- Initial package, version 1.6rc2
- Added patch heimdal-version-script-client.map.patch to add file
  version-script-client.map (File is present in git for tag 1.6rc2
  but missing in tarball).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441108800">- Some changes in spec file to enable build for SLES.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441195200">- Added Conflicts tags to spec file because devel package conflicts
  with krb5-devel and krb5-mini-devel.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441454400">- Added a patched instead of the original tarball because only
  shared libraries will be build and source files of these (not to
  be build) programs have problematic licenses.
- Added script heimdal-patch-source.sh to sources.
- Added patch heimdal-patched.diff that fixes configure.ac and
  several Makefile.am files to successfully build patched source.
- Removed unneeded dependencies in spec file for build.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1483790400">- Update to version 7.1.0
- Removed heimdal-version-script-client.map.patch, fixed upstream.
- Fixed heimdal-patched.diff.
- Unfortunately there is no updated changelog file in tarball,
  changes can be seen in source code version control systems
  history log.</changelog>
  <changelog author="jengelh@inai.de" date="1486036800">- Summary and RPM group update. Do a direct call to ldconfig
  where possible.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1497528000">- Update to version 7.3.0
  - Security
    + Fix transit path validation. Commit f469fc6 (2010-10-02)
    inadvertently caused the previous hop realm to not be added
    to the transit path of issued tickets. This may, in some
    cases, enable bypass of capath policy in Heimdal versions 1.5
    through 7.2.
    Note, this may break sites that rely on the bug. With the bug
    some incomplete [capaths] worked, that should not have.
    These may now break authentication in some cross-realm
    configurations. (CVE-2017-6594)
- Version 7.2.0
  - Bug fixes
    + Portability improvements.
    + More strict parsing of encoded URI components in HTTP KDC.
    + Fixed memory leak in malloc error recovery in NTLM GSSAPI
    mechanism.
    + Avoid overly specific CPU info in krb5-config in aid of
    reproducible builds.
    + Don't do AFS string-to-key tests when feature is disabled.
    + Skip mdb_stat test when the command is not available.
    + Windows: update SHA2 timestamp server.
    + hdb: add missing export
    hdb_generate_key_set_password_with_ks_tuple.
    + Fix signature of hdb_generate_key_set_password().
    + Windows: enable KX509 support in the KDC.
    + kdc: fix kx509 service principal match.
    + iprop: handle case where master sends nothing new.
    + ipropd-slave: fix incorrect error codes.
    + Allow choice of sqlite for HDB pref.
    + check-iprop: don't fail to kill daemons.
    + roken: pidfile -&gt; rk_pidfile.
    + kdc: _kdc_do_kx509 fix use after free error.
    + Do not detect x32 as 64-bit platform.
    + No sys/ttydefaults.h on CYGWIN.
    + Fix check-iprop races.
    + roken_detach_prep() close pipe.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1501761600">- Update to version 7.4.0
  - Security
  - Fix CVE-2017-11103: Orpheus' Lyre KDC-REP service name
    validation.
    This is a critical vulnerability.
    In _krb5_extract_ticket() the KDC-REP service name must be
    obtained from encrypted version stored in 'enc_part' instead
    of the unencrypted version stored in 'ticket'.
    Use of the unecrypted version provides an opportunity for
    successful server impersonation and other attacks.
    Identified by Jeffrey Altman, Viktor Duchovni and
    Nico Williams.
    See https://www.orpheus-lyre.info/ for more details.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1512648000">- Added Avoid_NULL_structure_pointer_member_dereference.patch,
  fixes (bsc#1071675).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1514548800">- Update to version 7.5.0
  - Security
  - Fix CVE-2017-17439, which is a remote denial of service
    vulnerability:
    In Heimdal 7.1 through 7.4, remote unauthenticated attackers
    are able to crash the KDC by sending a crafted UDP packet
    containing empty data fields for client name or realm.
  - Bug fixes
  - Handle long input lines when reloading database dumps.
  - In pre-forked mode (default on Unix), correctly clear the
    process ids of exited children, allowing new child processes
    to replace the old.
  - Fixed incorrect KDC response when no-cross realm TGT exists,
    allowing client requests to fail quickly rather than time
    out after trying to get a correct answer from each KDC.
- Fixed heimdal-patched.diff.
- Removed Avoid_NULL_structure_pointer_member_dereference.patch,
  fixed upstream.</changelog>
  <changelog author="bwiedemann@suse.com" date="1533643200">- Add reproducible.patch to override build date (boo#1047218)
- Use constant hostname (boo#1084909)</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1561291200">- Update to version 7.7.0
  + Bug fixes:
  - PKCS#11 hcrypto back-end:
    + initialize the p11_module_load function list
    + verify that not only is a mechanism present but that its
    mechanism info states that it offers the required
    encryption, decryption or digest services
  - krb5:
    + Starting with 7.6, Heimdal permitted requesting
    authenticated anonymous tickets. However, it did not
    verify that a KDC in fact returned an anonymous ticket
    when one was requested.
    + Cease setting the KDCOption reaquest_anonymous flag when
    issuing S4UProxy (constrained delegation) TGS requests.
    + when the Win2K PKINIT compatibility option is set, do not
    require krbtgt otherName to match when validating KDC
    certificate.
    + set PKINIT_BTMM flag per Apple implementation
    + use memset_s() instead of memset()
  - kdc:
    + When generating KRB5SignedPath in the AS, use the reply
    client name rather than the one from the request, so
    validation will work correctly in the TGS.
    + allow checksum of PA-FOR-USER to be HMAC_MD5. Even if TGT
    used an enctype with a different checksum. Per [MS-SFU]
    2.2.1 PA-FOR-USER the checksum is always HMAC_MD5, and
    that's what Windows and MIT clients send.
    In Heimdal both the client and kdc use instead the
    checksum of the TGT, and therefore work with each other
    but Windows and MIT clients fail against Heimdal KDC.
    Both Windows and MIT KDC would allow any keyed checksum
    to be used so Heimdal client work fine against it.
    Change Heimdal KDC to allow HMAC_MD5 even for non RC4
    based TGT in order to support per-spec clients.
    + use memset_s() instead of memset()
    + Detect Heimdal 1.0 through 7.6 clients that issue
    S4UProxy (constrained delegation) TGS Requests with the
    request anonymous flag set. These requests will be
    treated as S4UProxy requests and not anonymous requests.
  - HDB:
    + Set SQLite3 backend default page size to 8KB.
    + Add hdb_set_sync() method
  - kadmind:
    + disable HDB sync during database load avoiding
    unnecessary disk i/o.
  - ipropd:
    + disable HDB sync during receive_everything. Doing an
    fsync per-record when receiving the complete HDB is a
    performance disaster. Among other things, if the HDB is
    very large, then one slave receving a full HDB can cause
    other slaves to timeout and, if HDB write activity is
    high enough to cause iprop log truncation, then also need
    full syncs, which leads to a cycle of full syncs for all
    slaves until HDB write activity drops.
    Allowing the iprop log to be larger helps, but improving
    receive_everything() performance helps even more.
  - kinit:
    + Anonymous PKINIT tickets discard the realm information
    used to locate the issuing AS. Store the issuing realm in
    the credentials cache in order to locate a KDC which can
    renew them.
    + Do not leak the result of krb5_cc_get_config() when
    determining anonymous PKINIT start realm.
  - klist:
    + Show transited-policy-checked, ok-as-delegate and
    anonymous flags when listing credentials.
  - tests:
    + Regenerate certs so that they expire before the 2038
    armageddon so the test suite will pass on 32-bit
    operating systems until the underlying issues can be
    resolved.
  - Solaris:
    + Define _STDC_C11_BCI for memset_s prototype
  - build tooling:
    + Convert from python 2 to python 3
  - documentation:
    + rename verify-password to verify-password-quality
    + hprop default mode is encrypt
    + kadmind "all" permission does not include "get-keys"
    + verify-password-quality might not be stateless
- Version 7.6.0
  + Security (#555):
  - CVE-2018-16860 Heimdal KDC: Reject PA-S4U2Self with unkeyed
    checksum
    When the Heimdal KDC checks the checksum that is placed on
    the S4U2Self packet by the server to protect the requested
    principal against modification, it does not confirm that
    the checksum algorithm that protects the user name
    (principal) in the request is keyed. This allows a
    man-in-the-middle attacker who can intercept the request to
    the KDC to modify the packet by replacing the user name
    (principal) in the request with any desired user name
    (principal) that exists in the KDC and replace the checksum
    protecting that name with a CRC32 checksum (which requires
    no prior knowledge to compute).
    This would allow a S4U2Self ticket requested on behalf of
    user name (principal) user@EXAMPLE.COM to any service to be
    changed to a S4U2Self ticket with a user name (principal) of
    Administrator@EXAMPLE.COM. This ticket would then contain
    the PAC of the modified user name (principal).
  - CVE-2019-12098, client-only:
    RFC8062 Section 7 requires verification of the PA-PKINIT-KX
    key exchange when anonymous PKINIT is used. Failure to do
    so can permit an active attacker to become a
    man-in-the-middle.
  + Bug fixes:
  - Happy eyeballs: Don't wait for responses from
    known-unreachable KDCs.
  - kdc:
    + check return copy_Realm, copy_PrincipalName,
    copy_EncryptionKey
  - kinit:
    + cleanup temporary ccaches
    + see man page for "kinit --anonymous" command line syntax
    change
  - kdc:
    + Make anonymous AS-requests more RFC8062-compliant.
    Updated expired test certificates
  - Solaris:
    + PKCS#11 hcrypto backend broken since 7.0.1
    + Building with Sun Pro C
  + Features:
  - kuser: support authenticated anonymous AS-REQs in kinit
  - kdc: support for anonymous TGS-REQs
  - kgetcred support for anonymous service tickets
  - Support builds with OpenSSL 1.1.1
- fixed heimdal-patched.diff and reproducible.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1653480000">- Apply Shared Library Packaging Policy and resolve rpmlint
  errors like "libheimdal.x86_64: E: shlib-policy-name-error
  SONAME: libasn1.so.8, expected package suffix: 8"</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656417600">- Add heimdal-7.7.0-autoconf-2.70.patch: Fix build with autoconf
  2.70 (gh#heimdal/heimdal#856).</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656590400">- Add ldconfig scriptlets.
- Fix 'Conflicts:' tags.
- Remove obsolete macros and conditionals.
- Ran spec-cleaner.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1671624000">- Update to version 7.8.0
  + This release includes both the Heimdal 7.7.1 Security
    Vulnerability fixes and non-Security bug fixes/improvements.
  + Security Vulnerabilities:
  - CVE-2022-42898 PAC parse integer overflows
  - CVE-2022-3437 Overflows and non-constant time leaks in
    DES{,3} and arcfour
  - CVE-2022-41916 Fix Unicode normalization read of 1 bytes past
    end of array
  - CVE-2021-44758 A null pointer de-reference DoS in SPNEGO
    acceptors
  - CVE-2021-3671 A null pointer de-reference when handling
    missing sname in TGS-REQ
  - CVE-2022-44640 Heimdal KDC: invalid free in ASN.1 codec
    Note that CVE-2022-44640 is a severe vulnerability,
    possibly a 10.0 on the Common Vulnerability Scoring
    System (CVSS) v3, as we believe it should be possible to
    get an RCE on a KDC, which means that credentials can be
    compromised that can be used to impersonate anyone in a
    realm or forest of realms.
    Heimdal's ASN.1 compiler generates code that allows
    specially crafted DER encodings of CHOICEs to invoke the
    wrong free function on the decoded structure upon decode
    error. This is known to impact the Heimdal KDC, leading to
    an invalid free() of an address partly or wholly under the
    control of the attacker, in turn leading to a potential
    remote code execution (RCE) vulnerability.
    This error affects the DER codec for all extensible CHOICE
    types used in Heimdal, though not all cases will be
    exploitable. We have not completed a thorough analysis of
    all the Heimdal components affected, thus the Kerberos
    client, the X.509 library, and other parts, may be affected
    as well.
    This bug has been in Heimdal's ASN.1 compiler since 2005,
    but it may only affect Heimdal 1.6 and up. It was first
    reported by Douglas Bagnall, though it had been found
    independently by the Heimdal maintainers via fuzzing a few
    weeks earlier.
    While no zero-day exploit is known, such an exploit will
    likely be available soon after public disclosure.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  + Other changes:
  - Bugs found by UBSAN (including the incorrect encoding of
    unconstrained INTEGER value -1).
  - Errors found by the LLVM scan-build static analyzer.
  - Errors found by the valgrind memory debugger.
  - Work around GCC Bug 95189 (memcmp wrongly stripped like
    strcmp).
  - Correct ASN.1 OID typo for SHA-384
  - Fix a deadlock in in the MEMORY ccache type.
  - TGS: strip forwardable and proxiable flags if the server is
    disallowed.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  - Incremental HDB propagation improvements
    Refactor send_diffs making it progressive
    Handle partial writes on non-blocking sockets
    Disable Nagle in iprop master and slave
    Use async I/O
    Don't send I_HAVE in response to AYT
    Do not recover log in kadm5_get_principal()
    Don't send diffs to slaves with not yet known version
    Don't stutter in send_diffs
  - Optional backwards-compatible anon-pkinit behavior
- Removed heimdal-7.7.0-autoconf-2.70.patch, fixed upstream.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1673352000">- replace libheimdal conflicts by obsoletes / provides to provide a
  smooth update in the new libheimdal-devel.</changelog>
</package>
<package pkgid="23d6114971a552c408c44a00e07bbd9bc16cb699f9275c8b52c481e38a0213da" name="libhdb9" arch="s390x">
  <version epoch="0" ver="7.8.0" rel="bp154.2.4.1"/>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1440936000">- Initial package, version 1.6rc2
- Added patch heimdal-version-script-client.map.patch to add file
  version-script-client.map (File is present in git for tag 1.6rc2
  but missing in tarball).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441108800">- Some changes in spec file to enable build for SLES.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441195200">- Added Conflicts tags to spec file because devel package conflicts
  with krb5-devel and krb5-mini-devel.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441454400">- Added a patched instead of the original tarball because only
  shared libraries will be build and source files of these (not to
  be build) programs have problematic licenses.
- Added script heimdal-patch-source.sh to sources.
- Added patch heimdal-patched.diff that fixes configure.ac and
  several Makefile.am files to successfully build patched source.
- Removed unneeded dependencies in spec file for build.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1483790400">- Update to version 7.1.0
- Removed heimdal-version-script-client.map.patch, fixed upstream.
- Fixed heimdal-patched.diff.
- Unfortunately there is no updated changelog file in tarball,
  changes can be seen in source code version control systems
  history log.</changelog>
  <changelog author="jengelh@inai.de" date="1486036800">- Summary and RPM group update. Do a direct call to ldconfig
  where possible.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1497528000">- Update to version 7.3.0
  - Security
    + Fix transit path validation. Commit f469fc6 (2010-10-02)
    inadvertently caused the previous hop realm to not be added
    to the transit path of issued tickets. This may, in some
    cases, enable bypass of capath policy in Heimdal versions 1.5
    through 7.2.
    Note, this may break sites that rely on the bug. With the bug
    some incomplete [capaths] worked, that should not have.
    These may now break authentication in some cross-realm
    configurations. (CVE-2017-6594)
- Version 7.2.0
  - Bug fixes
    + Portability improvements.
    + More strict parsing of encoded URI components in HTTP KDC.
    + Fixed memory leak in malloc error recovery in NTLM GSSAPI
    mechanism.
    + Avoid overly specific CPU info in krb5-config in aid of
    reproducible builds.
    + Don't do AFS string-to-key tests when feature is disabled.
    + Skip mdb_stat test when the command is not available.
    + Windows: update SHA2 timestamp server.
    + hdb: add missing export
    hdb_generate_key_set_password_with_ks_tuple.
    + Fix signature of hdb_generate_key_set_password().
    + Windows: enable KX509 support in the KDC.
    + kdc: fix kx509 service principal match.
    + iprop: handle case where master sends nothing new.
    + ipropd-slave: fix incorrect error codes.
    + Allow choice of sqlite for HDB pref.
    + check-iprop: don't fail to kill daemons.
    + roken: pidfile -&gt; rk_pidfile.
    + kdc: _kdc_do_kx509 fix use after free error.
    + Do not detect x32 as 64-bit platform.
    + No sys/ttydefaults.h on CYGWIN.
    + Fix check-iprop races.
    + roken_detach_prep() close pipe.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1501761600">- Update to version 7.4.0
  - Security
  - Fix CVE-2017-11103: Orpheus' Lyre KDC-REP service name
    validation.
    This is a critical vulnerability.
    In _krb5_extract_ticket() the KDC-REP service name must be
    obtained from encrypted version stored in 'enc_part' instead
    of the unencrypted version stored in 'ticket'.
    Use of the unecrypted version provides an opportunity for
    successful server impersonation and other attacks.
    Identified by Jeffrey Altman, Viktor Duchovni and
    Nico Williams.
    See https://www.orpheus-lyre.info/ for more details.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1512648000">- Added Avoid_NULL_structure_pointer_member_dereference.patch,
  fixes (bsc#1071675).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1514548800">- Update to version 7.5.0
  - Security
  - Fix CVE-2017-17439, which is a remote denial of service
    vulnerability:
    In Heimdal 7.1 through 7.4, remote unauthenticated attackers
    are able to crash the KDC by sending a crafted UDP packet
    containing empty data fields for client name or realm.
  - Bug fixes
  - Handle long input lines when reloading database dumps.
  - In pre-forked mode (default on Unix), correctly clear the
    process ids of exited children, allowing new child processes
    to replace the old.
  - Fixed incorrect KDC response when no-cross realm TGT exists,
    allowing client requests to fail quickly rather than time
    out after trying to get a correct answer from each KDC.
- Fixed heimdal-patched.diff.
- Removed Avoid_NULL_structure_pointer_member_dereference.patch,
  fixed upstream.</changelog>
  <changelog author="bwiedemann@suse.com" date="1533643200">- Add reproducible.patch to override build date (boo#1047218)
- Use constant hostname (boo#1084909)</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1561291200">- Update to version 7.7.0
  + Bug fixes:
  - PKCS#11 hcrypto back-end:
    + initialize the p11_module_load function list
    + verify that not only is a mechanism present but that its
    mechanism info states that it offers the required
    encryption, decryption or digest services
  - krb5:
    + Starting with 7.6, Heimdal permitted requesting
    authenticated anonymous tickets. However, it did not
    verify that a KDC in fact returned an anonymous ticket
    when one was requested.
    + Cease setting the KDCOption reaquest_anonymous flag when
    issuing S4UProxy (constrained delegation) TGS requests.
    + when the Win2K PKINIT compatibility option is set, do not
    require krbtgt otherName to match when validating KDC
    certificate.
    + set PKINIT_BTMM flag per Apple implementation
    + use memset_s() instead of memset()
  - kdc:
    + When generating KRB5SignedPath in the AS, use the reply
    client name rather than the one from the request, so
    validation will work correctly in the TGS.
    + allow checksum of PA-FOR-USER to be HMAC_MD5. Even if TGT
    used an enctype with a different checksum. Per [MS-SFU]
    2.2.1 PA-FOR-USER the checksum is always HMAC_MD5, and
    that's what Windows and MIT clients send.
    In Heimdal both the client and kdc use instead the
    checksum of the TGT, and therefore work with each other
    but Windows and MIT clients fail against Heimdal KDC.
    Both Windows and MIT KDC would allow any keyed checksum
    to be used so Heimdal client work fine against it.
    Change Heimdal KDC to allow HMAC_MD5 even for non RC4
    based TGT in order to support per-spec clients.
    + use memset_s() instead of memset()
    + Detect Heimdal 1.0 through 7.6 clients that issue
    S4UProxy (constrained delegation) TGS Requests with the
    request anonymous flag set. These requests will be
    treated as S4UProxy requests and not anonymous requests.
  - HDB:
    + Set SQLite3 backend default page size to 8KB.
    + Add hdb_set_sync() method
  - kadmind:
    + disable HDB sync during database load avoiding
    unnecessary disk i/o.
  - ipropd:
    + disable HDB sync during receive_everything. Doing an
    fsync per-record when receiving the complete HDB is a
    performance disaster. Among other things, if the HDB is
    very large, then one slave receving a full HDB can cause
    other slaves to timeout and, if HDB write activity is
    high enough to cause iprop log truncation, then also need
    full syncs, which leads to a cycle of full syncs for all
    slaves until HDB write activity drops.
    Allowing the iprop log to be larger helps, but improving
    receive_everything() performance helps even more.
  - kinit:
    + Anonymous PKINIT tickets discard the realm information
    used to locate the issuing AS. Store the issuing realm in
    the credentials cache in order to locate a KDC which can
    renew them.
    + Do not leak the result of krb5_cc_get_config() when
    determining anonymous PKINIT start realm.
  - klist:
    + Show transited-policy-checked, ok-as-delegate and
    anonymous flags when listing credentials.
  - tests:
    + Regenerate certs so that they expire before the 2038
    armageddon so the test suite will pass on 32-bit
    operating systems until the underlying issues can be
    resolved.
  - Solaris:
    + Define _STDC_C11_BCI for memset_s prototype
  - build tooling:
    + Convert from python 2 to python 3
  - documentation:
    + rename verify-password to verify-password-quality
    + hprop default mode is encrypt
    + kadmind "all" permission does not include "get-keys"
    + verify-password-quality might not be stateless
- Version 7.6.0
  + Security (#555):
  - CVE-2018-16860 Heimdal KDC: Reject PA-S4U2Self with unkeyed
    checksum
    When the Heimdal KDC checks the checksum that is placed on
    the S4U2Self packet by the server to protect the requested
    principal against modification, it does not confirm that
    the checksum algorithm that protects the user name
    (principal) in the request is keyed. This allows a
    man-in-the-middle attacker who can intercept the request to
    the KDC to modify the packet by replacing the user name
    (principal) in the request with any desired user name
    (principal) that exists in the KDC and replace the checksum
    protecting that name with a CRC32 checksum (which requires
    no prior knowledge to compute).
    This would allow a S4U2Self ticket requested on behalf of
    user name (principal) user@EXAMPLE.COM to any service to be
    changed to a S4U2Self ticket with a user name (principal) of
    Administrator@EXAMPLE.COM. This ticket would then contain
    the PAC of the modified user name (principal).
  - CVE-2019-12098, client-only:
    RFC8062 Section 7 requires verification of the PA-PKINIT-KX
    key exchange when anonymous PKINIT is used. Failure to do
    so can permit an active attacker to become a
    man-in-the-middle.
  + Bug fixes:
  - Happy eyeballs: Don't wait for responses from
    known-unreachable KDCs.
  - kdc:
    + check return copy_Realm, copy_PrincipalName,
    copy_EncryptionKey
  - kinit:
    + cleanup temporary ccaches
    + see man page for "kinit --anonymous" command line syntax
    change
  - kdc:
    + Make anonymous AS-requests more RFC8062-compliant.
    Updated expired test certificates
  - Solaris:
    + PKCS#11 hcrypto backend broken since 7.0.1
    + Building with Sun Pro C
  + Features:
  - kuser: support authenticated anonymous AS-REQs in kinit
  - kdc: support for anonymous TGS-REQs
  - kgetcred support for anonymous service tickets
  - Support builds with OpenSSL 1.1.1
- fixed heimdal-patched.diff and reproducible.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1653480000">- Apply Shared Library Packaging Policy and resolve rpmlint
  errors like "libheimdal.x86_64: E: shlib-policy-name-error
  SONAME: libasn1.so.8, expected package suffix: 8"</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656417600">- Add heimdal-7.7.0-autoconf-2.70.patch: Fix build with autoconf
  2.70 (gh#heimdal/heimdal#856).</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656590400">- Add ldconfig scriptlets.
- Fix 'Conflicts:' tags.
- Remove obsolete macros and conditionals.
- Ran spec-cleaner.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1671624000">- Update to version 7.8.0
  + This release includes both the Heimdal 7.7.1 Security
    Vulnerability fixes and non-Security bug fixes/improvements.
  + Security Vulnerabilities:
  - CVE-2022-42898 PAC parse integer overflows
  - CVE-2022-3437 Overflows and non-constant time leaks in
    DES{,3} and arcfour
  - CVE-2022-41916 Fix Unicode normalization read of 1 bytes past
    end of array
  - CVE-2021-44758 A null pointer de-reference DoS in SPNEGO
    acceptors
  - CVE-2021-3671 A null pointer de-reference when handling
    missing sname in TGS-REQ
  - CVE-2022-44640 Heimdal KDC: invalid free in ASN.1 codec
    Note that CVE-2022-44640 is a severe vulnerability,
    possibly a 10.0 on the Common Vulnerability Scoring
    System (CVSS) v3, as we believe it should be possible to
    get an RCE on a KDC, which means that credentials can be
    compromised that can be used to impersonate anyone in a
    realm or forest of realms.
    Heimdal's ASN.1 compiler generates code that allows
    specially crafted DER encodings of CHOICEs to invoke the
    wrong free function on the decoded structure upon decode
    error. This is known to impact the Heimdal KDC, leading to
    an invalid free() of an address partly or wholly under the
    control of the attacker, in turn leading to a potential
    remote code execution (RCE) vulnerability.
    This error affects the DER codec for all extensible CHOICE
    types used in Heimdal, though not all cases will be
    exploitable. We have not completed a thorough analysis of
    all the Heimdal components affected, thus the Kerberos
    client, the X.509 library, and other parts, may be affected
    as well.
    This bug has been in Heimdal's ASN.1 compiler since 2005,
    but it may only affect Heimdal 1.6 and up. It was first
    reported by Douglas Bagnall, though it had been found
    independently by the Heimdal maintainers via fuzzing a few
    weeks earlier.
    While no zero-day exploit is known, such an exploit will
    likely be available soon after public disclosure.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  + Other changes:
  - Bugs found by UBSAN (including the incorrect encoding of
    unconstrained INTEGER value -1).
  - Errors found by the LLVM scan-build static analyzer.
  - Errors found by the valgrind memory debugger.
  - Work around GCC Bug 95189 (memcmp wrongly stripped like
    strcmp).
  - Correct ASN.1 OID typo for SHA-384
  - Fix a deadlock in in the MEMORY ccache type.
  - TGS: strip forwardable and proxiable flags if the server is
    disallowed.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  - Incremental HDB propagation improvements
    Refactor send_diffs making it progressive
    Handle partial writes on non-blocking sockets
    Disable Nagle in iprop master and slave
    Use async I/O
    Don't send I_HAVE in response to AYT
    Do not recover log in kadm5_get_principal()
    Don't send diffs to slaves with not yet known version
    Don't stutter in send_diffs
  - Optional backwards-compatible anon-pkinit behavior
- Removed heimdal-7.7.0-autoconf-2.70.patch, fixed upstream.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1673352000">- replace libheimdal conflicts by obsoletes / provides to provide a
  smooth update in the new libheimdal-devel.</changelog>
</package>
<package pkgid="940e9d3b033e11c03766ce67e4131521eb085f7f1d16ad5d4b7f16725850d4eb" name="libhdb9" arch="x86_64">
  <version epoch="0" ver="7.8.0" rel="bp154.2.4.1"/>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1440936000">- Initial package, version 1.6rc2
- Added patch heimdal-version-script-client.map.patch to add file
  version-script-client.map (File is present in git for tag 1.6rc2
  but missing in tarball).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441108800">- Some changes in spec file to enable build for SLES.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441195200">- Added Conflicts tags to spec file because devel package conflicts
  with krb5-devel and krb5-mini-devel.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441454400">- Added a patched instead of the original tarball because only
  shared libraries will be build and source files of these (not to
  be build) programs have problematic licenses.
- Added script heimdal-patch-source.sh to sources.
- Added patch heimdal-patched.diff that fixes configure.ac and
  several Makefile.am files to successfully build patched source.
- Removed unneeded dependencies in spec file for build.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1483790400">- Update to version 7.1.0
- Removed heimdal-version-script-client.map.patch, fixed upstream.
- Fixed heimdal-patched.diff.
- Unfortunately there is no updated changelog file in tarball,
  changes can be seen in source code version control systems
  history log.</changelog>
  <changelog author="jengelh@inai.de" date="1486036800">- Summary and RPM group update. Do a direct call to ldconfig
  where possible.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1497528000">- Update to version 7.3.0
  - Security
    + Fix transit path validation. Commit f469fc6 (2010-10-02)
    inadvertently caused the previous hop realm to not be added
    to the transit path of issued tickets. This may, in some
    cases, enable bypass of capath policy in Heimdal versions 1.5
    through 7.2.
    Note, this may break sites that rely on the bug. With the bug
    some incomplete [capaths] worked, that should not have.
    These may now break authentication in some cross-realm
    configurations. (CVE-2017-6594)
- Version 7.2.0
  - Bug fixes
    + Portability improvements.
    + More strict parsing of encoded URI components in HTTP KDC.
    + Fixed memory leak in malloc error recovery in NTLM GSSAPI
    mechanism.
    + Avoid overly specific CPU info in krb5-config in aid of
    reproducible builds.
    + Don't do AFS string-to-key tests when feature is disabled.
    + Skip mdb_stat test when the command is not available.
    + Windows: update SHA2 timestamp server.
    + hdb: add missing export
    hdb_generate_key_set_password_with_ks_tuple.
    + Fix signature of hdb_generate_key_set_password().
    + Windows: enable KX509 support in the KDC.
    + kdc: fix kx509 service principal match.
    + iprop: handle case where master sends nothing new.
    + ipropd-slave: fix incorrect error codes.
    + Allow choice of sqlite for HDB pref.
    + check-iprop: don't fail to kill daemons.
    + roken: pidfile -&gt; rk_pidfile.
    + kdc: _kdc_do_kx509 fix use after free error.
    + Do not detect x32 as 64-bit platform.
    + No sys/ttydefaults.h on CYGWIN.
    + Fix check-iprop races.
    + roken_detach_prep() close pipe.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1501761600">- Update to version 7.4.0
  - Security
  - Fix CVE-2017-11103: Orpheus' Lyre KDC-REP service name
    validation.
    This is a critical vulnerability.
    In _krb5_extract_ticket() the KDC-REP service name must be
    obtained from encrypted version stored in 'enc_part' instead
    of the unencrypted version stored in 'ticket'.
    Use of the unecrypted version provides an opportunity for
    successful server impersonation and other attacks.
    Identified by Jeffrey Altman, Viktor Duchovni and
    Nico Williams.
    See https://www.orpheus-lyre.info/ for more details.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1512648000">- Added Avoid_NULL_structure_pointer_member_dereference.patch,
  fixes (bsc#1071675).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1514548800">- Update to version 7.5.0
  - Security
  - Fix CVE-2017-17439, which is a remote denial of service
    vulnerability:
    In Heimdal 7.1 through 7.4, remote unauthenticated attackers
    are able to crash the KDC by sending a crafted UDP packet
    containing empty data fields for client name or realm.
  - Bug fixes
  - Handle long input lines when reloading database dumps.
  - In pre-forked mode (default on Unix), correctly clear the
    process ids of exited children, allowing new child processes
    to replace the old.
  - Fixed incorrect KDC response when no-cross realm TGT exists,
    allowing client requests to fail quickly rather than time
    out after trying to get a correct answer from each KDC.
- Fixed heimdal-patched.diff.
- Removed Avoid_NULL_structure_pointer_member_dereference.patch,
  fixed upstream.</changelog>
  <changelog author="bwiedemann@suse.com" date="1533643200">- Add reproducible.patch to override build date (boo#1047218)
- Use constant hostname (boo#1084909)</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1561291200">- Update to version 7.7.0
  + Bug fixes:
  - PKCS#11 hcrypto back-end:
    + initialize the p11_module_load function list
    + verify that not only is a mechanism present but that its
    mechanism info states that it offers the required
    encryption, decryption or digest services
  - krb5:
    + Starting with 7.6, Heimdal permitted requesting
    authenticated anonymous tickets. However, it did not
    verify that a KDC in fact returned an anonymous ticket
    when one was requested.
    + Cease setting the KDCOption reaquest_anonymous flag when
    issuing S4UProxy (constrained delegation) TGS requests.
    + when the Win2K PKINIT compatibility option is set, do not
    require krbtgt otherName to match when validating KDC
    certificate.
    + set PKINIT_BTMM flag per Apple implementation
    + use memset_s() instead of memset()
  - kdc:
    + When generating KRB5SignedPath in the AS, use the reply
    client name rather than the one from the request, so
    validation will work correctly in the TGS.
    + allow checksum of PA-FOR-USER to be HMAC_MD5. Even if TGT
    used an enctype with a different checksum. Per [MS-SFU]
    2.2.1 PA-FOR-USER the checksum is always HMAC_MD5, and
    that's what Windows and MIT clients send.
    In Heimdal both the client and kdc use instead the
    checksum of the TGT, and therefore work with each other
    but Windows and MIT clients fail against Heimdal KDC.
    Both Windows and MIT KDC would allow any keyed checksum
    to be used so Heimdal client work fine against it.
    Change Heimdal KDC to allow HMAC_MD5 even for non RC4
    based TGT in order to support per-spec clients.
    + use memset_s() instead of memset()
    + Detect Heimdal 1.0 through 7.6 clients that issue
    S4UProxy (constrained delegation) TGS Requests with the
    request anonymous flag set. These requests will be
    treated as S4UProxy requests and not anonymous requests.
  - HDB:
    + Set SQLite3 backend default page size to 8KB.
    + Add hdb_set_sync() method
  - kadmind:
    + disable HDB sync during database load avoiding
    unnecessary disk i/o.
  - ipropd:
    + disable HDB sync during receive_everything. Doing an
    fsync per-record when receiving the complete HDB is a
    performance disaster. Among other things, if the HDB is
    very large, then one slave receving a full HDB can cause
    other slaves to timeout and, if HDB write activity is
    high enough to cause iprop log truncation, then also need
    full syncs, which leads to a cycle of full syncs for all
    slaves until HDB write activity drops.
    Allowing the iprop log to be larger helps, but improving
    receive_everything() performance helps even more.
  - kinit:
    + Anonymous PKINIT tickets discard the realm information
    used to locate the issuing AS. Store the issuing realm in
    the credentials cache in order to locate a KDC which can
    renew them.
    + Do not leak the result of krb5_cc_get_config() when
    determining anonymous PKINIT start realm.
  - klist:
    + Show transited-policy-checked, ok-as-delegate and
    anonymous flags when listing credentials.
  - tests:
    + Regenerate certs so that they expire before the 2038
    armageddon so the test suite will pass on 32-bit
    operating systems until the underlying issues can be
    resolved.
  - Solaris:
    + Define _STDC_C11_BCI for memset_s prototype
  - build tooling:
    + Convert from python 2 to python 3
  - documentation:
    + rename verify-password to verify-password-quality
    + hprop default mode is encrypt
    + kadmind "all" permission does not include "get-keys"
    + verify-password-quality might not be stateless
- Version 7.6.0
  + Security (#555):
  - CVE-2018-16860 Heimdal KDC: Reject PA-S4U2Self with unkeyed
    checksum
    When the Heimdal KDC checks the checksum that is placed on
    the S4U2Self packet by the server to protect the requested
    principal against modification, it does not confirm that
    the checksum algorithm that protects the user name
    (principal) in the request is keyed. This allows a
    man-in-the-middle attacker who can intercept the request to
    the KDC to modify the packet by replacing the user name
    (principal) in the request with any desired user name
    (principal) that exists in the KDC and replace the checksum
    protecting that name with a CRC32 checksum (which requires
    no prior knowledge to compute).
    This would allow a S4U2Self ticket requested on behalf of
    user name (principal) user@EXAMPLE.COM to any service to be
    changed to a S4U2Self ticket with a user name (principal) of
    Administrator@EXAMPLE.COM. This ticket would then contain
    the PAC of the modified user name (principal).
  - CVE-2019-12098, client-only:
    RFC8062 Section 7 requires verification of the PA-PKINIT-KX
    key exchange when anonymous PKINIT is used. Failure to do
    so can permit an active attacker to become a
    man-in-the-middle.
  + Bug fixes:
  - Happy eyeballs: Don't wait for responses from
    known-unreachable KDCs.
  - kdc:
    + check return copy_Realm, copy_PrincipalName,
    copy_EncryptionKey
  - kinit:
    + cleanup temporary ccaches
    + see man page for "kinit --anonymous" command line syntax
    change
  - kdc:
    + Make anonymous AS-requests more RFC8062-compliant.
    Updated expired test certificates
  - Solaris:
    + PKCS#11 hcrypto backend broken since 7.0.1
    + Building with Sun Pro C
  + Features:
  - kuser: support authenticated anonymous AS-REQs in kinit
  - kdc: support for anonymous TGS-REQs
  - kgetcred support for anonymous service tickets
  - Support builds with OpenSSL 1.1.1
- fixed heimdal-patched.diff and reproducible.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1653480000">- Apply Shared Library Packaging Policy and resolve rpmlint
  errors like "libheimdal.x86_64: E: shlib-policy-name-error
  SONAME: libasn1.so.8, expected package suffix: 8"</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656417600">- Add heimdal-7.7.0-autoconf-2.70.patch: Fix build with autoconf
  2.70 (gh#heimdal/heimdal#856).</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656590400">- Add ldconfig scriptlets.
- Fix 'Conflicts:' tags.
- Remove obsolete macros and conditionals.
- Ran spec-cleaner.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1671624000">- Update to version 7.8.0
  + This release includes both the Heimdal 7.7.1 Security
    Vulnerability fixes and non-Security bug fixes/improvements.
  + Security Vulnerabilities:
  - CVE-2022-42898 PAC parse integer overflows
  - CVE-2022-3437 Overflows and non-constant time leaks in
    DES{,3} and arcfour
  - CVE-2022-41916 Fix Unicode normalization read of 1 bytes past
    end of array
  - CVE-2021-44758 A null pointer de-reference DoS in SPNEGO
    acceptors
  - CVE-2021-3671 A null pointer de-reference when handling
    missing sname in TGS-REQ
  - CVE-2022-44640 Heimdal KDC: invalid free in ASN.1 codec
    Note that CVE-2022-44640 is a severe vulnerability,
    possibly a 10.0 on the Common Vulnerability Scoring
    System (CVSS) v3, as we believe it should be possible to
    get an RCE on a KDC, which means that credentials can be
    compromised that can be used to impersonate anyone in a
    realm or forest of realms.
    Heimdal's ASN.1 compiler generates code that allows
    specially crafted DER encodings of CHOICEs to invoke the
    wrong free function on the decoded structure upon decode
    error. This is known to impact the Heimdal KDC, leading to
    an invalid free() of an address partly or wholly under the
    control of the attacker, in turn leading to a potential
    remote code execution (RCE) vulnerability.
    This error affects the DER codec for all extensible CHOICE
    types used in Heimdal, though not all cases will be
    exploitable. We have not completed a thorough analysis of
    all the Heimdal components affected, thus the Kerberos
    client, the X.509 library, and other parts, may be affected
    as well.
    This bug has been in Heimdal's ASN.1 compiler since 2005,
    but it may only affect Heimdal 1.6 and up. It was first
    reported by Douglas Bagnall, though it had been found
    independently by the Heimdal maintainers via fuzzing a few
    weeks earlier.
    While no zero-day exploit is known, such an exploit will
    likely be available soon after public disclosure.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  + Other changes:
  - Bugs found by UBSAN (including the incorrect encoding of
    unconstrained INTEGER value -1).
  - Errors found by the LLVM scan-build static analyzer.
  - Errors found by the valgrind memory debugger.
  - Work around GCC Bug 95189 (memcmp wrongly stripped like
    strcmp).
  - Correct ASN.1 OID typo for SHA-384
  - Fix a deadlock in in the MEMORY ccache type.
  - TGS: strip forwardable and proxiable flags if the server is
    disallowed.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  - Incremental HDB propagation improvements
    Refactor send_diffs making it progressive
    Handle partial writes on non-blocking sockets
    Disable Nagle in iprop master and slave
    Use async I/O
    Don't send I_HAVE in response to AYT
    Do not recover log in kadm5_get_principal()
    Don't send diffs to slaves with not yet known version
    Don't stutter in send_diffs
  - Optional backwards-compatible anon-pkinit behavior
- Removed heimdal-7.7.0-autoconf-2.70.patch, fixed upstream.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1673352000">- replace libheimdal conflicts by obsoletes / provides to provide a
  smooth update in the new libheimdal-devel.</changelog>
</package>
<package pkgid="ab8c054b7c9b1a0ccd377c88c339bad43c12684234e8e11747fd9ad3f81b6be4" name="libheimbase1" arch="aarch64">
  <version epoch="0" ver="7.8.0" rel="bp154.2.4.1"/>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1440936000">- Initial package, version 1.6rc2
- Added patch heimdal-version-script-client.map.patch to add file
  version-script-client.map (File is present in git for tag 1.6rc2
  but missing in tarball).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441108800">- Some changes in spec file to enable build for SLES.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441195200">- Added Conflicts tags to spec file because devel package conflicts
  with krb5-devel and krb5-mini-devel.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441454400">- Added a patched instead of the original tarball because only
  shared libraries will be build and source files of these (not to
  be build) programs have problematic licenses.
- Added script heimdal-patch-source.sh to sources.
- Added patch heimdal-patched.diff that fixes configure.ac and
  several Makefile.am files to successfully build patched source.
- Removed unneeded dependencies in spec file for build.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1483790400">- Update to version 7.1.0
- Removed heimdal-version-script-client.map.patch, fixed upstream.
- Fixed heimdal-patched.diff.
- Unfortunately there is no updated changelog file in tarball,
  changes can be seen in source code version control systems
  history log.</changelog>
  <changelog author="jengelh@inai.de" date="1486036800">- Summary and RPM group update. Do a direct call to ldconfig
  where possible.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1497528000">- Update to version 7.3.0
  - Security
    + Fix transit path validation. Commit f469fc6 (2010-10-02)
    inadvertently caused the previous hop realm to not be added
    to the transit path of issued tickets. This may, in some
    cases, enable bypass of capath policy in Heimdal versions 1.5
    through 7.2.
    Note, this may break sites that rely on the bug. With the bug
    some incomplete [capaths] worked, that should not have.
    These may now break authentication in some cross-realm
    configurations. (CVE-2017-6594)
- Version 7.2.0
  - Bug fixes
    + Portability improvements.
    + More strict parsing of encoded URI components in HTTP KDC.
    + Fixed memory leak in malloc error recovery in NTLM GSSAPI
    mechanism.
    + Avoid overly specific CPU info in krb5-config in aid of
    reproducible builds.
    + Don't do AFS string-to-key tests when feature is disabled.
    + Skip mdb_stat test when the command is not available.
    + Windows: update SHA2 timestamp server.
    + hdb: add missing export
    hdb_generate_key_set_password_with_ks_tuple.
    + Fix signature of hdb_generate_key_set_password().
    + Windows: enable KX509 support in the KDC.
    + kdc: fix kx509 service principal match.
    + iprop: handle case where master sends nothing new.
    + ipropd-slave: fix incorrect error codes.
    + Allow choice of sqlite for HDB pref.
    + check-iprop: don't fail to kill daemons.
    + roken: pidfile -&gt; rk_pidfile.
    + kdc: _kdc_do_kx509 fix use after free error.
    + Do not detect x32 as 64-bit platform.
    + No sys/ttydefaults.h on CYGWIN.
    + Fix check-iprop races.
    + roken_detach_prep() close pipe.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1501761600">- Update to version 7.4.0
  - Security
  - Fix CVE-2017-11103: Orpheus' Lyre KDC-REP service name
    validation.
    This is a critical vulnerability.
    In _krb5_extract_ticket() the KDC-REP service name must be
    obtained from encrypted version stored in 'enc_part' instead
    of the unencrypted version stored in 'ticket'.
    Use of the unecrypted version provides an opportunity for
    successful server impersonation and other attacks.
    Identified by Jeffrey Altman, Viktor Duchovni and
    Nico Williams.
    See https://www.orpheus-lyre.info/ for more details.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1512648000">- Added Avoid_NULL_structure_pointer_member_dereference.patch,
  fixes (bsc#1071675).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1514548800">- Update to version 7.5.0
  - Security
  - Fix CVE-2017-17439, which is a remote denial of service
    vulnerability:
    In Heimdal 7.1 through 7.4, remote unauthenticated attackers
    are able to crash the KDC by sending a crafted UDP packet
    containing empty data fields for client name or realm.
  - Bug fixes
  - Handle long input lines when reloading database dumps.
  - In pre-forked mode (default on Unix), correctly clear the
    process ids of exited children, allowing new child processes
    to replace the old.
  - Fixed incorrect KDC response when no-cross realm TGT exists,
    allowing client requests to fail quickly rather than time
    out after trying to get a correct answer from each KDC.
- Fixed heimdal-patched.diff.
- Removed Avoid_NULL_structure_pointer_member_dereference.patch,
  fixed upstream.</changelog>
  <changelog author="bwiedemann@suse.com" date="1533643200">- Add reproducible.patch to override build date (boo#1047218)
- Use constant hostname (boo#1084909)</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1561291200">- Update to version 7.7.0
  + Bug fixes:
  - PKCS#11 hcrypto back-end:
    + initialize the p11_module_load function list
    + verify that not only is a mechanism present but that its
    mechanism info states that it offers the required
    encryption, decryption or digest services
  - krb5:
    + Starting with 7.6, Heimdal permitted requesting
    authenticated anonymous tickets. However, it did not
    verify that a KDC in fact returned an anonymous ticket
    when one was requested.
    + Cease setting the KDCOption reaquest_anonymous flag when
    issuing S4UProxy (constrained delegation) TGS requests.
    + when the Win2K PKINIT compatibility option is set, do not
    require krbtgt otherName to match when validating KDC
    certificate.
    + set PKINIT_BTMM flag per Apple implementation
    + use memset_s() instead of memset()
  - kdc:
    + When generating KRB5SignedPath in the AS, use the reply
    client name rather than the one from the request, so
    validation will work correctly in the TGS.
    + allow checksum of PA-FOR-USER to be HMAC_MD5. Even if TGT
    used an enctype with a different checksum. Per [MS-SFU]
    2.2.1 PA-FOR-USER the checksum is always HMAC_MD5, and
    that's what Windows and MIT clients send.
    In Heimdal both the client and kdc use instead the
    checksum of the TGT, and therefore work with each other
    but Windows and MIT clients fail against Heimdal KDC.
    Both Windows and MIT KDC would allow any keyed checksum
    to be used so Heimdal client work fine against it.
    Change Heimdal KDC to allow HMAC_MD5 even for non RC4
    based TGT in order to support per-spec clients.
    + use memset_s() instead of memset()
    + Detect Heimdal 1.0 through 7.6 clients that issue
    S4UProxy (constrained delegation) TGS Requests with the
    request anonymous flag set. These requests will be
    treated as S4UProxy requests and not anonymous requests.
  - HDB:
    + Set SQLite3 backend default page size to 8KB.
    + Add hdb_set_sync() method
  - kadmind:
    + disable HDB sync during database load avoiding
    unnecessary disk i/o.
  - ipropd:
    + disable HDB sync during receive_everything. Doing an
    fsync per-record when receiving the complete HDB is a
    performance disaster. Among other things, if the HDB is
    very large, then one slave receving a full HDB can cause
    other slaves to timeout and, if HDB write activity is
    high enough to cause iprop log truncation, then also need
    full syncs, which leads to a cycle of full syncs for all
    slaves until HDB write activity drops.
    Allowing the iprop log to be larger helps, but improving
    receive_everything() performance helps even more.
  - kinit:
    + Anonymous PKINIT tickets discard the realm information
    used to locate the issuing AS. Store the issuing realm in
    the credentials cache in order to locate a KDC which can
    renew them.
    + Do not leak the result of krb5_cc_get_config() when
    determining anonymous PKINIT start realm.
  - klist:
    + Show transited-policy-checked, ok-as-delegate and
    anonymous flags when listing credentials.
  - tests:
    + Regenerate certs so that they expire before the 2038
    armageddon so the test suite will pass on 32-bit
    operating systems until the underlying issues can be
    resolved.
  - Solaris:
    + Define _STDC_C11_BCI for memset_s prototype
  - build tooling:
    + Convert from python 2 to python 3
  - documentation:
    + rename verify-password to verify-password-quality
    + hprop default mode is encrypt
    + kadmind "all" permission does not include "get-keys"
    + verify-password-quality might not be stateless
- Version 7.6.0
  + Security (#555):
  - CVE-2018-16860 Heimdal KDC: Reject PA-S4U2Self with unkeyed
    checksum
    When the Heimdal KDC checks the checksum that is placed on
    the S4U2Self packet by the server to protect the requested
    principal against modification, it does not confirm that
    the checksum algorithm that protects the user name
    (principal) in the request is keyed. This allows a
    man-in-the-middle attacker who can intercept the request to
    the KDC to modify the packet by replacing the user name
    (principal) in the request with any desired user name
    (principal) that exists in the KDC and replace the checksum
    protecting that name with a CRC32 checksum (which requires
    no prior knowledge to compute).
    This would allow a S4U2Self ticket requested on behalf of
    user name (principal) user@EXAMPLE.COM to any service to be
    changed to a S4U2Self ticket with a user name (principal) of
    Administrator@EXAMPLE.COM. This ticket would then contain
    the PAC of the modified user name (principal).
  - CVE-2019-12098, client-only:
    RFC8062 Section 7 requires verification of the PA-PKINIT-KX
    key exchange when anonymous PKINIT is used. Failure to do
    so can permit an active attacker to become a
    man-in-the-middle.
  + Bug fixes:
  - Happy eyeballs: Don't wait for responses from
    known-unreachable KDCs.
  - kdc:
    + check return copy_Realm, copy_PrincipalName,
    copy_EncryptionKey
  - kinit:
    + cleanup temporary ccaches
    + see man page for "kinit --anonymous" command line syntax
    change
  - kdc:
    + Make anonymous AS-requests more RFC8062-compliant.
    Updated expired test certificates
  - Solaris:
    + PKCS#11 hcrypto backend broken since 7.0.1
    + Building with Sun Pro C
  + Features:
  - kuser: support authenticated anonymous AS-REQs in kinit
  - kdc: support for anonymous TGS-REQs
  - kgetcred support for anonymous service tickets
  - Support builds with OpenSSL 1.1.1
- fixed heimdal-patched.diff and reproducible.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1653480000">- Apply Shared Library Packaging Policy and resolve rpmlint
  errors like "libheimdal.x86_64: E: shlib-policy-name-error
  SONAME: libasn1.so.8, expected package suffix: 8"</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656417600">- Add heimdal-7.7.0-autoconf-2.70.patch: Fix build with autoconf
  2.70 (gh#heimdal/heimdal#856).</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656590400">- Add ldconfig scriptlets.
- Fix 'Conflicts:' tags.
- Remove obsolete macros and conditionals.
- Ran spec-cleaner.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1671624000">- Update to version 7.8.0
  + This release includes both the Heimdal 7.7.1 Security
    Vulnerability fixes and non-Security bug fixes/improvements.
  + Security Vulnerabilities:
  - CVE-2022-42898 PAC parse integer overflows
  - CVE-2022-3437 Overflows and non-constant time leaks in
    DES{,3} and arcfour
  - CVE-2022-41916 Fix Unicode normalization read of 1 bytes past
    end of array
  - CVE-2021-44758 A null pointer de-reference DoS in SPNEGO
    acceptors
  - CVE-2021-3671 A null pointer de-reference when handling
    missing sname in TGS-REQ
  - CVE-2022-44640 Heimdal KDC: invalid free in ASN.1 codec
    Note that CVE-2022-44640 is a severe vulnerability,
    possibly a 10.0 on the Common Vulnerability Scoring
    System (CVSS) v3, as we believe it should be possible to
    get an RCE on a KDC, which means that credentials can be
    compromised that can be used to impersonate anyone in a
    realm or forest of realms.
    Heimdal's ASN.1 compiler generates code that allows
    specially crafted DER encodings of CHOICEs to invoke the
    wrong free function on the decoded structure upon decode
    error. This is known to impact the Heimdal KDC, leading to
    an invalid free() of an address partly or wholly under the
    control of the attacker, in turn leading to a potential
    remote code execution (RCE) vulnerability.
    This error affects the DER codec for all extensible CHOICE
    types used in Heimdal, though not all cases will be
    exploitable. We have not completed a thorough analysis of
    all the Heimdal components affected, thus the Kerberos
    client, the X.509 library, and other parts, may be affected
    as well.
    This bug has been in Heimdal's ASN.1 compiler since 2005,
    but it may only affect Heimdal 1.6 and up. It was first
    reported by Douglas Bagnall, though it had been found
    independently by the Heimdal maintainers via fuzzing a few
    weeks earlier.
    While no zero-day exploit is known, such an exploit will
    likely be available soon after public disclosure.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  + Other changes:
  - Bugs found by UBSAN (including the incorrect encoding of
    unconstrained INTEGER value -1).
  - Errors found by the LLVM scan-build static analyzer.
  - Errors found by the valgrind memory debugger.
  - Work around GCC Bug 95189 (memcmp wrongly stripped like
    strcmp).
  - Correct ASN.1 OID typo for SHA-384
  - Fix a deadlock in in the MEMORY ccache type.
  - TGS: strip forwardable and proxiable flags if the server is
    disallowed.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  - Incremental HDB propagation improvements
    Refactor send_diffs making it progressive
    Handle partial writes on non-blocking sockets
    Disable Nagle in iprop master and slave
    Use async I/O
    Don't send I_HAVE in response to AYT
    Do not recover log in kadm5_get_principal()
    Don't send diffs to slaves with not yet known version
    Don't stutter in send_diffs
  - Optional backwards-compatible anon-pkinit behavior
- Removed heimdal-7.7.0-autoconf-2.70.patch, fixed upstream.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1673352000">- replace libheimdal conflicts by obsoletes / provides to provide a
  smooth update in the new libheimdal-devel.</changelog>
</package>
<package pkgid="2126ec1b442c9e169fc2032379878303c4107f7f7d1b8aa98da1d6838981f3ce" name="libheimbase1" arch="i586">
  <version epoch="0" ver="7.8.0" rel="bp154.2.4.1"/>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1440936000">- Initial package, version 1.6rc2
- Added patch heimdal-version-script-client.map.patch to add file
  version-script-client.map (File is present in git for tag 1.6rc2
  but missing in tarball).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441108800">- Some changes in spec file to enable build for SLES.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441195200">- Added Conflicts tags to spec file because devel package conflicts
  with krb5-devel and krb5-mini-devel.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441454400">- Added a patched instead of the original tarball because only
  shared libraries will be build and source files of these (not to
  be build) programs have problematic licenses.
- Added script heimdal-patch-source.sh to sources.
- Added patch heimdal-patched.diff that fixes configure.ac and
  several Makefile.am files to successfully build patched source.
- Removed unneeded dependencies in spec file for build.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1483790400">- Update to version 7.1.0
- Removed heimdal-version-script-client.map.patch, fixed upstream.
- Fixed heimdal-patched.diff.
- Unfortunately there is no updated changelog file in tarball,
  changes can be seen in source code version control systems
  history log.</changelog>
  <changelog author="jengelh@inai.de" date="1486036800">- Summary and RPM group update. Do a direct call to ldconfig
  where possible.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1497528000">- Update to version 7.3.0
  - Security
    + Fix transit path validation. Commit f469fc6 (2010-10-02)
    inadvertently caused the previous hop realm to not be added
    to the transit path of issued tickets. This may, in some
    cases, enable bypass of capath policy in Heimdal versions 1.5
    through 7.2.
    Note, this may break sites that rely on the bug. With the bug
    some incomplete [capaths] worked, that should not have.
    These may now break authentication in some cross-realm
    configurations. (CVE-2017-6594)
- Version 7.2.0
  - Bug fixes
    + Portability improvements.
    + More strict parsing of encoded URI components in HTTP KDC.
    + Fixed memory leak in malloc error recovery in NTLM GSSAPI
    mechanism.
    + Avoid overly specific CPU info in krb5-config in aid of
    reproducible builds.
    + Don't do AFS string-to-key tests when feature is disabled.
    + Skip mdb_stat test when the command is not available.
    + Windows: update SHA2 timestamp server.
    + hdb: add missing export
    hdb_generate_key_set_password_with_ks_tuple.
    + Fix signature of hdb_generate_key_set_password().
    + Windows: enable KX509 support in the KDC.
    + kdc: fix kx509 service principal match.
    + iprop: handle case where master sends nothing new.
    + ipropd-slave: fix incorrect error codes.
    + Allow choice of sqlite for HDB pref.
    + check-iprop: don't fail to kill daemons.
    + roken: pidfile -&gt; rk_pidfile.
    + kdc: _kdc_do_kx509 fix use after free error.
    + Do not detect x32 as 64-bit platform.
    + No sys/ttydefaults.h on CYGWIN.
    + Fix check-iprop races.
    + roken_detach_prep() close pipe.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1501761600">- Update to version 7.4.0
  - Security
  - Fix CVE-2017-11103: Orpheus' Lyre KDC-REP service name
    validation.
    This is a critical vulnerability.
    In _krb5_extract_ticket() the KDC-REP service name must be
    obtained from encrypted version stored in 'enc_part' instead
    of the unencrypted version stored in 'ticket'.
    Use of the unecrypted version provides an opportunity for
    successful server impersonation and other attacks.
    Identified by Jeffrey Altman, Viktor Duchovni and
    Nico Williams.
    See https://www.orpheus-lyre.info/ for more details.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1512648000">- Added Avoid_NULL_structure_pointer_member_dereference.patch,
  fixes (bsc#1071675).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1514548800">- Update to version 7.5.0
  - Security
  - Fix CVE-2017-17439, which is a remote denial of service
    vulnerability:
    In Heimdal 7.1 through 7.4, remote unauthenticated attackers
    are able to crash the KDC by sending a crafted UDP packet
    containing empty data fields for client name or realm.
  - Bug fixes
  - Handle long input lines when reloading database dumps.
  - In pre-forked mode (default on Unix), correctly clear the
    process ids of exited children, allowing new child processes
    to replace the old.
  - Fixed incorrect KDC response when no-cross realm TGT exists,
    allowing client requests to fail quickly rather than time
    out after trying to get a correct answer from each KDC.
- Fixed heimdal-patched.diff.
- Removed Avoid_NULL_structure_pointer_member_dereference.patch,
  fixed upstream.</changelog>
  <changelog author="bwiedemann@suse.com" date="1533643200">- Add reproducible.patch to override build date (boo#1047218)
- Use constant hostname (boo#1084909)</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1561291200">- Update to version 7.7.0
  + Bug fixes:
  - PKCS#11 hcrypto back-end:
    + initialize the p11_module_load function list
    + verify that not only is a mechanism present but that its
    mechanism info states that it offers the required
    encryption, decryption or digest services
  - krb5:
    + Starting with 7.6, Heimdal permitted requesting
    authenticated anonymous tickets. However, it did not
    verify that a KDC in fact returned an anonymous ticket
    when one was requested.
    + Cease setting the KDCOption reaquest_anonymous flag when
    issuing S4UProxy (constrained delegation) TGS requests.
    + when the Win2K PKINIT compatibility option is set, do not
    require krbtgt otherName to match when validating KDC
    certificate.
    + set PKINIT_BTMM flag per Apple implementation
    + use memset_s() instead of memset()
  - kdc:
    + When generating KRB5SignedPath in the AS, use the reply
    client name rather than the one from the request, so
    validation will work correctly in the TGS.
    + allow checksum of PA-FOR-USER to be HMAC_MD5. Even if TGT
    used an enctype with a different checksum. Per [MS-SFU]
    2.2.1 PA-FOR-USER the checksum is always HMAC_MD5, and
    that's what Windows and MIT clients send.
    In Heimdal both the client and kdc use instead the
    checksum of the TGT, and therefore work with each other
    but Windows and MIT clients fail against Heimdal KDC.
    Both Windows and MIT KDC would allow any keyed checksum
    to be used so Heimdal client work fine against it.
    Change Heimdal KDC to allow HMAC_MD5 even for non RC4
    based TGT in order to support per-spec clients.
    + use memset_s() instead of memset()
    + Detect Heimdal 1.0 through 7.6 clients that issue
    S4UProxy (constrained delegation) TGS Requests with the
    request anonymous flag set. These requests will be
    treated as S4UProxy requests and not anonymous requests.
  - HDB:
    + Set SQLite3 backend default page size to 8KB.
    + Add hdb_set_sync() method
  - kadmind:
    + disable HDB sync during database load avoiding
    unnecessary disk i/o.
  - ipropd:
    + disable HDB sync during receive_everything. Doing an
    fsync per-record when receiving the complete HDB is a
    performance disaster. Among other things, if the HDB is
    very large, then one slave receving a full HDB can cause
    other slaves to timeout and, if HDB write activity is
    high enough to cause iprop log truncation, then also need
    full syncs, which leads to a cycle of full syncs for all
    slaves until HDB write activity drops.
    Allowing the iprop log to be larger helps, but improving
    receive_everything() performance helps even more.
  - kinit:
    + Anonymous PKINIT tickets discard the realm information
    used to locate the issuing AS. Store the issuing realm in
    the credentials cache in order to locate a KDC which can
    renew them.
    + Do not leak the result of krb5_cc_get_config() when
    determining anonymous PKINIT start realm.
  - klist:
    + Show transited-policy-checked, ok-as-delegate and
    anonymous flags when listing credentials.
  - tests:
    + Regenerate certs so that they expire before the 2038
    armageddon so the test suite will pass on 32-bit
    operating systems until the underlying issues can be
    resolved.
  - Solaris:
    + Define _STDC_C11_BCI for memset_s prototype
  - build tooling:
    + Convert from python 2 to python 3
  - documentation:
    + rename verify-password to verify-password-quality
    + hprop default mode is encrypt
    + kadmind "all" permission does not include "get-keys"
    + verify-password-quality might not be stateless
- Version 7.6.0
  + Security (#555):
  - CVE-2018-16860 Heimdal KDC: Reject PA-S4U2Self with unkeyed
    checksum
    When the Heimdal KDC checks the checksum that is placed on
    the S4U2Self packet by the server to protect the requested
    principal against modification, it does not confirm that
    the checksum algorithm that protects the user name
    (principal) in the request is keyed. This allows a
    man-in-the-middle attacker who can intercept the request to
    the KDC to modify the packet by replacing the user name
    (principal) in the request with any desired user name
    (principal) that exists in the KDC and replace the checksum
    protecting that name with a CRC32 checksum (which requires
    no prior knowledge to compute).
    This would allow a S4U2Self ticket requested on behalf of
    user name (principal) user@EXAMPLE.COM to any service to be
    changed to a S4U2Self ticket with a user name (principal) of
    Administrator@EXAMPLE.COM. This ticket would then contain
    the PAC of the modified user name (principal).
  - CVE-2019-12098, client-only:
    RFC8062 Section 7 requires verification of the PA-PKINIT-KX
    key exchange when anonymous PKINIT is used. Failure to do
    so can permit an active attacker to become a
    man-in-the-middle.
  + Bug fixes:
  - Happy eyeballs: Don't wait for responses from
    known-unreachable KDCs.
  - kdc:
    + check return copy_Realm, copy_PrincipalName,
    copy_EncryptionKey
  - kinit:
    + cleanup temporary ccaches
    + see man page for "kinit --anonymous" command line syntax
    change
  - kdc:
    + Make anonymous AS-requests more RFC8062-compliant.
    Updated expired test certificates
  - Solaris:
    + PKCS#11 hcrypto backend broken since 7.0.1
    + Building with Sun Pro C
  + Features:
  - kuser: support authenticated anonymous AS-REQs in kinit
  - kdc: support for anonymous TGS-REQs
  - kgetcred support for anonymous service tickets
  - Support builds with OpenSSL 1.1.1
- fixed heimdal-patched.diff and reproducible.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1653480000">- Apply Shared Library Packaging Policy and resolve rpmlint
  errors like "libheimdal.x86_64: E: shlib-policy-name-error
  SONAME: libasn1.so.8, expected package suffix: 8"</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656417600">- Add heimdal-7.7.0-autoconf-2.70.patch: Fix build with autoconf
  2.70 (gh#heimdal/heimdal#856).</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656590400">- Add ldconfig scriptlets.
- Fix 'Conflicts:' tags.
- Remove obsolete macros and conditionals.
- Ran spec-cleaner.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1671624000">- Update to version 7.8.0
  + This release includes both the Heimdal 7.7.1 Security
    Vulnerability fixes and non-Security bug fixes/improvements.
  + Security Vulnerabilities:
  - CVE-2022-42898 PAC parse integer overflows
  - CVE-2022-3437 Overflows and non-constant time leaks in
    DES{,3} and arcfour
  - CVE-2022-41916 Fix Unicode normalization read of 1 bytes past
    end of array
  - CVE-2021-44758 A null pointer de-reference DoS in SPNEGO
    acceptors
  - CVE-2021-3671 A null pointer de-reference when handling
    missing sname in TGS-REQ
  - CVE-2022-44640 Heimdal KDC: invalid free in ASN.1 codec
    Note that CVE-2022-44640 is a severe vulnerability,
    possibly a 10.0 on the Common Vulnerability Scoring
    System (CVSS) v3, as we believe it should be possible to
    get an RCE on a KDC, which means that credentials can be
    compromised that can be used to impersonate anyone in a
    realm or forest of realms.
    Heimdal's ASN.1 compiler generates code that allows
    specially crafted DER encodings of CHOICEs to invoke the
    wrong free function on the decoded structure upon decode
    error. This is known to impact the Heimdal KDC, leading to
    an invalid free() of an address partly or wholly under the
    control of the attacker, in turn leading to a potential
    remote code execution (RCE) vulnerability.
    This error affects the DER codec for all extensible CHOICE
    types used in Heimdal, though not all cases will be
    exploitable. We have not completed a thorough analysis of
    all the Heimdal components affected, thus the Kerberos
    client, the X.509 library, and other parts, may be affected
    as well.
    This bug has been in Heimdal's ASN.1 compiler since 2005,
    but it may only affect Heimdal 1.6 and up. It was first
    reported by Douglas Bagnall, though it had been found
    independently by the Heimdal maintainers via fuzzing a few
    weeks earlier.
    While no zero-day exploit is known, such an exploit will
    likely be available soon after public disclosure.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  + Other changes:
  - Bugs found by UBSAN (including the incorrect encoding of
    unconstrained INTEGER value -1).
  - Errors found by the LLVM scan-build static analyzer.
  - Errors found by the valgrind memory debugger.
  - Work around GCC Bug 95189 (memcmp wrongly stripped like
    strcmp).
  - Correct ASN.1 OID typo for SHA-384
  - Fix a deadlock in in the MEMORY ccache type.
  - TGS: strip forwardable and proxiable flags if the server is
    disallowed.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  - Incremental HDB propagation improvements
    Refactor send_diffs making it progressive
    Handle partial writes on non-blocking sockets
    Disable Nagle in iprop master and slave
    Use async I/O
    Don't send I_HAVE in response to AYT
    Do not recover log in kadm5_get_principal()
    Don't send diffs to slaves with not yet known version
    Don't stutter in send_diffs
  - Optional backwards-compatible anon-pkinit behavior
- Removed heimdal-7.7.0-autoconf-2.70.patch, fixed upstream.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1673352000">- replace libheimdal conflicts by obsoletes / provides to provide a
  smooth update in the new libheimdal-devel.</changelog>
</package>
<package pkgid="4b6bce5040d8fc807935e754609495c7ca67f045c008b9d530c183a3edebb863" name="libheimbase1" arch="ppc64le">
  <version epoch="0" ver="7.8.0" rel="bp154.2.4.1"/>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1440936000">- Initial package, version 1.6rc2
- Added patch heimdal-version-script-client.map.patch to add file
  version-script-client.map (File is present in git for tag 1.6rc2
  but missing in tarball).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441108800">- Some changes in spec file to enable build for SLES.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441195200">- Added Conflicts tags to spec file because devel package conflicts
  with krb5-devel and krb5-mini-devel.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441454400">- Added a patched instead of the original tarball because only
  shared libraries will be build and source files of these (not to
  be build) programs have problematic licenses.
- Added script heimdal-patch-source.sh to sources.
- Added patch heimdal-patched.diff that fixes configure.ac and
  several Makefile.am files to successfully build patched source.
- Removed unneeded dependencies in spec file for build.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1483790400">- Update to version 7.1.0
- Removed heimdal-version-script-client.map.patch, fixed upstream.
- Fixed heimdal-patched.diff.
- Unfortunately there is no updated changelog file in tarball,
  changes can be seen in source code version control systems
  history log.</changelog>
  <changelog author="jengelh@inai.de" date="1486036800">- Summary and RPM group update. Do a direct call to ldconfig
  where possible.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1497528000">- Update to version 7.3.0
  - Security
    + Fix transit path validation. Commit f469fc6 (2010-10-02)
    inadvertently caused the previous hop realm to not be added
    to the transit path of issued tickets. This may, in some
    cases, enable bypass of capath policy in Heimdal versions 1.5
    through 7.2.
    Note, this may break sites that rely on the bug. With the bug
    some incomplete [capaths] worked, that should not have.
    These may now break authentication in some cross-realm
    configurations. (CVE-2017-6594)
- Version 7.2.0
  - Bug fixes
    + Portability improvements.
    + More strict parsing of encoded URI components in HTTP KDC.
    + Fixed memory leak in malloc error recovery in NTLM GSSAPI
    mechanism.
    + Avoid overly specific CPU info in krb5-config in aid of
    reproducible builds.
    + Don't do AFS string-to-key tests when feature is disabled.
    + Skip mdb_stat test when the command is not available.
    + Windows: update SHA2 timestamp server.
    + hdb: add missing export
    hdb_generate_key_set_password_with_ks_tuple.
    + Fix signature of hdb_generate_key_set_password().
    + Windows: enable KX509 support in the KDC.
    + kdc: fix kx509 service principal match.
    + iprop: handle case where master sends nothing new.
    + ipropd-slave: fix incorrect error codes.
    + Allow choice of sqlite for HDB pref.
    + check-iprop: don't fail to kill daemons.
    + roken: pidfile -&gt; rk_pidfile.
    + kdc: _kdc_do_kx509 fix use after free error.
    + Do not detect x32 as 64-bit platform.
    + No sys/ttydefaults.h on CYGWIN.
    + Fix check-iprop races.
    + roken_detach_prep() close pipe.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1501761600">- Update to version 7.4.0
  - Security
  - Fix CVE-2017-11103: Orpheus' Lyre KDC-REP service name
    validation.
    This is a critical vulnerability.
    In _krb5_extract_ticket() the KDC-REP service name must be
    obtained from encrypted version stored in 'enc_part' instead
    of the unencrypted version stored in 'ticket'.
    Use of the unecrypted version provides an opportunity for
    successful server impersonation and other attacks.
    Identified by Jeffrey Altman, Viktor Duchovni and
    Nico Williams.
    See https://www.orpheus-lyre.info/ for more details.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1512648000">- Added Avoid_NULL_structure_pointer_member_dereference.patch,
  fixes (bsc#1071675).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1514548800">- Update to version 7.5.0
  - Security
  - Fix CVE-2017-17439, which is a remote denial of service
    vulnerability:
    In Heimdal 7.1 through 7.4, remote unauthenticated attackers
    are able to crash the KDC by sending a crafted UDP packet
    containing empty data fields for client name or realm.
  - Bug fixes
  - Handle long input lines when reloading database dumps.
  - In pre-forked mode (default on Unix), correctly clear the
    process ids of exited children, allowing new child processes
    to replace the old.
  - Fixed incorrect KDC response when no-cross realm TGT exists,
    allowing client requests to fail quickly rather than time
    out after trying to get a correct answer from each KDC.
- Fixed heimdal-patched.diff.
- Removed Avoid_NULL_structure_pointer_member_dereference.patch,
  fixed upstream.</changelog>
  <changelog author="bwiedemann@suse.com" date="1533643200">- Add reproducible.patch to override build date (boo#1047218)
- Use constant hostname (boo#1084909)</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1561291200">- Update to version 7.7.0
  + Bug fixes:
  - PKCS#11 hcrypto back-end:
    + initialize the p11_module_load function list
    + verify that not only is a mechanism present but that its
    mechanism info states that it offers the required
    encryption, decryption or digest services
  - krb5:
    + Starting with 7.6, Heimdal permitted requesting
    authenticated anonymous tickets. However, it did not
    verify that a KDC in fact returned an anonymous ticket
    when one was requested.
    + Cease setting the KDCOption reaquest_anonymous flag when
    issuing S4UProxy (constrained delegation) TGS requests.
    + when the Win2K PKINIT compatibility option is set, do not
    require krbtgt otherName to match when validating KDC
    certificate.
    + set PKINIT_BTMM flag per Apple implementation
    + use memset_s() instead of memset()
  - kdc:
    + When generating KRB5SignedPath in the AS, use the reply
    client name rather than the one from the request, so
    validation will work correctly in the TGS.
    + allow checksum of PA-FOR-USER to be HMAC_MD5. Even if TGT
    used an enctype with a different checksum. Per [MS-SFU]
    2.2.1 PA-FOR-USER the checksum is always HMAC_MD5, and
    that's what Windows and MIT clients send.
    In Heimdal both the client and kdc use instead the
    checksum of the TGT, and therefore work with each other
    but Windows and MIT clients fail against Heimdal KDC.
    Both Windows and MIT KDC would allow any keyed checksum
    to be used so Heimdal client work fine against it.
    Change Heimdal KDC to allow HMAC_MD5 even for non RC4
    based TGT in order to support per-spec clients.
    + use memset_s() instead of memset()
    + Detect Heimdal 1.0 through 7.6 clients that issue
    S4UProxy (constrained delegation) TGS Requests with the
    request anonymous flag set. These requests will be
    treated as S4UProxy requests and not anonymous requests.
  - HDB:
    + Set SQLite3 backend default page size to 8KB.
    + Add hdb_set_sync() method
  - kadmind:
    + disable HDB sync during database load avoiding
    unnecessary disk i/o.
  - ipropd:
    + disable HDB sync during receive_everything. Doing an
    fsync per-record when receiving the complete HDB is a
    performance disaster. Among other things, if the HDB is
    very large, then one slave receving a full HDB can cause
    other slaves to timeout and, if HDB write activity is
    high enough to cause iprop log truncation, then also need
    full syncs, which leads to a cycle of full syncs for all
    slaves until HDB write activity drops.
    Allowing the iprop log to be larger helps, but improving
    receive_everything() performance helps even more.
  - kinit:
    + Anonymous PKINIT tickets discard the realm information
    used to locate the issuing AS. Store the issuing realm in
    the credentials cache in order to locate a KDC which can
    renew them.
    + Do not leak the result of krb5_cc_get_config() when
    determining anonymous PKINIT start realm.
  - klist:
    + Show transited-policy-checked, ok-as-delegate and
    anonymous flags when listing credentials.
  - tests:
    + Regenerate certs so that they expire before the 2038
    armageddon so the test suite will pass on 32-bit
    operating systems until the underlying issues can be
    resolved.
  - Solaris:
    + Define _STDC_C11_BCI for memset_s prototype
  - build tooling:
    + Convert from python 2 to python 3
  - documentation:
    + rename verify-password to verify-password-quality
    + hprop default mode is encrypt
    + kadmind "all" permission does not include "get-keys"
    + verify-password-quality might not be stateless
- Version 7.6.0
  + Security (#555):
  - CVE-2018-16860 Heimdal KDC: Reject PA-S4U2Self with unkeyed
    checksum
    When the Heimdal KDC checks the checksum that is placed on
    the S4U2Self packet by the server to protect the requested
    principal against modification, it does not confirm that
    the checksum algorithm that protects the user name
    (principal) in the request is keyed. This allows a
    man-in-the-middle attacker who can intercept the request to
    the KDC to modify the packet by replacing the user name
    (principal) in the request with any desired user name
    (principal) that exists in the KDC and replace the checksum
    protecting that name with a CRC32 checksum (which requires
    no prior knowledge to compute).
    This would allow a S4U2Self ticket requested on behalf of
    user name (principal) user@EXAMPLE.COM to any service to be
    changed to a S4U2Self ticket with a user name (principal) of
    Administrator@EXAMPLE.COM. This ticket would then contain
    the PAC of the modified user name (principal).
  - CVE-2019-12098, client-only:
    RFC8062 Section 7 requires verification of the PA-PKINIT-KX
    key exchange when anonymous PKINIT is used. Failure to do
    so can permit an active attacker to become a
    man-in-the-middle.
  + Bug fixes:
  - Happy eyeballs: Don't wait for responses from
    known-unreachable KDCs.
  - kdc:
    + check return copy_Realm, copy_PrincipalName,
    copy_EncryptionKey
  - kinit:
    + cleanup temporary ccaches
    + see man page for "kinit --anonymous" command line syntax
    change
  - kdc:
    + Make anonymous AS-requests more RFC8062-compliant.
    Updated expired test certificates
  - Solaris:
    + PKCS#11 hcrypto backend broken since 7.0.1
    + Building with Sun Pro C
  + Features:
  - kuser: support authenticated anonymous AS-REQs in kinit
  - kdc: support for anonymous TGS-REQs
  - kgetcred support for anonymous service tickets
  - Support builds with OpenSSL 1.1.1
- fixed heimdal-patched.diff and reproducible.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1653480000">- Apply Shared Library Packaging Policy and resolve rpmlint
  errors like "libheimdal.x86_64: E: shlib-policy-name-error
  SONAME: libasn1.so.8, expected package suffix: 8"</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656417600">- Add heimdal-7.7.0-autoconf-2.70.patch: Fix build with autoconf
  2.70 (gh#heimdal/heimdal#856).</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656590400">- Add ldconfig scriptlets.
- Fix 'Conflicts:' tags.
- Remove obsolete macros and conditionals.
- Ran spec-cleaner.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1671624000">- Update to version 7.8.0
  + This release includes both the Heimdal 7.7.1 Security
    Vulnerability fixes and non-Security bug fixes/improvements.
  + Security Vulnerabilities:
  - CVE-2022-42898 PAC parse integer overflows
  - CVE-2022-3437 Overflows and non-constant time leaks in
    DES{,3} and arcfour
  - CVE-2022-41916 Fix Unicode normalization read of 1 bytes past
    end of array
  - CVE-2021-44758 A null pointer de-reference DoS in SPNEGO
    acceptors
  - CVE-2021-3671 A null pointer de-reference when handling
    missing sname in TGS-REQ
  - CVE-2022-44640 Heimdal KDC: invalid free in ASN.1 codec
    Note that CVE-2022-44640 is a severe vulnerability,
    possibly a 10.0 on the Common Vulnerability Scoring
    System (CVSS) v3, as we believe it should be possible to
    get an RCE on a KDC, which means that credentials can be
    compromised that can be used to impersonate anyone in a
    realm or forest of realms.
    Heimdal's ASN.1 compiler generates code that allows
    specially crafted DER encodings of CHOICEs to invoke the
    wrong free function on the decoded structure upon decode
    error. This is known to impact the Heimdal KDC, leading to
    an invalid free() of an address partly or wholly under the
    control of the attacker, in turn leading to a potential
    remote code execution (RCE) vulnerability.
    This error affects the DER codec for all extensible CHOICE
    types used in Heimdal, though not all cases will be
    exploitable. We have not completed a thorough analysis of
    all the Heimdal components affected, thus the Kerberos
    client, the X.509 library, and other parts, may be affected
    as well.
    This bug has been in Heimdal's ASN.1 compiler since 2005,
    but it may only affect Heimdal 1.6 and up. It was first
    reported by Douglas Bagnall, though it had been found
    independently by the Heimdal maintainers via fuzzing a few
    weeks earlier.
    While no zero-day exploit is known, such an exploit will
    likely be available soon after public disclosure.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  + Other changes:
  - Bugs found by UBSAN (including the incorrect encoding of
    unconstrained INTEGER value -1).
  - Errors found by the LLVM scan-build static analyzer.
  - Errors found by the valgrind memory debugger.
  - Work around GCC Bug 95189 (memcmp wrongly stripped like
    strcmp).
  - Correct ASN.1 OID typo for SHA-384
  - Fix a deadlock in in the MEMORY ccache type.
  - TGS: strip forwardable and proxiable flags if the server is
    disallowed.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  - Incremental HDB propagation improvements
    Refactor send_diffs making it progressive
    Handle partial writes on non-blocking sockets
    Disable Nagle in iprop master and slave
    Use async I/O
    Don't send I_HAVE in response to AYT
    Do not recover log in kadm5_get_principal()
    Don't send diffs to slaves with not yet known version
    Don't stutter in send_diffs
  - Optional backwards-compatible anon-pkinit behavior
- Removed heimdal-7.7.0-autoconf-2.70.patch, fixed upstream.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1673352000">- replace libheimdal conflicts by obsoletes / provides to provide a
  smooth update in the new libheimdal-devel.</changelog>
</package>
<package pkgid="f83332259456bb0efa05af7d2f05dec32ffa200ee2de95234738058f3983f3fc" name="libheimbase1" arch="s390x">
  <version epoch="0" ver="7.8.0" rel="bp154.2.4.1"/>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1440936000">- Initial package, version 1.6rc2
- Added patch heimdal-version-script-client.map.patch to add file
  version-script-client.map (File is present in git for tag 1.6rc2
  but missing in tarball).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441108800">- Some changes in spec file to enable build for SLES.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441195200">- Added Conflicts tags to spec file because devel package conflicts
  with krb5-devel and krb5-mini-devel.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441454400">- Added a patched instead of the original tarball because only
  shared libraries will be build and source files of these (not to
  be build) programs have problematic licenses.
- Added script heimdal-patch-source.sh to sources.
- Added patch heimdal-patched.diff that fixes configure.ac and
  several Makefile.am files to successfully build patched source.
- Removed unneeded dependencies in spec file for build.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1483790400">- Update to version 7.1.0
- Removed heimdal-version-script-client.map.patch, fixed upstream.
- Fixed heimdal-patched.diff.
- Unfortunately there is no updated changelog file in tarball,
  changes can be seen in source code version control systems
  history log.</changelog>
  <changelog author="jengelh@inai.de" date="1486036800">- Summary and RPM group update. Do a direct call to ldconfig
  where possible.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1497528000">- Update to version 7.3.0
  - Security
    + Fix transit path validation. Commit f469fc6 (2010-10-02)
    inadvertently caused the previous hop realm to not be added
    to the transit path of issued tickets. This may, in some
    cases, enable bypass of capath policy in Heimdal versions 1.5
    through 7.2.
    Note, this may break sites that rely on the bug. With the bug
    some incomplete [capaths] worked, that should not have.
    These may now break authentication in some cross-realm
    configurations. (CVE-2017-6594)
- Version 7.2.0
  - Bug fixes
    + Portability improvements.
    + More strict parsing of encoded URI components in HTTP KDC.
    + Fixed memory leak in malloc error recovery in NTLM GSSAPI
    mechanism.
    + Avoid overly specific CPU info in krb5-config in aid of
    reproducible builds.
    + Don't do AFS string-to-key tests when feature is disabled.
    + Skip mdb_stat test when the command is not available.
    + Windows: update SHA2 timestamp server.
    + hdb: add missing export
    hdb_generate_key_set_password_with_ks_tuple.
    + Fix signature of hdb_generate_key_set_password().
    + Windows: enable KX509 support in the KDC.
    + kdc: fix kx509 service principal match.
    + iprop: handle case where master sends nothing new.
    + ipropd-slave: fix incorrect error codes.
    + Allow choice of sqlite for HDB pref.
    + check-iprop: don't fail to kill daemons.
    + roken: pidfile -&gt; rk_pidfile.
    + kdc: _kdc_do_kx509 fix use after free error.
    + Do not detect x32 as 64-bit platform.
    + No sys/ttydefaults.h on CYGWIN.
    + Fix check-iprop races.
    + roken_detach_prep() close pipe.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1501761600">- Update to version 7.4.0
  - Security
  - Fix CVE-2017-11103: Orpheus' Lyre KDC-REP service name
    validation.
    This is a critical vulnerability.
    In _krb5_extract_ticket() the KDC-REP service name must be
    obtained from encrypted version stored in 'enc_part' instead
    of the unencrypted version stored in 'ticket'.
    Use of the unecrypted version provides an opportunity for
    successful server impersonation and other attacks.
    Identified by Jeffrey Altman, Viktor Duchovni and
    Nico Williams.
    See https://www.orpheus-lyre.info/ for more details.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1512648000">- Added Avoid_NULL_structure_pointer_member_dereference.patch,
  fixes (bsc#1071675).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1514548800">- Update to version 7.5.0
  - Security
  - Fix CVE-2017-17439, which is a remote denial of service
    vulnerability:
    In Heimdal 7.1 through 7.4, remote unauthenticated attackers
    are able to crash the KDC by sending a crafted UDP packet
    containing empty data fields for client name or realm.
  - Bug fixes
  - Handle long input lines when reloading database dumps.
  - In pre-forked mode (default on Unix), correctly clear the
    process ids of exited children, allowing new child processes
    to replace the old.
  - Fixed incorrect KDC response when no-cross realm TGT exists,
    allowing client requests to fail quickly rather than time
    out after trying to get a correct answer from each KDC.
- Fixed heimdal-patched.diff.
- Removed Avoid_NULL_structure_pointer_member_dereference.patch,
  fixed upstream.</changelog>
  <changelog author="bwiedemann@suse.com" date="1533643200">- Add reproducible.patch to override build date (boo#1047218)
- Use constant hostname (boo#1084909)</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1561291200">- Update to version 7.7.0
  + Bug fixes:
  - PKCS#11 hcrypto back-end:
    + initialize the p11_module_load function list
    + verify that not only is a mechanism present but that its
    mechanism info states that it offers the required
    encryption, decryption or digest services
  - krb5:
    + Starting with 7.6, Heimdal permitted requesting
    authenticated anonymous tickets. However, it did not
    verify that a KDC in fact returned an anonymous ticket
    when one was requested.
    + Cease setting the KDCOption reaquest_anonymous flag when
    issuing S4UProxy (constrained delegation) TGS requests.
    + when the Win2K PKINIT compatibility option is set, do not
    require krbtgt otherName to match when validating KDC
    certificate.
    + set PKINIT_BTMM flag per Apple implementation
    + use memset_s() instead of memset()
  - kdc:
    + When generating KRB5SignedPath in the AS, use the reply
    client name rather than the one from the request, so
    validation will work correctly in the TGS.
    + allow checksum of PA-FOR-USER to be HMAC_MD5. Even if TGT
    used an enctype with a different checksum. Per [MS-SFU]
    2.2.1 PA-FOR-USER the checksum is always HMAC_MD5, and
    that's what Windows and MIT clients send.
    In Heimdal both the client and kdc use instead the
    checksum of the TGT, and therefore work with each other
    but Windows and MIT clients fail against Heimdal KDC.
    Both Windows and MIT KDC would allow any keyed checksum
    to be used so Heimdal client work fine against it.
    Change Heimdal KDC to allow HMAC_MD5 even for non RC4
    based TGT in order to support per-spec clients.
    + use memset_s() instead of memset()
    + Detect Heimdal 1.0 through 7.6 clients that issue
    S4UProxy (constrained delegation) TGS Requests with the
    request anonymous flag set. These requests will be
    treated as S4UProxy requests and not anonymous requests.
  - HDB:
    + Set SQLite3 backend default page size to 8KB.
    + Add hdb_set_sync() method
  - kadmind:
    + disable HDB sync during database load avoiding
    unnecessary disk i/o.
  - ipropd:
    + disable HDB sync during receive_everything. Doing an
    fsync per-record when receiving the complete HDB is a
    performance disaster. Among other things, if the HDB is
    very large, then one slave receving a full HDB can cause
    other slaves to timeout and, if HDB write activity is
    high enough to cause iprop log truncation, then also need
    full syncs, which leads to a cycle of full syncs for all
    slaves until HDB write activity drops.
    Allowing the iprop log to be larger helps, but improving
    receive_everything() performance helps even more.
  - kinit:
    + Anonymous PKINIT tickets discard the realm information
    used to locate the issuing AS. Store the issuing realm in
    the credentials cache in order to locate a KDC which can
    renew them.
    + Do not leak the result of krb5_cc_get_config() when
    determining anonymous PKINIT start realm.
  - klist:
    + Show transited-policy-checked, ok-as-delegate and
    anonymous flags when listing credentials.
  - tests:
    + Regenerate certs so that they expire before the 2038
    armageddon so the test suite will pass on 32-bit
    operating systems until the underlying issues can be
    resolved.
  - Solaris:
    + Define _STDC_C11_BCI for memset_s prototype
  - build tooling:
    + Convert from python 2 to python 3
  - documentation:
    + rename verify-password to verify-password-quality
    + hprop default mode is encrypt
    + kadmind "all" permission does not include "get-keys"
    + verify-password-quality might not be stateless
- Version 7.6.0
  + Security (#555):
  - CVE-2018-16860 Heimdal KDC: Reject PA-S4U2Self with unkeyed
    checksum
    When the Heimdal KDC checks the checksum that is placed on
    the S4U2Self packet by the server to protect the requested
    principal against modification, it does not confirm that
    the checksum algorithm that protects the user name
    (principal) in the request is keyed. This allows a
    man-in-the-middle attacker who can intercept the request to
    the KDC to modify the packet by replacing the user name
    (principal) in the request with any desired user name
    (principal) that exists in the KDC and replace the checksum
    protecting that name with a CRC32 checksum (which requires
    no prior knowledge to compute).
    This would allow a S4U2Self ticket requested on behalf of
    user name (principal) user@EXAMPLE.COM to any service to be
    changed to a S4U2Self ticket with a user name (principal) of
    Administrator@EXAMPLE.COM. This ticket would then contain
    the PAC of the modified user name (principal).
  - CVE-2019-12098, client-only:
    RFC8062 Section 7 requires verification of the PA-PKINIT-KX
    key exchange when anonymous PKINIT is used. Failure to do
    so can permit an active attacker to become a
    man-in-the-middle.
  + Bug fixes:
  - Happy eyeballs: Don't wait for responses from
    known-unreachable KDCs.
  - kdc:
    + check return copy_Realm, copy_PrincipalName,
    copy_EncryptionKey
  - kinit:
    + cleanup temporary ccaches
    + see man page for "kinit --anonymous" command line syntax
    change
  - kdc:
    + Make anonymous AS-requests more RFC8062-compliant.
    Updated expired test certificates
  - Solaris:
    + PKCS#11 hcrypto backend broken since 7.0.1
    + Building with Sun Pro C
  + Features:
  - kuser: support authenticated anonymous AS-REQs in kinit
  - kdc: support for anonymous TGS-REQs
  - kgetcred support for anonymous service tickets
  - Support builds with OpenSSL 1.1.1
- fixed heimdal-patched.diff and reproducible.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1653480000">- Apply Shared Library Packaging Policy and resolve rpmlint
  errors like "libheimdal.x86_64: E: shlib-policy-name-error
  SONAME: libasn1.so.8, expected package suffix: 8"</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656417600">- Add heimdal-7.7.0-autoconf-2.70.patch: Fix build with autoconf
  2.70 (gh#heimdal/heimdal#856).</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656590400">- Add ldconfig scriptlets.
- Fix 'Conflicts:' tags.
- Remove obsolete macros and conditionals.
- Ran spec-cleaner.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1671624000">- Update to version 7.8.0
  + This release includes both the Heimdal 7.7.1 Security
    Vulnerability fixes and non-Security bug fixes/improvements.
  + Security Vulnerabilities:
  - CVE-2022-42898 PAC parse integer overflows
  - CVE-2022-3437 Overflows and non-constant time leaks in
    DES{,3} and arcfour
  - CVE-2022-41916 Fix Unicode normalization read of 1 bytes past
    end of array
  - CVE-2021-44758 A null pointer de-reference DoS in SPNEGO
    acceptors
  - CVE-2021-3671 A null pointer de-reference when handling
    missing sname in TGS-REQ
  - CVE-2022-44640 Heimdal KDC: invalid free in ASN.1 codec
    Note that CVE-2022-44640 is a severe vulnerability,
    possibly a 10.0 on the Common Vulnerability Scoring
    System (CVSS) v3, as we believe it should be possible to
    get an RCE on a KDC, which means that credentials can be
    compromised that can be used to impersonate anyone in a
    realm or forest of realms.
    Heimdal's ASN.1 compiler generates code that allows
    specially crafted DER encodings of CHOICEs to invoke the
    wrong free function on the decoded structure upon decode
    error. This is known to impact the Heimdal KDC, leading to
    an invalid free() of an address partly or wholly under the
    control of the attacker, in turn leading to a potential
    remote code execution (RCE) vulnerability.
    This error affects the DER codec for all extensible CHOICE
    types used in Heimdal, though not all cases will be
    exploitable. We have not completed a thorough analysis of
    all the Heimdal components affected, thus the Kerberos
    client, the X.509 library, and other parts, may be affected
    as well.
    This bug has been in Heimdal's ASN.1 compiler since 2005,
    but it may only affect Heimdal 1.6 and up. It was first
    reported by Douglas Bagnall, though it had been found
    independently by the Heimdal maintainers via fuzzing a few
    weeks earlier.
    While no zero-day exploit is known, such an exploit will
    likely be available soon after public disclosure.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  + Other changes:
  - Bugs found by UBSAN (including the incorrect encoding of
    unconstrained INTEGER value -1).
  - Errors found by the LLVM scan-build static analyzer.
  - Errors found by the valgrind memory debugger.
  - Work around GCC Bug 95189 (memcmp wrongly stripped like
    strcmp).
  - Correct ASN.1 OID typo for SHA-384
  - Fix a deadlock in in the MEMORY ccache type.
  - TGS: strip forwardable and proxiable flags if the server is
    disallowed.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  - Incremental HDB propagation improvements
    Refactor send_diffs making it progressive
    Handle partial writes on non-blocking sockets
    Disable Nagle in iprop master and slave
    Use async I/O
    Don't send I_HAVE in response to AYT
    Do not recover log in kadm5_get_principal()
    Don't send diffs to slaves with not yet known version
    Don't stutter in send_diffs
  - Optional backwards-compatible anon-pkinit behavior
- Removed heimdal-7.7.0-autoconf-2.70.patch, fixed upstream.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1673352000">- replace libheimdal conflicts by obsoletes / provides to provide a
  smooth update in the new libheimdal-devel.</changelog>
</package>
<package pkgid="093d68e69fd13b7cbfd9cbd17acc5c11653ed4ab8f626001d44e3e195996bee2" name="libheimbase1" arch="x86_64">
  <version epoch="0" ver="7.8.0" rel="bp154.2.4.1"/>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1440936000">- Initial package, version 1.6rc2
- Added patch heimdal-version-script-client.map.patch to add file
  version-script-client.map (File is present in git for tag 1.6rc2
  but missing in tarball).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441108800">- Some changes in spec file to enable build for SLES.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441195200">- Added Conflicts tags to spec file because devel package conflicts
  with krb5-devel and krb5-mini-devel.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441454400">- Added a patched instead of the original tarball because only
  shared libraries will be build and source files of these (not to
  be build) programs have problematic licenses.
- Added script heimdal-patch-source.sh to sources.
- Added patch heimdal-patched.diff that fixes configure.ac and
  several Makefile.am files to successfully build patched source.
- Removed unneeded dependencies in spec file for build.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1483790400">- Update to version 7.1.0
- Removed heimdal-version-script-client.map.patch, fixed upstream.
- Fixed heimdal-patched.diff.
- Unfortunately there is no updated changelog file in tarball,
  changes can be seen in source code version control systems
  history log.</changelog>
  <changelog author="jengelh@inai.de" date="1486036800">- Summary and RPM group update. Do a direct call to ldconfig
  where possible.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1497528000">- Update to version 7.3.0
  - Security
    + Fix transit path validation. Commit f469fc6 (2010-10-02)
    inadvertently caused the previous hop realm to not be added
    to the transit path of issued tickets. This may, in some
    cases, enable bypass of capath policy in Heimdal versions 1.5
    through 7.2.
    Note, this may break sites that rely on the bug. With the bug
    some incomplete [capaths] worked, that should not have.
    These may now break authentication in some cross-realm
    configurations. (CVE-2017-6594)
- Version 7.2.0
  - Bug fixes
    + Portability improvements.
    + More strict parsing of encoded URI components in HTTP KDC.
    + Fixed memory leak in malloc error recovery in NTLM GSSAPI
    mechanism.
    + Avoid overly specific CPU info in krb5-config in aid of
    reproducible builds.
    + Don't do AFS string-to-key tests when feature is disabled.
    + Skip mdb_stat test when the command is not available.
    + Windows: update SHA2 timestamp server.
    + hdb: add missing export
    hdb_generate_key_set_password_with_ks_tuple.
    + Fix signature of hdb_generate_key_set_password().
    + Windows: enable KX509 support in the KDC.
    + kdc: fix kx509 service principal match.
    + iprop: handle case where master sends nothing new.
    + ipropd-slave: fix incorrect error codes.
    + Allow choice of sqlite for HDB pref.
    + check-iprop: don't fail to kill daemons.
    + roken: pidfile -&gt; rk_pidfile.
    + kdc: _kdc_do_kx509 fix use after free error.
    + Do not detect x32 as 64-bit platform.
    + No sys/ttydefaults.h on CYGWIN.
    + Fix check-iprop races.
    + roken_detach_prep() close pipe.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1501761600">- Update to version 7.4.0
  - Security
  - Fix CVE-2017-11103: Orpheus' Lyre KDC-REP service name
    validation.
    This is a critical vulnerability.
    In _krb5_extract_ticket() the KDC-REP service name must be
    obtained from encrypted version stored in 'enc_part' instead
    of the unencrypted version stored in 'ticket'.
    Use of the unecrypted version provides an opportunity for
    successful server impersonation and other attacks.
    Identified by Jeffrey Altman, Viktor Duchovni and
    Nico Williams.
    See https://www.orpheus-lyre.info/ for more details.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1512648000">- Added Avoid_NULL_structure_pointer_member_dereference.patch,
  fixes (bsc#1071675).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1514548800">- Update to version 7.5.0
  - Security
  - Fix CVE-2017-17439, which is a remote denial of service
    vulnerability:
    In Heimdal 7.1 through 7.4, remote unauthenticated attackers
    are able to crash the KDC by sending a crafted UDP packet
    containing empty data fields for client name or realm.
  - Bug fixes
  - Handle long input lines when reloading database dumps.
  - In pre-forked mode (default on Unix), correctly clear the
    process ids of exited children, allowing new child processes
    to replace the old.
  - Fixed incorrect KDC response when no-cross realm TGT exists,
    allowing client requests to fail quickly rather than time
    out after trying to get a correct answer from each KDC.
- Fixed heimdal-patched.diff.
- Removed Avoid_NULL_structure_pointer_member_dereference.patch,
  fixed upstream.</changelog>
  <changelog author="bwiedemann@suse.com" date="1533643200">- Add reproducible.patch to override build date (boo#1047218)
- Use constant hostname (boo#1084909)</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1561291200">- Update to version 7.7.0
  + Bug fixes:
  - PKCS#11 hcrypto back-end:
    + initialize the p11_module_load function list
    + verify that not only is a mechanism present but that its
    mechanism info states that it offers the required
    encryption, decryption or digest services
  - krb5:
    + Starting with 7.6, Heimdal permitted requesting
    authenticated anonymous tickets. However, it did not
    verify that a KDC in fact returned an anonymous ticket
    when one was requested.
    + Cease setting the KDCOption reaquest_anonymous flag when
    issuing S4UProxy (constrained delegation) TGS requests.
    + when the Win2K PKINIT compatibility option is set, do not
    require krbtgt otherName to match when validating KDC
    certificate.
    + set PKINIT_BTMM flag per Apple implementation
    + use memset_s() instead of memset()
  - kdc:
    + When generating KRB5SignedPath in the AS, use the reply
    client name rather than the one from the request, so
    validation will work correctly in the TGS.
    + allow checksum of PA-FOR-USER to be HMAC_MD5. Even if TGT
    used an enctype with a different checksum. Per [MS-SFU]
    2.2.1 PA-FOR-USER the checksum is always HMAC_MD5, and
    that's what Windows and MIT clients send.
    In Heimdal both the client and kdc use instead the
    checksum of the TGT, and therefore work with each other
    but Windows and MIT clients fail against Heimdal KDC.
    Both Windows and MIT KDC would allow any keyed checksum
    to be used so Heimdal client work fine against it.
    Change Heimdal KDC to allow HMAC_MD5 even for non RC4
    based TGT in order to support per-spec clients.
    + use memset_s() instead of memset()
    + Detect Heimdal 1.0 through 7.6 clients that issue
    S4UProxy (constrained delegation) TGS Requests with the
    request anonymous flag set. These requests will be
    treated as S4UProxy requests and not anonymous requests.
  - HDB:
    + Set SQLite3 backend default page size to 8KB.
    + Add hdb_set_sync() method
  - kadmind:
    + disable HDB sync during database load avoiding
    unnecessary disk i/o.
  - ipropd:
    + disable HDB sync during receive_everything. Doing an
    fsync per-record when receiving the complete HDB is a
    performance disaster. Among other things, if the HDB is
    very large, then one slave receving a full HDB can cause
    other slaves to timeout and, if HDB write activity is
    high enough to cause iprop log truncation, then also need
    full syncs, which leads to a cycle of full syncs for all
    slaves until HDB write activity drops.
    Allowing the iprop log to be larger helps, but improving
    receive_everything() performance helps even more.
  - kinit:
    + Anonymous PKINIT tickets discard the realm information
    used to locate the issuing AS. Store the issuing realm in
    the credentials cache in order to locate a KDC which can
    renew them.
    + Do not leak the result of krb5_cc_get_config() when
    determining anonymous PKINIT start realm.
  - klist:
    + Show transited-policy-checked, ok-as-delegate and
    anonymous flags when listing credentials.
  - tests:
    + Regenerate certs so that they expire before the 2038
    armageddon so the test suite will pass on 32-bit
    operating systems until the underlying issues can be
    resolved.
  - Solaris:
    + Define _STDC_C11_BCI for memset_s prototype
  - build tooling:
    + Convert from python 2 to python 3
  - documentation:
    + rename verify-password to verify-password-quality
    + hprop default mode is encrypt
    + kadmind "all" permission does not include "get-keys"
    + verify-password-quality might not be stateless
- Version 7.6.0
  + Security (#555):
  - CVE-2018-16860 Heimdal KDC: Reject PA-S4U2Self with unkeyed
    checksum
    When the Heimdal KDC checks the checksum that is placed on
    the S4U2Self packet by the server to protect the requested
    principal against modification, it does not confirm that
    the checksum algorithm that protects the user name
    (principal) in the request is keyed. This allows a
    man-in-the-middle attacker who can intercept the request to
    the KDC to modify the packet by replacing the user name
    (principal) in the request with any desired user name
    (principal) that exists in the KDC and replace the checksum
    protecting that name with a CRC32 checksum (which requires
    no prior knowledge to compute).
    This would allow a S4U2Self ticket requested on behalf of
    user name (principal) user@EXAMPLE.COM to any service to be
    changed to a S4U2Self ticket with a user name (principal) of
    Administrator@EXAMPLE.COM. This ticket would then contain
    the PAC of the modified user name (principal).
  - CVE-2019-12098, client-only:
    RFC8062 Section 7 requires verification of the PA-PKINIT-KX
    key exchange when anonymous PKINIT is used. Failure to do
    so can permit an active attacker to become a
    man-in-the-middle.
  + Bug fixes:
  - Happy eyeballs: Don't wait for responses from
    known-unreachable KDCs.
  - kdc:
    + check return copy_Realm, copy_PrincipalName,
    copy_EncryptionKey
  - kinit:
    + cleanup temporary ccaches
    + see man page for "kinit --anonymous" command line syntax
    change
  - kdc:
    + Make anonymous AS-requests more RFC8062-compliant.
    Updated expired test certificates
  - Solaris:
    + PKCS#11 hcrypto backend broken since 7.0.1
    + Building with Sun Pro C
  + Features:
  - kuser: support authenticated anonymous AS-REQs in kinit
  - kdc: support for anonymous TGS-REQs
  - kgetcred support for anonymous service tickets
  - Support builds with OpenSSL 1.1.1
- fixed heimdal-patched.diff and reproducible.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1653480000">- Apply Shared Library Packaging Policy and resolve rpmlint
  errors like "libheimdal.x86_64: E: shlib-policy-name-error
  SONAME: libasn1.so.8, expected package suffix: 8"</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656417600">- Add heimdal-7.7.0-autoconf-2.70.patch: Fix build with autoconf
  2.70 (gh#heimdal/heimdal#856).</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656590400">- Add ldconfig scriptlets.
- Fix 'Conflicts:' tags.
- Remove obsolete macros and conditionals.
- Ran spec-cleaner.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1671624000">- Update to version 7.8.0
  + This release includes both the Heimdal 7.7.1 Security
    Vulnerability fixes and non-Security bug fixes/improvements.
  + Security Vulnerabilities:
  - CVE-2022-42898 PAC parse integer overflows
  - CVE-2022-3437 Overflows and non-constant time leaks in
    DES{,3} and arcfour
  - CVE-2022-41916 Fix Unicode normalization read of 1 bytes past
    end of array
  - CVE-2021-44758 A null pointer de-reference DoS in SPNEGO
    acceptors
  - CVE-2021-3671 A null pointer de-reference when handling
    missing sname in TGS-REQ
  - CVE-2022-44640 Heimdal KDC: invalid free in ASN.1 codec
    Note that CVE-2022-44640 is a severe vulnerability,
    possibly a 10.0 on the Common Vulnerability Scoring
    System (CVSS) v3, as we believe it should be possible to
    get an RCE on a KDC, which means that credentials can be
    compromised that can be used to impersonate anyone in a
    realm or forest of realms.
    Heimdal's ASN.1 compiler generates code that allows
    specially crafted DER encodings of CHOICEs to invoke the
    wrong free function on the decoded structure upon decode
    error. This is known to impact the Heimdal KDC, leading to
    an invalid free() of an address partly or wholly under the
    control of the attacker, in turn leading to a potential
    remote code execution (RCE) vulnerability.
    This error affects the DER codec for all extensible CHOICE
    types used in Heimdal, though not all cases will be
    exploitable. We have not completed a thorough analysis of
    all the Heimdal components affected, thus the Kerberos
    client, the X.509 library, and other parts, may be affected
    as well.
    This bug has been in Heimdal's ASN.1 compiler since 2005,
    but it may only affect Heimdal 1.6 and up. It was first
    reported by Douglas Bagnall, though it had been found
    independently by the Heimdal maintainers via fuzzing a few
    weeks earlier.
    While no zero-day exploit is known, such an exploit will
    likely be available soon after public disclosure.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  + Other changes:
  - Bugs found by UBSAN (including the incorrect encoding of
    unconstrained INTEGER value -1).
  - Errors found by the LLVM scan-build static analyzer.
  - Errors found by the valgrind memory debugger.
  - Work around GCC Bug 95189 (memcmp wrongly stripped like
    strcmp).
  - Correct ASN.1 OID typo for SHA-384
  - Fix a deadlock in in the MEMORY ccache type.
  - TGS: strip forwardable and proxiable flags if the server is
    disallowed.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  - Incremental HDB propagation improvements
    Refactor send_diffs making it progressive
    Handle partial writes on non-blocking sockets
    Disable Nagle in iprop master and slave
    Use async I/O
    Don't send I_HAVE in response to AYT
    Do not recover log in kadm5_get_principal()
    Don't send diffs to slaves with not yet known version
    Don't stutter in send_diffs
  - Optional backwards-compatible anon-pkinit behavior
- Removed heimdal-7.7.0-autoconf-2.70.patch, fixed upstream.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1673352000">- replace libheimdal conflicts by obsoletes / provides to provide a
  smooth update in the new libheimdal-devel.</changelog>
</package>
<package pkgid="e1a0d6e98179b93e97d58949ab9d9cfde9789c54720751dcfdf8d22ee2c03b8c" name="libheimdal" arch="src">
  <version epoch="0" ver="7.8.0" rel="bp154.2.4.1"/>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1440936000">- Initial package, version 1.6rc2
- Added patch heimdal-version-script-client.map.patch to add file
  version-script-client.map (File is present in git for tag 1.6rc2
  but missing in tarball).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441108800">- Some changes in spec file to enable build for SLES.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441195200">- Added Conflicts tags to spec file because devel package conflicts
  with krb5-devel and krb5-mini-devel.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441454400">- Added a patched instead of the original tarball because only
  shared libraries will be build and source files of these (not to
  be build) programs have problematic licenses.
- Added script heimdal-patch-source.sh to sources.
- Added patch heimdal-patched.diff that fixes configure.ac and
  several Makefile.am files to successfully build patched source.
- Removed unneeded dependencies in spec file for build.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1483790400">- Update to version 7.1.0
- Removed heimdal-version-script-client.map.patch, fixed upstream.
- Fixed heimdal-patched.diff.
- Unfortunately there is no updated changelog file in tarball,
  changes can be seen in source code version control systems
  history log.</changelog>
  <changelog author="jengelh@inai.de" date="1486036800">- Summary and RPM group update. Do a direct call to ldconfig
  where possible.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1497528000">- Update to version 7.3.0
  - Security
    + Fix transit path validation. Commit f469fc6 (2010-10-02)
    inadvertently caused the previous hop realm to not be added
    to the transit path of issued tickets. This may, in some
    cases, enable bypass of capath policy in Heimdal versions 1.5
    through 7.2.
    Note, this may break sites that rely on the bug. With the bug
    some incomplete [capaths] worked, that should not have.
    These may now break authentication in some cross-realm
    configurations. (CVE-2017-6594)
- Version 7.2.0
  - Bug fixes
    + Portability improvements.
    + More strict parsing of encoded URI components in HTTP KDC.
    + Fixed memory leak in malloc error recovery in NTLM GSSAPI
    mechanism.
    + Avoid overly specific CPU info in krb5-config in aid of
    reproducible builds.
    + Don't do AFS string-to-key tests when feature is disabled.
    + Skip mdb_stat test when the command is not available.
    + Windows: update SHA2 timestamp server.
    + hdb: add missing export
    hdb_generate_key_set_password_with_ks_tuple.
    + Fix signature of hdb_generate_key_set_password().
    + Windows: enable KX509 support in the KDC.
    + kdc: fix kx509 service principal match.
    + iprop: handle case where master sends nothing new.
    + ipropd-slave: fix incorrect error codes.
    + Allow choice of sqlite for HDB pref.
    + check-iprop: don't fail to kill daemons.
    + roken: pidfile -&gt; rk_pidfile.
    + kdc: _kdc_do_kx509 fix use after free error.
    + Do not detect x32 as 64-bit platform.
    + No sys/ttydefaults.h on CYGWIN.
    + Fix check-iprop races.
    + roken_detach_prep() close pipe.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1501761600">- Update to version 7.4.0
  - Security
  - Fix CVE-2017-11103: Orpheus' Lyre KDC-REP service name
    validation.
    This is a critical vulnerability.
    In _krb5_extract_ticket() the KDC-REP service name must be
    obtained from encrypted version stored in 'enc_part' instead
    of the unencrypted version stored in 'ticket'.
    Use of the unecrypted version provides an opportunity for
    successful server impersonation and other attacks.
    Identified by Jeffrey Altman, Viktor Duchovni and
    Nico Williams.
    See https://www.orpheus-lyre.info/ for more details.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1512648000">- Added Avoid_NULL_structure_pointer_member_dereference.patch,
  fixes (bsc#1071675).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1514548800">- Update to version 7.5.0
  - Security
  - Fix CVE-2017-17439, which is a remote denial of service
    vulnerability:
    In Heimdal 7.1 through 7.4, remote unauthenticated attackers
    are able to crash the KDC by sending a crafted UDP packet
    containing empty data fields for client name or realm.
  - Bug fixes
  - Handle long input lines when reloading database dumps.
  - In pre-forked mode (default on Unix), correctly clear the
    process ids of exited children, allowing new child processes
    to replace the old.
  - Fixed incorrect KDC response when no-cross realm TGT exists,
    allowing client requests to fail quickly rather than time
    out after trying to get a correct answer from each KDC.
- Fixed heimdal-patched.diff.
- Removed Avoid_NULL_structure_pointer_member_dereference.patch,
  fixed upstream.</changelog>
  <changelog author="bwiedemann@suse.com" date="1533643200">- Add reproducible.patch to override build date (boo#1047218)
- Use constant hostname (boo#1084909)</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1561291200">- Update to version 7.7.0
  + Bug fixes:
  - PKCS#11 hcrypto back-end:
    + initialize the p11_module_load function list
    + verify that not only is a mechanism present but that its
    mechanism info states that it offers the required
    encryption, decryption or digest services
  - krb5:
    + Starting with 7.6, Heimdal permitted requesting
    authenticated anonymous tickets. However, it did not
    verify that a KDC in fact returned an anonymous ticket
    when one was requested.
    + Cease setting the KDCOption reaquest_anonymous flag when
    issuing S4UProxy (constrained delegation) TGS requests.
    + when the Win2K PKINIT compatibility option is set, do not
    require krbtgt otherName to match when validating KDC
    certificate.
    + set PKINIT_BTMM flag per Apple implementation
    + use memset_s() instead of memset()
  - kdc:
    + When generating KRB5SignedPath in the AS, use the reply
    client name rather than the one from the request, so
    validation will work correctly in the TGS.
    + allow checksum of PA-FOR-USER to be HMAC_MD5. Even if TGT
    used an enctype with a different checksum. Per [MS-SFU]
    2.2.1 PA-FOR-USER the checksum is always HMAC_MD5, and
    that's what Windows and MIT clients send.
    In Heimdal both the client and kdc use instead the
    checksum of the TGT, and therefore work with each other
    but Windows and MIT clients fail against Heimdal KDC.
    Both Windows and MIT KDC would allow any keyed checksum
    to be used so Heimdal client work fine against it.
    Change Heimdal KDC to allow HMAC_MD5 even for non RC4
    based TGT in order to support per-spec clients.
    + use memset_s() instead of memset()
    + Detect Heimdal 1.0 through 7.6 clients that issue
    S4UProxy (constrained delegation) TGS Requests with the
    request anonymous flag set. These requests will be
    treated as S4UProxy requests and not anonymous requests.
  - HDB:
    + Set SQLite3 backend default page size to 8KB.
    + Add hdb_set_sync() method
  - kadmind:
    + disable HDB sync during database load avoiding
    unnecessary disk i/o.
  - ipropd:
    + disable HDB sync during receive_everything. Doing an
    fsync per-record when receiving the complete HDB is a
    performance disaster. Among other things, if the HDB is
    very large, then one slave receving a full HDB can cause
    other slaves to timeout and, if HDB write activity is
    high enough to cause iprop log truncation, then also need
    full syncs, which leads to a cycle of full syncs for all
    slaves until HDB write activity drops.
    Allowing the iprop log to be larger helps, but improving
    receive_everything() performance helps even more.
  - kinit:
    + Anonymous PKINIT tickets discard the realm information
    used to locate the issuing AS. Store the issuing realm in
    the credentials cache in order to locate a KDC which can
    renew them.
    + Do not leak the result of krb5_cc_get_config() when
    determining anonymous PKINIT start realm.
  - klist:
    + Show transited-policy-checked, ok-as-delegate and
    anonymous flags when listing credentials.
  - tests:
    + Regenerate certs so that they expire before the 2038
    armageddon so the test suite will pass on 32-bit
    operating systems until the underlying issues can be
    resolved.
  - Solaris:
    + Define _STDC_C11_BCI for memset_s prototype
  - build tooling:
    + Convert from python 2 to python 3
  - documentation:
    + rename verify-password to verify-password-quality
    + hprop default mode is encrypt
    + kadmind "all" permission does not include "get-keys"
    + verify-password-quality might not be stateless
- Version 7.6.0
  + Security (#555):
  - CVE-2018-16860 Heimdal KDC: Reject PA-S4U2Self with unkeyed
    checksum
    When the Heimdal KDC checks the checksum that is placed on
    the S4U2Self packet by the server to protect the requested
    principal against modification, it does not confirm that
    the checksum algorithm that protects the user name
    (principal) in the request is keyed. This allows a
    man-in-the-middle attacker who can intercept the request to
    the KDC to modify the packet by replacing the user name
    (principal) in the request with any desired user name
    (principal) that exists in the KDC and replace the checksum
    protecting that name with a CRC32 checksum (which requires
    no prior knowledge to compute).
    This would allow a S4U2Self ticket requested on behalf of
    user name (principal) user@EXAMPLE.COM to any service to be
    changed to a S4U2Self ticket with a user name (principal) of
    Administrator@EXAMPLE.COM. This ticket would then contain
    the PAC of the modified user name (principal).
  - CVE-2019-12098, client-only:
    RFC8062 Section 7 requires verification of the PA-PKINIT-KX
    key exchange when anonymous PKINIT is used. Failure to do
    so can permit an active attacker to become a
    man-in-the-middle.
  + Bug fixes:
  - Happy eyeballs: Don't wait for responses from
    known-unreachable KDCs.
  - kdc:
    + check return copy_Realm, copy_PrincipalName,
    copy_EncryptionKey
  - kinit:
    + cleanup temporary ccaches
    + see man page for "kinit --anonymous" command line syntax
    change
  - kdc:
    + Make anonymous AS-requests more RFC8062-compliant.
    Updated expired test certificates
  - Solaris:
    + PKCS#11 hcrypto backend broken since 7.0.1
    + Building with Sun Pro C
  + Features:
  - kuser: support authenticated anonymous AS-REQs in kinit
  - kdc: support for anonymous TGS-REQs
  - kgetcred support for anonymous service tickets
  - Support builds with OpenSSL 1.1.1
- fixed heimdal-patched.diff and reproducible.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1653480000">- Apply Shared Library Packaging Policy and resolve rpmlint
  errors like "libheimdal.x86_64: E: shlib-policy-name-error
  SONAME: libasn1.so.8, expected package suffix: 8"</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656417600">- Add heimdal-7.7.0-autoconf-2.70.patch: Fix build with autoconf
  2.70 (gh#heimdal/heimdal#856).</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656590400">- Add ldconfig scriptlets.
- Fix 'Conflicts:' tags.
- Remove obsolete macros and conditionals.
- Ran spec-cleaner.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1671624000">- Update to version 7.8.0
  + This release includes both the Heimdal 7.7.1 Security
    Vulnerability fixes and non-Security bug fixes/improvements.
  + Security Vulnerabilities:
  - CVE-2022-42898 PAC parse integer overflows
  - CVE-2022-3437 Overflows and non-constant time leaks in
    DES{,3} and arcfour
  - CVE-2022-41916 Fix Unicode normalization read of 1 bytes past
    end of array
  - CVE-2021-44758 A null pointer de-reference DoS in SPNEGO
    acceptors
  - CVE-2021-3671 A null pointer de-reference when handling
    missing sname in TGS-REQ
  - CVE-2022-44640 Heimdal KDC: invalid free in ASN.1 codec
    Note that CVE-2022-44640 is a severe vulnerability,
    possibly a 10.0 on the Common Vulnerability Scoring
    System (CVSS) v3, as we believe it should be possible to
    get an RCE on a KDC, which means that credentials can be
    compromised that can be used to impersonate anyone in a
    realm or forest of realms.
    Heimdal's ASN.1 compiler generates code that allows
    specially crafted DER encodings of CHOICEs to invoke the
    wrong free function on the decoded structure upon decode
    error. This is known to impact the Heimdal KDC, leading to
    an invalid free() of an address partly or wholly under the
    control of the attacker, in turn leading to a potential
    remote code execution (RCE) vulnerability.
    This error affects the DER codec for all extensible CHOICE
    types used in Heimdal, though not all cases will be
    exploitable. We have not completed a thorough analysis of
    all the Heimdal components affected, thus the Kerberos
    client, the X.509 library, and other parts, may be affected
    as well.
    This bug has been in Heimdal's ASN.1 compiler since 2005,
    but it may only affect Heimdal 1.6 and up. It was first
    reported by Douglas Bagnall, though it had been found
    independently by the Heimdal maintainers via fuzzing a few
    weeks earlier.
    While no zero-day exploit is known, such an exploit will
    likely be available soon after public disclosure.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  + Other changes:
  - Bugs found by UBSAN (including the incorrect encoding of
    unconstrained INTEGER value -1).
  - Errors found by the LLVM scan-build static analyzer.
  - Errors found by the valgrind memory debugger.
  - Work around GCC Bug 95189 (memcmp wrongly stripped like
    strcmp).
  - Correct ASN.1 OID typo for SHA-384
  - Fix a deadlock in in the MEMORY ccache type.
  - TGS: strip forwardable and proxiable flags if the server is
    disallowed.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  - Incremental HDB propagation improvements
    Refactor send_diffs making it progressive
    Handle partial writes on non-blocking sockets
    Disable Nagle in iprop master and slave
    Use async I/O
    Don't send I_HAVE in response to AYT
    Do not recover log in kadm5_get_principal()
    Don't send diffs to slaves with not yet known version
    Don't stutter in send_diffs
  - Optional backwards-compatible anon-pkinit behavior
- Removed heimdal-7.7.0-autoconf-2.70.patch, fixed upstream.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1673352000">- replace libheimdal conflicts by obsoletes / provides to provide a
  smooth update in the new libheimdal-devel.</changelog>
</package>
<package pkgid="fb25dd28acbe2bd35287b2f00e7ae77c3a703b001de69761a8613808a2d5bf7b" name="libheimdal-devel" arch="aarch64">
  <version epoch="0" ver="7.8.0" rel="bp154.2.4.1"/>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1440936000">- Initial package, version 1.6rc2
- Added patch heimdal-version-script-client.map.patch to add file
  version-script-client.map (File is present in git for tag 1.6rc2
  but missing in tarball).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441108800">- Some changes in spec file to enable build for SLES.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441195200">- Added Conflicts tags to spec file because devel package conflicts
  with krb5-devel and krb5-mini-devel.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441454400">- Added a patched instead of the original tarball because only
  shared libraries will be build and source files of these (not to
  be build) programs have problematic licenses.
- Added script heimdal-patch-source.sh to sources.
- Added patch heimdal-patched.diff that fixes configure.ac and
  several Makefile.am files to successfully build patched source.
- Removed unneeded dependencies in spec file for build.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1483790400">- Update to version 7.1.0
- Removed heimdal-version-script-client.map.patch, fixed upstream.
- Fixed heimdal-patched.diff.
- Unfortunately there is no updated changelog file in tarball,
  changes can be seen in source code version control systems
  history log.</changelog>
  <changelog author="jengelh@inai.de" date="1486036800">- Summary and RPM group update. Do a direct call to ldconfig
  where possible.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1497528000">- Update to version 7.3.0
  - Security
    + Fix transit path validation. Commit f469fc6 (2010-10-02)
    inadvertently caused the previous hop realm to not be added
    to the transit path of issued tickets. This may, in some
    cases, enable bypass of capath policy in Heimdal versions 1.5
    through 7.2.
    Note, this may break sites that rely on the bug. With the bug
    some incomplete [capaths] worked, that should not have.
    These may now break authentication in some cross-realm
    configurations. (CVE-2017-6594)
- Version 7.2.0
  - Bug fixes
    + Portability improvements.
    + More strict parsing of encoded URI components in HTTP KDC.
    + Fixed memory leak in malloc error recovery in NTLM GSSAPI
    mechanism.
    + Avoid overly specific CPU info in krb5-config in aid of
    reproducible builds.
    + Don't do AFS string-to-key tests when feature is disabled.
    + Skip mdb_stat test when the command is not available.
    + Windows: update SHA2 timestamp server.
    + hdb: add missing export
    hdb_generate_key_set_password_with_ks_tuple.
    + Fix signature of hdb_generate_key_set_password().
    + Windows: enable KX509 support in the KDC.
    + kdc: fix kx509 service principal match.
    + iprop: handle case where master sends nothing new.
    + ipropd-slave: fix incorrect error codes.
    + Allow choice of sqlite for HDB pref.
    + check-iprop: don't fail to kill daemons.
    + roken: pidfile -&gt; rk_pidfile.
    + kdc: _kdc_do_kx509 fix use after free error.
    + Do not detect x32 as 64-bit platform.
    + No sys/ttydefaults.h on CYGWIN.
    + Fix check-iprop races.
    + roken_detach_prep() close pipe.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1501761600">- Update to version 7.4.0
  - Security
  - Fix CVE-2017-11103: Orpheus' Lyre KDC-REP service name
    validation.
    This is a critical vulnerability.
    In _krb5_extract_ticket() the KDC-REP service name must be
    obtained from encrypted version stored in 'enc_part' instead
    of the unencrypted version stored in 'ticket'.
    Use of the unecrypted version provides an opportunity for
    successful server impersonation and other attacks.
    Identified by Jeffrey Altman, Viktor Duchovni and
    Nico Williams.
    See https://www.orpheus-lyre.info/ for more details.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1512648000">- Added Avoid_NULL_structure_pointer_member_dereference.patch,
  fixes (bsc#1071675).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1514548800">- Update to version 7.5.0
  - Security
  - Fix CVE-2017-17439, which is a remote denial of service
    vulnerability:
    In Heimdal 7.1 through 7.4, remote unauthenticated attackers
    are able to crash the KDC by sending a crafted UDP packet
    containing empty data fields for client name or realm.
  - Bug fixes
  - Handle long input lines when reloading database dumps.
  - In pre-forked mode (default on Unix), correctly clear the
    process ids of exited children, allowing new child processes
    to replace the old.
  - Fixed incorrect KDC response when no-cross realm TGT exists,
    allowing client requests to fail quickly rather than time
    out after trying to get a correct answer from each KDC.
- Fixed heimdal-patched.diff.
- Removed Avoid_NULL_structure_pointer_member_dereference.patch,
  fixed upstream.</changelog>
  <changelog author="bwiedemann@suse.com" date="1533643200">- Add reproducible.patch to override build date (boo#1047218)
- Use constant hostname (boo#1084909)</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1561291200">- Update to version 7.7.0
  + Bug fixes:
  - PKCS#11 hcrypto back-end:
    + initialize the p11_module_load function list
    + verify that not only is a mechanism present but that its
    mechanism info states that it offers the required
    encryption, decryption or digest services
  - krb5:
    + Starting with 7.6, Heimdal permitted requesting
    authenticated anonymous tickets. However, it did not
    verify that a KDC in fact returned an anonymous ticket
    when one was requested.
    + Cease setting the KDCOption reaquest_anonymous flag when
    issuing S4UProxy (constrained delegation) TGS requests.
    + when the Win2K PKINIT compatibility option is set, do not
    require krbtgt otherName to match when validating KDC
    certificate.
    + set PKINIT_BTMM flag per Apple implementation
    + use memset_s() instead of memset()
  - kdc:
    + When generating KRB5SignedPath in the AS, use the reply
    client name rather than the one from the request, so
    validation will work correctly in the TGS.
    + allow checksum of PA-FOR-USER to be HMAC_MD5. Even if TGT
    used an enctype with a different checksum. Per [MS-SFU]
    2.2.1 PA-FOR-USER the checksum is always HMAC_MD5, and
    that's what Windows and MIT clients send.
    In Heimdal both the client and kdc use instead the
    checksum of the TGT, and therefore work with each other
    but Windows and MIT clients fail against Heimdal KDC.
    Both Windows and MIT KDC would allow any keyed checksum
    to be used so Heimdal client work fine against it.
    Change Heimdal KDC to allow HMAC_MD5 even for non RC4
    based TGT in order to support per-spec clients.
    + use memset_s() instead of memset()
    + Detect Heimdal 1.0 through 7.6 clients that issue
    S4UProxy (constrained delegation) TGS Requests with the
    request anonymous flag set. These requests will be
    treated as S4UProxy requests and not anonymous requests.
  - HDB:
    + Set SQLite3 backend default page size to 8KB.
    + Add hdb_set_sync() method
  - kadmind:
    + disable HDB sync during database load avoiding
    unnecessary disk i/o.
  - ipropd:
    + disable HDB sync during receive_everything. Doing an
    fsync per-record when receiving the complete HDB is a
    performance disaster. Among other things, if the HDB is
    very large, then one slave receving a full HDB can cause
    other slaves to timeout and, if HDB write activity is
    high enough to cause iprop log truncation, then also need
    full syncs, which leads to a cycle of full syncs for all
    slaves until HDB write activity drops.
    Allowing the iprop log to be larger helps, but improving
    receive_everything() performance helps even more.
  - kinit:
    + Anonymous PKINIT tickets discard the realm information
    used to locate the issuing AS. Store the issuing realm in
    the credentials cache in order to locate a KDC which can
    renew them.
    + Do not leak the result of krb5_cc_get_config() when
    determining anonymous PKINIT start realm.
  - klist:
    + Show transited-policy-checked, ok-as-delegate and
    anonymous flags when listing credentials.
  - tests:
    + Regenerate certs so that they expire before the 2038
    armageddon so the test suite will pass on 32-bit
    operating systems until the underlying issues can be
    resolved.
  - Solaris:
    + Define _STDC_C11_BCI for memset_s prototype
  - build tooling:
    + Convert from python 2 to python 3
  - documentation:
    + rename verify-password to verify-password-quality
    + hprop default mode is encrypt
    + kadmind "all" permission does not include "get-keys"
    + verify-password-quality might not be stateless
- Version 7.6.0
  + Security (#555):
  - CVE-2018-16860 Heimdal KDC: Reject PA-S4U2Self with unkeyed
    checksum
    When the Heimdal KDC checks the checksum that is placed on
    the S4U2Self packet by the server to protect the requested
    principal against modification, it does not confirm that
    the checksum algorithm that protects the user name
    (principal) in the request is keyed. This allows a
    man-in-the-middle attacker who can intercept the request to
    the KDC to modify the packet by replacing the user name
    (principal) in the request with any desired user name
    (principal) that exists in the KDC and replace the checksum
    protecting that name with a CRC32 checksum (which requires
    no prior knowledge to compute).
    This would allow a S4U2Self ticket requested on behalf of
    user name (principal) user@EXAMPLE.COM to any service to be
    changed to a S4U2Self ticket with a user name (principal) of
    Administrator@EXAMPLE.COM. This ticket would then contain
    the PAC of the modified user name (principal).
  - CVE-2019-12098, client-only:
    RFC8062 Section 7 requires verification of the PA-PKINIT-KX
    key exchange when anonymous PKINIT is used. Failure to do
    so can permit an active attacker to become a
    man-in-the-middle.
  + Bug fixes:
  - Happy eyeballs: Don't wait for responses from
    known-unreachable KDCs.
  - kdc:
    + check return copy_Realm, copy_PrincipalName,
    copy_EncryptionKey
  - kinit:
    + cleanup temporary ccaches
    + see man page for "kinit --anonymous" command line syntax
    change
  - kdc:
    + Make anonymous AS-requests more RFC8062-compliant.
    Updated expired test certificates
  - Solaris:
    + PKCS#11 hcrypto backend broken since 7.0.1
    + Building with Sun Pro C
  + Features:
  - kuser: support authenticated anonymous AS-REQs in kinit
  - kdc: support for anonymous TGS-REQs
  - kgetcred support for anonymous service tickets
  - Support builds with OpenSSL 1.1.1
- fixed heimdal-patched.diff and reproducible.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1653480000">- Apply Shared Library Packaging Policy and resolve rpmlint
  errors like "libheimdal.x86_64: E: shlib-policy-name-error
  SONAME: libasn1.so.8, expected package suffix: 8"</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656417600">- Add heimdal-7.7.0-autoconf-2.70.patch: Fix build with autoconf
  2.70 (gh#heimdal/heimdal#856).</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656590400">- Add ldconfig scriptlets.
- Fix 'Conflicts:' tags.
- Remove obsolete macros and conditionals.
- Ran spec-cleaner.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1671624000">- Update to version 7.8.0
  + This release includes both the Heimdal 7.7.1 Security
    Vulnerability fixes and non-Security bug fixes/improvements.
  + Security Vulnerabilities:
  - CVE-2022-42898 PAC parse integer overflows
  - CVE-2022-3437 Overflows and non-constant time leaks in
    DES{,3} and arcfour
  - CVE-2022-41916 Fix Unicode normalization read of 1 bytes past
    end of array
  - CVE-2021-44758 A null pointer de-reference DoS in SPNEGO
    acceptors
  - CVE-2021-3671 A null pointer de-reference when handling
    missing sname in TGS-REQ
  - CVE-2022-44640 Heimdal KDC: invalid free in ASN.1 codec
    Note that CVE-2022-44640 is a severe vulnerability,
    possibly a 10.0 on the Common Vulnerability Scoring
    System (CVSS) v3, as we believe it should be possible to
    get an RCE on a KDC, which means that credentials can be
    compromised that can be used to impersonate anyone in a
    realm or forest of realms.
    Heimdal's ASN.1 compiler generates code that allows
    specially crafted DER encodings of CHOICEs to invoke the
    wrong free function on the decoded structure upon decode
    error. This is known to impact the Heimdal KDC, leading to
    an invalid free() of an address partly or wholly under the
    control of the attacker, in turn leading to a potential
    remote code execution (RCE) vulnerability.
    This error affects the DER codec for all extensible CHOICE
    types used in Heimdal, though not all cases will be
    exploitable. We have not completed a thorough analysis of
    all the Heimdal components affected, thus the Kerberos
    client, the X.509 library, and other parts, may be affected
    as well.
    This bug has been in Heimdal's ASN.1 compiler since 2005,
    but it may only affect Heimdal 1.6 and up. It was first
    reported by Douglas Bagnall, though it had been found
    independently by the Heimdal maintainers via fuzzing a few
    weeks earlier.
    While no zero-day exploit is known, such an exploit will
    likely be available soon after public disclosure.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  + Other changes:
  - Bugs found by UBSAN (including the incorrect encoding of
    unconstrained INTEGER value -1).
  - Errors found by the LLVM scan-build static analyzer.
  - Errors found by the valgrind memory debugger.
  - Work around GCC Bug 95189 (memcmp wrongly stripped like
    strcmp).
  - Correct ASN.1 OID typo for SHA-384
  - Fix a deadlock in in the MEMORY ccache type.
  - TGS: strip forwardable and proxiable flags if the server is
    disallowed.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  - Incremental HDB propagation improvements
    Refactor send_diffs making it progressive
    Handle partial writes on non-blocking sockets
    Disable Nagle in iprop master and slave
    Use async I/O
    Don't send I_HAVE in response to AYT
    Do not recover log in kadm5_get_principal()
    Don't send diffs to slaves with not yet known version
    Don't stutter in send_diffs
  - Optional backwards-compatible anon-pkinit behavior
- Removed heimdal-7.7.0-autoconf-2.70.patch, fixed upstream.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1673352000">- replace libheimdal conflicts by obsoletes / provides to provide a
  smooth update in the new libheimdal-devel.</changelog>
</package>
<package pkgid="b76fce063d131cec8ca604131f5536814a069aa86ef113f9ce0edb556b20909b" name="libheimdal-devel" arch="i586">
  <version epoch="0" ver="7.8.0" rel="bp154.2.4.1"/>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1440936000">- Initial package, version 1.6rc2
- Added patch heimdal-version-script-client.map.patch to add file
  version-script-client.map (File is present in git for tag 1.6rc2
  but missing in tarball).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441108800">- Some changes in spec file to enable build for SLES.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441195200">- Added Conflicts tags to spec file because devel package conflicts
  with krb5-devel and krb5-mini-devel.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441454400">- Added a patched instead of the original tarball because only
  shared libraries will be build and source files of these (not to
  be build) programs have problematic licenses.
- Added script heimdal-patch-source.sh to sources.
- Added patch heimdal-patched.diff that fixes configure.ac and
  several Makefile.am files to successfully build patched source.
- Removed unneeded dependencies in spec file for build.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1483790400">- Update to version 7.1.0
- Removed heimdal-version-script-client.map.patch, fixed upstream.
- Fixed heimdal-patched.diff.
- Unfortunately there is no updated changelog file in tarball,
  changes can be seen in source code version control systems
  history log.</changelog>
  <changelog author="jengelh@inai.de" date="1486036800">- Summary and RPM group update. Do a direct call to ldconfig
  where possible.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1497528000">- Update to version 7.3.0
  - Security
    + Fix transit path validation. Commit f469fc6 (2010-10-02)
    inadvertently caused the previous hop realm to not be added
    to the transit path of issued tickets. This may, in some
    cases, enable bypass of capath policy in Heimdal versions 1.5
    through 7.2.
    Note, this may break sites that rely on the bug. With the bug
    some incomplete [capaths] worked, that should not have.
    These may now break authentication in some cross-realm
    configurations. (CVE-2017-6594)
- Version 7.2.0
  - Bug fixes
    + Portability improvements.
    + More strict parsing of encoded URI components in HTTP KDC.
    + Fixed memory leak in malloc error recovery in NTLM GSSAPI
    mechanism.
    + Avoid overly specific CPU info in krb5-config in aid of
    reproducible builds.
    + Don't do AFS string-to-key tests when feature is disabled.
    + Skip mdb_stat test when the command is not available.
    + Windows: update SHA2 timestamp server.
    + hdb: add missing export
    hdb_generate_key_set_password_with_ks_tuple.
    + Fix signature of hdb_generate_key_set_password().
    + Windows: enable KX509 support in the KDC.
    + kdc: fix kx509 service principal match.
    + iprop: handle case where master sends nothing new.
    + ipropd-slave: fix incorrect error codes.
    + Allow choice of sqlite for HDB pref.
    + check-iprop: don't fail to kill daemons.
    + roken: pidfile -&gt; rk_pidfile.
    + kdc: _kdc_do_kx509 fix use after free error.
    + Do not detect x32 as 64-bit platform.
    + No sys/ttydefaults.h on CYGWIN.
    + Fix check-iprop races.
    + roken_detach_prep() close pipe.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1501761600">- Update to version 7.4.0
  - Security
  - Fix CVE-2017-11103: Orpheus' Lyre KDC-REP service name
    validation.
    This is a critical vulnerability.
    In _krb5_extract_ticket() the KDC-REP service name must be
    obtained from encrypted version stored in 'enc_part' instead
    of the unencrypted version stored in 'ticket'.
    Use of the unecrypted version provides an opportunity for
    successful server impersonation and other attacks.
    Identified by Jeffrey Altman, Viktor Duchovni and
    Nico Williams.
    See https://www.orpheus-lyre.info/ for more details.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1512648000">- Added Avoid_NULL_structure_pointer_member_dereference.patch,
  fixes (bsc#1071675).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1514548800">- Update to version 7.5.0
  - Security
  - Fix CVE-2017-17439, which is a remote denial of service
    vulnerability:
    In Heimdal 7.1 through 7.4, remote unauthenticated attackers
    are able to crash the KDC by sending a crafted UDP packet
    containing empty data fields for client name or realm.
  - Bug fixes
  - Handle long input lines when reloading database dumps.
  - In pre-forked mode (default on Unix), correctly clear the
    process ids of exited children, allowing new child processes
    to replace the old.
  - Fixed incorrect KDC response when no-cross realm TGT exists,
    allowing client requests to fail quickly rather than time
    out after trying to get a correct answer from each KDC.
- Fixed heimdal-patched.diff.
- Removed Avoid_NULL_structure_pointer_member_dereference.patch,
  fixed upstream.</changelog>
  <changelog author="bwiedemann@suse.com" date="1533643200">- Add reproducible.patch to override build date (boo#1047218)
- Use constant hostname (boo#1084909)</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1561291200">- Update to version 7.7.0
  + Bug fixes:
  - PKCS#11 hcrypto back-end:
    + initialize the p11_module_load function list
    + verify that not only is a mechanism present but that its
    mechanism info states that it offers the required
    encryption, decryption or digest services
  - krb5:
    + Starting with 7.6, Heimdal permitted requesting
    authenticated anonymous tickets. However, it did not
    verify that a KDC in fact returned an anonymous ticket
    when one was requested.
    + Cease setting the KDCOption reaquest_anonymous flag when
    issuing S4UProxy (constrained delegation) TGS requests.
    + when the Win2K PKINIT compatibility option is set, do not
    require krbtgt otherName to match when validating KDC
    certificate.
    + set PKINIT_BTMM flag per Apple implementation
    + use memset_s() instead of memset()
  - kdc:
    + When generating KRB5SignedPath in the AS, use the reply
    client name rather than the one from the request, so
    validation will work correctly in the TGS.
    + allow checksum of PA-FOR-USER to be HMAC_MD5. Even if TGT
    used an enctype with a different checksum. Per [MS-SFU]
    2.2.1 PA-FOR-USER the checksum is always HMAC_MD5, and
    that's what Windows and MIT clients send.
    In Heimdal both the client and kdc use instead the
    checksum of the TGT, and therefore work with each other
    but Windows and MIT clients fail against Heimdal KDC.
    Both Windows and MIT KDC would allow any keyed checksum
    to be used so Heimdal client work fine against it.
    Change Heimdal KDC to allow HMAC_MD5 even for non RC4
    based TGT in order to support per-spec clients.
    + use memset_s() instead of memset()
    + Detect Heimdal 1.0 through 7.6 clients that issue
    S4UProxy (constrained delegation) TGS Requests with the
    request anonymous flag set. These requests will be
    treated as S4UProxy requests and not anonymous requests.
  - HDB:
    + Set SQLite3 backend default page size to 8KB.
    + Add hdb_set_sync() method
  - kadmind:
    + disable HDB sync during database load avoiding
    unnecessary disk i/o.
  - ipropd:
    + disable HDB sync during receive_everything. Doing an
    fsync per-record when receiving the complete HDB is a
    performance disaster. Among other things, if the HDB is
    very large, then one slave receving a full HDB can cause
    other slaves to timeout and, if HDB write activity is
    high enough to cause iprop log truncation, then also need
    full syncs, which leads to a cycle of full syncs for all
    slaves until HDB write activity drops.
    Allowing the iprop log to be larger helps, but improving
    receive_everything() performance helps even more.
  - kinit:
    + Anonymous PKINIT tickets discard the realm information
    used to locate the issuing AS. Store the issuing realm in
    the credentials cache in order to locate a KDC which can
    renew them.
    + Do not leak the result of krb5_cc_get_config() when
    determining anonymous PKINIT start realm.
  - klist:
    + Show transited-policy-checked, ok-as-delegate and
    anonymous flags when listing credentials.
  - tests:
    + Regenerate certs so that they expire before the 2038
    armageddon so the test suite will pass on 32-bit
    operating systems until the underlying issues can be
    resolved.
  - Solaris:
    + Define _STDC_C11_BCI for memset_s prototype
  - build tooling:
    + Convert from python 2 to python 3
  - documentation:
    + rename verify-password to verify-password-quality
    + hprop default mode is encrypt
    + kadmind "all" permission does not include "get-keys"
    + verify-password-quality might not be stateless
- Version 7.6.0
  + Security (#555):
  - CVE-2018-16860 Heimdal KDC: Reject PA-S4U2Self with unkeyed
    checksum
    When the Heimdal KDC checks the checksum that is placed on
    the S4U2Self packet by the server to protect the requested
    principal against modification, it does not confirm that
    the checksum algorithm that protects the user name
    (principal) in the request is keyed. This allows a
    man-in-the-middle attacker who can intercept the request to
    the KDC to modify the packet by replacing the user name
    (principal) in the request with any desired user name
    (principal) that exists in the KDC and replace the checksum
    protecting that name with a CRC32 checksum (which requires
    no prior knowledge to compute).
    This would allow a S4U2Self ticket requested on behalf of
    user name (principal) user@EXAMPLE.COM to any service to be
    changed to a S4U2Self ticket with a user name (principal) of
    Administrator@EXAMPLE.COM. This ticket would then contain
    the PAC of the modified user name (principal).
  - CVE-2019-12098, client-only:
    RFC8062 Section 7 requires verification of the PA-PKINIT-KX
    key exchange when anonymous PKINIT is used. Failure to do
    so can permit an active attacker to become a
    man-in-the-middle.
  + Bug fixes:
  - Happy eyeballs: Don't wait for responses from
    known-unreachable KDCs.
  - kdc:
    + check return copy_Realm, copy_PrincipalName,
    copy_EncryptionKey
  - kinit:
    + cleanup temporary ccaches
    + see man page for "kinit --anonymous" command line syntax
    change
  - kdc:
    + Make anonymous AS-requests more RFC8062-compliant.
    Updated expired test certificates
  - Solaris:
    + PKCS#11 hcrypto backend broken since 7.0.1
    + Building with Sun Pro C
  + Features:
  - kuser: support authenticated anonymous AS-REQs in kinit
  - kdc: support for anonymous TGS-REQs
  - kgetcred support for anonymous service tickets
  - Support builds with OpenSSL 1.1.1
- fixed heimdal-patched.diff and reproducible.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1653480000">- Apply Shared Library Packaging Policy and resolve rpmlint
  errors like "libheimdal.x86_64: E: shlib-policy-name-error
  SONAME: libasn1.so.8, expected package suffix: 8"</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656417600">- Add heimdal-7.7.0-autoconf-2.70.patch: Fix build with autoconf
  2.70 (gh#heimdal/heimdal#856).</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656590400">- Add ldconfig scriptlets.
- Fix 'Conflicts:' tags.
- Remove obsolete macros and conditionals.
- Ran spec-cleaner.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1671624000">- Update to version 7.8.0
  + This release includes both the Heimdal 7.7.1 Security
    Vulnerability fixes and non-Security bug fixes/improvements.
  + Security Vulnerabilities:
  - CVE-2022-42898 PAC parse integer overflows
  - CVE-2022-3437 Overflows and non-constant time leaks in
    DES{,3} and arcfour
  - CVE-2022-41916 Fix Unicode normalization read of 1 bytes past
    end of array
  - CVE-2021-44758 A null pointer de-reference DoS in SPNEGO
    acceptors
  - CVE-2021-3671 A null pointer de-reference when handling
    missing sname in TGS-REQ
  - CVE-2022-44640 Heimdal KDC: invalid free in ASN.1 codec
    Note that CVE-2022-44640 is a severe vulnerability,
    possibly a 10.0 on the Common Vulnerability Scoring
    System (CVSS) v3, as we believe it should be possible to
    get an RCE on a KDC, which means that credentials can be
    compromised that can be used to impersonate anyone in a
    realm or forest of realms.
    Heimdal's ASN.1 compiler generates code that allows
    specially crafted DER encodings of CHOICEs to invoke the
    wrong free function on the decoded structure upon decode
    error. This is known to impact the Heimdal KDC, leading to
    an invalid free() of an address partly or wholly under the
    control of the attacker, in turn leading to a potential
    remote code execution (RCE) vulnerability.
    This error affects the DER codec for all extensible CHOICE
    types used in Heimdal, though not all cases will be
    exploitable. We have not completed a thorough analysis of
    all the Heimdal components affected, thus the Kerberos
    client, the X.509 library, and other parts, may be affected
    as well.
    This bug has been in Heimdal's ASN.1 compiler since 2005,
    but it may only affect Heimdal 1.6 and up. It was first
    reported by Douglas Bagnall, though it had been found
    independently by the Heimdal maintainers via fuzzing a few
    weeks earlier.
    While no zero-day exploit is known, such an exploit will
    likely be available soon after public disclosure.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  + Other changes:
  - Bugs found by UBSAN (including the incorrect encoding of
    unconstrained INTEGER value -1).
  - Errors found by the LLVM scan-build static analyzer.
  - Errors found by the valgrind memory debugger.
  - Work around GCC Bug 95189 (memcmp wrongly stripped like
    strcmp).
  - Correct ASN.1 OID typo for SHA-384
  - Fix a deadlock in in the MEMORY ccache type.
  - TGS: strip forwardable and proxiable flags if the server is
    disallowed.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  - Incremental HDB propagation improvements
    Refactor send_diffs making it progressive
    Handle partial writes on non-blocking sockets
    Disable Nagle in iprop master and slave
    Use async I/O
    Don't send I_HAVE in response to AYT
    Do not recover log in kadm5_get_principal()
    Don't send diffs to slaves with not yet known version
    Don't stutter in send_diffs
  - Optional backwards-compatible anon-pkinit behavior
- Removed heimdal-7.7.0-autoconf-2.70.patch, fixed upstream.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1673352000">- replace libheimdal conflicts by obsoletes / provides to provide a
  smooth update in the new libheimdal-devel.</changelog>
</package>
<package pkgid="6b66875514b4791993b425bfcea62bcb72f461650ba021b2ff777042024c43be" name="libheimdal-devel" arch="ppc64le">
  <version epoch="0" ver="7.8.0" rel="bp154.2.4.1"/>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1440936000">- Initial package, version 1.6rc2
- Added patch heimdal-version-script-client.map.patch to add file
  version-script-client.map (File is present in git for tag 1.6rc2
  but missing in tarball).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441108800">- Some changes in spec file to enable build for SLES.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441195200">- Added Conflicts tags to spec file because devel package conflicts
  with krb5-devel and krb5-mini-devel.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441454400">- Added a patched instead of the original tarball because only
  shared libraries will be build and source files of these (not to
  be build) programs have problematic licenses.
- Added script heimdal-patch-source.sh to sources.
- Added patch heimdal-patched.diff that fixes configure.ac and
  several Makefile.am files to successfully build patched source.
- Removed unneeded dependencies in spec file for build.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1483790400">- Update to version 7.1.0
- Removed heimdal-version-script-client.map.patch, fixed upstream.
- Fixed heimdal-patched.diff.
- Unfortunately there is no updated changelog file in tarball,
  changes can be seen in source code version control systems
  history log.</changelog>
  <changelog author="jengelh@inai.de" date="1486036800">- Summary and RPM group update. Do a direct call to ldconfig
  where possible.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1497528000">- Update to version 7.3.0
  - Security
    + Fix transit path validation. Commit f469fc6 (2010-10-02)
    inadvertently caused the previous hop realm to not be added
    to the transit path of issued tickets. This may, in some
    cases, enable bypass of capath policy in Heimdal versions 1.5
    through 7.2.
    Note, this may break sites that rely on the bug. With the bug
    some incomplete [capaths] worked, that should not have.
    These may now break authentication in some cross-realm
    configurations. (CVE-2017-6594)
- Version 7.2.0
  - Bug fixes
    + Portability improvements.
    + More strict parsing of encoded URI components in HTTP KDC.
    + Fixed memory leak in malloc error recovery in NTLM GSSAPI
    mechanism.
    + Avoid overly specific CPU info in krb5-config in aid of
    reproducible builds.
    + Don't do AFS string-to-key tests when feature is disabled.
    + Skip mdb_stat test when the command is not available.
    + Windows: update SHA2 timestamp server.
    + hdb: add missing export
    hdb_generate_key_set_password_with_ks_tuple.
    + Fix signature of hdb_generate_key_set_password().
    + Windows: enable KX509 support in the KDC.
    + kdc: fix kx509 service principal match.
    + iprop: handle case where master sends nothing new.
    + ipropd-slave: fix incorrect error codes.
    + Allow choice of sqlite for HDB pref.
    + check-iprop: don't fail to kill daemons.
    + roken: pidfile -&gt; rk_pidfile.
    + kdc: _kdc_do_kx509 fix use after free error.
    + Do not detect x32 as 64-bit platform.
    + No sys/ttydefaults.h on CYGWIN.
    + Fix check-iprop races.
    + roken_detach_prep() close pipe.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1501761600">- Update to version 7.4.0
  - Security
  - Fix CVE-2017-11103: Orpheus' Lyre KDC-REP service name
    validation.
    This is a critical vulnerability.
    In _krb5_extract_ticket() the KDC-REP service name must be
    obtained from encrypted version stored in 'enc_part' instead
    of the unencrypted version stored in 'ticket'.
    Use of the unecrypted version provides an opportunity for
    successful server impersonation and other attacks.
    Identified by Jeffrey Altman, Viktor Duchovni and
    Nico Williams.
    See https://www.orpheus-lyre.info/ for more details.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1512648000">- Added Avoid_NULL_structure_pointer_member_dereference.patch,
  fixes (bsc#1071675).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1514548800">- Update to version 7.5.0
  - Security
  - Fix CVE-2017-17439, which is a remote denial of service
    vulnerability:
    In Heimdal 7.1 through 7.4, remote unauthenticated attackers
    are able to crash the KDC by sending a crafted UDP packet
    containing empty data fields for client name or realm.
  - Bug fixes
  - Handle long input lines when reloading database dumps.
  - In pre-forked mode (default on Unix), correctly clear the
    process ids of exited children, allowing new child processes
    to replace the old.
  - Fixed incorrect KDC response when no-cross realm TGT exists,
    allowing client requests to fail quickly rather than time
    out after trying to get a correct answer from each KDC.
- Fixed heimdal-patched.diff.
- Removed Avoid_NULL_structure_pointer_member_dereference.patch,
  fixed upstream.</changelog>
  <changelog author="bwiedemann@suse.com" date="1533643200">- Add reproducible.patch to override build date (boo#1047218)
- Use constant hostname (boo#1084909)</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1561291200">- Update to version 7.7.0
  + Bug fixes:
  - PKCS#11 hcrypto back-end:
    + initialize the p11_module_load function list
    + verify that not only is a mechanism present but that its
    mechanism info states that it offers the required
    encryption, decryption or digest services
  - krb5:
    + Starting with 7.6, Heimdal permitted requesting
    authenticated anonymous tickets. However, it did not
    verify that a KDC in fact returned an anonymous ticket
    when one was requested.
    + Cease setting the KDCOption reaquest_anonymous flag when
    issuing S4UProxy (constrained delegation) TGS requests.
    + when the Win2K PKINIT compatibility option is set, do not
    require krbtgt otherName to match when validating KDC
    certificate.
    + set PKINIT_BTMM flag per Apple implementation
    + use memset_s() instead of memset()
  - kdc:
    + When generating KRB5SignedPath in the AS, use the reply
    client name rather than the one from the request, so
    validation will work correctly in the TGS.
    + allow checksum of PA-FOR-USER to be HMAC_MD5. Even if TGT
    used an enctype with a different checksum. Per [MS-SFU]
    2.2.1 PA-FOR-USER the checksum is always HMAC_MD5, and
    that's what Windows and MIT clients send.
    In Heimdal both the client and kdc use instead the
    checksum of the TGT, and therefore work with each other
    but Windows and MIT clients fail against Heimdal KDC.
    Both Windows and MIT KDC would allow any keyed checksum
    to be used so Heimdal client work fine against it.
    Change Heimdal KDC to allow HMAC_MD5 even for non RC4
    based TGT in order to support per-spec clients.
    + use memset_s() instead of memset()
    + Detect Heimdal 1.0 through 7.6 clients that issue
    S4UProxy (constrained delegation) TGS Requests with the
    request anonymous flag set. These requests will be
    treated as S4UProxy requests and not anonymous requests.
  - HDB:
    + Set SQLite3 backend default page size to 8KB.
    + Add hdb_set_sync() method
  - kadmind:
    + disable HDB sync during database load avoiding
    unnecessary disk i/o.
  - ipropd:
    + disable HDB sync during receive_everything. Doing an
    fsync per-record when receiving the complete HDB is a
    performance disaster. Among other things, if the HDB is
    very large, then one slave receving a full HDB can cause
    other slaves to timeout and, if HDB write activity is
    high enough to cause iprop log truncation, then also need
    full syncs, which leads to a cycle of full syncs for all
    slaves until HDB write activity drops.
    Allowing the iprop log to be larger helps, but improving
    receive_everything() performance helps even more.
  - kinit:
    + Anonymous PKINIT tickets discard the realm information
    used to locate the issuing AS. Store the issuing realm in
    the credentials cache in order to locate a KDC which can
    renew them.
    + Do not leak the result of krb5_cc_get_config() when
    determining anonymous PKINIT start realm.
  - klist:
    + Show transited-policy-checked, ok-as-delegate and
    anonymous flags when listing credentials.
  - tests:
    + Regenerate certs so that they expire before the 2038
    armageddon so the test suite will pass on 32-bit
    operating systems until the underlying issues can be
    resolved.
  - Solaris:
    + Define _STDC_C11_BCI for memset_s prototype
  - build tooling:
    + Convert from python 2 to python 3
  - documentation:
    + rename verify-password to verify-password-quality
    + hprop default mode is encrypt
    + kadmind "all" permission does not include "get-keys"
    + verify-password-quality might not be stateless
- Version 7.6.0
  + Security (#555):
  - CVE-2018-16860 Heimdal KDC: Reject PA-S4U2Self with unkeyed
    checksum
    When the Heimdal KDC checks the checksum that is placed on
    the S4U2Self packet by the server to protect the requested
    principal against modification, it does not confirm that
    the checksum algorithm that protects the user name
    (principal) in the request is keyed. This allows a
    man-in-the-middle attacker who can intercept the request to
    the KDC to modify the packet by replacing the user name
    (principal) in the request with any desired user name
    (principal) that exists in the KDC and replace the checksum
    protecting that name with a CRC32 checksum (which requires
    no prior knowledge to compute).
    This would allow a S4U2Self ticket requested on behalf of
    user name (principal) user@EXAMPLE.COM to any service to be
    changed to a S4U2Self ticket with a user name (principal) of
    Administrator@EXAMPLE.COM. This ticket would then contain
    the PAC of the modified user name (principal).
  - CVE-2019-12098, client-only:
    RFC8062 Section 7 requires verification of the PA-PKINIT-KX
    key exchange when anonymous PKINIT is used. Failure to do
    so can permit an active attacker to become a
    man-in-the-middle.
  + Bug fixes:
  - Happy eyeballs: Don't wait for responses from
    known-unreachable KDCs.
  - kdc:
    + check return copy_Realm, copy_PrincipalName,
    copy_EncryptionKey
  - kinit:
    + cleanup temporary ccaches
    + see man page for "kinit --anonymous" command line syntax
    change
  - kdc:
    + Make anonymous AS-requests more RFC8062-compliant.
    Updated expired test certificates
  - Solaris:
    + PKCS#11 hcrypto backend broken since 7.0.1
    + Building with Sun Pro C
  + Features:
  - kuser: support authenticated anonymous AS-REQs in kinit
  - kdc: support for anonymous TGS-REQs
  - kgetcred support for anonymous service tickets
  - Support builds with OpenSSL 1.1.1
- fixed heimdal-patched.diff and reproducible.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1653480000">- Apply Shared Library Packaging Policy and resolve rpmlint
  errors like "libheimdal.x86_64: E: shlib-policy-name-error
  SONAME: libasn1.so.8, expected package suffix: 8"</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656417600">- Add heimdal-7.7.0-autoconf-2.70.patch: Fix build with autoconf
  2.70 (gh#heimdal/heimdal#856).</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656590400">- Add ldconfig scriptlets.
- Fix 'Conflicts:' tags.
- Remove obsolete macros and conditionals.
- Ran spec-cleaner.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1671624000">- Update to version 7.8.0
  + This release includes both the Heimdal 7.7.1 Security
    Vulnerability fixes and non-Security bug fixes/improvements.
  + Security Vulnerabilities:
  - CVE-2022-42898 PAC parse integer overflows
  - CVE-2022-3437 Overflows and non-constant time leaks in
    DES{,3} and arcfour
  - CVE-2022-41916 Fix Unicode normalization read of 1 bytes past
    end of array
  - CVE-2021-44758 A null pointer de-reference DoS in SPNEGO
    acceptors
  - CVE-2021-3671 A null pointer de-reference when handling
    missing sname in TGS-REQ
  - CVE-2022-44640 Heimdal KDC: invalid free in ASN.1 codec
    Note that CVE-2022-44640 is a severe vulnerability,
    possibly a 10.0 on the Common Vulnerability Scoring
    System (CVSS) v3, as we believe it should be possible to
    get an RCE on a KDC, which means that credentials can be
    compromised that can be used to impersonate anyone in a
    realm or forest of realms.
    Heimdal's ASN.1 compiler generates code that allows
    specially crafted DER encodings of CHOICEs to invoke the
    wrong free function on the decoded structure upon decode
    error. This is known to impact the Heimdal KDC, leading to
    an invalid free() of an address partly or wholly under the
    control of the attacker, in turn leading to a potential
    remote code execution (RCE) vulnerability.
    This error affects the DER codec for all extensible CHOICE
    types used in Heimdal, though not all cases will be
    exploitable. We have not completed a thorough analysis of
    all the Heimdal components affected, thus the Kerberos
    client, the X.509 library, and other parts, may be affected
    as well.
    This bug has been in Heimdal's ASN.1 compiler since 2005,
    but it may only affect Heimdal 1.6 and up. It was first
    reported by Douglas Bagnall, though it had been found
    independently by the Heimdal maintainers via fuzzing a few
    weeks earlier.
    While no zero-day exploit is known, such an exploit will
    likely be available soon after public disclosure.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  + Other changes:
  - Bugs found by UBSAN (including the incorrect encoding of
    unconstrained INTEGER value -1).
  - Errors found by the LLVM scan-build static analyzer.
  - Errors found by the valgrind memory debugger.
  - Work around GCC Bug 95189 (memcmp wrongly stripped like
    strcmp).
  - Correct ASN.1 OID typo for SHA-384
  - Fix a deadlock in in the MEMORY ccache type.
  - TGS: strip forwardable and proxiable flags if the server is
    disallowed.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  - Incremental HDB propagation improvements
    Refactor send_diffs making it progressive
    Handle partial writes on non-blocking sockets
    Disable Nagle in iprop master and slave
    Use async I/O
    Don't send I_HAVE in response to AYT
    Do not recover log in kadm5_get_principal()
    Don't send diffs to slaves with not yet known version
    Don't stutter in send_diffs
  - Optional backwards-compatible anon-pkinit behavior
- Removed heimdal-7.7.0-autoconf-2.70.patch, fixed upstream.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1673352000">- replace libheimdal conflicts by obsoletes / provides to provide a
  smooth update in the new libheimdal-devel.</changelog>
</package>
<package pkgid="918284055fd3012b330bb9b227de41aa381b0b112599ee281031f0b704f1a139" name="libheimdal-devel" arch="s390x">
  <version epoch="0" ver="7.8.0" rel="bp154.2.4.1"/>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1440936000">- Initial package, version 1.6rc2
- Added patch heimdal-version-script-client.map.patch to add file
  version-script-client.map (File is present in git for tag 1.6rc2
  but missing in tarball).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441108800">- Some changes in spec file to enable build for SLES.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441195200">- Added Conflicts tags to spec file because devel package conflicts
  with krb5-devel and krb5-mini-devel.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441454400">- Added a patched instead of the original tarball because only
  shared libraries will be build and source files of these (not to
  be build) programs have problematic licenses.
- Added script heimdal-patch-source.sh to sources.
- Added patch heimdal-patched.diff that fixes configure.ac and
  several Makefile.am files to successfully build patched source.
- Removed unneeded dependencies in spec file for build.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1483790400">- Update to version 7.1.0
- Removed heimdal-version-script-client.map.patch, fixed upstream.
- Fixed heimdal-patched.diff.
- Unfortunately there is no updated changelog file in tarball,
  changes can be seen in source code version control systems
  history log.</changelog>
  <changelog author="jengelh@inai.de" date="1486036800">- Summary and RPM group update. Do a direct call to ldconfig
  where possible.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1497528000">- Update to version 7.3.0
  - Security
    + Fix transit path validation. Commit f469fc6 (2010-10-02)
    inadvertently caused the previous hop realm to not be added
    to the transit path of issued tickets. This may, in some
    cases, enable bypass of capath policy in Heimdal versions 1.5
    through 7.2.
    Note, this may break sites that rely on the bug. With the bug
    some incomplete [capaths] worked, that should not have.
    These may now break authentication in some cross-realm
    configurations. (CVE-2017-6594)
- Version 7.2.0
  - Bug fixes
    + Portability improvements.
    + More strict parsing of encoded URI components in HTTP KDC.
    + Fixed memory leak in malloc error recovery in NTLM GSSAPI
    mechanism.
    + Avoid overly specific CPU info in krb5-config in aid of
    reproducible builds.
    + Don't do AFS string-to-key tests when feature is disabled.
    + Skip mdb_stat test when the command is not available.
    + Windows: update SHA2 timestamp server.
    + hdb: add missing export
    hdb_generate_key_set_password_with_ks_tuple.
    + Fix signature of hdb_generate_key_set_password().
    + Windows: enable KX509 support in the KDC.
    + kdc: fix kx509 service principal match.
    + iprop: handle case where master sends nothing new.
    + ipropd-slave: fix incorrect error codes.
    + Allow choice of sqlite for HDB pref.
    + check-iprop: don't fail to kill daemons.
    + roken: pidfile -&gt; rk_pidfile.
    + kdc: _kdc_do_kx509 fix use after free error.
    + Do not detect x32 as 64-bit platform.
    + No sys/ttydefaults.h on CYGWIN.
    + Fix check-iprop races.
    + roken_detach_prep() close pipe.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1501761600">- Update to version 7.4.0
  - Security
  - Fix CVE-2017-11103: Orpheus' Lyre KDC-REP service name
    validation.
    This is a critical vulnerability.
    In _krb5_extract_ticket() the KDC-REP service name must be
    obtained from encrypted version stored in 'enc_part' instead
    of the unencrypted version stored in 'ticket'.
    Use of the unecrypted version provides an opportunity for
    successful server impersonation and other attacks.
    Identified by Jeffrey Altman, Viktor Duchovni and
    Nico Williams.
    See https://www.orpheus-lyre.info/ for more details.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1512648000">- Added Avoid_NULL_structure_pointer_member_dereference.patch,
  fixes (bsc#1071675).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1514548800">- Update to version 7.5.0
  - Security
  - Fix CVE-2017-17439, which is a remote denial of service
    vulnerability:
    In Heimdal 7.1 through 7.4, remote unauthenticated attackers
    are able to crash the KDC by sending a crafted UDP packet
    containing empty data fields for client name or realm.
  - Bug fixes
  - Handle long input lines when reloading database dumps.
  - In pre-forked mode (default on Unix), correctly clear the
    process ids of exited children, allowing new child processes
    to replace the old.
  - Fixed incorrect KDC response when no-cross realm TGT exists,
    allowing client requests to fail quickly rather than time
    out after trying to get a correct answer from each KDC.
- Fixed heimdal-patched.diff.
- Removed Avoid_NULL_structure_pointer_member_dereference.patch,
  fixed upstream.</changelog>
  <changelog author="bwiedemann@suse.com" date="1533643200">- Add reproducible.patch to override build date (boo#1047218)
- Use constant hostname (boo#1084909)</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1561291200">- Update to version 7.7.0
  + Bug fixes:
  - PKCS#11 hcrypto back-end:
    + initialize the p11_module_load function list
    + verify that not only is a mechanism present but that its
    mechanism info states that it offers the required
    encryption, decryption or digest services
  - krb5:
    + Starting with 7.6, Heimdal permitted requesting
    authenticated anonymous tickets. However, it did not
    verify that a KDC in fact returned an anonymous ticket
    when one was requested.
    + Cease setting the KDCOption reaquest_anonymous flag when
    issuing S4UProxy (constrained delegation) TGS requests.
    + when the Win2K PKINIT compatibility option is set, do not
    require krbtgt otherName to match when validating KDC
    certificate.
    + set PKINIT_BTMM flag per Apple implementation
    + use memset_s() instead of memset()
  - kdc:
    + When generating KRB5SignedPath in the AS, use the reply
    client name rather than the one from the request, so
    validation will work correctly in the TGS.
    + allow checksum of PA-FOR-USER to be HMAC_MD5. Even if TGT
    used an enctype with a different checksum. Per [MS-SFU]
    2.2.1 PA-FOR-USER the checksum is always HMAC_MD5, and
    that's what Windows and MIT clients send.
    In Heimdal both the client and kdc use instead the
    checksum of the TGT, and therefore work with each other
    but Windows and MIT clients fail against Heimdal KDC.
    Both Windows and MIT KDC would allow any keyed checksum
    to be used so Heimdal client work fine against it.
    Change Heimdal KDC to allow HMAC_MD5 even for non RC4
    based TGT in order to support per-spec clients.
    + use memset_s() instead of memset()
    + Detect Heimdal 1.0 through 7.6 clients that issue
    S4UProxy (constrained delegation) TGS Requests with the
    request anonymous flag set. These requests will be
    treated as S4UProxy requests and not anonymous requests.
  - HDB:
    + Set SQLite3 backend default page size to 8KB.
    + Add hdb_set_sync() method
  - kadmind:
    + disable HDB sync during database load avoiding
    unnecessary disk i/o.
  - ipropd:
    + disable HDB sync during receive_everything. Doing an
    fsync per-record when receiving the complete HDB is a
    performance disaster. Among other things, if the HDB is
    very large, then one slave receving a full HDB can cause
    other slaves to timeout and, if HDB write activity is
    high enough to cause iprop log truncation, then also need
    full syncs, which leads to a cycle of full syncs for all
    slaves until HDB write activity drops.
    Allowing the iprop log to be larger helps, but improving
    receive_everything() performance helps even more.
  - kinit:
    + Anonymous PKINIT tickets discard the realm information
    used to locate the issuing AS. Store the issuing realm in
    the credentials cache in order to locate a KDC which can
    renew them.
    + Do not leak the result of krb5_cc_get_config() when
    determining anonymous PKINIT start realm.
  - klist:
    + Show transited-policy-checked, ok-as-delegate and
    anonymous flags when listing credentials.
  - tests:
    + Regenerate certs so that they expire before the 2038
    armageddon so the test suite will pass on 32-bit
    operating systems until the underlying issues can be
    resolved.
  - Solaris:
    + Define _STDC_C11_BCI for memset_s prototype
  - build tooling:
    + Convert from python 2 to python 3
  - documentation:
    + rename verify-password to verify-password-quality
    + hprop default mode is encrypt
    + kadmind "all" permission does not include "get-keys"
    + verify-password-quality might not be stateless
- Version 7.6.0
  + Security (#555):
  - CVE-2018-16860 Heimdal KDC: Reject PA-S4U2Self with unkeyed
    checksum
    When the Heimdal KDC checks the checksum that is placed on
    the S4U2Self packet by the server to protect the requested
    principal against modification, it does not confirm that
    the checksum algorithm that protects the user name
    (principal) in the request is keyed. This allows a
    man-in-the-middle attacker who can intercept the request to
    the KDC to modify the packet by replacing the user name
    (principal) in the request with any desired user name
    (principal) that exists in the KDC and replace the checksum
    protecting that name with a CRC32 checksum (which requires
    no prior knowledge to compute).
    This would allow a S4U2Self ticket requested on behalf of
    user name (principal) user@EXAMPLE.COM to any service to be
    changed to a S4U2Self ticket with a user name (principal) of
    Administrator@EXAMPLE.COM. This ticket would then contain
    the PAC of the modified user name (principal).
  - CVE-2019-12098, client-only:
    RFC8062 Section 7 requires verification of the PA-PKINIT-KX
    key exchange when anonymous PKINIT is used. Failure to do
    so can permit an active attacker to become a
    man-in-the-middle.
  + Bug fixes:
  - Happy eyeballs: Don't wait for responses from
    known-unreachable KDCs.
  - kdc:
    + check return copy_Realm, copy_PrincipalName,
    copy_EncryptionKey
  - kinit:
    + cleanup temporary ccaches
    + see man page for "kinit --anonymous" command line syntax
    change
  - kdc:
    + Make anonymous AS-requests more RFC8062-compliant.
    Updated expired test certificates
  - Solaris:
    + PKCS#11 hcrypto backend broken since 7.0.1
    + Building with Sun Pro C
  + Features:
  - kuser: support authenticated anonymous AS-REQs in kinit
  - kdc: support for anonymous TGS-REQs
  - kgetcred support for anonymous service tickets
  - Support builds with OpenSSL 1.1.1
- fixed heimdal-patched.diff and reproducible.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1653480000">- Apply Shared Library Packaging Policy and resolve rpmlint
  errors like "libheimdal.x86_64: E: shlib-policy-name-error
  SONAME: libasn1.so.8, expected package suffix: 8"</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656417600">- Add heimdal-7.7.0-autoconf-2.70.patch: Fix build with autoconf
  2.70 (gh#heimdal/heimdal#856).</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656590400">- Add ldconfig scriptlets.
- Fix 'Conflicts:' tags.
- Remove obsolete macros and conditionals.
- Ran spec-cleaner.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1671624000">- Update to version 7.8.0
  + This release includes both the Heimdal 7.7.1 Security
    Vulnerability fixes and non-Security bug fixes/improvements.
  + Security Vulnerabilities:
  - CVE-2022-42898 PAC parse integer overflows
  - CVE-2022-3437 Overflows and non-constant time leaks in
    DES{,3} and arcfour
  - CVE-2022-41916 Fix Unicode normalization read of 1 bytes past
    end of array
  - CVE-2021-44758 A null pointer de-reference DoS in SPNEGO
    acceptors
  - CVE-2021-3671 A null pointer de-reference when handling
    missing sname in TGS-REQ
  - CVE-2022-44640 Heimdal KDC: invalid free in ASN.1 codec
    Note that CVE-2022-44640 is a severe vulnerability,
    possibly a 10.0 on the Common Vulnerability Scoring
    System (CVSS) v3, as we believe it should be possible to
    get an RCE on a KDC, which means that credentials can be
    compromised that can be used to impersonate anyone in a
    realm or forest of realms.
    Heimdal's ASN.1 compiler generates code that allows
    specially crafted DER encodings of CHOICEs to invoke the
    wrong free function on the decoded structure upon decode
    error. This is known to impact the Heimdal KDC, leading to
    an invalid free() of an address partly or wholly under the
    control of the attacker, in turn leading to a potential
    remote code execution (RCE) vulnerability.
    This error affects the DER codec for all extensible CHOICE
    types used in Heimdal, though not all cases will be
    exploitable. We have not completed a thorough analysis of
    all the Heimdal components affected, thus the Kerberos
    client, the X.509 library, and other parts, may be affected
    as well.
    This bug has been in Heimdal's ASN.1 compiler since 2005,
    but it may only affect Heimdal 1.6 and up. It was first
    reported by Douglas Bagnall, though it had been found
    independently by the Heimdal maintainers via fuzzing a few
    weeks earlier.
    While no zero-day exploit is known, such an exploit will
    likely be available soon after public disclosure.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  + Other changes:
  - Bugs found by UBSAN (including the incorrect encoding of
    unconstrained INTEGER value -1).
  - Errors found by the LLVM scan-build static analyzer.
  - Errors found by the valgrind memory debugger.
  - Work around GCC Bug 95189 (memcmp wrongly stripped like
    strcmp).
  - Correct ASN.1 OID typo for SHA-384
  - Fix a deadlock in in the MEMORY ccache type.
  - TGS: strip forwardable and proxiable flags if the server is
    disallowed.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  - Incremental HDB propagation improvements
    Refactor send_diffs making it progressive
    Handle partial writes on non-blocking sockets
    Disable Nagle in iprop master and slave
    Use async I/O
    Don't send I_HAVE in response to AYT
    Do not recover log in kadm5_get_principal()
    Don't send diffs to slaves with not yet known version
    Don't stutter in send_diffs
  - Optional backwards-compatible anon-pkinit behavior
- Removed heimdal-7.7.0-autoconf-2.70.patch, fixed upstream.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1673352000">- replace libheimdal conflicts by obsoletes / provides to provide a
  smooth update in the new libheimdal-devel.</changelog>
</package>
<package pkgid="994283ab16641467727801b3220e91f2bbd9c411b59ca256c5065e6cc2b33dc0" name="libheimdal-devel" arch="x86_64">
  <version epoch="0" ver="7.8.0" rel="bp154.2.4.1"/>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1440936000">- Initial package, version 1.6rc2
- Added patch heimdal-version-script-client.map.patch to add file
  version-script-client.map (File is present in git for tag 1.6rc2
  but missing in tarball).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441108800">- Some changes in spec file to enable build for SLES.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441195200">- Added Conflicts tags to spec file because devel package conflicts
  with krb5-devel and krb5-mini-devel.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441454400">- Added a patched instead of the original tarball because only
  shared libraries will be build and source files of these (not to
  be build) programs have problematic licenses.
- Added script heimdal-patch-source.sh to sources.
- Added patch heimdal-patched.diff that fixes configure.ac and
  several Makefile.am files to successfully build patched source.
- Removed unneeded dependencies in spec file for build.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1483790400">- Update to version 7.1.0
- Removed heimdal-version-script-client.map.patch, fixed upstream.
- Fixed heimdal-patched.diff.
- Unfortunately there is no updated changelog file in tarball,
  changes can be seen in source code version control systems
  history log.</changelog>
  <changelog author="jengelh@inai.de" date="1486036800">- Summary and RPM group update. Do a direct call to ldconfig
  where possible.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1497528000">- Update to version 7.3.0
  - Security
    + Fix transit path validation. Commit f469fc6 (2010-10-02)
    inadvertently caused the previous hop realm to not be added
    to the transit path of issued tickets. This may, in some
    cases, enable bypass of capath policy in Heimdal versions 1.5
    through 7.2.
    Note, this may break sites that rely on the bug. With the bug
    some incomplete [capaths] worked, that should not have.
    These may now break authentication in some cross-realm
    configurations. (CVE-2017-6594)
- Version 7.2.0
  - Bug fixes
    + Portability improvements.
    + More strict parsing of encoded URI components in HTTP KDC.
    + Fixed memory leak in malloc error recovery in NTLM GSSAPI
    mechanism.
    + Avoid overly specific CPU info in krb5-config in aid of
    reproducible builds.
    + Don't do AFS string-to-key tests when feature is disabled.
    + Skip mdb_stat test when the command is not available.
    + Windows: update SHA2 timestamp server.
    + hdb: add missing export
    hdb_generate_key_set_password_with_ks_tuple.
    + Fix signature of hdb_generate_key_set_password().
    + Windows: enable KX509 support in the KDC.
    + kdc: fix kx509 service principal match.
    + iprop: handle case where master sends nothing new.
    + ipropd-slave: fix incorrect error codes.
    + Allow choice of sqlite for HDB pref.
    + check-iprop: don't fail to kill daemons.
    + roken: pidfile -&gt; rk_pidfile.
    + kdc: _kdc_do_kx509 fix use after free error.
    + Do not detect x32 as 64-bit platform.
    + No sys/ttydefaults.h on CYGWIN.
    + Fix check-iprop races.
    + roken_detach_prep() close pipe.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1501761600">- Update to version 7.4.0
  - Security
  - Fix CVE-2017-11103: Orpheus' Lyre KDC-REP service name
    validation.
    This is a critical vulnerability.
    In _krb5_extract_ticket() the KDC-REP service name must be
    obtained from encrypted version stored in 'enc_part' instead
    of the unencrypted version stored in 'ticket'.
    Use of the unecrypted version provides an opportunity for
    successful server impersonation and other attacks.
    Identified by Jeffrey Altman, Viktor Duchovni and
    Nico Williams.
    See https://www.orpheus-lyre.info/ for more details.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1512648000">- Added Avoid_NULL_structure_pointer_member_dereference.patch,
  fixes (bsc#1071675).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1514548800">- Update to version 7.5.0
  - Security
  - Fix CVE-2017-17439, which is a remote denial of service
    vulnerability:
    In Heimdal 7.1 through 7.4, remote unauthenticated attackers
    are able to crash the KDC by sending a crafted UDP packet
    containing empty data fields for client name or realm.
  - Bug fixes
  - Handle long input lines when reloading database dumps.
  - In pre-forked mode (default on Unix), correctly clear the
    process ids of exited children, allowing new child processes
    to replace the old.
  - Fixed incorrect KDC response when no-cross realm TGT exists,
    allowing client requests to fail quickly rather than time
    out after trying to get a correct answer from each KDC.
- Fixed heimdal-patched.diff.
- Removed Avoid_NULL_structure_pointer_member_dereference.patch,
  fixed upstream.</changelog>
  <changelog author="bwiedemann@suse.com" date="1533643200">- Add reproducible.patch to override build date (boo#1047218)
- Use constant hostname (boo#1084909)</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1561291200">- Update to version 7.7.0
  + Bug fixes:
  - PKCS#11 hcrypto back-end:
    + initialize the p11_module_load function list
    + verify that not only is a mechanism present but that its
    mechanism info states that it offers the required
    encryption, decryption or digest services
  - krb5:
    + Starting with 7.6, Heimdal permitted requesting
    authenticated anonymous tickets. However, it did not
    verify that a KDC in fact returned an anonymous ticket
    when one was requested.
    + Cease setting the KDCOption reaquest_anonymous flag when
    issuing S4UProxy (constrained delegation) TGS requests.
    + when the Win2K PKINIT compatibility option is set, do not
    require krbtgt otherName to match when validating KDC
    certificate.
    + set PKINIT_BTMM flag per Apple implementation
    + use memset_s() instead of memset()
  - kdc:
    + When generating KRB5SignedPath in the AS, use the reply
    client name rather than the one from the request, so
    validation will work correctly in the TGS.
    + allow checksum of PA-FOR-USER to be HMAC_MD5. Even if TGT
    used an enctype with a different checksum. Per [MS-SFU]
    2.2.1 PA-FOR-USER the checksum is always HMAC_MD5, and
    that's what Windows and MIT clients send.
    In Heimdal both the client and kdc use instead the
    checksum of the TGT, and therefore work with each other
    but Windows and MIT clients fail against Heimdal KDC.
    Both Windows and MIT KDC would allow any keyed checksum
    to be used so Heimdal client work fine against it.
    Change Heimdal KDC to allow HMAC_MD5 even for non RC4
    based TGT in order to support per-spec clients.
    + use memset_s() instead of memset()
    + Detect Heimdal 1.0 through 7.6 clients that issue
    S4UProxy (constrained delegation) TGS Requests with the
    request anonymous flag set. These requests will be
    treated as S4UProxy requests and not anonymous requests.
  - HDB:
    + Set SQLite3 backend default page size to 8KB.
    + Add hdb_set_sync() method
  - kadmind:
    + disable HDB sync during database load avoiding
    unnecessary disk i/o.
  - ipropd:
    + disable HDB sync during receive_everything. Doing an
    fsync per-record when receiving the complete HDB is a
    performance disaster. Among other things, if the HDB is
    very large, then one slave receving a full HDB can cause
    other slaves to timeout and, if HDB write activity is
    high enough to cause iprop log truncation, then also need
    full syncs, which leads to a cycle of full syncs for all
    slaves until HDB write activity drops.
    Allowing the iprop log to be larger helps, but improving
    receive_everything() performance helps even more.
  - kinit:
    + Anonymous PKINIT tickets discard the realm information
    used to locate the issuing AS. Store the issuing realm in
    the credentials cache in order to locate a KDC which can
    renew them.
    + Do not leak the result of krb5_cc_get_config() when
    determining anonymous PKINIT start realm.
  - klist:
    + Show transited-policy-checked, ok-as-delegate and
    anonymous flags when listing credentials.
  - tests:
    + Regenerate certs so that they expire before the 2038
    armageddon so the test suite will pass on 32-bit
    operating systems until the underlying issues can be
    resolved.
  - Solaris:
    + Define _STDC_C11_BCI for memset_s prototype
  - build tooling:
    + Convert from python 2 to python 3
  - documentation:
    + rename verify-password to verify-password-quality
    + hprop default mode is encrypt
    + kadmind "all" permission does not include "get-keys"
    + verify-password-quality might not be stateless
- Version 7.6.0
  + Security (#555):
  - CVE-2018-16860 Heimdal KDC: Reject PA-S4U2Self with unkeyed
    checksum
    When the Heimdal KDC checks the checksum that is placed on
    the S4U2Self packet by the server to protect the requested
    principal against modification, it does not confirm that
    the checksum algorithm that protects the user name
    (principal) in the request is keyed. This allows a
    man-in-the-middle attacker who can intercept the request to
    the KDC to modify the packet by replacing the user name
    (principal) in the request with any desired user name
    (principal) that exists in the KDC and replace the checksum
    protecting that name with a CRC32 checksum (which requires
    no prior knowledge to compute).
    This would allow a S4U2Self ticket requested on behalf of
    user name (principal) user@EXAMPLE.COM to any service to be
    changed to a S4U2Self ticket with a user name (principal) of
    Administrator@EXAMPLE.COM. This ticket would then contain
    the PAC of the modified user name (principal).
  - CVE-2019-12098, client-only:
    RFC8062 Section 7 requires verification of the PA-PKINIT-KX
    key exchange when anonymous PKINIT is used. Failure to do
    so can permit an active attacker to become a
    man-in-the-middle.
  + Bug fixes:
  - Happy eyeballs: Don't wait for responses from
    known-unreachable KDCs.
  - kdc:
    + check return copy_Realm, copy_PrincipalName,
    copy_EncryptionKey
  - kinit:
    + cleanup temporary ccaches
    + see man page for "kinit --anonymous" command line syntax
    change
  - kdc:
    + Make anonymous AS-requests more RFC8062-compliant.
    Updated expired test certificates
  - Solaris:
    + PKCS#11 hcrypto backend broken since 7.0.1
    + Building with Sun Pro C
  + Features:
  - kuser: support authenticated anonymous AS-REQs in kinit
  - kdc: support for anonymous TGS-REQs
  - kgetcred support for anonymous service tickets
  - Support builds with OpenSSL 1.1.1
- fixed heimdal-patched.diff and reproducible.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1653480000">- Apply Shared Library Packaging Policy and resolve rpmlint
  errors like "libheimdal.x86_64: E: shlib-policy-name-error
  SONAME: libasn1.so.8, expected package suffix: 8"</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656417600">- Add heimdal-7.7.0-autoconf-2.70.patch: Fix build with autoconf
  2.70 (gh#heimdal/heimdal#856).</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656590400">- Add ldconfig scriptlets.
- Fix 'Conflicts:' tags.
- Remove obsolete macros and conditionals.
- Ran spec-cleaner.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1671624000">- Update to version 7.8.0
  + This release includes both the Heimdal 7.7.1 Security
    Vulnerability fixes and non-Security bug fixes/improvements.
  + Security Vulnerabilities:
  - CVE-2022-42898 PAC parse integer overflows
  - CVE-2022-3437 Overflows and non-constant time leaks in
    DES{,3} and arcfour
  - CVE-2022-41916 Fix Unicode normalization read of 1 bytes past
    end of array
  - CVE-2021-44758 A null pointer de-reference DoS in SPNEGO
    acceptors
  - CVE-2021-3671 A null pointer de-reference when handling
    missing sname in TGS-REQ
  - CVE-2022-44640 Heimdal KDC: invalid free in ASN.1 codec
    Note that CVE-2022-44640 is a severe vulnerability,
    possibly a 10.0 on the Common Vulnerability Scoring
    System (CVSS) v3, as we believe it should be possible to
    get an RCE on a KDC, which means that credentials can be
    compromised that can be used to impersonate anyone in a
    realm or forest of realms.
    Heimdal's ASN.1 compiler generates code that allows
    specially crafted DER encodings of CHOICEs to invoke the
    wrong free function on the decoded structure upon decode
    error. This is known to impact the Heimdal KDC, leading to
    an invalid free() of an address partly or wholly under the
    control of the attacker, in turn leading to a potential
    remote code execution (RCE) vulnerability.
    This error affects the DER codec for all extensible CHOICE
    types used in Heimdal, though not all cases will be
    exploitable. We have not completed a thorough analysis of
    all the Heimdal components affected, thus the Kerberos
    client, the X.509 library, and other parts, may be affected
    as well.
    This bug has been in Heimdal's ASN.1 compiler since 2005,
    but it may only affect Heimdal 1.6 and up. It was first
    reported by Douglas Bagnall, though it had been found
    independently by the Heimdal maintainers via fuzzing a few
    weeks earlier.
    While no zero-day exploit is known, such an exploit will
    likely be available soon after public disclosure.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  + Other changes:
  - Bugs found by UBSAN (including the incorrect encoding of
    unconstrained INTEGER value -1).
  - Errors found by the LLVM scan-build static analyzer.
  - Errors found by the valgrind memory debugger.
  - Work around GCC Bug 95189 (memcmp wrongly stripped like
    strcmp).
  - Correct ASN.1 OID typo for SHA-384
  - Fix a deadlock in in the MEMORY ccache type.
  - TGS: strip forwardable and proxiable flags if the server is
    disallowed.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  - Incremental HDB propagation improvements
    Refactor send_diffs making it progressive
    Handle partial writes on non-blocking sockets
    Disable Nagle in iprop master and slave
    Use async I/O
    Don't send I_HAVE in response to AYT
    Do not recover log in kadm5_get_principal()
    Don't send diffs to slaves with not yet known version
    Don't stutter in send_diffs
  - Optional backwards-compatible anon-pkinit behavior
- Removed heimdal-7.7.0-autoconf-2.70.patch, fixed upstream.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1673352000">- replace libheimdal conflicts by obsoletes / provides to provide a
  smooth update in the new libheimdal-devel.</changelog>
</package>
<package pkgid="8cb046ee22b5cfef63ddca18ba70fadc8b323a4f1b07131c933253e72628f498" name="libheimedit0" arch="aarch64">
  <version epoch="0" ver="7.8.0" rel="bp154.2.4.1"/>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1440936000">- Initial package, version 1.6rc2
- Added patch heimdal-version-script-client.map.patch to add file
  version-script-client.map (File is present in git for tag 1.6rc2
  but missing in tarball).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441108800">- Some changes in spec file to enable build for SLES.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441195200">- Added Conflicts tags to spec file because devel package conflicts
  with krb5-devel and krb5-mini-devel.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441454400">- Added a patched instead of the original tarball because only
  shared libraries will be build and source files of these (not to
  be build) programs have problematic licenses.
- Added script heimdal-patch-source.sh to sources.
- Added patch heimdal-patched.diff that fixes configure.ac and
  several Makefile.am files to successfully build patched source.
- Removed unneeded dependencies in spec file for build.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1483790400">- Update to version 7.1.0
- Removed heimdal-version-script-client.map.patch, fixed upstream.
- Fixed heimdal-patched.diff.
- Unfortunately there is no updated changelog file in tarball,
  changes can be seen in source code version control systems
  history log.</changelog>
  <changelog author="jengelh@inai.de" date="1486036800">- Summary and RPM group update. Do a direct call to ldconfig
  where possible.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1497528000">- Update to version 7.3.0
  - Security
    + Fix transit path validation. Commit f469fc6 (2010-10-02)
    inadvertently caused the previous hop realm to not be added
    to the transit path of issued tickets. This may, in some
    cases, enable bypass of capath policy in Heimdal versions 1.5
    through 7.2.
    Note, this may break sites that rely on the bug. With the bug
    some incomplete [capaths] worked, that should not have.
    These may now break authentication in some cross-realm
    configurations. (CVE-2017-6594)
- Version 7.2.0
  - Bug fixes
    + Portability improvements.
    + More strict parsing of encoded URI components in HTTP KDC.
    + Fixed memory leak in malloc error recovery in NTLM GSSAPI
    mechanism.
    + Avoid overly specific CPU info in krb5-config in aid of
    reproducible builds.
    + Don't do AFS string-to-key tests when feature is disabled.
    + Skip mdb_stat test when the command is not available.
    + Windows: update SHA2 timestamp server.
    + hdb: add missing export
    hdb_generate_key_set_password_with_ks_tuple.
    + Fix signature of hdb_generate_key_set_password().
    + Windows: enable KX509 support in the KDC.
    + kdc: fix kx509 service principal match.
    + iprop: handle case where master sends nothing new.
    + ipropd-slave: fix incorrect error codes.
    + Allow choice of sqlite for HDB pref.
    + check-iprop: don't fail to kill daemons.
    + roken: pidfile -&gt; rk_pidfile.
    + kdc: _kdc_do_kx509 fix use after free error.
    + Do not detect x32 as 64-bit platform.
    + No sys/ttydefaults.h on CYGWIN.
    + Fix check-iprop races.
    + roken_detach_prep() close pipe.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1501761600">- Update to version 7.4.0
  - Security
  - Fix CVE-2017-11103: Orpheus' Lyre KDC-REP service name
    validation.
    This is a critical vulnerability.
    In _krb5_extract_ticket() the KDC-REP service name must be
    obtained from encrypted version stored in 'enc_part' instead
    of the unencrypted version stored in 'ticket'.
    Use of the unecrypted version provides an opportunity for
    successful server impersonation and other attacks.
    Identified by Jeffrey Altman, Viktor Duchovni and
    Nico Williams.
    See https://www.orpheus-lyre.info/ for more details.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1512648000">- Added Avoid_NULL_structure_pointer_member_dereference.patch,
  fixes (bsc#1071675).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1514548800">- Update to version 7.5.0
  - Security
  - Fix CVE-2017-17439, which is a remote denial of service
    vulnerability:
    In Heimdal 7.1 through 7.4, remote unauthenticated attackers
    are able to crash the KDC by sending a crafted UDP packet
    containing empty data fields for client name or realm.
  - Bug fixes
  - Handle long input lines when reloading database dumps.
  - In pre-forked mode (default on Unix), correctly clear the
    process ids of exited children, allowing new child processes
    to replace the old.
  - Fixed incorrect KDC response when no-cross realm TGT exists,
    allowing client requests to fail quickly rather than time
    out after trying to get a correct answer from each KDC.
- Fixed heimdal-patched.diff.
- Removed Avoid_NULL_structure_pointer_member_dereference.patch,
  fixed upstream.</changelog>
  <changelog author="bwiedemann@suse.com" date="1533643200">- Add reproducible.patch to override build date (boo#1047218)
- Use constant hostname (boo#1084909)</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1561291200">- Update to version 7.7.0
  + Bug fixes:
  - PKCS#11 hcrypto back-end:
    + initialize the p11_module_load function list
    + verify that not only is a mechanism present but that its
    mechanism info states that it offers the required
    encryption, decryption or digest services
  - krb5:
    + Starting with 7.6, Heimdal permitted requesting
    authenticated anonymous tickets. However, it did not
    verify that a KDC in fact returned an anonymous ticket
    when one was requested.
    + Cease setting the KDCOption reaquest_anonymous flag when
    issuing S4UProxy (constrained delegation) TGS requests.
    + when the Win2K PKINIT compatibility option is set, do not
    require krbtgt otherName to match when validating KDC
    certificate.
    + set PKINIT_BTMM flag per Apple implementation
    + use memset_s() instead of memset()
  - kdc:
    + When generating KRB5SignedPath in the AS, use the reply
    client name rather than the one from the request, so
    validation will work correctly in the TGS.
    + allow checksum of PA-FOR-USER to be HMAC_MD5. Even if TGT
    used an enctype with a different checksum. Per [MS-SFU]
    2.2.1 PA-FOR-USER the checksum is always HMAC_MD5, and
    that's what Windows and MIT clients send.
    In Heimdal both the client and kdc use instead the
    checksum of the TGT, and therefore work with each other
    but Windows and MIT clients fail against Heimdal KDC.
    Both Windows and MIT KDC would allow any keyed checksum
    to be used so Heimdal client work fine against it.
    Change Heimdal KDC to allow HMAC_MD5 even for non RC4
    based TGT in order to support per-spec clients.
    + use memset_s() instead of memset()
    + Detect Heimdal 1.0 through 7.6 clients that issue
    S4UProxy (constrained delegation) TGS Requests with the
    request anonymous flag set. These requests will be
    treated as S4UProxy requests and not anonymous requests.
  - HDB:
    + Set SQLite3 backend default page size to 8KB.
    + Add hdb_set_sync() method
  - kadmind:
    + disable HDB sync during database load avoiding
    unnecessary disk i/o.
  - ipropd:
    + disable HDB sync during receive_everything. Doing an
    fsync per-record when receiving the complete HDB is a
    performance disaster. Among other things, if the HDB is
    very large, then one slave receving a full HDB can cause
    other slaves to timeout and, if HDB write activity is
    high enough to cause iprop log truncation, then also need
    full syncs, which leads to a cycle of full syncs for all
    slaves until HDB write activity drops.
    Allowing the iprop log to be larger helps, but improving
    receive_everything() performance helps even more.
  - kinit:
    + Anonymous PKINIT tickets discard the realm information
    used to locate the issuing AS. Store the issuing realm in
    the credentials cache in order to locate a KDC which can
    renew them.
    + Do not leak the result of krb5_cc_get_config() when
    determining anonymous PKINIT start realm.
  - klist:
    + Show transited-policy-checked, ok-as-delegate and
    anonymous flags when listing credentials.
  - tests:
    + Regenerate certs so that they expire before the 2038
    armageddon so the test suite will pass on 32-bit
    operating systems until the underlying issues can be
    resolved.
  - Solaris:
    + Define _STDC_C11_BCI for memset_s prototype
  - build tooling:
    + Convert from python 2 to python 3
  - documentation:
    + rename verify-password to verify-password-quality
    + hprop default mode is encrypt
    + kadmind "all" permission does not include "get-keys"
    + verify-password-quality might not be stateless
- Version 7.6.0
  + Security (#555):
  - CVE-2018-16860 Heimdal KDC: Reject PA-S4U2Self with unkeyed
    checksum
    When the Heimdal KDC checks the checksum that is placed on
    the S4U2Self packet by the server to protect the requested
    principal against modification, it does not confirm that
    the checksum algorithm that protects the user name
    (principal) in the request is keyed. This allows a
    man-in-the-middle attacker who can intercept the request to
    the KDC to modify the packet by replacing the user name
    (principal) in the request with any desired user name
    (principal) that exists in the KDC and replace the checksum
    protecting that name with a CRC32 checksum (which requires
    no prior knowledge to compute).
    This would allow a S4U2Self ticket requested on behalf of
    user name (principal) user@EXAMPLE.COM to any service to be
    changed to a S4U2Self ticket with a user name (principal) of
    Administrator@EXAMPLE.COM. This ticket would then contain
    the PAC of the modified user name (principal).
  - CVE-2019-12098, client-only:
    RFC8062 Section 7 requires verification of the PA-PKINIT-KX
    key exchange when anonymous PKINIT is used. Failure to do
    so can permit an active attacker to become a
    man-in-the-middle.
  + Bug fixes:
  - Happy eyeballs: Don't wait for responses from
    known-unreachable KDCs.
  - kdc:
    + check return copy_Realm, copy_PrincipalName,
    copy_EncryptionKey
  - kinit:
    + cleanup temporary ccaches
    + see man page for "kinit --anonymous" command line syntax
    change
  - kdc:
    + Make anonymous AS-requests more RFC8062-compliant.
    Updated expired test certificates
  - Solaris:
    + PKCS#11 hcrypto backend broken since 7.0.1
    + Building with Sun Pro C
  + Features:
  - kuser: support authenticated anonymous AS-REQs in kinit
  - kdc: support for anonymous TGS-REQs
  - kgetcred support for anonymous service tickets
  - Support builds with OpenSSL 1.1.1
- fixed heimdal-patched.diff and reproducible.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1653480000">- Apply Shared Library Packaging Policy and resolve rpmlint
  errors like "libheimdal.x86_64: E: shlib-policy-name-error
  SONAME: libasn1.so.8, expected package suffix: 8"</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656417600">- Add heimdal-7.7.0-autoconf-2.70.patch: Fix build with autoconf
  2.70 (gh#heimdal/heimdal#856).</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656590400">- Add ldconfig scriptlets.
- Fix 'Conflicts:' tags.
- Remove obsolete macros and conditionals.
- Ran spec-cleaner.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1671624000">- Update to version 7.8.0
  + This release includes both the Heimdal 7.7.1 Security
    Vulnerability fixes and non-Security bug fixes/improvements.
  + Security Vulnerabilities:
  - CVE-2022-42898 PAC parse integer overflows
  - CVE-2022-3437 Overflows and non-constant time leaks in
    DES{,3} and arcfour
  - CVE-2022-41916 Fix Unicode normalization read of 1 bytes past
    end of array
  - CVE-2021-44758 A null pointer de-reference DoS in SPNEGO
    acceptors
  - CVE-2021-3671 A null pointer de-reference when handling
    missing sname in TGS-REQ
  - CVE-2022-44640 Heimdal KDC: invalid free in ASN.1 codec
    Note that CVE-2022-44640 is a severe vulnerability,
    possibly a 10.0 on the Common Vulnerability Scoring
    System (CVSS) v3, as we believe it should be possible to
    get an RCE on a KDC, which means that credentials can be
    compromised that can be used to impersonate anyone in a
    realm or forest of realms.
    Heimdal's ASN.1 compiler generates code that allows
    specially crafted DER encodings of CHOICEs to invoke the
    wrong free function on the decoded structure upon decode
    error. This is known to impact the Heimdal KDC, leading to
    an invalid free() of an address partly or wholly under the
    control of the attacker, in turn leading to a potential
    remote code execution (RCE) vulnerability.
    This error affects the DER codec for all extensible CHOICE
    types used in Heimdal, though not all cases will be
    exploitable. We have not completed a thorough analysis of
    all the Heimdal components affected, thus the Kerberos
    client, the X.509 library, and other parts, may be affected
    as well.
    This bug has been in Heimdal's ASN.1 compiler since 2005,
    but it may only affect Heimdal 1.6 and up. It was first
    reported by Douglas Bagnall, though it had been found
    independently by the Heimdal maintainers via fuzzing a few
    weeks earlier.
    While no zero-day exploit is known, such an exploit will
    likely be available soon after public disclosure.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  + Other changes:
  - Bugs found by UBSAN (including the incorrect encoding of
    unconstrained INTEGER value -1).
  - Errors found by the LLVM scan-build static analyzer.
  - Errors found by the valgrind memory debugger.
  - Work around GCC Bug 95189 (memcmp wrongly stripped like
    strcmp).
  - Correct ASN.1 OID typo for SHA-384
  - Fix a deadlock in in the MEMORY ccache type.
  - TGS: strip forwardable and proxiable flags if the server is
    disallowed.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  - Incremental HDB propagation improvements
    Refactor send_diffs making it progressive
    Handle partial writes on non-blocking sockets
    Disable Nagle in iprop master and slave
    Use async I/O
    Don't send I_HAVE in response to AYT
    Do not recover log in kadm5_get_principal()
    Don't send diffs to slaves with not yet known version
    Don't stutter in send_diffs
  - Optional backwards-compatible anon-pkinit behavior
- Removed heimdal-7.7.0-autoconf-2.70.patch, fixed upstream.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1673352000">- replace libheimdal conflicts by obsoletes / provides to provide a
  smooth update in the new libheimdal-devel.</changelog>
</package>
<package pkgid="49808b8a5cac6e24e87652a7a88c3440e5614802d6279123b6394aa2eb653afe" name="libheimedit0" arch="i586">
  <version epoch="0" ver="7.8.0" rel="bp154.2.4.1"/>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1440936000">- Initial package, version 1.6rc2
- Added patch heimdal-version-script-client.map.patch to add file
  version-script-client.map (File is present in git for tag 1.6rc2
  but missing in tarball).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441108800">- Some changes in spec file to enable build for SLES.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441195200">- Added Conflicts tags to spec file because devel package conflicts
  with krb5-devel and krb5-mini-devel.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441454400">- Added a patched instead of the original tarball because only
  shared libraries will be build and source files of these (not to
  be build) programs have problematic licenses.
- Added script heimdal-patch-source.sh to sources.
- Added patch heimdal-patched.diff that fixes configure.ac and
  several Makefile.am files to successfully build patched source.
- Removed unneeded dependencies in spec file for build.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1483790400">- Update to version 7.1.0
- Removed heimdal-version-script-client.map.patch, fixed upstream.
- Fixed heimdal-patched.diff.
- Unfortunately there is no updated changelog file in tarball,
  changes can be seen in source code version control systems
  history log.</changelog>
  <changelog author="jengelh@inai.de" date="1486036800">- Summary and RPM group update. Do a direct call to ldconfig
  where possible.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1497528000">- Update to version 7.3.0
  - Security
    + Fix transit path validation. Commit f469fc6 (2010-10-02)
    inadvertently caused the previous hop realm to not be added
    to the transit path of issued tickets. This may, in some
    cases, enable bypass of capath policy in Heimdal versions 1.5
    through 7.2.
    Note, this may break sites that rely on the bug. With the bug
    some incomplete [capaths] worked, that should not have.
    These may now break authentication in some cross-realm
    configurations. (CVE-2017-6594)
- Version 7.2.0
  - Bug fixes
    + Portability improvements.
    + More strict parsing of encoded URI components in HTTP KDC.
    + Fixed memory leak in malloc error recovery in NTLM GSSAPI
    mechanism.
    + Avoid overly specific CPU info in krb5-config in aid of
    reproducible builds.
    + Don't do AFS string-to-key tests when feature is disabled.
    + Skip mdb_stat test when the command is not available.
    + Windows: update SHA2 timestamp server.
    + hdb: add missing export
    hdb_generate_key_set_password_with_ks_tuple.
    + Fix signature of hdb_generate_key_set_password().
    + Windows: enable KX509 support in the KDC.
    + kdc: fix kx509 service principal match.
    + iprop: handle case where master sends nothing new.
    + ipropd-slave: fix incorrect error codes.
    + Allow choice of sqlite for HDB pref.
    + check-iprop: don't fail to kill daemons.
    + roken: pidfile -&gt; rk_pidfile.
    + kdc: _kdc_do_kx509 fix use after free error.
    + Do not detect x32 as 64-bit platform.
    + No sys/ttydefaults.h on CYGWIN.
    + Fix check-iprop races.
    + roken_detach_prep() close pipe.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1501761600">- Update to version 7.4.0
  - Security
  - Fix CVE-2017-11103: Orpheus' Lyre KDC-REP service name
    validation.
    This is a critical vulnerability.
    In _krb5_extract_ticket() the KDC-REP service name must be
    obtained from encrypted version stored in 'enc_part' instead
    of the unencrypted version stored in 'ticket'.
    Use of the unecrypted version provides an opportunity for
    successful server impersonation and other attacks.
    Identified by Jeffrey Altman, Viktor Duchovni and
    Nico Williams.
    See https://www.orpheus-lyre.info/ for more details.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1512648000">- Added Avoid_NULL_structure_pointer_member_dereference.patch,
  fixes (bsc#1071675).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1514548800">- Update to version 7.5.0
  - Security
  - Fix CVE-2017-17439, which is a remote denial of service
    vulnerability:
    In Heimdal 7.1 through 7.4, remote unauthenticated attackers
    are able to crash the KDC by sending a crafted UDP packet
    containing empty data fields for client name or realm.
  - Bug fixes
  - Handle long input lines when reloading database dumps.
  - In pre-forked mode (default on Unix), correctly clear the
    process ids of exited children, allowing new child processes
    to replace the old.
  - Fixed incorrect KDC response when no-cross realm TGT exists,
    allowing client requests to fail quickly rather than time
    out after trying to get a correct answer from each KDC.
- Fixed heimdal-patched.diff.
- Removed Avoid_NULL_structure_pointer_member_dereference.patch,
  fixed upstream.</changelog>
  <changelog author="bwiedemann@suse.com" date="1533643200">- Add reproducible.patch to override build date (boo#1047218)
- Use constant hostname (boo#1084909)</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1561291200">- Update to version 7.7.0
  + Bug fixes:
  - PKCS#11 hcrypto back-end:
    + initialize the p11_module_load function list
    + verify that not only is a mechanism present but that its
    mechanism info states that it offers the required
    encryption, decryption or digest services
  - krb5:
    + Starting with 7.6, Heimdal permitted requesting
    authenticated anonymous tickets. However, it did not
    verify that a KDC in fact returned an anonymous ticket
    when one was requested.
    + Cease setting the KDCOption reaquest_anonymous flag when
    issuing S4UProxy (constrained delegation) TGS requests.
    + when the Win2K PKINIT compatibility option is set, do not
    require krbtgt otherName to match when validating KDC
    certificate.
    + set PKINIT_BTMM flag per Apple implementation
    + use memset_s() instead of memset()
  - kdc:
    + When generating KRB5SignedPath in the AS, use the reply
    client name rather than the one from the request, so
    validation will work correctly in the TGS.
    + allow checksum of PA-FOR-USER to be HMAC_MD5. Even if TGT
    used an enctype with a different checksum. Per [MS-SFU]
    2.2.1 PA-FOR-USER the checksum is always HMAC_MD5, and
    that's what Windows and MIT clients send.
    In Heimdal both the client and kdc use instead the
    checksum of the TGT, and therefore work with each other
    but Windows and MIT clients fail against Heimdal KDC.
    Both Windows and MIT KDC would allow any keyed checksum
    to be used so Heimdal client work fine against it.
    Change Heimdal KDC to allow HMAC_MD5 even for non RC4
    based TGT in order to support per-spec clients.
    + use memset_s() instead of memset()
    + Detect Heimdal 1.0 through 7.6 clients that issue
    S4UProxy (constrained delegation) TGS Requests with the
    request anonymous flag set. These requests will be
    treated as S4UProxy requests and not anonymous requests.
  - HDB:
    + Set SQLite3 backend default page size to 8KB.
    + Add hdb_set_sync() method
  - kadmind:
    + disable HDB sync during database load avoiding
    unnecessary disk i/o.
  - ipropd:
    + disable HDB sync during receive_everything. Doing an
    fsync per-record when receiving the complete HDB is a
    performance disaster. Among other things, if the HDB is
    very large, then one slave receving a full HDB can cause
    other slaves to timeout and, if HDB write activity is
    high enough to cause iprop log truncation, then also need
    full syncs, which leads to a cycle of full syncs for all
    slaves until HDB write activity drops.
    Allowing the iprop log to be larger helps, but improving
    receive_everything() performance helps even more.
  - kinit:
    + Anonymous PKINIT tickets discard the realm information
    used to locate the issuing AS. Store the issuing realm in
    the credentials cache in order to locate a KDC which can
    renew them.
    + Do not leak the result of krb5_cc_get_config() when
    determining anonymous PKINIT start realm.
  - klist:
    + Show transited-policy-checked, ok-as-delegate and
    anonymous flags when listing credentials.
  - tests:
    + Regenerate certs so that they expire before the 2038
    armageddon so the test suite will pass on 32-bit
    operating systems until the underlying issues can be
    resolved.
  - Solaris:
    + Define _STDC_C11_BCI for memset_s prototype
  - build tooling:
    + Convert from python 2 to python 3
  - documentation:
    + rename verify-password to verify-password-quality
    + hprop default mode is encrypt
    + kadmind "all" permission does not include "get-keys"
    + verify-password-quality might not be stateless
- Version 7.6.0
  + Security (#555):
  - CVE-2018-16860 Heimdal KDC: Reject PA-S4U2Self with unkeyed
    checksum
    When the Heimdal KDC checks the checksum that is placed on
    the S4U2Self packet by the server to protect the requested
    principal against modification, it does not confirm that
    the checksum algorithm that protects the user name
    (principal) in the request is keyed. This allows a
    man-in-the-middle attacker who can intercept the request to
    the KDC to modify the packet by replacing the user name
    (principal) in the request with any desired user name
    (principal) that exists in the KDC and replace the checksum
    protecting that name with a CRC32 checksum (which requires
    no prior knowledge to compute).
    This would allow a S4U2Self ticket requested on behalf of
    user name (principal) user@EXAMPLE.COM to any service to be
    changed to a S4U2Self ticket with a user name (principal) of
    Administrator@EXAMPLE.COM. This ticket would then contain
    the PAC of the modified user name (principal).
  - CVE-2019-12098, client-only:
    RFC8062 Section 7 requires verification of the PA-PKINIT-KX
    key exchange when anonymous PKINIT is used. Failure to do
    so can permit an active attacker to become a
    man-in-the-middle.
  + Bug fixes:
  - Happy eyeballs: Don't wait for responses from
    known-unreachable KDCs.
  - kdc:
    + check return copy_Realm, copy_PrincipalName,
    copy_EncryptionKey
  - kinit:
    + cleanup temporary ccaches
    + see man page for "kinit --anonymous" command line syntax
    change
  - kdc:
    + Make anonymous AS-requests more RFC8062-compliant.
    Updated expired test certificates
  - Solaris:
    + PKCS#11 hcrypto backend broken since 7.0.1
    + Building with Sun Pro C
  + Features:
  - kuser: support authenticated anonymous AS-REQs in kinit
  - kdc: support for anonymous TGS-REQs
  - kgetcred support for anonymous service tickets
  - Support builds with OpenSSL 1.1.1
- fixed heimdal-patched.diff and reproducible.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1653480000">- Apply Shared Library Packaging Policy and resolve rpmlint
  errors like "libheimdal.x86_64: E: shlib-policy-name-error
  SONAME: libasn1.so.8, expected package suffix: 8"</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656417600">- Add heimdal-7.7.0-autoconf-2.70.patch: Fix build with autoconf
  2.70 (gh#heimdal/heimdal#856).</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656590400">- Add ldconfig scriptlets.
- Fix 'Conflicts:' tags.
- Remove obsolete macros and conditionals.
- Ran spec-cleaner.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1671624000">- Update to version 7.8.0
  + This release includes both the Heimdal 7.7.1 Security
    Vulnerability fixes and non-Security bug fixes/improvements.
  + Security Vulnerabilities:
  - CVE-2022-42898 PAC parse integer overflows
  - CVE-2022-3437 Overflows and non-constant time leaks in
    DES{,3} and arcfour
  - CVE-2022-41916 Fix Unicode normalization read of 1 bytes past
    end of array
  - CVE-2021-44758 A null pointer de-reference DoS in SPNEGO
    acceptors
  - CVE-2021-3671 A null pointer de-reference when handling
    missing sname in TGS-REQ
  - CVE-2022-44640 Heimdal KDC: invalid free in ASN.1 codec
    Note that CVE-2022-44640 is a severe vulnerability,
    possibly a 10.0 on the Common Vulnerability Scoring
    System (CVSS) v3, as we believe it should be possible to
    get an RCE on a KDC, which means that credentials can be
    compromised that can be used to impersonate anyone in a
    realm or forest of realms.
    Heimdal's ASN.1 compiler generates code that allows
    specially crafted DER encodings of CHOICEs to invoke the
    wrong free function on the decoded structure upon decode
    error. This is known to impact the Heimdal KDC, leading to
    an invalid free() of an address partly or wholly under the
    control of the attacker, in turn leading to a potential
    remote code execution (RCE) vulnerability.
    This error affects the DER codec for all extensible CHOICE
    types used in Heimdal, though not all cases will be
    exploitable. We have not completed a thorough analysis of
    all the Heimdal components affected, thus the Kerberos
    client, the X.509 library, and other parts, may be affected
    as well.
    This bug has been in Heimdal's ASN.1 compiler since 2005,
    but it may only affect Heimdal 1.6 and up. It was first
    reported by Douglas Bagnall, though it had been found
    independently by the Heimdal maintainers via fuzzing a few
    weeks earlier.
    While no zero-day exploit is known, such an exploit will
    likely be available soon after public disclosure.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  + Other changes:
  - Bugs found by UBSAN (including the incorrect encoding of
    unconstrained INTEGER value -1).
  - Errors found by the LLVM scan-build static analyzer.
  - Errors found by the valgrind memory debugger.
  - Work around GCC Bug 95189 (memcmp wrongly stripped like
    strcmp).
  - Correct ASN.1 OID typo for SHA-384
  - Fix a deadlock in in the MEMORY ccache type.
  - TGS: strip forwardable and proxiable flags if the server is
    disallowed.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  - Incremental HDB propagation improvements
    Refactor send_diffs making it progressive
    Handle partial writes on non-blocking sockets
    Disable Nagle in iprop master and slave
    Use async I/O
    Don't send I_HAVE in response to AYT
    Do not recover log in kadm5_get_principal()
    Don't send diffs to slaves with not yet known version
    Don't stutter in send_diffs
  - Optional backwards-compatible anon-pkinit behavior
- Removed heimdal-7.7.0-autoconf-2.70.patch, fixed upstream.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1673352000">- replace libheimdal conflicts by obsoletes / provides to provide a
  smooth update in the new libheimdal-devel.</changelog>
</package>
<package pkgid="847a3fc872997771382891cc9e8a54d79743c7791e0ed92407d0d6ebe17adf9a" name="libheimedit0" arch="ppc64le">
  <version epoch="0" ver="7.8.0" rel="bp154.2.4.1"/>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1440936000">- Initial package, version 1.6rc2
- Added patch heimdal-version-script-client.map.patch to add file
  version-script-client.map (File is present in git for tag 1.6rc2
  but missing in tarball).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441108800">- Some changes in spec file to enable build for SLES.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441195200">- Added Conflicts tags to spec file because devel package conflicts
  with krb5-devel and krb5-mini-devel.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441454400">- Added a patched instead of the original tarball because only
  shared libraries will be build and source files of these (not to
  be build) programs have problematic licenses.
- Added script heimdal-patch-source.sh to sources.
- Added patch heimdal-patched.diff that fixes configure.ac and
  several Makefile.am files to successfully build patched source.
- Removed unneeded dependencies in spec file for build.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1483790400">- Update to version 7.1.0
- Removed heimdal-version-script-client.map.patch, fixed upstream.
- Fixed heimdal-patched.diff.
- Unfortunately there is no updated changelog file in tarball,
  changes can be seen in source code version control systems
  history log.</changelog>
  <changelog author="jengelh@inai.de" date="1486036800">- Summary and RPM group update. Do a direct call to ldconfig
  where possible.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1497528000">- Update to version 7.3.0
  - Security
    + Fix transit path validation. Commit f469fc6 (2010-10-02)
    inadvertently caused the previous hop realm to not be added
    to the transit path of issued tickets. This may, in some
    cases, enable bypass of capath policy in Heimdal versions 1.5
    through 7.2.
    Note, this may break sites that rely on the bug. With the bug
    some incomplete [capaths] worked, that should not have.
    These may now break authentication in some cross-realm
    configurations. (CVE-2017-6594)
- Version 7.2.0
  - Bug fixes
    + Portability improvements.
    + More strict parsing of encoded URI components in HTTP KDC.
    + Fixed memory leak in malloc error recovery in NTLM GSSAPI
    mechanism.
    + Avoid overly specific CPU info in krb5-config in aid of
    reproducible builds.
    + Don't do AFS string-to-key tests when feature is disabled.
    + Skip mdb_stat test when the command is not available.
    + Windows: update SHA2 timestamp server.
    + hdb: add missing export
    hdb_generate_key_set_password_with_ks_tuple.
    + Fix signature of hdb_generate_key_set_password().
    + Windows: enable KX509 support in the KDC.
    + kdc: fix kx509 service principal match.
    + iprop: handle case where master sends nothing new.
    + ipropd-slave: fix incorrect error codes.
    + Allow choice of sqlite for HDB pref.
    + check-iprop: don't fail to kill daemons.
    + roken: pidfile -&gt; rk_pidfile.
    + kdc: _kdc_do_kx509 fix use after free error.
    + Do not detect x32 as 64-bit platform.
    + No sys/ttydefaults.h on CYGWIN.
    + Fix check-iprop races.
    + roken_detach_prep() close pipe.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1501761600">- Update to version 7.4.0
  - Security
  - Fix CVE-2017-11103: Orpheus' Lyre KDC-REP service name
    validation.
    This is a critical vulnerability.
    In _krb5_extract_ticket() the KDC-REP service name must be
    obtained from encrypted version stored in 'enc_part' instead
    of the unencrypted version stored in 'ticket'.
    Use of the unecrypted version provides an opportunity for
    successful server impersonation and other attacks.
    Identified by Jeffrey Altman, Viktor Duchovni and
    Nico Williams.
    See https://www.orpheus-lyre.info/ for more details.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1512648000">- Added Avoid_NULL_structure_pointer_member_dereference.patch,
  fixes (bsc#1071675).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1514548800">- Update to version 7.5.0
  - Security
  - Fix CVE-2017-17439, which is a remote denial of service
    vulnerability:
    In Heimdal 7.1 through 7.4, remote unauthenticated attackers
    are able to crash the KDC by sending a crafted UDP packet
    containing empty data fields for client name or realm.
  - Bug fixes
  - Handle long input lines when reloading database dumps.
  - In pre-forked mode (default on Unix), correctly clear the
    process ids of exited children, allowing new child processes
    to replace the old.
  - Fixed incorrect KDC response when no-cross realm TGT exists,
    allowing client requests to fail quickly rather than time
    out after trying to get a correct answer from each KDC.
- Fixed heimdal-patched.diff.
- Removed Avoid_NULL_structure_pointer_member_dereference.patch,
  fixed upstream.</changelog>
  <changelog author="bwiedemann@suse.com" date="1533643200">- Add reproducible.patch to override build date (boo#1047218)
- Use constant hostname (boo#1084909)</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1561291200">- Update to version 7.7.0
  + Bug fixes:
  - PKCS#11 hcrypto back-end:
    + initialize the p11_module_load function list
    + verify that not only is a mechanism present but that its
    mechanism info states that it offers the required
    encryption, decryption or digest services
  - krb5:
    + Starting with 7.6, Heimdal permitted requesting
    authenticated anonymous tickets. However, it did not
    verify that a KDC in fact returned an anonymous ticket
    when one was requested.
    + Cease setting the KDCOption reaquest_anonymous flag when
    issuing S4UProxy (constrained delegation) TGS requests.
    + when the Win2K PKINIT compatibility option is set, do not
    require krbtgt otherName to match when validating KDC
    certificate.
    + set PKINIT_BTMM flag per Apple implementation
    + use memset_s() instead of memset()
  - kdc:
    + When generating KRB5SignedPath in the AS, use the reply
    client name rather than the one from the request, so
    validation will work correctly in the TGS.
    + allow checksum of PA-FOR-USER to be HMAC_MD5. Even if TGT
    used an enctype with a different checksum. Per [MS-SFU]
    2.2.1 PA-FOR-USER the checksum is always HMAC_MD5, and
    that's what Windows and MIT clients send.
    In Heimdal both the client and kdc use instead the
    checksum of the TGT, and therefore work with each other
    but Windows and MIT clients fail against Heimdal KDC.
    Both Windows and MIT KDC would allow any keyed checksum
    to be used so Heimdal client work fine against it.
    Change Heimdal KDC to allow HMAC_MD5 even for non RC4
    based TGT in order to support per-spec clients.
    + use memset_s() instead of memset()
    + Detect Heimdal 1.0 through 7.6 clients that issue
    S4UProxy (constrained delegation) TGS Requests with the
    request anonymous flag set. These requests will be
    treated as S4UProxy requests and not anonymous requests.
  - HDB:
    + Set SQLite3 backend default page size to 8KB.
    + Add hdb_set_sync() method
  - kadmind:
    + disable HDB sync during database load avoiding
    unnecessary disk i/o.
  - ipropd:
    + disable HDB sync during receive_everything. Doing an
    fsync per-record when receiving the complete HDB is a
    performance disaster. Among other things, if the HDB is
    very large, then one slave receving a full HDB can cause
    other slaves to timeout and, if HDB write activity is
    high enough to cause iprop log truncation, then also need
    full syncs, which leads to a cycle of full syncs for all
    slaves until HDB write activity drops.
    Allowing the iprop log to be larger helps, but improving
    receive_everything() performance helps even more.
  - kinit:
    + Anonymous PKINIT tickets discard the realm information
    used to locate the issuing AS. Store the issuing realm in
    the credentials cache in order to locate a KDC which can
    renew them.
    + Do not leak the result of krb5_cc_get_config() when
    determining anonymous PKINIT start realm.
  - klist:
    + Show transited-policy-checked, ok-as-delegate and
    anonymous flags when listing credentials.
  - tests:
    + Regenerate certs so that they expire before the 2038
    armageddon so the test suite will pass on 32-bit
    operating systems until the underlying issues can be
    resolved.
  - Solaris:
    + Define _STDC_C11_BCI for memset_s prototype
  - build tooling:
    + Convert from python 2 to python 3
  - documentation:
    + rename verify-password to verify-password-quality
    + hprop default mode is encrypt
    + kadmind "all" permission does not include "get-keys"
    + verify-password-quality might not be stateless
- Version 7.6.0
  + Security (#555):
  - CVE-2018-16860 Heimdal KDC: Reject PA-S4U2Self with unkeyed
    checksum
    When the Heimdal KDC checks the checksum that is placed on
    the S4U2Self packet by the server to protect the requested
    principal against modification, it does not confirm that
    the checksum algorithm that protects the user name
    (principal) in the request is keyed. This allows a
    man-in-the-middle attacker who can intercept the request to
    the KDC to modify the packet by replacing the user name
    (principal) in the request with any desired user name
    (principal) that exists in the KDC and replace the checksum
    protecting that name with a CRC32 checksum (which requires
    no prior knowledge to compute).
    This would allow a S4U2Self ticket requested on behalf of
    user name (principal) user@EXAMPLE.COM to any service to be
    changed to a S4U2Self ticket with a user name (principal) of
    Administrator@EXAMPLE.COM. This ticket would then contain
    the PAC of the modified user name (principal).
  - CVE-2019-12098, client-only:
    RFC8062 Section 7 requires verification of the PA-PKINIT-KX
    key exchange when anonymous PKINIT is used. Failure to do
    so can permit an active attacker to become a
    man-in-the-middle.
  + Bug fixes:
  - Happy eyeballs: Don't wait for responses from
    known-unreachable KDCs.
  - kdc:
    + check return copy_Realm, copy_PrincipalName,
    copy_EncryptionKey
  - kinit:
    + cleanup temporary ccaches
    + see man page for "kinit --anonymous" command line syntax
    change
  - kdc:
    + Make anonymous AS-requests more RFC8062-compliant.
    Updated expired test certificates
  - Solaris:
    + PKCS#11 hcrypto backend broken since 7.0.1
    + Building with Sun Pro C
  + Features:
  - kuser: support authenticated anonymous AS-REQs in kinit
  - kdc: support for anonymous TGS-REQs
  - kgetcred support for anonymous service tickets
  - Support builds with OpenSSL 1.1.1
- fixed heimdal-patched.diff and reproducible.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1653480000">- Apply Shared Library Packaging Policy and resolve rpmlint
  errors like "libheimdal.x86_64: E: shlib-policy-name-error
  SONAME: libasn1.so.8, expected package suffix: 8"</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656417600">- Add heimdal-7.7.0-autoconf-2.70.patch: Fix build with autoconf
  2.70 (gh#heimdal/heimdal#856).</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656590400">- Add ldconfig scriptlets.
- Fix 'Conflicts:' tags.
- Remove obsolete macros and conditionals.
- Ran spec-cleaner.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1671624000">- Update to version 7.8.0
  + This release includes both the Heimdal 7.7.1 Security
    Vulnerability fixes and non-Security bug fixes/improvements.
  + Security Vulnerabilities:
  - CVE-2022-42898 PAC parse integer overflows
  - CVE-2022-3437 Overflows and non-constant time leaks in
    DES{,3} and arcfour
  - CVE-2022-41916 Fix Unicode normalization read of 1 bytes past
    end of array
  - CVE-2021-44758 A null pointer de-reference DoS in SPNEGO
    acceptors
  - CVE-2021-3671 A null pointer de-reference when handling
    missing sname in TGS-REQ
  - CVE-2022-44640 Heimdal KDC: invalid free in ASN.1 codec
    Note that CVE-2022-44640 is a severe vulnerability,
    possibly a 10.0 on the Common Vulnerability Scoring
    System (CVSS) v3, as we believe it should be possible to
    get an RCE on a KDC, which means that credentials can be
    compromised that can be used to impersonate anyone in a
    realm or forest of realms.
    Heimdal's ASN.1 compiler generates code that allows
    specially crafted DER encodings of CHOICEs to invoke the
    wrong free function on the decoded structure upon decode
    error. This is known to impact the Heimdal KDC, leading to
    an invalid free() of an address partly or wholly under the
    control of the attacker, in turn leading to a potential
    remote code execution (RCE) vulnerability.
    This error affects the DER codec for all extensible CHOICE
    types used in Heimdal, though not all cases will be
    exploitable. We have not completed a thorough analysis of
    all the Heimdal components affected, thus the Kerberos
    client, the X.509 library, and other parts, may be affected
    as well.
    This bug has been in Heimdal's ASN.1 compiler since 2005,
    but it may only affect Heimdal 1.6 and up. It was first
    reported by Douglas Bagnall, though it had been found
    independently by the Heimdal maintainers via fuzzing a few
    weeks earlier.
    While no zero-day exploit is known, such an exploit will
    likely be available soon after public disclosure.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  + Other changes:
  - Bugs found by UBSAN (including the incorrect encoding of
    unconstrained INTEGER value -1).
  - Errors found by the LLVM scan-build static analyzer.
  - Errors found by the valgrind memory debugger.
  - Work around GCC Bug 95189 (memcmp wrongly stripped like
    strcmp).
  - Correct ASN.1 OID typo for SHA-384
  - Fix a deadlock in in the MEMORY ccache type.
  - TGS: strip forwardable and proxiable flags if the server is
    disallowed.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  - Incremental HDB propagation improvements
    Refactor send_diffs making it progressive
    Handle partial writes on non-blocking sockets
    Disable Nagle in iprop master and slave
    Use async I/O
    Don't send I_HAVE in response to AYT
    Do not recover log in kadm5_get_principal()
    Don't send diffs to slaves with not yet known version
    Don't stutter in send_diffs
  - Optional backwards-compatible anon-pkinit behavior
- Removed heimdal-7.7.0-autoconf-2.70.patch, fixed upstream.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1673352000">- replace libheimdal conflicts by obsoletes / provides to provide a
  smooth update in the new libheimdal-devel.</changelog>
</package>
<package pkgid="a90f240a3b7f13d0f8797da5223c94a273447c3ccf084be5534da837bafc196b" name="libheimedit0" arch="s390x">
  <version epoch="0" ver="7.8.0" rel="bp154.2.4.1"/>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1440936000">- Initial package, version 1.6rc2
- Added patch heimdal-version-script-client.map.patch to add file
  version-script-client.map (File is present in git for tag 1.6rc2
  but missing in tarball).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441108800">- Some changes in spec file to enable build for SLES.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441195200">- Added Conflicts tags to spec file because devel package conflicts
  with krb5-devel and krb5-mini-devel.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441454400">- Added a patched instead of the original tarball because only
  shared libraries will be build and source files of these (not to
  be build) programs have problematic licenses.
- Added script heimdal-patch-source.sh to sources.
- Added patch heimdal-patched.diff that fixes configure.ac and
  several Makefile.am files to successfully build patched source.
- Removed unneeded dependencies in spec file for build.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1483790400">- Update to version 7.1.0
- Removed heimdal-version-script-client.map.patch, fixed upstream.
- Fixed heimdal-patched.diff.
- Unfortunately there is no updated changelog file in tarball,
  changes can be seen in source code version control systems
  history log.</changelog>
  <changelog author="jengelh@inai.de" date="1486036800">- Summary and RPM group update. Do a direct call to ldconfig
  where possible.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1497528000">- Update to version 7.3.0
  - Security
    + Fix transit path validation. Commit f469fc6 (2010-10-02)
    inadvertently caused the previous hop realm to not be added
    to the transit path of issued tickets. This may, in some
    cases, enable bypass of capath policy in Heimdal versions 1.5
    through 7.2.
    Note, this may break sites that rely on the bug. With the bug
    some incomplete [capaths] worked, that should not have.
    These may now break authentication in some cross-realm
    configurations. (CVE-2017-6594)
- Version 7.2.0
  - Bug fixes
    + Portability improvements.
    + More strict parsing of encoded URI components in HTTP KDC.
    + Fixed memory leak in malloc error recovery in NTLM GSSAPI
    mechanism.
    + Avoid overly specific CPU info in krb5-config in aid of
    reproducible builds.
    + Don't do AFS string-to-key tests when feature is disabled.
    + Skip mdb_stat test when the command is not available.
    + Windows: update SHA2 timestamp server.
    + hdb: add missing export
    hdb_generate_key_set_password_with_ks_tuple.
    + Fix signature of hdb_generate_key_set_password().
    + Windows: enable KX509 support in the KDC.
    + kdc: fix kx509 service principal match.
    + iprop: handle case where master sends nothing new.
    + ipropd-slave: fix incorrect error codes.
    + Allow choice of sqlite for HDB pref.
    + check-iprop: don't fail to kill daemons.
    + roken: pidfile -&gt; rk_pidfile.
    + kdc: _kdc_do_kx509 fix use after free error.
    + Do not detect x32 as 64-bit platform.
    + No sys/ttydefaults.h on CYGWIN.
    + Fix check-iprop races.
    + roken_detach_prep() close pipe.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1501761600">- Update to version 7.4.0
  - Security
  - Fix CVE-2017-11103: Orpheus' Lyre KDC-REP service name
    validation.
    This is a critical vulnerability.
    In _krb5_extract_ticket() the KDC-REP service name must be
    obtained from encrypted version stored in 'enc_part' instead
    of the unencrypted version stored in 'ticket'.
    Use of the unecrypted version provides an opportunity for
    successful server impersonation and other attacks.
    Identified by Jeffrey Altman, Viktor Duchovni and
    Nico Williams.
    See https://www.orpheus-lyre.info/ for more details.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1512648000">- Added Avoid_NULL_structure_pointer_member_dereference.patch,
  fixes (bsc#1071675).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1514548800">- Update to version 7.5.0
  - Security
  - Fix CVE-2017-17439, which is a remote denial of service
    vulnerability:
    In Heimdal 7.1 through 7.4, remote unauthenticated attackers
    are able to crash the KDC by sending a crafted UDP packet
    containing empty data fields for client name or realm.
  - Bug fixes
  - Handle long input lines when reloading database dumps.
  - In pre-forked mode (default on Unix), correctly clear the
    process ids of exited children, allowing new child processes
    to replace the old.
  - Fixed incorrect KDC response when no-cross realm TGT exists,
    allowing client requests to fail quickly rather than time
    out after trying to get a correct answer from each KDC.
- Fixed heimdal-patched.diff.
- Removed Avoid_NULL_structure_pointer_member_dereference.patch,
  fixed upstream.</changelog>
  <changelog author="bwiedemann@suse.com" date="1533643200">- Add reproducible.patch to override build date (boo#1047218)
- Use constant hostname (boo#1084909)</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1561291200">- Update to version 7.7.0
  + Bug fixes:
  - PKCS#11 hcrypto back-end:
    + initialize the p11_module_load function list
    + verify that not only is a mechanism present but that its
    mechanism info states that it offers the required
    encryption, decryption or digest services
  - krb5:
    + Starting with 7.6, Heimdal permitted requesting
    authenticated anonymous tickets. However, it did not
    verify that a KDC in fact returned an anonymous ticket
    when one was requested.
    + Cease setting the KDCOption reaquest_anonymous flag when
    issuing S4UProxy (constrained delegation) TGS requests.
    + when the Win2K PKINIT compatibility option is set, do not
    require krbtgt otherName to match when validating KDC
    certificate.
    + set PKINIT_BTMM flag per Apple implementation
    + use memset_s() instead of memset()
  - kdc:
    + When generating KRB5SignedPath in the AS, use the reply
    client name rather than the one from the request, so
    validation will work correctly in the TGS.
    + allow checksum of PA-FOR-USER to be HMAC_MD5. Even if TGT
    used an enctype with a different checksum. Per [MS-SFU]
    2.2.1 PA-FOR-USER the checksum is always HMAC_MD5, and
    that's what Windows and MIT clients send.
    In Heimdal both the client and kdc use instead the
    checksum of the TGT, and therefore work with each other
    but Windows and MIT clients fail against Heimdal KDC.
    Both Windows and MIT KDC would allow any keyed checksum
    to be used so Heimdal client work fine against it.
    Change Heimdal KDC to allow HMAC_MD5 even for non RC4
    based TGT in order to support per-spec clients.
    + use memset_s() instead of memset()
    + Detect Heimdal 1.0 through 7.6 clients that issue
    S4UProxy (constrained delegation) TGS Requests with the
    request anonymous flag set. These requests will be
    treated as S4UProxy requests and not anonymous requests.
  - HDB:
    + Set SQLite3 backend default page size to 8KB.
    + Add hdb_set_sync() method
  - kadmind:
    + disable HDB sync during database load avoiding
    unnecessary disk i/o.
  - ipropd:
    + disable HDB sync during receive_everything. Doing an
    fsync per-record when receiving the complete HDB is a
    performance disaster. Among other things, if the HDB is
    very large, then one slave receving a full HDB can cause
    other slaves to timeout and, if HDB write activity is
    high enough to cause iprop log truncation, then also need
    full syncs, which leads to a cycle of full syncs for all
    slaves until HDB write activity drops.
    Allowing the iprop log to be larger helps, but improving
    receive_everything() performance helps even more.
  - kinit:
    + Anonymous PKINIT tickets discard the realm information
    used to locate the issuing AS. Store the issuing realm in
    the credentials cache in order to locate a KDC which can
    renew them.
    + Do not leak the result of krb5_cc_get_config() when
    determining anonymous PKINIT start realm.
  - klist:
    + Show transited-policy-checked, ok-as-delegate and
    anonymous flags when listing credentials.
  - tests:
    + Regenerate certs so that they expire before the 2038
    armageddon so the test suite will pass on 32-bit
    operating systems until the underlying issues can be
    resolved.
  - Solaris:
    + Define _STDC_C11_BCI for memset_s prototype
  - build tooling:
    + Convert from python 2 to python 3
  - documentation:
    + rename verify-password to verify-password-quality
    + hprop default mode is encrypt
    + kadmind "all" permission does not include "get-keys"
    + verify-password-quality might not be stateless
- Version 7.6.0
  + Security (#555):
  - CVE-2018-16860 Heimdal KDC: Reject PA-S4U2Self with unkeyed
    checksum
    When the Heimdal KDC checks the checksum that is placed on
    the S4U2Self packet by the server to protect the requested
    principal against modification, it does not confirm that
    the checksum algorithm that protects the user name
    (principal) in the request is keyed. This allows a
    man-in-the-middle attacker who can intercept the request to
    the KDC to modify the packet by replacing the user name
    (principal) in the request with any desired user name
    (principal) that exists in the KDC and replace the checksum
    protecting that name with a CRC32 checksum (which requires
    no prior knowledge to compute).
    This would allow a S4U2Self ticket requested on behalf of
    user name (principal) user@EXAMPLE.COM to any service to be
    changed to a S4U2Self ticket with a user name (principal) of
    Administrator@EXAMPLE.COM. This ticket would then contain
    the PAC of the modified user name (principal).
  - CVE-2019-12098, client-only:
    RFC8062 Section 7 requires verification of the PA-PKINIT-KX
    key exchange when anonymous PKINIT is used. Failure to do
    so can permit an active attacker to become a
    man-in-the-middle.
  + Bug fixes:
  - Happy eyeballs: Don't wait for responses from
    known-unreachable KDCs.
  - kdc:
    + check return copy_Realm, copy_PrincipalName,
    copy_EncryptionKey
  - kinit:
    + cleanup temporary ccaches
    + see man page for "kinit --anonymous" command line syntax
    change
  - kdc:
    + Make anonymous AS-requests more RFC8062-compliant.
    Updated expired test certificates
  - Solaris:
    + PKCS#11 hcrypto backend broken since 7.0.1
    + Building with Sun Pro C
  + Features:
  - kuser: support authenticated anonymous AS-REQs in kinit
  - kdc: support for anonymous TGS-REQs
  - kgetcred support for anonymous service tickets
  - Support builds with OpenSSL 1.1.1
- fixed heimdal-patched.diff and reproducible.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1653480000">- Apply Shared Library Packaging Policy and resolve rpmlint
  errors like "libheimdal.x86_64: E: shlib-policy-name-error
  SONAME: libasn1.so.8, expected package suffix: 8"</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656417600">- Add heimdal-7.7.0-autoconf-2.70.patch: Fix build with autoconf
  2.70 (gh#heimdal/heimdal#856).</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656590400">- Add ldconfig scriptlets.
- Fix 'Conflicts:' tags.
- Remove obsolete macros and conditionals.
- Ran spec-cleaner.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1671624000">- Update to version 7.8.0
  + This release includes both the Heimdal 7.7.1 Security
    Vulnerability fixes and non-Security bug fixes/improvements.
  + Security Vulnerabilities:
  - CVE-2022-42898 PAC parse integer overflows
  - CVE-2022-3437 Overflows and non-constant time leaks in
    DES{,3} and arcfour
  - CVE-2022-41916 Fix Unicode normalization read of 1 bytes past
    end of array
  - CVE-2021-44758 A null pointer de-reference DoS in SPNEGO
    acceptors
  - CVE-2021-3671 A null pointer de-reference when handling
    missing sname in TGS-REQ
  - CVE-2022-44640 Heimdal KDC: invalid free in ASN.1 codec
    Note that CVE-2022-44640 is a severe vulnerability,
    possibly a 10.0 on the Common Vulnerability Scoring
    System (CVSS) v3, as we believe it should be possible to
    get an RCE on a KDC, which means that credentials can be
    compromised that can be used to impersonate anyone in a
    realm or forest of realms.
    Heimdal's ASN.1 compiler generates code that allows
    specially crafted DER encodings of CHOICEs to invoke the
    wrong free function on the decoded structure upon decode
    error. This is known to impact the Heimdal KDC, leading to
    an invalid free() of an address partly or wholly under the
    control of the attacker, in turn leading to a potential
    remote code execution (RCE) vulnerability.
    This error affects the DER codec for all extensible CHOICE
    types used in Heimdal, though not all cases will be
    exploitable. We have not completed a thorough analysis of
    all the Heimdal components affected, thus the Kerberos
    client, the X.509 library, and other parts, may be affected
    as well.
    This bug has been in Heimdal's ASN.1 compiler since 2005,
    but it may only affect Heimdal 1.6 and up. It was first
    reported by Douglas Bagnall, though it had been found
    independently by the Heimdal maintainers via fuzzing a few
    weeks earlier.
    While no zero-day exploit is known, such an exploit will
    likely be available soon after public disclosure.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  + Other changes:
  - Bugs found by UBSAN (including the incorrect encoding of
    unconstrained INTEGER value -1).
  - Errors found by the LLVM scan-build static analyzer.
  - Errors found by the valgrind memory debugger.
  - Work around GCC Bug 95189 (memcmp wrongly stripped like
    strcmp).
  - Correct ASN.1 OID typo for SHA-384
  - Fix a deadlock in in the MEMORY ccache type.
  - TGS: strip forwardable and proxiable flags if the server is
    disallowed.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  - Incremental HDB propagation improvements
    Refactor send_diffs making it progressive
    Handle partial writes on non-blocking sockets
    Disable Nagle in iprop master and slave
    Use async I/O
    Don't send I_HAVE in response to AYT
    Do not recover log in kadm5_get_principal()
    Don't send diffs to slaves with not yet known version
    Don't stutter in send_diffs
  - Optional backwards-compatible anon-pkinit behavior
- Removed heimdal-7.7.0-autoconf-2.70.patch, fixed upstream.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1673352000">- replace libheimdal conflicts by obsoletes / provides to provide a
  smooth update in the new libheimdal-devel.</changelog>
</package>
<package pkgid="0f64220480c61ef967d8d41ed71d693d26e2dc0e5b3854cfade9c67e5462a941" name="libheimedit0" arch="x86_64">
  <version epoch="0" ver="7.8.0" rel="bp154.2.4.1"/>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1440936000">- Initial package, version 1.6rc2
- Added patch heimdal-version-script-client.map.patch to add file
  version-script-client.map (File is present in git for tag 1.6rc2
  but missing in tarball).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441108800">- Some changes in spec file to enable build for SLES.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441195200">- Added Conflicts tags to spec file because devel package conflicts
  with krb5-devel and krb5-mini-devel.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441454400">- Added a patched instead of the original tarball because only
  shared libraries will be build and source files of these (not to
  be build) programs have problematic licenses.
- Added script heimdal-patch-source.sh to sources.
- Added patch heimdal-patched.diff that fixes configure.ac and
  several Makefile.am files to successfully build patched source.
- Removed unneeded dependencies in spec file for build.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1483790400">- Update to version 7.1.0
- Removed heimdal-version-script-client.map.patch, fixed upstream.
- Fixed heimdal-patched.diff.
- Unfortunately there is no updated changelog file in tarball,
  changes can be seen in source code version control systems
  history log.</changelog>
  <changelog author="jengelh@inai.de" date="1486036800">- Summary and RPM group update. Do a direct call to ldconfig
  where possible.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1497528000">- Update to version 7.3.0
  - Security
    + Fix transit path validation. Commit f469fc6 (2010-10-02)
    inadvertently caused the previous hop realm to not be added
    to the transit path of issued tickets. This may, in some
    cases, enable bypass of capath policy in Heimdal versions 1.5
    through 7.2.
    Note, this may break sites that rely on the bug. With the bug
    some incomplete [capaths] worked, that should not have.
    These may now break authentication in some cross-realm
    configurations. (CVE-2017-6594)
- Version 7.2.0
  - Bug fixes
    + Portability improvements.
    + More strict parsing of encoded URI components in HTTP KDC.
    + Fixed memory leak in malloc error recovery in NTLM GSSAPI
    mechanism.
    + Avoid overly specific CPU info in krb5-config in aid of
    reproducible builds.
    + Don't do AFS string-to-key tests when feature is disabled.
    + Skip mdb_stat test when the command is not available.
    + Windows: update SHA2 timestamp server.
    + hdb: add missing export
    hdb_generate_key_set_password_with_ks_tuple.
    + Fix signature of hdb_generate_key_set_password().
    + Windows: enable KX509 support in the KDC.
    + kdc: fix kx509 service principal match.
    + iprop: handle case where master sends nothing new.
    + ipropd-slave: fix incorrect error codes.
    + Allow choice of sqlite for HDB pref.
    + check-iprop: don't fail to kill daemons.
    + roken: pidfile -&gt; rk_pidfile.
    + kdc: _kdc_do_kx509 fix use after free error.
    + Do not detect x32 as 64-bit platform.
    + No sys/ttydefaults.h on CYGWIN.
    + Fix check-iprop races.
    + roken_detach_prep() close pipe.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1501761600">- Update to version 7.4.0
  - Security
  - Fix CVE-2017-11103: Orpheus' Lyre KDC-REP service name
    validation.
    This is a critical vulnerability.
    In _krb5_extract_ticket() the KDC-REP service name must be
    obtained from encrypted version stored in 'enc_part' instead
    of the unencrypted version stored in 'ticket'.
    Use of the unecrypted version provides an opportunity for
    successful server impersonation and other attacks.
    Identified by Jeffrey Altman, Viktor Duchovni and
    Nico Williams.
    See https://www.orpheus-lyre.info/ for more details.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1512648000">- Added Avoid_NULL_structure_pointer_member_dereference.patch,
  fixes (bsc#1071675).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1514548800">- Update to version 7.5.0
  - Security
  - Fix CVE-2017-17439, which is a remote denial of service
    vulnerability:
    In Heimdal 7.1 through 7.4, remote unauthenticated attackers
    are able to crash the KDC by sending a crafted UDP packet
    containing empty data fields for client name or realm.
  - Bug fixes
  - Handle long input lines when reloading database dumps.
  - In pre-forked mode (default on Unix), correctly clear the
    process ids of exited children, allowing new child processes
    to replace the old.
  - Fixed incorrect KDC response when no-cross realm TGT exists,
    allowing client requests to fail quickly rather than time
    out after trying to get a correct answer from each KDC.
- Fixed heimdal-patched.diff.
- Removed Avoid_NULL_structure_pointer_member_dereference.patch,
  fixed upstream.</changelog>
  <changelog author="bwiedemann@suse.com" date="1533643200">- Add reproducible.patch to override build date (boo#1047218)
- Use constant hostname (boo#1084909)</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1561291200">- Update to version 7.7.0
  + Bug fixes:
  - PKCS#11 hcrypto back-end:
    + initialize the p11_module_load function list
    + verify that not only is a mechanism present but that its
    mechanism info states that it offers the required
    encryption, decryption or digest services
  - krb5:
    + Starting with 7.6, Heimdal permitted requesting
    authenticated anonymous tickets. However, it did not
    verify that a KDC in fact returned an anonymous ticket
    when one was requested.
    + Cease setting the KDCOption reaquest_anonymous flag when
    issuing S4UProxy (constrained delegation) TGS requests.
    + when the Win2K PKINIT compatibility option is set, do not
    require krbtgt otherName to match when validating KDC
    certificate.
    + set PKINIT_BTMM flag per Apple implementation
    + use memset_s() instead of memset()
  - kdc:
    + When generating KRB5SignedPath in the AS, use the reply
    client name rather than the one from the request, so
    validation will work correctly in the TGS.
    + allow checksum of PA-FOR-USER to be HMAC_MD5. Even if TGT
    used an enctype with a different checksum. Per [MS-SFU]
    2.2.1 PA-FOR-USER the checksum is always HMAC_MD5, and
    that's what Windows and MIT clients send.
    In Heimdal both the client and kdc use instead the
    checksum of the TGT, and therefore work with each other
    but Windows and MIT clients fail against Heimdal KDC.
    Both Windows and MIT KDC would allow any keyed checksum
    to be used so Heimdal client work fine against it.
    Change Heimdal KDC to allow HMAC_MD5 even for non RC4
    based TGT in order to support per-spec clients.
    + use memset_s() instead of memset()
    + Detect Heimdal 1.0 through 7.6 clients that issue
    S4UProxy (constrained delegation) TGS Requests with the
    request anonymous flag set. These requests will be
    treated as S4UProxy requests and not anonymous requests.
  - HDB:
    + Set SQLite3 backend default page size to 8KB.
    + Add hdb_set_sync() method
  - kadmind:
    + disable HDB sync during database load avoiding
    unnecessary disk i/o.
  - ipropd:
    + disable HDB sync during receive_everything. Doing an
    fsync per-record when receiving the complete HDB is a
    performance disaster. Among other things, if the HDB is
    very large, then one slave receving a full HDB can cause
    other slaves to timeout and, if HDB write activity is
    high enough to cause iprop log truncation, then also need
    full syncs, which leads to a cycle of full syncs for all
    slaves until HDB write activity drops.
    Allowing the iprop log to be larger helps, but improving
    receive_everything() performance helps even more.
  - kinit:
    + Anonymous PKINIT tickets discard the realm information
    used to locate the issuing AS. Store the issuing realm in
    the credentials cache in order to locate a KDC which can
    renew them.
    + Do not leak the result of krb5_cc_get_config() when
    determining anonymous PKINIT start realm.
  - klist:
    + Show transited-policy-checked, ok-as-delegate and
    anonymous flags when listing credentials.
  - tests:
    + Regenerate certs so that they expire before the 2038
    armageddon so the test suite will pass on 32-bit
    operating systems until the underlying issues can be
    resolved.
  - Solaris:
    + Define _STDC_C11_BCI for memset_s prototype
  - build tooling:
    + Convert from python 2 to python 3
  - documentation:
    + rename verify-password to verify-password-quality
    + hprop default mode is encrypt
    + kadmind "all" permission does not include "get-keys"
    + verify-password-quality might not be stateless
- Version 7.6.0
  + Security (#555):
  - CVE-2018-16860 Heimdal KDC: Reject PA-S4U2Self with unkeyed
    checksum
    When the Heimdal KDC checks the checksum that is placed on
    the S4U2Self packet by the server to protect the requested
    principal against modification, it does not confirm that
    the checksum algorithm that protects the user name
    (principal) in the request is keyed. This allows a
    man-in-the-middle attacker who can intercept the request to
    the KDC to modify the packet by replacing the user name
    (principal) in the request with any desired user name
    (principal) that exists in the KDC and replace the checksum
    protecting that name with a CRC32 checksum (which requires
    no prior knowledge to compute).
    This would allow a S4U2Self ticket requested on behalf of
    user name (principal) user@EXAMPLE.COM to any service to be
    changed to a S4U2Self ticket with a user name (principal) of
    Administrator@EXAMPLE.COM. This ticket would then contain
    the PAC of the modified user name (principal).
  - CVE-2019-12098, client-only:
    RFC8062 Section 7 requires verification of the PA-PKINIT-KX
    key exchange when anonymous PKINIT is used. Failure to do
    so can permit an active attacker to become a
    man-in-the-middle.
  + Bug fixes:
  - Happy eyeballs: Don't wait for responses from
    known-unreachable KDCs.
  - kdc:
    + check return copy_Realm, copy_PrincipalName,
    copy_EncryptionKey
  - kinit:
    + cleanup temporary ccaches
    + see man page for "kinit --anonymous" command line syntax
    change
  - kdc:
    + Make anonymous AS-requests more RFC8062-compliant.
    Updated expired test certificates
  - Solaris:
    + PKCS#11 hcrypto backend broken since 7.0.1
    + Building with Sun Pro C
  + Features:
  - kuser: support authenticated anonymous AS-REQs in kinit
  - kdc: support for anonymous TGS-REQs
  - kgetcred support for anonymous service tickets
  - Support builds with OpenSSL 1.1.1
- fixed heimdal-patched.diff and reproducible.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1653480000">- Apply Shared Library Packaging Policy and resolve rpmlint
  errors like "libheimdal.x86_64: E: shlib-policy-name-error
  SONAME: libasn1.so.8, expected package suffix: 8"</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656417600">- Add heimdal-7.7.0-autoconf-2.70.patch: Fix build with autoconf
  2.70 (gh#heimdal/heimdal#856).</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656590400">- Add ldconfig scriptlets.
- Fix 'Conflicts:' tags.
- Remove obsolete macros and conditionals.
- Ran spec-cleaner.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1671624000">- Update to version 7.8.0
  + This release includes both the Heimdal 7.7.1 Security
    Vulnerability fixes and non-Security bug fixes/improvements.
  + Security Vulnerabilities:
  - CVE-2022-42898 PAC parse integer overflows
  - CVE-2022-3437 Overflows and non-constant time leaks in
    DES{,3} and arcfour
  - CVE-2022-41916 Fix Unicode normalization read of 1 bytes past
    end of array
  - CVE-2021-44758 A null pointer de-reference DoS in SPNEGO
    acceptors
  - CVE-2021-3671 A null pointer de-reference when handling
    missing sname in TGS-REQ
  - CVE-2022-44640 Heimdal KDC: invalid free in ASN.1 codec
    Note that CVE-2022-44640 is a severe vulnerability,
    possibly a 10.0 on the Common Vulnerability Scoring
    System (CVSS) v3, as we believe it should be possible to
    get an RCE on a KDC, which means that credentials can be
    compromised that can be used to impersonate anyone in a
    realm or forest of realms.
    Heimdal's ASN.1 compiler generates code that allows
    specially crafted DER encodings of CHOICEs to invoke the
    wrong free function on the decoded structure upon decode
    error. This is known to impact the Heimdal KDC, leading to
    an invalid free() of an address partly or wholly under the
    control of the attacker, in turn leading to a potential
    remote code execution (RCE) vulnerability.
    This error affects the DER codec for all extensible CHOICE
    types used in Heimdal, though not all cases will be
    exploitable. We have not completed a thorough analysis of
    all the Heimdal components affected, thus the Kerberos
    client, the X.509 library, and other parts, may be affected
    as well.
    This bug has been in Heimdal's ASN.1 compiler since 2005,
    but it may only affect Heimdal 1.6 and up. It was first
    reported by Douglas Bagnall, though it had been found
    independently by the Heimdal maintainers via fuzzing a few
    weeks earlier.
    While no zero-day exploit is known, such an exploit will
    likely be available soon after public disclosure.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  + Other changes:
  - Bugs found by UBSAN (including the incorrect encoding of
    unconstrained INTEGER value -1).
  - Errors found by the LLVM scan-build static analyzer.
  - Errors found by the valgrind memory debugger.
  - Work around GCC Bug 95189 (memcmp wrongly stripped like
    strcmp).
  - Correct ASN.1 OID typo for SHA-384
  - Fix a deadlock in in the MEMORY ccache type.
  - TGS: strip forwardable and proxiable flags if the server is
    disallowed.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  - Incremental HDB propagation improvements
    Refactor send_diffs making it progressive
    Handle partial writes on non-blocking sockets
    Disable Nagle in iprop master and slave
    Use async I/O
    Don't send I_HAVE in response to AYT
    Do not recover log in kadm5_get_principal()
    Don't send diffs to slaves with not yet known version
    Don't stutter in send_diffs
  - Optional backwards-compatible anon-pkinit behavior
- Removed heimdal-7.7.0-autoconf-2.70.patch, fixed upstream.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1673352000">- replace libheimdal conflicts by obsoletes / provides to provide a
  smooth update in the new libheimdal-devel.</changelog>
</package>
<package pkgid="3605668a1a7f571340828efc6a3c03b945da1a4a5aaacb011da055df08045ef8" name="libheimntlm0" arch="aarch64">
  <version epoch="0" ver="7.8.0" rel="bp154.2.4.1"/>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1440936000">- Initial package, version 1.6rc2
- Added patch heimdal-version-script-client.map.patch to add file
  version-script-client.map (File is present in git for tag 1.6rc2
  but missing in tarball).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441108800">- Some changes in spec file to enable build for SLES.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441195200">- Added Conflicts tags to spec file because devel package conflicts
  with krb5-devel and krb5-mini-devel.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441454400">- Added a patched instead of the original tarball because only
  shared libraries will be build and source files of these (not to
  be build) programs have problematic licenses.
- Added script heimdal-patch-source.sh to sources.
- Added patch heimdal-patched.diff that fixes configure.ac and
  several Makefile.am files to successfully build patched source.
- Removed unneeded dependencies in spec file for build.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1483790400">- Update to version 7.1.0
- Removed heimdal-version-script-client.map.patch, fixed upstream.
- Fixed heimdal-patched.diff.
- Unfortunately there is no updated changelog file in tarball,
  changes can be seen in source code version control systems
  history log.</changelog>
  <changelog author="jengelh@inai.de" date="1486036800">- Summary and RPM group update. Do a direct call to ldconfig
  where possible.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1497528000">- Update to version 7.3.0
  - Security
    + Fix transit path validation. Commit f469fc6 (2010-10-02)
    inadvertently caused the previous hop realm to not be added
    to the transit path of issued tickets. This may, in some
    cases, enable bypass of capath policy in Heimdal versions 1.5
    through 7.2.
    Note, this may break sites that rely on the bug. With the bug
    some incomplete [capaths] worked, that should not have.
    These may now break authentication in some cross-realm
    configurations. (CVE-2017-6594)
- Version 7.2.0
  - Bug fixes
    + Portability improvements.
    + More strict parsing of encoded URI components in HTTP KDC.
    + Fixed memory leak in malloc error recovery in NTLM GSSAPI
    mechanism.
    + Avoid overly specific CPU info in krb5-config in aid of
    reproducible builds.
    + Don't do AFS string-to-key tests when feature is disabled.
    + Skip mdb_stat test when the command is not available.
    + Windows: update SHA2 timestamp server.
    + hdb: add missing export
    hdb_generate_key_set_password_with_ks_tuple.
    + Fix signature of hdb_generate_key_set_password().
    + Windows: enable KX509 support in the KDC.
    + kdc: fix kx509 service principal match.
    + iprop: handle case where master sends nothing new.
    + ipropd-slave: fix incorrect error codes.
    + Allow choice of sqlite for HDB pref.
    + check-iprop: don't fail to kill daemons.
    + roken: pidfile -&gt; rk_pidfile.
    + kdc: _kdc_do_kx509 fix use after free error.
    + Do not detect x32 as 64-bit platform.
    + No sys/ttydefaults.h on CYGWIN.
    + Fix check-iprop races.
    + roken_detach_prep() close pipe.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1501761600">- Update to version 7.4.0
  - Security
  - Fix CVE-2017-11103: Orpheus' Lyre KDC-REP service name
    validation.
    This is a critical vulnerability.
    In _krb5_extract_ticket() the KDC-REP service name must be
    obtained from encrypted version stored in 'enc_part' instead
    of the unencrypted version stored in 'ticket'.
    Use of the unecrypted version provides an opportunity for
    successful server impersonation and other attacks.
    Identified by Jeffrey Altman, Viktor Duchovni and
    Nico Williams.
    See https://www.orpheus-lyre.info/ for more details.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1512648000">- Added Avoid_NULL_structure_pointer_member_dereference.patch,
  fixes (bsc#1071675).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1514548800">- Update to version 7.5.0
  - Security
  - Fix CVE-2017-17439, which is a remote denial of service
    vulnerability:
    In Heimdal 7.1 through 7.4, remote unauthenticated attackers
    are able to crash the KDC by sending a crafted UDP packet
    containing empty data fields for client name or realm.
  - Bug fixes
  - Handle long input lines when reloading database dumps.
  - In pre-forked mode (default on Unix), correctly clear the
    process ids of exited children, allowing new child processes
    to replace the old.
  - Fixed incorrect KDC response when no-cross realm TGT exists,
    allowing client requests to fail quickly rather than time
    out after trying to get a correct answer from each KDC.
- Fixed heimdal-patched.diff.
- Removed Avoid_NULL_structure_pointer_member_dereference.patch,
  fixed upstream.</changelog>
  <changelog author="bwiedemann@suse.com" date="1533643200">- Add reproducible.patch to override build date (boo#1047218)
- Use constant hostname (boo#1084909)</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1561291200">- Update to version 7.7.0
  + Bug fixes:
  - PKCS#11 hcrypto back-end:
    + initialize the p11_module_load function list
    + verify that not only is a mechanism present but that its
    mechanism info states that it offers the required
    encryption, decryption or digest services
  - krb5:
    + Starting with 7.6, Heimdal permitted requesting
    authenticated anonymous tickets. However, it did not
    verify that a KDC in fact returned an anonymous ticket
    when one was requested.
    + Cease setting the KDCOption reaquest_anonymous flag when
    issuing S4UProxy (constrained delegation) TGS requests.
    + when the Win2K PKINIT compatibility option is set, do not
    require krbtgt otherName to match when validating KDC
    certificate.
    + set PKINIT_BTMM flag per Apple implementation
    + use memset_s() instead of memset()
  - kdc:
    + When generating KRB5SignedPath in the AS, use the reply
    client name rather than the one from the request, so
    validation will work correctly in the TGS.
    + allow checksum of PA-FOR-USER to be HMAC_MD5. Even if TGT
    used an enctype with a different checksum. Per [MS-SFU]
    2.2.1 PA-FOR-USER the checksum is always HMAC_MD5, and
    that's what Windows and MIT clients send.
    In Heimdal both the client and kdc use instead the
    checksum of the TGT, and therefore work with each other
    but Windows and MIT clients fail against Heimdal KDC.
    Both Windows and MIT KDC would allow any keyed checksum
    to be used so Heimdal client work fine against it.
    Change Heimdal KDC to allow HMAC_MD5 even for non RC4
    based TGT in order to support per-spec clients.
    + use memset_s() instead of memset()
    + Detect Heimdal 1.0 through 7.6 clients that issue
    S4UProxy (constrained delegation) TGS Requests with the
    request anonymous flag set. These requests will be
    treated as S4UProxy requests and not anonymous requests.
  - HDB:
    + Set SQLite3 backend default page size to 8KB.
    + Add hdb_set_sync() method
  - kadmind:
    + disable HDB sync during database load avoiding
    unnecessary disk i/o.
  - ipropd:
    + disable HDB sync during receive_everything. Doing an
    fsync per-record when receiving the complete HDB is a
    performance disaster. Among other things, if the HDB is
    very large, then one slave receving a full HDB can cause
    other slaves to timeout and, if HDB write activity is
    high enough to cause iprop log truncation, then also need
    full syncs, which leads to a cycle of full syncs for all
    slaves until HDB write activity drops.
    Allowing the iprop log to be larger helps, but improving
    receive_everything() performance helps even more.
  - kinit:
    + Anonymous PKINIT tickets discard the realm information
    used to locate the issuing AS. Store the issuing realm in
    the credentials cache in order to locate a KDC which can
    renew them.
    + Do not leak the result of krb5_cc_get_config() when
    determining anonymous PKINIT start realm.
  - klist:
    + Show transited-policy-checked, ok-as-delegate and
    anonymous flags when listing credentials.
  - tests:
    + Regenerate certs so that they expire before the 2038
    armageddon so the test suite will pass on 32-bit
    operating systems until the underlying issues can be
    resolved.
  - Solaris:
    + Define _STDC_C11_BCI for memset_s prototype
  - build tooling:
    + Convert from python 2 to python 3
  - documentation:
    + rename verify-password to verify-password-quality
    + hprop default mode is encrypt
    + kadmind "all" permission does not include "get-keys"
    + verify-password-quality might not be stateless
- Version 7.6.0
  + Security (#555):
  - CVE-2018-16860 Heimdal KDC: Reject PA-S4U2Self with unkeyed
    checksum
    When the Heimdal KDC checks the checksum that is placed on
    the S4U2Self packet by the server to protect the requested
    principal against modification, it does not confirm that
    the checksum algorithm that protects the user name
    (principal) in the request is keyed. This allows a
    man-in-the-middle attacker who can intercept the request to
    the KDC to modify the packet by replacing the user name
    (principal) in the request with any desired user name
    (principal) that exists in the KDC and replace the checksum
    protecting that name with a CRC32 checksum (which requires
    no prior knowledge to compute).
    This would allow a S4U2Self ticket requested on behalf of
    user name (principal) user@EXAMPLE.COM to any service to be
    changed to a S4U2Self ticket with a user name (principal) of
    Administrator@EXAMPLE.COM. This ticket would then contain
    the PAC of the modified user name (principal).
  - CVE-2019-12098, client-only:
    RFC8062 Section 7 requires verification of the PA-PKINIT-KX
    key exchange when anonymous PKINIT is used. Failure to do
    so can permit an active attacker to become a
    man-in-the-middle.
  + Bug fixes:
  - Happy eyeballs: Don't wait for responses from
    known-unreachable KDCs.
  - kdc:
    + check return copy_Realm, copy_PrincipalName,
    copy_EncryptionKey
  - kinit:
    + cleanup temporary ccaches
    + see man page for "kinit --anonymous" command line syntax
    change
  - kdc:
    + Make anonymous AS-requests more RFC8062-compliant.
    Updated expired test certificates
  - Solaris:
    + PKCS#11 hcrypto backend broken since 7.0.1
    + Building with Sun Pro C
  + Features:
  - kuser: support authenticated anonymous AS-REQs in kinit
  - kdc: support for anonymous TGS-REQs
  - kgetcred support for anonymous service tickets
  - Support builds with OpenSSL 1.1.1
- fixed heimdal-patched.diff and reproducible.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1653480000">- Apply Shared Library Packaging Policy and resolve rpmlint
  errors like "libheimdal.x86_64: E: shlib-policy-name-error
  SONAME: libasn1.so.8, expected package suffix: 8"</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656417600">- Add heimdal-7.7.0-autoconf-2.70.patch: Fix build with autoconf
  2.70 (gh#heimdal/heimdal#856).</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656590400">- Add ldconfig scriptlets.
- Fix 'Conflicts:' tags.
- Remove obsolete macros and conditionals.
- Ran spec-cleaner.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1671624000">- Update to version 7.8.0
  + This release includes both the Heimdal 7.7.1 Security
    Vulnerability fixes and non-Security bug fixes/improvements.
  + Security Vulnerabilities:
  - CVE-2022-42898 PAC parse integer overflows
  - CVE-2022-3437 Overflows and non-constant time leaks in
    DES{,3} and arcfour
  - CVE-2022-41916 Fix Unicode normalization read of 1 bytes past
    end of array
  - CVE-2021-44758 A null pointer de-reference DoS in SPNEGO
    acceptors
  - CVE-2021-3671 A null pointer de-reference when handling
    missing sname in TGS-REQ
  - CVE-2022-44640 Heimdal KDC: invalid free in ASN.1 codec
    Note that CVE-2022-44640 is a severe vulnerability,
    possibly a 10.0 on the Common Vulnerability Scoring
    System (CVSS) v3, as we believe it should be possible to
    get an RCE on a KDC, which means that credentials can be
    compromised that can be used to impersonate anyone in a
    realm or forest of realms.
    Heimdal's ASN.1 compiler generates code that allows
    specially crafted DER encodings of CHOICEs to invoke the
    wrong free function on the decoded structure upon decode
    error. This is known to impact the Heimdal KDC, leading to
    an invalid free() of an address partly or wholly under the
    control of the attacker, in turn leading to a potential
    remote code execution (RCE) vulnerability.
    This error affects the DER codec for all extensible CHOICE
    types used in Heimdal, though not all cases will be
    exploitable. We have not completed a thorough analysis of
    all the Heimdal components affected, thus the Kerberos
    client, the X.509 library, and other parts, may be affected
    as well.
    This bug has been in Heimdal's ASN.1 compiler since 2005,
    but it may only affect Heimdal 1.6 and up. It was first
    reported by Douglas Bagnall, though it had been found
    independently by the Heimdal maintainers via fuzzing a few
    weeks earlier.
    While no zero-day exploit is known, such an exploit will
    likely be available soon after public disclosure.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  + Other changes:
  - Bugs found by UBSAN (including the incorrect encoding of
    unconstrained INTEGER value -1).
  - Errors found by the LLVM scan-build static analyzer.
  - Errors found by the valgrind memory debugger.
  - Work around GCC Bug 95189 (memcmp wrongly stripped like
    strcmp).
  - Correct ASN.1 OID typo for SHA-384
  - Fix a deadlock in in the MEMORY ccache type.
  - TGS: strip forwardable and proxiable flags if the server is
    disallowed.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  - Incremental HDB propagation improvements
    Refactor send_diffs making it progressive
    Handle partial writes on non-blocking sockets
    Disable Nagle in iprop master and slave
    Use async I/O
    Don't send I_HAVE in response to AYT
    Do not recover log in kadm5_get_principal()
    Don't send diffs to slaves with not yet known version
    Don't stutter in send_diffs
  - Optional backwards-compatible anon-pkinit behavior
- Removed heimdal-7.7.0-autoconf-2.70.patch, fixed upstream.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1673352000">- replace libheimdal conflicts by obsoletes / provides to provide a
  smooth update in the new libheimdal-devel.</changelog>
</package>
<package pkgid="82ac8c087022d8331014711f38987e2724abb07c20d4d63c1ef45e29c93ba2db" name="libheimntlm0" arch="i586">
  <version epoch="0" ver="7.8.0" rel="bp154.2.4.1"/>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1440936000">- Initial package, version 1.6rc2
- Added patch heimdal-version-script-client.map.patch to add file
  version-script-client.map (File is present in git for tag 1.6rc2
  but missing in tarball).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441108800">- Some changes in spec file to enable build for SLES.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441195200">- Added Conflicts tags to spec file because devel package conflicts
  with krb5-devel and krb5-mini-devel.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441454400">- Added a patched instead of the original tarball because only
  shared libraries will be build and source files of these (not to
  be build) programs have problematic licenses.
- Added script heimdal-patch-source.sh to sources.
- Added patch heimdal-patched.diff that fixes configure.ac and
  several Makefile.am files to successfully build patched source.
- Removed unneeded dependencies in spec file for build.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1483790400">- Update to version 7.1.0
- Removed heimdal-version-script-client.map.patch, fixed upstream.
- Fixed heimdal-patched.diff.
- Unfortunately there is no updated changelog file in tarball,
  changes can be seen in source code version control systems
  history log.</changelog>
  <changelog author="jengelh@inai.de" date="1486036800">- Summary and RPM group update. Do a direct call to ldconfig
  where possible.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1497528000">- Update to version 7.3.0
  - Security
    + Fix transit path validation. Commit f469fc6 (2010-10-02)
    inadvertently caused the previous hop realm to not be added
    to the transit path of issued tickets. This may, in some
    cases, enable bypass of capath policy in Heimdal versions 1.5
    through 7.2.
    Note, this may break sites that rely on the bug. With the bug
    some incomplete [capaths] worked, that should not have.
    These may now break authentication in some cross-realm
    configurations. (CVE-2017-6594)
- Version 7.2.0
  - Bug fixes
    + Portability improvements.
    + More strict parsing of encoded URI components in HTTP KDC.
    + Fixed memory leak in malloc error recovery in NTLM GSSAPI
    mechanism.
    + Avoid overly specific CPU info in krb5-config in aid of
    reproducible builds.
    + Don't do AFS string-to-key tests when feature is disabled.
    + Skip mdb_stat test when the command is not available.
    + Windows: update SHA2 timestamp server.
    + hdb: add missing export
    hdb_generate_key_set_password_with_ks_tuple.
    + Fix signature of hdb_generate_key_set_password().
    + Windows: enable KX509 support in the KDC.
    + kdc: fix kx509 service principal match.
    + iprop: handle case where master sends nothing new.
    + ipropd-slave: fix incorrect error codes.
    + Allow choice of sqlite for HDB pref.
    + check-iprop: don't fail to kill daemons.
    + roken: pidfile -&gt; rk_pidfile.
    + kdc: _kdc_do_kx509 fix use after free error.
    + Do not detect x32 as 64-bit platform.
    + No sys/ttydefaults.h on CYGWIN.
    + Fix check-iprop races.
    + roken_detach_prep() close pipe.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1501761600">- Update to version 7.4.0
  - Security
  - Fix CVE-2017-11103: Orpheus' Lyre KDC-REP service name
    validation.
    This is a critical vulnerability.
    In _krb5_extract_ticket() the KDC-REP service name must be
    obtained from encrypted version stored in 'enc_part' instead
    of the unencrypted version stored in 'ticket'.
    Use of the unecrypted version provides an opportunity for
    successful server impersonation and other attacks.
    Identified by Jeffrey Altman, Viktor Duchovni and
    Nico Williams.
    See https://www.orpheus-lyre.info/ for more details.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1512648000">- Added Avoid_NULL_structure_pointer_member_dereference.patch,
  fixes (bsc#1071675).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1514548800">- Update to version 7.5.0
  - Security
  - Fix CVE-2017-17439, which is a remote denial of service
    vulnerability:
    In Heimdal 7.1 through 7.4, remote unauthenticated attackers
    are able to crash the KDC by sending a crafted UDP packet
    containing empty data fields for client name or realm.
  - Bug fixes
  - Handle long input lines when reloading database dumps.
  - In pre-forked mode (default on Unix), correctly clear the
    process ids of exited children, allowing new child processes
    to replace the old.
  - Fixed incorrect KDC response when no-cross realm TGT exists,
    allowing client requests to fail quickly rather than time
    out after trying to get a correct answer from each KDC.
- Fixed heimdal-patched.diff.
- Removed Avoid_NULL_structure_pointer_member_dereference.patch,
  fixed upstream.</changelog>
  <changelog author="bwiedemann@suse.com" date="1533643200">- Add reproducible.patch to override build date (boo#1047218)
- Use constant hostname (boo#1084909)</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1561291200">- Update to version 7.7.0
  + Bug fixes:
  - PKCS#11 hcrypto back-end:
    + initialize the p11_module_load function list
    + verify that not only is a mechanism present but that its
    mechanism info states that it offers the required
    encryption, decryption or digest services
  - krb5:
    + Starting with 7.6, Heimdal permitted requesting
    authenticated anonymous tickets. However, it did not
    verify that a KDC in fact returned an anonymous ticket
    when one was requested.
    + Cease setting the KDCOption reaquest_anonymous flag when
    issuing S4UProxy (constrained delegation) TGS requests.
    + when the Win2K PKINIT compatibility option is set, do not
    require krbtgt otherName to match when validating KDC
    certificate.
    + set PKINIT_BTMM flag per Apple implementation
    + use memset_s() instead of memset()
  - kdc:
    + When generating KRB5SignedPath in the AS, use the reply
    client name rather than the one from the request, so
    validation will work correctly in the TGS.
    + allow checksum of PA-FOR-USER to be HMAC_MD5. Even if TGT
    used an enctype with a different checksum. Per [MS-SFU]
    2.2.1 PA-FOR-USER the checksum is always HMAC_MD5, and
    that's what Windows and MIT clients send.
    In Heimdal both the client and kdc use instead the
    checksum of the TGT, and therefore work with each other
    but Windows and MIT clients fail against Heimdal KDC.
    Both Windows and MIT KDC would allow any keyed checksum
    to be used so Heimdal client work fine against it.
    Change Heimdal KDC to allow HMAC_MD5 even for non RC4
    based TGT in order to support per-spec clients.
    + use memset_s() instead of memset()
    + Detect Heimdal 1.0 through 7.6 clients that issue
    S4UProxy (constrained delegation) TGS Requests with the
    request anonymous flag set. These requests will be
    treated as S4UProxy requests and not anonymous requests.
  - HDB:
    + Set SQLite3 backend default page size to 8KB.
    + Add hdb_set_sync() method
  - kadmind:
    + disable HDB sync during database load avoiding
    unnecessary disk i/o.
  - ipropd:
    + disable HDB sync during receive_everything. Doing an
    fsync per-record when receiving the complete HDB is a
    performance disaster. Among other things, if the HDB is
    very large, then one slave receving a full HDB can cause
    other slaves to timeout and, if HDB write activity is
    high enough to cause iprop log truncation, then also need
    full syncs, which leads to a cycle of full syncs for all
    slaves until HDB write activity drops.
    Allowing the iprop log to be larger helps, but improving
    receive_everything() performance helps even more.
  - kinit:
    + Anonymous PKINIT tickets discard the realm information
    used to locate the issuing AS. Store the issuing realm in
    the credentials cache in order to locate a KDC which can
    renew them.
    + Do not leak the result of krb5_cc_get_config() when
    determining anonymous PKINIT start realm.
  - klist:
    + Show transited-policy-checked, ok-as-delegate and
    anonymous flags when listing credentials.
  - tests:
    + Regenerate certs so that they expire before the 2038
    armageddon so the test suite will pass on 32-bit
    operating systems until the underlying issues can be
    resolved.
  - Solaris:
    + Define _STDC_C11_BCI for memset_s prototype
  - build tooling:
    + Convert from python 2 to python 3
  - documentation:
    + rename verify-password to verify-password-quality
    + hprop default mode is encrypt
    + kadmind "all" permission does not include "get-keys"
    + verify-password-quality might not be stateless
- Version 7.6.0
  + Security (#555):
  - CVE-2018-16860 Heimdal KDC: Reject PA-S4U2Self with unkeyed
    checksum
    When the Heimdal KDC checks the checksum that is placed on
    the S4U2Self packet by the server to protect the requested
    principal against modification, it does not confirm that
    the checksum algorithm that protects the user name
    (principal) in the request is keyed. This allows a
    man-in-the-middle attacker who can intercept the request to
    the KDC to modify the packet by replacing the user name
    (principal) in the request with any desired user name
    (principal) that exists in the KDC and replace the checksum
    protecting that name with a CRC32 checksum (which requires
    no prior knowledge to compute).
    This would allow a S4U2Self ticket requested on behalf of
    user name (principal) user@EXAMPLE.COM to any service to be
    changed to a S4U2Self ticket with a user name (principal) of
    Administrator@EXAMPLE.COM. This ticket would then contain
    the PAC of the modified user name (principal).
  - CVE-2019-12098, client-only:
    RFC8062 Section 7 requires verification of the PA-PKINIT-KX
    key exchange when anonymous PKINIT is used. Failure to do
    so can permit an active attacker to become a
    man-in-the-middle.
  + Bug fixes:
  - Happy eyeballs: Don't wait for responses from
    known-unreachable KDCs.
  - kdc:
    + check return copy_Realm, copy_PrincipalName,
    copy_EncryptionKey
  - kinit:
    + cleanup temporary ccaches
    + see man page for "kinit --anonymous" command line syntax
    change
  - kdc:
    + Make anonymous AS-requests more RFC8062-compliant.
    Updated expired test certificates
  - Solaris:
    + PKCS#11 hcrypto backend broken since 7.0.1
    + Building with Sun Pro C
  + Features:
  - kuser: support authenticated anonymous AS-REQs in kinit
  - kdc: support for anonymous TGS-REQs
  - kgetcred support for anonymous service tickets
  - Support builds with OpenSSL 1.1.1
- fixed heimdal-patched.diff and reproducible.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1653480000">- Apply Shared Library Packaging Policy and resolve rpmlint
  errors like "libheimdal.x86_64: E: shlib-policy-name-error
  SONAME: libasn1.so.8, expected package suffix: 8"</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656417600">- Add heimdal-7.7.0-autoconf-2.70.patch: Fix build with autoconf
  2.70 (gh#heimdal/heimdal#856).</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656590400">- Add ldconfig scriptlets.
- Fix 'Conflicts:' tags.
- Remove obsolete macros and conditionals.
- Ran spec-cleaner.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1671624000">- Update to version 7.8.0
  + This release includes both the Heimdal 7.7.1 Security
    Vulnerability fixes and non-Security bug fixes/improvements.
  + Security Vulnerabilities:
  - CVE-2022-42898 PAC parse integer overflows
  - CVE-2022-3437 Overflows and non-constant time leaks in
    DES{,3} and arcfour
  - CVE-2022-41916 Fix Unicode normalization read of 1 bytes past
    end of array
  - CVE-2021-44758 A null pointer de-reference DoS in SPNEGO
    acceptors
  - CVE-2021-3671 A null pointer de-reference when handling
    missing sname in TGS-REQ
  - CVE-2022-44640 Heimdal KDC: invalid free in ASN.1 codec
    Note that CVE-2022-44640 is a severe vulnerability,
    possibly a 10.0 on the Common Vulnerability Scoring
    System (CVSS) v3, as we believe it should be possible to
    get an RCE on a KDC, which means that credentials can be
    compromised that can be used to impersonate anyone in a
    realm or forest of realms.
    Heimdal's ASN.1 compiler generates code that allows
    specially crafted DER encodings of CHOICEs to invoke the
    wrong free function on the decoded structure upon decode
    error. This is known to impact the Heimdal KDC, leading to
    an invalid free() of an address partly or wholly under the
    control of the attacker, in turn leading to a potential
    remote code execution (RCE) vulnerability.
    This error affects the DER codec for all extensible CHOICE
    types used in Heimdal, though not all cases will be
    exploitable. We have not completed a thorough analysis of
    all the Heimdal components affected, thus the Kerberos
    client, the X.509 library, and other parts, may be affected
    as well.
    This bug has been in Heimdal's ASN.1 compiler since 2005,
    but it may only affect Heimdal 1.6 and up. It was first
    reported by Douglas Bagnall, though it had been found
    independently by the Heimdal maintainers via fuzzing a few
    weeks earlier.
    While no zero-day exploit is known, such an exploit will
    likely be available soon after public disclosure.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  + Other changes:
  - Bugs found by UBSAN (including the incorrect encoding of
    unconstrained INTEGER value -1).
  - Errors found by the LLVM scan-build static analyzer.
  - Errors found by the valgrind memory debugger.
  - Work around GCC Bug 95189 (memcmp wrongly stripped like
    strcmp).
  - Correct ASN.1 OID typo for SHA-384
  - Fix a deadlock in in the MEMORY ccache type.
  - TGS: strip forwardable and proxiable flags if the server is
    disallowed.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  - Incremental HDB propagation improvements
    Refactor send_diffs making it progressive
    Handle partial writes on non-blocking sockets
    Disable Nagle in iprop master and slave
    Use async I/O
    Don't send I_HAVE in response to AYT
    Do not recover log in kadm5_get_principal()
    Don't send diffs to slaves with not yet known version
    Don't stutter in send_diffs
  - Optional backwards-compatible anon-pkinit behavior
- Removed heimdal-7.7.0-autoconf-2.70.patch, fixed upstream.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1673352000">- replace libheimdal conflicts by obsoletes / provides to provide a
  smooth update in the new libheimdal-devel.</changelog>
</package>
<package pkgid="187f3356e6e9172aec331b54c2848a6bb43d6b2151db4412ef8e62d54a72b9ec" name="libheimntlm0" arch="ppc64le">
  <version epoch="0" ver="7.8.0" rel="bp154.2.4.1"/>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1440936000">- Initial package, version 1.6rc2
- Added patch heimdal-version-script-client.map.patch to add file
  version-script-client.map (File is present in git for tag 1.6rc2
  but missing in tarball).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441108800">- Some changes in spec file to enable build for SLES.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441195200">- Added Conflicts tags to spec file because devel package conflicts
  with krb5-devel and krb5-mini-devel.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441454400">- Added a patched instead of the original tarball because only
  shared libraries will be build and source files of these (not to
  be build) programs have problematic licenses.
- Added script heimdal-patch-source.sh to sources.
- Added patch heimdal-patched.diff that fixes configure.ac and
  several Makefile.am files to successfully build patched source.
- Removed unneeded dependencies in spec file for build.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1483790400">- Update to version 7.1.0
- Removed heimdal-version-script-client.map.patch, fixed upstream.
- Fixed heimdal-patched.diff.
- Unfortunately there is no updated changelog file in tarball,
  changes can be seen in source code version control systems
  history log.</changelog>
  <changelog author="jengelh@inai.de" date="1486036800">- Summary and RPM group update. Do a direct call to ldconfig
  where possible.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1497528000">- Update to version 7.3.0
  - Security
    + Fix transit path validation. Commit f469fc6 (2010-10-02)
    inadvertently caused the previous hop realm to not be added
    to the transit path of issued tickets. This may, in some
    cases, enable bypass of capath policy in Heimdal versions 1.5
    through 7.2.
    Note, this may break sites that rely on the bug. With the bug
    some incomplete [capaths] worked, that should not have.
    These may now break authentication in some cross-realm
    configurations. (CVE-2017-6594)
- Version 7.2.0
  - Bug fixes
    + Portability improvements.
    + More strict parsing of encoded URI components in HTTP KDC.
    + Fixed memory leak in malloc error recovery in NTLM GSSAPI
    mechanism.
    + Avoid overly specific CPU info in krb5-config in aid of
    reproducible builds.
    + Don't do AFS string-to-key tests when feature is disabled.
    + Skip mdb_stat test when the command is not available.
    + Windows: update SHA2 timestamp server.
    + hdb: add missing export
    hdb_generate_key_set_password_with_ks_tuple.
    + Fix signature of hdb_generate_key_set_password().
    + Windows: enable KX509 support in the KDC.
    + kdc: fix kx509 service principal match.
    + iprop: handle case where master sends nothing new.
    + ipropd-slave: fix incorrect error codes.
    + Allow choice of sqlite for HDB pref.
    + check-iprop: don't fail to kill daemons.
    + roken: pidfile -&gt; rk_pidfile.
    + kdc: _kdc_do_kx509 fix use after free error.
    + Do not detect x32 as 64-bit platform.
    + No sys/ttydefaults.h on CYGWIN.
    + Fix check-iprop races.
    + roken_detach_prep() close pipe.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1501761600">- Update to version 7.4.0
  - Security
  - Fix CVE-2017-11103: Orpheus' Lyre KDC-REP service name
    validation.
    This is a critical vulnerability.
    In _krb5_extract_ticket() the KDC-REP service name must be
    obtained from encrypted version stored in 'enc_part' instead
    of the unencrypted version stored in 'ticket'.
    Use of the unecrypted version provides an opportunity for
    successful server impersonation and other attacks.
    Identified by Jeffrey Altman, Viktor Duchovni and
    Nico Williams.
    See https://www.orpheus-lyre.info/ for more details.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1512648000">- Added Avoid_NULL_structure_pointer_member_dereference.patch,
  fixes (bsc#1071675).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1514548800">- Update to version 7.5.0
  - Security
  - Fix CVE-2017-17439, which is a remote denial of service
    vulnerability:
    In Heimdal 7.1 through 7.4, remote unauthenticated attackers
    are able to crash the KDC by sending a crafted UDP packet
    containing empty data fields for client name or realm.
  - Bug fixes
  - Handle long input lines when reloading database dumps.
  - In pre-forked mode (default on Unix), correctly clear the
    process ids of exited children, allowing new child processes
    to replace the old.
  - Fixed incorrect KDC response when no-cross realm TGT exists,
    allowing client requests to fail quickly rather than time
    out after trying to get a correct answer from each KDC.
- Fixed heimdal-patched.diff.
- Removed Avoid_NULL_structure_pointer_member_dereference.patch,
  fixed upstream.</changelog>
  <changelog author="bwiedemann@suse.com" date="1533643200">- Add reproducible.patch to override build date (boo#1047218)
- Use constant hostname (boo#1084909)</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1561291200">- Update to version 7.7.0
  + Bug fixes:
  - PKCS#11 hcrypto back-end:
    + initialize the p11_module_load function list
    + verify that not only is a mechanism present but that its
    mechanism info states that it offers the required
    encryption, decryption or digest services
  - krb5:
    + Starting with 7.6, Heimdal permitted requesting
    authenticated anonymous tickets. However, it did not
    verify that a KDC in fact returned an anonymous ticket
    when one was requested.
    + Cease setting the KDCOption reaquest_anonymous flag when
    issuing S4UProxy (constrained delegation) TGS requests.
    + when the Win2K PKINIT compatibility option is set, do not
    require krbtgt otherName to match when validating KDC
    certificate.
    + set PKINIT_BTMM flag per Apple implementation
    + use memset_s() instead of memset()
  - kdc:
    + When generating KRB5SignedPath in the AS, use the reply
    client name rather than the one from the request, so
    validation will work correctly in the TGS.
    + allow checksum of PA-FOR-USER to be HMAC_MD5. Even if TGT
    used an enctype with a different checksum. Per [MS-SFU]
    2.2.1 PA-FOR-USER the checksum is always HMAC_MD5, and
    that's what Windows and MIT clients send.
    In Heimdal both the client and kdc use instead the
    checksum of the TGT, and therefore work with each other
    but Windows and MIT clients fail against Heimdal KDC.
    Both Windows and MIT KDC would allow any keyed checksum
    to be used so Heimdal client work fine against it.
    Change Heimdal KDC to allow HMAC_MD5 even for non RC4
    based TGT in order to support per-spec clients.
    + use memset_s() instead of memset()
    + Detect Heimdal 1.0 through 7.6 clients that issue
    S4UProxy (constrained delegation) TGS Requests with the
    request anonymous flag set. These requests will be
    treated as S4UProxy requests and not anonymous requests.
  - HDB:
    + Set SQLite3 backend default page size to 8KB.
    + Add hdb_set_sync() method
  - kadmind:
    + disable HDB sync during database load avoiding
    unnecessary disk i/o.
  - ipropd:
    + disable HDB sync during receive_everything. Doing an
    fsync per-record when receiving the complete HDB is a
    performance disaster. Among other things, if the HDB is
    very large, then one slave receving a full HDB can cause
    other slaves to timeout and, if HDB write activity is
    high enough to cause iprop log truncation, then also need
    full syncs, which leads to a cycle of full syncs for all
    slaves until HDB write activity drops.
    Allowing the iprop log to be larger helps, but improving
    receive_everything() performance helps even more.
  - kinit:
    + Anonymous PKINIT tickets discard the realm information
    used to locate the issuing AS. Store the issuing realm in
    the credentials cache in order to locate a KDC which can
    renew them.
    + Do not leak the result of krb5_cc_get_config() when
    determining anonymous PKINIT start realm.
  - klist:
    + Show transited-policy-checked, ok-as-delegate and
    anonymous flags when listing credentials.
  - tests:
    + Regenerate certs so that they expire before the 2038
    armageddon so the test suite will pass on 32-bit
    operating systems until the underlying issues can be
    resolved.
  - Solaris:
    + Define _STDC_C11_BCI for memset_s prototype
  - build tooling:
    + Convert from python 2 to python 3
  - documentation:
    + rename verify-password to verify-password-quality
    + hprop default mode is encrypt
    + kadmind "all" permission does not include "get-keys"
    + verify-password-quality might not be stateless
- Version 7.6.0
  + Security (#555):
  - CVE-2018-16860 Heimdal KDC: Reject PA-S4U2Self with unkeyed
    checksum
    When the Heimdal KDC checks the checksum that is placed on
    the S4U2Self packet by the server to protect the requested
    principal against modification, it does not confirm that
    the checksum algorithm that protects the user name
    (principal) in the request is keyed. This allows a
    man-in-the-middle attacker who can intercept the request to
    the KDC to modify the packet by replacing the user name
    (principal) in the request with any desired user name
    (principal) that exists in the KDC and replace the checksum
    protecting that name with a CRC32 checksum (which requires
    no prior knowledge to compute).
    This would allow a S4U2Self ticket requested on behalf of
    user name (principal) user@EXAMPLE.COM to any service to be
    changed to a S4U2Self ticket with a user name (principal) of
    Administrator@EXAMPLE.COM. This ticket would then contain
    the PAC of the modified user name (principal).
  - CVE-2019-12098, client-only:
    RFC8062 Section 7 requires verification of the PA-PKINIT-KX
    key exchange when anonymous PKINIT is used. Failure to do
    so can permit an active attacker to become a
    man-in-the-middle.
  + Bug fixes:
  - Happy eyeballs: Don't wait for responses from
    known-unreachable KDCs.
  - kdc:
    + check return copy_Realm, copy_PrincipalName,
    copy_EncryptionKey
  - kinit:
    + cleanup temporary ccaches
    + see man page for "kinit --anonymous" command line syntax
    change
  - kdc:
    + Make anonymous AS-requests more RFC8062-compliant.
    Updated expired test certificates
  - Solaris:
    + PKCS#11 hcrypto backend broken since 7.0.1
    + Building with Sun Pro C
  + Features:
  - kuser: support authenticated anonymous AS-REQs in kinit
  - kdc: support for anonymous TGS-REQs
  - kgetcred support for anonymous service tickets
  - Support builds with OpenSSL 1.1.1
- fixed heimdal-patched.diff and reproducible.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1653480000">- Apply Shared Library Packaging Policy and resolve rpmlint
  errors like "libheimdal.x86_64: E: shlib-policy-name-error
  SONAME: libasn1.so.8, expected package suffix: 8"</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656417600">- Add heimdal-7.7.0-autoconf-2.70.patch: Fix build with autoconf
  2.70 (gh#heimdal/heimdal#856).</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656590400">- Add ldconfig scriptlets.
- Fix 'Conflicts:' tags.
- Remove obsolete macros and conditionals.
- Ran spec-cleaner.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1671624000">- Update to version 7.8.0
  + This release includes both the Heimdal 7.7.1 Security
    Vulnerability fixes and non-Security bug fixes/improvements.
  + Security Vulnerabilities:
  - CVE-2022-42898 PAC parse integer overflows
  - CVE-2022-3437 Overflows and non-constant time leaks in
    DES{,3} and arcfour
  - CVE-2022-41916 Fix Unicode normalization read of 1 bytes past
    end of array
  - CVE-2021-44758 A null pointer de-reference DoS in SPNEGO
    acceptors
  - CVE-2021-3671 A null pointer de-reference when handling
    missing sname in TGS-REQ
  - CVE-2022-44640 Heimdal KDC: invalid free in ASN.1 codec
    Note that CVE-2022-44640 is a severe vulnerability,
    possibly a 10.0 on the Common Vulnerability Scoring
    System (CVSS) v3, as we believe it should be possible to
    get an RCE on a KDC, which means that credentials can be
    compromised that can be used to impersonate anyone in a
    realm or forest of realms.
    Heimdal's ASN.1 compiler generates code that allows
    specially crafted DER encodings of CHOICEs to invoke the
    wrong free function on the decoded structure upon decode
    error. This is known to impact the Heimdal KDC, leading to
    an invalid free() of an address partly or wholly under the
    control of the attacker, in turn leading to a potential
    remote code execution (RCE) vulnerability.
    This error affects the DER codec for all extensible CHOICE
    types used in Heimdal, though not all cases will be
    exploitable. We have not completed a thorough analysis of
    all the Heimdal components affected, thus the Kerberos
    client, the X.509 library, and other parts, may be affected
    as well.
    This bug has been in Heimdal's ASN.1 compiler since 2005,
    but it may only affect Heimdal 1.6 and up. It was first
    reported by Douglas Bagnall, though it had been found
    independently by the Heimdal maintainers via fuzzing a few
    weeks earlier.
    While no zero-day exploit is known, such an exploit will
    likely be available soon after public disclosure.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  + Other changes:
  - Bugs found by UBSAN (including the incorrect encoding of
    unconstrained INTEGER value -1).
  - Errors found by the LLVM scan-build static analyzer.
  - Errors found by the valgrind memory debugger.
  - Work around GCC Bug 95189 (memcmp wrongly stripped like
    strcmp).
  - Correct ASN.1 OID typo for SHA-384
  - Fix a deadlock in in the MEMORY ccache type.
  - TGS: strip forwardable and proxiable flags if the server is
    disallowed.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  - Incremental HDB propagation improvements
    Refactor send_diffs making it progressive
    Handle partial writes on non-blocking sockets
    Disable Nagle in iprop master and slave
    Use async I/O
    Don't send I_HAVE in response to AYT
    Do not recover log in kadm5_get_principal()
    Don't send diffs to slaves with not yet known version
    Don't stutter in send_diffs
  - Optional backwards-compatible anon-pkinit behavior
- Removed heimdal-7.7.0-autoconf-2.70.patch, fixed upstream.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1673352000">- replace libheimdal conflicts by obsoletes / provides to provide a
  smooth update in the new libheimdal-devel.</changelog>
</package>
<package pkgid="3031d0a752bc90251752a74c83fbded7c2490783cf286e599facc341beb67ea1" name="libheimntlm0" arch="s390x">
  <version epoch="0" ver="7.8.0" rel="bp154.2.4.1"/>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1440936000">- Initial package, version 1.6rc2
- Added patch heimdal-version-script-client.map.patch to add file
  version-script-client.map (File is present in git for tag 1.6rc2
  but missing in tarball).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441108800">- Some changes in spec file to enable build for SLES.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441195200">- Added Conflicts tags to spec file because devel package conflicts
  with krb5-devel and krb5-mini-devel.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441454400">- Added a patched instead of the original tarball because only
  shared libraries will be build and source files of these (not to
  be build) programs have problematic licenses.
- Added script heimdal-patch-source.sh to sources.
- Added patch heimdal-patched.diff that fixes configure.ac and
  several Makefile.am files to successfully build patched source.
- Removed unneeded dependencies in spec file for build.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1483790400">- Update to version 7.1.0
- Removed heimdal-version-script-client.map.patch, fixed upstream.
- Fixed heimdal-patched.diff.
- Unfortunately there is no updated changelog file in tarball,
  changes can be seen in source code version control systems
  history log.</changelog>
  <changelog author="jengelh@inai.de" date="1486036800">- Summary and RPM group update. Do a direct call to ldconfig
  where possible.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1497528000">- Update to version 7.3.0
  - Security
    + Fix transit path validation. Commit f469fc6 (2010-10-02)
    inadvertently caused the previous hop realm to not be added
    to the transit path of issued tickets. This may, in some
    cases, enable bypass of capath policy in Heimdal versions 1.5
    through 7.2.
    Note, this may break sites that rely on the bug. With the bug
    some incomplete [capaths] worked, that should not have.
    These may now break authentication in some cross-realm
    configurations. (CVE-2017-6594)
- Version 7.2.0
  - Bug fixes
    + Portability improvements.
    + More strict parsing of encoded URI components in HTTP KDC.
    + Fixed memory leak in malloc error recovery in NTLM GSSAPI
    mechanism.
    + Avoid overly specific CPU info in krb5-config in aid of
    reproducible builds.
    + Don't do AFS string-to-key tests when feature is disabled.
    + Skip mdb_stat test when the command is not available.
    + Windows: update SHA2 timestamp server.
    + hdb: add missing export
    hdb_generate_key_set_password_with_ks_tuple.
    + Fix signature of hdb_generate_key_set_password().
    + Windows: enable KX509 support in the KDC.
    + kdc: fix kx509 service principal match.
    + iprop: handle case where master sends nothing new.
    + ipropd-slave: fix incorrect error codes.
    + Allow choice of sqlite for HDB pref.
    + check-iprop: don't fail to kill daemons.
    + roken: pidfile -&gt; rk_pidfile.
    + kdc: _kdc_do_kx509 fix use after free error.
    + Do not detect x32 as 64-bit platform.
    + No sys/ttydefaults.h on CYGWIN.
    + Fix check-iprop races.
    + roken_detach_prep() close pipe.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1501761600">- Update to version 7.4.0
  - Security
  - Fix CVE-2017-11103: Orpheus' Lyre KDC-REP service name
    validation.
    This is a critical vulnerability.
    In _krb5_extract_ticket() the KDC-REP service name must be
    obtained from encrypted version stored in 'enc_part' instead
    of the unencrypted version stored in 'ticket'.
    Use of the unecrypted version provides an opportunity for
    successful server impersonation and other attacks.
    Identified by Jeffrey Altman, Viktor Duchovni and
    Nico Williams.
    See https://www.orpheus-lyre.info/ for more details.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1512648000">- Added Avoid_NULL_structure_pointer_member_dereference.patch,
  fixes (bsc#1071675).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1514548800">- Update to version 7.5.0
  - Security
  - Fix CVE-2017-17439, which is a remote denial of service
    vulnerability:
    In Heimdal 7.1 through 7.4, remote unauthenticated attackers
    are able to crash the KDC by sending a crafted UDP packet
    containing empty data fields for client name or realm.
  - Bug fixes
  - Handle long input lines when reloading database dumps.
  - In pre-forked mode (default on Unix), correctly clear the
    process ids of exited children, allowing new child processes
    to replace the old.
  - Fixed incorrect KDC response when no-cross realm TGT exists,
    allowing client requests to fail quickly rather than time
    out after trying to get a correct answer from each KDC.
- Fixed heimdal-patched.diff.
- Removed Avoid_NULL_structure_pointer_member_dereference.patch,
  fixed upstream.</changelog>
  <changelog author="bwiedemann@suse.com" date="1533643200">- Add reproducible.patch to override build date (boo#1047218)
- Use constant hostname (boo#1084909)</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1561291200">- Update to version 7.7.0
  + Bug fixes:
  - PKCS#11 hcrypto back-end:
    + initialize the p11_module_load function list
    + verify that not only is a mechanism present but that its
    mechanism info states that it offers the required
    encryption, decryption or digest services
  - krb5:
    + Starting with 7.6, Heimdal permitted requesting
    authenticated anonymous tickets. However, it did not
    verify that a KDC in fact returned an anonymous ticket
    when one was requested.
    + Cease setting the KDCOption reaquest_anonymous flag when
    issuing S4UProxy (constrained delegation) TGS requests.
    + when the Win2K PKINIT compatibility option is set, do not
    require krbtgt otherName to match when validating KDC
    certificate.
    + set PKINIT_BTMM flag per Apple implementation
    + use memset_s() instead of memset()
  - kdc:
    + When generating KRB5SignedPath in the AS, use the reply
    client name rather than the one from the request, so
    validation will work correctly in the TGS.
    + allow checksum of PA-FOR-USER to be HMAC_MD5. Even if TGT
    used an enctype with a different checksum. Per [MS-SFU]
    2.2.1 PA-FOR-USER the checksum is always HMAC_MD5, and
    that's what Windows and MIT clients send.
    In Heimdal both the client and kdc use instead the
    checksum of the TGT, and therefore work with each other
    but Windows and MIT clients fail against Heimdal KDC.
    Both Windows and MIT KDC would allow any keyed checksum
    to be used so Heimdal client work fine against it.
    Change Heimdal KDC to allow HMAC_MD5 even for non RC4
    based TGT in order to support per-spec clients.
    + use memset_s() instead of memset()
    + Detect Heimdal 1.0 through 7.6 clients that issue
    S4UProxy (constrained delegation) TGS Requests with the
    request anonymous flag set. These requests will be
    treated as S4UProxy requests and not anonymous requests.
  - HDB:
    + Set SQLite3 backend default page size to 8KB.
    + Add hdb_set_sync() method
  - kadmind:
    + disable HDB sync during database load avoiding
    unnecessary disk i/o.
  - ipropd:
    + disable HDB sync during receive_everything. Doing an
    fsync per-record when receiving the complete HDB is a
    performance disaster. Among other things, if the HDB is
    very large, then one slave receving a full HDB can cause
    other slaves to timeout and, if HDB write activity is
    high enough to cause iprop log truncation, then also need
    full syncs, which leads to a cycle of full syncs for all
    slaves until HDB write activity drops.
    Allowing the iprop log to be larger helps, but improving
    receive_everything() performance helps even more.
  - kinit:
    + Anonymous PKINIT tickets discard the realm information
    used to locate the issuing AS. Store the issuing realm in
    the credentials cache in order to locate a KDC which can
    renew them.
    + Do not leak the result of krb5_cc_get_config() when
    determining anonymous PKINIT start realm.
  - klist:
    + Show transited-policy-checked, ok-as-delegate and
    anonymous flags when listing credentials.
  - tests:
    + Regenerate certs so that they expire before the 2038
    armageddon so the test suite will pass on 32-bit
    operating systems until the underlying issues can be
    resolved.
  - Solaris:
    + Define _STDC_C11_BCI for memset_s prototype
  - build tooling:
    + Convert from python 2 to python 3
  - documentation:
    + rename verify-password to verify-password-quality
    + hprop default mode is encrypt
    + kadmind "all" permission does not include "get-keys"
    + verify-password-quality might not be stateless
- Version 7.6.0
  + Security (#555):
  - CVE-2018-16860 Heimdal KDC: Reject PA-S4U2Self with unkeyed
    checksum
    When the Heimdal KDC checks the checksum that is placed on
    the S4U2Self packet by the server to protect the requested
    principal against modification, it does not confirm that
    the checksum algorithm that protects the user name
    (principal) in the request is keyed. This allows a
    man-in-the-middle attacker who can intercept the request to
    the KDC to modify the packet by replacing the user name
    (principal) in the request with any desired user name
    (principal) that exists in the KDC and replace the checksum
    protecting that name with a CRC32 checksum (which requires
    no prior knowledge to compute).
    This would allow a S4U2Self ticket requested on behalf of
    user name (principal) user@EXAMPLE.COM to any service to be
    changed to a S4U2Self ticket with a user name (principal) of
    Administrator@EXAMPLE.COM. This ticket would then contain
    the PAC of the modified user name (principal).
  - CVE-2019-12098, client-only:
    RFC8062 Section 7 requires verification of the PA-PKINIT-KX
    key exchange when anonymous PKINIT is used. Failure to do
    so can permit an active attacker to become a
    man-in-the-middle.
  + Bug fixes:
  - Happy eyeballs: Don't wait for responses from
    known-unreachable KDCs.
  - kdc:
    + check return copy_Realm, copy_PrincipalName,
    copy_EncryptionKey
  - kinit:
    + cleanup temporary ccaches
    + see man page for "kinit --anonymous" command line syntax
    change
  - kdc:
    + Make anonymous AS-requests more RFC8062-compliant.
    Updated expired test certificates
  - Solaris:
    + PKCS#11 hcrypto backend broken since 7.0.1
    + Building with Sun Pro C
  + Features:
  - kuser: support authenticated anonymous AS-REQs in kinit
  - kdc: support for anonymous TGS-REQs
  - kgetcred support for anonymous service tickets
  - Support builds with OpenSSL 1.1.1
- fixed heimdal-patched.diff and reproducible.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1653480000">- Apply Shared Library Packaging Policy and resolve rpmlint
  errors like "libheimdal.x86_64: E: shlib-policy-name-error
  SONAME: libasn1.so.8, expected package suffix: 8"</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656417600">- Add heimdal-7.7.0-autoconf-2.70.patch: Fix build with autoconf
  2.70 (gh#heimdal/heimdal#856).</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656590400">- Add ldconfig scriptlets.
- Fix 'Conflicts:' tags.
- Remove obsolete macros and conditionals.
- Ran spec-cleaner.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1671624000">- Update to version 7.8.0
  + This release includes both the Heimdal 7.7.1 Security
    Vulnerability fixes and non-Security bug fixes/improvements.
  + Security Vulnerabilities:
  - CVE-2022-42898 PAC parse integer overflows
  - CVE-2022-3437 Overflows and non-constant time leaks in
    DES{,3} and arcfour
  - CVE-2022-41916 Fix Unicode normalization read of 1 bytes past
    end of array
  - CVE-2021-44758 A null pointer de-reference DoS in SPNEGO
    acceptors
  - CVE-2021-3671 A null pointer de-reference when handling
    missing sname in TGS-REQ
  - CVE-2022-44640 Heimdal KDC: invalid free in ASN.1 codec
    Note that CVE-2022-44640 is a severe vulnerability,
    possibly a 10.0 on the Common Vulnerability Scoring
    System (CVSS) v3, as we believe it should be possible to
    get an RCE on a KDC, which means that credentials can be
    compromised that can be used to impersonate anyone in a
    realm or forest of realms.
    Heimdal's ASN.1 compiler generates code that allows
    specially crafted DER encodings of CHOICEs to invoke the
    wrong free function on the decoded structure upon decode
    error. This is known to impact the Heimdal KDC, leading to
    an invalid free() of an address partly or wholly under the
    control of the attacker, in turn leading to a potential
    remote code execution (RCE) vulnerability.
    This error affects the DER codec for all extensible CHOICE
    types used in Heimdal, though not all cases will be
    exploitable. We have not completed a thorough analysis of
    all the Heimdal components affected, thus the Kerberos
    client, the X.509 library, and other parts, may be affected
    as well.
    This bug has been in Heimdal's ASN.1 compiler since 2005,
    but it may only affect Heimdal 1.6 and up. It was first
    reported by Douglas Bagnall, though it had been found
    independently by the Heimdal maintainers via fuzzing a few
    weeks earlier.
    While no zero-day exploit is known, such an exploit will
    likely be available soon after public disclosure.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  + Other changes:
  - Bugs found by UBSAN (including the incorrect encoding of
    unconstrained INTEGER value -1).
  - Errors found by the LLVM scan-build static analyzer.
  - Errors found by the valgrind memory debugger.
  - Work around GCC Bug 95189 (memcmp wrongly stripped like
    strcmp).
  - Correct ASN.1 OID typo for SHA-384
  - Fix a deadlock in in the MEMORY ccache type.
  - TGS: strip forwardable and proxiable flags if the server is
    disallowed.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  - Incremental HDB propagation improvements
    Refactor send_diffs making it progressive
    Handle partial writes on non-blocking sockets
    Disable Nagle in iprop master and slave
    Use async I/O
    Don't send I_HAVE in response to AYT
    Do not recover log in kadm5_get_principal()
    Don't send diffs to slaves with not yet known version
    Don't stutter in send_diffs
  - Optional backwards-compatible anon-pkinit behavior
- Removed heimdal-7.7.0-autoconf-2.70.patch, fixed upstream.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1673352000">- replace libheimdal conflicts by obsoletes / provides to provide a
  smooth update in the new libheimdal-devel.</changelog>
</package>
<package pkgid="2db80f8c05bf9a0f75e7851ae338aad1e27ada8269bc125f5586834b6abda95b" name="libheimntlm0" arch="x86_64">
  <version epoch="0" ver="7.8.0" rel="bp154.2.4.1"/>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1440936000">- Initial package, version 1.6rc2
- Added patch heimdal-version-script-client.map.patch to add file
  version-script-client.map (File is present in git for tag 1.6rc2
  but missing in tarball).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441108800">- Some changes in spec file to enable build for SLES.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441195200">- Added Conflicts tags to spec file because devel package conflicts
  with krb5-devel and krb5-mini-devel.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441454400">- Added a patched instead of the original tarball because only
  shared libraries will be build and source files of these (not to
  be build) programs have problematic licenses.
- Added script heimdal-patch-source.sh to sources.
- Added patch heimdal-patched.diff that fixes configure.ac and
  several Makefile.am files to successfully build patched source.
- Removed unneeded dependencies in spec file for build.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1483790400">- Update to version 7.1.0
- Removed heimdal-version-script-client.map.patch, fixed upstream.
- Fixed heimdal-patched.diff.
- Unfortunately there is no updated changelog file in tarball,
  changes can be seen in source code version control systems
  history log.</changelog>
  <changelog author="jengelh@inai.de" date="1486036800">- Summary and RPM group update. Do a direct call to ldconfig
  where possible.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1497528000">- Update to version 7.3.0
  - Security
    + Fix transit path validation. Commit f469fc6 (2010-10-02)
    inadvertently caused the previous hop realm to not be added
    to the transit path of issued tickets. This may, in some
    cases, enable bypass of capath policy in Heimdal versions 1.5
    through 7.2.
    Note, this may break sites that rely on the bug. With the bug
    some incomplete [capaths] worked, that should not have.
    These may now break authentication in some cross-realm
    configurations. (CVE-2017-6594)
- Version 7.2.0
  - Bug fixes
    + Portability improvements.
    + More strict parsing of encoded URI components in HTTP KDC.
    + Fixed memory leak in malloc error recovery in NTLM GSSAPI
    mechanism.
    + Avoid overly specific CPU info in krb5-config in aid of
    reproducible builds.
    + Don't do AFS string-to-key tests when feature is disabled.
    + Skip mdb_stat test when the command is not available.
    + Windows: update SHA2 timestamp server.
    + hdb: add missing export
    hdb_generate_key_set_password_with_ks_tuple.
    + Fix signature of hdb_generate_key_set_password().
    + Windows: enable KX509 support in the KDC.
    + kdc: fix kx509 service principal match.
    + iprop: handle case where master sends nothing new.
    + ipropd-slave: fix incorrect error codes.
    + Allow choice of sqlite for HDB pref.
    + check-iprop: don't fail to kill daemons.
    + roken: pidfile -&gt; rk_pidfile.
    + kdc: _kdc_do_kx509 fix use after free error.
    + Do not detect x32 as 64-bit platform.
    + No sys/ttydefaults.h on CYGWIN.
    + Fix check-iprop races.
    + roken_detach_prep() close pipe.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1501761600">- Update to version 7.4.0
  - Security
  - Fix CVE-2017-11103: Orpheus' Lyre KDC-REP service name
    validation.
    This is a critical vulnerability.
    In _krb5_extract_ticket() the KDC-REP service name must be
    obtained from encrypted version stored in 'enc_part' instead
    of the unencrypted version stored in 'ticket'.
    Use of the unecrypted version provides an opportunity for
    successful server impersonation and other attacks.
    Identified by Jeffrey Altman, Viktor Duchovni and
    Nico Williams.
    See https://www.orpheus-lyre.info/ for more details.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1512648000">- Added Avoid_NULL_structure_pointer_member_dereference.patch,
  fixes (bsc#1071675).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1514548800">- Update to version 7.5.0
  - Security
  - Fix CVE-2017-17439, which is a remote denial of service
    vulnerability:
    In Heimdal 7.1 through 7.4, remote unauthenticated attackers
    are able to crash the KDC by sending a crafted UDP packet
    containing empty data fields for client name or realm.
  - Bug fixes
  - Handle long input lines when reloading database dumps.
  - In pre-forked mode (default on Unix), correctly clear the
    process ids of exited children, allowing new child processes
    to replace the old.
  - Fixed incorrect KDC response when no-cross realm TGT exists,
    allowing client requests to fail quickly rather than time
    out after trying to get a correct answer from each KDC.
- Fixed heimdal-patched.diff.
- Removed Avoid_NULL_structure_pointer_member_dereference.patch,
  fixed upstream.</changelog>
  <changelog author="bwiedemann@suse.com" date="1533643200">- Add reproducible.patch to override build date (boo#1047218)
- Use constant hostname (boo#1084909)</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1561291200">- Update to version 7.7.0
  + Bug fixes:
  - PKCS#11 hcrypto back-end:
    + initialize the p11_module_load function list
    + verify that not only is a mechanism present but that its
    mechanism info states that it offers the required
    encryption, decryption or digest services
  - krb5:
    + Starting with 7.6, Heimdal permitted requesting
    authenticated anonymous tickets. However, it did not
    verify that a KDC in fact returned an anonymous ticket
    when one was requested.
    + Cease setting the KDCOption reaquest_anonymous flag when
    issuing S4UProxy (constrained delegation) TGS requests.
    + when the Win2K PKINIT compatibility option is set, do not
    require krbtgt otherName to match when validating KDC
    certificate.
    + set PKINIT_BTMM flag per Apple implementation
    + use memset_s() instead of memset()
  - kdc:
    + When generating KRB5SignedPath in the AS, use the reply
    client name rather than the one from the request, so
    validation will work correctly in the TGS.
    + allow checksum of PA-FOR-USER to be HMAC_MD5. Even if TGT
    used an enctype with a different checksum. Per [MS-SFU]
    2.2.1 PA-FOR-USER the checksum is always HMAC_MD5, and
    that's what Windows and MIT clients send.
    In Heimdal both the client and kdc use instead the
    checksum of the TGT, and therefore work with each other
    but Windows and MIT clients fail against Heimdal KDC.
    Both Windows and MIT KDC would allow any keyed checksum
    to be used so Heimdal client work fine against it.
    Change Heimdal KDC to allow HMAC_MD5 even for non RC4
    based TGT in order to support per-spec clients.
    + use memset_s() instead of memset()
    + Detect Heimdal 1.0 through 7.6 clients that issue
    S4UProxy (constrained delegation) TGS Requests with the
    request anonymous flag set. These requests will be
    treated as S4UProxy requests and not anonymous requests.
  - HDB:
    + Set SQLite3 backend default page size to 8KB.
    + Add hdb_set_sync() method
  - kadmind:
    + disable HDB sync during database load avoiding
    unnecessary disk i/o.
  - ipropd:
    + disable HDB sync during receive_everything. Doing an
    fsync per-record when receiving the complete HDB is a
    performance disaster. Among other things, if the HDB is
    very large, then one slave receving a full HDB can cause
    other slaves to timeout and, if HDB write activity is
    high enough to cause iprop log truncation, then also need
    full syncs, which leads to a cycle of full syncs for all
    slaves until HDB write activity drops.
    Allowing the iprop log to be larger helps, but improving
    receive_everything() performance helps even more.
  - kinit:
    + Anonymous PKINIT tickets discard the realm information
    used to locate the issuing AS. Store the issuing realm in
    the credentials cache in order to locate a KDC which can
    renew them.
    + Do not leak the result of krb5_cc_get_config() when
    determining anonymous PKINIT start realm.
  - klist:
    + Show transited-policy-checked, ok-as-delegate and
    anonymous flags when listing credentials.
  - tests:
    + Regenerate certs so that they expire before the 2038
    armageddon so the test suite will pass on 32-bit
    operating systems until the underlying issues can be
    resolved.
  - Solaris:
    + Define _STDC_C11_BCI for memset_s prototype
  - build tooling:
    + Convert from python 2 to python 3
  - documentation:
    + rename verify-password to verify-password-quality
    + hprop default mode is encrypt
    + kadmind "all" permission does not include "get-keys"
    + verify-password-quality might not be stateless
- Version 7.6.0
  + Security (#555):
  - CVE-2018-16860 Heimdal KDC: Reject PA-S4U2Self with unkeyed
    checksum
    When the Heimdal KDC checks the checksum that is placed on
    the S4U2Self packet by the server to protect the requested
    principal against modification, it does not confirm that
    the checksum algorithm that protects the user name
    (principal) in the request is keyed. This allows a
    man-in-the-middle attacker who can intercept the request to
    the KDC to modify the packet by replacing the user name
    (principal) in the request with any desired user name
    (principal) that exists in the KDC and replace the checksum
    protecting that name with a CRC32 checksum (which requires
    no prior knowledge to compute).
    This would allow a S4U2Self ticket requested on behalf of
    user name (principal) user@EXAMPLE.COM to any service to be
    changed to a S4U2Self ticket with a user name (principal) of
    Administrator@EXAMPLE.COM. This ticket would then contain
    the PAC of the modified user name (principal).
  - CVE-2019-12098, client-only:
    RFC8062 Section 7 requires verification of the PA-PKINIT-KX
    key exchange when anonymous PKINIT is used. Failure to do
    so can permit an active attacker to become a
    man-in-the-middle.
  + Bug fixes:
  - Happy eyeballs: Don't wait for responses from
    known-unreachable KDCs.
  - kdc:
    + check return copy_Realm, copy_PrincipalName,
    copy_EncryptionKey
  - kinit:
    + cleanup temporary ccaches
    + see man page for "kinit --anonymous" command line syntax
    change
  - kdc:
    + Make anonymous AS-requests more RFC8062-compliant.
    Updated expired test certificates
  - Solaris:
    + PKCS#11 hcrypto backend broken since 7.0.1
    + Building with Sun Pro C
  + Features:
  - kuser: support authenticated anonymous AS-REQs in kinit
  - kdc: support for anonymous TGS-REQs
  - kgetcred support for anonymous service tickets
  - Support builds with OpenSSL 1.1.1
- fixed heimdal-patched.diff and reproducible.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1653480000">- Apply Shared Library Packaging Policy and resolve rpmlint
  errors like "libheimdal.x86_64: E: shlib-policy-name-error
  SONAME: libasn1.so.8, expected package suffix: 8"</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656417600">- Add heimdal-7.7.0-autoconf-2.70.patch: Fix build with autoconf
  2.70 (gh#heimdal/heimdal#856).</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656590400">- Add ldconfig scriptlets.
- Fix 'Conflicts:' tags.
- Remove obsolete macros and conditionals.
- Ran spec-cleaner.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1671624000">- Update to version 7.8.0
  + This release includes both the Heimdal 7.7.1 Security
    Vulnerability fixes and non-Security bug fixes/improvements.
  + Security Vulnerabilities:
  - CVE-2022-42898 PAC parse integer overflows
  - CVE-2022-3437 Overflows and non-constant time leaks in
    DES{,3} and arcfour
  - CVE-2022-41916 Fix Unicode normalization read of 1 bytes past
    end of array
  - CVE-2021-44758 A null pointer de-reference DoS in SPNEGO
    acceptors
  - CVE-2021-3671 A null pointer de-reference when handling
    missing sname in TGS-REQ
  - CVE-2022-44640 Heimdal KDC: invalid free in ASN.1 codec
    Note that CVE-2022-44640 is a severe vulnerability,
    possibly a 10.0 on the Common Vulnerability Scoring
    System (CVSS) v3, as we believe it should be possible to
    get an RCE on a KDC, which means that credentials can be
    compromised that can be used to impersonate anyone in a
    realm or forest of realms.
    Heimdal's ASN.1 compiler generates code that allows
    specially crafted DER encodings of CHOICEs to invoke the
    wrong free function on the decoded structure upon decode
    error. This is known to impact the Heimdal KDC, leading to
    an invalid free() of an address partly or wholly under the
    control of the attacker, in turn leading to a potential
    remote code execution (RCE) vulnerability.
    This error affects the DER codec for all extensible CHOICE
    types used in Heimdal, though not all cases will be
    exploitable. We have not completed a thorough analysis of
    all the Heimdal components affected, thus the Kerberos
    client, the X.509 library, and other parts, may be affected
    as well.
    This bug has been in Heimdal's ASN.1 compiler since 2005,
    but it may only affect Heimdal 1.6 and up. It was first
    reported by Douglas Bagnall, though it had been found
    independently by the Heimdal maintainers via fuzzing a few
    weeks earlier.
    While no zero-day exploit is known, such an exploit will
    likely be available soon after public disclosure.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  + Other changes:
  - Bugs found by UBSAN (including the incorrect encoding of
    unconstrained INTEGER value -1).
  - Errors found by the LLVM scan-build static analyzer.
  - Errors found by the valgrind memory debugger.
  - Work around GCC Bug 95189 (memcmp wrongly stripped like
    strcmp).
  - Correct ASN.1 OID typo for SHA-384
  - Fix a deadlock in in the MEMORY ccache type.
  - TGS: strip forwardable and proxiable flags if the server is
    disallowed.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  - Incremental HDB propagation improvements
    Refactor send_diffs making it progressive
    Handle partial writes on non-blocking sockets
    Disable Nagle in iprop master and slave
    Use async I/O
    Don't send I_HAVE in response to AYT
    Do not recover log in kadm5_get_principal()
    Don't send diffs to slaves with not yet known version
    Don't stutter in send_diffs
  - Optional backwards-compatible anon-pkinit behavior
- Removed heimdal-7.7.0-autoconf-2.70.patch, fixed upstream.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1673352000">- replace libheimdal conflicts by obsoletes / provides to provide a
  smooth update in the new libheimdal-devel.</changelog>
</package>
<package pkgid="12ee0ac6b298980a5b549745cd914853926d9fffd322574b0b4ba40b2cd50e85" name="libhx509-5" arch="aarch64">
  <version epoch="0" ver="7.8.0" rel="bp154.2.4.1"/>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1440936000">- Initial package, version 1.6rc2
- Added patch heimdal-version-script-client.map.patch to add file
  version-script-client.map (File is present in git for tag 1.6rc2
  but missing in tarball).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441108800">- Some changes in spec file to enable build for SLES.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441195200">- Added Conflicts tags to spec file because devel package conflicts
  with krb5-devel and krb5-mini-devel.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441454400">- Added a patched instead of the original tarball because only
  shared libraries will be build and source files of these (not to
  be build) programs have problematic licenses.
- Added script heimdal-patch-source.sh to sources.
- Added patch heimdal-patched.diff that fixes configure.ac and
  several Makefile.am files to successfully build patched source.
- Removed unneeded dependencies in spec file for build.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1483790400">- Update to version 7.1.0
- Removed heimdal-version-script-client.map.patch, fixed upstream.
- Fixed heimdal-patched.diff.
- Unfortunately there is no updated changelog file in tarball,
  changes can be seen in source code version control systems
  history log.</changelog>
  <changelog author="jengelh@inai.de" date="1486036800">- Summary and RPM group update. Do a direct call to ldconfig
  where possible.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1497528000">- Update to version 7.3.0
  - Security
    + Fix transit path validation. Commit f469fc6 (2010-10-02)
    inadvertently caused the previous hop realm to not be added
    to the transit path of issued tickets. This may, in some
    cases, enable bypass of capath policy in Heimdal versions 1.5
    through 7.2.
    Note, this may break sites that rely on the bug. With the bug
    some incomplete [capaths] worked, that should not have.
    These may now break authentication in some cross-realm
    configurations. (CVE-2017-6594)
- Version 7.2.0
  - Bug fixes
    + Portability improvements.
    + More strict parsing of encoded URI components in HTTP KDC.
    + Fixed memory leak in malloc error recovery in NTLM GSSAPI
    mechanism.
    + Avoid overly specific CPU info in krb5-config in aid of
    reproducible builds.
    + Don't do AFS string-to-key tests when feature is disabled.
    + Skip mdb_stat test when the command is not available.
    + Windows: update SHA2 timestamp server.
    + hdb: add missing export
    hdb_generate_key_set_password_with_ks_tuple.
    + Fix signature of hdb_generate_key_set_password().
    + Windows: enable KX509 support in the KDC.
    + kdc: fix kx509 service principal match.
    + iprop: handle case where master sends nothing new.
    + ipropd-slave: fix incorrect error codes.
    + Allow choice of sqlite for HDB pref.
    + check-iprop: don't fail to kill daemons.
    + roken: pidfile -&gt; rk_pidfile.
    + kdc: _kdc_do_kx509 fix use after free error.
    + Do not detect x32 as 64-bit platform.
    + No sys/ttydefaults.h on CYGWIN.
    + Fix check-iprop races.
    + roken_detach_prep() close pipe.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1501761600">- Update to version 7.4.0
  - Security
  - Fix CVE-2017-11103: Orpheus' Lyre KDC-REP service name
    validation.
    This is a critical vulnerability.
    In _krb5_extract_ticket() the KDC-REP service name must be
    obtained from encrypted version stored in 'enc_part' instead
    of the unencrypted version stored in 'ticket'.
    Use of the unecrypted version provides an opportunity for
    successful server impersonation and other attacks.
    Identified by Jeffrey Altman, Viktor Duchovni and
    Nico Williams.
    See https://www.orpheus-lyre.info/ for more details.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1512648000">- Added Avoid_NULL_structure_pointer_member_dereference.patch,
  fixes (bsc#1071675).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1514548800">- Update to version 7.5.0
  - Security
  - Fix CVE-2017-17439, which is a remote denial of service
    vulnerability:
    In Heimdal 7.1 through 7.4, remote unauthenticated attackers
    are able to crash the KDC by sending a crafted UDP packet
    containing empty data fields for client name or realm.
  - Bug fixes
  - Handle long input lines when reloading database dumps.
  - In pre-forked mode (default on Unix), correctly clear the
    process ids of exited children, allowing new child processes
    to replace the old.
  - Fixed incorrect KDC response when no-cross realm TGT exists,
    allowing client requests to fail quickly rather than time
    out after trying to get a correct answer from each KDC.
- Fixed heimdal-patched.diff.
- Removed Avoid_NULL_structure_pointer_member_dereference.patch,
  fixed upstream.</changelog>
  <changelog author="bwiedemann@suse.com" date="1533643200">- Add reproducible.patch to override build date (boo#1047218)
- Use constant hostname (boo#1084909)</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1561291200">- Update to version 7.7.0
  + Bug fixes:
  - PKCS#11 hcrypto back-end:
    + initialize the p11_module_load function list
    + verify that not only is a mechanism present but that its
    mechanism info states that it offers the required
    encryption, decryption or digest services
  - krb5:
    + Starting with 7.6, Heimdal permitted requesting
    authenticated anonymous tickets. However, it did not
    verify that a KDC in fact returned an anonymous ticket
    when one was requested.
    + Cease setting the KDCOption reaquest_anonymous flag when
    issuing S4UProxy (constrained delegation) TGS requests.
    + when the Win2K PKINIT compatibility option is set, do not
    require krbtgt otherName to match when validating KDC
    certificate.
    + set PKINIT_BTMM flag per Apple implementation
    + use memset_s() instead of memset()
  - kdc:
    + When generating KRB5SignedPath in the AS, use the reply
    client name rather than the one from the request, so
    validation will work correctly in the TGS.
    + allow checksum of PA-FOR-USER to be HMAC_MD5. Even if TGT
    used an enctype with a different checksum. Per [MS-SFU]
    2.2.1 PA-FOR-USER the checksum is always HMAC_MD5, and
    that's what Windows and MIT clients send.
    In Heimdal both the client and kdc use instead the
    checksum of the TGT, and therefore work with each other
    but Windows and MIT clients fail against Heimdal KDC.
    Both Windows and MIT KDC would allow any keyed checksum
    to be used so Heimdal client work fine against it.
    Change Heimdal KDC to allow HMAC_MD5 even for non RC4
    based TGT in order to support per-spec clients.
    + use memset_s() instead of memset()
    + Detect Heimdal 1.0 through 7.6 clients that issue
    S4UProxy (constrained delegation) TGS Requests with the
    request anonymous flag set. These requests will be
    treated as S4UProxy requests and not anonymous requests.
  - HDB:
    + Set SQLite3 backend default page size to 8KB.
    + Add hdb_set_sync() method
  - kadmind:
    + disable HDB sync during database load avoiding
    unnecessary disk i/o.
  - ipropd:
    + disable HDB sync during receive_everything. Doing an
    fsync per-record when receiving the complete HDB is a
    performance disaster. Among other things, if the HDB is
    very large, then one slave receving a full HDB can cause
    other slaves to timeout and, if HDB write activity is
    high enough to cause iprop log truncation, then also need
    full syncs, which leads to a cycle of full syncs for all
    slaves until HDB write activity drops.
    Allowing the iprop log to be larger helps, but improving
    receive_everything() performance helps even more.
  - kinit:
    + Anonymous PKINIT tickets discard the realm information
    used to locate the issuing AS. Store the issuing realm in
    the credentials cache in order to locate a KDC which can
    renew them.
    + Do not leak the result of krb5_cc_get_config() when
    determining anonymous PKINIT start realm.
  - klist:
    + Show transited-policy-checked, ok-as-delegate and
    anonymous flags when listing credentials.
  - tests:
    + Regenerate certs so that they expire before the 2038
    armageddon so the test suite will pass on 32-bit
    operating systems until the underlying issues can be
    resolved.
  - Solaris:
    + Define _STDC_C11_BCI for memset_s prototype
  - build tooling:
    + Convert from python 2 to python 3
  - documentation:
    + rename verify-password to verify-password-quality
    + hprop default mode is encrypt
    + kadmind "all" permission does not include "get-keys"
    + verify-password-quality might not be stateless
- Version 7.6.0
  + Security (#555):
  - CVE-2018-16860 Heimdal KDC: Reject PA-S4U2Self with unkeyed
    checksum
    When the Heimdal KDC checks the checksum that is placed on
    the S4U2Self packet by the server to protect the requested
    principal against modification, it does not confirm that
    the checksum algorithm that protects the user name
    (principal) in the request is keyed. This allows a
    man-in-the-middle attacker who can intercept the request to
    the KDC to modify the packet by replacing the user name
    (principal) in the request with any desired user name
    (principal) that exists in the KDC and replace the checksum
    protecting that name with a CRC32 checksum (which requires
    no prior knowledge to compute).
    This would allow a S4U2Self ticket requested on behalf of
    user name (principal) user@EXAMPLE.COM to any service to be
    changed to a S4U2Self ticket with a user name (principal) of
    Administrator@EXAMPLE.COM. This ticket would then contain
    the PAC of the modified user name (principal).
  - CVE-2019-12098, client-only:
    RFC8062 Section 7 requires verification of the PA-PKINIT-KX
    key exchange when anonymous PKINIT is used. Failure to do
    so can permit an active attacker to become a
    man-in-the-middle.
  + Bug fixes:
  - Happy eyeballs: Don't wait for responses from
    known-unreachable KDCs.
  - kdc:
    + check return copy_Realm, copy_PrincipalName,
    copy_EncryptionKey
  - kinit:
    + cleanup temporary ccaches
    + see man page for "kinit --anonymous" command line syntax
    change
  - kdc:
    + Make anonymous AS-requests more RFC8062-compliant.
    Updated expired test certificates
  - Solaris:
    + PKCS#11 hcrypto backend broken since 7.0.1
    + Building with Sun Pro C
  + Features:
  - kuser: support authenticated anonymous AS-REQs in kinit
  - kdc: support for anonymous TGS-REQs
  - kgetcred support for anonymous service tickets
  - Support builds with OpenSSL 1.1.1
- fixed heimdal-patched.diff and reproducible.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1653480000">- Apply Shared Library Packaging Policy and resolve rpmlint
  errors like "libheimdal.x86_64: E: shlib-policy-name-error
  SONAME: libasn1.so.8, expected package suffix: 8"</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656417600">- Add heimdal-7.7.0-autoconf-2.70.patch: Fix build with autoconf
  2.70 (gh#heimdal/heimdal#856).</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656590400">- Add ldconfig scriptlets.
- Fix 'Conflicts:' tags.
- Remove obsolete macros and conditionals.
- Ran spec-cleaner.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1671624000">- Update to version 7.8.0
  + This release includes both the Heimdal 7.7.1 Security
    Vulnerability fixes and non-Security bug fixes/improvements.
  + Security Vulnerabilities:
  - CVE-2022-42898 PAC parse integer overflows
  - CVE-2022-3437 Overflows and non-constant time leaks in
    DES{,3} and arcfour
  - CVE-2022-41916 Fix Unicode normalization read of 1 bytes past
    end of array
  - CVE-2021-44758 A null pointer de-reference DoS in SPNEGO
    acceptors
  - CVE-2021-3671 A null pointer de-reference when handling
    missing sname in TGS-REQ
  - CVE-2022-44640 Heimdal KDC: invalid free in ASN.1 codec
    Note that CVE-2022-44640 is a severe vulnerability,
    possibly a 10.0 on the Common Vulnerability Scoring
    System (CVSS) v3, as we believe it should be possible to
    get an RCE on a KDC, which means that credentials can be
    compromised that can be used to impersonate anyone in a
    realm or forest of realms.
    Heimdal's ASN.1 compiler generates code that allows
    specially crafted DER encodings of CHOICEs to invoke the
    wrong free function on the decoded structure upon decode
    error. This is known to impact the Heimdal KDC, leading to
    an invalid free() of an address partly or wholly under the
    control of the attacker, in turn leading to a potential
    remote code execution (RCE) vulnerability.
    This error affects the DER codec for all extensible CHOICE
    types used in Heimdal, though not all cases will be
    exploitable. We have not completed a thorough analysis of
    all the Heimdal components affected, thus the Kerberos
    client, the X.509 library, and other parts, may be affected
    as well.
    This bug has been in Heimdal's ASN.1 compiler since 2005,
    but it may only affect Heimdal 1.6 and up. It was first
    reported by Douglas Bagnall, though it had been found
    independently by the Heimdal maintainers via fuzzing a few
    weeks earlier.
    While no zero-day exploit is known, such an exploit will
    likely be available soon after public disclosure.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  + Other changes:
  - Bugs found by UBSAN (including the incorrect encoding of
    unconstrained INTEGER value -1).
  - Errors found by the LLVM scan-build static analyzer.
  - Errors found by the valgrind memory debugger.
  - Work around GCC Bug 95189 (memcmp wrongly stripped like
    strcmp).
  - Correct ASN.1 OID typo for SHA-384
  - Fix a deadlock in in the MEMORY ccache type.
  - TGS: strip forwardable and proxiable flags if the server is
    disallowed.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  - Incremental HDB propagation improvements
    Refactor send_diffs making it progressive
    Handle partial writes on non-blocking sockets
    Disable Nagle in iprop master and slave
    Use async I/O
    Don't send I_HAVE in response to AYT
    Do not recover log in kadm5_get_principal()
    Don't send diffs to slaves with not yet known version
    Don't stutter in send_diffs
  - Optional backwards-compatible anon-pkinit behavior
- Removed heimdal-7.7.0-autoconf-2.70.patch, fixed upstream.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1673352000">- replace libheimdal conflicts by obsoletes / provides to provide a
  smooth update in the new libheimdal-devel.</changelog>
</package>
<package pkgid="b4f2fc10d638be2e3747871bf89013c43373fb891935d3da062de6f809ba0034" name="libhx509-5" arch="i586">
  <version epoch="0" ver="7.8.0" rel="bp154.2.4.1"/>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1440936000">- Initial package, version 1.6rc2
- Added patch heimdal-version-script-client.map.patch to add file
  version-script-client.map (File is present in git for tag 1.6rc2
  but missing in tarball).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441108800">- Some changes in spec file to enable build for SLES.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441195200">- Added Conflicts tags to spec file because devel package conflicts
  with krb5-devel and krb5-mini-devel.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441454400">- Added a patched instead of the original tarball because only
  shared libraries will be build and source files of these (not to
  be build) programs have problematic licenses.
- Added script heimdal-patch-source.sh to sources.
- Added patch heimdal-patched.diff that fixes configure.ac and
  several Makefile.am files to successfully build patched source.
- Removed unneeded dependencies in spec file for build.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1483790400">- Update to version 7.1.0
- Removed heimdal-version-script-client.map.patch, fixed upstream.
- Fixed heimdal-patched.diff.
- Unfortunately there is no updated changelog file in tarball,
  changes can be seen in source code version control systems
  history log.</changelog>
  <changelog author="jengelh@inai.de" date="1486036800">- Summary and RPM group update. Do a direct call to ldconfig
  where possible.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1497528000">- Update to version 7.3.0
  - Security
    + Fix transit path validation. Commit f469fc6 (2010-10-02)
    inadvertently caused the previous hop realm to not be added
    to the transit path of issued tickets. This may, in some
    cases, enable bypass of capath policy in Heimdal versions 1.5
    through 7.2.
    Note, this may break sites that rely on the bug. With the bug
    some incomplete [capaths] worked, that should not have.
    These may now break authentication in some cross-realm
    configurations. (CVE-2017-6594)
- Version 7.2.0
  - Bug fixes
    + Portability improvements.
    + More strict parsing of encoded URI components in HTTP KDC.
    + Fixed memory leak in malloc error recovery in NTLM GSSAPI
    mechanism.
    + Avoid overly specific CPU info in krb5-config in aid of
    reproducible builds.
    + Don't do AFS string-to-key tests when feature is disabled.
    + Skip mdb_stat test when the command is not available.
    + Windows: update SHA2 timestamp server.
    + hdb: add missing export
    hdb_generate_key_set_password_with_ks_tuple.
    + Fix signature of hdb_generate_key_set_password().
    + Windows: enable KX509 support in the KDC.
    + kdc: fix kx509 service principal match.
    + iprop: handle case where master sends nothing new.
    + ipropd-slave: fix incorrect error codes.
    + Allow choice of sqlite for HDB pref.
    + check-iprop: don't fail to kill daemons.
    + roken: pidfile -&gt; rk_pidfile.
    + kdc: _kdc_do_kx509 fix use after free error.
    + Do not detect x32 as 64-bit platform.
    + No sys/ttydefaults.h on CYGWIN.
    + Fix check-iprop races.
    + roken_detach_prep() close pipe.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1501761600">- Update to version 7.4.0
  - Security
  - Fix CVE-2017-11103: Orpheus' Lyre KDC-REP service name
    validation.
    This is a critical vulnerability.
    In _krb5_extract_ticket() the KDC-REP service name must be
    obtained from encrypted version stored in 'enc_part' instead
    of the unencrypted version stored in 'ticket'.
    Use of the unecrypted version provides an opportunity for
    successful server impersonation and other attacks.
    Identified by Jeffrey Altman, Viktor Duchovni and
    Nico Williams.
    See https://www.orpheus-lyre.info/ for more details.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1512648000">- Added Avoid_NULL_structure_pointer_member_dereference.patch,
  fixes (bsc#1071675).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1514548800">- Update to version 7.5.0
  - Security
  - Fix CVE-2017-17439, which is a remote denial of service
    vulnerability:
    In Heimdal 7.1 through 7.4, remote unauthenticated attackers
    are able to crash the KDC by sending a crafted UDP packet
    containing empty data fields for client name or realm.
  - Bug fixes
  - Handle long input lines when reloading database dumps.
  - In pre-forked mode (default on Unix), correctly clear the
    process ids of exited children, allowing new child processes
    to replace the old.
  - Fixed incorrect KDC response when no-cross realm TGT exists,
    allowing client requests to fail quickly rather than time
    out after trying to get a correct answer from each KDC.
- Fixed heimdal-patched.diff.
- Removed Avoid_NULL_structure_pointer_member_dereference.patch,
  fixed upstream.</changelog>
  <changelog author="bwiedemann@suse.com" date="1533643200">- Add reproducible.patch to override build date (boo#1047218)
- Use constant hostname (boo#1084909)</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1561291200">- Update to version 7.7.0
  + Bug fixes:
  - PKCS#11 hcrypto back-end:
    + initialize the p11_module_load function list
    + verify that not only is a mechanism present but that its
    mechanism info states that it offers the required
    encryption, decryption or digest services
  - krb5:
    + Starting with 7.6, Heimdal permitted requesting
    authenticated anonymous tickets. However, it did not
    verify that a KDC in fact returned an anonymous ticket
    when one was requested.
    + Cease setting the KDCOption reaquest_anonymous flag when
    issuing S4UProxy (constrained delegation) TGS requests.
    + when the Win2K PKINIT compatibility option is set, do not
    require krbtgt otherName to match when validating KDC
    certificate.
    + set PKINIT_BTMM flag per Apple implementation
    + use memset_s() instead of memset()
  - kdc:
    + When generating KRB5SignedPath in the AS, use the reply
    client name rather than the one from the request, so
    validation will work correctly in the TGS.
    + allow checksum of PA-FOR-USER to be HMAC_MD5. Even if TGT
    used an enctype with a different checksum. Per [MS-SFU]
    2.2.1 PA-FOR-USER the checksum is always HMAC_MD5, and
    that's what Windows and MIT clients send.
    In Heimdal both the client and kdc use instead the
    checksum of the TGT, and therefore work with each other
    but Windows and MIT clients fail against Heimdal KDC.
    Both Windows and MIT KDC would allow any keyed checksum
    to be used so Heimdal client work fine against it.
    Change Heimdal KDC to allow HMAC_MD5 even for non RC4
    based TGT in order to support per-spec clients.
    + use memset_s() instead of memset()
    + Detect Heimdal 1.0 through 7.6 clients that issue
    S4UProxy (constrained delegation) TGS Requests with the
    request anonymous flag set. These requests will be
    treated as S4UProxy requests and not anonymous requests.
  - HDB:
    + Set SQLite3 backend default page size to 8KB.
    + Add hdb_set_sync() method
  - kadmind:
    + disable HDB sync during database load avoiding
    unnecessary disk i/o.
  - ipropd:
    + disable HDB sync during receive_everything. Doing an
    fsync per-record when receiving the complete HDB is a
    performance disaster. Among other things, if the HDB is
    very large, then one slave receving a full HDB can cause
    other slaves to timeout and, if HDB write activity is
    high enough to cause iprop log truncation, then also need
    full syncs, which leads to a cycle of full syncs for all
    slaves until HDB write activity drops.
    Allowing the iprop log to be larger helps, but improving
    receive_everything() performance helps even more.
  - kinit:
    + Anonymous PKINIT tickets discard the realm information
    used to locate the issuing AS. Store the issuing realm in
    the credentials cache in order to locate a KDC which can
    renew them.
    + Do not leak the result of krb5_cc_get_config() when
    determining anonymous PKINIT start realm.
  - klist:
    + Show transited-policy-checked, ok-as-delegate and
    anonymous flags when listing credentials.
  - tests:
    + Regenerate certs so that they expire before the 2038
    armageddon so the test suite will pass on 32-bit
    operating systems until the underlying issues can be
    resolved.
  - Solaris:
    + Define _STDC_C11_BCI for memset_s prototype
  - build tooling:
    + Convert from python 2 to python 3
  - documentation:
    + rename verify-password to verify-password-quality
    + hprop default mode is encrypt
    + kadmind "all" permission does not include "get-keys"
    + verify-password-quality might not be stateless
- Version 7.6.0
  + Security (#555):
  - CVE-2018-16860 Heimdal KDC: Reject PA-S4U2Self with unkeyed
    checksum
    When the Heimdal KDC checks the checksum that is placed on
    the S4U2Self packet by the server to protect the requested
    principal against modification, it does not confirm that
    the checksum algorithm that protects the user name
    (principal) in the request is keyed. This allows a
    man-in-the-middle attacker who can intercept the request to
    the KDC to modify the packet by replacing the user name
    (principal) in the request with any desired user name
    (principal) that exists in the KDC and replace the checksum
    protecting that name with a CRC32 checksum (which requires
    no prior knowledge to compute).
    This would allow a S4U2Self ticket requested on behalf of
    user name (principal) user@EXAMPLE.COM to any service to be
    changed to a S4U2Self ticket with a user name (principal) of
    Administrator@EXAMPLE.COM. This ticket would then contain
    the PAC of the modified user name (principal).
  - CVE-2019-12098, client-only:
    RFC8062 Section 7 requires verification of the PA-PKINIT-KX
    key exchange when anonymous PKINIT is used. Failure to do
    so can permit an active attacker to become a
    man-in-the-middle.
  + Bug fixes:
  - Happy eyeballs: Don't wait for responses from
    known-unreachable KDCs.
  - kdc:
    + check return copy_Realm, copy_PrincipalName,
    copy_EncryptionKey
  - kinit:
    + cleanup temporary ccaches
    + see man page for "kinit --anonymous" command line syntax
    change
  - kdc:
    + Make anonymous AS-requests more RFC8062-compliant.
    Updated expired test certificates
  - Solaris:
    + PKCS#11 hcrypto backend broken since 7.0.1
    + Building with Sun Pro C
  + Features:
  - kuser: support authenticated anonymous AS-REQs in kinit
  - kdc: support for anonymous TGS-REQs
  - kgetcred support for anonymous service tickets
  - Support builds with OpenSSL 1.1.1
- fixed heimdal-patched.diff and reproducible.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1653480000">- Apply Shared Library Packaging Policy and resolve rpmlint
  errors like "libheimdal.x86_64: E: shlib-policy-name-error
  SONAME: libasn1.so.8, expected package suffix: 8"</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656417600">- Add heimdal-7.7.0-autoconf-2.70.patch: Fix build with autoconf
  2.70 (gh#heimdal/heimdal#856).</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656590400">- Add ldconfig scriptlets.
- Fix 'Conflicts:' tags.
- Remove obsolete macros and conditionals.
- Ran spec-cleaner.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1671624000">- Update to version 7.8.0
  + This release includes both the Heimdal 7.7.1 Security
    Vulnerability fixes and non-Security bug fixes/improvements.
  + Security Vulnerabilities:
  - CVE-2022-42898 PAC parse integer overflows
  - CVE-2022-3437 Overflows and non-constant time leaks in
    DES{,3} and arcfour
  - CVE-2022-41916 Fix Unicode normalization read of 1 bytes past
    end of array
  - CVE-2021-44758 A null pointer de-reference DoS in SPNEGO
    acceptors
  - CVE-2021-3671 A null pointer de-reference when handling
    missing sname in TGS-REQ
  - CVE-2022-44640 Heimdal KDC: invalid free in ASN.1 codec
    Note that CVE-2022-44640 is a severe vulnerability,
    possibly a 10.0 on the Common Vulnerability Scoring
    System (CVSS) v3, as we believe it should be possible to
    get an RCE on a KDC, which means that credentials can be
    compromised that can be used to impersonate anyone in a
    realm or forest of realms.
    Heimdal's ASN.1 compiler generates code that allows
    specially crafted DER encodings of CHOICEs to invoke the
    wrong free function on the decoded structure upon decode
    error. This is known to impact the Heimdal KDC, leading to
    an invalid free() of an address partly or wholly under the
    control of the attacker, in turn leading to a potential
    remote code execution (RCE) vulnerability.
    This error affects the DER codec for all extensible CHOICE
    types used in Heimdal, though not all cases will be
    exploitable. We have not completed a thorough analysis of
    all the Heimdal components affected, thus the Kerberos
    client, the X.509 library, and other parts, may be affected
    as well.
    This bug has been in Heimdal's ASN.1 compiler since 2005,
    but it may only affect Heimdal 1.6 and up. It was first
    reported by Douglas Bagnall, though it had been found
    independently by the Heimdal maintainers via fuzzing a few
    weeks earlier.
    While no zero-day exploit is known, such an exploit will
    likely be available soon after public disclosure.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  + Other changes:
  - Bugs found by UBSAN (including the incorrect encoding of
    unconstrained INTEGER value -1).
  - Errors found by the LLVM scan-build static analyzer.
  - Errors found by the valgrind memory debugger.
  - Work around GCC Bug 95189 (memcmp wrongly stripped like
    strcmp).
  - Correct ASN.1 OID typo for SHA-384
  - Fix a deadlock in in the MEMORY ccache type.
  - TGS: strip forwardable and proxiable flags if the server is
    disallowed.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  - Incremental HDB propagation improvements
    Refactor send_diffs making it progressive
    Handle partial writes on non-blocking sockets
    Disable Nagle in iprop master and slave
    Use async I/O
    Don't send I_HAVE in response to AYT
    Do not recover log in kadm5_get_principal()
    Don't send diffs to slaves with not yet known version
    Don't stutter in send_diffs
  - Optional backwards-compatible anon-pkinit behavior
- Removed heimdal-7.7.0-autoconf-2.70.patch, fixed upstream.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1673352000">- replace libheimdal conflicts by obsoletes / provides to provide a
  smooth update in the new libheimdal-devel.</changelog>
</package>
<package pkgid="f0c0fd14891e341391abc420ff781b7e83cfd853634714fc0bd88ec26b6e0f40" name="libhx509-5" arch="ppc64le">
  <version epoch="0" ver="7.8.0" rel="bp154.2.4.1"/>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1440936000">- Initial package, version 1.6rc2
- Added patch heimdal-version-script-client.map.patch to add file
  version-script-client.map (File is present in git for tag 1.6rc2
  but missing in tarball).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441108800">- Some changes in spec file to enable build for SLES.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441195200">- Added Conflicts tags to spec file because devel package conflicts
  with krb5-devel and krb5-mini-devel.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441454400">- Added a patched instead of the original tarball because only
  shared libraries will be build and source files of these (not to
  be build) programs have problematic licenses.
- Added script heimdal-patch-source.sh to sources.
- Added patch heimdal-patched.diff that fixes configure.ac and
  several Makefile.am files to successfully build patched source.
- Removed unneeded dependencies in spec file for build.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1483790400">- Update to version 7.1.0
- Removed heimdal-version-script-client.map.patch, fixed upstream.
- Fixed heimdal-patched.diff.
- Unfortunately there is no updated changelog file in tarball,
  changes can be seen in source code version control systems
  history log.</changelog>
  <changelog author="jengelh@inai.de" date="1486036800">- Summary and RPM group update. Do a direct call to ldconfig
  where possible.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1497528000">- Update to version 7.3.0
  - Security
    + Fix transit path validation. Commit f469fc6 (2010-10-02)
    inadvertently caused the previous hop realm to not be added
    to the transit path of issued tickets. This may, in some
    cases, enable bypass of capath policy in Heimdal versions 1.5
    through 7.2.
    Note, this may break sites that rely on the bug. With the bug
    some incomplete [capaths] worked, that should not have.
    These may now break authentication in some cross-realm
    configurations. (CVE-2017-6594)
- Version 7.2.0
  - Bug fixes
    + Portability improvements.
    + More strict parsing of encoded URI components in HTTP KDC.
    + Fixed memory leak in malloc error recovery in NTLM GSSAPI
    mechanism.
    + Avoid overly specific CPU info in krb5-config in aid of
    reproducible builds.
    + Don't do AFS string-to-key tests when feature is disabled.
    + Skip mdb_stat test when the command is not available.
    + Windows: update SHA2 timestamp server.
    + hdb: add missing export
    hdb_generate_key_set_password_with_ks_tuple.
    + Fix signature of hdb_generate_key_set_password().
    + Windows: enable KX509 support in the KDC.
    + kdc: fix kx509 service principal match.
    + iprop: handle case where master sends nothing new.
    + ipropd-slave: fix incorrect error codes.
    + Allow choice of sqlite for HDB pref.
    + check-iprop: don't fail to kill daemons.
    + roken: pidfile -&gt; rk_pidfile.
    + kdc: _kdc_do_kx509 fix use after free error.
    + Do not detect x32 as 64-bit platform.
    + No sys/ttydefaults.h on CYGWIN.
    + Fix check-iprop races.
    + roken_detach_prep() close pipe.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1501761600">- Update to version 7.4.0
  - Security
  - Fix CVE-2017-11103: Orpheus' Lyre KDC-REP service name
    validation.
    This is a critical vulnerability.
    In _krb5_extract_ticket() the KDC-REP service name must be
    obtained from encrypted version stored in 'enc_part' instead
    of the unencrypted version stored in 'ticket'.
    Use of the unecrypted version provides an opportunity for
    successful server impersonation and other attacks.
    Identified by Jeffrey Altman, Viktor Duchovni and
    Nico Williams.
    See https://www.orpheus-lyre.info/ for more details.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1512648000">- Added Avoid_NULL_structure_pointer_member_dereference.patch,
  fixes (bsc#1071675).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1514548800">- Update to version 7.5.0
  - Security
  - Fix CVE-2017-17439, which is a remote denial of service
    vulnerability:
    In Heimdal 7.1 through 7.4, remote unauthenticated attackers
    are able to crash the KDC by sending a crafted UDP packet
    containing empty data fields for client name or realm.
  - Bug fixes
  - Handle long input lines when reloading database dumps.
  - In pre-forked mode (default on Unix), correctly clear the
    process ids of exited children, allowing new child processes
    to replace the old.
  - Fixed incorrect KDC response when no-cross realm TGT exists,
    allowing client requests to fail quickly rather than time
    out after trying to get a correct answer from each KDC.
- Fixed heimdal-patched.diff.
- Removed Avoid_NULL_structure_pointer_member_dereference.patch,
  fixed upstream.</changelog>
  <changelog author="bwiedemann@suse.com" date="1533643200">- Add reproducible.patch to override build date (boo#1047218)
- Use constant hostname (boo#1084909)</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1561291200">- Update to version 7.7.0
  + Bug fixes:
  - PKCS#11 hcrypto back-end:
    + initialize the p11_module_load function list
    + verify that not only is a mechanism present but that its
    mechanism info states that it offers the required
    encryption, decryption or digest services
  - krb5:
    + Starting with 7.6, Heimdal permitted requesting
    authenticated anonymous tickets. However, it did not
    verify that a KDC in fact returned an anonymous ticket
    when one was requested.
    + Cease setting the KDCOption reaquest_anonymous flag when
    issuing S4UProxy (constrained delegation) TGS requests.
    + when the Win2K PKINIT compatibility option is set, do not
    require krbtgt otherName to match when validating KDC
    certificate.
    + set PKINIT_BTMM flag per Apple implementation
    + use memset_s() instead of memset()
  - kdc:
    + When generating KRB5SignedPath in the AS, use the reply
    client name rather than the one from the request, so
    validation will work correctly in the TGS.
    + allow checksum of PA-FOR-USER to be HMAC_MD5. Even if TGT
    used an enctype with a different checksum. Per [MS-SFU]
    2.2.1 PA-FOR-USER the checksum is always HMAC_MD5, and
    that's what Windows and MIT clients send.
    In Heimdal both the client and kdc use instead the
    checksum of the TGT, and therefore work with each other
    but Windows and MIT clients fail against Heimdal KDC.
    Both Windows and MIT KDC would allow any keyed checksum
    to be used so Heimdal client work fine against it.
    Change Heimdal KDC to allow HMAC_MD5 even for non RC4
    based TGT in order to support per-spec clients.
    + use memset_s() instead of memset()
    + Detect Heimdal 1.0 through 7.6 clients that issue
    S4UProxy (constrained delegation) TGS Requests with the
    request anonymous flag set. These requests will be
    treated as S4UProxy requests and not anonymous requests.
  - HDB:
    + Set SQLite3 backend default page size to 8KB.
    + Add hdb_set_sync() method
  - kadmind:
    + disable HDB sync during database load avoiding
    unnecessary disk i/o.
  - ipropd:
    + disable HDB sync during receive_everything. Doing an
    fsync per-record when receiving the complete HDB is a
    performance disaster. Among other things, if the HDB is
    very large, then one slave receving a full HDB can cause
    other slaves to timeout and, if HDB write activity is
    high enough to cause iprop log truncation, then also need
    full syncs, which leads to a cycle of full syncs for all
    slaves until HDB write activity drops.
    Allowing the iprop log to be larger helps, but improving
    receive_everything() performance helps even more.
  - kinit:
    + Anonymous PKINIT tickets discard the realm information
    used to locate the issuing AS. Store the issuing realm in
    the credentials cache in order to locate a KDC which can
    renew them.
    + Do not leak the result of krb5_cc_get_config() when
    determining anonymous PKINIT start realm.
  - klist:
    + Show transited-policy-checked, ok-as-delegate and
    anonymous flags when listing credentials.
  - tests:
    + Regenerate certs so that they expire before the 2038
    armageddon so the test suite will pass on 32-bit
    operating systems until the underlying issues can be
    resolved.
  - Solaris:
    + Define _STDC_C11_BCI for memset_s prototype
  - build tooling:
    + Convert from python 2 to python 3
  - documentation:
    + rename verify-password to verify-password-quality
    + hprop default mode is encrypt
    + kadmind "all" permission does not include "get-keys"
    + verify-password-quality might not be stateless
- Version 7.6.0
  + Security (#555):
  - CVE-2018-16860 Heimdal KDC: Reject PA-S4U2Self with unkeyed
    checksum
    When the Heimdal KDC checks the checksum that is placed on
    the S4U2Self packet by the server to protect the requested
    principal against modification, it does not confirm that
    the checksum algorithm that protects the user name
    (principal) in the request is keyed. This allows a
    man-in-the-middle attacker who can intercept the request to
    the KDC to modify the packet by replacing the user name
    (principal) in the request with any desired user name
    (principal) that exists in the KDC and replace the checksum
    protecting that name with a CRC32 checksum (which requires
    no prior knowledge to compute).
    This would allow a S4U2Self ticket requested on behalf of
    user name (principal) user@EXAMPLE.COM to any service to be
    changed to a S4U2Self ticket with a user name (principal) of
    Administrator@EXAMPLE.COM. This ticket would then contain
    the PAC of the modified user name (principal).
  - CVE-2019-12098, client-only:
    RFC8062 Section 7 requires verification of the PA-PKINIT-KX
    key exchange when anonymous PKINIT is used. Failure to do
    so can permit an active attacker to become a
    man-in-the-middle.
  + Bug fixes:
  - Happy eyeballs: Don't wait for responses from
    known-unreachable KDCs.
  - kdc:
    + check return copy_Realm, copy_PrincipalName,
    copy_EncryptionKey
  - kinit:
    + cleanup temporary ccaches
    + see man page for "kinit --anonymous" command line syntax
    change
  - kdc:
    + Make anonymous AS-requests more RFC8062-compliant.
    Updated expired test certificates
  - Solaris:
    + PKCS#11 hcrypto backend broken since 7.0.1
    + Building with Sun Pro C
  + Features:
  - kuser: support authenticated anonymous AS-REQs in kinit
  - kdc: support for anonymous TGS-REQs
  - kgetcred support for anonymous service tickets
  - Support builds with OpenSSL 1.1.1
- fixed heimdal-patched.diff and reproducible.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1653480000">- Apply Shared Library Packaging Policy and resolve rpmlint
  errors like "libheimdal.x86_64: E: shlib-policy-name-error
  SONAME: libasn1.so.8, expected package suffix: 8"</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656417600">- Add heimdal-7.7.0-autoconf-2.70.patch: Fix build with autoconf
  2.70 (gh#heimdal/heimdal#856).</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656590400">- Add ldconfig scriptlets.
- Fix 'Conflicts:' tags.
- Remove obsolete macros and conditionals.
- Ran spec-cleaner.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1671624000">- Update to version 7.8.0
  + This release includes both the Heimdal 7.7.1 Security
    Vulnerability fixes and non-Security bug fixes/improvements.
  + Security Vulnerabilities:
  - CVE-2022-42898 PAC parse integer overflows
  - CVE-2022-3437 Overflows and non-constant time leaks in
    DES{,3} and arcfour
  - CVE-2022-41916 Fix Unicode normalization read of 1 bytes past
    end of array
  - CVE-2021-44758 A null pointer de-reference DoS in SPNEGO
    acceptors
  - CVE-2021-3671 A null pointer de-reference when handling
    missing sname in TGS-REQ
  - CVE-2022-44640 Heimdal KDC: invalid free in ASN.1 codec
    Note that CVE-2022-44640 is a severe vulnerability,
    possibly a 10.0 on the Common Vulnerability Scoring
    System (CVSS) v3, as we believe it should be possible to
    get an RCE on a KDC, which means that credentials can be
    compromised that can be used to impersonate anyone in a
    realm or forest of realms.
    Heimdal's ASN.1 compiler generates code that allows
    specially crafted DER encodings of CHOICEs to invoke the
    wrong free function on the decoded structure upon decode
    error. This is known to impact the Heimdal KDC, leading to
    an invalid free() of an address partly or wholly under the
    control of the attacker, in turn leading to a potential
    remote code execution (RCE) vulnerability.
    This error affects the DER codec for all extensible CHOICE
    types used in Heimdal, though not all cases will be
    exploitable. We have not completed a thorough analysis of
    all the Heimdal components affected, thus the Kerberos
    client, the X.509 library, and other parts, may be affected
    as well.
    This bug has been in Heimdal's ASN.1 compiler since 2005,
    but it may only affect Heimdal 1.6 and up. It was first
    reported by Douglas Bagnall, though it had been found
    independently by the Heimdal maintainers via fuzzing a few
    weeks earlier.
    While no zero-day exploit is known, such an exploit will
    likely be available soon after public disclosure.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  + Other changes:
  - Bugs found by UBSAN (including the incorrect encoding of
    unconstrained INTEGER value -1).
  - Errors found by the LLVM scan-build static analyzer.
  - Errors found by the valgrind memory debugger.
  - Work around GCC Bug 95189 (memcmp wrongly stripped like
    strcmp).
  - Correct ASN.1 OID typo for SHA-384
  - Fix a deadlock in in the MEMORY ccache type.
  - TGS: strip forwardable and proxiable flags if the server is
    disallowed.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  - Incremental HDB propagation improvements
    Refactor send_diffs making it progressive
    Handle partial writes on non-blocking sockets
    Disable Nagle in iprop master and slave
    Use async I/O
    Don't send I_HAVE in response to AYT
    Do not recover log in kadm5_get_principal()
    Don't send diffs to slaves with not yet known version
    Don't stutter in send_diffs
  - Optional backwards-compatible anon-pkinit behavior
- Removed heimdal-7.7.0-autoconf-2.70.patch, fixed upstream.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1673352000">- replace libheimdal conflicts by obsoletes / provides to provide a
  smooth update in the new libheimdal-devel.</changelog>
</package>
<package pkgid="2e7e9ca15c0a12c3146f5148acfb4d845b61d77e3de7cbd1a53cf4f7d19bb952" name="libhx509-5" arch="s390x">
  <version epoch="0" ver="7.8.0" rel="bp154.2.4.1"/>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1440936000">- Initial package, version 1.6rc2
- Added patch heimdal-version-script-client.map.patch to add file
  version-script-client.map (File is present in git for tag 1.6rc2
  but missing in tarball).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441108800">- Some changes in spec file to enable build for SLES.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441195200">- Added Conflicts tags to spec file because devel package conflicts
  with krb5-devel and krb5-mini-devel.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441454400">- Added a patched instead of the original tarball because only
  shared libraries will be build and source files of these (not to
  be build) programs have problematic licenses.
- Added script heimdal-patch-source.sh to sources.
- Added patch heimdal-patched.diff that fixes configure.ac and
  several Makefile.am files to successfully build patched source.
- Removed unneeded dependencies in spec file for build.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1483790400">- Update to version 7.1.0
- Removed heimdal-version-script-client.map.patch, fixed upstream.
- Fixed heimdal-patched.diff.
- Unfortunately there is no updated changelog file in tarball,
  changes can be seen in source code version control systems
  history log.</changelog>
  <changelog author="jengelh@inai.de" date="1486036800">- Summary and RPM group update. Do a direct call to ldconfig
  where possible.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1497528000">- Update to version 7.3.0
  - Security
    + Fix transit path validation. Commit f469fc6 (2010-10-02)
    inadvertently caused the previous hop realm to not be added
    to the transit path of issued tickets. This may, in some
    cases, enable bypass of capath policy in Heimdal versions 1.5
    through 7.2.
    Note, this may break sites that rely on the bug. With the bug
    some incomplete [capaths] worked, that should not have.
    These may now break authentication in some cross-realm
    configurations. (CVE-2017-6594)
- Version 7.2.0
  - Bug fixes
    + Portability improvements.
    + More strict parsing of encoded URI components in HTTP KDC.
    + Fixed memory leak in malloc error recovery in NTLM GSSAPI
    mechanism.
    + Avoid overly specific CPU info in krb5-config in aid of
    reproducible builds.
    + Don't do AFS string-to-key tests when feature is disabled.
    + Skip mdb_stat test when the command is not available.
    + Windows: update SHA2 timestamp server.
    + hdb: add missing export
    hdb_generate_key_set_password_with_ks_tuple.
    + Fix signature of hdb_generate_key_set_password().
    + Windows: enable KX509 support in the KDC.
    + kdc: fix kx509 service principal match.
    + iprop: handle case where master sends nothing new.
    + ipropd-slave: fix incorrect error codes.
    + Allow choice of sqlite for HDB pref.
    + check-iprop: don't fail to kill daemons.
    + roken: pidfile -&gt; rk_pidfile.
    + kdc: _kdc_do_kx509 fix use after free error.
    + Do not detect x32 as 64-bit platform.
    + No sys/ttydefaults.h on CYGWIN.
    + Fix check-iprop races.
    + roken_detach_prep() close pipe.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1501761600">- Update to version 7.4.0
  - Security
  - Fix CVE-2017-11103: Orpheus' Lyre KDC-REP service name
    validation.
    This is a critical vulnerability.
    In _krb5_extract_ticket() the KDC-REP service name must be
    obtained from encrypted version stored in 'enc_part' instead
    of the unencrypted version stored in 'ticket'.
    Use of the unecrypted version provides an opportunity for
    successful server impersonation and other attacks.
    Identified by Jeffrey Altman, Viktor Duchovni and
    Nico Williams.
    See https://www.orpheus-lyre.info/ for more details.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1512648000">- Added Avoid_NULL_structure_pointer_member_dereference.patch,
  fixes (bsc#1071675).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1514548800">- Update to version 7.5.0
  - Security
  - Fix CVE-2017-17439, which is a remote denial of service
    vulnerability:
    In Heimdal 7.1 through 7.4, remote unauthenticated attackers
    are able to crash the KDC by sending a crafted UDP packet
    containing empty data fields for client name or realm.
  - Bug fixes
  - Handle long input lines when reloading database dumps.
  - In pre-forked mode (default on Unix), correctly clear the
    process ids of exited children, allowing new child processes
    to replace the old.
  - Fixed incorrect KDC response when no-cross realm TGT exists,
    allowing client requests to fail quickly rather than time
    out after trying to get a correct answer from each KDC.
- Fixed heimdal-patched.diff.
- Removed Avoid_NULL_structure_pointer_member_dereference.patch,
  fixed upstream.</changelog>
  <changelog author="bwiedemann@suse.com" date="1533643200">- Add reproducible.patch to override build date (boo#1047218)
- Use constant hostname (boo#1084909)</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1561291200">- Update to version 7.7.0
  + Bug fixes:
  - PKCS#11 hcrypto back-end:
    + initialize the p11_module_load function list
    + verify that not only is a mechanism present but that its
    mechanism info states that it offers the required
    encryption, decryption or digest services
  - krb5:
    + Starting with 7.6, Heimdal permitted requesting
    authenticated anonymous tickets. However, it did not
    verify that a KDC in fact returned an anonymous ticket
    when one was requested.
    + Cease setting the KDCOption reaquest_anonymous flag when
    issuing S4UProxy (constrained delegation) TGS requests.
    + when the Win2K PKINIT compatibility option is set, do not
    require krbtgt otherName to match when validating KDC
    certificate.
    + set PKINIT_BTMM flag per Apple implementation
    + use memset_s() instead of memset()
  - kdc:
    + When generating KRB5SignedPath in the AS, use the reply
    client name rather than the one from the request, so
    validation will work correctly in the TGS.
    + allow checksum of PA-FOR-USER to be HMAC_MD5. Even if TGT
    used an enctype with a different checksum. Per [MS-SFU]
    2.2.1 PA-FOR-USER the checksum is always HMAC_MD5, and
    that's what Windows and MIT clients send.
    In Heimdal both the client and kdc use instead the
    checksum of the TGT, and therefore work with each other
    but Windows and MIT clients fail against Heimdal KDC.
    Both Windows and MIT KDC would allow any keyed checksum
    to be used so Heimdal client work fine against it.
    Change Heimdal KDC to allow HMAC_MD5 even for non RC4
    based TGT in order to support per-spec clients.
    + use memset_s() instead of memset()
    + Detect Heimdal 1.0 through 7.6 clients that issue
    S4UProxy (constrained delegation) TGS Requests with the
    request anonymous flag set. These requests will be
    treated as S4UProxy requests and not anonymous requests.
  - HDB:
    + Set SQLite3 backend default page size to 8KB.
    + Add hdb_set_sync() method
  - kadmind:
    + disable HDB sync during database load avoiding
    unnecessary disk i/o.
  - ipropd:
    + disable HDB sync during receive_everything. Doing an
    fsync per-record when receiving the complete HDB is a
    performance disaster. Among other things, if the HDB is
    very large, then one slave receving a full HDB can cause
    other slaves to timeout and, if HDB write activity is
    high enough to cause iprop log truncation, then also need
    full syncs, which leads to a cycle of full syncs for all
    slaves until HDB write activity drops.
    Allowing the iprop log to be larger helps, but improving
    receive_everything() performance helps even more.
  - kinit:
    + Anonymous PKINIT tickets discard the realm information
    used to locate the issuing AS. Store the issuing realm in
    the credentials cache in order to locate a KDC which can
    renew them.
    + Do not leak the result of krb5_cc_get_config() when
    determining anonymous PKINIT start realm.
  - klist:
    + Show transited-policy-checked, ok-as-delegate and
    anonymous flags when listing credentials.
  - tests:
    + Regenerate certs so that they expire before the 2038
    armageddon so the test suite will pass on 32-bit
    operating systems until the underlying issues can be
    resolved.
  - Solaris:
    + Define _STDC_C11_BCI for memset_s prototype
  - build tooling:
    + Convert from python 2 to python 3
  - documentation:
    + rename verify-password to verify-password-quality
    + hprop default mode is encrypt
    + kadmind "all" permission does not include "get-keys"
    + verify-password-quality might not be stateless
- Version 7.6.0
  + Security (#555):
  - CVE-2018-16860 Heimdal KDC: Reject PA-S4U2Self with unkeyed
    checksum
    When the Heimdal KDC checks the checksum that is placed on
    the S4U2Self packet by the server to protect the requested
    principal against modification, it does not confirm that
    the checksum algorithm that protects the user name
    (principal) in the request is keyed. This allows a
    man-in-the-middle attacker who can intercept the request to
    the KDC to modify the packet by replacing the user name
    (principal) in the request with any desired user name
    (principal) that exists in the KDC and replace the checksum
    protecting that name with a CRC32 checksum (which requires
    no prior knowledge to compute).
    This would allow a S4U2Self ticket requested on behalf of
    user name (principal) user@EXAMPLE.COM to any service to be
    changed to a S4U2Self ticket with a user name (principal) of
    Administrator@EXAMPLE.COM. This ticket would then contain
    the PAC of the modified user name (principal).
  - CVE-2019-12098, client-only:
    RFC8062 Section 7 requires verification of the PA-PKINIT-KX
    key exchange when anonymous PKINIT is used. Failure to do
    so can permit an active attacker to become a
    man-in-the-middle.
  + Bug fixes:
  - Happy eyeballs: Don't wait for responses from
    known-unreachable KDCs.
  - kdc:
    + check return copy_Realm, copy_PrincipalName,
    copy_EncryptionKey
  - kinit:
    + cleanup temporary ccaches
    + see man page for "kinit --anonymous" command line syntax
    change
  - kdc:
    + Make anonymous AS-requests more RFC8062-compliant.
    Updated expired test certificates
  - Solaris:
    + PKCS#11 hcrypto backend broken since 7.0.1
    + Building with Sun Pro C
  + Features:
  - kuser: support authenticated anonymous AS-REQs in kinit
  - kdc: support for anonymous TGS-REQs
  - kgetcred support for anonymous service tickets
  - Support builds with OpenSSL 1.1.1
- fixed heimdal-patched.diff and reproducible.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1653480000">- Apply Shared Library Packaging Policy and resolve rpmlint
  errors like "libheimdal.x86_64: E: shlib-policy-name-error
  SONAME: libasn1.so.8, expected package suffix: 8"</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656417600">- Add heimdal-7.7.0-autoconf-2.70.patch: Fix build with autoconf
  2.70 (gh#heimdal/heimdal#856).</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656590400">- Add ldconfig scriptlets.
- Fix 'Conflicts:' tags.
- Remove obsolete macros and conditionals.
- Ran spec-cleaner.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1671624000">- Update to version 7.8.0
  + This release includes both the Heimdal 7.7.1 Security
    Vulnerability fixes and non-Security bug fixes/improvements.
  + Security Vulnerabilities:
  - CVE-2022-42898 PAC parse integer overflows
  - CVE-2022-3437 Overflows and non-constant time leaks in
    DES{,3} and arcfour
  - CVE-2022-41916 Fix Unicode normalization read of 1 bytes past
    end of array
  - CVE-2021-44758 A null pointer de-reference DoS in SPNEGO
    acceptors
  - CVE-2021-3671 A null pointer de-reference when handling
    missing sname in TGS-REQ
  - CVE-2022-44640 Heimdal KDC: invalid free in ASN.1 codec
    Note that CVE-2022-44640 is a severe vulnerability,
    possibly a 10.0 on the Common Vulnerability Scoring
    System (CVSS) v3, as we believe it should be possible to
    get an RCE on a KDC, which means that credentials can be
    compromised that can be used to impersonate anyone in a
    realm or forest of realms.
    Heimdal's ASN.1 compiler generates code that allows
    specially crafted DER encodings of CHOICEs to invoke the
    wrong free function on the decoded structure upon decode
    error. This is known to impact the Heimdal KDC, leading to
    an invalid free() of an address partly or wholly under the
    control of the attacker, in turn leading to a potential
    remote code execution (RCE) vulnerability.
    This error affects the DER codec for all extensible CHOICE
    types used in Heimdal, though not all cases will be
    exploitable. We have not completed a thorough analysis of
    all the Heimdal components affected, thus the Kerberos
    client, the X.509 library, and other parts, may be affected
    as well.
    This bug has been in Heimdal's ASN.1 compiler since 2005,
    but it may only affect Heimdal 1.6 and up. It was first
    reported by Douglas Bagnall, though it had been found
    independently by the Heimdal maintainers via fuzzing a few
    weeks earlier.
    While no zero-day exploit is known, such an exploit will
    likely be available soon after public disclosure.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  + Other changes:
  - Bugs found by UBSAN (including the incorrect encoding of
    unconstrained INTEGER value -1).
  - Errors found by the LLVM scan-build static analyzer.
  - Errors found by the valgrind memory debugger.
  - Work around GCC Bug 95189 (memcmp wrongly stripped like
    strcmp).
  - Correct ASN.1 OID typo for SHA-384
  - Fix a deadlock in in the MEMORY ccache type.
  - TGS: strip forwardable and proxiable flags if the server is
    disallowed.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  - Incremental HDB propagation improvements
    Refactor send_diffs making it progressive
    Handle partial writes on non-blocking sockets
    Disable Nagle in iprop master and slave
    Use async I/O
    Don't send I_HAVE in response to AYT
    Do not recover log in kadm5_get_principal()
    Don't send diffs to slaves with not yet known version
    Don't stutter in send_diffs
  - Optional backwards-compatible anon-pkinit behavior
- Removed heimdal-7.7.0-autoconf-2.70.patch, fixed upstream.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1673352000">- replace libheimdal conflicts by obsoletes / provides to provide a
  smooth update in the new libheimdal-devel.</changelog>
</package>
<package pkgid="a6a5168c19949922e2d7e0f4d5ce9bcd552be9f34c8dde301c2f79144b0c5585" name="libhx509-5" arch="x86_64">
  <version epoch="0" ver="7.8.0" rel="bp154.2.4.1"/>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1440936000">- Initial package, version 1.6rc2
- Added patch heimdal-version-script-client.map.patch to add file
  version-script-client.map (File is present in git for tag 1.6rc2
  but missing in tarball).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441108800">- Some changes in spec file to enable build for SLES.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441195200">- Added Conflicts tags to spec file because devel package conflicts
  with krb5-devel and krb5-mini-devel.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441454400">- Added a patched instead of the original tarball because only
  shared libraries will be build and source files of these (not to
  be build) programs have problematic licenses.
- Added script heimdal-patch-source.sh to sources.
- Added patch heimdal-patched.diff that fixes configure.ac and
  several Makefile.am files to successfully build patched source.
- Removed unneeded dependencies in spec file for build.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1483790400">- Update to version 7.1.0
- Removed heimdal-version-script-client.map.patch, fixed upstream.
- Fixed heimdal-patched.diff.
- Unfortunately there is no updated changelog file in tarball,
  changes can be seen in source code version control systems
  history log.</changelog>
  <changelog author="jengelh@inai.de" date="1486036800">- Summary and RPM group update. Do a direct call to ldconfig
  where possible.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1497528000">- Update to version 7.3.0
  - Security
    + Fix transit path validation. Commit f469fc6 (2010-10-02)
    inadvertently caused the previous hop realm to not be added
    to the transit path of issued tickets. This may, in some
    cases, enable bypass of capath policy in Heimdal versions 1.5
    through 7.2.
    Note, this may break sites that rely on the bug. With the bug
    some incomplete [capaths] worked, that should not have.
    These may now break authentication in some cross-realm
    configurations. (CVE-2017-6594)
- Version 7.2.0
  - Bug fixes
    + Portability improvements.
    + More strict parsing of encoded URI components in HTTP KDC.
    + Fixed memory leak in malloc error recovery in NTLM GSSAPI
    mechanism.
    + Avoid overly specific CPU info in krb5-config in aid of
    reproducible builds.
    + Don't do AFS string-to-key tests when feature is disabled.
    + Skip mdb_stat test when the command is not available.
    + Windows: update SHA2 timestamp server.
    + hdb: add missing export
    hdb_generate_key_set_password_with_ks_tuple.
    + Fix signature of hdb_generate_key_set_password().
    + Windows: enable KX509 support in the KDC.
    + kdc: fix kx509 service principal match.
    + iprop: handle case where master sends nothing new.
    + ipropd-slave: fix incorrect error codes.
    + Allow choice of sqlite for HDB pref.
    + check-iprop: don't fail to kill daemons.
    + roken: pidfile -&gt; rk_pidfile.
    + kdc: _kdc_do_kx509 fix use after free error.
    + Do not detect x32 as 64-bit platform.
    + No sys/ttydefaults.h on CYGWIN.
    + Fix check-iprop races.
    + roken_detach_prep() close pipe.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1501761600">- Update to version 7.4.0
  - Security
  - Fix CVE-2017-11103: Orpheus' Lyre KDC-REP service name
    validation.
    This is a critical vulnerability.
    In _krb5_extract_ticket() the KDC-REP service name must be
    obtained from encrypted version stored in 'enc_part' instead
    of the unencrypted version stored in 'ticket'.
    Use of the unecrypted version provides an opportunity for
    successful server impersonation and other attacks.
    Identified by Jeffrey Altman, Viktor Duchovni and
    Nico Williams.
    See https://www.orpheus-lyre.info/ for more details.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1512648000">- Added Avoid_NULL_structure_pointer_member_dereference.patch,
  fixes (bsc#1071675).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1514548800">- Update to version 7.5.0
  - Security
  - Fix CVE-2017-17439, which is a remote denial of service
    vulnerability:
    In Heimdal 7.1 through 7.4, remote unauthenticated attackers
    are able to crash the KDC by sending a crafted UDP packet
    containing empty data fields for client name or realm.
  - Bug fixes
  - Handle long input lines when reloading database dumps.
  - In pre-forked mode (default on Unix), correctly clear the
    process ids of exited children, allowing new child processes
    to replace the old.
  - Fixed incorrect KDC response when no-cross realm TGT exists,
    allowing client requests to fail quickly rather than time
    out after trying to get a correct answer from each KDC.
- Fixed heimdal-patched.diff.
- Removed Avoid_NULL_structure_pointer_member_dereference.patch,
  fixed upstream.</changelog>
  <changelog author="bwiedemann@suse.com" date="1533643200">- Add reproducible.patch to override build date (boo#1047218)
- Use constant hostname (boo#1084909)</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1561291200">- Update to version 7.7.0
  + Bug fixes:
  - PKCS#11 hcrypto back-end:
    + initialize the p11_module_load function list
    + verify that not only is a mechanism present but that its
    mechanism info states that it offers the required
    encryption, decryption or digest services
  - krb5:
    + Starting with 7.6, Heimdal permitted requesting
    authenticated anonymous tickets. However, it did not
    verify that a KDC in fact returned an anonymous ticket
    when one was requested.
    + Cease setting the KDCOption reaquest_anonymous flag when
    issuing S4UProxy (constrained delegation) TGS requests.
    + when the Win2K PKINIT compatibility option is set, do not
    require krbtgt otherName to match when validating KDC
    certificate.
    + set PKINIT_BTMM flag per Apple implementation
    + use memset_s() instead of memset()
  - kdc:
    + When generating KRB5SignedPath in the AS, use the reply
    client name rather than the one from the request, so
    validation will work correctly in the TGS.
    + allow checksum of PA-FOR-USER to be HMAC_MD5. Even if TGT
    used an enctype with a different checksum. Per [MS-SFU]
    2.2.1 PA-FOR-USER the checksum is always HMAC_MD5, and
    that's what Windows and MIT clients send.
    In Heimdal both the client and kdc use instead the
    checksum of the TGT, and therefore work with each other
    but Windows and MIT clients fail against Heimdal KDC.
    Both Windows and MIT KDC would allow any keyed checksum
    to be used so Heimdal client work fine against it.
    Change Heimdal KDC to allow HMAC_MD5 even for non RC4
    based TGT in order to support per-spec clients.
    + use memset_s() instead of memset()
    + Detect Heimdal 1.0 through 7.6 clients that issue
    S4UProxy (constrained delegation) TGS Requests with the
    request anonymous flag set. These requests will be
    treated as S4UProxy requests and not anonymous requests.
  - HDB:
    + Set SQLite3 backend default page size to 8KB.
    + Add hdb_set_sync() method
  - kadmind:
    + disable HDB sync during database load avoiding
    unnecessary disk i/o.
  - ipropd:
    + disable HDB sync during receive_everything. Doing an
    fsync per-record when receiving the complete HDB is a
    performance disaster. Among other things, if the HDB is
    very large, then one slave receving a full HDB can cause
    other slaves to timeout and, if HDB write activity is
    high enough to cause iprop log truncation, then also need
    full syncs, which leads to a cycle of full syncs for all
    slaves until HDB write activity drops.
    Allowing the iprop log to be larger helps, but improving
    receive_everything() performance helps even more.
  - kinit:
    + Anonymous PKINIT tickets discard the realm information
    used to locate the issuing AS. Store the issuing realm in
    the credentials cache in order to locate a KDC which can
    renew them.
    + Do not leak the result of krb5_cc_get_config() when
    determining anonymous PKINIT start realm.
  - klist:
    + Show transited-policy-checked, ok-as-delegate and
    anonymous flags when listing credentials.
  - tests:
    + Regenerate certs so that they expire before the 2038
    armageddon so the test suite will pass on 32-bit
    operating systems until the underlying issues can be
    resolved.
  - Solaris:
    + Define _STDC_C11_BCI for memset_s prototype
  - build tooling:
    + Convert from python 2 to python 3
  - documentation:
    + rename verify-password to verify-password-quality
    + hprop default mode is encrypt
    + kadmind "all" permission does not include "get-keys"
    + verify-password-quality might not be stateless
- Version 7.6.0
  + Security (#555):
  - CVE-2018-16860 Heimdal KDC: Reject PA-S4U2Self with unkeyed
    checksum
    When the Heimdal KDC checks the checksum that is placed on
    the S4U2Self packet by the server to protect the requested
    principal against modification, it does not confirm that
    the checksum algorithm that protects the user name
    (principal) in the request is keyed. This allows a
    man-in-the-middle attacker who can intercept the request to
    the KDC to modify the packet by replacing the user name
    (principal) in the request with any desired user name
    (principal) that exists in the KDC and replace the checksum
    protecting that name with a CRC32 checksum (which requires
    no prior knowledge to compute).
    This would allow a S4U2Self ticket requested on behalf of
    user name (principal) user@EXAMPLE.COM to any service to be
    changed to a S4U2Self ticket with a user name (principal) of
    Administrator@EXAMPLE.COM. This ticket would then contain
    the PAC of the modified user name (principal).
  - CVE-2019-12098, client-only:
    RFC8062 Section 7 requires verification of the PA-PKINIT-KX
    key exchange when anonymous PKINIT is used. Failure to do
    so can permit an active attacker to become a
    man-in-the-middle.
  + Bug fixes:
  - Happy eyeballs: Don't wait for responses from
    known-unreachable KDCs.
  - kdc:
    + check return copy_Realm, copy_PrincipalName,
    copy_EncryptionKey
  - kinit:
    + cleanup temporary ccaches
    + see man page for "kinit --anonymous" command line syntax
    change
  - kdc:
    + Make anonymous AS-requests more RFC8062-compliant.
    Updated expired test certificates
  - Solaris:
    + PKCS#11 hcrypto backend broken since 7.0.1
    + Building with Sun Pro C
  + Features:
  - kuser: support authenticated anonymous AS-REQs in kinit
  - kdc: support for anonymous TGS-REQs
  - kgetcred support for anonymous service tickets
  - Support builds with OpenSSL 1.1.1
- fixed heimdal-patched.diff and reproducible.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1653480000">- Apply Shared Library Packaging Policy and resolve rpmlint
  errors like "libheimdal.x86_64: E: shlib-policy-name-error
  SONAME: libasn1.so.8, expected package suffix: 8"</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656417600">- Add heimdal-7.7.0-autoconf-2.70.patch: Fix build with autoconf
  2.70 (gh#heimdal/heimdal#856).</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656590400">- Add ldconfig scriptlets.
- Fix 'Conflicts:' tags.
- Remove obsolete macros and conditionals.
- Ran spec-cleaner.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1671624000">- Update to version 7.8.0
  + This release includes both the Heimdal 7.7.1 Security
    Vulnerability fixes and non-Security bug fixes/improvements.
  + Security Vulnerabilities:
  - CVE-2022-42898 PAC parse integer overflows
  - CVE-2022-3437 Overflows and non-constant time leaks in
    DES{,3} and arcfour
  - CVE-2022-41916 Fix Unicode normalization read of 1 bytes past
    end of array
  - CVE-2021-44758 A null pointer de-reference DoS in SPNEGO
    acceptors
  - CVE-2021-3671 A null pointer de-reference when handling
    missing sname in TGS-REQ
  - CVE-2022-44640 Heimdal KDC: invalid free in ASN.1 codec
    Note that CVE-2022-44640 is a severe vulnerability,
    possibly a 10.0 on the Common Vulnerability Scoring
    System (CVSS) v3, as we believe it should be possible to
    get an RCE on a KDC, which means that credentials can be
    compromised that can be used to impersonate anyone in a
    realm or forest of realms.
    Heimdal's ASN.1 compiler generates code that allows
    specially crafted DER encodings of CHOICEs to invoke the
    wrong free function on the decoded structure upon decode
    error. This is known to impact the Heimdal KDC, leading to
    an invalid free() of an address partly or wholly under the
    control of the attacker, in turn leading to a potential
    remote code execution (RCE) vulnerability.
    This error affects the DER codec for all extensible CHOICE
    types used in Heimdal, though not all cases will be
    exploitable. We have not completed a thorough analysis of
    all the Heimdal components affected, thus the Kerberos
    client, the X.509 library, and other parts, may be affected
    as well.
    This bug has been in Heimdal's ASN.1 compiler since 2005,
    but it may only affect Heimdal 1.6 and up. It was first
    reported by Douglas Bagnall, though it had been found
    independently by the Heimdal maintainers via fuzzing a few
    weeks earlier.
    While no zero-day exploit is known, such an exploit will
    likely be available soon after public disclosure.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  + Other changes:
  - Bugs found by UBSAN (including the incorrect encoding of
    unconstrained INTEGER value -1).
  - Errors found by the LLVM scan-build static analyzer.
  - Errors found by the valgrind memory debugger.
  - Work around GCC Bug 95189 (memcmp wrongly stripped like
    strcmp).
  - Correct ASN.1 OID typo for SHA-384
  - Fix a deadlock in in the MEMORY ccache type.
  - TGS: strip forwardable and proxiable flags if the server is
    disallowed.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  - Incremental HDB propagation improvements
    Refactor send_diffs making it progressive
    Handle partial writes on non-blocking sockets
    Disable Nagle in iprop master and slave
    Use async I/O
    Don't send I_HAVE in response to AYT
    Do not recover log in kadm5_get_principal()
    Don't send diffs to slaves with not yet known version
    Don't stutter in send_diffs
  - Optional backwards-compatible anon-pkinit behavior
- Removed heimdal-7.7.0-autoconf-2.70.patch, fixed upstream.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1673352000">- replace libheimdal conflicts by obsoletes / provides to provide a
  smooth update in the new libheimdal-devel.</changelog>
</package>
<package pkgid="ab25cd2784d8f91c7077a4ad1e4a8320221bf82cba1e2ea55a1be09967382fb0" name="libkadm5clnt7" arch="aarch64">
  <version epoch="0" ver="7.8.0" rel="bp154.2.4.1"/>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1440936000">- Initial package, version 1.6rc2
- Added patch heimdal-version-script-client.map.patch to add file
  version-script-client.map (File is present in git for tag 1.6rc2
  but missing in tarball).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441108800">- Some changes in spec file to enable build for SLES.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441195200">- Added Conflicts tags to spec file because devel package conflicts
  with krb5-devel and krb5-mini-devel.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441454400">- Added a patched instead of the original tarball because only
  shared libraries will be build and source files of these (not to
  be build) programs have problematic licenses.
- Added script heimdal-patch-source.sh to sources.
- Added patch heimdal-patched.diff that fixes configure.ac and
  several Makefile.am files to successfully build patched source.
- Removed unneeded dependencies in spec file for build.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1483790400">- Update to version 7.1.0
- Removed heimdal-version-script-client.map.patch, fixed upstream.
- Fixed heimdal-patched.diff.
- Unfortunately there is no updated changelog file in tarball,
  changes can be seen in source code version control systems
  history log.</changelog>
  <changelog author="jengelh@inai.de" date="1486036800">- Summary and RPM group update. Do a direct call to ldconfig
  where possible.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1497528000">- Update to version 7.3.0
  - Security
    + Fix transit path validation. Commit f469fc6 (2010-10-02)
    inadvertently caused the previous hop realm to not be added
    to the transit path of issued tickets. This may, in some
    cases, enable bypass of capath policy in Heimdal versions 1.5
    through 7.2.
    Note, this may break sites that rely on the bug. With the bug
    some incomplete [capaths] worked, that should not have.
    These may now break authentication in some cross-realm
    configurations. (CVE-2017-6594)
- Version 7.2.0
  - Bug fixes
    + Portability improvements.
    + More strict parsing of encoded URI components in HTTP KDC.
    + Fixed memory leak in malloc error recovery in NTLM GSSAPI
    mechanism.
    + Avoid overly specific CPU info in krb5-config in aid of
    reproducible builds.
    + Don't do AFS string-to-key tests when feature is disabled.
    + Skip mdb_stat test when the command is not available.
    + Windows: update SHA2 timestamp server.
    + hdb: add missing export
    hdb_generate_key_set_password_with_ks_tuple.
    + Fix signature of hdb_generate_key_set_password().
    + Windows: enable KX509 support in the KDC.
    + kdc: fix kx509 service principal match.
    + iprop: handle case where master sends nothing new.
    + ipropd-slave: fix incorrect error codes.
    + Allow choice of sqlite for HDB pref.
    + check-iprop: don't fail to kill daemons.
    + roken: pidfile -&gt; rk_pidfile.
    + kdc: _kdc_do_kx509 fix use after free error.
    + Do not detect x32 as 64-bit platform.
    + No sys/ttydefaults.h on CYGWIN.
    + Fix check-iprop races.
    + roken_detach_prep() close pipe.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1501761600">- Update to version 7.4.0
  - Security
  - Fix CVE-2017-11103: Orpheus' Lyre KDC-REP service name
    validation.
    This is a critical vulnerability.
    In _krb5_extract_ticket() the KDC-REP service name must be
    obtained from encrypted version stored in 'enc_part' instead
    of the unencrypted version stored in 'ticket'.
    Use of the unecrypted version provides an opportunity for
    successful server impersonation and other attacks.
    Identified by Jeffrey Altman, Viktor Duchovni and
    Nico Williams.
    See https://www.orpheus-lyre.info/ for more details.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1512648000">- Added Avoid_NULL_structure_pointer_member_dereference.patch,
  fixes (bsc#1071675).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1514548800">- Update to version 7.5.0
  - Security
  - Fix CVE-2017-17439, which is a remote denial of service
    vulnerability:
    In Heimdal 7.1 through 7.4, remote unauthenticated attackers
    are able to crash the KDC by sending a crafted UDP packet
    containing empty data fields for client name or realm.
  - Bug fixes
  - Handle long input lines when reloading database dumps.
  - In pre-forked mode (default on Unix), correctly clear the
    process ids of exited children, allowing new child processes
    to replace the old.
  - Fixed incorrect KDC response when no-cross realm TGT exists,
    allowing client requests to fail quickly rather than time
    out after trying to get a correct answer from each KDC.
- Fixed heimdal-patched.diff.
- Removed Avoid_NULL_structure_pointer_member_dereference.patch,
  fixed upstream.</changelog>
  <changelog author="bwiedemann@suse.com" date="1533643200">- Add reproducible.patch to override build date (boo#1047218)
- Use constant hostname (boo#1084909)</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1561291200">- Update to version 7.7.0
  + Bug fixes:
  - PKCS#11 hcrypto back-end:
    + initialize the p11_module_load function list
    + verify that not only is a mechanism present but that its
    mechanism info states that it offers the required
    encryption, decryption or digest services
  - krb5:
    + Starting with 7.6, Heimdal permitted requesting
    authenticated anonymous tickets. However, it did not
    verify that a KDC in fact returned an anonymous ticket
    when one was requested.
    + Cease setting the KDCOption reaquest_anonymous flag when
    issuing S4UProxy (constrained delegation) TGS requests.
    + when the Win2K PKINIT compatibility option is set, do not
    require krbtgt otherName to match when validating KDC
    certificate.
    + set PKINIT_BTMM flag per Apple implementation
    + use memset_s() instead of memset()
  - kdc:
    + When generating KRB5SignedPath in the AS, use the reply
    client name rather than the one from the request, so
    validation will work correctly in the TGS.
    + allow checksum of PA-FOR-USER to be HMAC_MD5. Even if TGT
    used an enctype with a different checksum. Per [MS-SFU]
    2.2.1 PA-FOR-USER the checksum is always HMAC_MD5, and
    that's what Windows and MIT clients send.
    In Heimdal both the client and kdc use instead the
    checksum of the TGT, and therefore work with each other
    but Windows and MIT clients fail against Heimdal KDC.
    Both Windows and MIT KDC would allow any keyed checksum
    to be used so Heimdal client work fine against it.
    Change Heimdal KDC to allow HMAC_MD5 even for non RC4
    based TGT in order to support per-spec clients.
    + use memset_s() instead of memset()
    + Detect Heimdal 1.0 through 7.6 clients that issue
    S4UProxy (constrained delegation) TGS Requests with the
    request anonymous flag set. These requests will be
    treated as S4UProxy requests and not anonymous requests.
  - HDB:
    + Set SQLite3 backend default page size to 8KB.
    + Add hdb_set_sync() method
  - kadmind:
    + disable HDB sync during database load avoiding
    unnecessary disk i/o.
  - ipropd:
    + disable HDB sync during receive_everything. Doing an
    fsync per-record when receiving the complete HDB is a
    performance disaster. Among other things, if the HDB is
    very large, then one slave receving a full HDB can cause
    other slaves to timeout and, if HDB write activity is
    high enough to cause iprop log truncation, then also need
    full syncs, which leads to a cycle of full syncs for all
    slaves until HDB write activity drops.
    Allowing the iprop log to be larger helps, but improving
    receive_everything() performance helps even more.
  - kinit:
    + Anonymous PKINIT tickets discard the realm information
    used to locate the issuing AS. Store the issuing realm in
    the credentials cache in order to locate a KDC which can
    renew them.
    + Do not leak the result of krb5_cc_get_config() when
    determining anonymous PKINIT start realm.
  - klist:
    + Show transited-policy-checked, ok-as-delegate and
    anonymous flags when listing credentials.
  - tests:
    + Regenerate certs so that they expire before the 2038
    armageddon so the test suite will pass on 32-bit
    operating systems until the underlying issues can be
    resolved.
  - Solaris:
    + Define _STDC_C11_BCI for memset_s prototype
  - build tooling:
    + Convert from python 2 to python 3
  - documentation:
    + rename verify-password to verify-password-quality
    + hprop default mode is encrypt
    + kadmind "all" permission does not include "get-keys"
    + verify-password-quality might not be stateless
- Version 7.6.0
  + Security (#555):
  - CVE-2018-16860 Heimdal KDC: Reject PA-S4U2Self with unkeyed
    checksum
    When the Heimdal KDC checks the checksum that is placed on
    the S4U2Self packet by the server to protect the requested
    principal against modification, it does not confirm that
    the checksum algorithm that protects the user name
    (principal) in the request is keyed. This allows a
    man-in-the-middle attacker who can intercept the request to
    the KDC to modify the packet by replacing the user name
    (principal) in the request with any desired user name
    (principal) that exists in the KDC and replace the checksum
    protecting that name with a CRC32 checksum (which requires
    no prior knowledge to compute).
    This would allow a S4U2Self ticket requested on behalf of
    user name (principal) user@EXAMPLE.COM to any service to be
    changed to a S4U2Self ticket with a user name (principal) of
    Administrator@EXAMPLE.COM. This ticket would then contain
    the PAC of the modified user name (principal).
  - CVE-2019-12098, client-only:
    RFC8062 Section 7 requires verification of the PA-PKINIT-KX
    key exchange when anonymous PKINIT is used. Failure to do
    so can permit an active attacker to become a
    man-in-the-middle.
  + Bug fixes:
  - Happy eyeballs: Don't wait for responses from
    known-unreachable KDCs.
  - kdc:
    + check return copy_Realm, copy_PrincipalName,
    copy_EncryptionKey
  - kinit:
    + cleanup temporary ccaches
    + see man page for "kinit --anonymous" command line syntax
    change
  - kdc:
    + Make anonymous AS-requests more RFC8062-compliant.
    Updated expired test certificates
  - Solaris:
    + PKCS#11 hcrypto backend broken since 7.0.1
    + Building with Sun Pro C
  + Features:
  - kuser: support authenticated anonymous AS-REQs in kinit
  - kdc: support for anonymous TGS-REQs
  - kgetcred support for anonymous service tickets
  - Support builds with OpenSSL 1.1.1
- fixed heimdal-patched.diff and reproducible.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1653480000">- Apply Shared Library Packaging Policy and resolve rpmlint
  errors like "libheimdal.x86_64: E: shlib-policy-name-error
  SONAME: libasn1.so.8, expected package suffix: 8"</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656417600">- Add heimdal-7.7.0-autoconf-2.70.patch: Fix build with autoconf
  2.70 (gh#heimdal/heimdal#856).</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656590400">- Add ldconfig scriptlets.
- Fix 'Conflicts:' tags.
- Remove obsolete macros and conditionals.
- Ran spec-cleaner.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1671624000">- Update to version 7.8.0
  + This release includes both the Heimdal 7.7.1 Security
    Vulnerability fixes and non-Security bug fixes/improvements.
  + Security Vulnerabilities:
  - CVE-2022-42898 PAC parse integer overflows
  - CVE-2022-3437 Overflows and non-constant time leaks in
    DES{,3} and arcfour
  - CVE-2022-41916 Fix Unicode normalization read of 1 bytes past
    end of array
  - CVE-2021-44758 A null pointer de-reference DoS in SPNEGO
    acceptors
  - CVE-2021-3671 A null pointer de-reference when handling
    missing sname in TGS-REQ
  - CVE-2022-44640 Heimdal KDC: invalid free in ASN.1 codec
    Note that CVE-2022-44640 is a severe vulnerability,
    possibly a 10.0 on the Common Vulnerability Scoring
    System (CVSS) v3, as we believe it should be possible to
    get an RCE on a KDC, which means that credentials can be
    compromised that can be used to impersonate anyone in a
    realm or forest of realms.
    Heimdal's ASN.1 compiler generates code that allows
    specially crafted DER encodings of CHOICEs to invoke the
    wrong free function on the decoded structure upon decode
    error. This is known to impact the Heimdal KDC, leading to
    an invalid free() of an address partly or wholly under the
    control of the attacker, in turn leading to a potential
    remote code execution (RCE) vulnerability.
    This error affects the DER codec for all extensible CHOICE
    types used in Heimdal, though not all cases will be
    exploitable. We have not completed a thorough analysis of
    all the Heimdal components affected, thus the Kerberos
    client, the X.509 library, and other parts, may be affected
    as well.
    This bug has been in Heimdal's ASN.1 compiler since 2005,
    but it may only affect Heimdal 1.6 and up. It was first
    reported by Douglas Bagnall, though it had been found
    independently by the Heimdal maintainers via fuzzing a few
    weeks earlier.
    While no zero-day exploit is known, such an exploit will
    likely be available soon after public disclosure.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  + Other changes:
  - Bugs found by UBSAN (including the incorrect encoding of
    unconstrained INTEGER value -1).
  - Errors found by the LLVM scan-build static analyzer.
  - Errors found by the valgrind memory debugger.
  - Work around GCC Bug 95189 (memcmp wrongly stripped like
    strcmp).
  - Correct ASN.1 OID typo for SHA-384
  - Fix a deadlock in in the MEMORY ccache type.
  - TGS: strip forwardable and proxiable flags if the server is
    disallowed.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  - Incremental HDB propagation improvements
    Refactor send_diffs making it progressive
    Handle partial writes on non-blocking sockets
    Disable Nagle in iprop master and slave
    Use async I/O
    Don't send I_HAVE in response to AYT
    Do not recover log in kadm5_get_principal()
    Don't send diffs to slaves with not yet known version
    Don't stutter in send_diffs
  - Optional backwards-compatible anon-pkinit behavior
- Removed heimdal-7.7.0-autoconf-2.70.patch, fixed upstream.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1673352000">- replace libheimdal conflicts by obsoletes / provides to provide a
  smooth update in the new libheimdal-devel.</changelog>
</package>
<package pkgid="21f023647a145720b151649d1da2c74edb8cb2e1db4a2607908405902213a80a" name="libkadm5clnt7" arch="i586">
  <version epoch="0" ver="7.8.0" rel="bp154.2.4.1"/>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1440936000">- Initial package, version 1.6rc2
- Added patch heimdal-version-script-client.map.patch to add file
  version-script-client.map (File is present in git for tag 1.6rc2
  but missing in tarball).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441108800">- Some changes in spec file to enable build for SLES.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441195200">- Added Conflicts tags to spec file because devel package conflicts
  with krb5-devel and krb5-mini-devel.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441454400">- Added a patched instead of the original tarball because only
  shared libraries will be build and source files of these (not to
  be build) programs have problematic licenses.
- Added script heimdal-patch-source.sh to sources.
- Added patch heimdal-patched.diff that fixes configure.ac and
  several Makefile.am files to successfully build patched source.
- Removed unneeded dependencies in spec file for build.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1483790400">- Update to version 7.1.0
- Removed heimdal-version-script-client.map.patch, fixed upstream.
- Fixed heimdal-patched.diff.
- Unfortunately there is no updated changelog file in tarball,
  changes can be seen in source code version control systems
  history log.</changelog>
  <changelog author="jengelh@inai.de" date="1486036800">- Summary and RPM group update. Do a direct call to ldconfig
  where possible.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1497528000">- Update to version 7.3.0
  - Security
    + Fix transit path validation. Commit f469fc6 (2010-10-02)
    inadvertently caused the previous hop realm to not be added
    to the transit path of issued tickets. This may, in some
    cases, enable bypass of capath policy in Heimdal versions 1.5
    through 7.2.
    Note, this may break sites that rely on the bug. With the bug
    some incomplete [capaths] worked, that should not have.
    These may now break authentication in some cross-realm
    configurations. (CVE-2017-6594)
- Version 7.2.0
  - Bug fixes
    + Portability improvements.
    + More strict parsing of encoded URI components in HTTP KDC.
    + Fixed memory leak in malloc error recovery in NTLM GSSAPI
    mechanism.
    + Avoid overly specific CPU info in krb5-config in aid of
    reproducible builds.
    + Don't do AFS string-to-key tests when feature is disabled.
    + Skip mdb_stat test when the command is not available.
    + Windows: update SHA2 timestamp server.
    + hdb: add missing export
    hdb_generate_key_set_password_with_ks_tuple.
    + Fix signature of hdb_generate_key_set_password().
    + Windows: enable KX509 support in the KDC.
    + kdc: fix kx509 service principal match.
    + iprop: handle case where master sends nothing new.
    + ipropd-slave: fix incorrect error codes.
    + Allow choice of sqlite for HDB pref.
    + check-iprop: don't fail to kill daemons.
    + roken: pidfile -&gt; rk_pidfile.
    + kdc: _kdc_do_kx509 fix use after free error.
    + Do not detect x32 as 64-bit platform.
    + No sys/ttydefaults.h on CYGWIN.
    + Fix check-iprop races.
    + roken_detach_prep() close pipe.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1501761600">- Update to version 7.4.0
  - Security
  - Fix CVE-2017-11103: Orpheus' Lyre KDC-REP service name
    validation.
    This is a critical vulnerability.
    In _krb5_extract_ticket() the KDC-REP service name must be
    obtained from encrypted version stored in 'enc_part' instead
    of the unencrypted version stored in 'ticket'.
    Use of the unecrypted version provides an opportunity for
    successful server impersonation and other attacks.
    Identified by Jeffrey Altman, Viktor Duchovni and
    Nico Williams.
    See https://www.orpheus-lyre.info/ for more details.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1512648000">- Added Avoid_NULL_structure_pointer_member_dereference.patch,
  fixes (bsc#1071675).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1514548800">- Update to version 7.5.0
  - Security
  - Fix CVE-2017-17439, which is a remote denial of service
    vulnerability:
    In Heimdal 7.1 through 7.4, remote unauthenticated attackers
    are able to crash the KDC by sending a crafted UDP packet
    containing empty data fields for client name or realm.
  - Bug fixes
  - Handle long input lines when reloading database dumps.
  - In pre-forked mode (default on Unix), correctly clear the
    process ids of exited children, allowing new child processes
    to replace the old.
  - Fixed incorrect KDC response when no-cross realm TGT exists,
    allowing client requests to fail quickly rather than time
    out after trying to get a correct answer from each KDC.
- Fixed heimdal-patched.diff.
- Removed Avoid_NULL_structure_pointer_member_dereference.patch,
  fixed upstream.</changelog>
  <changelog author="bwiedemann@suse.com" date="1533643200">- Add reproducible.patch to override build date (boo#1047218)
- Use constant hostname (boo#1084909)</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1561291200">- Update to version 7.7.0
  + Bug fixes:
  - PKCS#11 hcrypto back-end:
    + initialize the p11_module_load function list
    + verify that not only is a mechanism present but that its
    mechanism info states that it offers the required
    encryption, decryption or digest services
  - krb5:
    + Starting with 7.6, Heimdal permitted requesting
    authenticated anonymous tickets. However, it did not
    verify that a KDC in fact returned an anonymous ticket
    when one was requested.
    + Cease setting the KDCOption reaquest_anonymous flag when
    issuing S4UProxy (constrained delegation) TGS requests.
    + when the Win2K PKINIT compatibility option is set, do not
    require krbtgt otherName to match when validating KDC
    certificate.
    + set PKINIT_BTMM flag per Apple implementation
    + use memset_s() instead of memset()
  - kdc:
    + When generating KRB5SignedPath in the AS, use the reply
    client name rather than the one from the request, so
    validation will work correctly in the TGS.
    + allow checksum of PA-FOR-USER to be HMAC_MD5. Even if TGT
    used an enctype with a different checksum. Per [MS-SFU]
    2.2.1 PA-FOR-USER the checksum is always HMAC_MD5, and
    that's what Windows and MIT clients send.
    In Heimdal both the client and kdc use instead the
    checksum of the TGT, and therefore work with each other
    but Windows and MIT clients fail against Heimdal KDC.
    Both Windows and MIT KDC would allow any keyed checksum
    to be used so Heimdal client work fine against it.
    Change Heimdal KDC to allow HMAC_MD5 even for non RC4
    based TGT in order to support per-spec clients.
    + use memset_s() instead of memset()
    + Detect Heimdal 1.0 through 7.6 clients that issue
    S4UProxy (constrained delegation) TGS Requests with the
    request anonymous flag set. These requests will be
    treated as S4UProxy requests and not anonymous requests.
  - HDB:
    + Set SQLite3 backend default page size to 8KB.
    + Add hdb_set_sync() method
  - kadmind:
    + disable HDB sync during database load avoiding
    unnecessary disk i/o.
  - ipropd:
    + disable HDB sync during receive_everything. Doing an
    fsync per-record when receiving the complete HDB is a
    performance disaster. Among other things, if the HDB is
    very large, then one slave receving a full HDB can cause
    other slaves to timeout and, if HDB write activity is
    high enough to cause iprop log truncation, then also need
    full syncs, which leads to a cycle of full syncs for all
    slaves until HDB write activity drops.
    Allowing the iprop log to be larger helps, but improving
    receive_everything() performance helps even more.
  - kinit:
    + Anonymous PKINIT tickets discard the realm information
    used to locate the issuing AS. Store the issuing realm in
    the credentials cache in order to locate a KDC which can
    renew them.
    + Do not leak the result of krb5_cc_get_config() when
    determining anonymous PKINIT start realm.
  - klist:
    + Show transited-policy-checked, ok-as-delegate and
    anonymous flags when listing credentials.
  - tests:
    + Regenerate certs so that they expire before the 2038
    armageddon so the test suite will pass on 32-bit
    operating systems until the underlying issues can be
    resolved.
  - Solaris:
    + Define _STDC_C11_BCI for memset_s prototype
  - build tooling:
    + Convert from python 2 to python 3
  - documentation:
    + rename verify-password to verify-password-quality
    + hprop default mode is encrypt
    + kadmind "all" permission does not include "get-keys"
    + verify-password-quality might not be stateless
- Version 7.6.0
  + Security (#555):
  - CVE-2018-16860 Heimdal KDC: Reject PA-S4U2Self with unkeyed
    checksum
    When the Heimdal KDC checks the checksum that is placed on
    the S4U2Self packet by the server to protect the requested
    principal against modification, it does not confirm that
    the checksum algorithm that protects the user name
    (principal) in the request is keyed. This allows a
    man-in-the-middle attacker who can intercept the request to
    the KDC to modify the packet by replacing the user name
    (principal) in the request with any desired user name
    (principal) that exists in the KDC and replace the checksum
    protecting that name with a CRC32 checksum (which requires
    no prior knowledge to compute).
    This would allow a S4U2Self ticket requested on behalf of
    user name (principal) user@EXAMPLE.COM to any service to be
    changed to a S4U2Self ticket with a user name (principal) of
    Administrator@EXAMPLE.COM. This ticket would then contain
    the PAC of the modified user name (principal).
  - CVE-2019-12098, client-only:
    RFC8062 Section 7 requires verification of the PA-PKINIT-KX
    key exchange when anonymous PKINIT is used. Failure to do
    so can permit an active attacker to become a
    man-in-the-middle.
  + Bug fixes:
  - Happy eyeballs: Don't wait for responses from
    known-unreachable KDCs.
  - kdc:
    + check return copy_Realm, copy_PrincipalName,
    copy_EncryptionKey
  - kinit:
    + cleanup temporary ccaches
    + see man page for "kinit --anonymous" command line syntax
    change
  - kdc:
    + Make anonymous AS-requests more RFC8062-compliant.
    Updated expired test certificates
  - Solaris:
    + PKCS#11 hcrypto backend broken since 7.0.1
    + Building with Sun Pro C
  + Features:
  - kuser: support authenticated anonymous AS-REQs in kinit
  - kdc: support for anonymous TGS-REQs
  - kgetcred support for anonymous service tickets
  - Support builds with OpenSSL 1.1.1
- fixed heimdal-patched.diff and reproducible.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1653480000">- Apply Shared Library Packaging Policy and resolve rpmlint
  errors like "libheimdal.x86_64: E: shlib-policy-name-error
  SONAME: libasn1.so.8, expected package suffix: 8"</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656417600">- Add heimdal-7.7.0-autoconf-2.70.patch: Fix build with autoconf
  2.70 (gh#heimdal/heimdal#856).</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656590400">- Add ldconfig scriptlets.
- Fix 'Conflicts:' tags.
- Remove obsolete macros and conditionals.
- Ran spec-cleaner.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1671624000">- Update to version 7.8.0
  + This release includes both the Heimdal 7.7.1 Security
    Vulnerability fixes and non-Security bug fixes/improvements.
  + Security Vulnerabilities:
  - CVE-2022-42898 PAC parse integer overflows
  - CVE-2022-3437 Overflows and non-constant time leaks in
    DES{,3} and arcfour
  - CVE-2022-41916 Fix Unicode normalization read of 1 bytes past
    end of array
  - CVE-2021-44758 A null pointer de-reference DoS in SPNEGO
    acceptors
  - CVE-2021-3671 A null pointer de-reference when handling
    missing sname in TGS-REQ
  - CVE-2022-44640 Heimdal KDC: invalid free in ASN.1 codec
    Note that CVE-2022-44640 is a severe vulnerability,
    possibly a 10.0 on the Common Vulnerability Scoring
    System (CVSS) v3, as we believe it should be possible to
    get an RCE on a KDC, which means that credentials can be
    compromised that can be used to impersonate anyone in a
    realm or forest of realms.
    Heimdal's ASN.1 compiler generates code that allows
    specially crafted DER encodings of CHOICEs to invoke the
    wrong free function on the decoded structure upon decode
    error. This is known to impact the Heimdal KDC, leading to
    an invalid free() of an address partly or wholly under the
    control of the attacker, in turn leading to a potential
    remote code execution (RCE) vulnerability.
    This error affects the DER codec for all extensible CHOICE
    types used in Heimdal, though not all cases will be
    exploitable. We have not completed a thorough analysis of
    all the Heimdal components affected, thus the Kerberos
    client, the X.509 library, and other parts, may be affected
    as well.
    This bug has been in Heimdal's ASN.1 compiler since 2005,
    but it may only affect Heimdal 1.6 and up. It was first
    reported by Douglas Bagnall, though it had been found
    independently by the Heimdal maintainers via fuzzing a few
    weeks earlier.
    While no zero-day exploit is known, such an exploit will
    likely be available soon after public disclosure.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  + Other changes:
  - Bugs found by UBSAN (including the incorrect encoding of
    unconstrained INTEGER value -1).
  - Errors found by the LLVM scan-build static analyzer.
  - Errors found by the valgrind memory debugger.
  - Work around GCC Bug 95189 (memcmp wrongly stripped like
    strcmp).
  - Correct ASN.1 OID typo for SHA-384
  - Fix a deadlock in in the MEMORY ccache type.
  - TGS: strip forwardable and proxiable flags if the server is
    disallowed.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  - Incremental HDB propagation improvements
    Refactor send_diffs making it progressive
    Handle partial writes on non-blocking sockets
    Disable Nagle in iprop master and slave
    Use async I/O
    Don't send I_HAVE in response to AYT
    Do not recover log in kadm5_get_principal()
    Don't send diffs to slaves with not yet known version
    Don't stutter in send_diffs
  - Optional backwards-compatible anon-pkinit behavior
- Removed heimdal-7.7.0-autoconf-2.70.patch, fixed upstream.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1673352000">- replace libheimdal conflicts by obsoletes / provides to provide a
  smooth update in the new libheimdal-devel.</changelog>
</package>
<package pkgid="9a252b2cd854eac491845cf64a8aa1446c30a0f73beeabf01d6ec5123093a9c3" name="libkadm5clnt7" arch="ppc64le">
  <version epoch="0" ver="7.8.0" rel="bp154.2.4.1"/>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1440936000">- Initial package, version 1.6rc2
- Added patch heimdal-version-script-client.map.patch to add file
  version-script-client.map (File is present in git for tag 1.6rc2
  but missing in tarball).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441108800">- Some changes in spec file to enable build for SLES.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441195200">- Added Conflicts tags to spec file because devel package conflicts
  with krb5-devel and krb5-mini-devel.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441454400">- Added a patched instead of the original tarball because only
  shared libraries will be build and source files of these (not to
  be build) programs have problematic licenses.
- Added script heimdal-patch-source.sh to sources.
- Added patch heimdal-patched.diff that fixes configure.ac and
  several Makefile.am files to successfully build patched source.
- Removed unneeded dependencies in spec file for build.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1483790400">- Update to version 7.1.0
- Removed heimdal-version-script-client.map.patch, fixed upstream.
- Fixed heimdal-patched.diff.
- Unfortunately there is no updated changelog file in tarball,
  changes can be seen in source code version control systems
  history log.</changelog>
  <changelog author="jengelh@inai.de" date="1486036800">- Summary and RPM group update. Do a direct call to ldconfig
  where possible.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1497528000">- Update to version 7.3.0
  - Security
    + Fix transit path validation. Commit f469fc6 (2010-10-02)
    inadvertently caused the previous hop realm to not be added
    to the transit path of issued tickets. This may, in some
    cases, enable bypass of capath policy in Heimdal versions 1.5
    through 7.2.
    Note, this may break sites that rely on the bug. With the bug
    some incomplete [capaths] worked, that should not have.
    These may now break authentication in some cross-realm
    configurations. (CVE-2017-6594)
- Version 7.2.0
  - Bug fixes
    + Portability improvements.
    + More strict parsing of encoded URI components in HTTP KDC.
    + Fixed memory leak in malloc error recovery in NTLM GSSAPI
    mechanism.
    + Avoid overly specific CPU info in krb5-config in aid of
    reproducible builds.
    + Don't do AFS string-to-key tests when feature is disabled.
    + Skip mdb_stat test when the command is not available.
    + Windows: update SHA2 timestamp server.
    + hdb: add missing export
    hdb_generate_key_set_password_with_ks_tuple.
    + Fix signature of hdb_generate_key_set_password().
    + Windows: enable KX509 support in the KDC.
    + kdc: fix kx509 service principal match.
    + iprop: handle case where master sends nothing new.
    + ipropd-slave: fix incorrect error codes.
    + Allow choice of sqlite for HDB pref.
    + check-iprop: don't fail to kill daemons.
    + roken: pidfile -&gt; rk_pidfile.
    + kdc: _kdc_do_kx509 fix use after free error.
    + Do not detect x32 as 64-bit platform.
    + No sys/ttydefaults.h on CYGWIN.
    + Fix check-iprop races.
    + roken_detach_prep() close pipe.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1501761600">- Update to version 7.4.0
  - Security
  - Fix CVE-2017-11103: Orpheus' Lyre KDC-REP service name
    validation.
    This is a critical vulnerability.
    In _krb5_extract_ticket() the KDC-REP service name must be
    obtained from encrypted version stored in 'enc_part' instead
    of the unencrypted version stored in 'ticket'.
    Use of the unecrypted version provides an opportunity for
    successful server impersonation and other attacks.
    Identified by Jeffrey Altman, Viktor Duchovni and
    Nico Williams.
    See https://www.orpheus-lyre.info/ for more details.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1512648000">- Added Avoid_NULL_structure_pointer_member_dereference.patch,
  fixes (bsc#1071675).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1514548800">- Update to version 7.5.0
  - Security
  - Fix CVE-2017-17439, which is a remote denial of service
    vulnerability:
    In Heimdal 7.1 through 7.4, remote unauthenticated attackers
    are able to crash the KDC by sending a crafted UDP packet
    containing empty data fields for client name or realm.
  - Bug fixes
  - Handle long input lines when reloading database dumps.
  - In pre-forked mode (default on Unix), correctly clear the
    process ids of exited children, allowing new child processes
    to replace the old.
  - Fixed incorrect KDC response when no-cross realm TGT exists,
    allowing client requests to fail quickly rather than time
    out after trying to get a correct answer from each KDC.
- Fixed heimdal-patched.diff.
- Removed Avoid_NULL_structure_pointer_member_dereference.patch,
  fixed upstream.</changelog>
  <changelog author="bwiedemann@suse.com" date="1533643200">- Add reproducible.patch to override build date (boo#1047218)
- Use constant hostname (boo#1084909)</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1561291200">- Update to version 7.7.0
  + Bug fixes:
  - PKCS#11 hcrypto back-end:
    + initialize the p11_module_load function list
    + verify that not only is a mechanism present but that its
    mechanism info states that it offers the required
    encryption, decryption or digest services
  - krb5:
    + Starting with 7.6, Heimdal permitted requesting
    authenticated anonymous tickets. However, it did not
    verify that a KDC in fact returned an anonymous ticket
    when one was requested.
    + Cease setting the KDCOption reaquest_anonymous flag when
    issuing S4UProxy (constrained delegation) TGS requests.
    + when the Win2K PKINIT compatibility option is set, do not
    require krbtgt otherName to match when validating KDC
    certificate.
    + set PKINIT_BTMM flag per Apple implementation
    + use memset_s() instead of memset()
  - kdc:
    + When generating KRB5SignedPath in the AS, use the reply
    client name rather than the one from the request, so
    validation will work correctly in the TGS.
    + allow checksum of PA-FOR-USER to be HMAC_MD5. Even if TGT
    used an enctype with a different checksum. Per [MS-SFU]
    2.2.1 PA-FOR-USER the checksum is always HMAC_MD5, and
    that's what Windows and MIT clients send.
    In Heimdal both the client and kdc use instead the
    checksum of the TGT, and therefore work with each other
    but Windows and MIT clients fail against Heimdal KDC.
    Both Windows and MIT KDC would allow any keyed checksum
    to be used so Heimdal client work fine against it.
    Change Heimdal KDC to allow HMAC_MD5 even for non RC4
    based TGT in order to support per-spec clients.
    + use memset_s() instead of memset()
    + Detect Heimdal 1.0 through 7.6 clients that issue
    S4UProxy (constrained delegation) TGS Requests with the
    request anonymous flag set. These requests will be
    treated as S4UProxy requests and not anonymous requests.
  - HDB:
    + Set SQLite3 backend default page size to 8KB.
    + Add hdb_set_sync() method
  - kadmind:
    + disable HDB sync during database load avoiding
    unnecessary disk i/o.
  - ipropd:
    + disable HDB sync during receive_everything. Doing an
    fsync per-record when receiving the complete HDB is a
    performance disaster. Among other things, if the HDB is
    very large, then one slave receving a full HDB can cause
    other slaves to timeout and, if HDB write activity is
    high enough to cause iprop log truncation, then also need
    full syncs, which leads to a cycle of full syncs for all
    slaves until HDB write activity drops.
    Allowing the iprop log to be larger helps, but improving
    receive_everything() performance helps even more.
  - kinit:
    + Anonymous PKINIT tickets discard the realm information
    used to locate the issuing AS. Store the issuing realm in
    the credentials cache in order to locate a KDC which can
    renew them.
    + Do not leak the result of krb5_cc_get_config() when
    determining anonymous PKINIT start realm.
  - klist:
    + Show transited-policy-checked, ok-as-delegate and
    anonymous flags when listing credentials.
  - tests:
    + Regenerate certs so that they expire before the 2038
    armageddon so the test suite will pass on 32-bit
    operating systems until the underlying issues can be
    resolved.
  - Solaris:
    + Define _STDC_C11_BCI for memset_s prototype
  - build tooling:
    + Convert from python 2 to python 3
  - documentation:
    + rename verify-password to verify-password-quality
    + hprop default mode is encrypt
    + kadmind "all" permission does not include "get-keys"
    + verify-password-quality might not be stateless
- Version 7.6.0
  + Security (#555):
  - CVE-2018-16860 Heimdal KDC: Reject PA-S4U2Self with unkeyed
    checksum
    When the Heimdal KDC checks the checksum that is placed on
    the S4U2Self packet by the server to protect the requested
    principal against modification, it does not confirm that
    the checksum algorithm that protects the user name
    (principal) in the request is keyed. This allows a
    man-in-the-middle attacker who can intercept the request to
    the KDC to modify the packet by replacing the user name
    (principal) in the request with any desired user name
    (principal) that exists in the KDC and replace the checksum
    protecting that name with a CRC32 checksum (which requires
    no prior knowledge to compute).
    This would allow a S4U2Self ticket requested on behalf of
    user name (principal) user@EXAMPLE.COM to any service to be
    changed to a S4U2Self ticket with a user name (principal) of
    Administrator@EXAMPLE.COM. This ticket would then contain
    the PAC of the modified user name (principal).
  - CVE-2019-12098, client-only:
    RFC8062 Section 7 requires verification of the PA-PKINIT-KX
    key exchange when anonymous PKINIT is used. Failure to do
    so can permit an active attacker to become a
    man-in-the-middle.
  + Bug fixes:
  - Happy eyeballs: Don't wait for responses from
    known-unreachable KDCs.
  - kdc:
    + check return copy_Realm, copy_PrincipalName,
    copy_EncryptionKey
  - kinit:
    + cleanup temporary ccaches
    + see man page for "kinit --anonymous" command line syntax
    change
  - kdc:
    + Make anonymous AS-requests more RFC8062-compliant.
    Updated expired test certificates
  - Solaris:
    + PKCS#11 hcrypto backend broken since 7.0.1
    + Building with Sun Pro C
  + Features:
  - kuser: support authenticated anonymous AS-REQs in kinit
  - kdc: support for anonymous TGS-REQs
  - kgetcred support for anonymous service tickets
  - Support builds with OpenSSL 1.1.1
- fixed heimdal-patched.diff and reproducible.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1653480000">- Apply Shared Library Packaging Policy and resolve rpmlint
  errors like "libheimdal.x86_64: E: shlib-policy-name-error
  SONAME: libasn1.so.8, expected package suffix: 8"</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656417600">- Add heimdal-7.7.0-autoconf-2.70.patch: Fix build with autoconf
  2.70 (gh#heimdal/heimdal#856).</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656590400">- Add ldconfig scriptlets.
- Fix 'Conflicts:' tags.
- Remove obsolete macros and conditionals.
- Ran spec-cleaner.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1671624000">- Update to version 7.8.0
  + This release includes both the Heimdal 7.7.1 Security
    Vulnerability fixes and non-Security bug fixes/improvements.
  + Security Vulnerabilities:
  - CVE-2022-42898 PAC parse integer overflows
  - CVE-2022-3437 Overflows and non-constant time leaks in
    DES{,3} and arcfour
  - CVE-2022-41916 Fix Unicode normalization read of 1 bytes past
    end of array
  - CVE-2021-44758 A null pointer de-reference DoS in SPNEGO
    acceptors
  - CVE-2021-3671 A null pointer de-reference when handling
    missing sname in TGS-REQ
  - CVE-2022-44640 Heimdal KDC: invalid free in ASN.1 codec
    Note that CVE-2022-44640 is a severe vulnerability,
    possibly a 10.0 on the Common Vulnerability Scoring
    System (CVSS) v3, as we believe it should be possible to
    get an RCE on a KDC, which means that credentials can be
    compromised that can be used to impersonate anyone in a
    realm or forest of realms.
    Heimdal's ASN.1 compiler generates code that allows
    specially crafted DER encodings of CHOICEs to invoke the
    wrong free function on the decoded structure upon decode
    error. This is known to impact the Heimdal KDC, leading to
    an invalid free() of an address partly or wholly under the
    control of the attacker, in turn leading to a potential
    remote code execution (RCE) vulnerability.
    This error affects the DER codec for all extensible CHOICE
    types used in Heimdal, though not all cases will be
    exploitable. We have not completed a thorough analysis of
    all the Heimdal components affected, thus the Kerberos
    client, the X.509 library, and other parts, may be affected
    as well.
    This bug has been in Heimdal's ASN.1 compiler since 2005,
    but it may only affect Heimdal 1.6 and up. It was first
    reported by Douglas Bagnall, though it had been found
    independently by the Heimdal maintainers via fuzzing a few
    weeks earlier.
    While no zero-day exploit is known, such an exploit will
    likely be available soon after public disclosure.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  + Other changes:
  - Bugs found by UBSAN (including the incorrect encoding of
    unconstrained INTEGER value -1).
  - Errors found by the LLVM scan-build static analyzer.
  - Errors found by the valgrind memory debugger.
  - Work around GCC Bug 95189 (memcmp wrongly stripped like
    strcmp).
  - Correct ASN.1 OID typo for SHA-384
  - Fix a deadlock in in the MEMORY ccache type.
  - TGS: strip forwardable and proxiable flags if the server is
    disallowed.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  - Incremental HDB propagation improvements
    Refactor send_diffs making it progressive
    Handle partial writes on non-blocking sockets
    Disable Nagle in iprop master and slave
    Use async I/O
    Don't send I_HAVE in response to AYT
    Do not recover log in kadm5_get_principal()
    Don't send diffs to slaves with not yet known version
    Don't stutter in send_diffs
  - Optional backwards-compatible anon-pkinit behavior
- Removed heimdal-7.7.0-autoconf-2.70.patch, fixed upstream.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1673352000">- replace libheimdal conflicts by obsoletes / provides to provide a
  smooth update in the new libheimdal-devel.</changelog>
</package>
<package pkgid="6e55c02d21d021202c7e737902c7a97d539f3aae5a106ba155f4039b30090df4" name="libkadm5clnt7" arch="s390x">
  <version epoch="0" ver="7.8.0" rel="bp154.2.4.1"/>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1440936000">- Initial package, version 1.6rc2
- Added patch heimdal-version-script-client.map.patch to add file
  version-script-client.map (File is present in git for tag 1.6rc2
  but missing in tarball).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441108800">- Some changes in spec file to enable build for SLES.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441195200">- Added Conflicts tags to spec file because devel package conflicts
  with krb5-devel and krb5-mini-devel.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441454400">- Added a patched instead of the original tarball because only
  shared libraries will be build and source files of these (not to
  be build) programs have problematic licenses.
- Added script heimdal-patch-source.sh to sources.
- Added patch heimdal-patched.diff that fixes configure.ac and
  several Makefile.am files to successfully build patched source.
- Removed unneeded dependencies in spec file for build.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1483790400">- Update to version 7.1.0
- Removed heimdal-version-script-client.map.patch, fixed upstream.
- Fixed heimdal-patched.diff.
- Unfortunately there is no updated changelog file in tarball,
  changes can be seen in source code version control systems
  history log.</changelog>
  <changelog author="jengelh@inai.de" date="1486036800">- Summary and RPM group update. Do a direct call to ldconfig
  where possible.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1497528000">- Update to version 7.3.0
  - Security
    + Fix transit path validation. Commit f469fc6 (2010-10-02)
    inadvertently caused the previous hop realm to not be added
    to the transit path of issued tickets. This may, in some
    cases, enable bypass of capath policy in Heimdal versions 1.5
    through 7.2.
    Note, this may break sites that rely on the bug. With the bug
    some incomplete [capaths] worked, that should not have.
    These may now break authentication in some cross-realm
    configurations. (CVE-2017-6594)
- Version 7.2.0
  - Bug fixes
    + Portability improvements.
    + More strict parsing of encoded URI components in HTTP KDC.
    + Fixed memory leak in malloc error recovery in NTLM GSSAPI
    mechanism.
    + Avoid overly specific CPU info in krb5-config in aid of
    reproducible builds.
    + Don't do AFS string-to-key tests when feature is disabled.
    + Skip mdb_stat test when the command is not available.
    + Windows: update SHA2 timestamp server.
    + hdb: add missing export
    hdb_generate_key_set_password_with_ks_tuple.
    + Fix signature of hdb_generate_key_set_password().
    + Windows: enable KX509 support in the KDC.
    + kdc: fix kx509 service principal match.
    + iprop: handle case where master sends nothing new.
    + ipropd-slave: fix incorrect error codes.
    + Allow choice of sqlite for HDB pref.
    + check-iprop: don't fail to kill daemons.
    + roken: pidfile -&gt; rk_pidfile.
    + kdc: _kdc_do_kx509 fix use after free error.
    + Do not detect x32 as 64-bit platform.
    + No sys/ttydefaults.h on CYGWIN.
    + Fix check-iprop races.
    + roken_detach_prep() close pipe.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1501761600">- Update to version 7.4.0
  - Security
  - Fix CVE-2017-11103: Orpheus' Lyre KDC-REP service name
    validation.
    This is a critical vulnerability.
    In _krb5_extract_ticket() the KDC-REP service name must be
    obtained from encrypted version stored in 'enc_part' instead
    of the unencrypted version stored in 'ticket'.
    Use of the unecrypted version provides an opportunity for
    successful server impersonation and other attacks.
    Identified by Jeffrey Altman, Viktor Duchovni and
    Nico Williams.
    See https://www.orpheus-lyre.info/ for more details.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1512648000">- Added Avoid_NULL_structure_pointer_member_dereference.patch,
  fixes (bsc#1071675).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1514548800">- Update to version 7.5.0
  - Security
  - Fix CVE-2017-17439, which is a remote denial of service
    vulnerability:
    In Heimdal 7.1 through 7.4, remote unauthenticated attackers
    are able to crash the KDC by sending a crafted UDP packet
    containing empty data fields for client name or realm.
  - Bug fixes
  - Handle long input lines when reloading database dumps.
  - In pre-forked mode (default on Unix), correctly clear the
    process ids of exited children, allowing new child processes
    to replace the old.
  - Fixed incorrect KDC response when no-cross realm TGT exists,
    allowing client requests to fail quickly rather than time
    out after trying to get a correct answer from each KDC.
- Fixed heimdal-patched.diff.
- Removed Avoid_NULL_structure_pointer_member_dereference.patch,
  fixed upstream.</changelog>
  <changelog author="bwiedemann@suse.com" date="1533643200">- Add reproducible.patch to override build date (boo#1047218)
- Use constant hostname (boo#1084909)</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1561291200">- Update to version 7.7.0
  + Bug fixes:
  - PKCS#11 hcrypto back-end:
    + initialize the p11_module_load function list
    + verify that not only is a mechanism present but that its
    mechanism info states that it offers the required
    encryption, decryption or digest services
  - krb5:
    + Starting with 7.6, Heimdal permitted requesting
    authenticated anonymous tickets. However, it did not
    verify that a KDC in fact returned an anonymous ticket
    when one was requested.
    + Cease setting the KDCOption reaquest_anonymous flag when
    issuing S4UProxy (constrained delegation) TGS requests.
    + when the Win2K PKINIT compatibility option is set, do not
    require krbtgt otherName to match when validating KDC
    certificate.
    + set PKINIT_BTMM flag per Apple implementation
    + use memset_s() instead of memset()
  - kdc:
    + When generating KRB5SignedPath in the AS, use the reply
    client name rather than the one from the request, so
    validation will work correctly in the TGS.
    + allow checksum of PA-FOR-USER to be HMAC_MD5. Even if TGT
    used an enctype with a different checksum. Per [MS-SFU]
    2.2.1 PA-FOR-USER the checksum is always HMAC_MD5, and
    that's what Windows and MIT clients send.
    In Heimdal both the client and kdc use instead the
    checksum of the TGT, and therefore work with each other
    but Windows and MIT clients fail against Heimdal KDC.
    Both Windows and MIT KDC would allow any keyed checksum
    to be used so Heimdal client work fine against it.
    Change Heimdal KDC to allow HMAC_MD5 even for non RC4
    based TGT in order to support per-spec clients.
    + use memset_s() instead of memset()
    + Detect Heimdal 1.0 through 7.6 clients that issue
    S4UProxy (constrained delegation) TGS Requests with the
    request anonymous flag set. These requests will be
    treated as S4UProxy requests and not anonymous requests.
  - HDB:
    + Set SQLite3 backend default page size to 8KB.
    + Add hdb_set_sync() method
  - kadmind:
    + disable HDB sync during database load avoiding
    unnecessary disk i/o.
  - ipropd:
    + disable HDB sync during receive_everything. Doing an
    fsync per-record when receiving the complete HDB is a
    performance disaster. Among other things, if the HDB is
    very large, then one slave receving a full HDB can cause
    other slaves to timeout and, if HDB write activity is
    high enough to cause iprop log truncation, then also need
    full syncs, which leads to a cycle of full syncs for all
    slaves until HDB write activity drops.
    Allowing the iprop log to be larger helps, but improving
    receive_everything() performance helps even more.
  - kinit:
    + Anonymous PKINIT tickets discard the realm information
    used to locate the issuing AS. Store the issuing realm in
    the credentials cache in order to locate a KDC which can
    renew them.
    + Do not leak the result of krb5_cc_get_config() when
    determining anonymous PKINIT start realm.
  - klist:
    + Show transited-policy-checked, ok-as-delegate and
    anonymous flags when listing credentials.
  - tests:
    + Regenerate certs so that they expire before the 2038
    armageddon so the test suite will pass on 32-bit
    operating systems until the underlying issues can be
    resolved.
  - Solaris:
    + Define _STDC_C11_BCI for memset_s prototype
  - build tooling:
    + Convert from python 2 to python 3
  - documentation:
    + rename verify-password to verify-password-quality
    + hprop default mode is encrypt
    + kadmind "all" permission does not include "get-keys"
    + verify-password-quality might not be stateless
- Version 7.6.0
  + Security (#555):
  - CVE-2018-16860 Heimdal KDC: Reject PA-S4U2Self with unkeyed
    checksum
    When the Heimdal KDC checks the checksum that is placed on
    the S4U2Self packet by the server to protect the requested
    principal against modification, it does not confirm that
    the checksum algorithm that protects the user name
    (principal) in the request is keyed. This allows a
    man-in-the-middle attacker who can intercept the request to
    the KDC to modify the packet by replacing the user name
    (principal) in the request with any desired user name
    (principal) that exists in the KDC and replace the checksum
    protecting that name with a CRC32 checksum (which requires
    no prior knowledge to compute).
    This would allow a S4U2Self ticket requested on behalf of
    user name (principal) user@EXAMPLE.COM to any service to be
    changed to a S4U2Self ticket with a user name (principal) of
    Administrator@EXAMPLE.COM. This ticket would then contain
    the PAC of the modified user name (principal).
  - CVE-2019-12098, client-only:
    RFC8062 Section 7 requires verification of the PA-PKINIT-KX
    key exchange when anonymous PKINIT is used. Failure to do
    so can permit an active attacker to become a
    man-in-the-middle.
  + Bug fixes:
  - Happy eyeballs: Don't wait for responses from
    known-unreachable KDCs.
  - kdc:
    + check return copy_Realm, copy_PrincipalName,
    copy_EncryptionKey
  - kinit:
    + cleanup temporary ccaches
    + see man page for "kinit --anonymous" command line syntax
    change
  - kdc:
    + Make anonymous AS-requests more RFC8062-compliant.
    Updated expired test certificates
  - Solaris:
    + PKCS#11 hcrypto backend broken since 7.0.1
    + Building with Sun Pro C
  + Features:
  - kuser: support authenticated anonymous AS-REQs in kinit
  - kdc: support for anonymous TGS-REQs
  - kgetcred support for anonymous service tickets
  - Support builds with OpenSSL 1.1.1
- fixed heimdal-patched.diff and reproducible.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1653480000">- Apply Shared Library Packaging Policy and resolve rpmlint
  errors like "libheimdal.x86_64: E: shlib-policy-name-error
  SONAME: libasn1.so.8, expected package suffix: 8"</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656417600">- Add heimdal-7.7.0-autoconf-2.70.patch: Fix build with autoconf
  2.70 (gh#heimdal/heimdal#856).</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656590400">- Add ldconfig scriptlets.
- Fix 'Conflicts:' tags.
- Remove obsolete macros and conditionals.
- Ran spec-cleaner.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1671624000">- Update to version 7.8.0
  + This release includes both the Heimdal 7.7.1 Security
    Vulnerability fixes and non-Security bug fixes/improvements.
  + Security Vulnerabilities:
  - CVE-2022-42898 PAC parse integer overflows
  - CVE-2022-3437 Overflows and non-constant time leaks in
    DES{,3} and arcfour
  - CVE-2022-41916 Fix Unicode normalization read of 1 bytes past
    end of array
  - CVE-2021-44758 A null pointer de-reference DoS in SPNEGO
    acceptors
  - CVE-2021-3671 A null pointer de-reference when handling
    missing sname in TGS-REQ
  - CVE-2022-44640 Heimdal KDC: invalid free in ASN.1 codec
    Note that CVE-2022-44640 is a severe vulnerability,
    possibly a 10.0 on the Common Vulnerability Scoring
    System (CVSS) v3, as we believe it should be possible to
    get an RCE on a KDC, which means that credentials can be
    compromised that can be used to impersonate anyone in a
    realm or forest of realms.
    Heimdal's ASN.1 compiler generates code that allows
    specially crafted DER encodings of CHOICEs to invoke the
    wrong free function on the decoded structure upon decode
    error. This is known to impact the Heimdal KDC, leading to
    an invalid free() of an address partly or wholly under the
    control of the attacker, in turn leading to a potential
    remote code execution (RCE) vulnerability.
    This error affects the DER codec for all extensible CHOICE
    types used in Heimdal, though not all cases will be
    exploitable. We have not completed a thorough analysis of
    all the Heimdal components affected, thus the Kerberos
    client, the X.509 library, and other parts, may be affected
    as well.
    This bug has been in Heimdal's ASN.1 compiler since 2005,
    but it may only affect Heimdal 1.6 and up. It was first
    reported by Douglas Bagnall, though it had been found
    independently by the Heimdal maintainers via fuzzing a few
    weeks earlier.
    While no zero-day exploit is known, such an exploit will
    likely be available soon after public disclosure.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  + Other changes:
  - Bugs found by UBSAN (including the incorrect encoding of
    unconstrained INTEGER value -1).
  - Errors found by the LLVM scan-build static analyzer.
  - Errors found by the valgrind memory debugger.
  - Work around GCC Bug 95189 (memcmp wrongly stripped like
    strcmp).
  - Correct ASN.1 OID typo for SHA-384
  - Fix a deadlock in in the MEMORY ccache type.
  - TGS: strip forwardable and proxiable flags if the server is
    disallowed.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  - Incremental HDB propagation improvements
    Refactor send_diffs making it progressive
    Handle partial writes on non-blocking sockets
    Disable Nagle in iprop master and slave
    Use async I/O
    Don't send I_HAVE in response to AYT
    Do not recover log in kadm5_get_principal()
    Don't send diffs to slaves with not yet known version
    Don't stutter in send_diffs
  - Optional backwards-compatible anon-pkinit behavior
- Removed heimdal-7.7.0-autoconf-2.70.patch, fixed upstream.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1673352000">- replace libheimdal conflicts by obsoletes / provides to provide a
  smooth update in the new libheimdal-devel.</changelog>
</package>
<package pkgid="42dc1658dafd42edf9dcb74d5dc996aa4594fd687a7ebfea13c7f07a58c31796" name="libkadm5clnt7" arch="x86_64">
  <version epoch="0" ver="7.8.0" rel="bp154.2.4.1"/>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1440936000">- Initial package, version 1.6rc2
- Added patch heimdal-version-script-client.map.patch to add file
  version-script-client.map (File is present in git for tag 1.6rc2
  but missing in tarball).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441108800">- Some changes in spec file to enable build for SLES.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441195200">- Added Conflicts tags to spec file because devel package conflicts
  with krb5-devel and krb5-mini-devel.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441454400">- Added a patched instead of the original tarball because only
  shared libraries will be build and source files of these (not to
  be build) programs have problematic licenses.
- Added script heimdal-patch-source.sh to sources.
- Added patch heimdal-patched.diff that fixes configure.ac and
  several Makefile.am files to successfully build patched source.
- Removed unneeded dependencies in spec file for build.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1483790400">- Update to version 7.1.0
- Removed heimdal-version-script-client.map.patch, fixed upstream.
- Fixed heimdal-patched.diff.
- Unfortunately there is no updated changelog file in tarball,
  changes can be seen in source code version control systems
  history log.</changelog>
  <changelog author="jengelh@inai.de" date="1486036800">- Summary and RPM group update. Do a direct call to ldconfig
  where possible.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1497528000">- Update to version 7.3.0
  - Security
    + Fix transit path validation. Commit f469fc6 (2010-10-02)
    inadvertently caused the previous hop realm to not be added
    to the transit path of issued tickets. This may, in some
    cases, enable bypass of capath policy in Heimdal versions 1.5
    through 7.2.
    Note, this may break sites that rely on the bug. With the bug
    some incomplete [capaths] worked, that should not have.
    These may now break authentication in some cross-realm
    configurations. (CVE-2017-6594)
- Version 7.2.0
  - Bug fixes
    + Portability improvements.
    + More strict parsing of encoded URI components in HTTP KDC.
    + Fixed memory leak in malloc error recovery in NTLM GSSAPI
    mechanism.
    + Avoid overly specific CPU info in krb5-config in aid of
    reproducible builds.
    + Don't do AFS string-to-key tests when feature is disabled.
    + Skip mdb_stat test when the command is not available.
    + Windows: update SHA2 timestamp server.
    + hdb: add missing export
    hdb_generate_key_set_password_with_ks_tuple.
    + Fix signature of hdb_generate_key_set_password().
    + Windows: enable KX509 support in the KDC.
    + kdc: fix kx509 service principal match.
    + iprop: handle case where master sends nothing new.
    + ipropd-slave: fix incorrect error codes.
    + Allow choice of sqlite for HDB pref.
    + check-iprop: don't fail to kill daemons.
    + roken: pidfile -&gt; rk_pidfile.
    + kdc: _kdc_do_kx509 fix use after free error.
    + Do not detect x32 as 64-bit platform.
    + No sys/ttydefaults.h on CYGWIN.
    + Fix check-iprop races.
    + roken_detach_prep() close pipe.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1501761600">- Update to version 7.4.0
  - Security
  - Fix CVE-2017-11103: Orpheus' Lyre KDC-REP service name
    validation.
    This is a critical vulnerability.
    In _krb5_extract_ticket() the KDC-REP service name must be
    obtained from encrypted version stored in 'enc_part' instead
    of the unencrypted version stored in 'ticket'.
    Use of the unecrypted version provides an opportunity for
    successful server impersonation and other attacks.
    Identified by Jeffrey Altman, Viktor Duchovni and
    Nico Williams.
    See https://www.orpheus-lyre.info/ for more details.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1512648000">- Added Avoid_NULL_structure_pointer_member_dereference.patch,
  fixes (bsc#1071675).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1514548800">- Update to version 7.5.0
  - Security
  - Fix CVE-2017-17439, which is a remote denial of service
    vulnerability:
    In Heimdal 7.1 through 7.4, remote unauthenticated attackers
    are able to crash the KDC by sending a crafted UDP packet
    containing empty data fields for client name or realm.
  - Bug fixes
  - Handle long input lines when reloading database dumps.
  - In pre-forked mode (default on Unix), correctly clear the
    process ids of exited children, allowing new child processes
    to replace the old.
  - Fixed incorrect KDC response when no-cross realm TGT exists,
    allowing client requests to fail quickly rather than time
    out after trying to get a correct answer from each KDC.
- Fixed heimdal-patched.diff.
- Removed Avoid_NULL_structure_pointer_member_dereference.patch,
  fixed upstream.</changelog>
  <changelog author="bwiedemann@suse.com" date="1533643200">- Add reproducible.patch to override build date (boo#1047218)
- Use constant hostname (boo#1084909)</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1561291200">- Update to version 7.7.0
  + Bug fixes:
  - PKCS#11 hcrypto back-end:
    + initialize the p11_module_load function list
    + verify that not only is a mechanism present but that its
    mechanism info states that it offers the required
    encryption, decryption or digest services
  - krb5:
    + Starting with 7.6, Heimdal permitted requesting
    authenticated anonymous tickets. However, it did not
    verify that a KDC in fact returned an anonymous ticket
    when one was requested.
    + Cease setting the KDCOption reaquest_anonymous flag when
    issuing S4UProxy (constrained delegation) TGS requests.
    + when the Win2K PKINIT compatibility option is set, do not
    require krbtgt otherName to match when validating KDC
    certificate.
    + set PKINIT_BTMM flag per Apple implementation
    + use memset_s() instead of memset()
  - kdc:
    + When generating KRB5SignedPath in the AS, use the reply
    client name rather than the one from the request, so
    validation will work correctly in the TGS.
    + allow checksum of PA-FOR-USER to be HMAC_MD5. Even if TGT
    used an enctype with a different checksum. Per [MS-SFU]
    2.2.1 PA-FOR-USER the checksum is always HMAC_MD5, and
    that's what Windows and MIT clients send.
    In Heimdal both the client and kdc use instead the
    checksum of the TGT, and therefore work with each other
    but Windows and MIT clients fail against Heimdal KDC.
    Both Windows and MIT KDC would allow any keyed checksum
    to be used so Heimdal client work fine against it.
    Change Heimdal KDC to allow HMAC_MD5 even for non RC4
    based TGT in order to support per-spec clients.
    + use memset_s() instead of memset()
    + Detect Heimdal 1.0 through 7.6 clients that issue
    S4UProxy (constrained delegation) TGS Requests with the
    request anonymous flag set. These requests will be
    treated as S4UProxy requests and not anonymous requests.
  - HDB:
    + Set SQLite3 backend default page size to 8KB.
    + Add hdb_set_sync() method
  - kadmind:
    + disable HDB sync during database load avoiding
    unnecessary disk i/o.
  - ipropd:
    + disable HDB sync during receive_everything. Doing an
    fsync per-record when receiving the complete HDB is a
    performance disaster. Among other things, if the HDB is
    very large, then one slave receving a full HDB can cause
    other slaves to timeout and, if HDB write activity is
    high enough to cause iprop log truncation, then also need
    full syncs, which leads to a cycle of full syncs for all
    slaves until HDB write activity drops.
    Allowing the iprop log to be larger helps, but improving
    receive_everything() performance helps even more.
  - kinit:
    + Anonymous PKINIT tickets discard the realm information
    used to locate the issuing AS. Store the issuing realm in
    the credentials cache in order to locate a KDC which can
    renew them.
    + Do not leak the result of krb5_cc_get_config() when
    determining anonymous PKINIT start realm.
  - klist:
    + Show transited-policy-checked, ok-as-delegate and
    anonymous flags when listing credentials.
  - tests:
    + Regenerate certs so that they expire before the 2038
    armageddon so the test suite will pass on 32-bit
    operating systems until the underlying issues can be
    resolved.
  - Solaris:
    + Define _STDC_C11_BCI for memset_s prototype
  - build tooling:
    + Convert from python 2 to python 3
  - documentation:
    + rename verify-password to verify-password-quality
    + hprop default mode is encrypt
    + kadmind "all" permission does not include "get-keys"
    + verify-password-quality might not be stateless
- Version 7.6.0
  + Security (#555):
  - CVE-2018-16860 Heimdal KDC: Reject PA-S4U2Self with unkeyed
    checksum
    When the Heimdal KDC checks the checksum that is placed on
    the S4U2Self packet by the server to protect the requested
    principal against modification, it does not confirm that
    the checksum algorithm that protects the user name
    (principal) in the request is keyed. This allows a
    man-in-the-middle attacker who can intercept the request to
    the KDC to modify the packet by replacing the user name
    (principal) in the request with any desired user name
    (principal) that exists in the KDC and replace the checksum
    protecting that name with a CRC32 checksum (which requires
    no prior knowledge to compute).
    This would allow a S4U2Self ticket requested on behalf of
    user name (principal) user@EXAMPLE.COM to any service to be
    changed to a S4U2Self ticket with a user name (principal) of
    Administrator@EXAMPLE.COM. This ticket would then contain
    the PAC of the modified user name (principal).
  - CVE-2019-12098, client-only:
    RFC8062 Section 7 requires verification of the PA-PKINIT-KX
    key exchange when anonymous PKINIT is used. Failure to do
    so can permit an active attacker to become a
    man-in-the-middle.
  + Bug fixes:
  - Happy eyeballs: Don't wait for responses from
    known-unreachable KDCs.
  - kdc:
    + check return copy_Realm, copy_PrincipalName,
    copy_EncryptionKey
  - kinit:
    + cleanup temporary ccaches
    + see man page for "kinit --anonymous" command line syntax
    change
  - kdc:
    + Make anonymous AS-requests more RFC8062-compliant.
    Updated expired test certificates
  - Solaris:
    + PKCS#11 hcrypto backend broken since 7.0.1
    + Building with Sun Pro C
  + Features:
  - kuser: support authenticated anonymous AS-REQs in kinit
  - kdc: support for anonymous TGS-REQs
  - kgetcred support for anonymous service tickets
  - Support builds with OpenSSL 1.1.1
- fixed heimdal-patched.diff and reproducible.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1653480000">- Apply Shared Library Packaging Policy and resolve rpmlint
  errors like "libheimdal.x86_64: E: shlib-policy-name-error
  SONAME: libasn1.so.8, expected package suffix: 8"</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656417600">- Add heimdal-7.7.0-autoconf-2.70.patch: Fix build with autoconf
  2.70 (gh#heimdal/heimdal#856).</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656590400">- Add ldconfig scriptlets.
- Fix 'Conflicts:' tags.
- Remove obsolete macros and conditionals.
- Ran spec-cleaner.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1671624000">- Update to version 7.8.0
  + This release includes both the Heimdal 7.7.1 Security
    Vulnerability fixes and non-Security bug fixes/improvements.
  + Security Vulnerabilities:
  - CVE-2022-42898 PAC parse integer overflows
  - CVE-2022-3437 Overflows and non-constant time leaks in
    DES{,3} and arcfour
  - CVE-2022-41916 Fix Unicode normalization read of 1 bytes past
    end of array
  - CVE-2021-44758 A null pointer de-reference DoS in SPNEGO
    acceptors
  - CVE-2021-3671 A null pointer de-reference when handling
    missing sname in TGS-REQ
  - CVE-2022-44640 Heimdal KDC: invalid free in ASN.1 codec
    Note that CVE-2022-44640 is a severe vulnerability,
    possibly a 10.0 on the Common Vulnerability Scoring
    System (CVSS) v3, as we believe it should be possible to
    get an RCE on a KDC, which means that credentials can be
    compromised that can be used to impersonate anyone in a
    realm or forest of realms.
    Heimdal's ASN.1 compiler generates code that allows
    specially crafted DER encodings of CHOICEs to invoke the
    wrong free function on the decoded structure upon decode
    error. This is known to impact the Heimdal KDC, leading to
    an invalid free() of an address partly or wholly under the
    control of the attacker, in turn leading to a potential
    remote code execution (RCE) vulnerability.
    This error affects the DER codec for all extensible CHOICE
    types used in Heimdal, though not all cases will be
    exploitable. We have not completed a thorough analysis of
    all the Heimdal components affected, thus the Kerberos
    client, the X.509 library, and other parts, may be affected
    as well.
    This bug has been in Heimdal's ASN.1 compiler since 2005,
    but it may only affect Heimdal 1.6 and up. It was first
    reported by Douglas Bagnall, though it had been found
    independently by the Heimdal maintainers via fuzzing a few
    weeks earlier.
    While no zero-day exploit is known, such an exploit will
    likely be available soon after public disclosure.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  + Other changes:
  - Bugs found by UBSAN (including the incorrect encoding of
    unconstrained INTEGER value -1).
  - Errors found by the LLVM scan-build static analyzer.
  - Errors found by the valgrind memory debugger.
  - Work around GCC Bug 95189 (memcmp wrongly stripped like
    strcmp).
  - Correct ASN.1 OID typo for SHA-384
  - Fix a deadlock in in the MEMORY ccache type.
  - TGS: strip forwardable and proxiable flags if the server is
    disallowed.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  - Incremental HDB propagation improvements
    Refactor send_diffs making it progressive
    Handle partial writes on non-blocking sockets
    Disable Nagle in iprop master and slave
    Use async I/O
    Don't send I_HAVE in response to AYT
    Do not recover log in kadm5_get_principal()
    Don't send diffs to slaves with not yet known version
    Don't stutter in send_diffs
  - Optional backwards-compatible anon-pkinit behavior
- Removed heimdal-7.7.0-autoconf-2.70.patch, fixed upstream.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1673352000">- replace libheimdal conflicts by obsoletes / provides to provide a
  smooth update in the new libheimdal-devel.</changelog>
</package>
<package pkgid="1951aa047045c3c4fa4dde9b15392f5d824e169e65f1b4692d5efb9da7e7014e" name="libkadm5srv8" arch="aarch64">
  <version epoch="0" ver="7.8.0" rel="bp154.2.4.1"/>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1440936000">- Initial package, version 1.6rc2
- Added patch heimdal-version-script-client.map.patch to add file
  version-script-client.map (File is present in git for tag 1.6rc2
  but missing in tarball).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441108800">- Some changes in spec file to enable build for SLES.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441195200">- Added Conflicts tags to spec file because devel package conflicts
  with krb5-devel and krb5-mini-devel.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441454400">- Added a patched instead of the original tarball because only
  shared libraries will be build and source files of these (not to
  be build) programs have problematic licenses.
- Added script heimdal-patch-source.sh to sources.
- Added patch heimdal-patched.diff that fixes configure.ac and
  several Makefile.am files to successfully build patched source.
- Removed unneeded dependencies in spec file for build.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1483790400">- Update to version 7.1.0
- Removed heimdal-version-script-client.map.patch, fixed upstream.
- Fixed heimdal-patched.diff.
- Unfortunately there is no updated changelog file in tarball,
  changes can be seen in source code version control systems
  history log.</changelog>
  <changelog author="jengelh@inai.de" date="1486036800">- Summary and RPM group update. Do a direct call to ldconfig
  where possible.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1497528000">- Update to version 7.3.0
  - Security
    + Fix transit path validation. Commit f469fc6 (2010-10-02)
    inadvertently caused the previous hop realm to not be added
    to the transit path of issued tickets. This may, in some
    cases, enable bypass of capath policy in Heimdal versions 1.5
    through 7.2.
    Note, this may break sites that rely on the bug. With the bug
    some incomplete [capaths] worked, that should not have.
    These may now break authentication in some cross-realm
    configurations. (CVE-2017-6594)
- Version 7.2.0
  - Bug fixes
    + Portability improvements.
    + More strict parsing of encoded URI components in HTTP KDC.
    + Fixed memory leak in malloc error recovery in NTLM GSSAPI
    mechanism.
    + Avoid overly specific CPU info in krb5-config in aid of
    reproducible builds.
    + Don't do AFS string-to-key tests when feature is disabled.
    + Skip mdb_stat test when the command is not available.
    + Windows: update SHA2 timestamp server.
    + hdb: add missing export
    hdb_generate_key_set_password_with_ks_tuple.
    + Fix signature of hdb_generate_key_set_password().
    + Windows: enable KX509 support in the KDC.
    + kdc: fix kx509 service principal match.
    + iprop: handle case where master sends nothing new.
    + ipropd-slave: fix incorrect error codes.
    + Allow choice of sqlite for HDB pref.
    + check-iprop: don't fail to kill daemons.
    + roken: pidfile -&gt; rk_pidfile.
    + kdc: _kdc_do_kx509 fix use after free error.
    + Do not detect x32 as 64-bit platform.
    + No sys/ttydefaults.h on CYGWIN.
    + Fix check-iprop races.
    + roken_detach_prep() close pipe.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1501761600">- Update to version 7.4.0
  - Security
  - Fix CVE-2017-11103: Orpheus' Lyre KDC-REP service name
    validation.
    This is a critical vulnerability.
    In _krb5_extract_ticket() the KDC-REP service name must be
    obtained from encrypted version stored in 'enc_part' instead
    of the unencrypted version stored in 'ticket'.
    Use of the unecrypted version provides an opportunity for
    successful server impersonation and other attacks.
    Identified by Jeffrey Altman, Viktor Duchovni and
    Nico Williams.
    See https://www.orpheus-lyre.info/ for more details.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1512648000">- Added Avoid_NULL_structure_pointer_member_dereference.patch,
  fixes (bsc#1071675).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1514548800">- Update to version 7.5.0
  - Security
  - Fix CVE-2017-17439, which is a remote denial of service
    vulnerability:
    In Heimdal 7.1 through 7.4, remote unauthenticated attackers
    are able to crash the KDC by sending a crafted UDP packet
    containing empty data fields for client name or realm.
  - Bug fixes
  - Handle long input lines when reloading database dumps.
  - In pre-forked mode (default on Unix), correctly clear the
    process ids of exited children, allowing new child processes
    to replace the old.
  - Fixed incorrect KDC response when no-cross realm TGT exists,
    allowing client requests to fail quickly rather than time
    out after trying to get a correct answer from each KDC.
- Fixed heimdal-patched.diff.
- Removed Avoid_NULL_structure_pointer_member_dereference.patch,
  fixed upstream.</changelog>
  <changelog author="bwiedemann@suse.com" date="1533643200">- Add reproducible.patch to override build date (boo#1047218)
- Use constant hostname (boo#1084909)</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1561291200">- Update to version 7.7.0
  + Bug fixes:
  - PKCS#11 hcrypto back-end:
    + initialize the p11_module_load function list
    + verify that not only is a mechanism present but that its
    mechanism info states that it offers the required
    encryption, decryption or digest services
  - krb5:
    + Starting with 7.6, Heimdal permitted requesting
    authenticated anonymous tickets. However, it did not
    verify that a KDC in fact returned an anonymous ticket
    when one was requested.
    + Cease setting the KDCOption reaquest_anonymous flag when
    issuing S4UProxy (constrained delegation) TGS requests.
    + when the Win2K PKINIT compatibility option is set, do not
    require krbtgt otherName to match when validating KDC
    certificate.
    + set PKINIT_BTMM flag per Apple implementation
    + use memset_s() instead of memset()
  - kdc:
    + When generating KRB5SignedPath in the AS, use the reply
    client name rather than the one from the request, so
    validation will work correctly in the TGS.
    + allow checksum of PA-FOR-USER to be HMAC_MD5. Even if TGT
    used an enctype with a different checksum. Per [MS-SFU]
    2.2.1 PA-FOR-USER the checksum is always HMAC_MD5, and
    that's what Windows and MIT clients send.
    In Heimdal both the client and kdc use instead the
    checksum of the TGT, and therefore work with each other
    but Windows and MIT clients fail against Heimdal KDC.
    Both Windows and MIT KDC would allow any keyed checksum
    to be used so Heimdal client work fine against it.
    Change Heimdal KDC to allow HMAC_MD5 even for non RC4
    based TGT in order to support per-spec clients.
    + use memset_s() instead of memset()
    + Detect Heimdal 1.0 through 7.6 clients that issue
    S4UProxy (constrained delegation) TGS Requests with the
    request anonymous flag set. These requests will be
    treated as S4UProxy requests and not anonymous requests.
  - HDB:
    + Set SQLite3 backend default page size to 8KB.
    + Add hdb_set_sync() method
  - kadmind:
    + disable HDB sync during database load avoiding
    unnecessary disk i/o.
  - ipropd:
    + disable HDB sync during receive_everything. Doing an
    fsync per-record when receiving the complete HDB is a
    performance disaster. Among other things, if the HDB is
    very large, then one slave receving a full HDB can cause
    other slaves to timeout and, if HDB write activity is
    high enough to cause iprop log truncation, then also need
    full syncs, which leads to a cycle of full syncs for all
    slaves until HDB write activity drops.
    Allowing the iprop log to be larger helps, but improving
    receive_everything() performance helps even more.
  - kinit:
    + Anonymous PKINIT tickets discard the realm information
    used to locate the issuing AS. Store the issuing realm in
    the credentials cache in order to locate a KDC which can
    renew them.
    + Do not leak the result of krb5_cc_get_config() when
    determining anonymous PKINIT start realm.
  - klist:
    + Show transited-policy-checked, ok-as-delegate and
    anonymous flags when listing credentials.
  - tests:
    + Regenerate certs so that they expire before the 2038
    armageddon so the test suite will pass on 32-bit
    operating systems until the underlying issues can be
    resolved.
  - Solaris:
    + Define _STDC_C11_BCI for memset_s prototype
  - build tooling:
    + Convert from python 2 to python 3
  - documentation:
    + rename verify-password to verify-password-quality
    + hprop default mode is encrypt
    + kadmind "all" permission does not include "get-keys"
    + verify-password-quality might not be stateless
- Version 7.6.0
  + Security (#555):
  - CVE-2018-16860 Heimdal KDC: Reject PA-S4U2Self with unkeyed
    checksum
    When the Heimdal KDC checks the checksum that is placed on
    the S4U2Self packet by the server to protect the requested
    principal against modification, it does not confirm that
    the checksum algorithm that protects the user name
    (principal) in the request is keyed. This allows a
    man-in-the-middle attacker who can intercept the request to
    the KDC to modify the packet by replacing the user name
    (principal) in the request with any desired user name
    (principal) that exists in the KDC and replace the checksum
    protecting that name with a CRC32 checksum (which requires
    no prior knowledge to compute).
    This would allow a S4U2Self ticket requested on behalf of
    user name (principal) user@EXAMPLE.COM to any service to be
    changed to a S4U2Self ticket with a user name (principal) of
    Administrator@EXAMPLE.COM. This ticket would then contain
    the PAC of the modified user name (principal).
  - CVE-2019-12098, client-only:
    RFC8062 Section 7 requires verification of the PA-PKINIT-KX
    key exchange when anonymous PKINIT is used. Failure to do
    so can permit an active attacker to become a
    man-in-the-middle.
  + Bug fixes:
  - Happy eyeballs: Don't wait for responses from
    known-unreachable KDCs.
  - kdc:
    + check return copy_Realm, copy_PrincipalName,
    copy_EncryptionKey
  - kinit:
    + cleanup temporary ccaches
    + see man page for "kinit --anonymous" command line syntax
    change
  - kdc:
    + Make anonymous AS-requests more RFC8062-compliant.
    Updated expired test certificates
  - Solaris:
    + PKCS#11 hcrypto backend broken since 7.0.1
    + Building with Sun Pro C
  + Features:
  - kuser: support authenticated anonymous AS-REQs in kinit
  - kdc: support for anonymous TGS-REQs
  - kgetcred support for anonymous service tickets
  - Support builds with OpenSSL 1.1.1
- fixed heimdal-patched.diff and reproducible.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1653480000">- Apply Shared Library Packaging Policy and resolve rpmlint
  errors like "libheimdal.x86_64: E: shlib-policy-name-error
  SONAME: libasn1.so.8, expected package suffix: 8"</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656417600">- Add heimdal-7.7.0-autoconf-2.70.patch: Fix build with autoconf
  2.70 (gh#heimdal/heimdal#856).</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656590400">- Add ldconfig scriptlets.
- Fix 'Conflicts:' tags.
- Remove obsolete macros and conditionals.
- Ran spec-cleaner.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1671624000">- Update to version 7.8.0
  + This release includes both the Heimdal 7.7.1 Security
    Vulnerability fixes and non-Security bug fixes/improvements.
  + Security Vulnerabilities:
  - CVE-2022-42898 PAC parse integer overflows
  - CVE-2022-3437 Overflows and non-constant time leaks in
    DES{,3} and arcfour
  - CVE-2022-41916 Fix Unicode normalization read of 1 bytes past
    end of array
  - CVE-2021-44758 A null pointer de-reference DoS in SPNEGO
    acceptors
  - CVE-2021-3671 A null pointer de-reference when handling
    missing sname in TGS-REQ
  - CVE-2022-44640 Heimdal KDC: invalid free in ASN.1 codec
    Note that CVE-2022-44640 is a severe vulnerability,
    possibly a 10.0 on the Common Vulnerability Scoring
    System (CVSS) v3, as we believe it should be possible to
    get an RCE on a KDC, which means that credentials can be
    compromised that can be used to impersonate anyone in a
    realm or forest of realms.
    Heimdal's ASN.1 compiler generates code that allows
    specially crafted DER encodings of CHOICEs to invoke the
    wrong free function on the decoded structure upon decode
    error. This is known to impact the Heimdal KDC, leading to
    an invalid free() of an address partly or wholly under the
    control of the attacker, in turn leading to a potential
    remote code execution (RCE) vulnerability.
    This error affects the DER codec for all extensible CHOICE
    types used in Heimdal, though not all cases will be
    exploitable. We have not completed a thorough analysis of
    all the Heimdal components affected, thus the Kerberos
    client, the X.509 library, and other parts, may be affected
    as well.
    This bug has been in Heimdal's ASN.1 compiler since 2005,
    but it may only affect Heimdal 1.6 and up. It was first
    reported by Douglas Bagnall, though it had been found
    independently by the Heimdal maintainers via fuzzing a few
    weeks earlier.
    While no zero-day exploit is known, such an exploit will
    likely be available soon after public disclosure.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  + Other changes:
  - Bugs found by UBSAN (including the incorrect encoding of
    unconstrained INTEGER value -1).
  - Errors found by the LLVM scan-build static analyzer.
  - Errors found by the valgrind memory debugger.
  - Work around GCC Bug 95189 (memcmp wrongly stripped like
    strcmp).
  - Correct ASN.1 OID typo for SHA-384
  - Fix a deadlock in in the MEMORY ccache type.
  - TGS: strip forwardable and proxiable flags if the server is
    disallowed.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  - Incremental HDB propagation improvements
    Refactor send_diffs making it progressive
    Handle partial writes on non-blocking sockets
    Disable Nagle in iprop master and slave
    Use async I/O
    Don't send I_HAVE in response to AYT
    Do not recover log in kadm5_get_principal()
    Don't send diffs to slaves with not yet known version
    Don't stutter in send_diffs
  - Optional backwards-compatible anon-pkinit behavior
- Removed heimdal-7.7.0-autoconf-2.70.patch, fixed upstream.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1673352000">- replace libheimdal conflicts by obsoletes / provides to provide a
  smooth update in the new libheimdal-devel.</changelog>
</package>
<package pkgid="8eede48af5042067bf22eeababec49a21c1f18dae85bcc9f69350873db266082" name="libkadm5srv8" arch="i586">
  <version epoch="0" ver="7.8.0" rel="bp154.2.4.1"/>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1440936000">- Initial package, version 1.6rc2
- Added patch heimdal-version-script-client.map.patch to add file
  version-script-client.map (File is present in git for tag 1.6rc2
  but missing in tarball).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441108800">- Some changes in spec file to enable build for SLES.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441195200">- Added Conflicts tags to spec file because devel package conflicts
  with krb5-devel and krb5-mini-devel.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441454400">- Added a patched instead of the original tarball because only
  shared libraries will be build and source files of these (not to
  be build) programs have problematic licenses.
- Added script heimdal-patch-source.sh to sources.
- Added patch heimdal-patched.diff that fixes configure.ac and
  several Makefile.am files to successfully build patched source.
- Removed unneeded dependencies in spec file for build.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1483790400">- Update to version 7.1.0
- Removed heimdal-version-script-client.map.patch, fixed upstream.
- Fixed heimdal-patched.diff.
- Unfortunately there is no updated changelog file in tarball,
  changes can be seen in source code version control systems
  history log.</changelog>
  <changelog author="jengelh@inai.de" date="1486036800">- Summary and RPM group update. Do a direct call to ldconfig
  where possible.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1497528000">- Update to version 7.3.0
  - Security
    + Fix transit path validation. Commit f469fc6 (2010-10-02)
    inadvertently caused the previous hop realm to not be added
    to the transit path of issued tickets. This may, in some
    cases, enable bypass of capath policy in Heimdal versions 1.5
    through 7.2.
    Note, this may break sites that rely on the bug. With the bug
    some incomplete [capaths] worked, that should not have.
    These may now break authentication in some cross-realm
    configurations. (CVE-2017-6594)
- Version 7.2.0
  - Bug fixes
    + Portability improvements.
    + More strict parsing of encoded URI components in HTTP KDC.
    + Fixed memory leak in malloc error recovery in NTLM GSSAPI
    mechanism.
    + Avoid overly specific CPU info in krb5-config in aid of
    reproducible builds.
    + Don't do AFS string-to-key tests when feature is disabled.
    + Skip mdb_stat test when the command is not available.
    + Windows: update SHA2 timestamp server.
    + hdb: add missing export
    hdb_generate_key_set_password_with_ks_tuple.
    + Fix signature of hdb_generate_key_set_password().
    + Windows: enable KX509 support in the KDC.
    + kdc: fix kx509 service principal match.
    + iprop: handle case where master sends nothing new.
    + ipropd-slave: fix incorrect error codes.
    + Allow choice of sqlite for HDB pref.
    + check-iprop: don't fail to kill daemons.
    + roken: pidfile -&gt; rk_pidfile.
    + kdc: _kdc_do_kx509 fix use after free error.
    + Do not detect x32 as 64-bit platform.
    + No sys/ttydefaults.h on CYGWIN.
    + Fix check-iprop races.
    + roken_detach_prep() close pipe.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1501761600">- Update to version 7.4.0
  - Security
  - Fix CVE-2017-11103: Orpheus' Lyre KDC-REP service name
    validation.
    This is a critical vulnerability.
    In _krb5_extract_ticket() the KDC-REP service name must be
    obtained from encrypted version stored in 'enc_part' instead
    of the unencrypted version stored in 'ticket'.
    Use of the unecrypted version provides an opportunity for
    successful server impersonation and other attacks.
    Identified by Jeffrey Altman, Viktor Duchovni and
    Nico Williams.
    See https://www.orpheus-lyre.info/ for more details.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1512648000">- Added Avoid_NULL_structure_pointer_member_dereference.patch,
  fixes (bsc#1071675).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1514548800">- Update to version 7.5.0
  - Security
  - Fix CVE-2017-17439, which is a remote denial of service
    vulnerability:
    In Heimdal 7.1 through 7.4, remote unauthenticated attackers
    are able to crash the KDC by sending a crafted UDP packet
    containing empty data fields for client name or realm.
  - Bug fixes
  - Handle long input lines when reloading database dumps.
  - In pre-forked mode (default on Unix), correctly clear the
    process ids of exited children, allowing new child processes
    to replace the old.
  - Fixed incorrect KDC response when no-cross realm TGT exists,
    allowing client requests to fail quickly rather than time
    out after trying to get a correct answer from each KDC.
- Fixed heimdal-patched.diff.
- Removed Avoid_NULL_structure_pointer_member_dereference.patch,
  fixed upstream.</changelog>
  <changelog author="bwiedemann@suse.com" date="1533643200">- Add reproducible.patch to override build date (boo#1047218)
- Use constant hostname (boo#1084909)</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1561291200">- Update to version 7.7.0
  + Bug fixes:
  - PKCS#11 hcrypto back-end:
    + initialize the p11_module_load function list
    + verify that not only is a mechanism present but that its
    mechanism info states that it offers the required
    encryption, decryption or digest services
  - krb5:
    + Starting with 7.6, Heimdal permitted requesting
    authenticated anonymous tickets. However, it did not
    verify that a KDC in fact returned an anonymous ticket
    when one was requested.
    + Cease setting the KDCOption reaquest_anonymous flag when
    issuing S4UProxy (constrained delegation) TGS requests.
    + when the Win2K PKINIT compatibility option is set, do not
    require krbtgt otherName to match when validating KDC
    certificate.
    + set PKINIT_BTMM flag per Apple implementation
    + use memset_s() instead of memset()
  - kdc:
    + When generating KRB5SignedPath in the AS, use the reply
    client name rather than the one from the request, so
    validation will work correctly in the TGS.
    + allow checksum of PA-FOR-USER to be HMAC_MD5. Even if TGT
    used an enctype with a different checksum. Per [MS-SFU]
    2.2.1 PA-FOR-USER the checksum is always HMAC_MD5, and
    that's what Windows and MIT clients send.
    In Heimdal both the client and kdc use instead the
    checksum of the TGT, and therefore work with each other
    but Windows and MIT clients fail against Heimdal KDC.
    Both Windows and MIT KDC would allow any keyed checksum
    to be used so Heimdal client work fine against it.
    Change Heimdal KDC to allow HMAC_MD5 even for non RC4
    based TGT in order to support per-spec clients.
    + use memset_s() instead of memset()
    + Detect Heimdal 1.0 through 7.6 clients that issue
    S4UProxy (constrained delegation) TGS Requests with the
    request anonymous flag set. These requests will be
    treated as S4UProxy requests and not anonymous requests.
  - HDB:
    + Set SQLite3 backend default page size to 8KB.
    + Add hdb_set_sync() method
  - kadmind:
    + disable HDB sync during database load avoiding
    unnecessary disk i/o.
  - ipropd:
    + disable HDB sync during receive_everything. Doing an
    fsync per-record when receiving the complete HDB is a
    performance disaster. Among other things, if the HDB is
    very large, then one slave receving a full HDB can cause
    other slaves to timeout and, if HDB write activity is
    high enough to cause iprop log truncation, then also need
    full syncs, which leads to a cycle of full syncs for all
    slaves until HDB write activity drops.
    Allowing the iprop log to be larger helps, but improving
    receive_everything() performance helps even more.
  - kinit:
    + Anonymous PKINIT tickets discard the realm information
    used to locate the issuing AS. Store the issuing realm in
    the credentials cache in order to locate a KDC which can
    renew them.
    + Do not leak the result of krb5_cc_get_config() when
    determining anonymous PKINIT start realm.
  - klist:
    + Show transited-policy-checked, ok-as-delegate and
    anonymous flags when listing credentials.
  - tests:
    + Regenerate certs so that they expire before the 2038
    armageddon so the test suite will pass on 32-bit
    operating systems until the underlying issues can be
    resolved.
  - Solaris:
    + Define _STDC_C11_BCI for memset_s prototype
  - build tooling:
    + Convert from python 2 to python 3
  - documentation:
    + rename verify-password to verify-password-quality
    + hprop default mode is encrypt
    + kadmind "all" permission does not include "get-keys"
    + verify-password-quality might not be stateless
- Version 7.6.0
  + Security (#555):
  - CVE-2018-16860 Heimdal KDC: Reject PA-S4U2Self with unkeyed
    checksum
    When the Heimdal KDC checks the checksum that is placed on
    the S4U2Self packet by the server to protect the requested
    principal against modification, it does not confirm that
    the checksum algorithm that protects the user name
    (principal) in the request is keyed. This allows a
    man-in-the-middle attacker who can intercept the request to
    the KDC to modify the packet by replacing the user name
    (principal) in the request with any desired user name
    (principal) that exists in the KDC and replace the checksum
    protecting that name with a CRC32 checksum (which requires
    no prior knowledge to compute).
    This would allow a S4U2Self ticket requested on behalf of
    user name (principal) user@EXAMPLE.COM to any service to be
    changed to a S4U2Self ticket with a user name (principal) of
    Administrator@EXAMPLE.COM. This ticket would then contain
    the PAC of the modified user name (principal).
  - CVE-2019-12098, client-only:
    RFC8062 Section 7 requires verification of the PA-PKINIT-KX
    key exchange when anonymous PKINIT is used. Failure to do
    so can permit an active attacker to become a
    man-in-the-middle.
  + Bug fixes:
  - Happy eyeballs: Don't wait for responses from
    known-unreachable KDCs.
  - kdc:
    + check return copy_Realm, copy_PrincipalName,
    copy_EncryptionKey
  - kinit:
    + cleanup temporary ccaches
    + see man page for "kinit --anonymous" command line syntax
    change
  - kdc:
    + Make anonymous AS-requests more RFC8062-compliant.
    Updated expired test certificates
  - Solaris:
    + PKCS#11 hcrypto backend broken since 7.0.1
    + Building with Sun Pro C
  + Features:
  - kuser: support authenticated anonymous AS-REQs in kinit
  - kdc: support for anonymous TGS-REQs
  - kgetcred support for anonymous service tickets
  - Support builds with OpenSSL 1.1.1
- fixed heimdal-patched.diff and reproducible.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1653480000">- Apply Shared Library Packaging Policy and resolve rpmlint
  errors like "libheimdal.x86_64: E: shlib-policy-name-error
  SONAME: libasn1.so.8, expected package suffix: 8"</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656417600">- Add heimdal-7.7.0-autoconf-2.70.patch: Fix build with autoconf
  2.70 (gh#heimdal/heimdal#856).</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656590400">- Add ldconfig scriptlets.
- Fix 'Conflicts:' tags.
- Remove obsolete macros and conditionals.
- Ran spec-cleaner.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1671624000">- Update to version 7.8.0
  + This release includes both the Heimdal 7.7.1 Security
    Vulnerability fixes and non-Security bug fixes/improvements.
  + Security Vulnerabilities:
  - CVE-2022-42898 PAC parse integer overflows
  - CVE-2022-3437 Overflows and non-constant time leaks in
    DES{,3} and arcfour
  - CVE-2022-41916 Fix Unicode normalization read of 1 bytes past
    end of array
  - CVE-2021-44758 A null pointer de-reference DoS in SPNEGO
    acceptors
  - CVE-2021-3671 A null pointer de-reference when handling
    missing sname in TGS-REQ
  - CVE-2022-44640 Heimdal KDC: invalid free in ASN.1 codec
    Note that CVE-2022-44640 is a severe vulnerability,
    possibly a 10.0 on the Common Vulnerability Scoring
    System (CVSS) v3, as we believe it should be possible to
    get an RCE on a KDC, which means that credentials can be
    compromised that can be used to impersonate anyone in a
    realm or forest of realms.
    Heimdal's ASN.1 compiler generates code that allows
    specially crafted DER encodings of CHOICEs to invoke the
    wrong free function on the decoded structure upon decode
    error. This is known to impact the Heimdal KDC, leading to
    an invalid free() of an address partly or wholly under the
    control of the attacker, in turn leading to a potential
    remote code execution (RCE) vulnerability.
    This error affects the DER codec for all extensible CHOICE
    types used in Heimdal, though not all cases will be
    exploitable. We have not completed a thorough analysis of
    all the Heimdal components affected, thus the Kerberos
    client, the X.509 library, and other parts, may be affected
    as well.
    This bug has been in Heimdal's ASN.1 compiler since 2005,
    but it may only affect Heimdal 1.6 and up. It was first
    reported by Douglas Bagnall, though it had been found
    independently by the Heimdal maintainers via fuzzing a few
    weeks earlier.
    While no zero-day exploit is known, such an exploit will
    likely be available soon after public disclosure.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  + Other changes:
  - Bugs found by UBSAN (including the incorrect encoding of
    unconstrained INTEGER value -1).
  - Errors found by the LLVM scan-build static analyzer.
  - Errors found by the valgrind memory debugger.
  - Work around GCC Bug 95189 (memcmp wrongly stripped like
    strcmp).
  - Correct ASN.1 OID typo for SHA-384
  - Fix a deadlock in in the MEMORY ccache type.
  - TGS: strip forwardable and proxiable flags if the server is
    disallowed.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  - Incremental HDB propagation improvements
    Refactor send_diffs making it progressive
    Handle partial writes on non-blocking sockets
    Disable Nagle in iprop master and slave
    Use async I/O
    Don't send I_HAVE in response to AYT
    Do not recover log in kadm5_get_principal()
    Don't send diffs to slaves with not yet known version
    Don't stutter in send_diffs
  - Optional backwards-compatible anon-pkinit behavior
- Removed heimdal-7.7.0-autoconf-2.70.patch, fixed upstream.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1673352000">- replace libheimdal conflicts by obsoletes / provides to provide a
  smooth update in the new libheimdal-devel.</changelog>
</package>
<package pkgid="d11072e973ff5f478bb8d00acce3a4d626da45e0743ada231648bcca3a7c2a18" name="libkadm5srv8" arch="ppc64le">
  <version epoch="0" ver="7.8.0" rel="bp154.2.4.1"/>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1440936000">- Initial package, version 1.6rc2
- Added patch heimdal-version-script-client.map.patch to add file
  version-script-client.map (File is present in git for tag 1.6rc2
  but missing in tarball).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441108800">- Some changes in spec file to enable build for SLES.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441195200">- Added Conflicts tags to spec file because devel package conflicts
  with krb5-devel and krb5-mini-devel.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441454400">- Added a patched instead of the original tarball because only
  shared libraries will be build and source files of these (not to
  be build) programs have problematic licenses.
- Added script heimdal-patch-source.sh to sources.
- Added patch heimdal-patched.diff that fixes configure.ac and
  several Makefile.am files to successfully build patched source.
- Removed unneeded dependencies in spec file for build.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1483790400">- Update to version 7.1.0
- Removed heimdal-version-script-client.map.patch, fixed upstream.
- Fixed heimdal-patched.diff.
- Unfortunately there is no updated changelog file in tarball,
  changes can be seen in source code version control systems
  history log.</changelog>
  <changelog author="jengelh@inai.de" date="1486036800">- Summary and RPM group update. Do a direct call to ldconfig
  where possible.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1497528000">- Update to version 7.3.0
  - Security
    + Fix transit path validation. Commit f469fc6 (2010-10-02)
    inadvertently caused the previous hop realm to not be added
    to the transit path of issued tickets. This may, in some
    cases, enable bypass of capath policy in Heimdal versions 1.5
    through 7.2.
    Note, this may break sites that rely on the bug. With the bug
    some incomplete [capaths] worked, that should not have.
    These may now break authentication in some cross-realm
    configurations. (CVE-2017-6594)
- Version 7.2.0
  - Bug fixes
    + Portability improvements.
    + More strict parsing of encoded URI components in HTTP KDC.
    + Fixed memory leak in malloc error recovery in NTLM GSSAPI
    mechanism.
    + Avoid overly specific CPU info in krb5-config in aid of
    reproducible builds.
    + Don't do AFS string-to-key tests when feature is disabled.
    + Skip mdb_stat test when the command is not available.
    + Windows: update SHA2 timestamp server.
    + hdb: add missing export
    hdb_generate_key_set_password_with_ks_tuple.
    + Fix signature of hdb_generate_key_set_password().
    + Windows: enable KX509 support in the KDC.
    + kdc: fix kx509 service principal match.
    + iprop: handle case where master sends nothing new.
    + ipropd-slave: fix incorrect error codes.
    + Allow choice of sqlite for HDB pref.
    + check-iprop: don't fail to kill daemons.
    + roken: pidfile -&gt; rk_pidfile.
    + kdc: _kdc_do_kx509 fix use after free error.
    + Do not detect x32 as 64-bit platform.
    + No sys/ttydefaults.h on CYGWIN.
    + Fix check-iprop races.
    + roken_detach_prep() close pipe.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1501761600">- Update to version 7.4.0
  - Security
  - Fix CVE-2017-11103: Orpheus' Lyre KDC-REP service name
    validation.
    This is a critical vulnerability.
    In _krb5_extract_ticket() the KDC-REP service name must be
    obtained from encrypted version stored in 'enc_part' instead
    of the unencrypted version stored in 'ticket'.
    Use of the unecrypted version provides an opportunity for
    successful server impersonation and other attacks.
    Identified by Jeffrey Altman, Viktor Duchovni and
    Nico Williams.
    See https://www.orpheus-lyre.info/ for more details.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1512648000">- Added Avoid_NULL_structure_pointer_member_dereference.patch,
  fixes (bsc#1071675).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1514548800">- Update to version 7.5.0
  - Security
  - Fix CVE-2017-17439, which is a remote denial of service
    vulnerability:
    In Heimdal 7.1 through 7.4, remote unauthenticated attackers
    are able to crash the KDC by sending a crafted UDP packet
    containing empty data fields for client name or realm.
  - Bug fixes
  - Handle long input lines when reloading database dumps.
  - In pre-forked mode (default on Unix), correctly clear the
    process ids of exited children, allowing new child processes
    to replace the old.
  - Fixed incorrect KDC response when no-cross realm TGT exists,
    allowing client requests to fail quickly rather than time
    out after trying to get a correct answer from each KDC.
- Fixed heimdal-patched.diff.
- Removed Avoid_NULL_structure_pointer_member_dereference.patch,
  fixed upstream.</changelog>
  <changelog author="bwiedemann@suse.com" date="1533643200">- Add reproducible.patch to override build date (boo#1047218)
- Use constant hostname (boo#1084909)</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1561291200">- Update to version 7.7.0
  + Bug fixes:
  - PKCS#11 hcrypto back-end:
    + initialize the p11_module_load function list
    + verify that not only is a mechanism present but that its
    mechanism info states that it offers the required
    encryption, decryption or digest services
  - krb5:
    + Starting with 7.6, Heimdal permitted requesting
    authenticated anonymous tickets. However, it did not
    verify that a KDC in fact returned an anonymous ticket
    when one was requested.
    + Cease setting the KDCOption reaquest_anonymous flag when
    issuing S4UProxy (constrained delegation) TGS requests.
    + when the Win2K PKINIT compatibility option is set, do not
    require krbtgt otherName to match when validating KDC
    certificate.
    + set PKINIT_BTMM flag per Apple implementation
    + use memset_s() instead of memset()
  - kdc:
    + When generating KRB5SignedPath in the AS, use the reply
    client name rather than the one from the request, so
    validation will work correctly in the TGS.
    + allow checksum of PA-FOR-USER to be HMAC_MD5. Even if TGT
    used an enctype with a different checksum. Per [MS-SFU]
    2.2.1 PA-FOR-USER the checksum is always HMAC_MD5, and
    that's what Windows and MIT clients send.
    In Heimdal both the client and kdc use instead the
    checksum of the TGT, and therefore work with each other
    but Windows and MIT clients fail against Heimdal KDC.
    Both Windows and MIT KDC would allow any keyed checksum
    to be used so Heimdal client work fine against it.
    Change Heimdal KDC to allow HMAC_MD5 even for non RC4
    based TGT in order to support per-spec clients.
    + use memset_s() instead of memset()
    + Detect Heimdal 1.0 through 7.6 clients that issue
    S4UProxy (constrained delegation) TGS Requests with the
    request anonymous flag set. These requests will be
    treated as S4UProxy requests and not anonymous requests.
  - HDB:
    + Set SQLite3 backend default page size to 8KB.
    + Add hdb_set_sync() method
  - kadmind:
    + disable HDB sync during database load avoiding
    unnecessary disk i/o.
  - ipropd:
    + disable HDB sync during receive_everything. Doing an
    fsync per-record when receiving the complete HDB is a
    performance disaster. Among other things, if the HDB is
    very large, then one slave receving a full HDB can cause
    other slaves to timeout and, if HDB write activity is
    high enough to cause iprop log truncation, then also need
    full syncs, which leads to a cycle of full syncs for all
    slaves until HDB write activity drops.
    Allowing the iprop log to be larger helps, but improving
    receive_everything() performance helps even more.
  - kinit:
    + Anonymous PKINIT tickets discard the realm information
    used to locate the issuing AS. Store the issuing realm in
    the credentials cache in order to locate a KDC which can
    renew them.
    + Do not leak the result of krb5_cc_get_config() when
    determining anonymous PKINIT start realm.
  - klist:
    + Show transited-policy-checked, ok-as-delegate and
    anonymous flags when listing credentials.
  - tests:
    + Regenerate certs so that they expire before the 2038
    armageddon so the test suite will pass on 32-bit
    operating systems until the underlying issues can be
    resolved.
  - Solaris:
    + Define _STDC_C11_BCI for memset_s prototype
  - build tooling:
    + Convert from python 2 to python 3
  - documentation:
    + rename verify-password to verify-password-quality
    + hprop default mode is encrypt
    + kadmind "all" permission does not include "get-keys"
    + verify-password-quality might not be stateless
- Version 7.6.0
  + Security (#555):
  - CVE-2018-16860 Heimdal KDC: Reject PA-S4U2Self with unkeyed
    checksum
    When the Heimdal KDC checks the checksum that is placed on
    the S4U2Self packet by the server to protect the requested
    principal against modification, it does not confirm that
    the checksum algorithm that protects the user name
    (principal) in the request is keyed. This allows a
    man-in-the-middle attacker who can intercept the request to
    the KDC to modify the packet by replacing the user name
    (principal) in the request with any desired user name
    (principal) that exists in the KDC and replace the checksum
    protecting that name with a CRC32 checksum (which requires
    no prior knowledge to compute).
    This would allow a S4U2Self ticket requested on behalf of
    user name (principal) user@EXAMPLE.COM to any service to be
    changed to a S4U2Self ticket with a user name (principal) of
    Administrator@EXAMPLE.COM. This ticket would then contain
    the PAC of the modified user name (principal).
  - CVE-2019-12098, client-only:
    RFC8062 Section 7 requires verification of the PA-PKINIT-KX
    key exchange when anonymous PKINIT is used. Failure to do
    so can permit an active attacker to become a
    man-in-the-middle.
  + Bug fixes:
  - Happy eyeballs: Don't wait for responses from
    known-unreachable KDCs.
  - kdc:
    + check return copy_Realm, copy_PrincipalName,
    copy_EncryptionKey
  - kinit:
    + cleanup temporary ccaches
    + see man page for "kinit --anonymous" command line syntax
    change
  - kdc:
    + Make anonymous AS-requests more RFC8062-compliant.
    Updated expired test certificates
  - Solaris:
    + PKCS#11 hcrypto backend broken since 7.0.1
    + Building with Sun Pro C
  + Features:
  - kuser: support authenticated anonymous AS-REQs in kinit
  - kdc: support for anonymous TGS-REQs
  - kgetcred support for anonymous service tickets
  - Support builds with OpenSSL 1.1.1
- fixed heimdal-patched.diff and reproducible.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1653480000">- Apply Shared Library Packaging Policy and resolve rpmlint
  errors like "libheimdal.x86_64: E: shlib-policy-name-error
  SONAME: libasn1.so.8, expected package suffix: 8"</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656417600">- Add heimdal-7.7.0-autoconf-2.70.patch: Fix build with autoconf
  2.70 (gh#heimdal/heimdal#856).</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656590400">- Add ldconfig scriptlets.
- Fix 'Conflicts:' tags.
- Remove obsolete macros and conditionals.
- Ran spec-cleaner.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1671624000">- Update to version 7.8.0
  + This release includes both the Heimdal 7.7.1 Security
    Vulnerability fixes and non-Security bug fixes/improvements.
  + Security Vulnerabilities:
  - CVE-2022-42898 PAC parse integer overflows
  - CVE-2022-3437 Overflows and non-constant time leaks in
    DES{,3} and arcfour
  - CVE-2022-41916 Fix Unicode normalization read of 1 bytes past
    end of array
  - CVE-2021-44758 A null pointer de-reference DoS in SPNEGO
    acceptors
  - CVE-2021-3671 A null pointer de-reference when handling
    missing sname in TGS-REQ
  - CVE-2022-44640 Heimdal KDC: invalid free in ASN.1 codec
    Note that CVE-2022-44640 is a severe vulnerability,
    possibly a 10.0 on the Common Vulnerability Scoring
    System (CVSS) v3, as we believe it should be possible to
    get an RCE on a KDC, which means that credentials can be
    compromised that can be used to impersonate anyone in a
    realm or forest of realms.
    Heimdal's ASN.1 compiler generates code that allows
    specially crafted DER encodings of CHOICEs to invoke the
    wrong free function on the decoded structure upon decode
    error. This is known to impact the Heimdal KDC, leading to
    an invalid free() of an address partly or wholly under the
    control of the attacker, in turn leading to a potential
    remote code execution (RCE) vulnerability.
    This error affects the DER codec for all extensible CHOICE
    types used in Heimdal, though not all cases will be
    exploitable. We have not completed a thorough analysis of
    all the Heimdal components affected, thus the Kerberos
    client, the X.509 library, and other parts, may be affected
    as well.
    This bug has been in Heimdal's ASN.1 compiler since 2005,
    but it may only affect Heimdal 1.6 and up. It was first
    reported by Douglas Bagnall, though it had been found
    independently by the Heimdal maintainers via fuzzing a few
    weeks earlier.
    While no zero-day exploit is known, such an exploit will
    likely be available soon after public disclosure.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  + Other changes:
  - Bugs found by UBSAN (including the incorrect encoding of
    unconstrained INTEGER value -1).
  - Errors found by the LLVM scan-build static analyzer.
  - Errors found by the valgrind memory debugger.
  - Work around GCC Bug 95189 (memcmp wrongly stripped like
    strcmp).
  - Correct ASN.1 OID typo for SHA-384
  - Fix a deadlock in in the MEMORY ccache type.
  - TGS: strip forwardable and proxiable flags if the server is
    disallowed.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  - Incremental HDB propagation improvements
    Refactor send_diffs making it progressive
    Handle partial writes on non-blocking sockets
    Disable Nagle in iprop master and slave
    Use async I/O
    Don't send I_HAVE in response to AYT
    Do not recover log in kadm5_get_principal()
    Don't send diffs to slaves with not yet known version
    Don't stutter in send_diffs
  - Optional backwards-compatible anon-pkinit behavior
- Removed heimdal-7.7.0-autoconf-2.70.patch, fixed upstream.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1673352000">- replace libheimdal conflicts by obsoletes / provides to provide a
  smooth update in the new libheimdal-devel.</changelog>
</package>
<package pkgid="e8778b4c294ff0b434feb10fa819e6725dcdf1c4a77928dfcb2690b899189f99" name="libkadm5srv8" arch="s390x">
  <version epoch="0" ver="7.8.0" rel="bp154.2.4.1"/>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1440936000">- Initial package, version 1.6rc2
- Added patch heimdal-version-script-client.map.patch to add file
  version-script-client.map (File is present in git for tag 1.6rc2
  but missing in tarball).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441108800">- Some changes in spec file to enable build for SLES.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441195200">- Added Conflicts tags to spec file because devel package conflicts
  with krb5-devel and krb5-mini-devel.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441454400">- Added a patched instead of the original tarball because only
  shared libraries will be build and source files of these (not to
  be build) programs have problematic licenses.
- Added script heimdal-patch-source.sh to sources.
- Added patch heimdal-patched.diff that fixes configure.ac and
  several Makefile.am files to successfully build patched source.
- Removed unneeded dependencies in spec file for build.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1483790400">- Update to version 7.1.0
- Removed heimdal-version-script-client.map.patch, fixed upstream.
- Fixed heimdal-patched.diff.
- Unfortunately there is no updated changelog file in tarball,
  changes can be seen in source code version control systems
  history log.</changelog>
  <changelog author="jengelh@inai.de" date="1486036800">- Summary and RPM group update. Do a direct call to ldconfig
  where possible.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1497528000">- Update to version 7.3.0
  - Security
    + Fix transit path validation. Commit f469fc6 (2010-10-02)
    inadvertently caused the previous hop realm to not be added
    to the transit path of issued tickets. This may, in some
    cases, enable bypass of capath policy in Heimdal versions 1.5
    through 7.2.
    Note, this may break sites that rely on the bug. With the bug
    some incomplete [capaths] worked, that should not have.
    These may now break authentication in some cross-realm
    configurations. (CVE-2017-6594)
- Version 7.2.0
  - Bug fixes
    + Portability improvements.
    + More strict parsing of encoded URI components in HTTP KDC.
    + Fixed memory leak in malloc error recovery in NTLM GSSAPI
    mechanism.
    + Avoid overly specific CPU info in krb5-config in aid of
    reproducible builds.
    + Don't do AFS string-to-key tests when feature is disabled.
    + Skip mdb_stat test when the command is not available.
    + Windows: update SHA2 timestamp server.
    + hdb: add missing export
    hdb_generate_key_set_password_with_ks_tuple.
    + Fix signature of hdb_generate_key_set_password().
    + Windows: enable KX509 support in the KDC.
    + kdc: fix kx509 service principal match.
    + iprop: handle case where master sends nothing new.
    + ipropd-slave: fix incorrect error codes.
    + Allow choice of sqlite for HDB pref.
    + check-iprop: don't fail to kill daemons.
    + roken: pidfile -&gt; rk_pidfile.
    + kdc: _kdc_do_kx509 fix use after free error.
    + Do not detect x32 as 64-bit platform.
    + No sys/ttydefaults.h on CYGWIN.
    + Fix check-iprop races.
    + roken_detach_prep() close pipe.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1501761600">- Update to version 7.4.0
  - Security
  - Fix CVE-2017-11103: Orpheus' Lyre KDC-REP service name
    validation.
    This is a critical vulnerability.
    In _krb5_extract_ticket() the KDC-REP service name must be
    obtained from encrypted version stored in 'enc_part' instead
    of the unencrypted version stored in 'ticket'.
    Use of the unecrypted version provides an opportunity for
    successful server impersonation and other attacks.
    Identified by Jeffrey Altman, Viktor Duchovni and
    Nico Williams.
    See https://www.orpheus-lyre.info/ for more details.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1512648000">- Added Avoid_NULL_structure_pointer_member_dereference.patch,
  fixes (bsc#1071675).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1514548800">- Update to version 7.5.0
  - Security
  - Fix CVE-2017-17439, which is a remote denial of service
    vulnerability:
    In Heimdal 7.1 through 7.4, remote unauthenticated attackers
    are able to crash the KDC by sending a crafted UDP packet
    containing empty data fields for client name or realm.
  - Bug fixes
  - Handle long input lines when reloading database dumps.
  - In pre-forked mode (default on Unix), correctly clear the
    process ids of exited children, allowing new child processes
    to replace the old.
  - Fixed incorrect KDC response when no-cross realm TGT exists,
    allowing client requests to fail quickly rather than time
    out after trying to get a correct answer from each KDC.
- Fixed heimdal-patched.diff.
- Removed Avoid_NULL_structure_pointer_member_dereference.patch,
  fixed upstream.</changelog>
  <changelog author="bwiedemann@suse.com" date="1533643200">- Add reproducible.patch to override build date (boo#1047218)
- Use constant hostname (boo#1084909)</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1561291200">- Update to version 7.7.0
  + Bug fixes:
  - PKCS#11 hcrypto back-end:
    + initialize the p11_module_load function list
    + verify that not only is a mechanism present but that its
    mechanism info states that it offers the required
    encryption, decryption or digest services
  - krb5:
    + Starting with 7.6, Heimdal permitted requesting
    authenticated anonymous tickets. However, it did not
    verify that a KDC in fact returned an anonymous ticket
    when one was requested.
    + Cease setting the KDCOption reaquest_anonymous flag when
    issuing S4UProxy (constrained delegation) TGS requests.
    + when the Win2K PKINIT compatibility option is set, do not
    require krbtgt otherName to match when validating KDC
    certificate.
    + set PKINIT_BTMM flag per Apple implementation
    + use memset_s() instead of memset()
  - kdc:
    + When generating KRB5SignedPath in the AS, use the reply
    client name rather than the one from the request, so
    validation will work correctly in the TGS.
    + allow checksum of PA-FOR-USER to be HMAC_MD5. Even if TGT
    used an enctype with a different checksum. Per [MS-SFU]
    2.2.1 PA-FOR-USER the checksum is always HMAC_MD5, and
    that's what Windows and MIT clients send.
    In Heimdal both the client and kdc use instead the
    checksum of the TGT, and therefore work with each other
    but Windows and MIT clients fail against Heimdal KDC.
    Both Windows and MIT KDC would allow any keyed checksum
    to be used so Heimdal client work fine against it.
    Change Heimdal KDC to allow HMAC_MD5 even for non RC4
    based TGT in order to support per-spec clients.
    + use memset_s() instead of memset()
    + Detect Heimdal 1.0 through 7.6 clients that issue
    S4UProxy (constrained delegation) TGS Requests with the
    request anonymous flag set. These requests will be
    treated as S4UProxy requests and not anonymous requests.
  - HDB:
    + Set SQLite3 backend default page size to 8KB.
    + Add hdb_set_sync() method
  - kadmind:
    + disable HDB sync during database load avoiding
    unnecessary disk i/o.
  - ipropd:
    + disable HDB sync during receive_everything. Doing an
    fsync per-record when receiving the complete HDB is a
    performance disaster. Among other things, if the HDB is
    very large, then one slave receving a full HDB can cause
    other slaves to timeout and, if HDB write activity is
    high enough to cause iprop log truncation, then also need
    full syncs, which leads to a cycle of full syncs for all
    slaves until HDB write activity drops.
    Allowing the iprop log to be larger helps, but improving
    receive_everything() performance helps even more.
  - kinit:
    + Anonymous PKINIT tickets discard the realm information
    used to locate the issuing AS. Store the issuing realm in
    the credentials cache in order to locate a KDC which can
    renew them.
    + Do not leak the result of krb5_cc_get_config() when
    determining anonymous PKINIT start realm.
  - klist:
    + Show transited-policy-checked, ok-as-delegate and
    anonymous flags when listing credentials.
  - tests:
    + Regenerate certs so that they expire before the 2038
    armageddon so the test suite will pass on 32-bit
    operating systems until the underlying issues can be
    resolved.
  - Solaris:
    + Define _STDC_C11_BCI for memset_s prototype
  - build tooling:
    + Convert from python 2 to python 3
  - documentation:
    + rename verify-password to verify-password-quality
    + hprop default mode is encrypt
    + kadmind "all" permission does not include "get-keys"
    + verify-password-quality might not be stateless
- Version 7.6.0
  + Security (#555):
  - CVE-2018-16860 Heimdal KDC: Reject PA-S4U2Self with unkeyed
    checksum
    When the Heimdal KDC checks the checksum that is placed on
    the S4U2Self packet by the server to protect the requested
    principal against modification, it does not confirm that
    the checksum algorithm that protects the user name
    (principal) in the request is keyed. This allows a
    man-in-the-middle attacker who can intercept the request to
    the KDC to modify the packet by replacing the user name
    (principal) in the request with any desired user name
    (principal) that exists in the KDC and replace the checksum
    protecting that name with a CRC32 checksum (which requires
    no prior knowledge to compute).
    This would allow a S4U2Self ticket requested on behalf of
    user name (principal) user@EXAMPLE.COM to any service to be
    changed to a S4U2Self ticket with a user name (principal) of
    Administrator@EXAMPLE.COM. This ticket would then contain
    the PAC of the modified user name (principal).
  - CVE-2019-12098, client-only:
    RFC8062 Section 7 requires verification of the PA-PKINIT-KX
    key exchange when anonymous PKINIT is used. Failure to do
    so can permit an active attacker to become a
    man-in-the-middle.
  + Bug fixes:
  - Happy eyeballs: Don't wait for responses from
    known-unreachable KDCs.
  - kdc:
    + check return copy_Realm, copy_PrincipalName,
    copy_EncryptionKey
  - kinit:
    + cleanup temporary ccaches
    + see man page for "kinit --anonymous" command line syntax
    change
  - kdc:
    + Make anonymous AS-requests more RFC8062-compliant.
    Updated expired test certificates
  - Solaris:
    + PKCS#11 hcrypto backend broken since 7.0.1
    + Building with Sun Pro C
  + Features:
  - kuser: support authenticated anonymous AS-REQs in kinit
  - kdc: support for anonymous TGS-REQs
  - kgetcred support for anonymous service tickets
  - Support builds with OpenSSL 1.1.1
- fixed heimdal-patched.diff and reproducible.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1653480000">- Apply Shared Library Packaging Policy and resolve rpmlint
  errors like "libheimdal.x86_64: E: shlib-policy-name-error
  SONAME: libasn1.so.8, expected package suffix: 8"</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656417600">- Add heimdal-7.7.0-autoconf-2.70.patch: Fix build with autoconf
  2.70 (gh#heimdal/heimdal#856).</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656590400">- Add ldconfig scriptlets.
- Fix 'Conflicts:' tags.
- Remove obsolete macros and conditionals.
- Ran spec-cleaner.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1671624000">- Update to version 7.8.0
  + This release includes both the Heimdal 7.7.1 Security
    Vulnerability fixes and non-Security bug fixes/improvements.
  + Security Vulnerabilities:
  - CVE-2022-42898 PAC parse integer overflows
  - CVE-2022-3437 Overflows and non-constant time leaks in
    DES{,3} and arcfour
  - CVE-2022-41916 Fix Unicode normalization read of 1 bytes past
    end of array
  - CVE-2021-44758 A null pointer de-reference DoS in SPNEGO
    acceptors
  - CVE-2021-3671 A null pointer de-reference when handling
    missing sname in TGS-REQ
  - CVE-2022-44640 Heimdal KDC: invalid free in ASN.1 codec
    Note that CVE-2022-44640 is a severe vulnerability,
    possibly a 10.0 on the Common Vulnerability Scoring
    System (CVSS) v3, as we believe it should be possible to
    get an RCE on a KDC, which means that credentials can be
    compromised that can be used to impersonate anyone in a
    realm or forest of realms.
    Heimdal's ASN.1 compiler generates code that allows
    specially crafted DER encodings of CHOICEs to invoke the
    wrong free function on the decoded structure upon decode
    error. This is known to impact the Heimdal KDC, leading to
    an invalid free() of an address partly or wholly under the
    control of the attacker, in turn leading to a potential
    remote code execution (RCE) vulnerability.
    This error affects the DER codec for all extensible CHOICE
    types used in Heimdal, though not all cases will be
    exploitable. We have not completed a thorough analysis of
    all the Heimdal components affected, thus the Kerberos
    client, the X.509 library, and other parts, may be affected
    as well.
    This bug has been in Heimdal's ASN.1 compiler since 2005,
    but it may only affect Heimdal 1.6 and up. It was first
    reported by Douglas Bagnall, though it had been found
    independently by the Heimdal maintainers via fuzzing a few
    weeks earlier.
    While no zero-day exploit is known, such an exploit will
    likely be available soon after public disclosure.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  + Other changes:
  - Bugs found by UBSAN (including the incorrect encoding of
    unconstrained INTEGER value -1).
  - Errors found by the LLVM scan-build static analyzer.
  - Errors found by the valgrind memory debugger.
  - Work around GCC Bug 95189 (memcmp wrongly stripped like
    strcmp).
  - Correct ASN.1 OID typo for SHA-384
  - Fix a deadlock in in the MEMORY ccache type.
  - TGS: strip forwardable and proxiable flags if the server is
    disallowed.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  - Incremental HDB propagation improvements
    Refactor send_diffs making it progressive
    Handle partial writes on non-blocking sockets
    Disable Nagle in iprop master and slave
    Use async I/O
    Don't send I_HAVE in response to AYT
    Do not recover log in kadm5_get_principal()
    Don't send diffs to slaves with not yet known version
    Don't stutter in send_diffs
  - Optional backwards-compatible anon-pkinit behavior
- Removed heimdal-7.7.0-autoconf-2.70.patch, fixed upstream.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1673352000">- replace libheimdal conflicts by obsoletes / provides to provide a
  smooth update in the new libheimdal-devel.</changelog>
</package>
<package pkgid="bcce966519fcb36991fb4dd75c6d8f398b0170bfe5d4aa5f8c50aeccef0ff439" name="libkadm5srv8" arch="x86_64">
  <version epoch="0" ver="7.8.0" rel="bp154.2.4.1"/>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1440936000">- Initial package, version 1.6rc2
- Added patch heimdal-version-script-client.map.patch to add file
  version-script-client.map (File is present in git for tag 1.6rc2
  but missing in tarball).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441108800">- Some changes in spec file to enable build for SLES.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441195200">- Added Conflicts tags to spec file because devel package conflicts
  with krb5-devel and krb5-mini-devel.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441454400">- Added a patched instead of the original tarball because only
  shared libraries will be build and source files of these (not to
  be build) programs have problematic licenses.
- Added script heimdal-patch-source.sh to sources.
- Added patch heimdal-patched.diff that fixes configure.ac and
  several Makefile.am files to successfully build patched source.
- Removed unneeded dependencies in spec file for build.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1483790400">- Update to version 7.1.0
- Removed heimdal-version-script-client.map.patch, fixed upstream.
- Fixed heimdal-patched.diff.
- Unfortunately there is no updated changelog file in tarball,
  changes can be seen in source code version control systems
  history log.</changelog>
  <changelog author="jengelh@inai.de" date="1486036800">- Summary and RPM group update. Do a direct call to ldconfig
  where possible.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1497528000">- Update to version 7.3.0
  - Security
    + Fix transit path validation. Commit f469fc6 (2010-10-02)
    inadvertently caused the previous hop realm to not be added
    to the transit path of issued tickets. This may, in some
    cases, enable bypass of capath policy in Heimdal versions 1.5
    through 7.2.
    Note, this may break sites that rely on the bug. With the bug
    some incomplete [capaths] worked, that should not have.
    These may now break authentication in some cross-realm
    configurations. (CVE-2017-6594)
- Version 7.2.0
  - Bug fixes
    + Portability improvements.
    + More strict parsing of encoded URI components in HTTP KDC.
    + Fixed memory leak in malloc error recovery in NTLM GSSAPI
    mechanism.
    + Avoid overly specific CPU info in krb5-config in aid of
    reproducible builds.
    + Don't do AFS string-to-key tests when feature is disabled.
    + Skip mdb_stat test when the command is not available.
    + Windows: update SHA2 timestamp server.
    + hdb: add missing export
    hdb_generate_key_set_password_with_ks_tuple.
    + Fix signature of hdb_generate_key_set_password().
    + Windows: enable KX509 support in the KDC.
    + kdc: fix kx509 service principal match.
    + iprop: handle case where master sends nothing new.
    + ipropd-slave: fix incorrect error codes.
    + Allow choice of sqlite for HDB pref.
    + check-iprop: don't fail to kill daemons.
    + roken: pidfile -&gt; rk_pidfile.
    + kdc: _kdc_do_kx509 fix use after free error.
    + Do not detect x32 as 64-bit platform.
    + No sys/ttydefaults.h on CYGWIN.
    + Fix check-iprop races.
    + roken_detach_prep() close pipe.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1501761600">- Update to version 7.4.0
  - Security
  - Fix CVE-2017-11103: Orpheus' Lyre KDC-REP service name
    validation.
    This is a critical vulnerability.
    In _krb5_extract_ticket() the KDC-REP service name must be
    obtained from encrypted version stored in 'enc_part' instead
    of the unencrypted version stored in 'ticket'.
    Use of the unecrypted version provides an opportunity for
    successful server impersonation and other attacks.
    Identified by Jeffrey Altman, Viktor Duchovni and
    Nico Williams.
    See https://www.orpheus-lyre.info/ for more details.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1512648000">- Added Avoid_NULL_structure_pointer_member_dereference.patch,
  fixes (bsc#1071675).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1514548800">- Update to version 7.5.0
  - Security
  - Fix CVE-2017-17439, which is a remote denial of service
    vulnerability:
    In Heimdal 7.1 through 7.4, remote unauthenticated attackers
    are able to crash the KDC by sending a crafted UDP packet
    containing empty data fields for client name or realm.
  - Bug fixes
  - Handle long input lines when reloading database dumps.
  - In pre-forked mode (default on Unix), correctly clear the
    process ids of exited children, allowing new child processes
    to replace the old.
  - Fixed incorrect KDC response when no-cross realm TGT exists,
    allowing client requests to fail quickly rather than time
    out after trying to get a correct answer from each KDC.
- Fixed heimdal-patched.diff.
- Removed Avoid_NULL_structure_pointer_member_dereference.patch,
  fixed upstream.</changelog>
  <changelog author="bwiedemann@suse.com" date="1533643200">- Add reproducible.patch to override build date (boo#1047218)
- Use constant hostname (boo#1084909)</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1561291200">- Update to version 7.7.0
  + Bug fixes:
  - PKCS#11 hcrypto back-end:
    + initialize the p11_module_load function list
    + verify that not only is a mechanism present but that its
    mechanism info states that it offers the required
    encryption, decryption or digest services
  - krb5:
    + Starting with 7.6, Heimdal permitted requesting
    authenticated anonymous tickets. However, it did not
    verify that a KDC in fact returned an anonymous ticket
    when one was requested.
    + Cease setting the KDCOption reaquest_anonymous flag when
    issuing S4UProxy (constrained delegation) TGS requests.
    + when the Win2K PKINIT compatibility option is set, do not
    require krbtgt otherName to match when validating KDC
    certificate.
    + set PKINIT_BTMM flag per Apple implementation
    + use memset_s() instead of memset()
  - kdc:
    + When generating KRB5SignedPath in the AS, use the reply
    client name rather than the one from the request, so
    validation will work correctly in the TGS.
    + allow checksum of PA-FOR-USER to be HMAC_MD5. Even if TGT
    used an enctype with a different checksum. Per [MS-SFU]
    2.2.1 PA-FOR-USER the checksum is always HMAC_MD5, and
    that's what Windows and MIT clients send.
    In Heimdal both the client and kdc use instead the
    checksum of the TGT, and therefore work with each other
    but Windows and MIT clients fail against Heimdal KDC.
    Both Windows and MIT KDC would allow any keyed checksum
    to be used so Heimdal client work fine against it.
    Change Heimdal KDC to allow HMAC_MD5 even for non RC4
    based TGT in order to support per-spec clients.
    + use memset_s() instead of memset()
    + Detect Heimdal 1.0 through 7.6 clients that issue
    S4UProxy (constrained delegation) TGS Requests with the
    request anonymous flag set. These requests will be
    treated as S4UProxy requests and not anonymous requests.
  - HDB:
    + Set SQLite3 backend default page size to 8KB.
    + Add hdb_set_sync() method
  - kadmind:
    + disable HDB sync during database load avoiding
    unnecessary disk i/o.
  - ipropd:
    + disable HDB sync during receive_everything. Doing an
    fsync per-record when receiving the complete HDB is a
    performance disaster. Among other things, if the HDB is
    very large, then one slave receving a full HDB can cause
    other slaves to timeout and, if HDB write activity is
    high enough to cause iprop log truncation, then also need
    full syncs, which leads to a cycle of full syncs for all
    slaves until HDB write activity drops.
    Allowing the iprop log to be larger helps, but improving
    receive_everything() performance helps even more.
  - kinit:
    + Anonymous PKINIT tickets discard the realm information
    used to locate the issuing AS. Store the issuing realm in
    the credentials cache in order to locate a KDC which can
    renew them.
    + Do not leak the result of krb5_cc_get_config() when
    determining anonymous PKINIT start realm.
  - klist:
    + Show transited-policy-checked, ok-as-delegate and
    anonymous flags when listing credentials.
  - tests:
    + Regenerate certs so that they expire before the 2038
    armageddon so the test suite will pass on 32-bit
    operating systems until the underlying issues can be
    resolved.
  - Solaris:
    + Define _STDC_C11_BCI for memset_s prototype
  - build tooling:
    + Convert from python 2 to python 3
  - documentation:
    + rename verify-password to verify-password-quality
    + hprop default mode is encrypt
    + kadmind "all" permission does not include "get-keys"
    + verify-password-quality might not be stateless
- Version 7.6.0
  + Security (#555):
  - CVE-2018-16860 Heimdal KDC: Reject PA-S4U2Self with unkeyed
    checksum
    When the Heimdal KDC checks the checksum that is placed on
    the S4U2Self packet by the server to protect the requested
    principal against modification, it does not confirm that
    the checksum algorithm that protects the user name
    (principal) in the request is keyed. This allows a
    man-in-the-middle attacker who can intercept the request to
    the KDC to modify the packet by replacing the user name
    (principal) in the request with any desired user name
    (principal) that exists in the KDC and replace the checksum
    protecting that name with a CRC32 checksum (which requires
    no prior knowledge to compute).
    This would allow a S4U2Self ticket requested on behalf of
    user name (principal) user@EXAMPLE.COM to any service to be
    changed to a S4U2Self ticket with a user name (principal) of
    Administrator@EXAMPLE.COM. This ticket would then contain
    the PAC of the modified user name (principal).
  - CVE-2019-12098, client-only:
    RFC8062 Section 7 requires verification of the PA-PKINIT-KX
    key exchange when anonymous PKINIT is used. Failure to do
    so can permit an active attacker to become a
    man-in-the-middle.
  + Bug fixes:
  - Happy eyeballs: Don't wait for responses from
    known-unreachable KDCs.
  - kdc:
    + check return copy_Realm, copy_PrincipalName,
    copy_EncryptionKey
  - kinit:
    + cleanup temporary ccaches
    + see man page for "kinit --anonymous" command line syntax
    change
  - kdc:
    + Make anonymous AS-requests more RFC8062-compliant.
    Updated expired test certificates
  - Solaris:
    + PKCS#11 hcrypto backend broken since 7.0.1
    + Building with Sun Pro C
  + Features:
  - kuser: support authenticated anonymous AS-REQs in kinit
  - kdc: support for anonymous TGS-REQs
  - kgetcred support for anonymous service tickets
  - Support builds with OpenSSL 1.1.1
- fixed heimdal-patched.diff and reproducible.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1653480000">- Apply Shared Library Packaging Policy and resolve rpmlint
  errors like "libheimdal.x86_64: E: shlib-policy-name-error
  SONAME: libasn1.so.8, expected package suffix: 8"</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656417600">- Add heimdal-7.7.0-autoconf-2.70.patch: Fix build with autoconf
  2.70 (gh#heimdal/heimdal#856).</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656590400">- Add ldconfig scriptlets.
- Fix 'Conflicts:' tags.
- Remove obsolete macros and conditionals.
- Ran spec-cleaner.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1671624000">- Update to version 7.8.0
  + This release includes both the Heimdal 7.7.1 Security
    Vulnerability fixes and non-Security bug fixes/improvements.
  + Security Vulnerabilities:
  - CVE-2022-42898 PAC parse integer overflows
  - CVE-2022-3437 Overflows and non-constant time leaks in
    DES{,3} and arcfour
  - CVE-2022-41916 Fix Unicode normalization read of 1 bytes past
    end of array
  - CVE-2021-44758 A null pointer de-reference DoS in SPNEGO
    acceptors
  - CVE-2021-3671 A null pointer de-reference when handling
    missing sname in TGS-REQ
  - CVE-2022-44640 Heimdal KDC: invalid free in ASN.1 codec
    Note that CVE-2022-44640 is a severe vulnerability,
    possibly a 10.0 on the Common Vulnerability Scoring
    System (CVSS) v3, as we believe it should be possible to
    get an RCE on a KDC, which means that credentials can be
    compromised that can be used to impersonate anyone in a
    realm or forest of realms.
    Heimdal's ASN.1 compiler generates code that allows
    specially crafted DER encodings of CHOICEs to invoke the
    wrong free function on the decoded structure upon decode
    error. This is known to impact the Heimdal KDC, leading to
    an invalid free() of an address partly or wholly under the
    control of the attacker, in turn leading to a potential
    remote code execution (RCE) vulnerability.
    This error affects the DER codec for all extensible CHOICE
    types used in Heimdal, though not all cases will be
    exploitable. We have not completed a thorough analysis of
    all the Heimdal components affected, thus the Kerberos
    client, the X.509 library, and other parts, may be affected
    as well.
    This bug has been in Heimdal's ASN.1 compiler since 2005,
    but it may only affect Heimdal 1.6 and up. It was first
    reported by Douglas Bagnall, though it had been found
    independently by the Heimdal maintainers via fuzzing a few
    weeks earlier.
    While no zero-day exploit is known, such an exploit will
    likely be available soon after public disclosure.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  + Other changes:
  - Bugs found by UBSAN (including the incorrect encoding of
    unconstrained INTEGER value -1).
  - Errors found by the LLVM scan-build static analyzer.
  - Errors found by the valgrind memory debugger.
  - Work around GCC Bug 95189 (memcmp wrongly stripped like
    strcmp).
  - Correct ASN.1 OID typo for SHA-384
  - Fix a deadlock in in the MEMORY ccache type.
  - TGS: strip forwardable and proxiable flags if the server is
    disallowed.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  - Incremental HDB propagation improvements
    Refactor send_diffs making it progressive
    Handle partial writes on non-blocking sockets
    Disable Nagle in iprop master and slave
    Use async I/O
    Don't send I_HAVE in response to AYT
    Do not recover log in kadm5_get_principal()
    Don't send diffs to slaves with not yet known version
    Don't stutter in send_diffs
  - Optional backwards-compatible anon-pkinit behavior
- Removed heimdal-7.7.0-autoconf-2.70.patch, fixed upstream.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1673352000">- replace libheimdal conflicts by obsoletes / provides to provide a
  smooth update in the new libheimdal-devel.</changelog>
</package>
<package pkgid="80ae19fca8c3cd442307924efa2d40a9d67391c6d9f2c42b2fcac364a8699e4c" name="libkafs0" arch="aarch64">
  <version epoch="0" ver="7.8.0" rel="bp154.2.4.1"/>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1440936000">- Initial package, version 1.6rc2
- Added patch heimdal-version-script-client.map.patch to add file
  version-script-client.map (File is present in git for tag 1.6rc2
  but missing in tarball).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441108800">- Some changes in spec file to enable build for SLES.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441195200">- Added Conflicts tags to spec file because devel package conflicts
  with krb5-devel and krb5-mini-devel.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441454400">- Added a patched instead of the original tarball because only
  shared libraries will be build and source files of these (not to
  be build) programs have problematic licenses.
- Added script heimdal-patch-source.sh to sources.
- Added patch heimdal-patched.diff that fixes configure.ac and
  several Makefile.am files to successfully build patched source.
- Removed unneeded dependencies in spec file for build.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1483790400">- Update to version 7.1.0
- Removed heimdal-version-script-client.map.patch, fixed upstream.
- Fixed heimdal-patched.diff.
- Unfortunately there is no updated changelog file in tarball,
  changes can be seen in source code version control systems
  history log.</changelog>
  <changelog author="jengelh@inai.de" date="1486036800">- Summary and RPM group update. Do a direct call to ldconfig
  where possible.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1497528000">- Update to version 7.3.0
  - Security
    + Fix transit path validation. Commit f469fc6 (2010-10-02)
    inadvertently caused the previous hop realm to not be added
    to the transit path of issued tickets. This may, in some
    cases, enable bypass of capath policy in Heimdal versions 1.5
    through 7.2.
    Note, this may break sites that rely on the bug. With the bug
    some incomplete [capaths] worked, that should not have.
    These may now break authentication in some cross-realm
    configurations. (CVE-2017-6594)
- Version 7.2.0
  - Bug fixes
    + Portability improvements.
    + More strict parsing of encoded URI components in HTTP KDC.
    + Fixed memory leak in malloc error recovery in NTLM GSSAPI
    mechanism.
    + Avoid overly specific CPU info in krb5-config in aid of
    reproducible builds.
    + Don't do AFS string-to-key tests when feature is disabled.
    + Skip mdb_stat test when the command is not available.
    + Windows: update SHA2 timestamp server.
    + hdb: add missing export
    hdb_generate_key_set_password_with_ks_tuple.
    + Fix signature of hdb_generate_key_set_password().
    + Windows: enable KX509 support in the KDC.
    + kdc: fix kx509 service principal match.
    + iprop: handle case where master sends nothing new.
    + ipropd-slave: fix incorrect error codes.
    + Allow choice of sqlite for HDB pref.
    + check-iprop: don't fail to kill daemons.
    + roken: pidfile -&gt; rk_pidfile.
    + kdc: _kdc_do_kx509 fix use after free error.
    + Do not detect x32 as 64-bit platform.
    + No sys/ttydefaults.h on CYGWIN.
    + Fix check-iprop races.
    + roken_detach_prep() close pipe.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1501761600">- Update to version 7.4.0
  - Security
  - Fix CVE-2017-11103: Orpheus' Lyre KDC-REP service name
    validation.
    This is a critical vulnerability.
    In _krb5_extract_ticket() the KDC-REP service name must be
    obtained from encrypted version stored in 'enc_part' instead
    of the unencrypted version stored in 'ticket'.
    Use of the unecrypted version provides an opportunity for
    successful server impersonation and other attacks.
    Identified by Jeffrey Altman, Viktor Duchovni and
    Nico Williams.
    See https://www.orpheus-lyre.info/ for more details.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1512648000">- Added Avoid_NULL_structure_pointer_member_dereference.patch,
  fixes (bsc#1071675).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1514548800">- Update to version 7.5.0
  - Security
  - Fix CVE-2017-17439, which is a remote denial of service
    vulnerability:
    In Heimdal 7.1 through 7.4, remote unauthenticated attackers
    are able to crash the KDC by sending a crafted UDP packet
    containing empty data fields for client name or realm.
  - Bug fixes
  - Handle long input lines when reloading database dumps.
  - In pre-forked mode (default on Unix), correctly clear the
    process ids of exited children, allowing new child processes
    to replace the old.
  - Fixed incorrect KDC response when no-cross realm TGT exists,
    allowing client requests to fail quickly rather than time
    out after trying to get a correct answer from each KDC.
- Fixed heimdal-patched.diff.
- Removed Avoid_NULL_structure_pointer_member_dereference.patch,
  fixed upstream.</changelog>
  <changelog author="bwiedemann@suse.com" date="1533643200">- Add reproducible.patch to override build date (boo#1047218)
- Use constant hostname (boo#1084909)</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1561291200">- Update to version 7.7.0
  + Bug fixes:
  - PKCS#11 hcrypto back-end:
    + initialize the p11_module_load function list
    + verify that not only is a mechanism present but that its
    mechanism info states that it offers the required
    encryption, decryption or digest services
  - krb5:
    + Starting with 7.6, Heimdal permitted requesting
    authenticated anonymous tickets. However, it did not
    verify that a KDC in fact returned an anonymous ticket
    when one was requested.
    + Cease setting the KDCOption reaquest_anonymous flag when
    issuing S4UProxy (constrained delegation) TGS requests.
    + when the Win2K PKINIT compatibility option is set, do not
    require krbtgt otherName to match when validating KDC
    certificate.
    + set PKINIT_BTMM flag per Apple implementation
    + use memset_s() instead of memset()
  - kdc:
    + When generating KRB5SignedPath in the AS, use the reply
    client name rather than the one from the request, so
    validation will work correctly in the TGS.
    + allow checksum of PA-FOR-USER to be HMAC_MD5. Even if TGT
    used an enctype with a different checksum. Per [MS-SFU]
    2.2.1 PA-FOR-USER the checksum is always HMAC_MD5, and
    that's what Windows and MIT clients send.
    In Heimdal both the client and kdc use instead the
    checksum of the TGT, and therefore work with each other
    but Windows and MIT clients fail against Heimdal KDC.
    Both Windows and MIT KDC would allow any keyed checksum
    to be used so Heimdal client work fine against it.
    Change Heimdal KDC to allow HMAC_MD5 even for non RC4
    based TGT in order to support per-spec clients.
    + use memset_s() instead of memset()
    + Detect Heimdal 1.0 through 7.6 clients that issue
    S4UProxy (constrained delegation) TGS Requests with the
    request anonymous flag set. These requests will be
    treated as S4UProxy requests and not anonymous requests.
  - HDB:
    + Set SQLite3 backend default page size to 8KB.
    + Add hdb_set_sync() method
  - kadmind:
    + disable HDB sync during database load avoiding
    unnecessary disk i/o.
  - ipropd:
    + disable HDB sync during receive_everything. Doing an
    fsync per-record when receiving the complete HDB is a
    performance disaster. Among other things, if the HDB is
    very large, then one slave receving a full HDB can cause
    other slaves to timeout and, if HDB write activity is
    high enough to cause iprop log truncation, then also need
    full syncs, which leads to a cycle of full syncs for all
    slaves until HDB write activity drops.
    Allowing the iprop log to be larger helps, but improving
    receive_everything() performance helps even more.
  - kinit:
    + Anonymous PKINIT tickets discard the realm information
    used to locate the issuing AS. Store the issuing realm in
    the credentials cache in order to locate a KDC which can
    renew them.
    + Do not leak the result of krb5_cc_get_config() when
    determining anonymous PKINIT start realm.
  - klist:
    + Show transited-policy-checked, ok-as-delegate and
    anonymous flags when listing credentials.
  - tests:
    + Regenerate certs so that they expire before the 2038
    armageddon so the test suite will pass on 32-bit
    operating systems until the underlying issues can be
    resolved.
  - Solaris:
    + Define _STDC_C11_BCI for memset_s prototype
  - build tooling:
    + Convert from python 2 to python 3
  - documentation:
    + rename verify-password to verify-password-quality
    + hprop default mode is encrypt
    + kadmind "all" permission does not include "get-keys"
    + verify-password-quality might not be stateless
- Version 7.6.0
  + Security (#555):
  - CVE-2018-16860 Heimdal KDC: Reject PA-S4U2Self with unkeyed
    checksum
    When the Heimdal KDC checks the checksum that is placed on
    the S4U2Self packet by the server to protect the requested
    principal against modification, it does not confirm that
    the checksum algorithm that protects the user name
    (principal) in the request is keyed. This allows a
    man-in-the-middle attacker who can intercept the request to
    the KDC to modify the packet by replacing the user name
    (principal) in the request with any desired user name
    (principal) that exists in the KDC and replace the checksum
    protecting that name with a CRC32 checksum (which requires
    no prior knowledge to compute).
    This would allow a S4U2Self ticket requested on behalf of
    user name (principal) user@EXAMPLE.COM to any service to be
    changed to a S4U2Self ticket with a user name (principal) of
    Administrator@EXAMPLE.COM. This ticket would then contain
    the PAC of the modified user name (principal).
  - CVE-2019-12098, client-only:
    RFC8062 Section 7 requires verification of the PA-PKINIT-KX
    key exchange when anonymous PKINIT is used. Failure to do
    so can permit an active attacker to become a
    man-in-the-middle.
  + Bug fixes:
  - Happy eyeballs: Don't wait for responses from
    known-unreachable KDCs.
  - kdc:
    + check return copy_Realm, copy_PrincipalName,
    copy_EncryptionKey
  - kinit:
    + cleanup temporary ccaches
    + see man page for "kinit --anonymous" command line syntax
    change
  - kdc:
    + Make anonymous AS-requests more RFC8062-compliant.
    Updated expired test certificates
  - Solaris:
    + PKCS#11 hcrypto backend broken since 7.0.1
    + Building with Sun Pro C
  + Features:
  - kuser: support authenticated anonymous AS-REQs in kinit
  - kdc: support for anonymous TGS-REQs
  - kgetcred support for anonymous service tickets
  - Support builds with OpenSSL 1.1.1
- fixed heimdal-patched.diff and reproducible.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1653480000">- Apply Shared Library Packaging Policy and resolve rpmlint
  errors like "libheimdal.x86_64: E: shlib-policy-name-error
  SONAME: libasn1.so.8, expected package suffix: 8"</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656417600">- Add heimdal-7.7.0-autoconf-2.70.patch: Fix build with autoconf
  2.70 (gh#heimdal/heimdal#856).</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656590400">- Add ldconfig scriptlets.
- Fix 'Conflicts:' tags.
- Remove obsolete macros and conditionals.
- Ran spec-cleaner.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1671624000">- Update to version 7.8.0
  + This release includes both the Heimdal 7.7.1 Security
    Vulnerability fixes and non-Security bug fixes/improvements.
  + Security Vulnerabilities:
  - CVE-2022-42898 PAC parse integer overflows
  - CVE-2022-3437 Overflows and non-constant time leaks in
    DES{,3} and arcfour
  - CVE-2022-41916 Fix Unicode normalization read of 1 bytes past
    end of array
  - CVE-2021-44758 A null pointer de-reference DoS in SPNEGO
    acceptors
  - CVE-2021-3671 A null pointer de-reference when handling
    missing sname in TGS-REQ
  - CVE-2022-44640 Heimdal KDC: invalid free in ASN.1 codec
    Note that CVE-2022-44640 is a severe vulnerability,
    possibly a 10.0 on the Common Vulnerability Scoring
    System (CVSS) v3, as we believe it should be possible to
    get an RCE on a KDC, which means that credentials can be
    compromised that can be used to impersonate anyone in a
    realm or forest of realms.
    Heimdal's ASN.1 compiler generates code that allows
    specially crafted DER encodings of CHOICEs to invoke the
    wrong free function on the decoded structure upon decode
    error. This is known to impact the Heimdal KDC, leading to
    an invalid free() of an address partly or wholly under the
    control of the attacker, in turn leading to a potential
    remote code execution (RCE) vulnerability.
    This error affects the DER codec for all extensible CHOICE
    types used in Heimdal, though not all cases will be
    exploitable. We have not completed a thorough analysis of
    all the Heimdal components affected, thus the Kerberos
    client, the X.509 library, and other parts, may be affected
    as well.
    This bug has been in Heimdal's ASN.1 compiler since 2005,
    but it may only affect Heimdal 1.6 and up. It was first
    reported by Douglas Bagnall, though it had been found
    independently by the Heimdal maintainers via fuzzing a few
    weeks earlier.
    While no zero-day exploit is known, such an exploit will
    likely be available soon after public disclosure.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  + Other changes:
  - Bugs found by UBSAN (including the incorrect encoding of
    unconstrained INTEGER value -1).
  - Errors found by the LLVM scan-build static analyzer.
  - Errors found by the valgrind memory debugger.
  - Work around GCC Bug 95189 (memcmp wrongly stripped like
    strcmp).
  - Correct ASN.1 OID typo for SHA-384
  - Fix a deadlock in in the MEMORY ccache type.
  - TGS: strip forwardable and proxiable flags if the server is
    disallowed.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  - Incremental HDB propagation improvements
    Refactor send_diffs making it progressive
    Handle partial writes on non-blocking sockets
    Disable Nagle in iprop master and slave
    Use async I/O
    Don't send I_HAVE in response to AYT
    Do not recover log in kadm5_get_principal()
    Don't send diffs to slaves with not yet known version
    Don't stutter in send_diffs
  - Optional backwards-compatible anon-pkinit behavior
- Removed heimdal-7.7.0-autoconf-2.70.patch, fixed upstream.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1673352000">- replace libheimdal conflicts by obsoletes / provides to provide a
  smooth update in the new libheimdal-devel.</changelog>
</package>
<package pkgid="1cd09c347cc57ffa2ec1c8e1a80b1c4171508fee7a2b39658f5012177e52f7ab" name="libkafs0" arch="i586">
  <version epoch="0" ver="7.8.0" rel="bp154.2.4.1"/>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1440936000">- Initial package, version 1.6rc2
- Added patch heimdal-version-script-client.map.patch to add file
  version-script-client.map (File is present in git for tag 1.6rc2
  but missing in tarball).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441108800">- Some changes in spec file to enable build for SLES.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441195200">- Added Conflicts tags to spec file because devel package conflicts
  with krb5-devel and krb5-mini-devel.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441454400">- Added a patched instead of the original tarball because only
  shared libraries will be build and source files of these (not to
  be build) programs have problematic licenses.
- Added script heimdal-patch-source.sh to sources.
- Added patch heimdal-patched.diff that fixes configure.ac and
  several Makefile.am files to successfully build patched source.
- Removed unneeded dependencies in spec file for build.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1483790400">- Update to version 7.1.0
- Removed heimdal-version-script-client.map.patch, fixed upstream.
- Fixed heimdal-patched.diff.
- Unfortunately there is no updated changelog file in tarball,
  changes can be seen in source code version control systems
  history log.</changelog>
  <changelog author="jengelh@inai.de" date="1486036800">- Summary and RPM group update. Do a direct call to ldconfig
  where possible.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1497528000">- Update to version 7.3.0
  - Security
    + Fix transit path validation. Commit f469fc6 (2010-10-02)
    inadvertently caused the previous hop realm to not be added
    to the transit path of issued tickets. This may, in some
    cases, enable bypass of capath policy in Heimdal versions 1.5
    through 7.2.
    Note, this may break sites that rely on the bug. With the bug
    some incomplete [capaths] worked, that should not have.
    These may now break authentication in some cross-realm
    configurations. (CVE-2017-6594)
- Version 7.2.0
  - Bug fixes
    + Portability improvements.
    + More strict parsing of encoded URI components in HTTP KDC.
    + Fixed memory leak in malloc error recovery in NTLM GSSAPI
    mechanism.
    + Avoid overly specific CPU info in krb5-config in aid of
    reproducible builds.
    + Don't do AFS string-to-key tests when feature is disabled.
    + Skip mdb_stat test when the command is not available.
    + Windows: update SHA2 timestamp server.
    + hdb: add missing export
    hdb_generate_key_set_password_with_ks_tuple.
    + Fix signature of hdb_generate_key_set_password().
    + Windows: enable KX509 support in the KDC.
    + kdc: fix kx509 service principal match.
    + iprop: handle case where master sends nothing new.
    + ipropd-slave: fix incorrect error codes.
    + Allow choice of sqlite for HDB pref.
    + check-iprop: don't fail to kill daemons.
    + roken: pidfile -&gt; rk_pidfile.
    + kdc: _kdc_do_kx509 fix use after free error.
    + Do not detect x32 as 64-bit platform.
    + No sys/ttydefaults.h on CYGWIN.
    + Fix check-iprop races.
    + roken_detach_prep() close pipe.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1501761600">- Update to version 7.4.0
  - Security
  - Fix CVE-2017-11103: Orpheus' Lyre KDC-REP service name
    validation.
    This is a critical vulnerability.
    In _krb5_extract_ticket() the KDC-REP service name must be
    obtained from encrypted version stored in 'enc_part' instead
    of the unencrypted version stored in 'ticket'.
    Use of the unecrypted version provides an opportunity for
    successful server impersonation and other attacks.
    Identified by Jeffrey Altman, Viktor Duchovni and
    Nico Williams.
    See https://www.orpheus-lyre.info/ for more details.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1512648000">- Added Avoid_NULL_structure_pointer_member_dereference.patch,
  fixes (bsc#1071675).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1514548800">- Update to version 7.5.0
  - Security
  - Fix CVE-2017-17439, which is a remote denial of service
    vulnerability:
    In Heimdal 7.1 through 7.4, remote unauthenticated attackers
    are able to crash the KDC by sending a crafted UDP packet
    containing empty data fields for client name or realm.
  - Bug fixes
  - Handle long input lines when reloading database dumps.
  - In pre-forked mode (default on Unix), correctly clear the
    process ids of exited children, allowing new child processes
    to replace the old.
  - Fixed incorrect KDC response when no-cross realm TGT exists,
    allowing client requests to fail quickly rather than time
    out after trying to get a correct answer from each KDC.
- Fixed heimdal-patched.diff.
- Removed Avoid_NULL_structure_pointer_member_dereference.patch,
  fixed upstream.</changelog>
  <changelog author="bwiedemann@suse.com" date="1533643200">- Add reproducible.patch to override build date (boo#1047218)
- Use constant hostname (boo#1084909)</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1561291200">- Update to version 7.7.0
  + Bug fixes:
  - PKCS#11 hcrypto back-end:
    + initialize the p11_module_load function list
    + verify that not only is a mechanism present but that its
    mechanism info states that it offers the required
    encryption, decryption or digest services
  - krb5:
    + Starting with 7.6, Heimdal permitted requesting
    authenticated anonymous tickets. However, it did not
    verify that a KDC in fact returned an anonymous ticket
    when one was requested.
    + Cease setting the KDCOption reaquest_anonymous flag when
    issuing S4UProxy (constrained delegation) TGS requests.
    + when the Win2K PKINIT compatibility option is set, do not
    require krbtgt otherName to match when validating KDC
    certificate.
    + set PKINIT_BTMM flag per Apple implementation
    + use memset_s() instead of memset()
  - kdc:
    + When generating KRB5SignedPath in the AS, use the reply
    client name rather than the one from the request, so
    validation will work correctly in the TGS.
    + allow checksum of PA-FOR-USER to be HMAC_MD5. Even if TGT
    used an enctype with a different checksum. Per [MS-SFU]
    2.2.1 PA-FOR-USER the checksum is always HMAC_MD5, and
    that's what Windows and MIT clients send.
    In Heimdal both the client and kdc use instead the
    checksum of the TGT, and therefore work with each other
    but Windows and MIT clients fail against Heimdal KDC.
    Both Windows and MIT KDC would allow any keyed checksum
    to be used so Heimdal client work fine against it.
    Change Heimdal KDC to allow HMAC_MD5 even for non RC4
    based TGT in order to support per-spec clients.
    + use memset_s() instead of memset()
    + Detect Heimdal 1.0 through 7.6 clients that issue
    S4UProxy (constrained delegation) TGS Requests with the
    request anonymous flag set. These requests will be
    treated as S4UProxy requests and not anonymous requests.
  - HDB:
    + Set SQLite3 backend default page size to 8KB.
    + Add hdb_set_sync() method
  - kadmind:
    + disable HDB sync during database load avoiding
    unnecessary disk i/o.
  - ipropd:
    + disable HDB sync during receive_everything. Doing an
    fsync per-record when receiving the complete HDB is a
    performance disaster. Among other things, if the HDB is
    very large, then one slave receving a full HDB can cause
    other slaves to timeout and, if HDB write activity is
    high enough to cause iprop log truncation, then also need
    full syncs, which leads to a cycle of full syncs for all
    slaves until HDB write activity drops.
    Allowing the iprop log to be larger helps, but improving
    receive_everything() performance helps even more.
  - kinit:
    + Anonymous PKINIT tickets discard the realm information
    used to locate the issuing AS. Store the issuing realm in
    the credentials cache in order to locate a KDC which can
    renew them.
    + Do not leak the result of krb5_cc_get_config() when
    determining anonymous PKINIT start realm.
  - klist:
    + Show transited-policy-checked, ok-as-delegate and
    anonymous flags when listing credentials.
  - tests:
    + Regenerate certs so that they expire before the 2038
    armageddon so the test suite will pass on 32-bit
    operating systems until the underlying issues can be
    resolved.
  - Solaris:
    + Define _STDC_C11_BCI for memset_s prototype
  - build tooling:
    + Convert from python 2 to python 3
  - documentation:
    + rename verify-password to verify-password-quality
    + hprop default mode is encrypt
    + kadmind "all" permission does not include "get-keys"
    + verify-password-quality might not be stateless
- Version 7.6.0
  + Security (#555):
  - CVE-2018-16860 Heimdal KDC: Reject PA-S4U2Self with unkeyed
    checksum
    When the Heimdal KDC checks the checksum that is placed on
    the S4U2Self packet by the server to protect the requested
    principal against modification, it does not confirm that
    the checksum algorithm that protects the user name
    (principal) in the request is keyed. This allows a
    man-in-the-middle attacker who can intercept the request to
    the KDC to modify the packet by replacing the user name
    (principal) in the request with any desired user name
    (principal) that exists in the KDC and replace the checksum
    protecting that name with a CRC32 checksum (which requires
    no prior knowledge to compute).
    This would allow a S4U2Self ticket requested on behalf of
    user name (principal) user@EXAMPLE.COM to any service to be
    changed to a S4U2Self ticket with a user name (principal) of
    Administrator@EXAMPLE.COM. This ticket would then contain
    the PAC of the modified user name (principal).
  - CVE-2019-12098, client-only:
    RFC8062 Section 7 requires verification of the PA-PKINIT-KX
    key exchange when anonymous PKINIT is used. Failure to do
    so can permit an active attacker to become a
    man-in-the-middle.
  + Bug fixes:
  - Happy eyeballs: Don't wait for responses from
    known-unreachable KDCs.
  - kdc:
    + check return copy_Realm, copy_PrincipalName,
    copy_EncryptionKey
  - kinit:
    + cleanup temporary ccaches
    + see man page for "kinit --anonymous" command line syntax
    change
  - kdc:
    + Make anonymous AS-requests more RFC8062-compliant.
    Updated expired test certificates
  - Solaris:
    + PKCS#11 hcrypto backend broken since 7.0.1
    + Building with Sun Pro C
  + Features:
  - kuser: support authenticated anonymous AS-REQs in kinit
  - kdc: support for anonymous TGS-REQs
  - kgetcred support for anonymous service tickets
  - Support builds with OpenSSL 1.1.1
- fixed heimdal-patched.diff and reproducible.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1653480000">- Apply Shared Library Packaging Policy and resolve rpmlint
  errors like "libheimdal.x86_64: E: shlib-policy-name-error
  SONAME: libasn1.so.8, expected package suffix: 8"</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656417600">- Add heimdal-7.7.0-autoconf-2.70.patch: Fix build with autoconf
  2.70 (gh#heimdal/heimdal#856).</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656590400">- Add ldconfig scriptlets.
- Fix 'Conflicts:' tags.
- Remove obsolete macros and conditionals.
- Ran spec-cleaner.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1671624000">- Update to version 7.8.0
  + This release includes both the Heimdal 7.7.1 Security
    Vulnerability fixes and non-Security bug fixes/improvements.
  + Security Vulnerabilities:
  - CVE-2022-42898 PAC parse integer overflows
  - CVE-2022-3437 Overflows and non-constant time leaks in
    DES{,3} and arcfour
  - CVE-2022-41916 Fix Unicode normalization read of 1 bytes past
    end of array
  - CVE-2021-44758 A null pointer de-reference DoS in SPNEGO
    acceptors
  - CVE-2021-3671 A null pointer de-reference when handling
    missing sname in TGS-REQ
  - CVE-2022-44640 Heimdal KDC: invalid free in ASN.1 codec
    Note that CVE-2022-44640 is a severe vulnerability,
    possibly a 10.0 on the Common Vulnerability Scoring
    System (CVSS) v3, as we believe it should be possible to
    get an RCE on a KDC, which means that credentials can be
    compromised that can be used to impersonate anyone in a
    realm or forest of realms.
    Heimdal's ASN.1 compiler generates code that allows
    specially crafted DER encodings of CHOICEs to invoke the
    wrong free function on the decoded structure upon decode
    error. This is known to impact the Heimdal KDC, leading to
    an invalid free() of an address partly or wholly under the
    control of the attacker, in turn leading to a potential
    remote code execution (RCE) vulnerability.
    This error affects the DER codec for all extensible CHOICE
    types used in Heimdal, though not all cases will be
    exploitable. We have not completed a thorough analysis of
    all the Heimdal components affected, thus the Kerberos
    client, the X.509 library, and other parts, may be affected
    as well.
    This bug has been in Heimdal's ASN.1 compiler since 2005,
    but it may only affect Heimdal 1.6 and up. It was first
    reported by Douglas Bagnall, though it had been found
    independently by the Heimdal maintainers via fuzzing a few
    weeks earlier.
    While no zero-day exploit is known, such an exploit will
    likely be available soon after public disclosure.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  + Other changes:
  - Bugs found by UBSAN (including the incorrect encoding of
    unconstrained INTEGER value -1).
  - Errors found by the LLVM scan-build static analyzer.
  - Errors found by the valgrind memory debugger.
  - Work around GCC Bug 95189 (memcmp wrongly stripped like
    strcmp).
  - Correct ASN.1 OID typo for SHA-384
  - Fix a deadlock in in the MEMORY ccache type.
  - TGS: strip forwardable and proxiable flags if the server is
    disallowed.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  - Incremental HDB propagation improvements
    Refactor send_diffs making it progressive
    Handle partial writes on non-blocking sockets
    Disable Nagle in iprop master and slave
    Use async I/O
    Don't send I_HAVE in response to AYT
    Do not recover log in kadm5_get_principal()
    Don't send diffs to slaves with not yet known version
    Don't stutter in send_diffs
  - Optional backwards-compatible anon-pkinit behavior
- Removed heimdal-7.7.0-autoconf-2.70.patch, fixed upstream.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1673352000">- replace libheimdal conflicts by obsoletes / provides to provide a
  smooth update in the new libheimdal-devel.</changelog>
</package>
<package pkgid="955141fa4017e81d966e54efbc6754afcf025fbd89e0212ee931a17d3a7eff4b" name="libkafs0" arch="ppc64le">
  <version epoch="0" ver="7.8.0" rel="bp154.2.4.1"/>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1440936000">- Initial package, version 1.6rc2
- Added patch heimdal-version-script-client.map.patch to add file
  version-script-client.map (File is present in git for tag 1.6rc2
  but missing in tarball).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441108800">- Some changes in spec file to enable build for SLES.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441195200">- Added Conflicts tags to spec file because devel package conflicts
  with krb5-devel and krb5-mini-devel.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441454400">- Added a patched instead of the original tarball because only
  shared libraries will be build and source files of these (not to
  be build) programs have problematic licenses.
- Added script heimdal-patch-source.sh to sources.
- Added patch heimdal-patched.diff that fixes configure.ac and
  several Makefile.am files to successfully build patched source.
- Removed unneeded dependencies in spec file for build.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1483790400">- Update to version 7.1.0
- Removed heimdal-version-script-client.map.patch, fixed upstream.
- Fixed heimdal-patched.diff.
- Unfortunately there is no updated changelog file in tarball,
  changes can be seen in source code version control systems
  history log.</changelog>
  <changelog author="jengelh@inai.de" date="1486036800">- Summary and RPM group update. Do a direct call to ldconfig
  where possible.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1497528000">- Update to version 7.3.0
  - Security
    + Fix transit path validation. Commit f469fc6 (2010-10-02)
    inadvertently caused the previous hop realm to not be added
    to the transit path of issued tickets. This may, in some
    cases, enable bypass of capath policy in Heimdal versions 1.5
    through 7.2.
    Note, this may break sites that rely on the bug. With the bug
    some incomplete [capaths] worked, that should not have.
    These may now break authentication in some cross-realm
    configurations. (CVE-2017-6594)
- Version 7.2.0
  - Bug fixes
    + Portability improvements.
    + More strict parsing of encoded URI components in HTTP KDC.
    + Fixed memory leak in malloc error recovery in NTLM GSSAPI
    mechanism.
    + Avoid overly specific CPU info in krb5-config in aid of
    reproducible builds.
    + Don't do AFS string-to-key tests when feature is disabled.
    + Skip mdb_stat test when the command is not available.
    + Windows: update SHA2 timestamp server.
    + hdb: add missing export
    hdb_generate_key_set_password_with_ks_tuple.
    + Fix signature of hdb_generate_key_set_password().
    + Windows: enable KX509 support in the KDC.
    + kdc: fix kx509 service principal match.
    + iprop: handle case where master sends nothing new.
    + ipropd-slave: fix incorrect error codes.
    + Allow choice of sqlite for HDB pref.
    + check-iprop: don't fail to kill daemons.
    + roken: pidfile -&gt; rk_pidfile.
    + kdc: _kdc_do_kx509 fix use after free error.
    + Do not detect x32 as 64-bit platform.
    + No sys/ttydefaults.h on CYGWIN.
    + Fix check-iprop races.
    + roken_detach_prep() close pipe.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1501761600">- Update to version 7.4.0
  - Security
  - Fix CVE-2017-11103: Orpheus' Lyre KDC-REP service name
    validation.
    This is a critical vulnerability.
    In _krb5_extract_ticket() the KDC-REP service name must be
    obtained from encrypted version stored in 'enc_part' instead
    of the unencrypted version stored in 'ticket'.
    Use of the unecrypted version provides an opportunity for
    successful server impersonation and other attacks.
    Identified by Jeffrey Altman, Viktor Duchovni and
    Nico Williams.
    See https://www.orpheus-lyre.info/ for more details.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1512648000">- Added Avoid_NULL_structure_pointer_member_dereference.patch,
  fixes (bsc#1071675).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1514548800">- Update to version 7.5.0
  - Security
  - Fix CVE-2017-17439, which is a remote denial of service
    vulnerability:
    In Heimdal 7.1 through 7.4, remote unauthenticated attackers
    are able to crash the KDC by sending a crafted UDP packet
    containing empty data fields for client name or realm.
  - Bug fixes
  - Handle long input lines when reloading database dumps.
  - In pre-forked mode (default on Unix), correctly clear the
    process ids of exited children, allowing new child processes
    to replace the old.
  - Fixed incorrect KDC response when no-cross realm TGT exists,
    allowing client requests to fail quickly rather than time
    out after trying to get a correct answer from each KDC.
- Fixed heimdal-patched.diff.
- Removed Avoid_NULL_structure_pointer_member_dereference.patch,
  fixed upstream.</changelog>
  <changelog author="bwiedemann@suse.com" date="1533643200">- Add reproducible.patch to override build date (boo#1047218)
- Use constant hostname (boo#1084909)</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1561291200">- Update to version 7.7.0
  + Bug fixes:
  - PKCS#11 hcrypto back-end:
    + initialize the p11_module_load function list
    + verify that not only is a mechanism present but that its
    mechanism info states that it offers the required
    encryption, decryption or digest services
  - krb5:
    + Starting with 7.6, Heimdal permitted requesting
    authenticated anonymous tickets. However, it did not
    verify that a KDC in fact returned an anonymous ticket
    when one was requested.
    + Cease setting the KDCOption reaquest_anonymous flag when
    issuing S4UProxy (constrained delegation) TGS requests.
    + when the Win2K PKINIT compatibility option is set, do not
    require krbtgt otherName to match when validating KDC
    certificate.
    + set PKINIT_BTMM flag per Apple implementation
    + use memset_s() instead of memset()
  - kdc:
    + When generating KRB5SignedPath in the AS, use the reply
    client name rather than the one from the request, so
    validation will work correctly in the TGS.
    + allow checksum of PA-FOR-USER to be HMAC_MD5. Even if TGT
    used an enctype with a different checksum. Per [MS-SFU]
    2.2.1 PA-FOR-USER the checksum is always HMAC_MD5, and
    that's what Windows and MIT clients send.
    In Heimdal both the client and kdc use instead the
    checksum of the TGT, and therefore work with each other
    but Windows and MIT clients fail against Heimdal KDC.
    Both Windows and MIT KDC would allow any keyed checksum
    to be used so Heimdal client work fine against it.
    Change Heimdal KDC to allow HMAC_MD5 even for non RC4
    based TGT in order to support per-spec clients.
    + use memset_s() instead of memset()
    + Detect Heimdal 1.0 through 7.6 clients that issue
    S4UProxy (constrained delegation) TGS Requests with the
    request anonymous flag set. These requests will be
    treated as S4UProxy requests and not anonymous requests.
  - HDB:
    + Set SQLite3 backend default page size to 8KB.
    + Add hdb_set_sync() method
  - kadmind:
    + disable HDB sync during database load avoiding
    unnecessary disk i/o.
  - ipropd:
    + disable HDB sync during receive_everything. Doing an
    fsync per-record when receiving the complete HDB is a
    performance disaster. Among other things, if the HDB is
    very large, then one slave receving a full HDB can cause
    other slaves to timeout and, if HDB write activity is
    high enough to cause iprop log truncation, then also need
    full syncs, which leads to a cycle of full syncs for all
    slaves until HDB write activity drops.
    Allowing the iprop log to be larger helps, but improving
    receive_everything() performance helps even more.
  - kinit:
    + Anonymous PKINIT tickets discard the realm information
    used to locate the issuing AS. Store the issuing realm in
    the credentials cache in order to locate a KDC which can
    renew them.
    + Do not leak the result of krb5_cc_get_config() when
    determining anonymous PKINIT start realm.
  - klist:
    + Show transited-policy-checked, ok-as-delegate and
    anonymous flags when listing credentials.
  - tests:
    + Regenerate certs so that they expire before the 2038
    armageddon so the test suite will pass on 32-bit
    operating systems until the underlying issues can be
    resolved.
  - Solaris:
    + Define _STDC_C11_BCI for memset_s prototype
  - build tooling:
    + Convert from python 2 to python 3
  - documentation:
    + rename verify-password to verify-password-quality
    + hprop default mode is encrypt
    + kadmind "all" permission does not include "get-keys"
    + verify-password-quality might not be stateless
- Version 7.6.0
  + Security (#555):
  - CVE-2018-16860 Heimdal KDC: Reject PA-S4U2Self with unkeyed
    checksum
    When the Heimdal KDC checks the checksum that is placed on
    the S4U2Self packet by the server to protect the requested
    principal against modification, it does not confirm that
    the checksum algorithm that protects the user name
    (principal) in the request is keyed. This allows a
    man-in-the-middle attacker who can intercept the request to
    the KDC to modify the packet by replacing the user name
    (principal) in the request with any desired user name
    (principal) that exists in the KDC and replace the checksum
    protecting that name with a CRC32 checksum (which requires
    no prior knowledge to compute).
    This would allow a S4U2Self ticket requested on behalf of
    user name (principal) user@EXAMPLE.COM to any service to be
    changed to a S4U2Self ticket with a user name (principal) of
    Administrator@EXAMPLE.COM. This ticket would then contain
    the PAC of the modified user name (principal).
  - CVE-2019-12098, client-only:
    RFC8062 Section 7 requires verification of the PA-PKINIT-KX
    key exchange when anonymous PKINIT is used. Failure to do
    so can permit an active attacker to become a
    man-in-the-middle.
  + Bug fixes:
  - Happy eyeballs: Don't wait for responses from
    known-unreachable KDCs.
  - kdc:
    + check return copy_Realm, copy_PrincipalName,
    copy_EncryptionKey
  - kinit:
    + cleanup temporary ccaches
    + see man page for "kinit --anonymous" command line syntax
    change
  - kdc:
    + Make anonymous AS-requests more RFC8062-compliant.
    Updated expired test certificates
  - Solaris:
    + PKCS#11 hcrypto backend broken since 7.0.1
    + Building with Sun Pro C
  + Features:
  - kuser: support authenticated anonymous AS-REQs in kinit
  - kdc: support for anonymous TGS-REQs
  - kgetcred support for anonymous service tickets
  - Support builds with OpenSSL 1.1.1
- fixed heimdal-patched.diff and reproducible.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1653480000">- Apply Shared Library Packaging Policy and resolve rpmlint
  errors like "libheimdal.x86_64: E: shlib-policy-name-error
  SONAME: libasn1.so.8, expected package suffix: 8"</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656417600">- Add heimdal-7.7.0-autoconf-2.70.patch: Fix build with autoconf
  2.70 (gh#heimdal/heimdal#856).</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656590400">- Add ldconfig scriptlets.
- Fix 'Conflicts:' tags.
- Remove obsolete macros and conditionals.
- Ran spec-cleaner.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1671624000">- Update to version 7.8.0
  + This release includes both the Heimdal 7.7.1 Security
    Vulnerability fixes and non-Security bug fixes/improvements.
  + Security Vulnerabilities:
  - CVE-2022-42898 PAC parse integer overflows
  - CVE-2022-3437 Overflows and non-constant time leaks in
    DES{,3} and arcfour
  - CVE-2022-41916 Fix Unicode normalization read of 1 bytes past
    end of array
  - CVE-2021-44758 A null pointer de-reference DoS in SPNEGO
    acceptors
  - CVE-2021-3671 A null pointer de-reference when handling
    missing sname in TGS-REQ
  - CVE-2022-44640 Heimdal KDC: invalid free in ASN.1 codec
    Note that CVE-2022-44640 is a severe vulnerability,
    possibly a 10.0 on the Common Vulnerability Scoring
    System (CVSS) v3, as we believe it should be possible to
    get an RCE on a KDC, which means that credentials can be
    compromised that can be used to impersonate anyone in a
    realm or forest of realms.
    Heimdal's ASN.1 compiler generates code that allows
    specially crafted DER encodings of CHOICEs to invoke the
    wrong free function on the decoded structure upon decode
    error. This is known to impact the Heimdal KDC, leading to
    an invalid free() of an address partly or wholly under the
    control of the attacker, in turn leading to a potential
    remote code execution (RCE) vulnerability.
    This error affects the DER codec for all extensible CHOICE
    types used in Heimdal, though not all cases will be
    exploitable. We have not completed a thorough analysis of
    all the Heimdal components affected, thus the Kerberos
    client, the X.509 library, and other parts, may be affected
    as well.
    This bug has been in Heimdal's ASN.1 compiler since 2005,
    but it may only affect Heimdal 1.6 and up. It was first
    reported by Douglas Bagnall, though it had been found
    independently by the Heimdal maintainers via fuzzing a few
    weeks earlier.
    While no zero-day exploit is known, such an exploit will
    likely be available soon after public disclosure.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  + Other changes:
  - Bugs found by UBSAN (including the incorrect encoding of
    unconstrained INTEGER value -1).
  - Errors found by the LLVM scan-build static analyzer.
  - Errors found by the valgrind memory debugger.
  - Work around GCC Bug 95189 (memcmp wrongly stripped like
    strcmp).
  - Correct ASN.1 OID typo for SHA-384
  - Fix a deadlock in in the MEMORY ccache type.
  - TGS: strip forwardable and proxiable flags if the server is
    disallowed.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  - Incremental HDB propagation improvements
    Refactor send_diffs making it progressive
    Handle partial writes on non-blocking sockets
    Disable Nagle in iprop master and slave
    Use async I/O
    Don't send I_HAVE in response to AYT
    Do not recover log in kadm5_get_principal()
    Don't send diffs to slaves with not yet known version
    Don't stutter in send_diffs
  - Optional backwards-compatible anon-pkinit behavior
- Removed heimdal-7.7.0-autoconf-2.70.patch, fixed upstream.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1673352000">- replace libheimdal conflicts by obsoletes / provides to provide a
  smooth update in the new libheimdal-devel.</changelog>
</package>
<package pkgid="b4c199109d3bc15c79a9513da729682c360a3eaf24cb2965e41dbac5af2f9f6a" name="libkafs0" arch="s390x">
  <version epoch="0" ver="7.8.0" rel="bp154.2.4.1"/>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1440936000">- Initial package, version 1.6rc2
- Added patch heimdal-version-script-client.map.patch to add file
  version-script-client.map (File is present in git for tag 1.6rc2
  but missing in tarball).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441108800">- Some changes in spec file to enable build for SLES.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441195200">- Added Conflicts tags to spec file because devel package conflicts
  with krb5-devel and krb5-mini-devel.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441454400">- Added a patched instead of the original tarball because only
  shared libraries will be build and source files of these (not to
  be build) programs have problematic licenses.
- Added script heimdal-patch-source.sh to sources.
- Added patch heimdal-patched.diff that fixes configure.ac and
  several Makefile.am files to successfully build patched source.
- Removed unneeded dependencies in spec file for build.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1483790400">- Update to version 7.1.0
- Removed heimdal-version-script-client.map.patch, fixed upstream.
- Fixed heimdal-patched.diff.
- Unfortunately there is no updated changelog file in tarball,
  changes can be seen in source code version control systems
  history log.</changelog>
  <changelog author="jengelh@inai.de" date="1486036800">- Summary and RPM group update. Do a direct call to ldconfig
  where possible.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1497528000">- Update to version 7.3.0
  - Security
    + Fix transit path validation. Commit f469fc6 (2010-10-02)
    inadvertently caused the previous hop realm to not be added
    to the transit path of issued tickets. This may, in some
    cases, enable bypass of capath policy in Heimdal versions 1.5
    through 7.2.
    Note, this may break sites that rely on the bug. With the bug
    some incomplete [capaths] worked, that should not have.
    These may now break authentication in some cross-realm
    configurations. (CVE-2017-6594)
- Version 7.2.0
  - Bug fixes
    + Portability improvements.
    + More strict parsing of encoded URI components in HTTP KDC.
    + Fixed memory leak in malloc error recovery in NTLM GSSAPI
    mechanism.
    + Avoid overly specific CPU info in krb5-config in aid of
    reproducible builds.
    + Don't do AFS string-to-key tests when feature is disabled.
    + Skip mdb_stat test when the command is not available.
    + Windows: update SHA2 timestamp server.
    + hdb: add missing export
    hdb_generate_key_set_password_with_ks_tuple.
    + Fix signature of hdb_generate_key_set_password().
    + Windows: enable KX509 support in the KDC.
    + kdc: fix kx509 service principal match.
    + iprop: handle case where master sends nothing new.
    + ipropd-slave: fix incorrect error codes.
    + Allow choice of sqlite for HDB pref.
    + check-iprop: don't fail to kill daemons.
    + roken: pidfile -&gt; rk_pidfile.
    + kdc: _kdc_do_kx509 fix use after free error.
    + Do not detect x32 as 64-bit platform.
    + No sys/ttydefaults.h on CYGWIN.
    + Fix check-iprop races.
    + roken_detach_prep() close pipe.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1501761600">- Update to version 7.4.0
  - Security
  - Fix CVE-2017-11103: Orpheus' Lyre KDC-REP service name
    validation.
    This is a critical vulnerability.
    In _krb5_extract_ticket() the KDC-REP service name must be
    obtained from encrypted version stored in 'enc_part' instead
    of the unencrypted version stored in 'ticket'.
    Use of the unecrypted version provides an opportunity for
    successful server impersonation and other attacks.
    Identified by Jeffrey Altman, Viktor Duchovni and
    Nico Williams.
    See https://www.orpheus-lyre.info/ for more details.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1512648000">- Added Avoid_NULL_structure_pointer_member_dereference.patch,
  fixes (bsc#1071675).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1514548800">- Update to version 7.5.0
  - Security
  - Fix CVE-2017-17439, which is a remote denial of service
    vulnerability:
    In Heimdal 7.1 through 7.4, remote unauthenticated attackers
    are able to crash the KDC by sending a crafted UDP packet
    containing empty data fields for client name or realm.
  - Bug fixes
  - Handle long input lines when reloading database dumps.
  - In pre-forked mode (default on Unix), correctly clear the
    process ids of exited children, allowing new child processes
    to replace the old.
  - Fixed incorrect KDC response when no-cross realm TGT exists,
    allowing client requests to fail quickly rather than time
    out after trying to get a correct answer from each KDC.
- Fixed heimdal-patched.diff.
- Removed Avoid_NULL_structure_pointer_member_dereference.patch,
  fixed upstream.</changelog>
  <changelog author="bwiedemann@suse.com" date="1533643200">- Add reproducible.patch to override build date (boo#1047218)
- Use constant hostname (boo#1084909)</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1561291200">- Update to version 7.7.0
  + Bug fixes:
  - PKCS#11 hcrypto back-end:
    + initialize the p11_module_load function list
    + verify that not only is a mechanism present but that its
    mechanism info states that it offers the required
    encryption, decryption or digest services
  - krb5:
    + Starting with 7.6, Heimdal permitted requesting
    authenticated anonymous tickets. However, it did not
    verify that a KDC in fact returned an anonymous ticket
    when one was requested.
    + Cease setting the KDCOption reaquest_anonymous flag when
    issuing S4UProxy (constrained delegation) TGS requests.
    + when the Win2K PKINIT compatibility option is set, do not
    require krbtgt otherName to match when validating KDC
    certificate.
    + set PKINIT_BTMM flag per Apple implementation
    + use memset_s() instead of memset()
  - kdc:
    + When generating KRB5SignedPath in the AS, use the reply
    client name rather than the one from the request, so
    validation will work correctly in the TGS.
    + allow checksum of PA-FOR-USER to be HMAC_MD5. Even if TGT
    used an enctype with a different checksum. Per [MS-SFU]
    2.2.1 PA-FOR-USER the checksum is always HMAC_MD5, and
    that's what Windows and MIT clients send.
    In Heimdal both the client and kdc use instead the
    checksum of the TGT, and therefore work with each other
    but Windows and MIT clients fail against Heimdal KDC.
    Both Windows and MIT KDC would allow any keyed checksum
    to be used so Heimdal client work fine against it.
    Change Heimdal KDC to allow HMAC_MD5 even for non RC4
    based TGT in order to support per-spec clients.
    + use memset_s() instead of memset()
    + Detect Heimdal 1.0 through 7.6 clients that issue
    S4UProxy (constrained delegation) TGS Requests with the
    request anonymous flag set. These requests will be
    treated as S4UProxy requests and not anonymous requests.
  - HDB:
    + Set SQLite3 backend default page size to 8KB.
    + Add hdb_set_sync() method
  - kadmind:
    + disable HDB sync during database load avoiding
    unnecessary disk i/o.
  - ipropd:
    + disable HDB sync during receive_everything. Doing an
    fsync per-record when receiving the complete HDB is a
    performance disaster. Among other things, if the HDB is
    very large, then one slave receving a full HDB can cause
    other slaves to timeout and, if HDB write activity is
    high enough to cause iprop log truncation, then also need
    full syncs, which leads to a cycle of full syncs for all
    slaves until HDB write activity drops.
    Allowing the iprop log to be larger helps, but improving
    receive_everything() performance helps even more.
  - kinit:
    + Anonymous PKINIT tickets discard the realm information
    used to locate the issuing AS. Store the issuing realm in
    the credentials cache in order to locate a KDC which can
    renew them.
    + Do not leak the result of krb5_cc_get_config() when
    determining anonymous PKINIT start realm.
  - klist:
    + Show transited-policy-checked, ok-as-delegate and
    anonymous flags when listing credentials.
  - tests:
    + Regenerate certs so that they expire before the 2038
    armageddon so the test suite will pass on 32-bit
    operating systems until the underlying issues can be
    resolved.
  - Solaris:
    + Define _STDC_C11_BCI for memset_s prototype
  - build tooling:
    + Convert from python 2 to python 3
  - documentation:
    + rename verify-password to verify-password-quality
    + hprop default mode is encrypt
    + kadmind "all" permission does not include "get-keys"
    + verify-password-quality might not be stateless
- Version 7.6.0
  + Security (#555):
  - CVE-2018-16860 Heimdal KDC: Reject PA-S4U2Self with unkeyed
    checksum
    When the Heimdal KDC checks the checksum that is placed on
    the S4U2Self packet by the server to protect the requested
    principal against modification, it does not confirm that
    the checksum algorithm that protects the user name
    (principal) in the request is keyed. This allows a
    man-in-the-middle attacker who can intercept the request to
    the KDC to modify the packet by replacing the user name
    (principal) in the request with any desired user name
    (principal) that exists in the KDC and replace the checksum
    protecting that name with a CRC32 checksum (which requires
    no prior knowledge to compute).
    This would allow a S4U2Self ticket requested on behalf of
    user name (principal) user@EXAMPLE.COM to any service to be
    changed to a S4U2Self ticket with a user name (principal) of
    Administrator@EXAMPLE.COM. This ticket would then contain
    the PAC of the modified user name (principal).
  - CVE-2019-12098, client-only:
    RFC8062 Section 7 requires verification of the PA-PKINIT-KX
    key exchange when anonymous PKINIT is used. Failure to do
    so can permit an active attacker to become a
    man-in-the-middle.
  + Bug fixes:
  - Happy eyeballs: Don't wait for responses from
    known-unreachable KDCs.
  - kdc:
    + check return copy_Realm, copy_PrincipalName,
    copy_EncryptionKey
  - kinit:
    + cleanup temporary ccaches
    + see man page for "kinit --anonymous" command line syntax
    change
  - kdc:
    + Make anonymous AS-requests more RFC8062-compliant.
    Updated expired test certificates
  - Solaris:
    + PKCS#11 hcrypto backend broken since 7.0.1
    + Building with Sun Pro C
  + Features:
  - kuser: support authenticated anonymous AS-REQs in kinit
  - kdc: support for anonymous TGS-REQs
  - kgetcred support for anonymous service tickets
  - Support builds with OpenSSL 1.1.1
- fixed heimdal-patched.diff and reproducible.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1653480000">- Apply Shared Library Packaging Policy and resolve rpmlint
  errors like "libheimdal.x86_64: E: shlib-policy-name-error
  SONAME: libasn1.so.8, expected package suffix: 8"</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656417600">- Add heimdal-7.7.0-autoconf-2.70.patch: Fix build with autoconf
  2.70 (gh#heimdal/heimdal#856).</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656590400">- Add ldconfig scriptlets.
- Fix 'Conflicts:' tags.
- Remove obsolete macros and conditionals.
- Ran spec-cleaner.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1671624000">- Update to version 7.8.0
  + This release includes both the Heimdal 7.7.1 Security
    Vulnerability fixes and non-Security bug fixes/improvements.
  + Security Vulnerabilities:
  - CVE-2022-42898 PAC parse integer overflows
  - CVE-2022-3437 Overflows and non-constant time leaks in
    DES{,3} and arcfour
  - CVE-2022-41916 Fix Unicode normalization read of 1 bytes past
    end of array
  - CVE-2021-44758 A null pointer de-reference DoS in SPNEGO
    acceptors
  - CVE-2021-3671 A null pointer de-reference when handling
    missing sname in TGS-REQ
  - CVE-2022-44640 Heimdal KDC: invalid free in ASN.1 codec
    Note that CVE-2022-44640 is a severe vulnerability,
    possibly a 10.0 on the Common Vulnerability Scoring
    System (CVSS) v3, as we believe it should be possible to
    get an RCE on a KDC, which means that credentials can be
    compromised that can be used to impersonate anyone in a
    realm or forest of realms.
    Heimdal's ASN.1 compiler generates code that allows
    specially crafted DER encodings of CHOICEs to invoke the
    wrong free function on the decoded structure upon decode
    error. This is known to impact the Heimdal KDC, leading to
    an invalid free() of an address partly or wholly under the
    control of the attacker, in turn leading to a potential
    remote code execution (RCE) vulnerability.
    This error affects the DER codec for all extensible CHOICE
    types used in Heimdal, though not all cases will be
    exploitable. We have not completed a thorough analysis of
    all the Heimdal components affected, thus the Kerberos
    client, the X.509 library, and other parts, may be affected
    as well.
    This bug has been in Heimdal's ASN.1 compiler since 2005,
    but it may only affect Heimdal 1.6 and up. It was first
    reported by Douglas Bagnall, though it had been found
    independently by the Heimdal maintainers via fuzzing a few
    weeks earlier.
    While no zero-day exploit is known, such an exploit will
    likely be available soon after public disclosure.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  + Other changes:
  - Bugs found by UBSAN (including the incorrect encoding of
    unconstrained INTEGER value -1).
  - Errors found by the LLVM scan-build static analyzer.
  - Errors found by the valgrind memory debugger.
  - Work around GCC Bug 95189 (memcmp wrongly stripped like
    strcmp).
  - Correct ASN.1 OID typo for SHA-384
  - Fix a deadlock in in the MEMORY ccache type.
  - TGS: strip forwardable and proxiable flags if the server is
    disallowed.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  - Incremental HDB propagation improvements
    Refactor send_diffs making it progressive
    Handle partial writes on non-blocking sockets
    Disable Nagle in iprop master and slave
    Use async I/O
    Don't send I_HAVE in response to AYT
    Do not recover log in kadm5_get_principal()
    Don't send diffs to slaves with not yet known version
    Don't stutter in send_diffs
  - Optional backwards-compatible anon-pkinit behavior
- Removed heimdal-7.7.0-autoconf-2.70.patch, fixed upstream.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1673352000">- replace libheimdal conflicts by obsoletes / provides to provide a
  smooth update in the new libheimdal-devel.</changelog>
</package>
<package pkgid="10b03821c5774245e467b2b86059c37d8bc9eca65caec09f1ea06611b7fef34c" name="libkafs0" arch="x86_64">
  <version epoch="0" ver="7.8.0" rel="bp154.2.4.1"/>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1440936000">- Initial package, version 1.6rc2
- Added patch heimdal-version-script-client.map.patch to add file
  version-script-client.map (File is present in git for tag 1.6rc2
  but missing in tarball).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441108800">- Some changes in spec file to enable build for SLES.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441195200">- Added Conflicts tags to spec file because devel package conflicts
  with krb5-devel and krb5-mini-devel.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441454400">- Added a patched instead of the original tarball because only
  shared libraries will be build and source files of these (not to
  be build) programs have problematic licenses.
- Added script heimdal-patch-source.sh to sources.
- Added patch heimdal-patched.diff that fixes configure.ac and
  several Makefile.am files to successfully build patched source.
- Removed unneeded dependencies in spec file for build.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1483790400">- Update to version 7.1.0
- Removed heimdal-version-script-client.map.patch, fixed upstream.
- Fixed heimdal-patched.diff.
- Unfortunately there is no updated changelog file in tarball,
  changes can be seen in source code version control systems
  history log.</changelog>
  <changelog author="jengelh@inai.de" date="1486036800">- Summary and RPM group update. Do a direct call to ldconfig
  where possible.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1497528000">- Update to version 7.3.0
  - Security
    + Fix transit path validation. Commit f469fc6 (2010-10-02)
    inadvertently caused the previous hop realm to not be added
    to the transit path of issued tickets. This may, in some
    cases, enable bypass of capath policy in Heimdal versions 1.5
    through 7.2.
    Note, this may break sites that rely on the bug. With the bug
    some incomplete [capaths] worked, that should not have.
    These may now break authentication in some cross-realm
    configurations. (CVE-2017-6594)
- Version 7.2.0
  - Bug fixes
    + Portability improvements.
    + More strict parsing of encoded URI components in HTTP KDC.
    + Fixed memory leak in malloc error recovery in NTLM GSSAPI
    mechanism.
    + Avoid overly specific CPU info in krb5-config in aid of
    reproducible builds.
    + Don't do AFS string-to-key tests when feature is disabled.
    + Skip mdb_stat test when the command is not available.
    + Windows: update SHA2 timestamp server.
    + hdb: add missing export
    hdb_generate_key_set_password_with_ks_tuple.
    + Fix signature of hdb_generate_key_set_password().
    + Windows: enable KX509 support in the KDC.
    + kdc: fix kx509 service principal match.
    + iprop: handle case where master sends nothing new.
    + ipropd-slave: fix incorrect error codes.
    + Allow choice of sqlite for HDB pref.
    + check-iprop: don't fail to kill daemons.
    + roken: pidfile -&gt; rk_pidfile.
    + kdc: _kdc_do_kx509 fix use after free error.
    + Do not detect x32 as 64-bit platform.
    + No sys/ttydefaults.h on CYGWIN.
    + Fix check-iprop races.
    + roken_detach_prep() close pipe.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1501761600">- Update to version 7.4.0
  - Security
  - Fix CVE-2017-11103: Orpheus' Lyre KDC-REP service name
    validation.
    This is a critical vulnerability.
    In _krb5_extract_ticket() the KDC-REP service name must be
    obtained from encrypted version stored in 'enc_part' instead
    of the unencrypted version stored in 'ticket'.
    Use of the unecrypted version provides an opportunity for
    successful server impersonation and other attacks.
    Identified by Jeffrey Altman, Viktor Duchovni and
    Nico Williams.
    See https://www.orpheus-lyre.info/ for more details.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1512648000">- Added Avoid_NULL_structure_pointer_member_dereference.patch,
  fixes (bsc#1071675).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1514548800">- Update to version 7.5.0
  - Security
  - Fix CVE-2017-17439, which is a remote denial of service
    vulnerability:
    In Heimdal 7.1 through 7.4, remote unauthenticated attackers
    are able to crash the KDC by sending a crafted UDP packet
    containing empty data fields for client name or realm.
  - Bug fixes
  - Handle long input lines when reloading database dumps.
  - In pre-forked mode (default on Unix), correctly clear the
    process ids of exited children, allowing new child processes
    to replace the old.
  - Fixed incorrect KDC response when no-cross realm TGT exists,
    allowing client requests to fail quickly rather than time
    out after trying to get a correct answer from each KDC.
- Fixed heimdal-patched.diff.
- Removed Avoid_NULL_structure_pointer_member_dereference.patch,
  fixed upstream.</changelog>
  <changelog author="bwiedemann@suse.com" date="1533643200">- Add reproducible.patch to override build date (boo#1047218)
- Use constant hostname (boo#1084909)</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1561291200">- Update to version 7.7.0
  + Bug fixes:
  - PKCS#11 hcrypto back-end:
    + initialize the p11_module_load function list
    + verify that not only is a mechanism present but that its
    mechanism info states that it offers the required
    encryption, decryption or digest services
  - krb5:
    + Starting with 7.6, Heimdal permitted requesting
    authenticated anonymous tickets. However, it did not
    verify that a KDC in fact returned an anonymous ticket
    when one was requested.
    + Cease setting the KDCOption reaquest_anonymous flag when
    issuing S4UProxy (constrained delegation) TGS requests.
    + when the Win2K PKINIT compatibility option is set, do not
    require krbtgt otherName to match when validating KDC
    certificate.
    + set PKINIT_BTMM flag per Apple implementation
    + use memset_s() instead of memset()
  - kdc:
    + When generating KRB5SignedPath in the AS, use the reply
    client name rather than the one from the request, so
    validation will work correctly in the TGS.
    + allow checksum of PA-FOR-USER to be HMAC_MD5. Even if TGT
    used an enctype with a different checksum. Per [MS-SFU]
    2.2.1 PA-FOR-USER the checksum is always HMAC_MD5, and
    that's what Windows and MIT clients send.
    In Heimdal both the client and kdc use instead the
    checksum of the TGT, and therefore work with each other
    but Windows and MIT clients fail against Heimdal KDC.
    Both Windows and MIT KDC would allow any keyed checksum
    to be used so Heimdal client work fine against it.
    Change Heimdal KDC to allow HMAC_MD5 even for non RC4
    based TGT in order to support per-spec clients.
    + use memset_s() instead of memset()
    + Detect Heimdal 1.0 through 7.6 clients that issue
    S4UProxy (constrained delegation) TGS Requests with the
    request anonymous flag set. These requests will be
    treated as S4UProxy requests and not anonymous requests.
  - HDB:
    + Set SQLite3 backend default page size to 8KB.
    + Add hdb_set_sync() method
  - kadmind:
    + disable HDB sync during database load avoiding
    unnecessary disk i/o.
  - ipropd:
    + disable HDB sync during receive_everything. Doing an
    fsync per-record when receiving the complete HDB is a
    performance disaster. Among other things, if the HDB is
    very large, then one slave receving a full HDB can cause
    other slaves to timeout and, if HDB write activity is
    high enough to cause iprop log truncation, then also need
    full syncs, which leads to a cycle of full syncs for all
    slaves until HDB write activity drops.
    Allowing the iprop log to be larger helps, but improving
    receive_everything() performance helps even more.
  - kinit:
    + Anonymous PKINIT tickets discard the realm information
    used to locate the issuing AS. Store the issuing realm in
    the credentials cache in order to locate a KDC which can
    renew them.
    + Do not leak the result of krb5_cc_get_config() when
    determining anonymous PKINIT start realm.
  - klist:
    + Show transited-policy-checked, ok-as-delegate and
    anonymous flags when listing credentials.
  - tests:
    + Regenerate certs so that they expire before the 2038
    armageddon so the test suite will pass on 32-bit
    operating systems until the underlying issues can be
    resolved.
  - Solaris:
    + Define _STDC_C11_BCI for memset_s prototype
  - build tooling:
    + Convert from python 2 to python 3
  - documentation:
    + rename verify-password to verify-password-quality
    + hprop default mode is encrypt
    + kadmind "all" permission does not include "get-keys"
    + verify-password-quality might not be stateless
- Version 7.6.0
  + Security (#555):
  - CVE-2018-16860 Heimdal KDC: Reject PA-S4U2Self with unkeyed
    checksum
    When the Heimdal KDC checks the checksum that is placed on
    the S4U2Self packet by the server to protect the requested
    principal against modification, it does not confirm that
    the checksum algorithm that protects the user name
    (principal) in the request is keyed. This allows a
    man-in-the-middle attacker who can intercept the request to
    the KDC to modify the packet by replacing the user name
    (principal) in the request with any desired user name
    (principal) that exists in the KDC and replace the checksum
    protecting that name with a CRC32 checksum (which requires
    no prior knowledge to compute).
    This would allow a S4U2Self ticket requested on behalf of
    user name (principal) user@EXAMPLE.COM to any service to be
    changed to a S4U2Self ticket with a user name (principal) of
    Administrator@EXAMPLE.COM. This ticket would then contain
    the PAC of the modified user name (principal).
  - CVE-2019-12098, client-only:
    RFC8062 Section 7 requires verification of the PA-PKINIT-KX
    key exchange when anonymous PKINIT is used. Failure to do
    so can permit an active attacker to become a
    man-in-the-middle.
  + Bug fixes:
  - Happy eyeballs: Don't wait for responses from
    known-unreachable KDCs.
  - kdc:
    + check return copy_Realm, copy_PrincipalName,
    copy_EncryptionKey
  - kinit:
    + cleanup temporary ccaches
    + see man page for "kinit --anonymous" command line syntax
    change
  - kdc:
    + Make anonymous AS-requests more RFC8062-compliant.
    Updated expired test certificates
  - Solaris:
    + PKCS#11 hcrypto backend broken since 7.0.1
    + Building with Sun Pro C
  + Features:
  - kuser: support authenticated anonymous AS-REQs in kinit
  - kdc: support for anonymous TGS-REQs
  - kgetcred support for anonymous service tickets
  - Support builds with OpenSSL 1.1.1
- fixed heimdal-patched.diff and reproducible.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1653480000">- Apply Shared Library Packaging Policy and resolve rpmlint
  errors like "libheimdal.x86_64: E: shlib-policy-name-error
  SONAME: libasn1.so.8, expected package suffix: 8"</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656417600">- Add heimdal-7.7.0-autoconf-2.70.patch: Fix build with autoconf
  2.70 (gh#heimdal/heimdal#856).</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656590400">- Add ldconfig scriptlets.
- Fix 'Conflicts:' tags.
- Remove obsolete macros and conditionals.
- Ran spec-cleaner.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1671624000">- Update to version 7.8.0
  + This release includes both the Heimdal 7.7.1 Security
    Vulnerability fixes and non-Security bug fixes/improvements.
  + Security Vulnerabilities:
  - CVE-2022-42898 PAC parse integer overflows
  - CVE-2022-3437 Overflows and non-constant time leaks in
    DES{,3} and arcfour
  - CVE-2022-41916 Fix Unicode normalization read of 1 bytes past
    end of array
  - CVE-2021-44758 A null pointer de-reference DoS in SPNEGO
    acceptors
  - CVE-2021-3671 A null pointer de-reference when handling
    missing sname in TGS-REQ
  - CVE-2022-44640 Heimdal KDC: invalid free in ASN.1 codec
    Note that CVE-2022-44640 is a severe vulnerability,
    possibly a 10.0 on the Common Vulnerability Scoring
    System (CVSS) v3, as we believe it should be possible to
    get an RCE on a KDC, which means that credentials can be
    compromised that can be used to impersonate anyone in a
    realm or forest of realms.
    Heimdal's ASN.1 compiler generates code that allows
    specially crafted DER encodings of CHOICEs to invoke the
    wrong free function on the decoded structure upon decode
    error. This is known to impact the Heimdal KDC, leading to
    an invalid free() of an address partly or wholly under the
    control of the attacker, in turn leading to a potential
    remote code execution (RCE) vulnerability.
    This error affects the DER codec for all extensible CHOICE
    types used in Heimdal, though not all cases will be
    exploitable. We have not completed a thorough analysis of
    all the Heimdal components affected, thus the Kerberos
    client, the X.509 library, and other parts, may be affected
    as well.
    This bug has been in Heimdal's ASN.1 compiler since 2005,
    but it may only affect Heimdal 1.6 and up. It was first
    reported by Douglas Bagnall, though it had been found
    independently by the Heimdal maintainers via fuzzing a few
    weeks earlier.
    While no zero-day exploit is known, such an exploit will
    likely be available soon after public disclosure.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  + Other changes:
  - Bugs found by UBSAN (including the incorrect encoding of
    unconstrained INTEGER value -1).
  - Errors found by the LLVM scan-build static analyzer.
  - Errors found by the valgrind memory debugger.
  - Work around GCC Bug 95189 (memcmp wrongly stripped like
    strcmp).
  - Correct ASN.1 OID typo for SHA-384
  - Fix a deadlock in in the MEMORY ccache type.
  - TGS: strip forwardable and proxiable flags if the server is
    disallowed.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  - Incremental HDB propagation improvements
    Refactor send_diffs making it progressive
    Handle partial writes on non-blocking sockets
    Disable Nagle in iprop master and slave
    Use async I/O
    Don't send I_HAVE in response to AYT
    Do not recover log in kadm5_get_principal()
    Don't send diffs to slaves with not yet known version
    Don't stutter in send_diffs
  - Optional backwards-compatible anon-pkinit behavior
- Removed heimdal-7.7.0-autoconf-2.70.patch, fixed upstream.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1673352000">- replace libheimdal conflicts by obsoletes / provides to provide a
  smooth update in the new libheimdal-devel.</changelog>
</package>
<package pkgid="66eb711b2f9db30820abe9c0c872a8d2b335b5fd5ad4605ba202b96742c5751f" name="libkdc2" arch="aarch64">
  <version epoch="0" ver="7.8.0" rel="bp154.2.4.1"/>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1440936000">- Initial package, version 1.6rc2
- Added patch heimdal-version-script-client.map.patch to add file
  version-script-client.map (File is present in git for tag 1.6rc2
  but missing in tarball).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441108800">- Some changes in spec file to enable build for SLES.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441195200">- Added Conflicts tags to spec file because devel package conflicts
  with krb5-devel and krb5-mini-devel.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441454400">- Added a patched instead of the original tarball because only
  shared libraries will be build and source files of these (not to
  be build) programs have problematic licenses.
- Added script heimdal-patch-source.sh to sources.
- Added patch heimdal-patched.diff that fixes configure.ac and
  several Makefile.am files to successfully build patched source.
- Removed unneeded dependencies in spec file for build.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1483790400">- Update to version 7.1.0
- Removed heimdal-version-script-client.map.patch, fixed upstream.
- Fixed heimdal-patched.diff.
- Unfortunately there is no updated changelog file in tarball,
  changes can be seen in source code version control systems
  history log.</changelog>
  <changelog author="jengelh@inai.de" date="1486036800">- Summary and RPM group update. Do a direct call to ldconfig
  where possible.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1497528000">- Update to version 7.3.0
  - Security
    + Fix transit path validation. Commit f469fc6 (2010-10-02)
    inadvertently caused the previous hop realm to not be added
    to the transit path of issued tickets. This may, in some
    cases, enable bypass of capath policy in Heimdal versions 1.5
    through 7.2.
    Note, this may break sites that rely on the bug. With the bug
    some incomplete [capaths] worked, that should not have.
    These may now break authentication in some cross-realm
    configurations. (CVE-2017-6594)
- Version 7.2.0
  - Bug fixes
    + Portability improvements.
    + More strict parsing of encoded URI components in HTTP KDC.
    + Fixed memory leak in malloc error recovery in NTLM GSSAPI
    mechanism.
    + Avoid overly specific CPU info in krb5-config in aid of
    reproducible builds.
    + Don't do AFS string-to-key tests when feature is disabled.
    + Skip mdb_stat test when the command is not available.
    + Windows: update SHA2 timestamp server.
    + hdb: add missing export
    hdb_generate_key_set_password_with_ks_tuple.
    + Fix signature of hdb_generate_key_set_password().
    + Windows: enable KX509 support in the KDC.
    + kdc: fix kx509 service principal match.
    + iprop: handle case where master sends nothing new.
    + ipropd-slave: fix incorrect error codes.
    + Allow choice of sqlite for HDB pref.
    + check-iprop: don't fail to kill daemons.
    + roken: pidfile -&gt; rk_pidfile.
    + kdc: _kdc_do_kx509 fix use after free error.
    + Do not detect x32 as 64-bit platform.
    + No sys/ttydefaults.h on CYGWIN.
    + Fix check-iprop races.
    + roken_detach_prep() close pipe.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1501761600">- Update to version 7.4.0
  - Security
  - Fix CVE-2017-11103: Orpheus' Lyre KDC-REP service name
    validation.
    This is a critical vulnerability.
    In _krb5_extract_ticket() the KDC-REP service name must be
    obtained from encrypted version stored in 'enc_part' instead
    of the unencrypted version stored in 'ticket'.
    Use of the unecrypted version provides an opportunity for
    successful server impersonation and other attacks.
    Identified by Jeffrey Altman, Viktor Duchovni and
    Nico Williams.
    See https://www.orpheus-lyre.info/ for more details.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1512648000">- Added Avoid_NULL_structure_pointer_member_dereference.patch,
  fixes (bsc#1071675).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1514548800">- Update to version 7.5.0
  - Security
  - Fix CVE-2017-17439, which is a remote denial of service
    vulnerability:
    In Heimdal 7.1 through 7.4, remote unauthenticated attackers
    are able to crash the KDC by sending a crafted UDP packet
    containing empty data fields for client name or realm.
  - Bug fixes
  - Handle long input lines when reloading database dumps.
  - In pre-forked mode (default on Unix), correctly clear the
    process ids of exited children, allowing new child processes
    to replace the old.
  - Fixed incorrect KDC response when no-cross realm TGT exists,
    allowing client requests to fail quickly rather than time
    out after trying to get a correct answer from each KDC.
- Fixed heimdal-patched.diff.
- Removed Avoid_NULL_structure_pointer_member_dereference.patch,
  fixed upstream.</changelog>
  <changelog author="bwiedemann@suse.com" date="1533643200">- Add reproducible.patch to override build date (boo#1047218)
- Use constant hostname (boo#1084909)</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1561291200">- Update to version 7.7.0
  + Bug fixes:
  - PKCS#11 hcrypto back-end:
    + initialize the p11_module_load function list
    + verify that not only is a mechanism present but that its
    mechanism info states that it offers the required
    encryption, decryption or digest services
  - krb5:
    + Starting with 7.6, Heimdal permitted requesting
    authenticated anonymous tickets. However, it did not
    verify that a KDC in fact returned an anonymous ticket
    when one was requested.
    + Cease setting the KDCOption reaquest_anonymous flag when
    issuing S4UProxy (constrained delegation) TGS requests.
    + when the Win2K PKINIT compatibility option is set, do not
    require krbtgt otherName to match when validating KDC
    certificate.
    + set PKINIT_BTMM flag per Apple implementation
    + use memset_s() instead of memset()
  - kdc:
    + When generating KRB5SignedPath in the AS, use the reply
    client name rather than the one from the request, so
    validation will work correctly in the TGS.
    + allow checksum of PA-FOR-USER to be HMAC_MD5. Even if TGT
    used an enctype with a different checksum. Per [MS-SFU]
    2.2.1 PA-FOR-USER the checksum is always HMAC_MD5, and
    that's what Windows and MIT clients send.
    In Heimdal both the client and kdc use instead the
    checksum of the TGT, and therefore work with each other
    but Windows and MIT clients fail against Heimdal KDC.
    Both Windows and MIT KDC would allow any keyed checksum
    to be used so Heimdal client work fine against it.
    Change Heimdal KDC to allow HMAC_MD5 even for non RC4
    based TGT in order to support per-spec clients.
    + use memset_s() instead of memset()
    + Detect Heimdal 1.0 through 7.6 clients that issue
    S4UProxy (constrained delegation) TGS Requests with the
    request anonymous flag set. These requests will be
    treated as S4UProxy requests and not anonymous requests.
  - HDB:
    + Set SQLite3 backend default page size to 8KB.
    + Add hdb_set_sync() method
  - kadmind:
    + disable HDB sync during database load avoiding
    unnecessary disk i/o.
  - ipropd:
    + disable HDB sync during receive_everything. Doing an
    fsync per-record when receiving the complete HDB is a
    performance disaster. Among other things, if the HDB is
    very large, then one slave receving a full HDB can cause
    other slaves to timeout and, if HDB write activity is
    high enough to cause iprop log truncation, then also need
    full syncs, which leads to a cycle of full syncs for all
    slaves until HDB write activity drops.
    Allowing the iprop log to be larger helps, but improving
    receive_everything() performance helps even more.
  - kinit:
    + Anonymous PKINIT tickets discard the realm information
    used to locate the issuing AS. Store the issuing realm in
    the credentials cache in order to locate a KDC which can
    renew them.
    + Do not leak the result of krb5_cc_get_config() when
    determining anonymous PKINIT start realm.
  - klist:
    + Show transited-policy-checked, ok-as-delegate and
    anonymous flags when listing credentials.
  - tests:
    + Regenerate certs so that they expire before the 2038
    armageddon so the test suite will pass on 32-bit
    operating systems until the underlying issues can be
    resolved.
  - Solaris:
    + Define _STDC_C11_BCI for memset_s prototype
  - build tooling:
    + Convert from python 2 to python 3
  - documentation:
    + rename verify-password to verify-password-quality
    + hprop default mode is encrypt
    + kadmind "all" permission does not include "get-keys"
    + verify-password-quality might not be stateless
- Version 7.6.0
  + Security (#555):
  - CVE-2018-16860 Heimdal KDC: Reject PA-S4U2Self with unkeyed
    checksum
    When the Heimdal KDC checks the checksum that is placed on
    the S4U2Self packet by the server to protect the requested
    principal against modification, it does not confirm that
    the checksum algorithm that protects the user name
    (principal) in the request is keyed. This allows a
    man-in-the-middle attacker who can intercept the request to
    the KDC to modify the packet by replacing the user name
    (principal) in the request with any desired user name
    (principal) that exists in the KDC and replace the checksum
    protecting that name with a CRC32 checksum (which requires
    no prior knowledge to compute).
    This would allow a S4U2Self ticket requested on behalf of
    user name (principal) user@EXAMPLE.COM to any service to be
    changed to a S4U2Self ticket with a user name (principal) of
    Administrator@EXAMPLE.COM. This ticket would then contain
    the PAC of the modified user name (principal).
  - CVE-2019-12098, client-only:
    RFC8062 Section 7 requires verification of the PA-PKINIT-KX
    key exchange when anonymous PKINIT is used. Failure to do
    so can permit an active attacker to become a
    man-in-the-middle.
  + Bug fixes:
  - Happy eyeballs: Don't wait for responses from
    known-unreachable KDCs.
  - kdc:
    + check return copy_Realm, copy_PrincipalName,
    copy_EncryptionKey
  - kinit:
    + cleanup temporary ccaches
    + see man page for "kinit --anonymous" command line syntax
    change
  - kdc:
    + Make anonymous AS-requests more RFC8062-compliant.
    Updated expired test certificates
  - Solaris:
    + PKCS#11 hcrypto backend broken since 7.0.1
    + Building with Sun Pro C
  + Features:
  - kuser: support authenticated anonymous AS-REQs in kinit
  - kdc: support for anonymous TGS-REQs
  - kgetcred support for anonymous service tickets
  - Support builds with OpenSSL 1.1.1
- fixed heimdal-patched.diff and reproducible.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1653480000">- Apply Shared Library Packaging Policy and resolve rpmlint
  errors like "libheimdal.x86_64: E: shlib-policy-name-error
  SONAME: libasn1.so.8, expected package suffix: 8"</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656417600">- Add heimdal-7.7.0-autoconf-2.70.patch: Fix build with autoconf
  2.70 (gh#heimdal/heimdal#856).</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656590400">- Add ldconfig scriptlets.
- Fix 'Conflicts:' tags.
- Remove obsolete macros and conditionals.
- Ran spec-cleaner.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1671624000">- Update to version 7.8.0
  + This release includes both the Heimdal 7.7.1 Security
    Vulnerability fixes and non-Security bug fixes/improvements.
  + Security Vulnerabilities:
  - CVE-2022-42898 PAC parse integer overflows
  - CVE-2022-3437 Overflows and non-constant time leaks in
    DES{,3} and arcfour
  - CVE-2022-41916 Fix Unicode normalization read of 1 bytes past
    end of array
  - CVE-2021-44758 A null pointer de-reference DoS in SPNEGO
    acceptors
  - CVE-2021-3671 A null pointer de-reference when handling
    missing sname in TGS-REQ
  - CVE-2022-44640 Heimdal KDC: invalid free in ASN.1 codec
    Note that CVE-2022-44640 is a severe vulnerability,
    possibly a 10.0 on the Common Vulnerability Scoring
    System (CVSS) v3, as we believe it should be possible to
    get an RCE on a KDC, which means that credentials can be
    compromised that can be used to impersonate anyone in a
    realm or forest of realms.
    Heimdal's ASN.1 compiler generates code that allows
    specially crafted DER encodings of CHOICEs to invoke the
    wrong free function on the decoded structure upon decode
    error. This is known to impact the Heimdal KDC, leading to
    an invalid free() of an address partly or wholly under the
    control of the attacker, in turn leading to a potential
    remote code execution (RCE) vulnerability.
    This error affects the DER codec for all extensible CHOICE
    types used in Heimdal, though not all cases will be
    exploitable. We have not completed a thorough analysis of
    all the Heimdal components affected, thus the Kerberos
    client, the X.509 library, and other parts, may be affected
    as well.
    This bug has been in Heimdal's ASN.1 compiler since 2005,
    but it may only affect Heimdal 1.6 and up. It was first
    reported by Douglas Bagnall, though it had been found
    independently by the Heimdal maintainers via fuzzing a few
    weeks earlier.
    While no zero-day exploit is known, such an exploit will
    likely be available soon after public disclosure.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  + Other changes:
  - Bugs found by UBSAN (including the incorrect encoding of
    unconstrained INTEGER value -1).
  - Errors found by the LLVM scan-build static analyzer.
  - Errors found by the valgrind memory debugger.
  - Work around GCC Bug 95189 (memcmp wrongly stripped like
    strcmp).
  - Correct ASN.1 OID typo for SHA-384
  - Fix a deadlock in in the MEMORY ccache type.
  - TGS: strip forwardable and proxiable flags if the server is
    disallowed.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  - Incremental HDB propagation improvements
    Refactor send_diffs making it progressive
    Handle partial writes on non-blocking sockets
    Disable Nagle in iprop master and slave
    Use async I/O
    Don't send I_HAVE in response to AYT
    Do not recover log in kadm5_get_principal()
    Don't send diffs to slaves with not yet known version
    Don't stutter in send_diffs
  - Optional backwards-compatible anon-pkinit behavior
- Removed heimdal-7.7.0-autoconf-2.70.patch, fixed upstream.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1673352000">- replace libheimdal conflicts by obsoletes / provides to provide a
  smooth update in the new libheimdal-devel.</changelog>
</package>
<package pkgid="20c6b2651bd36d2d31e1ad1e1c69ad5c7865f1fa5debecfc565284372b1ab1ac" name="libkdc2" arch="i586">
  <version epoch="0" ver="7.8.0" rel="bp154.2.4.1"/>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1440936000">- Initial package, version 1.6rc2
- Added patch heimdal-version-script-client.map.patch to add file
  version-script-client.map (File is present in git for tag 1.6rc2
  but missing in tarball).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441108800">- Some changes in spec file to enable build for SLES.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441195200">- Added Conflicts tags to spec file because devel package conflicts
  with krb5-devel and krb5-mini-devel.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441454400">- Added a patched instead of the original tarball because only
  shared libraries will be build and source files of these (not to
  be build) programs have problematic licenses.
- Added script heimdal-patch-source.sh to sources.
- Added patch heimdal-patched.diff that fixes configure.ac and
  several Makefile.am files to successfully build patched source.
- Removed unneeded dependencies in spec file for build.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1483790400">- Update to version 7.1.0
- Removed heimdal-version-script-client.map.patch, fixed upstream.
- Fixed heimdal-patched.diff.
- Unfortunately there is no updated changelog file in tarball,
  changes can be seen in source code version control systems
  history log.</changelog>
  <changelog author="jengelh@inai.de" date="1486036800">- Summary and RPM group update. Do a direct call to ldconfig
  where possible.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1497528000">- Update to version 7.3.0
  - Security
    + Fix transit path validation. Commit f469fc6 (2010-10-02)
    inadvertently caused the previous hop realm to not be added
    to the transit path of issued tickets. This may, in some
    cases, enable bypass of capath policy in Heimdal versions 1.5
    through 7.2.
    Note, this may break sites that rely on the bug. With the bug
    some incomplete [capaths] worked, that should not have.
    These may now break authentication in some cross-realm
    configurations. (CVE-2017-6594)
- Version 7.2.0
  - Bug fixes
    + Portability improvements.
    + More strict parsing of encoded URI components in HTTP KDC.
    + Fixed memory leak in malloc error recovery in NTLM GSSAPI
    mechanism.
    + Avoid overly specific CPU info in krb5-config in aid of
    reproducible builds.
    + Don't do AFS string-to-key tests when feature is disabled.
    + Skip mdb_stat test when the command is not available.
    + Windows: update SHA2 timestamp server.
    + hdb: add missing export
    hdb_generate_key_set_password_with_ks_tuple.
    + Fix signature of hdb_generate_key_set_password().
    + Windows: enable KX509 support in the KDC.
    + kdc: fix kx509 service principal match.
    + iprop: handle case where master sends nothing new.
    + ipropd-slave: fix incorrect error codes.
    + Allow choice of sqlite for HDB pref.
    + check-iprop: don't fail to kill daemons.
    + roken: pidfile -&gt; rk_pidfile.
    + kdc: _kdc_do_kx509 fix use after free error.
    + Do not detect x32 as 64-bit platform.
    + No sys/ttydefaults.h on CYGWIN.
    + Fix check-iprop races.
    + roken_detach_prep() close pipe.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1501761600">- Update to version 7.4.0
  - Security
  - Fix CVE-2017-11103: Orpheus' Lyre KDC-REP service name
    validation.
    This is a critical vulnerability.
    In _krb5_extract_ticket() the KDC-REP service name must be
    obtained from encrypted version stored in 'enc_part' instead
    of the unencrypted version stored in 'ticket'.
    Use of the unecrypted version provides an opportunity for
    successful server impersonation and other attacks.
    Identified by Jeffrey Altman, Viktor Duchovni and
    Nico Williams.
    See https://www.orpheus-lyre.info/ for more details.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1512648000">- Added Avoid_NULL_structure_pointer_member_dereference.patch,
  fixes (bsc#1071675).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1514548800">- Update to version 7.5.0
  - Security
  - Fix CVE-2017-17439, which is a remote denial of service
    vulnerability:
    In Heimdal 7.1 through 7.4, remote unauthenticated attackers
    are able to crash the KDC by sending a crafted UDP packet
    containing empty data fields for client name or realm.
  - Bug fixes
  - Handle long input lines when reloading database dumps.
  - In pre-forked mode (default on Unix), correctly clear the
    process ids of exited children, allowing new child processes
    to replace the old.
  - Fixed incorrect KDC response when no-cross realm TGT exists,
    allowing client requests to fail quickly rather than time
    out after trying to get a correct answer from each KDC.
- Fixed heimdal-patched.diff.
- Removed Avoid_NULL_structure_pointer_member_dereference.patch,
  fixed upstream.</changelog>
  <changelog author="bwiedemann@suse.com" date="1533643200">- Add reproducible.patch to override build date (boo#1047218)
- Use constant hostname (boo#1084909)</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1561291200">- Update to version 7.7.0
  + Bug fixes:
  - PKCS#11 hcrypto back-end:
    + initialize the p11_module_load function list
    + verify that not only is a mechanism present but that its
    mechanism info states that it offers the required
    encryption, decryption or digest services
  - krb5:
    + Starting with 7.6, Heimdal permitted requesting
    authenticated anonymous tickets. However, it did not
    verify that a KDC in fact returned an anonymous ticket
    when one was requested.
    + Cease setting the KDCOption reaquest_anonymous flag when
    issuing S4UProxy (constrained delegation) TGS requests.
    + when the Win2K PKINIT compatibility option is set, do not
    require krbtgt otherName to match when validating KDC
    certificate.
    + set PKINIT_BTMM flag per Apple implementation
    + use memset_s() instead of memset()
  - kdc:
    + When generating KRB5SignedPath in the AS, use the reply
    client name rather than the one from the request, so
    validation will work correctly in the TGS.
    + allow checksum of PA-FOR-USER to be HMAC_MD5. Even if TGT
    used an enctype with a different checksum. Per [MS-SFU]
    2.2.1 PA-FOR-USER the checksum is always HMAC_MD5, and
    that's what Windows and MIT clients send.
    In Heimdal both the client and kdc use instead the
    checksum of the TGT, and therefore work with each other
    but Windows and MIT clients fail against Heimdal KDC.
    Both Windows and MIT KDC would allow any keyed checksum
    to be used so Heimdal client work fine against it.
    Change Heimdal KDC to allow HMAC_MD5 even for non RC4
    based TGT in order to support per-spec clients.
    + use memset_s() instead of memset()
    + Detect Heimdal 1.0 through 7.6 clients that issue
    S4UProxy (constrained delegation) TGS Requests with the
    request anonymous flag set. These requests will be
    treated as S4UProxy requests and not anonymous requests.
  - HDB:
    + Set SQLite3 backend default page size to 8KB.
    + Add hdb_set_sync() method
  - kadmind:
    + disable HDB sync during database load avoiding
    unnecessary disk i/o.
  - ipropd:
    + disable HDB sync during receive_everything. Doing an
    fsync per-record when receiving the complete HDB is a
    performance disaster. Among other things, if the HDB is
    very large, then one slave receving a full HDB can cause
    other slaves to timeout and, if HDB write activity is
    high enough to cause iprop log truncation, then also need
    full syncs, which leads to a cycle of full syncs for all
    slaves until HDB write activity drops.
    Allowing the iprop log to be larger helps, but improving
    receive_everything() performance helps even more.
  - kinit:
    + Anonymous PKINIT tickets discard the realm information
    used to locate the issuing AS. Store the issuing realm in
    the credentials cache in order to locate a KDC which can
    renew them.
    + Do not leak the result of krb5_cc_get_config() when
    determining anonymous PKINIT start realm.
  - klist:
    + Show transited-policy-checked, ok-as-delegate and
    anonymous flags when listing credentials.
  - tests:
    + Regenerate certs so that they expire before the 2038
    armageddon so the test suite will pass on 32-bit
    operating systems until the underlying issues can be
    resolved.
  - Solaris:
    + Define _STDC_C11_BCI for memset_s prototype
  - build tooling:
    + Convert from python 2 to python 3
  - documentation:
    + rename verify-password to verify-password-quality
    + hprop default mode is encrypt
    + kadmind "all" permission does not include "get-keys"
    + verify-password-quality might not be stateless
- Version 7.6.0
  + Security (#555):
  - CVE-2018-16860 Heimdal KDC: Reject PA-S4U2Self with unkeyed
    checksum
    When the Heimdal KDC checks the checksum that is placed on
    the S4U2Self packet by the server to protect the requested
    principal against modification, it does not confirm that
    the checksum algorithm that protects the user name
    (principal) in the request is keyed. This allows a
    man-in-the-middle attacker who can intercept the request to
    the KDC to modify the packet by replacing the user name
    (principal) in the request with any desired user name
    (principal) that exists in the KDC and replace the checksum
    protecting that name with a CRC32 checksum (which requires
    no prior knowledge to compute).
    This would allow a S4U2Self ticket requested on behalf of
    user name (principal) user@EXAMPLE.COM to any service to be
    changed to a S4U2Self ticket with a user name (principal) of
    Administrator@EXAMPLE.COM. This ticket would then contain
    the PAC of the modified user name (principal).
  - CVE-2019-12098, client-only:
    RFC8062 Section 7 requires verification of the PA-PKINIT-KX
    key exchange when anonymous PKINIT is used. Failure to do
    so can permit an active attacker to become a
    man-in-the-middle.
  + Bug fixes:
  - Happy eyeballs: Don't wait for responses from
    known-unreachable KDCs.
  - kdc:
    + check return copy_Realm, copy_PrincipalName,
    copy_EncryptionKey
  - kinit:
    + cleanup temporary ccaches
    + see man page for "kinit --anonymous" command line syntax
    change
  - kdc:
    + Make anonymous AS-requests more RFC8062-compliant.
    Updated expired test certificates
  - Solaris:
    + PKCS#11 hcrypto backend broken since 7.0.1
    + Building with Sun Pro C
  + Features:
  - kuser: support authenticated anonymous AS-REQs in kinit
  - kdc: support for anonymous TGS-REQs
  - kgetcred support for anonymous service tickets
  - Support builds with OpenSSL 1.1.1
- fixed heimdal-patched.diff and reproducible.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1653480000">- Apply Shared Library Packaging Policy and resolve rpmlint
  errors like "libheimdal.x86_64: E: shlib-policy-name-error
  SONAME: libasn1.so.8, expected package suffix: 8"</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656417600">- Add heimdal-7.7.0-autoconf-2.70.patch: Fix build with autoconf
  2.70 (gh#heimdal/heimdal#856).</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656590400">- Add ldconfig scriptlets.
- Fix 'Conflicts:' tags.
- Remove obsolete macros and conditionals.
- Ran spec-cleaner.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1671624000">- Update to version 7.8.0
  + This release includes both the Heimdal 7.7.1 Security
    Vulnerability fixes and non-Security bug fixes/improvements.
  + Security Vulnerabilities:
  - CVE-2022-42898 PAC parse integer overflows
  - CVE-2022-3437 Overflows and non-constant time leaks in
    DES{,3} and arcfour
  - CVE-2022-41916 Fix Unicode normalization read of 1 bytes past
    end of array
  - CVE-2021-44758 A null pointer de-reference DoS in SPNEGO
    acceptors
  - CVE-2021-3671 A null pointer de-reference when handling
    missing sname in TGS-REQ
  - CVE-2022-44640 Heimdal KDC: invalid free in ASN.1 codec
    Note that CVE-2022-44640 is a severe vulnerability,
    possibly a 10.0 on the Common Vulnerability Scoring
    System (CVSS) v3, as we believe it should be possible to
    get an RCE on a KDC, which means that credentials can be
    compromised that can be used to impersonate anyone in a
    realm or forest of realms.
    Heimdal's ASN.1 compiler generates code that allows
    specially crafted DER encodings of CHOICEs to invoke the
    wrong free function on the decoded structure upon decode
    error. This is known to impact the Heimdal KDC, leading to
    an invalid free() of an address partly or wholly under the
    control of the attacker, in turn leading to a potential
    remote code execution (RCE) vulnerability.
    This error affects the DER codec for all extensible CHOICE
    types used in Heimdal, though not all cases will be
    exploitable. We have not completed a thorough analysis of
    all the Heimdal components affected, thus the Kerberos
    client, the X.509 library, and other parts, may be affected
    as well.
    This bug has been in Heimdal's ASN.1 compiler since 2005,
    but it may only affect Heimdal 1.6 and up. It was first
    reported by Douglas Bagnall, though it had been found
    independently by the Heimdal maintainers via fuzzing a few
    weeks earlier.
    While no zero-day exploit is known, such an exploit will
    likely be available soon after public disclosure.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  + Other changes:
  - Bugs found by UBSAN (including the incorrect encoding of
    unconstrained INTEGER value -1).
  - Errors found by the LLVM scan-build static analyzer.
  - Errors found by the valgrind memory debugger.
  - Work around GCC Bug 95189 (memcmp wrongly stripped like
    strcmp).
  - Correct ASN.1 OID typo for SHA-384
  - Fix a deadlock in in the MEMORY ccache type.
  - TGS: strip forwardable and proxiable flags if the server is
    disallowed.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  - Incremental HDB propagation improvements
    Refactor send_diffs making it progressive
    Handle partial writes on non-blocking sockets
    Disable Nagle in iprop master and slave
    Use async I/O
    Don't send I_HAVE in response to AYT
    Do not recover log in kadm5_get_principal()
    Don't send diffs to slaves with not yet known version
    Don't stutter in send_diffs
  - Optional backwards-compatible anon-pkinit behavior
- Removed heimdal-7.7.0-autoconf-2.70.patch, fixed upstream.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1673352000">- replace libheimdal conflicts by obsoletes / provides to provide a
  smooth update in the new libheimdal-devel.</changelog>
</package>
<package pkgid="8faaf5b0097984fe0d8d34312dce62305220f7170475749b66694cb2e159e4a1" name="libkdc2" arch="ppc64le">
  <version epoch="0" ver="7.8.0" rel="bp154.2.4.1"/>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1440936000">- Initial package, version 1.6rc2
- Added patch heimdal-version-script-client.map.patch to add file
  version-script-client.map (File is present in git for tag 1.6rc2
  but missing in tarball).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441108800">- Some changes in spec file to enable build for SLES.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441195200">- Added Conflicts tags to spec file because devel package conflicts
  with krb5-devel and krb5-mini-devel.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441454400">- Added a patched instead of the original tarball because only
  shared libraries will be build and source files of these (not to
  be build) programs have problematic licenses.
- Added script heimdal-patch-source.sh to sources.
- Added patch heimdal-patched.diff that fixes configure.ac and
  several Makefile.am files to successfully build patched source.
- Removed unneeded dependencies in spec file for build.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1483790400">- Update to version 7.1.0
- Removed heimdal-version-script-client.map.patch, fixed upstream.
- Fixed heimdal-patched.diff.
- Unfortunately there is no updated changelog file in tarball,
  changes can be seen in source code version control systems
  history log.</changelog>
  <changelog author="jengelh@inai.de" date="1486036800">- Summary and RPM group update. Do a direct call to ldconfig
  where possible.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1497528000">- Update to version 7.3.0
  - Security
    + Fix transit path validation. Commit f469fc6 (2010-10-02)
    inadvertently caused the previous hop realm to not be added
    to the transit path of issued tickets. This may, in some
    cases, enable bypass of capath policy in Heimdal versions 1.5
    through 7.2.
    Note, this may break sites that rely on the bug. With the bug
    some incomplete [capaths] worked, that should not have.
    These may now break authentication in some cross-realm
    configurations. (CVE-2017-6594)
- Version 7.2.0
  - Bug fixes
    + Portability improvements.
    + More strict parsing of encoded URI components in HTTP KDC.
    + Fixed memory leak in malloc error recovery in NTLM GSSAPI
    mechanism.
    + Avoid overly specific CPU info in krb5-config in aid of
    reproducible builds.
    + Don't do AFS string-to-key tests when feature is disabled.
    + Skip mdb_stat test when the command is not available.
    + Windows: update SHA2 timestamp server.
    + hdb: add missing export
    hdb_generate_key_set_password_with_ks_tuple.
    + Fix signature of hdb_generate_key_set_password().
    + Windows: enable KX509 support in the KDC.
    + kdc: fix kx509 service principal match.
    + iprop: handle case where master sends nothing new.
    + ipropd-slave: fix incorrect error codes.
    + Allow choice of sqlite for HDB pref.
    + check-iprop: don't fail to kill daemons.
    + roken: pidfile -&gt; rk_pidfile.
    + kdc: _kdc_do_kx509 fix use after free error.
    + Do not detect x32 as 64-bit platform.
    + No sys/ttydefaults.h on CYGWIN.
    + Fix check-iprop races.
    + roken_detach_prep() close pipe.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1501761600">- Update to version 7.4.0
  - Security
  - Fix CVE-2017-11103: Orpheus' Lyre KDC-REP service name
    validation.
    This is a critical vulnerability.
    In _krb5_extract_ticket() the KDC-REP service name must be
    obtained from encrypted version stored in 'enc_part' instead
    of the unencrypted version stored in 'ticket'.
    Use of the unecrypted version provides an opportunity for
    successful server impersonation and other attacks.
    Identified by Jeffrey Altman, Viktor Duchovni and
    Nico Williams.
    See https://www.orpheus-lyre.info/ for more details.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1512648000">- Added Avoid_NULL_structure_pointer_member_dereference.patch,
  fixes (bsc#1071675).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1514548800">- Update to version 7.5.0
  - Security
  - Fix CVE-2017-17439, which is a remote denial of service
    vulnerability:
    In Heimdal 7.1 through 7.4, remote unauthenticated attackers
    are able to crash the KDC by sending a crafted UDP packet
    containing empty data fields for client name or realm.
  - Bug fixes
  - Handle long input lines when reloading database dumps.
  - In pre-forked mode (default on Unix), correctly clear the
    process ids of exited children, allowing new child processes
    to replace the old.
  - Fixed incorrect KDC response when no-cross realm TGT exists,
    allowing client requests to fail quickly rather than time
    out after trying to get a correct answer from each KDC.
- Fixed heimdal-patched.diff.
- Removed Avoid_NULL_structure_pointer_member_dereference.patch,
  fixed upstream.</changelog>
  <changelog author="bwiedemann@suse.com" date="1533643200">- Add reproducible.patch to override build date (boo#1047218)
- Use constant hostname (boo#1084909)</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1561291200">- Update to version 7.7.0
  + Bug fixes:
  - PKCS#11 hcrypto back-end:
    + initialize the p11_module_load function list
    + verify that not only is a mechanism present but that its
    mechanism info states that it offers the required
    encryption, decryption or digest services
  - krb5:
    + Starting with 7.6, Heimdal permitted requesting
    authenticated anonymous tickets. However, it did not
    verify that a KDC in fact returned an anonymous ticket
    when one was requested.
    + Cease setting the KDCOption reaquest_anonymous flag when
    issuing S4UProxy (constrained delegation) TGS requests.
    + when the Win2K PKINIT compatibility option is set, do not
    require krbtgt otherName to match when validating KDC
    certificate.
    + set PKINIT_BTMM flag per Apple implementation
    + use memset_s() instead of memset()
  - kdc:
    + When generating KRB5SignedPath in the AS, use the reply
    client name rather than the one from the request, so
    validation will work correctly in the TGS.
    + allow checksum of PA-FOR-USER to be HMAC_MD5. Even if TGT
    used an enctype with a different checksum. Per [MS-SFU]
    2.2.1 PA-FOR-USER the checksum is always HMAC_MD5, and
    that's what Windows and MIT clients send.
    In Heimdal both the client and kdc use instead the
    checksum of the TGT, and therefore work with each other
    but Windows and MIT clients fail against Heimdal KDC.
    Both Windows and MIT KDC would allow any keyed checksum
    to be used so Heimdal client work fine against it.
    Change Heimdal KDC to allow HMAC_MD5 even for non RC4
    based TGT in order to support per-spec clients.
    + use memset_s() instead of memset()
    + Detect Heimdal 1.0 through 7.6 clients that issue
    S4UProxy (constrained delegation) TGS Requests with the
    request anonymous flag set. These requests will be
    treated as S4UProxy requests and not anonymous requests.
  - HDB:
    + Set SQLite3 backend default page size to 8KB.
    + Add hdb_set_sync() method
  - kadmind:
    + disable HDB sync during database load avoiding
    unnecessary disk i/o.
  - ipropd:
    + disable HDB sync during receive_everything. Doing an
    fsync per-record when receiving the complete HDB is a
    performance disaster. Among other things, if the HDB is
    very large, then one slave receving a full HDB can cause
    other slaves to timeout and, if HDB write activity is
    high enough to cause iprop log truncation, then also need
    full syncs, which leads to a cycle of full syncs for all
    slaves until HDB write activity drops.
    Allowing the iprop log to be larger helps, but improving
    receive_everything() performance helps even more.
  - kinit:
    + Anonymous PKINIT tickets discard the realm information
    used to locate the issuing AS. Store the issuing realm in
    the credentials cache in order to locate a KDC which can
    renew them.
    + Do not leak the result of krb5_cc_get_config() when
    determining anonymous PKINIT start realm.
  - klist:
    + Show transited-policy-checked, ok-as-delegate and
    anonymous flags when listing credentials.
  - tests:
    + Regenerate certs so that they expire before the 2038
    armageddon so the test suite will pass on 32-bit
    operating systems until the underlying issues can be
    resolved.
  - Solaris:
    + Define _STDC_C11_BCI for memset_s prototype
  - build tooling:
    + Convert from python 2 to python 3
  - documentation:
    + rename verify-password to verify-password-quality
    + hprop default mode is encrypt
    + kadmind "all" permission does not include "get-keys"
    + verify-password-quality might not be stateless
- Version 7.6.0
  + Security (#555):
  - CVE-2018-16860 Heimdal KDC: Reject PA-S4U2Self with unkeyed
    checksum
    When the Heimdal KDC checks the checksum that is placed on
    the S4U2Self packet by the server to protect the requested
    principal against modification, it does not confirm that
    the checksum algorithm that protects the user name
    (principal) in the request is keyed. This allows a
    man-in-the-middle attacker who can intercept the request to
    the KDC to modify the packet by replacing the user name
    (principal) in the request with any desired user name
    (principal) that exists in the KDC and replace the checksum
    protecting that name with a CRC32 checksum (which requires
    no prior knowledge to compute).
    This would allow a S4U2Self ticket requested on behalf of
    user name (principal) user@EXAMPLE.COM to any service to be
    changed to a S4U2Self ticket with a user name (principal) of
    Administrator@EXAMPLE.COM. This ticket would then contain
    the PAC of the modified user name (principal).
  - CVE-2019-12098, client-only:
    RFC8062 Section 7 requires verification of the PA-PKINIT-KX
    key exchange when anonymous PKINIT is used. Failure to do
    so can permit an active attacker to become a
    man-in-the-middle.
  + Bug fixes:
  - Happy eyeballs: Don't wait for responses from
    known-unreachable KDCs.
  - kdc:
    + check return copy_Realm, copy_PrincipalName,
    copy_EncryptionKey
  - kinit:
    + cleanup temporary ccaches
    + see man page for "kinit --anonymous" command line syntax
    change
  - kdc:
    + Make anonymous AS-requests more RFC8062-compliant.
    Updated expired test certificates
  - Solaris:
    + PKCS#11 hcrypto backend broken since 7.0.1
    + Building with Sun Pro C
  + Features:
  - kuser: support authenticated anonymous AS-REQs in kinit
  - kdc: support for anonymous TGS-REQs
  - kgetcred support for anonymous service tickets
  - Support builds with OpenSSL 1.1.1
- fixed heimdal-patched.diff and reproducible.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1653480000">- Apply Shared Library Packaging Policy and resolve rpmlint
  errors like "libheimdal.x86_64: E: shlib-policy-name-error
  SONAME: libasn1.so.8, expected package suffix: 8"</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656417600">- Add heimdal-7.7.0-autoconf-2.70.patch: Fix build with autoconf
  2.70 (gh#heimdal/heimdal#856).</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656590400">- Add ldconfig scriptlets.
- Fix 'Conflicts:' tags.
- Remove obsolete macros and conditionals.
- Ran spec-cleaner.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1671624000">- Update to version 7.8.0
  + This release includes both the Heimdal 7.7.1 Security
    Vulnerability fixes and non-Security bug fixes/improvements.
  + Security Vulnerabilities:
  - CVE-2022-42898 PAC parse integer overflows
  - CVE-2022-3437 Overflows and non-constant time leaks in
    DES{,3} and arcfour
  - CVE-2022-41916 Fix Unicode normalization read of 1 bytes past
    end of array
  - CVE-2021-44758 A null pointer de-reference DoS in SPNEGO
    acceptors
  - CVE-2021-3671 A null pointer de-reference when handling
    missing sname in TGS-REQ
  - CVE-2022-44640 Heimdal KDC: invalid free in ASN.1 codec
    Note that CVE-2022-44640 is a severe vulnerability,
    possibly a 10.0 on the Common Vulnerability Scoring
    System (CVSS) v3, as we believe it should be possible to
    get an RCE on a KDC, which means that credentials can be
    compromised that can be used to impersonate anyone in a
    realm or forest of realms.
    Heimdal's ASN.1 compiler generates code that allows
    specially crafted DER encodings of CHOICEs to invoke the
    wrong free function on the decoded structure upon decode
    error. This is known to impact the Heimdal KDC, leading to
    an invalid free() of an address partly or wholly under the
    control of the attacker, in turn leading to a potential
    remote code execution (RCE) vulnerability.
    This error affects the DER codec for all extensible CHOICE
    types used in Heimdal, though not all cases will be
    exploitable. We have not completed a thorough analysis of
    all the Heimdal components affected, thus the Kerberos
    client, the X.509 library, and other parts, may be affected
    as well.
    This bug has been in Heimdal's ASN.1 compiler since 2005,
    but it may only affect Heimdal 1.6 and up. It was first
    reported by Douglas Bagnall, though it had been found
    independently by the Heimdal maintainers via fuzzing a few
    weeks earlier.
    While no zero-day exploit is known, such an exploit will
    likely be available soon after public disclosure.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  + Other changes:
  - Bugs found by UBSAN (including the incorrect encoding of
    unconstrained INTEGER value -1).
  - Errors found by the LLVM scan-build static analyzer.
  - Errors found by the valgrind memory debugger.
  - Work around GCC Bug 95189 (memcmp wrongly stripped like
    strcmp).
  - Correct ASN.1 OID typo for SHA-384
  - Fix a deadlock in in the MEMORY ccache type.
  - TGS: strip forwardable and proxiable flags if the server is
    disallowed.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  - Incremental HDB propagation improvements
    Refactor send_diffs making it progressive
    Handle partial writes on non-blocking sockets
    Disable Nagle in iprop master and slave
    Use async I/O
    Don't send I_HAVE in response to AYT
    Do not recover log in kadm5_get_principal()
    Don't send diffs to slaves with not yet known version
    Don't stutter in send_diffs
  - Optional backwards-compatible anon-pkinit behavior
- Removed heimdal-7.7.0-autoconf-2.70.patch, fixed upstream.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1673352000">- replace libheimdal conflicts by obsoletes / provides to provide a
  smooth update in the new libheimdal-devel.</changelog>
</package>
<package pkgid="4295b9475d81afe4b12a4408f9bee8223aa407de18949c688d40c17c4fdb3e64" name="libkdc2" arch="s390x">
  <version epoch="0" ver="7.8.0" rel="bp154.2.4.1"/>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1440936000">- Initial package, version 1.6rc2
- Added patch heimdal-version-script-client.map.patch to add file
  version-script-client.map (File is present in git for tag 1.6rc2
  but missing in tarball).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441108800">- Some changes in spec file to enable build for SLES.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441195200">- Added Conflicts tags to spec file because devel package conflicts
  with krb5-devel and krb5-mini-devel.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441454400">- Added a patched instead of the original tarball because only
  shared libraries will be build and source files of these (not to
  be build) programs have problematic licenses.
- Added script heimdal-patch-source.sh to sources.
- Added patch heimdal-patched.diff that fixes configure.ac and
  several Makefile.am files to successfully build patched source.
- Removed unneeded dependencies in spec file for build.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1483790400">- Update to version 7.1.0
- Removed heimdal-version-script-client.map.patch, fixed upstream.
- Fixed heimdal-patched.diff.
- Unfortunately there is no updated changelog file in tarball,
  changes can be seen in source code version control systems
  history log.</changelog>
  <changelog author="jengelh@inai.de" date="1486036800">- Summary and RPM group update. Do a direct call to ldconfig
  where possible.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1497528000">- Update to version 7.3.0
  - Security
    + Fix transit path validation. Commit f469fc6 (2010-10-02)
    inadvertently caused the previous hop realm to not be added
    to the transit path of issued tickets. This may, in some
    cases, enable bypass of capath policy in Heimdal versions 1.5
    through 7.2.
    Note, this may break sites that rely on the bug. With the bug
    some incomplete [capaths] worked, that should not have.
    These may now break authentication in some cross-realm
    configurations. (CVE-2017-6594)
- Version 7.2.0
  - Bug fixes
    + Portability improvements.
    + More strict parsing of encoded URI components in HTTP KDC.
    + Fixed memory leak in malloc error recovery in NTLM GSSAPI
    mechanism.
    + Avoid overly specific CPU info in krb5-config in aid of
    reproducible builds.
    + Don't do AFS string-to-key tests when feature is disabled.
    + Skip mdb_stat test when the command is not available.
    + Windows: update SHA2 timestamp server.
    + hdb: add missing export
    hdb_generate_key_set_password_with_ks_tuple.
    + Fix signature of hdb_generate_key_set_password().
    + Windows: enable KX509 support in the KDC.
    + kdc: fix kx509 service principal match.
    + iprop: handle case where master sends nothing new.
    + ipropd-slave: fix incorrect error codes.
    + Allow choice of sqlite for HDB pref.
    + check-iprop: don't fail to kill daemons.
    + roken: pidfile -&gt; rk_pidfile.
    + kdc: _kdc_do_kx509 fix use after free error.
    + Do not detect x32 as 64-bit platform.
    + No sys/ttydefaults.h on CYGWIN.
    + Fix check-iprop races.
    + roken_detach_prep() close pipe.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1501761600">- Update to version 7.4.0
  - Security
  - Fix CVE-2017-11103: Orpheus' Lyre KDC-REP service name
    validation.
    This is a critical vulnerability.
    In _krb5_extract_ticket() the KDC-REP service name must be
    obtained from encrypted version stored in 'enc_part' instead
    of the unencrypted version stored in 'ticket'.
    Use of the unecrypted version provides an opportunity for
    successful server impersonation and other attacks.
    Identified by Jeffrey Altman, Viktor Duchovni and
    Nico Williams.
    See https://www.orpheus-lyre.info/ for more details.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1512648000">- Added Avoid_NULL_structure_pointer_member_dereference.patch,
  fixes (bsc#1071675).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1514548800">- Update to version 7.5.0
  - Security
  - Fix CVE-2017-17439, which is a remote denial of service
    vulnerability:
    In Heimdal 7.1 through 7.4, remote unauthenticated attackers
    are able to crash the KDC by sending a crafted UDP packet
    containing empty data fields for client name or realm.
  - Bug fixes
  - Handle long input lines when reloading database dumps.
  - In pre-forked mode (default on Unix), correctly clear the
    process ids of exited children, allowing new child processes
    to replace the old.
  - Fixed incorrect KDC response when no-cross realm TGT exists,
    allowing client requests to fail quickly rather than time
    out after trying to get a correct answer from each KDC.
- Fixed heimdal-patched.diff.
- Removed Avoid_NULL_structure_pointer_member_dereference.patch,
  fixed upstream.</changelog>
  <changelog author="bwiedemann@suse.com" date="1533643200">- Add reproducible.patch to override build date (boo#1047218)
- Use constant hostname (boo#1084909)</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1561291200">- Update to version 7.7.0
  + Bug fixes:
  - PKCS#11 hcrypto back-end:
    + initialize the p11_module_load function list
    + verify that not only is a mechanism present but that its
    mechanism info states that it offers the required
    encryption, decryption or digest services
  - krb5:
    + Starting with 7.6, Heimdal permitted requesting
    authenticated anonymous tickets. However, it did not
    verify that a KDC in fact returned an anonymous ticket
    when one was requested.
    + Cease setting the KDCOption reaquest_anonymous flag when
    issuing S4UProxy (constrained delegation) TGS requests.
    + when the Win2K PKINIT compatibility option is set, do not
    require krbtgt otherName to match when validating KDC
    certificate.
    + set PKINIT_BTMM flag per Apple implementation
    + use memset_s() instead of memset()
  - kdc:
    + When generating KRB5SignedPath in the AS, use the reply
    client name rather than the one from the request, so
    validation will work correctly in the TGS.
    + allow checksum of PA-FOR-USER to be HMAC_MD5. Even if TGT
    used an enctype with a different checksum. Per [MS-SFU]
    2.2.1 PA-FOR-USER the checksum is always HMAC_MD5, and
    that's what Windows and MIT clients send.
    In Heimdal both the client and kdc use instead the
    checksum of the TGT, and therefore work with each other
    but Windows and MIT clients fail against Heimdal KDC.
    Both Windows and MIT KDC would allow any keyed checksum
    to be used so Heimdal client work fine against it.
    Change Heimdal KDC to allow HMAC_MD5 even for non RC4
    based TGT in order to support per-spec clients.
    + use memset_s() instead of memset()
    + Detect Heimdal 1.0 through 7.6 clients that issue
    S4UProxy (constrained delegation) TGS Requests with the
    request anonymous flag set. These requests will be
    treated as S4UProxy requests and not anonymous requests.
  - HDB:
    + Set SQLite3 backend default page size to 8KB.
    + Add hdb_set_sync() method
  - kadmind:
    + disable HDB sync during database load avoiding
    unnecessary disk i/o.
  - ipropd:
    + disable HDB sync during receive_everything. Doing an
    fsync per-record when receiving the complete HDB is a
    performance disaster. Among other things, if the HDB is
    very large, then one slave receving a full HDB can cause
    other slaves to timeout and, if HDB write activity is
    high enough to cause iprop log truncation, then also need
    full syncs, which leads to a cycle of full syncs for all
    slaves until HDB write activity drops.
    Allowing the iprop log to be larger helps, but improving
    receive_everything() performance helps even more.
  - kinit:
    + Anonymous PKINIT tickets discard the realm information
    used to locate the issuing AS. Store the issuing realm in
    the credentials cache in order to locate a KDC which can
    renew them.
    + Do not leak the result of krb5_cc_get_config() when
    determining anonymous PKINIT start realm.
  - klist:
    + Show transited-policy-checked, ok-as-delegate and
    anonymous flags when listing credentials.
  - tests:
    + Regenerate certs so that they expire before the 2038
    armageddon so the test suite will pass on 32-bit
    operating systems until the underlying issues can be
    resolved.
  - Solaris:
    + Define _STDC_C11_BCI for memset_s prototype
  - build tooling:
    + Convert from python 2 to python 3
  - documentation:
    + rename verify-password to verify-password-quality
    + hprop default mode is encrypt
    + kadmind "all" permission does not include "get-keys"
    + verify-password-quality might not be stateless
- Version 7.6.0
  + Security (#555):
  - CVE-2018-16860 Heimdal KDC: Reject PA-S4U2Self with unkeyed
    checksum
    When the Heimdal KDC checks the checksum that is placed on
    the S4U2Self packet by the server to protect the requested
    principal against modification, it does not confirm that
    the checksum algorithm that protects the user name
    (principal) in the request is keyed. This allows a
    man-in-the-middle attacker who can intercept the request to
    the KDC to modify the packet by replacing the user name
    (principal) in the request with any desired user name
    (principal) that exists in the KDC and replace the checksum
    protecting that name with a CRC32 checksum (which requires
    no prior knowledge to compute).
    This would allow a S4U2Self ticket requested on behalf of
    user name (principal) user@EXAMPLE.COM to any service to be
    changed to a S4U2Self ticket with a user name (principal) of
    Administrator@EXAMPLE.COM. This ticket would then contain
    the PAC of the modified user name (principal).
  - CVE-2019-12098, client-only:
    RFC8062 Section 7 requires verification of the PA-PKINIT-KX
    key exchange when anonymous PKINIT is used. Failure to do
    so can permit an active attacker to become a
    man-in-the-middle.
  + Bug fixes:
  - Happy eyeballs: Don't wait for responses from
    known-unreachable KDCs.
  - kdc:
    + check return copy_Realm, copy_PrincipalName,
    copy_EncryptionKey
  - kinit:
    + cleanup temporary ccaches
    + see man page for "kinit --anonymous" command line syntax
    change
  - kdc:
    + Make anonymous AS-requests more RFC8062-compliant.
    Updated expired test certificates
  - Solaris:
    + PKCS#11 hcrypto backend broken since 7.0.1
    + Building with Sun Pro C
  + Features:
  - kuser: support authenticated anonymous AS-REQs in kinit
  - kdc: support for anonymous TGS-REQs
  - kgetcred support for anonymous service tickets
  - Support builds with OpenSSL 1.1.1
- fixed heimdal-patched.diff and reproducible.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1653480000">- Apply Shared Library Packaging Policy and resolve rpmlint
  errors like "libheimdal.x86_64: E: shlib-policy-name-error
  SONAME: libasn1.so.8, expected package suffix: 8"</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656417600">- Add heimdal-7.7.0-autoconf-2.70.patch: Fix build with autoconf
  2.70 (gh#heimdal/heimdal#856).</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656590400">- Add ldconfig scriptlets.
- Fix 'Conflicts:' tags.
- Remove obsolete macros and conditionals.
- Ran spec-cleaner.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1671624000">- Update to version 7.8.0
  + This release includes both the Heimdal 7.7.1 Security
    Vulnerability fixes and non-Security bug fixes/improvements.
  + Security Vulnerabilities:
  - CVE-2022-42898 PAC parse integer overflows
  - CVE-2022-3437 Overflows and non-constant time leaks in
    DES{,3} and arcfour
  - CVE-2022-41916 Fix Unicode normalization read of 1 bytes past
    end of array
  - CVE-2021-44758 A null pointer de-reference DoS in SPNEGO
    acceptors
  - CVE-2021-3671 A null pointer de-reference when handling
    missing sname in TGS-REQ
  - CVE-2022-44640 Heimdal KDC: invalid free in ASN.1 codec
    Note that CVE-2022-44640 is a severe vulnerability,
    possibly a 10.0 on the Common Vulnerability Scoring
    System (CVSS) v3, as we believe it should be possible to
    get an RCE on a KDC, which means that credentials can be
    compromised that can be used to impersonate anyone in a
    realm or forest of realms.
    Heimdal's ASN.1 compiler generates code that allows
    specially crafted DER encodings of CHOICEs to invoke the
    wrong free function on the decoded structure upon decode
    error. This is known to impact the Heimdal KDC, leading to
    an invalid free() of an address partly or wholly under the
    control of the attacker, in turn leading to a potential
    remote code execution (RCE) vulnerability.
    This error affects the DER codec for all extensible CHOICE
    types used in Heimdal, though not all cases will be
    exploitable. We have not completed a thorough analysis of
    all the Heimdal components affected, thus the Kerberos
    client, the X.509 library, and other parts, may be affected
    as well.
    This bug has been in Heimdal's ASN.1 compiler since 2005,
    but it may only affect Heimdal 1.6 and up. It was first
    reported by Douglas Bagnall, though it had been found
    independently by the Heimdal maintainers via fuzzing a few
    weeks earlier.
    While no zero-day exploit is known, such an exploit will
    likely be available soon after public disclosure.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  + Other changes:
  - Bugs found by UBSAN (including the incorrect encoding of
    unconstrained INTEGER value -1).
  - Errors found by the LLVM scan-build static analyzer.
  - Errors found by the valgrind memory debugger.
  - Work around GCC Bug 95189 (memcmp wrongly stripped like
    strcmp).
  - Correct ASN.1 OID typo for SHA-384
  - Fix a deadlock in in the MEMORY ccache type.
  - TGS: strip forwardable and proxiable flags if the server is
    disallowed.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  - Incremental HDB propagation improvements
    Refactor send_diffs making it progressive
    Handle partial writes on non-blocking sockets
    Disable Nagle in iprop master and slave
    Use async I/O
    Don't send I_HAVE in response to AYT
    Do not recover log in kadm5_get_principal()
    Don't send diffs to slaves with not yet known version
    Don't stutter in send_diffs
  - Optional backwards-compatible anon-pkinit behavior
- Removed heimdal-7.7.0-autoconf-2.70.patch, fixed upstream.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1673352000">- replace libheimdal conflicts by obsoletes / provides to provide a
  smooth update in the new libheimdal-devel.</changelog>
</package>
<package pkgid="942151c8658d6e8a8e58edf6041591ac684f51ce7b3b4af6a5f375fdf9c35573" name="libkdc2" arch="x86_64">
  <version epoch="0" ver="7.8.0" rel="bp154.2.4.1"/>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1440936000">- Initial package, version 1.6rc2
- Added patch heimdal-version-script-client.map.patch to add file
  version-script-client.map (File is present in git for tag 1.6rc2
  but missing in tarball).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441108800">- Some changes in spec file to enable build for SLES.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441195200">- Added Conflicts tags to spec file because devel package conflicts
  with krb5-devel and krb5-mini-devel.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441454400">- Added a patched instead of the original tarball because only
  shared libraries will be build and source files of these (not to
  be build) programs have problematic licenses.
- Added script heimdal-patch-source.sh to sources.
- Added patch heimdal-patched.diff that fixes configure.ac and
  several Makefile.am files to successfully build patched source.
- Removed unneeded dependencies in spec file for build.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1483790400">- Update to version 7.1.0
- Removed heimdal-version-script-client.map.patch, fixed upstream.
- Fixed heimdal-patched.diff.
- Unfortunately there is no updated changelog file in tarball,
  changes can be seen in source code version control systems
  history log.</changelog>
  <changelog author="jengelh@inai.de" date="1486036800">- Summary and RPM group update. Do a direct call to ldconfig
  where possible.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1497528000">- Update to version 7.3.0
  - Security
    + Fix transit path validation. Commit f469fc6 (2010-10-02)
    inadvertently caused the previous hop realm to not be added
    to the transit path of issued tickets. This may, in some
    cases, enable bypass of capath policy in Heimdal versions 1.5
    through 7.2.
    Note, this may break sites that rely on the bug. With the bug
    some incomplete [capaths] worked, that should not have.
    These may now break authentication in some cross-realm
    configurations. (CVE-2017-6594)
- Version 7.2.0
  - Bug fixes
    + Portability improvements.
    + More strict parsing of encoded URI components in HTTP KDC.
    + Fixed memory leak in malloc error recovery in NTLM GSSAPI
    mechanism.
    + Avoid overly specific CPU info in krb5-config in aid of
    reproducible builds.
    + Don't do AFS string-to-key tests when feature is disabled.
    + Skip mdb_stat test when the command is not available.
    + Windows: update SHA2 timestamp server.
    + hdb: add missing export
    hdb_generate_key_set_password_with_ks_tuple.
    + Fix signature of hdb_generate_key_set_password().
    + Windows: enable KX509 support in the KDC.
    + kdc: fix kx509 service principal match.
    + iprop: handle case where master sends nothing new.
    + ipropd-slave: fix incorrect error codes.
    + Allow choice of sqlite for HDB pref.
    + check-iprop: don't fail to kill daemons.
    + roken: pidfile -&gt; rk_pidfile.
    + kdc: _kdc_do_kx509 fix use after free error.
    + Do not detect x32 as 64-bit platform.
    + No sys/ttydefaults.h on CYGWIN.
    + Fix check-iprop races.
    + roken_detach_prep() close pipe.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1501761600">- Update to version 7.4.0
  - Security
  - Fix CVE-2017-11103: Orpheus' Lyre KDC-REP service name
    validation.
    This is a critical vulnerability.
    In _krb5_extract_ticket() the KDC-REP service name must be
    obtained from encrypted version stored in 'enc_part' instead
    of the unencrypted version stored in 'ticket'.
    Use of the unecrypted version provides an opportunity for
    successful server impersonation and other attacks.
    Identified by Jeffrey Altman, Viktor Duchovni and
    Nico Williams.
    See https://www.orpheus-lyre.info/ for more details.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1512648000">- Added Avoid_NULL_structure_pointer_member_dereference.patch,
  fixes (bsc#1071675).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1514548800">- Update to version 7.5.0
  - Security
  - Fix CVE-2017-17439, which is a remote denial of service
    vulnerability:
    In Heimdal 7.1 through 7.4, remote unauthenticated attackers
    are able to crash the KDC by sending a crafted UDP packet
    containing empty data fields for client name or realm.
  - Bug fixes
  - Handle long input lines when reloading database dumps.
  - In pre-forked mode (default on Unix), correctly clear the
    process ids of exited children, allowing new child processes
    to replace the old.
  - Fixed incorrect KDC response when no-cross realm TGT exists,
    allowing client requests to fail quickly rather than time
    out after trying to get a correct answer from each KDC.
- Fixed heimdal-patched.diff.
- Removed Avoid_NULL_structure_pointer_member_dereference.patch,
  fixed upstream.</changelog>
  <changelog author="bwiedemann@suse.com" date="1533643200">- Add reproducible.patch to override build date (boo#1047218)
- Use constant hostname (boo#1084909)</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1561291200">- Update to version 7.7.0
  + Bug fixes:
  - PKCS#11 hcrypto back-end:
    + initialize the p11_module_load function list
    + verify that not only is a mechanism present but that its
    mechanism info states that it offers the required
    encryption, decryption or digest services
  - krb5:
    + Starting with 7.6, Heimdal permitted requesting
    authenticated anonymous tickets. However, it did not
    verify that a KDC in fact returned an anonymous ticket
    when one was requested.
    + Cease setting the KDCOption reaquest_anonymous flag when
    issuing S4UProxy (constrained delegation) TGS requests.
    + when the Win2K PKINIT compatibility option is set, do not
    require krbtgt otherName to match when validating KDC
    certificate.
    + set PKINIT_BTMM flag per Apple implementation
    + use memset_s() instead of memset()
  - kdc:
    + When generating KRB5SignedPath in the AS, use the reply
    client name rather than the one from the request, so
    validation will work correctly in the TGS.
    + allow checksum of PA-FOR-USER to be HMAC_MD5. Even if TGT
    used an enctype with a different checksum. Per [MS-SFU]
    2.2.1 PA-FOR-USER the checksum is always HMAC_MD5, and
    that's what Windows and MIT clients send.
    In Heimdal both the client and kdc use instead the
    checksum of the TGT, and therefore work with each other
    but Windows and MIT clients fail against Heimdal KDC.
    Both Windows and MIT KDC would allow any keyed checksum
    to be used so Heimdal client work fine against it.
    Change Heimdal KDC to allow HMAC_MD5 even for non RC4
    based TGT in order to support per-spec clients.
    + use memset_s() instead of memset()
    + Detect Heimdal 1.0 through 7.6 clients that issue
    S4UProxy (constrained delegation) TGS Requests with the
    request anonymous flag set. These requests will be
    treated as S4UProxy requests and not anonymous requests.
  - HDB:
    + Set SQLite3 backend default page size to 8KB.
    + Add hdb_set_sync() method
  - kadmind:
    + disable HDB sync during database load avoiding
    unnecessary disk i/o.
  - ipropd:
    + disable HDB sync during receive_everything. Doing an
    fsync per-record when receiving the complete HDB is a
    performance disaster. Among other things, if the HDB is
    very large, then one slave receving a full HDB can cause
    other slaves to timeout and, if HDB write activity is
    high enough to cause iprop log truncation, then also need
    full syncs, which leads to a cycle of full syncs for all
    slaves until HDB write activity drops.
    Allowing the iprop log to be larger helps, but improving
    receive_everything() performance helps even more.
  - kinit:
    + Anonymous PKINIT tickets discard the realm information
    used to locate the issuing AS. Store the issuing realm in
    the credentials cache in order to locate a KDC which can
    renew them.
    + Do not leak the result of krb5_cc_get_config() when
    determining anonymous PKINIT start realm.
  - klist:
    + Show transited-policy-checked, ok-as-delegate and
    anonymous flags when listing credentials.
  - tests:
    + Regenerate certs so that they expire before the 2038
    armageddon so the test suite will pass on 32-bit
    operating systems until the underlying issues can be
    resolved.
  - Solaris:
    + Define _STDC_C11_BCI for memset_s prototype
  - build tooling:
    + Convert from python 2 to python 3
  - documentation:
    + rename verify-password to verify-password-quality
    + hprop default mode is encrypt
    + kadmind "all" permission does not include "get-keys"
    + verify-password-quality might not be stateless
- Version 7.6.0
  + Security (#555):
  - CVE-2018-16860 Heimdal KDC: Reject PA-S4U2Self with unkeyed
    checksum
    When the Heimdal KDC checks the checksum that is placed on
    the S4U2Self packet by the server to protect the requested
    principal against modification, it does not confirm that
    the checksum algorithm that protects the user name
    (principal) in the request is keyed. This allows a
    man-in-the-middle attacker who can intercept the request to
    the KDC to modify the packet by replacing the user name
    (principal) in the request with any desired user name
    (principal) that exists in the KDC and replace the checksum
    protecting that name with a CRC32 checksum (which requires
    no prior knowledge to compute).
    This would allow a S4U2Self ticket requested on behalf of
    user name (principal) user@EXAMPLE.COM to any service to be
    changed to a S4U2Self ticket with a user name (principal) of
    Administrator@EXAMPLE.COM. This ticket would then contain
    the PAC of the modified user name (principal).
  - CVE-2019-12098, client-only:
    RFC8062 Section 7 requires verification of the PA-PKINIT-KX
    key exchange when anonymous PKINIT is used. Failure to do
    so can permit an active attacker to become a
    man-in-the-middle.
  + Bug fixes:
  - Happy eyeballs: Don't wait for responses from
    known-unreachable KDCs.
  - kdc:
    + check return copy_Realm, copy_PrincipalName,
    copy_EncryptionKey
  - kinit:
    + cleanup temporary ccaches
    + see man page for "kinit --anonymous" command line syntax
    change
  - kdc:
    + Make anonymous AS-requests more RFC8062-compliant.
    Updated expired test certificates
  - Solaris:
    + PKCS#11 hcrypto backend broken since 7.0.1
    + Building with Sun Pro C
  + Features:
  - kuser: support authenticated anonymous AS-REQs in kinit
  - kdc: support for anonymous TGS-REQs
  - kgetcred support for anonymous service tickets
  - Support builds with OpenSSL 1.1.1
- fixed heimdal-patched.diff and reproducible.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1653480000">- Apply Shared Library Packaging Policy and resolve rpmlint
  errors like "libheimdal.x86_64: E: shlib-policy-name-error
  SONAME: libasn1.so.8, expected package suffix: 8"</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656417600">- Add heimdal-7.7.0-autoconf-2.70.patch: Fix build with autoconf
  2.70 (gh#heimdal/heimdal#856).</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656590400">- Add ldconfig scriptlets.
- Fix 'Conflicts:' tags.
- Remove obsolete macros and conditionals.
- Ran spec-cleaner.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1671624000">- Update to version 7.8.0
  + This release includes both the Heimdal 7.7.1 Security
    Vulnerability fixes and non-Security bug fixes/improvements.
  + Security Vulnerabilities:
  - CVE-2022-42898 PAC parse integer overflows
  - CVE-2022-3437 Overflows and non-constant time leaks in
    DES{,3} and arcfour
  - CVE-2022-41916 Fix Unicode normalization read of 1 bytes past
    end of array
  - CVE-2021-44758 A null pointer de-reference DoS in SPNEGO
    acceptors
  - CVE-2021-3671 A null pointer de-reference when handling
    missing sname in TGS-REQ
  - CVE-2022-44640 Heimdal KDC: invalid free in ASN.1 codec
    Note that CVE-2022-44640 is a severe vulnerability,
    possibly a 10.0 on the Common Vulnerability Scoring
    System (CVSS) v3, as we believe it should be possible to
    get an RCE on a KDC, which means that credentials can be
    compromised that can be used to impersonate anyone in a
    realm or forest of realms.
    Heimdal's ASN.1 compiler generates code that allows
    specially crafted DER encodings of CHOICEs to invoke the
    wrong free function on the decoded structure upon decode
    error. This is known to impact the Heimdal KDC, leading to
    an invalid free() of an address partly or wholly under the
    control of the attacker, in turn leading to a potential
    remote code execution (RCE) vulnerability.
    This error affects the DER codec for all extensible CHOICE
    types used in Heimdal, though not all cases will be
    exploitable. We have not completed a thorough analysis of
    all the Heimdal components affected, thus the Kerberos
    client, the X.509 library, and other parts, may be affected
    as well.
    This bug has been in Heimdal's ASN.1 compiler since 2005,
    but it may only affect Heimdal 1.6 and up. It was first
    reported by Douglas Bagnall, though it had been found
    independently by the Heimdal maintainers via fuzzing a few
    weeks earlier.
    While no zero-day exploit is known, such an exploit will
    likely be available soon after public disclosure.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  + Other changes:
  - Bugs found by UBSAN (including the incorrect encoding of
    unconstrained INTEGER value -1).
  - Errors found by the LLVM scan-build static analyzer.
  - Errors found by the valgrind memory debugger.
  - Work around GCC Bug 95189 (memcmp wrongly stripped like
    strcmp).
  - Correct ASN.1 OID typo for SHA-384
  - Fix a deadlock in in the MEMORY ccache type.
  - TGS: strip forwardable and proxiable flags if the server is
    disallowed.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  - Incremental HDB propagation improvements
    Refactor send_diffs making it progressive
    Handle partial writes on non-blocking sockets
    Disable Nagle in iprop master and slave
    Use async I/O
    Don't send I_HAVE in response to AYT
    Do not recover log in kadm5_get_principal()
    Don't send diffs to slaves with not yet known version
    Don't stutter in send_diffs
  - Optional backwards-compatible anon-pkinit behavior
- Removed heimdal-7.7.0-autoconf-2.70.patch, fixed upstream.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1673352000">- replace libheimdal conflicts by obsoletes / provides to provide a
  smooth update in the new libheimdal-devel.</changelog>
</package>
<package pkgid="67a55ccf4874357a9971d6ff07c41b12371827a5b7eb5ef620786583ddeb2574" name="libkrb5-26" arch="aarch64">
  <version epoch="0" ver="7.8.0" rel="bp154.2.4.1"/>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1440936000">- Initial package, version 1.6rc2
- Added patch heimdal-version-script-client.map.patch to add file
  version-script-client.map (File is present in git for tag 1.6rc2
  but missing in tarball).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441108800">- Some changes in spec file to enable build for SLES.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441195200">- Added Conflicts tags to spec file because devel package conflicts
  with krb5-devel and krb5-mini-devel.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441454400">- Added a patched instead of the original tarball because only
  shared libraries will be build and source files of these (not to
  be build) programs have problematic licenses.
- Added script heimdal-patch-source.sh to sources.
- Added patch heimdal-patched.diff that fixes configure.ac and
  several Makefile.am files to successfully build patched source.
- Removed unneeded dependencies in spec file for build.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1483790400">- Update to version 7.1.0
- Removed heimdal-version-script-client.map.patch, fixed upstream.
- Fixed heimdal-patched.diff.
- Unfortunately there is no updated changelog file in tarball,
  changes can be seen in source code version control systems
  history log.</changelog>
  <changelog author="jengelh@inai.de" date="1486036800">- Summary and RPM group update. Do a direct call to ldconfig
  where possible.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1497528000">- Update to version 7.3.0
  - Security
    + Fix transit path validation. Commit f469fc6 (2010-10-02)
    inadvertently caused the previous hop realm to not be added
    to the transit path of issued tickets. This may, in some
    cases, enable bypass of capath policy in Heimdal versions 1.5
    through 7.2.
    Note, this may break sites that rely on the bug. With the bug
    some incomplete [capaths] worked, that should not have.
    These may now break authentication in some cross-realm
    configurations. (CVE-2017-6594)
- Version 7.2.0
  - Bug fixes
    + Portability improvements.
    + More strict parsing of encoded URI components in HTTP KDC.
    + Fixed memory leak in malloc error recovery in NTLM GSSAPI
    mechanism.
    + Avoid overly specific CPU info in krb5-config in aid of
    reproducible builds.
    + Don't do AFS string-to-key tests when feature is disabled.
    + Skip mdb_stat test when the command is not available.
    + Windows: update SHA2 timestamp server.
    + hdb: add missing export
    hdb_generate_key_set_password_with_ks_tuple.
    + Fix signature of hdb_generate_key_set_password().
    + Windows: enable KX509 support in the KDC.
    + kdc: fix kx509 service principal match.
    + iprop: handle case where master sends nothing new.
    + ipropd-slave: fix incorrect error codes.
    + Allow choice of sqlite for HDB pref.
    + check-iprop: don't fail to kill daemons.
    + roken: pidfile -&gt; rk_pidfile.
    + kdc: _kdc_do_kx509 fix use after free error.
    + Do not detect x32 as 64-bit platform.
    + No sys/ttydefaults.h on CYGWIN.
    + Fix check-iprop races.
    + roken_detach_prep() close pipe.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1501761600">- Update to version 7.4.0
  - Security
  - Fix CVE-2017-11103: Orpheus' Lyre KDC-REP service name
    validation.
    This is a critical vulnerability.
    In _krb5_extract_ticket() the KDC-REP service name must be
    obtained from encrypted version stored in 'enc_part' instead
    of the unencrypted version stored in 'ticket'.
    Use of the unecrypted version provides an opportunity for
    successful server impersonation and other attacks.
    Identified by Jeffrey Altman, Viktor Duchovni and
    Nico Williams.
    See https://www.orpheus-lyre.info/ for more details.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1512648000">- Added Avoid_NULL_structure_pointer_member_dereference.patch,
  fixes (bsc#1071675).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1514548800">- Update to version 7.5.0
  - Security
  - Fix CVE-2017-17439, which is a remote denial of service
    vulnerability:
    In Heimdal 7.1 through 7.4, remote unauthenticated attackers
    are able to crash the KDC by sending a crafted UDP packet
    containing empty data fields for client name or realm.
  - Bug fixes
  - Handle long input lines when reloading database dumps.
  - In pre-forked mode (default on Unix), correctly clear the
    process ids of exited children, allowing new child processes
    to replace the old.
  - Fixed incorrect KDC response when no-cross realm TGT exists,
    allowing client requests to fail quickly rather than time
    out after trying to get a correct answer from each KDC.
- Fixed heimdal-patched.diff.
- Removed Avoid_NULL_structure_pointer_member_dereference.patch,
  fixed upstream.</changelog>
  <changelog author="bwiedemann@suse.com" date="1533643200">- Add reproducible.patch to override build date (boo#1047218)
- Use constant hostname (boo#1084909)</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1561291200">- Update to version 7.7.0
  + Bug fixes:
  - PKCS#11 hcrypto back-end:
    + initialize the p11_module_load function list
    + verify that not only is a mechanism present but that its
    mechanism info states that it offers the required
    encryption, decryption or digest services
  - krb5:
    + Starting with 7.6, Heimdal permitted requesting
    authenticated anonymous tickets. However, it did not
    verify that a KDC in fact returned an anonymous ticket
    when one was requested.
    + Cease setting the KDCOption reaquest_anonymous flag when
    issuing S4UProxy (constrained delegation) TGS requests.
    + when the Win2K PKINIT compatibility option is set, do not
    require krbtgt otherName to match when validating KDC
    certificate.
    + set PKINIT_BTMM flag per Apple implementation
    + use memset_s() instead of memset()
  - kdc:
    + When generating KRB5SignedPath in the AS, use the reply
    client name rather than the one from the request, so
    validation will work correctly in the TGS.
    + allow checksum of PA-FOR-USER to be HMAC_MD5. Even if TGT
    used an enctype with a different checksum. Per [MS-SFU]
    2.2.1 PA-FOR-USER the checksum is always HMAC_MD5, and
    that's what Windows and MIT clients send.
    In Heimdal both the client and kdc use instead the
    checksum of the TGT, and therefore work with each other
    but Windows and MIT clients fail against Heimdal KDC.
    Both Windows and MIT KDC would allow any keyed checksum
    to be used so Heimdal client work fine against it.
    Change Heimdal KDC to allow HMAC_MD5 even for non RC4
    based TGT in order to support per-spec clients.
    + use memset_s() instead of memset()
    + Detect Heimdal 1.0 through 7.6 clients that issue
    S4UProxy (constrained delegation) TGS Requests with the
    request anonymous flag set. These requests will be
    treated as S4UProxy requests and not anonymous requests.
  - HDB:
    + Set SQLite3 backend default page size to 8KB.
    + Add hdb_set_sync() method
  - kadmind:
    + disable HDB sync during database load avoiding
    unnecessary disk i/o.
  - ipropd:
    + disable HDB sync during receive_everything. Doing an
    fsync per-record when receiving the complete HDB is a
    performance disaster. Among other things, if the HDB is
    very large, then one slave receving a full HDB can cause
    other slaves to timeout and, if HDB write activity is
    high enough to cause iprop log truncation, then also need
    full syncs, which leads to a cycle of full syncs for all
    slaves until HDB write activity drops.
    Allowing the iprop log to be larger helps, but improving
    receive_everything() performance helps even more.
  - kinit:
    + Anonymous PKINIT tickets discard the realm information
    used to locate the issuing AS. Store the issuing realm in
    the credentials cache in order to locate a KDC which can
    renew them.
    + Do not leak the result of krb5_cc_get_config() when
    determining anonymous PKINIT start realm.
  - klist:
    + Show transited-policy-checked, ok-as-delegate and
    anonymous flags when listing credentials.
  - tests:
    + Regenerate certs so that they expire before the 2038
    armageddon so the test suite will pass on 32-bit
    operating systems until the underlying issues can be
    resolved.
  - Solaris:
    + Define _STDC_C11_BCI for memset_s prototype
  - build tooling:
    + Convert from python 2 to python 3
  - documentation:
    + rename verify-password to verify-password-quality
    + hprop default mode is encrypt
    + kadmind "all" permission does not include "get-keys"
    + verify-password-quality might not be stateless
- Version 7.6.0
  + Security (#555):
  - CVE-2018-16860 Heimdal KDC: Reject PA-S4U2Self with unkeyed
    checksum
    When the Heimdal KDC checks the checksum that is placed on
    the S4U2Self packet by the server to protect the requested
    principal against modification, it does not confirm that
    the checksum algorithm that protects the user name
    (principal) in the request is keyed. This allows a
    man-in-the-middle attacker who can intercept the request to
    the KDC to modify the packet by replacing the user name
    (principal) in the request with any desired user name
    (principal) that exists in the KDC and replace the checksum
    protecting that name with a CRC32 checksum (which requires
    no prior knowledge to compute).
    This would allow a S4U2Self ticket requested on behalf of
    user name (principal) user@EXAMPLE.COM to any service to be
    changed to a S4U2Self ticket with a user name (principal) of
    Administrator@EXAMPLE.COM. This ticket would then contain
    the PAC of the modified user name (principal).
  - CVE-2019-12098, client-only:
    RFC8062 Section 7 requires verification of the PA-PKINIT-KX
    key exchange when anonymous PKINIT is used. Failure to do
    so can permit an active attacker to become a
    man-in-the-middle.
  + Bug fixes:
  - Happy eyeballs: Don't wait for responses from
    known-unreachable KDCs.
  - kdc:
    + check return copy_Realm, copy_PrincipalName,
    copy_EncryptionKey
  - kinit:
    + cleanup temporary ccaches
    + see man page for "kinit --anonymous" command line syntax
    change
  - kdc:
    + Make anonymous AS-requests more RFC8062-compliant.
    Updated expired test certificates
  - Solaris:
    + PKCS#11 hcrypto backend broken since 7.0.1
    + Building with Sun Pro C
  + Features:
  - kuser: support authenticated anonymous AS-REQs in kinit
  - kdc: support for anonymous TGS-REQs
  - kgetcred support for anonymous service tickets
  - Support builds with OpenSSL 1.1.1
- fixed heimdal-patched.diff and reproducible.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1653480000">- Apply Shared Library Packaging Policy and resolve rpmlint
  errors like "libheimdal.x86_64: E: shlib-policy-name-error
  SONAME: libasn1.so.8, expected package suffix: 8"</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656417600">- Add heimdal-7.7.0-autoconf-2.70.patch: Fix build with autoconf
  2.70 (gh#heimdal/heimdal#856).</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656590400">- Add ldconfig scriptlets.
- Fix 'Conflicts:' tags.
- Remove obsolete macros and conditionals.
- Ran spec-cleaner.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1671624000">- Update to version 7.8.0
  + This release includes both the Heimdal 7.7.1 Security
    Vulnerability fixes and non-Security bug fixes/improvements.
  + Security Vulnerabilities:
  - CVE-2022-42898 PAC parse integer overflows
  - CVE-2022-3437 Overflows and non-constant time leaks in
    DES{,3} and arcfour
  - CVE-2022-41916 Fix Unicode normalization read of 1 bytes past
    end of array
  - CVE-2021-44758 A null pointer de-reference DoS in SPNEGO
    acceptors
  - CVE-2021-3671 A null pointer de-reference when handling
    missing sname in TGS-REQ
  - CVE-2022-44640 Heimdal KDC: invalid free in ASN.1 codec
    Note that CVE-2022-44640 is a severe vulnerability,
    possibly a 10.0 on the Common Vulnerability Scoring
    System (CVSS) v3, as we believe it should be possible to
    get an RCE on a KDC, which means that credentials can be
    compromised that can be used to impersonate anyone in a
    realm or forest of realms.
    Heimdal's ASN.1 compiler generates code that allows
    specially crafted DER encodings of CHOICEs to invoke the
    wrong free function on the decoded structure upon decode
    error. This is known to impact the Heimdal KDC, leading to
    an invalid free() of an address partly or wholly under the
    control of the attacker, in turn leading to a potential
    remote code execution (RCE) vulnerability.
    This error affects the DER codec for all extensible CHOICE
    types used in Heimdal, though not all cases will be
    exploitable. We have not completed a thorough analysis of
    all the Heimdal components affected, thus the Kerberos
    client, the X.509 library, and other parts, may be affected
    as well.
    This bug has been in Heimdal's ASN.1 compiler since 2005,
    but it may only affect Heimdal 1.6 and up. It was first
    reported by Douglas Bagnall, though it had been found
    independently by the Heimdal maintainers via fuzzing a few
    weeks earlier.
    While no zero-day exploit is known, such an exploit will
    likely be available soon after public disclosure.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  + Other changes:
  - Bugs found by UBSAN (including the incorrect encoding of
    unconstrained INTEGER value -1).
  - Errors found by the LLVM scan-build static analyzer.
  - Errors found by the valgrind memory debugger.
  - Work around GCC Bug 95189 (memcmp wrongly stripped like
    strcmp).
  - Correct ASN.1 OID typo for SHA-384
  - Fix a deadlock in in the MEMORY ccache type.
  - TGS: strip forwardable and proxiable flags if the server is
    disallowed.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  - Incremental HDB propagation improvements
    Refactor send_diffs making it progressive
    Handle partial writes on non-blocking sockets
    Disable Nagle in iprop master and slave
    Use async I/O
    Don't send I_HAVE in response to AYT
    Do not recover log in kadm5_get_principal()
    Don't send diffs to slaves with not yet known version
    Don't stutter in send_diffs
  - Optional backwards-compatible anon-pkinit behavior
- Removed heimdal-7.7.0-autoconf-2.70.patch, fixed upstream.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1673352000">- replace libheimdal conflicts by obsoletes / provides to provide a
  smooth update in the new libheimdal-devel.</changelog>
</package>
<package pkgid="0787cfbd0d843677b1a4fbb51398e031f2284d3718f301f681ebf918481e4eb1" name="libkrb5-26" arch="i586">
  <version epoch="0" ver="7.8.0" rel="bp154.2.4.1"/>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1440936000">- Initial package, version 1.6rc2
- Added patch heimdal-version-script-client.map.patch to add file
  version-script-client.map (File is present in git for tag 1.6rc2
  but missing in tarball).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441108800">- Some changes in spec file to enable build for SLES.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441195200">- Added Conflicts tags to spec file because devel package conflicts
  with krb5-devel and krb5-mini-devel.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441454400">- Added a patched instead of the original tarball because only
  shared libraries will be build and source files of these (not to
  be build) programs have problematic licenses.
- Added script heimdal-patch-source.sh to sources.
- Added patch heimdal-patched.diff that fixes configure.ac and
  several Makefile.am files to successfully build patched source.
- Removed unneeded dependencies in spec file for build.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1483790400">- Update to version 7.1.0
- Removed heimdal-version-script-client.map.patch, fixed upstream.
- Fixed heimdal-patched.diff.
- Unfortunately there is no updated changelog file in tarball,
  changes can be seen in source code version control systems
  history log.</changelog>
  <changelog author="jengelh@inai.de" date="1486036800">- Summary and RPM group update. Do a direct call to ldconfig
  where possible.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1497528000">- Update to version 7.3.0
  - Security
    + Fix transit path validation. Commit f469fc6 (2010-10-02)
    inadvertently caused the previous hop realm to not be added
    to the transit path of issued tickets. This may, in some
    cases, enable bypass of capath policy in Heimdal versions 1.5
    through 7.2.
    Note, this may break sites that rely on the bug. With the bug
    some incomplete [capaths] worked, that should not have.
    These may now break authentication in some cross-realm
    configurations. (CVE-2017-6594)
- Version 7.2.0
  - Bug fixes
    + Portability improvements.
    + More strict parsing of encoded URI components in HTTP KDC.
    + Fixed memory leak in malloc error recovery in NTLM GSSAPI
    mechanism.
    + Avoid overly specific CPU info in krb5-config in aid of
    reproducible builds.
    + Don't do AFS string-to-key tests when feature is disabled.
    + Skip mdb_stat test when the command is not available.
    + Windows: update SHA2 timestamp server.
    + hdb: add missing export
    hdb_generate_key_set_password_with_ks_tuple.
    + Fix signature of hdb_generate_key_set_password().
    + Windows: enable KX509 support in the KDC.
    + kdc: fix kx509 service principal match.
    + iprop: handle case where master sends nothing new.
    + ipropd-slave: fix incorrect error codes.
    + Allow choice of sqlite for HDB pref.
    + check-iprop: don't fail to kill daemons.
    + roken: pidfile -&gt; rk_pidfile.
    + kdc: _kdc_do_kx509 fix use after free error.
    + Do not detect x32 as 64-bit platform.
    + No sys/ttydefaults.h on CYGWIN.
    + Fix check-iprop races.
    + roken_detach_prep() close pipe.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1501761600">- Update to version 7.4.0
  - Security
  - Fix CVE-2017-11103: Orpheus' Lyre KDC-REP service name
    validation.
    This is a critical vulnerability.
    In _krb5_extract_ticket() the KDC-REP service name must be
    obtained from encrypted version stored in 'enc_part' instead
    of the unencrypted version stored in 'ticket'.
    Use of the unecrypted version provides an opportunity for
    successful server impersonation and other attacks.
    Identified by Jeffrey Altman, Viktor Duchovni and
    Nico Williams.
    See https://www.orpheus-lyre.info/ for more details.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1512648000">- Added Avoid_NULL_structure_pointer_member_dereference.patch,
  fixes (bsc#1071675).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1514548800">- Update to version 7.5.0
  - Security
  - Fix CVE-2017-17439, which is a remote denial of service
    vulnerability:
    In Heimdal 7.1 through 7.4, remote unauthenticated attackers
    are able to crash the KDC by sending a crafted UDP packet
    containing empty data fields for client name or realm.
  - Bug fixes
  - Handle long input lines when reloading database dumps.
  - In pre-forked mode (default on Unix), correctly clear the
    process ids of exited children, allowing new child processes
    to replace the old.
  - Fixed incorrect KDC response when no-cross realm TGT exists,
    allowing client requests to fail quickly rather than time
    out after trying to get a correct answer from each KDC.
- Fixed heimdal-patched.diff.
- Removed Avoid_NULL_structure_pointer_member_dereference.patch,
  fixed upstream.</changelog>
  <changelog author="bwiedemann@suse.com" date="1533643200">- Add reproducible.patch to override build date (boo#1047218)
- Use constant hostname (boo#1084909)</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1561291200">- Update to version 7.7.0
  + Bug fixes:
  - PKCS#11 hcrypto back-end:
    + initialize the p11_module_load function list
    + verify that not only is a mechanism present but that its
    mechanism info states that it offers the required
    encryption, decryption or digest services
  - krb5:
    + Starting with 7.6, Heimdal permitted requesting
    authenticated anonymous tickets. However, it did not
    verify that a KDC in fact returned an anonymous ticket
    when one was requested.
    + Cease setting the KDCOption reaquest_anonymous flag when
    issuing S4UProxy (constrained delegation) TGS requests.
    + when the Win2K PKINIT compatibility option is set, do not
    require krbtgt otherName to match when validating KDC
    certificate.
    + set PKINIT_BTMM flag per Apple implementation
    + use memset_s() instead of memset()
  - kdc:
    + When generating KRB5SignedPath in the AS, use the reply
    client name rather than the one from the request, so
    validation will work correctly in the TGS.
    + allow checksum of PA-FOR-USER to be HMAC_MD5. Even if TGT
    used an enctype with a different checksum. Per [MS-SFU]
    2.2.1 PA-FOR-USER the checksum is always HMAC_MD5, and
    that's what Windows and MIT clients send.
    In Heimdal both the client and kdc use instead the
    checksum of the TGT, and therefore work with each other
    but Windows and MIT clients fail against Heimdal KDC.
    Both Windows and MIT KDC would allow any keyed checksum
    to be used so Heimdal client work fine against it.
    Change Heimdal KDC to allow HMAC_MD5 even for non RC4
    based TGT in order to support per-spec clients.
    + use memset_s() instead of memset()
    + Detect Heimdal 1.0 through 7.6 clients that issue
    S4UProxy (constrained delegation) TGS Requests with the
    request anonymous flag set. These requests will be
    treated as S4UProxy requests and not anonymous requests.
  - HDB:
    + Set SQLite3 backend default page size to 8KB.
    + Add hdb_set_sync() method
  - kadmind:
    + disable HDB sync during database load avoiding
    unnecessary disk i/o.
  - ipropd:
    + disable HDB sync during receive_everything. Doing an
    fsync per-record when receiving the complete HDB is a
    performance disaster. Among other things, if the HDB is
    very large, then one slave receving a full HDB can cause
    other slaves to timeout and, if HDB write activity is
    high enough to cause iprop log truncation, then also need
    full syncs, which leads to a cycle of full syncs for all
    slaves until HDB write activity drops.
    Allowing the iprop log to be larger helps, but improving
    receive_everything() performance helps even more.
  - kinit:
    + Anonymous PKINIT tickets discard the realm information
    used to locate the issuing AS. Store the issuing realm in
    the credentials cache in order to locate a KDC which can
    renew them.
    + Do not leak the result of krb5_cc_get_config() when
    determining anonymous PKINIT start realm.
  - klist:
    + Show transited-policy-checked, ok-as-delegate and
    anonymous flags when listing credentials.
  - tests:
    + Regenerate certs so that they expire before the 2038
    armageddon so the test suite will pass on 32-bit
    operating systems until the underlying issues can be
    resolved.
  - Solaris:
    + Define _STDC_C11_BCI for memset_s prototype
  - build tooling:
    + Convert from python 2 to python 3
  - documentation:
    + rename verify-password to verify-password-quality
    + hprop default mode is encrypt
    + kadmind "all" permission does not include "get-keys"
    + verify-password-quality might not be stateless
- Version 7.6.0
  + Security (#555):
  - CVE-2018-16860 Heimdal KDC: Reject PA-S4U2Self with unkeyed
    checksum
    When the Heimdal KDC checks the checksum that is placed on
    the S4U2Self packet by the server to protect the requested
    principal against modification, it does not confirm that
    the checksum algorithm that protects the user name
    (principal) in the request is keyed. This allows a
    man-in-the-middle attacker who can intercept the request to
    the KDC to modify the packet by replacing the user name
    (principal) in the request with any desired user name
    (principal) that exists in the KDC and replace the checksum
    protecting that name with a CRC32 checksum (which requires
    no prior knowledge to compute).
    This would allow a S4U2Self ticket requested on behalf of
    user name (principal) user@EXAMPLE.COM to any service to be
    changed to a S4U2Self ticket with a user name (principal) of
    Administrator@EXAMPLE.COM. This ticket would then contain
    the PAC of the modified user name (principal).
  - CVE-2019-12098, client-only:
    RFC8062 Section 7 requires verification of the PA-PKINIT-KX
    key exchange when anonymous PKINIT is used. Failure to do
    so can permit an active attacker to become a
    man-in-the-middle.
  + Bug fixes:
  - Happy eyeballs: Don't wait for responses from
    known-unreachable KDCs.
  - kdc:
    + check return copy_Realm, copy_PrincipalName,
    copy_EncryptionKey
  - kinit:
    + cleanup temporary ccaches
    + see man page for "kinit --anonymous" command line syntax
    change
  - kdc:
    + Make anonymous AS-requests more RFC8062-compliant.
    Updated expired test certificates
  - Solaris:
    + PKCS#11 hcrypto backend broken since 7.0.1
    + Building with Sun Pro C
  + Features:
  - kuser: support authenticated anonymous AS-REQs in kinit
  - kdc: support for anonymous TGS-REQs
  - kgetcred support for anonymous service tickets
  - Support builds with OpenSSL 1.1.1
- fixed heimdal-patched.diff and reproducible.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1653480000">- Apply Shared Library Packaging Policy and resolve rpmlint
  errors like "libheimdal.x86_64: E: shlib-policy-name-error
  SONAME: libasn1.so.8, expected package suffix: 8"</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656417600">- Add heimdal-7.7.0-autoconf-2.70.patch: Fix build with autoconf
  2.70 (gh#heimdal/heimdal#856).</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656590400">- Add ldconfig scriptlets.
- Fix 'Conflicts:' tags.
- Remove obsolete macros and conditionals.
- Ran spec-cleaner.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1671624000">- Update to version 7.8.0
  + This release includes both the Heimdal 7.7.1 Security
    Vulnerability fixes and non-Security bug fixes/improvements.
  + Security Vulnerabilities:
  - CVE-2022-42898 PAC parse integer overflows
  - CVE-2022-3437 Overflows and non-constant time leaks in
    DES{,3} and arcfour
  - CVE-2022-41916 Fix Unicode normalization read of 1 bytes past
    end of array
  - CVE-2021-44758 A null pointer de-reference DoS in SPNEGO
    acceptors
  - CVE-2021-3671 A null pointer de-reference when handling
    missing sname in TGS-REQ
  - CVE-2022-44640 Heimdal KDC: invalid free in ASN.1 codec
    Note that CVE-2022-44640 is a severe vulnerability,
    possibly a 10.0 on the Common Vulnerability Scoring
    System (CVSS) v3, as we believe it should be possible to
    get an RCE on a KDC, which means that credentials can be
    compromised that can be used to impersonate anyone in a
    realm or forest of realms.
    Heimdal's ASN.1 compiler generates code that allows
    specially crafted DER encodings of CHOICEs to invoke the
    wrong free function on the decoded structure upon decode
    error. This is known to impact the Heimdal KDC, leading to
    an invalid free() of an address partly or wholly under the
    control of the attacker, in turn leading to a potential
    remote code execution (RCE) vulnerability.
    This error affects the DER codec for all extensible CHOICE
    types used in Heimdal, though not all cases will be
    exploitable. We have not completed a thorough analysis of
    all the Heimdal components affected, thus the Kerberos
    client, the X.509 library, and other parts, may be affected
    as well.
    This bug has been in Heimdal's ASN.1 compiler since 2005,
    but it may only affect Heimdal 1.6 and up. It was first
    reported by Douglas Bagnall, though it had been found
    independently by the Heimdal maintainers via fuzzing a few
    weeks earlier.
    While no zero-day exploit is known, such an exploit will
    likely be available soon after public disclosure.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  + Other changes:
  - Bugs found by UBSAN (including the incorrect encoding of
    unconstrained INTEGER value -1).
  - Errors found by the LLVM scan-build static analyzer.
  - Errors found by the valgrind memory debugger.
  - Work around GCC Bug 95189 (memcmp wrongly stripped like
    strcmp).
  - Correct ASN.1 OID typo for SHA-384
  - Fix a deadlock in in the MEMORY ccache type.
  - TGS: strip forwardable and proxiable flags if the server is
    disallowed.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  - Incremental HDB propagation improvements
    Refactor send_diffs making it progressive
    Handle partial writes on non-blocking sockets
    Disable Nagle in iprop master and slave
    Use async I/O
    Don't send I_HAVE in response to AYT
    Do not recover log in kadm5_get_principal()
    Don't send diffs to slaves with not yet known version
    Don't stutter in send_diffs
  - Optional backwards-compatible anon-pkinit behavior
- Removed heimdal-7.7.0-autoconf-2.70.patch, fixed upstream.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1673352000">- replace libheimdal conflicts by obsoletes / provides to provide a
  smooth update in the new libheimdal-devel.</changelog>
</package>
<package pkgid="86aac718d92d60f87a81a69ba3dec353769134577a25d589b443cf59b4fad18c" name="libkrb5-26" arch="ppc64le">
  <version epoch="0" ver="7.8.0" rel="bp154.2.4.1"/>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1440936000">- Initial package, version 1.6rc2
- Added patch heimdal-version-script-client.map.patch to add file
  version-script-client.map (File is present in git for tag 1.6rc2
  but missing in tarball).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441108800">- Some changes in spec file to enable build for SLES.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441195200">- Added Conflicts tags to spec file because devel package conflicts
  with krb5-devel and krb5-mini-devel.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441454400">- Added a patched instead of the original tarball because only
  shared libraries will be build and source files of these (not to
  be build) programs have problematic licenses.
- Added script heimdal-patch-source.sh to sources.
- Added patch heimdal-patched.diff that fixes configure.ac and
  several Makefile.am files to successfully build patched source.
- Removed unneeded dependencies in spec file for build.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1483790400">- Update to version 7.1.0
- Removed heimdal-version-script-client.map.patch, fixed upstream.
- Fixed heimdal-patched.diff.
- Unfortunately there is no updated changelog file in tarball,
  changes can be seen in source code version control systems
  history log.</changelog>
  <changelog author="jengelh@inai.de" date="1486036800">- Summary and RPM group update. Do a direct call to ldconfig
  where possible.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1497528000">- Update to version 7.3.0
  - Security
    + Fix transit path validation. Commit f469fc6 (2010-10-02)
    inadvertently caused the previous hop realm to not be added
    to the transit path of issued tickets. This may, in some
    cases, enable bypass of capath policy in Heimdal versions 1.5
    through 7.2.
    Note, this may break sites that rely on the bug. With the bug
    some incomplete [capaths] worked, that should not have.
    These may now break authentication in some cross-realm
    configurations. (CVE-2017-6594)
- Version 7.2.0
  - Bug fixes
    + Portability improvements.
    + More strict parsing of encoded URI components in HTTP KDC.
    + Fixed memory leak in malloc error recovery in NTLM GSSAPI
    mechanism.
    + Avoid overly specific CPU info in krb5-config in aid of
    reproducible builds.
    + Don't do AFS string-to-key tests when feature is disabled.
    + Skip mdb_stat test when the command is not available.
    + Windows: update SHA2 timestamp server.
    + hdb: add missing export
    hdb_generate_key_set_password_with_ks_tuple.
    + Fix signature of hdb_generate_key_set_password().
    + Windows: enable KX509 support in the KDC.
    + kdc: fix kx509 service principal match.
    + iprop: handle case where master sends nothing new.
    + ipropd-slave: fix incorrect error codes.
    + Allow choice of sqlite for HDB pref.
    + check-iprop: don't fail to kill daemons.
    + roken: pidfile -&gt; rk_pidfile.
    + kdc: _kdc_do_kx509 fix use after free error.
    + Do not detect x32 as 64-bit platform.
    + No sys/ttydefaults.h on CYGWIN.
    + Fix check-iprop races.
    + roken_detach_prep() close pipe.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1501761600">- Update to version 7.4.0
  - Security
  - Fix CVE-2017-11103: Orpheus' Lyre KDC-REP service name
    validation.
    This is a critical vulnerability.
    In _krb5_extract_ticket() the KDC-REP service name must be
    obtained from encrypted version stored in 'enc_part' instead
    of the unencrypted version stored in 'ticket'.
    Use of the unecrypted version provides an opportunity for
    successful server impersonation and other attacks.
    Identified by Jeffrey Altman, Viktor Duchovni and
    Nico Williams.
    See https://www.orpheus-lyre.info/ for more details.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1512648000">- Added Avoid_NULL_structure_pointer_member_dereference.patch,
  fixes (bsc#1071675).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1514548800">- Update to version 7.5.0
  - Security
  - Fix CVE-2017-17439, which is a remote denial of service
    vulnerability:
    In Heimdal 7.1 through 7.4, remote unauthenticated attackers
    are able to crash the KDC by sending a crafted UDP packet
    containing empty data fields for client name or realm.
  - Bug fixes
  - Handle long input lines when reloading database dumps.
  - In pre-forked mode (default on Unix), correctly clear the
    process ids of exited children, allowing new child processes
    to replace the old.
  - Fixed incorrect KDC response when no-cross realm TGT exists,
    allowing client requests to fail quickly rather than time
    out after trying to get a correct answer from each KDC.
- Fixed heimdal-patched.diff.
- Removed Avoid_NULL_structure_pointer_member_dereference.patch,
  fixed upstream.</changelog>
  <changelog author="bwiedemann@suse.com" date="1533643200">- Add reproducible.patch to override build date (boo#1047218)
- Use constant hostname (boo#1084909)</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1561291200">- Update to version 7.7.0
  + Bug fixes:
  - PKCS#11 hcrypto back-end:
    + initialize the p11_module_load function list
    + verify that not only is a mechanism present but that its
    mechanism info states that it offers the required
    encryption, decryption or digest services
  - krb5:
    + Starting with 7.6, Heimdal permitted requesting
    authenticated anonymous tickets. However, it did not
    verify that a KDC in fact returned an anonymous ticket
    when one was requested.
    + Cease setting the KDCOption reaquest_anonymous flag when
    issuing S4UProxy (constrained delegation) TGS requests.
    + when the Win2K PKINIT compatibility option is set, do not
    require krbtgt otherName to match when validating KDC
    certificate.
    + set PKINIT_BTMM flag per Apple implementation
    + use memset_s() instead of memset()
  - kdc:
    + When generating KRB5SignedPath in the AS, use the reply
    client name rather than the one from the request, so
    validation will work correctly in the TGS.
    + allow checksum of PA-FOR-USER to be HMAC_MD5. Even if TGT
    used an enctype with a different checksum. Per [MS-SFU]
    2.2.1 PA-FOR-USER the checksum is always HMAC_MD5, and
    that's what Windows and MIT clients send.
    In Heimdal both the client and kdc use instead the
    checksum of the TGT, and therefore work with each other
    but Windows and MIT clients fail against Heimdal KDC.
    Both Windows and MIT KDC would allow any keyed checksum
    to be used so Heimdal client work fine against it.
    Change Heimdal KDC to allow HMAC_MD5 even for non RC4
    based TGT in order to support per-spec clients.
    + use memset_s() instead of memset()
    + Detect Heimdal 1.0 through 7.6 clients that issue
    S4UProxy (constrained delegation) TGS Requests with the
    request anonymous flag set. These requests will be
    treated as S4UProxy requests and not anonymous requests.
  - HDB:
    + Set SQLite3 backend default page size to 8KB.
    + Add hdb_set_sync() method
  - kadmind:
    + disable HDB sync during database load avoiding
    unnecessary disk i/o.
  - ipropd:
    + disable HDB sync during receive_everything. Doing an
    fsync per-record when receiving the complete HDB is a
    performance disaster. Among other things, if the HDB is
    very large, then one slave receving a full HDB can cause
    other slaves to timeout and, if HDB write activity is
    high enough to cause iprop log truncation, then also need
    full syncs, which leads to a cycle of full syncs for all
    slaves until HDB write activity drops.
    Allowing the iprop log to be larger helps, but improving
    receive_everything() performance helps even more.
  - kinit:
    + Anonymous PKINIT tickets discard the realm information
    used to locate the issuing AS. Store the issuing realm in
    the credentials cache in order to locate a KDC which can
    renew them.
    + Do not leak the result of krb5_cc_get_config() when
    determining anonymous PKINIT start realm.
  - klist:
    + Show transited-policy-checked, ok-as-delegate and
    anonymous flags when listing credentials.
  - tests:
    + Regenerate certs so that they expire before the 2038
    armageddon so the test suite will pass on 32-bit
    operating systems until the underlying issues can be
    resolved.
  - Solaris:
    + Define _STDC_C11_BCI for memset_s prototype
  - build tooling:
    + Convert from python 2 to python 3
  - documentation:
    + rename verify-password to verify-password-quality
    + hprop default mode is encrypt
    + kadmind "all" permission does not include "get-keys"
    + verify-password-quality might not be stateless
- Version 7.6.0
  + Security (#555):
  - CVE-2018-16860 Heimdal KDC: Reject PA-S4U2Self with unkeyed
    checksum
    When the Heimdal KDC checks the checksum that is placed on
    the S4U2Self packet by the server to protect the requested
    principal against modification, it does not confirm that
    the checksum algorithm that protects the user name
    (principal) in the request is keyed. This allows a
    man-in-the-middle attacker who can intercept the request to
    the KDC to modify the packet by replacing the user name
    (principal) in the request with any desired user name
    (principal) that exists in the KDC and replace the checksum
    protecting that name with a CRC32 checksum (which requires
    no prior knowledge to compute).
    This would allow a S4U2Self ticket requested on behalf of
    user name (principal) user@EXAMPLE.COM to any service to be
    changed to a S4U2Self ticket with a user name (principal) of
    Administrator@EXAMPLE.COM. This ticket would then contain
    the PAC of the modified user name (principal).
  - CVE-2019-12098, client-only:
    RFC8062 Section 7 requires verification of the PA-PKINIT-KX
    key exchange when anonymous PKINIT is used. Failure to do
    so can permit an active attacker to become a
    man-in-the-middle.
  + Bug fixes:
  - Happy eyeballs: Don't wait for responses from
    known-unreachable KDCs.
  - kdc:
    + check return copy_Realm, copy_PrincipalName,
    copy_EncryptionKey
  - kinit:
    + cleanup temporary ccaches
    + see man page for "kinit --anonymous" command line syntax
    change
  - kdc:
    + Make anonymous AS-requests more RFC8062-compliant.
    Updated expired test certificates
  - Solaris:
    + PKCS#11 hcrypto backend broken since 7.0.1
    + Building with Sun Pro C
  + Features:
  - kuser: support authenticated anonymous AS-REQs in kinit
  - kdc: support for anonymous TGS-REQs
  - kgetcred support for anonymous service tickets
  - Support builds with OpenSSL 1.1.1
- fixed heimdal-patched.diff and reproducible.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1653480000">- Apply Shared Library Packaging Policy and resolve rpmlint
  errors like "libheimdal.x86_64: E: shlib-policy-name-error
  SONAME: libasn1.so.8, expected package suffix: 8"</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656417600">- Add heimdal-7.7.0-autoconf-2.70.patch: Fix build with autoconf
  2.70 (gh#heimdal/heimdal#856).</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656590400">- Add ldconfig scriptlets.
- Fix 'Conflicts:' tags.
- Remove obsolete macros and conditionals.
- Ran spec-cleaner.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1671624000">- Update to version 7.8.0
  + This release includes both the Heimdal 7.7.1 Security
    Vulnerability fixes and non-Security bug fixes/improvements.
  + Security Vulnerabilities:
  - CVE-2022-42898 PAC parse integer overflows
  - CVE-2022-3437 Overflows and non-constant time leaks in
    DES{,3} and arcfour
  - CVE-2022-41916 Fix Unicode normalization read of 1 bytes past
    end of array
  - CVE-2021-44758 A null pointer de-reference DoS in SPNEGO
    acceptors
  - CVE-2021-3671 A null pointer de-reference when handling
    missing sname in TGS-REQ
  - CVE-2022-44640 Heimdal KDC: invalid free in ASN.1 codec
    Note that CVE-2022-44640 is a severe vulnerability,
    possibly a 10.0 on the Common Vulnerability Scoring
    System (CVSS) v3, as we believe it should be possible to
    get an RCE on a KDC, which means that credentials can be
    compromised that can be used to impersonate anyone in a
    realm or forest of realms.
    Heimdal's ASN.1 compiler generates code that allows
    specially crafted DER encodings of CHOICEs to invoke the
    wrong free function on the decoded structure upon decode
    error. This is known to impact the Heimdal KDC, leading to
    an invalid free() of an address partly or wholly under the
    control of the attacker, in turn leading to a potential
    remote code execution (RCE) vulnerability.
    This error affects the DER codec for all extensible CHOICE
    types used in Heimdal, though not all cases will be
    exploitable. We have not completed a thorough analysis of
    all the Heimdal components affected, thus the Kerberos
    client, the X.509 library, and other parts, may be affected
    as well.
    This bug has been in Heimdal's ASN.1 compiler since 2005,
    but it may only affect Heimdal 1.6 and up. It was first
    reported by Douglas Bagnall, though it had been found
    independently by the Heimdal maintainers via fuzzing a few
    weeks earlier.
    While no zero-day exploit is known, such an exploit will
    likely be available soon after public disclosure.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  + Other changes:
  - Bugs found by UBSAN (including the incorrect encoding of
    unconstrained INTEGER value -1).
  - Errors found by the LLVM scan-build static analyzer.
  - Errors found by the valgrind memory debugger.
  - Work around GCC Bug 95189 (memcmp wrongly stripped like
    strcmp).
  - Correct ASN.1 OID typo for SHA-384
  - Fix a deadlock in in the MEMORY ccache type.
  - TGS: strip forwardable and proxiable flags if the server is
    disallowed.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  - Incremental HDB propagation improvements
    Refactor send_diffs making it progressive
    Handle partial writes on non-blocking sockets
    Disable Nagle in iprop master and slave
    Use async I/O
    Don't send I_HAVE in response to AYT
    Do not recover log in kadm5_get_principal()
    Don't send diffs to slaves with not yet known version
    Don't stutter in send_diffs
  - Optional backwards-compatible anon-pkinit behavior
- Removed heimdal-7.7.0-autoconf-2.70.patch, fixed upstream.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1673352000">- replace libheimdal conflicts by obsoletes / provides to provide a
  smooth update in the new libheimdal-devel.</changelog>
</package>
<package pkgid="32a7740dde2b94133e3719b38d5a69141b8835ce417f1a6b93ef5b84f0effeaa" name="libkrb5-26" arch="s390x">
  <version epoch="0" ver="7.8.0" rel="bp154.2.4.1"/>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1440936000">- Initial package, version 1.6rc2
- Added patch heimdal-version-script-client.map.patch to add file
  version-script-client.map (File is present in git for tag 1.6rc2
  but missing in tarball).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441108800">- Some changes in spec file to enable build for SLES.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441195200">- Added Conflicts tags to spec file because devel package conflicts
  with krb5-devel and krb5-mini-devel.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441454400">- Added a patched instead of the original tarball because only
  shared libraries will be build and source files of these (not to
  be build) programs have problematic licenses.
- Added script heimdal-patch-source.sh to sources.
- Added patch heimdal-patched.diff that fixes configure.ac and
  several Makefile.am files to successfully build patched source.
- Removed unneeded dependencies in spec file for build.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1483790400">- Update to version 7.1.0
- Removed heimdal-version-script-client.map.patch, fixed upstream.
- Fixed heimdal-patched.diff.
- Unfortunately there is no updated changelog file in tarball,
  changes can be seen in source code version control systems
  history log.</changelog>
  <changelog author="jengelh@inai.de" date="1486036800">- Summary and RPM group update. Do a direct call to ldconfig
  where possible.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1497528000">- Update to version 7.3.0
  - Security
    + Fix transit path validation. Commit f469fc6 (2010-10-02)
    inadvertently caused the previous hop realm to not be added
    to the transit path of issued tickets. This may, in some
    cases, enable bypass of capath policy in Heimdal versions 1.5
    through 7.2.
    Note, this may break sites that rely on the bug. With the bug
    some incomplete [capaths] worked, that should not have.
    These may now break authentication in some cross-realm
    configurations. (CVE-2017-6594)
- Version 7.2.0
  - Bug fixes
    + Portability improvements.
    + More strict parsing of encoded URI components in HTTP KDC.
    + Fixed memory leak in malloc error recovery in NTLM GSSAPI
    mechanism.
    + Avoid overly specific CPU info in krb5-config in aid of
    reproducible builds.
    + Don't do AFS string-to-key tests when feature is disabled.
    + Skip mdb_stat test when the command is not available.
    + Windows: update SHA2 timestamp server.
    + hdb: add missing export
    hdb_generate_key_set_password_with_ks_tuple.
    + Fix signature of hdb_generate_key_set_password().
    + Windows: enable KX509 support in the KDC.
    + kdc: fix kx509 service principal match.
    + iprop: handle case where master sends nothing new.
    + ipropd-slave: fix incorrect error codes.
    + Allow choice of sqlite for HDB pref.
    + check-iprop: don't fail to kill daemons.
    + roken: pidfile -&gt; rk_pidfile.
    + kdc: _kdc_do_kx509 fix use after free error.
    + Do not detect x32 as 64-bit platform.
    + No sys/ttydefaults.h on CYGWIN.
    + Fix check-iprop races.
    + roken_detach_prep() close pipe.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1501761600">- Update to version 7.4.0
  - Security
  - Fix CVE-2017-11103: Orpheus' Lyre KDC-REP service name
    validation.
    This is a critical vulnerability.
    In _krb5_extract_ticket() the KDC-REP service name must be
    obtained from encrypted version stored in 'enc_part' instead
    of the unencrypted version stored in 'ticket'.
    Use of the unecrypted version provides an opportunity for
    successful server impersonation and other attacks.
    Identified by Jeffrey Altman, Viktor Duchovni and
    Nico Williams.
    See https://www.orpheus-lyre.info/ for more details.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1512648000">- Added Avoid_NULL_structure_pointer_member_dereference.patch,
  fixes (bsc#1071675).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1514548800">- Update to version 7.5.0
  - Security
  - Fix CVE-2017-17439, which is a remote denial of service
    vulnerability:
    In Heimdal 7.1 through 7.4, remote unauthenticated attackers
    are able to crash the KDC by sending a crafted UDP packet
    containing empty data fields for client name or realm.
  - Bug fixes
  - Handle long input lines when reloading database dumps.
  - In pre-forked mode (default on Unix), correctly clear the
    process ids of exited children, allowing new child processes
    to replace the old.
  - Fixed incorrect KDC response when no-cross realm TGT exists,
    allowing client requests to fail quickly rather than time
    out after trying to get a correct answer from each KDC.
- Fixed heimdal-patched.diff.
- Removed Avoid_NULL_structure_pointer_member_dereference.patch,
  fixed upstream.</changelog>
  <changelog author="bwiedemann@suse.com" date="1533643200">- Add reproducible.patch to override build date (boo#1047218)
- Use constant hostname (boo#1084909)</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1561291200">- Update to version 7.7.0
  + Bug fixes:
  - PKCS#11 hcrypto back-end:
    + initialize the p11_module_load function list
    + verify that not only is a mechanism present but that its
    mechanism info states that it offers the required
    encryption, decryption or digest services
  - krb5:
    + Starting with 7.6, Heimdal permitted requesting
    authenticated anonymous tickets. However, it did not
    verify that a KDC in fact returned an anonymous ticket
    when one was requested.
    + Cease setting the KDCOption reaquest_anonymous flag when
    issuing S4UProxy (constrained delegation) TGS requests.
    + when the Win2K PKINIT compatibility option is set, do not
    require krbtgt otherName to match when validating KDC
    certificate.
    + set PKINIT_BTMM flag per Apple implementation
    + use memset_s() instead of memset()
  - kdc:
    + When generating KRB5SignedPath in the AS, use the reply
    client name rather than the one from the request, so
    validation will work correctly in the TGS.
    + allow checksum of PA-FOR-USER to be HMAC_MD5. Even if TGT
    used an enctype with a different checksum. Per [MS-SFU]
    2.2.1 PA-FOR-USER the checksum is always HMAC_MD5, and
    that's what Windows and MIT clients send.
    In Heimdal both the client and kdc use instead the
    checksum of the TGT, and therefore work with each other
    but Windows and MIT clients fail against Heimdal KDC.
    Both Windows and MIT KDC would allow any keyed checksum
    to be used so Heimdal client work fine against it.
    Change Heimdal KDC to allow HMAC_MD5 even for non RC4
    based TGT in order to support per-spec clients.
    + use memset_s() instead of memset()
    + Detect Heimdal 1.0 through 7.6 clients that issue
    S4UProxy (constrained delegation) TGS Requests with the
    request anonymous flag set. These requests will be
    treated as S4UProxy requests and not anonymous requests.
  - HDB:
    + Set SQLite3 backend default page size to 8KB.
    + Add hdb_set_sync() method
  - kadmind:
    + disable HDB sync during database load avoiding
    unnecessary disk i/o.
  - ipropd:
    + disable HDB sync during receive_everything. Doing an
    fsync per-record when receiving the complete HDB is a
    performance disaster. Among other things, if the HDB is
    very large, then one slave receving a full HDB can cause
    other slaves to timeout and, if HDB write activity is
    high enough to cause iprop log truncation, then also need
    full syncs, which leads to a cycle of full syncs for all
    slaves until HDB write activity drops.
    Allowing the iprop log to be larger helps, but improving
    receive_everything() performance helps even more.
  - kinit:
    + Anonymous PKINIT tickets discard the realm information
    used to locate the issuing AS. Store the issuing realm in
    the credentials cache in order to locate a KDC which can
    renew them.
    + Do not leak the result of krb5_cc_get_config() when
    determining anonymous PKINIT start realm.
  - klist:
    + Show transited-policy-checked, ok-as-delegate and
    anonymous flags when listing credentials.
  - tests:
    + Regenerate certs so that they expire before the 2038
    armageddon so the test suite will pass on 32-bit
    operating systems until the underlying issues can be
    resolved.
  - Solaris:
    + Define _STDC_C11_BCI for memset_s prototype
  - build tooling:
    + Convert from python 2 to python 3
  - documentation:
    + rename verify-password to verify-password-quality
    + hprop default mode is encrypt
    + kadmind "all" permission does not include "get-keys"
    + verify-password-quality might not be stateless
- Version 7.6.0
  + Security (#555):
  - CVE-2018-16860 Heimdal KDC: Reject PA-S4U2Self with unkeyed
    checksum
    When the Heimdal KDC checks the checksum that is placed on
    the S4U2Self packet by the server to protect the requested
    principal against modification, it does not confirm that
    the checksum algorithm that protects the user name
    (principal) in the request is keyed. This allows a
    man-in-the-middle attacker who can intercept the request to
    the KDC to modify the packet by replacing the user name
    (principal) in the request with any desired user name
    (principal) that exists in the KDC and replace the checksum
    protecting that name with a CRC32 checksum (which requires
    no prior knowledge to compute).
    This would allow a S4U2Self ticket requested on behalf of
    user name (principal) user@EXAMPLE.COM to any service to be
    changed to a S4U2Self ticket with a user name (principal) of
    Administrator@EXAMPLE.COM. This ticket would then contain
    the PAC of the modified user name (principal).
  - CVE-2019-12098, client-only:
    RFC8062 Section 7 requires verification of the PA-PKINIT-KX
    key exchange when anonymous PKINIT is used. Failure to do
    so can permit an active attacker to become a
    man-in-the-middle.
  + Bug fixes:
  - Happy eyeballs: Don't wait for responses from
    known-unreachable KDCs.
  - kdc:
    + check return copy_Realm, copy_PrincipalName,
    copy_EncryptionKey
  - kinit:
    + cleanup temporary ccaches
    + see man page for "kinit --anonymous" command line syntax
    change
  - kdc:
    + Make anonymous AS-requests more RFC8062-compliant.
    Updated expired test certificates
  - Solaris:
    + PKCS#11 hcrypto backend broken since 7.0.1
    + Building with Sun Pro C
  + Features:
  - kuser: support authenticated anonymous AS-REQs in kinit
  - kdc: support for anonymous TGS-REQs
  - kgetcred support for anonymous service tickets
  - Support builds with OpenSSL 1.1.1
- fixed heimdal-patched.diff and reproducible.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1653480000">- Apply Shared Library Packaging Policy and resolve rpmlint
  errors like "libheimdal.x86_64: E: shlib-policy-name-error
  SONAME: libasn1.so.8, expected package suffix: 8"</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656417600">- Add heimdal-7.7.0-autoconf-2.70.patch: Fix build with autoconf
  2.70 (gh#heimdal/heimdal#856).</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656590400">- Add ldconfig scriptlets.
- Fix 'Conflicts:' tags.
- Remove obsolete macros and conditionals.
- Ran spec-cleaner.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1671624000">- Update to version 7.8.0
  + This release includes both the Heimdal 7.7.1 Security
    Vulnerability fixes and non-Security bug fixes/improvements.
  + Security Vulnerabilities:
  - CVE-2022-42898 PAC parse integer overflows
  - CVE-2022-3437 Overflows and non-constant time leaks in
    DES{,3} and arcfour
  - CVE-2022-41916 Fix Unicode normalization read of 1 bytes past
    end of array
  - CVE-2021-44758 A null pointer de-reference DoS in SPNEGO
    acceptors
  - CVE-2021-3671 A null pointer de-reference when handling
    missing sname in TGS-REQ
  - CVE-2022-44640 Heimdal KDC: invalid free in ASN.1 codec
    Note that CVE-2022-44640 is a severe vulnerability,
    possibly a 10.0 on the Common Vulnerability Scoring
    System (CVSS) v3, as we believe it should be possible to
    get an RCE on a KDC, which means that credentials can be
    compromised that can be used to impersonate anyone in a
    realm or forest of realms.
    Heimdal's ASN.1 compiler generates code that allows
    specially crafted DER encodings of CHOICEs to invoke the
    wrong free function on the decoded structure upon decode
    error. This is known to impact the Heimdal KDC, leading to
    an invalid free() of an address partly or wholly under the
    control of the attacker, in turn leading to a potential
    remote code execution (RCE) vulnerability.
    This error affects the DER codec for all extensible CHOICE
    types used in Heimdal, though not all cases will be
    exploitable. We have not completed a thorough analysis of
    all the Heimdal components affected, thus the Kerberos
    client, the X.509 library, and other parts, may be affected
    as well.
    This bug has been in Heimdal's ASN.1 compiler since 2005,
    but it may only affect Heimdal 1.6 and up. It was first
    reported by Douglas Bagnall, though it had been found
    independently by the Heimdal maintainers via fuzzing a few
    weeks earlier.
    While no zero-day exploit is known, such an exploit will
    likely be available soon after public disclosure.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  + Other changes:
  - Bugs found by UBSAN (including the incorrect encoding of
    unconstrained INTEGER value -1).
  - Errors found by the LLVM scan-build static analyzer.
  - Errors found by the valgrind memory debugger.
  - Work around GCC Bug 95189 (memcmp wrongly stripped like
    strcmp).
  - Correct ASN.1 OID typo for SHA-384
  - Fix a deadlock in in the MEMORY ccache type.
  - TGS: strip forwardable and proxiable flags if the server is
    disallowed.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  - Incremental HDB propagation improvements
    Refactor send_diffs making it progressive
    Handle partial writes on non-blocking sockets
    Disable Nagle in iprop master and slave
    Use async I/O
    Don't send I_HAVE in response to AYT
    Do not recover log in kadm5_get_principal()
    Don't send diffs to slaves with not yet known version
    Don't stutter in send_diffs
  - Optional backwards-compatible anon-pkinit behavior
- Removed heimdal-7.7.0-autoconf-2.70.patch, fixed upstream.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1673352000">- replace libheimdal conflicts by obsoletes / provides to provide a
  smooth update in the new libheimdal-devel.</changelog>
</package>
<package pkgid="a9104287f6f2a77457cd4a71c572bfbc81705d1f17f0e0fb448eba2715ab6d4b" name="libkrb5-26" arch="x86_64">
  <version epoch="0" ver="7.8.0" rel="bp154.2.4.1"/>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1440936000">- Initial package, version 1.6rc2
- Added patch heimdal-version-script-client.map.patch to add file
  version-script-client.map (File is present in git for tag 1.6rc2
  but missing in tarball).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441108800">- Some changes in spec file to enable build for SLES.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441195200">- Added Conflicts tags to spec file because devel package conflicts
  with krb5-devel and krb5-mini-devel.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441454400">- Added a patched instead of the original tarball because only
  shared libraries will be build and source files of these (not to
  be build) programs have problematic licenses.
- Added script heimdal-patch-source.sh to sources.
- Added patch heimdal-patched.diff that fixes configure.ac and
  several Makefile.am files to successfully build patched source.
- Removed unneeded dependencies in spec file for build.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1483790400">- Update to version 7.1.0
- Removed heimdal-version-script-client.map.patch, fixed upstream.
- Fixed heimdal-patched.diff.
- Unfortunately there is no updated changelog file in tarball,
  changes can be seen in source code version control systems
  history log.</changelog>
  <changelog author="jengelh@inai.de" date="1486036800">- Summary and RPM group update. Do a direct call to ldconfig
  where possible.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1497528000">- Update to version 7.3.0
  - Security
    + Fix transit path validation. Commit f469fc6 (2010-10-02)
    inadvertently caused the previous hop realm to not be added
    to the transit path of issued tickets. This may, in some
    cases, enable bypass of capath policy in Heimdal versions 1.5
    through 7.2.
    Note, this may break sites that rely on the bug. With the bug
    some incomplete [capaths] worked, that should not have.
    These may now break authentication in some cross-realm
    configurations. (CVE-2017-6594)
- Version 7.2.0
  - Bug fixes
    + Portability improvements.
    + More strict parsing of encoded URI components in HTTP KDC.
    + Fixed memory leak in malloc error recovery in NTLM GSSAPI
    mechanism.
    + Avoid overly specific CPU info in krb5-config in aid of
    reproducible builds.
    + Don't do AFS string-to-key tests when feature is disabled.
    + Skip mdb_stat test when the command is not available.
    + Windows: update SHA2 timestamp server.
    + hdb: add missing export
    hdb_generate_key_set_password_with_ks_tuple.
    + Fix signature of hdb_generate_key_set_password().
    + Windows: enable KX509 support in the KDC.
    + kdc: fix kx509 service principal match.
    + iprop: handle case where master sends nothing new.
    + ipropd-slave: fix incorrect error codes.
    + Allow choice of sqlite for HDB pref.
    + check-iprop: don't fail to kill daemons.
    + roken: pidfile -&gt; rk_pidfile.
    + kdc: _kdc_do_kx509 fix use after free error.
    + Do not detect x32 as 64-bit platform.
    + No sys/ttydefaults.h on CYGWIN.
    + Fix check-iprop races.
    + roken_detach_prep() close pipe.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1501761600">- Update to version 7.4.0
  - Security
  - Fix CVE-2017-11103: Orpheus' Lyre KDC-REP service name
    validation.
    This is a critical vulnerability.
    In _krb5_extract_ticket() the KDC-REP service name must be
    obtained from encrypted version stored in 'enc_part' instead
    of the unencrypted version stored in 'ticket'.
    Use of the unecrypted version provides an opportunity for
    successful server impersonation and other attacks.
    Identified by Jeffrey Altman, Viktor Duchovni and
    Nico Williams.
    See https://www.orpheus-lyre.info/ for more details.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1512648000">- Added Avoid_NULL_structure_pointer_member_dereference.patch,
  fixes (bsc#1071675).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1514548800">- Update to version 7.5.0
  - Security
  - Fix CVE-2017-17439, which is a remote denial of service
    vulnerability:
    In Heimdal 7.1 through 7.4, remote unauthenticated attackers
    are able to crash the KDC by sending a crafted UDP packet
    containing empty data fields for client name or realm.
  - Bug fixes
  - Handle long input lines when reloading database dumps.
  - In pre-forked mode (default on Unix), correctly clear the
    process ids of exited children, allowing new child processes
    to replace the old.
  - Fixed incorrect KDC response when no-cross realm TGT exists,
    allowing client requests to fail quickly rather than time
    out after trying to get a correct answer from each KDC.
- Fixed heimdal-patched.diff.
- Removed Avoid_NULL_structure_pointer_member_dereference.patch,
  fixed upstream.</changelog>
  <changelog author="bwiedemann@suse.com" date="1533643200">- Add reproducible.patch to override build date (boo#1047218)
- Use constant hostname (boo#1084909)</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1561291200">- Update to version 7.7.0
  + Bug fixes:
  - PKCS#11 hcrypto back-end:
    + initialize the p11_module_load function list
    + verify that not only is a mechanism present but that its
    mechanism info states that it offers the required
    encryption, decryption or digest services
  - krb5:
    + Starting with 7.6, Heimdal permitted requesting
    authenticated anonymous tickets. However, it did not
    verify that a KDC in fact returned an anonymous ticket
    when one was requested.
    + Cease setting the KDCOption reaquest_anonymous flag when
    issuing S4UProxy (constrained delegation) TGS requests.
    + when the Win2K PKINIT compatibility option is set, do not
    require krbtgt otherName to match when validating KDC
    certificate.
    + set PKINIT_BTMM flag per Apple implementation
    + use memset_s() instead of memset()
  - kdc:
    + When generating KRB5SignedPath in the AS, use the reply
    client name rather than the one from the request, so
    validation will work correctly in the TGS.
    + allow checksum of PA-FOR-USER to be HMAC_MD5. Even if TGT
    used an enctype with a different checksum. Per [MS-SFU]
    2.2.1 PA-FOR-USER the checksum is always HMAC_MD5, and
    that's what Windows and MIT clients send.
    In Heimdal both the client and kdc use instead the
    checksum of the TGT, and therefore work with each other
    but Windows and MIT clients fail against Heimdal KDC.
    Both Windows and MIT KDC would allow any keyed checksum
    to be used so Heimdal client work fine against it.
    Change Heimdal KDC to allow HMAC_MD5 even for non RC4
    based TGT in order to support per-spec clients.
    + use memset_s() instead of memset()
    + Detect Heimdal 1.0 through 7.6 clients that issue
    S4UProxy (constrained delegation) TGS Requests with the
    request anonymous flag set. These requests will be
    treated as S4UProxy requests and not anonymous requests.
  - HDB:
    + Set SQLite3 backend default page size to 8KB.
    + Add hdb_set_sync() method
  - kadmind:
    + disable HDB sync during database load avoiding
    unnecessary disk i/o.
  - ipropd:
    + disable HDB sync during receive_everything. Doing an
    fsync per-record when receiving the complete HDB is a
    performance disaster. Among other things, if the HDB is
    very large, then one slave receving a full HDB can cause
    other slaves to timeout and, if HDB write activity is
    high enough to cause iprop log truncation, then also need
    full syncs, which leads to a cycle of full syncs for all
    slaves until HDB write activity drops.
    Allowing the iprop log to be larger helps, but improving
    receive_everything() performance helps even more.
  - kinit:
    + Anonymous PKINIT tickets discard the realm information
    used to locate the issuing AS. Store the issuing realm in
    the credentials cache in order to locate a KDC which can
    renew them.
    + Do not leak the result of krb5_cc_get_config() when
    determining anonymous PKINIT start realm.
  - klist:
    + Show transited-policy-checked, ok-as-delegate and
    anonymous flags when listing credentials.
  - tests:
    + Regenerate certs so that they expire before the 2038
    armageddon so the test suite will pass on 32-bit
    operating systems until the underlying issues can be
    resolved.
  - Solaris:
    + Define _STDC_C11_BCI for memset_s prototype
  - build tooling:
    + Convert from python 2 to python 3
  - documentation:
    + rename verify-password to verify-password-quality
    + hprop default mode is encrypt
    + kadmind "all" permission does not include "get-keys"
    + verify-password-quality might not be stateless
- Version 7.6.0
  + Security (#555):
  - CVE-2018-16860 Heimdal KDC: Reject PA-S4U2Self with unkeyed
    checksum
    When the Heimdal KDC checks the checksum that is placed on
    the S4U2Self packet by the server to protect the requested
    principal against modification, it does not confirm that
    the checksum algorithm that protects the user name
    (principal) in the request is keyed. This allows a
    man-in-the-middle attacker who can intercept the request to
    the KDC to modify the packet by replacing the user name
    (principal) in the request with any desired user name
    (principal) that exists in the KDC and replace the checksum
    protecting that name with a CRC32 checksum (which requires
    no prior knowledge to compute).
    This would allow a S4U2Self ticket requested on behalf of
    user name (principal) user@EXAMPLE.COM to any service to be
    changed to a S4U2Self ticket with a user name (principal) of
    Administrator@EXAMPLE.COM. This ticket would then contain
    the PAC of the modified user name (principal).
  - CVE-2019-12098, client-only:
    RFC8062 Section 7 requires verification of the PA-PKINIT-KX
    key exchange when anonymous PKINIT is used. Failure to do
    so can permit an active attacker to become a
    man-in-the-middle.
  + Bug fixes:
  - Happy eyeballs: Don't wait for responses from
    known-unreachable KDCs.
  - kdc:
    + check return copy_Realm, copy_PrincipalName,
    copy_EncryptionKey
  - kinit:
    + cleanup temporary ccaches
    + see man page for "kinit --anonymous" command line syntax
    change
  - kdc:
    + Make anonymous AS-requests more RFC8062-compliant.
    Updated expired test certificates
  - Solaris:
    + PKCS#11 hcrypto backend broken since 7.0.1
    + Building with Sun Pro C
  + Features:
  - kuser: support authenticated anonymous AS-REQs in kinit
  - kdc: support for anonymous TGS-REQs
  - kgetcred support for anonymous service tickets
  - Support builds with OpenSSL 1.1.1
- fixed heimdal-patched.diff and reproducible.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1653480000">- Apply Shared Library Packaging Policy and resolve rpmlint
  errors like "libheimdal.x86_64: E: shlib-policy-name-error
  SONAME: libasn1.so.8, expected package suffix: 8"</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656417600">- Add heimdal-7.7.0-autoconf-2.70.patch: Fix build with autoconf
  2.70 (gh#heimdal/heimdal#856).</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656590400">- Add ldconfig scriptlets.
- Fix 'Conflicts:' tags.
- Remove obsolete macros and conditionals.
- Ran spec-cleaner.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1671624000">- Update to version 7.8.0
  + This release includes both the Heimdal 7.7.1 Security
    Vulnerability fixes and non-Security bug fixes/improvements.
  + Security Vulnerabilities:
  - CVE-2022-42898 PAC parse integer overflows
  - CVE-2022-3437 Overflows and non-constant time leaks in
    DES{,3} and arcfour
  - CVE-2022-41916 Fix Unicode normalization read of 1 bytes past
    end of array
  - CVE-2021-44758 A null pointer de-reference DoS in SPNEGO
    acceptors
  - CVE-2021-3671 A null pointer de-reference when handling
    missing sname in TGS-REQ
  - CVE-2022-44640 Heimdal KDC: invalid free in ASN.1 codec
    Note that CVE-2022-44640 is a severe vulnerability,
    possibly a 10.0 on the Common Vulnerability Scoring
    System (CVSS) v3, as we believe it should be possible to
    get an RCE on a KDC, which means that credentials can be
    compromised that can be used to impersonate anyone in a
    realm or forest of realms.
    Heimdal's ASN.1 compiler generates code that allows
    specially crafted DER encodings of CHOICEs to invoke the
    wrong free function on the decoded structure upon decode
    error. This is known to impact the Heimdal KDC, leading to
    an invalid free() of an address partly or wholly under the
    control of the attacker, in turn leading to a potential
    remote code execution (RCE) vulnerability.
    This error affects the DER codec for all extensible CHOICE
    types used in Heimdal, though not all cases will be
    exploitable. We have not completed a thorough analysis of
    all the Heimdal components affected, thus the Kerberos
    client, the X.509 library, and other parts, may be affected
    as well.
    This bug has been in Heimdal's ASN.1 compiler since 2005,
    but it may only affect Heimdal 1.6 and up. It was first
    reported by Douglas Bagnall, though it had been found
    independently by the Heimdal maintainers via fuzzing a few
    weeks earlier.
    While no zero-day exploit is known, such an exploit will
    likely be available soon after public disclosure.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  + Other changes:
  - Bugs found by UBSAN (including the incorrect encoding of
    unconstrained INTEGER value -1).
  - Errors found by the LLVM scan-build static analyzer.
  - Errors found by the valgrind memory debugger.
  - Work around GCC Bug 95189 (memcmp wrongly stripped like
    strcmp).
  - Correct ASN.1 OID typo for SHA-384
  - Fix a deadlock in in the MEMORY ccache type.
  - TGS: strip forwardable and proxiable flags if the server is
    disallowed.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  - Incremental HDB propagation improvements
    Refactor send_diffs making it progressive
    Handle partial writes on non-blocking sockets
    Disable Nagle in iprop master and slave
    Use async I/O
    Don't send I_HAVE in response to AYT
    Do not recover log in kadm5_get_principal()
    Don't send diffs to slaves with not yet known version
    Don't stutter in send_diffs
  - Optional backwards-compatible anon-pkinit behavior
- Removed heimdal-7.7.0-autoconf-2.70.patch, fixed upstream.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1673352000">- replace libheimdal conflicts by obsoletes / provides to provide a
  smooth update in the new libheimdal-devel.</changelog>
</package>
<package pkgid="32bb975d906e5c7122f45953b357f31402162faf366fd28b9ffca11bac0e1821" name="libksysguard5" arch="aarch64">
  <version epoch="0" ver="5.24.5" rel="bp154.2.3.2"/>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1627387200">- Update to 5.22.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.22.4
- No code changes since 5.22.3</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1630411200">- Update to 5.22.5
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.22.5
- No code changes since 5.22.4</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1631793600">- Update to 5.22.90
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.22.90
- Too many changes to list here</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1633608000">- Update to 5.23.0
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.0
- Changes since 5.22.90:
  * Add Plasma System Monitor to "Tools" menu
- Add new key + signature to plasma.keyring</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1634644800">- Update to 5.23.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.1
- No code changes since 5.23.0</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1635249600">- Update to 5.23.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.2
- No code changes since 5.23.1</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1636459200">- Update to 5.23.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.3
- Changes since 5.23.2:
  * Fix ksgrd_network_helper crash on exit afer a failure (kde#444921)
  * Fix incorrect string termination in ConnectionMapping</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1637582400">- Add libksysguard5-rpmlintrc (boo#1191766)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1638273600">- Update to 5.23.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.4
- Changes since 5.23.3:
  * Don't update SensorsFeatureSensor if it is not subscribed</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1641297600">- Update to 5.23.5
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.5
- Changes since 5.23.4:
  * Handle process parent changes in ProcessDataModel (kde#446534)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1642075200">- Update to 5.23.90
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.90
- Changes since 5.23.5:
  * ConfigAppearance: Set Layout.preferredWidth in updateRateLimitSpinBox
  * Add support for bits per second (kde#418968)
  * Fix compile error against qt6
  * Use Q_EMIT here
  * Fix typos in l10n string comments
  * Port some Q_FOREACH
  * Handle process parent changes in ProcessDataModel (kde#446534)
  * piechart: Fix punctuation of labels in config
  * ProcessCore: Check the actual previous values when updating IO rates (kde#444127)
  * ProcessCore: Ignore elapsedTime &lt; 0 when updating process usage
  * Fix various typos
  * Don't update SensorsFeatureSensor if it is not subscribed
  * Fix accounting of children in Processes
  * New and improved tests
  * Correct behavior of ProcessSensor::cgroupData
  * Remove Accumulator::stop and Capture::stop
  * Fix ksgrd_network_helper crash on exit afer a failure (kde#444921)
  * Fix ksgrd_network_helper crash on readlinkat failure
  * Update SensorUnitModel.cpp to compile with clang+libcxx
  * Fix incorrect string termination in ConnectionMapping
  * We depend against kf5.86
  * Add FreeBSD CI
  * Add Linux CI
  * Add .kde-ci.yml
  * Add Plasma System Monitor to "Tools" menu</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1644062400">- Update to 5.24.0
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.0
- Changes since 5.23.90:
  * Allow specifying initial value for SysctlSensor
  * BarChart: Make spacing proportional to total width and number of bars (kde#444585)
  * Set an initial value of 0 for SensorsFeatureSensor
  * Allow providing an initial value for AggregateSensor and SysFsSensor
  * Check initial value is valid before resetting in SensorProperty::unsubscribe
  * Support changing sensor label names for the Grid face (kde#448980)
  * Only rate-limit sensors if we already have a valid value (kde#446372)
  * faces/facegrid: Filter out some display styles from the config (kde#447847)
  * Fix compilation on Plasma/5.24 branch
  * faces/textonly: Set grouped header to fill width so it elides properly (kde#440592)
  * Port SensorFaceController to support JSON plugin metadata
  * Fix build with GCC 12, missing include</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1644926400">- Update to 5.24.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.1
- Changes since 5.24.0:
  * Fix showing icons in KSysguard</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1645531200">- Update to 5.24.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.2
- No code changes since 5.24.1</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1646654400">- Replace %_libdir/libexec with %_libexecdir (boo#1174075)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1646740800">- Update to 5.24.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.3
- Changes since 5.24.2:
  * Fixed computational bug for bar chart spacing (kde#449868)
- Restore compatibility with older kf5-filesystem</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1648555200">- Force PIE when building with gcc-10 (boo#1195628, boo#1197641)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1648555201">- Update to 5.24.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.4
- No code changes since 5.24.3</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1651579200">- Update to 5.24.5
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.5
- No code changes since 5.24.4</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1653998400">- Recommend the plugins package (boo#1199851)</changelog>
</package>
<package pkgid="00c338735e173e66a639de9f19b331b4f2193d588bf236affafb3c065a5a54e9" name="libksysguard5" arch="ppc64le">
  <version epoch="0" ver="5.24.5" rel="bp154.2.3.2"/>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1627387200">- Update to 5.22.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.22.4
- No code changes since 5.22.3</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1630411200">- Update to 5.22.5
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.22.5
- No code changes since 5.22.4</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1631793600">- Update to 5.22.90
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.22.90
- Too many changes to list here</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1633608000">- Update to 5.23.0
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.0
- Changes since 5.22.90:
  * Add Plasma System Monitor to "Tools" menu
- Add new key + signature to plasma.keyring</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1634644800">- Update to 5.23.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.1
- No code changes since 5.23.0</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1635249600">- Update to 5.23.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.2
- No code changes since 5.23.1</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1636459200">- Update to 5.23.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.3
- Changes since 5.23.2:
  * Fix ksgrd_network_helper crash on exit afer a failure (kde#444921)
  * Fix incorrect string termination in ConnectionMapping</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1637582400">- Add libksysguard5-rpmlintrc (boo#1191766)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1638273600">- Update to 5.23.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.4
- Changes since 5.23.3:
  * Don't update SensorsFeatureSensor if it is not subscribed</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1641297600">- Update to 5.23.5
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.5
- Changes since 5.23.4:
  * Handle process parent changes in ProcessDataModel (kde#446534)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1642075200">- Update to 5.23.90
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.90
- Changes since 5.23.5:
  * ConfigAppearance: Set Layout.preferredWidth in updateRateLimitSpinBox
  * Add support for bits per second (kde#418968)
  * Fix compile error against qt6
  * Use Q_EMIT here
  * Fix typos in l10n string comments
  * Port some Q_FOREACH
  * Handle process parent changes in ProcessDataModel (kde#446534)
  * piechart: Fix punctuation of labels in config
  * ProcessCore: Check the actual previous values when updating IO rates (kde#444127)
  * ProcessCore: Ignore elapsedTime &lt; 0 when updating process usage
  * Fix various typos
  * Don't update SensorsFeatureSensor if it is not subscribed
  * Fix accounting of children in Processes
  * New and improved tests
  * Correct behavior of ProcessSensor::cgroupData
  * Remove Accumulator::stop and Capture::stop
  * Fix ksgrd_network_helper crash on exit afer a failure (kde#444921)
  * Fix ksgrd_network_helper crash on readlinkat failure
  * Update SensorUnitModel.cpp to compile with clang+libcxx
  * Fix incorrect string termination in ConnectionMapping
  * We depend against kf5.86
  * Add FreeBSD CI
  * Add Linux CI
  * Add .kde-ci.yml
  * Add Plasma System Monitor to "Tools" menu</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1644062400">- Update to 5.24.0
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.0
- Changes since 5.23.90:
  * Allow specifying initial value for SysctlSensor
  * BarChart: Make spacing proportional to total width and number of bars (kde#444585)
  * Set an initial value of 0 for SensorsFeatureSensor
  * Allow providing an initial value for AggregateSensor and SysFsSensor
  * Check initial value is valid before resetting in SensorProperty::unsubscribe
  * Support changing sensor label names for the Grid face (kde#448980)
  * Only rate-limit sensors if we already have a valid value (kde#446372)
  * faces/facegrid: Filter out some display styles from the config (kde#447847)
  * Fix compilation on Plasma/5.24 branch
  * faces/textonly: Set grouped header to fill width so it elides properly (kde#440592)
  * Port SensorFaceController to support JSON plugin metadata
  * Fix build with GCC 12, missing include</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1644926400">- Update to 5.24.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.1
- Changes since 5.24.0:
  * Fix showing icons in KSysguard</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1645531200">- Update to 5.24.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.2
- No code changes since 5.24.1</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1646654400">- Replace %_libdir/libexec with %_libexecdir (boo#1174075)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1646740800">- Update to 5.24.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.3
- Changes since 5.24.2:
  * Fixed computational bug for bar chart spacing (kde#449868)
- Restore compatibility with older kf5-filesystem</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1648555200">- Force PIE when building with gcc-10 (boo#1195628, boo#1197641)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1648555201">- Update to 5.24.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.4
- No code changes since 5.24.3</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1651579200">- Update to 5.24.5
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.5
- No code changes since 5.24.4</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1653998400">- Recommend the plugins package (boo#1199851)</changelog>
</package>
<package pkgid="b0886db2dd8f68127a56339918cf2d471adad40770b891b48f1305b2850409e5" name="libksysguard5" arch="src">
  <version epoch="0" ver="5.24.5" rel="bp154.2.3.2"/>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1627387200">- Update to 5.22.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.22.4
- No code changes since 5.22.3</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1630411200">- Update to 5.22.5
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.22.5
- No code changes since 5.22.4</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1631793600">- Update to 5.22.90
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.22.90
- Too many changes to list here</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1633608000">- Update to 5.23.0
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.0
- Changes since 5.22.90:
  * Add Plasma System Monitor to "Tools" menu
- Add new key + signature to plasma.keyring</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1634644800">- Update to 5.23.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.1
- No code changes since 5.23.0</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1635249600">- Update to 5.23.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.2
- No code changes since 5.23.1</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1636459200">- Update to 5.23.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.3
- Changes since 5.23.2:
  * Fix ksgrd_network_helper crash on exit afer a failure (kde#444921)
  * Fix incorrect string termination in ConnectionMapping</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1637582400">- Add libksysguard5-rpmlintrc (boo#1191766)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1638273600">- Update to 5.23.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.4
- Changes since 5.23.3:
  * Don't update SensorsFeatureSensor if it is not subscribed</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1641297600">- Update to 5.23.5
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.5
- Changes since 5.23.4:
  * Handle process parent changes in ProcessDataModel (kde#446534)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1642075200">- Update to 5.23.90
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.90
- Changes since 5.23.5:
  * ConfigAppearance: Set Layout.preferredWidth in updateRateLimitSpinBox
  * Add support for bits per second (kde#418968)
  * Fix compile error against qt6
  * Use Q_EMIT here
  * Fix typos in l10n string comments
  * Port some Q_FOREACH
  * Handle process parent changes in ProcessDataModel (kde#446534)
  * piechart: Fix punctuation of labels in config
  * ProcessCore: Check the actual previous values when updating IO rates (kde#444127)
  * ProcessCore: Ignore elapsedTime &lt; 0 when updating process usage
  * Fix various typos
  * Don't update SensorsFeatureSensor if it is not subscribed
  * Fix accounting of children in Processes
  * New and improved tests
  * Correct behavior of ProcessSensor::cgroupData
  * Remove Accumulator::stop and Capture::stop
  * Fix ksgrd_network_helper crash on exit afer a failure (kde#444921)
  * Fix ksgrd_network_helper crash on readlinkat failure
  * Update SensorUnitModel.cpp to compile with clang+libcxx
  * Fix incorrect string termination in ConnectionMapping
  * We depend against kf5.86
  * Add FreeBSD CI
  * Add Linux CI
  * Add .kde-ci.yml
  * Add Plasma System Monitor to "Tools" menu</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1644062400">- Update to 5.24.0
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.0
- Changes since 5.23.90:
  * Allow specifying initial value for SysctlSensor
  * BarChart: Make spacing proportional to total width and number of bars (kde#444585)
  * Set an initial value of 0 for SensorsFeatureSensor
  * Allow providing an initial value for AggregateSensor and SysFsSensor
  * Check initial value is valid before resetting in SensorProperty::unsubscribe
  * Support changing sensor label names for the Grid face (kde#448980)
  * Only rate-limit sensors if we already have a valid value (kde#446372)
  * faces/facegrid: Filter out some display styles from the config (kde#447847)
  * Fix compilation on Plasma/5.24 branch
  * faces/textonly: Set grouped header to fill width so it elides properly (kde#440592)
  * Port SensorFaceController to support JSON plugin metadata
  * Fix build with GCC 12, missing include</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1644926400">- Update to 5.24.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.1
- Changes since 5.24.0:
  * Fix showing icons in KSysguard</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1645531200">- Update to 5.24.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.2
- No code changes since 5.24.1</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1646654400">- Replace %_libdir/libexec with %_libexecdir (boo#1174075)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1646740800">- Update to 5.24.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.3
- Changes since 5.24.2:
  * Fixed computational bug for bar chart spacing (kde#449868)
- Restore compatibility with older kf5-filesystem</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1648555200">- Force PIE when building with gcc-10 (boo#1195628, boo#1197641)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1648555201">- Update to 5.24.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.4
- No code changes since 5.24.3</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1651579200">- Update to 5.24.5
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.5
- No code changes since 5.24.4</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1653998400">- Recommend the plugins package (boo#1199851)</changelog>
</package>
<package pkgid="6e96194fb33395f7a2c259a194f789d6487e3ff58e7ce7779031bcf7e60debb3" name="libksysguard5" arch="x86_64">
  <version epoch="0" ver="5.24.5" rel="bp154.2.3.2"/>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1627387200">- Update to 5.22.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.22.4
- No code changes since 5.22.3</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1630411200">- Update to 5.22.5
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.22.5
- No code changes since 5.22.4</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1631793600">- Update to 5.22.90
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.22.90
- Too many changes to list here</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1633608000">- Update to 5.23.0
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.0
- Changes since 5.22.90:
  * Add Plasma System Monitor to "Tools" menu
- Add new key + signature to plasma.keyring</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1634644800">- Update to 5.23.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.1
- No code changes since 5.23.0</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1635249600">- Update to 5.23.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.2
- No code changes since 5.23.1</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1636459200">- Update to 5.23.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.3
- Changes since 5.23.2:
  * Fix ksgrd_network_helper crash on exit afer a failure (kde#444921)
  * Fix incorrect string termination in ConnectionMapping</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1637582400">- Add libksysguard5-rpmlintrc (boo#1191766)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1638273600">- Update to 5.23.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.4
- Changes since 5.23.3:
  * Don't update SensorsFeatureSensor if it is not subscribed</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1641297600">- Update to 5.23.5
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.5
- Changes since 5.23.4:
  * Handle process parent changes in ProcessDataModel (kde#446534)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1642075200">- Update to 5.23.90
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.90
- Changes since 5.23.5:
  * ConfigAppearance: Set Layout.preferredWidth in updateRateLimitSpinBox
  * Add support for bits per second (kde#418968)
  * Fix compile error against qt6
  * Use Q_EMIT here
  * Fix typos in l10n string comments
  * Port some Q_FOREACH
  * Handle process parent changes in ProcessDataModel (kde#446534)
  * piechart: Fix punctuation of labels in config
  * ProcessCore: Check the actual previous values when updating IO rates (kde#444127)
  * ProcessCore: Ignore elapsedTime &lt; 0 when updating process usage
  * Fix various typos
  * Don't update SensorsFeatureSensor if it is not subscribed
  * Fix accounting of children in Processes
  * New and improved tests
  * Correct behavior of ProcessSensor::cgroupData
  * Remove Accumulator::stop and Capture::stop
  * Fix ksgrd_network_helper crash on exit afer a failure (kde#444921)
  * Fix ksgrd_network_helper crash on readlinkat failure
  * Update SensorUnitModel.cpp to compile with clang+libcxx
  * Fix incorrect string termination in ConnectionMapping
  * We depend against kf5.86
  * Add FreeBSD CI
  * Add Linux CI
  * Add .kde-ci.yml
  * Add Plasma System Monitor to "Tools" menu</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1644062400">- Update to 5.24.0
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.0
- Changes since 5.23.90:
  * Allow specifying initial value for SysctlSensor
  * BarChart: Make spacing proportional to total width and number of bars (kde#444585)
  * Set an initial value of 0 for SensorsFeatureSensor
  * Allow providing an initial value for AggregateSensor and SysFsSensor
  * Check initial value is valid before resetting in SensorProperty::unsubscribe
  * Support changing sensor label names for the Grid face (kde#448980)
  * Only rate-limit sensors if we already have a valid value (kde#446372)
  * faces/facegrid: Filter out some display styles from the config (kde#447847)
  * Fix compilation on Plasma/5.24 branch
  * faces/textonly: Set grouped header to fill width so it elides properly (kde#440592)
  * Port SensorFaceController to support JSON plugin metadata
  * Fix build with GCC 12, missing include</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1644926400">- Update to 5.24.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.1
- Changes since 5.24.0:
  * Fix showing icons in KSysguard</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1645531200">- Update to 5.24.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.2
- No code changes since 5.24.1</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1646654400">- Replace %_libdir/libexec with %_libexecdir (boo#1174075)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1646740800">- Update to 5.24.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.3
- Changes since 5.24.2:
  * Fixed computational bug for bar chart spacing (kde#449868)
- Restore compatibility with older kf5-filesystem</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1648555200">- Force PIE when building with gcc-10 (boo#1195628, boo#1197641)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1648555201">- Update to 5.24.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.4
- No code changes since 5.24.3</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1651579200">- Update to 5.24.5
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.5
- No code changes since 5.24.4</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1653998400">- Recommend the plugins package (boo#1199851)</changelog>
</package>
<package pkgid="013743004813597aa4d110b3450f7fb5ec0ec9ed255c98adfe27b392e9daa4e5" name="libksysguard5-devel" arch="aarch64">
  <version epoch="0" ver="5.24.5" rel="bp154.2.3.2"/>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1627387200">- Update to 5.22.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.22.4
- No code changes since 5.22.3</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1630411200">- Update to 5.22.5
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.22.5
- No code changes since 5.22.4</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1631793600">- Update to 5.22.90
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.22.90
- Too many changes to list here</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1633608000">- Update to 5.23.0
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.0
- Changes since 5.22.90:
  * Add Plasma System Monitor to "Tools" menu
- Add new key + signature to plasma.keyring</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1634644800">- Update to 5.23.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.1
- No code changes since 5.23.0</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1635249600">- Update to 5.23.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.2
- No code changes since 5.23.1</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1636459200">- Update to 5.23.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.3
- Changes since 5.23.2:
  * Fix ksgrd_network_helper crash on exit afer a failure (kde#444921)
  * Fix incorrect string termination in ConnectionMapping</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1637582400">- Add libksysguard5-rpmlintrc (boo#1191766)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1638273600">- Update to 5.23.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.4
- Changes since 5.23.3:
  * Don't update SensorsFeatureSensor if it is not subscribed</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1641297600">- Update to 5.23.5
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.5
- Changes since 5.23.4:
  * Handle process parent changes in ProcessDataModel (kde#446534)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1642075200">- Update to 5.23.90
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.90
- Changes since 5.23.5:
  * ConfigAppearance: Set Layout.preferredWidth in updateRateLimitSpinBox
  * Add support for bits per second (kde#418968)
  * Fix compile error against qt6
  * Use Q_EMIT here
  * Fix typos in l10n string comments
  * Port some Q_FOREACH
  * Handle process parent changes in ProcessDataModel (kde#446534)
  * piechart: Fix punctuation of labels in config
  * ProcessCore: Check the actual previous values when updating IO rates (kde#444127)
  * ProcessCore: Ignore elapsedTime &lt; 0 when updating process usage
  * Fix various typos
  * Don't update SensorsFeatureSensor if it is not subscribed
  * Fix accounting of children in Processes
  * New and improved tests
  * Correct behavior of ProcessSensor::cgroupData
  * Remove Accumulator::stop and Capture::stop
  * Fix ksgrd_network_helper crash on exit afer a failure (kde#444921)
  * Fix ksgrd_network_helper crash on readlinkat failure
  * Update SensorUnitModel.cpp to compile with clang+libcxx
  * Fix incorrect string termination in ConnectionMapping
  * We depend against kf5.86
  * Add FreeBSD CI
  * Add Linux CI
  * Add .kde-ci.yml
  * Add Plasma System Monitor to "Tools" menu</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1644062400">- Update to 5.24.0
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.0
- Changes since 5.23.90:
  * Allow specifying initial value for SysctlSensor
  * BarChart: Make spacing proportional to total width and number of bars (kde#444585)
  * Set an initial value of 0 for SensorsFeatureSensor
  * Allow providing an initial value for AggregateSensor and SysFsSensor
  * Check initial value is valid before resetting in SensorProperty::unsubscribe
  * Support changing sensor label names for the Grid face (kde#448980)
  * Only rate-limit sensors if we already have a valid value (kde#446372)
  * faces/facegrid: Filter out some display styles from the config (kde#447847)
  * Fix compilation on Plasma/5.24 branch
  * faces/textonly: Set grouped header to fill width so it elides properly (kde#440592)
  * Port SensorFaceController to support JSON plugin metadata
  * Fix build with GCC 12, missing include</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1644926400">- Update to 5.24.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.1
- Changes since 5.24.0:
  * Fix showing icons in KSysguard</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1645531200">- Update to 5.24.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.2
- No code changes since 5.24.1</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1646654400">- Replace %_libdir/libexec with %_libexecdir (boo#1174075)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1646740800">- Update to 5.24.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.3
- Changes since 5.24.2:
  * Fixed computational bug for bar chart spacing (kde#449868)
- Restore compatibility with older kf5-filesystem</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1648555200">- Force PIE when building with gcc-10 (boo#1195628, boo#1197641)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1648555201">- Update to 5.24.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.4
- No code changes since 5.24.3</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1651579200">- Update to 5.24.5
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.5
- No code changes since 5.24.4</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1653998400">- Recommend the plugins package (boo#1199851)</changelog>
</package>
<package pkgid="52c37e63f34b6c5c0d9a943fa5eff5ce5979e6699c9d91c611e4bf7cf9609107" name="libksysguard5-devel" arch="ppc64le">
  <version epoch="0" ver="5.24.5" rel="bp154.2.3.2"/>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1627387200">- Update to 5.22.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.22.4
- No code changes since 5.22.3</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1630411200">- Update to 5.22.5
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.22.5
- No code changes since 5.22.4</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1631793600">- Update to 5.22.90
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.22.90
- Too many changes to list here</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1633608000">- Update to 5.23.0
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.0
- Changes since 5.22.90:
  * Add Plasma System Monitor to "Tools" menu
- Add new key + signature to plasma.keyring</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1634644800">- Update to 5.23.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.1
- No code changes since 5.23.0</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1635249600">- Update to 5.23.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.2
- No code changes since 5.23.1</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1636459200">- Update to 5.23.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.3
- Changes since 5.23.2:
  * Fix ksgrd_network_helper crash on exit afer a failure (kde#444921)
  * Fix incorrect string termination in ConnectionMapping</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1637582400">- Add libksysguard5-rpmlintrc (boo#1191766)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1638273600">- Update to 5.23.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.4
- Changes since 5.23.3:
  * Don't update SensorsFeatureSensor if it is not subscribed</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1641297600">- Update to 5.23.5
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.5
- Changes since 5.23.4:
  * Handle process parent changes in ProcessDataModel (kde#446534)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1642075200">- Update to 5.23.90
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.90
- Changes since 5.23.5:
  * ConfigAppearance: Set Layout.preferredWidth in updateRateLimitSpinBox
  * Add support for bits per second (kde#418968)
  * Fix compile error against qt6
  * Use Q_EMIT here
  * Fix typos in l10n string comments
  * Port some Q_FOREACH
  * Handle process parent changes in ProcessDataModel (kde#446534)
  * piechart: Fix punctuation of labels in config
  * ProcessCore: Check the actual previous values when updating IO rates (kde#444127)
  * ProcessCore: Ignore elapsedTime &lt; 0 when updating process usage
  * Fix various typos
  * Don't update SensorsFeatureSensor if it is not subscribed
  * Fix accounting of children in Processes
  * New and improved tests
  * Correct behavior of ProcessSensor::cgroupData
  * Remove Accumulator::stop and Capture::stop
  * Fix ksgrd_network_helper crash on exit afer a failure (kde#444921)
  * Fix ksgrd_network_helper crash on readlinkat failure
  * Update SensorUnitModel.cpp to compile with clang+libcxx
  * Fix incorrect string termination in ConnectionMapping
  * We depend against kf5.86
  * Add FreeBSD CI
  * Add Linux CI
  * Add .kde-ci.yml
  * Add Plasma System Monitor to "Tools" menu</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1644062400">- Update to 5.24.0
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.0
- Changes since 5.23.90:
  * Allow specifying initial value for SysctlSensor
  * BarChart: Make spacing proportional to total width and number of bars (kde#444585)
  * Set an initial value of 0 for SensorsFeatureSensor
  * Allow providing an initial value for AggregateSensor and SysFsSensor
  * Check initial value is valid before resetting in SensorProperty::unsubscribe
  * Support changing sensor label names for the Grid face (kde#448980)
  * Only rate-limit sensors if we already have a valid value (kde#446372)
  * faces/facegrid: Filter out some display styles from the config (kde#447847)
  * Fix compilation on Plasma/5.24 branch
  * faces/textonly: Set grouped header to fill width so it elides properly (kde#440592)
  * Port SensorFaceController to support JSON plugin metadata
  * Fix build with GCC 12, missing include</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1644926400">- Update to 5.24.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.1
- Changes since 5.24.0:
  * Fix showing icons in KSysguard</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1645531200">- Update to 5.24.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.2
- No code changes since 5.24.1</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1646654400">- Replace %_libdir/libexec with %_libexecdir (boo#1174075)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1646740800">- Update to 5.24.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.3
- Changes since 5.24.2:
  * Fixed computational bug for bar chart spacing (kde#449868)
- Restore compatibility with older kf5-filesystem</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1648555200">- Force PIE when building with gcc-10 (boo#1195628, boo#1197641)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1648555201">- Update to 5.24.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.4
- No code changes since 5.24.3</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1651579200">- Update to 5.24.5
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.5
- No code changes since 5.24.4</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1653998400">- Recommend the plugins package (boo#1199851)</changelog>
</package>
<package pkgid="e11979b40bcb64c16f389b75aff3c5a126599eb1a2e9c083e44d69de21cfeec5" name="libksysguard5-devel" arch="x86_64">
  <version epoch="0" ver="5.24.5" rel="bp154.2.3.2"/>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1627387200">- Update to 5.22.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.22.4
- No code changes since 5.22.3</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1630411200">- Update to 5.22.5
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.22.5
- No code changes since 5.22.4</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1631793600">- Update to 5.22.90
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.22.90
- Too many changes to list here</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1633608000">- Update to 5.23.0
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.0
- Changes since 5.22.90:
  * Add Plasma System Monitor to "Tools" menu
- Add new key + signature to plasma.keyring</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1634644800">- Update to 5.23.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.1
- No code changes since 5.23.0</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1635249600">- Update to 5.23.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.2
- No code changes since 5.23.1</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1636459200">- Update to 5.23.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.3
- Changes since 5.23.2:
  * Fix ksgrd_network_helper crash on exit afer a failure (kde#444921)
  * Fix incorrect string termination in ConnectionMapping</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1637582400">- Add libksysguard5-rpmlintrc (boo#1191766)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1638273600">- Update to 5.23.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.4
- Changes since 5.23.3:
  * Don't update SensorsFeatureSensor if it is not subscribed</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1641297600">- Update to 5.23.5
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.5
- Changes since 5.23.4:
  * Handle process parent changes in ProcessDataModel (kde#446534)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1642075200">- Update to 5.23.90
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.90
- Changes since 5.23.5:
  * ConfigAppearance: Set Layout.preferredWidth in updateRateLimitSpinBox
  * Add support for bits per second (kde#418968)
  * Fix compile error against qt6
  * Use Q_EMIT here
  * Fix typos in l10n string comments
  * Port some Q_FOREACH
  * Handle process parent changes in ProcessDataModel (kde#446534)
  * piechart: Fix punctuation of labels in config
  * ProcessCore: Check the actual previous values when updating IO rates (kde#444127)
  * ProcessCore: Ignore elapsedTime &lt; 0 when updating process usage
  * Fix various typos
  * Don't update SensorsFeatureSensor if it is not subscribed
  * Fix accounting of children in Processes
  * New and improved tests
  * Correct behavior of ProcessSensor::cgroupData
  * Remove Accumulator::stop and Capture::stop
  * Fix ksgrd_network_helper crash on exit afer a failure (kde#444921)
  * Fix ksgrd_network_helper crash on readlinkat failure
  * Update SensorUnitModel.cpp to compile with clang+libcxx
  * Fix incorrect string termination in ConnectionMapping
  * We depend against kf5.86
  * Add FreeBSD CI
  * Add Linux CI
  * Add .kde-ci.yml
  * Add Plasma System Monitor to "Tools" menu</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1644062400">- Update to 5.24.0
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.0
- Changes since 5.23.90:
  * Allow specifying initial value for SysctlSensor
  * BarChart: Make spacing proportional to total width and number of bars (kde#444585)
  * Set an initial value of 0 for SensorsFeatureSensor
  * Allow providing an initial value for AggregateSensor and SysFsSensor
  * Check initial value is valid before resetting in SensorProperty::unsubscribe
  * Support changing sensor label names for the Grid face (kde#448980)
  * Only rate-limit sensors if we already have a valid value (kde#446372)
  * faces/facegrid: Filter out some display styles from the config (kde#447847)
  * Fix compilation on Plasma/5.24 branch
  * faces/textonly: Set grouped header to fill width so it elides properly (kde#440592)
  * Port SensorFaceController to support JSON plugin metadata
  * Fix build with GCC 12, missing include</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1644926400">- Update to 5.24.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.1
- Changes since 5.24.0:
  * Fix showing icons in KSysguard</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1645531200">- Update to 5.24.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.2
- No code changes since 5.24.1</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1646654400">- Replace %_libdir/libexec with %_libexecdir (boo#1174075)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1646740800">- Update to 5.24.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.3
- Changes since 5.24.2:
  * Fixed computational bug for bar chart spacing (kde#449868)
- Restore compatibility with older kf5-filesystem</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1648555200">- Force PIE when building with gcc-10 (boo#1195628, boo#1197641)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1648555201">- Update to 5.24.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.4
- No code changes since 5.24.3</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1651579200">- Update to 5.24.5
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.5
- No code changes since 5.24.4</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1653998400">- Recommend the plugins package (boo#1199851)</changelog>
</package>
<package pkgid="b836d720cae2328d32770801bdbf8421d054aa633a6bc2def4ef98245b567ff7" name="libksysguard5-imports" arch="aarch64">
  <version epoch="0" ver="5.24.5" rel="bp154.2.3.2"/>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1627387200">- Update to 5.22.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.22.4
- No code changes since 5.22.3</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1630411200">- Update to 5.22.5
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.22.5
- No code changes since 5.22.4</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1631793600">- Update to 5.22.90
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.22.90
- Too many changes to list here</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1633608000">- Update to 5.23.0
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.0
- Changes since 5.22.90:
  * Add Plasma System Monitor to "Tools" menu
- Add new key + signature to plasma.keyring</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1634644800">- Update to 5.23.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.1
- No code changes since 5.23.0</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1635249600">- Update to 5.23.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.2
- No code changes since 5.23.1</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1636459200">- Update to 5.23.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.3
- Changes since 5.23.2:
  * Fix ksgrd_network_helper crash on exit afer a failure (kde#444921)
  * Fix incorrect string termination in ConnectionMapping</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1637582400">- Add libksysguard5-rpmlintrc (boo#1191766)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1638273600">- Update to 5.23.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.4
- Changes since 5.23.3:
  * Don't update SensorsFeatureSensor if it is not subscribed</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1641297600">- Update to 5.23.5
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.5
- Changes since 5.23.4:
  * Handle process parent changes in ProcessDataModel (kde#446534)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1642075200">- Update to 5.23.90
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.90
- Changes since 5.23.5:
  * ConfigAppearance: Set Layout.preferredWidth in updateRateLimitSpinBox
  * Add support for bits per second (kde#418968)
  * Fix compile error against qt6
  * Use Q_EMIT here
  * Fix typos in l10n string comments
  * Port some Q_FOREACH
  * Handle process parent changes in ProcessDataModel (kde#446534)
  * piechart: Fix punctuation of labels in config
  * ProcessCore: Check the actual previous values when updating IO rates (kde#444127)
  * ProcessCore: Ignore elapsedTime &lt; 0 when updating process usage
  * Fix various typos
  * Don't update SensorsFeatureSensor if it is not subscribed
  * Fix accounting of children in Processes
  * New and improved tests
  * Correct behavior of ProcessSensor::cgroupData
  * Remove Accumulator::stop and Capture::stop
  * Fix ksgrd_network_helper crash on exit afer a failure (kde#444921)
  * Fix ksgrd_network_helper crash on readlinkat failure
  * Update SensorUnitModel.cpp to compile with clang+libcxx
  * Fix incorrect string termination in ConnectionMapping
  * We depend against kf5.86
  * Add FreeBSD CI
  * Add Linux CI
  * Add .kde-ci.yml
  * Add Plasma System Monitor to "Tools" menu</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1644062400">- Update to 5.24.0
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.0
- Changes since 5.23.90:
  * Allow specifying initial value for SysctlSensor
  * BarChart: Make spacing proportional to total width and number of bars (kde#444585)
  * Set an initial value of 0 for SensorsFeatureSensor
  * Allow providing an initial value for AggregateSensor and SysFsSensor
  * Check initial value is valid before resetting in SensorProperty::unsubscribe
  * Support changing sensor label names for the Grid face (kde#448980)
  * Only rate-limit sensors if we already have a valid value (kde#446372)
  * faces/facegrid: Filter out some display styles from the config (kde#447847)
  * Fix compilation on Plasma/5.24 branch
  * faces/textonly: Set grouped header to fill width so it elides properly (kde#440592)
  * Port SensorFaceController to support JSON plugin metadata
  * Fix build with GCC 12, missing include</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1644926400">- Update to 5.24.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.1
- Changes since 5.24.0:
  * Fix showing icons in KSysguard</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1645531200">- Update to 5.24.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.2
- No code changes since 5.24.1</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1646654400">- Replace %_libdir/libexec with %_libexecdir (boo#1174075)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1646740800">- Update to 5.24.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.3
- Changes since 5.24.2:
  * Fixed computational bug for bar chart spacing (kde#449868)
- Restore compatibility with older kf5-filesystem</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1648555200">- Force PIE when building with gcc-10 (boo#1195628, boo#1197641)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1648555201">- Update to 5.24.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.4
- No code changes since 5.24.3</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1651579200">- Update to 5.24.5
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.5
- No code changes since 5.24.4</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1653998400">- Recommend the plugins package (boo#1199851)</changelog>
</package>
<package pkgid="70cc42bc156c4beb40cbbbebd33e954219505204a98e0414623251935aa7310a" name="libksysguard5-imports" arch="ppc64le">
  <version epoch="0" ver="5.24.5" rel="bp154.2.3.2"/>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1627387200">- Update to 5.22.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.22.4
- No code changes since 5.22.3</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1630411200">- Update to 5.22.5
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.22.5
- No code changes since 5.22.4</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1631793600">- Update to 5.22.90
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.22.90
- Too many changes to list here</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1633608000">- Update to 5.23.0
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.0
- Changes since 5.22.90:
  * Add Plasma System Monitor to "Tools" menu
- Add new key + signature to plasma.keyring</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1634644800">- Update to 5.23.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.1
- No code changes since 5.23.0</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1635249600">- Update to 5.23.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.2
- No code changes since 5.23.1</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1636459200">- Update to 5.23.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.3
- Changes since 5.23.2:
  * Fix ksgrd_network_helper crash on exit afer a failure (kde#444921)
  * Fix incorrect string termination in ConnectionMapping</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1637582400">- Add libksysguard5-rpmlintrc (boo#1191766)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1638273600">- Update to 5.23.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.4
- Changes since 5.23.3:
  * Don't update SensorsFeatureSensor if it is not subscribed</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1641297600">- Update to 5.23.5
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.5
- Changes since 5.23.4:
  * Handle process parent changes in ProcessDataModel (kde#446534)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1642075200">- Update to 5.23.90
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.90
- Changes since 5.23.5:
  * ConfigAppearance: Set Layout.preferredWidth in updateRateLimitSpinBox
  * Add support for bits per second (kde#418968)
  * Fix compile error against qt6
  * Use Q_EMIT here
  * Fix typos in l10n string comments
  * Port some Q_FOREACH
  * Handle process parent changes in ProcessDataModel (kde#446534)
  * piechart: Fix punctuation of labels in config
  * ProcessCore: Check the actual previous values when updating IO rates (kde#444127)
  * ProcessCore: Ignore elapsedTime &lt; 0 when updating process usage
  * Fix various typos
  * Don't update SensorsFeatureSensor if it is not subscribed
  * Fix accounting of children in Processes
  * New and improved tests
  * Correct behavior of ProcessSensor::cgroupData
  * Remove Accumulator::stop and Capture::stop
  * Fix ksgrd_network_helper crash on exit afer a failure (kde#444921)
  * Fix ksgrd_network_helper crash on readlinkat failure
  * Update SensorUnitModel.cpp to compile with clang+libcxx
  * Fix incorrect string termination in ConnectionMapping
  * We depend against kf5.86
  * Add FreeBSD CI
  * Add Linux CI
  * Add .kde-ci.yml
  * Add Plasma System Monitor to "Tools" menu</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1644062400">- Update to 5.24.0
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.0
- Changes since 5.23.90:
  * Allow specifying initial value for SysctlSensor
  * BarChart: Make spacing proportional to total width and number of bars (kde#444585)
  * Set an initial value of 0 for SensorsFeatureSensor
  * Allow providing an initial value for AggregateSensor and SysFsSensor
  * Check initial value is valid before resetting in SensorProperty::unsubscribe
  * Support changing sensor label names for the Grid face (kde#448980)
  * Only rate-limit sensors if we already have a valid value (kde#446372)
  * faces/facegrid: Filter out some display styles from the config (kde#447847)
  * Fix compilation on Plasma/5.24 branch
  * faces/textonly: Set grouped header to fill width so it elides properly (kde#440592)
  * Port SensorFaceController to support JSON plugin metadata
  * Fix build with GCC 12, missing include</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1644926400">- Update to 5.24.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.1
- Changes since 5.24.0:
  * Fix showing icons in KSysguard</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1645531200">- Update to 5.24.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.2
- No code changes since 5.24.1</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1646654400">- Replace %_libdir/libexec with %_libexecdir (boo#1174075)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1646740800">- Update to 5.24.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.3
- Changes since 5.24.2:
  * Fixed computational bug for bar chart spacing (kde#449868)
- Restore compatibility with older kf5-filesystem</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1648555200">- Force PIE when building with gcc-10 (boo#1195628, boo#1197641)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1648555201">- Update to 5.24.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.4
- No code changes since 5.24.3</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1651579200">- Update to 5.24.5
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.5
- No code changes since 5.24.4</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1653998400">- Recommend the plugins package (boo#1199851)</changelog>
</package>
<package pkgid="48e810656e64fbf130aa399b345f2357adee60465ca36c0453be9888717008a6" name="libksysguard5-imports" arch="x86_64">
  <version epoch="0" ver="5.24.5" rel="bp154.2.3.2"/>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1627387200">- Update to 5.22.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.22.4
- No code changes since 5.22.3</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1630411200">- Update to 5.22.5
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.22.5
- No code changes since 5.22.4</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1631793600">- Update to 5.22.90
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.22.90
- Too many changes to list here</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1633608000">- Update to 5.23.0
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.0
- Changes since 5.22.90:
  * Add Plasma System Monitor to "Tools" menu
- Add new key + signature to plasma.keyring</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1634644800">- Update to 5.23.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.1
- No code changes since 5.23.0</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1635249600">- Update to 5.23.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.2
- No code changes since 5.23.1</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1636459200">- Update to 5.23.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.3
- Changes since 5.23.2:
  * Fix ksgrd_network_helper crash on exit afer a failure (kde#444921)
  * Fix incorrect string termination in ConnectionMapping</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1637582400">- Add libksysguard5-rpmlintrc (boo#1191766)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1638273600">- Update to 5.23.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.4
- Changes since 5.23.3:
  * Don't update SensorsFeatureSensor if it is not subscribed</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1641297600">- Update to 5.23.5
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.5
- Changes since 5.23.4:
  * Handle process parent changes in ProcessDataModel (kde#446534)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1642075200">- Update to 5.23.90
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.90
- Changes since 5.23.5:
  * ConfigAppearance: Set Layout.preferredWidth in updateRateLimitSpinBox
  * Add support for bits per second (kde#418968)
  * Fix compile error against qt6
  * Use Q_EMIT here
  * Fix typos in l10n string comments
  * Port some Q_FOREACH
  * Handle process parent changes in ProcessDataModel (kde#446534)
  * piechart: Fix punctuation of labels in config
  * ProcessCore: Check the actual previous values when updating IO rates (kde#444127)
  * ProcessCore: Ignore elapsedTime &lt; 0 when updating process usage
  * Fix various typos
  * Don't update SensorsFeatureSensor if it is not subscribed
  * Fix accounting of children in Processes
  * New and improved tests
  * Correct behavior of ProcessSensor::cgroupData
  * Remove Accumulator::stop and Capture::stop
  * Fix ksgrd_network_helper crash on exit afer a failure (kde#444921)
  * Fix ksgrd_network_helper crash on readlinkat failure
  * Update SensorUnitModel.cpp to compile with clang+libcxx
  * Fix incorrect string termination in ConnectionMapping
  * We depend against kf5.86
  * Add FreeBSD CI
  * Add Linux CI
  * Add .kde-ci.yml
  * Add Plasma System Monitor to "Tools" menu</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1644062400">- Update to 5.24.0
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.0
- Changes since 5.23.90:
  * Allow specifying initial value for SysctlSensor
  * BarChart: Make spacing proportional to total width and number of bars (kde#444585)
  * Set an initial value of 0 for SensorsFeatureSensor
  * Allow providing an initial value for AggregateSensor and SysFsSensor
  * Check initial value is valid before resetting in SensorProperty::unsubscribe
  * Support changing sensor label names for the Grid face (kde#448980)
  * Only rate-limit sensors if we already have a valid value (kde#446372)
  * faces/facegrid: Filter out some display styles from the config (kde#447847)
  * Fix compilation on Plasma/5.24 branch
  * faces/textonly: Set grouped header to fill width so it elides properly (kde#440592)
  * Port SensorFaceController to support JSON plugin metadata
  * Fix build with GCC 12, missing include</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1644926400">- Update to 5.24.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.1
- Changes since 5.24.0:
  * Fix showing icons in KSysguard</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1645531200">- Update to 5.24.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.2
- No code changes since 5.24.1</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1646654400">- Replace %_libdir/libexec with %_libexecdir (boo#1174075)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1646740800">- Update to 5.24.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.3
- Changes since 5.24.2:
  * Fixed computational bug for bar chart spacing (kde#449868)
- Restore compatibility with older kf5-filesystem</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1648555200">- Force PIE when building with gcc-10 (boo#1195628, boo#1197641)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1648555201">- Update to 5.24.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.4
- No code changes since 5.24.3</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1651579200">- Update to 5.24.5
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.5
- No code changes since 5.24.4</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1653998400">- Recommend the plugins package (boo#1199851)</changelog>
</package>
<package pkgid="57093612c576e774956546b6121ffedc1818a8d388b454ebdf7c5a521cfacbac" name="libksysguard5-lang" arch="noarch">
  <version epoch="0" ver="5.24.5" rel="bp154.2.3.2"/>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1627387200">- Update to 5.22.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.22.4
- No code changes since 5.22.3</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1630411200">- Update to 5.22.5
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.22.5
- No code changes since 5.22.4</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1631793600">- Update to 5.22.90
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.22.90
- Too many changes to list here</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1633608000">- Update to 5.23.0
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.0
- Changes since 5.22.90:
  * Add Plasma System Monitor to "Tools" menu
- Add new key + signature to plasma.keyring</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1634644800">- Update to 5.23.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.1
- No code changes since 5.23.0</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1635249600">- Update to 5.23.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.2
- No code changes since 5.23.1</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1636459200">- Update to 5.23.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.3
- Changes since 5.23.2:
  * Fix ksgrd_network_helper crash on exit afer a failure (kde#444921)
  * Fix incorrect string termination in ConnectionMapping</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1637582400">- Add libksysguard5-rpmlintrc (boo#1191766)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1638273600">- Update to 5.23.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.4
- Changes since 5.23.3:
  * Don't update SensorsFeatureSensor if it is not subscribed</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1641297600">- Update to 5.23.5
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.5
- Changes since 5.23.4:
  * Handle process parent changes in ProcessDataModel (kde#446534)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1642075200">- Update to 5.23.90
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.90
- Changes since 5.23.5:
  * ConfigAppearance: Set Layout.preferredWidth in updateRateLimitSpinBox
  * Add support for bits per second (kde#418968)
  * Fix compile error against qt6
  * Use Q_EMIT here
  * Fix typos in l10n string comments
  * Port some Q_FOREACH
  * Handle process parent changes in ProcessDataModel (kde#446534)
  * piechart: Fix punctuation of labels in config
  * ProcessCore: Check the actual previous values when updating IO rates (kde#444127)
  * ProcessCore: Ignore elapsedTime &lt; 0 when updating process usage
  * Fix various typos
  * Don't update SensorsFeatureSensor if it is not subscribed
  * Fix accounting of children in Processes
  * New and improved tests
  * Correct behavior of ProcessSensor::cgroupData
  * Remove Accumulator::stop and Capture::stop
  * Fix ksgrd_network_helper crash on exit afer a failure (kde#444921)
  * Fix ksgrd_network_helper crash on readlinkat failure
  * Update SensorUnitModel.cpp to compile with clang+libcxx
  * Fix incorrect string termination in ConnectionMapping
  * We depend against kf5.86
  * Add FreeBSD CI
  * Add Linux CI
  * Add .kde-ci.yml
  * Add Plasma System Monitor to "Tools" menu</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1644062400">- Update to 5.24.0
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.0
- Changes since 5.23.90:
  * Allow specifying initial value for SysctlSensor
  * BarChart: Make spacing proportional to total width and number of bars (kde#444585)
  * Set an initial value of 0 for SensorsFeatureSensor
  * Allow providing an initial value for AggregateSensor and SysFsSensor
  * Check initial value is valid before resetting in SensorProperty::unsubscribe
  * Support changing sensor label names for the Grid face (kde#448980)
  * Only rate-limit sensors if we already have a valid value (kde#446372)
  * faces/facegrid: Filter out some display styles from the config (kde#447847)
  * Fix compilation on Plasma/5.24 branch
  * faces/textonly: Set grouped header to fill width so it elides properly (kde#440592)
  * Port SensorFaceController to support JSON plugin metadata
  * Fix build with GCC 12, missing include</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1644926400">- Update to 5.24.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.1
- Changes since 5.24.0:
  * Fix showing icons in KSysguard</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1645531200">- Update to 5.24.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.2
- No code changes since 5.24.1</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1646654400">- Replace %_libdir/libexec with %_libexecdir (boo#1174075)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1646740800">- Update to 5.24.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.3
- Changes since 5.24.2:
  * Fixed computational bug for bar chart spacing (kde#449868)
- Restore compatibility with older kf5-filesystem</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1648555200">- Force PIE when building with gcc-10 (boo#1195628, boo#1197641)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1648555201">- Update to 5.24.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.4
- No code changes since 5.24.3</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1651579200">- Update to 5.24.5
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.5
- No code changes since 5.24.4</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1653998400">- Recommend the plugins package (boo#1199851)</changelog>
</package>
<package pkgid="795024c0ab150f38373df5ea4476169b1583c9fbf7eb128c040425f17654ac29" name="libksysguard5-plugins" arch="aarch64">
  <version epoch="0" ver="5.24.5" rel="bp154.2.3.2"/>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1627387200">- Update to 5.22.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.22.4
- No code changes since 5.22.3</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1630411200">- Update to 5.22.5
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.22.5
- No code changes since 5.22.4</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1631793600">- Update to 5.22.90
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.22.90
- Too many changes to list here</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1633608000">- Update to 5.23.0
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.0
- Changes since 5.22.90:
  * Add Plasma System Monitor to "Tools" menu
- Add new key + signature to plasma.keyring</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1634644800">- Update to 5.23.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.1
- No code changes since 5.23.0</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1635249600">- Update to 5.23.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.2
- No code changes since 5.23.1</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1636459200">- Update to 5.23.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.3
- Changes since 5.23.2:
  * Fix ksgrd_network_helper crash on exit afer a failure (kde#444921)
  * Fix incorrect string termination in ConnectionMapping</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1637582400">- Add libksysguard5-rpmlintrc (boo#1191766)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1638273600">- Update to 5.23.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.4
- Changes since 5.23.3:
  * Don't update SensorsFeatureSensor if it is not subscribed</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1641297600">- Update to 5.23.5
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.5
- Changes since 5.23.4:
  * Handle process parent changes in ProcessDataModel (kde#446534)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1642075200">- Update to 5.23.90
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.90
- Changes since 5.23.5:
  * ConfigAppearance: Set Layout.preferredWidth in updateRateLimitSpinBox
  * Add support for bits per second (kde#418968)
  * Fix compile error against qt6
  * Use Q_EMIT here
  * Fix typos in l10n string comments
  * Port some Q_FOREACH
  * Handle process parent changes in ProcessDataModel (kde#446534)
  * piechart: Fix punctuation of labels in config
  * ProcessCore: Check the actual previous values when updating IO rates (kde#444127)
  * ProcessCore: Ignore elapsedTime &lt; 0 when updating process usage
  * Fix various typos
  * Don't update SensorsFeatureSensor if it is not subscribed
  * Fix accounting of children in Processes
  * New and improved tests
  * Correct behavior of ProcessSensor::cgroupData
  * Remove Accumulator::stop and Capture::stop
  * Fix ksgrd_network_helper crash on exit afer a failure (kde#444921)
  * Fix ksgrd_network_helper crash on readlinkat failure
  * Update SensorUnitModel.cpp to compile with clang+libcxx
  * Fix incorrect string termination in ConnectionMapping
  * We depend against kf5.86
  * Add FreeBSD CI
  * Add Linux CI
  * Add .kde-ci.yml
  * Add Plasma System Monitor to "Tools" menu</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1644062400">- Update to 5.24.0
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.0
- Changes since 5.23.90:
  * Allow specifying initial value for SysctlSensor
  * BarChart: Make spacing proportional to total width and number of bars (kde#444585)
  * Set an initial value of 0 for SensorsFeatureSensor
  * Allow providing an initial value for AggregateSensor and SysFsSensor
  * Check initial value is valid before resetting in SensorProperty::unsubscribe
  * Support changing sensor label names for the Grid face (kde#448980)
  * Only rate-limit sensors if we already have a valid value (kde#446372)
  * faces/facegrid: Filter out some display styles from the config (kde#447847)
  * Fix compilation on Plasma/5.24 branch
  * faces/textonly: Set grouped header to fill width so it elides properly (kde#440592)
  * Port SensorFaceController to support JSON plugin metadata
  * Fix build with GCC 12, missing include</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1644926400">- Update to 5.24.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.1
- Changes since 5.24.0:
  * Fix showing icons in KSysguard</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1645531200">- Update to 5.24.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.2
- No code changes since 5.24.1</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1646654400">- Replace %_libdir/libexec with %_libexecdir (boo#1174075)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1646740800">- Update to 5.24.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.3
- Changes since 5.24.2:
  * Fixed computational bug for bar chart spacing (kde#449868)
- Restore compatibility with older kf5-filesystem</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1648555200">- Force PIE when building with gcc-10 (boo#1195628, boo#1197641)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1648555201">- Update to 5.24.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.4
- No code changes since 5.24.3</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1651579200">- Update to 5.24.5
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.5
- No code changes since 5.24.4</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1653998400">- Recommend the plugins package (boo#1199851)</changelog>
</package>
<package pkgid="d67e8cad0cdaa7bbefd3bb36cb8cff095202ec277a2ec23e3502366416e52c68" name="libksysguard5-plugins" arch="ppc64le">
  <version epoch="0" ver="5.24.5" rel="bp154.2.3.2"/>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1627387200">- Update to 5.22.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.22.4
- No code changes since 5.22.3</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1630411200">- Update to 5.22.5
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.22.5
- No code changes since 5.22.4</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1631793600">- Update to 5.22.90
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.22.90
- Too many changes to list here</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1633608000">- Update to 5.23.0
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.0
- Changes since 5.22.90:
  * Add Plasma System Monitor to "Tools" menu
- Add new key + signature to plasma.keyring</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1634644800">- Update to 5.23.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.1
- No code changes since 5.23.0</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1635249600">- Update to 5.23.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.2
- No code changes since 5.23.1</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1636459200">- Update to 5.23.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.3
- Changes since 5.23.2:
  * Fix ksgrd_network_helper crash on exit afer a failure (kde#444921)
  * Fix incorrect string termination in ConnectionMapping</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1637582400">- Add libksysguard5-rpmlintrc (boo#1191766)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1638273600">- Update to 5.23.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.4
- Changes since 5.23.3:
  * Don't update SensorsFeatureSensor if it is not subscribed</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1641297600">- Update to 5.23.5
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.5
- Changes since 5.23.4:
  * Handle process parent changes in ProcessDataModel (kde#446534)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1642075200">- Update to 5.23.90
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.90
- Changes since 5.23.5:
  * ConfigAppearance: Set Layout.preferredWidth in updateRateLimitSpinBox
  * Add support for bits per second (kde#418968)
  * Fix compile error against qt6
  * Use Q_EMIT here
  * Fix typos in l10n string comments
  * Port some Q_FOREACH
  * Handle process parent changes in ProcessDataModel (kde#446534)
  * piechart: Fix punctuation of labels in config
  * ProcessCore: Check the actual previous values when updating IO rates (kde#444127)
  * ProcessCore: Ignore elapsedTime &lt; 0 when updating process usage
  * Fix various typos
  * Don't update SensorsFeatureSensor if it is not subscribed
  * Fix accounting of children in Processes
  * New and improved tests
  * Correct behavior of ProcessSensor::cgroupData
  * Remove Accumulator::stop and Capture::stop
  * Fix ksgrd_network_helper crash on exit afer a failure (kde#444921)
  * Fix ksgrd_network_helper crash on readlinkat failure
  * Update SensorUnitModel.cpp to compile with clang+libcxx
  * Fix incorrect string termination in ConnectionMapping
  * We depend against kf5.86
  * Add FreeBSD CI
  * Add Linux CI
  * Add .kde-ci.yml
  * Add Plasma System Monitor to "Tools" menu</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1644062400">- Update to 5.24.0
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.0
- Changes since 5.23.90:
  * Allow specifying initial value for SysctlSensor
  * BarChart: Make spacing proportional to total width and number of bars (kde#444585)
  * Set an initial value of 0 for SensorsFeatureSensor
  * Allow providing an initial value for AggregateSensor and SysFsSensor
  * Check initial value is valid before resetting in SensorProperty::unsubscribe
  * Support changing sensor label names for the Grid face (kde#448980)
  * Only rate-limit sensors if we already have a valid value (kde#446372)
  * faces/facegrid: Filter out some display styles from the config (kde#447847)
  * Fix compilation on Plasma/5.24 branch
  * faces/textonly: Set grouped header to fill width so it elides properly (kde#440592)
  * Port SensorFaceController to support JSON plugin metadata
  * Fix build with GCC 12, missing include</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1644926400">- Update to 5.24.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.1
- Changes since 5.24.0:
  * Fix showing icons in KSysguard</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1645531200">- Update to 5.24.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.2
- No code changes since 5.24.1</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1646654400">- Replace %_libdir/libexec with %_libexecdir (boo#1174075)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1646740800">- Update to 5.24.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.3
- Changes since 5.24.2:
  * Fixed computational bug for bar chart spacing (kde#449868)
- Restore compatibility with older kf5-filesystem</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1648555200">- Force PIE when building with gcc-10 (boo#1195628, boo#1197641)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1648555201">- Update to 5.24.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.4
- No code changes since 5.24.3</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1651579200">- Update to 5.24.5
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.5
- No code changes since 5.24.4</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1653998400">- Recommend the plugins package (boo#1199851)</changelog>
</package>
<package pkgid="b489b6bcda517194b972bc17808d8d53e81db2438d6cba04da525ceaf6728497" name="libksysguard5-plugins" arch="x86_64">
  <version epoch="0" ver="5.24.5" rel="bp154.2.3.2"/>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1627387200">- Update to 5.22.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.22.4
- No code changes since 5.22.3</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1630411200">- Update to 5.22.5
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.22.5
- No code changes since 5.22.4</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1631793600">- Update to 5.22.90
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.22.90
- Too many changes to list here</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1633608000">- Update to 5.23.0
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.0
- Changes since 5.22.90:
  * Add Plasma System Monitor to "Tools" menu
- Add new key + signature to plasma.keyring</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1634644800">- Update to 5.23.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.1
- No code changes since 5.23.0</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1635249600">- Update to 5.23.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.2
- No code changes since 5.23.1</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1636459200">- Update to 5.23.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.3
- Changes since 5.23.2:
  * Fix ksgrd_network_helper crash on exit afer a failure (kde#444921)
  * Fix incorrect string termination in ConnectionMapping</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1637582400">- Add libksysguard5-rpmlintrc (boo#1191766)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1638273600">- Update to 5.23.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.4
- Changes since 5.23.3:
  * Don't update SensorsFeatureSensor if it is not subscribed</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1641297600">- Update to 5.23.5
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.5
- Changes since 5.23.4:
  * Handle process parent changes in ProcessDataModel (kde#446534)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1642075200">- Update to 5.23.90
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.90
- Changes since 5.23.5:
  * ConfigAppearance: Set Layout.preferredWidth in updateRateLimitSpinBox
  * Add support for bits per second (kde#418968)
  * Fix compile error against qt6
  * Use Q_EMIT here
  * Fix typos in l10n string comments
  * Port some Q_FOREACH
  * Handle process parent changes in ProcessDataModel (kde#446534)
  * piechart: Fix punctuation of labels in config
  * ProcessCore: Check the actual previous values when updating IO rates (kde#444127)
  * ProcessCore: Ignore elapsedTime &lt; 0 when updating process usage
  * Fix various typos
  * Don't update SensorsFeatureSensor if it is not subscribed
  * Fix accounting of children in Processes
  * New and improved tests
  * Correct behavior of ProcessSensor::cgroupData
  * Remove Accumulator::stop and Capture::stop
  * Fix ksgrd_network_helper crash on exit afer a failure (kde#444921)
  * Fix ksgrd_network_helper crash on readlinkat failure
  * Update SensorUnitModel.cpp to compile with clang+libcxx
  * Fix incorrect string termination in ConnectionMapping
  * We depend against kf5.86
  * Add FreeBSD CI
  * Add Linux CI
  * Add .kde-ci.yml
  * Add Plasma System Monitor to "Tools" menu</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1644062400">- Update to 5.24.0
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.0
- Changes since 5.23.90:
  * Allow specifying initial value for SysctlSensor
  * BarChart: Make spacing proportional to total width and number of bars (kde#444585)
  * Set an initial value of 0 for SensorsFeatureSensor
  * Allow providing an initial value for AggregateSensor and SysFsSensor
  * Check initial value is valid before resetting in SensorProperty::unsubscribe
  * Support changing sensor label names for the Grid face (kde#448980)
  * Only rate-limit sensors if we already have a valid value (kde#446372)
  * faces/facegrid: Filter out some display styles from the config (kde#447847)
  * Fix compilation on Plasma/5.24 branch
  * faces/textonly: Set grouped header to fill width so it elides properly (kde#440592)
  * Port SensorFaceController to support JSON plugin metadata
  * Fix build with GCC 12, missing include</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1644926400">- Update to 5.24.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.1
- Changes since 5.24.0:
  * Fix showing icons in KSysguard</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1645531200">- Update to 5.24.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.2
- No code changes since 5.24.1</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1646654400">- Replace %_libdir/libexec with %_libexecdir (boo#1174075)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1646740800">- Update to 5.24.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.3
- Changes since 5.24.2:
  * Fixed computational bug for bar chart spacing (kde#449868)
- Restore compatibility with older kf5-filesystem</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1648555200">- Force PIE when building with gcc-10 (boo#1195628, boo#1197641)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1648555201">- Update to 5.24.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.4
- No code changes since 5.24.3</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1651579200">- Update to 5.24.5
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.5
- No code changes since 5.24.4</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1653998400">- Recommend the plugins package (boo#1199851)</changelog>
</package>
<package pkgid="3964d9850b1600337a63defe2cafc382882362ec5da67e53cf3b69290f8a0c12" name="libkwin-xcb0" arch="aarch64">
  <version epoch="0" ver="5.4.26" rel="bp154.2.3.1"/>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1557316800">- Initial package for version 0.0.5</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1563537600">- update version to 0.1.0
  * Allow configuration items to override the default theme
  * Add the "deepin-chameleon" window decoration for kwin
  * Support get the shoutcut default value
  * Correct the path to find translation files
  * Ignore the RuleBook::save function of kwin
  * Execute dirname before setting the LD_PRELOAD environment
  * Support KWin highlightWindows effect for PreviewWindow
  * Overwrite the window menu
  * Support for specifying the version of kwin on build
  * Multitaskingview: add multitaskingview ts
  * Automatically append the wallpaper's gsetting value item
  * Clean LD_PRELOAD env
  * Fix the window was closed incorrectly
  * Fix the "Window to Desktop" shoutcuts is invalid
  * Fix No warning when opening the multitasking view app in 2D window manager
  * Fix do not print warning messages when the build and runtime versions are consistent
  * keep window to viewable if it is minimized
  * Disable theme cache of FrameSvg
  * Install the "kdeglobals" file
  * Fix the compositingEnabledChanged signal is sent only when the user actively sets it
  * Fix the window default cursor of the gtk application does not follow the theme
  * Disable window manager window menu
  * Preview window give priority to use the dbus interface by kwin
  * Support PresentWindows
  * Support set cursor theme/size for kwin</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1584792000">- remove some files which are in plasma5-defaults-openSUSE</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1614600000">- Update version to 5.2.0.13
  * fix: Avoid taskbar showing up when changing workspace in multitaskingview
  * Revert "fix: Provides a default wallpaper for the second workspace."
  * fix: mips platform second workspace background is white.
  * Provides a default wallpaper for the second workspace.
  * fix get sp1 default-uri method.
  * fix: A color field flicker when right-click menu show up
    Adjust the order of image processing
  * after system upgrading from SP1 to SP2, the old wallpaper will be kept.
  * Provides a default wallpaper for the second workspace.
  * remove dialog rule to avoid configuration by user
  * fix: Blur multitasking background.
- Add patches: deepin-kwin-crash.patch, deepin-kwin-tabbox-chameleon-rename.patch
  and deepin-kwin-unload-blur.patch</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1618142400">- Support kwin 5.21+, add support-kwin-5_19+.patch and
  support-kwin-5_21+.patch</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1620129600">- Update version to 5.3.7
  * Support kwin 5.19, drop support-kwin-5_19+.patch
  * Add translation files
  * update dde-kwin.postinst base on update DTK's /etc/os-version
  * Fix bugs
- Drop deepin-kwin-unload-blur.patch, merged by upstream</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1623758400">- Update version to 5.3.9
  * Fix bugs
  * Support kwin 5.21+, drop support-kwin-5_21+.patch
- Drop fix-crash-bug.patch, fixed by upstream</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1632312000">- Add fix-library-links.patch, fix build on Tumbleweed</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1636459200">- Update version to 5.3.14
  * Fix bugs
  * Update translations</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1638273600">- Update version to 5.4.12
  * Split screen mode is always grayed out in the working area
  * add split screen menu
  * support lightWeight config for shadow
  * optimize work thumbnail
  * Fix bugs
  * Workaround: builds are not performed under Kwin greater than 5.21</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1645358400">- Update version 5.4.19
  * Frees heap memory when the program exits
  * Disable multitasking
  * disable effects by default
  * Support DDE Wayland
  * Support client activation from dde shell
  * Fix bugs</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1645790400">- Add fix-build-on-5_18_6.patch for leap</changelog>
  <changelog author="Max Lin &lt;mlin@suse.com&gt;" date="1645876800">- Fix Leap 15.4 build since Kwin has greater version than 5.21
  in Leap 15.4</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1654862400">- Update version 5.4.26
  * update window raduis for effects
  * Add splitmenu translate
  * Add a dependency on 'kwin-wayland'
  * Add func about maxi button long press
  * Modify code based on code review results
  * Fix bugs
- Add dde-kwin.5.4.26.patch, fix build on kwin 5.24+
- Add drop-nonexistent-translations.patch
- No longer need kwayland-server (boo#1200318)
- Drop deepin-kwin-crash.patch</changelog>
</package>
<package pkgid="7fe54955ec9f3eb06f29e537d9eac8dfea961898d5285cac8b6327b46ad61694" name="libkwin-xcb0" arch="ppc64le">
  <version epoch="0" ver="5.4.26" rel="bp154.2.3.1"/>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1557316800">- Initial package for version 0.0.5</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1563537600">- update version to 0.1.0
  * Allow configuration items to override the default theme
  * Add the "deepin-chameleon" window decoration for kwin
  * Support get the shoutcut default value
  * Correct the path to find translation files
  * Ignore the RuleBook::save function of kwin
  * Execute dirname before setting the LD_PRELOAD environment
  * Support KWin highlightWindows effect for PreviewWindow
  * Overwrite the window menu
  * Support for specifying the version of kwin on build
  * Multitaskingview: add multitaskingview ts
  * Automatically append the wallpaper's gsetting value item
  * Clean LD_PRELOAD env
  * Fix the window was closed incorrectly
  * Fix the "Window to Desktop" shoutcuts is invalid
  * Fix No warning when opening the multitasking view app in 2D window manager
  * Fix do not print warning messages when the build and runtime versions are consistent
  * keep window to viewable if it is minimized
  * Disable theme cache of FrameSvg
  * Install the "kdeglobals" file
  * Fix the compositingEnabledChanged signal is sent only when the user actively sets it
  * Fix the window default cursor of the gtk application does not follow the theme
  * Disable window manager window menu
  * Preview window give priority to use the dbus interface by kwin
  * Support PresentWindows
  * Support set cursor theme/size for kwin</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1584792000">- remove some files which are in plasma5-defaults-openSUSE</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1614600000">- Update version to 5.2.0.13
  * fix: Avoid taskbar showing up when changing workspace in multitaskingview
  * Revert "fix: Provides a default wallpaper for the second workspace."
  * fix: mips platform second workspace background is white.
  * Provides a default wallpaper for the second workspace.
  * fix get sp1 default-uri method.
  * fix: A color field flicker when right-click menu show up
    Adjust the order of image processing
  * after system upgrading from SP1 to SP2, the old wallpaper will be kept.
  * Provides a default wallpaper for the second workspace.
  * remove dialog rule to avoid configuration by user
  * fix: Blur multitasking background.
- Add patches: deepin-kwin-crash.patch, deepin-kwin-tabbox-chameleon-rename.patch
  and deepin-kwin-unload-blur.patch</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1618142400">- Support kwin 5.21+, add support-kwin-5_19+.patch and
  support-kwin-5_21+.patch</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1620129600">- Update version to 5.3.7
  * Support kwin 5.19, drop support-kwin-5_19+.patch
  * Add translation files
  * update dde-kwin.postinst base on update DTK's /etc/os-version
  * Fix bugs
- Drop deepin-kwin-unload-blur.patch, merged by upstream</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1623758400">- Update version to 5.3.9
  * Fix bugs
  * Support kwin 5.21+, drop support-kwin-5_21+.patch
- Drop fix-crash-bug.patch, fixed by upstream</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1632312000">- Add fix-library-links.patch, fix build on Tumbleweed</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1636459200">- Update version to 5.3.14
  * Fix bugs
  * Update translations</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1638273600">- Update version to 5.4.12
  * Split screen mode is always grayed out in the working area
  * add split screen menu
  * support lightWeight config for shadow
  * optimize work thumbnail
  * Fix bugs
  * Workaround: builds are not performed under Kwin greater than 5.21</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1645358400">- Update version 5.4.19
  * Frees heap memory when the program exits
  * Disable multitasking
  * disable effects by default
  * Support DDE Wayland
  * Support client activation from dde shell
  * Fix bugs</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1645790400">- Add fix-build-on-5_18_6.patch for leap</changelog>
  <changelog author="Max Lin &lt;mlin@suse.com&gt;" date="1645876800">- Fix Leap 15.4 build since Kwin has greater version than 5.21
  in Leap 15.4</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1654862400">- Update version 5.4.26
  * update window raduis for effects
  * Add splitmenu translate
  * Add a dependency on 'kwin-wayland'
  * Add func about maxi button long press
  * Modify code based on code review results
  * Fix bugs
- Add dde-kwin.5.4.26.patch, fix build on kwin 5.24+
- Add drop-nonexistent-translations.patch
- No longer need kwayland-server (boo#1200318)
- Drop deepin-kwin-crash.patch</changelog>
</package>
<package pkgid="c7c600f55aae2a6639717a40ff07978c47b88595840c8483ce0dc2e210d613d0" name="libkwin-xcb0" arch="x86_64">
  <version epoch="0" ver="5.4.26" rel="bp154.2.3.1"/>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1557316800">- Initial package for version 0.0.5</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1563537600">- update version to 0.1.0
  * Allow configuration items to override the default theme
  * Add the "deepin-chameleon" window decoration for kwin
  * Support get the shoutcut default value
  * Correct the path to find translation files
  * Ignore the RuleBook::save function of kwin
  * Execute dirname before setting the LD_PRELOAD environment
  * Support KWin highlightWindows effect for PreviewWindow
  * Overwrite the window menu
  * Support for specifying the version of kwin on build
  * Multitaskingview: add multitaskingview ts
  * Automatically append the wallpaper's gsetting value item
  * Clean LD_PRELOAD env
  * Fix the window was closed incorrectly
  * Fix the "Window to Desktop" shoutcuts is invalid
  * Fix No warning when opening the multitasking view app in 2D window manager
  * Fix do not print warning messages when the build and runtime versions are consistent
  * keep window to viewable if it is minimized
  * Disable theme cache of FrameSvg
  * Install the "kdeglobals" file
  * Fix the compositingEnabledChanged signal is sent only when the user actively sets it
  * Fix the window default cursor of the gtk application does not follow the theme
  * Disable window manager window menu
  * Preview window give priority to use the dbus interface by kwin
  * Support PresentWindows
  * Support set cursor theme/size for kwin</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1584792000">- remove some files which are in plasma5-defaults-openSUSE</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1614600000">- Update version to 5.2.0.13
  * fix: Avoid taskbar showing up when changing workspace in multitaskingview
  * Revert "fix: Provides a default wallpaper for the second workspace."
  * fix: mips platform second workspace background is white.
  * Provides a default wallpaper for the second workspace.
  * fix get sp1 default-uri method.
  * fix: A color field flicker when right-click menu show up
    Adjust the order of image processing
  * after system upgrading from SP1 to SP2, the old wallpaper will be kept.
  * Provides a default wallpaper for the second workspace.
  * remove dialog rule to avoid configuration by user
  * fix: Blur multitasking background.
- Add patches: deepin-kwin-crash.patch, deepin-kwin-tabbox-chameleon-rename.patch
  and deepin-kwin-unload-blur.patch</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1618142400">- Support kwin 5.21+, add support-kwin-5_19+.patch and
  support-kwin-5_21+.patch</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1620129600">- Update version to 5.3.7
  * Support kwin 5.19, drop support-kwin-5_19+.patch
  * Add translation files
  * update dde-kwin.postinst base on update DTK's /etc/os-version
  * Fix bugs
- Drop deepin-kwin-unload-blur.patch, merged by upstream</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1623758400">- Update version to 5.3.9
  * Fix bugs
  * Support kwin 5.21+, drop support-kwin-5_21+.patch
- Drop fix-crash-bug.patch, fixed by upstream</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1632312000">- Add fix-library-links.patch, fix build on Tumbleweed</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1636459200">- Update version to 5.3.14
  * Fix bugs
  * Update translations</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1638273600">- Update version to 5.4.12
  * Split screen mode is always grayed out in the working area
  * add split screen menu
  * support lightWeight config for shadow
  * optimize work thumbnail
  * Fix bugs
  * Workaround: builds are not performed under Kwin greater than 5.21</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1645358400">- Update version 5.4.19
  * Frees heap memory when the program exits
  * Disable multitasking
  * disable effects by default
  * Support DDE Wayland
  * Support client activation from dde shell
  * Fix bugs</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1645790400">- Add fix-build-on-5_18_6.patch for leap</changelog>
  <changelog author="Max Lin &lt;mlin@suse.com&gt;" date="1645876800">- Fix Leap 15.4 build since Kwin has greater version than 5.21
  in Leap 15.4</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1654862400">- Update version 5.4.26
  * update window raduis for effects
  * Add splitmenu translate
  * Add a dependency on 'kwin-wayland'
  * Add func about maxi button long press
  * Modify code based on code review results
  * Fix bugs
- Add dde-kwin.5.4.26.patch, fix build on kwin 5.24+
- Add drop-nonexistent-translations.patch
- No longer need kwayland-server (boo#1200318)
- Drop deepin-kwin-crash.patch</changelog>
</package>
<package pkgid="a63c4997cb933a7a9483cadf9cdb4aa89f29f441a7dec2cda85473d2cdae6c22" name="libmatio-devel" arch="aarch64">
  <version epoch="0" ver="1.5.23" rel="bp154.2.3.1"/>
  <changelog author="dmitry_r@opensuse.org" date="1458561600">- Update to version 1.5.6
  * Added support of reading sparse array from v4 MAT files
  * Added support of writing sparse array to v4 MAT files
  * Added support of writing character array to v4 MAT files
  * Bug fixes</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1466683200">- Update to version 1.5.7
  * Added support for MAT_T_UTF16 when reading character array from v5 MAT file
  * Added support of HDF5 v1.10.x (with deprecated v1.8.x symbols exported)
  * Added warning on unsupported character data types when reading v5 MAT file
  * Added error check if variable already exists when writing to MAT file
  * Bug fixes</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1467979200">- Update to version 1.5.8
  * Bug fixes</changelog>
  <changelog author="badshah400@gmail.com" date="1470398400">- Add matio-hdf5_110-support.patch to fix support for
  hdf5 &gt;= 1.10; patch taken from upstream git (gh#tbeu/matio#37).
- Add matio-disable-failing-hdf5-tests.patch to disable "mat73"
  tests that fail (apparently) due to bugs in hdf5 1.10
  (gh#tbeu/matio#41); patch touches autotool files, add
  BuildRequires on libtool and run "autoreconf -fi" before
  configure.</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1477310400">- Update to version 1.5.9
  * Bug fixes
  * HDF5 1.10 support, drop obsolete matio-hdf5_110-support.patch
    matio-disable-failing-hdf5-tests.patch</changelog>
  <changelog author="badshah400@gmail.com" date="1506945600">- Update to version 1.5.10:
  * Added new API function Mat_GetDir to retrieve all variable
    names of a MAT file
  * Fixed performance of repeated calls to Mat_VarWrite (broken by
    v1.5.7)
  * Fixed bugs reading (hyperslabs of) numeric arrays where the
    variable data type differs from the desired output data type
  * Increased testsuite coverage</changelog>
  <changelog author="badshah400@gmail.com" date="1509019200">- Update to version 1.5.11:
  * Added new API function Mat_VarWriteAppend to append a numeric
    array to a previously written variable in HDF5 MAT file.
  * Fixed bug calculating sizes of cell/struct array with empty
    cells/fields in Mat_VarGetSize.
  * Fixed bug writing cell/struct array with empty cells/fields to
    v5 MAT file.
  * Fixed bug writing cell/struct array with empty cells/fields to
    HDF5 MAT file.
  * Fixed read performance of cell/struct array with empty
    cells/fields from v5 MAT file.
  * Fixed read performance of numeric array from uncompressed v5
    MAT file.
  * Fixed testsuite (if configured with the MATLAB application).
  * Updated man pages.
- Drop BuildRequires: libtool and the autoreconf run before
  configure; the patches that needed these have been long gone.
- Mat v7.3 tests fail, so turn off enable-mat73 for now.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1522497600">- Update to version 1.5.12:
  * Updated Mat_VarWriteAppend: Added support to append a variable
    to a previously written struct array in HDF5 MAT file
  * Fixed bug reading MAT_T_UINT16 encoded character array from
    HDF5 MAT file
  * Fixed bug reading MAT_T_UTF16 encoded character array from
    compressed v5 MAT file
  * Fixed bug writing MAT_T_UTF16 encoded character array to HDF5
    MAT file
  * Fixed buffer overflow in Mat_VarGetCells/Mat_VarGetStructs
- Reenable support for Mat v7.3
- Use significantly smaller 7z compressed sources (2.7 vs 10 MByte)</changelog>
  <changelog author="jengelh@inai.de" date="1522756800">- Fix SRPM group. Trim redundant wording from summaries.</changelog>
  <changelog author="adrian@suse.de" date="1523534400">- enforce hdf5 1.8 to ensure that files can still be exchanged</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1530273600">- BuildRequire p7zip-full instead of p7zip on TW, 7za was moved
  from p7zip to the new package, breaking backwards compatibility.
- use %license for COPYING</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1538481600">- Force writing of backwards compatible files with HDF5 1.10.x
  0001-Write-backwards-compatible-Mat7.3-files.patch
  (gh#tbeu/matio#93).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1538654400">- Fix preprocessor check for availability of H5F_LIBVER_V18</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1568980800">- Update to version 1.5.17
  * Fixed bug reading struct array with packed field names from v5
    MAT file
  * Fixed bug reading past EOF from (crafted) uncompressed v5 MAT
    file
- Drop 0001-Write-backwards-compatible-Mat7.3-files.patch:
  incorporated upstream.
- Update so number to 9 in keeping with upstream.</changelog>
  <changelog author="Max Lin &lt;mlin@suse.com&gt;" date="1582372800">- Leap 15.2 has newer p7zip, build requires p7zip-full on Tumbleweed,
  Leap 15.2 and SLE15 SP2.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1600516800">- Update to version 1.5.18:
  * Added support of HDF5 v1.12.x.
  * Added support for reading uncompressed v5 MAT file generated
    by SWAN.
  * Added error codes to public interface.
  * Added support for CMake build system.
  * Fixed read performance of numeric array from compressed v5 MAT
    file.
  * Fixed support for VS2005 and VS2008 (MSVC) (regression of
    v1.5.15).
  * Fixed mktemp linker warning when using GNU linker.
  * Fixed bug writing struct array to uncompressed v5 MAT file on
    big endian architecture (regression of v1.5.10).
  * Fixed bug writing cell array to uncompressed v5 MAT file on
    big endian architecture.
  * Fixed bug reading variable name from v4 MAT file
    (CVE-2019-17533).
  * Fixed bug reading dimensions from (crafted) compressed v5 MAT
    file (CVE-2019-20017, CVE-2019-20018, CVE-2019-20020,
    CVE-2019-20052).
- Bump soversion to 11.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1605441600">- Update to version 1.5.19:
  * Fixed support for CMake (&gt;= v3.19.0) build system.
  * Fixed bug reading variable from v4 MAT file (regression of
    v1.5.18).</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1616414400">- Update to version 1.5.20:
  * Added support for writing MAT_T_UTF8 encoded character array
    to HDF5 MAT file (by conversion to UTF-16 if in BMP).
  * Updated cmake-conan to v0.16.1.
  * Fixed bug with size_t arguments of logging function calls.
  * Fixed bug reading past EOF from (crafted) MAT file.
  * Fixed bug writing MAT_T_UTF8 encoded character array to v5 MAT
    file.
  * Fixed printing of MAT_T_UTF8 encoded character array.
  * Several other fixes, for example for memory leaks.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1622548800">- Update to version 1.5.21
  * Fixed: Avoid usage of strlen when creating MAT_T_UTF8 encoded
    character array
  * Fixed reading of compression flag from HDF5 MAT file
- Use https for URL and SourceURL</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1651838400">- Update to version 1.5.23:
  * Fixed testsuite regression from version 1.5.22.
- Changes from version 1.5.22:
  * Added support for reading large MAT file.
  * Updated cmake-conan to version 0.17.0.
  * Fixed CMake build with Conan (MATIO_USE_CONAN:BOOL=ON).
  * Fixed data type when reading 16-bit character data from HDF5
    MAT file.
  * Fixed heap-based buffer overflows when reading (crafted) MAT
    file (CVE-2020-36428, CVE-2021-36977).
  * Confirmed compatibility with HDF5 v1.13.0 and v1.13.1.
  * Several other fixes, for example for memory leaks.</changelog>
</package>
<package pkgid="0b8c543d886df71b7b9df89293d751ad1b67a567e026d0d47c9e62916674c319" name="libmatio-devel" arch="i586">
  <version epoch="0" ver="1.5.23" rel="bp154.2.3.1"/>
  <changelog author="dmitry_r@opensuse.org" date="1458561600">- Update to version 1.5.6
  * Added support of reading sparse array from v4 MAT files
  * Added support of writing sparse array to v4 MAT files
  * Added support of writing character array to v4 MAT files
  * Bug fixes</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1466683200">- Update to version 1.5.7
  * Added support for MAT_T_UTF16 when reading character array from v5 MAT file
  * Added support of HDF5 v1.10.x (with deprecated v1.8.x symbols exported)
  * Added warning on unsupported character data types when reading v5 MAT file
  * Added error check if variable already exists when writing to MAT file
  * Bug fixes</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1467979200">- Update to version 1.5.8
  * Bug fixes</changelog>
  <changelog author="badshah400@gmail.com" date="1470398400">- Add matio-hdf5_110-support.patch to fix support for
  hdf5 &gt;= 1.10; patch taken from upstream git (gh#tbeu/matio#37).
- Add matio-disable-failing-hdf5-tests.patch to disable "mat73"
  tests that fail (apparently) due to bugs in hdf5 1.10
  (gh#tbeu/matio#41); patch touches autotool files, add
  BuildRequires on libtool and run "autoreconf -fi" before
  configure.</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1477310400">- Update to version 1.5.9
  * Bug fixes
  * HDF5 1.10 support, drop obsolete matio-hdf5_110-support.patch
    matio-disable-failing-hdf5-tests.patch</changelog>
  <changelog author="badshah400@gmail.com" date="1506945600">- Update to version 1.5.10:
  * Added new API function Mat_GetDir to retrieve all variable
    names of a MAT file
  * Fixed performance of repeated calls to Mat_VarWrite (broken by
    v1.5.7)
  * Fixed bugs reading (hyperslabs of) numeric arrays where the
    variable data type differs from the desired output data type
  * Increased testsuite coverage</changelog>
  <changelog author="badshah400@gmail.com" date="1509019200">- Update to version 1.5.11:
  * Added new API function Mat_VarWriteAppend to append a numeric
    array to a previously written variable in HDF5 MAT file.
  * Fixed bug calculating sizes of cell/struct array with empty
    cells/fields in Mat_VarGetSize.
  * Fixed bug writing cell/struct array with empty cells/fields to
    v5 MAT file.
  * Fixed bug writing cell/struct array with empty cells/fields to
    HDF5 MAT file.
  * Fixed read performance of cell/struct array with empty
    cells/fields from v5 MAT file.
  * Fixed read performance of numeric array from uncompressed v5
    MAT file.
  * Fixed testsuite (if configured with the MATLAB application).
  * Updated man pages.
- Drop BuildRequires: libtool and the autoreconf run before
  configure; the patches that needed these have been long gone.
- Mat v7.3 tests fail, so turn off enable-mat73 for now.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1522497600">- Update to version 1.5.12:
  * Updated Mat_VarWriteAppend: Added support to append a variable
    to a previously written struct array in HDF5 MAT file
  * Fixed bug reading MAT_T_UINT16 encoded character array from
    HDF5 MAT file
  * Fixed bug reading MAT_T_UTF16 encoded character array from
    compressed v5 MAT file
  * Fixed bug writing MAT_T_UTF16 encoded character array to HDF5
    MAT file
  * Fixed buffer overflow in Mat_VarGetCells/Mat_VarGetStructs
- Reenable support for Mat v7.3
- Use significantly smaller 7z compressed sources (2.7 vs 10 MByte)</changelog>
  <changelog author="jengelh@inai.de" date="1522756800">- Fix SRPM group. Trim redundant wording from summaries.</changelog>
  <changelog author="adrian@suse.de" date="1523534400">- enforce hdf5 1.8 to ensure that files can still be exchanged</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1530273600">- BuildRequire p7zip-full instead of p7zip on TW, 7za was moved
  from p7zip to the new package, breaking backwards compatibility.
- use %license for COPYING</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1538481600">- Force writing of backwards compatible files with HDF5 1.10.x
  0001-Write-backwards-compatible-Mat7.3-files.patch
  (gh#tbeu/matio#93).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1538654400">- Fix preprocessor check for availability of H5F_LIBVER_V18</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1568980800">- Update to version 1.5.17
  * Fixed bug reading struct array with packed field names from v5
    MAT file
  * Fixed bug reading past EOF from (crafted) uncompressed v5 MAT
    file
- Drop 0001-Write-backwards-compatible-Mat7.3-files.patch:
  incorporated upstream.
- Update so number to 9 in keeping with upstream.</changelog>
  <changelog author="Max Lin &lt;mlin@suse.com&gt;" date="1582372800">- Leap 15.2 has newer p7zip, build requires p7zip-full on Tumbleweed,
  Leap 15.2 and SLE15 SP2.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1600516800">- Update to version 1.5.18:
  * Added support of HDF5 v1.12.x.
  * Added support for reading uncompressed v5 MAT file generated
    by SWAN.
  * Added error codes to public interface.
  * Added support for CMake build system.
  * Fixed read performance of numeric array from compressed v5 MAT
    file.
  * Fixed support for VS2005 and VS2008 (MSVC) (regression of
    v1.5.15).
  * Fixed mktemp linker warning when using GNU linker.
  * Fixed bug writing struct array to uncompressed v5 MAT file on
    big endian architecture (regression of v1.5.10).
  * Fixed bug writing cell array to uncompressed v5 MAT file on
    big endian architecture.
  * Fixed bug reading variable name from v4 MAT file
    (CVE-2019-17533).
  * Fixed bug reading dimensions from (crafted) compressed v5 MAT
    file (CVE-2019-20017, CVE-2019-20018, CVE-2019-20020,
    CVE-2019-20052).
- Bump soversion to 11.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1605441600">- Update to version 1.5.19:
  * Fixed support for CMake (&gt;= v3.19.0) build system.
  * Fixed bug reading variable from v4 MAT file (regression of
    v1.5.18).</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1616414400">- Update to version 1.5.20:
  * Added support for writing MAT_T_UTF8 encoded character array
    to HDF5 MAT file (by conversion to UTF-16 if in BMP).
  * Updated cmake-conan to v0.16.1.
  * Fixed bug with size_t arguments of logging function calls.
  * Fixed bug reading past EOF from (crafted) MAT file.
  * Fixed bug writing MAT_T_UTF8 encoded character array to v5 MAT
    file.
  * Fixed printing of MAT_T_UTF8 encoded character array.
  * Several other fixes, for example for memory leaks.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1622548800">- Update to version 1.5.21
  * Fixed: Avoid usage of strlen when creating MAT_T_UTF8 encoded
    character array
  * Fixed reading of compression flag from HDF5 MAT file
- Use https for URL and SourceURL</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1651838400">- Update to version 1.5.23:
  * Fixed testsuite regression from version 1.5.22.
- Changes from version 1.5.22:
  * Added support for reading large MAT file.
  * Updated cmake-conan to version 0.17.0.
  * Fixed CMake build with Conan (MATIO_USE_CONAN:BOOL=ON).
  * Fixed data type when reading 16-bit character data from HDF5
    MAT file.
  * Fixed heap-based buffer overflows when reading (crafted) MAT
    file (CVE-2020-36428, CVE-2021-36977).
  * Confirmed compatibility with HDF5 v1.13.0 and v1.13.1.
  * Several other fixes, for example for memory leaks.</changelog>
</package>
<package pkgid="6b102d14b135cc056644dc61eda23dc61b8aa05504ca684c4f754672b631ea8b" name="libmatio-devel" arch="ppc64le">
  <version epoch="0" ver="1.5.23" rel="bp154.2.3.1"/>
  <changelog author="dmitry_r@opensuse.org" date="1458561600">- Update to version 1.5.6
  * Added support of reading sparse array from v4 MAT files
  * Added support of writing sparse array to v4 MAT files
  * Added support of writing character array to v4 MAT files
  * Bug fixes</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1466683200">- Update to version 1.5.7
  * Added support for MAT_T_UTF16 when reading character array from v5 MAT file
  * Added support of HDF5 v1.10.x (with deprecated v1.8.x symbols exported)
  * Added warning on unsupported character data types when reading v5 MAT file
  * Added error check if variable already exists when writing to MAT file
  * Bug fixes</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1467979200">- Update to version 1.5.8
  * Bug fixes</changelog>
  <changelog author="badshah400@gmail.com" date="1470398400">- Add matio-hdf5_110-support.patch to fix support for
  hdf5 &gt;= 1.10; patch taken from upstream git (gh#tbeu/matio#37).
- Add matio-disable-failing-hdf5-tests.patch to disable "mat73"
  tests that fail (apparently) due to bugs in hdf5 1.10
  (gh#tbeu/matio#41); patch touches autotool files, add
  BuildRequires on libtool and run "autoreconf -fi" before
  configure.</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1477310400">- Update to version 1.5.9
  * Bug fixes
  * HDF5 1.10 support, drop obsolete matio-hdf5_110-support.patch
    matio-disable-failing-hdf5-tests.patch</changelog>
  <changelog author="badshah400@gmail.com" date="1506945600">- Update to version 1.5.10:
  * Added new API function Mat_GetDir to retrieve all variable
    names of a MAT file
  * Fixed performance of repeated calls to Mat_VarWrite (broken by
    v1.5.7)
  * Fixed bugs reading (hyperslabs of) numeric arrays where the
    variable data type differs from the desired output data type
  * Increased testsuite coverage</changelog>
  <changelog author="badshah400@gmail.com" date="1509019200">- Update to version 1.5.11:
  * Added new API function Mat_VarWriteAppend to append a numeric
    array to a previously written variable in HDF5 MAT file.
  * Fixed bug calculating sizes of cell/struct array with empty
    cells/fields in Mat_VarGetSize.
  * Fixed bug writing cell/struct array with empty cells/fields to
    v5 MAT file.
  * Fixed bug writing cell/struct array with empty cells/fields to
    HDF5 MAT file.
  * Fixed read performance of cell/struct array with empty
    cells/fields from v5 MAT file.
  * Fixed read performance of numeric array from uncompressed v5
    MAT file.
  * Fixed testsuite (if configured with the MATLAB application).
  * Updated man pages.
- Drop BuildRequires: libtool and the autoreconf run before
  configure; the patches that needed these have been long gone.
- Mat v7.3 tests fail, so turn off enable-mat73 for now.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1522497600">- Update to version 1.5.12:
  * Updated Mat_VarWriteAppend: Added support to append a variable
    to a previously written struct array in HDF5 MAT file
  * Fixed bug reading MAT_T_UINT16 encoded character array from
    HDF5 MAT file
  * Fixed bug reading MAT_T_UTF16 encoded character array from
    compressed v5 MAT file
  * Fixed bug writing MAT_T_UTF16 encoded character array to HDF5
    MAT file
  * Fixed buffer overflow in Mat_VarGetCells/Mat_VarGetStructs
- Reenable support for Mat v7.3
- Use significantly smaller 7z compressed sources (2.7 vs 10 MByte)</changelog>
  <changelog author="jengelh@inai.de" date="1522756800">- Fix SRPM group. Trim redundant wording from summaries.</changelog>
  <changelog author="adrian@suse.de" date="1523534400">- enforce hdf5 1.8 to ensure that files can still be exchanged</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1530273600">- BuildRequire p7zip-full instead of p7zip on TW, 7za was moved
  from p7zip to the new package, breaking backwards compatibility.
- use %license for COPYING</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1538481600">- Force writing of backwards compatible files with HDF5 1.10.x
  0001-Write-backwards-compatible-Mat7.3-files.patch
  (gh#tbeu/matio#93).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1538654400">- Fix preprocessor check for availability of H5F_LIBVER_V18</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1568980800">- Update to version 1.5.17
  * Fixed bug reading struct array with packed field names from v5
    MAT file
  * Fixed bug reading past EOF from (crafted) uncompressed v5 MAT
    file
- Drop 0001-Write-backwards-compatible-Mat7.3-files.patch:
  incorporated upstream.
- Update so number to 9 in keeping with upstream.</changelog>
  <changelog author="Max Lin &lt;mlin@suse.com&gt;" date="1582372800">- Leap 15.2 has newer p7zip, build requires p7zip-full on Tumbleweed,
  Leap 15.2 and SLE15 SP2.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1600516800">- Update to version 1.5.18:
  * Added support of HDF5 v1.12.x.
  * Added support for reading uncompressed v5 MAT file generated
    by SWAN.
  * Added error codes to public interface.
  * Added support for CMake build system.
  * Fixed read performance of numeric array from compressed v5 MAT
    file.
  * Fixed support for VS2005 and VS2008 (MSVC) (regression of
    v1.5.15).
  * Fixed mktemp linker warning when using GNU linker.
  * Fixed bug writing struct array to uncompressed v5 MAT file on
    big endian architecture (regression of v1.5.10).
  * Fixed bug writing cell array to uncompressed v5 MAT file on
    big endian architecture.
  * Fixed bug reading variable name from v4 MAT file
    (CVE-2019-17533).
  * Fixed bug reading dimensions from (crafted) compressed v5 MAT
    file (CVE-2019-20017, CVE-2019-20018, CVE-2019-20020,
    CVE-2019-20052).
- Bump soversion to 11.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1605441600">- Update to version 1.5.19:
  * Fixed support for CMake (&gt;= v3.19.0) build system.
  * Fixed bug reading variable from v4 MAT file (regression of
    v1.5.18).</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1616414400">- Update to version 1.5.20:
  * Added support for writing MAT_T_UTF8 encoded character array
    to HDF5 MAT file (by conversion to UTF-16 if in BMP).
  * Updated cmake-conan to v0.16.1.
  * Fixed bug with size_t arguments of logging function calls.
  * Fixed bug reading past EOF from (crafted) MAT file.
  * Fixed bug writing MAT_T_UTF8 encoded character array to v5 MAT
    file.
  * Fixed printing of MAT_T_UTF8 encoded character array.
  * Several other fixes, for example for memory leaks.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1622548800">- Update to version 1.5.21
  * Fixed: Avoid usage of strlen when creating MAT_T_UTF8 encoded
    character array
  * Fixed reading of compression flag from HDF5 MAT file
- Use https for URL and SourceURL</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1651838400">- Update to version 1.5.23:
  * Fixed testsuite regression from version 1.5.22.
- Changes from version 1.5.22:
  * Added support for reading large MAT file.
  * Updated cmake-conan to version 0.17.0.
  * Fixed CMake build with Conan (MATIO_USE_CONAN:BOOL=ON).
  * Fixed data type when reading 16-bit character data from HDF5
    MAT file.
  * Fixed heap-based buffer overflows when reading (crafted) MAT
    file (CVE-2020-36428, CVE-2021-36977).
  * Confirmed compatibility with HDF5 v1.13.0 and v1.13.1.
  * Several other fixes, for example for memory leaks.</changelog>
</package>
<package pkgid="c3378d7aeec8443c6deb84a872ca229753b28ed875e5815d28b79ba8020060f6" name="libmatio-devel" arch="s390x">
  <version epoch="0" ver="1.5.23" rel="bp154.2.3.1"/>
  <changelog author="dmitry_r@opensuse.org" date="1458561600">- Update to version 1.5.6
  * Added support of reading sparse array from v4 MAT files
  * Added support of writing sparse array to v4 MAT files
  * Added support of writing character array to v4 MAT files
  * Bug fixes</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1466683200">- Update to version 1.5.7
  * Added support for MAT_T_UTF16 when reading character array from v5 MAT file
  * Added support of HDF5 v1.10.x (with deprecated v1.8.x symbols exported)
  * Added warning on unsupported character data types when reading v5 MAT file
  * Added error check if variable already exists when writing to MAT file
  * Bug fixes</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1467979200">- Update to version 1.5.8
  * Bug fixes</changelog>
  <changelog author="badshah400@gmail.com" date="1470398400">- Add matio-hdf5_110-support.patch to fix support for
  hdf5 &gt;= 1.10; patch taken from upstream git (gh#tbeu/matio#37).
- Add matio-disable-failing-hdf5-tests.patch to disable "mat73"
  tests that fail (apparently) due to bugs in hdf5 1.10
  (gh#tbeu/matio#41); patch touches autotool files, add
  BuildRequires on libtool and run "autoreconf -fi" before
  configure.</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1477310400">- Update to version 1.5.9
  * Bug fixes
  * HDF5 1.10 support, drop obsolete matio-hdf5_110-support.patch
    matio-disable-failing-hdf5-tests.patch</changelog>
  <changelog author="badshah400@gmail.com" date="1506945600">- Update to version 1.5.10:
  * Added new API function Mat_GetDir to retrieve all variable
    names of a MAT file
  * Fixed performance of repeated calls to Mat_VarWrite (broken by
    v1.5.7)
  * Fixed bugs reading (hyperslabs of) numeric arrays where the
    variable data type differs from the desired output data type
  * Increased testsuite coverage</changelog>
  <changelog author="badshah400@gmail.com" date="1509019200">- Update to version 1.5.11:
  * Added new API function Mat_VarWriteAppend to append a numeric
    array to a previously written variable in HDF5 MAT file.
  * Fixed bug calculating sizes of cell/struct array with empty
    cells/fields in Mat_VarGetSize.
  * Fixed bug writing cell/struct array with empty cells/fields to
    v5 MAT file.
  * Fixed bug writing cell/struct array with empty cells/fields to
    HDF5 MAT file.
  * Fixed read performance of cell/struct array with empty
    cells/fields from v5 MAT file.
  * Fixed read performance of numeric array from uncompressed v5
    MAT file.
  * Fixed testsuite (if configured with the MATLAB application).
  * Updated man pages.
- Drop BuildRequires: libtool and the autoreconf run before
  configure; the patches that needed these have been long gone.
- Mat v7.3 tests fail, so turn off enable-mat73 for now.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1522497600">- Update to version 1.5.12:
  * Updated Mat_VarWriteAppend: Added support to append a variable
    to a previously written struct array in HDF5 MAT file
  * Fixed bug reading MAT_T_UINT16 encoded character array from
    HDF5 MAT file
  * Fixed bug reading MAT_T_UTF16 encoded character array from
    compressed v5 MAT file
  * Fixed bug writing MAT_T_UTF16 encoded character array to HDF5
    MAT file
  * Fixed buffer overflow in Mat_VarGetCells/Mat_VarGetStructs
- Reenable support for Mat v7.3
- Use significantly smaller 7z compressed sources (2.7 vs 10 MByte)</changelog>
  <changelog author="jengelh@inai.de" date="1522756800">- Fix SRPM group. Trim redundant wording from summaries.</changelog>
  <changelog author="adrian@suse.de" date="1523534400">- enforce hdf5 1.8 to ensure that files can still be exchanged</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1530273600">- BuildRequire p7zip-full instead of p7zip on TW, 7za was moved
  from p7zip to the new package, breaking backwards compatibility.
- use %license for COPYING</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1538481600">- Force writing of backwards compatible files with HDF5 1.10.x
  0001-Write-backwards-compatible-Mat7.3-files.patch
  (gh#tbeu/matio#93).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1538654400">- Fix preprocessor check for availability of H5F_LIBVER_V18</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1568980800">- Update to version 1.5.17
  * Fixed bug reading struct array with packed field names from v5
    MAT file
  * Fixed bug reading past EOF from (crafted) uncompressed v5 MAT
    file
- Drop 0001-Write-backwards-compatible-Mat7.3-files.patch:
  incorporated upstream.
- Update so number to 9 in keeping with upstream.</changelog>
  <changelog author="Max Lin &lt;mlin@suse.com&gt;" date="1582372800">- Leap 15.2 has newer p7zip, build requires p7zip-full on Tumbleweed,
  Leap 15.2 and SLE15 SP2.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1600516800">- Update to version 1.5.18:
  * Added support of HDF5 v1.12.x.
  * Added support for reading uncompressed v5 MAT file generated
    by SWAN.
  * Added error codes to public interface.
  * Added support for CMake build system.
  * Fixed read performance of numeric array from compressed v5 MAT
    file.
  * Fixed support for VS2005 and VS2008 (MSVC) (regression of
    v1.5.15).
  * Fixed mktemp linker warning when using GNU linker.
  * Fixed bug writing struct array to uncompressed v5 MAT file on
    big endian architecture (regression of v1.5.10).
  * Fixed bug writing cell array to uncompressed v5 MAT file on
    big endian architecture.
  * Fixed bug reading variable name from v4 MAT file
    (CVE-2019-17533).
  * Fixed bug reading dimensions from (crafted) compressed v5 MAT
    file (CVE-2019-20017, CVE-2019-20018, CVE-2019-20020,
    CVE-2019-20052).
- Bump soversion to 11.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1605441600">- Update to version 1.5.19:
  * Fixed support for CMake (&gt;= v3.19.0) build system.
  * Fixed bug reading variable from v4 MAT file (regression of
    v1.5.18).</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1616414400">- Update to version 1.5.20:
  * Added support for writing MAT_T_UTF8 encoded character array
    to HDF5 MAT file (by conversion to UTF-16 if in BMP).
  * Updated cmake-conan to v0.16.1.
  * Fixed bug with size_t arguments of logging function calls.
  * Fixed bug reading past EOF from (crafted) MAT file.
  * Fixed bug writing MAT_T_UTF8 encoded character array to v5 MAT
    file.
  * Fixed printing of MAT_T_UTF8 encoded character array.
  * Several other fixes, for example for memory leaks.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1622548800">- Update to version 1.5.21
  * Fixed: Avoid usage of strlen when creating MAT_T_UTF8 encoded
    character array
  * Fixed reading of compression flag from HDF5 MAT file
- Use https for URL and SourceURL</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1651838400">- Update to version 1.5.23:
  * Fixed testsuite regression from version 1.5.22.
- Changes from version 1.5.22:
  * Added support for reading large MAT file.
  * Updated cmake-conan to version 0.17.0.
  * Fixed CMake build with Conan (MATIO_USE_CONAN:BOOL=ON).
  * Fixed data type when reading 16-bit character data from HDF5
    MAT file.
  * Fixed heap-based buffer overflows when reading (crafted) MAT
    file (CVE-2020-36428, CVE-2021-36977).
  * Confirmed compatibility with HDF5 v1.13.0 and v1.13.1.
  * Several other fixes, for example for memory leaks.</changelog>
</package>
<package pkgid="31c5b3b14c5cb3e1e121a2a41cc8c4e36ae0dc269d8b3600e3534d91118c8328" name="libmatio-devel" arch="x86_64">
  <version epoch="0" ver="1.5.23" rel="bp154.2.3.1"/>
  <changelog author="dmitry_r@opensuse.org" date="1458561600">- Update to version 1.5.6
  * Added support of reading sparse array from v4 MAT files
  * Added support of writing sparse array to v4 MAT files
  * Added support of writing character array to v4 MAT files
  * Bug fixes</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1466683200">- Update to version 1.5.7
  * Added support for MAT_T_UTF16 when reading character array from v5 MAT file
  * Added support of HDF5 v1.10.x (with deprecated v1.8.x symbols exported)
  * Added warning on unsupported character data types when reading v5 MAT file
  * Added error check if variable already exists when writing to MAT file
  * Bug fixes</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1467979200">- Update to version 1.5.8
  * Bug fixes</changelog>
  <changelog author="badshah400@gmail.com" date="1470398400">- Add matio-hdf5_110-support.patch to fix support for
  hdf5 &gt;= 1.10; patch taken from upstream git (gh#tbeu/matio#37).
- Add matio-disable-failing-hdf5-tests.patch to disable "mat73"
  tests that fail (apparently) due to bugs in hdf5 1.10
  (gh#tbeu/matio#41); patch touches autotool files, add
  BuildRequires on libtool and run "autoreconf -fi" before
  configure.</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1477310400">- Update to version 1.5.9
  * Bug fixes
  * HDF5 1.10 support, drop obsolete matio-hdf5_110-support.patch
    matio-disable-failing-hdf5-tests.patch</changelog>
  <changelog author="badshah400@gmail.com" date="1506945600">- Update to version 1.5.10:
  * Added new API function Mat_GetDir to retrieve all variable
    names of a MAT file
  * Fixed performance of repeated calls to Mat_VarWrite (broken by
    v1.5.7)
  * Fixed bugs reading (hyperslabs of) numeric arrays where the
    variable data type differs from the desired output data type
  * Increased testsuite coverage</changelog>
  <changelog author="badshah400@gmail.com" date="1509019200">- Update to version 1.5.11:
  * Added new API function Mat_VarWriteAppend to append a numeric
    array to a previously written variable in HDF5 MAT file.
  * Fixed bug calculating sizes of cell/struct array with empty
    cells/fields in Mat_VarGetSize.
  * Fixed bug writing cell/struct array with empty cells/fields to
    v5 MAT file.
  * Fixed bug writing cell/struct array with empty cells/fields to
    HDF5 MAT file.
  * Fixed read performance of cell/struct array with empty
    cells/fields from v5 MAT file.
  * Fixed read performance of numeric array from uncompressed v5
    MAT file.
  * Fixed testsuite (if configured with the MATLAB application).
  * Updated man pages.
- Drop BuildRequires: libtool and the autoreconf run before
  configure; the patches that needed these have been long gone.
- Mat v7.3 tests fail, so turn off enable-mat73 for now.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1522497600">- Update to version 1.5.12:
  * Updated Mat_VarWriteAppend: Added support to append a variable
    to a previously written struct array in HDF5 MAT file
  * Fixed bug reading MAT_T_UINT16 encoded character array from
    HDF5 MAT file
  * Fixed bug reading MAT_T_UTF16 encoded character array from
    compressed v5 MAT file
  * Fixed bug writing MAT_T_UTF16 encoded character array to HDF5
    MAT file
  * Fixed buffer overflow in Mat_VarGetCells/Mat_VarGetStructs
- Reenable support for Mat v7.3
- Use significantly smaller 7z compressed sources (2.7 vs 10 MByte)</changelog>
  <changelog author="jengelh@inai.de" date="1522756800">- Fix SRPM group. Trim redundant wording from summaries.</changelog>
  <changelog author="adrian@suse.de" date="1523534400">- enforce hdf5 1.8 to ensure that files can still be exchanged</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1530273600">- BuildRequire p7zip-full instead of p7zip on TW, 7za was moved
  from p7zip to the new package, breaking backwards compatibility.
- use %license for COPYING</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1538481600">- Force writing of backwards compatible files with HDF5 1.10.x
  0001-Write-backwards-compatible-Mat7.3-files.patch
  (gh#tbeu/matio#93).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1538654400">- Fix preprocessor check for availability of H5F_LIBVER_V18</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1568980800">- Update to version 1.5.17
  * Fixed bug reading struct array with packed field names from v5
    MAT file
  * Fixed bug reading past EOF from (crafted) uncompressed v5 MAT
    file
- Drop 0001-Write-backwards-compatible-Mat7.3-files.patch:
  incorporated upstream.
- Update so number to 9 in keeping with upstream.</changelog>
  <changelog author="Max Lin &lt;mlin@suse.com&gt;" date="1582372800">- Leap 15.2 has newer p7zip, build requires p7zip-full on Tumbleweed,
  Leap 15.2 and SLE15 SP2.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1600516800">- Update to version 1.5.18:
  * Added support of HDF5 v1.12.x.
  * Added support for reading uncompressed v5 MAT file generated
    by SWAN.
  * Added error codes to public interface.
  * Added support for CMake build system.
  * Fixed read performance of numeric array from compressed v5 MAT
    file.
  * Fixed support for VS2005 and VS2008 (MSVC) (regression of
    v1.5.15).
  * Fixed mktemp linker warning when using GNU linker.
  * Fixed bug writing struct array to uncompressed v5 MAT file on
    big endian architecture (regression of v1.5.10).
  * Fixed bug writing cell array to uncompressed v5 MAT file on
    big endian architecture.
  * Fixed bug reading variable name from v4 MAT file
    (CVE-2019-17533).
  * Fixed bug reading dimensions from (crafted) compressed v5 MAT
    file (CVE-2019-20017, CVE-2019-20018, CVE-2019-20020,
    CVE-2019-20052).
- Bump soversion to 11.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1605441600">- Update to version 1.5.19:
  * Fixed support for CMake (&gt;= v3.19.0) build system.
  * Fixed bug reading variable from v4 MAT file (regression of
    v1.5.18).</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1616414400">- Update to version 1.5.20:
  * Added support for writing MAT_T_UTF8 encoded character array
    to HDF5 MAT file (by conversion to UTF-16 if in BMP).
  * Updated cmake-conan to v0.16.1.
  * Fixed bug with size_t arguments of logging function calls.
  * Fixed bug reading past EOF from (crafted) MAT file.
  * Fixed bug writing MAT_T_UTF8 encoded character array to v5 MAT
    file.
  * Fixed printing of MAT_T_UTF8 encoded character array.
  * Several other fixes, for example for memory leaks.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1622548800">- Update to version 1.5.21
  * Fixed: Avoid usage of strlen when creating MAT_T_UTF8 encoded
    character array
  * Fixed reading of compression flag from HDF5 MAT file
- Use https for URL and SourceURL</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1651838400">- Update to version 1.5.23:
  * Fixed testsuite regression from version 1.5.22.
- Changes from version 1.5.22:
  * Added support for reading large MAT file.
  * Updated cmake-conan to version 0.17.0.
  * Fixed CMake build with Conan (MATIO_USE_CONAN:BOOL=ON).
  * Fixed data type when reading 16-bit character data from HDF5
    MAT file.
  * Fixed heap-based buffer overflows when reading (crafted) MAT
    file (CVE-2020-36428, CVE-2021-36977).
  * Confirmed compatibility with HDF5 v1.13.0 and v1.13.1.
  * Several other fixes, for example for memory leaks.</changelog>
</package>
<package pkgid="09159337215dba098519efd793662720f48549a73f0e01f037ceb412cf84f54e" name="libmatio11" arch="aarch64">
  <version epoch="0" ver="1.5.23" rel="bp154.2.3.1"/>
  <changelog author="dmitry_r@opensuse.org" date="1458561600">- Update to version 1.5.6
  * Added support of reading sparse array from v4 MAT files
  * Added support of writing sparse array to v4 MAT files
  * Added support of writing character array to v4 MAT files
  * Bug fixes</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1466683200">- Update to version 1.5.7
  * Added support for MAT_T_UTF16 when reading character array from v5 MAT file
  * Added support of HDF5 v1.10.x (with deprecated v1.8.x symbols exported)
  * Added warning on unsupported character data types when reading v5 MAT file
  * Added error check if variable already exists when writing to MAT file
  * Bug fixes</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1467979200">- Update to version 1.5.8
  * Bug fixes</changelog>
  <changelog author="badshah400@gmail.com" date="1470398400">- Add matio-hdf5_110-support.patch to fix support for
  hdf5 &gt;= 1.10; patch taken from upstream git (gh#tbeu/matio#37).
- Add matio-disable-failing-hdf5-tests.patch to disable "mat73"
  tests that fail (apparently) due to bugs in hdf5 1.10
  (gh#tbeu/matio#41); patch touches autotool files, add
  BuildRequires on libtool and run "autoreconf -fi" before
  configure.</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1477310400">- Update to version 1.5.9
  * Bug fixes
  * HDF5 1.10 support, drop obsolete matio-hdf5_110-support.patch
    matio-disable-failing-hdf5-tests.patch</changelog>
  <changelog author="badshah400@gmail.com" date="1506945600">- Update to version 1.5.10:
  * Added new API function Mat_GetDir to retrieve all variable
    names of a MAT file
  * Fixed performance of repeated calls to Mat_VarWrite (broken by
    v1.5.7)
  * Fixed bugs reading (hyperslabs of) numeric arrays where the
    variable data type differs from the desired output data type
  * Increased testsuite coverage</changelog>
  <changelog author="badshah400@gmail.com" date="1509019200">- Update to version 1.5.11:
  * Added new API function Mat_VarWriteAppend to append a numeric
    array to a previously written variable in HDF5 MAT file.
  * Fixed bug calculating sizes of cell/struct array with empty
    cells/fields in Mat_VarGetSize.
  * Fixed bug writing cell/struct array with empty cells/fields to
    v5 MAT file.
  * Fixed bug writing cell/struct array with empty cells/fields to
    HDF5 MAT file.
  * Fixed read performance of cell/struct array with empty
    cells/fields from v5 MAT file.
  * Fixed read performance of numeric array from uncompressed v5
    MAT file.
  * Fixed testsuite (if configured with the MATLAB application).
  * Updated man pages.
- Drop BuildRequires: libtool and the autoreconf run before
  configure; the patches that needed these have been long gone.
- Mat v7.3 tests fail, so turn off enable-mat73 for now.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1522497600">- Update to version 1.5.12:
  * Updated Mat_VarWriteAppend: Added support to append a variable
    to a previously written struct array in HDF5 MAT file
  * Fixed bug reading MAT_T_UINT16 encoded character array from
    HDF5 MAT file
  * Fixed bug reading MAT_T_UTF16 encoded character array from
    compressed v5 MAT file
  * Fixed bug writing MAT_T_UTF16 encoded character array to HDF5
    MAT file
  * Fixed buffer overflow in Mat_VarGetCells/Mat_VarGetStructs
- Reenable support for Mat v7.3
- Use significantly smaller 7z compressed sources (2.7 vs 10 MByte)</changelog>
  <changelog author="jengelh@inai.de" date="1522756800">- Fix SRPM group. Trim redundant wording from summaries.</changelog>
  <changelog author="adrian@suse.de" date="1523534400">- enforce hdf5 1.8 to ensure that files can still be exchanged</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1530273600">- BuildRequire p7zip-full instead of p7zip on TW, 7za was moved
  from p7zip to the new package, breaking backwards compatibility.
- use %license for COPYING</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1538481600">- Force writing of backwards compatible files with HDF5 1.10.x
  0001-Write-backwards-compatible-Mat7.3-files.patch
  (gh#tbeu/matio#93).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1538654400">- Fix preprocessor check for availability of H5F_LIBVER_V18</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1568980800">- Update to version 1.5.17
  * Fixed bug reading struct array with packed field names from v5
    MAT file
  * Fixed bug reading past EOF from (crafted) uncompressed v5 MAT
    file
- Drop 0001-Write-backwards-compatible-Mat7.3-files.patch:
  incorporated upstream.
- Update so number to 9 in keeping with upstream.</changelog>
  <changelog author="Max Lin &lt;mlin@suse.com&gt;" date="1582372800">- Leap 15.2 has newer p7zip, build requires p7zip-full on Tumbleweed,
  Leap 15.2 and SLE15 SP2.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1600516800">- Update to version 1.5.18:
  * Added support of HDF5 v1.12.x.
  * Added support for reading uncompressed v5 MAT file generated
    by SWAN.
  * Added error codes to public interface.
  * Added support for CMake build system.
  * Fixed read performance of numeric array from compressed v5 MAT
    file.
  * Fixed support for VS2005 and VS2008 (MSVC) (regression of
    v1.5.15).
  * Fixed mktemp linker warning when using GNU linker.
  * Fixed bug writing struct array to uncompressed v5 MAT file on
    big endian architecture (regression of v1.5.10).
  * Fixed bug writing cell array to uncompressed v5 MAT file on
    big endian architecture.
  * Fixed bug reading variable name from v4 MAT file
    (CVE-2019-17533).
  * Fixed bug reading dimensions from (crafted) compressed v5 MAT
    file (CVE-2019-20017, CVE-2019-20018, CVE-2019-20020,
    CVE-2019-20052).
- Bump soversion to 11.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1605441600">- Update to version 1.5.19:
  * Fixed support for CMake (&gt;= v3.19.0) build system.
  * Fixed bug reading variable from v4 MAT file (regression of
    v1.5.18).</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1616414400">- Update to version 1.5.20:
  * Added support for writing MAT_T_UTF8 encoded character array
    to HDF5 MAT file (by conversion to UTF-16 if in BMP).
  * Updated cmake-conan to v0.16.1.
  * Fixed bug with size_t arguments of logging function calls.
  * Fixed bug reading past EOF from (crafted) MAT file.
  * Fixed bug writing MAT_T_UTF8 encoded character array to v5 MAT
    file.
  * Fixed printing of MAT_T_UTF8 encoded character array.
  * Several other fixes, for example for memory leaks.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1622548800">- Update to version 1.5.21
  * Fixed: Avoid usage of strlen when creating MAT_T_UTF8 encoded
    character array
  * Fixed reading of compression flag from HDF5 MAT file
- Use https for URL and SourceURL</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1651838400">- Update to version 1.5.23:
  * Fixed testsuite regression from version 1.5.22.
- Changes from version 1.5.22:
  * Added support for reading large MAT file.
  * Updated cmake-conan to version 0.17.0.
  * Fixed CMake build with Conan (MATIO_USE_CONAN:BOOL=ON).
  * Fixed data type when reading 16-bit character data from HDF5
    MAT file.
  * Fixed heap-based buffer overflows when reading (crafted) MAT
    file (CVE-2020-36428, CVE-2021-36977).
  * Confirmed compatibility with HDF5 v1.13.0 and v1.13.1.
  * Several other fixes, for example for memory leaks.</changelog>
</package>
<package pkgid="bcc331bba66e114dee6b9530b3d0f2c6eb1a5057a0f55a9c730c9decd660548e" name="libmatio11" arch="i586">
  <version epoch="0" ver="1.5.23" rel="bp154.2.3.1"/>
  <changelog author="dmitry_r@opensuse.org" date="1458561600">- Update to version 1.5.6
  * Added support of reading sparse array from v4 MAT files
  * Added support of writing sparse array to v4 MAT files
  * Added support of writing character array to v4 MAT files
  * Bug fixes</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1466683200">- Update to version 1.5.7
  * Added support for MAT_T_UTF16 when reading character array from v5 MAT file
  * Added support of HDF5 v1.10.x (with deprecated v1.8.x symbols exported)
  * Added warning on unsupported character data types when reading v5 MAT file
  * Added error check if variable already exists when writing to MAT file
  * Bug fixes</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1467979200">- Update to version 1.5.8
  * Bug fixes</changelog>
  <changelog author="badshah400@gmail.com" date="1470398400">- Add matio-hdf5_110-support.patch to fix support for
  hdf5 &gt;= 1.10; patch taken from upstream git (gh#tbeu/matio#37).
- Add matio-disable-failing-hdf5-tests.patch to disable "mat73"
  tests that fail (apparently) due to bugs in hdf5 1.10
  (gh#tbeu/matio#41); patch touches autotool files, add
  BuildRequires on libtool and run "autoreconf -fi" before
  configure.</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1477310400">- Update to version 1.5.9
  * Bug fixes
  * HDF5 1.10 support, drop obsolete matio-hdf5_110-support.patch
    matio-disable-failing-hdf5-tests.patch</changelog>
  <changelog author="badshah400@gmail.com" date="1506945600">- Update to version 1.5.10:
  * Added new API function Mat_GetDir to retrieve all variable
    names of a MAT file
  * Fixed performance of repeated calls to Mat_VarWrite (broken by
    v1.5.7)
  * Fixed bugs reading (hyperslabs of) numeric arrays where the
    variable data type differs from the desired output data type
  * Increased testsuite coverage</changelog>
  <changelog author="badshah400@gmail.com" date="1509019200">- Update to version 1.5.11:
  * Added new API function Mat_VarWriteAppend to append a numeric
    array to a previously written variable in HDF5 MAT file.
  * Fixed bug calculating sizes of cell/struct array with empty
    cells/fields in Mat_VarGetSize.
  * Fixed bug writing cell/struct array with empty cells/fields to
    v5 MAT file.
  * Fixed bug writing cell/struct array with empty cells/fields to
    HDF5 MAT file.
  * Fixed read performance of cell/struct array with empty
    cells/fields from v5 MAT file.
  * Fixed read performance of numeric array from uncompressed v5
    MAT file.
  * Fixed testsuite (if configured with the MATLAB application).
  * Updated man pages.
- Drop BuildRequires: libtool and the autoreconf run before
  configure; the patches that needed these have been long gone.
- Mat v7.3 tests fail, so turn off enable-mat73 for now.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1522497600">- Update to version 1.5.12:
  * Updated Mat_VarWriteAppend: Added support to append a variable
    to a previously written struct array in HDF5 MAT file
  * Fixed bug reading MAT_T_UINT16 encoded character array from
    HDF5 MAT file
  * Fixed bug reading MAT_T_UTF16 encoded character array from
    compressed v5 MAT file
  * Fixed bug writing MAT_T_UTF16 encoded character array to HDF5
    MAT file
  * Fixed buffer overflow in Mat_VarGetCells/Mat_VarGetStructs
- Reenable support for Mat v7.3
- Use significantly smaller 7z compressed sources (2.7 vs 10 MByte)</changelog>
  <changelog author="jengelh@inai.de" date="1522756800">- Fix SRPM group. Trim redundant wording from summaries.</changelog>
  <changelog author="adrian@suse.de" date="1523534400">- enforce hdf5 1.8 to ensure that files can still be exchanged</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1530273600">- BuildRequire p7zip-full instead of p7zip on TW, 7za was moved
  from p7zip to the new package, breaking backwards compatibility.
- use %license for COPYING</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1538481600">- Force writing of backwards compatible files with HDF5 1.10.x
  0001-Write-backwards-compatible-Mat7.3-files.patch
  (gh#tbeu/matio#93).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1538654400">- Fix preprocessor check for availability of H5F_LIBVER_V18</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1568980800">- Update to version 1.5.17
  * Fixed bug reading struct array with packed field names from v5
    MAT file
  * Fixed bug reading past EOF from (crafted) uncompressed v5 MAT
    file
- Drop 0001-Write-backwards-compatible-Mat7.3-files.patch:
  incorporated upstream.
- Update so number to 9 in keeping with upstream.</changelog>
  <changelog author="Max Lin &lt;mlin@suse.com&gt;" date="1582372800">- Leap 15.2 has newer p7zip, build requires p7zip-full on Tumbleweed,
  Leap 15.2 and SLE15 SP2.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1600516800">- Update to version 1.5.18:
  * Added support of HDF5 v1.12.x.
  * Added support for reading uncompressed v5 MAT file generated
    by SWAN.
  * Added error codes to public interface.
  * Added support for CMake build system.
  * Fixed read performance of numeric array from compressed v5 MAT
    file.
  * Fixed support for VS2005 and VS2008 (MSVC) (regression of
    v1.5.15).
  * Fixed mktemp linker warning when using GNU linker.
  * Fixed bug writing struct array to uncompressed v5 MAT file on
    big endian architecture (regression of v1.5.10).
  * Fixed bug writing cell array to uncompressed v5 MAT file on
    big endian architecture.
  * Fixed bug reading variable name from v4 MAT file
    (CVE-2019-17533).
  * Fixed bug reading dimensions from (crafted) compressed v5 MAT
    file (CVE-2019-20017, CVE-2019-20018, CVE-2019-20020,
    CVE-2019-20052).
- Bump soversion to 11.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1605441600">- Update to version 1.5.19:
  * Fixed support for CMake (&gt;= v3.19.0) build system.
  * Fixed bug reading variable from v4 MAT file (regression of
    v1.5.18).</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1616414400">- Update to version 1.5.20:
  * Added support for writing MAT_T_UTF8 encoded character array
    to HDF5 MAT file (by conversion to UTF-16 if in BMP).
  * Updated cmake-conan to v0.16.1.
  * Fixed bug with size_t arguments of logging function calls.
  * Fixed bug reading past EOF from (crafted) MAT file.
  * Fixed bug writing MAT_T_UTF8 encoded character array to v5 MAT
    file.
  * Fixed printing of MAT_T_UTF8 encoded character array.
  * Several other fixes, for example for memory leaks.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1622548800">- Update to version 1.5.21
  * Fixed: Avoid usage of strlen when creating MAT_T_UTF8 encoded
    character array
  * Fixed reading of compression flag from HDF5 MAT file
- Use https for URL and SourceURL</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1651838400">- Update to version 1.5.23:
  * Fixed testsuite regression from version 1.5.22.
- Changes from version 1.5.22:
  * Added support for reading large MAT file.
  * Updated cmake-conan to version 0.17.0.
  * Fixed CMake build with Conan (MATIO_USE_CONAN:BOOL=ON).
  * Fixed data type when reading 16-bit character data from HDF5
    MAT file.
  * Fixed heap-based buffer overflows when reading (crafted) MAT
    file (CVE-2020-36428, CVE-2021-36977).
  * Confirmed compatibility with HDF5 v1.13.0 and v1.13.1.
  * Several other fixes, for example for memory leaks.</changelog>
</package>
<package pkgid="b733b853be8cde8b00f9f81376e9fb36754534863a94b35d746201614ccdd909" name="libmatio11" arch="ppc64le">
  <version epoch="0" ver="1.5.23" rel="bp154.2.3.1"/>
  <changelog author="dmitry_r@opensuse.org" date="1458561600">- Update to version 1.5.6
  * Added support of reading sparse array from v4 MAT files
  * Added support of writing sparse array to v4 MAT files
  * Added support of writing character array to v4 MAT files
  * Bug fixes</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1466683200">- Update to version 1.5.7
  * Added support for MAT_T_UTF16 when reading character array from v5 MAT file
  * Added support of HDF5 v1.10.x (with deprecated v1.8.x symbols exported)
  * Added warning on unsupported character data types when reading v5 MAT file
  * Added error check if variable already exists when writing to MAT file
  * Bug fixes</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1467979200">- Update to version 1.5.8
  * Bug fixes</changelog>
  <changelog author="badshah400@gmail.com" date="1470398400">- Add matio-hdf5_110-support.patch to fix support for
  hdf5 &gt;= 1.10; patch taken from upstream git (gh#tbeu/matio#37).
- Add matio-disable-failing-hdf5-tests.patch to disable "mat73"
  tests that fail (apparently) due to bugs in hdf5 1.10
  (gh#tbeu/matio#41); patch touches autotool files, add
  BuildRequires on libtool and run "autoreconf -fi" before
  configure.</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1477310400">- Update to version 1.5.9
  * Bug fixes
  * HDF5 1.10 support, drop obsolete matio-hdf5_110-support.patch
    matio-disable-failing-hdf5-tests.patch</changelog>
  <changelog author="badshah400@gmail.com" date="1506945600">- Update to version 1.5.10:
  * Added new API function Mat_GetDir to retrieve all variable
    names of a MAT file
  * Fixed performance of repeated calls to Mat_VarWrite (broken by
    v1.5.7)
  * Fixed bugs reading (hyperslabs of) numeric arrays where the
    variable data type differs from the desired output data type
  * Increased testsuite coverage</changelog>
  <changelog author="badshah400@gmail.com" date="1509019200">- Update to version 1.5.11:
  * Added new API function Mat_VarWriteAppend to append a numeric
    array to a previously written variable in HDF5 MAT file.
  * Fixed bug calculating sizes of cell/struct array with empty
    cells/fields in Mat_VarGetSize.
  * Fixed bug writing cell/struct array with empty cells/fields to
    v5 MAT file.
  * Fixed bug writing cell/struct array with empty cells/fields to
    HDF5 MAT file.
  * Fixed read performance of cell/struct array with empty
    cells/fields from v5 MAT file.
  * Fixed read performance of numeric array from uncompressed v5
    MAT file.
  * Fixed testsuite (if configured with the MATLAB application).
  * Updated man pages.
- Drop BuildRequires: libtool and the autoreconf run before
  configure; the patches that needed these have been long gone.
- Mat v7.3 tests fail, so turn off enable-mat73 for now.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1522497600">- Update to version 1.5.12:
  * Updated Mat_VarWriteAppend: Added support to append a variable
    to a previously written struct array in HDF5 MAT file
  * Fixed bug reading MAT_T_UINT16 encoded character array from
    HDF5 MAT file
  * Fixed bug reading MAT_T_UTF16 encoded character array from
    compressed v5 MAT file
  * Fixed bug writing MAT_T_UTF16 encoded character array to HDF5
    MAT file
  * Fixed buffer overflow in Mat_VarGetCells/Mat_VarGetStructs
- Reenable support for Mat v7.3
- Use significantly smaller 7z compressed sources (2.7 vs 10 MByte)</changelog>
  <changelog author="jengelh@inai.de" date="1522756800">- Fix SRPM group. Trim redundant wording from summaries.</changelog>
  <changelog author="adrian@suse.de" date="1523534400">- enforce hdf5 1.8 to ensure that files can still be exchanged</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1530273600">- BuildRequire p7zip-full instead of p7zip on TW, 7za was moved
  from p7zip to the new package, breaking backwards compatibility.
- use %license for COPYING</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1538481600">- Force writing of backwards compatible files with HDF5 1.10.x
  0001-Write-backwards-compatible-Mat7.3-files.patch
  (gh#tbeu/matio#93).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1538654400">- Fix preprocessor check for availability of H5F_LIBVER_V18</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1568980800">- Update to version 1.5.17
  * Fixed bug reading struct array with packed field names from v5
    MAT file
  * Fixed bug reading past EOF from (crafted) uncompressed v5 MAT
    file
- Drop 0001-Write-backwards-compatible-Mat7.3-files.patch:
  incorporated upstream.
- Update so number to 9 in keeping with upstream.</changelog>
  <changelog author="Max Lin &lt;mlin@suse.com&gt;" date="1582372800">- Leap 15.2 has newer p7zip, build requires p7zip-full on Tumbleweed,
  Leap 15.2 and SLE15 SP2.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1600516800">- Update to version 1.5.18:
  * Added support of HDF5 v1.12.x.
  * Added support for reading uncompressed v5 MAT file generated
    by SWAN.
  * Added error codes to public interface.
  * Added support for CMake build system.
  * Fixed read performance of numeric array from compressed v5 MAT
    file.
  * Fixed support for VS2005 and VS2008 (MSVC) (regression of
    v1.5.15).
  * Fixed mktemp linker warning when using GNU linker.
  * Fixed bug writing struct array to uncompressed v5 MAT file on
    big endian architecture (regression of v1.5.10).
  * Fixed bug writing cell array to uncompressed v5 MAT file on
    big endian architecture.
  * Fixed bug reading variable name from v4 MAT file
    (CVE-2019-17533).
  * Fixed bug reading dimensions from (crafted) compressed v5 MAT
    file (CVE-2019-20017, CVE-2019-20018, CVE-2019-20020,
    CVE-2019-20052).
- Bump soversion to 11.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1605441600">- Update to version 1.5.19:
  * Fixed support for CMake (&gt;= v3.19.0) build system.
  * Fixed bug reading variable from v4 MAT file (regression of
    v1.5.18).</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1616414400">- Update to version 1.5.20:
  * Added support for writing MAT_T_UTF8 encoded character array
    to HDF5 MAT file (by conversion to UTF-16 if in BMP).
  * Updated cmake-conan to v0.16.1.
  * Fixed bug with size_t arguments of logging function calls.
  * Fixed bug reading past EOF from (crafted) MAT file.
  * Fixed bug writing MAT_T_UTF8 encoded character array to v5 MAT
    file.
  * Fixed printing of MAT_T_UTF8 encoded character array.
  * Several other fixes, for example for memory leaks.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1622548800">- Update to version 1.5.21
  * Fixed: Avoid usage of strlen when creating MAT_T_UTF8 encoded
    character array
  * Fixed reading of compression flag from HDF5 MAT file
- Use https for URL and SourceURL</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1651838400">- Update to version 1.5.23:
  * Fixed testsuite regression from version 1.5.22.
- Changes from version 1.5.22:
  * Added support for reading large MAT file.
  * Updated cmake-conan to version 0.17.0.
  * Fixed CMake build with Conan (MATIO_USE_CONAN:BOOL=ON).
  * Fixed data type when reading 16-bit character data from HDF5
    MAT file.
  * Fixed heap-based buffer overflows when reading (crafted) MAT
    file (CVE-2020-36428, CVE-2021-36977).
  * Confirmed compatibility with HDF5 v1.13.0 and v1.13.1.
  * Several other fixes, for example for memory leaks.</changelog>
</package>
<package pkgid="130228bb50355d6826bc2c70663270f6ae83c64e738f402f4ad7249cbaab0ccf" name="libmatio11" arch="s390x">
  <version epoch="0" ver="1.5.23" rel="bp154.2.3.1"/>
  <changelog author="dmitry_r@opensuse.org" date="1458561600">- Update to version 1.5.6
  * Added support of reading sparse array from v4 MAT files
  * Added support of writing sparse array to v4 MAT files
  * Added support of writing character array to v4 MAT files
  * Bug fixes</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1466683200">- Update to version 1.5.7
  * Added support for MAT_T_UTF16 when reading character array from v5 MAT file
  * Added support of HDF5 v1.10.x (with deprecated v1.8.x symbols exported)
  * Added warning on unsupported character data types when reading v5 MAT file
  * Added error check if variable already exists when writing to MAT file
  * Bug fixes</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1467979200">- Update to version 1.5.8
  * Bug fixes</changelog>
  <changelog author="badshah400@gmail.com" date="1470398400">- Add matio-hdf5_110-support.patch to fix support for
  hdf5 &gt;= 1.10; patch taken from upstream git (gh#tbeu/matio#37).
- Add matio-disable-failing-hdf5-tests.patch to disable "mat73"
  tests that fail (apparently) due to bugs in hdf5 1.10
  (gh#tbeu/matio#41); patch touches autotool files, add
  BuildRequires on libtool and run "autoreconf -fi" before
  configure.</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1477310400">- Update to version 1.5.9
  * Bug fixes
  * HDF5 1.10 support, drop obsolete matio-hdf5_110-support.patch
    matio-disable-failing-hdf5-tests.patch</changelog>
  <changelog author="badshah400@gmail.com" date="1506945600">- Update to version 1.5.10:
  * Added new API function Mat_GetDir to retrieve all variable
    names of a MAT file
  * Fixed performance of repeated calls to Mat_VarWrite (broken by
    v1.5.7)
  * Fixed bugs reading (hyperslabs of) numeric arrays where the
    variable data type differs from the desired output data type
  * Increased testsuite coverage</changelog>
  <changelog author="badshah400@gmail.com" date="1509019200">- Update to version 1.5.11:
  * Added new API function Mat_VarWriteAppend to append a numeric
    array to a previously written variable in HDF5 MAT file.
  * Fixed bug calculating sizes of cell/struct array with empty
    cells/fields in Mat_VarGetSize.
  * Fixed bug writing cell/struct array with empty cells/fields to
    v5 MAT file.
  * Fixed bug writing cell/struct array with empty cells/fields to
    HDF5 MAT file.
  * Fixed read performance of cell/struct array with empty
    cells/fields from v5 MAT file.
  * Fixed read performance of numeric array from uncompressed v5
    MAT file.
  * Fixed testsuite (if configured with the MATLAB application).
  * Updated man pages.
- Drop BuildRequires: libtool and the autoreconf run before
  configure; the patches that needed these have been long gone.
- Mat v7.3 tests fail, so turn off enable-mat73 for now.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1522497600">- Update to version 1.5.12:
  * Updated Mat_VarWriteAppend: Added support to append a variable
    to a previously written struct array in HDF5 MAT file
  * Fixed bug reading MAT_T_UINT16 encoded character array from
    HDF5 MAT file
  * Fixed bug reading MAT_T_UTF16 encoded character array from
    compressed v5 MAT file
  * Fixed bug writing MAT_T_UTF16 encoded character array to HDF5
    MAT file
  * Fixed buffer overflow in Mat_VarGetCells/Mat_VarGetStructs
- Reenable support for Mat v7.3
- Use significantly smaller 7z compressed sources (2.7 vs 10 MByte)</changelog>
  <changelog author="jengelh@inai.de" date="1522756800">- Fix SRPM group. Trim redundant wording from summaries.</changelog>
  <changelog author="adrian@suse.de" date="1523534400">- enforce hdf5 1.8 to ensure that files can still be exchanged</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1530273600">- BuildRequire p7zip-full instead of p7zip on TW, 7za was moved
  from p7zip to the new package, breaking backwards compatibility.
- use %license for COPYING</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1538481600">- Force writing of backwards compatible files with HDF5 1.10.x
  0001-Write-backwards-compatible-Mat7.3-files.patch
  (gh#tbeu/matio#93).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1538654400">- Fix preprocessor check for availability of H5F_LIBVER_V18</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1568980800">- Update to version 1.5.17
  * Fixed bug reading struct array with packed field names from v5
    MAT file
  * Fixed bug reading past EOF from (crafted) uncompressed v5 MAT
    file
- Drop 0001-Write-backwards-compatible-Mat7.3-files.patch:
  incorporated upstream.
- Update so number to 9 in keeping with upstream.</changelog>
  <changelog author="Max Lin &lt;mlin@suse.com&gt;" date="1582372800">- Leap 15.2 has newer p7zip, build requires p7zip-full on Tumbleweed,
  Leap 15.2 and SLE15 SP2.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1600516800">- Update to version 1.5.18:
  * Added support of HDF5 v1.12.x.
  * Added support for reading uncompressed v5 MAT file generated
    by SWAN.
  * Added error codes to public interface.
  * Added support for CMake build system.
  * Fixed read performance of numeric array from compressed v5 MAT
    file.
  * Fixed support for VS2005 and VS2008 (MSVC) (regression of
    v1.5.15).
  * Fixed mktemp linker warning when using GNU linker.
  * Fixed bug writing struct array to uncompressed v5 MAT file on
    big endian architecture (regression of v1.5.10).
  * Fixed bug writing cell array to uncompressed v5 MAT file on
    big endian architecture.
  * Fixed bug reading variable name from v4 MAT file
    (CVE-2019-17533).
  * Fixed bug reading dimensions from (crafted) compressed v5 MAT
    file (CVE-2019-20017, CVE-2019-20018, CVE-2019-20020,
    CVE-2019-20052).
- Bump soversion to 11.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1605441600">- Update to version 1.5.19:
  * Fixed support for CMake (&gt;= v3.19.0) build system.
  * Fixed bug reading variable from v4 MAT file (regression of
    v1.5.18).</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1616414400">- Update to version 1.5.20:
  * Added support for writing MAT_T_UTF8 encoded character array
    to HDF5 MAT file (by conversion to UTF-16 if in BMP).
  * Updated cmake-conan to v0.16.1.
  * Fixed bug with size_t arguments of logging function calls.
  * Fixed bug reading past EOF from (crafted) MAT file.
  * Fixed bug writing MAT_T_UTF8 encoded character array to v5 MAT
    file.
  * Fixed printing of MAT_T_UTF8 encoded character array.
  * Several other fixes, for example for memory leaks.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1622548800">- Update to version 1.5.21
  * Fixed: Avoid usage of strlen when creating MAT_T_UTF8 encoded
    character array
  * Fixed reading of compression flag from HDF5 MAT file
- Use https for URL and SourceURL</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1651838400">- Update to version 1.5.23:
  * Fixed testsuite regression from version 1.5.22.
- Changes from version 1.5.22:
  * Added support for reading large MAT file.
  * Updated cmake-conan to version 0.17.0.
  * Fixed CMake build with Conan (MATIO_USE_CONAN:BOOL=ON).
  * Fixed data type when reading 16-bit character data from HDF5
    MAT file.
  * Fixed heap-based buffer overflows when reading (crafted) MAT
    file (CVE-2020-36428, CVE-2021-36977).
  * Confirmed compatibility with HDF5 v1.13.0 and v1.13.1.
  * Several other fixes, for example for memory leaks.</changelog>
</package>
<package pkgid="6a79b21955a1b73971d3f61f7a10c8e8318fc288865629318b9417c1831ddd29" name="libmatio11" arch="x86_64">
  <version epoch="0" ver="1.5.23" rel="bp154.2.3.1"/>
  <changelog author="dmitry_r@opensuse.org" date="1458561600">- Update to version 1.5.6
  * Added support of reading sparse array from v4 MAT files
  * Added support of writing sparse array to v4 MAT files
  * Added support of writing character array to v4 MAT files
  * Bug fixes</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1466683200">- Update to version 1.5.7
  * Added support for MAT_T_UTF16 when reading character array from v5 MAT file
  * Added support of HDF5 v1.10.x (with deprecated v1.8.x symbols exported)
  * Added warning on unsupported character data types when reading v5 MAT file
  * Added error check if variable already exists when writing to MAT file
  * Bug fixes</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1467979200">- Update to version 1.5.8
  * Bug fixes</changelog>
  <changelog author="badshah400@gmail.com" date="1470398400">- Add matio-hdf5_110-support.patch to fix support for
  hdf5 &gt;= 1.10; patch taken from upstream git (gh#tbeu/matio#37).
- Add matio-disable-failing-hdf5-tests.patch to disable "mat73"
  tests that fail (apparently) due to bugs in hdf5 1.10
  (gh#tbeu/matio#41); patch touches autotool files, add
  BuildRequires on libtool and run "autoreconf -fi" before
  configure.</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1477310400">- Update to version 1.5.9
  * Bug fixes
  * HDF5 1.10 support, drop obsolete matio-hdf5_110-support.patch
    matio-disable-failing-hdf5-tests.patch</changelog>
  <changelog author="badshah400@gmail.com" date="1506945600">- Update to version 1.5.10:
  * Added new API function Mat_GetDir to retrieve all variable
    names of a MAT file
  * Fixed performance of repeated calls to Mat_VarWrite (broken by
    v1.5.7)
  * Fixed bugs reading (hyperslabs of) numeric arrays where the
    variable data type differs from the desired output data type
  * Increased testsuite coverage</changelog>
  <changelog author="badshah400@gmail.com" date="1509019200">- Update to version 1.5.11:
  * Added new API function Mat_VarWriteAppend to append a numeric
    array to a previously written variable in HDF5 MAT file.
  * Fixed bug calculating sizes of cell/struct array with empty
    cells/fields in Mat_VarGetSize.
  * Fixed bug writing cell/struct array with empty cells/fields to
    v5 MAT file.
  * Fixed bug writing cell/struct array with empty cells/fields to
    HDF5 MAT file.
  * Fixed read performance of cell/struct array with empty
    cells/fields from v5 MAT file.
  * Fixed read performance of numeric array from uncompressed v5
    MAT file.
  * Fixed testsuite (if configured with the MATLAB application).
  * Updated man pages.
- Drop BuildRequires: libtool and the autoreconf run before
  configure; the patches that needed these have been long gone.
- Mat v7.3 tests fail, so turn off enable-mat73 for now.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1522497600">- Update to version 1.5.12:
  * Updated Mat_VarWriteAppend: Added support to append a variable
    to a previously written struct array in HDF5 MAT file
  * Fixed bug reading MAT_T_UINT16 encoded character array from
    HDF5 MAT file
  * Fixed bug reading MAT_T_UTF16 encoded character array from
    compressed v5 MAT file
  * Fixed bug writing MAT_T_UTF16 encoded character array to HDF5
    MAT file
  * Fixed buffer overflow in Mat_VarGetCells/Mat_VarGetStructs
- Reenable support for Mat v7.3
- Use significantly smaller 7z compressed sources (2.7 vs 10 MByte)</changelog>
  <changelog author="jengelh@inai.de" date="1522756800">- Fix SRPM group. Trim redundant wording from summaries.</changelog>
  <changelog author="adrian@suse.de" date="1523534400">- enforce hdf5 1.8 to ensure that files can still be exchanged</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1530273600">- BuildRequire p7zip-full instead of p7zip on TW, 7za was moved
  from p7zip to the new package, breaking backwards compatibility.
- use %license for COPYING</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1538481600">- Force writing of backwards compatible files with HDF5 1.10.x
  0001-Write-backwards-compatible-Mat7.3-files.patch
  (gh#tbeu/matio#93).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1538654400">- Fix preprocessor check for availability of H5F_LIBVER_V18</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1568980800">- Update to version 1.5.17
  * Fixed bug reading struct array with packed field names from v5
    MAT file
  * Fixed bug reading past EOF from (crafted) uncompressed v5 MAT
    file
- Drop 0001-Write-backwards-compatible-Mat7.3-files.patch:
  incorporated upstream.
- Update so number to 9 in keeping with upstream.</changelog>
  <changelog author="Max Lin &lt;mlin@suse.com&gt;" date="1582372800">- Leap 15.2 has newer p7zip, build requires p7zip-full on Tumbleweed,
  Leap 15.2 and SLE15 SP2.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1600516800">- Update to version 1.5.18:
  * Added support of HDF5 v1.12.x.
  * Added support for reading uncompressed v5 MAT file generated
    by SWAN.
  * Added error codes to public interface.
  * Added support for CMake build system.
  * Fixed read performance of numeric array from compressed v5 MAT
    file.
  * Fixed support for VS2005 and VS2008 (MSVC) (regression of
    v1.5.15).
  * Fixed mktemp linker warning when using GNU linker.
  * Fixed bug writing struct array to uncompressed v5 MAT file on
    big endian architecture (regression of v1.5.10).
  * Fixed bug writing cell array to uncompressed v5 MAT file on
    big endian architecture.
  * Fixed bug reading variable name from v4 MAT file
    (CVE-2019-17533).
  * Fixed bug reading dimensions from (crafted) compressed v5 MAT
    file (CVE-2019-20017, CVE-2019-20018, CVE-2019-20020,
    CVE-2019-20052).
- Bump soversion to 11.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1605441600">- Update to version 1.5.19:
  * Fixed support for CMake (&gt;= v3.19.0) build system.
  * Fixed bug reading variable from v4 MAT file (regression of
    v1.5.18).</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1616414400">- Update to version 1.5.20:
  * Added support for writing MAT_T_UTF8 encoded character array
    to HDF5 MAT file (by conversion to UTF-16 if in BMP).
  * Updated cmake-conan to v0.16.1.
  * Fixed bug with size_t arguments of logging function calls.
  * Fixed bug reading past EOF from (crafted) MAT file.
  * Fixed bug writing MAT_T_UTF8 encoded character array to v5 MAT
    file.
  * Fixed printing of MAT_T_UTF8 encoded character array.
  * Several other fixes, for example for memory leaks.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1622548800">- Update to version 1.5.21
  * Fixed: Avoid usage of strlen when creating MAT_T_UTF8 encoded
    character array
  * Fixed reading of compression flag from HDF5 MAT file
- Use https for URL and SourceURL</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1651838400">- Update to version 1.5.23:
  * Fixed testsuite regression from version 1.5.22.
- Changes from version 1.5.22:
  * Added support for reading large MAT file.
  * Updated cmake-conan to version 0.17.0.
  * Fixed CMake build with Conan (MATIO_USE_CONAN:BOOL=ON).
  * Fixed data type when reading 16-bit character data from HDF5
    MAT file.
  * Fixed heap-based buffer overflows when reading (crafted) MAT
    file (CVE-2020-36428, CVE-2021-36977).
  * Confirmed compatibility with HDF5 v1.13.0 and v1.13.1.
  * Several other fixes, for example for memory leaks.</changelog>
</package>
<package pkgid="279f2e55b6b1d90d2d1e926f1e2fd8fbe23078af0d2a031e34bce28c470d0a9d" name="libmbedcrypto7" arch="aarch64">
  <version epoch="0" ver="2.28.0" rel="bp154.2.3.1"/>
  <changelog author="mpluskal@suse.com" date="1531137600">- Update to version 2.11.0:
  * Features
    + Added support for the XTS block cipher mode with AES (AES-XTS). Contributed by Aorimn in pull request #414.
    + Implemented the HMAC-based extract-and-expand key derivation function (HKDF) per RFC 5869. Contributed by Thomas Fossati.
    + For TLS servers, added support for offloading private key operations to an external cryptoprocessor. Private key operations can be asynchronous to allow non-blocking operation of the TLS server stack.
    + Added support for ARIA cipher (RFC 5794) and associated TLS ciphersuites (RFC 6209). ARIA is disabled by default. To enable, see MBEDTLS_ARIA_C in config.h.
    + Added support for the CCM* block cipher mode as defined in IEEE Std 802.15.4.
    + Added an additional block mode, OFB (Output Feedback) per NIST SP 800-38a, to the AES module and cipher abstraction module.
  * API Changes
    + Mbed TLS 2.11.0 maintains source code compatibility with the last minor version, Mbed TLS 2.9.0, but extends the interface with additional capabilities. Mbed TLS 2.11.0 modifies the ABI and increases the SOVERSION.
  * Bugfix
    + Fixed the cert_write example to handle certificates signed with elliptic curves as well as RSA. Fixes #777 found by dbedev.
    + Fixed the redefinition of _WIN32_WINNT, to avoid overriding a definition used by user applications. Found and fixed by Fabio Alessandrelli.
    + Fixed compilation warnings with the IAR toolchain on 32-bit platforms. Reported by rahmanih in #683.
    + Fixed an issue with MicroBlaze support in bn_mul.h which was causing the build to fail. Found by zv-io. Fixes #1651.
    + Fixed braces in mbedtls_memory_buffer_alloc_status(). Found by sbranden in #552.
    + Added the macro MBEDTLS_X509_MAX_FILE_PATH_LEN that enables the user to configure the maximum length of a file path that can be buffered when calling mbedtls_x509_crt_parse_path(). Fixes #492.
    + Fixed redundant declaration of mbedtls_ssl_list_ciphersuites. Raised by TrinityTonic in #1359.
- Changes for version 2.9.0:
  + Security
    + Fixed an issue in the X.509 module which could lead to a buffer overread during certificate validation. Additionally, the issue could also lead to unnecessary callback checks being made or to some validation checks to be omitted. The overread could be triggered remotely, while the other issues would require a non DER-compliant certificate to be correctly signed by a trusted CA, or a trusted CA with a non DER-compliant certificate. Found by luocm. Fixes #825.
    + Fixed the buffer length assertion in the ssl_parse_certificate_request() function which could lead to an arbitrary overread of the message buffer. The overreads could be caused by receiving a malformed algorithms section which was too short. In builds with debug output, this overread data was output with the debug data.
    + Fixed a client-side bug in the validation of the server's ciphersuite choice which could potentially lead to the client accepting a ciphersuite it didn't offer or a ciphersuite that could not be used with the TLS or DTLS version chosen by the server. This could lead to corruption of internal data structures for some configurations.
  * Features
    + Added an option of MBEDTLS_AES_FEWER_TABLES, to dynamically compute smaller AES tables during runtime, thereby reducing the RAM/ROM footprint by ~6KiB. Suggested and contributed by jkivilin.
    + Added initial support for Curve448 (RFC 7748). So far only mbedtls_ecp_mul() and ECDH primitive functions (mbedtls_ecdh_gen_public(), mbedtls_ecdh_compute_shared()) are supported for now. Contributed by Nicholas Wilson.
  * API Changes
    + Mbed TLS 2.9.0 maintains source code and binary compatibility with the last minor version, Mbed TLS 2.8.0, but extends the interface with additional capabilities.
    + Extended the API with the function of mbedtls_net_poll() to allow user applications to wait for a network context to become ready before reading or writing.
    + Added the function mbedtls_ssl_check_pending() to the public API to allow a check for whether more more data is pending to be processed in the internal message buffers. This function is necessary to determine the underlying transport when event-driven IO is used.
  * Bugfix
    + Fixed a spurious uninitialized variable warning in cmac.c. Fix independently contributed by Brian J Murray and David Brown.
    + Added missing dependencies in test suites that led to build failures in configurations that omit certain hashes or public-key algorithms. Fixes #1040.
    + Fixed a C89 incompatibility issue in benchmark.c. Contributed by Brendan Shanks. Fixes #1353.
    + Added missing dependencies for MBEDTLS_HAVE_TIME_DATE and MBEDTLS_VERSION_FEATURES in some test suites. Contributed by Deomid Ryabkov. Fixes #1299, #1475.
    + Fixed the Makefile build process for building shared libraries on Mac OS X. Fixed by mnacamura.
    + Fixed parsing of PKCS#8 encoded Elliptic Curve keys. Previously Mbed TLS was unable to parse keys which had only the optional parameters field of the ECPrivateKey structure. Found by Jethro Beekman, fixed in #1379.
    + Added an optimisation to return the plaintext data more quickly on unpadded CBC decryption, as stated in the mbedtls_cipher_update() documentation. Contributed by Andy Leiserson.
    + Fixed the overriding and ignoring of return values when parsing and writing to a file in the pk_sign program. Found by kevlut in #1142.
    + Added restrictions to the usage of the error code MBEDTLS_ERR_SSL_WANT_READ to situations where data needs to be fetched from the underlying transport in order to make progress. Previously, this error code was also occasionally returned when unexpected messages were being discarded, ignoring that further messages could potentially already be pending to be processed in the internal buffers; these cases led to deadlocks when event-driven I/O was used. Found and reported by Hubert Mis in #772.
    + Fixed buffer length assertions in the ssl_parse_certificate_request() function which led to a potential one byte overread of the message buffer.
    + Fixed invalid buffer sizes being passed to zlib during record compression and decompression.
    + Raised the soversion of libmbedcrypto to match the soversion of the maintained 2.7 branch. The soversion was increased in Mbed TLS version 2.7.1 to reflect breaking changes in that release, but the increment was missed in 2.8.0 and later releases outside of the 2.7 branch.</changelog>
  <changelog author="mpluskal@suse.com" date="1535025600">- Update to version 2.12.0:
  * Security
    + Fixed a vulnerability in the TLS ciphersuites based on use of CBC and SHA-384 in DTLS/TLS 1.0 to 1.2, that allowed an active network attacker to partially recover the plaintext of messages under certains conditions by exploiting timing side-channels.
    + Fixed a vulnerability in TLS ciphersuites based on CBC, in DTLS/TLS 1.0 to 1.2, that allowed a local attacker, with the ability to execute code on the local machine as well as to manipulate network packets, to partially recover the plaintext of messages under certain conditions by using a cache attack targetting an internal MD/SHA buffer.
    + Added a counter-measure against a vulnerability in TLS ciphersuites based on CBC, in DTLS/TLS 1.0 to 1.2, that allowed a local attacker with the ability to execute code on the local machine as well as manipulate network packets, to partially recover the plaintext of messages certain conditions (see previous entry) by using a cache attack targeting the SSL input record buffer.
  * Features
    + Added new cryptographic primitives, the stream cipher Chacha20, one-time authenticator Poly1305 and AEAD construct Chacha20-Poly1305, as defined in RFC 7539. Contributed by Daniel King.
    + Added support for the CHACHA20-POLY1305 ciphersuites from RFC 7905.
    + Made the receive and transmit buffers independently configurable in size, for situations where the outgoing buffer can be fixed at a smaller size than the incoming buffer
    + Added support for the AES based key wrapping modes defined by NIST SP 800-38F algorithms KW and KWP and by RFC's 3394 and 5649.
    + Added platform support for the Haiku OS.
  * Bugfix
    + Fixed the key_app_writer example which was creating an invalid ASN.1 tag by writing an additional leading zero byte. Found by Aryeh R. #1257.
    + Fixed a C++ compilation error, caused by a variable named new. Found and fixed by Hirotaka Niisato. #1783.
    + Fixed the "no symbols" warning issued by ranlib when building on Mac OS X. Fix contributed by tabascoeye.
    + Clarified documentation for mbedtls_ssl_write() to include 0 as a valid return value. Found by @davidwu2000. #839.
    + Fixed a memory leak in mbedtls_x509_csr_parse(). Found and fixed by catenacyber, Philippe Antoine. #1623.
    + Added length checks to some TLS parsing functions. Found and fixed by Philippe Antoine from Catena cyber. #1663.
    + Remove unused headers included in x509.c. Found by Chris Hanson and fixed by Brendan Shanks. #992.
    + Fixed compilation error when MBEDTLS_ARC4_C is disabled and MBEDTLS_CIPHER_NULL_CIPHER is enabled. Found by TrinityTonic in #1719.
    + Fixed the inline assembly for the MPI multiply helper function for i386 and i386 with SSE2. Found by László Langó. #1550.
    + Fixed the namespacing in header files. Remove the mbedtls namespacing in the #include in the header files. #857.
    + Fixed a compiler warning of 'use before initialisation' in mbedtls_pk_parse_key(). Found by Martin Boye Petersen and fixed by Dawid Drozd.#1098.
    + Fixed decryption of zero length messages (which contain all padding) when a CBC based ciphersuite was used together with Encrypt-then-MAC.
    + Fixed the ssl_client2 example to send application data with 0-length content when the request_size argument is set to 0 as stated in the documentation. #1833.
    + Corrected the documentation for mbedtls_ssl_get_session(). This API has deep copy of the session, and the peer certificate is not lost. #926.
    + Fixed issues when building to the C99 standard, using -std=c99. Fixed by Nick Wilson.
  * Changes
    + Fails when receiving a TLS alert message with an invalid length, or invalid zero-length messages when using TLS 1.2. Contributed by Espressif Systems.
    + Changed the default behaviour of mbedtls_hkdf_extract() to return an error when calling with a NULL salt and non-zero salt length. Contributed by Brian J Murray
    + Change the shebang line in Perl scripts to look up perl in the PATH. Contributed by fbrosson.
    + Allow overriding the time on Windows via the platform-time abstraction. Fixed by Nick Wilson.
    + Use gmtime_r/gmtime_s for thread-safety. Fixed by Nick Wilson.</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1544529600">- Update to version 2.14.1: [bsc#1118727, CVE-2018-19608]
  Security
  * Fix timing variations and memory access variations in RSA PKCS#1 v1.5
    decryption that could lead to a Bleichenbacher-style padding oracle
    attack. In TLS, this affects servers that accept ciphersuites based on
    RSA decryption (i.e. ciphersuites whose name contains RSA but not
    (EC)DH(E)). Discovered by Eyal Ronen (Weizmann Institute),  Robert Gillham
    (University of Adelaide), Daniel Genkin (University of Michigan),
    Adi Shamir (Weizmann Institute), David Wong (NCC Group), and Yuval Yarom
    (University of Adelaide, Data61). The attack is described in more detail
    in the paper available here: http://cat.eyalro.net/cat.pdf  CVE-2018-19608
  * In mbedtls_mpi_write_binary(), don't leak the exact size of the number
    via branching and memory access patterns. An attacker who could submit
    a plaintext for RSA PKCS#1 v1.5 decryption but only observe the timing
    of the decryption and not its result could nonetheless decrypt RSA
    plaintexts and forge RSA signatures. Other asymmetric algorithms may
    have been similarly vulnerable. Reported by Eyal Ronen, Robert Gillham,
    Daniel Genkin, Adi Shamir, David Wong and Yuval Yarom.
  * Wipe sensitive buffers on the stack in the CTR_DRBG and HMAC_DRBG
    modules.
  API Changes
  * The new functions mbedtls_ctr_drbg_update_ret() and
    mbedtls_hmac_drbg_update_ret() are similar to mbedtls_ctr_drbg_update()
    and mbedtls_hmac_drbg_update() respectively, but the new functions
    report errors whereas the old functions return void. We recommend that
    applications use the new functions.
- Version 2.14.0:
  Security
  * Fix overly strict DN comparison when looking for CRLs belonging to a
    particular CA. This previously led to ignoring CRLs when the CRL's issuer
    name and the CA's subject name differed in their string encoding (e.g.,
    one using PrintableString and the other UTF8String) or in the choice of
    upper and lower case. Reported by Henrik Andersson of Bosch GmbH in issue
    [#1784].
  * Fix a flawed bounds check in server PSK hint parsing. In case the
    incoming message buffer was placed within the first 64KiB of address
    space and a PSK-(EC)DHE ciphersuite was used, this allowed an attacker
    to trigger a memory access up to 64KiB beyond the incoming message buffer,
    potentially leading to an application crash or information disclosure.
  * Fix mbedtls_mpi_is_prime() to use more rounds of probabilistic testing. The
    previous settings for the number of rounds made it practical for an
    adversary to construct non-primes that would be erroneously accepted as
    primes with high probability. This does not have an impact on the
    security of TLS, but can matter in other contexts with numbers chosen
    potentially by an adversary that should be prime and can be validated.
    For example, the number of rounds was enough to securely generate RSA key
    pairs or Diffie-Hellman parameters, but was insufficient to validate
    Diffie-Hellman parameters properly.
    See "Prime and Prejudice" by by Martin R. Albrecht and Jake Massimo and
    Kenneth G. Paterson and Juraj Somorovsky.
  Features
  * Add support for temporarily suspending expensive ECC computations after
    some configurable amount of operations. This is intended to be used in
    constrained, single-threaded systems where ECC is time consuming and can
    block other operations until they complete. This is disabled by default,
    but can be enabled by MBEDTLS_ECP_RESTARTABLE at compile time and
    configured by mbedtls_ecp_set_max_ops() at runtime. It applies to the new
    xxx_restartable functions in ECP, ECDSA, PK and X.509 (CRL not supported
    yet), and to existing functions in ECDH and SSL (currently only
    implemented client-side, for ECDHE-ECDSA ciphersuites in TLS 1.2,
    including client authentication).
  * Add support for Arm CPU DSP extensions to accelerate asymmetric key
    operations. On CPUs where the extensions are available, they can accelerate
    MPI multiplications used in ECC and RSA cryptography. Contributed by
    Aurelien Jarno.
  * Extend RSASSA-PSS signature to allow a smaller salt size. Previously, PSS
    signature always used a salt with the same length as the hash, and returned
    an error if this was not possible. Now the salt size may be up to two bytes
    shorter. This allows the library to support all hash and signature sizes
    that comply with FIPS 186-4, including SHA-512 with a 1024-bit key.
  * Add support for 128-bit keys in CTR_DRBG. Note that using keys shorter
    than 256 bits limits the security of generated material to 128 bits.
  API Changes
  * Add a common error code of `MBEDTLS_ERR_PLATFORM_FEATURE_UNSUPPORTED` for
    a feature that is not supported by underlying alternative
    implementations implementing cryptographic primitives. This is useful for
    hardware accelerators that don't implement all options or features.
  New deprecations
  * All module specific errors following the form
    MBEDTLS_ERR_XXX_FEATURE_UNAVAILABLE that indicate a feature is not
    supported are deprecated and are now replaced by the new equivalent
    platform error.
  * All module specific generic hardware acceleration errors following the
    form MBEDTLS_ERR_XXX_HW_ACCEL_FAILED that are deprecated and are replaced
    by the equivalent plaform error.
  * Deprecate the function mbedtls_mpi_is_prime() in favor of
    mbedtls_mpi_is_prime_ext() which allows specifying the number of
    Miller-Rabin rounds.
  Bugfix
  * Fix wrong order of freeing in programs/ssl/ssl_server2 example
    application leading to a memory leak in case both
    MBEDTLS_MEMORY_BUFFER_ALLOC_C and MBEDTLS_MEMORY_BACKTRACE are set.
    Fixes #2069.
  * Fix a bug in the update function for SSL ticket keys which previously
    invalidated keys of a lifetime of less than a 1s. Fixes #1968.
  * Fix failure in hmac_drbg in the benchmark sample application, when
    MBEDTLS_THREADING_C is defined. Found by TrinityTonic, #1095
  * Fix a bug in the record decryption routine ssl_decrypt_buf()
    which lead to accepting properly authenticated but improperly
    padded records in case of CBC ciphersuites using Encrypt-then-MAC.
  * Fix memory leak and freeing without initialization in the example
    program programs/x509/cert_write. Fixes #1422.
  * Ignore IV in mbedtls_cipher_set_iv() when the cipher mode is
    MBEDTLS_MODE_ECB. Found by ezdevelop. Fixes #1091.
  * Zeroize memory used for buffering or reassembling handshake messages
    after use.
  * Use `mbedtls_platform_zeroize()` instead of `memset()` for zeroization
    of sensitive data in the example programs aescrypt2 and crypt_and_hash.
  * Change the default string format used for various X.509 DN attributes to
    UTF8String. Previously, the use of the PrintableString format led to
    wildcards and non-ASCII characters being unusable in some DN attributes.
    Reported by raprepo in #1860 and by kevinpt in #468. Fix contributed by
    Thomas-Dee.
  * Fix compilation failure for configurations which use compile time
    replacements of standard calloc/free functions through the macros
    MBEDTLS_PLATFORM_CALLOC_MACRO and MBEDTLS_PLATFORM_FREE_MACRO.
    Reported by ole-de and ddhome2006. Fixes #882, #1642 and #1706.
  Changes
  * Removed support for Yotta as a build tool.
  * Add tests for session resumption in DTLS.
  * Close a test gap in (D)TLS between the client side and the server side:
    test the handling of large packets and small packets on the client side
    in the same way as on the server side.
  * Change the dtls_client and dtls_server samples to work by default over
    IPv6 and optionally by a build option over IPv4.
  * Change the use of Windows threading to use Microsoft Visual C++ runtime
    calls, rather than Win32 API calls directly. This is necessary to avoid
    conflict with C runtime usage. Found and fixed by irwir.
  * Remember the string format of X.509 DN attributes when replicating
    X.509 DNs. Previously, DN attributes were always written in their default
    string format (mostly PrintableString), which could lead to CRTs being
    created which used PrintableStrings in the issuer field even though the
    signing CA used UTF8Strings in its subject field; while X.509 compliant,
    such CRTs were rejected in some applications, e.g. some versions of
    Firefox, curl and GnuTLS. Reported in #1033 by Moschn. Fix contributed by
    Thomas-Dee.
  * Improve documentation of mbedtls_ssl_get_verify_result().
    Fixes #517 reported by github-monoculture.
  * Add MBEDTLS_MPI_GEN_PRIME_FLAG_LOW_ERR flag to mbedtls_mpi_gen_prime() and
    use it to reduce error probability in RSA key generation to levels mandated
    by FIPS-186-4.
- Version 2.13.1
  API Changes
  * Extend the platform module with an abstraction mbedtls_platform_gmtime_r()
    whose implementation should behave as a thread-safe version of gmtime().
    This allows users to configure such an implementation at compile time when
    the target system cannot be deduced automatically, by setting the option
    MBEDTLS_PLATFORM_GMTIME_R_ALT. At this stage Mbed TLS is only able to
    automatically select implementations for Windows and POSIX C libraries.
  Bugfix
  * Fix build failures on platforms where only gmtime() is available but
    neither gmtime_r() nor gmtime_s() are present. Fixes #1907.
- Version 2.13.0
  Security
  * Fix an issue in the X.509 module which could lead to a buffer overread
    during certificate extensions parsing. In case of receiving malformed
    input (extensions length field equal to 0), an illegal read of one byte
    beyond the input buffer is made. Found and analyzed by Nathan Crandall.
  Features
  * Add support for fragmentation of outgoing DTLS handshake messages. This
    is controlled by the maximum fragment length as set locally or negotiated
    with the peer, as well as by a new per-connection MTU option, set using
    mbedtls_ssl_set_mtu().
  * Add support for auto-adjustment of MTU to a safe value during the
    handshake when flights do not get through (RFC 6347, section 4.1.1.1,
    last paragraph).
  * Add support for packing multiple records within a single datagram,
    enabled by default.
  * Add support for buffering out-of-order handshake messages in DTLS.
    The maximum amount of RAM used for this can be controlled by the
    compile-time constant MBEDTLS_SSL_DTLS_MAX_BUFFERING defined
    in mbedtls/config.h.
  API Changes
  * Add function mbedtls_ssl_set_datagram_packing() to configure
    the use of datagram packing (enabled by default).
  Bugfix
  * Fix a potential memory leak in mbedtls_ssl_setup() function. An allocation
    failure in the function could lead to other buffers being leaked.
  * Fixes an issue with MBEDTLS_CHACHAPOLY_C which would not compile if
    MBEDTLS_ARC4_C and MBEDTLS_CIPHER_NULL_CIPHER weren't also defined. #1890
  * Fix a memory leak in ecp_mul_comb() if ecp_precompute_comb() fails.
    Fix contributed by Espressif Systems.
  * Add ecc extensions only if an ecc based ciphersuite is used.
    This improves compliance to RFC 4492, and as a result, solves
    interoperability issues with BouncyCastle. Raised by milenamil in #1157.
  * Replace printf with mbedtls_printf in the ARIA module. Found by
    TrinityTonic in #1908.
  * Fix potential use-after-free in mbedtls_ssl_get_max_frag_len()
    and mbedtls_ssl_get_record_expansion() after a session reset. Fixes #1941.
  * Fix a bug that caused SSL/TLS clients to incorrectly abort the handshake
    with TLS versions 1.1 and earlier when the server requested authentication
    without providing a list of CAs. This was due to an overly strict bounds
    check in parsing the CertificateRequest message,
    introduced in Mbed TLS 2.12.0. Fixes #1954.
  * Fix a miscalculation of the maximum record expansion in
    mbedtls_ssl_get_record_expansion() in case of ChachaPoly ciphersuites,
    or CBC ciphersuites in (D)TLS versions 1.1 or higher. Fixes #1913, #1914.
  * Fix undefined shifts with negative values in certificates parsing
    (found by Catena cyber using oss-fuzz)
  * Fix memory leak and free without initialization in pk_encrypt
    and pk_decrypt example programs. Reported by Brace Stout. Fixes #1128.
  * Remove redundant else statement. Raised by irwir. Fixes #1776.
  Changes
  * Copy headers preserving timestamps when doing a "make install".
    Contributed by xueruini.
  * Allow the forward declaration of public structs. Contributed by Dawid
    Drozd. Fixes #1215 raised by randombit.
  * Improve compatibility with some alternative CCM implementations by using
    CCM test vectors from RAM.
  * Add support for buffering of out-of-order handshake messages.
  * Add warnings to the documentation of the HKDF module to reduce the risk
    of misusing the mbedtls_hkdf_extract() and mbedtls_hkdf_expand()
    functions. Fixes #1775. Reported by Brian J. Murray.</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1544529601">- Library package version bumped to libmbedtls12</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1546862400">- Update to version 2.16.0:
  Features
  * Add a new config.h option of MBEDTLS_CHECK_PARAMS that enables validation of parameters in the API. This allows detection of obvious misuses of the API, such as passing NULL pointers. The API of existing functions hasn't changed, but requirements on parameters have been made more explicit in the documentation. See the corresponding API documentation for each function to see for which parameter values it is defined. This feature is disabled by default. See its API documentation in config.h for additional steps you have to take when enabling it.
  API Changes
  * The following functions in the random generator modules have been deprecated and replaced as shown below. The new functions change the return type from void to int to allow returning error codes when using MBEDTLS_&lt;MODULE&gt;_ALT for the underlying AES or message digest primitive. Fixes #1798. mbedtls_ctr_drbg_update() -&gt; mbedtls_ctr_drbg_update_ret() mbedtls_hmac_drbg_update() -&gt; mbedtls_hmac_drbg_update_ret()
  * Extend ECDH interface to enable alternative implementations.
  * Deprecate error codes of the form MBEDTLS_ERR_xxx_INVALID_KEY_LENGTH for ARIA, CAMELLIA and Blowfish. These error codes will be replaced by the more generic per-module error codes MBEDTLS_ERR_xxx_BAD_INPUT_DATA.
  * Additional parameter validation checks have been added for the following modules - AES, ARIA, Blowfish, CAMELLIA, CCM, GCM, DHM, ECP, ECDSA, ECDH, ECJPAKE, SHA, Chacha20 and Poly1305, cipher, pk, RSA, and MPI. Where modules have had parameter validation added, existing parameter checks may have changed. Some modules, such as Chacha20 had existing parameter validation whereas other modules had little. This has now been changed so that the same level of validation is present in all modules, and that it is now optional with the MBEDTLS_CHECK_PARAMS flag which by default is off. That means that checks which were previously present by default will no longer be.
  New deprecations
  * Deprecate mbedtls_ctr_drbg_update() and mbedtls_hmac_drbg_update() in favor of functions that can return an error code.
  Bugfix
  * Fix for Clang, which was reporting a warning for the bignum.c inline assembly for AMD64 targets creating string literals greater than those permitted by the ISO C99 standard. Found by Aaron Jones. Fixes #482.
  * Fix runtime error in mbedtls_platform_entropy_poll() when run through qemu user emulation. Reported and fix suggested by randombit. Fixes #1212.
  * Fix an unsafe bounds check when restoring an SSL session from a ticket. This could lead to a buffer overflow, but only in case ticket authentication was broken. Reported and fix suggested by Guido Vranken in #659.
  * Add explicit integer to enumeration type casts to example program programs/pkey/gen_key which previously led to compilation failure on some toolchains. Reported by phoenixmcallister. Fixes #2170.
  * Clarify documentation of mbedtls_ssl_set_own_cert() regarding the absence of check for certificate/key matching. Reported by Attila Molnar, #507.
  * Fix double initialization of ECC hardware that made some accelerators hang.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1567512000">- Update to version 2.16.2:
  * Security improvements and bugfixes
- Use ninja to for build</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1573646400">- Update to version 2.16.3:
  * Security improvements and bugfixes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1585828800">- Update to version 2.16.5:
  * Security improvements and bugfixes</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597665600">- update to 2.23.0:
  a lot of changes see https://github.com/ARMmbed/mbedtls/releases/tag/v2.23.0
  * Fix a side channel vulnerability in modular exponentiation that could reveal an RSA private key used in a secure enclave. Noticed by Sangho Lee, Ming-Wei Shih, Prasun Gera, Taesoo Kim and Hyesoon Kim (Georgia Institute of Technology); and Marcus Peinado (Microsoft Research). Reported by Raoul Strackx (Fortanix) in #3394.
  * Fix side channel in mbedtls_ecp_check_pub_priv() and mbedtls_pk_parse_key() / mbedtls_pk_parse_keyfile() (when loading a private key that didn't include the uncompressed public key), as well as mbedtls_ecp_mul() / mbedtls_ecp_mul_restartable() when called with a NULL f_rng argument. An attacker with access to precise enough timing and memory access information (typically an untrusted operating system attacking a secure enclave) could fully recover the ECC private key. Found and reported by Alejandro Cabrera Aldaya and Billy Brumley.
  * Fix issue in Lucky 13 counter-measure that could make it ineffective when hardware accelerators were used (using one of the MBEDTLS_SHAxxx_ALT macros). This would cause the original Lucky 13 attack to be possible in those configurations, allowing an active network attacker to recover plaintext after repeated timing measurements under some conditions. Reported and fix suggested by Luc Perneel in #3246.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1598875200">- Do not run testsuite in parallel - its not reliable</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1599480000">- Add workaround for failing builds (Python not found) due to
  https://gitlab.kitware.com/cmake/cmake/-/issues/21168</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1599652800">- update to 2.24.0:
  * see https://github.com/ARMmbed/mbedtls/releases/tag/v2.24.0
  * Fix a vulnerability in the verification of X.509 certificates when matching
  the expected common name (the cn argument of mbedtls_x509_crt_verify())
  with the actual certificate name: when the subjecAltName extension is
  present, the expected name was compared to any name in that extension
  regardless of its type. This means that an attacker could for example
  impersonate a 4-bytes or 16-byte domain by getting a certificate for the
  corresponding IPv4 or IPv6 (this would require the attacker to control that
  IP address, though). Similar attacks using other subjectAltName name types
  might be possible.
  * When checking X.509 CRLs, a certificate was only considered as revoked if
  its revocationDate was in the past according to the local clock if
  available. In particular, on builds without MBEDTLS_HAVE_TIME_DATE,
  certificates were never considered as revoked. On builds with
  MBEDTLS_HAVE_TIME_DATE, an attacker able to control the local clock (for
  example, an untrusted OS attacking a secure enclave) could prevent
  revocation of certificates via CRLs. Fixed by no longer checking the
  revocationDate field, in accordance with RFC 5280. Reported by yuemonangong
  in #3340. Reported independently and fixed by Raoul Strackx and Jethro
  * In (D)TLS record decryption, when using a CBC ciphersuites without the
  Encrypt-then-Mac extension, use constant code flow memory access patterns
  to extract and check the MAC. This is an improvement to the existing
  countermeasure against Lucky 13 attacks. The previous countermeasure was
  effective against network-based attackers, but less so against local
  attackers. The new countermeasure defends against local attackers, even if
  they have access to fine-grained measurements. In particular, this fixes a
  local Lucky 13 cache attack found and reported by Tuba Yavuz, Farhaan
  Fowze, Ken (Yihan) Bai, Grant Hernandez, and Kevin Butler (University of
  Florida) and Dave Tian (Purdue University).
  * Fix side channel in RSA private key operations and static (finite-field)
  Diffie-Hellman. An adversary with precise enough timing and memory access
  information (typically an untrusted operating system attacking a secure
  enclave) could bypass an existing counter-measure (base blinding) and
  potentially fully recover the private key.
  * Fix a 1-byte buffer overread in mbedtls_x509_crl_parse_der(). Credit to
  OSS-Fuzz for detecting the problem and to Philippe Antoine for pinpointing
  the problematic code.
  * Zeroising of plaintext buffers in mbedtls_ssl_read() to erase unused
  application data from memory.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1608638400">- update to 2.25.0:
  * This release of Mbed TLS provides bug fixes, minor enhancements and new
  features. This release includes fixes for security issues.
  * see https://github.com/ARMmbed/mbedtls/releases/tag/v2.25.0
  * The functions mbedtls_cipher_auth_encrypt() and
  mbedtls_cipher_auth_decrypt() would write past the minimum documented size
  of the output buffer when used with NIST_KW. As a result, code using those
  functions as documented with NIST_KW could have a buffer overwrite of up to
  15 bytes, with consequences ranging up to arbitrary code execution
  depending on the location of the output buffer.
  * Limit the size of calculations performed by mbedtls_mpi_exp_mod to
  MBEDTLS_MPI_MAX_SIZE to prevent a potential denial of service when generating
  Diffie-Hellman key pairs. Credit to OSS-Fuzz.
  * A failure of the random generator was ignored in mbedtls_mpi_fill_random(),
  which is how most uses of randomization in asymmetric cryptography (including
  key generation, intermediate value randomization and blinding) are implemented.
  This could cause failures or the silent use of non-random values. A random
  generator can fail if it needs reseeding and cannot not obtain entropy, or due
  to an internal failure (which, for Mbed TLS's own CTR_DRBG or HMAC_DRBG, can
  only happen due to a misconfiguration).
  * Fix a compliance issue whereby we were not checking the tag on the algorithm
  parameters (only the size) when comparing the signature in the description part
  of the cert to the real signature. This meant that a NULL algorithm parameters
  entry would look identical to an array of REAL (size zero) to the library and
  thus the certificate would be considered valid. However, if the parameters do
  not match in any way then the certificate should be considered invalid, and
  indeed OpenSSL marks these certs as invalid when mbedtls did not. Many thanks
  to guidovranken who found this issue via differential fuzzing and reported it
  in #3629.
  * Zeroising of local buffers and variables which are used for calculations in
  mbedtls_pkcs5_pbkdf2_hmac(), mbedtls_internal_sha*_process(),
  mbedtls_internal_md*_process() and mbedtls_internal_ripemd160_process()
  functions to erase sensitive data from memory. Reported by Johan Malmgren and
  Johan Uppman Bruce from Sectra.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1611057600">- Fix build for Leap targets
- Use upstream tarball name</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1616414400">- Update to 2.26.0: [bsc#1189589, CVE-2021-24119]
  * * This release of Mbed TLS provides bug fixes, minor enhancements and new
  features. This release includes fixes for security issues.
  * see https://github.com/ARMmbed/mbedtls/releases/tag/v2.26.0
- Fix build with patch from https://github.com/ARMmbed/mbedtls/pull/4237
  mbedtls-4237.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1618488000">-  Workaround for building with gcc-11 boo#1181876</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1626782400">- Update to 2.27.0:
  API changes:
  * Update AEAD output size macros to bring them in line with the PSA Crypto
    API version 1.0 spec. This version of the spec parameterizes them on the
    key type used, as well as the key bit-size in the case of
    PSA_AEAD_TAG_LENGTH.
    The old versions of these macros were renamed and deprecated as follows:
  - PSA_AEAD_TAG_LENGTH          -&gt; PSA_AEAD_TAG_LENGTH_1_ARG
  - PSA_AEAD_ENCRYPT_OUTPUT_SIZE -&gt; PSA_AEAD_ENCRYPT_OUTPUT_SIZE_2_ARG
  - PSA_AEAD_DECRYPT_OUTPUT_SIZE -&gt; PSA_AEAD_DECRYPT_OUTPUT_SIZE_2_ARG
  - PSA_AEAD_UPDATE_OUTPUT_SIZE  -&gt; PSA_AEAD_UPDATE_OUTPUT_SIZE_2_ARG
  - PSA_AEAD_FINISH_OUTPUT_SIZE  -&gt; PSA_AEAD_FINISH_OUTPUT_SIZE_1_ARG
  - PSA_AEAD_VERIFY_OUTPUT_SIZE  -&gt; PSA_AEAD_VERIFY_OUTPUT_SIZE_1_ARG
  * Implement one-shot cipher functions, psa_cipher_encrypt and
    psa_cipher_decrypt, according to the PSA Crypto API 1.0.0
    specification.
  Features:
  * Add mbedtls_rsa_rsassa_pss_sign_ext() function allowing to generate a
    signature with a specific salt length. This function allows to validate
    test cases provided in the NIST's CAVP test suite.
  * Added support for built-in driver keys through the PSA opaque crypto
    driver interface. Refer to the documentation of
    MBEDTLS_PSA_CRYPTO_BUILTIN_KEYS for more information.
  * Implement psa_sign_message() and psa_verify_message().
  * The new function mbedtls_mpi_random() generates a random value in a
    given range uniformly.
  * Implement psa_mac_compute() and psa_mac_verify() as defined in the
    PSA Cryptograpy API 1.0.0 specification.
  * MBEDTLS_ECP_MAX_BITS is now determined automatically from the configured
    curves and no longer needs to be configured explicitly to save RAM.
  Security
  * Fix a bias in the generation of finite-field Diffie-Hellman-Merkle (DHM)
    private keys and of blinding values for DHM and elliptic curves (ECP)
    computations.
  * Fix a potential side channel vulnerability in ECDSA ephemeral key generation.
    An adversary who is capable of very precise timing measurements could
    learn partial information about the leading bits of the nonce used for the
    signature, allowing the recovery of the private key after observing a
    large number of signature operations. This completes a partial fix in
    Mbed TLS 2.20.0.
  * It was possible to configure MBEDTLS_ECP_MAX_BITS to a value that is
    too small, leading to buffer overflows in ECC operations. Fail the build
    in such a case.
  * An adversary with access to precise enough information about memory
    accesses (typically, an untrusted operating system attacking a secure
    enclave) could recover an RSA private key after observing the victim
    performing a single private-key operation.
  * An adversary with access to precise enough timing information (typically, a
    co-located process) could recover a Curve25519 or Curve448 static ECDH key
    after inputting a chosen public key and observing the victim performing the
    corresponding private-key operation.
  Bugfix
  * Add printf function attributes to mbedtls_debug_print_msg to ensure we
    get printf format specifier warnings.
  * Fix premature fopen() call in mbedtls_entropy_write_seed_file which may
    lead to seed file corruption in the case where the path to the seed file is
    equal to MBEDTLS_PLATFORM_STD_NV_SEED_FILE.
  * PSA functions other than psa_open_key now return PSA_ERROR_INVALID_HANDLE
    rather than PSA_ERROR_DOES_NOT_EXIST for an invalid handle, bringing them
    in line with version 1.0.0 of the specification.
  * PSA functions creating a key now return PSA_ERROR_INVALID_ARGUMENT rather
    than PSA_ERROR_INVALID_HANDLE when the identifier specified for the key
    to create is not valid, bringing them in line with version 1.0.0 of the
    specification.
  * Fix some cases in the bignum module where the library constructed an
    unintended representation of the value 0 which was not processed
    correctly by some bignum operations. This could happen when
    mbedtls_mpi_read_string() was called on "-0", or when
    mbedtls_mpi_mul_mpi() and mbedtls_mpi_mul_int() was called with one of
    the arguments being negative and the other being 0.
  * Fix a bug in ECDSA that would cause it to fail when the hash is all-bits
    zero.
  * Fix a compilation error when MBEDTLS_ECP_RANDOMIZE_MXZ_ALT is
    defined.
  * Fix an incorrect error code when parsing a PKCS#8 private key.
  * In a TLS client, enforce the Diffie-Hellman minimum parameter size
    set with mbedtls_ssl_conf_dhm_min_bitlen() precisely. Before, the
    minimum size was rounded down to the nearest multiple of 8.
  * In library/net_sockets.c, _POSIX_C_SOURCE and _XOPEN_SOURCE are
    defined to specific values.  If the code is used in a context
    where these are already defined, this can result in a compilation
    error.  Instead, assume that if they are defined, the values will
    be adequate to build Mbed TLS.
  * The cipher suite TLS-RSA-WITH-CAMELLIA-256-GCM-SHA384 was not available
    when SHA-1 was disabled and was offered when SHA-1 was enabled but SHA-384
    was disabled. Fix the dependency.
  * Do not offer SHA384 cipher suites when SHA-384 is disabled.
  * With MBEDTLS_PSA_CRYPTO_C disabled, some functions were getting built
    nonetheless, resulting in undefined reference errors when building a
    shared library.
  * Fix test suite code on platforms where int32_t is not int, such as
    Arm Cortex-M.
  * Fix some issues affecting MBEDTLS_ARIA_ALT implementations: a misplaced
    directive in a header and a missing initialization in the self-test.
  * Fix a missing initialization in the Camellia self-test, affecting
    MBEDTLS_CAMELLIA_ALT implementations.
  * Restore the ability to configure PSA via Mbed TLS options to support RSA
    key pair operations but exclude RSA key generation. When MBEDTLS_GENPRIME
    is not defined PSA will no longer attempt to use mbedtls_rsa_gen_key().
  * Fix a regression introduced in 2.24.0 which broke (D)TLS CBC ciphersuites
    (when the encrypt-then-MAC extension is not in use) with some ALT
    implementations of the underlying hash (SHA-1, SHA-256, SHA-384), causing
    the affected side to wrongly reject valid messages.
  * Remove outdated check-config.h check that prevented implementing the
    timing module on Mbed OS.
  * Fix PSA_ALG_TLS12_PRF and PSA_ALG_TLS12_PSK_TO_MS being too permissive
    about missing inputs.
  * Fix a resource leak in a test suite with an alternative AES
    implementation.
  * Fix a crash in mbedtls_mpi_debug_mpi on a bignum having 0 limbs. This
    could notably be triggered by setting the TLS debug level to 3 or above
    and using a Montgomery curve for the key exchange.
  * psa_verify_hash() was relying on implementation-specific behavior of
    mbedtls_rsa_rsassa_pss_verify() and was causing failures in some _ALT
    implementations. This reliance is now removed.
  * Disallow inputs of length different from the corresponding hash when
    signing or verifying with PSA_ALG_RSA_PSS (The PSA Crypto API mandates
    that PSA_ALG_RSA_PSS uses the same hash throughout the algorithm.)
  * Fix a null pointer dereference when mbedtls_mpi_exp_mod() was called with
    A=0 represented with 0 limbs. Up to and including Mbed TLS 2.26, this bug
    could not be triggered by code that constructed A with one of the
    mbedtls_mpi_read_xxx functions (including in particular TLS code) since
    those always built an mpi object with at least one limb.
  * Fix mbedtls_mpi_gcd(G,A,B) when the value of B is zero. This had no
    effect on Mbed TLS's internal use of mbedtls_mpi_gcd(), but may affect
    applications that call mbedtls_mpi_gcd() directly.
  * The PSA API no longer allows the creation or destruction of keys with a
    read-only lifetime. The persistence level PSA_KEY_PERSISTENCE_READ_ONLY
    can now only be used as intended, for keys that cannot be modified through
    normal use of the API.
  * When MBEDTLS_PSA_CRYPTO_SPM is enabled, crypto_spe.h was not included
    in all the right places. Include it from crypto_platform.h, which is
    the natural place.
  * mbedtls_pk_sign() and mbedtls_pk_verify() and their extended and
    restartable variants now always honor the specified hash length if
    nonzero. Before, for RSA, hash_len was ignored in favor of the length of
    the specified hash algorithm.
  * Fix which alert is sent in some cases to conform to the
    applicable RFC: on an invalid Finished message value, an
    invalid max_fragment_length extension, or an
    unsupported extension used by the server.
  * Correct (change from 12 to 13 bytes) the value of the macro describing the
    maximum nonce length returned by psa_aead_generate_nonce().
  Changes
  * Add extra printf compiler warning flags to builds.
  * Fix memsan build false positive in x509_crt.c with Clang 11
  * Fix the setting of the read timeout in the DTLS sample programs.
  * Remove the AES sample application programs/aes/aescrypt2 which shows
    bad cryptographic practice.
  * Alternative implementations of CMAC may now opt to not support 3DES as a
    CMAC block cipher, and still pass the CMAC self test.
  * Remove configs/config-psa-crypto.h, which was identical to the default
    configuration except for having some extra cryptographic mechanisms
    enabled and for unintended differences. This configuration was primarily
    intended to demonstrate the PSA API, and lost most of its usefulness when
    MBEDTLS_PSA_CRYPTO_C became enabled by default.
  * When building the test suites with GNU make, invoke python3 or python, not
    python2, which is no longer supported upstream.
  * When using session cache based session resumption on the server,
    double-check that custom session cache implementations return
    sessions which are consistent with the negotiated ciphersuite
    and compression method.
  * Fix build failure on MinGW toolchain when __USE_MING_ANSI_STDIO is on.
    When that flag is on, standard GNU C printf format specifiers
    should be used.
  * Reduce the default value of MBEDTLS_ECP_WINDOW_SIZE. This reduces RAM usage
    during ECC operations at a negligible performance cost.
  * mbedtls_mpi_read_binary(), mbedtls_mpi_read_binary_le() and
    mbedtls_mpi_read_string() now construct an mbedtls_mpi object with 0 limbs
    when their input has length 0. Note that this is an implementation detail
    and can change at any time, so this change should be transparent, but it
    may result in mbedtls_mpi_write_binary() or mbedtls_mpi_write_string()
    now writing an empty string where it previously wrote one or more
    zero digits when operating from values constructed with an mpi_read
    function and some mpi operations.
  * Implicitly add PSA_KEY_USAGE_SIGN_MESSAGE key usage policy flag when
    PSA_KEY_USAGE_SIGN_HASH flag is set and PSA_KEY_USAGE_VERIFY_MESSAGE flag
    when PSA_KEY_USAGE_VERIFY_HASH flag is set. This usage flag extension
    is also applied when loading a key from storage.
  * Remove mbedtls-4237.patch upstream
  * Library soname bump to libmbedcrypto7</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1642075200">- Update to 2.28.0: (bsc#1193979, CVE-2021-45450)
  API changes
  * Some fields of mbedtls_ssl_session and mbedtls_ssl_config are in a
  different order. This only affects applications that define such
  structures directly or serialize them.
  Requirement changes
  * Sign-magnitude and one's complement representations for signed integers are
  not supported. Two's complement is the only supported representation.
  Removals
  * Remove config option MBEDTLS_TLS_DEFAULT_ALLOW_SHA1_IN_CERTIFICATES,
  which allowed SHA-1 in the default TLS configuration for certificate
  signing. It was intended to facilitate the transition in environments
  with SHA-1 certificates. SHA-1 is considered a weak message digest and
  its use constitutes a security risk.
  * Remove the partial support for running unit tests via Greentea on Mbed OS,
  which had been unmaintained since 2018.
  Features
  * The identifier of the CID TLS extension can be configured by defining
  MBEDTLS_TLS_EXT_CID at compile time.
  * Warn if errors from certain functions are ignored. This is currently
  supported on GCC-like compilers and on MSVC and can be configured through
  the macro MBEDTLS_CHECK_RETURN. The warnings are always enabled
  (where supported) for critical functions where ignoring the return
  value is almost always a bug. Enable the new configuration option
  MBEDTLS_CHECK_RETURN_WARNING to get warnings for other functions. This
  is currently implemented in the AES, DES and md modules, and will be
  extended to other modules in the future.
  * Add missing PSA macros declared by PSA Crypto API 1.0.0:
  PSA_ALG_IS_SIGN_HASH, PSA_ALG_NONE, PSA_HASH_BLOCK_LENGTH, PSA_KEY_ID_NULL.
  * Add new API mbedtls_ct_memcmp for constant time buffer comparison.
  * Add PSA API definition for ARIA.
  Security
  * Zeroize several intermediate variables used to calculate the expected
  value when verifying a MAC or AEAD tag. This hardens the library in
  case the value leaks through a memory disclosure vulnerability. For
  example, a memory disclosure vulnerability could have allowed a
  man-in-the-middle to inject fake ciphertext into a DTLS connection.
  * In psa_cipher_generate_iv() and psa_cipher_encrypt(), do not read back
  from the output buffer. This fixes a potential policy bypass or decryption
  oracle vulnerability if the output buffer is in memory that is shared with
  an untrusted application.
  * Fix a double-free that happened after mbedtls_ssl_set_session() or
  mbedtls_ssl_get_session() failed with MBEDTLS_ERR_SSL_ALLOC_FAILED
  (out of memory). After that, calling mbedtls_ssl_session_free()
  and mbedtls_ssl_free() would cause an internal session buffer to
  be free()'d twice.
  Bugfix
  * Stop using reserved identifiers as local variables. Fixes #4630.
  * The GNU makefiles invoke python3 in preference to python except on Windows.
  * The check was accidentally not performed when cross-compiling for Windows
  on Linux. Fix this. Fixes #4774.
  * Prevent divide by zero if either of PSA_CIPHER_ENCRYPT_OUTPUT_SIZE() or
  PSA_CIPHER_UPDATE_OUTPUT_SIZE() were called using an asymmetric key type.
  * Fix a parameter set but unused in psa_crypto_cipher.c. Fixes #4935.
  * Don't use the obsolete header path sys/fcntl.h in unit tests.
  These header files cause compilation errors in musl.
  Fixes #4969.
  * Fix missing constraints on x86_64 and aarch64 assembly code
  for bignum multiplication that broke some bignum operations with
  (at least) Clang 12.
  Fixes #4116, #4786, #4917, #4962.
  * Fix mbedtls_cipher_crypt: AES-ECB when MBEDTLS_USE_PSA_CRYPTO is enabled.
  * Failures of alternative implementations of AES or DES single-block
  functions enabled with MBEDTLS_AES_ENCRYPT_ALT, MBEDTLS_AES_DECRYPT_ALT,
  MBEDTLS_DES_CRYPT_ECB_ALT or MBEDTLS_DES3_CRYPT_ECB_ALT were ignored.
  This does not concern the implementation provided with Mbed TLS,
  where this function cannot fail, or full-module replacements with
  MBEDTLS_AES_ALT or MBEDTLS_DES_ALT. Reported by Armelle Duboc in #1092.
  * Some failures of HMAC operations were ignored. These failures could only
  happen with an alternative implementation of the underlying hash module.
  * Fix the error returned by psa_generate_key() for a public key. Fixes #4551.
  * Fix the build of sample programs when neither MBEDTLS_ERROR_C nor
  MBEDTLS_ERROR_STRERROR_DUMMY is enabled.
  * Fix PSA_ALG_RSA_PSS verification accepting an arbitrary salt length.
  This algorithm now accepts only the same salt length for verification
  that it produces when signing, as documented. Use the new algorithm
  PSA_ALG_RSA_PSS_ANY_SALT to accept any salt length. Fixes #4946.
  * The existing predicate macro name PSA_ALG_IS_HASH_AND_SIGN is now reserved
  for algorithm values that fully encode the hashing step, as per the PSA
  Crypto API specification. This excludes PSA_ALG_RSA_PKCS1V15_SIGN_RAW and
  PSA_ALG_ECDSA_ANY. The new predicate macro PSA_ALG_IS_SIGN_HASH covers
  all algorithms that can be used with psa_{sign,verify}_hash(), including
  these two.
  * Fix issue in Makefile on Linux with SHARED=1, that caused shared libraries
  not to list other shared libraries they need.
  * Fix a bug in mbedtls_gcm_starts() when the bit length of the iv
  exceeds 2^32. Fixes #4884.
  * Fix an uninitialized variable warning in test_suite_ssl.function with GCC
  version 11.
  * Fix the build when no SHA2 module is included. Fixes #4930.
  * Fix the build when only the bignum module is included. Fixes #4929.
  * Fix a potential invalid pointer dereference and infinite loop bugs in
  pkcs12 functions when the password is empty. Fix the documentation to
  better describe the inputs to these functions and their possible values.
  Fixes #5136.
  * The key usage flags PSA_KEY_USAGE_SIGN_MESSAGE now allows the MAC
  operations psa_mac_compute() and psa_mac_sign_setup().
  * The key usage flags PSA_KEY_USAGE_VERIFY_MESSAGE now allows the MAC
  operations psa_mac_verify() and psa_mac_verify_setup().
  Changes
  * Set config option MBEDTLS_TLS_DEFAULT_ALLOW_SHA1_IN_KEY_EXCHANGE to be
  disabled by default.
  * Improve the performance of base64 constant-flow code. The result is still
  slower than the original non-constant-flow implementation, but much faster
  than the previous constant-flow implementation. Fixes #4814.
  * Indicate in the error returned if the nonce length used with
  ChaCha20-Poly1305 is invalid, and not just unsupported.
  * The mbedcrypto library includes a new source code module constant_time.c,
  containing various functions meant to resist timing side channel attacks.
  * This module does not have a separate configuration option, and functions
  from this module will be included in the build as required. Currently
  most of the interface of this module is private and may change at any
  time.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1642420800">- Fix baselib.conf</changelog>
  <changelog author="Alexander Bergmann &lt;abergmann@suse.com&gt;" date="1671624000">- Fix potential heap buffer overread and overwrite in DTLS if
  MBEDTLS_SSL_DTLS_CONNECTION_ID is enabled and
  MBEDTLS_SSL_CID_IN_LEN_MAX &gt; 2 * MBEDTLS_SSL_CID_OUT_LEN_MAX.
  (bsc#1206576, CVE-2022-46393).
  Add: mbedtls-CVE-2022-46393.patch</changelog>
</package>
<package pkgid="da031f5bcec6ed26a6c31cbd5b51a97e8c6380aa29d783da09d4ad90e88f27aa" name="libmbedcrypto7" arch="i586">
  <version epoch="0" ver="2.28.0" rel="bp154.2.3.1"/>
  <changelog author="mpluskal@suse.com" date="1531137600">- Update to version 2.11.0:
  * Features
    + Added support for the XTS block cipher mode with AES (AES-XTS). Contributed by Aorimn in pull request #414.
    + Implemented the HMAC-based extract-and-expand key derivation function (HKDF) per RFC 5869. Contributed by Thomas Fossati.
    + For TLS servers, added support for offloading private key operations to an external cryptoprocessor. Private key operations can be asynchronous to allow non-blocking operation of the TLS server stack.
    + Added support for ARIA cipher (RFC 5794) and associated TLS ciphersuites (RFC 6209). ARIA is disabled by default. To enable, see MBEDTLS_ARIA_C in config.h.
    + Added support for the CCM* block cipher mode as defined in IEEE Std 802.15.4.
    + Added an additional block mode, OFB (Output Feedback) per NIST SP 800-38a, to the AES module and cipher abstraction module.
  * API Changes
    + Mbed TLS 2.11.0 maintains source code compatibility with the last minor version, Mbed TLS 2.9.0, but extends the interface with additional capabilities. Mbed TLS 2.11.0 modifies the ABI and increases the SOVERSION.
  * Bugfix
    + Fixed the cert_write example to handle certificates signed with elliptic curves as well as RSA. Fixes #777 found by dbedev.
    + Fixed the redefinition of _WIN32_WINNT, to avoid overriding a definition used by user applications. Found and fixed by Fabio Alessandrelli.
    + Fixed compilation warnings with the IAR toolchain on 32-bit platforms. Reported by rahmanih in #683.
    + Fixed an issue with MicroBlaze support in bn_mul.h which was causing the build to fail. Found by zv-io. Fixes #1651.
    + Fixed braces in mbedtls_memory_buffer_alloc_status(). Found by sbranden in #552.
    + Added the macro MBEDTLS_X509_MAX_FILE_PATH_LEN that enables the user to configure the maximum length of a file path that can be buffered when calling mbedtls_x509_crt_parse_path(). Fixes #492.
    + Fixed redundant declaration of mbedtls_ssl_list_ciphersuites. Raised by TrinityTonic in #1359.
- Changes for version 2.9.0:
  + Security
    + Fixed an issue in the X.509 module which could lead to a buffer overread during certificate validation. Additionally, the issue could also lead to unnecessary callback checks being made or to some validation checks to be omitted. The overread could be triggered remotely, while the other issues would require a non DER-compliant certificate to be correctly signed by a trusted CA, or a trusted CA with a non DER-compliant certificate. Found by luocm. Fixes #825.
    + Fixed the buffer length assertion in the ssl_parse_certificate_request() function which could lead to an arbitrary overread of the message buffer. The overreads could be caused by receiving a malformed algorithms section which was too short. In builds with debug output, this overread data was output with the debug data.
    + Fixed a client-side bug in the validation of the server's ciphersuite choice which could potentially lead to the client accepting a ciphersuite it didn't offer or a ciphersuite that could not be used with the TLS or DTLS version chosen by the server. This could lead to corruption of internal data structures for some configurations.
  * Features
    + Added an option of MBEDTLS_AES_FEWER_TABLES, to dynamically compute smaller AES tables during runtime, thereby reducing the RAM/ROM footprint by ~6KiB. Suggested and contributed by jkivilin.
    + Added initial support for Curve448 (RFC 7748). So far only mbedtls_ecp_mul() and ECDH primitive functions (mbedtls_ecdh_gen_public(), mbedtls_ecdh_compute_shared()) are supported for now. Contributed by Nicholas Wilson.
  * API Changes
    + Mbed TLS 2.9.0 maintains source code and binary compatibility with the last minor version, Mbed TLS 2.8.0, but extends the interface with additional capabilities.
    + Extended the API with the function of mbedtls_net_poll() to allow user applications to wait for a network context to become ready before reading or writing.
    + Added the function mbedtls_ssl_check_pending() to the public API to allow a check for whether more more data is pending to be processed in the internal message buffers. This function is necessary to determine the underlying transport when event-driven IO is used.
  * Bugfix
    + Fixed a spurious uninitialized variable warning in cmac.c. Fix independently contributed by Brian J Murray and David Brown.
    + Added missing dependencies in test suites that led to build failures in configurations that omit certain hashes or public-key algorithms. Fixes #1040.
    + Fixed a C89 incompatibility issue in benchmark.c. Contributed by Brendan Shanks. Fixes #1353.
    + Added missing dependencies for MBEDTLS_HAVE_TIME_DATE and MBEDTLS_VERSION_FEATURES in some test suites. Contributed by Deomid Ryabkov. Fixes #1299, #1475.
    + Fixed the Makefile build process for building shared libraries on Mac OS X. Fixed by mnacamura.
    + Fixed parsing of PKCS#8 encoded Elliptic Curve keys. Previously Mbed TLS was unable to parse keys which had only the optional parameters field of the ECPrivateKey structure. Found by Jethro Beekman, fixed in #1379.
    + Added an optimisation to return the plaintext data more quickly on unpadded CBC decryption, as stated in the mbedtls_cipher_update() documentation. Contributed by Andy Leiserson.
    + Fixed the overriding and ignoring of return values when parsing and writing to a file in the pk_sign program. Found by kevlut in #1142.
    + Added restrictions to the usage of the error code MBEDTLS_ERR_SSL_WANT_READ to situations where data needs to be fetched from the underlying transport in order to make progress. Previously, this error code was also occasionally returned when unexpected messages were being discarded, ignoring that further messages could potentially already be pending to be processed in the internal buffers; these cases led to deadlocks when event-driven I/O was used. Found and reported by Hubert Mis in #772.
    + Fixed buffer length assertions in the ssl_parse_certificate_request() function which led to a potential one byte overread of the message buffer.
    + Fixed invalid buffer sizes being passed to zlib during record compression and decompression.
    + Raised the soversion of libmbedcrypto to match the soversion of the maintained 2.7 branch. The soversion was increased in Mbed TLS version 2.7.1 to reflect breaking changes in that release, but the increment was missed in 2.8.0 and later releases outside of the 2.7 branch.</changelog>
  <changelog author="mpluskal@suse.com" date="1535025600">- Update to version 2.12.0:
  * Security
    + Fixed a vulnerability in the TLS ciphersuites based on use of CBC and SHA-384 in DTLS/TLS 1.0 to 1.2, that allowed an active network attacker to partially recover the plaintext of messages under certains conditions by exploiting timing side-channels.
    + Fixed a vulnerability in TLS ciphersuites based on CBC, in DTLS/TLS 1.0 to 1.2, that allowed a local attacker, with the ability to execute code on the local machine as well as to manipulate network packets, to partially recover the plaintext of messages under certain conditions by using a cache attack targetting an internal MD/SHA buffer.
    + Added a counter-measure against a vulnerability in TLS ciphersuites based on CBC, in DTLS/TLS 1.0 to 1.2, that allowed a local attacker with the ability to execute code on the local machine as well as manipulate network packets, to partially recover the plaintext of messages certain conditions (see previous entry) by using a cache attack targeting the SSL input record buffer.
  * Features
    + Added new cryptographic primitives, the stream cipher Chacha20, one-time authenticator Poly1305 and AEAD construct Chacha20-Poly1305, as defined in RFC 7539. Contributed by Daniel King.
    + Added support for the CHACHA20-POLY1305 ciphersuites from RFC 7905.
    + Made the receive and transmit buffers independently configurable in size, for situations where the outgoing buffer can be fixed at a smaller size than the incoming buffer
    + Added support for the AES based key wrapping modes defined by NIST SP 800-38F algorithms KW and KWP and by RFC's 3394 and 5649.
    + Added platform support for the Haiku OS.
  * Bugfix
    + Fixed the key_app_writer example which was creating an invalid ASN.1 tag by writing an additional leading zero byte. Found by Aryeh R. #1257.
    + Fixed a C++ compilation error, caused by a variable named new. Found and fixed by Hirotaka Niisato. #1783.
    + Fixed the "no symbols" warning issued by ranlib when building on Mac OS X. Fix contributed by tabascoeye.
    + Clarified documentation for mbedtls_ssl_write() to include 0 as a valid return value. Found by @davidwu2000. #839.
    + Fixed a memory leak in mbedtls_x509_csr_parse(). Found and fixed by catenacyber, Philippe Antoine. #1623.
    + Added length checks to some TLS parsing functions. Found and fixed by Philippe Antoine from Catena cyber. #1663.
    + Remove unused headers included in x509.c. Found by Chris Hanson and fixed by Brendan Shanks. #992.
    + Fixed compilation error when MBEDTLS_ARC4_C is disabled and MBEDTLS_CIPHER_NULL_CIPHER is enabled. Found by TrinityTonic in #1719.
    + Fixed the inline assembly for the MPI multiply helper function for i386 and i386 with SSE2. Found by László Langó. #1550.
    + Fixed the namespacing in header files. Remove the mbedtls namespacing in the #include in the header files. #857.
    + Fixed a compiler warning of 'use before initialisation' in mbedtls_pk_parse_key(). Found by Martin Boye Petersen and fixed by Dawid Drozd.#1098.
    + Fixed decryption of zero length messages (which contain all padding) when a CBC based ciphersuite was used together with Encrypt-then-MAC.
    + Fixed the ssl_client2 example to send application data with 0-length content when the request_size argument is set to 0 as stated in the documentation. #1833.
    + Corrected the documentation for mbedtls_ssl_get_session(). This API has deep copy of the session, and the peer certificate is not lost. #926.
    + Fixed issues when building to the C99 standard, using -std=c99. Fixed by Nick Wilson.
  * Changes
    + Fails when receiving a TLS alert message with an invalid length, or invalid zero-length messages when using TLS 1.2. Contributed by Espressif Systems.
    + Changed the default behaviour of mbedtls_hkdf_extract() to return an error when calling with a NULL salt and non-zero salt length. Contributed by Brian J Murray
    + Change the shebang line in Perl scripts to look up perl in the PATH. Contributed by fbrosson.
    + Allow overriding the time on Windows via the platform-time abstraction. Fixed by Nick Wilson.
    + Use gmtime_r/gmtime_s for thread-safety. Fixed by Nick Wilson.</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1544529600">- Update to version 2.14.1: [bsc#1118727, CVE-2018-19608]
  Security
  * Fix timing variations and memory access variations in RSA PKCS#1 v1.5
    decryption that could lead to a Bleichenbacher-style padding oracle
    attack. In TLS, this affects servers that accept ciphersuites based on
    RSA decryption (i.e. ciphersuites whose name contains RSA but not
    (EC)DH(E)). Discovered by Eyal Ronen (Weizmann Institute),  Robert Gillham
    (University of Adelaide), Daniel Genkin (University of Michigan),
    Adi Shamir (Weizmann Institute), David Wong (NCC Group), and Yuval Yarom
    (University of Adelaide, Data61). The attack is described in more detail
    in the paper available here: http://cat.eyalro.net/cat.pdf  CVE-2018-19608
  * In mbedtls_mpi_write_binary(), don't leak the exact size of the number
    via branching and memory access patterns. An attacker who could submit
    a plaintext for RSA PKCS#1 v1.5 decryption but only observe the timing
    of the decryption and not its result could nonetheless decrypt RSA
    plaintexts and forge RSA signatures. Other asymmetric algorithms may
    have been similarly vulnerable. Reported by Eyal Ronen, Robert Gillham,
    Daniel Genkin, Adi Shamir, David Wong and Yuval Yarom.
  * Wipe sensitive buffers on the stack in the CTR_DRBG and HMAC_DRBG
    modules.
  API Changes
  * The new functions mbedtls_ctr_drbg_update_ret() and
    mbedtls_hmac_drbg_update_ret() are similar to mbedtls_ctr_drbg_update()
    and mbedtls_hmac_drbg_update() respectively, but the new functions
    report errors whereas the old functions return void. We recommend that
    applications use the new functions.
- Version 2.14.0:
  Security
  * Fix overly strict DN comparison when looking for CRLs belonging to a
    particular CA. This previously led to ignoring CRLs when the CRL's issuer
    name and the CA's subject name differed in their string encoding (e.g.,
    one using PrintableString and the other UTF8String) or in the choice of
    upper and lower case. Reported by Henrik Andersson of Bosch GmbH in issue
    [#1784].
  * Fix a flawed bounds check in server PSK hint parsing. In case the
    incoming message buffer was placed within the first 64KiB of address
    space and a PSK-(EC)DHE ciphersuite was used, this allowed an attacker
    to trigger a memory access up to 64KiB beyond the incoming message buffer,
    potentially leading to an application crash or information disclosure.
  * Fix mbedtls_mpi_is_prime() to use more rounds of probabilistic testing. The
    previous settings for the number of rounds made it practical for an
    adversary to construct non-primes that would be erroneously accepted as
    primes with high probability. This does not have an impact on the
    security of TLS, but can matter in other contexts with numbers chosen
    potentially by an adversary that should be prime and can be validated.
    For example, the number of rounds was enough to securely generate RSA key
    pairs or Diffie-Hellman parameters, but was insufficient to validate
    Diffie-Hellman parameters properly.
    See "Prime and Prejudice" by by Martin R. Albrecht and Jake Massimo and
    Kenneth G. Paterson and Juraj Somorovsky.
  Features
  * Add support for temporarily suspending expensive ECC computations after
    some configurable amount of operations. This is intended to be used in
    constrained, single-threaded systems where ECC is time consuming and can
    block other operations until they complete. This is disabled by default,
    but can be enabled by MBEDTLS_ECP_RESTARTABLE at compile time and
    configured by mbedtls_ecp_set_max_ops() at runtime. It applies to the new
    xxx_restartable functions in ECP, ECDSA, PK and X.509 (CRL not supported
    yet), and to existing functions in ECDH and SSL (currently only
    implemented client-side, for ECDHE-ECDSA ciphersuites in TLS 1.2,
    including client authentication).
  * Add support for Arm CPU DSP extensions to accelerate asymmetric key
    operations. On CPUs where the extensions are available, they can accelerate
    MPI multiplications used in ECC and RSA cryptography. Contributed by
    Aurelien Jarno.
  * Extend RSASSA-PSS signature to allow a smaller salt size. Previously, PSS
    signature always used a salt with the same length as the hash, and returned
    an error if this was not possible. Now the salt size may be up to two bytes
    shorter. This allows the library to support all hash and signature sizes
    that comply with FIPS 186-4, including SHA-512 with a 1024-bit key.
  * Add support for 128-bit keys in CTR_DRBG. Note that using keys shorter
    than 256 bits limits the security of generated material to 128 bits.
  API Changes
  * Add a common error code of `MBEDTLS_ERR_PLATFORM_FEATURE_UNSUPPORTED` for
    a feature that is not supported by underlying alternative
    implementations implementing cryptographic primitives. This is useful for
    hardware accelerators that don't implement all options or features.
  New deprecations
  * All module specific errors following the form
    MBEDTLS_ERR_XXX_FEATURE_UNAVAILABLE that indicate a feature is not
    supported are deprecated and are now replaced by the new equivalent
    platform error.
  * All module specific generic hardware acceleration errors following the
    form MBEDTLS_ERR_XXX_HW_ACCEL_FAILED that are deprecated and are replaced
    by the equivalent plaform error.
  * Deprecate the function mbedtls_mpi_is_prime() in favor of
    mbedtls_mpi_is_prime_ext() which allows specifying the number of
    Miller-Rabin rounds.
  Bugfix
  * Fix wrong order of freeing in programs/ssl/ssl_server2 example
    application leading to a memory leak in case both
    MBEDTLS_MEMORY_BUFFER_ALLOC_C and MBEDTLS_MEMORY_BACKTRACE are set.
    Fixes #2069.
  * Fix a bug in the update function for SSL ticket keys which previously
    invalidated keys of a lifetime of less than a 1s. Fixes #1968.
  * Fix failure in hmac_drbg in the benchmark sample application, when
    MBEDTLS_THREADING_C is defined. Found by TrinityTonic, #1095
  * Fix a bug in the record decryption routine ssl_decrypt_buf()
    which lead to accepting properly authenticated but improperly
    padded records in case of CBC ciphersuites using Encrypt-then-MAC.
  * Fix memory leak and freeing without initialization in the example
    program programs/x509/cert_write. Fixes #1422.
  * Ignore IV in mbedtls_cipher_set_iv() when the cipher mode is
    MBEDTLS_MODE_ECB. Found by ezdevelop. Fixes #1091.
  * Zeroize memory used for buffering or reassembling handshake messages
    after use.
  * Use `mbedtls_platform_zeroize()` instead of `memset()` for zeroization
    of sensitive data in the example programs aescrypt2 and crypt_and_hash.
  * Change the default string format used for various X.509 DN attributes to
    UTF8String. Previously, the use of the PrintableString format led to
    wildcards and non-ASCII characters being unusable in some DN attributes.
    Reported by raprepo in #1860 and by kevinpt in #468. Fix contributed by
    Thomas-Dee.
  * Fix compilation failure for configurations which use compile time
    replacements of standard calloc/free functions through the macros
    MBEDTLS_PLATFORM_CALLOC_MACRO and MBEDTLS_PLATFORM_FREE_MACRO.
    Reported by ole-de and ddhome2006. Fixes #882, #1642 and #1706.
  Changes
  * Removed support for Yotta as a build tool.
  * Add tests for session resumption in DTLS.
  * Close a test gap in (D)TLS between the client side and the server side:
    test the handling of large packets and small packets on the client side
    in the same way as on the server side.
  * Change the dtls_client and dtls_server samples to work by default over
    IPv6 and optionally by a build option over IPv4.
  * Change the use of Windows threading to use Microsoft Visual C++ runtime
    calls, rather than Win32 API calls directly. This is necessary to avoid
    conflict with C runtime usage. Found and fixed by irwir.
  * Remember the string format of X.509 DN attributes when replicating
    X.509 DNs. Previously, DN attributes were always written in their default
    string format (mostly PrintableString), which could lead to CRTs being
    created which used PrintableStrings in the issuer field even though the
    signing CA used UTF8Strings in its subject field; while X.509 compliant,
    such CRTs were rejected in some applications, e.g. some versions of
    Firefox, curl and GnuTLS. Reported in #1033 by Moschn. Fix contributed by
    Thomas-Dee.
  * Improve documentation of mbedtls_ssl_get_verify_result().
    Fixes #517 reported by github-monoculture.
  * Add MBEDTLS_MPI_GEN_PRIME_FLAG_LOW_ERR flag to mbedtls_mpi_gen_prime() and
    use it to reduce error probability in RSA key generation to levels mandated
    by FIPS-186-4.
- Version 2.13.1
  API Changes
  * Extend the platform module with an abstraction mbedtls_platform_gmtime_r()
    whose implementation should behave as a thread-safe version of gmtime().
    This allows users to configure such an implementation at compile time when
    the target system cannot be deduced automatically, by setting the option
    MBEDTLS_PLATFORM_GMTIME_R_ALT. At this stage Mbed TLS is only able to
    automatically select implementations for Windows and POSIX C libraries.
  Bugfix
  * Fix build failures on platforms where only gmtime() is available but
    neither gmtime_r() nor gmtime_s() are present. Fixes #1907.
- Version 2.13.0
  Security
  * Fix an issue in the X.509 module which could lead to a buffer overread
    during certificate extensions parsing. In case of receiving malformed
    input (extensions length field equal to 0), an illegal read of one byte
    beyond the input buffer is made. Found and analyzed by Nathan Crandall.
  Features
  * Add support for fragmentation of outgoing DTLS handshake messages. This
    is controlled by the maximum fragment length as set locally or negotiated
    with the peer, as well as by a new per-connection MTU option, set using
    mbedtls_ssl_set_mtu().
  * Add support for auto-adjustment of MTU to a safe value during the
    handshake when flights do not get through (RFC 6347, section 4.1.1.1,
    last paragraph).
  * Add support for packing multiple records within a single datagram,
    enabled by default.
  * Add support for buffering out-of-order handshake messages in DTLS.
    The maximum amount of RAM used for this can be controlled by the
    compile-time constant MBEDTLS_SSL_DTLS_MAX_BUFFERING defined
    in mbedtls/config.h.
  API Changes
  * Add function mbedtls_ssl_set_datagram_packing() to configure
    the use of datagram packing (enabled by default).
  Bugfix
  * Fix a potential memory leak in mbedtls_ssl_setup() function. An allocation
    failure in the function could lead to other buffers being leaked.
  * Fixes an issue with MBEDTLS_CHACHAPOLY_C which would not compile if
    MBEDTLS_ARC4_C and MBEDTLS_CIPHER_NULL_CIPHER weren't also defined. #1890
  * Fix a memory leak in ecp_mul_comb() if ecp_precompute_comb() fails.
    Fix contributed by Espressif Systems.
  * Add ecc extensions only if an ecc based ciphersuite is used.
    This improves compliance to RFC 4492, and as a result, solves
    interoperability issues with BouncyCastle. Raised by milenamil in #1157.
  * Replace printf with mbedtls_printf in the ARIA module. Found by
    TrinityTonic in #1908.
  * Fix potential use-after-free in mbedtls_ssl_get_max_frag_len()
    and mbedtls_ssl_get_record_expansion() after a session reset. Fixes #1941.
  * Fix a bug that caused SSL/TLS clients to incorrectly abort the handshake
    with TLS versions 1.1 and earlier when the server requested authentication
    without providing a list of CAs. This was due to an overly strict bounds
    check in parsing the CertificateRequest message,
    introduced in Mbed TLS 2.12.0. Fixes #1954.
  * Fix a miscalculation of the maximum record expansion in
    mbedtls_ssl_get_record_expansion() in case of ChachaPoly ciphersuites,
    or CBC ciphersuites in (D)TLS versions 1.1 or higher. Fixes #1913, #1914.
  * Fix undefined shifts with negative values in certificates parsing
    (found by Catena cyber using oss-fuzz)
  * Fix memory leak and free without initialization in pk_encrypt
    and pk_decrypt example programs. Reported by Brace Stout. Fixes #1128.
  * Remove redundant else statement. Raised by irwir. Fixes #1776.
  Changes
  * Copy headers preserving timestamps when doing a "make install".
    Contributed by xueruini.
  * Allow the forward declaration of public structs. Contributed by Dawid
    Drozd. Fixes #1215 raised by randombit.
  * Improve compatibility with some alternative CCM implementations by using
    CCM test vectors from RAM.
  * Add support for buffering of out-of-order handshake messages.
  * Add warnings to the documentation of the HKDF module to reduce the risk
    of misusing the mbedtls_hkdf_extract() and mbedtls_hkdf_expand()
    functions. Fixes #1775. Reported by Brian J. Murray.</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1544529601">- Library package version bumped to libmbedtls12</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1546862400">- Update to version 2.16.0:
  Features
  * Add a new config.h option of MBEDTLS_CHECK_PARAMS that enables validation of parameters in the API. This allows detection of obvious misuses of the API, such as passing NULL pointers. The API of existing functions hasn't changed, but requirements on parameters have been made more explicit in the documentation. See the corresponding API documentation for each function to see for which parameter values it is defined. This feature is disabled by default. See its API documentation in config.h for additional steps you have to take when enabling it.
  API Changes
  * The following functions in the random generator modules have been deprecated and replaced as shown below. The new functions change the return type from void to int to allow returning error codes when using MBEDTLS_&lt;MODULE&gt;_ALT for the underlying AES or message digest primitive. Fixes #1798. mbedtls_ctr_drbg_update() -&gt; mbedtls_ctr_drbg_update_ret() mbedtls_hmac_drbg_update() -&gt; mbedtls_hmac_drbg_update_ret()
  * Extend ECDH interface to enable alternative implementations.
  * Deprecate error codes of the form MBEDTLS_ERR_xxx_INVALID_KEY_LENGTH for ARIA, CAMELLIA and Blowfish. These error codes will be replaced by the more generic per-module error codes MBEDTLS_ERR_xxx_BAD_INPUT_DATA.
  * Additional parameter validation checks have been added for the following modules - AES, ARIA, Blowfish, CAMELLIA, CCM, GCM, DHM, ECP, ECDSA, ECDH, ECJPAKE, SHA, Chacha20 and Poly1305, cipher, pk, RSA, and MPI. Where modules have had parameter validation added, existing parameter checks may have changed. Some modules, such as Chacha20 had existing parameter validation whereas other modules had little. This has now been changed so that the same level of validation is present in all modules, and that it is now optional with the MBEDTLS_CHECK_PARAMS flag which by default is off. That means that checks which were previously present by default will no longer be.
  New deprecations
  * Deprecate mbedtls_ctr_drbg_update() and mbedtls_hmac_drbg_update() in favor of functions that can return an error code.
  Bugfix
  * Fix for Clang, which was reporting a warning for the bignum.c inline assembly for AMD64 targets creating string literals greater than those permitted by the ISO C99 standard. Found by Aaron Jones. Fixes #482.
  * Fix runtime error in mbedtls_platform_entropy_poll() when run through qemu user emulation. Reported and fix suggested by randombit. Fixes #1212.
  * Fix an unsafe bounds check when restoring an SSL session from a ticket. This could lead to a buffer overflow, but only in case ticket authentication was broken. Reported and fix suggested by Guido Vranken in #659.
  * Add explicit integer to enumeration type casts to example program programs/pkey/gen_key which previously led to compilation failure on some toolchains. Reported by phoenixmcallister. Fixes #2170.
  * Clarify documentation of mbedtls_ssl_set_own_cert() regarding the absence of check for certificate/key matching. Reported by Attila Molnar, #507.
  * Fix double initialization of ECC hardware that made some accelerators hang.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1567512000">- Update to version 2.16.2:
  * Security improvements and bugfixes
- Use ninja to for build</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1573646400">- Update to version 2.16.3:
  * Security improvements and bugfixes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1585828800">- Update to version 2.16.5:
  * Security improvements and bugfixes</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597665600">- update to 2.23.0:
  a lot of changes see https://github.com/ARMmbed/mbedtls/releases/tag/v2.23.0
  * Fix a side channel vulnerability in modular exponentiation that could reveal an RSA private key used in a secure enclave. Noticed by Sangho Lee, Ming-Wei Shih, Prasun Gera, Taesoo Kim and Hyesoon Kim (Georgia Institute of Technology); and Marcus Peinado (Microsoft Research). Reported by Raoul Strackx (Fortanix) in #3394.
  * Fix side channel in mbedtls_ecp_check_pub_priv() and mbedtls_pk_parse_key() / mbedtls_pk_parse_keyfile() (when loading a private key that didn't include the uncompressed public key), as well as mbedtls_ecp_mul() / mbedtls_ecp_mul_restartable() when called with a NULL f_rng argument. An attacker with access to precise enough timing and memory access information (typically an untrusted operating system attacking a secure enclave) could fully recover the ECC private key. Found and reported by Alejandro Cabrera Aldaya and Billy Brumley.
  * Fix issue in Lucky 13 counter-measure that could make it ineffective when hardware accelerators were used (using one of the MBEDTLS_SHAxxx_ALT macros). This would cause the original Lucky 13 attack to be possible in those configurations, allowing an active network attacker to recover plaintext after repeated timing measurements under some conditions. Reported and fix suggested by Luc Perneel in #3246.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1598875200">- Do not run testsuite in parallel - its not reliable</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1599480000">- Add workaround for failing builds (Python not found) due to
  https://gitlab.kitware.com/cmake/cmake/-/issues/21168</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1599652800">- update to 2.24.0:
  * see https://github.com/ARMmbed/mbedtls/releases/tag/v2.24.0
  * Fix a vulnerability in the verification of X.509 certificates when matching
  the expected common name (the cn argument of mbedtls_x509_crt_verify())
  with the actual certificate name: when the subjecAltName extension is
  present, the expected name was compared to any name in that extension
  regardless of its type. This means that an attacker could for example
  impersonate a 4-bytes or 16-byte domain by getting a certificate for the
  corresponding IPv4 or IPv6 (this would require the attacker to control that
  IP address, though). Similar attacks using other subjectAltName name types
  might be possible.
  * When checking X.509 CRLs, a certificate was only considered as revoked if
  its revocationDate was in the past according to the local clock if
  available. In particular, on builds without MBEDTLS_HAVE_TIME_DATE,
  certificates were never considered as revoked. On builds with
  MBEDTLS_HAVE_TIME_DATE, an attacker able to control the local clock (for
  example, an untrusted OS attacking a secure enclave) could prevent
  revocation of certificates via CRLs. Fixed by no longer checking the
  revocationDate field, in accordance with RFC 5280. Reported by yuemonangong
  in #3340. Reported independently and fixed by Raoul Strackx and Jethro
  * In (D)TLS record decryption, when using a CBC ciphersuites without the
  Encrypt-then-Mac extension, use constant code flow memory access patterns
  to extract and check the MAC. This is an improvement to the existing
  countermeasure against Lucky 13 attacks. The previous countermeasure was
  effective against network-based attackers, but less so against local
  attackers. The new countermeasure defends against local attackers, even if
  they have access to fine-grained measurements. In particular, this fixes a
  local Lucky 13 cache attack found and reported by Tuba Yavuz, Farhaan
  Fowze, Ken (Yihan) Bai, Grant Hernandez, and Kevin Butler (University of
  Florida) and Dave Tian (Purdue University).
  * Fix side channel in RSA private key operations and static (finite-field)
  Diffie-Hellman. An adversary with precise enough timing and memory access
  information (typically an untrusted operating system attacking a secure
  enclave) could bypass an existing counter-measure (base blinding) and
  potentially fully recover the private key.
  * Fix a 1-byte buffer overread in mbedtls_x509_crl_parse_der(). Credit to
  OSS-Fuzz for detecting the problem and to Philippe Antoine for pinpointing
  the problematic code.
  * Zeroising of plaintext buffers in mbedtls_ssl_read() to erase unused
  application data from memory.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1608638400">- update to 2.25.0:
  * This release of Mbed TLS provides bug fixes, minor enhancements and new
  features. This release includes fixes for security issues.
  * see https://github.com/ARMmbed/mbedtls/releases/tag/v2.25.0
  * The functions mbedtls_cipher_auth_encrypt() and
  mbedtls_cipher_auth_decrypt() would write past the minimum documented size
  of the output buffer when used with NIST_KW. As a result, code using those
  functions as documented with NIST_KW could have a buffer overwrite of up to
  15 bytes, with consequences ranging up to arbitrary code execution
  depending on the location of the output buffer.
  * Limit the size of calculations performed by mbedtls_mpi_exp_mod to
  MBEDTLS_MPI_MAX_SIZE to prevent a potential denial of service when generating
  Diffie-Hellman key pairs. Credit to OSS-Fuzz.
  * A failure of the random generator was ignored in mbedtls_mpi_fill_random(),
  which is how most uses of randomization in asymmetric cryptography (including
  key generation, intermediate value randomization and blinding) are implemented.
  This could cause failures or the silent use of non-random values. A random
  generator can fail if it needs reseeding and cannot not obtain entropy, or due
  to an internal failure (which, for Mbed TLS's own CTR_DRBG or HMAC_DRBG, can
  only happen due to a misconfiguration).
  * Fix a compliance issue whereby we were not checking the tag on the algorithm
  parameters (only the size) when comparing the signature in the description part
  of the cert to the real signature. This meant that a NULL algorithm parameters
  entry would look identical to an array of REAL (size zero) to the library and
  thus the certificate would be considered valid. However, if the parameters do
  not match in any way then the certificate should be considered invalid, and
  indeed OpenSSL marks these certs as invalid when mbedtls did not. Many thanks
  to guidovranken who found this issue via differential fuzzing and reported it
  in #3629.
  * Zeroising of local buffers and variables which are used for calculations in
  mbedtls_pkcs5_pbkdf2_hmac(), mbedtls_internal_sha*_process(),
  mbedtls_internal_md*_process() and mbedtls_internal_ripemd160_process()
  functions to erase sensitive data from memory. Reported by Johan Malmgren and
  Johan Uppman Bruce from Sectra.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1611057600">- Fix build for Leap targets
- Use upstream tarball name</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1616414400">- Update to 2.26.0: [bsc#1189589, CVE-2021-24119]
  * * This release of Mbed TLS provides bug fixes, minor enhancements and new
  features. This release includes fixes for security issues.
  * see https://github.com/ARMmbed/mbedtls/releases/tag/v2.26.0
- Fix build with patch from https://github.com/ARMmbed/mbedtls/pull/4237
  mbedtls-4237.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1618488000">-  Workaround for building with gcc-11 boo#1181876</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1626782400">- Update to 2.27.0:
  API changes:
  * Update AEAD output size macros to bring them in line with the PSA Crypto
    API version 1.0 spec. This version of the spec parameterizes them on the
    key type used, as well as the key bit-size in the case of
    PSA_AEAD_TAG_LENGTH.
    The old versions of these macros were renamed and deprecated as follows:
  - PSA_AEAD_TAG_LENGTH          -&gt; PSA_AEAD_TAG_LENGTH_1_ARG
  - PSA_AEAD_ENCRYPT_OUTPUT_SIZE -&gt; PSA_AEAD_ENCRYPT_OUTPUT_SIZE_2_ARG
  - PSA_AEAD_DECRYPT_OUTPUT_SIZE -&gt; PSA_AEAD_DECRYPT_OUTPUT_SIZE_2_ARG
  - PSA_AEAD_UPDATE_OUTPUT_SIZE  -&gt; PSA_AEAD_UPDATE_OUTPUT_SIZE_2_ARG
  - PSA_AEAD_FINISH_OUTPUT_SIZE  -&gt; PSA_AEAD_FINISH_OUTPUT_SIZE_1_ARG
  - PSA_AEAD_VERIFY_OUTPUT_SIZE  -&gt; PSA_AEAD_VERIFY_OUTPUT_SIZE_1_ARG
  * Implement one-shot cipher functions, psa_cipher_encrypt and
    psa_cipher_decrypt, according to the PSA Crypto API 1.0.0
    specification.
  Features:
  * Add mbedtls_rsa_rsassa_pss_sign_ext() function allowing to generate a
    signature with a specific salt length. This function allows to validate
    test cases provided in the NIST's CAVP test suite.
  * Added support for built-in driver keys through the PSA opaque crypto
    driver interface. Refer to the documentation of
    MBEDTLS_PSA_CRYPTO_BUILTIN_KEYS for more information.
  * Implement psa_sign_message() and psa_verify_message().
  * The new function mbedtls_mpi_random() generates a random value in a
    given range uniformly.
  * Implement psa_mac_compute() and psa_mac_verify() as defined in the
    PSA Cryptograpy API 1.0.0 specification.
  * MBEDTLS_ECP_MAX_BITS is now determined automatically from the configured
    curves and no longer needs to be configured explicitly to save RAM.
  Security
  * Fix a bias in the generation of finite-field Diffie-Hellman-Merkle (DHM)
    private keys and of blinding values for DHM and elliptic curves (ECP)
    computations.
  * Fix a potential side channel vulnerability in ECDSA ephemeral key generation.
    An adversary who is capable of very precise timing measurements could
    learn partial information about the leading bits of the nonce used for the
    signature, allowing the recovery of the private key after observing a
    large number of signature operations. This completes a partial fix in
    Mbed TLS 2.20.0.
  * It was possible to configure MBEDTLS_ECP_MAX_BITS to a value that is
    too small, leading to buffer overflows in ECC operations. Fail the build
    in such a case.
  * An adversary with access to precise enough information about memory
    accesses (typically, an untrusted operating system attacking a secure
    enclave) could recover an RSA private key after observing the victim
    performing a single private-key operation.
  * An adversary with access to precise enough timing information (typically, a
    co-located process) could recover a Curve25519 or Curve448 static ECDH key
    after inputting a chosen public key and observing the victim performing the
    corresponding private-key operation.
  Bugfix
  * Add printf function attributes to mbedtls_debug_print_msg to ensure we
    get printf format specifier warnings.
  * Fix premature fopen() call in mbedtls_entropy_write_seed_file which may
    lead to seed file corruption in the case where the path to the seed file is
    equal to MBEDTLS_PLATFORM_STD_NV_SEED_FILE.
  * PSA functions other than psa_open_key now return PSA_ERROR_INVALID_HANDLE
    rather than PSA_ERROR_DOES_NOT_EXIST for an invalid handle, bringing them
    in line with version 1.0.0 of the specification.
  * PSA functions creating a key now return PSA_ERROR_INVALID_ARGUMENT rather
    than PSA_ERROR_INVALID_HANDLE when the identifier specified for the key
    to create is not valid, bringing them in line with version 1.0.0 of the
    specification.
  * Fix some cases in the bignum module where the library constructed an
    unintended representation of the value 0 which was not processed
    correctly by some bignum operations. This could happen when
    mbedtls_mpi_read_string() was called on "-0", or when
    mbedtls_mpi_mul_mpi() and mbedtls_mpi_mul_int() was called with one of
    the arguments being negative and the other being 0.
  * Fix a bug in ECDSA that would cause it to fail when the hash is all-bits
    zero.
  * Fix a compilation error when MBEDTLS_ECP_RANDOMIZE_MXZ_ALT is
    defined.
  * Fix an incorrect error code when parsing a PKCS#8 private key.
  * In a TLS client, enforce the Diffie-Hellman minimum parameter size
    set with mbedtls_ssl_conf_dhm_min_bitlen() precisely. Before, the
    minimum size was rounded down to the nearest multiple of 8.
  * In library/net_sockets.c, _POSIX_C_SOURCE and _XOPEN_SOURCE are
    defined to specific values.  If the code is used in a context
    where these are already defined, this can result in a compilation
    error.  Instead, assume that if they are defined, the values will
    be adequate to build Mbed TLS.
  * The cipher suite TLS-RSA-WITH-CAMELLIA-256-GCM-SHA384 was not available
    when SHA-1 was disabled and was offered when SHA-1 was enabled but SHA-384
    was disabled. Fix the dependency.
  * Do not offer SHA384 cipher suites when SHA-384 is disabled.
  * With MBEDTLS_PSA_CRYPTO_C disabled, some functions were getting built
    nonetheless, resulting in undefined reference errors when building a
    shared library.
  * Fix test suite code on platforms where int32_t is not int, such as
    Arm Cortex-M.
  * Fix some issues affecting MBEDTLS_ARIA_ALT implementations: a misplaced
    directive in a header and a missing initialization in the self-test.
  * Fix a missing initialization in the Camellia self-test, affecting
    MBEDTLS_CAMELLIA_ALT implementations.
  * Restore the ability to configure PSA via Mbed TLS options to support RSA
    key pair operations but exclude RSA key generation. When MBEDTLS_GENPRIME
    is not defined PSA will no longer attempt to use mbedtls_rsa_gen_key().
  * Fix a regression introduced in 2.24.0 which broke (D)TLS CBC ciphersuites
    (when the encrypt-then-MAC extension is not in use) with some ALT
    implementations of the underlying hash (SHA-1, SHA-256, SHA-384), causing
    the affected side to wrongly reject valid messages.
  * Remove outdated check-config.h check that prevented implementing the
    timing module on Mbed OS.
  * Fix PSA_ALG_TLS12_PRF and PSA_ALG_TLS12_PSK_TO_MS being too permissive
    about missing inputs.
  * Fix a resource leak in a test suite with an alternative AES
    implementation.
  * Fix a crash in mbedtls_mpi_debug_mpi on a bignum having 0 limbs. This
    could notably be triggered by setting the TLS debug level to 3 or above
    and using a Montgomery curve for the key exchange.
  * psa_verify_hash() was relying on implementation-specific behavior of
    mbedtls_rsa_rsassa_pss_verify() and was causing failures in some _ALT
    implementations. This reliance is now removed.
  * Disallow inputs of length different from the corresponding hash when
    signing or verifying with PSA_ALG_RSA_PSS (The PSA Crypto API mandates
    that PSA_ALG_RSA_PSS uses the same hash throughout the algorithm.)
  * Fix a null pointer dereference when mbedtls_mpi_exp_mod() was called with
    A=0 represented with 0 limbs. Up to and including Mbed TLS 2.26, this bug
    could not be triggered by code that constructed A with one of the
    mbedtls_mpi_read_xxx functions (including in particular TLS code) since
    those always built an mpi object with at least one limb.
  * Fix mbedtls_mpi_gcd(G,A,B) when the value of B is zero. This had no
    effect on Mbed TLS's internal use of mbedtls_mpi_gcd(), but may affect
    applications that call mbedtls_mpi_gcd() directly.
  * The PSA API no longer allows the creation or destruction of keys with a
    read-only lifetime. The persistence level PSA_KEY_PERSISTENCE_READ_ONLY
    can now only be used as intended, for keys that cannot be modified through
    normal use of the API.
  * When MBEDTLS_PSA_CRYPTO_SPM is enabled, crypto_spe.h was not included
    in all the right places. Include it from crypto_platform.h, which is
    the natural place.
  * mbedtls_pk_sign() and mbedtls_pk_verify() and their extended and
    restartable variants now always honor the specified hash length if
    nonzero. Before, for RSA, hash_len was ignored in favor of the length of
    the specified hash algorithm.
  * Fix which alert is sent in some cases to conform to the
    applicable RFC: on an invalid Finished message value, an
    invalid max_fragment_length extension, or an
    unsupported extension used by the server.
  * Correct (change from 12 to 13 bytes) the value of the macro describing the
    maximum nonce length returned by psa_aead_generate_nonce().
  Changes
  * Add extra printf compiler warning flags to builds.
  * Fix memsan build false positive in x509_crt.c with Clang 11
  * Fix the setting of the read timeout in the DTLS sample programs.
  * Remove the AES sample application programs/aes/aescrypt2 which shows
    bad cryptographic practice.
  * Alternative implementations of CMAC may now opt to not support 3DES as a
    CMAC block cipher, and still pass the CMAC self test.
  * Remove configs/config-psa-crypto.h, which was identical to the default
    configuration except for having some extra cryptographic mechanisms
    enabled and for unintended differences. This configuration was primarily
    intended to demonstrate the PSA API, and lost most of its usefulness when
    MBEDTLS_PSA_CRYPTO_C became enabled by default.
  * When building the test suites with GNU make, invoke python3 or python, not
    python2, which is no longer supported upstream.
  * When using session cache based session resumption on the server,
    double-check that custom session cache implementations return
    sessions which are consistent with the negotiated ciphersuite
    and compression method.
  * Fix build failure on MinGW toolchain when __USE_MING_ANSI_STDIO is on.
    When that flag is on, standard GNU C printf format specifiers
    should be used.
  * Reduce the default value of MBEDTLS_ECP_WINDOW_SIZE. This reduces RAM usage
    during ECC operations at a negligible performance cost.
  * mbedtls_mpi_read_binary(), mbedtls_mpi_read_binary_le() and
    mbedtls_mpi_read_string() now construct an mbedtls_mpi object with 0 limbs
    when their input has length 0. Note that this is an implementation detail
    and can change at any time, so this change should be transparent, but it
    may result in mbedtls_mpi_write_binary() or mbedtls_mpi_write_string()
    now writing an empty string where it previously wrote one or more
    zero digits when operating from values constructed with an mpi_read
    function and some mpi operations.
  * Implicitly add PSA_KEY_USAGE_SIGN_MESSAGE key usage policy flag when
    PSA_KEY_USAGE_SIGN_HASH flag is set and PSA_KEY_USAGE_VERIFY_MESSAGE flag
    when PSA_KEY_USAGE_VERIFY_HASH flag is set. This usage flag extension
    is also applied when loading a key from storage.
  * Remove mbedtls-4237.patch upstream
  * Library soname bump to libmbedcrypto7</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1642075200">- Update to 2.28.0: (bsc#1193979, CVE-2021-45450)
  API changes
  * Some fields of mbedtls_ssl_session and mbedtls_ssl_config are in a
  different order. This only affects applications that define such
  structures directly or serialize them.
  Requirement changes
  * Sign-magnitude and one's complement representations for signed integers are
  not supported. Two's complement is the only supported representation.
  Removals
  * Remove config option MBEDTLS_TLS_DEFAULT_ALLOW_SHA1_IN_CERTIFICATES,
  which allowed SHA-1 in the default TLS configuration for certificate
  signing. It was intended to facilitate the transition in environments
  with SHA-1 certificates. SHA-1 is considered a weak message digest and
  its use constitutes a security risk.
  * Remove the partial support for running unit tests via Greentea on Mbed OS,
  which had been unmaintained since 2018.
  Features
  * The identifier of the CID TLS extension can be configured by defining
  MBEDTLS_TLS_EXT_CID at compile time.
  * Warn if errors from certain functions are ignored. This is currently
  supported on GCC-like compilers and on MSVC and can be configured through
  the macro MBEDTLS_CHECK_RETURN. The warnings are always enabled
  (where supported) for critical functions where ignoring the return
  value is almost always a bug. Enable the new configuration option
  MBEDTLS_CHECK_RETURN_WARNING to get warnings for other functions. This
  is currently implemented in the AES, DES and md modules, and will be
  extended to other modules in the future.
  * Add missing PSA macros declared by PSA Crypto API 1.0.0:
  PSA_ALG_IS_SIGN_HASH, PSA_ALG_NONE, PSA_HASH_BLOCK_LENGTH, PSA_KEY_ID_NULL.
  * Add new API mbedtls_ct_memcmp for constant time buffer comparison.
  * Add PSA API definition for ARIA.
  Security
  * Zeroize several intermediate variables used to calculate the expected
  value when verifying a MAC or AEAD tag. This hardens the library in
  case the value leaks through a memory disclosure vulnerability. For
  example, a memory disclosure vulnerability could have allowed a
  man-in-the-middle to inject fake ciphertext into a DTLS connection.
  * In psa_cipher_generate_iv() and psa_cipher_encrypt(), do not read back
  from the output buffer. This fixes a potential policy bypass or decryption
  oracle vulnerability if the output buffer is in memory that is shared with
  an untrusted application.
  * Fix a double-free that happened after mbedtls_ssl_set_session() or
  mbedtls_ssl_get_session() failed with MBEDTLS_ERR_SSL_ALLOC_FAILED
  (out of memory). After that, calling mbedtls_ssl_session_free()
  and mbedtls_ssl_free() would cause an internal session buffer to
  be free()'d twice.
  Bugfix
  * Stop using reserved identifiers as local variables. Fixes #4630.
  * The GNU makefiles invoke python3 in preference to python except on Windows.
  * The check was accidentally not performed when cross-compiling for Windows
  on Linux. Fix this. Fixes #4774.
  * Prevent divide by zero if either of PSA_CIPHER_ENCRYPT_OUTPUT_SIZE() or
  PSA_CIPHER_UPDATE_OUTPUT_SIZE() were called using an asymmetric key type.
  * Fix a parameter set but unused in psa_crypto_cipher.c. Fixes #4935.
  * Don't use the obsolete header path sys/fcntl.h in unit tests.
  These header files cause compilation errors in musl.
  Fixes #4969.
  * Fix missing constraints on x86_64 and aarch64 assembly code
  for bignum multiplication that broke some bignum operations with
  (at least) Clang 12.
  Fixes #4116, #4786, #4917, #4962.
  * Fix mbedtls_cipher_crypt: AES-ECB when MBEDTLS_USE_PSA_CRYPTO is enabled.
  * Failures of alternative implementations of AES or DES single-block
  functions enabled with MBEDTLS_AES_ENCRYPT_ALT, MBEDTLS_AES_DECRYPT_ALT,
  MBEDTLS_DES_CRYPT_ECB_ALT or MBEDTLS_DES3_CRYPT_ECB_ALT were ignored.
  This does not concern the implementation provided with Mbed TLS,
  where this function cannot fail, or full-module replacements with
  MBEDTLS_AES_ALT or MBEDTLS_DES_ALT. Reported by Armelle Duboc in #1092.
  * Some failures of HMAC operations were ignored. These failures could only
  happen with an alternative implementation of the underlying hash module.
  * Fix the error returned by psa_generate_key() for a public key. Fixes #4551.
  * Fix the build of sample programs when neither MBEDTLS_ERROR_C nor
  MBEDTLS_ERROR_STRERROR_DUMMY is enabled.
  * Fix PSA_ALG_RSA_PSS verification accepting an arbitrary salt length.
  This algorithm now accepts only the same salt length for verification
  that it produces when signing, as documented. Use the new algorithm
  PSA_ALG_RSA_PSS_ANY_SALT to accept any salt length. Fixes #4946.
  * The existing predicate macro name PSA_ALG_IS_HASH_AND_SIGN is now reserved
  for algorithm values that fully encode the hashing step, as per the PSA
  Crypto API specification. This excludes PSA_ALG_RSA_PKCS1V15_SIGN_RAW and
  PSA_ALG_ECDSA_ANY. The new predicate macro PSA_ALG_IS_SIGN_HASH covers
  all algorithms that can be used with psa_{sign,verify}_hash(), including
  these two.
  * Fix issue in Makefile on Linux with SHARED=1, that caused shared libraries
  not to list other shared libraries they need.
  * Fix a bug in mbedtls_gcm_starts() when the bit length of the iv
  exceeds 2^32. Fixes #4884.
  * Fix an uninitialized variable warning in test_suite_ssl.function with GCC
  version 11.
  * Fix the build when no SHA2 module is included. Fixes #4930.
  * Fix the build when only the bignum module is included. Fixes #4929.
  * Fix a potential invalid pointer dereference and infinite loop bugs in
  pkcs12 functions when the password is empty. Fix the documentation to
  better describe the inputs to these functions and their possible values.
  Fixes #5136.
  * The key usage flags PSA_KEY_USAGE_SIGN_MESSAGE now allows the MAC
  operations psa_mac_compute() and psa_mac_sign_setup().
  * The key usage flags PSA_KEY_USAGE_VERIFY_MESSAGE now allows the MAC
  operations psa_mac_verify() and psa_mac_verify_setup().
  Changes
  * Set config option MBEDTLS_TLS_DEFAULT_ALLOW_SHA1_IN_KEY_EXCHANGE to be
  disabled by default.
  * Improve the performance of base64 constant-flow code. The result is still
  slower than the original non-constant-flow implementation, but much faster
  than the previous constant-flow implementation. Fixes #4814.
  * Indicate in the error returned if the nonce length used with
  ChaCha20-Poly1305 is invalid, and not just unsupported.
  * The mbedcrypto library includes a new source code module constant_time.c,
  containing various functions meant to resist timing side channel attacks.
  * This module does not have a separate configuration option, and functions
  from this module will be included in the build as required. Currently
  most of the interface of this module is private and may change at any
  time.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1642420800">- Fix baselib.conf</changelog>
  <changelog author="Alexander Bergmann &lt;abergmann@suse.com&gt;" date="1671624000">- Fix potential heap buffer overread and overwrite in DTLS if
  MBEDTLS_SSL_DTLS_CONNECTION_ID is enabled and
  MBEDTLS_SSL_CID_IN_LEN_MAX &gt; 2 * MBEDTLS_SSL_CID_OUT_LEN_MAX.
  (bsc#1206576, CVE-2022-46393).
  Add: mbedtls-CVE-2022-46393.patch</changelog>
</package>
<package pkgid="ff78e5a2df5697a1390ffbde9458cc7074b692caaa5d7d61e946f1b082b61f96" name="libmbedcrypto7" arch="ppc64le">
  <version epoch="0" ver="2.28.0" rel="bp154.2.3.1"/>
  <changelog author="mpluskal@suse.com" date="1531137600">- Update to version 2.11.0:
  * Features
    + Added support for the XTS block cipher mode with AES (AES-XTS). Contributed by Aorimn in pull request #414.
    + Implemented the HMAC-based extract-and-expand key derivation function (HKDF) per RFC 5869. Contributed by Thomas Fossati.
    + For TLS servers, added support for offloading private key operations to an external cryptoprocessor. Private key operations can be asynchronous to allow non-blocking operation of the TLS server stack.
    + Added support for ARIA cipher (RFC 5794) and associated TLS ciphersuites (RFC 6209). ARIA is disabled by default. To enable, see MBEDTLS_ARIA_C in config.h.
    + Added support for the CCM* block cipher mode as defined in IEEE Std 802.15.4.
    + Added an additional block mode, OFB (Output Feedback) per NIST SP 800-38a, to the AES module and cipher abstraction module.
  * API Changes
    + Mbed TLS 2.11.0 maintains source code compatibility with the last minor version, Mbed TLS 2.9.0, but extends the interface with additional capabilities. Mbed TLS 2.11.0 modifies the ABI and increases the SOVERSION.
  * Bugfix
    + Fixed the cert_write example to handle certificates signed with elliptic curves as well as RSA. Fixes #777 found by dbedev.
    + Fixed the redefinition of _WIN32_WINNT, to avoid overriding a definition used by user applications. Found and fixed by Fabio Alessandrelli.
    + Fixed compilation warnings with the IAR toolchain on 32-bit platforms. Reported by rahmanih in #683.
    + Fixed an issue with MicroBlaze support in bn_mul.h which was causing the build to fail. Found by zv-io. Fixes #1651.
    + Fixed braces in mbedtls_memory_buffer_alloc_status(). Found by sbranden in #552.
    + Added the macro MBEDTLS_X509_MAX_FILE_PATH_LEN that enables the user to configure the maximum length of a file path that can be buffered when calling mbedtls_x509_crt_parse_path(). Fixes #492.
    + Fixed redundant declaration of mbedtls_ssl_list_ciphersuites. Raised by TrinityTonic in #1359.
- Changes for version 2.9.0:
  + Security
    + Fixed an issue in the X.509 module which could lead to a buffer overread during certificate validation. Additionally, the issue could also lead to unnecessary callback checks being made or to some validation checks to be omitted. The overread could be triggered remotely, while the other issues would require a non DER-compliant certificate to be correctly signed by a trusted CA, or a trusted CA with a non DER-compliant certificate. Found by luocm. Fixes #825.
    + Fixed the buffer length assertion in the ssl_parse_certificate_request() function which could lead to an arbitrary overread of the message buffer. The overreads could be caused by receiving a malformed algorithms section which was too short. In builds with debug output, this overread data was output with the debug data.
    + Fixed a client-side bug in the validation of the server's ciphersuite choice which could potentially lead to the client accepting a ciphersuite it didn't offer or a ciphersuite that could not be used with the TLS or DTLS version chosen by the server. This could lead to corruption of internal data structures for some configurations.
  * Features
    + Added an option of MBEDTLS_AES_FEWER_TABLES, to dynamically compute smaller AES tables during runtime, thereby reducing the RAM/ROM footprint by ~6KiB. Suggested and contributed by jkivilin.
    + Added initial support for Curve448 (RFC 7748). So far only mbedtls_ecp_mul() and ECDH primitive functions (mbedtls_ecdh_gen_public(), mbedtls_ecdh_compute_shared()) are supported for now. Contributed by Nicholas Wilson.
  * API Changes
    + Mbed TLS 2.9.0 maintains source code and binary compatibility with the last minor version, Mbed TLS 2.8.0, but extends the interface with additional capabilities.
    + Extended the API with the function of mbedtls_net_poll() to allow user applications to wait for a network context to become ready before reading or writing.
    + Added the function mbedtls_ssl_check_pending() to the public API to allow a check for whether more more data is pending to be processed in the internal message buffers. This function is necessary to determine the underlying transport when event-driven IO is used.
  * Bugfix
    + Fixed a spurious uninitialized variable warning in cmac.c. Fix independently contributed by Brian J Murray and David Brown.
    + Added missing dependencies in test suites that led to build failures in configurations that omit certain hashes or public-key algorithms. Fixes #1040.
    + Fixed a C89 incompatibility issue in benchmark.c. Contributed by Brendan Shanks. Fixes #1353.
    + Added missing dependencies for MBEDTLS_HAVE_TIME_DATE and MBEDTLS_VERSION_FEATURES in some test suites. Contributed by Deomid Ryabkov. Fixes #1299, #1475.
    + Fixed the Makefile build process for building shared libraries on Mac OS X. Fixed by mnacamura.
    + Fixed parsing of PKCS#8 encoded Elliptic Curve keys. Previously Mbed TLS was unable to parse keys which had only the optional parameters field of the ECPrivateKey structure. Found by Jethro Beekman, fixed in #1379.
    + Added an optimisation to return the plaintext data more quickly on unpadded CBC decryption, as stated in the mbedtls_cipher_update() documentation. Contributed by Andy Leiserson.
    + Fixed the overriding and ignoring of return values when parsing and writing to a file in the pk_sign program. Found by kevlut in #1142.
    + Added restrictions to the usage of the error code MBEDTLS_ERR_SSL_WANT_READ to situations where data needs to be fetched from the underlying transport in order to make progress. Previously, this error code was also occasionally returned when unexpected messages were being discarded, ignoring that further messages could potentially already be pending to be processed in the internal buffers; these cases led to deadlocks when event-driven I/O was used. Found and reported by Hubert Mis in #772.
    + Fixed buffer length assertions in the ssl_parse_certificate_request() function which led to a potential one byte overread of the message buffer.
    + Fixed invalid buffer sizes being passed to zlib during record compression and decompression.
    + Raised the soversion of libmbedcrypto to match the soversion of the maintained 2.7 branch. The soversion was increased in Mbed TLS version 2.7.1 to reflect breaking changes in that release, but the increment was missed in 2.8.0 and later releases outside of the 2.7 branch.</changelog>
  <changelog author="mpluskal@suse.com" date="1535025600">- Update to version 2.12.0:
  * Security
    + Fixed a vulnerability in the TLS ciphersuites based on use of CBC and SHA-384 in DTLS/TLS 1.0 to 1.2, that allowed an active network attacker to partially recover the plaintext of messages under certains conditions by exploiting timing side-channels.
    + Fixed a vulnerability in TLS ciphersuites based on CBC, in DTLS/TLS 1.0 to 1.2, that allowed a local attacker, with the ability to execute code on the local machine as well as to manipulate network packets, to partially recover the plaintext of messages under certain conditions by using a cache attack targetting an internal MD/SHA buffer.
    + Added a counter-measure against a vulnerability in TLS ciphersuites based on CBC, in DTLS/TLS 1.0 to 1.2, that allowed a local attacker with the ability to execute code on the local machine as well as manipulate network packets, to partially recover the plaintext of messages certain conditions (see previous entry) by using a cache attack targeting the SSL input record buffer.
  * Features
    + Added new cryptographic primitives, the stream cipher Chacha20, one-time authenticator Poly1305 and AEAD construct Chacha20-Poly1305, as defined in RFC 7539. Contributed by Daniel King.
    + Added support for the CHACHA20-POLY1305 ciphersuites from RFC 7905.
    + Made the receive and transmit buffers independently configurable in size, for situations where the outgoing buffer can be fixed at a smaller size than the incoming buffer
    + Added support for the AES based key wrapping modes defined by NIST SP 800-38F algorithms KW and KWP and by RFC's 3394 and 5649.
    + Added platform support for the Haiku OS.
  * Bugfix
    + Fixed the key_app_writer example which was creating an invalid ASN.1 tag by writing an additional leading zero byte. Found by Aryeh R. #1257.
    + Fixed a C++ compilation error, caused by a variable named new. Found and fixed by Hirotaka Niisato. #1783.
    + Fixed the "no symbols" warning issued by ranlib when building on Mac OS X. Fix contributed by tabascoeye.
    + Clarified documentation for mbedtls_ssl_write() to include 0 as a valid return value. Found by @davidwu2000. #839.
    + Fixed a memory leak in mbedtls_x509_csr_parse(). Found and fixed by catenacyber, Philippe Antoine. #1623.
    + Added length checks to some TLS parsing functions. Found and fixed by Philippe Antoine from Catena cyber. #1663.
    + Remove unused headers included in x509.c. Found by Chris Hanson and fixed by Brendan Shanks. #992.
    + Fixed compilation error when MBEDTLS_ARC4_C is disabled and MBEDTLS_CIPHER_NULL_CIPHER is enabled. Found by TrinityTonic in #1719.
    + Fixed the inline assembly for the MPI multiply helper function for i386 and i386 with SSE2. Found by László Langó. #1550.
    + Fixed the namespacing in header files. Remove the mbedtls namespacing in the #include in the header files. #857.
    + Fixed a compiler warning of 'use before initialisation' in mbedtls_pk_parse_key(). Found by Martin Boye Petersen and fixed by Dawid Drozd.#1098.
    + Fixed decryption of zero length messages (which contain all padding) when a CBC based ciphersuite was used together with Encrypt-then-MAC.
    + Fixed the ssl_client2 example to send application data with 0-length content when the request_size argument is set to 0 as stated in the documentation. #1833.
    + Corrected the documentation for mbedtls_ssl_get_session(). This API has deep copy of the session, and the peer certificate is not lost. #926.
    + Fixed issues when building to the C99 standard, using -std=c99. Fixed by Nick Wilson.
  * Changes
    + Fails when receiving a TLS alert message with an invalid length, or invalid zero-length messages when using TLS 1.2. Contributed by Espressif Systems.
    + Changed the default behaviour of mbedtls_hkdf_extract() to return an error when calling with a NULL salt and non-zero salt length. Contributed by Brian J Murray
    + Change the shebang line in Perl scripts to look up perl in the PATH. Contributed by fbrosson.
    + Allow overriding the time on Windows via the platform-time abstraction. Fixed by Nick Wilson.
    + Use gmtime_r/gmtime_s for thread-safety. Fixed by Nick Wilson.</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1544529600">- Update to version 2.14.1: [bsc#1118727, CVE-2018-19608]
  Security
  * Fix timing variations and memory access variations in RSA PKCS#1 v1.5
    decryption that could lead to a Bleichenbacher-style padding oracle
    attack. In TLS, this affects servers that accept ciphersuites based on
    RSA decryption (i.e. ciphersuites whose name contains RSA but not
    (EC)DH(E)). Discovered by Eyal Ronen (Weizmann Institute),  Robert Gillham
    (University of Adelaide), Daniel Genkin (University of Michigan),
    Adi Shamir (Weizmann Institute), David Wong (NCC Group), and Yuval Yarom
    (University of Adelaide, Data61). The attack is described in more detail
    in the paper available here: http://cat.eyalro.net/cat.pdf  CVE-2018-19608
  * In mbedtls_mpi_write_binary(), don't leak the exact size of the number
    via branching and memory access patterns. An attacker who could submit
    a plaintext for RSA PKCS#1 v1.5 decryption but only observe the timing
    of the decryption and not its result could nonetheless decrypt RSA
    plaintexts and forge RSA signatures. Other asymmetric algorithms may
    have been similarly vulnerable. Reported by Eyal Ronen, Robert Gillham,
    Daniel Genkin, Adi Shamir, David Wong and Yuval Yarom.
  * Wipe sensitive buffers on the stack in the CTR_DRBG and HMAC_DRBG
    modules.
  API Changes
  * The new functions mbedtls_ctr_drbg_update_ret() and
    mbedtls_hmac_drbg_update_ret() are similar to mbedtls_ctr_drbg_update()
    and mbedtls_hmac_drbg_update() respectively, but the new functions
    report errors whereas the old functions return void. We recommend that
    applications use the new functions.
- Version 2.14.0:
  Security
  * Fix overly strict DN comparison when looking for CRLs belonging to a
    particular CA. This previously led to ignoring CRLs when the CRL's issuer
    name and the CA's subject name differed in their string encoding (e.g.,
    one using PrintableString and the other UTF8String) or in the choice of
    upper and lower case. Reported by Henrik Andersson of Bosch GmbH in issue
    [#1784].
  * Fix a flawed bounds check in server PSK hint parsing. In case the
    incoming message buffer was placed within the first 64KiB of address
    space and a PSK-(EC)DHE ciphersuite was used, this allowed an attacker
    to trigger a memory access up to 64KiB beyond the incoming message buffer,
    potentially leading to an application crash or information disclosure.
  * Fix mbedtls_mpi_is_prime() to use more rounds of probabilistic testing. The
    previous settings for the number of rounds made it practical for an
    adversary to construct non-primes that would be erroneously accepted as
    primes with high probability. This does not have an impact on the
    security of TLS, but can matter in other contexts with numbers chosen
    potentially by an adversary that should be prime and can be validated.
    For example, the number of rounds was enough to securely generate RSA key
    pairs or Diffie-Hellman parameters, but was insufficient to validate
    Diffie-Hellman parameters properly.
    See "Prime and Prejudice" by by Martin R. Albrecht and Jake Massimo and
    Kenneth G. Paterson and Juraj Somorovsky.
  Features
  * Add support for temporarily suspending expensive ECC computations after
    some configurable amount of operations. This is intended to be used in
    constrained, single-threaded systems where ECC is time consuming and can
    block other operations until they complete. This is disabled by default,
    but can be enabled by MBEDTLS_ECP_RESTARTABLE at compile time and
    configured by mbedtls_ecp_set_max_ops() at runtime. It applies to the new
    xxx_restartable functions in ECP, ECDSA, PK and X.509 (CRL not supported
    yet), and to existing functions in ECDH and SSL (currently only
    implemented client-side, for ECDHE-ECDSA ciphersuites in TLS 1.2,
    including client authentication).
  * Add support for Arm CPU DSP extensions to accelerate asymmetric key
    operations. On CPUs where the extensions are available, they can accelerate
    MPI multiplications used in ECC and RSA cryptography. Contributed by
    Aurelien Jarno.
  * Extend RSASSA-PSS signature to allow a smaller salt size. Previously, PSS
    signature always used a salt with the same length as the hash, and returned
    an error if this was not possible. Now the salt size may be up to two bytes
    shorter. This allows the library to support all hash and signature sizes
    that comply with FIPS 186-4, including SHA-512 with a 1024-bit key.
  * Add support for 128-bit keys in CTR_DRBG. Note that using keys shorter
    than 256 bits limits the security of generated material to 128 bits.
  API Changes
  * Add a common error code of `MBEDTLS_ERR_PLATFORM_FEATURE_UNSUPPORTED` for
    a feature that is not supported by underlying alternative
    implementations implementing cryptographic primitives. This is useful for
    hardware accelerators that don't implement all options or features.
  New deprecations
  * All module specific errors following the form
    MBEDTLS_ERR_XXX_FEATURE_UNAVAILABLE that indicate a feature is not
    supported are deprecated and are now replaced by the new equivalent
    platform error.
  * All module specific generic hardware acceleration errors following the
    form MBEDTLS_ERR_XXX_HW_ACCEL_FAILED that are deprecated and are replaced
    by the equivalent plaform error.
  * Deprecate the function mbedtls_mpi_is_prime() in favor of
    mbedtls_mpi_is_prime_ext() which allows specifying the number of
    Miller-Rabin rounds.
  Bugfix
  * Fix wrong order of freeing in programs/ssl/ssl_server2 example
    application leading to a memory leak in case both
    MBEDTLS_MEMORY_BUFFER_ALLOC_C and MBEDTLS_MEMORY_BACKTRACE are set.
    Fixes #2069.
  * Fix a bug in the update function for SSL ticket keys which previously
    invalidated keys of a lifetime of less than a 1s. Fixes #1968.
  * Fix failure in hmac_drbg in the benchmark sample application, when
    MBEDTLS_THREADING_C is defined. Found by TrinityTonic, #1095
  * Fix a bug in the record decryption routine ssl_decrypt_buf()
    which lead to accepting properly authenticated but improperly
    padded records in case of CBC ciphersuites using Encrypt-then-MAC.
  * Fix memory leak and freeing without initialization in the example
    program programs/x509/cert_write. Fixes #1422.
  * Ignore IV in mbedtls_cipher_set_iv() when the cipher mode is
    MBEDTLS_MODE_ECB. Found by ezdevelop. Fixes #1091.
  * Zeroize memory used for buffering or reassembling handshake messages
    after use.
  * Use `mbedtls_platform_zeroize()` instead of `memset()` for zeroization
    of sensitive data in the example programs aescrypt2 and crypt_and_hash.
  * Change the default string format used for various X.509 DN attributes to
    UTF8String. Previously, the use of the PrintableString format led to
    wildcards and non-ASCII characters being unusable in some DN attributes.
    Reported by raprepo in #1860 and by kevinpt in #468. Fix contributed by
    Thomas-Dee.
  * Fix compilation failure for configurations which use compile time
    replacements of standard calloc/free functions through the macros
    MBEDTLS_PLATFORM_CALLOC_MACRO and MBEDTLS_PLATFORM_FREE_MACRO.
    Reported by ole-de and ddhome2006. Fixes #882, #1642 and #1706.
  Changes
  * Removed support for Yotta as a build tool.
  * Add tests for session resumption in DTLS.
  * Close a test gap in (D)TLS between the client side and the server side:
    test the handling of large packets and small packets on the client side
    in the same way as on the server side.
  * Change the dtls_client and dtls_server samples to work by default over
    IPv6 and optionally by a build option over IPv4.
  * Change the use of Windows threading to use Microsoft Visual C++ runtime
    calls, rather than Win32 API calls directly. This is necessary to avoid
    conflict with C runtime usage. Found and fixed by irwir.
  * Remember the string format of X.509 DN attributes when replicating
    X.509 DNs. Previously, DN attributes were always written in their default
    string format (mostly PrintableString), which could lead to CRTs being
    created which used PrintableStrings in the issuer field even though the
    signing CA used UTF8Strings in its subject field; while X.509 compliant,
    such CRTs were rejected in some applications, e.g. some versions of
    Firefox, curl and GnuTLS. Reported in #1033 by Moschn. Fix contributed by
    Thomas-Dee.
  * Improve documentation of mbedtls_ssl_get_verify_result().
    Fixes #517 reported by github-monoculture.
  * Add MBEDTLS_MPI_GEN_PRIME_FLAG_LOW_ERR flag to mbedtls_mpi_gen_prime() and
    use it to reduce error probability in RSA key generation to levels mandated
    by FIPS-186-4.
- Version 2.13.1
  API Changes
  * Extend the platform module with an abstraction mbedtls_platform_gmtime_r()
    whose implementation should behave as a thread-safe version of gmtime().
    This allows users to configure such an implementation at compile time when
    the target system cannot be deduced automatically, by setting the option
    MBEDTLS_PLATFORM_GMTIME_R_ALT. At this stage Mbed TLS is only able to
    automatically select implementations for Windows and POSIX C libraries.
  Bugfix
  * Fix build failures on platforms where only gmtime() is available but
    neither gmtime_r() nor gmtime_s() are present. Fixes #1907.
- Version 2.13.0
  Security
  * Fix an issue in the X.509 module which could lead to a buffer overread
    during certificate extensions parsing. In case of receiving malformed
    input (extensions length field equal to 0), an illegal read of one byte
    beyond the input buffer is made. Found and analyzed by Nathan Crandall.
  Features
  * Add support for fragmentation of outgoing DTLS handshake messages. This
    is controlled by the maximum fragment length as set locally or negotiated
    with the peer, as well as by a new per-connection MTU option, set using
    mbedtls_ssl_set_mtu().
  * Add support for auto-adjustment of MTU to a safe value during the
    handshake when flights do not get through (RFC 6347, section 4.1.1.1,
    last paragraph).
  * Add support for packing multiple records within a single datagram,
    enabled by default.
  * Add support for buffering out-of-order handshake messages in DTLS.
    The maximum amount of RAM used for this can be controlled by the
    compile-time constant MBEDTLS_SSL_DTLS_MAX_BUFFERING defined
    in mbedtls/config.h.
  API Changes
  * Add function mbedtls_ssl_set_datagram_packing() to configure
    the use of datagram packing (enabled by default).
  Bugfix
  * Fix a potential memory leak in mbedtls_ssl_setup() function. An allocation
    failure in the function could lead to other buffers being leaked.
  * Fixes an issue with MBEDTLS_CHACHAPOLY_C which would not compile if
    MBEDTLS_ARC4_C and MBEDTLS_CIPHER_NULL_CIPHER weren't also defined. #1890
  * Fix a memory leak in ecp_mul_comb() if ecp_precompute_comb() fails.
    Fix contributed by Espressif Systems.
  * Add ecc extensions only if an ecc based ciphersuite is used.
    This improves compliance to RFC 4492, and as a result, solves
    interoperability issues with BouncyCastle. Raised by milenamil in #1157.
  * Replace printf with mbedtls_printf in the ARIA module. Found by
    TrinityTonic in #1908.
  * Fix potential use-after-free in mbedtls_ssl_get_max_frag_len()
    and mbedtls_ssl_get_record_expansion() after a session reset. Fixes #1941.
  * Fix a bug that caused SSL/TLS clients to incorrectly abort the handshake
    with TLS versions 1.1 and earlier when the server requested authentication
    without providing a list of CAs. This was due to an overly strict bounds
    check in parsing the CertificateRequest message,
    introduced in Mbed TLS 2.12.0. Fixes #1954.
  * Fix a miscalculation of the maximum record expansion in
    mbedtls_ssl_get_record_expansion() in case of ChachaPoly ciphersuites,
    or CBC ciphersuites in (D)TLS versions 1.1 or higher. Fixes #1913, #1914.
  * Fix undefined shifts with negative values in certificates parsing
    (found by Catena cyber using oss-fuzz)
  * Fix memory leak and free without initialization in pk_encrypt
    and pk_decrypt example programs. Reported by Brace Stout. Fixes #1128.
  * Remove redundant else statement. Raised by irwir. Fixes #1776.
  Changes
  * Copy headers preserving timestamps when doing a "make install".
    Contributed by xueruini.
  * Allow the forward declaration of public structs. Contributed by Dawid
    Drozd. Fixes #1215 raised by randombit.
  * Improve compatibility with some alternative CCM implementations by using
    CCM test vectors from RAM.
  * Add support for buffering of out-of-order handshake messages.
  * Add warnings to the documentation of the HKDF module to reduce the risk
    of misusing the mbedtls_hkdf_extract() and mbedtls_hkdf_expand()
    functions. Fixes #1775. Reported by Brian J. Murray.</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1544529601">- Library package version bumped to libmbedtls12</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1546862400">- Update to version 2.16.0:
  Features
  * Add a new config.h option of MBEDTLS_CHECK_PARAMS that enables validation of parameters in the API. This allows detection of obvious misuses of the API, such as passing NULL pointers. The API of existing functions hasn't changed, but requirements on parameters have been made more explicit in the documentation. See the corresponding API documentation for each function to see for which parameter values it is defined. This feature is disabled by default. See its API documentation in config.h for additional steps you have to take when enabling it.
  API Changes
  * The following functions in the random generator modules have been deprecated and replaced as shown below. The new functions change the return type from void to int to allow returning error codes when using MBEDTLS_&lt;MODULE&gt;_ALT for the underlying AES or message digest primitive. Fixes #1798. mbedtls_ctr_drbg_update() -&gt; mbedtls_ctr_drbg_update_ret() mbedtls_hmac_drbg_update() -&gt; mbedtls_hmac_drbg_update_ret()
  * Extend ECDH interface to enable alternative implementations.
  * Deprecate error codes of the form MBEDTLS_ERR_xxx_INVALID_KEY_LENGTH for ARIA, CAMELLIA and Blowfish. These error codes will be replaced by the more generic per-module error codes MBEDTLS_ERR_xxx_BAD_INPUT_DATA.
  * Additional parameter validation checks have been added for the following modules - AES, ARIA, Blowfish, CAMELLIA, CCM, GCM, DHM, ECP, ECDSA, ECDH, ECJPAKE, SHA, Chacha20 and Poly1305, cipher, pk, RSA, and MPI. Where modules have had parameter validation added, existing parameter checks may have changed. Some modules, such as Chacha20 had existing parameter validation whereas other modules had little. This has now been changed so that the same level of validation is present in all modules, and that it is now optional with the MBEDTLS_CHECK_PARAMS flag which by default is off. That means that checks which were previously present by default will no longer be.
  New deprecations
  * Deprecate mbedtls_ctr_drbg_update() and mbedtls_hmac_drbg_update() in favor of functions that can return an error code.
  Bugfix
  * Fix for Clang, which was reporting a warning for the bignum.c inline assembly for AMD64 targets creating string literals greater than those permitted by the ISO C99 standard. Found by Aaron Jones. Fixes #482.
  * Fix runtime error in mbedtls_platform_entropy_poll() when run through qemu user emulation. Reported and fix suggested by randombit. Fixes #1212.
  * Fix an unsafe bounds check when restoring an SSL session from a ticket. This could lead to a buffer overflow, but only in case ticket authentication was broken. Reported and fix suggested by Guido Vranken in #659.
  * Add explicit integer to enumeration type casts to example program programs/pkey/gen_key which previously led to compilation failure on some toolchains. Reported by phoenixmcallister. Fixes #2170.
  * Clarify documentation of mbedtls_ssl_set_own_cert() regarding the absence of check for certificate/key matching. Reported by Attila Molnar, #507.
  * Fix double initialization of ECC hardware that made some accelerators hang.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1567512000">- Update to version 2.16.2:
  * Security improvements and bugfixes
- Use ninja to for build</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1573646400">- Update to version 2.16.3:
  * Security improvements and bugfixes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1585828800">- Update to version 2.16.5:
  * Security improvements and bugfixes</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597665600">- update to 2.23.0:
  a lot of changes see https://github.com/ARMmbed/mbedtls/releases/tag/v2.23.0
  * Fix a side channel vulnerability in modular exponentiation that could reveal an RSA private key used in a secure enclave. Noticed by Sangho Lee, Ming-Wei Shih, Prasun Gera, Taesoo Kim and Hyesoon Kim (Georgia Institute of Technology); and Marcus Peinado (Microsoft Research). Reported by Raoul Strackx (Fortanix) in #3394.
  * Fix side channel in mbedtls_ecp_check_pub_priv() and mbedtls_pk_parse_key() / mbedtls_pk_parse_keyfile() (when loading a private key that didn't include the uncompressed public key), as well as mbedtls_ecp_mul() / mbedtls_ecp_mul_restartable() when called with a NULL f_rng argument. An attacker with access to precise enough timing and memory access information (typically an untrusted operating system attacking a secure enclave) could fully recover the ECC private key. Found and reported by Alejandro Cabrera Aldaya and Billy Brumley.
  * Fix issue in Lucky 13 counter-measure that could make it ineffective when hardware accelerators were used (using one of the MBEDTLS_SHAxxx_ALT macros). This would cause the original Lucky 13 attack to be possible in those configurations, allowing an active network attacker to recover plaintext after repeated timing measurements under some conditions. Reported and fix suggested by Luc Perneel in #3246.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1598875200">- Do not run testsuite in parallel - its not reliable</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1599480000">- Add workaround for failing builds (Python not found) due to
  https://gitlab.kitware.com/cmake/cmake/-/issues/21168</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1599652800">- update to 2.24.0:
  * see https://github.com/ARMmbed/mbedtls/releases/tag/v2.24.0
  * Fix a vulnerability in the verification of X.509 certificates when matching
  the expected common name (the cn argument of mbedtls_x509_crt_verify())
  with the actual certificate name: when the subjecAltName extension is
  present, the expected name was compared to any name in that extension
  regardless of its type. This means that an attacker could for example
  impersonate a 4-bytes or 16-byte domain by getting a certificate for the
  corresponding IPv4 or IPv6 (this would require the attacker to control that
  IP address, though). Similar attacks using other subjectAltName name types
  might be possible.
  * When checking X.509 CRLs, a certificate was only considered as revoked if
  its revocationDate was in the past according to the local clock if
  available. In particular, on builds without MBEDTLS_HAVE_TIME_DATE,
  certificates were never considered as revoked. On builds with
  MBEDTLS_HAVE_TIME_DATE, an attacker able to control the local clock (for
  example, an untrusted OS attacking a secure enclave) could prevent
  revocation of certificates via CRLs. Fixed by no longer checking the
  revocationDate field, in accordance with RFC 5280. Reported by yuemonangong
  in #3340. Reported independently and fixed by Raoul Strackx and Jethro
  * In (D)TLS record decryption, when using a CBC ciphersuites without the
  Encrypt-then-Mac extension, use constant code flow memory access patterns
  to extract and check the MAC. This is an improvement to the existing
  countermeasure against Lucky 13 attacks. The previous countermeasure was
  effective against network-based attackers, but less so against local
  attackers. The new countermeasure defends against local attackers, even if
  they have access to fine-grained measurements. In particular, this fixes a
  local Lucky 13 cache attack found and reported by Tuba Yavuz, Farhaan
  Fowze, Ken (Yihan) Bai, Grant Hernandez, and Kevin Butler (University of
  Florida) and Dave Tian (Purdue University).
  * Fix side channel in RSA private key operations and static (finite-field)
  Diffie-Hellman. An adversary with precise enough timing and memory access
  information (typically an untrusted operating system attacking a secure
  enclave) could bypass an existing counter-measure (base blinding) and
  potentially fully recover the private key.
  * Fix a 1-byte buffer overread in mbedtls_x509_crl_parse_der(). Credit to
  OSS-Fuzz for detecting the problem and to Philippe Antoine for pinpointing
  the problematic code.
  * Zeroising of plaintext buffers in mbedtls_ssl_read() to erase unused
  application data from memory.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1608638400">- update to 2.25.0:
  * This release of Mbed TLS provides bug fixes, minor enhancements and new
  features. This release includes fixes for security issues.
  * see https://github.com/ARMmbed/mbedtls/releases/tag/v2.25.0
  * The functions mbedtls_cipher_auth_encrypt() and
  mbedtls_cipher_auth_decrypt() would write past the minimum documented size
  of the output buffer when used with NIST_KW. As a result, code using those
  functions as documented with NIST_KW could have a buffer overwrite of up to
  15 bytes, with consequences ranging up to arbitrary code execution
  depending on the location of the output buffer.
  * Limit the size of calculations performed by mbedtls_mpi_exp_mod to
  MBEDTLS_MPI_MAX_SIZE to prevent a potential denial of service when generating
  Diffie-Hellman key pairs. Credit to OSS-Fuzz.
  * A failure of the random generator was ignored in mbedtls_mpi_fill_random(),
  which is how most uses of randomization in asymmetric cryptography (including
  key generation, intermediate value randomization and blinding) are implemented.
  This could cause failures or the silent use of non-random values. A random
  generator can fail if it needs reseeding and cannot not obtain entropy, or due
  to an internal failure (which, for Mbed TLS's own CTR_DRBG or HMAC_DRBG, can
  only happen due to a misconfiguration).
  * Fix a compliance issue whereby we were not checking the tag on the algorithm
  parameters (only the size) when comparing the signature in the description part
  of the cert to the real signature. This meant that a NULL algorithm parameters
  entry would look identical to an array of REAL (size zero) to the library and
  thus the certificate would be considered valid. However, if the parameters do
  not match in any way then the certificate should be considered invalid, and
  indeed OpenSSL marks these certs as invalid when mbedtls did not. Many thanks
  to guidovranken who found this issue via differential fuzzing and reported it
  in #3629.
  * Zeroising of local buffers and variables which are used for calculations in
  mbedtls_pkcs5_pbkdf2_hmac(), mbedtls_internal_sha*_process(),
  mbedtls_internal_md*_process() and mbedtls_internal_ripemd160_process()
  functions to erase sensitive data from memory. Reported by Johan Malmgren and
  Johan Uppman Bruce from Sectra.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1611057600">- Fix build for Leap targets
- Use upstream tarball name</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1616414400">- Update to 2.26.0: [bsc#1189589, CVE-2021-24119]
  * * This release of Mbed TLS provides bug fixes, minor enhancements and new
  features. This release includes fixes for security issues.
  * see https://github.com/ARMmbed/mbedtls/releases/tag/v2.26.0
- Fix build with patch from https://github.com/ARMmbed/mbedtls/pull/4237
  mbedtls-4237.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1618488000">-  Workaround for building with gcc-11 boo#1181876</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1626782400">- Update to 2.27.0:
  API changes:
  * Update AEAD output size macros to bring them in line with the PSA Crypto
    API version 1.0 spec. This version of the spec parameterizes them on the
    key type used, as well as the key bit-size in the case of
    PSA_AEAD_TAG_LENGTH.
    The old versions of these macros were renamed and deprecated as follows:
  - PSA_AEAD_TAG_LENGTH          -&gt; PSA_AEAD_TAG_LENGTH_1_ARG
  - PSA_AEAD_ENCRYPT_OUTPUT_SIZE -&gt; PSA_AEAD_ENCRYPT_OUTPUT_SIZE_2_ARG
  - PSA_AEAD_DECRYPT_OUTPUT_SIZE -&gt; PSA_AEAD_DECRYPT_OUTPUT_SIZE_2_ARG
  - PSA_AEAD_UPDATE_OUTPUT_SIZE  -&gt; PSA_AEAD_UPDATE_OUTPUT_SIZE_2_ARG
  - PSA_AEAD_FINISH_OUTPUT_SIZE  -&gt; PSA_AEAD_FINISH_OUTPUT_SIZE_1_ARG
  - PSA_AEAD_VERIFY_OUTPUT_SIZE  -&gt; PSA_AEAD_VERIFY_OUTPUT_SIZE_1_ARG
  * Implement one-shot cipher functions, psa_cipher_encrypt and
    psa_cipher_decrypt, according to the PSA Crypto API 1.0.0
    specification.
  Features:
  * Add mbedtls_rsa_rsassa_pss_sign_ext() function allowing to generate a
    signature with a specific salt length. This function allows to validate
    test cases provided in the NIST's CAVP test suite.
  * Added support for built-in driver keys through the PSA opaque crypto
    driver interface. Refer to the documentation of
    MBEDTLS_PSA_CRYPTO_BUILTIN_KEYS for more information.
  * Implement psa_sign_message() and psa_verify_message().
  * The new function mbedtls_mpi_random() generates a random value in a
    given range uniformly.
  * Implement psa_mac_compute() and psa_mac_verify() as defined in the
    PSA Cryptograpy API 1.0.0 specification.
  * MBEDTLS_ECP_MAX_BITS is now determined automatically from the configured
    curves and no longer needs to be configured explicitly to save RAM.
  Security
  * Fix a bias in the generation of finite-field Diffie-Hellman-Merkle (DHM)
    private keys and of blinding values for DHM and elliptic curves (ECP)
    computations.
  * Fix a potential side channel vulnerability in ECDSA ephemeral key generation.
    An adversary who is capable of very precise timing measurements could
    learn partial information about the leading bits of the nonce used for the
    signature, allowing the recovery of the private key after observing a
    large number of signature operations. This completes a partial fix in
    Mbed TLS 2.20.0.
  * It was possible to configure MBEDTLS_ECP_MAX_BITS to a value that is
    too small, leading to buffer overflows in ECC operations. Fail the build
    in such a case.
  * An adversary with access to precise enough information about memory
    accesses (typically, an untrusted operating system attacking a secure
    enclave) could recover an RSA private key after observing the victim
    performing a single private-key operation.
  * An adversary with access to precise enough timing information (typically, a
    co-located process) could recover a Curve25519 or Curve448 static ECDH key
    after inputting a chosen public key and observing the victim performing the
    corresponding private-key operation.
  Bugfix
  * Add printf function attributes to mbedtls_debug_print_msg to ensure we
    get printf format specifier warnings.
  * Fix premature fopen() call in mbedtls_entropy_write_seed_file which may
    lead to seed file corruption in the case where the path to the seed file is
    equal to MBEDTLS_PLATFORM_STD_NV_SEED_FILE.
  * PSA functions other than psa_open_key now return PSA_ERROR_INVALID_HANDLE
    rather than PSA_ERROR_DOES_NOT_EXIST for an invalid handle, bringing them
    in line with version 1.0.0 of the specification.
  * PSA functions creating a key now return PSA_ERROR_INVALID_ARGUMENT rather
    than PSA_ERROR_INVALID_HANDLE when the identifier specified for the key
    to create is not valid, bringing them in line with version 1.0.0 of the
    specification.
  * Fix some cases in the bignum module where the library constructed an
    unintended representation of the value 0 which was not processed
    correctly by some bignum operations. This could happen when
    mbedtls_mpi_read_string() was called on "-0", or when
    mbedtls_mpi_mul_mpi() and mbedtls_mpi_mul_int() was called with one of
    the arguments being negative and the other being 0.
  * Fix a bug in ECDSA that would cause it to fail when the hash is all-bits
    zero.
  * Fix a compilation error when MBEDTLS_ECP_RANDOMIZE_MXZ_ALT is
    defined.
  * Fix an incorrect error code when parsing a PKCS#8 private key.
  * In a TLS client, enforce the Diffie-Hellman minimum parameter size
    set with mbedtls_ssl_conf_dhm_min_bitlen() precisely. Before, the
    minimum size was rounded down to the nearest multiple of 8.
  * In library/net_sockets.c, _POSIX_C_SOURCE and _XOPEN_SOURCE are
    defined to specific values.  If the code is used in a context
    where these are already defined, this can result in a compilation
    error.  Instead, assume that if they are defined, the values will
    be adequate to build Mbed TLS.
  * The cipher suite TLS-RSA-WITH-CAMELLIA-256-GCM-SHA384 was not available
    when SHA-1 was disabled and was offered when SHA-1 was enabled but SHA-384
    was disabled. Fix the dependency.
  * Do not offer SHA384 cipher suites when SHA-384 is disabled.
  * With MBEDTLS_PSA_CRYPTO_C disabled, some functions were getting built
    nonetheless, resulting in undefined reference errors when building a
    shared library.
  * Fix test suite code on platforms where int32_t is not int, such as
    Arm Cortex-M.
  * Fix some issues affecting MBEDTLS_ARIA_ALT implementations: a misplaced
    directive in a header and a missing initialization in the self-test.
  * Fix a missing initialization in the Camellia self-test, affecting
    MBEDTLS_CAMELLIA_ALT implementations.
  * Restore the ability to configure PSA via Mbed TLS options to support RSA
    key pair operations but exclude RSA key generation. When MBEDTLS_GENPRIME
    is not defined PSA will no longer attempt to use mbedtls_rsa_gen_key().
  * Fix a regression introduced in 2.24.0 which broke (D)TLS CBC ciphersuites
    (when the encrypt-then-MAC extension is not in use) with some ALT
    implementations of the underlying hash (SHA-1, SHA-256, SHA-384), causing
    the affected side to wrongly reject valid messages.
  * Remove outdated check-config.h check that prevented implementing the
    timing module on Mbed OS.
  * Fix PSA_ALG_TLS12_PRF and PSA_ALG_TLS12_PSK_TO_MS being too permissive
    about missing inputs.
  * Fix a resource leak in a test suite with an alternative AES
    implementation.
  * Fix a crash in mbedtls_mpi_debug_mpi on a bignum having 0 limbs. This
    could notably be triggered by setting the TLS debug level to 3 or above
    and using a Montgomery curve for the key exchange.
  * psa_verify_hash() was relying on implementation-specific behavior of
    mbedtls_rsa_rsassa_pss_verify() and was causing failures in some _ALT
    implementations. This reliance is now removed.
  * Disallow inputs of length different from the corresponding hash when
    signing or verifying with PSA_ALG_RSA_PSS (The PSA Crypto API mandates
    that PSA_ALG_RSA_PSS uses the same hash throughout the algorithm.)
  * Fix a null pointer dereference when mbedtls_mpi_exp_mod() was called with
    A=0 represented with 0 limbs. Up to and including Mbed TLS 2.26, this bug
    could not be triggered by code that constructed A with one of the
    mbedtls_mpi_read_xxx functions (including in particular TLS code) since
    those always built an mpi object with at least one limb.
  * Fix mbedtls_mpi_gcd(G,A,B) when the value of B is zero. This had no
    effect on Mbed TLS's internal use of mbedtls_mpi_gcd(), but may affect
    applications that call mbedtls_mpi_gcd() directly.
  * The PSA API no longer allows the creation or destruction of keys with a
    read-only lifetime. The persistence level PSA_KEY_PERSISTENCE_READ_ONLY
    can now only be used as intended, for keys that cannot be modified through
    normal use of the API.
  * When MBEDTLS_PSA_CRYPTO_SPM is enabled, crypto_spe.h was not included
    in all the right places. Include it from crypto_platform.h, which is
    the natural place.
  * mbedtls_pk_sign() and mbedtls_pk_verify() and their extended and
    restartable variants now always honor the specified hash length if
    nonzero. Before, for RSA, hash_len was ignored in favor of the length of
    the specified hash algorithm.
  * Fix which alert is sent in some cases to conform to the
    applicable RFC: on an invalid Finished message value, an
    invalid max_fragment_length extension, or an
    unsupported extension used by the server.
  * Correct (change from 12 to 13 bytes) the value of the macro describing the
    maximum nonce length returned by psa_aead_generate_nonce().
  Changes
  * Add extra printf compiler warning flags to builds.
  * Fix memsan build false positive in x509_crt.c with Clang 11
  * Fix the setting of the read timeout in the DTLS sample programs.
  * Remove the AES sample application programs/aes/aescrypt2 which shows
    bad cryptographic practice.
  * Alternative implementations of CMAC may now opt to not support 3DES as a
    CMAC block cipher, and still pass the CMAC self test.
  * Remove configs/config-psa-crypto.h, which was identical to the default
    configuration except for having some extra cryptographic mechanisms
    enabled and for unintended differences. This configuration was primarily
    intended to demonstrate the PSA API, and lost most of its usefulness when
    MBEDTLS_PSA_CRYPTO_C became enabled by default.
  * When building the test suites with GNU make, invoke python3 or python, not
    python2, which is no longer supported upstream.
  * When using session cache based session resumption on the server,
    double-check that custom session cache implementations return
    sessions which are consistent with the negotiated ciphersuite
    and compression method.
  * Fix build failure on MinGW toolchain when __USE_MING_ANSI_STDIO is on.
    When that flag is on, standard GNU C printf format specifiers
    should be used.
  * Reduce the default value of MBEDTLS_ECP_WINDOW_SIZE. This reduces RAM usage
    during ECC operations at a negligible performance cost.
  * mbedtls_mpi_read_binary(), mbedtls_mpi_read_binary_le() and
    mbedtls_mpi_read_string() now construct an mbedtls_mpi object with 0 limbs
    when their input has length 0. Note that this is an implementation detail
    and can change at any time, so this change should be transparent, but it
    may result in mbedtls_mpi_write_binary() or mbedtls_mpi_write_string()
    now writing an empty string where it previously wrote one or more
    zero digits when operating from values constructed with an mpi_read
    function and some mpi operations.
  * Implicitly add PSA_KEY_USAGE_SIGN_MESSAGE key usage policy flag when
    PSA_KEY_USAGE_SIGN_HASH flag is set and PSA_KEY_USAGE_VERIFY_MESSAGE flag
    when PSA_KEY_USAGE_VERIFY_HASH flag is set. This usage flag extension
    is also applied when loading a key from storage.
  * Remove mbedtls-4237.patch upstream
  * Library soname bump to libmbedcrypto7</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1642075200">- Update to 2.28.0: (bsc#1193979, CVE-2021-45450)
  API changes
  * Some fields of mbedtls_ssl_session and mbedtls_ssl_config are in a
  different order. This only affects applications that define such
  structures directly or serialize them.
  Requirement changes
  * Sign-magnitude and one's complement representations for signed integers are
  not supported. Two's complement is the only supported representation.
  Removals
  * Remove config option MBEDTLS_TLS_DEFAULT_ALLOW_SHA1_IN_CERTIFICATES,
  which allowed SHA-1 in the default TLS configuration for certificate
  signing. It was intended to facilitate the transition in environments
  with SHA-1 certificates. SHA-1 is considered a weak message digest and
  its use constitutes a security risk.
  * Remove the partial support for running unit tests via Greentea on Mbed OS,
  which had been unmaintained since 2018.
  Features
  * The identifier of the CID TLS extension can be configured by defining
  MBEDTLS_TLS_EXT_CID at compile time.
  * Warn if errors from certain functions are ignored. This is currently
  supported on GCC-like compilers and on MSVC and can be configured through
  the macro MBEDTLS_CHECK_RETURN. The warnings are always enabled
  (where supported) for critical functions where ignoring the return
  value is almost always a bug. Enable the new configuration option
  MBEDTLS_CHECK_RETURN_WARNING to get warnings for other functions. This
  is currently implemented in the AES, DES and md modules, and will be
  extended to other modules in the future.
  * Add missing PSA macros declared by PSA Crypto API 1.0.0:
  PSA_ALG_IS_SIGN_HASH, PSA_ALG_NONE, PSA_HASH_BLOCK_LENGTH, PSA_KEY_ID_NULL.
  * Add new API mbedtls_ct_memcmp for constant time buffer comparison.
  * Add PSA API definition for ARIA.
  Security
  * Zeroize several intermediate variables used to calculate the expected
  value when verifying a MAC or AEAD tag. This hardens the library in
  case the value leaks through a memory disclosure vulnerability. For
  example, a memory disclosure vulnerability could have allowed a
  man-in-the-middle to inject fake ciphertext into a DTLS connection.
  * In psa_cipher_generate_iv() and psa_cipher_encrypt(), do not read back
  from the output buffer. This fixes a potential policy bypass or decryption
  oracle vulnerability if the output buffer is in memory that is shared with
  an untrusted application.
  * Fix a double-free that happened after mbedtls_ssl_set_session() or
  mbedtls_ssl_get_session() failed with MBEDTLS_ERR_SSL_ALLOC_FAILED
  (out of memory). After that, calling mbedtls_ssl_session_free()
  and mbedtls_ssl_free() would cause an internal session buffer to
  be free()'d twice.
  Bugfix
  * Stop using reserved identifiers as local variables. Fixes #4630.
  * The GNU makefiles invoke python3 in preference to python except on Windows.
  * The check was accidentally not performed when cross-compiling for Windows
  on Linux. Fix this. Fixes #4774.
  * Prevent divide by zero if either of PSA_CIPHER_ENCRYPT_OUTPUT_SIZE() or
  PSA_CIPHER_UPDATE_OUTPUT_SIZE() were called using an asymmetric key type.
  * Fix a parameter set but unused in psa_crypto_cipher.c. Fixes #4935.
  * Don't use the obsolete header path sys/fcntl.h in unit tests.
  These header files cause compilation errors in musl.
  Fixes #4969.
  * Fix missing constraints on x86_64 and aarch64 assembly code
  for bignum multiplication that broke some bignum operations with
  (at least) Clang 12.
  Fixes #4116, #4786, #4917, #4962.
  * Fix mbedtls_cipher_crypt: AES-ECB when MBEDTLS_USE_PSA_CRYPTO is enabled.
  * Failures of alternative implementations of AES or DES single-block
  functions enabled with MBEDTLS_AES_ENCRYPT_ALT, MBEDTLS_AES_DECRYPT_ALT,
  MBEDTLS_DES_CRYPT_ECB_ALT or MBEDTLS_DES3_CRYPT_ECB_ALT were ignored.
  This does not concern the implementation provided with Mbed TLS,
  where this function cannot fail, or full-module replacements with
  MBEDTLS_AES_ALT or MBEDTLS_DES_ALT. Reported by Armelle Duboc in #1092.
  * Some failures of HMAC operations were ignored. These failures could only
  happen with an alternative implementation of the underlying hash module.
  * Fix the error returned by psa_generate_key() for a public key. Fixes #4551.
  * Fix the build of sample programs when neither MBEDTLS_ERROR_C nor
  MBEDTLS_ERROR_STRERROR_DUMMY is enabled.
  * Fix PSA_ALG_RSA_PSS verification accepting an arbitrary salt length.
  This algorithm now accepts only the same salt length for verification
  that it produces when signing, as documented. Use the new algorithm
  PSA_ALG_RSA_PSS_ANY_SALT to accept any salt length. Fixes #4946.
  * The existing predicate macro name PSA_ALG_IS_HASH_AND_SIGN is now reserved
  for algorithm values that fully encode the hashing step, as per the PSA
  Crypto API specification. This excludes PSA_ALG_RSA_PKCS1V15_SIGN_RAW and
  PSA_ALG_ECDSA_ANY. The new predicate macro PSA_ALG_IS_SIGN_HASH covers
  all algorithms that can be used with psa_{sign,verify}_hash(), including
  these two.
  * Fix issue in Makefile on Linux with SHARED=1, that caused shared libraries
  not to list other shared libraries they need.
  * Fix a bug in mbedtls_gcm_starts() when the bit length of the iv
  exceeds 2^32. Fixes #4884.
  * Fix an uninitialized variable warning in test_suite_ssl.function with GCC
  version 11.
  * Fix the build when no SHA2 module is included. Fixes #4930.
  * Fix the build when only the bignum module is included. Fixes #4929.
  * Fix a potential invalid pointer dereference and infinite loop bugs in
  pkcs12 functions when the password is empty. Fix the documentation to
  better describe the inputs to these functions and their possible values.
  Fixes #5136.
  * The key usage flags PSA_KEY_USAGE_SIGN_MESSAGE now allows the MAC
  operations psa_mac_compute() and psa_mac_sign_setup().
  * The key usage flags PSA_KEY_USAGE_VERIFY_MESSAGE now allows the MAC
  operations psa_mac_verify() and psa_mac_verify_setup().
  Changes
  * Set config option MBEDTLS_TLS_DEFAULT_ALLOW_SHA1_IN_KEY_EXCHANGE to be
  disabled by default.
  * Improve the performance of base64 constant-flow code. The result is still
  slower than the original non-constant-flow implementation, but much faster
  than the previous constant-flow implementation. Fixes #4814.
  * Indicate in the error returned if the nonce length used with
  ChaCha20-Poly1305 is invalid, and not just unsupported.
  * The mbedcrypto library includes a new source code module constant_time.c,
  containing various functions meant to resist timing side channel attacks.
  * This module does not have a separate configuration option, and functions
  from this module will be included in the build as required. Currently
  most of the interface of this module is private and may change at any
  time.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1642420800">- Fix baselib.conf</changelog>
  <changelog author="Alexander Bergmann &lt;abergmann@suse.com&gt;" date="1671624000">- Fix potential heap buffer overread and overwrite in DTLS if
  MBEDTLS_SSL_DTLS_CONNECTION_ID is enabled and
  MBEDTLS_SSL_CID_IN_LEN_MAX &gt; 2 * MBEDTLS_SSL_CID_OUT_LEN_MAX.
  (bsc#1206576, CVE-2022-46393).
  Add: mbedtls-CVE-2022-46393.patch</changelog>
</package>
<package pkgid="d7bc405dce0ab5b83a1ba06cab5dbc8c653e6dc23a2e768110346ee6917b2f18" name="libmbedcrypto7" arch="s390x">
  <version epoch="0" ver="2.28.0" rel="bp154.2.3.1"/>
  <changelog author="mpluskal@suse.com" date="1531137600">- Update to version 2.11.0:
  * Features
    + Added support for the XTS block cipher mode with AES (AES-XTS). Contributed by Aorimn in pull request #414.
    + Implemented the HMAC-based extract-and-expand key derivation function (HKDF) per RFC 5869. Contributed by Thomas Fossati.
    + For TLS servers, added support for offloading private key operations to an external cryptoprocessor. Private key operations can be asynchronous to allow non-blocking operation of the TLS server stack.
    + Added support for ARIA cipher (RFC 5794) and associated TLS ciphersuites (RFC 6209). ARIA is disabled by default. To enable, see MBEDTLS_ARIA_C in config.h.
    + Added support for the CCM* block cipher mode as defined in IEEE Std 802.15.4.
    + Added an additional block mode, OFB (Output Feedback) per NIST SP 800-38a, to the AES module and cipher abstraction module.
  * API Changes
    + Mbed TLS 2.11.0 maintains source code compatibility with the last minor version, Mbed TLS 2.9.0, but extends the interface with additional capabilities. Mbed TLS 2.11.0 modifies the ABI and increases the SOVERSION.
  * Bugfix
    + Fixed the cert_write example to handle certificates signed with elliptic curves as well as RSA. Fixes #777 found by dbedev.
    + Fixed the redefinition of _WIN32_WINNT, to avoid overriding a definition used by user applications. Found and fixed by Fabio Alessandrelli.
    + Fixed compilation warnings with the IAR toolchain on 32-bit platforms. Reported by rahmanih in #683.
    + Fixed an issue with MicroBlaze support in bn_mul.h which was causing the build to fail. Found by zv-io. Fixes #1651.
    + Fixed braces in mbedtls_memory_buffer_alloc_status(). Found by sbranden in #552.
    + Added the macro MBEDTLS_X509_MAX_FILE_PATH_LEN that enables the user to configure the maximum length of a file path that can be buffered when calling mbedtls_x509_crt_parse_path(). Fixes #492.
    + Fixed redundant declaration of mbedtls_ssl_list_ciphersuites. Raised by TrinityTonic in #1359.
- Changes for version 2.9.0:
  + Security
    + Fixed an issue in the X.509 module which could lead to a buffer overread during certificate validation. Additionally, the issue could also lead to unnecessary callback checks being made or to some validation checks to be omitted. The overread could be triggered remotely, while the other issues would require a non DER-compliant certificate to be correctly signed by a trusted CA, or a trusted CA with a non DER-compliant certificate. Found by luocm. Fixes #825.
    + Fixed the buffer length assertion in the ssl_parse_certificate_request() function which could lead to an arbitrary overread of the message buffer. The overreads could be caused by receiving a malformed algorithms section which was too short. In builds with debug output, this overread data was output with the debug data.
    + Fixed a client-side bug in the validation of the server's ciphersuite choice which could potentially lead to the client accepting a ciphersuite it didn't offer or a ciphersuite that could not be used with the TLS or DTLS version chosen by the server. This could lead to corruption of internal data structures for some configurations.
  * Features
    + Added an option of MBEDTLS_AES_FEWER_TABLES, to dynamically compute smaller AES tables during runtime, thereby reducing the RAM/ROM footprint by ~6KiB. Suggested and contributed by jkivilin.
    + Added initial support for Curve448 (RFC 7748). So far only mbedtls_ecp_mul() and ECDH primitive functions (mbedtls_ecdh_gen_public(), mbedtls_ecdh_compute_shared()) are supported for now. Contributed by Nicholas Wilson.
  * API Changes
    + Mbed TLS 2.9.0 maintains source code and binary compatibility with the last minor version, Mbed TLS 2.8.0, but extends the interface with additional capabilities.
    + Extended the API with the function of mbedtls_net_poll() to allow user applications to wait for a network context to become ready before reading or writing.
    + Added the function mbedtls_ssl_check_pending() to the public API to allow a check for whether more more data is pending to be processed in the internal message buffers. This function is necessary to determine the underlying transport when event-driven IO is used.
  * Bugfix
    + Fixed a spurious uninitialized variable warning in cmac.c. Fix independently contributed by Brian J Murray and David Brown.
    + Added missing dependencies in test suites that led to build failures in configurations that omit certain hashes or public-key algorithms. Fixes #1040.
    + Fixed a C89 incompatibility issue in benchmark.c. Contributed by Brendan Shanks. Fixes #1353.
    + Added missing dependencies for MBEDTLS_HAVE_TIME_DATE and MBEDTLS_VERSION_FEATURES in some test suites. Contributed by Deomid Ryabkov. Fixes #1299, #1475.
    + Fixed the Makefile build process for building shared libraries on Mac OS X. Fixed by mnacamura.
    + Fixed parsing of PKCS#8 encoded Elliptic Curve keys. Previously Mbed TLS was unable to parse keys which had only the optional parameters field of the ECPrivateKey structure. Found by Jethro Beekman, fixed in #1379.
    + Added an optimisation to return the plaintext data more quickly on unpadded CBC decryption, as stated in the mbedtls_cipher_update() documentation. Contributed by Andy Leiserson.
    + Fixed the overriding and ignoring of return values when parsing and writing to a file in the pk_sign program. Found by kevlut in #1142.
    + Added restrictions to the usage of the error code MBEDTLS_ERR_SSL_WANT_READ to situations where data needs to be fetched from the underlying transport in order to make progress. Previously, this error code was also occasionally returned when unexpected messages were being discarded, ignoring that further messages could potentially already be pending to be processed in the internal buffers; these cases led to deadlocks when event-driven I/O was used. Found and reported by Hubert Mis in #772.
    + Fixed buffer length assertions in the ssl_parse_certificate_request() function which led to a potential one byte overread of the message buffer.
    + Fixed invalid buffer sizes being passed to zlib during record compression and decompression.
    + Raised the soversion of libmbedcrypto to match the soversion of the maintained 2.7 branch. The soversion was increased in Mbed TLS version 2.7.1 to reflect breaking changes in that release, but the increment was missed in 2.8.0 and later releases outside of the 2.7 branch.</changelog>
  <changelog author="mpluskal@suse.com" date="1535025600">- Update to version 2.12.0:
  * Security
    + Fixed a vulnerability in the TLS ciphersuites based on use of CBC and SHA-384 in DTLS/TLS 1.0 to 1.2, that allowed an active network attacker to partially recover the plaintext of messages under certains conditions by exploiting timing side-channels.
    + Fixed a vulnerability in TLS ciphersuites based on CBC, in DTLS/TLS 1.0 to 1.2, that allowed a local attacker, with the ability to execute code on the local machine as well as to manipulate network packets, to partially recover the plaintext of messages under certain conditions by using a cache attack targetting an internal MD/SHA buffer.
    + Added a counter-measure against a vulnerability in TLS ciphersuites based on CBC, in DTLS/TLS 1.0 to 1.2, that allowed a local attacker with the ability to execute code on the local machine as well as manipulate network packets, to partially recover the plaintext of messages certain conditions (see previous entry) by using a cache attack targeting the SSL input record buffer.
  * Features
    + Added new cryptographic primitives, the stream cipher Chacha20, one-time authenticator Poly1305 and AEAD construct Chacha20-Poly1305, as defined in RFC 7539. Contributed by Daniel King.
    + Added support for the CHACHA20-POLY1305 ciphersuites from RFC 7905.
    + Made the receive and transmit buffers independently configurable in size, for situations where the outgoing buffer can be fixed at a smaller size than the incoming buffer
    + Added support for the AES based key wrapping modes defined by NIST SP 800-38F algorithms KW and KWP and by RFC's 3394 and 5649.
    + Added platform support for the Haiku OS.
  * Bugfix
    + Fixed the key_app_writer example which was creating an invalid ASN.1 tag by writing an additional leading zero byte. Found by Aryeh R. #1257.
    + Fixed a C++ compilation error, caused by a variable named new. Found and fixed by Hirotaka Niisato. #1783.
    + Fixed the "no symbols" warning issued by ranlib when building on Mac OS X. Fix contributed by tabascoeye.
    + Clarified documentation for mbedtls_ssl_write() to include 0 as a valid return value. Found by @davidwu2000. #839.
    + Fixed a memory leak in mbedtls_x509_csr_parse(). Found and fixed by catenacyber, Philippe Antoine. #1623.
    + Added length checks to some TLS parsing functions. Found and fixed by Philippe Antoine from Catena cyber. #1663.
    + Remove unused headers included in x509.c. Found by Chris Hanson and fixed by Brendan Shanks. #992.
    + Fixed compilation error when MBEDTLS_ARC4_C is disabled and MBEDTLS_CIPHER_NULL_CIPHER is enabled. Found by TrinityTonic in #1719.
    + Fixed the inline assembly for the MPI multiply helper function for i386 and i386 with SSE2. Found by László Langó. #1550.
    + Fixed the namespacing in header files. Remove the mbedtls namespacing in the #include in the header files. #857.
    + Fixed a compiler warning of 'use before initialisation' in mbedtls_pk_parse_key(). Found by Martin Boye Petersen and fixed by Dawid Drozd.#1098.
    + Fixed decryption of zero length messages (which contain all padding) when a CBC based ciphersuite was used together with Encrypt-then-MAC.
    + Fixed the ssl_client2 example to send application data with 0-length content when the request_size argument is set to 0 as stated in the documentation. #1833.
    + Corrected the documentation for mbedtls_ssl_get_session(). This API has deep copy of the session, and the peer certificate is not lost. #926.
    + Fixed issues when building to the C99 standard, using -std=c99. Fixed by Nick Wilson.
  * Changes
    + Fails when receiving a TLS alert message with an invalid length, or invalid zero-length messages when using TLS 1.2. Contributed by Espressif Systems.
    + Changed the default behaviour of mbedtls_hkdf_extract() to return an error when calling with a NULL salt and non-zero salt length. Contributed by Brian J Murray
    + Change the shebang line in Perl scripts to look up perl in the PATH. Contributed by fbrosson.
    + Allow overriding the time on Windows via the platform-time abstraction. Fixed by Nick Wilson.
    + Use gmtime_r/gmtime_s for thread-safety. Fixed by Nick Wilson.</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1544529600">- Update to version 2.14.1: [bsc#1118727, CVE-2018-19608]
  Security
  * Fix timing variations and memory access variations in RSA PKCS#1 v1.5
    decryption that could lead to a Bleichenbacher-style padding oracle
    attack. In TLS, this affects servers that accept ciphersuites based on
    RSA decryption (i.e. ciphersuites whose name contains RSA but not
    (EC)DH(E)). Discovered by Eyal Ronen (Weizmann Institute),  Robert Gillham
    (University of Adelaide), Daniel Genkin (University of Michigan),
    Adi Shamir (Weizmann Institute), David Wong (NCC Group), and Yuval Yarom
    (University of Adelaide, Data61). The attack is described in more detail
    in the paper available here: http://cat.eyalro.net/cat.pdf  CVE-2018-19608
  * In mbedtls_mpi_write_binary(), don't leak the exact size of the number
    via branching and memory access patterns. An attacker who could submit
    a plaintext for RSA PKCS#1 v1.5 decryption but only observe the timing
    of the decryption and not its result could nonetheless decrypt RSA
    plaintexts and forge RSA signatures. Other asymmetric algorithms may
    have been similarly vulnerable. Reported by Eyal Ronen, Robert Gillham,
    Daniel Genkin, Adi Shamir, David Wong and Yuval Yarom.
  * Wipe sensitive buffers on the stack in the CTR_DRBG and HMAC_DRBG
    modules.
  API Changes
  * The new functions mbedtls_ctr_drbg_update_ret() and
    mbedtls_hmac_drbg_update_ret() are similar to mbedtls_ctr_drbg_update()
    and mbedtls_hmac_drbg_update() respectively, but the new functions
    report errors whereas the old functions return void. We recommend that
    applications use the new functions.
- Version 2.14.0:
  Security
  * Fix overly strict DN comparison when looking for CRLs belonging to a
    particular CA. This previously led to ignoring CRLs when the CRL's issuer
    name and the CA's subject name differed in their string encoding (e.g.,
    one using PrintableString and the other UTF8String) or in the choice of
    upper and lower case. Reported by Henrik Andersson of Bosch GmbH in issue
    [#1784].
  * Fix a flawed bounds check in server PSK hint parsing. In case the
    incoming message buffer was placed within the first 64KiB of address
    space and a PSK-(EC)DHE ciphersuite was used, this allowed an attacker
    to trigger a memory access up to 64KiB beyond the incoming message buffer,
    potentially leading to an application crash or information disclosure.
  * Fix mbedtls_mpi_is_prime() to use more rounds of probabilistic testing. The
    previous settings for the number of rounds made it practical for an
    adversary to construct non-primes that would be erroneously accepted as
    primes with high probability. This does not have an impact on the
    security of TLS, but can matter in other contexts with numbers chosen
    potentially by an adversary that should be prime and can be validated.
    For example, the number of rounds was enough to securely generate RSA key
    pairs or Diffie-Hellman parameters, but was insufficient to validate
    Diffie-Hellman parameters properly.
    See "Prime and Prejudice" by by Martin R. Albrecht and Jake Massimo and
    Kenneth G. Paterson and Juraj Somorovsky.
  Features
  * Add support for temporarily suspending expensive ECC computations after
    some configurable amount of operations. This is intended to be used in
    constrained, single-threaded systems where ECC is time consuming and can
    block other operations until they complete. This is disabled by default,
    but can be enabled by MBEDTLS_ECP_RESTARTABLE at compile time and
    configured by mbedtls_ecp_set_max_ops() at runtime. It applies to the new
    xxx_restartable functions in ECP, ECDSA, PK and X.509 (CRL not supported
    yet), and to existing functions in ECDH and SSL (currently only
    implemented client-side, for ECDHE-ECDSA ciphersuites in TLS 1.2,
    including client authentication).
  * Add support for Arm CPU DSP extensions to accelerate asymmetric key
    operations. On CPUs where the extensions are available, they can accelerate
    MPI multiplications used in ECC and RSA cryptography. Contributed by
    Aurelien Jarno.
  * Extend RSASSA-PSS signature to allow a smaller salt size. Previously, PSS
    signature always used a salt with the same length as the hash, and returned
    an error if this was not possible. Now the salt size may be up to two bytes
    shorter. This allows the library to support all hash and signature sizes
    that comply with FIPS 186-4, including SHA-512 with a 1024-bit key.
  * Add support for 128-bit keys in CTR_DRBG. Note that using keys shorter
    than 256 bits limits the security of generated material to 128 bits.
  API Changes
  * Add a common error code of `MBEDTLS_ERR_PLATFORM_FEATURE_UNSUPPORTED` for
    a feature that is not supported by underlying alternative
    implementations implementing cryptographic primitives. This is useful for
    hardware accelerators that don't implement all options or features.
  New deprecations
  * All module specific errors following the form
    MBEDTLS_ERR_XXX_FEATURE_UNAVAILABLE that indicate a feature is not
    supported are deprecated and are now replaced by the new equivalent
    platform error.
  * All module specific generic hardware acceleration errors following the
    form MBEDTLS_ERR_XXX_HW_ACCEL_FAILED that are deprecated and are replaced
    by the equivalent plaform error.
  * Deprecate the function mbedtls_mpi_is_prime() in favor of
    mbedtls_mpi_is_prime_ext() which allows specifying the number of
    Miller-Rabin rounds.
  Bugfix
  * Fix wrong order of freeing in programs/ssl/ssl_server2 example
    application leading to a memory leak in case both
    MBEDTLS_MEMORY_BUFFER_ALLOC_C and MBEDTLS_MEMORY_BACKTRACE are set.
    Fixes #2069.
  * Fix a bug in the update function for SSL ticket keys which previously
    invalidated keys of a lifetime of less than a 1s. Fixes #1968.
  * Fix failure in hmac_drbg in the benchmark sample application, when
    MBEDTLS_THREADING_C is defined. Found by TrinityTonic, #1095
  * Fix a bug in the record decryption routine ssl_decrypt_buf()
    which lead to accepting properly authenticated but improperly
    padded records in case of CBC ciphersuites using Encrypt-then-MAC.
  * Fix memory leak and freeing without initialization in the example
    program programs/x509/cert_write. Fixes #1422.
  * Ignore IV in mbedtls_cipher_set_iv() when the cipher mode is
    MBEDTLS_MODE_ECB. Found by ezdevelop. Fixes #1091.
  * Zeroize memory used for buffering or reassembling handshake messages
    after use.
  * Use `mbedtls_platform_zeroize()` instead of `memset()` for zeroization
    of sensitive data in the example programs aescrypt2 and crypt_and_hash.
  * Change the default string format used for various X.509 DN attributes to
    UTF8String. Previously, the use of the PrintableString format led to
    wildcards and non-ASCII characters being unusable in some DN attributes.
    Reported by raprepo in #1860 and by kevinpt in #468. Fix contributed by
    Thomas-Dee.
  * Fix compilation failure for configurations which use compile time
    replacements of standard calloc/free functions through the macros
    MBEDTLS_PLATFORM_CALLOC_MACRO and MBEDTLS_PLATFORM_FREE_MACRO.
    Reported by ole-de and ddhome2006. Fixes #882, #1642 and #1706.
  Changes
  * Removed support for Yotta as a build tool.
  * Add tests for session resumption in DTLS.
  * Close a test gap in (D)TLS between the client side and the server side:
    test the handling of large packets and small packets on the client side
    in the same way as on the server side.
  * Change the dtls_client and dtls_server samples to work by default over
    IPv6 and optionally by a build option over IPv4.
  * Change the use of Windows threading to use Microsoft Visual C++ runtime
    calls, rather than Win32 API calls directly. This is necessary to avoid
    conflict with C runtime usage. Found and fixed by irwir.
  * Remember the string format of X.509 DN attributes when replicating
    X.509 DNs. Previously, DN attributes were always written in their default
    string format (mostly PrintableString), which could lead to CRTs being
    created which used PrintableStrings in the issuer field even though the
    signing CA used UTF8Strings in its subject field; while X.509 compliant,
    such CRTs were rejected in some applications, e.g. some versions of
    Firefox, curl and GnuTLS. Reported in #1033 by Moschn. Fix contributed by
    Thomas-Dee.
  * Improve documentation of mbedtls_ssl_get_verify_result().
    Fixes #517 reported by github-monoculture.
  * Add MBEDTLS_MPI_GEN_PRIME_FLAG_LOW_ERR flag to mbedtls_mpi_gen_prime() and
    use it to reduce error probability in RSA key generation to levels mandated
    by FIPS-186-4.
- Version 2.13.1
  API Changes
  * Extend the platform module with an abstraction mbedtls_platform_gmtime_r()
    whose implementation should behave as a thread-safe version of gmtime().
    This allows users to configure such an implementation at compile time when
    the target system cannot be deduced automatically, by setting the option
    MBEDTLS_PLATFORM_GMTIME_R_ALT. At this stage Mbed TLS is only able to
    automatically select implementations for Windows and POSIX C libraries.
  Bugfix
  * Fix build failures on platforms where only gmtime() is available but
    neither gmtime_r() nor gmtime_s() are present. Fixes #1907.
- Version 2.13.0
  Security
  * Fix an issue in the X.509 module which could lead to a buffer overread
    during certificate extensions parsing. In case of receiving malformed
    input (extensions length field equal to 0), an illegal read of one byte
    beyond the input buffer is made. Found and analyzed by Nathan Crandall.
  Features
  * Add support for fragmentation of outgoing DTLS handshake messages. This
    is controlled by the maximum fragment length as set locally or negotiated
    with the peer, as well as by a new per-connection MTU option, set using
    mbedtls_ssl_set_mtu().
  * Add support for auto-adjustment of MTU to a safe value during the
    handshake when flights do not get through (RFC 6347, section 4.1.1.1,
    last paragraph).
  * Add support for packing multiple records within a single datagram,
    enabled by default.
  * Add support for buffering out-of-order handshake messages in DTLS.
    The maximum amount of RAM used for this can be controlled by the
    compile-time constant MBEDTLS_SSL_DTLS_MAX_BUFFERING defined
    in mbedtls/config.h.
  API Changes
  * Add function mbedtls_ssl_set_datagram_packing() to configure
    the use of datagram packing (enabled by default).
  Bugfix
  * Fix a potential memory leak in mbedtls_ssl_setup() function. An allocation
    failure in the function could lead to other buffers being leaked.
  * Fixes an issue with MBEDTLS_CHACHAPOLY_C which would not compile if
    MBEDTLS_ARC4_C and MBEDTLS_CIPHER_NULL_CIPHER weren't also defined. #1890
  * Fix a memory leak in ecp_mul_comb() if ecp_precompute_comb() fails.
    Fix contributed by Espressif Systems.
  * Add ecc extensions only if an ecc based ciphersuite is used.
    This improves compliance to RFC 4492, and as a result, solves
    interoperability issues with BouncyCastle. Raised by milenamil in #1157.
  * Replace printf with mbedtls_printf in the ARIA module. Found by
    TrinityTonic in #1908.
  * Fix potential use-after-free in mbedtls_ssl_get_max_frag_len()
    and mbedtls_ssl_get_record_expansion() after a session reset. Fixes #1941.
  * Fix a bug that caused SSL/TLS clients to incorrectly abort the handshake
    with TLS versions 1.1 and earlier when the server requested authentication
    without providing a list of CAs. This was due to an overly strict bounds
    check in parsing the CertificateRequest message,
    introduced in Mbed TLS 2.12.0. Fixes #1954.
  * Fix a miscalculation of the maximum record expansion in
    mbedtls_ssl_get_record_expansion() in case of ChachaPoly ciphersuites,
    or CBC ciphersuites in (D)TLS versions 1.1 or higher. Fixes #1913, #1914.
  * Fix undefined shifts with negative values in certificates parsing
    (found by Catena cyber using oss-fuzz)
  * Fix memory leak and free without initialization in pk_encrypt
    and pk_decrypt example programs. Reported by Brace Stout. Fixes #1128.
  * Remove redundant else statement. Raised by irwir. Fixes #1776.
  Changes
  * Copy headers preserving timestamps when doing a "make install".
    Contributed by xueruini.
  * Allow the forward declaration of public structs. Contributed by Dawid
    Drozd. Fixes #1215 raised by randombit.
  * Improve compatibility with some alternative CCM implementations by using
    CCM test vectors from RAM.
  * Add support for buffering of out-of-order handshake messages.
  * Add warnings to the documentation of the HKDF module to reduce the risk
    of misusing the mbedtls_hkdf_extract() and mbedtls_hkdf_expand()
    functions. Fixes #1775. Reported by Brian J. Murray.</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1544529601">- Library package version bumped to libmbedtls12</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1546862400">- Update to version 2.16.0:
  Features
  * Add a new config.h option of MBEDTLS_CHECK_PARAMS that enables validation of parameters in the API. This allows detection of obvious misuses of the API, such as passing NULL pointers. The API of existing functions hasn't changed, but requirements on parameters have been made more explicit in the documentation. See the corresponding API documentation for each function to see for which parameter values it is defined. This feature is disabled by default. See its API documentation in config.h for additional steps you have to take when enabling it.
  API Changes
  * The following functions in the random generator modules have been deprecated and replaced as shown below. The new functions change the return type from void to int to allow returning error codes when using MBEDTLS_&lt;MODULE&gt;_ALT for the underlying AES or message digest primitive. Fixes #1798. mbedtls_ctr_drbg_update() -&gt; mbedtls_ctr_drbg_update_ret() mbedtls_hmac_drbg_update() -&gt; mbedtls_hmac_drbg_update_ret()
  * Extend ECDH interface to enable alternative implementations.
  * Deprecate error codes of the form MBEDTLS_ERR_xxx_INVALID_KEY_LENGTH for ARIA, CAMELLIA and Blowfish. These error codes will be replaced by the more generic per-module error codes MBEDTLS_ERR_xxx_BAD_INPUT_DATA.
  * Additional parameter validation checks have been added for the following modules - AES, ARIA, Blowfish, CAMELLIA, CCM, GCM, DHM, ECP, ECDSA, ECDH, ECJPAKE, SHA, Chacha20 and Poly1305, cipher, pk, RSA, and MPI. Where modules have had parameter validation added, existing parameter checks may have changed. Some modules, such as Chacha20 had existing parameter validation whereas other modules had little. This has now been changed so that the same level of validation is present in all modules, and that it is now optional with the MBEDTLS_CHECK_PARAMS flag which by default is off. That means that checks which were previously present by default will no longer be.
  New deprecations
  * Deprecate mbedtls_ctr_drbg_update() and mbedtls_hmac_drbg_update() in favor of functions that can return an error code.
  Bugfix
  * Fix for Clang, which was reporting a warning for the bignum.c inline assembly for AMD64 targets creating string literals greater than those permitted by the ISO C99 standard. Found by Aaron Jones. Fixes #482.
  * Fix runtime error in mbedtls_platform_entropy_poll() when run through qemu user emulation. Reported and fix suggested by randombit. Fixes #1212.
  * Fix an unsafe bounds check when restoring an SSL session from a ticket. This could lead to a buffer overflow, but only in case ticket authentication was broken. Reported and fix suggested by Guido Vranken in #659.
  * Add explicit integer to enumeration type casts to example program programs/pkey/gen_key which previously led to compilation failure on some toolchains. Reported by phoenixmcallister. Fixes #2170.
  * Clarify documentation of mbedtls_ssl_set_own_cert() regarding the absence of check for certificate/key matching. Reported by Attila Molnar, #507.
  * Fix double initialization of ECC hardware that made some accelerators hang.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1567512000">- Update to version 2.16.2:
  * Security improvements and bugfixes
- Use ninja to for build</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1573646400">- Update to version 2.16.3:
  * Security improvements and bugfixes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1585828800">- Update to version 2.16.5:
  * Security improvements and bugfixes</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597665600">- update to 2.23.0:
  a lot of changes see https://github.com/ARMmbed/mbedtls/releases/tag/v2.23.0
  * Fix a side channel vulnerability in modular exponentiation that could reveal an RSA private key used in a secure enclave. Noticed by Sangho Lee, Ming-Wei Shih, Prasun Gera, Taesoo Kim and Hyesoon Kim (Georgia Institute of Technology); and Marcus Peinado (Microsoft Research). Reported by Raoul Strackx (Fortanix) in #3394.
  * Fix side channel in mbedtls_ecp_check_pub_priv() and mbedtls_pk_parse_key() / mbedtls_pk_parse_keyfile() (when loading a private key that didn't include the uncompressed public key), as well as mbedtls_ecp_mul() / mbedtls_ecp_mul_restartable() when called with a NULL f_rng argument. An attacker with access to precise enough timing and memory access information (typically an untrusted operating system attacking a secure enclave) could fully recover the ECC private key. Found and reported by Alejandro Cabrera Aldaya and Billy Brumley.
  * Fix issue in Lucky 13 counter-measure that could make it ineffective when hardware accelerators were used (using one of the MBEDTLS_SHAxxx_ALT macros). This would cause the original Lucky 13 attack to be possible in those configurations, allowing an active network attacker to recover plaintext after repeated timing measurements under some conditions. Reported and fix suggested by Luc Perneel in #3246.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1598875200">- Do not run testsuite in parallel - its not reliable</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1599480000">- Add workaround for failing builds (Python not found) due to
  https://gitlab.kitware.com/cmake/cmake/-/issues/21168</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1599652800">- update to 2.24.0:
  * see https://github.com/ARMmbed/mbedtls/releases/tag/v2.24.0
  * Fix a vulnerability in the verification of X.509 certificates when matching
  the expected common name (the cn argument of mbedtls_x509_crt_verify())
  with the actual certificate name: when the subjecAltName extension is
  present, the expected name was compared to any name in that extension
  regardless of its type. This means that an attacker could for example
  impersonate a 4-bytes or 16-byte domain by getting a certificate for the
  corresponding IPv4 or IPv6 (this would require the attacker to control that
  IP address, though). Similar attacks using other subjectAltName name types
  might be possible.
  * When checking X.509 CRLs, a certificate was only considered as revoked if
  its revocationDate was in the past according to the local clock if
  available. In particular, on builds without MBEDTLS_HAVE_TIME_DATE,
  certificates were never considered as revoked. On builds with
  MBEDTLS_HAVE_TIME_DATE, an attacker able to control the local clock (for
  example, an untrusted OS attacking a secure enclave) could prevent
  revocation of certificates via CRLs. Fixed by no longer checking the
  revocationDate field, in accordance with RFC 5280. Reported by yuemonangong
  in #3340. Reported independently and fixed by Raoul Strackx and Jethro
  * In (D)TLS record decryption, when using a CBC ciphersuites without the
  Encrypt-then-Mac extension, use constant code flow memory access patterns
  to extract and check the MAC. This is an improvement to the existing
  countermeasure against Lucky 13 attacks. The previous countermeasure was
  effective against network-based attackers, but less so against local
  attackers. The new countermeasure defends against local attackers, even if
  they have access to fine-grained measurements. In particular, this fixes a
  local Lucky 13 cache attack found and reported by Tuba Yavuz, Farhaan
  Fowze, Ken (Yihan) Bai, Grant Hernandez, and Kevin Butler (University of
  Florida) and Dave Tian (Purdue University).
  * Fix side channel in RSA private key operations and static (finite-field)
  Diffie-Hellman. An adversary with precise enough timing and memory access
  information (typically an untrusted operating system attacking a secure
  enclave) could bypass an existing counter-measure (base blinding) and
  potentially fully recover the private key.
  * Fix a 1-byte buffer overread in mbedtls_x509_crl_parse_der(). Credit to
  OSS-Fuzz for detecting the problem and to Philippe Antoine for pinpointing
  the problematic code.
  * Zeroising of plaintext buffers in mbedtls_ssl_read() to erase unused
  application data from memory.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1608638400">- update to 2.25.0:
  * This release of Mbed TLS provides bug fixes, minor enhancements and new
  features. This release includes fixes for security issues.
  * see https://github.com/ARMmbed/mbedtls/releases/tag/v2.25.0
  * The functions mbedtls_cipher_auth_encrypt() and
  mbedtls_cipher_auth_decrypt() would write past the minimum documented size
  of the output buffer when used with NIST_KW. As a result, code using those
  functions as documented with NIST_KW could have a buffer overwrite of up to
  15 bytes, with consequences ranging up to arbitrary code execution
  depending on the location of the output buffer.
  * Limit the size of calculations performed by mbedtls_mpi_exp_mod to
  MBEDTLS_MPI_MAX_SIZE to prevent a potential denial of service when generating
  Diffie-Hellman key pairs. Credit to OSS-Fuzz.
  * A failure of the random generator was ignored in mbedtls_mpi_fill_random(),
  which is how most uses of randomization in asymmetric cryptography (including
  key generation, intermediate value randomization and blinding) are implemented.
  This could cause failures or the silent use of non-random values. A random
  generator can fail if it needs reseeding and cannot not obtain entropy, or due
  to an internal failure (which, for Mbed TLS's own CTR_DRBG or HMAC_DRBG, can
  only happen due to a misconfiguration).
  * Fix a compliance issue whereby we were not checking the tag on the algorithm
  parameters (only the size) when comparing the signature in the description part
  of the cert to the real signature. This meant that a NULL algorithm parameters
  entry would look identical to an array of REAL (size zero) to the library and
  thus the certificate would be considered valid. However, if the parameters do
  not match in any way then the certificate should be considered invalid, and
  indeed OpenSSL marks these certs as invalid when mbedtls did not. Many thanks
  to guidovranken who found this issue via differential fuzzing and reported it
  in #3629.
  * Zeroising of local buffers and variables which are used for calculations in
  mbedtls_pkcs5_pbkdf2_hmac(), mbedtls_internal_sha*_process(),
  mbedtls_internal_md*_process() and mbedtls_internal_ripemd160_process()
  functions to erase sensitive data from memory. Reported by Johan Malmgren and
  Johan Uppman Bruce from Sectra.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1611057600">- Fix build for Leap targets
- Use upstream tarball name</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1616414400">- Update to 2.26.0: [bsc#1189589, CVE-2021-24119]
  * * This release of Mbed TLS provides bug fixes, minor enhancements and new
  features. This release includes fixes for security issues.
  * see https://github.com/ARMmbed/mbedtls/releases/tag/v2.26.0
- Fix build with patch from https://github.com/ARMmbed/mbedtls/pull/4237
  mbedtls-4237.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1618488000">-  Workaround for building with gcc-11 boo#1181876</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1626782400">- Update to 2.27.0:
  API changes:
  * Update AEAD output size macros to bring them in line with the PSA Crypto
    API version 1.0 spec. This version of the spec parameterizes them on the
    key type used, as well as the key bit-size in the case of
    PSA_AEAD_TAG_LENGTH.
    The old versions of these macros were renamed and deprecated as follows:
  - PSA_AEAD_TAG_LENGTH          -&gt; PSA_AEAD_TAG_LENGTH_1_ARG
  - PSA_AEAD_ENCRYPT_OUTPUT_SIZE -&gt; PSA_AEAD_ENCRYPT_OUTPUT_SIZE_2_ARG
  - PSA_AEAD_DECRYPT_OUTPUT_SIZE -&gt; PSA_AEAD_DECRYPT_OUTPUT_SIZE_2_ARG
  - PSA_AEAD_UPDATE_OUTPUT_SIZE  -&gt; PSA_AEAD_UPDATE_OUTPUT_SIZE_2_ARG
  - PSA_AEAD_FINISH_OUTPUT_SIZE  -&gt; PSA_AEAD_FINISH_OUTPUT_SIZE_1_ARG
  - PSA_AEAD_VERIFY_OUTPUT_SIZE  -&gt; PSA_AEAD_VERIFY_OUTPUT_SIZE_1_ARG
  * Implement one-shot cipher functions, psa_cipher_encrypt and
    psa_cipher_decrypt, according to the PSA Crypto API 1.0.0
    specification.
  Features:
  * Add mbedtls_rsa_rsassa_pss_sign_ext() function allowing to generate a
    signature with a specific salt length. This function allows to validate
    test cases provided in the NIST's CAVP test suite.
  * Added support for built-in driver keys through the PSA opaque crypto
    driver interface. Refer to the documentation of
    MBEDTLS_PSA_CRYPTO_BUILTIN_KEYS for more information.
  * Implement psa_sign_message() and psa_verify_message().
  * The new function mbedtls_mpi_random() generates a random value in a
    given range uniformly.
  * Implement psa_mac_compute() and psa_mac_verify() as defined in the
    PSA Cryptograpy API 1.0.0 specification.
  * MBEDTLS_ECP_MAX_BITS is now determined automatically from the configured
    curves and no longer needs to be configured explicitly to save RAM.
  Security
  * Fix a bias in the generation of finite-field Diffie-Hellman-Merkle (DHM)
    private keys and of blinding values for DHM and elliptic curves (ECP)
    computations.
  * Fix a potential side channel vulnerability in ECDSA ephemeral key generation.
    An adversary who is capable of very precise timing measurements could
    learn partial information about the leading bits of the nonce used for the
    signature, allowing the recovery of the private key after observing a
    large number of signature operations. This completes a partial fix in
    Mbed TLS 2.20.0.
  * It was possible to configure MBEDTLS_ECP_MAX_BITS to a value that is
    too small, leading to buffer overflows in ECC operations. Fail the build
    in such a case.
  * An adversary with access to precise enough information about memory
    accesses (typically, an untrusted operating system attacking a secure
    enclave) could recover an RSA private key after observing the victim
    performing a single private-key operation.
  * An adversary with access to precise enough timing information (typically, a
    co-located process) could recover a Curve25519 or Curve448 static ECDH key
    after inputting a chosen public key and observing the victim performing the
    corresponding private-key operation.
  Bugfix
  * Add printf function attributes to mbedtls_debug_print_msg to ensure we
    get printf format specifier warnings.
  * Fix premature fopen() call in mbedtls_entropy_write_seed_file which may
    lead to seed file corruption in the case where the path to the seed file is
    equal to MBEDTLS_PLATFORM_STD_NV_SEED_FILE.
  * PSA functions other than psa_open_key now return PSA_ERROR_INVALID_HANDLE
    rather than PSA_ERROR_DOES_NOT_EXIST for an invalid handle, bringing them
    in line with version 1.0.0 of the specification.
  * PSA functions creating a key now return PSA_ERROR_INVALID_ARGUMENT rather
    than PSA_ERROR_INVALID_HANDLE when the identifier specified for the key
    to create is not valid, bringing them in line with version 1.0.0 of the
    specification.
  * Fix some cases in the bignum module where the library constructed an
    unintended representation of the value 0 which was not processed
    correctly by some bignum operations. This could happen when
    mbedtls_mpi_read_string() was called on "-0", or when
    mbedtls_mpi_mul_mpi() and mbedtls_mpi_mul_int() was called with one of
    the arguments being negative and the other being 0.
  * Fix a bug in ECDSA that would cause it to fail when the hash is all-bits
    zero.
  * Fix a compilation error when MBEDTLS_ECP_RANDOMIZE_MXZ_ALT is
    defined.
  * Fix an incorrect error code when parsing a PKCS#8 private key.
  * In a TLS client, enforce the Diffie-Hellman minimum parameter size
    set with mbedtls_ssl_conf_dhm_min_bitlen() precisely. Before, the
    minimum size was rounded down to the nearest multiple of 8.
  * In library/net_sockets.c, _POSIX_C_SOURCE and _XOPEN_SOURCE are
    defined to specific values.  If the code is used in a context
    where these are already defined, this can result in a compilation
    error.  Instead, assume that if they are defined, the values will
    be adequate to build Mbed TLS.
  * The cipher suite TLS-RSA-WITH-CAMELLIA-256-GCM-SHA384 was not available
    when SHA-1 was disabled and was offered when SHA-1 was enabled but SHA-384
    was disabled. Fix the dependency.
  * Do not offer SHA384 cipher suites when SHA-384 is disabled.
  * With MBEDTLS_PSA_CRYPTO_C disabled, some functions were getting built
    nonetheless, resulting in undefined reference errors when building a
    shared library.
  * Fix test suite code on platforms where int32_t is not int, such as
    Arm Cortex-M.
  * Fix some issues affecting MBEDTLS_ARIA_ALT implementations: a misplaced
    directive in a header and a missing initialization in the self-test.
  * Fix a missing initialization in the Camellia self-test, affecting
    MBEDTLS_CAMELLIA_ALT implementations.
  * Restore the ability to configure PSA via Mbed TLS options to support RSA
    key pair operations but exclude RSA key generation. When MBEDTLS_GENPRIME
    is not defined PSA will no longer attempt to use mbedtls_rsa_gen_key().
  * Fix a regression introduced in 2.24.0 which broke (D)TLS CBC ciphersuites
    (when the encrypt-then-MAC extension is not in use) with some ALT
    implementations of the underlying hash (SHA-1, SHA-256, SHA-384), causing
    the affected side to wrongly reject valid messages.
  * Remove outdated check-config.h check that prevented implementing the
    timing module on Mbed OS.
  * Fix PSA_ALG_TLS12_PRF and PSA_ALG_TLS12_PSK_TO_MS being too permissive
    about missing inputs.
  * Fix a resource leak in a test suite with an alternative AES
    implementation.
  * Fix a crash in mbedtls_mpi_debug_mpi on a bignum having 0 limbs. This
    could notably be triggered by setting the TLS debug level to 3 or above
    and using a Montgomery curve for the key exchange.
  * psa_verify_hash() was relying on implementation-specific behavior of
    mbedtls_rsa_rsassa_pss_verify() and was causing failures in some _ALT
    implementations. This reliance is now removed.
  * Disallow inputs of length different from the corresponding hash when
    signing or verifying with PSA_ALG_RSA_PSS (The PSA Crypto API mandates
    that PSA_ALG_RSA_PSS uses the same hash throughout the algorithm.)
  * Fix a null pointer dereference when mbedtls_mpi_exp_mod() was called with
    A=0 represented with 0 limbs. Up to and including Mbed TLS 2.26, this bug
    could not be triggered by code that constructed A with one of the
    mbedtls_mpi_read_xxx functions (including in particular TLS code) since
    those always built an mpi object with at least one limb.
  * Fix mbedtls_mpi_gcd(G,A,B) when the value of B is zero. This had no
    effect on Mbed TLS's internal use of mbedtls_mpi_gcd(), but may affect
    applications that call mbedtls_mpi_gcd() directly.
  * The PSA API no longer allows the creation or destruction of keys with a
    read-only lifetime. The persistence level PSA_KEY_PERSISTENCE_READ_ONLY
    can now only be used as intended, for keys that cannot be modified through
    normal use of the API.
  * When MBEDTLS_PSA_CRYPTO_SPM is enabled, crypto_spe.h was not included
    in all the right places. Include it from crypto_platform.h, which is
    the natural place.
  * mbedtls_pk_sign() and mbedtls_pk_verify() and their extended and
    restartable variants now always honor the specified hash length if
    nonzero. Before, for RSA, hash_len was ignored in favor of the length of
    the specified hash algorithm.
  * Fix which alert is sent in some cases to conform to the
    applicable RFC: on an invalid Finished message value, an
    invalid max_fragment_length extension, or an
    unsupported extension used by the server.
  * Correct (change from 12 to 13 bytes) the value of the macro describing the
    maximum nonce length returned by psa_aead_generate_nonce().
  Changes
  * Add extra printf compiler warning flags to builds.
  * Fix memsan build false positive in x509_crt.c with Clang 11
  * Fix the setting of the read timeout in the DTLS sample programs.
  * Remove the AES sample application programs/aes/aescrypt2 which shows
    bad cryptographic practice.
  * Alternative implementations of CMAC may now opt to not support 3DES as a
    CMAC block cipher, and still pass the CMAC self test.
  * Remove configs/config-psa-crypto.h, which was identical to the default
    configuration except for having some extra cryptographic mechanisms
    enabled and for unintended differences. This configuration was primarily
    intended to demonstrate the PSA API, and lost most of its usefulness when
    MBEDTLS_PSA_CRYPTO_C became enabled by default.
  * When building the test suites with GNU make, invoke python3 or python, not
    python2, which is no longer supported upstream.
  * When using session cache based session resumption on the server,
    double-check that custom session cache implementations return
    sessions which are consistent with the negotiated ciphersuite
    and compression method.
  * Fix build failure on MinGW toolchain when __USE_MING_ANSI_STDIO is on.
    When that flag is on, standard GNU C printf format specifiers
    should be used.
  * Reduce the default value of MBEDTLS_ECP_WINDOW_SIZE. This reduces RAM usage
    during ECC operations at a negligible performance cost.
  * mbedtls_mpi_read_binary(), mbedtls_mpi_read_binary_le() and
    mbedtls_mpi_read_string() now construct an mbedtls_mpi object with 0 limbs
    when their input has length 0. Note that this is an implementation detail
    and can change at any time, so this change should be transparent, but it
    may result in mbedtls_mpi_write_binary() or mbedtls_mpi_write_string()
    now writing an empty string where it previously wrote one or more
    zero digits when operating from values constructed with an mpi_read
    function and some mpi operations.
  * Implicitly add PSA_KEY_USAGE_SIGN_MESSAGE key usage policy flag when
    PSA_KEY_USAGE_SIGN_HASH flag is set and PSA_KEY_USAGE_VERIFY_MESSAGE flag
    when PSA_KEY_USAGE_VERIFY_HASH flag is set. This usage flag extension
    is also applied when loading a key from storage.
  * Remove mbedtls-4237.patch upstream
  * Library soname bump to libmbedcrypto7</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1642075200">- Update to 2.28.0: (bsc#1193979, CVE-2021-45450)
  API changes
  * Some fields of mbedtls_ssl_session and mbedtls_ssl_config are in a
  different order. This only affects applications that define such
  structures directly or serialize them.
  Requirement changes
  * Sign-magnitude and one's complement representations for signed integers are
  not supported. Two's complement is the only supported representation.
  Removals
  * Remove config option MBEDTLS_TLS_DEFAULT_ALLOW_SHA1_IN_CERTIFICATES,
  which allowed SHA-1 in the default TLS configuration for certificate
  signing. It was intended to facilitate the transition in environments
  with SHA-1 certificates. SHA-1 is considered a weak message digest and
  its use constitutes a security risk.
  * Remove the partial support for running unit tests via Greentea on Mbed OS,
  which had been unmaintained since 2018.
  Features
  * The identifier of the CID TLS extension can be configured by defining
  MBEDTLS_TLS_EXT_CID at compile time.
  * Warn if errors from certain functions are ignored. This is currently
  supported on GCC-like compilers and on MSVC and can be configured through
  the macro MBEDTLS_CHECK_RETURN. The warnings are always enabled
  (where supported) for critical functions where ignoring the return
  value is almost always a bug. Enable the new configuration option
  MBEDTLS_CHECK_RETURN_WARNING to get warnings for other functions. This
  is currently implemented in the AES, DES and md modules, and will be
  extended to other modules in the future.
  * Add missing PSA macros declared by PSA Crypto API 1.0.0:
  PSA_ALG_IS_SIGN_HASH, PSA_ALG_NONE, PSA_HASH_BLOCK_LENGTH, PSA_KEY_ID_NULL.
  * Add new API mbedtls_ct_memcmp for constant time buffer comparison.
  * Add PSA API definition for ARIA.
  Security
  * Zeroize several intermediate variables used to calculate the expected
  value when verifying a MAC or AEAD tag. This hardens the library in
  case the value leaks through a memory disclosure vulnerability. For
  example, a memory disclosure vulnerability could have allowed a
  man-in-the-middle to inject fake ciphertext into a DTLS connection.
  * In psa_cipher_generate_iv() and psa_cipher_encrypt(), do not read back
  from the output buffer. This fixes a potential policy bypass or decryption
  oracle vulnerability if the output buffer is in memory that is shared with
  an untrusted application.
  * Fix a double-free that happened after mbedtls_ssl_set_session() or
  mbedtls_ssl_get_session() failed with MBEDTLS_ERR_SSL_ALLOC_FAILED
  (out of memory). After that, calling mbedtls_ssl_session_free()
  and mbedtls_ssl_free() would cause an internal session buffer to
  be free()'d twice.
  Bugfix
  * Stop using reserved identifiers as local variables. Fixes #4630.
  * The GNU makefiles invoke python3 in preference to python except on Windows.
  * The check was accidentally not performed when cross-compiling for Windows
  on Linux. Fix this. Fixes #4774.
  * Prevent divide by zero if either of PSA_CIPHER_ENCRYPT_OUTPUT_SIZE() or
  PSA_CIPHER_UPDATE_OUTPUT_SIZE() were called using an asymmetric key type.
  * Fix a parameter set but unused in psa_crypto_cipher.c. Fixes #4935.
  * Don't use the obsolete header path sys/fcntl.h in unit tests.
  These header files cause compilation errors in musl.
  Fixes #4969.
  * Fix missing constraints on x86_64 and aarch64 assembly code
  for bignum multiplication that broke some bignum operations with
  (at least) Clang 12.
  Fixes #4116, #4786, #4917, #4962.
  * Fix mbedtls_cipher_crypt: AES-ECB when MBEDTLS_USE_PSA_CRYPTO is enabled.
  * Failures of alternative implementations of AES or DES single-block
  functions enabled with MBEDTLS_AES_ENCRYPT_ALT, MBEDTLS_AES_DECRYPT_ALT,
  MBEDTLS_DES_CRYPT_ECB_ALT or MBEDTLS_DES3_CRYPT_ECB_ALT were ignored.
  This does not concern the implementation provided with Mbed TLS,
  where this function cannot fail, or full-module replacements with
  MBEDTLS_AES_ALT or MBEDTLS_DES_ALT. Reported by Armelle Duboc in #1092.
  * Some failures of HMAC operations were ignored. These failures could only
  happen with an alternative implementation of the underlying hash module.
  * Fix the error returned by psa_generate_key() for a public key. Fixes #4551.
  * Fix the build of sample programs when neither MBEDTLS_ERROR_C nor
  MBEDTLS_ERROR_STRERROR_DUMMY is enabled.
  * Fix PSA_ALG_RSA_PSS verification accepting an arbitrary salt length.
  This algorithm now accepts only the same salt length for verification
  that it produces when signing, as documented. Use the new algorithm
  PSA_ALG_RSA_PSS_ANY_SALT to accept any salt length. Fixes #4946.
  * The existing predicate macro name PSA_ALG_IS_HASH_AND_SIGN is now reserved
  for algorithm values that fully encode the hashing step, as per the PSA
  Crypto API specification. This excludes PSA_ALG_RSA_PKCS1V15_SIGN_RAW and
  PSA_ALG_ECDSA_ANY. The new predicate macro PSA_ALG_IS_SIGN_HASH covers
  all algorithms that can be used with psa_{sign,verify}_hash(), including
  these two.
  * Fix issue in Makefile on Linux with SHARED=1, that caused shared libraries
  not to list other shared libraries they need.
  * Fix a bug in mbedtls_gcm_starts() when the bit length of the iv
  exceeds 2^32. Fixes #4884.
  * Fix an uninitialized variable warning in test_suite_ssl.function with GCC
  version 11.
  * Fix the build when no SHA2 module is included. Fixes #4930.
  * Fix the build when only the bignum module is included. Fixes #4929.
  * Fix a potential invalid pointer dereference and infinite loop bugs in
  pkcs12 functions when the password is empty. Fix the documentation to
  better describe the inputs to these functions and their possible values.
  Fixes #5136.
  * The key usage flags PSA_KEY_USAGE_SIGN_MESSAGE now allows the MAC
  operations psa_mac_compute() and psa_mac_sign_setup().
  * The key usage flags PSA_KEY_USAGE_VERIFY_MESSAGE now allows the MAC
  operations psa_mac_verify() and psa_mac_verify_setup().
  Changes
  * Set config option MBEDTLS_TLS_DEFAULT_ALLOW_SHA1_IN_KEY_EXCHANGE to be
  disabled by default.
  * Improve the performance of base64 constant-flow code. The result is still
  slower than the original non-constant-flow implementation, but much faster
  than the previous constant-flow implementation. Fixes #4814.
  * Indicate in the error returned if the nonce length used with
  ChaCha20-Poly1305 is invalid, and not just unsupported.
  * The mbedcrypto library includes a new source code module constant_time.c,
  containing various functions meant to resist timing side channel attacks.
  * This module does not have a separate configuration option, and functions
  from this module will be included in the build as required. Currently
  most of the interface of this module is private and may change at any
  time.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1642420800">- Fix baselib.conf</changelog>
  <changelog author="Alexander Bergmann &lt;abergmann@suse.com&gt;" date="1671624000">- Fix potential heap buffer overread and overwrite in DTLS if
  MBEDTLS_SSL_DTLS_CONNECTION_ID is enabled and
  MBEDTLS_SSL_CID_IN_LEN_MAX &gt; 2 * MBEDTLS_SSL_CID_OUT_LEN_MAX.
  (bsc#1206576, CVE-2022-46393).
  Add: mbedtls-CVE-2022-46393.patch</changelog>
</package>
<package pkgid="ef08f058cae1fc682f717bf567c2bab9e5c608cb886d2129ad6a92ee75d91053" name="libmbedcrypto7" arch="x86_64">
  <version epoch="0" ver="2.28.0" rel="bp154.2.3.1"/>
  <changelog author="mpluskal@suse.com" date="1531137600">- Update to version 2.11.0:
  * Features
    + Added support for the XTS block cipher mode with AES (AES-XTS). Contributed by Aorimn in pull request #414.
    + Implemented the HMAC-based extract-and-expand key derivation function (HKDF) per RFC 5869. Contributed by Thomas Fossati.
    + For TLS servers, added support for offloading private key operations to an external cryptoprocessor. Private key operations can be asynchronous to allow non-blocking operation of the TLS server stack.
    + Added support for ARIA cipher (RFC 5794) and associated TLS ciphersuites (RFC 6209). ARIA is disabled by default. To enable, see MBEDTLS_ARIA_C in config.h.
    + Added support for the CCM* block cipher mode as defined in IEEE Std 802.15.4.
    + Added an additional block mode, OFB (Output Feedback) per NIST SP 800-38a, to the AES module and cipher abstraction module.
  * API Changes
    + Mbed TLS 2.11.0 maintains source code compatibility with the last minor version, Mbed TLS 2.9.0, but extends the interface with additional capabilities. Mbed TLS 2.11.0 modifies the ABI and increases the SOVERSION.
  * Bugfix
    + Fixed the cert_write example to handle certificates signed with elliptic curves as well as RSA. Fixes #777 found by dbedev.
    + Fixed the redefinition of _WIN32_WINNT, to avoid overriding a definition used by user applications. Found and fixed by Fabio Alessandrelli.
    + Fixed compilation warnings with the IAR toolchain on 32-bit platforms. Reported by rahmanih in #683.
    + Fixed an issue with MicroBlaze support in bn_mul.h which was causing the build to fail. Found by zv-io. Fixes #1651.
    + Fixed braces in mbedtls_memory_buffer_alloc_status(). Found by sbranden in #552.
    + Added the macro MBEDTLS_X509_MAX_FILE_PATH_LEN that enables the user to configure the maximum length of a file path that can be buffered when calling mbedtls_x509_crt_parse_path(). Fixes #492.
    + Fixed redundant declaration of mbedtls_ssl_list_ciphersuites. Raised by TrinityTonic in #1359.
- Changes for version 2.9.0:
  + Security
    + Fixed an issue in the X.509 module which could lead to a buffer overread during certificate validation. Additionally, the issue could also lead to unnecessary callback checks being made or to some validation checks to be omitted. The overread could be triggered remotely, while the other issues would require a non DER-compliant certificate to be correctly signed by a trusted CA, or a trusted CA with a non DER-compliant certificate. Found by luocm. Fixes #825.
    + Fixed the buffer length assertion in the ssl_parse_certificate_request() function which could lead to an arbitrary overread of the message buffer. The overreads could be caused by receiving a malformed algorithms section which was too short. In builds with debug output, this overread data was output with the debug data.
    + Fixed a client-side bug in the validation of the server's ciphersuite choice which could potentially lead to the client accepting a ciphersuite it didn't offer or a ciphersuite that could not be used with the TLS or DTLS version chosen by the server. This could lead to corruption of internal data structures for some configurations.
  * Features
    + Added an option of MBEDTLS_AES_FEWER_TABLES, to dynamically compute smaller AES tables during runtime, thereby reducing the RAM/ROM footprint by ~6KiB. Suggested and contributed by jkivilin.
    + Added initial support for Curve448 (RFC 7748). So far only mbedtls_ecp_mul() and ECDH primitive functions (mbedtls_ecdh_gen_public(), mbedtls_ecdh_compute_shared()) are supported for now. Contributed by Nicholas Wilson.
  * API Changes
    + Mbed TLS 2.9.0 maintains source code and binary compatibility with the last minor version, Mbed TLS 2.8.0, but extends the interface with additional capabilities.
    + Extended the API with the function of mbedtls_net_poll() to allow user applications to wait for a network context to become ready before reading or writing.
    + Added the function mbedtls_ssl_check_pending() to the public API to allow a check for whether more more data is pending to be processed in the internal message buffers. This function is necessary to determine the underlying transport when event-driven IO is used.
  * Bugfix
    + Fixed a spurious uninitialized variable warning in cmac.c. Fix independently contributed by Brian J Murray and David Brown.
    + Added missing dependencies in test suites that led to build failures in configurations that omit certain hashes or public-key algorithms. Fixes #1040.
    + Fixed a C89 incompatibility issue in benchmark.c. Contributed by Brendan Shanks. Fixes #1353.
    + Added missing dependencies for MBEDTLS_HAVE_TIME_DATE and MBEDTLS_VERSION_FEATURES in some test suites. Contributed by Deomid Ryabkov. Fixes #1299, #1475.
    + Fixed the Makefile build process for building shared libraries on Mac OS X. Fixed by mnacamura.
    + Fixed parsing of PKCS#8 encoded Elliptic Curve keys. Previously Mbed TLS was unable to parse keys which had only the optional parameters field of the ECPrivateKey structure. Found by Jethro Beekman, fixed in #1379.
    + Added an optimisation to return the plaintext data more quickly on unpadded CBC decryption, as stated in the mbedtls_cipher_update() documentation. Contributed by Andy Leiserson.
    + Fixed the overriding and ignoring of return values when parsing and writing to a file in the pk_sign program. Found by kevlut in #1142.
    + Added restrictions to the usage of the error code MBEDTLS_ERR_SSL_WANT_READ to situations where data needs to be fetched from the underlying transport in order to make progress. Previously, this error code was also occasionally returned when unexpected messages were being discarded, ignoring that further messages could potentially already be pending to be processed in the internal buffers; these cases led to deadlocks when event-driven I/O was used. Found and reported by Hubert Mis in #772.
    + Fixed buffer length assertions in the ssl_parse_certificate_request() function which led to a potential one byte overread of the message buffer.
    + Fixed invalid buffer sizes being passed to zlib during record compression and decompression.
    + Raised the soversion of libmbedcrypto to match the soversion of the maintained 2.7 branch. The soversion was increased in Mbed TLS version 2.7.1 to reflect breaking changes in that release, but the increment was missed in 2.8.0 and later releases outside of the 2.7 branch.</changelog>
  <changelog author="mpluskal@suse.com" date="1535025600">- Update to version 2.12.0:
  * Security
    + Fixed a vulnerability in the TLS ciphersuites based on use of CBC and SHA-384 in DTLS/TLS 1.0 to 1.2, that allowed an active network attacker to partially recover the plaintext of messages under certains conditions by exploiting timing side-channels.
    + Fixed a vulnerability in TLS ciphersuites based on CBC, in DTLS/TLS 1.0 to 1.2, that allowed a local attacker, with the ability to execute code on the local machine as well as to manipulate network packets, to partially recover the plaintext of messages under certain conditions by using a cache attack targetting an internal MD/SHA buffer.
    + Added a counter-measure against a vulnerability in TLS ciphersuites based on CBC, in DTLS/TLS 1.0 to 1.2, that allowed a local attacker with the ability to execute code on the local machine as well as manipulate network packets, to partially recover the plaintext of messages certain conditions (see previous entry) by using a cache attack targeting the SSL input record buffer.
  * Features
    + Added new cryptographic primitives, the stream cipher Chacha20, one-time authenticator Poly1305 and AEAD construct Chacha20-Poly1305, as defined in RFC 7539. Contributed by Daniel King.
    + Added support for the CHACHA20-POLY1305 ciphersuites from RFC 7905.
    + Made the receive and transmit buffers independently configurable in size, for situations where the outgoing buffer can be fixed at a smaller size than the incoming buffer
    + Added support for the AES based key wrapping modes defined by NIST SP 800-38F algorithms KW and KWP and by RFC's 3394 and 5649.
    + Added platform support for the Haiku OS.
  * Bugfix
    + Fixed the key_app_writer example which was creating an invalid ASN.1 tag by writing an additional leading zero byte. Found by Aryeh R. #1257.
    + Fixed a C++ compilation error, caused by a variable named new. Found and fixed by Hirotaka Niisato. #1783.
    + Fixed the "no symbols" warning issued by ranlib when building on Mac OS X. Fix contributed by tabascoeye.
    + Clarified documentation for mbedtls_ssl_write() to include 0 as a valid return value. Found by @davidwu2000. #839.
    + Fixed a memory leak in mbedtls_x509_csr_parse(). Found and fixed by catenacyber, Philippe Antoine. #1623.
    + Added length checks to some TLS parsing functions. Found and fixed by Philippe Antoine from Catena cyber. #1663.
    + Remove unused headers included in x509.c. Found by Chris Hanson and fixed by Brendan Shanks. #992.
    + Fixed compilation error when MBEDTLS_ARC4_C is disabled and MBEDTLS_CIPHER_NULL_CIPHER is enabled. Found by TrinityTonic in #1719.
    + Fixed the inline assembly for the MPI multiply helper function for i386 and i386 with SSE2. Found by László Langó. #1550.
    + Fixed the namespacing in header files. Remove the mbedtls namespacing in the #include in the header files. #857.
    + Fixed a compiler warning of 'use before initialisation' in mbedtls_pk_parse_key(). Found by Martin Boye Petersen and fixed by Dawid Drozd.#1098.
    + Fixed decryption of zero length messages (which contain all padding) when a CBC based ciphersuite was used together with Encrypt-then-MAC.
    + Fixed the ssl_client2 example to send application data with 0-length content when the request_size argument is set to 0 as stated in the documentation. #1833.
    + Corrected the documentation for mbedtls_ssl_get_session(). This API has deep copy of the session, and the peer certificate is not lost. #926.
    + Fixed issues when building to the C99 standard, using -std=c99. Fixed by Nick Wilson.
  * Changes
    + Fails when receiving a TLS alert message with an invalid length, or invalid zero-length messages when using TLS 1.2. Contributed by Espressif Systems.
    + Changed the default behaviour of mbedtls_hkdf_extract() to return an error when calling with a NULL salt and non-zero salt length. Contributed by Brian J Murray
    + Change the shebang line in Perl scripts to look up perl in the PATH. Contributed by fbrosson.
    + Allow overriding the time on Windows via the platform-time abstraction. Fixed by Nick Wilson.
    + Use gmtime_r/gmtime_s for thread-safety. Fixed by Nick Wilson.</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1544529600">- Update to version 2.14.1: [bsc#1118727, CVE-2018-19608]
  Security
  * Fix timing variations and memory access variations in RSA PKCS#1 v1.5
    decryption that could lead to a Bleichenbacher-style padding oracle
    attack. In TLS, this affects servers that accept ciphersuites based on
    RSA decryption (i.e. ciphersuites whose name contains RSA but not
    (EC)DH(E)). Discovered by Eyal Ronen (Weizmann Institute),  Robert Gillham
    (University of Adelaide), Daniel Genkin (University of Michigan),
    Adi Shamir (Weizmann Institute), David Wong (NCC Group), and Yuval Yarom
    (University of Adelaide, Data61). The attack is described in more detail
    in the paper available here: http://cat.eyalro.net/cat.pdf  CVE-2018-19608
  * In mbedtls_mpi_write_binary(), don't leak the exact size of the number
    via branching and memory access patterns. An attacker who could submit
    a plaintext for RSA PKCS#1 v1.5 decryption but only observe the timing
    of the decryption and not its result could nonetheless decrypt RSA
    plaintexts and forge RSA signatures. Other asymmetric algorithms may
    have been similarly vulnerable. Reported by Eyal Ronen, Robert Gillham,
    Daniel Genkin, Adi Shamir, David Wong and Yuval Yarom.
  * Wipe sensitive buffers on the stack in the CTR_DRBG and HMAC_DRBG
    modules.
  API Changes
  * The new functions mbedtls_ctr_drbg_update_ret() and
    mbedtls_hmac_drbg_update_ret() are similar to mbedtls_ctr_drbg_update()
    and mbedtls_hmac_drbg_update() respectively, but the new functions
    report errors whereas the old functions return void. We recommend that
    applications use the new functions.
- Version 2.14.0:
  Security
  * Fix overly strict DN comparison when looking for CRLs belonging to a
    particular CA. This previously led to ignoring CRLs when the CRL's issuer
    name and the CA's subject name differed in their string encoding (e.g.,
    one using PrintableString and the other UTF8String) or in the choice of
    upper and lower case. Reported by Henrik Andersson of Bosch GmbH in issue
    [#1784].
  * Fix a flawed bounds check in server PSK hint parsing. In case the
    incoming message buffer was placed within the first 64KiB of address
    space and a PSK-(EC)DHE ciphersuite was used, this allowed an attacker
    to trigger a memory access up to 64KiB beyond the incoming message buffer,
    potentially leading to an application crash or information disclosure.
  * Fix mbedtls_mpi_is_prime() to use more rounds of probabilistic testing. The
    previous settings for the number of rounds made it practical for an
    adversary to construct non-primes that would be erroneously accepted as
    primes with high probability. This does not have an impact on the
    security of TLS, but can matter in other contexts with numbers chosen
    potentially by an adversary that should be prime and can be validated.
    For example, the number of rounds was enough to securely generate RSA key
    pairs or Diffie-Hellman parameters, but was insufficient to validate
    Diffie-Hellman parameters properly.
    See "Prime and Prejudice" by by Martin R. Albrecht and Jake Massimo and
    Kenneth G. Paterson and Juraj Somorovsky.
  Features
  * Add support for temporarily suspending expensive ECC computations after
    some configurable amount of operations. This is intended to be used in
    constrained, single-threaded systems where ECC is time consuming and can
    block other operations until they complete. This is disabled by default,
    but can be enabled by MBEDTLS_ECP_RESTARTABLE at compile time and
    configured by mbedtls_ecp_set_max_ops() at runtime. It applies to the new
    xxx_restartable functions in ECP, ECDSA, PK and X.509 (CRL not supported
    yet), and to existing functions in ECDH and SSL (currently only
    implemented client-side, for ECDHE-ECDSA ciphersuites in TLS 1.2,
    including client authentication).
  * Add support for Arm CPU DSP extensions to accelerate asymmetric key
    operations. On CPUs where the extensions are available, they can accelerate
    MPI multiplications used in ECC and RSA cryptography. Contributed by
    Aurelien Jarno.
  * Extend RSASSA-PSS signature to allow a smaller salt size. Previously, PSS
    signature always used a salt with the same length as the hash, and returned
    an error if this was not possible. Now the salt size may be up to two bytes
    shorter. This allows the library to support all hash and signature sizes
    that comply with FIPS 186-4, including SHA-512 with a 1024-bit key.
  * Add support for 128-bit keys in CTR_DRBG. Note that using keys shorter
    than 256 bits limits the security of generated material to 128 bits.
  API Changes
  * Add a common error code of `MBEDTLS_ERR_PLATFORM_FEATURE_UNSUPPORTED` for
    a feature that is not supported by underlying alternative
    implementations implementing cryptographic primitives. This is useful for
    hardware accelerators that don't implement all options or features.
  New deprecations
  * All module specific errors following the form
    MBEDTLS_ERR_XXX_FEATURE_UNAVAILABLE that indicate a feature is not
    supported are deprecated and are now replaced by the new equivalent
    platform error.
  * All module specific generic hardware acceleration errors following the
    form MBEDTLS_ERR_XXX_HW_ACCEL_FAILED that are deprecated and are replaced
    by the equivalent plaform error.
  * Deprecate the function mbedtls_mpi_is_prime() in favor of
    mbedtls_mpi_is_prime_ext() which allows specifying the number of
    Miller-Rabin rounds.
  Bugfix
  * Fix wrong order of freeing in programs/ssl/ssl_server2 example
    application leading to a memory leak in case both
    MBEDTLS_MEMORY_BUFFER_ALLOC_C and MBEDTLS_MEMORY_BACKTRACE are set.
    Fixes #2069.
  * Fix a bug in the update function for SSL ticket keys which previously
    invalidated keys of a lifetime of less than a 1s. Fixes #1968.
  * Fix failure in hmac_drbg in the benchmark sample application, when
    MBEDTLS_THREADING_C is defined. Found by TrinityTonic, #1095
  * Fix a bug in the record decryption routine ssl_decrypt_buf()
    which lead to accepting properly authenticated but improperly
    padded records in case of CBC ciphersuites using Encrypt-then-MAC.
  * Fix memory leak and freeing without initialization in the example
    program programs/x509/cert_write. Fixes #1422.
  * Ignore IV in mbedtls_cipher_set_iv() when the cipher mode is
    MBEDTLS_MODE_ECB. Found by ezdevelop. Fixes #1091.
  * Zeroize memory used for buffering or reassembling handshake messages
    after use.
  * Use `mbedtls_platform_zeroize()` instead of `memset()` for zeroization
    of sensitive data in the example programs aescrypt2 and crypt_and_hash.
  * Change the default string format used for various X.509 DN attributes to
    UTF8String. Previously, the use of the PrintableString format led to
    wildcards and non-ASCII characters being unusable in some DN attributes.
    Reported by raprepo in #1860 and by kevinpt in #468. Fix contributed by
    Thomas-Dee.
  * Fix compilation failure for configurations which use compile time
    replacements of standard calloc/free functions through the macros
    MBEDTLS_PLATFORM_CALLOC_MACRO and MBEDTLS_PLATFORM_FREE_MACRO.
    Reported by ole-de and ddhome2006. Fixes #882, #1642 and #1706.
  Changes
  * Removed support for Yotta as a build tool.
  * Add tests for session resumption in DTLS.
  * Close a test gap in (D)TLS between the client side and the server side:
    test the handling of large packets and small packets on the client side
    in the same way as on the server side.
  * Change the dtls_client and dtls_server samples to work by default over
    IPv6 and optionally by a build option over IPv4.
  * Change the use of Windows threading to use Microsoft Visual C++ runtime
    calls, rather than Win32 API calls directly. This is necessary to avoid
    conflict with C runtime usage. Found and fixed by irwir.
  * Remember the string format of X.509 DN attributes when replicating
    X.509 DNs. Previously, DN attributes were always written in their default
    string format (mostly PrintableString), which could lead to CRTs being
    created which used PrintableStrings in the issuer field even though the
    signing CA used UTF8Strings in its subject field; while X.509 compliant,
    such CRTs were rejected in some applications, e.g. some versions of
    Firefox, curl and GnuTLS. Reported in #1033 by Moschn. Fix contributed by
    Thomas-Dee.
  * Improve documentation of mbedtls_ssl_get_verify_result().
    Fixes #517 reported by github-monoculture.
  * Add MBEDTLS_MPI_GEN_PRIME_FLAG_LOW_ERR flag to mbedtls_mpi_gen_prime() and
    use it to reduce error probability in RSA key generation to levels mandated
    by FIPS-186-4.
- Version 2.13.1
  API Changes
  * Extend the platform module with an abstraction mbedtls_platform_gmtime_r()
    whose implementation should behave as a thread-safe version of gmtime().
    This allows users to configure such an implementation at compile time when
    the target system cannot be deduced automatically, by setting the option
    MBEDTLS_PLATFORM_GMTIME_R_ALT. At this stage Mbed TLS is only able to
    automatically select implementations for Windows and POSIX C libraries.
  Bugfix
  * Fix build failures on platforms where only gmtime() is available but
    neither gmtime_r() nor gmtime_s() are present. Fixes #1907.
- Version 2.13.0
  Security
  * Fix an issue in the X.509 module which could lead to a buffer overread
    during certificate extensions parsing. In case of receiving malformed
    input (extensions length field equal to 0), an illegal read of one byte
    beyond the input buffer is made. Found and analyzed by Nathan Crandall.
  Features
  * Add support for fragmentation of outgoing DTLS handshake messages. This
    is controlled by the maximum fragment length as set locally or negotiated
    with the peer, as well as by a new per-connection MTU option, set using
    mbedtls_ssl_set_mtu().
  * Add support for auto-adjustment of MTU to a safe value during the
    handshake when flights do not get through (RFC 6347, section 4.1.1.1,
    last paragraph).
  * Add support for packing multiple records within a single datagram,
    enabled by default.
  * Add support for buffering out-of-order handshake messages in DTLS.
    The maximum amount of RAM used for this can be controlled by the
    compile-time constant MBEDTLS_SSL_DTLS_MAX_BUFFERING defined
    in mbedtls/config.h.
  API Changes
  * Add function mbedtls_ssl_set_datagram_packing() to configure
    the use of datagram packing (enabled by default).
  Bugfix
  * Fix a potential memory leak in mbedtls_ssl_setup() function. An allocation
    failure in the function could lead to other buffers being leaked.
  * Fixes an issue with MBEDTLS_CHACHAPOLY_C which would not compile if
    MBEDTLS_ARC4_C and MBEDTLS_CIPHER_NULL_CIPHER weren't also defined. #1890
  * Fix a memory leak in ecp_mul_comb() if ecp_precompute_comb() fails.
    Fix contributed by Espressif Systems.
  * Add ecc extensions only if an ecc based ciphersuite is used.
    This improves compliance to RFC 4492, and as a result, solves
    interoperability issues with BouncyCastle. Raised by milenamil in #1157.
  * Replace printf with mbedtls_printf in the ARIA module. Found by
    TrinityTonic in #1908.
  * Fix potential use-after-free in mbedtls_ssl_get_max_frag_len()
    and mbedtls_ssl_get_record_expansion() after a session reset. Fixes #1941.
  * Fix a bug that caused SSL/TLS clients to incorrectly abort the handshake
    with TLS versions 1.1 and earlier when the server requested authentication
    without providing a list of CAs. This was due to an overly strict bounds
    check in parsing the CertificateRequest message,
    introduced in Mbed TLS 2.12.0. Fixes #1954.
  * Fix a miscalculation of the maximum record expansion in
    mbedtls_ssl_get_record_expansion() in case of ChachaPoly ciphersuites,
    or CBC ciphersuites in (D)TLS versions 1.1 or higher. Fixes #1913, #1914.
  * Fix undefined shifts with negative values in certificates parsing
    (found by Catena cyber using oss-fuzz)
  * Fix memory leak and free without initialization in pk_encrypt
    and pk_decrypt example programs. Reported by Brace Stout. Fixes #1128.
  * Remove redundant else statement. Raised by irwir. Fixes #1776.
  Changes
  * Copy headers preserving timestamps when doing a "make install".
    Contributed by xueruini.
  * Allow the forward declaration of public structs. Contributed by Dawid
    Drozd. Fixes #1215 raised by randombit.
  * Improve compatibility with some alternative CCM implementations by using
    CCM test vectors from RAM.
  * Add support for buffering of out-of-order handshake messages.
  * Add warnings to the documentation of the HKDF module to reduce the risk
    of misusing the mbedtls_hkdf_extract() and mbedtls_hkdf_expand()
    functions. Fixes #1775. Reported by Brian J. Murray.</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1544529601">- Library package version bumped to libmbedtls12</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1546862400">- Update to version 2.16.0:
  Features
  * Add a new config.h option of MBEDTLS_CHECK_PARAMS that enables validation of parameters in the API. This allows detection of obvious misuses of the API, such as passing NULL pointers. The API of existing functions hasn't changed, but requirements on parameters have been made more explicit in the documentation. See the corresponding API documentation for each function to see for which parameter values it is defined. This feature is disabled by default. See its API documentation in config.h for additional steps you have to take when enabling it.
  API Changes
  * The following functions in the random generator modules have been deprecated and replaced as shown below. The new functions change the return type from void to int to allow returning error codes when using MBEDTLS_&lt;MODULE&gt;_ALT for the underlying AES or message digest primitive. Fixes #1798. mbedtls_ctr_drbg_update() -&gt; mbedtls_ctr_drbg_update_ret() mbedtls_hmac_drbg_update() -&gt; mbedtls_hmac_drbg_update_ret()
  * Extend ECDH interface to enable alternative implementations.
  * Deprecate error codes of the form MBEDTLS_ERR_xxx_INVALID_KEY_LENGTH for ARIA, CAMELLIA and Blowfish. These error codes will be replaced by the more generic per-module error codes MBEDTLS_ERR_xxx_BAD_INPUT_DATA.
  * Additional parameter validation checks have been added for the following modules - AES, ARIA, Blowfish, CAMELLIA, CCM, GCM, DHM, ECP, ECDSA, ECDH, ECJPAKE, SHA, Chacha20 and Poly1305, cipher, pk, RSA, and MPI. Where modules have had parameter validation added, existing parameter checks may have changed. Some modules, such as Chacha20 had existing parameter validation whereas other modules had little. This has now been changed so that the same level of validation is present in all modules, and that it is now optional with the MBEDTLS_CHECK_PARAMS flag which by default is off. That means that checks which were previously present by default will no longer be.
  New deprecations
  * Deprecate mbedtls_ctr_drbg_update() and mbedtls_hmac_drbg_update() in favor of functions that can return an error code.
  Bugfix
  * Fix for Clang, which was reporting a warning for the bignum.c inline assembly for AMD64 targets creating string literals greater than those permitted by the ISO C99 standard. Found by Aaron Jones. Fixes #482.
  * Fix runtime error in mbedtls_platform_entropy_poll() when run through qemu user emulation. Reported and fix suggested by randombit. Fixes #1212.
  * Fix an unsafe bounds check when restoring an SSL session from a ticket. This could lead to a buffer overflow, but only in case ticket authentication was broken. Reported and fix suggested by Guido Vranken in #659.
  * Add explicit integer to enumeration type casts to example program programs/pkey/gen_key which previously led to compilation failure on some toolchains. Reported by phoenixmcallister. Fixes #2170.
  * Clarify documentation of mbedtls_ssl_set_own_cert() regarding the absence of check for certificate/key matching. Reported by Attila Molnar, #507.
  * Fix double initialization of ECC hardware that made some accelerators hang.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1567512000">- Update to version 2.16.2:
  * Security improvements and bugfixes
- Use ninja to for build</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1573646400">- Update to version 2.16.3:
  * Security improvements and bugfixes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1585828800">- Update to version 2.16.5:
  * Security improvements and bugfixes</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597665600">- update to 2.23.0:
  a lot of changes see https://github.com/ARMmbed/mbedtls/releases/tag/v2.23.0
  * Fix a side channel vulnerability in modular exponentiation that could reveal an RSA private key used in a secure enclave. Noticed by Sangho Lee, Ming-Wei Shih, Prasun Gera, Taesoo Kim and Hyesoon Kim (Georgia Institute of Technology); and Marcus Peinado (Microsoft Research). Reported by Raoul Strackx (Fortanix) in #3394.
  * Fix side channel in mbedtls_ecp_check_pub_priv() and mbedtls_pk_parse_key() / mbedtls_pk_parse_keyfile() (when loading a private key that didn't include the uncompressed public key), as well as mbedtls_ecp_mul() / mbedtls_ecp_mul_restartable() when called with a NULL f_rng argument. An attacker with access to precise enough timing and memory access information (typically an untrusted operating system attacking a secure enclave) could fully recover the ECC private key. Found and reported by Alejandro Cabrera Aldaya and Billy Brumley.
  * Fix issue in Lucky 13 counter-measure that could make it ineffective when hardware accelerators were used (using one of the MBEDTLS_SHAxxx_ALT macros). This would cause the original Lucky 13 attack to be possible in those configurations, allowing an active network attacker to recover plaintext after repeated timing measurements under some conditions. Reported and fix suggested by Luc Perneel in #3246.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1598875200">- Do not run testsuite in parallel - its not reliable</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1599480000">- Add workaround for failing builds (Python not found) due to
  https://gitlab.kitware.com/cmake/cmake/-/issues/21168</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1599652800">- update to 2.24.0:
  * see https://github.com/ARMmbed/mbedtls/releases/tag/v2.24.0
  * Fix a vulnerability in the verification of X.509 certificates when matching
  the expected common name (the cn argument of mbedtls_x509_crt_verify())
  with the actual certificate name: when the subjecAltName extension is
  present, the expected name was compared to any name in that extension
  regardless of its type. This means that an attacker could for example
  impersonate a 4-bytes or 16-byte domain by getting a certificate for the
  corresponding IPv4 or IPv6 (this would require the attacker to control that
  IP address, though). Similar attacks using other subjectAltName name types
  might be possible.
  * When checking X.509 CRLs, a certificate was only considered as revoked if
  its revocationDate was in the past according to the local clock if
  available. In particular, on builds without MBEDTLS_HAVE_TIME_DATE,
  certificates were never considered as revoked. On builds with
  MBEDTLS_HAVE_TIME_DATE, an attacker able to control the local clock (for
  example, an untrusted OS attacking a secure enclave) could prevent
  revocation of certificates via CRLs. Fixed by no longer checking the
  revocationDate field, in accordance with RFC 5280. Reported by yuemonangong
  in #3340. Reported independently and fixed by Raoul Strackx and Jethro
  * In (D)TLS record decryption, when using a CBC ciphersuites without the
  Encrypt-then-Mac extension, use constant code flow memory access patterns
  to extract and check the MAC. This is an improvement to the existing
  countermeasure against Lucky 13 attacks. The previous countermeasure was
  effective against network-based attackers, but less so against local
  attackers. The new countermeasure defends against local attackers, even if
  they have access to fine-grained measurements. In particular, this fixes a
  local Lucky 13 cache attack found and reported by Tuba Yavuz, Farhaan
  Fowze, Ken (Yihan) Bai, Grant Hernandez, and Kevin Butler (University of
  Florida) and Dave Tian (Purdue University).
  * Fix side channel in RSA private key operations and static (finite-field)
  Diffie-Hellman. An adversary with precise enough timing and memory access
  information (typically an untrusted operating system attacking a secure
  enclave) could bypass an existing counter-measure (base blinding) and
  potentially fully recover the private key.
  * Fix a 1-byte buffer overread in mbedtls_x509_crl_parse_der(). Credit to
  OSS-Fuzz for detecting the problem and to Philippe Antoine for pinpointing
  the problematic code.
  * Zeroising of plaintext buffers in mbedtls_ssl_read() to erase unused
  application data from memory.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1608638400">- update to 2.25.0:
  * This release of Mbed TLS provides bug fixes, minor enhancements and new
  features. This release includes fixes for security issues.
  * see https://github.com/ARMmbed/mbedtls/releases/tag/v2.25.0
  * The functions mbedtls_cipher_auth_encrypt() and
  mbedtls_cipher_auth_decrypt() would write past the minimum documented size
  of the output buffer when used with NIST_KW. As a result, code using those
  functions as documented with NIST_KW could have a buffer overwrite of up to
  15 bytes, with consequences ranging up to arbitrary code execution
  depending on the location of the output buffer.
  * Limit the size of calculations performed by mbedtls_mpi_exp_mod to
  MBEDTLS_MPI_MAX_SIZE to prevent a potential denial of service when generating
  Diffie-Hellman key pairs. Credit to OSS-Fuzz.
  * A failure of the random generator was ignored in mbedtls_mpi_fill_random(),
  which is how most uses of randomization in asymmetric cryptography (including
  key generation, intermediate value randomization and blinding) are implemented.
  This could cause failures or the silent use of non-random values. A random
  generator can fail if it needs reseeding and cannot not obtain entropy, or due
  to an internal failure (which, for Mbed TLS's own CTR_DRBG or HMAC_DRBG, can
  only happen due to a misconfiguration).
  * Fix a compliance issue whereby we were not checking the tag on the algorithm
  parameters (only the size) when comparing the signature in the description part
  of the cert to the real signature. This meant that a NULL algorithm parameters
  entry would look identical to an array of REAL (size zero) to the library and
  thus the certificate would be considered valid. However, if the parameters do
  not match in any way then the certificate should be considered invalid, and
  indeed OpenSSL marks these certs as invalid when mbedtls did not. Many thanks
  to guidovranken who found this issue via differential fuzzing and reported it
  in #3629.
  * Zeroising of local buffers and variables which are used for calculations in
  mbedtls_pkcs5_pbkdf2_hmac(), mbedtls_internal_sha*_process(),
  mbedtls_internal_md*_process() and mbedtls_internal_ripemd160_process()
  functions to erase sensitive data from memory. Reported by Johan Malmgren and
  Johan Uppman Bruce from Sectra.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1611057600">- Fix build for Leap targets
- Use upstream tarball name</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1616414400">- Update to 2.26.0: [bsc#1189589, CVE-2021-24119]
  * * This release of Mbed TLS provides bug fixes, minor enhancements and new
  features. This release includes fixes for security issues.
  * see https://github.com/ARMmbed/mbedtls/releases/tag/v2.26.0
- Fix build with patch from https://github.com/ARMmbed/mbedtls/pull/4237
  mbedtls-4237.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1618488000">-  Workaround for building with gcc-11 boo#1181876</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1626782400">- Update to 2.27.0:
  API changes:
  * Update AEAD output size macros to bring them in line with the PSA Crypto
    API version 1.0 spec. This version of the spec parameterizes them on the
    key type used, as well as the key bit-size in the case of
    PSA_AEAD_TAG_LENGTH.
    The old versions of these macros were renamed and deprecated as follows:
  - PSA_AEAD_TAG_LENGTH          -&gt; PSA_AEAD_TAG_LENGTH_1_ARG
  - PSA_AEAD_ENCRYPT_OUTPUT_SIZE -&gt; PSA_AEAD_ENCRYPT_OUTPUT_SIZE_2_ARG
  - PSA_AEAD_DECRYPT_OUTPUT_SIZE -&gt; PSA_AEAD_DECRYPT_OUTPUT_SIZE_2_ARG
  - PSA_AEAD_UPDATE_OUTPUT_SIZE  -&gt; PSA_AEAD_UPDATE_OUTPUT_SIZE_2_ARG
  - PSA_AEAD_FINISH_OUTPUT_SIZE  -&gt; PSA_AEAD_FINISH_OUTPUT_SIZE_1_ARG
  - PSA_AEAD_VERIFY_OUTPUT_SIZE  -&gt; PSA_AEAD_VERIFY_OUTPUT_SIZE_1_ARG
  * Implement one-shot cipher functions, psa_cipher_encrypt and
    psa_cipher_decrypt, according to the PSA Crypto API 1.0.0
    specification.
  Features:
  * Add mbedtls_rsa_rsassa_pss_sign_ext() function allowing to generate a
    signature with a specific salt length. This function allows to validate
    test cases provided in the NIST's CAVP test suite.
  * Added support for built-in driver keys through the PSA opaque crypto
    driver interface. Refer to the documentation of
    MBEDTLS_PSA_CRYPTO_BUILTIN_KEYS for more information.
  * Implement psa_sign_message() and psa_verify_message().
  * The new function mbedtls_mpi_random() generates a random value in a
    given range uniformly.
  * Implement psa_mac_compute() and psa_mac_verify() as defined in the
    PSA Cryptograpy API 1.0.0 specification.
  * MBEDTLS_ECP_MAX_BITS is now determined automatically from the configured
    curves and no longer needs to be configured explicitly to save RAM.
  Security
  * Fix a bias in the generation of finite-field Diffie-Hellman-Merkle (DHM)
    private keys and of blinding values for DHM and elliptic curves (ECP)
    computations.
  * Fix a potential side channel vulnerability in ECDSA ephemeral key generation.
    An adversary who is capable of very precise timing measurements could
    learn partial information about the leading bits of the nonce used for the
    signature, allowing the recovery of the private key after observing a
    large number of signature operations. This completes a partial fix in
    Mbed TLS 2.20.0.
  * It was possible to configure MBEDTLS_ECP_MAX_BITS to a value that is
    too small, leading to buffer overflows in ECC operations. Fail the build
    in such a case.
  * An adversary with access to precise enough information about memory
    accesses (typically, an untrusted operating system attacking a secure
    enclave) could recover an RSA private key after observing the victim
    performing a single private-key operation.
  * An adversary with access to precise enough timing information (typically, a
    co-located process) could recover a Curve25519 or Curve448 static ECDH key
    after inputting a chosen public key and observing the victim performing the
    corresponding private-key operation.
  Bugfix
  * Add printf function attributes to mbedtls_debug_print_msg to ensure we
    get printf format specifier warnings.
  * Fix premature fopen() call in mbedtls_entropy_write_seed_file which may
    lead to seed file corruption in the case where the path to the seed file is
    equal to MBEDTLS_PLATFORM_STD_NV_SEED_FILE.
  * PSA functions other than psa_open_key now return PSA_ERROR_INVALID_HANDLE
    rather than PSA_ERROR_DOES_NOT_EXIST for an invalid handle, bringing them
    in line with version 1.0.0 of the specification.
  * PSA functions creating a key now return PSA_ERROR_INVALID_ARGUMENT rather
    than PSA_ERROR_INVALID_HANDLE when the identifier specified for the key
    to create is not valid, bringing them in line with version 1.0.0 of the
    specification.
  * Fix some cases in the bignum module where the library constructed an
    unintended representation of the value 0 which was not processed
    correctly by some bignum operations. This could happen when
    mbedtls_mpi_read_string() was called on "-0", or when
    mbedtls_mpi_mul_mpi() and mbedtls_mpi_mul_int() was called with one of
    the arguments being negative and the other being 0.
  * Fix a bug in ECDSA that would cause it to fail when the hash is all-bits
    zero.
  * Fix a compilation error when MBEDTLS_ECP_RANDOMIZE_MXZ_ALT is
    defined.
  * Fix an incorrect error code when parsing a PKCS#8 private key.
  * In a TLS client, enforce the Diffie-Hellman minimum parameter size
    set with mbedtls_ssl_conf_dhm_min_bitlen() precisely. Before, the
    minimum size was rounded down to the nearest multiple of 8.
  * In library/net_sockets.c, _POSIX_C_SOURCE and _XOPEN_SOURCE are
    defined to specific values.  If the code is used in a context
    where these are already defined, this can result in a compilation
    error.  Instead, assume that if they are defined, the values will
    be adequate to build Mbed TLS.
  * The cipher suite TLS-RSA-WITH-CAMELLIA-256-GCM-SHA384 was not available
    when SHA-1 was disabled and was offered when SHA-1 was enabled but SHA-384
    was disabled. Fix the dependency.
  * Do not offer SHA384 cipher suites when SHA-384 is disabled.
  * With MBEDTLS_PSA_CRYPTO_C disabled, some functions were getting built
    nonetheless, resulting in undefined reference errors when building a
    shared library.
  * Fix test suite code on platforms where int32_t is not int, such as
    Arm Cortex-M.
  * Fix some issues affecting MBEDTLS_ARIA_ALT implementations: a misplaced
    directive in a header and a missing initialization in the self-test.
  * Fix a missing initialization in the Camellia self-test, affecting
    MBEDTLS_CAMELLIA_ALT implementations.
  * Restore the ability to configure PSA via Mbed TLS options to support RSA
    key pair operations but exclude RSA key generation. When MBEDTLS_GENPRIME
    is not defined PSA will no longer attempt to use mbedtls_rsa_gen_key().
  * Fix a regression introduced in 2.24.0 which broke (D)TLS CBC ciphersuites
    (when the encrypt-then-MAC extension is not in use) with some ALT
    implementations of the underlying hash (SHA-1, SHA-256, SHA-384), causing
    the affected side to wrongly reject valid messages.
  * Remove outdated check-config.h check that prevented implementing the
    timing module on Mbed OS.
  * Fix PSA_ALG_TLS12_PRF and PSA_ALG_TLS12_PSK_TO_MS being too permissive
    about missing inputs.
  * Fix a resource leak in a test suite with an alternative AES
    implementation.
  * Fix a crash in mbedtls_mpi_debug_mpi on a bignum having 0 limbs. This
    could notably be triggered by setting the TLS debug level to 3 or above
    and using a Montgomery curve for the key exchange.
  * psa_verify_hash() was relying on implementation-specific behavior of
    mbedtls_rsa_rsassa_pss_verify() and was causing failures in some _ALT
    implementations. This reliance is now removed.
  * Disallow inputs of length different from the corresponding hash when
    signing or verifying with PSA_ALG_RSA_PSS (The PSA Crypto API mandates
    that PSA_ALG_RSA_PSS uses the same hash throughout the algorithm.)
  * Fix a null pointer dereference when mbedtls_mpi_exp_mod() was called with
    A=0 represented with 0 limbs. Up to and including Mbed TLS 2.26, this bug
    could not be triggered by code that constructed A with one of the
    mbedtls_mpi_read_xxx functions (including in particular TLS code) since
    those always built an mpi object with at least one limb.
  * Fix mbedtls_mpi_gcd(G,A,B) when the value of B is zero. This had no
    effect on Mbed TLS's internal use of mbedtls_mpi_gcd(), but may affect
    applications that call mbedtls_mpi_gcd() directly.
  * The PSA API no longer allows the creation or destruction of keys with a
    read-only lifetime. The persistence level PSA_KEY_PERSISTENCE_READ_ONLY
    can now only be used as intended, for keys that cannot be modified through
    normal use of the API.
  * When MBEDTLS_PSA_CRYPTO_SPM is enabled, crypto_spe.h was not included
    in all the right places. Include it from crypto_platform.h, which is
    the natural place.
  * mbedtls_pk_sign() and mbedtls_pk_verify() and their extended and
    restartable variants now always honor the specified hash length if
    nonzero. Before, for RSA, hash_len was ignored in favor of the length of
    the specified hash algorithm.
  * Fix which alert is sent in some cases to conform to the
    applicable RFC: on an invalid Finished message value, an
    invalid max_fragment_length extension, or an
    unsupported extension used by the server.
  * Correct (change from 12 to 13 bytes) the value of the macro describing the
    maximum nonce length returned by psa_aead_generate_nonce().
  Changes
  * Add extra printf compiler warning flags to builds.
  * Fix memsan build false positive in x509_crt.c with Clang 11
  * Fix the setting of the read timeout in the DTLS sample programs.
  * Remove the AES sample application programs/aes/aescrypt2 which shows
    bad cryptographic practice.
  * Alternative implementations of CMAC may now opt to not support 3DES as a
    CMAC block cipher, and still pass the CMAC self test.
  * Remove configs/config-psa-crypto.h, which was identical to the default
    configuration except for having some extra cryptographic mechanisms
    enabled and for unintended differences. This configuration was primarily
    intended to demonstrate the PSA API, and lost most of its usefulness when
    MBEDTLS_PSA_CRYPTO_C became enabled by default.
  * When building the test suites with GNU make, invoke python3 or python, not
    python2, which is no longer supported upstream.
  * When using session cache based session resumption on the server,
    double-check that custom session cache implementations return
    sessions which are consistent with the negotiated ciphersuite
    and compression method.
  * Fix build failure on MinGW toolchain when __USE_MING_ANSI_STDIO is on.
    When that flag is on, standard GNU C printf format specifiers
    should be used.
  * Reduce the default value of MBEDTLS_ECP_WINDOW_SIZE. This reduces RAM usage
    during ECC operations at a negligible performance cost.
  * mbedtls_mpi_read_binary(), mbedtls_mpi_read_binary_le() and
    mbedtls_mpi_read_string() now construct an mbedtls_mpi object with 0 limbs
    when their input has length 0. Note that this is an implementation detail
    and can change at any time, so this change should be transparent, but it
    may result in mbedtls_mpi_write_binary() or mbedtls_mpi_write_string()
    now writing an empty string where it previously wrote one or more
    zero digits when operating from values constructed with an mpi_read
    function and some mpi operations.
  * Implicitly add PSA_KEY_USAGE_SIGN_MESSAGE key usage policy flag when
    PSA_KEY_USAGE_SIGN_HASH flag is set and PSA_KEY_USAGE_VERIFY_MESSAGE flag
    when PSA_KEY_USAGE_VERIFY_HASH flag is set. This usage flag extension
    is also applied when loading a key from storage.
  * Remove mbedtls-4237.patch upstream
  * Library soname bump to libmbedcrypto7</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1642075200">- Update to 2.28.0: (bsc#1193979, CVE-2021-45450)
  API changes
  * Some fields of mbedtls_ssl_session and mbedtls_ssl_config are in a
  different order. This only affects applications that define such
  structures directly or serialize them.
  Requirement changes
  * Sign-magnitude and one's complement representations for signed integers are
  not supported. Two's complement is the only supported representation.
  Removals
  * Remove config option MBEDTLS_TLS_DEFAULT_ALLOW_SHA1_IN_CERTIFICATES,
  which allowed SHA-1 in the default TLS configuration for certificate
  signing. It was intended to facilitate the transition in environments
  with SHA-1 certificates. SHA-1 is considered a weak message digest and
  its use constitutes a security risk.
  * Remove the partial support for running unit tests via Greentea on Mbed OS,
  which had been unmaintained since 2018.
  Features
  * The identifier of the CID TLS extension can be configured by defining
  MBEDTLS_TLS_EXT_CID at compile time.
  * Warn if errors from certain functions are ignored. This is currently
  supported on GCC-like compilers and on MSVC and can be configured through
  the macro MBEDTLS_CHECK_RETURN. The warnings are always enabled
  (where supported) for critical functions where ignoring the return
  value is almost always a bug. Enable the new configuration option
  MBEDTLS_CHECK_RETURN_WARNING to get warnings for other functions. This
  is currently implemented in the AES, DES and md modules, and will be
  extended to other modules in the future.
  * Add missing PSA macros declared by PSA Crypto API 1.0.0:
  PSA_ALG_IS_SIGN_HASH, PSA_ALG_NONE, PSA_HASH_BLOCK_LENGTH, PSA_KEY_ID_NULL.
  * Add new API mbedtls_ct_memcmp for constant time buffer comparison.
  * Add PSA API definition for ARIA.
  Security
  * Zeroize several intermediate variables used to calculate the expected
  value when verifying a MAC or AEAD tag. This hardens the library in
  case the value leaks through a memory disclosure vulnerability. For
  example, a memory disclosure vulnerability could have allowed a
  man-in-the-middle to inject fake ciphertext into a DTLS connection.
  * In psa_cipher_generate_iv() and psa_cipher_encrypt(), do not read back
  from the output buffer. This fixes a potential policy bypass or decryption
  oracle vulnerability if the output buffer is in memory that is shared with
  an untrusted application.
  * Fix a double-free that happened after mbedtls_ssl_set_session() or
  mbedtls_ssl_get_session() failed with MBEDTLS_ERR_SSL_ALLOC_FAILED
  (out of memory). After that, calling mbedtls_ssl_session_free()
  and mbedtls_ssl_free() would cause an internal session buffer to
  be free()'d twice.
  Bugfix
  * Stop using reserved identifiers as local variables. Fixes #4630.
  * The GNU makefiles invoke python3 in preference to python except on Windows.
  * The check was accidentally not performed when cross-compiling for Windows
  on Linux. Fix this. Fixes #4774.
  * Prevent divide by zero if either of PSA_CIPHER_ENCRYPT_OUTPUT_SIZE() or
  PSA_CIPHER_UPDATE_OUTPUT_SIZE() were called using an asymmetric key type.
  * Fix a parameter set but unused in psa_crypto_cipher.c. Fixes #4935.
  * Don't use the obsolete header path sys/fcntl.h in unit tests.
  These header files cause compilation errors in musl.
  Fixes #4969.
  * Fix missing constraints on x86_64 and aarch64 assembly code
  for bignum multiplication that broke some bignum operations with
  (at least) Clang 12.
  Fixes #4116, #4786, #4917, #4962.
  * Fix mbedtls_cipher_crypt: AES-ECB when MBEDTLS_USE_PSA_CRYPTO is enabled.
  * Failures of alternative implementations of AES or DES single-block
  functions enabled with MBEDTLS_AES_ENCRYPT_ALT, MBEDTLS_AES_DECRYPT_ALT,
  MBEDTLS_DES_CRYPT_ECB_ALT or MBEDTLS_DES3_CRYPT_ECB_ALT were ignored.
  This does not concern the implementation provided with Mbed TLS,
  where this function cannot fail, or full-module replacements with
  MBEDTLS_AES_ALT or MBEDTLS_DES_ALT. Reported by Armelle Duboc in #1092.
  * Some failures of HMAC operations were ignored. These failures could only
  happen with an alternative implementation of the underlying hash module.
  * Fix the error returned by psa_generate_key() for a public key. Fixes #4551.
  * Fix the build of sample programs when neither MBEDTLS_ERROR_C nor
  MBEDTLS_ERROR_STRERROR_DUMMY is enabled.
  * Fix PSA_ALG_RSA_PSS verification accepting an arbitrary salt length.
  This algorithm now accepts only the same salt length for verification
  that it produces when signing, as documented. Use the new algorithm
  PSA_ALG_RSA_PSS_ANY_SALT to accept any salt length. Fixes #4946.
  * The existing predicate macro name PSA_ALG_IS_HASH_AND_SIGN is now reserved
  for algorithm values that fully encode the hashing step, as per the PSA
  Crypto API specification. This excludes PSA_ALG_RSA_PKCS1V15_SIGN_RAW and
  PSA_ALG_ECDSA_ANY. The new predicate macro PSA_ALG_IS_SIGN_HASH covers
  all algorithms that can be used with psa_{sign,verify}_hash(), including
  these two.
  * Fix issue in Makefile on Linux with SHARED=1, that caused shared libraries
  not to list other shared libraries they need.
  * Fix a bug in mbedtls_gcm_starts() when the bit length of the iv
  exceeds 2^32. Fixes #4884.
  * Fix an uninitialized variable warning in test_suite_ssl.function with GCC
  version 11.
  * Fix the build when no SHA2 module is included. Fixes #4930.
  * Fix the build when only the bignum module is included. Fixes #4929.
  * Fix a potential invalid pointer dereference and infinite loop bugs in
  pkcs12 functions when the password is empty. Fix the documentation to
  better describe the inputs to these functions and their possible values.
  Fixes #5136.
  * The key usage flags PSA_KEY_USAGE_SIGN_MESSAGE now allows the MAC
  operations psa_mac_compute() and psa_mac_sign_setup().
  * The key usage flags PSA_KEY_USAGE_VERIFY_MESSAGE now allows the MAC
  operations psa_mac_verify() and psa_mac_verify_setup().
  Changes
  * Set config option MBEDTLS_TLS_DEFAULT_ALLOW_SHA1_IN_KEY_EXCHANGE to be
  disabled by default.
  * Improve the performance of base64 constant-flow code. The result is still
  slower than the original non-constant-flow implementation, but much faster
  than the previous constant-flow implementation. Fixes #4814.
  * Indicate in the error returned if the nonce length used with
  ChaCha20-Poly1305 is invalid, and not just unsupported.
  * The mbedcrypto library includes a new source code module constant_time.c,
  containing various functions meant to resist timing side channel attacks.
  * This module does not have a separate configuration option, and functions
  from this module will be included in the build as required. Currently
  most of the interface of this module is private and may change at any
  time.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1642420800">- Fix baselib.conf</changelog>
  <changelog author="Alexander Bergmann &lt;abergmann@suse.com&gt;" date="1671624000">- Fix potential heap buffer overread and overwrite in DTLS if
  MBEDTLS_SSL_DTLS_CONNECTION_ID is enabled and
  MBEDTLS_SSL_CID_IN_LEN_MAX &gt; 2 * MBEDTLS_SSL_CID_OUT_LEN_MAX.
  (bsc#1206576, CVE-2022-46393).
  Add: mbedtls-CVE-2022-46393.patch</changelog>
</package>
<package pkgid="5617532f6e83a5ab9a39e02360b87dcf756598f892bc3e982e4f72e97418aeff" name="libmbedcrypto7-32bit" arch="x86_64">
  <version epoch="0" ver="2.28.0" rel="bp154.2.3.1"/>
  <changelog author="mpluskal@suse.com" date="1531137600">- Update to version 2.11.0:
  * Features
    + Added support for the XTS block cipher mode with AES (AES-XTS). Contributed by Aorimn in pull request #414.
    + Implemented the HMAC-based extract-and-expand key derivation function (HKDF) per RFC 5869. Contributed by Thomas Fossati.
    + For TLS servers, added support for offloading private key operations to an external cryptoprocessor. Private key operations can be asynchronous to allow non-blocking operation of the TLS server stack.
    + Added support for ARIA cipher (RFC 5794) and associated TLS ciphersuites (RFC 6209). ARIA is disabled by default. To enable, see MBEDTLS_ARIA_C in config.h.
    + Added support for the CCM* block cipher mode as defined in IEEE Std 802.15.4.
    + Added an additional block mode, OFB (Output Feedback) per NIST SP 800-38a, to the AES module and cipher abstraction module.
  * API Changes
    + Mbed TLS 2.11.0 maintains source code compatibility with the last minor version, Mbed TLS 2.9.0, but extends the interface with additional capabilities. Mbed TLS 2.11.0 modifies the ABI and increases the SOVERSION.
  * Bugfix
    + Fixed the cert_write example to handle certificates signed with elliptic curves as well as RSA. Fixes #777 found by dbedev.
    + Fixed the redefinition of _WIN32_WINNT, to avoid overriding a definition used by user applications. Found and fixed by Fabio Alessandrelli.
    + Fixed compilation warnings with the IAR toolchain on 32-bit platforms. Reported by rahmanih in #683.
    + Fixed an issue with MicroBlaze support in bn_mul.h which was causing the build to fail. Found by zv-io. Fixes #1651.
    + Fixed braces in mbedtls_memory_buffer_alloc_status(). Found by sbranden in #552.
    + Added the macro MBEDTLS_X509_MAX_FILE_PATH_LEN that enables the user to configure the maximum length of a file path that can be buffered when calling mbedtls_x509_crt_parse_path(). Fixes #492.
    + Fixed redundant declaration of mbedtls_ssl_list_ciphersuites. Raised by TrinityTonic in #1359.
- Changes for version 2.9.0:
  + Security
    + Fixed an issue in the X.509 module which could lead to a buffer overread during certificate validation. Additionally, the issue could also lead to unnecessary callback checks being made or to some validation checks to be omitted. The overread could be triggered remotely, while the other issues would require a non DER-compliant certificate to be correctly signed by a trusted CA, or a trusted CA with a non DER-compliant certificate. Found by luocm. Fixes #825.
    + Fixed the buffer length assertion in the ssl_parse_certificate_request() function which could lead to an arbitrary overread of the message buffer. The overreads could be caused by receiving a malformed algorithms section which was too short. In builds with debug output, this overread data was output with the debug data.
    + Fixed a client-side bug in the validation of the server's ciphersuite choice which could potentially lead to the client accepting a ciphersuite it didn't offer or a ciphersuite that could not be used with the TLS or DTLS version chosen by the server. This could lead to corruption of internal data structures for some configurations.
  * Features
    + Added an option of MBEDTLS_AES_FEWER_TABLES, to dynamically compute smaller AES tables during runtime, thereby reducing the RAM/ROM footprint by ~6KiB. Suggested and contributed by jkivilin.
    + Added initial support for Curve448 (RFC 7748). So far only mbedtls_ecp_mul() and ECDH primitive functions (mbedtls_ecdh_gen_public(), mbedtls_ecdh_compute_shared()) are supported for now. Contributed by Nicholas Wilson.
  * API Changes
    + Mbed TLS 2.9.0 maintains source code and binary compatibility with the last minor version, Mbed TLS 2.8.0, but extends the interface with additional capabilities.
    + Extended the API with the function of mbedtls_net_poll() to allow user applications to wait for a network context to become ready before reading or writing.
    + Added the function mbedtls_ssl_check_pending() to the public API to allow a check for whether more more data is pending to be processed in the internal message buffers. This function is necessary to determine the underlying transport when event-driven IO is used.
  * Bugfix
    + Fixed a spurious uninitialized variable warning in cmac.c. Fix independently contributed by Brian J Murray and David Brown.
    + Added missing dependencies in test suites that led to build failures in configurations that omit certain hashes or public-key algorithms. Fixes #1040.
    + Fixed a C89 incompatibility issue in benchmark.c. Contributed by Brendan Shanks. Fixes #1353.
    + Added missing dependencies for MBEDTLS_HAVE_TIME_DATE and MBEDTLS_VERSION_FEATURES in some test suites. Contributed by Deomid Ryabkov. Fixes #1299, #1475.
    + Fixed the Makefile build process for building shared libraries on Mac OS X. Fixed by mnacamura.
    + Fixed parsing of PKCS#8 encoded Elliptic Curve keys. Previously Mbed TLS was unable to parse keys which had only the optional parameters field of the ECPrivateKey structure. Found by Jethro Beekman, fixed in #1379.
    + Added an optimisation to return the plaintext data more quickly on unpadded CBC decryption, as stated in the mbedtls_cipher_update() documentation. Contributed by Andy Leiserson.
    + Fixed the overriding and ignoring of return values when parsing and writing to a file in the pk_sign program. Found by kevlut in #1142.
    + Added restrictions to the usage of the error code MBEDTLS_ERR_SSL_WANT_READ to situations where data needs to be fetched from the underlying transport in order to make progress. Previously, this error code was also occasionally returned when unexpected messages were being discarded, ignoring that further messages could potentially already be pending to be processed in the internal buffers; these cases led to deadlocks when event-driven I/O was used. Found and reported by Hubert Mis in #772.
    + Fixed buffer length assertions in the ssl_parse_certificate_request() function which led to a potential one byte overread of the message buffer.
    + Fixed invalid buffer sizes being passed to zlib during record compression and decompression.
    + Raised the soversion of libmbedcrypto to match the soversion of the maintained 2.7 branch. The soversion was increased in Mbed TLS version 2.7.1 to reflect breaking changes in that release, but the increment was missed in 2.8.0 and later releases outside of the 2.7 branch.</changelog>
  <changelog author="mpluskal@suse.com" date="1535025600">- Update to version 2.12.0:
  * Security
    + Fixed a vulnerability in the TLS ciphersuites based on use of CBC and SHA-384 in DTLS/TLS 1.0 to 1.2, that allowed an active network attacker to partially recover the plaintext of messages under certains conditions by exploiting timing side-channels.
    + Fixed a vulnerability in TLS ciphersuites based on CBC, in DTLS/TLS 1.0 to 1.2, that allowed a local attacker, with the ability to execute code on the local machine as well as to manipulate network packets, to partially recover the plaintext of messages under certain conditions by using a cache attack targetting an internal MD/SHA buffer.
    + Added a counter-measure against a vulnerability in TLS ciphersuites based on CBC, in DTLS/TLS 1.0 to 1.2, that allowed a local attacker with the ability to execute code on the local machine as well as manipulate network packets, to partially recover the plaintext of messages certain conditions (see previous entry) by using a cache attack targeting the SSL input record buffer.
  * Features
    + Added new cryptographic primitives, the stream cipher Chacha20, one-time authenticator Poly1305 and AEAD construct Chacha20-Poly1305, as defined in RFC 7539. Contributed by Daniel King.
    + Added support for the CHACHA20-POLY1305 ciphersuites from RFC 7905.
    + Made the receive and transmit buffers independently configurable in size, for situations where the outgoing buffer can be fixed at a smaller size than the incoming buffer
    + Added support for the AES based key wrapping modes defined by NIST SP 800-38F algorithms KW and KWP and by RFC's 3394 and 5649.
    + Added platform support for the Haiku OS.
  * Bugfix
    + Fixed the key_app_writer example which was creating an invalid ASN.1 tag by writing an additional leading zero byte. Found by Aryeh R. #1257.
    + Fixed a C++ compilation error, caused by a variable named new. Found and fixed by Hirotaka Niisato. #1783.
    + Fixed the "no symbols" warning issued by ranlib when building on Mac OS X. Fix contributed by tabascoeye.
    + Clarified documentation for mbedtls_ssl_write() to include 0 as a valid return value. Found by @davidwu2000. #839.
    + Fixed a memory leak in mbedtls_x509_csr_parse(). Found and fixed by catenacyber, Philippe Antoine. #1623.
    + Added length checks to some TLS parsing functions. Found and fixed by Philippe Antoine from Catena cyber. #1663.
    + Remove unused headers included in x509.c. Found by Chris Hanson and fixed by Brendan Shanks. #992.
    + Fixed compilation error when MBEDTLS_ARC4_C is disabled and MBEDTLS_CIPHER_NULL_CIPHER is enabled. Found by TrinityTonic in #1719.
    + Fixed the inline assembly for the MPI multiply helper function for i386 and i386 with SSE2. Found by László Langó. #1550.
    + Fixed the namespacing in header files. Remove the mbedtls namespacing in the #include in the header files. #857.
    + Fixed a compiler warning of 'use before initialisation' in mbedtls_pk_parse_key(). Found by Martin Boye Petersen and fixed by Dawid Drozd.#1098.
    + Fixed decryption of zero length messages (which contain all padding) when a CBC based ciphersuite was used together with Encrypt-then-MAC.
    + Fixed the ssl_client2 example to send application data with 0-length content when the request_size argument is set to 0 as stated in the documentation. #1833.
    + Corrected the documentation for mbedtls_ssl_get_session(). This API has deep copy of the session, and the peer certificate is not lost. #926.
    + Fixed issues when building to the C99 standard, using -std=c99. Fixed by Nick Wilson.
  * Changes
    + Fails when receiving a TLS alert message with an invalid length, or invalid zero-length messages when using TLS 1.2. Contributed by Espressif Systems.
    + Changed the default behaviour of mbedtls_hkdf_extract() to return an error when calling with a NULL salt and non-zero salt length. Contributed by Brian J Murray
    + Change the shebang line in Perl scripts to look up perl in the PATH. Contributed by fbrosson.
    + Allow overriding the time on Windows via the platform-time abstraction. Fixed by Nick Wilson.
    + Use gmtime_r/gmtime_s for thread-safety. Fixed by Nick Wilson.</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1544529600">- Update to version 2.14.1: [bsc#1118727, CVE-2018-19608]
  Security
  * Fix timing variations and memory access variations in RSA PKCS#1 v1.5
    decryption that could lead to a Bleichenbacher-style padding oracle
    attack. In TLS, this affects servers that accept ciphersuites based on
    RSA decryption (i.e. ciphersuites whose name contains RSA but not
    (EC)DH(E)). Discovered by Eyal Ronen (Weizmann Institute),  Robert Gillham
    (University of Adelaide), Daniel Genkin (University of Michigan),
    Adi Shamir (Weizmann Institute), David Wong (NCC Group), and Yuval Yarom
    (University of Adelaide, Data61). The attack is described in more detail
    in the paper available here: http://cat.eyalro.net/cat.pdf  CVE-2018-19608
  * In mbedtls_mpi_write_binary(), don't leak the exact size of the number
    via branching and memory access patterns. An attacker who could submit
    a plaintext for RSA PKCS#1 v1.5 decryption but only observe the timing
    of the decryption and not its result could nonetheless decrypt RSA
    plaintexts and forge RSA signatures. Other asymmetric algorithms may
    have been similarly vulnerable. Reported by Eyal Ronen, Robert Gillham,
    Daniel Genkin, Adi Shamir, David Wong and Yuval Yarom.
  * Wipe sensitive buffers on the stack in the CTR_DRBG and HMAC_DRBG
    modules.
  API Changes
  * The new functions mbedtls_ctr_drbg_update_ret() and
    mbedtls_hmac_drbg_update_ret() are similar to mbedtls_ctr_drbg_update()
    and mbedtls_hmac_drbg_update() respectively, but the new functions
    report errors whereas the old functions return void. We recommend that
    applications use the new functions.
- Version 2.14.0:
  Security
  * Fix overly strict DN comparison when looking for CRLs belonging to a
    particular CA. This previously led to ignoring CRLs when the CRL's issuer
    name and the CA's subject name differed in their string encoding (e.g.,
    one using PrintableString and the other UTF8String) or in the choice of
    upper and lower case. Reported by Henrik Andersson of Bosch GmbH in issue
    [#1784].
  * Fix a flawed bounds check in server PSK hint parsing. In case the
    incoming message buffer was placed within the first 64KiB of address
    space and a PSK-(EC)DHE ciphersuite was used, this allowed an attacker
    to trigger a memory access up to 64KiB beyond the incoming message buffer,
    potentially leading to an application crash or information disclosure.
  * Fix mbedtls_mpi_is_prime() to use more rounds of probabilistic testing. The
    previous settings for the number of rounds made it practical for an
    adversary to construct non-primes that would be erroneously accepted as
    primes with high probability. This does not have an impact on the
    security of TLS, but can matter in other contexts with numbers chosen
    potentially by an adversary that should be prime and can be validated.
    For example, the number of rounds was enough to securely generate RSA key
    pairs or Diffie-Hellman parameters, but was insufficient to validate
    Diffie-Hellman parameters properly.
    See "Prime and Prejudice" by by Martin R. Albrecht and Jake Massimo and
    Kenneth G. Paterson and Juraj Somorovsky.
  Features
  * Add support for temporarily suspending expensive ECC computations after
    some configurable amount of operations. This is intended to be used in
    constrained, single-threaded systems where ECC is time consuming and can
    block other operations until they complete. This is disabled by default,
    but can be enabled by MBEDTLS_ECP_RESTARTABLE at compile time and
    configured by mbedtls_ecp_set_max_ops() at runtime. It applies to the new
    xxx_restartable functions in ECP, ECDSA, PK and X.509 (CRL not supported
    yet), and to existing functions in ECDH and SSL (currently only
    implemented client-side, for ECDHE-ECDSA ciphersuites in TLS 1.2,
    including client authentication).
  * Add support for Arm CPU DSP extensions to accelerate asymmetric key
    operations. On CPUs where the extensions are available, they can accelerate
    MPI multiplications used in ECC and RSA cryptography. Contributed by
    Aurelien Jarno.
  * Extend RSASSA-PSS signature to allow a smaller salt size. Previously, PSS
    signature always used a salt with the same length as the hash, and returned
    an error if this was not possible. Now the salt size may be up to two bytes
    shorter. This allows the library to support all hash and signature sizes
    that comply with FIPS 186-4, including SHA-512 with a 1024-bit key.
  * Add support for 128-bit keys in CTR_DRBG. Note that using keys shorter
    than 256 bits limits the security of generated material to 128 bits.
  API Changes
  * Add a common error code of `MBEDTLS_ERR_PLATFORM_FEATURE_UNSUPPORTED` for
    a feature that is not supported by underlying alternative
    implementations implementing cryptographic primitives. This is useful for
    hardware accelerators that don't implement all options or features.
  New deprecations
  * All module specific errors following the form
    MBEDTLS_ERR_XXX_FEATURE_UNAVAILABLE that indicate a feature is not
    supported are deprecated and are now replaced by the new equivalent
    platform error.
  * All module specific generic hardware acceleration errors following the
    form MBEDTLS_ERR_XXX_HW_ACCEL_FAILED that are deprecated and are replaced
    by the equivalent plaform error.
  * Deprecate the function mbedtls_mpi_is_prime() in favor of
    mbedtls_mpi_is_prime_ext() which allows specifying the number of
    Miller-Rabin rounds.
  Bugfix
  * Fix wrong order of freeing in programs/ssl/ssl_server2 example
    application leading to a memory leak in case both
    MBEDTLS_MEMORY_BUFFER_ALLOC_C and MBEDTLS_MEMORY_BACKTRACE are set.
    Fixes #2069.
  * Fix a bug in the update function for SSL ticket keys which previously
    invalidated keys of a lifetime of less than a 1s. Fixes #1968.
  * Fix failure in hmac_drbg in the benchmark sample application, when
    MBEDTLS_THREADING_C is defined. Found by TrinityTonic, #1095
  * Fix a bug in the record decryption routine ssl_decrypt_buf()
    which lead to accepting properly authenticated but improperly
    padded records in case of CBC ciphersuites using Encrypt-then-MAC.
  * Fix memory leak and freeing without initialization in the example
    program programs/x509/cert_write. Fixes #1422.
  * Ignore IV in mbedtls_cipher_set_iv() when the cipher mode is
    MBEDTLS_MODE_ECB. Found by ezdevelop. Fixes #1091.
  * Zeroize memory used for buffering or reassembling handshake messages
    after use.
  * Use `mbedtls_platform_zeroize()` instead of `memset()` for zeroization
    of sensitive data in the example programs aescrypt2 and crypt_and_hash.
  * Change the default string format used for various X.509 DN attributes to
    UTF8String. Previously, the use of the PrintableString format led to
    wildcards and non-ASCII characters being unusable in some DN attributes.
    Reported by raprepo in #1860 and by kevinpt in #468. Fix contributed by
    Thomas-Dee.
  * Fix compilation failure for configurations which use compile time
    replacements of standard calloc/free functions through the macros
    MBEDTLS_PLATFORM_CALLOC_MACRO and MBEDTLS_PLATFORM_FREE_MACRO.
    Reported by ole-de and ddhome2006. Fixes #882, #1642 and #1706.
  Changes
  * Removed support for Yotta as a build tool.
  * Add tests for session resumption in DTLS.
  * Close a test gap in (D)TLS between the client side and the server side:
    test the handling of large packets and small packets on the client side
    in the same way as on the server side.
  * Change the dtls_client and dtls_server samples to work by default over
    IPv6 and optionally by a build option over IPv4.
  * Change the use of Windows threading to use Microsoft Visual C++ runtime
    calls, rather than Win32 API calls directly. This is necessary to avoid
    conflict with C runtime usage. Found and fixed by irwir.
  * Remember the string format of X.509 DN attributes when replicating
    X.509 DNs. Previously, DN attributes were always written in their default
    string format (mostly PrintableString), which could lead to CRTs being
    created which used PrintableStrings in the issuer field even though the
    signing CA used UTF8Strings in its subject field; while X.509 compliant,
    such CRTs were rejected in some applications, e.g. some versions of
    Firefox, curl and GnuTLS. Reported in #1033 by Moschn. Fix contributed by
    Thomas-Dee.
  * Improve documentation of mbedtls_ssl_get_verify_result().
    Fixes #517 reported by github-monoculture.
  * Add MBEDTLS_MPI_GEN_PRIME_FLAG_LOW_ERR flag to mbedtls_mpi_gen_prime() and
    use it to reduce error probability in RSA key generation to levels mandated
    by FIPS-186-4.
- Version 2.13.1
  API Changes
  * Extend the platform module with an abstraction mbedtls_platform_gmtime_r()
    whose implementation should behave as a thread-safe version of gmtime().
    This allows users to configure such an implementation at compile time when
    the target system cannot be deduced automatically, by setting the option
    MBEDTLS_PLATFORM_GMTIME_R_ALT. At this stage Mbed TLS is only able to
    automatically select implementations for Windows and POSIX C libraries.
  Bugfix
  * Fix build failures on platforms where only gmtime() is available but
    neither gmtime_r() nor gmtime_s() are present. Fixes #1907.
- Version 2.13.0
  Security
  * Fix an issue in the X.509 module which could lead to a buffer overread
    during certificate extensions parsing. In case of receiving malformed
    input (extensions length field equal to 0), an illegal read of one byte
    beyond the input buffer is made. Found and analyzed by Nathan Crandall.
  Features
  * Add support for fragmentation of outgoing DTLS handshake messages. This
    is controlled by the maximum fragment length as set locally or negotiated
    with the peer, as well as by a new per-connection MTU option, set using
    mbedtls_ssl_set_mtu().
  * Add support for auto-adjustment of MTU to a safe value during the
    handshake when flights do not get through (RFC 6347, section 4.1.1.1,
    last paragraph).
  * Add support for packing multiple records within a single datagram,
    enabled by default.
  * Add support for buffering out-of-order handshake messages in DTLS.
    The maximum amount of RAM used for this can be controlled by the
    compile-time constant MBEDTLS_SSL_DTLS_MAX_BUFFERING defined
    in mbedtls/config.h.
  API Changes
  * Add function mbedtls_ssl_set_datagram_packing() to configure
    the use of datagram packing (enabled by default).
  Bugfix
  * Fix a potential memory leak in mbedtls_ssl_setup() function. An allocation
    failure in the function could lead to other buffers being leaked.
  * Fixes an issue with MBEDTLS_CHACHAPOLY_C which would not compile if
    MBEDTLS_ARC4_C and MBEDTLS_CIPHER_NULL_CIPHER weren't also defined. #1890
  * Fix a memory leak in ecp_mul_comb() if ecp_precompute_comb() fails.
    Fix contributed by Espressif Systems.
  * Add ecc extensions only if an ecc based ciphersuite is used.
    This improves compliance to RFC 4492, and as a result, solves
    interoperability issues with BouncyCastle. Raised by milenamil in #1157.
  * Replace printf with mbedtls_printf in the ARIA module. Found by
    TrinityTonic in #1908.
  * Fix potential use-after-free in mbedtls_ssl_get_max_frag_len()
    and mbedtls_ssl_get_record_expansion() after a session reset. Fixes #1941.
  * Fix a bug that caused SSL/TLS clients to incorrectly abort the handshake
    with TLS versions 1.1 and earlier when the server requested authentication
    without providing a list of CAs. This was due to an overly strict bounds
    check in parsing the CertificateRequest message,
    introduced in Mbed TLS 2.12.0. Fixes #1954.
  * Fix a miscalculation of the maximum record expansion in
    mbedtls_ssl_get_record_expansion() in case of ChachaPoly ciphersuites,
    or CBC ciphersuites in (D)TLS versions 1.1 or higher. Fixes #1913, #1914.
  * Fix undefined shifts with negative values in certificates parsing
    (found by Catena cyber using oss-fuzz)
  * Fix memory leak and free without initialization in pk_encrypt
    and pk_decrypt example programs. Reported by Brace Stout. Fixes #1128.
  * Remove redundant else statement. Raised by irwir. Fixes #1776.
  Changes
  * Copy headers preserving timestamps when doing a "make install".
    Contributed by xueruini.
  * Allow the forward declaration of public structs. Contributed by Dawid
    Drozd. Fixes #1215 raised by randombit.
  * Improve compatibility with some alternative CCM implementations by using
    CCM test vectors from RAM.
  * Add support for buffering of out-of-order handshake messages.
  * Add warnings to the documentation of the HKDF module to reduce the risk
    of misusing the mbedtls_hkdf_extract() and mbedtls_hkdf_expand()
    functions. Fixes #1775. Reported by Brian J. Murray.</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1544529601">- Library package version bumped to libmbedtls12</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1546862400">- Update to version 2.16.0:
  Features
  * Add a new config.h option of MBEDTLS_CHECK_PARAMS that enables validation of parameters in the API. This allows detection of obvious misuses of the API, such as passing NULL pointers. The API of existing functions hasn't changed, but requirements on parameters have been made more explicit in the documentation. See the corresponding API documentation for each function to see for which parameter values it is defined. This feature is disabled by default. See its API documentation in config.h for additional steps you have to take when enabling it.
  API Changes
  * The following functions in the random generator modules have been deprecated and replaced as shown below. The new functions change the return type from void to int to allow returning error codes when using MBEDTLS_&lt;MODULE&gt;_ALT for the underlying AES or message digest primitive. Fixes #1798. mbedtls_ctr_drbg_update() -&gt; mbedtls_ctr_drbg_update_ret() mbedtls_hmac_drbg_update() -&gt; mbedtls_hmac_drbg_update_ret()
  * Extend ECDH interface to enable alternative implementations.
  * Deprecate error codes of the form MBEDTLS_ERR_xxx_INVALID_KEY_LENGTH for ARIA, CAMELLIA and Blowfish. These error codes will be replaced by the more generic per-module error codes MBEDTLS_ERR_xxx_BAD_INPUT_DATA.
  * Additional parameter validation checks have been added for the following modules - AES, ARIA, Blowfish, CAMELLIA, CCM, GCM, DHM, ECP, ECDSA, ECDH, ECJPAKE, SHA, Chacha20 and Poly1305, cipher, pk, RSA, and MPI. Where modules have had parameter validation added, existing parameter checks may have changed. Some modules, such as Chacha20 had existing parameter validation whereas other modules had little. This has now been changed so that the same level of validation is present in all modules, and that it is now optional with the MBEDTLS_CHECK_PARAMS flag which by default is off. That means that checks which were previously present by default will no longer be.
  New deprecations
  * Deprecate mbedtls_ctr_drbg_update() and mbedtls_hmac_drbg_update() in favor of functions that can return an error code.
  Bugfix
  * Fix for Clang, which was reporting a warning for the bignum.c inline assembly for AMD64 targets creating string literals greater than those permitted by the ISO C99 standard. Found by Aaron Jones. Fixes #482.
  * Fix runtime error in mbedtls_platform_entropy_poll() when run through qemu user emulation. Reported and fix suggested by randombit. Fixes #1212.
  * Fix an unsafe bounds check when restoring an SSL session from a ticket. This could lead to a buffer overflow, but only in case ticket authentication was broken. Reported and fix suggested by Guido Vranken in #659.
  * Add explicit integer to enumeration type casts to example program programs/pkey/gen_key which previously led to compilation failure on some toolchains. Reported by phoenixmcallister. Fixes #2170.
  * Clarify documentation of mbedtls_ssl_set_own_cert() regarding the absence of check for certificate/key matching. Reported by Attila Molnar, #507.
  * Fix double initialization of ECC hardware that made some accelerators hang.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1567512000">- Update to version 2.16.2:
  * Security improvements and bugfixes
- Use ninja to for build</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1573646400">- Update to version 2.16.3:
  * Security improvements and bugfixes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1585828800">- Update to version 2.16.5:
  * Security improvements and bugfixes</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597665600">- update to 2.23.0:
  a lot of changes see https://github.com/ARMmbed/mbedtls/releases/tag/v2.23.0
  * Fix a side channel vulnerability in modular exponentiation that could reveal an RSA private key used in a secure enclave. Noticed by Sangho Lee, Ming-Wei Shih, Prasun Gera, Taesoo Kim and Hyesoon Kim (Georgia Institute of Technology); and Marcus Peinado (Microsoft Research). Reported by Raoul Strackx (Fortanix) in #3394.
  * Fix side channel in mbedtls_ecp_check_pub_priv() and mbedtls_pk_parse_key() / mbedtls_pk_parse_keyfile() (when loading a private key that didn't include the uncompressed public key), as well as mbedtls_ecp_mul() / mbedtls_ecp_mul_restartable() when called with a NULL f_rng argument. An attacker with access to precise enough timing and memory access information (typically an untrusted operating system attacking a secure enclave) could fully recover the ECC private key. Found and reported by Alejandro Cabrera Aldaya and Billy Brumley.
  * Fix issue in Lucky 13 counter-measure that could make it ineffective when hardware accelerators were used (using one of the MBEDTLS_SHAxxx_ALT macros). This would cause the original Lucky 13 attack to be possible in those configurations, allowing an active network attacker to recover plaintext after repeated timing measurements under some conditions. Reported and fix suggested by Luc Perneel in #3246.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1598875200">- Do not run testsuite in parallel - its not reliable</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1599480000">- Add workaround for failing builds (Python not found) due to
  https://gitlab.kitware.com/cmake/cmake/-/issues/21168</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1599652800">- update to 2.24.0:
  * see https://github.com/ARMmbed/mbedtls/releases/tag/v2.24.0
  * Fix a vulnerability in the verification of X.509 certificates when matching
  the expected common name (the cn argument of mbedtls_x509_crt_verify())
  with the actual certificate name: when the subjecAltName extension is
  present, the expected name was compared to any name in that extension
  regardless of its type. This means that an attacker could for example
  impersonate a 4-bytes or 16-byte domain by getting a certificate for the
  corresponding IPv4 or IPv6 (this would require the attacker to control that
  IP address, though). Similar attacks using other subjectAltName name types
  might be possible.
  * When checking X.509 CRLs, a certificate was only considered as revoked if
  its revocationDate was in the past according to the local clock if
  available. In particular, on builds without MBEDTLS_HAVE_TIME_DATE,
  certificates were never considered as revoked. On builds with
  MBEDTLS_HAVE_TIME_DATE, an attacker able to control the local clock (for
  example, an untrusted OS attacking a secure enclave) could prevent
  revocation of certificates via CRLs. Fixed by no longer checking the
  revocationDate field, in accordance with RFC 5280. Reported by yuemonangong
  in #3340. Reported independently and fixed by Raoul Strackx and Jethro
  * In (D)TLS record decryption, when using a CBC ciphersuites without the
  Encrypt-then-Mac extension, use constant code flow memory access patterns
  to extract and check the MAC. This is an improvement to the existing
  countermeasure against Lucky 13 attacks. The previous countermeasure was
  effective against network-based attackers, but less so against local
  attackers. The new countermeasure defends against local attackers, even if
  they have access to fine-grained measurements. In particular, this fixes a
  local Lucky 13 cache attack found and reported by Tuba Yavuz, Farhaan
  Fowze, Ken (Yihan) Bai, Grant Hernandez, and Kevin Butler (University of
  Florida) and Dave Tian (Purdue University).
  * Fix side channel in RSA private key operations and static (finite-field)
  Diffie-Hellman. An adversary with precise enough timing and memory access
  information (typically an untrusted operating system attacking a secure
  enclave) could bypass an existing counter-measure (base blinding) and
  potentially fully recover the private key.
  * Fix a 1-byte buffer overread in mbedtls_x509_crl_parse_der(). Credit to
  OSS-Fuzz for detecting the problem and to Philippe Antoine for pinpointing
  the problematic code.
  * Zeroising of plaintext buffers in mbedtls_ssl_read() to erase unused
  application data from memory.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1608638400">- update to 2.25.0:
  * This release of Mbed TLS provides bug fixes, minor enhancements and new
  features. This release includes fixes for security issues.
  * see https://github.com/ARMmbed/mbedtls/releases/tag/v2.25.0
  * The functions mbedtls_cipher_auth_encrypt() and
  mbedtls_cipher_auth_decrypt() would write past the minimum documented size
  of the output buffer when used with NIST_KW. As a result, code using those
  functions as documented with NIST_KW could have a buffer overwrite of up to
  15 bytes, with consequences ranging up to arbitrary code execution
  depending on the location of the output buffer.
  * Limit the size of calculations performed by mbedtls_mpi_exp_mod to
  MBEDTLS_MPI_MAX_SIZE to prevent a potential denial of service when generating
  Diffie-Hellman key pairs. Credit to OSS-Fuzz.
  * A failure of the random generator was ignored in mbedtls_mpi_fill_random(),
  which is how most uses of randomization in asymmetric cryptography (including
  key generation, intermediate value randomization and blinding) are implemented.
  This could cause failures or the silent use of non-random values. A random
  generator can fail if it needs reseeding and cannot not obtain entropy, or due
  to an internal failure (which, for Mbed TLS's own CTR_DRBG or HMAC_DRBG, can
  only happen due to a misconfiguration).
  * Fix a compliance issue whereby we were not checking the tag on the algorithm
  parameters (only the size) when comparing the signature in the description part
  of the cert to the real signature. This meant that a NULL algorithm parameters
  entry would look identical to an array of REAL (size zero) to the library and
  thus the certificate would be considered valid. However, if the parameters do
  not match in any way then the certificate should be considered invalid, and
  indeed OpenSSL marks these certs as invalid when mbedtls did not. Many thanks
  to guidovranken who found this issue via differential fuzzing and reported it
  in #3629.
  * Zeroising of local buffers and variables which are used for calculations in
  mbedtls_pkcs5_pbkdf2_hmac(), mbedtls_internal_sha*_process(),
  mbedtls_internal_md*_process() and mbedtls_internal_ripemd160_process()
  functions to erase sensitive data from memory. Reported by Johan Malmgren and
  Johan Uppman Bruce from Sectra.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1611057600">- Fix build for Leap targets
- Use upstream tarball name</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1616414400">- Update to 2.26.0: [bsc#1189589, CVE-2021-24119]
  * * This release of Mbed TLS provides bug fixes, minor enhancements and new
  features. This release includes fixes for security issues.
  * see https://github.com/ARMmbed/mbedtls/releases/tag/v2.26.0
- Fix build with patch from https://github.com/ARMmbed/mbedtls/pull/4237
  mbedtls-4237.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1618488000">-  Workaround for building with gcc-11 boo#1181876</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1626782400">- Update to 2.27.0:
  API changes:
  * Update AEAD output size macros to bring them in line with the PSA Crypto
    API version 1.0 spec. This version of the spec parameterizes them on the
    key type used, as well as the key bit-size in the case of
    PSA_AEAD_TAG_LENGTH.
    The old versions of these macros were renamed and deprecated as follows:
  - PSA_AEAD_TAG_LENGTH          -&gt; PSA_AEAD_TAG_LENGTH_1_ARG
  - PSA_AEAD_ENCRYPT_OUTPUT_SIZE -&gt; PSA_AEAD_ENCRYPT_OUTPUT_SIZE_2_ARG
  - PSA_AEAD_DECRYPT_OUTPUT_SIZE -&gt; PSA_AEAD_DECRYPT_OUTPUT_SIZE_2_ARG
  - PSA_AEAD_UPDATE_OUTPUT_SIZE  -&gt; PSA_AEAD_UPDATE_OUTPUT_SIZE_2_ARG
  - PSA_AEAD_FINISH_OUTPUT_SIZE  -&gt; PSA_AEAD_FINISH_OUTPUT_SIZE_1_ARG
  - PSA_AEAD_VERIFY_OUTPUT_SIZE  -&gt; PSA_AEAD_VERIFY_OUTPUT_SIZE_1_ARG
  * Implement one-shot cipher functions, psa_cipher_encrypt and
    psa_cipher_decrypt, according to the PSA Crypto API 1.0.0
    specification.
  Features:
  * Add mbedtls_rsa_rsassa_pss_sign_ext() function allowing to generate a
    signature with a specific salt length. This function allows to validate
    test cases provided in the NIST's CAVP test suite.
  * Added support for built-in driver keys through the PSA opaque crypto
    driver interface. Refer to the documentation of
    MBEDTLS_PSA_CRYPTO_BUILTIN_KEYS for more information.
  * Implement psa_sign_message() and psa_verify_message().
  * The new function mbedtls_mpi_random() generates a random value in a
    given range uniformly.
  * Implement psa_mac_compute() and psa_mac_verify() as defined in the
    PSA Cryptograpy API 1.0.0 specification.
  * MBEDTLS_ECP_MAX_BITS is now determined automatically from the configured
    curves and no longer needs to be configured explicitly to save RAM.
  Security
  * Fix a bias in the generation of finite-field Diffie-Hellman-Merkle (DHM)
    private keys and of blinding values for DHM and elliptic curves (ECP)
    computations.
  * Fix a potential side channel vulnerability in ECDSA ephemeral key generation.
    An adversary who is capable of very precise timing measurements could
    learn partial information about the leading bits of the nonce used for the
    signature, allowing the recovery of the private key after observing a
    large number of signature operations. This completes a partial fix in
    Mbed TLS 2.20.0.
  * It was possible to configure MBEDTLS_ECP_MAX_BITS to a value that is
    too small, leading to buffer overflows in ECC operations. Fail the build
    in such a case.
  * An adversary with access to precise enough information about memory
    accesses (typically, an untrusted operating system attacking a secure
    enclave) could recover an RSA private key after observing the victim
    performing a single private-key operation.
  * An adversary with access to precise enough timing information (typically, a
    co-located process) could recover a Curve25519 or Curve448 static ECDH key
    after inputting a chosen public key and observing the victim performing the
    corresponding private-key operation.
  Bugfix
  * Add printf function attributes to mbedtls_debug_print_msg to ensure we
    get printf format specifier warnings.
  * Fix premature fopen() call in mbedtls_entropy_write_seed_file which may
    lead to seed file corruption in the case where the path to the seed file is
    equal to MBEDTLS_PLATFORM_STD_NV_SEED_FILE.
  * PSA functions other than psa_open_key now return PSA_ERROR_INVALID_HANDLE
    rather than PSA_ERROR_DOES_NOT_EXIST for an invalid handle, bringing them
    in line with version 1.0.0 of the specification.
  * PSA functions creating a key now return PSA_ERROR_INVALID_ARGUMENT rather
    than PSA_ERROR_INVALID_HANDLE when the identifier specified for the key
    to create is not valid, bringing them in line with version 1.0.0 of the
    specification.
  * Fix some cases in the bignum module where the library constructed an
    unintended representation of the value 0 which was not processed
    correctly by some bignum operations. This could happen when
    mbedtls_mpi_read_string() was called on "-0", or when
    mbedtls_mpi_mul_mpi() and mbedtls_mpi_mul_int() was called with one of
    the arguments being negative and the other being 0.
  * Fix a bug in ECDSA that would cause it to fail when the hash is all-bits
    zero.
  * Fix a compilation error when MBEDTLS_ECP_RANDOMIZE_MXZ_ALT is
    defined.
  * Fix an incorrect error code when parsing a PKCS#8 private key.
  * In a TLS client, enforce the Diffie-Hellman minimum parameter size
    set with mbedtls_ssl_conf_dhm_min_bitlen() precisely. Before, the
    minimum size was rounded down to the nearest multiple of 8.
  * In library/net_sockets.c, _POSIX_C_SOURCE and _XOPEN_SOURCE are
    defined to specific values.  If the code is used in a context
    where these are already defined, this can result in a compilation
    error.  Instead, assume that if they are defined, the values will
    be adequate to build Mbed TLS.
  * The cipher suite TLS-RSA-WITH-CAMELLIA-256-GCM-SHA384 was not available
    when SHA-1 was disabled and was offered when SHA-1 was enabled but SHA-384
    was disabled. Fix the dependency.
  * Do not offer SHA384 cipher suites when SHA-384 is disabled.
  * With MBEDTLS_PSA_CRYPTO_C disabled, some functions were getting built
    nonetheless, resulting in undefined reference errors when building a
    shared library.
  * Fix test suite code on platforms where int32_t is not int, such as
    Arm Cortex-M.
  * Fix some issues affecting MBEDTLS_ARIA_ALT implementations: a misplaced
    directive in a header and a missing initialization in the self-test.
  * Fix a missing initialization in the Camellia self-test, affecting
    MBEDTLS_CAMELLIA_ALT implementations.
  * Restore the ability to configure PSA via Mbed TLS options to support RSA
    key pair operations but exclude RSA key generation. When MBEDTLS_GENPRIME
    is not defined PSA will no longer attempt to use mbedtls_rsa_gen_key().
  * Fix a regression introduced in 2.24.0 which broke (D)TLS CBC ciphersuites
    (when the encrypt-then-MAC extension is not in use) with some ALT
    implementations of the underlying hash (SHA-1, SHA-256, SHA-384), causing
    the affected side to wrongly reject valid messages.
  * Remove outdated check-config.h check that prevented implementing the
    timing module on Mbed OS.
  * Fix PSA_ALG_TLS12_PRF and PSA_ALG_TLS12_PSK_TO_MS being too permissive
    about missing inputs.
  * Fix a resource leak in a test suite with an alternative AES
    implementation.
  * Fix a crash in mbedtls_mpi_debug_mpi on a bignum having 0 limbs. This
    could notably be triggered by setting the TLS debug level to 3 or above
    and using a Montgomery curve for the key exchange.
  * psa_verify_hash() was relying on implementation-specific behavior of
    mbedtls_rsa_rsassa_pss_verify() and was causing failures in some _ALT
    implementations. This reliance is now removed.
  * Disallow inputs of length different from the corresponding hash when
    signing or verifying with PSA_ALG_RSA_PSS (The PSA Crypto API mandates
    that PSA_ALG_RSA_PSS uses the same hash throughout the algorithm.)
  * Fix a null pointer dereference when mbedtls_mpi_exp_mod() was called with
    A=0 represented with 0 limbs. Up to and including Mbed TLS 2.26, this bug
    could not be triggered by code that constructed A with one of the
    mbedtls_mpi_read_xxx functions (including in particular TLS code) since
    those always built an mpi object with at least one limb.
  * Fix mbedtls_mpi_gcd(G,A,B) when the value of B is zero. This had no
    effect on Mbed TLS's internal use of mbedtls_mpi_gcd(), but may affect
    applications that call mbedtls_mpi_gcd() directly.
  * The PSA API no longer allows the creation or destruction of keys with a
    read-only lifetime. The persistence level PSA_KEY_PERSISTENCE_READ_ONLY
    can now only be used as intended, for keys that cannot be modified through
    normal use of the API.
  * When MBEDTLS_PSA_CRYPTO_SPM is enabled, crypto_spe.h was not included
    in all the right places. Include it from crypto_platform.h, which is
    the natural place.
  * mbedtls_pk_sign() and mbedtls_pk_verify() and their extended and
    restartable variants now always honor the specified hash length if
    nonzero. Before, for RSA, hash_len was ignored in favor of the length of
    the specified hash algorithm.
  * Fix which alert is sent in some cases to conform to the
    applicable RFC: on an invalid Finished message value, an
    invalid max_fragment_length extension, or an
    unsupported extension used by the server.
  * Correct (change from 12 to 13 bytes) the value of the macro describing the
    maximum nonce length returned by psa_aead_generate_nonce().
  Changes
  * Add extra printf compiler warning flags to builds.
  * Fix memsan build false positive in x509_crt.c with Clang 11
  * Fix the setting of the read timeout in the DTLS sample programs.
  * Remove the AES sample application programs/aes/aescrypt2 which shows
    bad cryptographic practice.
  * Alternative implementations of CMAC may now opt to not support 3DES as a
    CMAC block cipher, and still pass the CMAC self test.
  * Remove configs/config-psa-crypto.h, which was identical to the default
    configuration except for having some extra cryptographic mechanisms
    enabled and for unintended differences. This configuration was primarily
    intended to demonstrate the PSA API, and lost most of its usefulness when
    MBEDTLS_PSA_CRYPTO_C became enabled by default.
  * When building the test suites with GNU make, invoke python3 or python, not
    python2, which is no longer supported upstream.
  * When using session cache based session resumption on the server,
    double-check that custom session cache implementations return
    sessions which are consistent with the negotiated ciphersuite
    and compression method.
  * Fix build failure on MinGW toolchain when __USE_MING_ANSI_STDIO is on.
    When that flag is on, standard GNU C printf format specifiers
    should be used.
  * Reduce the default value of MBEDTLS_ECP_WINDOW_SIZE. This reduces RAM usage
    during ECC operations at a negligible performance cost.
  * mbedtls_mpi_read_binary(), mbedtls_mpi_read_binary_le() and
    mbedtls_mpi_read_string() now construct an mbedtls_mpi object with 0 limbs
    when their input has length 0. Note that this is an implementation detail
    and can change at any time, so this change should be transparent, but it
    may result in mbedtls_mpi_write_binary() or mbedtls_mpi_write_string()
    now writing an empty string where it previously wrote one or more
    zero digits when operating from values constructed with an mpi_read
    function and some mpi operations.
  * Implicitly add PSA_KEY_USAGE_SIGN_MESSAGE key usage policy flag when
    PSA_KEY_USAGE_SIGN_HASH flag is set and PSA_KEY_USAGE_VERIFY_MESSAGE flag
    when PSA_KEY_USAGE_VERIFY_HASH flag is set. This usage flag extension
    is also applied when loading a key from storage.
  * Remove mbedtls-4237.patch upstream
  * Library soname bump to libmbedcrypto7</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1642075200">- Update to 2.28.0: (bsc#1193979, CVE-2021-45450)
  API changes
  * Some fields of mbedtls_ssl_session and mbedtls_ssl_config are in a
  different order. This only affects applications that define such
  structures directly or serialize them.
  Requirement changes
  * Sign-magnitude and one's complement representations for signed integers are
  not supported. Two's complement is the only supported representation.
  Removals
  * Remove config option MBEDTLS_TLS_DEFAULT_ALLOW_SHA1_IN_CERTIFICATES,
  which allowed SHA-1 in the default TLS configuration for certificate
  signing. It was intended to facilitate the transition in environments
  with SHA-1 certificates. SHA-1 is considered a weak message digest and
  its use constitutes a security risk.
  * Remove the partial support for running unit tests via Greentea on Mbed OS,
  which had been unmaintained since 2018.
  Features
  * The identifier of the CID TLS extension can be configured by defining
  MBEDTLS_TLS_EXT_CID at compile time.
  * Warn if errors from certain functions are ignored. This is currently
  supported on GCC-like compilers and on MSVC and can be configured through
  the macro MBEDTLS_CHECK_RETURN. The warnings are always enabled
  (where supported) for critical functions where ignoring the return
  value is almost always a bug. Enable the new configuration option
  MBEDTLS_CHECK_RETURN_WARNING to get warnings for other functions. This
  is currently implemented in the AES, DES and md modules, and will be
  extended to other modules in the future.
  * Add missing PSA macros declared by PSA Crypto API 1.0.0:
  PSA_ALG_IS_SIGN_HASH, PSA_ALG_NONE, PSA_HASH_BLOCK_LENGTH, PSA_KEY_ID_NULL.
  * Add new API mbedtls_ct_memcmp for constant time buffer comparison.
  * Add PSA API definition for ARIA.
  Security
  * Zeroize several intermediate variables used to calculate the expected
  value when verifying a MAC or AEAD tag. This hardens the library in
  case the value leaks through a memory disclosure vulnerability. For
  example, a memory disclosure vulnerability could have allowed a
  man-in-the-middle to inject fake ciphertext into a DTLS connection.
  * In psa_cipher_generate_iv() and psa_cipher_encrypt(), do not read back
  from the output buffer. This fixes a potential policy bypass or decryption
  oracle vulnerability if the output buffer is in memory that is shared with
  an untrusted application.
  * Fix a double-free that happened after mbedtls_ssl_set_session() or
  mbedtls_ssl_get_session() failed with MBEDTLS_ERR_SSL_ALLOC_FAILED
  (out of memory). After that, calling mbedtls_ssl_session_free()
  and mbedtls_ssl_free() would cause an internal session buffer to
  be free()'d twice.
  Bugfix
  * Stop using reserved identifiers as local variables. Fixes #4630.
  * The GNU makefiles invoke python3 in preference to python except on Windows.
  * The check was accidentally not performed when cross-compiling for Windows
  on Linux. Fix this. Fixes #4774.
  * Prevent divide by zero if either of PSA_CIPHER_ENCRYPT_OUTPUT_SIZE() or
  PSA_CIPHER_UPDATE_OUTPUT_SIZE() were called using an asymmetric key type.
  * Fix a parameter set but unused in psa_crypto_cipher.c. Fixes #4935.
  * Don't use the obsolete header path sys/fcntl.h in unit tests.
  These header files cause compilation errors in musl.
  Fixes #4969.
  * Fix missing constraints on x86_64 and aarch64 assembly code
  for bignum multiplication that broke some bignum operations with
  (at least) Clang 12.
  Fixes #4116, #4786, #4917, #4962.
  * Fix mbedtls_cipher_crypt: AES-ECB when MBEDTLS_USE_PSA_CRYPTO is enabled.
  * Failures of alternative implementations of AES or DES single-block
  functions enabled with MBEDTLS_AES_ENCRYPT_ALT, MBEDTLS_AES_DECRYPT_ALT,
  MBEDTLS_DES_CRYPT_ECB_ALT or MBEDTLS_DES3_CRYPT_ECB_ALT were ignored.
  This does not concern the implementation provided with Mbed TLS,
  where this function cannot fail, or full-module replacements with
  MBEDTLS_AES_ALT or MBEDTLS_DES_ALT. Reported by Armelle Duboc in #1092.
  * Some failures of HMAC operations were ignored. These failures could only
  happen with an alternative implementation of the underlying hash module.
  * Fix the error returned by psa_generate_key() for a public key. Fixes #4551.
  * Fix the build of sample programs when neither MBEDTLS_ERROR_C nor
  MBEDTLS_ERROR_STRERROR_DUMMY is enabled.
  * Fix PSA_ALG_RSA_PSS verification accepting an arbitrary salt length.
  This algorithm now accepts only the same salt length for verification
  that it produces when signing, as documented. Use the new algorithm
  PSA_ALG_RSA_PSS_ANY_SALT to accept any salt length. Fixes #4946.
  * The existing predicate macro name PSA_ALG_IS_HASH_AND_SIGN is now reserved
  for algorithm values that fully encode the hashing step, as per the PSA
  Crypto API specification. This excludes PSA_ALG_RSA_PKCS1V15_SIGN_RAW and
  PSA_ALG_ECDSA_ANY. The new predicate macro PSA_ALG_IS_SIGN_HASH covers
  all algorithms that can be used with psa_{sign,verify}_hash(), including
  these two.
  * Fix issue in Makefile on Linux with SHARED=1, that caused shared libraries
  not to list other shared libraries they need.
  * Fix a bug in mbedtls_gcm_starts() when the bit length of the iv
  exceeds 2^32. Fixes #4884.
  * Fix an uninitialized variable warning in test_suite_ssl.function with GCC
  version 11.
  * Fix the build when no SHA2 module is included. Fixes #4930.
  * Fix the build when only the bignum module is included. Fixes #4929.
  * Fix a potential invalid pointer dereference and infinite loop bugs in
  pkcs12 functions when the password is empty. Fix the documentation to
  better describe the inputs to these functions and their possible values.
  Fixes #5136.
  * The key usage flags PSA_KEY_USAGE_SIGN_MESSAGE now allows the MAC
  operations psa_mac_compute() and psa_mac_sign_setup().
  * The key usage flags PSA_KEY_USAGE_VERIFY_MESSAGE now allows the MAC
  operations psa_mac_verify() and psa_mac_verify_setup().
  Changes
  * Set config option MBEDTLS_TLS_DEFAULT_ALLOW_SHA1_IN_KEY_EXCHANGE to be
  disabled by default.
  * Improve the performance of base64 constant-flow code. The result is still
  slower than the original non-constant-flow implementation, but much faster
  than the previous constant-flow implementation. Fixes #4814.
  * Indicate in the error returned if the nonce length used with
  ChaCha20-Poly1305 is invalid, and not just unsupported.
  * The mbedcrypto library includes a new source code module constant_time.c,
  containing various functions meant to resist timing side channel attacks.
  * This module does not have a separate configuration option, and functions
  from this module will be included in the build as required. Currently
  most of the interface of this module is private and may change at any
  time.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1642420800">- Fix baselib.conf</changelog>
  <changelog author="Alexander Bergmann &lt;abergmann@suse.com&gt;" date="1671624000">- Fix potential heap buffer overread and overwrite in DTLS if
  MBEDTLS_SSL_DTLS_CONNECTION_ID is enabled and
  MBEDTLS_SSL_CID_IN_LEN_MAX &gt; 2 * MBEDTLS_SSL_CID_OUT_LEN_MAX.
  (bsc#1206576, CVE-2022-46393).
  Add: mbedtls-CVE-2022-46393.patch</changelog>
</package>
<package pkgid="f6985123997dadef74e11f3640d7770a3f19736406671a59dddcaf68879e9be9" name="libmbedcrypto7-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="2.28.0" rel="bp154.2.3.1"/>
  <changelog author="mpluskal@suse.com" date="1531137600">- Update to version 2.11.0:
  * Features
    + Added support for the XTS block cipher mode with AES (AES-XTS). Contributed by Aorimn in pull request #414.
    + Implemented the HMAC-based extract-and-expand key derivation function (HKDF) per RFC 5869. Contributed by Thomas Fossati.
    + For TLS servers, added support for offloading private key operations to an external cryptoprocessor. Private key operations can be asynchronous to allow non-blocking operation of the TLS server stack.
    + Added support for ARIA cipher (RFC 5794) and associated TLS ciphersuites (RFC 6209). ARIA is disabled by default. To enable, see MBEDTLS_ARIA_C in config.h.
    + Added support for the CCM* block cipher mode as defined in IEEE Std 802.15.4.
    + Added an additional block mode, OFB (Output Feedback) per NIST SP 800-38a, to the AES module and cipher abstraction module.
  * API Changes
    + Mbed TLS 2.11.0 maintains source code compatibility with the last minor version, Mbed TLS 2.9.0, but extends the interface with additional capabilities. Mbed TLS 2.11.0 modifies the ABI and increases the SOVERSION.
  * Bugfix
    + Fixed the cert_write example to handle certificates signed with elliptic curves as well as RSA. Fixes #777 found by dbedev.
    + Fixed the redefinition of _WIN32_WINNT, to avoid overriding a definition used by user applications. Found and fixed by Fabio Alessandrelli.
    + Fixed compilation warnings with the IAR toolchain on 32-bit platforms. Reported by rahmanih in #683.
    + Fixed an issue with MicroBlaze support in bn_mul.h which was causing the build to fail. Found by zv-io. Fixes #1651.
    + Fixed braces in mbedtls_memory_buffer_alloc_status(). Found by sbranden in #552.
    + Added the macro MBEDTLS_X509_MAX_FILE_PATH_LEN that enables the user to configure the maximum length of a file path that can be buffered when calling mbedtls_x509_crt_parse_path(). Fixes #492.
    + Fixed redundant declaration of mbedtls_ssl_list_ciphersuites. Raised by TrinityTonic in #1359.
- Changes for version 2.9.0:
  + Security
    + Fixed an issue in the X.509 module which could lead to a buffer overread during certificate validation. Additionally, the issue could also lead to unnecessary callback checks being made or to some validation checks to be omitted. The overread could be triggered remotely, while the other issues would require a non DER-compliant certificate to be correctly signed by a trusted CA, or a trusted CA with a non DER-compliant certificate. Found by luocm. Fixes #825.
    + Fixed the buffer length assertion in the ssl_parse_certificate_request() function which could lead to an arbitrary overread of the message buffer. The overreads could be caused by receiving a malformed algorithms section which was too short. In builds with debug output, this overread data was output with the debug data.
    + Fixed a client-side bug in the validation of the server's ciphersuite choice which could potentially lead to the client accepting a ciphersuite it didn't offer or a ciphersuite that could not be used with the TLS or DTLS version chosen by the server. This could lead to corruption of internal data structures for some configurations.
  * Features
    + Added an option of MBEDTLS_AES_FEWER_TABLES, to dynamically compute smaller AES tables during runtime, thereby reducing the RAM/ROM footprint by ~6KiB. Suggested and contributed by jkivilin.
    + Added initial support for Curve448 (RFC 7748). So far only mbedtls_ecp_mul() and ECDH primitive functions (mbedtls_ecdh_gen_public(), mbedtls_ecdh_compute_shared()) are supported for now. Contributed by Nicholas Wilson.
  * API Changes
    + Mbed TLS 2.9.0 maintains source code and binary compatibility with the last minor version, Mbed TLS 2.8.0, but extends the interface with additional capabilities.
    + Extended the API with the function of mbedtls_net_poll() to allow user applications to wait for a network context to become ready before reading or writing.
    + Added the function mbedtls_ssl_check_pending() to the public API to allow a check for whether more more data is pending to be processed in the internal message buffers. This function is necessary to determine the underlying transport when event-driven IO is used.
  * Bugfix
    + Fixed a spurious uninitialized variable warning in cmac.c. Fix independently contributed by Brian J Murray and David Brown.
    + Added missing dependencies in test suites that led to build failures in configurations that omit certain hashes or public-key algorithms. Fixes #1040.
    + Fixed a C89 incompatibility issue in benchmark.c. Contributed by Brendan Shanks. Fixes #1353.
    + Added missing dependencies for MBEDTLS_HAVE_TIME_DATE and MBEDTLS_VERSION_FEATURES in some test suites. Contributed by Deomid Ryabkov. Fixes #1299, #1475.
    + Fixed the Makefile build process for building shared libraries on Mac OS X. Fixed by mnacamura.
    + Fixed parsing of PKCS#8 encoded Elliptic Curve keys. Previously Mbed TLS was unable to parse keys which had only the optional parameters field of the ECPrivateKey structure. Found by Jethro Beekman, fixed in #1379.
    + Added an optimisation to return the plaintext data more quickly on unpadded CBC decryption, as stated in the mbedtls_cipher_update() documentation. Contributed by Andy Leiserson.
    + Fixed the overriding and ignoring of return values when parsing and writing to a file in the pk_sign program. Found by kevlut in #1142.
    + Added restrictions to the usage of the error code MBEDTLS_ERR_SSL_WANT_READ to situations where data needs to be fetched from the underlying transport in order to make progress. Previously, this error code was also occasionally returned when unexpected messages were being discarded, ignoring that further messages could potentially already be pending to be processed in the internal buffers; these cases led to deadlocks when event-driven I/O was used. Found and reported by Hubert Mis in #772.
    + Fixed buffer length assertions in the ssl_parse_certificate_request() function which led to a potential one byte overread of the message buffer.
    + Fixed invalid buffer sizes being passed to zlib during record compression and decompression.
    + Raised the soversion of libmbedcrypto to match the soversion of the maintained 2.7 branch. The soversion was increased in Mbed TLS version 2.7.1 to reflect breaking changes in that release, but the increment was missed in 2.8.0 and later releases outside of the 2.7 branch.</changelog>
  <changelog author="mpluskal@suse.com" date="1535025600">- Update to version 2.12.0:
  * Security
    + Fixed a vulnerability in the TLS ciphersuites based on use of CBC and SHA-384 in DTLS/TLS 1.0 to 1.2, that allowed an active network attacker to partially recover the plaintext of messages under certains conditions by exploiting timing side-channels.
    + Fixed a vulnerability in TLS ciphersuites based on CBC, in DTLS/TLS 1.0 to 1.2, that allowed a local attacker, with the ability to execute code on the local machine as well as to manipulate network packets, to partially recover the plaintext of messages under certain conditions by using a cache attack targetting an internal MD/SHA buffer.
    + Added a counter-measure against a vulnerability in TLS ciphersuites based on CBC, in DTLS/TLS 1.0 to 1.2, that allowed a local attacker with the ability to execute code on the local machine as well as manipulate network packets, to partially recover the plaintext of messages certain conditions (see previous entry) by using a cache attack targeting the SSL input record buffer.
  * Features
    + Added new cryptographic primitives, the stream cipher Chacha20, one-time authenticator Poly1305 and AEAD construct Chacha20-Poly1305, as defined in RFC 7539. Contributed by Daniel King.
    + Added support for the CHACHA20-POLY1305 ciphersuites from RFC 7905.
    + Made the receive and transmit buffers independently configurable in size, for situations where the outgoing buffer can be fixed at a smaller size than the incoming buffer
    + Added support for the AES based key wrapping modes defined by NIST SP 800-38F algorithms KW and KWP and by RFC's 3394 and 5649.
    + Added platform support for the Haiku OS.
  * Bugfix
    + Fixed the key_app_writer example which was creating an invalid ASN.1 tag by writing an additional leading zero byte. Found by Aryeh R. #1257.
    + Fixed a C++ compilation error, caused by a variable named new. Found and fixed by Hirotaka Niisato. #1783.
    + Fixed the "no symbols" warning issued by ranlib when building on Mac OS X. Fix contributed by tabascoeye.
    + Clarified documentation for mbedtls_ssl_write() to include 0 as a valid return value. Found by @davidwu2000. #839.
    + Fixed a memory leak in mbedtls_x509_csr_parse(). Found and fixed by catenacyber, Philippe Antoine. #1623.
    + Added length checks to some TLS parsing functions. Found and fixed by Philippe Antoine from Catena cyber. #1663.
    + Remove unused headers included in x509.c. Found by Chris Hanson and fixed by Brendan Shanks. #992.
    + Fixed compilation error when MBEDTLS_ARC4_C is disabled and MBEDTLS_CIPHER_NULL_CIPHER is enabled. Found by TrinityTonic in #1719.
    + Fixed the inline assembly for the MPI multiply helper function for i386 and i386 with SSE2. Found by László Langó. #1550.
    + Fixed the namespacing in header files. Remove the mbedtls namespacing in the #include in the header files. #857.
    + Fixed a compiler warning of 'use before initialisation' in mbedtls_pk_parse_key(). Found by Martin Boye Petersen and fixed by Dawid Drozd.#1098.
    + Fixed decryption of zero length messages (which contain all padding) when a CBC based ciphersuite was used together with Encrypt-then-MAC.
    + Fixed the ssl_client2 example to send application data with 0-length content when the request_size argument is set to 0 as stated in the documentation. #1833.
    + Corrected the documentation for mbedtls_ssl_get_session(). This API has deep copy of the session, and the peer certificate is not lost. #926.
    + Fixed issues when building to the C99 standard, using -std=c99. Fixed by Nick Wilson.
  * Changes
    + Fails when receiving a TLS alert message with an invalid length, or invalid zero-length messages when using TLS 1.2. Contributed by Espressif Systems.
    + Changed the default behaviour of mbedtls_hkdf_extract() to return an error when calling with a NULL salt and non-zero salt length. Contributed by Brian J Murray
    + Change the shebang line in Perl scripts to look up perl in the PATH. Contributed by fbrosson.
    + Allow overriding the time on Windows via the platform-time abstraction. Fixed by Nick Wilson.
    + Use gmtime_r/gmtime_s for thread-safety. Fixed by Nick Wilson.</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1544529600">- Update to version 2.14.1: [bsc#1118727, CVE-2018-19608]
  Security
  * Fix timing variations and memory access variations in RSA PKCS#1 v1.5
    decryption that could lead to a Bleichenbacher-style padding oracle
    attack. In TLS, this affects servers that accept ciphersuites based on
    RSA decryption (i.e. ciphersuites whose name contains RSA but not
    (EC)DH(E)). Discovered by Eyal Ronen (Weizmann Institute),  Robert Gillham
    (University of Adelaide), Daniel Genkin (University of Michigan),
    Adi Shamir (Weizmann Institute), David Wong (NCC Group), and Yuval Yarom
    (University of Adelaide, Data61). The attack is described in more detail
    in the paper available here: http://cat.eyalro.net/cat.pdf  CVE-2018-19608
  * In mbedtls_mpi_write_binary(), don't leak the exact size of the number
    via branching and memory access patterns. An attacker who could submit
    a plaintext for RSA PKCS#1 v1.5 decryption but only observe the timing
    of the decryption and not its result could nonetheless decrypt RSA
    plaintexts and forge RSA signatures. Other asymmetric algorithms may
    have been similarly vulnerable. Reported by Eyal Ronen, Robert Gillham,
    Daniel Genkin, Adi Shamir, David Wong and Yuval Yarom.
  * Wipe sensitive buffers on the stack in the CTR_DRBG and HMAC_DRBG
    modules.
  API Changes
  * The new functions mbedtls_ctr_drbg_update_ret() and
    mbedtls_hmac_drbg_update_ret() are similar to mbedtls_ctr_drbg_update()
    and mbedtls_hmac_drbg_update() respectively, but the new functions
    report errors whereas the old functions return void. We recommend that
    applications use the new functions.
- Version 2.14.0:
  Security
  * Fix overly strict DN comparison when looking for CRLs belonging to a
    particular CA. This previously led to ignoring CRLs when the CRL's issuer
    name and the CA's subject name differed in their string encoding (e.g.,
    one using PrintableString and the other UTF8String) or in the choice of
    upper and lower case. Reported by Henrik Andersson of Bosch GmbH in issue
    [#1784].
  * Fix a flawed bounds check in server PSK hint parsing. In case the
    incoming message buffer was placed within the first 64KiB of address
    space and a PSK-(EC)DHE ciphersuite was used, this allowed an attacker
    to trigger a memory access up to 64KiB beyond the incoming message buffer,
    potentially leading to an application crash or information disclosure.
  * Fix mbedtls_mpi_is_prime() to use more rounds of probabilistic testing. The
    previous settings for the number of rounds made it practical for an
    adversary to construct non-primes that would be erroneously accepted as
    primes with high probability. This does not have an impact on the
    security of TLS, but can matter in other contexts with numbers chosen
    potentially by an adversary that should be prime and can be validated.
    For example, the number of rounds was enough to securely generate RSA key
    pairs or Diffie-Hellman parameters, but was insufficient to validate
    Diffie-Hellman parameters properly.
    See "Prime and Prejudice" by by Martin R. Albrecht and Jake Massimo and
    Kenneth G. Paterson and Juraj Somorovsky.
  Features
  * Add support for temporarily suspending expensive ECC computations after
    some configurable amount of operations. This is intended to be used in
    constrained, single-threaded systems where ECC is time consuming and can
    block other operations until they complete. This is disabled by default,
    but can be enabled by MBEDTLS_ECP_RESTARTABLE at compile time and
    configured by mbedtls_ecp_set_max_ops() at runtime. It applies to the new
    xxx_restartable functions in ECP, ECDSA, PK and X.509 (CRL not supported
    yet), and to existing functions in ECDH and SSL (currently only
    implemented client-side, for ECDHE-ECDSA ciphersuites in TLS 1.2,
    including client authentication).
  * Add support for Arm CPU DSP extensions to accelerate asymmetric key
    operations. On CPUs where the extensions are available, they can accelerate
    MPI multiplications used in ECC and RSA cryptography. Contributed by
    Aurelien Jarno.
  * Extend RSASSA-PSS signature to allow a smaller salt size. Previously, PSS
    signature always used a salt with the same length as the hash, and returned
    an error if this was not possible. Now the salt size may be up to two bytes
    shorter. This allows the library to support all hash and signature sizes
    that comply with FIPS 186-4, including SHA-512 with a 1024-bit key.
  * Add support for 128-bit keys in CTR_DRBG. Note that using keys shorter
    than 256 bits limits the security of generated material to 128 bits.
  API Changes
  * Add a common error code of `MBEDTLS_ERR_PLATFORM_FEATURE_UNSUPPORTED` for
    a feature that is not supported by underlying alternative
    implementations implementing cryptographic primitives. This is useful for
    hardware accelerators that don't implement all options or features.
  New deprecations
  * All module specific errors following the form
    MBEDTLS_ERR_XXX_FEATURE_UNAVAILABLE that indicate a feature is not
    supported are deprecated and are now replaced by the new equivalent
    platform error.
  * All module specific generic hardware acceleration errors following the
    form MBEDTLS_ERR_XXX_HW_ACCEL_FAILED that are deprecated and are replaced
    by the equivalent plaform error.
  * Deprecate the function mbedtls_mpi_is_prime() in favor of
    mbedtls_mpi_is_prime_ext() which allows specifying the number of
    Miller-Rabin rounds.
  Bugfix
  * Fix wrong order of freeing in programs/ssl/ssl_server2 example
    application leading to a memory leak in case both
    MBEDTLS_MEMORY_BUFFER_ALLOC_C and MBEDTLS_MEMORY_BACKTRACE are set.
    Fixes #2069.
  * Fix a bug in the update function for SSL ticket keys which previously
    invalidated keys of a lifetime of less than a 1s. Fixes #1968.
  * Fix failure in hmac_drbg in the benchmark sample application, when
    MBEDTLS_THREADING_C is defined. Found by TrinityTonic, #1095
  * Fix a bug in the record decryption routine ssl_decrypt_buf()
    which lead to accepting properly authenticated but improperly
    padded records in case of CBC ciphersuites using Encrypt-then-MAC.
  * Fix memory leak and freeing without initialization in the example
    program programs/x509/cert_write. Fixes #1422.
  * Ignore IV in mbedtls_cipher_set_iv() when the cipher mode is
    MBEDTLS_MODE_ECB. Found by ezdevelop. Fixes #1091.
  * Zeroize memory used for buffering or reassembling handshake messages
    after use.
  * Use `mbedtls_platform_zeroize()` instead of `memset()` for zeroization
    of sensitive data in the example programs aescrypt2 and crypt_and_hash.
  * Change the default string format used for various X.509 DN attributes to
    UTF8String. Previously, the use of the PrintableString format led to
    wildcards and non-ASCII characters being unusable in some DN attributes.
    Reported by raprepo in #1860 and by kevinpt in #468. Fix contributed by
    Thomas-Dee.
  * Fix compilation failure for configurations which use compile time
    replacements of standard calloc/free functions through the macros
    MBEDTLS_PLATFORM_CALLOC_MACRO and MBEDTLS_PLATFORM_FREE_MACRO.
    Reported by ole-de and ddhome2006. Fixes #882, #1642 and #1706.
  Changes
  * Removed support for Yotta as a build tool.
  * Add tests for session resumption in DTLS.
  * Close a test gap in (D)TLS between the client side and the server side:
    test the handling of large packets and small packets on the client side
    in the same way as on the server side.
  * Change the dtls_client and dtls_server samples to work by default over
    IPv6 and optionally by a build option over IPv4.
  * Change the use of Windows threading to use Microsoft Visual C++ runtime
    calls, rather than Win32 API calls directly. This is necessary to avoid
    conflict with C runtime usage. Found and fixed by irwir.
  * Remember the string format of X.509 DN attributes when replicating
    X.509 DNs. Previously, DN attributes were always written in their default
    string format (mostly PrintableString), which could lead to CRTs being
    created which used PrintableStrings in the issuer field even though the
    signing CA used UTF8Strings in its subject field; while X.509 compliant,
    such CRTs were rejected in some applications, e.g. some versions of
    Firefox, curl and GnuTLS. Reported in #1033 by Moschn. Fix contributed by
    Thomas-Dee.
  * Improve documentation of mbedtls_ssl_get_verify_result().
    Fixes #517 reported by github-monoculture.
  * Add MBEDTLS_MPI_GEN_PRIME_FLAG_LOW_ERR flag to mbedtls_mpi_gen_prime() and
    use it to reduce error probability in RSA key generation to levels mandated
    by FIPS-186-4.
- Version 2.13.1
  API Changes
  * Extend the platform module with an abstraction mbedtls_platform_gmtime_r()
    whose implementation should behave as a thread-safe version of gmtime().
    This allows users to configure such an implementation at compile time when
    the target system cannot be deduced automatically, by setting the option
    MBEDTLS_PLATFORM_GMTIME_R_ALT. At this stage Mbed TLS is only able to
    automatically select implementations for Windows and POSIX C libraries.
  Bugfix
  * Fix build failures on platforms where only gmtime() is available but
    neither gmtime_r() nor gmtime_s() are present. Fixes #1907.
- Version 2.13.0
  Security
  * Fix an issue in the X.509 module which could lead to a buffer overread
    during certificate extensions parsing. In case of receiving malformed
    input (extensions length field equal to 0), an illegal read of one byte
    beyond the input buffer is made. Found and analyzed by Nathan Crandall.
  Features
  * Add support for fragmentation of outgoing DTLS handshake messages. This
    is controlled by the maximum fragment length as set locally or negotiated
    with the peer, as well as by a new per-connection MTU option, set using
    mbedtls_ssl_set_mtu().
  * Add support for auto-adjustment of MTU to a safe value during the
    handshake when flights do not get through (RFC 6347, section 4.1.1.1,
    last paragraph).
  * Add support for packing multiple records within a single datagram,
    enabled by default.
  * Add support for buffering out-of-order handshake messages in DTLS.
    The maximum amount of RAM used for this can be controlled by the
    compile-time constant MBEDTLS_SSL_DTLS_MAX_BUFFERING defined
    in mbedtls/config.h.
  API Changes
  * Add function mbedtls_ssl_set_datagram_packing() to configure
    the use of datagram packing (enabled by default).
  Bugfix
  * Fix a potential memory leak in mbedtls_ssl_setup() function. An allocation
    failure in the function could lead to other buffers being leaked.
  * Fixes an issue with MBEDTLS_CHACHAPOLY_C which would not compile if
    MBEDTLS_ARC4_C and MBEDTLS_CIPHER_NULL_CIPHER weren't also defined. #1890
  * Fix a memory leak in ecp_mul_comb() if ecp_precompute_comb() fails.
    Fix contributed by Espressif Systems.
  * Add ecc extensions only if an ecc based ciphersuite is used.
    This improves compliance to RFC 4492, and as a result, solves
    interoperability issues with BouncyCastle. Raised by milenamil in #1157.
  * Replace printf with mbedtls_printf in the ARIA module. Found by
    TrinityTonic in #1908.
  * Fix potential use-after-free in mbedtls_ssl_get_max_frag_len()
    and mbedtls_ssl_get_record_expansion() after a session reset. Fixes #1941.
  * Fix a bug that caused SSL/TLS clients to incorrectly abort the handshake
    with TLS versions 1.1 and earlier when the server requested authentication
    without providing a list of CAs. This was due to an overly strict bounds
    check in parsing the CertificateRequest message,
    introduced in Mbed TLS 2.12.0. Fixes #1954.
  * Fix a miscalculation of the maximum record expansion in
    mbedtls_ssl_get_record_expansion() in case of ChachaPoly ciphersuites,
    or CBC ciphersuites in (D)TLS versions 1.1 or higher. Fixes #1913, #1914.
  * Fix undefined shifts with negative values in certificates parsing
    (found by Catena cyber using oss-fuzz)
  * Fix memory leak and free without initialization in pk_encrypt
    and pk_decrypt example programs. Reported by Brace Stout. Fixes #1128.
  * Remove redundant else statement. Raised by irwir. Fixes #1776.
  Changes
  * Copy headers preserving timestamps when doing a "make install".
    Contributed by xueruini.
  * Allow the forward declaration of public structs. Contributed by Dawid
    Drozd. Fixes #1215 raised by randombit.
  * Improve compatibility with some alternative CCM implementations by using
    CCM test vectors from RAM.
  * Add support for buffering of out-of-order handshake messages.
  * Add warnings to the documentation of the HKDF module to reduce the risk
    of misusing the mbedtls_hkdf_extract() and mbedtls_hkdf_expand()
    functions. Fixes #1775. Reported by Brian J. Murray.</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1544529601">- Library package version bumped to libmbedtls12</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1546862400">- Update to version 2.16.0:
  Features
  * Add a new config.h option of MBEDTLS_CHECK_PARAMS that enables validation of parameters in the API. This allows detection of obvious misuses of the API, such as passing NULL pointers. The API of existing functions hasn't changed, but requirements on parameters have been made more explicit in the documentation. See the corresponding API documentation for each function to see for which parameter values it is defined. This feature is disabled by default. See its API documentation in config.h for additional steps you have to take when enabling it.
  API Changes
  * The following functions in the random generator modules have been deprecated and replaced as shown below. The new functions change the return type from void to int to allow returning error codes when using MBEDTLS_&lt;MODULE&gt;_ALT for the underlying AES or message digest primitive. Fixes #1798. mbedtls_ctr_drbg_update() -&gt; mbedtls_ctr_drbg_update_ret() mbedtls_hmac_drbg_update() -&gt; mbedtls_hmac_drbg_update_ret()
  * Extend ECDH interface to enable alternative implementations.
  * Deprecate error codes of the form MBEDTLS_ERR_xxx_INVALID_KEY_LENGTH for ARIA, CAMELLIA and Blowfish. These error codes will be replaced by the more generic per-module error codes MBEDTLS_ERR_xxx_BAD_INPUT_DATA.
  * Additional parameter validation checks have been added for the following modules - AES, ARIA, Blowfish, CAMELLIA, CCM, GCM, DHM, ECP, ECDSA, ECDH, ECJPAKE, SHA, Chacha20 and Poly1305, cipher, pk, RSA, and MPI. Where modules have had parameter validation added, existing parameter checks may have changed. Some modules, such as Chacha20 had existing parameter validation whereas other modules had little. This has now been changed so that the same level of validation is present in all modules, and that it is now optional with the MBEDTLS_CHECK_PARAMS flag which by default is off. That means that checks which were previously present by default will no longer be.
  New deprecations
  * Deprecate mbedtls_ctr_drbg_update() and mbedtls_hmac_drbg_update() in favor of functions that can return an error code.
  Bugfix
  * Fix for Clang, which was reporting a warning for the bignum.c inline assembly for AMD64 targets creating string literals greater than those permitted by the ISO C99 standard. Found by Aaron Jones. Fixes #482.
  * Fix runtime error in mbedtls_platform_entropy_poll() when run through qemu user emulation. Reported and fix suggested by randombit. Fixes #1212.
  * Fix an unsafe bounds check when restoring an SSL session from a ticket. This could lead to a buffer overflow, but only in case ticket authentication was broken. Reported and fix suggested by Guido Vranken in #659.
  * Add explicit integer to enumeration type casts to example program programs/pkey/gen_key which previously led to compilation failure on some toolchains. Reported by phoenixmcallister. Fixes #2170.
  * Clarify documentation of mbedtls_ssl_set_own_cert() regarding the absence of check for certificate/key matching. Reported by Attila Molnar, #507.
  * Fix double initialization of ECC hardware that made some accelerators hang.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1567512000">- Update to version 2.16.2:
  * Security improvements and bugfixes
- Use ninja to for build</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1573646400">- Update to version 2.16.3:
  * Security improvements and bugfixes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1585828800">- Update to version 2.16.5:
  * Security improvements and bugfixes</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597665600">- update to 2.23.0:
  a lot of changes see https://github.com/ARMmbed/mbedtls/releases/tag/v2.23.0
  * Fix a side channel vulnerability in modular exponentiation that could reveal an RSA private key used in a secure enclave. Noticed by Sangho Lee, Ming-Wei Shih, Prasun Gera, Taesoo Kim and Hyesoon Kim (Georgia Institute of Technology); and Marcus Peinado (Microsoft Research). Reported by Raoul Strackx (Fortanix) in #3394.
  * Fix side channel in mbedtls_ecp_check_pub_priv() and mbedtls_pk_parse_key() / mbedtls_pk_parse_keyfile() (when loading a private key that didn't include the uncompressed public key), as well as mbedtls_ecp_mul() / mbedtls_ecp_mul_restartable() when called with a NULL f_rng argument. An attacker with access to precise enough timing and memory access information (typically an untrusted operating system attacking a secure enclave) could fully recover the ECC private key. Found and reported by Alejandro Cabrera Aldaya and Billy Brumley.
  * Fix issue in Lucky 13 counter-measure that could make it ineffective when hardware accelerators were used (using one of the MBEDTLS_SHAxxx_ALT macros). This would cause the original Lucky 13 attack to be possible in those configurations, allowing an active network attacker to recover plaintext after repeated timing measurements under some conditions. Reported and fix suggested by Luc Perneel in #3246.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1598875200">- Do not run testsuite in parallel - its not reliable</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1599480000">- Add workaround for failing builds (Python not found) due to
  https://gitlab.kitware.com/cmake/cmake/-/issues/21168</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1599652800">- update to 2.24.0:
  * see https://github.com/ARMmbed/mbedtls/releases/tag/v2.24.0
  * Fix a vulnerability in the verification of X.509 certificates when matching
  the expected common name (the cn argument of mbedtls_x509_crt_verify())
  with the actual certificate name: when the subjecAltName extension is
  present, the expected name was compared to any name in that extension
  regardless of its type. This means that an attacker could for example
  impersonate a 4-bytes or 16-byte domain by getting a certificate for the
  corresponding IPv4 or IPv6 (this would require the attacker to control that
  IP address, though). Similar attacks using other subjectAltName name types
  might be possible.
  * When checking X.509 CRLs, a certificate was only considered as revoked if
  its revocationDate was in the past according to the local clock if
  available. In particular, on builds without MBEDTLS_HAVE_TIME_DATE,
  certificates were never considered as revoked. On builds with
  MBEDTLS_HAVE_TIME_DATE, an attacker able to control the local clock (for
  example, an untrusted OS attacking a secure enclave) could prevent
  revocation of certificates via CRLs. Fixed by no longer checking the
  revocationDate field, in accordance with RFC 5280. Reported by yuemonangong
  in #3340. Reported independently and fixed by Raoul Strackx and Jethro
  * In (D)TLS record decryption, when using a CBC ciphersuites without the
  Encrypt-then-Mac extension, use constant code flow memory access patterns
  to extract and check the MAC. This is an improvement to the existing
  countermeasure against Lucky 13 attacks. The previous countermeasure was
  effective against network-based attackers, but less so against local
  attackers. The new countermeasure defends against local attackers, even if
  they have access to fine-grained measurements. In particular, this fixes a
  local Lucky 13 cache attack found and reported by Tuba Yavuz, Farhaan
  Fowze, Ken (Yihan) Bai, Grant Hernandez, and Kevin Butler (University of
  Florida) and Dave Tian (Purdue University).
  * Fix side channel in RSA private key operations and static (finite-field)
  Diffie-Hellman. An adversary with precise enough timing and memory access
  information (typically an untrusted operating system attacking a secure
  enclave) could bypass an existing counter-measure (base blinding) and
  potentially fully recover the private key.
  * Fix a 1-byte buffer overread in mbedtls_x509_crl_parse_der(). Credit to
  OSS-Fuzz for detecting the problem and to Philippe Antoine for pinpointing
  the problematic code.
  * Zeroising of plaintext buffers in mbedtls_ssl_read() to erase unused
  application data from memory.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1608638400">- update to 2.25.0:
  * This release of Mbed TLS provides bug fixes, minor enhancements and new
  features. This release includes fixes for security issues.
  * see https://github.com/ARMmbed/mbedtls/releases/tag/v2.25.0
  * The functions mbedtls_cipher_auth_encrypt() and
  mbedtls_cipher_auth_decrypt() would write past the minimum documented size
  of the output buffer when used with NIST_KW. As a result, code using those
  functions as documented with NIST_KW could have a buffer overwrite of up to
  15 bytes, with consequences ranging up to arbitrary code execution
  depending on the location of the output buffer.
  * Limit the size of calculations performed by mbedtls_mpi_exp_mod to
  MBEDTLS_MPI_MAX_SIZE to prevent a potential denial of service when generating
  Diffie-Hellman key pairs. Credit to OSS-Fuzz.
  * A failure of the random generator was ignored in mbedtls_mpi_fill_random(),
  which is how most uses of randomization in asymmetric cryptography (including
  key generation, intermediate value randomization and blinding) are implemented.
  This could cause failures or the silent use of non-random values. A random
  generator can fail if it needs reseeding and cannot not obtain entropy, or due
  to an internal failure (which, for Mbed TLS's own CTR_DRBG or HMAC_DRBG, can
  only happen due to a misconfiguration).
  * Fix a compliance issue whereby we were not checking the tag on the algorithm
  parameters (only the size) when comparing the signature in the description part
  of the cert to the real signature. This meant that a NULL algorithm parameters
  entry would look identical to an array of REAL (size zero) to the library and
  thus the certificate would be considered valid. However, if the parameters do
  not match in any way then the certificate should be considered invalid, and
  indeed OpenSSL marks these certs as invalid when mbedtls did not. Many thanks
  to guidovranken who found this issue via differential fuzzing and reported it
  in #3629.
  * Zeroising of local buffers and variables which are used for calculations in
  mbedtls_pkcs5_pbkdf2_hmac(), mbedtls_internal_sha*_process(),
  mbedtls_internal_md*_process() and mbedtls_internal_ripemd160_process()
  functions to erase sensitive data from memory. Reported by Johan Malmgren and
  Johan Uppman Bruce from Sectra.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1611057600">- Fix build for Leap targets
- Use upstream tarball name</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1616414400">- Update to 2.26.0: [bsc#1189589, CVE-2021-24119]
  * * This release of Mbed TLS provides bug fixes, minor enhancements and new
  features. This release includes fixes for security issues.
  * see https://github.com/ARMmbed/mbedtls/releases/tag/v2.26.0
- Fix build with patch from https://github.com/ARMmbed/mbedtls/pull/4237
  mbedtls-4237.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1618488000">-  Workaround for building with gcc-11 boo#1181876</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1626782400">- Update to 2.27.0:
  API changes:
  * Update AEAD output size macros to bring them in line with the PSA Crypto
    API version 1.0 spec. This version of the spec parameterizes them on the
    key type used, as well as the key bit-size in the case of
    PSA_AEAD_TAG_LENGTH.
    The old versions of these macros were renamed and deprecated as follows:
  - PSA_AEAD_TAG_LENGTH          -&gt; PSA_AEAD_TAG_LENGTH_1_ARG
  - PSA_AEAD_ENCRYPT_OUTPUT_SIZE -&gt; PSA_AEAD_ENCRYPT_OUTPUT_SIZE_2_ARG
  - PSA_AEAD_DECRYPT_OUTPUT_SIZE -&gt; PSA_AEAD_DECRYPT_OUTPUT_SIZE_2_ARG
  - PSA_AEAD_UPDATE_OUTPUT_SIZE  -&gt; PSA_AEAD_UPDATE_OUTPUT_SIZE_2_ARG
  - PSA_AEAD_FINISH_OUTPUT_SIZE  -&gt; PSA_AEAD_FINISH_OUTPUT_SIZE_1_ARG
  - PSA_AEAD_VERIFY_OUTPUT_SIZE  -&gt; PSA_AEAD_VERIFY_OUTPUT_SIZE_1_ARG
  * Implement one-shot cipher functions, psa_cipher_encrypt and
    psa_cipher_decrypt, according to the PSA Crypto API 1.0.0
    specification.
  Features:
  * Add mbedtls_rsa_rsassa_pss_sign_ext() function allowing to generate a
    signature with a specific salt length. This function allows to validate
    test cases provided in the NIST's CAVP test suite.
  * Added support for built-in driver keys through the PSA opaque crypto
    driver interface. Refer to the documentation of
    MBEDTLS_PSA_CRYPTO_BUILTIN_KEYS for more information.
  * Implement psa_sign_message() and psa_verify_message().
  * The new function mbedtls_mpi_random() generates a random value in a
    given range uniformly.
  * Implement psa_mac_compute() and psa_mac_verify() as defined in the
    PSA Cryptograpy API 1.0.0 specification.
  * MBEDTLS_ECP_MAX_BITS is now determined automatically from the configured
    curves and no longer needs to be configured explicitly to save RAM.
  Security
  * Fix a bias in the generation of finite-field Diffie-Hellman-Merkle (DHM)
    private keys and of blinding values for DHM and elliptic curves (ECP)
    computations.
  * Fix a potential side channel vulnerability in ECDSA ephemeral key generation.
    An adversary who is capable of very precise timing measurements could
    learn partial information about the leading bits of the nonce used for the
    signature, allowing the recovery of the private key after observing a
    large number of signature operations. This completes a partial fix in
    Mbed TLS 2.20.0.
  * It was possible to configure MBEDTLS_ECP_MAX_BITS to a value that is
    too small, leading to buffer overflows in ECC operations. Fail the build
    in such a case.
  * An adversary with access to precise enough information about memory
    accesses (typically, an untrusted operating system attacking a secure
    enclave) could recover an RSA private key after observing the victim
    performing a single private-key operation.
  * An adversary with access to precise enough timing information (typically, a
    co-located process) could recover a Curve25519 or Curve448 static ECDH key
    after inputting a chosen public key and observing the victim performing the
    corresponding private-key operation.
  Bugfix
  * Add printf function attributes to mbedtls_debug_print_msg to ensure we
    get printf format specifier warnings.
  * Fix premature fopen() call in mbedtls_entropy_write_seed_file which may
    lead to seed file corruption in the case where the path to the seed file is
    equal to MBEDTLS_PLATFORM_STD_NV_SEED_FILE.
  * PSA functions other than psa_open_key now return PSA_ERROR_INVALID_HANDLE
    rather than PSA_ERROR_DOES_NOT_EXIST for an invalid handle, bringing them
    in line with version 1.0.0 of the specification.
  * PSA functions creating a key now return PSA_ERROR_INVALID_ARGUMENT rather
    than PSA_ERROR_INVALID_HANDLE when the identifier specified for the key
    to create is not valid, bringing them in line with version 1.0.0 of the
    specification.
  * Fix some cases in the bignum module where the library constructed an
    unintended representation of the value 0 which was not processed
    correctly by some bignum operations. This could happen when
    mbedtls_mpi_read_string() was called on "-0", or when
    mbedtls_mpi_mul_mpi() and mbedtls_mpi_mul_int() was called with one of
    the arguments being negative and the other being 0.
  * Fix a bug in ECDSA that would cause it to fail when the hash is all-bits
    zero.
  * Fix a compilation error when MBEDTLS_ECP_RANDOMIZE_MXZ_ALT is
    defined.
  * Fix an incorrect error code when parsing a PKCS#8 private key.
  * In a TLS client, enforce the Diffie-Hellman minimum parameter size
    set with mbedtls_ssl_conf_dhm_min_bitlen() precisely. Before, the
    minimum size was rounded down to the nearest multiple of 8.
  * In library/net_sockets.c, _POSIX_C_SOURCE and _XOPEN_SOURCE are
    defined to specific values.  If the code is used in a context
    where these are already defined, this can result in a compilation
    error.  Instead, assume that if they are defined, the values will
    be adequate to build Mbed TLS.
  * The cipher suite TLS-RSA-WITH-CAMELLIA-256-GCM-SHA384 was not available
    when SHA-1 was disabled and was offered when SHA-1 was enabled but SHA-384
    was disabled. Fix the dependency.
  * Do not offer SHA384 cipher suites when SHA-384 is disabled.
  * With MBEDTLS_PSA_CRYPTO_C disabled, some functions were getting built
    nonetheless, resulting in undefined reference errors when building a
    shared library.
  * Fix test suite code on platforms where int32_t is not int, such as
    Arm Cortex-M.
  * Fix some issues affecting MBEDTLS_ARIA_ALT implementations: a misplaced
    directive in a header and a missing initialization in the self-test.
  * Fix a missing initialization in the Camellia self-test, affecting
    MBEDTLS_CAMELLIA_ALT implementations.
  * Restore the ability to configure PSA via Mbed TLS options to support RSA
    key pair operations but exclude RSA key generation. When MBEDTLS_GENPRIME
    is not defined PSA will no longer attempt to use mbedtls_rsa_gen_key().
  * Fix a regression introduced in 2.24.0 which broke (D)TLS CBC ciphersuites
    (when the encrypt-then-MAC extension is not in use) with some ALT
    implementations of the underlying hash (SHA-1, SHA-256, SHA-384), causing
    the affected side to wrongly reject valid messages.
  * Remove outdated check-config.h check that prevented implementing the
    timing module on Mbed OS.
  * Fix PSA_ALG_TLS12_PRF and PSA_ALG_TLS12_PSK_TO_MS being too permissive
    about missing inputs.
  * Fix a resource leak in a test suite with an alternative AES
    implementation.
  * Fix a crash in mbedtls_mpi_debug_mpi on a bignum having 0 limbs. This
    could notably be triggered by setting the TLS debug level to 3 or above
    and using a Montgomery curve for the key exchange.
  * psa_verify_hash() was relying on implementation-specific behavior of
    mbedtls_rsa_rsassa_pss_verify() and was causing failures in some _ALT
    implementations. This reliance is now removed.
  * Disallow inputs of length different from the corresponding hash when
    signing or verifying with PSA_ALG_RSA_PSS (The PSA Crypto API mandates
    that PSA_ALG_RSA_PSS uses the same hash throughout the algorithm.)
  * Fix a null pointer dereference when mbedtls_mpi_exp_mod() was called with
    A=0 represented with 0 limbs. Up to and including Mbed TLS 2.26, this bug
    could not be triggered by code that constructed A with one of the
    mbedtls_mpi_read_xxx functions (including in particular TLS code) since
    those always built an mpi object with at least one limb.
  * Fix mbedtls_mpi_gcd(G,A,B) when the value of B is zero. This had no
    effect on Mbed TLS's internal use of mbedtls_mpi_gcd(), but may affect
    applications that call mbedtls_mpi_gcd() directly.
  * The PSA API no longer allows the creation or destruction of keys with a
    read-only lifetime. The persistence level PSA_KEY_PERSISTENCE_READ_ONLY
    can now only be used as intended, for keys that cannot be modified through
    normal use of the API.
  * When MBEDTLS_PSA_CRYPTO_SPM is enabled, crypto_spe.h was not included
    in all the right places. Include it from crypto_platform.h, which is
    the natural place.
  * mbedtls_pk_sign() and mbedtls_pk_verify() and their extended and
    restartable variants now always honor the specified hash length if
    nonzero. Before, for RSA, hash_len was ignored in favor of the length of
    the specified hash algorithm.
  * Fix which alert is sent in some cases to conform to the
    applicable RFC: on an invalid Finished message value, an
    invalid max_fragment_length extension, or an
    unsupported extension used by the server.
  * Correct (change from 12 to 13 bytes) the value of the macro describing the
    maximum nonce length returned by psa_aead_generate_nonce().
  Changes
  * Add extra printf compiler warning flags to builds.
  * Fix memsan build false positive in x509_crt.c with Clang 11
  * Fix the setting of the read timeout in the DTLS sample programs.
  * Remove the AES sample application programs/aes/aescrypt2 which shows
    bad cryptographic practice.
  * Alternative implementations of CMAC may now opt to not support 3DES as a
    CMAC block cipher, and still pass the CMAC self test.
  * Remove configs/config-psa-crypto.h, which was identical to the default
    configuration except for having some extra cryptographic mechanisms
    enabled and for unintended differences. This configuration was primarily
    intended to demonstrate the PSA API, and lost most of its usefulness when
    MBEDTLS_PSA_CRYPTO_C became enabled by default.
  * When building the test suites with GNU make, invoke python3 or python, not
    python2, which is no longer supported upstream.
  * When using session cache based session resumption on the server,
    double-check that custom session cache implementations return
    sessions which are consistent with the negotiated ciphersuite
    and compression method.
  * Fix build failure on MinGW toolchain when __USE_MING_ANSI_STDIO is on.
    When that flag is on, standard GNU C printf format specifiers
    should be used.
  * Reduce the default value of MBEDTLS_ECP_WINDOW_SIZE. This reduces RAM usage
    during ECC operations at a negligible performance cost.
  * mbedtls_mpi_read_binary(), mbedtls_mpi_read_binary_le() and
    mbedtls_mpi_read_string() now construct an mbedtls_mpi object with 0 limbs
    when their input has length 0. Note that this is an implementation detail
    and can change at any time, so this change should be transparent, but it
    may result in mbedtls_mpi_write_binary() or mbedtls_mpi_write_string()
    now writing an empty string where it previously wrote one or more
    zero digits when operating from values constructed with an mpi_read
    function and some mpi operations.
  * Implicitly add PSA_KEY_USAGE_SIGN_MESSAGE key usage policy flag when
    PSA_KEY_USAGE_SIGN_HASH flag is set and PSA_KEY_USAGE_VERIFY_MESSAGE flag
    when PSA_KEY_USAGE_VERIFY_HASH flag is set. This usage flag extension
    is also applied when loading a key from storage.
  * Remove mbedtls-4237.patch upstream
  * Library soname bump to libmbedcrypto7</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1642075200">- Update to 2.28.0: (bsc#1193979, CVE-2021-45450)
  API changes
  * Some fields of mbedtls_ssl_session and mbedtls_ssl_config are in a
  different order. This only affects applications that define such
  structures directly or serialize them.
  Requirement changes
  * Sign-magnitude and one's complement representations for signed integers are
  not supported. Two's complement is the only supported representation.
  Removals
  * Remove config option MBEDTLS_TLS_DEFAULT_ALLOW_SHA1_IN_CERTIFICATES,
  which allowed SHA-1 in the default TLS configuration for certificate
  signing. It was intended to facilitate the transition in environments
  with SHA-1 certificates. SHA-1 is considered a weak message digest and
  its use constitutes a security risk.
  * Remove the partial support for running unit tests via Greentea on Mbed OS,
  which had been unmaintained since 2018.
  Features
  * The identifier of the CID TLS extension can be configured by defining
  MBEDTLS_TLS_EXT_CID at compile time.
  * Warn if errors from certain functions are ignored. This is currently
  supported on GCC-like compilers and on MSVC and can be configured through
  the macro MBEDTLS_CHECK_RETURN. The warnings are always enabled
  (where supported) for critical functions where ignoring the return
  value is almost always a bug. Enable the new configuration option
  MBEDTLS_CHECK_RETURN_WARNING to get warnings for other functions. This
  is currently implemented in the AES, DES and md modules, and will be
  extended to other modules in the future.
  * Add missing PSA macros declared by PSA Crypto API 1.0.0:
  PSA_ALG_IS_SIGN_HASH, PSA_ALG_NONE, PSA_HASH_BLOCK_LENGTH, PSA_KEY_ID_NULL.
  * Add new API mbedtls_ct_memcmp for constant time buffer comparison.
  * Add PSA API definition for ARIA.
  Security
  * Zeroize several intermediate variables used to calculate the expected
  value when verifying a MAC or AEAD tag. This hardens the library in
  case the value leaks through a memory disclosure vulnerability. For
  example, a memory disclosure vulnerability could have allowed a
  man-in-the-middle to inject fake ciphertext into a DTLS connection.
  * In psa_cipher_generate_iv() and psa_cipher_encrypt(), do not read back
  from the output buffer. This fixes a potential policy bypass or decryption
  oracle vulnerability if the output buffer is in memory that is shared with
  an untrusted application.
  * Fix a double-free that happened after mbedtls_ssl_set_session() or
  mbedtls_ssl_get_session() failed with MBEDTLS_ERR_SSL_ALLOC_FAILED
  (out of memory). After that, calling mbedtls_ssl_session_free()
  and mbedtls_ssl_free() would cause an internal session buffer to
  be free()'d twice.
  Bugfix
  * Stop using reserved identifiers as local variables. Fixes #4630.
  * The GNU makefiles invoke python3 in preference to python except on Windows.
  * The check was accidentally not performed when cross-compiling for Windows
  on Linux. Fix this. Fixes #4774.
  * Prevent divide by zero if either of PSA_CIPHER_ENCRYPT_OUTPUT_SIZE() or
  PSA_CIPHER_UPDATE_OUTPUT_SIZE() were called using an asymmetric key type.
  * Fix a parameter set but unused in psa_crypto_cipher.c. Fixes #4935.
  * Don't use the obsolete header path sys/fcntl.h in unit tests.
  These header files cause compilation errors in musl.
  Fixes #4969.
  * Fix missing constraints on x86_64 and aarch64 assembly code
  for bignum multiplication that broke some bignum operations with
  (at least) Clang 12.
  Fixes #4116, #4786, #4917, #4962.
  * Fix mbedtls_cipher_crypt: AES-ECB when MBEDTLS_USE_PSA_CRYPTO is enabled.
  * Failures of alternative implementations of AES or DES single-block
  functions enabled with MBEDTLS_AES_ENCRYPT_ALT, MBEDTLS_AES_DECRYPT_ALT,
  MBEDTLS_DES_CRYPT_ECB_ALT or MBEDTLS_DES3_CRYPT_ECB_ALT were ignored.
  This does not concern the implementation provided with Mbed TLS,
  where this function cannot fail, or full-module replacements with
  MBEDTLS_AES_ALT or MBEDTLS_DES_ALT. Reported by Armelle Duboc in #1092.
  * Some failures of HMAC operations were ignored. These failures could only
  happen with an alternative implementation of the underlying hash module.
  * Fix the error returned by psa_generate_key() for a public key. Fixes #4551.
  * Fix the build of sample programs when neither MBEDTLS_ERROR_C nor
  MBEDTLS_ERROR_STRERROR_DUMMY is enabled.
  * Fix PSA_ALG_RSA_PSS verification accepting an arbitrary salt length.
  This algorithm now accepts only the same salt length for verification
  that it produces when signing, as documented. Use the new algorithm
  PSA_ALG_RSA_PSS_ANY_SALT to accept any salt length. Fixes #4946.
  * The existing predicate macro name PSA_ALG_IS_HASH_AND_SIGN is now reserved
  for algorithm values that fully encode the hashing step, as per the PSA
  Crypto API specification. This excludes PSA_ALG_RSA_PKCS1V15_SIGN_RAW and
  PSA_ALG_ECDSA_ANY. The new predicate macro PSA_ALG_IS_SIGN_HASH covers
  all algorithms that can be used with psa_{sign,verify}_hash(), including
  these two.
  * Fix issue in Makefile on Linux with SHARED=1, that caused shared libraries
  not to list other shared libraries they need.
  * Fix a bug in mbedtls_gcm_starts() when the bit length of the iv
  exceeds 2^32. Fixes #4884.
  * Fix an uninitialized variable warning in test_suite_ssl.function with GCC
  version 11.
  * Fix the build when no SHA2 module is included. Fixes #4930.
  * Fix the build when only the bignum module is included. Fixes #4929.
  * Fix a potential invalid pointer dereference and infinite loop bugs in
  pkcs12 functions when the password is empty. Fix the documentation to
  better describe the inputs to these functions and their possible values.
  Fixes #5136.
  * The key usage flags PSA_KEY_USAGE_SIGN_MESSAGE now allows the MAC
  operations psa_mac_compute() and psa_mac_sign_setup().
  * The key usage flags PSA_KEY_USAGE_VERIFY_MESSAGE now allows the MAC
  operations psa_mac_verify() and psa_mac_verify_setup().
  Changes
  * Set config option MBEDTLS_TLS_DEFAULT_ALLOW_SHA1_IN_KEY_EXCHANGE to be
  disabled by default.
  * Improve the performance of base64 constant-flow code. The result is still
  slower than the original non-constant-flow implementation, but much faster
  than the previous constant-flow implementation. Fixes #4814.
  * Indicate in the error returned if the nonce length used with
  ChaCha20-Poly1305 is invalid, and not just unsupported.
  * The mbedcrypto library includes a new source code module constant_time.c,
  containing various functions meant to resist timing side channel attacks.
  * This module does not have a separate configuration option, and functions
  from this module will be included in the build as required. Currently
  most of the interface of this module is private and may change at any
  time.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1642420800">- Fix baselib.conf</changelog>
  <changelog author="Alexander Bergmann &lt;abergmann@suse.com&gt;" date="1671624000">- Fix potential heap buffer overread and overwrite in DTLS if
  MBEDTLS_SSL_DTLS_CONNECTION_ID is enabled and
  MBEDTLS_SSL_CID_IN_LEN_MAX &gt; 2 * MBEDTLS_SSL_CID_OUT_LEN_MAX.
  (bsc#1206576, CVE-2022-46393).
  Add: mbedtls-CVE-2022-46393.patch</changelog>
</package>
<package pkgid="146a4f38880d01ebe7951ab187b9cfe688b95d5eca0645ff15955e63d7ed9b2a" name="libmbedtls14" arch="aarch64">
  <version epoch="0" ver="2.28.0" rel="bp154.2.3.1"/>
  <changelog author="mpluskal@suse.com" date="1531137600">- Update to version 2.11.0:
  * Features
    + Added support for the XTS block cipher mode with AES (AES-XTS). Contributed by Aorimn in pull request #414.
    + Implemented the HMAC-based extract-and-expand key derivation function (HKDF) per RFC 5869. Contributed by Thomas Fossati.
    + For TLS servers, added support for offloading private key operations to an external cryptoprocessor. Private key operations can be asynchronous to allow non-blocking operation of the TLS server stack.
    + Added support for ARIA cipher (RFC 5794) and associated TLS ciphersuites (RFC 6209). ARIA is disabled by default. To enable, see MBEDTLS_ARIA_C in config.h.
    + Added support for the CCM* block cipher mode as defined in IEEE Std 802.15.4.
    + Added an additional block mode, OFB (Output Feedback) per NIST SP 800-38a, to the AES module and cipher abstraction module.
  * API Changes
    + Mbed TLS 2.11.0 maintains source code compatibility with the last minor version, Mbed TLS 2.9.0, but extends the interface with additional capabilities. Mbed TLS 2.11.0 modifies the ABI and increases the SOVERSION.
  * Bugfix
    + Fixed the cert_write example to handle certificates signed with elliptic curves as well as RSA. Fixes #777 found by dbedev.
    + Fixed the redefinition of _WIN32_WINNT, to avoid overriding a definition used by user applications. Found and fixed by Fabio Alessandrelli.
    + Fixed compilation warnings with the IAR toolchain on 32-bit platforms. Reported by rahmanih in #683.
    + Fixed an issue with MicroBlaze support in bn_mul.h which was causing the build to fail. Found by zv-io. Fixes #1651.
    + Fixed braces in mbedtls_memory_buffer_alloc_status(). Found by sbranden in #552.
    + Added the macro MBEDTLS_X509_MAX_FILE_PATH_LEN that enables the user to configure the maximum length of a file path that can be buffered when calling mbedtls_x509_crt_parse_path(). Fixes #492.
    + Fixed redundant declaration of mbedtls_ssl_list_ciphersuites. Raised by TrinityTonic in #1359.
- Changes for version 2.9.0:
  + Security
    + Fixed an issue in the X.509 module which could lead to a buffer overread during certificate validation. Additionally, the issue could also lead to unnecessary callback checks being made or to some validation checks to be omitted. The overread could be triggered remotely, while the other issues would require a non DER-compliant certificate to be correctly signed by a trusted CA, or a trusted CA with a non DER-compliant certificate. Found by luocm. Fixes #825.
    + Fixed the buffer length assertion in the ssl_parse_certificate_request() function which could lead to an arbitrary overread of the message buffer. The overreads could be caused by receiving a malformed algorithms section which was too short. In builds with debug output, this overread data was output with the debug data.
    + Fixed a client-side bug in the validation of the server's ciphersuite choice which could potentially lead to the client accepting a ciphersuite it didn't offer or a ciphersuite that could not be used with the TLS or DTLS version chosen by the server. This could lead to corruption of internal data structures for some configurations.
  * Features
    + Added an option of MBEDTLS_AES_FEWER_TABLES, to dynamically compute smaller AES tables during runtime, thereby reducing the RAM/ROM footprint by ~6KiB. Suggested and contributed by jkivilin.
    + Added initial support for Curve448 (RFC 7748). So far only mbedtls_ecp_mul() and ECDH primitive functions (mbedtls_ecdh_gen_public(), mbedtls_ecdh_compute_shared()) are supported for now. Contributed by Nicholas Wilson.
  * API Changes
    + Mbed TLS 2.9.0 maintains source code and binary compatibility with the last minor version, Mbed TLS 2.8.0, but extends the interface with additional capabilities.
    + Extended the API with the function of mbedtls_net_poll() to allow user applications to wait for a network context to become ready before reading or writing.
    + Added the function mbedtls_ssl_check_pending() to the public API to allow a check for whether more more data is pending to be processed in the internal message buffers. This function is necessary to determine the underlying transport when event-driven IO is used.
  * Bugfix
    + Fixed a spurious uninitialized variable warning in cmac.c. Fix independently contributed by Brian J Murray and David Brown.
    + Added missing dependencies in test suites that led to build failures in configurations that omit certain hashes or public-key algorithms. Fixes #1040.
    + Fixed a C89 incompatibility issue in benchmark.c. Contributed by Brendan Shanks. Fixes #1353.
    + Added missing dependencies for MBEDTLS_HAVE_TIME_DATE and MBEDTLS_VERSION_FEATURES in some test suites. Contributed by Deomid Ryabkov. Fixes #1299, #1475.
    + Fixed the Makefile build process for building shared libraries on Mac OS X. Fixed by mnacamura.
    + Fixed parsing of PKCS#8 encoded Elliptic Curve keys. Previously Mbed TLS was unable to parse keys which had only the optional parameters field of the ECPrivateKey structure. Found by Jethro Beekman, fixed in #1379.
    + Added an optimisation to return the plaintext data more quickly on unpadded CBC decryption, as stated in the mbedtls_cipher_update() documentation. Contributed by Andy Leiserson.
    + Fixed the overriding and ignoring of return values when parsing and writing to a file in the pk_sign program. Found by kevlut in #1142.
    + Added restrictions to the usage of the error code MBEDTLS_ERR_SSL_WANT_READ to situations where data needs to be fetched from the underlying transport in order to make progress. Previously, this error code was also occasionally returned when unexpected messages were being discarded, ignoring that further messages could potentially already be pending to be processed in the internal buffers; these cases led to deadlocks when event-driven I/O was used. Found and reported by Hubert Mis in #772.
    + Fixed buffer length assertions in the ssl_parse_certificate_request() function which led to a potential one byte overread of the message buffer.
    + Fixed invalid buffer sizes being passed to zlib during record compression and decompression.
    + Raised the soversion of libmbedcrypto to match the soversion of the maintained 2.7 branch. The soversion was increased in Mbed TLS version 2.7.1 to reflect breaking changes in that release, but the increment was missed in 2.8.0 and later releases outside of the 2.7 branch.</changelog>
  <changelog author="mpluskal@suse.com" date="1535025600">- Update to version 2.12.0:
  * Security
    + Fixed a vulnerability in the TLS ciphersuites based on use of CBC and SHA-384 in DTLS/TLS 1.0 to 1.2, that allowed an active network attacker to partially recover the plaintext of messages under certains conditions by exploiting timing side-channels.
    + Fixed a vulnerability in TLS ciphersuites based on CBC, in DTLS/TLS 1.0 to 1.2, that allowed a local attacker, with the ability to execute code on the local machine as well as to manipulate network packets, to partially recover the plaintext of messages under certain conditions by using a cache attack targetting an internal MD/SHA buffer.
    + Added a counter-measure against a vulnerability in TLS ciphersuites based on CBC, in DTLS/TLS 1.0 to 1.2, that allowed a local attacker with the ability to execute code on the local machine as well as manipulate network packets, to partially recover the plaintext of messages certain conditions (see previous entry) by using a cache attack targeting the SSL input record buffer.
  * Features
    + Added new cryptographic primitives, the stream cipher Chacha20, one-time authenticator Poly1305 and AEAD construct Chacha20-Poly1305, as defined in RFC 7539. Contributed by Daniel King.
    + Added support for the CHACHA20-POLY1305 ciphersuites from RFC 7905.
    + Made the receive and transmit buffers independently configurable in size, for situations where the outgoing buffer can be fixed at a smaller size than the incoming buffer
    + Added support for the AES based key wrapping modes defined by NIST SP 800-38F algorithms KW and KWP and by RFC's 3394 and 5649.
    + Added platform support for the Haiku OS.
  * Bugfix
    + Fixed the key_app_writer example which was creating an invalid ASN.1 tag by writing an additional leading zero byte. Found by Aryeh R. #1257.
    + Fixed a C++ compilation error, caused by a variable named new. Found and fixed by Hirotaka Niisato. #1783.
    + Fixed the "no symbols" warning issued by ranlib when building on Mac OS X. Fix contributed by tabascoeye.
    + Clarified documentation for mbedtls_ssl_write() to include 0 as a valid return value. Found by @davidwu2000. #839.
    + Fixed a memory leak in mbedtls_x509_csr_parse(). Found and fixed by catenacyber, Philippe Antoine. #1623.
    + Added length checks to some TLS parsing functions. Found and fixed by Philippe Antoine from Catena cyber. #1663.
    + Remove unused headers included in x509.c. Found by Chris Hanson and fixed by Brendan Shanks. #992.
    + Fixed compilation error when MBEDTLS_ARC4_C is disabled and MBEDTLS_CIPHER_NULL_CIPHER is enabled. Found by TrinityTonic in #1719.
    + Fixed the inline assembly for the MPI multiply helper function for i386 and i386 with SSE2. Found by László Langó. #1550.
    + Fixed the namespacing in header files. Remove the mbedtls namespacing in the #include in the header files. #857.
    + Fixed a compiler warning of 'use before initialisation' in mbedtls_pk_parse_key(). Found by Martin Boye Petersen and fixed by Dawid Drozd.#1098.
    + Fixed decryption of zero length messages (which contain all padding) when a CBC based ciphersuite was used together with Encrypt-then-MAC.
    + Fixed the ssl_client2 example to send application data with 0-length content when the request_size argument is set to 0 as stated in the documentation. #1833.
    + Corrected the documentation for mbedtls_ssl_get_session(). This API has deep copy of the session, and the peer certificate is not lost. #926.
    + Fixed issues when building to the C99 standard, using -std=c99. Fixed by Nick Wilson.
  * Changes
    + Fails when receiving a TLS alert message with an invalid length, or invalid zero-length messages when using TLS 1.2. Contributed by Espressif Systems.
    + Changed the default behaviour of mbedtls_hkdf_extract() to return an error when calling with a NULL salt and non-zero salt length. Contributed by Brian J Murray
    + Change the shebang line in Perl scripts to look up perl in the PATH. Contributed by fbrosson.
    + Allow overriding the time on Windows via the platform-time abstraction. Fixed by Nick Wilson.
    + Use gmtime_r/gmtime_s for thread-safety. Fixed by Nick Wilson.</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1544529600">- Update to version 2.14.1: [bsc#1118727, CVE-2018-19608]
  Security
  * Fix timing variations and memory access variations in RSA PKCS#1 v1.5
    decryption that could lead to a Bleichenbacher-style padding oracle
    attack. In TLS, this affects servers that accept ciphersuites based on
    RSA decryption (i.e. ciphersuites whose name contains RSA but not
    (EC)DH(E)). Discovered by Eyal Ronen (Weizmann Institute),  Robert Gillham
    (University of Adelaide), Daniel Genkin (University of Michigan),
    Adi Shamir (Weizmann Institute), David Wong (NCC Group), and Yuval Yarom
    (University of Adelaide, Data61). The attack is described in more detail
    in the paper available here: http://cat.eyalro.net/cat.pdf  CVE-2018-19608
  * In mbedtls_mpi_write_binary(), don't leak the exact size of the number
    via branching and memory access patterns. An attacker who could submit
    a plaintext for RSA PKCS#1 v1.5 decryption but only observe the timing
    of the decryption and not its result could nonetheless decrypt RSA
    plaintexts and forge RSA signatures. Other asymmetric algorithms may
    have been similarly vulnerable. Reported by Eyal Ronen, Robert Gillham,
    Daniel Genkin, Adi Shamir, David Wong and Yuval Yarom.
  * Wipe sensitive buffers on the stack in the CTR_DRBG and HMAC_DRBG
    modules.
  API Changes
  * The new functions mbedtls_ctr_drbg_update_ret() and
    mbedtls_hmac_drbg_update_ret() are similar to mbedtls_ctr_drbg_update()
    and mbedtls_hmac_drbg_update() respectively, but the new functions
    report errors whereas the old functions return void. We recommend that
    applications use the new functions.
- Version 2.14.0:
  Security
  * Fix overly strict DN comparison when looking for CRLs belonging to a
    particular CA. This previously led to ignoring CRLs when the CRL's issuer
    name and the CA's subject name differed in their string encoding (e.g.,
    one using PrintableString and the other UTF8String) or in the choice of
    upper and lower case. Reported by Henrik Andersson of Bosch GmbH in issue
    [#1784].
  * Fix a flawed bounds check in server PSK hint parsing. In case the
    incoming message buffer was placed within the first 64KiB of address
    space and a PSK-(EC)DHE ciphersuite was used, this allowed an attacker
    to trigger a memory access up to 64KiB beyond the incoming message buffer,
    potentially leading to an application crash or information disclosure.
  * Fix mbedtls_mpi_is_prime() to use more rounds of probabilistic testing. The
    previous settings for the number of rounds made it practical for an
    adversary to construct non-primes that would be erroneously accepted as
    primes with high probability. This does not have an impact on the
    security of TLS, but can matter in other contexts with numbers chosen
    potentially by an adversary that should be prime and can be validated.
    For example, the number of rounds was enough to securely generate RSA key
    pairs or Diffie-Hellman parameters, but was insufficient to validate
    Diffie-Hellman parameters properly.
    See "Prime and Prejudice" by by Martin R. Albrecht and Jake Massimo and
    Kenneth G. Paterson and Juraj Somorovsky.
  Features
  * Add support for temporarily suspending expensive ECC computations after
    some configurable amount of operations. This is intended to be used in
    constrained, single-threaded systems where ECC is time consuming and can
    block other operations until they complete. This is disabled by default,
    but can be enabled by MBEDTLS_ECP_RESTARTABLE at compile time and
    configured by mbedtls_ecp_set_max_ops() at runtime. It applies to the new
    xxx_restartable functions in ECP, ECDSA, PK and X.509 (CRL not supported
    yet), and to existing functions in ECDH and SSL (currently only
    implemented client-side, for ECDHE-ECDSA ciphersuites in TLS 1.2,
    including client authentication).
  * Add support for Arm CPU DSP extensions to accelerate asymmetric key
    operations. On CPUs where the extensions are available, they can accelerate
    MPI multiplications used in ECC and RSA cryptography. Contributed by
    Aurelien Jarno.
  * Extend RSASSA-PSS signature to allow a smaller salt size. Previously, PSS
    signature always used a salt with the same length as the hash, and returned
    an error if this was not possible. Now the salt size may be up to two bytes
    shorter. This allows the library to support all hash and signature sizes
    that comply with FIPS 186-4, including SHA-512 with a 1024-bit key.
  * Add support for 128-bit keys in CTR_DRBG. Note that using keys shorter
    than 256 bits limits the security of generated material to 128 bits.
  API Changes
  * Add a common error code of `MBEDTLS_ERR_PLATFORM_FEATURE_UNSUPPORTED` for
    a feature that is not supported by underlying alternative
    implementations implementing cryptographic primitives. This is useful for
    hardware accelerators that don't implement all options or features.
  New deprecations
  * All module specific errors following the form
    MBEDTLS_ERR_XXX_FEATURE_UNAVAILABLE that indicate a feature is not
    supported are deprecated and are now replaced by the new equivalent
    platform error.
  * All module specific generic hardware acceleration errors following the
    form MBEDTLS_ERR_XXX_HW_ACCEL_FAILED that are deprecated and are replaced
    by the equivalent plaform error.
  * Deprecate the function mbedtls_mpi_is_prime() in favor of
    mbedtls_mpi_is_prime_ext() which allows specifying the number of
    Miller-Rabin rounds.
  Bugfix
  * Fix wrong order of freeing in programs/ssl/ssl_server2 example
    application leading to a memory leak in case both
    MBEDTLS_MEMORY_BUFFER_ALLOC_C and MBEDTLS_MEMORY_BACKTRACE are set.
    Fixes #2069.
  * Fix a bug in the update function for SSL ticket keys which previously
    invalidated keys of a lifetime of less than a 1s. Fixes #1968.
  * Fix failure in hmac_drbg in the benchmark sample application, when
    MBEDTLS_THREADING_C is defined. Found by TrinityTonic, #1095
  * Fix a bug in the record decryption routine ssl_decrypt_buf()
    which lead to accepting properly authenticated but improperly
    padded records in case of CBC ciphersuites using Encrypt-then-MAC.
  * Fix memory leak and freeing without initialization in the example
    program programs/x509/cert_write. Fixes #1422.
  * Ignore IV in mbedtls_cipher_set_iv() when the cipher mode is
    MBEDTLS_MODE_ECB. Found by ezdevelop. Fixes #1091.
  * Zeroize memory used for buffering or reassembling handshake messages
    after use.
  * Use `mbedtls_platform_zeroize()` instead of `memset()` for zeroization
    of sensitive data in the example programs aescrypt2 and crypt_and_hash.
  * Change the default string format used for various X.509 DN attributes to
    UTF8String. Previously, the use of the PrintableString format led to
    wildcards and non-ASCII characters being unusable in some DN attributes.
    Reported by raprepo in #1860 and by kevinpt in #468. Fix contributed by
    Thomas-Dee.
  * Fix compilation failure for configurations which use compile time
    replacements of standard calloc/free functions through the macros
    MBEDTLS_PLATFORM_CALLOC_MACRO and MBEDTLS_PLATFORM_FREE_MACRO.
    Reported by ole-de and ddhome2006. Fixes #882, #1642 and #1706.
  Changes
  * Removed support for Yotta as a build tool.
  * Add tests for session resumption in DTLS.
  * Close a test gap in (D)TLS between the client side and the server side:
    test the handling of large packets and small packets on the client side
    in the same way as on the server side.
  * Change the dtls_client and dtls_server samples to work by default over
    IPv6 and optionally by a build option over IPv4.
  * Change the use of Windows threading to use Microsoft Visual C++ runtime
    calls, rather than Win32 API calls directly. This is necessary to avoid
    conflict with C runtime usage. Found and fixed by irwir.
  * Remember the string format of X.509 DN attributes when replicating
    X.509 DNs. Previously, DN attributes were always written in their default
    string format (mostly PrintableString), which could lead to CRTs being
    created which used PrintableStrings in the issuer field even though the
    signing CA used UTF8Strings in its subject field; while X.509 compliant,
    such CRTs were rejected in some applications, e.g. some versions of
    Firefox, curl and GnuTLS. Reported in #1033 by Moschn. Fix contributed by
    Thomas-Dee.
  * Improve documentation of mbedtls_ssl_get_verify_result().
    Fixes #517 reported by github-monoculture.
  * Add MBEDTLS_MPI_GEN_PRIME_FLAG_LOW_ERR flag to mbedtls_mpi_gen_prime() and
    use it to reduce error probability in RSA key generation to levels mandated
    by FIPS-186-4.
- Version 2.13.1
  API Changes
  * Extend the platform module with an abstraction mbedtls_platform_gmtime_r()
    whose implementation should behave as a thread-safe version of gmtime().
    This allows users to configure such an implementation at compile time when
    the target system cannot be deduced automatically, by setting the option
    MBEDTLS_PLATFORM_GMTIME_R_ALT. At this stage Mbed TLS is only able to
    automatically select implementations for Windows and POSIX C libraries.
  Bugfix
  * Fix build failures on platforms where only gmtime() is available but
    neither gmtime_r() nor gmtime_s() are present. Fixes #1907.
- Version 2.13.0
  Security
  * Fix an issue in the X.509 module which could lead to a buffer overread
    during certificate extensions parsing. In case of receiving malformed
    input (extensions length field equal to 0), an illegal read of one byte
    beyond the input buffer is made. Found and analyzed by Nathan Crandall.
  Features
  * Add support for fragmentation of outgoing DTLS handshake messages. This
    is controlled by the maximum fragment length as set locally or negotiated
    with the peer, as well as by a new per-connection MTU option, set using
    mbedtls_ssl_set_mtu().
  * Add support for auto-adjustment of MTU to a safe value during the
    handshake when flights do not get through (RFC 6347, section 4.1.1.1,
    last paragraph).
  * Add support for packing multiple records within a single datagram,
    enabled by default.
  * Add support for buffering out-of-order handshake messages in DTLS.
    The maximum amount of RAM used for this can be controlled by the
    compile-time constant MBEDTLS_SSL_DTLS_MAX_BUFFERING defined
    in mbedtls/config.h.
  API Changes
  * Add function mbedtls_ssl_set_datagram_packing() to configure
    the use of datagram packing (enabled by default).
  Bugfix
  * Fix a potential memory leak in mbedtls_ssl_setup() function. An allocation
    failure in the function could lead to other buffers being leaked.
  * Fixes an issue with MBEDTLS_CHACHAPOLY_C which would not compile if
    MBEDTLS_ARC4_C and MBEDTLS_CIPHER_NULL_CIPHER weren't also defined. #1890
  * Fix a memory leak in ecp_mul_comb() if ecp_precompute_comb() fails.
    Fix contributed by Espressif Systems.
  * Add ecc extensions only if an ecc based ciphersuite is used.
    This improves compliance to RFC 4492, and as a result, solves
    interoperability issues with BouncyCastle. Raised by milenamil in #1157.
  * Replace printf with mbedtls_printf in the ARIA module. Found by
    TrinityTonic in #1908.
  * Fix potential use-after-free in mbedtls_ssl_get_max_frag_len()
    and mbedtls_ssl_get_record_expansion() after a session reset. Fixes #1941.
  * Fix a bug that caused SSL/TLS clients to incorrectly abort the handshake
    with TLS versions 1.1 and earlier when the server requested authentication
    without providing a list of CAs. This was due to an overly strict bounds
    check in parsing the CertificateRequest message,
    introduced in Mbed TLS 2.12.0. Fixes #1954.
  * Fix a miscalculation of the maximum record expansion in
    mbedtls_ssl_get_record_expansion() in case of ChachaPoly ciphersuites,
    or CBC ciphersuites in (D)TLS versions 1.1 or higher. Fixes #1913, #1914.
  * Fix undefined shifts with negative values in certificates parsing
    (found by Catena cyber using oss-fuzz)
  * Fix memory leak and free without initialization in pk_encrypt
    and pk_decrypt example programs. Reported by Brace Stout. Fixes #1128.
  * Remove redundant else statement. Raised by irwir. Fixes #1776.
  Changes
  * Copy headers preserving timestamps when doing a "make install".
    Contributed by xueruini.
  * Allow the forward declaration of public structs. Contributed by Dawid
    Drozd. Fixes #1215 raised by randombit.
  * Improve compatibility with some alternative CCM implementations by using
    CCM test vectors from RAM.
  * Add support for buffering of out-of-order handshake messages.
  * Add warnings to the documentation of the HKDF module to reduce the risk
    of misusing the mbedtls_hkdf_extract() and mbedtls_hkdf_expand()
    functions. Fixes #1775. Reported by Brian J. Murray.</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1544529601">- Library package version bumped to libmbedtls12</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1546862400">- Update to version 2.16.0:
  Features
  * Add a new config.h option of MBEDTLS_CHECK_PARAMS that enables validation of parameters in the API. This allows detection of obvious misuses of the API, such as passing NULL pointers. The API of existing functions hasn't changed, but requirements on parameters have been made more explicit in the documentation. See the corresponding API documentation for each function to see for which parameter values it is defined. This feature is disabled by default. See its API documentation in config.h for additional steps you have to take when enabling it.
  API Changes
  * The following functions in the random generator modules have been deprecated and replaced as shown below. The new functions change the return type from void to int to allow returning error codes when using MBEDTLS_&lt;MODULE&gt;_ALT for the underlying AES or message digest primitive. Fixes #1798. mbedtls_ctr_drbg_update() -&gt; mbedtls_ctr_drbg_update_ret() mbedtls_hmac_drbg_update() -&gt; mbedtls_hmac_drbg_update_ret()
  * Extend ECDH interface to enable alternative implementations.
  * Deprecate error codes of the form MBEDTLS_ERR_xxx_INVALID_KEY_LENGTH for ARIA, CAMELLIA and Blowfish. These error codes will be replaced by the more generic per-module error codes MBEDTLS_ERR_xxx_BAD_INPUT_DATA.
  * Additional parameter validation checks have been added for the following modules - AES, ARIA, Blowfish, CAMELLIA, CCM, GCM, DHM, ECP, ECDSA, ECDH, ECJPAKE, SHA, Chacha20 and Poly1305, cipher, pk, RSA, and MPI. Where modules have had parameter validation added, existing parameter checks may have changed. Some modules, such as Chacha20 had existing parameter validation whereas other modules had little. This has now been changed so that the same level of validation is present in all modules, and that it is now optional with the MBEDTLS_CHECK_PARAMS flag which by default is off. That means that checks which were previously present by default will no longer be.
  New deprecations
  * Deprecate mbedtls_ctr_drbg_update() and mbedtls_hmac_drbg_update() in favor of functions that can return an error code.
  Bugfix
  * Fix for Clang, which was reporting a warning for the bignum.c inline assembly for AMD64 targets creating string literals greater than those permitted by the ISO C99 standard. Found by Aaron Jones. Fixes #482.
  * Fix runtime error in mbedtls_platform_entropy_poll() when run through qemu user emulation. Reported and fix suggested by randombit. Fixes #1212.
  * Fix an unsafe bounds check when restoring an SSL session from a ticket. This could lead to a buffer overflow, but only in case ticket authentication was broken. Reported and fix suggested by Guido Vranken in #659.
  * Add explicit integer to enumeration type casts to example program programs/pkey/gen_key which previously led to compilation failure on some toolchains. Reported by phoenixmcallister. Fixes #2170.
  * Clarify documentation of mbedtls_ssl_set_own_cert() regarding the absence of check for certificate/key matching. Reported by Attila Molnar, #507.
  * Fix double initialization of ECC hardware that made some accelerators hang.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1567512000">- Update to version 2.16.2:
  * Security improvements and bugfixes
- Use ninja to for build</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1573646400">- Update to version 2.16.3:
  * Security improvements and bugfixes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1585828800">- Update to version 2.16.5:
  * Security improvements and bugfixes</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597665600">- update to 2.23.0:
  a lot of changes see https://github.com/ARMmbed/mbedtls/releases/tag/v2.23.0
  * Fix a side channel vulnerability in modular exponentiation that could reveal an RSA private key used in a secure enclave. Noticed by Sangho Lee, Ming-Wei Shih, Prasun Gera, Taesoo Kim and Hyesoon Kim (Georgia Institute of Technology); and Marcus Peinado (Microsoft Research). Reported by Raoul Strackx (Fortanix) in #3394.
  * Fix side channel in mbedtls_ecp_check_pub_priv() and mbedtls_pk_parse_key() / mbedtls_pk_parse_keyfile() (when loading a private key that didn't include the uncompressed public key), as well as mbedtls_ecp_mul() / mbedtls_ecp_mul_restartable() when called with a NULL f_rng argument. An attacker with access to precise enough timing and memory access information (typically an untrusted operating system attacking a secure enclave) could fully recover the ECC private key. Found and reported by Alejandro Cabrera Aldaya and Billy Brumley.
  * Fix issue in Lucky 13 counter-measure that could make it ineffective when hardware accelerators were used (using one of the MBEDTLS_SHAxxx_ALT macros). This would cause the original Lucky 13 attack to be possible in those configurations, allowing an active network attacker to recover plaintext after repeated timing measurements under some conditions. Reported and fix suggested by Luc Perneel in #3246.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1598875200">- Do not run testsuite in parallel - its not reliable</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1599480000">- Add workaround for failing builds (Python not found) due to
  https://gitlab.kitware.com/cmake/cmake/-/issues/21168</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1599652800">- update to 2.24.0:
  * see https://github.com/ARMmbed/mbedtls/releases/tag/v2.24.0
  * Fix a vulnerability in the verification of X.509 certificates when matching
  the expected common name (the cn argument of mbedtls_x509_crt_verify())
  with the actual certificate name: when the subjecAltName extension is
  present, the expected name was compared to any name in that extension
  regardless of its type. This means that an attacker could for example
  impersonate a 4-bytes or 16-byte domain by getting a certificate for the
  corresponding IPv4 or IPv6 (this would require the attacker to control that
  IP address, though). Similar attacks using other subjectAltName name types
  might be possible.
  * When checking X.509 CRLs, a certificate was only considered as revoked if
  its revocationDate was in the past according to the local clock if
  available. In particular, on builds without MBEDTLS_HAVE_TIME_DATE,
  certificates were never considered as revoked. On builds with
  MBEDTLS_HAVE_TIME_DATE, an attacker able to control the local clock (for
  example, an untrusted OS attacking a secure enclave) could prevent
  revocation of certificates via CRLs. Fixed by no longer checking the
  revocationDate field, in accordance with RFC 5280. Reported by yuemonangong
  in #3340. Reported independently and fixed by Raoul Strackx and Jethro
  * In (D)TLS record decryption, when using a CBC ciphersuites without the
  Encrypt-then-Mac extension, use constant code flow memory access patterns
  to extract and check the MAC. This is an improvement to the existing
  countermeasure against Lucky 13 attacks. The previous countermeasure was
  effective against network-based attackers, but less so against local
  attackers. The new countermeasure defends against local attackers, even if
  they have access to fine-grained measurements. In particular, this fixes a
  local Lucky 13 cache attack found and reported by Tuba Yavuz, Farhaan
  Fowze, Ken (Yihan) Bai, Grant Hernandez, and Kevin Butler (University of
  Florida) and Dave Tian (Purdue University).
  * Fix side channel in RSA private key operations and static (finite-field)
  Diffie-Hellman. An adversary with precise enough timing and memory access
  information (typically an untrusted operating system attacking a secure
  enclave) could bypass an existing counter-measure (base blinding) and
  potentially fully recover the private key.
  * Fix a 1-byte buffer overread in mbedtls_x509_crl_parse_der(). Credit to
  OSS-Fuzz for detecting the problem and to Philippe Antoine for pinpointing
  the problematic code.
  * Zeroising of plaintext buffers in mbedtls_ssl_read() to erase unused
  application data from memory.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1608638400">- update to 2.25.0:
  * This release of Mbed TLS provides bug fixes, minor enhancements and new
  features. This release includes fixes for security issues.
  * see https://github.com/ARMmbed/mbedtls/releases/tag/v2.25.0
  * The functions mbedtls_cipher_auth_encrypt() and
  mbedtls_cipher_auth_decrypt() would write past the minimum documented size
  of the output buffer when used with NIST_KW. As a result, code using those
  functions as documented with NIST_KW could have a buffer overwrite of up to
  15 bytes, with consequences ranging up to arbitrary code execution
  depending on the location of the output buffer.
  * Limit the size of calculations performed by mbedtls_mpi_exp_mod to
  MBEDTLS_MPI_MAX_SIZE to prevent a potential denial of service when generating
  Diffie-Hellman key pairs. Credit to OSS-Fuzz.
  * A failure of the random generator was ignored in mbedtls_mpi_fill_random(),
  which is how most uses of randomization in asymmetric cryptography (including
  key generation, intermediate value randomization and blinding) are implemented.
  This could cause failures or the silent use of non-random values. A random
  generator can fail if it needs reseeding and cannot not obtain entropy, or due
  to an internal failure (which, for Mbed TLS's own CTR_DRBG or HMAC_DRBG, can
  only happen due to a misconfiguration).
  * Fix a compliance issue whereby we were not checking the tag on the algorithm
  parameters (only the size) when comparing the signature in the description part
  of the cert to the real signature. This meant that a NULL algorithm parameters
  entry would look identical to an array of REAL (size zero) to the library and
  thus the certificate would be considered valid. However, if the parameters do
  not match in any way then the certificate should be considered invalid, and
  indeed OpenSSL marks these certs as invalid when mbedtls did not. Many thanks
  to guidovranken who found this issue via differential fuzzing and reported it
  in #3629.
  * Zeroising of local buffers and variables which are used for calculations in
  mbedtls_pkcs5_pbkdf2_hmac(), mbedtls_internal_sha*_process(),
  mbedtls_internal_md*_process() and mbedtls_internal_ripemd160_process()
  functions to erase sensitive data from memory. Reported by Johan Malmgren and
  Johan Uppman Bruce from Sectra.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1611057600">- Fix build for Leap targets
- Use upstream tarball name</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1616414400">- Update to 2.26.0: [bsc#1189589, CVE-2021-24119]
  * * This release of Mbed TLS provides bug fixes, minor enhancements and new
  features. This release includes fixes for security issues.
  * see https://github.com/ARMmbed/mbedtls/releases/tag/v2.26.0
- Fix build with patch from https://github.com/ARMmbed/mbedtls/pull/4237
  mbedtls-4237.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1618488000">-  Workaround for building with gcc-11 boo#1181876</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1626782400">- Update to 2.27.0:
  API changes:
  * Update AEAD output size macros to bring them in line with the PSA Crypto
    API version 1.0 spec. This version of the spec parameterizes them on the
    key type used, as well as the key bit-size in the case of
    PSA_AEAD_TAG_LENGTH.
    The old versions of these macros were renamed and deprecated as follows:
  - PSA_AEAD_TAG_LENGTH          -&gt; PSA_AEAD_TAG_LENGTH_1_ARG
  - PSA_AEAD_ENCRYPT_OUTPUT_SIZE -&gt; PSA_AEAD_ENCRYPT_OUTPUT_SIZE_2_ARG
  - PSA_AEAD_DECRYPT_OUTPUT_SIZE -&gt; PSA_AEAD_DECRYPT_OUTPUT_SIZE_2_ARG
  - PSA_AEAD_UPDATE_OUTPUT_SIZE  -&gt; PSA_AEAD_UPDATE_OUTPUT_SIZE_2_ARG
  - PSA_AEAD_FINISH_OUTPUT_SIZE  -&gt; PSA_AEAD_FINISH_OUTPUT_SIZE_1_ARG
  - PSA_AEAD_VERIFY_OUTPUT_SIZE  -&gt; PSA_AEAD_VERIFY_OUTPUT_SIZE_1_ARG
  * Implement one-shot cipher functions, psa_cipher_encrypt and
    psa_cipher_decrypt, according to the PSA Crypto API 1.0.0
    specification.
  Features:
  * Add mbedtls_rsa_rsassa_pss_sign_ext() function allowing to generate a
    signature with a specific salt length. This function allows to validate
    test cases provided in the NIST's CAVP test suite.
  * Added support for built-in driver keys through the PSA opaque crypto
    driver interface. Refer to the documentation of
    MBEDTLS_PSA_CRYPTO_BUILTIN_KEYS for more information.
  * Implement psa_sign_message() and psa_verify_message().
  * The new function mbedtls_mpi_random() generates a random value in a
    given range uniformly.
  * Implement psa_mac_compute() and psa_mac_verify() as defined in the
    PSA Cryptograpy API 1.0.0 specification.
  * MBEDTLS_ECP_MAX_BITS is now determined automatically from the configured
    curves and no longer needs to be configured explicitly to save RAM.
  Security
  * Fix a bias in the generation of finite-field Diffie-Hellman-Merkle (DHM)
    private keys and of blinding values for DHM and elliptic curves (ECP)
    computations.
  * Fix a potential side channel vulnerability in ECDSA ephemeral key generation.
    An adversary who is capable of very precise timing measurements could
    learn partial information about the leading bits of the nonce used for the
    signature, allowing the recovery of the private key after observing a
    large number of signature operations. This completes a partial fix in
    Mbed TLS 2.20.0.
  * It was possible to configure MBEDTLS_ECP_MAX_BITS to a value that is
    too small, leading to buffer overflows in ECC operations. Fail the build
    in such a case.
  * An adversary with access to precise enough information about memory
    accesses (typically, an untrusted operating system attacking a secure
    enclave) could recover an RSA private key after observing the victim
    performing a single private-key operation.
  * An adversary with access to precise enough timing information (typically, a
    co-located process) could recover a Curve25519 or Curve448 static ECDH key
    after inputting a chosen public key and observing the victim performing the
    corresponding private-key operation.
  Bugfix
  * Add printf function attributes to mbedtls_debug_print_msg to ensure we
    get printf format specifier warnings.
  * Fix premature fopen() call in mbedtls_entropy_write_seed_file which may
    lead to seed file corruption in the case where the path to the seed file is
    equal to MBEDTLS_PLATFORM_STD_NV_SEED_FILE.
  * PSA functions other than psa_open_key now return PSA_ERROR_INVALID_HANDLE
    rather than PSA_ERROR_DOES_NOT_EXIST for an invalid handle, bringing them
    in line with version 1.0.0 of the specification.
  * PSA functions creating a key now return PSA_ERROR_INVALID_ARGUMENT rather
    than PSA_ERROR_INVALID_HANDLE when the identifier specified for the key
    to create is not valid, bringing them in line with version 1.0.0 of the
    specification.
  * Fix some cases in the bignum module where the library constructed an
    unintended representation of the value 0 which was not processed
    correctly by some bignum operations. This could happen when
    mbedtls_mpi_read_string() was called on "-0", or when
    mbedtls_mpi_mul_mpi() and mbedtls_mpi_mul_int() was called with one of
    the arguments being negative and the other being 0.
  * Fix a bug in ECDSA that would cause it to fail when the hash is all-bits
    zero.
  * Fix a compilation error when MBEDTLS_ECP_RANDOMIZE_MXZ_ALT is
    defined.
  * Fix an incorrect error code when parsing a PKCS#8 private key.
  * In a TLS client, enforce the Diffie-Hellman minimum parameter size
    set with mbedtls_ssl_conf_dhm_min_bitlen() precisely. Before, the
    minimum size was rounded down to the nearest multiple of 8.
  * In library/net_sockets.c, _POSIX_C_SOURCE and _XOPEN_SOURCE are
    defined to specific values.  If the code is used in a context
    where these are already defined, this can result in a compilation
    error.  Instead, assume that if they are defined, the values will
    be adequate to build Mbed TLS.
  * The cipher suite TLS-RSA-WITH-CAMELLIA-256-GCM-SHA384 was not available
    when SHA-1 was disabled and was offered when SHA-1 was enabled but SHA-384
    was disabled. Fix the dependency.
  * Do not offer SHA384 cipher suites when SHA-384 is disabled.
  * With MBEDTLS_PSA_CRYPTO_C disabled, some functions were getting built
    nonetheless, resulting in undefined reference errors when building a
    shared library.
  * Fix test suite code on platforms where int32_t is not int, such as
    Arm Cortex-M.
  * Fix some issues affecting MBEDTLS_ARIA_ALT implementations: a misplaced
    directive in a header and a missing initialization in the self-test.
  * Fix a missing initialization in the Camellia self-test, affecting
    MBEDTLS_CAMELLIA_ALT implementations.
  * Restore the ability to configure PSA via Mbed TLS options to support RSA
    key pair operations but exclude RSA key generation. When MBEDTLS_GENPRIME
    is not defined PSA will no longer attempt to use mbedtls_rsa_gen_key().
  * Fix a regression introduced in 2.24.0 which broke (D)TLS CBC ciphersuites
    (when the encrypt-then-MAC extension is not in use) with some ALT
    implementations of the underlying hash (SHA-1, SHA-256, SHA-384), causing
    the affected side to wrongly reject valid messages.
  * Remove outdated check-config.h check that prevented implementing the
    timing module on Mbed OS.
  * Fix PSA_ALG_TLS12_PRF and PSA_ALG_TLS12_PSK_TO_MS being too permissive
    about missing inputs.
  * Fix a resource leak in a test suite with an alternative AES
    implementation.
  * Fix a crash in mbedtls_mpi_debug_mpi on a bignum having 0 limbs. This
    could notably be triggered by setting the TLS debug level to 3 or above
    and using a Montgomery curve for the key exchange.
  * psa_verify_hash() was relying on implementation-specific behavior of
    mbedtls_rsa_rsassa_pss_verify() and was causing failures in some _ALT
    implementations. This reliance is now removed.
  * Disallow inputs of length different from the corresponding hash when
    signing or verifying with PSA_ALG_RSA_PSS (The PSA Crypto API mandates
    that PSA_ALG_RSA_PSS uses the same hash throughout the algorithm.)
  * Fix a null pointer dereference when mbedtls_mpi_exp_mod() was called with
    A=0 represented with 0 limbs. Up to and including Mbed TLS 2.26, this bug
    could not be triggered by code that constructed A with one of the
    mbedtls_mpi_read_xxx functions (including in particular TLS code) since
    those always built an mpi object with at least one limb.
  * Fix mbedtls_mpi_gcd(G,A,B) when the value of B is zero. This had no
    effect on Mbed TLS's internal use of mbedtls_mpi_gcd(), but may affect
    applications that call mbedtls_mpi_gcd() directly.
  * The PSA API no longer allows the creation or destruction of keys with a
    read-only lifetime. The persistence level PSA_KEY_PERSISTENCE_READ_ONLY
    can now only be used as intended, for keys that cannot be modified through
    normal use of the API.
  * When MBEDTLS_PSA_CRYPTO_SPM is enabled, crypto_spe.h was not included
    in all the right places. Include it from crypto_platform.h, which is
    the natural place.
  * mbedtls_pk_sign() and mbedtls_pk_verify() and their extended and
    restartable variants now always honor the specified hash length if
    nonzero. Before, for RSA, hash_len was ignored in favor of the length of
    the specified hash algorithm.
  * Fix which alert is sent in some cases to conform to the
    applicable RFC: on an invalid Finished message value, an
    invalid max_fragment_length extension, or an
    unsupported extension used by the server.
  * Correct (change from 12 to 13 bytes) the value of the macro describing the
    maximum nonce length returned by psa_aead_generate_nonce().
  Changes
  * Add extra printf compiler warning flags to builds.
  * Fix memsan build false positive in x509_crt.c with Clang 11
  * Fix the setting of the read timeout in the DTLS sample programs.
  * Remove the AES sample application programs/aes/aescrypt2 which shows
    bad cryptographic practice.
  * Alternative implementations of CMAC may now opt to not support 3DES as a
    CMAC block cipher, and still pass the CMAC self test.
  * Remove configs/config-psa-crypto.h, which was identical to the default
    configuration except for having some extra cryptographic mechanisms
    enabled and for unintended differences. This configuration was primarily
    intended to demonstrate the PSA API, and lost most of its usefulness when
    MBEDTLS_PSA_CRYPTO_C became enabled by default.
  * When building the test suites with GNU make, invoke python3 or python, not
    python2, which is no longer supported upstream.
  * When using session cache based session resumption on the server,
    double-check that custom session cache implementations return
    sessions which are consistent with the negotiated ciphersuite
    and compression method.
  * Fix build failure on MinGW toolchain when __USE_MING_ANSI_STDIO is on.
    When that flag is on, standard GNU C printf format specifiers
    should be used.
  * Reduce the default value of MBEDTLS_ECP_WINDOW_SIZE. This reduces RAM usage
    during ECC operations at a negligible performance cost.
  * mbedtls_mpi_read_binary(), mbedtls_mpi_read_binary_le() and
    mbedtls_mpi_read_string() now construct an mbedtls_mpi object with 0 limbs
    when their input has length 0. Note that this is an implementation detail
    and can change at any time, so this change should be transparent, but it
    may result in mbedtls_mpi_write_binary() or mbedtls_mpi_write_string()
    now writing an empty string where it previously wrote one or more
    zero digits when operating from values constructed with an mpi_read
    function and some mpi operations.
  * Implicitly add PSA_KEY_USAGE_SIGN_MESSAGE key usage policy flag when
    PSA_KEY_USAGE_SIGN_HASH flag is set and PSA_KEY_USAGE_VERIFY_MESSAGE flag
    when PSA_KEY_USAGE_VERIFY_HASH flag is set. This usage flag extension
    is also applied when loading a key from storage.
  * Remove mbedtls-4237.patch upstream
  * Library soname bump to libmbedcrypto7</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1642075200">- Update to 2.28.0: (bsc#1193979, CVE-2021-45450)
  API changes
  * Some fields of mbedtls_ssl_session and mbedtls_ssl_config are in a
  different order. This only affects applications that define such
  structures directly or serialize them.
  Requirement changes
  * Sign-magnitude and one's complement representations for signed integers are
  not supported. Two's complement is the only supported representation.
  Removals
  * Remove config option MBEDTLS_TLS_DEFAULT_ALLOW_SHA1_IN_CERTIFICATES,
  which allowed SHA-1 in the default TLS configuration for certificate
  signing. It was intended to facilitate the transition in environments
  with SHA-1 certificates. SHA-1 is considered a weak message digest and
  its use constitutes a security risk.
  * Remove the partial support for running unit tests via Greentea on Mbed OS,
  which had been unmaintained since 2018.
  Features
  * The identifier of the CID TLS extension can be configured by defining
  MBEDTLS_TLS_EXT_CID at compile time.
  * Warn if errors from certain functions are ignored. This is currently
  supported on GCC-like compilers and on MSVC and can be configured through
  the macro MBEDTLS_CHECK_RETURN. The warnings are always enabled
  (where supported) for critical functions where ignoring the return
  value is almost always a bug. Enable the new configuration option
  MBEDTLS_CHECK_RETURN_WARNING to get warnings for other functions. This
  is currently implemented in the AES, DES and md modules, and will be
  extended to other modules in the future.
  * Add missing PSA macros declared by PSA Crypto API 1.0.0:
  PSA_ALG_IS_SIGN_HASH, PSA_ALG_NONE, PSA_HASH_BLOCK_LENGTH, PSA_KEY_ID_NULL.
  * Add new API mbedtls_ct_memcmp for constant time buffer comparison.
  * Add PSA API definition for ARIA.
  Security
  * Zeroize several intermediate variables used to calculate the expected
  value when verifying a MAC or AEAD tag. This hardens the library in
  case the value leaks through a memory disclosure vulnerability. For
  example, a memory disclosure vulnerability could have allowed a
  man-in-the-middle to inject fake ciphertext into a DTLS connection.
  * In psa_cipher_generate_iv() and psa_cipher_encrypt(), do not read back
  from the output buffer. This fixes a potential policy bypass or decryption
  oracle vulnerability if the output buffer is in memory that is shared with
  an untrusted application.
  * Fix a double-free that happened after mbedtls_ssl_set_session() or
  mbedtls_ssl_get_session() failed with MBEDTLS_ERR_SSL_ALLOC_FAILED
  (out of memory). After that, calling mbedtls_ssl_session_free()
  and mbedtls_ssl_free() would cause an internal session buffer to
  be free()'d twice.
  Bugfix
  * Stop using reserved identifiers as local variables. Fixes #4630.
  * The GNU makefiles invoke python3 in preference to python except on Windows.
  * The check was accidentally not performed when cross-compiling for Windows
  on Linux. Fix this. Fixes #4774.
  * Prevent divide by zero if either of PSA_CIPHER_ENCRYPT_OUTPUT_SIZE() or
  PSA_CIPHER_UPDATE_OUTPUT_SIZE() were called using an asymmetric key type.
  * Fix a parameter set but unused in psa_crypto_cipher.c. Fixes #4935.
  * Don't use the obsolete header path sys/fcntl.h in unit tests.
  These header files cause compilation errors in musl.
  Fixes #4969.
  * Fix missing constraints on x86_64 and aarch64 assembly code
  for bignum multiplication that broke some bignum operations with
  (at least) Clang 12.
  Fixes #4116, #4786, #4917, #4962.
  * Fix mbedtls_cipher_crypt: AES-ECB when MBEDTLS_USE_PSA_CRYPTO is enabled.
  * Failures of alternative implementations of AES or DES single-block
  functions enabled with MBEDTLS_AES_ENCRYPT_ALT, MBEDTLS_AES_DECRYPT_ALT,
  MBEDTLS_DES_CRYPT_ECB_ALT or MBEDTLS_DES3_CRYPT_ECB_ALT were ignored.
  This does not concern the implementation provided with Mbed TLS,
  where this function cannot fail, or full-module replacements with
  MBEDTLS_AES_ALT or MBEDTLS_DES_ALT. Reported by Armelle Duboc in #1092.
  * Some failures of HMAC operations were ignored. These failures could only
  happen with an alternative implementation of the underlying hash module.
  * Fix the error returned by psa_generate_key() for a public key. Fixes #4551.
  * Fix the build of sample programs when neither MBEDTLS_ERROR_C nor
  MBEDTLS_ERROR_STRERROR_DUMMY is enabled.
  * Fix PSA_ALG_RSA_PSS verification accepting an arbitrary salt length.
  This algorithm now accepts only the same salt length for verification
  that it produces when signing, as documented. Use the new algorithm
  PSA_ALG_RSA_PSS_ANY_SALT to accept any salt length. Fixes #4946.
  * The existing predicate macro name PSA_ALG_IS_HASH_AND_SIGN is now reserved
  for algorithm values that fully encode the hashing step, as per the PSA
  Crypto API specification. This excludes PSA_ALG_RSA_PKCS1V15_SIGN_RAW and
  PSA_ALG_ECDSA_ANY. The new predicate macro PSA_ALG_IS_SIGN_HASH covers
  all algorithms that can be used with psa_{sign,verify}_hash(), including
  these two.
  * Fix issue in Makefile on Linux with SHARED=1, that caused shared libraries
  not to list other shared libraries they need.
  * Fix a bug in mbedtls_gcm_starts() when the bit length of the iv
  exceeds 2^32. Fixes #4884.
  * Fix an uninitialized variable warning in test_suite_ssl.function with GCC
  version 11.
  * Fix the build when no SHA2 module is included. Fixes #4930.
  * Fix the build when only the bignum module is included. Fixes #4929.
  * Fix a potential invalid pointer dereference and infinite loop bugs in
  pkcs12 functions when the password is empty. Fix the documentation to
  better describe the inputs to these functions and their possible values.
  Fixes #5136.
  * The key usage flags PSA_KEY_USAGE_SIGN_MESSAGE now allows the MAC
  operations psa_mac_compute() and psa_mac_sign_setup().
  * The key usage flags PSA_KEY_USAGE_VERIFY_MESSAGE now allows the MAC
  operations psa_mac_verify() and psa_mac_verify_setup().
  Changes
  * Set config option MBEDTLS_TLS_DEFAULT_ALLOW_SHA1_IN_KEY_EXCHANGE to be
  disabled by default.
  * Improve the performance of base64 constant-flow code. The result is still
  slower than the original non-constant-flow implementation, but much faster
  than the previous constant-flow implementation. Fixes #4814.
  * Indicate in the error returned if the nonce length used with
  ChaCha20-Poly1305 is invalid, and not just unsupported.
  * The mbedcrypto library includes a new source code module constant_time.c,
  containing various functions meant to resist timing side channel attacks.
  * This module does not have a separate configuration option, and functions
  from this module will be included in the build as required. Currently
  most of the interface of this module is private and may change at any
  time.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1642420800">- Fix baselib.conf</changelog>
  <changelog author="Alexander Bergmann &lt;abergmann@suse.com&gt;" date="1671624000">- Fix potential heap buffer overread and overwrite in DTLS if
  MBEDTLS_SSL_DTLS_CONNECTION_ID is enabled and
  MBEDTLS_SSL_CID_IN_LEN_MAX &gt; 2 * MBEDTLS_SSL_CID_OUT_LEN_MAX.
  (bsc#1206576, CVE-2022-46393).
  Add: mbedtls-CVE-2022-46393.patch</changelog>
</package>
<package pkgid="71e3e4fd162c3038629aa591b25c8a2566933f0e428852347b5935e9a96cb2fc" name="libmbedtls14" arch="i586">
  <version epoch="0" ver="2.28.0" rel="bp154.2.3.1"/>
  <changelog author="mpluskal@suse.com" date="1531137600">- Update to version 2.11.0:
  * Features
    + Added support for the XTS block cipher mode with AES (AES-XTS). Contributed by Aorimn in pull request #414.
    + Implemented the HMAC-based extract-and-expand key derivation function (HKDF) per RFC 5869. Contributed by Thomas Fossati.
    + For TLS servers, added support for offloading private key operations to an external cryptoprocessor. Private key operations can be asynchronous to allow non-blocking operation of the TLS server stack.
    + Added support for ARIA cipher (RFC 5794) and associated TLS ciphersuites (RFC 6209). ARIA is disabled by default. To enable, see MBEDTLS_ARIA_C in config.h.
    + Added support for the CCM* block cipher mode as defined in IEEE Std 802.15.4.
    + Added an additional block mode, OFB (Output Feedback) per NIST SP 800-38a, to the AES module and cipher abstraction module.
  * API Changes
    + Mbed TLS 2.11.0 maintains source code compatibility with the last minor version, Mbed TLS 2.9.0, but extends the interface with additional capabilities. Mbed TLS 2.11.0 modifies the ABI and increases the SOVERSION.
  * Bugfix
    + Fixed the cert_write example to handle certificates signed with elliptic curves as well as RSA. Fixes #777 found by dbedev.
    + Fixed the redefinition of _WIN32_WINNT, to avoid overriding a definition used by user applications. Found and fixed by Fabio Alessandrelli.
    + Fixed compilation warnings with the IAR toolchain on 32-bit platforms. Reported by rahmanih in #683.
    + Fixed an issue with MicroBlaze support in bn_mul.h which was causing the build to fail. Found by zv-io. Fixes #1651.
    + Fixed braces in mbedtls_memory_buffer_alloc_status(). Found by sbranden in #552.
    + Added the macro MBEDTLS_X509_MAX_FILE_PATH_LEN that enables the user to configure the maximum length of a file path that can be buffered when calling mbedtls_x509_crt_parse_path(). Fixes #492.
    + Fixed redundant declaration of mbedtls_ssl_list_ciphersuites. Raised by TrinityTonic in #1359.
- Changes for version 2.9.0:
  + Security
    + Fixed an issue in the X.509 module which could lead to a buffer overread during certificate validation. Additionally, the issue could also lead to unnecessary callback checks being made or to some validation checks to be omitted. The overread could be triggered remotely, while the other issues would require a non DER-compliant certificate to be correctly signed by a trusted CA, or a trusted CA with a non DER-compliant certificate. Found by luocm. Fixes #825.
    + Fixed the buffer length assertion in the ssl_parse_certificate_request() function which could lead to an arbitrary overread of the message buffer. The overreads could be caused by receiving a malformed algorithms section which was too short. In builds with debug output, this overread data was output with the debug data.
    + Fixed a client-side bug in the validation of the server's ciphersuite choice which could potentially lead to the client accepting a ciphersuite it didn't offer or a ciphersuite that could not be used with the TLS or DTLS version chosen by the server. This could lead to corruption of internal data structures for some configurations.
  * Features
    + Added an option of MBEDTLS_AES_FEWER_TABLES, to dynamically compute smaller AES tables during runtime, thereby reducing the RAM/ROM footprint by ~6KiB. Suggested and contributed by jkivilin.
    + Added initial support for Curve448 (RFC 7748). So far only mbedtls_ecp_mul() and ECDH primitive functions (mbedtls_ecdh_gen_public(), mbedtls_ecdh_compute_shared()) are supported for now. Contributed by Nicholas Wilson.
  * API Changes
    + Mbed TLS 2.9.0 maintains source code and binary compatibility with the last minor version, Mbed TLS 2.8.0, but extends the interface with additional capabilities.
    + Extended the API with the function of mbedtls_net_poll() to allow user applications to wait for a network context to become ready before reading or writing.
    + Added the function mbedtls_ssl_check_pending() to the public API to allow a check for whether more more data is pending to be processed in the internal message buffers. This function is necessary to determine the underlying transport when event-driven IO is used.
  * Bugfix
    + Fixed a spurious uninitialized variable warning in cmac.c. Fix independently contributed by Brian J Murray and David Brown.
    + Added missing dependencies in test suites that led to build failures in configurations that omit certain hashes or public-key algorithms. Fixes #1040.
    + Fixed a C89 incompatibility issue in benchmark.c. Contributed by Brendan Shanks. Fixes #1353.
    + Added missing dependencies for MBEDTLS_HAVE_TIME_DATE and MBEDTLS_VERSION_FEATURES in some test suites. Contributed by Deomid Ryabkov. Fixes #1299, #1475.
    + Fixed the Makefile build process for building shared libraries on Mac OS X. Fixed by mnacamura.
    + Fixed parsing of PKCS#8 encoded Elliptic Curve keys. Previously Mbed TLS was unable to parse keys which had only the optional parameters field of the ECPrivateKey structure. Found by Jethro Beekman, fixed in #1379.
    + Added an optimisation to return the plaintext data more quickly on unpadded CBC decryption, as stated in the mbedtls_cipher_update() documentation. Contributed by Andy Leiserson.
    + Fixed the overriding and ignoring of return values when parsing and writing to a file in the pk_sign program. Found by kevlut in #1142.
    + Added restrictions to the usage of the error code MBEDTLS_ERR_SSL_WANT_READ to situations where data needs to be fetched from the underlying transport in order to make progress. Previously, this error code was also occasionally returned when unexpected messages were being discarded, ignoring that further messages could potentially already be pending to be processed in the internal buffers; these cases led to deadlocks when event-driven I/O was used. Found and reported by Hubert Mis in #772.
    + Fixed buffer length assertions in the ssl_parse_certificate_request() function which led to a potential one byte overread of the message buffer.
    + Fixed invalid buffer sizes being passed to zlib during record compression and decompression.
    + Raised the soversion of libmbedcrypto to match the soversion of the maintained 2.7 branch. The soversion was increased in Mbed TLS version 2.7.1 to reflect breaking changes in that release, but the increment was missed in 2.8.0 and later releases outside of the 2.7 branch.</changelog>
  <changelog author="mpluskal@suse.com" date="1535025600">- Update to version 2.12.0:
  * Security
    + Fixed a vulnerability in the TLS ciphersuites based on use of CBC and SHA-384 in DTLS/TLS 1.0 to 1.2, that allowed an active network attacker to partially recover the plaintext of messages under certains conditions by exploiting timing side-channels.
    + Fixed a vulnerability in TLS ciphersuites based on CBC, in DTLS/TLS 1.0 to 1.2, that allowed a local attacker, with the ability to execute code on the local machine as well as to manipulate network packets, to partially recover the plaintext of messages under certain conditions by using a cache attack targetting an internal MD/SHA buffer.
    + Added a counter-measure against a vulnerability in TLS ciphersuites based on CBC, in DTLS/TLS 1.0 to 1.2, that allowed a local attacker with the ability to execute code on the local machine as well as manipulate network packets, to partially recover the plaintext of messages certain conditions (see previous entry) by using a cache attack targeting the SSL input record buffer.
  * Features
    + Added new cryptographic primitives, the stream cipher Chacha20, one-time authenticator Poly1305 and AEAD construct Chacha20-Poly1305, as defined in RFC 7539. Contributed by Daniel King.
    + Added support for the CHACHA20-POLY1305 ciphersuites from RFC 7905.
    + Made the receive and transmit buffers independently configurable in size, for situations where the outgoing buffer can be fixed at a smaller size than the incoming buffer
    + Added support for the AES based key wrapping modes defined by NIST SP 800-38F algorithms KW and KWP and by RFC's 3394 and 5649.
    + Added platform support for the Haiku OS.
  * Bugfix
    + Fixed the key_app_writer example which was creating an invalid ASN.1 tag by writing an additional leading zero byte. Found by Aryeh R. #1257.
    + Fixed a C++ compilation error, caused by a variable named new. Found and fixed by Hirotaka Niisato. #1783.
    + Fixed the "no symbols" warning issued by ranlib when building on Mac OS X. Fix contributed by tabascoeye.
    + Clarified documentation for mbedtls_ssl_write() to include 0 as a valid return value. Found by @davidwu2000. #839.
    + Fixed a memory leak in mbedtls_x509_csr_parse(). Found and fixed by catenacyber, Philippe Antoine. #1623.
    + Added length checks to some TLS parsing functions. Found and fixed by Philippe Antoine from Catena cyber. #1663.
    + Remove unused headers included in x509.c. Found by Chris Hanson and fixed by Brendan Shanks. #992.
    + Fixed compilation error when MBEDTLS_ARC4_C is disabled and MBEDTLS_CIPHER_NULL_CIPHER is enabled. Found by TrinityTonic in #1719.
    + Fixed the inline assembly for the MPI multiply helper function for i386 and i386 with SSE2. Found by László Langó. #1550.
    + Fixed the namespacing in header files. Remove the mbedtls namespacing in the #include in the header files. #857.
    + Fixed a compiler warning of 'use before initialisation' in mbedtls_pk_parse_key(). Found by Martin Boye Petersen and fixed by Dawid Drozd.#1098.
    + Fixed decryption of zero length messages (which contain all padding) when a CBC based ciphersuite was used together with Encrypt-then-MAC.
    + Fixed the ssl_client2 example to send application data with 0-length content when the request_size argument is set to 0 as stated in the documentation. #1833.
    + Corrected the documentation for mbedtls_ssl_get_session(). This API has deep copy of the session, and the peer certificate is not lost. #926.
    + Fixed issues when building to the C99 standard, using -std=c99. Fixed by Nick Wilson.
  * Changes
    + Fails when receiving a TLS alert message with an invalid length, or invalid zero-length messages when using TLS 1.2. Contributed by Espressif Systems.
    + Changed the default behaviour of mbedtls_hkdf_extract() to return an error when calling with a NULL salt and non-zero salt length. Contributed by Brian J Murray
    + Change the shebang line in Perl scripts to look up perl in the PATH. Contributed by fbrosson.
    + Allow overriding the time on Windows via the platform-time abstraction. Fixed by Nick Wilson.
    + Use gmtime_r/gmtime_s for thread-safety. Fixed by Nick Wilson.</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1544529600">- Update to version 2.14.1: [bsc#1118727, CVE-2018-19608]
  Security
  * Fix timing variations and memory access variations in RSA PKCS#1 v1.5
    decryption that could lead to a Bleichenbacher-style padding oracle
    attack. In TLS, this affects servers that accept ciphersuites based on
    RSA decryption (i.e. ciphersuites whose name contains RSA but not
    (EC)DH(E)). Discovered by Eyal Ronen (Weizmann Institute),  Robert Gillham
    (University of Adelaide), Daniel Genkin (University of Michigan),
    Adi Shamir (Weizmann Institute), David Wong (NCC Group), and Yuval Yarom
    (University of Adelaide, Data61). The attack is described in more detail
    in the paper available here: http://cat.eyalro.net/cat.pdf  CVE-2018-19608
  * In mbedtls_mpi_write_binary(), don't leak the exact size of the number
    via branching and memory access patterns. An attacker who could submit
    a plaintext for RSA PKCS#1 v1.5 decryption but only observe the timing
    of the decryption and not its result could nonetheless decrypt RSA
    plaintexts and forge RSA signatures. Other asymmetric algorithms may
    have been similarly vulnerable. Reported by Eyal Ronen, Robert Gillham,
    Daniel Genkin, Adi Shamir, David Wong and Yuval Yarom.
  * Wipe sensitive buffers on the stack in the CTR_DRBG and HMAC_DRBG
    modules.
  API Changes
  * The new functions mbedtls_ctr_drbg_update_ret() and
    mbedtls_hmac_drbg_update_ret() are similar to mbedtls_ctr_drbg_update()
    and mbedtls_hmac_drbg_update() respectively, but the new functions
    report errors whereas the old functions return void. We recommend that
    applications use the new functions.
- Version 2.14.0:
  Security
  * Fix overly strict DN comparison when looking for CRLs belonging to a
    particular CA. This previously led to ignoring CRLs when the CRL's issuer
    name and the CA's subject name differed in their string encoding (e.g.,
    one using PrintableString and the other UTF8String) or in the choice of
    upper and lower case. Reported by Henrik Andersson of Bosch GmbH in issue
    [#1784].
  * Fix a flawed bounds check in server PSK hint parsing. In case the
    incoming message buffer was placed within the first 64KiB of address
    space and a PSK-(EC)DHE ciphersuite was used, this allowed an attacker
    to trigger a memory access up to 64KiB beyond the incoming message buffer,
    potentially leading to an application crash or information disclosure.
  * Fix mbedtls_mpi_is_prime() to use more rounds of probabilistic testing. The
    previous settings for the number of rounds made it practical for an
    adversary to construct non-primes that would be erroneously accepted as
    primes with high probability. This does not have an impact on the
    security of TLS, but can matter in other contexts with numbers chosen
    potentially by an adversary that should be prime and can be validated.
    For example, the number of rounds was enough to securely generate RSA key
    pairs or Diffie-Hellman parameters, but was insufficient to validate
    Diffie-Hellman parameters properly.
    See "Prime and Prejudice" by by Martin R. Albrecht and Jake Massimo and
    Kenneth G. Paterson and Juraj Somorovsky.
  Features
  * Add support for temporarily suspending expensive ECC computations after
    some configurable amount of operations. This is intended to be used in
    constrained, single-threaded systems where ECC is time consuming and can
    block other operations until they complete. This is disabled by default,
    but can be enabled by MBEDTLS_ECP_RESTARTABLE at compile time and
    configured by mbedtls_ecp_set_max_ops() at runtime. It applies to the new
    xxx_restartable functions in ECP, ECDSA, PK and X.509 (CRL not supported
    yet), and to existing functions in ECDH and SSL (currently only
    implemented client-side, for ECDHE-ECDSA ciphersuites in TLS 1.2,
    including client authentication).
  * Add support for Arm CPU DSP extensions to accelerate asymmetric key
    operations. On CPUs where the extensions are available, they can accelerate
    MPI multiplications used in ECC and RSA cryptography. Contributed by
    Aurelien Jarno.
  * Extend RSASSA-PSS signature to allow a smaller salt size. Previously, PSS
    signature always used a salt with the same length as the hash, and returned
    an error if this was not possible. Now the salt size may be up to two bytes
    shorter. This allows the library to support all hash and signature sizes
    that comply with FIPS 186-4, including SHA-512 with a 1024-bit key.
  * Add support for 128-bit keys in CTR_DRBG. Note that using keys shorter
    than 256 bits limits the security of generated material to 128 bits.
  API Changes
  * Add a common error code of `MBEDTLS_ERR_PLATFORM_FEATURE_UNSUPPORTED` for
    a feature that is not supported by underlying alternative
    implementations implementing cryptographic primitives. This is useful for
    hardware accelerators that don't implement all options or features.
  New deprecations
  * All module specific errors following the form
    MBEDTLS_ERR_XXX_FEATURE_UNAVAILABLE that indicate a feature is not
    supported are deprecated and are now replaced by the new equivalent
    platform error.
  * All module specific generic hardware acceleration errors following the
    form MBEDTLS_ERR_XXX_HW_ACCEL_FAILED that are deprecated and are replaced
    by the equivalent plaform error.
  * Deprecate the function mbedtls_mpi_is_prime() in favor of
    mbedtls_mpi_is_prime_ext() which allows specifying the number of
    Miller-Rabin rounds.
  Bugfix
  * Fix wrong order of freeing in programs/ssl/ssl_server2 example
    application leading to a memory leak in case both
    MBEDTLS_MEMORY_BUFFER_ALLOC_C and MBEDTLS_MEMORY_BACKTRACE are set.
    Fixes #2069.
  * Fix a bug in the update function for SSL ticket keys which previously
    invalidated keys of a lifetime of less than a 1s. Fixes #1968.
  * Fix failure in hmac_drbg in the benchmark sample application, when
    MBEDTLS_THREADING_C is defined. Found by TrinityTonic, #1095
  * Fix a bug in the record decryption routine ssl_decrypt_buf()
    which lead to accepting properly authenticated but improperly
    padded records in case of CBC ciphersuites using Encrypt-then-MAC.
  * Fix memory leak and freeing without initialization in the example
    program programs/x509/cert_write. Fixes #1422.
  * Ignore IV in mbedtls_cipher_set_iv() when the cipher mode is
    MBEDTLS_MODE_ECB. Found by ezdevelop. Fixes #1091.
  * Zeroize memory used for buffering or reassembling handshake messages
    after use.
  * Use `mbedtls_platform_zeroize()` instead of `memset()` for zeroization
    of sensitive data in the example programs aescrypt2 and crypt_and_hash.
  * Change the default string format used for various X.509 DN attributes to
    UTF8String. Previously, the use of the PrintableString format led to
    wildcards and non-ASCII characters being unusable in some DN attributes.
    Reported by raprepo in #1860 and by kevinpt in #468. Fix contributed by
    Thomas-Dee.
  * Fix compilation failure for configurations which use compile time
    replacements of standard calloc/free functions through the macros
    MBEDTLS_PLATFORM_CALLOC_MACRO and MBEDTLS_PLATFORM_FREE_MACRO.
    Reported by ole-de and ddhome2006. Fixes #882, #1642 and #1706.
  Changes
  * Removed support for Yotta as a build tool.
  * Add tests for session resumption in DTLS.
  * Close a test gap in (D)TLS between the client side and the server side:
    test the handling of large packets and small packets on the client side
    in the same way as on the server side.
  * Change the dtls_client and dtls_server samples to work by default over
    IPv6 and optionally by a build option over IPv4.
  * Change the use of Windows threading to use Microsoft Visual C++ runtime
    calls, rather than Win32 API calls directly. This is necessary to avoid
    conflict with C runtime usage. Found and fixed by irwir.
  * Remember the string format of X.509 DN attributes when replicating
    X.509 DNs. Previously, DN attributes were always written in their default
    string format (mostly PrintableString), which could lead to CRTs being
    created which used PrintableStrings in the issuer field even though the
    signing CA used UTF8Strings in its subject field; while X.509 compliant,
    such CRTs were rejected in some applications, e.g. some versions of
    Firefox, curl and GnuTLS. Reported in #1033 by Moschn. Fix contributed by
    Thomas-Dee.
  * Improve documentation of mbedtls_ssl_get_verify_result().
    Fixes #517 reported by github-monoculture.
  * Add MBEDTLS_MPI_GEN_PRIME_FLAG_LOW_ERR flag to mbedtls_mpi_gen_prime() and
    use it to reduce error probability in RSA key generation to levels mandated
    by FIPS-186-4.
- Version 2.13.1
  API Changes
  * Extend the platform module with an abstraction mbedtls_platform_gmtime_r()
    whose implementation should behave as a thread-safe version of gmtime().
    This allows users to configure such an implementation at compile time when
    the target system cannot be deduced automatically, by setting the option
    MBEDTLS_PLATFORM_GMTIME_R_ALT. At this stage Mbed TLS is only able to
    automatically select implementations for Windows and POSIX C libraries.
  Bugfix
  * Fix build failures on platforms where only gmtime() is available but
    neither gmtime_r() nor gmtime_s() are present. Fixes #1907.
- Version 2.13.0
  Security
  * Fix an issue in the X.509 module which could lead to a buffer overread
    during certificate extensions parsing. In case of receiving malformed
    input (extensions length field equal to 0), an illegal read of one byte
    beyond the input buffer is made. Found and analyzed by Nathan Crandall.
  Features
  * Add support for fragmentation of outgoing DTLS handshake messages. This
    is controlled by the maximum fragment length as set locally or negotiated
    with the peer, as well as by a new per-connection MTU option, set using
    mbedtls_ssl_set_mtu().
  * Add support for auto-adjustment of MTU to a safe value during the
    handshake when flights do not get through (RFC 6347, section 4.1.1.1,
    last paragraph).
  * Add support for packing multiple records within a single datagram,
    enabled by default.
  * Add support for buffering out-of-order handshake messages in DTLS.
    The maximum amount of RAM used for this can be controlled by the
    compile-time constant MBEDTLS_SSL_DTLS_MAX_BUFFERING defined
    in mbedtls/config.h.
  API Changes
  * Add function mbedtls_ssl_set_datagram_packing() to configure
    the use of datagram packing (enabled by default).
  Bugfix
  * Fix a potential memory leak in mbedtls_ssl_setup() function. An allocation
    failure in the function could lead to other buffers being leaked.
  * Fixes an issue with MBEDTLS_CHACHAPOLY_C which would not compile if
    MBEDTLS_ARC4_C and MBEDTLS_CIPHER_NULL_CIPHER weren't also defined. #1890
  * Fix a memory leak in ecp_mul_comb() if ecp_precompute_comb() fails.
    Fix contributed by Espressif Systems.
  * Add ecc extensions only if an ecc based ciphersuite is used.
    This improves compliance to RFC 4492, and as a result, solves
    interoperability issues with BouncyCastle. Raised by milenamil in #1157.
  * Replace printf with mbedtls_printf in the ARIA module. Found by
    TrinityTonic in #1908.
  * Fix potential use-after-free in mbedtls_ssl_get_max_frag_len()
    and mbedtls_ssl_get_record_expansion() after a session reset. Fixes #1941.
  * Fix a bug that caused SSL/TLS clients to incorrectly abort the handshake
    with TLS versions 1.1 and earlier when the server requested authentication
    without providing a list of CAs. This was due to an overly strict bounds
    check in parsing the CertificateRequest message,
    introduced in Mbed TLS 2.12.0. Fixes #1954.
  * Fix a miscalculation of the maximum record expansion in
    mbedtls_ssl_get_record_expansion() in case of ChachaPoly ciphersuites,
    or CBC ciphersuites in (D)TLS versions 1.1 or higher. Fixes #1913, #1914.
  * Fix undefined shifts with negative values in certificates parsing
    (found by Catena cyber using oss-fuzz)
  * Fix memory leak and free without initialization in pk_encrypt
    and pk_decrypt example programs. Reported by Brace Stout. Fixes #1128.
  * Remove redundant else statement. Raised by irwir. Fixes #1776.
  Changes
  * Copy headers preserving timestamps when doing a "make install".
    Contributed by xueruini.
  * Allow the forward declaration of public structs. Contributed by Dawid
    Drozd. Fixes #1215 raised by randombit.
  * Improve compatibility with some alternative CCM implementations by using
    CCM test vectors from RAM.
  * Add support for buffering of out-of-order handshake messages.
  * Add warnings to the documentation of the HKDF module to reduce the risk
    of misusing the mbedtls_hkdf_extract() and mbedtls_hkdf_expand()
    functions. Fixes #1775. Reported by Brian J. Murray.</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1544529601">- Library package version bumped to libmbedtls12</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1546862400">- Update to version 2.16.0:
  Features
  * Add a new config.h option of MBEDTLS_CHECK_PARAMS that enables validation of parameters in the API. This allows detection of obvious misuses of the API, such as passing NULL pointers. The API of existing functions hasn't changed, but requirements on parameters have been made more explicit in the documentation. See the corresponding API documentation for each function to see for which parameter values it is defined. This feature is disabled by default. See its API documentation in config.h for additional steps you have to take when enabling it.
  API Changes
  * The following functions in the random generator modules have been deprecated and replaced as shown below. The new functions change the return type from void to int to allow returning error codes when using MBEDTLS_&lt;MODULE&gt;_ALT for the underlying AES or message digest primitive. Fixes #1798. mbedtls_ctr_drbg_update() -&gt; mbedtls_ctr_drbg_update_ret() mbedtls_hmac_drbg_update() -&gt; mbedtls_hmac_drbg_update_ret()
  * Extend ECDH interface to enable alternative implementations.
  * Deprecate error codes of the form MBEDTLS_ERR_xxx_INVALID_KEY_LENGTH for ARIA, CAMELLIA and Blowfish. These error codes will be replaced by the more generic per-module error codes MBEDTLS_ERR_xxx_BAD_INPUT_DATA.
  * Additional parameter validation checks have been added for the following modules - AES, ARIA, Blowfish, CAMELLIA, CCM, GCM, DHM, ECP, ECDSA, ECDH, ECJPAKE, SHA, Chacha20 and Poly1305, cipher, pk, RSA, and MPI. Where modules have had parameter validation added, existing parameter checks may have changed. Some modules, such as Chacha20 had existing parameter validation whereas other modules had little. This has now been changed so that the same level of validation is present in all modules, and that it is now optional with the MBEDTLS_CHECK_PARAMS flag which by default is off. That means that checks which were previously present by default will no longer be.
  New deprecations
  * Deprecate mbedtls_ctr_drbg_update() and mbedtls_hmac_drbg_update() in favor of functions that can return an error code.
  Bugfix
  * Fix for Clang, which was reporting a warning for the bignum.c inline assembly for AMD64 targets creating string literals greater than those permitted by the ISO C99 standard. Found by Aaron Jones. Fixes #482.
  * Fix runtime error in mbedtls_platform_entropy_poll() when run through qemu user emulation. Reported and fix suggested by randombit. Fixes #1212.
  * Fix an unsafe bounds check when restoring an SSL session from a ticket. This could lead to a buffer overflow, but only in case ticket authentication was broken. Reported and fix suggested by Guido Vranken in #659.
  * Add explicit integer to enumeration type casts to example program programs/pkey/gen_key which previously led to compilation failure on some toolchains. Reported by phoenixmcallister. Fixes #2170.
  * Clarify documentation of mbedtls_ssl_set_own_cert() regarding the absence of check for certificate/key matching. Reported by Attila Molnar, #507.
  * Fix double initialization of ECC hardware that made some accelerators hang.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1567512000">- Update to version 2.16.2:
  * Security improvements and bugfixes
- Use ninja to for build</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1573646400">- Update to version 2.16.3:
  * Security improvements and bugfixes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1585828800">- Update to version 2.16.5:
  * Security improvements and bugfixes</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597665600">- update to 2.23.0:
  a lot of changes see https://github.com/ARMmbed/mbedtls/releases/tag/v2.23.0
  * Fix a side channel vulnerability in modular exponentiation that could reveal an RSA private key used in a secure enclave. Noticed by Sangho Lee, Ming-Wei Shih, Prasun Gera, Taesoo Kim and Hyesoon Kim (Georgia Institute of Technology); and Marcus Peinado (Microsoft Research). Reported by Raoul Strackx (Fortanix) in #3394.
  * Fix side channel in mbedtls_ecp_check_pub_priv() and mbedtls_pk_parse_key() / mbedtls_pk_parse_keyfile() (when loading a private key that didn't include the uncompressed public key), as well as mbedtls_ecp_mul() / mbedtls_ecp_mul_restartable() when called with a NULL f_rng argument. An attacker with access to precise enough timing and memory access information (typically an untrusted operating system attacking a secure enclave) could fully recover the ECC private key. Found and reported by Alejandro Cabrera Aldaya and Billy Brumley.
  * Fix issue in Lucky 13 counter-measure that could make it ineffective when hardware accelerators were used (using one of the MBEDTLS_SHAxxx_ALT macros). This would cause the original Lucky 13 attack to be possible in those configurations, allowing an active network attacker to recover plaintext after repeated timing measurements under some conditions. Reported and fix suggested by Luc Perneel in #3246.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1598875200">- Do not run testsuite in parallel - its not reliable</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1599480000">- Add workaround for failing builds (Python not found) due to
  https://gitlab.kitware.com/cmake/cmake/-/issues/21168</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1599652800">- update to 2.24.0:
  * see https://github.com/ARMmbed/mbedtls/releases/tag/v2.24.0
  * Fix a vulnerability in the verification of X.509 certificates when matching
  the expected common name (the cn argument of mbedtls_x509_crt_verify())
  with the actual certificate name: when the subjecAltName extension is
  present, the expected name was compared to any name in that extension
  regardless of its type. This means that an attacker could for example
  impersonate a 4-bytes or 16-byte domain by getting a certificate for the
  corresponding IPv4 or IPv6 (this would require the attacker to control that
  IP address, though). Similar attacks using other subjectAltName name types
  might be possible.
  * When checking X.509 CRLs, a certificate was only considered as revoked if
  its revocationDate was in the past according to the local clock if
  available. In particular, on builds without MBEDTLS_HAVE_TIME_DATE,
  certificates were never considered as revoked. On builds with
  MBEDTLS_HAVE_TIME_DATE, an attacker able to control the local clock (for
  example, an untrusted OS attacking a secure enclave) could prevent
  revocation of certificates via CRLs. Fixed by no longer checking the
  revocationDate field, in accordance with RFC 5280. Reported by yuemonangong
  in #3340. Reported independently and fixed by Raoul Strackx and Jethro
  * In (D)TLS record decryption, when using a CBC ciphersuites without the
  Encrypt-then-Mac extension, use constant code flow memory access patterns
  to extract and check the MAC. This is an improvement to the existing
  countermeasure against Lucky 13 attacks. The previous countermeasure was
  effective against network-based attackers, but less so against local
  attackers. The new countermeasure defends against local attackers, even if
  they have access to fine-grained measurements. In particular, this fixes a
  local Lucky 13 cache attack found and reported by Tuba Yavuz, Farhaan
  Fowze, Ken (Yihan) Bai, Grant Hernandez, and Kevin Butler (University of
  Florida) and Dave Tian (Purdue University).
  * Fix side channel in RSA private key operations and static (finite-field)
  Diffie-Hellman. An adversary with precise enough timing and memory access
  information (typically an untrusted operating system attacking a secure
  enclave) could bypass an existing counter-measure (base blinding) and
  potentially fully recover the private key.
  * Fix a 1-byte buffer overread in mbedtls_x509_crl_parse_der(). Credit to
  OSS-Fuzz for detecting the problem and to Philippe Antoine for pinpointing
  the problematic code.
  * Zeroising of plaintext buffers in mbedtls_ssl_read() to erase unused
  application data from memory.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1608638400">- update to 2.25.0:
  * This release of Mbed TLS provides bug fixes, minor enhancements and new
  features. This release includes fixes for security issues.
  * see https://github.com/ARMmbed/mbedtls/releases/tag/v2.25.0
  * The functions mbedtls_cipher_auth_encrypt() and
  mbedtls_cipher_auth_decrypt() would write past the minimum documented size
  of the output buffer when used with NIST_KW. As a result, code using those
  functions as documented with NIST_KW could have a buffer overwrite of up to
  15 bytes, with consequences ranging up to arbitrary code execution
  depending on the location of the output buffer.
  * Limit the size of calculations performed by mbedtls_mpi_exp_mod to
  MBEDTLS_MPI_MAX_SIZE to prevent a potential denial of service when generating
  Diffie-Hellman key pairs. Credit to OSS-Fuzz.
  * A failure of the random generator was ignored in mbedtls_mpi_fill_random(),
  which is how most uses of randomization in asymmetric cryptography (including
  key generation, intermediate value randomization and blinding) are implemented.
  This could cause failures or the silent use of non-random values. A random
  generator can fail if it needs reseeding and cannot not obtain entropy, or due
  to an internal failure (which, for Mbed TLS's own CTR_DRBG or HMAC_DRBG, can
  only happen due to a misconfiguration).
  * Fix a compliance issue whereby we were not checking the tag on the algorithm
  parameters (only the size) when comparing the signature in the description part
  of the cert to the real signature. This meant that a NULL algorithm parameters
  entry would look identical to an array of REAL (size zero) to the library and
  thus the certificate would be considered valid. However, if the parameters do
  not match in any way then the certificate should be considered invalid, and
  indeed OpenSSL marks these certs as invalid when mbedtls did not. Many thanks
  to guidovranken who found this issue via differential fuzzing and reported it
  in #3629.
  * Zeroising of local buffers and variables which are used for calculations in
  mbedtls_pkcs5_pbkdf2_hmac(), mbedtls_internal_sha*_process(),
  mbedtls_internal_md*_process() and mbedtls_internal_ripemd160_process()
  functions to erase sensitive data from memory. Reported by Johan Malmgren and
  Johan Uppman Bruce from Sectra.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1611057600">- Fix build for Leap targets
- Use upstream tarball name</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1616414400">- Update to 2.26.0: [bsc#1189589, CVE-2021-24119]
  * * This release of Mbed TLS provides bug fixes, minor enhancements and new
  features. This release includes fixes for security issues.
  * see https://github.com/ARMmbed/mbedtls/releases/tag/v2.26.0
- Fix build with patch from https://github.com/ARMmbed/mbedtls/pull/4237
  mbedtls-4237.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1618488000">-  Workaround for building with gcc-11 boo#1181876</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1626782400">- Update to 2.27.0:
  API changes:
  * Update AEAD output size macros to bring them in line with the PSA Crypto
    API version 1.0 spec. This version of the spec parameterizes them on the
    key type used, as well as the key bit-size in the case of
    PSA_AEAD_TAG_LENGTH.
    The old versions of these macros were renamed and deprecated as follows:
  - PSA_AEAD_TAG_LENGTH          -&gt; PSA_AEAD_TAG_LENGTH_1_ARG
  - PSA_AEAD_ENCRYPT_OUTPUT_SIZE -&gt; PSA_AEAD_ENCRYPT_OUTPUT_SIZE_2_ARG
  - PSA_AEAD_DECRYPT_OUTPUT_SIZE -&gt; PSA_AEAD_DECRYPT_OUTPUT_SIZE_2_ARG
  - PSA_AEAD_UPDATE_OUTPUT_SIZE  -&gt; PSA_AEAD_UPDATE_OUTPUT_SIZE_2_ARG
  - PSA_AEAD_FINISH_OUTPUT_SIZE  -&gt; PSA_AEAD_FINISH_OUTPUT_SIZE_1_ARG
  - PSA_AEAD_VERIFY_OUTPUT_SIZE  -&gt; PSA_AEAD_VERIFY_OUTPUT_SIZE_1_ARG
  * Implement one-shot cipher functions, psa_cipher_encrypt and
    psa_cipher_decrypt, according to the PSA Crypto API 1.0.0
    specification.
  Features:
  * Add mbedtls_rsa_rsassa_pss_sign_ext() function allowing to generate a
    signature with a specific salt length. This function allows to validate
    test cases provided in the NIST's CAVP test suite.
  * Added support for built-in driver keys through the PSA opaque crypto
    driver interface. Refer to the documentation of
    MBEDTLS_PSA_CRYPTO_BUILTIN_KEYS for more information.
  * Implement psa_sign_message() and psa_verify_message().
  * The new function mbedtls_mpi_random() generates a random value in a
    given range uniformly.
  * Implement psa_mac_compute() and psa_mac_verify() as defined in the
    PSA Cryptograpy API 1.0.0 specification.
  * MBEDTLS_ECP_MAX_BITS is now determined automatically from the configured
    curves and no longer needs to be configured explicitly to save RAM.
  Security
  * Fix a bias in the generation of finite-field Diffie-Hellman-Merkle (DHM)
    private keys and of blinding values for DHM and elliptic curves (ECP)
    computations.
  * Fix a potential side channel vulnerability in ECDSA ephemeral key generation.
    An adversary who is capable of very precise timing measurements could
    learn partial information about the leading bits of the nonce used for the
    signature, allowing the recovery of the private key after observing a
    large number of signature operations. This completes a partial fix in
    Mbed TLS 2.20.0.
  * It was possible to configure MBEDTLS_ECP_MAX_BITS to a value that is
    too small, leading to buffer overflows in ECC operations. Fail the build
    in such a case.
  * An adversary with access to precise enough information about memory
    accesses (typically, an untrusted operating system attacking a secure
    enclave) could recover an RSA private key after observing the victim
    performing a single private-key operation.
  * An adversary with access to precise enough timing information (typically, a
    co-located process) could recover a Curve25519 or Curve448 static ECDH key
    after inputting a chosen public key and observing the victim performing the
    corresponding private-key operation.
  Bugfix
  * Add printf function attributes to mbedtls_debug_print_msg to ensure we
    get printf format specifier warnings.
  * Fix premature fopen() call in mbedtls_entropy_write_seed_file which may
    lead to seed file corruption in the case where the path to the seed file is
    equal to MBEDTLS_PLATFORM_STD_NV_SEED_FILE.
  * PSA functions other than psa_open_key now return PSA_ERROR_INVALID_HANDLE
    rather than PSA_ERROR_DOES_NOT_EXIST for an invalid handle, bringing them
    in line with version 1.0.0 of the specification.
  * PSA functions creating a key now return PSA_ERROR_INVALID_ARGUMENT rather
    than PSA_ERROR_INVALID_HANDLE when the identifier specified for the key
    to create is not valid, bringing them in line with version 1.0.0 of the
    specification.
  * Fix some cases in the bignum module where the library constructed an
    unintended representation of the value 0 which was not processed
    correctly by some bignum operations. This could happen when
    mbedtls_mpi_read_string() was called on "-0", or when
    mbedtls_mpi_mul_mpi() and mbedtls_mpi_mul_int() was called with one of
    the arguments being negative and the other being 0.
  * Fix a bug in ECDSA that would cause it to fail when the hash is all-bits
    zero.
  * Fix a compilation error when MBEDTLS_ECP_RANDOMIZE_MXZ_ALT is
    defined.
  * Fix an incorrect error code when parsing a PKCS#8 private key.
  * In a TLS client, enforce the Diffie-Hellman minimum parameter size
    set with mbedtls_ssl_conf_dhm_min_bitlen() precisely. Before, the
    minimum size was rounded down to the nearest multiple of 8.
  * In library/net_sockets.c, _POSIX_C_SOURCE and _XOPEN_SOURCE are
    defined to specific values.  If the code is used in a context
    where these are already defined, this can result in a compilation
    error.  Instead, assume that if they are defined, the values will
    be adequate to build Mbed TLS.
  * The cipher suite TLS-RSA-WITH-CAMELLIA-256-GCM-SHA384 was not available
    when SHA-1 was disabled and was offered when SHA-1 was enabled but SHA-384
    was disabled. Fix the dependency.
  * Do not offer SHA384 cipher suites when SHA-384 is disabled.
  * With MBEDTLS_PSA_CRYPTO_C disabled, some functions were getting built
    nonetheless, resulting in undefined reference errors when building a
    shared library.
  * Fix test suite code on platforms where int32_t is not int, such as
    Arm Cortex-M.
  * Fix some issues affecting MBEDTLS_ARIA_ALT implementations: a misplaced
    directive in a header and a missing initialization in the self-test.
  * Fix a missing initialization in the Camellia self-test, affecting
    MBEDTLS_CAMELLIA_ALT implementations.
  * Restore the ability to configure PSA via Mbed TLS options to support RSA
    key pair operations but exclude RSA key generation. When MBEDTLS_GENPRIME
    is not defined PSA will no longer attempt to use mbedtls_rsa_gen_key().
  * Fix a regression introduced in 2.24.0 which broke (D)TLS CBC ciphersuites
    (when the encrypt-then-MAC extension is not in use) with some ALT
    implementations of the underlying hash (SHA-1, SHA-256, SHA-384), causing
    the affected side to wrongly reject valid messages.
  * Remove outdated check-config.h check that prevented implementing the
    timing module on Mbed OS.
  * Fix PSA_ALG_TLS12_PRF and PSA_ALG_TLS12_PSK_TO_MS being too permissive
    about missing inputs.
  * Fix a resource leak in a test suite with an alternative AES
    implementation.
  * Fix a crash in mbedtls_mpi_debug_mpi on a bignum having 0 limbs. This
    could notably be triggered by setting the TLS debug level to 3 or above
    and using a Montgomery curve for the key exchange.
  * psa_verify_hash() was relying on implementation-specific behavior of
    mbedtls_rsa_rsassa_pss_verify() and was causing failures in some _ALT
    implementations. This reliance is now removed.
  * Disallow inputs of length different from the corresponding hash when
    signing or verifying with PSA_ALG_RSA_PSS (The PSA Crypto API mandates
    that PSA_ALG_RSA_PSS uses the same hash throughout the algorithm.)
  * Fix a null pointer dereference when mbedtls_mpi_exp_mod() was called with
    A=0 represented with 0 limbs. Up to and including Mbed TLS 2.26, this bug
    could not be triggered by code that constructed A with one of the
    mbedtls_mpi_read_xxx functions (including in particular TLS code) since
    those always built an mpi object with at least one limb.
  * Fix mbedtls_mpi_gcd(G,A,B) when the value of B is zero. This had no
    effect on Mbed TLS's internal use of mbedtls_mpi_gcd(), but may affect
    applications that call mbedtls_mpi_gcd() directly.
  * The PSA API no longer allows the creation or destruction of keys with a
    read-only lifetime. The persistence level PSA_KEY_PERSISTENCE_READ_ONLY
    can now only be used as intended, for keys that cannot be modified through
    normal use of the API.
  * When MBEDTLS_PSA_CRYPTO_SPM is enabled, crypto_spe.h was not included
    in all the right places. Include it from crypto_platform.h, which is
    the natural place.
  * mbedtls_pk_sign() and mbedtls_pk_verify() and their extended and
    restartable variants now always honor the specified hash length if
    nonzero. Before, for RSA, hash_len was ignored in favor of the length of
    the specified hash algorithm.
  * Fix which alert is sent in some cases to conform to the
    applicable RFC: on an invalid Finished message value, an
    invalid max_fragment_length extension, or an
    unsupported extension used by the server.
  * Correct (change from 12 to 13 bytes) the value of the macro describing the
    maximum nonce length returned by psa_aead_generate_nonce().
  Changes
  * Add extra printf compiler warning flags to builds.
  * Fix memsan build false positive in x509_crt.c with Clang 11
  * Fix the setting of the read timeout in the DTLS sample programs.
  * Remove the AES sample application programs/aes/aescrypt2 which shows
    bad cryptographic practice.
  * Alternative implementations of CMAC may now opt to not support 3DES as a
    CMAC block cipher, and still pass the CMAC self test.
  * Remove configs/config-psa-crypto.h, which was identical to the default
    configuration except for having some extra cryptographic mechanisms
    enabled and for unintended differences. This configuration was primarily
    intended to demonstrate the PSA API, and lost most of its usefulness when
    MBEDTLS_PSA_CRYPTO_C became enabled by default.
  * When building the test suites with GNU make, invoke python3 or python, not
    python2, which is no longer supported upstream.
  * When using session cache based session resumption on the server,
    double-check that custom session cache implementations return
    sessions which are consistent with the negotiated ciphersuite
    and compression method.
  * Fix build failure on MinGW toolchain when __USE_MING_ANSI_STDIO is on.
    When that flag is on, standard GNU C printf format specifiers
    should be used.
  * Reduce the default value of MBEDTLS_ECP_WINDOW_SIZE. This reduces RAM usage
    during ECC operations at a negligible performance cost.
  * mbedtls_mpi_read_binary(), mbedtls_mpi_read_binary_le() and
    mbedtls_mpi_read_string() now construct an mbedtls_mpi object with 0 limbs
    when their input has length 0. Note that this is an implementation detail
    and can change at any time, so this change should be transparent, but it
    may result in mbedtls_mpi_write_binary() or mbedtls_mpi_write_string()
    now writing an empty string where it previously wrote one or more
    zero digits when operating from values constructed with an mpi_read
    function and some mpi operations.
  * Implicitly add PSA_KEY_USAGE_SIGN_MESSAGE key usage policy flag when
    PSA_KEY_USAGE_SIGN_HASH flag is set and PSA_KEY_USAGE_VERIFY_MESSAGE flag
    when PSA_KEY_USAGE_VERIFY_HASH flag is set. This usage flag extension
    is also applied when loading a key from storage.
  * Remove mbedtls-4237.patch upstream
  * Library soname bump to libmbedcrypto7</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1642075200">- Update to 2.28.0: (bsc#1193979, CVE-2021-45450)
  API changes
  * Some fields of mbedtls_ssl_session and mbedtls_ssl_config are in a
  different order. This only affects applications that define such
  structures directly or serialize them.
  Requirement changes
  * Sign-magnitude and one's complement representations for signed integers are
  not supported. Two's complement is the only supported representation.
  Removals
  * Remove config option MBEDTLS_TLS_DEFAULT_ALLOW_SHA1_IN_CERTIFICATES,
  which allowed SHA-1 in the default TLS configuration for certificate
  signing. It was intended to facilitate the transition in environments
  with SHA-1 certificates. SHA-1 is considered a weak message digest and
  its use constitutes a security risk.
  * Remove the partial support for running unit tests via Greentea on Mbed OS,
  which had been unmaintained since 2018.
  Features
  * The identifier of the CID TLS extension can be configured by defining
  MBEDTLS_TLS_EXT_CID at compile time.
  * Warn if errors from certain functions are ignored. This is currently
  supported on GCC-like compilers and on MSVC and can be configured through
  the macro MBEDTLS_CHECK_RETURN. The warnings are always enabled
  (where supported) for critical functions where ignoring the return
  value is almost always a bug. Enable the new configuration option
  MBEDTLS_CHECK_RETURN_WARNING to get warnings for other functions. This
  is currently implemented in the AES, DES and md modules, and will be
  extended to other modules in the future.
  * Add missing PSA macros declared by PSA Crypto API 1.0.0:
  PSA_ALG_IS_SIGN_HASH, PSA_ALG_NONE, PSA_HASH_BLOCK_LENGTH, PSA_KEY_ID_NULL.
  * Add new API mbedtls_ct_memcmp for constant time buffer comparison.
  * Add PSA API definition for ARIA.
  Security
  * Zeroize several intermediate variables used to calculate the expected
  value when verifying a MAC or AEAD tag. This hardens the library in
  case the value leaks through a memory disclosure vulnerability. For
  example, a memory disclosure vulnerability could have allowed a
  man-in-the-middle to inject fake ciphertext into a DTLS connection.
  * In psa_cipher_generate_iv() and psa_cipher_encrypt(), do not read back
  from the output buffer. This fixes a potential policy bypass or decryption
  oracle vulnerability if the output buffer is in memory that is shared with
  an untrusted application.
  * Fix a double-free that happened after mbedtls_ssl_set_session() or
  mbedtls_ssl_get_session() failed with MBEDTLS_ERR_SSL_ALLOC_FAILED
  (out of memory). After that, calling mbedtls_ssl_session_free()
  and mbedtls_ssl_free() would cause an internal session buffer to
  be free()'d twice.
  Bugfix
  * Stop using reserved identifiers as local variables. Fixes #4630.
  * The GNU makefiles invoke python3 in preference to python except on Windows.
  * The check was accidentally not performed when cross-compiling for Windows
  on Linux. Fix this. Fixes #4774.
  * Prevent divide by zero if either of PSA_CIPHER_ENCRYPT_OUTPUT_SIZE() or
  PSA_CIPHER_UPDATE_OUTPUT_SIZE() were called using an asymmetric key type.
  * Fix a parameter set but unused in psa_crypto_cipher.c. Fixes #4935.
  * Don't use the obsolete header path sys/fcntl.h in unit tests.
  These header files cause compilation errors in musl.
  Fixes #4969.
  * Fix missing constraints on x86_64 and aarch64 assembly code
  for bignum multiplication that broke some bignum operations with
  (at least) Clang 12.
  Fixes #4116, #4786, #4917, #4962.
  * Fix mbedtls_cipher_crypt: AES-ECB when MBEDTLS_USE_PSA_CRYPTO is enabled.
  * Failures of alternative implementations of AES or DES single-block
  functions enabled with MBEDTLS_AES_ENCRYPT_ALT, MBEDTLS_AES_DECRYPT_ALT,
  MBEDTLS_DES_CRYPT_ECB_ALT or MBEDTLS_DES3_CRYPT_ECB_ALT were ignored.
  This does not concern the implementation provided with Mbed TLS,
  where this function cannot fail, or full-module replacements with
  MBEDTLS_AES_ALT or MBEDTLS_DES_ALT. Reported by Armelle Duboc in #1092.
  * Some failures of HMAC operations were ignored. These failures could only
  happen with an alternative implementation of the underlying hash module.
  * Fix the error returned by psa_generate_key() for a public key. Fixes #4551.
  * Fix the build of sample programs when neither MBEDTLS_ERROR_C nor
  MBEDTLS_ERROR_STRERROR_DUMMY is enabled.
  * Fix PSA_ALG_RSA_PSS verification accepting an arbitrary salt length.
  This algorithm now accepts only the same salt length for verification
  that it produces when signing, as documented. Use the new algorithm
  PSA_ALG_RSA_PSS_ANY_SALT to accept any salt length. Fixes #4946.
  * The existing predicate macro name PSA_ALG_IS_HASH_AND_SIGN is now reserved
  for algorithm values that fully encode the hashing step, as per the PSA
  Crypto API specification. This excludes PSA_ALG_RSA_PKCS1V15_SIGN_RAW and
  PSA_ALG_ECDSA_ANY. The new predicate macro PSA_ALG_IS_SIGN_HASH covers
  all algorithms that can be used with psa_{sign,verify}_hash(), including
  these two.
  * Fix issue in Makefile on Linux with SHARED=1, that caused shared libraries
  not to list other shared libraries they need.
  * Fix a bug in mbedtls_gcm_starts() when the bit length of the iv
  exceeds 2^32. Fixes #4884.
  * Fix an uninitialized variable warning in test_suite_ssl.function with GCC
  version 11.
  * Fix the build when no SHA2 module is included. Fixes #4930.
  * Fix the build when only the bignum module is included. Fixes #4929.
  * Fix a potential invalid pointer dereference and infinite loop bugs in
  pkcs12 functions when the password is empty. Fix the documentation to
  better describe the inputs to these functions and their possible values.
  Fixes #5136.
  * The key usage flags PSA_KEY_USAGE_SIGN_MESSAGE now allows the MAC
  operations psa_mac_compute() and psa_mac_sign_setup().
  * The key usage flags PSA_KEY_USAGE_VERIFY_MESSAGE now allows the MAC
  operations psa_mac_verify() and psa_mac_verify_setup().
  Changes
  * Set config option MBEDTLS_TLS_DEFAULT_ALLOW_SHA1_IN_KEY_EXCHANGE to be
  disabled by default.
  * Improve the performance of base64 constant-flow code. The result is still
  slower than the original non-constant-flow implementation, but much faster
  than the previous constant-flow implementation. Fixes #4814.
  * Indicate in the error returned if the nonce length used with
  ChaCha20-Poly1305 is invalid, and not just unsupported.
  * The mbedcrypto library includes a new source code module constant_time.c,
  containing various functions meant to resist timing side channel attacks.
  * This module does not have a separate configuration option, and functions
  from this module will be included in the build as required. Currently
  most of the interface of this module is private and may change at any
  time.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1642420800">- Fix baselib.conf</changelog>
  <changelog author="Alexander Bergmann &lt;abergmann@suse.com&gt;" date="1671624000">- Fix potential heap buffer overread and overwrite in DTLS if
  MBEDTLS_SSL_DTLS_CONNECTION_ID is enabled and
  MBEDTLS_SSL_CID_IN_LEN_MAX &gt; 2 * MBEDTLS_SSL_CID_OUT_LEN_MAX.
  (bsc#1206576, CVE-2022-46393).
  Add: mbedtls-CVE-2022-46393.patch</changelog>
</package>
<package pkgid="262b18efa6e053931aac396c750f973b40dcfce03eef7f75b7c9886cb8065c87" name="libmbedtls14" arch="ppc64le">
  <version epoch="0" ver="2.28.0" rel="bp154.2.3.1"/>
  <changelog author="mpluskal@suse.com" date="1531137600">- Update to version 2.11.0:
  * Features
    + Added support for the XTS block cipher mode with AES (AES-XTS). Contributed by Aorimn in pull request #414.
    + Implemented the HMAC-based extract-and-expand key derivation function (HKDF) per RFC 5869. Contributed by Thomas Fossati.
    + For TLS servers, added support for offloading private key operations to an external cryptoprocessor. Private key operations can be asynchronous to allow non-blocking operation of the TLS server stack.
    + Added support for ARIA cipher (RFC 5794) and associated TLS ciphersuites (RFC 6209). ARIA is disabled by default. To enable, see MBEDTLS_ARIA_C in config.h.
    + Added support for the CCM* block cipher mode as defined in IEEE Std 802.15.4.
    + Added an additional block mode, OFB (Output Feedback) per NIST SP 800-38a, to the AES module and cipher abstraction module.
  * API Changes
    + Mbed TLS 2.11.0 maintains source code compatibility with the last minor version, Mbed TLS 2.9.0, but extends the interface with additional capabilities. Mbed TLS 2.11.0 modifies the ABI and increases the SOVERSION.
  * Bugfix
    + Fixed the cert_write example to handle certificates signed with elliptic curves as well as RSA. Fixes #777 found by dbedev.
    + Fixed the redefinition of _WIN32_WINNT, to avoid overriding a definition used by user applications. Found and fixed by Fabio Alessandrelli.
    + Fixed compilation warnings with the IAR toolchain on 32-bit platforms. Reported by rahmanih in #683.
    + Fixed an issue with MicroBlaze support in bn_mul.h which was causing the build to fail. Found by zv-io. Fixes #1651.
    + Fixed braces in mbedtls_memory_buffer_alloc_status(). Found by sbranden in #552.
    + Added the macro MBEDTLS_X509_MAX_FILE_PATH_LEN that enables the user to configure the maximum length of a file path that can be buffered when calling mbedtls_x509_crt_parse_path(). Fixes #492.
    + Fixed redundant declaration of mbedtls_ssl_list_ciphersuites. Raised by TrinityTonic in #1359.
- Changes for version 2.9.0:
  + Security
    + Fixed an issue in the X.509 module which could lead to a buffer overread during certificate validation. Additionally, the issue could also lead to unnecessary callback checks being made or to some validation checks to be omitted. The overread could be triggered remotely, while the other issues would require a non DER-compliant certificate to be correctly signed by a trusted CA, or a trusted CA with a non DER-compliant certificate. Found by luocm. Fixes #825.
    + Fixed the buffer length assertion in the ssl_parse_certificate_request() function which could lead to an arbitrary overread of the message buffer. The overreads could be caused by receiving a malformed algorithms section which was too short. In builds with debug output, this overread data was output with the debug data.
    + Fixed a client-side bug in the validation of the server's ciphersuite choice which could potentially lead to the client accepting a ciphersuite it didn't offer or a ciphersuite that could not be used with the TLS or DTLS version chosen by the server. This could lead to corruption of internal data structures for some configurations.
  * Features
    + Added an option of MBEDTLS_AES_FEWER_TABLES, to dynamically compute smaller AES tables during runtime, thereby reducing the RAM/ROM footprint by ~6KiB. Suggested and contributed by jkivilin.
    + Added initial support for Curve448 (RFC 7748). So far only mbedtls_ecp_mul() and ECDH primitive functions (mbedtls_ecdh_gen_public(), mbedtls_ecdh_compute_shared()) are supported for now. Contributed by Nicholas Wilson.
  * API Changes
    + Mbed TLS 2.9.0 maintains source code and binary compatibility with the last minor version, Mbed TLS 2.8.0, but extends the interface with additional capabilities.
    + Extended the API with the function of mbedtls_net_poll() to allow user applications to wait for a network context to become ready before reading or writing.
    + Added the function mbedtls_ssl_check_pending() to the public API to allow a check for whether more more data is pending to be processed in the internal message buffers. This function is necessary to determine the underlying transport when event-driven IO is used.
  * Bugfix
    + Fixed a spurious uninitialized variable warning in cmac.c. Fix independently contributed by Brian J Murray and David Brown.
    + Added missing dependencies in test suites that led to build failures in configurations that omit certain hashes or public-key algorithms. Fixes #1040.
    + Fixed a C89 incompatibility issue in benchmark.c. Contributed by Brendan Shanks. Fixes #1353.
    + Added missing dependencies for MBEDTLS_HAVE_TIME_DATE and MBEDTLS_VERSION_FEATURES in some test suites. Contributed by Deomid Ryabkov. Fixes #1299, #1475.
    + Fixed the Makefile build process for building shared libraries on Mac OS X. Fixed by mnacamura.
    + Fixed parsing of PKCS#8 encoded Elliptic Curve keys. Previously Mbed TLS was unable to parse keys which had only the optional parameters field of the ECPrivateKey structure. Found by Jethro Beekman, fixed in #1379.
    + Added an optimisation to return the plaintext data more quickly on unpadded CBC decryption, as stated in the mbedtls_cipher_update() documentation. Contributed by Andy Leiserson.
    + Fixed the overriding and ignoring of return values when parsing and writing to a file in the pk_sign program. Found by kevlut in #1142.
    + Added restrictions to the usage of the error code MBEDTLS_ERR_SSL_WANT_READ to situations where data needs to be fetched from the underlying transport in order to make progress. Previously, this error code was also occasionally returned when unexpected messages were being discarded, ignoring that further messages could potentially already be pending to be processed in the internal buffers; these cases led to deadlocks when event-driven I/O was used. Found and reported by Hubert Mis in #772.
    + Fixed buffer length assertions in the ssl_parse_certificate_request() function which led to a potential one byte overread of the message buffer.
    + Fixed invalid buffer sizes being passed to zlib during record compression and decompression.
    + Raised the soversion of libmbedcrypto to match the soversion of the maintained 2.7 branch. The soversion was increased in Mbed TLS version 2.7.1 to reflect breaking changes in that release, but the increment was missed in 2.8.0 and later releases outside of the 2.7 branch.</changelog>
  <changelog author="mpluskal@suse.com" date="1535025600">- Update to version 2.12.0:
  * Security
    + Fixed a vulnerability in the TLS ciphersuites based on use of CBC and SHA-384 in DTLS/TLS 1.0 to 1.2, that allowed an active network attacker to partially recover the plaintext of messages under certains conditions by exploiting timing side-channels.
    + Fixed a vulnerability in TLS ciphersuites based on CBC, in DTLS/TLS 1.0 to 1.2, that allowed a local attacker, with the ability to execute code on the local machine as well as to manipulate network packets, to partially recover the plaintext of messages under certain conditions by using a cache attack targetting an internal MD/SHA buffer.
    + Added a counter-measure against a vulnerability in TLS ciphersuites based on CBC, in DTLS/TLS 1.0 to 1.2, that allowed a local attacker with the ability to execute code on the local machine as well as manipulate network packets, to partially recover the plaintext of messages certain conditions (see previous entry) by using a cache attack targeting the SSL input record buffer.
  * Features
    + Added new cryptographic primitives, the stream cipher Chacha20, one-time authenticator Poly1305 and AEAD construct Chacha20-Poly1305, as defined in RFC 7539. Contributed by Daniel King.
    + Added support for the CHACHA20-POLY1305 ciphersuites from RFC 7905.
    + Made the receive and transmit buffers independently configurable in size, for situations where the outgoing buffer can be fixed at a smaller size than the incoming buffer
    + Added support for the AES based key wrapping modes defined by NIST SP 800-38F algorithms KW and KWP and by RFC's 3394 and 5649.
    + Added platform support for the Haiku OS.
  * Bugfix
    + Fixed the key_app_writer example which was creating an invalid ASN.1 tag by writing an additional leading zero byte. Found by Aryeh R. #1257.
    + Fixed a C++ compilation error, caused by a variable named new. Found and fixed by Hirotaka Niisato. #1783.
    + Fixed the "no symbols" warning issued by ranlib when building on Mac OS X. Fix contributed by tabascoeye.
    + Clarified documentation for mbedtls_ssl_write() to include 0 as a valid return value. Found by @davidwu2000. #839.
    + Fixed a memory leak in mbedtls_x509_csr_parse(). Found and fixed by catenacyber, Philippe Antoine. #1623.
    + Added length checks to some TLS parsing functions. Found and fixed by Philippe Antoine from Catena cyber. #1663.
    + Remove unused headers included in x509.c. Found by Chris Hanson and fixed by Brendan Shanks. #992.
    + Fixed compilation error when MBEDTLS_ARC4_C is disabled and MBEDTLS_CIPHER_NULL_CIPHER is enabled. Found by TrinityTonic in #1719.
    + Fixed the inline assembly for the MPI multiply helper function for i386 and i386 with SSE2. Found by László Langó. #1550.
    + Fixed the namespacing in header files. Remove the mbedtls namespacing in the #include in the header files. #857.
    + Fixed a compiler warning of 'use before initialisation' in mbedtls_pk_parse_key(). Found by Martin Boye Petersen and fixed by Dawid Drozd.#1098.
    + Fixed decryption of zero length messages (which contain all padding) when a CBC based ciphersuite was used together with Encrypt-then-MAC.
    + Fixed the ssl_client2 example to send application data with 0-length content when the request_size argument is set to 0 as stated in the documentation. #1833.
    + Corrected the documentation for mbedtls_ssl_get_session(). This API has deep copy of the session, and the peer certificate is not lost. #926.
    + Fixed issues when building to the C99 standard, using -std=c99. Fixed by Nick Wilson.
  * Changes
    + Fails when receiving a TLS alert message with an invalid length, or invalid zero-length messages when using TLS 1.2. Contributed by Espressif Systems.
    + Changed the default behaviour of mbedtls_hkdf_extract() to return an error when calling with a NULL salt and non-zero salt length. Contributed by Brian J Murray
    + Change the shebang line in Perl scripts to look up perl in the PATH. Contributed by fbrosson.
    + Allow overriding the time on Windows via the platform-time abstraction. Fixed by Nick Wilson.
    + Use gmtime_r/gmtime_s for thread-safety. Fixed by Nick Wilson.</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1544529600">- Update to version 2.14.1: [bsc#1118727, CVE-2018-19608]
  Security
  * Fix timing variations and memory access variations in RSA PKCS#1 v1.5
    decryption that could lead to a Bleichenbacher-style padding oracle
    attack. In TLS, this affects servers that accept ciphersuites based on
    RSA decryption (i.e. ciphersuites whose name contains RSA but not
    (EC)DH(E)). Discovered by Eyal Ronen (Weizmann Institute),  Robert Gillham
    (University of Adelaide), Daniel Genkin (University of Michigan),
    Adi Shamir (Weizmann Institute), David Wong (NCC Group), and Yuval Yarom
    (University of Adelaide, Data61). The attack is described in more detail
    in the paper available here: http://cat.eyalro.net/cat.pdf  CVE-2018-19608
  * In mbedtls_mpi_write_binary(), don't leak the exact size of the number
    via branching and memory access patterns. An attacker who could submit
    a plaintext for RSA PKCS#1 v1.5 decryption but only observe the timing
    of the decryption and not its result could nonetheless decrypt RSA
    plaintexts and forge RSA signatures. Other asymmetric algorithms may
    have been similarly vulnerable. Reported by Eyal Ronen, Robert Gillham,
    Daniel Genkin, Adi Shamir, David Wong and Yuval Yarom.
  * Wipe sensitive buffers on the stack in the CTR_DRBG and HMAC_DRBG
    modules.
  API Changes
  * The new functions mbedtls_ctr_drbg_update_ret() and
    mbedtls_hmac_drbg_update_ret() are similar to mbedtls_ctr_drbg_update()
    and mbedtls_hmac_drbg_update() respectively, but the new functions
    report errors whereas the old functions return void. We recommend that
    applications use the new functions.
- Version 2.14.0:
  Security
  * Fix overly strict DN comparison when looking for CRLs belonging to a
    particular CA. This previously led to ignoring CRLs when the CRL's issuer
    name and the CA's subject name differed in their string encoding (e.g.,
    one using PrintableString and the other UTF8String) or in the choice of
    upper and lower case. Reported by Henrik Andersson of Bosch GmbH in issue
    [#1784].
  * Fix a flawed bounds check in server PSK hint parsing. In case the
    incoming message buffer was placed within the first 64KiB of address
    space and a PSK-(EC)DHE ciphersuite was used, this allowed an attacker
    to trigger a memory access up to 64KiB beyond the incoming message buffer,
    potentially leading to an application crash or information disclosure.
  * Fix mbedtls_mpi_is_prime() to use more rounds of probabilistic testing. The
    previous settings for the number of rounds made it practical for an
    adversary to construct non-primes that would be erroneously accepted as
    primes with high probability. This does not have an impact on the
    security of TLS, but can matter in other contexts with numbers chosen
    potentially by an adversary that should be prime and can be validated.
    For example, the number of rounds was enough to securely generate RSA key
    pairs or Diffie-Hellman parameters, but was insufficient to validate
    Diffie-Hellman parameters properly.
    See "Prime and Prejudice" by by Martin R. Albrecht and Jake Massimo and
    Kenneth G. Paterson and Juraj Somorovsky.
  Features
  * Add support for temporarily suspending expensive ECC computations after
    some configurable amount of operations. This is intended to be used in
    constrained, single-threaded systems where ECC is time consuming and can
    block other operations until they complete. This is disabled by default,
    but can be enabled by MBEDTLS_ECP_RESTARTABLE at compile time and
    configured by mbedtls_ecp_set_max_ops() at runtime. It applies to the new
    xxx_restartable functions in ECP, ECDSA, PK and X.509 (CRL not supported
    yet), and to existing functions in ECDH and SSL (currently only
    implemented client-side, for ECDHE-ECDSA ciphersuites in TLS 1.2,
    including client authentication).
  * Add support for Arm CPU DSP extensions to accelerate asymmetric key
    operations. On CPUs where the extensions are available, they can accelerate
    MPI multiplications used in ECC and RSA cryptography. Contributed by
    Aurelien Jarno.
  * Extend RSASSA-PSS signature to allow a smaller salt size. Previously, PSS
    signature always used a salt with the same length as the hash, and returned
    an error if this was not possible. Now the salt size may be up to two bytes
    shorter. This allows the library to support all hash and signature sizes
    that comply with FIPS 186-4, including SHA-512 with a 1024-bit key.
  * Add support for 128-bit keys in CTR_DRBG. Note that using keys shorter
    than 256 bits limits the security of generated material to 128 bits.
  API Changes
  * Add a common error code of `MBEDTLS_ERR_PLATFORM_FEATURE_UNSUPPORTED` for
    a feature that is not supported by underlying alternative
    implementations implementing cryptographic primitives. This is useful for
    hardware accelerators that don't implement all options or features.
  New deprecations
  * All module specific errors following the form
    MBEDTLS_ERR_XXX_FEATURE_UNAVAILABLE that indicate a feature is not
    supported are deprecated and are now replaced by the new equivalent
    platform error.
  * All module specific generic hardware acceleration errors following the
    form MBEDTLS_ERR_XXX_HW_ACCEL_FAILED that are deprecated and are replaced
    by the equivalent plaform error.
  * Deprecate the function mbedtls_mpi_is_prime() in favor of
    mbedtls_mpi_is_prime_ext() which allows specifying the number of
    Miller-Rabin rounds.
  Bugfix
  * Fix wrong order of freeing in programs/ssl/ssl_server2 example
    application leading to a memory leak in case both
    MBEDTLS_MEMORY_BUFFER_ALLOC_C and MBEDTLS_MEMORY_BACKTRACE are set.
    Fixes #2069.
  * Fix a bug in the update function for SSL ticket keys which previously
    invalidated keys of a lifetime of less than a 1s. Fixes #1968.
  * Fix failure in hmac_drbg in the benchmark sample application, when
    MBEDTLS_THREADING_C is defined. Found by TrinityTonic, #1095
  * Fix a bug in the record decryption routine ssl_decrypt_buf()
    which lead to accepting properly authenticated but improperly
    padded records in case of CBC ciphersuites using Encrypt-then-MAC.
  * Fix memory leak and freeing without initialization in the example
    program programs/x509/cert_write. Fixes #1422.
  * Ignore IV in mbedtls_cipher_set_iv() when the cipher mode is
    MBEDTLS_MODE_ECB. Found by ezdevelop. Fixes #1091.
  * Zeroize memory used for buffering or reassembling handshake messages
    after use.
  * Use `mbedtls_platform_zeroize()` instead of `memset()` for zeroization
    of sensitive data in the example programs aescrypt2 and crypt_and_hash.
  * Change the default string format used for various X.509 DN attributes to
    UTF8String. Previously, the use of the PrintableString format led to
    wildcards and non-ASCII characters being unusable in some DN attributes.
    Reported by raprepo in #1860 and by kevinpt in #468. Fix contributed by
    Thomas-Dee.
  * Fix compilation failure for configurations which use compile time
    replacements of standard calloc/free functions through the macros
    MBEDTLS_PLATFORM_CALLOC_MACRO and MBEDTLS_PLATFORM_FREE_MACRO.
    Reported by ole-de and ddhome2006. Fixes #882, #1642 and #1706.
  Changes
  * Removed support for Yotta as a build tool.
  * Add tests for session resumption in DTLS.
  * Close a test gap in (D)TLS between the client side and the server side:
    test the handling of large packets and small packets on the client side
    in the same way as on the server side.
  * Change the dtls_client and dtls_server samples to work by default over
    IPv6 and optionally by a build option over IPv4.
  * Change the use of Windows threading to use Microsoft Visual C++ runtime
    calls, rather than Win32 API calls directly. This is necessary to avoid
    conflict with C runtime usage. Found and fixed by irwir.
  * Remember the string format of X.509 DN attributes when replicating
    X.509 DNs. Previously, DN attributes were always written in their default
    string format (mostly PrintableString), which could lead to CRTs being
    created which used PrintableStrings in the issuer field even though the
    signing CA used UTF8Strings in its subject field; while X.509 compliant,
    such CRTs were rejected in some applications, e.g. some versions of
    Firefox, curl and GnuTLS. Reported in #1033 by Moschn. Fix contributed by
    Thomas-Dee.
  * Improve documentation of mbedtls_ssl_get_verify_result().
    Fixes #517 reported by github-monoculture.
  * Add MBEDTLS_MPI_GEN_PRIME_FLAG_LOW_ERR flag to mbedtls_mpi_gen_prime() and
    use it to reduce error probability in RSA key generation to levels mandated
    by FIPS-186-4.
- Version 2.13.1
  API Changes
  * Extend the platform module with an abstraction mbedtls_platform_gmtime_r()
    whose implementation should behave as a thread-safe version of gmtime().
    This allows users to configure such an implementation at compile time when
    the target system cannot be deduced automatically, by setting the option
    MBEDTLS_PLATFORM_GMTIME_R_ALT. At this stage Mbed TLS is only able to
    automatically select implementations for Windows and POSIX C libraries.
  Bugfix
  * Fix build failures on platforms where only gmtime() is available but
    neither gmtime_r() nor gmtime_s() are present. Fixes #1907.
- Version 2.13.0
  Security
  * Fix an issue in the X.509 module which could lead to a buffer overread
    during certificate extensions parsing. In case of receiving malformed
    input (extensions length field equal to 0), an illegal read of one byte
    beyond the input buffer is made. Found and analyzed by Nathan Crandall.
  Features
  * Add support for fragmentation of outgoing DTLS handshake messages. This
    is controlled by the maximum fragment length as set locally or negotiated
    with the peer, as well as by a new per-connection MTU option, set using
    mbedtls_ssl_set_mtu().
  * Add support for auto-adjustment of MTU to a safe value during the
    handshake when flights do not get through (RFC 6347, section 4.1.1.1,
    last paragraph).
  * Add support for packing multiple records within a single datagram,
    enabled by default.
  * Add support for buffering out-of-order handshake messages in DTLS.
    The maximum amount of RAM used for this can be controlled by the
    compile-time constant MBEDTLS_SSL_DTLS_MAX_BUFFERING defined
    in mbedtls/config.h.
  API Changes
  * Add function mbedtls_ssl_set_datagram_packing() to configure
    the use of datagram packing (enabled by default).
  Bugfix
  * Fix a potential memory leak in mbedtls_ssl_setup() function. An allocation
    failure in the function could lead to other buffers being leaked.
  * Fixes an issue with MBEDTLS_CHACHAPOLY_C which would not compile if
    MBEDTLS_ARC4_C and MBEDTLS_CIPHER_NULL_CIPHER weren't also defined. #1890
  * Fix a memory leak in ecp_mul_comb() if ecp_precompute_comb() fails.
    Fix contributed by Espressif Systems.
  * Add ecc extensions only if an ecc based ciphersuite is used.
    This improves compliance to RFC 4492, and as a result, solves
    interoperability issues with BouncyCastle. Raised by milenamil in #1157.
  * Replace printf with mbedtls_printf in the ARIA module. Found by
    TrinityTonic in #1908.
  * Fix potential use-after-free in mbedtls_ssl_get_max_frag_len()
    and mbedtls_ssl_get_record_expansion() after a session reset. Fixes #1941.
  * Fix a bug that caused SSL/TLS clients to incorrectly abort the handshake
    with TLS versions 1.1 and earlier when the server requested authentication
    without providing a list of CAs. This was due to an overly strict bounds
    check in parsing the CertificateRequest message,
    introduced in Mbed TLS 2.12.0. Fixes #1954.
  * Fix a miscalculation of the maximum record expansion in
    mbedtls_ssl_get_record_expansion() in case of ChachaPoly ciphersuites,
    or CBC ciphersuites in (D)TLS versions 1.1 or higher. Fixes #1913, #1914.
  * Fix undefined shifts with negative values in certificates parsing
    (found by Catena cyber using oss-fuzz)
  * Fix memory leak and free without initialization in pk_encrypt
    and pk_decrypt example programs. Reported by Brace Stout. Fixes #1128.
  * Remove redundant else statement. Raised by irwir. Fixes #1776.
  Changes
  * Copy headers preserving timestamps when doing a "make install".
    Contributed by xueruini.
  * Allow the forward declaration of public structs. Contributed by Dawid
    Drozd. Fixes #1215 raised by randombit.
  * Improve compatibility with some alternative CCM implementations by using
    CCM test vectors from RAM.
  * Add support for buffering of out-of-order handshake messages.
  * Add warnings to the documentation of the HKDF module to reduce the risk
    of misusing the mbedtls_hkdf_extract() and mbedtls_hkdf_expand()
    functions. Fixes #1775. Reported by Brian J. Murray.</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1544529601">- Library package version bumped to libmbedtls12</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1546862400">- Update to version 2.16.0:
  Features
  * Add a new config.h option of MBEDTLS_CHECK_PARAMS that enables validation of parameters in the API. This allows detection of obvious misuses of the API, such as passing NULL pointers. The API of existing functions hasn't changed, but requirements on parameters have been made more explicit in the documentation. See the corresponding API documentation for each function to see for which parameter values it is defined. This feature is disabled by default. See its API documentation in config.h for additional steps you have to take when enabling it.
  API Changes
  * The following functions in the random generator modules have been deprecated and replaced as shown below. The new functions change the return type from void to int to allow returning error codes when using MBEDTLS_&lt;MODULE&gt;_ALT for the underlying AES or message digest primitive. Fixes #1798. mbedtls_ctr_drbg_update() -&gt; mbedtls_ctr_drbg_update_ret() mbedtls_hmac_drbg_update() -&gt; mbedtls_hmac_drbg_update_ret()
  * Extend ECDH interface to enable alternative implementations.
  * Deprecate error codes of the form MBEDTLS_ERR_xxx_INVALID_KEY_LENGTH for ARIA, CAMELLIA and Blowfish. These error codes will be replaced by the more generic per-module error codes MBEDTLS_ERR_xxx_BAD_INPUT_DATA.
  * Additional parameter validation checks have been added for the following modules - AES, ARIA, Blowfish, CAMELLIA, CCM, GCM, DHM, ECP, ECDSA, ECDH, ECJPAKE, SHA, Chacha20 and Poly1305, cipher, pk, RSA, and MPI. Where modules have had parameter validation added, existing parameter checks may have changed. Some modules, such as Chacha20 had existing parameter validation whereas other modules had little. This has now been changed so that the same level of validation is present in all modules, and that it is now optional with the MBEDTLS_CHECK_PARAMS flag which by default is off. That means that checks which were previously present by default will no longer be.
  New deprecations
  * Deprecate mbedtls_ctr_drbg_update() and mbedtls_hmac_drbg_update() in favor of functions that can return an error code.
  Bugfix
  * Fix for Clang, which was reporting a warning for the bignum.c inline assembly for AMD64 targets creating string literals greater than those permitted by the ISO C99 standard. Found by Aaron Jones. Fixes #482.
  * Fix runtime error in mbedtls_platform_entropy_poll() when run through qemu user emulation. Reported and fix suggested by randombit. Fixes #1212.
  * Fix an unsafe bounds check when restoring an SSL session from a ticket. This could lead to a buffer overflow, but only in case ticket authentication was broken. Reported and fix suggested by Guido Vranken in #659.
  * Add explicit integer to enumeration type casts to example program programs/pkey/gen_key which previously led to compilation failure on some toolchains. Reported by phoenixmcallister. Fixes #2170.
  * Clarify documentation of mbedtls_ssl_set_own_cert() regarding the absence of check for certificate/key matching. Reported by Attila Molnar, #507.
  * Fix double initialization of ECC hardware that made some accelerators hang.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1567512000">- Update to version 2.16.2:
  * Security improvements and bugfixes
- Use ninja to for build</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1573646400">- Update to version 2.16.3:
  * Security improvements and bugfixes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1585828800">- Update to version 2.16.5:
  * Security improvements and bugfixes</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597665600">- update to 2.23.0:
  a lot of changes see https://github.com/ARMmbed/mbedtls/releases/tag/v2.23.0
  * Fix a side channel vulnerability in modular exponentiation that could reveal an RSA private key used in a secure enclave. Noticed by Sangho Lee, Ming-Wei Shih, Prasun Gera, Taesoo Kim and Hyesoon Kim (Georgia Institute of Technology); and Marcus Peinado (Microsoft Research). Reported by Raoul Strackx (Fortanix) in #3394.
  * Fix side channel in mbedtls_ecp_check_pub_priv() and mbedtls_pk_parse_key() / mbedtls_pk_parse_keyfile() (when loading a private key that didn't include the uncompressed public key), as well as mbedtls_ecp_mul() / mbedtls_ecp_mul_restartable() when called with a NULL f_rng argument. An attacker with access to precise enough timing and memory access information (typically an untrusted operating system attacking a secure enclave) could fully recover the ECC private key. Found and reported by Alejandro Cabrera Aldaya and Billy Brumley.
  * Fix issue in Lucky 13 counter-measure that could make it ineffective when hardware accelerators were used (using one of the MBEDTLS_SHAxxx_ALT macros). This would cause the original Lucky 13 attack to be possible in those configurations, allowing an active network attacker to recover plaintext after repeated timing measurements under some conditions. Reported and fix suggested by Luc Perneel in #3246.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1598875200">- Do not run testsuite in parallel - its not reliable</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1599480000">- Add workaround for failing builds (Python not found) due to
  https://gitlab.kitware.com/cmake/cmake/-/issues/21168</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1599652800">- update to 2.24.0:
  * see https://github.com/ARMmbed/mbedtls/releases/tag/v2.24.0
  * Fix a vulnerability in the verification of X.509 certificates when matching
  the expected common name (the cn argument of mbedtls_x509_crt_verify())
  with the actual certificate name: when the subjecAltName extension is
  present, the expected name was compared to any name in that extension
  regardless of its type. This means that an attacker could for example
  impersonate a 4-bytes or 16-byte domain by getting a certificate for the
  corresponding IPv4 or IPv6 (this would require the attacker to control that
  IP address, though). Similar attacks using other subjectAltName name types
  might be possible.
  * When checking X.509 CRLs, a certificate was only considered as revoked if
  its revocationDate was in the past according to the local clock if
  available. In particular, on builds without MBEDTLS_HAVE_TIME_DATE,
  certificates were never considered as revoked. On builds with
  MBEDTLS_HAVE_TIME_DATE, an attacker able to control the local clock (for
  example, an untrusted OS attacking a secure enclave) could prevent
  revocation of certificates via CRLs. Fixed by no longer checking the
  revocationDate field, in accordance with RFC 5280. Reported by yuemonangong
  in #3340. Reported independently and fixed by Raoul Strackx and Jethro
  * In (D)TLS record decryption, when using a CBC ciphersuites without the
  Encrypt-then-Mac extension, use constant code flow memory access patterns
  to extract and check the MAC. This is an improvement to the existing
  countermeasure against Lucky 13 attacks. The previous countermeasure was
  effective against network-based attackers, but less so against local
  attackers. The new countermeasure defends against local attackers, even if
  they have access to fine-grained measurements. In particular, this fixes a
  local Lucky 13 cache attack found and reported by Tuba Yavuz, Farhaan
  Fowze, Ken (Yihan) Bai, Grant Hernandez, and Kevin Butler (University of
  Florida) and Dave Tian (Purdue University).
  * Fix side channel in RSA private key operations and static (finite-field)
  Diffie-Hellman. An adversary with precise enough timing and memory access
  information (typically an untrusted operating system attacking a secure
  enclave) could bypass an existing counter-measure (base blinding) and
  potentially fully recover the private key.
  * Fix a 1-byte buffer overread in mbedtls_x509_crl_parse_der(). Credit to
  OSS-Fuzz for detecting the problem and to Philippe Antoine for pinpointing
  the problematic code.
  * Zeroising of plaintext buffers in mbedtls_ssl_read() to erase unused
  application data from memory.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1608638400">- update to 2.25.0:
  * This release of Mbed TLS provides bug fixes, minor enhancements and new
  features. This release includes fixes for security issues.
  * see https://github.com/ARMmbed/mbedtls/releases/tag/v2.25.0
  * The functions mbedtls_cipher_auth_encrypt() and
  mbedtls_cipher_auth_decrypt() would write past the minimum documented size
  of the output buffer when used with NIST_KW. As a result, code using those
  functions as documented with NIST_KW could have a buffer overwrite of up to
  15 bytes, with consequences ranging up to arbitrary code execution
  depending on the location of the output buffer.
  * Limit the size of calculations performed by mbedtls_mpi_exp_mod to
  MBEDTLS_MPI_MAX_SIZE to prevent a potential denial of service when generating
  Diffie-Hellman key pairs. Credit to OSS-Fuzz.
  * A failure of the random generator was ignored in mbedtls_mpi_fill_random(),
  which is how most uses of randomization in asymmetric cryptography (including
  key generation, intermediate value randomization and blinding) are implemented.
  This could cause failures or the silent use of non-random values. A random
  generator can fail if it needs reseeding and cannot not obtain entropy, or due
  to an internal failure (which, for Mbed TLS's own CTR_DRBG or HMAC_DRBG, can
  only happen due to a misconfiguration).
  * Fix a compliance issue whereby we were not checking the tag on the algorithm
  parameters (only the size) when comparing the signature in the description part
  of the cert to the real signature. This meant that a NULL algorithm parameters
  entry would look identical to an array of REAL (size zero) to the library and
  thus the certificate would be considered valid. However, if the parameters do
  not match in any way then the certificate should be considered invalid, and
  indeed OpenSSL marks these certs as invalid when mbedtls did not. Many thanks
  to guidovranken who found this issue via differential fuzzing and reported it
  in #3629.
  * Zeroising of local buffers and variables which are used for calculations in
  mbedtls_pkcs5_pbkdf2_hmac(), mbedtls_internal_sha*_process(),
  mbedtls_internal_md*_process() and mbedtls_internal_ripemd160_process()
  functions to erase sensitive data from memory. Reported by Johan Malmgren and
  Johan Uppman Bruce from Sectra.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1611057600">- Fix build for Leap targets
- Use upstream tarball name</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1616414400">- Update to 2.26.0: [bsc#1189589, CVE-2021-24119]
  * * This release of Mbed TLS provides bug fixes, minor enhancements and new
  features. This release includes fixes for security issues.
  * see https://github.com/ARMmbed/mbedtls/releases/tag/v2.26.0
- Fix build with patch from https://github.com/ARMmbed/mbedtls/pull/4237
  mbedtls-4237.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1618488000">-  Workaround for building with gcc-11 boo#1181876</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1626782400">- Update to 2.27.0:
  API changes:
  * Update AEAD output size macros to bring them in line with the PSA Crypto
    API version 1.0 spec. This version of the spec parameterizes them on the
    key type used, as well as the key bit-size in the case of
    PSA_AEAD_TAG_LENGTH.
    The old versions of these macros were renamed and deprecated as follows:
  - PSA_AEAD_TAG_LENGTH          -&gt; PSA_AEAD_TAG_LENGTH_1_ARG
  - PSA_AEAD_ENCRYPT_OUTPUT_SIZE -&gt; PSA_AEAD_ENCRYPT_OUTPUT_SIZE_2_ARG
  - PSA_AEAD_DECRYPT_OUTPUT_SIZE -&gt; PSA_AEAD_DECRYPT_OUTPUT_SIZE_2_ARG
  - PSA_AEAD_UPDATE_OUTPUT_SIZE  -&gt; PSA_AEAD_UPDATE_OUTPUT_SIZE_2_ARG
  - PSA_AEAD_FINISH_OUTPUT_SIZE  -&gt; PSA_AEAD_FINISH_OUTPUT_SIZE_1_ARG
  - PSA_AEAD_VERIFY_OUTPUT_SIZE  -&gt; PSA_AEAD_VERIFY_OUTPUT_SIZE_1_ARG
  * Implement one-shot cipher functions, psa_cipher_encrypt and
    psa_cipher_decrypt, according to the PSA Crypto API 1.0.0
    specification.
  Features:
  * Add mbedtls_rsa_rsassa_pss_sign_ext() function allowing to generate a
    signature with a specific salt length. This function allows to validate
    test cases provided in the NIST's CAVP test suite.
  * Added support for built-in driver keys through the PSA opaque crypto
    driver interface. Refer to the documentation of
    MBEDTLS_PSA_CRYPTO_BUILTIN_KEYS for more information.
  * Implement psa_sign_message() and psa_verify_message().
  * The new function mbedtls_mpi_random() generates a random value in a
    given range uniformly.
  * Implement psa_mac_compute() and psa_mac_verify() as defined in the
    PSA Cryptograpy API 1.0.0 specification.
  * MBEDTLS_ECP_MAX_BITS is now determined automatically from the configured
    curves and no longer needs to be configured explicitly to save RAM.
  Security
  * Fix a bias in the generation of finite-field Diffie-Hellman-Merkle (DHM)
    private keys and of blinding values for DHM and elliptic curves (ECP)
    computations.
  * Fix a potential side channel vulnerability in ECDSA ephemeral key generation.
    An adversary who is capable of very precise timing measurements could
    learn partial information about the leading bits of the nonce used for the
    signature, allowing the recovery of the private key after observing a
    large number of signature operations. This completes a partial fix in
    Mbed TLS 2.20.0.
  * It was possible to configure MBEDTLS_ECP_MAX_BITS to a value that is
    too small, leading to buffer overflows in ECC operations. Fail the build
    in such a case.
  * An adversary with access to precise enough information about memory
    accesses (typically, an untrusted operating system attacking a secure
    enclave) could recover an RSA private key after observing the victim
    performing a single private-key operation.
  * An adversary with access to precise enough timing information (typically, a
    co-located process) could recover a Curve25519 or Curve448 static ECDH key
    after inputting a chosen public key and observing the victim performing the
    corresponding private-key operation.
  Bugfix
  * Add printf function attributes to mbedtls_debug_print_msg to ensure we
    get printf format specifier warnings.
  * Fix premature fopen() call in mbedtls_entropy_write_seed_file which may
    lead to seed file corruption in the case where the path to the seed file is
    equal to MBEDTLS_PLATFORM_STD_NV_SEED_FILE.
  * PSA functions other than psa_open_key now return PSA_ERROR_INVALID_HANDLE
    rather than PSA_ERROR_DOES_NOT_EXIST for an invalid handle, bringing them
    in line with version 1.0.0 of the specification.
  * PSA functions creating a key now return PSA_ERROR_INVALID_ARGUMENT rather
    than PSA_ERROR_INVALID_HANDLE when the identifier specified for the key
    to create is not valid, bringing them in line with version 1.0.0 of the
    specification.
  * Fix some cases in the bignum module where the library constructed an
    unintended representation of the value 0 which was not processed
    correctly by some bignum operations. This could happen when
    mbedtls_mpi_read_string() was called on "-0", or when
    mbedtls_mpi_mul_mpi() and mbedtls_mpi_mul_int() was called with one of
    the arguments being negative and the other being 0.
  * Fix a bug in ECDSA that would cause it to fail when the hash is all-bits
    zero.
  * Fix a compilation error when MBEDTLS_ECP_RANDOMIZE_MXZ_ALT is
    defined.
  * Fix an incorrect error code when parsing a PKCS#8 private key.
  * In a TLS client, enforce the Diffie-Hellman minimum parameter size
    set with mbedtls_ssl_conf_dhm_min_bitlen() precisely. Before, the
    minimum size was rounded down to the nearest multiple of 8.
  * In library/net_sockets.c, _POSIX_C_SOURCE and _XOPEN_SOURCE are
    defined to specific values.  If the code is used in a context
    where these are already defined, this can result in a compilation
    error.  Instead, assume that if they are defined, the values will
    be adequate to build Mbed TLS.
  * The cipher suite TLS-RSA-WITH-CAMELLIA-256-GCM-SHA384 was not available
    when SHA-1 was disabled and was offered when SHA-1 was enabled but SHA-384
    was disabled. Fix the dependency.
  * Do not offer SHA384 cipher suites when SHA-384 is disabled.
  * With MBEDTLS_PSA_CRYPTO_C disabled, some functions were getting built
    nonetheless, resulting in undefined reference errors when building a
    shared library.
  * Fix test suite code on platforms where int32_t is not int, such as
    Arm Cortex-M.
  * Fix some issues affecting MBEDTLS_ARIA_ALT implementations: a misplaced
    directive in a header and a missing initialization in the self-test.
  * Fix a missing initialization in the Camellia self-test, affecting
    MBEDTLS_CAMELLIA_ALT implementations.
  * Restore the ability to configure PSA via Mbed TLS options to support RSA
    key pair operations but exclude RSA key generation. When MBEDTLS_GENPRIME
    is not defined PSA will no longer attempt to use mbedtls_rsa_gen_key().
  * Fix a regression introduced in 2.24.0 which broke (D)TLS CBC ciphersuites
    (when the encrypt-then-MAC extension is not in use) with some ALT
    implementations of the underlying hash (SHA-1, SHA-256, SHA-384), causing
    the affected side to wrongly reject valid messages.
  * Remove outdated check-config.h check that prevented implementing the
    timing module on Mbed OS.
  * Fix PSA_ALG_TLS12_PRF and PSA_ALG_TLS12_PSK_TO_MS being too permissive
    about missing inputs.
  * Fix a resource leak in a test suite with an alternative AES
    implementation.
  * Fix a crash in mbedtls_mpi_debug_mpi on a bignum having 0 limbs. This
    could notably be triggered by setting the TLS debug level to 3 or above
    and using a Montgomery curve for the key exchange.
  * psa_verify_hash() was relying on implementation-specific behavior of
    mbedtls_rsa_rsassa_pss_verify() and was causing failures in some _ALT
    implementations. This reliance is now removed.
  * Disallow inputs of length different from the corresponding hash when
    signing or verifying with PSA_ALG_RSA_PSS (The PSA Crypto API mandates
    that PSA_ALG_RSA_PSS uses the same hash throughout the algorithm.)
  * Fix a null pointer dereference when mbedtls_mpi_exp_mod() was called with
    A=0 represented with 0 limbs. Up to and including Mbed TLS 2.26, this bug
    could not be triggered by code that constructed A with one of the
    mbedtls_mpi_read_xxx functions (including in particular TLS code) since
    those always built an mpi object with at least one limb.
  * Fix mbedtls_mpi_gcd(G,A,B) when the value of B is zero. This had no
    effect on Mbed TLS's internal use of mbedtls_mpi_gcd(), but may affect
    applications that call mbedtls_mpi_gcd() directly.
  * The PSA API no longer allows the creation or destruction of keys with a
    read-only lifetime. The persistence level PSA_KEY_PERSISTENCE_READ_ONLY
    can now only be used as intended, for keys that cannot be modified through
    normal use of the API.
  * When MBEDTLS_PSA_CRYPTO_SPM is enabled, crypto_spe.h was not included
    in all the right places. Include it from crypto_platform.h, which is
    the natural place.
  * mbedtls_pk_sign() and mbedtls_pk_verify() and their extended and
    restartable variants now always honor the specified hash length if
    nonzero. Before, for RSA, hash_len was ignored in favor of the length of
    the specified hash algorithm.
  * Fix which alert is sent in some cases to conform to the
    applicable RFC: on an invalid Finished message value, an
    invalid max_fragment_length extension, or an
    unsupported extension used by the server.
  * Correct (change from 12 to 13 bytes) the value of the macro describing the
    maximum nonce length returned by psa_aead_generate_nonce().
  Changes
  * Add extra printf compiler warning flags to builds.
  * Fix memsan build false positive in x509_crt.c with Clang 11
  * Fix the setting of the read timeout in the DTLS sample programs.
  * Remove the AES sample application programs/aes/aescrypt2 which shows
    bad cryptographic practice.
  * Alternative implementations of CMAC may now opt to not support 3DES as a
    CMAC block cipher, and still pass the CMAC self test.
  * Remove configs/config-psa-crypto.h, which was identical to the default
    configuration except for having some extra cryptographic mechanisms
    enabled and for unintended differences. This configuration was primarily
    intended to demonstrate the PSA API, and lost most of its usefulness when
    MBEDTLS_PSA_CRYPTO_C became enabled by default.
  * When building the test suites with GNU make, invoke python3 or python, not
    python2, which is no longer supported upstream.
  * When using session cache based session resumption on the server,
    double-check that custom session cache implementations return
    sessions which are consistent with the negotiated ciphersuite
    and compression method.
  * Fix build failure on MinGW toolchain when __USE_MING_ANSI_STDIO is on.
    When that flag is on, standard GNU C printf format specifiers
    should be used.
  * Reduce the default value of MBEDTLS_ECP_WINDOW_SIZE. This reduces RAM usage
    during ECC operations at a negligible performance cost.
  * mbedtls_mpi_read_binary(), mbedtls_mpi_read_binary_le() and
    mbedtls_mpi_read_string() now construct an mbedtls_mpi object with 0 limbs
    when their input has length 0. Note that this is an implementation detail
    and can change at any time, so this change should be transparent, but it
    may result in mbedtls_mpi_write_binary() or mbedtls_mpi_write_string()
    now writing an empty string where it previously wrote one or more
    zero digits when operating from values constructed with an mpi_read
    function and some mpi operations.
  * Implicitly add PSA_KEY_USAGE_SIGN_MESSAGE key usage policy flag when
    PSA_KEY_USAGE_SIGN_HASH flag is set and PSA_KEY_USAGE_VERIFY_MESSAGE flag
    when PSA_KEY_USAGE_VERIFY_HASH flag is set. This usage flag extension
    is also applied when loading a key from storage.
  * Remove mbedtls-4237.patch upstream
  * Library soname bump to libmbedcrypto7</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1642075200">- Update to 2.28.0: (bsc#1193979, CVE-2021-45450)
  API changes
  * Some fields of mbedtls_ssl_session and mbedtls_ssl_config are in a
  different order. This only affects applications that define such
  structures directly or serialize them.
  Requirement changes
  * Sign-magnitude and one's complement representations for signed integers are
  not supported. Two's complement is the only supported representation.
  Removals
  * Remove config option MBEDTLS_TLS_DEFAULT_ALLOW_SHA1_IN_CERTIFICATES,
  which allowed SHA-1 in the default TLS configuration for certificate
  signing. It was intended to facilitate the transition in environments
  with SHA-1 certificates. SHA-1 is considered a weak message digest and
  its use constitutes a security risk.
  * Remove the partial support for running unit tests via Greentea on Mbed OS,
  which had been unmaintained since 2018.
  Features
  * The identifier of the CID TLS extension can be configured by defining
  MBEDTLS_TLS_EXT_CID at compile time.
  * Warn if errors from certain functions are ignored. This is currently
  supported on GCC-like compilers and on MSVC and can be configured through
  the macro MBEDTLS_CHECK_RETURN. The warnings are always enabled
  (where supported) for critical functions where ignoring the return
  value is almost always a bug. Enable the new configuration option
  MBEDTLS_CHECK_RETURN_WARNING to get warnings for other functions. This
  is currently implemented in the AES, DES and md modules, and will be
  extended to other modules in the future.
  * Add missing PSA macros declared by PSA Crypto API 1.0.0:
  PSA_ALG_IS_SIGN_HASH, PSA_ALG_NONE, PSA_HASH_BLOCK_LENGTH, PSA_KEY_ID_NULL.
  * Add new API mbedtls_ct_memcmp for constant time buffer comparison.
  * Add PSA API definition for ARIA.
  Security
  * Zeroize several intermediate variables used to calculate the expected
  value when verifying a MAC or AEAD tag. This hardens the library in
  case the value leaks through a memory disclosure vulnerability. For
  example, a memory disclosure vulnerability could have allowed a
  man-in-the-middle to inject fake ciphertext into a DTLS connection.
  * In psa_cipher_generate_iv() and psa_cipher_encrypt(), do not read back
  from the output buffer. This fixes a potential policy bypass or decryption
  oracle vulnerability if the output buffer is in memory that is shared with
  an untrusted application.
  * Fix a double-free that happened after mbedtls_ssl_set_session() or
  mbedtls_ssl_get_session() failed with MBEDTLS_ERR_SSL_ALLOC_FAILED
  (out of memory). After that, calling mbedtls_ssl_session_free()
  and mbedtls_ssl_free() would cause an internal session buffer to
  be free()'d twice.
  Bugfix
  * Stop using reserved identifiers as local variables. Fixes #4630.
  * The GNU makefiles invoke python3 in preference to python except on Windows.
  * The check was accidentally not performed when cross-compiling for Windows
  on Linux. Fix this. Fixes #4774.
  * Prevent divide by zero if either of PSA_CIPHER_ENCRYPT_OUTPUT_SIZE() or
  PSA_CIPHER_UPDATE_OUTPUT_SIZE() were called using an asymmetric key type.
  * Fix a parameter set but unused in psa_crypto_cipher.c. Fixes #4935.
  * Don't use the obsolete header path sys/fcntl.h in unit tests.
  These header files cause compilation errors in musl.
  Fixes #4969.
  * Fix missing constraints on x86_64 and aarch64 assembly code
  for bignum multiplication that broke some bignum operations with
  (at least) Clang 12.
  Fixes #4116, #4786, #4917, #4962.
  * Fix mbedtls_cipher_crypt: AES-ECB when MBEDTLS_USE_PSA_CRYPTO is enabled.
  * Failures of alternative implementations of AES or DES single-block
  functions enabled with MBEDTLS_AES_ENCRYPT_ALT, MBEDTLS_AES_DECRYPT_ALT,
  MBEDTLS_DES_CRYPT_ECB_ALT or MBEDTLS_DES3_CRYPT_ECB_ALT were ignored.
  This does not concern the implementation provided with Mbed TLS,
  where this function cannot fail, or full-module replacements with
  MBEDTLS_AES_ALT or MBEDTLS_DES_ALT. Reported by Armelle Duboc in #1092.
  * Some failures of HMAC operations were ignored. These failures could only
  happen with an alternative implementation of the underlying hash module.
  * Fix the error returned by psa_generate_key() for a public key. Fixes #4551.
  * Fix the build of sample programs when neither MBEDTLS_ERROR_C nor
  MBEDTLS_ERROR_STRERROR_DUMMY is enabled.
  * Fix PSA_ALG_RSA_PSS verification accepting an arbitrary salt length.
  This algorithm now accepts only the same salt length for verification
  that it produces when signing, as documented. Use the new algorithm
  PSA_ALG_RSA_PSS_ANY_SALT to accept any salt length. Fixes #4946.
  * The existing predicate macro name PSA_ALG_IS_HASH_AND_SIGN is now reserved
  for algorithm values that fully encode the hashing step, as per the PSA
  Crypto API specification. This excludes PSA_ALG_RSA_PKCS1V15_SIGN_RAW and
  PSA_ALG_ECDSA_ANY. The new predicate macro PSA_ALG_IS_SIGN_HASH covers
  all algorithms that can be used with psa_{sign,verify}_hash(), including
  these two.
  * Fix issue in Makefile on Linux with SHARED=1, that caused shared libraries
  not to list other shared libraries they need.
  * Fix a bug in mbedtls_gcm_starts() when the bit length of the iv
  exceeds 2^32. Fixes #4884.
  * Fix an uninitialized variable warning in test_suite_ssl.function with GCC
  version 11.
  * Fix the build when no SHA2 module is included. Fixes #4930.
  * Fix the build when only the bignum module is included. Fixes #4929.
  * Fix a potential invalid pointer dereference and infinite loop bugs in
  pkcs12 functions when the password is empty. Fix the documentation to
  better describe the inputs to these functions and their possible values.
  Fixes #5136.
  * The key usage flags PSA_KEY_USAGE_SIGN_MESSAGE now allows the MAC
  operations psa_mac_compute() and psa_mac_sign_setup().
  * The key usage flags PSA_KEY_USAGE_VERIFY_MESSAGE now allows the MAC
  operations psa_mac_verify() and psa_mac_verify_setup().
  Changes
  * Set config option MBEDTLS_TLS_DEFAULT_ALLOW_SHA1_IN_KEY_EXCHANGE to be
  disabled by default.
  * Improve the performance of base64 constant-flow code. The result is still
  slower than the original non-constant-flow implementation, but much faster
  than the previous constant-flow implementation. Fixes #4814.
  * Indicate in the error returned if the nonce length used with
  ChaCha20-Poly1305 is invalid, and not just unsupported.
  * The mbedcrypto library includes a new source code module constant_time.c,
  containing various functions meant to resist timing side channel attacks.
  * This module does not have a separate configuration option, and functions
  from this module will be included in the build as required. Currently
  most of the interface of this module is private and may change at any
  time.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1642420800">- Fix baselib.conf</changelog>
  <changelog author="Alexander Bergmann &lt;abergmann@suse.com&gt;" date="1671624000">- Fix potential heap buffer overread and overwrite in DTLS if
  MBEDTLS_SSL_DTLS_CONNECTION_ID is enabled and
  MBEDTLS_SSL_CID_IN_LEN_MAX &gt; 2 * MBEDTLS_SSL_CID_OUT_LEN_MAX.
  (bsc#1206576, CVE-2022-46393).
  Add: mbedtls-CVE-2022-46393.patch</changelog>
</package>
<package pkgid="3cd916cca0100c3a8358c1a69de7a41d783f39d0bd44cb8e56bdd375da4f365d" name="libmbedtls14" arch="s390x">
  <version epoch="0" ver="2.28.0" rel="bp154.2.3.1"/>
  <changelog author="mpluskal@suse.com" date="1531137600">- Update to version 2.11.0:
  * Features
    + Added support for the XTS block cipher mode with AES (AES-XTS). Contributed by Aorimn in pull request #414.
    + Implemented the HMAC-based extract-and-expand key derivation function (HKDF) per RFC 5869. Contributed by Thomas Fossati.
    + For TLS servers, added support for offloading private key operations to an external cryptoprocessor. Private key operations can be asynchronous to allow non-blocking operation of the TLS server stack.
    + Added support for ARIA cipher (RFC 5794) and associated TLS ciphersuites (RFC 6209). ARIA is disabled by default. To enable, see MBEDTLS_ARIA_C in config.h.
    + Added support for the CCM* block cipher mode as defined in IEEE Std 802.15.4.
    + Added an additional block mode, OFB (Output Feedback) per NIST SP 800-38a, to the AES module and cipher abstraction module.
  * API Changes
    + Mbed TLS 2.11.0 maintains source code compatibility with the last minor version, Mbed TLS 2.9.0, but extends the interface with additional capabilities. Mbed TLS 2.11.0 modifies the ABI and increases the SOVERSION.
  * Bugfix
    + Fixed the cert_write example to handle certificates signed with elliptic curves as well as RSA. Fixes #777 found by dbedev.
    + Fixed the redefinition of _WIN32_WINNT, to avoid overriding a definition used by user applications. Found and fixed by Fabio Alessandrelli.
    + Fixed compilation warnings with the IAR toolchain on 32-bit platforms. Reported by rahmanih in #683.
    + Fixed an issue with MicroBlaze support in bn_mul.h which was causing the build to fail. Found by zv-io. Fixes #1651.
    + Fixed braces in mbedtls_memory_buffer_alloc_status(). Found by sbranden in #552.
    + Added the macro MBEDTLS_X509_MAX_FILE_PATH_LEN that enables the user to configure the maximum length of a file path that can be buffered when calling mbedtls_x509_crt_parse_path(). Fixes #492.
    + Fixed redundant declaration of mbedtls_ssl_list_ciphersuites. Raised by TrinityTonic in #1359.
- Changes for version 2.9.0:
  + Security
    + Fixed an issue in the X.509 module which could lead to a buffer overread during certificate validation. Additionally, the issue could also lead to unnecessary callback checks being made or to some validation checks to be omitted. The overread could be triggered remotely, while the other issues would require a non DER-compliant certificate to be correctly signed by a trusted CA, or a trusted CA with a non DER-compliant certificate. Found by luocm. Fixes #825.
    + Fixed the buffer length assertion in the ssl_parse_certificate_request() function which could lead to an arbitrary overread of the message buffer. The overreads could be caused by receiving a malformed algorithms section which was too short. In builds with debug output, this overread data was output with the debug data.
    + Fixed a client-side bug in the validation of the server's ciphersuite choice which could potentially lead to the client accepting a ciphersuite it didn't offer or a ciphersuite that could not be used with the TLS or DTLS version chosen by the server. This could lead to corruption of internal data structures for some configurations.
  * Features
    + Added an option of MBEDTLS_AES_FEWER_TABLES, to dynamically compute smaller AES tables during runtime, thereby reducing the RAM/ROM footprint by ~6KiB. Suggested and contributed by jkivilin.
    + Added initial support for Curve448 (RFC 7748). So far only mbedtls_ecp_mul() and ECDH primitive functions (mbedtls_ecdh_gen_public(), mbedtls_ecdh_compute_shared()) are supported for now. Contributed by Nicholas Wilson.
  * API Changes
    + Mbed TLS 2.9.0 maintains source code and binary compatibility with the last minor version, Mbed TLS 2.8.0, but extends the interface with additional capabilities.
    + Extended the API with the function of mbedtls_net_poll() to allow user applications to wait for a network context to become ready before reading or writing.
    + Added the function mbedtls_ssl_check_pending() to the public API to allow a check for whether more more data is pending to be processed in the internal message buffers. This function is necessary to determine the underlying transport when event-driven IO is used.
  * Bugfix
    + Fixed a spurious uninitialized variable warning in cmac.c. Fix independently contributed by Brian J Murray and David Brown.
    + Added missing dependencies in test suites that led to build failures in configurations that omit certain hashes or public-key algorithms. Fixes #1040.
    + Fixed a C89 incompatibility issue in benchmark.c. Contributed by Brendan Shanks. Fixes #1353.
    + Added missing dependencies for MBEDTLS_HAVE_TIME_DATE and MBEDTLS_VERSION_FEATURES in some test suites. Contributed by Deomid Ryabkov. Fixes #1299, #1475.
    + Fixed the Makefile build process for building shared libraries on Mac OS X. Fixed by mnacamura.
    + Fixed parsing of PKCS#8 encoded Elliptic Curve keys. Previously Mbed TLS was unable to parse keys which had only the optional parameters field of the ECPrivateKey structure. Found by Jethro Beekman, fixed in #1379.
    + Added an optimisation to return the plaintext data more quickly on unpadded CBC decryption, as stated in the mbedtls_cipher_update() documentation. Contributed by Andy Leiserson.
    + Fixed the overriding and ignoring of return values when parsing and writing to a file in the pk_sign program. Found by kevlut in #1142.
    + Added restrictions to the usage of the error code MBEDTLS_ERR_SSL_WANT_READ to situations where data needs to be fetched from the underlying transport in order to make progress. Previously, this error code was also occasionally returned when unexpected messages were being discarded, ignoring that further messages could potentially already be pending to be processed in the internal buffers; these cases led to deadlocks when event-driven I/O was used. Found and reported by Hubert Mis in #772.
    + Fixed buffer length assertions in the ssl_parse_certificate_request() function which led to a potential one byte overread of the message buffer.
    + Fixed invalid buffer sizes being passed to zlib during record compression and decompression.
    + Raised the soversion of libmbedcrypto to match the soversion of the maintained 2.7 branch. The soversion was increased in Mbed TLS version 2.7.1 to reflect breaking changes in that release, but the increment was missed in 2.8.0 and later releases outside of the 2.7 branch.</changelog>
  <changelog author="mpluskal@suse.com" date="1535025600">- Update to version 2.12.0:
  * Security
    + Fixed a vulnerability in the TLS ciphersuites based on use of CBC and SHA-384 in DTLS/TLS 1.0 to 1.2, that allowed an active network attacker to partially recover the plaintext of messages under certains conditions by exploiting timing side-channels.
    + Fixed a vulnerability in TLS ciphersuites based on CBC, in DTLS/TLS 1.0 to 1.2, that allowed a local attacker, with the ability to execute code on the local machine as well as to manipulate network packets, to partially recover the plaintext of messages under certain conditions by using a cache attack targetting an internal MD/SHA buffer.
    + Added a counter-measure against a vulnerability in TLS ciphersuites based on CBC, in DTLS/TLS 1.0 to 1.2, that allowed a local attacker with the ability to execute code on the local machine as well as manipulate network packets, to partially recover the plaintext of messages certain conditions (see previous entry) by using a cache attack targeting the SSL input record buffer.
  * Features
    + Added new cryptographic primitives, the stream cipher Chacha20, one-time authenticator Poly1305 and AEAD construct Chacha20-Poly1305, as defined in RFC 7539. Contributed by Daniel King.
    + Added support for the CHACHA20-POLY1305 ciphersuites from RFC 7905.
    + Made the receive and transmit buffers independently configurable in size, for situations where the outgoing buffer can be fixed at a smaller size than the incoming buffer
    + Added support for the AES based key wrapping modes defined by NIST SP 800-38F algorithms KW and KWP and by RFC's 3394 and 5649.
    + Added platform support for the Haiku OS.
  * Bugfix
    + Fixed the key_app_writer example which was creating an invalid ASN.1 tag by writing an additional leading zero byte. Found by Aryeh R. #1257.
    + Fixed a C++ compilation error, caused by a variable named new. Found and fixed by Hirotaka Niisato. #1783.
    + Fixed the "no symbols" warning issued by ranlib when building on Mac OS X. Fix contributed by tabascoeye.
    + Clarified documentation for mbedtls_ssl_write() to include 0 as a valid return value. Found by @davidwu2000. #839.
    + Fixed a memory leak in mbedtls_x509_csr_parse(). Found and fixed by catenacyber, Philippe Antoine. #1623.
    + Added length checks to some TLS parsing functions. Found and fixed by Philippe Antoine from Catena cyber. #1663.
    + Remove unused headers included in x509.c. Found by Chris Hanson and fixed by Brendan Shanks. #992.
    + Fixed compilation error when MBEDTLS_ARC4_C is disabled and MBEDTLS_CIPHER_NULL_CIPHER is enabled. Found by TrinityTonic in #1719.
    + Fixed the inline assembly for the MPI multiply helper function for i386 and i386 with SSE2. Found by László Langó. #1550.
    + Fixed the namespacing in header files. Remove the mbedtls namespacing in the #include in the header files. #857.
    + Fixed a compiler warning of 'use before initialisation' in mbedtls_pk_parse_key(). Found by Martin Boye Petersen and fixed by Dawid Drozd.#1098.
    + Fixed decryption of zero length messages (which contain all padding) when a CBC based ciphersuite was used together with Encrypt-then-MAC.
    + Fixed the ssl_client2 example to send application data with 0-length content when the request_size argument is set to 0 as stated in the documentation. #1833.
    + Corrected the documentation for mbedtls_ssl_get_session(). This API has deep copy of the session, and the peer certificate is not lost. #926.
    + Fixed issues when building to the C99 standard, using -std=c99. Fixed by Nick Wilson.
  * Changes
    + Fails when receiving a TLS alert message with an invalid length, or invalid zero-length messages when using TLS 1.2. Contributed by Espressif Systems.
    + Changed the default behaviour of mbedtls_hkdf_extract() to return an error when calling with a NULL salt and non-zero salt length. Contributed by Brian J Murray
    + Change the shebang line in Perl scripts to look up perl in the PATH. Contributed by fbrosson.
    + Allow overriding the time on Windows via the platform-time abstraction. Fixed by Nick Wilson.
    + Use gmtime_r/gmtime_s for thread-safety. Fixed by Nick Wilson.</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1544529600">- Update to version 2.14.1: [bsc#1118727, CVE-2018-19608]
  Security
  * Fix timing variations and memory access variations in RSA PKCS#1 v1.5
    decryption that could lead to a Bleichenbacher-style padding oracle
    attack. In TLS, this affects servers that accept ciphersuites based on
    RSA decryption (i.e. ciphersuites whose name contains RSA but not
    (EC)DH(E)). Discovered by Eyal Ronen (Weizmann Institute),  Robert Gillham
    (University of Adelaide), Daniel Genkin (University of Michigan),
    Adi Shamir (Weizmann Institute), David Wong (NCC Group), and Yuval Yarom
    (University of Adelaide, Data61). The attack is described in more detail
    in the paper available here: http://cat.eyalro.net/cat.pdf  CVE-2018-19608
  * In mbedtls_mpi_write_binary(), don't leak the exact size of the number
    via branching and memory access patterns. An attacker who could submit
    a plaintext for RSA PKCS#1 v1.5 decryption but only observe the timing
    of the decryption and not its result could nonetheless decrypt RSA
    plaintexts and forge RSA signatures. Other asymmetric algorithms may
    have been similarly vulnerable. Reported by Eyal Ronen, Robert Gillham,
    Daniel Genkin, Adi Shamir, David Wong and Yuval Yarom.
  * Wipe sensitive buffers on the stack in the CTR_DRBG and HMAC_DRBG
    modules.
  API Changes
  * The new functions mbedtls_ctr_drbg_update_ret() and
    mbedtls_hmac_drbg_update_ret() are similar to mbedtls_ctr_drbg_update()
    and mbedtls_hmac_drbg_update() respectively, but the new functions
    report errors whereas the old functions return void. We recommend that
    applications use the new functions.
- Version 2.14.0:
  Security
  * Fix overly strict DN comparison when looking for CRLs belonging to a
    particular CA. This previously led to ignoring CRLs when the CRL's issuer
    name and the CA's subject name differed in their string encoding (e.g.,
    one using PrintableString and the other UTF8String) or in the choice of
    upper and lower case. Reported by Henrik Andersson of Bosch GmbH in issue
    [#1784].
  * Fix a flawed bounds check in server PSK hint parsing. In case the
    incoming message buffer was placed within the first 64KiB of address
    space and a PSK-(EC)DHE ciphersuite was used, this allowed an attacker
    to trigger a memory access up to 64KiB beyond the incoming message buffer,
    potentially leading to an application crash or information disclosure.
  * Fix mbedtls_mpi_is_prime() to use more rounds of probabilistic testing. The
    previous settings for the number of rounds made it practical for an
    adversary to construct non-primes that would be erroneously accepted as
    primes with high probability. This does not have an impact on the
    security of TLS, but can matter in other contexts with numbers chosen
    potentially by an adversary that should be prime and can be validated.
    For example, the number of rounds was enough to securely generate RSA key
    pairs or Diffie-Hellman parameters, but was insufficient to validate
    Diffie-Hellman parameters properly.
    See "Prime and Prejudice" by by Martin R. Albrecht and Jake Massimo and
    Kenneth G. Paterson and Juraj Somorovsky.
  Features
  * Add support for temporarily suspending expensive ECC computations after
    some configurable amount of operations. This is intended to be used in
    constrained, single-threaded systems where ECC is time consuming and can
    block other operations until they complete. This is disabled by default,
    but can be enabled by MBEDTLS_ECP_RESTARTABLE at compile time and
    configured by mbedtls_ecp_set_max_ops() at runtime. It applies to the new
    xxx_restartable functions in ECP, ECDSA, PK and X.509 (CRL not supported
    yet), and to existing functions in ECDH and SSL (currently only
    implemented client-side, for ECDHE-ECDSA ciphersuites in TLS 1.2,
    including client authentication).
  * Add support for Arm CPU DSP extensions to accelerate asymmetric key
    operations. On CPUs where the extensions are available, they can accelerate
    MPI multiplications used in ECC and RSA cryptography. Contributed by
    Aurelien Jarno.
  * Extend RSASSA-PSS signature to allow a smaller salt size. Previously, PSS
    signature always used a salt with the same length as the hash, and returned
    an error if this was not possible. Now the salt size may be up to two bytes
    shorter. This allows the library to support all hash and signature sizes
    that comply with FIPS 186-4, including SHA-512 with a 1024-bit key.
  * Add support for 128-bit keys in CTR_DRBG. Note that using keys shorter
    than 256 bits limits the security of generated material to 128 bits.
  API Changes
  * Add a common error code of `MBEDTLS_ERR_PLATFORM_FEATURE_UNSUPPORTED` for
    a feature that is not supported by underlying alternative
    implementations implementing cryptographic primitives. This is useful for
    hardware accelerators that don't implement all options or features.
  New deprecations
  * All module specific errors following the form
    MBEDTLS_ERR_XXX_FEATURE_UNAVAILABLE that indicate a feature is not
    supported are deprecated and are now replaced by the new equivalent
    platform error.
  * All module specific generic hardware acceleration errors following the
    form MBEDTLS_ERR_XXX_HW_ACCEL_FAILED that are deprecated and are replaced
    by the equivalent plaform error.
  * Deprecate the function mbedtls_mpi_is_prime() in favor of
    mbedtls_mpi_is_prime_ext() which allows specifying the number of
    Miller-Rabin rounds.
  Bugfix
  * Fix wrong order of freeing in programs/ssl/ssl_server2 example
    application leading to a memory leak in case both
    MBEDTLS_MEMORY_BUFFER_ALLOC_C and MBEDTLS_MEMORY_BACKTRACE are set.
    Fixes #2069.
  * Fix a bug in the update function for SSL ticket keys which previously
    invalidated keys of a lifetime of less than a 1s. Fixes #1968.
  * Fix failure in hmac_drbg in the benchmark sample application, when
    MBEDTLS_THREADING_C is defined. Found by TrinityTonic, #1095
  * Fix a bug in the record decryption routine ssl_decrypt_buf()
    which lead to accepting properly authenticated but improperly
    padded records in case of CBC ciphersuites using Encrypt-then-MAC.
  * Fix memory leak and freeing without initialization in the example
    program programs/x509/cert_write. Fixes #1422.
  * Ignore IV in mbedtls_cipher_set_iv() when the cipher mode is
    MBEDTLS_MODE_ECB. Found by ezdevelop. Fixes #1091.
  * Zeroize memory used for buffering or reassembling handshake messages
    after use.
  * Use `mbedtls_platform_zeroize()` instead of `memset()` for zeroization
    of sensitive data in the example programs aescrypt2 and crypt_and_hash.
  * Change the default string format used for various X.509 DN attributes to
    UTF8String. Previously, the use of the PrintableString format led to
    wildcards and non-ASCII characters being unusable in some DN attributes.
    Reported by raprepo in #1860 and by kevinpt in #468. Fix contributed by
    Thomas-Dee.
  * Fix compilation failure for configurations which use compile time
    replacements of standard calloc/free functions through the macros
    MBEDTLS_PLATFORM_CALLOC_MACRO and MBEDTLS_PLATFORM_FREE_MACRO.
    Reported by ole-de and ddhome2006. Fixes #882, #1642 and #1706.
  Changes
  * Removed support for Yotta as a build tool.
  * Add tests for session resumption in DTLS.
  * Close a test gap in (D)TLS between the client side and the server side:
    test the handling of large packets and small packets on the client side
    in the same way as on the server side.
  * Change the dtls_client and dtls_server samples to work by default over
    IPv6 and optionally by a build option over IPv4.
  * Change the use of Windows threading to use Microsoft Visual C++ runtime
    calls, rather than Win32 API calls directly. This is necessary to avoid
    conflict with C runtime usage. Found and fixed by irwir.
  * Remember the string format of X.509 DN attributes when replicating
    X.509 DNs. Previously, DN attributes were always written in their default
    string format (mostly PrintableString), which could lead to CRTs being
    created which used PrintableStrings in the issuer field even though the
    signing CA used UTF8Strings in its subject field; while X.509 compliant,
    such CRTs were rejected in some applications, e.g. some versions of
    Firefox, curl and GnuTLS. Reported in #1033 by Moschn. Fix contributed by
    Thomas-Dee.
  * Improve documentation of mbedtls_ssl_get_verify_result().
    Fixes #517 reported by github-monoculture.
  * Add MBEDTLS_MPI_GEN_PRIME_FLAG_LOW_ERR flag to mbedtls_mpi_gen_prime() and
    use it to reduce error probability in RSA key generation to levels mandated
    by FIPS-186-4.
- Version 2.13.1
  API Changes
  * Extend the platform module with an abstraction mbedtls_platform_gmtime_r()
    whose implementation should behave as a thread-safe version of gmtime().
    This allows users to configure such an implementation at compile time when
    the target system cannot be deduced automatically, by setting the option
    MBEDTLS_PLATFORM_GMTIME_R_ALT. At this stage Mbed TLS is only able to
    automatically select implementations for Windows and POSIX C libraries.
  Bugfix
  * Fix build failures on platforms where only gmtime() is available but
    neither gmtime_r() nor gmtime_s() are present. Fixes #1907.
- Version 2.13.0
  Security
  * Fix an issue in the X.509 module which could lead to a buffer overread
    during certificate extensions parsing. In case of receiving malformed
    input (extensions length field equal to 0), an illegal read of one byte
    beyond the input buffer is made. Found and analyzed by Nathan Crandall.
  Features
  * Add support for fragmentation of outgoing DTLS handshake messages. This
    is controlled by the maximum fragment length as set locally or negotiated
    with the peer, as well as by a new per-connection MTU option, set using
    mbedtls_ssl_set_mtu().
  * Add support for auto-adjustment of MTU to a safe value during the
    handshake when flights do not get through (RFC 6347, section 4.1.1.1,
    last paragraph).
  * Add support for packing multiple records within a single datagram,
    enabled by default.
  * Add support for buffering out-of-order handshake messages in DTLS.
    The maximum amount of RAM used for this can be controlled by the
    compile-time constant MBEDTLS_SSL_DTLS_MAX_BUFFERING defined
    in mbedtls/config.h.
  API Changes
  * Add function mbedtls_ssl_set_datagram_packing() to configure
    the use of datagram packing (enabled by default).
  Bugfix
  * Fix a potential memory leak in mbedtls_ssl_setup() function. An allocation
    failure in the function could lead to other buffers being leaked.
  * Fixes an issue with MBEDTLS_CHACHAPOLY_C which would not compile if
    MBEDTLS_ARC4_C and MBEDTLS_CIPHER_NULL_CIPHER weren't also defined. #1890
  * Fix a memory leak in ecp_mul_comb() if ecp_precompute_comb() fails.
    Fix contributed by Espressif Systems.
  * Add ecc extensions only if an ecc based ciphersuite is used.
    This improves compliance to RFC 4492, and as a result, solves
    interoperability issues with BouncyCastle. Raised by milenamil in #1157.
  * Replace printf with mbedtls_printf in the ARIA module. Found by
    TrinityTonic in #1908.
  * Fix potential use-after-free in mbedtls_ssl_get_max_frag_len()
    and mbedtls_ssl_get_record_expansion() after a session reset. Fixes #1941.
  * Fix a bug that caused SSL/TLS clients to incorrectly abort the handshake
    with TLS versions 1.1 and earlier when the server requested authentication
    without providing a list of CAs. This was due to an overly strict bounds
    check in parsing the CertificateRequest message,
    introduced in Mbed TLS 2.12.0. Fixes #1954.
  * Fix a miscalculation of the maximum record expansion in
    mbedtls_ssl_get_record_expansion() in case of ChachaPoly ciphersuites,
    or CBC ciphersuites in (D)TLS versions 1.1 or higher. Fixes #1913, #1914.
  * Fix undefined shifts with negative values in certificates parsing
    (found by Catena cyber using oss-fuzz)
  * Fix memory leak and free without initialization in pk_encrypt
    and pk_decrypt example programs. Reported by Brace Stout. Fixes #1128.
  * Remove redundant else statement. Raised by irwir. Fixes #1776.
  Changes
  * Copy headers preserving timestamps when doing a "make install".
    Contributed by xueruini.
  * Allow the forward declaration of public structs. Contributed by Dawid
    Drozd. Fixes #1215 raised by randombit.
  * Improve compatibility with some alternative CCM implementations by using
    CCM test vectors from RAM.
  * Add support for buffering of out-of-order handshake messages.
  * Add warnings to the documentation of the HKDF module to reduce the risk
    of misusing the mbedtls_hkdf_extract() and mbedtls_hkdf_expand()
    functions. Fixes #1775. Reported by Brian J. Murray.</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1544529601">- Library package version bumped to libmbedtls12</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1546862400">- Update to version 2.16.0:
  Features
  * Add a new config.h option of MBEDTLS_CHECK_PARAMS that enables validation of parameters in the API. This allows detection of obvious misuses of the API, such as passing NULL pointers. The API of existing functions hasn't changed, but requirements on parameters have been made more explicit in the documentation. See the corresponding API documentation for each function to see for which parameter values it is defined. This feature is disabled by default. See its API documentation in config.h for additional steps you have to take when enabling it.
  API Changes
  * The following functions in the random generator modules have been deprecated and replaced as shown below. The new functions change the return type from void to int to allow returning error codes when using MBEDTLS_&lt;MODULE&gt;_ALT for the underlying AES or message digest primitive. Fixes #1798. mbedtls_ctr_drbg_update() -&gt; mbedtls_ctr_drbg_update_ret() mbedtls_hmac_drbg_update() -&gt; mbedtls_hmac_drbg_update_ret()
  * Extend ECDH interface to enable alternative implementations.
  * Deprecate error codes of the form MBEDTLS_ERR_xxx_INVALID_KEY_LENGTH for ARIA, CAMELLIA and Blowfish. These error codes will be replaced by the more generic per-module error codes MBEDTLS_ERR_xxx_BAD_INPUT_DATA.
  * Additional parameter validation checks have been added for the following modules - AES, ARIA, Blowfish, CAMELLIA, CCM, GCM, DHM, ECP, ECDSA, ECDH, ECJPAKE, SHA, Chacha20 and Poly1305, cipher, pk, RSA, and MPI. Where modules have had parameter validation added, existing parameter checks may have changed. Some modules, such as Chacha20 had existing parameter validation whereas other modules had little. This has now been changed so that the same level of validation is present in all modules, and that it is now optional with the MBEDTLS_CHECK_PARAMS flag which by default is off. That means that checks which were previously present by default will no longer be.
  New deprecations
  * Deprecate mbedtls_ctr_drbg_update() and mbedtls_hmac_drbg_update() in favor of functions that can return an error code.
  Bugfix
  * Fix for Clang, which was reporting a warning for the bignum.c inline assembly for AMD64 targets creating string literals greater than those permitted by the ISO C99 standard. Found by Aaron Jones. Fixes #482.
  * Fix runtime error in mbedtls_platform_entropy_poll() when run through qemu user emulation. Reported and fix suggested by randombit. Fixes #1212.
  * Fix an unsafe bounds check when restoring an SSL session from a ticket. This could lead to a buffer overflow, but only in case ticket authentication was broken. Reported and fix suggested by Guido Vranken in #659.
  * Add explicit integer to enumeration type casts to example program programs/pkey/gen_key which previously led to compilation failure on some toolchains. Reported by phoenixmcallister. Fixes #2170.
  * Clarify documentation of mbedtls_ssl_set_own_cert() regarding the absence of check for certificate/key matching. Reported by Attila Molnar, #507.
  * Fix double initialization of ECC hardware that made some accelerators hang.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1567512000">- Update to version 2.16.2:
  * Security improvements and bugfixes
- Use ninja to for build</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1573646400">- Update to version 2.16.3:
  * Security improvements and bugfixes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1585828800">- Update to version 2.16.5:
  * Security improvements and bugfixes</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597665600">- update to 2.23.0:
  a lot of changes see https://github.com/ARMmbed/mbedtls/releases/tag/v2.23.0
  * Fix a side channel vulnerability in modular exponentiation that could reveal an RSA private key used in a secure enclave. Noticed by Sangho Lee, Ming-Wei Shih, Prasun Gera, Taesoo Kim and Hyesoon Kim (Georgia Institute of Technology); and Marcus Peinado (Microsoft Research). Reported by Raoul Strackx (Fortanix) in #3394.
  * Fix side channel in mbedtls_ecp_check_pub_priv() and mbedtls_pk_parse_key() / mbedtls_pk_parse_keyfile() (when loading a private key that didn't include the uncompressed public key), as well as mbedtls_ecp_mul() / mbedtls_ecp_mul_restartable() when called with a NULL f_rng argument. An attacker with access to precise enough timing and memory access information (typically an untrusted operating system attacking a secure enclave) could fully recover the ECC private key. Found and reported by Alejandro Cabrera Aldaya and Billy Brumley.
  * Fix issue in Lucky 13 counter-measure that could make it ineffective when hardware accelerators were used (using one of the MBEDTLS_SHAxxx_ALT macros). This would cause the original Lucky 13 attack to be possible in those configurations, allowing an active network attacker to recover plaintext after repeated timing measurements under some conditions. Reported and fix suggested by Luc Perneel in #3246.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1598875200">- Do not run testsuite in parallel - its not reliable</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1599480000">- Add workaround for failing builds (Python not found) due to
  https://gitlab.kitware.com/cmake/cmake/-/issues/21168</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1599652800">- update to 2.24.0:
  * see https://github.com/ARMmbed/mbedtls/releases/tag/v2.24.0
  * Fix a vulnerability in the verification of X.509 certificates when matching
  the expected common name (the cn argument of mbedtls_x509_crt_verify())
  with the actual certificate name: when the subjecAltName extension is
  present, the expected name was compared to any name in that extension
  regardless of its type. This means that an attacker could for example
  impersonate a 4-bytes or 16-byte domain by getting a certificate for the
  corresponding IPv4 or IPv6 (this would require the attacker to control that
  IP address, though). Similar attacks using other subjectAltName name types
  might be possible.
  * When checking X.509 CRLs, a certificate was only considered as revoked if
  its revocationDate was in the past according to the local clock if
  available. In particular, on builds without MBEDTLS_HAVE_TIME_DATE,
  certificates were never considered as revoked. On builds with
  MBEDTLS_HAVE_TIME_DATE, an attacker able to control the local clock (for
  example, an untrusted OS attacking a secure enclave) could prevent
  revocation of certificates via CRLs. Fixed by no longer checking the
  revocationDate field, in accordance with RFC 5280. Reported by yuemonangong
  in #3340. Reported independently and fixed by Raoul Strackx and Jethro
  * In (D)TLS record decryption, when using a CBC ciphersuites without the
  Encrypt-then-Mac extension, use constant code flow memory access patterns
  to extract and check the MAC. This is an improvement to the existing
  countermeasure against Lucky 13 attacks. The previous countermeasure was
  effective against network-based attackers, but less so against local
  attackers. The new countermeasure defends against local attackers, even if
  they have access to fine-grained measurements. In particular, this fixes a
  local Lucky 13 cache attack found and reported by Tuba Yavuz, Farhaan
  Fowze, Ken (Yihan) Bai, Grant Hernandez, and Kevin Butler (University of
  Florida) and Dave Tian (Purdue University).
  * Fix side channel in RSA private key operations and static (finite-field)
  Diffie-Hellman. An adversary with precise enough timing and memory access
  information (typically an untrusted operating system attacking a secure
  enclave) could bypass an existing counter-measure (base blinding) and
  potentially fully recover the private key.
  * Fix a 1-byte buffer overread in mbedtls_x509_crl_parse_der(). Credit to
  OSS-Fuzz for detecting the problem and to Philippe Antoine for pinpointing
  the problematic code.
  * Zeroising of plaintext buffers in mbedtls_ssl_read() to erase unused
  application data from memory.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1608638400">- update to 2.25.0:
  * This release of Mbed TLS provides bug fixes, minor enhancements and new
  features. This release includes fixes for security issues.
  * see https://github.com/ARMmbed/mbedtls/releases/tag/v2.25.0
  * The functions mbedtls_cipher_auth_encrypt() and
  mbedtls_cipher_auth_decrypt() would write past the minimum documented size
  of the output buffer when used with NIST_KW. As a result, code using those
  functions as documented with NIST_KW could have a buffer overwrite of up to
  15 bytes, with consequences ranging up to arbitrary code execution
  depending on the location of the output buffer.
  * Limit the size of calculations performed by mbedtls_mpi_exp_mod to
  MBEDTLS_MPI_MAX_SIZE to prevent a potential denial of service when generating
  Diffie-Hellman key pairs. Credit to OSS-Fuzz.
  * A failure of the random generator was ignored in mbedtls_mpi_fill_random(),
  which is how most uses of randomization in asymmetric cryptography (including
  key generation, intermediate value randomization and blinding) are implemented.
  This could cause failures or the silent use of non-random values. A random
  generator can fail if it needs reseeding and cannot not obtain entropy, or due
  to an internal failure (which, for Mbed TLS's own CTR_DRBG or HMAC_DRBG, can
  only happen due to a misconfiguration).
  * Fix a compliance issue whereby we were not checking the tag on the algorithm
  parameters (only the size) when comparing the signature in the description part
  of the cert to the real signature. This meant that a NULL algorithm parameters
  entry would look identical to an array of REAL (size zero) to the library and
  thus the certificate would be considered valid. However, if the parameters do
  not match in any way then the certificate should be considered invalid, and
  indeed OpenSSL marks these certs as invalid when mbedtls did not. Many thanks
  to guidovranken who found this issue via differential fuzzing and reported it
  in #3629.
  * Zeroising of local buffers and variables which are used for calculations in
  mbedtls_pkcs5_pbkdf2_hmac(), mbedtls_internal_sha*_process(),
  mbedtls_internal_md*_process() and mbedtls_internal_ripemd160_process()
  functions to erase sensitive data from memory. Reported by Johan Malmgren and
  Johan Uppman Bruce from Sectra.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1611057600">- Fix build for Leap targets
- Use upstream tarball name</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1616414400">- Update to 2.26.0: [bsc#1189589, CVE-2021-24119]
  * * This release of Mbed TLS provides bug fixes, minor enhancements and new
  features. This release includes fixes for security issues.
  * see https://github.com/ARMmbed/mbedtls/releases/tag/v2.26.0
- Fix build with patch from https://github.com/ARMmbed/mbedtls/pull/4237
  mbedtls-4237.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1618488000">-  Workaround for building with gcc-11 boo#1181876</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1626782400">- Update to 2.27.0:
  API changes:
  * Update AEAD output size macros to bring them in line with the PSA Crypto
    API version 1.0 spec. This version of the spec parameterizes them on the
    key type used, as well as the key bit-size in the case of
    PSA_AEAD_TAG_LENGTH.
    The old versions of these macros were renamed and deprecated as follows:
  - PSA_AEAD_TAG_LENGTH          -&gt; PSA_AEAD_TAG_LENGTH_1_ARG
  - PSA_AEAD_ENCRYPT_OUTPUT_SIZE -&gt; PSA_AEAD_ENCRYPT_OUTPUT_SIZE_2_ARG
  - PSA_AEAD_DECRYPT_OUTPUT_SIZE -&gt; PSA_AEAD_DECRYPT_OUTPUT_SIZE_2_ARG
  - PSA_AEAD_UPDATE_OUTPUT_SIZE  -&gt; PSA_AEAD_UPDATE_OUTPUT_SIZE_2_ARG
  - PSA_AEAD_FINISH_OUTPUT_SIZE  -&gt; PSA_AEAD_FINISH_OUTPUT_SIZE_1_ARG
  - PSA_AEAD_VERIFY_OUTPUT_SIZE  -&gt; PSA_AEAD_VERIFY_OUTPUT_SIZE_1_ARG
  * Implement one-shot cipher functions, psa_cipher_encrypt and
    psa_cipher_decrypt, according to the PSA Crypto API 1.0.0
    specification.
  Features:
  * Add mbedtls_rsa_rsassa_pss_sign_ext() function allowing to generate a
    signature with a specific salt length. This function allows to validate
    test cases provided in the NIST's CAVP test suite.
  * Added support for built-in driver keys through the PSA opaque crypto
    driver interface. Refer to the documentation of
    MBEDTLS_PSA_CRYPTO_BUILTIN_KEYS for more information.
  * Implement psa_sign_message() and psa_verify_message().
  * The new function mbedtls_mpi_random() generates a random value in a
    given range uniformly.
  * Implement psa_mac_compute() and psa_mac_verify() as defined in the
    PSA Cryptograpy API 1.0.0 specification.
  * MBEDTLS_ECP_MAX_BITS is now determined automatically from the configured
    curves and no longer needs to be configured explicitly to save RAM.
  Security
  * Fix a bias in the generation of finite-field Diffie-Hellman-Merkle (DHM)
    private keys and of blinding values for DHM and elliptic curves (ECP)
    computations.
  * Fix a potential side channel vulnerability in ECDSA ephemeral key generation.
    An adversary who is capable of very precise timing measurements could
    learn partial information about the leading bits of the nonce used for the
    signature, allowing the recovery of the private key after observing a
    large number of signature operations. This completes a partial fix in
    Mbed TLS 2.20.0.
  * It was possible to configure MBEDTLS_ECP_MAX_BITS to a value that is
    too small, leading to buffer overflows in ECC operations. Fail the build
    in such a case.
  * An adversary with access to precise enough information about memory
    accesses (typically, an untrusted operating system attacking a secure
    enclave) could recover an RSA private key after observing the victim
    performing a single private-key operation.
  * An adversary with access to precise enough timing information (typically, a
    co-located process) could recover a Curve25519 or Curve448 static ECDH key
    after inputting a chosen public key and observing the victim performing the
    corresponding private-key operation.
  Bugfix
  * Add printf function attributes to mbedtls_debug_print_msg to ensure we
    get printf format specifier warnings.
  * Fix premature fopen() call in mbedtls_entropy_write_seed_file which may
    lead to seed file corruption in the case where the path to the seed file is
    equal to MBEDTLS_PLATFORM_STD_NV_SEED_FILE.
  * PSA functions other than psa_open_key now return PSA_ERROR_INVALID_HANDLE
    rather than PSA_ERROR_DOES_NOT_EXIST for an invalid handle, bringing them
    in line with version 1.0.0 of the specification.
  * PSA functions creating a key now return PSA_ERROR_INVALID_ARGUMENT rather
    than PSA_ERROR_INVALID_HANDLE when the identifier specified for the key
    to create is not valid, bringing them in line with version 1.0.0 of the
    specification.
  * Fix some cases in the bignum module where the library constructed an
    unintended representation of the value 0 which was not processed
    correctly by some bignum operations. This could happen when
    mbedtls_mpi_read_string() was called on "-0", or when
    mbedtls_mpi_mul_mpi() and mbedtls_mpi_mul_int() was called with one of
    the arguments being negative and the other being 0.
  * Fix a bug in ECDSA that would cause it to fail when the hash is all-bits
    zero.
  * Fix a compilation error when MBEDTLS_ECP_RANDOMIZE_MXZ_ALT is
    defined.
  * Fix an incorrect error code when parsing a PKCS#8 private key.
  * In a TLS client, enforce the Diffie-Hellman minimum parameter size
    set with mbedtls_ssl_conf_dhm_min_bitlen() precisely. Before, the
    minimum size was rounded down to the nearest multiple of 8.
  * In library/net_sockets.c, _POSIX_C_SOURCE and _XOPEN_SOURCE are
    defined to specific values.  If the code is used in a context
    where these are already defined, this can result in a compilation
    error.  Instead, assume that if they are defined, the values will
    be adequate to build Mbed TLS.
  * The cipher suite TLS-RSA-WITH-CAMELLIA-256-GCM-SHA384 was not available
    when SHA-1 was disabled and was offered when SHA-1 was enabled but SHA-384
    was disabled. Fix the dependency.
  * Do not offer SHA384 cipher suites when SHA-384 is disabled.
  * With MBEDTLS_PSA_CRYPTO_C disabled, some functions were getting built
    nonetheless, resulting in undefined reference errors when building a
    shared library.
  * Fix test suite code on platforms where int32_t is not int, such as
    Arm Cortex-M.
  * Fix some issues affecting MBEDTLS_ARIA_ALT implementations: a misplaced
    directive in a header and a missing initialization in the self-test.
  * Fix a missing initialization in the Camellia self-test, affecting
    MBEDTLS_CAMELLIA_ALT implementations.
  * Restore the ability to configure PSA via Mbed TLS options to support RSA
    key pair operations but exclude RSA key generation. When MBEDTLS_GENPRIME
    is not defined PSA will no longer attempt to use mbedtls_rsa_gen_key().
  * Fix a regression introduced in 2.24.0 which broke (D)TLS CBC ciphersuites
    (when the encrypt-then-MAC extension is not in use) with some ALT
    implementations of the underlying hash (SHA-1, SHA-256, SHA-384), causing
    the affected side to wrongly reject valid messages.
  * Remove outdated check-config.h check that prevented implementing the
    timing module on Mbed OS.
  * Fix PSA_ALG_TLS12_PRF and PSA_ALG_TLS12_PSK_TO_MS being too permissive
    about missing inputs.
  * Fix a resource leak in a test suite with an alternative AES
    implementation.
  * Fix a crash in mbedtls_mpi_debug_mpi on a bignum having 0 limbs. This
    could notably be triggered by setting the TLS debug level to 3 or above
    and using a Montgomery curve for the key exchange.
  * psa_verify_hash() was relying on implementation-specific behavior of
    mbedtls_rsa_rsassa_pss_verify() and was causing failures in some _ALT
    implementations. This reliance is now removed.
  * Disallow inputs of length different from the corresponding hash when
    signing or verifying with PSA_ALG_RSA_PSS (The PSA Crypto API mandates
    that PSA_ALG_RSA_PSS uses the same hash throughout the algorithm.)
  * Fix a null pointer dereference when mbedtls_mpi_exp_mod() was called with
    A=0 represented with 0 limbs. Up to and including Mbed TLS 2.26, this bug
    could not be triggered by code that constructed A with one of the
    mbedtls_mpi_read_xxx functions (including in particular TLS code) since
    those always built an mpi object with at least one limb.
  * Fix mbedtls_mpi_gcd(G,A,B) when the value of B is zero. This had no
    effect on Mbed TLS's internal use of mbedtls_mpi_gcd(), but may affect
    applications that call mbedtls_mpi_gcd() directly.
  * The PSA API no longer allows the creation or destruction of keys with a
    read-only lifetime. The persistence level PSA_KEY_PERSISTENCE_READ_ONLY
    can now only be used as intended, for keys that cannot be modified through
    normal use of the API.
  * When MBEDTLS_PSA_CRYPTO_SPM is enabled, crypto_spe.h was not included
    in all the right places. Include it from crypto_platform.h, which is
    the natural place.
  * mbedtls_pk_sign() and mbedtls_pk_verify() and their extended and
    restartable variants now always honor the specified hash length if
    nonzero. Before, for RSA, hash_len was ignored in favor of the length of
    the specified hash algorithm.
  * Fix which alert is sent in some cases to conform to the
    applicable RFC: on an invalid Finished message value, an
    invalid max_fragment_length extension, or an
    unsupported extension used by the server.
  * Correct (change from 12 to 13 bytes) the value of the macro describing the
    maximum nonce length returned by psa_aead_generate_nonce().
  Changes
  * Add extra printf compiler warning flags to builds.
  * Fix memsan build false positive in x509_crt.c with Clang 11
  * Fix the setting of the read timeout in the DTLS sample programs.
  * Remove the AES sample application programs/aes/aescrypt2 which shows
    bad cryptographic practice.
  * Alternative implementations of CMAC may now opt to not support 3DES as a
    CMAC block cipher, and still pass the CMAC self test.
  * Remove configs/config-psa-crypto.h, which was identical to the default
    configuration except for having some extra cryptographic mechanisms
    enabled and for unintended differences. This configuration was primarily
    intended to demonstrate the PSA API, and lost most of its usefulness when
    MBEDTLS_PSA_CRYPTO_C became enabled by default.
  * When building the test suites with GNU make, invoke python3 or python, not
    python2, which is no longer supported upstream.
  * When using session cache based session resumption on the server,
    double-check that custom session cache implementations return
    sessions which are consistent with the negotiated ciphersuite
    and compression method.
  * Fix build failure on MinGW toolchain when __USE_MING_ANSI_STDIO is on.
    When that flag is on, standard GNU C printf format specifiers
    should be used.
  * Reduce the default value of MBEDTLS_ECP_WINDOW_SIZE. This reduces RAM usage
    during ECC operations at a negligible performance cost.
  * mbedtls_mpi_read_binary(), mbedtls_mpi_read_binary_le() and
    mbedtls_mpi_read_string() now construct an mbedtls_mpi object with 0 limbs
    when their input has length 0. Note that this is an implementation detail
    and can change at any time, so this change should be transparent, but it
    may result in mbedtls_mpi_write_binary() or mbedtls_mpi_write_string()
    now writing an empty string where it previously wrote one or more
    zero digits when operating from values constructed with an mpi_read
    function and some mpi operations.
  * Implicitly add PSA_KEY_USAGE_SIGN_MESSAGE key usage policy flag when
    PSA_KEY_USAGE_SIGN_HASH flag is set and PSA_KEY_USAGE_VERIFY_MESSAGE flag
    when PSA_KEY_USAGE_VERIFY_HASH flag is set. This usage flag extension
    is also applied when loading a key from storage.
  * Remove mbedtls-4237.patch upstream
  * Library soname bump to libmbedcrypto7</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1642075200">- Update to 2.28.0: (bsc#1193979, CVE-2021-45450)
  API changes
  * Some fields of mbedtls_ssl_session and mbedtls_ssl_config are in a
  different order. This only affects applications that define such
  structures directly or serialize them.
  Requirement changes
  * Sign-magnitude and one's complement representations for signed integers are
  not supported. Two's complement is the only supported representation.
  Removals
  * Remove config option MBEDTLS_TLS_DEFAULT_ALLOW_SHA1_IN_CERTIFICATES,
  which allowed SHA-1 in the default TLS configuration for certificate
  signing. It was intended to facilitate the transition in environments
  with SHA-1 certificates. SHA-1 is considered a weak message digest and
  its use constitutes a security risk.
  * Remove the partial support for running unit tests via Greentea on Mbed OS,
  which had been unmaintained since 2018.
  Features
  * The identifier of the CID TLS extension can be configured by defining
  MBEDTLS_TLS_EXT_CID at compile time.
  * Warn if errors from certain functions are ignored. This is currently
  supported on GCC-like compilers and on MSVC and can be configured through
  the macro MBEDTLS_CHECK_RETURN. The warnings are always enabled
  (where supported) for critical functions where ignoring the return
  value is almost always a bug. Enable the new configuration option
  MBEDTLS_CHECK_RETURN_WARNING to get warnings for other functions. This
  is currently implemented in the AES, DES and md modules, and will be
  extended to other modules in the future.
  * Add missing PSA macros declared by PSA Crypto API 1.0.0:
  PSA_ALG_IS_SIGN_HASH, PSA_ALG_NONE, PSA_HASH_BLOCK_LENGTH, PSA_KEY_ID_NULL.
  * Add new API mbedtls_ct_memcmp for constant time buffer comparison.
  * Add PSA API definition for ARIA.
  Security
  * Zeroize several intermediate variables used to calculate the expected
  value when verifying a MAC or AEAD tag. This hardens the library in
  case the value leaks through a memory disclosure vulnerability. For
  example, a memory disclosure vulnerability could have allowed a
  man-in-the-middle to inject fake ciphertext into a DTLS connection.
  * In psa_cipher_generate_iv() and psa_cipher_encrypt(), do not read back
  from the output buffer. This fixes a potential policy bypass or decryption
  oracle vulnerability if the output buffer is in memory that is shared with
  an untrusted application.
  * Fix a double-free that happened after mbedtls_ssl_set_session() or
  mbedtls_ssl_get_session() failed with MBEDTLS_ERR_SSL_ALLOC_FAILED
  (out of memory). After that, calling mbedtls_ssl_session_free()
  and mbedtls_ssl_free() would cause an internal session buffer to
  be free()'d twice.
  Bugfix
  * Stop using reserved identifiers as local variables. Fixes #4630.
  * The GNU makefiles invoke python3 in preference to python except on Windows.
  * The check was accidentally not performed when cross-compiling for Windows
  on Linux. Fix this. Fixes #4774.
  * Prevent divide by zero if either of PSA_CIPHER_ENCRYPT_OUTPUT_SIZE() or
  PSA_CIPHER_UPDATE_OUTPUT_SIZE() were called using an asymmetric key type.
  * Fix a parameter set but unused in psa_crypto_cipher.c. Fixes #4935.
  * Don't use the obsolete header path sys/fcntl.h in unit tests.
  These header files cause compilation errors in musl.
  Fixes #4969.
  * Fix missing constraints on x86_64 and aarch64 assembly code
  for bignum multiplication that broke some bignum operations with
  (at least) Clang 12.
  Fixes #4116, #4786, #4917, #4962.
  * Fix mbedtls_cipher_crypt: AES-ECB when MBEDTLS_USE_PSA_CRYPTO is enabled.
  * Failures of alternative implementations of AES or DES single-block
  functions enabled with MBEDTLS_AES_ENCRYPT_ALT, MBEDTLS_AES_DECRYPT_ALT,
  MBEDTLS_DES_CRYPT_ECB_ALT or MBEDTLS_DES3_CRYPT_ECB_ALT were ignored.
  This does not concern the implementation provided with Mbed TLS,
  where this function cannot fail, or full-module replacements with
  MBEDTLS_AES_ALT or MBEDTLS_DES_ALT. Reported by Armelle Duboc in #1092.
  * Some failures of HMAC operations were ignored. These failures could only
  happen with an alternative implementation of the underlying hash module.
  * Fix the error returned by psa_generate_key() for a public key. Fixes #4551.
  * Fix the build of sample programs when neither MBEDTLS_ERROR_C nor
  MBEDTLS_ERROR_STRERROR_DUMMY is enabled.
  * Fix PSA_ALG_RSA_PSS verification accepting an arbitrary salt length.
  This algorithm now accepts only the same salt length for verification
  that it produces when signing, as documented. Use the new algorithm
  PSA_ALG_RSA_PSS_ANY_SALT to accept any salt length. Fixes #4946.
  * The existing predicate macro name PSA_ALG_IS_HASH_AND_SIGN is now reserved
  for algorithm values that fully encode the hashing step, as per the PSA
  Crypto API specification. This excludes PSA_ALG_RSA_PKCS1V15_SIGN_RAW and
  PSA_ALG_ECDSA_ANY. The new predicate macro PSA_ALG_IS_SIGN_HASH covers
  all algorithms that can be used with psa_{sign,verify}_hash(), including
  these two.
  * Fix issue in Makefile on Linux with SHARED=1, that caused shared libraries
  not to list other shared libraries they need.
  * Fix a bug in mbedtls_gcm_starts() when the bit length of the iv
  exceeds 2^32. Fixes #4884.
  * Fix an uninitialized variable warning in test_suite_ssl.function with GCC
  version 11.
  * Fix the build when no SHA2 module is included. Fixes #4930.
  * Fix the build when only the bignum module is included. Fixes #4929.
  * Fix a potential invalid pointer dereference and infinite loop bugs in
  pkcs12 functions when the password is empty. Fix the documentation to
  better describe the inputs to these functions and their possible values.
  Fixes #5136.
  * The key usage flags PSA_KEY_USAGE_SIGN_MESSAGE now allows the MAC
  operations psa_mac_compute() and psa_mac_sign_setup().
  * The key usage flags PSA_KEY_USAGE_VERIFY_MESSAGE now allows the MAC
  operations psa_mac_verify() and psa_mac_verify_setup().
  Changes
  * Set config option MBEDTLS_TLS_DEFAULT_ALLOW_SHA1_IN_KEY_EXCHANGE to be
  disabled by default.
  * Improve the performance of base64 constant-flow code. The result is still
  slower than the original non-constant-flow implementation, but much faster
  than the previous constant-flow implementation. Fixes #4814.
  * Indicate in the error returned if the nonce length used with
  ChaCha20-Poly1305 is invalid, and not just unsupported.
  * The mbedcrypto library includes a new source code module constant_time.c,
  containing various functions meant to resist timing side channel attacks.
  * This module does not have a separate configuration option, and functions
  from this module will be included in the build as required. Currently
  most of the interface of this module is private and may change at any
  time.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1642420800">- Fix baselib.conf</changelog>
  <changelog author="Alexander Bergmann &lt;abergmann@suse.com&gt;" date="1671624000">- Fix potential heap buffer overread and overwrite in DTLS if
  MBEDTLS_SSL_DTLS_CONNECTION_ID is enabled and
  MBEDTLS_SSL_CID_IN_LEN_MAX &gt; 2 * MBEDTLS_SSL_CID_OUT_LEN_MAX.
  (bsc#1206576, CVE-2022-46393).
  Add: mbedtls-CVE-2022-46393.patch</changelog>
</package>
<package pkgid="269229d650c6ba11aafe0d68a46306e134783c6003baca2a050b111bd2422e76" name="libmbedtls14" arch="x86_64">
  <version epoch="0" ver="2.28.0" rel="bp154.2.3.1"/>
  <changelog author="mpluskal@suse.com" date="1531137600">- Update to version 2.11.0:
  * Features
    + Added support for the XTS block cipher mode with AES (AES-XTS). Contributed by Aorimn in pull request #414.
    + Implemented the HMAC-based extract-and-expand key derivation function (HKDF) per RFC 5869. Contributed by Thomas Fossati.
    + For TLS servers, added support for offloading private key operations to an external cryptoprocessor. Private key operations can be asynchronous to allow non-blocking operation of the TLS server stack.
    + Added support for ARIA cipher (RFC 5794) and associated TLS ciphersuites (RFC 6209). ARIA is disabled by default. To enable, see MBEDTLS_ARIA_C in config.h.
    + Added support for the CCM* block cipher mode as defined in IEEE Std 802.15.4.
    + Added an additional block mode, OFB (Output Feedback) per NIST SP 800-38a, to the AES module and cipher abstraction module.
  * API Changes
    + Mbed TLS 2.11.0 maintains source code compatibility with the last minor version, Mbed TLS 2.9.0, but extends the interface with additional capabilities. Mbed TLS 2.11.0 modifies the ABI and increases the SOVERSION.
  * Bugfix
    + Fixed the cert_write example to handle certificates signed with elliptic curves as well as RSA. Fixes #777 found by dbedev.
    + Fixed the redefinition of _WIN32_WINNT, to avoid overriding a definition used by user applications. Found and fixed by Fabio Alessandrelli.
    + Fixed compilation warnings with the IAR toolchain on 32-bit platforms. Reported by rahmanih in #683.
    + Fixed an issue with MicroBlaze support in bn_mul.h which was causing the build to fail. Found by zv-io. Fixes #1651.
    + Fixed braces in mbedtls_memory_buffer_alloc_status(). Found by sbranden in #552.
    + Added the macro MBEDTLS_X509_MAX_FILE_PATH_LEN that enables the user to configure the maximum length of a file path that can be buffered when calling mbedtls_x509_crt_parse_path(). Fixes #492.
    + Fixed redundant declaration of mbedtls_ssl_list_ciphersuites. Raised by TrinityTonic in #1359.
- Changes for version 2.9.0:
  + Security
    + Fixed an issue in the X.509 module which could lead to a buffer overread during certificate validation. Additionally, the issue could also lead to unnecessary callback checks being made or to some validation checks to be omitted. The overread could be triggered remotely, while the other issues would require a non DER-compliant certificate to be correctly signed by a trusted CA, or a trusted CA with a non DER-compliant certificate. Found by luocm. Fixes #825.
    + Fixed the buffer length assertion in the ssl_parse_certificate_request() function which could lead to an arbitrary overread of the message buffer. The overreads could be caused by receiving a malformed algorithms section which was too short. In builds with debug output, this overread data was output with the debug data.
    + Fixed a client-side bug in the validation of the server's ciphersuite choice which could potentially lead to the client accepting a ciphersuite it didn't offer or a ciphersuite that could not be used with the TLS or DTLS version chosen by the server. This could lead to corruption of internal data structures for some configurations.
  * Features
    + Added an option of MBEDTLS_AES_FEWER_TABLES, to dynamically compute smaller AES tables during runtime, thereby reducing the RAM/ROM footprint by ~6KiB. Suggested and contributed by jkivilin.
    + Added initial support for Curve448 (RFC 7748). So far only mbedtls_ecp_mul() and ECDH primitive functions (mbedtls_ecdh_gen_public(), mbedtls_ecdh_compute_shared()) are supported for now. Contributed by Nicholas Wilson.
  * API Changes
    + Mbed TLS 2.9.0 maintains source code and binary compatibility with the last minor version, Mbed TLS 2.8.0, but extends the interface with additional capabilities.
    + Extended the API with the function of mbedtls_net_poll() to allow user applications to wait for a network context to become ready before reading or writing.
    + Added the function mbedtls_ssl_check_pending() to the public API to allow a check for whether more more data is pending to be processed in the internal message buffers. This function is necessary to determine the underlying transport when event-driven IO is used.
  * Bugfix
    + Fixed a spurious uninitialized variable warning in cmac.c. Fix independently contributed by Brian J Murray and David Brown.
    + Added missing dependencies in test suites that led to build failures in configurations that omit certain hashes or public-key algorithms. Fixes #1040.
    + Fixed a C89 incompatibility issue in benchmark.c. Contributed by Brendan Shanks. Fixes #1353.
    + Added missing dependencies for MBEDTLS_HAVE_TIME_DATE and MBEDTLS_VERSION_FEATURES in some test suites. Contributed by Deomid Ryabkov. Fixes #1299, #1475.
    + Fixed the Makefile build process for building shared libraries on Mac OS X. Fixed by mnacamura.
    + Fixed parsing of PKCS#8 encoded Elliptic Curve keys. Previously Mbed TLS was unable to parse keys which had only the optional parameters field of the ECPrivateKey structure. Found by Jethro Beekman, fixed in #1379.
    + Added an optimisation to return the plaintext data more quickly on unpadded CBC decryption, as stated in the mbedtls_cipher_update() documentation. Contributed by Andy Leiserson.
    + Fixed the overriding and ignoring of return values when parsing and writing to a file in the pk_sign program. Found by kevlut in #1142.
    + Added restrictions to the usage of the error code MBEDTLS_ERR_SSL_WANT_READ to situations where data needs to be fetched from the underlying transport in order to make progress. Previously, this error code was also occasionally returned when unexpected messages were being discarded, ignoring that further messages could potentially already be pending to be processed in the internal buffers; these cases led to deadlocks when event-driven I/O was used. Found and reported by Hubert Mis in #772.
    + Fixed buffer length assertions in the ssl_parse_certificate_request() function which led to a potential one byte overread of the message buffer.
    + Fixed invalid buffer sizes being passed to zlib during record compression and decompression.
    + Raised the soversion of libmbedcrypto to match the soversion of the maintained 2.7 branch. The soversion was increased in Mbed TLS version 2.7.1 to reflect breaking changes in that release, but the increment was missed in 2.8.0 and later releases outside of the 2.7 branch.</changelog>
  <changelog author="mpluskal@suse.com" date="1535025600">- Update to version 2.12.0:
  * Security
    + Fixed a vulnerability in the TLS ciphersuites based on use of CBC and SHA-384 in DTLS/TLS 1.0 to 1.2, that allowed an active network attacker to partially recover the plaintext of messages under certains conditions by exploiting timing side-channels.
    + Fixed a vulnerability in TLS ciphersuites based on CBC, in DTLS/TLS 1.0 to 1.2, that allowed a local attacker, with the ability to execute code on the local machine as well as to manipulate network packets, to partially recover the plaintext of messages under certain conditions by using a cache attack targetting an internal MD/SHA buffer.
    + Added a counter-measure against a vulnerability in TLS ciphersuites based on CBC, in DTLS/TLS 1.0 to 1.2, that allowed a local attacker with the ability to execute code on the local machine as well as manipulate network packets, to partially recover the plaintext of messages certain conditions (see previous entry) by using a cache attack targeting the SSL input record buffer.
  * Features
    + Added new cryptographic primitives, the stream cipher Chacha20, one-time authenticator Poly1305 and AEAD construct Chacha20-Poly1305, as defined in RFC 7539. Contributed by Daniel King.
    + Added support for the CHACHA20-POLY1305 ciphersuites from RFC 7905.
    + Made the receive and transmit buffers independently configurable in size, for situations where the outgoing buffer can be fixed at a smaller size than the incoming buffer
    + Added support for the AES based key wrapping modes defined by NIST SP 800-38F algorithms KW and KWP and by RFC's 3394 and 5649.
    + Added platform support for the Haiku OS.
  * Bugfix
    + Fixed the key_app_writer example which was creating an invalid ASN.1 tag by writing an additional leading zero byte. Found by Aryeh R. #1257.
    + Fixed a C++ compilation error, caused by a variable named new. Found and fixed by Hirotaka Niisato. #1783.
    + Fixed the "no symbols" warning issued by ranlib when building on Mac OS X. Fix contributed by tabascoeye.
    + Clarified documentation for mbedtls_ssl_write() to include 0 as a valid return value. Found by @davidwu2000. #839.
    + Fixed a memory leak in mbedtls_x509_csr_parse(). Found and fixed by catenacyber, Philippe Antoine. #1623.
    + Added length checks to some TLS parsing functions. Found and fixed by Philippe Antoine from Catena cyber. #1663.
    + Remove unused headers included in x509.c. Found by Chris Hanson and fixed by Brendan Shanks. #992.
    + Fixed compilation error when MBEDTLS_ARC4_C is disabled and MBEDTLS_CIPHER_NULL_CIPHER is enabled. Found by TrinityTonic in #1719.
    + Fixed the inline assembly for the MPI multiply helper function for i386 and i386 with SSE2. Found by László Langó. #1550.
    + Fixed the namespacing in header files. Remove the mbedtls namespacing in the #include in the header files. #857.
    + Fixed a compiler warning of 'use before initialisation' in mbedtls_pk_parse_key(). Found by Martin Boye Petersen and fixed by Dawid Drozd.#1098.
    + Fixed decryption of zero length messages (which contain all padding) when a CBC based ciphersuite was used together with Encrypt-then-MAC.
    + Fixed the ssl_client2 example to send application data with 0-length content when the request_size argument is set to 0 as stated in the documentation. #1833.
    + Corrected the documentation for mbedtls_ssl_get_session(). This API has deep copy of the session, and the peer certificate is not lost. #926.
    + Fixed issues when building to the C99 standard, using -std=c99. Fixed by Nick Wilson.
  * Changes
    + Fails when receiving a TLS alert message with an invalid length, or invalid zero-length messages when using TLS 1.2. Contributed by Espressif Systems.
    + Changed the default behaviour of mbedtls_hkdf_extract() to return an error when calling with a NULL salt and non-zero salt length. Contributed by Brian J Murray
    + Change the shebang line in Perl scripts to look up perl in the PATH. Contributed by fbrosson.
    + Allow overriding the time on Windows via the platform-time abstraction. Fixed by Nick Wilson.
    + Use gmtime_r/gmtime_s for thread-safety. Fixed by Nick Wilson.</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1544529600">- Update to version 2.14.1: [bsc#1118727, CVE-2018-19608]
  Security
  * Fix timing variations and memory access variations in RSA PKCS#1 v1.5
    decryption that could lead to a Bleichenbacher-style padding oracle
    attack. In TLS, this affects servers that accept ciphersuites based on
    RSA decryption (i.e. ciphersuites whose name contains RSA but not
    (EC)DH(E)). Discovered by Eyal Ronen (Weizmann Institute),  Robert Gillham
    (University of Adelaide), Daniel Genkin (University of Michigan),
    Adi Shamir (Weizmann Institute), David Wong (NCC Group), and Yuval Yarom
    (University of Adelaide, Data61). The attack is described in more detail
    in the paper available here: http://cat.eyalro.net/cat.pdf  CVE-2018-19608
  * In mbedtls_mpi_write_binary(), don't leak the exact size of the number
    via branching and memory access patterns. An attacker who could submit
    a plaintext for RSA PKCS#1 v1.5 decryption but only observe the timing
    of the decryption and not its result could nonetheless decrypt RSA
    plaintexts and forge RSA signatures. Other asymmetric algorithms may
    have been similarly vulnerable. Reported by Eyal Ronen, Robert Gillham,
    Daniel Genkin, Adi Shamir, David Wong and Yuval Yarom.
  * Wipe sensitive buffers on the stack in the CTR_DRBG and HMAC_DRBG
    modules.
  API Changes
  * The new functions mbedtls_ctr_drbg_update_ret() and
    mbedtls_hmac_drbg_update_ret() are similar to mbedtls_ctr_drbg_update()
    and mbedtls_hmac_drbg_update() respectively, but the new functions
    report errors whereas the old functions return void. We recommend that
    applications use the new functions.
- Version 2.14.0:
  Security
  * Fix overly strict DN comparison when looking for CRLs belonging to a
    particular CA. This previously led to ignoring CRLs when the CRL's issuer
    name and the CA's subject name differed in their string encoding (e.g.,
    one using PrintableString and the other UTF8String) or in the choice of
    upper and lower case. Reported by Henrik Andersson of Bosch GmbH in issue
    [#1784].
  * Fix a flawed bounds check in server PSK hint parsing. In case the
    incoming message buffer was placed within the first 64KiB of address
    space and a PSK-(EC)DHE ciphersuite was used, this allowed an attacker
    to trigger a memory access up to 64KiB beyond the incoming message buffer,
    potentially leading to an application crash or information disclosure.
  * Fix mbedtls_mpi_is_prime() to use more rounds of probabilistic testing. The
    previous settings for the number of rounds made it practical for an
    adversary to construct non-primes that would be erroneously accepted as
    primes with high probability. This does not have an impact on the
    security of TLS, but can matter in other contexts with numbers chosen
    potentially by an adversary that should be prime and can be validated.
    For example, the number of rounds was enough to securely generate RSA key
    pairs or Diffie-Hellman parameters, but was insufficient to validate
    Diffie-Hellman parameters properly.
    See "Prime and Prejudice" by by Martin R. Albrecht and Jake Massimo and
    Kenneth G. Paterson and Juraj Somorovsky.
  Features
  * Add support for temporarily suspending expensive ECC computations after
    some configurable amount of operations. This is intended to be used in
    constrained, single-threaded systems where ECC is time consuming and can
    block other operations until they complete. This is disabled by default,
    but can be enabled by MBEDTLS_ECP_RESTARTABLE at compile time and
    configured by mbedtls_ecp_set_max_ops() at runtime. It applies to the new
    xxx_restartable functions in ECP, ECDSA, PK and X.509 (CRL not supported
    yet), and to existing functions in ECDH and SSL (currently only
    implemented client-side, for ECDHE-ECDSA ciphersuites in TLS 1.2,
    including client authentication).
  * Add support for Arm CPU DSP extensions to accelerate asymmetric key
    operations. On CPUs where the extensions are available, they can accelerate
    MPI multiplications used in ECC and RSA cryptography. Contributed by
    Aurelien Jarno.
  * Extend RSASSA-PSS signature to allow a smaller salt size. Previously, PSS
    signature always used a salt with the same length as the hash, and returned
    an error if this was not possible. Now the salt size may be up to two bytes
    shorter. This allows the library to support all hash and signature sizes
    that comply with FIPS 186-4, including SHA-512 with a 1024-bit key.
  * Add support for 128-bit keys in CTR_DRBG. Note that using keys shorter
    than 256 bits limits the security of generated material to 128 bits.
  API Changes
  * Add a common error code of `MBEDTLS_ERR_PLATFORM_FEATURE_UNSUPPORTED` for
    a feature that is not supported by underlying alternative
    implementations implementing cryptographic primitives. This is useful for
    hardware accelerators that don't implement all options or features.
  New deprecations
  * All module specific errors following the form
    MBEDTLS_ERR_XXX_FEATURE_UNAVAILABLE that indicate a feature is not
    supported are deprecated and are now replaced by the new equivalent
    platform error.
  * All module specific generic hardware acceleration errors following the
    form MBEDTLS_ERR_XXX_HW_ACCEL_FAILED that are deprecated and are replaced
    by the equivalent plaform error.
  * Deprecate the function mbedtls_mpi_is_prime() in favor of
    mbedtls_mpi_is_prime_ext() which allows specifying the number of
    Miller-Rabin rounds.
  Bugfix
  * Fix wrong order of freeing in programs/ssl/ssl_server2 example
    application leading to a memory leak in case both
    MBEDTLS_MEMORY_BUFFER_ALLOC_C and MBEDTLS_MEMORY_BACKTRACE are set.
    Fixes #2069.
  * Fix a bug in the update function for SSL ticket keys which previously
    invalidated keys of a lifetime of less than a 1s. Fixes #1968.
  * Fix failure in hmac_drbg in the benchmark sample application, when
    MBEDTLS_THREADING_C is defined. Found by TrinityTonic, #1095
  * Fix a bug in the record decryption routine ssl_decrypt_buf()
    which lead to accepting properly authenticated but improperly
    padded records in case of CBC ciphersuites using Encrypt-then-MAC.
  * Fix memory leak and freeing without initialization in the example
    program programs/x509/cert_write. Fixes #1422.
  * Ignore IV in mbedtls_cipher_set_iv() when the cipher mode is
    MBEDTLS_MODE_ECB. Found by ezdevelop. Fixes #1091.
  * Zeroize memory used for buffering or reassembling handshake messages
    after use.
  * Use `mbedtls_platform_zeroize()` instead of `memset()` for zeroization
    of sensitive data in the example programs aescrypt2 and crypt_and_hash.
  * Change the default string format used for various X.509 DN attributes to
    UTF8String. Previously, the use of the PrintableString format led to
    wildcards and non-ASCII characters being unusable in some DN attributes.
    Reported by raprepo in #1860 and by kevinpt in #468. Fix contributed by
    Thomas-Dee.
  * Fix compilation failure for configurations which use compile time
    replacements of standard calloc/free functions through the macros
    MBEDTLS_PLATFORM_CALLOC_MACRO and MBEDTLS_PLATFORM_FREE_MACRO.
    Reported by ole-de and ddhome2006. Fixes #882, #1642 and #1706.
  Changes
  * Removed support for Yotta as a build tool.
  * Add tests for session resumption in DTLS.
  * Close a test gap in (D)TLS between the client side and the server side:
    test the handling of large packets and small packets on the client side
    in the same way as on the server side.
  * Change the dtls_client and dtls_server samples to work by default over
    IPv6 and optionally by a build option over IPv4.
  * Change the use of Windows threading to use Microsoft Visual C++ runtime
    calls, rather than Win32 API calls directly. This is necessary to avoid
    conflict with C runtime usage. Found and fixed by irwir.
  * Remember the string format of X.509 DN attributes when replicating
    X.509 DNs. Previously, DN attributes were always written in their default
    string format (mostly PrintableString), which could lead to CRTs being
    created which used PrintableStrings in the issuer field even though the
    signing CA used UTF8Strings in its subject field; while X.509 compliant,
    such CRTs were rejected in some applications, e.g. some versions of
    Firefox, curl and GnuTLS. Reported in #1033 by Moschn. Fix contributed by
    Thomas-Dee.
  * Improve documentation of mbedtls_ssl_get_verify_result().
    Fixes #517 reported by github-monoculture.
  * Add MBEDTLS_MPI_GEN_PRIME_FLAG_LOW_ERR flag to mbedtls_mpi_gen_prime() and
    use it to reduce error probability in RSA key generation to levels mandated
    by FIPS-186-4.
- Version 2.13.1
  API Changes
  * Extend the platform module with an abstraction mbedtls_platform_gmtime_r()
    whose implementation should behave as a thread-safe version of gmtime().
    This allows users to configure such an implementation at compile time when
    the target system cannot be deduced automatically, by setting the option
    MBEDTLS_PLATFORM_GMTIME_R_ALT. At this stage Mbed TLS is only able to
    automatically select implementations for Windows and POSIX C libraries.
  Bugfix
  * Fix build failures on platforms where only gmtime() is available but
    neither gmtime_r() nor gmtime_s() are present. Fixes #1907.
- Version 2.13.0
  Security
  * Fix an issue in the X.509 module which could lead to a buffer overread
    during certificate extensions parsing. In case of receiving malformed
    input (extensions length field equal to 0), an illegal read of one byte
    beyond the input buffer is made. Found and analyzed by Nathan Crandall.
  Features
  * Add support for fragmentation of outgoing DTLS handshake messages. This
    is controlled by the maximum fragment length as set locally or negotiated
    with the peer, as well as by a new per-connection MTU option, set using
    mbedtls_ssl_set_mtu().
  * Add support for auto-adjustment of MTU to a safe value during the
    handshake when flights do not get through (RFC 6347, section 4.1.1.1,
    last paragraph).
  * Add support for packing multiple records within a single datagram,
    enabled by default.
  * Add support for buffering out-of-order handshake messages in DTLS.
    The maximum amount of RAM used for this can be controlled by the
    compile-time constant MBEDTLS_SSL_DTLS_MAX_BUFFERING defined
    in mbedtls/config.h.
  API Changes
  * Add function mbedtls_ssl_set_datagram_packing() to configure
    the use of datagram packing (enabled by default).
  Bugfix
  * Fix a potential memory leak in mbedtls_ssl_setup() function. An allocation
    failure in the function could lead to other buffers being leaked.
  * Fixes an issue with MBEDTLS_CHACHAPOLY_C which would not compile if
    MBEDTLS_ARC4_C and MBEDTLS_CIPHER_NULL_CIPHER weren't also defined. #1890
  * Fix a memory leak in ecp_mul_comb() if ecp_precompute_comb() fails.
    Fix contributed by Espressif Systems.
  * Add ecc extensions only if an ecc based ciphersuite is used.
    This improves compliance to RFC 4492, and as a result, solves
    interoperability issues with BouncyCastle. Raised by milenamil in #1157.
  * Replace printf with mbedtls_printf in the ARIA module. Found by
    TrinityTonic in #1908.
  * Fix potential use-after-free in mbedtls_ssl_get_max_frag_len()
    and mbedtls_ssl_get_record_expansion() after a session reset. Fixes #1941.
  * Fix a bug that caused SSL/TLS clients to incorrectly abort the handshake
    with TLS versions 1.1 and earlier when the server requested authentication
    without providing a list of CAs. This was due to an overly strict bounds
    check in parsing the CertificateRequest message,
    introduced in Mbed TLS 2.12.0. Fixes #1954.
  * Fix a miscalculation of the maximum record expansion in
    mbedtls_ssl_get_record_expansion() in case of ChachaPoly ciphersuites,
    or CBC ciphersuites in (D)TLS versions 1.1 or higher. Fixes #1913, #1914.
  * Fix undefined shifts with negative values in certificates parsing
    (found by Catena cyber using oss-fuzz)
  * Fix memory leak and free without initialization in pk_encrypt
    and pk_decrypt example programs. Reported by Brace Stout. Fixes #1128.
  * Remove redundant else statement. Raised by irwir. Fixes #1776.
  Changes
  * Copy headers preserving timestamps when doing a "make install".
    Contributed by xueruini.
  * Allow the forward declaration of public structs. Contributed by Dawid
    Drozd. Fixes #1215 raised by randombit.
  * Improve compatibility with some alternative CCM implementations by using
    CCM test vectors from RAM.
  * Add support for buffering of out-of-order handshake messages.
  * Add warnings to the documentation of the HKDF module to reduce the risk
    of misusing the mbedtls_hkdf_extract() and mbedtls_hkdf_expand()
    functions. Fixes #1775. Reported by Brian J. Murray.</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1544529601">- Library package version bumped to libmbedtls12</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1546862400">- Update to version 2.16.0:
  Features
  * Add a new config.h option of MBEDTLS_CHECK_PARAMS that enables validation of parameters in the API. This allows detection of obvious misuses of the API, such as passing NULL pointers. The API of existing functions hasn't changed, but requirements on parameters have been made more explicit in the documentation. See the corresponding API documentation for each function to see for which parameter values it is defined. This feature is disabled by default. See its API documentation in config.h for additional steps you have to take when enabling it.
  API Changes
  * The following functions in the random generator modules have been deprecated and replaced as shown below. The new functions change the return type from void to int to allow returning error codes when using MBEDTLS_&lt;MODULE&gt;_ALT for the underlying AES or message digest primitive. Fixes #1798. mbedtls_ctr_drbg_update() -&gt; mbedtls_ctr_drbg_update_ret() mbedtls_hmac_drbg_update() -&gt; mbedtls_hmac_drbg_update_ret()
  * Extend ECDH interface to enable alternative implementations.
  * Deprecate error codes of the form MBEDTLS_ERR_xxx_INVALID_KEY_LENGTH for ARIA, CAMELLIA and Blowfish. These error codes will be replaced by the more generic per-module error codes MBEDTLS_ERR_xxx_BAD_INPUT_DATA.
  * Additional parameter validation checks have been added for the following modules - AES, ARIA, Blowfish, CAMELLIA, CCM, GCM, DHM, ECP, ECDSA, ECDH, ECJPAKE, SHA, Chacha20 and Poly1305, cipher, pk, RSA, and MPI. Where modules have had parameter validation added, existing parameter checks may have changed. Some modules, such as Chacha20 had existing parameter validation whereas other modules had little. This has now been changed so that the same level of validation is present in all modules, and that it is now optional with the MBEDTLS_CHECK_PARAMS flag which by default is off. That means that checks which were previously present by default will no longer be.
  New deprecations
  * Deprecate mbedtls_ctr_drbg_update() and mbedtls_hmac_drbg_update() in favor of functions that can return an error code.
  Bugfix
  * Fix for Clang, which was reporting a warning for the bignum.c inline assembly for AMD64 targets creating string literals greater than those permitted by the ISO C99 standard. Found by Aaron Jones. Fixes #482.
  * Fix runtime error in mbedtls_platform_entropy_poll() when run through qemu user emulation. Reported and fix suggested by randombit. Fixes #1212.
  * Fix an unsafe bounds check when restoring an SSL session from a ticket. This could lead to a buffer overflow, but only in case ticket authentication was broken. Reported and fix suggested by Guido Vranken in #659.
  * Add explicit integer to enumeration type casts to example program programs/pkey/gen_key which previously led to compilation failure on some toolchains. Reported by phoenixmcallister. Fixes #2170.
  * Clarify documentation of mbedtls_ssl_set_own_cert() regarding the absence of check for certificate/key matching. Reported by Attila Molnar, #507.
  * Fix double initialization of ECC hardware that made some accelerators hang.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1567512000">- Update to version 2.16.2:
  * Security improvements and bugfixes
- Use ninja to for build</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1573646400">- Update to version 2.16.3:
  * Security improvements and bugfixes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1585828800">- Update to version 2.16.5:
  * Security improvements and bugfixes</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597665600">- update to 2.23.0:
  a lot of changes see https://github.com/ARMmbed/mbedtls/releases/tag/v2.23.0
  * Fix a side channel vulnerability in modular exponentiation that could reveal an RSA private key used in a secure enclave. Noticed by Sangho Lee, Ming-Wei Shih, Prasun Gera, Taesoo Kim and Hyesoon Kim (Georgia Institute of Technology); and Marcus Peinado (Microsoft Research). Reported by Raoul Strackx (Fortanix) in #3394.
  * Fix side channel in mbedtls_ecp_check_pub_priv() and mbedtls_pk_parse_key() / mbedtls_pk_parse_keyfile() (when loading a private key that didn't include the uncompressed public key), as well as mbedtls_ecp_mul() / mbedtls_ecp_mul_restartable() when called with a NULL f_rng argument. An attacker with access to precise enough timing and memory access information (typically an untrusted operating system attacking a secure enclave) could fully recover the ECC private key. Found and reported by Alejandro Cabrera Aldaya and Billy Brumley.
  * Fix issue in Lucky 13 counter-measure that could make it ineffective when hardware accelerators were used (using one of the MBEDTLS_SHAxxx_ALT macros). This would cause the original Lucky 13 attack to be possible in those configurations, allowing an active network attacker to recover plaintext after repeated timing measurements under some conditions. Reported and fix suggested by Luc Perneel in #3246.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1598875200">- Do not run testsuite in parallel - its not reliable</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1599480000">- Add workaround for failing builds (Python not found) due to
  https://gitlab.kitware.com/cmake/cmake/-/issues/21168</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1599652800">- update to 2.24.0:
  * see https://github.com/ARMmbed/mbedtls/releases/tag/v2.24.0
  * Fix a vulnerability in the verification of X.509 certificates when matching
  the expected common name (the cn argument of mbedtls_x509_crt_verify())
  with the actual certificate name: when the subjecAltName extension is
  present, the expected name was compared to any name in that extension
  regardless of its type. This means that an attacker could for example
  impersonate a 4-bytes or 16-byte domain by getting a certificate for the
  corresponding IPv4 or IPv6 (this would require the attacker to control that
  IP address, though). Similar attacks using other subjectAltName name types
  might be possible.
  * When checking X.509 CRLs, a certificate was only considered as revoked if
  its revocationDate was in the past according to the local clock if
  available. In particular, on builds without MBEDTLS_HAVE_TIME_DATE,
  certificates were never considered as revoked. On builds with
  MBEDTLS_HAVE_TIME_DATE, an attacker able to control the local clock (for
  example, an untrusted OS attacking a secure enclave) could prevent
  revocation of certificates via CRLs. Fixed by no longer checking the
  revocationDate field, in accordance with RFC 5280. Reported by yuemonangong
  in #3340. Reported independently and fixed by Raoul Strackx and Jethro
  * In (D)TLS record decryption, when using a CBC ciphersuites without the
  Encrypt-then-Mac extension, use constant code flow memory access patterns
  to extract and check the MAC. This is an improvement to the existing
  countermeasure against Lucky 13 attacks. The previous countermeasure was
  effective against network-based attackers, but less so against local
  attackers. The new countermeasure defends against local attackers, even if
  they have access to fine-grained measurements. In particular, this fixes a
  local Lucky 13 cache attack found and reported by Tuba Yavuz, Farhaan
  Fowze, Ken (Yihan) Bai, Grant Hernandez, and Kevin Butler (University of
  Florida) and Dave Tian (Purdue University).
  * Fix side channel in RSA private key operations and static (finite-field)
  Diffie-Hellman. An adversary with precise enough timing and memory access
  information (typically an untrusted operating system attacking a secure
  enclave) could bypass an existing counter-measure (base blinding) and
  potentially fully recover the private key.
  * Fix a 1-byte buffer overread in mbedtls_x509_crl_parse_der(). Credit to
  OSS-Fuzz for detecting the problem and to Philippe Antoine for pinpointing
  the problematic code.
  * Zeroising of plaintext buffers in mbedtls_ssl_read() to erase unused
  application data from memory.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1608638400">- update to 2.25.0:
  * This release of Mbed TLS provides bug fixes, minor enhancements and new
  features. This release includes fixes for security issues.
  * see https://github.com/ARMmbed/mbedtls/releases/tag/v2.25.0
  * The functions mbedtls_cipher_auth_encrypt() and
  mbedtls_cipher_auth_decrypt() would write past the minimum documented size
  of the output buffer when used with NIST_KW. As a result, code using those
  functions as documented with NIST_KW could have a buffer overwrite of up to
  15 bytes, with consequences ranging up to arbitrary code execution
  depending on the location of the output buffer.
  * Limit the size of calculations performed by mbedtls_mpi_exp_mod to
  MBEDTLS_MPI_MAX_SIZE to prevent a potential denial of service when generating
  Diffie-Hellman key pairs. Credit to OSS-Fuzz.
  * A failure of the random generator was ignored in mbedtls_mpi_fill_random(),
  which is how most uses of randomization in asymmetric cryptography (including
  key generation, intermediate value randomization and blinding) are implemented.
  This could cause failures or the silent use of non-random values. A random
  generator can fail if it needs reseeding and cannot not obtain entropy, or due
  to an internal failure (which, for Mbed TLS's own CTR_DRBG or HMAC_DRBG, can
  only happen due to a misconfiguration).
  * Fix a compliance issue whereby we were not checking the tag on the algorithm
  parameters (only the size) when comparing the signature in the description part
  of the cert to the real signature. This meant that a NULL algorithm parameters
  entry would look identical to an array of REAL (size zero) to the library and
  thus the certificate would be considered valid. However, if the parameters do
  not match in any way then the certificate should be considered invalid, and
  indeed OpenSSL marks these certs as invalid when mbedtls did not. Many thanks
  to guidovranken who found this issue via differential fuzzing and reported it
  in #3629.
  * Zeroising of local buffers and variables which are used for calculations in
  mbedtls_pkcs5_pbkdf2_hmac(), mbedtls_internal_sha*_process(),
  mbedtls_internal_md*_process() and mbedtls_internal_ripemd160_process()
  functions to erase sensitive data from memory. Reported by Johan Malmgren and
  Johan Uppman Bruce from Sectra.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1611057600">- Fix build for Leap targets
- Use upstream tarball name</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1616414400">- Update to 2.26.0: [bsc#1189589, CVE-2021-24119]
  * * This release of Mbed TLS provides bug fixes, minor enhancements and new
  features. This release includes fixes for security issues.
  * see https://github.com/ARMmbed/mbedtls/releases/tag/v2.26.0
- Fix build with patch from https://github.com/ARMmbed/mbedtls/pull/4237
  mbedtls-4237.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1618488000">-  Workaround for building with gcc-11 boo#1181876</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1626782400">- Update to 2.27.0:
  API changes:
  * Update AEAD output size macros to bring them in line with the PSA Crypto
    API version 1.0 spec. This version of the spec parameterizes them on the
    key type used, as well as the key bit-size in the case of
    PSA_AEAD_TAG_LENGTH.
    The old versions of these macros were renamed and deprecated as follows:
  - PSA_AEAD_TAG_LENGTH          -&gt; PSA_AEAD_TAG_LENGTH_1_ARG
  - PSA_AEAD_ENCRYPT_OUTPUT_SIZE -&gt; PSA_AEAD_ENCRYPT_OUTPUT_SIZE_2_ARG
  - PSA_AEAD_DECRYPT_OUTPUT_SIZE -&gt; PSA_AEAD_DECRYPT_OUTPUT_SIZE_2_ARG
  - PSA_AEAD_UPDATE_OUTPUT_SIZE  -&gt; PSA_AEAD_UPDATE_OUTPUT_SIZE_2_ARG
  - PSA_AEAD_FINISH_OUTPUT_SIZE  -&gt; PSA_AEAD_FINISH_OUTPUT_SIZE_1_ARG
  - PSA_AEAD_VERIFY_OUTPUT_SIZE  -&gt; PSA_AEAD_VERIFY_OUTPUT_SIZE_1_ARG
  * Implement one-shot cipher functions, psa_cipher_encrypt and
    psa_cipher_decrypt, according to the PSA Crypto API 1.0.0
    specification.
  Features:
  * Add mbedtls_rsa_rsassa_pss_sign_ext() function allowing to generate a
    signature with a specific salt length. This function allows to validate
    test cases provided in the NIST's CAVP test suite.
  * Added support for built-in driver keys through the PSA opaque crypto
    driver interface. Refer to the documentation of
    MBEDTLS_PSA_CRYPTO_BUILTIN_KEYS for more information.
  * Implement psa_sign_message() and psa_verify_message().
  * The new function mbedtls_mpi_random() generates a random value in a
    given range uniformly.
  * Implement psa_mac_compute() and psa_mac_verify() as defined in the
    PSA Cryptograpy API 1.0.0 specification.
  * MBEDTLS_ECP_MAX_BITS is now determined automatically from the configured
    curves and no longer needs to be configured explicitly to save RAM.
  Security
  * Fix a bias in the generation of finite-field Diffie-Hellman-Merkle (DHM)
    private keys and of blinding values for DHM and elliptic curves (ECP)
    computations.
  * Fix a potential side channel vulnerability in ECDSA ephemeral key generation.
    An adversary who is capable of very precise timing measurements could
    learn partial information about the leading bits of the nonce used for the
    signature, allowing the recovery of the private key after observing a
    large number of signature operations. This completes a partial fix in
    Mbed TLS 2.20.0.
  * It was possible to configure MBEDTLS_ECP_MAX_BITS to a value that is
    too small, leading to buffer overflows in ECC operations. Fail the build
    in such a case.
  * An adversary with access to precise enough information about memory
    accesses (typically, an untrusted operating system attacking a secure
    enclave) could recover an RSA private key after observing the victim
    performing a single private-key operation.
  * An adversary with access to precise enough timing information (typically, a
    co-located process) could recover a Curve25519 or Curve448 static ECDH key
    after inputting a chosen public key and observing the victim performing the
    corresponding private-key operation.
  Bugfix
  * Add printf function attributes to mbedtls_debug_print_msg to ensure we
    get printf format specifier warnings.
  * Fix premature fopen() call in mbedtls_entropy_write_seed_file which may
    lead to seed file corruption in the case where the path to the seed file is
    equal to MBEDTLS_PLATFORM_STD_NV_SEED_FILE.
  * PSA functions other than psa_open_key now return PSA_ERROR_INVALID_HANDLE
    rather than PSA_ERROR_DOES_NOT_EXIST for an invalid handle, bringing them
    in line with version 1.0.0 of the specification.
  * PSA functions creating a key now return PSA_ERROR_INVALID_ARGUMENT rather
    than PSA_ERROR_INVALID_HANDLE when the identifier specified for the key
    to create is not valid, bringing them in line with version 1.0.0 of the
    specification.
  * Fix some cases in the bignum module where the library constructed an
    unintended representation of the value 0 which was not processed
    correctly by some bignum operations. This could happen when
    mbedtls_mpi_read_string() was called on "-0", or when
    mbedtls_mpi_mul_mpi() and mbedtls_mpi_mul_int() was called with one of
    the arguments being negative and the other being 0.
  * Fix a bug in ECDSA that would cause it to fail when the hash is all-bits
    zero.
  * Fix a compilation error when MBEDTLS_ECP_RANDOMIZE_MXZ_ALT is
    defined.
  * Fix an incorrect error code when parsing a PKCS#8 private key.
  * In a TLS client, enforce the Diffie-Hellman minimum parameter size
    set with mbedtls_ssl_conf_dhm_min_bitlen() precisely. Before, the
    minimum size was rounded down to the nearest multiple of 8.
  * In library/net_sockets.c, _POSIX_C_SOURCE and _XOPEN_SOURCE are
    defined to specific values.  If the code is used in a context
    where these are already defined, this can result in a compilation
    error.  Instead, assume that if they are defined, the values will
    be adequate to build Mbed TLS.
  * The cipher suite TLS-RSA-WITH-CAMELLIA-256-GCM-SHA384 was not available
    when SHA-1 was disabled and was offered when SHA-1 was enabled but SHA-384
    was disabled. Fix the dependency.
  * Do not offer SHA384 cipher suites when SHA-384 is disabled.
  * With MBEDTLS_PSA_CRYPTO_C disabled, some functions were getting built
    nonetheless, resulting in undefined reference errors when building a
    shared library.
  * Fix test suite code on platforms where int32_t is not int, such as
    Arm Cortex-M.
  * Fix some issues affecting MBEDTLS_ARIA_ALT implementations: a misplaced
    directive in a header and a missing initialization in the self-test.
  * Fix a missing initialization in the Camellia self-test, affecting
    MBEDTLS_CAMELLIA_ALT implementations.
  * Restore the ability to configure PSA via Mbed TLS options to support RSA
    key pair operations but exclude RSA key generation. When MBEDTLS_GENPRIME
    is not defined PSA will no longer attempt to use mbedtls_rsa_gen_key().
  * Fix a regression introduced in 2.24.0 which broke (D)TLS CBC ciphersuites
    (when the encrypt-then-MAC extension is not in use) with some ALT
    implementations of the underlying hash (SHA-1, SHA-256, SHA-384), causing
    the affected side to wrongly reject valid messages.
  * Remove outdated check-config.h check that prevented implementing the
    timing module on Mbed OS.
  * Fix PSA_ALG_TLS12_PRF and PSA_ALG_TLS12_PSK_TO_MS being too permissive
    about missing inputs.
  * Fix a resource leak in a test suite with an alternative AES
    implementation.
  * Fix a crash in mbedtls_mpi_debug_mpi on a bignum having 0 limbs. This
    could notably be triggered by setting the TLS debug level to 3 or above
    and using a Montgomery curve for the key exchange.
  * psa_verify_hash() was relying on implementation-specific behavior of
    mbedtls_rsa_rsassa_pss_verify() and was causing failures in some _ALT
    implementations. This reliance is now removed.
  * Disallow inputs of length different from the corresponding hash when
    signing or verifying with PSA_ALG_RSA_PSS (The PSA Crypto API mandates
    that PSA_ALG_RSA_PSS uses the same hash throughout the algorithm.)
  * Fix a null pointer dereference when mbedtls_mpi_exp_mod() was called with
    A=0 represented with 0 limbs. Up to and including Mbed TLS 2.26, this bug
    could not be triggered by code that constructed A with one of the
    mbedtls_mpi_read_xxx functions (including in particular TLS code) since
    those always built an mpi object with at least one limb.
  * Fix mbedtls_mpi_gcd(G,A,B) when the value of B is zero. This had no
    effect on Mbed TLS's internal use of mbedtls_mpi_gcd(), but may affect
    applications that call mbedtls_mpi_gcd() directly.
  * The PSA API no longer allows the creation or destruction of keys with a
    read-only lifetime. The persistence level PSA_KEY_PERSISTENCE_READ_ONLY
    can now only be used as intended, for keys that cannot be modified through
    normal use of the API.
  * When MBEDTLS_PSA_CRYPTO_SPM is enabled, crypto_spe.h was not included
    in all the right places. Include it from crypto_platform.h, which is
    the natural place.
  * mbedtls_pk_sign() and mbedtls_pk_verify() and their extended and
    restartable variants now always honor the specified hash length if
    nonzero. Before, for RSA, hash_len was ignored in favor of the length of
    the specified hash algorithm.
  * Fix which alert is sent in some cases to conform to the
    applicable RFC: on an invalid Finished message value, an
    invalid max_fragment_length extension, or an
    unsupported extension used by the server.
  * Correct (change from 12 to 13 bytes) the value of the macro describing the
    maximum nonce length returned by psa_aead_generate_nonce().
  Changes
  * Add extra printf compiler warning flags to builds.
  * Fix memsan build false positive in x509_crt.c with Clang 11
  * Fix the setting of the read timeout in the DTLS sample programs.
  * Remove the AES sample application programs/aes/aescrypt2 which shows
    bad cryptographic practice.
  * Alternative implementations of CMAC may now opt to not support 3DES as a
    CMAC block cipher, and still pass the CMAC self test.
  * Remove configs/config-psa-crypto.h, which was identical to the default
    configuration except for having some extra cryptographic mechanisms
    enabled and for unintended differences. This configuration was primarily
    intended to demonstrate the PSA API, and lost most of its usefulness when
    MBEDTLS_PSA_CRYPTO_C became enabled by default.
  * When building the test suites with GNU make, invoke python3 or python, not
    python2, which is no longer supported upstream.
  * When using session cache based session resumption on the server,
    double-check that custom session cache implementations return
    sessions which are consistent with the negotiated ciphersuite
    and compression method.
  * Fix build failure on MinGW toolchain when __USE_MING_ANSI_STDIO is on.
    When that flag is on, standard GNU C printf format specifiers
    should be used.
  * Reduce the default value of MBEDTLS_ECP_WINDOW_SIZE. This reduces RAM usage
    during ECC operations at a negligible performance cost.
  * mbedtls_mpi_read_binary(), mbedtls_mpi_read_binary_le() and
    mbedtls_mpi_read_string() now construct an mbedtls_mpi object with 0 limbs
    when their input has length 0. Note that this is an implementation detail
    and can change at any time, so this change should be transparent, but it
    may result in mbedtls_mpi_write_binary() or mbedtls_mpi_write_string()
    now writing an empty string where it previously wrote one or more
    zero digits when operating from values constructed with an mpi_read
    function and some mpi operations.
  * Implicitly add PSA_KEY_USAGE_SIGN_MESSAGE key usage policy flag when
    PSA_KEY_USAGE_SIGN_HASH flag is set and PSA_KEY_USAGE_VERIFY_MESSAGE flag
    when PSA_KEY_USAGE_VERIFY_HASH flag is set. This usage flag extension
    is also applied when loading a key from storage.
  * Remove mbedtls-4237.patch upstream
  * Library soname bump to libmbedcrypto7</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1642075200">- Update to 2.28.0: (bsc#1193979, CVE-2021-45450)
  API changes
  * Some fields of mbedtls_ssl_session and mbedtls_ssl_config are in a
  different order. This only affects applications that define such
  structures directly or serialize them.
  Requirement changes
  * Sign-magnitude and one's complement representations for signed integers are
  not supported. Two's complement is the only supported representation.
  Removals
  * Remove config option MBEDTLS_TLS_DEFAULT_ALLOW_SHA1_IN_CERTIFICATES,
  which allowed SHA-1 in the default TLS configuration for certificate
  signing. It was intended to facilitate the transition in environments
  with SHA-1 certificates. SHA-1 is considered a weak message digest and
  its use constitutes a security risk.
  * Remove the partial support for running unit tests via Greentea on Mbed OS,
  which had been unmaintained since 2018.
  Features
  * The identifier of the CID TLS extension can be configured by defining
  MBEDTLS_TLS_EXT_CID at compile time.
  * Warn if errors from certain functions are ignored. This is currently
  supported on GCC-like compilers and on MSVC and can be configured through
  the macro MBEDTLS_CHECK_RETURN. The warnings are always enabled
  (where supported) for critical functions where ignoring the return
  value is almost always a bug. Enable the new configuration option
  MBEDTLS_CHECK_RETURN_WARNING to get warnings for other functions. This
  is currently implemented in the AES, DES and md modules, and will be
  extended to other modules in the future.
  * Add missing PSA macros declared by PSA Crypto API 1.0.0:
  PSA_ALG_IS_SIGN_HASH, PSA_ALG_NONE, PSA_HASH_BLOCK_LENGTH, PSA_KEY_ID_NULL.
  * Add new API mbedtls_ct_memcmp for constant time buffer comparison.
  * Add PSA API definition for ARIA.
  Security
  * Zeroize several intermediate variables used to calculate the expected
  value when verifying a MAC or AEAD tag. This hardens the library in
  case the value leaks through a memory disclosure vulnerability. For
  example, a memory disclosure vulnerability could have allowed a
  man-in-the-middle to inject fake ciphertext into a DTLS connection.
  * In psa_cipher_generate_iv() and psa_cipher_encrypt(), do not read back
  from the output buffer. This fixes a potential policy bypass or decryption
  oracle vulnerability if the output buffer is in memory that is shared with
  an untrusted application.
  * Fix a double-free that happened after mbedtls_ssl_set_session() or
  mbedtls_ssl_get_session() failed with MBEDTLS_ERR_SSL_ALLOC_FAILED
  (out of memory). After that, calling mbedtls_ssl_session_free()
  and mbedtls_ssl_free() would cause an internal session buffer to
  be free()'d twice.
  Bugfix
  * Stop using reserved identifiers as local variables. Fixes #4630.
  * The GNU makefiles invoke python3 in preference to python except on Windows.
  * The check was accidentally not performed when cross-compiling for Windows
  on Linux. Fix this. Fixes #4774.
  * Prevent divide by zero if either of PSA_CIPHER_ENCRYPT_OUTPUT_SIZE() or
  PSA_CIPHER_UPDATE_OUTPUT_SIZE() were called using an asymmetric key type.
  * Fix a parameter set but unused in psa_crypto_cipher.c. Fixes #4935.
  * Don't use the obsolete header path sys/fcntl.h in unit tests.
  These header files cause compilation errors in musl.
  Fixes #4969.
  * Fix missing constraints on x86_64 and aarch64 assembly code
  for bignum multiplication that broke some bignum operations with
  (at least) Clang 12.
  Fixes #4116, #4786, #4917, #4962.
  * Fix mbedtls_cipher_crypt: AES-ECB when MBEDTLS_USE_PSA_CRYPTO is enabled.
  * Failures of alternative implementations of AES or DES single-block
  functions enabled with MBEDTLS_AES_ENCRYPT_ALT, MBEDTLS_AES_DECRYPT_ALT,
  MBEDTLS_DES_CRYPT_ECB_ALT or MBEDTLS_DES3_CRYPT_ECB_ALT were ignored.
  This does not concern the implementation provided with Mbed TLS,
  where this function cannot fail, or full-module replacements with
  MBEDTLS_AES_ALT or MBEDTLS_DES_ALT. Reported by Armelle Duboc in #1092.
  * Some failures of HMAC operations were ignored. These failures could only
  happen with an alternative implementation of the underlying hash module.
  * Fix the error returned by psa_generate_key() for a public key. Fixes #4551.
  * Fix the build of sample programs when neither MBEDTLS_ERROR_C nor
  MBEDTLS_ERROR_STRERROR_DUMMY is enabled.
  * Fix PSA_ALG_RSA_PSS verification accepting an arbitrary salt length.
  This algorithm now accepts only the same salt length for verification
  that it produces when signing, as documented. Use the new algorithm
  PSA_ALG_RSA_PSS_ANY_SALT to accept any salt length. Fixes #4946.
  * The existing predicate macro name PSA_ALG_IS_HASH_AND_SIGN is now reserved
  for algorithm values that fully encode the hashing step, as per the PSA
  Crypto API specification. This excludes PSA_ALG_RSA_PKCS1V15_SIGN_RAW and
  PSA_ALG_ECDSA_ANY. The new predicate macro PSA_ALG_IS_SIGN_HASH covers
  all algorithms that can be used with psa_{sign,verify}_hash(), including
  these two.
  * Fix issue in Makefile on Linux with SHARED=1, that caused shared libraries
  not to list other shared libraries they need.
  * Fix a bug in mbedtls_gcm_starts() when the bit length of the iv
  exceeds 2^32. Fixes #4884.
  * Fix an uninitialized variable warning in test_suite_ssl.function with GCC
  version 11.
  * Fix the build when no SHA2 module is included. Fixes #4930.
  * Fix the build when only the bignum module is included. Fixes #4929.
  * Fix a potential invalid pointer dereference and infinite loop bugs in
  pkcs12 functions when the password is empty. Fix the documentation to
  better describe the inputs to these functions and their possible values.
  Fixes #5136.
  * The key usage flags PSA_KEY_USAGE_SIGN_MESSAGE now allows the MAC
  operations psa_mac_compute() and psa_mac_sign_setup().
  * The key usage flags PSA_KEY_USAGE_VERIFY_MESSAGE now allows the MAC
  operations psa_mac_verify() and psa_mac_verify_setup().
  Changes
  * Set config option MBEDTLS_TLS_DEFAULT_ALLOW_SHA1_IN_KEY_EXCHANGE to be
  disabled by default.
  * Improve the performance of base64 constant-flow code. The result is still
  slower than the original non-constant-flow implementation, but much faster
  than the previous constant-flow implementation. Fixes #4814.
  * Indicate in the error returned if the nonce length used with
  ChaCha20-Poly1305 is invalid, and not just unsupported.
  * The mbedcrypto library includes a new source code module constant_time.c,
  containing various functions meant to resist timing side channel attacks.
  * This module does not have a separate configuration option, and functions
  from this module will be included in the build as required. Currently
  most of the interface of this module is private and may change at any
  time.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1642420800">- Fix baselib.conf</changelog>
  <changelog author="Alexander Bergmann &lt;abergmann@suse.com&gt;" date="1671624000">- Fix potential heap buffer overread and overwrite in DTLS if
  MBEDTLS_SSL_DTLS_CONNECTION_ID is enabled and
  MBEDTLS_SSL_CID_IN_LEN_MAX &gt; 2 * MBEDTLS_SSL_CID_OUT_LEN_MAX.
  (bsc#1206576, CVE-2022-46393).
  Add: mbedtls-CVE-2022-46393.patch</changelog>
</package>
<package pkgid="a5312482c149b567ced9c6f52eaa78cf581a66f19834c154a694d5ffa6e12903" name="libmbedtls14-32bit" arch="x86_64">
  <version epoch="0" ver="2.28.0" rel="bp154.2.3.1"/>
  <changelog author="mpluskal@suse.com" date="1531137600">- Update to version 2.11.0:
  * Features
    + Added support for the XTS block cipher mode with AES (AES-XTS). Contributed by Aorimn in pull request #414.
    + Implemented the HMAC-based extract-and-expand key derivation function (HKDF) per RFC 5869. Contributed by Thomas Fossati.
    + For TLS servers, added support for offloading private key operations to an external cryptoprocessor. Private key operations can be asynchronous to allow non-blocking operation of the TLS server stack.
    + Added support for ARIA cipher (RFC 5794) and associated TLS ciphersuites (RFC 6209). ARIA is disabled by default. To enable, see MBEDTLS_ARIA_C in config.h.
    + Added support for the CCM* block cipher mode as defined in IEEE Std 802.15.4.
    + Added an additional block mode, OFB (Output Feedback) per NIST SP 800-38a, to the AES module and cipher abstraction module.
  * API Changes
    + Mbed TLS 2.11.0 maintains source code compatibility with the last minor version, Mbed TLS 2.9.0, but extends the interface with additional capabilities. Mbed TLS 2.11.0 modifies the ABI and increases the SOVERSION.
  * Bugfix
    + Fixed the cert_write example to handle certificates signed with elliptic curves as well as RSA. Fixes #777 found by dbedev.
    + Fixed the redefinition of _WIN32_WINNT, to avoid overriding a definition used by user applications. Found and fixed by Fabio Alessandrelli.
    + Fixed compilation warnings with the IAR toolchain on 32-bit platforms. Reported by rahmanih in #683.
    + Fixed an issue with MicroBlaze support in bn_mul.h which was causing the build to fail. Found by zv-io. Fixes #1651.
    + Fixed braces in mbedtls_memory_buffer_alloc_status(). Found by sbranden in #552.
    + Added the macro MBEDTLS_X509_MAX_FILE_PATH_LEN that enables the user to configure the maximum length of a file path that can be buffered when calling mbedtls_x509_crt_parse_path(). Fixes #492.
    + Fixed redundant declaration of mbedtls_ssl_list_ciphersuites. Raised by TrinityTonic in #1359.
- Changes for version 2.9.0:
  + Security
    + Fixed an issue in the X.509 module which could lead to a buffer overread during certificate validation. Additionally, the issue could also lead to unnecessary callback checks being made or to some validation checks to be omitted. The overread could be triggered remotely, while the other issues would require a non DER-compliant certificate to be correctly signed by a trusted CA, or a trusted CA with a non DER-compliant certificate. Found by luocm. Fixes #825.
    + Fixed the buffer length assertion in the ssl_parse_certificate_request() function which could lead to an arbitrary overread of the message buffer. The overreads could be caused by receiving a malformed algorithms section which was too short. In builds with debug output, this overread data was output with the debug data.
    + Fixed a client-side bug in the validation of the server's ciphersuite choice which could potentially lead to the client accepting a ciphersuite it didn't offer or a ciphersuite that could not be used with the TLS or DTLS version chosen by the server. This could lead to corruption of internal data structures for some configurations.
  * Features
    + Added an option of MBEDTLS_AES_FEWER_TABLES, to dynamically compute smaller AES tables during runtime, thereby reducing the RAM/ROM footprint by ~6KiB. Suggested and contributed by jkivilin.
    + Added initial support for Curve448 (RFC 7748). So far only mbedtls_ecp_mul() and ECDH primitive functions (mbedtls_ecdh_gen_public(), mbedtls_ecdh_compute_shared()) are supported for now. Contributed by Nicholas Wilson.
  * API Changes
    + Mbed TLS 2.9.0 maintains source code and binary compatibility with the last minor version, Mbed TLS 2.8.0, but extends the interface with additional capabilities.
    + Extended the API with the function of mbedtls_net_poll() to allow user applications to wait for a network context to become ready before reading or writing.
    + Added the function mbedtls_ssl_check_pending() to the public API to allow a check for whether more more data is pending to be processed in the internal message buffers. This function is necessary to determine the underlying transport when event-driven IO is used.
  * Bugfix
    + Fixed a spurious uninitialized variable warning in cmac.c. Fix independently contributed by Brian J Murray and David Brown.
    + Added missing dependencies in test suites that led to build failures in configurations that omit certain hashes or public-key algorithms. Fixes #1040.
    + Fixed a C89 incompatibility issue in benchmark.c. Contributed by Brendan Shanks. Fixes #1353.
    + Added missing dependencies for MBEDTLS_HAVE_TIME_DATE and MBEDTLS_VERSION_FEATURES in some test suites. Contributed by Deomid Ryabkov. Fixes #1299, #1475.
    + Fixed the Makefile build process for building shared libraries on Mac OS X. Fixed by mnacamura.
    + Fixed parsing of PKCS#8 encoded Elliptic Curve keys. Previously Mbed TLS was unable to parse keys which had only the optional parameters field of the ECPrivateKey structure. Found by Jethro Beekman, fixed in #1379.
    + Added an optimisation to return the plaintext data more quickly on unpadded CBC decryption, as stated in the mbedtls_cipher_update() documentation. Contributed by Andy Leiserson.
    + Fixed the overriding and ignoring of return values when parsing and writing to a file in the pk_sign program. Found by kevlut in #1142.
    + Added restrictions to the usage of the error code MBEDTLS_ERR_SSL_WANT_READ to situations where data needs to be fetched from the underlying transport in order to make progress. Previously, this error code was also occasionally returned when unexpected messages were being discarded, ignoring that further messages could potentially already be pending to be processed in the internal buffers; these cases led to deadlocks when event-driven I/O was used. Found and reported by Hubert Mis in #772.
    + Fixed buffer length assertions in the ssl_parse_certificate_request() function which led to a potential one byte overread of the message buffer.
    + Fixed invalid buffer sizes being passed to zlib during record compression and decompression.
    + Raised the soversion of libmbedcrypto to match the soversion of the maintained 2.7 branch. The soversion was increased in Mbed TLS version 2.7.1 to reflect breaking changes in that release, but the increment was missed in 2.8.0 and later releases outside of the 2.7 branch.</changelog>
  <changelog author="mpluskal@suse.com" date="1535025600">- Update to version 2.12.0:
  * Security
    + Fixed a vulnerability in the TLS ciphersuites based on use of CBC and SHA-384 in DTLS/TLS 1.0 to 1.2, that allowed an active network attacker to partially recover the plaintext of messages under certains conditions by exploiting timing side-channels.
    + Fixed a vulnerability in TLS ciphersuites based on CBC, in DTLS/TLS 1.0 to 1.2, that allowed a local attacker, with the ability to execute code on the local machine as well as to manipulate network packets, to partially recover the plaintext of messages under certain conditions by using a cache attack targetting an internal MD/SHA buffer.
    + Added a counter-measure against a vulnerability in TLS ciphersuites based on CBC, in DTLS/TLS 1.0 to 1.2, that allowed a local attacker with the ability to execute code on the local machine as well as manipulate network packets, to partially recover the plaintext of messages certain conditions (see previous entry) by using a cache attack targeting the SSL input record buffer.
  * Features
    + Added new cryptographic primitives, the stream cipher Chacha20, one-time authenticator Poly1305 and AEAD construct Chacha20-Poly1305, as defined in RFC 7539. Contributed by Daniel King.
    + Added support for the CHACHA20-POLY1305 ciphersuites from RFC 7905.
    + Made the receive and transmit buffers independently configurable in size, for situations where the outgoing buffer can be fixed at a smaller size than the incoming buffer
    + Added support for the AES based key wrapping modes defined by NIST SP 800-38F algorithms KW and KWP and by RFC's 3394 and 5649.
    + Added platform support for the Haiku OS.
  * Bugfix
    + Fixed the key_app_writer example which was creating an invalid ASN.1 tag by writing an additional leading zero byte. Found by Aryeh R. #1257.
    + Fixed a C++ compilation error, caused by a variable named new. Found and fixed by Hirotaka Niisato. #1783.
    + Fixed the "no symbols" warning issued by ranlib when building on Mac OS X. Fix contributed by tabascoeye.
    + Clarified documentation for mbedtls_ssl_write() to include 0 as a valid return value. Found by @davidwu2000. #839.
    + Fixed a memory leak in mbedtls_x509_csr_parse(). Found and fixed by catenacyber, Philippe Antoine. #1623.
    + Added length checks to some TLS parsing functions. Found and fixed by Philippe Antoine from Catena cyber. #1663.
    + Remove unused headers included in x509.c. Found by Chris Hanson and fixed by Brendan Shanks. #992.
    + Fixed compilation error when MBEDTLS_ARC4_C is disabled and MBEDTLS_CIPHER_NULL_CIPHER is enabled. Found by TrinityTonic in #1719.
    + Fixed the inline assembly for the MPI multiply helper function for i386 and i386 with SSE2. Found by László Langó. #1550.
    + Fixed the namespacing in header files. Remove the mbedtls namespacing in the #include in the header files. #857.
    + Fixed a compiler warning of 'use before initialisation' in mbedtls_pk_parse_key(). Found by Martin Boye Petersen and fixed by Dawid Drozd.#1098.
    + Fixed decryption of zero length messages (which contain all padding) when a CBC based ciphersuite was used together with Encrypt-then-MAC.
    + Fixed the ssl_client2 example to send application data with 0-length content when the request_size argument is set to 0 as stated in the documentation. #1833.
    + Corrected the documentation for mbedtls_ssl_get_session(). This API has deep copy of the session, and the peer certificate is not lost. #926.
    + Fixed issues when building to the C99 standard, using -std=c99. Fixed by Nick Wilson.
  * Changes
    + Fails when receiving a TLS alert message with an invalid length, or invalid zero-length messages when using TLS 1.2. Contributed by Espressif Systems.
    + Changed the default behaviour of mbedtls_hkdf_extract() to return an error when calling with a NULL salt and non-zero salt length. Contributed by Brian J Murray
    + Change the shebang line in Perl scripts to look up perl in the PATH. Contributed by fbrosson.
    + Allow overriding the time on Windows via the platform-time abstraction. Fixed by Nick Wilson.
    + Use gmtime_r/gmtime_s for thread-safety. Fixed by Nick Wilson.</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1544529600">- Update to version 2.14.1: [bsc#1118727, CVE-2018-19608]
  Security
  * Fix timing variations and memory access variations in RSA PKCS#1 v1.5
    decryption that could lead to a Bleichenbacher-style padding oracle
    attack. In TLS, this affects servers that accept ciphersuites based on
    RSA decryption (i.e. ciphersuites whose name contains RSA but not
    (EC)DH(E)). Discovered by Eyal Ronen (Weizmann Institute),  Robert Gillham
    (University of Adelaide), Daniel Genkin (University of Michigan),
    Adi Shamir (Weizmann Institute), David Wong (NCC Group), and Yuval Yarom
    (University of Adelaide, Data61). The attack is described in more detail
    in the paper available here: http://cat.eyalro.net/cat.pdf  CVE-2018-19608
  * In mbedtls_mpi_write_binary(), don't leak the exact size of the number
    via branching and memory access patterns. An attacker who could submit
    a plaintext for RSA PKCS#1 v1.5 decryption but only observe the timing
    of the decryption and not its result could nonetheless decrypt RSA
    plaintexts and forge RSA signatures. Other asymmetric algorithms may
    have been similarly vulnerable. Reported by Eyal Ronen, Robert Gillham,
    Daniel Genkin, Adi Shamir, David Wong and Yuval Yarom.
  * Wipe sensitive buffers on the stack in the CTR_DRBG and HMAC_DRBG
    modules.
  API Changes
  * The new functions mbedtls_ctr_drbg_update_ret() and
    mbedtls_hmac_drbg_update_ret() are similar to mbedtls_ctr_drbg_update()
    and mbedtls_hmac_drbg_update() respectively, but the new functions
    report errors whereas the old functions return void. We recommend that
    applications use the new functions.
- Version 2.14.0:
  Security
  * Fix overly strict DN comparison when looking for CRLs belonging to a
    particular CA. This previously led to ignoring CRLs when the CRL's issuer
    name and the CA's subject name differed in their string encoding (e.g.,
    one using PrintableString and the other UTF8String) or in the choice of
    upper and lower case. Reported by Henrik Andersson of Bosch GmbH in issue
    [#1784].
  * Fix a flawed bounds check in server PSK hint parsing. In case the
    incoming message buffer was placed within the first 64KiB of address
    space and a PSK-(EC)DHE ciphersuite was used, this allowed an attacker
    to trigger a memory access up to 64KiB beyond the incoming message buffer,
    potentially leading to an application crash or information disclosure.
  * Fix mbedtls_mpi_is_prime() to use more rounds of probabilistic testing. The
    previous settings for the number of rounds made it practical for an
    adversary to construct non-primes that would be erroneously accepted as
    primes with high probability. This does not have an impact on the
    security of TLS, but can matter in other contexts with numbers chosen
    potentially by an adversary that should be prime and can be validated.
    For example, the number of rounds was enough to securely generate RSA key
    pairs or Diffie-Hellman parameters, but was insufficient to validate
    Diffie-Hellman parameters properly.
    See "Prime and Prejudice" by by Martin R. Albrecht and Jake Massimo and
    Kenneth G. Paterson and Juraj Somorovsky.
  Features
  * Add support for temporarily suspending expensive ECC computations after
    some configurable amount of operations. This is intended to be used in
    constrained, single-threaded systems where ECC is time consuming and can
    block other operations until they complete. This is disabled by default,
    but can be enabled by MBEDTLS_ECP_RESTARTABLE at compile time and
    configured by mbedtls_ecp_set_max_ops() at runtime. It applies to the new
    xxx_restartable functions in ECP, ECDSA, PK and X.509 (CRL not supported
    yet), and to existing functions in ECDH and SSL (currently only
    implemented client-side, for ECDHE-ECDSA ciphersuites in TLS 1.2,
    including client authentication).
  * Add support for Arm CPU DSP extensions to accelerate asymmetric key
    operations. On CPUs where the extensions are available, they can accelerate
    MPI multiplications used in ECC and RSA cryptography. Contributed by
    Aurelien Jarno.
  * Extend RSASSA-PSS signature to allow a smaller salt size. Previously, PSS
    signature always used a salt with the same length as the hash, and returned
    an error if this was not possible. Now the salt size may be up to two bytes
    shorter. This allows the library to support all hash and signature sizes
    that comply with FIPS 186-4, including SHA-512 with a 1024-bit key.
  * Add support for 128-bit keys in CTR_DRBG. Note that using keys shorter
    than 256 bits limits the security of generated material to 128 bits.
  API Changes
  * Add a common error code of `MBEDTLS_ERR_PLATFORM_FEATURE_UNSUPPORTED` for
    a feature that is not supported by underlying alternative
    implementations implementing cryptographic primitives. This is useful for
    hardware accelerators that don't implement all options or features.
  New deprecations
  * All module specific errors following the form
    MBEDTLS_ERR_XXX_FEATURE_UNAVAILABLE that indicate a feature is not
    supported are deprecated and are now replaced by the new equivalent
    platform error.
  * All module specific generic hardware acceleration errors following the
    form MBEDTLS_ERR_XXX_HW_ACCEL_FAILED that are deprecated and are replaced
    by the equivalent plaform error.
  * Deprecate the function mbedtls_mpi_is_prime() in favor of
    mbedtls_mpi_is_prime_ext() which allows specifying the number of
    Miller-Rabin rounds.
  Bugfix
  * Fix wrong order of freeing in programs/ssl/ssl_server2 example
    application leading to a memory leak in case both
    MBEDTLS_MEMORY_BUFFER_ALLOC_C and MBEDTLS_MEMORY_BACKTRACE are set.
    Fixes #2069.
  * Fix a bug in the update function for SSL ticket keys which previously
    invalidated keys of a lifetime of less than a 1s. Fixes #1968.
  * Fix failure in hmac_drbg in the benchmark sample application, when
    MBEDTLS_THREADING_C is defined. Found by TrinityTonic, #1095
  * Fix a bug in the record decryption routine ssl_decrypt_buf()
    which lead to accepting properly authenticated but improperly
    padded records in case of CBC ciphersuites using Encrypt-then-MAC.
  * Fix memory leak and freeing without initialization in the example
    program programs/x509/cert_write. Fixes #1422.
  * Ignore IV in mbedtls_cipher_set_iv() when the cipher mode is
    MBEDTLS_MODE_ECB. Found by ezdevelop. Fixes #1091.
  * Zeroize memory used for buffering or reassembling handshake messages
    after use.
  * Use `mbedtls_platform_zeroize()` instead of `memset()` for zeroization
    of sensitive data in the example programs aescrypt2 and crypt_and_hash.
  * Change the default string format used for various X.509 DN attributes to
    UTF8String. Previously, the use of the PrintableString format led to
    wildcards and non-ASCII characters being unusable in some DN attributes.
    Reported by raprepo in #1860 and by kevinpt in #468. Fix contributed by
    Thomas-Dee.
  * Fix compilation failure for configurations which use compile time
    replacements of standard calloc/free functions through the macros
    MBEDTLS_PLATFORM_CALLOC_MACRO and MBEDTLS_PLATFORM_FREE_MACRO.
    Reported by ole-de and ddhome2006. Fixes #882, #1642 and #1706.
  Changes
  * Removed support for Yotta as a build tool.
  * Add tests for session resumption in DTLS.
  * Close a test gap in (D)TLS between the client side and the server side:
    test the handling of large packets and small packets on the client side
    in the same way as on the server side.
  * Change the dtls_client and dtls_server samples to work by default over
    IPv6 and optionally by a build option over IPv4.
  * Change the use of Windows threading to use Microsoft Visual C++ runtime
    calls, rather than Win32 API calls directly. This is necessary to avoid
    conflict with C runtime usage. Found and fixed by irwir.
  * Remember the string format of X.509 DN attributes when replicating
    X.509 DNs. Previously, DN attributes were always written in their default
    string format (mostly PrintableString), which could lead to CRTs being
    created which used PrintableStrings in the issuer field even though the
    signing CA used UTF8Strings in its subject field; while X.509 compliant,
    such CRTs were rejected in some applications, e.g. some versions of
    Firefox, curl and GnuTLS. Reported in #1033 by Moschn. Fix contributed by
    Thomas-Dee.
  * Improve documentation of mbedtls_ssl_get_verify_result().
    Fixes #517 reported by github-monoculture.
  * Add MBEDTLS_MPI_GEN_PRIME_FLAG_LOW_ERR flag to mbedtls_mpi_gen_prime() and
    use it to reduce error probability in RSA key generation to levels mandated
    by FIPS-186-4.
- Version 2.13.1
  API Changes
  * Extend the platform module with an abstraction mbedtls_platform_gmtime_r()
    whose implementation should behave as a thread-safe version of gmtime().
    This allows users to configure such an implementation at compile time when
    the target system cannot be deduced automatically, by setting the option
    MBEDTLS_PLATFORM_GMTIME_R_ALT. At this stage Mbed TLS is only able to
    automatically select implementations for Windows and POSIX C libraries.
  Bugfix
  * Fix build failures on platforms where only gmtime() is available but
    neither gmtime_r() nor gmtime_s() are present. Fixes #1907.
- Version 2.13.0
  Security
  * Fix an issue in the X.509 module which could lead to a buffer overread
    during certificate extensions parsing. In case of receiving malformed
    input (extensions length field equal to 0), an illegal read of one byte
    beyond the input buffer is made. Found and analyzed by Nathan Crandall.
  Features
  * Add support for fragmentation of outgoing DTLS handshake messages. This
    is controlled by the maximum fragment length as set locally or negotiated
    with the peer, as well as by a new per-connection MTU option, set using
    mbedtls_ssl_set_mtu().
  * Add support for auto-adjustment of MTU to a safe value during the
    handshake when flights do not get through (RFC 6347, section 4.1.1.1,
    last paragraph).
  * Add support for packing multiple records within a single datagram,
    enabled by default.
  * Add support for buffering out-of-order handshake messages in DTLS.
    The maximum amount of RAM used for this can be controlled by the
    compile-time constant MBEDTLS_SSL_DTLS_MAX_BUFFERING defined
    in mbedtls/config.h.
  API Changes
  * Add function mbedtls_ssl_set_datagram_packing() to configure
    the use of datagram packing (enabled by default).
  Bugfix
  * Fix a potential memory leak in mbedtls_ssl_setup() function. An allocation
    failure in the function could lead to other buffers being leaked.
  * Fixes an issue with MBEDTLS_CHACHAPOLY_C which would not compile if
    MBEDTLS_ARC4_C and MBEDTLS_CIPHER_NULL_CIPHER weren't also defined. #1890
  * Fix a memory leak in ecp_mul_comb() if ecp_precompute_comb() fails.
    Fix contributed by Espressif Systems.
  * Add ecc extensions only if an ecc based ciphersuite is used.
    This improves compliance to RFC 4492, and as a result, solves
    interoperability issues with BouncyCastle. Raised by milenamil in #1157.
  * Replace printf with mbedtls_printf in the ARIA module. Found by
    TrinityTonic in #1908.
  * Fix potential use-after-free in mbedtls_ssl_get_max_frag_len()
    and mbedtls_ssl_get_record_expansion() after a session reset. Fixes #1941.
  * Fix a bug that caused SSL/TLS clients to incorrectly abort the handshake
    with TLS versions 1.1 and earlier when the server requested authentication
    without providing a list of CAs. This was due to an overly strict bounds
    check in parsing the CertificateRequest message,
    introduced in Mbed TLS 2.12.0. Fixes #1954.
  * Fix a miscalculation of the maximum record expansion in
    mbedtls_ssl_get_record_expansion() in case of ChachaPoly ciphersuites,
    or CBC ciphersuites in (D)TLS versions 1.1 or higher. Fixes #1913, #1914.
  * Fix undefined shifts with negative values in certificates parsing
    (found by Catena cyber using oss-fuzz)
  * Fix memory leak and free without initialization in pk_encrypt
    and pk_decrypt example programs. Reported by Brace Stout. Fixes #1128.
  * Remove redundant else statement. Raised by irwir. Fixes #1776.
  Changes
  * Copy headers preserving timestamps when doing a "make install".
    Contributed by xueruini.
  * Allow the forward declaration of public structs. Contributed by Dawid
    Drozd. Fixes #1215 raised by randombit.
  * Improve compatibility with some alternative CCM implementations by using
    CCM test vectors from RAM.
  * Add support for buffering of out-of-order handshake messages.
  * Add warnings to the documentation of the HKDF module to reduce the risk
    of misusing the mbedtls_hkdf_extract() and mbedtls_hkdf_expand()
    functions. Fixes #1775. Reported by Brian J. Murray.</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1544529601">- Library package version bumped to libmbedtls12</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1546862400">- Update to version 2.16.0:
  Features
  * Add a new config.h option of MBEDTLS_CHECK_PARAMS that enables validation of parameters in the API. This allows detection of obvious misuses of the API, such as passing NULL pointers. The API of existing functions hasn't changed, but requirements on parameters have been made more explicit in the documentation. See the corresponding API documentation for each function to see for which parameter values it is defined. This feature is disabled by default. See its API documentation in config.h for additional steps you have to take when enabling it.
  API Changes
  * The following functions in the random generator modules have been deprecated and replaced as shown below. The new functions change the return type from void to int to allow returning error codes when using MBEDTLS_&lt;MODULE&gt;_ALT for the underlying AES or message digest primitive. Fixes #1798. mbedtls_ctr_drbg_update() -&gt; mbedtls_ctr_drbg_update_ret() mbedtls_hmac_drbg_update() -&gt; mbedtls_hmac_drbg_update_ret()
  * Extend ECDH interface to enable alternative implementations.
  * Deprecate error codes of the form MBEDTLS_ERR_xxx_INVALID_KEY_LENGTH for ARIA, CAMELLIA and Blowfish. These error codes will be replaced by the more generic per-module error codes MBEDTLS_ERR_xxx_BAD_INPUT_DATA.
  * Additional parameter validation checks have been added for the following modules - AES, ARIA, Blowfish, CAMELLIA, CCM, GCM, DHM, ECP, ECDSA, ECDH, ECJPAKE, SHA, Chacha20 and Poly1305, cipher, pk, RSA, and MPI. Where modules have had parameter validation added, existing parameter checks may have changed. Some modules, such as Chacha20 had existing parameter validation whereas other modules had little. This has now been changed so that the same level of validation is present in all modules, and that it is now optional with the MBEDTLS_CHECK_PARAMS flag which by default is off. That means that checks which were previously present by default will no longer be.
  New deprecations
  * Deprecate mbedtls_ctr_drbg_update() and mbedtls_hmac_drbg_update() in favor of functions that can return an error code.
  Bugfix
  * Fix for Clang, which was reporting a warning for the bignum.c inline assembly for AMD64 targets creating string literals greater than those permitted by the ISO C99 standard. Found by Aaron Jones. Fixes #482.
  * Fix runtime error in mbedtls_platform_entropy_poll() when run through qemu user emulation. Reported and fix suggested by randombit. Fixes #1212.
  * Fix an unsafe bounds check when restoring an SSL session from a ticket. This could lead to a buffer overflow, but only in case ticket authentication was broken. Reported and fix suggested by Guido Vranken in #659.
  * Add explicit integer to enumeration type casts to example program programs/pkey/gen_key which previously led to compilation failure on some toolchains. Reported by phoenixmcallister. Fixes #2170.
  * Clarify documentation of mbedtls_ssl_set_own_cert() regarding the absence of check for certificate/key matching. Reported by Attila Molnar, #507.
  * Fix double initialization of ECC hardware that made some accelerators hang.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1567512000">- Update to version 2.16.2:
  * Security improvements and bugfixes
- Use ninja to for build</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1573646400">- Update to version 2.16.3:
  * Security improvements and bugfixes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1585828800">- Update to version 2.16.5:
  * Security improvements and bugfixes</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597665600">- update to 2.23.0:
  a lot of changes see https://github.com/ARMmbed/mbedtls/releases/tag/v2.23.0
  * Fix a side channel vulnerability in modular exponentiation that could reveal an RSA private key used in a secure enclave. Noticed by Sangho Lee, Ming-Wei Shih, Prasun Gera, Taesoo Kim and Hyesoon Kim (Georgia Institute of Technology); and Marcus Peinado (Microsoft Research). Reported by Raoul Strackx (Fortanix) in #3394.
  * Fix side channel in mbedtls_ecp_check_pub_priv() and mbedtls_pk_parse_key() / mbedtls_pk_parse_keyfile() (when loading a private key that didn't include the uncompressed public key), as well as mbedtls_ecp_mul() / mbedtls_ecp_mul_restartable() when called with a NULL f_rng argument. An attacker with access to precise enough timing and memory access information (typically an untrusted operating system attacking a secure enclave) could fully recover the ECC private key. Found and reported by Alejandro Cabrera Aldaya and Billy Brumley.
  * Fix issue in Lucky 13 counter-measure that could make it ineffective when hardware accelerators were used (using one of the MBEDTLS_SHAxxx_ALT macros). This would cause the original Lucky 13 attack to be possible in those configurations, allowing an active network attacker to recover plaintext after repeated timing measurements under some conditions. Reported and fix suggested by Luc Perneel in #3246.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1598875200">- Do not run testsuite in parallel - its not reliable</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1599480000">- Add workaround for failing builds (Python not found) due to
  https://gitlab.kitware.com/cmake/cmake/-/issues/21168</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1599652800">- update to 2.24.0:
  * see https://github.com/ARMmbed/mbedtls/releases/tag/v2.24.0
  * Fix a vulnerability in the verification of X.509 certificates when matching
  the expected common name (the cn argument of mbedtls_x509_crt_verify())
  with the actual certificate name: when the subjecAltName extension is
  present, the expected name was compared to any name in that extension
  regardless of its type. This means that an attacker could for example
  impersonate a 4-bytes or 16-byte domain by getting a certificate for the
  corresponding IPv4 or IPv6 (this would require the attacker to control that
  IP address, though). Similar attacks using other subjectAltName name types
  might be possible.
  * When checking X.509 CRLs, a certificate was only considered as revoked if
  its revocationDate was in the past according to the local clock if
  available. In particular, on builds without MBEDTLS_HAVE_TIME_DATE,
  certificates were never considered as revoked. On builds with
  MBEDTLS_HAVE_TIME_DATE, an attacker able to control the local clock (for
  example, an untrusted OS attacking a secure enclave) could prevent
  revocation of certificates via CRLs. Fixed by no longer checking the
  revocationDate field, in accordance with RFC 5280. Reported by yuemonangong
  in #3340. Reported independently and fixed by Raoul Strackx and Jethro
  * In (D)TLS record decryption, when using a CBC ciphersuites without the
  Encrypt-then-Mac extension, use constant code flow memory access patterns
  to extract and check the MAC. This is an improvement to the existing
  countermeasure against Lucky 13 attacks. The previous countermeasure was
  effective against network-based attackers, but less so against local
  attackers. The new countermeasure defends against local attackers, even if
  they have access to fine-grained measurements. In particular, this fixes a
  local Lucky 13 cache attack found and reported by Tuba Yavuz, Farhaan
  Fowze, Ken (Yihan) Bai, Grant Hernandez, and Kevin Butler (University of
  Florida) and Dave Tian (Purdue University).
  * Fix side channel in RSA private key operations and static (finite-field)
  Diffie-Hellman. An adversary with precise enough timing and memory access
  information (typically an untrusted operating system attacking a secure
  enclave) could bypass an existing counter-measure (base blinding) and
  potentially fully recover the private key.
  * Fix a 1-byte buffer overread in mbedtls_x509_crl_parse_der(). Credit to
  OSS-Fuzz for detecting the problem and to Philippe Antoine for pinpointing
  the problematic code.
  * Zeroising of plaintext buffers in mbedtls_ssl_read() to erase unused
  application data from memory.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1608638400">- update to 2.25.0:
  * This release of Mbed TLS provides bug fixes, minor enhancements and new
  features. This release includes fixes for security issues.
  * see https://github.com/ARMmbed/mbedtls/releases/tag/v2.25.0
  * The functions mbedtls_cipher_auth_encrypt() and
  mbedtls_cipher_auth_decrypt() would write past the minimum documented size
  of the output buffer when used with NIST_KW. As a result, code using those
  functions as documented with NIST_KW could have a buffer overwrite of up to
  15 bytes, with consequences ranging up to arbitrary code execution
  depending on the location of the output buffer.
  * Limit the size of calculations performed by mbedtls_mpi_exp_mod to
  MBEDTLS_MPI_MAX_SIZE to prevent a potential denial of service when generating
  Diffie-Hellman key pairs. Credit to OSS-Fuzz.
  * A failure of the random generator was ignored in mbedtls_mpi_fill_random(),
  which is how most uses of randomization in asymmetric cryptography (including
  key generation, intermediate value randomization and blinding) are implemented.
  This could cause failures or the silent use of non-random values. A random
  generator can fail if it needs reseeding and cannot not obtain entropy, or due
  to an internal failure (which, for Mbed TLS's own CTR_DRBG or HMAC_DRBG, can
  only happen due to a misconfiguration).
  * Fix a compliance issue whereby we were not checking the tag on the algorithm
  parameters (only the size) when comparing the signature in the description part
  of the cert to the real signature. This meant that a NULL algorithm parameters
  entry would look identical to an array of REAL (size zero) to the library and
  thus the certificate would be considered valid. However, if the parameters do
  not match in any way then the certificate should be considered invalid, and
  indeed OpenSSL marks these certs as invalid when mbedtls did not. Many thanks
  to guidovranken who found this issue via differential fuzzing and reported it
  in #3629.
  * Zeroising of local buffers and variables which are used for calculations in
  mbedtls_pkcs5_pbkdf2_hmac(), mbedtls_internal_sha*_process(),
  mbedtls_internal_md*_process() and mbedtls_internal_ripemd160_process()
  functions to erase sensitive data from memory. Reported by Johan Malmgren and
  Johan Uppman Bruce from Sectra.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1611057600">- Fix build for Leap targets
- Use upstream tarball name</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1616414400">- Update to 2.26.0: [bsc#1189589, CVE-2021-24119]
  * * This release of Mbed TLS provides bug fixes, minor enhancements and new
  features. This release includes fixes for security issues.
  * see https://github.com/ARMmbed/mbedtls/releases/tag/v2.26.0
- Fix build with patch from https://github.com/ARMmbed/mbedtls/pull/4237
  mbedtls-4237.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1618488000">-  Workaround for building with gcc-11 boo#1181876</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1626782400">- Update to 2.27.0:
  API changes:
  * Update AEAD output size macros to bring them in line with the PSA Crypto
    API version 1.0 spec. This version of the spec parameterizes them on the
    key type used, as well as the key bit-size in the case of
    PSA_AEAD_TAG_LENGTH.
    The old versions of these macros were renamed and deprecated as follows:
  - PSA_AEAD_TAG_LENGTH          -&gt; PSA_AEAD_TAG_LENGTH_1_ARG
  - PSA_AEAD_ENCRYPT_OUTPUT_SIZE -&gt; PSA_AEAD_ENCRYPT_OUTPUT_SIZE_2_ARG
  - PSA_AEAD_DECRYPT_OUTPUT_SIZE -&gt; PSA_AEAD_DECRYPT_OUTPUT_SIZE_2_ARG
  - PSA_AEAD_UPDATE_OUTPUT_SIZE  -&gt; PSA_AEAD_UPDATE_OUTPUT_SIZE_2_ARG
  - PSA_AEAD_FINISH_OUTPUT_SIZE  -&gt; PSA_AEAD_FINISH_OUTPUT_SIZE_1_ARG
  - PSA_AEAD_VERIFY_OUTPUT_SIZE  -&gt; PSA_AEAD_VERIFY_OUTPUT_SIZE_1_ARG
  * Implement one-shot cipher functions, psa_cipher_encrypt and
    psa_cipher_decrypt, according to the PSA Crypto API 1.0.0
    specification.
  Features:
  * Add mbedtls_rsa_rsassa_pss_sign_ext() function allowing to generate a
    signature with a specific salt length. This function allows to validate
    test cases provided in the NIST's CAVP test suite.
  * Added support for built-in driver keys through the PSA opaque crypto
    driver interface. Refer to the documentation of
    MBEDTLS_PSA_CRYPTO_BUILTIN_KEYS for more information.
  * Implement psa_sign_message() and psa_verify_message().
  * The new function mbedtls_mpi_random() generates a random value in a
    given range uniformly.
  * Implement psa_mac_compute() and psa_mac_verify() as defined in the
    PSA Cryptograpy API 1.0.0 specification.
  * MBEDTLS_ECP_MAX_BITS is now determined automatically from the configured
    curves and no longer needs to be configured explicitly to save RAM.
  Security
  * Fix a bias in the generation of finite-field Diffie-Hellman-Merkle (DHM)
    private keys and of blinding values for DHM and elliptic curves (ECP)
    computations.
  * Fix a potential side channel vulnerability in ECDSA ephemeral key generation.
    An adversary who is capable of very precise timing measurements could
    learn partial information about the leading bits of the nonce used for the
    signature, allowing the recovery of the private key after observing a
    large number of signature operations. This completes a partial fix in
    Mbed TLS 2.20.0.
  * It was possible to configure MBEDTLS_ECP_MAX_BITS to a value that is
    too small, leading to buffer overflows in ECC operations. Fail the build
    in such a case.
  * An adversary with access to precise enough information about memory
    accesses (typically, an untrusted operating system attacking a secure
    enclave) could recover an RSA private key after observing the victim
    performing a single private-key operation.
  * An adversary with access to precise enough timing information (typically, a
    co-located process) could recover a Curve25519 or Curve448 static ECDH key
    after inputting a chosen public key and observing the victim performing the
    corresponding private-key operation.
  Bugfix
  * Add printf function attributes to mbedtls_debug_print_msg to ensure we
    get printf format specifier warnings.
  * Fix premature fopen() call in mbedtls_entropy_write_seed_file which may
    lead to seed file corruption in the case where the path to the seed file is
    equal to MBEDTLS_PLATFORM_STD_NV_SEED_FILE.
  * PSA functions other than psa_open_key now return PSA_ERROR_INVALID_HANDLE
    rather than PSA_ERROR_DOES_NOT_EXIST for an invalid handle, bringing them
    in line with version 1.0.0 of the specification.
  * PSA functions creating a key now return PSA_ERROR_INVALID_ARGUMENT rather
    than PSA_ERROR_INVALID_HANDLE when the identifier specified for the key
    to create is not valid, bringing them in line with version 1.0.0 of the
    specification.
  * Fix some cases in the bignum module where the library constructed an
    unintended representation of the value 0 which was not processed
    correctly by some bignum operations. This could happen when
    mbedtls_mpi_read_string() was called on "-0", or when
    mbedtls_mpi_mul_mpi() and mbedtls_mpi_mul_int() was called with one of
    the arguments being negative and the other being 0.
  * Fix a bug in ECDSA that would cause it to fail when the hash is all-bits
    zero.
  * Fix a compilation error when MBEDTLS_ECP_RANDOMIZE_MXZ_ALT is
    defined.
  * Fix an incorrect error code when parsing a PKCS#8 private key.
  * In a TLS client, enforce the Diffie-Hellman minimum parameter size
    set with mbedtls_ssl_conf_dhm_min_bitlen() precisely. Before, the
    minimum size was rounded down to the nearest multiple of 8.
  * In library/net_sockets.c, _POSIX_C_SOURCE and _XOPEN_SOURCE are
    defined to specific values.  If the code is used in a context
    where these are already defined, this can result in a compilation
    error.  Instead, assume that if they are defined, the values will
    be adequate to build Mbed TLS.
  * The cipher suite TLS-RSA-WITH-CAMELLIA-256-GCM-SHA384 was not available
    when SHA-1 was disabled and was offered when SHA-1 was enabled but SHA-384
    was disabled. Fix the dependency.
  * Do not offer SHA384 cipher suites when SHA-384 is disabled.
  * With MBEDTLS_PSA_CRYPTO_C disabled, some functions were getting built
    nonetheless, resulting in undefined reference errors when building a
    shared library.
  * Fix test suite code on platforms where int32_t is not int, such as
    Arm Cortex-M.
  * Fix some issues affecting MBEDTLS_ARIA_ALT implementations: a misplaced
    directive in a header and a missing initialization in the self-test.
  * Fix a missing initialization in the Camellia self-test, affecting
    MBEDTLS_CAMELLIA_ALT implementations.
  * Restore the ability to configure PSA via Mbed TLS options to support RSA
    key pair operations but exclude RSA key generation. When MBEDTLS_GENPRIME
    is not defined PSA will no longer attempt to use mbedtls_rsa_gen_key().
  * Fix a regression introduced in 2.24.0 which broke (D)TLS CBC ciphersuites
    (when the encrypt-then-MAC extension is not in use) with some ALT
    implementations of the underlying hash (SHA-1, SHA-256, SHA-384), causing
    the affected side to wrongly reject valid messages.
  * Remove outdated check-config.h check that prevented implementing the
    timing module on Mbed OS.
  * Fix PSA_ALG_TLS12_PRF and PSA_ALG_TLS12_PSK_TO_MS being too permissive
    about missing inputs.
  * Fix a resource leak in a test suite with an alternative AES
    implementation.
  * Fix a crash in mbedtls_mpi_debug_mpi on a bignum having 0 limbs. This
    could notably be triggered by setting the TLS debug level to 3 or above
    and using a Montgomery curve for the key exchange.
  * psa_verify_hash() was relying on implementation-specific behavior of
    mbedtls_rsa_rsassa_pss_verify() and was causing failures in some _ALT
    implementations. This reliance is now removed.
  * Disallow inputs of length different from the corresponding hash when
    signing or verifying with PSA_ALG_RSA_PSS (The PSA Crypto API mandates
    that PSA_ALG_RSA_PSS uses the same hash throughout the algorithm.)
  * Fix a null pointer dereference when mbedtls_mpi_exp_mod() was called with
    A=0 represented with 0 limbs. Up to and including Mbed TLS 2.26, this bug
    could not be triggered by code that constructed A with one of the
    mbedtls_mpi_read_xxx functions (including in particular TLS code) since
    those always built an mpi object with at least one limb.
  * Fix mbedtls_mpi_gcd(G,A,B) when the value of B is zero. This had no
    effect on Mbed TLS's internal use of mbedtls_mpi_gcd(), but may affect
    applications that call mbedtls_mpi_gcd() directly.
  * The PSA API no longer allows the creation or destruction of keys with a
    read-only lifetime. The persistence level PSA_KEY_PERSISTENCE_READ_ONLY
    can now only be used as intended, for keys that cannot be modified through
    normal use of the API.
  * When MBEDTLS_PSA_CRYPTO_SPM is enabled, crypto_spe.h was not included
    in all the right places. Include it from crypto_platform.h, which is
    the natural place.
  * mbedtls_pk_sign() and mbedtls_pk_verify() and their extended and
    restartable variants now always honor the specified hash length if
    nonzero. Before, for RSA, hash_len was ignored in favor of the length of
    the specified hash algorithm.
  * Fix which alert is sent in some cases to conform to the
    applicable RFC: on an invalid Finished message value, an
    invalid max_fragment_length extension, or an
    unsupported extension used by the server.
  * Correct (change from 12 to 13 bytes) the value of the macro describing the
    maximum nonce length returned by psa_aead_generate_nonce().
  Changes
  * Add extra printf compiler warning flags to builds.
  * Fix memsan build false positive in x509_crt.c with Clang 11
  * Fix the setting of the read timeout in the DTLS sample programs.
  * Remove the AES sample application programs/aes/aescrypt2 which shows
    bad cryptographic practice.
  * Alternative implementations of CMAC may now opt to not support 3DES as a
    CMAC block cipher, and still pass the CMAC self test.
  * Remove configs/config-psa-crypto.h, which was identical to the default
    configuration except for having some extra cryptographic mechanisms
    enabled and for unintended differences. This configuration was primarily
    intended to demonstrate the PSA API, and lost most of its usefulness when
    MBEDTLS_PSA_CRYPTO_C became enabled by default.
  * When building the test suites with GNU make, invoke python3 or python, not
    python2, which is no longer supported upstream.
  * When using session cache based session resumption on the server,
    double-check that custom session cache implementations return
    sessions which are consistent with the negotiated ciphersuite
    and compression method.
  * Fix build failure on MinGW toolchain when __USE_MING_ANSI_STDIO is on.
    When that flag is on, standard GNU C printf format specifiers
    should be used.
  * Reduce the default value of MBEDTLS_ECP_WINDOW_SIZE. This reduces RAM usage
    during ECC operations at a negligible performance cost.
  * mbedtls_mpi_read_binary(), mbedtls_mpi_read_binary_le() and
    mbedtls_mpi_read_string() now construct an mbedtls_mpi object with 0 limbs
    when their input has length 0. Note that this is an implementation detail
    and can change at any time, so this change should be transparent, but it
    may result in mbedtls_mpi_write_binary() or mbedtls_mpi_write_string()
    now writing an empty string where it previously wrote one or more
    zero digits when operating from values constructed with an mpi_read
    function and some mpi operations.
  * Implicitly add PSA_KEY_USAGE_SIGN_MESSAGE key usage policy flag when
    PSA_KEY_USAGE_SIGN_HASH flag is set and PSA_KEY_USAGE_VERIFY_MESSAGE flag
    when PSA_KEY_USAGE_VERIFY_HASH flag is set. This usage flag extension
    is also applied when loading a key from storage.
  * Remove mbedtls-4237.patch upstream
  * Library soname bump to libmbedcrypto7</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1642075200">- Update to 2.28.0: (bsc#1193979, CVE-2021-45450)
  API changes
  * Some fields of mbedtls_ssl_session and mbedtls_ssl_config are in a
  different order. This only affects applications that define such
  structures directly or serialize them.
  Requirement changes
  * Sign-magnitude and one's complement representations for signed integers are
  not supported. Two's complement is the only supported representation.
  Removals
  * Remove config option MBEDTLS_TLS_DEFAULT_ALLOW_SHA1_IN_CERTIFICATES,
  which allowed SHA-1 in the default TLS configuration for certificate
  signing. It was intended to facilitate the transition in environments
  with SHA-1 certificates. SHA-1 is considered a weak message digest and
  its use constitutes a security risk.
  * Remove the partial support for running unit tests via Greentea on Mbed OS,
  which had been unmaintained since 2018.
  Features
  * The identifier of the CID TLS extension can be configured by defining
  MBEDTLS_TLS_EXT_CID at compile time.
  * Warn if errors from certain functions are ignored. This is currently
  supported on GCC-like compilers and on MSVC and can be configured through
  the macro MBEDTLS_CHECK_RETURN. The warnings are always enabled
  (where supported) for critical functions where ignoring the return
  value is almost always a bug. Enable the new configuration option
  MBEDTLS_CHECK_RETURN_WARNING to get warnings for other functions. This
  is currently implemented in the AES, DES and md modules, and will be
  extended to other modules in the future.
  * Add missing PSA macros declared by PSA Crypto API 1.0.0:
  PSA_ALG_IS_SIGN_HASH, PSA_ALG_NONE, PSA_HASH_BLOCK_LENGTH, PSA_KEY_ID_NULL.
  * Add new API mbedtls_ct_memcmp for constant time buffer comparison.
  * Add PSA API definition for ARIA.
  Security
  * Zeroize several intermediate variables used to calculate the expected
  value when verifying a MAC or AEAD tag. This hardens the library in
  case the value leaks through a memory disclosure vulnerability. For
  example, a memory disclosure vulnerability could have allowed a
  man-in-the-middle to inject fake ciphertext into a DTLS connection.
  * In psa_cipher_generate_iv() and psa_cipher_encrypt(), do not read back
  from the output buffer. This fixes a potential policy bypass or decryption
  oracle vulnerability if the output buffer is in memory that is shared with
  an untrusted application.
  * Fix a double-free that happened after mbedtls_ssl_set_session() or
  mbedtls_ssl_get_session() failed with MBEDTLS_ERR_SSL_ALLOC_FAILED
  (out of memory). After that, calling mbedtls_ssl_session_free()
  and mbedtls_ssl_free() would cause an internal session buffer to
  be free()'d twice.
  Bugfix
  * Stop using reserved identifiers as local variables. Fixes #4630.
  * The GNU makefiles invoke python3 in preference to python except on Windows.
  * The check was accidentally not performed when cross-compiling for Windows
  on Linux. Fix this. Fixes #4774.
  * Prevent divide by zero if either of PSA_CIPHER_ENCRYPT_OUTPUT_SIZE() or
  PSA_CIPHER_UPDATE_OUTPUT_SIZE() were called using an asymmetric key type.
  * Fix a parameter set but unused in psa_crypto_cipher.c. Fixes #4935.
  * Don't use the obsolete header path sys/fcntl.h in unit tests.
  These header files cause compilation errors in musl.
  Fixes #4969.
  * Fix missing constraints on x86_64 and aarch64 assembly code
  for bignum multiplication that broke some bignum operations with
  (at least) Clang 12.
  Fixes #4116, #4786, #4917, #4962.
  * Fix mbedtls_cipher_crypt: AES-ECB when MBEDTLS_USE_PSA_CRYPTO is enabled.
  * Failures of alternative implementations of AES or DES single-block
  functions enabled with MBEDTLS_AES_ENCRYPT_ALT, MBEDTLS_AES_DECRYPT_ALT,
  MBEDTLS_DES_CRYPT_ECB_ALT or MBEDTLS_DES3_CRYPT_ECB_ALT were ignored.
  This does not concern the implementation provided with Mbed TLS,
  where this function cannot fail, or full-module replacements with
  MBEDTLS_AES_ALT or MBEDTLS_DES_ALT. Reported by Armelle Duboc in #1092.
  * Some failures of HMAC operations were ignored. These failures could only
  happen with an alternative implementation of the underlying hash module.
  * Fix the error returned by psa_generate_key() for a public key. Fixes #4551.
  * Fix the build of sample programs when neither MBEDTLS_ERROR_C nor
  MBEDTLS_ERROR_STRERROR_DUMMY is enabled.
  * Fix PSA_ALG_RSA_PSS verification accepting an arbitrary salt length.
  This algorithm now accepts only the same salt length for verification
  that it produces when signing, as documented. Use the new algorithm
  PSA_ALG_RSA_PSS_ANY_SALT to accept any salt length. Fixes #4946.
  * The existing predicate macro name PSA_ALG_IS_HASH_AND_SIGN is now reserved
  for algorithm values that fully encode the hashing step, as per the PSA
  Crypto API specification. This excludes PSA_ALG_RSA_PKCS1V15_SIGN_RAW and
  PSA_ALG_ECDSA_ANY. The new predicate macro PSA_ALG_IS_SIGN_HASH covers
  all algorithms that can be used with psa_{sign,verify}_hash(), including
  these two.
  * Fix issue in Makefile on Linux with SHARED=1, that caused shared libraries
  not to list other shared libraries they need.
  * Fix a bug in mbedtls_gcm_starts() when the bit length of the iv
  exceeds 2^32. Fixes #4884.
  * Fix an uninitialized variable warning in test_suite_ssl.function with GCC
  version 11.
  * Fix the build when no SHA2 module is included. Fixes #4930.
  * Fix the build when only the bignum module is included. Fixes #4929.
  * Fix a potential invalid pointer dereference and infinite loop bugs in
  pkcs12 functions when the password is empty. Fix the documentation to
  better describe the inputs to these functions and their possible values.
  Fixes #5136.
  * The key usage flags PSA_KEY_USAGE_SIGN_MESSAGE now allows the MAC
  operations psa_mac_compute() and psa_mac_sign_setup().
  * The key usage flags PSA_KEY_USAGE_VERIFY_MESSAGE now allows the MAC
  operations psa_mac_verify() and psa_mac_verify_setup().
  Changes
  * Set config option MBEDTLS_TLS_DEFAULT_ALLOW_SHA1_IN_KEY_EXCHANGE to be
  disabled by default.
  * Improve the performance of base64 constant-flow code. The result is still
  slower than the original non-constant-flow implementation, but much faster
  than the previous constant-flow implementation. Fixes #4814.
  * Indicate in the error returned if the nonce length used with
  ChaCha20-Poly1305 is invalid, and not just unsupported.
  * The mbedcrypto library includes a new source code module constant_time.c,
  containing various functions meant to resist timing side channel attacks.
  * This module does not have a separate configuration option, and functions
  from this module will be included in the build as required. Currently
  most of the interface of this module is private and may change at any
  time.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1642420800">- Fix baselib.conf</changelog>
  <changelog author="Alexander Bergmann &lt;abergmann@suse.com&gt;" date="1671624000">- Fix potential heap buffer overread and overwrite in DTLS if
  MBEDTLS_SSL_DTLS_CONNECTION_ID is enabled and
  MBEDTLS_SSL_CID_IN_LEN_MAX &gt; 2 * MBEDTLS_SSL_CID_OUT_LEN_MAX.
  (bsc#1206576, CVE-2022-46393).
  Add: mbedtls-CVE-2022-46393.patch</changelog>
</package>
<package pkgid="565d84fdf446a37d0e8e6ceddc9f9a7db151a0c28cb1b9b28822479eb67ac663" name="libmbedtls14-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="2.28.0" rel="bp154.2.3.1"/>
  <changelog author="mpluskal@suse.com" date="1531137600">- Update to version 2.11.0:
  * Features
    + Added support for the XTS block cipher mode with AES (AES-XTS). Contributed by Aorimn in pull request #414.
    + Implemented the HMAC-based extract-and-expand key derivation function (HKDF) per RFC 5869. Contributed by Thomas Fossati.
    + For TLS servers, added support for offloading private key operations to an external cryptoprocessor. Private key operations can be asynchronous to allow non-blocking operation of the TLS server stack.
    + Added support for ARIA cipher (RFC 5794) and associated TLS ciphersuites (RFC 6209). ARIA is disabled by default. To enable, see MBEDTLS_ARIA_C in config.h.
    + Added support for the CCM* block cipher mode as defined in IEEE Std 802.15.4.
    + Added an additional block mode, OFB (Output Feedback) per NIST SP 800-38a, to the AES module and cipher abstraction module.
  * API Changes
    + Mbed TLS 2.11.0 maintains source code compatibility with the last minor version, Mbed TLS 2.9.0, but extends the interface with additional capabilities. Mbed TLS 2.11.0 modifies the ABI and increases the SOVERSION.
  * Bugfix
    + Fixed the cert_write example to handle certificates signed with elliptic curves as well as RSA. Fixes #777 found by dbedev.
    + Fixed the redefinition of _WIN32_WINNT, to avoid overriding a definition used by user applications. Found and fixed by Fabio Alessandrelli.
    + Fixed compilation warnings with the IAR toolchain on 32-bit platforms. Reported by rahmanih in #683.
    + Fixed an issue with MicroBlaze support in bn_mul.h which was causing the build to fail. Found by zv-io. Fixes #1651.
    + Fixed braces in mbedtls_memory_buffer_alloc_status(). Found by sbranden in #552.
    + Added the macro MBEDTLS_X509_MAX_FILE_PATH_LEN that enables the user to configure the maximum length of a file path that can be buffered when calling mbedtls_x509_crt_parse_path(). Fixes #492.
    + Fixed redundant declaration of mbedtls_ssl_list_ciphersuites. Raised by TrinityTonic in #1359.
- Changes for version 2.9.0:
  + Security
    + Fixed an issue in the X.509 module which could lead to a buffer overread during certificate validation. Additionally, the issue could also lead to unnecessary callback checks being made or to some validation checks to be omitted. The overread could be triggered remotely, while the other issues would require a non DER-compliant certificate to be correctly signed by a trusted CA, or a trusted CA with a non DER-compliant certificate. Found by luocm. Fixes #825.
    + Fixed the buffer length assertion in the ssl_parse_certificate_request() function which could lead to an arbitrary overread of the message buffer. The overreads could be caused by receiving a malformed algorithms section which was too short. In builds with debug output, this overread data was output with the debug data.
    + Fixed a client-side bug in the validation of the server's ciphersuite choice which could potentially lead to the client accepting a ciphersuite it didn't offer or a ciphersuite that could not be used with the TLS or DTLS version chosen by the server. This could lead to corruption of internal data structures for some configurations.
  * Features
    + Added an option of MBEDTLS_AES_FEWER_TABLES, to dynamically compute smaller AES tables during runtime, thereby reducing the RAM/ROM footprint by ~6KiB. Suggested and contributed by jkivilin.
    + Added initial support for Curve448 (RFC 7748). So far only mbedtls_ecp_mul() and ECDH primitive functions (mbedtls_ecdh_gen_public(), mbedtls_ecdh_compute_shared()) are supported for now. Contributed by Nicholas Wilson.
  * API Changes
    + Mbed TLS 2.9.0 maintains source code and binary compatibility with the last minor version, Mbed TLS 2.8.0, but extends the interface with additional capabilities.
    + Extended the API with the function of mbedtls_net_poll() to allow user applications to wait for a network context to become ready before reading or writing.
    + Added the function mbedtls_ssl_check_pending() to the public API to allow a check for whether more more data is pending to be processed in the internal message buffers. This function is necessary to determine the underlying transport when event-driven IO is used.
  * Bugfix
    + Fixed a spurious uninitialized variable warning in cmac.c. Fix independently contributed by Brian J Murray and David Brown.
    + Added missing dependencies in test suites that led to build failures in configurations that omit certain hashes or public-key algorithms. Fixes #1040.
    + Fixed a C89 incompatibility issue in benchmark.c. Contributed by Brendan Shanks. Fixes #1353.
    + Added missing dependencies for MBEDTLS_HAVE_TIME_DATE and MBEDTLS_VERSION_FEATURES in some test suites. Contributed by Deomid Ryabkov. Fixes #1299, #1475.
    + Fixed the Makefile build process for building shared libraries on Mac OS X. Fixed by mnacamura.
    + Fixed parsing of PKCS#8 encoded Elliptic Curve keys. Previously Mbed TLS was unable to parse keys which had only the optional parameters field of the ECPrivateKey structure. Found by Jethro Beekman, fixed in #1379.
    + Added an optimisation to return the plaintext data more quickly on unpadded CBC decryption, as stated in the mbedtls_cipher_update() documentation. Contributed by Andy Leiserson.
    + Fixed the overriding and ignoring of return values when parsing and writing to a file in the pk_sign program. Found by kevlut in #1142.
    + Added restrictions to the usage of the error code MBEDTLS_ERR_SSL_WANT_READ to situations where data needs to be fetched from the underlying transport in order to make progress. Previously, this error code was also occasionally returned when unexpected messages were being discarded, ignoring that further messages could potentially already be pending to be processed in the internal buffers; these cases led to deadlocks when event-driven I/O was used. Found and reported by Hubert Mis in #772.
    + Fixed buffer length assertions in the ssl_parse_certificate_request() function which led to a potential one byte overread of the message buffer.
    + Fixed invalid buffer sizes being passed to zlib during record compression and decompression.
    + Raised the soversion of libmbedcrypto to match the soversion of the maintained 2.7 branch. The soversion was increased in Mbed TLS version 2.7.1 to reflect breaking changes in that release, but the increment was missed in 2.8.0 and later releases outside of the 2.7 branch.</changelog>
  <changelog author="mpluskal@suse.com" date="1535025600">- Update to version 2.12.0:
  * Security
    + Fixed a vulnerability in the TLS ciphersuites based on use of CBC and SHA-384 in DTLS/TLS 1.0 to 1.2, that allowed an active network attacker to partially recover the plaintext of messages under certains conditions by exploiting timing side-channels.
    + Fixed a vulnerability in TLS ciphersuites based on CBC, in DTLS/TLS 1.0 to 1.2, that allowed a local attacker, with the ability to execute code on the local machine as well as to manipulate network packets, to partially recover the plaintext of messages under certain conditions by using a cache attack targetting an internal MD/SHA buffer.
    + Added a counter-measure against a vulnerability in TLS ciphersuites based on CBC, in DTLS/TLS 1.0 to 1.2, that allowed a local attacker with the ability to execute code on the local machine as well as manipulate network packets, to partially recover the plaintext of messages certain conditions (see previous entry) by using a cache attack targeting the SSL input record buffer.
  * Features
    + Added new cryptographic primitives, the stream cipher Chacha20, one-time authenticator Poly1305 and AEAD construct Chacha20-Poly1305, as defined in RFC 7539. Contributed by Daniel King.
    + Added support for the CHACHA20-POLY1305 ciphersuites from RFC 7905.
    + Made the receive and transmit buffers independently configurable in size, for situations where the outgoing buffer can be fixed at a smaller size than the incoming buffer
    + Added support for the AES based key wrapping modes defined by NIST SP 800-38F algorithms KW and KWP and by RFC's 3394 and 5649.
    + Added platform support for the Haiku OS.
  * Bugfix
    + Fixed the key_app_writer example which was creating an invalid ASN.1 tag by writing an additional leading zero byte. Found by Aryeh R. #1257.
    + Fixed a C++ compilation error, caused by a variable named new. Found and fixed by Hirotaka Niisato. #1783.
    + Fixed the "no symbols" warning issued by ranlib when building on Mac OS X. Fix contributed by tabascoeye.
    + Clarified documentation for mbedtls_ssl_write() to include 0 as a valid return value. Found by @davidwu2000. #839.
    + Fixed a memory leak in mbedtls_x509_csr_parse(). Found and fixed by catenacyber, Philippe Antoine. #1623.
    + Added length checks to some TLS parsing functions. Found and fixed by Philippe Antoine from Catena cyber. #1663.
    + Remove unused headers included in x509.c. Found by Chris Hanson and fixed by Brendan Shanks. #992.
    + Fixed compilation error when MBEDTLS_ARC4_C is disabled and MBEDTLS_CIPHER_NULL_CIPHER is enabled. Found by TrinityTonic in #1719.
    + Fixed the inline assembly for the MPI multiply helper function for i386 and i386 with SSE2. Found by László Langó. #1550.
    + Fixed the namespacing in header files. Remove the mbedtls namespacing in the #include in the header files. #857.
    + Fixed a compiler warning of 'use before initialisation' in mbedtls_pk_parse_key(). Found by Martin Boye Petersen and fixed by Dawid Drozd.#1098.
    + Fixed decryption of zero length messages (which contain all padding) when a CBC based ciphersuite was used together with Encrypt-then-MAC.
    + Fixed the ssl_client2 example to send application data with 0-length content when the request_size argument is set to 0 as stated in the documentation. #1833.
    + Corrected the documentation for mbedtls_ssl_get_session(). This API has deep copy of the session, and the peer certificate is not lost. #926.
    + Fixed issues when building to the C99 standard, using -std=c99. Fixed by Nick Wilson.
  * Changes
    + Fails when receiving a TLS alert message with an invalid length, or invalid zero-length messages when using TLS 1.2. Contributed by Espressif Systems.
    + Changed the default behaviour of mbedtls_hkdf_extract() to return an error when calling with a NULL salt and non-zero salt length. Contributed by Brian J Murray
    + Change the shebang line in Perl scripts to look up perl in the PATH. Contributed by fbrosson.
    + Allow overriding the time on Windows via the platform-time abstraction. Fixed by Nick Wilson.
    + Use gmtime_r/gmtime_s for thread-safety. Fixed by Nick Wilson.</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1544529600">- Update to version 2.14.1: [bsc#1118727, CVE-2018-19608]
  Security
  * Fix timing variations and memory access variations in RSA PKCS#1 v1.5
    decryption that could lead to a Bleichenbacher-style padding oracle
    attack. In TLS, this affects servers that accept ciphersuites based on
    RSA decryption (i.e. ciphersuites whose name contains RSA but not
    (EC)DH(E)). Discovered by Eyal Ronen (Weizmann Institute),  Robert Gillham
    (University of Adelaide), Daniel Genkin (University of Michigan),
    Adi Shamir (Weizmann Institute), David Wong (NCC Group), and Yuval Yarom
    (University of Adelaide, Data61). The attack is described in more detail
    in the paper available here: http://cat.eyalro.net/cat.pdf  CVE-2018-19608
  * In mbedtls_mpi_write_binary(), don't leak the exact size of the number
    via branching and memory access patterns. An attacker who could submit
    a plaintext for RSA PKCS#1 v1.5 decryption but only observe the timing
    of the decryption and not its result could nonetheless decrypt RSA
    plaintexts and forge RSA signatures. Other asymmetric algorithms may
    have been similarly vulnerable. Reported by Eyal Ronen, Robert Gillham,
    Daniel Genkin, Adi Shamir, David Wong and Yuval Yarom.
  * Wipe sensitive buffers on the stack in the CTR_DRBG and HMAC_DRBG
    modules.
  API Changes
  * The new functions mbedtls_ctr_drbg_update_ret() and
    mbedtls_hmac_drbg_update_ret() are similar to mbedtls_ctr_drbg_update()
    and mbedtls_hmac_drbg_update() respectively, but the new functions
    report errors whereas the old functions return void. We recommend that
    applications use the new functions.
- Version 2.14.0:
  Security
  * Fix overly strict DN comparison when looking for CRLs belonging to a
    particular CA. This previously led to ignoring CRLs when the CRL's issuer
    name and the CA's subject name differed in their string encoding (e.g.,
    one using PrintableString and the other UTF8String) or in the choice of
    upper and lower case. Reported by Henrik Andersson of Bosch GmbH in issue
    [#1784].
  * Fix a flawed bounds check in server PSK hint parsing. In case the
    incoming message buffer was placed within the first 64KiB of address
    space and a PSK-(EC)DHE ciphersuite was used, this allowed an attacker
    to trigger a memory access up to 64KiB beyond the incoming message buffer,
    potentially leading to an application crash or information disclosure.
  * Fix mbedtls_mpi_is_prime() to use more rounds of probabilistic testing. The
    previous settings for the number of rounds made it practical for an
    adversary to construct non-primes that would be erroneously accepted as
    primes with high probability. This does not have an impact on the
    security of TLS, but can matter in other contexts with numbers chosen
    potentially by an adversary that should be prime and can be validated.
    For example, the number of rounds was enough to securely generate RSA key
    pairs or Diffie-Hellman parameters, but was insufficient to validate
    Diffie-Hellman parameters properly.
    See "Prime and Prejudice" by by Martin R. Albrecht and Jake Massimo and
    Kenneth G. Paterson and Juraj Somorovsky.
  Features
  * Add support for temporarily suspending expensive ECC computations after
    some configurable amount of operations. This is intended to be used in
    constrained, single-threaded systems where ECC is time consuming and can
    block other operations until they complete. This is disabled by default,
    but can be enabled by MBEDTLS_ECP_RESTARTABLE at compile time and
    configured by mbedtls_ecp_set_max_ops() at runtime. It applies to the new
    xxx_restartable functions in ECP, ECDSA, PK and X.509 (CRL not supported
    yet), and to existing functions in ECDH and SSL (currently only
    implemented client-side, for ECDHE-ECDSA ciphersuites in TLS 1.2,
    including client authentication).
  * Add support for Arm CPU DSP extensions to accelerate asymmetric key
    operations. On CPUs where the extensions are available, they can accelerate
    MPI multiplications used in ECC and RSA cryptography. Contributed by
    Aurelien Jarno.
  * Extend RSASSA-PSS signature to allow a smaller salt size. Previously, PSS
    signature always used a salt with the same length as the hash, and returned
    an error if this was not possible. Now the salt size may be up to two bytes
    shorter. This allows the library to support all hash and signature sizes
    that comply with FIPS 186-4, including SHA-512 with a 1024-bit key.
  * Add support for 128-bit keys in CTR_DRBG. Note that using keys shorter
    than 256 bits limits the security of generated material to 128 bits.
  API Changes
  * Add a common error code of `MBEDTLS_ERR_PLATFORM_FEATURE_UNSUPPORTED` for
    a feature that is not supported by underlying alternative
    implementations implementing cryptographic primitives. This is useful for
    hardware accelerators that don't implement all options or features.
  New deprecations
  * All module specific errors following the form
    MBEDTLS_ERR_XXX_FEATURE_UNAVAILABLE that indicate a feature is not
    supported are deprecated and are now replaced by the new equivalent
    platform error.
  * All module specific generic hardware acceleration errors following the
    form MBEDTLS_ERR_XXX_HW_ACCEL_FAILED that are deprecated and are replaced
    by the equivalent plaform error.
  * Deprecate the function mbedtls_mpi_is_prime() in favor of
    mbedtls_mpi_is_prime_ext() which allows specifying the number of
    Miller-Rabin rounds.
  Bugfix
  * Fix wrong order of freeing in programs/ssl/ssl_server2 example
    application leading to a memory leak in case both
    MBEDTLS_MEMORY_BUFFER_ALLOC_C and MBEDTLS_MEMORY_BACKTRACE are set.
    Fixes #2069.
  * Fix a bug in the update function for SSL ticket keys which previously
    invalidated keys of a lifetime of less than a 1s. Fixes #1968.
  * Fix failure in hmac_drbg in the benchmark sample application, when
    MBEDTLS_THREADING_C is defined. Found by TrinityTonic, #1095
  * Fix a bug in the record decryption routine ssl_decrypt_buf()
    which lead to accepting properly authenticated but improperly
    padded records in case of CBC ciphersuites using Encrypt-then-MAC.
  * Fix memory leak and freeing without initialization in the example
    program programs/x509/cert_write. Fixes #1422.
  * Ignore IV in mbedtls_cipher_set_iv() when the cipher mode is
    MBEDTLS_MODE_ECB. Found by ezdevelop. Fixes #1091.
  * Zeroize memory used for buffering or reassembling handshake messages
    after use.
  * Use `mbedtls_platform_zeroize()` instead of `memset()` for zeroization
    of sensitive data in the example programs aescrypt2 and crypt_and_hash.
  * Change the default string format used for various X.509 DN attributes to
    UTF8String. Previously, the use of the PrintableString format led to
    wildcards and non-ASCII characters being unusable in some DN attributes.
    Reported by raprepo in #1860 and by kevinpt in #468. Fix contributed by
    Thomas-Dee.
  * Fix compilation failure for configurations which use compile time
    replacements of standard calloc/free functions through the macros
    MBEDTLS_PLATFORM_CALLOC_MACRO and MBEDTLS_PLATFORM_FREE_MACRO.
    Reported by ole-de and ddhome2006. Fixes #882, #1642 and #1706.
  Changes
  * Removed support for Yotta as a build tool.
  * Add tests for session resumption in DTLS.
  * Close a test gap in (D)TLS between the client side and the server side:
    test the handling of large packets and small packets on the client side
    in the same way as on the server side.
  * Change the dtls_client and dtls_server samples to work by default over
    IPv6 and optionally by a build option over IPv4.
  * Change the use of Windows threading to use Microsoft Visual C++ runtime
    calls, rather than Win32 API calls directly. This is necessary to avoid
    conflict with C runtime usage. Found and fixed by irwir.
  * Remember the string format of X.509 DN attributes when replicating
    X.509 DNs. Previously, DN attributes were always written in their default
    string format (mostly PrintableString), which could lead to CRTs being
    created which used PrintableStrings in the issuer field even though the
    signing CA used UTF8Strings in its subject field; while X.509 compliant,
    such CRTs were rejected in some applications, e.g. some versions of
    Firefox, curl and GnuTLS. Reported in #1033 by Moschn. Fix contributed by
    Thomas-Dee.
  * Improve documentation of mbedtls_ssl_get_verify_result().
    Fixes #517 reported by github-monoculture.
  * Add MBEDTLS_MPI_GEN_PRIME_FLAG_LOW_ERR flag to mbedtls_mpi_gen_prime() and
    use it to reduce error probability in RSA key generation to levels mandated
    by FIPS-186-4.
- Version 2.13.1
  API Changes
  * Extend the platform module with an abstraction mbedtls_platform_gmtime_r()
    whose implementation should behave as a thread-safe version of gmtime().
    This allows users to configure such an implementation at compile time when
    the target system cannot be deduced automatically, by setting the option
    MBEDTLS_PLATFORM_GMTIME_R_ALT. At this stage Mbed TLS is only able to
    automatically select implementations for Windows and POSIX C libraries.
  Bugfix
  * Fix build failures on platforms where only gmtime() is available but
    neither gmtime_r() nor gmtime_s() are present. Fixes #1907.
- Version 2.13.0
  Security
  * Fix an issue in the X.509 module which could lead to a buffer overread
    during certificate extensions parsing. In case of receiving malformed
    input (extensions length field equal to 0), an illegal read of one byte
    beyond the input buffer is made. Found and analyzed by Nathan Crandall.
  Features
  * Add support for fragmentation of outgoing DTLS handshake messages. This
    is controlled by the maximum fragment length as set locally or negotiated
    with the peer, as well as by a new per-connection MTU option, set using
    mbedtls_ssl_set_mtu().
  * Add support for auto-adjustment of MTU to a safe value during the
    handshake when flights do not get through (RFC 6347, section 4.1.1.1,
    last paragraph).
  * Add support for packing multiple records within a single datagram,
    enabled by default.
  * Add support for buffering out-of-order handshake messages in DTLS.
    The maximum amount of RAM used for this can be controlled by the
    compile-time constant MBEDTLS_SSL_DTLS_MAX_BUFFERING defined
    in mbedtls/config.h.
  API Changes
  * Add function mbedtls_ssl_set_datagram_packing() to configure
    the use of datagram packing (enabled by default).
  Bugfix
  * Fix a potential memory leak in mbedtls_ssl_setup() function. An allocation
    failure in the function could lead to other buffers being leaked.
  * Fixes an issue with MBEDTLS_CHACHAPOLY_C which would not compile if
    MBEDTLS_ARC4_C and MBEDTLS_CIPHER_NULL_CIPHER weren't also defined. #1890
  * Fix a memory leak in ecp_mul_comb() if ecp_precompute_comb() fails.
    Fix contributed by Espressif Systems.
  * Add ecc extensions only if an ecc based ciphersuite is used.
    This improves compliance to RFC 4492, and as a result, solves
    interoperability issues with BouncyCastle. Raised by milenamil in #1157.
  * Replace printf with mbedtls_printf in the ARIA module. Found by
    TrinityTonic in #1908.
  * Fix potential use-after-free in mbedtls_ssl_get_max_frag_len()
    and mbedtls_ssl_get_record_expansion() after a session reset. Fixes #1941.
  * Fix a bug that caused SSL/TLS clients to incorrectly abort the handshake
    with TLS versions 1.1 and earlier when the server requested authentication
    without providing a list of CAs. This was due to an overly strict bounds
    check in parsing the CertificateRequest message,
    introduced in Mbed TLS 2.12.0. Fixes #1954.
  * Fix a miscalculation of the maximum record expansion in
    mbedtls_ssl_get_record_expansion() in case of ChachaPoly ciphersuites,
    or CBC ciphersuites in (D)TLS versions 1.1 or higher. Fixes #1913, #1914.
  * Fix undefined shifts with negative values in certificates parsing
    (found by Catena cyber using oss-fuzz)
  * Fix memory leak and free without initialization in pk_encrypt
    and pk_decrypt example programs. Reported by Brace Stout. Fixes #1128.
  * Remove redundant else statement. Raised by irwir. Fixes #1776.
  Changes
  * Copy headers preserving timestamps when doing a "make install".
    Contributed by xueruini.
  * Allow the forward declaration of public structs. Contributed by Dawid
    Drozd. Fixes #1215 raised by randombit.
  * Improve compatibility with some alternative CCM implementations by using
    CCM test vectors from RAM.
  * Add support for buffering of out-of-order handshake messages.
  * Add warnings to the documentation of the HKDF module to reduce the risk
    of misusing the mbedtls_hkdf_extract() and mbedtls_hkdf_expand()
    functions. Fixes #1775. Reported by Brian J. Murray.</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1544529601">- Library package version bumped to libmbedtls12</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1546862400">- Update to version 2.16.0:
  Features
  * Add a new config.h option of MBEDTLS_CHECK_PARAMS that enables validation of parameters in the API. This allows detection of obvious misuses of the API, such as passing NULL pointers. The API of existing functions hasn't changed, but requirements on parameters have been made more explicit in the documentation. See the corresponding API documentation for each function to see for which parameter values it is defined. This feature is disabled by default. See its API documentation in config.h for additional steps you have to take when enabling it.
  API Changes
  * The following functions in the random generator modules have been deprecated and replaced as shown below. The new functions change the return type from void to int to allow returning error codes when using MBEDTLS_&lt;MODULE&gt;_ALT for the underlying AES or message digest primitive. Fixes #1798. mbedtls_ctr_drbg_update() -&gt; mbedtls_ctr_drbg_update_ret() mbedtls_hmac_drbg_update() -&gt; mbedtls_hmac_drbg_update_ret()
  * Extend ECDH interface to enable alternative implementations.
  * Deprecate error codes of the form MBEDTLS_ERR_xxx_INVALID_KEY_LENGTH for ARIA, CAMELLIA and Blowfish. These error codes will be replaced by the more generic per-module error codes MBEDTLS_ERR_xxx_BAD_INPUT_DATA.
  * Additional parameter validation checks have been added for the following modules - AES, ARIA, Blowfish, CAMELLIA, CCM, GCM, DHM, ECP, ECDSA, ECDH, ECJPAKE, SHA, Chacha20 and Poly1305, cipher, pk, RSA, and MPI. Where modules have had parameter validation added, existing parameter checks may have changed. Some modules, such as Chacha20 had existing parameter validation whereas other modules had little. This has now been changed so that the same level of validation is present in all modules, and that it is now optional with the MBEDTLS_CHECK_PARAMS flag which by default is off. That means that checks which were previously present by default will no longer be.
  New deprecations
  * Deprecate mbedtls_ctr_drbg_update() and mbedtls_hmac_drbg_update() in favor of functions that can return an error code.
  Bugfix
  * Fix for Clang, which was reporting a warning for the bignum.c inline assembly for AMD64 targets creating string literals greater than those permitted by the ISO C99 standard. Found by Aaron Jones. Fixes #482.
  * Fix runtime error in mbedtls_platform_entropy_poll() when run through qemu user emulation. Reported and fix suggested by randombit. Fixes #1212.
  * Fix an unsafe bounds check when restoring an SSL session from a ticket. This could lead to a buffer overflow, but only in case ticket authentication was broken. Reported and fix suggested by Guido Vranken in #659.
  * Add explicit integer to enumeration type casts to example program programs/pkey/gen_key which previously led to compilation failure on some toolchains. Reported by phoenixmcallister. Fixes #2170.
  * Clarify documentation of mbedtls_ssl_set_own_cert() regarding the absence of check for certificate/key matching. Reported by Attila Molnar, #507.
  * Fix double initialization of ECC hardware that made some accelerators hang.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1567512000">- Update to version 2.16.2:
  * Security improvements and bugfixes
- Use ninja to for build</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1573646400">- Update to version 2.16.3:
  * Security improvements and bugfixes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1585828800">- Update to version 2.16.5:
  * Security improvements and bugfixes</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597665600">- update to 2.23.0:
  a lot of changes see https://github.com/ARMmbed/mbedtls/releases/tag/v2.23.0
  * Fix a side channel vulnerability in modular exponentiation that could reveal an RSA private key used in a secure enclave. Noticed by Sangho Lee, Ming-Wei Shih, Prasun Gera, Taesoo Kim and Hyesoon Kim (Georgia Institute of Technology); and Marcus Peinado (Microsoft Research). Reported by Raoul Strackx (Fortanix) in #3394.
  * Fix side channel in mbedtls_ecp_check_pub_priv() and mbedtls_pk_parse_key() / mbedtls_pk_parse_keyfile() (when loading a private key that didn't include the uncompressed public key), as well as mbedtls_ecp_mul() / mbedtls_ecp_mul_restartable() when called with a NULL f_rng argument. An attacker with access to precise enough timing and memory access information (typically an untrusted operating system attacking a secure enclave) could fully recover the ECC private key. Found and reported by Alejandro Cabrera Aldaya and Billy Brumley.
  * Fix issue in Lucky 13 counter-measure that could make it ineffective when hardware accelerators were used (using one of the MBEDTLS_SHAxxx_ALT macros). This would cause the original Lucky 13 attack to be possible in those configurations, allowing an active network attacker to recover plaintext after repeated timing measurements under some conditions. Reported and fix suggested by Luc Perneel in #3246.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1598875200">- Do not run testsuite in parallel - its not reliable</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1599480000">- Add workaround for failing builds (Python not found) due to
  https://gitlab.kitware.com/cmake/cmake/-/issues/21168</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1599652800">- update to 2.24.0:
  * see https://github.com/ARMmbed/mbedtls/releases/tag/v2.24.0
  * Fix a vulnerability in the verification of X.509 certificates when matching
  the expected common name (the cn argument of mbedtls_x509_crt_verify())
  with the actual certificate name: when the subjecAltName extension is
  present, the expected name was compared to any name in that extension
  regardless of its type. This means that an attacker could for example
  impersonate a 4-bytes or 16-byte domain by getting a certificate for the
  corresponding IPv4 or IPv6 (this would require the attacker to control that
  IP address, though). Similar attacks using other subjectAltName name types
  might be possible.
  * When checking X.509 CRLs, a certificate was only considered as revoked if
  its revocationDate was in the past according to the local clock if
  available. In particular, on builds without MBEDTLS_HAVE_TIME_DATE,
  certificates were never considered as revoked. On builds with
  MBEDTLS_HAVE_TIME_DATE, an attacker able to control the local clock (for
  example, an untrusted OS attacking a secure enclave) could prevent
  revocation of certificates via CRLs. Fixed by no longer checking the
  revocationDate field, in accordance with RFC 5280. Reported by yuemonangong
  in #3340. Reported independently and fixed by Raoul Strackx and Jethro
  * In (D)TLS record decryption, when using a CBC ciphersuites without the
  Encrypt-then-Mac extension, use constant code flow memory access patterns
  to extract and check the MAC. This is an improvement to the existing
  countermeasure against Lucky 13 attacks. The previous countermeasure was
  effective against network-based attackers, but less so against local
  attackers. The new countermeasure defends against local attackers, even if
  they have access to fine-grained measurements. In particular, this fixes a
  local Lucky 13 cache attack found and reported by Tuba Yavuz, Farhaan
  Fowze, Ken (Yihan) Bai, Grant Hernandez, and Kevin Butler (University of
  Florida) and Dave Tian (Purdue University).
  * Fix side channel in RSA private key operations and static (finite-field)
  Diffie-Hellman. An adversary with precise enough timing and memory access
  information (typically an untrusted operating system attacking a secure
  enclave) could bypass an existing counter-measure (base blinding) and
  potentially fully recover the private key.
  * Fix a 1-byte buffer overread in mbedtls_x509_crl_parse_der(). Credit to
  OSS-Fuzz for detecting the problem and to Philippe Antoine for pinpointing
  the problematic code.
  * Zeroising of plaintext buffers in mbedtls_ssl_read() to erase unused
  application data from memory.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1608638400">- update to 2.25.0:
  * This release of Mbed TLS provides bug fixes, minor enhancements and new
  features. This release includes fixes for security issues.
  * see https://github.com/ARMmbed/mbedtls/releases/tag/v2.25.0
  * The functions mbedtls_cipher_auth_encrypt() and
  mbedtls_cipher_auth_decrypt() would write past the minimum documented size
  of the output buffer when used with NIST_KW. As a result, code using those
  functions as documented with NIST_KW could have a buffer overwrite of up to
  15 bytes, with consequences ranging up to arbitrary code execution
  depending on the location of the output buffer.
  * Limit the size of calculations performed by mbedtls_mpi_exp_mod to
  MBEDTLS_MPI_MAX_SIZE to prevent a potential denial of service when generating
  Diffie-Hellman key pairs. Credit to OSS-Fuzz.
  * A failure of the random generator was ignored in mbedtls_mpi_fill_random(),
  which is how most uses of randomization in asymmetric cryptography (including
  key generation, intermediate value randomization and blinding) are implemented.
  This could cause failures or the silent use of non-random values. A random
  generator can fail if it needs reseeding and cannot not obtain entropy, or due
  to an internal failure (which, for Mbed TLS's own CTR_DRBG or HMAC_DRBG, can
  only happen due to a misconfiguration).
  * Fix a compliance issue whereby we were not checking the tag on the algorithm
  parameters (only the size) when comparing the signature in the description part
  of the cert to the real signature. This meant that a NULL algorithm parameters
  entry would look identical to an array of REAL (size zero) to the library and
  thus the certificate would be considered valid. However, if the parameters do
  not match in any way then the certificate should be considered invalid, and
  indeed OpenSSL marks these certs as invalid when mbedtls did not. Many thanks
  to guidovranken who found this issue via differential fuzzing and reported it
  in #3629.
  * Zeroising of local buffers and variables which are used for calculations in
  mbedtls_pkcs5_pbkdf2_hmac(), mbedtls_internal_sha*_process(),
  mbedtls_internal_md*_process() and mbedtls_internal_ripemd160_process()
  functions to erase sensitive data from memory. Reported by Johan Malmgren and
  Johan Uppman Bruce from Sectra.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1611057600">- Fix build for Leap targets
- Use upstream tarball name</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1616414400">- Update to 2.26.0: [bsc#1189589, CVE-2021-24119]
  * * This release of Mbed TLS provides bug fixes, minor enhancements and new
  features. This release includes fixes for security issues.
  * see https://github.com/ARMmbed/mbedtls/releases/tag/v2.26.0
- Fix build with patch from https://github.com/ARMmbed/mbedtls/pull/4237
  mbedtls-4237.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1618488000">-  Workaround for building with gcc-11 boo#1181876</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1626782400">- Update to 2.27.0:
  API changes:
  * Update AEAD output size macros to bring them in line with the PSA Crypto
    API version 1.0 spec. This version of the spec parameterizes them on the
    key type used, as well as the key bit-size in the case of
    PSA_AEAD_TAG_LENGTH.
    The old versions of these macros were renamed and deprecated as follows:
  - PSA_AEAD_TAG_LENGTH          -&gt; PSA_AEAD_TAG_LENGTH_1_ARG
  - PSA_AEAD_ENCRYPT_OUTPUT_SIZE -&gt; PSA_AEAD_ENCRYPT_OUTPUT_SIZE_2_ARG
  - PSA_AEAD_DECRYPT_OUTPUT_SIZE -&gt; PSA_AEAD_DECRYPT_OUTPUT_SIZE_2_ARG
  - PSA_AEAD_UPDATE_OUTPUT_SIZE  -&gt; PSA_AEAD_UPDATE_OUTPUT_SIZE_2_ARG
  - PSA_AEAD_FINISH_OUTPUT_SIZE  -&gt; PSA_AEAD_FINISH_OUTPUT_SIZE_1_ARG
  - PSA_AEAD_VERIFY_OUTPUT_SIZE  -&gt; PSA_AEAD_VERIFY_OUTPUT_SIZE_1_ARG
  * Implement one-shot cipher functions, psa_cipher_encrypt and
    psa_cipher_decrypt, according to the PSA Crypto API 1.0.0
    specification.
  Features:
  * Add mbedtls_rsa_rsassa_pss_sign_ext() function allowing to generate a
    signature with a specific salt length. This function allows to validate
    test cases provided in the NIST's CAVP test suite.
  * Added support for built-in driver keys through the PSA opaque crypto
    driver interface. Refer to the documentation of
    MBEDTLS_PSA_CRYPTO_BUILTIN_KEYS for more information.
  * Implement psa_sign_message() and psa_verify_message().
  * The new function mbedtls_mpi_random() generates a random value in a
    given range uniformly.
  * Implement psa_mac_compute() and psa_mac_verify() as defined in the
    PSA Cryptograpy API 1.0.0 specification.
  * MBEDTLS_ECP_MAX_BITS is now determined automatically from the configured
    curves and no longer needs to be configured explicitly to save RAM.
  Security
  * Fix a bias in the generation of finite-field Diffie-Hellman-Merkle (DHM)
    private keys and of blinding values for DHM and elliptic curves (ECP)
    computations.
  * Fix a potential side channel vulnerability in ECDSA ephemeral key generation.
    An adversary who is capable of very precise timing measurements could
    learn partial information about the leading bits of the nonce used for the
    signature, allowing the recovery of the private key after observing a
    large number of signature operations. This completes a partial fix in
    Mbed TLS 2.20.0.
  * It was possible to configure MBEDTLS_ECP_MAX_BITS to a value that is
    too small, leading to buffer overflows in ECC operations. Fail the build
    in such a case.
  * An adversary with access to precise enough information about memory
    accesses (typically, an untrusted operating system attacking a secure
    enclave) could recover an RSA private key after observing the victim
    performing a single private-key operation.
  * An adversary with access to precise enough timing information (typically, a
    co-located process) could recover a Curve25519 or Curve448 static ECDH key
    after inputting a chosen public key and observing the victim performing the
    corresponding private-key operation.
  Bugfix
  * Add printf function attributes to mbedtls_debug_print_msg to ensure we
    get printf format specifier warnings.
  * Fix premature fopen() call in mbedtls_entropy_write_seed_file which may
    lead to seed file corruption in the case where the path to the seed file is
    equal to MBEDTLS_PLATFORM_STD_NV_SEED_FILE.
  * PSA functions other than psa_open_key now return PSA_ERROR_INVALID_HANDLE
    rather than PSA_ERROR_DOES_NOT_EXIST for an invalid handle, bringing them
    in line with version 1.0.0 of the specification.
  * PSA functions creating a key now return PSA_ERROR_INVALID_ARGUMENT rather
    than PSA_ERROR_INVALID_HANDLE when the identifier specified for the key
    to create is not valid, bringing them in line with version 1.0.0 of the
    specification.
  * Fix some cases in the bignum module where the library constructed an
    unintended representation of the value 0 which was not processed
    correctly by some bignum operations. This could happen when
    mbedtls_mpi_read_string() was called on "-0", or when
    mbedtls_mpi_mul_mpi() and mbedtls_mpi_mul_int() was called with one of
    the arguments being negative and the other being 0.
  * Fix a bug in ECDSA that would cause it to fail when the hash is all-bits
    zero.
  * Fix a compilation error when MBEDTLS_ECP_RANDOMIZE_MXZ_ALT is
    defined.
  * Fix an incorrect error code when parsing a PKCS#8 private key.
  * In a TLS client, enforce the Diffie-Hellman minimum parameter size
    set with mbedtls_ssl_conf_dhm_min_bitlen() precisely. Before, the
    minimum size was rounded down to the nearest multiple of 8.
  * In library/net_sockets.c, _POSIX_C_SOURCE and _XOPEN_SOURCE are
    defined to specific values.  If the code is used in a context
    where these are already defined, this can result in a compilation
    error.  Instead, assume that if they are defined, the values will
    be adequate to build Mbed TLS.
  * The cipher suite TLS-RSA-WITH-CAMELLIA-256-GCM-SHA384 was not available
    when SHA-1 was disabled and was offered when SHA-1 was enabled but SHA-384
    was disabled. Fix the dependency.
  * Do not offer SHA384 cipher suites when SHA-384 is disabled.
  * With MBEDTLS_PSA_CRYPTO_C disabled, some functions were getting built
    nonetheless, resulting in undefined reference errors when building a
    shared library.
  * Fix test suite code on platforms where int32_t is not int, such as
    Arm Cortex-M.
  * Fix some issues affecting MBEDTLS_ARIA_ALT implementations: a misplaced
    directive in a header and a missing initialization in the self-test.
  * Fix a missing initialization in the Camellia self-test, affecting
    MBEDTLS_CAMELLIA_ALT implementations.
  * Restore the ability to configure PSA via Mbed TLS options to support RSA
    key pair operations but exclude RSA key generation. When MBEDTLS_GENPRIME
    is not defined PSA will no longer attempt to use mbedtls_rsa_gen_key().
  * Fix a regression introduced in 2.24.0 which broke (D)TLS CBC ciphersuites
    (when the encrypt-then-MAC extension is not in use) with some ALT
    implementations of the underlying hash (SHA-1, SHA-256, SHA-384), causing
    the affected side to wrongly reject valid messages.
  * Remove outdated check-config.h check that prevented implementing the
    timing module on Mbed OS.
  * Fix PSA_ALG_TLS12_PRF and PSA_ALG_TLS12_PSK_TO_MS being too permissive
    about missing inputs.
  * Fix a resource leak in a test suite with an alternative AES
    implementation.
  * Fix a crash in mbedtls_mpi_debug_mpi on a bignum having 0 limbs. This
    could notably be triggered by setting the TLS debug level to 3 or above
    and using a Montgomery curve for the key exchange.
  * psa_verify_hash() was relying on implementation-specific behavior of
    mbedtls_rsa_rsassa_pss_verify() and was causing failures in some _ALT
    implementations. This reliance is now removed.
  * Disallow inputs of length different from the corresponding hash when
    signing or verifying with PSA_ALG_RSA_PSS (The PSA Crypto API mandates
    that PSA_ALG_RSA_PSS uses the same hash throughout the algorithm.)
  * Fix a null pointer dereference when mbedtls_mpi_exp_mod() was called with
    A=0 represented with 0 limbs. Up to and including Mbed TLS 2.26, this bug
    could not be triggered by code that constructed A with one of the
    mbedtls_mpi_read_xxx functions (including in particular TLS code) since
    those always built an mpi object with at least one limb.
  * Fix mbedtls_mpi_gcd(G,A,B) when the value of B is zero. This had no
    effect on Mbed TLS's internal use of mbedtls_mpi_gcd(), but may affect
    applications that call mbedtls_mpi_gcd() directly.
  * The PSA API no longer allows the creation or destruction of keys with a
    read-only lifetime. The persistence level PSA_KEY_PERSISTENCE_READ_ONLY
    can now only be used as intended, for keys that cannot be modified through
    normal use of the API.
  * When MBEDTLS_PSA_CRYPTO_SPM is enabled, crypto_spe.h was not included
    in all the right places. Include it from crypto_platform.h, which is
    the natural place.
  * mbedtls_pk_sign() and mbedtls_pk_verify() and their extended and
    restartable variants now always honor the specified hash length if
    nonzero. Before, for RSA, hash_len was ignored in favor of the length of
    the specified hash algorithm.
  * Fix which alert is sent in some cases to conform to the
    applicable RFC: on an invalid Finished message value, an
    invalid max_fragment_length extension, or an
    unsupported extension used by the server.
  * Correct (change from 12 to 13 bytes) the value of the macro describing the
    maximum nonce length returned by psa_aead_generate_nonce().
  Changes
  * Add extra printf compiler warning flags to builds.
  * Fix memsan build false positive in x509_crt.c with Clang 11
  * Fix the setting of the read timeout in the DTLS sample programs.
  * Remove the AES sample application programs/aes/aescrypt2 which shows
    bad cryptographic practice.
  * Alternative implementations of CMAC may now opt to not support 3DES as a
    CMAC block cipher, and still pass the CMAC self test.
  * Remove configs/config-psa-crypto.h, which was identical to the default
    configuration except for having some extra cryptographic mechanisms
    enabled and for unintended differences. This configuration was primarily
    intended to demonstrate the PSA API, and lost most of its usefulness when
    MBEDTLS_PSA_CRYPTO_C became enabled by default.
  * When building the test suites with GNU make, invoke python3 or python, not
    python2, which is no longer supported upstream.
  * When using session cache based session resumption on the server,
    double-check that custom session cache implementations return
    sessions which are consistent with the negotiated ciphersuite
    and compression method.
  * Fix build failure on MinGW toolchain when __USE_MING_ANSI_STDIO is on.
    When that flag is on, standard GNU C printf format specifiers
    should be used.
  * Reduce the default value of MBEDTLS_ECP_WINDOW_SIZE. This reduces RAM usage
    during ECC operations at a negligible performance cost.
  * mbedtls_mpi_read_binary(), mbedtls_mpi_read_binary_le() and
    mbedtls_mpi_read_string() now construct an mbedtls_mpi object with 0 limbs
    when their input has length 0. Note that this is an implementation detail
    and can change at any time, so this change should be transparent, but it
    may result in mbedtls_mpi_write_binary() or mbedtls_mpi_write_string()
    now writing an empty string where it previously wrote one or more
    zero digits when operating from values constructed with an mpi_read
    function and some mpi operations.
  * Implicitly add PSA_KEY_USAGE_SIGN_MESSAGE key usage policy flag when
    PSA_KEY_USAGE_SIGN_HASH flag is set and PSA_KEY_USAGE_VERIFY_MESSAGE flag
    when PSA_KEY_USAGE_VERIFY_HASH flag is set. This usage flag extension
    is also applied when loading a key from storage.
  * Remove mbedtls-4237.patch upstream
  * Library soname bump to libmbedcrypto7</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1642075200">- Update to 2.28.0: (bsc#1193979, CVE-2021-45450)
  API changes
  * Some fields of mbedtls_ssl_session and mbedtls_ssl_config are in a
  different order. This only affects applications that define such
  structures directly or serialize them.
  Requirement changes
  * Sign-magnitude and one's complement representations for signed integers are
  not supported. Two's complement is the only supported representation.
  Removals
  * Remove config option MBEDTLS_TLS_DEFAULT_ALLOW_SHA1_IN_CERTIFICATES,
  which allowed SHA-1 in the default TLS configuration for certificate
  signing. It was intended to facilitate the transition in environments
  with SHA-1 certificates. SHA-1 is considered a weak message digest and
  its use constitutes a security risk.
  * Remove the partial support for running unit tests via Greentea on Mbed OS,
  which had been unmaintained since 2018.
  Features
  * The identifier of the CID TLS extension can be configured by defining
  MBEDTLS_TLS_EXT_CID at compile time.
  * Warn if errors from certain functions are ignored. This is currently
  supported on GCC-like compilers and on MSVC and can be configured through
  the macro MBEDTLS_CHECK_RETURN. The warnings are always enabled
  (where supported) for critical functions where ignoring the return
  value is almost always a bug. Enable the new configuration option
  MBEDTLS_CHECK_RETURN_WARNING to get warnings for other functions. This
  is currently implemented in the AES, DES and md modules, and will be
  extended to other modules in the future.
  * Add missing PSA macros declared by PSA Crypto API 1.0.0:
  PSA_ALG_IS_SIGN_HASH, PSA_ALG_NONE, PSA_HASH_BLOCK_LENGTH, PSA_KEY_ID_NULL.
  * Add new API mbedtls_ct_memcmp for constant time buffer comparison.
  * Add PSA API definition for ARIA.
  Security
  * Zeroize several intermediate variables used to calculate the expected
  value when verifying a MAC or AEAD tag. This hardens the library in
  case the value leaks through a memory disclosure vulnerability. For
  example, a memory disclosure vulnerability could have allowed a
  man-in-the-middle to inject fake ciphertext into a DTLS connection.
  * In psa_cipher_generate_iv() and psa_cipher_encrypt(), do not read back
  from the output buffer. This fixes a potential policy bypass or decryption
  oracle vulnerability if the output buffer is in memory that is shared with
  an untrusted application.
  * Fix a double-free that happened after mbedtls_ssl_set_session() or
  mbedtls_ssl_get_session() failed with MBEDTLS_ERR_SSL_ALLOC_FAILED
  (out of memory). After that, calling mbedtls_ssl_session_free()
  and mbedtls_ssl_free() would cause an internal session buffer to
  be free()'d twice.
  Bugfix
  * Stop using reserved identifiers as local variables. Fixes #4630.
  * The GNU makefiles invoke python3 in preference to python except on Windows.
  * The check was accidentally not performed when cross-compiling for Windows
  on Linux. Fix this. Fixes #4774.
  * Prevent divide by zero if either of PSA_CIPHER_ENCRYPT_OUTPUT_SIZE() or
  PSA_CIPHER_UPDATE_OUTPUT_SIZE() were called using an asymmetric key type.
  * Fix a parameter set but unused in psa_crypto_cipher.c. Fixes #4935.
  * Don't use the obsolete header path sys/fcntl.h in unit tests.
  These header files cause compilation errors in musl.
  Fixes #4969.
  * Fix missing constraints on x86_64 and aarch64 assembly code
  for bignum multiplication that broke some bignum operations with
  (at least) Clang 12.
  Fixes #4116, #4786, #4917, #4962.
  * Fix mbedtls_cipher_crypt: AES-ECB when MBEDTLS_USE_PSA_CRYPTO is enabled.
  * Failures of alternative implementations of AES or DES single-block
  functions enabled with MBEDTLS_AES_ENCRYPT_ALT, MBEDTLS_AES_DECRYPT_ALT,
  MBEDTLS_DES_CRYPT_ECB_ALT or MBEDTLS_DES3_CRYPT_ECB_ALT were ignored.
  This does not concern the implementation provided with Mbed TLS,
  where this function cannot fail, or full-module replacements with
  MBEDTLS_AES_ALT or MBEDTLS_DES_ALT. Reported by Armelle Duboc in #1092.
  * Some failures of HMAC operations were ignored. These failures could only
  happen with an alternative implementation of the underlying hash module.
  * Fix the error returned by psa_generate_key() for a public key. Fixes #4551.
  * Fix the build of sample programs when neither MBEDTLS_ERROR_C nor
  MBEDTLS_ERROR_STRERROR_DUMMY is enabled.
  * Fix PSA_ALG_RSA_PSS verification accepting an arbitrary salt length.
  This algorithm now accepts only the same salt length for verification
  that it produces when signing, as documented. Use the new algorithm
  PSA_ALG_RSA_PSS_ANY_SALT to accept any salt length. Fixes #4946.
  * The existing predicate macro name PSA_ALG_IS_HASH_AND_SIGN is now reserved
  for algorithm values that fully encode the hashing step, as per the PSA
  Crypto API specification. This excludes PSA_ALG_RSA_PKCS1V15_SIGN_RAW and
  PSA_ALG_ECDSA_ANY. The new predicate macro PSA_ALG_IS_SIGN_HASH covers
  all algorithms that can be used with psa_{sign,verify}_hash(), including
  these two.
  * Fix issue in Makefile on Linux with SHARED=1, that caused shared libraries
  not to list other shared libraries they need.
  * Fix a bug in mbedtls_gcm_starts() when the bit length of the iv
  exceeds 2^32. Fixes #4884.
  * Fix an uninitialized variable warning in test_suite_ssl.function with GCC
  version 11.
  * Fix the build when no SHA2 module is included. Fixes #4930.
  * Fix the build when only the bignum module is included. Fixes #4929.
  * Fix a potential invalid pointer dereference and infinite loop bugs in
  pkcs12 functions when the password is empty. Fix the documentation to
  better describe the inputs to these functions and their possible values.
  Fixes #5136.
  * The key usage flags PSA_KEY_USAGE_SIGN_MESSAGE now allows the MAC
  operations psa_mac_compute() and psa_mac_sign_setup().
  * The key usage flags PSA_KEY_USAGE_VERIFY_MESSAGE now allows the MAC
  operations psa_mac_verify() and psa_mac_verify_setup().
  Changes
  * Set config option MBEDTLS_TLS_DEFAULT_ALLOW_SHA1_IN_KEY_EXCHANGE to be
  disabled by default.
  * Improve the performance of base64 constant-flow code. The result is still
  slower than the original non-constant-flow implementation, but much faster
  than the previous constant-flow implementation. Fixes #4814.
  * Indicate in the error returned if the nonce length used with
  ChaCha20-Poly1305 is invalid, and not just unsupported.
  * The mbedcrypto library includes a new source code module constant_time.c,
  containing various functions meant to resist timing side channel attacks.
  * This module does not have a separate configuration option, and functions
  from this module will be included in the build as required. Currently
  most of the interface of this module is private and may change at any
  time.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1642420800">- Fix baselib.conf</changelog>
  <changelog author="Alexander Bergmann &lt;abergmann@suse.com&gt;" date="1671624000">- Fix potential heap buffer overread and overwrite in DTLS if
  MBEDTLS_SSL_DTLS_CONNECTION_ID is enabled and
  MBEDTLS_SSL_CID_IN_LEN_MAX &gt; 2 * MBEDTLS_SSL_CID_OUT_LEN_MAX.
  (bsc#1206576, CVE-2022-46393).
  Add: mbedtls-CVE-2022-46393.patch</changelog>
</package>
<package pkgid="b06e177594c072766e0e2b35372e872f2756a6d6815549fcca0adee0f53fb65e" name="libmbedx509-1" arch="aarch64">
  <version epoch="0" ver="2.28.0" rel="bp154.2.3.1"/>
  <changelog author="mpluskal@suse.com" date="1531137600">- Update to version 2.11.0:
  * Features
    + Added support for the XTS block cipher mode with AES (AES-XTS). Contributed by Aorimn in pull request #414.
    + Implemented the HMAC-based extract-and-expand key derivation function (HKDF) per RFC 5869. Contributed by Thomas Fossati.
    + For TLS servers, added support for offloading private key operations to an external cryptoprocessor. Private key operations can be asynchronous to allow non-blocking operation of the TLS server stack.
    + Added support for ARIA cipher (RFC 5794) and associated TLS ciphersuites (RFC 6209). ARIA is disabled by default. To enable, see MBEDTLS_ARIA_C in config.h.
    + Added support for the CCM* block cipher mode as defined in IEEE Std 802.15.4.
    + Added an additional block mode, OFB (Output Feedback) per NIST SP 800-38a, to the AES module and cipher abstraction module.
  * API Changes
    + Mbed TLS 2.11.0 maintains source code compatibility with the last minor version, Mbed TLS 2.9.0, but extends the interface with additional capabilities. Mbed TLS 2.11.0 modifies the ABI and increases the SOVERSION.
  * Bugfix
    + Fixed the cert_write example to handle certificates signed with elliptic curves as well as RSA. Fixes #777 found by dbedev.
    + Fixed the redefinition of _WIN32_WINNT, to avoid overriding a definition used by user applications. Found and fixed by Fabio Alessandrelli.
    + Fixed compilation warnings with the IAR toolchain on 32-bit platforms. Reported by rahmanih in #683.
    + Fixed an issue with MicroBlaze support in bn_mul.h which was causing the build to fail. Found by zv-io. Fixes #1651.
    + Fixed braces in mbedtls_memory_buffer_alloc_status(). Found by sbranden in #552.
    + Added the macro MBEDTLS_X509_MAX_FILE_PATH_LEN that enables the user to configure the maximum length of a file path that can be buffered when calling mbedtls_x509_crt_parse_path(). Fixes #492.
    + Fixed redundant declaration of mbedtls_ssl_list_ciphersuites. Raised by TrinityTonic in #1359.
- Changes for version 2.9.0:
  + Security
    + Fixed an issue in the X.509 module which could lead to a buffer overread during certificate validation. Additionally, the issue could also lead to unnecessary callback checks being made or to some validation checks to be omitted. The overread could be triggered remotely, while the other issues would require a non DER-compliant certificate to be correctly signed by a trusted CA, or a trusted CA with a non DER-compliant certificate. Found by luocm. Fixes #825.
    + Fixed the buffer length assertion in the ssl_parse_certificate_request() function which could lead to an arbitrary overread of the message buffer. The overreads could be caused by receiving a malformed algorithms section which was too short. In builds with debug output, this overread data was output with the debug data.
    + Fixed a client-side bug in the validation of the server's ciphersuite choice which could potentially lead to the client accepting a ciphersuite it didn't offer or a ciphersuite that could not be used with the TLS or DTLS version chosen by the server. This could lead to corruption of internal data structures for some configurations.
  * Features
    + Added an option of MBEDTLS_AES_FEWER_TABLES, to dynamically compute smaller AES tables during runtime, thereby reducing the RAM/ROM footprint by ~6KiB. Suggested and contributed by jkivilin.
    + Added initial support for Curve448 (RFC 7748). So far only mbedtls_ecp_mul() and ECDH primitive functions (mbedtls_ecdh_gen_public(), mbedtls_ecdh_compute_shared()) are supported for now. Contributed by Nicholas Wilson.
  * API Changes
    + Mbed TLS 2.9.0 maintains source code and binary compatibility with the last minor version, Mbed TLS 2.8.0, but extends the interface with additional capabilities.
    + Extended the API with the function of mbedtls_net_poll() to allow user applications to wait for a network context to become ready before reading or writing.
    + Added the function mbedtls_ssl_check_pending() to the public API to allow a check for whether more more data is pending to be processed in the internal message buffers. This function is necessary to determine the underlying transport when event-driven IO is used.
  * Bugfix
    + Fixed a spurious uninitialized variable warning in cmac.c. Fix independently contributed by Brian J Murray and David Brown.
    + Added missing dependencies in test suites that led to build failures in configurations that omit certain hashes or public-key algorithms. Fixes #1040.
    + Fixed a C89 incompatibility issue in benchmark.c. Contributed by Brendan Shanks. Fixes #1353.
    + Added missing dependencies for MBEDTLS_HAVE_TIME_DATE and MBEDTLS_VERSION_FEATURES in some test suites. Contributed by Deomid Ryabkov. Fixes #1299, #1475.
    + Fixed the Makefile build process for building shared libraries on Mac OS X. Fixed by mnacamura.
    + Fixed parsing of PKCS#8 encoded Elliptic Curve keys. Previously Mbed TLS was unable to parse keys which had only the optional parameters field of the ECPrivateKey structure. Found by Jethro Beekman, fixed in #1379.
    + Added an optimisation to return the plaintext data more quickly on unpadded CBC decryption, as stated in the mbedtls_cipher_update() documentation. Contributed by Andy Leiserson.
    + Fixed the overriding and ignoring of return values when parsing and writing to a file in the pk_sign program. Found by kevlut in #1142.
    + Added restrictions to the usage of the error code MBEDTLS_ERR_SSL_WANT_READ to situations where data needs to be fetched from the underlying transport in order to make progress. Previously, this error code was also occasionally returned when unexpected messages were being discarded, ignoring that further messages could potentially already be pending to be processed in the internal buffers; these cases led to deadlocks when event-driven I/O was used. Found and reported by Hubert Mis in #772.
    + Fixed buffer length assertions in the ssl_parse_certificate_request() function which led to a potential one byte overread of the message buffer.
    + Fixed invalid buffer sizes being passed to zlib during record compression and decompression.
    + Raised the soversion of libmbedcrypto to match the soversion of the maintained 2.7 branch. The soversion was increased in Mbed TLS version 2.7.1 to reflect breaking changes in that release, but the increment was missed in 2.8.0 and later releases outside of the 2.7 branch.</changelog>
  <changelog author="mpluskal@suse.com" date="1535025600">- Update to version 2.12.0:
  * Security
    + Fixed a vulnerability in the TLS ciphersuites based on use of CBC and SHA-384 in DTLS/TLS 1.0 to 1.2, that allowed an active network attacker to partially recover the plaintext of messages under certains conditions by exploiting timing side-channels.
    + Fixed a vulnerability in TLS ciphersuites based on CBC, in DTLS/TLS 1.0 to 1.2, that allowed a local attacker, with the ability to execute code on the local machine as well as to manipulate network packets, to partially recover the plaintext of messages under certain conditions by using a cache attack targetting an internal MD/SHA buffer.
    + Added a counter-measure against a vulnerability in TLS ciphersuites based on CBC, in DTLS/TLS 1.0 to 1.2, that allowed a local attacker with the ability to execute code on the local machine as well as manipulate network packets, to partially recover the plaintext of messages certain conditions (see previous entry) by using a cache attack targeting the SSL input record buffer.
  * Features
    + Added new cryptographic primitives, the stream cipher Chacha20, one-time authenticator Poly1305 and AEAD construct Chacha20-Poly1305, as defined in RFC 7539. Contributed by Daniel King.
    + Added support for the CHACHA20-POLY1305 ciphersuites from RFC 7905.
    + Made the receive and transmit buffers independently configurable in size, for situations where the outgoing buffer can be fixed at a smaller size than the incoming buffer
    + Added support for the AES based key wrapping modes defined by NIST SP 800-38F algorithms KW and KWP and by RFC's 3394 and 5649.
    + Added platform support for the Haiku OS.
  * Bugfix
    + Fixed the key_app_writer example which was creating an invalid ASN.1 tag by writing an additional leading zero byte. Found by Aryeh R. #1257.
    + Fixed a C++ compilation error, caused by a variable named new. Found and fixed by Hirotaka Niisato. #1783.
    + Fixed the "no symbols" warning issued by ranlib when building on Mac OS X. Fix contributed by tabascoeye.
    + Clarified documentation for mbedtls_ssl_write() to include 0 as a valid return value. Found by @davidwu2000. #839.
    + Fixed a memory leak in mbedtls_x509_csr_parse(). Found and fixed by catenacyber, Philippe Antoine. #1623.
    + Added length checks to some TLS parsing functions. Found and fixed by Philippe Antoine from Catena cyber. #1663.
    + Remove unused headers included in x509.c. Found by Chris Hanson and fixed by Brendan Shanks. #992.
    + Fixed compilation error when MBEDTLS_ARC4_C is disabled and MBEDTLS_CIPHER_NULL_CIPHER is enabled. Found by TrinityTonic in #1719.
    + Fixed the inline assembly for the MPI multiply helper function for i386 and i386 with SSE2. Found by László Langó. #1550.
    + Fixed the namespacing in header files. Remove the mbedtls namespacing in the #include in the header files. #857.
    + Fixed a compiler warning of 'use before initialisation' in mbedtls_pk_parse_key(). Found by Martin Boye Petersen and fixed by Dawid Drozd.#1098.
    + Fixed decryption of zero length messages (which contain all padding) when a CBC based ciphersuite was used together with Encrypt-then-MAC.
    + Fixed the ssl_client2 example to send application data with 0-length content when the request_size argument is set to 0 as stated in the documentation. #1833.
    + Corrected the documentation for mbedtls_ssl_get_session(). This API has deep copy of the session, and the peer certificate is not lost. #926.
    + Fixed issues when building to the C99 standard, using -std=c99. Fixed by Nick Wilson.
  * Changes
    + Fails when receiving a TLS alert message with an invalid length, or invalid zero-length messages when using TLS 1.2. Contributed by Espressif Systems.
    + Changed the default behaviour of mbedtls_hkdf_extract() to return an error when calling with a NULL salt and non-zero salt length. Contributed by Brian J Murray
    + Change the shebang line in Perl scripts to look up perl in the PATH. Contributed by fbrosson.
    + Allow overriding the time on Windows via the platform-time abstraction. Fixed by Nick Wilson.
    + Use gmtime_r/gmtime_s for thread-safety. Fixed by Nick Wilson.</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1544529600">- Update to version 2.14.1: [bsc#1118727, CVE-2018-19608]
  Security
  * Fix timing variations and memory access variations in RSA PKCS#1 v1.5
    decryption that could lead to a Bleichenbacher-style padding oracle
    attack. In TLS, this affects servers that accept ciphersuites based on
    RSA decryption (i.e. ciphersuites whose name contains RSA but not
    (EC)DH(E)). Discovered by Eyal Ronen (Weizmann Institute),  Robert Gillham
    (University of Adelaide), Daniel Genkin (University of Michigan),
    Adi Shamir (Weizmann Institute), David Wong (NCC Group), and Yuval Yarom
    (University of Adelaide, Data61). The attack is described in more detail
    in the paper available here: http://cat.eyalro.net/cat.pdf  CVE-2018-19608
  * In mbedtls_mpi_write_binary(), don't leak the exact size of the number
    via branching and memory access patterns. An attacker who could submit
    a plaintext for RSA PKCS#1 v1.5 decryption but only observe the timing
    of the decryption and not its result could nonetheless decrypt RSA
    plaintexts and forge RSA signatures. Other asymmetric algorithms may
    have been similarly vulnerable. Reported by Eyal Ronen, Robert Gillham,
    Daniel Genkin, Adi Shamir, David Wong and Yuval Yarom.
  * Wipe sensitive buffers on the stack in the CTR_DRBG and HMAC_DRBG
    modules.
  API Changes
  * The new functions mbedtls_ctr_drbg_update_ret() and
    mbedtls_hmac_drbg_update_ret() are similar to mbedtls_ctr_drbg_update()
    and mbedtls_hmac_drbg_update() respectively, but the new functions
    report errors whereas the old functions return void. We recommend that
    applications use the new functions.
- Version 2.14.0:
  Security
  * Fix overly strict DN comparison when looking for CRLs belonging to a
    particular CA. This previously led to ignoring CRLs when the CRL's issuer
    name and the CA's subject name differed in their string encoding (e.g.,
    one using PrintableString and the other UTF8String) or in the choice of
    upper and lower case. Reported by Henrik Andersson of Bosch GmbH in issue
    [#1784].
  * Fix a flawed bounds check in server PSK hint parsing. In case the
    incoming message buffer was placed within the first 64KiB of address
    space and a PSK-(EC)DHE ciphersuite was used, this allowed an attacker
    to trigger a memory access up to 64KiB beyond the incoming message buffer,
    potentially leading to an application crash or information disclosure.
  * Fix mbedtls_mpi_is_prime() to use more rounds of probabilistic testing. The
    previous settings for the number of rounds made it practical for an
    adversary to construct non-primes that would be erroneously accepted as
    primes with high probability. This does not have an impact on the
    security of TLS, but can matter in other contexts with numbers chosen
    potentially by an adversary that should be prime and can be validated.
    For example, the number of rounds was enough to securely generate RSA key
    pairs or Diffie-Hellman parameters, but was insufficient to validate
    Diffie-Hellman parameters properly.
    See "Prime and Prejudice" by by Martin R. Albrecht and Jake Massimo and
    Kenneth G. Paterson and Juraj Somorovsky.
  Features
  * Add support for temporarily suspending expensive ECC computations after
    some configurable amount of operations. This is intended to be used in
    constrained, single-threaded systems where ECC is time consuming and can
    block other operations until they complete. This is disabled by default,
    but can be enabled by MBEDTLS_ECP_RESTARTABLE at compile time and
    configured by mbedtls_ecp_set_max_ops() at runtime. It applies to the new
    xxx_restartable functions in ECP, ECDSA, PK and X.509 (CRL not supported
    yet), and to existing functions in ECDH and SSL (currently only
    implemented client-side, for ECDHE-ECDSA ciphersuites in TLS 1.2,
    including client authentication).
  * Add support for Arm CPU DSP extensions to accelerate asymmetric key
    operations. On CPUs where the extensions are available, they can accelerate
    MPI multiplications used in ECC and RSA cryptography. Contributed by
    Aurelien Jarno.
  * Extend RSASSA-PSS signature to allow a smaller salt size. Previously, PSS
    signature always used a salt with the same length as the hash, and returned
    an error if this was not possible. Now the salt size may be up to two bytes
    shorter. This allows the library to support all hash and signature sizes
    that comply with FIPS 186-4, including SHA-512 with a 1024-bit key.
  * Add support for 128-bit keys in CTR_DRBG. Note that using keys shorter
    than 256 bits limits the security of generated material to 128 bits.
  API Changes
  * Add a common error code of `MBEDTLS_ERR_PLATFORM_FEATURE_UNSUPPORTED` for
    a feature that is not supported by underlying alternative
    implementations implementing cryptographic primitives. This is useful for
    hardware accelerators that don't implement all options or features.
  New deprecations
  * All module specific errors following the form
    MBEDTLS_ERR_XXX_FEATURE_UNAVAILABLE that indicate a feature is not
    supported are deprecated and are now replaced by the new equivalent
    platform error.
  * All module specific generic hardware acceleration errors following the
    form MBEDTLS_ERR_XXX_HW_ACCEL_FAILED that are deprecated and are replaced
    by the equivalent plaform error.
  * Deprecate the function mbedtls_mpi_is_prime() in favor of
    mbedtls_mpi_is_prime_ext() which allows specifying the number of
    Miller-Rabin rounds.
  Bugfix
  * Fix wrong order of freeing in programs/ssl/ssl_server2 example
    application leading to a memory leak in case both
    MBEDTLS_MEMORY_BUFFER_ALLOC_C and MBEDTLS_MEMORY_BACKTRACE are set.
    Fixes #2069.
  * Fix a bug in the update function for SSL ticket keys which previously
    invalidated keys of a lifetime of less than a 1s. Fixes #1968.
  * Fix failure in hmac_drbg in the benchmark sample application, when
    MBEDTLS_THREADING_C is defined. Found by TrinityTonic, #1095
  * Fix a bug in the record decryption routine ssl_decrypt_buf()
    which lead to accepting properly authenticated but improperly
    padded records in case of CBC ciphersuites using Encrypt-then-MAC.
  * Fix memory leak and freeing without initialization in the example
    program programs/x509/cert_write. Fixes #1422.
  * Ignore IV in mbedtls_cipher_set_iv() when the cipher mode is
    MBEDTLS_MODE_ECB. Found by ezdevelop. Fixes #1091.
  * Zeroize memory used for buffering or reassembling handshake messages
    after use.
  * Use `mbedtls_platform_zeroize()` instead of `memset()` for zeroization
    of sensitive data in the example programs aescrypt2 and crypt_and_hash.
  * Change the default string format used for various X.509 DN attributes to
    UTF8String. Previously, the use of the PrintableString format led to
    wildcards and non-ASCII characters being unusable in some DN attributes.
    Reported by raprepo in #1860 and by kevinpt in #468. Fix contributed by
    Thomas-Dee.
  * Fix compilation failure for configurations which use compile time
    replacements of standard calloc/free functions through the macros
    MBEDTLS_PLATFORM_CALLOC_MACRO and MBEDTLS_PLATFORM_FREE_MACRO.
    Reported by ole-de and ddhome2006. Fixes #882, #1642 and #1706.
  Changes
  * Removed support for Yotta as a build tool.
  * Add tests for session resumption in DTLS.
  * Close a test gap in (D)TLS between the client side and the server side:
    test the handling of large packets and small packets on the client side
    in the same way as on the server side.
  * Change the dtls_client and dtls_server samples to work by default over
    IPv6 and optionally by a build option over IPv4.
  * Change the use of Windows threading to use Microsoft Visual C++ runtime
    calls, rather than Win32 API calls directly. This is necessary to avoid
    conflict with C runtime usage. Found and fixed by irwir.
  * Remember the string format of X.509 DN attributes when replicating
    X.509 DNs. Previously, DN attributes were always written in their default
    string format (mostly PrintableString), which could lead to CRTs being
    created which used PrintableStrings in the issuer field even though the
    signing CA used UTF8Strings in its subject field; while X.509 compliant,
    such CRTs were rejected in some applications, e.g. some versions of
    Firefox, curl and GnuTLS. Reported in #1033 by Moschn. Fix contributed by
    Thomas-Dee.
  * Improve documentation of mbedtls_ssl_get_verify_result().
    Fixes #517 reported by github-monoculture.
  * Add MBEDTLS_MPI_GEN_PRIME_FLAG_LOW_ERR flag to mbedtls_mpi_gen_prime() and
    use it to reduce error probability in RSA key generation to levels mandated
    by FIPS-186-4.
- Version 2.13.1
  API Changes
  * Extend the platform module with an abstraction mbedtls_platform_gmtime_r()
    whose implementation should behave as a thread-safe version of gmtime().
    This allows users to configure such an implementation at compile time when
    the target system cannot be deduced automatically, by setting the option
    MBEDTLS_PLATFORM_GMTIME_R_ALT. At this stage Mbed TLS is only able to
    automatically select implementations for Windows and POSIX C libraries.
  Bugfix
  * Fix build failures on platforms where only gmtime() is available but
    neither gmtime_r() nor gmtime_s() are present. Fixes #1907.
- Version 2.13.0
  Security
  * Fix an issue in the X.509 module which could lead to a buffer overread
    during certificate extensions parsing. In case of receiving malformed
    input (extensions length field equal to 0), an illegal read of one byte
    beyond the input buffer is made. Found and analyzed by Nathan Crandall.
  Features
  * Add support for fragmentation of outgoing DTLS handshake messages. This
    is controlled by the maximum fragment length as set locally or negotiated
    with the peer, as well as by a new per-connection MTU option, set using
    mbedtls_ssl_set_mtu().
  * Add support for auto-adjustment of MTU to a safe value during the
    handshake when flights do not get through (RFC 6347, section 4.1.1.1,
    last paragraph).
  * Add support for packing multiple records within a single datagram,
    enabled by default.
  * Add support for buffering out-of-order handshake messages in DTLS.
    The maximum amount of RAM used for this can be controlled by the
    compile-time constant MBEDTLS_SSL_DTLS_MAX_BUFFERING defined
    in mbedtls/config.h.
  API Changes
  * Add function mbedtls_ssl_set_datagram_packing() to configure
    the use of datagram packing (enabled by default).
  Bugfix
  * Fix a potential memory leak in mbedtls_ssl_setup() function. An allocation
    failure in the function could lead to other buffers being leaked.
  * Fixes an issue with MBEDTLS_CHACHAPOLY_C which would not compile if
    MBEDTLS_ARC4_C and MBEDTLS_CIPHER_NULL_CIPHER weren't also defined. #1890
  * Fix a memory leak in ecp_mul_comb() if ecp_precompute_comb() fails.
    Fix contributed by Espressif Systems.
  * Add ecc extensions only if an ecc based ciphersuite is used.
    This improves compliance to RFC 4492, and as a result, solves
    interoperability issues with BouncyCastle. Raised by milenamil in #1157.
  * Replace printf with mbedtls_printf in the ARIA module. Found by
    TrinityTonic in #1908.
  * Fix potential use-after-free in mbedtls_ssl_get_max_frag_len()
    and mbedtls_ssl_get_record_expansion() after a session reset. Fixes #1941.
  * Fix a bug that caused SSL/TLS clients to incorrectly abort the handshake
    with TLS versions 1.1 and earlier when the server requested authentication
    without providing a list of CAs. This was due to an overly strict bounds
    check in parsing the CertificateRequest message,
    introduced in Mbed TLS 2.12.0. Fixes #1954.
  * Fix a miscalculation of the maximum record expansion in
    mbedtls_ssl_get_record_expansion() in case of ChachaPoly ciphersuites,
    or CBC ciphersuites in (D)TLS versions 1.1 or higher. Fixes #1913, #1914.
  * Fix undefined shifts with negative values in certificates parsing
    (found by Catena cyber using oss-fuzz)
  * Fix memory leak and free without initialization in pk_encrypt
    and pk_decrypt example programs. Reported by Brace Stout. Fixes #1128.
  * Remove redundant else statement. Raised by irwir. Fixes #1776.
  Changes
  * Copy headers preserving timestamps when doing a "make install".
    Contributed by xueruini.
  * Allow the forward declaration of public structs. Contributed by Dawid
    Drozd. Fixes #1215 raised by randombit.
  * Improve compatibility with some alternative CCM implementations by using
    CCM test vectors from RAM.
  * Add support for buffering of out-of-order handshake messages.
  * Add warnings to the documentation of the HKDF module to reduce the risk
    of misusing the mbedtls_hkdf_extract() and mbedtls_hkdf_expand()
    functions. Fixes #1775. Reported by Brian J. Murray.</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1544529601">- Library package version bumped to libmbedtls12</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1546862400">- Update to version 2.16.0:
  Features
  * Add a new config.h option of MBEDTLS_CHECK_PARAMS that enables validation of parameters in the API. This allows detection of obvious misuses of the API, such as passing NULL pointers. The API of existing functions hasn't changed, but requirements on parameters have been made more explicit in the documentation. See the corresponding API documentation for each function to see for which parameter values it is defined. This feature is disabled by default. See its API documentation in config.h for additional steps you have to take when enabling it.
  API Changes
  * The following functions in the random generator modules have been deprecated and replaced as shown below. The new functions change the return type from void to int to allow returning error codes when using MBEDTLS_&lt;MODULE&gt;_ALT for the underlying AES or message digest primitive. Fixes #1798. mbedtls_ctr_drbg_update() -&gt; mbedtls_ctr_drbg_update_ret() mbedtls_hmac_drbg_update() -&gt; mbedtls_hmac_drbg_update_ret()
  * Extend ECDH interface to enable alternative implementations.
  * Deprecate error codes of the form MBEDTLS_ERR_xxx_INVALID_KEY_LENGTH for ARIA, CAMELLIA and Blowfish. These error codes will be replaced by the more generic per-module error codes MBEDTLS_ERR_xxx_BAD_INPUT_DATA.
  * Additional parameter validation checks have been added for the following modules - AES, ARIA, Blowfish, CAMELLIA, CCM, GCM, DHM, ECP, ECDSA, ECDH, ECJPAKE, SHA, Chacha20 and Poly1305, cipher, pk, RSA, and MPI. Where modules have had parameter validation added, existing parameter checks may have changed. Some modules, such as Chacha20 had existing parameter validation whereas other modules had little. This has now been changed so that the same level of validation is present in all modules, and that it is now optional with the MBEDTLS_CHECK_PARAMS flag which by default is off. That means that checks which were previously present by default will no longer be.
  New deprecations
  * Deprecate mbedtls_ctr_drbg_update() and mbedtls_hmac_drbg_update() in favor of functions that can return an error code.
  Bugfix
  * Fix for Clang, which was reporting a warning for the bignum.c inline assembly for AMD64 targets creating string literals greater than those permitted by the ISO C99 standard. Found by Aaron Jones. Fixes #482.
  * Fix runtime error in mbedtls_platform_entropy_poll() when run through qemu user emulation. Reported and fix suggested by randombit. Fixes #1212.
  * Fix an unsafe bounds check when restoring an SSL session from a ticket. This could lead to a buffer overflow, but only in case ticket authentication was broken. Reported and fix suggested by Guido Vranken in #659.
  * Add explicit integer to enumeration type casts to example program programs/pkey/gen_key which previously led to compilation failure on some toolchains. Reported by phoenixmcallister. Fixes #2170.
  * Clarify documentation of mbedtls_ssl_set_own_cert() regarding the absence of check for certificate/key matching. Reported by Attila Molnar, #507.
  * Fix double initialization of ECC hardware that made some accelerators hang.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1567512000">- Update to version 2.16.2:
  * Security improvements and bugfixes
- Use ninja to for build</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1573646400">- Update to version 2.16.3:
  * Security improvements and bugfixes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1585828800">- Update to version 2.16.5:
  * Security improvements and bugfixes</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597665600">- update to 2.23.0:
  a lot of changes see https://github.com/ARMmbed/mbedtls/releases/tag/v2.23.0
  * Fix a side channel vulnerability in modular exponentiation that could reveal an RSA private key used in a secure enclave. Noticed by Sangho Lee, Ming-Wei Shih, Prasun Gera, Taesoo Kim and Hyesoon Kim (Georgia Institute of Technology); and Marcus Peinado (Microsoft Research). Reported by Raoul Strackx (Fortanix) in #3394.
  * Fix side channel in mbedtls_ecp_check_pub_priv() and mbedtls_pk_parse_key() / mbedtls_pk_parse_keyfile() (when loading a private key that didn't include the uncompressed public key), as well as mbedtls_ecp_mul() / mbedtls_ecp_mul_restartable() when called with a NULL f_rng argument. An attacker with access to precise enough timing and memory access information (typically an untrusted operating system attacking a secure enclave) could fully recover the ECC private key. Found and reported by Alejandro Cabrera Aldaya and Billy Brumley.
  * Fix issue in Lucky 13 counter-measure that could make it ineffective when hardware accelerators were used (using one of the MBEDTLS_SHAxxx_ALT macros). This would cause the original Lucky 13 attack to be possible in those configurations, allowing an active network attacker to recover plaintext after repeated timing measurements under some conditions. Reported and fix suggested by Luc Perneel in #3246.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1598875200">- Do not run testsuite in parallel - its not reliable</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1599480000">- Add workaround for failing builds (Python not found) due to
  https://gitlab.kitware.com/cmake/cmake/-/issues/21168</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1599652800">- update to 2.24.0:
  * see https://github.com/ARMmbed/mbedtls/releases/tag/v2.24.0
  * Fix a vulnerability in the verification of X.509 certificates when matching
  the expected common name (the cn argument of mbedtls_x509_crt_verify())
  with the actual certificate name: when the subjecAltName extension is
  present, the expected name was compared to any name in that extension
  regardless of its type. This means that an attacker could for example
  impersonate a 4-bytes or 16-byte domain by getting a certificate for the
  corresponding IPv4 or IPv6 (this would require the attacker to control that
  IP address, though). Similar attacks using other subjectAltName name types
  might be possible.
  * When checking X.509 CRLs, a certificate was only considered as revoked if
  its revocationDate was in the past according to the local clock if
  available. In particular, on builds without MBEDTLS_HAVE_TIME_DATE,
  certificates were never considered as revoked. On builds with
  MBEDTLS_HAVE_TIME_DATE, an attacker able to control the local clock (for
  example, an untrusted OS attacking a secure enclave) could prevent
  revocation of certificates via CRLs. Fixed by no longer checking the
  revocationDate field, in accordance with RFC 5280. Reported by yuemonangong
  in #3340. Reported independently and fixed by Raoul Strackx and Jethro
  * In (D)TLS record decryption, when using a CBC ciphersuites without the
  Encrypt-then-Mac extension, use constant code flow memory access patterns
  to extract and check the MAC. This is an improvement to the existing
  countermeasure against Lucky 13 attacks. The previous countermeasure was
  effective against network-based attackers, but less so against local
  attackers. The new countermeasure defends against local attackers, even if
  they have access to fine-grained measurements. In particular, this fixes a
  local Lucky 13 cache attack found and reported by Tuba Yavuz, Farhaan
  Fowze, Ken (Yihan) Bai, Grant Hernandez, and Kevin Butler (University of
  Florida) and Dave Tian (Purdue University).
  * Fix side channel in RSA private key operations and static (finite-field)
  Diffie-Hellman. An adversary with precise enough timing and memory access
  information (typically an untrusted operating system attacking a secure
  enclave) could bypass an existing counter-measure (base blinding) and
  potentially fully recover the private key.
  * Fix a 1-byte buffer overread in mbedtls_x509_crl_parse_der(). Credit to
  OSS-Fuzz for detecting the problem and to Philippe Antoine for pinpointing
  the problematic code.
  * Zeroising of plaintext buffers in mbedtls_ssl_read() to erase unused
  application data from memory.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1608638400">- update to 2.25.0:
  * This release of Mbed TLS provides bug fixes, minor enhancements and new
  features. This release includes fixes for security issues.
  * see https://github.com/ARMmbed/mbedtls/releases/tag/v2.25.0
  * The functions mbedtls_cipher_auth_encrypt() and
  mbedtls_cipher_auth_decrypt() would write past the minimum documented size
  of the output buffer when used with NIST_KW. As a result, code using those
  functions as documented with NIST_KW could have a buffer overwrite of up to
  15 bytes, with consequences ranging up to arbitrary code execution
  depending on the location of the output buffer.
  * Limit the size of calculations performed by mbedtls_mpi_exp_mod to
  MBEDTLS_MPI_MAX_SIZE to prevent a potential denial of service when generating
  Diffie-Hellman key pairs. Credit to OSS-Fuzz.
  * A failure of the random generator was ignored in mbedtls_mpi_fill_random(),
  which is how most uses of randomization in asymmetric cryptography (including
  key generation, intermediate value randomization and blinding) are implemented.
  This could cause failures or the silent use of non-random values. A random
  generator can fail if it needs reseeding and cannot not obtain entropy, or due
  to an internal failure (which, for Mbed TLS's own CTR_DRBG or HMAC_DRBG, can
  only happen due to a misconfiguration).
  * Fix a compliance issue whereby we were not checking the tag on the algorithm
  parameters (only the size) when comparing the signature in the description part
  of the cert to the real signature. This meant that a NULL algorithm parameters
  entry would look identical to an array of REAL (size zero) to the library and
  thus the certificate would be considered valid. However, if the parameters do
  not match in any way then the certificate should be considered invalid, and
  indeed OpenSSL marks these certs as invalid when mbedtls did not. Many thanks
  to guidovranken who found this issue via differential fuzzing and reported it
  in #3629.
  * Zeroising of local buffers and variables which are used for calculations in
  mbedtls_pkcs5_pbkdf2_hmac(), mbedtls_internal_sha*_process(),
  mbedtls_internal_md*_process() and mbedtls_internal_ripemd160_process()
  functions to erase sensitive data from memory. Reported by Johan Malmgren and
  Johan Uppman Bruce from Sectra.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1611057600">- Fix build for Leap targets
- Use upstream tarball name</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1616414400">- Update to 2.26.0: [bsc#1189589, CVE-2021-24119]
  * * This release of Mbed TLS provides bug fixes, minor enhancements and new
  features. This release includes fixes for security issues.
  * see https://github.com/ARMmbed/mbedtls/releases/tag/v2.26.0
- Fix build with patch from https://github.com/ARMmbed/mbedtls/pull/4237
  mbedtls-4237.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1618488000">-  Workaround for building with gcc-11 boo#1181876</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1626782400">- Update to 2.27.0:
  API changes:
  * Update AEAD output size macros to bring them in line with the PSA Crypto
    API version 1.0 spec. This version of the spec parameterizes them on the
    key type used, as well as the key bit-size in the case of
    PSA_AEAD_TAG_LENGTH.
    The old versions of these macros were renamed and deprecated as follows:
  - PSA_AEAD_TAG_LENGTH          -&gt; PSA_AEAD_TAG_LENGTH_1_ARG
  - PSA_AEAD_ENCRYPT_OUTPUT_SIZE -&gt; PSA_AEAD_ENCRYPT_OUTPUT_SIZE_2_ARG
  - PSA_AEAD_DECRYPT_OUTPUT_SIZE -&gt; PSA_AEAD_DECRYPT_OUTPUT_SIZE_2_ARG
  - PSA_AEAD_UPDATE_OUTPUT_SIZE  -&gt; PSA_AEAD_UPDATE_OUTPUT_SIZE_2_ARG
  - PSA_AEAD_FINISH_OUTPUT_SIZE  -&gt; PSA_AEAD_FINISH_OUTPUT_SIZE_1_ARG
  - PSA_AEAD_VERIFY_OUTPUT_SIZE  -&gt; PSA_AEAD_VERIFY_OUTPUT_SIZE_1_ARG
  * Implement one-shot cipher functions, psa_cipher_encrypt and
    psa_cipher_decrypt, according to the PSA Crypto API 1.0.0
    specification.
  Features:
  * Add mbedtls_rsa_rsassa_pss_sign_ext() function allowing to generate a
    signature with a specific salt length. This function allows to validate
    test cases provided in the NIST's CAVP test suite.
  * Added support for built-in driver keys through the PSA opaque crypto
    driver interface. Refer to the documentation of
    MBEDTLS_PSA_CRYPTO_BUILTIN_KEYS for more information.
  * Implement psa_sign_message() and psa_verify_message().
  * The new function mbedtls_mpi_random() generates a random value in a
    given range uniformly.
  * Implement psa_mac_compute() and psa_mac_verify() as defined in the
    PSA Cryptograpy API 1.0.0 specification.
  * MBEDTLS_ECP_MAX_BITS is now determined automatically from the configured
    curves and no longer needs to be configured explicitly to save RAM.
  Security
  * Fix a bias in the generation of finite-field Diffie-Hellman-Merkle (DHM)
    private keys and of blinding values for DHM and elliptic curves (ECP)
    computations.
  * Fix a potential side channel vulnerability in ECDSA ephemeral key generation.
    An adversary who is capable of very precise timing measurements could
    learn partial information about the leading bits of the nonce used for the
    signature, allowing the recovery of the private key after observing a
    large number of signature operations. This completes a partial fix in
    Mbed TLS 2.20.0.
  * It was possible to configure MBEDTLS_ECP_MAX_BITS to a value that is
    too small, leading to buffer overflows in ECC operations. Fail the build
    in such a case.
  * An adversary with access to precise enough information about memory
    accesses (typically, an untrusted operating system attacking a secure
    enclave) could recover an RSA private key after observing the victim
    performing a single private-key operation.
  * An adversary with access to precise enough timing information (typically, a
    co-located process) could recover a Curve25519 or Curve448 static ECDH key
    after inputting a chosen public key and observing the victim performing the
    corresponding private-key operation.
  Bugfix
  * Add printf function attributes to mbedtls_debug_print_msg to ensure we
    get printf format specifier warnings.
  * Fix premature fopen() call in mbedtls_entropy_write_seed_file which may
    lead to seed file corruption in the case where the path to the seed file is
    equal to MBEDTLS_PLATFORM_STD_NV_SEED_FILE.
  * PSA functions other than psa_open_key now return PSA_ERROR_INVALID_HANDLE
    rather than PSA_ERROR_DOES_NOT_EXIST for an invalid handle, bringing them
    in line with version 1.0.0 of the specification.
  * PSA functions creating a key now return PSA_ERROR_INVALID_ARGUMENT rather
    than PSA_ERROR_INVALID_HANDLE when the identifier specified for the key
    to create is not valid, bringing them in line with version 1.0.0 of the
    specification.
  * Fix some cases in the bignum module where the library constructed an
    unintended representation of the value 0 which was not processed
    correctly by some bignum operations. This could happen when
    mbedtls_mpi_read_string() was called on "-0", or when
    mbedtls_mpi_mul_mpi() and mbedtls_mpi_mul_int() was called with one of
    the arguments being negative and the other being 0.
  * Fix a bug in ECDSA that would cause it to fail when the hash is all-bits
    zero.
  * Fix a compilation error when MBEDTLS_ECP_RANDOMIZE_MXZ_ALT is
    defined.
  * Fix an incorrect error code when parsing a PKCS#8 private key.
  * In a TLS client, enforce the Diffie-Hellman minimum parameter size
    set with mbedtls_ssl_conf_dhm_min_bitlen() precisely. Before, the
    minimum size was rounded down to the nearest multiple of 8.
  * In library/net_sockets.c, _POSIX_C_SOURCE and _XOPEN_SOURCE are
    defined to specific values.  If the code is used in a context
    where these are already defined, this can result in a compilation
    error.  Instead, assume that if they are defined, the values will
    be adequate to build Mbed TLS.
  * The cipher suite TLS-RSA-WITH-CAMELLIA-256-GCM-SHA384 was not available
    when SHA-1 was disabled and was offered when SHA-1 was enabled but SHA-384
    was disabled. Fix the dependency.
  * Do not offer SHA384 cipher suites when SHA-384 is disabled.
  * With MBEDTLS_PSA_CRYPTO_C disabled, some functions were getting built
    nonetheless, resulting in undefined reference errors when building a
    shared library.
  * Fix test suite code on platforms where int32_t is not int, such as
    Arm Cortex-M.
  * Fix some issues affecting MBEDTLS_ARIA_ALT implementations: a misplaced
    directive in a header and a missing initialization in the self-test.
  * Fix a missing initialization in the Camellia self-test, affecting
    MBEDTLS_CAMELLIA_ALT implementations.
  * Restore the ability to configure PSA via Mbed TLS options to support RSA
    key pair operations but exclude RSA key generation. When MBEDTLS_GENPRIME
    is not defined PSA will no longer attempt to use mbedtls_rsa_gen_key().
  * Fix a regression introduced in 2.24.0 which broke (D)TLS CBC ciphersuites
    (when the encrypt-then-MAC extension is not in use) with some ALT
    implementations of the underlying hash (SHA-1, SHA-256, SHA-384), causing
    the affected side to wrongly reject valid messages.
  * Remove outdated check-config.h check that prevented implementing the
    timing module on Mbed OS.
  * Fix PSA_ALG_TLS12_PRF and PSA_ALG_TLS12_PSK_TO_MS being too permissive
    about missing inputs.
  * Fix a resource leak in a test suite with an alternative AES
    implementation.
  * Fix a crash in mbedtls_mpi_debug_mpi on a bignum having 0 limbs. This
    could notably be triggered by setting the TLS debug level to 3 or above
    and using a Montgomery curve for the key exchange.
  * psa_verify_hash() was relying on implementation-specific behavior of
    mbedtls_rsa_rsassa_pss_verify() and was causing failures in some _ALT
    implementations. This reliance is now removed.
  * Disallow inputs of length different from the corresponding hash when
    signing or verifying with PSA_ALG_RSA_PSS (The PSA Crypto API mandates
    that PSA_ALG_RSA_PSS uses the same hash throughout the algorithm.)
  * Fix a null pointer dereference when mbedtls_mpi_exp_mod() was called with
    A=0 represented with 0 limbs. Up to and including Mbed TLS 2.26, this bug
    could not be triggered by code that constructed A with one of the
    mbedtls_mpi_read_xxx functions (including in particular TLS code) since
    those always built an mpi object with at least one limb.
  * Fix mbedtls_mpi_gcd(G,A,B) when the value of B is zero. This had no
    effect on Mbed TLS's internal use of mbedtls_mpi_gcd(), but may affect
    applications that call mbedtls_mpi_gcd() directly.
  * The PSA API no longer allows the creation or destruction of keys with a
    read-only lifetime. The persistence level PSA_KEY_PERSISTENCE_READ_ONLY
    can now only be used as intended, for keys that cannot be modified through
    normal use of the API.
  * When MBEDTLS_PSA_CRYPTO_SPM is enabled, crypto_spe.h was not included
    in all the right places. Include it from crypto_platform.h, which is
    the natural place.
  * mbedtls_pk_sign() and mbedtls_pk_verify() and their extended and
    restartable variants now always honor the specified hash length if
    nonzero. Before, for RSA, hash_len was ignored in favor of the length of
    the specified hash algorithm.
  * Fix which alert is sent in some cases to conform to the
    applicable RFC: on an invalid Finished message value, an
    invalid max_fragment_length extension, or an
    unsupported extension used by the server.
  * Correct (change from 12 to 13 bytes) the value of the macro describing the
    maximum nonce length returned by psa_aead_generate_nonce().
  Changes
  * Add extra printf compiler warning flags to builds.
  * Fix memsan build false positive in x509_crt.c with Clang 11
  * Fix the setting of the read timeout in the DTLS sample programs.
  * Remove the AES sample application programs/aes/aescrypt2 which shows
    bad cryptographic practice.
  * Alternative implementations of CMAC may now opt to not support 3DES as a
    CMAC block cipher, and still pass the CMAC self test.
  * Remove configs/config-psa-crypto.h, which was identical to the default
    configuration except for having some extra cryptographic mechanisms
    enabled and for unintended differences. This configuration was primarily
    intended to demonstrate the PSA API, and lost most of its usefulness when
    MBEDTLS_PSA_CRYPTO_C became enabled by default.
  * When building the test suites with GNU make, invoke python3 or python, not
    python2, which is no longer supported upstream.
  * When using session cache based session resumption on the server,
    double-check that custom session cache implementations return
    sessions which are consistent with the negotiated ciphersuite
    and compression method.
  * Fix build failure on MinGW toolchain when __USE_MING_ANSI_STDIO is on.
    When that flag is on, standard GNU C printf format specifiers
    should be used.
  * Reduce the default value of MBEDTLS_ECP_WINDOW_SIZE. This reduces RAM usage
    during ECC operations at a negligible performance cost.
  * mbedtls_mpi_read_binary(), mbedtls_mpi_read_binary_le() and
    mbedtls_mpi_read_string() now construct an mbedtls_mpi object with 0 limbs
    when their input has length 0. Note that this is an implementation detail
    and can change at any time, so this change should be transparent, but it
    may result in mbedtls_mpi_write_binary() or mbedtls_mpi_write_string()
    now writing an empty string where it previously wrote one or more
    zero digits when operating from values constructed with an mpi_read
    function and some mpi operations.
  * Implicitly add PSA_KEY_USAGE_SIGN_MESSAGE key usage policy flag when
    PSA_KEY_USAGE_SIGN_HASH flag is set and PSA_KEY_USAGE_VERIFY_MESSAGE flag
    when PSA_KEY_USAGE_VERIFY_HASH flag is set. This usage flag extension
    is also applied when loading a key from storage.
  * Remove mbedtls-4237.patch upstream
  * Library soname bump to libmbedcrypto7</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1642075200">- Update to 2.28.0: (bsc#1193979, CVE-2021-45450)
  API changes
  * Some fields of mbedtls_ssl_session and mbedtls_ssl_config are in a
  different order. This only affects applications that define such
  structures directly or serialize them.
  Requirement changes
  * Sign-magnitude and one's complement representations for signed integers are
  not supported. Two's complement is the only supported representation.
  Removals
  * Remove config option MBEDTLS_TLS_DEFAULT_ALLOW_SHA1_IN_CERTIFICATES,
  which allowed SHA-1 in the default TLS configuration for certificate
  signing. It was intended to facilitate the transition in environments
  with SHA-1 certificates. SHA-1 is considered a weak message digest and
  its use constitutes a security risk.
  * Remove the partial support for running unit tests via Greentea on Mbed OS,
  which had been unmaintained since 2018.
  Features
  * The identifier of the CID TLS extension can be configured by defining
  MBEDTLS_TLS_EXT_CID at compile time.
  * Warn if errors from certain functions are ignored. This is currently
  supported on GCC-like compilers and on MSVC and can be configured through
  the macro MBEDTLS_CHECK_RETURN. The warnings are always enabled
  (where supported) for critical functions where ignoring the return
  value is almost always a bug. Enable the new configuration option
  MBEDTLS_CHECK_RETURN_WARNING to get warnings for other functions. This
  is currently implemented in the AES, DES and md modules, and will be
  extended to other modules in the future.
  * Add missing PSA macros declared by PSA Crypto API 1.0.0:
  PSA_ALG_IS_SIGN_HASH, PSA_ALG_NONE, PSA_HASH_BLOCK_LENGTH, PSA_KEY_ID_NULL.
  * Add new API mbedtls_ct_memcmp for constant time buffer comparison.
  * Add PSA API definition for ARIA.
  Security
  * Zeroize several intermediate variables used to calculate the expected
  value when verifying a MAC or AEAD tag. This hardens the library in
  case the value leaks through a memory disclosure vulnerability. For
  example, a memory disclosure vulnerability could have allowed a
  man-in-the-middle to inject fake ciphertext into a DTLS connection.
  * In psa_cipher_generate_iv() and psa_cipher_encrypt(), do not read back
  from the output buffer. This fixes a potential policy bypass or decryption
  oracle vulnerability if the output buffer is in memory that is shared with
  an untrusted application.
  * Fix a double-free that happened after mbedtls_ssl_set_session() or
  mbedtls_ssl_get_session() failed with MBEDTLS_ERR_SSL_ALLOC_FAILED
  (out of memory). After that, calling mbedtls_ssl_session_free()
  and mbedtls_ssl_free() would cause an internal session buffer to
  be free()'d twice.
  Bugfix
  * Stop using reserved identifiers as local variables. Fixes #4630.
  * The GNU makefiles invoke python3 in preference to python except on Windows.
  * The check was accidentally not performed when cross-compiling for Windows
  on Linux. Fix this. Fixes #4774.
  * Prevent divide by zero if either of PSA_CIPHER_ENCRYPT_OUTPUT_SIZE() or
  PSA_CIPHER_UPDATE_OUTPUT_SIZE() were called using an asymmetric key type.
  * Fix a parameter set but unused in psa_crypto_cipher.c. Fixes #4935.
  * Don't use the obsolete header path sys/fcntl.h in unit tests.
  These header files cause compilation errors in musl.
  Fixes #4969.
  * Fix missing constraints on x86_64 and aarch64 assembly code
  for bignum multiplication that broke some bignum operations with
  (at least) Clang 12.
  Fixes #4116, #4786, #4917, #4962.
  * Fix mbedtls_cipher_crypt: AES-ECB when MBEDTLS_USE_PSA_CRYPTO is enabled.
  * Failures of alternative implementations of AES or DES single-block
  functions enabled with MBEDTLS_AES_ENCRYPT_ALT, MBEDTLS_AES_DECRYPT_ALT,
  MBEDTLS_DES_CRYPT_ECB_ALT or MBEDTLS_DES3_CRYPT_ECB_ALT were ignored.
  This does not concern the implementation provided with Mbed TLS,
  where this function cannot fail, or full-module replacements with
  MBEDTLS_AES_ALT or MBEDTLS_DES_ALT. Reported by Armelle Duboc in #1092.
  * Some failures of HMAC operations were ignored. These failures could only
  happen with an alternative implementation of the underlying hash module.
  * Fix the error returned by psa_generate_key() for a public key. Fixes #4551.
  * Fix the build of sample programs when neither MBEDTLS_ERROR_C nor
  MBEDTLS_ERROR_STRERROR_DUMMY is enabled.
  * Fix PSA_ALG_RSA_PSS verification accepting an arbitrary salt length.
  This algorithm now accepts only the same salt length for verification
  that it produces when signing, as documented. Use the new algorithm
  PSA_ALG_RSA_PSS_ANY_SALT to accept any salt length. Fixes #4946.
  * The existing predicate macro name PSA_ALG_IS_HASH_AND_SIGN is now reserved
  for algorithm values that fully encode the hashing step, as per the PSA
  Crypto API specification. This excludes PSA_ALG_RSA_PKCS1V15_SIGN_RAW and
  PSA_ALG_ECDSA_ANY. The new predicate macro PSA_ALG_IS_SIGN_HASH covers
  all algorithms that can be used with psa_{sign,verify}_hash(), including
  these two.
  * Fix issue in Makefile on Linux with SHARED=1, that caused shared libraries
  not to list other shared libraries they need.
  * Fix a bug in mbedtls_gcm_starts() when the bit length of the iv
  exceeds 2^32. Fixes #4884.
  * Fix an uninitialized variable warning in test_suite_ssl.function with GCC
  version 11.
  * Fix the build when no SHA2 module is included. Fixes #4930.
  * Fix the build when only the bignum module is included. Fixes #4929.
  * Fix a potential invalid pointer dereference and infinite loop bugs in
  pkcs12 functions when the password is empty. Fix the documentation to
  better describe the inputs to these functions and their possible values.
  Fixes #5136.
  * The key usage flags PSA_KEY_USAGE_SIGN_MESSAGE now allows the MAC
  operations psa_mac_compute() and psa_mac_sign_setup().
  * The key usage flags PSA_KEY_USAGE_VERIFY_MESSAGE now allows the MAC
  operations psa_mac_verify() and psa_mac_verify_setup().
  Changes
  * Set config option MBEDTLS_TLS_DEFAULT_ALLOW_SHA1_IN_KEY_EXCHANGE to be
  disabled by default.
  * Improve the performance of base64 constant-flow code. The result is still
  slower than the original non-constant-flow implementation, but much faster
  than the previous constant-flow implementation. Fixes #4814.
  * Indicate in the error returned if the nonce length used with
  ChaCha20-Poly1305 is invalid, and not just unsupported.
  * The mbedcrypto library includes a new source code module constant_time.c,
  containing various functions meant to resist timing side channel attacks.
  * This module does not have a separate configuration option, and functions
  from this module will be included in the build as required. Currently
  most of the interface of this module is private and may change at any
  time.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1642420800">- Fix baselib.conf</changelog>
  <changelog author="Alexander Bergmann &lt;abergmann@suse.com&gt;" date="1671624000">- Fix potential heap buffer overread and overwrite in DTLS if
  MBEDTLS_SSL_DTLS_CONNECTION_ID is enabled and
  MBEDTLS_SSL_CID_IN_LEN_MAX &gt; 2 * MBEDTLS_SSL_CID_OUT_LEN_MAX.
  (bsc#1206576, CVE-2022-46393).
  Add: mbedtls-CVE-2022-46393.patch</changelog>
</package>
<package pkgid="c0ecd6d0a2626aa838c99c6f0be785d31d1db9660bf4cc10f208acdce0df3974" name="libmbedx509-1" arch="i586">
  <version epoch="0" ver="2.28.0" rel="bp154.2.3.1"/>
  <changelog author="mpluskal@suse.com" date="1531137600">- Update to version 2.11.0:
  * Features
    + Added support for the XTS block cipher mode with AES (AES-XTS). Contributed by Aorimn in pull request #414.
    + Implemented the HMAC-based extract-and-expand key derivation function (HKDF) per RFC 5869. Contributed by Thomas Fossati.
    + For TLS servers, added support for offloading private key operations to an external cryptoprocessor. Private key operations can be asynchronous to allow non-blocking operation of the TLS server stack.
    + Added support for ARIA cipher (RFC 5794) and associated TLS ciphersuites (RFC 6209). ARIA is disabled by default. To enable, see MBEDTLS_ARIA_C in config.h.
    + Added support for the CCM* block cipher mode as defined in IEEE Std 802.15.4.
    + Added an additional block mode, OFB (Output Feedback) per NIST SP 800-38a, to the AES module and cipher abstraction module.
  * API Changes
    + Mbed TLS 2.11.0 maintains source code compatibility with the last minor version, Mbed TLS 2.9.0, but extends the interface with additional capabilities. Mbed TLS 2.11.0 modifies the ABI and increases the SOVERSION.
  * Bugfix
    + Fixed the cert_write example to handle certificates signed with elliptic curves as well as RSA. Fixes #777 found by dbedev.
    + Fixed the redefinition of _WIN32_WINNT, to avoid overriding a definition used by user applications. Found and fixed by Fabio Alessandrelli.
    + Fixed compilation warnings with the IAR toolchain on 32-bit platforms. Reported by rahmanih in #683.
    + Fixed an issue with MicroBlaze support in bn_mul.h which was causing the build to fail. Found by zv-io. Fixes #1651.
    + Fixed braces in mbedtls_memory_buffer_alloc_status(). Found by sbranden in #552.
    + Added the macro MBEDTLS_X509_MAX_FILE_PATH_LEN that enables the user to configure the maximum length of a file path that can be buffered when calling mbedtls_x509_crt_parse_path(). Fixes #492.
    + Fixed redundant declaration of mbedtls_ssl_list_ciphersuites. Raised by TrinityTonic in #1359.
- Changes for version 2.9.0:
  + Security
    + Fixed an issue in the X.509 module which could lead to a buffer overread during certificate validation. Additionally, the issue could also lead to unnecessary callback checks being made or to some validation checks to be omitted. The overread could be triggered remotely, while the other issues would require a non DER-compliant certificate to be correctly signed by a trusted CA, or a trusted CA with a non DER-compliant certificate. Found by luocm. Fixes #825.
    + Fixed the buffer length assertion in the ssl_parse_certificate_request() function which could lead to an arbitrary overread of the message buffer. The overreads could be caused by receiving a malformed algorithms section which was too short. In builds with debug output, this overread data was output with the debug data.
    + Fixed a client-side bug in the validation of the server's ciphersuite choice which could potentially lead to the client accepting a ciphersuite it didn't offer or a ciphersuite that could not be used with the TLS or DTLS version chosen by the server. This could lead to corruption of internal data structures for some configurations.
  * Features
    + Added an option of MBEDTLS_AES_FEWER_TABLES, to dynamically compute smaller AES tables during runtime, thereby reducing the RAM/ROM footprint by ~6KiB. Suggested and contributed by jkivilin.
    + Added initial support for Curve448 (RFC 7748). So far only mbedtls_ecp_mul() and ECDH primitive functions (mbedtls_ecdh_gen_public(), mbedtls_ecdh_compute_shared()) are supported for now. Contributed by Nicholas Wilson.
  * API Changes
    + Mbed TLS 2.9.0 maintains source code and binary compatibility with the last minor version, Mbed TLS 2.8.0, but extends the interface with additional capabilities.
    + Extended the API with the function of mbedtls_net_poll() to allow user applications to wait for a network context to become ready before reading or writing.
    + Added the function mbedtls_ssl_check_pending() to the public API to allow a check for whether more more data is pending to be processed in the internal message buffers. This function is necessary to determine the underlying transport when event-driven IO is used.
  * Bugfix
    + Fixed a spurious uninitialized variable warning in cmac.c. Fix independently contributed by Brian J Murray and David Brown.
    + Added missing dependencies in test suites that led to build failures in configurations that omit certain hashes or public-key algorithms. Fixes #1040.
    + Fixed a C89 incompatibility issue in benchmark.c. Contributed by Brendan Shanks. Fixes #1353.
    + Added missing dependencies for MBEDTLS_HAVE_TIME_DATE and MBEDTLS_VERSION_FEATURES in some test suites. Contributed by Deomid Ryabkov. Fixes #1299, #1475.
    + Fixed the Makefile build process for building shared libraries on Mac OS X. Fixed by mnacamura.
    + Fixed parsing of PKCS#8 encoded Elliptic Curve keys. Previously Mbed TLS was unable to parse keys which had only the optional parameters field of the ECPrivateKey structure. Found by Jethro Beekman, fixed in #1379.
    + Added an optimisation to return the plaintext data more quickly on unpadded CBC decryption, as stated in the mbedtls_cipher_update() documentation. Contributed by Andy Leiserson.
    + Fixed the overriding and ignoring of return values when parsing and writing to a file in the pk_sign program. Found by kevlut in #1142.
    + Added restrictions to the usage of the error code MBEDTLS_ERR_SSL_WANT_READ to situations where data needs to be fetched from the underlying transport in order to make progress. Previously, this error code was also occasionally returned when unexpected messages were being discarded, ignoring that further messages could potentially already be pending to be processed in the internal buffers; these cases led to deadlocks when event-driven I/O was used. Found and reported by Hubert Mis in #772.
    + Fixed buffer length assertions in the ssl_parse_certificate_request() function which led to a potential one byte overread of the message buffer.
    + Fixed invalid buffer sizes being passed to zlib during record compression and decompression.
    + Raised the soversion of libmbedcrypto to match the soversion of the maintained 2.7 branch. The soversion was increased in Mbed TLS version 2.7.1 to reflect breaking changes in that release, but the increment was missed in 2.8.0 and later releases outside of the 2.7 branch.</changelog>
  <changelog author="mpluskal@suse.com" date="1535025600">- Update to version 2.12.0:
  * Security
    + Fixed a vulnerability in the TLS ciphersuites based on use of CBC and SHA-384 in DTLS/TLS 1.0 to 1.2, that allowed an active network attacker to partially recover the plaintext of messages under certains conditions by exploiting timing side-channels.
    + Fixed a vulnerability in TLS ciphersuites based on CBC, in DTLS/TLS 1.0 to 1.2, that allowed a local attacker, with the ability to execute code on the local machine as well as to manipulate network packets, to partially recover the plaintext of messages under certain conditions by using a cache attack targetting an internal MD/SHA buffer.
    + Added a counter-measure against a vulnerability in TLS ciphersuites based on CBC, in DTLS/TLS 1.0 to 1.2, that allowed a local attacker with the ability to execute code on the local machine as well as manipulate network packets, to partially recover the plaintext of messages certain conditions (see previous entry) by using a cache attack targeting the SSL input record buffer.
  * Features
    + Added new cryptographic primitives, the stream cipher Chacha20, one-time authenticator Poly1305 and AEAD construct Chacha20-Poly1305, as defined in RFC 7539. Contributed by Daniel King.
    + Added support for the CHACHA20-POLY1305 ciphersuites from RFC 7905.
    + Made the receive and transmit buffers independently configurable in size, for situations where the outgoing buffer can be fixed at a smaller size than the incoming buffer
    + Added support for the AES based key wrapping modes defined by NIST SP 800-38F algorithms KW and KWP and by RFC's 3394 and 5649.
    + Added platform support for the Haiku OS.
  * Bugfix
    + Fixed the key_app_writer example which was creating an invalid ASN.1 tag by writing an additional leading zero byte. Found by Aryeh R. #1257.
    + Fixed a C++ compilation error, caused by a variable named new. Found and fixed by Hirotaka Niisato. #1783.
    + Fixed the "no symbols" warning issued by ranlib when building on Mac OS X. Fix contributed by tabascoeye.
    + Clarified documentation for mbedtls_ssl_write() to include 0 as a valid return value. Found by @davidwu2000. #839.
    + Fixed a memory leak in mbedtls_x509_csr_parse(). Found and fixed by catenacyber, Philippe Antoine. #1623.
    + Added length checks to some TLS parsing functions. Found and fixed by Philippe Antoine from Catena cyber. #1663.
    + Remove unused headers included in x509.c. Found by Chris Hanson and fixed by Brendan Shanks. #992.
    + Fixed compilation error when MBEDTLS_ARC4_C is disabled and MBEDTLS_CIPHER_NULL_CIPHER is enabled. Found by TrinityTonic in #1719.
    + Fixed the inline assembly for the MPI multiply helper function for i386 and i386 with SSE2. Found by László Langó. #1550.
    + Fixed the namespacing in header files. Remove the mbedtls namespacing in the #include in the header files. #857.
    + Fixed a compiler warning of 'use before initialisation' in mbedtls_pk_parse_key(). Found by Martin Boye Petersen and fixed by Dawid Drozd.#1098.
    + Fixed decryption of zero length messages (which contain all padding) when a CBC based ciphersuite was used together with Encrypt-then-MAC.
    + Fixed the ssl_client2 example to send application data with 0-length content when the request_size argument is set to 0 as stated in the documentation. #1833.
    + Corrected the documentation for mbedtls_ssl_get_session(). This API has deep copy of the session, and the peer certificate is not lost. #926.
    + Fixed issues when building to the C99 standard, using -std=c99. Fixed by Nick Wilson.
  * Changes
    + Fails when receiving a TLS alert message with an invalid length, or invalid zero-length messages when using TLS 1.2. Contributed by Espressif Systems.
    + Changed the default behaviour of mbedtls_hkdf_extract() to return an error when calling with a NULL salt and non-zero salt length. Contributed by Brian J Murray
    + Change the shebang line in Perl scripts to look up perl in the PATH. Contributed by fbrosson.
    + Allow overriding the time on Windows via the platform-time abstraction. Fixed by Nick Wilson.
    + Use gmtime_r/gmtime_s for thread-safety. Fixed by Nick Wilson.</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1544529600">- Update to version 2.14.1: [bsc#1118727, CVE-2018-19608]
  Security
  * Fix timing variations and memory access variations in RSA PKCS#1 v1.5
    decryption that could lead to a Bleichenbacher-style padding oracle
    attack. In TLS, this affects servers that accept ciphersuites based on
    RSA decryption (i.e. ciphersuites whose name contains RSA but not
    (EC)DH(E)). Discovered by Eyal Ronen (Weizmann Institute),  Robert Gillham
    (University of Adelaide), Daniel Genkin (University of Michigan),
    Adi Shamir (Weizmann Institute), David Wong (NCC Group), and Yuval Yarom
    (University of Adelaide, Data61). The attack is described in more detail
    in the paper available here: http://cat.eyalro.net/cat.pdf  CVE-2018-19608
  * In mbedtls_mpi_write_binary(), don't leak the exact size of the number
    via branching and memory access patterns. An attacker who could submit
    a plaintext for RSA PKCS#1 v1.5 decryption but only observe the timing
    of the decryption and not its result could nonetheless decrypt RSA
    plaintexts and forge RSA signatures. Other asymmetric algorithms may
    have been similarly vulnerable. Reported by Eyal Ronen, Robert Gillham,
    Daniel Genkin, Adi Shamir, David Wong and Yuval Yarom.
  * Wipe sensitive buffers on the stack in the CTR_DRBG and HMAC_DRBG
    modules.
  API Changes
  * The new functions mbedtls_ctr_drbg_update_ret() and
    mbedtls_hmac_drbg_update_ret() are similar to mbedtls_ctr_drbg_update()
    and mbedtls_hmac_drbg_update() respectively, but the new functions
    report errors whereas the old functions return void. We recommend that
    applications use the new functions.
- Version 2.14.0:
  Security
  * Fix overly strict DN comparison when looking for CRLs belonging to a
    particular CA. This previously led to ignoring CRLs when the CRL's issuer
    name and the CA's subject name differed in their string encoding (e.g.,
    one using PrintableString and the other UTF8String) or in the choice of
    upper and lower case. Reported by Henrik Andersson of Bosch GmbH in issue
    [#1784].
  * Fix a flawed bounds check in server PSK hint parsing. In case the
    incoming message buffer was placed within the first 64KiB of address
    space and a PSK-(EC)DHE ciphersuite was used, this allowed an attacker
    to trigger a memory access up to 64KiB beyond the incoming message buffer,
    potentially leading to an application crash or information disclosure.
  * Fix mbedtls_mpi_is_prime() to use more rounds of probabilistic testing. The
    previous settings for the number of rounds made it practical for an
    adversary to construct non-primes that would be erroneously accepted as
    primes with high probability. This does not have an impact on the
    security of TLS, but can matter in other contexts with numbers chosen
    potentially by an adversary that should be prime and can be validated.
    For example, the number of rounds was enough to securely generate RSA key
    pairs or Diffie-Hellman parameters, but was insufficient to validate
    Diffie-Hellman parameters properly.
    See "Prime and Prejudice" by by Martin R. Albrecht and Jake Massimo and
    Kenneth G. Paterson and Juraj Somorovsky.
  Features
  * Add support for temporarily suspending expensive ECC computations after
    some configurable amount of operations. This is intended to be used in
    constrained, single-threaded systems where ECC is time consuming and can
    block other operations until they complete. This is disabled by default,
    but can be enabled by MBEDTLS_ECP_RESTARTABLE at compile time and
    configured by mbedtls_ecp_set_max_ops() at runtime. It applies to the new
    xxx_restartable functions in ECP, ECDSA, PK and X.509 (CRL not supported
    yet), and to existing functions in ECDH and SSL (currently only
    implemented client-side, for ECDHE-ECDSA ciphersuites in TLS 1.2,
    including client authentication).
  * Add support for Arm CPU DSP extensions to accelerate asymmetric key
    operations. On CPUs where the extensions are available, they can accelerate
    MPI multiplications used in ECC and RSA cryptography. Contributed by
    Aurelien Jarno.
  * Extend RSASSA-PSS signature to allow a smaller salt size. Previously, PSS
    signature always used a salt with the same length as the hash, and returned
    an error if this was not possible. Now the salt size may be up to two bytes
    shorter. This allows the library to support all hash and signature sizes
    that comply with FIPS 186-4, including SHA-512 with a 1024-bit key.
  * Add support for 128-bit keys in CTR_DRBG. Note that using keys shorter
    than 256 bits limits the security of generated material to 128 bits.
  API Changes
  * Add a common error code of `MBEDTLS_ERR_PLATFORM_FEATURE_UNSUPPORTED` for
    a feature that is not supported by underlying alternative
    implementations implementing cryptographic primitives. This is useful for
    hardware accelerators that don't implement all options or features.
  New deprecations
  * All module specific errors following the form
    MBEDTLS_ERR_XXX_FEATURE_UNAVAILABLE that indicate a feature is not
    supported are deprecated and are now replaced by the new equivalent
    platform error.
  * All module specific generic hardware acceleration errors following the
    form MBEDTLS_ERR_XXX_HW_ACCEL_FAILED that are deprecated and are replaced
    by the equivalent plaform error.
  * Deprecate the function mbedtls_mpi_is_prime() in favor of
    mbedtls_mpi_is_prime_ext() which allows specifying the number of
    Miller-Rabin rounds.
  Bugfix
  * Fix wrong order of freeing in programs/ssl/ssl_server2 example
    application leading to a memory leak in case both
    MBEDTLS_MEMORY_BUFFER_ALLOC_C and MBEDTLS_MEMORY_BACKTRACE are set.
    Fixes #2069.
  * Fix a bug in the update function for SSL ticket keys which previously
    invalidated keys of a lifetime of less than a 1s. Fixes #1968.
  * Fix failure in hmac_drbg in the benchmark sample application, when
    MBEDTLS_THREADING_C is defined. Found by TrinityTonic, #1095
  * Fix a bug in the record decryption routine ssl_decrypt_buf()
    which lead to accepting properly authenticated but improperly
    padded records in case of CBC ciphersuites using Encrypt-then-MAC.
  * Fix memory leak and freeing without initialization in the example
    program programs/x509/cert_write. Fixes #1422.
  * Ignore IV in mbedtls_cipher_set_iv() when the cipher mode is
    MBEDTLS_MODE_ECB. Found by ezdevelop. Fixes #1091.
  * Zeroize memory used for buffering or reassembling handshake messages
    after use.
  * Use `mbedtls_platform_zeroize()` instead of `memset()` for zeroization
    of sensitive data in the example programs aescrypt2 and crypt_and_hash.
  * Change the default string format used for various X.509 DN attributes to
    UTF8String. Previously, the use of the PrintableString format led to
    wildcards and non-ASCII characters being unusable in some DN attributes.
    Reported by raprepo in #1860 and by kevinpt in #468. Fix contributed by
    Thomas-Dee.
  * Fix compilation failure for configurations which use compile time
    replacements of standard calloc/free functions through the macros
    MBEDTLS_PLATFORM_CALLOC_MACRO and MBEDTLS_PLATFORM_FREE_MACRO.
    Reported by ole-de and ddhome2006. Fixes #882, #1642 and #1706.
  Changes
  * Removed support for Yotta as a build tool.
  * Add tests for session resumption in DTLS.
  * Close a test gap in (D)TLS between the client side and the server side:
    test the handling of large packets and small packets on the client side
    in the same way as on the server side.
  * Change the dtls_client and dtls_server samples to work by default over
    IPv6 and optionally by a build option over IPv4.
  * Change the use of Windows threading to use Microsoft Visual C++ runtime
    calls, rather than Win32 API calls directly. This is necessary to avoid
    conflict with C runtime usage. Found and fixed by irwir.
  * Remember the string format of X.509 DN attributes when replicating
    X.509 DNs. Previously, DN attributes were always written in their default
    string format (mostly PrintableString), which could lead to CRTs being
    created which used PrintableStrings in the issuer field even though the
    signing CA used UTF8Strings in its subject field; while X.509 compliant,
    such CRTs were rejected in some applications, e.g. some versions of
    Firefox, curl and GnuTLS. Reported in #1033 by Moschn. Fix contributed by
    Thomas-Dee.
  * Improve documentation of mbedtls_ssl_get_verify_result().
    Fixes #517 reported by github-monoculture.
  * Add MBEDTLS_MPI_GEN_PRIME_FLAG_LOW_ERR flag to mbedtls_mpi_gen_prime() and
    use it to reduce error probability in RSA key generation to levels mandated
    by FIPS-186-4.
- Version 2.13.1
  API Changes
  * Extend the platform module with an abstraction mbedtls_platform_gmtime_r()
    whose implementation should behave as a thread-safe version of gmtime().
    This allows users to configure such an implementation at compile time when
    the target system cannot be deduced automatically, by setting the option
    MBEDTLS_PLATFORM_GMTIME_R_ALT. At this stage Mbed TLS is only able to
    automatically select implementations for Windows and POSIX C libraries.
  Bugfix
  * Fix build failures on platforms where only gmtime() is available but
    neither gmtime_r() nor gmtime_s() are present. Fixes #1907.
- Version 2.13.0
  Security
  * Fix an issue in the X.509 module which could lead to a buffer overread
    during certificate extensions parsing. In case of receiving malformed
    input (extensions length field equal to 0), an illegal read of one byte
    beyond the input buffer is made. Found and analyzed by Nathan Crandall.
  Features
  * Add support for fragmentation of outgoing DTLS handshake messages. This
    is controlled by the maximum fragment length as set locally or negotiated
    with the peer, as well as by a new per-connection MTU option, set using
    mbedtls_ssl_set_mtu().
  * Add support for auto-adjustment of MTU to a safe value during the
    handshake when flights do not get through (RFC 6347, section 4.1.1.1,
    last paragraph).
  * Add support for packing multiple records within a single datagram,
    enabled by default.
  * Add support for buffering out-of-order handshake messages in DTLS.
    The maximum amount of RAM used for this can be controlled by the
    compile-time constant MBEDTLS_SSL_DTLS_MAX_BUFFERING defined
    in mbedtls/config.h.
  API Changes
  * Add function mbedtls_ssl_set_datagram_packing() to configure
    the use of datagram packing (enabled by default).
  Bugfix
  * Fix a potential memory leak in mbedtls_ssl_setup() function. An allocation
    failure in the function could lead to other buffers being leaked.
  * Fixes an issue with MBEDTLS_CHACHAPOLY_C which would not compile if
    MBEDTLS_ARC4_C and MBEDTLS_CIPHER_NULL_CIPHER weren't also defined. #1890
  * Fix a memory leak in ecp_mul_comb() if ecp_precompute_comb() fails.
    Fix contributed by Espressif Systems.
  * Add ecc extensions only if an ecc based ciphersuite is used.
    This improves compliance to RFC 4492, and as a result, solves
    interoperability issues with BouncyCastle. Raised by milenamil in #1157.
  * Replace printf with mbedtls_printf in the ARIA module. Found by
    TrinityTonic in #1908.
  * Fix potential use-after-free in mbedtls_ssl_get_max_frag_len()
    and mbedtls_ssl_get_record_expansion() after a session reset. Fixes #1941.
  * Fix a bug that caused SSL/TLS clients to incorrectly abort the handshake
    with TLS versions 1.1 and earlier when the server requested authentication
    without providing a list of CAs. This was due to an overly strict bounds
    check in parsing the CertificateRequest message,
    introduced in Mbed TLS 2.12.0. Fixes #1954.
  * Fix a miscalculation of the maximum record expansion in
    mbedtls_ssl_get_record_expansion() in case of ChachaPoly ciphersuites,
    or CBC ciphersuites in (D)TLS versions 1.1 or higher. Fixes #1913, #1914.
  * Fix undefined shifts with negative values in certificates parsing
    (found by Catena cyber using oss-fuzz)
  * Fix memory leak and free without initialization in pk_encrypt
    and pk_decrypt example programs. Reported by Brace Stout. Fixes #1128.
  * Remove redundant else statement. Raised by irwir. Fixes #1776.
  Changes
  * Copy headers preserving timestamps when doing a "make install".
    Contributed by xueruini.
  * Allow the forward declaration of public structs. Contributed by Dawid
    Drozd. Fixes #1215 raised by randombit.
  * Improve compatibility with some alternative CCM implementations by using
    CCM test vectors from RAM.
  * Add support for buffering of out-of-order handshake messages.
  * Add warnings to the documentation of the HKDF module to reduce the risk
    of misusing the mbedtls_hkdf_extract() and mbedtls_hkdf_expand()
    functions. Fixes #1775. Reported by Brian J. Murray.</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1544529601">- Library package version bumped to libmbedtls12</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1546862400">- Update to version 2.16.0:
  Features
  * Add a new config.h option of MBEDTLS_CHECK_PARAMS that enables validation of parameters in the API. This allows detection of obvious misuses of the API, such as passing NULL pointers. The API of existing functions hasn't changed, but requirements on parameters have been made more explicit in the documentation. See the corresponding API documentation for each function to see for which parameter values it is defined. This feature is disabled by default. See its API documentation in config.h for additional steps you have to take when enabling it.
  API Changes
  * The following functions in the random generator modules have been deprecated and replaced as shown below. The new functions change the return type from void to int to allow returning error codes when using MBEDTLS_&lt;MODULE&gt;_ALT for the underlying AES or message digest primitive. Fixes #1798. mbedtls_ctr_drbg_update() -&gt; mbedtls_ctr_drbg_update_ret() mbedtls_hmac_drbg_update() -&gt; mbedtls_hmac_drbg_update_ret()
  * Extend ECDH interface to enable alternative implementations.
  * Deprecate error codes of the form MBEDTLS_ERR_xxx_INVALID_KEY_LENGTH for ARIA, CAMELLIA and Blowfish. These error codes will be replaced by the more generic per-module error codes MBEDTLS_ERR_xxx_BAD_INPUT_DATA.
  * Additional parameter validation checks have been added for the following modules - AES, ARIA, Blowfish, CAMELLIA, CCM, GCM, DHM, ECP, ECDSA, ECDH, ECJPAKE, SHA, Chacha20 and Poly1305, cipher, pk, RSA, and MPI. Where modules have had parameter validation added, existing parameter checks may have changed. Some modules, such as Chacha20 had existing parameter validation whereas other modules had little. This has now been changed so that the same level of validation is present in all modules, and that it is now optional with the MBEDTLS_CHECK_PARAMS flag which by default is off. That means that checks which were previously present by default will no longer be.
  New deprecations
  * Deprecate mbedtls_ctr_drbg_update() and mbedtls_hmac_drbg_update() in favor of functions that can return an error code.
  Bugfix
  * Fix for Clang, which was reporting a warning for the bignum.c inline assembly for AMD64 targets creating string literals greater than those permitted by the ISO C99 standard. Found by Aaron Jones. Fixes #482.
  * Fix runtime error in mbedtls_platform_entropy_poll() when run through qemu user emulation. Reported and fix suggested by randombit. Fixes #1212.
  * Fix an unsafe bounds check when restoring an SSL session from a ticket. This could lead to a buffer overflow, but only in case ticket authentication was broken. Reported and fix suggested by Guido Vranken in #659.
  * Add explicit integer to enumeration type casts to example program programs/pkey/gen_key which previously led to compilation failure on some toolchains. Reported by phoenixmcallister. Fixes #2170.
  * Clarify documentation of mbedtls_ssl_set_own_cert() regarding the absence of check for certificate/key matching. Reported by Attila Molnar, #507.
  * Fix double initialization of ECC hardware that made some accelerators hang.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1567512000">- Update to version 2.16.2:
  * Security improvements and bugfixes
- Use ninja to for build</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1573646400">- Update to version 2.16.3:
  * Security improvements and bugfixes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1585828800">- Update to version 2.16.5:
  * Security improvements and bugfixes</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597665600">- update to 2.23.0:
  a lot of changes see https://github.com/ARMmbed/mbedtls/releases/tag/v2.23.0
  * Fix a side channel vulnerability in modular exponentiation that could reveal an RSA private key used in a secure enclave. Noticed by Sangho Lee, Ming-Wei Shih, Prasun Gera, Taesoo Kim and Hyesoon Kim (Georgia Institute of Technology); and Marcus Peinado (Microsoft Research). Reported by Raoul Strackx (Fortanix) in #3394.
  * Fix side channel in mbedtls_ecp_check_pub_priv() and mbedtls_pk_parse_key() / mbedtls_pk_parse_keyfile() (when loading a private key that didn't include the uncompressed public key), as well as mbedtls_ecp_mul() / mbedtls_ecp_mul_restartable() when called with a NULL f_rng argument. An attacker with access to precise enough timing and memory access information (typically an untrusted operating system attacking a secure enclave) could fully recover the ECC private key. Found and reported by Alejandro Cabrera Aldaya and Billy Brumley.
  * Fix issue in Lucky 13 counter-measure that could make it ineffective when hardware accelerators were used (using one of the MBEDTLS_SHAxxx_ALT macros). This would cause the original Lucky 13 attack to be possible in those configurations, allowing an active network attacker to recover plaintext after repeated timing measurements under some conditions. Reported and fix suggested by Luc Perneel in #3246.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1598875200">- Do not run testsuite in parallel - its not reliable</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1599480000">- Add workaround for failing builds (Python not found) due to
  https://gitlab.kitware.com/cmake/cmake/-/issues/21168</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1599652800">- update to 2.24.0:
  * see https://github.com/ARMmbed/mbedtls/releases/tag/v2.24.0
  * Fix a vulnerability in the verification of X.509 certificates when matching
  the expected common name (the cn argument of mbedtls_x509_crt_verify())
  with the actual certificate name: when the subjecAltName extension is
  present, the expected name was compared to any name in that extension
  regardless of its type. This means that an attacker could for example
  impersonate a 4-bytes or 16-byte domain by getting a certificate for the
  corresponding IPv4 or IPv6 (this would require the attacker to control that
  IP address, though). Similar attacks using other subjectAltName name types
  might be possible.
  * When checking X.509 CRLs, a certificate was only considered as revoked if
  its revocationDate was in the past according to the local clock if
  available. In particular, on builds without MBEDTLS_HAVE_TIME_DATE,
  certificates were never considered as revoked. On builds with
  MBEDTLS_HAVE_TIME_DATE, an attacker able to control the local clock (for
  example, an untrusted OS attacking a secure enclave) could prevent
  revocation of certificates via CRLs. Fixed by no longer checking the
  revocationDate field, in accordance with RFC 5280. Reported by yuemonangong
  in #3340. Reported independently and fixed by Raoul Strackx and Jethro
  * In (D)TLS record decryption, when using a CBC ciphersuites without the
  Encrypt-then-Mac extension, use constant code flow memory access patterns
  to extract and check the MAC. This is an improvement to the existing
  countermeasure against Lucky 13 attacks. The previous countermeasure was
  effective against network-based attackers, but less so against local
  attackers. The new countermeasure defends against local attackers, even if
  they have access to fine-grained measurements. In particular, this fixes a
  local Lucky 13 cache attack found and reported by Tuba Yavuz, Farhaan
  Fowze, Ken (Yihan) Bai, Grant Hernandez, and Kevin Butler (University of
  Florida) and Dave Tian (Purdue University).
  * Fix side channel in RSA private key operations and static (finite-field)
  Diffie-Hellman. An adversary with precise enough timing and memory access
  information (typically an untrusted operating system attacking a secure
  enclave) could bypass an existing counter-measure (base blinding) and
  potentially fully recover the private key.
  * Fix a 1-byte buffer overread in mbedtls_x509_crl_parse_der(). Credit to
  OSS-Fuzz for detecting the problem and to Philippe Antoine for pinpointing
  the problematic code.
  * Zeroising of plaintext buffers in mbedtls_ssl_read() to erase unused
  application data from memory.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1608638400">- update to 2.25.0:
  * This release of Mbed TLS provides bug fixes, minor enhancements and new
  features. This release includes fixes for security issues.
  * see https://github.com/ARMmbed/mbedtls/releases/tag/v2.25.0
  * The functions mbedtls_cipher_auth_encrypt() and
  mbedtls_cipher_auth_decrypt() would write past the minimum documented size
  of the output buffer when used with NIST_KW. As a result, code using those
  functions as documented with NIST_KW could have a buffer overwrite of up to
  15 bytes, with consequences ranging up to arbitrary code execution
  depending on the location of the output buffer.
  * Limit the size of calculations performed by mbedtls_mpi_exp_mod to
  MBEDTLS_MPI_MAX_SIZE to prevent a potential denial of service when generating
  Diffie-Hellman key pairs. Credit to OSS-Fuzz.
  * A failure of the random generator was ignored in mbedtls_mpi_fill_random(),
  which is how most uses of randomization in asymmetric cryptography (including
  key generation, intermediate value randomization and blinding) are implemented.
  This could cause failures or the silent use of non-random values. A random
  generator can fail if it needs reseeding and cannot not obtain entropy, or due
  to an internal failure (which, for Mbed TLS's own CTR_DRBG or HMAC_DRBG, can
  only happen due to a misconfiguration).
  * Fix a compliance issue whereby we were not checking the tag on the algorithm
  parameters (only the size) when comparing the signature in the description part
  of the cert to the real signature. This meant that a NULL algorithm parameters
  entry would look identical to an array of REAL (size zero) to the library and
  thus the certificate would be considered valid. However, if the parameters do
  not match in any way then the certificate should be considered invalid, and
  indeed OpenSSL marks these certs as invalid when mbedtls did not. Many thanks
  to guidovranken who found this issue via differential fuzzing and reported it
  in #3629.
  * Zeroising of local buffers and variables which are used for calculations in
  mbedtls_pkcs5_pbkdf2_hmac(), mbedtls_internal_sha*_process(),
  mbedtls_internal_md*_process() and mbedtls_internal_ripemd160_process()
  functions to erase sensitive data from memory. Reported by Johan Malmgren and
  Johan Uppman Bruce from Sectra.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1611057600">- Fix build for Leap targets
- Use upstream tarball name</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1616414400">- Update to 2.26.0: [bsc#1189589, CVE-2021-24119]
  * * This release of Mbed TLS provides bug fixes, minor enhancements and new
  features. This release includes fixes for security issues.
  * see https://github.com/ARMmbed/mbedtls/releases/tag/v2.26.0
- Fix build with patch from https://github.com/ARMmbed/mbedtls/pull/4237
  mbedtls-4237.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1618488000">-  Workaround for building with gcc-11 boo#1181876</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1626782400">- Update to 2.27.0:
  API changes:
  * Update AEAD output size macros to bring them in line with the PSA Crypto
    API version 1.0 spec. This version of the spec parameterizes them on the
    key type used, as well as the key bit-size in the case of
    PSA_AEAD_TAG_LENGTH.
    The old versions of these macros were renamed and deprecated as follows:
  - PSA_AEAD_TAG_LENGTH          -&gt; PSA_AEAD_TAG_LENGTH_1_ARG
  - PSA_AEAD_ENCRYPT_OUTPUT_SIZE -&gt; PSA_AEAD_ENCRYPT_OUTPUT_SIZE_2_ARG
  - PSA_AEAD_DECRYPT_OUTPUT_SIZE -&gt; PSA_AEAD_DECRYPT_OUTPUT_SIZE_2_ARG
  - PSA_AEAD_UPDATE_OUTPUT_SIZE  -&gt; PSA_AEAD_UPDATE_OUTPUT_SIZE_2_ARG
  - PSA_AEAD_FINISH_OUTPUT_SIZE  -&gt; PSA_AEAD_FINISH_OUTPUT_SIZE_1_ARG
  - PSA_AEAD_VERIFY_OUTPUT_SIZE  -&gt; PSA_AEAD_VERIFY_OUTPUT_SIZE_1_ARG
  * Implement one-shot cipher functions, psa_cipher_encrypt and
    psa_cipher_decrypt, according to the PSA Crypto API 1.0.0
    specification.
  Features:
  * Add mbedtls_rsa_rsassa_pss_sign_ext() function allowing to generate a
    signature with a specific salt length. This function allows to validate
    test cases provided in the NIST's CAVP test suite.
  * Added support for built-in driver keys through the PSA opaque crypto
    driver interface. Refer to the documentation of
    MBEDTLS_PSA_CRYPTO_BUILTIN_KEYS for more information.
  * Implement psa_sign_message() and psa_verify_message().
  * The new function mbedtls_mpi_random() generates a random value in a
    given range uniformly.
  * Implement psa_mac_compute() and psa_mac_verify() as defined in the
    PSA Cryptograpy API 1.0.0 specification.
  * MBEDTLS_ECP_MAX_BITS is now determined automatically from the configured
    curves and no longer needs to be configured explicitly to save RAM.
  Security
  * Fix a bias in the generation of finite-field Diffie-Hellman-Merkle (DHM)
    private keys and of blinding values for DHM and elliptic curves (ECP)
    computations.
  * Fix a potential side channel vulnerability in ECDSA ephemeral key generation.
    An adversary who is capable of very precise timing measurements could
    learn partial information about the leading bits of the nonce used for the
    signature, allowing the recovery of the private key after observing a
    large number of signature operations. This completes a partial fix in
    Mbed TLS 2.20.0.
  * It was possible to configure MBEDTLS_ECP_MAX_BITS to a value that is
    too small, leading to buffer overflows in ECC operations. Fail the build
    in such a case.
  * An adversary with access to precise enough information about memory
    accesses (typically, an untrusted operating system attacking a secure
    enclave) could recover an RSA private key after observing the victim
    performing a single private-key operation.
  * An adversary with access to precise enough timing information (typically, a
    co-located process) could recover a Curve25519 or Curve448 static ECDH key
    after inputting a chosen public key and observing the victim performing the
    corresponding private-key operation.
  Bugfix
  * Add printf function attributes to mbedtls_debug_print_msg to ensure we
    get printf format specifier warnings.
  * Fix premature fopen() call in mbedtls_entropy_write_seed_file which may
    lead to seed file corruption in the case where the path to the seed file is
    equal to MBEDTLS_PLATFORM_STD_NV_SEED_FILE.
  * PSA functions other than psa_open_key now return PSA_ERROR_INVALID_HANDLE
    rather than PSA_ERROR_DOES_NOT_EXIST for an invalid handle, bringing them
    in line with version 1.0.0 of the specification.
  * PSA functions creating a key now return PSA_ERROR_INVALID_ARGUMENT rather
    than PSA_ERROR_INVALID_HANDLE when the identifier specified for the key
    to create is not valid, bringing them in line with version 1.0.0 of the
    specification.
  * Fix some cases in the bignum module where the library constructed an
    unintended representation of the value 0 which was not processed
    correctly by some bignum operations. This could happen when
    mbedtls_mpi_read_string() was called on "-0", or when
    mbedtls_mpi_mul_mpi() and mbedtls_mpi_mul_int() was called with one of
    the arguments being negative and the other being 0.
  * Fix a bug in ECDSA that would cause it to fail when the hash is all-bits
    zero.
  * Fix a compilation error when MBEDTLS_ECP_RANDOMIZE_MXZ_ALT is
    defined.
  * Fix an incorrect error code when parsing a PKCS#8 private key.
  * In a TLS client, enforce the Diffie-Hellman minimum parameter size
    set with mbedtls_ssl_conf_dhm_min_bitlen() precisely. Before, the
    minimum size was rounded down to the nearest multiple of 8.
  * In library/net_sockets.c, _POSIX_C_SOURCE and _XOPEN_SOURCE are
    defined to specific values.  If the code is used in a context
    where these are already defined, this can result in a compilation
    error.  Instead, assume that if they are defined, the values will
    be adequate to build Mbed TLS.
  * The cipher suite TLS-RSA-WITH-CAMELLIA-256-GCM-SHA384 was not available
    when SHA-1 was disabled and was offered when SHA-1 was enabled but SHA-384
    was disabled. Fix the dependency.
  * Do not offer SHA384 cipher suites when SHA-384 is disabled.
  * With MBEDTLS_PSA_CRYPTO_C disabled, some functions were getting built
    nonetheless, resulting in undefined reference errors when building a
    shared library.
  * Fix test suite code on platforms where int32_t is not int, such as
    Arm Cortex-M.
  * Fix some issues affecting MBEDTLS_ARIA_ALT implementations: a misplaced
    directive in a header and a missing initialization in the self-test.
  * Fix a missing initialization in the Camellia self-test, affecting
    MBEDTLS_CAMELLIA_ALT implementations.
  * Restore the ability to configure PSA via Mbed TLS options to support RSA
    key pair operations but exclude RSA key generation. When MBEDTLS_GENPRIME
    is not defined PSA will no longer attempt to use mbedtls_rsa_gen_key().
  * Fix a regression introduced in 2.24.0 which broke (D)TLS CBC ciphersuites
    (when the encrypt-then-MAC extension is not in use) with some ALT
    implementations of the underlying hash (SHA-1, SHA-256, SHA-384), causing
    the affected side to wrongly reject valid messages.
  * Remove outdated check-config.h check that prevented implementing the
    timing module on Mbed OS.
  * Fix PSA_ALG_TLS12_PRF and PSA_ALG_TLS12_PSK_TO_MS being too permissive
    about missing inputs.
  * Fix a resource leak in a test suite with an alternative AES
    implementation.
  * Fix a crash in mbedtls_mpi_debug_mpi on a bignum having 0 limbs. This
    could notably be triggered by setting the TLS debug level to 3 or above
    and using a Montgomery curve for the key exchange.
  * psa_verify_hash() was relying on implementation-specific behavior of
    mbedtls_rsa_rsassa_pss_verify() and was causing failures in some _ALT
    implementations. This reliance is now removed.
  * Disallow inputs of length different from the corresponding hash when
    signing or verifying with PSA_ALG_RSA_PSS (The PSA Crypto API mandates
    that PSA_ALG_RSA_PSS uses the same hash throughout the algorithm.)
  * Fix a null pointer dereference when mbedtls_mpi_exp_mod() was called with
    A=0 represented with 0 limbs. Up to and including Mbed TLS 2.26, this bug
    could not be triggered by code that constructed A with one of the
    mbedtls_mpi_read_xxx functions (including in particular TLS code) since
    those always built an mpi object with at least one limb.
  * Fix mbedtls_mpi_gcd(G,A,B) when the value of B is zero. This had no
    effect on Mbed TLS's internal use of mbedtls_mpi_gcd(), but may affect
    applications that call mbedtls_mpi_gcd() directly.
  * The PSA API no longer allows the creation or destruction of keys with a
    read-only lifetime. The persistence level PSA_KEY_PERSISTENCE_READ_ONLY
    can now only be used as intended, for keys that cannot be modified through
    normal use of the API.
  * When MBEDTLS_PSA_CRYPTO_SPM is enabled, crypto_spe.h was not included
    in all the right places. Include it from crypto_platform.h, which is
    the natural place.
  * mbedtls_pk_sign() and mbedtls_pk_verify() and their extended and
    restartable variants now always honor the specified hash length if
    nonzero. Before, for RSA, hash_len was ignored in favor of the length of
    the specified hash algorithm.
  * Fix which alert is sent in some cases to conform to the
    applicable RFC: on an invalid Finished message value, an
    invalid max_fragment_length extension, or an
    unsupported extension used by the server.
  * Correct (change from 12 to 13 bytes) the value of the macro describing the
    maximum nonce length returned by psa_aead_generate_nonce().
  Changes
  * Add extra printf compiler warning flags to builds.
  * Fix memsan build false positive in x509_crt.c with Clang 11
  * Fix the setting of the read timeout in the DTLS sample programs.
  * Remove the AES sample application programs/aes/aescrypt2 which shows
    bad cryptographic practice.
  * Alternative implementations of CMAC may now opt to not support 3DES as a
    CMAC block cipher, and still pass the CMAC self test.
  * Remove configs/config-psa-crypto.h, which was identical to the default
    configuration except for having some extra cryptographic mechanisms
    enabled and for unintended differences. This configuration was primarily
    intended to demonstrate the PSA API, and lost most of its usefulness when
    MBEDTLS_PSA_CRYPTO_C became enabled by default.
  * When building the test suites with GNU make, invoke python3 or python, not
    python2, which is no longer supported upstream.
  * When using session cache based session resumption on the server,
    double-check that custom session cache implementations return
    sessions which are consistent with the negotiated ciphersuite
    and compression method.
  * Fix build failure on MinGW toolchain when __USE_MING_ANSI_STDIO is on.
    When that flag is on, standard GNU C printf format specifiers
    should be used.
  * Reduce the default value of MBEDTLS_ECP_WINDOW_SIZE. This reduces RAM usage
    during ECC operations at a negligible performance cost.
  * mbedtls_mpi_read_binary(), mbedtls_mpi_read_binary_le() and
    mbedtls_mpi_read_string() now construct an mbedtls_mpi object with 0 limbs
    when their input has length 0. Note that this is an implementation detail
    and can change at any time, so this change should be transparent, but it
    may result in mbedtls_mpi_write_binary() or mbedtls_mpi_write_string()
    now writing an empty string where it previously wrote one or more
    zero digits when operating from values constructed with an mpi_read
    function and some mpi operations.
  * Implicitly add PSA_KEY_USAGE_SIGN_MESSAGE key usage policy flag when
    PSA_KEY_USAGE_SIGN_HASH flag is set and PSA_KEY_USAGE_VERIFY_MESSAGE flag
    when PSA_KEY_USAGE_VERIFY_HASH flag is set. This usage flag extension
    is also applied when loading a key from storage.
  * Remove mbedtls-4237.patch upstream
  * Library soname bump to libmbedcrypto7</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1642075200">- Update to 2.28.0: (bsc#1193979, CVE-2021-45450)
  API changes
  * Some fields of mbedtls_ssl_session and mbedtls_ssl_config are in a
  different order. This only affects applications that define such
  structures directly or serialize them.
  Requirement changes
  * Sign-magnitude and one's complement representations for signed integers are
  not supported. Two's complement is the only supported representation.
  Removals
  * Remove config option MBEDTLS_TLS_DEFAULT_ALLOW_SHA1_IN_CERTIFICATES,
  which allowed SHA-1 in the default TLS configuration for certificate
  signing. It was intended to facilitate the transition in environments
  with SHA-1 certificates. SHA-1 is considered a weak message digest and
  its use constitutes a security risk.
  * Remove the partial support for running unit tests via Greentea on Mbed OS,
  which had been unmaintained since 2018.
  Features
  * The identifier of the CID TLS extension can be configured by defining
  MBEDTLS_TLS_EXT_CID at compile time.
  * Warn if errors from certain functions are ignored. This is currently
  supported on GCC-like compilers and on MSVC and can be configured through
  the macro MBEDTLS_CHECK_RETURN. The warnings are always enabled
  (where supported) for critical functions where ignoring the return
  value is almost always a bug. Enable the new configuration option
  MBEDTLS_CHECK_RETURN_WARNING to get warnings for other functions. This
  is currently implemented in the AES, DES and md modules, and will be
  extended to other modules in the future.
  * Add missing PSA macros declared by PSA Crypto API 1.0.0:
  PSA_ALG_IS_SIGN_HASH, PSA_ALG_NONE, PSA_HASH_BLOCK_LENGTH, PSA_KEY_ID_NULL.
  * Add new API mbedtls_ct_memcmp for constant time buffer comparison.
  * Add PSA API definition for ARIA.
  Security
  * Zeroize several intermediate variables used to calculate the expected
  value when verifying a MAC or AEAD tag. This hardens the library in
  case the value leaks through a memory disclosure vulnerability. For
  example, a memory disclosure vulnerability could have allowed a
  man-in-the-middle to inject fake ciphertext into a DTLS connection.
  * In psa_cipher_generate_iv() and psa_cipher_encrypt(), do not read back
  from the output buffer. This fixes a potential policy bypass or decryption
  oracle vulnerability if the output buffer is in memory that is shared with
  an untrusted application.
  * Fix a double-free that happened after mbedtls_ssl_set_session() or
  mbedtls_ssl_get_session() failed with MBEDTLS_ERR_SSL_ALLOC_FAILED
  (out of memory). After that, calling mbedtls_ssl_session_free()
  and mbedtls_ssl_free() would cause an internal session buffer to
  be free()'d twice.
  Bugfix
  * Stop using reserved identifiers as local variables. Fixes #4630.
  * The GNU makefiles invoke python3 in preference to python except on Windows.
  * The check was accidentally not performed when cross-compiling for Windows
  on Linux. Fix this. Fixes #4774.
  * Prevent divide by zero if either of PSA_CIPHER_ENCRYPT_OUTPUT_SIZE() or
  PSA_CIPHER_UPDATE_OUTPUT_SIZE() were called using an asymmetric key type.
  * Fix a parameter set but unused in psa_crypto_cipher.c. Fixes #4935.
  * Don't use the obsolete header path sys/fcntl.h in unit tests.
  These header files cause compilation errors in musl.
  Fixes #4969.
  * Fix missing constraints on x86_64 and aarch64 assembly code
  for bignum multiplication that broke some bignum operations with
  (at least) Clang 12.
  Fixes #4116, #4786, #4917, #4962.
  * Fix mbedtls_cipher_crypt: AES-ECB when MBEDTLS_USE_PSA_CRYPTO is enabled.
  * Failures of alternative implementations of AES or DES single-block
  functions enabled with MBEDTLS_AES_ENCRYPT_ALT, MBEDTLS_AES_DECRYPT_ALT,
  MBEDTLS_DES_CRYPT_ECB_ALT or MBEDTLS_DES3_CRYPT_ECB_ALT were ignored.
  This does not concern the implementation provided with Mbed TLS,
  where this function cannot fail, or full-module replacements with
  MBEDTLS_AES_ALT or MBEDTLS_DES_ALT. Reported by Armelle Duboc in #1092.
  * Some failures of HMAC operations were ignored. These failures could only
  happen with an alternative implementation of the underlying hash module.
  * Fix the error returned by psa_generate_key() for a public key. Fixes #4551.
  * Fix the build of sample programs when neither MBEDTLS_ERROR_C nor
  MBEDTLS_ERROR_STRERROR_DUMMY is enabled.
  * Fix PSA_ALG_RSA_PSS verification accepting an arbitrary salt length.
  This algorithm now accepts only the same salt length for verification
  that it produces when signing, as documented. Use the new algorithm
  PSA_ALG_RSA_PSS_ANY_SALT to accept any salt length. Fixes #4946.
  * The existing predicate macro name PSA_ALG_IS_HASH_AND_SIGN is now reserved
  for algorithm values that fully encode the hashing step, as per the PSA
  Crypto API specification. This excludes PSA_ALG_RSA_PKCS1V15_SIGN_RAW and
  PSA_ALG_ECDSA_ANY. The new predicate macro PSA_ALG_IS_SIGN_HASH covers
  all algorithms that can be used with psa_{sign,verify}_hash(), including
  these two.
  * Fix issue in Makefile on Linux with SHARED=1, that caused shared libraries
  not to list other shared libraries they need.
  * Fix a bug in mbedtls_gcm_starts() when the bit length of the iv
  exceeds 2^32. Fixes #4884.
  * Fix an uninitialized variable warning in test_suite_ssl.function with GCC
  version 11.
  * Fix the build when no SHA2 module is included. Fixes #4930.
  * Fix the build when only the bignum module is included. Fixes #4929.
  * Fix a potential invalid pointer dereference and infinite loop bugs in
  pkcs12 functions when the password is empty. Fix the documentation to
  better describe the inputs to these functions and their possible values.
  Fixes #5136.
  * The key usage flags PSA_KEY_USAGE_SIGN_MESSAGE now allows the MAC
  operations psa_mac_compute() and psa_mac_sign_setup().
  * The key usage flags PSA_KEY_USAGE_VERIFY_MESSAGE now allows the MAC
  operations psa_mac_verify() and psa_mac_verify_setup().
  Changes
  * Set config option MBEDTLS_TLS_DEFAULT_ALLOW_SHA1_IN_KEY_EXCHANGE to be
  disabled by default.
  * Improve the performance of base64 constant-flow code. The result is still
  slower than the original non-constant-flow implementation, but much faster
  than the previous constant-flow implementation. Fixes #4814.
  * Indicate in the error returned if the nonce length used with
  ChaCha20-Poly1305 is invalid, and not just unsupported.
  * The mbedcrypto library includes a new source code module constant_time.c,
  containing various functions meant to resist timing side channel attacks.
  * This module does not have a separate configuration option, and functions
  from this module will be included in the build as required. Currently
  most of the interface of this module is private and may change at any
  time.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1642420800">- Fix baselib.conf</changelog>
  <changelog author="Alexander Bergmann &lt;abergmann@suse.com&gt;" date="1671624000">- Fix potential heap buffer overread and overwrite in DTLS if
  MBEDTLS_SSL_DTLS_CONNECTION_ID is enabled and
  MBEDTLS_SSL_CID_IN_LEN_MAX &gt; 2 * MBEDTLS_SSL_CID_OUT_LEN_MAX.
  (bsc#1206576, CVE-2022-46393).
  Add: mbedtls-CVE-2022-46393.patch</changelog>
</package>
<package pkgid="552570c17d55869f4d7a20680727d47496e70b1e82ed72b1f88e4a42b0ddeb29" name="libmbedx509-1" arch="ppc64le">
  <version epoch="0" ver="2.28.0" rel="bp154.2.3.1"/>
  <changelog author="mpluskal@suse.com" date="1531137600">- Update to version 2.11.0:
  * Features
    + Added support for the XTS block cipher mode with AES (AES-XTS). Contributed by Aorimn in pull request #414.
    + Implemented the HMAC-based extract-and-expand key derivation function (HKDF) per RFC 5869. Contributed by Thomas Fossati.
    + For TLS servers, added support for offloading private key operations to an external cryptoprocessor. Private key operations can be asynchronous to allow non-blocking operation of the TLS server stack.
    + Added support for ARIA cipher (RFC 5794) and associated TLS ciphersuites (RFC 6209). ARIA is disabled by default. To enable, see MBEDTLS_ARIA_C in config.h.
    + Added support for the CCM* block cipher mode as defined in IEEE Std 802.15.4.
    + Added an additional block mode, OFB (Output Feedback) per NIST SP 800-38a, to the AES module and cipher abstraction module.
  * API Changes
    + Mbed TLS 2.11.0 maintains source code compatibility with the last minor version, Mbed TLS 2.9.0, but extends the interface with additional capabilities. Mbed TLS 2.11.0 modifies the ABI and increases the SOVERSION.
  * Bugfix
    + Fixed the cert_write example to handle certificates signed with elliptic curves as well as RSA. Fixes #777 found by dbedev.
    + Fixed the redefinition of _WIN32_WINNT, to avoid overriding a definition used by user applications. Found and fixed by Fabio Alessandrelli.
    + Fixed compilation warnings with the IAR toolchain on 32-bit platforms. Reported by rahmanih in #683.
    + Fixed an issue with MicroBlaze support in bn_mul.h which was causing the build to fail. Found by zv-io. Fixes #1651.
    + Fixed braces in mbedtls_memory_buffer_alloc_status(). Found by sbranden in #552.
    + Added the macro MBEDTLS_X509_MAX_FILE_PATH_LEN that enables the user to configure the maximum length of a file path that can be buffered when calling mbedtls_x509_crt_parse_path(). Fixes #492.
    + Fixed redundant declaration of mbedtls_ssl_list_ciphersuites. Raised by TrinityTonic in #1359.
- Changes for version 2.9.0:
  + Security
    + Fixed an issue in the X.509 module which could lead to a buffer overread during certificate validation. Additionally, the issue could also lead to unnecessary callback checks being made or to some validation checks to be omitted. The overread could be triggered remotely, while the other issues would require a non DER-compliant certificate to be correctly signed by a trusted CA, or a trusted CA with a non DER-compliant certificate. Found by luocm. Fixes #825.
    + Fixed the buffer length assertion in the ssl_parse_certificate_request() function which could lead to an arbitrary overread of the message buffer. The overreads could be caused by receiving a malformed algorithms section which was too short. In builds with debug output, this overread data was output with the debug data.
    + Fixed a client-side bug in the validation of the server's ciphersuite choice which could potentially lead to the client accepting a ciphersuite it didn't offer or a ciphersuite that could not be used with the TLS or DTLS version chosen by the server. This could lead to corruption of internal data structures for some configurations.
  * Features
    + Added an option of MBEDTLS_AES_FEWER_TABLES, to dynamically compute smaller AES tables during runtime, thereby reducing the RAM/ROM footprint by ~6KiB. Suggested and contributed by jkivilin.
    + Added initial support for Curve448 (RFC 7748). So far only mbedtls_ecp_mul() and ECDH primitive functions (mbedtls_ecdh_gen_public(), mbedtls_ecdh_compute_shared()) are supported for now. Contributed by Nicholas Wilson.
  * API Changes
    + Mbed TLS 2.9.0 maintains source code and binary compatibility with the last minor version, Mbed TLS 2.8.0, but extends the interface with additional capabilities.
    + Extended the API with the function of mbedtls_net_poll() to allow user applications to wait for a network context to become ready before reading or writing.
    + Added the function mbedtls_ssl_check_pending() to the public API to allow a check for whether more more data is pending to be processed in the internal message buffers. This function is necessary to determine the underlying transport when event-driven IO is used.
  * Bugfix
    + Fixed a spurious uninitialized variable warning in cmac.c. Fix independently contributed by Brian J Murray and David Brown.
    + Added missing dependencies in test suites that led to build failures in configurations that omit certain hashes or public-key algorithms. Fixes #1040.
    + Fixed a C89 incompatibility issue in benchmark.c. Contributed by Brendan Shanks. Fixes #1353.
    + Added missing dependencies for MBEDTLS_HAVE_TIME_DATE and MBEDTLS_VERSION_FEATURES in some test suites. Contributed by Deomid Ryabkov. Fixes #1299, #1475.
    + Fixed the Makefile build process for building shared libraries on Mac OS X. Fixed by mnacamura.
    + Fixed parsing of PKCS#8 encoded Elliptic Curve keys. Previously Mbed TLS was unable to parse keys which had only the optional parameters field of the ECPrivateKey structure. Found by Jethro Beekman, fixed in #1379.
    + Added an optimisation to return the plaintext data more quickly on unpadded CBC decryption, as stated in the mbedtls_cipher_update() documentation. Contributed by Andy Leiserson.
    + Fixed the overriding and ignoring of return values when parsing and writing to a file in the pk_sign program. Found by kevlut in #1142.
    + Added restrictions to the usage of the error code MBEDTLS_ERR_SSL_WANT_READ to situations where data needs to be fetched from the underlying transport in order to make progress. Previously, this error code was also occasionally returned when unexpected messages were being discarded, ignoring that further messages could potentially already be pending to be processed in the internal buffers; these cases led to deadlocks when event-driven I/O was used. Found and reported by Hubert Mis in #772.
    + Fixed buffer length assertions in the ssl_parse_certificate_request() function which led to a potential one byte overread of the message buffer.
    + Fixed invalid buffer sizes being passed to zlib during record compression and decompression.
    + Raised the soversion of libmbedcrypto to match the soversion of the maintained 2.7 branch. The soversion was increased in Mbed TLS version 2.7.1 to reflect breaking changes in that release, but the increment was missed in 2.8.0 and later releases outside of the 2.7 branch.</changelog>
  <changelog author="mpluskal@suse.com" date="1535025600">- Update to version 2.12.0:
  * Security
    + Fixed a vulnerability in the TLS ciphersuites based on use of CBC and SHA-384 in DTLS/TLS 1.0 to 1.2, that allowed an active network attacker to partially recover the plaintext of messages under certains conditions by exploiting timing side-channels.
    + Fixed a vulnerability in TLS ciphersuites based on CBC, in DTLS/TLS 1.0 to 1.2, that allowed a local attacker, with the ability to execute code on the local machine as well as to manipulate network packets, to partially recover the plaintext of messages under certain conditions by using a cache attack targetting an internal MD/SHA buffer.
    + Added a counter-measure against a vulnerability in TLS ciphersuites based on CBC, in DTLS/TLS 1.0 to 1.2, that allowed a local attacker with the ability to execute code on the local machine as well as manipulate network packets, to partially recover the plaintext of messages certain conditions (see previous entry) by using a cache attack targeting the SSL input record buffer.
  * Features
    + Added new cryptographic primitives, the stream cipher Chacha20, one-time authenticator Poly1305 and AEAD construct Chacha20-Poly1305, as defined in RFC 7539. Contributed by Daniel King.
    + Added support for the CHACHA20-POLY1305 ciphersuites from RFC 7905.
    + Made the receive and transmit buffers independently configurable in size, for situations where the outgoing buffer can be fixed at a smaller size than the incoming buffer
    + Added support for the AES based key wrapping modes defined by NIST SP 800-38F algorithms KW and KWP and by RFC's 3394 and 5649.
    + Added platform support for the Haiku OS.
  * Bugfix
    + Fixed the key_app_writer example which was creating an invalid ASN.1 tag by writing an additional leading zero byte. Found by Aryeh R. #1257.
    + Fixed a C++ compilation error, caused by a variable named new. Found and fixed by Hirotaka Niisato. #1783.
    + Fixed the "no symbols" warning issued by ranlib when building on Mac OS X. Fix contributed by tabascoeye.
    + Clarified documentation for mbedtls_ssl_write() to include 0 as a valid return value. Found by @davidwu2000. #839.
    + Fixed a memory leak in mbedtls_x509_csr_parse(). Found and fixed by catenacyber, Philippe Antoine. #1623.
    + Added length checks to some TLS parsing functions. Found and fixed by Philippe Antoine from Catena cyber. #1663.
    + Remove unused headers included in x509.c. Found by Chris Hanson and fixed by Brendan Shanks. #992.
    + Fixed compilation error when MBEDTLS_ARC4_C is disabled and MBEDTLS_CIPHER_NULL_CIPHER is enabled. Found by TrinityTonic in #1719.
    + Fixed the inline assembly for the MPI multiply helper function for i386 and i386 with SSE2. Found by László Langó. #1550.
    + Fixed the namespacing in header files. Remove the mbedtls namespacing in the #include in the header files. #857.
    + Fixed a compiler warning of 'use before initialisation' in mbedtls_pk_parse_key(). Found by Martin Boye Petersen and fixed by Dawid Drozd.#1098.
    + Fixed decryption of zero length messages (which contain all padding) when a CBC based ciphersuite was used together with Encrypt-then-MAC.
    + Fixed the ssl_client2 example to send application data with 0-length content when the request_size argument is set to 0 as stated in the documentation. #1833.
    + Corrected the documentation for mbedtls_ssl_get_session(). This API has deep copy of the session, and the peer certificate is not lost. #926.
    + Fixed issues when building to the C99 standard, using -std=c99. Fixed by Nick Wilson.
  * Changes
    + Fails when receiving a TLS alert message with an invalid length, or invalid zero-length messages when using TLS 1.2. Contributed by Espressif Systems.
    + Changed the default behaviour of mbedtls_hkdf_extract() to return an error when calling with a NULL salt and non-zero salt length. Contributed by Brian J Murray
    + Change the shebang line in Perl scripts to look up perl in the PATH. Contributed by fbrosson.
    + Allow overriding the time on Windows via the platform-time abstraction. Fixed by Nick Wilson.
    + Use gmtime_r/gmtime_s for thread-safety. Fixed by Nick Wilson.</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1544529600">- Update to version 2.14.1: [bsc#1118727, CVE-2018-19608]
  Security
  * Fix timing variations and memory access variations in RSA PKCS#1 v1.5
    decryption that could lead to a Bleichenbacher-style padding oracle
    attack. In TLS, this affects servers that accept ciphersuites based on
    RSA decryption (i.e. ciphersuites whose name contains RSA but not
    (EC)DH(E)). Discovered by Eyal Ronen (Weizmann Institute),  Robert Gillham
    (University of Adelaide), Daniel Genkin (University of Michigan),
    Adi Shamir (Weizmann Institute), David Wong (NCC Group), and Yuval Yarom
    (University of Adelaide, Data61). The attack is described in more detail
    in the paper available here: http://cat.eyalro.net/cat.pdf  CVE-2018-19608
  * In mbedtls_mpi_write_binary(), don't leak the exact size of the number
    via branching and memory access patterns. An attacker who could submit
    a plaintext for RSA PKCS#1 v1.5 decryption but only observe the timing
    of the decryption and not its result could nonetheless decrypt RSA
    plaintexts and forge RSA signatures. Other asymmetric algorithms may
    have been similarly vulnerable. Reported by Eyal Ronen, Robert Gillham,
    Daniel Genkin, Adi Shamir, David Wong and Yuval Yarom.
  * Wipe sensitive buffers on the stack in the CTR_DRBG and HMAC_DRBG
    modules.
  API Changes
  * The new functions mbedtls_ctr_drbg_update_ret() and
    mbedtls_hmac_drbg_update_ret() are similar to mbedtls_ctr_drbg_update()
    and mbedtls_hmac_drbg_update() respectively, but the new functions
    report errors whereas the old functions return void. We recommend that
    applications use the new functions.
- Version 2.14.0:
  Security
  * Fix overly strict DN comparison when looking for CRLs belonging to a
    particular CA. This previously led to ignoring CRLs when the CRL's issuer
    name and the CA's subject name differed in their string encoding (e.g.,
    one using PrintableString and the other UTF8String) or in the choice of
    upper and lower case. Reported by Henrik Andersson of Bosch GmbH in issue
    [#1784].
  * Fix a flawed bounds check in server PSK hint parsing. In case the
    incoming message buffer was placed within the first 64KiB of address
    space and a PSK-(EC)DHE ciphersuite was used, this allowed an attacker
    to trigger a memory access up to 64KiB beyond the incoming message buffer,
    potentially leading to an application crash or information disclosure.
  * Fix mbedtls_mpi_is_prime() to use more rounds of probabilistic testing. The
    previous settings for the number of rounds made it practical for an
    adversary to construct non-primes that would be erroneously accepted as
    primes with high probability. This does not have an impact on the
    security of TLS, but can matter in other contexts with numbers chosen
    potentially by an adversary that should be prime and can be validated.
    For example, the number of rounds was enough to securely generate RSA key
    pairs or Diffie-Hellman parameters, but was insufficient to validate
    Diffie-Hellman parameters properly.
    See "Prime and Prejudice" by by Martin R. Albrecht and Jake Massimo and
    Kenneth G. Paterson and Juraj Somorovsky.
  Features
  * Add support for temporarily suspending expensive ECC computations after
    some configurable amount of operations. This is intended to be used in
    constrained, single-threaded systems where ECC is time consuming and can
    block other operations until they complete. This is disabled by default,
    but can be enabled by MBEDTLS_ECP_RESTARTABLE at compile time and
    configured by mbedtls_ecp_set_max_ops() at runtime. It applies to the new
    xxx_restartable functions in ECP, ECDSA, PK and X.509 (CRL not supported
    yet), and to existing functions in ECDH and SSL (currently only
    implemented client-side, for ECDHE-ECDSA ciphersuites in TLS 1.2,
    including client authentication).
  * Add support for Arm CPU DSP extensions to accelerate asymmetric key
    operations. On CPUs where the extensions are available, they can accelerate
    MPI multiplications used in ECC and RSA cryptography. Contributed by
    Aurelien Jarno.
  * Extend RSASSA-PSS signature to allow a smaller salt size. Previously, PSS
    signature always used a salt with the same length as the hash, and returned
    an error if this was not possible. Now the salt size may be up to two bytes
    shorter. This allows the library to support all hash and signature sizes
    that comply with FIPS 186-4, including SHA-512 with a 1024-bit key.
  * Add support for 128-bit keys in CTR_DRBG. Note that using keys shorter
    than 256 bits limits the security of generated material to 128 bits.
  API Changes
  * Add a common error code of `MBEDTLS_ERR_PLATFORM_FEATURE_UNSUPPORTED` for
    a feature that is not supported by underlying alternative
    implementations implementing cryptographic primitives. This is useful for
    hardware accelerators that don't implement all options or features.
  New deprecations
  * All module specific errors following the form
    MBEDTLS_ERR_XXX_FEATURE_UNAVAILABLE that indicate a feature is not
    supported are deprecated and are now replaced by the new equivalent
    platform error.
  * All module specific generic hardware acceleration errors following the
    form MBEDTLS_ERR_XXX_HW_ACCEL_FAILED that are deprecated and are replaced
    by the equivalent plaform error.
  * Deprecate the function mbedtls_mpi_is_prime() in favor of
    mbedtls_mpi_is_prime_ext() which allows specifying the number of
    Miller-Rabin rounds.
  Bugfix
  * Fix wrong order of freeing in programs/ssl/ssl_server2 example
    application leading to a memory leak in case both
    MBEDTLS_MEMORY_BUFFER_ALLOC_C and MBEDTLS_MEMORY_BACKTRACE are set.
    Fixes #2069.
  * Fix a bug in the update function for SSL ticket keys which previously
    invalidated keys of a lifetime of less than a 1s. Fixes #1968.
  * Fix failure in hmac_drbg in the benchmark sample application, when
    MBEDTLS_THREADING_C is defined. Found by TrinityTonic, #1095
  * Fix a bug in the record decryption routine ssl_decrypt_buf()
    which lead to accepting properly authenticated but improperly
    padded records in case of CBC ciphersuites using Encrypt-then-MAC.
  * Fix memory leak and freeing without initialization in the example
    program programs/x509/cert_write. Fixes #1422.
  * Ignore IV in mbedtls_cipher_set_iv() when the cipher mode is
    MBEDTLS_MODE_ECB. Found by ezdevelop. Fixes #1091.
  * Zeroize memory used for buffering or reassembling handshake messages
    after use.
  * Use `mbedtls_platform_zeroize()` instead of `memset()` for zeroization
    of sensitive data in the example programs aescrypt2 and crypt_and_hash.
  * Change the default string format used for various X.509 DN attributes to
    UTF8String. Previously, the use of the PrintableString format led to
    wildcards and non-ASCII characters being unusable in some DN attributes.
    Reported by raprepo in #1860 and by kevinpt in #468. Fix contributed by
    Thomas-Dee.
  * Fix compilation failure for configurations which use compile time
    replacements of standard calloc/free functions through the macros
    MBEDTLS_PLATFORM_CALLOC_MACRO and MBEDTLS_PLATFORM_FREE_MACRO.
    Reported by ole-de and ddhome2006. Fixes #882, #1642 and #1706.
  Changes
  * Removed support for Yotta as a build tool.
  * Add tests for session resumption in DTLS.
  * Close a test gap in (D)TLS between the client side and the server side:
    test the handling of large packets and small packets on the client side
    in the same way as on the server side.
  * Change the dtls_client and dtls_server samples to work by default over
    IPv6 and optionally by a build option over IPv4.
  * Change the use of Windows threading to use Microsoft Visual C++ runtime
    calls, rather than Win32 API calls directly. This is necessary to avoid
    conflict with C runtime usage. Found and fixed by irwir.
  * Remember the string format of X.509 DN attributes when replicating
    X.509 DNs. Previously, DN attributes were always written in their default
    string format (mostly PrintableString), which could lead to CRTs being
    created which used PrintableStrings in the issuer field even though the
    signing CA used UTF8Strings in its subject field; while X.509 compliant,
    such CRTs were rejected in some applications, e.g. some versions of
    Firefox, curl and GnuTLS. Reported in #1033 by Moschn. Fix contributed by
    Thomas-Dee.
  * Improve documentation of mbedtls_ssl_get_verify_result().
    Fixes #517 reported by github-monoculture.
  * Add MBEDTLS_MPI_GEN_PRIME_FLAG_LOW_ERR flag to mbedtls_mpi_gen_prime() and
    use it to reduce error probability in RSA key generation to levels mandated
    by FIPS-186-4.
- Version 2.13.1
  API Changes
  * Extend the platform module with an abstraction mbedtls_platform_gmtime_r()
    whose implementation should behave as a thread-safe version of gmtime().
    This allows users to configure such an implementation at compile time when
    the target system cannot be deduced automatically, by setting the option
    MBEDTLS_PLATFORM_GMTIME_R_ALT. At this stage Mbed TLS is only able to
    automatically select implementations for Windows and POSIX C libraries.
  Bugfix
  * Fix build failures on platforms where only gmtime() is available but
    neither gmtime_r() nor gmtime_s() are present. Fixes #1907.
- Version 2.13.0
  Security
  * Fix an issue in the X.509 module which could lead to a buffer overread
    during certificate extensions parsing. In case of receiving malformed
    input (extensions length field equal to 0), an illegal read of one byte
    beyond the input buffer is made. Found and analyzed by Nathan Crandall.
  Features
  * Add support for fragmentation of outgoing DTLS handshake messages. This
    is controlled by the maximum fragment length as set locally or negotiated
    with the peer, as well as by a new per-connection MTU option, set using
    mbedtls_ssl_set_mtu().
  * Add support for auto-adjustment of MTU to a safe value during the
    handshake when flights do not get through (RFC 6347, section 4.1.1.1,
    last paragraph).
  * Add support for packing multiple records within a single datagram,
    enabled by default.
  * Add support for buffering out-of-order handshake messages in DTLS.
    The maximum amount of RAM used for this can be controlled by the
    compile-time constant MBEDTLS_SSL_DTLS_MAX_BUFFERING defined
    in mbedtls/config.h.
  API Changes
  * Add function mbedtls_ssl_set_datagram_packing() to configure
    the use of datagram packing (enabled by default).
  Bugfix
  * Fix a potential memory leak in mbedtls_ssl_setup() function. An allocation
    failure in the function could lead to other buffers being leaked.
  * Fixes an issue with MBEDTLS_CHACHAPOLY_C which would not compile if
    MBEDTLS_ARC4_C and MBEDTLS_CIPHER_NULL_CIPHER weren't also defined. #1890
  * Fix a memory leak in ecp_mul_comb() if ecp_precompute_comb() fails.
    Fix contributed by Espressif Systems.
  * Add ecc extensions only if an ecc based ciphersuite is used.
    This improves compliance to RFC 4492, and as a result, solves
    interoperability issues with BouncyCastle. Raised by milenamil in #1157.
  * Replace printf with mbedtls_printf in the ARIA module. Found by
    TrinityTonic in #1908.
  * Fix potential use-after-free in mbedtls_ssl_get_max_frag_len()
    and mbedtls_ssl_get_record_expansion() after a session reset. Fixes #1941.
  * Fix a bug that caused SSL/TLS clients to incorrectly abort the handshake
    with TLS versions 1.1 and earlier when the server requested authentication
    without providing a list of CAs. This was due to an overly strict bounds
    check in parsing the CertificateRequest message,
    introduced in Mbed TLS 2.12.0. Fixes #1954.
  * Fix a miscalculation of the maximum record expansion in
    mbedtls_ssl_get_record_expansion() in case of ChachaPoly ciphersuites,
    or CBC ciphersuites in (D)TLS versions 1.1 or higher. Fixes #1913, #1914.
  * Fix undefined shifts with negative values in certificates parsing
    (found by Catena cyber using oss-fuzz)
  * Fix memory leak and free without initialization in pk_encrypt
    and pk_decrypt example programs. Reported by Brace Stout. Fixes #1128.
  * Remove redundant else statement. Raised by irwir. Fixes #1776.
  Changes
  * Copy headers preserving timestamps when doing a "make install".
    Contributed by xueruini.
  * Allow the forward declaration of public structs. Contributed by Dawid
    Drozd. Fixes #1215 raised by randombit.
  * Improve compatibility with some alternative CCM implementations by using
    CCM test vectors from RAM.
  * Add support for buffering of out-of-order handshake messages.
  * Add warnings to the documentation of the HKDF module to reduce the risk
    of misusing the mbedtls_hkdf_extract() and mbedtls_hkdf_expand()
    functions. Fixes #1775. Reported by Brian J. Murray.</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1544529601">- Library package version bumped to libmbedtls12</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1546862400">- Update to version 2.16.0:
  Features
  * Add a new config.h option of MBEDTLS_CHECK_PARAMS that enables validation of parameters in the API. This allows detection of obvious misuses of the API, such as passing NULL pointers. The API of existing functions hasn't changed, but requirements on parameters have been made more explicit in the documentation. See the corresponding API documentation for each function to see for which parameter values it is defined. This feature is disabled by default. See its API documentation in config.h for additional steps you have to take when enabling it.
  API Changes
  * The following functions in the random generator modules have been deprecated and replaced as shown below. The new functions change the return type from void to int to allow returning error codes when using MBEDTLS_&lt;MODULE&gt;_ALT for the underlying AES or message digest primitive. Fixes #1798. mbedtls_ctr_drbg_update() -&gt; mbedtls_ctr_drbg_update_ret() mbedtls_hmac_drbg_update() -&gt; mbedtls_hmac_drbg_update_ret()
  * Extend ECDH interface to enable alternative implementations.
  * Deprecate error codes of the form MBEDTLS_ERR_xxx_INVALID_KEY_LENGTH for ARIA, CAMELLIA and Blowfish. These error codes will be replaced by the more generic per-module error codes MBEDTLS_ERR_xxx_BAD_INPUT_DATA.
  * Additional parameter validation checks have been added for the following modules - AES, ARIA, Blowfish, CAMELLIA, CCM, GCM, DHM, ECP, ECDSA, ECDH, ECJPAKE, SHA, Chacha20 and Poly1305, cipher, pk, RSA, and MPI. Where modules have had parameter validation added, existing parameter checks may have changed. Some modules, such as Chacha20 had existing parameter validation whereas other modules had little. This has now been changed so that the same level of validation is present in all modules, and that it is now optional with the MBEDTLS_CHECK_PARAMS flag which by default is off. That means that checks which were previously present by default will no longer be.
  New deprecations
  * Deprecate mbedtls_ctr_drbg_update() and mbedtls_hmac_drbg_update() in favor of functions that can return an error code.
  Bugfix
  * Fix for Clang, which was reporting a warning for the bignum.c inline assembly for AMD64 targets creating string literals greater than those permitted by the ISO C99 standard. Found by Aaron Jones. Fixes #482.
  * Fix runtime error in mbedtls_platform_entropy_poll() when run through qemu user emulation. Reported and fix suggested by randombit. Fixes #1212.
  * Fix an unsafe bounds check when restoring an SSL session from a ticket. This could lead to a buffer overflow, but only in case ticket authentication was broken. Reported and fix suggested by Guido Vranken in #659.
  * Add explicit integer to enumeration type casts to example program programs/pkey/gen_key which previously led to compilation failure on some toolchains. Reported by phoenixmcallister. Fixes #2170.
  * Clarify documentation of mbedtls_ssl_set_own_cert() regarding the absence of check for certificate/key matching. Reported by Attila Molnar, #507.
  * Fix double initialization of ECC hardware that made some accelerators hang.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1567512000">- Update to version 2.16.2:
  * Security improvements and bugfixes
- Use ninja to for build</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1573646400">- Update to version 2.16.3:
  * Security improvements and bugfixes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1585828800">- Update to version 2.16.5:
  * Security improvements and bugfixes</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597665600">- update to 2.23.0:
  a lot of changes see https://github.com/ARMmbed/mbedtls/releases/tag/v2.23.0
  * Fix a side channel vulnerability in modular exponentiation that could reveal an RSA private key used in a secure enclave. Noticed by Sangho Lee, Ming-Wei Shih, Prasun Gera, Taesoo Kim and Hyesoon Kim (Georgia Institute of Technology); and Marcus Peinado (Microsoft Research). Reported by Raoul Strackx (Fortanix) in #3394.
  * Fix side channel in mbedtls_ecp_check_pub_priv() and mbedtls_pk_parse_key() / mbedtls_pk_parse_keyfile() (when loading a private key that didn't include the uncompressed public key), as well as mbedtls_ecp_mul() / mbedtls_ecp_mul_restartable() when called with a NULL f_rng argument. An attacker with access to precise enough timing and memory access information (typically an untrusted operating system attacking a secure enclave) could fully recover the ECC private key. Found and reported by Alejandro Cabrera Aldaya and Billy Brumley.
  * Fix issue in Lucky 13 counter-measure that could make it ineffective when hardware accelerators were used (using one of the MBEDTLS_SHAxxx_ALT macros). This would cause the original Lucky 13 attack to be possible in those configurations, allowing an active network attacker to recover plaintext after repeated timing measurements under some conditions. Reported and fix suggested by Luc Perneel in #3246.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1598875200">- Do not run testsuite in parallel - its not reliable</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1599480000">- Add workaround for failing builds (Python not found) due to
  https://gitlab.kitware.com/cmake/cmake/-/issues/21168</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1599652800">- update to 2.24.0:
  * see https://github.com/ARMmbed/mbedtls/releases/tag/v2.24.0
  * Fix a vulnerability in the verification of X.509 certificates when matching
  the expected common name (the cn argument of mbedtls_x509_crt_verify())
  with the actual certificate name: when the subjecAltName extension is
  present, the expected name was compared to any name in that extension
  regardless of its type. This means that an attacker could for example
  impersonate a 4-bytes or 16-byte domain by getting a certificate for the
  corresponding IPv4 or IPv6 (this would require the attacker to control that
  IP address, though). Similar attacks using other subjectAltName name types
  might be possible.
  * When checking X.509 CRLs, a certificate was only considered as revoked if
  its revocationDate was in the past according to the local clock if
  available. In particular, on builds without MBEDTLS_HAVE_TIME_DATE,
  certificates were never considered as revoked. On builds with
  MBEDTLS_HAVE_TIME_DATE, an attacker able to control the local clock (for
  example, an untrusted OS attacking a secure enclave) could prevent
  revocation of certificates via CRLs. Fixed by no longer checking the
  revocationDate field, in accordance with RFC 5280. Reported by yuemonangong
  in #3340. Reported independently and fixed by Raoul Strackx and Jethro
  * In (D)TLS record decryption, when using a CBC ciphersuites without the
  Encrypt-then-Mac extension, use constant code flow memory access patterns
  to extract and check the MAC. This is an improvement to the existing
  countermeasure against Lucky 13 attacks. The previous countermeasure was
  effective against network-based attackers, but less so against local
  attackers. The new countermeasure defends against local attackers, even if
  they have access to fine-grained measurements. In particular, this fixes a
  local Lucky 13 cache attack found and reported by Tuba Yavuz, Farhaan
  Fowze, Ken (Yihan) Bai, Grant Hernandez, and Kevin Butler (University of
  Florida) and Dave Tian (Purdue University).
  * Fix side channel in RSA private key operations and static (finite-field)
  Diffie-Hellman. An adversary with precise enough timing and memory access
  information (typically an untrusted operating system attacking a secure
  enclave) could bypass an existing counter-measure (base blinding) and
  potentially fully recover the private key.
  * Fix a 1-byte buffer overread in mbedtls_x509_crl_parse_der(). Credit to
  OSS-Fuzz for detecting the problem and to Philippe Antoine for pinpointing
  the problematic code.
  * Zeroising of plaintext buffers in mbedtls_ssl_read() to erase unused
  application data from memory.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1608638400">- update to 2.25.0:
  * This release of Mbed TLS provides bug fixes, minor enhancements and new
  features. This release includes fixes for security issues.
  * see https://github.com/ARMmbed/mbedtls/releases/tag/v2.25.0
  * The functions mbedtls_cipher_auth_encrypt() and
  mbedtls_cipher_auth_decrypt() would write past the minimum documented size
  of the output buffer when used with NIST_KW. As a result, code using those
  functions as documented with NIST_KW could have a buffer overwrite of up to
  15 bytes, with consequences ranging up to arbitrary code execution
  depending on the location of the output buffer.
  * Limit the size of calculations performed by mbedtls_mpi_exp_mod to
  MBEDTLS_MPI_MAX_SIZE to prevent a potential denial of service when generating
  Diffie-Hellman key pairs. Credit to OSS-Fuzz.
  * A failure of the random generator was ignored in mbedtls_mpi_fill_random(),
  which is how most uses of randomization in asymmetric cryptography (including
  key generation, intermediate value randomization and blinding) are implemented.
  This could cause failures or the silent use of non-random values. A random
  generator can fail if it needs reseeding and cannot not obtain entropy, or due
  to an internal failure (which, for Mbed TLS's own CTR_DRBG or HMAC_DRBG, can
  only happen due to a misconfiguration).
  * Fix a compliance issue whereby we were not checking the tag on the algorithm
  parameters (only the size) when comparing the signature in the description part
  of the cert to the real signature. This meant that a NULL algorithm parameters
  entry would look identical to an array of REAL (size zero) to the library and
  thus the certificate would be considered valid. However, if the parameters do
  not match in any way then the certificate should be considered invalid, and
  indeed OpenSSL marks these certs as invalid when mbedtls did not. Many thanks
  to guidovranken who found this issue via differential fuzzing and reported it
  in #3629.
  * Zeroising of local buffers and variables which are used for calculations in
  mbedtls_pkcs5_pbkdf2_hmac(), mbedtls_internal_sha*_process(),
  mbedtls_internal_md*_process() and mbedtls_internal_ripemd160_process()
  functions to erase sensitive data from memory. Reported by Johan Malmgren and
  Johan Uppman Bruce from Sectra.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1611057600">- Fix build for Leap targets
- Use upstream tarball name</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1616414400">- Update to 2.26.0: [bsc#1189589, CVE-2021-24119]
  * * This release of Mbed TLS provides bug fixes, minor enhancements and new
  features. This release includes fixes for security issues.
  * see https://github.com/ARMmbed/mbedtls/releases/tag/v2.26.0
- Fix build with patch from https://github.com/ARMmbed/mbedtls/pull/4237
  mbedtls-4237.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1618488000">-  Workaround for building with gcc-11 boo#1181876</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1626782400">- Update to 2.27.0:
  API changes:
  * Update AEAD output size macros to bring them in line with the PSA Crypto
    API version 1.0 spec. This version of the spec parameterizes them on the
    key type used, as well as the key bit-size in the case of
    PSA_AEAD_TAG_LENGTH.
    The old versions of these macros were renamed and deprecated as follows:
  - PSA_AEAD_TAG_LENGTH          -&gt; PSA_AEAD_TAG_LENGTH_1_ARG
  - PSA_AEAD_ENCRYPT_OUTPUT_SIZE -&gt; PSA_AEAD_ENCRYPT_OUTPUT_SIZE_2_ARG
  - PSA_AEAD_DECRYPT_OUTPUT_SIZE -&gt; PSA_AEAD_DECRYPT_OUTPUT_SIZE_2_ARG
  - PSA_AEAD_UPDATE_OUTPUT_SIZE  -&gt; PSA_AEAD_UPDATE_OUTPUT_SIZE_2_ARG
  - PSA_AEAD_FINISH_OUTPUT_SIZE  -&gt; PSA_AEAD_FINISH_OUTPUT_SIZE_1_ARG
  - PSA_AEAD_VERIFY_OUTPUT_SIZE  -&gt; PSA_AEAD_VERIFY_OUTPUT_SIZE_1_ARG
  * Implement one-shot cipher functions, psa_cipher_encrypt and
    psa_cipher_decrypt, according to the PSA Crypto API 1.0.0
    specification.
  Features:
  * Add mbedtls_rsa_rsassa_pss_sign_ext() function allowing to generate a
    signature with a specific salt length. This function allows to validate
    test cases provided in the NIST's CAVP test suite.
  * Added support for built-in driver keys through the PSA opaque crypto
    driver interface. Refer to the documentation of
    MBEDTLS_PSA_CRYPTO_BUILTIN_KEYS for more information.
  * Implement psa_sign_message() and psa_verify_message().
  * The new function mbedtls_mpi_random() generates a random value in a
    given range uniformly.
  * Implement psa_mac_compute() and psa_mac_verify() as defined in the
    PSA Cryptograpy API 1.0.0 specification.
  * MBEDTLS_ECP_MAX_BITS is now determined automatically from the configured
    curves and no longer needs to be configured explicitly to save RAM.
  Security
  * Fix a bias in the generation of finite-field Diffie-Hellman-Merkle (DHM)
    private keys and of blinding values for DHM and elliptic curves (ECP)
    computations.
  * Fix a potential side channel vulnerability in ECDSA ephemeral key generation.
    An adversary who is capable of very precise timing measurements could
    learn partial information about the leading bits of the nonce used for the
    signature, allowing the recovery of the private key after observing a
    large number of signature operations. This completes a partial fix in
    Mbed TLS 2.20.0.
  * It was possible to configure MBEDTLS_ECP_MAX_BITS to a value that is
    too small, leading to buffer overflows in ECC operations. Fail the build
    in such a case.
  * An adversary with access to precise enough information about memory
    accesses (typically, an untrusted operating system attacking a secure
    enclave) could recover an RSA private key after observing the victim
    performing a single private-key operation.
  * An adversary with access to precise enough timing information (typically, a
    co-located process) could recover a Curve25519 or Curve448 static ECDH key
    after inputting a chosen public key and observing the victim performing the
    corresponding private-key operation.
  Bugfix
  * Add printf function attributes to mbedtls_debug_print_msg to ensure we
    get printf format specifier warnings.
  * Fix premature fopen() call in mbedtls_entropy_write_seed_file which may
    lead to seed file corruption in the case where the path to the seed file is
    equal to MBEDTLS_PLATFORM_STD_NV_SEED_FILE.
  * PSA functions other than psa_open_key now return PSA_ERROR_INVALID_HANDLE
    rather than PSA_ERROR_DOES_NOT_EXIST for an invalid handle, bringing them
    in line with version 1.0.0 of the specification.
  * PSA functions creating a key now return PSA_ERROR_INVALID_ARGUMENT rather
    than PSA_ERROR_INVALID_HANDLE when the identifier specified for the key
    to create is not valid, bringing them in line with version 1.0.0 of the
    specification.
  * Fix some cases in the bignum module where the library constructed an
    unintended representation of the value 0 which was not processed
    correctly by some bignum operations. This could happen when
    mbedtls_mpi_read_string() was called on "-0", or when
    mbedtls_mpi_mul_mpi() and mbedtls_mpi_mul_int() was called with one of
    the arguments being negative and the other being 0.
  * Fix a bug in ECDSA that would cause it to fail when the hash is all-bits
    zero.
  * Fix a compilation error when MBEDTLS_ECP_RANDOMIZE_MXZ_ALT is
    defined.
  * Fix an incorrect error code when parsing a PKCS#8 private key.
  * In a TLS client, enforce the Diffie-Hellman minimum parameter size
    set with mbedtls_ssl_conf_dhm_min_bitlen() precisely. Before, the
    minimum size was rounded down to the nearest multiple of 8.
  * In library/net_sockets.c, _POSIX_C_SOURCE and _XOPEN_SOURCE are
    defined to specific values.  If the code is used in a context
    where these are already defined, this can result in a compilation
    error.  Instead, assume that if they are defined, the values will
    be adequate to build Mbed TLS.
  * The cipher suite TLS-RSA-WITH-CAMELLIA-256-GCM-SHA384 was not available
    when SHA-1 was disabled and was offered when SHA-1 was enabled but SHA-384
    was disabled. Fix the dependency.
  * Do not offer SHA384 cipher suites when SHA-384 is disabled.
  * With MBEDTLS_PSA_CRYPTO_C disabled, some functions were getting built
    nonetheless, resulting in undefined reference errors when building a
    shared library.
  * Fix test suite code on platforms where int32_t is not int, such as
    Arm Cortex-M.
  * Fix some issues affecting MBEDTLS_ARIA_ALT implementations: a misplaced
    directive in a header and a missing initialization in the self-test.
  * Fix a missing initialization in the Camellia self-test, affecting
    MBEDTLS_CAMELLIA_ALT implementations.
  * Restore the ability to configure PSA via Mbed TLS options to support RSA
    key pair operations but exclude RSA key generation. When MBEDTLS_GENPRIME
    is not defined PSA will no longer attempt to use mbedtls_rsa_gen_key().
  * Fix a regression introduced in 2.24.0 which broke (D)TLS CBC ciphersuites
    (when the encrypt-then-MAC extension is not in use) with some ALT
    implementations of the underlying hash (SHA-1, SHA-256, SHA-384), causing
    the affected side to wrongly reject valid messages.
  * Remove outdated check-config.h check that prevented implementing the
    timing module on Mbed OS.
  * Fix PSA_ALG_TLS12_PRF and PSA_ALG_TLS12_PSK_TO_MS being too permissive
    about missing inputs.
  * Fix a resource leak in a test suite with an alternative AES
    implementation.
  * Fix a crash in mbedtls_mpi_debug_mpi on a bignum having 0 limbs. This
    could notably be triggered by setting the TLS debug level to 3 or above
    and using a Montgomery curve for the key exchange.
  * psa_verify_hash() was relying on implementation-specific behavior of
    mbedtls_rsa_rsassa_pss_verify() and was causing failures in some _ALT
    implementations. This reliance is now removed.
  * Disallow inputs of length different from the corresponding hash when
    signing or verifying with PSA_ALG_RSA_PSS (The PSA Crypto API mandates
    that PSA_ALG_RSA_PSS uses the same hash throughout the algorithm.)
  * Fix a null pointer dereference when mbedtls_mpi_exp_mod() was called with
    A=0 represented with 0 limbs. Up to and including Mbed TLS 2.26, this bug
    could not be triggered by code that constructed A with one of the
    mbedtls_mpi_read_xxx functions (including in particular TLS code) since
    those always built an mpi object with at least one limb.
  * Fix mbedtls_mpi_gcd(G,A,B) when the value of B is zero. This had no
    effect on Mbed TLS's internal use of mbedtls_mpi_gcd(), but may affect
    applications that call mbedtls_mpi_gcd() directly.
  * The PSA API no longer allows the creation or destruction of keys with a
    read-only lifetime. The persistence level PSA_KEY_PERSISTENCE_READ_ONLY
    can now only be used as intended, for keys that cannot be modified through
    normal use of the API.
  * When MBEDTLS_PSA_CRYPTO_SPM is enabled, crypto_spe.h was not included
    in all the right places. Include it from crypto_platform.h, which is
    the natural place.
  * mbedtls_pk_sign() and mbedtls_pk_verify() and their extended and
    restartable variants now always honor the specified hash length if
    nonzero. Before, for RSA, hash_len was ignored in favor of the length of
    the specified hash algorithm.
  * Fix which alert is sent in some cases to conform to the
    applicable RFC: on an invalid Finished message value, an
    invalid max_fragment_length extension, or an
    unsupported extension used by the server.
  * Correct (change from 12 to 13 bytes) the value of the macro describing the
    maximum nonce length returned by psa_aead_generate_nonce().
  Changes
  * Add extra printf compiler warning flags to builds.
  * Fix memsan build false positive in x509_crt.c with Clang 11
  * Fix the setting of the read timeout in the DTLS sample programs.
  * Remove the AES sample application programs/aes/aescrypt2 which shows
    bad cryptographic practice.
  * Alternative implementations of CMAC may now opt to not support 3DES as a
    CMAC block cipher, and still pass the CMAC self test.
  * Remove configs/config-psa-crypto.h, which was identical to the default
    configuration except for having some extra cryptographic mechanisms
    enabled and for unintended differences. This configuration was primarily
    intended to demonstrate the PSA API, and lost most of its usefulness when
    MBEDTLS_PSA_CRYPTO_C became enabled by default.
  * When building the test suites with GNU make, invoke python3 or python, not
    python2, which is no longer supported upstream.
  * When using session cache based session resumption on the server,
    double-check that custom session cache implementations return
    sessions which are consistent with the negotiated ciphersuite
    and compression method.
  * Fix build failure on MinGW toolchain when __USE_MING_ANSI_STDIO is on.
    When that flag is on, standard GNU C printf format specifiers
    should be used.
  * Reduce the default value of MBEDTLS_ECP_WINDOW_SIZE. This reduces RAM usage
    during ECC operations at a negligible performance cost.
  * mbedtls_mpi_read_binary(), mbedtls_mpi_read_binary_le() and
    mbedtls_mpi_read_string() now construct an mbedtls_mpi object with 0 limbs
    when their input has length 0. Note that this is an implementation detail
    and can change at any time, so this change should be transparent, but it
    may result in mbedtls_mpi_write_binary() or mbedtls_mpi_write_string()
    now writing an empty string where it previously wrote one or more
    zero digits when operating from values constructed with an mpi_read
    function and some mpi operations.
  * Implicitly add PSA_KEY_USAGE_SIGN_MESSAGE key usage policy flag when
    PSA_KEY_USAGE_SIGN_HASH flag is set and PSA_KEY_USAGE_VERIFY_MESSAGE flag
    when PSA_KEY_USAGE_VERIFY_HASH flag is set. This usage flag extension
    is also applied when loading a key from storage.
  * Remove mbedtls-4237.patch upstream
  * Library soname bump to libmbedcrypto7</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1642075200">- Update to 2.28.0: (bsc#1193979, CVE-2021-45450)
  API changes
  * Some fields of mbedtls_ssl_session and mbedtls_ssl_config are in a
  different order. This only affects applications that define such
  structures directly or serialize them.
  Requirement changes
  * Sign-magnitude and one's complement representations for signed integers are
  not supported. Two's complement is the only supported representation.
  Removals
  * Remove config option MBEDTLS_TLS_DEFAULT_ALLOW_SHA1_IN_CERTIFICATES,
  which allowed SHA-1 in the default TLS configuration for certificate
  signing. It was intended to facilitate the transition in environments
  with SHA-1 certificates. SHA-1 is considered a weak message digest and
  its use constitutes a security risk.
  * Remove the partial support for running unit tests via Greentea on Mbed OS,
  which had been unmaintained since 2018.
  Features
  * The identifier of the CID TLS extension can be configured by defining
  MBEDTLS_TLS_EXT_CID at compile time.
  * Warn if errors from certain functions are ignored. This is currently
  supported on GCC-like compilers and on MSVC and can be configured through
  the macro MBEDTLS_CHECK_RETURN. The warnings are always enabled
  (where supported) for critical functions where ignoring the return
  value is almost always a bug. Enable the new configuration option
  MBEDTLS_CHECK_RETURN_WARNING to get warnings for other functions. This
  is currently implemented in the AES, DES and md modules, and will be
  extended to other modules in the future.
  * Add missing PSA macros declared by PSA Crypto API 1.0.0:
  PSA_ALG_IS_SIGN_HASH, PSA_ALG_NONE, PSA_HASH_BLOCK_LENGTH, PSA_KEY_ID_NULL.
  * Add new API mbedtls_ct_memcmp for constant time buffer comparison.
  * Add PSA API definition for ARIA.
  Security
  * Zeroize several intermediate variables used to calculate the expected
  value when verifying a MAC or AEAD tag. This hardens the library in
  case the value leaks through a memory disclosure vulnerability. For
  example, a memory disclosure vulnerability could have allowed a
  man-in-the-middle to inject fake ciphertext into a DTLS connection.
  * In psa_cipher_generate_iv() and psa_cipher_encrypt(), do not read back
  from the output buffer. This fixes a potential policy bypass or decryption
  oracle vulnerability if the output buffer is in memory that is shared with
  an untrusted application.
  * Fix a double-free that happened after mbedtls_ssl_set_session() or
  mbedtls_ssl_get_session() failed with MBEDTLS_ERR_SSL_ALLOC_FAILED
  (out of memory). After that, calling mbedtls_ssl_session_free()
  and mbedtls_ssl_free() would cause an internal session buffer to
  be free()'d twice.
  Bugfix
  * Stop using reserved identifiers as local variables. Fixes #4630.
  * The GNU makefiles invoke python3 in preference to python except on Windows.
  * The check was accidentally not performed when cross-compiling for Windows
  on Linux. Fix this. Fixes #4774.
  * Prevent divide by zero if either of PSA_CIPHER_ENCRYPT_OUTPUT_SIZE() or
  PSA_CIPHER_UPDATE_OUTPUT_SIZE() were called using an asymmetric key type.
  * Fix a parameter set but unused in psa_crypto_cipher.c. Fixes #4935.
  * Don't use the obsolete header path sys/fcntl.h in unit tests.
  These header files cause compilation errors in musl.
  Fixes #4969.
  * Fix missing constraints on x86_64 and aarch64 assembly code
  for bignum multiplication that broke some bignum operations with
  (at least) Clang 12.
  Fixes #4116, #4786, #4917, #4962.
  * Fix mbedtls_cipher_crypt: AES-ECB when MBEDTLS_USE_PSA_CRYPTO is enabled.
  * Failures of alternative implementations of AES or DES single-block
  functions enabled with MBEDTLS_AES_ENCRYPT_ALT, MBEDTLS_AES_DECRYPT_ALT,
  MBEDTLS_DES_CRYPT_ECB_ALT or MBEDTLS_DES3_CRYPT_ECB_ALT were ignored.
  This does not concern the implementation provided with Mbed TLS,
  where this function cannot fail, or full-module replacements with
  MBEDTLS_AES_ALT or MBEDTLS_DES_ALT. Reported by Armelle Duboc in #1092.
  * Some failures of HMAC operations were ignored. These failures could only
  happen with an alternative implementation of the underlying hash module.
  * Fix the error returned by psa_generate_key() for a public key. Fixes #4551.
  * Fix the build of sample programs when neither MBEDTLS_ERROR_C nor
  MBEDTLS_ERROR_STRERROR_DUMMY is enabled.
  * Fix PSA_ALG_RSA_PSS verification accepting an arbitrary salt length.
  This algorithm now accepts only the same salt length for verification
  that it produces when signing, as documented. Use the new algorithm
  PSA_ALG_RSA_PSS_ANY_SALT to accept any salt length. Fixes #4946.
  * The existing predicate macro name PSA_ALG_IS_HASH_AND_SIGN is now reserved
  for algorithm values that fully encode the hashing step, as per the PSA
  Crypto API specification. This excludes PSA_ALG_RSA_PKCS1V15_SIGN_RAW and
  PSA_ALG_ECDSA_ANY. The new predicate macro PSA_ALG_IS_SIGN_HASH covers
  all algorithms that can be used with psa_{sign,verify}_hash(), including
  these two.
  * Fix issue in Makefile on Linux with SHARED=1, that caused shared libraries
  not to list other shared libraries they need.
  * Fix a bug in mbedtls_gcm_starts() when the bit length of the iv
  exceeds 2^32. Fixes #4884.
  * Fix an uninitialized variable warning in test_suite_ssl.function with GCC
  version 11.
  * Fix the build when no SHA2 module is included. Fixes #4930.
  * Fix the build when only the bignum module is included. Fixes #4929.
  * Fix a potential invalid pointer dereference and infinite loop bugs in
  pkcs12 functions when the password is empty. Fix the documentation to
  better describe the inputs to these functions and their possible values.
  Fixes #5136.
  * The key usage flags PSA_KEY_USAGE_SIGN_MESSAGE now allows the MAC
  operations psa_mac_compute() and psa_mac_sign_setup().
  * The key usage flags PSA_KEY_USAGE_VERIFY_MESSAGE now allows the MAC
  operations psa_mac_verify() and psa_mac_verify_setup().
  Changes
  * Set config option MBEDTLS_TLS_DEFAULT_ALLOW_SHA1_IN_KEY_EXCHANGE to be
  disabled by default.
  * Improve the performance of base64 constant-flow code. The result is still
  slower than the original non-constant-flow implementation, but much faster
  than the previous constant-flow implementation. Fixes #4814.
  * Indicate in the error returned if the nonce length used with
  ChaCha20-Poly1305 is invalid, and not just unsupported.
  * The mbedcrypto library includes a new source code module constant_time.c,
  containing various functions meant to resist timing side channel attacks.
  * This module does not have a separate configuration option, and functions
  from this module will be included in the build as required. Currently
  most of the interface of this module is private and may change at any
  time.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1642420800">- Fix baselib.conf</changelog>
  <changelog author="Alexander Bergmann &lt;abergmann@suse.com&gt;" date="1671624000">- Fix potential heap buffer overread and overwrite in DTLS if
  MBEDTLS_SSL_DTLS_CONNECTION_ID is enabled and
  MBEDTLS_SSL_CID_IN_LEN_MAX &gt; 2 * MBEDTLS_SSL_CID_OUT_LEN_MAX.
  (bsc#1206576, CVE-2022-46393).
  Add: mbedtls-CVE-2022-46393.patch</changelog>
</package>
<package pkgid="a21eb5c6654612d1624acc281595c556c4bb8c2ea5b13627bbc0f5e945afa16c" name="libmbedx509-1" arch="s390x">
  <version epoch="0" ver="2.28.0" rel="bp154.2.3.1"/>
  <changelog author="mpluskal@suse.com" date="1531137600">- Update to version 2.11.0:
  * Features
    + Added support for the XTS block cipher mode with AES (AES-XTS). Contributed by Aorimn in pull request #414.
    + Implemented the HMAC-based extract-and-expand key derivation function (HKDF) per RFC 5869. Contributed by Thomas Fossati.
    + For TLS servers, added support for offloading private key operations to an external cryptoprocessor. Private key operations can be asynchronous to allow non-blocking operation of the TLS server stack.
    + Added support for ARIA cipher (RFC 5794) and associated TLS ciphersuites (RFC 6209). ARIA is disabled by default. To enable, see MBEDTLS_ARIA_C in config.h.
    + Added support for the CCM* block cipher mode as defined in IEEE Std 802.15.4.
    + Added an additional block mode, OFB (Output Feedback) per NIST SP 800-38a, to the AES module and cipher abstraction module.
  * API Changes
    + Mbed TLS 2.11.0 maintains source code compatibility with the last minor version, Mbed TLS 2.9.0, but extends the interface with additional capabilities. Mbed TLS 2.11.0 modifies the ABI and increases the SOVERSION.
  * Bugfix
    + Fixed the cert_write example to handle certificates signed with elliptic curves as well as RSA. Fixes #777 found by dbedev.
    + Fixed the redefinition of _WIN32_WINNT, to avoid overriding a definition used by user applications. Found and fixed by Fabio Alessandrelli.
    + Fixed compilation warnings with the IAR toolchain on 32-bit platforms. Reported by rahmanih in #683.
    + Fixed an issue with MicroBlaze support in bn_mul.h which was causing the build to fail. Found by zv-io. Fixes #1651.
    + Fixed braces in mbedtls_memory_buffer_alloc_status(). Found by sbranden in #552.
    + Added the macro MBEDTLS_X509_MAX_FILE_PATH_LEN that enables the user to configure the maximum length of a file path that can be buffered when calling mbedtls_x509_crt_parse_path(). Fixes #492.
    + Fixed redundant declaration of mbedtls_ssl_list_ciphersuites. Raised by TrinityTonic in #1359.
- Changes for version 2.9.0:
  + Security
    + Fixed an issue in the X.509 module which could lead to a buffer overread during certificate validation. Additionally, the issue could also lead to unnecessary callback checks being made or to some validation checks to be omitted. The overread could be triggered remotely, while the other issues would require a non DER-compliant certificate to be correctly signed by a trusted CA, or a trusted CA with a non DER-compliant certificate. Found by luocm. Fixes #825.
    + Fixed the buffer length assertion in the ssl_parse_certificate_request() function which could lead to an arbitrary overread of the message buffer. The overreads could be caused by receiving a malformed algorithms section which was too short. In builds with debug output, this overread data was output with the debug data.
    + Fixed a client-side bug in the validation of the server's ciphersuite choice which could potentially lead to the client accepting a ciphersuite it didn't offer or a ciphersuite that could not be used with the TLS or DTLS version chosen by the server. This could lead to corruption of internal data structures for some configurations.
  * Features
    + Added an option of MBEDTLS_AES_FEWER_TABLES, to dynamically compute smaller AES tables during runtime, thereby reducing the RAM/ROM footprint by ~6KiB. Suggested and contributed by jkivilin.
    + Added initial support for Curve448 (RFC 7748). So far only mbedtls_ecp_mul() and ECDH primitive functions (mbedtls_ecdh_gen_public(), mbedtls_ecdh_compute_shared()) are supported for now. Contributed by Nicholas Wilson.
  * API Changes
    + Mbed TLS 2.9.0 maintains source code and binary compatibility with the last minor version, Mbed TLS 2.8.0, but extends the interface with additional capabilities.
    + Extended the API with the function of mbedtls_net_poll() to allow user applications to wait for a network context to become ready before reading or writing.
    + Added the function mbedtls_ssl_check_pending() to the public API to allow a check for whether more more data is pending to be processed in the internal message buffers. This function is necessary to determine the underlying transport when event-driven IO is used.
  * Bugfix
    + Fixed a spurious uninitialized variable warning in cmac.c. Fix independently contributed by Brian J Murray and David Brown.
    + Added missing dependencies in test suites that led to build failures in configurations that omit certain hashes or public-key algorithms. Fixes #1040.
    + Fixed a C89 incompatibility issue in benchmark.c. Contributed by Brendan Shanks. Fixes #1353.
    + Added missing dependencies for MBEDTLS_HAVE_TIME_DATE and MBEDTLS_VERSION_FEATURES in some test suites. Contributed by Deomid Ryabkov. Fixes #1299, #1475.
    + Fixed the Makefile build process for building shared libraries on Mac OS X. Fixed by mnacamura.
    + Fixed parsing of PKCS#8 encoded Elliptic Curve keys. Previously Mbed TLS was unable to parse keys which had only the optional parameters field of the ECPrivateKey structure. Found by Jethro Beekman, fixed in #1379.
    + Added an optimisation to return the plaintext data more quickly on unpadded CBC decryption, as stated in the mbedtls_cipher_update() documentation. Contributed by Andy Leiserson.
    + Fixed the overriding and ignoring of return values when parsing and writing to a file in the pk_sign program. Found by kevlut in #1142.
    + Added restrictions to the usage of the error code MBEDTLS_ERR_SSL_WANT_READ to situations where data needs to be fetched from the underlying transport in order to make progress. Previously, this error code was also occasionally returned when unexpected messages were being discarded, ignoring that further messages could potentially already be pending to be processed in the internal buffers; these cases led to deadlocks when event-driven I/O was used. Found and reported by Hubert Mis in #772.
    + Fixed buffer length assertions in the ssl_parse_certificate_request() function which led to a potential one byte overread of the message buffer.
    + Fixed invalid buffer sizes being passed to zlib during record compression and decompression.
    + Raised the soversion of libmbedcrypto to match the soversion of the maintained 2.7 branch. The soversion was increased in Mbed TLS version 2.7.1 to reflect breaking changes in that release, but the increment was missed in 2.8.0 and later releases outside of the 2.7 branch.</changelog>
  <changelog author="mpluskal@suse.com" date="1535025600">- Update to version 2.12.0:
  * Security
    + Fixed a vulnerability in the TLS ciphersuites based on use of CBC and SHA-384 in DTLS/TLS 1.0 to 1.2, that allowed an active network attacker to partially recover the plaintext of messages under certains conditions by exploiting timing side-channels.
    + Fixed a vulnerability in TLS ciphersuites based on CBC, in DTLS/TLS 1.0 to 1.2, that allowed a local attacker, with the ability to execute code on the local machine as well as to manipulate network packets, to partially recover the plaintext of messages under certain conditions by using a cache attack targetting an internal MD/SHA buffer.
    + Added a counter-measure against a vulnerability in TLS ciphersuites based on CBC, in DTLS/TLS 1.0 to 1.2, that allowed a local attacker with the ability to execute code on the local machine as well as manipulate network packets, to partially recover the plaintext of messages certain conditions (see previous entry) by using a cache attack targeting the SSL input record buffer.
  * Features
    + Added new cryptographic primitives, the stream cipher Chacha20, one-time authenticator Poly1305 and AEAD construct Chacha20-Poly1305, as defined in RFC 7539. Contributed by Daniel King.
    + Added support for the CHACHA20-POLY1305 ciphersuites from RFC 7905.
    + Made the receive and transmit buffers independently configurable in size, for situations where the outgoing buffer can be fixed at a smaller size than the incoming buffer
    + Added support for the AES based key wrapping modes defined by NIST SP 800-38F algorithms KW and KWP and by RFC's 3394 and 5649.
    + Added platform support for the Haiku OS.
  * Bugfix
    + Fixed the key_app_writer example which was creating an invalid ASN.1 tag by writing an additional leading zero byte. Found by Aryeh R. #1257.
    + Fixed a C++ compilation error, caused by a variable named new. Found and fixed by Hirotaka Niisato. #1783.
    + Fixed the "no symbols" warning issued by ranlib when building on Mac OS X. Fix contributed by tabascoeye.
    + Clarified documentation for mbedtls_ssl_write() to include 0 as a valid return value. Found by @davidwu2000. #839.
    + Fixed a memory leak in mbedtls_x509_csr_parse(). Found and fixed by catenacyber, Philippe Antoine. #1623.
    + Added length checks to some TLS parsing functions. Found and fixed by Philippe Antoine from Catena cyber. #1663.
    + Remove unused headers included in x509.c. Found by Chris Hanson and fixed by Brendan Shanks. #992.
    + Fixed compilation error when MBEDTLS_ARC4_C is disabled and MBEDTLS_CIPHER_NULL_CIPHER is enabled. Found by TrinityTonic in #1719.
    + Fixed the inline assembly for the MPI multiply helper function for i386 and i386 with SSE2. Found by László Langó. #1550.
    + Fixed the namespacing in header files. Remove the mbedtls namespacing in the #include in the header files. #857.
    + Fixed a compiler warning of 'use before initialisation' in mbedtls_pk_parse_key(). Found by Martin Boye Petersen and fixed by Dawid Drozd.#1098.
    + Fixed decryption of zero length messages (which contain all padding) when a CBC based ciphersuite was used together with Encrypt-then-MAC.
    + Fixed the ssl_client2 example to send application data with 0-length content when the request_size argument is set to 0 as stated in the documentation. #1833.
    + Corrected the documentation for mbedtls_ssl_get_session(). This API has deep copy of the session, and the peer certificate is not lost. #926.
    + Fixed issues when building to the C99 standard, using -std=c99. Fixed by Nick Wilson.
  * Changes
    + Fails when receiving a TLS alert message with an invalid length, or invalid zero-length messages when using TLS 1.2. Contributed by Espressif Systems.
    + Changed the default behaviour of mbedtls_hkdf_extract() to return an error when calling with a NULL salt and non-zero salt length. Contributed by Brian J Murray
    + Change the shebang line in Perl scripts to look up perl in the PATH. Contributed by fbrosson.
    + Allow overriding the time on Windows via the platform-time abstraction. Fixed by Nick Wilson.
    + Use gmtime_r/gmtime_s for thread-safety. Fixed by Nick Wilson.</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1544529600">- Update to version 2.14.1: [bsc#1118727, CVE-2018-19608]
  Security
  * Fix timing variations and memory access variations in RSA PKCS#1 v1.5
    decryption that could lead to a Bleichenbacher-style padding oracle
    attack. In TLS, this affects servers that accept ciphersuites based on
    RSA decryption (i.e. ciphersuites whose name contains RSA but not
    (EC)DH(E)). Discovered by Eyal Ronen (Weizmann Institute),  Robert Gillham
    (University of Adelaide), Daniel Genkin (University of Michigan),
    Adi Shamir (Weizmann Institute), David Wong (NCC Group), and Yuval Yarom
    (University of Adelaide, Data61). The attack is described in more detail
    in the paper available here: http://cat.eyalro.net/cat.pdf  CVE-2018-19608
  * In mbedtls_mpi_write_binary(), don't leak the exact size of the number
    via branching and memory access patterns. An attacker who could submit
    a plaintext for RSA PKCS#1 v1.5 decryption but only observe the timing
    of the decryption and not its result could nonetheless decrypt RSA
    plaintexts and forge RSA signatures. Other asymmetric algorithms may
    have been similarly vulnerable. Reported by Eyal Ronen, Robert Gillham,
    Daniel Genkin, Adi Shamir, David Wong and Yuval Yarom.
  * Wipe sensitive buffers on the stack in the CTR_DRBG and HMAC_DRBG
    modules.
  API Changes
  * The new functions mbedtls_ctr_drbg_update_ret() and
    mbedtls_hmac_drbg_update_ret() are similar to mbedtls_ctr_drbg_update()
    and mbedtls_hmac_drbg_update() respectively, but the new functions
    report errors whereas the old functions return void. We recommend that
    applications use the new functions.
- Version 2.14.0:
  Security
  * Fix overly strict DN comparison when looking for CRLs belonging to a
    particular CA. This previously led to ignoring CRLs when the CRL's issuer
    name and the CA's subject name differed in their string encoding (e.g.,
    one using PrintableString and the other UTF8String) or in the choice of
    upper and lower case. Reported by Henrik Andersson of Bosch GmbH in issue
    [#1784].
  * Fix a flawed bounds check in server PSK hint parsing. In case the
    incoming message buffer was placed within the first 64KiB of address
    space and a PSK-(EC)DHE ciphersuite was used, this allowed an attacker
    to trigger a memory access up to 64KiB beyond the incoming message buffer,
    potentially leading to an application crash or information disclosure.
  * Fix mbedtls_mpi_is_prime() to use more rounds of probabilistic testing. The
    previous settings for the number of rounds made it practical for an
    adversary to construct non-primes that would be erroneously accepted as
    primes with high probability. This does not have an impact on the
    security of TLS, but can matter in other contexts with numbers chosen
    potentially by an adversary that should be prime and can be validated.
    For example, the number of rounds was enough to securely generate RSA key
    pairs or Diffie-Hellman parameters, but was insufficient to validate
    Diffie-Hellman parameters properly.
    See "Prime and Prejudice" by by Martin R. Albrecht and Jake Massimo and
    Kenneth G. Paterson and Juraj Somorovsky.
  Features
  * Add support for temporarily suspending expensive ECC computations after
    some configurable amount of operations. This is intended to be used in
    constrained, single-threaded systems where ECC is time consuming and can
    block other operations until they complete. This is disabled by default,
    but can be enabled by MBEDTLS_ECP_RESTARTABLE at compile time and
    configured by mbedtls_ecp_set_max_ops() at runtime. It applies to the new
    xxx_restartable functions in ECP, ECDSA, PK and X.509 (CRL not supported
    yet), and to existing functions in ECDH and SSL (currently only
    implemented client-side, for ECDHE-ECDSA ciphersuites in TLS 1.2,
    including client authentication).
  * Add support for Arm CPU DSP extensions to accelerate asymmetric key
    operations. On CPUs where the extensions are available, they can accelerate
    MPI multiplications used in ECC and RSA cryptography. Contributed by
    Aurelien Jarno.
  * Extend RSASSA-PSS signature to allow a smaller salt size. Previously, PSS
    signature always used a salt with the same length as the hash, and returned
    an error if this was not possible. Now the salt size may be up to two bytes
    shorter. This allows the library to support all hash and signature sizes
    that comply with FIPS 186-4, including SHA-512 with a 1024-bit key.
  * Add support for 128-bit keys in CTR_DRBG. Note that using keys shorter
    than 256 bits limits the security of generated material to 128 bits.
  API Changes
  * Add a common error code of `MBEDTLS_ERR_PLATFORM_FEATURE_UNSUPPORTED` for
    a feature that is not supported by underlying alternative
    implementations implementing cryptographic primitives. This is useful for
    hardware accelerators that don't implement all options or features.
  New deprecations
  * All module specific errors following the form
    MBEDTLS_ERR_XXX_FEATURE_UNAVAILABLE that indicate a feature is not
    supported are deprecated and are now replaced by the new equivalent
    platform error.
  * All module specific generic hardware acceleration errors following the
    form MBEDTLS_ERR_XXX_HW_ACCEL_FAILED that are deprecated and are replaced
    by the equivalent plaform error.
  * Deprecate the function mbedtls_mpi_is_prime() in favor of
    mbedtls_mpi_is_prime_ext() which allows specifying the number of
    Miller-Rabin rounds.
  Bugfix
  * Fix wrong order of freeing in programs/ssl/ssl_server2 example
    application leading to a memory leak in case both
    MBEDTLS_MEMORY_BUFFER_ALLOC_C and MBEDTLS_MEMORY_BACKTRACE are set.
    Fixes #2069.
  * Fix a bug in the update function for SSL ticket keys which previously
    invalidated keys of a lifetime of less than a 1s. Fixes #1968.
  * Fix failure in hmac_drbg in the benchmark sample application, when
    MBEDTLS_THREADING_C is defined. Found by TrinityTonic, #1095
  * Fix a bug in the record decryption routine ssl_decrypt_buf()
    which lead to accepting properly authenticated but improperly
    padded records in case of CBC ciphersuites using Encrypt-then-MAC.
  * Fix memory leak and freeing without initialization in the example
    program programs/x509/cert_write. Fixes #1422.
  * Ignore IV in mbedtls_cipher_set_iv() when the cipher mode is
    MBEDTLS_MODE_ECB. Found by ezdevelop. Fixes #1091.
  * Zeroize memory used for buffering or reassembling handshake messages
    after use.
  * Use `mbedtls_platform_zeroize()` instead of `memset()` for zeroization
    of sensitive data in the example programs aescrypt2 and crypt_and_hash.
  * Change the default string format used for various X.509 DN attributes to
    UTF8String. Previously, the use of the PrintableString format led to
    wildcards and non-ASCII characters being unusable in some DN attributes.
    Reported by raprepo in #1860 and by kevinpt in #468. Fix contributed by
    Thomas-Dee.
  * Fix compilation failure for configurations which use compile time
    replacements of standard calloc/free functions through the macros
    MBEDTLS_PLATFORM_CALLOC_MACRO and MBEDTLS_PLATFORM_FREE_MACRO.
    Reported by ole-de and ddhome2006. Fixes #882, #1642 and #1706.
  Changes
  * Removed support for Yotta as a build tool.
  * Add tests for session resumption in DTLS.
  * Close a test gap in (D)TLS between the client side and the server side:
    test the handling of large packets and small packets on the client side
    in the same way as on the server side.
  * Change the dtls_client and dtls_server samples to work by default over
    IPv6 and optionally by a build option over IPv4.
  * Change the use of Windows threading to use Microsoft Visual C++ runtime
    calls, rather than Win32 API calls directly. This is necessary to avoid
    conflict with C runtime usage. Found and fixed by irwir.
  * Remember the string format of X.509 DN attributes when replicating
    X.509 DNs. Previously, DN attributes were always written in their default
    string format (mostly PrintableString), which could lead to CRTs being
    created which used PrintableStrings in the issuer field even though the
    signing CA used UTF8Strings in its subject field; while X.509 compliant,
    such CRTs were rejected in some applications, e.g. some versions of
    Firefox, curl and GnuTLS. Reported in #1033 by Moschn. Fix contributed by
    Thomas-Dee.
  * Improve documentation of mbedtls_ssl_get_verify_result().
    Fixes #517 reported by github-monoculture.
  * Add MBEDTLS_MPI_GEN_PRIME_FLAG_LOW_ERR flag to mbedtls_mpi_gen_prime() and
    use it to reduce error probability in RSA key generation to levels mandated
    by FIPS-186-4.
- Version 2.13.1
  API Changes
  * Extend the platform module with an abstraction mbedtls_platform_gmtime_r()
    whose implementation should behave as a thread-safe version of gmtime().
    This allows users to configure such an implementation at compile time when
    the target system cannot be deduced automatically, by setting the option
    MBEDTLS_PLATFORM_GMTIME_R_ALT. At this stage Mbed TLS is only able to
    automatically select implementations for Windows and POSIX C libraries.
  Bugfix
  * Fix build failures on platforms where only gmtime() is available but
    neither gmtime_r() nor gmtime_s() are present. Fixes #1907.
- Version 2.13.0
  Security
  * Fix an issue in the X.509 module which could lead to a buffer overread
    during certificate extensions parsing. In case of receiving malformed
    input (extensions length field equal to 0), an illegal read of one byte
    beyond the input buffer is made. Found and analyzed by Nathan Crandall.
  Features
  * Add support for fragmentation of outgoing DTLS handshake messages. This
    is controlled by the maximum fragment length as set locally or negotiated
    with the peer, as well as by a new per-connection MTU option, set using
    mbedtls_ssl_set_mtu().
  * Add support for auto-adjustment of MTU to a safe value during the
    handshake when flights do not get through (RFC 6347, section 4.1.1.1,
    last paragraph).
  * Add support for packing multiple records within a single datagram,
    enabled by default.
  * Add support for buffering out-of-order handshake messages in DTLS.
    The maximum amount of RAM used for this can be controlled by the
    compile-time constant MBEDTLS_SSL_DTLS_MAX_BUFFERING defined
    in mbedtls/config.h.
  API Changes
  * Add function mbedtls_ssl_set_datagram_packing() to configure
    the use of datagram packing (enabled by default).
  Bugfix
  * Fix a potential memory leak in mbedtls_ssl_setup() function. An allocation
    failure in the function could lead to other buffers being leaked.
  * Fixes an issue with MBEDTLS_CHACHAPOLY_C which would not compile if
    MBEDTLS_ARC4_C and MBEDTLS_CIPHER_NULL_CIPHER weren't also defined. #1890
  * Fix a memory leak in ecp_mul_comb() if ecp_precompute_comb() fails.
    Fix contributed by Espressif Systems.
  * Add ecc extensions only if an ecc based ciphersuite is used.
    This improves compliance to RFC 4492, and as a result, solves
    interoperability issues with BouncyCastle. Raised by milenamil in #1157.
  * Replace printf with mbedtls_printf in the ARIA module. Found by
    TrinityTonic in #1908.
  * Fix potential use-after-free in mbedtls_ssl_get_max_frag_len()
    and mbedtls_ssl_get_record_expansion() after a session reset. Fixes #1941.
  * Fix a bug that caused SSL/TLS clients to incorrectly abort the handshake
    with TLS versions 1.1 and earlier when the server requested authentication
    without providing a list of CAs. This was due to an overly strict bounds
    check in parsing the CertificateRequest message,
    introduced in Mbed TLS 2.12.0. Fixes #1954.
  * Fix a miscalculation of the maximum record expansion in
    mbedtls_ssl_get_record_expansion() in case of ChachaPoly ciphersuites,
    or CBC ciphersuites in (D)TLS versions 1.1 or higher. Fixes #1913, #1914.
  * Fix undefined shifts with negative values in certificates parsing
    (found by Catena cyber using oss-fuzz)
  * Fix memory leak and free without initialization in pk_encrypt
    and pk_decrypt example programs. Reported by Brace Stout. Fixes #1128.
  * Remove redundant else statement. Raised by irwir. Fixes #1776.
  Changes
  * Copy headers preserving timestamps when doing a "make install".
    Contributed by xueruini.
  * Allow the forward declaration of public structs. Contributed by Dawid
    Drozd. Fixes #1215 raised by randombit.
  * Improve compatibility with some alternative CCM implementations by using
    CCM test vectors from RAM.
  * Add support for buffering of out-of-order handshake messages.
  * Add warnings to the documentation of the HKDF module to reduce the risk
    of misusing the mbedtls_hkdf_extract() and mbedtls_hkdf_expand()
    functions. Fixes #1775. Reported by Brian J. Murray.</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1544529601">- Library package version bumped to libmbedtls12</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1546862400">- Update to version 2.16.0:
  Features
  * Add a new config.h option of MBEDTLS_CHECK_PARAMS that enables validation of parameters in the API. This allows detection of obvious misuses of the API, such as passing NULL pointers. The API of existing functions hasn't changed, but requirements on parameters have been made more explicit in the documentation. See the corresponding API documentation for each function to see for which parameter values it is defined. This feature is disabled by default. See its API documentation in config.h for additional steps you have to take when enabling it.
  API Changes
  * The following functions in the random generator modules have been deprecated and replaced as shown below. The new functions change the return type from void to int to allow returning error codes when using MBEDTLS_&lt;MODULE&gt;_ALT for the underlying AES or message digest primitive. Fixes #1798. mbedtls_ctr_drbg_update() -&gt; mbedtls_ctr_drbg_update_ret() mbedtls_hmac_drbg_update() -&gt; mbedtls_hmac_drbg_update_ret()
  * Extend ECDH interface to enable alternative implementations.
  * Deprecate error codes of the form MBEDTLS_ERR_xxx_INVALID_KEY_LENGTH for ARIA, CAMELLIA and Blowfish. These error codes will be replaced by the more generic per-module error codes MBEDTLS_ERR_xxx_BAD_INPUT_DATA.
  * Additional parameter validation checks have been added for the following modules - AES, ARIA, Blowfish, CAMELLIA, CCM, GCM, DHM, ECP, ECDSA, ECDH, ECJPAKE, SHA, Chacha20 and Poly1305, cipher, pk, RSA, and MPI. Where modules have had parameter validation added, existing parameter checks may have changed. Some modules, such as Chacha20 had existing parameter validation whereas other modules had little. This has now been changed so that the same level of validation is present in all modules, and that it is now optional with the MBEDTLS_CHECK_PARAMS flag which by default is off. That means that checks which were previously present by default will no longer be.
  New deprecations
  * Deprecate mbedtls_ctr_drbg_update() and mbedtls_hmac_drbg_update() in favor of functions that can return an error code.
  Bugfix
  * Fix for Clang, which was reporting a warning for the bignum.c inline assembly for AMD64 targets creating string literals greater than those permitted by the ISO C99 standard. Found by Aaron Jones. Fixes #482.
  * Fix runtime error in mbedtls_platform_entropy_poll() when run through qemu user emulation. Reported and fix suggested by randombit. Fixes #1212.
  * Fix an unsafe bounds check when restoring an SSL session from a ticket. This could lead to a buffer overflow, but only in case ticket authentication was broken. Reported and fix suggested by Guido Vranken in #659.
  * Add explicit integer to enumeration type casts to example program programs/pkey/gen_key which previously led to compilation failure on some toolchains. Reported by phoenixmcallister. Fixes #2170.
  * Clarify documentation of mbedtls_ssl_set_own_cert() regarding the absence of check for certificate/key matching. Reported by Attila Molnar, #507.
  * Fix double initialization of ECC hardware that made some accelerators hang.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1567512000">- Update to version 2.16.2:
  * Security improvements and bugfixes
- Use ninja to for build</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1573646400">- Update to version 2.16.3:
  * Security improvements and bugfixes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1585828800">- Update to version 2.16.5:
  * Security improvements and bugfixes</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597665600">- update to 2.23.0:
  a lot of changes see https://github.com/ARMmbed/mbedtls/releases/tag/v2.23.0
  * Fix a side channel vulnerability in modular exponentiation that could reveal an RSA private key used in a secure enclave. Noticed by Sangho Lee, Ming-Wei Shih, Prasun Gera, Taesoo Kim and Hyesoon Kim (Georgia Institute of Technology); and Marcus Peinado (Microsoft Research). Reported by Raoul Strackx (Fortanix) in #3394.
  * Fix side channel in mbedtls_ecp_check_pub_priv() and mbedtls_pk_parse_key() / mbedtls_pk_parse_keyfile() (when loading a private key that didn't include the uncompressed public key), as well as mbedtls_ecp_mul() / mbedtls_ecp_mul_restartable() when called with a NULL f_rng argument. An attacker with access to precise enough timing and memory access information (typically an untrusted operating system attacking a secure enclave) could fully recover the ECC private key. Found and reported by Alejandro Cabrera Aldaya and Billy Brumley.
  * Fix issue in Lucky 13 counter-measure that could make it ineffective when hardware accelerators were used (using one of the MBEDTLS_SHAxxx_ALT macros). This would cause the original Lucky 13 attack to be possible in those configurations, allowing an active network attacker to recover plaintext after repeated timing measurements under some conditions. Reported and fix suggested by Luc Perneel in #3246.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1598875200">- Do not run testsuite in parallel - its not reliable</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1599480000">- Add workaround for failing builds (Python not found) due to
  https://gitlab.kitware.com/cmake/cmake/-/issues/21168</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1599652800">- update to 2.24.0:
  * see https://github.com/ARMmbed/mbedtls/releases/tag/v2.24.0
  * Fix a vulnerability in the verification of X.509 certificates when matching
  the expected common name (the cn argument of mbedtls_x509_crt_verify())
  with the actual certificate name: when the subjecAltName extension is
  present, the expected name was compared to any name in that extension
  regardless of its type. This means that an attacker could for example
  impersonate a 4-bytes or 16-byte domain by getting a certificate for the
  corresponding IPv4 or IPv6 (this would require the attacker to control that
  IP address, though). Similar attacks using other subjectAltName name types
  might be possible.
  * When checking X.509 CRLs, a certificate was only considered as revoked if
  its revocationDate was in the past according to the local clock if
  available. In particular, on builds without MBEDTLS_HAVE_TIME_DATE,
  certificates were never considered as revoked. On builds with
  MBEDTLS_HAVE_TIME_DATE, an attacker able to control the local clock (for
  example, an untrusted OS attacking a secure enclave) could prevent
  revocation of certificates via CRLs. Fixed by no longer checking the
  revocationDate field, in accordance with RFC 5280. Reported by yuemonangong
  in #3340. Reported independently and fixed by Raoul Strackx and Jethro
  * In (D)TLS record decryption, when using a CBC ciphersuites without the
  Encrypt-then-Mac extension, use constant code flow memory access patterns
  to extract and check the MAC. This is an improvement to the existing
  countermeasure against Lucky 13 attacks. The previous countermeasure was
  effective against network-based attackers, but less so against local
  attackers. The new countermeasure defends against local attackers, even if
  they have access to fine-grained measurements. In particular, this fixes a
  local Lucky 13 cache attack found and reported by Tuba Yavuz, Farhaan
  Fowze, Ken (Yihan) Bai, Grant Hernandez, and Kevin Butler (University of
  Florida) and Dave Tian (Purdue University).
  * Fix side channel in RSA private key operations and static (finite-field)
  Diffie-Hellman. An adversary with precise enough timing and memory access
  information (typically an untrusted operating system attacking a secure
  enclave) could bypass an existing counter-measure (base blinding) and
  potentially fully recover the private key.
  * Fix a 1-byte buffer overread in mbedtls_x509_crl_parse_der(). Credit to
  OSS-Fuzz for detecting the problem and to Philippe Antoine for pinpointing
  the problematic code.
  * Zeroising of plaintext buffers in mbedtls_ssl_read() to erase unused
  application data from memory.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1608638400">- update to 2.25.0:
  * This release of Mbed TLS provides bug fixes, minor enhancements and new
  features. This release includes fixes for security issues.
  * see https://github.com/ARMmbed/mbedtls/releases/tag/v2.25.0
  * The functions mbedtls_cipher_auth_encrypt() and
  mbedtls_cipher_auth_decrypt() would write past the minimum documented size
  of the output buffer when used with NIST_KW. As a result, code using those
  functions as documented with NIST_KW could have a buffer overwrite of up to
  15 bytes, with consequences ranging up to arbitrary code execution
  depending on the location of the output buffer.
  * Limit the size of calculations performed by mbedtls_mpi_exp_mod to
  MBEDTLS_MPI_MAX_SIZE to prevent a potential denial of service when generating
  Diffie-Hellman key pairs. Credit to OSS-Fuzz.
  * A failure of the random generator was ignored in mbedtls_mpi_fill_random(),
  which is how most uses of randomization in asymmetric cryptography (including
  key generation, intermediate value randomization and blinding) are implemented.
  This could cause failures or the silent use of non-random values. A random
  generator can fail if it needs reseeding and cannot not obtain entropy, or due
  to an internal failure (which, for Mbed TLS's own CTR_DRBG or HMAC_DRBG, can
  only happen due to a misconfiguration).
  * Fix a compliance issue whereby we were not checking the tag on the algorithm
  parameters (only the size) when comparing the signature in the description part
  of the cert to the real signature. This meant that a NULL algorithm parameters
  entry would look identical to an array of REAL (size zero) to the library and
  thus the certificate would be considered valid. However, if the parameters do
  not match in any way then the certificate should be considered invalid, and
  indeed OpenSSL marks these certs as invalid when mbedtls did not. Many thanks
  to guidovranken who found this issue via differential fuzzing and reported it
  in #3629.
  * Zeroising of local buffers and variables which are used for calculations in
  mbedtls_pkcs5_pbkdf2_hmac(), mbedtls_internal_sha*_process(),
  mbedtls_internal_md*_process() and mbedtls_internal_ripemd160_process()
  functions to erase sensitive data from memory. Reported by Johan Malmgren and
  Johan Uppman Bruce from Sectra.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1611057600">- Fix build for Leap targets
- Use upstream tarball name</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1616414400">- Update to 2.26.0: [bsc#1189589, CVE-2021-24119]
  * * This release of Mbed TLS provides bug fixes, minor enhancements and new
  features. This release includes fixes for security issues.
  * see https://github.com/ARMmbed/mbedtls/releases/tag/v2.26.0
- Fix build with patch from https://github.com/ARMmbed/mbedtls/pull/4237
  mbedtls-4237.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1618488000">-  Workaround for building with gcc-11 boo#1181876</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1626782400">- Update to 2.27.0:
  API changes:
  * Update AEAD output size macros to bring them in line with the PSA Crypto
    API version 1.0 spec. This version of the spec parameterizes them on the
    key type used, as well as the key bit-size in the case of
    PSA_AEAD_TAG_LENGTH.
    The old versions of these macros were renamed and deprecated as follows:
  - PSA_AEAD_TAG_LENGTH          -&gt; PSA_AEAD_TAG_LENGTH_1_ARG
  - PSA_AEAD_ENCRYPT_OUTPUT_SIZE -&gt; PSA_AEAD_ENCRYPT_OUTPUT_SIZE_2_ARG
  - PSA_AEAD_DECRYPT_OUTPUT_SIZE -&gt; PSA_AEAD_DECRYPT_OUTPUT_SIZE_2_ARG
  - PSA_AEAD_UPDATE_OUTPUT_SIZE  -&gt; PSA_AEAD_UPDATE_OUTPUT_SIZE_2_ARG
  - PSA_AEAD_FINISH_OUTPUT_SIZE  -&gt; PSA_AEAD_FINISH_OUTPUT_SIZE_1_ARG
  - PSA_AEAD_VERIFY_OUTPUT_SIZE  -&gt; PSA_AEAD_VERIFY_OUTPUT_SIZE_1_ARG
  * Implement one-shot cipher functions, psa_cipher_encrypt and
    psa_cipher_decrypt, according to the PSA Crypto API 1.0.0
    specification.
  Features:
  * Add mbedtls_rsa_rsassa_pss_sign_ext() function allowing to generate a
    signature with a specific salt length. This function allows to validate
    test cases provided in the NIST's CAVP test suite.
  * Added support for built-in driver keys through the PSA opaque crypto
    driver interface. Refer to the documentation of
    MBEDTLS_PSA_CRYPTO_BUILTIN_KEYS for more information.
  * Implement psa_sign_message() and psa_verify_message().
  * The new function mbedtls_mpi_random() generates a random value in a
    given range uniformly.
  * Implement psa_mac_compute() and psa_mac_verify() as defined in the
    PSA Cryptograpy API 1.0.0 specification.
  * MBEDTLS_ECP_MAX_BITS is now determined automatically from the configured
    curves and no longer needs to be configured explicitly to save RAM.
  Security
  * Fix a bias in the generation of finite-field Diffie-Hellman-Merkle (DHM)
    private keys and of blinding values for DHM and elliptic curves (ECP)
    computations.
  * Fix a potential side channel vulnerability in ECDSA ephemeral key generation.
    An adversary who is capable of very precise timing measurements could
    learn partial information about the leading bits of the nonce used for the
    signature, allowing the recovery of the private key after observing a
    large number of signature operations. This completes a partial fix in
    Mbed TLS 2.20.0.
  * It was possible to configure MBEDTLS_ECP_MAX_BITS to a value that is
    too small, leading to buffer overflows in ECC operations. Fail the build
    in such a case.
  * An adversary with access to precise enough information about memory
    accesses (typically, an untrusted operating system attacking a secure
    enclave) could recover an RSA private key after observing the victim
    performing a single private-key operation.
  * An adversary with access to precise enough timing information (typically, a
    co-located process) could recover a Curve25519 or Curve448 static ECDH key
    after inputting a chosen public key and observing the victim performing the
    corresponding private-key operation.
  Bugfix
  * Add printf function attributes to mbedtls_debug_print_msg to ensure we
    get printf format specifier warnings.
  * Fix premature fopen() call in mbedtls_entropy_write_seed_file which may
    lead to seed file corruption in the case where the path to the seed file is
    equal to MBEDTLS_PLATFORM_STD_NV_SEED_FILE.
  * PSA functions other than psa_open_key now return PSA_ERROR_INVALID_HANDLE
    rather than PSA_ERROR_DOES_NOT_EXIST for an invalid handle, bringing them
    in line with version 1.0.0 of the specification.
  * PSA functions creating a key now return PSA_ERROR_INVALID_ARGUMENT rather
    than PSA_ERROR_INVALID_HANDLE when the identifier specified for the key
    to create is not valid, bringing them in line with version 1.0.0 of the
    specification.
  * Fix some cases in the bignum module where the library constructed an
    unintended representation of the value 0 which was not processed
    correctly by some bignum operations. This could happen when
    mbedtls_mpi_read_string() was called on "-0", or when
    mbedtls_mpi_mul_mpi() and mbedtls_mpi_mul_int() was called with one of
    the arguments being negative and the other being 0.
  * Fix a bug in ECDSA that would cause it to fail when the hash is all-bits
    zero.
  * Fix a compilation error when MBEDTLS_ECP_RANDOMIZE_MXZ_ALT is
    defined.
  * Fix an incorrect error code when parsing a PKCS#8 private key.
  * In a TLS client, enforce the Diffie-Hellman minimum parameter size
    set with mbedtls_ssl_conf_dhm_min_bitlen() precisely. Before, the
    minimum size was rounded down to the nearest multiple of 8.
  * In library/net_sockets.c, _POSIX_C_SOURCE and _XOPEN_SOURCE are
    defined to specific values.  If the code is used in a context
    where these are already defined, this can result in a compilation
    error.  Instead, assume that if they are defined, the values will
    be adequate to build Mbed TLS.
  * The cipher suite TLS-RSA-WITH-CAMELLIA-256-GCM-SHA384 was not available
    when SHA-1 was disabled and was offered when SHA-1 was enabled but SHA-384
    was disabled. Fix the dependency.
  * Do not offer SHA384 cipher suites when SHA-384 is disabled.
  * With MBEDTLS_PSA_CRYPTO_C disabled, some functions were getting built
    nonetheless, resulting in undefined reference errors when building a
    shared library.
  * Fix test suite code on platforms where int32_t is not int, such as
    Arm Cortex-M.
  * Fix some issues affecting MBEDTLS_ARIA_ALT implementations: a misplaced
    directive in a header and a missing initialization in the self-test.
  * Fix a missing initialization in the Camellia self-test, affecting
    MBEDTLS_CAMELLIA_ALT implementations.
  * Restore the ability to configure PSA via Mbed TLS options to support RSA
    key pair operations but exclude RSA key generation. When MBEDTLS_GENPRIME
    is not defined PSA will no longer attempt to use mbedtls_rsa_gen_key().
  * Fix a regression introduced in 2.24.0 which broke (D)TLS CBC ciphersuites
    (when the encrypt-then-MAC extension is not in use) with some ALT
    implementations of the underlying hash (SHA-1, SHA-256, SHA-384), causing
    the affected side to wrongly reject valid messages.
  * Remove outdated check-config.h check that prevented implementing the
    timing module on Mbed OS.
  * Fix PSA_ALG_TLS12_PRF and PSA_ALG_TLS12_PSK_TO_MS being too permissive
    about missing inputs.
  * Fix a resource leak in a test suite with an alternative AES
    implementation.
  * Fix a crash in mbedtls_mpi_debug_mpi on a bignum having 0 limbs. This
    could notably be triggered by setting the TLS debug level to 3 or above
    and using a Montgomery curve for the key exchange.
  * psa_verify_hash() was relying on implementation-specific behavior of
    mbedtls_rsa_rsassa_pss_verify() and was causing failures in some _ALT
    implementations. This reliance is now removed.
  * Disallow inputs of length different from the corresponding hash when
    signing or verifying with PSA_ALG_RSA_PSS (The PSA Crypto API mandates
    that PSA_ALG_RSA_PSS uses the same hash throughout the algorithm.)
  * Fix a null pointer dereference when mbedtls_mpi_exp_mod() was called with
    A=0 represented with 0 limbs. Up to and including Mbed TLS 2.26, this bug
    could not be triggered by code that constructed A with one of the
    mbedtls_mpi_read_xxx functions (including in particular TLS code) since
    those always built an mpi object with at least one limb.
  * Fix mbedtls_mpi_gcd(G,A,B) when the value of B is zero. This had no
    effect on Mbed TLS's internal use of mbedtls_mpi_gcd(), but may affect
    applications that call mbedtls_mpi_gcd() directly.
  * The PSA API no longer allows the creation or destruction of keys with a
    read-only lifetime. The persistence level PSA_KEY_PERSISTENCE_READ_ONLY
    can now only be used as intended, for keys that cannot be modified through
    normal use of the API.
  * When MBEDTLS_PSA_CRYPTO_SPM is enabled, crypto_spe.h was not included
    in all the right places. Include it from crypto_platform.h, which is
    the natural place.
  * mbedtls_pk_sign() and mbedtls_pk_verify() and their extended and
    restartable variants now always honor the specified hash length if
    nonzero. Before, for RSA, hash_len was ignored in favor of the length of
    the specified hash algorithm.
  * Fix which alert is sent in some cases to conform to the
    applicable RFC: on an invalid Finished message value, an
    invalid max_fragment_length extension, or an
    unsupported extension used by the server.
  * Correct (change from 12 to 13 bytes) the value of the macro describing the
    maximum nonce length returned by psa_aead_generate_nonce().
  Changes
  * Add extra printf compiler warning flags to builds.
  * Fix memsan build false positive in x509_crt.c with Clang 11
  * Fix the setting of the read timeout in the DTLS sample programs.
  * Remove the AES sample application programs/aes/aescrypt2 which shows
    bad cryptographic practice.
  * Alternative implementations of CMAC may now opt to not support 3DES as a
    CMAC block cipher, and still pass the CMAC self test.
  * Remove configs/config-psa-crypto.h, which was identical to the default
    configuration except for having some extra cryptographic mechanisms
    enabled and for unintended differences. This configuration was primarily
    intended to demonstrate the PSA API, and lost most of its usefulness when
    MBEDTLS_PSA_CRYPTO_C became enabled by default.
  * When building the test suites with GNU make, invoke python3 or python, not
    python2, which is no longer supported upstream.
  * When using session cache based session resumption on the server,
    double-check that custom session cache implementations return
    sessions which are consistent with the negotiated ciphersuite
    and compression method.
  * Fix build failure on MinGW toolchain when __USE_MING_ANSI_STDIO is on.
    When that flag is on, standard GNU C printf format specifiers
    should be used.
  * Reduce the default value of MBEDTLS_ECP_WINDOW_SIZE. This reduces RAM usage
    during ECC operations at a negligible performance cost.
  * mbedtls_mpi_read_binary(), mbedtls_mpi_read_binary_le() and
    mbedtls_mpi_read_string() now construct an mbedtls_mpi object with 0 limbs
    when their input has length 0. Note that this is an implementation detail
    and can change at any time, so this change should be transparent, but it
    may result in mbedtls_mpi_write_binary() or mbedtls_mpi_write_string()
    now writing an empty string where it previously wrote one or more
    zero digits when operating from values constructed with an mpi_read
    function and some mpi operations.
  * Implicitly add PSA_KEY_USAGE_SIGN_MESSAGE key usage policy flag when
    PSA_KEY_USAGE_SIGN_HASH flag is set and PSA_KEY_USAGE_VERIFY_MESSAGE flag
    when PSA_KEY_USAGE_VERIFY_HASH flag is set. This usage flag extension
    is also applied when loading a key from storage.
  * Remove mbedtls-4237.patch upstream
  * Library soname bump to libmbedcrypto7</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1642075200">- Update to 2.28.0: (bsc#1193979, CVE-2021-45450)
  API changes
  * Some fields of mbedtls_ssl_session and mbedtls_ssl_config are in a
  different order. This only affects applications that define such
  structures directly or serialize them.
  Requirement changes
  * Sign-magnitude and one's complement representations for signed integers are
  not supported. Two's complement is the only supported representation.
  Removals
  * Remove config option MBEDTLS_TLS_DEFAULT_ALLOW_SHA1_IN_CERTIFICATES,
  which allowed SHA-1 in the default TLS configuration for certificate
  signing. It was intended to facilitate the transition in environments
  with SHA-1 certificates. SHA-1 is considered a weak message digest and
  its use constitutes a security risk.
  * Remove the partial support for running unit tests via Greentea on Mbed OS,
  which had been unmaintained since 2018.
  Features
  * The identifier of the CID TLS extension can be configured by defining
  MBEDTLS_TLS_EXT_CID at compile time.
  * Warn if errors from certain functions are ignored. This is currently
  supported on GCC-like compilers and on MSVC and can be configured through
  the macro MBEDTLS_CHECK_RETURN. The warnings are always enabled
  (where supported) for critical functions where ignoring the return
  value is almost always a bug. Enable the new configuration option
  MBEDTLS_CHECK_RETURN_WARNING to get warnings for other functions. This
  is currently implemented in the AES, DES and md modules, and will be
  extended to other modules in the future.
  * Add missing PSA macros declared by PSA Crypto API 1.0.0:
  PSA_ALG_IS_SIGN_HASH, PSA_ALG_NONE, PSA_HASH_BLOCK_LENGTH, PSA_KEY_ID_NULL.
  * Add new API mbedtls_ct_memcmp for constant time buffer comparison.
  * Add PSA API definition for ARIA.
  Security
  * Zeroize several intermediate variables used to calculate the expected
  value when verifying a MAC or AEAD tag. This hardens the library in
  case the value leaks through a memory disclosure vulnerability. For
  example, a memory disclosure vulnerability could have allowed a
  man-in-the-middle to inject fake ciphertext into a DTLS connection.
  * In psa_cipher_generate_iv() and psa_cipher_encrypt(), do not read back
  from the output buffer. This fixes a potential policy bypass or decryption
  oracle vulnerability if the output buffer is in memory that is shared with
  an untrusted application.
  * Fix a double-free that happened after mbedtls_ssl_set_session() or
  mbedtls_ssl_get_session() failed with MBEDTLS_ERR_SSL_ALLOC_FAILED
  (out of memory). After that, calling mbedtls_ssl_session_free()
  and mbedtls_ssl_free() would cause an internal session buffer to
  be free()'d twice.
  Bugfix
  * Stop using reserved identifiers as local variables. Fixes #4630.
  * The GNU makefiles invoke python3 in preference to python except on Windows.
  * The check was accidentally not performed when cross-compiling for Windows
  on Linux. Fix this. Fixes #4774.
  * Prevent divide by zero if either of PSA_CIPHER_ENCRYPT_OUTPUT_SIZE() or
  PSA_CIPHER_UPDATE_OUTPUT_SIZE() were called using an asymmetric key type.
  * Fix a parameter set but unused in psa_crypto_cipher.c. Fixes #4935.
  * Don't use the obsolete header path sys/fcntl.h in unit tests.
  These header files cause compilation errors in musl.
  Fixes #4969.
  * Fix missing constraints on x86_64 and aarch64 assembly code
  for bignum multiplication that broke some bignum operations with
  (at least) Clang 12.
  Fixes #4116, #4786, #4917, #4962.
  * Fix mbedtls_cipher_crypt: AES-ECB when MBEDTLS_USE_PSA_CRYPTO is enabled.
  * Failures of alternative implementations of AES or DES single-block
  functions enabled with MBEDTLS_AES_ENCRYPT_ALT, MBEDTLS_AES_DECRYPT_ALT,
  MBEDTLS_DES_CRYPT_ECB_ALT or MBEDTLS_DES3_CRYPT_ECB_ALT were ignored.
  This does not concern the implementation provided with Mbed TLS,
  where this function cannot fail, or full-module replacements with
  MBEDTLS_AES_ALT or MBEDTLS_DES_ALT. Reported by Armelle Duboc in #1092.
  * Some failures of HMAC operations were ignored. These failures could only
  happen with an alternative implementation of the underlying hash module.
  * Fix the error returned by psa_generate_key() for a public key. Fixes #4551.
  * Fix the build of sample programs when neither MBEDTLS_ERROR_C nor
  MBEDTLS_ERROR_STRERROR_DUMMY is enabled.
  * Fix PSA_ALG_RSA_PSS verification accepting an arbitrary salt length.
  This algorithm now accepts only the same salt length for verification
  that it produces when signing, as documented. Use the new algorithm
  PSA_ALG_RSA_PSS_ANY_SALT to accept any salt length. Fixes #4946.
  * The existing predicate macro name PSA_ALG_IS_HASH_AND_SIGN is now reserved
  for algorithm values that fully encode the hashing step, as per the PSA
  Crypto API specification. This excludes PSA_ALG_RSA_PKCS1V15_SIGN_RAW and
  PSA_ALG_ECDSA_ANY. The new predicate macro PSA_ALG_IS_SIGN_HASH covers
  all algorithms that can be used with psa_{sign,verify}_hash(), including
  these two.
  * Fix issue in Makefile on Linux with SHARED=1, that caused shared libraries
  not to list other shared libraries they need.
  * Fix a bug in mbedtls_gcm_starts() when the bit length of the iv
  exceeds 2^32. Fixes #4884.
  * Fix an uninitialized variable warning in test_suite_ssl.function with GCC
  version 11.
  * Fix the build when no SHA2 module is included. Fixes #4930.
  * Fix the build when only the bignum module is included. Fixes #4929.
  * Fix a potential invalid pointer dereference and infinite loop bugs in
  pkcs12 functions when the password is empty. Fix the documentation to
  better describe the inputs to these functions and their possible values.
  Fixes #5136.
  * The key usage flags PSA_KEY_USAGE_SIGN_MESSAGE now allows the MAC
  operations psa_mac_compute() and psa_mac_sign_setup().
  * The key usage flags PSA_KEY_USAGE_VERIFY_MESSAGE now allows the MAC
  operations psa_mac_verify() and psa_mac_verify_setup().
  Changes
  * Set config option MBEDTLS_TLS_DEFAULT_ALLOW_SHA1_IN_KEY_EXCHANGE to be
  disabled by default.
  * Improve the performance of base64 constant-flow code. The result is still
  slower than the original non-constant-flow implementation, but much faster
  than the previous constant-flow implementation. Fixes #4814.
  * Indicate in the error returned if the nonce length used with
  ChaCha20-Poly1305 is invalid, and not just unsupported.
  * The mbedcrypto library includes a new source code module constant_time.c,
  containing various functions meant to resist timing side channel attacks.
  * This module does not have a separate configuration option, and functions
  from this module will be included in the build as required. Currently
  most of the interface of this module is private and may change at any
  time.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1642420800">- Fix baselib.conf</changelog>
  <changelog author="Alexander Bergmann &lt;abergmann@suse.com&gt;" date="1671624000">- Fix potential heap buffer overread and overwrite in DTLS if
  MBEDTLS_SSL_DTLS_CONNECTION_ID is enabled and
  MBEDTLS_SSL_CID_IN_LEN_MAX &gt; 2 * MBEDTLS_SSL_CID_OUT_LEN_MAX.
  (bsc#1206576, CVE-2022-46393).
  Add: mbedtls-CVE-2022-46393.patch</changelog>
</package>
<package pkgid="40614d57a54712c7cfea9f3a55c969d981ff3af555269fa3cfe7963b36e4cb90" name="libmbedx509-1" arch="x86_64">
  <version epoch="0" ver="2.28.0" rel="bp154.2.3.1"/>
  <changelog author="mpluskal@suse.com" date="1531137600">- Update to version 2.11.0:
  * Features
    + Added support for the XTS block cipher mode with AES (AES-XTS). Contributed by Aorimn in pull request #414.
    + Implemented the HMAC-based extract-and-expand key derivation function (HKDF) per RFC 5869. Contributed by Thomas Fossati.
    + For TLS servers, added support for offloading private key operations to an external cryptoprocessor. Private key operations can be asynchronous to allow non-blocking operation of the TLS server stack.
    + Added support for ARIA cipher (RFC 5794) and associated TLS ciphersuites (RFC 6209). ARIA is disabled by default. To enable, see MBEDTLS_ARIA_C in config.h.
    + Added support for the CCM* block cipher mode as defined in IEEE Std 802.15.4.
    + Added an additional block mode, OFB (Output Feedback) per NIST SP 800-38a, to the AES module and cipher abstraction module.
  * API Changes
    + Mbed TLS 2.11.0 maintains source code compatibility with the last minor version, Mbed TLS 2.9.0, but extends the interface with additional capabilities. Mbed TLS 2.11.0 modifies the ABI and increases the SOVERSION.
  * Bugfix
    + Fixed the cert_write example to handle certificates signed with elliptic curves as well as RSA. Fixes #777 found by dbedev.
    + Fixed the redefinition of _WIN32_WINNT, to avoid overriding a definition used by user applications. Found and fixed by Fabio Alessandrelli.
    + Fixed compilation warnings with the IAR toolchain on 32-bit platforms. Reported by rahmanih in #683.
    + Fixed an issue with MicroBlaze support in bn_mul.h which was causing the build to fail. Found by zv-io. Fixes #1651.
    + Fixed braces in mbedtls_memory_buffer_alloc_status(). Found by sbranden in #552.
    + Added the macro MBEDTLS_X509_MAX_FILE_PATH_LEN that enables the user to configure the maximum length of a file path that can be buffered when calling mbedtls_x509_crt_parse_path(). Fixes #492.
    + Fixed redundant declaration of mbedtls_ssl_list_ciphersuites. Raised by TrinityTonic in #1359.
- Changes for version 2.9.0:
  + Security
    + Fixed an issue in the X.509 module which could lead to a buffer overread during certificate validation. Additionally, the issue could also lead to unnecessary callback checks being made or to some validation checks to be omitted. The overread could be triggered remotely, while the other issues would require a non DER-compliant certificate to be correctly signed by a trusted CA, or a trusted CA with a non DER-compliant certificate. Found by luocm. Fixes #825.
    + Fixed the buffer length assertion in the ssl_parse_certificate_request() function which could lead to an arbitrary overread of the message buffer. The overreads could be caused by receiving a malformed algorithms section which was too short. In builds with debug output, this overread data was output with the debug data.
    + Fixed a client-side bug in the validation of the server's ciphersuite choice which could potentially lead to the client accepting a ciphersuite it didn't offer or a ciphersuite that could not be used with the TLS or DTLS version chosen by the server. This could lead to corruption of internal data structures for some configurations.
  * Features
    + Added an option of MBEDTLS_AES_FEWER_TABLES, to dynamically compute smaller AES tables during runtime, thereby reducing the RAM/ROM footprint by ~6KiB. Suggested and contributed by jkivilin.
    + Added initial support for Curve448 (RFC 7748). So far only mbedtls_ecp_mul() and ECDH primitive functions (mbedtls_ecdh_gen_public(), mbedtls_ecdh_compute_shared()) are supported for now. Contributed by Nicholas Wilson.
  * API Changes
    + Mbed TLS 2.9.0 maintains source code and binary compatibility with the last minor version, Mbed TLS 2.8.0, but extends the interface with additional capabilities.
    + Extended the API with the function of mbedtls_net_poll() to allow user applications to wait for a network context to become ready before reading or writing.
    + Added the function mbedtls_ssl_check_pending() to the public API to allow a check for whether more more data is pending to be processed in the internal message buffers. This function is necessary to determine the underlying transport when event-driven IO is used.
  * Bugfix
    + Fixed a spurious uninitialized variable warning in cmac.c. Fix independently contributed by Brian J Murray and David Brown.
    + Added missing dependencies in test suites that led to build failures in configurations that omit certain hashes or public-key algorithms. Fixes #1040.
    + Fixed a C89 incompatibility issue in benchmark.c. Contributed by Brendan Shanks. Fixes #1353.
    + Added missing dependencies for MBEDTLS_HAVE_TIME_DATE and MBEDTLS_VERSION_FEATURES in some test suites. Contributed by Deomid Ryabkov. Fixes #1299, #1475.
    + Fixed the Makefile build process for building shared libraries on Mac OS X. Fixed by mnacamura.
    + Fixed parsing of PKCS#8 encoded Elliptic Curve keys. Previously Mbed TLS was unable to parse keys which had only the optional parameters field of the ECPrivateKey structure. Found by Jethro Beekman, fixed in #1379.
    + Added an optimisation to return the plaintext data more quickly on unpadded CBC decryption, as stated in the mbedtls_cipher_update() documentation. Contributed by Andy Leiserson.
    + Fixed the overriding and ignoring of return values when parsing and writing to a file in the pk_sign program. Found by kevlut in #1142.
    + Added restrictions to the usage of the error code MBEDTLS_ERR_SSL_WANT_READ to situations where data needs to be fetched from the underlying transport in order to make progress. Previously, this error code was also occasionally returned when unexpected messages were being discarded, ignoring that further messages could potentially already be pending to be processed in the internal buffers; these cases led to deadlocks when event-driven I/O was used. Found and reported by Hubert Mis in #772.
    + Fixed buffer length assertions in the ssl_parse_certificate_request() function which led to a potential one byte overread of the message buffer.
    + Fixed invalid buffer sizes being passed to zlib during record compression and decompression.
    + Raised the soversion of libmbedcrypto to match the soversion of the maintained 2.7 branch. The soversion was increased in Mbed TLS version 2.7.1 to reflect breaking changes in that release, but the increment was missed in 2.8.0 and later releases outside of the 2.7 branch.</changelog>
  <changelog author="mpluskal@suse.com" date="1535025600">- Update to version 2.12.0:
  * Security
    + Fixed a vulnerability in the TLS ciphersuites based on use of CBC and SHA-384 in DTLS/TLS 1.0 to 1.2, that allowed an active network attacker to partially recover the plaintext of messages under certains conditions by exploiting timing side-channels.
    + Fixed a vulnerability in TLS ciphersuites based on CBC, in DTLS/TLS 1.0 to 1.2, that allowed a local attacker, with the ability to execute code on the local machine as well as to manipulate network packets, to partially recover the plaintext of messages under certain conditions by using a cache attack targetting an internal MD/SHA buffer.
    + Added a counter-measure against a vulnerability in TLS ciphersuites based on CBC, in DTLS/TLS 1.0 to 1.2, that allowed a local attacker with the ability to execute code on the local machine as well as manipulate network packets, to partially recover the plaintext of messages certain conditions (see previous entry) by using a cache attack targeting the SSL input record buffer.
  * Features
    + Added new cryptographic primitives, the stream cipher Chacha20, one-time authenticator Poly1305 and AEAD construct Chacha20-Poly1305, as defined in RFC 7539. Contributed by Daniel King.
    + Added support for the CHACHA20-POLY1305 ciphersuites from RFC 7905.
    + Made the receive and transmit buffers independently configurable in size, for situations where the outgoing buffer can be fixed at a smaller size than the incoming buffer
    + Added support for the AES based key wrapping modes defined by NIST SP 800-38F algorithms KW and KWP and by RFC's 3394 and 5649.
    + Added platform support for the Haiku OS.
  * Bugfix
    + Fixed the key_app_writer example which was creating an invalid ASN.1 tag by writing an additional leading zero byte. Found by Aryeh R. #1257.
    + Fixed a C++ compilation error, caused by a variable named new. Found and fixed by Hirotaka Niisato. #1783.
    + Fixed the "no symbols" warning issued by ranlib when building on Mac OS X. Fix contributed by tabascoeye.
    + Clarified documentation for mbedtls_ssl_write() to include 0 as a valid return value. Found by @davidwu2000. #839.
    + Fixed a memory leak in mbedtls_x509_csr_parse(). Found and fixed by catenacyber, Philippe Antoine. #1623.
    + Added length checks to some TLS parsing functions. Found and fixed by Philippe Antoine from Catena cyber. #1663.
    + Remove unused headers included in x509.c. Found by Chris Hanson and fixed by Brendan Shanks. #992.
    + Fixed compilation error when MBEDTLS_ARC4_C is disabled and MBEDTLS_CIPHER_NULL_CIPHER is enabled. Found by TrinityTonic in #1719.
    + Fixed the inline assembly for the MPI multiply helper function for i386 and i386 with SSE2. Found by László Langó. #1550.
    + Fixed the namespacing in header files. Remove the mbedtls namespacing in the #include in the header files. #857.
    + Fixed a compiler warning of 'use before initialisation' in mbedtls_pk_parse_key(). Found by Martin Boye Petersen and fixed by Dawid Drozd.#1098.
    + Fixed decryption of zero length messages (which contain all padding) when a CBC based ciphersuite was used together with Encrypt-then-MAC.
    + Fixed the ssl_client2 example to send application data with 0-length content when the request_size argument is set to 0 as stated in the documentation. #1833.
    + Corrected the documentation for mbedtls_ssl_get_session(). This API has deep copy of the session, and the peer certificate is not lost. #926.
    + Fixed issues when building to the C99 standard, using -std=c99. Fixed by Nick Wilson.
  * Changes
    + Fails when receiving a TLS alert message with an invalid length, or invalid zero-length messages when using TLS 1.2. Contributed by Espressif Systems.
    + Changed the default behaviour of mbedtls_hkdf_extract() to return an error when calling with a NULL salt and non-zero salt length. Contributed by Brian J Murray
    + Change the shebang line in Perl scripts to look up perl in the PATH. Contributed by fbrosson.
    + Allow overriding the time on Windows via the platform-time abstraction. Fixed by Nick Wilson.
    + Use gmtime_r/gmtime_s for thread-safety. Fixed by Nick Wilson.</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1544529600">- Update to version 2.14.1: [bsc#1118727, CVE-2018-19608]
  Security
  * Fix timing variations and memory access variations in RSA PKCS#1 v1.5
    decryption that could lead to a Bleichenbacher-style padding oracle
    attack. In TLS, this affects servers that accept ciphersuites based on
    RSA decryption (i.e. ciphersuites whose name contains RSA but not
    (EC)DH(E)). Discovered by Eyal Ronen (Weizmann Institute),  Robert Gillham
    (University of Adelaide), Daniel Genkin (University of Michigan),
    Adi Shamir (Weizmann Institute), David Wong (NCC Group), and Yuval Yarom
    (University of Adelaide, Data61). The attack is described in more detail
    in the paper available here: http://cat.eyalro.net/cat.pdf  CVE-2018-19608
  * In mbedtls_mpi_write_binary(), don't leak the exact size of the number
    via branching and memory access patterns. An attacker who could submit
    a plaintext for RSA PKCS#1 v1.5 decryption but only observe the timing
    of the decryption and not its result could nonetheless decrypt RSA
    plaintexts and forge RSA signatures. Other asymmetric algorithms may
    have been similarly vulnerable. Reported by Eyal Ronen, Robert Gillham,
    Daniel Genkin, Adi Shamir, David Wong and Yuval Yarom.
  * Wipe sensitive buffers on the stack in the CTR_DRBG and HMAC_DRBG
    modules.
  API Changes
  * The new functions mbedtls_ctr_drbg_update_ret() and
    mbedtls_hmac_drbg_update_ret() are similar to mbedtls_ctr_drbg_update()
    and mbedtls_hmac_drbg_update() respectively, but the new functions
    report errors whereas the old functions return void. We recommend that
    applications use the new functions.
- Version 2.14.0:
  Security
  * Fix overly strict DN comparison when looking for CRLs belonging to a
    particular CA. This previously led to ignoring CRLs when the CRL's issuer
    name and the CA's subject name differed in their string encoding (e.g.,
    one using PrintableString and the other UTF8String) or in the choice of
    upper and lower case. Reported by Henrik Andersson of Bosch GmbH in issue
    [#1784].
  * Fix a flawed bounds check in server PSK hint parsing. In case the
    incoming message buffer was placed within the first 64KiB of address
    space and a PSK-(EC)DHE ciphersuite was used, this allowed an attacker
    to trigger a memory access up to 64KiB beyond the incoming message buffer,
    potentially leading to an application crash or information disclosure.
  * Fix mbedtls_mpi_is_prime() to use more rounds of probabilistic testing. The
    previous settings for the number of rounds made it practical for an
    adversary to construct non-primes that would be erroneously accepted as
    primes with high probability. This does not have an impact on the
    security of TLS, but can matter in other contexts with numbers chosen
    potentially by an adversary that should be prime and can be validated.
    For example, the number of rounds was enough to securely generate RSA key
    pairs or Diffie-Hellman parameters, but was insufficient to validate
    Diffie-Hellman parameters properly.
    See "Prime and Prejudice" by by Martin R. Albrecht and Jake Massimo and
    Kenneth G. Paterson and Juraj Somorovsky.
  Features
  * Add support for temporarily suspending expensive ECC computations after
    some configurable amount of operations. This is intended to be used in
    constrained, single-threaded systems where ECC is time consuming and can
    block other operations until they complete. This is disabled by default,
    but can be enabled by MBEDTLS_ECP_RESTARTABLE at compile time and
    configured by mbedtls_ecp_set_max_ops() at runtime. It applies to the new
    xxx_restartable functions in ECP, ECDSA, PK and X.509 (CRL not supported
    yet), and to existing functions in ECDH and SSL (currently only
    implemented client-side, for ECDHE-ECDSA ciphersuites in TLS 1.2,
    including client authentication).
  * Add support for Arm CPU DSP extensions to accelerate asymmetric key
    operations. On CPUs where the extensions are available, they can accelerate
    MPI multiplications used in ECC and RSA cryptography. Contributed by
    Aurelien Jarno.
  * Extend RSASSA-PSS signature to allow a smaller salt size. Previously, PSS
    signature always used a salt with the same length as the hash, and returned
    an error if this was not possible. Now the salt size may be up to two bytes
    shorter. This allows the library to support all hash and signature sizes
    that comply with FIPS 186-4, including SHA-512 with a 1024-bit key.
  * Add support for 128-bit keys in CTR_DRBG. Note that using keys shorter
    than 256 bits limits the security of generated material to 128 bits.
  API Changes
  * Add a common error code of `MBEDTLS_ERR_PLATFORM_FEATURE_UNSUPPORTED` for
    a feature that is not supported by underlying alternative
    implementations implementing cryptographic primitives. This is useful for
    hardware accelerators that don't implement all options or features.
  New deprecations
  * All module specific errors following the form
    MBEDTLS_ERR_XXX_FEATURE_UNAVAILABLE that indicate a feature is not
    supported are deprecated and are now replaced by the new equivalent
    platform error.
  * All module specific generic hardware acceleration errors following the
    form MBEDTLS_ERR_XXX_HW_ACCEL_FAILED that are deprecated and are replaced
    by the equivalent plaform error.
  * Deprecate the function mbedtls_mpi_is_prime() in favor of
    mbedtls_mpi_is_prime_ext() which allows specifying the number of
    Miller-Rabin rounds.
  Bugfix
  * Fix wrong order of freeing in programs/ssl/ssl_server2 example
    application leading to a memory leak in case both
    MBEDTLS_MEMORY_BUFFER_ALLOC_C and MBEDTLS_MEMORY_BACKTRACE are set.
    Fixes #2069.
  * Fix a bug in the update function for SSL ticket keys which previously
    invalidated keys of a lifetime of less than a 1s. Fixes #1968.
  * Fix failure in hmac_drbg in the benchmark sample application, when
    MBEDTLS_THREADING_C is defined. Found by TrinityTonic, #1095
  * Fix a bug in the record decryption routine ssl_decrypt_buf()
    which lead to accepting properly authenticated but improperly
    padded records in case of CBC ciphersuites using Encrypt-then-MAC.
  * Fix memory leak and freeing without initialization in the example
    program programs/x509/cert_write. Fixes #1422.
  * Ignore IV in mbedtls_cipher_set_iv() when the cipher mode is
    MBEDTLS_MODE_ECB. Found by ezdevelop. Fixes #1091.
  * Zeroize memory used for buffering or reassembling handshake messages
    after use.
  * Use `mbedtls_platform_zeroize()` instead of `memset()` for zeroization
    of sensitive data in the example programs aescrypt2 and crypt_and_hash.
  * Change the default string format used for various X.509 DN attributes to
    UTF8String. Previously, the use of the PrintableString format led to
    wildcards and non-ASCII characters being unusable in some DN attributes.
    Reported by raprepo in #1860 and by kevinpt in #468. Fix contributed by
    Thomas-Dee.
  * Fix compilation failure for configurations which use compile time
    replacements of standard calloc/free functions through the macros
    MBEDTLS_PLATFORM_CALLOC_MACRO and MBEDTLS_PLATFORM_FREE_MACRO.
    Reported by ole-de and ddhome2006. Fixes #882, #1642 and #1706.
  Changes
  * Removed support for Yotta as a build tool.
  * Add tests for session resumption in DTLS.
  * Close a test gap in (D)TLS between the client side and the server side:
    test the handling of large packets and small packets on the client side
    in the same way as on the server side.
  * Change the dtls_client and dtls_server samples to work by default over
    IPv6 and optionally by a build option over IPv4.
  * Change the use of Windows threading to use Microsoft Visual C++ runtime
    calls, rather than Win32 API calls directly. This is necessary to avoid
    conflict with C runtime usage. Found and fixed by irwir.
  * Remember the string format of X.509 DN attributes when replicating
    X.509 DNs. Previously, DN attributes were always written in their default
    string format (mostly PrintableString), which could lead to CRTs being
    created which used PrintableStrings in the issuer field even though the
    signing CA used UTF8Strings in its subject field; while X.509 compliant,
    such CRTs were rejected in some applications, e.g. some versions of
    Firefox, curl and GnuTLS. Reported in #1033 by Moschn. Fix contributed by
    Thomas-Dee.
  * Improve documentation of mbedtls_ssl_get_verify_result().
    Fixes #517 reported by github-monoculture.
  * Add MBEDTLS_MPI_GEN_PRIME_FLAG_LOW_ERR flag to mbedtls_mpi_gen_prime() and
    use it to reduce error probability in RSA key generation to levels mandated
    by FIPS-186-4.
- Version 2.13.1
  API Changes
  * Extend the platform module with an abstraction mbedtls_platform_gmtime_r()
    whose implementation should behave as a thread-safe version of gmtime().
    This allows users to configure such an implementation at compile time when
    the target system cannot be deduced automatically, by setting the option
    MBEDTLS_PLATFORM_GMTIME_R_ALT. At this stage Mbed TLS is only able to
    automatically select implementations for Windows and POSIX C libraries.
  Bugfix
  * Fix build failures on platforms where only gmtime() is available but
    neither gmtime_r() nor gmtime_s() are present. Fixes #1907.
- Version 2.13.0
  Security
  * Fix an issue in the X.509 module which could lead to a buffer overread
    during certificate extensions parsing. In case of receiving malformed
    input (extensions length field equal to 0), an illegal read of one byte
    beyond the input buffer is made. Found and analyzed by Nathan Crandall.
  Features
  * Add support for fragmentation of outgoing DTLS handshake messages. This
    is controlled by the maximum fragment length as set locally or negotiated
    with the peer, as well as by a new per-connection MTU option, set using
    mbedtls_ssl_set_mtu().
  * Add support for auto-adjustment of MTU to a safe value during the
    handshake when flights do not get through (RFC 6347, section 4.1.1.1,
    last paragraph).
  * Add support for packing multiple records within a single datagram,
    enabled by default.
  * Add support for buffering out-of-order handshake messages in DTLS.
    The maximum amount of RAM used for this can be controlled by the
    compile-time constant MBEDTLS_SSL_DTLS_MAX_BUFFERING defined
    in mbedtls/config.h.
  API Changes
  * Add function mbedtls_ssl_set_datagram_packing() to configure
    the use of datagram packing (enabled by default).
  Bugfix
  * Fix a potential memory leak in mbedtls_ssl_setup() function. An allocation
    failure in the function could lead to other buffers being leaked.
  * Fixes an issue with MBEDTLS_CHACHAPOLY_C which would not compile if
    MBEDTLS_ARC4_C and MBEDTLS_CIPHER_NULL_CIPHER weren't also defined. #1890
  * Fix a memory leak in ecp_mul_comb() if ecp_precompute_comb() fails.
    Fix contributed by Espressif Systems.
  * Add ecc extensions only if an ecc based ciphersuite is used.
    This improves compliance to RFC 4492, and as a result, solves
    interoperability issues with BouncyCastle. Raised by milenamil in #1157.
  * Replace printf with mbedtls_printf in the ARIA module. Found by
    TrinityTonic in #1908.
  * Fix potential use-after-free in mbedtls_ssl_get_max_frag_len()
    and mbedtls_ssl_get_record_expansion() after a session reset. Fixes #1941.
  * Fix a bug that caused SSL/TLS clients to incorrectly abort the handshake
    with TLS versions 1.1 and earlier when the server requested authentication
    without providing a list of CAs. This was due to an overly strict bounds
    check in parsing the CertificateRequest message,
    introduced in Mbed TLS 2.12.0. Fixes #1954.
  * Fix a miscalculation of the maximum record expansion in
    mbedtls_ssl_get_record_expansion() in case of ChachaPoly ciphersuites,
    or CBC ciphersuites in (D)TLS versions 1.1 or higher. Fixes #1913, #1914.
  * Fix undefined shifts with negative values in certificates parsing
    (found by Catena cyber using oss-fuzz)
  * Fix memory leak and free without initialization in pk_encrypt
    and pk_decrypt example programs. Reported by Brace Stout. Fixes #1128.
  * Remove redundant else statement. Raised by irwir. Fixes #1776.
  Changes
  * Copy headers preserving timestamps when doing a "make install".
    Contributed by xueruini.
  * Allow the forward declaration of public structs. Contributed by Dawid
    Drozd. Fixes #1215 raised by randombit.
  * Improve compatibility with some alternative CCM implementations by using
    CCM test vectors from RAM.
  * Add support for buffering of out-of-order handshake messages.
  * Add warnings to the documentation of the HKDF module to reduce the risk
    of misusing the mbedtls_hkdf_extract() and mbedtls_hkdf_expand()
    functions. Fixes #1775. Reported by Brian J. Murray.</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1544529601">- Library package version bumped to libmbedtls12</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1546862400">- Update to version 2.16.0:
  Features
  * Add a new config.h option of MBEDTLS_CHECK_PARAMS that enables validation of parameters in the API. This allows detection of obvious misuses of the API, such as passing NULL pointers. The API of existing functions hasn't changed, but requirements on parameters have been made more explicit in the documentation. See the corresponding API documentation for each function to see for which parameter values it is defined. This feature is disabled by default. See its API documentation in config.h for additional steps you have to take when enabling it.
  API Changes
  * The following functions in the random generator modules have been deprecated and replaced as shown below. The new functions change the return type from void to int to allow returning error codes when using MBEDTLS_&lt;MODULE&gt;_ALT for the underlying AES or message digest primitive. Fixes #1798. mbedtls_ctr_drbg_update() -&gt; mbedtls_ctr_drbg_update_ret() mbedtls_hmac_drbg_update() -&gt; mbedtls_hmac_drbg_update_ret()
  * Extend ECDH interface to enable alternative implementations.
  * Deprecate error codes of the form MBEDTLS_ERR_xxx_INVALID_KEY_LENGTH for ARIA, CAMELLIA and Blowfish. These error codes will be replaced by the more generic per-module error codes MBEDTLS_ERR_xxx_BAD_INPUT_DATA.
  * Additional parameter validation checks have been added for the following modules - AES, ARIA, Blowfish, CAMELLIA, CCM, GCM, DHM, ECP, ECDSA, ECDH, ECJPAKE, SHA, Chacha20 and Poly1305, cipher, pk, RSA, and MPI. Where modules have had parameter validation added, existing parameter checks may have changed. Some modules, such as Chacha20 had existing parameter validation whereas other modules had little. This has now been changed so that the same level of validation is present in all modules, and that it is now optional with the MBEDTLS_CHECK_PARAMS flag which by default is off. That means that checks which were previously present by default will no longer be.
  New deprecations
  * Deprecate mbedtls_ctr_drbg_update() and mbedtls_hmac_drbg_update() in favor of functions that can return an error code.
  Bugfix
  * Fix for Clang, which was reporting a warning for the bignum.c inline assembly for AMD64 targets creating string literals greater than those permitted by the ISO C99 standard. Found by Aaron Jones. Fixes #482.
  * Fix runtime error in mbedtls_platform_entropy_poll() when run through qemu user emulation. Reported and fix suggested by randombit. Fixes #1212.
  * Fix an unsafe bounds check when restoring an SSL session from a ticket. This could lead to a buffer overflow, but only in case ticket authentication was broken. Reported and fix suggested by Guido Vranken in #659.
  * Add explicit integer to enumeration type casts to example program programs/pkey/gen_key which previously led to compilation failure on some toolchains. Reported by phoenixmcallister. Fixes #2170.
  * Clarify documentation of mbedtls_ssl_set_own_cert() regarding the absence of check for certificate/key matching. Reported by Attila Molnar, #507.
  * Fix double initialization of ECC hardware that made some accelerators hang.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1567512000">- Update to version 2.16.2:
  * Security improvements and bugfixes
- Use ninja to for build</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1573646400">- Update to version 2.16.3:
  * Security improvements and bugfixes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1585828800">- Update to version 2.16.5:
  * Security improvements and bugfixes</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597665600">- update to 2.23.0:
  a lot of changes see https://github.com/ARMmbed/mbedtls/releases/tag/v2.23.0
  * Fix a side channel vulnerability in modular exponentiation that could reveal an RSA private key used in a secure enclave. Noticed by Sangho Lee, Ming-Wei Shih, Prasun Gera, Taesoo Kim and Hyesoon Kim (Georgia Institute of Technology); and Marcus Peinado (Microsoft Research). Reported by Raoul Strackx (Fortanix) in #3394.
  * Fix side channel in mbedtls_ecp_check_pub_priv() and mbedtls_pk_parse_key() / mbedtls_pk_parse_keyfile() (when loading a private key that didn't include the uncompressed public key), as well as mbedtls_ecp_mul() / mbedtls_ecp_mul_restartable() when called with a NULL f_rng argument. An attacker with access to precise enough timing and memory access information (typically an untrusted operating system attacking a secure enclave) could fully recover the ECC private key. Found and reported by Alejandro Cabrera Aldaya and Billy Brumley.
  * Fix issue in Lucky 13 counter-measure that could make it ineffective when hardware accelerators were used (using one of the MBEDTLS_SHAxxx_ALT macros). This would cause the original Lucky 13 attack to be possible in those configurations, allowing an active network attacker to recover plaintext after repeated timing measurements under some conditions. Reported and fix suggested by Luc Perneel in #3246.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1598875200">- Do not run testsuite in parallel - its not reliable</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1599480000">- Add workaround for failing builds (Python not found) due to
  https://gitlab.kitware.com/cmake/cmake/-/issues/21168</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1599652800">- update to 2.24.0:
  * see https://github.com/ARMmbed/mbedtls/releases/tag/v2.24.0
  * Fix a vulnerability in the verification of X.509 certificates when matching
  the expected common name (the cn argument of mbedtls_x509_crt_verify())
  with the actual certificate name: when the subjecAltName extension is
  present, the expected name was compared to any name in that extension
  regardless of its type. This means that an attacker could for example
  impersonate a 4-bytes or 16-byte domain by getting a certificate for the
  corresponding IPv4 or IPv6 (this would require the attacker to control that
  IP address, though). Similar attacks using other subjectAltName name types
  might be possible.
  * When checking X.509 CRLs, a certificate was only considered as revoked if
  its revocationDate was in the past according to the local clock if
  available. In particular, on builds without MBEDTLS_HAVE_TIME_DATE,
  certificates were never considered as revoked. On builds with
  MBEDTLS_HAVE_TIME_DATE, an attacker able to control the local clock (for
  example, an untrusted OS attacking a secure enclave) could prevent
  revocation of certificates via CRLs. Fixed by no longer checking the
  revocationDate field, in accordance with RFC 5280. Reported by yuemonangong
  in #3340. Reported independently and fixed by Raoul Strackx and Jethro
  * In (D)TLS record decryption, when using a CBC ciphersuites without the
  Encrypt-then-Mac extension, use constant code flow memory access patterns
  to extract and check the MAC. This is an improvement to the existing
  countermeasure against Lucky 13 attacks. The previous countermeasure was
  effective against network-based attackers, but less so against local
  attackers. The new countermeasure defends against local attackers, even if
  they have access to fine-grained measurements. In particular, this fixes a
  local Lucky 13 cache attack found and reported by Tuba Yavuz, Farhaan
  Fowze, Ken (Yihan) Bai, Grant Hernandez, and Kevin Butler (University of
  Florida) and Dave Tian (Purdue University).
  * Fix side channel in RSA private key operations and static (finite-field)
  Diffie-Hellman. An adversary with precise enough timing and memory access
  information (typically an untrusted operating system attacking a secure
  enclave) could bypass an existing counter-measure (base blinding) and
  potentially fully recover the private key.
  * Fix a 1-byte buffer overread in mbedtls_x509_crl_parse_der(). Credit to
  OSS-Fuzz for detecting the problem and to Philippe Antoine for pinpointing
  the problematic code.
  * Zeroising of plaintext buffers in mbedtls_ssl_read() to erase unused
  application data from memory.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1608638400">- update to 2.25.0:
  * This release of Mbed TLS provides bug fixes, minor enhancements and new
  features. This release includes fixes for security issues.
  * see https://github.com/ARMmbed/mbedtls/releases/tag/v2.25.0
  * The functions mbedtls_cipher_auth_encrypt() and
  mbedtls_cipher_auth_decrypt() would write past the minimum documented size
  of the output buffer when used with NIST_KW. As a result, code using those
  functions as documented with NIST_KW could have a buffer overwrite of up to
  15 bytes, with consequences ranging up to arbitrary code execution
  depending on the location of the output buffer.
  * Limit the size of calculations performed by mbedtls_mpi_exp_mod to
  MBEDTLS_MPI_MAX_SIZE to prevent a potential denial of service when generating
  Diffie-Hellman key pairs. Credit to OSS-Fuzz.
  * A failure of the random generator was ignored in mbedtls_mpi_fill_random(),
  which is how most uses of randomization in asymmetric cryptography (including
  key generation, intermediate value randomization and blinding) are implemented.
  This could cause failures or the silent use of non-random values. A random
  generator can fail if it needs reseeding and cannot not obtain entropy, or due
  to an internal failure (which, for Mbed TLS's own CTR_DRBG or HMAC_DRBG, can
  only happen due to a misconfiguration).
  * Fix a compliance issue whereby we were not checking the tag on the algorithm
  parameters (only the size) when comparing the signature in the description part
  of the cert to the real signature. This meant that a NULL algorithm parameters
  entry would look identical to an array of REAL (size zero) to the library and
  thus the certificate would be considered valid. However, if the parameters do
  not match in any way then the certificate should be considered invalid, and
  indeed OpenSSL marks these certs as invalid when mbedtls did not. Many thanks
  to guidovranken who found this issue via differential fuzzing and reported it
  in #3629.
  * Zeroising of local buffers and variables which are used for calculations in
  mbedtls_pkcs5_pbkdf2_hmac(), mbedtls_internal_sha*_process(),
  mbedtls_internal_md*_process() and mbedtls_internal_ripemd160_process()
  functions to erase sensitive data from memory. Reported by Johan Malmgren and
  Johan Uppman Bruce from Sectra.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1611057600">- Fix build for Leap targets
- Use upstream tarball name</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1616414400">- Update to 2.26.0: [bsc#1189589, CVE-2021-24119]
  * * This release of Mbed TLS provides bug fixes, minor enhancements and new
  features. This release includes fixes for security issues.
  * see https://github.com/ARMmbed/mbedtls/releases/tag/v2.26.0
- Fix build with patch from https://github.com/ARMmbed/mbedtls/pull/4237
  mbedtls-4237.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1618488000">-  Workaround for building with gcc-11 boo#1181876</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1626782400">- Update to 2.27.0:
  API changes:
  * Update AEAD output size macros to bring them in line with the PSA Crypto
    API version 1.0 spec. This version of the spec parameterizes them on the
    key type used, as well as the key bit-size in the case of
    PSA_AEAD_TAG_LENGTH.
    The old versions of these macros were renamed and deprecated as follows:
  - PSA_AEAD_TAG_LENGTH          -&gt; PSA_AEAD_TAG_LENGTH_1_ARG
  - PSA_AEAD_ENCRYPT_OUTPUT_SIZE -&gt; PSA_AEAD_ENCRYPT_OUTPUT_SIZE_2_ARG
  - PSA_AEAD_DECRYPT_OUTPUT_SIZE -&gt; PSA_AEAD_DECRYPT_OUTPUT_SIZE_2_ARG
  - PSA_AEAD_UPDATE_OUTPUT_SIZE  -&gt; PSA_AEAD_UPDATE_OUTPUT_SIZE_2_ARG
  - PSA_AEAD_FINISH_OUTPUT_SIZE  -&gt; PSA_AEAD_FINISH_OUTPUT_SIZE_1_ARG
  - PSA_AEAD_VERIFY_OUTPUT_SIZE  -&gt; PSA_AEAD_VERIFY_OUTPUT_SIZE_1_ARG
  * Implement one-shot cipher functions, psa_cipher_encrypt and
    psa_cipher_decrypt, according to the PSA Crypto API 1.0.0
    specification.
  Features:
  * Add mbedtls_rsa_rsassa_pss_sign_ext() function allowing to generate a
    signature with a specific salt length. This function allows to validate
    test cases provided in the NIST's CAVP test suite.
  * Added support for built-in driver keys through the PSA opaque crypto
    driver interface. Refer to the documentation of
    MBEDTLS_PSA_CRYPTO_BUILTIN_KEYS for more information.
  * Implement psa_sign_message() and psa_verify_message().
  * The new function mbedtls_mpi_random() generates a random value in a
    given range uniformly.
  * Implement psa_mac_compute() and psa_mac_verify() as defined in the
    PSA Cryptograpy API 1.0.0 specification.
  * MBEDTLS_ECP_MAX_BITS is now determined automatically from the configured
    curves and no longer needs to be configured explicitly to save RAM.
  Security
  * Fix a bias in the generation of finite-field Diffie-Hellman-Merkle (DHM)
    private keys and of blinding values for DHM and elliptic curves (ECP)
    computations.
  * Fix a potential side channel vulnerability in ECDSA ephemeral key generation.
    An adversary who is capable of very precise timing measurements could
    learn partial information about the leading bits of the nonce used for the
    signature, allowing the recovery of the private key after observing a
    large number of signature operations. This completes a partial fix in
    Mbed TLS 2.20.0.
  * It was possible to configure MBEDTLS_ECP_MAX_BITS to a value that is
    too small, leading to buffer overflows in ECC operations. Fail the build
    in such a case.
  * An adversary with access to precise enough information about memory
    accesses (typically, an untrusted operating system attacking a secure
    enclave) could recover an RSA private key after observing the victim
    performing a single private-key operation.
  * An adversary with access to precise enough timing information (typically, a
    co-located process) could recover a Curve25519 or Curve448 static ECDH key
    after inputting a chosen public key and observing the victim performing the
    corresponding private-key operation.
  Bugfix
  * Add printf function attributes to mbedtls_debug_print_msg to ensure we
    get printf format specifier warnings.
  * Fix premature fopen() call in mbedtls_entropy_write_seed_file which may
    lead to seed file corruption in the case where the path to the seed file is
    equal to MBEDTLS_PLATFORM_STD_NV_SEED_FILE.
  * PSA functions other than psa_open_key now return PSA_ERROR_INVALID_HANDLE
    rather than PSA_ERROR_DOES_NOT_EXIST for an invalid handle, bringing them
    in line with version 1.0.0 of the specification.
  * PSA functions creating a key now return PSA_ERROR_INVALID_ARGUMENT rather
    than PSA_ERROR_INVALID_HANDLE when the identifier specified for the key
    to create is not valid, bringing them in line with version 1.0.0 of the
    specification.
  * Fix some cases in the bignum module where the library constructed an
    unintended representation of the value 0 which was not processed
    correctly by some bignum operations. This could happen when
    mbedtls_mpi_read_string() was called on "-0", or when
    mbedtls_mpi_mul_mpi() and mbedtls_mpi_mul_int() was called with one of
    the arguments being negative and the other being 0.
  * Fix a bug in ECDSA that would cause it to fail when the hash is all-bits
    zero.
  * Fix a compilation error when MBEDTLS_ECP_RANDOMIZE_MXZ_ALT is
    defined.
  * Fix an incorrect error code when parsing a PKCS#8 private key.
  * In a TLS client, enforce the Diffie-Hellman minimum parameter size
    set with mbedtls_ssl_conf_dhm_min_bitlen() precisely. Before, the
    minimum size was rounded down to the nearest multiple of 8.
  * In library/net_sockets.c, _POSIX_C_SOURCE and _XOPEN_SOURCE are
    defined to specific values.  If the code is used in a context
    where these are already defined, this can result in a compilation
    error.  Instead, assume that if they are defined, the values will
    be adequate to build Mbed TLS.
  * The cipher suite TLS-RSA-WITH-CAMELLIA-256-GCM-SHA384 was not available
    when SHA-1 was disabled and was offered when SHA-1 was enabled but SHA-384
    was disabled. Fix the dependency.
  * Do not offer SHA384 cipher suites when SHA-384 is disabled.
  * With MBEDTLS_PSA_CRYPTO_C disabled, some functions were getting built
    nonetheless, resulting in undefined reference errors when building a
    shared library.
  * Fix test suite code on platforms where int32_t is not int, such as
    Arm Cortex-M.
  * Fix some issues affecting MBEDTLS_ARIA_ALT implementations: a misplaced
    directive in a header and a missing initialization in the self-test.
  * Fix a missing initialization in the Camellia self-test, affecting
    MBEDTLS_CAMELLIA_ALT implementations.
  * Restore the ability to configure PSA via Mbed TLS options to support RSA
    key pair operations but exclude RSA key generation. When MBEDTLS_GENPRIME
    is not defined PSA will no longer attempt to use mbedtls_rsa_gen_key().
  * Fix a regression introduced in 2.24.0 which broke (D)TLS CBC ciphersuites
    (when the encrypt-then-MAC extension is not in use) with some ALT
    implementations of the underlying hash (SHA-1, SHA-256, SHA-384), causing
    the affected side to wrongly reject valid messages.
  * Remove outdated check-config.h check that prevented implementing the
    timing module on Mbed OS.
  * Fix PSA_ALG_TLS12_PRF and PSA_ALG_TLS12_PSK_TO_MS being too permissive
    about missing inputs.
  * Fix a resource leak in a test suite with an alternative AES
    implementation.
  * Fix a crash in mbedtls_mpi_debug_mpi on a bignum having 0 limbs. This
    could notably be triggered by setting the TLS debug level to 3 or above
    and using a Montgomery curve for the key exchange.
  * psa_verify_hash() was relying on implementation-specific behavior of
    mbedtls_rsa_rsassa_pss_verify() and was causing failures in some _ALT
    implementations. This reliance is now removed.
  * Disallow inputs of length different from the corresponding hash when
    signing or verifying with PSA_ALG_RSA_PSS (The PSA Crypto API mandates
    that PSA_ALG_RSA_PSS uses the same hash throughout the algorithm.)
  * Fix a null pointer dereference when mbedtls_mpi_exp_mod() was called with
    A=0 represented with 0 limbs. Up to and including Mbed TLS 2.26, this bug
    could not be triggered by code that constructed A with one of the
    mbedtls_mpi_read_xxx functions (including in particular TLS code) since
    those always built an mpi object with at least one limb.
  * Fix mbedtls_mpi_gcd(G,A,B) when the value of B is zero. This had no
    effect on Mbed TLS's internal use of mbedtls_mpi_gcd(), but may affect
    applications that call mbedtls_mpi_gcd() directly.
  * The PSA API no longer allows the creation or destruction of keys with a
    read-only lifetime. The persistence level PSA_KEY_PERSISTENCE_READ_ONLY
    can now only be used as intended, for keys that cannot be modified through
    normal use of the API.
  * When MBEDTLS_PSA_CRYPTO_SPM is enabled, crypto_spe.h was not included
    in all the right places. Include it from crypto_platform.h, which is
    the natural place.
  * mbedtls_pk_sign() and mbedtls_pk_verify() and their extended and
    restartable variants now always honor the specified hash length if
    nonzero. Before, for RSA, hash_len was ignored in favor of the length of
    the specified hash algorithm.
  * Fix which alert is sent in some cases to conform to the
    applicable RFC: on an invalid Finished message value, an
    invalid max_fragment_length extension, or an
    unsupported extension used by the server.
  * Correct (change from 12 to 13 bytes) the value of the macro describing the
    maximum nonce length returned by psa_aead_generate_nonce().
  Changes
  * Add extra printf compiler warning flags to builds.
  * Fix memsan build false positive in x509_crt.c with Clang 11
  * Fix the setting of the read timeout in the DTLS sample programs.
  * Remove the AES sample application programs/aes/aescrypt2 which shows
    bad cryptographic practice.
  * Alternative implementations of CMAC may now opt to not support 3DES as a
    CMAC block cipher, and still pass the CMAC self test.
  * Remove configs/config-psa-crypto.h, which was identical to the default
    configuration except for having some extra cryptographic mechanisms
    enabled and for unintended differences. This configuration was primarily
    intended to demonstrate the PSA API, and lost most of its usefulness when
    MBEDTLS_PSA_CRYPTO_C became enabled by default.
  * When building the test suites with GNU make, invoke python3 or python, not
    python2, which is no longer supported upstream.
  * When using session cache based session resumption on the server,
    double-check that custom session cache implementations return
    sessions which are consistent with the negotiated ciphersuite
    and compression method.
  * Fix build failure on MinGW toolchain when __USE_MING_ANSI_STDIO is on.
    When that flag is on, standard GNU C printf format specifiers
    should be used.
  * Reduce the default value of MBEDTLS_ECP_WINDOW_SIZE. This reduces RAM usage
    during ECC operations at a negligible performance cost.
  * mbedtls_mpi_read_binary(), mbedtls_mpi_read_binary_le() and
    mbedtls_mpi_read_string() now construct an mbedtls_mpi object with 0 limbs
    when their input has length 0. Note that this is an implementation detail
    and can change at any time, so this change should be transparent, but it
    may result in mbedtls_mpi_write_binary() or mbedtls_mpi_write_string()
    now writing an empty string where it previously wrote one or more
    zero digits when operating from values constructed with an mpi_read
    function and some mpi operations.
  * Implicitly add PSA_KEY_USAGE_SIGN_MESSAGE key usage policy flag when
    PSA_KEY_USAGE_SIGN_HASH flag is set and PSA_KEY_USAGE_VERIFY_MESSAGE flag
    when PSA_KEY_USAGE_VERIFY_HASH flag is set. This usage flag extension
    is also applied when loading a key from storage.
  * Remove mbedtls-4237.patch upstream
  * Library soname bump to libmbedcrypto7</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1642075200">- Update to 2.28.0: (bsc#1193979, CVE-2021-45450)
  API changes
  * Some fields of mbedtls_ssl_session and mbedtls_ssl_config are in a
  different order. This only affects applications that define such
  structures directly or serialize them.
  Requirement changes
  * Sign-magnitude and one's complement representations for signed integers are
  not supported. Two's complement is the only supported representation.
  Removals
  * Remove config option MBEDTLS_TLS_DEFAULT_ALLOW_SHA1_IN_CERTIFICATES,
  which allowed SHA-1 in the default TLS configuration for certificate
  signing. It was intended to facilitate the transition in environments
  with SHA-1 certificates. SHA-1 is considered a weak message digest and
  its use constitutes a security risk.
  * Remove the partial support for running unit tests via Greentea on Mbed OS,
  which had been unmaintained since 2018.
  Features
  * The identifier of the CID TLS extension can be configured by defining
  MBEDTLS_TLS_EXT_CID at compile time.
  * Warn if errors from certain functions are ignored. This is currently
  supported on GCC-like compilers and on MSVC and can be configured through
  the macro MBEDTLS_CHECK_RETURN. The warnings are always enabled
  (where supported) for critical functions where ignoring the return
  value is almost always a bug. Enable the new configuration option
  MBEDTLS_CHECK_RETURN_WARNING to get warnings for other functions. This
  is currently implemented in the AES, DES and md modules, and will be
  extended to other modules in the future.
  * Add missing PSA macros declared by PSA Crypto API 1.0.0:
  PSA_ALG_IS_SIGN_HASH, PSA_ALG_NONE, PSA_HASH_BLOCK_LENGTH, PSA_KEY_ID_NULL.
  * Add new API mbedtls_ct_memcmp for constant time buffer comparison.
  * Add PSA API definition for ARIA.
  Security
  * Zeroize several intermediate variables used to calculate the expected
  value when verifying a MAC or AEAD tag. This hardens the library in
  case the value leaks through a memory disclosure vulnerability. For
  example, a memory disclosure vulnerability could have allowed a
  man-in-the-middle to inject fake ciphertext into a DTLS connection.
  * In psa_cipher_generate_iv() and psa_cipher_encrypt(), do not read back
  from the output buffer. This fixes a potential policy bypass or decryption
  oracle vulnerability if the output buffer is in memory that is shared with
  an untrusted application.
  * Fix a double-free that happened after mbedtls_ssl_set_session() or
  mbedtls_ssl_get_session() failed with MBEDTLS_ERR_SSL_ALLOC_FAILED
  (out of memory). After that, calling mbedtls_ssl_session_free()
  and mbedtls_ssl_free() would cause an internal session buffer to
  be free()'d twice.
  Bugfix
  * Stop using reserved identifiers as local variables. Fixes #4630.
  * The GNU makefiles invoke python3 in preference to python except on Windows.
  * The check was accidentally not performed when cross-compiling for Windows
  on Linux. Fix this. Fixes #4774.
  * Prevent divide by zero if either of PSA_CIPHER_ENCRYPT_OUTPUT_SIZE() or
  PSA_CIPHER_UPDATE_OUTPUT_SIZE() were called using an asymmetric key type.
  * Fix a parameter set but unused in psa_crypto_cipher.c. Fixes #4935.
  * Don't use the obsolete header path sys/fcntl.h in unit tests.
  These header files cause compilation errors in musl.
  Fixes #4969.
  * Fix missing constraints on x86_64 and aarch64 assembly code
  for bignum multiplication that broke some bignum operations with
  (at least) Clang 12.
  Fixes #4116, #4786, #4917, #4962.
  * Fix mbedtls_cipher_crypt: AES-ECB when MBEDTLS_USE_PSA_CRYPTO is enabled.
  * Failures of alternative implementations of AES or DES single-block
  functions enabled with MBEDTLS_AES_ENCRYPT_ALT, MBEDTLS_AES_DECRYPT_ALT,
  MBEDTLS_DES_CRYPT_ECB_ALT or MBEDTLS_DES3_CRYPT_ECB_ALT were ignored.
  This does not concern the implementation provided with Mbed TLS,
  where this function cannot fail, or full-module replacements with
  MBEDTLS_AES_ALT or MBEDTLS_DES_ALT. Reported by Armelle Duboc in #1092.
  * Some failures of HMAC operations were ignored. These failures could only
  happen with an alternative implementation of the underlying hash module.
  * Fix the error returned by psa_generate_key() for a public key. Fixes #4551.
  * Fix the build of sample programs when neither MBEDTLS_ERROR_C nor
  MBEDTLS_ERROR_STRERROR_DUMMY is enabled.
  * Fix PSA_ALG_RSA_PSS verification accepting an arbitrary salt length.
  This algorithm now accepts only the same salt length for verification
  that it produces when signing, as documented. Use the new algorithm
  PSA_ALG_RSA_PSS_ANY_SALT to accept any salt length. Fixes #4946.
  * The existing predicate macro name PSA_ALG_IS_HASH_AND_SIGN is now reserved
  for algorithm values that fully encode the hashing step, as per the PSA
  Crypto API specification. This excludes PSA_ALG_RSA_PKCS1V15_SIGN_RAW and
  PSA_ALG_ECDSA_ANY. The new predicate macro PSA_ALG_IS_SIGN_HASH covers
  all algorithms that can be used with psa_{sign,verify}_hash(), including
  these two.
  * Fix issue in Makefile on Linux with SHARED=1, that caused shared libraries
  not to list other shared libraries they need.
  * Fix a bug in mbedtls_gcm_starts() when the bit length of the iv
  exceeds 2^32. Fixes #4884.
  * Fix an uninitialized variable warning in test_suite_ssl.function with GCC
  version 11.
  * Fix the build when no SHA2 module is included. Fixes #4930.
  * Fix the build when only the bignum module is included. Fixes #4929.
  * Fix a potential invalid pointer dereference and infinite loop bugs in
  pkcs12 functions when the password is empty. Fix the documentation to
  better describe the inputs to these functions and their possible values.
  Fixes #5136.
  * The key usage flags PSA_KEY_USAGE_SIGN_MESSAGE now allows the MAC
  operations psa_mac_compute() and psa_mac_sign_setup().
  * The key usage flags PSA_KEY_USAGE_VERIFY_MESSAGE now allows the MAC
  operations psa_mac_verify() and psa_mac_verify_setup().
  Changes
  * Set config option MBEDTLS_TLS_DEFAULT_ALLOW_SHA1_IN_KEY_EXCHANGE to be
  disabled by default.
  * Improve the performance of base64 constant-flow code. The result is still
  slower than the original non-constant-flow implementation, but much faster
  than the previous constant-flow implementation. Fixes #4814.
  * Indicate in the error returned if the nonce length used with
  ChaCha20-Poly1305 is invalid, and not just unsupported.
  * The mbedcrypto library includes a new source code module constant_time.c,
  containing various functions meant to resist timing side channel attacks.
  * This module does not have a separate configuration option, and functions
  from this module will be included in the build as required. Currently
  most of the interface of this module is private and may change at any
  time.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1642420800">- Fix baselib.conf</changelog>
  <changelog author="Alexander Bergmann &lt;abergmann@suse.com&gt;" date="1671624000">- Fix potential heap buffer overread and overwrite in DTLS if
  MBEDTLS_SSL_DTLS_CONNECTION_ID is enabled and
  MBEDTLS_SSL_CID_IN_LEN_MAX &gt; 2 * MBEDTLS_SSL_CID_OUT_LEN_MAX.
  (bsc#1206576, CVE-2022-46393).
  Add: mbedtls-CVE-2022-46393.patch</changelog>
</package>
<package pkgid="d0b48f4483f3c03e5c3333fb7752a126b71662c0b49b6b0387b0e30bbdaf54ad" name="libmbedx509-1-32bit" arch="x86_64">
  <version epoch="0" ver="2.28.0" rel="bp154.2.3.1"/>
  <changelog author="mpluskal@suse.com" date="1531137600">- Update to version 2.11.0:
  * Features
    + Added support for the XTS block cipher mode with AES (AES-XTS). Contributed by Aorimn in pull request #414.
    + Implemented the HMAC-based extract-and-expand key derivation function (HKDF) per RFC 5869. Contributed by Thomas Fossati.
    + For TLS servers, added support for offloading private key operations to an external cryptoprocessor. Private key operations can be asynchronous to allow non-blocking operation of the TLS server stack.
    + Added support for ARIA cipher (RFC 5794) and associated TLS ciphersuites (RFC 6209). ARIA is disabled by default. To enable, see MBEDTLS_ARIA_C in config.h.
    + Added support for the CCM* block cipher mode as defined in IEEE Std 802.15.4.
    + Added an additional block mode, OFB (Output Feedback) per NIST SP 800-38a, to the AES module and cipher abstraction module.
  * API Changes
    + Mbed TLS 2.11.0 maintains source code compatibility with the last minor version, Mbed TLS 2.9.0, but extends the interface with additional capabilities. Mbed TLS 2.11.0 modifies the ABI and increases the SOVERSION.
  * Bugfix
    + Fixed the cert_write example to handle certificates signed with elliptic curves as well as RSA. Fixes #777 found by dbedev.
    + Fixed the redefinition of _WIN32_WINNT, to avoid overriding a definition used by user applications. Found and fixed by Fabio Alessandrelli.
    + Fixed compilation warnings with the IAR toolchain on 32-bit platforms. Reported by rahmanih in #683.
    + Fixed an issue with MicroBlaze support in bn_mul.h which was causing the build to fail. Found by zv-io. Fixes #1651.
    + Fixed braces in mbedtls_memory_buffer_alloc_status(). Found by sbranden in #552.
    + Added the macro MBEDTLS_X509_MAX_FILE_PATH_LEN that enables the user to configure the maximum length of a file path that can be buffered when calling mbedtls_x509_crt_parse_path(). Fixes #492.
    + Fixed redundant declaration of mbedtls_ssl_list_ciphersuites. Raised by TrinityTonic in #1359.
- Changes for version 2.9.0:
  + Security
    + Fixed an issue in the X.509 module which could lead to a buffer overread during certificate validation. Additionally, the issue could also lead to unnecessary callback checks being made or to some validation checks to be omitted. The overread could be triggered remotely, while the other issues would require a non DER-compliant certificate to be correctly signed by a trusted CA, or a trusted CA with a non DER-compliant certificate. Found by luocm. Fixes #825.
    + Fixed the buffer length assertion in the ssl_parse_certificate_request() function which could lead to an arbitrary overread of the message buffer. The overreads could be caused by receiving a malformed algorithms section which was too short. In builds with debug output, this overread data was output with the debug data.
    + Fixed a client-side bug in the validation of the server's ciphersuite choice which could potentially lead to the client accepting a ciphersuite it didn't offer or a ciphersuite that could not be used with the TLS or DTLS version chosen by the server. This could lead to corruption of internal data structures for some configurations.
  * Features
    + Added an option of MBEDTLS_AES_FEWER_TABLES, to dynamically compute smaller AES tables during runtime, thereby reducing the RAM/ROM footprint by ~6KiB. Suggested and contributed by jkivilin.
    + Added initial support for Curve448 (RFC 7748). So far only mbedtls_ecp_mul() and ECDH primitive functions (mbedtls_ecdh_gen_public(), mbedtls_ecdh_compute_shared()) are supported for now. Contributed by Nicholas Wilson.
  * API Changes
    + Mbed TLS 2.9.0 maintains source code and binary compatibility with the last minor version, Mbed TLS 2.8.0, but extends the interface with additional capabilities.
    + Extended the API with the function of mbedtls_net_poll() to allow user applications to wait for a network context to become ready before reading or writing.
    + Added the function mbedtls_ssl_check_pending() to the public API to allow a check for whether more more data is pending to be processed in the internal message buffers. This function is necessary to determine the underlying transport when event-driven IO is used.
  * Bugfix
    + Fixed a spurious uninitialized variable warning in cmac.c. Fix independently contributed by Brian J Murray and David Brown.
    + Added missing dependencies in test suites that led to build failures in configurations that omit certain hashes or public-key algorithms. Fixes #1040.
    + Fixed a C89 incompatibility issue in benchmark.c. Contributed by Brendan Shanks. Fixes #1353.
    + Added missing dependencies for MBEDTLS_HAVE_TIME_DATE and MBEDTLS_VERSION_FEATURES in some test suites. Contributed by Deomid Ryabkov. Fixes #1299, #1475.
    + Fixed the Makefile build process for building shared libraries on Mac OS X. Fixed by mnacamura.
    + Fixed parsing of PKCS#8 encoded Elliptic Curve keys. Previously Mbed TLS was unable to parse keys which had only the optional parameters field of the ECPrivateKey structure. Found by Jethro Beekman, fixed in #1379.
    + Added an optimisation to return the plaintext data more quickly on unpadded CBC decryption, as stated in the mbedtls_cipher_update() documentation. Contributed by Andy Leiserson.
    + Fixed the overriding and ignoring of return values when parsing and writing to a file in the pk_sign program. Found by kevlut in #1142.
    + Added restrictions to the usage of the error code MBEDTLS_ERR_SSL_WANT_READ to situations where data needs to be fetched from the underlying transport in order to make progress. Previously, this error code was also occasionally returned when unexpected messages were being discarded, ignoring that further messages could potentially already be pending to be processed in the internal buffers; these cases led to deadlocks when event-driven I/O was used. Found and reported by Hubert Mis in #772.
    + Fixed buffer length assertions in the ssl_parse_certificate_request() function which led to a potential one byte overread of the message buffer.
    + Fixed invalid buffer sizes being passed to zlib during record compression and decompression.
    + Raised the soversion of libmbedcrypto to match the soversion of the maintained 2.7 branch. The soversion was increased in Mbed TLS version 2.7.1 to reflect breaking changes in that release, but the increment was missed in 2.8.0 and later releases outside of the 2.7 branch.</changelog>
  <changelog author="mpluskal@suse.com" date="1535025600">- Update to version 2.12.0:
  * Security
    + Fixed a vulnerability in the TLS ciphersuites based on use of CBC and SHA-384 in DTLS/TLS 1.0 to 1.2, that allowed an active network attacker to partially recover the plaintext of messages under certains conditions by exploiting timing side-channels.
    + Fixed a vulnerability in TLS ciphersuites based on CBC, in DTLS/TLS 1.0 to 1.2, that allowed a local attacker, with the ability to execute code on the local machine as well as to manipulate network packets, to partially recover the plaintext of messages under certain conditions by using a cache attack targetting an internal MD/SHA buffer.
    + Added a counter-measure against a vulnerability in TLS ciphersuites based on CBC, in DTLS/TLS 1.0 to 1.2, that allowed a local attacker with the ability to execute code on the local machine as well as manipulate network packets, to partially recover the plaintext of messages certain conditions (see previous entry) by using a cache attack targeting the SSL input record buffer.
  * Features
    + Added new cryptographic primitives, the stream cipher Chacha20, one-time authenticator Poly1305 and AEAD construct Chacha20-Poly1305, as defined in RFC 7539. Contributed by Daniel King.
    + Added support for the CHACHA20-POLY1305 ciphersuites from RFC 7905.
    + Made the receive and transmit buffers independently configurable in size, for situations where the outgoing buffer can be fixed at a smaller size than the incoming buffer
    + Added support for the AES based key wrapping modes defined by NIST SP 800-38F algorithms KW and KWP and by RFC's 3394 and 5649.
    + Added platform support for the Haiku OS.
  * Bugfix
    + Fixed the key_app_writer example which was creating an invalid ASN.1 tag by writing an additional leading zero byte. Found by Aryeh R. #1257.
    + Fixed a C++ compilation error, caused by a variable named new. Found and fixed by Hirotaka Niisato. #1783.
    + Fixed the "no symbols" warning issued by ranlib when building on Mac OS X. Fix contributed by tabascoeye.
    + Clarified documentation for mbedtls_ssl_write() to include 0 as a valid return value. Found by @davidwu2000. #839.
    + Fixed a memory leak in mbedtls_x509_csr_parse(). Found and fixed by catenacyber, Philippe Antoine. #1623.
    + Added length checks to some TLS parsing functions. Found and fixed by Philippe Antoine from Catena cyber. #1663.
    + Remove unused headers included in x509.c. Found by Chris Hanson and fixed by Brendan Shanks. #992.
    + Fixed compilation error when MBEDTLS_ARC4_C is disabled and MBEDTLS_CIPHER_NULL_CIPHER is enabled. Found by TrinityTonic in #1719.
    + Fixed the inline assembly for the MPI multiply helper function for i386 and i386 with SSE2. Found by László Langó. #1550.
    + Fixed the namespacing in header files. Remove the mbedtls namespacing in the #include in the header files. #857.
    + Fixed a compiler warning of 'use before initialisation' in mbedtls_pk_parse_key(). Found by Martin Boye Petersen and fixed by Dawid Drozd.#1098.
    + Fixed decryption of zero length messages (which contain all padding) when a CBC based ciphersuite was used together with Encrypt-then-MAC.
    + Fixed the ssl_client2 example to send application data with 0-length content when the request_size argument is set to 0 as stated in the documentation. #1833.
    + Corrected the documentation for mbedtls_ssl_get_session(). This API has deep copy of the session, and the peer certificate is not lost. #926.
    + Fixed issues when building to the C99 standard, using -std=c99. Fixed by Nick Wilson.
  * Changes
    + Fails when receiving a TLS alert message with an invalid length, or invalid zero-length messages when using TLS 1.2. Contributed by Espressif Systems.
    + Changed the default behaviour of mbedtls_hkdf_extract() to return an error when calling with a NULL salt and non-zero salt length. Contributed by Brian J Murray
    + Change the shebang line in Perl scripts to look up perl in the PATH. Contributed by fbrosson.
    + Allow overriding the time on Windows via the platform-time abstraction. Fixed by Nick Wilson.
    + Use gmtime_r/gmtime_s for thread-safety. Fixed by Nick Wilson.</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1544529600">- Update to version 2.14.1: [bsc#1118727, CVE-2018-19608]
  Security
  * Fix timing variations and memory access variations in RSA PKCS#1 v1.5
    decryption that could lead to a Bleichenbacher-style padding oracle
    attack. In TLS, this affects servers that accept ciphersuites based on
    RSA decryption (i.e. ciphersuites whose name contains RSA but not
    (EC)DH(E)). Discovered by Eyal Ronen (Weizmann Institute),  Robert Gillham
    (University of Adelaide), Daniel Genkin (University of Michigan),
    Adi Shamir (Weizmann Institute), David Wong (NCC Group), and Yuval Yarom
    (University of Adelaide, Data61). The attack is described in more detail
    in the paper available here: http://cat.eyalro.net/cat.pdf  CVE-2018-19608
  * In mbedtls_mpi_write_binary(), don't leak the exact size of the number
    via branching and memory access patterns. An attacker who could submit
    a plaintext for RSA PKCS#1 v1.5 decryption but only observe the timing
    of the decryption and not its result could nonetheless decrypt RSA
    plaintexts and forge RSA signatures. Other asymmetric algorithms may
    have been similarly vulnerable. Reported by Eyal Ronen, Robert Gillham,
    Daniel Genkin, Adi Shamir, David Wong and Yuval Yarom.
  * Wipe sensitive buffers on the stack in the CTR_DRBG and HMAC_DRBG
    modules.
  API Changes
  * The new functions mbedtls_ctr_drbg_update_ret() and
    mbedtls_hmac_drbg_update_ret() are similar to mbedtls_ctr_drbg_update()
    and mbedtls_hmac_drbg_update() respectively, but the new functions
    report errors whereas the old functions return void. We recommend that
    applications use the new functions.
- Version 2.14.0:
  Security
  * Fix overly strict DN comparison when looking for CRLs belonging to a
    particular CA. This previously led to ignoring CRLs when the CRL's issuer
    name and the CA's subject name differed in their string encoding (e.g.,
    one using PrintableString and the other UTF8String) or in the choice of
    upper and lower case. Reported by Henrik Andersson of Bosch GmbH in issue
    [#1784].
  * Fix a flawed bounds check in server PSK hint parsing. In case the
    incoming message buffer was placed within the first 64KiB of address
    space and a PSK-(EC)DHE ciphersuite was used, this allowed an attacker
    to trigger a memory access up to 64KiB beyond the incoming message buffer,
    potentially leading to an application crash or information disclosure.
  * Fix mbedtls_mpi_is_prime() to use more rounds of probabilistic testing. The
    previous settings for the number of rounds made it practical for an
    adversary to construct non-primes that would be erroneously accepted as
    primes with high probability. This does not have an impact on the
    security of TLS, but can matter in other contexts with numbers chosen
    potentially by an adversary that should be prime and can be validated.
    For example, the number of rounds was enough to securely generate RSA key
    pairs or Diffie-Hellman parameters, but was insufficient to validate
    Diffie-Hellman parameters properly.
    See "Prime and Prejudice" by by Martin R. Albrecht and Jake Massimo and
    Kenneth G. Paterson and Juraj Somorovsky.
  Features
  * Add support for temporarily suspending expensive ECC computations after
    some configurable amount of operations. This is intended to be used in
    constrained, single-threaded systems where ECC is time consuming and can
    block other operations until they complete. This is disabled by default,
    but can be enabled by MBEDTLS_ECP_RESTARTABLE at compile time and
    configured by mbedtls_ecp_set_max_ops() at runtime. It applies to the new
    xxx_restartable functions in ECP, ECDSA, PK and X.509 (CRL not supported
    yet), and to existing functions in ECDH and SSL (currently only
    implemented client-side, for ECDHE-ECDSA ciphersuites in TLS 1.2,
    including client authentication).
  * Add support for Arm CPU DSP extensions to accelerate asymmetric key
    operations. On CPUs where the extensions are available, they can accelerate
    MPI multiplications used in ECC and RSA cryptography. Contributed by
    Aurelien Jarno.
  * Extend RSASSA-PSS signature to allow a smaller salt size. Previously, PSS
    signature always used a salt with the same length as the hash, and returned
    an error if this was not possible. Now the salt size may be up to two bytes
    shorter. This allows the library to support all hash and signature sizes
    that comply with FIPS 186-4, including SHA-512 with a 1024-bit key.
  * Add support for 128-bit keys in CTR_DRBG. Note that using keys shorter
    than 256 bits limits the security of generated material to 128 bits.
  API Changes
  * Add a common error code of `MBEDTLS_ERR_PLATFORM_FEATURE_UNSUPPORTED` for
    a feature that is not supported by underlying alternative
    implementations implementing cryptographic primitives. This is useful for
    hardware accelerators that don't implement all options or features.
  New deprecations
  * All module specific errors following the form
    MBEDTLS_ERR_XXX_FEATURE_UNAVAILABLE that indicate a feature is not
    supported are deprecated and are now replaced by the new equivalent
    platform error.
  * All module specific generic hardware acceleration errors following the
    form MBEDTLS_ERR_XXX_HW_ACCEL_FAILED that are deprecated and are replaced
    by the equivalent plaform error.
  * Deprecate the function mbedtls_mpi_is_prime() in favor of
    mbedtls_mpi_is_prime_ext() which allows specifying the number of
    Miller-Rabin rounds.
  Bugfix
  * Fix wrong order of freeing in programs/ssl/ssl_server2 example
    application leading to a memory leak in case both
    MBEDTLS_MEMORY_BUFFER_ALLOC_C and MBEDTLS_MEMORY_BACKTRACE are set.
    Fixes #2069.
  * Fix a bug in the update function for SSL ticket keys which previously
    invalidated keys of a lifetime of less than a 1s. Fixes #1968.
  * Fix failure in hmac_drbg in the benchmark sample application, when
    MBEDTLS_THREADING_C is defined. Found by TrinityTonic, #1095
  * Fix a bug in the record decryption routine ssl_decrypt_buf()
    which lead to accepting properly authenticated but improperly
    padded records in case of CBC ciphersuites using Encrypt-then-MAC.
  * Fix memory leak and freeing without initialization in the example
    program programs/x509/cert_write. Fixes #1422.
  * Ignore IV in mbedtls_cipher_set_iv() when the cipher mode is
    MBEDTLS_MODE_ECB. Found by ezdevelop. Fixes #1091.
  * Zeroize memory used for buffering or reassembling handshake messages
    after use.
  * Use `mbedtls_platform_zeroize()` instead of `memset()` for zeroization
    of sensitive data in the example programs aescrypt2 and crypt_and_hash.
  * Change the default string format used for various X.509 DN attributes to
    UTF8String. Previously, the use of the PrintableString format led to
    wildcards and non-ASCII characters being unusable in some DN attributes.
    Reported by raprepo in #1860 and by kevinpt in #468. Fix contributed by
    Thomas-Dee.
  * Fix compilation failure for configurations which use compile time
    replacements of standard calloc/free functions through the macros
    MBEDTLS_PLATFORM_CALLOC_MACRO and MBEDTLS_PLATFORM_FREE_MACRO.
    Reported by ole-de and ddhome2006. Fixes #882, #1642 and #1706.
  Changes
  * Removed support for Yotta as a build tool.
  * Add tests for session resumption in DTLS.
  * Close a test gap in (D)TLS between the client side and the server side:
    test the handling of large packets and small packets on the client side
    in the same way as on the server side.
  * Change the dtls_client and dtls_server samples to work by default over
    IPv6 and optionally by a build option over IPv4.
  * Change the use of Windows threading to use Microsoft Visual C++ runtime
    calls, rather than Win32 API calls directly. This is necessary to avoid
    conflict with C runtime usage. Found and fixed by irwir.
  * Remember the string format of X.509 DN attributes when replicating
    X.509 DNs. Previously, DN attributes were always written in their default
    string format (mostly PrintableString), which could lead to CRTs being
    created which used PrintableStrings in the issuer field even though the
    signing CA used UTF8Strings in its subject field; while X.509 compliant,
    such CRTs were rejected in some applications, e.g. some versions of
    Firefox, curl and GnuTLS. Reported in #1033 by Moschn. Fix contributed by
    Thomas-Dee.
  * Improve documentation of mbedtls_ssl_get_verify_result().
    Fixes #517 reported by github-monoculture.
  * Add MBEDTLS_MPI_GEN_PRIME_FLAG_LOW_ERR flag to mbedtls_mpi_gen_prime() and
    use it to reduce error probability in RSA key generation to levels mandated
    by FIPS-186-4.
- Version 2.13.1
  API Changes
  * Extend the platform module with an abstraction mbedtls_platform_gmtime_r()
    whose implementation should behave as a thread-safe version of gmtime().
    This allows users to configure such an implementation at compile time when
    the target system cannot be deduced automatically, by setting the option
    MBEDTLS_PLATFORM_GMTIME_R_ALT. At this stage Mbed TLS is only able to
    automatically select implementations for Windows and POSIX C libraries.
  Bugfix
  * Fix build failures on platforms where only gmtime() is available but
    neither gmtime_r() nor gmtime_s() are present. Fixes #1907.
- Version 2.13.0
  Security
  * Fix an issue in the X.509 module which could lead to a buffer overread
    during certificate extensions parsing. In case of receiving malformed
    input (extensions length field equal to 0), an illegal read of one byte
    beyond the input buffer is made. Found and analyzed by Nathan Crandall.
  Features
  * Add support for fragmentation of outgoing DTLS handshake messages. This
    is controlled by the maximum fragment length as set locally or negotiated
    with the peer, as well as by a new per-connection MTU option, set using
    mbedtls_ssl_set_mtu().
  * Add support for auto-adjustment of MTU to a safe value during the
    handshake when flights do not get through (RFC 6347, section 4.1.1.1,
    last paragraph).
  * Add support for packing multiple records within a single datagram,
    enabled by default.
  * Add support for buffering out-of-order handshake messages in DTLS.
    The maximum amount of RAM used for this can be controlled by the
    compile-time constant MBEDTLS_SSL_DTLS_MAX_BUFFERING defined
    in mbedtls/config.h.
  API Changes
  * Add function mbedtls_ssl_set_datagram_packing() to configure
    the use of datagram packing (enabled by default).
  Bugfix
  * Fix a potential memory leak in mbedtls_ssl_setup() function. An allocation
    failure in the function could lead to other buffers being leaked.
  * Fixes an issue with MBEDTLS_CHACHAPOLY_C which would not compile if
    MBEDTLS_ARC4_C and MBEDTLS_CIPHER_NULL_CIPHER weren't also defined. #1890
  * Fix a memory leak in ecp_mul_comb() if ecp_precompute_comb() fails.
    Fix contributed by Espressif Systems.
  * Add ecc extensions only if an ecc based ciphersuite is used.
    This improves compliance to RFC 4492, and as a result, solves
    interoperability issues with BouncyCastle. Raised by milenamil in #1157.
  * Replace printf with mbedtls_printf in the ARIA module. Found by
    TrinityTonic in #1908.
  * Fix potential use-after-free in mbedtls_ssl_get_max_frag_len()
    and mbedtls_ssl_get_record_expansion() after a session reset. Fixes #1941.
  * Fix a bug that caused SSL/TLS clients to incorrectly abort the handshake
    with TLS versions 1.1 and earlier when the server requested authentication
    without providing a list of CAs. This was due to an overly strict bounds
    check in parsing the CertificateRequest message,
    introduced in Mbed TLS 2.12.0. Fixes #1954.
  * Fix a miscalculation of the maximum record expansion in
    mbedtls_ssl_get_record_expansion() in case of ChachaPoly ciphersuites,
    or CBC ciphersuites in (D)TLS versions 1.1 or higher. Fixes #1913, #1914.
  * Fix undefined shifts with negative values in certificates parsing
    (found by Catena cyber using oss-fuzz)
  * Fix memory leak and free without initialization in pk_encrypt
    and pk_decrypt example programs. Reported by Brace Stout. Fixes #1128.
  * Remove redundant else statement. Raised by irwir. Fixes #1776.
  Changes
  * Copy headers preserving timestamps when doing a "make install".
    Contributed by xueruini.
  * Allow the forward declaration of public structs. Contributed by Dawid
    Drozd. Fixes #1215 raised by randombit.
  * Improve compatibility with some alternative CCM implementations by using
    CCM test vectors from RAM.
  * Add support for buffering of out-of-order handshake messages.
  * Add warnings to the documentation of the HKDF module to reduce the risk
    of misusing the mbedtls_hkdf_extract() and mbedtls_hkdf_expand()
    functions. Fixes #1775. Reported by Brian J. Murray.</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1544529601">- Library package version bumped to libmbedtls12</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1546862400">- Update to version 2.16.0:
  Features
  * Add a new config.h option of MBEDTLS_CHECK_PARAMS that enables validation of parameters in the API. This allows detection of obvious misuses of the API, such as passing NULL pointers. The API of existing functions hasn't changed, but requirements on parameters have been made more explicit in the documentation. See the corresponding API documentation for each function to see for which parameter values it is defined. This feature is disabled by default. See its API documentation in config.h for additional steps you have to take when enabling it.
  API Changes
  * The following functions in the random generator modules have been deprecated and replaced as shown below. The new functions change the return type from void to int to allow returning error codes when using MBEDTLS_&lt;MODULE&gt;_ALT for the underlying AES or message digest primitive. Fixes #1798. mbedtls_ctr_drbg_update() -&gt; mbedtls_ctr_drbg_update_ret() mbedtls_hmac_drbg_update() -&gt; mbedtls_hmac_drbg_update_ret()
  * Extend ECDH interface to enable alternative implementations.
  * Deprecate error codes of the form MBEDTLS_ERR_xxx_INVALID_KEY_LENGTH for ARIA, CAMELLIA and Blowfish. These error codes will be replaced by the more generic per-module error codes MBEDTLS_ERR_xxx_BAD_INPUT_DATA.
  * Additional parameter validation checks have been added for the following modules - AES, ARIA, Blowfish, CAMELLIA, CCM, GCM, DHM, ECP, ECDSA, ECDH, ECJPAKE, SHA, Chacha20 and Poly1305, cipher, pk, RSA, and MPI. Where modules have had parameter validation added, existing parameter checks may have changed. Some modules, such as Chacha20 had existing parameter validation whereas other modules had little. This has now been changed so that the same level of validation is present in all modules, and that it is now optional with the MBEDTLS_CHECK_PARAMS flag which by default is off. That means that checks which were previously present by default will no longer be.
  New deprecations
  * Deprecate mbedtls_ctr_drbg_update() and mbedtls_hmac_drbg_update() in favor of functions that can return an error code.
  Bugfix
  * Fix for Clang, which was reporting a warning for the bignum.c inline assembly for AMD64 targets creating string literals greater than those permitted by the ISO C99 standard. Found by Aaron Jones. Fixes #482.
  * Fix runtime error in mbedtls_platform_entropy_poll() when run through qemu user emulation. Reported and fix suggested by randombit. Fixes #1212.
  * Fix an unsafe bounds check when restoring an SSL session from a ticket. This could lead to a buffer overflow, but only in case ticket authentication was broken. Reported and fix suggested by Guido Vranken in #659.
  * Add explicit integer to enumeration type casts to example program programs/pkey/gen_key which previously led to compilation failure on some toolchains. Reported by phoenixmcallister. Fixes #2170.
  * Clarify documentation of mbedtls_ssl_set_own_cert() regarding the absence of check for certificate/key matching. Reported by Attila Molnar, #507.
  * Fix double initialization of ECC hardware that made some accelerators hang.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1567512000">- Update to version 2.16.2:
  * Security improvements and bugfixes
- Use ninja to for build</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1573646400">- Update to version 2.16.3:
  * Security improvements and bugfixes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1585828800">- Update to version 2.16.5:
  * Security improvements and bugfixes</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597665600">- update to 2.23.0:
  a lot of changes see https://github.com/ARMmbed/mbedtls/releases/tag/v2.23.0
  * Fix a side channel vulnerability in modular exponentiation that could reveal an RSA private key used in a secure enclave. Noticed by Sangho Lee, Ming-Wei Shih, Prasun Gera, Taesoo Kim and Hyesoon Kim (Georgia Institute of Technology); and Marcus Peinado (Microsoft Research). Reported by Raoul Strackx (Fortanix) in #3394.
  * Fix side channel in mbedtls_ecp_check_pub_priv() and mbedtls_pk_parse_key() / mbedtls_pk_parse_keyfile() (when loading a private key that didn't include the uncompressed public key), as well as mbedtls_ecp_mul() / mbedtls_ecp_mul_restartable() when called with a NULL f_rng argument. An attacker with access to precise enough timing and memory access information (typically an untrusted operating system attacking a secure enclave) could fully recover the ECC private key. Found and reported by Alejandro Cabrera Aldaya and Billy Brumley.
  * Fix issue in Lucky 13 counter-measure that could make it ineffective when hardware accelerators were used (using one of the MBEDTLS_SHAxxx_ALT macros). This would cause the original Lucky 13 attack to be possible in those configurations, allowing an active network attacker to recover plaintext after repeated timing measurements under some conditions. Reported and fix suggested by Luc Perneel in #3246.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1598875200">- Do not run testsuite in parallel - its not reliable</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1599480000">- Add workaround for failing builds (Python not found) due to
  https://gitlab.kitware.com/cmake/cmake/-/issues/21168</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1599652800">- update to 2.24.0:
  * see https://github.com/ARMmbed/mbedtls/releases/tag/v2.24.0
  * Fix a vulnerability in the verification of X.509 certificates when matching
  the expected common name (the cn argument of mbedtls_x509_crt_verify())
  with the actual certificate name: when the subjecAltName extension is
  present, the expected name was compared to any name in that extension
  regardless of its type. This means that an attacker could for example
  impersonate a 4-bytes or 16-byte domain by getting a certificate for the
  corresponding IPv4 or IPv6 (this would require the attacker to control that
  IP address, though). Similar attacks using other subjectAltName name types
  might be possible.
  * When checking X.509 CRLs, a certificate was only considered as revoked if
  its revocationDate was in the past according to the local clock if
  available. In particular, on builds without MBEDTLS_HAVE_TIME_DATE,
  certificates were never considered as revoked. On builds with
  MBEDTLS_HAVE_TIME_DATE, an attacker able to control the local clock (for
  example, an untrusted OS attacking a secure enclave) could prevent
  revocation of certificates via CRLs. Fixed by no longer checking the
  revocationDate field, in accordance with RFC 5280. Reported by yuemonangong
  in #3340. Reported independently and fixed by Raoul Strackx and Jethro
  * In (D)TLS record decryption, when using a CBC ciphersuites without the
  Encrypt-then-Mac extension, use constant code flow memory access patterns
  to extract and check the MAC. This is an improvement to the existing
  countermeasure against Lucky 13 attacks. The previous countermeasure was
  effective against network-based attackers, but less so against local
  attackers. The new countermeasure defends against local attackers, even if
  they have access to fine-grained measurements. In particular, this fixes a
  local Lucky 13 cache attack found and reported by Tuba Yavuz, Farhaan
  Fowze, Ken (Yihan) Bai, Grant Hernandez, and Kevin Butler (University of
  Florida) and Dave Tian (Purdue University).
  * Fix side channel in RSA private key operations and static (finite-field)
  Diffie-Hellman. An adversary with precise enough timing and memory access
  information (typically an untrusted operating system attacking a secure
  enclave) could bypass an existing counter-measure (base blinding) and
  potentially fully recover the private key.
  * Fix a 1-byte buffer overread in mbedtls_x509_crl_parse_der(). Credit to
  OSS-Fuzz for detecting the problem and to Philippe Antoine for pinpointing
  the problematic code.
  * Zeroising of plaintext buffers in mbedtls_ssl_read() to erase unused
  application data from memory.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1608638400">- update to 2.25.0:
  * This release of Mbed TLS provides bug fixes, minor enhancements and new
  features. This release includes fixes for security issues.
  * see https://github.com/ARMmbed/mbedtls/releases/tag/v2.25.0
  * The functions mbedtls_cipher_auth_encrypt() and
  mbedtls_cipher_auth_decrypt() would write past the minimum documented size
  of the output buffer when used with NIST_KW. As a result, code using those
  functions as documented with NIST_KW could have a buffer overwrite of up to
  15 bytes, with consequences ranging up to arbitrary code execution
  depending on the location of the output buffer.
  * Limit the size of calculations performed by mbedtls_mpi_exp_mod to
  MBEDTLS_MPI_MAX_SIZE to prevent a potential denial of service when generating
  Diffie-Hellman key pairs. Credit to OSS-Fuzz.
  * A failure of the random generator was ignored in mbedtls_mpi_fill_random(),
  which is how most uses of randomization in asymmetric cryptography (including
  key generation, intermediate value randomization and blinding) are implemented.
  This could cause failures or the silent use of non-random values. A random
  generator can fail if it needs reseeding and cannot not obtain entropy, or due
  to an internal failure (which, for Mbed TLS's own CTR_DRBG or HMAC_DRBG, can
  only happen due to a misconfiguration).
  * Fix a compliance issue whereby we were not checking the tag on the algorithm
  parameters (only the size) when comparing the signature in the description part
  of the cert to the real signature. This meant that a NULL algorithm parameters
  entry would look identical to an array of REAL (size zero) to the library and
  thus the certificate would be considered valid. However, if the parameters do
  not match in any way then the certificate should be considered invalid, and
  indeed OpenSSL marks these certs as invalid when mbedtls did not. Many thanks
  to guidovranken who found this issue via differential fuzzing and reported it
  in #3629.
  * Zeroising of local buffers and variables which are used for calculations in
  mbedtls_pkcs5_pbkdf2_hmac(), mbedtls_internal_sha*_process(),
  mbedtls_internal_md*_process() and mbedtls_internal_ripemd160_process()
  functions to erase sensitive data from memory. Reported by Johan Malmgren and
  Johan Uppman Bruce from Sectra.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1611057600">- Fix build for Leap targets
- Use upstream tarball name</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1616414400">- Update to 2.26.0: [bsc#1189589, CVE-2021-24119]
  * * This release of Mbed TLS provides bug fixes, minor enhancements and new
  features. This release includes fixes for security issues.
  * see https://github.com/ARMmbed/mbedtls/releases/tag/v2.26.0
- Fix build with patch from https://github.com/ARMmbed/mbedtls/pull/4237
  mbedtls-4237.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1618488000">-  Workaround for building with gcc-11 boo#1181876</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1626782400">- Update to 2.27.0:
  API changes:
  * Update AEAD output size macros to bring them in line with the PSA Crypto
    API version 1.0 spec. This version of the spec parameterizes them on the
    key type used, as well as the key bit-size in the case of
    PSA_AEAD_TAG_LENGTH.
    The old versions of these macros were renamed and deprecated as follows:
  - PSA_AEAD_TAG_LENGTH          -&gt; PSA_AEAD_TAG_LENGTH_1_ARG
  - PSA_AEAD_ENCRYPT_OUTPUT_SIZE -&gt; PSA_AEAD_ENCRYPT_OUTPUT_SIZE_2_ARG
  - PSA_AEAD_DECRYPT_OUTPUT_SIZE -&gt; PSA_AEAD_DECRYPT_OUTPUT_SIZE_2_ARG
  - PSA_AEAD_UPDATE_OUTPUT_SIZE  -&gt; PSA_AEAD_UPDATE_OUTPUT_SIZE_2_ARG
  - PSA_AEAD_FINISH_OUTPUT_SIZE  -&gt; PSA_AEAD_FINISH_OUTPUT_SIZE_1_ARG
  - PSA_AEAD_VERIFY_OUTPUT_SIZE  -&gt; PSA_AEAD_VERIFY_OUTPUT_SIZE_1_ARG
  * Implement one-shot cipher functions, psa_cipher_encrypt and
    psa_cipher_decrypt, according to the PSA Crypto API 1.0.0
    specification.
  Features:
  * Add mbedtls_rsa_rsassa_pss_sign_ext() function allowing to generate a
    signature with a specific salt length. This function allows to validate
    test cases provided in the NIST's CAVP test suite.
  * Added support for built-in driver keys through the PSA opaque crypto
    driver interface. Refer to the documentation of
    MBEDTLS_PSA_CRYPTO_BUILTIN_KEYS for more information.
  * Implement psa_sign_message() and psa_verify_message().
  * The new function mbedtls_mpi_random() generates a random value in a
    given range uniformly.
  * Implement psa_mac_compute() and psa_mac_verify() as defined in the
    PSA Cryptograpy API 1.0.0 specification.
  * MBEDTLS_ECP_MAX_BITS is now determined automatically from the configured
    curves and no longer needs to be configured explicitly to save RAM.
  Security
  * Fix a bias in the generation of finite-field Diffie-Hellman-Merkle (DHM)
    private keys and of blinding values for DHM and elliptic curves (ECP)
    computations.
  * Fix a potential side channel vulnerability in ECDSA ephemeral key generation.
    An adversary who is capable of very precise timing measurements could
    learn partial information about the leading bits of the nonce used for the
    signature, allowing the recovery of the private key after observing a
    large number of signature operations. This completes a partial fix in
    Mbed TLS 2.20.0.
  * It was possible to configure MBEDTLS_ECP_MAX_BITS to a value that is
    too small, leading to buffer overflows in ECC operations. Fail the build
    in such a case.
  * An adversary with access to precise enough information about memory
    accesses (typically, an untrusted operating system attacking a secure
    enclave) could recover an RSA private key after observing the victim
    performing a single private-key operation.
  * An adversary with access to precise enough timing information (typically, a
    co-located process) could recover a Curve25519 or Curve448 static ECDH key
    after inputting a chosen public key and observing the victim performing the
    corresponding private-key operation.
  Bugfix
  * Add printf function attributes to mbedtls_debug_print_msg to ensure we
    get printf format specifier warnings.
  * Fix premature fopen() call in mbedtls_entropy_write_seed_file which may
    lead to seed file corruption in the case where the path to the seed file is
    equal to MBEDTLS_PLATFORM_STD_NV_SEED_FILE.
  * PSA functions other than psa_open_key now return PSA_ERROR_INVALID_HANDLE
    rather than PSA_ERROR_DOES_NOT_EXIST for an invalid handle, bringing them
    in line with version 1.0.0 of the specification.
  * PSA functions creating a key now return PSA_ERROR_INVALID_ARGUMENT rather
    than PSA_ERROR_INVALID_HANDLE when the identifier specified for the key
    to create is not valid, bringing them in line with version 1.0.0 of the
    specification.
  * Fix some cases in the bignum module where the library constructed an
    unintended representation of the value 0 which was not processed
    correctly by some bignum operations. This could happen when
    mbedtls_mpi_read_string() was called on "-0", or when
    mbedtls_mpi_mul_mpi() and mbedtls_mpi_mul_int() was called with one of
    the arguments being negative and the other being 0.
  * Fix a bug in ECDSA that would cause it to fail when the hash is all-bits
    zero.
  * Fix a compilation error when MBEDTLS_ECP_RANDOMIZE_MXZ_ALT is
    defined.
  * Fix an incorrect error code when parsing a PKCS#8 private key.
  * In a TLS client, enforce the Diffie-Hellman minimum parameter size
    set with mbedtls_ssl_conf_dhm_min_bitlen() precisely. Before, the
    minimum size was rounded down to the nearest multiple of 8.
  * In library/net_sockets.c, _POSIX_C_SOURCE and _XOPEN_SOURCE are
    defined to specific values.  If the code is used in a context
    where these are already defined, this can result in a compilation
    error.  Instead, assume that if they are defined, the values will
    be adequate to build Mbed TLS.
  * The cipher suite TLS-RSA-WITH-CAMELLIA-256-GCM-SHA384 was not available
    when SHA-1 was disabled and was offered when SHA-1 was enabled but SHA-384
    was disabled. Fix the dependency.
  * Do not offer SHA384 cipher suites when SHA-384 is disabled.
  * With MBEDTLS_PSA_CRYPTO_C disabled, some functions were getting built
    nonetheless, resulting in undefined reference errors when building a
    shared library.
  * Fix test suite code on platforms where int32_t is not int, such as
    Arm Cortex-M.
  * Fix some issues affecting MBEDTLS_ARIA_ALT implementations: a misplaced
    directive in a header and a missing initialization in the self-test.
  * Fix a missing initialization in the Camellia self-test, affecting
    MBEDTLS_CAMELLIA_ALT implementations.
  * Restore the ability to configure PSA via Mbed TLS options to support RSA
    key pair operations but exclude RSA key generation. When MBEDTLS_GENPRIME
    is not defined PSA will no longer attempt to use mbedtls_rsa_gen_key().
  * Fix a regression introduced in 2.24.0 which broke (D)TLS CBC ciphersuites
    (when the encrypt-then-MAC extension is not in use) with some ALT
    implementations of the underlying hash (SHA-1, SHA-256, SHA-384), causing
    the affected side to wrongly reject valid messages.
  * Remove outdated check-config.h check that prevented implementing the
    timing module on Mbed OS.
  * Fix PSA_ALG_TLS12_PRF and PSA_ALG_TLS12_PSK_TO_MS being too permissive
    about missing inputs.
  * Fix a resource leak in a test suite with an alternative AES
    implementation.
  * Fix a crash in mbedtls_mpi_debug_mpi on a bignum having 0 limbs. This
    could notably be triggered by setting the TLS debug level to 3 or above
    and using a Montgomery curve for the key exchange.
  * psa_verify_hash() was relying on implementation-specific behavior of
    mbedtls_rsa_rsassa_pss_verify() and was causing failures in some _ALT
    implementations. This reliance is now removed.
  * Disallow inputs of length different from the corresponding hash when
    signing or verifying with PSA_ALG_RSA_PSS (The PSA Crypto API mandates
    that PSA_ALG_RSA_PSS uses the same hash throughout the algorithm.)
  * Fix a null pointer dereference when mbedtls_mpi_exp_mod() was called with
    A=0 represented with 0 limbs. Up to and including Mbed TLS 2.26, this bug
    could not be triggered by code that constructed A with one of the
    mbedtls_mpi_read_xxx functions (including in particular TLS code) since
    those always built an mpi object with at least one limb.
  * Fix mbedtls_mpi_gcd(G,A,B) when the value of B is zero. This had no
    effect on Mbed TLS's internal use of mbedtls_mpi_gcd(), but may affect
    applications that call mbedtls_mpi_gcd() directly.
  * The PSA API no longer allows the creation or destruction of keys with a
    read-only lifetime. The persistence level PSA_KEY_PERSISTENCE_READ_ONLY
    can now only be used as intended, for keys that cannot be modified through
    normal use of the API.
  * When MBEDTLS_PSA_CRYPTO_SPM is enabled, crypto_spe.h was not included
    in all the right places. Include it from crypto_platform.h, which is
    the natural place.
  * mbedtls_pk_sign() and mbedtls_pk_verify() and their extended and
    restartable variants now always honor the specified hash length if
    nonzero. Before, for RSA, hash_len was ignored in favor of the length of
    the specified hash algorithm.
  * Fix which alert is sent in some cases to conform to the
    applicable RFC: on an invalid Finished message value, an
    invalid max_fragment_length extension, or an
    unsupported extension used by the server.
  * Correct (change from 12 to 13 bytes) the value of the macro describing the
    maximum nonce length returned by psa_aead_generate_nonce().
  Changes
  * Add extra printf compiler warning flags to builds.
  * Fix memsan build false positive in x509_crt.c with Clang 11
  * Fix the setting of the read timeout in the DTLS sample programs.
  * Remove the AES sample application programs/aes/aescrypt2 which shows
    bad cryptographic practice.
  * Alternative implementations of CMAC may now opt to not support 3DES as a
    CMAC block cipher, and still pass the CMAC self test.
  * Remove configs/config-psa-crypto.h, which was identical to the default
    configuration except for having some extra cryptographic mechanisms
    enabled and for unintended differences. This configuration was primarily
    intended to demonstrate the PSA API, and lost most of its usefulness when
    MBEDTLS_PSA_CRYPTO_C became enabled by default.
  * When building the test suites with GNU make, invoke python3 or python, not
    python2, which is no longer supported upstream.
  * When using session cache based session resumption on the server,
    double-check that custom session cache implementations return
    sessions which are consistent with the negotiated ciphersuite
    and compression method.
  * Fix build failure on MinGW toolchain when __USE_MING_ANSI_STDIO is on.
    When that flag is on, standard GNU C printf format specifiers
    should be used.
  * Reduce the default value of MBEDTLS_ECP_WINDOW_SIZE. This reduces RAM usage
    during ECC operations at a negligible performance cost.
  * mbedtls_mpi_read_binary(), mbedtls_mpi_read_binary_le() and
    mbedtls_mpi_read_string() now construct an mbedtls_mpi object with 0 limbs
    when their input has length 0. Note that this is an implementation detail
    and can change at any time, so this change should be transparent, but it
    may result in mbedtls_mpi_write_binary() or mbedtls_mpi_write_string()
    now writing an empty string where it previously wrote one or more
    zero digits when operating from values constructed with an mpi_read
    function and some mpi operations.
  * Implicitly add PSA_KEY_USAGE_SIGN_MESSAGE key usage policy flag when
    PSA_KEY_USAGE_SIGN_HASH flag is set and PSA_KEY_USAGE_VERIFY_MESSAGE flag
    when PSA_KEY_USAGE_VERIFY_HASH flag is set. This usage flag extension
    is also applied when loading a key from storage.
  * Remove mbedtls-4237.patch upstream
  * Library soname bump to libmbedcrypto7</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1642075200">- Update to 2.28.0: (bsc#1193979, CVE-2021-45450)
  API changes
  * Some fields of mbedtls_ssl_session and mbedtls_ssl_config are in a
  different order. This only affects applications that define such
  structures directly or serialize them.
  Requirement changes
  * Sign-magnitude and one's complement representations for signed integers are
  not supported. Two's complement is the only supported representation.
  Removals
  * Remove config option MBEDTLS_TLS_DEFAULT_ALLOW_SHA1_IN_CERTIFICATES,
  which allowed SHA-1 in the default TLS configuration for certificate
  signing. It was intended to facilitate the transition in environments
  with SHA-1 certificates. SHA-1 is considered a weak message digest and
  its use constitutes a security risk.
  * Remove the partial support for running unit tests via Greentea on Mbed OS,
  which had been unmaintained since 2018.
  Features
  * The identifier of the CID TLS extension can be configured by defining
  MBEDTLS_TLS_EXT_CID at compile time.
  * Warn if errors from certain functions are ignored. This is currently
  supported on GCC-like compilers and on MSVC and can be configured through
  the macro MBEDTLS_CHECK_RETURN. The warnings are always enabled
  (where supported) for critical functions where ignoring the return
  value is almost always a bug. Enable the new configuration option
  MBEDTLS_CHECK_RETURN_WARNING to get warnings for other functions. This
  is currently implemented in the AES, DES and md modules, and will be
  extended to other modules in the future.
  * Add missing PSA macros declared by PSA Crypto API 1.0.0:
  PSA_ALG_IS_SIGN_HASH, PSA_ALG_NONE, PSA_HASH_BLOCK_LENGTH, PSA_KEY_ID_NULL.
  * Add new API mbedtls_ct_memcmp for constant time buffer comparison.
  * Add PSA API definition for ARIA.
  Security
  * Zeroize several intermediate variables used to calculate the expected
  value when verifying a MAC or AEAD tag. This hardens the library in
  case the value leaks through a memory disclosure vulnerability. For
  example, a memory disclosure vulnerability could have allowed a
  man-in-the-middle to inject fake ciphertext into a DTLS connection.
  * In psa_cipher_generate_iv() and psa_cipher_encrypt(), do not read back
  from the output buffer. This fixes a potential policy bypass or decryption
  oracle vulnerability if the output buffer is in memory that is shared with
  an untrusted application.
  * Fix a double-free that happened after mbedtls_ssl_set_session() or
  mbedtls_ssl_get_session() failed with MBEDTLS_ERR_SSL_ALLOC_FAILED
  (out of memory). After that, calling mbedtls_ssl_session_free()
  and mbedtls_ssl_free() would cause an internal session buffer to
  be free()'d twice.
  Bugfix
  * Stop using reserved identifiers as local variables. Fixes #4630.
  * The GNU makefiles invoke python3 in preference to python except on Windows.
  * The check was accidentally not performed when cross-compiling for Windows
  on Linux. Fix this. Fixes #4774.
  * Prevent divide by zero if either of PSA_CIPHER_ENCRYPT_OUTPUT_SIZE() or
  PSA_CIPHER_UPDATE_OUTPUT_SIZE() were called using an asymmetric key type.
  * Fix a parameter set but unused in psa_crypto_cipher.c. Fixes #4935.
  * Don't use the obsolete header path sys/fcntl.h in unit tests.
  These header files cause compilation errors in musl.
  Fixes #4969.
  * Fix missing constraints on x86_64 and aarch64 assembly code
  for bignum multiplication that broke some bignum operations with
  (at least) Clang 12.
  Fixes #4116, #4786, #4917, #4962.
  * Fix mbedtls_cipher_crypt: AES-ECB when MBEDTLS_USE_PSA_CRYPTO is enabled.
  * Failures of alternative implementations of AES or DES single-block
  functions enabled with MBEDTLS_AES_ENCRYPT_ALT, MBEDTLS_AES_DECRYPT_ALT,
  MBEDTLS_DES_CRYPT_ECB_ALT or MBEDTLS_DES3_CRYPT_ECB_ALT were ignored.
  This does not concern the implementation provided with Mbed TLS,
  where this function cannot fail, or full-module replacements with
  MBEDTLS_AES_ALT or MBEDTLS_DES_ALT. Reported by Armelle Duboc in #1092.
  * Some failures of HMAC operations were ignored. These failures could only
  happen with an alternative implementation of the underlying hash module.
  * Fix the error returned by psa_generate_key() for a public key. Fixes #4551.
  * Fix the build of sample programs when neither MBEDTLS_ERROR_C nor
  MBEDTLS_ERROR_STRERROR_DUMMY is enabled.
  * Fix PSA_ALG_RSA_PSS verification accepting an arbitrary salt length.
  This algorithm now accepts only the same salt length for verification
  that it produces when signing, as documented. Use the new algorithm
  PSA_ALG_RSA_PSS_ANY_SALT to accept any salt length. Fixes #4946.
  * The existing predicate macro name PSA_ALG_IS_HASH_AND_SIGN is now reserved
  for algorithm values that fully encode the hashing step, as per the PSA
  Crypto API specification. This excludes PSA_ALG_RSA_PKCS1V15_SIGN_RAW and
  PSA_ALG_ECDSA_ANY. The new predicate macro PSA_ALG_IS_SIGN_HASH covers
  all algorithms that can be used with psa_{sign,verify}_hash(), including
  these two.
  * Fix issue in Makefile on Linux with SHARED=1, that caused shared libraries
  not to list other shared libraries they need.
  * Fix a bug in mbedtls_gcm_starts() when the bit length of the iv
  exceeds 2^32. Fixes #4884.
  * Fix an uninitialized variable warning in test_suite_ssl.function with GCC
  version 11.
  * Fix the build when no SHA2 module is included. Fixes #4930.
  * Fix the build when only the bignum module is included. Fixes #4929.
  * Fix a potential invalid pointer dereference and infinite loop bugs in
  pkcs12 functions when the password is empty. Fix the documentation to
  better describe the inputs to these functions and their possible values.
  Fixes #5136.
  * The key usage flags PSA_KEY_USAGE_SIGN_MESSAGE now allows the MAC
  operations psa_mac_compute() and psa_mac_sign_setup().
  * The key usage flags PSA_KEY_USAGE_VERIFY_MESSAGE now allows the MAC
  operations psa_mac_verify() and psa_mac_verify_setup().
  Changes
  * Set config option MBEDTLS_TLS_DEFAULT_ALLOW_SHA1_IN_KEY_EXCHANGE to be
  disabled by default.
  * Improve the performance of base64 constant-flow code. The result is still
  slower than the original non-constant-flow implementation, but much faster
  than the previous constant-flow implementation. Fixes #4814.
  * Indicate in the error returned if the nonce length used with
  ChaCha20-Poly1305 is invalid, and not just unsupported.
  * The mbedcrypto library includes a new source code module constant_time.c,
  containing various functions meant to resist timing side channel attacks.
  * This module does not have a separate configuration option, and functions
  from this module will be included in the build as required. Currently
  most of the interface of this module is private and may change at any
  time.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1642420800">- Fix baselib.conf</changelog>
  <changelog author="Alexander Bergmann &lt;abergmann@suse.com&gt;" date="1671624000">- Fix potential heap buffer overread and overwrite in DTLS if
  MBEDTLS_SSL_DTLS_CONNECTION_ID is enabled and
  MBEDTLS_SSL_CID_IN_LEN_MAX &gt; 2 * MBEDTLS_SSL_CID_OUT_LEN_MAX.
  (bsc#1206576, CVE-2022-46393).
  Add: mbedtls-CVE-2022-46393.patch</changelog>
</package>
<package pkgid="119867efbc0763b012b5fc8e2b6e642bdb82bfb4b209544fdafc1aaaeede08e5" name="libmbedx509-1-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="2.28.0" rel="bp154.2.3.1"/>
  <changelog author="mpluskal@suse.com" date="1531137600">- Update to version 2.11.0:
  * Features
    + Added support for the XTS block cipher mode with AES (AES-XTS). Contributed by Aorimn in pull request #414.
    + Implemented the HMAC-based extract-and-expand key derivation function (HKDF) per RFC 5869. Contributed by Thomas Fossati.
    + For TLS servers, added support for offloading private key operations to an external cryptoprocessor. Private key operations can be asynchronous to allow non-blocking operation of the TLS server stack.
    + Added support for ARIA cipher (RFC 5794) and associated TLS ciphersuites (RFC 6209). ARIA is disabled by default. To enable, see MBEDTLS_ARIA_C in config.h.
    + Added support for the CCM* block cipher mode as defined in IEEE Std 802.15.4.
    + Added an additional block mode, OFB (Output Feedback) per NIST SP 800-38a, to the AES module and cipher abstraction module.
  * API Changes
    + Mbed TLS 2.11.0 maintains source code compatibility with the last minor version, Mbed TLS 2.9.0, but extends the interface with additional capabilities. Mbed TLS 2.11.0 modifies the ABI and increases the SOVERSION.
  * Bugfix
    + Fixed the cert_write example to handle certificates signed with elliptic curves as well as RSA. Fixes #777 found by dbedev.
    + Fixed the redefinition of _WIN32_WINNT, to avoid overriding a definition used by user applications. Found and fixed by Fabio Alessandrelli.
    + Fixed compilation warnings with the IAR toolchain on 32-bit platforms. Reported by rahmanih in #683.
    + Fixed an issue with MicroBlaze support in bn_mul.h which was causing the build to fail. Found by zv-io. Fixes #1651.
    + Fixed braces in mbedtls_memory_buffer_alloc_status(). Found by sbranden in #552.
    + Added the macro MBEDTLS_X509_MAX_FILE_PATH_LEN that enables the user to configure the maximum length of a file path that can be buffered when calling mbedtls_x509_crt_parse_path(). Fixes #492.
    + Fixed redundant declaration of mbedtls_ssl_list_ciphersuites. Raised by TrinityTonic in #1359.
- Changes for version 2.9.0:
  + Security
    + Fixed an issue in the X.509 module which could lead to a buffer overread during certificate validation. Additionally, the issue could also lead to unnecessary callback checks being made or to some validation checks to be omitted. The overread could be triggered remotely, while the other issues would require a non DER-compliant certificate to be correctly signed by a trusted CA, or a trusted CA with a non DER-compliant certificate. Found by luocm. Fixes #825.
    + Fixed the buffer length assertion in the ssl_parse_certificate_request() function which could lead to an arbitrary overread of the message buffer. The overreads could be caused by receiving a malformed algorithms section which was too short. In builds with debug output, this overread data was output with the debug data.
    + Fixed a client-side bug in the validation of the server's ciphersuite choice which could potentially lead to the client accepting a ciphersuite it didn't offer or a ciphersuite that could not be used with the TLS or DTLS version chosen by the server. This could lead to corruption of internal data structures for some configurations.
  * Features
    + Added an option of MBEDTLS_AES_FEWER_TABLES, to dynamically compute smaller AES tables during runtime, thereby reducing the RAM/ROM footprint by ~6KiB. Suggested and contributed by jkivilin.
    + Added initial support for Curve448 (RFC 7748). So far only mbedtls_ecp_mul() and ECDH primitive functions (mbedtls_ecdh_gen_public(), mbedtls_ecdh_compute_shared()) are supported for now. Contributed by Nicholas Wilson.
  * API Changes
    + Mbed TLS 2.9.0 maintains source code and binary compatibility with the last minor version, Mbed TLS 2.8.0, but extends the interface with additional capabilities.
    + Extended the API with the function of mbedtls_net_poll() to allow user applications to wait for a network context to become ready before reading or writing.
    + Added the function mbedtls_ssl_check_pending() to the public API to allow a check for whether more more data is pending to be processed in the internal message buffers. This function is necessary to determine the underlying transport when event-driven IO is used.
  * Bugfix
    + Fixed a spurious uninitialized variable warning in cmac.c. Fix independently contributed by Brian J Murray and David Brown.
    + Added missing dependencies in test suites that led to build failures in configurations that omit certain hashes or public-key algorithms. Fixes #1040.
    + Fixed a C89 incompatibility issue in benchmark.c. Contributed by Brendan Shanks. Fixes #1353.
    + Added missing dependencies for MBEDTLS_HAVE_TIME_DATE and MBEDTLS_VERSION_FEATURES in some test suites. Contributed by Deomid Ryabkov. Fixes #1299, #1475.
    + Fixed the Makefile build process for building shared libraries on Mac OS X. Fixed by mnacamura.
    + Fixed parsing of PKCS#8 encoded Elliptic Curve keys. Previously Mbed TLS was unable to parse keys which had only the optional parameters field of the ECPrivateKey structure. Found by Jethro Beekman, fixed in #1379.
    + Added an optimisation to return the plaintext data more quickly on unpadded CBC decryption, as stated in the mbedtls_cipher_update() documentation. Contributed by Andy Leiserson.
    + Fixed the overriding and ignoring of return values when parsing and writing to a file in the pk_sign program. Found by kevlut in #1142.
    + Added restrictions to the usage of the error code MBEDTLS_ERR_SSL_WANT_READ to situations where data needs to be fetched from the underlying transport in order to make progress. Previously, this error code was also occasionally returned when unexpected messages were being discarded, ignoring that further messages could potentially already be pending to be processed in the internal buffers; these cases led to deadlocks when event-driven I/O was used. Found and reported by Hubert Mis in #772.
    + Fixed buffer length assertions in the ssl_parse_certificate_request() function which led to a potential one byte overread of the message buffer.
    + Fixed invalid buffer sizes being passed to zlib during record compression and decompression.
    + Raised the soversion of libmbedcrypto to match the soversion of the maintained 2.7 branch. The soversion was increased in Mbed TLS version 2.7.1 to reflect breaking changes in that release, but the increment was missed in 2.8.0 and later releases outside of the 2.7 branch.</changelog>
  <changelog author="mpluskal@suse.com" date="1535025600">- Update to version 2.12.0:
  * Security
    + Fixed a vulnerability in the TLS ciphersuites based on use of CBC and SHA-384 in DTLS/TLS 1.0 to 1.2, that allowed an active network attacker to partially recover the plaintext of messages under certains conditions by exploiting timing side-channels.
    + Fixed a vulnerability in TLS ciphersuites based on CBC, in DTLS/TLS 1.0 to 1.2, that allowed a local attacker, with the ability to execute code on the local machine as well as to manipulate network packets, to partially recover the plaintext of messages under certain conditions by using a cache attack targetting an internal MD/SHA buffer.
    + Added a counter-measure against a vulnerability in TLS ciphersuites based on CBC, in DTLS/TLS 1.0 to 1.2, that allowed a local attacker with the ability to execute code on the local machine as well as manipulate network packets, to partially recover the plaintext of messages certain conditions (see previous entry) by using a cache attack targeting the SSL input record buffer.
  * Features
    + Added new cryptographic primitives, the stream cipher Chacha20, one-time authenticator Poly1305 and AEAD construct Chacha20-Poly1305, as defined in RFC 7539. Contributed by Daniel King.
    + Added support for the CHACHA20-POLY1305 ciphersuites from RFC 7905.
    + Made the receive and transmit buffers independently configurable in size, for situations where the outgoing buffer can be fixed at a smaller size than the incoming buffer
    + Added support for the AES based key wrapping modes defined by NIST SP 800-38F algorithms KW and KWP and by RFC's 3394 and 5649.
    + Added platform support for the Haiku OS.
  * Bugfix
    + Fixed the key_app_writer example which was creating an invalid ASN.1 tag by writing an additional leading zero byte. Found by Aryeh R. #1257.
    + Fixed a C++ compilation error, caused by a variable named new. Found and fixed by Hirotaka Niisato. #1783.
    + Fixed the "no symbols" warning issued by ranlib when building on Mac OS X. Fix contributed by tabascoeye.
    + Clarified documentation for mbedtls_ssl_write() to include 0 as a valid return value. Found by @davidwu2000. #839.
    + Fixed a memory leak in mbedtls_x509_csr_parse(). Found and fixed by catenacyber, Philippe Antoine. #1623.
    + Added length checks to some TLS parsing functions. Found and fixed by Philippe Antoine from Catena cyber. #1663.
    + Remove unused headers included in x509.c. Found by Chris Hanson and fixed by Brendan Shanks. #992.
    + Fixed compilation error when MBEDTLS_ARC4_C is disabled and MBEDTLS_CIPHER_NULL_CIPHER is enabled. Found by TrinityTonic in #1719.
    + Fixed the inline assembly for the MPI multiply helper function for i386 and i386 with SSE2. Found by László Langó. #1550.
    + Fixed the namespacing in header files. Remove the mbedtls namespacing in the #include in the header files. #857.
    + Fixed a compiler warning of 'use before initialisation' in mbedtls_pk_parse_key(). Found by Martin Boye Petersen and fixed by Dawid Drozd.#1098.
    + Fixed decryption of zero length messages (which contain all padding) when a CBC based ciphersuite was used together with Encrypt-then-MAC.
    + Fixed the ssl_client2 example to send application data with 0-length content when the request_size argument is set to 0 as stated in the documentation. #1833.
    + Corrected the documentation for mbedtls_ssl_get_session(). This API has deep copy of the session, and the peer certificate is not lost. #926.
    + Fixed issues when building to the C99 standard, using -std=c99. Fixed by Nick Wilson.
  * Changes
    + Fails when receiving a TLS alert message with an invalid length, or invalid zero-length messages when using TLS 1.2. Contributed by Espressif Systems.
    + Changed the default behaviour of mbedtls_hkdf_extract() to return an error when calling with a NULL salt and non-zero salt length. Contributed by Brian J Murray
    + Change the shebang line in Perl scripts to look up perl in the PATH. Contributed by fbrosson.
    + Allow overriding the time on Windows via the platform-time abstraction. Fixed by Nick Wilson.
    + Use gmtime_r/gmtime_s for thread-safety. Fixed by Nick Wilson.</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1544529600">- Update to version 2.14.1: [bsc#1118727, CVE-2018-19608]
  Security
  * Fix timing variations and memory access variations in RSA PKCS#1 v1.5
    decryption that could lead to a Bleichenbacher-style padding oracle
    attack. In TLS, this affects servers that accept ciphersuites based on
    RSA decryption (i.e. ciphersuites whose name contains RSA but not
    (EC)DH(E)). Discovered by Eyal Ronen (Weizmann Institute),  Robert Gillham
    (University of Adelaide), Daniel Genkin (University of Michigan),
    Adi Shamir (Weizmann Institute), David Wong (NCC Group), and Yuval Yarom
    (University of Adelaide, Data61). The attack is described in more detail
    in the paper available here: http://cat.eyalro.net/cat.pdf  CVE-2018-19608
  * In mbedtls_mpi_write_binary(), don't leak the exact size of the number
    via branching and memory access patterns. An attacker who could submit
    a plaintext for RSA PKCS#1 v1.5 decryption but only observe the timing
    of the decryption and not its result could nonetheless decrypt RSA
    plaintexts and forge RSA signatures. Other asymmetric algorithms may
    have been similarly vulnerable. Reported by Eyal Ronen, Robert Gillham,
    Daniel Genkin, Adi Shamir, David Wong and Yuval Yarom.
  * Wipe sensitive buffers on the stack in the CTR_DRBG and HMAC_DRBG
    modules.
  API Changes
  * The new functions mbedtls_ctr_drbg_update_ret() and
    mbedtls_hmac_drbg_update_ret() are similar to mbedtls_ctr_drbg_update()
    and mbedtls_hmac_drbg_update() respectively, but the new functions
    report errors whereas the old functions return void. We recommend that
    applications use the new functions.
- Version 2.14.0:
  Security
  * Fix overly strict DN comparison when looking for CRLs belonging to a
    particular CA. This previously led to ignoring CRLs when the CRL's issuer
    name and the CA's subject name differed in their string encoding (e.g.,
    one using PrintableString and the other UTF8String) or in the choice of
    upper and lower case. Reported by Henrik Andersson of Bosch GmbH in issue
    [#1784].
  * Fix a flawed bounds check in server PSK hint parsing. In case the
    incoming message buffer was placed within the first 64KiB of address
    space and a PSK-(EC)DHE ciphersuite was used, this allowed an attacker
    to trigger a memory access up to 64KiB beyond the incoming message buffer,
    potentially leading to an application crash or information disclosure.
  * Fix mbedtls_mpi_is_prime() to use more rounds of probabilistic testing. The
    previous settings for the number of rounds made it practical for an
    adversary to construct non-primes that would be erroneously accepted as
    primes with high probability. This does not have an impact on the
    security of TLS, but can matter in other contexts with numbers chosen
    potentially by an adversary that should be prime and can be validated.
    For example, the number of rounds was enough to securely generate RSA key
    pairs or Diffie-Hellman parameters, but was insufficient to validate
    Diffie-Hellman parameters properly.
    See "Prime and Prejudice" by by Martin R. Albrecht and Jake Massimo and
    Kenneth G. Paterson and Juraj Somorovsky.
  Features
  * Add support for temporarily suspending expensive ECC computations after
    some configurable amount of operations. This is intended to be used in
    constrained, single-threaded systems where ECC is time consuming and can
    block other operations until they complete. This is disabled by default,
    but can be enabled by MBEDTLS_ECP_RESTARTABLE at compile time and
    configured by mbedtls_ecp_set_max_ops() at runtime. It applies to the new
    xxx_restartable functions in ECP, ECDSA, PK and X.509 (CRL not supported
    yet), and to existing functions in ECDH and SSL (currently only
    implemented client-side, for ECDHE-ECDSA ciphersuites in TLS 1.2,
    including client authentication).
  * Add support for Arm CPU DSP extensions to accelerate asymmetric key
    operations. On CPUs where the extensions are available, they can accelerate
    MPI multiplications used in ECC and RSA cryptography. Contributed by
    Aurelien Jarno.
  * Extend RSASSA-PSS signature to allow a smaller salt size. Previously, PSS
    signature always used a salt with the same length as the hash, and returned
    an error if this was not possible. Now the salt size may be up to two bytes
    shorter. This allows the library to support all hash and signature sizes
    that comply with FIPS 186-4, including SHA-512 with a 1024-bit key.
  * Add support for 128-bit keys in CTR_DRBG. Note that using keys shorter
    than 256 bits limits the security of generated material to 128 bits.
  API Changes
  * Add a common error code of `MBEDTLS_ERR_PLATFORM_FEATURE_UNSUPPORTED` for
    a feature that is not supported by underlying alternative
    implementations implementing cryptographic primitives. This is useful for
    hardware accelerators that don't implement all options or features.
  New deprecations
  * All module specific errors following the form
    MBEDTLS_ERR_XXX_FEATURE_UNAVAILABLE that indicate a feature is not
    supported are deprecated and are now replaced by the new equivalent
    platform error.
  * All module specific generic hardware acceleration errors following the
    form MBEDTLS_ERR_XXX_HW_ACCEL_FAILED that are deprecated and are replaced
    by the equivalent plaform error.
  * Deprecate the function mbedtls_mpi_is_prime() in favor of
    mbedtls_mpi_is_prime_ext() which allows specifying the number of
    Miller-Rabin rounds.
  Bugfix
  * Fix wrong order of freeing in programs/ssl/ssl_server2 example
    application leading to a memory leak in case both
    MBEDTLS_MEMORY_BUFFER_ALLOC_C and MBEDTLS_MEMORY_BACKTRACE are set.
    Fixes #2069.
  * Fix a bug in the update function for SSL ticket keys which previously
    invalidated keys of a lifetime of less than a 1s. Fixes #1968.
  * Fix failure in hmac_drbg in the benchmark sample application, when
    MBEDTLS_THREADING_C is defined. Found by TrinityTonic, #1095
  * Fix a bug in the record decryption routine ssl_decrypt_buf()
    which lead to accepting properly authenticated but improperly
    padded records in case of CBC ciphersuites using Encrypt-then-MAC.
  * Fix memory leak and freeing without initialization in the example
    program programs/x509/cert_write. Fixes #1422.
  * Ignore IV in mbedtls_cipher_set_iv() when the cipher mode is
    MBEDTLS_MODE_ECB. Found by ezdevelop. Fixes #1091.
  * Zeroize memory used for buffering or reassembling handshake messages
    after use.
  * Use `mbedtls_platform_zeroize()` instead of `memset()` for zeroization
    of sensitive data in the example programs aescrypt2 and crypt_and_hash.
  * Change the default string format used for various X.509 DN attributes to
    UTF8String. Previously, the use of the PrintableString format led to
    wildcards and non-ASCII characters being unusable in some DN attributes.
    Reported by raprepo in #1860 and by kevinpt in #468. Fix contributed by
    Thomas-Dee.
  * Fix compilation failure for configurations which use compile time
    replacements of standard calloc/free functions through the macros
    MBEDTLS_PLATFORM_CALLOC_MACRO and MBEDTLS_PLATFORM_FREE_MACRO.
    Reported by ole-de and ddhome2006. Fixes #882, #1642 and #1706.
  Changes
  * Removed support for Yotta as a build tool.
  * Add tests for session resumption in DTLS.
  * Close a test gap in (D)TLS between the client side and the server side:
    test the handling of large packets and small packets on the client side
    in the same way as on the server side.
  * Change the dtls_client and dtls_server samples to work by default over
    IPv6 and optionally by a build option over IPv4.
  * Change the use of Windows threading to use Microsoft Visual C++ runtime
    calls, rather than Win32 API calls directly. This is necessary to avoid
    conflict with C runtime usage. Found and fixed by irwir.
  * Remember the string format of X.509 DN attributes when replicating
    X.509 DNs. Previously, DN attributes were always written in their default
    string format (mostly PrintableString), which could lead to CRTs being
    created which used PrintableStrings in the issuer field even though the
    signing CA used UTF8Strings in its subject field; while X.509 compliant,
    such CRTs were rejected in some applications, e.g. some versions of
    Firefox, curl and GnuTLS. Reported in #1033 by Moschn. Fix contributed by
    Thomas-Dee.
  * Improve documentation of mbedtls_ssl_get_verify_result().
    Fixes #517 reported by github-monoculture.
  * Add MBEDTLS_MPI_GEN_PRIME_FLAG_LOW_ERR flag to mbedtls_mpi_gen_prime() and
    use it to reduce error probability in RSA key generation to levels mandated
    by FIPS-186-4.
- Version 2.13.1
  API Changes
  * Extend the platform module with an abstraction mbedtls_platform_gmtime_r()
    whose implementation should behave as a thread-safe version of gmtime().
    This allows users to configure such an implementation at compile time when
    the target system cannot be deduced automatically, by setting the option
    MBEDTLS_PLATFORM_GMTIME_R_ALT. At this stage Mbed TLS is only able to
    automatically select implementations for Windows and POSIX C libraries.
  Bugfix
  * Fix build failures on platforms where only gmtime() is available but
    neither gmtime_r() nor gmtime_s() are present. Fixes #1907.
- Version 2.13.0
  Security
  * Fix an issue in the X.509 module which could lead to a buffer overread
    during certificate extensions parsing. In case of receiving malformed
    input (extensions length field equal to 0), an illegal read of one byte
    beyond the input buffer is made. Found and analyzed by Nathan Crandall.
  Features
  * Add support for fragmentation of outgoing DTLS handshake messages. This
    is controlled by the maximum fragment length as set locally or negotiated
    with the peer, as well as by a new per-connection MTU option, set using
    mbedtls_ssl_set_mtu().
  * Add support for auto-adjustment of MTU to a safe value during the
    handshake when flights do not get through (RFC 6347, section 4.1.1.1,
    last paragraph).
  * Add support for packing multiple records within a single datagram,
    enabled by default.
  * Add support for buffering out-of-order handshake messages in DTLS.
    The maximum amount of RAM used for this can be controlled by the
    compile-time constant MBEDTLS_SSL_DTLS_MAX_BUFFERING defined
    in mbedtls/config.h.
  API Changes
  * Add function mbedtls_ssl_set_datagram_packing() to configure
    the use of datagram packing (enabled by default).
  Bugfix
  * Fix a potential memory leak in mbedtls_ssl_setup() function. An allocation
    failure in the function could lead to other buffers being leaked.
  * Fixes an issue with MBEDTLS_CHACHAPOLY_C which would not compile if
    MBEDTLS_ARC4_C and MBEDTLS_CIPHER_NULL_CIPHER weren't also defined. #1890
  * Fix a memory leak in ecp_mul_comb() if ecp_precompute_comb() fails.
    Fix contributed by Espressif Systems.
  * Add ecc extensions only if an ecc based ciphersuite is used.
    This improves compliance to RFC 4492, and as a result, solves
    interoperability issues with BouncyCastle. Raised by milenamil in #1157.
  * Replace printf with mbedtls_printf in the ARIA module. Found by
    TrinityTonic in #1908.
  * Fix potential use-after-free in mbedtls_ssl_get_max_frag_len()
    and mbedtls_ssl_get_record_expansion() after a session reset. Fixes #1941.
  * Fix a bug that caused SSL/TLS clients to incorrectly abort the handshake
    with TLS versions 1.1 and earlier when the server requested authentication
    without providing a list of CAs. This was due to an overly strict bounds
    check in parsing the CertificateRequest message,
    introduced in Mbed TLS 2.12.0. Fixes #1954.
  * Fix a miscalculation of the maximum record expansion in
    mbedtls_ssl_get_record_expansion() in case of ChachaPoly ciphersuites,
    or CBC ciphersuites in (D)TLS versions 1.1 or higher. Fixes #1913, #1914.
  * Fix undefined shifts with negative values in certificates parsing
    (found by Catena cyber using oss-fuzz)
  * Fix memory leak and free without initialization in pk_encrypt
    and pk_decrypt example programs. Reported by Brace Stout. Fixes #1128.
  * Remove redundant else statement. Raised by irwir. Fixes #1776.
  Changes
  * Copy headers preserving timestamps when doing a "make install".
    Contributed by xueruini.
  * Allow the forward declaration of public structs. Contributed by Dawid
    Drozd. Fixes #1215 raised by randombit.
  * Improve compatibility with some alternative CCM implementations by using
    CCM test vectors from RAM.
  * Add support for buffering of out-of-order handshake messages.
  * Add warnings to the documentation of the HKDF module to reduce the risk
    of misusing the mbedtls_hkdf_extract() and mbedtls_hkdf_expand()
    functions. Fixes #1775. Reported by Brian J. Murray.</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1544529601">- Library package version bumped to libmbedtls12</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1546862400">- Update to version 2.16.0:
  Features
  * Add a new config.h option of MBEDTLS_CHECK_PARAMS that enables validation of parameters in the API. This allows detection of obvious misuses of the API, such as passing NULL pointers. The API of existing functions hasn't changed, but requirements on parameters have been made more explicit in the documentation. See the corresponding API documentation for each function to see for which parameter values it is defined. This feature is disabled by default. See its API documentation in config.h for additional steps you have to take when enabling it.
  API Changes
  * The following functions in the random generator modules have been deprecated and replaced as shown below. The new functions change the return type from void to int to allow returning error codes when using MBEDTLS_&lt;MODULE&gt;_ALT for the underlying AES or message digest primitive. Fixes #1798. mbedtls_ctr_drbg_update() -&gt; mbedtls_ctr_drbg_update_ret() mbedtls_hmac_drbg_update() -&gt; mbedtls_hmac_drbg_update_ret()
  * Extend ECDH interface to enable alternative implementations.
  * Deprecate error codes of the form MBEDTLS_ERR_xxx_INVALID_KEY_LENGTH for ARIA, CAMELLIA and Blowfish. These error codes will be replaced by the more generic per-module error codes MBEDTLS_ERR_xxx_BAD_INPUT_DATA.
  * Additional parameter validation checks have been added for the following modules - AES, ARIA, Blowfish, CAMELLIA, CCM, GCM, DHM, ECP, ECDSA, ECDH, ECJPAKE, SHA, Chacha20 and Poly1305, cipher, pk, RSA, and MPI. Where modules have had parameter validation added, existing parameter checks may have changed. Some modules, such as Chacha20 had existing parameter validation whereas other modules had little. This has now been changed so that the same level of validation is present in all modules, and that it is now optional with the MBEDTLS_CHECK_PARAMS flag which by default is off. That means that checks which were previously present by default will no longer be.
  New deprecations
  * Deprecate mbedtls_ctr_drbg_update() and mbedtls_hmac_drbg_update() in favor of functions that can return an error code.
  Bugfix
  * Fix for Clang, which was reporting a warning for the bignum.c inline assembly for AMD64 targets creating string literals greater than those permitted by the ISO C99 standard. Found by Aaron Jones. Fixes #482.
  * Fix runtime error in mbedtls_platform_entropy_poll() when run through qemu user emulation. Reported and fix suggested by randombit. Fixes #1212.
  * Fix an unsafe bounds check when restoring an SSL session from a ticket. This could lead to a buffer overflow, but only in case ticket authentication was broken. Reported and fix suggested by Guido Vranken in #659.
  * Add explicit integer to enumeration type casts to example program programs/pkey/gen_key which previously led to compilation failure on some toolchains. Reported by phoenixmcallister. Fixes #2170.
  * Clarify documentation of mbedtls_ssl_set_own_cert() regarding the absence of check for certificate/key matching. Reported by Attila Molnar, #507.
  * Fix double initialization of ECC hardware that made some accelerators hang.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1567512000">- Update to version 2.16.2:
  * Security improvements and bugfixes
- Use ninja to for build</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1573646400">- Update to version 2.16.3:
  * Security improvements and bugfixes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1585828800">- Update to version 2.16.5:
  * Security improvements and bugfixes</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597665600">- update to 2.23.0:
  a lot of changes see https://github.com/ARMmbed/mbedtls/releases/tag/v2.23.0
  * Fix a side channel vulnerability in modular exponentiation that could reveal an RSA private key used in a secure enclave. Noticed by Sangho Lee, Ming-Wei Shih, Prasun Gera, Taesoo Kim and Hyesoon Kim (Georgia Institute of Technology); and Marcus Peinado (Microsoft Research). Reported by Raoul Strackx (Fortanix) in #3394.
  * Fix side channel in mbedtls_ecp_check_pub_priv() and mbedtls_pk_parse_key() / mbedtls_pk_parse_keyfile() (when loading a private key that didn't include the uncompressed public key), as well as mbedtls_ecp_mul() / mbedtls_ecp_mul_restartable() when called with a NULL f_rng argument. An attacker with access to precise enough timing and memory access information (typically an untrusted operating system attacking a secure enclave) could fully recover the ECC private key. Found and reported by Alejandro Cabrera Aldaya and Billy Brumley.
  * Fix issue in Lucky 13 counter-measure that could make it ineffective when hardware accelerators were used (using one of the MBEDTLS_SHAxxx_ALT macros). This would cause the original Lucky 13 attack to be possible in those configurations, allowing an active network attacker to recover plaintext after repeated timing measurements under some conditions. Reported and fix suggested by Luc Perneel in #3246.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1598875200">- Do not run testsuite in parallel - its not reliable</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1599480000">- Add workaround for failing builds (Python not found) due to
  https://gitlab.kitware.com/cmake/cmake/-/issues/21168</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1599652800">- update to 2.24.0:
  * see https://github.com/ARMmbed/mbedtls/releases/tag/v2.24.0
  * Fix a vulnerability in the verification of X.509 certificates when matching
  the expected common name (the cn argument of mbedtls_x509_crt_verify())
  with the actual certificate name: when the subjecAltName extension is
  present, the expected name was compared to any name in that extension
  regardless of its type. This means that an attacker could for example
  impersonate a 4-bytes or 16-byte domain by getting a certificate for the
  corresponding IPv4 or IPv6 (this would require the attacker to control that
  IP address, though). Similar attacks using other subjectAltName name types
  might be possible.
  * When checking X.509 CRLs, a certificate was only considered as revoked if
  its revocationDate was in the past according to the local clock if
  available. In particular, on builds without MBEDTLS_HAVE_TIME_DATE,
  certificates were never considered as revoked. On builds with
  MBEDTLS_HAVE_TIME_DATE, an attacker able to control the local clock (for
  example, an untrusted OS attacking a secure enclave) could prevent
  revocation of certificates via CRLs. Fixed by no longer checking the
  revocationDate field, in accordance with RFC 5280. Reported by yuemonangong
  in #3340. Reported independently and fixed by Raoul Strackx and Jethro
  * In (D)TLS record decryption, when using a CBC ciphersuites without the
  Encrypt-then-Mac extension, use constant code flow memory access patterns
  to extract and check the MAC. This is an improvement to the existing
  countermeasure against Lucky 13 attacks. The previous countermeasure was
  effective against network-based attackers, but less so against local
  attackers. The new countermeasure defends against local attackers, even if
  they have access to fine-grained measurements. In particular, this fixes a
  local Lucky 13 cache attack found and reported by Tuba Yavuz, Farhaan
  Fowze, Ken (Yihan) Bai, Grant Hernandez, and Kevin Butler (University of
  Florida) and Dave Tian (Purdue University).
  * Fix side channel in RSA private key operations and static (finite-field)
  Diffie-Hellman. An adversary with precise enough timing and memory access
  information (typically an untrusted operating system attacking a secure
  enclave) could bypass an existing counter-measure (base blinding) and
  potentially fully recover the private key.
  * Fix a 1-byte buffer overread in mbedtls_x509_crl_parse_der(). Credit to
  OSS-Fuzz for detecting the problem and to Philippe Antoine for pinpointing
  the problematic code.
  * Zeroising of plaintext buffers in mbedtls_ssl_read() to erase unused
  application data from memory.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1608638400">- update to 2.25.0:
  * This release of Mbed TLS provides bug fixes, minor enhancements and new
  features. This release includes fixes for security issues.
  * see https://github.com/ARMmbed/mbedtls/releases/tag/v2.25.0
  * The functions mbedtls_cipher_auth_encrypt() and
  mbedtls_cipher_auth_decrypt() would write past the minimum documented size
  of the output buffer when used with NIST_KW. As a result, code using those
  functions as documented with NIST_KW could have a buffer overwrite of up to
  15 bytes, with consequences ranging up to arbitrary code execution
  depending on the location of the output buffer.
  * Limit the size of calculations performed by mbedtls_mpi_exp_mod to
  MBEDTLS_MPI_MAX_SIZE to prevent a potential denial of service when generating
  Diffie-Hellman key pairs. Credit to OSS-Fuzz.
  * A failure of the random generator was ignored in mbedtls_mpi_fill_random(),
  which is how most uses of randomization in asymmetric cryptography (including
  key generation, intermediate value randomization and blinding) are implemented.
  This could cause failures or the silent use of non-random values. A random
  generator can fail if it needs reseeding and cannot not obtain entropy, or due
  to an internal failure (which, for Mbed TLS's own CTR_DRBG or HMAC_DRBG, can
  only happen due to a misconfiguration).
  * Fix a compliance issue whereby we were not checking the tag on the algorithm
  parameters (only the size) when comparing the signature in the description part
  of the cert to the real signature. This meant that a NULL algorithm parameters
  entry would look identical to an array of REAL (size zero) to the library and
  thus the certificate would be considered valid. However, if the parameters do
  not match in any way then the certificate should be considered invalid, and
  indeed OpenSSL marks these certs as invalid when mbedtls did not. Many thanks
  to guidovranken who found this issue via differential fuzzing and reported it
  in #3629.
  * Zeroising of local buffers and variables which are used for calculations in
  mbedtls_pkcs5_pbkdf2_hmac(), mbedtls_internal_sha*_process(),
  mbedtls_internal_md*_process() and mbedtls_internal_ripemd160_process()
  functions to erase sensitive data from memory. Reported by Johan Malmgren and
  Johan Uppman Bruce from Sectra.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1611057600">- Fix build for Leap targets
- Use upstream tarball name</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1616414400">- Update to 2.26.0: [bsc#1189589, CVE-2021-24119]
  * * This release of Mbed TLS provides bug fixes, minor enhancements and new
  features. This release includes fixes for security issues.
  * see https://github.com/ARMmbed/mbedtls/releases/tag/v2.26.0
- Fix build with patch from https://github.com/ARMmbed/mbedtls/pull/4237
  mbedtls-4237.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1618488000">-  Workaround for building with gcc-11 boo#1181876</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1626782400">- Update to 2.27.0:
  API changes:
  * Update AEAD output size macros to bring them in line with the PSA Crypto
    API version 1.0 spec. This version of the spec parameterizes them on the
    key type used, as well as the key bit-size in the case of
    PSA_AEAD_TAG_LENGTH.
    The old versions of these macros were renamed and deprecated as follows:
  - PSA_AEAD_TAG_LENGTH          -&gt; PSA_AEAD_TAG_LENGTH_1_ARG
  - PSA_AEAD_ENCRYPT_OUTPUT_SIZE -&gt; PSA_AEAD_ENCRYPT_OUTPUT_SIZE_2_ARG
  - PSA_AEAD_DECRYPT_OUTPUT_SIZE -&gt; PSA_AEAD_DECRYPT_OUTPUT_SIZE_2_ARG
  - PSA_AEAD_UPDATE_OUTPUT_SIZE  -&gt; PSA_AEAD_UPDATE_OUTPUT_SIZE_2_ARG
  - PSA_AEAD_FINISH_OUTPUT_SIZE  -&gt; PSA_AEAD_FINISH_OUTPUT_SIZE_1_ARG
  - PSA_AEAD_VERIFY_OUTPUT_SIZE  -&gt; PSA_AEAD_VERIFY_OUTPUT_SIZE_1_ARG
  * Implement one-shot cipher functions, psa_cipher_encrypt and
    psa_cipher_decrypt, according to the PSA Crypto API 1.0.0
    specification.
  Features:
  * Add mbedtls_rsa_rsassa_pss_sign_ext() function allowing to generate a
    signature with a specific salt length. This function allows to validate
    test cases provided in the NIST's CAVP test suite.
  * Added support for built-in driver keys through the PSA opaque crypto
    driver interface. Refer to the documentation of
    MBEDTLS_PSA_CRYPTO_BUILTIN_KEYS for more information.
  * Implement psa_sign_message() and psa_verify_message().
  * The new function mbedtls_mpi_random() generates a random value in a
    given range uniformly.
  * Implement psa_mac_compute() and psa_mac_verify() as defined in the
    PSA Cryptograpy API 1.0.0 specification.
  * MBEDTLS_ECP_MAX_BITS is now determined automatically from the configured
    curves and no longer needs to be configured explicitly to save RAM.
  Security
  * Fix a bias in the generation of finite-field Diffie-Hellman-Merkle (DHM)
    private keys and of blinding values for DHM and elliptic curves (ECP)
    computations.
  * Fix a potential side channel vulnerability in ECDSA ephemeral key generation.
    An adversary who is capable of very precise timing measurements could
    learn partial information about the leading bits of the nonce used for the
    signature, allowing the recovery of the private key after observing a
    large number of signature operations. This completes a partial fix in
    Mbed TLS 2.20.0.
  * It was possible to configure MBEDTLS_ECP_MAX_BITS to a value that is
    too small, leading to buffer overflows in ECC operations. Fail the build
    in such a case.
  * An adversary with access to precise enough information about memory
    accesses (typically, an untrusted operating system attacking a secure
    enclave) could recover an RSA private key after observing the victim
    performing a single private-key operation.
  * An adversary with access to precise enough timing information (typically, a
    co-located process) could recover a Curve25519 or Curve448 static ECDH key
    after inputting a chosen public key and observing the victim performing the
    corresponding private-key operation.
  Bugfix
  * Add printf function attributes to mbedtls_debug_print_msg to ensure we
    get printf format specifier warnings.
  * Fix premature fopen() call in mbedtls_entropy_write_seed_file which may
    lead to seed file corruption in the case where the path to the seed file is
    equal to MBEDTLS_PLATFORM_STD_NV_SEED_FILE.
  * PSA functions other than psa_open_key now return PSA_ERROR_INVALID_HANDLE
    rather than PSA_ERROR_DOES_NOT_EXIST for an invalid handle, bringing them
    in line with version 1.0.0 of the specification.
  * PSA functions creating a key now return PSA_ERROR_INVALID_ARGUMENT rather
    than PSA_ERROR_INVALID_HANDLE when the identifier specified for the key
    to create is not valid, bringing them in line with version 1.0.0 of the
    specification.
  * Fix some cases in the bignum module where the library constructed an
    unintended representation of the value 0 which was not processed
    correctly by some bignum operations. This could happen when
    mbedtls_mpi_read_string() was called on "-0", or when
    mbedtls_mpi_mul_mpi() and mbedtls_mpi_mul_int() was called with one of
    the arguments being negative and the other being 0.
  * Fix a bug in ECDSA that would cause it to fail when the hash is all-bits
    zero.
  * Fix a compilation error when MBEDTLS_ECP_RANDOMIZE_MXZ_ALT is
    defined.
  * Fix an incorrect error code when parsing a PKCS#8 private key.
  * In a TLS client, enforce the Diffie-Hellman minimum parameter size
    set with mbedtls_ssl_conf_dhm_min_bitlen() precisely. Before, the
    minimum size was rounded down to the nearest multiple of 8.
  * In library/net_sockets.c, _POSIX_C_SOURCE and _XOPEN_SOURCE are
    defined to specific values.  If the code is used in a context
    where these are already defined, this can result in a compilation
    error.  Instead, assume that if they are defined, the values will
    be adequate to build Mbed TLS.
  * The cipher suite TLS-RSA-WITH-CAMELLIA-256-GCM-SHA384 was not available
    when SHA-1 was disabled and was offered when SHA-1 was enabled but SHA-384
    was disabled. Fix the dependency.
  * Do not offer SHA384 cipher suites when SHA-384 is disabled.
  * With MBEDTLS_PSA_CRYPTO_C disabled, some functions were getting built
    nonetheless, resulting in undefined reference errors when building a
    shared library.
  * Fix test suite code on platforms where int32_t is not int, such as
    Arm Cortex-M.
  * Fix some issues affecting MBEDTLS_ARIA_ALT implementations: a misplaced
    directive in a header and a missing initialization in the self-test.
  * Fix a missing initialization in the Camellia self-test, affecting
    MBEDTLS_CAMELLIA_ALT implementations.
  * Restore the ability to configure PSA via Mbed TLS options to support RSA
    key pair operations but exclude RSA key generation. When MBEDTLS_GENPRIME
    is not defined PSA will no longer attempt to use mbedtls_rsa_gen_key().
  * Fix a regression introduced in 2.24.0 which broke (D)TLS CBC ciphersuites
    (when the encrypt-then-MAC extension is not in use) with some ALT
    implementations of the underlying hash (SHA-1, SHA-256, SHA-384), causing
    the affected side to wrongly reject valid messages.
  * Remove outdated check-config.h check that prevented implementing the
    timing module on Mbed OS.
  * Fix PSA_ALG_TLS12_PRF and PSA_ALG_TLS12_PSK_TO_MS being too permissive
    about missing inputs.
  * Fix a resource leak in a test suite with an alternative AES
    implementation.
  * Fix a crash in mbedtls_mpi_debug_mpi on a bignum having 0 limbs. This
    could notably be triggered by setting the TLS debug level to 3 or above
    and using a Montgomery curve for the key exchange.
  * psa_verify_hash() was relying on implementation-specific behavior of
    mbedtls_rsa_rsassa_pss_verify() and was causing failures in some _ALT
    implementations. This reliance is now removed.
  * Disallow inputs of length different from the corresponding hash when
    signing or verifying with PSA_ALG_RSA_PSS (The PSA Crypto API mandates
    that PSA_ALG_RSA_PSS uses the same hash throughout the algorithm.)
  * Fix a null pointer dereference when mbedtls_mpi_exp_mod() was called with
    A=0 represented with 0 limbs. Up to and including Mbed TLS 2.26, this bug
    could not be triggered by code that constructed A with one of the
    mbedtls_mpi_read_xxx functions (including in particular TLS code) since
    those always built an mpi object with at least one limb.
  * Fix mbedtls_mpi_gcd(G,A,B) when the value of B is zero. This had no
    effect on Mbed TLS's internal use of mbedtls_mpi_gcd(), but may affect
    applications that call mbedtls_mpi_gcd() directly.
  * The PSA API no longer allows the creation or destruction of keys with a
    read-only lifetime. The persistence level PSA_KEY_PERSISTENCE_READ_ONLY
    can now only be used as intended, for keys that cannot be modified through
    normal use of the API.
  * When MBEDTLS_PSA_CRYPTO_SPM is enabled, crypto_spe.h was not included
    in all the right places. Include it from crypto_platform.h, which is
    the natural place.
  * mbedtls_pk_sign() and mbedtls_pk_verify() and their extended and
    restartable variants now always honor the specified hash length if
    nonzero. Before, for RSA, hash_len was ignored in favor of the length of
    the specified hash algorithm.
  * Fix which alert is sent in some cases to conform to the
    applicable RFC: on an invalid Finished message value, an
    invalid max_fragment_length extension, or an
    unsupported extension used by the server.
  * Correct (change from 12 to 13 bytes) the value of the macro describing the
    maximum nonce length returned by psa_aead_generate_nonce().
  Changes
  * Add extra printf compiler warning flags to builds.
  * Fix memsan build false positive in x509_crt.c with Clang 11
  * Fix the setting of the read timeout in the DTLS sample programs.
  * Remove the AES sample application programs/aes/aescrypt2 which shows
    bad cryptographic practice.
  * Alternative implementations of CMAC may now opt to not support 3DES as a
    CMAC block cipher, and still pass the CMAC self test.
  * Remove configs/config-psa-crypto.h, which was identical to the default
    configuration except for having some extra cryptographic mechanisms
    enabled and for unintended differences. This configuration was primarily
    intended to demonstrate the PSA API, and lost most of its usefulness when
    MBEDTLS_PSA_CRYPTO_C became enabled by default.
  * When building the test suites with GNU make, invoke python3 or python, not
    python2, which is no longer supported upstream.
  * When using session cache based session resumption on the server,
    double-check that custom session cache implementations return
    sessions which are consistent with the negotiated ciphersuite
    and compression method.
  * Fix build failure on MinGW toolchain when __USE_MING_ANSI_STDIO is on.
    When that flag is on, standard GNU C printf format specifiers
    should be used.
  * Reduce the default value of MBEDTLS_ECP_WINDOW_SIZE. This reduces RAM usage
    during ECC operations at a negligible performance cost.
  * mbedtls_mpi_read_binary(), mbedtls_mpi_read_binary_le() and
    mbedtls_mpi_read_string() now construct an mbedtls_mpi object with 0 limbs
    when their input has length 0. Note that this is an implementation detail
    and can change at any time, so this change should be transparent, but it
    may result in mbedtls_mpi_write_binary() or mbedtls_mpi_write_string()
    now writing an empty string where it previously wrote one or more
    zero digits when operating from values constructed with an mpi_read
    function and some mpi operations.
  * Implicitly add PSA_KEY_USAGE_SIGN_MESSAGE key usage policy flag when
    PSA_KEY_USAGE_SIGN_HASH flag is set and PSA_KEY_USAGE_VERIFY_MESSAGE flag
    when PSA_KEY_USAGE_VERIFY_HASH flag is set. This usage flag extension
    is also applied when loading a key from storage.
  * Remove mbedtls-4237.patch upstream
  * Library soname bump to libmbedcrypto7</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1642075200">- Update to 2.28.0: (bsc#1193979, CVE-2021-45450)
  API changes
  * Some fields of mbedtls_ssl_session and mbedtls_ssl_config are in a
  different order. This only affects applications that define such
  structures directly or serialize them.
  Requirement changes
  * Sign-magnitude and one's complement representations for signed integers are
  not supported. Two's complement is the only supported representation.
  Removals
  * Remove config option MBEDTLS_TLS_DEFAULT_ALLOW_SHA1_IN_CERTIFICATES,
  which allowed SHA-1 in the default TLS configuration for certificate
  signing. It was intended to facilitate the transition in environments
  with SHA-1 certificates. SHA-1 is considered a weak message digest and
  its use constitutes a security risk.
  * Remove the partial support for running unit tests via Greentea on Mbed OS,
  which had been unmaintained since 2018.
  Features
  * The identifier of the CID TLS extension can be configured by defining
  MBEDTLS_TLS_EXT_CID at compile time.
  * Warn if errors from certain functions are ignored. This is currently
  supported on GCC-like compilers and on MSVC and can be configured through
  the macro MBEDTLS_CHECK_RETURN. The warnings are always enabled
  (where supported) for critical functions where ignoring the return
  value is almost always a bug. Enable the new configuration option
  MBEDTLS_CHECK_RETURN_WARNING to get warnings for other functions. This
  is currently implemented in the AES, DES and md modules, and will be
  extended to other modules in the future.
  * Add missing PSA macros declared by PSA Crypto API 1.0.0:
  PSA_ALG_IS_SIGN_HASH, PSA_ALG_NONE, PSA_HASH_BLOCK_LENGTH, PSA_KEY_ID_NULL.
  * Add new API mbedtls_ct_memcmp for constant time buffer comparison.
  * Add PSA API definition for ARIA.
  Security
  * Zeroize several intermediate variables used to calculate the expected
  value when verifying a MAC or AEAD tag. This hardens the library in
  case the value leaks through a memory disclosure vulnerability. For
  example, a memory disclosure vulnerability could have allowed a
  man-in-the-middle to inject fake ciphertext into a DTLS connection.
  * In psa_cipher_generate_iv() and psa_cipher_encrypt(), do not read back
  from the output buffer. This fixes a potential policy bypass or decryption
  oracle vulnerability if the output buffer is in memory that is shared with
  an untrusted application.
  * Fix a double-free that happened after mbedtls_ssl_set_session() or
  mbedtls_ssl_get_session() failed with MBEDTLS_ERR_SSL_ALLOC_FAILED
  (out of memory). After that, calling mbedtls_ssl_session_free()
  and mbedtls_ssl_free() would cause an internal session buffer to
  be free()'d twice.
  Bugfix
  * Stop using reserved identifiers as local variables. Fixes #4630.
  * The GNU makefiles invoke python3 in preference to python except on Windows.
  * The check was accidentally not performed when cross-compiling for Windows
  on Linux. Fix this. Fixes #4774.
  * Prevent divide by zero if either of PSA_CIPHER_ENCRYPT_OUTPUT_SIZE() or
  PSA_CIPHER_UPDATE_OUTPUT_SIZE() were called using an asymmetric key type.
  * Fix a parameter set but unused in psa_crypto_cipher.c. Fixes #4935.
  * Don't use the obsolete header path sys/fcntl.h in unit tests.
  These header files cause compilation errors in musl.
  Fixes #4969.
  * Fix missing constraints on x86_64 and aarch64 assembly code
  for bignum multiplication that broke some bignum operations with
  (at least) Clang 12.
  Fixes #4116, #4786, #4917, #4962.
  * Fix mbedtls_cipher_crypt: AES-ECB when MBEDTLS_USE_PSA_CRYPTO is enabled.
  * Failures of alternative implementations of AES or DES single-block
  functions enabled with MBEDTLS_AES_ENCRYPT_ALT, MBEDTLS_AES_DECRYPT_ALT,
  MBEDTLS_DES_CRYPT_ECB_ALT or MBEDTLS_DES3_CRYPT_ECB_ALT were ignored.
  This does not concern the implementation provided with Mbed TLS,
  where this function cannot fail, or full-module replacements with
  MBEDTLS_AES_ALT or MBEDTLS_DES_ALT. Reported by Armelle Duboc in #1092.
  * Some failures of HMAC operations were ignored. These failures could only
  happen with an alternative implementation of the underlying hash module.
  * Fix the error returned by psa_generate_key() for a public key. Fixes #4551.
  * Fix the build of sample programs when neither MBEDTLS_ERROR_C nor
  MBEDTLS_ERROR_STRERROR_DUMMY is enabled.
  * Fix PSA_ALG_RSA_PSS verification accepting an arbitrary salt length.
  This algorithm now accepts only the same salt length for verification
  that it produces when signing, as documented. Use the new algorithm
  PSA_ALG_RSA_PSS_ANY_SALT to accept any salt length. Fixes #4946.
  * The existing predicate macro name PSA_ALG_IS_HASH_AND_SIGN is now reserved
  for algorithm values that fully encode the hashing step, as per the PSA
  Crypto API specification. This excludes PSA_ALG_RSA_PKCS1V15_SIGN_RAW and
  PSA_ALG_ECDSA_ANY. The new predicate macro PSA_ALG_IS_SIGN_HASH covers
  all algorithms that can be used with psa_{sign,verify}_hash(), including
  these two.
  * Fix issue in Makefile on Linux with SHARED=1, that caused shared libraries
  not to list other shared libraries they need.
  * Fix a bug in mbedtls_gcm_starts() when the bit length of the iv
  exceeds 2^32. Fixes #4884.
  * Fix an uninitialized variable warning in test_suite_ssl.function with GCC
  version 11.
  * Fix the build when no SHA2 module is included. Fixes #4930.
  * Fix the build when only the bignum module is included. Fixes #4929.
  * Fix a potential invalid pointer dereference and infinite loop bugs in
  pkcs12 functions when the password is empty. Fix the documentation to
  better describe the inputs to these functions and their possible values.
  Fixes #5136.
  * The key usage flags PSA_KEY_USAGE_SIGN_MESSAGE now allows the MAC
  operations psa_mac_compute() and psa_mac_sign_setup().
  * The key usage flags PSA_KEY_USAGE_VERIFY_MESSAGE now allows the MAC
  operations psa_mac_verify() and psa_mac_verify_setup().
  Changes
  * Set config option MBEDTLS_TLS_DEFAULT_ALLOW_SHA1_IN_KEY_EXCHANGE to be
  disabled by default.
  * Improve the performance of base64 constant-flow code. The result is still
  slower than the original non-constant-flow implementation, but much faster
  than the previous constant-flow implementation. Fixes #4814.
  * Indicate in the error returned if the nonce length used with
  ChaCha20-Poly1305 is invalid, and not just unsupported.
  * The mbedcrypto library includes a new source code module constant_time.c,
  containing various functions meant to resist timing side channel attacks.
  * This module does not have a separate configuration option, and functions
  from this module will be included in the build as required. Currently
  most of the interface of this module is private and may change at any
  time.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1642420800">- Fix baselib.conf</changelog>
  <changelog author="Alexander Bergmann &lt;abergmann@suse.com&gt;" date="1671624000">- Fix potential heap buffer overread and overwrite in DTLS if
  MBEDTLS_SSL_DTLS_CONNECTION_ID is enabled and
  MBEDTLS_SSL_CID_IN_LEN_MAX &gt; 2 * MBEDTLS_SSL_CID_OUT_LEN_MAX.
  (bsc#1206576, CVE-2022-46393).
  Add: mbedtls-CVE-2022-46393.patch</changelog>
</package>
<package pkgid="1ea7739b79532ec47a3d89f7d126caa88b4d08e0f77268011300cf2baad7c915" name="libmodbus" arch="src">
  <version epoch="0" ver="3.1.6" rel="bp154.2.3.1"/>
  <changelog author="sbrabec@suse.com" date="1492689600">- New package, version 3.1.4 (development, but stable).</changelog>
  <changelog author="sbrabec@suse.com" date="1565179200">- Update to version 3.1.6:
  - API extensions and minor API changes
  - Fix VD-1301 and VD-1302 vulnerabilities.
  - Bug fixes.
  * For more see NEWS.</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1667908800">- Added libmodbus-CVE-2022-0367.patch
  * [CVE-2022-0367]
  * bsc#1195124
  * Fixes heap-based Buffer Overflow in modbus_reply</changelog>
</package>
<package pkgid="f6115ca62c1db51ab2597ae913518a5fe33683b59938048774d68eb4825a349f" name="libmodbus-devel" arch="aarch64">
  <version epoch="0" ver="3.1.6" rel="bp154.2.3.1"/>
  <changelog author="sbrabec@suse.com" date="1492689600">- New package, version 3.1.4 (development, but stable).</changelog>
  <changelog author="sbrabec@suse.com" date="1565179200">- Update to version 3.1.6:
  - API extensions and minor API changes
  - Fix VD-1301 and VD-1302 vulnerabilities.
  - Bug fixes.
  * For more see NEWS.</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1667908800">- Added libmodbus-CVE-2022-0367.patch
  * [CVE-2022-0367]
  * bsc#1195124
  * Fixes heap-based Buffer Overflow in modbus_reply</changelog>
</package>
<package pkgid="6a4d7f97f70f63f0a15e2e8e0ebaca9537f345a5b08a1b06c629669de6137e5e" name="libmodbus-devel" arch="i586">
  <version epoch="0" ver="3.1.6" rel="bp154.2.3.1"/>
  <changelog author="sbrabec@suse.com" date="1492689600">- New package, version 3.1.4 (development, but stable).</changelog>
  <changelog author="sbrabec@suse.com" date="1565179200">- Update to version 3.1.6:
  - API extensions and minor API changes
  - Fix VD-1301 and VD-1302 vulnerabilities.
  - Bug fixes.
  * For more see NEWS.</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1667908800">- Added libmodbus-CVE-2022-0367.patch
  * [CVE-2022-0367]
  * bsc#1195124
  * Fixes heap-based Buffer Overflow in modbus_reply</changelog>
</package>
<package pkgid="51f6f8384fdd0c2a44e05b9602716c5d81817e5c9c848c15851c6225e0644e38" name="libmodbus-devel" arch="ppc64le">
  <version epoch="0" ver="3.1.6" rel="bp154.2.3.1"/>
  <changelog author="sbrabec@suse.com" date="1492689600">- New package, version 3.1.4 (development, but stable).</changelog>
  <changelog author="sbrabec@suse.com" date="1565179200">- Update to version 3.1.6:
  - API extensions and minor API changes
  - Fix VD-1301 and VD-1302 vulnerabilities.
  - Bug fixes.
  * For more see NEWS.</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1667908800">- Added libmodbus-CVE-2022-0367.patch
  * [CVE-2022-0367]
  * bsc#1195124
  * Fixes heap-based Buffer Overflow in modbus_reply</changelog>
</package>
<package pkgid="047accfef3af25243547db23422f85aead5fe64ec91639a9bb846eaaf66851fa" name="libmodbus-devel" arch="s390x">
  <version epoch="0" ver="3.1.6" rel="bp154.2.3.1"/>
  <changelog author="sbrabec@suse.com" date="1492689600">- New package, version 3.1.4 (development, but stable).</changelog>
  <changelog author="sbrabec@suse.com" date="1565179200">- Update to version 3.1.6:
  - API extensions and minor API changes
  - Fix VD-1301 and VD-1302 vulnerabilities.
  - Bug fixes.
  * For more see NEWS.</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1667908800">- Added libmodbus-CVE-2022-0367.patch
  * [CVE-2022-0367]
  * bsc#1195124
  * Fixes heap-based Buffer Overflow in modbus_reply</changelog>
</package>
<package pkgid="b8046904fdf9c7313fef9e0c2c2a3e1c9e6ab81ed455c8e2ffbd630d354c3006" name="libmodbus-devel" arch="x86_64">
  <version epoch="0" ver="3.1.6" rel="bp154.2.3.1"/>
  <changelog author="sbrabec@suse.com" date="1492689600">- New package, version 3.1.4 (development, but stable).</changelog>
  <changelog author="sbrabec@suse.com" date="1565179200">- Update to version 3.1.6:
  - API extensions and minor API changes
  - Fix VD-1301 and VD-1302 vulnerabilities.
  - Bug fixes.
  * For more see NEWS.</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1667908800">- Added libmodbus-CVE-2022-0367.patch
  * [CVE-2022-0367]
  * bsc#1195124
  * Fixes heap-based Buffer Overflow in modbus_reply</changelog>
</package>
<package pkgid="212ef13078e2dea68bd8b90f27c69675e9a426597f2f3c1e573511bee34aa542" name="libmodbus5" arch="aarch64">
  <version epoch="0" ver="3.1.6" rel="bp154.2.3.1"/>
  <changelog author="sbrabec@suse.com" date="1492689600">- New package, version 3.1.4 (development, but stable).</changelog>
  <changelog author="sbrabec@suse.com" date="1565179200">- Update to version 3.1.6:
  - API extensions and minor API changes
  - Fix VD-1301 and VD-1302 vulnerabilities.
  - Bug fixes.
  * For more see NEWS.</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1667908800">- Added libmodbus-CVE-2022-0367.patch
  * [CVE-2022-0367]
  * bsc#1195124
  * Fixes heap-based Buffer Overflow in modbus_reply</changelog>
</package>
<package pkgid="3737d55f50286bf8925707582d47d8eb66aaa87f26f0f2e64902f3d7e1801abb" name="libmodbus5" arch="i586">
  <version epoch="0" ver="3.1.6" rel="bp154.2.3.1"/>
  <changelog author="sbrabec@suse.com" date="1492689600">- New package, version 3.1.4 (development, but stable).</changelog>
  <changelog author="sbrabec@suse.com" date="1565179200">- Update to version 3.1.6:
  - API extensions and minor API changes
  - Fix VD-1301 and VD-1302 vulnerabilities.
  - Bug fixes.
  * For more see NEWS.</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1667908800">- Added libmodbus-CVE-2022-0367.patch
  * [CVE-2022-0367]
  * bsc#1195124
  * Fixes heap-based Buffer Overflow in modbus_reply</changelog>
</package>
<package pkgid="b59e4c4ef6246c740fc4658c0cf6935ad7dc5879d17e70f60861f17519a3a3e9" name="libmodbus5" arch="ppc64le">
  <version epoch="0" ver="3.1.6" rel="bp154.2.3.1"/>
  <changelog author="sbrabec@suse.com" date="1492689600">- New package, version 3.1.4 (development, but stable).</changelog>
  <changelog author="sbrabec@suse.com" date="1565179200">- Update to version 3.1.6:
  - API extensions and minor API changes
  - Fix VD-1301 and VD-1302 vulnerabilities.
  - Bug fixes.
  * For more see NEWS.</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1667908800">- Added libmodbus-CVE-2022-0367.patch
  * [CVE-2022-0367]
  * bsc#1195124
  * Fixes heap-based Buffer Overflow in modbus_reply</changelog>
</package>
<package pkgid="00acbb796b921f67ff2cfaa652d4dc2c1fae2f75dfac0a8643d43e2f07a16bdc" name="libmodbus5" arch="s390x">
  <version epoch="0" ver="3.1.6" rel="bp154.2.3.1"/>
  <changelog author="sbrabec@suse.com" date="1492689600">- New package, version 3.1.4 (development, but stable).</changelog>
  <changelog author="sbrabec@suse.com" date="1565179200">- Update to version 3.1.6:
  - API extensions and minor API changes
  - Fix VD-1301 and VD-1302 vulnerabilities.
  - Bug fixes.
  * For more see NEWS.</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1667908800">- Added libmodbus-CVE-2022-0367.patch
  * [CVE-2022-0367]
  * bsc#1195124
  * Fixes heap-based Buffer Overflow in modbus_reply</changelog>
</package>
<package pkgid="a7a60af8ddc2e7ddf46f276174328ed867de9ce28249e7785c8701bf8164bc7f" name="libmodbus5" arch="x86_64">
  <version epoch="0" ver="3.1.6" rel="bp154.2.3.1"/>
  <changelog author="sbrabec@suse.com" date="1492689600">- New package, version 3.1.4 (development, but stable).</changelog>
  <changelog author="sbrabec@suse.com" date="1565179200">- Update to version 3.1.6:
  - API extensions and minor API changes
  - Fix VD-1301 and VD-1302 vulnerabilities.
  - Bug fixes.
  * For more see NEWS.</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1667908800">- Added libmodbus-CVE-2022-0367.patch
  * [CVE-2022-0367]
  * bsc#1195124
  * Fixes heap-based Buffer Overflow in modbus_reply</changelog>
</package>
<package pkgid="1739d5aa9218c735cd44058af328e90b22ade0fd76ba0eb5026e2ad945ece82e" name="libosip2-12" arch="aarch64">
  <version epoch="0" ver="5.2.1" rel="bp154.2.3.1"/>
  <changelog author="fisiu@opensuse.org" date="1401019200">- Update to 4.1.0:
  * fix sdp re-allocation
  * increase max length size
  * osip_trace_initialize returns 0 if log are compiled.
  * timer e and timer g will use #define DEFAULT_T2 instead of 4000.
  * handle additionnal possible malloc failure.
  * fix compatibility with old UA for INVITE retransmission.
  * fix osip_sem_destroy leak on apple.
  * accept lowercase sip/2.0.
- Rebase libosip2-3.5.0.dif and rename to libosip2-4.1.0.patch.
- Rebase libosip2-3.5.0-pthread.patch and rename to libosip2-4.1.0-pthread.patch.</changelog>
  <changelog author="ro@suse.de" date="1492689600">- Update to 5.0.0:
  * STRUCTURE change: additionnal parameter for "struct osip_srv_entry" used for failover in eXosip2.
  * fix overflow: sr #109133: Heap buffer overflow in utility function *osip_clrncpy*
  * fix overflow: sr #109132: Heap buffer overflow in *osip_body_to_str*
  * fix overflow: sr #109131: Heap buffer overflow in `_osip_message_to_str`
  * simplify usage of timercmp/timerisset/timerclear
  * optimize list search: use iterator
  * improve/update autotools (./configure and options, Makefile.am, ax_thread.m4...)
  * verify a URI scheme only contains allowed char
  * improve make check (test unit) to make it clear about the results expected.
  * fix a possible buffer overflow of 1 byte in sdp_message_to_str (size=sdp allocated size)
  * fix cseq check in order to stop retransmission of 200ok
  * update to reject negative value in port number
  * add support for ntlm authentication in parser
  * include application_data when cloning sip message
  * fix to allow correct parsing of quoted string in from/to/contact/...
  * add authorizations and proxy_authorizations into ACK for 3xx, 4xx, 5xx, and 6xx (if answer was not 401/407)
  * additionnal check for cseq number for matching incoming ack restransmission
  * patch to transmit ack for OSIP_ICT_ACK_SENT event
  * improve management of body length // fix a bug when initial value of body is \0.
  * increase timer E as soon as we receive 1xx for NICT.
  * update all reasons according to RFC.
  * add some reason code from rfc4412, rfc3261 and rfc6086.
  * parse addr spec with LAQUOT and RAQUOT in generic parameters.
  * avoid issue with comma in userinfo of URI which may appear for several headers such as Contact.
  * do not use multiple header method for t, f, i, r, refer-to, b, referred-by headers.
  * allow faster connection with non blocking reliable sockets.
  * improve android time compensation.
- rename libosip2-4.1.0.patch to libosip2-5.0.0.patch
- drop libosip2-4.1.0-pthread.patch, obsolete</changelog>
  <changelog author="ro@suse.de" date="1492689601">- fix a set of buffer overflows:
  - add patch for (bnc#1034570, CVE-2017-7853)
    SIP_body_len_underflow.patch
  - add patch for (bnc#1034571, CVE-2016-10326)
    0001-Patch-2.1-Fixes-heap-buffer-overflow-in-osip_body_to_s.patch
  - add patch for (bnc#1034572, CVE-2016-10325)
    0001-Patch-1-Fixes-heap-buffer-overflow-in-_osip_message_to_str.patch
  - add patch for (bnc#1034574, CVE-2016-10324)
    0001-Patch-3-Fixes-heap-buffer-overflow-in-osip_clrncpy.patch</changelog>
  <changelog author="ro@suse.de" date="1492689602">- drop patch already in 5.0.0
  0001-Patch-2.1-Fixes-heap-buffer-overflow-in-osip_body_to_s.patch
- drop patch already in 5.0.0
  0001-Patch-1-Fixes-heap-buffer-overflow-in-_osip_message_to_str.patch
- drop patch already in 5.0.0
  0001-Patch-3-Fixes-heap-buffer-overflow-in-osip_clrncpy.patch</changelog>
  <changelog author="David Sugar &lt;tychosoft@gmail.com&gt;" date="1580904000">- Update to 5.1.0
  * See package, very many changes since prior 5.0.0 release.
- drop patch already in 5.1.0
  SIP_body_len_underflow.patch
- make package so library naming compliant with opensuse library versioning
- pre-requisite for updating to libeXosip2 5.1.0</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597579200">- update to 5.1.1:
  * fix vulnerability report: Authentication-Info or Proxy-Authentication-Info are affected by a buffer overflow when building sip messages.
  * fix vulnerability report: when boundary only contains one quote, strncpy will use the unsigned value of -1 as size parameter.
  * fix: avoid several memory leaks detected in the SDP parser upon invalid SDP formats.
  * fix bug #57467: infinite loop in sdp_message_a_attribute_del_at_index
  * fix bug #56071: Heap-buffer-overflow in osip_util_replace_all_lws function in osip_message_parse.c
  * fix to reject any non compliant answer with missing version digits.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1598702400">- Drop old specfile constructs and excess Provides lines.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1610366400">- update to 5.2.0:
  * use localtime_r when __USE_POSIX is available
  * sync versions with libexosip
- use https for urls</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1622030400">- update to 5.2.1:
  * add OSIP_RETRY_LIMIT which may be useful to exosip
  * add osip_timersub macro
  * fix validate that the API are used with the expected/required
    leading char
  * fix memory out-of-bound access in broken uncompliant Via header
  * fix k= within media being rejected since 5.1.1 [wrong check]
- package license text
- add upstream signing key and validate source signature
- run tests
- drop libosip2-5.0.0.patch, not required</changelog>
  <changelog author="ro@suse.de" date="1665576000">- add patch libosip2-overflow-CVE-2022-41550.patch
  to fix a integer overflow in the parser
  (bsc#1204225, CVE-2022-41550)</changelog>
</package>
<package pkgid="716efeddd097ddaa5edfd3f32a5e14c40a404304a40f6cffced5c4ad89c75b23" name="libosip2-12" arch="i586">
  <version epoch="0" ver="5.2.1" rel="bp154.2.3.1"/>
  <changelog author="fisiu@opensuse.org" date="1401019200">- Update to 4.1.0:
  * fix sdp re-allocation
  * increase max length size
  * osip_trace_initialize returns 0 if log are compiled.
  * timer e and timer g will use #define DEFAULT_T2 instead of 4000.
  * handle additionnal possible malloc failure.
  * fix compatibility with old UA for INVITE retransmission.
  * fix osip_sem_destroy leak on apple.
  * accept lowercase sip/2.0.
- Rebase libosip2-3.5.0.dif and rename to libosip2-4.1.0.patch.
- Rebase libosip2-3.5.0-pthread.patch and rename to libosip2-4.1.0-pthread.patch.</changelog>
  <changelog author="ro@suse.de" date="1492689600">- Update to 5.0.0:
  * STRUCTURE change: additionnal parameter for "struct osip_srv_entry" used for failover in eXosip2.
  * fix overflow: sr #109133: Heap buffer overflow in utility function *osip_clrncpy*
  * fix overflow: sr #109132: Heap buffer overflow in *osip_body_to_str*
  * fix overflow: sr #109131: Heap buffer overflow in `_osip_message_to_str`
  * simplify usage of timercmp/timerisset/timerclear
  * optimize list search: use iterator
  * improve/update autotools (./configure and options, Makefile.am, ax_thread.m4...)
  * verify a URI scheme only contains allowed char
  * improve make check (test unit) to make it clear about the results expected.
  * fix a possible buffer overflow of 1 byte in sdp_message_to_str (size=sdp allocated size)
  * fix cseq check in order to stop retransmission of 200ok
  * update to reject negative value in port number
  * add support for ntlm authentication in parser
  * include application_data when cloning sip message
  * fix to allow correct parsing of quoted string in from/to/contact/...
  * add authorizations and proxy_authorizations into ACK for 3xx, 4xx, 5xx, and 6xx (if answer was not 401/407)
  * additionnal check for cseq number for matching incoming ack restransmission
  * patch to transmit ack for OSIP_ICT_ACK_SENT event
  * improve management of body length // fix a bug when initial value of body is \0.
  * increase timer E as soon as we receive 1xx for NICT.
  * update all reasons according to RFC.
  * add some reason code from rfc4412, rfc3261 and rfc6086.
  * parse addr spec with LAQUOT and RAQUOT in generic parameters.
  * avoid issue with comma in userinfo of URI which may appear for several headers such as Contact.
  * do not use multiple header method for t, f, i, r, refer-to, b, referred-by headers.
  * allow faster connection with non blocking reliable sockets.
  * improve android time compensation.
- rename libosip2-4.1.0.patch to libosip2-5.0.0.patch
- drop libosip2-4.1.0-pthread.patch, obsolete</changelog>
  <changelog author="ro@suse.de" date="1492689601">- fix a set of buffer overflows:
  - add patch for (bnc#1034570, CVE-2017-7853)
    SIP_body_len_underflow.patch
  - add patch for (bnc#1034571, CVE-2016-10326)
    0001-Patch-2.1-Fixes-heap-buffer-overflow-in-osip_body_to_s.patch
  - add patch for (bnc#1034572, CVE-2016-10325)
    0001-Patch-1-Fixes-heap-buffer-overflow-in-_osip_message_to_str.patch
  - add patch for (bnc#1034574, CVE-2016-10324)
    0001-Patch-3-Fixes-heap-buffer-overflow-in-osip_clrncpy.patch</changelog>
  <changelog author="ro@suse.de" date="1492689602">- drop patch already in 5.0.0
  0001-Patch-2.1-Fixes-heap-buffer-overflow-in-osip_body_to_s.patch
- drop patch already in 5.0.0
  0001-Patch-1-Fixes-heap-buffer-overflow-in-_osip_message_to_str.patch
- drop patch already in 5.0.0
  0001-Patch-3-Fixes-heap-buffer-overflow-in-osip_clrncpy.patch</changelog>
  <changelog author="David Sugar &lt;tychosoft@gmail.com&gt;" date="1580904000">- Update to 5.1.0
  * See package, very many changes since prior 5.0.0 release.
- drop patch already in 5.1.0
  SIP_body_len_underflow.patch
- make package so library naming compliant with opensuse library versioning
- pre-requisite for updating to libeXosip2 5.1.0</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597579200">- update to 5.1.1:
  * fix vulnerability report: Authentication-Info or Proxy-Authentication-Info are affected by a buffer overflow when building sip messages.
  * fix vulnerability report: when boundary only contains one quote, strncpy will use the unsigned value of -1 as size parameter.
  * fix: avoid several memory leaks detected in the SDP parser upon invalid SDP formats.
  * fix bug #57467: infinite loop in sdp_message_a_attribute_del_at_index
  * fix bug #56071: Heap-buffer-overflow in osip_util_replace_all_lws function in osip_message_parse.c
  * fix to reject any non compliant answer with missing version digits.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1598702400">- Drop old specfile constructs and excess Provides lines.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1610366400">- update to 5.2.0:
  * use localtime_r when __USE_POSIX is available
  * sync versions with libexosip
- use https for urls</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1622030400">- update to 5.2.1:
  * add OSIP_RETRY_LIMIT which may be useful to exosip
  * add osip_timersub macro
  * fix validate that the API are used with the expected/required
    leading char
  * fix memory out-of-bound access in broken uncompliant Via header
  * fix k= within media being rejected since 5.1.1 [wrong check]
- package license text
- add upstream signing key and validate source signature
- run tests
- drop libosip2-5.0.0.patch, not required</changelog>
  <changelog author="ro@suse.de" date="1665576000">- add patch libosip2-overflow-CVE-2022-41550.patch
  to fix a integer overflow in the parser
  (bsc#1204225, CVE-2022-41550)</changelog>
</package>
<package pkgid="71ff5d2d269ffa38545f6c1ee8d24d5f00d37423c976d936dd62552549f32ddc" name="libosip2-12" arch="ppc64le">
  <version epoch="0" ver="5.2.1" rel="bp154.2.3.1"/>
  <changelog author="fisiu@opensuse.org" date="1401019200">- Update to 4.1.0:
  * fix sdp re-allocation
  * increase max length size
  * osip_trace_initialize returns 0 if log are compiled.
  * timer e and timer g will use #define DEFAULT_T2 instead of 4000.
  * handle additionnal possible malloc failure.
  * fix compatibility with old UA for INVITE retransmission.
  * fix osip_sem_destroy leak on apple.
  * accept lowercase sip/2.0.
- Rebase libosip2-3.5.0.dif and rename to libosip2-4.1.0.patch.
- Rebase libosip2-3.5.0-pthread.patch and rename to libosip2-4.1.0-pthread.patch.</changelog>
  <changelog author="ro@suse.de" date="1492689600">- Update to 5.0.0:
  * STRUCTURE change: additionnal parameter for "struct osip_srv_entry" used for failover in eXosip2.
  * fix overflow: sr #109133: Heap buffer overflow in utility function *osip_clrncpy*
  * fix overflow: sr #109132: Heap buffer overflow in *osip_body_to_str*
  * fix overflow: sr #109131: Heap buffer overflow in `_osip_message_to_str`
  * simplify usage of timercmp/timerisset/timerclear
  * optimize list search: use iterator
  * improve/update autotools (./configure and options, Makefile.am, ax_thread.m4...)
  * verify a URI scheme only contains allowed char
  * improve make check (test unit) to make it clear about the results expected.
  * fix a possible buffer overflow of 1 byte in sdp_message_to_str (size=sdp allocated size)
  * fix cseq check in order to stop retransmission of 200ok
  * update to reject negative value in port number
  * add support for ntlm authentication in parser
  * include application_data when cloning sip message
  * fix to allow correct parsing of quoted string in from/to/contact/...
  * add authorizations and proxy_authorizations into ACK for 3xx, 4xx, 5xx, and 6xx (if answer was not 401/407)
  * additionnal check for cseq number for matching incoming ack restransmission
  * patch to transmit ack for OSIP_ICT_ACK_SENT event
  * improve management of body length // fix a bug when initial value of body is \0.
  * increase timer E as soon as we receive 1xx for NICT.
  * update all reasons according to RFC.
  * add some reason code from rfc4412, rfc3261 and rfc6086.
  * parse addr spec with LAQUOT and RAQUOT in generic parameters.
  * avoid issue with comma in userinfo of URI which may appear for several headers such as Contact.
  * do not use multiple header method for t, f, i, r, refer-to, b, referred-by headers.
  * allow faster connection with non blocking reliable sockets.
  * improve android time compensation.
- rename libosip2-4.1.0.patch to libosip2-5.0.0.patch
- drop libosip2-4.1.0-pthread.patch, obsolete</changelog>
  <changelog author="ro@suse.de" date="1492689601">- fix a set of buffer overflows:
  - add patch for (bnc#1034570, CVE-2017-7853)
    SIP_body_len_underflow.patch
  - add patch for (bnc#1034571, CVE-2016-10326)
    0001-Patch-2.1-Fixes-heap-buffer-overflow-in-osip_body_to_s.patch
  - add patch for (bnc#1034572, CVE-2016-10325)
    0001-Patch-1-Fixes-heap-buffer-overflow-in-_osip_message_to_str.patch
  - add patch for (bnc#1034574, CVE-2016-10324)
    0001-Patch-3-Fixes-heap-buffer-overflow-in-osip_clrncpy.patch</changelog>
  <changelog author="ro@suse.de" date="1492689602">- drop patch already in 5.0.0
  0001-Patch-2.1-Fixes-heap-buffer-overflow-in-osip_body_to_s.patch
- drop patch already in 5.0.0
  0001-Patch-1-Fixes-heap-buffer-overflow-in-_osip_message_to_str.patch
- drop patch already in 5.0.0
  0001-Patch-3-Fixes-heap-buffer-overflow-in-osip_clrncpy.patch</changelog>
  <changelog author="David Sugar &lt;tychosoft@gmail.com&gt;" date="1580904000">- Update to 5.1.0
  * See package, very many changes since prior 5.0.0 release.
- drop patch already in 5.1.0
  SIP_body_len_underflow.patch
- make package so library naming compliant with opensuse library versioning
- pre-requisite for updating to libeXosip2 5.1.0</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597579200">- update to 5.1.1:
  * fix vulnerability report: Authentication-Info or Proxy-Authentication-Info are affected by a buffer overflow when building sip messages.
  * fix vulnerability report: when boundary only contains one quote, strncpy will use the unsigned value of -1 as size parameter.
  * fix: avoid several memory leaks detected in the SDP parser upon invalid SDP formats.
  * fix bug #57467: infinite loop in sdp_message_a_attribute_del_at_index
  * fix bug #56071: Heap-buffer-overflow in osip_util_replace_all_lws function in osip_message_parse.c
  * fix to reject any non compliant answer with missing version digits.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1598702400">- Drop old specfile constructs and excess Provides lines.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1610366400">- update to 5.2.0:
  * use localtime_r when __USE_POSIX is available
  * sync versions with libexosip
- use https for urls</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1622030400">- update to 5.2.1:
  * add OSIP_RETRY_LIMIT which may be useful to exosip
  * add osip_timersub macro
  * fix validate that the API are used with the expected/required
    leading char
  * fix memory out-of-bound access in broken uncompliant Via header
  * fix k= within media being rejected since 5.1.1 [wrong check]
- package license text
- add upstream signing key and validate source signature
- run tests
- drop libosip2-5.0.0.patch, not required</changelog>
  <changelog author="ro@suse.de" date="1665576000">- add patch libosip2-overflow-CVE-2022-41550.patch
  to fix a integer overflow in the parser
  (bsc#1204225, CVE-2022-41550)</changelog>
</package>
<package pkgid="809ad03592e3784dc295ad9bfdadbb360c121d9d5dadd6d81063322f51013d9d" name="libosip2-12" arch="s390x">
  <version epoch="0" ver="5.2.1" rel="bp154.2.3.1"/>
  <changelog author="fisiu@opensuse.org" date="1401019200">- Update to 4.1.0:
  * fix sdp re-allocation
  * increase max length size
  * osip_trace_initialize returns 0 if log are compiled.
  * timer e and timer g will use #define DEFAULT_T2 instead of 4000.
  * handle additionnal possible malloc failure.
  * fix compatibility with old UA for INVITE retransmission.
  * fix osip_sem_destroy leak on apple.
  * accept lowercase sip/2.0.
- Rebase libosip2-3.5.0.dif and rename to libosip2-4.1.0.patch.
- Rebase libosip2-3.5.0-pthread.patch and rename to libosip2-4.1.0-pthread.patch.</changelog>
  <changelog author="ro@suse.de" date="1492689600">- Update to 5.0.0:
  * STRUCTURE change: additionnal parameter for "struct osip_srv_entry" used for failover in eXosip2.
  * fix overflow: sr #109133: Heap buffer overflow in utility function *osip_clrncpy*
  * fix overflow: sr #109132: Heap buffer overflow in *osip_body_to_str*
  * fix overflow: sr #109131: Heap buffer overflow in `_osip_message_to_str`
  * simplify usage of timercmp/timerisset/timerclear
  * optimize list search: use iterator
  * improve/update autotools (./configure and options, Makefile.am, ax_thread.m4...)
  * verify a URI scheme only contains allowed char
  * improve make check (test unit) to make it clear about the results expected.
  * fix a possible buffer overflow of 1 byte in sdp_message_to_str (size=sdp allocated size)
  * fix cseq check in order to stop retransmission of 200ok
  * update to reject negative value in port number
  * add support for ntlm authentication in parser
  * include application_data when cloning sip message
  * fix to allow correct parsing of quoted string in from/to/contact/...
  * add authorizations and proxy_authorizations into ACK for 3xx, 4xx, 5xx, and 6xx (if answer was not 401/407)
  * additionnal check for cseq number for matching incoming ack restransmission
  * patch to transmit ack for OSIP_ICT_ACK_SENT event
  * improve management of body length // fix a bug when initial value of body is \0.
  * increase timer E as soon as we receive 1xx for NICT.
  * update all reasons according to RFC.
  * add some reason code from rfc4412, rfc3261 and rfc6086.
  * parse addr spec with LAQUOT and RAQUOT in generic parameters.
  * avoid issue with comma in userinfo of URI which may appear for several headers such as Contact.
  * do not use multiple header method for t, f, i, r, refer-to, b, referred-by headers.
  * allow faster connection with non blocking reliable sockets.
  * improve android time compensation.
- rename libosip2-4.1.0.patch to libosip2-5.0.0.patch
- drop libosip2-4.1.0-pthread.patch, obsolete</changelog>
  <changelog author="ro@suse.de" date="1492689601">- fix a set of buffer overflows:
  - add patch for (bnc#1034570, CVE-2017-7853)
    SIP_body_len_underflow.patch
  - add patch for (bnc#1034571, CVE-2016-10326)
    0001-Patch-2.1-Fixes-heap-buffer-overflow-in-osip_body_to_s.patch
  - add patch for (bnc#1034572, CVE-2016-10325)
    0001-Patch-1-Fixes-heap-buffer-overflow-in-_osip_message_to_str.patch
  - add patch for (bnc#1034574, CVE-2016-10324)
    0001-Patch-3-Fixes-heap-buffer-overflow-in-osip_clrncpy.patch</changelog>
  <changelog author="ro@suse.de" date="1492689602">- drop patch already in 5.0.0
  0001-Patch-2.1-Fixes-heap-buffer-overflow-in-osip_body_to_s.patch
- drop patch already in 5.0.0
  0001-Patch-1-Fixes-heap-buffer-overflow-in-_osip_message_to_str.patch
- drop patch already in 5.0.0
  0001-Patch-3-Fixes-heap-buffer-overflow-in-osip_clrncpy.patch</changelog>
  <changelog author="David Sugar &lt;tychosoft@gmail.com&gt;" date="1580904000">- Update to 5.1.0
  * See package, very many changes since prior 5.0.0 release.
- drop patch already in 5.1.0
  SIP_body_len_underflow.patch
- make package so library naming compliant with opensuse library versioning
- pre-requisite for updating to libeXosip2 5.1.0</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597579200">- update to 5.1.1:
  * fix vulnerability report: Authentication-Info or Proxy-Authentication-Info are affected by a buffer overflow when building sip messages.
  * fix vulnerability report: when boundary only contains one quote, strncpy will use the unsigned value of -1 as size parameter.
  * fix: avoid several memory leaks detected in the SDP parser upon invalid SDP formats.
  * fix bug #57467: infinite loop in sdp_message_a_attribute_del_at_index
  * fix bug #56071: Heap-buffer-overflow in osip_util_replace_all_lws function in osip_message_parse.c
  * fix to reject any non compliant answer with missing version digits.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1598702400">- Drop old specfile constructs and excess Provides lines.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1610366400">- update to 5.2.0:
  * use localtime_r when __USE_POSIX is available
  * sync versions with libexosip
- use https for urls</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1622030400">- update to 5.2.1:
  * add OSIP_RETRY_LIMIT which may be useful to exosip
  * add osip_timersub macro
  * fix validate that the API are used with the expected/required
    leading char
  * fix memory out-of-bound access in broken uncompliant Via header
  * fix k= within media being rejected since 5.1.1 [wrong check]
- package license text
- add upstream signing key and validate source signature
- run tests
- drop libosip2-5.0.0.patch, not required</changelog>
  <changelog author="ro@suse.de" date="1665576000">- add patch libosip2-overflow-CVE-2022-41550.patch
  to fix a integer overflow in the parser
  (bsc#1204225, CVE-2022-41550)</changelog>
</package>
<package pkgid="6ae7f44368ab4ee3cb15df34e6676750c99febd11b4d719cf1e73e31103f9a8d" name="libosip2-12" arch="x86_64">
  <version epoch="0" ver="5.2.1" rel="bp154.2.3.1"/>
  <changelog author="fisiu@opensuse.org" date="1401019200">- Update to 4.1.0:
  * fix sdp re-allocation
  * increase max length size
  * osip_trace_initialize returns 0 if log are compiled.
  * timer e and timer g will use #define DEFAULT_T2 instead of 4000.
  * handle additionnal possible malloc failure.
  * fix compatibility with old UA for INVITE retransmission.
  * fix osip_sem_destroy leak on apple.
  * accept lowercase sip/2.0.
- Rebase libosip2-3.5.0.dif and rename to libosip2-4.1.0.patch.
- Rebase libosip2-3.5.0-pthread.patch and rename to libosip2-4.1.0-pthread.patch.</changelog>
  <changelog author="ro@suse.de" date="1492689600">- Update to 5.0.0:
  * STRUCTURE change: additionnal parameter for "struct osip_srv_entry" used for failover in eXosip2.
  * fix overflow: sr #109133: Heap buffer overflow in utility function *osip_clrncpy*
  * fix overflow: sr #109132: Heap buffer overflow in *osip_body_to_str*
  * fix overflow: sr #109131: Heap buffer overflow in `_osip_message_to_str`
  * simplify usage of timercmp/timerisset/timerclear
  * optimize list search: use iterator
  * improve/update autotools (./configure and options, Makefile.am, ax_thread.m4...)
  * verify a URI scheme only contains allowed char
  * improve make check (test unit) to make it clear about the results expected.
  * fix a possible buffer overflow of 1 byte in sdp_message_to_str (size=sdp allocated size)
  * fix cseq check in order to stop retransmission of 200ok
  * update to reject negative value in port number
  * add support for ntlm authentication in parser
  * include application_data when cloning sip message
  * fix to allow correct parsing of quoted string in from/to/contact/...
  * add authorizations and proxy_authorizations into ACK for 3xx, 4xx, 5xx, and 6xx (if answer was not 401/407)
  * additionnal check for cseq number for matching incoming ack restransmission
  * patch to transmit ack for OSIP_ICT_ACK_SENT event
  * improve management of body length // fix a bug when initial value of body is \0.
  * increase timer E as soon as we receive 1xx for NICT.
  * update all reasons according to RFC.
  * add some reason code from rfc4412, rfc3261 and rfc6086.
  * parse addr spec with LAQUOT and RAQUOT in generic parameters.
  * avoid issue with comma in userinfo of URI which may appear for several headers such as Contact.
  * do not use multiple header method for t, f, i, r, refer-to, b, referred-by headers.
  * allow faster connection with non blocking reliable sockets.
  * improve android time compensation.
- rename libosip2-4.1.0.patch to libosip2-5.0.0.patch
- drop libosip2-4.1.0-pthread.patch, obsolete</changelog>
  <changelog author="ro@suse.de" date="1492689601">- fix a set of buffer overflows:
  - add patch for (bnc#1034570, CVE-2017-7853)
    SIP_body_len_underflow.patch
  - add patch for (bnc#1034571, CVE-2016-10326)
    0001-Patch-2.1-Fixes-heap-buffer-overflow-in-osip_body_to_s.patch
  - add patch for (bnc#1034572, CVE-2016-10325)
    0001-Patch-1-Fixes-heap-buffer-overflow-in-_osip_message_to_str.patch
  - add patch for (bnc#1034574, CVE-2016-10324)
    0001-Patch-3-Fixes-heap-buffer-overflow-in-osip_clrncpy.patch</changelog>
  <changelog author="ro@suse.de" date="1492689602">- drop patch already in 5.0.0
  0001-Patch-2.1-Fixes-heap-buffer-overflow-in-osip_body_to_s.patch
- drop patch already in 5.0.0
  0001-Patch-1-Fixes-heap-buffer-overflow-in-_osip_message_to_str.patch
- drop patch already in 5.0.0
  0001-Patch-3-Fixes-heap-buffer-overflow-in-osip_clrncpy.patch</changelog>
  <changelog author="David Sugar &lt;tychosoft@gmail.com&gt;" date="1580904000">- Update to 5.1.0
  * See package, very many changes since prior 5.0.0 release.
- drop patch already in 5.1.0
  SIP_body_len_underflow.patch
- make package so library naming compliant with opensuse library versioning
- pre-requisite for updating to libeXosip2 5.1.0</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597579200">- update to 5.1.1:
  * fix vulnerability report: Authentication-Info or Proxy-Authentication-Info are affected by a buffer overflow when building sip messages.
  * fix vulnerability report: when boundary only contains one quote, strncpy will use the unsigned value of -1 as size parameter.
  * fix: avoid several memory leaks detected in the SDP parser upon invalid SDP formats.
  * fix bug #57467: infinite loop in sdp_message_a_attribute_del_at_index
  * fix bug #56071: Heap-buffer-overflow in osip_util_replace_all_lws function in osip_message_parse.c
  * fix to reject any non compliant answer with missing version digits.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1598702400">- Drop old specfile constructs and excess Provides lines.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1610366400">- update to 5.2.0:
  * use localtime_r when __USE_POSIX is available
  * sync versions with libexosip
- use https for urls</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1622030400">- update to 5.2.1:
  * add OSIP_RETRY_LIMIT which may be useful to exosip
  * add osip_timersub macro
  * fix validate that the API are used with the expected/required
    leading char
  * fix memory out-of-bound access in broken uncompliant Via header
  * fix k= within media being rejected since 5.1.1 [wrong check]
- package license text
- add upstream signing key and validate source signature
- run tests
- drop libosip2-5.0.0.patch, not required</changelog>
  <changelog author="ro@suse.de" date="1665576000">- add patch libosip2-overflow-CVE-2022-41550.patch
  to fix a integer overflow in the parser
  (bsc#1204225, CVE-2022-41550)</changelog>
</package>
<package pkgid="2849a29cb6890e232d3961b6f32f8c1298230d992f5f3da7a4bae95dcb349f80" name="libosip2" arch="src">
  <version epoch="0" ver="5.2.1" rel="bp154.2.3.1"/>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="ro@suse.de" date="1179316800">- branch off devel package</changelog>
  <changelog author="mskibbe@suse.de" date="1197979200">- update to version 3.0.3 which include
  o initial support for rtems
  o initial support for ucos.
  o Fix memory leaks
  o fix 64-bit (amd64) issue with hash
  o parser speed improvements
  o add NULL checks
  o automatic check for reliable protocol SCTP and TLS</changelog>
  <changelog author="crrodriguez@suse.de" date="1203940800">- remove libtool archive with empty dependency_libs and static libraries
- update to version 3.1.0
  * Windows Mobile 5/6 improvments.
  * allow uncompliant/IMS authentication headers.
  * fix when a space appear as the first char in body.
  * terminate body with '\0' after parsing (don't rely on this!)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1295179200">- update to version 3.5.0
  * iphone with TCP/TLS background support.
  * a lot of minor change/fix/improvments, sorry for not being
    able to have an history here...
- libosip2 (3.4.0)
  * remove CRLF before parsing SIP message.
  * modification to allow non-blocking socket for reliable transport.
  * fix race condition for non-atomic incrementation operation.
  * osip_list improvements.
  * osip_list prototypes and warnings fix.
  * new osip_strcasestr method.
- libosip2 (3.3.0)
  * new APPLE native interface for semaphore
  * add relative time in log information on linux/windows
  * fix: unescape last uri parameters.
- libosip2 (3.2.0)
  * return new error code for all API.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1303905600">- fix botched pthread linkage,it is going to break sooner or later.</changelog>
  <changelog author="coolo@suse.com" date="1321790400">- add libtool as buildrequire to avoid implicit dependency</changelog>
  <changelog author="jengelh@medozas.de" date="1321876800">- Remove redundant/unwanted tags/section (cf. specfile guidelines)
- Use %_smp_mflags for parallel building</changelog>
  <changelog author="coolo@suse.com" date="1329134400">- patch license to follow spdx.org standard</changelog>
  <changelog author="fisiu@opensuse.org" date="1371729600">- Update to 4.0.0:
  * reduce path len // remove path in front of logs.
  * accept only SIP/D.D format message.
  * fix bug when releasing request with missing major headers.
  * fix minor memory leak // remove limitation on fifo size.
  * use system independant time for osip_gettimeofday on unix platform.
  * To compile/use osip based application in multi threaded
    env, you don't need to define -DOSIP_MT any more. Instead,
    if you wish to disable the feature, you can compile with
  - DOSIP_MONOTHREAD.
  * A few other clean up were made inside osip to avoid any
    define to appear in include files. Also to avoid conflict,
    config.h has been renamed to osip-config.h.
- Patches updated.
- Spec cleanup.</changelog>
  <changelog author="fisiu@opensuse.org" date="1401019200">- Update to 4.1.0:
  * fix sdp re-allocation
  * increase max length size
  * osip_trace_initialize returns 0 if log are compiled.
  * timer e and timer g will use #define DEFAULT_T2 instead of 4000.
  * handle additionnal possible malloc failure.
  * fix compatibility with old UA for INVITE retransmission.
  * fix osip_sem_destroy leak on apple.
  * accept lowercase sip/2.0.
- Rebase libosip2-3.5.0.dif and rename to libosip2-4.1.0.patch.
- Rebase libosip2-3.5.0-pthread.patch and rename to libosip2-4.1.0-pthread.patch.</changelog>
  <changelog author="ro@suse.de" date="1492689600">- Update to 5.0.0:
  * STRUCTURE change: additionnal parameter for "struct osip_srv_entry" used for failover in eXosip2.
  * fix overflow: sr #109133: Heap buffer overflow in utility function *osip_clrncpy*
  * fix overflow: sr #109132: Heap buffer overflow in *osip_body_to_str*
  * fix overflow: sr #109131: Heap buffer overflow in `_osip_message_to_str`
  * simplify usage of timercmp/timerisset/timerclear
  * optimize list search: use iterator
  * improve/update autotools (./configure and options, Makefile.am, ax_thread.m4...)
  * verify a URI scheme only contains allowed char
  * improve make check (test unit) to make it clear about the results expected.
  * fix a possible buffer overflow of 1 byte in sdp_message_to_str (size=sdp allocated size)
  * fix cseq check in order to stop retransmission of 200ok
  * update to reject negative value in port number
  * add support for ntlm authentication in parser
  * include application_data when cloning sip message
  * fix to allow correct parsing of quoted string in from/to/contact/...
  * add authorizations and proxy_authorizations into ACK for 3xx, 4xx, 5xx, and 6xx (if answer was not 401/407)
  * additionnal check for cseq number for matching incoming ack restransmission
  * patch to transmit ack for OSIP_ICT_ACK_SENT event
  * improve management of body length // fix a bug when initial value of body is \0.
  * increase timer E as soon as we receive 1xx for NICT.
  * update all reasons according to RFC.
  * add some reason code from rfc4412, rfc3261 and rfc6086.
  * parse addr spec with LAQUOT and RAQUOT in generic parameters.
  * avoid issue with comma in userinfo of URI which may appear for several headers such as Contact.
  * do not use multiple header method for t, f, i, r, refer-to, b, referred-by headers.
  * allow faster connection with non blocking reliable sockets.
  * improve android time compensation.
- rename libosip2-4.1.0.patch to libosip2-5.0.0.patch
- drop libosip2-4.1.0-pthread.patch, obsolete</changelog>
  <changelog author="ro@suse.de" date="1492689601">- fix a set of buffer overflows:
  - add patch for (bnc#1034570, CVE-2017-7853)
    SIP_body_len_underflow.patch
  - add patch for (bnc#1034571, CVE-2016-10326)
    0001-Patch-2.1-Fixes-heap-buffer-overflow-in-osip_body_to_s.patch
  - add patch for (bnc#1034572, CVE-2016-10325)
    0001-Patch-1-Fixes-heap-buffer-overflow-in-_osip_message_to_str.patch
  - add patch for (bnc#1034574, CVE-2016-10324)
    0001-Patch-3-Fixes-heap-buffer-overflow-in-osip_clrncpy.patch</changelog>
  <changelog author="ro@suse.de" date="1492689602">- drop patch already in 5.0.0
  0001-Patch-2.1-Fixes-heap-buffer-overflow-in-osip_body_to_s.patch
- drop patch already in 5.0.0
  0001-Patch-1-Fixes-heap-buffer-overflow-in-_osip_message_to_str.patch
- drop patch already in 5.0.0
  0001-Patch-3-Fixes-heap-buffer-overflow-in-osip_clrncpy.patch</changelog>
  <changelog author="David Sugar &lt;tychosoft@gmail.com&gt;" date="1580904000">- Update to 5.1.0
  * See package, very many changes since prior 5.0.0 release.
- drop patch already in 5.1.0
  SIP_body_len_underflow.patch
- make package so library naming compliant with opensuse library versioning
- pre-requisite for updating to libeXosip2 5.1.0</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597579200">- update to 5.1.1:
  * fix vulnerability report: Authentication-Info or Proxy-Authentication-Info are affected by a buffer overflow when building sip messages.
  * fix vulnerability report: when boundary only contains one quote, strncpy will use the unsigned value of -1 as size parameter.
  * fix: avoid several memory leaks detected in the SDP parser upon invalid SDP formats.
  * fix bug #57467: infinite loop in sdp_message_a_attribute_del_at_index
  * fix bug #56071: Heap-buffer-overflow in osip_util_replace_all_lws function in osip_message_parse.c
  * fix to reject any non compliant answer with missing version digits.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1598702400">- Drop old specfile constructs and excess Provides lines.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1610366400">- update to 5.2.0:
  * use localtime_r when __USE_POSIX is available
  * sync versions with libexosip
- use https for urls</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1622030400">- update to 5.2.1:
  * add OSIP_RETRY_LIMIT which may be useful to exosip
  * add osip_timersub macro
  * fix validate that the API are used with the expected/required
    leading char
  * fix memory out-of-bound access in broken uncompliant Via header
  * fix k= within media being rejected since 5.1.1 [wrong check]
- package license text
- add upstream signing key and validate source signature
- run tests
- drop libosip2-5.0.0.patch, not required</changelog>
  <changelog author="ro@suse.de" date="1665576000">- add patch libosip2-overflow-CVE-2022-41550.patch
  to fix a integer overflow in the parser
  (bsc#1204225, CVE-2022-41550)</changelog>
</package>
<package pkgid="78bbb7a5ceb1b225d9c43f1fc14173bba5226feee0d7065823142f8be2bead64" name="libosip2-devel" arch="aarch64">
  <version epoch="0" ver="5.2.1" rel="bp154.2.3.1"/>
  <changelog author="fisiu@opensuse.org" date="1401019200">- Update to 4.1.0:
  * fix sdp re-allocation
  * increase max length size
  * osip_trace_initialize returns 0 if log are compiled.
  * timer e and timer g will use #define DEFAULT_T2 instead of 4000.
  * handle additionnal possible malloc failure.
  * fix compatibility with old UA for INVITE retransmission.
  * fix osip_sem_destroy leak on apple.
  * accept lowercase sip/2.0.
- Rebase libosip2-3.5.0.dif and rename to libosip2-4.1.0.patch.
- Rebase libosip2-3.5.0-pthread.patch and rename to libosip2-4.1.0-pthread.patch.</changelog>
  <changelog author="ro@suse.de" date="1492689600">- Update to 5.0.0:
  * STRUCTURE change: additionnal parameter for "struct osip_srv_entry" used for failover in eXosip2.
  * fix overflow: sr #109133: Heap buffer overflow in utility function *osip_clrncpy*
  * fix overflow: sr #109132: Heap buffer overflow in *osip_body_to_str*
  * fix overflow: sr #109131: Heap buffer overflow in `_osip_message_to_str`
  * simplify usage of timercmp/timerisset/timerclear
  * optimize list search: use iterator
  * improve/update autotools (./configure and options, Makefile.am, ax_thread.m4...)
  * verify a URI scheme only contains allowed char
  * improve make check (test unit) to make it clear about the results expected.
  * fix a possible buffer overflow of 1 byte in sdp_message_to_str (size=sdp allocated size)
  * fix cseq check in order to stop retransmission of 200ok
  * update to reject negative value in port number
  * add support for ntlm authentication in parser
  * include application_data when cloning sip message
  * fix to allow correct parsing of quoted string in from/to/contact/...
  * add authorizations and proxy_authorizations into ACK for 3xx, 4xx, 5xx, and 6xx (if answer was not 401/407)
  * additionnal check for cseq number for matching incoming ack restransmission
  * patch to transmit ack for OSIP_ICT_ACK_SENT event
  * improve management of body length // fix a bug when initial value of body is \0.
  * increase timer E as soon as we receive 1xx for NICT.
  * update all reasons according to RFC.
  * add some reason code from rfc4412, rfc3261 and rfc6086.
  * parse addr spec with LAQUOT and RAQUOT in generic parameters.
  * avoid issue with comma in userinfo of URI which may appear for several headers such as Contact.
  * do not use multiple header method for t, f, i, r, refer-to, b, referred-by headers.
  * allow faster connection with non blocking reliable sockets.
  * improve android time compensation.
- rename libosip2-4.1.0.patch to libosip2-5.0.0.patch
- drop libosip2-4.1.0-pthread.patch, obsolete</changelog>
  <changelog author="ro@suse.de" date="1492689601">- fix a set of buffer overflows:
  - add patch for (bnc#1034570, CVE-2017-7853)
    SIP_body_len_underflow.patch
  - add patch for (bnc#1034571, CVE-2016-10326)
    0001-Patch-2.1-Fixes-heap-buffer-overflow-in-osip_body_to_s.patch
  - add patch for (bnc#1034572, CVE-2016-10325)
    0001-Patch-1-Fixes-heap-buffer-overflow-in-_osip_message_to_str.patch
  - add patch for (bnc#1034574, CVE-2016-10324)
    0001-Patch-3-Fixes-heap-buffer-overflow-in-osip_clrncpy.patch</changelog>
  <changelog author="ro@suse.de" date="1492689602">- drop patch already in 5.0.0
  0001-Patch-2.1-Fixes-heap-buffer-overflow-in-osip_body_to_s.patch
- drop patch already in 5.0.0
  0001-Patch-1-Fixes-heap-buffer-overflow-in-_osip_message_to_str.patch
- drop patch already in 5.0.0
  0001-Patch-3-Fixes-heap-buffer-overflow-in-osip_clrncpy.patch</changelog>
  <changelog author="David Sugar &lt;tychosoft@gmail.com&gt;" date="1580904000">- Update to 5.1.0
  * See package, very many changes since prior 5.0.0 release.
- drop patch already in 5.1.0
  SIP_body_len_underflow.patch
- make package so library naming compliant with opensuse library versioning
- pre-requisite for updating to libeXosip2 5.1.0</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597579200">- update to 5.1.1:
  * fix vulnerability report: Authentication-Info or Proxy-Authentication-Info are affected by a buffer overflow when building sip messages.
  * fix vulnerability report: when boundary only contains one quote, strncpy will use the unsigned value of -1 as size parameter.
  * fix: avoid several memory leaks detected in the SDP parser upon invalid SDP formats.
  * fix bug #57467: infinite loop in sdp_message_a_attribute_del_at_index
  * fix bug #56071: Heap-buffer-overflow in osip_util_replace_all_lws function in osip_message_parse.c
  * fix to reject any non compliant answer with missing version digits.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1598702400">- Drop old specfile constructs and excess Provides lines.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1610366400">- update to 5.2.0:
  * use localtime_r when __USE_POSIX is available
  * sync versions with libexosip
- use https for urls</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1622030400">- update to 5.2.1:
  * add OSIP_RETRY_LIMIT which may be useful to exosip
  * add osip_timersub macro
  * fix validate that the API are used with the expected/required
    leading char
  * fix memory out-of-bound access in broken uncompliant Via header
  * fix k= within media being rejected since 5.1.1 [wrong check]
- package license text
- add upstream signing key and validate source signature
- run tests
- drop libosip2-5.0.0.patch, not required</changelog>
  <changelog author="ro@suse.de" date="1665576000">- add patch libosip2-overflow-CVE-2022-41550.patch
  to fix a integer overflow in the parser
  (bsc#1204225, CVE-2022-41550)</changelog>
</package>
<package pkgid="c2cda829f481626006fe9be2f7b894c634817d852f3fccd89e7f9ba3caa76ab1" name="libosip2-devel" arch="i586">
  <version epoch="0" ver="5.2.1" rel="bp154.2.3.1"/>
  <changelog author="fisiu@opensuse.org" date="1401019200">- Update to 4.1.0:
  * fix sdp re-allocation
  * increase max length size
  * osip_trace_initialize returns 0 if log are compiled.
  * timer e and timer g will use #define DEFAULT_T2 instead of 4000.
  * handle additionnal possible malloc failure.
  * fix compatibility with old UA for INVITE retransmission.
  * fix osip_sem_destroy leak on apple.
  * accept lowercase sip/2.0.
- Rebase libosip2-3.5.0.dif and rename to libosip2-4.1.0.patch.
- Rebase libosip2-3.5.0-pthread.patch and rename to libosip2-4.1.0-pthread.patch.</changelog>
  <changelog author="ro@suse.de" date="1492689600">- Update to 5.0.0:
  * STRUCTURE change: additionnal parameter for "struct osip_srv_entry" used for failover in eXosip2.
  * fix overflow: sr #109133: Heap buffer overflow in utility function *osip_clrncpy*
  * fix overflow: sr #109132: Heap buffer overflow in *osip_body_to_str*
  * fix overflow: sr #109131: Heap buffer overflow in `_osip_message_to_str`
  * simplify usage of timercmp/timerisset/timerclear
  * optimize list search: use iterator
  * improve/update autotools (./configure and options, Makefile.am, ax_thread.m4...)
  * verify a URI scheme only contains allowed char
  * improve make check (test unit) to make it clear about the results expected.
  * fix a possible buffer overflow of 1 byte in sdp_message_to_str (size=sdp allocated size)
  * fix cseq check in order to stop retransmission of 200ok
  * update to reject negative value in port number
  * add support for ntlm authentication in parser
  * include application_data when cloning sip message
  * fix to allow correct parsing of quoted string in from/to/contact/...
  * add authorizations and proxy_authorizations into ACK for 3xx, 4xx, 5xx, and 6xx (if answer was not 401/407)
  * additionnal check for cseq number for matching incoming ack restransmission
  * patch to transmit ack for OSIP_ICT_ACK_SENT event
  * improve management of body length // fix a bug when initial value of body is \0.
  * increase timer E as soon as we receive 1xx for NICT.
  * update all reasons according to RFC.
  * add some reason code from rfc4412, rfc3261 and rfc6086.
  * parse addr spec with LAQUOT and RAQUOT in generic parameters.
  * avoid issue with comma in userinfo of URI which may appear for several headers such as Contact.
  * do not use multiple header method for t, f, i, r, refer-to, b, referred-by headers.
  * allow faster connection with non blocking reliable sockets.
  * improve android time compensation.
- rename libosip2-4.1.0.patch to libosip2-5.0.0.patch
- drop libosip2-4.1.0-pthread.patch, obsolete</changelog>
  <changelog author="ro@suse.de" date="1492689601">- fix a set of buffer overflows:
  - add patch for (bnc#1034570, CVE-2017-7853)
    SIP_body_len_underflow.patch
  - add patch for (bnc#1034571, CVE-2016-10326)
    0001-Patch-2.1-Fixes-heap-buffer-overflow-in-osip_body_to_s.patch
  - add patch for (bnc#1034572, CVE-2016-10325)
    0001-Patch-1-Fixes-heap-buffer-overflow-in-_osip_message_to_str.patch
  - add patch for (bnc#1034574, CVE-2016-10324)
    0001-Patch-3-Fixes-heap-buffer-overflow-in-osip_clrncpy.patch</changelog>
  <changelog author="ro@suse.de" date="1492689602">- drop patch already in 5.0.0
  0001-Patch-2.1-Fixes-heap-buffer-overflow-in-osip_body_to_s.patch
- drop patch already in 5.0.0
  0001-Patch-1-Fixes-heap-buffer-overflow-in-_osip_message_to_str.patch
- drop patch already in 5.0.0
  0001-Patch-3-Fixes-heap-buffer-overflow-in-osip_clrncpy.patch</changelog>
  <changelog author="David Sugar &lt;tychosoft@gmail.com&gt;" date="1580904000">- Update to 5.1.0
  * See package, very many changes since prior 5.0.0 release.
- drop patch already in 5.1.0
  SIP_body_len_underflow.patch
- make package so library naming compliant with opensuse library versioning
- pre-requisite for updating to libeXosip2 5.1.0</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597579200">- update to 5.1.1:
  * fix vulnerability report: Authentication-Info or Proxy-Authentication-Info are affected by a buffer overflow when building sip messages.
  * fix vulnerability report: when boundary only contains one quote, strncpy will use the unsigned value of -1 as size parameter.
  * fix: avoid several memory leaks detected in the SDP parser upon invalid SDP formats.
  * fix bug #57467: infinite loop in sdp_message_a_attribute_del_at_index
  * fix bug #56071: Heap-buffer-overflow in osip_util_replace_all_lws function in osip_message_parse.c
  * fix to reject any non compliant answer with missing version digits.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1598702400">- Drop old specfile constructs and excess Provides lines.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1610366400">- update to 5.2.0:
  * use localtime_r when __USE_POSIX is available
  * sync versions with libexosip
- use https for urls</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1622030400">- update to 5.2.1:
  * add OSIP_RETRY_LIMIT which may be useful to exosip
  * add osip_timersub macro
  * fix validate that the API are used with the expected/required
    leading char
  * fix memory out-of-bound access in broken uncompliant Via header
  * fix k= within media being rejected since 5.1.1 [wrong check]
- package license text
- add upstream signing key and validate source signature
- run tests
- drop libosip2-5.0.0.patch, not required</changelog>
  <changelog author="ro@suse.de" date="1665576000">- add patch libosip2-overflow-CVE-2022-41550.patch
  to fix a integer overflow in the parser
  (bsc#1204225, CVE-2022-41550)</changelog>
</package>
<package pkgid="df8f6be71b935064274754e4a5a078e26c7892a5536fe5859b08a057264bc9ec" name="libosip2-devel" arch="ppc64le">
  <version epoch="0" ver="5.2.1" rel="bp154.2.3.1"/>
  <changelog author="fisiu@opensuse.org" date="1401019200">- Update to 4.1.0:
  * fix sdp re-allocation
  * increase max length size
  * osip_trace_initialize returns 0 if log are compiled.
  * timer e and timer g will use #define DEFAULT_T2 instead of 4000.
  * handle additionnal possible malloc failure.
  * fix compatibility with old UA for INVITE retransmission.
  * fix osip_sem_destroy leak on apple.
  * accept lowercase sip/2.0.
- Rebase libosip2-3.5.0.dif and rename to libosip2-4.1.0.patch.
- Rebase libosip2-3.5.0-pthread.patch and rename to libosip2-4.1.0-pthread.patch.</changelog>
  <changelog author="ro@suse.de" date="1492689600">- Update to 5.0.0:
  * STRUCTURE change: additionnal parameter for "struct osip_srv_entry" used for failover in eXosip2.
  * fix overflow: sr #109133: Heap buffer overflow in utility function *osip_clrncpy*
  * fix overflow: sr #109132: Heap buffer overflow in *osip_body_to_str*
  * fix overflow: sr #109131: Heap buffer overflow in `_osip_message_to_str`
  * simplify usage of timercmp/timerisset/timerclear
  * optimize list search: use iterator
  * improve/update autotools (./configure and options, Makefile.am, ax_thread.m4...)
  * verify a URI scheme only contains allowed char
  * improve make check (test unit) to make it clear about the results expected.
  * fix a possible buffer overflow of 1 byte in sdp_message_to_str (size=sdp allocated size)
  * fix cseq check in order to stop retransmission of 200ok
  * update to reject negative value in port number
  * add support for ntlm authentication in parser
  * include application_data when cloning sip message
  * fix to allow correct parsing of quoted string in from/to/contact/...
  * add authorizations and proxy_authorizations into ACK for 3xx, 4xx, 5xx, and 6xx (if answer was not 401/407)
  * additionnal check for cseq number for matching incoming ack restransmission
  * patch to transmit ack for OSIP_ICT_ACK_SENT event
  * improve management of body length // fix a bug when initial value of body is \0.
  * increase timer E as soon as we receive 1xx for NICT.
  * update all reasons according to RFC.
  * add some reason code from rfc4412, rfc3261 and rfc6086.
  * parse addr spec with LAQUOT and RAQUOT in generic parameters.
  * avoid issue with comma in userinfo of URI which may appear for several headers such as Contact.
  * do not use multiple header method for t, f, i, r, refer-to, b, referred-by headers.
  * allow faster connection with non blocking reliable sockets.
  * improve android time compensation.
- rename libosip2-4.1.0.patch to libosip2-5.0.0.patch
- drop libosip2-4.1.0-pthread.patch, obsolete</changelog>
  <changelog author="ro@suse.de" date="1492689601">- fix a set of buffer overflows:
  - add patch for (bnc#1034570, CVE-2017-7853)
    SIP_body_len_underflow.patch
  - add patch for (bnc#1034571, CVE-2016-10326)
    0001-Patch-2.1-Fixes-heap-buffer-overflow-in-osip_body_to_s.patch
  - add patch for (bnc#1034572, CVE-2016-10325)
    0001-Patch-1-Fixes-heap-buffer-overflow-in-_osip_message_to_str.patch
  - add patch for (bnc#1034574, CVE-2016-10324)
    0001-Patch-3-Fixes-heap-buffer-overflow-in-osip_clrncpy.patch</changelog>
  <changelog author="ro@suse.de" date="1492689602">- drop patch already in 5.0.0
  0001-Patch-2.1-Fixes-heap-buffer-overflow-in-osip_body_to_s.patch
- drop patch already in 5.0.0
  0001-Patch-1-Fixes-heap-buffer-overflow-in-_osip_message_to_str.patch
- drop patch already in 5.0.0
  0001-Patch-3-Fixes-heap-buffer-overflow-in-osip_clrncpy.patch</changelog>
  <changelog author="David Sugar &lt;tychosoft@gmail.com&gt;" date="1580904000">- Update to 5.1.0
  * See package, very many changes since prior 5.0.0 release.
- drop patch already in 5.1.0
  SIP_body_len_underflow.patch
- make package so library naming compliant with opensuse library versioning
- pre-requisite for updating to libeXosip2 5.1.0</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597579200">- update to 5.1.1:
  * fix vulnerability report: Authentication-Info or Proxy-Authentication-Info are affected by a buffer overflow when building sip messages.
  * fix vulnerability report: when boundary only contains one quote, strncpy will use the unsigned value of -1 as size parameter.
  * fix: avoid several memory leaks detected in the SDP parser upon invalid SDP formats.
  * fix bug #57467: infinite loop in sdp_message_a_attribute_del_at_index
  * fix bug #56071: Heap-buffer-overflow in osip_util_replace_all_lws function in osip_message_parse.c
  * fix to reject any non compliant answer with missing version digits.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1598702400">- Drop old specfile constructs and excess Provides lines.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1610366400">- update to 5.2.0:
  * use localtime_r when __USE_POSIX is available
  * sync versions with libexosip
- use https for urls</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1622030400">- update to 5.2.1:
  * add OSIP_RETRY_LIMIT which may be useful to exosip
  * add osip_timersub macro
  * fix validate that the API are used with the expected/required
    leading char
  * fix memory out-of-bound access in broken uncompliant Via header
  * fix k= within media being rejected since 5.1.1 [wrong check]
- package license text
- add upstream signing key and validate source signature
- run tests
- drop libosip2-5.0.0.patch, not required</changelog>
  <changelog author="ro@suse.de" date="1665576000">- add patch libosip2-overflow-CVE-2022-41550.patch
  to fix a integer overflow in the parser
  (bsc#1204225, CVE-2022-41550)</changelog>
</package>
<package pkgid="32418066308e6940260cf35a3024118cd918b10faffd65dc2c9d7a48362038ee" name="libosip2-devel" arch="s390x">
  <version epoch="0" ver="5.2.1" rel="bp154.2.3.1"/>
  <changelog author="fisiu@opensuse.org" date="1401019200">- Update to 4.1.0:
  * fix sdp re-allocation
  * increase max length size
  * osip_trace_initialize returns 0 if log are compiled.
  * timer e and timer g will use #define DEFAULT_T2 instead of 4000.
  * handle additionnal possible malloc failure.
  * fix compatibility with old UA for INVITE retransmission.
  * fix osip_sem_destroy leak on apple.
  * accept lowercase sip/2.0.
- Rebase libosip2-3.5.0.dif and rename to libosip2-4.1.0.patch.
- Rebase libosip2-3.5.0-pthread.patch and rename to libosip2-4.1.0-pthread.patch.</changelog>
  <changelog author="ro@suse.de" date="1492689600">- Update to 5.0.0:
  * STRUCTURE change: additionnal parameter for "struct osip_srv_entry" used for failover in eXosip2.
  * fix overflow: sr #109133: Heap buffer overflow in utility function *osip_clrncpy*
  * fix overflow: sr #109132: Heap buffer overflow in *osip_body_to_str*
  * fix overflow: sr #109131: Heap buffer overflow in `_osip_message_to_str`
  * simplify usage of timercmp/timerisset/timerclear
  * optimize list search: use iterator
  * improve/update autotools (./configure and options, Makefile.am, ax_thread.m4...)
  * verify a URI scheme only contains allowed char
  * improve make check (test unit) to make it clear about the results expected.
  * fix a possible buffer overflow of 1 byte in sdp_message_to_str (size=sdp allocated size)
  * fix cseq check in order to stop retransmission of 200ok
  * update to reject negative value in port number
  * add support for ntlm authentication in parser
  * include application_data when cloning sip message
  * fix to allow correct parsing of quoted string in from/to/contact/...
  * add authorizations and proxy_authorizations into ACK for 3xx, 4xx, 5xx, and 6xx (if answer was not 401/407)
  * additionnal check for cseq number for matching incoming ack restransmission
  * patch to transmit ack for OSIP_ICT_ACK_SENT event
  * improve management of body length // fix a bug when initial value of body is \0.
  * increase timer E as soon as we receive 1xx for NICT.
  * update all reasons according to RFC.
  * add some reason code from rfc4412, rfc3261 and rfc6086.
  * parse addr spec with LAQUOT and RAQUOT in generic parameters.
  * avoid issue with comma in userinfo of URI which may appear for several headers such as Contact.
  * do not use multiple header method for t, f, i, r, refer-to, b, referred-by headers.
  * allow faster connection with non blocking reliable sockets.
  * improve android time compensation.
- rename libosip2-4.1.0.patch to libosip2-5.0.0.patch
- drop libosip2-4.1.0-pthread.patch, obsolete</changelog>
  <changelog author="ro@suse.de" date="1492689601">- fix a set of buffer overflows:
  - add patch for (bnc#1034570, CVE-2017-7853)
    SIP_body_len_underflow.patch
  - add patch for (bnc#1034571, CVE-2016-10326)
    0001-Patch-2.1-Fixes-heap-buffer-overflow-in-osip_body_to_s.patch
  - add patch for (bnc#1034572, CVE-2016-10325)
    0001-Patch-1-Fixes-heap-buffer-overflow-in-_osip_message_to_str.patch
  - add patch for (bnc#1034574, CVE-2016-10324)
    0001-Patch-3-Fixes-heap-buffer-overflow-in-osip_clrncpy.patch</changelog>
  <changelog author="ro@suse.de" date="1492689602">- drop patch already in 5.0.0
  0001-Patch-2.1-Fixes-heap-buffer-overflow-in-osip_body_to_s.patch
- drop patch already in 5.0.0
  0001-Patch-1-Fixes-heap-buffer-overflow-in-_osip_message_to_str.patch
- drop patch already in 5.0.0
  0001-Patch-3-Fixes-heap-buffer-overflow-in-osip_clrncpy.patch</changelog>
  <changelog author="David Sugar &lt;tychosoft@gmail.com&gt;" date="1580904000">- Update to 5.1.0
  * See package, very many changes since prior 5.0.0 release.
- drop patch already in 5.1.0
  SIP_body_len_underflow.patch
- make package so library naming compliant with opensuse library versioning
- pre-requisite for updating to libeXosip2 5.1.0</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597579200">- update to 5.1.1:
  * fix vulnerability report: Authentication-Info or Proxy-Authentication-Info are affected by a buffer overflow when building sip messages.
  * fix vulnerability report: when boundary only contains one quote, strncpy will use the unsigned value of -1 as size parameter.
  * fix: avoid several memory leaks detected in the SDP parser upon invalid SDP formats.
  * fix bug #57467: infinite loop in sdp_message_a_attribute_del_at_index
  * fix bug #56071: Heap-buffer-overflow in osip_util_replace_all_lws function in osip_message_parse.c
  * fix to reject any non compliant answer with missing version digits.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1598702400">- Drop old specfile constructs and excess Provides lines.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1610366400">- update to 5.2.0:
  * use localtime_r when __USE_POSIX is available
  * sync versions with libexosip
- use https for urls</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1622030400">- update to 5.2.1:
  * add OSIP_RETRY_LIMIT which may be useful to exosip
  * add osip_timersub macro
  * fix validate that the API are used with the expected/required
    leading char
  * fix memory out-of-bound access in broken uncompliant Via header
  * fix k= within media being rejected since 5.1.1 [wrong check]
- package license text
- add upstream signing key and validate source signature
- run tests
- drop libosip2-5.0.0.patch, not required</changelog>
  <changelog author="ro@suse.de" date="1665576000">- add patch libosip2-overflow-CVE-2022-41550.patch
  to fix a integer overflow in the parser
  (bsc#1204225, CVE-2022-41550)</changelog>
</package>
<package pkgid="e546f462b8e00a0f8253ec5e5078355871c063ee1e27b8f5f9257de2ccfea160" name="libosip2-devel" arch="x86_64">
  <version epoch="0" ver="5.2.1" rel="bp154.2.3.1"/>
  <changelog author="fisiu@opensuse.org" date="1401019200">- Update to 4.1.0:
  * fix sdp re-allocation
  * increase max length size
  * osip_trace_initialize returns 0 if log are compiled.
  * timer e and timer g will use #define DEFAULT_T2 instead of 4000.
  * handle additionnal possible malloc failure.
  * fix compatibility with old UA for INVITE retransmission.
  * fix osip_sem_destroy leak on apple.
  * accept lowercase sip/2.0.
- Rebase libosip2-3.5.0.dif and rename to libosip2-4.1.0.patch.
- Rebase libosip2-3.5.0-pthread.patch and rename to libosip2-4.1.0-pthread.patch.</changelog>
  <changelog author="ro@suse.de" date="1492689600">- Update to 5.0.0:
  * STRUCTURE change: additionnal parameter for "struct osip_srv_entry" used for failover in eXosip2.
  * fix overflow: sr #109133: Heap buffer overflow in utility function *osip_clrncpy*
  * fix overflow: sr #109132: Heap buffer overflow in *osip_body_to_str*
  * fix overflow: sr #109131: Heap buffer overflow in `_osip_message_to_str`
  * simplify usage of timercmp/timerisset/timerclear
  * optimize list search: use iterator
  * improve/update autotools (./configure and options, Makefile.am, ax_thread.m4...)
  * verify a URI scheme only contains allowed char
  * improve make check (test unit) to make it clear about the results expected.
  * fix a possible buffer overflow of 1 byte in sdp_message_to_str (size=sdp allocated size)
  * fix cseq check in order to stop retransmission of 200ok
  * update to reject negative value in port number
  * add support for ntlm authentication in parser
  * include application_data when cloning sip message
  * fix to allow correct parsing of quoted string in from/to/contact/...
  * add authorizations and proxy_authorizations into ACK for 3xx, 4xx, 5xx, and 6xx (if answer was not 401/407)
  * additionnal check for cseq number for matching incoming ack restransmission
  * patch to transmit ack for OSIP_ICT_ACK_SENT event
  * improve management of body length // fix a bug when initial value of body is \0.
  * increase timer E as soon as we receive 1xx for NICT.
  * update all reasons according to RFC.
  * add some reason code from rfc4412, rfc3261 and rfc6086.
  * parse addr spec with LAQUOT and RAQUOT in generic parameters.
  * avoid issue with comma in userinfo of URI which may appear for several headers such as Contact.
  * do not use multiple header method for t, f, i, r, refer-to, b, referred-by headers.
  * allow faster connection with non blocking reliable sockets.
  * improve android time compensation.
- rename libosip2-4.1.0.patch to libosip2-5.0.0.patch
- drop libosip2-4.1.0-pthread.patch, obsolete</changelog>
  <changelog author="ro@suse.de" date="1492689601">- fix a set of buffer overflows:
  - add patch for (bnc#1034570, CVE-2017-7853)
    SIP_body_len_underflow.patch
  - add patch for (bnc#1034571, CVE-2016-10326)
    0001-Patch-2.1-Fixes-heap-buffer-overflow-in-osip_body_to_s.patch
  - add patch for (bnc#1034572, CVE-2016-10325)
    0001-Patch-1-Fixes-heap-buffer-overflow-in-_osip_message_to_str.patch
  - add patch for (bnc#1034574, CVE-2016-10324)
    0001-Patch-3-Fixes-heap-buffer-overflow-in-osip_clrncpy.patch</changelog>
  <changelog author="ro@suse.de" date="1492689602">- drop patch already in 5.0.0
  0001-Patch-2.1-Fixes-heap-buffer-overflow-in-osip_body_to_s.patch
- drop patch already in 5.0.0
  0001-Patch-1-Fixes-heap-buffer-overflow-in-_osip_message_to_str.patch
- drop patch already in 5.0.0
  0001-Patch-3-Fixes-heap-buffer-overflow-in-osip_clrncpy.patch</changelog>
  <changelog author="David Sugar &lt;tychosoft@gmail.com&gt;" date="1580904000">- Update to 5.1.0
  * See package, very many changes since prior 5.0.0 release.
- drop patch already in 5.1.0
  SIP_body_len_underflow.patch
- make package so library naming compliant with opensuse library versioning
- pre-requisite for updating to libeXosip2 5.1.0</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597579200">- update to 5.1.1:
  * fix vulnerability report: Authentication-Info or Proxy-Authentication-Info are affected by a buffer overflow when building sip messages.
  * fix vulnerability report: when boundary only contains one quote, strncpy will use the unsigned value of -1 as size parameter.
  * fix: avoid several memory leaks detected in the SDP parser upon invalid SDP formats.
  * fix bug #57467: infinite loop in sdp_message_a_attribute_del_at_index
  * fix bug #56071: Heap-buffer-overflow in osip_util_replace_all_lws function in osip_message_parse.c
  * fix to reject any non compliant answer with missing version digits.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1598702400">- Drop old specfile constructs and excess Provides lines.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1610366400">- update to 5.2.0:
  * use localtime_r when __USE_POSIX is available
  * sync versions with libexosip
- use https for urls</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1622030400">- update to 5.2.1:
  * add OSIP_RETRY_LIMIT which may be useful to exosip
  * add osip_timersub macro
  * fix validate that the API are used with the expected/required
    leading char
  * fix memory out-of-bound access in broken uncompliant Via header
  * fix k= within media being rejected since 5.1.1 [wrong check]
- package license text
- add upstream signing key and validate source signature
- run tests
- drop libosip2-5.0.0.patch, not required</changelog>
  <changelog author="ro@suse.de" date="1665576000">- add patch libosip2-overflow-CVE-2022-41550.patch
  to fix a integer overflow in the parser
  (bsc#1204225, CVE-2022-41550)</changelog>
</package>
<package pkgid="49beb6b488fe9f18266ec5f9db5b784dcc3490ef8bdc064f6e62a7a28f17a96a" name="libotp0" arch="aarch64">
  <version epoch="0" ver="7.8.0" rel="bp154.2.4.1"/>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1440936000">- Initial package, version 1.6rc2
- Added patch heimdal-version-script-client.map.patch to add file
  version-script-client.map (File is present in git for tag 1.6rc2
  but missing in tarball).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441108800">- Some changes in spec file to enable build for SLES.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441195200">- Added Conflicts tags to spec file because devel package conflicts
  with krb5-devel and krb5-mini-devel.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441454400">- Added a patched instead of the original tarball because only
  shared libraries will be build and source files of these (not to
  be build) programs have problematic licenses.
- Added script heimdal-patch-source.sh to sources.
- Added patch heimdal-patched.diff that fixes configure.ac and
  several Makefile.am files to successfully build patched source.
- Removed unneeded dependencies in spec file for build.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1483790400">- Update to version 7.1.0
- Removed heimdal-version-script-client.map.patch, fixed upstream.
- Fixed heimdal-patched.diff.
- Unfortunately there is no updated changelog file in tarball,
  changes can be seen in source code version control systems
  history log.</changelog>
  <changelog author="jengelh@inai.de" date="1486036800">- Summary and RPM group update. Do a direct call to ldconfig
  where possible.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1497528000">- Update to version 7.3.0
  - Security
    + Fix transit path validation. Commit f469fc6 (2010-10-02)
    inadvertently caused the previous hop realm to not be added
    to the transit path of issued tickets. This may, in some
    cases, enable bypass of capath policy in Heimdal versions 1.5
    through 7.2.
    Note, this may break sites that rely on the bug. With the bug
    some incomplete [capaths] worked, that should not have.
    These may now break authentication in some cross-realm
    configurations. (CVE-2017-6594)
- Version 7.2.0
  - Bug fixes
    + Portability improvements.
    + More strict parsing of encoded URI components in HTTP KDC.
    + Fixed memory leak in malloc error recovery in NTLM GSSAPI
    mechanism.
    + Avoid overly specific CPU info in krb5-config in aid of
    reproducible builds.
    + Don't do AFS string-to-key tests when feature is disabled.
    + Skip mdb_stat test when the command is not available.
    + Windows: update SHA2 timestamp server.
    + hdb: add missing export
    hdb_generate_key_set_password_with_ks_tuple.
    + Fix signature of hdb_generate_key_set_password().
    + Windows: enable KX509 support in the KDC.
    + kdc: fix kx509 service principal match.
    + iprop: handle case where master sends nothing new.
    + ipropd-slave: fix incorrect error codes.
    + Allow choice of sqlite for HDB pref.
    + check-iprop: don't fail to kill daemons.
    + roken: pidfile -&gt; rk_pidfile.
    + kdc: _kdc_do_kx509 fix use after free error.
    + Do not detect x32 as 64-bit platform.
    + No sys/ttydefaults.h on CYGWIN.
    + Fix check-iprop races.
    + roken_detach_prep() close pipe.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1501761600">- Update to version 7.4.0
  - Security
  - Fix CVE-2017-11103: Orpheus' Lyre KDC-REP service name
    validation.
    This is a critical vulnerability.
    In _krb5_extract_ticket() the KDC-REP service name must be
    obtained from encrypted version stored in 'enc_part' instead
    of the unencrypted version stored in 'ticket'.
    Use of the unecrypted version provides an opportunity for
    successful server impersonation and other attacks.
    Identified by Jeffrey Altman, Viktor Duchovni and
    Nico Williams.
    See https://www.orpheus-lyre.info/ for more details.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1512648000">- Added Avoid_NULL_structure_pointer_member_dereference.patch,
  fixes (bsc#1071675).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1514548800">- Update to version 7.5.0
  - Security
  - Fix CVE-2017-17439, which is a remote denial of service
    vulnerability:
    In Heimdal 7.1 through 7.4, remote unauthenticated attackers
    are able to crash the KDC by sending a crafted UDP packet
    containing empty data fields for client name or realm.
  - Bug fixes
  - Handle long input lines when reloading database dumps.
  - In pre-forked mode (default on Unix), correctly clear the
    process ids of exited children, allowing new child processes
    to replace the old.
  - Fixed incorrect KDC response when no-cross realm TGT exists,
    allowing client requests to fail quickly rather than time
    out after trying to get a correct answer from each KDC.
- Fixed heimdal-patched.diff.
- Removed Avoid_NULL_structure_pointer_member_dereference.patch,
  fixed upstream.</changelog>
  <changelog author="bwiedemann@suse.com" date="1533643200">- Add reproducible.patch to override build date (boo#1047218)
- Use constant hostname (boo#1084909)</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1561291200">- Update to version 7.7.0
  + Bug fixes:
  - PKCS#11 hcrypto back-end:
    + initialize the p11_module_load function list
    + verify that not only is a mechanism present but that its
    mechanism info states that it offers the required
    encryption, decryption or digest services
  - krb5:
    + Starting with 7.6, Heimdal permitted requesting
    authenticated anonymous tickets. However, it did not
    verify that a KDC in fact returned an anonymous ticket
    when one was requested.
    + Cease setting the KDCOption reaquest_anonymous flag when
    issuing S4UProxy (constrained delegation) TGS requests.
    + when the Win2K PKINIT compatibility option is set, do not
    require krbtgt otherName to match when validating KDC
    certificate.
    + set PKINIT_BTMM flag per Apple implementation
    + use memset_s() instead of memset()
  - kdc:
    + When generating KRB5SignedPath in the AS, use the reply
    client name rather than the one from the request, so
    validation will work correctly in the TGS.
    + allow checksum of PA-FOR-USER to be HMAC_MD5. Even if TGT
    used an enctype with a different checksum. Per [MS-SFU]
    2.2.1 PA-FOR-USER the checksum is always HMAC_MD5, and
    that's what Windows and MIT clients send.
    In Heimdal both the client and kdc use instead the
    checksum of the TGT, and therefore work with each other
    but Windows and MIT clients fail against Heimdal KDC.
    Both Windows and MIT KDC would allow any keyed checksum
    to be used so Heimdal client work fine against it.
    Change Heimdal KDC to allow HMAC_MD5 even for non RC4
    based TGT in order to support per-spec clients.
    + use memset_s() instead of memset()
    + Detect Heimdal 1.0 through 7.6 clients that issue
    S4UProxy (constrained delegation) TGS Requests with the
    request anonymous flag set. These requests will be
    treated as S4UProxy requests and not anonymous requests.
  - HDB:
    + Set SQLite3 backend default page size to 8KB.
    + Add hdb_set_sync() method
  - kadmind:
    + disable HDB sync during database load avoiding
    unnecessary disk i/o.
  - ipropd:
    + disable HDB sync during receive_everything. Doing an
    fsync per-record when receiving the complete HDB is a
    performance disaster. Among other things, if the HDB is
    very large, then one slave receving a full HDB can cause
    other slaves to timeout and, if HDB write activity is
    high enough to cause iprop log truncation, then also need
    full syncs, which leads to a cycle of full syncs for all
    slaves until HDB write activity drops.
    Allowing the iprop log to be larger helps, but improving
    receive_everything() performance helps even more.
  - kinit:
    + Anonymous PKINIT tickets discard the realm information
    used to locate the issuing AS. Store the issuing realm in
    the credentials cache in order to locate a KDC which can
    renew them.
    + Do not leak the result of krb5_cc_get_config() when
    determining anonymous PKINIT start realm.
  - klist:
    + Show transited-policy-checked, ok-as-delegate and
    anonymous flags when listing credentials.
  - tests:
    + Regenerate certs so that they expire before the 2038
    armageddon so the test suite will pass on 32-bit
    operating systems until the underlying issues can be
    resolved.
  - Solaris:
    + Define _STDC_C11_BCI for memset_s prototype
  - build tooling:
    + Convert from python 2 to python 3
  - documentation:
    + rename verify-password to verify-password-quality
    + hprop default mode is encrypt
    + kadmind "all" permission does not include "get-keys"
    + verify-password-quality might not be stateless
- Version 7.6.0
  + Security (#555):
  - CVE-2018-16860 Heimdal KDC: Reject PA-S4U2Self with unkeyed
    checksum
    When the Heimdal KDC checks the checksum that is placed on
    the S4U2Self packet by the server to protect the requested
    principal against modification, it does not confirm that
    the checksum algorithm that protects the user name
    (principal) in the request is keyed. This allows a
    man-in-the-middle attacker who can intercept the request to
    the KDC to modify the packet by replacing the user name
    (principal) in the request with any desired user name
    (principal) that exists in the KDC and replace the checksum
    protecting that name with a CRC32 checksum (which requires
    no prior knowledge to compute).
    This would allow a S4U2Self ticket requested on behalf of
    user name (principal) user@EXAMPLE.COM to any service to be
    changed to a S4U2Self ticket with a user name (principal) of
    Administrator@EXAMPLE.COM. This ticket would then contain
    the PAC of the modified user name (principal).
  - CVE-2019-12098, client-only:
    RFC8062 Section 7 requires verification of the PA-PKINIT-KX
    key exchange when anonymous PKINIT is used. Failure to do
    so can permit an active attacker to become a
    man-in-the-middle.
  + Bug fixes:
  - Happy eyeballs: Don't wait for responses from
    known-unreachable KDCs.
  - kdc:
    + check return copy_Realm, copy_PrincipalName,
    copy_EncryptionKey
  - kinit:
    + cleanup temporary ccaches
    + see man page for "kinit --anonymous" command line syntax
    change
  - kdc:
    + Make anonymous AS-requests more RFC8062-compliant.
    Updated expired test certificates
  - Solaris:
    + PKCS#11 hcrypto backend broken since 7.0.1
    + Building with Sun Pro C
  + Features:
  - kuser: support authenticated anonymous AS-REQs in kinit
  - kdc: support for anonymous TGS-REQs
  - kgetcred support for anonymous service tickets
  - Support builds with OpenSSL 1.1.1
- fixed heimdal-patched.diff and reproducible.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1653480000">- Apply Shared Library Packaging Policy and resolve rpmlint
  errors like "libheimdal.x86_64: E: shlib-policy-name-error
  SONAME: libasn1.so.8, expected package suffix: 8"</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656417600">- Add heimdal-7.7.0-autoconf-2.70.patch: Fix build with autoconf
  2.70 (gh#heimdal/heimdal#856).</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656590400">- Add ldconfig scriptlets.
- Fix 'Conflicts:' tags.
- Remove obsolete macros and conditionals.
- Ran spec-cleaner.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1671624000">- Update to version 7.8.0
  + This release includes both the Heimdal 7.7.1 Security
    Vulnerability fixes and non-Security bug fixes/improvements.
  + Security Vulnerabilities:
  - CVE-2022-42898 PAC parse integer overflows
  - CVE-2022-3437 Overflows and non-constant time leaks in
    DES{,3} and arcfour
  - CVE-2022-41916 Fix Unicode normalization read of 1 bytes past
    end of array
  - CVE-2021-44758 A null pointer de-reference DoS in SPNEGO
    acceptors
  - CVE-2021-3671 A null pointer de-reference when handling
    missing sname in TGS-REQ
  - CVE-2022-44640 Heimdal KDC: invalid free in ASN.1 codec
    Note that CVE-2022-44640 is a severe vulnerability,
    possibly a 10.0 on the Common Vulnerability Scoring
    System (CVSS) v3, as we believe it should be possible to
    get an RCE on a KDC, which means that credentials can be
    compromised that can be used to impersonate anyone in a
    realm or forest of realms.
    Heimdal's ASN.1 compiler generates code that allows
    specially crafted DER encodings of CHOICEs to invoke the
    wrong free function on the decoded structure upon decode
    error. This is known to impact the Heimdal KDC, leading to
    an invalid free() of an address partly or wholly under the
    control of the attacker, in turn leading to a potential
    remote code execution (RCE) vulnerability.
    This error affects the DER codec for all extensible CHOICE
    types used in Heimdal, though not all cases will be
    exploitable. We have not completed a thorough analysis of
    all the Heimdal components affected, thus the Kerberos
    client, the X.509 library, and other parts, may be affected
    as well.
    This bug has been in Heimdal's ASN.1 compiler since 2005,
    but it may only affect Heimdal 1.6 and up. It was first
    reported by Douglas Bagnall, though it had been found
    independently by the Heimdal maintainers via fuzzing a few
    weeks earlier.
    While no zero-day exploit is known, such an exploit will
    likely be available soon after public disclosure.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  + Other changes:
  - Bugs found by UBSAN (including the incorrect encoding of
    unconstrained INTEGER value -1).
  - Errors found by the LLVM scan-build static analyzer.
  - Errors found by the valgrind memory debugger.
  - Work around GCC Bug 95189 (memcmp wrongly stripped like
    strcmp).
  - Correct ASN.1 OID typo for SHA-384
  - Fix a deadlock in in the MEMORY ccache type.
  - TGS: strip forwardable and proxiable flags if the server is
    disallowed.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  - Incremental HDB propagation improvements
    Refactor send_diffs making it progressive
    Handle partial writes on non-blocking sockets
    Disable Nagle in iprop master and slave
    Use async I/O
    Don't send I_HAVE in response to AYT
    Do not recover log in kadm5_get_principal()
    Don't send diffs to slaves with not yet known version
    Don't stutter in send_diffs
  - Optional backwards-compatible anon-pkinit behavior
- Removed heimdal-7.7.0-autoconf-2.70.patch, fixed upstream.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1673352000">- replace libheimdal conflicts by obsoletes / provides to provide a
  smooth update in the new libheimdal-devel.</changelog>
</package>
<package pkgid="e6a6af8ea098dba8260aef369eea3335b4ec68bc12c812bd4ace50f6bb3b040e" name="libotp0" arch="i586">
  <version epoch="0" ver="7.8.0" rel="bp154.2.4.1"/>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1440936000">- Initial package, version 1.6rc2
- Added patch heimdal-version-script-client.map.patch to add file
  version-script-client.map (File is present in git for tag 1.6rc2
  but missing in tarball).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441108800">- Some changes in spec file to enable build for SLES.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441195200">- Added Conflicts tags to spec file because devel package conflicts
  with krb5-devel and krb5-mini-devel.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441454400">- Added a patched instead of the original tarball because only
  shared libraries will be build and source files of these (not to
  be build) programs have problematic licenses.
- Added script heimdal-patch-source.sh to sources.
- Added patch heimdal-patched.diff that fixes configure.ac and
  several Makefile.am files to successfully build patched source.
- Removed unneeded dependencies in spec file for build.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1483790400">- Update to version 7.1.0
- Removed heimdal-version-script-client.map.patch, fixed upstream.
- Fixed heimdal-patched.diff.
- Unfortunately there is no updated changelog file in tarball,
  changes can be seen in source code version control systems
  history log.</changelog>
  <changelog author="jengelh@inai.de" date="1486036800">- Summary and RPM group update. Do a direct call to ldconfig
  where possible.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1497528000">- Update to version 7.3.0
  - Security
    + Fix transit path validation. Commit f469fc6 (2010-10-02)
    inadvertently caused the previous hop realm to not be added
    to the transit path of issued tickets. This may, in some
    cases, enable bypass of capath policy in Heimdal versions 1.5
    through 7.2.
    Note, this may break sites that rely on the bug. With the bug
    some incomplete [capaths] worked, that should not have.
    These may now break authentication in some cross-realm
    configurations. (CVE-2017-6594)
- Version 7.2.0
  - Bug fixes
    + Portability improvements.
    + More strict parsing of encoded URI components in HTTP KDC.
    + Fixed memory leak in malloc error recovery in NTLM GSSAPI
    mechanism.
    + Avoid overly specific CPU info in krb5-config in aid of
    reproducible builds.
    + Don't do AFS string-to-key tests when feature is disabled.
    + Skip mdb_stat test when the command is not available.
    + Windows: update SHA2 timestamp server.
    + hdb: add missing export
    hdb_generate_key_set_password_with_ks_tuple.
    + Fix signature of hdb_generate_key_set_password().
    + Windows: enable KX509 support in the KDC.
    + kdc: fix kx509 service principal match.
    + iprop: handle case where master sends nothing new.
    + ipropd-slave: fix incorrect error codes.
    + Allow choice of sqlite for HDB pref.
    + check-iprop: don't fail to kill daemons.
    + roken: pidfile -&gt; rk_pidfile.
    + kdc: _kdc_do_kx509 fix use after free error.
    + Do not detect x32 as 64-bit platform.
    + No sys/ttydefaults.h on CYGWIN.
    + Fix check-iprop races.
    + roken_detach_prep() close pipe.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1501761600">- Update to version 7.4.0
  - Security
  - Fix CVE-2017-11103: Orpheus' Lyre KDC-REP service name
    validation.
    This is a critical vulnerability.
    In _krb5_extract_ticket() the KDC-REP service name must be
    obtained from encrypted version stored in 'enc_part' instead
    of the unencrypted version stored in 'ticket'.
    Use of the unecrypted version provides an opportunity for
    successful server impersonation and other attacks.
    Identified by Jeffrey Altman, Viktor Duchovni and
    Nico Williams.
    See https://www.orpheus-lyre.info/ for more details.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1512648000">- Added Avoid_NULL_structure_pointer_member_dereference.patch,
  fixes (bsc#1071675).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1514548800">- Update to version 7.5.0
  - Security
  - Fix CVE-2017-17439, which is a remote denial of service
    vulnerability:
    In Heimdal 7.1 through 7.4, remote unauthenticated attackers
    are able to crash the KDC by sending a crafted UDP packet
    containing empty data fields for client name or realm.
  - Bug fixes
  - Handle long input lines when reloading database dumps.
  - In pre-forked mode (default on Unix), correctly clear the
    process ids of exited children, allowing new child processes
    to replace the old.
  - Fixed incorrect KDC response when no-cross realm TGT exists,
    allowing client requests to fail quickly rather than time
    out after trying to get a correct answer from each KDC.
- Fixed heimdal-patched.diff.
- Removed Avoid_NULL_structure_pointer_member_dereference.patch,
  fixed upstream.</changelog>
  <changelog author="bwiedemann@suse.com" date="1533643200">- Add reproducible.patch to override build date (boo#1047218)
- Use constant hostname (boo#1084909)</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1561291200">- Update to version 7.7.0
  + Bug fixes:
  - PKCS#11 hcrypto back-end:
    + initialize the p11_module_load function list
    + verify that not only is a mechanism present but that its
    mechanism info states that it offers the required
    encryption, decryption or digest services
  - krb5:
    + Starting with 7.6, Heimdal permitted requesting
    authenticated anonymous tickets. However, it did not
    verify that a KDC in fact returned an anonymous ticket
    when one was requested.
    + Cease setting the KDCOption reaquest_anonymous flag when
    issuing S4UProxy (constrained delegation) TGS requests.
    + when the Win2K PKINIT compatibility option is set, do not
    require krbtgt otherName to match when validating KDC
    certificate.
    + set PKINIT_BTMM flag per Apple implementation
    + use memset_s() instead of memset()
  - kdc:
    + When generating KRB5SignedPath in the AS, use the reply
    client name rather than the one from the request, so
    validation will work correctly in the TGS.
    + allow checksum of PA-FOR-USER to be HMAC_MD5. Even if TGT
    used an enctype with a different checksum. Per [MS-SFU]
    2.2.1 PA-FOR-USER the checksum is always HMAC_MD5, and
    that's what Windows and MIT clients send.
    In Heimdal both the client and kdc use instead the
    checksum of the TGT, and therefore work with each other
    but Windows and MIT clients fail against Heimdal KDC.
    Both Windows and MIT KDC would allow any keyed checksum
    to be used so Heimdal client work fine against it.
    Change Heimdal KDC to allow HMAC_MD5 even for non RC4
    based TGT in order to support per-spec clients.
    + use memset_s() instead of memset()
    + Detect Heimdal 1.0 through 7.6 clients that issue
    S4UProxy (constrained delegation) TGS Requests with the
    request anonymous flag set. These requests will be
    treated as S4UProxy requests and not anonymous requests.
  - HDB:
    + Set SQLite3 backend default page size to 8KB.
    + Add hdb_set_sync() method
  - kadmind:
    + disable HDB sync during database load avoiding
    unnecessary disk i/o.
  - ipropd:
    + disable HDB sync during receive_everything. Doing an
    fsync per-record when receiving the complete HDB is a
    performance disaster. Among other things, if the HDB is
    very large, then one slave receving a full HDB can cause
    other slaves to timeout and, if HDB write activity is
    high enough to cause iprop log truncation, then also need
    full syncs, which leads to a cycle of full syncs for all
    slaves until HDB write activity drops.
    Allowing the iprop log to be larger helps, but improving
    receive_everything() performance helps even more.
  - kinit:
    + Anonymous PKINIT tickets discard the realm information
    used to locate the issuing AS. Store the issuing realm in
    the credentials cache in order to locate a KDC which can
    renew them.
    + Do not leak the result of krb5_cc_get_config() when
    determining anonymous PKINIT start realm.
  - klist:
    + Show transited-policy-checked, ok-as-delegate and
    anonymous flags when listing credentials.
  - tests:
    + Regenerate certs so that they expire before the 2038
    armageddon so the test suite will pass on 32-bit
    operating systems until the underlying issues can be
    resolved.
  - Solaris:
    + Define _STDC_C11_BCI for memset_s prototype
  - build tooling:
    + Convert from python 2 to python 3
  - documentation:
    + rename verify-password to verify-password-quality
    + hprop default mode is encrypt
    + kadmind "all" permission does not include "get-keys"
    + verify-password-quality might not be stateless
- Version 7.6.0
  + Security (#555):
  - CVE-2018-16860 Heimdal KDC: Reject PA-S4U2Self with unkeyed
    checksum
    When the Heimdal KDC checks the checksum that is placed on
    the S4U2Self packet by the server to protect the requested
    principal against modification, it does not confirm that
    the checksum algorithm that protects the user name
    (principal) in the request is keyed. This allows a
    man-in-the-middle attacker who can intercept the request to
    the KDC to modify the packet by replacing the user name
    (principal) in the request with any desired user name
    (principal) that exists in the KDC and replace the checksum
    protecting that name with a CRC32 checksum (which requires
    no prior knowledge to compute).
    This would allow a S4U2Self ticket requested on behalf of
    user name (principal) user@EXAMPLE.COM to any service to be
    changed to a S4U2Self ticket with a user name (principal) of
    Administrator@EXAMPLE.COM. This ticket would then contain
    the PAC of the modified user name (principal).
  - CVE-2019-12098, client-only:
    RFC8062 Section 7 requires verification of the PA-PKINIT-KX
    key exchange when anonymous PKINIT is used. Failure to do
    so can permit an active attacker to become a
    man-in-the-middle.
  + Bug fixes:
  - Happy eyeballs: Don't wait for responses from
    known-unreachable KDCs.
  - kdc:
    + check return copy_Realm, copy_PrincipalName,
    copy_EncryptionKey
  - kinit:
    + cleanup temporary ccaches
    + see man page for "kinit --anonymous" command line syntax
    change
  - kdc:
    + Make anonymous AS-requests more RFC8062-compliant.
    Updated expired test certificates
  - Solaris:
    + PKCS#11 hcrypto backend broken since 7.0.1
    + Building with Sun Pro C
  + Features:
  - kuser: support authenticated anonymous AS-REQs in kinit
  - kdc: support for anonymous TGS-REQs
  - kgetcred support for anonymous service tickets
  - Support builds with OpenSSL 1.1.1
- fixed heimdal-patched.diff and reproducible.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1653480000">- Apply Shared Library Packaging Policy and resolve rpmlint
  errors like "libheimdal.x86_64: E: shlib-policy-name-error
  SONAME: libasn1.so.8, expected package suffix: 8"</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656417600">- Add heimdal-7.7.0-autoconf-2.70.patch: Fix build with autoconf
  2.70 (gh#heimdal/heimdal#856).</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656590400">- Add ldconfig scriptlets.
- Fix 'Conflicts:' tags.
- Remove obsolete macros and conditionals.
- Ran spec-cleaner.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1671624000">- Update to version 7.8.0
  + This release includes both the Heimdal 7.7.1 Security
    Vulnerability fixes and non-Security bug fixes/improvements.
  + Security Vulnerabilities:
  - CVE-2022-42898 PAC parse integer overflows
  - CVE-2022-3437 Overflows and non-constant time leaks in
    DES{,3} and arcfour
  - CVE-2022-41916 Fix Unicode normalization read of 1 bytes past
    end of array
  - CVE-2021-44758 A null pointer de-reference DoS in SPNEGO
    acceptors
  - CVE-2021-3671 A null pointer de-reference when handling
    missing sname in TGS-REQ
  - CVE-2022-44640 Heimdal KDC: invalid free in ASN.1 codec
    Note that CVE-2022-44640 is a severe vulnerability,
    possibly a 10.0 on the Common Vulnerability Scoring
    System (CVSS) v3, as we believe it should be possible to
    get an RCE on a KDC, which means that credentials can be
    compromised that can be used to impersonate anyone in a
    realm or forest of realms.
    Heimdal's ASN.1 compiler generates code that allows
    specially crafted DER encodings of CHOICEs to invoke the
    wrong free function on the decoded structure upon decode
    error. This is known to impact the Heimdal KDC, leading to
    an invalid free() of an address partly or wholly under the
    control of the attacker, in turn leading to a potential
    remote code execution (RCE) vulnerability.
    This error affects the DER codec for all extensible CHOICE
    types used in Heimdal, though not all cases will be
    exploitable. We have not completed a thorough analysis of
    all the Heimdal components affected, thus the Kerberos
    client, the X.509 library, and other parts, may be affected
    as well.
    This bug has been in Heimdal's ASN.1 compiler since 2005,
    but it may only affect Heimdal 1.6 and up. It was first
    reported by Douglas Bagnall, though it had been found
    independently by the Heimdal maintainers via fuzzing a few
    weeks earlier.
    While no zero-day exploit is known, such an exploit will
    likely be available soon after public disclosure.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  + Other changes:
  - Bugs found by UBSAN (including the incorrect encoding of
    unconstrained INTEGER value -1).
  - Errors found by the LLVM scan-build static analyzer.
  - Errors found by the valgrind memory debugger.
  - Work around GCC Bug 95189 (memcmp wrongly stripped like
    strcmp).
  - Correct ASN.1 OID typo for SHA-384
  - Fix a deadlock in in the MEMORY ccache type.
  - TGS: strip forwardable and proxiable flags if the server is
    disallowed.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  - Incremental HDB propagation improvements
    Refactor send_diffs making it progressive
    Handle partial writes on non-blocking sockets
    Disable Nagle in iprop master and slave
    Use async I/O
    Don't send I_HAVE in response to AYT
    Do not recover log in kadm5_get_principal()
    Don't send diffs to slaves with not yet known version
    Don't stutter in send_diffs
  - Optional backwards-compatible anon-pkinit behavior
- Removed heimdal-7.7.0-autoconf-2.70.patch, fixed upstream.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1673352000">- replace libheimdal conflicts by obsoletes / provides to provide a
  smooth update in the new libheimdal-devel.</changelog>
</package>
<package pkgid="a03a83405c6b61b17c5bcebbf547a100f0ddcdca17153c8e28efa863d8ec53c2" name="libotp0" arch="ppc64le">
  <version epoch="0" ver="7.8.0" rel="bp154.2.4.1"/>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1440936000">- Initial package, version 1.6rc2
- Added patch heimdal-version-script-client.map.patch to add file
  version-script-client.map (File is present in git for tag 1.6rc2
  but missing in tarball).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441108800">- Some changes in spec file to enable build for SLES.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441195200">- Added Conflicts tags to spec file because devel package conflicts
  with krb5-devel and krb5-mini-devel.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441454400">- Added a patched instead of the original tarball because only
  shared libraries will be build and source files of these (not to
  be build) programs have problematic licenses.
- Added script heimdal-patch-source.sh to sources.
- Added patch heimdal-patched.diff that fixes configure.ac and
  several Makefile.am files to successfully build patched source.
- Removed unneeded dependencies in spec file for build.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1483790400">- Update to version 7.1.0
- Removed heimdal-version-script-client.map.patch, fixed upstream.
- Fixed heimdal-patched.diff.
- Unfortunately there is no updated changelog file in tarball,
  changes can be seen in source code version control systems
  history log.</changelog>
  <changelog author="jengelh@inai.de" date="1486036800">- Summary and RPM group update. Do a direct call to ldconfig
  where possible.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1497528000">- Update to version 7.3.0
  - Security
    + Fix transit path validation. Commit f469fc6 (2010-10-02)
    inadvertently caused the previous hop realm to not be added
    to the transit path of issued tickets. This may, in some
    cases, enable bypass of capath policy in Heimdal versions 1.5
    through 7.2.
    Note, this may break sites that rely on the bug. With the bug
    some incomplete [capaths] worked, that should not have.
    These may now break authentication in some cross-realm
    configurations. (CVE-2017-6594)
- Version 7.2.0
  - Bug fixes
    + Portability improvements.
    + More strict parsing of encoded URI components in HTTP KDC.
    + Fixed memory leak in malloc error recovery in NTLM GSSAPI
    mechanism.
    + Avoid overly specific CPU info in krb5-config in aid of
    reproducible builds.
    + Don't do AFS string-to-key tests when feature is disabled.
    + Skip mdb_stat test when the command is not available.
    + Windows: update SHA2 timestamp server.
    + hdb: add missing export
    hdb_generate_key_set_password_with_ks_tuple.
    + Fix signature of hdb_generate_key_set_password().
    + Windows: enable KX509 support in the KDC.
    + kdc: fix kx509 service principal match.
    + iprop: handle case where master sends nothing new.
    + ipropd-slave: fix incorrect error codes.
    + Allow choice of sqlite for HDB pref.
    + check-iprop: don't fail to kill daemons.
    + roken: pidfile -&gt; rk_pidfile.
    + kdc: _kdc_do_kx509 fix use after free error.
    + Do not detect x32 as 64-bit platform.
    + No sys/ttydefaults.h on CYGWIN.
    + Fix check-iprop races.
    + roken_detach_prep() close pipe.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1501761600">- Update to version 7.4.0
  - Security
  - Fix CVE-2017-11103: Orpheus' Lyre KDC-REP service name
    validation.
    This is a critical vulnerability.
    In _krb5_extract_ticket() the KDC-REP service name must be
    obtained from encrypted version stored in 'enc_part' instead
    of the unencrypted version stored in 'ticket'.
    Use of the unecrypted version provides an opportunity for
    successful server impersonation and other attacks.
    Identified by Jeffrey Altman, Viktor Duchovni and
    Nico Williams.
    See https://www.orpheus-lyre.info/ for more details.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1512648000">- Added Avoid_NULL_structure_pointer_member_dereference.patch,
  fixes (bsc#1071675).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1514548800">- Update to version 7.5.0
  - Security
  - Fix CVE-2017-17439, which is a remote denial of service
    vulnerability:
    In Heimdal 7.1 through 7.4, remote unauthenticated attackers
    are able to crash the KDC by sending a crafted UDP packet
    containing empty data fields for client name or realm.
  - Bug fixes
  - Handle long input lines when reloading database dumps.
  - In pre-forked mode (default on Unix), correctly clear the
    process ids of exited children, allowing new child processes
    to replace the old.
  - Fixed incorrect KDC response when no-cross realm TGT exists,
    allowing client requests to fail quickly rather than time
    out after trying to get a correct answer from each KDC.
- Fixed heimdal-patched.diff.
- Removed Avoid_NULL_structure_pointer_member_dereference.patch,
  fixed upstream.</changelog>
  <changelog author="bwiedemann@suse.com" date="1533643200">- Add reproducible.patch to override build date (boo#1047218)
- Use constant hostname (boo#1084909)</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1561291200">- Update to version 7.7.0
  + Bug fixes:
  - PKCS#11 hcrypto back-end:
    + initialize the p11_module_load function list
    + verify that not only is a mechanism present but that its
    mechanism info states that it offers the required
    encryption, decryption or digest services
  - krb5:
    + Starting with 7.6, Heimdal permitted requesting
    authenticated anonymous tickets. However, it did not
    verify that a KDC in fact returned an anonymous ticket
    when one was requested.
    + Cease setting the KDCOption reaquest_anonymous flag when
    issuing S4UProxy (constrained delegation) TGS requests.
    + when the Win2K PKINIT compatibility option is set, do not
    require krbtgt otherName to match when validating KDC
    certificate.
    + set PKINIT_BTMM flag per Apple implementation
    + use memset_s() instead of memset()
  - kdc:
    + When generating KRB5SignedPath in the AS, use the reply
    client name rather than the one from the request, so
    validation will work correctly in the TGS.
    + allow checksum of PA-FOR-USER to be HMAC_MD5. Even if TGT
    used an enctype with a different checksum. Per [MS-SFU]
    2.2.1 PA-FOR-USER the checksum is always HMAC_MD5, and
    that's what Windows and MIT clients send.
    In Heimdal both the client and kdc use instead the
    checksum of the TGT, and therefore work with each other
    but Windows and MIT clients fail against Heimdal KDC.
    Both Windows and MIT KDC would allow any keyed checksum
    to be used so Heimdal client work fine against it.
    Change Heimdal KDC to allow HMAC_MD5 even for non RC4
    based TGT in order to support per-spec clients.
    + use memset_s() instead of memset()
    + Detect Heimdal 1.0 through 7.6 clients that issue
    S4UProxy (constrained delegation) TGS Requests with the
    request anonymous flag set. These requests will be
    treated as S4UProxy requests and not anonymous requests.
  - HDB:
    + Set SQLite3 backend default page size to 8KB.
    + Add hdb_set_sync() method
  - kadmind:
    + disable HDB sync during database load avoiding
    unnecessary disk i/o.
  - ipropd:
    + disable HDB sync during receive_everything. Doing an
    fsync per-record when receiving the complete HDB is a
    performance disaster. Among other things, if the HDB is
    very large, then one slave receving a full HDB can cause
    other slaves to timeout and, if HDB write activity is
    high enough to cause iprop log truncation, then also need
    full syncs, which leads to a cycle of full syncs for all
    slaves until HDB write activity drops.
    Allowing the iprop log to be larger helps, but improving
    receive_everything() performance helps even more.
  - kinit:
    + Anonymous PKINIT tickets discard the realm information
    used to locate the issuing AS. Store the issuing realm in
    the credentials cache in order to locate a KDC which can
    renew them.
    + Do not leak the result of krb5_cc_get_config() when
    determining anonymous PKINIT start realm.
  - klist:
    + Show transited-policy-checked, ok-as-delegate and
    anonymous flags when listing credentials.
  - tests:
    + Regenerate certs so that they expire before the 2038
    armageddon so the test suite will pass on 32-bit
    operating systems until the underlying issues can be
    resolved.
  - Solaris:
    + Define _STDC_C11_BCI for memset_s prototype
  - build tooling:
    + Convert from python 2 to python 3
  - documentation:
    + rename verify-password to verify-password-quality
    + hprop default mode is encrypt
    + kadmind "all" permission does not include "get-keys"
    + verify-password-quality might not be stateless
- Version 7.6.0
  + Security (#555):
  - CVE-2018-16860 Heimdal KDC: Reject PA-S4U2Self with unkeyed
    checksum
    When the Heimdal KDC checks the checksum that is placed on
    the S4U2Self packet by the server to protect the requested
    principal against modification, it does not confirm that
    the checksum algorithm that protects the user name
    (principal) in the request is keyed. This allows a
    man-in-the-middle attacker who can intercept the request to
    the KDC to modify the packet by replacing the user name
    (principal) in the request with any desired user name
    (principal) that exists in the KDC and replace the checksum
    protecting that name with a CRC32 checksum (which requires
    no prior knowledge to compute).
    This would allow a S4U2Self ticket requested on behalf of
    user name (principal) user@EXAMPLE.COM to any service to be
    changed to a S4U2Self ticket with a user name (principal) of
    Administrator@EXAMPLE.COM. This ticket would then contain
    the PAC of the modified user name (principal).
  - CVE-2019-12098, client-only:
    RFC8062 Section 7 requires verification of the PA-PKINIT-KX
    key exchange when anonymous PKINIT is used. Failure to do
    so can permit an active attacker to become a
    man-in-the-middle.
  + Bug fixes:
  - Happy eyeballs: Don't wait for responses from
    known-unreachable KDCs.
  - kdc:
    + check return copy_Realm, copy_PrincipalName,
    copy_EncryptionKey
  - kinit:
    + cleanup temporary ccaches
    + see man page for "kinit --anonymous" command line syntax
    change
  - kdc:
    + Make anonymous AS-requests more RFC8062-compliant.
    Updated expired test certificates
  - Solaris:
    + PKCS#11 hcrypto backend broken since 7.0.1
    + Building with Sun Pro C
  + Features:
  - kuser: support authenticated anonymous AS-REQs in kinit
  - kdc: support for anonymous TGS-REQs
  - kgetcred support for anonymous service tickets
  - Support builds with OpenSSL 1.1.1
- fixed heimdal-patched.diff and reproducible.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1653480000">- Apply Shared Library Packaging Policy and resolve rpmlint
  errors like "libheimdal.x86_64: E: shlib-policy-name-error
  SONAME: libasn1.so.8, expected package suffix: 8"</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656417600">- Add heimdal-7.7.0-autoconf-2.70.patch: Fix build with autoconf
  2.70 (gh#heimdal/heimdal#856).</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656590400">- Add ldconfig scriptlets.
- Fix 'Conflicts:' tags.
- Remove obsolete macros and conditionals.
- Ran spec-cleaner.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1671624000">- Update to version 7.8.0
  + This release includes both the Heimdal 7.7.1 Security
    Vulnerability fixes and non-Security bug fixes/improvements.
  + Security Vulnerabilities:
  - CVE-2022-42898 PAC parse integer overflows
  - CVE-2022-3437 Overflows and non-constant time leaks in
    DES{,3} and arcfour
  - CVE-2022-41916 Fix Unicode normalization read of 1 bytes past
    end of array
  - CVE-2021-44758 A null pointer de-reference DoS in SPNEGO
    acceptors
  - CVE-2021-3671 A null pointer de-reference when handling
    missing sname in TGS-REQ
  - CVE-2022-44640 Heimdal KDC: invalid free in ASN.1 codec
    Note that CVE-2022-44640 is a severe vulnerability,
    possibly a 10.0 on the Common Vulnerability Scoring
    System (CVSS) v3, as we believe it should be possible to
    get an RCE on a KDC, which means that credentials can be
    compromised that can be used to impersonate anyone in a
    realm or forest of realms.
    Heimdal's ASN.1 compiler generates code that allows
    specially crafted DER encodings of CHOICEs to invoke the
    wrong free function on the decoded structure upon decode
    error. This is known to impact the Heimdal KDC, leading to
    an invalid free() of an address partly or wholly under the
    control of the attacker, in turn leading to a potential
    remote code execution (RCE) vulnerability.
    This error affects the DER codec for all extensible CHOICE
    types used in Heimdal, though not all cases will be
    exploitable. We have not completed a thorough analysis of
    all the Heimdal components affected, thus the Kerberos
    client, the X.509 library, and other parts, may be affected
    as well.
    This bug has been in Heimdal's ASN.1 compiler since 2005,
    but it may only affect Heimdal 1.6 and up. It was first
    reported by Douglas Bagnall, though it had been found
    independently by the Heimdal maintainers via fuzzing a few
    weeks earlier.
    While no zero-day exploit is known, such an exploit will
    likely be available soon after public disclosure.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  + Other changes:
  - Bugs found by UBSAN (including the incorrect encoding of
    unconstrained INTEGER value -1).
  - Errors found by the LLVM scan-build static analyzer.
  - Errors found by the valgrind memory debugger.
  - Work around GCC Bug 95189 (memcmp wrongly stripped like
    strcmp).
  - Correct ASN.1 OID typo for SHA-384
  - Fix a deadlock in in the MEMORY ccache type.
  - TGS: strip forwardable and proxiable flags if the server is
    disallowed.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  - Incremental HDB propagation improvements
    Refactor send_diffs making it progressive
    Handle partial writes on non-blocking sockets
    Disable Nagle in iprop master and slave
    Use async I/O
    Don't send I_HAVE in response to AYT
    Do not recover log in kadm5_get_principal()
    Don't send diffs to slaves with not yet known version
    Don't stutter in send_diffs
  - Optional backwards-compatible anon-pkinit behavior
- Removed heimdal-7.7.0-autoconf-2.70.patch, fixed upstream.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1673352000">- replace libheimdal conflicts by obsoletes / provides to provide a
  smooth update in the new libheimdal-devel.</changelog>
</package>
<package pkgid="56c9857719b07713afd02386de288f9a219b6f7f6971e10382605a8b151555cd" name="libotp0" arch="s390x">
  <version epoch="0" ver="7.8.0" rel="bp154.2.4.1"/>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1440936000">- Initial package, version 1.6rc2
- Added patch heimdal-version-script-client.map.patch to add file
  version-script-client.map (File is present in git for tag 1.6rc2
  but missing in tarball).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441108800">- Some changes in spec file to enable build for SLES.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441195200">- Added Conflicts tags to spec file because devel package conflicts
  with krb5-devel and krb5-mini-devel.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441454400">- Added a patched instead of the original tarball because only
  shared libraries will be build and source files of these (not to
  be build) programs have problematic licenses.
- Added script heimdal-patch-source.sh to sources.
- Added patch heimdal-patched.diff that fixes configure.ac and
  several Makefile.am files to successfully build patched source.
- Removed unneeded dependencies in spec file for build.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1483790400">- Update to version 7.1.0
- Removed heimdal-version-script-client.map.patch, fixed upstream.
- Fixed heimdal-patched.diff.
- Unfortunately there is no updated changelog file in tarball,
  changes can be seen in source code version control systems
  history log.</changelog>
  <changelog author="jengelh@inai.de" date="1486036800">- Summary and RPM group update. Do a direct call to ldconfig
  where possible.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1497528000">- Update to version 7.3.0
  - Security
    + Fix transit path validation. Commit f469fc6 (2010-10-02)
    inadvertently caused the previous hop realm to not be added
    to the transit path of issued tickets. This may, in some
    cases, enable bypass of capath policy in Heimdal versions 1.5
    through 7.2.
    Note, this may break sites that rely on the bug. With the bug
    some incomplete [capaths] worked, that should not have.
    These may now break authentication in some cross-realm
    configurations. (CVE-2017-6594)
- Version 7.2.0
  - Bug fixes
    + Portability improvements.
    + More strict parsing of encoded URI components in HTTP KDC.
    + Fixed memory leak in malloc error recovery in NTLM GSSAPI
    mechanism.
    + Avoid overly specific CPU info in krb5-config in aid of
    reproducible builds.
    + Don't do AFS string-to-key tests when feature is disabled.
    + Skip mdb_stat test when the command is not available.
    + Windows: update SHA2 timestamp server.
    + hdb: add missing export
    hdb_generate_key_set_password_with_ks_tuple.
    + Fix signature of hdb_generate_key_set_password().
    + Windows: enable KX509 support in the KDC.
    + kdc: fix kx509 service principal match.
    + iprop: handle case where master sends nothing new.
    + ipropd-slave: fix incorrect error codes.
    + Allow choice of sqlite for HDB pref.
    + check-iprop: don't fail to kill daemons.
    + roken: pidfile -&gt; rk_pidfile.
    + kdc: _kdc_do_kx509 fix use after free error.
    + Do not detect x32 as 64-bit platform.
    + No sys/ttydefaults.h on CYGWIN.
    + Fix check-iprop races.
    + roken_detach_prep() close pipe.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1501761600">- Update to version 7.4.0
  - Security
  - Fix CVE-2017-11103: Orpheus' Lyre KDC-REP service name
    validation.
    This is a critical vulnerability.
    In _krb5_extract_ticket() the KDC-REP service name must be
    obtained from encrypted version stored in 'enc_part' instead
    of the unencrypted version stored in 'ticket'.
    Use of the unecrypted version provides an opportunity for
    successful server impersonation and other attacks.
    Identified by Jeffrey Altman, Viktor Duchovni and
    Nico Williams.
    See https://www.orpheus-lyre.info/ for more details.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1512648000">- Added Avoid_NULL_structure_pointer_member_dereference.patch,
  fixes (bsc#1071675).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1514548800">- Update to version 7.5.0
  - Security
  - Fix CVE-2017-17439, which is a remote denial of service
    vulnerability:
    In Heimdal 7.1 through 7.4, remote unauthenticated attackers
    are able to crash the KDC by sending a crafted UDP packet
    containing empty data fields for client name or realm.
  - Bug fixes
  - Handle long input lines when reloading database dumps.
  - In pre-forked mode (default on Unix), correctly clear the
    process ids of exited children, allowing new child processes
    to replace the old.
  - Fixed incorrect KDC response when no-cross realm TGT exists,
    allowing client requests to fail quickly rather than time
    out after trying to get a correct answer from each KDC.
- Fixed heimdal-patched.diff.
- Removed Avoid_NULL_structure_pointer_member_dereference.patch,
  fixed upstream.</changelog>
  <changelog author="bwiedemann@suse.com" date="1533643200">- Add reproducible.patch to override build date (boo#1047218)
- Use constant hostname (boo#1084909)</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1561291200">- Update to version 7.7.0
  + Bug fixes:
  - PKCS#11 hcrypto back-end:
    + initialize the p11_module_load function list
    + verify that not only is a mechanism present but that its
    mechanism info states that it offers the required
    encryption, decryption or digest services
  - krb5:
    + Starting with 7.6, Heimdal permitted requesting
    authenticated anonymous tickets. However, it did not
    verify that a KDC in fact returned an anonymous ticket
    when one was requested.
    + Cease setting the KDCOption reaquest_anonymous flag when
    issuing S4UProxy (constrained delegation) TGS requests.
    + when the Win2K PKINIT compatibility option is set, do not
    require krbtgt otherName to match when validating KDC
    certificate.
    + set PKINIT_BTMM flag per Apple implementation
    + use memset_s() instead of memset()
  - kdc:
    + When generating KRB5SignedPath in the AS, use the reply
    client name rather than the one from the request, so
    validation will work correctly in the TGS.
    + allow checksum of PA-FOR-USER to be HMAC_MD5. Even if TGT
    used an enctype with a different checksum. Per [MS-SFU]
    2.2.1 PA-FOR-USER the checksum is always HMAC_MD5, and
    that's what Windows and MIT clients send.
    In Heimdal both the client and kdc use instead the
    checksum of the TGT, and therefore work with each other
    but Windows and MIT clients fail against Heimdal KDC.
    Both Windows and MIT KDC would allow any keyed checksum
    to be used so Heimdal client work fine against it.
    Change Heimdal KDC to allow HMAC_MD5 even for non RC4
    based TGT in order to support per-spec clients.
    + use memset_s() instead of memset()
    + Detect Heimdal 1.0 through 7.6 clients that issue
    S4UProxy (constrained delegation) TGS Requests with the
    request anonymous flag set. These requests will be
    treated as S4UProxy requests and not anonymous requests.
  - HDB:
    + Set SQLite3 backend default page size to 8KB.
    + Add hdb_set_sync() method
  - kadmind:
    + disable HDB sync during database load avoiding
    unnecessary disk i/o.
  - ipropd:
    + disable HDB sync during receive_everything. Doing an
    fsync per-record when receiving the complete HDB is a
    performance disaster. Among other things, if the HDB is
    very large, then one slave receving a full HDB can cause
    other slaves to timeout and, if HDB write activity is
    high enough to cause iprop log truncation, then also need
    full syncs, which leads to a cycle of full syncs for all
    slaves until HDB write activity drops.
    Allowing the iprop log to be larger helps, but improving
    receive_everything() performance helps even more.
  - kinit:
    + Anonymous PKINIT tickets discard the realm information
    used to locate the issuing AS. Store the issuing realm in
    the credentials cache in order to locate a KDC which can
    renew them.
    + Do not leak the result of krb5_cc_get_config() when
    determining anonymous PKINIT start realm.
  - klist:
    + Show transited-policy-checked, ok-as-delegate and
    anonymous flags when listing credentials.
  - tests:
    + Regenerate certs so that they expire before the 2038
    armageddon so the test suite will pass on 32-bit
    operating systems until the underlying issues can be
    resolved.
  - Solaris:
    + Define _STDC_C11_BCI for memset_s prototype
  - build tooling:
    + Convert from python 2 to python 3
  - documentation:
    + rename verify-password to verify-password-quality
    + hprop default mode is encrypt
    + kadmind "all" permission does not include "get-keys"
    + verify-password-quality might not be stateless
- Version 7.6.0
  + Security (#555):
  - CVE-2018-16860 Heimdal KDC: Reject PA-S4U2Self with unkeyed
    checksum
    When the Heimdal KDC checks the checksum that is placed on
    the S4U2Self packet by the server to protect the requested
    principal against modification, it does not confirm that
    the checksum algorithm that protects the user name
    (principal) in the request is keyed. This allows a
    man-in-the-middle attacker who can intercept the request to
    the KDC to modify the packet by replacing the user name
    (principal) in the request with any desired user name
    (principal) that exists in the KDC and replace the checksum
    protecting that name with a CRC32 checksum (which requires
    no prior knowledge to compute).
    This would allow a S4U2Self ticket requested on behalf of
    user name (principal) user@EXAMPLE.COM to any service to be
    changed to a S4U2Self ticket with a user name (principal) of
    Administrator@EXAMPLE.COM. This ticket would then contain
    the PAC of the modified user name (principal).
  - CVE-2019-12098, client-only:
    RFC8062 Section 7 requires verification of the PA-PKINIT-KX
    key exchange when anonymous PKINIT is used. Failure to do
    so can permit an active attacker to become a
    man-in-the-middle.
  + Bug fixes:
  - Happy eyeballs: Don't wait for responses from
    known-unreachable KDCs.
  - kdc:
    + check return copy_Realm, copy_PrincipalName,
    copy_EncryptionKey
  - kinit:
    + cleanup temporary ccaches
    + see man page for "kinit --anonymous" command line syntax
    change
  - kdc:
    + Make anonymous AS-requests more RFC8062-compliant.
    Updated expired test certificates
  - Solaris:
    + PKCS#11 hcrypto backend broken since 7.0.1
    + Building with Sun Pro C
  + Features:
  - kuser: support authenticated anonymous AS-REQs in kinit
  - kdc: support for anonymous TGS-REQs
  - kgetcred support for anonymous service tickets
  - Support builds with OpenSSL 1.1.1
- fixed heimdal-patched.diff and reproducible.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1653480000">- Apply Shared Library Packaging Policy and resolve rpmlint
  errors like "libheimdal.x86_64: E: shlib-policy-name-error
  SONAME: libasn1.so.8, expected package suffix: 8"</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656417600">- Add heimdal-7.7.0-autoconf-2.70.patch: Fix build with autoconf
  2.70 (gh#heimdal/heimdal#856).</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656590400">- Add ldconfig scriptlets.
- Fix 'Conflicts:' tags.
- Remove obsolete macros and conditionals.
- Ran spec-cleaner.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1671624000">- Update to version 7.8.0
  + This release includes both the Heimdal 7.7.1 Security
    Vulnerability fixes and non-Security bug fixes/improvements.
  + Security Vulnerabilities:
  - CVE-2022-42898 PAC parse integer overflows
  - CVE-2022-3437 Overflows and non-constant time leaks in
    DES{,3} and arcfour
  - CVE-2022-41916 Fix Unicode normalization read of 1 bytes past
    end of array
  - CVE-2021-44758 A null pointer de-reference DoS in SPNEGO
    acceptors
  - CVE-2021-3671 A null pointer de-reference when handling
    missing sname in TGS-REQ
  - CVE-2022-44640 Heimdal KDC: invalid free in ASN.1 codec
    Note that CVE-2022-44640 is a severe vulnerability,
    possibly a 10.0 on the Common Vulnerability Scoring
    System (CVSS) v3, as we believe it should be possible to
    get an RCE on a KDC, which means that credentials can be
    compromised that can be used to impersonate anyone in a
    realm or forest of realms.
    Heimdal's ASN.1 compiler generates code that allows
    specially crafted DER encodings of CHOICEs to invoke the
    wrong free function on the decoded structure upon decode
    error. This is known to impact the Heimdal KDC, leading to
    an invalid free() of an address partly or wholly under the
    control of the attacker, in turn leading to a potential
    remote code execution (RCE) vulnerability.
    This error affects the DER codec for all extensible CHOICE
    types used in Heimdal, though not all cases will be
    exploitable. We have not completed a thorough analysis of
    all the Heimdal components affected, thus the Kerberos
    client, the X.509 library, and other parts, may be affected
    as well.
    This bug has been in Heimdal's ASN.1 compiler since 2005,
    but it may only affect Heimdal 1.6 and up. It was first
    reported by Douglas Bagnall, though it had been found
    independently by the Heimdal maintainers via fuzzing a few
    weeks earlier.
    While no zero-day exploit is known, such an exploit will
    likely be available soon after public disclosure.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  + Other changes:
  - Bugs found by UBSAN (including the incorrect encoding of
    unconstrained INTEGER value -1).
  - Errors found by the LLVM scan-build static analyzer.
  - Errors found by the valgrind memory debugger.
  - Work around GCC Bug 95189 (memcmp wrongly stripped like
    strcmp).
  - Correct ASN.1 OID typo for SHA-384
  - Fix a deadlock in in the MEMORY ccache type.
  - TGS: strip forwardable and proxiable flags if the server is
    disallowed.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  - Incremental HDB propagation improvements
    Refactor send_diffs making it progressive
    Handle partial writes on non-blocking sockets
    Disable Nagle in iprop master and slave
    Use async I/O
    Don't send I_HAVE in response to AYT
    Do not recover log in kadm5_get_principal()
    Don't send diffs to slaves with not yet known version
    Don't stutter in send_diffs
  - Optional backwards-compatible anon-pkinit behavior
- Removed heimdal-7.7.0-autoconf-2.70.patch, fixed upstream.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1673352000">- replace libheimdal conflicts by obsoletes / provides to provide a
  smooth update in the new libheimdal-devel.</changelog>
</package>
<package pkgid="2759dc6262c963a909d6c71f9ee2a0166033d482bb786f65c66cf682b6507d98" name="libotp0" arch="x86_64">
  <version epoch="0" ver="7.8.0" rel="bp154.2.4.1"/>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1440936000">- Initial package, version 1.6rc2
- Added patch heimdal-version-script-client.map.patch to add file
  version-script-client.map (File is present in git for tag 1.6rc2
  but missing in tarball).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441108800">- Some changes in spec file to enable build for SLES.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441195200">- Added Conflicts tags to spec file because devel package conflicts
  with krb5-devel and krb5-mini-devel.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441454400">- Added a patched instead of the original tarball because only
  shared libraries will be build and source files of these (not to
  be build) programs have problematic licenses.
- Added script heimdal-patch-source.sh to sources.
- Added patch heimdal-patched.diff that fixes configure.ac and
  several Makefile.am files to successfully build patched source.
- Removed unneeded dependencies in spec file for build.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1483790400">- Update to version 7.1.0
- Removed heimdal-version-script-client.map.patch, fixed upstream.
- Fixed heimdal-patched.diff.
- Unfortunately there is no updated changelog file in tarball,
  changes can be seen in source code version control systems
  history log.</changelog>
  <changelog author="jengelh@inai.de" date="1486036800">- Summary and RPM group update. Do a direct call to ldconfig
  where possible.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1497528000">- Update to version 7.3.0
  - Security
    + Fix transit path validation. Commit f469fc6 (2010-10-02)
    inadvertently caused the previous hop realm to not be added
    to the transit path of issued tickets. This may, in some
    cases, enable bypass of capath policy in Heimdal versions 1.5
    through 7.2.
    Note, this may break sites that rely on the bug. With the bug
    some incomplete [capaths] worked, that should not have.
    These may now break authentication in some cross-realm
    configurations. (CVE-2017-6594)
- Version 7.2.0
  - Bug fixes
    + Portability improvements.
    + More strict parsing of encoded URI components in HTTP KDC.
    + Fixed memory leak in malloc error recovery in NTLM GSSAPI
    mechanism.
    + Avoid overly specific CPU info in krb5-config in aid of
    reproducible builds.
    + Don't do AFS string-to-key tests when feature is disabled.
    + Skip mdb_stat test when the command is not available.
    + Windows: update SHA2 timestamp server.
    + hdb: add missing export
    hdb_generate_key_set_password_with_ks_tuple.
    + Fix signature of hdb_generate_key_set_password().
    + Windows: enable KX509 support in the KDC.
    + kdc: fix kx509 service principal match.
    + iprop: handle case where master sends nothing new.
    + ipropd-slave: fix incorrect error codes.
    + Allow choice of sqlite for HDB pref.
    + check-iprop: don't fail to kill daemons.
    + roken: pidfile -&gt; rk_pidfile.
    + kdc: _kdc_do_kx509 fix use after free error.
    + Do not detect x32 as 64-bit platform.
    + No sys/ttydefaults.h on CYGWIN.
    + Fix check-iprop races.
    + roken_detach_prep() close pipe.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1501761600">- Update to version 7.4.0
  - Security
  - Fix CVE-2017-11103: Orpheus' Lyre KDC-REP service name
    validation.
    This is a critical vulnerability.
    In _krb5_extract_ticket() the KDC-REP service name must be
    obtained from encrypted version stored in 'enc_part' instead
    of the unencrypted version stored in 'ticket'.
    Use of the unecrypted version provides an opportunity for
    successful server impersonation and other attacks.
    Identified by Jeffrey Altman, Viktor Duchovni and
    Nico Williams.
    See https://www.orpheus-lyre.info/ for more details.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1512648000">- Added Avoid_NULL_structure_pointer_member_dereference.patch,
  fixes (bsc#1071675).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1514548800">- Update to version 7.5.0
  - Security
  - Fix CVE-2017-17439, which is a remote denial of service
    vulnerability:
    In Heimdal 7.1 through 7.4, remote unauthenticated attackers
    are able to crash the KDC by sending a crafted UDP packet
    containing empty data fields for client name or realm.
  - Bug fixes
  - Handle long input lines when reloading database dumps.
  - In pre-forked mode (default on Unix), correctly clear the
    process ids of exited children, allowing new child processes
    to replace the old.
  - Fixed incorrect KDC response when no-cross realm TGT exists,
    allowing client requests to fail quickly rather than time
    out after trying to get a correct answer from each KDC.
- Fixed heimdal-patched.diff.
- Removed Avoid_NULL_structure_pointer_member_dereference.patch,
  fixed upstream.</changelog>
  <changelog author="bwiedemann@suse.com" date="1533643200">- Add reproducible.patch to override build date (boo#1047218)
- Use constant hostname (boo#1084909)</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1561291200">- Update to version 7.7.0
  + Bug fixes:
  - PKCS#11 hcrypto back-end:
    + initialize the p11_module_load function list
    + verify that not only is a mechanism present but that its
    mechanism info states that it offers the required
    encryption, decryption or digest services
  - krb5:
    + Starting with 7.6, Heimdal permitted requesting
    authenticated anonymous tickets. However, it did not
    verify that a KDC in fact returned an anonymous ticket
    when one was requested.
    + Cease setting the KDCOption reaquest_anonymous flag when
    issuing S4UProxy (constrained delegation) TGS requests.
    + when the Win2K PKINIT compatibility option is set, do not
    require krbtgt otherName to match when validating KDC
    certificate.
    + set PKINIT_BTMM flag per Apple implementation
    + use memset_s() instead of memset()
  - kdc:
    + When generating KRB5SignedPath in the AS, use the reply
    client name rather than the one from the request, so
    validation will work correctly in the TGS.
    + allow checksum of PA-FOR-USER to be HMAC_MD5. Even if TGT
    used an enctype with a different checksum. Per [MS-SFU]
    2.2.1 PA-FOR-USER the checksum is always HMAC_MD5, and
    that's what Windows and MIT clients send.
    In Heimdal both the client and kdc use instead the
    checksum of the TGT, and therefore work with each other
    but Windows and MIT clients fail against Heimdal KDC.
    Both Windows and MIT KDC would allow any keyed checksum
    to be used so Heimdal client work fine against it.
    Change Heimdal KDC to allow HMAC_MD5 even for non RC4
    based TGT in order to support per-spec clients.
    + use memset_s() instead of memset()
    + Detect Heimdal 1.0 through 7.6 clients that issue
    S4UProxy (constrained delegation) TGS Requests with the
    request anonymous flag set. These requests will be
    treated as S4UProxy requests and not anonymous requests.
  - HDB:
    + Set SQLite3 backend default page size to 8KB.
    + Add hdb_set_sync() method
  - kadmind:
    + disable HDB sync during database load avoiding
    unnecessary disk i/o.
  - ipropd:
    + disable HDB sync during receive_everything. Doing an
    fsync per-record when receiving the complete HDB is a
    performance disaster. Among other things, if the HDB is
    very large, then one slave receving a full HDB can cause
    other slaves to timeout and, if HDB write activity is
    high enough to cause iprop log truncation, then also need
    full syncs, which leads to a cycle of full syncs for all
    slaves until HDB write activity drops.
    Allowing the iprop log to be larger helps, but improving
    receive_everything() performance helps even more.
  - kinit:
    + Anonymous PKINIT tickets discard the realm information
    used to locate the issuing AS. Store the issuing realm in
    the credentials cache in order to locate a KDC which can
    renew them.
    + Do not leak the result of krb5_cc_get_config() when
    determining anonymous PKINIT start realm.
  - klist:
    + Show transited-policy-checked, ok-as-delegate and
    anonymous flags when listing credentials.
  - tests:
    + Regenerate certs so that they expire before the 2038
    armageddon so the test suite will pass on 32-bit
    operating systems until the underlying issues can be
    resolved.
  - Solaris:
    + Define _STDC_C11_BCI for memset_s prototype
  - build tooling:
    + Convert from python 2 to python 3
  - documentation:
    + rename verify-password to verify-password-quality
    + hprop default mode is encrypt
    + kadmind "all" permission does not include "get-keys"
    + verify-password-quality might not be stateless
- Version 7.6.0
  + Security (#555):
  - CVE-2018-16860 Heimdal KDC: Reject PA-S4U2Self with unkeyed
    checksum
    When the Heimdal KDC checks the checksum that is placed on
    the S4U2Self packet by the server to protect the requested
    principal against modification, it does not confirm that
    the checksum algorithm that protects the user name
    (principal) in the request is keyed. This allows a
    man-in-the-middle attacker who can intercept the request to
    the KDC to modify the packet by replacing the user name
    (principal) in the request with any desired user name
    (principal) that exists in the KDC and replace the checksum
    protecting that name with a CRC32 checksum (which requires
    no prior knowledge to compute).
    This would allow a S4U2Self ticket requested on behalf of
    user name (principal) user@EXAMPLE.COM to any service to be
    changed to a S4U2Self ticket with a user name (principal) of
    Administrator@EXAMPLE.COM. This ticket would then contain
    the PAC of the modified user name (principal).
  - CVE-2019-12098, client-only:
    RFC8062 Section 7 requires verification of the PA-PKINIT-KX
    key exchange when anonymous PKINIT is used. Failure to do
    so can permit an active attacker to become a
    man-in-the-middle.
  + Bug fixes:
  - Happy eyeballs: Don't wait for responses from
    known-unreachable KDCs.
  - kdc:
    + check return copy_Realm, copy_PrincipalName,
    copy_EncryptionKey
  - kinit:
    + cleanup temporary ccaches
    + see man page for "kinit --anonymous" command line syntax
    change
  - kdc:
    + Make anonymous AS-requests more RFC8062-compliant.
    Updated expired test certificates
  - Solaris:
    + PKCS#11 hcrypto backend broken since 7.0.1
    + Building with Sun Pro C
  + Features:
  - kuser: support authenticated anonymous AS-REQs in kinit
  - kdc: support for anonymous TGS-REQs
  - kgetcred support for anonymous service tickets
  - Support builds with OpenSSL 1.1.1
- fixed heimdal-patched.diff and reproducible.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1653480000">- Apply Shared Library Packaging Policy and resolve rpmlint
  errors like "libheimdal.x86_64: E: shlib-policy-name-error
  SONAME: libasn1.so.8, expected package suffix: 8"</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656417600">- Add heimdal-7.7.0-autoconf-2.70.patch: Fix build with autoconf
  2.70 (gh#heimdal/heimdal#856).</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656590400">- Add ldconfig scriptlets.
- Fix 'Conflicts:' tags.
- Remove obsolete macros and conditionals.
- Ran spec-cleaner.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1671624000">- Update to version 7.8.0
  + This release includes both the Heimdal 7.7.1 Security
    Vulnerability fixes and non-Security bug fixes/improvements.
  + Security Vulnerabilities:
  - CVE-2022-42898 PAC parse integer overflows
  - CVE-2022-3437 Overflows and non-constant time leaks in
    DES{,3} and arcfour
  - CVE-2022-41916 Fix Unicode normalization read of 1 bytes past
    end of array
  - CVE-2021-44758 A null pointer de-reference DoS in SPNEGO
    acceptors
  - CVE-2021-3671 A null pointer de-reference when handling
    missing sname in TGS-REQ
  - CVE-2022-44640 Heimdal KDC: invalid free in ASN.1 codec
    Note that CVE-2022-44640 is a severe vulnerability,
    possibly a 10.0 on the Common Vulnerability Scoring
    System (CVSS) v3, as we believe it should be possible to
    get an RCE on a KDC, which means that credentials can be
    compromised that can be used to impersonate anyone in a
    realm or forest of realms.
    Heimdal's ASN.1 compiler generates code that allows
    specially crafted DER encodings of CHOICEs to invoke the
    wrong free function on the decoded structure upon decode
    error. This is known to impact the Heimdal KDC, leading to
    an invalid free() of an address partly or wholly under the
    control of the attacker, in turn leading to a potential
    remote code execution (RCE) vulnerability.
    This error affects the DER codec for all extensible CHOICE
    types used in Heimdal, though not all cases will be
    exploitable. We have not completed a thorough analysis of
    all the Heimdal components affected, thus the Kerberos
    client, the X.509 library, and other parts, may be affected
    as well.
    This bug has been in Heimdal's ASN.1 compiler since 2005,
    but it may only affect Heimdal 1.6 and up. It was first
    reported by Douglas Bagnall, though it had been found
    independently by the Heimdal maintainers via fuzzing a few
    weeks earlier.
    While no zero-day exploit is known, such an exploit will
    likely be available soon after public disclosure.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  + Other changes:
  - Bugs found by UBSAN (including the incorrect encoding of
    unconstrained INTEGER value -1).
  - Errors found by the LLVM scan-build static analyzer.
  - Errors found by the valgrind memory debugger.
  - Work around GCC Bug 95189 (memcmp wrongly stripped like
    strcmp).
  - Correct ASN.1 OID typo for SHA-384
  - Fix a deadlock in in the MEMORY ccache type.
  - TGS: strip forwardable and proxiable flags if the server is
    disallowed.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  - Incremental HDB propagation improvements
    Refactor send_diffs making it progressive
    Handle partial writes on non-blocking sockets
    Disable Nagle in iprop master and slave
    Use async I/O
    Don't send I_HAVE in response to AYT
    Do not recover log in kadm5_get_principal()
    Don't send diffs to slaves with not yet known version
    Don't stutter in send_diffs
  - Optional backwards-compatible anon-pkinit behavior
- Removed heimdal-7.7.0-autoconf-2.70.patch, fixed upstream.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1673352000">- replace libheimdal conflicts by obsoletes / provides to provide a
  smooth update in the new libheimdal-devel.</changelog>
</package>
<package pkgid="fafc44a5f1f6bc68b6160153e72360bcaeed1be49cacc1965328459c835521af" name="libptl2" arch="aarch64">
  <version epoch="0" ver="2.3.3" rel="bp154.2.1"/>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1613217600">- Initial package.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1613217601">- Ensure neutrality of description; mention base thread library
  used.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1638446400">- Update to version 2.2.0:
  * New/improved support for initialization and finalization
    routines in ThreadPool.
- Changes from version 2.1.0:
  * Fix C++20 warnings from GCC 11.2.0.
  * Removed timemory.
  * Springclean CMake scripts and developer/client build/use
    interfaces.
- Changes from version 2.0.0:
  * Fixed memory leak issues in VUserTaskQueue.
  * removed VTaskGroup.
  * merged TaskGroup and TBBTaskGroup:
  - TBBTaskGroup is just an alias now.
  - TaskGroup will handle determine whether ThreadPool is TBB
    and submit tasks accordingly.
  * use tbb::task_arena in order to enable master/worker paradigm:
    full support for ThreadPool::execute_on_all_threads,
    ThreadPool::execute_on_specific_threads in TBB mode.
  * renamed many functions/fields to "main" instead of "master".
  * VTask no longer holds a pointer to task group: this was
    causing a data-race issue.
  * cmake option PTL_USE_LOCKS to enable mutex locking in
    scheduler instead of lock-free scheme.
  * removed unused numActThreads.
  * wait() member function for tasks.
- Add PTL-incorrect-pthread-requires-in-pkgconfig.patch to drop
  an incorrect Requires on pthread in the pkgconfig file that
  causes pkgconfig to automatically add unresolvable Requires to
  the %{name}-devel rpm package [gh#jrmadsen/PTL#21].
- Update location of packaged cmake and pkgconfig files in keeping
  with upstream fixes.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1638532800">- Update to version 2.2.1:
  * ThreadPool.h: fix typo by @stephanlachnit
    [gh#jrmadsen/PTL#20].
  * pkgconfig: Use Libs.private for "-pthread" flag by @badshah400
    [gh#jrmadsen/PTL#22].
- Drop PTL-incorrect-pthread-requires-in-pkgconfig.patch:
  incorporated upstream.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1638619200">- Update to version 2.3.0:
  * ThreadPool::Config [gh#jrmadsen/PTL#23].
  * Formatting updates [gh#jrmadsen/PTL#24].</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1642334400">- Update to version 2.3.1:
  * Threading: Fix GetNumberOfPhysicalCpus, it should never return
    zero [gh#jrmadsen/PTL#26].</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1652443200">- Update to version 2.3.3:
  * Fixed message which did not honor verbosity level.
- Change from version 2.3.2:
  * Support for BUILD_OBJECT_LIBS.</changelog>
</package>
<package pkgid="a3cca40eb4e48bfbeac25782a4628d947bcec3f563352cc0e83848fa0a6c482f" name="libptl2" arch="i586">
  <version epoch="0" ver="2.3.3" rel="bp154.2.1"/>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1613217600">- Initial package.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1613217601">- Ensure neutrality of description; mention base thread library
  used.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1638446400">- Update to version 2.2.0:
  * New/improved support for initialization and finalization
    routines in ThreadPool.
- Changes from version 2.1.0:
  * Fix C++20 warnings from GCC 11.2.0.
  * Removed timemory.
  * Springclean CMake scripts and developer/client build/use
    interfaces.
- Changes from version 2.0.0:
  * Fixed memory leak issues in VUserTaskQueue.
  * removed VTaskGroup.
  * merged TaskGroup and TBBTaskGroup:
  - TBBTaskGroup is just an alias now.
  - TaskGroup will handle determine whether ThreadPool is TBB
    and submit tasks accordingly.
  * use tbb::task_arena in order to enable master/worker paradigm:
    full support for ThreadPool::execute_on_all_threads,
    ThreadPool::execute_on_specific_threads in TBB mode.
  * renamed many functions/fields to "main" instead of "master".
  * VTask no longer holds a pointer to task group: this was
    causing a data-race issue.
  * cmake option PTL_USE_LOCKS to enable mutex locking in
    scheduler instead of lock-free scheme.
  * removed unused numActThreads.
  * wait() member function for tasks.
- Add PTL-incorrect-pthread-requires-in-pkgconfig.patch to drop
  an incorrect Requires on pthread in the pkgconfig file that
  causes pkgconfig to automatically add unresolvable Requires to
  the %{name}-devel rpm package [gh#jrmadsen/PTL#21].
- Update location of packaged cmake and pkgconfig files in keeping
  with upstream fixes.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1638532800">- Update to version 2.2.1:
  * ThreadPool.h: fix typo by @stephanlachnit
    [gh#jrmadsen/PTL#20].
  * pkgconfig: Use Libs.private for "-pthread" flag by @badshah400
    [gh#jrmadsen/PTL#22].
- Drop PTL-incorrect-pthread-requires-in-pkgconfig.patch:
  incorporated upstream.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1638619200">- Update to version 2.3.0:
  * ThreadPool::Config [gh#jrmadsen/PTL#23].
  * Formatting updates [gh#jrmadsen/PTL#24].</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1642334400">- Update to version 2.3.1:
  * Threading: Fix GetNumberOfPhysicalCpus, it should never return
    zero [gh#jrmadsen/PTL#26].</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1652443200">- Update to version 2.3.3:
  * Fixed message which did not honor verbosity level.
- Change from version 2.3.2:
  * Support for BUILD_OBJECT_LIBS.</changelog>
</package>
<package pkgid="c4337c04b3b445dd7f245b7a33636f110f2c79f0ce029fc8208d95d7f4779ea4" name="libptl2" arch="ppc64le">
  <version epoch="0" ver="2.3.3" rel="bp154.2.1"/>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1613217600">- Initial package.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1613217601">- Ensure neutrality of description; mention base thread library
  used.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1638446400">- Update to version 2.2.0:
  * New/improved support for initialization and finalization
    routines in ThreadPool.
- Changes from version 2.1.0:
  * Fix C++20 warnings from GCC 11.2.0.
  * Removed timemory.
  * Springclean CMake scripts and developer/client build/use
    interfaces.
- Changes from version 2.0.0:
  * Fixed memory leak issues in VUserTaskQueue.
  * removed VTaskGroup.
  * merged TaskGroup and TBBTaskGroup:
  - TBBTaskGroup is just an alias now.
  - TaskGroup will handle determine whether ThreadPool is TBB
    and submit tasks accordingly.
  * use tbb::task_arena in order to enable master/worker paradigm:
    full support for ThreadPool::execute_on_all_threads,
    ThreadPool::execute_on_specific_threads in TBB mode.
  * renamed many functions/fields to "main" instead of "master".
  * VTask no longer holds a pointer to task group: this was
    causing a data-race issue.
  * cmake option PTL_USE_LOCKS to enable mutex locking in
    scheduler instead of lock-free scheme.
  * removed unused numActThreads.
  * wait() member function for tasks.
- Add PTL-incorrect-pthread-requires-in-pkgconfig.patch to drop
  an incorrect Requires on pthread in the pkgconfig file that
  causes pkgconfig to automatically add unresolvable Requires to
  the %{name}-devel rpm package [gh#jrmadsen/PTL#21].
- Update location of packaged cmake and pkgconfig files in keeping
  with upstream fixes.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1638532800">- Update to version 2.2.1:
  * ThreadPool.h: fix typo by @stephanlachnit
    [gh#jrmadsen/PTL#20].
  * pkgconfig: Use Libs.private for "-pthread" flag by @badshah400
    [gh#jrmadsen/PTL#22].
- Drop PTL-incorrect-pthread-requires-in-pkgconfig.patch:
  incorporated upstream.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1638619200">- Update to version 2.3.0:
  * ThreadPool::Config [gh#jrmadsen/PTL#23].
  * Formatting updates [gh#jrmadsen/PTL#24].</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1642334400">- Update to version 2.3.1:
  * Threading: Fix GetNumberOfPhysicalCpus, it should never return
    zero [gh#jrmadsen/PTL#26].</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1652443200">- Update to version 2.3.3:
  * Fixed message which did not honor verbosity level.
- Change from version 2.3.2:
  * Support for BUILD_OBJECT_LIBS.</changelog>
</package>
<package pkgid="cdf407fbddba64963717bb5fca3cb1ed361f98d3b695a310074958e61958a01b" name="libptl2" arch="s390x">
  <version epoch="0" ver="2.3.3" rel="bp154.2.1"/>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1613217600">- Initial package.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1613217601">- Ensure neutrality of description; mention base thread library
  used.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1638446400">- Update to version 2.2.0:
  * New/improved support for initialization and finalization
    routines in ThreadPool.
- Changes from version 2.1.0:
  * Fix C++20 warnings from GCC 11.2.0.
  * Removed timemory.
  * Springclean CMake scripts and developer/client build/use
    interfaces.
- Changes from version 2.0.0:
  * Fixed memory leak issues in VUserTaskQueue.
  * removed VTaskGroup.
  * merged TaskGroup and TBBTaskGroup:
  - TBBTaskGroup is just an alias now.
  - TaskGroup will handle determine whether ThreadPool is TBB
    and submit tasks accordingly.
  * use tbb::task_arena in order to enable master/worker paradigm:
    full support for ThreadPool::execute_on_all_threads,
    ThreadPool::execute_on_specific_threads in TBB mode.
  * renamed many functions/fields to "main" instead of "master".
  * VTask no longer holds a pointer to task group: this was
    causing a data-race issue.
  * cmake option PTL_USE_LOCKS to enable mutex locking in
    scheduler instead of lock-free scheme.
  * removed unused numActThreads.
  * wait() member function for tasks.
- Add PTL-incorrect-pthread-requires-in-pkgconfig.patch to drop
  an incorrect Requires on pthread in the pkgconfig file that
  causes pkgconfig to automatically add unresolvable Requires to
  the %{name}-devel rpm package [gh#jrmadsen/PTL#21].
- Update location of packaged cmake and pkgconfig files in keeping
  with upstream fixes.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1638532800">- Update to version 2.2.1:
  * ThreadPool.h: fix typo by @stephanlachnit
    [gh#jrmadsen/PTL#20].
  * pkgconfig: Use Libs.private for "-pthread" flag by @badshah400
    [gh#jrmadsen/PTL#22].
- Drop PTL-incorrect-pthread-requires-in-pkgconfig.patch:
  incorporated upstream.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1638619200">- Update to version 2.3.0:
  * ThreadPool::Config [gh#jrmadsen/PTL#23].
  * Formatting updates [gh#jrmadsen/PTL#24].</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1642334400">- Update to version 2.3.1:
  * Threading: Fix GetNumberOfPhysicalCpus, it should never return
    zero [gh#jrmadsen/PTL#26].</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1652443200">- Update to version 2.3.3:
  * Fixed message which did not honor verbosity level.
- Change from version 2.3.2:
  * Support for BUILD_OBJECT_LIBS.</changelog>
</package>
<package pkgid="cd5471a00ae90458b155dd43461c66e728a6a45e9a83dad492816e0f7f253345" name="libptl2" arch="x86_64">
  <version epoch="0" ver="2.3.3" rel="bp154.2.1"/>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1613217600">- Initial package.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1613217601">- Ensure neutrality of description; mention base thread library
  used.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1638446400">- Update to version 2.2.0:
  * New/improved support for initialization and finalization
    routines in ThreadPool.
- Changes from version 2.1.0:
  * Fix C++20 warnings from GCC 11.2.0.
  * Removed timemory.
  * Springclean CMake scripts and developer/client build/use
    interfaces.
- Changes from version 2.0.0:
  * Fixed memory leak issues in VUserTaskQueue.
  * removed VTaskGroup.
  * merged TaskGroup and TBBTaskGroup:
  - TBBTaskGroup is just an alias now.
  - TaskGroup will handle determine whether ThreadPool is TBB
    and submit tasks accordingly.
  * use tbb::task_arena in order to enable master/worker paradigm:
    full support for ThreadPool::execute_on_all_threads,
    ThreadPool::execute_on_specific_threads in TBB mode.
  * renamed many functions/fields to "main" instead of "master".
  * VTask no longer holds a pointer to task group: this was
    causing a data-race issue.
  * cmake option PTL_USE_LOCKS to enable mutex locking in
    scheduler instead of lock-free scheme.
  * removed unused numActThreads.
  * wait() member function for tasks.
- Add PTL-incorrect-pthread-requires-in-pkgconfig.patch to drop
  an incorrect Requires on pthread in the pkgconfig file that
  causes pkgconfig to automatically add unresolvable Requires to
  the %{name}-devel rpm package [gh#jrmadsen/PTL#21].
- Update location of packaged cmake and pkgconfig files in keeping
  with upstream fixes.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1638532800">- Update to version 2.2.1:
  * ThreadPool.h: fix typo by @stephanlachnit
    [gh#jrmadsen/PTL#20].
  * pkgconfig: Use Libs.private for "-pthread" flag by @badshah400
    [gh#jrmadsen/PTL#22].
- Drop PTL-incorrect-pthread-requires-in-pkgconfig.patch:
  incorporated upstream.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1638619200">- Update to version 2.3.0:
  * ThreadPool::Config [gh#jrmadsen/PTL#23].
  * Formatting updates [gh#jrmadsen/PTL#24].</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1642334400">- Update to version 2.3.1:
  * Threading: Fix GetNumberOfPhysicalCpus, it should never return
    zero [gh#jrmadsen/PTL#26].</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1652443200">- Update to version 2.3.3:
  * Fixed message which did not honor verbosity level.
- Change from version 2.3.2:
  * Support for BUILD_OBJECT_LIBS.</changelog>
</package>
<package pkgid="e2796c701bf3e07444ee44d5e37e89838a0b9f6234e8977ea772f6e9640361c4" name="libptytty" arch="src">
  <version epoch="0" ver="2.0" rel="bp154.2.1"/>
  <changelog author="tiwai@suse.de" date="1643371200">- Initial version: 2.0</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1646136000">- Remove old specfile constructs like BuildRoot.</changelog>
</package>
<package pkgid="5f69a35eef0ecbf6abfb0ecb99f139c3ec14f470f316eb272b69f98843ca5997" name="libptytty-devel" arch="aarch64">
  <version epoch="0" ver="2.0" rel="bp154.2.1"/>
  <changelog author="tiwai@suse.de" date="1643371200">- Initial version: 2.0</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1646136000">- Remove old specfile constructs like BuildRoot.</changelog>
</package>
<package pkgid="6847680df03b94fab19375dae46db2e7fe62b8214d39b8bb78f42091e16605cb" name="libptytty-devel" arch="i586">
  <version epoch="0" ver="2.0" rel="bp154.2.1"/>
  <changelog author="tiwai@suse.de" date="1643371200">- Initial version: 2.0</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1646136000">- Remove old specfile constructs like BuildRoot.</changelog>
</package>
<package pkgid="fd27ceb50e3adea2b45a7635eef2ec249d951ace95f2e3d79ba0c82abe931025" name="libptytty-devel" arch="ppc64le">
  <version epoch="0" ver="2.0" rel="bp154.2.1"/>
  <changelog author="tiwai@suse.de" date="1643371200">- Initial version: 2.0</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1646136000">- Remove old specfile constructs like BuildRoot.</changelog>
</package>
<package pkgid="a206c278126a39154df397e63b24b740e01c18431e94dc743e6e872ce050303c" name="libptytty-devel" arch="s390x">
  <version epoch="0" ver="2.0" rel="bp154.2.1"/>
  <changelog author="tiwai@suse.de" date="1643371200">- Initial version: 2.0</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1646136000">- Remove old specfile constructs like BuildRoot.</changelog>
</package>
<package pkgid="835590e601965f91d5debb697a4082c612547241f8116c1c9f1629a8f24baca4" name="libptytty-devel" arch="x86_64">
  <version epoch="0" ver="2.0" rel="bp154.2.1"/>
  <changelog author="tiwai@suse.de" date="1643371200">- Initial version: 2.0</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1646136000">- Remove old specfile constructs like BuildRoot.</changelog>
</package>
<package pkgid="3c7e152f871a532c2ea188f89fb5ba65ac8b020536b0654b6c85805c06700f26" name="libptytty0" arch="aarch64">
  <version epoch="0" ver="2.0" rel="bp154.2.1"/>
  <changelog author="tiwai@suse.de" date="1643371200">- Initial version: 2.0</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1646136000">- Remove old specfile constructs like BuildRoot.</changelog>
</package>
<package pkgid="0ac1534b14681c0d43293b83fadffefd3090a76c3459e29bfab464be8fa6e938" name="libptytty0" arch="i586">
  <version epoch="0" ver="2.0" rel="bp154.2.1"/>
  <changelog author="tiwai@suse.de" date="1643371200">- Initial version: 2.0</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1646136000">- Remove old specfile constructs like BuildRoot.</changelog>
</package>
<package pkgid="67ee162a807bdddcb6be0dc8388e46e23988868cd974c612ca67c7bd818b7abe" name="libptytty0" arch="ppc64le">
  <version epoch="0" ver="2.0" rel="bp154.2.1"/>
  <changelog author="tiwai@suse.de" date="1643371200">- Initial version: 2.0</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1646136000">- Remove old specfile constructs like BuildRoot.</changelog>
</package>
<package pkgid="e6bd555cd1cfbcad6a1dddc7e4c66ce792adab5a6bc24f5ddf3d475a2cf572d2" name="libptytty0" arch="s390x">
  <version epoch="0" ver="2.0" rel="bp154.2.1"/>
  <changelog author="tiwai@suse.de" date="1643371200">- Initial version: 2.0</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1646136000">- Remove old specfile constructs like BuildRoot.</changelog>
</package>
<package pkgid="8d6cf399356b5a93db472e868eda3da90d5a9a85f5c1b5099a7ac85f4a8c71ce" name="libptytty0" arch="x86_64">
  <version epoch="0" ver="2.0" rel="bp154.2.1"/>
  <changelog author="tiwai@suse.de" date="1643371200">- Initial version: 2.0</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1646136000">- Remove old specfile constructs like BuildRoot.</changelog>
</package>
<package pkgid="1a91a9d1f1a956285f3485bad7c8f6553165b41cb5f0817af3a62706ef30b168" name="libqt5-qtpdf-devel" arch="aarch64">
  <version epoch="0" ver="5.15.10" rel="bp154.2.3.2"/>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1613563200">- Add patch to fix sandbox with glibc 2.33 on 32bit:
  * sandbox-statx-futex_time64.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1615377600">- Can't use system_vpx on Leap 15.3</changelog>
  <changelog author="christophe@krop.fr" date="1616587200">- Update to version 5.15.3:
  * Fix spelling and coding style
  * Fix new view request handling (QTBUG-87378)
  * Fix getDefaultScreenId on X11
  * Fix flaky tst_QWebEngineView::textSelectionOutOfInputField test
  * Move touch input tests to separate testcase
  * Add touch input tests for scrolling and pinch zooming
  * Fix rare duplicate ids forming in touch point id's mapping
  * Use the module's version number for QtWebEngineProcess
  * Touch handling: provide id mapping without modifying TouchPoint instance
    (QTBUG-88001)
  * Touch handling: fix mapped ids cleanup for TouchCancel event
  * et custom headers from QWebEngineUrlRequestInfo before triggering redirect
    (QTBUG-88861)
  * Forward modifier flags for lock keys (QTBUG-89001)
  * Fix handling of more than one finger for touch event (QTBUG-86389)
  * Stabilize load signals emitting (QTBUG-65223, QTBUG-87089)
  * Fix building against 5.12 on most CIs
  * Update minimum HarfBuzz version to 2.4.0 (QTBUG-88976)
  * Fix building against Qt 5.14
  * Migrate user script IPC to mojo
  * Fix crashes in user resource controller when single process
  * Minor. Fix namespace for user resource controller
  * Minor. RenderThreadObserverQt is really a RenderConfiguration
  * Remove RenderViewObserverHelper from UserResourceController
  * Cache mojo interface bindings to UserResourceControllerRenderFrame
  * Cache mojo interface bindings for WebChannelIPCTransport
  * Migrate render_view_observer_qt to mojo
  * Fix crash on linkedin.com (QTBUG-89740)
  * Suppress error pages also for http errors if they are disabled
  * Fix leak in QQuickWebEngineViewPrivate::contextMenuRequested
  * Register PerformanceNode early enough
  * Quiet log on webrtc usage
  * Remove configure option that doesn't work
  * Remove Java build dependency
  * Fix blank popups in qml (QTBUG-86034)
  * Fix position of popup on qml (QTBUG-86034, QTBUG-89358)
  * Enable hangout services extension (QTBUG-85731)
  * Allow to fallback to default locale for non existent data packs (QTBUG-90490)
  * Support devtools close button
  * Do not extract download file names from certain url schemes (QTBUG-90355)
  * Leave room for the null-termination byte when checking remote drive path
    (QTBUG-90347)
  * Do not set open files limit for linking if not necessary
  * Remove even more remains of non network service code
  * Add back prefers-color-scheme support (QTBUG-89753)
  * Start supporting chrome.resourcesPrivate API (QTBUG-90035)
  * Enable chrome://user-actions WebUI
  * Remove remains of chrome://flash
  * Fix loadFinished signal if page has content but server sends HTTP error
    (QTBUG-90517)
  * Fix devtools page resource loading as raw data instead of html string
  * Remove frame metadata observer (RenderWidgetHostViewQt) on destroy
  * Resolve installed interceptors right before interception point (QTBUG-86286)
  * Update searches faster
  * Remove more leftovers of the old compositor
  * Enable webrtc logging and the corresponding WebUI
  * Support mips64el platform CPU(loongson 3A4000)
  * Add tracing UI resources
  * Fix crash on meet.google.com
  * Fix mad popup qquickwindows on wayland
  * Fix crashes on BrowserContext destruction
  * Fix crash on exit in quicknanobrowser when popup
  * Remove QtPdf dependency on nss at build-time
  * Avoid accessing profileAdapter when profile is shutting down (QTBUG-91187)
  * Do not flush messages form profile destructor
  * Ignore QQuickWebEngineNewViewRequest if it is unhandled
  * Fix ScopedGLContextChecker with QTWEBENGINE_DISABLE_GPU_THREAD=1
  * Don't send duplicate load progress values
  * Fix neon support in libpng
  * Do not call deprecated profile interceptor on ui thread (QTBUG-86267)
  * Add certificate error message for ERR_SSL_OBSOLETE_VERSION
  * Fix assert in WebContentsAdapter::devToolsFrontendDestroyed
  * Avoid to reject a certificate error twice in Quick
  * Fix PDF viewer plugin
  * FIXUP: Fix swap condition in DisplayGLOutputSurface::updatePaintNode
    (QTBUG-86599)
  * Fix favicon engine under device pixel scaling
  * Do not pass a native keycode matching the menu key when it is remapped
    (QTBUG-86672)
  * Optimize WebEngineSettings::testAttribute
  * Warn about QtWebengineProcess launching from network share (QTBUG-84632)
  * Handle non-ascii names for pulseaudio (QTBUG-85363)
  * Do not set audio device for desktop capture if audio loopback is unsupported
  * Fix new view request handling (QTBUG-87378)
  * Fix getDefaultScreenId on X11
  * Touch handling: provide id mapping without modifying TouchPoint instance
    (QTBUG-88001)
  * Set custom headers from QWebEngineUrlRequestInfo before triggering redirect
    (QTBUG-88861)
  * Stabilize load signals emitting (QTBUG-65223)
- CVE fixes backported in chromium updates:
  * CVE-2020-16044: Use after free in WebRTC
  * CVE-2021-21118: Heap buffer overflow in Blink
  * CVE-2021-21119: Use after free in Media
  * CVE-2021-21120: Use after free in WebSQL
  * CVE-2021-21121: Use after free in Omnibox
  * CVE-2021-21122: Use after free in Blink
  * CVE-2021-21123: Insufficient data validation in File System API
  * CVE-2021-21125: Insufficient policy enforcement in File System API
  * CVE-2021-21126: Insufficient policy enforcement in extensions
  * CVE-2021-21127: Insufficient policy enforcement in extensions
  * CVE-2021-21128: Heap buffer overflow in Blink
  * CVE-2021-21129: Insufficient policy enforcement in File System API
  * CVE-2021-21130: Insufficient policy enforcement in File System API
  * CVE-2021-21131: Insufficient policy enforcement in File System API
  * CVE-2021-21132: Inappropriate implementation in DevTools
  * CVE-2021-21135: Inappropriate implementation in Performance API
  * CVE-2021-21137: Inappropriate implementation in DevTools
  * CVE-2021-21140: Uninitialized Use in USB
  * CVE-2021-21141: Insufficient policy enforcement in File System API
  * CVE-2021-21145: Use after free in Fonts
  * CVE-2021-21146: Use after free in Navigation
  * CVE-2021-21147: Inappropriate implementation in Skia
  * CVE-2021-21148: Heap buffer overflow in V8
  * CVE-2021-21149: Stack overflow in Data Transfer
  * CVE-2021-21150: Use after free in Downloads
  * CVE-2021-21152: Heap buffer overflow in Media
  * CVE-2021-21153: Stack overflow in GPU Process
  * CVE-2021-21156: Heap buffer overflow in V8
  * CVE-2021-21157: Use after free in Web Sockets
- Drop obsolete patches:
  * icu-68.patch
  * icu-68-2.patch
- Rebase patches:
  * fix1163766.patch
  * sandbox-statx-futex_time64.patch
  * rtc-dont-use-h264.patch
  * chromium-glibc-2.33.patch
- Add patch to fix crash with certain locales:
  * 0001-Fix-normalization-of-app-locales.patch
- Clean the spec file a bit</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1618315200">- Add back missing part in fix1163766.patch (boo#1184610)</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1618401600">- Update _constraints to avoid OOM</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1618401601">- Add patch to fix build with GCC 11:
  * 0001-Fix-build-with-GCC-11.patch</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1620302400">- Add patch to fix build with ICU 69:
  * 0001-Fix-build-with-system-ICU-69.patch</changelog>
  <changelog author="christophe@krop.fr" date="1624363200">- Update to version 5.15.5:
  * Abort findText also right on explicit navigation request
  * Adapt to new Connections syntax
  * Add devtools eyedropper support
  * Add more tests to tst_loadsignals
  * Add support for Keyboard.getLayoutMap()
  * Add web-ui chrome://net-internals
  * Allow leaving OCSP off
  * Always send phased wheel events beginning with Began
  * Avoid accessing profileAdapter when profile is shutting down
  * Avoid unknownFunc messages in qmltests
  * Blacklist CertificateError::test_error for macOS
  * Blacklist NewViewRequest::test_loadNewViewRequest on macOS
  * Blacklist handleError on macos until we merge the fix
  * Blacklist numberOfStartedAndFinishedSignalsIsSame on b2q CIs
  * Depend on QCoreApplication::startingUp() for checking
    existence of app
  * Do not allow WebBluetooth to continue
  * Do not hide virtual keyboard if the focused node is editable
  * Doc: Add a note about navigation within a page to a fragment
  * Docs: Suggest to use higher DPI for printing
  * Fix FilePickerController's path validation for windows and
    corresponding tests
  * Fix application locales again
  * Fix embedded PDFs when plugins are disabled
  * Fix first party url for cookie filter
  * Fix inconsistent number of load signals and their order
  * Fix normalization of app locales
  * Fix not working certificates on mac &gt; 10.14
  * Fix prl files on ios
  * Fix qmltests::WebEngineViewNavigationHistory auto tests
  * Fix qtpdf static builds on windows
  * Fix static build of qml qtpdf
  * Follow InProcessGpuThread::Init() on thread priority
  * Generate mojo bindings before compiling extension API
    registration
  * Implement PluginServiceFilterQt
  * Load signals test: use focusProxy for link clicking test
  * Make able to override disabled features from command line
  * Notify canGoBack/canGoForward changes based on web actions
  * Only disconnect QWebEnginePage signals that QWebEngineView
    connected
  * Package devtools inspector overlay
  * Remove ResourceTypeSubFrame check after website update
  * Remove obsolete loadSignals test
    secondLoadForError_WhenErrorPageEnabled
  * Remove qquickwebengineprofile test
  * Remove tracking of frame which load error page
  * Remove ui/snapshot overrides for aura
  * Report server directs in navigation type
  * Return to using the default devtools page
  * Set enumaration root directory for File.webkitRelativePath API
  * Set more Display properties
  * Show PDF viewer in a guest view
  * Support devtools close button in QuickNanoBrowser
  * Support zoom-in, zoom-out and cell web cursors on macOS
  * Unblacklist and fix load signals test for file download
  * Update Chromium and adapt PermissionManagerQt
  * Update platform notes
  * View: test signal for deletion of external page set to view
- Drop patches:
  * 0001-Fix-normalization-of-app-locales.patch
  * 0001-Fix-build-with-GCC-11.patch
  * 0001-Fix-build-with-system-ICU-69.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1624536000">- Update the CMake version workaround to get qtbase's real version</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1628078400">- Add patch to fix build with glibc 2.34 (boo#1189095)
  * 0001-Fix-build-with-glibc-2.34.patch</changelog>
  <changelog author="christophe@krop.fr" date="1631188800">- Update to version 5.15.6:
  * Update Chromium:
    + [Backport] CVE-2021-30560: Use after free in Blink XSLT
    + [Backport] CVE-2021-30566: Stack buffer overflow in Printing
    + [Backport] CVE-2021-30585: Use after free in sensor handling
    + Bump V8_PATCH_LEVEL
    + [Backport] Security bug 1228036
    + [Backport] CVE-2021-30604: Use after free in ANGLE
    + [Backport] CVE-2021-30603: Race in WebAudio
    + [Backport] CVE-2021-30602: Use after free in WebRTC
    + [Backport] CVE-2021-30599: Type Confusion in V8
    + [Backport] CVE-2021-30598: Type Confusion in V8
    + [Backport] Security bug 1227933
    + [Backport] Security bug 1205059
    + [Backport] Security bug 1184294
    + [Backport] Security bug 1198385
    + [Backport] CVE-2021-30588: Type Confusion in V8
    + [Backport] CVE-2021-30587: Inappropriate implementation in Compositing on Windows
    + [Backport] CVE-2021-30573: Use after free in GPU
    + [Backport] CVE-2021-30569, security bugs 1198216 and 1204814
    + [Backport] CVE-2021-30568: Heap buffer overflow in WebGL
    + [Backport] CVE-2021-30541: Use after free in V8
    + [Backport] Security bugs 1197786 and 1194330
    + [Backport] Security bug 1194689
    + [Backport] CVE-2021-30563: Type Confusion in V8
    + [Backport] Security bug 1211215
    + [Backport] Security bug 1209558
    + [Backport] CVE-2021-30553: Use after free in Network service
    + [Backport] CVE-2021-30548: Use after free in Loader
    + [Backport] CVE-2021-30547: Out of bounds write in ANGLE
    + [Backport] CVE-2021-30556: Use after free in WebAudio
    + [Backport] CVE-2021-30559: Out of bounds write in ANGLE
    + [Backport] CVE-2021-30533: Insufficient policy enforcement in PopupBlocker
    + [Backport] Security bug 1202534
    + [Backport] CVE-2021-30536: Out of bounds read in V8
    + [Backport] CVE-2021-30522: Use after free in WebAudio
    + [Backport] CVE-2021-30554 Use after free in WebGL
    + [Backport] CVE-2021-30551: Type Confusion in V8
    + [Backport] CVE-2021-30544: Use after free in BFCache
    + [Backport] CVE-2021-30535: Double free in ICU
    + [Backport] CVE-2021-30534: Insufficient policy enforcement in iFrameSandbox
    + [Backport] CVE-2021-30530: Out of bounds memory access in WebAudio
    + [Backport] CVE-2021-30523: Use after free in WebRTC
    + Generate mojo bindings before compiling extension API registration
  * Bump version from 5.15.5 to 5.15.6
  * Always send phased wheel events beginning with Began
- Import patch from the chromium package:
  * 0001-return-ENOSYS-for-clone3.patch
- Add changes from the chromium package to
  0001-Fix-build-with-glibc-2.34.patch</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1632225600">- Add patches from Arch to fix build with HarfBuzz 3.0.0:
  * chromium-harfbuzz-3.0.0.patch
  * skia-harfbuzz-3.0.0.patch
- ... but don't break with &lt; 2.9.0:
  * chromium-older-harfbuzz.patch</changelog>
  <changelog author="christophe@krop.fr" date="1635508800">- Update to version 5.15.7:
  * Update Chromium:
    [Backport] Linux sandbox: update syscalls numbers on 32-bit platforms
    [Backport] sandbox: linux: allow clock_nanosleep &amp; gettime64
    [Backport] Linux sandbox: update syscall numbers for all platforms.
    [Backport] Ease HarfBuzz API change with feature detection
    [Backport] Security bug 1248665
    [Backport] CVE-2021-37975 : Use after free in V8
    [Backport] CVE-2021-37980 : Inappropriate implementation in Sandbox
    [Backport] CVE-2021-37979 : Heap buffer overflow in WebRTC (2/2)
    [Backport] CVE-2021-37979 : Heap buffer overflow in WebRTC (1/2)
    [Backport] CVE-2021-37978 : Heap buffer overflow in Blink
    [Backport] CVE-2021-30616: Use after free in Media.
    [Backport] CVE-2021-37962 : Use after free in Performance Manager (2/2)
    [Backport] CVE-2021-37962 : Use after free in Performance Manager (1/2)
    [Backport] CVE-2021-37973 : Use after free in Portals
    [Backport] CVE-2021-37971 : Incorrect security UI in Web Browser UI.
    [Backport] CVE-2021-37968 : Inappropriate implementation in Background Fetch API
    [Backport] CVE-2021-37967 : Inappropriate implementation in Background Fetch API
    [Backport] Linux sandbox: return ENOSYS for clone3
    [Backport] Linux sandbox: fix fstatat() crash
    [Backport] Reland "Reland "Linux sandbox syscall broker: use struct kernel_stat""
    [Backport] Security bug 1238178 (2/2)
    [Backport] Security bug 1238178 (1/2)
    [Backport] CVE-2021-30633: Use after free in Indexed DB API (2/2)
    [Backport] CVE-2021-30633: Use after free in Indexed DB API (1/2)
    [Backport] CVE-2021-30630: Inappropriate implementation in Blink
    [Backport] CVE-2021-30629: Use after free in Permissions
    [Backport] CVE-2021-30628: Stack buffer overflow in ANGLE
    [Backport] CVE-2021-30627: Type Confusion in Blink layout
    [Backport] CVE-2021-30626: Out of bounds memory access in ANGLE
    [Backport] CVE-2021-30625: Use after free in Selection API
    [Backport] Security bug 1206289
    [Backport] CVE-2021-30613: Use after free in Base internals
    [Backport] Security bug 1227228
    [Backport] CVE-2021-30618: Inappropriate implementation in DevTools
  * Update patch level
  * Blacklist certificate test until certicates have been renewed
  * Block CORS from local URLs when remote access is not enabled
  * Do not wait on weak_pointer for termination errors
  * Support MSVC_VER 16.8
  * Fix wrong save file filter for Markdown Editor example
  * Add Chromium version source documentation
  * Bump version from 5.15.6 to 5.15.7
  * Fix crash when clicking on a link in PDF
- Drop openSUSE patches:
  * fix1163766.patch. Should be addressed with:
    https://github.com/qt/qtwebengine-chromium/commit/652f834de
    https://github.com/qt/qtwebengine-chromium/commit/faae106ed
    https://github.com/qt/qtwebengine-chromium/commit/6b7b3f1bf
  * chromium-glibc-2.33.patch. Should be addressed with the
    [Backport] Linux sandbox: fix fstatat() crash and
    Reland "Reland "Linux sandbox syscall broker: use struct kernel_stat""
    changes.
  * chromium-older-harfbuzz.patch
- Drop upstream changes:
  * 0001-return-ENOSYS-for-clone3.patch
  * chromium-harfbuzz-3.0.0.patch
  * skia-harfbuzz-3.0.0.patch
- Rebase patches:
  * sandbox-statx-futex_time64.patch</changelog>
  <changelog author="christophe@krop.fr" date="1641297600">- Update to version 5.15.8:
  * Update Chromium:
    [Backport] CVE-2021-3517: libxml2: Heap-based buffer overflow
    in xmlEncodeEntitiesInternal() in entities.c
    [Backport] CVE-2021-3541 libxml2: Exponential entity expansion
    attack bypasses all existing protection mechanisms
    [Backport] CVE-2021-37984 : Heap buffer overflow in PDFium
    [Backport] CVE-2021-37987 : Use after free in Network APIs
    [Backport] CVE-2021-37989 : Inappropriate implementation in Blink
    [Backport] CVE-2021-37992 : Out of bounds read in WebAudio
    [Backport] CVE-2021-37993 : Use after free in PDF Accessibility
    [Backport] CVE-2021-37996 : Insufficient validation of untrusted
    input in Downloads
    [Backport] CVE-2021-38001 : Type Confusion in V8
    [Backport] CVE-2021-38003 : Inappropriate implementation in V8
    [Backport] CVE-2021-38005: Use after free in loader (1/3)
    [Backport] CVE-2021-38005: Use after free in loader (2/3)
    [Backport] CVE-2021-38005: Use after free in loader (3/3)
    [Backport] CVE-2021-38007: Type Confusion in V8
    [Backport] CVE-2021-38009: Inappropriate implementation in cache
    [Backport] CVE-2021-38010: Inappropriate implementation in serviceworkers
    [Backport] CVE-2021-38012: Type Confusion in V8
    [Backport] CVE-2021-38015: Inappropriate implementation in input
    [Backport] CVE-2021-38017: Insufficient policy enforcement in iframe
    sandbox
    [Backport] CVE-2021-38018: Inappropriate implementation in navigation
    [Backport] CVE-2021-38019: Insufficient policy enforcement in CORS
    [Backport] CVE-2021-38021: Inappropriate implementation in referrer
    [Backport] CVE-2021-38022: Inappropriate implementation in WebAuthentication
    [Backport] CVE-2021-4057: Use after free in file API
    [Backport] CVE-2021-4058: Heap buffer overflow in ANGLE (1/2)
    [Backport] CVE-2021-4058: Heap buffer overflow in ANGLE (2/2)
    [Backport] CVE-2021-4059: Insufficient data validation in loader
    [Backport] CVE-2021-4062: Heap buffer overflow in BFCache
    [Backport] CVE-2021-4078: Type confusion in V8
    [Backport] CVE-2021-4079: Out of bounds write in WebRTC
    [Backport] CVE-2021-4098: Insufficient data validation in Mojo
    [Backport] CVE-2021-4099: Use after free in Swiftshader
    [Backport] CVE-2021-4101: Heap buffer overflow in Swiftshader.
    [Backport] CVE-2021-4102: Use after free in V8
    [Backport] Dependency for CVE-2021-37989
    [Backport] Dependency for CVE-2021-38009
    [Backport] Security bug 1245870
    [Backport] Security bug 1252858
    [Backport] Security bug 1259899
    Bump V8_PATCH_LEVEL
    Compile with GCC 11 -std=c++20
    Fix stack overflow on gpu channel recreate with an error
    Use wglSetPixelFormat directly only if in software mode
    [Backport] Handle long SIGSTKSZ in glibc &gt; 2.33
    [Backport] abseil-cpp: Fixes build with latest glibc
  * Handle qtpdf compilation with static runtime
  * Add bitcode support for qtpdf on ios
  * Do not access accessibility from qt post routines
  * Blacklist javascriptClipboard test on ubuntu 20.04
  * Re-enable network-service-in-process
  * Bump version from 5.15.7 to 5.15.8
  * Update patch level
  * Fix pinch gesture
  * Fix leak of properties after XkbRF_GetNamesProp
  * Fix leak on getDefaultScreeenId
- Drop patch:
  * 0001-Fix-build-with-glibc-2.34.patch</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1648209600">- Add patch to fix build with GCC 12:
  * 0001-skia-Some-includes-to-fix-build-with-GCC-12.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1649073600">- Add security fixes:
  * CVE-2022-0971-qtwebengine-5.15.patch (CVE-2022-0971, boo#1197163)
  * CVE-2022-1096-qtwebengine-5.15.patch (CVE-2022-1096, boo#1197552)</changelog>
  <changelog author="christophe@krop.fr" date="1649246400">- Update to version 5.15.9:
  * QPdfView: scale page rendering according to devicePixelRatio
  * Update documented Chromium version
  * Use IsSameDocument() rather than IsLoadingToDifferentDocument()
  * Update module-split for installer
  * Fix printing PDF files
  * Do not override signal handlers
  * Avoid using xkbcommon in non-X11 builds
  * Update documentation
  * Update Chromium:
  * Bump V8_PATCH_LEVEL
  * Do not overwrite signal handlers in the browser process.
  * Replace base::ranges::set_union with std::set_union to fix
    MSVC2017 build
  * [Backport] CVE-2022-0100: Heap buffer overflow in Media
    streams API
  * [Backport] CVE-2022-0102: Type Confusion in V8
  * [Backport] CVE-2022-0103: Use after free in SwiftShader
  * [Backport] CVE-2022-0104: Heap buffer overflow in ANGLE
  * [Backport] CVE-2022-0108: Inappropriate implementation
    in Navigation
  * [Backport] CVE-2022-0109: Inappropriate implementation
    in Autofill
  * [Backport] CVE-2022-0111 and CVE-2022-0117
  * [Backport] CVE-2022-0113: Inappropriate implementatio
    n in Blink
  * [Backport] CVE-2022-0116: Inappropriate implementation
    in Compositing
  * [Backport] CVE-2022-0289: Use after free in Safe browsing
  * [Backport] CVE-2022-0291: Inappropriate implementation
    in Storage
  * [Backport] CVE-2022-0293: Use after free in Web packaging
  * [Backport] CVE-2022-0298: Use after free in Scheduling
  * [Backport] CVE-2022-0305: Inappropriate implementation in
    Service Worker API
  * [Backport] CVE-2022-0306: Heap buffer overflow in PDFium
  * [Backport] CVE-2022-0310 and CVE-0311: Heap buffer overflow
    in Task Manager
  * [Backport] CVE-2022-0456: Use after free in Web Search
  * [Backport] CVE-2022-0459: Use after free in Screen Capture
  * [Backport] CVE-2022-0460: Use after free in Window Dialog
  * [Backport] CVE-2022-0461: Policy bypass in COOP
  * [Backport] CVE-2022-0606: Use after free in ANGLE
  * [Backport] CVE-2022-0607: Use after free in GPU
  * [Backport] CVE-2022-0608: Integer overflow in Mojo
  * [Backport] CVE-2022-0609: Use after free in Animation
  * [Backport] CVE-2022-0610: Inappropriate implementation
    in Gamepad API
  * [Backport] CVE-2022-0971 (boo#1197163)
  * [Backport] CVE-2022-1096 (boo#1197552)
  * [Backport] CVE-2022-23852
  * [Backport] Copy 'name_' member during StyleRuleProperty::Copy
  * [Backport] Security bug 1256885
  * [Backport] Security bug 1258603
  * [Backport] Security bug 1259557
  * [Backport] Security bug 1261415
  * [Backport] Security bug 1265570
  * [Backport] Security bug 1268448
  * [Backport] Security bug 1270014
  * [Backport] Security bug 1274113
  * [Backport] Security bug 1276331
  * [Backport] Security bug 1280743
  * [Backport] Security bug 1289394
  * [Backport] Security bug 1292537
  * [Backport] sandbox: build if glibc 2.34+ dynamic stack size
    is enabled
- Drop patches, now upstream:
  * CVE-2022-0971-qtwebengine-5.15.patch
  * CVE-2022-1096-qtwebengine-5.15.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1651060800">- Add libqt5-qtwebengine-rpmlintrc to silence the
  'shlib-policy-name-error' rpmlint error</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1651492800">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1654689600">- Update to version 5.15.10:
  * Fix top level build with no widget
  * Fix read-after-free on EGL extensions
  * Update Chromium
  * Add workaround for unstable gn on macOS in ci
  * Pass archiver to gn build
  * Fix navigation to non-local URLs
  * Add support for universal builds for qtwebengine and qtpdf
  * Enable Apple Silicon support
  * Fix cross compilation x86_64-&gt;arm64 on mac
  * Bump version to 5.15.10
  * CustomDialogs: Make custom input fields readable in dark mode
  * CookieBrowser: Make alternating rows readable in dark mode
  * Update Chromium:
  * Bump V8_PATCH_LEVEL
  * Fix clang set-but-unused-variable warning
  * Fix mac toolchain python linker script call
  * Fix missing dependency for gpu sources
  * Fix python calls
  * Fix undefined symbol for universal link
  * Quick fix for regression in service workers by reverting
    backports
  * [Backport] CVE-2022-0797: Out of bounds memory access
    in Mojo
  * [Backport] CVE-2022-1125
  * [Backport] CVE-2022-1138: Inappropriate implementation
    in Web Cursor.
  * [Backport] CVE-2022-1305: Use after free in storage
  * [Backport] CVE-2022-1310: Use after free in regular
    expressions
  * [Backport] CVE-2022-1314: Type Confusion in V8
  * [Backport] CVE-2022-1493: Use after free in Dev Tools
  * [Backport] On arm64 hosts, set host_cpu to 'arm64', not 'arm'
  * [Backport] Security Bug 1296876
  * [Backport] Security bug 1269999
  * [Backport] Security bug 1280852
  * [Backport] Security bug 1292905
  * [Backport] Security bug 1304659
  * [Backport] Security bug 1306507</changelog>
</package>
<package pkgid="ed13ddbd2aab8a755cf65bb3f9df1ac820b790c8960e7a4b95639cfd6a46db4f" name="libqt5-qtpdf-devel" arch="x86_64">
  <version epoch="0" ver="5.15.10" rel="bp154.2.3.2"/>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1613563200">- Add patch to fix sandbox with glibc 2.33 on 32bit:
  * sandbox-statx-futex_time64.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1615377600">- Can't use system_vpx on Leap 15.3</changelog>
  <changelog author="christophe@krop.fr" date="1616587200">- Update to version 5.15.3:
  * Fix spelling and coding style
  * Fix new view request handling (QTBUG-87378)
  * Fix getDefaultScreenId on X11
  * Fix flaky tst_QWebEngineView::textSelectionOutOfInputField test
  * Move touch input tests to separate testcase
  * Add touch input tests for scrolling and pinch zooming
  * Fix rare duplicate ids forming in touch point id's mapping
  * Use the module's version number for QtWebEngineProcess
  * Touch handling: provide id mapping without modifying TouchPoint instance
    (QTBUG-88001)
  * Touch handling: fix mapped ids cleanup for TouchCancel event
  * et custom headers from QWebEngineUrlRequestInfo before triggering redirect
    (QTBUG-88861)
  * Forward modifier flags for lock keys (QTBUG-89001)
  * Fix handling of more than one finger for touch event (QTBUG-86389)
  * Stabilize load signals emitting (QTBUG-65223, QTBUG-87089)
  * Fix building against 5.12 on most CIs
  * Update minimum HarfBuzz version to 2.4.0 (QTBUG-88976)
  * Fix building against Qt 5.14
  * Migrate user script IPC to mojo
  * Fix crashes in user resource controller when single process
  * Minor. Fix namespace for user resource controller
  * Minor. RenderThreadObserverQt is really a RenderConfiguration
  * Remove RenderViewObserverHelper from UserResourceController
  * Cache mojo interface bindings to UserResourceControllerRenderFrame
  * Cache mojo interface bindings for WebChannelIPCTransport
  * Migrate render_view_observer_qt to mojo
  * Fix crash on linkedin.com (QTBUG-89740)
  * Suppress error pages also for http errors if they are disabled
  * Fix leak in QQuickWebEngineViewPrivate::contextMenuRequested
  * Register PerformanceNode early enough
  * Quiet log on webrtc usage
  * Remove configure option that doesn't work
  * Remove Java build dependency
  * Fix blank popups in qml (QTBUG-86034)
  * Fix position of popup on qml (QTBUG-86034, QTBUG-89358)
  * Enable hangout services extension (QTBUG-85731)
  * Allow to fallback to default locale for non existent data packs (QTBUG-90490)
  * Support devtools close button
  * Do not extract download file names from certain url schemes (QTBUG-90355)
  * Leave room for the null-termination byte when checking remote drive path
    (QTBUG-90347)
  * Do not set open files limit for linking if not necessary
  * Remove even more remains of non network service code
  * Add back prefers-color-scheme support (QTBUG-89753)
  * Start supporting chrome.resourcesPrivate API (QTBUG-90035)
  * Enable chrome://user-actions WebUI
  * Remove remains of chrome://flash
  * Fix loadFinished signal if page has content but server sends HTTP error
    (QTBUG-90517)
  * Fix devtools page resource loading as raw data instead of html string
  * Remove frame metadata observer (RenderWidgetHostViewQt) on destroy
  * Resolve installed interceptors right before interception point (QTBUG-86286)
  * Update searches faster
  * Remove more leftovers of the old compositor
  * Enable webrtc logging and the corresponding WebUI
  * Support mips64el platform CPU(loongson 3A4000)
  * Add tracing UI resources
  * Fix crash on meet.google.com
  * Fix mad popup qquickwindows on wayland
  * Fix crashes on BrowserContext destruction
  * Fix crash on exit in quicknanobrowser when popup
  * Remove QtPdf dependency on nss at build-time
  * Avoid accessing profileAdapter when profile is shutting down (QTBUG-91187)
  * Do not flush messages form profile destructor
  * Ignore QQuickWebEngineNewViewRequest if it is unhandled
  * Fix ScopedGLContextChecker with QTWEBENGINE_DISABLE_GPU_THREAD=1
  * Don't send duplicate load progress values
  * Fix neon support in libpng
  * Do not call deprecated profile interceptor on ui thread (QTBUG-86267)
  * Add certificate error message for ERR_SSL_OBSOLETE_VERSION
  * Fix assert in WebContentsAdapter::devToolsFrontendDestroyed
  * Avoid to reject a certificate error twice in Quick
  * Fix PDF viewer plugin
  * FIXUP: Fix swap condition in DisplayGLOutputSurface::updatePaintNode
    (QTBUG-86599)
  * Fix favicon engine under device pixel scaling
  * Do not pass a native keycode matching the menu key when it is remapped
    (QTBUG-86672)
  * Optimize WebEngineSettings::testAttribute
  * Warn about QtWebengineProcess launching from network share (QTBUG-84632)
  * Handle non-ascii names for pulseaudio (QTBUG-85363)
  * Do not set audio device for desktop capture if audio loopback is unsupported
  * Fix new view request handling (QTBUG-87378)
  * Fix getDefaultScreenId on X11
  * Touch handling: provide id mapping without modifying TouchPoint instance
    (QTBUG-88001)
  * Set custom headers from QWebEngineUrlRequestInfo before triggering redirect
    (QTBUG-88861)
  * Stabilize load signals emitting (QTBUG-65223)
- CVE fixes backported in chromium updates:
  * CVE-2020-16044: Use after free in WebRTC
  * CVE-2021-21118: Heap buffer overflow in Blink
  * CVE-2021-21119: Use after free in Media
  * CVE-2021-21120: Use after free in WebSQL
  * CVE-2021-21121: Use after free in Omnibox
  * CVE-2021-21122: Use after free in Blink
  * CVE-2021-21123: Insufficient data validation in File System API
  * CVE-2021-21125: Insufficient policy enforcement in File System API
  * CVE-2021-21126: Insufficient policy enforcement in extensions
  * CVE-2021-21127: Insufficient policy enforcement in extensions
  * CVE-2021-21128: Heap buffer overflow in Blink
  * CVE-2021-21129: Insufficient policy enforcement in File System API
  * CVE-2021-21130: Insufficient policy enforcement in File System API
  * CVE-2021-21131: Insufficient policy enforcement in File System API
  * CVE-2021-21132: Inappropriate implementation in DevTools
  * CVE-2021-21135: Inappropriate implementation in Performance API
  * CVE-2021-21137: Inappropriate implementation in DevTools
  * CVE-2021-21140: Uninitialized Use in USB
  * CVE-2021-21141: Insufficient policy enforcement in File System API
  * CVE-2021-21145: Use after free in Fonts
  * CVE-2021-21146: Use after free in Navigation
  * CVE-2021-21147: Inappropriate implementation in Skia
  * CVE-2021-21148: Heap buffer overflow in V8
  * CVE-2021-21149: Stack overflow in Data Transfer
  * CVE-2021-21150: Use after free in Downloads
  * CVE-2021-21152: Heap buffer overflow in Media
  * CVE-2021-21153: Stack overflow in GPU Process
  * CVE-2021-21156: Heap buffer overflow in V8
  * CVE-2021-21157: Use after free in Web Sockets
- Drop obsolete patches:
  * icu-68.patch
  * icu-68-2.patch
- Rebase patches:
  * fix1163766.patch
  * sandbox-statx-futex_time64.patch
  * rtc-dont-use-h264.patch
  * chromium-glibc-2.33.patch
- Add patch to fix crash with certain locales:
  * 0001-Fix-normalization-of-app-locales.patch
- Clean the spec file a bit</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1618315200">- Add back missing part in fix1163766.patch (boo#1184610)</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1618401600">- Update _constraints to avoid OOM</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1618401601">- Add patch to fix build with GCC 11:
  * 0001-Fix-build-with-GCC-11.patch</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1620302400">- Add patch to fix build with ICU 69:
  * 0001-Fix-build-with-system-ICU-69.patch</changelog>
  <changelog author="christophe@krop.fr" date="1624363200">- Update to version 5.15.5:
  * Abort findText also right on explicit navigation request
  * Adapt to new Connections syntax
  * Add devtools eyedropper support
  * Add more tests to tst_loadsignals
  * Add support for Keyboard.getLayoutMap()
  * Add web-ui chrome://net-internals
  * Allow leaving OCSP off
  * Always send phased wheel events beginning with Began
  * Avoid accessing profileAdapter when profile is shutting down
  * Avoid unknownFunc messages in qmltests
  * Blacklist CertificateError::test_error for macOS
  * Blacklist NewViewRequest::test_loadNewViewRequest on macOS
  * Blacklist handleError on macos until we merge the fix
  * Blacklist numberOfStartedAndFinishedSignalsIsSame on b2q CIs
  * Depend on QCoreApplication::startingUp() for checking
    existence of app
  * Do not allow WebBluetooth to continue
  * Do not hide virtual keyboard if the focused node is editable
  * Doc: Add a note about navigation within a page to a fragment
  * Docs: Suggest to use higher DPI for printing
  * Fix FilePickerController's path validation for windows and
    corresponding tests
  * Fix application locales again
  * Fix embedded PDFs when plugins are disabled
  * Fix first party url for cookie filter
  * Fix inconsistent number of load signals and their order
  * Fix normalization of app locales
  * Fix not working certificates on mac &gt; 10.14
  * Fix prl files on ios
  * Fix qmltests::WebEngineViewNavigationHistory auto tests
  * Fix qtpdf static builds on windows
  * Fix static build of qml qtpdf
  * Follow InProcessGpuThread::Init() on thread priority
  * Generate mojo bindings before compiling extension API
    registration
  * Implement PluginServiceFilterQt
  * Load signals test: use focusProxy for link clicking test
  * Make able to override disabled features from command line
  * Notify canGoBack/canGoForward changes based on web actions
  * Only disconnect QWebEnginePage signals that QWebEngineView
    connected
  * Package devtools inspector overlay
  * Remove ResourceTypeSubFrame check after website update
  * Remove obsolete loadSignals test
    secondLoadForError_WhenErrorPageEnabled
  * Remove qquickwebengineprofile test
  * Remove tracking of frame which load error page
  * Remove ui/snapshot overrides for aura
  * Report server directs in navigation type
  * Return to using the default devtools page
  * Set enumaration root directory for File.webkitRelativePath API
  * Set more Display properties
  * Show PDF viewer in a guest view
  * Support devtools close button in QuickNanoBrowser
  * Support zoom-in, zoom-out and cell web cursors on macOS
  * Unblacklist and fix load signals test for file download
  * Update Chromium and adapt PermissionManagerQt
  * Update platform notes
  * View: test signal for deletion of external page set to view
- Drop patches:
  * 0001-Fix-normalization-of-app-locales.patch
  * 0001-Fix-build-with-GCC-11.patch
  * 0001-Fix-build-with-system-ICU-69.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1624536000">- Update the CMake version workaround to get qtbase's real version</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1628078400">- Add patch to fix build with glibc 2.34 (boo#1189095)
  * 0001-Fix-build-with-glibc-2.34.patch</changelog>
  <changelog author="christophe@krop.fr" date="1631188800">- Update to version 5.15.6:
  * Update Chromium:
    + [Backport] CVE-2021-30560: Use after free in Blink XSLT
    + [Backport] CVE-2021-30566: Stack buffer overflow in Printing
    + [Backport] CVE-2021-30585: Use after free in sensor handling
    + Bump V8_PATCH_LEVEL
    + [Backport] Security bug 1228036
    + [Backport] CVE-2021-30604: Use after free in ANGLE
    + [Backport] CVE-2021-30603: Race in WebAudio
    + [Backport] CVE-2021-30602: Use after free in WebRTC
    + [Backport] CVE-2021-30599: Type Confusion in V8
    + [Backport] CVE-2021-30598: Type Confusion in V8
    + [Backport] Security bug 1227933
    + [Backport] Security bug 1205059
    + [Backport] Security bug 1184294
    + [Backport] Security bug 1198385
    + [Backport] CVE-2021-30588: Type Confusion in V8
    + [Backport] CVE-2021-30587: Inappropriate implementation in Compositing on Windows
    + [Backport] CVE-2021-30573: Use after free in GPU
    + [Backport] CVE-2021-30569, security bugs 1198216 and 1204814
    + [Backport] CVE-2021-30568: Heap buffer overflow in WebGL
    + [Backport] CVE-2021-30541: Use after free in V8
    + [Backport] Security bugs 1197786 and 1194330
    + [Backport] Security bug 1194689
    + [Backport] CVE-2021-30563: Type Confusion in V8
    + [Backport] Security bug 1211215
    + [Backport] Security bug 1209558
    + [Backport] CVE-2021-30553: Use after free in Network service
    + [Backport] CVE-2021-30548: Use after free in Loader
    + [Backport] CVE-2021-30547: Out of bounds write in ANGLE
    + [Backport] CVE-2021-30556: Use after free in WebAudio
    + [Backport] CVE-2021-30559: Out of bounds write in ANGLE
    + [Backport] CVE-2021-30533: Insufficient policy enforcement in PopupBlocker
    + [Backport] Security bug 1202534
    + [Backport] CVE-2021-30536: Out of bounds read in V8
    + [Backport] CVE-2021-30522: Use after free in WebAudio
    + [Backport] CVE-2021-30554 Use after free in WebGL
    + [Backport] CVE-2021-30551: Type Confusion in V8
    + [Backport] CVE-2021-30544: Use after free in BFCache
    + [Backport] CVE-2021-30535: Double free in ICU
    + [Backport] CVE-2021-30534: Insufficient policy enforcement in iFrameSandbox
    + [Backport] CVE-2021-30530: Out of bounds memory access in WebAudio
    + [Backport] CVE-2021-30523: Use after free in WebRTC
    + Generate mojo bindings before compiling extension API registration
  * Bump version from 5.15.5 to 5.15.6
  * Always send phased wheel events beginning with Began
- Import patch from the chromium package:
  * 0001-return-ENOSYS-for-clone3.patch
- Add changes from the chromium package to
  0001-Fix-build-with-glibc-2.34.patch</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1632225600">- Add patches from Arch to fix build with HarfBuzz 3.0.0:
  * chromium-harfbuzz-3.0.0.patch
  * skia-harfbuzz-3.0.0.patch
- ... but don't break with &lt; 2.9.0:
  * chromium-older-harfbuzz.patch</changelog>
  <changelog author="christophe@krop.fr" date="1635508800">- Update to version 5.15.7:
  * Update Chromium:
    [Backport] Linux sandbox: update syscalls numbers on 32-bit platforms
    [Backport] sandbox: linux: allow clock_nanosleep &amp; gettime64
    [Backport] Linux sandbox: update syscall numbers for all platforms.
    [Backport] Ease HarfBuzz API change with feature detection
    [Backport] Security bug 1248665
    [Backport] CVE-2021-37975 : Use after free in V8
    [Backport] CVE-2021-37980 : Inappropriate implementation in Sandbox
    [Backport] CVE-2021-37979 : Heap buffer overflow in WebRTC (2/2)
    [Backport] CVE-2021-37979 : Heap buffer overflow in WebRTC (1/2)
    [Backport] CVE-2021-37978 : Heap buffer overflow in Blink
    [Backport] CVE-2021-30616: Use after free in Media.
    [Backport] CVE-2021-37962 : Use after free in Performance Manager (2/2)
    [Backport] CVE-2021-37962 : Use after free in Performance Manager (1/2)
    [Backport] CVE-2021-37973 : Use after free in Portals
    [Backport] CVE-2021-37971 : Incorrect security UI in Web Browser UI.
    [Backport] CVE-2021-37968 : Inappropriate implementation in Background Fetch API
    [Backport] CVE-2021-37967 : Inappropriate implementation in Background Fetch API
    [Backport] Linux sandbox: return ENOSYS for clone3
    [Backport] Linux sandbox: fix fstatat() crash
    [Backport] Reland "Reland "Linux sandbox syscall broker: use struct kernel_stat""
    [Backport] Security bug 1238178 (2/2)
    [Backport] Security bug 1238178 (1/2)
    [Backport] CVE-2021-30633: Use after free in Indexed DB API (2/2)
    [Backport] CVE-2021-30633: Use after free in Indexed DB API (1/2)
    [Backport] CVE-2021-30630: Inappropriate implementation in Blink
    [Backport] CVE-2021-30629: Use after free in Permissions
    [Backport] CVE-2021-30628: Stack buffer overflow in ANGLE
    [Backport] CVE-2021-30627: Type Confusion in Blink layout
    [Backport] CVE-2021-30626: Out of bounds memory access in ANGLE
    [Backport] CVE-2021-30625: Use after free in Selection API
    [Backport] Security bug 1206289
    [Backport] CVE-2021-30613: Use after free in Base internals
    [Backport] Security bug 1227228
    [Backport] CVE-2021-30618: Inappropriate implementation in DevTools
  * Update patch level
  * Blacklist certificate test until certicates have been renewed
  * Block CORS from local URLs when remote access is not enabled
  * Do not wait on weak_pointer for termination errors
  * Support MSVC_VER 16.8
  * Fix wrong save file filter for Markdown Editor example
  * Add Chromium version source documentation
  * Bump version from 5.15.6 to 5.15.7
  * Fix crash when clicking on a link in PDF
- Drop openSUSE patches:
  * fix1163766.patch. Should be addressed with:
    https://github.com/qt/qtwebengine-chromium/commit/652f834de
    https://github.com/qt/qtwebengine-chromium/commit/faae106ed
    https://github.com/qt/qtwebengine-chromium/commit/6b7b3f1bf
  * chromium-glibc-2.33.patch. Should be addressed with the
    [Backport] Linux sandbox: fix fstatat() crash and
    Reland "Reland "Linux sandbox syscall broker: use struct kernel_stat""
    changes.
  * chromium-older-harfbuzz.patch
- Drop upstream changes:
  * 0001-return-ENOSYS-for-clone3.patch
  * chromium-harfbuzz-3.0.0.patch
  * skia-harfbuzz-3.0.0.patch
- Rebase patches:
  * sandbox-statx-futex_time64.patch</changelog>
  <changelog author="christophe@krop.fr" date="1641297600">- Update to version 5.15.8:
  * Update Chromium:
    [Backport] CVE-2021-3517: libxml2: Heap-based buffer overflow
    in xmlEncodeEntitiesInternal() in entities.c
    [Backport] CVE-2021-3541 libxml2: Exponential entity expansion
    attack bypasses all existing protection mechanisms
    [Backport] CVE-2021-37984 : Heap buffer overflow in PDFium
    [Backport] CVE-2021-37987 : Use after free in Network APIs
    [Backport] CVE-2021-37989 : Inappropriate implementation in Blink
    [Backport] CVE-2021-37992 : Out of bounds read in WebAudio
    [Backport] CVE-2021-37993 : Use after free in PDF Accessibility
    [Backport] CVE-2021-37996 : Insufficient validation of untrusted
    input in Downloads
    [Backport] CVE-2021-38001 : Type Confusion in V8
    [Backport] CVE-2021-38003 : Inappropriate implementation in V8
    [Backport] CVE-2021-38005: Use after free in loader (1/3)
    [Backport] CVE-2021-38005: Use after free in loader (2/3)
    [Backport] CVE-2021-38005: Use after free in loader (3/3)
    [Backport] CVE-2021-38007: Type Confusion in V8
    [Backport] CVE-2021-38009: Inappropriate implementation in cache
    [Backport] CVE-2021-38010: Inappropriate implementation in serviceworkers
    [Backport] CVE-2021-38012: Type Confusion in V8
    [Backport] CVE-2021-38015: Inappropriate implementation in input
    [Backport] CVE-2021-38017: Insufficient policy enforcement in iframe
    sandbox
    [Backport] CVE-2021-38018: Inappropriate implementation in navigation
    [Backport] CVE-2021-38019: Insufficient policy enforcement in CORS
    [Backport] CVE-2021-38021: Inappropriate implementation in referrer
    [Backport] CVE-2021-38022: Inappropriate implementation in WebAuthentication
    [Backport] CVE-2021-4057: Use after free in file API
    [Backport] CVE-2021-4058: Heap buffer overflow in ANGLE (1/2)
    [Backport] CVE-2021-4058: Heap buffer overflow in ANGLE (2/2)
    [Backport] CVE-2021-4059: Insufficient data validation in loader
    [Backport] CVE-2021-4062: Heap buffer overflow in BFCache
    [Backport] CVE-2021-4078: Type confusion in V8
    [Backport] CVE-2021-4079: Out of bounds write in WebRTC
    [Backport] CVE-2021-4098: Insufficient data validation in Mojo
    [Backport] CVE-2021-4099: Use after free in Swiftshader
    [Backport] CVE-2021-4101: Heap buffer overflow in Swiftshader.
    [Backport] CVE-2021-4102: Use after free in V8
    [Backport] Dependency for CVE-2021-37989
    [Backport] Dependency for CVE-2021-38009
    [Backport] Security bug 1245870
    [Backport] Security bug 1252858
    [Backport] Security bug 1259899
    Bump V8_PATCH_LEVEL
    Compile with GCC 11 -std=c++20
    Fix stack overflow on gpu channel recreate with an error
    Use wglSetPixelFormat directly only if in software mode
    [Backport] Handle long SIGSTKSZ in glibc &gt; 2.33
    [Backport] abseil-cpp: Fixes build with latest glibc
  * Handle qtpdf compilation with static runtime
  * Add bitcode support for qtpdf on ios
  * Do not access accessibility from qt post routines
  * Blacklist javascriptClipboard test on ubuntu 20.04
  * Re-enable network-service-in-process
  * Bump version from 5.15.7 to 5.15.8
  * Update patch level
  * Fix pinch gesture
  * Fix leak of properties after XkbRF_GetNamesProp
  * Fix leak on getDefaultScreeenId
- Drop patch:
  * 0001-Fix-build-with-glibc-2.34.patch</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1648209600">- Add patch to fix build with GCC 12:
  * 0001-skia-Some-includes-to-fix-build-with-GCC-12.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1649073600">- Add security fixes:
  * CVE-2022-0971-qtwebengine-5.15.patch (CVE-2022-0971, boo#1197163)
  * CVE-2022-1096-qtwebengine-5.15.patch (CVE-2022-1096, boo#1197552)</changelog>
  <changelog author="christophe@krop.fr" date="1649246400">- Update to version 5.15.9:
  * QPdfView: scale page rendering according to devicePixelRatio
  * Update documented Chromium version
  * Use IsSameDocument() rather than IsLoadingToDifferentDocument()
  * Update module-split for installer
  * Fix printing PDF files
  * Do not override signal handlers
  * Avoid using xkbcommon in non-X11 builds
  * Update documentation
  * Update Chromium:
  * Bump V8_PATCH_LEVEL
  * Do not overwrite signal handlers in the browser process.
  * Replace base::ranges::set_union with std::set_union to fix
    MSVC2017 build
  * [Backport] CVE-2022-0100: Heap buffer overflow in Media
    streams API
  * [Backport] CVE-2022-0102: Type Confusion in V8
  * [Backport] CVE-2022-0103: Use after free in SwiftShader
  * [Backport] CVE-2022-0104: Heap buffer overflow in ANGLE
  * [Backport] CVE-2022-0108: Inappropriate implementation
    in Navigation
  * [Backport] CVE-2022-0109: Inappropriate implementation
    in Autofill
  * [Backport] CVE-2022-0111 and CVE-2022-0117
  * [Backport] CVE-2022-0113: Inappropriate implementatio
    n in Blink
  * [Backport] CVE-2022-0116: Inappropriate implementation
    in Compositing
  * [Backport] CVE-2022-0289: Use after free in Safe browsing
  * [Backport] CVE-2022-0291: Inappropriate implementation
    in Storage
  * [Backport] CVE-2022-0293: Use after free in Web packaging
  * [Backport] CVE-2022-0298: Use after free in Scheduling
  * [Backport] CVE-2022-0305: Inappropriate implementation in
    Service Worker API
  * [Backport] CVE-2022-0306: Heap buffer overflow in PDFium
  * [Backport] CVE-2022-0310 and CVE-0311: Heap buffer overflow
    in Task Manager
  * [Backport] CVE-2022-0456: Use after free in Web Search
  * [Backport] CVE-2022-0459: Use after free in Screen Capture
  * [Backport] CVE-2022-0460: Use after free in Window Dialog
  * [Backport] CVE-2022-0461: Policy bypass in COOP
  * [Backport] CVE-2022-0606: Use after free in ANGLE
  * [Backport] CVE-2022-0607: Use after free in GPU
  * [Backport] CVE-2022-0608: Integer overflow in Mojo
  * [Backport] CVE-2022-0609: Use after free in Animation
  * [Backport] CVE-2022-0610: Inappropriate implementation
    in Gamepad API
  * [Backport] CVE-2022-0971 (boo#1197163)
  * [Backport] CVE-2022-1096 (boo#1197552)
  * [Backport] CVE-2022-23852
  * [Backport] Copy 'name_' member during StyleRuleProperty::Copy
  * [Backport] Security bug 1256885
  * [Backport] Security bug 1258603
  * [Backport] Security bug 1259557
  * [Backport] Security bug 1261415
  * [Backport] Security bug 1265570
  * [Backport] Security bug 1268448
  * [Backport] Security bug 1270014
  * [Backport] Security bug 1274113
  * [Backport] Security bug 1276331
  * [Backport] Security bug 1280743
  * [Backport] Security bug 1289394
  * [Backport] Security bug 1292537
  * [Backport] sandbox: build if glibc 2.34+ dynamic stack size
    is enabled
- Drop patches, now upstream:
  * CVE-2022-0971-qtwebengine-5.15.patch
  * CVE-2022-1096-qtwebengine-5.15.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1651060800">- Add libqt5-qtwebengine-rpmlintrc to silence the
  'shlib-policy-name-error' rpmlint error</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1651492800">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1654689600">- Update to version 5.15.10:
  * Fix top level build with no widget
  * Fix read-after-free on EGL extensions
  * Update Chromium
  * Add workaround for unstable gn on macOS in ci
  * Pass archiver to gn build
  * Fix navigation to non-local URLs
  * Add support for universal builds for qtwebengine and qtpdf
  * Enable Apple Silicon support
  * Fix cross compilation x86_64-&gt;arm64 on mac
  * Bump version to 5.15.10
  * CustomDialogs: Make custom input fields readable in dark mode
  * CookieBrowser: Make alternating rows readable in dark mode
  * Update Chromium:
  * Bump V8_PATCH_LEVEL
  * Fix clang set-but-unused-variable warning
  * Fix mac toolchain python linker script call
  * Fix missing dependency for gpu sources
  * Fix python calls
  * Fix undefined symbol for universal link
  * Quick fix for regression in service workers by reverting
    backports
  * [Backport] CVE-2022-0797: Out of bounds memory access
    in Mojo
  * [Backport] CVE-2022-1125
  * [Backport] CVE-2022-1138: Inappropriate implementation
    in Web Cursor.
  * [Backport] CVE-2022-1305: Use after free in storage
  * [Backport] CVE-2022-1310: Use after free in regular
    expressions
  * [Backport] CVE-2022-1314: Type Confusion in V8
  * [Backport] CVE-2022-1493: Use after free in Dev Tools
  * [Backport] On arm64 hosts, set host_cpu to 'arm64', not 'arm'
  * [Backport] Security Bug 1296876
  * [Backport] Security bug 1269999
  * [Backport] Security bug 1280852
  * [Backport] Security bug 1292905
  * [Backport] Security bug 1304659
  * [Backport] Security bug 1306507</changelog>
</package>
<package pkgid="983f4e8f6107750d187e777be049473d818d9b2910e47fc4e199a48594b9629b" name="libqt5-qtpdf-examples" arch="aarch64">
  <version epoch="0" ver="5.15.10" rel="bp154.2.3.2"/>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1613563200">- Add patch to fix sandbox with glibc 2.33 on 32bit:
  * sandbox-statx-futex_time64.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1615377600">- Can't use system_vpx on Leap 15.3</changelog>
  <changelog author="christophe@krop.fr" date="1616587200">- Update to version 5.15.3:
  * Fix spelling and coding style
  * Fix new view request handling (QTBUG-87378)
  * Fix getDefaultScreenId on X11
  * Fix flaky tst_QWebEngineView::textSelectionOutOfInputField test
  * Move touch input tests to separate testcase
  * Add touch input tests for scrolling and pinch zooming
  * Fix rare duplicate ids forming in touch point id's mapping
  * Use the module's version number for QtWebEngineProcess
  * Touch handling: provide id mapping without modifying TouchPoint instance
    (QTBUG-88001)
  * Touch handling: fix mapped ids cleanup for TouchCancel event
  * et custom headers from QWebEngineUrlRequestInfo before triggering redirect
    (QTBUG-88861)
  * Forward modifier flags for lock keys (QTBUG-89001)
  * Fix handling of more than one finger for touch event (QTBUG-86389)
  * Stabilize load signals emitting (QTBUG-65223, QTBUG-87089)
  * Fix building against 5.12 on most CIs
  * Update minimum HarfBuzz version to 2.4.0 (QTBUG-88976)
  * Fix building against Qt 5.14
  * Migrate user script IPC to mojo
  * Fix crashes in user resource controller when single process
  * Minor. Fix namespace for user resource controller
  * Minor. RenderThreadObserverQt is really a RenderConfiguration
  * Remove RenderViewObserverHelper from UserResourceController
  * Cache mojo interface bindings to UserResourceControllerRenderFrame
  * Cache mojo interface bindings for WebChannelIPCTransport
  * Migrate render_view_observer_qt to mojo
  * Fix crash on linkedin.com (QTBUG-89740)
  * Suppress error pages also for http errors if they are disabled
  * Fix leak in QQuickWebEngineViewPrivate::contextMenuRequested
  * Register PerformanceNode early enough
  * Quiet log on webrtc usage
  * Remove configure option that doesn't work
  * Remove Java build dependency
  * Fix blank popups in qml (QTBUG-86034)
  * Fix position of popup on qml (QTBUG-86034, QTBUG-89358)
  * Enable hangout services extension (QTBUG-85731)
  * Allow to fallback to default locale for non existent data packs (QTBUG-90490)
  * Support devtools close button
  * Do not extract download file names from certain url schemes (QTBUG-90355)
  * Leave room for the null-termination byte when checking remote drive path
    (QTBUG-90347)
  * Do not set open files limit for linking if not necessary
  * Remove even more remains of non network service code
  * Add back prefers-color-scheme support (QTBUG-89753)
  * Start supporting chrome.resourcesPrivate API (QTBUG-90035)
  * Enable chrome://user-actions WebUI
  * Remove remains of chrome://flash
  * Fix loadFinished signal if page has content but server sends HTTP error
    (QTBUG-90517)
  * Fix devtools page resource loading as raw data instead of html string
  * Remove frame metadata observer (RenderWidgetHostViewQt) on destroy
  * Resolve installed interceptors right before interception point (QTBUG-86286)
  * Update searches faster
  * Remove more leftovers of the old compositor
  * Enable webrtc logging and the corresponding WebUI
  * Support mips64el platform CPU(loongson 3A4000)
  * Add tracing UI resources
  * Fix crash on meet.google.com
  * Fix mad popup qquickwindows on wayland
  * Fix crashes on BrowserContext destruction
  * Fix crash on exit in quicknanobrowser when popup
  * Remove QtPdf dependency on nss at build-time
  * Avoid accessing profileAdapter when profile is shutting down (QTBUG-91187)
  * Do not flush messages form profile destructor
  * Ignore QQuickWebEngineNewViewRequest if it is unhandled
  * Fix ScopedGLContextChecker with QTWEBENGINE_DISABLE_GPU_THREAD=1
  * Don't send duplicate load progress values
  * Fix neon support in libpng
  * Do not call deprecated profile interceptor on ui thread (QTBUG-86267)
  * Add certificate error message for ERR_SSL_OBSOLETE_VERSION
  * Fix assert in WebContentsAdapter::devToolsFrontendDestroyed
  * Avoid to reject a certificate error twice in Quick
  * Fix PDF viewer plugin
  * FIXUP: Fix swap condition in DisplayGLOutputSurface::updatePaintNode
    (QTBUG-86599)
  * Fix favicon engine under device pixel scaling
  * Do not pass a native keycode matching the menu key when it is remapped
    (QTBUG-86672)
  * Optimize WebEngineSettings::testAttribute
  * Warn about QtWebengineProcess launching from network share (QTBUG-84632)
  * Handle non-ascii names for pulseaudio (QTBUG-85363)
  * Do not set audio device for desktop capture if audio loopback is unsupported
  * Fix new view request handling (QTBUG-87378)
  * Fix getDefaultScreenId on X11
  * Touch handling: provide id mapping without modifying TouchPoint instance
    (QTBUG-88001)
  * Set custom headers from QWebEngineUrlRequestInfo before triggering redirect
    (QTBUG-88861)
  * Stabilize load signals emitting (QTBUG-65223)
- CVE fixes backported in chromium updates:
  * CVE-2020-16044: Use after free in WebRTC
  * CVE-2021-21118: Heap buffer overflow in Blink
  * CVE-2021-21119: Use after free in Media
  * CVE-2021-21120: Use after free in WebSQL
  * CVE-2021-21121: Use after free in Omnibox
  * CVE-2021-21122: Use after free in Blink
  * CVE-2021-21123: Insufficient data validation in File System API
  * CVE-2021-21125: Insufficient policy enforcement in File System API
  * CVE-2021-21126: Insufficient policy enforcement in extensions
  * CVE-2021-21127: Insufficient policy enforcement in extensions
  * CVE-2021-21128: Heap buffer overflow in Blink
  * CVE-2021-21129: Insufficient policy enforcement in File System API
  * CVE-2021-21130: Insufficient policy enforcement in File System API
  * CVE-2021-21131: Insufficient policy enforcement in File System API
  * CVE-2021-21132: Inappropriate implementation in DevTools
  * CVE-2021-21135: Inappropriate implementation in Performance API
  * CVE-2021-21137: Inappropriate implementation in DevTools
  * CVE-2021-21140: Uninitialized Use in USB
  * CVE-2021-21141: Insufficient policy enforcement in File System API
  * CVE-2021-21145: Use after free in Fonts
  * CVE-2021-21146: Use after free in Navigation
  * CVE-2021-21147: Inappropriate implementation in Skia
  * CVE-2021-21148: Heap buffer overflow in V8
  * CVE-2021-21149: Stack overflow in Data Transfer
  * CVE-2021-21150: Use after free in Downloads
  * CVE-2021-21152: Heap buffer overflow in Media
  * CVE-2021-21153: Stack overflow in GPU Process
  * CVE-2021-21156: Heap buffer overflow in V8
  * CVE-2021-21157: Use after free in Web Sockets
- Drop obsolete patches:
  * icu-68.patch
  * icu-68-2.patch
- Rebase patches:
  * fix1163766.patch
  * sandbox-statx-futex_time64.patch
  * rtc-dont-use-h264.patch
  * chromium-glibc-2.33.patch
- Add patch to fix crash with certain locales:
  * 0001-Fix-normalization-of-app-locales.patch
- Clean the spec file a bit</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1618315200">- Add back missing part in fix1163766.patch (boo#1184610)</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1618401600">- Update _constraints to avoid OOM</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1618401601">- Add patch to fix build with GCC 11:
  * 0001-Fix-build-with-GCC-11.patch</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1620302400">- Add patch to fix build with ICU 69:
  * 0001-Fix-build-with-system-ICU-69.patch</changelog>
  <changelog author="christophe@krop.fr" date="1624363200">- Update to version 5.15.5:
  * Abort findText also right on explicit navigation request
  * Adapt to new Connections syntax
  * Add devtools eyedropper support
  * Add more tests to tst_loadsignals
  * Add support for Keyboard.getLayoutMap()
  * Add web-ui chrome://net-internals
  * Allow leaving OCSP off
  * Always send phased wheel events beginning with Began
  * Avoid accessing profileAdapter when profile is shutting down
  * Avoid unknownFunc messages in qmltests
  * Blacklist CertificateError::test_error for macOS
  * Blacklist NewViewRequest::test_loadNewViewRequest on macOS
  * Blacklist handleError on macos until we merge the fix
  * Blacklist numberOfStartedAndFinishedSignalsIsSame on b2q CIs
  * Depend on QCoreApplication::startingUp() for checking
    existence of app
  * Do not allow WebBluetooth to continue
  * Do not hide virtual keyboard if the focused node is editable
  * Doc: Add a note about navigation within a page to a fragment
  * Docs: Suggest to use higher DPI for printing
  * Fix FilePickerController's path validation for windows and
    corresponding tests
  * Fix application locales again
  * Fix embedded PDFs when plugins are disabled
  * Fix first party url for cookie filter
  * Fix inconsistent number of load signals and their order
  * Fix normalization of app locales
  * Fix not working certificates on mac &gt; 10.14
  * Fix prl files on ios
  * Fix qmltests::WebEngineViewNavigationHistory auto tests
  * Fix qtpdf static builds on windows
  * Fix static build of qml qtpdf
  * Follow InProcessGpuThread::Init() on thread priority
  * Generate mojo bindings before compiling extension API
    registration
  * Implement PluginServiceFilterQt
  * Load signals test: use focusProxy for link clicking test
  * Make able to override disabled features from command line
  * Notify canGoBack/canGoForward changes based on web actions
  * Only disconnect QWebEnginePage signals that QWebEngineView
    connected
  * Package devtools inspector overlay
  * Remove ResourceTypeSubFrame check after website update
  * Remove obsolete loadSignals test
    secondLoadForError_WhenErrorPageEnabled
  * Remove qquickwebengineprofile test
  * Remove tracking of frame which load error page
  * Remove ui/snapshot overrides for aura
  * Report server directs in navigation type
  * Return to using the default devtools page
  * Set enumaration root directory for File.webkitRelativePath API
  * Set more Display properties
  * Show PDF viewer in a guest view
  * Support devtools close button in QuickNanoBrowser
  * Support zoom-in, zoom-out and cell web cursors on macOS
  * Unblacklist and fix load signals test for file download
  * Update Chromium and adapt PermissionManagerQt
  * Update platform notes
  * View: test signal for deletion of external page set to view
- Drop patches:
  * 0001-Fix-normalization-of-app-locales.patch
  * 0001-Fix-build-with-GCC-11.patch
  * 0001-Fix-build-with-system-ICU-69.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1624536000">- Update the CMake version workaround to get qtbase's real version</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1628078400">- Add patch to fix build with glibc 2.34 (boo#1189095)
  * 0001-Fix-build-with-glibc-2.34.patch</changelog>
  <changelog author="christophe@krop.fr" date="1631188800">- Update to version 5.15.6:
  * Update Chromium:
    + [Backport] CVE-2021-30560: Use after free in Blink XSLT
    + [Backport] CVE-2021-30566: Stack buffer overflow in Printing
    + [Backport] CVE-2021-30585: Use after free in sensor handling
    + Bump V8_PATCH_LEVEL
    + [Backport] Security bug 1228036
    + [Backport] CVE-2021-30604: Use after free in ANGLE
    + [Backport] CVE-2021-30603: Race in WebAudio
    + [Backport] CVE-2021-30602: Use after free in WebRTC
    + [Backport] CVE-2021-30599: Type Confusion in V8
    + [Backport] CVE-2021-30598: Type Confusion in V8
    + [Backport] Security bug 1227933
    + [Backport] Security bug 1205059
    + [Backport] Security bug 1184294
    + [Backport] Security bug 1198385
    + [Backport] CVE-2021-30588: Type Confusion in V8
    + [Backport] CVE-2021-30587: Inappropriate implementation in Compositing on Windows
    + [Backport] CVE-2021-30573: Use after free in GPU
    + [Backport] CVE-2021-30569, security bugs 1198216 and 1204814
    + [Backport] CVE-2021-30568: Heap buffer overflow in WebGL
    + [Backport] CVE-2021-30541: Use after free in V8
    + [Backport] Security bugs 1197786 and 1194330
    + [Backport] Security bug 1194689
    + [Backport] CVE-2021-30563: Type Confusion in V8
    + [Backport] Security bug 1211215
    + [Backport] Security bug 1209558
    + [Backport] CVE-2021-30553: Use after free in Network service
    + [Backport] CVE-2021-30548: Use after free in Loader
    + [Backport] CVE-2021-30547: Out of bounds write in ANGLE
    + [Backport] CVE-2021-30556: Use after free in WebAudio
    + [Backport] CVE-2021-30559: Out of bounds write in ANGLE
    + [Backport] CVE-2021-30533: Insufficient policy enforcement in PopupBlocker
    + [Backport] Security bug 1202534
    + [Backport] CVE-2021-30536: Out of bounds read in V8
    + [Backport] CVE-2021-30522: Use after free in WebAudio
    + [Backport] CVE-2021-30554 Use after free in WebGL
    + [Backport] CVE-2021-30551: Type Confusion in V8
    + [Backport] CVE-2021-30544: Use after free in BFCache
    + [Backport] CVE-2021-30535: Double free in ICU
    + [Backport] CVE-2021-30534: Insufficient policy enforcement in iFrameSandbox
    + [Backport] CVE-2021-30530: Out of bounds memory access in WebAudio
    + [Backport] CVE-2021-30523: Use after free in WebRTC
    + Generate mojo bindings before compiling extension API registration
  * Bump version from 5.15.5 to 5.15.6
  * Always send phased wheel events beginning with Began
- Import patch from the chromium package:
  * 0001-return-ENOSYS-for-clone3.patch
- Add changes from the chromium package to
  0001-Fix-build-with-glibc-2.34.patch</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1632225600">- Add patches from Arch to fix build with HarfBuzz 3.0.0:
  * chromium-harfbuzz-3.0.0.patch
  * skia-harfbuzz-3.0.0.patch
- ... but don't break with &lt; 2.9.0:
  * chromium-older-harfbuzz.patch</changelog>
  <changelog author="christophe@krop.fr" date="1635508800">- Update to version 5.15.7:
  * Update Chromium:
    [Backport] Linux sandbox: update syscalls numbers on 32-bit platforms
    [Backport] sandbox: linux: allow clock_nanosleep &amp; gettime64
    [Backport] Linux sandbox: update syscall numbers for all platforms.
    [Backport] Ease HarfBuzz API change with feature detection
    [Backport] Security bug 1248665
    [Backport] CVE-2021-37975 : Use after free in V8
    [Backport] CVE-2021-37980 : Inappropriate implementation in Sandbox
    [Backport] CVE-2021-37979 : Heap buffer overflow in WebRTC (2/2)
    [Backport] CVE-2021-37979 : Heap buffer overflow in WebRTC (1/2)
    [Backport] CVE-2021-37978 : Heap buffer overflow in Blink
    [Backport] CVE-2021-30616: Use after free in Media.
    [Backport] CVE-2021-37962 : Use after free in Performance Manager (2/2)
    [Backport] CVE-2021-37962 : Use after free in Performance Manager (1/2)
    [Backport] CVE-2021-37973 : Use after free in Portals
    [Backport] CVE-2021-37971 : Incorrect security UI in Web Browser UI.
    [Backport] CVE-2021-37968 : Inappropriate implementation in Background Fetch API
    [Backport] CVE-2021-37967 : Inappropriate implementation in Background Fetch API
    [Backport] Linux sandbox: return ENOSYS for clone3
    [Backport] Linux sandbox: fix fstatat() crash
    [Backport] Reland "Reland "Linux sandbox syscall broker: use struct kernel_stat""
    [Backport] Security bug 1238178 (2/2)
    [Backport] Security bug 1238178 (1/2)
    [Backport] CVE-2021-30633: Use after free in Indexed DB API (2/2)
    [Backport] CVE-2021-30633: Use after free in Indexed DB API (1/2)
    [Backport] CVE-2021-30630: Inappropriate implementation in Blink
    [Backport] CVE-2021-30629: Use after free in Permissions
    [Backport] CVE-2021-30628: Stack buffer overflow in ANGLE
    [Backport] CVE-2021-30627: Type Confusion in Blink layout
    [Backport] CVE-2021-30626: Out of bounds memory access in ANGLE
    [Backport] CVE-2021-30625: Use after free in Selection API
    [Backport] Security bug 1206289
    [Backport] CVE-2021-30613: Use after free in Base internals
    [Backport] Security bug 1227228
    [Backport] CVE-2021-30618: Inappropriate implementation in DevTools
  * Update patch level
  * Blacklist certificate test until certicates have been renewed
  * Block CORS from local URLs when remote access is not enabled
  * Do not wait on weak_pointer for termination errors
  * Support MSVC_VER 16.8
  * Fix wrong save file filter for Markdown Editor example
  * Add Chromium version source documentation
  * Bump version from 5.15.6 to 5.15.7
  * Fix crash when clicking on a link in PDF
- Drop openSUSE patches:
  * fix1163766.patch. Should be addressed with:
    https://github.com/qt/qtwebengine-chromium/commit/652f834de
    https://github.com/qt/qtwebengine-chromium/commit/faae106ed
    https://github.com/qt/qtwebengine-chromium/commit/6b7b3f1bf
  * chromium-glibc-2.33.patch. Should be addressed with the
    [Backport] Linux sandbox: fix fstatat() crash and
    Reland "Reland "Linux sandbox syscall broker: use struct kernel_stat""
    changes.
  * chromium-older-harfbuzz.patch
- Drop upstream changes:
  * 0001-return-ENOSYS-for-clone3.patch
  * chromium-harfbuzz-3.0.0.patch
  * skia-harfbuzz-3.0.0.patch
- Rebase patches:
  * sandbox-statx-futex_time64.patch</changelog>
  <changelog author="christophe@krop.fr" date="1641297600">- Update to version 5.15.8:
  * Update Chromium:
    [Backport] CVE-2021-3517: libxml2: Heap-based buffer overflow
    in xmlEncodeEntitiesInternal() in entities.c
    [Backport] CVE-2021-3541 libxml2: Exponential entity expansion
    attack bypasses all existing protection mechanisms
    [Backport] CVE-2021-37984 : Heap buffer overflow in PDFium
    [Backport] CVE-2021-37987 : Use after free in Network APIs
    [Backport] CVE-2021-37989 : Inappropriate implementation in Blink
    [Backport] CVE-2021-37992 : Out of bounds read in WebAudio
    [Backport] CVE-2021-37993 : Use after free in PDF Accessibility
    [Backport] CVE-2021-37996 : Insufficient validation of untrusted
    input in Downloads
    [Backport] CVE-2021-38001 : Type Confusion in V8
    [Backport] CVE-2021-38003 : Inappropriate implementation in V8
    [Backport] CVE-2021-38005: Use after free in loader (1/3)
    [Backport] CVE-2021-38005: Use after free in loader (2/3)
    [Backport] CVE-2021-38005: Use after free in loader (3/3)
    [Backport] CVE-2021-38007: Type Confusion in V8
    [Backport] CVE-2021-38009: Inappropriate implementation in cache
    [Backport] CVE-2021-38010: Inappropriate implementation in serviceworkers
    [Backport] CVE-2021-38012: Type Confusion in V8
    [Backport] CVE-2021-38015: Inappropriate implementation in input
    [Backport] CVE-2021-38017: Insufficient policy enforcement in iframe
    sandbox
    [Backport] CVE-2021-38018: Inappropriate implementation in navigation
    [Backport] CVE-2021-38019: Insufficient policy enforcement in CORS
    [Backport] CVE-2021-38021: Inappropriate implementation in referrer
    [Backport] CVE-2021-38022: Inappropriate implementation in WebAuthentication
    [Backport] CVE-2021-4057: Use after free in file API
    [Backport] CVE-2021-4058: Heap buffer overflow in ANGLE (1/2)
    [Backport] CVE-2021-4058: Heap buffer overflow in ANGLE (2/2)
    [Backport] CVE-2021-4059: Insufficient data validation in loader
    [Backport] CVE-2021-4062: Heap buffer overflow in BFCache
    [Backport] CVE-2021-4078: Type confusion in V8
    [Backport] CVE-2021-4079: Out of bounds write in WebRTC
    [Backport] CVE-2021-4098: Insufficient data validation in Mojo
    [Backport] CVE-2021-4099: Use after free in Swiftshader
    [Backport] CVE-2021-4101: Heap buffer overflow in Swiftshader.
    [Backport] CVE-2021-4102: Use after free in V8
    [Backport] Dependency for CVE-2021-37989
    [Backport] Dependency for CVE-2021-38009
    [Backport] Security bug 1245870
    [Backport] Security bug 1252858
    [Backport] Security bug 1259899
    Bump V8_PATCH_LEVEL
    Compile with GCC 11 -std=c++20
    Fix stack overflow on gpu channel recreate with an error
    Use wglSetPixelFormat directly only if in software mode
    [Backport] Handle long SIGSTKSZ in glibc &gt; 2.33
    [Backport] abseil-cpp: Fixes build with latest glibc
  * Handle qtpdf compilation with static runtime
  * Add bitcode support for qtpdf on ios
  * Do not access accessibility from qt post routines
  * Blacklist javascriptClipboard test on ubuntu 20.04
  * Re-enable network-service-in-process
  * Bump version from 5.15.7 to 5.15.8
  * Update patch level
  * Fix pinch gesture
  * Fix leak of properties after XkbRF_GetNamesProp
  * Fix leak on getDefaultScreeenId
- Drop patch:
  * 0001-Fix-build-with-glibc-2.34.patch</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1648209600">- Add patch to fix build with GCC 12:
  * 0001-skia-Some-includes-to-fix-build-with-GCC-12.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1649073600">- Add security fixes:
  * CVE-2022-0971-qtwebengine-5.15.patch (CVE-2022-0971, boo#1197163)
  * CVE-2022-1096-qtwebengine-5.15.patch (CVE-2022-1096, boo#1197552)</changelog>
  <changelog author="christophe@krop.fr" date="1649246400">- Update to version 5.15.9:
  * QPdfView: scale page rendering according to devicePixelRatio
  * Update documented Chromium version
  * Use IsSameDocument() rather than IsLoadingToDifferentDocument()
  * Update module-split for installer
  * Fix printing PDF files
  * Do not override signal handlers
  * Avoid using xkbcommon in non-X11 builds
  * Update documentation
  * Update Chromium:
  * Bump V8_PATCH_LEVEL
  * Do not overwrite signal handlers in the browser process.
  * Replace base::ranges::set_union with std::set_union to fix
    MSVC2017 build
  * [Backport] CVE-2022-0100: Heap buffer overflow in Media
    streams API
  * [Backport] CVE-2022-0102: Type Confusion in V8
  * [Backport] CVE-2022-0103: Use after free in SwiftShader
  * [Backport] CVE-2022-0104: Heap buffer overflow in ANGLE
  * [Backport] CVE-2022-0108: Inappropriate implementation
    in Navigation
  * [Backport] CVE-2022-0109: Inappropriate implementation
    in Autofill
  * [Backport] CVE-2022-0111 and CVE-2022-0117
  * [Backport] CVE-2022-0113: Inappropriate implementatio
    n in Blink
  * [Backport] CVE-2022-0116: Inappropriate implementation
    in Compositing
  * [Backport] CVE-2022-0289: Use after free in Safe browsing
  * [Backport] CVE-2022-0291: Inappropriate implementation
    in Storage
  * [Backport] CVE-2022-0293: Use after free in Web packaging
  * [Backport] CVE-2022-0298: Use after free in Scheduling
  * [Backport] CVE-2022-0305: Inappropriate implementation in
    Service Worker API
  * [Backport] CVE-2022-0306: Heap buffer overflow in PDFium
  * [Backport] CVE-2022-0310 and CVE-0311: Heap buffer overflow
    in Task Manager
  * [Backport] CVE-2022-0456: Use after free in Web Search
  * [Backport] CVE-2022-0459: Use after free in Screen Capture
  * [Backport] CVE-2022-0460: Use after free in Window Dialog
  * [Backport] CVE-2022-0461: Policy bypass in COOP
  * [Backport] CVE-2022-0606: Use after free in ANGLE
  * [Backport] CVE-2022-0607: Use after free in GPU
  * [Backport] CVE-2022-0608: Integer overflow in Mojo
  * [Backport] CVE-2022-0609: Use after free in Animation
  * [Backport] CVE-2022-0610: Inappropriate implementation
    in Gamepad API
  * [Backport] CVE-2022-0971 (boo#1197163)
  * [Backport] CVE-2022-1096 (boo#1197552)
  * [Backport] CVE-2022-23852
  * [Backport] Copy 'name_' member during StyleRuleProperty::Copy
  * [Backport] Security bug 1256885
  * [Backport] Security bug 1258603
  * [Backport] Security bug 1259557
  * [Backport] Security bug 1261415
  * [Backport] Security bug 1265570
  * [Backport] Security bug 1268448
  * [Backport] Security bug 1270014
  * [Backport] Security bug 1274113
  * [Backport] Security bug 1276331
  * [Backport] Security bug 1280743
  * [Backport] Security bug 1289394
  * [Backport] Security bug 1292537
  * [Backport] sandbox: build if glibc 2.34+ dynamic stack size
    is enabled
- Drop patches, now upstream:
  * CVE-2022-0971-qtwebengine-5.15.patch
  * CVE-2022-1096-qtwebengine-5.15.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1651060800">- Add libqt5-qtwebengine-rpmlintrc to silence the
  'shlib-policy-name-error' rpmlint error</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1651492800">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1654689600">- Update to version 5.15.10:
  * Fix top level build with no widget
  * Fix read-after-free on EGL extensions
  * Update Chromium
  * Add workaround for unstable gn on macOS in ci
  * Pass archiver to gn build
  * Fix navigation to non-local URLs
  * Add support for universal builds for qtwebengine and qtpdf
  * Enable Apple Silicon support
  * Fix cross compilation x86_64-&gt;arm64 on mac
  * Bump version to 5.15.10
  * CustomDialogs: Make custom input fields readable in dark mode
  * CookieBrowser: Make alternating rows readable in dark mode
  * Update Chromium:
  * Bump V8_PATCH_LEVEL
  * Fix clang set-but-unused-variable warning
  * Fix mac toolchain python linker script call
  * Fix missing dependency for gpu sources
  * Fix python calls
  * Fix undefined symbol for universal link
  * Quick fix for regression in service workers by reverting
    backports
  * [Backport] CVE-2022-0797: Out of bounds memory access
    in Mojo
  * [Backport] CVE-2022-1125
  * [Backport] CVE-2022-1138: Inappropriate implementation
    in Web Cursor.
  * [Backport] CVE-2022-1305: Use after free in storage
  * [Backport] CVE-2022-1310: Use after free in regular
    expressions
  * [Backport] CVE-2022-1314: Type Confusion in V8
  * [Backport] CVE-2022-1493: Use after free in Dev Tools
  * [Backport] On arm64 hosts, set host_cpu to 'arm64', not 'arm'
  * [Backport] Security Bug 1296876
  * [Backport] Security bug 1269999
  * [Backport] Security bug 1280852
  * [Backport] Security bug 1292905
  * [Backport] Security bug 1304659
  * [Backport] Security bug 1306507</changelog>
</package>
<package pkgid="033808e4347e9a0007cd05b9cc62e0aae6b1140a4ce78057588009084f50cac5" name="libqt5-qtpdf-examples" arch="x86_64">
  <version epoch="0" ver="5.15.10" rel="bp154.2.3.2"/>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1613563200">- Add patch to fix sandbox with glibc 2.33 on 32bit:
  * sandbox-statx-futex_time64.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1615377600">- Can't use system_vpx on Leap 15.3</changelog>
  <changelog author="christophe@krop.fr" date="1616587200">- Update to version 5.15.3:
  * Fix spelling and coding style
  * Fix new view request handling (QTBUG-87378)
  * Fix getDefaultScreenId on X11
  * Fix flaky tst_QWebEngineView::textSelectionOutOfInputField test
  * Move touch input tests to separate testcase
  * Add touch input tests for scrolling and pinch zooming
  * Fix rare duplicate ids forming in touch point id's mapping
  * Use the module's version number for QtWebEngineProcess
  * Touch handling: provide id mapping without modifying TouchPoint instance
    (QTBUG-88001)
  * Touch handling: fix mapped ids cleanup for TouchCancel event
  * et custom headers from QWebEngineUrlRequestInfo before triggering redirect
    (QTBUG-88861)
  * Forward modifier flags for lock keys (QTBUG-89001)
  * Fix handling of more than one finger for touch event (QTBUG-86389)
  * Stabilize load signals emitting (QTBUG-65223, QTBUG-87089)
  * Fix building against 5.12 on most CIs
  * Update minimum HarfBuzz version to 2.4.0 (QTBUG-88976)
  * Fix building against Qt 5.14
  * Migrate user script IPC to mojo
  * Fix crashes in user resource controller when single process
  * Minor. Fix namespace for user resource controller
  * Minor. RenderThreadObserverQt is really a RenderConfiguration
  * Remove RenderViewObserverHelper from UserResourceController
  * Cache mojo interface bindings to UserResourceControllerRenderFrame
  * Cache mojo interface bindings for WebChannelIPCTransport
  * Migrate render_view_observer_qt to mojo
  * Fix crash on linkedin.com (QTBUG-89740)
  * Suppress error pages also for http errors if they are disabled
  * Fix leak in QQuickWebEngineViewPrivate::contextMenuRequested
  * Register PerformanceNode early enough
  * Quiet log on webrtc usage
  * Remove configure option that doesn't work
  * Remove Java build dependency
  * Fix blank popups in qml (QTBUG-86034)
  * Fix position of popup on qml (QTBUG-86034, QTBUG-89358)
  * Enable hangout services extension (QTBUG-85731)
  * Allow to fallback to default locale for non existent data packs (QTBUG-90490)
  * Support devtools close button
  * Do not extract download file names from certain url schemes (QTBUG-90355)
  * Leave room for the null-termination byte when checking remote drive path
    (QTBUG-90347)
  * Do not set open files limit for linking if not necessary
  * Remove even more remains of non network service code
  * Add back prefers-color-scheme support (QTBUG-89753)
  * Start supporting chrome.resourcesPrivate API (QTBUG-90035)
  * Enable chrome://user-actions WebUI
  * Remove remains of chrome://flash
  * Fix loadFinished signal if page has content but server sends HTTP error
    (QTBUG-90517)
  * Fix devtools page resource loading as raw data instead of html string
  * Remove frame metadata observer (RenderWidgetHostViewQt) on destroy
  * Resolve installed interceptors right before interception point (QTBUG-86286)
  * Update searches faster
  * Remove more leftovers of the old compositor
  * Enable webrtc logging and the corresponding WebUI
  * Support mips64el platform CPU(loongson 3A4000)
  * Add tracing UI resources
  * Fix crash on meet.google.com
  * Fix mad popup qquickwindows on wayland
  * Fix crashes on BrowserContext destruction
  * Fix crash on exit in quicknanobrowser when popup
  * Remove QtPdf dependency on nss at build-time
  * Avoid accessing profileAdapter when profile is shutting down (QTBUG-91187)
  * Do not flush messages form profile destructor
  * Ignore QQuickWebEngineNewViewRequest if it is unhandled
  * Fix ScopedGLContextChecker with QTWEBENGINE_DISABLE_GPU_THREAD=1
  * Don't send duplicate load progress values
  * Fix neon support in libpng
  * Do not call deprecated profile interceptor on ui thread (QTBUG-86267)
  * Add certificate error message for ERR_SSL_OBSOLETE_VERSION
  * Fix assert in WebContentsAdapter::devToolsFrontendDestroyed
  * Avoid to reject a certificate error twice in Quick
  * Fix PDF viewer plugin
  * FIXUP: Fix swap condition in DisplayGLOutputSurface::updatePaintNode
    (QTBUG-86599)
  * Fix favicon engine under device pixel scaling
  * Do not pass a native keycode matching the menu key when it is remapped
    (QTBUG-86672)
  * Optimize WebEngineSettings::testAttribute
  * Warn about QtWebengineProcess launching from network share (QTBUG-84632)
  * Handle non-ascii names for pulseaudio (QTBUG-85363)
  * Do not set audio device for desktop capture if audio loopback is unsupported
  * Fix new view request handling (QTBUG-87378)
  * Fix getDefaultScreenId on X11
  * Touch handling: provide id mapping without modifying TouchPoint instance
    (QTBUG-88001)
  * Set custom headers from QWebEngineUrlRequestInfo before triggering redirect
    (QTBUG-88861)
  * Stabilize load signals emitting (QTBUG-65223)
- CVE fixes backported in chromium updates:
  * CVE-2020-16044: Use after free in WebRTC
  * CVE-2021-21118: Heap buffer overflow in Blink
  * CVE-2021-21119: Use after free in Media
  * CVE-2021-21120: Use after free in WebSQL
  * CVE-2021-21121: Use after free in Omnibox
  * CVE-2021-21122: Use after free in Blink
  * CVE-2021-21123: Insufficient data validation in File System API
  * CVE-2021-21125: Insufficient policy enforcement in File System API
  * CVE-2021-21126: Insufficient policy enforcement in extensions
  * CVE-2021-21127: Insufficient policy enforcement in extensions
  * CVE-2021-21128: Heap buffer overflow in Blink
  * CVE-2021-21129: Insufficient policy enforcement in File System API
  * CVE-2021-21130: Insufficient policy enforcement in File System API
  * CVE-2021-21131: Insufficient policy enforcement in File System API
  * CVE-2021-21132: Inappropriate implementation in DevTools
  * CVE-2021-21135: Inappropriate implementation in Performance API
  * CVE-2021-21137: Inappropriate implementation in DevTools
  * CVE-2021-21140: Uninitialized Use in USB
  * CVE-2021-21141: Insufficient policy enforcement in File System API
  * CVE-2021-21145: Use after free in Fonts
  * CVE-2021-21146: Use after free in Navigation
  * CVE-2021-21147: Inappropriate implementation in Skia
  * CVE-2021-21148: Heap buffer overflow in V8
  * CVE-2021-21149: Stack overflow in Data Transfer
  * CVE-2021-21150: Use after free in Downloads
  * CVE-2021-21152: Heap buffer overflow in Media
  * CVE-2021-21153: Stack overflow in GPU Process
  * CVE-2021-21156: Heap buffer overflow in V8
  * CVE-2021-21157: Use after free in Web Sockets
- Drop obsolete patches:
  * icu-68.patch
  * icu-68-2.patch
- Rebase patches:
  * fix1163766.patch
  * sandbox-statx-futex_time64.patch
  * rtc-dont-use-h264.patch
  * chromium-glibc-2.33.patch
- Add patch to fix crash with certain locales:
  * 0001-Fix-normalization-of-app-locales.patch
- Clean the spec file a bit</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1618315200">- Add back missing part in fix1163766.patch (boo#1184610)</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1618401600">- Update _constraints to avoid OOM</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1618401601">- Add patch to fix build with GCC 11:
  * 0001-Fix-build-with-GCC-11.patch</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1620302400">- Add patch to fix build with ICU 69:
  * 0001-Fix-build-with-system-ICU-69.patch</changelog>
  <changelog author="christophe@krop.fr" date="1624363200">- Update to version 5.15.5:
  * Abort findText also right on explicit navigation request
  * Adapt to new Connections syntax
  * Add devtools eyedropper support
  * Add more tests to tst_loadsignals
  * Add support for Keyboard.getLayoutMap()
  * Add web-ui chrome://net-internals
  * Allow leaving OCSP off
  * Always send phased wheel events beginning with Began
  * Avoid accessing profileAdapter when profile is shutting down
  * Avoid unknownFunc messages in qmltests
  * Blacklist CertificateError::test_error for macOS
  * Blacklist NewViewRequest::test_loadNewViewRequest on macOS
  * Blacklist handleError on macos until we merge the fix
  * Blacklist numberOfStartedAndFinishedSignalsIsSame on b2q CIs
  * Depend on QCoreApplication::startingUp() for checking
    existence of app
  * Do not allow WebBluetooth to continue
  * Do not hide virtual keyboard if the focused node is editable
  * Doc: Add a note about navigation within a page to a fragment
  * Docs: Suggest to use higher DPI for printing
  * Fix FilePickerController's path validation for windows and
    corresponding tests
  * Fix application locales again
  * Fix embedded PDFs when plugins are disabled
  * Fix first party url for cookie filter
  * Fix inconsistent number of load signals and their order
  * Fix normalization of app locales
  * Fix not working certificates on mac &gt; 10.14
  * Fix prl files on ios
  * Fix qmltests::WebEngineViewNavigationHistory auto tests
  * Fix qtpdf static builds on windows
  * Fix static build of qml qtpdf
  * Follow InProcessGpuThread::Init() on thread priority
  * Generate mojo bindings before compiling extension API
    registration
  * Implement PluginServiceFilterQt
  * Load signals test: use focusProxy for link clicking test
  * Make able to override disabled features from command line
  * Notify canGoBack/canGoForward changes based on web actions
  * Only disconnect QWebEnginePage signals that QWebEngineView
    connected
  * Package devtools inspector overlay
  * Remove ResourceTypeSubFrame check after website update
  * Remove obsolete loadSignals test
    secondLoadForError_WhenErrorPageEnabled
  * Remove qquickwebengineprofile test
  * Remove tracking of frame which load error page
  * Remove ui/snapshot overrides for aura
  * Report server directs in navigation type
  * Return to using the default devtools page
  * Set enumaration root directory for File.webkitRelativePath API
  * Set more Display properties
  * Show PDF viewer in a guest view
  * Support devtools close button in QuickNanoBrowser
  * Support zoom-in, zoom-out and cell web cursors on macOS
  * Unblacklist and fix load signals test for file download
  * Update Chromium and adapt PermissionManagerQt
  * Update platform notes
  * View: test signal for deletion of external page set to view
- Drop patches:
  * 0001-Fix-normalization-of-app-locales.patch
  * 0001-Fix-build-with-GCC-11.patch
  * 0001-Fix-build-with-system-ICU-69.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1624536000">- Update the CMake version workaround to get qtbase's real version</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1628078400">- Add patch to fix build with glibc 2.34 (boo#1189095)
  * 0001-Fix-build-with-glibc-2.34.patch</changelog>
  <changelog author="christophe@krop.fr" date="1631188800">- Update to version 5.15.6:
  * Update Chromium:
    + [Backport] CVE-2021-30560: Use after free in Blink XSLT
    + [Backport] CVE-2021-30566: Stack buffer overflow in Printing
    + [Backport] CVE-2021-30585: Use after free in sensor handling
    + Bump V8_PATCH_LEVEL
    + [Backport] Security bug 1228036
    + [Backport] CVE-2021-30604: Use after free in ANGLE
    + [Backport] CVE-2021-30603: Race in WebAudio
    + [Backport] CVE-2021-30602: Use after free in WebRTC
    + [Backport] CVE-2021-30599: Type Confusion in V8
    + [Backport] CVE-2021-30598: Type Confusion in V8
    + [Backport] Security bug 1227933
    + [Backport] Security bug 1205059
    + [Backport] Security bug 1184294
    + [Backport] Security bug 1198385
    + [Backport] CVE-2021-30588: Type Confusion in V8
    + [Backport] CVE-2021-30587: Inappropriate implementation in Compositing on Windows
    + [Backport] CVE-2021-30573: Use after free in GPU
    + [Backport] CVE-2021-30569, security bugs 1198216 and 1204814
    + [Backport] CVE-2021-30568: Heap buffer overflow in WebGL
    + [Backport] CVE-2021-30541: Use after free in V8
    + [Backport] Security bugs 1197786 and 1194330
    + [Backport] Security bug 1194689
    + [Backport] CVE-2021-30563: Type Confusion in V8
    + [Backport] Security bug 1211215
    + [Backport] Security bug 1209558
    + [Backport] CVE-2021-30553: Use after free in Network service
    + [Backport] CVE-2021-30548: Use after free in Loader
    + [Backport] CVE-2021-30547: Out of bounds write in ANGLE
    + [Backport] CVE-2021-30556: Use after free in WebAudio
    + [Backport] CVE-2021-30559: Out of bounds write in ANGLE
    + [Backport] CVE-2021-30533: Insufficient policy enforcement in PopupBlocker
    + [Backport] Security bug 1202534
    + [Backport] CVE-2021-30536: Out of bounds read in V8
    + [Backport] CVE-2021-30522: Use after free in WebAudio
    + [Backport] CVE-2021-30554 Use after free in WebGL
    + [Backport] CVE-2021-30551: Type Confusion in V8
    + [Backport] CVE-2021-30544: Use after free in BFCache
    + [Backport] CVE-2021-30535: Double free in ICU
    + [Backport] CVE-2021-30534: Insufficient policy enforcement in iFrameSandbox
    + [Backport] CVE-2021-30530: Out of bounds memory access in WebAudio
    + [Backport] CVE-2021-30523: Use after free in WebRTC
    + Generate mojo bindings before compiling extension API registration
  * Bump version from 5.15.5 to 5.15.6
  * Always send phased wheel events beginning with Began
- Import patch from the chromium package:
  * 0001-return-ENOSYS-for-clone3.patch
- Add changes from the chromium package to
  0001-Fix-build-with-glibc-2.34.patch</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1632225600">- Add patches from Arch to fix build with HarfBuzz 3.0.0:
  * chromium-harfbuzz-3.0.0.patch
  * skia-harfbuzz-3.0.0.patch
- ... but don't break with &lt; 2.9.0:
  * chromium-older-harfbuzz.patch</changelog>
  <changelog author="christophe@krop.fr" date="1635508800">- Update to version 5.15.7:
  * Update Chromium:
    [Backport] Linux sandbox: update syscalls numbers on 32-bit platforms
    [Backport] sandbox: linux: allow clock_nanosleep &amp; gettime64
    [Backport] Linux sandbox: update syscall numbers for all platforms.
    [Backport] Ease HarfBuzz API change with feature detection
    [Backport] Security bug 1248665
    [Backport] CVE-2021-37975 : Use after free in V8
    [Backport] CVE-2021-37980 : Inappropriate implementation in Sandbox
    [Backport] CVE-2021-37979 : Heap buffer overflow in WebRTC (2/2)
    [Backport] CVE-2021-37979 : Heap buffer overflow in WebRTC (1/2)
    [Backport] CVE-2021-37978 : Heap buffer overflow in Blink
    [Backport] CVE-2021-30616: Use after free in Media.
    [Backport] CVE-2021-37962 : Use after free in Performance Manager (2/2)
    [Backport] CVE-2021-37962 : Use after free in Performance Manager (1/2)
    [Backport] CVE-2021-37973 : Use after free in Portals
    [Backport] CVE-2021-37971 : Incorrect security UI in Web Browser UI.
    [Backport] CVE-2021-37968 : Inappropriate implementation in Background Fetch API
    [Backport] CVE-2021-37967 : Inappropriate implementation in Background Fetch API
    [Backport] Linux sandbox: return ENOSYS for clone3
    [Backport] Linux sandbox: fix fstatat() crash
    [Backport] Reland "Reland "Linux sandbox syscall broker: use struct kernel_stat""
    [Backport] Security bug 1238178 (2/2)
    [Backport] Security bug 1238178 (1/2)
    [Backport] CVE-2021-30633: Use after free in Indexed DB API (2/2)
    [Backport] CVE-2021-30633: Use after free in Indexed DB API (1/2)
    [Backport] CVE-2021-30630: Inappropriate implementation in Blink
    [Backport] CVE-2021-30629: Use after free in Permissions
    [Backport] CVE-2021-30628: Stack buffer overflow in ANGLE
    [Backport] CVE-2021-30627: Type Confusion in Blink layout
    [Backport] CVE-2021-30626: Out of bounds memory access in ANGLE
    [Backport] CVE-2021-30625: Use after free in Selection API
    [Backport] Security bug 1206289
    [Backport] CVE-2021-30613: Use after free in Base internals
    [Backport] Security bug 1227228
    [Backport] CVE-2021-30618: Inappropriate implementation in DevTools
  * Update patch level
  * Blacklist certificate test until certicates have been renewed
  * Block CORS from local URLs when remote access is not enabled
  * Do not wait on weak_pointer for termination errors
  * Support MSVC_VER 16.8
  * Fix wrong save file filter for Markdown Editor example
  * Add Chromium version source documentation
  * Bump version from 5.15.6 to 5.15.7
  * Fix crash when clicking on a link in PDF
- Drop openSUSE patches:
  * fix1163766.patch. Should be addressed with:
    https://github.com/qt/qtwebengine-chromium/commit/652f834de
    https://github.com/qt/qtwebengine-chromium/commit/faae106ed
    https://github.com/qt/qtwebengine-chromium/commit/6b7b3f1bf
  * chromium-glibc-2.33.patch. Should be addressed with the
    [Backport] Linux sandbox: fix fstatat() crash and
    Reland "Reland "Linux sandbox syscall broker: use struct kernel_stat""
    changes.
  * chromium-older-harfbuzz.patch
- Drop upstream changes:
  * 0001-return-ENOSYS-for-clone3.patch
  * chromium-harfbuzz-3.0.0.patch
  * skia-harfbuzz-3.0.0.patch
- Rebase patches:
  * sandbox-statx-futex_time64.patch</changelog>
  <changelog author="christophe@krop.fr" date="1641297600">- Update to version 5.15.8:
  * Update Chromium:
    [Backport] CVE-2021-3517: libxml2: Heap-based buffer overflow
    in xmlEncodeEntitiesInternal() in entities.c
    [Backport] CVE-2021-3541 libxml2: Exponential entity expansion
    attack bypasses all existing protection mechanisms
    [Backport] CVE-2021-37984 : Heap buffer overflow in PDFium
    [Backport] CVE-2021-37987 : Use after free in Network APIs
    [Backport] CVE-2021-37989 : Inappropriate implementation in Blink
    [Backport] CVE-2021-37992 : Out of bounds read in WebAudio
    [Backport] CVE-2021-37993 : Use after free in PDF Accessibility
    [Backport] CVE-2021-37996 : Insufficient validation of untrusted
    input in Downloads
    [Backport] CVE-2021-38001 : Type Confusion in V8
    [Backport] CVE-2021-38003 : Inappropriate implementation in V8
    [Backport] CVE-2021-38005: Use after free in loader (1/3)
    [Backport] CVE-2021-38005: Use after free in loader (2/3)
    [Backport] CVE-2021-38005: Use after free in loader (3/3)
    [Backport] CVE-2021-38007: Type Confusion in V8
    [Backport] CVE-2021-38009: Inappropriate implementation in cache
    [Backport] CVE-2021-38010: Inappropriate implementation in serviceworkers
    [Backport] CVE-2021-38012: Type Confusion in V8
    [Backport] CVE-2021-38015: Inappropriate implementation in input
    [Backport] CVE-2021-38017: Insufficient policy enforcement in iframe
    sandbox
    [Backport] CVE-2021-38018: Inappropriate implementation in navigation
    [Backport] CVE-2021-38019: Insufficient policy enforcement in CORS
    [Backport] CVE-2021-38021: Inappropriate implementation in referrer
    [Backport] CVE-2021-38022: Inappropriate implementation in WebAuthentication
    [Backport] CVE-2021-4057: Use after free in file API
    [Backport] CVE-2021-4058: Heap buffer overflow in ANGLE (1/2)
    [Backport] CVE-2021-4058: Heap buffer overflow in ANGLE (2/2)
    [Backport] CVE-2021-4059: Insufficient data validation in loader
    [Backport] CVE-2021-4062: Heap buffer overflow in BFCache
    [Backport] CVE-2021-4078: Type confusion in V8
    [Backport] CVE-2021-4079: Out of bounds write in WebRTC
    [Backport] CVE-2021-4098: Insufficient data validation in Mojo
    [Backport] CVE-2021-4099: Use after free in Swiftshader
    [Backport] CVE-2021-4101: Heap buffer overflow in Swiftshader.
    [Backport] CVE-2021-4102: Use after free in V8
    [Backport] Dependency for CVE-2021-37989
    [Backport] Dependency for CVE-2021-38009
    [Backport] Security bug 1245870
    [Backport] Security bug 1252858
    [Backport] Security bug 1259899
    Bump V8_PATCH_LEVEL
    Compile with GCC 11 -std=c++20
    Fix stack overflow on gpu channel recreate with an error
    Use wglSetPixelFormat directly only if in software mode
    [Backport] Handle long SIGSTKSZ in glibc &gt; 2.33
    [Backport] abseil-cpp: Fixes build with latest glibc
  * Handle qtpdf compilation with static runtime
  * Add bitcode support for qtpdf on ios
  * Do not access accessibility from qt post routines
  * Blacklist javascriptClipboard test on ubuntu 20.04
  * Re-enable network-service-in-process
  * Bump version from 5.15.7 to 5.15.8
  * Update patch level
  * Fix pinch gesture
  * Fix leak of properties after XkbRF_GetNamesProp
  * Fix leak on getDefaultScreeenId
- Drop patch:
  * 0001-Fix-build-with-glibc-2.34.patch</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1648209600">- Add patch to fix build with GCC 12:
  * 0001-skia-Some-includes-to-fix-build-with-GCC-12.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1649073600">- Add security fixes:
  * CVE-2022-0971-qtwebengine-5.15.patch (CVE-2022-0971, boo#1197163)
  * CVE-2022-1096-qtwebengine-5.15.patch (CVE-2022-1096, boo#1197552)</changelog>
  <changelog author="christophe@krop.fr" date="1649246400">- Update to version 5.15.9:
  * QPdfView: scale page rendering according to devicePixelRatio
  * Update documented Chromium version
  * Use IsSameDocument() rather than IsLoadingToDifferentDocument()
  * Update module-split for installer
  * Fix printing PDF files
  * Do not override signal handlers
  * Avoid using xkbcommon in non-X11 builds
  * Update documentation
  * Update Chromium:
  * Bump V8_PATCH_LEVEL
  * Do not overwrite signal handlers in the browser process.
  * Replace base::ranges::set_union with std::set_union to fix
    MSVC2017 build
  * [Backport] CVE-2022-0100: Heap buffer overflow in Media
    streams API
  * [Backport] CVE-2022-0102: Type Confusion in V8
  * [Backport] CVE-2022-0103: Use after free in SwiftShader
  * [Backport] CVE-2022-0104: Heap buffer overflow in ANGLE
  * [Backport] CVE-2022-0108: Inappropriate implementation
    in Navigation
  * [Backport] CVE-2022-0109: Inappropriate implementation
    in Autofill
  * [Backport] CVE-2022-0111 and CVE-2022-0117
  * [Backport] CVE-2022-0113: Inappropriate implementatio
    n in Blink
  * [Backport] CVE-2022-0116: Inappropriate implementation
    in Compositing
  * [Backport] CVE-2022-0289: Use after free in Safe browsing
  * [Backport] CVE-2022-0291: Inappropriate implementation
    in Storage
  * [Backport] CVE-2022-0293: Use after free in Web packaging
  * [Backport] CVE-2022-0298: Use after free in Scheduling
  * [Backport] CVE-2022-0305: Inappropriate implementation in
    Service Worker API
  * [Backport] CVE-2022-0306: Heap buffer overflow in PDFium
  * [Backport] CVE-2022-0310 and CVE-0311: Heap buffer overflow
    in Task Manager
  * [Backport] CVE-2022-0456: Use after free in Web Search
  * [Backport] CVE-2022-0459: Use after free in Screen Capture
  * [Backport] CVE-2022-0460: Use after free in Window Dialog
  * [Backport] CVE-2022-0461: Policy bypass in COOP
  * [Backport] CVE-2022-0606: Use after free in ANGLE
  * [Backport] CVE-2022-0607: Use after free in GPU
  * [Backport] CVE-2022-0608: Integer overflow in Mojo
  * [Backport] CVE-2022-0609: Use after free in Animation
  * [Backport] CVE-2022-0610: Inappropriate implementation
    in Gamepad API
  * [Backport] CVE-2022-0971 (boo#1197163)
  * [Backport] CVE-2022-1096 (boo#1197552)
  * [Backport] CVE-2022-23852
  * [Backport] Copy 'name_' member during StyleRuleProperty::Copy
  * [Backport] Security bug 1256885
  * [Backport] Security bug 1258603
  * [Backport] Security bug 1259557
  * [Backport] Security bug 1261415
  * [Backport] Security bug 1265570
  * [Backport] Security bug 1268448
  * [Backport] Security bug 1270014
  * [Backport] Security bug 1274113
  * [Backport] Security bug 1276331
  * [Backport] Security bug 1280743
  * [Backport] Security bug 1289394
  * [Backport] Security bug 1292537
  * [Backport] sandbox: build if glibc 2.34+ dynamic stack size
    is enabled
- Drop patches, now upstream:
  * CVE-2022-0971-qtwebengine-5.15.patch
  * CVE-2022-1096-qtwebengine-5.15.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1651060800">- Add libqt5-qtwebengine-rpmlintrc to silence the
  'shlib-policy-name-error' rpmlint error</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1651492800">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1654689600">- Update to version 5.15.10:
  * Fix top level build with no widget
  * Fix read-after-free on EGL extensions
  * Update Chromium
  * Add workaround for unstable gn on macOS in ci
  * Pass archiver to gn build
  * Fix navigation to non-local URLs
  * Add support for universal builds for qtwebengine and qtpdf
  * Enable Apple Silicon support
  * Fix cross compilation x86_64-&gt;arm64 on mac
  * Bump version to 5.15.10
  * CustomDialogs: Make custom input fields readable in dark mode
  * CookieBrowser: Make alternating rows readable in dark mode
  * Update Chromium:
  * Bump V8_PATCH_LEVEL
  * Fix clang set-but-unused-variable warning
  * Fix mac toolchain python linker script call
  * Fix missing dependency for gpu sources
  * Fix python calls
  * Fix undefined symbol for universal link
  * Quick fix for regression in service workers by reverting
    backports
  * [Backport] CVE-2022-0797: Out of bounds memory access
    in Mojo
  * [Backport] CVE-2022-1125
  * [Backport] CVE-2022-1138: Inappropriate implementation
    in Web Cursor.
  * [Backport] CVE-2022-1305: Use after free in storage
  * [Backport] CVE-2022-1310: Use after free in regular
    expressions
  * [Backport] CVE-2022-1314: Type Confusion in V8
  * [Backport] CVE-2022-1493: Use after free in Dev Tools
  * [Backport] On arm64 hosts, set host_cpu to 'arm64', not 'arm'
  * [Backport] Security Bug 1296876
  * [Backport] Security bug 1269999
  * [Backport] Security bug 1280852
  * [Backport] Security bug 1292905
  * [Backport] Security bug 1304659
  * [Backport] Security bug 1306507</changelog>
</package>
<package pkgid="8ed3e235af4b9f7d53b96eb4d27a5beed6e587b45d9f28bd039a4f1c31bcb3cb" name="libqt5-qtpdf-imports" arch="aarch64">
  <version epoch="0" ver="5.15.10" rel="bp154.2.3.2"/>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1613563200">- Add patch to fix sandbox with glibc 2.33 on 32bit:
  * sandbox-statx-futex_time64.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1615377600">- Can't use system_vpx on Leap 15.3</changelog>
  <changelog author="christophe@krop.fr" date="1616587200">- Update to version 5.15.3:
  * Fix spelling and coding style
  * Fix new view request handling (QTBUG-87378)
  * Fix getDefaultScreenId on X11
  * Fix flaky tst_QWebEngineView::textSelectionOutOfInputField test
  * Move touch input tests to separate testcase
  * Add touch input tests for scrolling and pinch zooming
  * Fix rare duplicate ids forming in touch point id's mapping
  * Use the module's version number for QtWebEngineProcess
  * Touch handling: provide id mapping without modifying TouchPoint instance
    (QTBUG-88001)
  * Touch handling: fix mapped ids cleanup for TouchCancel event
  * et custom headers from QWebEngineUrlRequestInfo before triggering redirect
    (QTBUG-88861)
  * Forward modifier flags for lock keys (QTBUG-89001)
  * Fix handling of more than one finger for touch event (QTBUG-86389)
  * Stabilize load signals emitting (QTBUG-65223, QTBUG-87089)
  * Fix building against 5.12 on most CIs
  * Update minimum HarfBuzz version to 2.4.0 (QTBUG-88976)
  * Fix building against Qt 5.14
  * Migrate user script IPC to mojo
  * Fix crashes in user resource controller when single process
  * Minor. Fix namespace for user resource controller
  * Minor. RenderThreadObserverQt is really a RenderConfiguration
  * Remove RenderViewObserverHelper from UserResourceController
  * Cache mojo interface bindings to UserResourceControllerRenderFrame
  * Cache mojo interface bindings for WebChannelIPCTransport
  * Migrate render_view_observer_qt to mojo
  * Fix crash on linkedin.com (QTBUG-89740)
  * Suppress error pages also for http errors if they are disabled
  * Fix leak in QQuickWebEngineViewPrivate::contextMenuRequested
  * Register PerformanceNode early enough
  * Quiet log on webrtc usage
  * Remove configure option that doesn't work
  * Remove Java build dependency
  * Fix blank popups in qml (QTBUG-86034)
  * Fix position of popup on qml (QTBUG-86034, QTBUG-89358)
  * Enable hangout services extension (QTBUG-85731)
  * Allow to fallback to default locale for non existent data packs (QTBUG-90490)
  * Support devtools close button
  * Do not extract download file names from certain url schemes (QTBUG-90355)
  * Leave room for the null-termination byte when checking remote drive path
    (QTBUG-90347)
  * Do not set open files limit for linking if not necessary
  * Remove even more remains of non network service code
  * Add back prefers-color-scheme support (QTBUG-89753)
  * Start supporting chrome.resourcesPrivate API (QTBUG-90035)
  * Enable chrome://user-actions WebUI
  * Remove remains of chrome://flash
  * Fix loadFinished signal if page has content but server sends HTTP error
    (QTBUG-90517)
  * Fix devtools page resource loading as raw data instead of html string
  * Remove frame metadata observer (RenderWidgetHostViewQt) on destroy
  * Resolve installed interceptors right before interception point (QTBUG-86286)
  * Update searches faster
  * Remove more leftovers of the old compositor
  * Enable webrtc logging and the corresponding WebUI
  * Support mips64el platform CPU(loongson 3A4000)
  * Add tracing UI resources
  * Fix crash on meet.google.com
  * Fix mad popup qquickwindows on wayland
  * Fix crashes on BrowserContext destruction
  * Fix crash on exit in quicknanobrowser when popup
  * Remove QtPdf dependency on nss at build-time
  * Avoid accessing profileAdapter when profile is shutting down (QTBUG-91187)
  * Do not flush messages form profile destructor
  * Ignore QQuickWebEngineNewViewRequest if it is unhandled
  * Fix ScopedGLContextChecker with QTWEBENGINE_DISABLE_GPU_THREAD=1
  * Don't send duplicate load progress values
  * Fix neon support in libpng
  * Do not call deprecated profile interceptor on ui thread (QTBUG-86267)
  * Add certificate error message for ERR_SSL_OBSOLETE_VERSION
  * Fix assert in WebContentsAdapter::devToolsFrontendDestroyed
  * Avoid to reject a certificate error twice in Quick
  * Fix PDF viewer plugin
  * FIXUP: Fix swap condition in DisplayGLOutputSurface::updatePaintNode
    (QTBUG-86599)
  * Fix favicon engine under device pixel scaling
  * Do not pass a native keycode matching the menu key when it is remapped
    (QTBUG-86672)
  * Optimize WebEngineSettings::testAttribute
  * Warn about QtWebengineProcess launching from network share (QTBUG-84632)
  * Handle non-ascii names for pulseaudio (QTBUG-85363)
  * Do not set audio device for desktop capture if audio loopback is unsupported
  * Fix new view request handling (QTBUG-87378)
  * Fix getDefaultScreenId on X11
  * Touch handling: provide id mapping without modifying TouchPoint instance
    (QTBUG-88001)
  * Set custom headers from QWebEngineUrlRequestInfo before triggering redirect
    (QTBUG-88861)
  * Stabilize load signals emitting (QTBUG-65223)
- CVE fixes backported in chromium updates:
  * CVE-2020-16044: Use after free in WebRTC
  * CVE-2021-21118: Heap buffer overflow in Blink
  * CVE-2021-21119: Use after free in Media
  * CVE-2021-21120: Use after free in WebSQL
  * CVE-2021-21121: Use after free in Omnibox
  * CVE-2021-21122: Use after free in Blink
  * CVE-2021-21123: Insufficient data validation in File System API
  * CVE-2021-21125: Insufficient policy enforcement in File System API
  * CVE-2021-21126: Insufficient policy enforcement in extensions
  * CVE-2021-21127: Insufficient policy enforcement in extensions
  * CVE-2021-21128: Heap buffer overflow in Blink
  * CVE-2021-21129: Insufficient policy enforcement in File System API
  * CVE-2021-21130: Insufficient policy enforcement in File System API
  * CVE-2021-21131: Insufficient policy enforcement in File System API
  * CVE-2021-21132: Inappropriate implementation in DevTools
  * CVE-2021-21135: Inappropriate implementation in Performance API
  * CVE-2021-21137: Inappropriate implementation in DevTools
  * CVE-2021-21140: Uninitialized Use in USB
  * CVE-2021-21141: Insufficient policy enforcement in File System API
  * CVE-2021-21145: Use after free in Fonts
  * CVE-2021-21146: Use after free in Navigation
  * CVE-2021-21147: Inappropriate implementation in Skia
  * CVE-2021-21148: Heap buffer overflow in V8
  * CVE-2021-21149: Stack overflow in Data Transfer
  * CVE-2021-21150: Use after free in Downloads
  * CVE-2021-21152: Heap buffer overflow in Media
  * CVE-2021-21153: Stack overflow in GPU Process
  * CVE-2021-21156: Heap buffer overflow in V8
  * CVE-2021-21157: Use after free in Web Sockets
- Drop obsolete patches:
  * icu-68.patch
  * icu-68-2.patch
- Rebase patches:
  * fix1163766.patch
  * sandbox-statx-futex_time64.patch
  * rtc-dont-use-h264.patch
  * chromium-glibc-2.33.patch
- Add patch to fix crash with certain locales:
  * 0001-Fix-normalization-of-app-locales.patch
- Clean the spec file a bit</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1618315200">- Add back missing part in fix1163766.patch (boo#1184610)</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1618401600">- Update _constraints to avoid OOM</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1618401601">- Add patch to fix build with GCC 11:
  * 0001-Fix-build-with-GCC-11.patch</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1620302400">- Add patch to fix build with ICU 69:
  * 0001-Fix-build-with-system-ICU-69.patch</changelog>
  <changelog author="christophe@krop.fr" date="1624363200">- Update to version 5.15.5:
  * Abort findText also right on explicit navigation request
  * Adapt to new Connections syntax
  * Add devtools eyedropper support
  * Add more tests to tst_loadsignals
  * Add support for Keyboard.getLayoutMap()
  * Add web-ui chrome://net-internals
  * Allow leaving OCSP off
  * Always send phased wheel events beginning with Began
  * Avoid accessing profileAdapter when profile is shutting down
  * Avoid unknownFunc messages in qmltests
  * Blacklist CertificateError::test_error for macOS
  * Blacklist NewViewRequest::test_loadNewViewRequest on macOS
  * Blacklist handleError on macos until we merge the fix
  * Blacklist numberOfStartedAndFinishedSignalsIsSame on b2q CIs
  * Depend on QCoreApplication::startingUp() for checking
    existence of app
  * Do not allow WebBluetooth to continue
  * Do not hide virtual keyboard if the focused node is editable
  * Doc: Add a note about navigation within a page to a fragment
  * Docs: Suggest to use higher DPI for printing
  * Fix FilePickerController's path validation for windows and
    corresponding tests
  * Fix application locales again
  * Fix embedded PDFs when plugins are disabled
  * Fix first party url for cookie filter
  * Fix inconsistent number of load signals and their order
  * Fix normalization of app locales
  * Fix not working certificates on mac &gt; 10.14
  * Fix prl files on ios
  * Fix qmltests::WebEngineViewNavigationHistory auto tests
  * Fix qtpdf static builds on windows
  * Fix static build of qml qtpdf
  * Follow InProcessGpuThread::Init() on thread priority
  * Generate mojo bindings before compiling extension API
    registration
  * Implement PluginServiceFilterQt
  * Load signals test: use focusProxy for link clicking test
  * Make able to override disabled features from command line
  * Notify canGoBack/canGoForward changes based on web actions
  * Only disconnect QWebEnginePage signals that QWebEngineView
    connected
  * Package devtools inspector overlay
  * Remove ResourceTypeSubFrame check after website update
  * Remove obsolete loadSignals test
    secondLoadForError_WhenErrorPageEnabled
  * Remove qquickwebengineprofile test
  * Remove tracking of frame which load error page
  * Remove ui/snapshot overrides for aura
  * Report server directs in navigation type
  * Return to using the default devtools page
  * Set enumaration root directory for File.webkitRelativePath API
  * Set more Display properties
  * Show PDF viewer in a guest view
  * Support devtools close button in QuickNanoBrowser
  * Support zoom-in, zoom-out and cell web cursors on macOS
  * Unblacklist and fix load signals test for file download
  * Update Chromium and adapt PermissionManagerQt
  * Update platform notes
  * View: test signal for deletion of external page set to view
- Drop patches:
  * 0001-Fix-normalization-of-app-locales.patch
  * 0001-Fix-build-with-GCC-11.patch
  * 0001-Fix-build-with-system-ICU-69.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1624536000">- Update the CMake version workaround to get qtbase's real version</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1628078400">- Add patch to fix build with glibc 2.34 (boo#1189095)
  * 0001-Fix-build-with-glibc-2.34.patch</changelog>
  <changelog author="christophe@krop.fr" date="1631188800">- Update to version 5.15.6:
  * Update Chromium:
    + [Backport] CVE-2021-30560: Use after free in Blink XSLT
    + [Backport] CVE-2021-30566: Stack buffer overflow in Printing
    + [Backport] CVE-2021-30585: Use after free in sensor handling
    + Bump V8_PATCH_LEVEL
    + [Backport] Security bug 1228036
    + [Backport] CVE-2021-30604: Use after free in ANGLE
    + [Backport] CVE-2021-30603: Race in WebAudio
    + [Backport] CVE-2021-30602: Use after free in WebRTC
    + [Backport] CVE-2021-30599: Type Confusion in V8
    + [Backport] CVE-2021-30598: Type Confusion in V8
    + [Backport] Security bug 1227933
    + [Backport] Security bug 1205059
    + [Backport] Security bug 1184294
    + [Backport] Security bug 1198385
    + [Backport] CVE-2021-30588: Type Confusion in V8
    + [Backport] CVE-2021-30587: Inappropriate implementation in Compositing on Windows
    + [Backport] CVE-2021-30573: Use after free in GPU
    + [Backport] CVE-2021-30569, security bugs 1198216 and 1204814
    + [Backport] CVE-2021-30568: Heap buffer overflow in WebGL
    + [Backport] CVE-2021-30541: Use after free in V8
    + [Backport] Security bugs 1197786 and 1194330
    + [Backport] Security bug 1194689
    + [Backport] CVE-2021-30563: Type Confusion in V8
    + [Backport] Security bug 1211215
    + [Backport] Security bug 1209558
    + [Backport] CVE-2021-30553: Use after free in Network service
    + [Backport] CVE-2021-30548: Use after free in Loader
    + [Backport] CVE-2021-30547: Out of bounds write in ANGLE
    + [Backport] CVE-2021-30556: Use after free in WebAudio
    + [Backport] CVE-2021-30559: Out of bounds write in ANGLE
    + [Backport] CVE-2021-30533: Insufficient policy enforcement in PopupBlocker
    + [Backport] Security bug 1202534
    + [Backport] CVE-2021-30536: Out of bounds read in V8
    + [Backport] CVE-2021-30522: Use after free in WebAudio
    + [Backport] CVE-2021-30554 Use after free in WebGL
    + [Backport] CVE-2021-30551: Type Confusion in V8
    + [Backport] CVE-2021-30544: Use after free in BFCache
    + [Backport] CVE-2021-30535: Double free in ICU
    + [Backport] CVE-2021-30534: Insufficient policy enforcement in iFrameSandbox
    + [Backport] CVE-2021-30530: Out of bounds memory access in WebAudio
    + [Backport] CVE-2021-30523: Use after free in WebRTC
    + Generate mojo bindings before compiling extension API registration
  * Bump version from 5.15.5 to 5.15.6
  * Always send phased wheel events beginning with Began
- Import patch from the chromium package:
  * 0001-return-ENOSYS-for-clone3.patch
- Add changes from the chromium package to
  0001-Fix-build-with-glibc-2.34.patch</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1632225600">- Add patches from Arch to fix build with HarfBuzz 3.0.0:
  * chromium-harfbuzz-3.0.0.patch
  * skia-harfbuzz-3.0.0.patch
- ... but don't break with &lt; 2.9.0:
  * chromium-older-harfbuzz.patch</changelog>
  <changelog author="christophe@krop.fr" date="1635508800">- Update to version 5.15.7:
  * Update Chromium:
    [Backport] Linux sandbox: update syscalls numbers on 32-bit platforms
    [Backport] sandbox: linux: allow clock_nanosleep &amp; gettime64
    [Backport] Linux sandbox: update syscall numbers for all platforms.
    [Backport] Ease HarfBuzz API change with feature detection
    [Backport] Security bug 1248665
    [Backport] CVE-2021-37975 : Use after free in V8
    [Backport] CVE-2021-37980 : Inappropriate implementation in Sandbox
    [Backport] CVE-2021-37979 : Heap buffer overflow in WebRTC (2/2)
    [Backport] CVE-2021-37979 : Heap buffer overflow in WebRTC (1/2)
    [Backport] CVE-2021-37978 : Heap buffer overflow in Blink
    [Backport] CVE-2021-30616: Use after free in Media.
    [Backport] CVE-2021-37962 : Use after free in Performance Manager (2/2)
    [Backport] CVE-2021-37962 : Use after free in Performance Manager (1/2)
    [Backport] CVE-2021-37973 : Use after free in Portals
    [Backport] CVE-2021-37971 : Incorrect security UI in Web Browser UI.
    [Backport] CVE-2021-37968 : Inappropriate implementation in Background Fetch API
    [Backport] CVE-2021-37967 : Inappropriate implementation in Background Fetch API
    [Backport] Linux sandbox: return ENOSYS for clone3
    [Backport] Linux sandbox: fix fstatat() crash
    [Backport] Reland "Reland "Linux sandbox syscall broker: use struct kernel_stat""
    [Backport] Security bug 1238178 (2/2)
    [Backport] Security bug 1238178 (1/2)
    [Backport] CVE-2021-30633: Use after free in Indexed DB API (2/2)
    [Backport] CVE-2021-30633: Use after free in Indexed DB API (1/2)
    [Backport] CVE-2021-30630: Inappropriate implementation in Blink
    [Backport] CVE-2021-30629: Use after free in Permissions
    [Backport] CVE-2021-30628: Stack buffer overflow in ANGLE
    [Backport] CVE-2021-30627: Type Confusion in Blink layout
    [Backport] CVE-2021-30626: Out of bounds memory access in ANGLE
    [Backport] CVE-2021-30625: Use after free in Selection API
    [Backport] Security bug 1206289
    [Backport] CVE-2021-30613: Use after free in Base internals
    [Backport] Security bug 1227228
    [Backport] CVE-2021-30618: Inappropriate implementation in DevTools
  * Update patch level
  * Blacklist certificate test until certicates have been renewed
  * Block CORS from local URLs when remote access is not enabled
  * Do not wait on weak_pointer for termination errors
  * Support MSVC_VER 16.8
  * Fix wrong save file filter for Markdown Editor example
  * Add Chromium version source documentation
  * Bump version from 5.15.6 to 5.15.7
  * Fix crash when clicking on a link in PDF
- Drop openSUSE patches:
  * fix1163766.patch. Should be addressed with:
    https://github.com/qt/qtwebengine-chromium/commit/652f834de
    https://github.com/qt/qtwebengine-chromium/commit/faae106ed
    https://github.com/qt/qtwebengine-chromium/commit/6b7b3f1bf
  * chromium-glibc-2.33.patch. Should be addressed with the
    [Backport] Linux sandbox: fix fstatat() crash and
    Reland "Reland "Linux sandbox syscall broker: use struct kernel_stat""
    changes.
  * chromium-older-harfbuzz.patch
- Drop upstream changes:
  * 0001-return-ENOSYS-for-clone3.patch
  * chromium-harfbuzz-3.0.0.patch
  * skia-harfbuzz-3.0.0.patch
- Rebase patches:
  * sandbox-statx-futex_time64.patch</changelog>
  <changelog author="christophe@krop.fr" date="1641297600">- Update to version 5.15.8:
  * Update Chromium:
    [Backport] CVE-2021-3517: libxml2: Heap-based buffer overflow
    in xmlEncodeEntitiesInternal() in entities.c
    [Backport] CVE-2021-3541 libxml2: Exponential entity expansion
    attack bypasses all existing protection mechanisms
    [Backport] CVE-2021-37984 : Heap buffer overflow in PDFium
    [Backport] CVE-2021-37987 : Use after free in Network APIs
    [Backport] CVE-2021-37989 : Inappropriate implementation in Blink
    [Backport] CVE-2021-37992 : Out of bounds read in WebAudio
    [Backport] CVE-2021-37993 : Use after free in PDF Accessibility
    [Backport] CVE-2021-37996 : Insufficient validation of untrusted
    input in Downloads
    [Backport] CVE-2021-38001 : Type Confusion in V8
    [Backport] CVE-2021-38003 : Inappropriate implementation in V8
    [Backport] CVE-2021-38005: Use after free in loader (1/3)
    [Backport] CVE-2021-38005: Use after free in loader (2/3)
    [Backport] CVE-2021-38005: Use after free in loader (3/3)
    [Backport] CVE-2021-38007: Type Confusion in V8
    [Backport] CVE-2021-38009: Inappropriate implementation in cache
    [Backport] CVE-2021-38010: Inappropriate implementation in serviceworkers
    [Backport] CVE-2021-38012: Type Confusion in V8
    [Backport] CVE-2021-38015: Inappropriate implementation in input
    [Backport] CVE-2021-38017: Insufficient policy enforcement in iframe
    sandbox
    [Backport] CVE-2021-38018: Inappropriate implementation in navigation
    [Backport] CVE-2021-38019: Insufficient policy enforcement in CORS
    [Backport] CVE-2021-38021: Inappropriate implementation in referrer
    [Backport] CVE-2021-38022: Inappropriate implementation in WebAuthentication
    [Backport] CVE-2021-4057: Use after free in file API
    [Backport] CVE-2021-4058: Heap buffer overflow in ANGLE (1/2)
    [Backport] CVE-2021-4058: Heap buffer overflow in ANGLE (2/2)
    [Backport] CVE-2021-4059: Insufficient data validation in loader
    [Backport] CVE-2021-4062: Heap buffer overflow in BFCache
    [Backport] CVE-2021-4078: Type confusion in V8
    [Backport] CVE-2021-4079: Out of bounds write in WebRTC
    [Backport] CVE-2021-4098: Insufficient data validation in Mojo
    [Backport] CVE-2021-4099: Use after free in Swiftshader
    [Backport] CVE-2021-4101: Heap buffer overflow in Swiftshader.
    [Backport] CVE-2021-4102: Use after free in V8
    [Backport] Dependency for CVE-2021-37989
    [Backport] Dependency for CVE-2021-38009
    [Backport] Security bug 1245870
    [Backport] Security bug 1252858
    [Backport] Security bug 1259899
    Bump V8_PATCH_LEVEL
    Compile with GCC 11 -std=c++20
    Fix stack overflow on gpu channel recreate with an error
    Use wglSetPixelFormat directly only if in software mode
    [Backport] Handle long SIGSTKSZ in glibc &gt; 2.33
    [Backport] abseil-cpp: Fixes build with latest glibc
  * Handle qtpdf compilation with static runtime
  * Add bitcode support for qtpdf on ios
  * Do not access accessibility from qt post routines
  * Blacklist javascriptClipboard test on ubuntu 20.04
  * Re-enable network-service-in-process
  * Bump version from 5.15.7 to 5.15.8
  * Update patch level
  * Fix pinch gesture
  * Fix leak of properties after XkbRF_GetNamesProp
  * Fix leak on getDefaultScreeenId
- Drop patch:
  * 0001-Fix-build-with-glibc-2.34.patch</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1648209600">- Add patch to fix build with GCC 12:
  * 0001-skia-Some-includes-to-fix-build-with-GCC-12.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1649073600">- Add security fixes:
  * CVE-2022-0971-qtwebengine-5.15.patch (CVE-2022-0971, boo#1197163)
  * CVE-2022-1096-qtwebengine-5.15.patch (CVE-2022-1096, boo#1197552)</changelog>
  <changelog author="christophe@krop.fr" date="1649246400">- Update to version 5.15.9:
  * QPdfView: scale page rendering according to devicePixelRatio
  * Update documented Chromium version
  * Use IsSameDocument() rather than IsLoadingToDifferentDocument()
  * Update module-split for installer
  * Fix printing PDF files
  * Do not override signal handlers
  * Avoid using xkbcommon in non-X11 builds
  * Update documentation
  * Update Chromium:
  * Bump V8_PATCH_LEVEL
  * Do not overwrite signal handlers in the browser process.
  * Replace base::ranges::set_union with std::set_union to fix
    MSVC2017 build
  * [Backport] CVE-2022-0100: Heap buffer overflow in Media
    streams API
  * [Backport] CVE-2022-0102: Type Confusion in V8
  * [Backport] CVE-2022-0103: Use after free in SwiftShader
  * [Backport] CVE-2022-0104: Heap buffer overflow in ANGLE
  * [Backport] CVE-2022-0108: Inappropriate implementation
    in Navigation
  * [Backport] CVE-2022-0109: Inappropriate implementation
    in Autofill
  * [Backport] CVE-2022-0111 and CVE-2022-0117
  * [Backport] CVE-2022-0113: Inappropriate implementatio
    n in Blink
  * [Backport] CVE-2022-0116: Inappropriate implementation
    in Compositing
  * [Backport] CVE-2022-0289: Use after free in Safe browsing
  * [Backport] CVE-2022-0291: Inappropriate implementation
    in Storage
  * [Backport] CVE-2022-0293: Use after free in Web packaging
  * [Backport] CVE-2022-0298: Use after free in Scheduling
  * [Backport] CVE-2022-0305: Inappropriate implementation in
    Service Worker API
  * [Backport] CVE-2022-0306: Heap buffer overflow in PDFium
  * [Backport] CVE-2022-0310 and CVE-0311: Heap buffer overflow
    in Task Manager
  * [Backport] CVE-2022-0456: Use after free in Web Search
  * [Backport] CVE-2022-0459: Use after free in Screen Capture
  * [Backport] CVE-2022-0460: Use after free in Window Dialog
  * [Backport] CVE-2022-0461: Policy bypass in COOP
  * [Backport] CVE-2022-0606: Use after free in ANGLE
  * [Backport] CVE-2022-0607: Use after free in GPU
  * [Backport] CVE-2022-0608: Integer overflow in Mojo
  * [Backport] CVE-2022-0609: Use after free in Animation
  * [Backport] CVE-2022-0610: Inappropriate implementation
    in Gamepad API
  * [Backport] CVE-2022-0971 (boo#1197163)
  * [Backport] CVE-2022-1096 (boo#1197552)
  * [Backport] CVE-2022-23852
  * [Backport] Copy 'name_' member during StyleRuleProperty::Copy
  * [Backport] Security bug 1256885
  * [Backport] Security bug 1258603
  * [Backport] Security bug 1259557
  * [Backport] Security bug 1261415
  * [Backport] Security bug 1265570
  * [Backport] Security bug 1268448
  * [Backport] Security bug 1270014
  * [Backport] Security bug 1274113
  * [Backport] Security bug 1276331
  * [Backport] Security bug 1280743
  * [Backport] Security bug 1289394
  * [Backport] Security bug 1292537
  * [Backport] sandbox: build if glibc 2.34+ dynamic stack size
    is enabled
- Drop patches, now upstream:
  * CVE-2022-0971-qtwebengine-5.15.patch
  * CVE-2022-1096-qtwebengine-5.15.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1651060800">- Add libqt5-qtwebengine-rpmlintrc to silence the
  'shlib-policy-name-error' rpmlint error</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1651492800">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1654689600">- Update to version 5.15.10:
  * Fix top level build with no widget
  * Fix read-after-free on EGL extensions
  * Update Chromium
  * Add workaround for unstable gn on macOS in ci
  * Pass archiver to gn build
  * Fix navigation to non-local URLs
  * Add support for universal builds for qtwebengine and qtpdf
  * Enable Apple Silicon support
  * Fix cross compilation x86_64-&gt;arm64 on mac
  * Bump version to 5.15.10
  * CustomDialogs: Make custom input fields readable in dark mode
  * CookieBrowser: Make alternating rows readable in dark mode
  * Update Chromium:
  * Bump V8_PATCH_LEVEL
  * Fix clang set-but-unused-variable warning
  * Fix mac toolchain python linker script call
  * Fix missing dependency for gpu sources
  * Fix python calls
  * Fix undefined symbol for universal link
  * Quick fix for regression in service workers by reverting
    backports
  * [Backport] CVE-2022-0797: Out of bounds memory access
    in Mojo
  * [Backport] CVE-2022-1125
  * [Backport] CVE-2022-1138: Inappropriate implementation
    in Web Cursor.
  * [Backport] CVE-2022-1305: Use after free in storage
  * [Backport] CVE-2022-1310: Use after free in regular
    expressions
  * [Backport] CVE-2022-1314: Type Confusion in V8
  * [Backport] CVE-2022-1493: Use after free in Dev Tools
  * [Backport] On arm64 hosts, set host_cpu to 'arm64', not 'arm'
  * [Backport] Security Bug 1296876
  * [Backport] Security bug 1269999
  * [Backport] Security bug 1280852
  * [Backport] Security bug 1292905
  * [Backport] Security bug 1304659
  * [Backport] Security bug 1306507</changelog>
</package>
<package pkgid="914d5475582d465186afccea598a7d24208eb8ca8ae057ce3dc6179aff5be305" name="libqt5-qtpdf-imports" arch="x86_64">
  <version epoch="0" ver="5.15.10" rel="bp154.2.3.2"/>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1613563200">- Add patch to fix sandbox with glibc 2.33 on 32bit:
  * sandbox-statx-futex_time64.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1615377600">- Can't use system_vpx on Leap 15.3</changelog>
  <changelog author="christophe@krop.fr" date="1616587200">- Update to version 5.15.3:
  * Fix spelling and coding style
  * Fix new view request handling (QTBUG-87378)
  * Fix getDefaultScreenId on X11
  * Fix flaky tst_QWebEngineView::textSelectionOutOfInputField test
  * Move touch input tests to separate testcase
  * Add touch input tests for scrolling and pinch zooming
  * Fix rare duplicate ids forming in touch point id's mapping
  * Use the module's version number for QtWebEngineProcess
  * Touch handling: provide id mapping without modifying TouchPoint instance
    (QTBUG-88001)
  * Touch handling: fix mapped ids cleanup for TouchCancel event
  * et custom headers from QWebEngineUrlRequestInfo before triggering redirect
    (QTBUG-88861)
  * Forward modifier flags for lock keys (QTBUG-89001)
  * Fix handling of more than one finger for touch event (QTBUG-86389)
  * Stabilize load signals emitting (QTBUG-65223, QTBUG-87089)
  * Fix building against 5.12 on most CIs
  * Update minimum HarfBuzz version to 2.4.0 (QTBUG-88976)
  * Fix building against Qt 5.14
  * Migrate user script IPC to mojo
  * Fix crashes in user resource controller when single process
  * Minor. Fix namespace for user resource controller
  * Minor. RenderThreadObserverQt is really a RenderConfiguration
  * Remove RenderViewObserverHelper from UserResourceController
  * Cache mojo interface bindings to UserResourceControllerRenderFrame
  * Cache mojo interface bindings for WebChannelIPCTransport
  * Migrate render_view_observer_qt to mojo
  * Fix crash on linkedin.com (QTBUG-89740)
  * Suppress error pages also for http errors if they are disabled
  * Fix leak in QQuickWebEngineViewPrivate::contextMenuRequested
  * Register PerformanceNode early enough
  * Quiet log on webrtc usage
  * Remove configure option that doesn't work
  * Remove Java build dependency
  * Fix blank popups in qml (QTBUG-86034)
  * Fix position of popup on qml (QTBUG-86034, QTBUG-89358)
  * Enable hangout services extension (QTBUG-85731)
  * Allow to fallback to default locale for non existent data packs (QTBUG-90490)
  * Support devtools close button
  * Do not extract download file names from certain url schemes (QTBUG-90355)
  * Leave room for the null-termination byte when checking remote drive path
    (QTBUG-90347)
  * Do not set open files limit for linking if not necessary
  * Remove even more remains of non network service code
  * Add back prefers-color-scheme support (QTBUG-89753)
  * Start supporting chrome.resourcesPrivate API (QTBUG-90035)
  * Enable chrome://user-actions WebUI
  * Remove remains of chrome://flash
  * Fix loadFinished signal if page has content but server sends HTTP error
    (QTBUG-90517)
  * Fix devtools page resource loading as raw data instead of html string
  * Remove frame metadata observer (RenderWidgetHostViewQt) on destroy
  * Resolve installed interceptors right before interception point (QTBUG-86286)
  * Update searches faster
  * Remove more leftovers of the old compositor
  * Enable webrtc logging and the corresponding WebUI
  * Support mips64el platform CPU(loongson 3A4000)
  * Add tracing UI resources
  * Fix crash on meet.google.com
  * Fix mad popup qquickwindows on wayland
  * Fix crashes on BrowserContext destruction
  * Fix crash on exit in quicknanobrowser when popup
  * Remove QtPdf dependency on nss at build-time
  * Avoid accessing profileAdapter when profile is shutting down (QTBUG-91187)
  * Do not flush messages form profile destructor
  * Ignore QQuickWebEngineNewViewRequest if it is unhandled
  * Fix ScopedGLContextChecker with QTWEBENGINE_DISABLE_GPU_THREAD=1
  * Don't send duplicate load progress values
  * Fix neon support in libpng
  * Do not call deprecated profile interceptor on ui thread (QTBUG-86267)
  * Add certificate error message for ERR_SSL_OBSOLETE_VERSION
  * Fix assert in WebContentsAdapter::devToolsFrontendDestroyed
  * Avoid to reject a certificate error twice in Quick
  * Fix PDF viewer plugin
  * FIXUP: Fix swap condition in DisplayGLOutputSurface::updatePaintNode
    (QTBUG-86599)
  * Fix favicon engine under device pixel scaling
  * Do not pass a native keycode matching the menu key when it is remapped
    (QTBUG-86672)
  * Optimize WebEngineSettings::testAttribute
  * Warn about QtWebengineProcess launching from network share (QTBUG-84632)
  * Handle non-ascii names for pulseaudio (QTBUG-85363)
  * Do not set audio device for desktop capture if audio loopback is unsupported
  * Fix new view request handling (QTBUG-87378)
  * Fix getDefaultScreenId on X11
  * Touch handling: provide id mapping without modifying TouchPoint instance
    (QTBUG-88001)
  * Set custom headers from QWebEngineUrlRequestInfo before triggering redirect
    (QTBUG-88861)
  * Stabilize load signals emitting (QTBUG-65223)
- CVE fixes backported in chromium updates:
  * CVE-2020-16044: Use after free in WebRTC
  * CVE-2021-21118: Heap buffer overflow in Blink
  * CVE-2021-21119: Use after free in Media
  * CVE-2021-21120: Use after free in WebSQL
  * CVE-2021-21121: Use after free in Omnibox
  * CVE-2021-21122: Use after free in Blink
  * CVE-2021-21123: Insufficient data validation in File System API
  * CVE-2021-21125: Insufficient policy enforcement in File System API
  * CVE-2021-21126: Insufficient policy enforcement in extensions
  * CVE-2021-21127: Insufficient policy enforcement in extensions
  * CVE-2021-21128: Heap buffer overflow in Blink
  * CVE-2021-21129: Insufficient policy enforcement in File System API
  * CVE-2021-21130: Insufficient policy enforcement in File System API
  * CVE-2021-21131: Insufficient policy enforcement in File System API
  * CVE-2021-21132: Inappropriate implementation in DevTools
  * CVE-2021-21135: Inappropriate implementation in Performance API
  * CVE-2021-21137: Inappropriate implementation in DevTools
  * CVE-2021-21140: Uninitialized Use in USB
  * CVE-2021-21141: Insufficient policy enforcement in File System API
  * CVE-2021-21145: Use after free in Fonts
  * CVE-2021-21146: Use after free in Navigation
  * CVE-2021-21147: Inappropriate implementation in Skia
  * CVE-2021-21148: Heap buffer overflow in V8
  * CVE-2021-21149: Stack overflow in Data Transfer
  * CVE-2021-21150: Use after free in Downloads
  * CVE-2021-21152: Heap buffer overflow in Media
  * CVE-2021-21153: Stack overflow in GPU Process
  * CVE-2021-21156: Heap buffer overflow in V8
  * CVE-2021-21157: Use after free in Web Sockets
- Drop obsolete patches:
  * icu-68.patch
  * icu-68-2.patch
- Rebase patches:
  * fix1163766.patch
  * sandbox-statx-futex_time64.patch
  * rtc-dont-use-h264.patch
  * chromium-glibc-2.33.patch
- Add patch to fix crash with certain locales:
  * 0001-Fix-normalization-of-app-locales.patch
- Clean the spec file a bit</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1618315200">- Add back missing part in fix1163766.patch (boo#1184610)</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1618401600">- Update _constraints to avoid OOM</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1618401601">- Add patch to fix build with GCC 11:
  * 0001-Fix-build-with-GCC-11.patch</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1620302400">- Add patch to fix build with ICU 69:
  * 0001-Fix-build-with-system-ICU-69.patch</changelog>
  <changelog author="christophe@krop.fr" date="1624363200">- Update to version 5.15.5:
  * Abort findText also right on explicit navigation request
  * Adapt to new Connections syntax
  * Add devtools eyedropper support
  * Add more tests to tst_loadsignals
  * Add support for Keyboard.getLayoutMap()
  * Add web-ui chrome://net-internals
  * Allow leaving OCSP off
  * Always send phased wheel events beginning with Began
  * Avoid accessing profileAdapter when profile is shutting down
  * Avoid unknownFunc messages in qmltests
  * Blacklist CertificateError::test_error for macOS
  * Blacklist NewViewRequest::test_loadNewViewRequest on macOS
  * Blacklist handleError on macos until we merge the fix
  * Blacklist numberOfStartedAndFinishedSignalsIsSame on b2q CIs
  * Depend on QCoreApplication::startingUp() for checking
    existence of app
  * Do not allow WebBluetooth to continue
  * Do not hide virtual keyboard if the focused node is editable
  * Doc: Add a note about navigation within a page to a fragment
  * Docs: Suggest to use higher DPI for printing
  * Fix FilePickerController's path validation for windows and
    corresponding tests
  * Fix application locales again
  * Fix embedded PDFs when plugins are disabled
  * Fix first party url for cookie filter
  * Fix inconsistent number of load signals and their order
  * Fix normalization of app locales
  * Fix not working certificates on mac &gt; 10.14
  * Fix prl files on ios
  * Fix qmltests::WebEngineViewNavigationHistory auto tests
  * Fix qtpdf static builds on windows
  * Fix static build of qml qtpdf
  * Follow InProcessGpuThread::Init() on thread priority
  * Generate mojo bindings before compiling extension API
    registration
  * Implement PluginServiceFilterQt
  * Load signals test: use focusProxy for link clicking test
  * Make able to override disabled features from command line
  * Notify canGoBack/canGoForward changes based on web actions
  * Only disconnect QWebEnginePage signals that QWebEngineView
    connected
  * Package devtools inspector overlay
  * Remove ResourceTypeSubFrame check after website update
  * Remove obsolete loadSignals test
    secondLoadForError_WhenErrorPageEnabled
  * Remove qquickwebengineprofile test
  * Remove tracking of frame which load error page
  * Remove ui/snapshot overrides for aura
  * Report server directs in navigation type
  * Return to using the default devtools page
  * Set enumaration root directory for File.webkitRelativePath API
  * Set more Display properties
  * Show PDF viewer in a guest view
  * Support devtools close button in QuickNanoBrowser
  * Support zoom-in, zoom-out and cell web cursors on macOS
  * Unblacklist and fix load signals test for file download
  * Update Chromium and adapt PermissionManagerQt
  * Update platform notes
  * View: test signal for deletion of external page set to view
- Drop patches:
  * 0001-Fix-normalization-of-app-locales.patch
  * 0001-Fix-build-with-GCC-11.patch
  * 0001-Fix-build-with-system-ICU-69.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1624536000">- Update the CMake version workaround to get qtbase's real version</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1628078400">- Add patch to fix build with glibc 2.34 (boo#1189095)
  * 0001-Fix-build-with-glibc-2.34.patch</changelog>
  <changelog author="christophe@krop.fr" date="1631188800">- Update to version 5.15.6:
  * Update Chromium:
    + [Backport] CVE-2021-30560: Use after free in Blink XSLT
    + [Backport] CVE-2021-30566: Stack buffer overflow in Printing
    + [Backport] CVE-2021-30585: Use after free in sensor handling
    + Bump V8_PATCH_LEVEL
    + [Backport] Security bug 1228036
    + [Backport] CVE-2021-30604: Use after free in ANGLE
    + [Backport] CVE-2021-30603: Race in WebAudio
    + [Backport] CVE-2021-30602: Use after free in WebRTC
    + [Backport] CVE-2021-30599: Type Confusion in V8
    + [Backport] CVE-2021-30598: Type Confusion in V8
    + [Backport] Security bug 1227933
    + [Backport] Security bug 1205059
    + [Backport] Security bug 1184294
    + [Backport] Security bug 1198385
    + [Backport] CVE-2021-30588: Type Confusion in V8
    + [Backport] CVE-2021-30587: Inappropriate implementation in Compositing on Windows
    + [Backport] CVE-2021-30573: Use after free in GPU
    + [Backport] CVE-2021-30569, security bugs 1198216 and 1204814
    + [Backport] CVE-2021-30568: Heap buffer overflow in WebGL
    + [Backport] CVE-2021-30541: Use after free in V8
    + [Backport] Security bugs 1197786 and 1194330
    + [Backport] Security bug 1194689
    + [Backport] CVE-2021-30563: Type Confusion in V8
    + [Backport] Security bug 1211215
    + [Backport] Security bug 1209558
    + [Backport] CVE-2021-30553: Use after free in Network service
    + [Backport] CVE-2021-30548: Use after free in Loader
    + [Backport] CVE-2021-30547: Out of bounds write in ANGLE
    + [Backport] CVE-2021-30556: Use after free in WebAudio
    + [Backport] CVE-2021-30559: Out of bounds write in ANGLE
    + [Backport] CVE-2021-30533: Insufficient policy enforcement in PopupBlocker
    + [Backport] Security bug 1202534
    + [Backport] CVE-2021-30536: Out of bounds read in V8
    + [Backport] CVE-2021-30522: Use after free in WebAudio
    + [Backport] CVE-2021-30554 Use after free in WebGL
    + [Backport] CVE-2021-30551: Type Confusion in V8
    + [Backport] CVE-2021-30544: Use after free in BFCache
    + [Backport] CVE-2021-30535: Double free in ICU
    + [Backport] CVE-2021-30534: Insufficient policy enforcement in iFrameSandbox
    + [Backport] CVE-2021-30530: Out of bounds memory access in WebAudio
    + [Backport] CVE-2021-30523: Use after free in WebRTC
    + Generate mojo bindings before compiling extension API registration
  * Bump version from 5.15.5 to 5.15.6
  * Always send phased wheel events beginning with Began
- Import patch from the chromium package:
  * 0001-return-ENOSYS-for-clone3.patch
- Add changes from the chromium package to
  0001-Fix-build-with-glibc-2.34.patch</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1632225600">- Add patches from Arch to fix build with HarfBuzz 3.0.0:
  * chromium-harfbuzz-3.0.0.patch
  * skia-harfbuzz-3.0.0.patch
- ... but don't break with &lt; 2.9.0:
  * chromium-older-harfbuzz.patch</changelog>
  <changelog author="christophe@krop.fr" date="1635508800">- Update to version 5.15.7:
  * Update Chromium:
    [Backport] Linux sandbox: update syscalls numbers on 32-bit platforms
    [Backport] sandbox: linux: allow clock_nanosleep &amp; gettime64
    [Backport] Linux sandbox: update syscall numbers for all platforms.
    [Backport] Ease HarfBuzz API change with feature detection
    [Backport] Security bug 1248665
    [Backport] CVE-2021-37975 : Use after free in V8
    [Backport] CVE-2021-37980 : Inappropriate implementation in Sandbox
    [Backport] CVE-2021-37979 : Heap buffer overflow in WebRTC (2/2)
    [Backport] CVE-2021-37979 : Heap buffer overflow in WebRTC (1/2)
    [Backport] CVE-2021-37978 : Heap buffer overflow in Blink
    [Backport] CVE-2021-30616: Use after free in Media.
    [Backport] CVE-2021-37962 : Use after free in Performance Manager (2/2)
    [Backport] CVE-2021-37962 : Use after free in Performance Manager (1/2)
    [Backport] CVE-2021-37973 : Use after free in Portals
    [Backport] CVE-2021-37971 : Incorrect security UI in Web Browser UI.
    [Backport] CVE-2021-37968 : Inappropriate implementation in Background Fetch API
    [Backport] CVE-2021-37967 : Inappropriate implementation in Background Fetch API
    [Backport] Linux sandbox: return ENOSYS for clone3
    [Backport] Linux sandbox: fix fstatat() crash
    [Backport] Reland "Reland "Linux sandbox syscall broker: use struct kernel_stat""
    [Backport] Security bug 1238178 (2/2)
    [Backport] Security bug 1238178 (1/2)
    [Backport] CVE-2021-30633: Use after free in Indexed DB API (2/2)
    [Backport] CVE-2021-30633: Use after free in Indexed DB API (1/2)
    [Backport] CVE-2021-30630: Inappropriate implementation in Blink
    [Backport] CVE-2021-30629: Use after free in Permissions
    [Backport] CVE-2021-30628: Stack buffer overflow in ANGLE
    [Backport] CVE-2021-30627: Type Confusion in Blink layout
    [Backport] CVE-2021-30626: Out of bounds memory access in ANGLE
    [Backport] CVE-2021-30625: Use after free in Selection API
    [Backport] Security bug 1206289
    [Backport] CVE-2021-30613: Use after free in Base internals
    [Backport] Security bug 1227228
    [Backport] CVE-2021-30618: Inappropriate implementation in DevTools
  * Update patch level
  * Blacklist certificate test until certicates have been renewed
  * Block CORS from local URLs when remote access is not enabled
  * Do not wait on weak_pointer for termination errors
  * Support MSVC_VER 16.8
  * Fix wrong save file filter for Markdown Editor example
  * Add Chromium version source documentation
  * Bump version from 5.15.6 to 5.15.7
  * Fix crash when clicking on a link in PDF
- Drop openSUSE patches:
  * fix1163766.patch. Should be addressed with:
    https://github.com/qt/qtwebengine-chromium/commit/652f834de
    https://github.com/qt/qtwebengine-chromium/commit/faae106ed
    https://github.com/qt/qtwebengine-chromium/commit/6b7b3f1bf
  * chromium-glibc-2.33.patch. Should be addressed with the
    [Backport] Linux sandbox: fix fstatat() crash and
    Reland "Reland "Linux sandbox syscall broker: use struct kernel_stat""
    changes.
  * chromium-older-harfbuzz.patch
- Drop upstream changes:
  * 0001-return-ENOSYS-for-clone3.patch
  * chromium-harfbuzz-3.0.0.patch
  * skia-harfbuzz-3.0.0.patch
- Rebase patches:
  * sandbox-statx-futex_time64.patch</changelog>
  <changelog author="christophe@krop.fr" date="1641297600">- Update to version 5.15.8:
  * Update Chromium:
    [Backport] CVE-2021-3517: libxml2: Heap-based buffer overflow
    in xmlEncodeEntitiesInternal() in entities.c
    [Backport] CVE-2021-3541 libxml2: Exponential entity expansion
    attack bypasses all existing protection mechanisms
    [Backport] CVE-2021-37984 : Heap buffer overflow in PDFium
    [Backport] CVE-2021-37987 : Use after free in Network APIs
    [Backport] CVE-2021-37989 : Inappropriate implementation in Blink
    [Backport] CVE-2021-37992 : Out of bounds read in WebAudio
    [Backport] CVE-2021-37993 : Use after free in PDF Accessibility
    [Backport] CVE-2021-37996 : Insufficient validation of untrusted
    input in Downloads
    [Backport] CVE-2021-38001 : Type Confusion in V8
    [Backport] CVE-2021-38003 : Inappropriate implementation in V8
    [Backport] CVE-2021-38005: Use after free in loader (1/3)
    [Backport] CVE-2021-38005: Use after free in loader (2/3)
    [Backport] CVE-2021-38005: Use after free in loader (3/3)
    [Backport] CVE-2021-38007: Type Confusion in V8
    [Backport] CVE-2021-38009: Inappropriate implementation in cache
    [Backport] CVE-2021-38010: Inappropriate implementation in serviceworkers
    [Backport] CVE-2021-38012: Type Confusion in V8
    [Backport] CVE-2021-38015: Inappropriate implementation in input
    [Backport] CVE-2021-38017: Insufficient policy enforcement in iframe
    sandbox
    [Backport] CVE-2021-38018: Inappropriate implementation in navigation
    [Backport] CVE-2021-38019: Insufficient policy enforcement in CORS
    [Backport] CVE-2021-38021: Inappropriate implementation in referrer
    [Backport] CVE-2021-38022: Inappropriate implementation in WebAuthentication
    [Backport] CVE-2021-4057: Use after free in file API
    [Backport] CVE-2021-4058: Heap buffer overflow in ANGLE (1/2)
    [Backport] CVE-2021-4058: Heap buffer overflow in ANGLE (2/2)
    [Backport] CVE-2021-4059: Insufficient data validation in loader
    [Backport] CVE-2021-4062: Heap buffer overflow in BFCache
    [Backport] CVE-2021-4078: Type confusion in V8
    [Backport] CVE-2021-4079: Out of bounds write in WebRTC
    [Backport] CVE-2021-4098: Insufficient data validation in Mojo
    [Backport] CVE-2021-4099: Use after free in Swiftshader
    [Backport] CVE-2021-4101: Heap buffer overflow in Swiftshader.
    [Backport] CVE-2021-4102: Use after free in V8
    [Backport] Dependency for CVE-2021-37989
    [Backport] Dependency for CVE-2021-38009
    [Backport] Security bug 1245870
    [Backport] Security bug 1252858
    [Backport] Security bug 1259899
    Bump V8_PATCH_LEVEL
    Compile with GCC 11 -std=c++20
    Fix stack overflow on gpu channel recreate with an error
    Use wglSetPixelFormat directly only if in software mode
    [Backport] Handle long SIGSTKSZ in glibc &gt; 2.33
    [Backport] abseil-cpp: Fixes build with latest glibc
  * Handle qtpdf compilation with static runtime
  * Add bitcode support for qtpdf on ios
  * Do not access accessibility from qt post routines
  * Blacklist javascriptClipboard test on ubuntu 20.04
  * Re-enable network-service-in-process
  * Bump version from 5.15.7 to 5.15.8
  * Update patch level
  * Fix pinch gesture
  * Fix leak of properties after XkbRF_GetNamesProp
  * Fix leak on getDefaultScreeenId
- Drop patch:
  * 0001-Fix-build-with-glibc-2.34.patch</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1648209600">- Add patch to fix build with GCC 12:
  * 0001-skia-Some-includes-to-fix-build-with-GCC-12.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1649073600">- Add security fixes:
  * CVE-2022-0971-qtwebengine-5.15.patch (CVE-2022-0971, boo#1197163)
  * CVE-2022-1096-qtwebengine-5.15.patch (CVE-2022-1096, boo#1197552)</changelog>
  <changelog author="christophe@krop.fr" date="1649246400">- Update to version 5.15.9:
  * QPdfView: scale page rendering according to devicePixelRatio
  * Update documented Chromium version
  * Use IsSameDocument() rather than IsLoadingToDifferentDocument()
  * Update module-split for installer
  * Fix printing PDF files
  * Do not override signal handlers
  * Avoid using xkbcommon in non-X11 builds
  * Update documentation
  * Update Chromium:
  * Bump V8_PATCH_LEVEL
  * Do not overwrite signal handlers in the browser process.
  * Replace base::ranges::set_union with std::set_union to fix
    MSVC2017 build
  * [Backport] CVE-2022-0100: Heap buffer overflow in Media
    streams API
  * [Backport] CVE-2022-0102: Type Confusion in V8
  * [Backport] CVE-2022-0103: Use after free in SwiftShader
  * [Backport] CVE-2022-0104: Heap buffer overflow in ANGLE
  * [Backport] CVE-2022-0108: Inappropriate implementation
    in Navigation
  * [Backport] CVE-2022-0109: Inappropriate implementation
    in Autofill
  * [Backport] CVE-2022-0111 and CVE-2022-0117
  * [Backport] CVE-2022-0113: Inappropriate implementatio
    n in Blink
  * [Backport] CVE-2022-0116: Inappropriate implementation
    in Compositing
  * [Backport] CVE-2022-0289: Use after free in Safe browsing
  * [Backport] CVE-2022-0291: Inappropriate implementation
    in Storage
  * [Backport] CVE-2022-0293: Use after free in Web packaging
  * [Backport] CVE-2022-0298: Use after free in Scheduling
  * [Backport] CVE-2022-0305: Inappropriate implementation in
    Service Worker API
  * [Backport] CVE-2022-0306: Heap buffer overflow in PDFium
  * [Backport] CVE-2022-0310 and CVE-0311: Heap buffer overflow
    in Task Manager
  * [Backport] CVE-2022-0456: Use after free in Web Search
  * [Backport] CVE-2022-0459: Use after free in Screen Capture
  * [Backport] CVE-2022-0460: Use after free in Window Dialog
  * [Backport] CVE-2022-0461: Policy bypass in COOP
  * [Backport] CVE-2022-0606: Use after free in ANGLE
  * [Backport] CVE-2022-0607: Use after free in GPU
  * [Backport] CVE-2022-0608: Integer overflow in Mojo
  * [Backport] CVE-2022-0609: Use after free in Animation
  * [Backport] CVE-2022-0610: Inappropriate implementation
    in Gamepad API
  * [Backport] CVE-2022-0971 (boo#1197163)
  * [Backport] CVE-2022-1096 (boo#1197552)
  * [Backport] CVE-2022-23852
  * [Backport] Copy 'name_' member during StyleRuleProperty::Copy
  * [Backport] Security bug 1256885
  * [Backport] Security bug 1258603
  * [Backport] Security bug 1259557
  * [Backport] Security bug 1261415
  * [Backport] Security bug 1265570
  * [Backport] Security bug 1268448
  * [Backport] Security bug 1270014
  * [Backport] Security bug 1274113
  * [Backport] Security bug 1276331
  * [Backport] Security bug 1280743
  * [Backport] Security bug 1289394
  * [Backport] Security bug 1292537
  * [Backport] sandbox: build if glibc 2.34+ dynamic stack size
    is enabled
- Drop patches, now upstream:
  * CVE-2022-0971-qtwebengine-5.15.patch
  * CVE-2022-1096-qtwebengine-5.15.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1651060800">- Add libqt5-qtwebengine-rpmlintrc to silence the
  'shlib-policy-name-error' rpmlint error</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1651492800">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1654689600">- Update to version 5.15.10:
  * Fix top level build with no widget
  * Fix read-after-free on EGL extensions
  * Update Chromium
  * Add workaround for unstable gn on macOS in ci
  * Pass archiver to gn build
  * Fix navigation to non-local URLs
  * Add support for universal builds for qtwebengine and qtpdf
  * Enable Apple Silicon support
  * Fix cross compilation x86_64-&gt;arm64 on mac
  * Bump version to 5.15.10
  * CustomDialogs: Make custom input fields readable in dark mode
  * CookieBrowser: Make alternating rows readable in dark mode
  * Update Chromium:
  * Bump V8_PATCH_LEVEL
  * Fix clang set-but-unused-variable warning
  * Fix mac toolchain python linker script call
  * Fix missing dependency for gpu sources
  * Fix python calls
  * Fix undefined symbol for universal link
  * Quick fix for regression in service workers by reverting
    backports
  * [Backport] CVE-2022-0797: Out of bounds memory access
    in Mojo
  * [Backport] CVE-2022-1125
  * [Backport] CVE-2022-1138: Inappropriate implementation
    in Web Cursor.
  * [Backport] CVE-2022-1305: Use after free in storage
  * [Backport] CVE-2022-1310: Use after free in regular
    expressions
  * [Backport] CVE-2022-1314: Type Confusion in V8
  * [Backport] CVE-2022-1493: Use after free in Dev Tools
  * [Backport] On arm64 hosts, set host_cpu to 'arm64', not 'arm'
  * [Backport] Security Bug 1296876
  * [Backport] Security bug 1269999
  * [Backport] Security bug 1280852
  * [Backport] Security bug 1292905
  * [Backport] Security bug 1304659
  * [Backport] Security bug 1306507</changelog>
</package>
<package pkgid="c9a27ecf85d97bdaf5e65d5c10b91c8abab746e048ce8d17eeb901e4c5479b0f" name="libqt5-qtpdf-private-headers-devel" arch="noarch">
  <version epoch="0" ver="5.15.10" rel="bp154.2.3.2"/>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1613563200">- Add patch to fix sandbox with glibc 2.33 on 32bit:
  * sandbox-statx-futex_time64.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1615377600">- Can't use system_vpx on Leap 15.3</changelog>
  <changelog author="christophe@krop.fr" date="1616587200">- Update to version 5.15.3:
  * Fix spelling and coding style
  * Fix new view request handling (QTBUG-87378)
  * Fix getDefaultScreenId on X11
  * Fix flaky tst_QWebEngineView::textSelectionOutOfInputField test
  * Move touch input tests to separate testcase
  * Add touch input tests for scrolling and pinch zooming
  * Fix rare duplicate ids forming in touch point id's mapping
  * Use the module's version number for QtWebEngineProcess
  * Touch handling: provide id mapping without modifying TouchPoint instance
    (QTBUG-88001)
  * Touch handling: fix mapped ids cleanup for TouchCancel event
  * et custom headers from QWebEngineUrlRequestInfo before triggering redirect
    (QTBUG-88861)
  * Forward modifier flags for lock keys (QTBUG-89001)
  * Fix handling of more than one finger for touch event (QTBUG-86389)
  * Stabilize load signals emitting (QTBUG-65223, QTBUG-87089)
  * Fix building against 5.12 on most CIs
  * Update minimum HarfBuzz version to 2.4.0 (QTBUG-88976)
  * Fix building against Qt 5.14
  * Migrate user script IPC to mojo
  * Fix crashes in user resource controller when single process
  * Minor. Fix namespace for user resource controller
  * Minor. RenderThreadObserverQt is really a RenderConfiguration
  * Remove RenderViewObserverHelper from UserResourceController
  * Cache mojo interface bindings to UserResourceControllerRenderFrame
  * Cache mojo interface bindings for WebChannelIPCTransport
  * Migrate render_view_observer_qt to mojo
  * Fix crash on linkedin.com (QTBUG-89740)
  * Suppress error pages also for http errors if they are disabled
  * Fix leak in QQuickWebEngineViewPrivate::contextMenuRequested
  * Register PerformanceNode early enough
  * Quiet log on webrtc usage
  * Remove configure option that doesn't work
  * Remove Java build dependency
  * Fix blank popups in qml (QTBUG-86034)
  * Fix position of popup on qml (QTBUG-86034, QTBUG-89358)
  * Enable hangout services extension (QTBUG-85731)
  * Allow to fallback to default locale for non existent data packs (QTBUG-90490)
  * Support devtools close button
  * Do not extract download file names from certain url schemes (QTBUG-90355)
  * Leave room for the null-termination byte when checking remote drive path
    (QTBUG-90347)
  * Do not set open files limit for linking if not necessary
  * Remove even more remains of non network service code
  * Add back prefers-color-scheme support (QTBUG-89753)
  * Start supporting chrome.resourcesPrivate API (QTBUG-90035)
  * Enable chrome://user-actions WebUI
  * Remove remains of chrome://flash
  * Fix loadFinished signal if page has content but server sends HTTP error
    (QTBUG-90517)
  * Fix devtools page resource loading as raw data instead of html string
  * Remove frame metadata observer (RenderWidgetHostViewQt) on destroy
  * Resolve installed interceptors right before interception point (QTBUG-86286)
  * Update searches faster
  * Remove more leftovers of the old compositor
  * Enable webrtc logging and the corresponding WebUI
  * Support mips64el platform CPU(loongson 3A4000)
  * Add tracing UI resources
  * Fix crash on meet.google.com
  * Fix mad popup qquickwindows on wayland
  * Fix crashes on BrowserContext destruction
  * Fix crash on exit in quicknanobrowser when popup
  * Remove QtPdf dependency on nss at build-time
  * Avoid accessing profileAdapter when profile is shutting down (QTBUG-91187)
  * Do not flush messages form profile destructor
  * Ignore QQuickWebEngineNewViewRequest if it is unhandled
  * Fix ScopedGLContextChecker with QTWEBENGINE_DISABLE_GPU_THREAD=1
  * Don't send duplicate load progress values
  * Fix neon support in libpng
  * Do not call deprecated profile interceptor on ui thread (QTBUG-86267)
  * Add certificate error message for ERR_SSL_OBSOLETE_VERSION
  * Fix assert in WebContentsAdapter::devToolsFrontendDestroyed
  * Avoid to reject a certificate error twice in Quick
  * Fix PDF viewer plugin
  * FIXUP: Fix swap condition in DisplayGLOutputSurface::updatePaintNode
    (QTBUG-86599)
  * Fix favicon engine under device pixel scaling
  * Do not pass a native keycode matching the menu key when it is remapped
    (QTBUG-86672)
  * Optimize WebEngineSettings::testAttribute
  * Warn about QtWebengineProcess launching from network share (QTBUG-84632)
  * Handle non-ascii names for pulseaudio (QTBUG-85363)
  * Do not set audio device for desktop capture if audio loopback is unsupported
  * Fix new view request handling (QTBUG-87378)
  * Fix getDefaultScreenId on X11
  * Touch handling: provide id mapping without modifying TouchPoint instance
    (QTBUG-88001)
  * Set custom headers from QWebEngineUrlRequestInfo before triggering redirect
    (QTBUG-88861)
  * Stabilize load signals emitting (QTBUG-65223)
- CVE fixes backported in chromium updates:
  * CVE-2020-16044: Use after free in WebRTC
  * CVE-2021-21118: Heap buffer overflow in Blink
  * CVE-2021-21119: Use after free in Media
  * CVE-2021-21120: Use after free in WebSQL
  * CVE-2021-21121: Use after free in Omnibox
  * CVE-2021-21122: Use after free in Blink
  * CVE-2021-21123: Insufficient data validation in File System API
  * CVE-2021-21125: Insufficient policy enforcement in File System API
  * CVE-2021-21126: Insufficient policy enforcement in extensions
  * CVE-2021-21127: Insufficient policy enforcement in extensions
  * CVE-2021-21128: Heap buffer overflow in Blink
  * CVE-2021-21129: Insufficient policy enforcement in File System API
  * CVE-2021-21130: Insufficient policy enforcement in File System API
  * CVE-2021-21131: Insufficient policy enforcement in File System API
  * CVE-2021-21132: Inappropriate implementation in DevTools
  * CVE-2021-21135: Inappropriate implementation in Performance API
  * CVE-2021-21137: Inappropriate implementation in DevTools
  * CVE-2021-21140: Uninitialized Use in USB
  * CVE-2021-21141: Insufficient policy enforcement in File System API
  * CVE-2021-21145: Use after free in Fonts
  * CVE-2021-21146: Use after free in Navigation
  * CVE-2021-21147: Inappropriate implementation in Skia
  * CVE-2021-21148: Heap buffer overflow in V8
  * CVE-2021-21149: Stack overflow in Data Transfer
  * CVE-2021-21150: Use after free in Downloads
  * CVE-2021-21152: Heap buffer overflow in Media
  * CVE-2021-21153: Stack overflow in GPU Process
  * CVE-2021-21156: Heap buffer overflow in V8
  * CVE-2021-21157: Use after free in Web Sockets
- Drop obsolete patches:
  * icu-68.patch
  * icu-68-2.patch
- Rebase patches:
  * fix1163766.patch
  * sandbox-statx-futex_time64.patch
  * rtc-dont-use-h264.patch
  * chromium-glibc-2.33.patch
- Add patch to fix crash with certain locales:
  * 0001-Fix-normalization-of-app-locales.patch
- Clean the spec file a bit</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1618315200">- Add back missing part in fix1163766.patch (boo#1184610)</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1618401600">- Update _constraints to avoid OOM</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1618401601">- Add patch to fix build with GCC 11:
  * 0001-Fix-build-with-GCC-11.patch</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1620302400">- Add patch to fix build with ICU 69:
  * 0001-Fix-build-with-system-ICU-69.patch</changelog>
  <changelog author="christophe@krop.fr" date="1624363200">- Update to version 5.15.5:
  * Abort findText also right on explicit navigation request
  * Adapt to new Connections syntax
  * Add devtools eyedropper support
  * Add more tests to tst_loadsignals
  * Add support for Keyboard.getLayoutMap()
  * Add web-ui chrome://net-internals
  * Allow leaving OCSP off
  * Always send phased wheel events beginning with Began
  * Avoid accessing profileAdapter when profile is shutting down
  * Avoid unknownFunc messages in qmltests
  * Blacklist CertificateError::test_error for macOS
  * Blacklist NewViewRequest::test_loadNewViewRequest on macOS
  * Blacklist handleError on macos until we merge the fix
  * Blacklist numberOfStartedAndFinishedSignalsIsSame on b2q CIs
  * Depend on QCoreApplication::startingUp() for checking
    existence of app
  * Do not allow WebBluetooth to continue
  * Do not hide virtual keyboard if the focused node is editable
  * Doc: Add a note about navigation within a page to a fragment
  * Docs: Suggest to use higher DPI for printing
  * Fix FilePickerController's path validation for windows and
    corresponding tests
  * Fix application locales again
  * Fix embedded PDFs when plugins are disabled
  * Fix first party url for cookie filter
  * Fix inconsistent number of load signals and their order
  * Fix normalization of app locales
  * Fix not working certificates on mac &gt; 10.14
  * Fix prl files on ios
  * Fix qmltests::WebEngineViewNavigationHistory auto tests
  * Fix qtpdf static builds on windows
  * Fix static build of qml qtpdf
  * Follow InProcessGpuThread::Init() on thread priority
  * Generate mojo bindings before compiling extension API
    registration
  * Implement PluginServiceFilterQt
  * Load signals test: use focusProxy for link clicking test
  * Make able to override disabled features from command line
  * Notify canGoBack/canGoForward changes based on web actions
  * Only disconnect QWebEnginePage signals that QWebEngineView
    connected
  * Package devtools inspector overlay
  * Remove ResourceTypeSubFrame check after website update
  * Remove obsolete loadSignals test
    secondLoadForError_WhenErrorPageEnabled
  * Remove qquickwebengineprofile test
  * Remove tracking of frame which load error page
  * Remove ui/snapshot overrides for aura
  * Report server directs in navigation type
  * Return to using the default devtools page
  * Set enumaration root directory for File.webkitRelativePath API
  * Set more Display properties
  * Show PDF viewer in a guest view
  * Support devtools close button in QuickNanoBrowser
  * Support zoom-in, zoom-out and cell web cursors on macOS
  * Unblacklist and fix load signals test for file download
  * Update Chromium and adapt PermissionManagerQt
  * Update platform notes
  * View: test signal for deletion of external page set to view
- Drop patches:
  * 0001-Fix-normalization-of-app-locales.patch
  * 0001-Fix-build-with-GCC-11.patch
  * 0001-Fix-build-with-system-ICU-69.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1624536000">- Update the CMake version workaround to get qtbase's real version</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1628078400">- Add patch to fix build with glibc 2.34 (boo#1189095)
  * 0001-Fix-build-with-glibc-2.34.patch</changelog>
  <changelog author="christophe@krop.fr" date="1631188800">- Update to version 5.15.6:
  * Update Chromium:
    + [Backport] CVE-2021-30560: Use after free in Blink XSLT
    + [Backport] CVE-2021-30566: Stack buffer overflow in Printing
    + [Backport] CVE-2021-30585: Use after free in sensor handling
    + Bump V8_PATCH_LEVEL
    + [Backport] Security bug 1228036
    + [Backport] CVE-2021-30604: Use after free in ANGLE
    + [Backport] CVE-2021-30603: Race in WebAudio
    + [Backport] CVE-2021-30602: Use after free in WebRTC
    + [Backport] CVE-2021-30599: Type Confusion in V8
    + [Backport] CVE-2021-30598: Type Confusion in V8
    + [Backport] Security bug 1227933
    + [Backport] Security bug 1205059
    + [Backport] Security bug 1184294
    + [Backport] Security bug 1198385
    + [Backport] CVE-2021-30588: Type Confusion in V8
    + [Backport] CVE-2021-30587: Inappropriate implementation in Compositing on Windows
    + [Backport] CVE-2021-30573: Use after free in GPU
    + [Backport] CVE-2021-30569, security bugs 1198216 and 1204814
    + [Backport] CVE-2021-30568: Heap buffer overflow in WebGL
    + [Backport] CVE-2021-30541: Use after free in V8
    + [Backport] Security bugs 1197786 and 1194330
    + [Backport] Security bug 1194689
    + [Backport] CVE-2021-30563: Type Confusion in V8
    + [Backport] Security bug 1211215
    + [Backport] Security bug 1209558
    + [Backport] CVE-2021-30553: Use after free in Network service
    + [Backport] CVE-2021-30548: Use after free in Loader
    + [Backport] CVE-2021-30547: Out of bounds write in ANGLE
    + [Backport] CVE-2021-30556: Use after free in WebAudio
    + [Backport] CVE-2021-30559: Out of bounds write in ANGLE
    + [Backport] CVE-2021-30533: Insufficient policy enforcement in PopupBlocker
    + [Backport] Security bug 1202534
    + [Backport] CVE-2021-30536: Out of bounds read in V8
    + [Backport] CVE-2021-30522: Use after free in WebAudio
    + [Backport] CVE-2021-30554 Use after free in WebGL
    + [Backport] CVE-2021-30551: Type Confusion in V8
    + [Backport] CVE-2021-30544: Use after free in BFCache
    + [Backport] CVE-2021-30535: Double free in ICU
    + [Backport] CVE-2021-30534: Insufficient policy enforcement in iFrameSandbox
    + [Backport] CVE-2021-30530: Out of bounds memory access in WebAudio
    + [Backport] CVE-2021-30523: Use after free in WebRTC
    + Generate mojo bindings before compiling extension API registration
  * Bump version from 5.15.5 to 5.15.6
  * Always send phased wheel events beginning with Began
- Import patch from the chromium package:
  * 0001-return-ENOSYS-for-clone3.patch
- Add changes from the chromium package to
  0001-Fix-build-with-glibc-2.34.patch</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1632225600">- Add patches from Arch to fix build with HarfBuzz 3.0.0:
  * chromium-harfbuzz-3.0.0.patch
  * skia-harfbuzz-3.0.0.patch
- ... but don't break with &lt; 2.9.0:
  * chromium-older-harfbuzz.patch</changelog>
  <changelog author="christophe@krop.fr" date="1635508800">- Update to version 5.15.7:
  * Update Chromium:
    [Backport] Linux sandbox: update syscalls numbers on 32-bit platforms
    [Backport] sandbox: linux: allow clock_nanosleep &amp; gettime64
    [Backport] Linux sandbox: update syscall numbers for all platforms.
    [Backport] Ease HarfBuzz API change with feature detection
    [Backport] Security bug 1248665
    [Backport] CVE-2021-37975 : Use after free in V8
    [Backport] CVE-2021-37980 : Inappropriate implementation in Sandbox
    [Backport] CVE-2021-37979 : Heap buffer overflow in WebRTC (2/2)
    [Backport] CVE-2021-37979 : Heap buffer overflow in WebRTC (1/2)
    [Backport] CVE-2021-37978 : Heap buffer overflow in Blink
    [Backport] CVE-2021-30616: Use after free in Media.
    [Backport] CVE-2021-37962 : Use after free in Performance Manager (2/2)
    [Backport] CVE-2021-37962 : Use after free in Performance Manager (1/2)
    [Backport] CVE-2021-37973 : Use after free in Portals
    [Backport] CVE-2021-37971 : Incorrect security UI in Web Browser UI.
    [Backport] CVE-2021-37968 : Inappropriate implementation in Background Fetch API
    [Backport] CVE-2021-37967 : Inappropriate implementation in Background Fetch API
    [Backport] Linux sandbox: return ENOSYS for clone3
    [Backport] Linux sandbox: fix fstatat() crash
    [Backport] Reland "Reland "Linux sandbox syscall broker: use struct kernel_stat""
    [Backport] Security bug 1238178 (2/2)
    [Backport] Security bug 1238178 (1/2)
    [Backport] CVE-2021-30633: Use after free in Indexed DB API (2/2)
    [Backport] CVE-2021-30633: Use after free in Indexed DB API (1/2)
    [Backport] CVE-2021-30630: Inappropriate implementation in Blink
    [Backport] CVE-2021-30629: Use after free in Permissions
    [Backport] CVE-2021-30628: Stack buffer overflow in ANGLE
    [Backport] CVE-2021-30627: Type Confusion in Blink layout
    [Backport] CVE-2021-30626: Out of bounds memory access in ANGLE
    [Backport] CVE-2021-30625: Use after free in Selection API
    [Backport] Security bug 1206289
    [Backport] CVE-2021-30613: Use after free in Base internals
    [Backport] Security bug 1227228
    [Backport] CVE-2021-30618: Inappropriate implementation in DevTools
  * Update patch level
  * Blacklist certificate test until certicates have been renewed
  * Block CORS from local URLs when remote access is not enabled
  * Do not wait on weak_pointer for termination errors
  * Support MSVC_VER 16.8
  * Fix wrong save file filter for Markdown Editor example
  * Add Chromium version source documentation
  * Bump version from 5.15.6 to 5.15.7
  * Fix crash when clicking on a link in PDF
- Drop openSUSE patches:
  * fix1163766.patch. Should be addressed with:
    https://github.com/qt/qtwebengine-chromium/commit/652f834de
    https://github.com/qt/qtwebengine-chromium/commit/faae106ed
    https://github.com/qt/qtwebengine-chromium/commit/6b7b3f1bf
  * chromium-glibc-2.33.patch. Should be addressed with the
    [Backport] Linux sandbox: fix fstatat() crash and
    Reland "Reland "Linux sandbox syscall broker: use struct kernel_stat""
    changes.
  * chromium-older-harfbuzz.patch
- Drop upstream changes:
  * 0001-return-ENOSYS-for-clone3.patch
  * chromium-harfbuzz-3.0.0.patch
  * skia-harfbuzz-3.0.0.patch
- Rebase patches:
  * sandbox-statx-futex_time64.patch</changelog>
  <changelog author="christophe@krop.fr" date="1641297600">- Update to version 5.15.8:
  * Update Chromium:
    [Backport] CVE-2021-3517: libxml2: Heap-based buffer overflow
    in xmlEncodeEntitiesInternal() in entities.c
    [Backport] CVE-2021-3541 libxml2: Exponential entity expansion
    attack bypasses all existing protection mechanisms
    [Backport] CVE-2021-37984 : Heap buffer overflow in PDFium
    [Backport] CVE-2021-37987 : Use after free in Network APIs
    [Backport] CVE-2021-37989 : Inappropriate implementation in Blink
    [Backport] CVE-2021-37992 : Out of bounds read in WebAudio
    [Backport] CVE-2021-37993 : Use after free in PDF Accessibility
    [Backport] CVE-2021-37996 : Insufficient validation of untrusted
    input in Downloads
    [Backport] CVE-2021-38001 : Type Confusion in V8
    [Backport] CVE-2021-38003 : Inappropriate implementation in V8
    [Backport] CVE-2021-38005: Use after free in loader (1/3)
    [Backport] CVE-2021-38005: Use after free in loader (2/3)
    [Backport] CVE-2021-38005: Use after free in loader (3/3)
    [Backport] CVE-2021-38007: Type Confusion in V8
    [Backport] CVE-2021-38009: Inappropriate implementation in cache
    [Backport] CVE-2021-38010: Inappropriate implementation in serviceworkers
    [Backport] CVE-2021-38012: Type Confusion in V8
    [Backport] CVE-2021-38015: Inappropriate implementation in input
    [Backport] CVE-2021-38017: Insufficient policy enforcement in iframe
    sandbox
    [Backport] CVE-2021-38018: Inappropriate implementation in navigation
    [Backport] CVE-2021-38019: Insufficient policy enforcement in CORS
    [Backport] CVE-2021-38021: Inappropriate implementation in referrer
    [Backport] CVE-2021-38022: Inappropriate implementation in WebAuthentication
    [Backport] CVE-2021-4057: Use after free in file API
    [Backport] CVE-2021-4058: Heap buffer overflow in ANGLE (1/2)
    [Backport] CVE-2021-4058: Heap buffer overflow in ANGLE (2/2)
    [Backport] CVE-2021-4059: Insufficient data validation in loader
    [Backport] CVE-2021-4062: Heap buffer overflow in BFCache
    [Backport] CVE-2021-4078: Type confusion in V8
    [Backport] CVE-2021-4079: Out of bounds write in WebRTC
    [Backport] CVE-2021-4098: Insufficient data validation in Mojo
    [Backport] CVE-2021-4099: Use after free in Swiftshader
    [Backport] CVE-2021-4101: Heap buffer overflow in Swiftshader.
    [Backport] CVE-2021-4102: Use after free in V8
    [Backport] Dependency for CVE-2021-37989
    [Backport] Dependency for CVE-2021-38009
    [Backport] Security bug 1245870
    [Backport] Security bug 1252858
    [Backport] Security bug 1259899
    Bump V8_PATCH_LEVEL
    Compile with GCC 11 -std=c++20
    Fix stack overflow on gpu channel recreate with an error
    Use wglSetPixelFormat directly only if in software mode
    [Backport] Handle long SIGSTKSZ in glibc &gt; 2.33
    [Backport] abseil-cpp: Fixes build with latest glibc
  * Handle qtpdf compilation with static runtime
  * Add bitcode support for qtpdf on ios
  * Do not access accessibility from qt post routines
  * Blacklist javascriptClipboard test on ubuntu 20.04
  * Re-enable network-service-in-process
  * Bump version from 5.15.7 to 5.15.8
  * Update patch level
  * Fix pinch gesture
  * Fix leak of properties after XkbRF_GetNamesProp
  * Fix leak on getDefaultScreeenId
- Drop patch:
  * 0001-Fix-build-with-glibc-2.34.patch</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1648209600">- Add patch to fix build with GCC 12:
  * 0001-skia-Some-includes-to-fix-build-with-GCC-12.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1649073600">- Add security fixes:
  * CVE-2022-0971-qtwebengine-5.15.patch (CVE-2022-0971, boo#1197163)
  * CVE-2022-1096-qtwebengine-5.15.patch (CVE-2022-1096, boo#1197552)</changelog>
  <changelog author="christophe@krop.fr" date="1649246400">- Update to version 5.15.9:
  * QPdfView: scale page rendering according to devicePixelRatio
  * Update documented Chromium version
  * Use IsSameDocument() rather than IsLoadingToDifferentDocument()
  * Update module-split for installer
  * Fix printing PDF files
  * Do not override signal handlers
  * Avoid using xkbcommon in non-X11 builds
  * Update documentation
  * Update Chromium:
  * Bump V8_PATCH_LEVEL
  * Do not overwrite signal handlers in the browser process.
  * Replace base::ranges::set_union with std::set_union to fix
    MSVC2017 build
  * [Backport] CVE-2022-0100: Heap buffer overflow in Media
    streams API
  * [Backport] CVE-2022-0102: Type Confusion in V8
  * [Backport] CVE-2022-0103: Use after free in SwiftShader
  * [Backport] CVE-2022-0104: Heap buffer overflow in ANGLE
  * [Backport] CVE-2022-0108: Inappropriate implementation
    in Navigation
  * [Backport] CVE-2022-0109: Inappropriate implementation
    in Autofill
  * [Backport] CVE-2022-0111 and CVE-2022-0117
  * [Backport] CVE-2022-0113: Inappropriate implementatio
    n in Blink
  * [Backport] CVE-2022-0116: Inappropriate implementation
    in Compositing
  * [Backport] CVE-2022-0289: Use after free in Safe browsing
  * [Backport] CVE-2022-0291: Inappropriate implementation
    in Storage
  * [Backport] CVE-2022-0293: Use after free in Web packaging
  * [Backport] CVE-2022-0298: Use after free in Scheduling
  * [Backport] CVE-2022-0305: Inappropriate implementation in
    Service Worker API
  * [Backport] CVE-2022-0306: Heap buffer overflow in PDFium
  * [Backport] CVE-2022-0310 and CVE-0311: Heap buffer overflow
    in Task Manager
  * [Backport] CVE-2022-0456: Use after free in Web Search
  * [Backport] CVE-2022-0459: Use after free in Screen Capture
  * [Backport] CVE-2022-0460: Use after free in Window Dialog
  * [Backport] CVE-2022-0461: Policy bypass in COOP
  * [Backport] CVE-2022-0606: Use after free in ANGLE
  * [Backport] CVE-2022-0607: Use after free in GPU
  * [Backport] CVE-2022-0608: Integer overflow in Mojo
  * [Backport] CVE-2022-0609: Use after free in Animation
  * [Backport] CVE-2022-0610: Inappropriate implementation
    in Gamepad API
  * [Backport] CVE-2022-0971 (boo#1197163)
  * [Backport] CVE-2022-1096 (boo#1197552)
  * [Backport] CVE-2022-23852
  * [Backport] Copy 'name_' member during StyleRuleProperty::Copy
  * [Backport] Security bug 1256885
  * [Backport] Security bug 1258603
  * [Backport] Security bug 1259557
  * [Backport] Security bug 1261415
  * [Backport] Security bug 1265570
  * [Backport] Security bug 1268448
  * [Backport] Security bug 1270014
  * [Backport] Security bug 1274113
  * [Backport] Security bug 1276331
  * [Backport] Security bug 1280743
  * [Backport] Security bug 1289394
  * [Backport] Security bug 1292537
  * [Backport] sandbox: build if glibc 2.34+ dynamic stack size
    is enabled
- Drop patches, now upstream:
  * CVE-2022-0971-qtwebengine-5.15.patch
  * CVE-2022-1096-qtwebengine-5.15.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1651060800">- Add libqt5-qtwebengine-rpmlintrc to silence the
  'shlib-policy-name-error' rpmlint error</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1651492800">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1654689600">- Update to version 5.15.10:
  * Fix top level build with no widget
  * Fix read-after-free on EGL extensions
  * Update Chromium
  * Add workaround for unstable gn on macOS in ci
  * Pass archiver to gn build
  * Fix navigation to non-local URLs
  * Add support for universal builds for qtwebengine and qtpdf
  * Enable Apple Silicon support
  * Fix cross compilation x86_64-&gt;arm64 on mac
  * Bump version to 5.15.10
  * CustomDialogs: Make custom input fields readable in dark mode
  * CookieBrowser: Make alternating rows readable in dark mode
  * Update Chromium:
  * Bump V8_PATCH_LEVEL
  * Fix clang set-but-unused-variable warning
  * Fix mac toolchain python linker script call
  * Fix missing dependency for gpu sources
  * Fix python calls
  * Fix undefined symbol for universal link
  * Quick fix for regression in service workers by reverting
    backports
  * [Backport] CVE-2022-0797: Out of bounds memory access
    in Mojo
  * [Backport] CVE-2022-1125
  * [Backport] CVE-2022-1138: Inappropriate implementation
    in Web Cursor.
  * [Backport] CVE-2022-1305: Use after free in storage
  * [Backport] CVE-2022-1310: Use after free in regular
    expressions
  * [Backport] CVE-2022-1314: Type Confusion in V8
  * [Backport] CVE-2022-1493: Use after free in Dev Tools
  * [Backport] On arm64 hosts, set host_cpu to 'arm64', not 'arm'
  * [Backport] Security Bug 1296876
  * [Backport] Security bug 1269999
  * [Backport] Security bug 1280852
  * [Backport] Security bug 1292905
  * [Backport] Security bug 1304659
  * [Backport] Security bug 1306507</changelog>
</package>
<package pkgid="90da1e4ee901316bb20825ce6526e7706e1ec9b46fe954e482483b750ccafc61" name="libqt5-qtstyleplugins" arch="aarch64">
  <version epoch="0" ver="5.0.0+git20170311" rel="bp154.3.3.1"/>
  <changelog author="sor.alexei@meowr.ru" date="1475928000">- Initial package.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1477310400">- Update to version 5.0.0+git20161022 (changes since
  5.0.0+git20161005):
  * Remove usage of deprecated QStyleOption*V&lt;N&gt;.
  * Add Q_DECL_OVERRIDE.
  * Build the BB10 style only with Qt 5.7 or later.
- Remove the conflict with libqt5-qtbase-platformtheme-gtk3 in
  libqt5-qtstyleplugins-platformtheme-gtk2: it causes the gtk2
  platform theme to practically never get installed.
  The reason for the conflict in the first place is overrated
  anyway: in order to get a segfault, a user would have to manually
  make an envvar "QT_STYLE_OVERRIDE=gtk2" with also having Gtk3
  Platform Theme triggered ("QT_QPA_PLATFORMTHEME=gtk3").</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1480334400">- Add 58.diff: private Qt platformsupport module got splited into
  many pieces in 5.8. Use the appropriate module with Qt &gt;= 5.8</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1480334401">- Update to version 5.0.0+git20161024:
  * Set plugin class name for styles.
- Remove libqt5-qtstyleplugins-class-names.patch: fixed upstream.</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1481716800">- Bump to 5.7.1
  * For more details please see:
    https://blog.qt.io/blog/2016/12/14/qt-5-7-1-released/
    and https://www.qt.io/qt5-7/</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1481803200">- Update to version 5.0.0+git20161215 (changes since
  5.0.0+git20161024):
  * Remove obsolete and unused QBB10StylePlugin::keys().
  * Remove unused sync.profile.
  * Fix building with Qt 5.8+.
- Remove 58.diff: fixed upstream.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1485259200">- Update to version 5.0.0+git20170119 (changes since
  5.0.0+git20161215):
  * Use Use QCommonStyle instead of QProxyStyle in QCleanlooksStyle
    and QPlastiqueStyle: this allows to use correct colour
    (non-white) for label text in a QComboBox. Also improves
    progress bar drawing - now looks like in Qt4, the progress bar
    content fills the entire groove vertically.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1493294400">- Update to version 5.0.0+git20170311 (changes since
  5.0.0+git20170119):
  * Plastique, Motif/CDE: Fix QSpinBox height in layout.
  * Fix Plastique, Cleanlooks and Motif animation timer.</changelog>
  <changelog author="christophe@krop.fr" date="1512993600">- Update the license tag (boo#967696)</changelog>
  <changelog author="christophe@krop.fr" date="1520942400">- Fix the license tag.</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1583409600">- Add patch to fix build against Qt 5.15:
  * fix-build-qt5.15.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1591704000">- Amend patch to fix issues with platform themes providing an
  incompatible palette (boo#1172658):
  * fix-build-qt5.15.patch</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1612612800">- Add qtstyleplugins-gtksettings.patch: Align Qt with GTK settings
  a bit better.
- Add qtstyleplugins-fix-deprecations.patch: Fix various Qt deprecations.
- Remove fix-build-qt5.15.patch: merge into
  qtstyleplugins-fix-deprecations.patch (not distinct enough).</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1661169600">- Edit qtstyleplugins-fix-deprecations.patch to use the older more
  reliable method for progress bar orientation (boo#1202611)</changelog>
</package>
<package pkgid="10d607f0437ea0c6ea3897c6939870c9e36020007be472d217ebc6447fd15ab8" name="libqt5-qtstyleplugins" arch="i586">
  <version epoch="0" ver="5.0.0+git20170311" rel="bp154.3.3.1"/>
  <changelog author="sor.alexei@meowr.ru" date="1475928000">- Initial package.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1477310400">- Update to version 5.0.0+git20161022 (changes since
  5.0.0+git20161005):
  * Remove usage of deprecated QStyleOption*V&lt;N&gt;.
  * Add Q_DECL_OVERRIDE.
  * Build the BB10 style only with Qt 5.7 or later.
- Remove the conflict with libqt5-qtbase-platformtheme-gtk3 in
  libqt5-qtstyleplugins-platformtheme-gtk2: it causes the gtk2
  platform theme to practically never get installed.
  The reason for the conflict in the first place is overrated
  anyway: in order to get a segfault, a user would have to manually
  make an envvar "QT_STYLE_OVERRIDE=gtk2" with also having Gtk3
  Platform Theme triggered ("QT_QPA_PLATFORMTHEME=gtk3").</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1480334400">- Add 58.diff: private Qt platformsupport module got splited into
  many pieces in 5.8. Use the appropriate module with Qt &gt;= 5.8</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1480334401">- Update to version 5.0.0+git20161024:
  * Set plugin class name for styles.
- Remove libqt5-qtstyleplugins-class-names.patch: fixed upstream.</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1481716800">- Bump to 5.7.1
  * For more details please see:
    https://blog.qt.io/blog/2016/12/14/qt-5-7-1-released/
    and https://www.qt.io/qt5-7/</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1481803200">- Update to version 5.0.0+git20161215 (changes since
  5.0.0+git20161024):
  * Remove obsolete and unused QBB10StylePlugin::keys().
  * Remove unused sync.profile.
  * Fix building with Qt 5.8+.
- Remove 58.diff: fixed upstream.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1485259200">- Update to version 5.0.0+git20170119 (changes since
  5.0.0+git20161215):
  * Use Use QCommonStyle instead of QProxyStyle in QCleanlooksStyle
    and QPlastiqueStyle: this allows to use correct colour
    (non-white) for label text in a QComboBox. Also improves
    progress bar drawing - now looks like in Qt4, the progress bar
    content fills the entire groove vertically.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1493294400">- Update to version 5.0.0+git20170311 (changes since
  5.0.0+git20170119):
  * Plastique, Motif/CDE: Fix QSpinBox height in layout.
  * Fix Plastique, Cleanlooks and Motif animation timer.</changelog>
  <changelog author="christophe@krop.fr" date="1512993600">- Update the license tag (boo#967696)</changelog>
  <changelog author="christophe@krop.fr" date="1520942400">- Fix the license tag.</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1583409600">- Add patch to fix build against Qt 5.15:
  * fix-build-qt5.15.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1591704000">- Amend patch to fix issues with platform themes providing an
  incompatible palette (boo#1172658):
  * fix-build-qt5.15.patch</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1612612800">- Add qtstyleplugins-gtksettings.patch: Align Qt with GTK settings
  a bit better.
- Add qtstyleplugins-fix-deprecations.patch: Fix various Qt deprecations.
- Remove fix-build-qt5.15.patch: merge into
  qtstyleplugins-fix-deprecations.patch (not distinct enough).</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1661169600">- Edit qtstyleplugins-fix-deprecations.patch to use the older more
  reliable method for progress bar orientation (boo#1202611)</changelog>
</package>
<package pkgid="d84c23e7b786988c3c26e467dc4818d002129764d7c80be86340b622eb2d3ac6" name="libqt5-qtstyleplugins" arch="ppc64le">
  <version epoch="0" ver="5.0.0+git20170311" rel="bp154.3.3.1"/>
  <changelog author="sor.alexei@meowr.ru" date="1475928000">- Initial package.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1477310400">- Update to version 5.0.0+git20161022 (changes since
  5.0.0+git20161005):
  * Remove usage of deprecated QStyleOption*V&lt;N&gt;.
  * Add Q_DECL_OVERRIDE.
  * Build the BB10 style only with Qt 5.7 or later.
- Remove the conflict with libqt5-qtbase-platformtheme-gtk3 in
  libqt5-qtstyleplugins-platformtheme-gtk2: it causes the gtk2
  platform theme to practically never get installed.
  The reason for the conflict in the first place is overrated
  anyway: in order to get a segfault, a user would have to manually
  make an envvar "QT_STYLE_OVERRIDE=gtk2" with also having Gtk3
  Platform Theme triggered ("QT_QPA_PLATFORMTHEME=gtk3").</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1480334400">- Add 58.diff: private Qt platformsupport module got splited into
  many pieces in 5.8. Use the appropriate module with Qt &gt;= 5.8</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1480334401">- Update to version 5.0.0+git20161024:
  * Set plugin class name for styles.
- Remove libqt5-qtstyleplugins-class-names.patch: fixed upstream.</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1481716800">- Bump to 5.7.1
  * For more details please see:
    https://blog.qt.io/blog/2016/12/14/qt-5-7-1-released/
    and https://www.qt.io/qt5-7/</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1481803200">- Update to version 5.0.0+git20161215 (changes since
  5.0.0+git20161024):
  * Remove obsolete and unused QBB10StylePlugin::keys().
  * Remove unused sync.profile.
  * Fix building with Qt 5.8+.
- Remove 58.diff: fixed upstream.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1485259200">- Update to version 5.0.0+git20170119 (changes since
  5.0.0+git20161215):
  * Use Use QCommonStyle instead of QProxyStyle in QCleanlooksStyle
    and QPlastiqueStyle: this allows to use correct colour
    (non-white) for label text in a QComboBox. Also improves
    progress bar drawing - now looks like in Qt4, the progress bar
    content fills the entire groove vertically.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1493294400">- Update to version 5.0.0+git20170311 (changes since
  5.0.0+git20170119):
  * Plastique, Motif/CDE: Fix QSpinBox height in layout.
  * Fix Plastique, Cleanlooks and Motif animation timer.</changelog>
  <changelog author="christophe@krop.fr" date="1512993600">- Update the license tag (boo#967696)</changelog>
  <changelog author="christophe@krop.fr" date="1520942400">- Fix the license tag.</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1583409600">- Add patch to fix build against Qt 5.15:
  * fix-build-qt5.15.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1591704000">- Amend patch to fix issues with platform themes providing an
  incompatible palette (boo#1172658):
  * fix-build-qt5.15.patch</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1612612800">- Add qtstyleplugins-gtksettings.patch: Align Qt with GTK settings
  a bit better.
- Add qtstyleplugins-fix-deprecations.patch: Fix various Qt deprecations.
- Remove fix-build-qt5.15.patch: merge into
  qtstyleplugins-fix-deprecations.patch (not distinct enough).</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1661169600">- Edit qtstyleplugins-fix-deprecations.patch to use the older more
  reliable method for progress bar orientation (boo#1202611)</changelog>
</package>
<package pkgid="40d62d46eadfee1635cfdbf5b28b8ce2b28c862e4f817ab0388362023823b2b5" name="libqt5-qtstyleplugins" arch="s390x">
  <version epoch="0" ver="5.0.0+git20170311" rel="bp154.3.3.1"/>
  <changelog author="sor.alexei@meowr.ru" date="1475928000">- Initial package.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1477310400">- Update to version 5.0.0+git20161022 (changes since
  5.0.0+git20161005):
  * Remove usage of deprecated QStyleOption*V&lt;N&gt;.
  * Add Q_DECL_OVERRIDE.
  * Build the BB10 style only with Qt 5.7 or later.
- Remove the conflict with libqt5-qtbase-platformtheme-gtk3 in
  libqt5-qtstyleplugins-platformtheme-gtk2: it causes the gtk2
  platform theme to practically never get installed.
  The reason for the conflict in the first place is overrated
  anyway: in order to get a segfault, a user would have to manually
  make an envvar "QT_STYLE_OVERRIDE=gtk2" with also having Gtk3
  Platform Theme triggered ("QT_QPA_PLATFORMTHEME=gtk3").</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1480334400">- Add 58.diff: private Qt platformsupport module got splited into
  many pieces in 5.8. Use the appropriate module with Qt &gt;= 5.8</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1480334401">- Update to version 5.0.0+git20161024:
  * Set plugin class name for styles.
- Remove libqt5-qtstyleplugins-class-names.patch: fixed upstream.</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1481716800">- Bump to 5.7.1
  * For more details please see:
    https://blog.qt.io/blog/2016/12/14/qt-5-7-1-released/
    and https://www.qt.io/qt5-7/</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1481803200">- Update to version 5.0.0+git20161215 (changes since
  5.0.0+git20161024):
  * Remove obsolete and unused QBB10StylePlugin::keys().
  * Remove unused sync.profile.
  * Fix building with Qt 5.8+.
- Remove 58.diff: fixed upstream.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1485259200">- Update to version 5.0.0+git20170119 (changes since
  5.0.0+git20161215):
  * Use Use QCommonStyle instead of QProxyStyle in QCleanlooksStyle
    and QPlastiqueStyle: this allows to use correct colour
    (non-white) for label text in a QComboBox. Also improves
    progress bar drawing - now looks like in Qt4, the progress bar
    content fills the entire groove vertically.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1493294400">- Update to version 5.0.0+git20170311 (changes since
  5.0.0+git20170119):
  * Plastique, Motif/CDE: Fix QSpinBox height in layout.
  * Fix Plastique, Cleanlooks and Motif animation timer.</changelog>
  <changelog author="christophe@krop.fr" date="1512993600">- Update the license tag (boo#967696)</changelog>
  <changelog author="christophe@krop.fr" date="1520942400">- Fix the license tag.</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1583409600">- Add patch to fix build against Qt 5.15:
  * fix-build-qt5.15.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1591704000">- Amend patch to fix issues with platform themes providing an
  incompatible palette (boo#1172658):
  * fix-build-qt5.15.patch</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1612612800">- Add qtstyleplugins-gtksettings.patch: Align Qt with GTK settings
  a bit better.
- Add qtstyleplugins-fix-deprecations.patch: Fix various Qt deprecations.
- Remove fix-build-qt5.15.patch: merge into
  qtstyleplugins-fix-deprecations.patch (not distinct enough).</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1661169600">- Edit qtstyleplugins-fix-deprecations.patch to use the older more
  reliable method for progress bar orientation (boo#1202611)</changelog>
</package>
<package pkgid="981c5c3f3e7f85f878f109dc7364462bdfb7d470b9326d1156a16a368d91c087" name="libqt5-qtstyleplugins" arch="src">
  <version epoch="0" ver="5.0.0+git20170311" rel="bp154.3.3.1"/>
  <changelog author="sor.alexei@meowr.ru" date="1475928000">- Initial package.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1477310400">- Update to version 5.0.0+git20161022 (changes since
  5.0.0+git20161005):
  * Remove usage of deprecated QStyleOption*V&lt;N&gt;.
  * Add Q_DECL_OVERRIDE.
  * Build the BB10 style only with Qt 5.7 or later.
- Remove the conflict with libqt5-qtbase-platformtheme-gtk3 in
  libqt5-qtstyleplugins-platformtheme-gtk2: it causes the gtk2
  platform theme to practically never get installed.
  The reason for the conflict in the first place is overrated
  anyway: in order to get a segfault, a user would have to manually
  make an envvar "QT_STYLE_OVERRIDE=gtk2" with also having Gtk3
  Platform Theme triggered ("QT_QPA_PLATFORMTHEME=gtk3").</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1480334400">- Add 58.diff: private Qt platformsupport module got splited into
  many pieces in 5.8. Use the appropriate module with Qt &gt;= 5.8</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1480334401">- Update to version 5.0.0+git20161024:
  * Set plugin class name for styles.
- Remove libqt5-qtstyleplugins-class-names.patch: fixed upstream.</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1481716800">- Bump to 5.7.1
  * For more details please see:
    https://blog.qt.io/blog/2016/12/14/qt-5-7-1-released/
    and https://www.qt.io/qt5-7/</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1481803200">- Update to version 5.0.0+git20161215 (changes since
  5.0.0+git20161024):
  * Remove obsolete and unused QBB10StylePlugin::keys().
  * Remove unused sync.profile.
  * Fix building with Qt 5.8+.
- Remove 58.diff: fixed upstream.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1485259200">- Update to version 5.0.0+git20170119 (changes since
  5.0.0+git20161215):
  * Use Use QCommonStyle instead of QProxyStyle in QCleanlooksStyle
    and QPlastiqueStyle: this allows to use correct colour
    (non-white) for label text in a QComboBox. Also improves
    progress bar drawing - now looks like in Qt4, the progress bar
    content fills the entire groove vertically.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1493294400">- Update to version 5.0.0+git20170311 (changes since
  5.0.0+git20170119):
  * Plastique, Motif/CDE: Fix QSpinBox height in layout.
  * Fix Plastique, Cleanlooks and Motif animation timer.</changelog>
  <changelog author="christophe@krop.fr" date="1512993600">- Update the license tag (boo#967696)</changelog>
  <changelog author="christophe@krop.fr" date="1520942400">- Fix the license tag.</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1583409600">- Add patch to fix build against Qt 5.15:
  * fix-build-qt5.15.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1591704000">- Amend patch to fix issues with platform themes providing an
  incompatible palette (boo#1172658):
  * fix-build-qt5.15.patch</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1612612800">- Add qtstyleplugins-gtksettings.patch: Align Qt with GTK settings
  a bit better.
- Add qtstyleplugins-fix-deprecations.patch: Fix various Qt deprecations.
- Remove fix-build-qt5.15.patch: merge into
  qtstyleplugins-fix-deprecations.patch (not distinct enough).</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1661169600">- Edit qtstyleplugins-fix-deprecations.patch to use the older more
  reliable method for progress bar orientation (boo#1202611)</changelog>
</package>
<package pkgid="bc09d3741fcd1d6fec34cd59a3e374ac69e9c9d385c896c1f22b7f9477eb56a1" name="libqt5-qtstyleplugins" arch="x86_64">
  <version epoch="0" ver="5.0.0+git20170311" rel="bp154.3.3.1"/>
  <changelog author="sor.alexei@meowr.ru" date="1475928000">- Initial package.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1477310400">- Update to version 5.0.0+git20161022 (changes since
  5.0.0+git20161005):
  * Remove usage of deprecated QStyleOption*V&lt;N&gt;.
  * Add Q_DECL_OVERRIDE.
  * Build the BB10 style only with Qt 5.7 or later.
- Remove the conflict with libqt5-qtbase-platformtheme-gtk3 in
  libqt5-qtstyleplugins-platformtheme-gtk2: it causes the gtk2
  platform theme to practically never get installed.
  The reason for the conflict in the first place is overrated
  anyway: in order to get a segfault, a user would have to manually
  make an envvar "QT_STYLE_OVERRIDE=gtk2" with also having Gtk3
  Platform Theme triggered ("QT_QPA_PLATFORMTHEME=gtk3").</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1480334400">- Add 58.diff: private Qt platformsupport module got splited into
  many pieces in 5.8. Use the appropriate module with Qt &gt;= 5.8</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1480334401">- Update to version 5.0.0+git20161024:
  * Set plugin class name for styles.
- Remove libqt5-qtstyleplugins-class-names.patch: fixed upstream.</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1481716800">- Bump to 5.7.1
  * For more details please see:
    https://blog.qt.io/blog/2016/12/14/qt-5-7-1-released/
    and https://www.qt.io/qt5-7/</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1481803200">- Update to version 5.0.0+git20161215 (changes since
  5.0.0+git20161024):
  * Remove obsolete and unused QBB10StylePlugin::keys().
  * Remove unused sync.profile.
  * Fix building with Qt 5.8+.
- Remove 58.diff: fixed upstream.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1485259200">- Update to version 5.0.0+git20170119 (changes since
  5.0.0+git20161215):
  * Use Use QCommonStyle instead of QProxyStyle in QCleanlooksStyle
    and QPlastiqueStyle: this allows to use correct colour
    (non-white) for label text in a QComboBox. Also improves
    progress bar drawing - now looks like in Qt4, the progress bar
    content fills the entire groove vertically.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1493294400">- Update to version 5.0.0+git20170311 (changes since
  5.0.0+git20170119):
  * Plastique, Motif/CDE: Fix QSpinBox height in layout.
  * Fix Plastique, Cleanlooks and Motif animation timer.</changelog>
  <changelog author="christophe@krop.fr" date="1512993600">- Update the license tag (boo#967696)</changelog>
  <changelog author="christophe@krop.fr" date="1520942400">- Fix the license tag.</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1583409600">- Add patch to fix build against Qt 5.15:
  * fix-build-qt5.15.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1591704000">- Amend patch to fix issues with platform themes providing an
  incompatible palette (boo#1172658):
  * fix-build-qt5.15.patch</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1612612800">- Add qtstyleplugins-gtksettings.patch: Align Qt with GTK settings
  a bit better.
- Add qtstyleplugins-fix-deprecations.patch: Fix various Qt deprecations.
- Remove fix-build-qt5.15.patch: merge into
  qtstyleplugins-fix-deprecations.patch (not distinct enough).</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1661169600">- Edit qtstyleplugins-fix-deprecations.patch to use the older more
  reliable method for progress bar orientation (boo#1202611)</changelog>
</package>
<package pkgid="ca072a57c5982431c81120e7006179a4cddb1944da6c8736406a525f02c0f8e3" name="libqt5-qtstyleplugins-devel" arch="aarch64">
  <version epoch="0" ver="5.0.0+git20170311" rel="bp154.3.3.1"/>
  <changelog author="sor.alexei@meowr.ru" date="1475928000">- Initial package.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1477310400">- Update to version 5.0.0+git20161022 (changes since
  5.0.0+git20161005):
  * Remove usage of deprecated QStyleOption*V&lt;N&gt;.
  * Add Q_DECL_OVERRIDE.
  * Build the BB10 style only with Qt 5.7 or later.
- Remove the conflict with libqt5-qtbase-platformtheme-gtk3 in
  libqt5-qtstyleplugins-platformtheme-gtk2: it causes the gtk2
  platform theme to practically never get installed.
  The reason for the conflict in the first place is overrated
  anyway: in order to get a segfault, a user would have to manually
  make an envvar "QT_STYLE_OVERRIDE=gtk2" with also having Gtk3
  Platform Theme triggered ("QT_QPA_PLATFORMTHEME=gtk3").</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1480334400">- Add 58.diff: private Qt platformsupport module got splited into
  many pieces in 5.8. Use the appropriate module with Qt &gt;= 5.8</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1480334401">- Update to version 5.0.0+git20161024:
  * Set plugin class name for styles.
- Remove libqt5-qtstyleplugins-class-names.patch: fixed upstream.</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1481716800">- Bump to 5.7.1
  * For more details please see:
    https://blog.qt.io/blog/2016/12/14/qt-5-7-1-released/
    and https://www.qt.io/qt5-7/</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1481803200">- Update to version 5.0.0+git20161215 (changes since
  5.0.0+git20161024):
  * Remove obsolete and unused QBB10StylePlugin::keys().
  * Remove unused sync.profile.
  * Fix building with Qt 5.8+.
- Remove 58.diff: fixed upstream.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1485259200">- Update to version 5.0.0+git20170119 (changes since
  5.0.0+git20161215):
  * Use Use QCommonStyle instead of QProxyStyle in QCleanlooksStyle
    and QPlastiqueStyle: this allows to use correct colour
    (non-white) for label text in a QComboBox. Also improves
    progress bar drawing - now looks like in Qt4, the progress bar
    content fills the entire groove vertically.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1493294400">- Update to version 5.0.0+git20170311 (changes since
  5.0.0+git20170119):
  * Plastique, Motif/CDE: Fix QSpinBox height in layout.
  * Fix Plastique, Cleanlooks and Motif animation timer.</changelog>
  <changelog author="christophe@krop.fr" date="1512993600">- Update the license tag (boo#967696)</changelog>
  <changelog author="christophe@krop.fr" date="1520942400">- Fix the license tag.</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1583409600">- Add patch to fix build against Qt 5.15:
  * fix-build-qt5.15.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1591704000">- Amend patch to fix issues with platform themes providing an
  incompatible palette (boo#1172658):
  * fix-build-qt5.15.patch</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1612612800">- Add qtstyleplugins-gtksettings.patch: Align Qt with GTK settings
  a bit better.
- Add qtstyleplugins-fix-deprecations.patch: Fix various Qt deprecations.
- Remove fix-build-qt5.15.patch: merge into
  qtstyleplugins-fix-deprecations.patch (not distinct enough).</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1661169600">- Edit qtstyleplugins-fix-deprecations.patch to use the older more
  reliable method for progress bar orientation (boo#1202611)</changelog>
</package>
<package pkgid="e08e1969258bf92eb9f09694e1a6d8e7c9102ce9e5eb3a23a1be8a6ffeebe79e" name="libqt5-qtstyleplugins-devel" arch="i586">
  <version epoch="0" ver="5.0.0+git20170311" rel="bp154.3.3.1"/>
  <changelog author="sor.alexei@meowr.ru" date="1475928000">- Initial package.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1477310400">- Update to version 5.0.0+git20161022 (changes since
  5.0.0+git20161005):
  * Remove usage of deprecated QStyleOption*V&lt;N&gt;.
  * Add Q_DECL_OVERRIDE.
  * Build the BB10 style only with Qt 5.7 or later.
- Remove the conflict with libqt5-qtbase-platformtheme-gtk3 in
  libqt5-qtstyleplugins-platformtheme-gtk2: it causes the gtk2
  platform theme to practically never get installed.
  The reason for the conflict in the first place is overrated
  anyway: in order to get a segfault, a user would have to manually
  make an envvar "QT_STYLE_OVERRIDE=gtk2" with also having Gtk3
  Platform Theme triggered ("QT_QPA_PLATFORMTHEME=gtk3").</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1480334400">- Add 58.diff: private Qt platformsupport module got splited into
  many pieces in 5.8. Use the appropriate module with Qt &gt;= 5.8</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1480334401">- Update to version 5.0.0+git20161024:
  * Set plugin class name for styles.
- Remove libqt5-qtstyleplugins-class-names.patch: fixed upstream.</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1481716800">- Bump to 5.7.1
  * For more details please see:
    https://blog.qt.io/blog/2016/12/14/qt-5-7-1-released/
    and https://www.qt.io/qt5-7/</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1481803200">- Update to version 5.0.0+git20161215 (changes since
  5.0.0+git20161024):
  * Remove obsolete and unused QBB10StylePlugin::keys().
  * Remove unused sync.profile.
  * Fix building with Qt 5.8+.
- Remove 58.diff: fixed upstream.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1485259200">- Update to version 5.0.0+git20170119 (changes since
  5.0.0+git20161215):
  * Use Use QCommonStyle instead of QProxyStyle in QCleanlooksStyle
    and QPlastiqueStyle: this allows to use correct colour
    (non-white) for label text in a QComboBox. Also improves
    progress bar drawing - now looks like in Qt4, the progress bar
    content fills the entire groove vertically.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1493294400">- Update to version 5.0.0+git20170311 (changes since
  5.0.0+git20170119):
  * Plastique, Motif/CDE: Fix QSpinBox height in layout.
  * Fix Plastique, Cleanlooks and Motif animation timer.</changelog>
  <changelog author="christophe@krop.fr" date="1512993600">- Update the license tag (boo#967696)</changelog>
  <changelog author="christophe@krop.fr" date="1520942400">- Fix the license tag.</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1583409600">- Add patch to fix build against Qt 5.15:
  * fix-build-qt5.15.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1591704000">- Amend patch to fix issues with platform themes providing an
  incompatible palette (boo#1172658):
  * fix-build-qt5.15.patch</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1612612800">- Add qtstyleplugins-gtksettings.patch: Align Qt with GTK settings
  a bit better.
- Add qtstyleplugins-fix-deprecations.patch: Fix various Qt deprecations.
- Remove fix-build-qt5.15.patch: merge into
  qtstyleplugins-fix-deprecations.patch (not distinct enough).</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1661169600">- Edit qtstyleplugins-fix-deprecations.patch to use the older more
  reliable method for progress bar orientation (boo#1202611)</changelog>
</package>
<package pkgid="6b6351a0c53bb53f4647305a2c846675a8812205e4a63b31454a9937b9279169" name="libqt5-qtstyleplugins-devel" arch="ppc64le">
  <version epoch="0" ver="5.0.0+git20170311" rel="bp154.3.3.1"/>
  <changelog author="sor.alexei@meowr.ru" date="1475928000">- Initial package.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1477310400">- Update to version 5.0.0+git20161022 (changes since
  5.0.0+git20161005):
  * Remove usage of deprecated QStyleOption*V&lt;N&gt;.
  * Add Q_DECL_OVERRIDE.
  * Build the BB10 style only with Qt 5.7 or later.
- Remove the conflict with libqt5-qtbase-platformtheme-gtk3 in
  libqt5-qtstyleplugins-platformtheme-gtk2: it causes the gtk2
  platform theme to practically never get installed.
  The reason for the conflict in the first place is overrated
  anyway: in order to get a segfault, a user would have to manually
  make an envvar "QT_STYLE_OVERRIDE=gtk2" with also having Gtk3
  Platform Theme triggered ("QT_QPA_PLATFORMTHEME=gtk3").</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1480334400">- Add 58.diff: private Qt platformsupport module got splited into
  many pieces in 5.8. Use the appropriate module with Qt &gt;= 5.8</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1480334401">- Update to version 5.0.0+git20161024:
  * Set plugin class name for styles.
- Remove libqt5-qtstyleplugins-class-names.patch: fixed upstream.</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1481716800">- Bump to 5.7.1
  * For more details please see:
    https://blog.qt.io/blog/2016/12/14/qt-5-7-1-released/
    and https://www.qt.io/qt5-7/</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1481803200">- Update to version 5.0.0+git20161215 (changes since
  5.0.0+git20161024):
  * Remove obsolete and unused QBB10StylePlugin::keys().
  * Remove unused sync.profile.
  * Fix building with Qt 5.8+.
- Remove 58.diff: fixed upstream.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1485259200">- Update to version 5.0.0+git20170119 (changes since
  5.0.0+git20161215):
  * Use Use QCommonStyle instead of QProxyStyle in QCleanlooksStyle
    and QPlastiqueStyle: this allows to use correct colour
    (non-white) for label text in a QComboBox. Also improves
    progress bar drawing - now looks like in Qt4, the progress bar
    content fills the entire groove vertically.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1493294400">- Update to version 5.0.0+git20170311 (changes since
  5.0.0+git20170119):
  * Plastique, Motif/CDE: Fix QSpinBox height in layout.
  * Fix Plastique, Cleanlooks and Motif animation timer.</changelog>
  <changelog author="christophe@krop.fr" date="1512993600">- Update the license tag (boo#967696)</changelog>
  <changelog author="christophe@krop.fr" date="1520942400">- Fix the license tag.</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1583409600">- Add patch to fix build against Qt 5.15:
  * fix-build-qt5.15.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1591704000">- Amend patch to fix issues with platform themes providing an
  incompatible palette (boo#1172658):
  * fix-build-qt5.15.patch</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1612612800">- Add qtstyleplugins-gtksettings.patch: Align Qt with GTK settings
  a bit better.
- Add qtstyleplugins-fix-deprecations.patch: Fix various Qt deprecations.
- Remove fix-build-qt5.15.patch: merge into
  qtstyleplugins-fix-deprecations.patch (not distinct enough).</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1661169600">- Edit qtstyleplugins-fix-deprecations.patch to use the older more
  reliable method for progress bar orientation (boo#1202611)</changelog>
</package>
<package pkgid="dc76e2d010bc0efb1fcfd92de3f55e41b35e287bea9a1fc7707a01f337e5f73b" name="libqt5-qtstyleplugins-devel" arch="s390x">
  <version epoch="0" ver="5.0.0+git20170311" rel="bp154.3.3.1"/>
  <changelog author="sor.alexei@meowr.ru" date="1475928000">- Initial package.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1477310400">- Update to version 5.0.0+git20161022 (changes since
  5.0.0+git20161005):
  * Remove usage of deprecated QStyleOption*V&lt;N&gt;.
  * Add Q_DECL_OVERRIDE.
  * Build the BB10 style only with Qt 5.7 or later.
- Remove the conflict with libqt5-qtbase-platformtheme-gtk3 in
  libqt5-qtstyleplugins-platformtheme-gtk2: it causes the gtk2
  platform theme to practically never get installed.
  The reason for the conflict in the first place is overrated
  anyway: in order to get a segfault, a user would have to manually
  make an envvar "QT_STYLE_OVERRIDE=gtk2" with also having Gtk3
  Platform Theme triggered ("QT_QPA_PLATFORMTHEME=gtk3").</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1480334400">- Add 58.diff: private Qt platformsupport module got splited into
  many pieces in 5.8. Use the appropriate module with Qt &gt;= 5.8</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1480334401">- Update to version 5.0.0+git20161024:
  * Set plugin class name for styles.
- Remove libqt5-qtstyleplugins-class-names.patch: fixed upstream.</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1481716800">- Bump to 5.7.1
  * For more details please see:
    https://blog.qt.io/blog/2016/12/14/qt-5-7-1-released/
    and https://www.qt.io/qt5-7/</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1481803200">- Update to version 5.0.0+git20161215 (changes since
  5.0.0+git20161024):
  * Remove obsolete and unused QBB10StylePlugin::keys().
  * Remove unused sync.profile.
  * Fix building with Qt 5.8+.
- Remove 58.diff: fixed upstream.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1485259200">- Update to version 5.0.0+git20170119 (changes since
  5.0.0+git20161215):
  * Use Use QCommonStyle instead of QProxyStyle in QCleanlooksStyle
    and QPlastiqueStyle: this allows to use correct colour
    (non-white) for label text in a QComboBox. Also improves
    progress bar drawing - now looks like in Qt4, the progress bar
    content fills the entire groove vertically.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1493294400">- Update to version 5.0.0+git20170311 (changes since
  5.0.0+git20170119):
  * Plastique, Motif/CDE: Fix QSpinBox height in layout.
  * Fix Plastique, Cleanlooks and Motif animation timer.</changelog>
  <changelog author="christophe@krop.fr" date="1512993600">- Update the license tag (boo#967696)</changelog>
  <changelog author="christophe@krop.fr" date="1520942400">- Fix the license tag.</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1583409600">- Add patch to fix build against Qt 5.15:
  * fix-build-qt5.15.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1591704000">- Amend patch to fix issues with platform themes providing an
  incompatible palette (boo#1172658):
  * fix-build-qt5.15.patch</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1612612800">- Add qtstyleplugins-gtksettings.patch: Align Qt with GTK settings
  a bit better.
- Add qtstyleplugins-fix-deprecations.patch: Fix various Qt deprecations.
- Remove fix-build-qt5.15.patch: merge into
  qtstyleplugins-fix-deprecations.patch (not distinct enough).</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1661169600">- Edit qtstyleplugins-fix-deprecations.patch to use the older more
  reliable method for progress bar orientation (boo#1202611)</changelog>
</package>
<package pkgid="109eff32778a0302110a2f3454df4cd6450aa84009f23ec1d8ee8ecbbcda543c" name="libqt5-qtstyleplugins-devel" arch="x86_64">
  <version epoch="0" ver="5.0.0+git20170311" rel="bp154.3.3.1"/>
  <changelog author="sor.alexei@meowr.ru" date="1475928000">- Initial package.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1477310400">- Update to version 5.0.0+git20161022 (changes since
  5.0.0+git20161005):
  * Remove usage of deprecated QStyleOption*V&lt;N&gt;.
  * Add Q_DECL_OVERRIDE.
  * Build the BB10 style only with Qt 5.7 or later.
- Remove the conflict with libqt5-qtbase-platformtheme-gtk3 in
  libqt5-qtstyleplugins-platformtheme-gtk2: it causes the gtk2
  platform theme to practically never get installed.
  The reason for the conflict in the first place is overrated
  anyway: in order to get a segfault, a user would have to manually
  make an envvar "QT_STYLE_OVERRIDE=gtk2" with also having Gtk3
  Platform Theme triggered ("QT_QPA_PLATFORMTHEME=gtk3").</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1480334400">- Add 58.diff: private Qt platformsupport module got splited into
  many pieces in 5.8. Use the appropriate module with Qt &gt;= 5.8</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1480334401">- Update to version 5.0.0+git20161024:
  * Set plugin class name for styles.
- Remove libqt5-qtstyleplugins-class-names.patch: fixed upstream.</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1481716800">- Bump to 5.7.1
  * For more details please see:
    https://blog.qt.io/blog/2016/12/14/qt-5-7-1-released/
    and https://www.qt.io/qt5-7/</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1481803200">- Update to version 5.0.0+git20161215 (changes since
  5.0.0+git20161024):
  * Remove obsolete and unused QBB10StylePlugin::keys().
  * Remove unused sync.profile.
  * Fix building with Qt 5.8+.
- Remove 58.diff: fixed upstream.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1485259200">- Update to version 5.0.0+git20170119 (changes since
  5.0.0+git20161215):
  * Use Use QCommonStyle instead of QProxyStyle in QCleanlooksStyle
    and QPlastiqueStyle: this allows to use correct colour
    (non-white) for label text in a QComboBox. Also improves
    progress bar drawing - now looks like in Qt4, the progress bar
    content fills the entire groove vertically.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1493294400">- Update to version 5.0.0+git20170311 (changes since
  5.0.0+git20170119):
  * Plastique, Motif/CDE: Fix QSpinBox height in layout.
  * Fix Plastique, Cleanlooks and Motif animation timer.</changelog>
  <changelog author="christophe@krop.fr" date="1512993600">- Update the license tag (boo#967696)</changelog>
  <changelog author="christophe@krop.fr" date="1520942400">- Fix the license tag.</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1583409600">- Add patch to fix build against Qt 5.15:
  * fix-build-qt5.15.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1591704000">- Amend patch to fix issues with platform themes providing an
  incompatible palette (boo#1172658):
  * fix-build-qt5.15.patch</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1612612800">- Add qtstyleplugins-gtksettings.patch: Align Qt with GTK settings
  a bit better.
- Add qtstyleplugins-fix-deprecations.patch: Fix various Qt deprecations.
- Remove fix-build-qt5.15.patch: merge into
  qtstyleplugins-fix-deprecations.patch (not distinct enough).</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1661169600">- Edit qtstyleplugins-fix-deprecations.patch to use the older more
  reliable method for progress bar orientation (boo#1202611)</changelog>
</package>
<package pkgid="964d1042a3a32bdc6fc34cdb57408788b1485a9c06b976e3c7ea470ba25b2ea4" name="libqt5-qtstyleplugins-platformtheme-gtk2" arch="aarch64">
  <version epoch="0" ver="5.0.0+git20170311" rel="bp154.3.3.1"/>
  <changelog author="sor.alexei@meowr.ru" date="1475928000">- Initial package.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1477310400">- Update to version 5.0.0+git20161022 (changes since
  5.0.0+git20161005):
  * Remove usage of deprecated QStyleOption*V&lt;N&gt;.
  * Add Q_DECL_OVERRIDE.
  * Build the BB10 style only with Qt 5.7 or later.
- Remove the conflict with libqt5-qtbase-platformtheme-gtk3 in
  libqt5-qtstyleplugins-platformtheme-gtk2: it causes the gtk2
  platform theme to practically never get installed.
  The reason for the conflict in the first place is overrated
  anyway: in order to get a segfault, a user would have to manually
  make an envvar "QT_STYLE_OVERRIDE=gtk2" with also having Gtk3
  Platform Theme triggered ("QT_QPA_PLATFORMTHEME=gtk3").</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1480334400">- Add 58.diff: private Qt platformsupport module got splited into
  many pieces in 5.8. Use the appropriate module with Qt &gt;= 5.8</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1480334401">- Update to version 5.0.0+git20161024:
  * Set plugin class name for styles.
- Remove libqt5-qtstyleplugins-class-names.patch: fixed upstream.</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1481716800">- Bump to 5.7.1
  * For more details please see:
    https://blog.qt.io/blog/2016/12/14/qt-5-7-1-released/
    and https://www.qt.io/qt5-7/</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1481803200">- Update to version 5.0.0+git20161215 (changes since
  5.0.0+git20161024):
  * Remove obsolete and unused QBB10StylePlugin::keys().
  * Remove unused sync.profile.
  * Fix building with Qt 5.8+.
- Remove 58.diff: fixed upstream.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1485259200">- Update to version 5.0.0+git20170119 (changes since
  5.0.0+git20161215):
  * Use Use QCommonStyle instead of QProxyStyle in QCleanlooksStyle
    and QPlastiqueStyle: this allows to use correct colour
    (non-white) for label text in a QComboBox. Also improves
    progress bar drawing - now looks like in Qt4, the progress bar
    content fills the entire groove vertically.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1493294400">- Update to version 5.0.0+git20170311 (changes since
  5.0.0+git20170119):
  * Plastique, Motif/CDE: Fix QSpinBox height in layout.
  * Fix Plastique, Cleanlooks and Motif animation timer.</changelog>
  <changelog author="christophe@krop.fr" date="1512993600">- Update the license tag (boo#967696)</changelog>
  <changelog author="christophe@krop.fr" date="1520942400">- Fix the license tag.</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1583409600">- Add patch to fix build against Qt 5.15:
  * fix-build-qt5.15.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1591704000">- Amend patch to fix issues with platform themes providing an
  incompatible palette (boo#1172658):
  * fix-build-qt5.15.patch</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1612612800">- Add qtstyleplugins-gtksettings.patch: Align Qt with GTK settings
  a bit better.
- Add qtstyleplugins-fix-deprecations.patch: Fix various Qt deprecations.
- Remove fix-build-qt5.15.patch: merge into
  qtstyleplugins-fix-deprecations.patch (not distinct enough).</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1661169600">- Edit qtstyleplugins-fix-deprecations.patch to use the older more
  reliable method for progress bar orientation (boo#1202611)</changelog>
</package>
<package pkgid="3e0c0de3f2a282d69ce67ecf5c535be758f44b5251cdfeb7220680cf90e3a4f4" name="libqt5-qtstyleplugins-platformtheme-gtk2" arch="i586">
  <version epoch="0" ver="5.0.0+git20170311" rel="bp154.3.3.1"/>
  <changelog author="sor.alexei@meowr.ru" date="1475928000">- Initial package.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1477310400">- Update to version 5.0.0+git20161022 (changes since
  5.0.0+git20161005):
  * Remove usage of deprecated QStyleOption*V&lt;N&gt;.
  * Add Q_DECL_OVERRIDE.
  * Build the BB10 style only with Qt 5.7 or later.
- Remove the conflict with libqt5-qtbase-platformtheme-gtk3 in
  libqt5-qtstyleplugins-platformtheme-gtk2: it causes the gtk2
  platform theme to practically never get installed.
  The reason for the conflict in the first place is overrated
  anyway: in order to get a segfault, a user would have to manually
  make an envvar "QT_STYLE_OVERRIDE=gtk2" with also having Gtk3
  Platform Theme triggered ("QT_QPA_PLATFORMTHEME=gtk3").</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1480334400">- Add 58.diff: private Qt platformsupport module got splited into
  many pieces in 5.8. Use the appropriate module with Qt &gt;= 5.8</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1480334401">- Update to version 5.0.0+git20161024:
  * Set plugin class name for styles.
- Remove libqt5-qtstyleplugins-class-names.patch: fixed upstream.</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1481716800">- Bump to 5.7.1
  * For more details please see:
    https://blog.qt.io/blog/2016/12/14/qt-5-7-1-released/
    and https://www.qt.io/qt5-7/</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1481803200">- Update to version 5.0.0+git20161215 (changes since
  5.0.0+git20161024):
  * Remove obsolete and unused QBB10StylePlugin::keys().
  * Remove unused sync.profile.
  * Fix building with Qt 5.8+.
- Remove 58.diff: fixed upstream.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1485259200">- Update to version 5.0.0+git20170119 (changes since
  5.0.0+git20161215):
  * Use Use QCommonStyle instead of QProxyStyle in QCleanlooksStyle
    and QPlastiqueStyle: this allows to use correct colour
    (non-white) for label text in a QComboBox. Also improves
    progress bar drawing - now looks like in Qt4, the progress bar
    content fills the entire groove vertically.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1493294400">- Update to version 5.0.0+git20170311 (changes since
  5.0.0+git20170119):
  * Plastique, Motif/CDE: Fix QSpinBox height in layout.
  * Fix Plastique, Cleanlooks and Motif animation timer.</changelog>
  <changelog author="christophe@krop.fr" date="1512993600">- Update the license tag (boo#967696)</changelog>
  <changelog author="christophe@krop.fr" date="1520942400">- Fix the license tag.</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1583409600">- Add patch to fix build against Qt 5.15:
  * fix-build-qt5.15.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1591704000">- Amend patch to fix issues with platform themes providing an
  incompatible palette (boo#1172658):
  * fix-build-qt5.15.patch</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1612612800">- Add qtstyleplugins-gtksettings.patch: Align Qt with GTK settings
  a bit better.
- Add qtstyleplugins-fix-deprecations.patch: Fix various Qt deprecations.
- Remove fix-build-qt5.15.patch: merge into
  qtstyleplugins-fix-deprecations.patch (not distinct enough).</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1661169600">- Edit qtstyleplugins-fix-deprecations.patch to use the older more
  reliable method for progress bar orientation (boo#1202611)</changelog>
</package>
<package pkgid="181c8dec0a98278d89be4f8a970a568b185ec002856b55f0d7205cfc1ddd240c" name="libqt5-qtstyleplugins-platformtheme-gtk2" arch="ppc64le">
  <version epoch="0" ver="5.0.0+git20170311" rel="bp154.3.3.1"/>
  <changelog author="sor.alexei@meowr.ru" date="1475928000">- Initial package.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1477310400">- Update to version 5.0.0+git20161022 (changes since
  5.0.0+git20161005):
  * Remove usage of deprecated QStyleOption*V&lt;N&gt;.
  * Add Q_DECL_OVERRIDE.
  * Build the BB10 style only with Qt 5.7 or later.
- Remove the conflict with libqt5-qtbase-platformtheme-gtk3 in
  libqt5-qtstyleplugins-platformtheme-gtk2: it causes the gtk2
  platform theme to practically never get installed.
  The reason for the conflict in the first place is overrated
  anyway: in order to get a segfault, a user would have to manually
  make an envvar "QT_STYLE_OVERRIDE=gtk2" with also having Gtk3
  Platform Theme triggered ("QT_QPA_PLATFORMTHEME=gtk3").</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1480334400">- Add 58.diff: private Qt platformsupport module got splited into
  many pieces in 5.8. Use the appropriate module with Qt &gt;= 5.8</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1480334401">- Update to version 5.0.0+git20161024:
  * Set plugin class name for styles.
- Remove libqt5-qtstyleplugins-class-names.patch: fixed upstream.</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1481716800">- Bump to 5.7.1
  * For more details please see:
    https://blog.qt.io/blog/2016/12/14/qt-5-7-1-released/
    and https://www.qt.io/qt5-7/</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1481803200">- Update to version 5.0.0+git20161215 (changes since
  5.0.0+git20161024):
  * Remove obsolete and unused QBB10StylePlugin::keys().
  * Remove unused sync.profile.
  * Fix building with Qt 5.8+.
- Remove 58.diff: fixed upstream.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1485259200">- Update to version 5.0.0+git20170119 (changes since
  5.0.0+git20161215):
  * Use Use QCommonStyle instead of QProxyStyle in QCleanlooksStyle
    and QPlastiqueStyle: this allows to use correct colour
    (non-white) for label text in a QComboBox. Also improves
    progress bar drawing - now looks like in Qt4, the progress bar
    content fills the entire groove vertically.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1493294400">- Update to version 5.0.0+git20170311 (changes since
  5.0.0+git20170119):
  * Plastique, Motif/CDE: Fix QSpinBox height in layout.
  * Fix Plastique, Cleanlooks and Motif animation timer.</changelog>
  <changelog author="christophe@krop.fr" date="1512993600">- Update the license tag (boo#967696)</changelog>
  <changelog author="christophe@krop.fr" date="1520942400">- Fix the license tag.</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1583409600">- Add patch to fix build against Qt 5.15:
  * fix-build-qt5.15.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1591704000">- Amend patch to fix issues with platform themes providing an
  incompatible palette (boo#1172658):
  * fix-build-qt5.15.patch</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1612612800">- Add qtstyleplugins-gtksettings.patch: Align Qt with GTK settings
  a bit better.
- Add qtstyleplugins-fix-deprecations.patch: Fix various Qt deprecations.
- Remove fix-build-qt5.15.patch: merge into
  qtstyleplugins-fix-deprecations.patch (not distinct enough).</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1661169600">- Edit qtstyleplugins-fix-deprecations.patch to use the older more
  reliable method for progress bar orientation (boo#1202611)</changelog>
</package>
<package pkgid="aeb13da8ff61b9783a0deaf3158b08f1df9330ce179a9a6b863e7fb3ffc12cc9" name="libqt5-qtstyleplugins-platformtheme-gtk2" arch="s390x">
  <version epoch="0" ver="5.0.0+git20170311" rel="bp154.3.3.1"/>
  <changelog author="sor.alexei@meowr.ru" date="1475928000">- Initial package.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1477310400">- Update to version 5.0.0+git20161022 (changes since
  5.0.0+git20161005):
  * Remove usage of deprecated QStyleOption*V&lt;N&gt;.
  * Add Q_DECL_OVERRIDE.
  * Build the BB10 style only with Qt 5.7 or later.
- Remove the conflict with libqt5-qtbase-platformtheme-gtk3 in
  libqt5-qtstyleplugins-platformtheme-gtk2: it causes the gtk2
  platform theme to practically never get installed.
  The reason for the conflict in the first place is overrated
  anyway: in order to get a segfault, a user would have to manually
  make an envvar "QT_STYLE_OVERRIDE=gtk2" with also having Gtk3
  Platform Theme triggered ("QT_QPA_PLATFORMTHEME=gtk3").</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1480334400">- Add 58.diff: private Qt platformsupport module got splited into
  many pieces in 5.8. Use the appropriate module with Qt &gt;= 5.8</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1480334401">- Update to version 5.0.0+git20161024:
  * Set plugin class name for styles.
- Remove libqt5-qtstyleplugins-class-names.patch: fixed upstream.</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1481716800">- Bump to 5.7.1
  * For more details please see:
    https://blog.qt.io/blog/2016/12/14/qt-5-7-1-released/
    and https://www.qt.io/qt5-7/</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1481803200">- Update to version 5.0.0+git20161215 (changes since
  5.0.0+git20161024):
  * Remove obsolete and unused QBB10StylePlugin::keys().
  * Remove unused sync.profile.
  * Fix building with Qt 5.8+.
- Remove 58.diff: fixed upstream.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1485259200">- Update to version 5.0.0+git20170119 (changes since
  5.0.0+git20161215):
  * Use Use QCommonStyle instead of QProxyStyle in QCleanlooksStyle
    and QPlastiqueStyle: this allows to use correct colour
    (non-white) for label text in a QComboBox. Also improves
    progress bar drawing - now looks like in Qt4, the progress bar
    content fills the entire groove vertically.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1493294400">- Update to version 5.0.0+git20170311 (changes since
  5.0.0+git20170119):
  * Plastique, Motif/CDE: Fix QSpinBox height in layout.
  * Fix Plastique, Cleanlooks and Motif animation timer.</changelog>
  <changelog author="christophe@krop.fr" date="1512993600">- Update the license tag (boo#967696)</changelog>
  <changelog author="christophe@krop.fr" date="1520942400">- Fix the license tag.</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1583409600">- Add patch to fix build against Qt 5.15:
  * fix-build-qt5.15.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1591704000">- Amend patch to fix issues with platform themes providing an
  incompatible palette (boo#1172658):
  * fix-build-qt5.15.patch</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1612612800">- Add qtstyleplugins-gtksettings.patch: Align Qt with GTK settings
  a bit better.
- Add qtstyleplugins-fix-deprecations.patch: Fix various Qt deprecations.
- Remove fix-build-qt5.15.patch: merge into
  qtstyleplugins-fix-deprecations.patch (not distinct enough).</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1661169600">- Edit qtstyleplugins-fix-deprecations.patch to use the older more
  reliable method for progress bar orientation (boo#1202611)</changelog>
</package>
<package pkgid="c40be9a8426d03378cc507da864851b0d5bd01f3aec00bdc8740f081ace3530f" name="libqt5-qtstyleplugins-platformtheme-gtk2" arch="x86_64">
  <version epoch="0" ver="5.0.0+git20170311" rel="bp154.3.3.1"/>
  <changelog author="sor.alexei@meowr.ru" date="1475928000">- Initial package.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1477310400">- Update to version 5.0.0+git20161022 (changes since
  5.0.0+git20161005):
  * Remove usage of deprecated QStyleOption*V&lt;N&gt;.
  * Add Q_DECL_OVERRIDE.
  * Build the BB10 style only with Qt 5.7 or later.
- Remove the conflict with libqt5-qtbase-platformtheme-gtk3 in
  libqt5-qtstyleplugins-platformtheme-gtk2: it causes the gtk2
  platform theme to practically never get installed.
  The reason for the conflict in the first place is overrated
  anyway: in order to get a segfault, a user would have to manually
  make an envvar "QT_STYLE_OVERRIDE=gtk2" with also having Gtk3
  Platform Theme triggered ("QT_QPA_PLATFORMTHEME=gtk3").</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1480334400">- Add 58.diff: private Qt platformsupport module got splited into
  many pieces in 5.8. Use the appropriate module with Qt &gt;= 5.8</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1480334401">- Update to version 5.0.0+git20161024:
  * Set plugin class name for styles.
- Remove libqt5-qtstyleplugins-class-names.patch: fixed upstream.</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1481716800">- Bump to 5.7.1
  * For more details please see:
    https://blog.qt.io/blog/2016/12/14/qt-5-7-1-released/
    and https://www.qt.io/qt5-7/</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1481803200">- Update to version 5.0.0+git20161215 (changes since
  5.0.0+git20161024):
  * Remove obsolete and unused QBB10StylePlugin::keys().
  * Remove unused sync.profile.
  * Fix building with Qt 5.8+.
- Remove 58.diff: fixed upstream.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1485259200">- Update to version 5.0.0+git20170119 (changes since
  5.0.0+git20161215):
  * Use Use QCommonStyle instead of QProxyStyle in QCleanlooksStyle
    and QPlastiqueStyle: this allows to use correct colour
    (non-white) for label text in a QComboBox. Also improves
    progress bar drawing - now looks like in Qt4, the progress bar
    content fills the entire groove vertically.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1493294400">- Update to version 5.0.0+git20170311 (changes since
  5.0.0+git20170119):
  * Plastique, Motif/CDE: Fix QSpinBox height in layout.
  * Fix Plastique, Cleanlooks and Motif animation timer.</changelog>
  <changelog author="christophe@krop.fr" date="1512993600">- Update the license tag (boo#967696)</changelog>
  <changelog author="christophe@krop.fr" date="1520942400">- Fix the license tag.</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1583409600">- Add patch to fix build against Qt 5.15:
  * fix-build-qt5.15.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1591704000">- Amend patch to fix issues with platform themes providing an
  incompatible palette (boo#1172658):
  * fix-build-qt5.15.patch</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1612612800">- Add qtstyleplugins-gtksettings.patch: Align Qt with GTK settings
  a bit better.
- Add qtstyleplugins-fix-deprecations.patch: Fix various Qt deprecations.
- Remove fix-build-qt5.15.patch: merge into
  qtstyleplugins-fix-deprecations.patch (not distinct enough).</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1661169600">- Edit qtstyleplugins-fix-deprecations.patch to use the older more
  reliable method for progress bar orientation (boo#1202611)</changelog>
</package>
<package pkgid="704a9ef6f3a5913014cfe41d576cbcf2a4cc5126320ef78216c0e4f7b2fd7a65" name="libqt5-qtwebengine" arch="aarch64">
  <version epoch="0" ver="5.15.10" rel="bp154.2.3.2"/>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1613563200">- Add patch to fix sandbox with glibc 2.33 on 32bit:
  * sandbox-statx-futex_time64.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1615377600">- Can't use system_vpx on Leap 15.3</changelog>
  <changelog author="christophe@krop.fr" date="1616587200">- Update to version 5.15.3:
  * Fix spelling and coding style
  * Fix new view request handling (QTBUG-87378)
  * Fix getDefaultScreenId on X11
  * Fix flaky tst_QWebEngineView::textSelectionOutOfInputField test
  * Move touch input tests to separate testcase
  * Add touch input tests for scrolling and pinch zooming
  * Fix rare duplicate ids forming in touch point id's mapping
  * Use the module's version number for QtWebEngineProcess
  * Touch handling: provide id mapping without modifying TouchPoint instance
    (QTBUG-88001)
  * Touch handling: fix mapped ids cleanup for TouchCancel event
  * et custom headers from QWebEngineUrlRequestInfo before triggering redirect
    (QTBUG-88861)
  * Forward modifier flags for lock keys (QTBUG-89001)
  * Fix handling of more than one finger for touch event (QTBUG-86389)
  * Stabilize load signals emitting (QTBUG-65223, QTBUG-87089)
  * Fix building against 5.12 on most CIs
  * Update minimum HarfBuzz version to 2.4.0 (QTBUG-88976)
  * Fix building against Qt 5.14
  * Migrate user script IPC to mojo
  * Fix crashes in user resource controller when single process
  * Minor. Fix namespace for user resource controller
  * Minor. RenderThreadObserverQt is really a RenderConfiguration
  * Remove RenderViewObserverHelper from UserResourceController
  * Cache mojo interface bindings to UserResourceControllerRenderFrame
  * Cache mojo interface bindings for WebChannelIPCTransport
  * Migrate render_view_observer_qt to mojo
  * Fix crash on linkedin.com (QTBUG-89740)
  * Suppress error pages also for http errors if they are disabled
  * Fix leak in QQuickWebEngineViewPrivate::contextMenuRequested
  * Register PerformanceNode early enough
  * Quiet log on webrtc usage
  * Remove configure option that doesn't work
  * Remove Java build dependency
  * Fix blank popups in qml (QTBUG-86034)
  * Fix position of popup on qml (QTBUG-86034, QTBUG-89358)
  * Enable hangout services extension (QTBUG-85731)
  * Allow to fallback to default locale for non existent data packs (QTBUG-90490)
  * Support devtools close button
  * Do not extract download file names from certain url schemes (QTBUG-90355)
  * Leave room for the null-termination byte when checking remote drive path
    (QTBUG-90347)
  * Do not set open files limit for linking if not necessary
  * Remove even more remains of non network service code
  * Add back prefers-color-scheme support (QTBUG-89753)
  * Start supporting chrome.resourcesPrivate API (QTBUG-90035)
  * Enable chrome://user-actions WebUI
  * Remove remains of chrome://flash
  * Fix loadFinished signal if page has content but server sends HTTP error
    (QTBUG-90517)
  * Fix devtools page resource loading as raw data instead of html string
  * Remove frame metadata observer (RenderWidgetHostViewQt) on destroy
  * Resolve installed interceptors right before interception point (QTBUG-86286)
  * Update searches faster
  * Remove more leftovers of the old compositor
  * Enable webrtc logging and the corresponding WebUI
  * Support mips64el platform CPU(loongson 3A4000)
  * Add tracing UI resources
  * Fix crash on meet.google.com
  * Fix mad popup qquickwindows on wayland
  * Fix crashes on BrowserContext destruction
  * Fix crash on exit in quicknanobrowser when popup
  * Remove QtPdf dependency on nss at build-time
  * Avoid accessing profileAdapter when profile is shutting down (QTBUG-91187)
  * Do not flush messages form profile destructor
  * Ignore QQuickWebEngineNewViewRequest if it is unhandled
  * Fix ScopedGLContextChecker with QTWEBENGINE_DISABLE_GPU_THREAD=1
  * Don't send duplicate load progress values
  * Fix neon support in libpng
  * Do not call deprecated profile interceptor on ui thread (QTBUG-86267)
  * Add certificate error message for ERR_SSL_OBSOLETE_VERSION
  * Fix assert in WebContentsAdapter::devToolsFrontendDestroyed
  * Avoid to reject a certificate error twice in Quick
  * Fix PDF viewer plugin
  * FIXUP: Fix swap condition in DisplayGLOutputSurface::updatePaintNode
    (QTBUG-86599)
  * Fix favicon engine under device pixel scaling
  * Do not pass a native keycode matching the menu key when it is remapped
    (QTBUG-86672)
  * Optimize WebEngineSettings::testAttribute
  * Warn about QtWebengineProcess launching from network share (QTBUG-84632)
  * Handle non-ascii names for pulseaudio (QTBUG-85363)
  * Do not set audio device for desktop capture if audio loopback is unsupported
  * Fix new view request handling (QTBUG-87378)
  * Fix getDefaultScreenId on X11
  * Touch handling: provide id mapping without modifying TouchPoint instance
    (QTBUG-88001)
  * Set custom headers from QWebEngineUrlRequestInfo before triggering redirect
    (QTBUG-88861)
  * Stabilize load signals emitting (QTBUG-65223)
- CVE fixes backported in chromium updates:
  * CVE-2020-16044: Use after free in WebRTC
  * CVE-2021-21118: Heap buffer overflow in Blink
  * CVE-2021-21119: Use after free in Media
  * CVE-2021-21120: Use after free in WebSQL
  * CVE-2021-21121: Use after free in Omnibox
  * CVE-2021-21122: Use after free in Blink
  * CVE-2021-21123: Insufficient data validation in File System API
  * CVE-2021-21125: Insufficient policy enforcement in File System API
  * CVE-2021-21126: Insufficient policy enforcement in extensions
  * CVE-2021-21127: Insufficient policy enforcement in extensions
  * CVE-2021-21128: Heap buffer overflow in Blink
  * CVE-2021-21129: Insufficient policy enforcement in File System API
  * CVE-2021-21130: Insufficient policy enforcement in File System API
  * CVE-2021-21131: Insufficient policy enforcement in File System API
  * CVE-2021-21132: Inappropriate implementation in DevTools
  * CVE-2021-21135: Inappropriate implementation in Performance API
  * CVE-2021-21137: Inappropriate implementation in DevTools
  * CVE-2021-21140: Uninitialized Use in USB
  * CVE-2021-21141: Insufficient policy enforcement in File System API
  * CVE-2021-21145: Use after free in Fonts
  * CVE-2021-21146: Use after free in Navigation
  * CVE-2021-21147: Inappropriate implementation in Skia
  * CVE-2021-21148: Heap buffer overflow in V8
  * CVE-2021-21149: Stack overflow in Data Transfer
  * CVE-2021-21150: Use after free in Downloads
  * CVE-2021-21152: Heap buffer overflow in Media
  * CVE-2021-21153: Stack overflow in GPU Process
  * CVE-2021-21156: Heap buffer overflow in V8
  * CVE-2021-21157: Use after free in Web Sockets
- Drop obsolete patches:
  * icu-68.patch
  * icu-68-2.patch
- Rebase patches:
  * fix1163766.patch
  * sandbox-statx-futex_time64.patch
  * rtc-dont-use-h264.patch
  * chromium-glibc-2.33.patch
- Add patch to fix crash with certain locales:
  * 0001-Fix-normalization-of-app-locales.patch
- Clean the spec file a bit</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1618315200">- Add back missing part in fix1163766.patch (boo#1184610)</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1618401600">- Update _constraints to avoid OOM</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1618401601">- Add patch to fix build with GCC 11:
  * 0001-Fix-build-with-GCC-11.patch</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1620302400">- Add patch to fix build with ICU 69:
  * 0001-Fix-build-with-system-ICU-69.patch</changelog>
  <changelog author="christophe@krop.fr" date="1624363200">- Update to version 5.15.5:
  * Abort findText also right on explicit navigation request
  * Adapt to new Connections syntax
  * Add devtools eyedropper support
  * Add more tests to tst_loadsignals
  * Add support for Keyboard.getLayoutMap()
  * Add web-ui chrome://net-internals
  * Allow leaving OCSP off
  * Always send phased wheel events beginning with Began
  * Avoid accessing profileAdapter when profile is shutting down
  * Avoid unknownFunc messages in qmltests
  * Blacklist CertificateError::test_error for macOS
  * Blacklist NewViewRequest::test_loadNewViewRequest on macOS
  * Blacklist handleError on macos until we merge the fix
  * Blacklist numberOfStartedAndFinishedSignalsIsSame on b2q CIs
  * Depend on QCoreApplication::startingUp() for checking
    existence of app
  * Do not allow WebBluetooth to continue
  * Do not hide virtual keyboard if the focused node is editable
  * Doc: Add a note about navigation within a page to a fragment
  * Docs: Suggest to use higher DPI for printing
  * Fix FilePickerController's path validation for windows and
    corresponding tests
  * Fix application locales again
  * Fix embedded PDFs when plugins are disabled
  * Fix first party url for cookie filter
  * Fix inconsistent number of load signals and their order
  * Fix normalization of app locales
  * Fix not working certificates on mac &gt; 10.14
  * Fix prl files on ios
  * Fix qmltests::WebEngineViewNavigationHistory auto tests
  * Fix qtpdf static builds on windows
  * Fix static build of qml qtpdf
  * Follow InProcessGpuThread::Init() on thread priority
  * Generate mojo bindings before compiling extension API
    registration
  * Implement PluginServiceFilterQt
  * Load signals test: use focusProxy for link clicking test
  * Make able to override disabled features from command line
  * Notify canGoBack/canGoForward changes based on web actions
  * Only disconnect QWebEnginePage signals that QWebEngineView
    connected
  * Package devtools inspector overlay
  * Remove ResourceTypeSubFrame check after website update
  * Remove obsolete loadSignals test
    secondLoadForError_WhenErrorPageEnabled
  * Remove qquickwebengineprofile test
  * Remove tracking of frame which load error page
  * Remove ui/snapshot overrides for aura
  * Report server directs in navigation type
  * Return to using the default devtools page
  * Set enumaration root directory for File.webkitRelativePath API
  * Set more Display properties
  * Show PDF viewer in a guest view
  * Support devtools close button in QuickNanoBrowser
  * Support zoom-in, zoom-out and cell web cursors on macOS
  * Unblacklist and fix load signals test for file download
  * Update Chromium and adapt PermissionManagerQt
  * Update platform notes
  * View: test signal for deletion of external page set to view
- Drop patches:
  * 0001-Fix-normalization-of-app-locales.patch
  * 0001-Fix-build-with-GCC-11.patch
  * 0001-Fix-build-with-system-ICU-69.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1624536000">- Update the CMake version workaround to get qtbase's real version</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1628078400">- Add patch to fix build with glibc 2.34 (boo#1189095)
  * 0001-Fix-build-with-glibc-2.34.patch</changelog>
  <changelog author="christophe@krop.fr" date="1631188800">- Update to version 5.15.6:
  * Update Chromium:
    + [Backport] CVE-2021-30560: Use after free in Blink XSLT
    + [Backport] CVE-2021-30566: Stack buffer overflow in Printing
    + [Backport] CVE-2021-30585: Use after free in sensor handling
    + Bump V8_PATCH_LEVEL
    + [Backport] Security bug 1228036
    + [Backport] CVE-2021-30604: Use after free in ANGLE
    + [Backport] CVE-2021-30603: Race in WebAudio
    + [Backport] CVE-2021-30602: Use after free in WebRTC
    + [Backport] CVE-2021-30599: Type Confusion in V8
    + [Backport] CVE-2021-30598: Type Confusion in V8
    + [Backport] Security bug 1227933
    + [Backport] Security bug 1205059
    + [Backport] Security bug 1184294
    + [Backport] Security bug 1198385
    + [Backport] CVE-2021-30588: Type Confusion in V8
    + [Backport] CVE-2021-30587: Inappropriate implementation in Compositing on Windows
    + [Backport] CVE-2021-30573: Use after free in GPU
    + [Backport] CVE-2021-30569, security bugs 1198216 and 1204814
    + [Backport] CVE-2021-30568: Heap buffer overflow in WebGL
    + [Backport] CVE-2021-30541: Use after free in V8
    + [Backport] Security bugs 1197786 and 1194330
    + [Backport] Security bug 1194689
    + [Backport] CVE-2021-30563: Type Confusion in V8
    + [Backport] Security bug 1211215
    + [Backport] Security bug 1209558
    + [Backport] CVE-2021-30553: Use after free in Network service
    + [Backport] CVE-2021-30548: Use after free in Loader
    + [Backport] CVE-2021-30547: Out of bounds write in ANGLE
    + [Backport] CVE-2021-30556: Use after free in WebAudio
    + [Backport] CVE-2021-30559: Out of bounds write in ANGLE
    + [Backport] CVE-2021-30533: Insufficient policy enforcement in PopupBlocker
    + [Backport] Security bug 1202534
    + [Backport] CVE-2021-30536: Out of bounds read in V8
    + [Backport] CVE-2021-30522: Use after free in WebAudio
    + [Backport] CVE-2021-30554 Use after free in WebGL
    + [Backport] CVE-2021-30551: Type Confusion in V8
    + [Backport] CVE-2021-30544: Use after free in BFCache
    + [Backport] CVE-2021-30535: Double free in ICU
    + [Backport] CVE-2021-30534: Insufficient policy enforcement in iFrameSandbox
    + [Backport] CVE-2021-30530: Out of bounds memory access in WebAudio
    + [Backport] CVE-2021-30523: Use after free in WebRTC
    + Generate mojo bindings before compiling extension API registration
  * Bump version from 5.15.5 to 5.15.6
  * Always send phased wheel events beginning with Began
- Import patch from the chromium package:
  * 0001-return-ENOSYS-for-clone3.patch
- Add changes from the chromium package to
  0001-Fix-build-with-glibc-2.34.patch</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1632225600">- Add patches from Arch to fix build with HarfBuzz 3.0.0:
  * chromium-harfbuzz-3.0.0.patch
  * skia-harfbuzz-3.0.0.patch
- ... but don't break with &lt; 2.9.0:
  * chromium-older-harfbuzz.patch</changelog>
  <changelog author="christophe@krop.fr" date="1635508800">- Update to version 5.15.7:
  * Update Chromium:
    [Backport] Linux sandbox: update syscalls numbers on 32-bit platforms
    [Backport] sandbox: linux: allow clock_nanosleep &amp; gettime64
    [Backport] Linux sandbox: update syscall numbers for all platforms.
    [Backport] Ease HarfBuzz API change with feature detection
    [Backport] Security bug 1248665
    [Backport] CVE-2021-37975 : Use after free in V8
    [Backport] CVE-2021-37980 : Inappropriate implementation in Sandbox
    [Backport] CVE-2021-37979 : Heap buffer overflow in WebRTC (2/2)
    [Backport] CVE-2021-37979 : Heap buffer overflow in WebRTC (1/2)
    [Backport] CVE-2021-37978 : Heap buffer overflow in Blink
    [Backport] CVE-2021-30616: Use after free in Media.
    [Backport] CVE-2021-37962 : Use after free in Performance Manager (2/2)
    [Backport] CVE-2021-37962 : Use after free in Performance Manager (1/2)
    [Backport] CVE-2021-37973 : Use after free in Portals
    [Backport] CVE-2021-37971 : Incorrect security UI in Web Browser UI.
    [Backport] CVE-2021-37968 : Inappropriate implementation in Background Fetch API
    [Backport] CVE-2021-37967 : Inappropriate implementation in Background Fetch API
    [Backport] Linux sandbox: return ENOSYS for clone3
    [Backport] Linux sandbox: fix fstatat() crash
    [Backport] Reland "Reland "Linux sandbox syscall broker: use struct kernel_stat""
    [Backport] Security bug 1238178 (2/2)
    [Backport] Security bug 1238178 (1/2)
    [Backport] CVE-2021-30633: Use after free in Indexed DB API (2/2)
    [Backport] CVE-2021-30633: Use after free in Indexed DB API (1/2)
    [Backport] CVE-2021-30630: Inappropriate implementation in Blink
    [Backport] CVE-2021-30629: Use after free in Permissions
    [Backport] CVE-2021-30628: Stack buffer overflow in ANGLE
    [Backport] CVE-2021-30627: Type Confusion in Blink layout
    [Backport] CVE-2021-30626: Out of bounds memory access in ANGLE
    [Backport] CVE-2021-30625: Use after free in Selection API
    [Backport] Security bug 1206289
    [Backport] CVE-2021-30613: Use after free in Base internals
    [Backport] Security bug 1227228
    [Backport] CVE-2021-30618: Inappropriate implementation in DevTools
  * Update patch level
  * Blacklist certificate test until certicates have been renewed
  * Block CORS from local URLs when remote access is not enabled
  * Do not wait on weak_pointer for termination errors
  * Support MSVC_VER 16.8
  * Fix wrong save file filter for Markdown Editor example
  * Add Chromium version source documentation
  * Bump version from 5.15.6 to 5.15.7
  * Fix crash when clicking on a link in PDF
- Drop openSUSE patches:
  * fix1163766.patch. Should be addressed with:
    https://github.com/qt/qtwebengine-chromium/commit/652f834de
    https://github.com/qt/qtwebengine-chromium/commit/faae106ed
    https://github.com/qt/qtwebengine-chromium/commit/6b7b3f1bf
  * chromium-glibc-2.33.patch. Should be addressed with the
    [Backport] Linux sandbox: fix fstatat() crash and
    Reland "Reland "Linux sandbox syscall broker: use struct kernel_stat""
    changes.
  * chromium-older-harfbuzz.patch
- Drop upstream changes:
  * 0001-return-ENOSYS-for-clone3.patch
  * chromium-harfbuzz-3.0.0.patch
  * skia-harfbuzz-3.0.0.patch
- Rebase patches:
  * sandbox-statx-futex_time64.patch</changelog>
  <changelog author="christophe@krop.fr" date="1641297600">- Update to version 5.15.8:
  * Update Chromium:
    [Backport] CVE-2021-3517: libxml2: Heap-based buffer overflow
    in xmlEncodeEntitiesInternal() in entities.c
    [Backport] CVE-2021-3541 libxml2: Exponential entity expansion
    attack bypasses all existing protection mechanisms
    [Backport] CVE-2021-37984 : Heap buffer overflow in PDFium
    [Backport] CVE-2021-37987 : Use after free in Network APIs
    [Backport] CVE-2021-37989 : Inappropriate implementation in Blink
    [Backport] CVE-2021-37992 : Out of bounds read in WebAudio
    [Backport] CVE-2021-37993 : Use after free in PDF Accessibility
    [Backport] CVE-2021-37996 : Insufficient validation of untrusted
    input in Downloads
    [Backport] CVE-2021-38001 : Type Confusion in V8
    [Backport] CVE-2021-38003 : Inappropriate implementation in V8
    [Backport] CVE-2021-38005: Use after free in loader (1/3)
    [Backport] CVE-2021-38005: Use after free in loader (2/3)
    [Backport] CVE-2021-38005: Use after free in loader (3/3)
    [Backport] CVE-2021-38007: Type Confusion in V8
    [Backport] CVE-2021-38009: Inappropriate implementation in cache
    [Backport] CVE-2021-38010: Inappropriate implementation in serviceworkers
    [Backport] CVE-2021-38012: Type Confusion in V8
    [Backport] CVE-2021-38015: Inappropriate implementation in input
    [Backport] CVE-2021-38017: Insufficient policy enforcement in iframe
    sandbox
    [Backport] CVE-2021-38018: Inappropriate implementation in navigation
    [Backport] CVE-2021-38019: Insufficient policy enforcement in CORS
    [Backport] CVE-2021-38021: Inappropriate implementation in referrer
    [Backport] CVE-2021-38022: Inappropriate implementation in WebAuthentication
    [Backport] CVE-2021-4057: Use after free in file API
    [Backport] CVE-2021-4058: Heap buffer overflow in ANGLE (1/2)
    [Backport] CVE-2021-4058: Heap buffer overflow in ANGLE (2/2)
    [Backport] CVE-2021-4059: Insufficient data validation in loader
    [Backport] CVE-2021-4062: Heap buffer overflow in BFCache
    [Backport] CVE-2021-4078: Type confusion in V8
    [Backport] CVE-2021-4079: Out of bounds write in WebRTC
    [Backport] CVE-2021-4098: Insufficient data validation in Mojo
    [Backport] CVE-2021-4099: Use after free in Swiftshader
    [Backport] CVE-2021-4101: Heap buffer overflow in Swiftshader.
    [Backport] CVE-2021-4102: Use after free in V8
    [Backport] Dependency for CVE-2021-37989
    [Backport] Dependency for CVE-2021-38009
    [Backport] Security bug 1245870
    [Backport] Security bug 1252858
    [Backport] Security bug 1259899
    Bump V8_PATCH_LEVEL
    Compile with GCC 11 -std=c++20
    Fix stack overflow on gpu channel recreate with an error
    Use wglSetPixelFormat directly only if in software mode
    [Backport] Handle long SIGSTKSZ in glibc &gt; 2.33
    [Backport] abseil-cpp: Fixes build with latest glibc
  * Handle qtpdf compilation with static runtime
  * Add bitcode support for qtpdf on ios
  * Do not access accessibility from qt post routines
  * Blacklist javascriptClipboard test on ubuntu 20.04
  * Re-enable network-service-in-process
  * Bump version from 5.15.7 to 5.15.8
  * Update patch level
  * Fix pinch gesture
  * Fix leak of properties after XkbRF_GetNamesProp
  * Fix leak on getDefaultScreeenId
- Drop patch:
  * 0001-Fix-build-with-glibc-2.34.patch</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1648209600">- Add patch to fix build with GCC 12:
  * 0001-skia-Some-includes-to-fix-build-with-GCC-12.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1649073600">- Add security fixes:
  * CVE-2022-0971-qtwebengine-5.15.patch (CVE-2022-0971, boo#1197163)
  * CVE-2022-1096-qtwebengine-5.15.patch (CVE-2022-1096, boo#1197552)</changelog>
  <changelog author="christophe@krop.fr" date="1649246400">- Update to version 5.15.9:
  * QPdfView: scale page rendering according to devicePixelRatio
  * Update documented Chromium version
  * Use IsSameDocument() rather than IsLoadingToDifferentDocument()
  * Update module-split for installer
  * Fix printing PDF files
  * Do not override signal handlers
  * Avoid using xkbcommon in non-X11 builds
  * Update documentation
  * Update Chromium:
  * Bump V8_PATCH_LEVEL
  * Do not overwrite signal handlers in the browser process.
  * Replace base::ranges::set_union with std::set_union to fix
    MSVC2017 build
  * [Backport] CVE-2022-0100: Heap buffer overflow in Media
    streams API
  * [Backport] CVE-2022-0102: Type Confusion in V8
  * [Backport] CVE-2022-0103: Use after free in SwiftShader
  * [Backport] CVE-2022-0104: Heap buffer overflow in ANGLE
  * [Backport] CVE-2022-0108: Inappropriate implementation
    in Navigation
  * [Backport] CVE-2022-0109: Inappropriate implementation
    in Autofill
  * [Backport] CVE-2022-0111 and CVE-2022-0117
  * [Backport] CVE-2022-0113: Inappropriate implementatio
    n in Blink
  * [Backport] CVE-2022-0116: Inappropriate implementation
    in Compositing
  * [Backport] CVE-2022-0289: Use after free in Safe browsing
  * [Backport] CVE-2022-0291: Inappropriate implementation
    in Storage
  * [Backport] CVE-2022-0293: Use after free in Web packaging
  * [Backport] CVE-2022-0298: Use after free in Scheduling
  * [Backport] CVE-2022-0305: Inappropriate implementation in
    Service Worker API
  * [Backport] CVE-2022-0306: Heap buffer overflow in PDFium
  * [Backport] CVE-2022-0310 and CVE-0311: Heap buffer overflow
    in Task Manager
  * [Backport] CVE-2022-0456: Use after free in Web Search
  * [Backport] CVE-2022-0459: Use after free in Screen Capture
  * [Backport] CVE-2022-0460: Use after free in Window Dialog
  * [Backport] CVE-2022-0461: Policy bypass in COOP
  * [Backport] CVE-2022-0606: Use after free in ANGLE
  * [Backport] CVE-2022-0607: Use after free in GPU
  * [Backport] CVE-2022-0608: Integer overflow in Mojo
  * [Backport] CVE-2022-0609: Use after free in Animation
  * [Backport] CVE-2022-0610: Inappropriate implementation
    in Gamepad API
  * [Backport] CVE-2022-0971 (boo#1197163)
  * [Backport] CVE-2022-1096 (boo#1197552)
  * [Backport] CVE-2022-23852
  * [Backport] Copy 'name_' member during StyleRuleProperty::Copy
  * [Backport] Security bug 1256885
  * [Backport] Security bug 1258603
  * [Backport] Security bug 1259557
  * [Backport] Security bug 1261415
  * [Backport] Security bug 1265570
  * [Backport] Security bug 1268448
  * [Backport] Security bug 1270014
  * [Backport] Security bug 1274113
  * [Backport] Security bug 1276331
  * [Backport] Security bug 1280743
  * [Backport] Security bug 1289394
  * [Backport] Security bug 1292537
  * [Backport] sandbox: build if glibc 2.34+ dynamic stack size
    is enabled
- Drop patches, now upstream:
  * CVE-2022-0971-qtwebengine-5.15.patch
  * CVE-2022-1096-qtwebengine-5.15.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1651060800">- Add libqt5-qtwebengine-rpmlintrc to silence the
  'shlib-policy-name-error' rpmlint error</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1651492800">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1654689600">- Update to version 5.15.10:
  * Fix top level build with no widget
  * Fix read-after-free on EGL extensions
  * Update Chromium
  * Add workaround for unstable gn on macOS in ci
  * Pass archiver to gn build
  * Fix navigation to non-local URLs
  * Add support for universal builds for qtwebengine and qtpdf
  * Enable Apple Silicon support
  * Fix cross compilation x86_64-&gt;arm64 on mac
  * Bump version to 5.15.10
  * CustomDialogs: Make custom input fields readable in dark mode
  * CookieBrowser: Make alternating rows readable in dark mode
  * Update Chromium:
  * Bump V8_PATCH_LEVEL
  * Fix clang set-but-unused-variable warning
  * Fix mac toolchain python linker script call
  * Fix missing dependency for gpu sources
  * Fix python calls
  * Fix undefined symbol for universal link
  * Quick fix for regression in service workers by reverting
    backports
  * [Backport] CVE-2022-0797: Out of bounds memory access
    in Mojo
  * [Backport] CVE-2022-1125
  * [Backport] CVE-2022-1138: Inappropriate implementation
    in Web Cursor.
  * [Backport] CVE-2022-1305: Use after free in storage
  * [Backport] CVE-2022-1310: Use after free in regular
    expressions
  * [Backport] CVE-2022-1314: Type Confusion in V8
  * [Backport] CVE-2022-1493: Use after free in Dev Tools
  * [Backport] On arm64 hosts, set host_cpu to 'arm64', not 'arm'
  * [Backport] Security Bug 1296876
  * [Backport] Security bug 1269999
  * [Backport] Security bug 1280852
  * [Backport] Security bug 1292905
  * [Backport] Security bug 1304659
  * [Backport] Security bug 1306507</changelog>
</package>
<package pkgid="11a581668a872180a8a057aa355e9b08d8b4cdf05f89b6d9ebb2d2678827e014" name="libqt5-qtwebengine" arch="src">
  <version epoch="0" ver="5.15.10" rel="bp154.2.3.2"/>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1613563200">- Add patch to fix sandbox with glibc 2.33 on 32bit:
  * sandbox-statx-futex_time64.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1615377600">- Can't use system_vpx on Leap 15.3</changelog>
  <changelog author="christophe@krop.fr" date="1616587200">- Update to version 5.15.3:
  * Fix spelling and coding style
  * Fix new view request handling (QTBUG-87378)
  * Fix getDefaultScreenId on X11
  * Fix flaky tst_QWebEngineView::textSelectionOutOfInputField test
  * Move touch input tests to separate testcase
  * Add touch input tests for scrolling and pinch zooming
  * Fix rare duplicate ids forming in touch point id's mapping
  * Use the module's version number for QtWebEngineProcess
  * Touch handling: provide id mapping without modifying TouchPoint instance
    (QTBUG-88001)
  * Touch handling: fix mapped ids cleanup for TouchCancel event
  * et custom headers from QWebEngineUrlRequestInfo before triggering redirect
    (QTBUG-88861)
  * Forward modifier flags for lock keys (QTBUG-89001)
  * Fix handling of more than one finger for touch event (QTBUG-86389)
  * Stabilize load signals emitting (QTBUG-65223, QTBUG-87089)
  * Fix building against 5.12 on most CIs
  * Update minimum HarfBuzz version to 2.4.0 (QTBUG-88976)
  * Fix building against Qt 5.14
  * Migrate user script IPC to mojo
  * Fix crashes in user resource controller when single process
  * Minor. Fix namespace for user resource controller
  * Minor. RenderThreadObserverQt is really a RenderConfiguration
  * Remove RenderViewObserverHelper from UserResourceController
  * Cache mojo interface bindings to UserResourceControllerRenderFrame
  * Cache mojo interface bindings for WebChannelIPCTransport
  * Migrate render_view_observer_qt to mojo
  * Fix crash on linkedin.com (QTBUG-89740)
  * Suppress error pages also for http errors if they are disabled
  * Fix leak in QQuickWebEngineViewPrivate::contextMenuRequested
  * Register PerformanceNode early enough
  * Quiet log on webrtc usage
  * Remove configure option that doesn't work
  * Remove Java build dependency
  * Fix blank popups in qml (QTBUG-86034)
  * Fix position of popup on qml (QTBUG-86034, QTBUG-89358)
  * Enable hangout services extension (QTBUG-85731)
  * Allow to fallback to default locale for non existent data packs (QTBUG-90490)
  * Support devtools close button
  * Do not extract download file names from certain url schemes (QTBUG-90355)
  * Leave room for the null-termination byte when checking remote drive path
    (QTBUG-90347)
  * Do not set open files limit for linking if not necessary
  * Remove even more remains of non network service code
  * Add back prefers-color-scheme support (QTBUG-89753)
  * Start supporting chrome.resourcesPrivate API (QTBUG-90035)
  * Enable chrome://user-actions WebUI
  * Remove remains of chrome://flash
  * Fix loadFinished signal if page has content but server sends HTTP error
    (QTBUG-90517)
  * Fix devtools page resource loading as raw data instead of html string
  * Remove frame metadata observer (RenderWidgetHostViewQt) on destroy
  * Resolve installed interceptors right before interception point (QTBUG-86286)
  * Update searches faster
  * Remove more leftovers of the old compositor
  * Enable webrtc logging and the corresponding WebUI
  * Support mips64el platform CPU(loongson 3A4000)
  * Add tracing UI resources
  * Fix crash on meet.google.com
  * Fix mad popup qquickwindows on wayland
  * Fix crashes on BrowserContext destruction
  * Fix crash on exit in quicknanobrowser when popup
  * Remove QtPdf dependency on nss at build-time
  * Avoid accessing profileAdapter when profile is shutting down (QTBUG-91187)
  * Do not flush messages form profile destructor
  * Ignore QQuickWebEngineNewViewRequest if it is unhandled
  * Fix ScopedGLContextChecker with QTWEBENGINE_DISABLE_GPU_THREAD=1
  * Don't send duplicate load progress values
  * Fix neon support in libpng
  * Do not call deprecated profile interceptor on ui thread (QTBUG-86267)
  * Add certificate error message for ERR_SSL_OBSOLETE_VERSION
  * Fix assert in WebContentsAdapter::devToolsFrontendDestroyed
  * Avoid to reject a certificate error twice in Quick
  * Fix PDF viewer plugin
  * FIXUP: Fix swap condition in DisplayGLOutputSurface::updatePaintNode
    (QTBUG-86599)
  * Fix favicon engine under device pixel scaling
  * Do not pass a native keycode matching the menu key when it is remapped
    (QTBUG-86672)
  * Optimize WebEngineSettings::testAttribute
  * Warn about QtWebengineProcess launching from network share (QTBUG-84632)
  * Handle non-ascii names for pulseaudio (QTBUG-85363)
  * Do not set audio device for desktop capture if audio loopback is unsupported
  * Fix new view request handling (QTBUG-87378)
  * Fix getDefaultScreenId on X11
  * Touch handling: provide id mapping without modifying TouchPoint instance
    (QTBUG-88001)
  * Set custom headers from QWebEngineUrlRequestInfo before triggering redirect
    (QTBUG-88861)
  * Stabilize load signals emitting (QTBUG-65223)
- CVE fixes backported in chromium updates:
  * CVE-2020-16044: Use after free in WebRTC
  * CVE-2021-21118: Heap buffer overflow in Blink
  * CVE-2021-21119: Use after free in Media
  * CVE-2021-21120: Use after free in WebSQL
  * CVE-2021-21121: Use after free in Omnibox
  * CVE-2021-21122: Use after free in Blink
  * CVE-2021-21123: Insufficient data validation in File System API
  * CVE-2021-21125: Insufficient policy enforcement in File System API
  * CVE-2021-21126: Insufficient policy enforcement in extensions
  * CVE-2021-21127: Insufficient policy enforcement in extensions
  * CVE-2021-21128: Heap buffer overflow in Blink
  * CVE-2021-21129: Insufficient policy enforcement in File System API
  * CVE-2021-21130: Insufficient policy enforcement in File System API
  * CVE-2021-21131: Insufficient policy enforcement in File System API
  * CVE-2021-21132: Inappropriate implementation in DevTools
  * CVE-2021-21135: Inappropriate implementation in Performance API
  * CVE-2021-21137: Inappropriate implementation in DevTools
  * CVE-2021-21140: Uninitialized Use in USB
  * CVE-2021-21141: Insufficient policy enforcement in File System API
  * CVE-2021-21145: Use after free in Fonts
  * CVE-2021-21146: Use after free in Navigation
  * CVE-2021-21147: Inappropriate implementation in Skia
  * CVE-2021-21148: Heap buffer overflow in V8
  * CVE-2021-21149: Stack overflow in Data Transfer
  * CVE-2021-21150: Use after free in Downloads
  * CVE-2021-21152: Heap buffer overflow in Media
  * CVE-2021-21153: Stack overflow in GPU Process
  * CVE-2021-21156: Heap buffer overflow in V8
  * CVE-2021-21157: Use after free in Web Sockets
- Drop obsolete patches:
  * icu-68.patch
  * icu-68-2.patch
- Rebase patches:
  * fix1163766.patch
  * sandbox-statx-futex_time64.patch
  * rtc-dont-use-h264.patch
  * chromium-glibc-2.33.patch
- Add patch to fix crash with certain locales:
  * 0001-Fix-normalization-of-app-locales.patch
- Clean the spec file a bit</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1618315200">- Add back missing part in fix1163766.patch (boo#1184610)</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1618401600">- Update _constraints to avoid OOM</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1618401601">- Add patch to fix build with GCC 11:
  * 0001-Fix-build-with-GCC-11.patch</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1620302400">- Add patch to fix build with ICU 69:
  * 0001-Fix-build-with-system-ICU-69.patch</changelog>
  <changelog author="christophe@krop.fr" date="1624363200">- Update to version 5.15.5:
  * Abort findText also right on explicit navigation request
  * Adapt to new Connections syntax
  * Add devtools eyedropper support
  * Add more tests to tst_loadsignals
  * Add support for Keyboard.getLayoutMap()
  * Add web-ui chrome://net-internals
  * Allow leaving OCSP off
  * Always send phased wheel events beginning with Began
  * Avoid accessing profileAdapter when profile is shutting down
  * Avoid unknownFunc messages in qmltests
  * Blacklist CertificateError::test_error for macOS
  * Blacklist NewViewRequest::test_loadNewViewRequest on macOS
  * Blacklist handleError on macos until we merge the fix
  * Blacklist numberOfStartedAndFinishedSignalsIsSame on b2q CIs
  * Depend on QCoreApplication::startingUp() for checking
    existence of app
  * Do not allow WebBluetooth to continue
  * Do not hide virtual keyboard if the focused node is editable
  * Doc: Add a note about navigation within a page to a fragment
  * Docs: Suggest to use higher DPI for printing
  * Fix FilePickerController's path validation for windows and
    corresponding tests
  * Fix application locales again
  * Fix embedded PDFs when plugins are disabled
  * Fix first party url for cookie filter
  * Fix inconsistent number of load signals and their order
  * Fix normalization of app locales
  * Fix not working certificates on mac &gt; 10.14
  * Fix prl files on ios
  * Fix qmltests::WebEngineViewNavigationHistory auto tests
  * Fix qtpdf static builds on windows
  * Fix static build of qml qtpdf
  * Follow InProcessGpuThread::Init() on thread priority
  * Generate mojo bindings before compiling extension API
    registration
  * Implement PluginServiceFilterQt
  * Load signals test: use focusProxy for link clicking test
  * Make able to override disabled features from command line
  * Notify canGoBack/canGoForward changes based on web actions
  * Only disconnect QWebEnginePage signals that QWebEngineView
    connected
  * Package devtools inspector overlay
  * Remove ResourceTypeSubFrame check after website update
  * Remove obsolete loadSignals test
    secondLoadForError_WhenErrorPageEnabled
  * Remove qquickwebengineprofile test
  * Remove tracking of frame which load error page
  * Remove ui/snapshot overrides for aura
  * Report server directs in navigation type
  * Return to using the default devtools page
  * Set enumaration root directory for File.webkitRelativePath API
  * Set more Display properties
  * Show PDF viewer in a guest view
  * Support devtools close button in QuickNanoBrowser
  * Support zoom-in, zoom-out and cell web cursors on macOS
  * Unblacklist and fix load signals test for file download
  * Update Chromium and adapt PermissionManagerQt
  * Update platform notes
  * View: test signal for deletion of external page set to view
- Drop patches:
  * 0001-Fix-normalization-of-app-locales.patch
  * 0001-Fix-build-with-GCC-11.patch
  * 0001-Fix-build-with-system-ICU-69.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1624536000">- Update the CMake version workaround to get qtbase's real version</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1628078400">- Add patch to fix build with glibc 2.34 (boo#1189095)
  * 0001-Fix-build-with-glibc-2.34.patch</changelog>
  <changelog author="christophe@krop.fr" date="1631188800">- Update to version 5.15.6:
  * Update Chromium:
    + [Backport] CVE-2021-30560: Use after free in Blink XSLT
    + [Backport] CVE-2021-30566: Stack buffer overflow in Printing
    + [Backport] CVE-2021-30585: Use after free in sensor handling
    + Bump V8_PATCH_LEVEL
    + [Backport] Security bug 1228036
    + [Backport] CVE-2021-30604: Use after free in ANGLE
    + [Backport] CVE-2021-30603: Race in WebAudio
    + [Backport] CVE-2021-30602: Use after free in WebRTC
    + [Backport] CVE-2021-30599: Type Confusion in V8
    + [Backport] CVE-2021-30598: Type Confusion in V8
    + [Backport] Security bug 1227933
    + [Backport] Security bug 1205059
    + [Backport] Security bug 1184294
    + [Backport] Security bug 1198385
    + [Backport] CVE-2021-30588: Type Confusion in V8
    + [Backport] CVE-2021-30587: Inappropriate implementation in Compositing on Windows
    + [Backport] CVE-2021-30573: Use after free in GPU
    + [Backport] CVE-2021-30569, security bugs 1198216 and 1204814
    + [Backport] CVE-2021-30568: Heap buffer overflow in WebGL
    + [Backport] CVE-2021-30541: Use after free in V8
    + [Backport] Security bugs 1197786 and 1194330
    + [Backport] Security bug 1194689
    + [Backport] CVE-2021-30563: Type Confusion in V8
    + [Backport] Security bug 1211215
    + [Backport] Security bug 1209558
    + [Backport] CVE-2021-30553: Use after free in Network service
    + [Backport] CVE-2021-30548: Use after free in Loader
    + [Backport] CVE-2021-30547: Out of bounds write in ANGLE
    + [Backport] CVE-2021-30556: Use after free in WebAudio
    + [Backport] CVE-2021-30559: Out of bounds write in ANGLE
    + [Backport] CVE-2021-30533: Insufficient policy enforcement in PopupBlocker
    + [Backport] Security bug 1202534
    + [Backport] CVE-2021-30536: Out of bounds read in V8
    + [Backport] CVE-2021-30522: Use after free in WebAudio
    + [Backport] CVE-2021-30554 Use after free in WebGL
    + [Backport] CVE-2021-30551: Type Confusion in V8
    + [Backport] CVE-2021-30544: Use after free in BFCache
    + [Backport] CVE-2021-30535: Double free in ICU
    + [Backport] CVE-2021-30534: Insufficient policy enforcement in iFrameSandbox
    + [Backport] CVE-2021-30530: Out of bounds memory access in WebAudio
    + [Backport] CVE-2021-30523: Use after free in WebRTC
    + Generate mojo bindings before compiling extension API registration
  * Bump version from 5.15.5 to 5.15.6
  * Always send phased wheel events beginning with Began
- Import patch from the chromium package:
  * 0001-return-ENOSYS-for-clone3.patch
- Add changes from the chromium package to
  0001-Fix-build-with-glibc-2.34.patch</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1632225600">- Add patches from Arch to fix build with HarfBuzz 3.0.0:
  * chromium-harfbuzz-3.0.0.patch
  * skia-harfbuzz-3.0.0.patch
- ... but don't break with &lt; 2.9.0:
  * chromium-older-harfbuzz.patch</changelog>
  <changelog author="christophe@krop.fr" date="1635508800">- Update to version 5.15.7:
  * Update Chromium:
    [Backport] Linux sandbox: update syscalls numbers on 32-bit platforms
    [Backport] sandbox: linux: allow clock_nanosleep &amp; gettime64
    [Backport] Linux sandbox: update syscall numbers for all platforms.
    [Backport] Ease HarfBuzz API change with feature detection
    [Backport] Security bug 1248665
    [Backport] CVE-2021-37975 : Use after free in V8
    [Backport] CVE-2021-37980 : Inappropriate implementation in Sandbox
    [Backport] CVE-2021-37979 : Heap buffer overflow in WebRTC (2/2)
    [Backport] CVE-2021-37979 : Heap buffer overflow in WebRTC (1/2)
    [Backport] CVE-2021-37978 : Heap buffer overflow in Blink
    [Backport] CVE-2021-30616: Use after free in Media.
    [Backport] CVE-2021-37962 : Use after free in Performance Manager (2/2)
    [Backport] CVE-2021-37962 : Use after free in Performance Manager (1/2)
    [Backport] CVE-2021-37973 : Use after free in Portals
    [Backport] CVE-2021-37971 : Incorrect security UI in Web Browser UI.
    [Backport] CVE-2021-37968 : Inappropriate implementation in Background Fetch API
    [Backport] CVE-2021-37967 : Inappropriate implementation in Background Fetch API
    [Backport] Linux sandbox: return ENOSYS for clone3
    [Backport] Linux sandbox: fix fstatat() crash
    [Backport] Reland "Reland "Linux sandbox syscall broker: use struct kernel_stat""
    [Backport] Security bug 1238178 (2/2)
    [Backport] Security bug 1238178 (1/2)
    [Backport] CVE-2021-30633: Use after free in Indexed DB API (2/2)
    [Backport] CVE-2021-30633: Use after free in Indexed DB API (1/2)
    [Backport] CVE-2021-30630: Inappropriate implementation in Blink
    [Backport] CVE-2021-30629: Use after free in Permissions
    [Backport] CVE-2021-30628: Stack buffer overflow in ANGLE
    [Backport] CVE-2021-30627: Type Confusion in Blink layout
    [Backport] CVE-2021-30626: Out of bounds memory access in ANGLE
    [Backport] CVE-2021-30625: Use after free in Selection API
    [Backport] Security bug 1206289
    [Backport] CVE-2021-30613: Use after free in Base internals
    [Backport] Security bug 1227228
    [Backport] CVE-2021-30618: Inappropriate implementation in DevTools
  * Update patch level
  * Blacklist certificate test until certicates have been renewed
  * Block CORS from local URLs when remote access is not enabled
  * Do not wait on weak_pointer for termination errors
  * Support MSVC_VER 16.8
  * Fix wrong save file filter for Markdown Editor example
  * Add Chromium version source documentation
  * Bump version from 5.15.6 to 5.15.7
  * Fix crash when clicking on a link in PDF
- Drop openSUSE patches:
  * fix1163766.patch. Should be addressed with:
    https://github.com/qt/qtwebengine-chromium/commit/652f834de
    https://github.com/qt/qtwebengine-chromium/commit/faae106ed
    https://github.com/qt/qtwebengine-chromium/commit/6b7b3f1bf
  * chromium-glibc-2.33.patch. Should be addressed with the
    [Backport] Linux sandbox: fix fstatat() crash and
    Reland "Reland "Linux sandbox syscall broker: use struct kernel_stat""
    changes.
  * chromium-older-harfbuzz.patch
- Drop upstream changes:
  * 0001-return-ENOSYS-for-clone3.patch
  * chromium-harfbuzz-3.0.0.patch
  * skia-harfbuzz-3.0.0.patch
- Rebase patches:
  * sandbox-statx-futex_time64.patch</changelog>
  <changelog author="christophe@krop.fr" date="1641297600">- Update to version 5.15.8:
  * Update Chromium:
    [Backport] CVE-2021-3517: libxml2: Heap-based buffer overflow
    in xmlEncodeEntitiesInternal() in entities.c
    [Backport] CVE-2021-3541 libxml2: Exponential entity expansion
    attack bypasses all existing protection mechanisms
    [Backport] CVE-2021-37984 : Heap buffer overflow in PDFium
    [Backport] CVE-2021-37987 : Use after free in Network APIs
    [Backport] CVE-2021-37989 : Inappropriate implementation in Blink
    [Backport] CVE-2021-37992 : Out of bounds read in WebAudio
    [Backport] CVE-2021-37993 : Use after free in PDF Accessibility
    [Backport] CVE-2021-37996 : Insufficient validation of untrusted
    input in Downloads
    [Backport] CVE-2021-38001 : Type Confusion in V8
    [Backport] CVE-2021-38003 : Inappropriate implementation in V8
    [Backport] CVE-2021-38005: Use after free in loader (1/3)
    [Backport] CVE-2021-38005: Use after free in loader (2/3)
    [Backport] CVE-2021-38005: Use after free in loader (3/3)
    [Backport] CVE-2021-38007: Type Confusion in V8
    [Backport] CVE-2021-38009: Inappropriate implementation in cache
    [Backport] CVE-2021-38010: Inappropriate implementation in serviceworkers
    [Backport] CVE-2021-38012: Type Confusion in V8
    [Backport] CVE-2021-38015: Inappropriate implementation in input
    [Backport] CVE-2021-38017: Insufficient policy enforcement in iframe
    sandbox
    [Backport] CVE-2021-38018: Inappropriate implementation in navigation
    [Backport] CVE-2021-38019: Insufficient policy enforcement in CORS
    [Backport] CVE-2021-38021: Inappropriate implementation in referrer
    [Backport] CVE-2021-38022: Inappropriate implementation in WebAuthentication
    [Backport] CVE-2021-4057: Use after free in file API
    [Backport] CVE-2021-4058: Heap buffer overflow in ANGLE (1/2)
    [Backport] CVE-2021-4058: Heap buffer overflow in ANGLE (2/2)
    [Backport] CVE-2021-4059: Insufficient data validation in loader
    [Backport] CVE-2021-4062: Heap buffer overflow in BFCache
    [Backport] CVE-2021-4078: Type confusion in V8
    [Backport] CVE-2021-4079: Out of bounds write in WebRTC
    [Backport] CVE-2021-4098: Insufficient data validation in Mojo
    [Backport] CVE-2021-4099: Use after free in Swiftshader
    [Backport] CVE-2021-4101: Heap buffer overflow in Swiftshader.
    [Backport] CVE-2021-4102: Use after free in V8
    [Backport] Dependency for CVE-2021-37989
    [Backport] Dependency for CVE-2021-38009
    [Backport] Security bug 1245870
    [Backport] Security bug 1252858
    [Backport] Security bug 1259899
    Bump V8_PATCH_LEVEL
    Compile with GCC 11 -std=c++20
    Fix stack overflow on gpu channel recreate with an error
    Use wglSetPixelFormat directly only if in software mode
    [Backport] Handle long SIGSTKSZ in glibc &gt; 2.33
    [Backport] abseil-cpp: Fixes build with latest glibc
  * Handle qtpdf compilation with static runtime
  * Add bitcode support for qtpdf on ios
  * Do not access accessibility from qt post routines
  * Blacklist javascriptClipboard test on ubuntu 20.04
  * Re-enable network-service-in-process
  * Bump version from 5.15.7 to 5.15.8
  * Update patch level
  * Fix pinch gesture
  * Fix leak of properties after XkbRF_GetNamesProp
  * Fix leak on getDefaultScreeenId
- Drop patch:
  * 0001-Fix-build-with-glibc-2.34.patch</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1648209600">- Add patch to fix build with GCC 12:
  * 0001-skia-Some-includes-to-fix-build-with-GCC-12.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1649073600">- Add security fixes:
  * CVE-2022-0971-qtwebengine-5.15.patch (CVE-2022-0971, boo#1197163)
  * CVE-2022-1096-qtwebengine-5.15.patch (CVE-2022-1096, boo#1197552)</changelog>
  <changelog author="christophe@krop.fr" date="1649246400">- Update to version 5.15.9:
  * QPdfView: scale page rendering according to devicePixelRatio
  * Update documented Chromium version
  * Use IsSameDocument() rather than IsLoadingToDifferentDocument()
  * Update module-split for installer
  * Fix printing PDF files
  * Do not override signal handlers
  * Avoid using xkbcommon in non-X11 builds
  * Update documentation
  * Update Chromium:
  * Bump V8_PATCH_LEVEL
  * Do not overwrite signal handlers in the browser process.
  * Replace base::ranges::set_union with std::set_union to fix
    MSVC2017 build
  * [Backport] CVE-2022-0100: Heap buffer overflow in Media
    streams API
  * [Backport] CVE-2022-0102: Type Confusion in V8
  * [Backport] CVE-2022-0103: Use after free in SwiftShader
  * [Backport] CVE-2022-0104: Heap buffer overflow in ANGLE
  * [Backport] CVE-2022-0108: Inappropriate implementation
    in Navigation
  * [Backport] CVE-2022-0109: Inappropriate implementation
    in Autofill
  * [Backport] CVE-2022-0111 and CVE-2022-0117
  * [Backport] CVE-2022-0113: Inappropriate implementatio
    n in Blink
  * [Backport] CVE-2022-0116: Inappropriate implementation
    in Compositing
  * [Backport] CVE-2022-0289: Use after free in Safe browsing
  * [Backport] CVE-2022-0291: Inappropriate implementation
    in Storage
  * [Backport] CVE-2022-0293: Use after free in Web packaging
  * [Backport] CVE-2022-0298: Use after free in Scheduling
  * [Backport] CVE-2022-0305: Inappropriate implementation in
    Service Worker API
  * [Backport] CVE-2022-0306: Heap buffer overflow in PDFium
  * [Backport] CVE-2022-0310 and CVE-0311: Heap buffer overflow
    in Task Manager
  * [Backport] CVE-2022-0456: Use after free in Web Search
  * [Backport] CVE-2022-0459: Use after free in Screen Capture
  * [Backport] CVE-2022-0460: Use after free in Window Dialog
  * [Backport] CVE-2022-0461: Policy bypass in COOP
  * [Backport] CVE-2022-0606: Use after free in ANGLE
  * [Backport] CVE-2022-0607: Use after free in GPU
  * [Backport] CVE-2022-0608: Integer overflow in Mojo
  * [Backport] CVE-2022-0609: Use after free in Animation
  * [Backport] CVE-2022-0610: Inappropriate implementation
    in Gamepad API
  * [Backport] CVE-2022-0971 (boo#1197163)
  * [Backport] CVE-2022-1096 (boo#1197552)
  * [Backport] CVE-2022-23852
  * [Backport] Copy 'name_' member during StyleRuleProperty::Copy
  * [Backport] Security bug 1256885
  * [Backport] Security bug 1258603
  * [Backport] Security bug 1259557
  * [Backport] Security bug 1261415
  * [Backport] Security bug 1265570
  * [Backport] Security bug 1268448
  * [Backport] Security bug 1270014
  * [Backport] Security bug 1274113
  * [Backport] Security bug 1276331
  * [Backport] Security bug 1280743
  * [Backport] Security bug 1289394
  * [Backport] Security bug 1292537
  * [Backport] sandbox: build if glibc 2.34+ dynamic stack size
    is enabled
- Drop patches, now upstream:
  * CVE-2022-0971-qtwebengine-5.15.patch
  * CVE-2022-1096-qtwebengine-5.15.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1651060800">- Add libqt5-qtwebengine-rpmlintrc to silence the
  'shlib-policy-name-error' rpmlint error</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1651492800">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1654689600">- Update to version 5.15.10:
  * Fix top level build with no widget
  * Fix read-after-free on EGL extensions
  * Update Chromium
  * Add workaround for unstable gn on macOS in ci
  * Pass archiver to gn build
  * Fix navigation to non-local URLs
  * Add support for universal builds for qtwebengine and qtpdf
  * Enable Apple Silicon support
  * Fix cross compilation x86_64-&gt;arm64 on mac
  * Bump version to 5.15.10
  * CustomDialogs: Make custom input fields readable in dark mode
  * CookieBrowser: Make alternating rows readable in dark mode
  * Update Chromium:
  * Bump V8_PATCH_LEVEL
  * Fix clang set-but-unused-variable warning
  * Fix mac toolchain python linker script call
  * Fix missing dependency for gpu sources
  * Fix python calls
  * Fix undefined symbol for universal link
  * Quick fix for regression in service workers by reverting
    backports
  * [Backport] CVE-2022-0797: Out of bounds memory access
    in Mojo
  * [Backport] CVE-2022-1125
  * [Backport] CVE-2022-1138: Inappropriate implementation
    in Web Cursor.
  * [Backport] CVE-2022-1305: Use after free in storage
  * [Backport] CVE-2022-1310: Use after free in regular
    expressions
  * [Backport] CVE-2022-1314: Type Confusion in V8
  * [Backport] CVE-2022-1493: Use after free in Dev Tools
  * [Backport] On arm64 hosts, set host_cpu to 'arm64', not 'arm'
  * [Backport] Security Bug 1296876
  * [Backport] Security bug 1269999
  * [Backport] Security bug 1280852
  * [Backport] Security bug 1292905
  * [Backport] Security bug 1304659
  * [Backport] Security bug 1306507</changelog>
</package>
<package pkgid="088eeb244bcc2199f48d452eb4162b1420dfda8de0f635401a17b32cdf1f2191" name="libqt5-qtwebengine" arch="x86_64">
  <version epoch="0" ver="5.15.10" rel="bp154.2.3.2"/>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1613563200">- Add patch to fix sandbox with glibc 2.33 on 32bit:
  * sandbox-statx-futex_time64.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1615377600">- Can't use system_vpx on Leap 15.3</changelog>
  <changelog author="christophe@krop.fr" date="1616587200">- Update to version 5.15.3:
  * Fix spelling and coding style
  * Fix new view request handling (QTBUG-87378)
  * Fix getDefaultScreenId on X11
  * Fix flaky tst_QWebEngineView::textSelectionOutOfInputField test
  * Move touch input tests to separate testcase
  * Add touch input tests for scrolling and pinch zooming
  * Fix rare duplicate ids forming in touch point id's mapping
  * Use the module's version number for QtWebEngineProcess
  * Touch handling: provide id mapping without modifying TouchPoint instance
    (QTBUG-88001)
  * Touch handling: fix mapped ids cleanup for TouchCancel event
  * et custom headers from QWebEngineUrlRequestInfo before triggering redirect
    (QTBUG-88861)
  * Forward modifier flags for lock keys (QTBUG-89001)
  * Fix handling of more than one finger for touch event (QTBUG-86389)
  * Stabilize load signals emitting (QTBUG-65223, QTBUG-87089)
  * Fix building against 5.12 on most CIs
  * Update minimum HarfBuzz version to 2.4.0 (QTBUG-88976)
  * Fix building against Qt 5.14
  * Migrate user script IPC to mojo
  * Fix crashes in user resource controller when single process
  * Minor. Fix namespace for user resource controller
  * Minor. RenderThreadObserverQt is really a RenderConfiguration
  * Remove RenderViewObserverHelper from UserResourceController
  * Cache mojo interface bindings to UserResourceControllerRenderFrame
  * Cache mojo interface bindings for WebChannelIPCTransport
  * Migrate render_view_observer_qt to mojo
  * Fix crash on linkedin.com (QTBUG-89740)
  * Suppress error pages also for http errors if they are disabled
  * Fix leak in QQuickWebEngineViewPrivate::contextMenuRequested
  * Register PerformanceNode early enough
  * Quiet log on webrtc usage
  * Remove configure option that doesn't work
  * Remove Java build dependency
  * Fix blank popups in qml (QTBUG-86034)
  * Fix position of popup on qml (QTBUG-86034, QTBUG-89358)
  * Enable hangout services extension (QTBUG-85731)
  * Allow to fallback to default locale for non existent data packs (QTBUG-90490)
  * Support devtools close button
  * Do not extract download file names from certain url schemes (QTBUG-90355)
  * Leave room for the null-termination byte when checking remote drive path
    (QTBUG-90347)
  * Do not set open files limit for linking if not necessary
  * Remove even more remains of non network service code
  * Add back prefers-color-scheme support (QTBUG-89753)
  * Start supporting chrome.resourcesPrivate API (QTBUG-90035)
  * Enable chrome://user-actions WebUI
  * Remove remains of chrome://flash
  * Fix loadFinished signal if page has content but server sends HTTP error
    (QTBUG-90517)
  * Fix devtools page resource loading as raw data instead of html string
  * Remove frame metadata observer (RenderWidgetHostViewQt) on destroy
  * Resolve installed interceptors right before interception point (QTBUG-86286)
  * Update searches faster
  * Remove more leftovers of the old compositor
  * Enable webrtc logging and the corresponding WebUI
  * Support mips64el platform CPU(loongson 3A4000)
  * Add tracing UI resources
  * Fix crash on meet.google.com
  * Fix mad popup qquickwindows on wayland
  * Fix crashes on BrowserContext destruction
  * Fix crash on exit in quicknanobrowser when popup
  * Remove QtPdf dependency on nss at build-time
  * Avoid accessing profileAdapter when profile is shutting down (QTBUG-91187)
  * Do not flush messages form profile destructor
  * Ignore QQuickWebEngineNewViewRequest if it is unhandled
  * Fix ScopedGLContextChecker with QTWEBENGINE_DISABLE_GPU_THREAD=1
  * Don't send duplicate load progress values
  * Fix neon support in libpng
  * Do not call deprecated profile interceptor on ui thread (QTBUG-86267)
  * Add certificate error message for ERR_SSL_OBSOLETE_VERSION
  * Fix assert in WebContentsAdapter::devToolsFrontendDestroyed
  * Avoid to reject a certificate error twice in Quick
  * Fix PDF viewer plugin
  * FIXUP: Fix swap condition in DisplayGLOutputSurface::updatePaintNode
    (QTBUG-86599)
  * Fix favicon engine under device pixel scaling
  * Do not pass a native keycode matching the menu key when it is remapped
    (QTBUG-86672)
  * Optimize WebEngineSettings::testAttribute
  * Warn about QtWebengineProcess launching from network share (QTBUG-84632)
  * Handle non-ascii names for pulseaudio (QTBUG-85363)
  * Do not set audio device for desktop capture if audio loopback is unsupported
  * Fix new view request handling (QTBUG-87378)
  * Fix getDefaultScreenId on X11
  * Touch handling: provide id mapping without modifying TouchPoint instance
    (QTBUG-88001)
  * Set custom headers from QWebEngineUrlRequestInfo before triggering redirect
    (QTBUG-88861)
  * Stabilize load signals emitting (QTBUG-65223)
- CVE fixes backported in chromium updates:
  * CVE-2020-16044: Use after free in WebRTC
  * CVE-2021-21118: Heap buffer overflow in Blink
  * CVE-2021-21119: Use after free in Media
  * CVE-2021-21120: Use after free in WebSQL
  * CVE-2021-21121: Use after free in Omnibox
  * CVE-2021-21122: Use after free in Blink
  * CVE-2021-21123: Insufficient data validation in File System API
  * CVE-2021-21125: Insufficient policy enforcement in File System API
  * CVE-2021-21126: Insufficient policy enforcement in extensions
  * CVE-2021-21127: Insufficient policy enforcement in extensions
  * CVE-2021-21128: Heap buffer overflow in Blink
  * CVE-2021-21129: Insufficient policy enforcement in File System API
  * CVE-2021-21130: Insufficient policy enforcement in File System API
  * CVE-2021-21131: Insufficient policy enforcement in File System API
  * CVE-2021-21132: Inappropriate implementation in DevTools
  * CVE-2021-21135: Inappropriate implementation in Performance API
  * CVE-2021-21137: Inappropriate implementation in DevTools
  * CVE-2021-21140: Uninitialized Use in USB
  * CVE-2021-21141: Insufficient policy enforcement in File System API
  * CVE-2021-21145: Use after free in Fonts
  * CVE-2021-21146: Use after free in Navigation
  * CVE-2021-21147: Inappropriate implementation in Skia
  * CVE-2021-21148: Heap buffer overflow in V8
  * CVE-2021-21149: Stack overflow in Data Transfer
  * CVE-2021-21150: Use after free in Downloads
  * CVE-2021-21152: Heap buffer overflow in Media
  * CVE-2021-21153: Stack overflow in GPU Process
  * CVE-2021-21156: Heap buffer overflow in V8
  * CVE-2021-21157: Use after free in Web Sockets
- Drop obsolete patches:
  * icu-68.patch
  * icu-68-2.patch
- Rebase patches:
  * fix1163766.patch
  * sandbox-statx-futex_time64.patch
  * rtc-dont-use-h264.patch
  * chromium-glibc-2.33.patch
- Add patch to fix crash with certain locales:
  * 0001-Fix-normalization-of-app-locales.patch
- Clean the spec file a bit</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1618315200">- Add back missing part in fix1163766.patch (boo#1184610)</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1618401600">- Update _constraints to avoid OOM</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1618401601">- Add patch to fix build with GCC 11:
  * 0001-Fix-build-with-GCC-11.patch</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1620302400">- Add patch to fix build with ICU 69:
  * 0001-Fix-build-with-system-ICU-69.patch</changelog>
  <changelog author="christophe@krop.fr" date="1624363200">- Update to version 5.15.5:
  * Abort findText also right on explicit navigation request
  * Adapt to new Connections syntax
  * Add devtools eyedropper support
  * Add more tests to tst_loadsignals
  * Add support for Keyboard.getLayoutMap()
  * Add web-ui chrome://net-internals
  * Allow leaving OCSP off
  * Always send phased wheel events beginning with Began
  * Avoid accessing profileAdapter when profile is shutting down
  * Avoid unknownFunc messages in qmltests
  * Blacklist CertificateError::test_error for macOS
  * Blacklist NewViewRequest::test_loadNewViewRequest on macOS
  * Blacklist handleError on macos until we merge the fix
  * Blacklist numberOfStartedAndFinishedSignalsIsSame on b2q CIs
  * Depend on QCoreApplication::startingUp() for checking
    existence of app
  * Do not allow WebBluetooth to continue
  * Do not hide virtual keyboard if the focused node is editable
  * Doc: Add a note about navigation within a page to a fragment
  * Docs: Suggest to use higher DPI for printing
  * Fix FilePickerController's path validation for windows and
    corresponding tests
  * Fix application locales again
  * Fix embedded PDFs when plugins are disabled
  * Fix first party url for cookie filter
  * Fix inconsistent number of load signals and their order
  * Fix normalization of app locales
  * Fix not working certificates on mac &gt; 10.14
  * Fix prl files on ios
  * Fix qmltests::WebEngineViewNavigationHistory auto tests
  * Fix qtpdf static builds on windows
  * Fix static build of qml qtpdf
  * Follow InProcessGpuThread::Init() on thread priority
  * Generate mojo bindings before compiling extension API
    registration
  * Implement PluginServiceFilterQt
  * Load signals test: use focusProxy for link clicking test
  * Make able to override disabled features from command line
  * Notify canGoBack/canGoForward changes based on web actions
  * Only disconnect QWebEnginePage signals that QWebEngineView
    connected
  * Package devtools inspector overlay
  * Remove ResourceTypeSubFrame check after website update
  * Remove obsolete loadSignals test
    secondLoadForError_WhenErrorPageEnabled
  * Remove qquickwebengineprofile test
  * Remove tracking of frame which load error page
  * Remove ui/snapshot overrides for aura
  * Report server directs in navigation type
  * Return to using the default devtools page
  * Set enumaration root directory for File.webkitRelativePath API
  * Set more Display properties
  * Show PDF viewer in a guest view
  * Support devtools close button in QuickNanoBrowser
  * Support zoom-in, zoom-out and cell web cursors on macOS
  * Unblacklist and fix load signals test for file download
  * Update Chromium and adapt PermissionManagerQt
  * Update platform notes
  * View: test signal for deletion of external page set to view
- Drop patches:
  * 0001-Fix-normalization-of-app-locales.patch
  * 0001-Fix-build-with-GCC-11.patch
  * 0001-Fix-build-with-system-ICU-69.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1624536000">- Update the CMake version workaround to get qtbase's real version</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1628078400">- Add patch to fix build with glibc 2.34 (boo#1189095)
  * 0001-Fix-build-with-glibc-2.34.patch</changelog>
  <changelog author="christophe@krop.fr" date="1631188800">- Update to version 5.15.6:
  * Update Chromium:
    + [Backport] CVE-2021-30560: Use after free in Blink XSLT
    + [Backport] CVE-2021-30566: Stack buffer overflow in Printing
    + [Backport] CVE-2021-30585: Use after free in sensor handling
    + Bump V8_PATCH_LEVEL
    + [Backport] Security bug 1228036
    + [Backport] CVE-2021-30604: Use after free in ANGLE
    + [Backport] CVE-2021-30603: Race in WebAudio
    + [Backport] CVE-2021-30602: Use after free in WebRTC
    + [Backport] CVE-2021-30599: Type Confusion in V8
    + [Backport] CVE-2021-30598: Type Confusion in V8
    + [Backport] Security bug 1227933
    + [Backport] Security bug 1205059
    + [Backport] Security bug 1184294
    + [Backport] Security bug 1198385
    + [Backport] CVE-2021-30588: Type Confusion in V8
    + [Backport] CVE-2021-30587: Inappropriate implementation in Compositing on Windows
    + [Backport] CVE-2021-30573: Use after free in GPU
    + [Backport] CVE-2021-30569, security bugs 1198216 and 1204814
    + [Backport] CVE-2021-30568: Heap buffer overflow in WebGL
    + [Backport] CVE-2021-30541: Use after free in V8
    + [Backport] Security bugs 1197786 and 1194330
    + [Backport] Security bug 1194689
    + [Backport] CVE-2021-30563: Type Confusion in V8
    + [Backport] Security bug 1211215
    + [Backport] Security bug 1209558
    + [Backport] CVE-2021-30553: Use after free in Network service
    + [Backport] CVE-2021-30548: Use after free in Loader
    + [Backport] CVE-2021-30547: Out of bounds write in ANGLE
    + [Backport] CVE-2021-30556: Use after free in WebAudio
    + [Backport] CVE-2021-30559: Out of bounds write in ANGLE
    + [Backport] CVE-2021-30533: Insufficient policy enforcement in PopupBlocker
    + [Backport] Security bug 1202534
    + [Backport] CVE-2021-30536: Out of bounds read in V8
    + [Backport] CVE-2021-30522: Use after free in WebAudio
    + [Backport] CVE-2021-30554 Use after free in WebGL
    + [Backport] CVE-2021-30551: Type Confusion in V8
    + [Backport] CVE-2021-30544: Use after free in BFCache
    + [Backport] CVE-2021-30535: Double free in ICU
    + [Backport] CVE-2021-30534: Insufficient policy enforcement in iFrameSandbox
    + [Backport] CVE-2021-30530: Out of bounds memory access in WebAudio
    + [Backport] CVE-2021-30523: Use after free in WebRTC
    + Generate mojo bindings before compiling extension API registration
  * Bump version from 5.15.5 to 5.15.6
  * Always send phased wheel events beginning with Began
- Import patch from the chromium package:
  * 0001-return-ENOSYS-for-clone3.patch
- Add changes from the chromium package to
  0001-Fix-build-with-glibc-2.34.patch</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1632225600">- Add patches from Arch to fix build with HarfBuzz 3.0.0:
  * chromium-harfbuzz-3.0.0.patch
  * skia-harfbuzz-3.0.0.patch
- ... but don't break with &lt; 2.9.0:
  * chromium-older-harfbuzz.patch</changelog>
  <changelog author="christophe@krop.fr" date="1635508800">- Update to version 5.15.7:
  * Update Chromium:
    [Backport] Linux sandbox: update syscalls numbers on 32-bit platforms
    [Backport] sandbox: linux: allow clock_nanosleep &amp; gettime64
    [Backport] Linux sandbox: update syscall numbers for all platforms.
    [Backport] Ease HarfBuzz API change with feature detection
    [Backport] Security bug 1248665
    [Backport] CVE-2021-37975 : Use after free in V8
    [Backport] CVE-2021-37980 : Inappropriate implementation in Sandbox
    [Backport] CVE-2021-37979 : Heap buffer overflow in WebRTC (2/2)
    [Backport] CVE-2021-37979 : Heap buffer overflow in WebRTC (1/2)
    [Backport] CVE-2021-37978 : Heap buffer overflow in Blink
    [Backport] CVE-2021-30616: Use after free in Media.
    [Backport] CVE-2021-37962 : Use after free in Performance Manager (2/2)
    [Backport] CVE-2021-37962 : Use after free in Performance Manager (1/2)
    [Backport] CVE-2021-37973 : Use after free in Portals
    [Backport] CVE-2021-37971 : Incorrect security UI in Web Browser UI.
    [Backport] CVE-2021-37968 : Inappropriate implementation in Background Fetch API
    [Backport] CVE-2021-37967 : Inappropriate implementation in Background Fetch API
    [Backport] Linux sandbox: return ENOSYS for clone3
    [Backport] Linux sandbox: fix fstatat() crash
    [Backport] Reland "Reland "Linux sandbox syscall broker: use struct kernel_stat""
    [Backport] Security bug 1238178 (2/2)
    [Backport] Security bug 1238178 (1/2)
    [Backport] CVE-2021-30633: Use after free in Indexed DB API (2/2)
    [Backport] CVE-2021-30633: Use after free in Indexed DB API (1/2)
    [Backport] CVE-2021-30630: Inappropriate implementation in Blink
    [Backport] CVE-2021-30629: Use after free in Permissions
    [Backport] CVE-2021-30628: Stack buffer overflow in ANGLE
    [Backport] CVE-2021-30627: Type Confusion in Blink layout
    [Backport] CVE-2021-30626: Out of bounds memory access in ANGLE
    [Backport] CVE-2021-30625: Use after free in Selection API
    [Backport] Security bug 1206289
    [Backport] CVE-2021-30613: Use after free in Base internals
    [Backport] Security bug 1227228
    [Backport] CVE-2021-30618: Inappropriate implementation in DevTools
  * Update patch level
  * Blacklist certificate test until certicates have been renewed
  * Block CORS from local URLs when remote access is not enabled
  * Do not wait on weak_pointer for termination errors
  * Support MSVC_VER 16.8
  * Fix wrong save file filter for Markdown Editor example
  * Add Chromium version source documentation
  * Bump version from 5.15.6 to 5.15.7
  * Fix crash when clicking on a link in PDF
- Drop openSUSE patches:
  * fix1163766.patch. Should be addressed with:
    https://github.com/qt/qtwebengine-chromium/commit/652f834de
    https://github.com/qt/qtwebengine-chromium/commit/faae106ed
    https://github.com/qt/qtwebengine-chromium/commit/6b7b3f1bf
  * chromium-glibc-2.33.patch. Should be addressed with the
    [Backport] Linux sandbox: fix fstatat() crash and
    Reland "Reland "Linux sandbox syscall broker: use struct kernel_stat""
    changes.
  * chromium-older-harfbuzz.patch
- Drop upstream changes:
  * 0001-return-ENOSYS-for-clone3.patch
  * chromium-harfbuzz-3.0.0.patch
  * skia-harfbuzz-3.0.0.patch
- Rebase patches:
  * sandbox-statx-futex_time64.patch</changelog>
  <changelog author="christophe@krop.fr" date="1641297600">- Update to version 5.15.8:
  * Update Chromium:
    [Backport] CVE-2021-3517: libxml2: Heap-based buffer overflow
    in xmlEncodeEntitiesInternal() in entities.c
    [Backport] CVE-2021-3541 libxml2: Exponential entity expansion
    attack bypasses all existing protection mechanisms
    [Backport] CVE-2021-37984 : Heap buffer overflow in PDFium
    [Backport] CVE-2021-37987 : Use after free in Network APIs
    [Backport] CVE-2021-37989 : Inappropriate implementation in Blink
    [Backport] CVE-2021-37992 : Out of bounds read in WebAudio
    [Backport] CVE-2021-37993 : Use after free in PDF Accessibility
    [Backport] CVE-2021-37996 : Insufficient validation of untrusted
    input in Downloads
    [Backport] CVE-2021-38001 : Type Confusion in V8
    [Backport] CVE-2021-38003 : Inappropriate implementation in V8
    [Backport] CVE-2021-38005: Use after free in loader (1/3)
    [Backport] CVE-2021-38005: Use after free in loader (2/3)
    [Backport] CVE-2021-38005: Use after free in loader (3/3)
    [Backport] CVE-2021-38007: Type Confusion in V8
    [Backport] CVE-2021-38009: Inappropriate implementation in cache
    [Backport] CVE-2021-38010: Inappropriate implementation in serviceworkers
    [Backport] CVE-2021-38012: Type Confusion in V8
    [Backport] CVE-2021-38015: Inappropriate implementation in input
    [Backport] CVE-2021-38017: Insufficient policy enforcement in iframe
    sandbox
    [Backport] CVE-2021-38018: Inappropriate implementation in navigation
    [Backport] CVE-2021-38019: Insufficient policy enforcement in CORS
    [Backport] CVE-2021-38021: Inappropriate implementation in referrer
    [Backport] CVE-2021-38022: Inappropriate implementation in WebAuthentication
    [Backport] CVE-2021-4057: Use after free in file API
    [Backport] CVE-2021-4058: Heap buffer overflow in ANGLE (1/2)
    [Backport] CVE-2021-4058: Heap buffer overflow in ANGLE (2/2)
    [Backport] CVE-2021-4059: Insufficient data validation in loader
    [Backport] CVE-2021-4062: Heap buffer overflow in BFCache
    [Backport] CVE-2021-4078: Type confusion in V8
    [Backport] CVE-2021-4079: Out of bounds write in WebRTC
    [Backport] CVE-2021-4098: Insufficient data validation in Mojo
    [Backport] CVE-2021-4099: Use after free in Swiftshader
    [Backport] CVE-2021-4101: Heap buffer overflow in Swiftshader.
    [Backport] CVE-2021-4102: Use after free in V8
    [Backport] Dependency for CVE-2021-37989
    [Backport] Dependency for CVE-2021-38009
    [Backport] Security bug 1245870
    [Backport] Security bug 1252858
    [Backport] Security bug 1259899
    Bump V8_PATCH_LEVEL
    Compile with GCC 11 -std=c++20
    Fix stack overflow on gpu channel recreate with an error
    Use wglSetPixelFormat directly only if in software mode
    [Backport] Handle long SIGSTKSZ in glibc &gt; 2.33
    [Backport] abseil-cpp: Fixes build with latest glibc
  * Handle qtpdf compilation with static runtime
  * Add bitcode support for qtpdf on ios
  * Do not access accessibility from qt post routines
  * Blacklist javascriptClipboard test on ubuntu 20.04
  * Re-enable network-service-in-process
  * Bump version from 5.15.7 to 5.15.8
  * Update patch level
  * Fix pinch gesture
  * Fix leak of properties after XkbRF_GetNamesProp
  * Fix leak on getDefaultScreeenId
- Drop patch:
  * 0001-Fix-build-with-glibc-2.34.patch</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1648209600">- Add patch to fix build with GCC 12:
  * 0001-skia-Some-includes-to-fix-build-with-GCC-12.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1649073600">- Add security fixes:
  * CVE-2022-0971-qtwebengine-5.15.patch (CVE-2022-0971, boo#1197163)
  * CVE-2022-1096-qtwebengine-5.15.patch (CVE-2022-1096, boo#1197552)</changelog>
  <changelog author="christophe@krop.fr" date="1649246400">- Update to version 5.15.9:
  * QPdfView: scale page rendering according to devicePixelRatio
  * Update documented Chromium version
  * Use IsSameDocument() rather than IsLoadingToDifferentDocument()
  * Update module-split for installer
  * Fix printing PDF files
  * Do not override signal handlers
  * Avoid using xkbcommon in non-X11 builds
  * Update documentation
  * Update Chromium:
  * Bump V8_PATCH_LEVEL
  * Do not overwrite signal handlers in the browser process.
  * Replace base::ranges::set_union with std::set_union to fix
    MSVC2017 build
  * [Backport] CVE-2022-0100: Heap buffer overflow in Media
    streams API
  * [Backport] CVE-2022-0102: Type Confusion in V8
  * [Backport] CVE-2022-0103: Use after free in SwiftShader
  * [Backport] CVE-2022-0104: Heap buffer overflow in ANGLE
  * [Backport] CVE-2022-0108: Inappropriate implementation
    in Navigation
  * [Backport] CVE-2022-0109: Inappropriate implementation
    in Autofill
  * [Backport] CVE-2022-0111 and CVE-2022-0117
  * [Backport] CVE-2022-0113: Inappropriate implementatio
    n in Blink
  * [Backport] CVE-2022-0116: Inappropriate implementation
    in Compositing
  * [Backport] CVE-2022-0289: Use after free in Safe browsing
  * [Backport] CVE-2022-0291: Inappropriate implementation
    in Storage
  * [Backport] CVE-2022-0293: Use after free in Web packaging
  * [Backport] CVE-2022-0298: Use after free in Scheduling
  * [Backport] CVE-2022-0305: Inappropriate implementation in
    Service Worker API
  * [Backport] CVE-2022-0306: Heap buffer overflow in PDFium
  * [Backport] CVE-2022-0310 and CVE-0311: Heap buffer overflow
    in Task Manager
  * [Backport] CVE-2022-0456: Use after free in Web Search
  * [Backport] CVE-2022-0459: Use after free in Screen Capture
  * [Backport] CVE-2022-0460: Use after free in Window Dialog
  * [Backport] CVE-2022-0461: Policy bypass in COOP
  * [Backport] CVE-2022-0606: Use after free in ANGLE
  * [Backport] CVE-2022-0607: Use after free in GPU
  * [Backport] CVE-2022-0608: Integer overflow in Mojo
  * [Backport] CVE-2022-0609: Use after free in Animation
  * [Backport] CVE-2022-0610: Inappropriate implementation
    in Gamepad API
  * [Backport] CVE-2022-0971 (boo#1197163)
  * [Backport] CVE-2022-1096 (boo#1197552)
  * [Backport] CVE-2022-23852
  * [Backport] Copy 'name_' member during StyleRuleProperty::Copy
  * [Backport] Security bug 1256885
  * [Backport] Security bug 1258603
  * [Backport] Security bug 1259557
  * [Backport] Security bug 1261415
  * [Backport] Security bug 1265570
  * [Backport] Security bug 1268448
  * [Backport] Security bug 1270014
  * [Backport] Security bug 1274113
  * [Backport] Security bug 1276331
  * [Backport] Security bug 1280743
  * [Backport] Security bug 1289394
  * [Backport] Security bug 1292537
  * [Backport] sandbox: build if glibc 2.34+ dynamic stack size
    is enabled
- Drop patches, now upstream:
  * CVE-2022-0971-qtwebengine-5.15.patch
  * CVE-2022-1096-qtwebengine-5.15.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1651060800">- Add libqt5-qtwebengine-rpmlintrc to silence the
  'shlib-policy-name-error' rpmlint error</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1651492800">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1654689600">- Update to version 5.15.10:
  * Fix top level build with no widget
  * Fix read-after-free on EGL extensions
  * Update Chromium
  * Add workaround for unstable gn on macOS in ci
  * Pass archiver to gn build
  * Fix navigation to non-local URLs
  * Add support for universal builds for qtwebengine and qtpdf
  * Enable Apple Silicon support
  * Fix cross compilation x86_64-&gt;arm64 on mac
  * Bump version to 5.15.10
  * CustomDialogs: Make custom input fields readable in dark mode
  * CookieBrowser: Make alternating rows readable in dark mode
  * Update Chromium:
  * Bump V8_PATCH_LEVEL
  * Fix clang set-but-unused-variable warning
  * Fix mac toolchain python linker script call
  * Fix missing dependency for gpu sources
  * Fix python calls
  * Fix undefined symbol for universal link
  * Quick fix for regression in service workers by reverting
    backports
  * [Backport] CVE-2022-0797: Out of bounds memory access
    in Mojo
  * [Backport] CVE-2022-1125
  * [Backport] CVE-2022-1138: Inappropriate implementation
    in Web Cursor.
  * [Backport] CVE-2022-1305: Use after free in storage
  * [Backport] CVE-2022-1310: Use after free in regular
    expressions
  * [Backport] CVE-2022-1314: Type Confusion in V8
  * [Backport] CVE-2022-1493: Use after free in Dev Tools
  * [Backport] On arm64 hosts, set host_cpu to 'arm64', not 'arm'
  * [Backport] Security Bug 1296876
  * [Backport] Security bug 1269999
  * [Backport] Security bug 1280852
  * [Backport] Security bug 1292905
  * [Backport] Security bug 1304659
  * [Backport] Security bug 1306507</changelog>
</package>
<package pkgid="6318c10b93a8dd84bb7cf3b32cf4da00f6576344cce399691365ff6937176e8d" name="libqt5-qtwebengine-devel" arch="aarch64">
  <version epoch="0" ver="5.15.10" rel="bp154.2.3.2"/>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1613563200">- Add patch to fix sandbox with glibc 2.33 on 32bit:
  * sandbox-statx-futex_time64.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1615377600">- Can't use system_vpx on Leap 15.3</changelog>
  <changelog author="christophe@krop.fr" date="1616587200">- Update to version 5.15.3:
  * Fix spelling and coding style
  * Fix new view request handling (QTBUG-87378)
  * Fix getDefaultScreenId on X11
  * Fix flaky tst_QWebEngineView::textSelectionOutOfInputField test
  * Move touch input tests to separate testcase
  * Add touch input tests for scrolling and pinch zooming
  * Fix rare duplicate ids forming in touch point id's mapping
  * Use the module's version number for QtWebEngineProcess
  * Touch handling: provide id mapping without modifying TouchPoint instance
    (QTBUG-88001)
  * Touch handling: fix mapped ids cleanup for TouchCancel event
  * et custom headers from QWebEngineUrlRequestInfo before triggering redirect
    (QTBUG-88861)
  * Forward modifier flags for lock keys (QTBUG-89001)
  * Fix handling of more than one finger for touch event (QTBUG-86389)
  * Stabilize load signals emitting (QTBUG-65223, QTBUG-87089)
  * Fix building against 5.12 on most CIs
  * Update minimum HarfBuzz version to 2.4.0 (QTBUG-88976)
  * Fix building against Qt 5.14
  * Migrate user script IPC to mojo
  * Fix crashes in user resource controller when single process
  * Minor. Fix namespace for user resource controller
  * Minor. RenderThreadObserverQt is really a RenderConfiguration
  * Remove RenderViewObserverHelper from UserResourceController
  * Cache mojo interface bindings to UserResourceControllerRenderFrame
  * Cache mojo interface bindings for WebChannelIPCTransport
  * Migrate render_view_observer_qt to mojo
  * Fix crash on linkedin.com (QTBUG-89740)
  * Suppress error pages also for http errors if they are disabled
  * Fix leak in QQuickWebEngineViewPrivate::contextMenuRequested
  * Register PerformanceNode early enough
  * Quiet log on webrtc usage
  * Remove configure option that doesn't work
  * Remove Java build dependency
  * Fix blank popups in qml (QTBUG-86034)
  * Fix position of popup on qml (QTBUG-86034, QTBUG-89358)
  * Enable hangout services extension (QTBUG-85731)
  * Allow to fallback to default locale for non existent data packs (QTBUG-90490)
  * Support devtools close button
  * Do not extract download file names from certain url schemes (QTBUG-90355)
  * Leave room for the null-termination byte when checking remote drive path
    (QTBUG-90347)
  * Do not set open files limit for linking if not necessary
  * Remove even more remains of non network service code
  * Add back prefers-color-scheme support (QTBUG-89753)
  * Start supporting chrome.resourcesPrivate API (QTBUG-90035)
  * Enable chrome://user-actions WebUI
  * Remove remains of chrome://flash
  * Fix loadFinished signal if page has content but server sends HTTP error
    (QTBUG-90517)
  * Fix devtools page resource loading as raw data instead of html string
  * Remove frame metadata observer (RenderWidgetHostViewQt) on destroy
  * Resolve installed interceptors right before interception point (QTBUG-86286)
  * Update searches faster
  * Remove more leftovers of the old compositor
  * Enable webrtc logging and the corresponding WebUI
  * Support mips64el platform CPU(loongson 3A4000)
  * Add tracing UI resources
  * Fix crash on meet.google.com
  * Fix mad popup qquickwindows on wayland
  * Fix crashes on BrowserContext destruction
  * Fix crash on exit in quicknanobrowser when popup
  * Remove QtPdf dependency on nss at build-time
  * Avoid accessing profileAdapter when profile is shutting down (QTBUG-91187)
  * Do not flush messages form profile destructor
  * Ignore QQuickWebEngineNewViewRequest if it is unhandled
  * Fix ScopedGLContextChecker with QTWEBENGINE_DISABLE_GPU_THREAD=1
  * Don't send duplicate load progress values
  * Fix neon support in libpng
  * Do not call deprecated profile interceptor on ui thread (QTBUG-86267)
  * Add certificate error message for ERR_SSL_OBSOLETE_VERSION
  * Fix assert in WebContentsAdapter::devToolsFrontendDestroyed
  * Avoid to reject a certificate error twice in Quick
  * Fix PDF viewer plugin
  * FIXUP: Fix swap condition in DisplayGLOutputSurface::updatePaintNode
    (QTBUG-86599)
  * Fix favicon engine under device pixel scaling
  * Do not pass a native keycode matching the menu key when it is remapped
    (QTBUG-86672)
  * Optimize WebEngineSettings::testAttribute
  * Warn about QtWebengineProcess launching from network share (QTBUG-84632)
  * Handle non-ascii names for pulseaudio (QTBUG-85363)
  * Do not set audio device for desktop capture if audio loopback is unsupported
  * Fix new view request handling (QTBUG-87378)
  * Fix getDefaultScreenId on X11
  * Touch handling: provide id mapping without modifying TouchPoint instance
    (QTBUG-88001)
  * Set custom headers from QWebEngineUrlRequestInfo before triggering redirect
    (QTBUG-88861)
  * Stabilize load signals emitting (QTBUG-65223)
- CVE fixes backported in chromium updates:
  * CVE-2020-16044: Use after free in WebRTC
  * CVE-2021-21118: Heap buffer overflow in Blink
  * CVE-2021-21119: Use after free in Media
  * CVE-2021-21120: Use after free in WebSQL
  * CVE-2021-21121: Use after free in Omnibox
  * CVE-2021-21122: Use after free in Blink
  * CVE-2021-21123: Insufficient data validation in File System API
  * CVE-2021-21125: Insufficient policy enforcement in File System API
  * CVE-2021-21126: Insufficient policy enforcement in extensions
  * CVE-2021-21127: Insufficient policy enforcement in extensions
  * CVE-2021-21128: Heap buffer overflow in Blink
  * CVE-2021-21129: Insufficient policy enforcement in File System API
  * CVE-2021-21130: Insufficient policy enforcement in File System API
  * CVE-2021-21131: Insufficient policy enforcement in File System API
  * CVE-2021-21132: Inappropriate implementation in DevTools
  * CVE-2021-21135: Inappropriate implementation in Performance API
  * CVE-2021-21137: Inappropriate implementation in DevTools
  * CVE-2021-21140: Uninitialized Use in USB
  * CVE-2021-21141: Insufficient policy enforcement in File System API
  * CVE-2021-21145: Use after free in Fonts
  * CVE-2021-21146: Use after free in Navigation
  * CVE-2021-21147: Inappropriate implementation in Skia
  * CVE-2021-21148: Heap buffer overflow in V8
  * CVE-2021-21149: Stack overflow in Data Transfer
  * CVE-2021-21150: Use after free in Downloads
  * CVE-2021-21152: Heap buffer overflow in Media
  * CVE-2021-21153: Stack overflow in GPU Process
  * CVE-2021-21156: Heap buffer overflow in V8
  * CVE-2021-21157: Use after free in Web Sockets
- Drop obsolete patches:
  * icu-68.patch
  * icu-68-2.patch
- Rebase patches:
  * fix1163766.patch
  * sandbox-statx-futex_time64.patch
  * rtc-dont-use-h264.patch
  * chromium-glibc-2.33.patch
- Add patch to fix crash with certain locales:
  * 0001-Fix-normalization-of-app-locales.patch
- Clean the spec file a bit</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1618315200">- Add back missing part in fix1163766.patch (boo#1184610)</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1618401600">- Update _constraints to avoid OOM</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1618401601">- Add patch to fix build with GCC 11:
  * 0001-Fix-build-with-GCC-11.patch</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1620302400">- Add patch to fix build with ICU 69:
  * 0001-Fix-build-with-system-ICU-69.patch</changelog>
  <changelog author="christophe@krop.fr" date="1624363200">- Update to version 5.15.5:
  * Abort findText also right on explicit navigation request
  * Adapt to new Connections syntax
  * Add devtools eyedropper support
  * Add more tests to tst_loadsignals
  * Add support for Keyboard.getLayoutMap()
  * Add web-ui chrome://net-internals
  * Allow leaving OCSP off
  * Always send phased wheel events beginning with Began
  * Avoid accessing profileAdapter when profile is shutting down
  * Avoid unknownFunc messages in qmltests
  * Blacklist CertificateError::test_error for macOS
  * Blacklist NewViewRequest::test_loadNewViewRequest on macOS
  * Blacklist handleError on macos until we merge the fix
  * Blacklist numberOfStartedAndFinishedSignalsIsSame on b2q CIs
  * Depend on QCoreApplication::startingUp() for checking
    existence of app
  * Do not allow WebBluetooth to continue
  * Do not hide virtual keyboard if the focused node is editable
  * Doc: Add a note about navigation within a page to a fragment
  * Docs: Suggest to use higher DPI for printing
  * Fix FilePickerController's path validation for windows and
    corresponding tests
  * Fix application locales again
  * Fix embedded PDFs when plugins are disabled
  * Fix first party url for cookie filter
  * Fix inconsistent number of load signals and their order
  * Fix normalization of app locales
  * Fix not working certificates on mac &gt; 10.14
  * Fix prl files on ios
  * Fix qmltests::WebEngineViewNavigationHistory auto tests
  * Fix qtpdf static builds on windows
  * Fix static build of qml qtpdf
  * Follow InProcessGpuThread::Init() on thread priority
  * Generate mojo bindings before compiling extension API
    registration
  * Implement PluginServiceFilterQt
  * Load signals test: use focusProxy for link clicking test
  * Make able to override disabled features from command line
  * Notify canGoBack/canGoForward changes based on web actions
  * Only disconnect QWebEnginePage signals that QWebEngineView
    connected
  * Package devtools inspector overlay
  * Remove ResourceTypeSubFrame check after website update
  * Remove obsolete loadSignals test
    secondLoadForError_WhenErrorPageEnabled
  * Remove qquickwebengineprofile test
  * Remove tracking of frame which load error page
  * Remove ui/snapshot overrides for aura
  * Report server directs in navigation type
  * Return to using the default devtools page
  * Set enumaration root directory for File.webkitRelativePath API
  * Set more Display properties
  * Show PDF viewer in a guest view
  * Support devtools close button in QuickNanoBrowser
  * Support zoom-in, zoom-out and cell web cursors on macOS
  * Unblacklist and fix load signals test for file download
  * Update Chromium and adapt PermissionManagerQt
  * Update platform notes
  * View: test signal for deletion of external page set to view
- Drop patches:
  * 0001-Fix-normalization-of-app-locales.patch
  * 0001-Fix-build-with-GCC-11.patch
  * 0001-Fix-build-with-system-ICU-69.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1624536000">- Update the CMake version workaround to get qtbase's real version</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1628078400">- Add patch to fix build with glibc 2.34 (boo#1189095)
  * 0001-Fix-build-with-glibc-2.34.patch</changelog>
  <changelog author="christophe@krop.fr" date="1631188800">- Update to version 5.15.6:
  * Update Chromium:
    + [Backport] CVE-2021-30560: Use after free in Blink XSLT
    + [Backport] CVE-2021-30566: Stack buffer overflow in Printing
    + [Backport] CVE-2021-30585: Use after free in sensor handling
    + Bump V8_PATCH_LEVEL
    + [Backport] Security bug 1228036
    + [Backport] CVE-2021-30604: Use after free in ANGLE
    + [Backport] CVE-2021-30603: Race in WebAudio
    + [Backport] CVE-2021-30602: Use after free in WebRTC
    + [Backport] CVE-2021-30599: Type Confusion in V8
    + [Backport] CVE-2021-30598: Type Confusion in V8
    + [Backport] Security bug 1227933
    + [Backport] Security bug 1205059
    + [Backport] Security bug 1184294
    + [Backport] Security bug 1198385
    + [Backport] CVE-2021-30588: Type Confusion in V8
    + [Backport] CVE-2021-30587: Inappropriate implementation in Compositing on Windows
    + [Backport] CVE-2021-30573: Use after free in GPU
    + [Backport] CVE-2021-30569, security bugs 1198216 and 1204814
    + [Backport] CVE-2021-30568: Heap buffer overflow in WebGL
    + [Backport] CVE-2021-30541: Use after free in V8
    + [Backport] Security bugs 1197786 and 1194330
    + [Backport] Security bug 1194689
    + [Backport] CVE-2021-30563: Type Confusion in V8
    + [Backport] Security bug 1211215
    + [Backport] Security bug 1209558
    + [Backport] CVE-2021-30553: Use after free in Network service
    + [Backport] CVE-2021-30548: Use after free in Loader
    + [Backport] CVE-2021-30547: Out of bounds write in ANGLE
    + [Backport] CVE-2021-30556: Use after free in WebAudio
    + [Backport] CVE-2021-30559: Out of bounds write in ANGLE
    + [Backport] CVE-2021-30533: Insufficient policy enforcement in PopupBlocker
    + [Backport] Security bug 1202534
    + [Backport] CVE-2021-30536: Out of bounds read in V8
    + [Backport] CVE-2021-30522: Use after free in WebAudio
    + [Backport] CVE-2021-30554 Use after free in WebGL
    + [Backport] CVE-2021-30551: Type Confusion in V8
    + [Backport] CVE-2021-30544: Use after free in BFCache
    + [Backport] CVE-2021-30535: Double free in ICU
    + [Backport] CVE-2021-30534: Insufficient policy enforcement in iFrameSandbox
    + [Backport] CVE-2021-30530: Out of bounds memory access in WebAudio
    + [Backport] CVE-2021-30523: Use after free in WebRTC
    + Generate mojo bindings before compiling extension API registration
  * Bump version from 5.15.5 to 5.15.6
  * Always send phased wheel events beginning with Began
- Import patch from the chromium package:
  * 0001-return-ENOSYS-for-clone3.patch
- Add changes from the chromium package to
  0001-Fix-build-with-glibc-2.34.patch</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1632225600">- Add patches from Arch to fix build with HarfBuzz 3.0.0:
  * chromium-harfbuzz-3.0.0.patch
  * skia-harfbuzz-3.0.0.patch
- ... but don't break with &lt; 2.9.0:
  * chromium-older-harfbuzz.patch</changelog>
  <changelog author="christophe@krop.fr" date="1635508800">- Update to version 5.15.7:
  * Update Chromium:
    [Backport] Linux sandbox: update syscalls numbers on 32-bit platforms
    [Backport] sandbox: linux: allow clock_nanosleep &amp; gettime64
    [Backport] Linux sandbox: update syscall numbers for all platforms.
    [Backport] Ease HarfBuzz API change with feature detection
    [Backport] Security bug 1248665
    [Backport] CVE-2021-37975 : Use after free in V8
    [Backport] CVE-2021-37980 : Inappropriate implementation in Sandbox
    [Backport] CVE-2021-37979 : Heap buffer overflow in WebRTC (2/2)
    [Backport] CVE-2021-37979 : Heap buffer overflow in WebRTC (1/2)
    [Backport] CVE-2021-37978 : Heap buffer overflow in Blink
    [Backport] CVE-2021-30616: Use after free in Media.
    [Backport] CVE-2021-37962 : Use after free in Performance Manager (2/2)
    [Backport] CVE-2021-37962 : Use after free in Performance Manager (1/2)
    [Backport] CVE-2021-37973 : Use after free in Portals
    [Backport] CVE-2021-37971 : Incorrect security UI in Web Browser UI.
    [Backport] CVE-2021-37968 : Inappropriate implementation in Background Fetch API
    [Backport] CVE-2021-37967 : Inappropriate implementation in Background Fetch API
    [Backport] Linux sandbox: return ENOSYS for clone3
    [Backport] Linux sandbox: fix fstatat() crash
    [Backport] Reland "Reland "Linux sandbox syscall broker: use struct kernel_stat""
    [Backport] Security bug 1238178 (2/2)
    [Backport] Security bug 1238178 (1/2)
    [Backport] CVE-2021-30633: Use after free in Indexed DB API (2/2)
    [Backport] CVE-2021-30633: Use after free in Indexed DB API (1/2)
    [Backport] CVE-2021-30630: Inappropriate implementation in Blink
    [Backport] CVE-2021-30629: Use after free in Permissions
    [Backport] CVE-2021-30628: Stack buffer overflow in ANGLE
    [Backport] CVE-2021-30627: Type Confusion in Blink layout
    [Backport] CVE-2021-30626: Out of bounds memory access in ANGLE
    [Backport] CVE-2021-30625: Use after free in Selection API
    [Backport] Security bug 1206289
    [Backport] CVE-2021-30613: Use after free in Base internals
    [Backport] Security bug 1227228
    [Backport] CVE-2021-30618: Inappropriate implementation in DevTools
  * Update patch level
  * Blacklist certificate test until certicates have been renewed
  * Block CORS from local URLs when remote access is not enabled
  * Do not wait on weak_pointer for termination errors
  * Support MSVC_VER 16.8
  * Fix wrong save file filter for Markdown Editor example
  * Add Chromium version source documentation
  * Bump version from 5.15.6 to 5.15.7
  * Fix crash when clicking on a link in PDF
- Drop openSUSE patches:
  * fix1163766.patch. Should be addressed with:
    https://github.com/qt/qtwebengine-chromium/commit/652f834de
    https://github.com/qt/qtwebengine-chromium/commit/faae106ed
    https://github.com/qt/qtwebengine-chromium/commit/6b7b3f1bf
  * chromium-glibc-2.33.patch. Should be addressed with the
    [Backport] Linux sandbox: fix fstatat() crash and
    Reland "Reland "Linux sandbox syscall broker: use struct kernel_stat""
    changes.
  * chromium-older-harfbuzz.patch
- Drop upstream changes:
  * 0001-return-ENOSYS-for-clone3.patch
  * chromium-harfbuzz-3.0.0.patch
  * skia-harfbuzz-3.0.0.patch
- Rebase patches:
  * sandbox-statx-futex_time64.patch</changelog>
  <changelog author="christophe@krop.fr" date="1641297600">- Update to version 5.15.8:
  * Update Chromium:
    [Backport] CVE-2021-3517: libxml2: Heap-based buffer overflow
    in xmlEncodeEntitiesInternal() in entities.c
    [Backport] CVE-2021-3541 libxml2: Exponential entity expansion
    attack bypasses all existing protection mechanisms
    [Backport] CVE-2021-37984 : Heap buffer overflow in PDFium
    [Backport] CVE-2021-37987 : Use after free in Network APIs
    [Backport] CVE-2021-37989 : Inappropriate implementation in Blink
    [Backport] CVE-2021-37992 : Out of bounds read in WebAudio
    [Backport] CVE-2021-37993 : Use after free in PDF Accessibility
    [Backport] CVE-2021-37996 : Insufficient validation of untrusted
    input in Downloads
    [Backport] CVE-2021-38001 : Type Confusion in V8
    [Backport] CVE-2021-38003 : Inappropriate implementation in V8
    [Backport] CVE-2021-38005: Use after free in loader (1/3)
    [Backport] CVE-2021-38005: Use after free in loader (2/3)
    [Backport] CVE-2021-38005: Use after free in loader (3/3)
    [Backport] CVE-2021-38007: Type Confusion in V8
    [Backport] CVE-2021-38009: Inappropriate implementation in cache
    [Backport] CVE-2021-38010: Inappropriate implementation in serviceworkers
    [Backport] CVE-2021-38012: Type Confusion in V8
    [Backport] CVE-2021-38015: Inappropriate implementation in input
    [Backport] CVE-2021-38017: Insufficient policy enforcement in iframe
    sandbox
    [Backport] CVE-2021-38018: Inappropriate implementation in navigation
    [Backport] CVE-2021-38019: Insufficient policy enforcement in CORS
    [Backport] CVE-2021-38021: Inappropriate implementation in referrer
    [Backport] CVE-2021-38022: Inappropriate implementation in WebAuthentication
    [Backport] CVE-2021-4057: Use after free in file API
    [Backport] CVE-2021-4058: Heap buffer overflow in ANGLE (1/2)
    [Backport] CVE-2021-4058: Heap buffer overflow in ANGLE (2/2)
    [Backport] CVE-2021-4059: Insufficient data validation in loader
    [Backport] CVE-2021-4062: Heap buffer overflow in BFCache
    [Backport] CVE-2021-4078: Type confusion in V8
    [Backport] CVE-2021-4079: Out of bounds write in WebRTC
    [Backport] CVE-2021-4098: Insufficient data validation in Mojo
    [Backport] CVE-2021-4099: Use after free in Swiftshader
    [Backport] CVE-2021-4101: Heap buffer overflow in Swiftshader.
    [Backport] CVE-2021-4102: Use after free in V8
    [Backport] Dependency for CVE-2021-37989
    [Backport] Dependency for CVE-2021-38009
    [Backport] Security bug 1245870
    [Backport] Security bug 1252858
    [Backport] Security bug 1259899
    Bump V8_PATCH_LEVEL
    Compile with GCC 11 -std=c++20
    Fix stack overflow on gpu channel recreate with an error
    Use wglSetPixelFormat directly only if in software mode
    [Backport] Handle long SIGSTKSZ in glibc &gt; 2.33
    [Backport] abseil-cpp: Fixes build with latest glibc
  * Handle qtpdf compilation with static runtime
  * Add bitcode support for qtpdf on ios
  * Do not access accessibility from qt post routines
  * Blacklist javascriptClipboard test on ubuntu 20.04
  * Re-enable network-service-in-process
  * Bump version from 5.15.7 to 5.15.8
  * Update patch level
  * Fix pinch gesture
  * Fix leak of properties after XkbRF_GetNamesProp
  * Fix leak on getDefaultScreeenId
- Drop patch:
  * 0001-Fix-build-with-glibc-2.34.patch</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1648209600">- Add patch to fix build with GCC 12:
  * 0001-skia-Some-includes-to-fix-build-with-GCC-12.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1649073600">- Add security fixes:
  * CVE-2022-0971-qtwebengine-5.15.patch (CVE-2022-0971, boo#1197163)
  * CVE-2022-1096-qtwebengine-5.15.patch (CVE-2022-1096, boo#1197552)</changelog>
  <changelog author="christophe@krop.fr" date="1649246400">- Update to version 5.15.9:
  * QPdfView: scale page rendering according to devicePixelRatio
  * Update documented Chromium version
  * Use IsSameDocument() rather than IsLoadingToDifferentDocument()
  * Update module-split for installer
  * Fix printing PDF files
  * Do not override signal handlers
  * Avoid using xkbcommon in non-X11 builds
  * Update documentation
  * Update Chromium:
  * Bump V8_PATCH_LEVEL
  * Do not overwrite signal handlers in the browser process.
  * Replace base::ranges::set_union with std::set_union to fix
    MSVC2017 build
  * [Backport] CVE-2022-0100: Heap buffer overflow in Media
    streams API
  * [Backport] CVE-2022-0102: Type Confusion in V8
  * [Backport] CVE-2022-0103: Use after free in SwiftShader
  * [Backport] CVE-2022-0104: Heap buffer overflow in ANGLE
  * [Backport] CVE-2022-0108: Inappropriate implementation
    in Navigation
  * [Backport] CVE-2022-0109: Inappropriate implementation
    in Autofill
  * [Backport] CVE-2022-0111 and CVE-2022-0117
  * [Backport] CVE-2022-0113: Inappropriate implementatio
    n in Blink
  * [Backport] CVE-2022-0116: Inappropriate implementation
    in Compositing
  * [Backport] CVE-2022-0289: Use after free in Safe browsing
  * [Backport] CVE-2022-0291: Inappropriate implementation
    in Storage
  * [Backport] CVE-2022-0293: Use after free in Web packaging
  * [Backport] CVE-2022-0298: Use after free in Scheduling
  * [Backport] CVE-2022-0305: Inappropriate implementation in
    Service Worker API
  * [Backport] CVE-2022-0306: Heap buffer overflow in PDFium
  * [Backport] CVE-2022-0310 and CVE-0311: Heap buffer overflow
    in Task Manager
  * [Backport] CVE-2022-0456: Use after free in Web Search
  * [Backport] CVE-2022-0459: Use after free in Screen Capture
  * [Backport] CVE-2022-0460: Use after free in Window Dialog
  * [Backport] CVE-2022-0461: Policy bypass in COOP
  * [Backport] CVE-2022-0606: Use after free in ANGLE
  * [Backport] CVE-2022-0607: Use after free in GPU
  * [Backport] CVE-2022-0608: Integer overflow in Mojo
  * [Backport] CVE-2022-0609: Use after free in Animation
  * [Backport] CVE-2022-0610: Inappropriate implementation
    in Gamepad API
  * [Backport] CVE-2022-0971 (boo#1197163)
  * [Backport] CVE-2022-1096 (boo#1197552)
  * [Backport] CVE-2022-23852
  * [Backport] Copy 'name_' member during StyleRuleProperty::Copy
  * [Backport] Security bug 1256885
  * [Backport] Security bug 1258603
  * [Backport] Security bug 1259557
  * [Backport] Security bug 1261415
  * [Backport] Security bug 1265570
  * [Backport] Security bug 1268448
  * [Backport] Security bug 1270014
  * [Backport] Security bug 1274113
  * [Backport] Security bug 1276331
  * [Backport] Security bug 1280743
  * [Backport] Security bug 1289394
  * [Backport] Security bug 1292537
  * [Backport] sandbox: build if glibc 2.34+ dynamic stack size
    is enabled
- Drop patches, now upstream:
  * CVE-2022-0971-qtwebengine-5.15.patch
  * CVE-2022-1096-qtwebengine-5.15.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1651060800">- Add libqt5-qtwebengine-rpmlintrc to silence the
  'shlib-policy-name-error' rpmlint error</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1651492800">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1654689600">- Update to version 5.15.10:
  * Fix top level build with no widget
  * Fix read-after-free on EGL extensions
  * Update Chromium
  * Add workaround for unstable gn on macOS in ci
  * Pass archiver to gn build
  * Fix navigation to non-local URLs
  * Add support for universal builds for qtwebengine and qtpdf
  * Enable Apple Silicon support
  * Fix cross compilation x86_64-&gt;arm64 on mac
  * Bump version to 5.15.10
  * CustomDialogs: Make custom input fields readable in dark mode
  * CookieBrowser: Make alternating rows readable in dark mode
  * Update Chromium:
  * Bump V8_PATCH_LEVEL
  * Fix clang set-but-unused-variable warning
  * Fix mac toolchain python linker script call
  * Fix missing dependency for gpu sources
  * Fix python calls
  * Fix undefined symbol for universal link
  * Quick fix for regression in service workers by reverting
    backports
  * [Backport] CVE-2022-0797: Out of bounds memory access
    in Mojo
  * [Backport] CVE-2022-1125
  * [Backport] CVE-2022-1138: Inappropriate implementation
    in Web Cursor.
  * [Backport] CVE-2022-1305: Use after free in storage
  * [Backport] CVE-2022-1310: Use after free in regular
    expressions
  * [Backport] CVE-2022-1314: Type Confusion in V8
  * [Backport] CVE-2022-1493: Use after free in Dev Tools
  * [Backport] On arm64 hosts, set host_cpu to 'arm64', not 'arm'
  * [Backport] Security Bug 1296876
  * [Backport] Security bug 1269999
  * [Backport] Security bug 1280852
  * [Backport] Security bug 1292905
  * [Backport] Security bug 1304659
  * [Backport] Security bug 1306507</changelog>
</package>
<package pkgid="113fef0e09dd3eb24943986fd647c27270698880ea6778e58ece24b3307c65b1" name="libqt5-qtwebengine-devel" arch="x86_64">
  <version epoch="0" ver="5.15.10" rel="bp154.2.3.2"/>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1613563200">- Add patch to fix sandbox with glibc 2.33 on 32bit:
  * sandbox-statx-futex_time64.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1615377600">- Can't use system_vpx on Leap 15.3</changelog>
  <changelog author="christophe@krop.fr" date="1616587200">- Update to version 5.15.3:
  * Fix spelling and coding style
  * Fix new view request handling (QTBUG-87378)
  * Fix getDefaultScreenId on X11
  * Fix flaky tst_QWebEngineView::textSelectionOutOfInputField test
  * Move touch input tests to separate testcase
  * Add touch input tests for scrolling and pinch zooming
  * Fix rare duplicate ids forming in touch point id's mapping
  * Use the module's version number for QtWebEngineProcess
  * Touch handling: provide id mapping without modifying TouchPoint instance
    (QTBUG-88001)
  * Touch handling: fix mapped ids cleanup for TouchCancel event
  * et custom headers from QWebEngineUrlRequestInfo before triggering redirect
    (QTBUG-88861)
  * Forward modifier flags for lock keys (QTBUG-89001)
  * Fix handling of more than one finger for touch event (QTBUG-86389)
  * Stabilize load signals emitting (QTBUG-65223, QTBUG-87089)
  * Fix building against 5.12 on most CIs
  * Update minimum HarfBuzz version to 2.4.0 (QTBUG-88976)
  * Fix building against Qt 5.14
  * Migrate user script IPC to mojo
  * Fix crashes in user resource controller when single process
  * Minor. Fix namespace for user resource controller
  * Minor. RenderThreadObserverQt is really a RenderConfiguration
  * Remove RenderViewObserverHelper from UserResourceController
  * Cache mojo interface bindings to UserResourceControllerRenderFrame
  * Cache mojo interface bindings for WebChannelIPCTransport
  * Migrate render_view_observer_qt to mojo
  * Fix crash on linkedin.com (QTBUG-89740)
  * Suppress error pages also for http errors if they are disabled
  * Fix leak in QQuickWebEngineViewPrivate::contextMenuRequested
  * Register PerformanceNode early enough
  * Quiet log on webrtc usage
  * Remove configure option that doesn't work
  * Remove Java build dependency
  * Fix blank popups in qml (QTBUG-86034)
  * Fix position of popup on qml (QTBUG-86034, QTBUG-89358)
  * Enable hangout services extension (QTBUG-85731)
  * Allow to fallback to default locale for non existent data packs (QTBUG-90490)
  * Support devtools close button
  * Do not extract download file names from certain url schemes (QTBUG-90355)
  * Leave room for the null-termination byte when checking remote drive path
    (QTBUG-90347)
  * Do not set open files limit for linking if not necessary
  * Remove even more remains of non network service code
  * Add back prefers-color-scheme support (QTBUG-89753)
  * Start supporting chrome.resourcesPrivate API (QTBUG-90035)
  * Enable chrome://user-actions WebUI
  * Remove remains of chrome://flash
  * Fix loadFinished signal if page has content but server sends HTTP error
    (QTBUG-90517)
  * Fix devtools page resource loading as raw data instead of html string
  * Remove frame metadata observer (RenderWidgetHostViewQt) on destroy
  * Resolve installed interceptors right before interception point (QTBUG-86286)
  * Update searches faster
  * Remove more leftovers of the old compositor
  * Enable webrtc logging and the corresponding WebUI
  * Support mips64el platform CPU(loongson 3A4000)
  * Add tracing UI resources
  * Fix crash on meet.google.com
  * Fix mad popup qquickwindows on wayland
  * Fix crashes on BrowserContext destruction
  * Fix crash on exit in quicknanobrowser when popup
  * Remove QtPdf dependency on nss at build-time
  * Avoid accessing profileAdapter when profile is shutting down (QTBUG-91187)
  * Do not flush messages form profile destructor
  * Ignore QQuickWebEngineNewViewRequest if it is unhandled
  * Fix ScopedGLContextChecker with QTWEBENGINE_DISABLE_GPU_THREAD=1
  * Don't send duplicate load progress values
  * Fix neon support in libpng
  * Do not call deprecated profile interceptor on ui thread (QTBUG-86267)
  * Add certificate error message for ERR_SSL_OBSOLETE_VERSION
  * Fix assert in WebContentsAdapter::devToolsFrontendDestroyed
  * Avoid to reject a certificate error twice in Quick
  * Fix PDF viewer plugin
  * FIXUP: Fix swap condition in DisplayGLOutputSurface::updatePaintNode
    (QTBUG-86599)
  * Fix favicon engine under device pixel scaling
  * Do not pass a native keycode matching the menu key when it is remapped
    (QTBUG-86672)
  * Optimize WebEngineSettings::testAttribute
  * Warn about QtWebengineProcess launching from network share (QTBUG-84632)
  * Handle non-ascii names for pulseaudio (QTBUG-85363)
  * Do not set audio device for desktop capture if audio loopback is unsupported
  * Fix new view request handling (QTBUG-87378)
  * Fix getDefaultScreenId on X11
  * Touch handling: provide id mapping without modifying TouchPoint instance
    (QTBUG-88001)
  * Set custom headers from QWebEngineUrlRequestInfo before triggering redirect
    (QTBUG-88861)
  * Stabilize load signals emitting (QTBUG-65223)
- CVE fixes backported in chromium updates:
  * CVE-2020-16044: Use after free in WebRTC
  * CVE-2021-21118: Heap buffer overflow in Blink
  * CVE-2021-21119: Use after free in Media
  * CVE-2021-21120: Use after free in WebSQL
  * CVE-2021-21121: Use after free in Omnibox
  * CVE-2021-21122: Use after free in Blink
  * CVE-2021-21123: Insufficient data validation in File System API
  * CVE-2021-21125: Insufficient policy enforcement in File System API
  * CVE-2021-21126: Insufficient policy enforcement in extensions
  * CVE-2021-21127: Insufficient policy enforcement in extensions
  * CVE-2021-21128: Heap buffer overflow in Blink
  * CVE-2021-21129: Insufficient policy enforcement in File System API
  * CVE-2021-21130: Insufficient policy enforcement in File System API
  * CVE-2021-21131: Insufficient policy enforcement in File System API
  * CVE-2021-21132: Inappropriate implementation in DevTools
  * CVE-2021-21135: Inappropriate implementation in Performance API
  * CVE-2021-21137: Inappropriate implementation in DevTools
  * CVE-2021-21140: Uninitialized Use in USB
  * CVE-2021-21141: Insufficient policy enforcement in File System API
  * CVE-2021-21145: Use after free in Fonts
  * CVE-2021-21146: Use after free in Navigation
  * CVE-2021-21147: Inappropriate implementation in Skia
  * CVE-2021-21148: Heap buffer overflow in V8
  * CVE-2021-21149: Stack overflow in Data Transfer
  * CVE-2021-21150: Use after free in Downloads
  * CVE-2021-21152: Heap buffer overflow in Media
  * CVE-2021-21153: Stack overflow in GPU Process
  * CVE-2021-21156: Heap buffer overflow in V8
  * CVE-2021-21157: Use after free in Web Sockets
- Drop obsolete patches:
  * icu-68.patch
  * icu-68-2.patch
- Rebase patches:
  * fix1163766.patch
  * sandbox-statx-futex_time64.patch
  * rtc-dont-use-h264.patch
  * chromium-glibc-2.33.patch
- Add patch to fix crash with certain locales:
  * 0001-Fix-normalization-of-app-locales.patch
- Clean the spec file a bit</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1618315200">- Add back missing part in fix1163766.patch (boo#1184610)</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1618401600">- Update _constraints to avoid OOM</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1618401601">- Add patch to fix build with GCC 11:
  * 0001-Fix-build-with-GCC-11.patch</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1620302400">- Add patch to fix build with ICU 69:
  * 0001-Fix-build-with-system-ICU-69.patch</changelog>
  <changelog author="christophe@krop.fr" date="1624363200">- Update to version 5.15.5:
  * Abort findText also right on explicit navigation request
  * Adapt to new Connections syntax
  * Add devtools eyedropper support
  * Add more tests to tst_loadsignals
  * Add support for Keyboard.getLayoutMap()
  * Add web-ui chrome://net-internals
  * Allow leaving OCSP off
  * Always send phased wheel events beginning with Began
  * Avoid accessing profileAdapter when profile is shutting down
  * Avoid unknownFunc messages in qmltests
  * Blacklist CertificateError::test_error for macOS
  * Blacklist NewViewRequest::test_loadNewViewRequest on macOS
  * Blacklist handleError on macos until we merge the fix
  * Blacklist numberOfStartedAndFinishedSignalsIsSame on b2q CIs
  * Depend on QCoreApplication::startingUp() for checking
    existence of app
  * Do not allow WebBluetooth to continue
  * Do not hide virtual keyboard if the focused node is editable
  * Doc: Add a note about navigation within a page to a fragment
  * Docs: Suggest to use higher DPI for printing
  * Fix FilePickerController's path validation for windows and
    corresponding tests
  * Fix application locales again
  * Fix embedded PDFs when plugins are disabled
  * Fix first party url for cookie filter
  * Fix inconsistent number of load signals and their order
  * Fix normalization of app locales
  * Fix not working certificates on mac &gt; 10.14
  * Fix prl files on ios
  * Fix qmltests::WebEngineViewNavigationHistory auto tests
  * Fix qtpdf static builds on windows
  * Fix static build of qml qtpdf
  * Follow InProcessGpuThread::Init() on thread priority
  * Generate mojo bindings before compiling extension API
    registration
  * Implement PluginServiceFilterQt
  * Load signals test: use focusProxy for link clicking test
  * Make able to override disabled features from command line
  * Notify canGoBack/canGoForward changes based on web actions
  * Only disconnect QWebEnginePage signals that QWebEngineView
    connected
  * Package devtools inspector overlay
  * Remove ResourceTypeSubFrame check after website update
  * Remove obsolete loadSignals test
    secondLoadForError_WhenErrorPageEnabled
  * Remove qquickwebengineprofile test
  * Remove tracking of frame which load error page
  * Remove ui/snapshot overrides for aura
  * Report server directs in navigation type
  * Return to using the default devtools page
  * Set enumaration root directory for File.webkitRelativePath API
  * Set more Display properties
  * Show PDF viewer in a guest view
  * Support devtools close button in QuickNanoBrowser
  * Support zoom-in, zoom-out and cell web cursors on macOS
  * Unblacklist and fix load signals test for file download
  * Update Chromium and adapt PermissionManagerQt
  * Update platform notes
  * View: test signal for deletion of external page set to view
- Drop patches:
  * 0001-Fix-normalization-of-app-locales.patch
  * 0001-Fix-build-with-GCC-11.patch
  * 0001-Fix-build-with-system-ICU-69.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1624536000">- Update the CMake version workaround to get qtbase's real version</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1628078400">- Add patch to fix build with glibc 2.34 (boo#1189095)
  * 0001-Fix-build-with-glibc-2.34.patch</changelog>
  <changelog author="christophe@krop.fr" date="1631188800">- Update to version 5.15.6:
  * Update Chromium:
    + [Backport] CVE-2021-30560: Use after free in Blink XSLT
    + [Backport] CVE-2021-30566: Stack buffer overflow in Printing
    + [Backport] CVE-2021-30585: Use after free in sensor handling
    + Bump V8_PATCH_LEVEL
    + [Backport] Security bug 1228036
    + [Backport] CVE-2021-30604: Use after free in ANGLE
    + [Backport] CVE-2021-30603: Race in WebAudio
    + [Backport] CVE-2021-30602: Use after free in WebRTC
    + [Backport] CVE-2021-30599: Type Confusion in V8
    + [Backport] CVE-2021-30598: Type Confusion in V8
    + [Backport] Security bug 1227933
    + [Backport] Security bug 1205059
    + [Backport] Security bug 1184294
    + [Backport] Security bug 1198385
    + [Backport] CVE-2021-30588: Type Confusion in V8
    + [Backport] CVE-2021-30587: Inappropriate implementation in Compositing on Windows
    + [Backport] CVE-2021-30573: Use after free in GPU
    + [Backport] CVE-2021-30569, security bugs 1198216 and 1204814
    + [Backport] CVE-2021-30568: Heap buffer overflow in WebGL
    + [Backport] CVE-2021-30541: Use after free in V8
    + [Backport] Security bugs 1197786 and 1194330
    + [Backport] Security bug 1194689
    + [Backport] CVE-2021-30563: Type Confusion in V8
    + [Backport] Security bug 1211215
    + [Backport] Security bug 1209558
    + [Backport] CVE-2021-30553: Use after free in Network service
    + [Backport] CVE-2021-30548: Use after free in Loader
    + [Backport] CVE-2021-30547: Out of bounds write in ANGLE
    + [Backport] CVE-2021-30556: Use after free in WebAudio
    + [Backport] CVE-2021-30559: Out of bounds write in ANGLE
    + [Backport] CVE-2021-30533: Insufficient policy enforcement in PopupBlocker
    + [Backport] Security bug 1202534
    + [Backport] CVE-2021-30536: Out of bounds read in V8
    + [Backport] CVE-2021-30522: Use after free in WebAudio
    + [Backport] CVE-2021-30554 Use after free in WebGL
    + [Backport] CVE-2021-30551: Type Confusion in V8
    + [Backport] CVE-2021-30544: Use after free in BFCache
    + [Backport] CVE-2021-30535: Double free in ICU
    + [Backport] CVE-2021-30534: Insufficient policy enforcement in iFrameSandbox
    + [Backport] CVE-2021-30530: Out of bounds memory access in WebAudio
    + [Backport] CVE-2021-30523: Use after free in WebRTC
    + Generate mojo bindings before compiling extension API registration
  * Bump version from 5.15.5 to 5.15.6
  * Always send phased wheel events beginning with Began
- Import patch from the chromium package:
  * 0001-return-ENOSYS-for-clone3.patch
- Add changes from the chromium package to
  0001-Fix-build-with-glibc-2.34.patch</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1632225600">- Add patches from Arch to fix build with HarfBuzz 3.0.0:
  * chromium-harfbuzz-3.0.0.patch
  * skia-harfbuzz-3.0.0.patch
- ... but don't break with &lt; 2.9.0:
  * chromium-older-harfbuzz.patch</changelog>
  <changelog author="christophe@krop.fr" date="1635508800">- Update to version 5.15.7:
  * Update Chromium:
    [Backport] Linux sandbox: update syscalls numbers on 32-bit platforms
    [Backport] sandbox: linux: allow clock_nanosleep &amp; gettime64
    [Backport] Linux sandbox: update syscall numbers for all platforms.
    [Backport] Ease HarfBuzz API change with feature detection
    [Backport] Security bug 1248665
    [Backport] CVE-2021-37975 : Use after free in V8
    [Backport] CVE-2021-37980 : Inappropriate implementation in Sandbox
    [Backport] CVE-2021-37979 : Heap buffer overflow in WebRTC (2/2)
    [Backport] CVE-2021-37979 : Heap buffer overflow in WebRTC (1/2)
    [Backport] CVE-2021-37978 : Heap buffer overflow in Blink
    [Backport] CVE-2021-30616: Use after free in Media.
    [Backport] CVE-2021-37962 : Use after free in Performance Manager (2/2)
    [Backport] CVE-2021-37962 : Use after free in Performance Manager (1/2)
    [Backport] CVE-2021-37973 : Use after free in Portals
    [Backport] CVE-2021-37971 : Incorrect security UI in Web Browser UI.
    [Backport] CVE-2021-37968 : Inappropriate implementation in Background Fetch API
    [Backport] CVE-2021-37967 : Inappropriate implementation in Background Fetch API
    [Backport] Linux sandbox: return ENOSYS for clone3
    [Backport] Linux sandbox: fix fstatat() crash
    [Backport] Reland "Reland "Linux sandbox syscall broker: use struct kernel_stat""
    [Backport] Security bug 1238178 (2/2)
    [Backport] Security bug 1238178 (1/2)
    [Backport] CVE-2021-30633: Use after free in Indexed DB API (2/2)
    [Backport] CVE-2021-30633: Use after free in Indexed DB API (1/2)
    [Backport] CVE-2021-30630: Inappropriate implementation in Blink
    [Backport] CVE-2021-30629: Use after free in Permissions
    [Backport] CVE-2021-30628: Stack buffer overflow in ANGLE
    [Backport] CVE-2021-30627: Type Confusion in Blink layout
    [Backport] CVE-2021-30626: Out of bounds memory access in ANGLE
    [Backport] CVE-2021-30625: Use after free in Selection API
    [Backport] Security bug 1206289
    [Backport] CVE-2021-30613: Use after free in Base internals
    [Backport] Security bug 1227228
    [Backport] CVE-2021-30618: Inappropriate implementation in DevTools
  * Update patch level
  * Blacklist certificate test until certicates have been renewed
  * Block CORS from local URLs when remote access is not enabled
  * Do not wait on weak_pointer for termination errors
  * Support MSVC_VER 16.8
  * Fix wrong save file filter for Markdown Editor example
  * Add Chromium version source documentation
  * Bump version from 5.15.6 to 5.15.7
  * Fix crash when clicking on a link in PDF
- Drop openSUSE patches:
  * fix1163766.patch. Should be addressed with:
    https://github.com/qt/qtwebengine-chromium/commit/652f834de
    https://github.com/qt/qtwebengine-chromium/commit/faae106ed
    https://github.com/qt/qtwebengine-chromium/commit/6b7b3f1bf
  * chromium-glibc-2.33.patch. Should be addressed with the
    [Backport] Linux sandbox: fix fstatat() crash and
    Reland "Reland "Linux sandbox syscall broker: use struct kernel_stat""
    changes.
  * chromium-older-harfbuzz.patch
- Drop upstream changes:
  * 0001-return-ENOSYS-for-clone3.patch
  * chromium-harfbuzz-3.0.0.patch
  * skia-harfbuzz-3.0.0.patch
- Rebase patches:
  * sandbox-statx-futex_time64.patch</changelog>
  <changelog author="christophe@krop.fr" date="1641297600">- Update to version 5.15.8:
  * Update Chromium:
    [Backport] CVE-2021-3517: libxml2: Heap-based buffer overflow
    in xmlEncodeEntitiesInternal() in entities.c
    [Backport] CVE-2021-3541 libxml2: Exponential entity expansion
    attack bypasses all existing protection mechanisms
    [Backport] CVE-2021-37984 : Heap buffer overflow in PDFium
    [Backport] CVE-2021-37987 : Use after free in Network APIs
    [Backport] CVE-2021-37989 : Inappropriate implementation in Blink
    [Backport] CVE-2021-37992 : Out of bounds read in WebAudio
    [Backport] CVE-2021-37993 : Use after free in PDF Accessibility
    [Backport] CVE-2021-37996 : Insufficient validation of untrusted
    input in Downloads
    [Backport] CVE-2021-38001 : Type Confusion in V8
    [Backport] CVE-2021-38003 : Inappropriate implementation in V8
    [Backport] CVE-2021-38005: Use after free in loader (1/3)
    [Backport] CVE-2021-38005: Use after free in loader (2/3)
    [Backport] CVE-2021-38005: Use after free in loader (3/3)
    [Backport] CVE-2021-38007: Type Confusion in V8
    [Backport] CVE-2021-38009: Inappropriate implementation in cache
    [Backport] CVE-2021-38010: Inappropriate implementation in serviceworkers
    [Backport] CVE-2021-38012: Type Confusion in V8
    [Backport] CVE-2021-38015: Inappropriate implementation in input
    [Backport] CVE-2021-38017: Insufficient policy enforcement in iframe
    sandbox
    [Backport] CVE-2021-38018: Inappropriate implementation in navigation
    [Backport] CVE-2021-38019: Insufficient policy enforcement in CORS
    [Backport] CVE-2021-38021: Inappropriate implementation in referrer
    [Backport] CVE-2021-38022: Inappropriate implementation in WebAuthentication
    [Backport] CVE-2021-4057: Use after free in file API
    [Backport] CVE-2021-4058: Heap buffer overflow in ANGLE (1/2)
    [Backport] CVE-2021-4058: Heap buffer overflow in ANGLE (2/2)
    [Backport] CVE-2021-4059: Insufficient data validation in loader
    [Backport] CVE-2021-4062: Heap buffer overflow in BFCache
    [Backport] CVE-2021-4078: Type confusion in V8
    [Backport] CVE-2021-4079: Out of bounds write in WebRTC
    [Backport] CVE-2021-4098: Insufficient data validation in Mojo
    [Backport] CVE-2021-4099: Use after free in Swiftshader
    [Backport] CVE-2021-4101: Heap buffer overflow in Swiftshader.
    [Backport] CVE-2021-4102: Use after free in V8
    [Backport] Dependency for CVE-2021-37989
    [Backport] Dependency for CVE-2021-38009
    [Backport] Security bug 1245870
    [Backport] Security bug 1252858
    [Backport] Security bug 1259899
    Bump V8_PATCH_LEVEL
    Compile with GCC 11 -std=c++20
    Fix stack overflow on gpu channel recreate with an error
    Use wglSetPixelFormat directly only if in software mode
    [Backport] Handle long SIGSTKSZ in glibc &gt; 2.33
    [Backport] abseil-cpp: Fixes build with latest glibc
  * Handle qtpdf compilation with static runtime
  * Add bitcode support for qtpdf on ios
  * Do not access accessibility from qt post routines
  * Blacklist javascriptClipboard test on ubuntu 20.04
  * Re-enable network-service-in-process
  * Bump version from 5.15.7 to 5.15.8
  * Update patch level
  * Fix pinch gesture
  * Fix leak of properties after XkbRF_GetNamesProp
  * Fix leak on getDefaultScreeenId
- Drop patch:
  * 0001-Fix-build-with-glibc-2.34.patch</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1648209600">- Add patch to fix build with GCC 12:
  * 0001-skia-Some-includes-to-fix-build-with-GCC-12.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1649073600">- Add security fixes:
  * CVE-2022-0971-qtwebengine-5.15.patch (CVE-2022-0971, boo#1197163)
  * CVE-2022-1096-qtwebengine-5.15.patch (CVE-2022-1096, boo#1197552)</changelog>
  <changelog author="christophe@krop.fr" date="1649246400">- Update to version 5.15.9:
  * QPdfView: scale page rendering according to devicePixelRatio
  * Update documented Chromium version
  * Use IsSameDocument() rather than IsLoadingToDifferentDocument()
  * Update module-split for installer
  * Fix printing PDF files
  * Do not override signal handlers
  * Avoid using xkbcommon in non-X11 builds
  * Update documentation
  * Update Chromium:
  * Bump V8_PATCH_LEVEL
  * Do not overwrite signal handlers in the browser process.
  * Replace base::ranges::set_union with std::set_union to fix
    MSVC2017 build
  * [Backport] CVE-2022-0100: Heap buffer overflow in Media
    streams API
  * [Backport] CVE-2022-0102: Type Confusion in V8
  * [Backport] CVE-2022-0103: Use after free in SwiftShader
  * [Backport] CVE-2022-0104: Heap buffer overflow in ANGLE
  * [Backport] CVE-2022-0108: Inappropriate implementation
    in Navigation
  * [Backport] CVE-2022-0109: Inappropriate implementation
    in Autofill
  * [Backport] CVE-2022-0111 and CVE-2022-0117
  * [Backport] CVE-2022-0113: Inappropriate implementatio
    n in Blink
  * [Backport] CVE-2022-0116: Inappropriate implementation
    in Compositing
  * [Backport] CVE-2022-0289: Use after free in Safe browsing
  * [Backport] CVE-2022-0291: Inappropriate implementation
    in Storage
  * [Backport] CVE-2022-0293: Use after free in Web packaging
  * [Backport] CVE-2022-0298: Use after free in Scheduling
  * [Backport] CVE-2022-0305: Inappropriate implementation in
    Service Worker API
  * [Backport] CVE-2022-0306: Heap buffer overflow in PDFium
  * [Backport] CVE-2022-0310 and CVE-0311: Heap buffer overflow
    in Task Manager
  * [Backport] CVE-2022-0456: Use after free in Web Search
  * [Backport] CVE-2022-0459: Use after free in Screen Capture
  * [Backport] CVE-2022-0460: Use after free in Window Dialog
  * [Backport] CVE-2022-0461: Policy bypass in COOP
  * [Backport] CVE-2022-0606: Use after free in ANGLE
  * [Backport] CVE-2022-0607: Use after free in GPU
  * [Backport] CVE-2022-0608: Integer overflow in Mojo
  * [Backport] CVE-2022-0609: Use after free in Animation
  * [Backport] CVE-2022-0610: Inappropriate implementation
    in Gamepad API
  * [Backport] CVE-2022-0971 (boo#1197163)
  * [Backport] CVE-2022-1096 (boo#1197552)
  * [Backport] CVE-2022-23852
  * [Backport] Copy 'name_' member during StyleRuleProperty::Copy
  * [Backport] Security bug 1256885
  * [Backport] Security bug 1258603
  * [Backport] Security bug 1259557
  * [Backport] Security bug 1261415
  * [Backport] Security bug 1265570
  * [Backport] Security bug 1268448
  * [Backport] Security bug 1270014
  * [Backport] Security bug 1274113
  * [Backport] Security bug 1276331
  * [Backport] Security bug 1280743
  * [Backport] Security bug 1289394
  * [Backport] Security bug 1292537
  * [Backport] sandbox: build if glibc 2.34+ dynamic stack size
    is enabled
- Drop patches, now upstream:
  * CVE-2022-0971-qtwebengine-5.15.patch
  * CVE-2022-1096-qtwebengine-5.15.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1651060800">- Add libqt5-qtwebengine-rpmlintrc to silence the
  'shlib-policy-name-error' rpmlint error</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1651492800">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1654689600">- Update to version 5.15.10:
  * Fix top level build with no widget
  * Fix read-after-free on EGL extensions
  * Update Chromium
  * Add workaround for unstable gn on macOS in ci
  * Pass archiver to gn build
  * Fix navigation to non-local URLs
  * Add support for universal builds for qtwebengine and qtpdf
  * Enable Apple Silicon support
  * Fix cross compilation x86_64-&gt;arm64 on mac
  * Bump version to 5.15.10
  * CustomDialogs: Make custom input fields readable in dark mode
  * CookieBrowser: Make alternating rows readable in dark mode
  * Update Chromium:
  * Bump V8_PATCH_LEVEL
  * Fix clang set-but-unused-variable warning
  * Fix mac toolchain python linker script call
  * Fix missing dependency for gpu sources
  * Fix python calls
  * Fix undefined symbol for universal link
  * Quick fix for regression in service workers by reverting
    backports
  * [Backport] CVE-2022-0797: Out of bounds memory access
    in Mojo
  * [Backport] CVE-2022-1125
  * [Backport] CVE-2022-1138: Inappropriate implementation
    in Web Cursor.
  * [Backport] CVE-2022-1305: Use after free in storage
  * [Backport] CVE-2022-1310: Use after free in regular
    expressions
  * [Backport] CVE-2022-1314: Type Confusion in V8
  * [Backport] CVE-2022-1493: Use after free in Dev Tools
  * [Backport] On arm64 hosts, set host_cpu to 'arm64', not 'arm'
  * [Backport] Security Bug 1296876
  * [Backport] Security bug 1269999
  * [Backport] Security bug 1280852
  * [Backport] Security bug 1292905
  * [Backport] Security bug 1304659
  * [Backport] Security bug 1306507</changelog>
</package>
<package pkgid="ff3ab19e4f3738b0a9479d5925ad8ec35a9a1efa0e8d2cab87b3174ec14002f3" name="libqt5-qtwebengine-examples" arch="aarch64">
  <version epoch="0" ver="5.15.10" rel="bp154.2.3.2"/>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1613563200">- Add patch to fix sandbox with glibc 2.33 on 32bit:
  * sandbox-statx-futex_time64.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1615377600">- Can't use system_vpx on Leap 15.3</changelog>
  <changelog author="christophe@krop.fr" date="1616587200">- Update to version 5.15.3:
  * Fix spelling and coding style
  * Fix new view request handling (QTBUG-87378)
  * Fix getDefaultScreenId on X11
  * Fix flaky tst_QWebEngineView::textSelectionOutOfInputField test
  * Move touch input tests to separate testcase
  * Add touch input tests for scrolling and pinch zooming
  * Fix rare duplicate ids forming in touch point id's mapping
  * Use the module's version number for QtWebEngineProcess
  * Touch handling: provide id mapping without modifying TouchPoint instance
    (QTBUG-88001)
  * Touch handling: fix mapped ids cleanup for TouchCancel event
  * et custom headers from QWebEngineUrlRequestInfo before triggering redirect
    (QTBUG-88861)
  * Forward modifier flags for lock keys (QTBUG-89001)
  * Fix handling of more than one finger for touch event (QTBUG-86389)
  * Stabilize load signals emitting (QTBUG-65223, QTBUG-87089)
  * Fix building against 5.12 on most CIs
  * Update minimum HarfBuzz version to 2.4.0 (QTBUG-88976)
  * Fix building against Qt 5.14
  * Migrate user script IPC to mojo
  * Fix crashes in user resource controller when single process
  * Minor. Fix namespace for user resource controller
  * Minor. RenderThreadObserverQt is really a RenderConfiguration
  * Remove RenderViewObserverHelper from UserResourceController
  * Cache mojo interface bindings to UserResourceControllerRenderFrame
  * Cache mojo interface bindings for WebChannelIPCTransport
  * Migrate render_view_observer_qt to mojo
  * Fix crash on linkedin.com (QTBUG-89740)
  * Suppress error pages also for http errors if they are disabled
  * Fix leak in QQuickWebEngineViewPrivate::contextMenuRequested
  * Register PerformanceNode early enough
  * Quiet log on webrtc usage
  * Remove configure option that doesn't work
  * Remove Java build dependency
  * Fix blank popups in qml (QTBUG-86034)
  * Fix position of popup on qml (QTBUG-86034, QTBUG-89358)
  * Enable hangout services extension (QTBUG-85731)
  * Allow to fallback to default locale for non existent data packs (QTBUG-90490)
  * Support devtools close button
  * Do not extract download file names from certain url schemes (QTBUG-90355)
  * Leave room for the null-termination byte when checking remote drive path
    (QTBUG-90347)
  * Do not set open files limit for linking if not necessary
  * Remove even more remains of non network service code
  * Add back prefers-color-scheme support (QTBUG-89753)
  * Start supporting chrome.resourcesPrivate API (QTBUG-90035)
  * Enable chrome://user-actions WebUI
  * Remove remains of chrome://flash
  * Fix loadFinished signal if page has content but server sends HTTP error
    (QTBUG-90517)
  * Fix devtools page resource loading as raw data instead of html string
  * Remove frame metadata observer (RenderWidgetHostViewQt) on destroy
  * Resolve installed interceptors right before interception point (QTBUG-86286)
  * Update searches faster
  * Remove more leftovers of the old compositor
  * Enable webrtc logging and the corresponding WebUI
  * Support mips64el platform CPU(loongson 3A4000)
  * Add tracing UI resources
  * Fix crash on meet.google.com
  * Fix mad popup qquickwindows on wayland
  * Fix crashes on BrowserContext destruction
  * Fix crash on exit in quicknanobrowser when popup
  * Remove QtPdf dependency on nss at build-time
  * Avoid accessing profileAdapter when profile is shutting down (QTBUG-91187)
  * Do not flush messages form profile destructor
  * Ignore QQuickWebEngineNewViewRequest if it is unhandled
  * Fix ScopedGLContextChecker with QTWEBENGINE_DISABLE_GPU_THREAD=1
  * Don't send duplicate load progress values
  * Fix neon support in libpng
  * Do not call deprecated profile interceptor on ui thread (QTBUG-86267)
  * Add certificate error message for ERR_SSL_OBSOLETE_VERSION
  * Fix assert in WebContentsAdapter::devToolsFrontendDestroyed
  * Avoid to reject a certificate error twice in Quick
  * Fix PDF viewer plugin
  * FIXUP: Fix swap condition in DisplayGLOutputSurface::updatePaintNode
    (QTBUG-86599)
  * Fix favicon engine under device pixel scaling
  * Do not pass a native keycode matching the menu key when it is remapped
    (QTBUG-86672)
  * Optimize WebEngineSettings::testAttribute
  * Warn about QtWebengineProcess launching from network share (QTBUG-84632)
  * Handle non-ascii names for pulseaudio (QTBUG-85363)
  * Do not set audio device for desktop capture if audio loopback is unsupported
  * Fix new view request handling (QTBUG-87378)
  * Fix getDefaultScreenId on X11
  * Touch handling: provide id mapping without modifying TouchPoint instance
    (QTBUG-88001)
  * Set custom headers from QWebEngineUrlRequestInfo before triggering redirect
    (QTBUG-88861)
  * Stabilize load signals emitting (QTBUG-65223)
- CVE fixes backported in chromium updates:
  * CVE-2020-16044: Use after free in WebRTC
  * CVE-2021-21118: Heap buffer overflow in Blink
  * CVE-2021-21119: Use after free in Media
  * CVE-2021-21120: Use after free in WebSQL
  * CVE-2021-21121: Use after free in Omnibox
  * CVE-2021-21122: Use after free in Blink
  * CVE-2021-21123: Insufficient data validation in File System API
  * CVE-2021-21125: Insufficient policy enforcement in File System API
  * CVE-2021-21126: Insufficient policy enforcement in extensions
  * CVE-2021-21127: Insufficient policy enforcement in extensions
  * CVE-2021-21128: Heap buffer overflow in Blink
  * CVE-2021-21129: Insufficient policy enforcement in File System API
  * CVE-2021-21130: Insufficient policy enforcement in File System API
  * CVE-2021-21131: Insufficient policy enforcement in File System API
  * CVE-2021-21132: Inappropriate implementation in DevTools
  * CVE-2021-21135: Inappropriate implementation in Performance API
  * CVE-2021-21137: Inappropriate implementation in DevTools
  * CVE-2021-21140: Uninitialized Use in USB
  * CVE-2021-21141: Insufficient policy enforcement in File System API
  * CVE-2021-21145: Use after free in Fonts
  * CVE-2021-21146: Use after free in Navigation
  * CVE-2021-21147: Inappropriate implementation in Skia
  * CVE-2021-21148: Heap buffer overflow in V8
  * CVE-2021-21149: Stack overflow in Data Transfer
  * CVE-2021-21150: Use after free in Downloads
  * CVE-2021-21152: Heap buffer overflow in Media
  * CVE-2021-21153: Stack overflow in GPU Process
  * CVE-2021-21156: Heap buffer overflow in V8
  * CVE-2021-21157: Use after free in Web Sockets
- Drop obsolete patches:
  * icu-68.patch
  * icu-68-2.patch
- Rebase patches:
  * fix1163766.patch
  * sandbox-statx-futex_time64.patch
  * rtc-dont-use-h264.patch
  * chromium-glibc-2.33.patch
- Add patch to fix crash with certain locales:
  * 0001-Fix-normalization-of-app-locales.patch
- Clean the spec file a bit</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1618315200">- Add back missing part in fix1163766.patch (boo#1184610)</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1618401600">- Update _constraints to avoid OOM</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1618401601">- Add patch to fix build with GCC 11:
  * 0001-Fix-build-with-GCC-11.patch</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1620302400">- Add patch to fix build with ICU 69:
  * 0001-Fix-build-with-system-ICU-69.patch</changelog>
  <changelog author="christophe@krop.fr" date="1624363200">- Update to version 5.15.5:
  * Abort findText also right on explicit navigation request
  * Adapt to new Connections syntax
  * Add devtools eyedropper support
  * Add more tests to tst_loadsignals
  * Add support for Keyboard.getLayoutMap()
  * Add web-ui chrome://net-internals
  * Allow leaving OCSP off
  * Always send phased wheel events beginning with Began
  * Avoid accessing profileAdapter when profile is shutting down
  * Avoid unknownFunc messages in qmltests
  * Blacklist CertificateError::test_error for macOS
  * Blacklist NewViewRequest::test_loadNewViewRequest on macOS
  * Blacklist handleError on macos until we merge the fix
  * Blacklist numberOfStartedAndFinishedSignalsIsSame on b2q CIs
  * Depend on QCoreApplication::startingUp() for checking
    existence of app
  * Do not allow WebBluetooth to continue
  * Do not hide virtual keyboard if the focused node is editable
  * Doc: Add a note about navigation within a page to a fragment
  * Docs: Suggest to use higher DPI for printing
  * Fix FilePickerController's path validation for windows and
    corresponding tests
  * Fix application locales again
  * Fix embedded PDFs when plugins are disabled
  * Fix first party url for cookie filter
  * Fix inconsistent number of load signals and their order
  * Fix normalization of app locales
  * Fix not working certificates on mac &gt; 10.14
  * Fix prl files on ios
  * Fix qmltests::WebEngineViewNavigationHistory auto tests
  * Fix qtpdf static builds on windows
  * Fix static build of qml qtpdf
  * Follow InProcessGpuThread::Init() on thread priority
  * Generate mojo bindings before compiling extension API
    registration
  * Implement PluginServiceFilterQt
  * Load signals test: use focusProxy for link clicking test
  * Make able to override disabled features from command line
  * Notify canGoBack/canGoForward changes based on web actions
  * Only disconnect QWebEnginePage signals that QWebEngineView
    connected
  * Package devtools inspector overlay
  * Remove ResourceTypeSubFrame check after website update
  * Remove obsolete loadSignals test
    secondLoadForError_WhenErrorPageEnabled
  * Remove qquickwebengineprofile test
  * Remove tracking of frame which load error page
  * Remove ui/snapshot overrides for aura
  * Report server directs in navigation type
  * Return to using the default devtools page
  * Set enumaration root directory for File.webkitRelativePath API
  * Set more Display properties
  * Show PDF viewer in a guest view
  * Support devtools close button in QuickNanoBrowser
  * Support zoom-in, zoom-out and cell web cursors on macOS
  * Unblacklist and fix load signals test for file download
  * Update Chromium and adapt PermissionManagerQt
  * Update platform notes
  * View: test signal for deletion of external page set to view
- Drop patches:
  * 0001-Fix-normalization-of-app-locales.patch
  * 0001-Fix-build-with-GCC-11.patch
  * 0001-Fix-build-with-system-ICU-69.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1624536000">- Update the CMake version workaround to get qtbase's real version</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1628078400">- Add patch to fix build with glibc 2.34 (boo#1189095)
  * 0001-Fix-build-with-glibc-2.34.patch</changelog>
  <changelog author="christophe@krop.fr" date="1631188800">- Update to version 5.15.6:
  * Update Chromium:
    + [Backport] CVE-2021-30560: Use after free in Blink XSLT
    + [Backport] CVE-2021-30566: Stack buffer overflow in Printing
    + [Backport] CVE-2021-30585: Use after free in sensor handling
    + Bump V8_PATCH_LEVEL
    + [Backport] Security bug 1228036
    + [Backport] CVE-2021-30604: Use after free in ANGLE
    + [Backport] CVE-2021-30603: Race in WebAudio
    + [Backport] CVE-2021-30602: Use after free in WebRTC
    + [Backport] CVE-2021-30599: Type Confusion in V8
    + [Backport] CVE-2021-30598: Type Confusion in V8
    + [Backport] Security bug 1227933
    + [Backport] Security bug 1205059
    + [Backport] Security bug 1184294
    + [Backport] Security bug 1198385
    + [Backport] CVE-2021-30588: Type Confusion in V8
    + [Backport] CVE-2021-30587: Inappropriate implementation in Compositing on Windows
    + [Backport] CVE-2021-30573: Use after free in GPU
    + [Backport] CVE-2021-30569, security bugs 1198216 and 1204814
    + [Backport] CVE-2021-30568: Heap buffer overflow in WebGL
    + [Backport] CVE-2021-30541: Use after free in V8
    + [Backport] Security bugs 1197786 and 1194330
    + [Backport] Security bug 1194689
    + [Backport] CVE-2021-30563: Type Confusion in V8
    + [Backport] Security bug 1211215
    + [Backport] Security bug 1209558
    + [Backport] CVE-2021-30553: Use after free in Network service
    + [Backport] CVE-2021-30548: Use after free in Loader
    + [Backport] CVE-2021-30547: Out of bounds write in ANGLE
    + [Backport] CVE-2021-30556: Use after free in WebAudio
    + [Backport] CVE-2021-30559: Out of bounds write in ANGLE
    + [Backport] CVE-2021-30533: Insufficient policy enforcement in PopupBlocker
    + [Backport] Security bug 1202534
    + [Backport] CVE-2021-30536: Out of bounds read in V8
    + [Backport] CVE-2021-30522: Use after free in WebAudio
    + [Backport] CVE-2021-30554 Use after free in WebGL
    + [Backport] CVE-2021-30551: Type Confusion in V8
    + [Backport] CVE-2021-30544: Use after free in BFCache
    + [Backport] CVE-2021-30535: Double free in ICU
    + [Backport] CVE-2021-30534: Insufficient policy enforcement in iFrameSandbox
    + [Backport] CVE-2021-30530: Out of bounds memory access in WebAudio
    + [Backport] CVE-2021-30523: Use after free in WebRTC
    + Generate mojo bindings before compiling extension API registration
  * Bump version from 5.15.5 to 5.15.6
  * Always send phased wheel events beginning with Began
- Import patch from the chromium package:
  * 0001-return-ENOSYS-for-clone3.patch
- Add changes from the chromium package to
  0001-Fix-build-with-glibc-2.34.patch</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1632225600">- Add patches from Arch to fix build with HarfBuzz 3.0.0:
  * chromium-harfbuzz-3.0.0.patch
  * skia-harfbuzz-3.0.0.patch
- ... but don't break with &lt; 2.9.0:
  * chromium-older-harfbuzz.patch</changelog>
  <changelog author="christophe@krop.fr" date="1635508800">- Update to version 5.15.7:
  * Update Chromium:
    [Backport] Linux sandbox: update syscalls numbers on 32-bit platforms
    [Backport] sandbox: linux: allow clock_nanosleep &amp; gettime64
    [Backport] Linux sandbox: update syscall numbers for all platforms.
    [Backport] Ease HarfBuzz API change with feature detection
    [Backport] Security bug 1248665
    [Backport] CVE-2021-37975 : Use after free in V8
    [Backport] CVE-2021-37980 : Inappropriate implementation in Sandbox
    [Backport] CVE-2021-37979 : Heap buffer overflow in WebRTC (2/2)
    [Backport] CVE-2021-37979 : Heap buffer overflow in WebRTC (1/2)
    [Backport] CVE-2021-37978 : Heap buffer overflow in Blink
    [Backport] CVE-2021-30616: Use after free in Media.
    [Backport] CVE-2021-37962 : Use after free in Performance Manager (2/2)
    [Backport] CVE-2021-37962 : Use after free in Performance Manager (1/2)
    [Backport] CVE-2021-37973 : Use after free in Portals
    [Backport] CVE-2021-37971 : Incorrect security UI in Web Browser UI.
    [Backport] CVE-2021-37968 : Inappropriate implementation in Background Fetch API
    [Backport] CVE-2021-37967 : Inappropriate implementation in Background Fetch API
    [Backport] Linux sandbox: return ENOSYS for clone3
    [Backport] Linux sandbox: fix fstatat() crash
    [Backport] Reland "Reland "Linux sandbox syscall broker: use struct kernel_stat""
    [Backport] Security bug 1238178 (2/2)
    [Backport] Security bug 1238178 (1/2)
    [Backport] CVE-2021-30633: Use after free in Indexed DB API (2/2)
    [Backport] CVE-2021-30633: Use after free in Indexed DB API (1/2)
    [Backport] CVE-2021-30630: Inappropriate implementation in Blink
    [Backport] CVE-2021-30629: Use after free in Permissions
    [Backport] CVE-2021-30628: Stack buffer overflow in ANGLE
    [Backport] CVE-2021-30627: Type Confusion in Blink layout
    [Backport] CVE-2021-30626: Out of bounds memory access in ANGLE
    [Backport] CVE-2021-30625: Use after free in Selection API
    [Backport] Security bug 1206289
    [Backport] CVE-2021-30613: Use after free in Base internals
    [Backport] Security bug 1227228
    [Backport] CVE-2021-30618: Inappropriate implementation in DevTools
  * Update patch level
  * Blacklist certificate test until certicates have been renewed
  * Block CORS from local URLs when remote access is not enabled
  * Do not wait on weak_pointer for termination errors
  * Support MSVC_VER 16.8
  * Fix wrong save file filter for Markdown Editor example
  * Add Chromium version source documentation
  * Bump version from 5.15.6 to 5.15.7
  * Fix crash when clicking on a link in PDF
- Drop openSUSE patches:
  * fix1163766.patch. Should be addressed with:
    https://github.com/qt/qtwebengine-chromium/commit/652f834de
    https://github.com/qt/qtwebengine-chromium/commit/faae106ed
    https://github.com/qt/qtwebengine-chromium/commit/6b7b3f1bf
  * chromium-glibc-2.33.patch. Should be addressed with the
    [Backport] Linux sandbox: fix fstatat() crash and
    Reland "Reland "Linux sandbox syscall broker: use struct kernel_stat""
    changes.
  * chromium-older-harfbuzz.patch
- Drop upstream changes:
  * 0001-return-ENOSYS-for-clone3.patch
  * chromium-harfbuzz-3.0.0.patch
  * skia-harfbuzz-3.0.0.patch
- Rebase patches:
  * sandbox-statx-futex_time64.patch</changelog>
  <changelog author="christophe@krop.fr" date="1641297600">- Update to version 5.15.8:
  * Update Chromium:
    [Backport] CVE-2021-3517: libxml2: Heap-based buffer overflow
    in xmlEncodeEntitiesInternal() in entities.c
    [Backport] CVE-2021-3541 libxml2: Exponential entity expansion
    attack bypasses all existing protection mechanisms
    [Backport] CVE-2021-37984 : Heap buffer overflow in PDFium
    [Backport] CVE-2021-37987 : Use after free in Network APIs
    [Backport] CVE-2021-37989 : Inappropriate implementation in Blink
    [Backport] CVE-2021-37992 : Out of bounds read in WebAudio
    [Backport] CVE-2021-37993 : Use after free in PDF Accessibility
    [Backport] CVE-2021-37996 : Insufficient validation of untrusted
    input in Downloads
    [Backport] CVE-2021-38001 : Type Confusion in V8
    [Backport] CVE-2021-38003 : Inappropriate implementation in V8
    [Backport] CVE-2021-38005: Use after free in loader (1/3)
    [Backport] CVE-2021-38005: Use after free in loader (2/3)
    [Backport] CVE-2021-38005: Use after free in loader (3/3)
    [Backport] CVE-2021-38007: Type Confusion in V8
    [Backport] CVE-2021-38009: Inappropriate implementation in cache
    [Backport] CVE-2021-38010: Inappropriate implementation in serviceworkers
    [Backport] CVE-2021-38012: Type Confusion in V8
    [Backport] CVE-2021-38015: Inappropriate implementation in input
    [Backport] CVE-2021-38017: Insufficient policy enforcement in iframe
    sandbox
    [Backport] CVE-2021-38018: Inappropriate implementation in navigation
    [Backport] CVE-2021-38019: Insufficient policy enforcement in CORS
    [Backport] CVE-2021-38021: Inappropriate implementation in referrer
    [Backport] CVE-2021-38022: Inappropriate implementation in WebAuthentication
    [Backport] CVE-2021-4057: Use after free in file API
    [Backport] CVE-2021-4058: Heap buffer overflow in ANGLE (1/2)
    [Backport] CVE-2021-4058: Heap buffer overflow in ANGLE (2/2)
    [Backport] CVE-2021-4059: Insufficient data validation in loader
    [Backport] CVE-2021-4062: Heap buffer overflow in BFCache
    [Backport] CVE-2021-4078: Type confusion in V8
    [Backport] CVE-2021-4079: Out of bounds write in WebRTC
    [Backport] CVE-2021-4098: Insufficient data validation in Mojo
    [Backport] CVE-2021-4099: Use after free in Swiftshader
    [Backport] CVE-2021-4101: Heap buffer overflow in Swiftshader.
    [Backport] CVE-2021-4102: Use after free in V8
    [Backport] Dependency for CVE-2021-37989
    [Backport] Dependency for CVE-2021-38009
    [Backport] Security bug 1245870
    [Backport] Security bug 1252858
    [Backport] Security bug 1259899
    Bump V8_PATCH_LEVEL
    Compile with GCC 11 -std=c++20
    Fix stack overflow on gpu channel recreate with an error
    Use wglSetPixelFormat directly only if in software mode
    [Backport] Handle long SIGSTKSZ in glibc &gt; 2.33
    [Backport] abseil-cpp: Fixes build with latest glibc
  * Handle qtpdf compilation with static runtime
  * Add bitcode support for qtpdf on ios
  * Do not access accessibility from qt post routines
  * Blacklist javascriptClipboard test on ubuntu 20.04
  * Re-enable network-service-in-process
  * Bump version from 5.15.7 to 5.15.8
  * Update patch level
  * Fix pinch gesture
  * Fix leak of properties after XkbRF_GetNamesProp
  * Fix leak on getDefaultScreeenId
- Drop patch:
  * 0001-Fix-build-with-glibc-2.34.patch</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1648209600">- Add patch to fix build with GCC 12:
  * 0001-skia-Some-includes-to-fix-build-with-GCC-12.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1649073600">- Add security fixes:
  * CVE-2022-0971-qtwebengine-5.15.patch (CVE-2022-0971, boo#1197163)
  * CVE-2022-1096-qtwebengine-5.15.patch (CVE-2022-1096, boo#1197552)</changelog>
  <changelog author="christophe@krop.fr" date="1649246400">- Update to version 5.15.9:
  * QPdfView: scale page rendering according to devicePixelRatio
  * Update documented Chromium version
  * Use IsSameDocument() rather than IsLoadingToDifferentDocument()
  * Update module-split for installer
  * Fix printing PDF files
  * Do not override signal handlers
  * Avoid using xkbcommon in non-X11 builds
  * Update documentation
  * Update Chromium:
  * Bump V8_PATCH_LEVEL
  * Do not overwrite signal handlers in the browser process.
  * Replace base::ranges::set_union with std::set_union to fix
    MSVC2017 build
  * [Backport] CVE-2022-0100: Heap buffer overflow in Media
    streams API
  * [Backport] CVE-2022-0102: Type Confusion in V8
  * [Backport] CVE-2022-0103: Use after free in SwiftShader
  * [Backport] CVE-2022-0104: Heap buffer overflow in ANGLE
  * [Backport] CVE-2022-0108: Inappropriate implementation
    in Navigation
  * [Backport] CVE-2022-0109: Inappropriate implementation
    in Autofill
  * [Backport] CVE-2022-0111 and CVE-2022-0117
  * [Backport] CVE-2022-0113: Inappropriate implementatio
    n in Blink
  * [Backport] CVE-2022-0116: Inappropriate implementation
    in Compositing
  * [Backport] CVE-2022-0289: Use after free in Safe browsing
  * [Backport] CVE-2022-0291: Inappropriate implementation
    in Storage
  * [Backport] CVE-2022-0293: Use after free in Web packaging
  * [Backport] CVE-2022-0298: Use after free in Scheduling
  * [Backport] CVE-2022-0305: Inappropriate implementation in
    Service Worker API
  * [Backport] CVE-2022-0306: Heap buffer overflow in PDFium
  * [Backport] CVE-2022-0310 and CVE-0311: Heap buffer overflow
    in Task Manager
  * [Backport] CVE-2022-0456: Use after free in Web Search
  * [Backport] CVE-2022-0459: Use after free in Screen Capture
  * [Backport] CVE-2022-0460: Use after free in Window Dialog
  * [Backport] CVE-2022-0461: Policy bypass in COOP
  * [Backport] CVE-2022-0606: Use after free in ANGLE
  * [Backport] CVE-2022-0607: Use after free in GPU
  * [Backport] CVE-2022-0608: Integer overflow in Mojo
  * [Backport] CVE-2022-0609: Use after free in Animation
  * [Backport] CVE-2022-0610: Inappropriate implementation
    in Gamepad API
  * [Backport] CVE-2022-0971 (boo#1197163)
  * [Backport] CVE-2022-1096 (boo#1197552)
  * [Backport] CVE-2022-23852
  * [Backport] Copy 'name_' member during StyleRuleProperty::Copy
  * [Backport] Security bug 1256885
  * [Backport] Security bug 1258603
  * [Backport] Security bug 1259557
  * [Backport] Security bug 1261415
  * [Backport] Security bug 1265570
  * [Backport] Security bug 1268448
  * [Backport] Security bug 1270014
  * [Backport] Security bug 1274113
  * [Backport] Security bug 1276331
  * [Backport] Security bug 1280743
  * [Backport] Security bug 1289394
  * [Backport] Security bug 1292537
  * [Backport] sandbox: build if glibc 2.34+ dynamic stack size
    is enabled
- Drop patches, now upstream:
  * CVE-2022-0971-qtwebengine-5.15.patch
  * CVE-2022-1096-qtwebengine-5.15.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1651060800">- Add libqt5-qtwebengine-rpmlintrc to silence the
  'shlib-policy-name-error' rpmlint error</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1651492800">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1654689600">- Update to version 5.15.10:
  * Fix top level build with no widget
  * Fix read-after-free on EGL extensions
  * Update Chromium
  * Add workaround for unstable gn on macOS in ci
  * Pass archiver to gn build
  * Fix navigation to non-local URLs
  * Add support for universal builds for qtwebengine and qtpdf
  * Enable Apple Silicon support
  * Fix cross compilation x86_64-&gt;arm64 on mac
  * Bump version to 5.15.10
  * CustomDialogs: Make custom input fields readable in dark mode
  * CookieBrowser: Make alternating rows readable in dark mode
  * Update Chromium:
  * Bump V8_PATCH_LEVEL
  * Fix clang set-but-unused-variable warning
  * Fix mac toolchain python linker script call
  * Fix missing dependency for gpu sources
  * Fix python calls
  * Fix undefined symbol for universal link
  * Quick fix for regression in service workers by reverting
    backports
  * [Backport] CVE-2022-0797: Out of bounds memory access
    in Mojo
  * [Backport] CVE-2022-1125
  * [Backport] CVE-2022-1138: Inappropriate implementation
    in Web Cursor.
  * [Backport] CVE-2022-1305: Use after free in storage
  * [Backport] CVE-2022-1310: Use after free in regular
    expressions
  * [Backport] CVE-2022-1314: Type Confusion in V8
  * [Backport] CVE-2022-1493: Use after free in Dev Tools
  * [Backport] On arm64 hosts, set host_cpu to 'arm64', not 'arm'
  * [Backport] Security Bug 1296876
  * [Backport] Security bug 1269999
  * [Backport] Security bug 1280852
  * [Backport] Security bug 1292905
  * [Backport] Security bug 1304659
  * [Backport] Security bug 1306507</changelog>
</package>
<package pkgid="f9297f791d4b8e1390723909c3452c7bab475627a3666dc4053718e4a0aa54c0" name="libqt5-qtwebengine-examples" arch="x86_64">
  <version epoch="0" ver="5.15.10" rel="bp154.2.3.2"/>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1613563200">- Add patch to fix sandbox with glibc 2.33 on 32bit:
  * sandbox-statx-futex_time64.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1615377600">- Can't use system_vpx on Leap 15.3</changelog>
  <changelog author="christophe@krop.fr" date="1616587200">- Update to version 5.15.3:
  * Fix spelling and coding style
  * Fix new view request handling (QTBUG-87378)
  * Fix getDefaultScreenId on X11
  * Fix flaky tst_QWebEngineView::textSelectionOutOfInputField test
  * Move touch input tests to separate testcase
  * Add touch input tests for scrolling and pinch zooming
  * Fix rare duplicate ids forming in touch point id's mapping
  * Use the module's version number for QtWebEngineProcess
  * Touch handling: provide id mapping without modifying TouchPoint instance
    (QTBUG-88001)
  * Touch handling: fix mapped ids cleanup for TouchCancel event
  * et custom headers from QWebEngineUrlRequestInfo before triggering redirect
    (QTBUG-88861)
  * Forward modifier flags for lock keys (QTBUG-89001)
  * Fix handling of more than one finger for touch event (QTBUG-86389)
  * Stabilize load signals emitting (QTBUG-65223, QTBUG-87089)
  * Fix building against 5.12 on most CIs
  * Update minimum HarfBuzz version to 2.4.0 (QTBUG-88976)
  * Fix building against Qt 5.14
  * Migrate user script IPC to mojo
  * Fix crashes in user resource controller when single process
  * Minor. Fix namespace for user resource controller
  * Minor. RenderThreadObserverQt is really a RenderConfiguration
  * Remove RenderViewObserverHelper from UserResourceController
  * Cache mojo interface bindings to UserResourceControllerRenderFrame
  * Cache mojo interface bindings for WebChannelIPCTransport
  * Migrate render_view_observer_qt to mojo
  * Fix crash on linkedin.com (QTBUG-89740)
  * Suppress error pages also for http errors if they are disabled
  * Fix leak in QQuickWebEngineViewPrivate::contextMenuRequested
  * Register PerformanceNode early enough
  * Quiet log on webrtc usage
  * Remove configure option that doesn't work
  * Remove Java build dependency
  * Fix blank popups in qml (QTBUG-86034)
  * Fix position of popup on qml (QTBUG-86034, QTBUG-89358)
  * Enable hangout services extension (QTBUG-85731)
  * Allow to fallback to default locale for non existent data packs (QTBUG-90490)
  * Support devtools close button
  * Do not extract download file names from certain url schemes (QTBUG-90355)
  * Leave room for the null-termination byte when checking remote drive path
    (QTBUG-90347)
  * Do not set open files limit for linking if not necessary
  * Remove even more remains of non network service code
  * Add back prefers-color-scheme support (QTBUG-89753)
  * Start supporting chrome.resourcesPrivate API (QTBUG-90035)
  * Enable chrome://user-actions WebUI
  * Remove remains of chrome://flash
  * Fix loadFinished signal if page has content but server sends HTTP error
    (QTBUG-90517)
  * Fix devtools page resource loading as raw data instead of html string
  * Remove frame metadata observer (RenderWidgetHostViewQt) on destroy
  * Resolve installed interceptors right before interception point (QTBUG-86286)
  * Update searches faster
  * Remove more leftovers of the old compositor
  * Enable webrtc logging and the corresponding WebUI
  * Support mips64el platform CPU(loongson 3A4000)
  * Add tracing UI resources
  * Fix crash on meet.google.com
  * Fix mad popup qquickwindows on wayland
  * Fix crashes on BrowserContext destruction
  * Fix crash on exit in quicknanobrowser when popup
  * Remove QtPdf dependency on nss at build-time
  * Avoid accessing profileAdapter when profile is shutting down (QTBUG-91187)
  * Do not flush messages form profile destructor
  * Ignore QQuickWebEngineNewViewRequest if it is unhandled
  * Fix ScopedGLContextChecker with QTWEBENGINE_DISABLE_GPU_THREAD=1
  * Don't send duplicate load progress values
  * Fix neon support in libpng
  * Do not call deprecated profile interceptor on ui thread (QTBUG-86267)
  * Add certificate error message for ERR_SSL_OBSOLETE_VERSION
  * Fix assert in WebContentsAdapter::devToolsFrontendDestroyed
  * Avoid to reject a certificate error twice in Quick
  * Fix PDF viewer plugin
  * FIXUP: Fix swap condition in DisplayGLOutputSurface::updatePaintNode
    (QTBUG-86599)
  * Fix favicon engine under device pixel scaling
  * Do not pass a native keycode matching the menu key when it is remapped
    (QTBUG-86672)
  * Optimize WebEngineSettings::testAttribute
  * Warn about QtWebengineProcess launching from network share (QTBUG-84632)
  * Handle non-ascii names for pulseaudio (QTBUG-85363)
  * Do not set audio device for desktop capture if audio loopback is unsupported
  * Fix new view request handling (QTBUG-87378)
  * Fix getDefaultScreenId on X11
  * Touch handling: provide id mapping without modifying TouchPoint instance
    (QTBUG-88001)
  * Set custom headers from QWebEngineUrlRequestInfo before triggering redirect
    (QTBUG-88861)
  * Stabilize load signals emitting (QTBUG-65223)
- CVE fixes backported in chromium updates:
  * CVE-2020-16044: Use after free in WebRTC
  * CVE-2021-21118: Heap buffer overflow in Blink
  * CVE-2021-21119: Use after free in Media
  * CVE-2021-21120: Use after free in WebSQL
  * CVE-2021-21121: Use after free in Omnibox
  * CVE-2021-21122: Use after free in Blink
  * CVE-2021-21123: Insufficient data validation in File System API
  * CVE-2021-21125: Insufficient policy enforcement in File System API
  * CVE-2021-21126: Insufficient policy enforcement in extensions
  * CVE-2021-21127: Insufficient policy enforcement in extensions
  * CVE-2021-21128: Heap buffer overflow in Blink
  * CVE-2021-21129: Insufficient policy enforcement in File System API
  * CVE-2021-21130: Insufficient policy enforcement in File System API
  * CVE-2021-21131: Insufficient policy enforcement in File System API
  * CVE-2021-21132: Inappropriate implementation in DevTools
  * CVE-2021-21135: Inappropriate implementation in Performance API
  * CVE-2021-21137: Inappropriate implementation in DevTools
  * CVE-2021-21140: Uninitialized Use in USB
  * CVE-2021-21141: Insufficient policy enforcement in File System API
  * CVE-2021-21145: Use after free in Fonts
  * CVE-2021-21146: Use after free in Navigation
  * CVE-2021-21147: Inappropriate implementation in Skia
  * CVE-2021-21148: Heap buffer overflow in V8
  * CVE-2021-21149: Stack overflow in Data Transfer
  * CVE-2021-21150: Use after free in Downloads
  * CVE-2021-21152: Heap buffer overflow in Media
  * CVE-2021-21153: Stack overflow in GPU Process
  * CVE-2021-21156: Heap buffer overflow in V8
  * CVE-2021-21157: Use after free in Web Sockets
- Drop obsolete patches:
  * icu-68.patch
  * icu-68-2.patch
- Rebase patches:
  * fix1163766.patch
  * sandbox-statx-futex_time64.patch
  * rtc-dont-use-h264.patch
  * chromium-glibc-2.33.patch
- Add patch to fix crash with certain locales:
  * 0001-Fix-normalization-of-app-locales.patch
- Clean the spec file a bit</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1618315200">- Add back missing part in fix1163766.patch (boo#1184610)</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1618401600">- Update _constraints to avoid OOM</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1618401601">- Add patch to fix build with GCC 11:
  * 0001-Fix-build-with-GCC-11.patch</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1620302400">- Add patch to fix build with ICU 69:
  * 0001-Fix-build-with-system-ICU-69.patch</changelog>
  <changelog author="christophe@krop.fr" date="1624363200">- Update to version 5.15.5:
  * Abort findText also right on explicit navigation request
  * Adapt to new Connections syntax
  * Add devtools eyedropper support
  * Add more tests to tst_loadsignals
  * Add support for Keyboard.getLayoutMap()
  * Add web-ui chrome://net-internals
  * Allow leaving OCSP off
  * Always send phased wheel events beginning with Began
  * Avoid accessing profileAdapter when profile is shutting down
  * Avoid unknownFunc messages in qmltests
  * Blacklist CertificateError::test_error for macOS
  * Blacklist NewViewRequest::test_loadNewViewRequest on macOS
  * Blacklist handleError on macos until we merge the fix
  * Blacklist numberOfStartedAndFinishedSignalsIsSame on b2q CIs
  * Depend on QCoreApplication::startingUp() for checking
    existence of app
  * Do not allow WebBluetooth to continue
  * Do not hide virtual keyboard if the focused node is editable
  * Doc: Add a note about navigation within a page to a fragment
  * Docs: Suggest to use higher DPI for printing
  * Fix FilePickerController's path validation for windows and
    corresponding tests
  * Fix application locales again
  * Fix embedded PDFs when plugins are disabled
  * Fix first party url for cookie filter
  * Fix inconsistent number of load signals and their order
  * Fix normalization of app locales
  * Fix not working certificates on mac &gt; 10.14
  * Fix prl files on ios
  * Fix qmltests::WebEngineViewNavigationHistory auto tests
  * Fix qtpdf static builds on windows
  * Fix static build of qml qtpdf
  * Follow InProcessGpuThread::Init() on thread priority
  * Generate mojo bindings before compiling extension API
    registration
  * Implement PluginServiceFilterQt
  * Load signals test: use focusProxy for link clicking test
  * Make able to override disabled features from command line
  * Notify canGoBack/canGoForward changes based on web actions
  * Only disconnect QWebEnginePage signals that QWebEngineView
    connected
  * Package devtools inspector overlay
  * Remove ResourceTypeSubFrame check after website update
  * Remove obsolete loadSignals test
    secondLoadForError_WhenErrorPageEnabled
  * Remove qquickwebengineprofile test
  * Remove tracking of frame which load error page
  * Remove ui/snapshot overrides for aura
  * Report server directs in navigation type
  * Return to using the default devtools page
  * Set enumaration root directory for File.webkitRelativePath API
  * Set more Display properties
  * Show PDF viewer in a guest view
  * Support devtools close button in QuickNanoBrowser
  * Support zoom-in, zoom-out and cell web cursors on macOS
  * Unblacklist and fix load signals test for file download
  * Update Chromium and adapt PermissionManagerQt
  * Update platform notes
  * View: test signal for deletion of external page set to view
- Drop patches:
  * 0001-Fix-normalization-of-app-locales.patch
  * 0001-Fix-build-with-GCC-11.patch
  * 0001-Fix-build-with-system-ICU-69.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1624536000">- Update the CMake version workaround to get qtbase's real version</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1628078400">- Add patch to fix build with glibc 2.34 (boo#1189095)
  * 0001-Fix-build-with-glibc-2.34.patch</changelog>
  <changelog author="christophe@krop.fr" date="1631188800">- Update to version 5.15.6:
  * Update Chromium:
    + [Backport] CVE-2021-30560: Use after free in Blink XSLT
    + [Backport] CVE-2021-30566: Stack buffer overflow in Printing
    + [Backport] CVE-2021-30585: Use after free in sensor handling
    + Bump V8_PATCH_LEVEL
    + [Backport] Security bug 1228036
    + [Backport] CVE-2021-30604: Use after free in ANGLE
    + [Backport] CVE-2021-30603: Race in WebAudio
    + [Backport] CVE-2021-30602: Use after free in WebRTC
    + [Backport] CVE-2021-30599: Type Confusion in V8
    + [Backport] CVE-2021-30598: Type Confusion in V8
    + [Backport] Security bug 1227933
    + [Backport] Security bug 1205059
    + [Backport] Security bug 1184294
    + [Backport] Security bug 1198385
    + [Backport] CVE-2021-30588: Type Confusion in V8
    + [Backport] CVE-2021-30587: Inappropriate implementation in Compositing on Windows
    + [Backport] CVE-2021-30573: Use after free in GPU
    + [Backport] CVE-2021-30569, security bugs 1198216 and 1204814
    + [Backport] CVE-2021-30568: Heap buffer overflow in WebGL
    + [Backport] CVE-2021-30541: Use after free in V8
    + [Backport] Security bugs 1197786 and 1194330
    + [Backport] Security bug 1194689
    + [Backport] CVE-2021-30563: Type Confusion in V8
    + [Backport] Security bug 1211215
    + [Backport] Security bug 1209558
    + [Backport] CVE-2021-30553: Use after free in Network service
    + [Backport] CVE-2021-30548: Use after free in Loader
    + [Backport] CVE-2021-30547: Out of bounds write in ANGLE
    + [Backport] CVE-2021-30556: Use after free in WebAudio
    + [Backport] CVE-2021-30559: Out of bounds write in ANGLE
    + [Backport] CVE-2021-30533: Insufficient policy enforcement in PopupBlocker
    + [Backport] Security bug 1202534
    + [Backport] CVE-2021-30536: Out of bounds read in V8
    + [Backport] CVE-2021-30522: Use after free in WebAudio
    + [Backport] CVE-2021-30554 Use after free in WebGL
    + [Backport] CVE-2021-30551: Type Confusion in V8
    + [Backport] CVE-2021-30544: Use after free in BFCache
    + [Backport] CVE-2021-30535: Double free in ICU
    + [Backport] CVE-2021-30534: Insufficient policy enforcement in iFrameSandbox
    + [Backport] CVE-2021-30530: Out of bounds memory access in WebAudio
    + [Backport] CVE-2021-30523: Use after free in WebRTC
    + Generate mojo bindings before compiling extension API registration
  * Bump version from 5.15.5 to 5.15.6
  * Always send phased wheel events beginning with Began
- Import patch from the chromium package:
  * 0001-return-ENOSYS-for-clone3.patch
- Add changes from the chromium package to
  0001-Fix-build-with-glibc-2.34.patch</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1632225600">- Add patches from Arch to fix build with HarfBuzz 3.0.0:
  * chromium-harfbuzz-3.0.0.patch
  * skia-harfbuzz-3.0.0.patch
- ... but don't break with &lt; 2.9.0:
  * chromium-older-harfbuzz.patch</changelog>
  <changelog author="christophe@krop.fr" date="1635508800">- Update to version 5.15.7:
  * Update Chromium:
    [Backport] Linux sandbox: update syscalls numbers on 32-bit platforms
    [Backport] sandbox: linux: allow clock_nanosleep &amp; gettime64
    [Backport] Linux sandbox: update syscall numbers for all platforms.
    [Backport] Ease HarfBuzz API change with feature detection
    [Backport] Security bug 1248665
    [Backport] CVE-2021-37975 : Use after free in V8
    [Backport] CVE-2021-37980 : Inappropriate implementation in Sandbox
    [Backport] CVE-2021-37979 : Heap buffer overflow in WebRTC (2/2)
    [Backport] CVE-2021-37979 : Heap buffer overflow in WebRTC (1/2)
    [Backport] CVE-2021-37978 : Heap buffer overflow in Blink
    [Backport] CVE-2021-30616: Use after free in Media.
    [Backport] CVE-2021-37962 : Use after free in Performance Manager (2/2)
    [Backport] CVE-2021-37962 : Use after free in Performance Manager (1/2)
    [Backport] CVE-2021-37973 : Use after free in Portals
    [Backport] CVE-2021-37971 : Incorrect security UI in Web Browser UI.
    [Backport] CVE-2021-37968 : Inappropriate implementation in Background Fetch API
    [Backport] CVE-2021-37967 : Inappropriate implementation in Background Fetch API
    [Backport] Linux sandbox: return ENOSYS for clone3
    [Backport] Linux sandbox: fix fstatat() crash
    [Backport] Reland "Reland "Linux sandbox syscall broker: use struct kernel_stat""
    [Backport] Security bug 1238178 (2/2)
    [Backport] Security bug 1238178 (1/2)
    [Backport] CVE-2021-30633: Use after free in Indexed DB API (2/2)
    [Backport] CVE-2021-30633: Use after free in Indexed DB API (1/2)
    [Backport] CVE-2021-30630: Inappropriate implementation in Blink
    [Backport] CVE-2021-30629: Use after free in Permissions
    [Backport] CVE-2021-30628: Stack buffer overflow in ANGLE
    [Backport] CVE-2021-30627: Type Confusion in Blink layout
    [Backport] CVE-2021-30626: Out of bounds memory access in ANGLE
    [Backport] CVE-2021-30625: Use after free in Selection API
    [Backport] Security bug 1206289
    [Backport] CVE-2021-30613: Use after free in Base internals
    [Backport] Security bug 1227228
    [Backport] CVE-2021-30618: Inappropriate implementation in DevTools
  * Update patch level
  * Blacklist certificate test until certicates have been renewed
  * Block CORS from local URLs when remote access is not enabled
  * Do not wait on weak_pointer for termination errors
  * Support MSVC_VER 16.8
  * Fix wrong save file filter for Markdown Editor example
  * Add Chromium version source documentation
  * Bump version from 5.15.6 to 5.15.7
  * Fix crash when clicking on a link in PDF
- Drop openSUSE patches:
  * fix1163766.patch. Should be addressed with:
    https://github.com/qt/qtwebengine-chromium/commit/652f834de
    https://github.com/qt/qtwebengine-chromium/commit/faae106ed
    https://github.com/qt/qtwebengine-chromium/commit/6b7b3f1bf
  * chromium-glibc-2.33.patch. Should be addressed with the
    [Backport] Linux sandbox: fix fstatat() crash and
    Reland "Reland "Linux sandbox syscall broker: use struct kernel_stat""
    changes.
  * chromium-older-harfbuzz.patch
- Drop upstream changes:
  * 0001-return-ENOSYS-for-clone3.patch
  * chromium-harfbuzz-3.0.0.patch
  * skia-harfbuzz-3.0.0.patch
- Rebase patches:
  * sandbox-statx-futex_time64.patch</changelog>
  <changelog author="christophe@krop.fr" date="1641297600">- Update to version 5.15.8:
  * Update Chromium:
    [Backport] CVE-2021-3517: libxml2: Heap-based buffer overflow
    in xmlEncodeEntitiesInternal() in entities.c
    [Backport] CVE-2021-3541 libxml2: Exponential entity expansion
    attack bypasses all existing protection mechanisms
    [Backport] CVE-2021-37984 : Heap buffer overflow in PDFium
    [Backport] CVE-2021-37987 : Use after free in Network APIs
    [Backport] CVE-2021-37989 : Inappropriate implementation in Blink
    [Backport] CVE-2021-37992 : Out of bounds read in WebAudio
    [Backport] CVE-2021-37993 : Use after free in PDF Accessibility
    [Backport] CVE-2021-37996 : Insufficient validation of untrusted
    input in Downloads
    [Backport] CVE-2021-38001 : Type Confusion in V8
    [Backport] CVE-2021-38003 : Inappropriate implementation in V8
    [Backport] CVE-2021-38005: Use after free in loader (1/3)
    [Backport] CVE-2021-38005: Use after free in loader (2/3)
    [Backport] CVE-2021-38005: Use after free in loader (3/3)
    [Backport] CVE-2021-38007: Type Confusion in V8
    [Backport] CVE-2021-38009: Inappropriate implementation in cache
    [Backport] CVE-2021-38010: Inappropriate implementation in serviceworkers
    [Backport] CVE-2021-38012: Type Confusion in V8
    [Backport] CVE-2021-38015: Inappropriate implementation in input
    [Backport] CVE-2021-38017: Insufficient policy enforcement in iframe
    sandbox
    [Backport] CVE-2021-38018: Inappropriate implementation in navigation
    [Backport] CVE-2021-38019: Insufficient policy enforcement in CORS
    [Backport] CVE-2021-38021: Inappropriate implementation in referrer
    [Backport] CVE-2021-38022: Inappropriate implementation in WebAuthentication
    [Backport] CVE-2021-4057: Use after free in file API
    [Backport] CVE-2021-4058: Heap buffer overflow in ANGLE (1/2)
    [Backport] CVE-2021-4058: Heap buffer overflow in ANGLE (2/2)
    [Backport] CVE-2021-4059: Insufficient data validation in loader
    [Backport] CVE-2021-4062: Heap buffer overflow in BFCache
    [Backport] CVE-2021-4078: Type confusion in V8
    [Backport] CVE-2021-4079: Out of bounds write in WebRTC
    [Backport] CVE-2021-4098: Insufficient data validation in Mojo
    [Backport] CVE-2021-4099: Use after free in Swiftshader
    [Backport] CVE-2021-4101: Heap buffer overflow in Swiftshader.
    [Backport] CVE-2021-4102: Use after free in V8
    [Backport] Dependency for CVE-2021-37989
    [Backport] Dependency for CVE-2021-38009
    [Backport] Security bug 1245870
    [Backport] Security bug 1252858
    [Backport] Security bug 1259899
    Bump V8_PATCH_LEVEL
    Compile with GCC 11 -std=c++20
    Fix stack overflow on gpu channel recreate with an error
    Use wglSetPixelFormat directly only if in software mode
    [Backport] Handle long SIGSTKSZ in glibc &gt; 2.33
    [Backport] abseil-cpp: Fixes build with latest glibc
  * Handle qtpdf compilation with static runtime
  * Add bitcode support for qtpdf on ios
  * Do not access accessibility from qt post routines
  * Blacklist javascriptClipboard test on ubuntu 20.04
  * Re-enable network-service-in-process
  * Bump version from 5.15.7 to 5.15.8
  * Update patch level
  * Fix pinch gesture
  * Fix leak of properties after XkbRF_GetNamesProp
  * Fix leak on getDefaultScreeenId
- Drop patch:
  * 0001-Fix-build-with-glibc-2.34.patch</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1648209600">- Add patch to fix build with GCC 12:
  * 0001-skia-Some-includes-to-fix-build-with-GCC-12.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1649073600">- Add security fixes:
  * CVE-2022-0971-qtwebengine-5.15.patch (CVE-2022-0971, boo#1197163)
  * CVE-2022-1096-qtwebengine-5.15.patch (CVE-2022-1096, boo#1197552)</changelog>
  <changelog author="christophe@krop.fr" date="1649246400">- Update to version 5.15.9:
  * QPdfView: scale page rendering according to devicePixelRatio
  * Update documented Chromium version
  * Use IsSameDocument() rather than IsLoadingToDifferentDocument()
  * Update module-split for installer
  * Fix printing PDF files
  * Do not override signal handlers
  * Avoid using xkbcommon in non-X11 builds
  * Update documentation
  * Update Chromium:
  * Bump V8_PATCH_LEVEL
  * Do not overwrite signal handlers in the browser process.
  * Replace base::ranges::set_union with std::set_union to fix
    MSVC2017 build
  * [Backport] CVE-2022-0100: Heap buffer overflow in Media
    streams API
  * [Backport] CVE-2022-0102: Type Confusion in V8
  * [Backport] CVE-2022-0103: Use after free in SwiftShader
  * [Backport] CVE-2022-0104: Heap buffer overflow in ANGLE
  * [Backport] CVE-2022-0108: Inappropriate implementation
    in Navigation
  * [Backport] CVE-2022-0109: Inappropriate implementation
    in Autofill
  * [Backport] CVE-2022-0111 and CVE-2022-0117
  * [Backport] CVE-2022-0113: Inappropriate implementatio
    n in Blink
  * [Backport] CVE-2022-0116: Inappropriate implementation
    in Compositing
  * [Backport] CVE-2022-0289: Use after free in Safe browsing
  * [Backport] CVE-2022-0291: Inappropriate implementation
    in Storage
  * [Backport] CVE-2022-0293: Use after free in Web packaging
  * [Backport] CVE-2022-0298: Use after free in Scheduling
  * [Backport] CVE-2022-0305: Inappropriate implementation in
    Service Worker API
  * [Backport] CVE-2022-0306: Heap buffer overflow in PDFium
  * [Backport] CVE-2022-0310 and CVE-0311: Heap buffer overflow
    in Task Manager
  * [Backport] CVE-2022-0456: Use after free in Web Search
  * [Backport] CVE-2022-0459: Use after free in Screen Capture
  * [Backport] CVE-2022-0460: Use after free in Window Dialog
  * [Backport] CVE-2022-0461: Policy bypass in COOP
  * [Backport] CVE-2022-0606: Use after free in ANGLE
  * [Backport] CVE-2022-0607: Use after free in GPU
  * [Backport] CVE-2022-0608: Integer overflow in Mojo
  * [Backport] CVE-2022-0609: Use after free in Animation
  * [Backport] CVE-2022-0610: Inappropriate implementation
    in Gamepad API
  * [Backport] CVE-2022-0971 (boo#1197163)
  * [Backport] CVE-2022-1096 (boo#1197552)
  * [Backport] CVE-2022-23852
  * [Backport] Copy 'name_' member during StyleRuleProperty::Copy
  * [Backport] Security bug 1256885
  * [Backport] Security bug 1258603
  * [Backport] Security bug 1259557
  * [Backport] Security bug 1261415
  * [Backport] Security bug 1265570
  * [Backport] Security bug 1268448
  * [Backport] Security bug 1270014
  * [Backport] Security bug 1274113
  * [Backport] Security bug 1276331
  * [Backport] Security bug 1280743
  * [Backport] Security bug 1289394
  * [Backport] Security bug 1292537
  * [Backport] sandbox: build if glibc 2.34+ dynamic stack size
    is enabled
- Drop patches, now upstream:
  * CVE-2022-0971-qtwebengine-5.15.patch
  * CVE-2022-1096-qtwebengine-5.15.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1651060800">- Add libqt5-qtwebengine-rpmlintrc to silence the
  'shlib-policy-name-error' rpmlint error</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1651492800">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1654689600">- Update to version 5.15.10:
  * Fix top level build with no widget
  * Fix read-after-free on EGL extensions
  * Update Chromium
  * Add workaround for unstable gn on macOS in ci
  * Pass archiver to gn build
  * Fix navigation to non-local URLs
  * Add support for universal builds for qtwebengine and qtpdf
  * Enable Apple Silicon support
  * Fix cross compilation x86_64-&gt;arm64 on mac
  * Bump version to 5.15.10
  * CustomDialogs: Make custom input fields readable in dark mode
  * CookieBrowser: Make alternating rows readable in dark mode
  * Update Chromium:
  * Bump V8_PATCH_LEVEL
  * Fix clang set-but-unused-variable warning
  * Fix mac toolchain python linker script call
  * Fix missing dependency for gpu sources
  * Fix python calls
  * Fix undefined symbol for universal link
  * Quick fix for regression in service workers by reverting
    backports
  * [Backport] CVE-2022-0797: Out of bounds memory access
    in Mojo
  * [Backport] CVE-2022-1125
  * [Backport] CVE-2022-1138: Inappropriate implementation
    in Web Cursor.
  * [Backport] CVE-2022-1305: Use after free in storage
  * [Backport] CVE-2022-1310: Use after free in regular
    expressions
  * [Backport] CVE-2022-1314: Type Confusion in V8
  * [Backport] CVE-2022-1493: Use after free in Dev Tools
  * [Backport] On arm64 hosts, set host_cpu to 'arm64', not 'arm'
  * [Backport] Security Bug 1296876
  * [Backport] Security bug 1269999
  * [Backport] Security bug 1280852
  * [Backport] Security bug 1292905
  * [Backport] Security bug 1304659
  * [Backport] Security bug 1306507</changelog>
</package>
<package pkgid="7ea626b8660d873ee68d0c4b7540805f786b48ed12f8a07ab826dcd287908472" name="libqt5-qtwebengine-private-headers-devel" arch="noarch">
  <version epoch="0" ver="5.15.10" rel="bp154.2.3.2"/>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1613563200">- Add patch to fix sandbox with glibc 2.33 on 32bit:
  * sandbox-statx-futex_time64.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1615377600">- Can't use system_vpx on Leap 15.3</changelog>
  <changelog author="christophe@krop.fr" date="1616587200">- Update to version 5.15.3:
  * Fix spelling and coding style
  * Fix new view request handling (QTBUG-87378)
  * Fix getDefaultScreenId on X11
  * Fix flaky tst_QWebEngineView::textSelectionOutOfInputField test
  * Move touch input tests to separate testcase
  * Add touch input tests for scrolling and pinch zooming
  * Fix rare duplicate ids forming in touch point id's mapping
  * Use the module's version number for QtWebEngineProcess
  * Touch handling: provide id mapping without modifying TouchPoint instance
    (QTBUG-88001)
  * Touch handling: fix mapped ids cleanup for TouchCancel event
  * et custom headers from QWebEngineUrlRequestInfo before triggering redirect
    (QTBUG-88861)
  * Forward modifier flags for lock keys (QTBUG-89001)
  * Fix handling of more than one finger for touch event (QTBUG-86389)
  * Stabilize load signals emitting (QTBUG-65223, QTBUG-87089)
  * Fix building against 5.12 on most CIs
  * Update minimum HarfBuzz version to 2.4.0 (QTBUG-88976)
  * Fix building against Qt 5.14
  * Migrate user script IPC to mojo
  * Fix crashes in user resource controller when single process
  * Minor. Fix namespace for user resource controller
  * Minor. RenderThreadObserverQt is really a RenderConfiguration
  * Remove RenderViewObserverHelper from UserResourceController
  * Cache mojo interface bindings to UserResourceControllerRenderFrame
  * Cache mojo interface bindings for WebChannelIPCTransport
  * Migrate render_view_observer_qt to mojo
  * Fix crash on linkedin.com (QTBUG-89740)
  * Suppress error pages also for http errors if they are disabled
  * Fix leak in QQuickWebEngineViewPrivate::contextMenuRequested
  * Register PerformanceNode early enough
  * Quiet log on webrtc usage
  * Remove configure option that doesn't work
  * Remove Java build dependency
  * Fix blank popups in qml (QTBUG-86034)
  * Fix position of popup on qml (QTBUG-86034, QTBUG-89358)
  * Enable hangout services extension (QTBUG-85731)
  * Allow to fallback to default locale for non existent data packs (QTBUG-90490)
  * Support devtools close button
  * Do not extract download file names from certain url schemes (QTBUG-90355)
  * Leave room for the null-termination byte when checking remote drive path
    (QTBUG-90347)
  * Do not set open files limit for linking if not necessary
  * Remove even more remains of non network service code
  * Add back prefers-color-scheme support (QTBUG-89753)
  * Start supporting chrome.resourcesPrivate API (QTBUG-90035)
  * Enable chrome://user-actions WebUI
  * Remove remains of chrome://flash
  * Fix loadFinished signal if page has content but server sends HTTP error
    (QTBUG-90517)
  * Fix devtools page resource loading as raw data instead of html string
  * Remove frame metadata observer (RenderWidgetHostViewQt) on destroy
  * Resolve installed interceptors right before interception point (QTBUG-86286)
  * Update searches faster
  * Remove more leftovers of the old compositor
  * Enable webrtc logging and the corresponding WebUI
  * Support mips64el platform CPU(loongson 3A4000)
  * Add tracing UI resources
  * Fix crash on meet.google.com
  * Fix mad popup qquickwindows on wayland
  * Fix crashes on BrowserContext destruction
  * Fix crash on exit in quicknanobrowser when popup
  * Remove QtPdf dependency on nss at build-time
  * Avoid accessing profileAdapter when profile is shutting down (QTBUG-91187)
  * Do not flush messages form profile destructor
  * Ignore QQuickWebEngineNewViewRequest if it is unhandled
  * Fix ScopedGLContextChecker with QTWEBENGINE_DISABLE_GPU_THREAD=1
  * Don't send duplicate load progress values
  * Fix neon support in libpng
  * Do not call deprecated profile interceptor on ui thread (QTBUG-86267)
  * Add certificate error message for ERR_SSL_OBSOLETE_VERSION
  * Fix assert in WebContentsAdapter::devToolsFrontendDestroyed
  * Avoid to reject a certificate error twice in Quick
  * Fix PDF viewer plugin
  * FIXUP: Fix swap condition in DisplayGLOutputSurface::updatePaintNode
    (QTBUG-86599)
  * Fix favicon engine under device pixel scaling
  * Do not pass a native keycode matching the menu key when it is remapped
    (QTBUG-86672)
  * Optimize WebEngineSettings::testAttribute
  * Warn about QtWebengineProcess launching from network share (QTBUG-84632)
  * Handle non-ascii names for pulseaudio (QTBUG-85363)
  * Do not set audio device for desktop capture if audio loopback is unsupported
  * Fix new view request handling (QTBUG-87378)
  * Fix getDefaultScreenId on X11
  * Touch handling: provide id mapping without modifying TouchPoint instance
    (QTBUG-88001)
  * Set custom headers from QWebEngineUrlRequestInfo before triggering redirect
    (QTBUG-88861)
  * Stabilize load signals emitting (QTBUG-65223)
- CVE fixes backported in chromium updates:
  * CVE-2020-16044: Use after free in WebRTC
  * CVE-2021-21118: Heap buffer overflow in Blink
  * CVE-2021-21119: Use after free in Media
  * CVE-2021-21120: Use after free in WebSQL
  * CVE-2021-21121: Use after free in Omnibox
  * CVE-2021-21122: Use after free in Blink
  * CVE-2021-21123: Insufficient data validation in File System API
  * CVE-2021-21125: Insufficient policy enforcement in File System API
  * CVE-2021-21126: Insufficient policy enforcement in extensions
  * CVE-2021-21127: Insufficient policy enforcement in extensions
  * CVE-2021-21128: Heap buffer overflow in Blink
  * CVE-2021-21129: Insufficient policy enforcement in File System API
  * CVE-2021-21130: Insufficient policy enforcement in File System API
  * CVE-2021-21131: Insufficient policy enforcement in File System API
  * CVE-2021-21132: Inappropriate implementation in DevTools
  * CVE-2021-21135: Inappropriate implementation in Performance API
  * CVE-2021-21137: Inappropriate implementation in DevTools
  * CVE-2021-21140: Uninitialized Use in USB
  * CVE-2021-21141: Insufficient policy enforcement in File System API
  * CVE-2021-21145: Use after free in Fonts
  * CVE-2021-21146: Use after free in Navigation
  * CVE-2021-21147: Inappropriate implementation in Skia
  * CVE-2021-21148: Heap buffer overflow in V8
  * CVE-2021-21149: Stack overflow in Data Transfer
  * CVE-2021-21150: Use after free in Downloads
  * CVE-2021-21152: Heap buffer overflow in Media
  * CVE-2021-21153: Stack overflow in GPU Process
  * CVE-2021-21156: Heap buffer overflow in V8
  * CVE-2021-21157: Use after free in Web Sockets
- Drop obsolete patches:
  * icu-68.patch
  * icu-68-2.patch
- Rebase patches:
  * fix1163766.patch
  * sandbox-statx-futex_time64.patch
  * rtc-dont-use-h264.patch
  * chromium-glibc-2.33.patch
- Add patch to fix crash with certain locales:
  * 0001-Fix-normalization-of-app-locales.patch
- Clean the spec file a bit</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1618315200">- Add back missing part in fix1163766.patch (boo#1184610)</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1618401600">- Update _constraints to avoid OOM</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1618401601">- Add patch to fix build with GCC 11:
  * 0001-Fix-build-with-GCC-11.patch</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1620302400">- Add patch to fix build with ICU 69:
  * 0001-Fix-build-with-system-ICU-69.patch</changelog>
  <changelog author="christophe@krop.fr" date="1624363200">- Update to version 5.15.5:
  * Abort findText also right on explicit navigation request
  * Adapt to new Connections syntax
  * Add devtools eyedropper support
  * Add more tests to tst_loadsignals
  * Add support for Keyboard.getLayoutMap()
  * Add web-ui chrome://net-internals
  * Allow leaving OCSP off
  * Always send phased wheel events beginning with Began
  * Avoid accessing profileAdapter when profile is shutting down
  * Avoid unknownFunc messages in qmltests
  * Blacklist CertificateError::test_error for macOS
  * Blacklist NewViewRequest::test_loadNewViewRequest on macOS
  * Blacklist handleError on macos until we merge the fix
  * Blacklist numberOfStartedAndFinishedSignalsIsSame on b2q CIs
  * Depend on QCoreApplication::startingUp() for checking
    existence of app
  * Do not allow WebBluetooth to continue
  * Do not hide virtual keyboard if the focused node is editable
  * Doc: Add a note about navigation within a page to a fragment
  * Docs: Suggest to use higher DPI for printing
  * Fix FilePickerController's path validation for windows and
    corresponding tests
  * Fix application locales again
  * Fix embedded PDFs when plugins are disabled
  * Fix first party url for cookie filter
  * Fix inconsistent number of load signals and their order
  * Fix normalization of app locales
  * Fix not working certificates on mac &gt; 10.14
  * Fix prl files on ios
  * Fix qmltests::WebEngineViewNavigationHistory auto tests
  * Fix qtpdf static builds on windows
  * Fix static build of qml qtpdf
  * Follow InProcessGpuThread::Init() on thread priority
  * Generate mojo bindings before compiling extension API
    registration
  * Implement PluginServiceFilterQt
  * Load signals test: use focusProxy for link clicking test
  * Make able to override disabled features from command line
  * Notify canGoBack/canGoForward changes based on web actions
  * Only disconnect QWebEnginePage signals that QWebEngineView
    connected
  * Package devtools inspector overlay
  * Remove ResourceTypeSubFrame check after website update
  * Remove obsolete loadSignals test
    secondLoadForError_WhenErrorPageEnabled
  * Remove qquickwebengineprofile test
  * Remove tracking of frame which load error page
  * Remove ui/snapshot overrides for aura
  * Report server directs in navigation type
  * Return to using the default devtools page
  * Set enumaration root directory for File.webkitRelativePath API
  * Set more Display properties
  * Show PDF viewer in a guest view
  * Support devtools close button in QuickNanoBrowser
  * Support zoom-in, zoom-out and cell web cursors on macOS
  * Unblacklist and fix load signals test for file download
  * Update Chromium and adapt PermissionManagerQt
  * Update platform notes
  * View: test signal for deletion of external page set to view
- Drop patches:
  * 0001-Fix-normalization-of-app-locales.patch
  * 0001-Fix-build-with-GCC-11.patch
  * 0001-Fix-build-with-system-ICU-69.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1624536000">- Update the CMake version workaround to get qtbase's real version</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1628078400">- Add patch to fix build with glibc 2.34 (boo#1189095)
  * 0001-Fix-build-with-glibc-2.34.patch</changelog>
  <changelog author="christophe@krop.fr" date="1631188800">- Update to version 5.15.6:
  * Update Chromium:
    + [Backport] CVE-2021-30560: Use after free in Blink XSLT
    + [Backport] CVE-2021-30566: Stack buffer overflow in Printing
    + [Backport] CVE-2021-30585: Use after free in sensor handling
    + Bump V8_PATCH_LEVEL
    + [Backport] Security bug 1228036
    + [Backport] CVE-2021-30604: Use after free in ANGLE
    + [Backport] CVE-2021-30603: Race in WebAudio
    + [Backport] CVE-2021-30602: Use after free in WebRTC
    + [Backport] CVE-2021-30599: Type Confusion in V8
    + [Backport] CVE-2021-30598: Type Confusion in V8
    + [Backport] Security bug 1227933
    + [Backport] Security bug 1205059
    + [Backport] Security bug 1184294
    + [Backport] Security bug 1198385
    + [Backport] CVE-2021-30588: Type Confusion in V8
    + [Backport] CVE-2021-30587: Inappropriate implementation in Compositing on Windows
    + [Backport] CVE-2021-30573: Use after free in GPU
    + [Backport] CVE-2021-30569, security bugs 1198216 and 1204814
    + [Backport] CVE-2021-30568: Heap buffer overflow in WebGL
    + [Backport] CVE-2021-30541: Use after free in V8
    + [Backport] Security bugs 1197786 and 1194330
    + [Backport] Security bug 1194689
    + [Backport] CVE-2021-30563: Type Confusion in V8
    + [Backport] Security bug 1211215
    + [Backport] Security bug 1209558
    + [Backport] CVE-2021-30553: Use after free in Network service
    + [Backport] CVE-2021-30548: Use after free in Loader
    + [Backport] CVE-2021-30547: Out of bounds write in ANGLE
    + [Backport] CVE-2021-30556: Use after free in WebAudio
    + [Backport] CVE-2021-30559: Out of bounds write in ANGLE
    + [Backport] CVE-2021-30533: Insufficient policy enforcement in PopupBlocker
    + [Backport] Security bug 1202534
    + [Backport] CVE-2021-30536: Out of bounds read in V8
    + [Backport] CVE-2021-30522: Use after free in WebAudio
    + [Backport] CVE-2021-30554 Use after free in WebGL
    + [Backport] CVE-2021-30551: Type Confusion in V8
    + [Backport] CVE-2021-30544: Use after free in BFCache
    + [Backport] CVE-2021-30535: Double free in ICU
    + [Backport] CVE-2021-30534: Insufficient policy enforcement in iFrameSandbox
    + [Backport] CVE-2021-30530: Out of bounds memory access in WebAudio
    + [Backport] CVE-2021-30523: Use after free in WebRTC
    + Generate mojo bindings before compiling extension API registration
  * Bump version from 5.15.5 to 5.15.6
  * Always send phased wheel events beginning with Began
- Import patch from the chromium package:
  * 0001-return-ENOSYS-for-clone3.patch
- Add changes from the chromium package to
  0001-Fix-build-with-glibc-2.34.patch</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1632225600">- Add patches from Arch to fix build with HarfBuzz 3.0.0:
  * chromium-harfbuzz-3.0.0.patch
  * skia-harfbuzz-3.0.0.patch
- ... but don't break with &lt; 2.9.0:
  * chromium-older-harfbuzz.patch</changelog>
  <changelog author="christophe@krop.fr" date="1635508800">- Update to version 5.15.7:
  * Update Chromium:
    [Backport] Linux sandbox: update syscalls numbers on 32-bit platforms
    [Backport] sandbox: linux: allow clock_nanosleep &amp; gettime64
    [Backport] Linux sandbox: update syscall numbers for all platforms.
    [Backport] Ease HarfBuzz API change with feature detection
    [Backport] Security bug 1248665
    [Backport] CVE-2021-37975 : Use after free in V8
    [Backport] CVE-2021-37980 : Inappropriate implementation in Sandbox
    [Backport] CVE-2021-37979 : Heap buffer overflow in WebRTC (2/2)
    [Backport] CVE-2021-37979 : Heap buffer overflow in WebRTC (1/2)
    [Backport] CVE-2021-37978 : Heap buffer overflow in Blink
    [Backport] CVE-2021-30616: Use after free in Media.
    [Backport] CVE-2021-37962 : Use after free in Performance Manager (2/2)
    [Backport] CVE-2021-37962 : Use after free in Performance Manager (1/2)
    [Backport] CVE-2021-37973 : Use after free in Portals
    [Backport] CVE-2021-37971 : Incorrect security UI in Web Browser UI.
    [Backport] CVE-2021-37968 : Inappropriate implementation in Background Fetch API
    [Backport] CVE-2021-37967 : Inappropriate implementation in Background Fetch API
    [Backport] Linux sandbox: return ENOSYS for clone3
    [Backport] Linux sandbox: fix fstatat() crash
    [Backport] Reland "Reland "Linux sandbox syscall broker: use struct kernel_stat""
    [Backport] Security bug 1238178 (2/2)
    [Backport] Security bug 1238178 (1/2)
    [Backport] CVE-2021-30633: Use after free in Indexed DB API (2/2)
    [Backport] CVE-2021-30633: Use after free in Indexed DB API (1/2)
    [Backport] CVE-2021-30630: Inappropriate implementation in Blink
    [Backport] CVE-2021-30629: Use after free in Permissions
    [Backport] CVE-2021-30628: Stack buffer overflow in ANGLE
    [Backport] CVE-2021-30627: Type Confusion in Blink layout
    [Backport] CVE-2021-30626: Out of bounds memory access in ANGLE
    [Backport] CVE-2021-30625: Use after free in Selection API
    [Backport] Security bug 1206289
    [Backport] CVE-2021-30613: Use after free in Base internals
    [Backport] Security bug 1227228
    [Backport] CVE-2021-30618: Inappropriate implementation in DevTools
  * Update patch level
  * Blacklist certificate test until certicates have been renewed
  * Block CORS from local URLs when remote access is not enabled
  * Do not wait on weak_pointer for termination errors
  * Support MSVC_VER 16.8
  * Fix wrong save file filter for Markdown Editor example
  * Add Chromium version source documentation
  * Bump version from 5.15.6 to 5.15.7
  * Fix crash when clicking on a link in PDF
- Drop openSUSE patches:
  * fix1163766.patch. Should be addressed with:
    https://github.com/qt/qtwebengine-chromium/commit/652f834de
    https://github.com/qt/qtwebengine-chromium/commit/faae106ed
    https://github.com/qt/qtwebengine-chromium/commit/6b7b3f1bf
  * chromium-glibc-2.33.patch. Should be addressed with the
    [Backport] Linux sandbox: fix fstatat() crash and
    Reland "Reland "Linux sandbox syscall broker: use struct kernel_stat""
    changes.
  * chromium-older-harfbuzz.patch
- Drop upstream changes:
  * 0001-return-ENOSYS-for-clone3.patch
  * chromium-harfbuzz-3.0.0.patch
  * skia-harfbuzz-3.0.0.patch
- Rebase patches:
  * sandbox-statx-futex_time64.patch</changelog>
  <changelog author="christophe@krop.fr" date="1641297600">- Update to version 5.15.8:
  * Update Chromium:
    [Backport] CVE-2021-3517: libxml2: Heap-based buffer overflow
    in xmlEncodeEntitiesInternal() in entities.c
    [Backport] CVE-2021-3541 libxml2: Exponential entity expansion
    attack bypasses all existing protection mechanisms
    [Backport] CVE-2021-37984 : Heap buffer overflow in PDFium
    [Backport] CVE-2021-37987 : Use after free in Network APIs
    [Backport] CVE-2021-37989 : Inappropriate implementation in Blink
    [Backport] CVE-2021-37992 : Out of bounds read in WebAudio
    [Backport] CVE-2021-37993 : Use after free in PDF Accessibility
    [Backport] CVE-2021-37996 : Insufficient validation of untrusted
    input in Downloads
    [Backport] CVE-2021-38001 : Type Confusion in V8
    [Backport] CVE-2021-38003 : Inappropriate implementation in V8
    [Backport] CVE-2021-38005: Use after free in loader (1/3)
    [Backport] CVE-2021-38005: Use after free in loader (2/3)
    [Backport] CVE-2021-38005: Use after free in loader (3/3)
    [Backport] CVE-2021-38007: Type Confusion in V8
    [Backport] CVE-2021-38009: Inappropriate implementation in cache
    [Backport] CVE-2021-38010: Inappropriate implementation in serviceworkers
    [Backport] CVE-2021-38012: Type Confusion in V8
    [Backport] CVE-2021-38015: Inappropriate implementation in input
    [Backport] CVE-2021-38017: Insufficient policy enforcement in iframe
    sandbox
    [Backport] CVE-2021-38018: Inappropriate implementation in navigation
    [Backport] CVE-2021-38019: Insufficient policy enforcement in CORS
    [Backport] CVE-2021-38021: Inappropriate implementation in referrer
    [Backport] CVE-2021-38022: Inappropriate implementation in WebAuthentication
    [Backport] CVE-2021-4057: Use after free in file API
    [Backport] CVE-2021-4058: Heap buffer overflow in ANGLE (1/2)
    [Backport] CVE-2021-4058: Heap buffer overflow in ANGLE (2/2)
    [Backport] CVE-2021-4059: Insufficient data validation in loader
    [Backport] CVE-2021-4062: Heap buffer overflow in BFCache
    [Backport] CVE-2021-4078: Type confusion in V8
    [Backport] CVE-2021-4079: Out of bounds write in WebRTC
    [Backport] CVE-2021-4098: Insufficient data validation in Mojo
    [Backport] CVE-2021-4099: Use after free in Swiftshader
    [Backport] CVE-2021-4101: Heap buffer overflow in Swiftshader.
    [Backport] CVE-2021-4102: Use after free in V8
    [Backport] Dependency for CVE-2021-37989
    [Backport] Dependency for CVE-2021-38009
    [Backport] Security bug 1245870
    [Backport] Security bug 1252858
    [Backport] Security bug 1259899
    Bump V8_PATCH_LEVEL
    Compile with GCC 11 -std=c++20
    Fix stack overflow on gpu channel recreate with an error
    Use wglSetPixelFormat directly only if in software mode
    [Backport] Handle long SIGSTKSZ in glibc &gt; 2.33
    [Backport] abseil-cpp: Fixes build with latest glibc
  * Handle qtpdf compilation with static runtime
  * Add bitcode support for qtpdf on ios
  * Do not access accessibility from qt post routines
  * Blacklist javascriptClipboard test on ubuntu 20.04
  * Re-enable network-service-in-process
  * Bump version from 5.15.7 to 5.15.8
  * Update patch level
  * Fix pinch gesture
  * Fix leak of properties after XkbRF_GetNamesProp
  * Fix leak on getDefaultScreeenId
- Drop patch:
  * 0001-Fix-build-with-glibc-2.34.patch</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1648209600">- Add patch to fix build with GCC 12:
  * 0001-skia-Some-includes-to-fix-build-with-GCC-12.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1649073600">- Add security fixes:
  * CVE-2022-0971-qtwebengine-5.15.patch (CVE-2022-0971, boo#1197163)
  * CVE-2022-1096-qtwebengine-5.15.patch (CVE-2022-1096, boo#1197552)</changelog>
  <changelog author="christophe@krop.fr" date="1649246400">- Update to version 5.15.9:
  * QPdfView: scale page rendering according to devicePixelRatio
  * Update documented Chromium version
  * Use IsSameDocument() rather than IsLoadingToDifferentDocument()
  * Update module-split for installer
  * Fix printing PDF files
  * Do not override signal handlers
  * Avoid using xkbcommon in non-X11 builds
  * Update documentation
  * Update Chromium:
  * Bump V8_PATCH_LEVEL
  * Do not overwrite signal handlers in the browser process.
  * Replace base::ranges::set_union with std::set_union to fix
    MSVC2017 build
  * [Backport] CVE-2022-0100: Heap buffer overflow in Media
    streams API
  * [Backport] CVE-2022-0102: Type Confusion in V8
  * [Backport] CVE-2022-0103: Use after free in SwiftShader
  * [Backport] CVE-2022-0104: Heap buffer overflow in ANGLE
  * [Backport] CVE-2022-0108: Inappropriate implementation
    in Navigation
  * [Backport] CVE-2022-0109: Inappropriate implementation
    in Autofill
  * [Backport] CVE-2022-0111 and CVE-2022-0117
  * [Backport] CVE-2022-0113: Inappropriate implementatio
    n in Blink
  * [Backport] CVE-2022-0116: Inappropriate implementation
    in Compositing
  * [Backport] CVE-2022-0289: Use after free in Safe browsing
  * [Backport] CVE-2022-0291: Inappropriate implementation
    in Storage
  * [Backport] CVE-2022-0293: Use after free in Web packaging
  * [Backport] CVE-2022-0298: Use after free in Scheduling
  * [Backport] CVE-2022-0305: Inappropriate implementation in
    Service Worker API
  * [Backport] CVE-2022-0306: Heap buffer overflow in PDFium
  * [Backport] CVE-2022-0310 and CVE-0311: Heap buffer overflow
    in Task Manager
  * [Backport] CVE-2022-0456: Use after free in Web Search
  * [Backport] CVE-2022-0459: Use after free in Screen Capture
  * [Backport] CVE-2022-0460: Use after free in Window Dialog
  * [Backport] CVE-2022-0461: Policy bypass in COOP
  * [Backport] CVE-2022-0606: Use after free in ANGLE
  * [Backport] CVE-2022-0607: Use after free in GPU
  * [Backport] CVE-2022-0608: Integer overflow in Mojo
  * [Backport] CVE-2022-0609: Use after free in Animation
  * [Backport] CVE-2022-0610: Inappropriate implementation
    in Gamepad API
  * [Backport] CVE-2022-0971 (boo#1197163)
  * [Backport] CVE-2022-1096 (boo#1197552)
  * [Backport] CVE-2022-23852
  * [Backport] Copy 'name_' member during StyleRuleProperty::Copy
  * [Backport] Security bug 1256885
  * [Backport] Security bug 1258603
  * [Backport] Security bug 1259557
  * [Backport] Security bug 1261415
  * [Backport] Security bug 1265570
  * [Backport] Security bug 1268448
  * [Backport] Security bug 1270014
  * [Backport] Security bug 1274113
  * [Backport] Security bug 1276331
  * [Backport] Security bug 1280743
  * [Backport] Security bug 1289394
  * [Backport] Security bug 1292537
  * [Backport] sandbox: build if glibc 2.34+ dynamic stack size
    is enabled
- Drop patches, now upstream:
  * CVE-2022-0971-qtwebengine-5.15.patch
  * CVE-2022-1096-qtwebengine-5.15.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1651060800">- Add libqt5-qtwebengine-rpmlintrc to silence the
  'shlib-policy-name-error' rpmlint error</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1651492800">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1654689600">- Update to version 5.15.10:
  * Fix top level build with no widget
  * Fix read-after-free on EGL extensions
  * Update Chromium
  * Add workaround for unstable gn on macOS in ci
  * Pass archiver to gn build
  * Fix navigation to non-local URLs
  * Add support for universal builds for qtwebengine and qtpdf
  * Enable Apple Silicon support
  * Fix cross compilation x86_64-&gt;arm64 on mac
  * Bump version to 5.15.10
  * CustomDialogs: Make custom input fields readable in dark mode
  * CookieBrowser: Make alternating rows readable in dark mode
  * Update Chromium:
  * Bump V8_PATCH_LEVEL
  * Fix clang set-but-unused-variable warning
  * Fix mac toolchain python linker script call
  * Fix missing dependency for gpu sources
  * Fix python calls
  * Fix undefined symbol for universal link
  * Quick fix for regression in service workers by reverting
    backports
  * [Backport] CVE-2022-0797: Out of bounds memory access
    in Mojo
  * [Backport] CVE-2022-1125
  * [Backport] CVE-2022-1138: Inappropriate implementation
    in Web Cursor.
  * [Backport] CVE-2022-1305: Use after free in storage
  * [Backport] CVE-2022-1310: Use after free in regular
    expressions
  * [Backport] CVE-2022-1314: Type Confusion in V8
  * [Backport] CVE-2022-1493: Use after free in Dev Tools
  * [Backport] On arm64 hosts, set host_cpu to 'arm64', not 'arm'
  * [Backport] Security Bug 1296876
  * [Backport] Security bug 1269999
  * [Backport] Security bug 1280852
  * [Backport] Security bug 1292905
  * [Backport] Security bug 1304659
  * [Backport] Security bug 1306507</changelog>
</package>
<package pkgid="3b1f61a443beb0489ababb16192ceeb3c1cf7f1646135cf85bf2c05673d9540a" name="librecad" arch="aarch64">
  <version epoch="0" ver="2.2.0~rc3" rel="bp154.3.3.1"/>
  <changelog author="jslaby@suse.com" date="1463400000">- Update to new upstream release 2.0.10:
  * the Arch paper sizes were not properly supported
  * the pen toolbar was wider than necessary on super HD displays
  * various memory leaks
  * build error when using boost version greater than 1.53
  * auto-save could not really be turned off
  * file dialog always opened with DXF, instead of the last chosen file type
  * the statusbar and statusbar font were not allowed to autosize
  * the fixed extension line length option was not working for dimensions
  * the program would crash after: modify action -&gt; undo -&gt; repeat modify
    action</changelog>
  <changelog author="jengelh@inai.de" date="1464091200">- Update to new upstream release 2.0.11
  * Updated translations. Added non-uniform knots support.
  * Added Edit - Device Options.
  * Eliminated crash on save when auto backup is off.
  * Eliminated invalid bounding boxes from auto zoom.</changelog>
  <changelog author="jslaby@suse.com" date="1465300800">- Update to new upstream release 2.1.0
  * new features
  * lot of bug fixes
  * other changes
  * see full changelog at:
    https://github.com/LibreCAD/ChangeLogs/blob/master/developers/r-a-v-a-s/2-1/2-1-0/2-1-0.md</changelog>
  <changelog author="jslaby@suse.com" date="1466164800">- add librecad-gcc6.patch</changelog>
  <changelog author="jengelh@inai.de" date="1467115200">- Update to new upstream release 2.1.1
  * Bugfixes:
  * draft mode was not set for new/opened drawings
  * performance did not improve when zooming into an area
  * certain polylines were not rendered properly
  * opening a file didn't restore the layer's construction state
  * the cursor was hidden for 'polyline from existing'
  * closing an inactive tab cleared the layer list</changelog>
  <changelog author="jslaby@suse.com" date="1474286400">- Update to new upstream release 2.1.2
  * wouldn't build with gcc 5.4 and 6
  * mouse cursor was missing for 'Arc Tangential'
  * right-click with plugins could cause a crash
  * construction lines were not drawn when the line segment was out of view
  * DXF files with comments were not properly loaded
  * drawings were not marked as modified after an 'undo'
  * the command line didn't accept numpad input
  * the command widget didn't activate properly when floating
- librecad-gcc6.patch: Remove (unneeded now)</changelog>
  <changelog author="jengelh@inai.de" date="1474977600">- Update to new upstream release 2.1.3
  * The Shift key had no effect and would not activate the
  command line.</changelog>
  <changelog author="jslaby@suse.com" date="1475928000">- add: ensured-all-objects-are-shown-when-a-layer-is-toggle.patch
  (from upstream)</changelog>
  <changelog author="adam.majer@suse.de" date="1485950400">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="jslaby@suse.com" date="1528718400">- add fix-build-with-Qt-5.11.patch</changelog>
  <changelog author="Jiri Slaby &lt;jslaby@suse.com&gt;" date="1559044800">- add 0001-fix-build-with-gcc-9.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1591531200">- Add fix-build-with-Qt-5.15.patch. Set CFLAGS+=-fcommon.</changelog>
  <changelog author="Jiri Slaby &lt;jslaby@suse.cz&gt;" date="1620129600">- add add-boost-tuple-include-to-fix-build.patch</changelog>
  <changelog author="Jiri Slaby &lt;jslaby@suse.cz&gt;" date="1640001600">- update to 2.2.0-rc3
  * major release
  * DWG imports are more reliable now
  * and a lot more of bugfixes and improvements
- remove (they are in upstream now)
  * 0001-fix-build-with-gcc-9.patch
  * add-boost-tuple-include-to-fix-build.patch
  * ensured-all-objects-are-shown-when-a-layer-is-toggle.patch
  * fix-build-with-Qt-5.11.patch
  * fix-build-with-Qt-5.15.patch
- remove qcad provides/obsoletes -- it's an ancient history</changelog>
  <changelog author="Jiri Slaby &lt;jslaby@suse.cz&gt;" date="1641038400">- fix paths creation (e.g. fonts loading) by:
  * 0001-Revert-AppImage-build-on-GitHub-Actions-with-go-appi.patch
  * 0002-Revert-RS_System-getDirectoryList-add-plugins-folder.patch
  * 0003-Revert-fix-RS_System-getDirectoryList-use-relative-p.patch
  (did the revert and waiting for the upstream fix)</changelog>
  <changelog author="Jiri Slaby &lt;jslaby@suse.cz&gt;" date="1641470400">- replace the revert by an upstream fix
  * add 0001-fixed-1488-getDirectoryList-failed-on-Linux-when-lib.patch
  * remove
    0001-Revert-AppImage-build-on-GitHub-Actions-with-go-appi.patch
    0002-Revert-RS_System-getDirectoryList-add-plugins-folder.patch
    0003-Revert-fix-RS_System-getDirectoryList-use-relative-p.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1642939200">- Replace "qt4" in description, the build does not use Qt4 anymore.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1648641600">- Strip excess blank fields from librecad.desktop:MimeType
  [boo#1197664]</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1651665600">- switch source urls to https</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1652702400">- Add 0001-Added-bounds-checking-to-CDataMoji-in-jww-parser.patch
  [boo#1195105] [CVE-2021-45341]
- Add 0001-Added-bounds-check-to-CDataList-in-JWW-parser.patch
  [boo#1195122] [CVE-2021-45342]</changelog>
</package>
<package pkgid="edd76bae00a9a926dea8231bd95e21ecf46d02d5009c05c822cbfbc747d6418e" name="librecad" arch="ppc64le">
  <version epoch="0" ver="2.2.0~rc3" rel="bp154.3.3.1"/>
  <changelog author="jslaby@suse.com" date="1463400000">- Update to new upstream release 2.0.10:
  * the Arch paper sizes were not properly supported
  * the pen toolbar was wider than necessary on super HD displays
  * various memory leaks
  * build error when using boost version greater than 1.53
  * auto-save could not really be turned off
  * file dialog always opened with DXF, instead of the last chosen file type
  * the statusbar and statusbar font were not allowed to autosize
  * the fixed extension line length option was not working for dimensions
  * the program would crash after: modify action -&gt; undo -&gt; repeat modify
    action</changelog>
  <changelog author="jengelh@inai.de" date="1464091200">- Update to new upstream release 2.0.11
  * Updated translations. Added non-uniform knots support.
  * Added Edit - Device Options.
  * Eliminated crash on save when auto backup is off.
  * Eliminated invalid bounding boxes from auto zoom.</changelog>
  <changelog author="jslaby@suse.com" date="1465300800">- Update to new upstream release 2.1.0
  * new features
  * lot of bug fixes
  * other changes
  * see full changelog at:
    https://github.com/LibreCAD/ChangeLogs/blob/master/developers/r-a-v-a-s/2-1/2-1-0/2-1-0.md</changelog>
  <changelog author="jslaby@suse.com" date="1466164800">- add librecad-gcc6.patch</changelog>
  <changelog author="jengelh@inai.de" date="1467115200">- Update to new upstream release 2.1.1
  * Bugfixes:
  * draft mode was not set for new/opened drawings
  * performance did not improve when zooming into an area
  * certain polylines were not rendered properly
  * opening a file didn't restore the layer's construction state
  * the cursor was hidden for 'polyline from existing'
  * closing an inactive tab cleared the layer list</changelog>
  <changelog author="jslaby@suse.com" date="1474286400">- Update to new upstream release 2.1.2
  * wouldn't build with gcc 5.4 and 6
  * mouse cursor was missing for 'Arc Tangential'
  * right-click with plugins could cause a crash
  * construction lines were not drawn when the line segment was out of view
  * DXF files with comments were not properly loaded
  * drawings were not marked as modified after an 'undo'
  * the command line didn't accept numpad input
  * the command widget didn't activate properly when floating
- librecad-gcc6.patch: Remove (unneeded now)</changelog>
  <changelog author="jengelh@inai.de" date="1474977600">- Update to new upstream release 2.1.3
  * The Shift key had no effect and would not activate the
  command line.</changelog>
  <changelog author="jslaby@suse.com" date="1475928000">- add: ensured-all-objects-are-shown-when-a-layer-is-toggle.patch
  (from upstream)</changelog>
  <changelog author="adam.majer@suse.de" date="1485950400">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="jslaby@suse.com" date="1528718400">- add fix-build-with-Qt-5.11.patch</changelog>
  <changelog author="Jiri Slaby &lt;jslaby@suse.com&gt;" date="1559044800">- add 0001-fix-build-with-gcc-9.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1591531200">- Add fix-build-with-Qt-5.15.patch. Set CFLAGS+=-fcommon.</changelog>
  <changelog author="Jiri Slaby &lt;jslaby@suse.cz&gt;" date="1620129600">- add add-boost-tuple-include-to-fix-build.patch</changelog>
  <changelog author="Jiri Slaby &lt;jslaby@suse.cz&gt;" date="1640001600">- update to 2.2.0-rc3
  * major release
  * DWG imports are more reliable now
  * and a lot more of bugfixes and improvements
- remove (they are in upstream now)
  * 0001-fix-build-with-gcc-9.patch
  * add-boost-tuple-include-to-fix-build.patch
  * ensured-all-objects-are-shown-when-a-layer-is-toggle.patch
  * fix-build-with-Qt-5.11.patch
  * fix-build-with-Qt-5.15.patch
- remove qcad provides/obsoletes -- it's an ancient history</changelog>
  <changelog author="Jiri Slaby &lt;jslaby@suse.cz&gt;" date="1641038400">- fix paths creation (e.g. fonts loading) by:
  * 0001-Revert-AppImage-build-on-GitHub-Actions-with-go-appi.patch
  * 0002-Revert-RS_System-getDirectoryList-add-plugins-folder.patch
  * 0003-Revert-fix-RS_System-getDirectoryList-use-relative-p.patch
  (did the revert and waiting for the upstream fix)</changelog>
  <changelog author="Jiri Slaby &lt;jslaby@suse.cz&gt;" date="1641470400">- replace the revert by an upstream fix
  * add 0001-fixed-1488-getDirectoryList-failed-on-Linux-when-lib.patch
  * remove
    0001-Revert-AppImage-build-on-GitHub-Actions-with-go-appi.patch
    0002-Revert-RS_System-getDirectoryList-add-plugins-folder.patch
    0003-Revert-fix-RS_System-getDirectoryList-use-relative-p.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1642939200">- Replace "qt4" in description, the build does not use Qt4 anymore.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1648641600">- Strip excess blank fields from librecad.desktop:MimeType
  [boo#1197664]</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1651665600">- switch source urls to https</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1652702400">- Add 0001-Added-bounds-checking-to-CDataMoji-in-jww-parser.patch
  [boo#1195105] [CVE-2021-45341]
- Add 0001-Added-bounds-check-to-CDataList-in-JWW-parser.patch
  [boo#1195122] [CVE-2021-45342]</changelog>
</package>
<package pkgid="2231cd731cfc6388ada9bf6a7aa7066a9b24da90232c074a1f8071f1bd7c53ec" name="librecad" arch="s390x">
  <version epoch="0" ver="2.2.0~rc3" rel="bp154.3.3.1"/>
  <changelog author="jslaby@suse.com" date="1463400000">- Update to new upstream release 2.0.10:
  * the Arch paper sizes were not properly supported
  * the pen toolbar was wider than necessary on super HD displays
  * various memory leaks
  * build error when using boost version greater than 1.53
  * auto-save could not really be turned off
  * file dialog always opened with DXF, instead of the last chosen file type
  * the statusbar and statusbar font were not allowed to autosize
  * the fixed extension line length option was not working for dimensions
  * the program would crash after: modify action -&gt; undo -&gt; repeat modify
    action</changelog>
  <changelog author="jengelh@inai.de" date="1464091200">- Update to new upstream release 2.0.11
  * Updated translations. Added non-uniform knots support.
  * Added Edit - Device Options.
  * Eliminated crash on save when auto backup is off.
  * Eliminated invalid bounding boxes from auto zoom.</changelog>
  <changelog author="jslaby@suse.com" date="1465300800">- Update to new upstream release 2.1.0
  * new features
  * lot of bug fixes
  * other changes
  * see full changelog at:
    https://github.com/LibreCAD/ChangeLogs/blob/master/developers/r-a-v-a-s/2-1/2-1-0/2-1-0.md</changelog>
  <changelog author="jslaby@suse.com" date="1466164800">- add librecad-gcc6.patch</changelog>
  <changelog author="jengelh@inai.de" date="1467115200">- Update to new upstream release 2.1.1
  * Bugfixes:
  * draft mode was not set for new/opened drawings
  * performance did not improve when zooming into an area
  * certain polylines were not rendered properly
  * opening a file didn't restore the layer's construction state
  * the cursor was hidden for 'polyline from existing'
  * closing an inactive tab cleared the layer list</changelog>
  <changelog author="jslaby@suse.com" date="1474286400">- Update to new upstream release 2.1.2
  * wouldn't build with gcc 5.4 and 6
  * mouse cursor was missing for 'Arc Tangential'
  * right-click with plugins could cause a crash
  * construction lines were not drawn when the line segment was out of view
  * DXF files with comments were not properly loaded
  * drawings were not marked as modified after an 'undo'
  * the command line didn't accept numpad input
  * the command widget didn't activate properly when floating
- librecad-gcc6.patch: Remove (unneeded now)</changelog>
  <changelog author="jengelh@inai.de" date="1474977600">- Update to new upstream release 2.1.3
  * The Shift key had no effect and would not activate the
  command line.</changelog>
  <changelog author="jslaby@suse.com" date="1475928000">- add: ensured-all-objects-are-shown-when-a-layer-is-toggle.patch
  (from upstream)</changelog>
  <changelog author="adam.majer@suse.de" date="1485950400">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="jslaby@suse.com" date="1528718400">- add fix-build-with-Qt-5.11.patch</changelog>
  <changelog author="Jiri Slaby &lt;jslaby@suse.com&gt;" date="1559044800">- add 0001-fix-build-with-gcc-9.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1591531200">- Add fix-build-with-Qt-5.15.patch. Set CFLAGS+=-fcommon.</changelog>
  <changelog author="Jiri Slaby &lt;jslaby@suse.cz&gt;" date="1620129600">- add add-boost-tuple-include-to-fix-build.patch</changelog>
  <changelog author="Jiri Slaby &lt;jslaby@suse.cz&gt;" date="1640001600">- update to 2.2.0-rc3
  * major release
  * DWG imports are more reliable now
  * and a lot more of bugfixes and improvements
- remove (they are in upstream now)
  * 0001-fix-build-with-gcc-9.patch
  * add-boost-tuple-include-to-fix-build.patch
  * ensured-all-objects-are-shown-when-a-layer-is-toggle.patch
  * fix-build-with-Qt-5.11.patch
  * fix-build-with-Qt-5.15.patch
- remove qcad provides/obsoletes -- it's an ancient history</changelog>
  <changelog author="Jiri Slaby &lt;jslaby@suse.cz&gt;" date="1641038400">- fix paths creation (e.g. fonts loading) by:
  * 0001-Revert-AppImage-build-on-GitHub-Actions-with-go-appi.patch
  * 0002-Revert-RS_System-getDirectoryList-add-plugins-folder.patch
  * 0003-Revert-fix-RS_System-getDirectoryList-use-relative-p.patch
  (did the revert and waiting for the upstream fix)</changelog>
  <changelog author="Jiri Slaby &lt;jslaby@suse.cz&gt;" date="1641470400">- replace the revert by an upstream fix
  * add 0001-fixed-1488-getDirectoryList-failed-on-Linux-when-lib.patch
  * remove
    0001-Revert-AppImage-build-on-GitHub-Actions-with-go-appi.patch
    0002-Revert-RS_System-getDirectoryList-add-plugins-folder.patch
    0003-Revert-fix-RS_System-getDirectoryList-use-relative-p.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1642939200">- Replace "qt4" in description, the build does not use Qt4 anymore.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1648641600">- Strip excess blank fields from librecad.desktop:MimeType
  [boo#1197664]</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1651665600">- switch source urls to https</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1652702400">- Add 0001-Added-bounds-checking-to-CDataMoji-in-jww-parser.patch
  [boo#1195105] [CVE-2021-45341]
- Add 0001-Added-bounds-check-to-CDataList-in-JWW-parser.patch
  [boo#1195122] [CVE-2021-45342]</changelog>
</package>
<package pkgid="96bb851926a7d12b0a2da786ed8605e0ebab17c5957c7e50d28ea1ead3c0a3c2" name="librecad" arch="src">
  <version epoch="0" ver="2.2.0~rc3" rel="bp154.3.3.1"/>
  <changelog author="jslaby@suse.com" date="1463400000">- Update to new upstream release 2.0.10:
  * the Arch paper sizes were not properly supported
  * the pen toolbar was wider than necessary on super HD displays
  * various memory leaks
  * build error when using boost version greater than 1.53
  * auto-save could not really be turned off
  * file dialog always opened with DXF, instead of the last chosen file type
  * the statusbar and statusbar font were not allowed to autosize
  * the fixed extension line length option was not working for dimensions
  * the program would crash after: modify action -&gt; undo -&gt; repeat modify
    action</changelog>
  <changelog author="jengelh@inai.de" date="1464091200">- Update to new upstream release 2.0.11
  * Updated translations. Added non-uniform knots support.
  * Added Edit - Device Options.
  * Eliminated crash on save when auto backup is off.
  * Eliminated invalid bounding boxes from auto zoom.</changelog>
  <changelog author="jslaby@suse.com" date="1465300800">- Update to new upstream release 2.1.0
  * new features
  * lot of bug fixes
  * other changes
  * see full changelog at:
    https://github.com/LibreCAD/ChangeLogs/blob/master/developers/r-a-v-a-s/2-1/2-1-0/2-1-0.md</changelog>
  <changelog author="jslaby@suse.com" date="1466164800">- add librecad-gcc6.patch</changelog>
  <changelog author="jengelh@inai.de" date="1467115200">- Update to new upstream release 2.1.1
  * Bugfixes:
  * draft mode was not set for new/opened drawings
  * performance did not improve when zooming into an area
  * certain polylines were not rendered properly
  * opening a file didn't restore the layer's construction state
  * the cursor was hidden for 'polyline from existing'
  * closing an inactive tab cleared the layer list</changelog>
  <changelog author="jslaby@suse.com" date="1474286400">- Update to new upstream release 2.1.2
  * wouldn't build with gcc 5.4 and 6
  * mouse cursor was missing for 'Arc Tangential'
  * right-click with plugins could cause a crash
  * construction lines were not drawn when the line segment was out of view
  * DXF files with comments were not properly loaded
  * drawings were not marked as modified after an 'undo'
  * the command line didn't accept numpad input
  * the command widget didn't activate properly when floating
- librecad-gcc6.patch: Remove (unneeded now)</changelog>
  <changelog author="jengelh@inai.de" date="1474977600">- Update to new upstream release 2.1.3
  * The Shift key had no effect and would not activate the
  command line.</changelog>
  <changelog author="jslaby@suse.com" date="1475928000">- add: ensured-all-objects-are-shown-when-a-layer-is-toggle.patch
  (from upstream)</changelog>
  <changelog author="adam.majer@suse.de" date="1485950400">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="jslaby@suse.com" date="1528718400">- add fix-build-with-Qt-5.11.patch</changelog>
  <changelog author="Jiri Slaby &lt;jslaby@suse.com&gt;" date="1559044800">- add 0001-fix-build-with-gcc-9.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1591531200">- Add fix-build-with-Qt-5.15.patch. Set CFLAGS+=-fcommon.</changelog>
  <changelog author="Jiri Slaby &lt;jslaby@suse.cz&gt;" date="1620129600">- add add-boost-tuple-include-to-fix-build.patch</changelog>
  <changelog author="Jiri Slaby &lt;jslaby@suse.cz&gt;" date="1640001600">- update to 2.2.0-rc3
  * major release
  * DWG imports are more reliable now
  * and a lot more of bugfixes and improvements
- remove (they are in upstream now)
  * 0001-fix-build-with-gcc-9.patch
  * add-boost-tuple-include-to-fix-build.patch
  * ensured-all-objects-are-shown-when-a-layer-is-toggle.patch
  * fix-build-with-Qt-5.11.patch
  * fix-build-with-Qt-5.15.patch
- remove qcad provides/obsoletes -- it's an ancient history</changelog>
  <changelog author="Jiri Slaby &lt;jslaby@suse.cz&gt;" date="1641038400">- fix paths creation (e.g. fonts loading) by:
  * 0001-Revert-AppImage-build-on-GitHub-Actions-with-go-appi.patch
  * 0002-Revert-RS_System-getDirectoryList-add-plugins-folder.patch
  * 0003-Revert-fix-RS_System-getDirectoryList-use-relative-p.patch
  (did the revert and waiting for the upstream fix)</changelog>
  <changelog author="Jiri Slaby &lt;jslaby@suse.cz&gt;" date="1641470400">- replace the revert by an upstream fix
  * add 0001-fixed-1488-getDirectoryList-failed-on-Linux-when-lib.patch
  * remove
    0001-Revert-AppImage-build-on-GitHub-Actions-with-go-appi.patch
    0002-Revert-RS_System-getDirectoryList-add-plugins-folder.patch
    0003-Revert-fix-RS_System-getDirectoryList-use-relative-p.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1642939200">- Replace "qt4" in description, the build does not use Qt4 anymore.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1648641600">- Strip excess blank fields from librecad.desktop:MimeType
  [boo#1197664]</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1651665600">- switch source urls to https</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1652702400">- Add 0001-Added-bounds-checking-to-CDataMoji-in-jww-parser.patch
  [boo#1195105] [CVE-2021-45341]
- Add 0001-Added-bounds-check-to-CDataList-in-JWW-parser.patch
  [boo#1195122] [CVE-2021-45342]</changelog>
</package>
<package pkgid="c62d98c05ab5df55007a51006f071964539d5bbf5b315c1704532f73a32be52e" name="librecad" arch="x86_64">
  <version epoch="0" ver="2.2.0~rc3" rel="bp154.3.3.1"/>
  <changelog author="jslaby@suse.com" date="1463400000">- Update to new upstream release 2.0.10:
  * the Arch paper sizes were not properly supported
  * the pen toolbar was wider than necessary on super HD displays
  * various memory leaks
  * build error when using boost version greater than 1.53
  * auto-save could not really be turned off
  * file dialog always opened with DXF, instead of the last chosen file type
  * the statusbar and statusbar font were not allowed to autosize
  * the fixed extension line length option was not working for dimensions
  * the program would crash after: modify action -&gt; undo -&gt; repeat modify
    action</changelog>
  <changelog author="jengelh@inai.de" date="1464091200">- Update to new upstream release 2.0.11
  * Updated translations. Added non-uniform knots support.
  * Added Edit - Device Options.
  * Eliminated crash on save when auto backup is off.
  * Eliminated invalid bounding boxes from auto zoom.</changelog>
  <changelog author="jslaby@suse.com" date="1465300800">- Update to new upstream release 2.1.0
  * new features
  * lot of bug fixes
  * other changes
  * see full changelog at:
    https://github.com/LibreCAD/ChangeLogs/blob/master/developers/r-a-v-a-s/2-1/2-1-0/2-1-0.md</changelog>
  <changelog author="jslaby@suse.com" date="1466164800">- add librecad-gcc6.patch</changelog>
  <changelog author="jengelh@inai.de" date="1467115200">- Update to new upstream release 2.1.1
  * Bugfixes:
  * draft mode was not set for new/opened drawings
  * performance did not improve when zooming into an area
  * certain polylines were not rendered properly
  * opening a file didn't restore the layer's construction state
  * the cursor was hidden for 'polyline from existing'
  * closing an inactive tab cleared the layer list</changelog>
  <changelog author="jslaby@suse.com" date="1474286400">- Update to new upstream release 2.1.2
  * wouldn't build with gcc 5.4 and 6
  * mouse cursor was missing for 'Arc Tangential'
  * right-click with plugins could cause a crash
  * construction lines were not drawn when the line segment was out of view
  * DXF files with comments were not properly loaded
  * drawings were not marked as modified after an 'undo'
  * the command line didn't accept numpad input
  * the command widget didn't activate properly when floating
- librecad-gcc6.patch: Remove (unneeded now)</changelog>
  <changelog author="jengelh@inai.de" date="1474977600">- Update to new upstream release 2.1.3
  * The Shift key had no effect and would not activate the
  command line.</changelog>
  <changelog author="jslaby@suse.com" date="1475928000">- add: ensured-all-objects-are-shown-when-a-layer-is-toggle.patch
  (from upstream)</changelog>
  <changelog author="adam.majer@suse.de" date="1485950400">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="jslaby@suse.com" date="1528718400">- add fix-build-with-Qt-5.11.patch</changelog>
  <changelog author="Jiri Slaby &lt;jslaby@suse.com&gt;" date="1559044800">- add 0001-fix-build-with-gcc-9.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1591531200">- Add fix-build-with-Qt-5.15.patch. Set CFLAGS+=-fcommon.</changelog>
  <changelog author="Jiri Slaby &lt;jslaby@suse.cz&gt;" date="1620129600">- add add-boost-tuple-include-to-fix-build.patch</changelog>
  <changelog author="Jiri Slaby &lt;jslaby@suse.cz&gt;" date="1640001600">- update to 2.2.0-rc3
  * major release
  * DWG imports are more reliable now
  * and a lot more of bugfixes and improvements
- remove (they are in upstream now)
  * 0001-fix-build-with-gcc-9.patch
  * add-boost-tuple-include-to-fix-build.patch
  * ensured-all-objects-are-shown-when-a-layer-is-toggle.patch
  * fix-build-with-Qt-5.11.patch
  * fix-build-with-Qt-5.15.patch
- remove qcad provides/obsoletes -- it's an ancient history</changelog>
  <changelog author="Jiri Slaby &lt;jslaby@suse.cz&gt;" date="1641038400">- fix paths creation (e.g. fonts loading) by:
  * 0001-Revert-AppImage-build-on-GitHub-Actions-with-go-appi.patch
  * 0002-Revert-RS_System-getDirectoryList-add-plugins-folder.patch
  * 0003-Revert-fix-RS_System-getDirectoryList-use-relative-p.patch
  (did the revert and waiting for the upstream fix)</changelog>
  <changelog author="Jiri Slaby &lt;jslaby@suse.cz&gt;" date="1641470400">- replace the revert by an upstream fix
  * add 0001-fixed-1488-getDirectoryList-failed-on-Linux-when-lib.patch
  * remove
    0001-Revert-AppImage-build-on-GitHub-Actions-with-go-appi.patch
    0002-Revert-RS_System-getDirectoryList-add-plugins-folder.patch
    0003-Revert-fix-RS_System-getDirectoryList-use-relative-p.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1642939200">- Replace "qt4" in description, the build does not use Qt4 anymore.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1648641600">- Strip excess blank fields from librecad.desktop:MimeType
  [boo#1197664]</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1651665600">- switch source urls to https</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1652702400">- Add 0001-Added-bounds-checking-to-CDataMoji-in-jww-parser.patch
  [boo#1195105] [CVE-2021-45341]
- Add 0001-Added-bounds-check-to-CDataList-in-JWW-parser.patch
  [boo#1195122] [CVE-2021-45342]</changelog>
</package>
<package pkgid="6c8b4b57cdef0c2edffe02afc82fe0727c1eb22f799de7bf5aed1f9f72a7db65" name="librecad-parts" arch="noarch">
  <version epoch="0" ver="2.2.0~rc3" rel="bp154.3.3.1"/>
  <changelog author="jslaby@suse.com" date="1463400000">- Update to new upstream release 2.0.10:
  * the Arch paper sizes were not properly supported
  * the pen toolbar was wider than necessary on super HD displays
  * various memory leaks
  * build error when using boost version greater than 1.53
  * auto-save could not really be turned off
  * file dialog always opened with DXF, instead of the last chosen file type
  * the statusbar and statusbar font were not allowed to autosize
  * the fixed extension line length option was not working for dimensions
  * the program would crash after: modify action -&gt; undo -&gt; repeat modify
    action</changelog>
  <changelog author="jengelh@inai.de" date="1464091200">- Update to new upstream release 2.0.11
  * Updated translations. Added non-uniform knots support.
  * Added Edit - Device Options.
  * Eliminated crash on save when auto backup is off.
  * Eliminated invalid bounding boxes from auto zoom.</changelog>
  <changelog author="jslaby@suse.com" date="1465300800">- Update to new upstream release 2.1.0
  * new features
  * lot of bug fixes
  * other changes
  * see full changelog at:
    https://github.com/LibreCAD/ChangeLogs/blob/master/developers/r-a-v-a-s/2-1/2-1-0/2-1-0.md</changelog>
  <changelog author="jslaby@suse.com" date="1466164800">- add librecad-gcc6.patch</changelog>
  <changelog author="jengelh@inai.de" date="1467115200">- Update to new upstream release 2.1.1
  * Bugfixes:
  * draft mode was not set for new/opened drawings
  * performance did not improve when zooming into an area
  * certain polylines were not rendered properly
  * opening a file didn't restore the layer's construction state
  * the cursor was hidden for 'polyline from existing'
  * closing an inactive tab cleared the layer list</changelog>
  <changelog author="jslaby@suse.com" date="1474286400">- Update to new upstream release 2.1.2
  * wouldn't build with gcc 5.4 and 6
  * mouse cursor was missing for 'Arc Tangential'
  * right-click with plugins could cause a crash
  * construction lines were not drawn when the line segment was out of view
  * DXF files with comments were not properly loaded
  * drawings were not marked as modified after an 'undo'
  * the command line didn't accept numpad input
  * the command widget didn't activate properly when floating
- librecad-gcc6.patch: Remove (unneeded now)</changelog>
  <changelog author="jengelh@inai.de" date="1474977600">- Update to new upstream release 2.1.3
  * The Shift key had no effect and would not activate the
  command line.</changelog>
  <changelog author="jslaby@suse.com" date="1475928000">- add: ensured-all-objects-are-shown-when-a-layer-is-toggle.patch
  (from upstream)</changelog>
  <changelog author="adam.majer@suse.de" date="1485950400">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="jslaby@suse.com" date="1528718400">- add fix-build-with-Qt-5.11.patch</changelog>
  <changelog author="Jiri Slaby &lt;jslaby@suse.com&gt;" date="1559044800">- add 0001-fix-build-with-gcc-9.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1591531200">- Add fix-build-with-Qt-5.15.patch. Set CFLAGS+=-fcommon.</changelog>
  <changelog author="Jiri Slaby &lt;jslaby@suse.cz&gt;" date="1620129600">- add add-boost-tuple-include-to-fix-build.patch</changelog>
  <changelog author="Jiri Slaby &lt;jslaby@suse.cz&gt;" date="1640001600">- update to 2.2.0-rc3
  * major release
  * DWG imports are more reliable now
  * and a lot more of bugfixes and improvements
- remove (they are in upstream now)
  * 0001-fix-build-with-gcc-9.patch
  * add-boost-tuple-include-to-fix-build.patch
  * ensured-all-objects-are-shown-when-a-layer-is-toggle.patch
  * fix-build-with-Qt-5.11.patch
  * fix-build-with-Qt-5.15.patch
- remove qcad provides/obsoletes -- it's an ancient history</changelog>
  <changelog author="Jiri Slaby &lt;jslaby@suse.cz&gt;" date="1641038400">- fix paths creation (e.g. fonts loading) by:
  * 0001-Revert-AppImage-build-on-GitHub-Actions-with-go-appi.patch
  * 0002-Revert-RS_System-getDirectoryList-add-plugins-folder.patch
  * 0003-Revert-fix-RS_System-getDirectoryList-use-relative-p.patch
  (did the revert and waiting for the upstream fix)</changelog>
  <changelog author="Jiri Slaby &lt;jslaby@suse.cz&gt;" date="1641470400">- replace the revert by an upstream fix
  * add 0001-fixed-1488-getDirectoryList-failed-on-Linux-when-lib.patch
  * remove
    0001-Revert-AppImage-build-on-GitHub-Actions-with-go-appi.patch
    0002-Revert-RS_System-getDirectoryList-add-plugins-folder.patch
    0003-Revert-fix-RS_System-getDirectoryList-use-relative-p.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1642939200">- Replace "qt4" in description, the build does not use Qt4 anymore.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1648641600">- Strip excess blank fields from librecad.desktop:MimeType
  [boo#1197664]</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1651665600">- switch source urls to https</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1652702400">- Add 0001-Added-bounds-checking-to-CDataMoji-in-jww-parser.patch
  [boo#1195105] [CVE-2021-45341]
- Add 0001-Added-bounds-check-to-CDataList-in-JWW-parser.patch
  [boo#1195122] [CVE-2021-45342]</changelog>
</package>
<package pkgid="853d22d00d087d6c7af5c9df81f3980b31762c1a942ea741bedf1e45054754a6" name="libredwg" arch="src">
  <version epoch="0" ver="0.12.5" rel="bp154.2.3.1"/>
  <changelog author="astieger@suse.com" date="1531224000">- initial version (0.5)</changelog>
  <changelog author="jengelh@inai.de" date="1531569600">- Trim redundant wording and future aims.</changelog>
  <changelog author="astieger@suse.com" date="1533816000">- CVE-2018-14524: double free (boo#1102702)
  add CVE-2018-14524.patch
- CVE-2018-14471: NULL pointer dereference DoS (boo#1102696)
  add CVE-2018-14471.patch</changelog>
  <changelog author="astieger@suse.com" date="1534248000">- update to 0.6:
  * API breaking changes:
    + Removed dwg_obj_proxy_get_reactors(), use dwg_obj_get_reactors() instead.
    + Renamed SORTENTSTABLE.owner_handle to SORTENTSTABLE.owner_dict.
    + Renamed all -as-rNNNN program options to --as-rNNNN.
  * a number of bug fixes, correctness fixes and memory leak fixes
  * Add support for more DWG objects
  * Add pkg-config file
- drop patches (upstream): CVE-2018-14524.patch, CVE-2018-14471.patch</changelog>
  <changelog author="astieger@suse.com" date="1541851200">- update to 0.6.2:
  * Improved handling of DWG files found in the wild</changelog>
  <changelog author="astieger@suse.com" date="1544443200">- update to 0.7:
  * add API to retrieve all objects in a DWG
  * various API breaking changes
  * Various fixes for memory leaks and double free and other issues</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1564660800">- update to 0.8:
  * add a new dynamic API, read and write all header and object
    fields by name
  * API breaking changes
  * Fix many errors in DXF output
  * Fix JSON output
  * Many more bug fixes to handle specific object types</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1572436800">- Update to release 0.9.1
  * Fixed more null pointer dereferences, overflows, hangs and
    memory leaks for fuzzed (i.e. illegal) DWGs.
- Update to release 0.9 [boo#1154080]
  * Added the DXF importer, using the new dynapi and the r2000
    encoder. Only for r2000 DXFs.
  * Added utf8text conversion functions to the dynapi.
  * Added 3DSOLID encoder.
  * Added APIs to find handles for names, searching in tables
    and dicts.
  * API breaking changes - see NEWS file in package.
  * Fixed null pointer dereferences, and memory leaks (except DXF
    importer)
    [boo#1129868, CVE-2019-9779]
    [boo#1129869, CVE-2019-9778]
    [boo#1129870, CVE-2019-9777]
    [boo#1129873, CVE-2019-9776]
    [boo#1129874, CVE-2019-9773]
    [boo#1129875, CVE-2019-9772]
    [boo#1129876, CVE-2019-9771]
    [boo#1129878, CVE-2019-9775]
    [boo#1129879, CVE-2019-9774]
    [boo#1129881, CVE-2019-9770]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1577620800">- Update to release 0.9.3
  * Added the -x,--extnames option to dwglayers for r13-r14 DWGs.
  * Fixed some leaks: SORTENTSTABLE, PROXY_ENTITY.ownerhandle
    for r13.
  * Add DICTIONARY.itemhandles[] for r13 and r14.
  * Fixed some dwglayers null pointer derefs, and flush its output
    for each layer.
  * Added several overflow checks from fuzzing
    [CVE-2019-20010, boo#1159825], [CVE-2019-20011, boo#1159826],
    [CVE-2019-20012, boo#1159827], [CVE-2019-20013, boo#1159828],
    [CVE-2019-20014, boo#1159831], [CVE-2019-20015, boo#1159832]
  * Disallow illegal SPLINE scenarios
    [CVE-2019-20009, boo#1159824]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1578571200">- Update to release 0.10
  * API breaking changes:
  * Added a new int *isnewp argument to all dynapi utf8text
    getters, if the returned string is freshly malloced or not.
  * removed the UNKNOWN supertype, there are only UNKNOWN_OBJ and
    UNKNOWN_ENT left, with common_entity_data.
  * renamed BLOCK_HEADER.preview_data to preview,
    preview_data_size to preview_size.
  * renamed SHAPE.shape_no to style_id.
  * renamed CLASS.wasazombie to is_zombie.
  * Bugfixes:
  * Harmonized INDXFB with INDXF, removed extra src/in_dxfb.c.
  * Fixed encoding of added r2000 AUXHEADER address.
  * Fixed EED encoding from dwgrewrite.
  * Add several checks against
    [CVE-2020-6609, boo#1160520], [CVE-2020-6610, boo#1160522],
    [CVE-2020-6611, boo#1160523], [CVE-2020-6612, boo#1160524],
    [CVE-2020-6613, boo#1160525], [CVE-2020-6614, boo#1160526],
    [CVE-2020-6615, boo#1160527]</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586692800">- update to 0.10.1:
  * Fixed dwg2SVG htmlescape overflows and off-by-ones
  * Removed direct usages of fprintf and stderr in the lib
  * Fuzzing fixes for dwg2SVG, dwgread
  * Fixed eed.raw leaks</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1597233600">- update to 0.11:
  * new programs dwgfilter, dxfwrite
  * improved file support for r2004+ (incomplete)
  * Add support for GeoJSON RFC794a godsend for the json importer)
  * API extensions and breaking changes</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1605614400">- Update to release 0.11.1
  * Fixed decode of Unicode string streams.
  * Fixed UCS-2 to UTF-8 conversion for the chars 128-255.
  * Moved PSPACE entities from BLOCKS to ENTITIES
  * Fixed \r\n quoting in DXF texts
  * Generalize and fix DXF text splitup into 255 chunks and
    quoting, add basic shift-jis quoting support for Katagana and
    Hiragana letters (Japanese \M+1xxxx =&gt; Unicode \U+XXXX)
  * Added indxf dwg_has_subclass check to avoid buffer overflows
    when writing to wrong subclasses.
  * Improved SAB 2 to SAT 1 conversion: Split overlarge blocks
    into block_size of max 4096. Add "^ " quoting rule.
  * Fixed decode of empty classes section, esp. for r13c3 and
    r14.
  * Keep IDBUFFER for old DXFs (r13-r14)
  * Fixed SummaryInfo types from T to TU16, relevant for DXF
    headers too.
  * Add missing UTF-8 conversion in geojson for TEXT, MTEXT,
    GEOPOSITIONMARKER.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1644753600">- Update to release 0.12.5 [boo#1193372] [CVE-2021-28237]
  * Restricted accepted DXF objects to all stable and unstable
    classes, minus MATERIAL, ARC_DIMENSION, SUN, PROXY*. I.e.
    most unstable objects do not allow unknown DXF codes anymore.
    This fixed most oss-fuzz errors.</changelog>
</package>
<package pkgid="93e2b451f763b09eaaf5bc2450a9f895534a4d1ed5efd017ab6ddc87bdb02110" name="libredwg-devel" arch="aarch64">
  <version epoch="0" ver="0.12.5" rel="bp154.2.3.1"/>
  <changelog author="astieger@suse.com" date="1531224000">- initial version (0.5)</changelog>
  <changelog author="jengelh@inai.de" date="1531569600">- Trim redundant wording and future aims.</changelog>
  <changelog author="astieger@suse.com" date="1533816000">- CVE-2018-14524: double free (boo#1102702)
  add CVE-2018-14524.patch
- CVE-2018-14471: NULL pointer dereference DoS (boo#1102696)
  add CVE-2018-14471.patch</changelog>
  <changelog author="astieger@suse.com" date="1534248000">- update to 0.6:
  * API breaking changes:
    + Removed dwg_obj_proxy_get_reactors(), use dwg_obj_get_reactors() instead.
    + Renamed SORTENTSTABLE.owner_handle to SORTENTSTABLE.owner_dict.
    + Renamed all -as-rNNNN program options to --as-rNNNN.
  * a number of bug fixes, correctness fixes and memory leak fixes
  * Add support for more DWG objects
  * Add pkg-config file
- drop patches (upstream): CVE-2018-14524.patch, CVE-2018-14471.patch</changelog>
  <changelog author="astieger@suse.com" date="1541851200">- update to 0.6.2:
  * Improved handling of DWG files found in the wild</changelog>
  <changelog author="astieger@suse.com" date="1544443200">- update to 0.7:
  * add API to retrieve all objects in a DWG
  * various API breaking changes
  * Various fixes for memory leaks and double free and other issues</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1564660800">- update to 0.8:
  * add a new dynamic API, read and write all header and object
    fields by name
  * API breaking changes
  * Fix many errors in DXF output
  * Fix JSON output
  * Many more bug fixes to handle specific object types</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1572436800">- Update to release 0.9.1
  * Fixed more null pointer dereferences, overflows, hangs and
    memory leaks for fuzzed (i.e. illegal) DWGs.
- Update to release 0.9 [boo#1154080]
  * Added the DXF importer, using the new dynapi and the r2000
    encoder. Only for r2000 DXFs.
  * Added utf8text conversion functions to the dynapi.
  * Added 3DSOLID encoder.
  * Added APIs to find handles for names, searching in tables
    and dicts.
  * API breaking changes - see NEWS file in package.
  * Fixed null pointer dereferences, and memory leaks (except DXF
    importer)
    [boo#1129868, CVE-2019-9779]
    [boo#1129869, CVE-2019-9778]
    [boo#1129870, CVE-2019-9777]
    [boo#1129873, CVE-2019-9776]
    [boo#1129874, CVE-2019-9773]
    [boo#1129875, CVE-2019-9772]
    [boo#1129876, CVE-2019-9771]
    [boo#1129878, CVE-2019-9775]
    [boo#1129879, CVE-2019-9774]
    [boo#1129881, CVE-2019-9770]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1577620800">- Update to release 0.9.3
  * Added the -x,--extnames option to dwglayers for r13-r14 DWGs.
  * Fixed some leaks: SORTENTSTABLE, PROXY_ENTITY.ownerhandle
    for r13.
  * Add DICTIONARY.itemhandles[] for r13 and r14.
  * Fixed some dwglayers null pointer derefs, and flush its output
    for each layer.
  * Added several overflow checks from fuzzing
    [CVE-2019-20010, boo#1159825], [CVE-2019-20011, boo#1159826],
    [CVE-2019-20012, boo#1159827], [CVE-2019-20013, boo#1159828],
    [CVE-2019-20014, boo#1159831], [CVE-2019-20015, boo#1159832]
  * Disallow illegal SPLINE scenarios
    [CVE-2019-20009, boo#1159824]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1578571200">- Update to release 0.10
  * API breaking changes:
  * Added a new int *isnewp argument to all dynapi utf8text
    getters, if the returned string is freshly malloced or not.
  * removed the UNKNOWN supertype, there are only UNKNOWN_OBJ and
    UNKNOWN_ENT left, with common_entity_data.
  * renamed BLOCK_HEADER.preview_data to preview,
    preview_data_size to preview_size.
  * renamed SHAPE.shape_no to style_id.
  * renamed CLASS.wasazombie to is_zombie.
  * Bugfixes:
  * Harmonized INDXFB with INDXF, removed extra src/in_dxfb.c.
  * Fixed encoding of added r2000 AUXHEADER address.
  * Fixed EED encoding from dwgrewrite.
  * Add several checks against
    [CVE-2020-6609, boo#1160520], [CVE-2020-6610, boo#1160522],
    [CVE-2020-6611, boo#1160523], [CVE-2020-6612, boo#1160524],
    [CVE-2020-6613, boo#1160525], [CVE-2020-6614, boo#1160526],
    [CVE-2020-6615, boo#1160527]</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586692800">- update to 0.10.1:
  * Fixed dwg2SVG htmlescape overflows and off-by-ones
  * Removed direct usages of fprintf and stderr in the lib
  * Fuzzing fixes for dwg2SVG, dwgread
  * Fixed eed.raw leaks</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1597233600">- update to 0.11:
  * new programs dwgfilter, dxfwrite
  * improved file support for r2004+ (incomplete)
  * Add support for GeoJSON RFC794a godsend for the json importer)
  * API extensions and breaking changes</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1605614400">- Update to release 0.11.1
  * Fixed decode of Unicode string streams.
  * Fixed UCS-2 to UTF-8 conversion for the chars 128-255.
  * Moved PSPACE entities from BLOCKS to ENTITIES
  * Fixed \r\n quoting in DXF texts
  * Generalize and fix DXF text splitup into 255 chunks and
    quoting, add basic shift-jis quoting support for Katagana and
    Hiragana letters (Japanese \M+1xxxx =&gt; Unicode \U+XXXX)
  * Added indxf dwg_has_subclass check to avoid buffer overflows
    when writing to wrong subclasses.
  * Improved SAB 2 to SAT 1 conversion: Split overlarge blocks
    into block_size of max 4096. Add "^ " quoting rule.
  * Fixed decode of empty classes section, esp. for r13c3 and
    r14.
  * Keep IDBUFFER for old DXFs (r13-r14)
  * Fixed SummaryInfo types from T to TU16, relevant for DXF
    headers too.
  * Add missing UTF-8 conversion in geojson for TEXT, MTEXT,
    GEOPOSITIONMARKER.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1644753600">- Update to release 0.12.5 [boo#1193372] [CVE-2021-28237]
  * Restricted accepted DXF objects to all stable and unstable
    classes, minus MATERIAL, ARC_DIMENSION, SUN, PROXY*. I.e.
    most unstable objects do not allow unknown DXF codes anymore.
    This fixed most oss-fuzz errors.</changelog>
</package>
<package pkgid="d6debe5622173fa8dda8d6cf558ca4b57114a6262d8a204012f2e03f46256c33" name="libredwg-devel" arch="i586">
  <version epoch="0" ver="0.12.5" rel="bp154.2.3.1"/>
  <changelog author="astieger@suse.com" date="1531224000">- initial version (0.5)</changelog>
  <changelog author="jengelh@inai.de" date="1531569600">- Trim redundant wording and future aims.</changelog>
  <changelog author="astieger@suse.com" date="1533816000">- CVE-2018-14524: double free (boo#1102702)
  add CVE-2018-14524.patch
- CVE-2018-14471: NULL pointer dereference DoS (boo#1102696)
  add CVE-2018-14471.patch</changelog>
  <changelog author="astieger@suse.com" date="1534248000">- update to 0.6:
  * API breaking changes:
    + Removed dwg_obj_proxy_get_reactors(), use dwg_obj_get_reactors() instead.
    + Renamed SORTENTSTABLE.owner_handle to SORTENTSTABLE.owner_dict.
    + Renamed all -as-rNNNN program options to --as-rNNNN.
  * a number of bug fixes, correctness fixes and memory leak fixes
  * Add support for more DWG objects
  * Add pkg-config file
- drop patches (upstream): CVE-2018-14524.patch, CVE-2018-14471.patch</changelog>
  <changelog author="astieger@suse.com" date="1541851200">- update to 0.6.2:
  * Improved handling of DWG files found in the wild</changelog>
  <changelog author="astieger@suse.com" date="1544443200">- update to 0.7:
  * add API to retrieve all objects in a DWG
  * various API breaking changes
  * Various fixes for memory leaks and double free and other issues</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1564660800">- update to 0.8:
  * add a new dynamic API, read and write all header and object
    fields by name
  * API breaking changes
  * Fix many errors in DXF output
  * Fix JSON output
  * Many more bug fixes to handle specific object types</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1572436800">- Update to release 0.9.1
  * Fixed more null pointer dereferences, overflows, hangs and
    memory leaks for fuzzed (i.e. illegal) DWGs.
- Update to release 0.9 [boo#1154080]
  * Added the DXF importer, using the new dynapi and the r2000
    encoder. Only for r2000 DXFs.
  * Added utf8text conversion functions to the dynapi.
  * Added 3DSOLID encoder.
  * Added APIs to find handles for names, searching in tables
    and dicts.
  * API breaking changes - see NEWS file in package.
  * Fixed null pointer dereferences, and memory leaks (except DXF
    importer)
    [boo#1129868, CVE-2019-9779]
    [boo#1129869, CVE-2019-9778]
    [boo#1129870, CVE-2019-9777]
    [boo#1129873, CVE-2019-9776]
    [boo#1129874, CVE-2019-9773]
    [boo#1129875, CVE-2019-9772]
    [boo#1129876, CVE-2019-9771]
    [boo#1129878, CVE-2019-9775]
    [boo#1129879, CVE-2019-9774]
    [boo#1129881, CVE-2019-9770]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1577620800">- Update to release 0.9.3
  * Added the -x,--extnames option to dwglayers for r13-r14 DWGs.
  * Fixed some leaks: SORTENTSTABLE, PROXY_ENTITY.ownerhandle
    for r13.
  * Add DICTIONARY.itemhandles[] for r13 and r14.
  * Fixed some dwglayers null pointer derefs, and flush its output
    for each layer.
  * Added several overflow checks from fuzzing
    [CVE-2019-20010, boo#1159825], [CVE-2019-20011, boo#1159826],
    [CVE-2019-20012, boo#1159827], [CVE-2019-20013, boo#1159828],
    [CVE-2019-20014, boo#1159831], [CVE-2019-20015, boo#1159832]
  * Disallow illegal SPLINE scenarios
    [CVE-2019-20009, boo#1159824]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1578571200">- Update to release 0.10
  * API breaking changes:
  * Added a new int *isnewp argument to all dynapi utf8text
    getters, if the returned string is freshly malloced or not.
  * removed the UNKNOWN supertype, there are only UNKNOWN_OBJ and
    UNKNOWN_ENT left, with common_entity_data.
  * renamed BLOCK_HEADER.preview_data to preview,
    preview_data_size to preview_size.
  * renamed SHAPE.shape_no to style_id.
  * renamed CLASS.wasazombie to is_zombie.
  * Bugfixes:
  * Harmonized INDXFB with INDXF, removed extra src/in_dxfb.c.
  * Fixed encoding of added r2000 AUXHEADER address.
  * Fixed EED encoding from dwgrewrite.
  * Add several checks against
    [CVE-2020-6609, boo#1160520], [CVE-2020-6610, boo#1160522],
    [CVE-2020-6611, boo#1160523], [CVE-2020-6612, boo#1160524],
    [CVE-2020-6613, boo#1160525], [CVE-2020-6614, boo#1160526],
    [CVE-2020-6615, boo#1160527]</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586692800">- update to 0.10.1:
  * Fixed dwg2SVG htmlescape overflows and off-by-ones
  * Removed direct usages of fprintf and stderr in the lib
  * Fuzzing fixes for dwg2SVG, dwgread
  * Fixed eed.raw leaks</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1597233600">- update to 0.11:
  * new programs dwgfilter, dxfwrite
  * improved file support for r2004+ (incomplete)
  * Add support for GeoJSON RFC794a godsend for the json importer)
  * API extensions and breaking changes</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1605614400">- Update to release 0.11.1
  * Fixed decode of Unicode string streams.
  * Fixed UCS-2 to UTF-8 conversion for the chars 128-255.
  * Moved PSPACE entities from BLOCKS to ENTITIES
  * Fixed \r\n quoting in DXF texts
  * Generalize and fix DXF text splitup into 255 chunks and
    quoting, add basic shift-jis quoting support for Katagana and
    Hiragana letters (Japanese \M+1xxxx =&gt; Unicode \U+XXXX)
  * Added indxf dwg_has_subclass check to avoid buffer overflows
    when writing to wrong subclasses.
  * Improved SAB 2 to SAT 1 conversion: Split overlarge blocks
    into block_size of max 4096. Add "^ " quoting rule.
  * Fixed decode of empty classes section, esp. for r13c3 and
    r14.
  * Keep IDBUFFER for old DXFs (r13-r14)
  * Fixed SummaryInfo types from T to TU16, relevant for DXF
    headers too.
  * Add missing UTF-8 conversion in geojson for TEXT, MTEXT,
    GEOPOSITIONMARKER.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1644753600">- Update to release 0.12.5 [boo#1193372] [CVE-2021-28237]
  * Restricted accepted DXF objects to all stable and unstable
    classes, minus MATERIAL, ARC_DIMENSION, SUN, PROXY*. I.e.
    most unstable objects do not allow unknown DXF codes anymore.
    This fixed most oss-fuzz errors.</changelog>
</package>
<package pkgid="6208fe12b46b66629909b451d0efc9b51a155e6d21573306a1e68d782866eba8" name="libredwg-devel" arch="ppc64le">
  <version epoch="0" ver="0.12.5" rel="bp154.2.3.1"/>
  <changelog author="astieger@suse.com" date="1531224000">- initial version (0.5)</changelog>
  <changelog author="jengelh@inai.de" date="1531569600">- Trim redundant wording and future aims.</changelog>
  <changelog author="astieger@suse.com" date="1533816000">- CVE-2018-14524: double free (boo#1102702)
  add CVE-2018-14524.patch
- CVE-2018-14471: NULL pointer dereference DoS (boo#1102696)
  add CVE-2018-14471.patch</changelog>
  <changelog author="astieger@suse.com" date="1534248000">- update to 0.6:
  * API breaking changes:
    + Removed dwg_obj_proxy_get_reactors(), use dwg_obj_get_reactors() instead.
    + Renamed SORTENTSTABLE.owner_handle to SORTENTSTABLE.owner_dict.
    + Renamed all -as-rNNNN program options to --as-rNNNN.
  * a number of bug fixes, correctness fixes and memory leak fixes
  * Add support for more DWG objects
  * Add pkg-config file
- drop patches (upstream): CVE-2018-14524.patch, CVE-2018-14471.patch</changelog>
  <changelog author="astieger@suse.com" date="1541851200">- update to 0.6.2:
  * Improved handling of DWG files found in the wild</changelog>
  <changelog author="astieger@suse.com" date="1544443200">- update to 0.7:
  * add API to retrieve all objects in a DWG
  * various API breaking changes
  * Various fixes for memory leaks and double free and other issues</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1564660800">- update to 0.8:
  * add a new dynamic API, read and write all header and object
    fields by name
  * API breaking changes
  * Fix many errors in DXF output
  * Fix JSON output
  * Many more bug fixes to handle specific object types</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1572436800">- Update to release 0.9.1
  * Fixed more null pointer dereferences, overflows, hangs and
    memory leaks for fuzzed (i.e. illegal) DWGs.
- Update to release 0.9 [boo#1154080]
  * Added the DXF importer, using the new dynapi and the r2000
    encoder. Only for r2000 DXFs.
  * Added utf8text conversion functions to the dynapi.
  * Added 3DSOLID encoder.
  * Added APIs to find handles for names, searching in tables
    and dicts.
  * API breaking changes - see NEWS file in package.
  * Fixed null pointer dereferences, and memory leaks (except DXF
    importer)
    [boo#1129868, CVE-2019-9779]
    [boo#1129869, CVE-2019-9778]
    [boo#1129870, CVE-2019-9777]
    [boo#1129873, CVE-2019-9776]
    [boo#1129874, CVE-2019-9773]
    [boo#1129875, CVE-2019-9772]
    [boo#1129876, CVE-2019-9771]
    [boo#1129878, CVE-2019-9775]
    [boo#1129879, CVE-2019-9774]
    [boo#1129881, CVE-2019-9770]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1577620800">- Update to release 0.9.3
  * Added the -x,--extnames option to dwglayers for r13-r14 DWGs.
  * Fixed some leaks: SORTENTSTABLE, PROXY_ENTITY.ownerhandle
    for r13.
  * Add DICTIONARY.itemhandles[] for r13 and r14.
  * Fixed some dwglayers null pointer derefs, and flush its output
    for each layer.
  * Added several overflow checks from fuzzing
    [CVE-2019-20010, boo#1159825], [CVE-2019-20011, boo#1159826],
    [CVE-2019-20012, boo#1159827], [CVE-2019-20013, boo#1159828],
    [CVE-2019-20014, boo#1159831], [CVE-2019-20015, boo#1159832]
  * Disallow illegal SPLINE scenarios
    [CVE-2019-20009, boo#1159824]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1578571200">- Update to release 0.10
  * API breaking changes:
  * Added a new int *isnewp argument to all dynapi utf8text
    getters, if the returned string is freshly malloced or not.
  * removed the UNKNOWN supertype, there are only UNKNOWN_OBJ and
    UNKNOWN_ENT left, with common_entity_data.
  * renamed BLOCK_HEADER.preview_data to preview,
    preview_data_size to preview_size.
  * renamed SHAPE.shape_no to style_id.
  * renamed CLASS.wasazombie to is_zombie.
  * Bugfixes:
  * Harmonized INDXFB with INDXF, removed extra src/in_dxfb.c.
  * Fixed encoding of added r2000 AUXHEADER address.
  * Fixed EED encoding from dwgrewrite.
  * Add several checks against
    [CVE-2020-6609, boo#1160520], [CVE-2020-6610, boo#1160522],
    [CVE-2020-6611, boo#1160523], [CVE-2020-6612, boo#1160524],
    [CVE-2020-6613, boo#1160525], [CVE-2020-6614, boo#1160526],
    [CVE-2020-6615, boo#1160527]</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586692800">- update to 0.10.1:
  * Fixed dwg2SVG htmlescape overflows and off-by-ones
  * Removed direct usages of fprintf and stderr in the lib
  * Fuzzing fixes for dwg2SVG, dwgread
  * Fixed eed.raw leaks</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1597233600">- update to 0.11:
  * new programs dwgfilter, dxfwrite
  * improved file support for r2004+ (incomplete)
  * Add support for GeoJSON RFC794a godsend for the json importer)
  * API extensions and breaking changes</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1605614400">- Update to release 0.11.1
  * Fixed decode of Unicode string streams.
  * Fixed UCS-2 to UTF-8 conversion for the chars 128-255.
  * Moved PSPACE entities from BLOCKS to ENTITIES
  * Fixed \r\n quoting in DXF texts
  * Generalize and fix DXF text splitup into 255 chunks and
    quoting, add basic shift-jis quoting support for Katagana and
    Hiragana letters (Japanese \M+1xxxx =&gt; Unicode \U+XXXX)
  * Added indxf dwg_has_subclass check to avoid buffer overflows
    when writing to wrong subclasses.
  * Improved SAB 2 to SAT 1 conversion: Split overlarge blocks
    into block_size of max 4096. Add "^ " quoting rule.
  * Fixed decode of empty classes section, esp. for r13c3 and
    r14.
  * Keep IDBUFFER for old DXFs (r13-r14)
  * Fixed SummaryInfo types from T to TU16, relevant for DXF
    headers too.
  * Add missing UTF-8 conversion in geojson for TEXT, MTEXT,
    GEOPOSITIONMARKER.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1644753600">- Update to release 0.12.5 [boo#1193372] [CVE-2021-28237]
  * Restricted accepted DXF objects to all stable and unstable
    classes, minus MATERIAL, ARC_DIMENSION, SUN, PROXY*. I.e.
    most unstable objects do not allow unknown DXF codes anymore.
    This fixed most oss-fuzz errors.</changelog>
</package>
<package pkgid="cb671cef3e0bb57576d81ba970faa5d160c42a51563917daa8d0102fbbd82896" name="libredwg-devel" arch="s390x">
  <version epoch="0" ver="0.12.5" rel="bp154.2.3.1"/>
  <changelog author="astieger@suse.com" date="1531224000">- initial version (0.5)</changelog>
  <changelog author="jengelh@inai.de" date="1531569600">- Trim redundant wording and future aims.</changelog>
  <changelog author="astieger@suse.com" date="1533816000">- CVE-2018-14524: double free (boo#1102702)
  add CVE-2018-14524.patch
- CVE-2018-14471: NULL pointer dereference DoS (boo#1102696)
  add CVE-2018-14471.patch</changelog>
  <changelog author="astieger@suse.com" date="1534248000">- update to 0.6:
  * API breaking changes:
    + Removed dwg_obj_proxy_get_reactors(), use dwg_obj_get_reactors() instead.
    + Renamed SORTENTSTABLE.owner_handle to SORTENTSTABLE.owner_dict.
    + Renamed all -as-rNNNN program options to --as-rNNNN.
  * a number of bug fixes, correctness fixes and memory leak fixes
  * Add support for more DWG objects
  * Add pkg-config file
- drop patches (upstream): CVE-2018-14524.patch, CVE-2018-14471.patch</changelog>
  <changelog author="astieger@suse.com" date="1541851200">- update to 0.6.2:
  * Improved handling of DWG files found in the wild</changelog>
  <changelog author="astieger@suse.com" date="1544443200">- update to 0.7:
  * add API to retrieve all objects in a DWG
  * various API breaking changes
  * Various fixes for memory leaks and double free and other issues</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1564660800">- update to 0.8:
  * add a new dynamic API, read and write all header and object
    fields by name
  * API breaking changes
  * Fix many errors in DXF output
  * Fix JSON output
  * Many more bug fixes to handle specific object types</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1572436800">- Update to release 0.9.1
  * Fixed more null pointer dereferences, overflows, hangs and
    memory leaks for fuzzed (i.e. illegal) DWGs.
- Update to release 0.9 [boo#1154080]
  * Added the DXF importer, using the new dynapi and the r2000
    encoder. Only for r2000 DXFs.
  * Added utf8text conversion functions to the dynapi.
  * Added 3DSOLID encoder.
  * Added APIs to find handles for names, searching in tables
    and dicts.
  * API breaking changes - see NEWS file in package.
  * Fixed null pointer dereferences, and memory leaks (except DXF
    importer)
    [boo#1129868, CVE-2019-9779]
    [boo#1129869, CVE-2019-9778]
    [boo#1129870, CVE-2019-9777]
    [boo#1129873, CVE-2019-9776]
    [boo#1129874, CVE-2019-9773]
    [boo#1129875, CVE-2019-9772]
    [boo#1129876, CVE-2019-9771]
    [boo#1129878, CVE-2019-9775]
    [boo#1129879, CVE-2019-9774]
    [boo#1129881, CVE-2019-9770]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1577620800">- Update to release 0.9.3
  * Added the -x,--extnames option to dwglayers for r13-r14 DWGs.
  * Fixed some leaks: SORTENTSTABLE, PROXY_ENTITY.ownerhandle
    for r13.
  * Add DICTIONARY.itemhandles[] for r13 and r14.
  * Fixed some dwglayers null pointer derefs, and flush its output
    for each layer.
  * Added several overflow checks from fuzzing
    [CVE-2019-20010, boo#1159825], [CVE-2019-20011, boo#1159826],
    [CVE-2019-20012, boo#1159827], [CVE-2019-20013, boo#1159828],
    [CVE-2019-20014, boo#1159831], [CVE-2019-20015, boo#1159832]
  * Disallow illegal SPLINE scenarios
    [CVE-2019-20009, boo#1159824]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1578571200">- Update to release 0.10
  * API breaking changes:
  * Added a new int *isnewp argument to all dynapi utf8text
    getters, if the returned string is freshly malloced or not.
  * removed the UNKNOWN supertype, there are only UNKNOWN_OBJ and
    UNKNOWN_ENT left, with common_entity_data.
  * renamed BLOCK_HEADER.preview_data to preview,
    preview_data_size to preview_size.
  * renamed SHAPE.shape_no to style_id.
  * renamed CLASS.wasazombie to is_zombie.
  * Bugfixes:
  * Harmonized INDXFB with INDXF, removed extra src/in_dxfb.c.
  * Fixed encoding of added r2000 AUXHEADER address.
  * Fixed EED encoding from dwgrewrite.
  * Add several checks against
    [CVE-2020-6609, boo#1160520], [CVE-2020-6610, boo#1160522],
    [CVE-2020-6611, boo#1160523], [CVE-2020-6612, boo#1160524],
    [CVE-2020-6613, boo#1160525], [CVE-2020-6614, boo#1160526],
    [CVE-2020-6615, boo#1160527]</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586692800">- update to 0.10.1:
  * Fixed dwg2SVG htmlescape overflows and off-by-ones
  * Removed direct usages of fprintf and stderr in the lib
  * Fuzzing fixes for dwg2SVG, dwgread
  * Fixed eed.raw leaks</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1597233600">- update to 0.11:
  * new programs dwgfilter, dxfwrite
  * improved file support for r2004+ (incomplete)
  * Add support for GeoJSON RFC794a godsend for the json importer)
  * API extensions and breaking changes</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1605614400">- Update to release 0.11.1
  * Fixed decode of Unicode string streams.
  * Fixed UCS-2 to UTF-8 conversion for the chars 128-255.
  * Moved PSPACE entities from BLOCKS to ENTITIES
  * Fixed \r\n quoting in DXF texts
  * Generalize and fix DXF text splitup into 255 chunks and
    quoting, add basic shift-jis quoting support for Katagana and
    Hiragana letters (Japanese \M+1xxxx =&gt; Unicode \U+XXXX)
  * Added indxf dwg_has_subclass check to avoid buffer overflows
    when writing to wrong subclasses.
  * Improved SAB 2 to SAT 1 conversion: Split overlarge blocks
    into block_size of max 4096. Add "^ " quoting rule.
  * Fixed decode of empty classes section, esp. for r13c3 and
    r14.
  * Keep IDBUFFER for old DXFs (r13-r14)
  * Fixed SummaryInfo types from T to TU16, relevant for DXF
    headers too.
  * Add missing UTF-8 conversion in geojson for TEXT, MTEXT,
    GEOPOSITIONMARKER.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1644753600">- Update to release 0.12.5 [boo#1193372] [CVE-2021-28237]
  * Restricted accepted DXF objects to all stable and unstable
    classes, minus MATERIAL, ARC_DIMENSION, SUN, PROXY*. I.e.
    most unstable objects do not allow unknown DXF codes anymore.
    This fixed most oss-fuzz errors.</changelog>
</package>
<package pkgid="5f9e33a6b62e44f3e67cdbc0c6f95363e76a95279e5e2da7c8debe5c5d64fbce" name="libredwg-devel" arch="x86_64">
  <version epoch="0" ver="0.12.5" rel="bp154.2.3.1"/>
  <changelog author="astieger@suse.com" date="1531224000">- initial version (0.5)</changelog>
  <changelog author="jengelh@inai.de" date="1531569600">- Trim redundant wording and future aims.</changelog>
  <changelog author="astieger@suse.com" date="1533816000">- CVE-2018-14524: double free (boo#1102702)
  add CVE-2018-14524.patch
- CVE-2018-14471: NULL pointer dereference DoS (boo#1102696)
  add CVE-2018-14471.patch</changelog>
  <changelog author="astieger@suse.com" date="1534248000">- update to 0.6:
  * API breaking changes:
    + Removed dwg_obj_proxy_get_reactors(), use dwg_obj_get_reactors() instead.
    + Renamed SORTENTSTABLE.owner_handle to SORTENTSTABLE.owner_dict.
    + Renamed all -as-rNNNN program options to --as-rNNNN.
  * a number of bug fixes, correctness fixes and memory leak fixes
  * Add support for more DWG objects
  * Add pkg-config file
- drop patches (upstream): CVE-2018-14524.patch, CVE-2018-14471.patch</changelog>
  <changelog author="astieger@suse.com" date="1541851200">- update to 0.6.2:
  * Improved handling of DWG files found in the wild</changelog>
  <changelog author="astieger@suse.com" date="1544443200">- update to 0.7:
  * add API to retrieve all objects in a DWG
  * various API breaking changes
  * Various fixes for memory leaks and double free and other issues</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1564660800">- update to 0.8:
  * add a new dynamic API, read and write all header and object
    fields by name
  * API breaking changes
  * Fix many errors in DXF output
  * Fix JSON output
  * Many more bug fixes to handle specific object types</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1572436800">- Update to release 0.9.1
  * Fixed more null pointer dereferences, overflows, hangs and
    memory leaks for fuzzed (i.e. illegal) DWGs.
- Update to release 0.9 [boo#1154080]
  * Added the DXF importer, using the new dynapi and the r2000
    encoder. Only for r2000 DXFs.
  * Added utf8text conversion functions to the dynapi.
  * Added 3DSOLID encoder.
  * Added APIs to find handles for names, searching in tables
    and dicts.
  * API breaking changes - see NEWS file in package.
  * Fixed null pointer dereferences, and memory leaks (except DXF
    importer)
    [boo#1129868, CVE-2019-9779]
    [boo#1129869, CVE-2019-9778]
    [boo#1129870, CVE-2019-9777]
    [boo#1129873, CVE-2019-9776]
    [boo#1129874, CVE-2019-9773]
    [boo#1129875, CVE-2019-9772]
    [boo#1129876, CVE-2019-9771]
    [boo#1129878, CVE-2019-9775]
    [boo#1129879, CVE-2019-9774]
    [boo#1129881, CVE-2019-9770]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1577620800">- Update to release 0.9.3
  * Added the -x,--extnames option to dwglayers for r13-r14 DWGs.
  * Fixed some leaks: SORTENTSTABLE, PROXY_ENTITY.ownerhandle
    for r13.
  * Add DICTIONARY.itemhandles[] for r13 and r14.
  * Fixed some dwglayers null pointer derefs, and flush its output
    for each layer.
  * Added several overflow checks from fuzzing
    [CVE-2019-20010, boo#1159825], [CVE-2019-20011, boo#1159826],
    [CVE-2019-20012, boo#1159827], [CVE-2019-20013, boo#1159828],
    [CVE-2019-20014, boo#1159831], [CVE-2019-20015, boo#1159832]
  * Disallow illegal SPLINE scenarios
    [CVE-2019-20009, boo#1159824]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1578571200">- Update to release 0.10
  * API breaking changes:
  * Added a new int *isnewp argument to all dynapi utf8text
    getters, if the returned string is freshly malloced or not.
  * removed the UNKNOWN supertype, there are only UNKNOWN_OBJ and
    UNKNOWN_ENT left, with common_entity_data.
  * renamed BLOCK_HEADER.preview_data to preview,
    preview_data_size to preview_size.
  * renamed SHAPE.shape_no to style_id.
  * renamed CLASS.wasazombie to is_zombie.
  * Bugfixes:
  * Harmonized INDXFB with INDXF, removed extra src/in_dxfb.c.
  * Fixed encoding of added r2000 AUXHEADER address.
  * Fixed EED encoding from dwgrewrite.
  * Add several checks against
    [CVE-2020-6609, boo#1160520], [CVE-2020-6610, boo#1160522],
    [CVE-2020-6611, boo#1160523], [CVE-2020-6612, boo#1160524],
    [CVE-2020-6613, boo#1160525], [CVE-2020-6614, boo#1160526],
    [CVE-2020-6615, boo#1160527]</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586692800">- update to 0.10.1:
  * Fixed dwg2SVG htmlescape overflows and off-by-ones
  * Removed direct usages of fprintf and stderr in the lib
  * Fuzzing fixes for dwg2SVG, dwgread
  * Fixed eed.raw leaks</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1597233600">- update to 0.11:
  * new programs dwgfilter, dxfwrite
  * improved file support for r2004+ (incomplete)
  * Add support for GeoJSON RFC794a godsend for the json importer)
  * API extensions and breaking changes</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1605614400">- Update to release 0.11.1
  * Fixed decode of Unicode string streams.
  * Fixed UCS-2 to UTF-8 conversion for the chars 128-255.
  * Moved PSPACE entities from BLOCKS to ENTITIES
  * Fixed \r\n quoting in DXF texts
  * Generalize and fix DXF text splitup into 255 chunks and
    quoting, add basic shift-jis quoting support for Katagana and
    Hiragana letters (Japanese \M+1xxxx =&gt; Unicode \U+XXXX)
  * Added indxf dwg_has_subclass check to avoid buffer overflows
    when writing to wrong subclasses.
  * Improved SAB 2 to SAT 1 conversion: Split overlarge blocks
    into block_size of max 4096. Add "^ " quoting rule.
  * Fixed decode of empty classes section, esp. for r13c3 and
    r14.
  * Keep IDBUFFER for old DXFs (r13-r14)
  * Fixed SummaryInfo types from T to TU16, relevant for DXF
    headers too.
  * Add missing UTF-8 conversion in geojson for TEXT, MTEXT,
    GEOPOSITIONMARKER.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1644753600">- Update to release 0.12.5 [boo#1193372] [CVE-2021-28237]
  * Restricted accepted DXF objects to all stable and unstable
    classes, minus MATERIAL, ARC_DIMENSION, SUN, PROXY*. I.e.
    most unstable objects do not allow unknown DXF codes anymore.
    This fixed most oss-fuzz errors.</changelog>
</package>
<package pkgid="2c766c7b8957730e01168197f2509b6239b1d94bc963f9a26bf823075effbb72" name="libredwg-tools" arch="aarch64">
  <version epoch="0" ver="0.12.5" rel="bp154.2.3.1"/>
  <changelog author="astieger@suse.com" date="1531224000">- initial version (0.5)</changelog>
  <changelog author="jengelh@inai.de" date="1531569600">- Trim redundant wording and future aims.</changelog>
  <changelog author="astieger@suse.com" date="1533816000">- CVE-2018-14524: double free (boo#1102702)
  add CVE-2018-14524.patch
- CVE-2018-14471: NULL pointer dereference DoS (boo#1102696)
  add CVE-2018-14471.patch</changelog>
  <changelog author="astieger@suse.com" date="1534248000">- update to 0.6:
  * API breaking changes:
    + Removed dwg_obj_proxy_get_reactors(), use dwg_obj_get_reactors() instead.
    + Renamed SORTENTSTABLE.owner_handle to SORTENTSTABLE.owner_dict.
    + Renamed all -as-rNNNN program options to --as-rNNNN.
  * a number of bug fixes, correctness fixes and memory leak fixes
  * Add support for more DWG objects
  * Add pkg-config file
- drop patches (upstream): CVE-2018-14524.patch, CVE-2018-14471.patch</changelog>
  <changelog author="astieger@suse.com" date="1541851200">- update to 0.6.2:
  * Improved handling of DWG files found in the wild</changelog>
  <changelog author="astieger@suse.com" date="1544443200">- update to 0.7:
  * add API to retrieve all objects in a DWG
  * various API breaking changes
  * Various fixes for memory leaks and double free and other issues</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1564660800">- update to 0.8:
  * add a new dynamic API, read and write all header and object
    fields by name
  * API breaking changes
  * Fix many errors in DXF output
  * Fix JSON output
  * Many more bug fixes to handle specific object types</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1572436800">- Update to release 0.9.1
  * Fixed more null pointer dereferences, overflows, hangs and
    memory leaks for fuzzed (i.e. illegal) DWGs.
- Update to release 0.9 [boo#1154080]
  * Added the DXF importer, using the new dynapi and the r2000
    encoder. Only for r2000 DXFs.
  * Added utf8text conversion functions to the dynapi.
  * Added 3DSOLID encoder.
  * Added APIs to find handles for names, searching in tables
    and dicts.
  * API breaking changes - see NEWS file in package.
  * Fixed null pointer dereferences, and memory leaks (except DXF
    importer)
    [boo#1129868, CVE-2019-9779]
    [boo#1129869, CVE-2019-9778]
    [boo#1129870, CVE-2019-9777]
    [boo#1129873, CVE-2019-9776]
    [boo#1129874, CVE-2019-9773]
    [boo#1129875, CVE-2019-9772]
    [boo#1129876, CVE-2019-9771]
    [boo#1129878, CVE-2019-9775]
    [boo#1129879, CVE-2019-9774]
    [boo#1129881, CVE-2019-9770]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1577620800">- Update to release 0.9.3
  * Added the -x,--extnames option to dwglayers for r13-r14 DWGs.
  * Fixed some leaks: SORTENTSTABLE, PROXY_ENTITY.ownerhandle
    for r13.
  * Add DICTIONARY.itemhandles[] for r13 and r14.
  * Fixed some dwglayers null pointer derefs, and flush its output
    for each layer.
  * Added several overflow checks from fuzzing
    [CVE-2019-20010, boo#1159825], [CVE-2019-20011, boo#1159826],
    [CVE-2019-20012, boo#1159827], [CVE-2019-20013, boo#1159828],
    [CVE-2019-20014, boo#1159831], [CVE-2019-20015, boo#1159832]
  * Disallow illegal SPLINE scenarios
    [CVE-2019-20009, boo#1159824]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1578571200">- Update to release 0.10
  * API breaking changes:
  * Added a new int *isnewp argument to all dynapi utf8text
    getters, if the returned string is freshly malloced or not.
  * removed the UNKNOWN supertype, there are only UNKNOWN_OBJ and
    UNKNOWN_ENT left, with common_entity_data.
  * renamed BLOCK_HEADER.preview_data to preview,
    preview_data_size to preview_size.
  * renamed SHAPE.shape_no to style_id.
  * renamed CLASS.wasazombie to is_zombie.
  * Bugfixes:
  * Harmonized INDXFB with INDXF, removed extra src/in_dxfb.c.
  * Fixed encoding of added r2000 AUXHEADER address.
  * Fixed EED encoding from dwgrewrite.
  * Add several checks against
    [CVE-2020-6609, boo#1160520], [CVE-2020-6610, boo#1160522],
    [CVE-2020-6611, boo#1160523], [CVE-2020-6612, boo#1160524],
    [CVE-2020-6613, boo#1160525], [CVE-2020-6614, boo#1160526],
    [CVE-2020-6615, boo#1160527]</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586692800">- update to 0.10.1:
  * Fixed dwg2SVG htmlescape overflows and off-by-ones
  * Removed direct usages of fprintf and stderr in the lib
  * Fuzzing fixes for dwg2SVG, dwgread
  * Fixed eed.raw leaks</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1597233600">- update to 0.11:
  * new programs dwgfilter, dxfwrite
  * improved file support for r2004+ (incomplete)
  * Add support for GeoJSON RFC794a godsend for the json importer)
  * API extensions and breaking changes</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1605614400">- Update to release 0.11.1
  * Fixed decode of Unicode string streams.
  * Fixed UCS-2 to UTF-8 conversion for the chars 128-255.
  * Moved PSPACE entities from BLOCKS to ENTITIES
  * Fixed \r\n quoting in DXF texts
  * Generalize and fix DXF text splitup into 255 chunks and
    quoting, add basic shift-jis quoting support for Katagana and
    Hiragana letters (Japanese \M+1xxxx =&gt; Unicode \U+XXXX)
  * Added indxf dwg_has_subclass check to avoid buffer overflows
    when writing to wrong subclasses.
  * Improved SAB 2 to SAT 1 conversion: Split overlarge blocks
    into block_size of max 4096. Add "^ " quoting rule.
  * Fixed decode of empty classes section, esp. for r13c3 and
    r14.
  * Keep IDBUFFER for old DXFs (r13-r14)
  * Fixed SummaryInfo types from T to TU16, relevant for DXF
    headers too.
  * Add missing UTF-8 conversion in geojson for TEXT, MTEXT,
    GEOPOSITIONMARKER.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1644753600">- Update to release 0.12.5 [boo#1193372] [CVE-2021-28237]
  * Restricted accepted DXF objects to all stable and unstable
    classes, minus MATERIAL, ARC_DIMENSION, SUN, PROXY*. I.e.
    most unstable objects do not allow unknown DXF codes anymore.
    This fixed most oss-fuzz errors.</changelog>
</package>
<package pkgid="cb6f303353ac97d4e1b504dfb142d92511ee055a32d2d20289ce408ff1c5d653" name="libredwg-tools" arch="i586">
  <version epoch="0" ver="0.12.5" rel="bp154.2.3.1"/>
  <changelog author="astieger@suse.com" date="1531224000">- initial version (0.5)</changelog>
  <changelog author="jengelh@inai.de" date="1531569600">- Trim redundant wording and future aims.</changelog>
  <changelog author="astieger@suse.com" date="1533816000">- CVE-2018-14524: double free (boo#1102702)
  add CVE-2018-14524.patch
- CVE-2018-14471: NULL pointer dereference DoS (boo#1102696)
  add CVE-2018-14471.patch</changelog>
  <changelog author="astieger@suse.com" date="1534248000">- update to 0.6:
  * API breaking changes:
    + Removed dwg_obj_proxy_get_reactors(), use dwg_obj_get_reactors() instead.
    + Renamed SORTENTSTABLE.owner_handle to SORTENTSTABLE.owner_dict.
    + Renamed all -as-rNNNN program options to --as-rNNNN.
  * a number of bug fixes, correctness fixes and memory leak fixes
  * Add support for more DWG objects
  * Add pkg-config file
- drop patches (upstream): CVE-2018-14524.patch, CVE-2018-14471.patch</changelog>
  <changelog author="astieger@suse.com" date="1541851200">- update to 0.6.2:
  * Improved handling of DWG files found in the wild</changelog>
  <changelog author="astieger@suse.com" date="1544443200">- update to 0.7:
  * add API to retrieve all objects in a DWG
  * various API breaking changes
  * Various fixes for memory leaks and double free and other issues</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1564660800">- update to 0.8:
  * add a new dynamic API, read and write all header and object
    fields by name
  * API breaking changes
  * Fix many errors in DXF output
  * Fix JSON output
  * Many more bug fixes to handle specific object types</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1572436800">- Update to release 0.9.1
  * Fixed more null pointer dereferences, overflows, hangs and
    memory leaks for fuzzed (i.e. illegal) DWGs.
- Update to release 0.9 [boo#1154080]
  * Added the DXF importer, using the new dynapi and the r2000
    encoder. Only for r2000 DXFs.
  * Added utf8text conversion functions to the dynapi.
  * Added 3DSOLID encoder.
  * Added APIs to find handles for names, searching in tables
    and dicts.
  * API breaking changes - see NEWS file in package.
  * Fixed null pointer dereferences, and memory leaks (except DXF
    importer)
    [boo#1129868, CVE-2019-9779]
    [boo#1129869, CVE-2019-9778]
    [boo#1129870, CVE-2019-9777]
    [boo#1129873, CVE-2019-9776]
    [boo#1129874, CVE-2019-9773]
    [boo#1129875, CVE-2019-9772]
    [boo#1129876, CVE-2019-9771]
    [boo#1129878, CVE-2019-9775]
    [boo#1129879, CVE-2019-9774]
    [boo#1129881, CVE-2019-9770]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1577620800">- Update to release 0.9.3
  * Added the -x,--extnames option to dwglayers for r13-r14 DWGs.
  * Fixed some leaks: SORTENTSTABLE, PROXY_ENTITY.ownerhandle
    for r13.
  * Add DICTIONARY.itemhandles[] for r13 and r14.
  * Fixed some dwglayers null pointer derefs, and flush its output
    for each layer.
  * Added several overflow checks from fuzzing
    [CVE-2019-20010, boo#1159825], [CVE-2019-20011, boo#1159826],
    [CVE-2019-20012, boo#1159827], [CVE-2019-20013, boo#1159828],
    [CVE-2019-20014, boo#1159831], [CVE-2019-20015, boo#1159832]
  * Disallow illegal SPLINE scenarios
    [CVE-2019-20009, boo#1159824]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1578571200">- Update to release 0.10
  * API breaking changes:
  * Added a new int *isnewp argument to all dynapi utf8text
    getters, if the returned string is freshly malloced or not.
  * removed the UNKNOWN supertype, there are only UNKNOWN_OBJ and
    UNKNOWN_ENT left, with common_entity_data.
  * renamed BLOCK_HEADER.preview_data to preview,
    preview_data_size to preview_size.
  * renamed SHAPE.shape_no to style_id.
  * renamed CLASS.wasazombie to is_zombie.
  * Bugfixes:
  * Harmonized INDXFB with INDXF, removed extra src/in_dxfb.c.
  * Fixed encoding of added r2000 AUXHEADER address.
  * Fixed EED encoding from dwgrewrite.
  * Add several checks against
    [CVE-2020-6609, boo#1160520], [CVE-2020-6610, boo#1160522],
    [CVE-2020-6611, boo#1160523], [CVE-2020-6612, boo#1160524],
    [CVE-2020-6613, boo#1160525], [CVE-2020-6614, boo#1160526],
    [CVE-2020-6615, boo#1160527]</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586692800">- update to 0.10.1:
  * Fixed dwg2SVG htmlescape overflows and off-by-ones
  * Removed direct usages of fprintf and stderr in the lib
  * Fuzzing fixes for dwg2SVG, dwgread
  * Fixed eed.raw leaks</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1597233600">- update to 0.11:
  * new programs dwgfilter, dxfwrite
  * improved file support for r2004+ (incomplete)
  * Add support for GeoJSON RFC794a godsend for the json importer)
  * API extensions and breaking changes</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1605614400">- Update to release 0.11.1
  * Fixed decode of Unicode string streams.
  * Fixed UCS-2 to UTF-8 conversion for the chars 128-255.
  * Moved PSPACE entities from BLOCKS to ENTITIES
  * Fixed \r\n quoting in DXF texts
  * Generalize and fix DXF text splitup into 255 chunks and
    quoting, add basic shift-jis quoting support for Katagana and
    Hiragana letters (Japanese \M+1xxxx =&gt; Unicode \U+XXXX)
  * Added indxf dwg_has_subclass check to avoid buffer overflows
    when writing to wrong subclasses.
  * Improved SAB 2 to SAT 1 conversion: Split overlarge blocks
    into block_size of max 4096. Add "^ " quoting rule.
  * Fixed decode of empty classes section, esp. for r13c3 and
    r14.
  * Keep IDBUFFER for old DXFs (r13-r14)
  * Fixed SummaryInfo types from T to TU16, relevant for DXF
    headers too.
  * Add missing UTF-8 conversion in geojson for TEXT, MTEXT,
    GEOPOSITIONMARKER.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1644753600">- Update to release 0.12.5 [boo#1193372] [CVE-2021-28237]
  * Restricted accepted DXF objects to all stable and unstable
    classes, minus MATERIAL, ARC_DIMENSION, SUN, PROXY*. I.e.
    most unstable objects do not allow unknown DXF codes anymore.
    This fixed most oss-fuzz errors.</changelog>
</package>
<package pkgid="0817105db76e214c34cff94c436dc3f4fa846727e3048309de57f57f94dcd0a6" name="libredwg-tools" arch="ppc64le">
  <version epoch="0" ver="0.12.5" rel="bp154.2.3.1"/>
  <changelog author="astieger@suse.com" date="1531224000">- initial version (0.5)</changelog>
  <changelog author="jengelh@inai.de" date="1531569600">- Trim redundant wording and future aims.</changelog>
  <changelog author="astieger@suse.com" date="1533816000">- CVE-2018-14524: double free (boo#1102702)
  add CVE-2018-14524.patch
- CVE-2018-14471: NULL pointer dereference DoS (boo#1102696)
  add CVE-2018-14471.patch</changelog>
  <changelog author="astieger@suse.com" date="1534248000">- update to 0.6:
  * API breaking changes:
    + Removed dwg_obj_proxy_get_reactors(), use dwg_obj_get_reactors() instead.
    + Renamed SORTENTSTABLE.owner_handle to SORTENTSTABLE.owner_dict.
    + Renamed all -as-rNNNN program options to --as-rNNNN.
  * a number of bug fixes, correctness fixes and memory leak fixes
  * Add support for more DWG objects
  * Add pkg-config file
- drop patches (upstream): CVE-2018-14524.patch, CVE-2018-14471.patch</changelog>
  <changelog author="astieger@suse.com" date="1541851200">- update to 0.6.2:
  * Improved handling of DWG files found in the wild</changelog>
  <changelog author="astieger@suse.com" date="1544443200">- update to 0.7:
  * add API to retrieve all objects in a DWG
  * various API breaking changes
  * Various fixes for memory leaks and double free and other issues</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1564660800">- update to 0.8:
  * add a new dynamic API, read and write all header and object
    fields by name
  * API breaking changes
  * Fix many errors in DXF output
  * Fix JSON output
  * Many more bug fixes to handle specific object types</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1572436800">- Update to release 0.9.1
  * Fixed more null pointer dereferences, overflows, hangs and
    memory leaks for fuzzed (i.e. illegal) DWGs.
- Update to release 0.9 [boo#1154080]
  * Added the DXF importer, using the new dynapi and the r2000
    encoder. Only for r2000 DXFs.
  * Added utf8text conversion functions to the dynapi.
  * Added 3DSOLID encoder.
  * Added APIs to find handles for names, searching in tables
    and dicts.
  * API breaking changes - see NEWS file in package.
  * Fixed null pointer dereferences, and memory leaks (except DXF
    importer)
    [boo#1129868, CVE-2019-9779]
    [boo#1129869, CVE-2019-9778]
    [boo#1129870, CVE-2019-9777]
    [boo#1129873, CVE-2019-9776]
    [boo#1129874, CVE-2019-9773]
    [boo#1129875, CVE-2019-9772]
    [boo#1129876, CVE-2019-9771]
    [boo#1129878, CVE-2019-9775]
    [boo#1129879, CVE-2019-9774]
    [boo#1129881, CVE-2019-9770]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1577620800">- Update to release 0.9.3
  * Added the -x,--extnames option to dwglayers for r13-r14 DWGs.
  * Fixed some leaks: SORTENTSTABLE, PROXY_ENTITY.ownerhandle
    for r13.
  * Add DICTIONARY.itemhandles[] for r13 and r14.
  * Fixed some dwglayers null pointer derefs, and flush its output
    for each layer.
  * Added several overflow checks from fuzzing
    [CVE-2019-20010, boo#1159825], [CVE-2019-20011, boo#1159826],
    [CVE-2019-20012, boo#1159827], [CVE-2019-20013, boo#1159828],
    [CVE-2019-20014, boo#1159831], [CVE-2019-20015, boo#1159832]
  * Disallow illegal SPLINE scenarios
    [CVE-2019-20009, boo#1159824]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1578571200">- Update to release 0.10
  * API breaking changes:
  * Added a new int *isnewp argument to all dynapi utf8text
    getters, if the returned string is freshly malloced or not.
  * removed the UNKNOWN supertype, there are only UNKNOWN_OBJ and
    UNKNOWN_ENT left, with common_entity_data.
  * renamed BLOCK_HEADER.preview_data to preview,
    preview_data_size to preview_size.
  * renamed SHAPE.shape_no to style_id.
  * renamed CLASS.wasazombie to is_zombie.
  * Bugfixes:
  * Harmonized INDXFB with INDXF, removed extra src/in_dxfb.c.
  * Fixed encoding of added r2000 AUXHEADER address.
  * Fixed EED encoding from dwgrewrite.
  * Add several checks against
    [CVE-2020-6609, boo#1160520], [CVE-2020-6610, boo#1160522],
    [CVE-2020-6611, boo#1160523], [CVE-2020-6612, boo#1160524],
    [CVE-2020-6613, boo#1160525], [CVE-2020-6614, boo#1160526],
    [CVE-2020-6615, boo#1160527]</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586692800">- update to 0.10.1:
  * Fixed dwg2SVG htmlescape overflows and off-by-ones
  * Removed direct usages of fprintf and stderr in the lib
  * Fuzzing fixes for dwg2SVG, dwgread
  * Fixed eed.raw leaks</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1597233600">- update to 0.11:
  * new programs dwgfilter, dxfwrite
  * improved file support for r2004+ (incomplete)
  * Add support for GeoJSON RFC794a godsend for the json importer)
  * API extensions and breaking changes</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1605614400">- Update to release 0.11.1
  * Fixed decode of Unicode string streams.
  * Fixed UCS-2 to UTF-8 conversion for the chars 128-255.
  * Moved PSPACE entities from BLOCKS to ENTITIES
  * Fixed \r\n quoting in DXF texts
  * Generalize and fix DXF text splitup into 255 chunks and
    quoting, add basic shift-jis quoting support for Katagana and
    Hiragana letters (Japanese \M+1xxxx =&gt; Unicode \U+XXXX)
  * Added indxf dwg_has_subclass check to avoid buffer overflows
    when writing to wrong subclasses.
  * Improved SAB 2 to SAT 1 conversion: Split overlarge blocks
    into block_size of max 4096. Add "^ " quoting rule.
  * Fixed decode of empty classes section, esp. for r13c3 and
    r14.
  * Keep IDBUFFER for old DXFs (r13-r14)
  * Fixed SummaryInfo types from T to TU16, relevant for DXF
    headers too.
  * Add missing UTF-8 conversion in geojson for TEXT, MTEXT,
    GEOPOSITIONMARKER.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1644753600">- Update to release 0.12.5 [boo#1193372] [CVE-2021-28237]
  * Restricted accepted DXF objects to all stable and unstable
    classes, minus MATERIAL, ARC_DIMENSION, SUN, PROXY*. I.e.
    most unstable objects do not allow unknown DXF codes anymore.
    This fixed most oss-fuzz errors.</changelog>
</package>
<package pkgid="5d7901246f2c22590b0b1aa17fca5c37140d4996588c9374b9d251e98eef3403" name="libredwg-tools" arch="s390x">
  <version epoch="0" ver="0.12.5" rel="bp154.2.3.1"/>
  <changelog author="astieger@suse.com" date="1531224000">- initial version (0.5)</changelog>
  <changelog author="jengelh@inai.de" date="1531569600">- Trim redundant wording and future aims.</changelog>
  <changelog author="astieger@suse.com" date="1533816000">- CVE-2018-14524: double free (boo#1102702)
  add CVE-2018-14524.patch
- CVE-2018-14471: NULL pointer dereference DoS (boo#1102696)
  add CVE-2018-14471.patch</changelog>
  <changelog author="astieger@suse.com" date="1534248000">- update to 0.6:
  * API breaking changes:
    + Removed dwg_obj_proxy_get_reactors(), use dwg_obj_get_reactors() instead.
    + Renamed SORTENTSTABLE.owner_handle to SORTENTSTABLE.owner_dict.
    + Renamed all -as-rNNNN program options to --as-rNNNN.
  * a number of bug fixes, correctness fixes and memory leak fixes
  * Add support for more DWG objects
  * Add pkg-config file
- drop patches (upstream): CVE-2018-14524.patch, CVE-2018-14471.patch</changelog>
  <changelog author="astieger@suse.com" date="1541851200">- update to 0.6.2:
  * Improved handling of DWG files found in the wild</changelog>
  <changelog author="astieger@suse.com" date="1544443200">- update to 0.7:
  * add API to retrieve all objects in a DWG
  * various API breaking changes
  * Various fixes for memory leaks and double free and other issues</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1564660800">- update to 0.8:
  * add a new dynamic API, read and write all header and object
    fields by name
  * API breaking changes
  * Fix many errors in DXF output
  * Fix JSON output
  * Many more bug fixes to handle specific object types</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1572436800">- Update to release 0.9.1
  * Fixed more null pointer dereferences, overflows, hangs and
    memory leaks for fuzzed (i.e. illegal) DWGs.
- Update to release 0.9 [boo#1154080]
  * Added the DXF importer, using the new dynapi and the r2000
    encoder. Only for r2000 DXFs.
  * Added utf8text conversion functions to the dynapi.
  * Added 3DSOLID encoder.
  * Added APIs to find handles for names, searching in tables
    and dicts.
  * API breaking changes - see NEWS file in package.
  * Fixed null pointer dereferences, and memory leaks (except DXF
    importer)
    [boo#1129868, CVE-2019-9779]
    [boo#1129869, CVE-2019-9778]
    [boo#1129870, CVE-2019-9777]
    [boo#1129873, CVE-2019-9776]
    [boo#1129874, CVE-2019-9773]
    [boo#1129875, CVE-2019-9772]
    [boo#1129876, CVE-2019-9771]
    [boo#1129878, CVE-2019-9775]
    [boo#1129879, CVE-2019-9774]
    [boo#1129881, CVE-2019-9770]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1577620800">- Update to release 0.9.3
  * Added the -x,--extnames option to dwglayers for r13-r14 DWGs.
  * Fixed some leaks: SORTENTSTABLE, PROXY_ENTITY.ownerhandle
    for r13.
  * Add DICTIONARY.itemhandles[] for r13 and r14.
  * Fixed some dwglayers null pointer derefs, and flush its output
    for each layer.
  * Added several overflow checks from fuzzing
    [CVE-2019-20010, boo#1159825], [CVE-2019-20011, boo#1159826],
    [CVE-2019-20012, boo#1159827], [CVE-2019-20013, boo#1159828],
    [CVE-2019-20014, boo#1159831], [CVE-2019-20015, boo#1159832]
  * Disallow illegal SPLINE scenarios
    [CVE-2019-20009, boo#1159824]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1578571200">- Update to release 0.10
  * API breaking changes:
  * Added a new int *isnewp argument to all dynapi utf8text
    getters, if the returned string is freshly malloced or not.
  * removed the UNKNOWN supertype, there are only UNKNOWN_OBJ and
    UNKNOWN_ENT left, with common_entity_data.
  * renamed BLOCK_HEADER.preview_data to preview,
    preview_data_size to preview_size.
  * renamed SHAPE.shape_no to style_id.
  * renamed CLASS.wasazombie to is_zombie.
  * Bugfixes:
  * Harmonized INDXFB with INDXF, removed extra src/in_dxfb.c.
  * Fixed encoding of added r2000 AUXHEADER address.
  * Fixed EED encoding from dwgrewrite.
  * Add several checks against
    [CVE-2020-6609, boo#1160520], [CVE-2020-6610, boo#1160522],
    [CVE-2020-6611, boo#1160523], [CVE-2020-6612, boo#1160524],
    [CVE-2020-6613, boo#1160525], [CVE-2020-6614, boo#1160526],
    [CVE-2020-6615, boo#1160527]</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586692800">- update to 0.10.1:
  * Fixed dwg2SVG htmlescape overflows and off-by-ones
  * Removed direct usages of fprintf and stderr in the lib
  * Fuzzing fixes for dwg2SVG, dwgread
  * Fixed eed.raw leaks</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1597233600">- update to 0.11:
  * new programs dwgfilter, dxfwrite
  * improved file support for r2004+ (incomplete)
  * Add support for GeoJSON RFC794a godsend for the json importer)
  * API extensions and breaking changes</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1605614400">- Update to release 0.11.1
  * Fixed decode of Unicode string streams.
  * Fixed UCS-2 to UTF-8 conversion for the chars 128-255.
  * Moved PSPACE entities from BLOCKS to ENTITIES
  * Fixed \r\n quoting in DXF texts
  * Generalize and fix DXF text splitup into 255 chunks and
    quoting, add basic shift-jis quoting support for Katagana and
    Hiragana letters (Japanese \M+1xxxx =&gt; Unicode \U+XXXX)
  * Added indxf dwg_has_subclass check to avoid buffer overflows
    when writing to wrong subclasses.
  * Improved SAB 2 to SAT 1 conversion: Split overlarge blocks
    into block_size of max 4096. Add "^ " quoting rule.
  * Fixed decode of empty classes section, esp. for r13c3 and
    r14.
  * Keep IDBUFFER for old DXFs (r13-r14)
  * Fixed SummaryInfo types from T to TU16, relevant for DXF
    headers too.
  * Add missing UTF-8 conversion in geojson for TEXT, MTEXT,
    GEOPOSITIONMARKER.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1644753600">- Update to release 0.12.5 [boo#1193372] [CVE-2021-28237]
  * Restricted accepted DXF objects to all stable and unstable
    classes, minus MATERIAL, ARC_DIMENSION, SUN, PROXY*. I.e.
    most unstable objects do not allow unknown DXF codes anymore.
    This fixed most oss-fuzz errors.</changelog>
</package>
<package pkgid="9167e939b80989a919c41201b0369c1cf1dc646591a65423cb3ce6609d92f3e3" name="libredwg-tools" arch="x86_64">
  <version epoch="0" ver="0.12.5" rel="bp154.2.3.1"/>
  <changelog author="astieger@suse.com" date="1531224000">- initial version (0.5)</changelog>
  <changelog author="jengelh@inai.de" date="1531569600">- Trim redundant wording and future aims.</changelog>
  <changelog author="astieger@suse.com" date="1533816000">- CVE-2018-14524: double free (boo#1102702)
  add CVE-2018-14524.patch
- CVE-2018-14471: NULL pointer dereference DoS (boo#1102696)
  add CVE-2018-14471.patch</changelog>
  <changelog author="astieger@suse.com" date="1534248000">- update to 0.6:
  * API breaking changes:
    + Removed dwg_obj_proxy_get_reactors(), use dwg_obj_get_reactors() instead.
    + Renamed SORTENTSTABLE.owner_handle to SORTENTSTABLE.owner_dict.
    + Renamed all -as-rNNNN program options to --as-rNNNN.
  * a number of bug fixes, correctness fixes and memory leak fixes
  * Add support for more DWG objects
  * Add pkg-config file
- drop patches (upstream): CVE-2018-14524.patch, CVE-2018-14471.patch</changelog>
  <changelog author="astieger@suse.com" date="1541851200">- update to 0.6.2:
  * Improved handling of DWG files found in the wild</changelog>
  <changelog author="astieger@suse.com" date="1544443200">- update to 0.7:
  * add API to retrieve all objects in a DWG
  * various API breaking changes
  * Various fixes for memory leaks and double free and other issues</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1564660800">- update to 0.8:
  * add a new dynamic API, read and write all header and object
    fields by name
  * API breaking changes
  * Fix many errors in DXF output
  * Fix JSON output
  * Many more bug fixes to handle specific object types</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1572436800">- Update to release 0.9.1
  * Fixed more null pointer dereferences, overflows, hangs and
    memory leaks for fuzzed (i.e. illegal) DWGs.
- Update to release 0.9 [boo#1154080]
  * Added the DXF importer, using the new dynapi and the r2000
    encoder. Only for r2000 DXFs.
  * Added utf8text conversion functions to the dynapi.
  * Added 3DSOLID encoder.
  * Added APIs to find handles for names, searching in tables
    and dicts.
  * API breaking changes - see NEWS file in package.
  * Fixed null pointer dereferences, and memory leaks (except DXF
    importer)
    [boo#1129868, CVE-2019-9779]
    [boo#1129869, CVE-2019-9778]
    [boo#1129870, CVE-2019-9777]
    [boo#1129873, CVE-2019-9776]
    [boo#1129874, CVE-2019-9773]
    [boo#1129875, CVE-2019-9772]
    [boo#1129876, CVE-2019-9771]
    [boo#1129878, CVE-2019-9775]
    [boo#1129879, CVE-2019-9774]
    [boo#1129881, CVE-2019-9770]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1577620800">- Update to release 0.9.3
  * Added the -x,--extnames option to dwglayers for r13-r14 DWGs.
  * Fixed some leaks: SORTENTSTABLE, PROXY_ENTITY.ownerhandle
    for r13.
  * Add DICTIONARY.itemhandles[] for r13 and r14.
  * Fixed some dwglayers null pointer derefs, and flush its output
    for each layer.
  * Added several overflow checks from fuzzing
    [CVE-2019-20010, boo#1159825], [CVE-2019-20011, boo#1159826],
    [CVE-2019-20012, boo#1159827], [CVE-2019-20013, boo#1159828],
    [CVE-2019-20014, boo#1159831], [CVE-2019-20015, boo#1159832]
  * Disallow illegal SPLINE scenarios
    [CVE-2019-20009, boo#1159824]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1578571200">- Update to release 0.10
  * API breaking changes:
  * Added a new int *isnewp argument to all dynapi utf8text
    getters, if the returned string is freshly malloced or not.
  * removed the UNKNOWN supertype, there are only UNKNOWN_OBJ and
    UNKNOWN_ENT left, with common_entity_data.
  * renamed BLOCK_HEADER.preview_data to preview,
    preview_data_size to preview_size.
  * renamed SHAPE.shape_no to style_id.
  * renamed CLASS.wasazombie to is_zombie.
  * Bugfixes:
  * Harmonized INDXFB with INDXF, removed extra src/in_dxfb.c.
  * Fixed encoding of added r2000 AUXHEADER address.
  * Fixed EED encoding from dwgrewrite.
  * Add several checks against
    [CVE-2020-6609, boo#1160520], [CVE-2020-6610, boo#1160522],
    [CVE-2020-6611, boo#1160523], [CVE-2020-6612, boo#1160524],
    [CVE-2020-6613, boo#1160525], [CVE-2020-6614, boo#1160526],
    [CVE-2020-6615, boo#1160527]</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586692800">- update to 0.10.1:
  * Fixed dwg2SVG htmlescape overflows and off-by-ones
  * Removed direct usages of fprintf and stderr in the lib
  * Fuzzing fixes for dwg2SVG, dwgread
  * Fixed eed.raw leaks</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1597233600">- update to 0.11:
  * new programs dwgfilter, dxfwrite
  * improved file support for r2004+ (incomplete)
  * Add support for GeoJSON RFC794a godsend for the json importer)
  * API extensions and breaking changes</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1605614400">- Update to release 0.11.1
  * Fixed decode of Unicode string streams.
  * Fixed UCS-2 to UTF-8 conversion for the chars 128-255.
  * Moved PSPACE entities from BLOCKS to ENTITIES
  * Fixed \r\n quoting in DXF texts
  * Generalize and fix DXF text splitup into 255 chunks and
    quoting, add basic shift-jis quoting support for Katagana and
    Hiragana letters (Japanese \M+1xxxx =&gt; Unicode \U+XXXX)
  * Added indxf dwg_has_subclass check to avoid buffer overflows
    when writing to wrong subclasses.
  * Improved SAB 2 to SAT 1 conversion: Split overlarge blocks
    into block_size of max 4096. Add "^ " quoting rule.
  * Fixed decode of empty classes section, esp. for r13c3 and
    r14.
  * Keep IDBUFFER for old DXFs (r13-r14)
  * Fixed SummaryInfo types from T to TU16, relevant for DXF
    headers too.
  * Add missing UTF-8 conversion in geojson for TEXT, MTEXT,
    GEOPOSITIONMARKER.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1644753600">- Update to release 0.12.5 [boo#1193372] [CVE-2021-28237]
  * Restricted accepted DXF objects to all stable and unstable
    classes, minus MATERIAL, ARC_DIMENSION, SUN, PROXY*. I.e.
    most unstable objects do not allow unknown DXF codes anymore.
    This fixed most oss-fuzz errors.</changelog>
</package>
<package pkgid="5c6d5a2ca8fb93b04380325729515f7537193a7a07b0d9f6f84cf2c59e5b4540" name="libredwg0" arch="aarch64">
  <version epoch="0" ver="0.12.5" rel="bp154.2.3.1"/>
  <changelog author="astieger@suse.com" date="1531224000">- initial version (0.5)</changelog>
  <changelog author="jengelh@inai.de" date="1531569600">- Trim redundant wording and future aims.</changelog>
  <changelog author="astieger@suse.com" date="1533816000">- CVE-2018-14524: double free (boo#1102702)
  add CVE-2018-14524.patch
- CVE-2018-14471: NULL pointer dereference DoS (boo#1102696)
  add CVE-2018-14471.patch</changelog>
  <changelog author="astieger@suse.com" date="1534248000">- update to 0.6:
  * API breaking changes:
    + Removed dwg_obj_proxy_get_reactors(), use dwg_obj_get_reactors() instead.
    + Renamed SORTENTSTABLE.owner_handle to SORTENTSTABLE.owner_dict.
    + Renamed all -as-rNNNN program options to --as-rNNNN.
  * a number of bug fixes, correctness fixes and memory leak fixes
  * Add support for more DWG objects
  * Add pkg-config file
- drop patches (upstream): CVE-2018-14524.patch, CVE-2018-14471.patch</changelog>
  <changelog author="astieger@suse.com" date="1541851200">- update to 0.6.2:
  * Improved handling of DWG files found in the wild</changelog>
  <changelog author="astieger@suse.com" date="1544443200">- update to 0.7:
  * add API to retrieve all objects in a DWG
  * various API breaking changes
  * Various fixes for memory leaks and double free and other issues</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1564660800">- update to 0.8:
  * add a new dynamic API, read and write all header and object
    fields by name
  * API breaking changes
  * Fix many errors in DXF output
  * Fix JSON output
  * Many more bug fixes to handle specific object types</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1572436800">- Update to release 0.9.1
  * Fixed more null pointer dereferences, overflows, hangs and
    memory leaks for fuzzed (i.e. illegal) DWGs.
- Update to release 0.9 [boo#1154080]
  * Added the DXF importer, using the new dynapi and the r2000
    encoder. Only for r2000 DXFs.
  * Added utf8text conversion functions to the dynapi.
  * Added 3DSOLID encoder.
  * Added APIs to find handles for names, searching in tables
    and dicts.
  * API breaking changes - see NEWS file in package.
  * Fixed null pointer dereferences, and memory leaks (except DXF
    importer)
    [boo#1129868, CVE-2019-9779]
    [boo#1129869, CVE-2019-9778]
    [boo#1129870, CVE-2019-9777]
    [boo#1129873, CVE-2019-9776]
    [boo#1129874, CVE-2019-9773]
    [boo#1129875, CVE-2019-9772]
    [boo#1129876, CVE-2019-9771]
    [boo#1129878, CVE-2019-9775]
    [boo#1129879, CVE-2019-9774]
    [boo#1129881, CVE-2019-9770]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1577620800">- Update to release 0.9.3
  * Added the -x,--extnames option to dwglayers for r13-r14 DWGs.
  * Fixed some leaks: SORTENTSTABLE, PROXY_ENTITY.ownerhandle
    for r13.
  * Add DICTIONARY.itemhandles[] for r13 and r14.
  * Fixed some dwglayers null pointer derefs, and flush its output
    for each layer.
  * Added several overflow checks from fuzzing
    [CVE-2019-20010, boo#1159825], [CVE-2019-20011, boo#1159826],
    [CVE-2019-20012, boo#1159827], [CVE-2019-20013, boo#1159828],
    [CVE-2019-20014, boo#1159831], [CVE-2019-20015, boo#1159832]
  * Disallow illegal SPLINE scenarios
    [CVE-2019-20009, boo#1159824]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1578571200">- Update to release 0.10
  * API breaking changes:
  * Added a new int *isnewp argument to all dynapi utf8text
    getters, if the returned string is freshly malloced or not.
  * removed the UNKNOWN supertype, there are only UNKNOWN_OBJ and
    UNKNOWN_ENT left, with common_entity_data.
  * renamed BLOCK_HEADER.preview_data to preview,
    preview_data_size to preview_size.
  * renamed SHAPE.shape_no to style_id.
  * renamed CLASS.wasazombie to is_zombie.
  * Bugfixes:
  * Harmonized INDXFB with INDXF, removed extra src/in_dxfb.c.
  * Fixed encoding of added r2000 AUXHEADER address.
  * Fixed EED encoding from dwgrewrite.
  * Add several checks against
    [CVE-2020-6609, boo#1160520], [CVE-2020-6610, boo#1160522],
    [CVE-2020-6611, boo#1160523], [CVE-2020-6612, boo#1160524],
    [CVE-2020-6613, boo#1160525], [CVE-2020-6614, boo#1160526],
    [CVE-2020-6615, boo#1160527]</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586692800">- update to 0.10.1:
  * Fixed dwg2SVG htmlescape overflows and off-by-ones
  * Removed direct usages of fprintf and stderr in the lib
  * Fuzzing fixes for dwg2SVG, dwgread
  * Fixed eed.raw leaks</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1597233600">- update to 0.11:
  * new programs dwgfilter, dxfwrite
  * improved file support for r2004+ (incomplete)
  * Add support for GeoJSON RFC794a godsend for the json importer)
  * API extensions and breaking changes</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1605614400">- Update to release 0.11.1
  * Fixed decode of Unicode string streams.
  * Fixed UCS-2 to UTF-8 conversion for the chars 128-255.
  * Moved PSPACE entities from BLOCKS to ENTITIES
  * Fixed \r\n quoting in DXF texts
  * Generalize and fix DXF text splitup into 255 chunks and
    quoting, add basic shift-jis quoting support for Katagana and
    Hiragana letters (Japanese \M+1xxxx =&gt; Unicode \U+XXXX)
  * Added indxf dwg_has_subclass check to avoid buffer overflows
    when writing to wrong subclasses.
  * Improved SAB 2 to SAT 1 conversion: Split overlarge blocks
    into block_size of max 4096. Add "^ " quoting rule.
  * Fixed decode of empty classes section, esp. for r13c3 and
    r14.
  * Keep IDBUFFER for old DXFs (r13-r14)
  * Fixed SummaryInfo types from T to TU16, relevant for DXF
    headers too.
  * Add missing UTF-8 conversion in geojson for TEXT, MTEXT,
    GEOPOSITIONMARKER.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1644753600">- Update to release 0.12.5 [boo#1193372] [CVE-2021-28237]
  * Restricted accepted DXF objects to all stable and unstable
    classes, minus MATERIAL, ARC_DIMENSION, SUN, PROXY*. I.e.
    most unstable objects do not allow unknown DXF codes anymore.
    This fixed most oss-fuzz errors.</changelog>
</package>
<package pkgid="87c64d2aa93a71c8565f74f06ef504e699ebe9fa62f05bb42817747c5b0d29ee" name="libredwg0" arch="i586">
  <version epoch="0" ver="0.12.5" rel="bp154.2.3.1"/>
  <changelog author="astieger@suse.com" date="1531224000">- initial version (0.5)</changelog>
  <changelog author="jengelh@inai.de" date="1531569600">- Trim redundant wording and future aims.</changelog>
  <changelog author="astieger@suse.com" date="1533816000">- CVE-2018-14524: double free (boo#1102702)
  add CVE-2018-14524.patch
- CVE-2018-14471: NULL pointer dereference DoS (boo#1102696)
  add CVE-2018-14471.patch</changelog>
  <changelog author="astieger@suse.com" date="1534248000">- update to 0.6:
  * API breaking changes:
    + Removed dwg_obj_proxy_get_reactors(), use dwg_obj_get_reactors() instead.
    + Renamed SORTENTSTABLE.owner_handle to SORTENTSTABLE.owner_dict.
    + Renamed all -as-rNNNN program options to --as-rNNNN.
  * a number of bug fixes, correctness fixes and memory leak fixes
  * Add support for more DWG objects
  * Add pkg-config file
- drop patches (upstream): CVE-2018-14524.patch, CVE-2018-14471.patch</changelog>
  <changelog author="astieger@suse.com" date="1541851200">- update to 0.6.2:
  * Improved handling of DWG files found in the wild</changelog>
  <changelog author="astieger@suse.com" date="1544443200">- update to 0.7:
  * add API to retrieve all objects in a DWG
  * various API breaking changes
  * Various fixes for memory leaks and double free and other issues</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1564660800">- update to 0.8:
  * add a new dynamic API, read and write all header and object
    fields by name
  * API breaking changes
  * Fix many errors in DXF output
  * Fix JSON output
  * Many more bug fixes to handle specific object types</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1572436800">- Update to release 0.9.1
  * Fixed more null pointer dereferences, overflows, hangs and
    memory leaks for fuzzed (i.e. illegal) DWGs.
- Update to release 0.9 [boo#1154080]
  * Added the DXF importer, using the new dynapi and the r2000
    encoder. Only for r2000 DXFs.
  * Added utf8text conversion functions to the dynapi.
  * Added 3DSOLID encoder.
  * Added APIs to find handles for names, searching in tables
    and dicts.
  * API breaking changes - see NEWS file in package.
  * Fixed null pointer dereferences, and memory leaks (except DXF
    importer)
    [boo#1129868, CVE-2019-9779]
    [boo#1129869, CVE-2019-9778]
    [boo#1129870, CVE-2019-9777]
    [boo#1129873, CVE-2019-9776]
    [boo#1129874, CVE-2019-9773]
    [boo#1129875, CVE-2019-9772]
    [boo#1129876, CVE-2019-9771]
    [boo#1129878, CVE-2019-9775]
    [boo#1129879, CVE-2019-9774]
    [boo#1129881, CVE-2019-9770]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1577620800">- Update to release 0.9.3
  * Added the -x,--extnames option to dwglayers for r13-r14 DWGs.
  * Fixed some leaks: SORTENTSTABLE, PROXY_ENTITY.ownerhandle
    for r13.
  * Add DICTIONARY.itemhandles[] for r13 and r14.
  * Fixed some dwglayers null pointer derefs, and flush its output
    for each layer.
  * Added several overflow checks from fuzzing
    [CVE-2019-20010, boo#1159825], [CVE-2019-20011, boo#1159826],
    [CVE-2019-20012, boo#1159827], [CVE-2019-20013, boo#1159828],
    [CVE-2019-20014, boo#1159831], [CVE-2019-20015, boo#1159832]
  * Disallow illegal SPLINE scenarios
    [CVE-2019-20009, boo#1159824]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1578571200">- Update to release 0.10
  * API breaking changes:
  * Added a new int *isnewp argument to all dynapi utf8text
    getters, if the returned string is freshly malloced or not.
  * removed the UNKNOWN supertype, there are only UNKNOWN_OBJ and
    UNKNOWN_ENT left, with common_entity_data.
  * renamed BLOCK_HEADER.preview_data to preview,
    preview_data_size to preview_size.
  * renamed SHAPE.shape_no to style_id.
  * renamed CLASS.wasazombie to is_zombie.
  * Bugfixes:
  * Harmonized INDXFB with INDXF, removed extra src/in_dxfb.c.
  * Fixed encoding of added r2000 AUXHEADER address.
  * Fixed EED encoding from dwgrewrite.
  * Add several checks against
    [CVE-2020-6609, boo#1160520], [CVE-2020-6610, boo#1160522],
    [CVE-2020-6611, boo#1160523], [CVE-2020-6612, boo#1160524],
    [CVE-2020-6613, boo#1160525], [CVE-2020-6614, boo#1160526],
    [CVE-2020-6615, boo#1160527]</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586692800">- update to 0.10.1:
  * Fixed dwg2SVG htmlescape overflows and off-by-ones
  * Removed direct usages of fprintf and stderr in the lib
  * Fuzzing fixes for dwg2SVG, dwgread
  * Fixed eed.raw leaks</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1597233600">- update to 0.11:
  * new programs dwgfilter, dxfwrite
  * improved file support for r2004+ (incomplete)
  * Add support for GeoJSON RFC794a godsend for the json importer)
  * API extensions and breaking changes</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1605614400">- Update to release 0.11.1
  * Fixed decode of Unicode string streams.
  * Fixed UCS-2 to UTF-8 conversion for the chars 128-255.
  * Moved PSPACE entities from BLOCKS to ENTITIES
  * Fixed \r\n quoting in DXF texts
  * Generalize and fix DXF text splitup into 255 chunks and
    quoting, add basic shift-jis quoting support for Katagana and
    Hiragana letters (Japanese \M+1xxxx =&gt; Unicode \U+XXXX)
  * Added indxf dwg_has_subclass check to avoid buffer overflows
    when writing to wrong subclasses.
  * Improved SAB 2 to SAT 1 conversion: Split overlarge blocks
    into block_size of max 4096. Add "^ " quoting rule.
  * Fixed decode of empty classes section, esp. for r13c3 and
    r14.
  * Keep IDBUFFER for old DXFs (r13-r14)
  * Fixed SummaryInfo types from T to TU16, relevant for DXF
    headers too.
  * Add missing UTF-8 conversion in geojson for TEXT, MTEXT,
    GEOPOSITIONMARKER.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1644753600">- Update to release 0.12.5 [boo#1193372] [CVE-2021-28237]
  * Restricted accepted DXF objects to all stable and unstable
    classes, minus MATERIAL, ARC_DIMENSION, SUN, PROXY*. I.e.
    most unstable objects do not allow unknown DXF codes anymore.
    This fixed most oss-fuzz errors.</changelog>
</package>
<package pkgid="d0c22fb7e3f641bacebafc5726a81fb389944e0a01c966fc56373cbb2a73c3c4" name="libredwg0" arch="ppc64le">
  <version epoch="0" ver="0.12.5" rel="bp154.2.3.1"/>
  <changelog author="astieger@suse.com" date="1531224000">- initial version (0.5)</changelog>
  <changelog author="jengelh@inai.de" date="1531569600">- Trim redundant wording and future aims.</changelog>
  <changelog author="astieger@suse.com" date="1533816000">- CVE-2018-14524: double free (boo#1102702)
  add CVE-2018-14524.patch
- CVE-2018-14471: NULL pointer dereference DoS (boo#1102696)
  add CVE-2018-14471.patch</changelog>
  <changelog author="astieger@suse.com" date="1534248000">- update to 0.6:
  * API breaking changes:
    + Removed dwg_obj_proxy_get_reactors(), use dwg_obj_get_reactors() instead.
    + Renamed SORTENTSTABLE.owner_handle to SORTENTSTABLE.owner_dict.
    + Renamed all -as-rNNNN program options to --as-rNNNN.
  * a number of bug fixes, correctness fixes and memory leak fixes
  * Add support for more DWG objects
  * Add pkg-config file
- drop patches (upstream): CVE-2018-14524.patch, CVE-2018-14471.patch</changelog>
  <changelog author="astieger@suse.com" date="1541851200">- update to 0.6.2:
  * Improved handling of DWG files found in the wild</changelog>
  <changelog author="astieger@suse.com" date="1544443200">- update to 0.7:
  * add API to retrieve all objects in a DWG
  * various API breaking changes
  * Various fixes for memory leaks and double free and other issues</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1564660800">- update to 0.8:
  * add a new dynamic API, read and write all header and object
    fields by name
  * API breaking changes
  * Fix many errors in DXF output
  * Fix JSON output
  * Many more bug fixes to handle specific object types</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1572436800">- Update to release 0.9.1
  * Fixed more null pointer dereferences, overflows, hangs and
    memory leaks for fuzzed (i.e. illegal) DWGs.
- Update to release 0.9 [boo#1154080]
  * Added the DXF importer, using the new dynapi and the r2000
    encoder. Only for r2000 DXFs.
  * Added utf8text conversion functions to the dynapi.
  * Added 3DSOLID encoder.
  * Added APIs to find handles for names, searching in tables
    and dicts.
  * API breaking changes - see NEWS file in package.
  * Fixed null pointer dereferences, and memory leaks (except DXF
    importer)
    [boo#1129868, CVE-2019-9779]
    [boo#1129869, CVE-2019-9778]
    [boo#1129870, CVE-2019-9777]
    [boo#1129873, CVE-2019-9776]
    [boo#1129874, CVE-2019-9773]
    [boo#1129875, CVE-2019-9772]
    [boo#1129876, CVE-2019-9771]
    [boo#1129878, CVE-2019-9775]
    [boo#1129879, CVE-2019-9774]
    [boo#1129881, CVE-2019-9770]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1577620800">- Update to release 0.9.3
  * Added the -x,--extnames option to dwglayers for r13-r14 DWGs.
  * Fixed some leaks: SORTENTSTABLE, PROXY_ENTITY.ownerhandle
    for r13.
  * Add DICTIONARY.itemhandles[] for r13 and r14.
  * Fixed some dwglayers null pointer derefs, and flush its output
    for each layer.
  * Added several overflow checks from fuzzing
    [CVE-2019-20010, boo#1159825], [CVE-2019-20011, boo#1159826],
    [CVE-2019-20012, boo#1159827], [CVE-2019-20013, boo#1159828],
    [CVE-2019-20014, boo#1159831], [CVE-2019-20015, boo#1159832]
  * Disallow illegal SPLINE scenarios
    [CVE-2019-20009, boo#1159824]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1578571200">- Update to release 0.10
  * API breaking changes:
  * Added a new int *isnewp argument to all dynapi utf8text
    getters, if the returned string is freshly malloced or not.
  * removed the UNKNOWN supertype, there are only UNKNOWN_OBJ and
    UNKNOWN_ENT left, with common_entity_data.
  * renamed BLOCK_HEADER.preview_data to preview,
    preview_data_size to preview_size.
  * renamed SHAPE.shape_no to style_id.
  * renamed CLASS.wasazombie to is_zombie.
  * Bugfixes:
  * Harmonized INDXFB with INDXF, removed extra src/in_dxfb.c.
  * Fixed encoding of added r2000 AUXHEADER address.
  * Fixed EED encoding from dwgrewrite.
  * Add several checks against
    [CVE-2020-6609, boo#1160520], [CVE-2020-6610, boo#1160522],
    [CVE-2020-6611, boo#1160523], [CVE-2020-6612, boo#1160524],
    [CVE-2020-6613, boo#1160525], [CVE-2020-6614, boo#1160526],
    [CVE-2020-6615, boo#1160527]</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586692800">- update to 0.10.1:
  * Fixed dwg2SVG htmlescape overflows and off-by-ones
  * Removed direct usages of fprintf and stderr in the lib
  * Fuzzing fixes for dwg2SVG, dwgread
  * Fixed eed.raw leaks</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1597233600">- update to 0.11:
  * new programs dwgfilter, dxfwrite
  * improved file support for r2004+ (incomplete)
  * Add support for GeoJSON RFC794a godsend for the json importer)
  * API extensions and breaking changes</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1605614400">- Update to release 0.11.1
  * Fixed decode of Unicode string streams.
  * Fixed UCS-2 to UTF-8 conversion for the chars 128-255.
  * Moved PSPACE entities from BLOCKS to ENTITIES
  * Fixed \r\n quoting in DXF texts
  * Generalize and fix DXF text splitup into 255 chunks and
    quoting, add basic shift-jis quoting support for Katagana and
    Hiragana letters (Japanese \M+1xxxx =&gt; Unicode \U+XXXX)
  * Added indxf dwg_has_subclass check to avoid buffer overflows
    when writing to wrong subclasses.
  * Improved SAB 2 to SAT 1 conversion: Split overlarge blocks
    into block_size of max 4096. Add "^ " quoting rule.
  * Fixed decode of empty classes section, esp. for r13c3 and
    r14.
  * Keep IDBUFFER for old DXFs (r13-r14)
  * Fixed SummaryInfo types from T to TU16, relevant for DXF
    headers too.
  * Add missing UTF-8 conversion in geojson for TEXT, MTEXT,
    GEOPOSITIONMARKER.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1644753600">- Update to release 0.12.5 [boo#1193372] [CVE-2021-28237]
  * Restricted accepted DXF objects to all stable and unstable
    classes, minus MATERIAL, ARC_DIMENSION, SUN, PROXY*. I.e.
    most unstable objects do not allow unknown DXF codes anymore.
    This fixed most oss-fuzz errors.</changelog>
</package>
<package pkgid="bcb935375edc79eee9b584bd12c8c393b0aab2fd03b0319c63f7c40782c30f06" name="libredwg0" arch="s390x">
  <version epoch="0" ver="0.12.5" rel="bp154.2.3.1"/>
  <changelog author="astieger@suse.com" date="1531224000">- initial version (0.5)</changelog>
  <changelog author="jengelh@inai.de" date="1531569600">- Trim redundant wording and future aims.</changelog>
  <changelog author="astieger@suse.com" date="1533816000">- CVE-2018-14524: double free (boo#1102702)
  add CVE-2018-14524.patch
- CVE-2018-14471: NULL pointer dereference DoS (boo#1102696)
  add CVE-2018-14471.patch</changelog>
  <changelog author="astieger@suse.com" date="1534248000">- update to 0.6:
  * API breaking changes:
    + Removed dwg_obj_proxy_get_reactors(), use dwg_obj_get_reactors() instead.
    + Renamed SORTENTSTABLE.owner_handle to SORTENTSTABLE.owner_dict.
    + Renamed all -as-rNNNN program options to --as-rNNNN.
  * a number of bug fixes, correctness fixes and memory leak fixes
  * Add support for more DWG objects
  * Add pkg-config file
- drop patches (upstream): CVE-2018-14524.patch, CVE-2018-14471.patch</changelog>
  <changelog author="astieger@suse.com" date="1541851200">- update to 0.6.2:
  * Improved handling of DWG files found in the wild</changelog>
  <changelog author="astieger@suse.com" date="1544443200">- update to 0.7:
  * add API to retrieve all objects in a DWG
  * various API breaking changes
  * Various fixes for memory leaks and double free and other issues</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1564660800">- update to 0.8:
  * add a new dynamic API, read and write all header and object
    fields by name
  * API breaking changes
  * Fix many errors in DXF output
  * Fix JSON output
  * Many more bug fixes to handle specific object types</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1572436800">- Update to release 0.9.1
  * Fixed more null pointer dereferences, overflows, hangs and
    memory leaks for fuzzed (i.e. illegal) DWGs.
- Update to release 0.9 [boo#1154080]
  * Added the DXF importer, using the new dynapi and the r2000
    encoder. Only for r2000 DXFs.
  * Added utf8text conversion functions to the dynapi.
  * Added 3DSOLID encoder.
  * Added APIs to find handles for names, searching in tables
    and dicts.
  * API breaking changes - see NEWS file in package.
  * Fixed null pointer dereferences, and memory leaks (except DXF
    importer)
    [boo#1129868, CVE-2019-9779]
    [boo#1129869, CVE-2019-9778]
    [boo#1129870, CVE-2019-9777]
    [boo#1129873, CVE-2019-9776]
    [boo#1129874, CVE-2019-9773]
    [boo#1129875, CVE-2019-9772]
    [boo#1129876, CVE-2019-9771]
    [boo#1129878, CVE-2019-9775]
    [boo#1129879, CVE-2019-9774]
    [boo#1129881, CVE-2019-9770]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1577620800">- Update to release 0.9.3
  * Added the -x,--extnames option to dwglayers for r13-r14 DWGs.
  * Fixed some leaks: SORTENTSTABLE, PROXY_ENTITY.ownerhandle
    for r13.
  * Add DICTIONARY.itemhandles[] for r13 and r14.
  * Fixed some dwglayers null pointer derefs, and flush its output
    for each layer.
  * Added several overflow checks from fuzzing
    [CVE-2019-20010, boo#1159825], [CVE-2019-20011, boo#1159826],
    [CVE-2019-20012, boo#1159827], [CVE-2019-20013, boo#1159828],
    [CVE-2019-20014, boo#1159831], [CVE-2019-20015, boo#1159832]
  * Disallow illegal SPLINE scenarios
    [CVE-2019-20009, boo#1159824]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1578571200">- Update to release 0.10
  * API breaking changes:
  * Added a new int *isnewp argument to all dynapi utf8text
    getters, if the returned string is freshly malloced or not.
  * removed the UNKNOWN supertype, there are only UNKNOWN_OBJ and
    UNKNOWN_ENT left, with common_entity_data.
  * renamed BLOCK_HEADER.preview_data to preview,
    preview_data_size to preview_size.
  * renamed SHAPE.shape_no to style_id.
  * renamed CLASS.wasazombie to is_zombie.
  * Bugfixes:
  * Harmonized INDXFB with INDXF, removed extra src/in_dxfb.c.
  * Fixed encoding of added r2000 AUXHEADER address.
  * Fixed EED encoding from dwgrewrite.
  * Add several checks against
    [CVE-2020-6609, boo#1160520], [CVE-2020-6610, boo#1160522],
    [CVE-2020-6611, boo#1160523], [CVE-2020-6612, boo#1160524],
    [CVE-2020-6613, boo#1160525], [CVE-2020-6614, boo#1160526],
    [CVE-2020-6615, boo#1160527]</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586692800">- update to 0.10.1:
  * Fixed dwg2SVG htmlescape overflows and off-by-ones
  * Removed direct usages of fprintf and stderr in the lib
  * Fuzzing fixes for dwg2SVG, dwgread
  * Fixed eed.raw leaks</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1597233600">- update to 0.11:
  * new programs dwgfilter, dxfwrite
  * improved file support for r2004+ (incomplete)
  * Add support for GeoJSON RFC794a godsend for the json importer)
  * API extensions and breaking changes</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1605614400">- Update to release 0.11.1
  * Fixed decode of Unicode string streams.
  * Fixed UCS-2 to UTF-8 conversion for the chars 128-255.
  * Moved PSPACE entities from BLOCKS to ENTITIES
  * Fixed \r\n quoting in DXF texts
  * Generalize and fix DXF text splitup into 255 chunks and
    quoting, add basic shift-jis quoting support for Katagana and
    Hiragana letters (Japanese \M+1xxxx =&gt; Unicode \U+XXXX)
  * Added indxf dwg_has_subclass check to avoid buffer overflows
    when writing to wrong subclasses.
  * Improved SAB 2 to SAT 1 conversion: Split overlarge blocks
    into block_size of max 4096. Add "^ " quoting rule.
  * Fixed decode of empty classes section, esp. for r13c3 and
    r14.
  * Keep IDBUFFER for old DXFs (r13-r14)
  * Fixed SummaryInfo types from T to TU16, relevant for DXF
    headers too.
  * Add missing UTF-8 conversion in geojson for TEXT, MTEXT,
    GEOPOSITIONMARKER.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1644753600">- Update to release 0.12.5 [boo#1193372] [CVE-2021-28237]
  * Restricted accepted DXF objects to all stable and unstable
    classes, minus MATERIAL, ARC_DIMENSION, SUN, PROXY*. I.e.
    most unstable objects do not allow unknown DXF codes anymore.
    This fixed most oss-fuzz errors.</changelog>
</package>
<package pkgid="4f2733d9643a118c2e618ba6e5812a1e70f17f302d9f9d610c88df21b0a66870" name="libredwg0" arch="x86_64">
  <version epoch="0" ver="0.12.5" rel="bp154.2.3.1"/>
  <changelog author="astieger@suse.com" date="1531224000">- initial version (0.5)</changelog>
  <changelog author="jengelh@inai.de" date="1531569600">- Trim redundant wording and future aims.</changelog>
  <changelog author="astieger@suse.com" date="1533816000">- CVE-2018-14524: double free (boo#1102702)
  add CVE-2018-14524.patch
- CVE-2018-14471: NULL pointer dereference DoS (boo#1102696)
  add CVE-2018-14471.patch</changelog>
  <changelog author="astieger@suse.com" date="1534248000">- update to 0.6:
  * API breaking changes:
    + Removed dwg_obj_proxy_get_reactors(), use dwg_obj_get_reactors() instead.
    + Renamed SORTENTSTABLE.owner_handle to SORTENTSTABLE.owner_dict.
    + Renamed all -as-rNNNN program options to --as-rNNNN.
  * a number of bug fixes, correctness fixes and memory leak fixes
  * Add support for more DWG objects
  * Add pkg-config file
- drop patches (upstream): CVE-2018-14524.patch, CVE-2018-14471.patch</changelog>
  <changelog author="astieger@suse.com" date="1541851200">- update to 0.6.2:
  * Improved handling of DWG files found in the wild</changelog>
  <changelog author="astieger@suse.com" date="1544443200">- update to 0.7:
  * add API to retrieve all objects in a DWG
  * various API breaking changes
  * Various fixes for memory leaks and double free and other issues</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1564660800">- update to 0.8:
  * add a new dynamic API, read and write all header and object
    fields by name
  * API breaking changes
  * Fix many errors in DXF output
  * Fix JSON output
  * Many more bug fixes to handle specific object types</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1572436800">- Update to release 0.9.1
  * Fixed more null pointer dereferences, overflows, hangs and
    memory leaks for fuzzed (i.e. illegal) DWGs.
- Update to release 0.9 [boo#1154080]
  * Added the DXF importer, using the new dynapi and the r2000
    encoder. Only for r2000 DXFs.
  * Added utf8text conversion functions to the dynapi.
  * Added 3DSOLID encoder.
  * Added APIs to find handles for names, searching in tables
    and dicts.
  * API breaking changes - see NEWS file in package.
  * Fixed null pointer dereferences, and memory leaks (except DXF
    importer)
    [boo#1129868, CVE-2019-9779]
    [boo#1129869, CVE-2019-9778]
    [boo#1129870, CVE-2019-9777]
    [boo#1129873, CVE-2019-9776]
    [boo#1129874, CVE-2019-9773]
    [boo#1129875, CVE-2019-9772]
    [boo#1129876, CVE-2019-9771]
    [boo#1129878, CVE-2019-9775]
    [boo#1129879, CVE-2019-9774]
    [boo#1129881, CVE-2019-9770]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1577620800">- Update to release 0.9.3
  * Added the -x,--extnames option to dwglayers for r13-r14 DWGs.
  * Fixed some leaks: SORTENTSTABLE, PROXY_ENTITY.ownerhandle
    for r13.
  * Add DICTIONARY.itemhandles[] for r13 and r14.
  * Fixed some dwglayers null pointer derefs, and flush its output
    for each layer.
  * Added several overflow checks from fuzzing
    [CVE-2019-20010, boo#1159825], [CVE-2019-20011, boo#1159826],
    [CVE-2019-20012, boo#1159827], [CVE-2019-20013, boo#1159828],
    [CVE-2019-20014, boo#1159831], [CVE-2019-20015, boo#1159832]
  * Disallow illegal SPLINE scenarios
    [CVE-2019-20009, boo#1159824]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1578571200">- Update to release 0.10
  * API breaking changes:
  * Added a new int *isnewp argument to all dynapi utf8text
    getters, if the returned string is freshly malloced or not.
  * removed the UNKNOWN supertype, there are only UNKNOWN_OBJ and
    UNKNOWN_ENT left, with common_entity_data.
  * renamed BLOCK_HEADER.preview_data to preview,
    preview_data_size to preview_size.
  * renamed SHAPE.shape_no to style_id.
  * renamed CLASS.wasazombie to is_zombie.
  * Bugfixes:
  * Harmonized INDXFB with INDXF, removed extra src/in_dxfb.c.
  * Fixed encoding of added r2000 AUXHEADER address.
  * Fixed EED encoding from dwgrewrite.
  * Add several checks against
    [CVE-2020-6609, boo#1160520], [CVE-2020-6610, boo#1160522],
    [CVE-2020-6611, boo#1160523], [CVE-2020-6612, boo#1160524],
    [CVE-2020-6613, boo#1160525], [CVE-2020-6614, boo#1160526],
    [CVE-2020-6615, boo#1160527]</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586692800">- update to 0.10.1:
  * Fixed dwg2SVG htmlescape overflows and off-by-ones
  * Removed direct usages of fprintf and stderr in the lib
  * Fuzzing fixes for dwg2SVG, dwgread
  * Fixed eed.raw leaks</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1597233600">- update to 0.11:
  * new programs dwgfilter, dxfwrite
  * improved file support for r2004+ (incomplete)
  * Add support for GeoJSON RFC794a godsend for the json importer)
  * API extensions and breaking changes</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1605614400">- Update to release 0.11.1
  * Fixed decode of Unicode string streams.
  * Fixed UCS-2 to UTF-8 conversion for the chars 128-255.
  * Moved PSPACE entities from BLOCKS to ENTITIES
  * Fixed \r\n quoting in DXF texts
  * Generalize and fix DXF text splitup into 255 chunks and
    quoting, add basic shift-jis quoting support for Katagana and
    Hiragana letters (Japanese \M+1xxxx =&gt; Unicode \U+XXXX)
  * Added indxf dwg_has_subclass check to avoid buffer overflows
    when writing to wrong subclasses.
  * Improved SAB 2 to SAT 1 conversion: Split overlarge blocks
    into block_size of max 4096. Add "^ " quoting rule.
  * Fixed decode of empty classes section, esp. for r13c3 and
    r14.
  * Keep IDBUFFER for old DXFs (r13-r14)
  * Fixed SummaryInfo types from T to TU16, relevant for DXF
    headers too.
  * Add missing UTF-8 conversion in geojson for TEXT, MTEXT,
    GEOPOSITIONMARKER.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1644753600">- Update to release 0.12.5 [boo#1193372] [CVE-2021-28237]
  * Restricted accepted DXF objects to all stable and unstable
    classes, minus MATERIAL, ARC_DIMENSION, SUN, PROXY*. I.e.
    most unstable objects do not allow unknown DXF codes anymore.
    This fixed most oss-fuzz errors.</changelog>
</package>
<package pkgid="3ca8b2e43783a28d514d2de03a997bf9394cc52560b08b3c3ea35616d1c0774b" name="librepo" arch="src">
  <version epoch="0" ver="1.14.2" rel="bp154.2.1"/>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1487592000">- Update to 1.7.20</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1502625600">- Disable running unit tests by default because of random pygpgme failures</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1515067200">- Upgrade to 1.8.1
  + Fix memory leaks in Python bindings (gh#rpm-software-management/librepo#83)
  + Fix HTTP header checking to work with proxies (gh#rpm-software-management/librepo#86)
  + Change connection and low-speed default timeouts to sync with DNF/Yum
  + Fix max download speed from repo (rh#1227921)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1536840000">- Backport fix from upstream to use glibc's xattr instead of libattr
  * Add patch: 0001-stop-requiring-attr-xattr.patch
- Use full author identities in changelog entries</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1536840001">- Fix RPM groups. Update descriptions so that librepo0
  (which is going to be installed most of the time) has something
  halfway useful.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1549195200">- Upgrade to 1.9.3
  + Replace expat with libxml2
  + Support using python-gpg instead of pygpgme
  + Fix major performance regression with libcurl-7.61.1
  + Add zchunk support
- Drop patch for backported fix that is part of this release
  * Patch: 0001-stop-requiring-attr-xattr.patch
- Add patch proposed upstream to fix progress reporting for zck
  * Patch: PR138-Fix-progress-reporting-with-zchunk-files.patch
- Fix RPM group and description for Python 3 subpackage
- Drop Python 2 subpackage</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1554033600">- Upgrade to 1.9.6
  + Fix progress reporting with zchunk files
  + Reduce download delays by using still_running correctly
  + Improve error handling, cleanup
  + Simplified lr_perform()'s loop to prevent busy wait
  + Require libcurl &gt;= 7.28.0
- Drop patch included in this release
  * Patch: PR138-Fix-progress-reporting-with-zchunk-files.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1554033601">- Add patch to fix fetching zck-compressed repos (rh#1694411)
  * Patch: librepo-PR148-clean-up-curl-target_handle.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1557489600">- Upgrade to 1.10.1
  + Clean up target-&gt;curl_handle rather than target-&gt;handle (rh#1694411)
  + Add an option to preserve timestamps of the downloaded files (rh#1688537)
  + Fix fetching repositories supplied by SUSE Customer Center
  + [tests] Wait for server to start instead of doing arbitrary sleep
- Drop patch included in this release
  * Patch: librepo-PR148-clean-up-curl-target_handle.patch
- Disable executing test suite on ARM and RISC-V due to performance issues with builders</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1557662400">- Upgrade to 1.10.2
  + Fix librepo isn't able to load zchunk files from next server on failure (rh#1706321)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1558699200">- Upgrade to 1.10.3
  + Exit gpg-agent after repokey import (rh#1650266)
  + Make sure to check next transfer if current zck transfer already exists (rh#1706627)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1575201600">- Upgrade to 1.11.0
  + Define LRO_SUPPORTS_CACHEDIR only with zchunk (rh#1726141)
  + Allow to use mirrors multiple times for a target (rh#1678588)
  + Allow to try baseurl multiple times (rh#1678588)
  + Remove librepo xattr when no file descriptor (rh#1690894)
  + Fix verification of checksum from file attr (rh#1700341)
  + Rephrase repository GPG check error message (rh#1741442)
  + Add sleep when all mirrors were tried (rh#1741931)
  + Raise logging level of error messages (rh#1737709)
  + retry mirrorlist/metalink downloads
  + Fix lr_url_substitute() and add ${variable} support
  + Add support for one-time URL flags
  + Fix API - LrHandleOption enum - LRO_ONETIMEFLAG (rh#1761779)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1576324800">- Upgrade to 1.11.1
  + Create a directory for gpg sockets in /run/user/ (rh#1769831, rh#1771012)
- Fix bcond declaration for zchunk so defaults are always declared</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Upgrade to 1.11.2
  + Fix calling Python API without holding GIL (rh#1788918)
  + Do not unref LrErr_Exception on exit (rh#1778854)
  + Cleanup zchunk-related error messages (rh#1790625)
- Fix typo in changes entry about version update to 1.11.1</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1594123200">- Upgrade to 1.12.0
  + Prefer mirrorlist/metalink over baseurl (rh#1775184)
  + Decode package URL when using for local filename (rh#1817130)
  + Fix memory leak in lr_download_metadata() and lr_yum_download_remote()
  + Download sources work when at least one of specified is working (rh#1775184)</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1597924800">- Add validate_path.patch to prevent directory traversal attacks
  (boo#1175475, CVE-2020-14352)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1598097600">- Upgrade to 1.12.1
  + Validate path read from repomd.xml (rh#1868639, CVE-2020-14352)
- Dropped validate_path.patch to prevent directory traversal attacks
  (boo#1175475, CVE-2020-14352) since it is upstream with version 1.12.1</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1612353600">- Update to 1.13.0
  + Fix the key string parsing in url_substitution
  + Fix memory leak in 'fastestmirror'
  + Download whole file when server doesn't support ranges (rh#1886706)
  + Various fixes for mirrors without ranges support and zchunk
  + Add support for pkcs11 certificate and key for repository authorization (rh#1859495)
  + Fix lr_perform() - Avoid 100% CPU usage
  + Drop Python 2 support
  + Add support for working with certificates used with proxy (rh#1920991)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1618315200">- Update to 1.14.0
  + Fix LRO_PRESERVETIME behavior
  + Support multiple checksums in xattr (rh#1931904)
  + Return "calculated" checksum if requested w/caching
  + Fix lr_yum_download_url in case lr_handle is NULL</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1629892800">- Update to 1.14.2
  + Recover from fsync fail on read-only filesystem (rh#1956361)
  + Reduce time to load metadata
  + Fix resource leaks
  + Fix memory leaks</changelog>
</package>
<package pkgid="6c509e728116854af6550277feaa69a6e50891feafbf6ad5fd51954c889b31a4" name="librepo-devel" arch="aarch64">
  <version epoch="0" ver="1.14.2" rel="bp154.2.1"/>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1487592000">- Update to 1.7.20</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1502625600">- Disable running unit tests by default because of random pygpgme failures</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1515067200">- Upgrade to 1.8.1
  + Fix memory leaks in Python bindings (gh#rpm-software-management/librepo#83)
  + Fix HTTP header checking to work with proxies (gh#rpm-software-management/librepo#86)
  + Change connection and low-speed default timeouts to sync with DNF/Yum
  + Fix max download speed from repo (rh#1227921)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1536840000">- Backport fix from upstream to use glibc's xattr instead of libattr
  * Add patch: 0001-stop-requiring-attr-xattr.patch
- Use full author identities in changelog entries</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1536840001">- Fix RPM groups. Update descriptions so that librepo0
  (which is going to be installed most of the time) has something
  halfway useful.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1549195200">- Upgrade to 1.9.3
  + Replace expat with libxml2
  + Support using python-gpg instead of pygpgme
  + Fix major performance regression with libcurl-7.61.1
  + Add zchunk support
- Drop patch for backported fix that is part of this release
  * Patch: 0001-stop-requiring-attr-xattr.patch
- Add patch proposed upstream to fix progress reporting for zck
  * Patch: PR138-Fix-progress-reporting-with-zchunk-files.patch
- Fix RPM group and description for Python 3 subpackage
- Drop Python 2 subpackage</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1554033600">- Upgrade to 1.9.6
  + Fix progress reporting with zchunk files
  + Reduce download delays by using still_running correctly
  + Improve error handling, cleanup
  + Simplified lr_perform()'s loop to prevent busy wait
  + Require libcurl &gt;= 7.28.0
- Drop patch included in this release
  * Patch: PR138-Fix-progress-reporting-with-zchunk-files.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1554033601">- Add patch to fix fetching zck-compressed repos (rh#1694411)
  * Patch: librepo-PR148-clean-up-curl-target_handle.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1557489600">- Upgrade to 1.10.1
  + Clean up target-&gt;curl_handle rather than target-&gt;handle (rh#1694411)
  + Add an option to preserve timestamps of the downloaded files (rh#1688537)
  + Fix fetching repositories supplied by SUSE Customer Center
  + [tests] Wait for server to start instead of doing arbitrary sleep
- Drop patch included in this release
  * Patch: librepo-PR148-clean-up-curl-target_handle.patch
- Disable executing test suite on ARM and RISC-V due to performance issues with builders</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1557662400">- Upgrade to 1.10.2
  + Fix librepo isn't able to load zchunk files from next server on failure (rh#1706321)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1558699200">- Upgrade to 1.10.3
  + Exit gpg-agent after repokey import (rh#1650266)
  + Make sure to check next transfer if current zck transfer already exists (rh#1706627)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1575201600">- Upgrade to 1.11.0
  + Define LRO_SUPPORTS_CACHEDIR only with zchunk (rh#1726141)
  + Allow to use mirrors multiple times for a target (rh#1678588)
  + Allow to try baseurl multiple times (rh#1678588)
  + Remove librepo xattr when no file descriptor (rh#1690894)
  + Fix verification of checksum from file attr (rh#1700341)
  + Rephrase repository GPG check error message (rh#1741442)
  + Add sleep when all mirrors were tried (rh#1741931)
  + Raise logging level of error messages (rh#1737709)
  + retry mirrorlist/metalink downloads
  + Fix lr_url_substitute() and add ${variable} support
  + Add support for one-time URL flags
  + Fix API - LrHandleOption enum - LRO_ONETIMEFLAG (rh#1761779)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1576324800">- Upgrade to 1.11.1
  + Create a directory for gpg sockets in /run/user/ (rh#1769831, rh#1771012)
- Fix bcond declaration for zchunk so defaults are always declared</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Upgrade to 1.11.2
  + Fix calling Python API without holding GIL (rh#1788918)
  + Do not unref LrErr_Exception on exit (rh#1778854)
  + Cleanup zchunk-related error messages (rh#1790625)
- Fix typo in changes entry about version update to 1.11.1</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1594123200">- Upgrade to 1.12.0
  + Prefer mirrorlist/metalink over baseurl (rh#1775184)
  + Decode package URL when using for local filename (rh#1817130)
  + Fix memory leak in lr_download_metadata() and lr_yum_download_remote()
  + Download sources work when at least one of specified is working (rh#1775184)</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1597924800">- Add validate_path.patch to prevent directory traversal attacks
  (boo#1175475, CVE-2020-14352)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1598097600">- Upgrade to 1.12.1
  + Validate path read from repomd.xml (rh#1868639, CVE-2020-14352)
- Dropped validate_path.patch to prevent directory traversal attacks
  (boo#1175475, CVE-2020-14352) since it is upstream with version 1.12.1</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1612353600">- Update to 1.13.0
  + Fix the key string parsing in url_substitution
  + Fix memory leak in 'fastestmirror'
  + Download whole file when server doesn't support ranges (rh#1886706)
  + Various fixes for mirrors without ranges support and zchunk
  + Add support for pkcs11 certificate and key for repository authorization (rh#1859495)
  + Fix lr_perform() - Avoid 100% CPU usage
  + Drop Python 2 support
  + Add support for working with certificates used with proxy (rh#1920991)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1618315200">- Update to 1.14.0
  + Fix LRO_PRESERVETIME behavior
  + Support multiple checksums in xattr (rh#1931904)
  + Return "calculated" checksum if requested w/caching
  + Fix lr_yum_download_url in case lr_handle is NULL</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1629892800">- Update to 1.14.2
  + Recover from fsync fail on read-only filesystem (rh#1956361)
  + Reduce time to load metadata
  + Fix resource leaks
  + Fix memory leaks</changelog>
</package>
<package pkgid="7f2ef6fc7cef6ff03cd6bee6c51d0b12a58051795e7c3491a0318bdd661a7311" name="librepo-devel" arch="i586">
  <version epoch="0" ver="1.14.2" rel="bp154.2.1"/>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1487592000">- Update to 1.7.20</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1502625600">- Disable running unit tests by default because of random pygpgme failures</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1515067200">- Upgrade to 1.8.1
  + Fix memory leaks in Python bindings (gh#rpm-software-management/librepo#83)
  + Fix HTTP header checking to work with proxies (gh#rpm-software-management/librepo#86)
  + Change connection and low-speed default timeouts to sync with DNF/Yum
  + Fix max download speed from repo (rh#1227921)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1536840000">- Backport fix from upstream to use glibc's xattr instead of libattr
  * Add patch: 0001-stop-requiring-attr-xattr.patch
- Use full author identities in changelog entries</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1536840001">- Fix RPM groups. Update descriptions so that librepo0
  (which is going to be installed most of the time) has something
  halfway useful.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1549195200">- Upgrade to 1.9.3
  + Replace expat with libxml2
  + Support using python-gpg instead of pygpgme
  + Fix major performance regression with libcurl-7.61.1
  + Add zchunk support
- Drop patch for backported fix that is part of this release
  * Patch: 0001-stop-requiring-attr-xattr.patch
- Add patch proposed upstream to fix progress reporting for zck
  * Patch: PR138-Fix-progress-reporting-with-zchunk-files.patch
- Fix RPM group and description for Python 3 subpackage
- Drop Python 2 subpackage</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1554033600">- Upgrade to 1.9.6
  + Fix progress reporting with zchunk files
  + Reduce download delays by using still_running correctly
  + Improve error handling, cleanup
  + Simplified lr_perform()'s loop to prevent busy wait
  + Require libcurl &gt;= 7.28.0
- Drop patch included in this release
  * Patch: PR138-Fix-progress-reporting-with-zchunk-files.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1554033601">- Add patch to fix fetching zck-compressed repos (rh#1694411)
  * Patch: librepo-PR148-clean-up-curl-target_handle.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1557489600">- Upgrade to 1.10.1
  + Clean up target-&gt;curl_handle rather than target-&gt;handle (rh#1694411)
  + Add an option to preserve timestamps of the downloaded files (rh#1688537)
  + Fix fetching repositories supplied by SUSE Customer Center
  + [tests] Wait for server to start instead of doing arbitrary sleep
- Drop patch included in this release
  * Patch: librepo-PR148-clean-up-curl-target_handle.patch
- Disable executing test suite on ARM and RISC-V due to performance issues with builders</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1557662400">- Upgrade to 1.10.2
  + Fix librepo isn't able to load zchunk files from next server on failure (rh#1706321)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1558699200">- Upgrade to 1.10.3
  + Exit gpg-agent after repokey import (rh#1650266)
  + Make sure to check next transfer if current zck transfer already exists (rh#1706627)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1575201600">- Upgrade to 1.11.0
  + Define LRO_SUPPORTS_CACHEDIR only with zchunk (rh#1726141)
  + Allow to use mirrors multiple times for a target (rh#1678588)
  + Allow to try baseurl multiple times (rh#1678588)
  + Remove librepo xattr when no file descriptor (rh#1690894)
  + Fix verification of checksum from file attr (rh#1700341)
  + Rephrase repository GPG check error message (rh#1741442)
  + Add sleep when all mirrors were tried (rh#1741931)
  + Raise logging level of error messages (rh#1737709)
  + retry mirrorlist/metalink downloads
  + Fix lr_url_substitute() and add ${variable} support
  + Add support for one-time URL flags
  + Fix API - LrHandleOption enum - LRO_ONETIMEFLAG (rh#1761779)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1576324800">- Upgrade to 1.11.1
  + Create a directory for gpg sockets in /run/user/ (rh#1769831, rh#1771012)
- Fix bcond declaration for zchunk so defaults are always declared</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Upgrade to 1.11.2
  + Fix calling Python API without holding GIL (rh#1788918)
  + Do not unref LrErr_Exception on exit (rh#1778854)
  + Cleanup zchunk-related error messages (rh#1790625)
- Fix typo in changes entry about version update to 1.11.1</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1594123200">- Upgrade to 1.12.0
  + Prefer mirrorlist/metalink over baseurl (rh#1775184)
  + Decode package URL when using for local filename (rh#1817130)
  + Fix memory leak in lr_download_metadata() and lr_yum_download_remote()
  + Download sources work when at least one of specified is working (rh#1775184)</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1597924800">- Add validate_path.patch to prevent directory traversal attacks
  (boo#1175475, CVE-2020-14352)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1598097600">- Upgrade to 1.12.1
  + Validate path read from repomd.xml (rh#1868639, CVE-2020-14352)
- Dropped validate_path.patch to prevent directory traversal attacks
  (boo#1175475, CVE-2020-14352) since it is upstream with version 1.12.1</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1612353600">- Update to 1.13.0
  + Fix the key string parsing in url_substitution
  + Fix memory leak in 'fastestmirror'
  + Download whole file when server doesn't support ranges (rh#1886706)
  + Various fixes for mirrors without ranges support and zchunk
  + Add support for pkcs11 certificate and key for repository authorization (rh#1859495)
  + Fix lr_perform() - Avoid 100% CPU usage
  + Drop Python 2 support
  + Add support for working with certificates used with proxy (rh#1920991)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1618315200">- Update to 1.14.0
  + Fix LRO_PRESERVETIME behavior
  + Support multiple checksums in xattr (rh#1931904)
  + Return "calculated" checksum if requested w/caching
  + Fix lr_yum_download_url in case lr_handle is NULL</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1629892800">- Update to 1.14.2
  + Recover from fsync fail on read-only filesystem (rh#1956361)
  + Reduce time to load metadata
  + Fix resource leaks
  + Fix memory leaks</changelog>
</package>
<package pkgid="3018bd65bda10d7077369e844e112ef2c48d11ed1709e3478f137c52a9912816" name="librepo-devel" arch="ppc64le">
  <version epoch="0" ver="1.14.2" rel="bp154.2.1"/>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1487592000">- Update to 1.7.20</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1502625600">- Disable running unit tests by default because of random pygpgme failures</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1515067200">- Upgrade to 1.8.1
  + Fix memory leaks in Python bindings (gh#rpm-software-management/librepo#83)
  + Fix HTTP header checking to work with proxies (gh#rpm-software-management/librepo#86)
  + Change connection and low-speed default timeouts to sync with DNF/Yum
  + Fix max download speed from repo (rh#1227921)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1536840000">- Backport fix from upstream to use glibc's xattr instead of libattr
  * Add patch: 0001-stop-requiring-attr-xattr.patch
- Use full author identities in changelog entries</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1536840001">- Fix RPM groups. Update descriptions so that librepo0
  (which is going to be installed most of the time) has something
  halfway useful.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1549195200">- Upgrade to 1.9.3
  + Replace expat with libxml2
  + Support using python-gpg instead of pygpgme
  + Fix major performance regression with libcurl-7.61.1
  + Add zchunk support
- Drop patch for backported fix that is part of this release
  * Patch: 0001-stop-requiring-attr-xattr.patch
- Add patch proposed upstream to fix progress reporting for zck
  * Patch: PR138-Fix-progress-reporting-with-zchunk-files.patch
- Fix RPM group and description for Python 3 subpackage
- Drop Python 2 subpackage</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1554033600">- Upgrade to 1.9.6
  + Fix progress reporting with zchunk files
  + Reduce download delays by using still_running correctly
  + Improve error handling, cleanup
  + Simplified lr_perform()'s loop to prevent busy wait
  + Require libcurl &gt;= 7.28.0
- Drop patch included in this release
  * Patch: PR138-Fix-progress-reporting-with-zchunk-files.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1554033601">- Add patch to fix fetching zck-compressed repos (rh#1694411)
  * Patch: librepo-PR148-clean-up-curl-target_handle.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1557489600">- Upgrade to 1.10.1
  + Clean up target-&gt;curl_handle rather than target-&gt;handle (rh#1694411)
  + Add an option to preserve timestamps of the downloaded files (rh#1688537)
  + Fix fetching repositories supplied by SUSE Customer Center
  + [tests] Wait for server to start instead of doing arbitrary sleep
- Drop patch included in this release
  * Patch: librepo-PR148-clean-up-curl-target_handle.patch
- Disable executing test suite on ARM and RISC-V due to performance issues with builders</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1557662400">- Upgrade to 1.10.2
  + Fix librepo isn't able to load zchunk files from next server on failure (rh#1706321)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1558699200">- Upgrade to 1.10.3
  + Exit gpg-agent after repokey import (rh#1650266)
  + Make sure to check next transfer if current zck transfer already exists (rh#1706627)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1575201600">- Upgrade to 1.11.0
  + Define LRO_SUPPORTS_CACHEDIR only with zchunk (rh#1726141)
  + Allow to use mirrors multiple times for a target (rh#1678588)
  + Allow to try baseurl multiple times (rh#1678588)
  + Remove librepo xattr when no file descriptor (rh#1690894)
  + Fix verification of checksum from file attr (rh#1700341)
  + Rephrase repository GPG check error message (rh#1741442)
  + Add sleep when all mirrors were tried (rh#1741931)
  + Raise logging level of error messages (rh#1737709)
  + retry mirrorlist/metalink downloads
  + Fix lr_url_substitute() and add ${variable} support
  + Add support for one-time URL flags
  + Fix API - LrHandleOption enum - LRO_ONETIMEFLAG (rh#1761779)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1576324800">- Upgrade to 1.11.1
  + Create a directory for gpg sockets in /run/user/ (rh#1769831, rh#1771012)
- Fix bcond declaration for zchunk so defaults are always declared</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Upgrade to 1.11.2
  + Fix calling Python API without holding GIL (rh#1788918)
  + Do not unref LrErr_Exception on exit (rh#1778854)
  + Cleanup zchunk-related error messages (rh#1790625)
- Fix typo in changes entry about version update to 1.11.1</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1594123200">- Upgrade to 1.12.0
  + Prefer mirrorlist/metalink over baseurl (rh#1775184)
  + Decode package URL when using for local filename (rh#1817130)
  + Fix memory leak in lr_download_metadata() and lr_yum_download_remote()
  + Download sources work when at least one of specified is working (rh#1775184)</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1597924800">- Add validate_path.patch to prevent directory traversal attacks
  (boo#1175475, CVE-2020-14352)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1598097600">- Upgrade to 1.12.1
  + Validate path read from repomd.xml (rh#1868639, CVE-2020-14352)
- Dropped validate_path.patch to prevent directory traversal attacks
  (boo#1175475, CVE-2020-14352) since it is upstream with version 1.12.1</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1612353600">- Update to 1.13.0
  + Fix the key string parsing in url_substitution
  + Fix memory leak in 'fastestmirror'
  + Download whole file when server doesn't support ranges (rh#1886706)
  + Various fixes for mirrors without ranges support and zchunk
  + Add support for pkcs11 certificate and key for repository authorization (rh#1859495)
  + Fix lr_perform() - Avoid 100% CPU usage
  + Drop Python 2 support
  + Add support for working with certificates used with proxy (rh#1920991)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1618315200">- Update to 1.14.0
  + Fix LRO_PRESERVETIME behavior
  + Support multiple checksums in xattr (rh#1931904)
  + Return "calculated" checksum if requested w/caching
  + Fix lr_yum_download_url in case lr_handle is NULL</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1629892800">- Update to 1.14.2
  + Recover from fsync fail on read-only filesystem (rh#1956361)
  + Reduce time to load metadata
  + Fix resource leaks
  + Fix memory leaks</changelog>
</package>
<package pkgid="7b5b02733e52ec610b5769e3fb8ebbc69d0b6da01b19d3912cbeacf1552f8750" name="librepo-devel" arch="s390x">
  <version epoch="0" ver="1.14.2" rel="bp154.2.1"/>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1487592000">- Update to 1.7.20</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1502625600">- Disable running unit tests by default because of random pygpgme failures</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1515067200">- Upgrade to 1.8.1
  + Fix memory leaks in Python bindings (gh#rpm-software-management/librepo#83)
  + Fix HTTP header checking to work with proxies (gh#rpm-software-management/librepo#86)
  + Change connection and low-speed default timeouts to sync with DNF/Yum
  + Fix max download speed from repo (rh#1227921)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1536840000">- Backport fix from upstream to use glibc's xattr instead of libattr
  * Add patch: 0001-stop-requiring-attr-xattr.patch
- Use full author identities in changelog entries</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1536840001">- Fix RPM groups. Update descriptions so that librepo0
  (which is going to be installed most of the time) has something
  halfway useful.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1549195200">- Upgrade to 1.9.3
  + Replace expat with libxml2
  + Support using python-gpg instead of pygpgme
  + Fix major performance regression with libcurl-7.61.1
  + Add zchunk support
- Drop patch for backported fix that is part of this release
  * Patch: 0001-stop-requiring-attr-xattr.patch
- Add patch proposed upstream to fix progress reporting for zck
  * Patch: PR138-Fix-progress-reporting-with-zchunk-files.patch
- Fix RPM group and description for Python 3 subpackage
- Drop Python 2 subpackage</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1554033600">- Upgrade to 1.9.6
  + Fix progress reporting with zchunk files
  + Reduce download delays by using still_running correctly
  + Improve error handling, cleanup
  + Simplified lr_perform()'s loop to prevent busy wait
  + Require libcurl &gt;= 7.28.0
- Drop patch included in this release
  * Patch: PR138-Fix-progress-reporting-with-zchunk-files.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1554033601">- Add patch to fix fetching zck-compressed repos (rh#1694411)
  * Patch: librepo-PR148-clean-up-curl-target_handle.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1557489600">- Upgrade to 1.10.1
  + Clean up target-&gt;curl_handle rather than target-&gt;handle (rh#1694411)
  + Add an option to preserve timestamps of the downloaded files (rh#1688537)
  + Fix fetching repositories supplied by SUSE Customer Center
  + [tests] Wait for server to start instead of doing arbitrary sleep
- Drop patch included in this release
  * Patch: librepo-PR148-clean-up-curl-target_handle.patch
- Disable executing test suite on ARM and RISC-V due to performance issues with builders</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1557662400">- Upgrade to 1.10.2
  + Fix librepo isn't able to load zchunk files from next server on failure (rh#1706321)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1558699200">- Upgrade to 1.10.3
  + Exit gpg-agent after repokey import (rh#1650266)
  + Make sure to check next transfer if current zck transfer already exists (rh#1706627)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1575201600">- Upgrade to 1.11.0
  + Define LRO_SUPPORTS_CACHEDIR only with zchunk (rh#1726141)
  + Allow to use mirrors multiple times for a target (rh#1678588)
  + Allow to try baseurl multiple times (rh#1678588)
  + Remove librepo xattr when no file descriptor (rh#1690894)
  + Fix verification of checksum from file attr (rh#1700341)
  + Rephrase repository GPG check error message (rh#1741442)
  + Add sleep when all mirrors were tried (rh#1741931)
  + Raise logging level of error messages (rh#1737709)
  + retry mirrorlist/metalink downloads
  + Fix lr_url_substitute() and add ${variable} support
  + Add support for one-time URL flags
  + Fix API - LrHandleOption enum - LRO_ONETIMEFLAG (rh#1761779)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1576324800">- Upgrade to 1.11.1
  + Create a directory for gpg sockets in /run/user/ (rh#1769831, rh#1771012)
- Fix bcond declaration for zchunk so defaults are always declared</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Upgrade to 1.11.2
  + Fix calling Python API without holding GIL (rh#1788918)
  + Do not unref LrErr_Exception on exit (rh#1778854)
  + Cleanup zchunk-related error messages (rh#1790625)
- Fix typo in changes entry about version update to 1.11.1</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1594123200">- Upgrade to 1.12.0
  + Prefer mirrorlist/metalink over baseurl (rh#1775184)
  + Decode package URL when using for local filename (rh#1817130)
  + Fix memory leak in lr_download_metadata() and lr_yum_download_remote()
  + Download sources work when at least one of specified is working (rh#1775184)</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1597924800">- Add validate_path.patch to prevent directory traversal attacks
  (boo#1175475, CVE-2020-14352)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1598097600">- Upgrade to 1.12.1
  + Validate path read from repomd.xml (rh#1868639, CVE-2020-14352)
- Dropped validate_path.patch to prevent directory traversal attacks
  (boo#1175475, CVE-2020-14352) since it is upstream with version 1.12.1</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1612353600">- Update to 1.13.0
  + Fix the key string parsing in url_substitution
  + Fix memory leak in 'fastestmirror'
  + Download whole file when server doesn't support ranges (rh#1886706)
  + Various fixes for mirrors without ranges support and zchunk
  + Add support for pkcs11 certificate and key for repository authorization (rh#1859495)
  + Fix lr_perform() - Avoid 100% CPU usage
  + Drop Python 2 support
  + Add support for working with certificates used with proxy (rh#1920991)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1618315200">- Update to 1.14.0
  + Fix LRO_PRESERVETIME behavior
  + Support multiple checksums in xattr (rh#1931904)
  + Return "calculated" checksum if requested w/caching
  + Fix lr_yum_download_url in case lr_handle is NULL</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1629892800">- Update to 1.14.2
  + Recover from fsync fail on read-only filesystem (rh#1956361)
  + Reduce time to load metadata
  + Fix resource leaks
  + Fix memory leaks</changelog>
</package>
<package pkgid="08b0d0a08caa0f6cfb8f99458922a758470d62c436c30a280dddba6b38710980" name="librepo-devel" arch="x86_64">
  <version epoch="0" ver="1.14.2" rel="bp154.2.1"/>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1487592000">- Update to 1.7.20</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1502625600">- Disable running unit tests by default because of random pygpgme failures</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1515067200">- Upgrade to 1.8.1
  + Fix memory leaks in Python bindings (gh#rpm-software-management/librepo#83)
  + Fix HTTP header checking to work with proxies (gh#rpm-software-management/librepo#86)
  + Change connection and low-speed default timeouts to sync with DNF/Yum
  + Fix max download speed from repo (rh#1227921)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1536840000">- Backport fix from upstream to use glibc's xattr instead of libattr
  * Add patch: 0001-stop-requiring-attr-xattr.patch
- Use full author identities in changelog entries</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1536840001">- Fix RPM groups. Update descriptions so that librepo0
  (which is going to be installed most of the time) has something
  halfway useful.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1549195200">- Upgrade to 1.9.3
  + Replace expat with libxml2
  + Support using python-gpg instead of pygpgme
  + Fix major performance regression with libcurl-7.61.1
  + Add zchunk support
- Drop patch for backported fix that is part of this release
  * Patch: 0001-stop-requiring-attr-xattr.patch
- Add patch proposed upstream to fix progress reporting for zck
  * Patch: PR138-Fix-progress-reporting-with-zchunk-files.patch
- Fix RPM group and description for Python 3 subpackage
- Drop Python 2 subpackage</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1554033600">- Upgrade to 1.9.6
  + Fix progress reporting with zchunk files
  + Reduce download delays by using still_running correctly
  + Improve error handling, cleanup
  + Simplified lr_perform()'s loop to prevent busy wait
  + Require libcurl &gt;= 7.28.0
- Drop patch included in this release
  * Patch: PR138-Fix-progress-reporting-with-zchunk-files.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1554033601">- Add patch to fix fetching zck-compressed repos (rh#1694411)
  * Patch: librepo-PR148-clean-up-curl-target_handle.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1557489600">- Upgrade to 1.10.1
  + Clean up target-&gt;curl_handle rather than target-&gt;handle (rh#1694411)
  + Add an option to preserve timestamps of the downloaded files (rh#1688537)
  + Fix fetching repositories supplied by SUSE Customer Center
  + [tests] Wait for server to start instead of doing arbitrary sleep
- Drop patch included in this release
  * Patch: librepo-PR148-clean-up-curl-target_handle.patch
- Disable executing test suite on ARM and RISC-V due to performance issues with builders</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1557662400">- Upgrade to 1.10.2
  + Fix librepo isn't able to load zchunk files from next server on failure (rh#1706321)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1558699200">- Upgrade to 1.10.3
  + Exit gpg-agent after repokey import (rh#1650266)
  + Make sure to check next transfer if current zck transfer already exists (rh#1706627)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1575201600">- Upgrade to 1.11.0
  + Define LRO_SUPPORTS_CACHEDIR only with zchunk (rh#1726141)
  + Allow to use mirrors multiple times for a target (rh#1678588)
  + Allow to try baseurl multiple times (rh#1678588)
  + Remove librepo xattr when no file descriptor (rh#1690894)
  + Fix verification of checksum from file attr (rh#1700341)
  + Rephrase repository GPG check error message (rh#1741442)
  + Add sleep when all mirrors were tried (rh#1741931)
  + Raise logging level of error messages (rh#1737709)
  + retry mirrorlist/metalink downloads
  + Fix lr_url_substitute() and add ${variable} support
  + Add support for one-time URL flags
  + Fix API - LrHandleOption enum - LRO_ONETIMEFLAG (rh#1761779)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1576324800">- Upgrade to 1.11.1
  + Create a directory for gpg sockets in /run/user/ (rh#1769831, rh#1771012)
- Fix bcond declaration for zchunk so defaults are always declared</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Upgrade to 1.11.2
  + Fix calling Python API without holding GIL (rh#1788918)
  + Do not unref LrErr_Exception on exit (rh#1778854)
  + Cleanup zchunk-related error messages (rh#1790625)
- Fix typo in changes entry about version update to 1.11.1</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1594123200">- Upgrade to 1.12.0
  + Prefer mirrorlist/metalink over baseurl (rh#1775184)
  + Decode package URL when using for local filename (rh#1817130)
  + Fix memory leak in lr_download_metadata() and lr_yum_download_remote()
  + Download sources work when at least one of specified is working (rh#1775184)</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1597924800">- Add validate_path.patch to prevent directory traversal attacks
  (boo#1175475, CVE-2020-14352)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1598097600">- Upgrade to 1.12.1
  + Validate path read from repomd.xml (rh#1868639, CVE-2020-14352)
- Dropped validate_path.patch to prevent directory traversal attacks
  (boo#1175475, CVE-2020-14352) since it is upstream with version 1.12.1</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1612353600">- Update to 1.13.0
  + Fix the key string parsing in url_substitution
  + Fix memory leak in 'fastestmirror'
  + Download whole file when server doesn't support ranges (rh#1886706)
  + Various fixes for mirrors without ranges support and zchunk
  + Add support for pkcs11 certificate and key for repository authorization (rh#1859495)
  + Fix lr_perform() - Avoid 100% CPU usage
  + Drop Python 2 support
  + Add support for working with certificates used with proxy (rh#1920991)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1618315200">- Update to 1.14.0
  + Fix LRO_PRESERVETIME behavior
  + Support multiple checksums in xattr (rh#1931904)
  + Return "calculated" checksum if requested w/caching
  + Fix lr_yum_download_url in case lr_handle is NULL</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1629892800">- Update to 1.14.2
  + Recover from fsync fail on read-only filesystem (rh#1956361)
  + Reduce time to load metadata
  + Fix resource leaks
  + Fix memory leaks</changelog>
</package>
<package pkgid="4f9a12d601b548b455997f25c9ddfdb99d40db22db044beafb3de7105b55e748" name="librepo0" arch="aarch64">
  <version epoch="0" ver="1.14.2" rel="bp154.2.1"/>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1487592000">- Update to 1.7.20</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1502625600">- Disable running unit tests by default because of random pygpgme failures</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1515067200">- Upgrade to 1.8.1
  + Fix memory leaks in Python bindings (gh#rpm-software-management/librepo#83)
  + Fix HTTP header checking to work with proxies (gh#rpm-software-management/librepo#86)
  + Change connection and low-speed default timeouts to sync with DNF/Yum
  + Fix max download speed from repo (rh#1227921)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1536840000">- Backport fix from upstream to use glibc's xattr instead of libattr
  * Add patch: 0001-stop-requiring-attr-xattr.patch
- Use full author identities in changelog entries</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1536840001">- Fix RPM groups. Update descriptions so that librepo0
  (which is going to be installed most of the time) has something
  halfway useful.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1549195200">- Upgrade to 1.9.3
  + Replace expat with libxml2
  + Support using python-gpg instead of pygpgme
  + Fix major performance regression with libcurl-7.61.1
  + Add zchunk support
- Drop patch for backported fix that is part of this release
  * Patch: 0001-stop-requiring-attr-xattr.patch
- Add patch proposed upstream to fix progress reporting for zck
  * Patch: PR138-Fix-progress-reporting-with-zchunk-files.patch
- Fix RPM group and description for Python 3 subpackage
- Drop Python 2 subpackage</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1554033600">- Upgrade to 1.9.6
  + Fix progress reporting with zchunk files
  + Reduce download delays by using still_running correctly
  + Improve error handling, cleanup
  + Simplified lr_perform()'s loop to prevent busy wait
  + Require libcurl &gt;= 7.28.0
- Drop patch included in this release
  * Patch: PR138-Fix-progress-reporting-with-zchunk-files.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1554033601">- Add patch to fix fetching zck-compressed repos (rh#1694411)
  * Patch: librepo-PR148-clean-up-curl-target_handle.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1557489600">- Upgrade to 1.10.1
  + Clean up target-&gt;curl_handle rather than target-&gt;handle (rh#1694411)
  + Add an option to preserve timestamps of the downloaded files (rh#1688537)
  + Fix fetching repositories supplied by SUSE Customer Center
  + [tests] Wait for server to start instead of doing arbitrary sleep
- Drop patch included in this release
  * Patch: librepo-PR148-clean-up-curl-target_handle.patch
- Disable executing test suite on ARM and RISC-V due to performance issues with builders</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1557662400">- Upgrade to 1.10.2
  + Fix librepo isn't able to load zchunk files from next server on failure (rh#1706321)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1558699200">- Upgrade to 1.10.3
  + Exit gpg-agent after repokey import (rh#1650266)
  + Make sure to check next transfer if current zck transfer already exists (rh#1706627)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1575201600">- Upgrade to 1.11.0
  + Define LRO_SUPPORTS_CACHEDIR only with zchunk (rh#1726141)
  + Allow to use mirrors multiple times for a target (rh#1678588)
  + Allow to try baseurl multiple times (rh#1678588)
  + Remove librepo xattr when no file descriptor (rh#1690894)
  + Fix verification of checksum from file attr (rh#1700341)
  + Rephrase repository GPG check error message (rh#1741442)
  + Add sleep when all mirrors were tried (rh#1741931)
  + Raise logging level of error messages (rh#1737709)
  + retry mirrorlist/metalink downloads
  + Fix lr_url_substitute() and add ${variable} support
  + Add support for one-time URL flags
  + Fix API - LrHandleOption enum - LRO_ONETIMEFLAG (rh#1761779)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1576324800">- Upgrade to 1.11.1
  + Create a directory for gpg sockets in /run/user/ (rh#1769831, rh#1771012)
- Fix bcond declaration for zchunk so defaults are always declared</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Upgrade to 1.11.2
  + Fix calling Python API without holding GIL (rh#1788918)
  + Do not unref LrErr_Exception on exit (rh#1778854)
  + Cleanup zchunk-related error messages (rh#1790625)
- Fix typo in changes entry about version update to 1.11.1</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1594123200">- Upgrade to 1.12.0
  + Prefer mirrorlist/metalink over baseurl (rh#1775184)
  + Decode package URL when using for local filename (rh#1817130)
  + Fix memory leak in lr_download_metadata() and lr_yum_download_remote()
  + Download sources work when at least one of specified is working (rh#1775184)</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1597924800">- Add validate_path.patch to prevent directory traversal attacks
  (boo#1175475, CVE-2020-14352)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1598097600">- Upgrade to 1.12.1
  + Validate path read from repomd.xml (rh#1868639, CVE-2020-14352)
- Dropped validate_path.patch to prevent directory traversal attacks
  (boo#1175475, CVE-2020-14352) since it is upstream with version 1.12.1</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1612353600">- Update to 1.13.0
  + Fix the key string parsing in url_substitution
  + Fix memory leak in 'fastestmirror'
  + Download whole file when server doesn't support ranges (rh#1886706)
  + Various fixes for mirrors without ranges support and zchunk
  + Add support for pkcs11 certificate and key for repository authorization (rh#1859495)
  + Fix lr_perform() - Avoid 100% CPU usage
  + Drop Python 2 support
  + Add support for working with certificates used with proxy (rh#1920991)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1618315200">- Update to 1.14.0
  + Fix LRO_PRESERVETIME behavior
  + Support multiple checksums in xattr (rh#1931904)
  + Return "calculated" checksum if requested w/caching
  + Fix lr_yum_download_url in case lr_handle is NULL</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1629892800">- Update to 1.14.2
  + Recover from fsync fail on read-only filesystem (rh#1956361)
  + Reduce time to load metadata
  + Fix resource leaks
  + Fix memory leaks</changelog>
</package>
<package pkgid="184d5bbad91eabf137ada512e11bb6c43df975e9aa667b5c684e44aaba951468" name="librepo0" arch="i586">
  <version epoch="0" ver="1.14.2" rel="bp154.2.1"/>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1487592000">- Update to 1.7.20</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1502625600">- Disable running unit tests by default because of random pygpgme failures</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1515067200">- Upgrade to 1.8.1
  + Fix memory leaks in Python bindings (gh#rpm-software-management/librepo#83)
  + Fix HTTP header checking to work with proxies (gh#rpm-software-management/librepo#86)
  + Change connection and low-speed default timeouts to sync with DNF/Yum
  + Fix max download speed from repo (rh#1227921)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1536840000">- Backport fix from upstream to use glibc's xattr instead of libattr
  * Add patch: 0001-stop-requiring-attr-xattr.patch
- Use full author identities in changelog entries</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1536840001">- Fix RPM groups. Update descriptions so that librepo0
  (which is going to be installed most of the time) has something
  halfway useful.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1549195200">- Upgrade to 1.9.3
  + Replace expat with libxml2
  + Support using python-gpg instead of pygpgme
  + Fix major performance regression with libcurl-7.61.1
  + Add zchunk support
- Drop patch for backported fix that is part of this release
  * Patch: 0001-stop-requiring-attr-xattr.patch
- Add patch proposed upstream to fix progress reporting for zck
  * Patch: PR138-Fix-progress-reporting-with-zchunk-files.patch
- Fix RPM group and description for Python 3 subpackage
- Drop Python 2 subpackage</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1554033600">- Upgrade to 1.9.6
  + Fix progress reporting with zchunk files
  + Reduce download delays by using still_running correctly
  + Improve error handling, cleanup
  + Simplified lr_perform()'s loop to prevent busy wait
  + Require libcurl &gt;= 7.28.0
- Drop patch included in this release
  * Patch: PR138-Fix-progress-reporting-with-zchunk-files.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1554033601">- Add patch to fix fetching zck-compressed repos (rh#1694411)
  * Patch: librepo-PR148-clean-up-curl-target_handle.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1557489600">- Upgrade to 1.10.1
  + Clean up target-&gt;curl_handle rather than target-&gt;handle (rh#1694411)
  + Add an option to preserve timestamps of the downloaded files (rh#1688537)
  + Fix fetching repositories supplied by SUSE Customer Center
  + [tests] Wait for server to start instead of doing arbitrary sleep
- Drop patch included in this release
  * Patch: librepo-PR148-clean-up-curl-target_handle.patch
- Disable executing test suite on ARM and RISC-V due to performance issues with builders</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1557662400">- Upgrade to 1.10.2
  + Fix librepo isn't able to load zchunk files from next server on failure (rh#1706321)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1558699200">- Upgrade to 1.10.3
  + Exit gpg-agent after repokey import (rh#1650266)
  + Make sure to check next transfer if current zck transfer already exists (rh#1706627)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1575201600">- Upgrade to 1.11.0
  + Define LRO_SUPPORTS_CACHEDIR only with zchunk (rh#1726141)
  + Allow to use mirrors multiple times for a target (rh#1678588)
  + Allow to try baseurl multiple times (rh#1678588)
  + Remove librepo xattr when no file descriptor (rh#1690894)
  + Fix verification of checksum from file attr (rh#1700341)
  + Rephrase repository GPG check error message (rh#1741442)
  + Add sleep when all mirrors were tried (rh#1741931)
  + Raise logging level of error messages (rh#1737709)
  + retry mirrorlist/metalink downloads
  + Fix lr_url_substitute() and add ${variable} support
  + Add support for one-time URL flags
  + Fix API - LrHandleOption enum - LRO_ONETIMEFLAG (rh#1761779)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1576324800">- Upgrade to 1.11.1
  + Create a directory for gpg sockets in /run/user/ (rh#1769831, rh#1771012)
- Fix bcond declaration for zchunk so defaults are always declared</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Upgrade to 1.11.2
  + Fix calling Python API without holding GIL (rh#1788918)
  + Do not unref LrErr_Exception on exit (rh#1778854)
  + Cleanup zchunk-related error messages (rh#1790625)
- Fix typo in changes entry about version update to 1.11.1</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1594123200">- Upgrade to 1.12.0
  + Prefer mirrorlist/metalink over baseurl (rh#1775184)
  + Decode package URL when using for local filename (rh#1817130)
  + Fix memory leak in lr_download_metadata() and lr_yum_download_remote()
  + Download sources work when at least one of specified is working (rh#1775184)</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1597924800">- Add validate_path.patch to prevent directory traversal attacks
  (boo#1175475, CVE-2020-14352)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1598097600">- Upgrade to 1.12.1
  + Validate path read from repomd.xml (rh#1868639, CVE-2020-14352)
- Dropped validate_path.patch to prevent directory traversal attacks
  (boo#1175475, CVE-2020-14352) since it is upstream with version 1.12.1</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1612353600">- Update to 1.13.0
  + Fix the key string parsing in url_substitution
  + Fix memory leak in 'fastestmirror'
  + Download whole file when server doesn't support ranges (rh#1886706)
  + Various fixes for mirrors without ranges support and zchunk
  + Add support for pkcs11 certificate and key for repository authorization (rh#1859495)
  + Fix lr_perform() - Avoid 100% CPU usage
  + Drop Python 2 support
  + Add support for working with certificates used with proxy (rh#1920991)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1618315200">- Update to 1.14.0
  + Fix LRO_PRESERVETIME behavior
  + Support multiple checksums in xattr (rh#1931904)
  + Return "calculated" checksum if requested w/caching
  + Fix lr_yum_download_url in case lr_handle is NULL</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1629892800">- Update to 1.14.2
  + Recover from fsync fail on read-only filesystem (rh#1956361)
  + Reduce time to load metadata
  + Fix resource leaks
  + Fix memory leaks</changelog>
</package>
<package pkgid="84b84924c2afc38f27af8ec510f3296bb8b6d24eb18c4f4441d6746919696cdc" name="librepo0" arch="ppc64le">
  <version epoch="0" ver="1.14.2" rel="bp154.2.1"/>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1487592000">- Update to 1.7.20</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1502625600">- Disable running unit tests by default because of random pygpgme failures</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1515067200">- Upgrade to 1.8.1
  + Fix memory leaks in Python bindings (gh#rpm-software-management/librepo#83)
  + Fix HTTP header checking to work with proxies (gh#rpm-software-management/librepo#86)
  + Change connection and low-speed default timeouts to sync with DNF/Yum
  + Fix max download speed from repo (rh#1227921)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1536840000">- Backport fix from upstream to use glibc's xattr instead of libattr
  * Add patch: 0001-stop-requiring-attr-xattr.patch
- Use full author identities in changelog entries</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1536840001">- Fix RPM groups. Update descriptions so that librepo0
  (which is going to be installed most of the time) has something
  halfway useful.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1549195200">- Upgrade to 1.9.3
  + Replace expat with libxml2
  + Support using python-gpg instead of pygpgme
  + Fix major performance regression with libcurl-7.61.1
  + Add zchunk support
- Drop patch for backported fix that is part of this release
  * Patch: 0001-stop-requiring-attr-xattr.patch
- Add patch proposed upstream to fix progress reporting for zck
  * Patch: PR138-Fix-progress-reporting-with-zchunk-files.patch
- Fix RPM group and description for Python 3 subpackage
- Drop Python 2 subpackage</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1554033600">- Upgrade to 1.9.6
  + Fix progress reporting with zchunk files
  + Reduce download delays by using still_running correctly
  + Improve error handling, cleanup
  + Simplified lr_perform()'s loop to prevent busy wait
  + Require libcurl &gt;= 7.28.0
- Drop patch included in this release
  * Patch: PR138-Fix-progress-reporting-with-zchunk-files.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1554033601">- Add patch to fix fetching zck-compressed repos (rh#1694411)
  * Patch: librepo-PR148-clean-up-curl-target_handle.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1557489600">- Upgrade to 1.10.1
  + Clean up target-&gt;curl_handle rather than target-&gt;handle (rh#1694411)
  + Add an option to preserve timestamps of the downloaded files (rh#1688537)
  + Fix fetching repositories supplied by SUSE Customer Center
  + [tests] Wait for server to start instead of doing arbitrary sleep
- Drop patch included in this release
  * Patch: librepo-PR148-clean-up-curl-target_handle.patch
- Disable executing test suite on ARM and RISC-V due to performance issues with builders</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1557662400">- Upgrade to 1.10.2
  + Fix librepo isn't able to load zchunk files from next server on failure (rh#1706321)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1558699200">- Upgrade to 1.10.3
  + Exit gpg-agent after repokey import (rh#1650266)
  + Make sure to check next transfer if current zck transfer already exists (rh#1706627)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1575201600">- Upgrade to 1.11.0
  + Define LRO_SUPPORTS_CACHEDIR only with zchunk (rh#1726141)
  + Allow to use mirrors multiple times for a target (rh#1678588)
  + Allow to try baseurl multiple times (rh#1678588)
  + Remove librepo xattr when no file descriptor (rh#1690894)
  + Fix verification of checksum from file attr (rh#1700341)
  + Rephrase repository GPG check error message (rh#1741442)
  + Add sleep when all mirrors were tried (rh#1741931)
  + Raise logging level of error messages (rh#1737709)
  + retry mirrorlist/metalink downloads
  + Fix lr_url_substitute() and add ${variable} support
  + Add support for one-time URL flags
  + Fix API - LrHandleOption enum - LRO_ONETIMEFLAG (rh#1761779)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1576324800">- Upgrade to 1.11.1
  + Create a directory for gpg sockets in /run/user/ (rh#1769831, rh#1771012)
- Fix bcond declaration for zchunk so defaults are always declared</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Upgrade to 1.11.2
  + Fix calling Python API without holding GIL (rh#1788918)
  + Do not unref LrErr_Exception on exit (rh#1778854)
  + Cleanup zchunk-related error messages (rh#1790625)
- Fix typo in changes entry about version update to 1.11.1</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1594123200">- Upgrade to 1.12.0
  + Prefer mirrorlist/metalink over baseurl (rh#1775184)
  + Decode package URL when using for local filename (rh#1817130)
  + Fix memory leak in lr_download_metadata() and lr_yum_download_remote()
  + Download sources work when at least one of specified is working (rh#1775184)</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1597924800">- Add validate_path.patch to prevent directory traversal attacks
  (boo#1175475, CVE-2020-14352)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1598097600">- Upgrade to 1.12.1
  + Validate path read from repomd.xml (rh#1868639, CVE-2020-14352)
- Dropped validate_path.patch to prevent directory traversal attacks
  (boo#1175475, CVE-2020-14352) since it is upstream with version 1.12.1</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1612353600">- Update to 1.13.0
  + Fix the key string parsing in url_substitution
  + Fix memory leak in 'fastestmirror'
  + Download whole file when server doesn't support ranges (rh#1886706)
  + Various fixes for mirrors without ranges support and zchunk
  + Add support for pkcs11 certificate and key for repository authorization (rh#1859495)
  + Fix lr_perform() - Avoid 100% CPU usage
  + Drop Python 2 support
  + Add support for working with certificates used with proxy (rh#1920991)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1618315200">- Update to 1.14.0
  + Fix LRO_PRESERVETIME behavior
  + Support multiple checksums in xattr (rh#1931904)
  + Return "calculated" checksum if requested w/caching
  + Fix lr_yum_download_url in case lr_handle is NULL</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1629892800">- Update to 1.14.2
  + Recover from fsync fail on read-only filesystem (rh#1956361)
  + Reduce time to load metadata
  + Fix resource leaks
  + Fix memory leaks</changelog>
</package>
<package pkgid="4976be227478438ef8a6b66a33877d39d15eb494e42934ad2a41676167f52980" name="librepo0" arch="s390x">
  <version epoch="0" ver="1.14.2" rel="bp154.2.1"/>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1487592000">- Update to 1.7.20</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1502625600">- Disable running unit tests by default because of random pygpgme failures</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1515067200">- Upgrade to 1.8.1
  + Fix memory leaks in Python bindings (gh#rpm-software-management/librepo#83)
  + Fix HTTP header checking to work with proxies (gh#rpm-software-management/librepo#86)
  + Change connection and low-speed default timeouts to sync with DNF/Yum
  + Fix max download speed from repo (rh#1227921)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1536840000">- Backport fix from upstream to use glibc's xattr instead of libattr
  * Add patch: 0001-stop-requiring-attr-xattr.patch
- Use full author identities in changelog entries</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1536840001">- Fix RPM groups. Update descriptions so that librepo0
  (which is going to be installed most of the time) has something
  halfway useful.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1549195200">- Upgrade to 1.9.3
  + Replace expat with libxml2
  + Support using python-gpg instead of pygpgme
  + Fix major performance regression with libcurl-7.61.1
  + Add zchunk support
- Drop patch for backported fix that is part of this release
  * Patch: 0001-stop-requiring-attr-xattr.patch
- Add patch proposed upstream to fix progress reporting for zck
  * Patch: PR138-Fix-progress-reporting-with-zchunk-files.patch
- Fix RPM group and description for Python 3 subpackage
- Drop Python 2 subpackage</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1554033600">- Upgrade to 1.9.6
  + Fix progress reporting with zchunk files
  + Reduce download delays by using still_running correctly
  + Improve error handling, cleanup
  + Simplified lr_perform()'s loop to prevent busy wait
  + Require libcurl &gt;= 7.28.0
- Drop patch included in this release
  * Patch: PR138-Fix-progress-reporting-with-zchunk-files.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1554033601">- Add patch to fix fetching zck-compressed repos (rh#1694411)
  * Patch: librepo-PR148-clean-up-curl-target_handle.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1557489600">- Upgrade to 1.10.1
  + Clean up target-&gt;curl_handle rather than target-&gt;handle (rh#1694411)
  + Add an option to preserve timestamps of the downloaded files (rh#1688537)
  + Fix fetching repositories supplied by SUSE Customer Center
  + [tests] Wait for server to start instead of doing arbitrary sleep
- Drop patch included in this release
  * Patch: librepo-PR148-clean-up-curl-target_handle.patch
- Disable executing test suite on ARM and RISC-V due to performance issues with builders</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1557662400">- Upgrade to 1.10.2
  + Fix librepo isn't able to load zchunk files from next server on failure (rh#1706321)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1558699200">- Upgrade to 1.10.3
  + Exit gpg-agent after repokey import (rh#1650266)
  + Make sure to check next transfer if current zck transfer already exists (rh#1706627)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1575201600">- Upgrade to 1.11.0
  + Define LRO_SUPPORTS_CACHEDIR only with zchunk (rh#1726141)
  + Allow to use mirrors multiple times for a target (rh#1678588)
  + Allow to try baseurl multiple times (rh#1678588)
  + Remove librepo xattr when no file descriptor (rh#1690894)
  + Fix verification of checksum from file attr (rh#1700341)
  + Rephrase repository GPG check error message (rh#1741442)
  + Add sleep when all mirrors were tried (rh#1741931)
  + Raise logging level of error messages (rh#1737709)
  + retry mirrorlist/metalink downloads
  + Fix lr_url_substitute() and add ${variable} support
  + Add support for one-time URL flags
  + Fix API - LrHandleOption enum - LRO_ONETIMEFLAG (rh#1761779)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1576324800">- Upgrade to 1.11.1
  + Create a directory for gpg sockets in /run/user/ (rh#1769831, rh#1771012)
- Fix bcond declaration for zchunk so defaults are always declared</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Upgrade to 1.11.2
  + Fix calling Python API without holding GIL (rh#1788918)
  + Do not unref LrErr_Exception on exit (rh#1778854)
  + Cleanup zchunk-related error messages (rh#1790625)
- Fix typo in changes entry about version update to 1.11.1</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1594123200">- Upgrade to 1.12.0
  + Prefer mirrorlist/metalink over baseurl (rh#1775184)
  + Decode package URL when using for local filename (rh#1817130)
  + Fix memory leak in lr_download_metadata() and lr_yum_download_remote()
  + Download sources work when at least one of specified is working (rh#1775184)</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1597924800">- Add validate_path.patch to prevent directory traversal attacks
  (boo#1175475, CVE-2020-14352)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1598097600">- Upgrade to 1.12.1
  + Validate path read from repomd.xml (rh#1868639, CVE-2020-14352)
- Dropped validate_path.patch to prevent directory traversal attacks
  (boo#1175475, CVE-2020-14352) since it is upstream with version 1.12.1</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1612353600">- Update to 1.13.0
  + Fix the key string parsing in url_substitution
  + Fix memory leak in 'fastestmirror'
  + Download whole file when server doesn't support ranges (rh#1886706)
  + Various fixes for mirrors without ranges support and zchunk
  + Add support for pkcs11 certificate and key for repository authorization (rh#1859495)
  + Fix lr_perform() - Avoid 100% CPU usage
  + Drop Python 2 support
  + Add support for working with certificates used with proxy (rh#1920991)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1618315200">- Update to 1.14.0
  + Fix LRO_PRESERVETIME behavior
  + Support multiple checksums in xattr (rh#1931904)
  + Return "calculated" checksum if requested w/caching
  + Fix lr_yum_download_url in case lr_handle is NULL</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1629892800">- Update to 1.14.2
  + Recover from fsync fail on read-only filesystem (rh#1956361)
  + Reduce time to load metadata
  + Fix resource leaks
  + Fix memory leaks</changelog>
</package>
<package pkgid="291c51319ec28ccb45e4aeb595c328866c867d6b485d65760ce646ac980f53de" name="librepo0" arch="x86_64">
  <version epoch="0" ver="1.14.2" rel="bp154.2.1"/>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1487592000">- Update to 1.7.20</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1502625600">- Disable running unit tests by default because of random pygpgme failures</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1515067200">- Upgrade to 1.8.1
  + Fix memory leaks in Python bindings (gh#rpm-software-management/librepo#83)
  + Fix HTTP header checking to work with proxies (gh#rpm-software-management/librepo#86)
  + Change connection and low-speed default timeouts to sync with DNF/Yum
  + Fix max download speed from repo (rh#1227921)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1536840000">- Backport fix from upstream to use glibc's xattr instead of libattr
  * Add patch: 0001-stop-requiring-attr-xattr.patch
- Use full author identities in changelog entries</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1536840001">- Fix RPM groups. Update descriptions so that librepo0
  (which is going to be installed most of the time) has something
  halfway useful.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1549195200">- Upgrade to 1.9.3
  + Replace expat with libxml2
  + Support using python-gpg instead of pygpgme
  + Fix major performance regression with libcurl-7.61.1
  + Add zchunk support
- Drop patch for backported fix that is part of this release
  * Patch: 0001-stop-requiring-attr-xattr.patch
- Add patch proposed upstream to fix progress reporting for zck
  * Patch: PR138-Fix-progress-reporting-with-zchunk-files.patch
- Fix RPM group and description for Python 3 subpackage
- Drop Python 2 subpackage</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1554033600">- Upgrade to 1.9.6
  + Fix progress reporting with zchunk files
  + Reduce download delays by using still_running correctly
  + Improve error handling, cleanup
  + Simplified lr_perform()'s loop to prevent busy wait
  + Require libcurl &gt;= 7.28.0
- Drop patch included in this release
  * Patch: PR138-Fix-progress-reporting-with-zchunk-files.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1554033601">- Add patch to fix fetching zck-compressed repos (rh#1694411)
  * Patch: librepo-PR148-clean-up-curl-target_handle.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1557489600">- Upgrade to 1.10.1
  + Clean up target-&gt;curl_handle rather than target-&gt;handle (rh#1694411)
  + Add an option to preserve timestamps of the downloaded files (rh#1688537)
  + Fix fetching repositories supplied by SUSE Customer Center
  + [tests] Wait for server to start instead of doing arbitrary sleep
- Drop patch included in this release
  * Patch: librepo-PR148-clean-up-curl-target_handle.patch
- Disable executing test suite on ARM and RISC-V due to performance issues with builders</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1557662400">- Upgrade to 1.10.2
  + Fix librepo isn't able to load zchunk files from next server on failure (rh#1706321)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1558699200">- Upgrade to 1.10.3
  + Exit gpg-agent after repokey import (rh#1650266)
  + Make sure to check next transfer if current zck transfer already exists (rh#1706627)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1575201600">- Upgrade to 1.11.0
  + Define LRO_SUPPORTS_CACHEDIR only with zchunk (rh#1726141)
  + Allow to use mirrors multiple times for a target (rh#1678588)
  + Allow to try baseurl multiple times (rh#1678588)
  + Remove librepo xattr when no file descriptor (rh#1690894)
  + Fix verification of checksum from file attr (rh#1700341)
  + Rephrase repository GPG check error message (rh#1741442)
  + Add sleep when all mirrors were tried (rh#1741931)
  + Raise logging level of error messages (rh#1737709)
  + retry mirrorlist/metalink downloads
  + Fix lr_url_substitute() and add ${variable} support
  + Add support for one-time URL flags
  + Fix API - LrHandleOption enum - LRO_ONETIMEFLAG (rh#1761779)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1576324800">- Upgrade to 1.11.1
  + Create a directory for gpg sockets in /run/user/ (rh#1769831, rh#1771012)
- Fix bcond declaration for zchunk so defaults are always declared</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Upgrade to 1.11.2
  + Fix calling Python API without holding GIL (rh#1788918)
  + Do not unref LrErr_Exception on exit (rh#1778854)
  + Cleanup zchunk-related error messages (rh#1790625)
- Fix typo in changes entry about version update to 1.11.1</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1594123200">- Upgrade to 1.12.0
  + Prefer mirrorlist/metalink over baseurl (rh#1775184)
  + Decode package URL when using for local filename (rh#1817130)
  + Fix memory leak in lr_download_metadata() and lr_yum_download_remote()
  + Download sources work when at least one of specified is working (rh#1775184)</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1597924800">- Add validate_path.patch to prevent directory traversal attacks
  (boo#1175475, CVE-2020-14352)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1598097600">- Upgrade to 1.12.1
  + Validate path read from repomd.xml (rh#1868639, CVE-2020-14352)
- Dropped validate_path.patch to prevent directory traversal attacks
  (boo#1175475, CVE-2020-14352) since it is upstream with version 1.12.1</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1612353600">- Update to 1.13.0
  + Fix the key string parsing in url_substitution
  + Fix memory leak in 'fastestmirror'
  + Download whole file when server doesn't support ranges (rh#1886706)
  + Various fixes for mirrors without ranges support and zchunk
  + Add support for pkcs11 certificate and key for repository authorization (rh#1859495)
  + Fix lr_perform() - Avoid 100% CPU usage
  + Drop Python 2 support
  + Add support for working with certificates used with proxy (rh#1920991)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1618315200">- Update to 1.14.0
  + Fix LRO_PRESERVETIME behavior
  + Support multiple checksums in xattr (rh#1931904)
  + Return "calculated" checksum if requested w/caching
  + Fix lr_yum_download_url in case lr_handle is NULL</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1629892800">- Update to 1.14.2
  + Recover from fsync fail on read-only filesystem (rh#1956361)
  + Reduce time to load metadata
  + Fix resource leaks
  + Fix memory leaks</changelog>
</package>
<package pkgid="5ac78e0b112f58214ebae39995fe04c9539664698db983aa44abfc1b4f360510" name="libroken18" arch="aarch64">
  <version epoch="0" ver="7.8.0" rel="bp154.2.4.1"/>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1440936000">- Initial package, version 1.6rc2
- Added patch heimdal-version-script-client.map.patch to add file
  version-script-client.map (File is present in git for tag 1.6rc2
  but missing in tarball).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441108800">- Some changes in spec file to enable build for SLES.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441195200">- Added Conflicts tags to spec file because devel package conflicts
  with krb5-devel and krb5-mini-devel.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441454400">- Added a patched instead of the original tarball because only
  shared libraries will be build and source files of these (not to
  be build) programs have problematic licenses.
- Added script heimdal-patch-source.sh to sources.
- Added patch heimdal-patched.diff that fixes configure.ac and
  several Makefile.am files to successfully build patched source.
- Removed unneeded dependencies in spec file for build.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1483790400">- Update to version 7.1.0
- Removed heimdal-version-script-client.map.patch, fixed upstream.
- Fixed heimdal-patched.diff.
- Unfortunately there is no updated changelog file in tarball,
  changes can be seen in source code version control systems
  history log.</changelog>
  <changelog author="jengelh@inai.de" date="1486036800">- Summary and RPM group update. Do a direct call to ldconfig
  where possible.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1497528000">- Update to version 7.3.0
  - Security
    + Fix transit path validation. Commit f469fc6 (2010-10-02)
    inadvertently caused the previous hop realm to not be added
    to the transit path of issued tickets. This may, in some
    cases, enable bypass of capath policy in Heimdal versions 1.5
    through 7.2.
    Note, this may break sites that rely on the bug. With the bug
    some incomplete [capaths] worked, that should not have.
    These may now break authentication in some cross-realm
    configurations. (CVE-2017-6594)
- Version 7.2.0
  - Bug fixes
    + Portability improvements.
    + More strict parsing of encoded URI components in HTTP KDC.
    + Fixed memory leak in malloc error recovery in NTLM GSSAPI
    mechanism.
    + Avoid overly specific CPU info in krb5-config in aid of
    reproducible builds.
    + Don't do AFS string-to-key tests when feature is disabled.
    + Skip mdb_stat test when the command is not available.
    + Windows: update SHA2 timestamp server.
    + hdb: add missing export
    hdb_generate_key_set_password_with_ks_tuple.
    + Fix signature of hdb_generate_key_set_password().
    + Windows: enable KX509 support in the KDC.
    + kdc: fix kx509 service principal match.
    + iprop: handle case where master sends nothing new.
    + ipropd-slave: fix incorrect error codes.
    + Allow choice of sqlite for HDB pref.
    + check-iprop: don't fail to kill daemons.
    + roken: pidfile -&gt; rk_pidfile.
    + kdc: _kdc_do_kx509 fix use after free error.
    + Do not detect x32 as 64-bit platform.
    + No sys/ttydefaults.h on CYGWIN.
    + Fix check-iprop races.
    + roken_detach_prep() close pipe.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1501761600">- Update to version 7.4.0
  - Security
  - Fix CVE-2017-11103: Orpheus' Lyre KDC-REP service name
    validation.
    This is a critical vulnerability.
    In _krb5_extract_ticket() the KDC-REP service name must be
    obtained from encrypted version stored in 'enc_part' instead
    of the unencrypted version stored in 'ticket'.
    Use of the unecrypted version provides an opportunity for
    successful server impersonation and other attacks.
    Identified by Jeffrey Altman, Viktor Duchovni and
    Nico Williams.
    See https://www.orpheus-lyre.info/ for more details.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1512648000">- Added Avoid_NULL_structure_pointer_member_dereference.patch,
  fixes (bsc#1071675).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1514548800">- Update to version 7.5.0
  - Security
  - Fix CVE-2017-17439, which is a remote denial of service
    vulnerability:
    In Heimdal 7.1 through 7.4, remote unauthenticated attackers
    are able to crash the KDC by sending a crafted UDP packet
    containing empty data fields for client name or realm.
  - Bug fixes
  - Handle long input lines when reloading database dumps.
  - In pre-forked mode (default on Unix), correctly clear the
    process ids of exited children, allowing new child processes
    to replace the old.
  - Fixed incorrect KDC response when no-cross realm TGT exists,
    allowing client requests to fail quickly rather than time
    out after trying to get a correct answer from each KDC.
- Fixed heimdal-patched.diff.
- Removed Avoid_NULL_structure_pointer_member_dereference.patch,
  fixed upstream.</changelog>
  <changelog author="bwiedemann@suse.com" date="1533643200">- Add reproducible.patch to override build date (boo#1047218)
- Use constant hostname (boo#1084909)</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1561291200">- Update to version 7.7.0
  + Bug fixes:
  - PKCS#11 hcrypto back-end:
    + initialize the p11_module_load function list
    + verify that not only is a mechanism present but that its
    mechanism info states that it offers the required
    encryption, decryption or digest services
  - krb5:
    + Starting with 7.6, Heimdal permitted requesting
    authenticated anonymous tickets. However, it did not
    verify that a KDC in fact returned an anonymous ticket
    when one was requested.
    + Cease setting the KDCOption reaquest_anonymous flag when
    issuing S4UProxy (constrained delegation) TGS requests.
    + when the Win2K PKINIT compatibility option is set, do not
    require krbtgt otherName to match when validating KDC
    certificate.
    + set PKINIT_BTMM flag per Apple implementation
    + use memset_s() instead of memset()
  - kdc:
    + When generating KRB5SignedPath in the AS, use the reply
    client name rather than the one from the request, so
    validation will work correctly in the TGS.
    + allow checksum of PA-FOR-USER to be HMAC_MD5. Even if TGT
    used an enctype with a different checksum. Per [MS-SFU]
    2.2.1 PA-FOR-USER the checksum is always HMAC_MD5, and
    that's what Windows and MIT clients send.
    In Heimdal both the client and kdc use instead the
    checksum of the TGT, and therefore work with each other
    but Windows and MIT clients fail against Heimdal KDC.
    Both Windows and MIT KDC would allow any keyed checksum
    to be used so Heimdal client work fine against it.
    Change Heimdal KDC to allow HMAC_MD5 even for non RC4
    based TGT in order to support per-spec clients.
    + use memset_s() instead of memset()
    + Detect Heimdal 1.0 through 7.6 clients that issue
    S4UProxy (constrained delegation) TGS Requests with the
    request anonymous flag set. These requests will be
    treated as S4UProxy requests and not anonymous requests.
  - HDB:
    + Set SQLite3 backend default page size to 8KB.
    + Add hdb_set_sync() method
  - kadmind:
    + disable HDB sync during database load avoiding
    unnecessary disk i/o.
  - ipropd:
    + disable HDB sync during receive_everything. Doing an
    fsync per-record when receiving the complete HDB is a
    performance disaster. Among other things, if the HDB is
    very large, then one slave receving a full HDB can cause
    other slaves to timeout and, if HDB write activity is
    high enough to cause iprop log truncation, then also need
    full syncs, which leads to a cycle of full syncs for all
    slaves until HDB write activity drops.
    Allowing the iprop log to be larger helps, but improving
    receive_everything() performance helps even more.
  - kinit:
    + Anonymous PKINIT tickets discard the realm information
    used to locate the issuing AS. Store the issuing realm in
    the credentials cache in order to locate a KDC which can
    renew them.
    + Do not leak the result of krb5_cc_get_config() when
    determining anonymous PKINIT start realm.
  - klist:
    + Show transited-policy-checked, ok-as-delegate and
    anonymous flags when listing credentials.
  - tests:
    + Regenerate certs so that they expire before the 2038
    armageddon so the test suite will pass on 32-bit
    operating systems until the underlying issues can be
    resolved.
  - Solaris:
    + Define _STDC_C11_BCI for memset_s prototype
  - build tooling:
    + Convert from python 2 to python 3
  - documentation:
    + rename verify-password to verify-password-quality
    + hprop default mode is encrypt
    + kadmind "all" permission does not include "get-keys"
    + verify-password-quality might not be stateless
- Version 7.6.0
  + Security (#555):
  - CVE-2018-16860 Heimdal KDC: Reject PA-S4U2Self with unkeyed
    checksum
    When the Heimdal KDC checks the checksum that is placed on
    the S4U2Self packet by the server to protect the requested
    principal against modification, it does not confirm that
    the checksum algorithm that protects the user name
    (principal) in the request is keyed. This allows a
    man-in-the-middle attacker who can intercept the request to
    the KDC to modify the packet by replacing the user name
    (principal) in the request with any desired user name
    (principal) that exists in the KDC and replace the checksum
    protecting that name with a CRC32 checksum (which requires
    no prior knowledge to compute).
    This would allow a S4U2Self ticket requested on behalf of
    user name (principal) user@EXAMPLE.COM to any service to be
    changed to a S4U2Self ticket with a user name (principal) of
    Administrator@EXAMPLE.COM. This ticket would then contain
    the PAC of the modified user name (principal).
  - CVE-2019-12098, client-only:
    RFC8062 Section 7 requires verification of the PA-PKINIT-KX
    key exchange when anonymous PKINIT is used. Failure to do
    so can permit an active attacker to become a
    man-in-the-middle.
  + Bug fixes:
  - Happy eyeballs: Don't wait for responses from
    known-unreachable KDCs.
  - kdc:
    + check return copy_Realm, copy_PrincipalName,
    copy_EncryptionKey
  - kinit:
    + cleanup temporary ccaches
    + see man page for "kinit --anonymous" command line syntax
    change
  - kdc:
    + Make anonymous AS-requests more RFC8062-compliant.
    Updated expired test certificates
  - Solaris:
    + PKCS#11 hcrypto backend broken since 7.0.1
    + Building with Sun Pro C
  + Features:
  - kuser: support authenticated anonymous AS-REQs in kinit
  - kdc: support for anonymous TGS-REQs
  - kgetcred support for anonymous service tickets
  - Support builds with OpenSSL 1.1.1
- fixed heimdal-patched.diff and reproducible.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1653480000">- Apply Shared Library Packaging Policy and resolve rpmlint
  errors like "libheimdal.x86_64: E: shlib-policy-name-error
  SONAME: libasn1.so.8, expected package suffix: 8"</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656417600">- Add heimdal-7.7.0-autoconf-2.70.patch: Fix build with autoconf
  2.70 (gh#heimdal/heimdal#856).</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656590400">- Add ldconfig scriptlets.
- Fix 'Conflicts:' tags.
- Remove obsolete macros and conditionals.
- Ran spec-cleaner.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1671624000">- Update to version 7.8.0
  + This release includes both the Heimdal 7.7.1 Security
    Vulnerability fixes and non-Security bug fixes/improvements.
  + Security Vulnerabilities:
  - CVE-2022-42898 PAC parse integer overflows
  - CVE-2022-3437 Overflows and non-constant time leaks in
    DES{,3} and arcfour
  - CVE-2022-41916 Fix Unicode normalization read of 1 bytes past
    end of array
  - CVE-2021-44758 A null pointer de-reference DoS in SPNEGO
    acceptors
  - CVE-2021-3671 A null pointer de-reference when handling
    missing sname in TGS-REQ
  - CVE-2022-44640 Heimdal KDC: invalid free in ASN.1 codec
    Note that CVE-2022-44640 is a severe vulnerability,
    possibly a 10.0 on the Common Vulnerability Scoring
    System (CVSS) v3, as we believe it should be possible to
    get an RCE on a KDC, which means that credentials can be
    compromised that can be used to impersonate anyone in a
    realm or forest of realms.
    Heimdal's ASN.1 compiler generates code that allows
    specially crafted DER encodings of CHOICEs to invoke the
    wrong free function on the decoded structure upon decode
    error. This is known to impact the Heimdal KDC, leading to
    an invalid free() of an address partly or wholly under the
    control of the attacker, in turn leading to a potential
    remote code execution (RCE) vulnerability.
    This error affects the DER codec for all extensible CHOICE
    types used in Heimdal, though not all cases will be
    exploitable. We have not completed a thorough analysis of
    all the Heimdal components affected, thus the Kerberos
    client, the X.509 library, and other parts, may be affected
    as well.
    This bug has been in Heimdal's ASN.1 compiler since 2005,
    but it may only affect Heimdal 1.6 and up. It was first
    reported by Douglas Bagnall, though it had been found
    independently by the Heimdal maintainers via fuzzing a few
    weeks earlier.
    While no zero-day exploit is known, such an exploit will
    likely be available soon after public disclosure.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  + Other changes:
  - Bugs found by UBSAN (including the incorrect encoding of
    unconstrained INTEGER value -1).
  - Errors found by the LLVM scan-build static analyzer.
  - Errors found by the valgrind memory debugger.
  - Work around GCC Bug 95189 (memcmp wrongly stripped like
    strcmp).
  - Correct ASN.1 OID typo for SHA-384
  - Fix a deadlock in in the MEMORY ccache type.
  - TGS: strip forwardable and proxiable flags if the server is
    disallowed.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  - Incremental HDB propagation improvements
    Refactor send_diffs making it progressive
    Handle partial writes on non-blocking sockets
    Disable Nagle in iprop master and slave
    Use async I/O
    Don't send I_HAVE in response to AYT
    Do not recover log in kadm5_get_principal()
    Don't send diffs to slaves with not yet known version
    Don't stutter in send_diffs
  - Optional backwards-compatible anon-pkinit behavior
- Removed heimdal-7.7.0-autoconf-2.70.patch, fixed upstream.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1673352000">- replace libheimdal conflicts by obsoletes / provides to provide a
  smooth update in the new libheimdal-devel.</changelog>
</package>
<package pkgid="d9ba6b4c06fd21a332e738b060058cfd17501d22fb79985dac567d1edd1df6d1" name="libroken18" arch="i586">
  <version epoch="0" ver="7.8.0" rel="bp154.2.4.1"/>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1440936000">- Initial package, version 1.6rc2
- Added patch heimdal-version-script-client.map.patch to add file
  version-script-client.map (File is present in git for tag 1.6rc2
  but missing in tarball).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441108800">- Some changes in spec file to enable build for SLES.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441195200">- Added Conflicts tags to spec file because devel package conflicts
  with krb5-devel and krb5-mini-devel.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441454400">- Added a patched instead of the original tarball because only
  shared libraries will be build and source files of these (not to
  be build) programs have problematic licenses.
- Added script heimdal-patch-source.sh to sources.
- Added patch heimdal-patched.diff that fixes configure.ac and
  several Makefile.am files to successfully build patched source.
- Removed unneeded dependencies in spec file for build.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1483790400">- Update to version 7.1.0
- Removed heimdal-version-script-client.map.patch, fixed upstream.
- Fixed heimdal-patched.diff.
- Unfortunately there is no updated changelog file in tarball,
  changes can be seen in source code version control systems
  history log.</changelog>
  <changelog author="jengelh@inai.de" date="1486036800">- Summary and RPM group update. Do a direct call to ldconfig
  where possible.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1497528000">- Update to version 7.3.0
  - Security
    + Fix transit path validation. Commit f469fc6 (2010-10-02)
    inadvertently caused the previous hop realm to not be added
    to the transit path of issued tickets. This may, in some
    cases, enable bypass of capath policy in Heimdal versions 1.5
    through 7.2.
    Note, this may break sites that rely on the bug. With the bug
    some incomplete [capaths] worked, that should not have.
    These may now break authentication in some cross-realm
    configurations. (CVE-2017-6594)
- Version 7.2.0
  - Bug fixes
    + Portability improvements.
    + More strict parsing of encoded URI components in HTTP KDC.
    + Fixed memory leak in malloc error recovery in NTLM GSSAPI
    mechanism.
    + Avoid overly specific CPU info in krb5-config in aid of
    reproducible builds.
    + Don't do AFS string-to-key tests when feature is disabled.
    + Skip mdb_stat test when the command is not available.
    + Windows: update SHA2 timestamp server.
    + hdb: add missing export
    hdb_generate_key_set_password_with_ks_tuple.
    + Fix signature of hdb_generate_key_set_password().
    + Windows: enable KX509 support in the KDC.
    + kdc: fix kx509 service principal match.
    + iprop: handle case where master sends nothing new.
    + ipropd-slave: fix incorrect error codes.
    + Allow choice of sqlite for HDB pref.
    + check-iprop: don't fail to kill daemons.
    + roken: pidfile -&gt; rk_pidfile.
    + kdc: _kdc_do_kx509 fix use after free error.
    + Do not detect x32 as 64-bit platform.
    + No sys/ttydefaults.h on CYGWIN.
    + Fix check-iprop races.
    + roken_detach_prep() close pipe.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1501761600">- Update to version 7.4.0
  - Security
  - Fix CVE-2017-11103: Orpheus' Lyre KDC-REP service name
    validation.
    This is a critical vulnerability.
    In _krb5_extract_ticket() the KDC-REP service name must be
    obtained from encrypted version stored in 'enc_part' instead
    of the unencrypted version stored in 'ticket'.
    Use of the unecrypted version provides an opportunity for
    successful server impersonation and other attacks.
    Identified by Jeffrey Altman, Viktor Duchovni and
    Nico Williams.
    See https://www.orpheus-lyre.info/ for more details.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1512648000">- Added Avoid_NULL_structure_pointer_member_dereference.patch,
  fixes (bsc#1071675).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1514548800">- Update to version 7.5.0
  - Security
  - Fix CVE-2017-17439, which is a remote denial of service
    vulnerability:
    In Heimdal 7.1 through 7.4, remote unauthenticated attackers
    are able to crash the KDC by sending a crafted UDP packet
    containing empty data fields for client name or realm.
  - Bug fixes
  - Handle long input lines when reloading database dumps.
  - In pre-forked mode (default on Unix), correctly clear the
    process ids of exited children, allowing new child processes
    to replace the old.
  - Fixed incorrect KDC response when no-cross realm TGT exists,
    allowing client requests to fail quickly rather than time
    out after trying to get a correct answer from each KDC.
- Fixed heimdal-patched.diff.
- Removed Avoid_NULL_structure_pointer_member_dereference.patch,
  fixed upstream.</changelog>
  <changelog author="bwiedemann@suse.com" date="1533643200">- Add reproducible.patch to override build date (boo#1047218)
- Use constant hostname (boo#1084909)</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1561291200">- Update to version 7.7.0
  + Bug fixes:
  - PKCS#11 hcrypto back-end:
    + initialize the p11_module_load function list
    + verify that not only is a mechanism present but that its
    mechanism info states that it offers the required
    encryption, decryption or digest services
  - krb5:
    + Starting with 7.6, Heimdal permitted requesting
    authenticated anonymous tickets. However, it did not
    verify that a KDC in fact returned an anonymous ticket
    when one was requested.
    + Cease setting the KDCOption reaquest_anonymous flag when
    issuing S4UProxy (constrained delegation) TGS requests.
    + when the Win2K PKINIT compatibility option is set, do not
    require krbtgt otherName to match when validating KDC
    certificate.
    + set PKINIT_BTMM flag per Apple implementation
    + use memset_s() instead of memset()
  - kdc:
    + When generating KRB5SignedPath in the AS, use the reply
    client name rather than the one from the request, so
    validation will work correctly in the TGS.
    + allow checksum of PA-FOR-USER to be HMAC_MD5. Even if TGT
    used an enctype with a different checksum. Per [MS-SFU]
    2.2.1 PA-FOR-USER the checksum is always HMAC_MD5, and
    that's what Windows and MIT clients send.
    In Heimdal both the client and kdc use instead the
    checksum of the TGT, and therefore work with each other
    but Windows and MIT clients fail against Heimdal KDC.
    Both Windows and MIT KDC would allow any keyed checksum
    to be used so Heimdal client work fine against it.
    Change Heimdal KDC to allow HMAC_MD5 even for non RC4
    based TGT in order to support per-spec clients.
    + use memset_s() instead of memset()
    + Detect Heimdal 1.0 through 7.6 clients that issue
    S4UProxy (constrained delegation) TGS Requests with the
    request anonymous flag set. These requests will be
    treated as S4UProxy requests and not anonymous requests.
  - HDB:
    + Set SQLite3 backend default page size to 8KB.
    + Add hdb_set_sync() method
  - kadmind:
    + disable HDB sync during database load avoiding
    unnecessary disk i/o.
  - ipropd:
    + disable HDB sync during receive_everything. Doing an
    fsync per-record when receiving the complete HDB is a
    performance disaster. Among other things, if the HDB is
    very large, then one slave receving a full HDB can cause
    other slaves to timeout and, if HDB write activity is
    high enough to cause iprop log truncation, then also need
    full syncs, which leads to a cycle of full syncs for all
    slaves until HDB write activity drops.
    Allowing the iprop log to be larger helps, but improving
    receive_everything() performance helps even more.
  - kinit:
    + Anonymous PKINIT tickets discard the realm information
    used to locate the issuing AS. Store the issuing realm in
    the credentials cache in order to locate a KDC which can
    renew them.
    + Do not leak the result of krb5_cc_get_config() when
    determining anonymous PKINIT start realm.
  - klist:
    + Show transited-policy-checked, ok-as-delegate and
    anonymous flags when listing credentials.
  - tests:
    + Regenerate certs so that they expire before the 2038
    armageddon so the test suite will pass on 32-bit
    operating systems until the underlying issues can be
    resolved.
  - Solaris:
    + Define _STDC_C11_BCI for memset_s prototype
  - build tooling:
    + Convert from python 2 to python 3
  - documentation:
    + rename verify-password to verify-password-quality
    + hprop default mode is encrypt
    + kadmind "all" permission does not include "get-keys"
    + verify-password-quality might not be stateless
- Version 7.6.0
  + Security (#555):
  - CVE-2018-16860 Heimdal KDC: Reject PA-S4U2Self with unkeyed
    checksum
    When the Heimdal KDC checks the checksum that is placed on
    the S4U2Self packet by the server to protect the requested
    principal against modification, it does not confirm that
    the checksum algorithm that protects the user name
    (principal) in the request is keyed. This allows a
    man-in-the-middle attacker who can intercept the request to
    the KDC to modify the packet by replacing the user name
    (principal) in the request with any desired user name
    (principal) that exists in the KDC and replace the checksum
    protecting that name with a CRC32 checksum (which requires
    no prior knowledge to compute).
    This would allow a S4U2Self ticket requested on behalf of
    user name (principal) user@EXAMPLE.COM to any service to be
    changed to a S4U2Self ticket with a user name (principal) of
    Administrator@EXAMPLE.COM. This ticket would then contain
    the PAC of the modified user name (principal).
  - CVE-2019-12098, client-only:
    RFC8062 Section 7 requires verification of the PA-PKINIT-KX
    key exchange when anonymous PKINIT is used. Failure to do
    so can permit an active attacker to become a
    man-in-the-middle.
  + Bug fixes:
  - Happy eyeballs: Don't wait for responses from
    known-unreachable KDCs.
  - kdc:
    + check return copy_Realm, copy_PrincipalName,
    copy_EncryptionKey
  - kinit:
    + cleanup temporary ccaches
    + see man page for "kinit --anonymous" command line syntax
    change
  - kdc:
    + Make anonymous AS-requests more RFC8062-compliant.
    Updated expired test certificates
  - Solaris:
    + PKCS#11 hcrypto backend broken since 7.0.1
    + Building with Sun Pro C
  + Features:
  - kuser: support authenticated anonymous AS-REQs in kinit
  - kdc: support for anonymous TGS-REQs
  - kgetcred support for anonymous service tickets
  - Support builds with OpenSSL 1.1.1
- fixed heimdal-patched.diff and reproducible.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1653480000">- Apply Shared Library Packaging Policy and resolve rpmlint
  errors like "libheimdal.x86_64: E: shlib-policy-name-error
  SONAME: libasn1.so.8, expected package suffix: 8"</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656417600">- Add heimdal-7.7.0-autoconf-2.70.patch: Fix build with autoconf
  2.70 (gh#heimdal/heimdal#856).</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656590400">- Add ldconfig scriptlets.
- Fix 'Conflicts:' tags.
- Remove obsolete macros and conditionals.
- Ran spec-cleaner.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1671624000">- Update to version 7.8.0
  + This release includes both the Heimdal 7.7.1 Security
    Vulnerability fixes and non-Security bug fixes/improvements.
  + Security Vulnerabilities:
  - CVE-2022-42898 PAC parse integer overflows
  - CVE-2022-3437 Overflows and non-constant time leaks in
    DES{,3} and arcfour
  - CVE-2022-41916 Fix Unicode normalization read of 1 bytes past
    end of array
  - CVE-2021-44758 A null pointer de-reference DoS in SPNEGO
    acceptors
  - CVE-2021-3671 A null pointer de-reference when handling
    missing sname in TGS-REQ
  - CVE-2022-44640 Heimdal KDC: invalid free in ASN.1 codec
    Note that CVE-2022-44640 is a severe vulnerability,
    possibly a 10.0 on the Common Vulnerability Scoring
    System (CVSS) v3, as we believe it should be possible to
    get an RCE on a KDC, which means that credentials can be
    compromised that can be used to impersonate anyone in a
    realm or forest of realms.
    Heimdal's ASN.1 compiler generates code that allows
    specially crafted DER encodings of CHOICEs to invoke the
    wrong free function on the decoded structure upon decode
    error. This is known to impact the Heimdal KDC, leading to
    an invalid free() of an address partly or wholly under the
    control of the attacker, in turn leading to a potential
    remote code execution (RCE) vulnerability.
    This error affects the DER codec for all extensible CHOICE
    types used in Heimdal, though not all cases will be
    exploitable. We have not completed a thorough analysis of
    all the Heimdal components affected, thus the Kerberos
    client, the X.509 library, and other parts, may be affected
    as well.
    This bug has been in Heimdal's ASN.1 compiler since 2005,
    but it may only affect Heimdal 1.6 and up. It was first
    reported by Douglas Bagnall, though it had been found
    independently by the Heimdal maintainers via fuzzing a few
    weeks earlier.
    While no zero-day exploit is known, such an exploit will
    likely be available soon after public disclosure.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  + Other changes:
  - Bugs found by UBSAN (including the incorrect encoding of
    unconstrained INTEGER value -1).
  - Errors found by the LLVM scan-build static analyzer.
  - Errors found by the valgrind memory debugger.
  - Work around GCC Bug 95189 (memcmp wrongly stripped like
    strcmp).
  - Correct ASN.1 OID typo for SHA-384
  - Fix a deadlock in in the MEMORY ccache type.
  - TGS: strip forwardable and proxiable flags if the server is
    disallowed.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  - Incremental HDB propagation improvements
    Refactor send_diffs making it progressive
    Handle partial writes on non-blocking sockets
    Disable Nagle in iprop master and slave
    Use async I/O
    Don't send I_HAVE in response to AYT
    Do not recover log in kadm5_get_principal()
    Don't send diffs to slaves with not yet known version
    Don't stutter in send_diffs
  - Optional backwards-compatible anon-pkinit behavior
- Removed heimdal-7.7.0-autoconf-2.70.patch, fixed upstream.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1673352000">- replace libheimdal conflicts by obsoletes / provides to provide a
  smooth update in the new libheimdal-devel.</changelog>
</package>
<package pkgid="c823ded4d3391efc274b17f286c45027626b091fb1593606767c982f83ff0bef" name="libroken18" arch="ppc64le">
  <version epoch="0" ver="7.8.0" rel="bp154.2.4.1"/>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1440936000">- Initial package, version 1.6rc2
- Added patch heimdal-version-script-client.map.patch to add file
  version-script-client.map (File is present in git for tag 1.6rc2
  but missing in tarball).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441108800">- Some changes in spec file to enable build for SLES.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441195200">- Added Conflicts tags to spec file because devel package conflicts
  with krb5-devel and krb5-mini-devel.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441454400">- Added a patched instead of the original tarball because only
  shared libraries will be build and source files of these (not to
  be build) programs have problematic licenses.
- Added script heimdal-patch-source.sh to sources.
- Added patch heimdal-patched.diff that fixes configure.ac and
  several Makefile.am files to successfully build patched source.
- Removed unneeded dependencies in spec file for build.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1483790400">- Update to version 7.1.0
- Removed heimdal-version-script-client.map.patch, fixed upstream.
- Fixed heimdal-patched.diff.
- Unfortunately there is no updated changelog file in tarball,
  changes can be seen in source code version control systems
  history log.</changelog>
  <changelog author="jengelh@inai.de" date="1486036800">- Summary and RPM group update. Do a direct call to ldconfig
  where possible.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1497528000">- Update to version 7.3.0
  - Security
    + Fix transit path validation. Commit f469fc6 (2010-10-02)
    inadvertently caused the previous hop realm to not be added
    to the transit path of issued tickets. This may, in some
    cases, enable bypass of capath policy in Heimdal versions 1.5
    through 7.2.
    Note, this may break sites that rely on the bug. With the bug
    some incomplete [capaths] worked, that should not have.
    These may now break authentication in some cross-realm
    configurations. (CVE-2017-6594)
- Version 7.2.0
  - Bug fixes
    + Portability improvements.
    + More strict parsing of encoded URI components in HTTP KDC.
    + Fixed memory leak in malloc error recovery in NTLM GSSAPI
    mechanism.
    + Avoid overly specific CPU info in krb5-config in aid of
    reproducible builds.
    + Don't do AFS string-to-key tests when feature is disabled.
    + Skip mdb_stat test when the command is not available.
    + Windows: update SHA2 timestamp server.
    + hdb: add missing export
    hdb_generate_key_set_password_with_ks_tuple.
    + Fix signature of hdb_generate_key_set_password().
    + Windows: enable KX509 support in the KDC.
    + kdc: fix kx509 service principal match.
    + iprop: handle case where master sends nothing new.
    + ipropd-slave: fix incorrect error codes.
    + Allow choice of sqlite for HDB pref.
    + check-iprop: don't fail to kill daemons.
    + roken: pidfile -&gt; rk_pidfile.
    + kdc: _kdc_do_kx509 fix use after free error.
    + Do not detect x32 as 64-bit platform.
    + No sys/ttydefaults.h on CYGWIN.
    + Fix check-iprop races.
    + roken_detach_prep() close pipe.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1501761600">- Update to version 7.4.0
  - Security
  - Fix CVE-2017-11103: Orpheus' Lyre KDC-REP service name
    validation.
    This is a critical vulnerability.
    In _krb5_extract_ticket() the KDC-REP service name must be
    obtained from encrypted version stored in 'enc_part' instead
    of the unencrypted version stored in 'ticket'.
    Use of the unecrypted version provides an opportunity for
    successful server impersonation and other attacks.
    Identified by Jeffrey Altman, Viktor Duchovni and
    Nico Williams.
    See https://www.orpheus-lyre.info/ for more details.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1512648000">- Added Avoid_NULL_structure_pointer_member_dereference.patch,
  fixes (bsc#1071675).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1514548800">- Update to version 7.5.0
  - Security
  - Fix CVE-2017-17439, which is a remote denial of service
    vulnerability:
    In Heimdal 7.1 through 7.4, remote unauthenticated attackers
    are able to crash the KDC by sending a crafted UDP packet
    containing empty data fields for client name or realm.
  - Bug fixes
  - Handle long input lines when reloading database dumps.
  - In pre-forked mode (default on Unix), correctly clear the
    process ids of exited children, allowing new child processes
    to replace the old.
  - Fixed incorrect KDC response when no-cross realm TGT exists,
    allowing client requests to fail quickly rather than time
    out after trying to get a correct answer from each KDC.
- Fixed heimdal-patched.diff.
- Removed Avoid_NULL_structure_pointer_member_dereference.patch,
  fixed upstream.</changelog>
  <changelog author="bwiedemann@suse.com" date="1533643200">- Add reproducible.patch to override build date (boo#1047218)
- Use constant hostname (boo#1084909)</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1561291200">- Update to version 7.7.0
  + Bug fixes:
  - PKCS#11 hcrypto back-end:
    + initialize the p11_module_load function list
    + verify that not only is a mechanism present but that its
    mechanism info states that it offers the required
    encryption, decryption or digest services
  - krb5:
    + Starting with 7.6, Heimdal permitted requesting
    authenticated anonymous tickets. However, it did not
    verify that a KDC in fact returned an anonymous ticket
    when one was requested.
    + Cease setting the KDCOption reaquest_anonymous flag when
    issuing S4UProxy (constrained delegation) TGS requests.
    + when the Win2K PKINIT compatibility option is set, do not
    require krbtgt otherName to match when validating KDC
    certificate.
    + set PKINIT_BTMM flag per Apple implementation
    + use memset_s() instead of memset()
  - kdc:
    + When generating KRB5SignedPath in the AS, use the reply
    client name rather than the one from the request, so
    validation will work correctly in the TGS.
    + allow checksum of PA-FOR-USER to be HMAC_MD5. Even if TGT
    used an enctype with a different checksum. Per [MS-SFU]
    2.2.1 PA-FOR-USER the checksum is always HMAC_MD5, and
    that's what Windows and MIT clients send.
    In Heimdal both the client and kdc use instead the
    checksum of the TGT, and therefore work with each other
    but Windows and MIT clients fail against Heimdal KDC.
    Both Windows and MIT KDC would allow any keyed checksum
    to be used so Heimdal client work fine against it.
    Change Heimdal KDC to allow HMAC_MD5 even for non RC4
    based TGT in order to support per-spec clients.
    + use memset_s() instead of memset()
    + Detect Heimdal 1.0 through 7.6 clients that issue
    S4UProxy (constrained delegation) TGS Requests with the
    request anonymous flag set. These requests will be
    treated as S4UProxy requests and not anonymous requests.
  - HDB:
    + Set SQLite3 backend default page size to 8KB.
    + Add hdb_set_sync() method
  - kadmind:
    + disable HDB sync during database load avoiding
    unnecessary disk i/o.
  - ipropd:
    + disable HDB sync during receive_everything. Doing an
    fsync per-record when receiving the complete HDB is a
    performance disaster. Among other things, if the HDB is
    very large, then one slave receving a full HDB can cause
    other slaves to timeout and, if HDB write activity is
    high enough to cause iprop log truncation, then also need
    full syncs, which leads to a cycle of full syncs for all
    slaves until HDB write activity drops.
    Allowing the iprop log to be larger helps, but improving
    receive_everything() performance helps even more.
  - kinit:
    + Anonymous PKINIT tickets discard the realm information
    used to locate the issuing AS. Store the issuing realm in
    the credentials cache in order to locate a KDC which can
    renew them.
    + Do not leak the result of krb5_cc_get_config() when
    determining anonymous PKINIT start realm.
  - klist:
    + Show transited-policy-checked, ok-as-delegate and
    anonymous flags when listing credentials.
  - tests:
    + Regenerate certs so that they expire before the 2038
    armageddon so the test suite will pass on 32-bit
    operating systems until the underlying issues can be
    resolved.
  - Solaris:
    + Define _STDC_C11_BCI for memset_s prototype
  - build tooling:
    + Convert from python 2 to python 3
  - documentation:
    + rename verify-password to verify-password-quality
    + hprop default mode is encrypt
    + kadmind "all" permission does not include "get-keys"
    + verify-password-quality might not be stateless
- Version 7.6.0
  + Security (#555):
  - CVE-2018-16860 Heimdal KDC: Reject PA-S4U2Self with unkeyed
    checksum
    When the Heimdal KDC checks the checksum that is placed on
    the S4U2Self packet by the server to protect the requested
    principal against modification, it does not confirm that
    the checksum algorithm that protects the user name
    (principal) in the request is keyed. This allows a
    man-in-the-middle attacker who can intercept the request to
    the KDC to modify the packet by replacing the user name
    (principal) in the request with any desired user name
    (principal) that exists in the KDC and replace the checksum
    protecting that name with a CRC32 checksum (which requires
    no prior knowledge to compute).
    This would allow a S4U2Self ticket requested on behalf of
    user name (principal) user@EXAMPLE.COM to any service to be
    changed to a S4U2Self ticket with a user name (principal) of
    Administrator@EXAMPLE.COM. This ticket would then contain
    the PAC of the modified user name (principal).
  - CVE-2019-12098, client-only:
    RFC8062 Section 7 requires verification of the PA-PKINIT-KX
    key exchange when anonymous PKINIT is used. Failure to do
    so can permit an active attacker to become a
    man-in-the-middle.
  + Bug fixes:
  - Happy eyeballs: Don't wait for responses from
    known-unreachable KDCs.
  - kdc:
    + check return copy_Realm, copy_PrincipalName,
    copy_EncryptionKey
  - kinit:
    + cleanup temporary ccaches
    + see man page for "kinit --anonymous" command line syntax
    change
  - kdc:
    + Make anonymous AS-requests more RFC8062-compliant.
    Updated expired test certificates
  - Solaris:
    + PKCS#11 hcrypto backend broken since 7.0.1
    + Building with Sun Pro C
  + Features:
  - kuser: support authenticated anonymous AS-REQs in kinit
  - kdc: support for anonymous TGS-REQs
  - kgetcred support for anonymous service tickets
  - Support builds with OpenSSL 1.1.1
- fixed heimdal-patched.diff and reproducible.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1653480000">- Apply Shared Library Packaging Policy and resolve rpmlint
  errors like "libheimdal.x86_64: E: shlib-policy-name-error
  SONAME: libasn1.so.8, expected package suffix: 8"</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656417600">- Add heimdal-7.7.0-autoconf-2.70.patch: Fix build with autoconf
  2.70 (gh#heimdal/heimdal#856).</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656590400">- Add ldconfig scriptlets.
- Fix 'Conflicts:' tags.
- Remove obsolete macros and conditionals.
- Ran spec-cleaner.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1671624000">- Update to version 7.8.0
  + This release includes both the Heimdal 7.7.1 Security
    Vulnerability fixes and non-Security bug fixes/improvements.
  + Security Vulnerabilities:
  - CVE-2022-42898 PAC parse integer overflows
  - CVE-2022-3437 Overflows and non-constant time leaks in
    DES{,3} and arcfour
  - CVE-2022-41916 Fix Unicode normalization read of 1 bytes past
    end of array
  - CVE-2021-44758 A null pointer de-reference DoS in SPNEGO
    acceptors
  - CVE-2021-3671 A null pointer de-reference when handling
    missing sname in TGS-REQ
  - CVE-2022-44640 Heimdal KDC: invalid free in ASN.1 codec
    Note that CVE-2022-44640 is a severe vulnerability,
    possibly a 10.0 on the Common Vulnerability Scoring
    System (CVSS) v3, as we believe it should be possible to
    get an RCE on a KDC, which means that credentials can be
    compromised that can be used to impersonate anyone in a
    realm or forest of realms.
    Heimdal's ASN.1 compiler generates code that allows
    specially crafted DER encodings of CHOICEs to invoke the
    wrong free function on the decoded structure upon decode
    error. This is known to impact the Heimdal KDC, leading to
    an invalid free() of an address partly or wholly under the
    control of the attacker, in turn leading to a potential
    remote code execution (RCE) vulnerability.
    This error affects the DER codec for all extensible CHOICE
    types used in Heimdal, though not all cases will be
    exploitable. We have not completed a thorough analysis of
    all the Heimdal components affected, thus the Kerberos
    client, the X.509 library, and other parts, may be affected
    as well.
    This bug has been in Heimdal's ASN.1 compiler since 2005,
    but it may only affect Heimdal 1.6 and up. It was first
    reported by Douglas Bagnall, though it had been found
    independently by the Heimdal maintainers via fuzzing a few
    weeks earlier.
    While no zero-day exploit is known, such an exploit will
    likely be available soon after public disclosure.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  + Other changes:
  - Bugs found by UBSAN (including the incorrect encoding of
    unconstrained INTEGER value -1).
  - Errors found by the LLVM scan-build static analyzer.
  - Errors found by the valgrind memory debugger.
  - Work around GCC Bug 95189 (memcmp wrongly stripped like
    strcmp).
  - Correct ASN.1 OID typo for SHA-384
  - Fix a deadlock in in the MEMORY ccache type.
  - TGS: strip forwardable and proxiable flags if the server is
    disallowed.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  - Incremental HDB propagation improvements
    Refactor send_diffs making it progressive
    Handle partial writes on non-blocking sockets
    Disable Nagle in iprop master and slave
    Use async I/O
    Don't send I_HAVE in response to AYT
    Do not recover log in kadm5_get_principal()
    Don't send diffs to slaves with not yet known version
    Don't stutter in send_diffs
  - Optional backwards-compatible anon-pkinit behavior
- Removed heimdal-7.7.0-autoconf-2.70.patch, fixed upstream.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1673352000">- replace libheimdal conflicts by obsoletes / provides to provide a
  smooth update in the new libheimdal-devel.</changelog>
</package>
<package pkgid="0fd93801198bbe7cc66930d69a3ffc26ae87d047a0e02ec59884dcdfa7c6267c" name="libroken18" arch="s390x">
  <version epoch="0" ver="7.8.0" rel="bp154.2.4.1"/>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1440936000">- Initial package, version 1.6rc2
- Added patch heimdal-version-script-client.map.patch to add file
  version-script-client.map (File is present in git for tag 1.6rc2
  but missing in tarball).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441108800">- Some changes in spec file to enable build for SLES.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441195200">- Added Conflicts tags to spec file because devel package conflicts
  with krb5-devel and krb5-mini-devel.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441454400">- Added a patched instead of the original tarball because only
  shared libraries will be build and source files of these (not to
  be build) programs have problematic licenses.
- Added script heimdal-patch-source.sh to sources.
- Added patch heimdal-patched.diff that fixes configure.ac and
  several Makefile.am files to successfully build patched source.
- Removed unneeded dependencies in spec file for build.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1483790400">- Update to version 7.1.0
- Removed heimdal-version-script-client.map.patch, fixed upstream.
- Fixed heimdal-patched.diff.
- Unfortunately there is no updated changelog file in tarball,
  changes can be seen in source code version control systems
  history log.</changelog>
  <changelog author="jengelh@inai.de" date="1486036800">- Summary and RPM group update. Do a direct call to ldconfig
  where possible.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1497528000">- Update to version 7.3.0
  - Security
    + Fix transit path validation. Commit f469fc6 (2010-10-02)
    inadvertently caused the previous hop realm to not be added
    to the transit path of issued tickets. This may, in some
    cases, enable bypass of capath policy in Heimdal versions 1.5
    through 7.2.
    Note, this may break sites that rely on the bug. With the bug
    some incomplete [capaths] worked, that should not have.
    These may now break authentication in some cross-realm
    configurations. (CVE-2017-6594)
- Version 7.2.0
  - Bug fixes
    + Portability improvements.
    + More strict parsing of encoded URI components in HTTP KDC.
    + Fixed memory leak in malloc error recovery in NTLM GSSAPI
    mechanism.
    + Avoid overly specific CPU info in krb5-config in aid of
    reproducible builds.
    + Don't do AFS string-to-key tests when feature is disabled.
    + Skip mdb_stat test when the command is not available.
    + Windows: update SHA2 timestamp server.
    + hdb: add missing export
    hdb_generate_key_set_password_with_ks_tuple.
    + Fix signature of hdb_generate_key_set_password().
    + Windows: enable KX509 support in the KDC.
    + kdc: fix kx509 service principal match.
    + iprop: handle case where master sends nothing new.
    + ipropd-slave: fix incorrect error codes.
    + Allow choice of sqlite for HDB pref.
    + check-iprop: don't fail to kill daemons.
    + roken: pidfile -&gt; rk_pidfile.
    + kdc: _kdc_do_kx509 fix use after free error.
    + Do not detect x32 as 64-bit platform.
    + No sys/ttydefaults.h on CYGWIN.
    + Fix check-iprop races.
    + roken_detach_prep() close pipe.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1501761600">- Update to version 7.4.0
  - Security
  - Fix CVE-2017-11103: Orpheus' Lyre KDC-REP service name
    validation.
    This is a critical vulnerability.
    In _krb5_extract_ticket() the KDC-REP service name must be
    obtained from encrypted version stored in 'enc_part' instead
    of the unencrypted version stored in 'ticket'.
    Use of the unecrypted version provides an opportunity for
    successful server impersonation and other attacks.
    Identified by Jeffrey Altman, Viktor Duchovni and
    Nico Williams.
    See https://www.orpheus-lyre.info/ for more details.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1512648000">- Added Avoid_NULL_structure_pointer_member_dereference.patch,
  fixes (bsc#1071675).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1514548800">- Update to version 7.5.0
  - Security
  - Fix CVE-2017-17439, which is a remote denial of service
    vulnerability:
    In Heimdal 7.1 through 7.4, remote unauthenticated attackers
    are able to crash the KDC by sending a crafted UDP packet
    containing empty data fields for client name or realm.
  - Bug fixes
  - Handle long input lines when reloading database dumps.
  - In pre-forked mode (default on Unix), correctly clear the
    process ids of exited children, allowing new child processes
    to replace the old.
  - Fixed incorrect KDC response when no-cross realm TGT exists,
    allowing client requests to fail quickly rather than time
    out after trying to get a correct answer from each KDC.
- Fixed heimdal-patched.diff.
- Removed Avoid_NULL_structure_pointer_member_dereference.patch,
  fixed upstream.</changelog>
  <changelog author="bwiedemann@suse.com" date="1533643200">- Add reproducible.patch to override build date (boo#1047218)
- Use constant hostname (boo#1084909)</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1561291200">- Update to version 7.7.0
  + Bug fixes:
  - PKCS#11 hcrypto back-end:
    + initialize the p11_module_load function list
    + verify that not only is a mechanism present but that its
    mechanism info states that it offers the required
    encryption, decryption or digest services
  - krb5:
    + Starting with 7.6, Heimdal permitted requesting
    authenticated anonymous tickets. However, it did not
    verify that a KDC in fact returned an anonymous ticket
    when one was requested.
    + Cease setting the KDCOption reaquest_anonymous flag when
    issuing S4UProxy (constrained delegation) TGS requests.
    + when the Win2K PKINIT compatibility option is set, do not
    require krbtgt otherName to match when validating KDC
    certificate.
    + set PKINIT_BTMM flag per Apple implementation
    + use memset_s() instead of memset()
  - kdc:
    + When generating KRB5SignedPath in the AS, use the reply
    client name rather than the one from the request, so
    validation will work correctly in the TGS.
    + allow checksum of PA-FOR-USER to be HMAC_MD5. Even if TGT
    used an enctype with a different checksum. Per [MS-SFU]
    2.2.1 PA-FOR-USER the checksum is always HMAC_MD5, and
    that's what Windows and MIT clients send.
    In Heimdal both the client and kdc use instead the
    checksum of the TGT, and therefore work with each other
    but Windows and MIT clients fail against Heimdal KDC.
    Both Windows and MIT KDC would allow any keyed checksum
    to be used so Heimdal client work fine against it.
    Change Heimdal KDC to allow HMAC_MD5 even for non RC4
    based TGT in order to support per-spec clients.
    + use memset_s() instead of memset()
    + Detect Heimdal 1.0 through 7.6 clients that issue
    S4UProxy (constrained delegation) TGS Requests with the
    request anonymous flag set. These requests will be
    treated as S4UProxy requests and not anonymous requests.
  - HDB:
    + Set SQLite3 backend default page size to 8KB.
    + Add hdb_set_sync() method
  - kadmind:
    + disable HDB sync during database load avoiding
    unnecessary disk i/o.
  - ipropd:
    + disable HDB sync during receive_everything. Doing an
    fsync per-record when receiving the complete HDB is a
    performance disaster. Among other things, if the HDB is
    very large, then one slave receving a full HDB can cause
    other slaves to timeout and, if HDB write activity is
    high enough to cause iprop log truncation, then also need
    full syncs, which leads to a cycle of full syncs for all
    slaves until HDB write activity drops.
    Allowing the iprop log to be larger helps, but improving
    receive_everything() performance helps even more.
  - kinit:
    + Anonymous PKINIT tickets discard the realm information
    used to locate the issuing AS. Store the issuing realm in
    the credentials cache in order to locate a KDC which can
    renew them.
    + Do not leak the result of krb5_cc_get_config() when
    determining anonymous PKINIT start realm.
  - klist:
    + Show transited-policy-checked, ok-as-delegate and
    anonymous flags when listing credentials.
  - tests:
    + Regenerate certs so that they expire before the 2038
    armageddon so the test suite will pass on 32-bit
    operating systems until the underlying issues can be
    resolved.
  - Solaris:
    + Define _STDC_C11_BCI for memset_s prototype
  - build tooling:
    + Convert from python 2 to python 3
  - documentation:
    + rename verify-password to verify-password-quality
    + hprop default mode is encrypt
    + kadmind "all" permission does not include "get-keys"
    + verify-password-quality might not be stateless
- Version 7.6.0
  + Security (#555):
  - CVE-2018-16860 Heimdal KDC: Reject PA-S4U2Self with unkeyed
    checksum
    When the Heimdal KDC checks the checksum that is placed on
    the S4U2Self packet by the server to protect the requested
    principal against modification, it does not confirm that
    the checksum algorithm that protects the user name
    (principal) in the request is keyed. This allows a
    man-in-the-middle attacker who can intercept the request to
    the KDC to modify the packet by replacing the user name
    (principal) in the request with any desired user name
    (principal) that exists in the KDC and replace the checksum
    protecting that name with a CRC32 checksum (which requires
    no prior knowledge to compute).
    This would allow a S4U2Self ticket requested on behalf of
    user name (principal) user@EXAMPLE.COM to any service to be
    changed to a S4U2Self ticket with a user name (principal) of
    Administrator@EXAMPLE.COM. This ticket would then contain
    the PAC of the modified user name (principal).
  - CVE-2019-12098, client-only:
    RFC8062 Section 7 requires verification of the PA-PKINIT-KX
    key exchange when anonymous PKINIT is used. Failure to do
    so can permit an active attacker to become a
    man-in-the-middle.
  + Bug fixes:
  - Happy eyeballs: Don't wait for responses from
    known-unreachable KDCs.
  - kdc:
    + check return copy_Realm, copy_PrincipalName,
    copy_EncryptionKey
  - kinit:
    + cleanup temporary ccaches
    + see man page for "kinit --anonymous" command line syntax
    change
  - kdc:
    + Make anonymous AS-requests more RFC8062-compliant.
    Updated expired test certificates
  - Solaris:
    + PKCS#11 hcrypto backend broken since 7.0.1
    + Building with Sun Pro C
  + Features:
  - kuser: support authenticated anonymous AS-REQs in kinit
  - kdc: support for anonymous TGS-REQs
  - kgetcred support for anonymous service tickets
  - Support builds with OpenSSL 1.1.1
- fixed heimdal-patched.diff and reproducible.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1653480000">- Apply Shared Library Packaging Policy and resolve rpmlint
  errors like "libheimdal.x86_64: E: shlib-policy-name-error
  SONAME: libasn1.so.8, expected package suffix: 8"</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656417600">- Add heimdal-7.7.0-autoconf-2.70.patch: Fix build with autoconf
  2.70 (gh#heimdal/heimdal#856).</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656590400">- Add ldconfig scriptlets.
- Fix 'Conflicts:' tags.
- Remove obsolete macros and conditionals.
- Ran spec-cleaner.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1671624000">- Update to version 7.8.0
  + This release includes both the Heimdal 7.7.1 Security
    Vulnerability fixes and non-Security bug fixes/improvements.
  + Security Vulnerabilities:
  - CVE-2022-42898 PAC parse integer overflows
  - CVE-2022-3437 Overflows and non-constant time leaks in
    DES{,3} and arcfour
  - CVE-2022-41916 Fix Unicode normalization read of 1 bytes past
    end of array
  - CVE-2021-44758 A null pointer de-reference DoS in SPNEGO
    acceptors
  - CVE-2021-3671 A null pointer de-reference when handling
    missing sname in TGS-REQ
  - CVE-2022-44640 Heimdal KDC: invalid free in ASN.1 codec
    Note that CVE-2022-44640 is a severe vulnerability,
    possibly a 10.0 on the Common Vulnerability Scoring
    System (CVSS) v3, as we believe it should be possible to
    get an RCE on a KDC, which means that credentials can be
    compromised that can be used to impersonate anyone in a
    realm or forest of realms.
    Heimdal's ASN.1 compiler generates code that allows
    specially crafted DER encodings of CHOICEs to invoke the
    wrong free function on the decoded structure upon decode
    error. This is known to impact the Heimdal KDC, leading to
    an invalid free() of an address partly or wholly under the
    control of the attacker, in turn leading to a potential
    remote code execution (RCE) vulnerability.
    This error affects the DER codec for all extensible CHOICE
    types used in Heimdal, though not all cases will be
    exploitable. We have not completed a thorough analysis of
    all the Heimdal components affected, thus the Kerberos
    client, the X.509 library, and other parts, may be affected
    as well.
    This bug has been in Heimdal's ASN.1 compiler since 2005,
    but it may only affect Heimdal 1.6 and up. It was first
    reported by Douglas Bagnall, though it had been found
    independently by the Heimdal maintainers via fuzzing a few
    weeks earlier.
    While no zero-day exploit is known, such an exploit will
    likely be available soon after public disclosure.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  + Other changes:
  - Bugs found by UBSAN (including the incorrect encoding of
    unconstrained INTEGER value -1).
  - Errors found by the LLVM scan-build static analyzer.
  - Errors found by the valgrind memory debugger.
  - Work around GCC Bug 95189 (memcmp wrongly stripped like
    strcmp).
  - Correct ASN.1 OID typo for SHA-384
  - Fix a deadlock in in the MEMORY ccache type.
  - TGS: strip forwardable and proxiable flags if the server is
    disallowed.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  - Incremental HDB propagation improvements
    Refactor send_diffs making it progressive
    Handle partial writes on non-blocking sockets
    Disable Nagle in iprop master and slave
    Use async I/O
    Don't send I_HAVE in response to AYT
    Do not recover log in kadm5_get_principal()
    Don't send diffs to slaves with not yet known version
    Don't stutter in send_diffs
  - Optional backwards-compatible anon-pkinit behavior
- Removed heimdal-7.7.0-autoconf-2.70.patch, fixed upstream.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1673352000">- replace libheimdal conflicts by obsoletes / provides to provide a
  smooth update in the new libheimdal-devel.</changelog>
</package>
<package pkgid="ec858a291f897fdc0efb9de328341edaecb1580a2b05be73259c95d82481f1b8" name="libroken18" arch="x86_64">
  <version epoch="0" ver="7.8.0" rel="bp154.2.4.1"/>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1440936000">- Initial package, version 1.6rc2
- Added patch heimdal-version-script-client.map.patch to add file
  version-script-client.map (File is present in git for tag 1.6rc2
  but missing in tarball).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441108800">- Some changes in spec file to enable build for SLES.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441195200">- Added Conflicts tags to spec file because devel package conflicts
  with krb5-devel and krb5-mini-devel.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441454400">- Added a patched instead of the original tarball because only
  shared libraries will be build and source files of these (not to
  be build) programs have problematic licenses.
- Added script heimdal-patch-source.sh to sources.
- Added patch heimdal-patched.diff that fixes configure.ac and
  several Makefile.am files to successfully build patched source.
- Removed unneeded dependencies in spec file for build.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1483790400">- Update to version 7.1.0
- Removed heimdal-version-script-client.map.patch, fixed upstream.
- Fixed heimdal-patched.diff.
- Unfortunately there is no updated changelog file in tarball,
  changes can be seen in source code version control systems
  history log.</changelog>
  <changelog author="jengelh@inai.de" date="1486036800">- Summary and RPM group update. Do a direct call to ldconfig
  where possible.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1497528000">- Update to version 7.3.0
  - Security
    + Fix transit path validation. Commit f469fc6 (2010-10-02)
    inadvertently caused the previous hop realm to not be added
    to the transit path of issued tickets. This may, in some
    cases, enable bypass of capath policy in Heimdal versions 1.5
    through 7.2.
    Note, this may break sites that rely on the bug. With the bug
    some incomplete [capaths] worked, that should not have.
    These may now break authentication in some cross-realm
    configurations. (CVE-2017-6594)
- Version 7.2.0
  - Bug fixes
    + Portability improvements.
    + More strict parsing of encoded URI components in HTTP KDC.
    + Fixed memory leak in malloc error recovery in NTLM GSSAPI
    mechanism.
    + Avoid overly specific CPU info in krb5-config in aid of
    reproducible builds.
    + Don't do AFS string-to-key tests when feature is disabled.
    + Skip mdb_stat test when the command is not available.
    + Windows: update SHA2 timestamp server.
    + hdb: add missing export
    hdb_generate_key_set_password_with_ks_tuple.
    + Fix signature of hdb_generate_key_set_password().
    + Windows: enable KX509 support in the KDC.
    + kdc: fix kx509 service principal match.
    + iprop: handle case where master sends nothing new.
    + ipropd-slave: fix incorrect error codes.
    + Allow choice of sqlite for HDB pref.
    + check-iprop: don't fail to kill daemons.
    + roken: pidfile -&gt; rk_pidfile.
    + kdc: _kdc_do_kx509 fix use after free error.
    + Do not detect x32 as 64-bit platform.
    + No sys/ttydefaults.h on CYGWIN.
    + Fix check-iprop races.
    + roken_detach_prep() close pipe.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1501761600">- Update to version 7.4.0
  - Security
  - Fix CVE-2017-11103: Orpheus' Lyre KDC-REP service name
    validation.
    This is a critical vulnerability.
    In _krb5_extract_ticket() the KDC-REP service name must be
    obtained from encrypted version stored in 'enc_part' instead
    of the unencrypted version stored in 'ticket'.
    Use of the unecrypted version provides an opportunity for
    successful server impersonation and other attacks.
    Identified by Jeffrey Altman, Viktor Duchovni and
    Nico Williams.
    See https://www.orpheus-lyre.info/ for more details.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1512648000">- Added Avoid_NULL_structure_pointer_member_dereference.patch,
  fixes (bsc#1071675).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1514548800">- Update to version 7.5.0
  - Security
  - Fix CVE-2017-17439, which is a remote denial of service
    vulnerability:
    In Heimdal 7.1 through 7.4, remote unauthenticated attackers
    are able to crash the KDC by sending a crafted UDP packet
    containing empty data fields for client name or realm.
  - Bug fixes
  - Handle long input lines when reloading database dumps.
  - In pre-forked mode (default on Unix), correctly clear the
    process ids of exited children, allowing new child processes
    to replace the old.
  - Fixed incorrect KDC response when no-cross realm TGT exists,
    allowing client requests to fail quickly rather than time
    out after trying to get a correct answer from each KDC.
- Fixed heimdal-patched.diff.
- Removed Avoid_NULL_structure_pointer_member_dereference.patch,
  fixed upstream.</changelog>
  <changelog author="bwiedemann@suse.com" date="1533643200">- Add reproducible.patch to override build date (boo#1047218)
- Use constant hostname (boo#1084909)</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1561291200">- Update to version 7.7.0
  + Bug fixes:
  - PKCS#11 hcrypto back-end:
    + initialize the p11_module_load function list
    + verify that not only is a mechanism present but that its
    mechanism info states that it offers the required
    encryption, decryption or digest services
  - krb5:
    + Starting with 7.6, Heimdal permitted requesting
    authenticated anonymous tickets. However, it did not
    verify that a KDC in fact returned an anonymous ticket
    when one was requested.
    + Cease setting the KDCOption reaquest_anonymous flag when
    issuing S4UProxy (constrained delegation) TGS requests.
    + when the Win2K PKINIT compatibility option is set, do not
    require krbtgt otherName to match when validating KDC
    certificate.
    + set PKINIT_BTMM flag per Apple implementation
    + use memset_s() instead of memset()
  - kdc:
    + When generating KRB5SignedPath in the AS, use the reply
    client name rather than the one from the request, so
    validation will work correctly in the TGS.
    + allow checksum of PA-FOR-USER to be HMAC_MD5. Even if TGT
    used an enctype with a different checksum. Per [MS-SFU]
    2.2.1 PA-FOR-USER the checksum is always HMAC_MD5, and
    that's what Windows and MIT clients send.
    In Heimdal both the client and kdc use instead the
    checksum of the TGT, and therefore work with each other
    but Windows and MIT clients fail against Heimdal KDC.
    Both Windows and MIT KDC would allow any keyed checksum
    to be used so Heimdal client work fine against it.
    Change Heimdal KDC to allow HMAC_MD5 even for non RC4
    based TGT in order to support per-spec clients.
    + use memset_s() instead of memset()
    + Detect Heimdal 1.0 through 7.6 clients that issue
    S4UProxy (constrained delegation) TGS Requests with the
    request anonymous flag set. These requests will be
    treated as S4UProxy requests and not anonymous requests.
  - HDB:
    + Set SQLite3 backend default page size to 8KB.
    + Add hdb_set_sync() method
  - kadmind:
    + disable HDB sync during database load avoiding
    unnecessary disk i/o.
  - ipropd:
    + disable HDB sync during receive_everything. Doing an
    fsync per-record when receiving the complete HDB is a
    performance disaster. Among other things, if the HDB is
    very large, then one slave receving a full HDB can cause
    other slaves to timeout and, if HDB write activity is
    high enough to cause iprop log truncation, then also need
    full syncs, which leads to a cycle of full syncs for all
    slaves until HDB write activity drops.
    Allowing the iprop log to be larger helps, but improving
    receive_everything() performance helps even more.
  - kinit:
    + Anonymous PKINIT tickets discard the realm information
    used to locate the issuing AS. Store the issuing realm in
    the credentials cache in order to locate a KDC which can
    renew them.
    + Do not leak the result of krb5_cc_get_config() when
    determining anonymous PKINIT start realm.
  - klist:
    + Show transited-policy-checked, ok-as-delegate and
    anonymous flags when listing credentials.
  - tests:
    + Regenerate certs so that they expire before the 2038
    armageddon so the test suite will pass on 32-bit
    operating systems until the underlying issues can be
    resolved.
  - Solaris:
    + Define _STDC_C11_BCI for memset_s prototype
  - build tooling:
    + Convert from python 2 to python 3
  - documentation:
    + rename verify-password to verify-password-quality
    + hprop default mode is encrypt
    + kadmind "all" permission does not include "get-keys"
    + verify-password-quality might not be stateless
- Version 7.6.0
  + Security (#555):
  - CVE-2018-16860 Heimdal KDC: Reject PA-S4U2Self with unkeyed
    checksum
    When the Heimdal KDC checks the checksum that is placed on
    the S4U2Self packet by the server to protect the requested
    principal against modification, it does not confirm that
    the checksum algorithm that protects the user name
    (principal) in the request is keyed. This allows a
    man-in-the-middle attacker who can intercept the request to
    the KDC to modify the packet by replacing the user name
    (principal) in the request with any desired user name
    (principal) that exists in the KDC and replace the checksum
    protecting that name with a CRC32 checksum (which requires
    no prior knowledge to compute).
    This would allow a S4U2Self ticket requested on behalf of
    user name (principal) user@EXAMPLE.COM to any service to be
    changed to a S4U2Self ticket with a user name (principal) of
    Administrator@EXAMPLE.COM. This ticket would then contain
    the PAC of the modified user name (principal).
  - CVE-2019-12098, client-only:
    RFC8062 Section 7 requires verification of the PA-PKINIT-KX
    key exchange when anonymous PKINIT is used. Failure to do
    so can permit an active attacker to become a
    man-in-the-middle.
  + Bug fixes:
  - Happy eyeballs: Don't wait for responses from
    known-unreachable KDCs.
  - kdc:
    + check return copy_Realm, copy_PrincipalName,
    copy_EncryptionKey
  - kinit:
    + cleanup temporary ccaches
    + see man page for "kinit --anonymous" command line syntax
    change
  - kdc:
    + Make anonymous AS-requests more RFC8062-compliant.
    Updated expired test certificates
  - Solaris:
    + PKCS#11 hcrypto backend broken since 7.0.1
    + Building with Sun Pro C
  + Features:
  - kuser: support authenticated anonymous AS-REQs in kinit
  - kdc: support for anonymous TGS-REQs
  - kgetcred support for anonymous service tickets
  - Support builds with OpenSSL 1.1.1
- fixed heimdal-patched.diff and reproducible.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1653480000">- Apply Shared Library Packaging Policy and resolve rpmlint
  errors like "libheimdal.x86_64: E: shlib-policy-name-error
  SONAME: libasn1.so.8, expected package suffix: 8"</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656417600">- Add heimdal-7.7.0-autoconf-2.70.patch: Fix build with autoconf
  2.70 (gh#heimdal/heimdal#856).</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656590400">- Add ldconfig scriptlets.
- Fix 'Conflicts:' tags.
- Remove obsolete macros and conditionals.
- Ran spec-cleaner.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1671624000">- Update to version 7.8.0
  + This release includes both the Heimdal 7.7.1 Security
    Vulnerability fixes and non-Security bug fixes/improvements.
  + Security Vulnerabilities:
  - CVE-2022-42898 PAC parse integer overflows
  - CVE-2022-3437 Overflows and non-constant time leaks in
    DES{,3} and arcfour
  - CVE-2022-41916 Fix Unicode normalization read of 1 bytes past
    end of array
  - CVE-2021-44758 A null pointer de-reference DoS in SPNEGO
    acceptors
  - CVE-2021-3671 A null pointer de-reference when handling
    missing sname in TGS-REQ
  - CVE-2022-44640 Heimdal KDC: invalid free in ASN.1 codec
    Note that CVE-2022-44640 is a severe vulnerability,
    possibly a 10.0 on the Common Vulnerability Scoring
    System (CVSS) v3, as we believe it should be possible to
    get an RCE on a KDC, which means that credentials can be
    compromised that can be used to impersonate anyone in a
    realm or forest of realms.
    Heimdal's ASN.1 compiler generates code that allows
    specially crafted DER encodings of CHOICEs to invoke the
    wrong free function on the decoded structure upon decode
    error. This is known to impact the Heimdal KDC, leading to
    an invalid free() of an address partly or wholly under the
    control of the attacker, in turn leading to a potential
    remote code execution (RCE) vulnerability.
    This error affects the DER codec for all extensible CHOICE
    types used in Heimdal, though not all cases will be
    exploitable. We have not completed a thorough analysis of
    all the Heimdal components affected, thus the Kerberos
    client, the X.509 library, and other parts, may be affected
    as well.
    This bug has been in Heimdal's ASN.1 compiler since 2005,
    but it may only affect Heimdal 1.6 and up. It was first
    reported by Douglas Bagnall, though it had been found
    independently by the Heimdal maintainers via fuzzing a few
    weeks earlier.
    While no zero-day exploit is known, such an exploit will
    likely be available soon after public disclosure.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  + Other changes:
  - Bugs found by UBSAN (including the incorrect encoding of
    unconstrained INTEGER value -1).
  - Errors found by the LLVM scan-build static analyzer.
  - Errors found by the valgrind memory debugger.
  - Work around GCC Bug 95189 (memcmp wrongly stripped like
    strcmp).
  - Correct ASN.1 OID typo for SHA-384
  - Fix a deadlock in in the MEMORY ccache type.
  - TGS: strip forwardable and proxiable flags if the server is
    disallowed.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  - Incremental HDB propagation improvements
    Refactor send_diffs making it progressive
    Handle partial writes on non-blocking sockets
    Disable Nagle in iprop master and slave
    Use async I/O
    Don't send I_HAVE in response to AYT
    Do not recover log in kadm5_get_principal()
    Don't send diffs to slaves with not yet known version
    Don't stutter in send_diffs
  - Optional backwards-compatible anon-pkinit behavior
- Removed heimdal-7.7.0-autoconf-2.70.patch, fixed upstream.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1673352000">- replace libheimdal conflicts by obsoletes / provides to provide a
  smooth update in the new libheimdal-devel.</changelog>
</package>
<package pkgid="472ef64def0809fcf34e35635c52a68079b3c1bdd2697964ce9241a314a2fc97" name="librttopo" arch="src">
  <version epoch="0" ver="1.1.0" rel="bp154.2.3.1"/>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1620648000">- Initial packaging for openSUSE
  librttopo is mandatory for libspatialite 5+</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1657022400">- Fix boo#1201215 VUL-0: CVE-2017-18359: librttopo:
  denial of service in rtgeom_to_x3d3()
  by adding upstream patches
  + 2a9cc526.patch
  + 41.patch
- Update copyright year</changelog>
</package>
<package pkgid="e5ede203e3d26718b089805c4881d60f1b114013835a94ae20f8227ec67a138b" name="librttopo-devel" arch="aarch64">
  <version epoch="0" ver="1.1.0" rel="bp154.2.3.1"/>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1620648000">- Initial packaging for openSUSE
  librttopo is mandatory for libspatialite 5+</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1657022400">- Fix boo#1201215 VUL-0: CVE-2017-18359: librttopo:
  denial of service in rtgeom_to_x3d3()
  by adding upstream patches
  + 2a9cc526.patch
  + 41.patch
- Update copyright year</changelog>
</package>
<package pkgid="d3a184d9d9726b4efd2d56b8a23be1ab8791c4fb0044c42ecb2fdbac3178773b" name="librttopo-devel" arch="ppc64le">
  <version epoch="0" ver="1.1.0" rel="bp154.2.3.1"/>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1620648000">- Initial packaging for openSUSE
  librttopo is mandatory for libspatialite 5+</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1657022400">- Fix boo#1201215 VUL-0: CVE-2017-18359: librttopo:
  denial of service in rtgeom_to_x3d3()
  by adding upstream patches
  + 2a9cc526.patch
  + 41.patch
- Update copyright year</changelog>
</package>
<package pkgid="0604d056d9e697cff57403f5f3d67de94cb5aea4dc5d809b913143274e5bdece" name="librttopo-devel" arch="s390x">
  <version epoch="0" ver="1.1.0" rel="bp154.2.3.1"/>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1620648000">- Initial packaging for openSUSE
  librttopo is mandatory for libspatialite 5+</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1657022400">- Fix boo#1201215 VUL-0: CVE-2017-18359: librttopo:
  denial of service in rtgeom_to_x3d3()
  by adding upstream patches
  + 2a9cc526.patch
  + 41.patch
- Update copyright year</changelog>
</package>
<package pkgid="ab29bd6cd7180171d9b311fa51c8269b3b90ecc344bcd30db3f785e5c3153fbc" name="librttopo-devel" arch="x86_64">
  <version epoch="0" ver="1.1.0" rel="bp154.2.3.1"/>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1620648000">- Initial packaging for openSUSE
  librttopo is mandatory for libspatialite 5+</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1657022400">- Fix boo#1201215 VUL-0: CVE-2017-18359: librttopo:
  denial of service in rtgeom_to_x3d3()
  by adding upstream patches
  + 2a9cc526.patch
  + 41.patch
- Update copyright year</changelog>
</package>
<package pkgid="79ddecdddfb793ae83fb4bac289b27a63a5cd18fcd1fe863139af50afd1753e2" name="librttopo1" arch="aarch64">
  <version epoch="0" ver="1.1.0" rel="bp154.2.3.1"/>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1620648000">- Initial packaging for openSUSE
  librttopo is mandatory for libspatialite 5+</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1657022400">- Fix boo#1201215 VUL-0: CVE-2017-18359: librttopo:
  denial of service in rtgeom_to_x3d3()
  by adding upstream patches
  + 2a9cc526.patch
  + 41.patch
- Update copyright year</changelog>
</package>
<package pkgid="1e55c9441f4e58c830a12c40809853fec1a528b76e1529e4a1c35939c3e546ed" name="librttopo1" arch="ppc64le">
  <version epoch="0" ver="1.1.0" rel="bp154.2.3.1"/>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1620648000">- Initial packaging for openSUSE
  librttopo is mandatory for libspatialite 5+</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1657022400">- Fix boo#1201215 VUL-0: CVE-2017-18359: librttopo:
  denial of service in rtgeom_to_x3d3()
  by adding upstream patches
  + 2a9cc526.patch
  + 41.patch
- Update copyright year</changelog>
</package>
<package pkgid="ae43ebd26e669a70a3f4afe419cc266c1daf7dccb920756b9d1360dd9030ebb8" name="librttopo1" arch="s390x">
  <version epoch="0" ver="1.1.0" rel="bp154.2.3.1"/>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1620648000">- Initial packaging for openSUSE
  librttopo is mandatory for libspatialite 5+</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1657022400">- Fix boo#1201215 VUL-0: CVE-2017-18359: librttopo:
  denial of service in rtgeom_to_x3d3()
  by adding upstream patches
  + 2a9cc526.patch
  + 41.patch
- Update copyright year</changelog>
</package>
<package pkgid="05d5644f5f8fb604261d9bd1aa5ed76d128185c9c08b2fcfee21102d04c47d4f" name="librttopo1" arch="x86_64">
  <version epoch="0" ver="1.1.0" rel="bp154.2.3.1"/>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1620648000">- Initial packaging for openSUSE
  librttopo is mandatory for libspatialite 5+</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1657022400">- Fix boo#1201215 VUL-0: CVE-2017-18359: librttopo:
  denial of service in rtgeom_to_x3d3()
  by adding upstream patches
  + 2a9cc526.patch
  + 41.patch
- Update copyright year</changelog>
</package>
<package pkgid="579cca060313cf3231d75ec56adce4b4f43204f273d2ceecfac25101df98576d" name="libsl0" arch="aarch64">
  <version epoch="0" ver="7.8.0" rel="bp154.2.4.1"/>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1440936000">- Initial package, version 1.6rc2
- Added patch heimdal-version-script-client.map.patch to add file
  version-script-client.map (File is present in git for tag 1.6rc2
  but missing in tarball).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441108800">- Some changes in spec file to enable build for SLES.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441195200">- Added Conflicts tags to spec file because devel package conflicts
  with krb5-devel and krb5-mini-devel.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441454400">- Added a patched instead of the original tarball because only
  shared libraries will be build and source files of these (not to
  be build) programs have problematic licenses.
- Added script heimdal-patch-source.sh to sources.
- Added patch heimdal-patched.diff that fixes configure.ac and
  several Makefile.am files to successfully build patched source.
- Removed unneeded dependencies in spec file for build.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1483790400">- Update to version 7.1.0
- Removed heimdal-version-script-client.map.patch, fixed upstream.
- Fixed heimdal-patched.diff.
- Unfortunately there is no updated changelog file in tarball,
  changes can be seen in source code version control systems
  history log.</changelog>
  <changelog author="jengelh@inai.de" date="1486036800">- Summary and RPM group update. Do a direct call to ldconfig
  where possible.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1497528000">- Update to version 7.3.0
  - Security
    + Fix transit path validation. Commit f469fc6 (2010-10-02)
    inadvertently caused the previous hop realm to not be added
    to the transit path of issued tickets. This may, in some
    cases, enable bypass of capath policy in Heimdal versions 1.5
    through 7.2.
    Note, this may break sites that rely on the bug. With the bug
    some incomplete [capaths] worked, that should not have.
    These may now break authentication in some cross-realm
    configurations. (CVE-2017-6594)
- Version 7.2.0
  - Bug fixes
    + Portability improvements.
    + More strict parsing of encoded URI components in HTTP KDC.
    + Fixed memory leak in malloc error recovery in NTLM GSSAPI
    mechanism.
    + Avoid overly specific CPU info in krb5-config in aid of
    reproducible builds.
    + Don't do AFS string-to-key tests when feature is disabled.
    + Skip mdb_stat test when the command is not available.
    + Windows: update SHA2 timestamp server.
    + hdb: add missing export
    hdb_generate_key_set_password_with_ks_tuple.
    + Fix signature of hdb_generate_key_set_password().
    + Windows: enable KX509 support in the KDC.
    + kdc: fix kx509 service principal match.
    + iprop: handle case where master sends nothing new.
    + ipropd-slave: fix incorrect error codes.
    + Allow choice of sqlite for HDB pref.
    + check-iprop: don't fail to kill daemons.
    + roken: pidfile -&gt; rk_pidfile.
    + kdc: _kdc_do_kx509 fix use after free error.
    + Do not detect x32 as 64-bit platform.
    + No sys/ttydefaults.h on CYGWIN.
    + Fix check-iprop races.
    + roken_detach_prep() close pipe.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1501761600">- Update to version 7.4.0
  - Security
  - Fix CVE-2017-11103: Orpheus' Lyre KDC-REP service name
    validation.
    This is a critical vulnerability.
    In _krb5_extract_ticket() the KDC-REP service name must be
    obtained from encrypted version stored in 'enc_part' instead
    of the unencrypted version stored in 'ticket'.
    Use of the unecrypted version provides an opportunity for
    successful server impersonation and other attacks.
    Identified by Jeffrey Altman, Viktor Duchovni and
    Nico Williams.
    See https://www.orpheus-lyre.info/ for more details.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1512648000">- Added Avoid_NULL_structure_pointer_member_dereference.patch,
  fixes (bsc#1071675).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1514548800">- Update to version 7.5.0
  - Security
  - Fix CVE-2017-17439, which is a remote denial of service
    vulnerability:
    In Heimdal 7.1 through 7.4, remote unauthenticated attackers
    are able to crash the KDC by sending a crafted UDP packet
    containing empty data fields for client name or realm.
  - Bug fixes
  - Handle long input lines when reloading database dumps.
  - In pre-forked mode (default on Unix), correctly clear the
    process ids of exited children, allowing new child processes
    to replace the old.
  - Fixed incorrect KDC response when no-cross realm TGT exists,
    allowing client requests to fail quickly rather than time
    out after trying to get a correct answer from each KDC.
- Fixed heimdal-patched.diff.
- Removed Avoid_NULL_structure_pointer_member_dereference.patch,
  fixed upstream.</changelog>
  <changelog author="bwiedemann@suse.com" date="1533643200">- Add reproducible.patch to override build date (boo#1047218)
- Use constant hostname (boo#1084909)</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1561291200">- Update to version 7.7.0
  + Bug fixes:
  - PKCS#11 hcrypto back-end:
    + initialize the p11_module_load function list
    + verify that not only is a mechanism present but that its
    mechanism info states that it offers the required
    encryption, decryption or digest services
  - krb5:
    + Starting with 7.6, Heimdal permitted requesting
    authenticated anonymous tickets. However, it did not
    verify that a KDC in fact returned an anonymous ticket
    when one was requested.
    + Cease setting the KDCOption reaquest_anonymous flag when
    issuing S4UProxy (constrained delegation) TGS requests.
    + when the Win2K PKINIT compatibility option is set, do not
    require krbtgt otherName to match when validating KDC
    certificate.
    + set PKINIT_BTMM flag per Apple implementation
    + use memset_s() instead of memset()
  - kdc:
    + When generating KRB5SignedPath in the AS, use the reply
    client name rather than the one from the request, so
    validation will work correctly in the TGS.
    + allow checksum of PA-FOR-USER to be HMAC_MD5. Even if TGT
    used an enctype with a different checksum. Per [MS-SFU]
    2.2.1 PA-FOR-USER the checksum is always HMAC_MD5, and
    that's what Windows and MIT clients send.
    In Heimdal both the client and kdc use instead the
    checksum of the TGT, and therefore work with each other
    but Windows and MIT clients fail against Heimdal KDC.
    Both Windows and MIT KDC would allow any keyed checksum
    to be used so Heimdal client work fine against it.
    Change Heimdal KDC to allow HMAC_MD5 even for non RC4
    based TGT in order to support per-spec clients.
    + use memset_s() instead of memset()
    + Detect Heimdal 1.0 through 7.6 clients that issue
    S4UProxy (constrained delegation) TGS Requests with the
    request anonymous flag set. These requests will be
    treated as S4UProxy requests and not anonymous requests.
  - HDB:
    + Set SQLite3 backend default page size to 8KB.
    + Add hdb_set_sync() method
  - kadmind:
    + disable HDB sync during database load avoiding
    unnecessary disk i/o.
  - ipropd:
    + disable HDB sync during receive_everything. Doing an
    fsync per-record when receiving the complete HDB is a
    performance disaster. Among other things, if the HDB is
    very large, then one slave receving a full HDB can cause
    other slaves to timeout and, if HDB write activity is
    high enough to cause iprop log truncation, then also need
    full syncs, which leads to a cycle of full syncs for all
    slaves until HDB write activity drops.
    Allowing the iprop log to be larger helps, but improving
    receive_everything() performance helps even more.
  - kinit:
    + Anonymous PKINIT tickets discard the realm information
    used to locate the issuing AS. Store the issuing realm in
    the credentials cache in order to locate a KDC which can
    renew them.
    + Do not leak the result of krb5_cc_get_config() when
    determining anonymous PKINIT start realm.
  - klist:
    + Show transited-policy-checked, ok-as-delegate and
    anonymous flags when listing credentials.
  - tests:
    + Regenerate certs so that they expire before the 2038
    armageddon so the test suite will pass on 32-bit
    operating systems until the underlying issues can be
    resolved.
  - Solaris:
    + Define _STDC_C11_BCI for memset_s prototype
  - build tooling:
    + Convert from python 2 to python 3
  - documentation:
    + rename verify-password to verify-password-quality
    + hprop default mode is encrypt
    + kadmind "all" permission does not include "get-keys"
    + verify-password-quality might not be stateless
- Version 7.6.0
  + Security (#555):
  - CVE-2018-16860 Heimdal KDC: Reject PA-S4U2Self with unkeyed
    checksum
    When the Heimdal KDC checks the checksum that is placed on
    the S4U2Self packet by the server to protect the requested
    principal against modification, it does not confirm that
    the checksum algorithm that protects the user name
    (principal) in the request is keyed. This allows a
    man-in-the-middle attacker who can intercept the request to
    the KDC to modify the packet by replacing the user name
    (principal) in the request with any desired user name
    (principal) that exists in the KDC and replace the checksum
    protecting that name with a CRC32 checksum (which requires
    no prior knowledge to compute).
    This would allow a S4U2Self ticket requested on behalf of
    user name (principal) user@EXAMPLE.COM to any service to be
    changed to a S4U2Self ticket with a user name (principal) of
    Administrator@EXAMPLE.COM. This ticket would then contain
    the PAC of the modified user name (principal).
  - CVE-2019-12098, client-only:
    RFC8062 Section 7 requires verification of the PA-PKINIT-KX
    key exchange when anonymous PKINIT is used. Failure to do
    so can permit an active attacker to become a
    man-in-the-middle.
  + Bug fixes:
  - Happy eyeballs: Don't wait for responses from
    known-unreachable KDCs.
  - kdc:
    + check return copy_Realm, copy_PrincipalName,
    copy_EncryptionKey
  - kinit:
    + cleanup temporary ccaches
    + see man page for "kinit --anonymous" command line syntax
    change
  - kdc:
    + Make anonymous AS-requests more RFC8062-compliant.
    Updated expired test certificates
  - Solaris:
    + PKCS#11 hcrypto backend broken since 7.0.1
    + Building with Sun Pro C
  + Features:
  - kuser: support authenticated anonymous AS-REQs in kinit
  - kdc: support for anonymous TGS-REQs
  - kgetcred support for anonymous service tickets
  - Support builds with OpenSSL 1.1.1
- fixed heimdal-patched.diff and reproducible.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1653480000">- Apply Shared Library Packaging Policy and resolve rpmlint
  errors like "libheimdal.x86_64: E: shlib-policy-name-error
  SONAME: libasn1.so.8, expected package suffix: 8"</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656417600">- Add heimdal-7.7.0-autoconf-2.70.patch: Fix build with autoconf
  2.70 (gh#heimdal/heimdal#856).</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656590400">- Add ldconfig scriptlets.
- Fix 'Conflicts:' tags.
- Remove obsolete macros and conditionals.
- Ran spec-cleaner.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1671624000">- Update to version 7.8.0
  + This release includes both the Heimdal 7.7.1 Security
    Vulnerability fixes and non-Security bug fixes/improvements.
  + Security Vulnerabilities:
  - CVE-2022-42898 PAC parse integer overflows
  - CVE-2022-3437 Overflows and non-constant time leaks in
    DES{,3} and arcfour
  - CVE-2022-41916 Fix Unicode normalization read of 1 bytes past
    end of array
  - CVE-2021-44758 A null pointer de-reference DoS in SPNEGO
    acceptors
  - CVE-2021-3671 A null pointer de-reference when handling
    missing sname in TGS-REQ
  - CVE-2022-44640 Heimdal KDC: invalid free in ASN.1 codec
    Note that CVE-2022-44640 is a severe vulnerability,
    possibly a 10.0 on the Common Vulnerability Scoring
    System (CVSS) v3, as we believe it should be possible to
    get an RCE on a KDC, which means that credentials can be
    compromised that can be used to impersonate anyone in a
    realm or forest of realms.
    Heimdal's ASN.1 compiler generates code that allows
    specially crafted DER encodings of CHOICEs to invoke the
    wrong free function on the decoded structure upon decode
    error. This is known to impact the Heimdal KDC, leading to
    an invalid free() of an address partly or wholly under the
    control of the attacker, in turn leading to a potential
    remote code execution (RCE) vulnerability.
    This error affects the DER codec for all extensible CHOICE
    types used in Heimdal, though not all cases will be
    exploitable. We have not completed a thorough analysis of
    all the Heimdal components affected, thus the Kerberos
    client, the X.509 library, and other parts, may be affected
    as well.
    This bug has been in Heimdal's ASN.1 compiler since 2005,
    but it may only affect Heimdal 1.6 and up. It was first
    reported by Douglas Bagnall, though it had been found
    independently by the Heimdal maintainers via fuzzing a few
    weeks earlier.
    While no zero-day exploit is known, such an exploit will
    likely be available soon after public disclosure.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  + Other changes:
  - Bugs found by UBSAN (including the incorrect encoding of
    unconstrained INTEGER value -1).
  - Errors found by the LLVM scan-build static analyzer.
  - Errors found by the valgrind memory debugger.
  - Work around GCC Bug 95189 (memcmp wrongly stripped like
    strcmp).
  - Correct ASN.1 OID typo for SHA-384
  - Fix a deadlock in in the MEMORY ccache type.
  - TGS: strip forwardable and proxiable flags if the server is
    disallowed.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  - Incremental HDB propagation improvements
    Refactor send_diffs making it progressive
    Handle partial writes on non-blocking sockets
    Disable Nagle in iprop master and slave
    Use async I/O
    Don't send I_HAVE in response to AYT
    Do not recover log in kadm5_get_principal()
    Don't send diffs to slaves with not yet known version
    Don't stutter in send_diffs
  - Optional backwards-compatible anon-pkinit behavior
- Removed heimdal-7.7.0-autoconf-2.70.patch, fixed upstream.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1673352000">- replace libheimdal conflicts by obsoletes / provides to provide a
  smooth update in the new libheimdal-devel.</changelog>
</package>
<package pkgid="81d09446259869d71b33b247f9310b01cb75fa5696484f46b9d2319c4974d1f9" name="libsl0" arch="i586">
  <version epoch="0" ver="7.8.0" rel="bp154.2.4.1"/>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1440936000">- Initial package, version 1.6rc2
- Added patch heimdal-version-script-client.map.patch to add file
  version-script-client.map (File is present in git for tag 1.6rc2
  but missing in tarball).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441108800">- Some changes in spec file to enable build for SLES.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441195200">- Added Conflicts tags to spec file because devel package conflicts
  with krb5-devel and krb5-mini-devel.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441454400">- Added a patched instead of the original tarball because only
  shared libraries will be build and source files of these (not to
  be build) programs have problematic licenses.
- Added script heimdal-patch-source.sh to sources.
- Added patch heimdal-patched.diff that fixes configure.ac and
  several Makefile.am files to successfully build patched source.
- Removed unneeded dependencies in spec file for build.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1483790400">- Update to version 7.1.0
- Removed heimdal-version-script-client.map.patch, fixed upstream.
- Fixed heimdal-patched.diff.
- Unfortunately there is no updated changelog file in tarball,
  changes can be seen in source code version control systems
  history log.</changelog>
  <changelog author="jengelh@inai.de" date="1486036800">- Summary and RPM group update. Do a direct call to ldconfig
  where possible.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1497528000">- Update to version 7.3.0
  - Security
    + Fix transit path validation. Commit f469fc6 (2010-10-02)
    inadvertently caused the previous hop realm to not be added
    to the transit path of issued tickets. This may, in some
    cases, enable bypass of capath policy in Heimdal versions 1.5
    through 7.2.
    Note, this may break sites that rely on the bug. With the bug
    some incomplete [capaths] worked, that should not have.
    These may now break authentication in some cross-realm
    configurations. (CVE-2017-6594)
- Version 7.2.0
  - Bug fixes
    + Portability improvements.
    + More strict parsing of encoded URI components in HTTP KDC.
    + Fixed memory leak in malloc error recovery in NTLM GSSAPI
    mechanism.
    + Avoid overly specific CPU info in krb5-config in aid of
    reproducible builds.
    + Don't do AFS string-to-key tests when feature is disabled.
    + Skip mdb_stat test when the command is not available.
    + Windows: update SHA2 timestamp server.
    + hdb: add missing export
    hdb_generate_key_set_password_with_ks_tuple.
    + Fix signature of hdb_generate_key_set_password().
    + Windows: enable KX509 support in the KDC.
    + kdc: fix kx509 service principal match.
    + iprop: handle case where master sends nothing new.
    + ipropd-slave: fix incorrect error codes.
    + Allow choice of sqlite for HDB pref.
    + check-iprop: don't fail to kill daemons.
    + roken: pidfile -&gt; rk_pidfile.
    + kdc: _kdc_do_kx509 fix use after free error.
    + Do not detect x32 as 64-bit platform.
    + No sys/ttydefaults.h on CYGWIN.
    + Fix check-iprop races.
    + roken_detach_prep() close pipe.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1501761600">- Update to version 7.4.0
  - Security
  - Fix CVE-2017-11103: Orpheus' Lyre KDC-REP service name
    validation.
    This is a critical vulnerability.
    In _krb5_extract_ticket() the KDC-REP service name must be
    obtained from encrypted version stored in 'enc_part' instead
    of the unencrypted version stored in 'ticket'.
    Use of the unecrypted version provides an opportunity for
    successful server impersonation and other attacks.
    Identified by Jeffrey Altman, Viktor Duchovni and
    Nico Williams.
    See https://www.orpheus-lyre.info/ for more details.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1512648000">- Added Avoid_NULL_structure_pointer_member_dereference.patch,
  fixes (bsc#1071675).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1514548800">- Update to version 7.5.0
  - Security
  - Fix CVE-2017-17439, which is a remote denial of service
    vulnerability:
    In Heimdal 7.1 through 7.4, remote unauthenticated attackers
    are able to crash the KDC by sending a crafted UDP packet
    containing empty data fields for client name or realm.
  - Bug fixes
  - Handle long input lines when reloading database dumps.
  - In pre-forked mode (default on Unix), correctly clear the
    process ids of exited children, allowing new child processes
    to replace the old.
  - Fixed incorrect KDC response when no-cross realm TGT exists,
    allowing client requests to fail quickly rather than time
    out after trying to get a correct answer from each KDC.
- Fixed heimdal-patched.diff.
- Removed Avoid_NULL_structure_pointer_member_dereference.patch,
  fixed upstream.</changelog>
  <changelog author="bwiedemann@suse.com" date="1533643200">- Add reproducible.patch to override build date (boo#1047218)
- Use constant hostname (boo#1084909)</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1561291200">- Update to version 7.7.0
  + Bug fixes:
  - PKCS#11 hcrypto back-end:
    + initialize the p11_module_load function list
    + verify that not only is a mechanism present but that its
    mechanism info states that it offers the required
    encryption, decryption or digest services
  - krb5:
    + Starting with 7.6, Heimdal permitted requesting
    authenticated anonymous tickets. However, it did not
    verify that a KDC in fact returned an anonymous ticket
    when one was requested.
    + Cease setting the KDCOption reaquest_anonymous flag when
    issuing S4UProxy (constrained delegation) TGS requests.
    + when the Win2K PKINIT compatibility option is set, do not
    require krbtgt otherName to match when validating KDC
    certificate.
    + set PKINIT_BTMM flag per Apple implementation
    + use memset_s() instead of memset()
  - kdc:
    + When generating KRB5SignedPath in the AS, use the reply
    client name rather than the one from the request, so
    validation will work correctly in the TGS.
    + allow checksum of PA-FOR-USER to be HMAC_MD5. Even if TGT
    used an enctype with a different checksum. Per [MS-SFU]
    2.2.1 PA-FOR-USER the checksum is always HMAC_MD5, and
    that's what Windows and MIT clients send.
    In Heimdal both the client and kdc use instead the
    checksum of the TGT, and therefore work with each other
    but Windows and MIT clients fail against Heimdal KDC.
    Both Windows and MIT KDC would allow any keyed checksum
    to be used so Heimdal client work fine against it.
    Change Heimdal KDC to allow HMAC_MD5 even for non RC4
    based TGT in order to support per-spec clients.
    + use memset_s() instead of memset()
    + Detect Heimdal 1.0 through 7.6 clients that issue
    S4UProxy (constrained delegation) TGS Requests with the
    request anonymous flag set. These requests will be
    treated as S4UProxy requests and not anonymous requests.
  - HDB:
    + Set SQLite3 backend default page size to 8KB.
    + Add hdb_set_sync() method
  - kadmind:
    + disable HDB sync during database load avoiding
    unnecessary disk i/o.
  - ipropd:
    + disable HDB sync during receive_everything. Doing an
    fsync per-record when receiving the complete HDB is a
    performance disaster. Among other things, if the HDB is
    very large, then one slave receving a full HDB can cause
    other slaves to timeout and, if HDB write activity is
    high enough to cause iprop log truncation, then also need
    full syncs, which leads to a cycle of full syncs for all
    slaves until HDB write activity drops.
    Allowing the iprop log to be larger helps, but improving
    receive_everything() performance helps even more.
  - kinit:
    + Anonymous PKINIT tickets discard the realm information
    used to locate the issuing AS. Store the issuing realm in
    the credentials cache in order to locate a KDC which can
    renew them.
    + Do not leak the result of krb5_cc_get_config() when
    determining anonymous PKINIT start realm.
  - klist:
    + Show transited-policy-checked, ok-as-delegate and
    anonymous flags when listing credentials.
  - tests:
    + Regenerate certs so that they expire before the 2038
    armageddon so the test suite will pass on 32-bit
    operating systems until the underlying issues can be
    resolved.
  - Solaris:
    + Define _STDC_C11_BCI for memset_s prototype
  - build tooling:
    + Convert from python 2 to python 3
  - documentation:
    + rename verify-password to verify-password-quality
    + hprop default mode is encrypt
    + kadmind "all" permission does not include "get-keys"
    + verify-password-quality might not be stateless
- Version 7.6.0
  + Security (#555):
  - CVE-2018-16860 Heimdal KDC: Reject PA-S4U2Self with unkeyed
    checksum
    When the Heimdal KDC checks the checksum that is placed on
    the S4U2Self packet by the server to protect the requested
    principal against modification, it does not confirm that
    the checksum algorithm that protects the user name
    (principal) in the request is keyed. This allows a
    man-in-the-middle attacker who can intercept the request to
    the KDC to modify the packet by replacing the user name
    (principal) in the request with any desired user name
    (principal) that exists in the KDC and replace the checksum
    protecting that name with a CRC32 checksum (which requires
    no prior knowledge to compute).
    This would allow a S4U2Self ticket requested on behalf of
    user name (principal) user@EXAMPLE.COM to any service to be
    changed to a S4U2Self ticket with a user name (principal) of
    Administrator@EXAMPLE.COM. This ticket would then contain
    the PAC of the modified user name (principal).
  - CVE-2019-12098, client-only:
    RFC8062 Section 7 requires verification of the PA-PKINIT-KX
    key exchange when anonymous PKINIT is used. Failure to do
    so can permit an active attacker to become a
    man-in-the-middle.
  + Bug fixes:
  - Happy eyeballs: Don't wait for responses from
    known-unreachable KDCs.
  - kdc:
    + check return copy_Realm, copy_PrincipalName,
    copy_EncryptionKey
  - kinit:
    + cleanup temporary ccaches
    + see man page for "kinit --anonymous" command line syntax
    change
  - kdc:
    + Make anonymous AS-requests more RFC8062-compliant.
    Updated expired test certificates
  - Solaris:
    + PKCS#11 hcrypto backend broken since 7.0.1
    + Building with Sun Pro C
  + Features:
  - kuser: support authenticated anonymous AS-REQs in kinit
  - kdc: support for anonymous TGS-REQs
  - kgetcred support for anonymous service tickets
  - Support builds with OpenSSL 1.1.1
- fixed heimdal-patched.diff and reproducible.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1653480000">- Apply Shared Library Packaging Policy and resolve rpmlint
  errors like "libheimdal.x86_64: E: shlib-policy-name-error
  SONAME: libasn1.so.8, expected package suffix: 8"</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656417600">- Add heimdal-7.7.0-autoconf-2.70.patch: Fix build with autoconf
  2.70 (gh#heimdal/heimdal#856).</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656590400">- Add ldconfig scriptlets.
- Fix 'Conflicts:' tags.
- Remove obsolete macros and conditionals.
- Ran spec-cleaner.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1671624000">- Update to version 7.8.0
  + This release includes both the Heimdal 7.7.1 Security
    Vulnerability fixes and non-Security bug fixes/improvements.
  + Security Vulnerabilities:
  - CVE-2022-42898 PAC parse integer overflows
  - CVE-2022-3437 Overflows and non-constant time leaks in
    DES{,3} and arcfour
  - CVE-2022-41916 Fix Unicode normalization read of 1 bytes past
    end of array
  - CVE-2021-44758 A null pointer de-reference DoS in SPNEGO
    acceptors
  - CVE-2021-3671 A null pointer de-reference when handling
    missing sname in TGS-REQ
  - CVE-2022-44640 Heimdal KDC: invalid free in ASN.1 codec
    Note that CVE-2022-44640 is a severe vulnerability,
    possibly a 10.0 on the Common Vulnerability Scoring
    System (CVSS) v3, as we believe it should be possible to
    get an RCE on a KDC, which means that credentials can be
    compromised that can be used to impersonate anyone in a
    realm or forest of realms.
    Heimdal's ASN.1 compiler generates code that allows
    specially crafted DER encodings of CHOICEs to invoke the
    wrong free function on the decoded structure upon decode
    error. This is known to impact the Heimdal KDC, leading to
    an invalid free() of an address partly or wholly under the
    control of the attacker, in turn leading to a potential
    remote code execution (RCE) vulnerability.
    This error affects the DER codec for all extensible CHOICE
    types used in Heimdal, though not all cases will be
    exploitable. We have not completed a thorough analysis of
    all the Heimdal components affected, thus the Kerberos
    client, the X.509 library, and other parts, may be affected
    as well.
    This bug has been in Heimdal's ASN.1 compiler since 2005,
    but it may only affect Heimdal 1.6 and up. It was first
    reported by Douglas Bagnall, though it had been found
    independently by the Heimdal maintainers via fuzzing a few
    weeks earlier.
    While no zero-day exploit is known, such an exploit will
    likely be available soon after public disclosure.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  + Other changes:
  - Bugs found by UBSAN (including the incorrect encoding of
    unconstrained INTEGER value -1).
  - Errors found by the LLVM scan-build static analyzer.
  - Errors found by the valgrind memory debugger.
  - Work around GCC Bug 95189 (memcmp wrongly stripped like
    strcmp).
  - Correct ASN.1 OID typo for SHA-384
  - Fix a deadlock in in the MEMORY ccache type.
  - TGS: strip forwardable and proxiable flags if the server is
    disallowed.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  - Incremental HDB propagation improvements
    Refactor send_diffs making it progressive
    Handle partial writes on non-blocking sockets
    Disable Nagle in iprop master and slave
    Use async I/O
    Don't send I_HAVE in response to AYT
    Do not recover log in kadm5_get_principal()
    Don't send diffs to slaves with not yet known version
    Don't stutter in send_diffs
  - Optional backwards-compatible anon-pkinit behavior
- Removed heimdal-7.7.0-autoconf-2.70.patch, fixed upstream.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1673352000">- replace libheimdal conflicts by obsoletes / provides to provide a
  smooth update in the new libheimdal-devel.</changelog>
</package>
<package pkgid="03d61bb612a597791eafab8ab6b0ceeea35914801266dbbd7129514dbb895627" name="libsl0" arch="ppc64le">
  <version epoch="0" ver="7.8.0" rel="bp154.2.4.1"/>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1440936000">- Initial package, version 1.6rc2
- Added patch heimdal-version-script-client.map.patch to add file
  version-script-client.map (File is present in git for tag 1.6rc2
  but missing in tarball).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441108800">- Some changes in spec file to enable build for SLES.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441195200">- Added Conflicts tags to spec file because devel package conflicts
  with krb5-devel and krb5-mini-devel.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441454400">- Added a patched instead of the original tarball because only
  shared libraries will be build and source files of these (not to
  be build) programs have problematic licenses.
- Added script heimdal-patch-source.sh to sources.
- Added patch heimdal-patched.diff that fixes configure.ac and
  several Makefile.am files to successfully build patched source.
- Removed unneeded dependencies in spec file for build.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1483790400">- Update to version 7.1.0
- Removed heimdal-version-script-client.map.patch, fixed upstream.
- Fixed heimdal-patched.diff.
- Unfortunately there is no updated changelog file in tarball,
  changes can be seen in source code version control systems
  history log.</changelog>
  <changelog author="jengelh@inai.de" date="1486036800">- Summary and RPM group update. Do a direct call to ldconfig
  where possible.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1497528000">- Update to version 7.3.0
  - Security
    + Fix transit path validation. Commit f469fc6 (2010-10-02)
    inadvertently caused the previous hop realm to not be added
    to the transit path of issued tickets. This may, in some
    cases, enable bypass of capath policy in Heimdal versions 1.5
    through 7.2.
    Note, this may break sites that rely on the bug. With the bug
    some incomplete [capaths] worked, that should not have.
    These may now break authentication in some cross-realm
    configurations. (CVE-2017-6594)
- Version 7.2.0
  - Bug fixes
    + Portability improvements.
    + More strict parsing of encoded URI components in HTTP KDC.
    + Fixed memory leak in malloc error recovery in NTLM GSSAPI
    mechanism.
    + Avoid overly specific CPU info in krb5-config in aid of
    reproducible builds.
    + Don't do AFS string-to-key tests when feature is disabled.
    + Skip mdb_stat test when the command is not available.
    + Windows: update SHA2 timestamp server.
    + hdb: add missing export
    hdb_generate_key_set_password_with_ks_tuple.
    + Fix signature of hdb_generate_key_set_password().
    + Windows: enable KX509 support in the KDC.
    + kdc: fix kx509 service principal match.
    + iprop: handle case where master sends nothing new.
    + ipropd-slave: fix incorrect error codes.
    + Allow choice of sqlite for HDB pref.
    + check-iprop: don't fail to kill daemons.
    + roken: pidfile -&gt; rk_pidfile.
    + kdc: _kdc_do_kx509 fix use after free error.
    + Do not detect x32 as 64-bit platform.
    + No sys/ttydefaults.h on CYGWIN.
    + Fix check-iprop races.
    + roken_detach_prep() close pipe.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1501761600">- Update to version 7.4.0
  - Security
  - Fix CVE-2017-11103: Orpheus' Lyre KDC-REP service name
    validation.
    This is a critical vulnerability.
    In _krb5_extract_ticket() the KDC-REP service name must be
    obtained from encrypted version stored in 'enc_part' instead
    of the unencrypted version stored in 'ticket'.
    Use of the unecrypted version provides an opportunity for
    successful server impersonation and other attacks.
    Identified by Jeffrey Altman, Viktor Duchovni and
    Nico Williams.
    See https://www.orpheus-lyre.info/ for more details.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1512648000">- Added Avoid_NULL_structure_pointer_member_dereference.patch,
  fixes (bsc#1071675).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1514548800">- Update to version 7.5.0
  - Security
  - Fix CVE-2017-17439, which is a remote denial of service
    vulnerability:
    In Heimdal 7.1 through 7.4, remote unauthenticated attackers
    are able to crash the KDC by sending a crafted UDP packet
    containing empty data fields for client name or realm.
  - Bug fixes
  - Handle long input lines when reloading database dumps.
  - In pre-forked mode (default on Unix), correctly clear the
    process ids of exited children, allowing new child processes
    to replace the old.
  - Fixed incorrect KDC response when no-cross realm TGT exists,
    allowing client requests to fail quickly rather than time
    out after trying to get a correct answer from each KDC.
- Fixed heimdal-patched.diff.
- Removed Avoid_NULL_structure_pointer_member_dereference.patch,
  fixed upstream.</changelog>
  <changelog author="bwiedemann@suse.com" date="1533643200">- Add reproducible.patch to override build date (boo#1047218)
- Use constant hostname (boo#1084909)</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1561291200">- Update to version 7.7.0
  + Bug fixes:
  - PKCS#11 hcrypto back-end:
    + initialize the p11_module_load function list
    + verify that not only is a mechanism present but that its
    mechanism info states that it offers the required
    encryption, decryption or digest services
  - krb5:
    + Starting with 7.6, Heimdal permitted requesting
    authenticated anonymous tickets. However, it did not
    verify that a KDC in fact returned an anonymous ticket
    when one was requested.
    + Cease setting the KDCOption reaquest_anonymous flag when
    issuing S4UProxy (constrained delegation) TGS requests.
    + when the Win2K PKINIT compatibility option is set, do not
    require krbtgt otherName to match when validating KDC
    certificate.
    + set PKINIT_BTMM flag per Apple implementation
    + use memset_s() instead of memset()
  - kdc:
    + When generating KRB5SignedPath in the AS, use the reply
    client name rather than the one from the request, so
    validation will work correctly in the TGS.
    + allow checksum of PA-FOR-USER to be HMAC_MD5. Even if TGT
    used an enctype with a different checksum. Per [MS-SFU]
    2.2.1 PA-FOR-USER the checksum is always HMAC_MD5, and
    that's what Windows and MIT clients send.
    In Heimdal both the client and kdc use instead the
    checksum of the TGT, and therefore work with each other
    but Windows and MIT clients fail against Heimdal KDC.
    Both Windows and MIT KDC would allow any keyed checksum
    to be used so Heimdal client work fine against it.
    Change Heimdal KDC to allow HMAC_MD5 even for non RC4
    based TGT in order to support per-spec clients.
    + use memset_s() instead of memset()
    + Detect Heimdal 1.0 through 7.6 clients that issue
    S4UProxy (constrained delegation) TGS Requests with the
    request anonymous flag set. These requests will be
    treated as S4UProxy requests and not anonymous requests.
  - HDB:
    + Set SQLite3 backend default page size to 8KB.
    + Add hdb_set_sync() method
  - kadmind:
    + disable HDB sync during database load avoiding
    unnecessary disk i/o.
  - ipropd:
    + disable HDB sync during receive_everything. Doing an
    fsync per-record when receiving the complete HDB is a
    performance disaster. Among other things, if the HDB is
    very large, then one slave receving a full HDB can cause
    other slaves to timeout and, if HDB write activity is
    high enough to cause iprop log truncation, then also need
    full syncs, which leads to a cycle of full syncs for all
    slaves until HDB write activity drops.
    Allowing the iprop log to be larger helps, but improving
    receive_everything() performance helps even more.
  - kinit:
    + Anonymous PKINIT tickets discard the realm information
    used to locate the issuing AS. Store the issuing realm in
    the credentials cache in order to locate a KDC which can
    renew them.
    + Do not leak the result of krb5_cc_get_config() when
    determining anonymous PKINIT start realm.
  - klist:
    + Show transited-policy-checked, ok-as-delegate and
    anonymous flags when listing credentials.
  - tests:
    + Regenerate certs so that they expire before the 2038
    armageddon so the test suite will pass on 32-bit
    operating systems until the underlying issues can be
    resolved.
  - Solaris:
    + Define _STDC_C11_BCI for memset_s prototype
  - build tooling:
    + Convert from python 2 to python 3
  - documentation:
    + rename verify-password to verify-password-quality
    + hprop default mode is encrypt
    + kadmind "all" permission does not include "get-keys"
    + verify-password-quality might not be stateless
- Version 7.6.0
  + Security (#555):
  - CVE-2018-16860 Heimdal KDC: Reject PA-S4U2Self with unkeyed
    checksum
    When the Heimdal KDC checks the checksum that is placed on
    the S4U2Self packet by the server to protect the requested
    principal against modification, it does not confirm that
    the checksum algorithm that protects the user name
    (principal) in the request is keyed. This allows a
    man-in-the-middle attacker who can intercept the request to
    the KDC to modify the packet by replacing the user name
    (principal) in the request with any desired user name
    (principal) that exists in the KDC and replace the checksum
    protecting that name with a CRC32 checksum (which requires
    no prior knowledge to compute).
    This would allow a S4U2Self ticket requested on behalf of
    user name (principal) user@EXAMPLE.COM to any service to be
    changed to a S4U2Self ticket with a user name (principal) of
    Administrator@EXAMPLE.COM. This ticket would then contain
    the PAC of the modified user name (principal).
  - CVE-2019-12098, client-only:
    RFC8062 Section 7 requires verification of the PA-PKINIT-KX
    key exchange when anonymous PKINIT is used. Failure to do
    so can permit an active attacker to become a
    man-in-the-middle.
  + Bug fixes:
  - Happy eyeballs: Don't wait for responses from
    known-unreachable KDCs.
  - kdc:
    + check return copy_Realm, copy_PrincipalName,
    copy_EncryptionKey
  - kinit:
    + cleanup temporary ccaches
    + see man page for "kinit --anonymous" command line syntax
    change
  - kdc:
    + Make anonymous AS-requests more RFC8062-compliant.
    Updated expired test certificates
  - Solaris:
    + PKCS#11 hcrypto backend broken since 7.0.1
    + Building with Sun Pro C
  + Features:
  - kuser: support authenticated anonymous AS-REQs in kinit
  - kdc: support for anonymous TGS-REQs
  - kgetcred support for anonymous service tickets
  - Support builds with OpenSSL 1.1.1
- fixed heimdal-patched.diff and reproducible.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1653480000">- Apply Shared Library Packaging Policy and resolve rpmlint
  errors like "libheimdal.x86_64: E: shlib-policy-name-error
  SONAME: libasn1.so.8, expected package suffix: 8"</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656417600">- Add heimdal-7.7.0-autoconf-2.70.patch: Fix build with autoconf
  2.70 (gh#heimdal/heimdal#856).</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656590400">- Add ldconfig scriptlets.
- Fix 'Conflicts:' tags.
- Remove obsolete macros and conditionals.
- Ran spec-cleaner.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1671624000">- Update to version 7.8.0
  + This release includes both the Heimdal 7.7.1 Security
    Vulnerability fixes and non-Security bug fixes/improvements.
  + Security Vulnerabilities:
  - CVE-2022-42898 PAC parse integer overflows
  - CVE-2022-3437 Overflows and non-constant time leaks in
    DES{,3} and arcfour
  - CVE-2022-41916 Fix Unicode normalization read of 1 bytes past
    end of array
  - CVE-2021-44758 A null pointer de-reference DoS in SPNEGO
    acceptors
  - CVE-2021-3671 A null pointer de-reference when handling
    missing sname in TGS-REQ
  - CVE-2022-44640 Heimdal KDC: invalid free in ASN.1 codec
    Note that CVE-2022-44640 is a severe vulnerability,
    possibly a 10.0 on the Common Vulnerability Scoring
    System (CVSS) v3, as we believe it should be possible to
    get an RCE on a KDC, which means that credentials can be
    compromised that can be used to impersonate anyone in a
    realm or forest of realms.
    Heimdal's ASN.1 compiler generates code that allows
    specially crafted DER encodings of CHOICEs to invoke the
    wrong free function on the decoded structure upon decode
    error. This is known to impact the Heimdal KDC, leading to
    an invalid free() of an address partly or wholly under the
    control of the attacker, in turn leading to a potential
    remote code execution (RCE) vulnerability.
    This error affects the DER codec for all extensible CHOICE
    types used in Heimdal, though not all cases will be
    exploitable. We have not completed a thorough analysis of
    all the Heimdal components affected, thus the Kerberos
    client, the X.509 library, and other parts, may be affected
    as well.
    This bug has been in Heimdal's ASN.1 compiler since 2005,
    but it may only affect Heimdal 1.6 and up. It was first
    reported by Douglas Bagnall, though it had been found
    independently by the Heimdal maintainers via fuzzing a few
    weeks earlier.
    While no zero-day exploit is known, such an exploit will
    likely be available soon after public disclosure.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  + Other changes:
  - Bugs found by UBSAN (including the incorrect encoding of
    unconstrained INTEGER value -1).
  - Errors found by the LLVM scan-build static analyzer.
  - Errors found by the valgrind memory debugger.
  - Work around GCC Bug 95189 (memcmp wrongly stripped like
    strcmp).
  - Correct ASN.1 OID typo for SHA-384
  - Fix a deadlock in in the MEMORY ccache type.
  - TGS: strip forwardable and proxiable flags if the server is
    disallowed.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  - Incremental HDB propagation improvements
    Refactor send_diffs making it progressive
    Handle partial writes on non-blocking sockets
    Disable Nagle in iprop master and slave
    Use async I/O
    Don't send I_HAVE in response to AYT
    Do not recover log in kadm5_get_principal()
    Don't send diffs to slaves with not yet known version
    Don't stutter in send_diffs
  - Optional backwards-compatible anon-pkinit behavior
- Removed heimdal-7.7.0-autoconf-2.70.patch, fixed upstream.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1673352000">- replace libheimdal conflicts by obsoletes / provides to provide a
  smooth update in the new libheimdal-devel.</changelog>
</package>
<package pkgid="24977d86a38b106fd8bfebb4e2d457a26dcb5b1b154ec8ae35735e205c714a75" name="libsl0" arch="s390x">
  <version epoch="0" ver="7.8.0" rel="bp154.2.4.1"/>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1440936000">- Initial package, version 1.6rc2
- Added patch heimdal-version-script-client.map.patch to add file
  version-script-client.map (File is present in git for tag 1.6rc2
  but missing in tarball).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441108800">- Some changes in spec file to enable build for SLES.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441195200">- Added Conflicts tags to spec file because devel package conflicts
  with krb5-devel and krb5-mini-devel.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441454400">- Added a patched instead of the original tarball because only
  shared libraries will be build and source files of these (not to
  be build) programs have problematic licenses.
- Added script heimdal-patch-source.sh to sources.
- Added patch heimdal-patched.diff that fixes configure.ac and
  several Makefile.am files to successfully build patched source.
- Removed unneeded dependencies in spec file for build.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1483790400">- Update to version 7.1.0
- Removed heimdal-version-script-client.map.patch, fixed upstream.
- Fixed heimdal-patched.diff.
- Unfortunately there is no updated changelog file in tarball,
  changes can be seen in source code version control systems
  history log.</changelog>
  <changelog author="jengelh@inai.de" date="1486036800">- Summary and RPM group update. Do a direct call to ldconfig
  where possible.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1497528000">- Update to version 7.3.0
  - Security
    + Fix transit path validation. Commit f469fc6 (2010-10-02)
    inadvertently caused the previous hop realm to not be added
    to the transit path of issued tickets. This may, in some
    cases, enable bypass of capath policy in Heimdal versions 1.5
    through 7.2.
    Note, this may break sites that rely on the bug. With the bug
    some incomplete [capaths] worked, that should not have.
    These may now break authentication in some cross-realm
    configurations. (CVE-2017-6594)
- Version 7.2.0
  - Bug fixes
    + Portability improvements.
    + More strict parsing of encoded URI components in HTTP KDC.
    + Fixed memory leak in malloc error recovery in NTLM GSSAPI
    mechanism.
    + Avoid overly specific CPU info in krb5-config in aid of
    reproducible builds.
    + Don't do AFS string-to-key tests when feature is disabled.
    + Skip mdb_stat test when the command is not available.
    + Windows: update SHA2 timestamp server.
    + hdb: add missing export
    hdb_generate_key_set_password_with_ks_tuple.
    + Fix signature of hdb_generate_key_set_password().
    + Windows: enable KX509 support in the KDC.
    + kdc: fix kx509 service principal match.
    + iprop: handle case where master sends nothing new.
    + ipropd-slave: fix incorrect error codes.
    + Allow choice of sqlite for HDB pref.
    + check-iprop: don't fail to kill daemons.
    + roken: pidfile -&gt; rk_pidfile.
    + kdc: _kdc_do_kx509 fix use after free error.
    + Do not detect x32 as 64-bit platform.
    + No sys/ttydefaults.h on CYGWIN.
    + Fix check-iprop races.
    + roken_detach_prep() close pipe.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1501761600">- Update to version 7.4.0
  - Security
  - Fix CVE-2017-11103: Orpheus' Lyre KDC-REP service name
    validation.
    This is a critical vulnerability.
    In _krb5_extract_ticket() the KDC-REP service name must be
    obtained from encrypted version stored in 'enc_part' instead
    of the unencrypted version stored in 'ticket'.
    Use of the unecrypted version provides an opportunity for
    successful server impersonation and other attacks.
    Identified by Jeffrey Altman, Viktor Duchovni and
    Nico Williams.
    See https://www.orpheus-lyre.info/ for more details.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1512648000">- Added Avoid_NULL_structure_pointer_member_dereference.patch,
  fixes (bsc#1071675).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1514548800">- Update to version 7.5.0
  - Security
  - Fix CVE-2017-17439, which is a remote denial of service
    vulnerability:
    In Heimdal 7.1 through 7.4, remote unauthenticated attackers
    are able to crash the KDC by sending a crafted UDP packet
    containing empty data fields for client name or realm.
  - Bug fixes
  - Handle long input lines when reloading database dumps.
  - In pre-forked mode (default on Unix), correctly clear the
    process ids of exited children, allowing new child processes
    to replace the old.
  - Fixed incorrect KDC response when no-cross realm TGT exists,
    allowing client requests to fail quickly rather than time
    out after trying to get a correct answer from each KDC.
- Fixed heimdal-patched.diff.
- Removed Avoid_NULL_structure_pointer_member_dereference.patch,
  fixed upstream.</changelog>
  <changelog author="bwiedemann@suse.com" date="1533643200">- Add reproducible.patch to override build date (boo#1047218)
- Use constant hostname (boo#1084909)</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1561291200">- Update to version 7.7.0
  + Bug fixes:
  - PKCS#11 hcrypto back-end:
    + initialize the p11_module_load function list
    + verify that not only is a mechanism present but that its
    mechanism info states that it offers the required
    encryption, decryption or digest services
  - krb5:
    + Starting with 7.6, Heimdal permitted requesting
    authenticated anonymous tickets. However, it did not
    verify that a KDC in fact returned an anonymous ticket
    when one was requested.
    + Cease setting the KDCOption reaquest_anonymous flag when
    issuing S4UProxy (constrained delegation) TGS requests.
    + when the Win2K PKINIT compatibility option is set, do not
    require krbtgt otherName to match when validating KDC
    certificate.
    + set PKINIT_BTMM flag per Apple implementation
    + use memset_s() instead of memset()
  - kdc:
    + When generating KRB5SignedPath in the AS, use the reply
    client name rather than the one from the request, so
    validation will work correctly in the TGS.
    + allow checksum of PA-FOR-USER to be HMAC_MD5. Even if TGT
    used an enctype with a different checksum. Per [MS-SFU]
    2.2.1 PA-FOR-USER the checksum is always HMAC_MD5, and
    that's what Windows and MIT clients send.
    In Heimdal both the client and kdc use instead the
    checksum of the TGT, and therefore work with each other
    but Windows and MIT clients fail against Heimdal KDC.
    Both Windows and MIT KDC would allow any keyed checksum
    to be used so Heimdal client work fine against it.
    Change Heimdal KDC to allow HMAC_MD5 even for non RC4
    based TGT in order to support per-spec clients.
    + use memset_s() instead of memset()
    + Detect Heimdal 1.0 through 7.6 clients that issue
    S4UProxy (constrained delegation) TGS Requests with the
    request anonymous flag set. These requests will be
    treated as S4UProxy requests and not anonymous requests.
  - HDB:
    + Set SQLite3 backend default page size to 8KB.
    + Add hdb_set_sync() method
  - kadmind:
    + disable HDB sync during database load avoiding
    unnecessary disk i/o.
  - ipropd:
    + disable HDB sync during receive_everything. Doing an
    fsync per-record when receiving the complete HDB is a
    performance disaster. Among other things, if the HDB is
    very large, then one slave receving a full HDB can cause
    other slaves to timeout and, if HDB write activity is
    high enough to cause iprop log truncation, then also need
    full syncs, which leads to a cycle of full syncs for all
    slaves until HDB write activity drops.
    Allowing the iprop log to be larger helps, but improving
    receive_everything() performance helps even more.
  - kinit:
    + Anonymous PKINIT tickets discard the realm information
    used to locate the issuing AS. Store the issuing realm in
    the credentials cache in order to locate a KDC which can
    renew them.
    + Do not leak the result of krb5_cc_get_config() when
    determining anonymous PKINIT start realm.
  - klist:
    + Show transited-policy-checked, ok-as-delegate and
    anonymous flags when listing credentials.
  - tests:
    + Regenerate certs so that they expire before the 2038
    armageddon so the test suite will pass on 32-bit
    operating systems until the underlying issues can be
    resolved.
  - Solaris:
    + Define _STDC_C11_BCI for memset_s prototype
  - build tooling:
    + Convert from python 2 to python 3
  - documentation:
    + rename verify-password to verify-password-quality
    + hprop default mode is encrypt
    + kadmind "all" permission does not include "get-keys"
    + verify-password-quality might not be stateless
- Version 7.6.0
  + Security (#555):
  - CVE-2018-16860 Heimdal KDC: Reject PA-S4U2Self with unkeyed
    checksum
    When the Heimdal KDC checks the checksum that is placed on
    the S4U2Self packet by the server to protect the requested
    principal against modification, it does not confirm that
    the checksum algorithm that protects the user name
    (principal) in the request is keyed. This allows a
    man-in-the-middle attacker who can intercept the request to
    the KDC to modify the packet by replacing the user name
    (principal) in the request with any desired user name
    (principal) that exists in the KDC and replace the checksum
    protecting that name with a CRC32 checksum (which requires
    no prior knowledge to compute).
    This would allow a S4U2Self ticket requested on behalf of
    user name (principal) user@EXAMPLE.COM to any service to be
    changed to a S4U2Self ticket with a user name (principal) of
    Administrator@EXAMPLE.COM. This ticket would then contain
    the PAC of the modified user name (principal).
  - CVE-2019-12098, client-only:
    RFC8062 Section 7 requires verification of the PA-PKINIT-KX
    key exchange when anonymous PKINIT is used. Failure to do
    so can permit an active attacker to become a
    man-in-the-middle.
  + Bug fixes:
  - Happy eyeballs: Don't wait for responses from
    known-unreachable KDCs.
  - kdc:
    + check return copy_Realm, copy_PrincipalName,
    copy_EncryptionKey
  - kinit:
    + cleanup temporary ccaches
    + see man page for "kinit --anonymous" command line syntax
    change
  - kdc:
    + Make anonymous AS-requests more RFC8062-compliant.
    Updated expired test certificates
  - Solaris:
    + PKCS#11 hcrypto backend broken since 7.0.1
    + Building with Sun Pro C
  + Features:
  - kuser: support authenticated anonymous AS-REQs in kinit
  - kdc: support for anonymous TGS-REQs
  - kgetcred support for anonymous service tickets
  - Support builds with OpenSSL 1.1.1
- fixed heimdal-patched.diff and reproducible.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1653480000">- Apply Shared Library Packaging Policy and resolve rpmlint
  errors like "libheimdal.x86_64: E: shlib-policy-name-error
  SONAME: libasn1.so.8, expected package suffix: 8"</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656417600">- Add heimdal-7.7.0-autoconf-2.70.patch: Fix build with autoconf
  2.70 (gh#heimdal/heimdal#856).</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656590400">- Add ldconfig scriptlets.
- Fix 'Conflicts:' tags.
- Remove obsolete macros and conditionals.
- Ran spec-cleaner.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1671624000">- Update to version 7.8.0
  + This release includes both the Heimdal 7.7.1 Security
    Vulnerability fixes and non-Security bug fixes/improvements.
  + Security Vulnerabilities:
  - CVE-2022-42898 PAC parse integer overflows
  - CVE-2022-3437 Overflows and non-constant time leaks in
    DES{,3} and arcfour
  - CVE-2022-41916 Fix Unicode normalization read of 1 bytes past
    end of array
  - CVE-2021-44758 A null pointer de-reference DoS in SPNEGO
    acceptors
  - CVE-2021-3671 A null pointer de-reference when handling
    missing sname in TGS-REQ
  - CVE-2022-44640 Heimdal KDC: invalid free in ASN.1 codec
    Note that CVE-2022-44640 is a severe vulnerability,
    possibly a 10.0 on the Common Vulnerability Scoring
    System (CVSS) v3, as we believe it should be possible to
    get an RCE on a KDC, which means that credentials can be
    compromised that can be used to impersonate anyone in a
    realm or forest of realms.
    Heimdal's ASN.1 compiler generates code that allows
    specially crafted DER encodings of CHOICEs to invoke the
    wrong free function on the decoded structure upon decode
    error. This is known to impact the Heimdal KDC, leading to
    an invalid free() of an address partly or wholly under the
    control of the attacker, in turn leading to a potential
    remote code execution (RCE) vulnerability.
    This error affects the DER codec for all extensible CHOICE
    types used in Heimdal, though not all cases will be
    exploitable. We have not completed a thorough analysis of
    all the Heimdal components affected, thus the Kerberos
    client, the X.509 library, and other parts, may be affected
    as well.
    This bug has been in Heimdal's ASN.1 compiler since 2005,
    but it may only affect Heimdal 1.6 and up. It was first
    reported by Douglas Bagnall, though it had been found
    independently by the Heimdal maintainers via fuzzing a few
    weeks earlier.
    While no zero-day exploit is known, such an exploit will
    likely be available soon after public disclosure.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  + Other changes:
  - Bugs found by UBSAN (including the incorrect encoding of
    unconstrained INTEGER value -1).
  - Errors found by the LLVM scan-build static analyzer.
  - Errors found by the valgrind memory debugger.
  - Work around GCC Bug 95189 (memcmp wrongly stripped like
    strcmp).
  - Correct ASN.1 OID typo for SHA-384
  - Fix a deadlock in in the MEMORY ccache type.
  - TGS: strip forwardable and proxiable flags if the server is
    disallowed.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  - Incremental HDB propagation improvements
    Refactor send_diffs making it progressive
    Handle partial writes on non-blocking sockets
    Disable Nagle in iprop master and slave
    Use async I/O
    Don't send I_HAVE in response to AYT
    Do not recover log in kadm5_get_principal()
    Don't send diffs to slaves with not yet known version
    Don't stutter in send_diffs
  - Optional backwards-compatible anon-pkinit behavior
- Removed heimdal-7.7.0-autoconf-2.70.patch, fixed upstream.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1673352000">- replace libheimdal conflicts by obsoletes / provides to provide a
  smooth update in the new libheimdal-devel.</changelog>
</package>
<package pkgid="3f98c2a1e990281832aa5bd686301210f20a41ec520db3de78b148c25ed503f8" name="libsl0" arch="x86_64">
  <version epoch="0" ver="7.8.0" rel="bp154.2.4.1"/>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1440936000">- Initial package, version 1.6rc2
- Added patch heimdal-version-script-client.map.patch to add file
  version-script-client.map (File is present in git for tag 1.6rc2
  but missing in tarball).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441108800">- Some changes in spec file to enable build for SLES.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441195200">- Added Conflicts tags to spec file because devel package conflicts
  with krb5-devel and krb5-mini-devel.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441454400">- Added a patched instead of the original tarball because only
  shared libraries will be build and source files of these (not to
  be build) programs have problematic licenses.
- Added script heimdal-patch-source.sh to sources.
- Added patch heimdal-patched.diff that fixes configure.ac and
  several Makefile.am files to successfully build patched source.
- Removed unneeded dependencies in spec file for build.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1483790400">- Update to version 7.1.0
- Removed heimdal-version-script-client.map.patch, fixed upstream.
- Fixed heimdal-patched.diff.
- Unfortunately there is no updated changelog file in tarball,
  changes can be seen in source code version control systems
  history log.</changelog>
  <changelog author="jengelh@inai.de" date="1486036800">- Summary and RPM group update. Do a direct call to ldconfig
  where possible.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1497528000">- Update to version 7.3.0
  - Security
    + Fix transit path validation. Commit f469fc6 (2010-10-02)
    inadvertently caused the previous hop realm to not be added
    to the transit path of issued tickets. This may, in some
    cases, enable bypass of capath policy in Heimdal versions 1.5
    through 7.2.
    Note, this may break sites that rely on the bug. With the bug
    some incomplete [capaths] worked, that should not have.
    These may now break authentication in some cross-realm
    configurations. (CVE-2017-6594)
- Version 7.2.0
  - Bug fixes
    + Portability improvements.
    + More strict parsing of encoded URI components in HTTP KDC.
    + Fixed memory leak in malloc error recovery in NTLM GSSAPI
    mechanism.
    + Avoid overly specific CPU info in krb5-config in aid of
    reproducible builds.
    + Don't do AFS string-to-key tests when feature is disabled.
    + Skip mdb_stat test when the command is not available.
    + Windows: update SHA2 timestamp server.
    + hdb: add missing export
    hdb_generate_key_set_password_with_ks_tuple.
    + Fix signature of hdb_generate_key_set_password().
    + Windows: enable KX509 support in the KDC.
    + kdc: fix kx509 service principal match.
    + iprop: handle case where master sends nothing new.
    + ipropd-slave: fix incorrect error codes.
    + Allow choice of sqlite for HDB pref.
    + check-iprop: don't fail to kill daemons.
    + roken: pidfile -&gt; rk_pidfile.
    + kdc: _kdc_do_kx509 fix use after free error.
    + Do not detect x32 as 64-bit platform.
    + No sys/ttydefaults.h on CYGWIN.
    + Fix check-iprop races.
    + roken_detach_prep() close pipe.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1501761600">- Update to version 7.4.0
  - Security
  - Fix CVE-2017-11103: Orpheus' Lyre KDC-REP service name
    validation.
    This is a critical vulnerability.
    In _krb5_extract_ticket() the KDC-REP service name must be
    obtained from encrypted version stored in 'enc_part' instead
    of the unencrypted version stored in 'ticket'.
    Use of the unecrypted version provides an opportunity for
    successful server impersonation and other attacks.
    Identified by Jeffrey Altman, Viktor Duchovni and
    Nico Williams.
    See https://www.orpheus-lyre.info/ for more details.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1512648000">- Added Avoid_NULL_structure_pointer_member_dereference.patch,
  fixes (bsc#1071675).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1514548800">- Update to version 7.5.0
  - Security
  - Fix CVE-2017-17439, which is a remote denial of service
    vulnerability:
    In Heimdal 7.1 through 7.4, remote unauthenticated attackers
    are able to crash the KDC by sending a crafted UDP packet
    containing empty data fields for client name or realm.
  - Bug fixes
  - Handle long input lines when reloading database dumps.
  - In pre-forked mode (default on Unix), correctly clear the
    process ids of exited children, allowing new child processes
    to replace the old.
  - Fixed incorrect KDC response when no-cross realm TGT exists,
    allowing client requests to fail quickly rather than time
    out after trying to get a correct answer from each KDC.
- Fixed heimdal-patched.diff.
- Removed Avoid_NULL_structure_pointer_member_dereference.patch,
  fixed upstream.</changelog>
  <changelog author="bwiedemann@suse.com" date="1533643200">- Add reproducible.patch to override build date (boo#1047218)
- Use constant hostname (boo#1084909)</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1561291200">- Update to version 7.7.0
  + Bug fixes:
  - PKCS#11 hcrypto back-end:
    + initialize the p11_module_load function list
    + verify that not only is a mechanism present but that its
    mechanism info states that it offers the required
    encryption, decryption or digest services
  - krb5:
    + Starting with 7.6, Heimdal permitted requesting
    authenticated anonymous tickets. However, it did not
    verify that a KDC in fact returned an anonymous ticket
    when one was requested.
    + Cease setting the KDCOption reaquest_anonymous flag when
    issuing S4UProxy (constrained delegation) TGS requests.
    + when the Win2K PKINIT compatibility option is set, do not
    require krbtgt otherName to match when validating KDC
    certificate.
    + set PKINIT_BTMM flag per Apple implementation
    + use memset_s() instead of memset()
  - kdc:
    + When generating KRB5SignedPath in the AS, use the reply
    client name rather than the one from the request, so
    validation will work correctly in the TGS.
    + allow checksum of PA-FOR-USER to be HMAC_MD5. Even if TGT
    used an enctype with a different checksum. Per [MS-SFU]
    2.2.1 PA-FOR-USER the checksum is always HMAC_MD5, and
    that's what Windows and MIT clients send.
    In Heimdal both the client and kdc use instead the
    checksum of the TGT, and therefore work with each other
    but Windows and MIT clients fail against Heimdal KDC.
    Both Windows and MIT KDC would allow any keyed checksum
    to be used so Heimdal client work fine against it.
    Change Heimdal KDC to allow HMAC_MD5 even for non RC4
    based TGT in order to support per-spec clients.
    + use memset_s() instead of memset()
    + Detect Heimdal 1.0 through 7.6 clients that issue
    S4UProxy (constrained delegation) TGS Requests with the
    request anonymous flag set. These requests will be
    treated as S4UProxy requests and not anonymous requests.
  - HDB:
    + Set SQLite3 backend default page size to 8KB.
    + Add hdb_set_sync() method
  - kadmind:
    + disable HDB sync during database load avoiding
    unnecessary disk i/o.
  - ipropd:
    + disable HDB sync during receive_everything. Doing an
    fsync per-record when receiving the complete HDB is a
    performance disaster. Among other things, if the HDB is
    very large, then one slave receving a full HDB can cause
    other slaves to timeout and, if HDB write activity is
    high enough to cause iprop log truncation, then also need
    full syncs, which leads to a cycle of full syncs for all
    slaves until HDB write activity drops.
    Allowing the iprop log to be larger helps, but improving
    receive_everything() performance helps even more.
  - kinit:
    + Anonymous PKINIT tickets discard the realm information
    used to locate the issuing AS. Store the issuing realm in
    the credentials cache in order to locate a KDC which can
    renew them.
    + Do not leak the result of krb5_cc_get_config() when
    determining anonymous PKINIT start realm.
  - klist:
    + Show transited-policy-checked, ok-as-delegate and
    anonymous flags when listing credentials.
  - tests:
    + Regenerate certs so that they expire before the 2038
    armageddon so the test suite will pass on 32-bit
    operating systems until the underlying issues can be
    resolved.
  - Solaris:
    + Define _STDC_C11_BCI for memset_s prototype
  - build tooling:
    + Convert from python 2 to python 3
  - documentation:
    + rename verify-password to verify-password-quality
    + hprop default mode is encrypt
    + kadmind "all" permission does not include "get-keys"
    + verify-password-quality might not be stateless
- Version 7.6.0
  + Security (#555):
  - CVE-2018-16860 Heimdal KDC: Reject PA-S4U2Self with unkeyed
    checksum
    When the Heimdal KDC checks the checksum that is placed on
    the S4U2Self packet by the server to protect the requested
    principal against modification, it does not confirm that
    the checksum algorithm that protects the user name
    (principal) in the request is keyed. This allows a
    man-in-the-middle attacker who can intercept the request to
    the KDC to modify the packet by replacing the user name
    (principal) in the request with any desired user name
    (principal) that exists in the KDC and replace the checksum
    protecting that name with a CRC32 checksum (which requires
    no prior knowledge to compute).
    This would allow a S4U2Self ticket requested on behalf of
    user name (principal) user@EXAMPLE.COM to any service to be
    changed to a S4U2Self ticket with a user name (principal) of
    Administrator@EXAMPLE.COM. This ticket would then contain
    the PAC of the modified user name (principal).
  - CVE-2019-12098, client-only:
    RFC8062 Section 7 requires verification of the PA-PKINIT-KX
    key exchange when anonymous PKINIT is used. Failure to do
    so can permit an active attacker to become a
    man-in-the-middle.
  + Bug fixes:
  - Happy eyeballs: Don't wait for responses from
    known-unreachable KDCs.
  - kdc:
    + check return copy_Realm, copy_PrincipalName,
    copy_EncryptionKey
  - kinit:
    + cleanup temporary ccaches
    + see man page for "kinit --anonymous" command line syntax
    change
  - kdc:
    + Make anonymous AS-requests more RFC8062-compliant.
    Updated expired test certificates
  - Solaris:
    + PKCS#11 hcrypto backend broken since 7.0.1
    + Building with Sun Pro C
  + Features:
  - kuser: support authenticated anonymous AS-REQs in kinit
  - kdc: support for anonymous TGS-REQs
  - kgetcred support for anonymous service tickets
  - Support builds with OpenSSL 1.1.1
- fixed heimdal-patched.diff and reproducible.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1653480000">- Apply Shared Library Packaging Policy and resolve rpmlint
  errors like "libheimdal.x86_64: E: shlib-policy-name-error
  SONAME: libasn1.so.8, expected package suffix: 8"</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656417600">- Add heimdal-7.7.0-autoconf-2.70.patch: Fix build with autoconf
  2.70 (gh#heimdal/heimdal#856).</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656590400">- Add ldconfig scriptlets.
- Fix 'Conflicts:' tags.
- Remove obsolete macros and conditionals.
- Ran spec-cleaner.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1671624000">- Update to version 7.8.0
  + This release includes both the Heimdal 7.7.1 Security
    Vulnerability fixes and non-Security bug fixes/improvements.
  + Security Vulnerabilities:
  - CVE-2022-42898 PAC parse integer overflows
  - CVE-2022-3437 Overflows and non-constant time leaks in
    DES{,3} and arcfour
  - CVE-2022-41916 Fix Unicode normalization read of 1 bytes past
    end of array
  - CVE-2021-44758 A null pointer de-reference DoS in SPNEGO
    acceptors
  - CVE-2021-3671 A null pointer de-reference when handling
    missing sname in TGS-REQ
  - CVE-2022-44640 Heimdal KDC: invalid free in ASN.1 codec
    Note that CVE-2022-44640 is a severe vulnerability,
    possibly a 10.0 on the Common Vulnerability Scoring
    System (CVSS) v3, as we believe it should be possible to
    get an RCE on a KDC, which means that credentials can be
    compromised that can be used to impersonate anyone in a
    realm or forest of realms.
    Heimdal's ASN.1 compiler generates code that allows
    specially crafted DER encodings of CHOICEs to invoke the
    wrong free function on the decoded structure upon decode
    error. This is known to impact the Heimdal KDC, leading to
    an invalid free() of an address partly or wholly under the
    control of the attacker, in turn leading to a potential
    remote code execution (RCE) vulnerability.
    This error affects the DER codec for all extensible CHOICE
    types used in Heimdal, though not all cases will be
    exploitable. We have not completed a thorough analysis of
    all the Heimdal components affected, thus the Kerberos
    client, the X.509 library, and other parts, may be affected
    as well.
    This bug has been in Heimdal's ASN.1 compiler since 2005,
    but it may only affect Heimdal 1.6 and up. It was first
    reported by Douglas Bagnall, though it had been found
    independently by the Heimdal maintainers via fuzzing a few
    weeks earlier.
    While no zero-day exploit is known, such an exploit will
    likely be available soon after public disclosure.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  + Other changes:
  - Bugs found by UBSAN (including the incorrect encoding of
    unconstrained INTEGER value -1).
  - Errors found by the LLVM scan-build static analyzer.
  - Errors found by the valgrind memory debugger.
  - Work around GCC Bug 95189 (memcmp wrongly stripped like
    strcmp).
  - Correct ASN.1 OID typo for SHA-384
  - Fix a deadlock in in the MEMORY ccache type.
  - TGS: strip forwardable and proxiable flags if the server is
    disallowed.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  - Incremental HDB propagation improvements
    Refactor send_diffs making it progressive
    Handle partial writes on non-blocking sockets
    Disable Nagle in iprop master and slave
    Use async I/O
    Don't send I_HAVE in response to AYT
    Do not recover log in kadm5_get_principal()
    Don't send diffs to slaves with not yet known version
    Don't stutter in send_diffs
  - Optional backwards-compatible anon-pkinit behavior
- Removed heimdal-7.7.0-autoconf-2.70.patch, fixed upstream.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1673352000">- replace libheimdal conflicts by obsoletes / provides to provide a
  smooth update in the new libheimdal-devel.</changelog>
</package>
<package pkgid="eb3a77a1099554dd531340b4bbb0ef117562b3bf7b6f23463f4d26a771adf661" name="libsocketxx1_2" arch="aarch64">
  <version epoch="0" ver="3.0.19" rel="bp154.2.5.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1582027200">- version 3.0.5
  * fix for API change in poppler</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1585483200">- poppler_api.patch added to fix API changes in poppler in TW</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1586865600">- Update poppler_api.patch to make UnicodeMap* const.
- Compile with -fpermissive so that this works on Leap 15.2 too</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1591617600">- Add patch to fix build on aarch64:
  * gdcm-2.8.8-dont_use_EOF.patch</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1591704000">- version 3.0.6
  * no changelog available
  * poppler_api.patch removed (included in source)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1593518400">- version 3.0.7
  * no changelog available
  * gdcm-2.8.8-dont_use_EOF.patch removed (included in 3.0.7)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1602936000">- version 3.0.8
  * Fix TestScanner1 test</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1604404800">- fixed build system
  fix_charls2_patch removed
  0001-Fix-build-with-CharLS-2.1.0.patch added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1604577600">- typo corrected: fix_charls_2.patch removed</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1622808000">- 0002-gcc11-changes.diff added to fix TW build failure</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1627387200">- version 3.0.9 (no changelog)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1628510400">- Trim filler wording from some descriptions. Change the other
  descriptions to describe the package, rather than give
  instructions to the user.</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1639396800">- version 3.0.10 (no changelog)
  * 0002-gcc11-changes.diff removed (included in source)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1646740800">- use compiler gcc11-c++ to fix Leap 15.4 build</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648209600">- version 3.0.11
  * Fix for a significant issue with JPEG-LS and RGB color space
  * tons of small bug fixes</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648814400">- version 3.0.12
  * support for poppler 22.03 added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1663588800">- version 3.0.18
  no changelog</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1663934400">- rename of gdcm-libgdcm3_0 to libgdcm3_0 (proposal S. Brüns)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664798400">- Provides/obsoletes moved to lbgdcm-package (Thx DimStar)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664971200">- version 3.0.19 - no changelog
  'Provides' Tag removed from ligdcm</changelog>
</package>
<package pkgid="23cf8bface0d03edd273e7e9e9c16b0ede83170645d4a71ca10555973786a6d3" name="libsocketxx1_2" arch="ppc64le">
  <version epoch="0" ver="3.0.19" rel="bp154.2.5.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1582027200">- version 3.0.5
  * fix for API change in poppler</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1585483200">- poppler_api.patch added to fix API changes in poppler in TW</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1586865600">- Update poppler_api.patch to make UnicodeMap* const.
- Compile with -fpermissive so that this works on Leap 15.2 too</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1591617600">- Add patch to fix build on aarch64:
  * gdcm-2.8.8-dont_use_EOF.patch</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1591704000">- version 3.0.6
  * no changelog available
  * poppler_api.patch removed (included in source)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1593518400">- version 3.0.7
  * no changelog available
  * gdcm-2.8.8-dont_use_EOF.patch removed (included in 3.0.7)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1602936000">- version 3.0.8
  * Fix TestScanner1 test</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1604404800">- fixed build system
  fix_charls2_patch removed
  0001-Fix-build-with-CharLS-2.1.0.patch added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1604577600">- typo corrected: fix_charls_2.patch removed</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1622808000">- 0002-gcc11-changes.diff added to fix TW build failure</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1627387200">- version 3.0.9 (no changelog)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1628510400">- Trim filler wording from some descriptions. Change the other
  descriptions to describe the package, rather than give
  instructions to the user.</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1639396800">- version 3.0.10 (no changelog)
  * 0002-gcc11-changes.diff removed (included in source)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1646740800">- use compiler gcc11-c++ to fix Leap 15.4 build</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648209600">- version 3.0.11
  * Fix for a significant issue with JPEG-LS and RGB color space
  * tons of small bug fixes</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648814400">- version 3.0.12
  * support for poppler 22.03 added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1663588800">- version 3.0.18
  no changelog</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1663934400">- rename of gdcm-libgdcm3_0 to libgdcm3_0 (proposal S. Brüns)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664798400">- Provides/obsoletes moved to lbgdcm-package (Thx DimStar)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664971200">- version 3.0.19 - no changelog
  'Provides' Tag removed from ligdcm</changelog>
</package>
<package pkgid="bf23f31c1211e3dc2ca8bde4bd687b4cd89e9e37376e7eb38de31d6e47e897a2" name="libsocketxx1_2" arch="s390x">
  <version epoch="0" ver="3.0.19" rel="bp154.2.5.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1582027200">- version 3.0.5
  * fix for API change in poppler</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1585483200">- poppler_api.patch added to fix API changes in poppler in TW</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1586865600">- Update poppler_api.patch to make UnicodeMap* const.
- Compile with -fpermissive so that this works on Leap 15.2 too</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1591617600">- Add patch to fix build on aarch64:
  * gdcm-2.8.8-dont_use_EOF.patch</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1591704000">- version 3.0.6
  * no changelog available
  * poppler_api.patch removed (included in source)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1593518400">- version 3.0.7
  * no changelog available
  * gdcm-2.8.8-dont_use_EOF.patch removed (included in 3.0.7)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1602936000">- version 3.0.8
  * Fix TestScanner1 test</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1604404800">- fixed build system
  fix_charls2_patch removed
  0001-Fix-build-with-CharLS-2.1.0.patch added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1604577600">- typo corrected: fix_charls_2.patch removed</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1622808000">- 0002-gcc11-changes.diff added to fix TW build failure</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1627387200">- version 3.0.9 (no changelog)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1628510400">- Trim filler wording from some descriptions. Change the other
  descriptions to describe the package, rather than give
  instructions to the user.</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1639396800">- version 3.0.10 (no changelog)
  * 0002-gcc11-changes.diff removed (included in source)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1646740800">- use compiler gcc11-c++ to fix Leap 15.4 build</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648209600">- version 3.0.11
  * Fix for a significant issue with JPEG-LS and RGB color space
  * tons of small bug fixes</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648814400">- version 3.0.12
  * support for poppler 22.03 added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1663588800">- version 3.0.18
  no changelog</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1663934400">- rename of gdcm-libgdcm3_0 to libgdcm3_0 (proposal S. Brüns)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664798400">- Provides/obsoletes moved to lbgdcm-package (Thx DimStar)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664971200">- version 3.0.19 - no changelog
  'Provides' Tag removed from ligdcm</changelog>
</package>
<package pkgid="f5f388b2d1049eb024060348f0ec5cd89ba9131330203f70e03493706f459f61" name="libsocketxx1_2" arch="x86_64">
  <version epoch="0" ver="3.0.19" rel="bp154.2.5.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1582027200">- version 3.0.5
  * fix for API change in poppler</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1585483200">- poppler_api.patch added to fix API changes in poppler in TW</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1586865600">- Update poppler_api.patch to make UnicodeMap* const.
- Compile with -fpermissive so that this works on Leap 15.2 too</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1591617600">- Add patch to fix build on aarch64:
  * gdcm-2.8.8-dont_use_EOF.patch</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1591704000">- version 3.0.6
  * no changelog available
  * poppler_api.patch removed (included in source)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1593518400">- version 3.0.7
  * no changelog available
  * gdcm-2.8.8-dont_use_EOF.patch removed (included in 3.0.7)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1602936000">- version 3.0.8
  * Fix TestScanner1 test</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1604404800">- fixed build system
  fix_charls2_patch removed
  0001-Fix-build-with-CharLS-2.1.0.patch added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1604577600">- typo corrected: fix_charls_2.patch removed</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1622808000">- 0002-gcc11-changes.diff added to fix TW build failure</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1627387200">- version 3.0.9 (no changelog)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1628510400">- Trim filler wording from some descriptions. Change the other
  descriptions to describe the package, rather than give
  instructions to the user.</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1639396800">- version 3.0.10 (no changelog)
  * 0002-gcc11-changes.diff removed (included in source)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1646740800">- use compiler gcc11-c++ to fix Leap 15.4 build</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648209600">- version 3.0.11
  * Fix for a significant issue with JPEG-LS and RGB color space
  * tons of small bug fixes</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648814400">- version 3.0.12
  * support for poppler 22.03 added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1663588800">- version 3.0.18
  no changelog</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1663934400">- rename of gdcm-libgdcm3_0 to libgdcm3_0 (proposal S. Brüns)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664798400">- Provides/obsoletes moved to lbgdcm-package (Thx DimStar)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664971200">- version 3.0.19 - no changelog
  'Provides' Tag removed from ligdcm</changelog>
</package>
<package pkgid="198b99fe9eb9a84579754eadb9a69e4c8e904d8b82028e8993e0646890ff97d6" name="libtumbler-1-0" arch="aarch64">
  <version epoch="0" ver="4.16.1" rel="bp154.3.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1511006400">- add explicit libtumbler versioned dependency to tumbler</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1523188800">- update to version 0.2.1
  - Handle 0 mtime threshold on Cleanup DBus method. This fixes
    running across all thumbnails that was causing very high I/O
    bandwidth usage when a file with a thumbnail gets deleted. (On
    dbus Cleanup method). bxo#9231</changelog>
  <changelog author="Stefan Seyfried &lt;seife+obs@b1-systems.com&gt;" date="1537012800">- update to version 0.2.3
  - Test sparse files only for regular files (bxo#14693).
  - Fix uninitialized variable (bxo#14688)
  - Added check to avoid sparse files, that cause high cpu and
    memory load. (bxo#12259).
  - Use hash table to avoid scanning xdg user path twice when
    searching for desktop thumbnailers.
  - Close desktop thumbnailers directory when done from it.
  - Accept network paths in ffmpeg thumbnailer plugin.
  - Use pkg-config to find FreeType &gt; 2.9.1.
  - Translation Updates</changelog>
  <changelog author="Vinzenz Vietzke &lt;vinz@vinzv.de&gt;" date="1558094400">- Update to version 0.2.4
  - Check for sparse video files only on plugin side
  - Set Max file sizes
  - Add Fujifilm RAF support (bxo#14522)
  - Add more media types for audio cover thumbnails (bxo#12041)
  - Fix a typo in desktop-thumbnailer-provider.c (bxo#14925)
  - Update URLs in README and configure.ac
  - Fix g_type_class_add_private is deprecated
  - Bump glib version
  - Translation Updates
- Added bcond to build with sources from git master branch
- Switched to %autosetup for simpler maintenance
- Switch urls to https://
- Cleaned up spec file</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1559476800">- Replace pkgconfig(liopenraw-gnome-1.0) BuildRequires with
  libopenraw-devel: the .pc file changed name between 0.0.x and
  0.1.x. Requiring the generic -devel name is easier than following
  upstreams namechanges.
- In case we build against libopenraw-gnome-0.1, update the build
  system to look for the right pc file using sed.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1559736000">- Added OBS service file to fetch git master sources when needed</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1561896000">- Update to version 0.2.5
  * Translation updates
- Removed unneeded BuildRoot</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1564315200">- Update to version 0.2.6
  * Translation updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1565611200">- Update to version 0.2.7
  * Translation updates
- Cleaned up spec file</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1565956800">- Fixed sources in spec file</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1576929600">- Updated to version 0.2.8
  * Fix thumbnail orientation (bxo#15011)
  * prepend $XDG_DATA_HOME/thumbnailers/ to thumbnailers directory
    (bxo#15858)
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1584014400">- Add support for WebP and custom folder thumbnails
  * Folder thumbnailer:
    https://docs.xfce.org/xfce/thunar/tumbler#customized_thumbnailer_for_folders
  * WebP thumbnailer: bxo#12528</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1596715200">- Update to version 0.2.9
  * This release addresses the issue described in gxo#xfce/tumbler#28
    and partially solved by the previous release 0.2.28.
    The issue now is completely solved by adding the correct
    orientation handling when fallback code for generating jpeg
    thumbnail takes place.</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1598616000">- Update to version 0.3.0
  * Fix jpeg thumbnail orientation when fallback code is taken place
    (gxo#xfce/tumbler#28).
  * Use AC_CONFIG_MACRO_DIRS instead of AC_CONFIG_MACRO_DIR
  * Fix GTimeVal deprecation
  * Drop support of GLib &lt; 2.32
  * Use guint32 for request handle and fix its further occurrences of 0
  * Implement Excludes paths in tumbler.rc
  * Translation Updates</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1604232000">- Weak dependencies: Use Supplements tag as recommended
  tumbler-folder-thumbnailer/tumbler-webp-thumbnailer dependencies
  for main package</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1604318400">- Remove hard dependency to Thunar 1.8.2. We use "Suggests" instead
  to make sure the correct version is picked while keeping a soft
  dependency.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1605528000">- Update to version 0.3.1
  - New plugin for epub books, using libgepub thumbnailer plugin
  - Fix documentation URL
  - Add README.md and EXTRA_DIST
  - Add new icon needed for xfce4-about-dialog
  - Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1608724800">- Update to version 4.16.0
  - Remove GLIB_CHECK_VERSION IFDEFs which are obsolete after glib bump
  - bump glib (and gio, gthread, etc) minimum to 2.50.0
  - Adjust bug report URL
  - Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1634212800">- Add Recommends: ffmpegthumbnailer</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1667995200">- Update to version 4.16.1 (boo#1205210)
  * gst-thumbnailer: Add mime type check (gxo#xfce/tumbler#65)
  * desktop-thumbnailer: Guard against null path
  * Fix typo in gthread version (gxo#xfce/tumbler!14)
- Exclude RAW thumbnailer on Tumbleweed and Leap 15.5+ because
  tumbler does not yet support openraw 0.3
- Allow building against libgepub-0.7 (boo#1203644):
  * Adjust BuildRequires to work with libgepub-0.6 or libgepub-0.7.
  * Replace libgepub-0.6 occurences in configure script with
    libgepub-0.7 when libgepub 0.7 is present.</changelog>
</package>
<package pkgid="e61a51da648746e50b5f8e28cc39052334b956c0908e05643fe6cdcc36f4a3f9" name="libtumbler-1-0" arch="ppc64le">
  <version epoch="0" ver="4.16.1" rel="bp154.3.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1511006400">- add explicit libtumbler versioned dependency to tumbler</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1523188800">- update to version 0.2.1
  - Handle 0 mtime threshold on Cleanup DBus method. This fixes
    running across all thumbnails that was causing very high I/O
    bandwidth usage when a file with a thumbnail gets deleted. (On
    dbus Cleanup method). bxo#9231</changelog>
  <changelog author="Stefan Seyfried &lt;seife+obs@b1-systems.com&gt;" date="1537012800">- update to version 0.2.3
  - Test sparse files only for regular files (bxo#14693).
  - Fix uninitialized variable (bxo#14688)
  - Added check to avoid sparse files, that cause high cpu and
    memory load. (bxo#12259).
  - Use hash table to avoid scanning xdg user path twice when
    searching for desktop thumbnailers.
  - Close desktop thumbnailers directory when done from it.
  - Accept network paths in ffmpeg thumbnailer plugin.
  - Use pkg-config to find FreeType &gt; 2.9.1.
  - Translation Updates</changelog>
  <changelog author="Vinzenz Vietzke &lt;vinz@vinzv.de&gt;" date="1558094400">- Update to version 0.2.4
  - Check for sparse video files only on plugin side
  - Set Max file sizes
  - Add Fujifilm RAF support (bxo#14522)
  - Add more media types for audio cover thumbnails (bxo#12041)
  - Fix a typo in desktop-thumbnailer-provider.c (bxo#14925)
  - Update URLs in README and configure.ac
  - Fix g_type_class_add_private is deprecated
  - Bump glib version
  - Translation Updates
- Added bcond to build with sources from git master branch
- Switched to %autosetup for simpler maintenance
- Switch urls to https://
- Cleaned up spec file</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1559476800">- Replace pkgconfig(liopenraw-gnome-1.0) BuildRequires with
  libopenraw-devel: the .pc file changed name between 0.0.x and
  0.1.x. Requiring the generic -devel name is easier than following
  upstreams namechanges.
- In case we build against libopenraw-gnome-0.1, update the build
  system to look for the right pc file using sed.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1559736000">- Added OBS service file to fetch git master sources when needed</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1561896000">- Update to version 0.2.5
  * Translation updates
- Removed unneeded BuildRoot</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1564315200">- Update to version 0.2.6
  * Translation updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1565611200">- Update to version 0.2.7
  * Translation updates
- Cleaned up spec file</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1565956800">- Fixed sources in spec file</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1576929600">- Updated to version 0.2.8
  * Fix thumbnail orientation (bxo#15011)
  * prepend $XDG_DATA_HOME/thumbnailers/ to thumbnailers directory
    (bxo#15858)
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1584014400">- Add support for WebP and custom folder thumbnails
  * Folder thumbnailer:
    https://docs.xfce.org/xfce/thunar/tumbler#customized_thumbnailer_for_folders
  * WebP thumbnailer: bxo#12528</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1596715200">- Update to version 0.2.9
  * This release addresses the issue described in gxo#xfce/tumbler#28
    and partially solved by the previous release 0.2.28.
    The issue now is completely solved by adding the correct
    orientation handling when fallback code for generating jpeg
    thumbnail takes place.</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1598616000">- Update to version 0.3.0
  * Fix jpeg thumbnail orientation when fallback code is taken place
    (gxo#xfce/tumbler#28).
  * Use AC_CONFIG_MACRO_DIRS instead of AC_CONFIG_MACRO_DIR
  * Fix GTimeVal deprecation
  * Drop support of GLib &lt; 2.32
  * Use guint32 for request handle and fix its further occurrences of 0
  * Implement Excludes paths in tumbler.rc
  * Translation Updates</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1604232000">- Weak dependencies: Use Supplements tag as recommended
  tumbler-folder-thumbnailer/tumbler-webp-thumbnailer dependencies
  for main package</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1604318400">- Remove hard dependency to Thunar 1.8.2. We use "Suggests" instead
  to make sure the correct version is picked while keeping a soft
  dependency.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1605528000">- Update to version 0.3.1
  - New plugin for epub books, using libgepub thumbnailer plugin
  - Fix documentation URL
  - Add README.md and EXTRA_DIST
  - Add new icon needed for xfce4-about-dialog
  - Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1608724800">- Update to version 4.16.0
  - Remove GLIB_CHECK_VERSION IFDEFs which are obsolete after glib bump
  - bump glib (and gio, gthread, etc) minimum to 2.50.0
  - Adjust bug report URL
  - Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1634212800">- Add Recommends: ffmpegthumbnailer</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1667995200">- Update to version 4.16.1 (boo#1205210)
  * gst-thumbnailer: Add mime type check (gxo#xfce/tumbler#65)
  * desktop-thumbnailer: Guard against null path
  * Fix typo in gthread version (gxo#xfce/tumbler!14)
- Exclude RAW thumbnailer on Tumbleweed and Leap 15.5+ because
  tumbler does not yet support openraw 0.3
- Allow building against libgepub-0.7 (boo#1203644):
  * Adjust BuildRequires to work with libgepub-0.6 or libgepub-0.7.
  * Replace libgepub-0.6 occurences in configure script with
    libgepub-0.7 when libgepub 0.7 is present.</changelog>
</package>
<package pkgid="4f7ce61c00380e1d57b4d6575cbd263e4838c7445060ff3e5d083515767e22ad" name="libtumbler-1-0" arch="s390x">
  <version epoch="0" ver="4.16.1" rel="bp154.3.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1511006400">- add explicit libtumbler versioned dependency to tumbler</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1523188800">- update to version 0.2.1
  - Handle 0 mtime threshold on Cleanup DBus method. This fixes
    running across all thumbnails that was causing very high I/O
    bandwidth usage when a file with a thumbnail gets deleted. (On
    dbus Cleanup method). bxo#9231</changelog>
  <changelog author="Stefan Seyfried &lt;seife+obs@b1-systems.com&gt;" date="1537012800">- update to version 0.2.3
  - Test sparse files only for regular files (bxo#14693).
  - Fix uninitialized variable (bxo#14688)
  - Added check to avoid sparse files, that cause high cpu and
    memory load. (bxo#12259).
  - Use hash table to avoid scanning xdg user path twice when
    searching for desktop thumbnailers.
  - Close desktop thumbnailers directory when done from it.
  - Accept network paths in ffmpeg thumbnailer plugin.
  - Use pkg-config to find FreeType &gt; 2.9.1.
  - Translation Updates</changelog>
  <changelog author="Vinzenz Vietzke &lt;vinz@vinzv.de&gt;" date="1558094400">- Update to version 0.2.4
  - Check for sparse video files only on plugin side
  - Set Max file sizes
  - Add Fujifilm RAF support (bxo#14522)
  - Add more media types for audio cover thumbnails (bxo#12041)
  - Fix a typo in desktop-thumbnailer-provider.c (bxo#14925)
  - Update URLs in README and configure.ac
  - Fix g_type_class_add_private is deprecated
  - Bump glib version
  - Translation Updates
- Added bcond to build with sources from git master branch
- Switched to %autosetup for simpler maintenance
- Switch urls to https://
- Cleaned up spec file</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1559476800">- Replace pkgconfig(liopenraw-gnome-1.0) BuildRequires with
  libopenraw-devel: the .pc file changed name between 0.0.x and
  0.1.x. Requiring the generic -devel name is easier than following
  upstreams namechanges.
- In case we build against libopenraw-gnome-0.1, update the build
  system to look for the right pc file using sed.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1559736000">- Added OBS service file to fetch git master sources when needed</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1561896000">- Update to version 0.2.5
  * Translation updates
- Removed unneeded BuildRoot</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1564315200">- Update to version 0.2.6
  * Translation updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1565611200">- Update to version 0.2.7
  * Translation updates
- Cleaned up spec file</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1565956800">- Fixed sources in spec file</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1576929600">- Updated to version 0.2.8
  * Fix thumbnail orientation (bxo#15011)
  * prepend $XDG_DATA_HOME/thumbnailers/ to thumbnailers directory
    (bxo#15858)
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1584014400">- Add support for WebP and custom folder thumbnails
  * Folder thumbnailer:
    https://docs.xfce.org/xfce/thunar/tumbler#customized_thumbnailer_for_folders
  * WebP thumbnailer: bxo#12528</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1596715200">- Update to version 0.2.9
  * This release addresses the issue described in gxo#xfce/tumbler#28
    and partially solved by the previous release 0.2.28.
    The issue now is completely solved by adding the correct
    orientation handling when fallback code for generating jpeg
    thumbnail takes place.</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1598616000">- Update to version 0.3.0
  * Fix jpeg thumbnail orientation when fallback code is taken place
    (gxo#xfce/tumbler#28).
  * Use AC_CONFIG_MACRO_DIRS instead of AC_CONFIG_MACRO_DIR
  * Fix GTimeVal deprecation
  * Drop support of GLib &lt; 2.32
  * Use guint32 for request handle and fix its further occurrences of 0
  * Implement Excludes paths in tumbler.rc
  * Translation Updates</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1604232000">- Weak dependencies: Use Supplements tag as recommended
  tumbler-folder-thumbnailer/tumbler-webp-thumbnailer dependencies
  for main package</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1604318400">- Remove hard dependency to Thunar 1.8.2. We use "Suggests" instead
  to make sure the correct version is picked while keeping a soft
  dependency.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1605528000">- Update to version 0.3.1
  - New plugin for epub books, using libgepub thumbnailer plugin
  - Fix documentation URL
  - Add README.md and EXTRA_DIST
  - Add new icon needed for xfce4-about-dialog
  - Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1608724800">- Update to version 4.16.0
  - Remove GLIB_CHECK_VERSION IFDEFs which are obsolete after glib bump
  - bump glib (and gio, gthread, etc) minimum to 2.50.0
  - Adjust bug report URL
  - Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1634212800">- Add Recommends: ffmpegthumbnailer</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1667995200">- Update to version 4.16.1 (boo#1205210)
  * gst-thumbnailer: Add mime type check (gxo#xfce/tumbler#65)
  * desktop-thumbnailer: Guard against null path
  * Fix typo in gthread version (gxo#xfce/tumbler!14)
- Exclude RAW thumbnailer on Tumbleweed and Leap 15.5+ because
  tumbler does not yet support openraw 0.3
- Allow building against libgepub-0.7 (boo#1203644):
  * Adjust BuildRequires to work with libgepub-0.6 or libgepub-0.7.
  * Replace libgepub-0.6 occurences in configure script with
    libgepub-0.7 when libgepub 0.7 is present.</changelog>
</package>
<package pkgid="c4ea0c53576cb348836b8bd166b2456682af30d88a92bdf0cd6638efbd3355b1" name="libtumbler-1-0" arch="x86_64">
  <version epoch="0" ver="4.16.1" rel="bp154.3.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1511006400">- add explicit libtumbler versioned dependency to tumbler</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1523188800">- update to version 0.2.1
  - Handle 0 mtime threshold on Cleanup DBus method. This fixes
    running across all thumbnails that was causing very high I/O
    bandwidth usage when a file with a thumbnail gets deleted. (On
    dbus Cleanup method). bxo#9231</changelog>
  <changelog author="Stefan Seyfried &lt;seife+obs@b1-systems.com&gt;" date="1537012800">- update to version 0.2.3
  - Test sparse files only for regular files (bxo#14693).
  - Fix uninitialized variable (bxo#14688)
  - Added check to avoid sparse files, that cause high cpu and
    memory load. (bxo#12259).
  - Use hash table to avoid scanning xdg user path twice when
    searching for desktop thumbnailers.
  - Close desktop thumbnailers directory when done from it.
  - Accept network paths in ffmpeg thumbnailer plugin.
  - Use pkg-config to find FreeType &gt; 2.9.1.
  - Translation Updates</changelog>
  <changelog author="Vinzenz Vietzke &lt;vinz@vinzv.de&gt;" date="1558094400">- Update to version 0.2.4
  - Check for sparse video files only on plugin side
  - Set Max file sizes
  - Add Fujifilm RAF support (bxo#14522)
  - Add more media types for audio cover thumbnails (bxo#12041)
  - Fix a typo in desktop-thumbnailer-provider.c (bxo#14925)
  - Update URLs in README and configure.ac
  - Fix g_type_class_add_private is deprecated
  - Bump glib version
  - Translation Updates
- Added bcond to build with sources from git master branch
- Switched to %autosetup for simpler maintenance
- Switch urls to https://
- Cleaned up spec file</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1559476800">- Replace pkgconfig(liopenraw-gnome-1.0) BuildRequires with
  libopenraw-devel: the .pc file changed name between 0.0.x and
  0.1.x. Requiring the generic -devel name is easier than following
  upstreams namechanges.
- In case we build against libopenraw-gnome-0.1, update the build
  system to look for the right pc file using sed.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1559736000">- Added OBS service file to fetch git master sources when needed</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1561896000">- Update to version 0.2.5
  * Translation updates
- Removed unneeded BuildRoot</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1564315200">- Update to version 0.2.6
  * Translation updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1565611200">- Update to version 0.2.7
  * Translation updates
- Cleaned up spec file</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1565956800">- Fixed sources in spec file</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1576929600">- Updated to version 0.2.8
  * Fix thumbnail orientation (bxo#15011)
  * prepend $XDG_DATA_HOME/thumbnailers/ to thumbnailers directory
    (bxo#15858)
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1584014400">- Add support for WebP and custom folder thumbnails
  * Folder thumbnailer:
    https://docs.xfce.org/xfce/thunar/tumbler#customized_thumbnailer_for_folders
  * WebP thumbnailer: bxo#12528</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1596715200">- Update to version 0.2.9
  * This release addresses the issue described in gxo#xfce/tumbler#28
    and partially solved by the previous release 0.2.28.
    The issue now is completely solved by adding the correct
    orientation handling when fallback code for generating jpeg
    thumbnail takes place.</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1598616000">- Update to version 0.3.0
  * Fix jpeg thumbnail orientation when fallback code is taken place
    (gxo#xfce/tumbler#28).
  * Use AC_CONFIG_MACRO_DIRS instead of AC_CONFIG_MACRO_DIR
  * Fix GTimeVal deprecation
  * Drop support of GLib &lt; 2.32
  * Use guint32 for request handle and fix its further occurrences of 0
  * Implement Excludes paths in tumbler.rc
  * Translation Updates</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1604232000">- Weak dependencies: Use Supplements tag as recommended
  tumbler-folder-thumbnailer/tumbler-webp-thumbnailer dependencies
  for main package</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1604318400">- Remove hard dependency to Thunar 1.8.2. We use "Suggests" instead
  to make sure the correct version is picked while keeping a soft
  dependency.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1605528000">- Update to version 0.3.1
  - New plugin for epub books, using libgepub thumbnailer plugin
  - Fix documentation URL
  - Add README.md and EXTRA_DIST
  - Add new icon needed for xfce4-about-dialog
  - Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1608724800">- Update to version 4.16.0
  - Remove GLIB_CHECK_VERSION IFDEFs which are obsolete after glib bump
  - bump glib (and gio, gthread, etc) minimum to 2.50.0
  - Adjust bug report URL
  - Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1634212800">- Add Recommends: ffmpegthumbnailer</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1667995200">- Update to version 4.16.1 (boo#1205210)
  * gst-thumbnailer: Add mime type check (gxo#xfce/tumbler#65)
  * desktop-thumbnailer: Guard against null path
  * Fix typo in gthread version (gxo#xfce/tumbler!14)
- Exclude RAW thumbnailer on Tumbleweed and Leap 15.5+ because
  tumbler does not yet support openraw 0.3
- Allow building against libgepub-0.7 (boo#1203644):
  * Adjust BuildRequires to work with libgepub-0.6 or libgepub-0.7.
  * Replace libgepub-0.6 occurences in configure script with
    libgepub-0.7 when libgepub 0.7 is present.</changelog>
</package>
<package pkgid="81c4276425f9a01411d00301728a4680843ea524b6c13dcc784da99b3f94e105" name="libvarnishapi3" arch="aarch64">
  <version epoch="0" ver="7.1.0" rel="bp154.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1474804800">- Update to new upstream release 5.0.0
- The varnishd "-u NNN" option, which may be remaining in
  /etc/sysconfig/varnish, has been replaced with "-j unix,user=NNN".
  * Varnish 5.0 changes some (mostly) internal APIs and adds some
  major new features over Varnish 4.1.
  * 5.0 supports jumping from the active VCL's vcl_recv{} to another
  VCL via a VCL label.
  * Very Experimental HTTP/2 support
  * We have added to the "directors" VMOD? an overhauled version of
  a director which was available as an out-of-tree VMOD under the
  name VSLP for a couple of years. It is basically a better hash
  director which uses consistent hashing to provide improved
  stability of backend node selection when the configuration and/or
  health state of backends changes.
  * Hit-For-Pass is now actually Hit-For-Miss
  * We have made the ban lurker even more efficient by example of
  some real live situations with tens of thousands of bans using
  inefficient regular expressions.
  * The waitinglist logic for ESI subrequests now uses condition
  variables to trigger immediate continuation of ESI processing
  when an object being waited for becomes available.
  * Backend PROXY protocol requests are now supported through the
  .proxy_header attribute of the backend definition.
  * VCL files are now also being searched for in
  /usr/share/varnish/vcl if not found in /etc/varnish.
  * The basic device detection vcl is now bundled with varnish.</changelog>
  <changelog author="dimstar@opensuse.org" date="1494936000">- BuildRequire python3-docutils instead of python-docutils.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1498219200">- Update to version 5.1.2:
  * Fix an endless loop in Backend Polling (#2295)
  * Fix a Chunked bug in tight workspaces (#2207, #2275)
  * Fix a bug relating to req.body when on waitinglist (#2266)
  * Handle EPIPE on broken TCP connections (#2267)
  * Work around the x86 arch's turbo-double FP format in parameter
    setup code. (#1875)
  * Fix race related to backend probe with proxy header (#2278)
  * Keep VCL temperature consistent between mgt/worker also when
    worker protests.
  * A lot of HTTP/2 fixes.
- Changes introduced by version 5.1.1:
  * Fix bug introduced by stubborn old bugger right before release
    5.1.0 was cut.
- Changes introduced by version 5.1.0:
  * Added varnishd command-line options -I, -x and -?, and
    tightened restrictions on permitted combinations of options.
  * More progress on support for HTTP/2.
  * Add ``return(fail)`` to almost all VCL subroutines.
  * Restored the old hit-for-pass, invoked with
    ``return(pass(DURATION))`` from
    ``vcl_backend_response``. hit-for-miss remains the default.
    Added the cache_hitmiss stat, and cache_hitpass only counts the
    new/old hit-for-pass cases. Restored HitPass to the Varnish
    log, and added HitMiss. Added the HFP prefix to TTL log entries
    to log a hit-for-pass duration.
  * Rolled back the fix for #1206. Client delivery decides solely
    whether to send a 304 client response, based on client request
    and response headers.
  * Added vtest.sh.
  * Added vxid as a lefthand side for VSL queries.
  * Added the setenv and write_body commands for Varnish test cases
    (VTCs). err_shell is deprecated. Also added the operators
  - cliexpect, -match and -hdrlen, and -reason replaces -msg.
    Added the ${bad_backend} macro.
  * varnishtest can be stopped with the TERM, INT and KILL signals,
    but not with HUP.
  * The fallback director has now an extra, optional parameter to
    keep using the current backend until it falls sick.
  * VMOD shared libraries are now copied to the workdir, to avoid
    problems when VMODs are updated via packaging systems.
  * Bump the VRT version to 6.0.
  * Export more symbols from libvarnishapi.so.
  * The size of the VSL log is limited to 4G-1b, placing upper
    bounds on the -l option and the vsl_space and vsm_space
    parameters.
  * Added parameters clock_step, thread_pool_reserve and
    ban_cutoff.
  * Parameters vcl_dir and vmod_dir are deprecated, use vcl_path
    and vmod_path instead.
  * All parameters are defined, even on platforms that don't
    support them. An unsupported parameter is documented as such in
    param.show. Setting such a parameter is not an error, but has
    no effect.
  * Clarified the interpretations of the + and - operators in VCL
    with operands of the various data types.
  * DURATION types may be used in boolean contexts.
  * INT, DURATION and REAL values can now be negative.
  * Response codes 1000 or greater may now be set in VCL
    internally. resp.status is delivered modulo 1000 in client
    responses.
  * IP addresses can be compared for equality in VCL.
  * Introduce the STEVEDORE data type, and the objects
    storage.SNAME in VCL. Added req.storage and beresp.storage;
    beresp.storage_hint is deprecated.
  * Retired the umem stevedore.
  * req.ttl is deprecated.
  * Added std.getenv() and std.late_100_continue().
  * The fetch_failed stat is incremented for any kind of fetch
    failure.
  * Added the stats n_test_gunzip and
    bans_lurker_obj_killed_cutoff.
  * Clarified the meanings of the %r, %{X}i and %{X}o formatters in
    varnishncsa.
- Add varnish-5.1.2-add-fallthrough-comments.patch to fix build
  with GCC 7 (boo#1041259).</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="jengelh@inai.de" date="1521460800">- Update to new upstream release 6.0.0
  * Added support for Unix Domain Sockets, both for clients and
    for backend servers. This brings a new level of the VCL
    language, version 4.1.
  * Always use HTTP/1.1 on backend connections for pass fetch.</changelog>
  <changelog author="jengelh@inai.de" date="1525262400">- Put %fillup back into %post</changelog>
  <changelog author="Samu Voutilainen &lt;smar@smar.fi&gt;" date="1553688000">- Updated to 6.2.0
  * Added a thread pool watchdog which will restart the worker
    process if scheduling tasks onto worker threads appears
    stuck. The new parameter "thread_pool_watchdog" configures
    it.
- Disabled error for clobbering, which caused bogus
  error in varnishtest</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566820800">- Add uninit.patch.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1567598400">- Update to release 6.2.1
  * Bugfix for CVE-2019-15892 [boo#1149382]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1568721600">- Update to release 6.3.0
  * The Host: header is folded to lower-case in the builtin_vcl.
  * Improved performance of shared memory statistics counters.
  * Synthetic objects created from vcl_backend_error {} now
    replace existing stale objects as ordinary backend fetches
    would (for details see changes.rst)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1582632000">- Update to release 6.3.2
  * Fix a denial of service vulnerability when using the proxy
    protocol version 2.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1584446400">- Update to release 6.4.0
  * The MAIN.sess_drop counter is gone.
  * backend "none" was added for "no backend".
  * The hash algorithm of the hash director was changed, so
    backend selection will change once only when upgrading.
  * It is now possible for VMOD authors to customize the
    connection pooling of a dynamic backend.
  * For more, see changes.rst.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1591704000">- Update Git-Web repository link
- Set CFLAGS+=-fcommon.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1592913600">- Disable LTO, this randomly fails during link stage.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1600344000">- Update to release 6.5.0
  * `PRIV_TOP` is now thread-safe to support parallel ESI
    implementations.
  * varnishstat's JSON output format (-j option) has been changed.
  * Behavior for 304-type responses was changed not to update the
    Content-Encoding response header of the stored object.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1601640000">- Update to release 6.5.1
  * Bump the VRT_MAJOR_VERSION number defined in the vrt.h</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1625400000">- update to 6.6.0:
  * The ban_cutoff parameter now refers to the overall length of
    the ban list, including completed bans, where before only
    non-completed (?active?) bans were counted towards ban_cutoff.
  * Body bytes accounting has been fixed to always represent the
    number of body bytes moved on the wire, exclusive of
    protocol-specific overhead like HTTP/1 chunked encoding or
    HTTP/2 framing.
  * The connection close reason has been fixed to properly report
    SC_RESP_CLOSE where previously only SC_REQ_CLOSE was reported.
  * Unless the new validate_headers feature is disabled, all newly
    set headers are now validated to contain only characters
    allowed by RFC7230.
  * The filter_re, keep_re and get_re functions from the bundled
    cookie vmod have been changed to take the VCL_REGEX type. This
    implies that their regular expression arguments now need to be
    literal, not e.g. string.
  * The interface for private pointers in VMODs has been changed,
    the VRT backend interface has been changed, many filter
    (VDP/VFP) related signatures have been changed, and the
    stevedore API has been changed. (Details thereto, see online
    changelog.)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1628251200">- Update to release 6.6.1
  * Fix an HTTP/2.0 request smuggling vulnerability. [bnc#1188470]</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1638360000">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * varnish.service
  * varnishlog.service</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1652702400">- Update to release 7.1.0 [boo#1195188] [CVE-2022-23959]
  * VCL: It is now possible to assign a BLOB value to a BODY
    variable, in addition to STRING as before.
  * VMOD: New STRING strftime(TIME time, STRING format) function
    for UTC formatting.</changelog>
</package>
<package pkgid="fb842bfd388fef35bd8b826fce8133d2239e3726b441844dc72ad9e728a16cf5" name="libvarnishapi3" arch="i586">
  <version epoch="0" ver="7.1.0" rel="bp154.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1474804800">- Update to new upstream release 5.0.0
- The varnishd "-u NNN" option, which may be remaining in
  /etc/sysconfig/varnish, has been replaced with "-j unix,user=NNN".
  * Varnish 5.0 changes some (mostly) internal APIs and adds some
  major new features over Varnish 4.1.
  * 5.0 supports jumping from the active VCL's vcl_recv{} to another
  VCL via a VCL label.
  * Very Experimental HTTP/2 support
  * We have added to the "directors" VMOD? an overhauled version of
  a director which was available as an out-of-tree VMOD under the
  name VSLP for a couple of years. It is basically a better hash
  director which uses consistent hashing to provide improved
  stability of backend node selection when the configuration and/or
  health state of backends changes.
  * Hit-For-Pass is now actually Hit-For-Miss
  * We have made the ban lurker even more efficient by example of
  some real live situations with tens of thousands of bans using
  inefficient regular expressions.
  * The waitinglist logic for ESI subrequests now uses condition
  variables to trigger immediate continuation of ESI processing
  when an object being waited for becomes available.
  * Backend PROXY protocol requests are now supported through the
  .proxy_header attribute of the backend definition.
  * VCL files are now also being searched for in
  /usr/share/varnish/vcl if not found in /etc/varnish.
  * The basic device detection vcl is now bundled with varnish.</changelog>
  <changelog author="dimstar@opensuse.org" date="1494936000">- BuildRequire python3-docutils instead of python-docutils.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1498219200">- Update to version 5.1.2:
  * Fix an endless loop in Backend Polling (#2295)
  * Fix a Chunked bug in tight workspaces (#2207, #2275)
  * Fix a bug relating to req.body when on waitinglist (#2266)
  * Handle EPIPE on broken TCP connections (#2267)
  * Work around the x86 arch's turbo-double FP format in parameter
    setup code. (#1875)
  * Fix race related to backend probe with proxy header (#2278)
  * Keep VCL temperature consistent between mgt/worker also when
    worker protests.
  * A lot of HTTP/2 fixes.
- Changes introduced by version 5.1.1:
  * Fix bug introduced by stubborn old bugger right before release
    5.1.0 was cut.
- Changes introduced by version 5.1.0:
  * Added varnishd command-line options -I, -x and -?, and
    tightened restrictions on permitted combinations of options.
  * More progress on support for HTTP/2.
  * Add ``return(fail)`` to almost all VCL subroutines.
  * Restored the old hit-for-pass, invoked with
    ``return(pass(DURATION))`` from
    ``vcl_backend_response``. hit-for-miss remains the default.
    Added the cache_hitmiss stat, and cache_hitpass only counts the
    new/old hit-for-pass cases. Restored HitPass to the Varnish
    log, and added HitMiss. Added the HFP prefix to TTL log entries
    to log a hit-for-pass duration.
  * Rolled back the fix for #1206. Client delivery decides solely
    whether to send a 304 client response, based on client request
    and response headers.
  * Added vtest.sh.
  * Added vxid as a lefthand side for VSL queries.
  * Added the setenv and write_body commands for Varnish test cases
    (VTCs). err_shell is deprecated. Also added the operators
  - cliexpect, -match and -hdrlen, and -reason replaces -msg.
    Added the ${bad_backend} macro.
  * varnishtest can be stopped with the TERM, INT and KILL signals,
    but not with HUP.
  * The fallback director has now an extra, optional parameter to
    keep using the current backend until it falls sick.
  * VMOD shared libraries are now copied to the workdir, to avoid
    problems when VMODs are updated via packaging systems.
  * Bump the VRT version to 6.0.
  * Export more symbols from libvarnishapi.so.
  * The size of the VSL log is limited to 4G-1b, placing upper
    bounds on the -l option and the vsl_space and vsm_space
    parameters.
  * Added parameters clock_step, thread_pool_reserve and
    ban_cutoff.
  * Parameters vcl_dir and vmod_dir are deprecated, use vcl_path
    and vmod_path instead.
  * All parameters are defined, even on platforms that don't
    support them. An unsupported parameter is documented as such in
    param.show. Setting such a parameter is not an error, but has
    no effect.
  * Clarified the interpretations of the + and - operators in VCL
    with operands of the various data types.
  * DURATION types may be used in boolean contexts.
  * INT, DURATION and REAL values can now be negative.
  * Response codes 1000 or greater may now be set in VCL
    internally. resp.status is delivered modulo 1000 in client
    responses.
  * IP addresses can be compared for equality in VCL.
  * Introduce the STEVEDORE data type, and the objects
    storage.SNAME in VCL. Added req.storage and beresp.storage;
    beresp.storage_hint is deprecated.
  * Retired the umem stevedore.
  * req.ttl is deprecated.
  * Added std.getenv() and std.late_100_continue().
  * The fetch_failed stat is incremented for any kind of fetch
    failure.
  * Added the stats n_test_gunzip and
    bans_lurker_obj_killed_cutoff.
  * Clarified the meanings of the %r, %{X}i and %{X}o formatters in
    varnishncsa.
- Add varnish-5.1.2-add-fallthrough-comments.patch to fix build
  with GCC 7 (boo#1041259).</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="jengelh@inai.de" date="1521460800">- Update to new upstream release 6.0.0
  * Added support for Unix Domain Sockets, both for clients and
    for backend servers. This brings a new level of the VCL
    language, version 4.1.
  * Always use HTTP/1.1 on backend connections for pass fetch.</changelog>
  <changelog author="jengelh@inai.de" date="1525262400">- Put %fillup back into %post</changelog>
  <changelog author="Samu Voutilainen &lt;smar@smar.fi&gt;" date="1553688000">- Updated to 6.2.0
  * Added a thread pool watchdog which will restart the worker
    process if scheduling tasks onto worker threads appears
    stuck. The new parameter "thread_pool_watchdog" configures
    it.
- Disabled error for clobbering, which caused bogus
  error in varnishtest</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566820800">- Add uninit.patch.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1567598400">- Update to release 6.2.1
  * Bugfix for CVE-2019-15892 [boo#1149382]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1568721600">- Update to release 6.3.0
  * The Host: header is folded to lower-case in the builtin_vcl.
  * Improved performance of shared memory statistics counters.
  * Synthetic objects created from vcl_backend_error {} now
    replace existing stale objects as ordinary backend fetches
    would (for details see changes.rst)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1582632000">- Update to release 6.3.2
  * Fix a denial of service vulnerability when using the proxy
    protocol version 2.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1584446400">- Update to release 6.4.0
  * The MAIN.sess_drop counter is gone.
  * backend "none" was added for "no backend".
  * The hash algorithm of the hash director was changed, so
    backend selection will change once only when upgrading.
  * It is now possible for VMOD authors to customize the
    connection pooling of a dynamic backend.
  * For more, see changes.rst.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1591704000">- Update Git-Web repository link
- Set CFLAGS+=-fcommon.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1592913600">- Disable LTO, this randomly fails during link stage.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1600344000">- Update to release 6.5.0
  * `PRIV_TOP` is now thread-safe to support parallel ESI
    implementations.
  * varnishstat's JSON output format (-j option) has been changed.
  * Behavior for 304-type responses was changed not to update the
    Content-Encoding response header of the stored object.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1601640000">- Update to release 6.5.1
  * Bump the VRT_MAJOR_VERSION number defined in the vrt.h</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1625400000">- update to 6.6.0:
  * The ban_cutoff parameter now refers to the overall length of
    the ban list, including completed bans, where before only
    non-completed (?active?) bans were counted towards ban_cutoff.
  * Body bytes accounting has been fixed to always represent the
    number of body bytes moved on the wire, exclusive of
    protocol-specific overhead like HTTP/1 chunked encoding or
    HTTP/2 framing.
  * The connection close reason has been fixed to properly report
    SC_RESP_CLOSE where previously only SC_REQ_CLOSE was reported.
  * Unless the new validate_headers feature is disabled, all newly
    set headers are now validated to contain only characters
    allowed by RFC7230.
  * The filter_re, keep_re and get_re functions from the bundled
    cookie vmod have been changed to take the VCL_REGEX type. This
    implies that their regular expression arguments now need to be
    literal, not e.g. string.
  * The interface for private pointers in VMODs has been changed,
    the VRT backend interface has been changed, many filter
    (VDP/VFP) related signatures have been changed, and the
    stevedore API has been changed. (Details thereto, see online
    changelog.)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1628251200">- Update to release 6.6.1
  * Fix an HTTP/2.0 request smuggling vulnerability. [bnc#1188470]</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1638360000">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * varnish.service
  * varnishlog.service</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1652702400">- Update to release 7.1.0 [boo#1195188] [CVE-2022-23959]
  * VCL: It is now possible to assign a BLOB value to a BODY
    variable, in addition to STRING as before.
  * VMOD: New STRING strftime(TIME time, STRING format) function
    for UTC formatting.</changelog>
</package>
<package pkgid="ae38f7ec00584a861f37d6b5dcf0c2947e25056984e1ba0e8511418db20b684d" name="libvarnishapi3" arch="ppc64le">
  <version epoch="0" ver="7.1.0" rel="bp154.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1474804800">- Update to new upstream release 5.0.0
- The varnishd "-u NNN" option, which may be remaining in
  /etc/sysconfig/varnish, has been replaced with "-j unix,user=NNN".
  * Varnish 5.0 changes some (mostly) internal APIs and adds some
  major new features over Varnish 4.1.
  * 5.0 supports jumping from the active VCL's vcl_recv{} to another
  VCL via a VCL label.
  * Very Experimental HTTP/2 support
  * We have added to the "directors" VMOD? an overhauled version of
  a director which was available as an out-of-tree VMOD under the
  name VSLP for a couple of years. It is basically a better hash
  director which uses consistent hashing to provide improved
  stability of backend node selection when the configuration and/or
  health state of backends changes.
  * Hit-For-Pass is now actually Hit-For-Miss
  * We have made the ban lurker even more efficient by example of
  some real live situations with tens of thousands of bans using
  inefficient regular expressions.
  * The waitinglist logic for ESI subrequests now uses condition
  variables to trigger immediate continuation of ESI processing
  when an object being waited for becomes available.
  * Backend PROXY protocol requests are now supported through the
  .proxy_header attribute of the backend definition.
  * VCL files are now also being searched for in
  /usr/share/varnish/vcl if not found in /etc/varnish.
  * The basic device detection vcl is now bundled with varnish.</changelog>
  <changelog author="dimstar@opensuse.org" date="1494936000">- BuildRequire python3-docutils instead of python-docutils.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1498219200">- Update to version 5.1.2:
  * Fix an endless loop in Backend Polling (#2295)
  * Fix a Chunked bug in tight workspaces (#2207, #2275)
  * Fix a bug relating to req.body when on waitinglist (#2266)
  * Handle EPIPE on broken TCP connections (#2267)
  * Work around the x86 arch's turbo-double FP format in parameter
    setup code. (#1875)
  * Fix race related to backend probe with proxy header (#2278)
  * Keep VCL temperature consistent between mgt/worker also when
    worker protests.
  * A lot of HTTP/2 fixes.
- Changes introduced by version 5.1.1:
  * Fix bug introduced by stubborn old bugger right before release
    5.1.0 was cut.
- Changes introduced by version 5.1.0:
  * Added varnishd command-line options -I, -x and -?, and
    tightened restrictions on permitted combinations of options.
  * More progress on support for HTTP/2.
  * Add ``return(fail)`` to almost all VCL subroutines.
  * Restored the old hit-for-pass, invoked with
    ``return(pass(DURATION))`` from
    ``vcl_backend_response``. hit-for-miss remains the default.
    Added the cache_hitmiss stat, and cache_hitpass only counts the
    new/old hit-for-pass cases. Restored HitPass to the Varnish
    log, and added HitMiss. Added the HFP prefix to TTL log entries
    to log a hit-for-pass duration.
  * Rolled back the fix for #1206. Client delivery decides solely
    whether to send a 304 client response, based on client request
    and response headers.
  * Added vtest.sh.
  * Added vxid as a lefthand side for VSL queries.
  * Added the setenv and write_body commands for Varnish test cases
    (VTCs). err_shell is deprecated. Also added the operators
  - cliexpect, -match and -hdrlen, and -reason replaces -msg.
    Added the ${bad_backend} macro.
  * varnishtest can be stopped with the TERM, INT and KILL signals,
    but not with HUP.
  * The fallback director has now an extra, optional parameter to
    keep using the current backend until it falls sick.
  * VMOD shared libraries are now copied to the workdir, to avoid
    problems when VMODs are updated via packaging systems.
  * Bump the VRT version to 6.0.
  * Export more symbols from libvarnishapi.so.
  * The size of the VSL log is limited to 4G-1b, placing upper
    bounds on the -l option and the vsl_space and vsm_space
    parameters.
  * Added parameters clock_step, thread_pool_reserve and
    ban_cutoff.
  * Parameters vcl_dir and vmod_dir are deprecated, use vcl_path
    and vmod_path instead.
  * All parameters are defined, even on platforms that don't
    support them. An unsupported parameter is documented as such in
    param.show. Setting such a parameter is not an error, but has
    no effect.
  * Clarified the interpretations of the + and - operators in VCL
    with operands of the various data types.
  * DURATION types may be used in boolean contexts.
  * INT, DURATION and REAL values can now be negative.
  * Response codes 1000 or greater may now be set in VCL
    internally. resp.status is delivered modulo 1000 in client
    responses.
  * IP addresses can be compared for equality in VCL.
  * Introduce the STEVEDORE data type, and the objects
    storage.SNAME in VCL. Added req.storage and beresp.storage;
    beresp.storage_hint is deprecated.
  * Retired the umem stevedore.
  * req.ttl is deprecated.
  * Added std.getenv() and std.late_100_continue().
  * The fetch_failed stat is incremented for any kind of fetch
    failure.
  * Added the stats n_test_gunzip and
    bans_lurker_obj_killed_cutoff.
  * Clarified the meanings of the %r, %{X}i and %{X}o formatters in
    varnishncsa.
- Add varnish-5.1.2-add-fallthrough-comments.patch to fix build
  with GCC 7 (boo#1041259).</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="jengelh@inai.de" date="1521460800">- Update to new upstream release 6.0.0
  * Added support for Unix Domain Sockets, both for clients and
    for backend servers. This brings a new level of the VCL
    language, version 4.1.
  * Always use HTTP/1.1 on backend connections for pass fetch.</changelog>
  <changelog author="jengelh@inai.de" date="1525262400">- Put %fillup back into %post</changelog>
  <changelog author="Samu Voutilainen &lt;smar@smar.fi&gt;" date="1553688000">- Updated to 6.2.0
  * Added a thread pool watchdog which will restart the worker
    process if scheduling tasks onto worker threads appears
    stuck. The new parameter "thread_pool_watchdog" configures
    it.
- Disabled error for clobbering, which caused bogus
  error in varnishtest</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566820800">- Add uninit.patch.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1567598400">- Update to release 6.2.1
  * Bugfix for CVE-2019-15892 [boo#1149382]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1568721600">- Update to release 6.3.0
  * The Host: header is folded to lower-case in the builtin_vcl.
  * Improved performance of shared memory statistics counters.
  * Synthetic objects created from vcl_backend_error {} now
    replace existing stale objects as ordinary backend fetches
    would (for details see changes.rst)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1582632000">- Update to release 6.3.2
  * Fix a denial of service vulnerability when using the proxy
    protocol version 2.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1584446400">- Update to release 6.4.0
  * The MAIN.sess_drop counter is gone.
  * backend "none" was added for "no backend".
  * The hash algorithm of the hash director was changed, so
    backend selection will change once only when upgrading.
  * It is now possible for VMOD authors to customize the
    connection pooling of a dynamic backend.
  * For more, see changes.rst.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1591704000">- Update Git-Web repository link
- Set CFLAGS+=-fcommon.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1592913600">- Disable LTO, this randomly fails during link stage.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1600344000">- Update to release 6.5.0
  * `PRIV_TOP` is now thread-safe to support parallel ESI
    implementations.
  * varnishstat's JSON output format (-j option) has been changed.
  * Behavior for 304-type responses was changed not to update the
    Content-Encoding response header of the stored object.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1601640000">- Update to release 6.5.1
  * Bump the VRT_MAJOR_VERSION number defined in the vrt.h</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1625400000">- update to 6.6.0:
  * The ban_cutoff parameter now refers to the overall length of
    the ban list, including completed bans, where before only
    non-completed (?active?) bans were counted towards ban_cutoff.
  * Body bytes accounting has been fixed to always represent the
    number of body bytes moved on the wire, exclusive of
    protocol-specific overhead like HTTP/1 chunked encoding or
    HTTP/2 framing.
  * The connection close reason has been fixed to properly report
    SC_RESP_CLOSE where previously only SC_REQ_CLOSE was reported.
  * Unless the new validate_headers feature is disabled, all newly
    set headers are now validated to contain only characters
    allowed by RFC7230.
  * The filter_re, keep_re and get_re functions from the bundled
    cookie vmod have been changed to take the VCL_REGEX type. This
    implies that their regular expression arguments now need to be
    literal, not e.g. string.
  * The interface for private pointers in VMODs has been changed,
    the VRT backend interface has been changed, many filter
    (VDP/VFP) related signatures have been changed, and the
    stevedore API has been changed. (Details thereto, see online
    changelog.)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1628251200">- Update to release 6.6.1
  * Fix an HTTP/2.0 request smuggling vulnerability. [bnc#1188470]</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1638360000">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * varnish.service
  * varnishlog.service</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1652702400">- Update to release 7.1.0 [boo#1195188] [CVE-2022-23959]
  * VCL: It is now possible to assign a BLOB value to a BODY
    variable, in addition to STRING as before.
  * VMOD: New STRING strftime(TIME time, STRING format) function
    for UTC formatting.</changelog>
</package>
<package pkgid="e93f2cc9c4e9583f311cd1d53c67efb0a7c0d16b06ac61b0250e6629fd164486" name="libvarnishapi3" arch="s390x">
  <version epoch="0" ver="7.1.0" rel="bp154.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1474804800">- Update to new upstream release 5.0.0
- The varnishd "-u NNN" option, which may be remaining in
  /etc/sysconfig/varnish, has been replaced with "-j unix,user=NNN".
  * Varnish 5.0 changes some (mostly) internal APIs and adds some
  major new features over Varnish 4.1.
  * 5.0 supports jumping from the active VCL's vcl_recv{} to another
  VCL via a VCL label.
  * Very Experimental HTTP/2 support
  * We have added to the "directors" VMOD? an overhauled version of
  a director which was available as an out-of-tree VMOD under the
  name VSLP for a couple of years. It is basically a better hash
  director which uses consistent hashing to provide improved
  stability of backend node selection when the configuration and/or
  health state of backends changes.
  * Hit-For-Pass is now actually Hit-For-Miss
  * We have made the ban lurker even more efficient by example of
  some real live situations with tens of thousands of bans using
  inefficient regular expressions.
  * The waitinglist logic for ESI subrequests now uses condition
  variables to trigger immediate continuation of ESI processing
  when an object being waited for becomes available.
  * Backend PROXY protocol requests are now supported through the
  .proxy_header attribute of the backend definition.
  * VCL files are now also being searched for in
  /usr/share/varnish/vcl if not found in /etc/varnish.
  * The basic device detection vcl is now bundled with varnish.</changelog>
  <changelog author="dimstar@opensuse.org" date="1494936000">- BuildRequire python3-docutils instead of python-docutils.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1498219200">- Update to version 5.1.2:
  * Fix an endless loop in Backend Polling (#2295)
  * Fix a Chunked bug in tight workspaces (#2207, #2275)
  * Fix a bug relating to req.body when on waitinglist (#2266)
  * Handle EPIPE on broken TCP connections (#2267)
  * Work around the x86 arch's turbo-double FP format in parameter
    setup code. (#1875)
  * Fix race related to backend probe with proxy header (#2278)
  * Keep VCL temperature consistent between mgt/worker also when
    worker protests.
  * A lot of HTTP/2 fixes.
- Changes introduced by version 5.1.1:
  * Fix bug introduced by stubborn old bugger right before release
    5.1.0 was cut.
- Changes introduced by version 5.1.0:
  * Added varnishd command-line options -I, -x and -?, and
    tightened restrictions on permitted combinations of options.
  * More progress on support for HTTP/2.
  * Add ``return(fail)`` to almost all VCL subroutines.
  * Restored the old hit-for-pass, invoked with
    ``return(pass(DURATION))`` from
    ``vcl_backend_response``. hit-for-miss remains the default.
    Added the cache_hitmiss stat, and cache_hitpass only counts the
    new/old hit-for-pass cases. Restored HitPass to the Varnish
    log, and added HitMiss. Added the HFP prefix to TTL log entries
    to log a hit-for-pass duration.
  * Rolled back the fix for #1206. Client delivery decides solely
    whether to send a 304 client response, based on client request
    and response headers.
  * Added vtest.sh.
  * Added vxid as a lefthand side for VSL queries.
  * Added the setenv and write_body commands for Varnish test cases
    (VTCs). err_shell is deprecated. Also added the operators
  - cliexpect, -match and -hdrlen, and -reason replaces -msg.
    Added the ${bad_backend} macro.
  * varnishtest can be stopped with the TERM, INT and KILL signals,
    but not with HUP.
  * The fallback director has now an extra, optional parameter to
    keep using the current backend until it falls sick.
  * VMOD shared libraries are now copied to the workdir, to avoid
    problems when VMODs are updated via packaging systems.
  * Bump the VRT version to 6.0.
  * Export more symbols from libvarnishapi.so.
  * The size of the VSL log is limited to 4G-1b, placing upper
    bounds on the -l option and the vsl_space and vsm_space
    parameters.
  * Added parameters clock_step, thread_pool_reserve and
    ban_cutoff.
  * Parameters vcl_dir and vmod_dir are deprecated, use vcl_path
    and vmod_path instead.
  * All parameters are defined, even on platforms that don't
    support them. An unsupported parameter is documented as such in
    param.show. Setting such a parameter is not an error, but has
    no effect.
  * Clarified the interpretations of the + and - operators in VCL
    with operands of the various data types.
  * DURATION types may be used in boolean contexts.
  * INT, DURATION and REAL values can now be negative.
  * Response codes 1000 or greater may now be set in VCL
    internally. resp.status is delivered modulo 1000 in client
    responses.
  * IP addresses can be compared for equality in VCL.
  * Introduce the STEVEDORE data type, and the objects
    storage.SNAME in VCL. Added req.storage and beresp.storage;
    beresp.storage_hint is deprecated.
  * Retired the umem stevedore.
  * req.ttl is deprecated.
  * Added std.getenv() and std.late_100_continue().
  * The fetch_failed stat is incremented for any kind of fetch
    failure.
  * Added the stats n_test_gunzip and
    bans_lurker_obj_killed_cutoff.
  * Clarified the meanings of the %r, %{X}i and %{X}o formatters in
    varnishncsa.
- Add varnish-5.1.2-add-fallthrough-comments.patch to fix build
  with GCC 7 (boo#1041259).</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="jengelh@inai.de" date="1521460800">- Update to new upstream release 6.0.0
  * Added support for Unix Domain Sockets, both for clients and
    for backend servers. This brings a new level of the VCL
    language, version 4.1.
  * Always use HTTP/1.1 on backend connections for pass fetch.</changelog>
  <changelog author="jengelh@inai.de" date="1525262400">- Put %fillup back into %post</changelog>
  <changelog author="Samu Voutilainen &lt;smar@smar.fi&gt;" date="1553688000">- Updated to 6.2.0
  * Added a thread pool watchdog which will restart the worker
    process if scheduling tasks onto worker threads appears
    stuck. The new parameter "thread_pool_watchdog" configures
    it.
- Disabled error for clobbering, which caused bogus
  error in varnishtest</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566820800">- Add uninit.patch.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1567598400">- Update to release 6.2.1
  * Bugfix for CVE-2019-15892 [boo#1149382]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1568721600">- Update to release 6.3.0
  * The Host: header is folded to lower-case in the builtin_vcl.
  * Improved performance of shared memory statistics counters.
  * Synthetic objects created from vcl_backend_error {} now
    replace existing stale objects as ordinary backend fetches
    would (for details see changes.rst)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1582632000">- Update to release 6.3.2
  * Fix a denial of service vulnerability when using the proxy
    protocol version 2.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1584446400">- Update to release 6.4.0
  * The MAIN.sess_drop counter is gone.
  * backend "none" was added for "no backend".
  * The hash algorithm of the hash director was changed, so
    backend selection will change once only when upgrading.
  * It is now possible for VMOD authors to customize the
    connection pooling of a dynamic backend.
  * For more, see changes.rst.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1591704000">- Update Git-Web repository link
- Set CFLAGS+=-fcommon.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1592913600">- Disable LTO, this randomly fails during link stage.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1600344000">- Update to release 6.5.0
  * `PRIV_TOP` is now thread-safe to support parallel ESI
    implementations.
  * varnishstat's JSON output format (-j option) has been changed.
  * Behavior for 304-type responses was changed not to update the
    Content-Encoding response header of the stored object.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1601640000">- Update to release 6.5.1
  * Bump the VRT_MAJOR_VERSION number defined in the vrt.h</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1625400000">- update to 6.6.0:
  * The ban_cutoff parameter now refers to the overall length of
    the ban list, including completed bans, where before only
    non-completed (?active?) bans were counted towards ban_cutoff.
  * Body bytes accounting has been fixed to always represent the
    number of body bytes moved on the wire, exclusive of
    protocol-specific overhead like HTTP/1 chunked encoding or
    HTTP/2 framing.
  * The connection close reason has been fixed to properly report
    SC_RESP_CLOSE where previously only SC_REQ_CLOSE was reported.
  * Unless the new validate_headers feature is disabled, all newly
    set headers are now validated to contain only characters
    allowed by RFC7230.
  * The filter_re, keep_re and get_re functions from the bundled
    cookie vmod have been changed to take the VCL_REGEX type. This
    implies that their regular expression arguments now need to be
    literal, not e.g. string.
  * The interface for private pointers in VMODs has been changed,
    the VRT backend interface has been changed, many filter
    (VDP/VFP) related signatures have been changed, and the
    stevedore API has been changed. (Details thereto, see online
    changelog.)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1628251200">- Update to release 6.6.1
  * Fix an HTTP/2.0 request smuggling vulnerability. [bnc#1188470]</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1638360000">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * varnish.service
  * varnishlog.service</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1652702400">- Update to release 7.1.0 [boo#1195188] [CVE-2022-23959]
  * VCL: It is now possible to assign a BLOB value to a BODY
    variable, in addition to STRING as before.
  * VMOD: New STRING strftime(TIME time, STRING format) function
    for UTC formatting.</changelog>
</package>
<package pkgid="d174d96afe45f54e82a14609419c0d8773f49e6581d0a2feb8f7b98e8ab3fc99" name="libvarnishapi3" arch="x86_64">
  <version epoch="0" ver="7.1.0" rel="bp154.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1474804800">- Update to new upstream release 5.0.0
- The varnishd "-u NNN" option, which may be remaining in
  /etc/sysconfig/varnish, has been replaced with "-j unix,user=NNN".
  * Varnish 5.0 changes some (mostly) internal APIs and adds some
  major new features over Varnish 4.1.
  * 5.0 supports jumping from the active VCL's vcl_recv{} to another
  VCL via a VCL label.
  * Very Experimental HTTP/2 support
  * We have added to the "directors" VMOD? an overhauled version of
  a director which was available as an out-of-tree VMOD under the
  name VSLP for a couple of years. It is basically a better hash
  director which uses consistent hashing to provide improved
  stability of backend node selection when the configuration and/or
  health state of backends changes.
  * Hit-For-Pass is now actually Hit-For-Miss
  * We have made the ban lurker even more efficient by example of
  some real live situations with tens of thousands of bans using
  inefficient regular expressions.
  * The waitinglist logic for ESI subrequests now uses condition
  variables to trigger immediate continuation of ESI processing
  when an object being waited for becomes available.
  * Backend PROXY protocol requests are now supported through the
  .proxy_header attribute of the backend definition.
  * VCL files are now also being searched for in
  /usr/share/varnish/vcl if not found in /etc/varnish.
  * The basic device detection vcl is now bundled with varnish.</changelog>
  <changelog author="dimstar@opensuse.org" date="1494936000">- BuildRequire python3-docutils instead of python-docutils.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1498219200">- Update to version 5.1.2:
  * Fix an endless loop in Backend Polling (#2295)
  * Fix a Chunked bug in tight workspaces (#2207, #2275)
  * Fix a bug relating to req.body when on waitinglist (#2266)
  * Handle EPIPE on broken TCP connections (#2267)
  * Work around the x86 arch's turbo-double FP format in parameter
    setup code. (#1875)
  * Fix race related to backend probe with proxy header (#2278)
  * Keep VCL temperature consistent between mgt/worker also when
    worker protests.
  * A lot of HTTP/2 fixes.
- Changes introduced by version 5.1.1:
  * Fix bug introduced by stubborn old bugger right before release
    5.1.0 was cut.
- Changes introduced by version 5.1.0:
  * Added varnishd command-line options -I, -x and -?, and
    tightened restrictions on permitted combinations of options.
  * More progress on support for HTTP/2.
  * Add ``return(fail)`` to almost all VCL subroutines.
  * Restored the old hit-for-pass, invoked with
    ``return(pass(DURATION))`` from
    ``vcl_backend_response``. hit-for-miss remains the default.
    Added the cache_hitmiss stat, and cache_hitpass only counts the
    new/old hit-for-pass cases. Restored HitPass to the Varnish
    log, and added HitMiss. Added the HFP prefix to TTL log entries
    to log a hit-for-pass duration.
  * Rolled back the fix for #1206. Client delivery decides solely
    whether to send a 304 client response, based on client request
    and response headers.
  * Added vtest.sh.
  * Added vxid as a lefthand side for VSL queries.
  * Added the setenv and write_body commands for Varnish test cases
    (VTCs). err_shell is deprecated. Also added the operators
  - cliexpect, -match and -hdrlen, and -reason replaces -msg.
    Added the ${bad_backend} macro.
  * varnishtest can be stopped with the TERM, INT and KILL signals,
    but not with HUP.
  * The fallback director has now an extra, optional parameter to
    keep using the current backend until it falls sick.
  * VMOD shared libraries are now copied to the workdir, to avoid
    problems when VMODs are updated via packaging systems.
  * Bump the VRT version to 6.0.
  * Export more symbols from libvarnishapi.so.
  * The size of the VSL log is limited to 4G-1b, placing upper
    bounds on the -l option and the vsl_space and vsm_space
    parameters.
  * Added parameters clock_step, thread_pool_reserve and
    ban_cutoff.
  * Parameters vcl_dir and vmod_dir are deprecated, use vcl_path
    and vmod_path instead.
  * All parameters are defined, even on platforms that don't
    support them. An unsupported parameter is documented as such in
    param.show. Setting such a parameter is not an error, but has
    no effect.
  * Clarified the interpretations of the + and - operators in VCL
    with operands of the various data types.
  * DURATION types may be used in boolean contexts.
  * INT, DURATION and REAL values can now be negative.
  * Response codes 1000 or greater may now be set in VCL
    internally. resp.status is delivered modulo 1000 in client
    responses.
  * IP addresses can be compared for equality in VCL.
  * Introduce the STEVEDORE data type, and the objects
    storage.SNAME in VCL. Added req.storage and beresp.storage;
    beresp.storage_hint is deprecated.
  * Retired the umem stevedore.
  * req.ttl is deprecated.
  * Added std.getenv() and std.late_100_continue().
  * The fetch_failed stat is incremented for any kind of fetch
    failure.
  * Added the stats n_test_gunzip and
    bans_lurker_obj_killed_cutoff.
  * Clarified the meanings of the %r, %{X}i and %{X}o formatters in
    varnishncsa.
- Add varnish-5.1.2-add-fallthrough-comments.patch to fix build
  with GCC 7 (boo#1041259).</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="jengelh@inai.de" date="1521460800">- Update to new upstream release 6.0.0
  * Added support for Unix Domain Sockets, both for clients and
    for backend servers. This brings a new level of the VCL
    language, version 4.1.
  * Always use HTTP/1.1 on backend connections for pass fetch.</changelog>
  <changelog author="jengelh@inai.de" date="1525262400">- Put %fillup back into %post</changelog>
  <changelog author="Samu Voutilainen &lt;smar@smar.fi&gt;" date="1553688000">- Updated to 6.2.0
  * Added a thread pool watchdog which will restart the worker
    process if scheduling tasks onto worker threads appears
    stuck. The new parameter "thread_pool_watchdog" configures
    it.
- Disabled error for clobbering, which caused bogus
  error in varnishtest</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566820800">- Add uninit.patch.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1567598400">- Update to release 6.2.1
  * Bugfix for CVE-2019-15892 [boo#1149382]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1568721600">- Update to release 6.3.0
  * The Host: header is folded to lower-case in the builtin_vcl.
  * Improved performance of shared memory statistics counters.
  * Synthetic objects created from vcl_backend_error {} now
    replace existing stale objects as ordinary backend fetches
    would (for details see changes.rst)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1582632000">- Update to release 6.3.2
  * Fix a denial of service vulnerability when using the proxy
    protocol version 2.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1584446400">- Update to release 6.4.0
  * The MAIN.sess_drop counter is gone.
  * backend "none" was added for "no backend".
  * The hash algorithm of the hash director was changed, so
    backend selection will change once only when upgrading.
  * It is now possible for VMOD authors to customize the
    connection pooling of a dynamic backend.
  * For more, see changes.rst.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1591704000">- Update Git-Web repository link
- Set CFLAGS+=-fcommon.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1592913600">- Disable LTO, this randomly fails during link stage.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1600344000">- Update to release 6.5.0
  * `PRIV_TOP` is now thread-safe to support parallel ESI
    implementations.
  * varnishstat's JSON output format (-j option) has been changed.
  * Behavior for 304-type responses was changed not to update the
    Content-Encoding response header of the stored object.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1601640000">- Update to release 6.5.1
  * Bump the VRT_MAJOR_VERSION number defined in the vrt.h</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1625400000">- update to 6.6.0:
  * The ban_cutoff parameter now refers to the overall length of
    the ban list, including completed bans, where before only
    non-completed (?active?) bans were counted towards ban_cutoff.
  * Body bytes accounting has been fixed to always represent the
    number of body bytes moved on the wire, exclusive of
    protocol-specific overhead like HTTP/1 chunked encoding or
    HTTP/2 framing.
  * The connection close reason has been fixed to properly report
    SC_RESP_CLOSE where previously only SC_REQ_CLOSE was reported.
  * Unless the new validate_headers feature is disabled, all newly
    set headers are now validated to contain only characters
    allowed by RFC7230.
  * The filter_re, keep_re and get_re functions from the bundled
    cookie vmod have been changed to take the VCL_REGEX type. This
    implies that their regular expression arguments now need to be
    literal, not e.g. string.
  * The interface for private pointers in VMODs has been changed,
    the VRT backend interface has been changed, many filter
    (VDP/VFP) related signatures have been changed, and the
    stevedore API has been changed. (Details thereto, see online
    changelog.)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1628251200">- Update to release 6.6.1
  * Fix an HTTP/2.0 request smuggling vulnerability. [bnc#1188470]</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1638360000">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * varnish.service
  * varnishlog.service</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1652702400">- Update to release 7.1.0 [boo#1195188] [CVE-2022-23959]
  * VCL: It is now possible to assign a BLOB value to a BODY
    variable, in addition to STRING as before.
  * VMOD: New STRING strftime(TIME time, STRING format) function
    for UTC formatting.</changelog>
</package>
<package pkgid="4d4a9b459e6ffd0a4c284c82123ea38718f1f159e7ea5b980d5477e26a290e60" name="libvarnishapi3" arch="aarch64">
  <version epoch="0" ver="7.1.1" rel="bp154.2.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1494936000">- BuildRequire python3-docutils instead of python-docutils.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1498219200">- Update to version 5.1.2:
  * Fix an endless loop in Backend Polling (#2295)
  * Fix a Chunked bug in tight workspaces (#2207, #2275)
  * Fix a bug relating to req.body when on waitinglist (#2266)
  * Handle EPIPE on broken TCP connections (#2267)
  * Work around the x86 arch's turbo-double FP format in parameter
    setup code. (#1875)
  * Fix race related to backend probe with proxy header (#2278)
  * Keep VCL temperature consistent between mgt/worker also when
    worker protests.
  * A lot of HTTP/2 fixes.
- Changes introduced by version 5.1.1:
  * Fix bug introduced by stubborn old bugger right before release
    5.1.0 was cut.
- Changes introduced by version 5.1.0:
  * Added varnishd command-line options -I, -x and -?, and
    tightened restrictions on permitted combinations of options.
  * More progress on support for HTTP/2.
  * Add ``return(fail)`` to almost all VCL subroutines.
  * Restored the old hit-for-pass, invoked with
    ``return(pass(DURATION))`` from
    ``vcl_backend_response``. hit-for-miss remains the default.
    Added the cache_hitmiss stat, and cache_hitpass only counts the
    new/old hit-for-pass cases. Restored HitPass to the Varnish
    log, and added HitMiss. Added the HFP prefix to TTL log entries
    to log a hit-for-pass duration.
  * Rolled back the fix for #1206. Client delivery decides solely
    whether to send a 304 client response, based on client request
    and response headers.
  * Added vtest.sh.
  * Added vxid as a lefthand side for VSL queries.
  * Added the setenv and write_body commands for Varnish test cases
    (VTCs). err_shell is deprecated. Also added the operators
  - cliexpect, -match and -hdrlen, and -reason replaces -msg.
    Added the ${bad_backend} macro.
  * varnishtest can be stopped with the TERM, INT and KILL signals,
    but not with HUP.
  * The fallback director has now an extra, optional parameter to
    keep using the current backend until it falls sick.
  * VMOD shared libraries are now copied to the workdir, to avoid
    problems when VMODs are updated via packaging systems.
  * Bump the VRT version to 6.0.
  * Export more symbols from libvarnishapi.so.
  * The size of the VSL log is limited to 4G-1b, placing upper
    bounds on the -l option and the vsl_space and vsm_space
    parameters.
  * Added parameters clock_step, thread_pool_reserve and
    ban_cutoff.
  * Parameters vcl_dir and vmod_dir are deprecated, use vcl_path
    and vmod_path instead.
  * All parameters are defined, even on platforms that don't
    support them. An unsupported parameter is documented as such in
    param.show. Setting such a parameter is not an error, but has
    no effect.
  * Clarified the interpretations of the + and - operators in VCL
    with operands of the various data types.
  * DURATION types may be used in boolean contexts.
  * INT, DURATION and REAL values can now be negative.
  * Response codes 1000 or greater may now be set in VCL
    internally. resp.status is delivered modulo 1000 in client
    responses.
  * IP addresses can be compared for equality in VCL.
  * Introduce the STEVEDORE data type, and the objects
    storage.SNAME in VCL. Added req.storage and beresp.storage;
    beresp.storage_hint is deprecated.
  * Retired the umem stevedore.
  * req.ttl is deprecated.
  * Added std.getenv() and std.late_100_continue().
  * The fetch_failed stat is incremented for any kind of fetch
    failure.
  * Added the stats n_test_gunzip and
    bans_lurker_obj_killed_cutoff.
  * Clarified the meanings of the %r, %{X}i and %{X}o formatters in
    varnishncsa.
- Add varnish-5.1.2-add-fallthrough-comments.patch to fix build
  with GCC 7 (boo#1041259).</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="jengelh@inai.de" date="1521460800">- Update to new upstream release 6.0.0
  * Added support for Unix Domain Sockets, both for clients and
    for backend servers. This brings a new level of the VCL
    language, version 4.1.
  * Always use HTTP/1.1 on backend connections for pass fetch.</changelog>
  <changelog author="jengelh@inai.de" date="1525262400">- Put %fillup back into %post</changelog>
  <changelog author="Samu Voutilainen &lt;smar@smar.fi&gt;" date="1553688000">- Updated to 6.2.0
  * Added a thread pool watchdog which will restart the worker
    process if scheduling tasks onto worker threads appears
    stuck. The new parameter "thread_pool_watchdog" configures
    it.
- Disabled error for clobbering, which caused bogus
  error in varnishtest</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566820800">- Add uninit.patch.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1567598400">- Update to release 6.2.1
  * Bugfix for CVE-2019-15892 [boo#1149382]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1568721600">- Update to release 6.3.0
  * The Host: header is folded to lower-case in the builtin_vcl.
  * Improved performance of shared memory statistics counters.
  * Synthetic objects created from vcl_backend_error {} now
    replace existing stale objects as ordinary backend fetches
    would (for details see changes.rst)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1582632000">- Update to release 6.3.2
  * Fix a denial of service vulnerability when using the proxy
    protocol version 2.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1584446400">- Update to release 6.4.0
  * The MAIN.sess_drop counter is gone.
  * backend "none" was added for "no backend".
  * The hash algorithm of the hash director was changed, so
    backend selection will change once only when upgrading.
  * It is now possible for VMOD authors to customize the
    connection pooling of a dynamic backend.
  * For more, see changes.rst.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1591704000">- Update Git-Web repository link
- Set CFLAGS+=-fcommon.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1592913600">- Disable LTO, this randomly fails during link stage.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1600344000">- Update to release 6.5.0
  * `PRIV_TOP` is now thread-safe to support parallel ESI
    implementations.
  * varnishstat's JSON output format (-j option) has been changed.
  * Behavior for 304-type responses was changed not to update the
    Content-Encoding response header of the stored object.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1601640000">- Update to release 6.5.1
  * Bump the VRT_MAJOR_VERSION number defined in the vrt.h</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1625400000">- update to 6.6.0:
  * The ban_cutoff parameter now refers to the overall length of
    the ban list, including completed bans, where before only
    non-completed (?active?) bans were counted towards ban_cutoff.
  * Body bytes accounting has been fixed to always represent the
    number of body bytes moved on the wire, exclusive of
    protocol-specific overhead like HTTP/1 chunked encoding or
    HTTP/2 framing.
  * The connection close reason has been fixed to properly report
    SC_RESP_CLOSE where previously only SC_REQ_CLOSE was reported.
  * Unless the new validate_headers feature is disabled, all newly
    set headers are now validated to contain only characters
    allowed by RFC7230.
  * The filter_re, keep_re and get_re functions from the bundled
    cookie vmod have been changed to take the VCL_REGEX type. This
    implies that their regular expression arguments now need to be
    literal, not e.g. string.
  * The interface for private pointers in VMODs has been changed,
    the VRT backend interface has been changed, many filter
    (VDP/VFP) related signatures have been changed, and the
    stevedore API has been changed. (Details thereto, see online
    changelog.)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1628251200">- Update to release 6.6.1
  * Fix an HTTP/2.0 request smuggling vulnerability. [bnc#1188470]</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1638360000">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * varnish.service
  * varnishlog.service</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1652702400">- Update to release 7.1.0 [boo#1195188] [CVE-2022-23959]
  * VCL: It is now possible to assign a BLOB value to a BODY
    variable, in addition to STRING as before.
  * VMOD: New STRING strftime(TIME time, STRING format) function
    for UTC formatting.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1660305600">- Update to release 7.1.1 [boo#1202350] [CVE-2022-38150]
  * Resolve a denial of service attack involving reason phrases.</changelog>
</package>
<package pkgid="c9670427161d3013fb5002ad55c826338d2d4d43372ca4a97eb37d817b3b4a09" name="libvarnishapi3" arch="i586">
  <version epoch="0" ver="7.1.1" rel="bp154.2.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1494936000">- BuildRequire python3-docutils instead of python-docutils.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1498219200">- Update to version 5.1.2:
  * Fix an endless loop in Backend Polling (#2295)
  * Fix a Chunked bug in tight workspaces (#2207, #2275)
  * Fix a bug relating to req.body when on waitinglist (#2266)
  * Handle EPIPE on broken TCP connections (#2267)
  * Work around the x86 arch's turbo-double FP format in parameter
    setup code. (#1875)
  * Fix race related to backend probe with proxy header (#2278)
  * Keep VCL temperature consistent between mgt/worker also when
    worker protests.
  * A lot of HTTP/2 fixes.
- Changes introduced by version 5.1.1:
  * Fix bug introduced by stubborn old bugger right before release
    5.1.0 was cut.
- Changes introduced by version 5.1.0:
  * Added varnishd command-line options -I, -x and -?, and
    tightened restrictions on permitted combinations of options.
  * More progress on support for HTTP/2.
  * Add ``return(fail)`` to almost all VCL subroutines.
  * Restored the old hit-for-pass, invoked with
    ``return(pass(DURATION))`` from
    ``vcl_backend_response``. hit-for-miss remains the default.
    Added the cache_hitmiss stat, and cache_hitpass only counts the
    new/old hit-for-pass cases. Restored HitPass to the Varnish
    log, and added HitMiss. Added the HFP prefix to TTL log entries
    to log a hit-for-pass duration.
  * Rolled back the fix for #1206. Client delivery decides solely
    whether to send a 304 client response, based on client request
    and response headers.
  * Added vtest.sh.
  * Added vxid as a lefthand side for VSL queries.
  * Added the setenv and write_body commands for Varnish test cases
    (VTCs). err_shell is deprecated. Also added the operators
  - cliexpect, -match and -hdrlen, and -reason replaces -msg.
    Added the ${bad_backend} macro.
  * varnishtest can be stopped with the TERM, INT and KILL signals,
    but not with HUP.
  * The fallback director has now an extra, optional parameter to
    keep using the current backend until it falls sick.
  * VMOD shared libraries are now copied to the workdir, to avoid
    problems when VMODs are updated via packaging systems.
  * Bump the VRT version to 6.0.
  * Export more symbols from libvarnishapi.so.
  * The size of the VSL log is limited to 4G-1b, placing upper
    bounds on the -l option and the vsl_space and vsm_space
    parameters.
  * Added parameters clock_step, thread_pool_reserve and
    ban_cutoff.
  * Parameters vcl_dir and vmod_dir are deprecated, use vcl_path
    and vmod_path instead.
  * All parameters are defined, even on platforms that don't
    support them. An unsupported parameter is documented as such in
    param.show. Setting such a parameter is not an error, but has
    no effect.
  * Clarified the interpretations of the + and - operators in VCL
    with operands of the various data types.
  * DURATION types may be used in boolean contexts.
  * INT, DURATION and REAL values can now be negative.
  * Response codes 1000 or greater may now be set in VCL
    internally. resp.status is delivered modulo 1000 in client
    responses.
  * IP addresses can be compared for equality in VCL.
  * Introduce the STEVEDORE data type, and the objects
    storage.SNAME in VCL. Added req.storage and beresp.storage;
    beresp.storage_hint is deprecated.
  * Retired the umem stevedore.
  * req.ttl is deprecated.
  * Added std.getenv() and std.late_100_continue().
  * The fetch_failed stat is incremented for any kind of fetch
    failure.
  * Added the stats n_test_gunzip and
    bans_lurker_obj_killed_cutoff.
  * Clarified the meanings of the %r, %{X}i and %{X}o formatters in
    varnishncsa.
- Add varnish-5.1.2-add-fallthrough-comments.patch to fix build
  with GCC 7 (boo#1041259).</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="jengelh@inai.de" date="1521460800">- Update to new upstream release 6.0.0
  * Added support for Unix Domain Sockets, both for clients and
    for backend servers. This brings a new level of the VCL
    language, version 4.1.
  * Always use HTTP/1.1 on backend connections for pass fetch.</changelog>
  <changelog author="jengelh@inai.de" date="1525262400">- Put %fillup back into %post</changelog>
  <changelog author="Samu Voutilainen &lt;smar@smar.fi&gt;" date="1553688000">- Updated to 6.2.0
  * Added a thread pool watchdog which will restart the worker
    process if scheduling tasks onto worker threads appears
    stuck. The new parameter "thread_pool_watchdog" configures
    it.
- Disabled error for clobbering, which caused bogus
  error in varnishtest</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566820800">- Add uninit.patch.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1567598400">- Update to release 6.2.1
  * Bugfix for CVE-2019-15892 [boo#1149382]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1568721600">- Update to release 6.3.0
  * The Host: header is folded to lower-case in the builtin_vcl.
  * Improved performance of shared memory statistics counters.
  * Synthetic objects created from vcl_backend_error {} now
    replace existing stale objects as ordinary backend fetches
    would (for details see changes.rst)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1582632000">- Update to release 6.3.2
  * Fix a denial of service vulnerability when using the proxy
    protocol version 2.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1584446400">- Update to release 6.4.0
  * The MAIN.sess_drop counter is gone.
  * backend "none" was added for "no backend".
  * The hash algorithm of the hash director was changed, so
    backend selection will change once only when upgrading.
  * It is now possible for VMOD authors to customize the
    connection pooling of a dynamic backend.
  * For more, see changes.rst.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1591704000">- Update Git-Web repository link
- Set CFLAGS+=-fcommon.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1592913600">- Disable LTO, this randomly fails during link stage.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1600344000">- Update to release 6.5.0
  * `PRIV_TOP` is now thread-safe to support parallel ESI
    implementations.
  * varnishstat's JSON output format (-j option) has been changed.
  * Behavior for 304-type responses was changed not to update the
    Content-Encoding response header of the stored object.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1601640000">- Update to release 6.5.1
  * Bump the VRT_MAJOR_VERSION number defined in the vrt.h</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1625400000">- update to 6.6.0:
  * The ban_cutoff parameter now refers to the overall length of
    the ban list, including completed bans, where before only
    non-completed (?active?) bans were counted towards ban_cutoff.
  * Body bytes accounting has been fixed to always represent the
    number of body bytes moved on the wire, exclusive of
    protocol-specific overhead like HTTP/1 chunked encoding or
    HTTP/2 framing.
  * The connection close reason has been fixed to properly report
    SC_RESP_CLOSE where previously only SC_REQ_CLOSE was reported.
  * Unless the new validate_headers feature is disabled, all newly
    set headers are now validated to contain only characters
    allowed by RFC7230.
  * The filter_re, keep_re and get_re functions from the bundled
    cookie vmod have been changed to take the VCL_REGEX type. This
    implies that their regular expression arguments now need to be
    literal, not e.g. string.
  * The interface for private pointers in VMODs has been changed,
    the VRT backend interface has been changed, many filter
    (VDP/VFP) related signatures have been changed, and the
    stevedore API has been changed. (Details thereto, see online
    changelog.)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1628251200">- Update to release 6.6.1
  * Fix an HTTP/2.0 request smuggling vulnerability. [bnc#1188470]</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1638360000">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * varnish.service
  * varnishlog.service</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1652702400">- Update to release 7.1.0 [boo#1195188] [CVE-2022-23959]
  * VCL: It is now possible to assign a BLOB value to a BODY
    variable, in addition to STRING as before.
  * VMOD: New STRING strftime(TIME time, STRING format) function
    for UTC formatting.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1660305600">- Update to release 7.1.1 [boo#1202350] [CVE-2022-38150]
  * Resolve a denial of service attack involving reason phrases.</changelog>
</package>
<package pkgid="b519d8571be24f3cd1ccde18a4e45bcfe44886cde9080917098edd7a020d526c" name="libvarnishapi3" arch="ppc64le">
  <version epoch="0" ver="7.1.1" rel="bp154.2.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1494936000">- BuildRequire python3-docutils instead of python-docutils.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1498219200">- Update to version 5.1.2:
  * Fix an endless loop in Backend Polling (#2295)
  * Fix a Chunked bug in tight workspaces (#2207, #2275)
  * Fix a bug relating to req.body when on waitinglist (#2266)
  * Handle EPIPE on broken TCP connections (#2267)
  * Work around the x86 arch's turbo-double FP format in parameter
    setup code. (#1875)
  * Fix race related to backend probe with proxy header (#2278)
  * Keep VCL temperature consistent between mgt/worker also when
    worker protests.
  * A lot of HTTP/2 fixes.
- Changes introduced by version 5.1.1:
  * Fix bug introduced by stubborn old bugger right before release
    5.1.0 was cut.
- Changes introduced by version 5.1.0:
  * Added varnishd command-line options -I, -x and -?, and
    tightened restrictions on permitted combinations of options.
  * More progress on support for HTTP/2.
  * Add ``return(fail)`` to almost all VCL subroutines.
  * Restored the old hit-for-pass, invoked with
    ``return(pass(DURATION))`` from
    ``vcl_backend_response``. hit-for-miss remains the default.
    Added the cache_hitmiss stat, and cache_hitpass only counts the
    new/old hit-for-pass cases. Restored HitPass to the Varnish
    log, and added HitMiss. Added the HFP prefix to TTL log entries
    to log a hit-for-pass duration.
  * Rolled back the fix for #1206. Client delivery decides solely
    whether to send a 304 client response, based on client request
    and response headers.
  * Added vtest.sh.
  * Added vxid as a lefthand side for VSL queries.
  * Added the setenv and write_body commands for Varnish test cases
    (VTCs). err_shell is deprecated. Also added the operators
  - cliexpect, -match and -hdrlen, and -reason replaces -msg.
    Added the ${bad_backend} macro.
  * varnishtest can be stopped with the TERM, INT and KILL signals,
    but not with HUP.
  * The fallback director has now an extra, optional parameter to
    keep using the current backend until it falls sick.
  * VMOD shared libraries are now copied to the workdir, to avoid
    problems when VMODs are updated via packaging systems.
  * Bump the VRT version to 6.0.
  * Export more symbols from libvarnishapi.so.
  * The size of the VSL log is limited to 4G-1b, placing upper
    bounds on the -l option and the vsl_space and vsm_space
    parameters.
  * Added parameters clock_step, thread_pool_reserve and
    ban_cutoff.
  * Parameters vcl_dir and vmod_dir are deprecated, use vcl_path
    and vmod_path instead.
  * All parameters are defined, even on platforms that don't
    support them. An unsupported parameter is documented as such in
    param.show. Setting such a parameter is not an error, but has
    no effect.
  * Clarified the interpretations of the + and - operators in VCL
    with operands of the various data types.
  * DURATION types may be used in boolean contexts.
  * INT, DURATION and REAL values can now be negative.
  * Response codes 1000 or greater may now be set in VCL
    internally. resp.status is delivered modulo 1000 in client
    responses.
  * IP addresses can be compared for equality in VCL.
  * Introduce the STEVEDORE data type, and the objects
    storage.SNAME in VCL. Added req.storage and beresp.storage;
    beresp.storage_hint is deprecated.
  * Retired the umem stevedore.
  * req.ttl is deprecated.
  * Added std.getenv() and std.late_100_continue().
  * The fetch_failed stat is incremented for any kind of fetch
    failure.
  * Added the stats n_test_gunzip and
    bans_lurker_obj_killed_cutoff.
  * Clarified the meanings of the %r, %{X}i and %{X}o formatters in
    varnishncsa.
- Add varnish-5.1.2-add-fallthrough-comments.patch to fix build
  with GCC 7 (boo#1041259).</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="jengelh@inai.de" date="1521460800">- Update to new upstream release 6.0.0
  * Added support for Unix Domain Sockets, both for clients and
    for backend servers. This brings a new level of the VCL
    language, version 4.1.
  * Always use HTTP/1.1 on backend connections for pass fetch.</changelog>
  <changelog author="jengelh@inai.de" date="1525262400">- Put %fillup back into %post</changelog>
  <changelog author="Samu Voutilainen &lt;smar@smar.fi&gt;" date="1553688000">- Updated to 6.2.0
  * Added a thread pool watchdog which will restart the worker
    process if scheduling tasks onto worker threads appears
    stuck. The new parameter "thread_pool_watchdog" configures
    it.
- Disabled error for clobbering, which caused bogus
  error in varnishtest</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566820800">- Add uninit.patch.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1567598400">- Update to release 6.2.1
  * Bugfix for CVE-2019-15892 [boo#1149382]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1568721600">- Update to release 6.3.0
  * The Host: header is folded to lower-case in the builtin_vcl.
  * Improved performance of shared memory statistics counters.
  * Synthetic objects created from vcl_backend_error {} now
    replace existing stale objects as ordinary backend fetches
    would (for details see changes.rst)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1582632000">- Update to release 6.3.2
  * Fix a denial of service vulnerability when using the proxy
    protocol version 2.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1584446400">- Update to release 6.4.0
  * The MAIN.sess_drop counter is gone.
  * backend "none" was added for "no backend".
  * The hash algorithm of the hash director was changed, so
    backend selection will change once only when upgrading.
  * It is now possible for VMOD authors to customize the
    connection pooling of a dynamic backend.
  * For more, see changes.rst.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1591704000">- Update Git-Web repository link
- Set CFLAGS+=-fcommon.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1592913600">- Disable LTO, this randomly fails during link stage.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1600344000">- Update to release 6.5.0
  * `PRIV_TOP` is now thread-safe to support parallel ESI
    implementations.
  * varnishstat's JSON output format (-j option) has been changed.
  * Behavior for 304-type responses was changed not to update the
    Content-Encoding response header of the stored object.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1601640000">- Update to release 6.5.1
  * Bump the VRT_MAJOR_VERSION number defined in the vrt.h</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1625400000">- update to 6.6.0:
  * The ban_cutoff parameter now refers to the overall length of
    the ban list, including completed bans, where before only
    non-completed (?active?) bans were counted towards ban_cutoff.
  * Body bytes accounting has been fixed to always represent the
    number of body bytes moved on the wire, exclusive of
    protocol-specific overhead like HTTP/1 chunked encoding or
    HTTP/2 framing.
  * The connection close reason has been fixed to properly report
    SC_RESP_CLOSE where previously only SC_REQ_CLOSE was reported.
  * Unless the new validate_headers feature is disabled, all newly
    set headers are now validated to contain only characters
    allowed by RFC7230.
  * The filter_re, keep_re and get_re functions from the bundled
    cookie vmod have been changed to take the VCL_REGEX type. This
    implies that their regular expression arguments now need to be
    literal, not e.g. string.
  * The interface for private pointers in VMODs has been changed,
    the VRT backend interface has been changed, many filter
    (VDP/VFP) related signatures have been changed, and the
    stevedore API has been changed. (Details thereto, see online
    changelog.)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1628251200">- Update to release 6.6.1
  * Fix an HTTP/2.0 request smuggling vulnerability. [bnc#1188470]</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1638360000">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * varnish.service
  * varnishlog.service</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1652702400">- Update to release 7.1.0 [boo#1195188] [CVE-2022-23959]
  * VCL: It is now possible to assign a BLOB value to a BODY
    variable, in addition to STRING as before.
  * VMOD: New STRING strftime(TIME time, STRING format) function
    for UTC formatting.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1660305600">- Update to release 7.1.1 [boo#1202350] [CVE-2022-38150]
  * Resolve a denial of service attack involving reason phrases.</changelog>
</package>
<package pkgid="cacb8e7dc2ca26a6fefc58a63c960f0e9e9257bb0aa2462f8f90ccd16725e665" name="libvarnishapi3" arch="s390x">
  <version epoch="0" ver="7.1.1" rel="bp154.2.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1494936000">- BuildRequire python3-docutils instead of python-docutils.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1498219200">- Update to version 5.1.2:
  * Fix an endless loop in Backend Polling (#2295)
  * Fix a Chunked bug in tight workspaces (#2207, #2275)
  * Fix a bug relating to req.body when on waitinglist (#2266)
  * Handle EPIPE on broken TCP connections (#2267)
  * Work around the x86 arch's turbo-double FP format in parameter
    setup code. (#1875)
  * Fix race related to backend probe with proxy header (#2278)
  * Keep VCL temperature consistent between mgt/worker also when
    worker protests.
  * A lot of HTTP/2 fixes.
- Changes introduced by version 5.1.1:
  * Fix bug introduced by stubborn old bugger right before release
    5.1.0 was cut.
- Changes introduced by version 5.1.0:
  * Added varnishd command-line options -I, -x and -?, and
    tightened restrictions on permitted combinations of options.
  * More progress on support for HTTP/2.
  * Add ``return(fail)`` to almost all VCL subroutines.
  * Restored the old hit-for-pass, invoked with
    ``return(pass(DURATION))`` from
    ``vcl_backend_response``. hit-for-miss remains the default.
    Added the cache_hitmiss stat, and cache_hitpass only counts the
    new/old hit-for-pass cases. Restored HitPass to the Varnish
    log, and added HitMiss. Added the HFP prefix to TTL log entries
    to log a hit-for-pass duration.
  * Rolled back the fix for #1206. Client delivery decides solely
    whether to send a 304 client response, based on client request
    and response headers.
  * Added vtest.sh.
  * Added vxid as a lefthand side for VSL queries.
  * Added the setenv and write_body commands for Varnish test cases
    (VTCs). err_shell is deprecated. Also added the operators
  - cliexpect, -match and -hdrlen, and -reason replaces -msg.
    Added the ${bad_backend} macro.
  * varnishtest can be stopped with the TERM, INT and KILL signals,
    but not with HUP.
  * The fallback director has now an extra, optional parameter to
    keep using the current backend until it falls sick.
  * VMOD shared libraries are now copied to the workdir, to avoid
    problems when VMODs are updated via packaging systems.
  * Bump the VRT version to 6.0.
  * Export more symbols from libvarnishapi.so.
  * The size of the VSL log is limited to 4G-1b, placing upper
    bounds on the -l option and the vsl_space and vsm_space
    parameters.
  * Added parameters clock_step, thread_pool_reserve and
    ban_cutoff.
  * Parameters vcl_dir and vmod_dir are deprecated, use vcl_path
    and vmod_path instead.
  * All parameters are defined, even on platforms that don't
    support them. An unsupported parameter is documented as such in
    param.show. Setting such a parameter is not an error, but has
    no effect.
  * Clarified the interpretations of the + and - operators in VCL
    with operands of the various data types.
  * DURATION types may be used in boolean contexts.
  * INT, DURATION and REAL values can now be negative.
  * Response codes 1000 or greater may now be set in VCL
    internally. resp.status is delivered modulo 1000 in client
    responses.
  * IP addresses can be compared for equality in VCL.
  * Introduce the STEVEDORE data type, and the objects
    storage.SNAME in VCL. Added req.storage and beresp.storage;
    beresp.storage_hint is deprecated.
  * Retired the umem stevedore.
  * req.ttl is deprecated.
  * Added std.getenv() and std.late_100_continue().
  * The fetch_failed stat is incremented for any kind of fetch
    failure.
  * Added the stats n_test_gunzip and
    bans_lurker_obj_killed_cutoff.
  * Clarified the meanings of the %r, %{X}i and %{X}o formatters in
    varnishncsa.
- Add varnish-5.1.2-add-fallthrough-comments.patch to fix build
  with GCC 7 (boo#1041259).</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="jengelh@inai.de" date="1521460800">- Update to new upstream release 6.0.0
  * Added support for Unix Domain Sockets, both for clients and
    for backend servers. This brings a new level of the VCL
    language, version 4.1.
  * Always use HTTP/1.1 on backend connections for pass fetch.</changelog>
  <changelog author="jengelh@inai.de" date="1525262400">- Put %fillup back into %post</changelog>
  <changelog author="Samu Voutilainen &lt;smar@smar.fi&gt;" date="1553688000">- Updated to 6.2.0
  * Added a thread pool watchdog which will restart the worker
    process if scheduling tasks onto worker threads appears
    stuck. The new parameter "thread_pool_watchdog" configures
    it.
- Disabled error for clobbering, which caused bogus
  error in varnishtest</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566820800">- Add uninit.patch.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1567598400">- Update to release 6.2.1
  * Bugfix for CVE-2019-15892 [boo#1149382]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1568721600">- Update to release 6.3.0
  * The Host: header is folded to lower-case in the builtin_vcl.
  * Improved performance of shared memory statistics counters.
  * Synthetic objects created from vcl_backend_error {} now
    replace existing stale objects as ordinary backend fetches
    would (for details see changes.rst)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1582632000">- Update to release 6.3.2
  * Fix a denial of service vulnerability when using the proxy
    protocol version 2.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1584446400">- Update to release 6.4.0
  * The MAIN.sess_drop counter is gone.
  * backend "none" was added for "no backend".
  * The hash algorithm of the hash director was changed, so
    backend selection will change once only when upgrading.
  * It is now possible for VMOD authors to customize the
    connection pooling of a dynamic backend.
  * For more, see changes.rst.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1591704000">- Update Git-Web repository link
- Set CFLAGS+=-fcommon.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1592913600">- Disable LTO, this randomly fails during link stage.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1600344000">- Update to release 6.5.0
  * `PRIV_TOP` is now thread-safe to support parallel ESI
    implementations.
  * varnishstat's JSON output format (-j option) has been changed.
  * Behavior for 304-type responses was changed not to update the
    Content-Encoding response header of the stored object.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1601640000">- Update to release 6.5.1
  * Bump the VRT_MAJOR_VERSION number defined in the vrt.h</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1625400000">- update to 6.6.0:
  * The ban_cutoff parameter now refers to the overall length of
    the ban list, including completed bans, where before only
    non-completed (?active?) bans were counted towards ban_cutoff.
  * Body bytes accounting has been fixed to always represent the
    number of body bytes moved on the wire, exclusive of
    protocol-specific overhead like HTTP/1 chunked encoding or
    HTTP/2 framing.
  * The connection close reason has been fixed to properly report
    SC_RESP_CLOSE where previously only SC_REQ_CLOSE was reported.
  * Unless the new validate_headers feature is disabled, all newly
    set headers are now validated to contain only characters
    allowed by RFC7230.
  * The filter_re, keep_re and get_re functions from the bundled
    cookie vmod have been changed to take the VCL_REGEX type. This
    implies that their regular expression arguments now need to be
    literal, not e.g. string.
  * The interface for private pointers in VMODs has been changed,
    the VRT backend interface has been changed, many filter
    (VDP/VFP) related signatures have been changed, and the
    stevedore API has been changed. (Details thereto, see online
    changelog.)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1628251200">- Update to release 6.6.1
  * Fix an HTTP/2.0 request smuggling vulnerability. [bnc#1188470]</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1638360000">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * varnish.service
  * varnishlog.service</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1652702400">- Update to release 7.1.0 [boo#1195188] [CVE-2022-23959]
  * VCL: It is now possible to assign a BLOB value to a BODY
    variable, in addition to STRING as before.
  * VMOD: New STRING strftime(TIME time, STRING format) function
    for UTC formatting.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1660305600">- Update to release 7.1.1 [boo#1202350] [CVE-2022-38150]
  * Resolve a denial of service attack involving reason phrases.</changelog>
</package>
<package pkgid="71ca3803c8dc816096f26d9ce06ab928a01674436306a89051792ccac2a13c11" name="libvarnishapi3" arch="x86_64">
  <version epoch="0" ver="7.1.1" rel="bp154.2.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1494936000">- BuildRequire python3-docutils instead of python-docutils.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1498219200">- Update to version 5.1.2:
  * Fix an endless loop in Backend Polling (#2295)
  * Fix a Chunked bug in tight workspaces (#2207, #2275)
  * Fix a bug relating to req.body when on waitinglist (#2266)
  * Handle EPIPE on broken TCP connections (#2267)
  * Work around the x86 arch's turbo-double FP format in parameter
    setup code. (#1875)
  * Fix race related to backend probe with proxy header (#2278)
  * Keep VCL temperature consistent between mgt/worker also when
    worker protests.
  * A lot of HTTP/2 fixes.
- Changes introduced by version 5.1.1:
  * Fix bug introduced by stubborn old bugger right before release
    5.1.0 was cut.
- Changes introduced by version 5.1.0:
  * Added varnishd command-line options -I, -x and -?, and
    tightened restrictions on permitted combinations of options.
  * More progress on support for HTTP/2.
  * Add ``return(fail)`` to almost all VCL subroutines.
  * Restored the old hit-for-pass, invoked with
    ``return(pass(DURATION))`` from
    ``vcl_backend_response``. hit-for-miss remains the default.
    Added the cache_hitmiss stat, and cache_hitpass only counts the
    new/old hit-for-pass cases. Restored HitPass to the Varnish
    log, and added HitMiss. Added the HFP prefix to TTL log entries
    to log a hit-for-pass duration.
  * Rolled back the fix for #1206. Client delivery decides solely
    whether to send a 304 client response, based on client request
    and response headers.
  * Added vtest.sh.
  * Added vxid as a lefthand side for VSL queries.
  * Added the setenv and write_body commands for Varnish test cases
    (VTCs). err_shell is deprecated. Also added the operators
  - cliexpect, -match and -hdrlen, and -reason replaces -msg.
    Added the ${bad_backend} macro.
  * varnishtest can be stopped with the TERM, INT and KILL signals,
    but not with HUP.
  * The fallback director has now an extra, optional parameter to
    keep using the current backend until it falls sick.
  * VMOD shared libraries are now copied to the workdir, to avoid
    problems when VMODs are updated via packaging systems.
  * Bump the VRT version to 6.0.
  * Export more symbols from libvarnishapi.so.
  * The size of the VSL log is limited to 4G-1b, placing upper
    bounds on the -l option and the vsl_space and vsm_space
    parameters.
  * Added parameters clock_step, thread_pool_reserve and
    ban_cutoff.
  * Parameters vcl_dir and vmod_dir are deprecated, use vcl_path
    and vmod_path instead.
  * All parameters are defined, even on platforms that don't
    support them. An unsupported parameter is documented as such in
    param.show. Setting such a parameter is not an error, but has
    no effect.
  * Clarified the interpretations of the + and - operators in VCL
    with operands of the various data types.
  * DURATION types may be used in boolean contexts.
  * INT, DURATION and REAL values can now be negative.
  * Response codes 1000 or greater may now be set in VCL
    internally. resp.status is delivered modulo 1000 in client
    responses.
  * IP addresses can be compared for equality in VCL.
  * Introduce the STEVEDORE data type, and the objects
    storage.SNAME in VCL. Added req.storage and beresp.storage;
    beresp.storage_hint is deprecated.
  * Retired the umem stevedore.
  * req.ttl is deprecated.
  * Added std.getenv() and std.late_100_continue().
  * The fetch_failed stat is incremented for any kind of fetch
    failure.
  * Added the stats n_test_gunzip and
    bans_lurker_obj_killed_cutoff.
  * Clarified the meanings of the %r, %{X}i and %{X}o formatters in
    varnishncsa.
- Add varnish-5.1.2-add-fallthrough-comments.patch to fix build
  with GCC 7 (boo#1041259).</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="jengelh@inai.de" date="1521460800">- Update to new upstream release 6.0.0
  * Added support for Unix Domain Sockets, both for clients and
    for backend servers. This brings a new level of the VCL
    language, version 4.1.
  * Always use HTTP/1.1 on backend connections for pass fetch.</changelog>
  <changelog author="jengelh@inai.de" date="1525262400">- Put %fillup back into %post</changelog>
  <changelog author="Samu Voutilainen &lt;smar@smar.fi&gt;" date="1553688000">- Updated to 6.2.0
  * Added a thread pool watchdog which will restart the worker
    process if scheduling tasks onto worker threads appears
    stuck. The new parameter "thread_pool_watchdog" configures
    it.
- Disabled error for clobbering, which caused bogus
  error in varnishtest</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566820800">- Add uninit.patch.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1567598400">- Update to release 6.2.1
  * Bugfix for CVE-2019-15892 [boo#1149382]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1568721600">- Update to release 6.3.0
  * The Host: header is folded to lower-case in the builtin_vcl.
  * Improved performance of shared memory statistics counters.
  * Synthetic objects created from vcl_backend_error {} now
    replace existing stale objects as ordinary backend fetches
    would (for details see changes.rst)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1582632000">- Update to release 6.3.2
  * Fix a denial of service vulnerability when using the proxy
    protocol version 2.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1584446400">- Update to release 6.4.0
  * The MAIN.sess_drop counter is gone.
  * backend "none" was added for "no backend".
  * The hash algorithm of the hash director was changed, so
    backend selection will change once only when upgrading.
  * It is now possible for VMOD authors to customize the
    connection pooling of a dynamic backend.
  * For more, see changes.rst.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1591704000">- Update Git-Web repository link
- Set CFLAGS+=-fcommon.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1592913600">- Disable LTO, this randomly fails during link stage.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1600344000">- Update to release 6.5.0
  * `PRIV_TOP` is now thread-safe to support parallel ESI
    implementations.
  * varnishstat's JSON output format (-j option) has been changed.
  * Behavior for 304-type responses was changed not to update the
    Content-Encoding response header of the stored object.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1601640000">- Update to release 6.5.1
  * Bump the VRT_MAJOR_VERSION number defined in the vrt.h</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1625400000">- update to 6.6.0:
  * The ban_cutoff parameter now refers to the overall length of
    the ban list, including completed bans, where before only
    non-completed (?active?) bans were counted towards ban_cutoff.
  * Body bytes accounting has been fixed to always represent the
    number of body bytes moved on the wire, exclusive of
    protocol-specific overhead like HTTP/1 chunked encoding or
    HTTP/2 framing.
  * The connection close reason has been fixed to properly report
    SC_RESP_CLOSE where previously only SC_REQ_CLOSE was reported.
  * Unless the new validate_headers feature is disabled, all newly
    set headers are now validated to contain only characters
    allowed by RFC7230.
  * The filter_re, keep_re and get_re functions from the bundled
    cookie vmod have been changed to take the VCL_REGEX type. This
    implies that their regular expression arguments now need to be
    literal, not e.g. string.
  * The interface for private pointers in VMODs has been changed,
    the VRT backend interface has been changed, many filter
    (VDP/VFP) related signatures have been changed, and the
    stevedore API has been changed. (Details thereto, see online
    changelog.)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1628251200">- Update to release 6.6.1
  * Fix an HTTP/2.0 request smuggling vulnerability. [bnc#1188470]</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1638360000">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * varnish.service
  * varnishlog.service</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1652702400">- Update to release 7.1.0 [boo#1195188] [CVE-2022-23959]
  * VCL: It is now possible to assign a BLOB value to a BODY
    variable, in addition to STRING as before.
  * VMOD: New STRING strftime(TIME time, STRING format) function
    for UTC formatting.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1660305600">- Update to release 7.1.1 [boo#1202350] [CVE-2022-38150]
  * Resolve a denial of service attack involving reason phrases.</changelog>
</package>
<package pkgid="232e7ee5b1f4119f7c76c1d46dfd69dcf0c6aafd4ce27c36aed887f4069053d6" name="libvarnishapi3" arch="aarch64">
  <version epoch="0" ver="7.2.1" rel="bp154.2.9.1"/>
  <changelog author="Samu Voutilainen &lt;smar@smar.fi&gt;" date="1553688000">- Updated to 6.2.0
  * Added a thread pool watchdog which will restart the worker
    process if scheduling tasks onto worker threads appears
    stuck. The new parameter "thread_pool_watchdog" configures
    it.
- Disabled error for clobbering, which caused bogus
  error in varnishtest</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566820800">- Add uninit.patch.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1567598400">- Update to release 6.2.1
  * Bugfix for CVE-2019-15892 [boo#1149382]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1568721600">- Update to release 6.3.0
  * The Host: header is folded to lower-case in the builtin_vcl.
  * Improved performance of shared memory statistics counters.
  * Synthetic objects created from vcl_backend_error {} now
    replace existing stale objects as ordinary backend fetches
    would (for details see changes.rst)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1582632000">- Update to release 6.3.2
  * Fix a denial of service vulnerability when using the proxy
    protocol version 2.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1584446400">- Update to release 6.4.0
  * The MAIN.sess_drop counter is gone.
  * backend "none" was added for "no backend".
  * The hash algorithm of the hash director was changed, so
    backend selection will change once only when upgrading.
  * It is now possible for VMOD authors to customize the
    connection pooling of a dynamic backend.
  * For more, see changes.rst.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1591704000">- Update Git-Web repository link
- Set CFLAGS+=-fcommon.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1592913600">- Disable LTO, this randomly fails during link stage.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1600344000">- Update to release 6.5.0
  * `PRIV_TOP` is now thread-safe to support parallel ESI
    implementations.
  * varnishstat's JSON output format (-j option) has been changed.
  * Behavior for 304-type responses was changed not to update the
    Content-Encoding response header of the stored object.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1601640000">- Update to release 6.5.1
  * Bump the VRT_MAJOR_VERSION number defined in the vrt.h</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1625400000">- update to 6.6.0:
  * The ban_cutoff parameter now refers to the overall length of
    the ban list, including completed bans, where before only
    non-completed (?active?) bans were counted towards ban_cutoff.
  * Body bytes accounting has been fixed to always represent the
    number of body bytes moved on the wire, exclusive of
    protocol-specific overhead like HTTP/1 chunked encoding or
    HTTP/2 framing.
  * The connection close reason has been fixed to properly report
    SC_RESP_CLOSE where previously only SC_REQ_CLOSE was reported.
  * Unless the new validate_headers feature is disabled, all newly
    set headers are now validated to contain only characters
    allowed by RFC7230.
  * The filter_re, keep_re and get_re functions from the bundled
    cookie vmod have been changed to take the VCL_REGEX type. This
    implies that their regular expression arguments now need to be
    literal, not e.g. string.
  * The interface for private pointers in VMODs has been changed,
    the VRT backend interface has been changed, many filter
    (VDP/VFP) related signatures have been changed, and the
    stevedore API has been changed. (Details thereto, see online
    changelog.)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1628251200">- Update to release 6.6.1
  * Fix an HTTP/2.0 request smuggling vulnerability. [bnc#1188470]</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1638360000">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * varnish.service
  * varnishlog.service</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1652702400">- Update to release 7.1.0 [boo#1195188] [CVE-2022-23959]
  * VCL: It is now possible to assign a BLOB value to a BODY
    variable, in addition to STRING as before.
  * VMOD: New STRING strftime(TIME time, STRING format) function
    for UTC formatting.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1660305600">- Update to release 7.1.1 [boo#1202350] [CVE-2022-38150]
  * Resolve a denial of service attack involving reason phrases.</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1663502400">- Fix logrotate
- Add service reload</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1663588800">- Fix varnish.service stop</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1663761600">- Make reload fail nicely on vcl syntax error
- Set TasksMax=16384 because default thread_pool_max is 5000</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1667044800">- update to 7.2.0:
  * Functions ``VRT_AddVDP()``, ``VRT_AddVFP()``,
    ``VRT_RemoveVDP()`` and ``VRT_RemoveVFP()`` are deprecated.
  * Cookie headers generated by vmod_cookie no longer have a
    spurious trailing semicolon at the end of the string. This
    could break VCL relying on the previous incorrect behavior.
  * The ``SessClose`` and ``BackendClose`` reason ``rx_body``,
    which previously output ``Failure receiving req.body``, has
    been rewritten to ``Failure receiving body``.
  * Prototypical Varnish Extensions (VEXT). Similar to VMODs, a
    VEXT is loaded by the cache process. Unlike VMODs that have
    the combined lifetime of all the VCLs that reference them, a
    VEXT has the lifetime of the cache process itself. There are
    no built-in extensions so far.
  * Duration parameters can optionally take a unit, with the same
    syntax as duration units in VCL.
  * Calls to ``VRT_CacheReqBody()`` and ``std.cache_req_body``
    from outside client vcl subs now fail properly instead of
    triggering an assertion failure.
  * New "B" string for the package branch in ``VCS_String()``.
    For the 7.2.0 version, it would yield the 7.2 branch.
  * The new ``vcc_feature`` bits parameter replaces previous
    ``vcc_*`` boolean parameters. The latter still exist as
    deprecated aliases.
  * The ``-k`` option from ``varnishlog`` is now supported by
    ``varnishncsa``.
  * New functions ``std.now()`` and ``std.timed_call()`` in
    vmod_std.
  * New ``MAIN.shm_bytes`` counter.
  * A ``req.http.via`` header is set before entering
    ``vcl_recv``. Via headers are generated using the
    ``server.identity`` value. It defaults to the host name and
    can be turned into a pseudonym with the ``varnishd -i``
    option. Via headers are appended in both directions, to work
    with other hops that may advertise themselves.
  * A ``resp.http.via`` header is no longer overwritten by
    varnish, but rather appended to.
  * The ``server.identity`` syntax is now limited to a "token" as
    defined in the HTTP grammar to be suitable for Via headers.
  * In ``varnishtest`` a Varnish instance will use its VTC
    instance name as its instance name (``varnishd -i``) by
    default for predictable Via headers in test cases.
  * VMOD and VEXT authors can use functions from ``vnum.h``.
  * Do not filter pseudo-headers as regular headers.
  * The termination rules for ``WRK_BgThread()`` were relaxed to
    allow VMODs to use it.
  * ``(struct worker).handling`` has been moved to the newly
    introduced ``struct wrk_vpi`` and replaced by a pointer to
    it, as well as ``(struct vrt_ctx).handling`` has been
    replaced by that pointer. ``struct wrk_vpi`` is for state at
    the interface between VRT and VGC and, in particular, is not
    const as ``struct vrt_ctx`` aka ``VRT_CTX``.
  * Panics now contain information about VCL source files and
    lines.
  * The ``Begin`` log record has a 4th field for subtasks like
    ESI sub-requests.
  * The ``-E`` option for log utilities now works as documented,
    with any type of sub-task based on the ``Begin[4]`` field.
    This covers ESI like before, and sub-tasks spawned by VMODs
    (provided that they log the new field).
  * No more ``req.http.transfer-encoding`` for ESI sub-requests.
  * The thread pool reserve is now limited to tasks that can be
    queued. A backend background fetch is no longer eligible for
    queueing. It would otherwise slow a grace hit down
    significantly when thread pools are saturated.
  * The unused ``fetch_no_thread`` counter was renamed to
    ``bgfetch_no_thread`` because regular backend fetch tasks are
    always scheduled.
  * The macros ``FEATURE()``, ``EXPERIMENT()``, ``DO_DEBUG()``,
    ``MGT_FEATURE()``, ``MGT_EXPERIMENT()``, ``MGT_DO_DEBUG()``
    and ``MGT_VCC_FEATURE()`` now return a boolean value (``0``
    or ``1``) instead of the (private) flag value.
  * A regression in the transport code led MAIN.client_req to be
    incremented for requests coming back from the waiting list,
    it was fixed.
- Delete varnish-5.1.2-add-fallthrough-comments.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1667995200">- Update to release 7.2.1
  * Attempts to mark well-known headers like Content-Length and
    Host hop-by-hop through a Connection-header will now cause a
    400 "Bad request" response.
    (VSV00010, CVE-2022-45059, boo#1205243)
  * Apply the same character set rules to HTTP/2 pseudo-headers
    as is done on the corresponding HTTP/1 request-line field
    parsing. (VSV00011, CVE-2022-45060, boo#1205242)</changelog>
</package>
<package pkgid="62f5a84b8c83a3535a05b67cdc6ed83009bcb9a68cc698a662c09bddc36b255c" name="libvarnishapi3" arch="i586">
  <version epoch="0" ver="7.2.1" rel="bp154.2.9.1"/>
  <changelog author="Samu Voutilainen &lt;smar@smar.fi&gt;" date="1553688000">- Updated to 6.2.0
  * Added a thread pool watchdog which will restart the worker
    process if scheduling tasks onto worker threads appears
    stuck. The new parameter "thread_pool_watchdog" configures
    it.
- Disabled error for clobbering, which caused bogus
  error in varnishtest</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566820800">- Add uninit.patch.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1567598400">- Update to release 6.2.1
  * Bugfix for CVE-2019-15892 [boo#1149382]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1568721600">- Update to release 6.3.0
  * The Host: header is folded to lower-case in the builtin_vcl.
  * Improved performance of shared memory statistics counters.
  * Synthetic objects created from vcl_backend_error {} now
    replace existing stale objects as ordinary backend fetches
    would (for details see changes.rst)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1582632000">- Update to release 6.3.2
  * Fix a denial of service vulnerability when using the proxy
    protocol version 2.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1584446400">- Update to release 6.4.0
  * The MAIN.sess_drop counter is gone.
  * backend "none" was added for "no backend".
  * The hash algorithm of the hash director was changed, so
    backend selection will change once only when upgrading.
  * It is now possible for VMOD authors to customize the
    connection pooling of a dynamic backend.
  * For more, see changes.rst.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1591704000">- Update Git-Web repository link
- Set CFLAGS+=-fcommon.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1592913600">- Disable LTO, this randomly fails during link stage.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1600344000">- Update to release 6.5.0
  * `PRIV_TOP` is now thread-safe to support parallel ESI
    implementations.
  * varnishstat's JSON output format (-j option) has been changed.
  * Behavior for 304-type responses was changed not to update the
    Content-Encoding response header of the stored object.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1601640000">- Update to release 6.5.1
  * Bump the VRT_MAJOR_VERSION number defined in the vrt.h</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1625400000">- update to 6.6.0:
  * The ban_cutoff parameter now refers to the overall length of
    the ban list, including completed bans, where before only
    non-completed (?active?) bans were counted towards ban_cutoff.
  * Body bytes accounting has been fixed to always represent the
    number of body bytes moved on the wire, exclusive of
    protocol-specific overhead like HTTP/1 chunked encoding or
    HTTP/2 framing.
  * The connection close reason has been fixed to properly report
    SC_RESP_CLOSE where previously only SC_REQ_CLOSE was reported.
  * Unless the new validate_headers feature is disabled, all newly
    set headers are now validated to contain only characters
    allowed by RFC7230.
  * The filter_re, keep_re and get_re functions from the bundled
    cookie vmod have been changed to take the VCL_REGEX type. This
    implies that their regular expression arguments now need to be
    literal, not e.g. string.
  * The interface for private pointers in VMODs has been changed,
    the VRT backend interface has been changed, many filter
    (VDP/VFP) related signatures have been changed, and the
    stevedore API has been changed. (Details thereto, see online
    changelog.)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1628251200">- Update to release 6.6.1
  * Fix an HTTP/2.0 request smuggling vulnerability. [bnc#1188470]</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1638360000">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * varnish.service
  * varnishlog.service</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1652702400">- Update to release 7.1.0 [boo#1195188] [CVE-2022-23959]
  * VCL: It is now possible to assign a BLOB value to a BODY
    variable, in addition to STRING as before.
  * VMOD: New STRING strftime(TIME time, STRING format) function
    for UTC formatting.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1660305600">- Update to release 7.1.1 [boo#1202350] [CVE-2022-38150]
  * Resolve a denial of service attack involving reason phrases.</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1663502400">- Fix logrotate
- Add service reload</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1663588800">- Fix varnish.service stop</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1663761600">- Make reload fail nicely on vcl syntax error
- Set TasksMax=16384 because default thread_pool_max is 5000</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1667044800">- update to 7.2.0:
  * Functions ``VRT_AddVDP()``, ``VRT_AddVFP()``,
    ``VRT_RemoveVDP()`` and ``VRT_RemoveVFP()`` are deprecated.
  * Cookie headers generated by vmod_cookie no longer have a
    spurious trailing semicolon at the end of the string. This
    could break VCL relying on the previous incorrect behavior.
  * The ``SessClose`` and ``BackendClose`` reason ``rx_body``,
    which previously output ``Failure receiving req.body``, has
    been rewritten to ``Failure receiving body``.
  * Prototypical Varnish Extensions (VEXT). Similar to VMODs, a
    VEXT is loaded by the cache process. Unlike VMODs that have
    the combined lifetime of all the VCLs that reference them, a
    VEXT has the lifetime of the cache process itself. There are
    no built-in extensions so far.
  * Duration parameters can optionally take a unit, with the same
    syntax as duration units in VCL.
  * Calls to ``VRT_CacheReqBody()`` and ``std.cache_req_body``
    from outside client vcl subs now fail properly instead of
    triggering an assertion failure.
  * New "B" string for the package branch in ``VCS_String()``.
    For the 7.2.0 version, it would yield the 7.2 branch.
  * The new ``vcc_feature`` bits parameter replaces previous
    ``vcc_*`` boolean parameters. The latter still exist as
    deprecated aliases.
  * The ``-k`` option from ``varnishlog`` is now supported by
    ``varnishncsa``.
  * New functions ``std.now()`` and ``std.timed_call()`` in
    vmod_std.
  * New ``MAIN.shm_bytes`` counter.
  * A ``req.http.via`` header is set before entering
    ``vcl_recv``. Via headers are generated using the
    ``server.identity`` value. It defaults to the host name and
    can be turned into a pseudonym with the ``varnishd -i``
    option. Via headers are appended in both directions, to work
    with other hops that may advertise themselves.
  * A ``resp.http.via`` header is no longer overwritten by
    varnish, but rather appended to.
  * The ``server.identity`` syntax is now limited to a "token" as
    defined in the HTTP grammar to be suitable for Via headers.
  * In ``varnishtest`` a Varnish instance will use its VTC
    instance name as its instance name (``varnishd -i``) by
    default for predictable Via headers in test cases.
  * VMOD and VEXT authors can use functions from ``vnum.h``.
  * Do not filter pseudo-headers as regular headers.
  * The termination rules for ``WRK_BgThread()`` were relaxed to
    allow VMODs to use it.
  * ``(struct worker).handling`` has been moved to the newly
    introduced ``struct wrk_vpi`` and replaced by a pointer to
    it, as well as ``(struct vrt_ctx).handling`` has been
    replaced by that pointer. ``struct wrk_vpi`` is for state at
    the interface between VRT and VGC and, in particular, is not
    const as ``struct vrt_ctx`` aka ``VRT_CTX``.
  * Panics now contain information about VCL source files and
    lines.
  * The ``Begin`` log record has a 4th field for subtasks like
    ESI sub-requests.
  * The ``-E`` option for log utilities now works as documented,
    with any type of sub-task based on the ``Begin[4]`` field.
    This covers ESI like before, and sub-tasks spawned by VMODs
    (provided that they log the new field).
  * No more ``req.http.transfer-encoding`` for ESI sub-requests.
  * The thread pool reserve is now limited to tasks that can be
    queued. A backend background fetch is no longer eligible for
    queueing. It would otherwise slow a grace hit down
    significantly when thread pools are saturated.
  * The unused ``fetch_no_thread`` counter was renamed to
    ``bgfetch_no_thread`` because regular backend fetch tasks are
    always scheduled.
  * The macros ``FEATURE()``, ``EXPERIMENT()``, ``DO_DEBUG()``,
    ``MGT_FEATURE()``, ``MGT_EXPERIMENT()``, ``MGT_DO_DEBUG()``
    and ``MGT_VCC_FEATURE()`` now return a boolean value (``0``
    or ``1``) instead of the (private) flag value.
  * A regression in the transport code led MAIN.client_req to be
    incremented for requests coming back from the waiting list,
    it was fixed.
- Delete varnish-5.1.2-add-fallthrough-comments.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1667995200">- Update to release 7.2.1
  * Attempts to mark well-known headers like Content-Length and
    Host hop-by-hop through a Connection-header will now cause a
    400 "Bad request" response.
    (VSV00010, CVE-2022-45059, boo#1205243)
  * Apply the same character set rules to HTTP/2 pseudo-headers
    as is done on the corresponding HTTP/1 request-line field
    parsing. (VSV00011, CVE-2022-45060, boo#1205242)</changelog>
</package>
<package pkgid="2fbea3f7ecfe82c25afcc49f8321353bc83e59e4c4ce5485ba312c0e4140c75d" name="libvarnishapi3" arch="ppc64le">
  <version epoch="0" ver="7.2.1" rel="bp154.2.9.1"/>
  <changelog author="Samu Voutilainen &lt;smar@smar.fi&gt;" date="1553688000">- Updated to 6.2.0
  * Added a thread pool watchdog which will restart the worker
    process if scheduling tasks onto worker threads appears
    stuck. The new parameter "thread_pool_watchdog" configures
    it.
- Disabled error for clobbering, which caused bogus
  error in varnishtest</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566820800">- Add uninit.patch.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1567598400">- Update to release 6.2.1
  * Bugfix for CVE-2019-15892 [boo#1149382]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1568721600">- Update to release 6.3.0
  * The Host: header is folded to lower-case in the builtin_vcl.
  * Improved performance of shared memory statistics counters.
  * Synthetic objects created from vcl_backend_error {} now
    replace existing stale objects as ordinary backend fetches
    would (for details see changes.rst)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1582632000">- Update to release 6.3.2
  * Fix a denial of service vulnerability when using the proxy
    protocol version 2.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1584446400">- Update to release 6.4.0
  * The MAIN.sess_drop counter is gone.
  * backend "none" was added for "no backend".
  * The hash algorithm of the hash director was changed, so
    backend selection will change once only when upgrading.
  * It is now possible for VMOD authors to customize the
    connection pooling of a dynamic backend.
  * For more, see changes.rst.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1591704000">- Update Git-Web repository link
- Set CFLAGS+=-fcommon.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1592913600">- Disable LTO, this randomly fails during link stage.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1600344000">- Update to release 6.5.0
  * `PRIV_TOP` is now thread-safe to support parallel ESI
    implementations.
  * varnishstat's JSON output format (-j option) has been changed.
  * Behavior for 304-type responses was changed not to update the
    Content-Encoding response header of the stored object.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1601640000">- Update to release 6.5.1
  * Bump the VRT_MAJOR_VERSION number defined in the vrt.h</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1625400000">- update to 6.6.0:
  * The ban_cutoff parameter now refers to the overall length of
    the ban list, including completed bans, where before only
    non-completed (?active?) bans were counted towards ban_cutoff.
  * Body bytes accounting has been fixed to always represent the
    number of body bytes moved on the wire, exclusive of
    protocol-specific overhead like HTTP/1 chunked encoding or
    HTTP/2 framing.
  * The connection close reason has been fixed to properly report
    SC_RESP_CLOSE where previously only SC_REQ_CLOSE was reported.
  * Unless the new validate_headers feature is disabled, all newly
    set headers are now validated to contain only characters
    allowed by RFC7230.
  * The filter_re, keep_re and get_re functions from the bundled
    cookie vmod have been changed to take the VCL_REGEX type. This
    implies that their regular expression arguments now need to be
    literal, not e.g. string.
  * The interface for private pointers in VMODs has been changed,
    the VRT backend interface has been changed, many filter
    (VDP/VFP) related signatures have been changed, and the
    stevedore API has been changed. (Details thereto, see online
    changelog.)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1628251200">- Update to release 6.6.1
  * Fix an HTTP/2.0 request smuggling vulnerability. [bnc#1188470]</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1638360000">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * varnish.service
  * varnishlog.service</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1652702400">- Update to release 7.1.0 [boo#1195188] [CVE-2022-23959]
  * VCL: It is now possible to assign a BLOB value to a BODY
    variable, in addition to STRING as before.
  * VMOD: New STRING strftime(TIME time, STRING format) function
    for UTC formatting.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1660305600">- Update to release 7.1.1 [boo#1202350] [CVE-2022-38150]
  * Resolve a denial of service attack involving reason phrases.</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1663502400">- Fix logrotate
- Add service reload</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1663588800">- Fix varnish.service stop</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1663761600">- Make reload fail nicely on vcl syntax error
- Set TasksMax=16384 because default thread_pool_max is 5000</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1667044800">- update to 7.2.0:
  * Functions ``VRT_AddVDP()``, ``VRT_AddVFP()``,
    ``VRT_RemoveVDP()`` and ``VRT_RemoveVFP()`` are deprecated.
  * Cookie headers generated by vmod_cookie no longer have a
    spurious trailing semicolon at the end of the string. This
    could break VCL relying on the previous incorrect behavior.
  * The ``SessClose`` and ``BackendClose`` reason ``rx_body``,
    which previously output ``Failure receiving req.body``, has
    been rewritten to ``Failure receiving body``.
  * Prototypical Varnish Extensions (VEXT). Similar to VMODs, a
    VEXT is loaded by the cache process. Unlike VMODs that have
    the combined lifetime of all the VCLs that reference them, a
    VEXT has the lifetime of the cache process itself. There are
    no built-in extensions so far.
  * Duration parameters can optionally take a unit, with the same
    syntax as duration units in VCL.
  * Calls to ``VRT_CacheReqBody()`` and ``std.cache_req_body``
    from outside client vcl subs now fail properly instead of
    triggering an assertion failure.
  * New "B" string for the package branch in ``VCS_String()``.
    For the 7.2.0 version, it would yield the 7.2 branch.
  * The new ``vcc_feature`` bits parameter replaces previous
    ``vcc_*`` boolean parameters. The latter still exist as
    deprecated aliases.
  * The ``-k`` option from ``varnishlog`` is now supported by
    ``varnishncsa``.
  * New functions ``std.now()`` and ``std.timed_call()`` in
    vmod_std.
  * New ``MAIN.shm_bytes`` counter.
  * A ``req.http.via`` header is set before entering
    ``vcl_recv``. Via headers are generated using the
    ``server.identity`` value. It defaults to the host name and
    can be turned into a pseudonym with the ``varnishd -i``
    option. Via headers are appended in both directions, to work
    with other hops that may advertise themselves.
  * A ``resp.http.via`` header is no longer overwritten by
    varnish, but rather appended to.
  * The ``server.identity`` syntax is now limited to a "token" as
    defined in the HTTP grammar to be suitable for Via headers.
  * In ``varnishtest`` a Varnish instance will use its VTC
    instance name as its instance name (``varnishd -i``) by
    default for predictable Via headers in test cases.
  * VMOD and VEXT authors can use functions from ``vnum.h``.
  * Do not filter pseudo-headers as regular headers.
  * The termination rules for ``WRK_BgThread()`` were relaxed to
    allow VMODs to use it.
  * ``(struct worker).handling`` has been moved to the newly
    introduced ``struct wrk_vpi`` and replaced by a pointer to
    it, as well as ``(struct vrt_ctx).handling`` has been
    replaced by that pointer. ``struct wrk_vpi`` is for state at
    the interface between VRT and VGC and, in particular, is not
    const as ``struct vrt_ctx`` aka ``VRT_CTX``.
  * Panics now contain information about VCL source files and
    lines.
  * The ``Begin`` log record has a 4th field for subtasks like
    ESI sub-requests.
  * The ``-E`` option for log utilities now works as documented,
    with any type of sub-task based on the ``Begin[4]`` field.
    This covers ESI like before, and sub-tasks spawned by VMODs
    (provided that they log the new field).
  * No more ``req.http.transfer-encoding`` for ESI sub-requests.
  * The thread pool reserve is now limited to tasks that can be
    queued. A backend background fetch is no longer eligible for
    queueing. It would otherwise slow a grace hit down
    significantly when thread pools are saturated.
  * The unused ``fetch_no_thread`` counter was renamed to
    ``bgfetch_no_thread`` because regular backend fetch tasks are
    always scheduled.
  * The macros ``FEATURE()``, ``EXPERIMENT()``, ``DO_DEBUG()``,
    ``MGT_FEATURE()``, ``MGT_EXPERIMENT()``, ``MGT_DO_DEBUG()``
    and ``MGT_VCC_FEATURE()`` now return a boolean value (``0``
    or ``1``) instead of the (private) flag value.
  * A regression in the transport code led MAIN.client_req to be
    incremented for requests coming back from the waiting list,
    it was fixed.
- Delete varnish-5.1.2-add-fallthrough-comments.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1667995200">- Update to release 7.2.1
  * Attempts to mark well-known headers like Content-Length and
    Host hop-by-hop through a Connection-header will now cause a
    400 "Bad request" response.
    (VSV00010, CVE-2022-45059, boo#1205243)
  * Apply the same character set rules to HTTP/2 pseudo-headers
    as is done on the corresponding HTTP/1 request-line field
    parsing. (VSV00011, CVE-2022-45060, boo#1205242)</changelog>
</package>
<package pkgid="dcc465ab3e03378a76c91e4c599303cbba48ef5345fd05c715c28aae3be1e95b" name="libvarnishapi3" arch="s390x">
  <version epoch="0" ver="7.2.1" rel="bp154.2.9.1"/>
  <changelog author="Samu Voutilainen &lt;smar@smar.fi&gt;" date="1553688000">- Updated to 6.2.0
  * Added a thread pool watchdog which will restart the worker
    process if scheduling tasks onto worker threads appears
    stuck. The new parameter "thread_pool_watchdog" configures
    it.
- Disabled error for clobbering, which caused bogus
  error in varnishtest</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566820800">- Add uninit.patch.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1567598400">- Update to release 6.2.1
  * Bugfix for CVE-2019-15892 [boo#1149382]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1568721600">- Update to release 6.3.0
  * The Host: header is folded to lower-case in the builtin_vcl.
  * Improved performance of shared memory statistics counters.
  * Synthetic objects created from vcl_backend_error {} now
    replace existing stale objects as ordinary backend fetches
    would (for details see changes.rst)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1582632000">- Update to release 6.3.2
  * Fix a denial of service vulnerability when using the proxy
    protocol version 2.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1584446400">- Update to release 6.4.0
  * The MAIN.sess_drop counter is gone.
  * backend "none" was added for "no backend".
  * The hash algorithm of the hash director was changed, so
    backend selection will change once only when upgrading.
  * It is now possible for VMOD authors to customize the
    connection pooling of a dynamic backend.
  * For more, see changes.rst.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1591704000">- Update Git-Web repository link
- Set CFLAGS+=-fcommon.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1592913600">- Disable LTO, this randomly fails during link stage.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1600344000">- Update to release 6.5.0
  * `PRIV_TOP` is now thread-safe to support parallel ESI
    implementations.
  * varnishstat's JSON output format (-j option) has been changed.
  * Behavior for 304-type responses was changed not to update the
    Content-Encoding response header of the stored object.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1601640000">- Update to release 6.5.1
  * Bump the VRT_MAJOR_VERSION number defined in the vrt.h</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1625400000">- update to 6.6.0:
  * The ban_cutoff parameter now refers to the overall length of
    the ban list, including completed bans, where before only
    non-completed (?active?) bans were counted towards ban_cutoff.
  * Body bytes accounting has been fixed to always represent the
    number of body bytes moved on the wire, exclusive of
    protocol-specific overhead like HTTP/1 chunked encoding or
    HTTP/2 framing.
  * The connection close reason has been fixed to properly report
    SC_RESP_CLOSE where previously only SC_REQ_CLOSE was reported.
  * Unless the new validate_headers feature is disabled, all newly
    set headers are now validated to contain only characters
    allowed by RFC7230.
  * The filter_re, keep_re and get_re functions from the bundled
    cookie vmod have been changed to take the VCL_REGEX type. This
    implies that their regular expression arguments now need to be
    literal, not e.g. string.
  * The interface for private pointers in VMODs has been changed,
    the VRT backend interface has been changed, many filter
    (VDP/VFP) related signatures have been changed, and the
    stevedore API has been changed. (Details thereto, see online
    changelog.)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1628251200">- Update to release 6.6.1
  * Fix an HTTP/2.0 request smuggling vulnerability. [bnc#1188470]</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1638360000">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * varnish.service
  * varnishlog.service</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1652702400">- Update to release 7.1.0 [boo#1195188] [CVE-2022-23959]
  * VCL: It is now possible to assign a BLOB value to a BODY
    variable, in addition to STRING as before.
  * VMOD: New STRING strftime(TIME time, STRING format) function
    for UTC formatting.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1660305600">- Update to release 7.1.1 [boo#1202350] [CVE-2022-38150]
  * Resolve a denial of service attack involving reason phrases.</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1663502400">- Fix logrotate
- Add service reload</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1663588800">- Fix varnish.service stop</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1663761600">- Make reload fail nicely on vcl syntax error
- Set TasksMax=16384 because default thread_pool_max is 5000</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1667044800">- update to 7.2.0:
  * Functions ``VRT_AddVDP()``, ``VRT_AddVFP()``,
    ``VRT_RemoveVDP()`` and ``VRT_RemoveVFP()`` are deprecated.
  * Cookie headers generated by vmod_cookie no longer have a
    spurious trailing semicolon at the end of the string. This
    could break VCL relying on the previous incorrect behavior.
  * The ``SessClose`` and ``BackendClose`` reason ``rx_body``,
    which previously output ``Failure receiving req.body``, has
    been rewritten to ``Failure receiving body``.
  * Prototypical Varnish Extensions (VEXT). Similar to VMODs, a
    VEXT is loaded by the cache process. Unlike VMODs that have
    the combined lifetime of all the VCLs that reference them, a
    VEXT has the lifetime of the cache process itself. There are
    no built-in extensions so far.
  * Duration parameters can optionally take a unit, with the same
    syntax as duration units in VCL.
  * Calls to ``VRT_CacheReqBody()`` and ``std.cache_req_body``
    from outside client vcl subs now fail properly instead of
    triggering an assertion failure.
  * New "B" string for the package branch in ``VCS_String()``.
    For the 7.2.0 version, it would yield the 7.2 branch.
  * The new ``vcc_feature`` bits parameter replaces previous
    ``vcc_*`` boolean parameters. The latter still exist as
    deprecated aliases.
  * The ``-k`` option from ``varnishlog`` is now supported by
    ``varnishncsa``.
  * New functions ``std.now()`` and ``std.timed_call()`` in
    vmod_std.
  * New ``MAIN.shm_bytes`` counter.
  * A ``req.http.via`` header is set before entering
    ``vcl_recv``. Via headers are generated using the
    ``server.identity`` value. It defaults to the host name and
    can be turned into a pseudonym with the ``varnishd -i``
    option. Via headers are appended in both directions, to work
    with other hops that may advertise themselves.
  * A ``resp.http.via`` header is no longer overwritten by
    varnish, but rather appended to.
  * The ``server.identity`` syntax is now limited to a "token" as
    defined in the HTTP grammar to be suitable for Via headers.
  * In ``varnishtest`` a Varnish instance will use its VTC
    instance name as its instance name (``varnishd -i``) by
    default for predictable Via headers in test cases.
  * VMOD and VEXT authors can use functions from ``vnum.h``.
  * Do not filter pseudo-headers as regular headers.
  * The termination rules for ``WRK_BgThread()`` were relaxed to
    allow VMODs to use it.
  * ``(struct worker).handling`` has been moved to the newly
    introduced ``struct wrk_vpi`` and replaced by a pointer to
    it, as well as ``(struct vrt_ctx).handling`` has been
    replaced by that pointer. ``struct wrk_vpi`` is for state at
    the interface between VRT and VGC and, in particular, is not
    const as ``struct vrt_ctx`` aka ``VRT_CTX``.
  * Panics now contain information about VCL source files and
    lines.
  * The ``Begin`` log record has a 4th field for subtasks like
    ESI sub-requests.
  * The ``-E`` option for log utilities now works as documented,
    with any type of sub-task based on the ``Begin[4]`` field.
    This covers ESI like before, and sub-tasks spawned by VMODs
    (provided that they log the new field).
  * No more ``req.http.transfer-encoding`` for ESI sub-requests.
  * The thread pool reserve is now limited to tasks that can be
    queued. A backend background fetch is no longer eligible for
    queueing. It would otherwise slow a grace hit down
    significantly when thread pools are saturated.
  * The unused ``fetch_no_thread`` counter was renamed to
    ``bgfetch_no_thread`` because regular backend fetch tasks are
    always scheduled.
  * The macros ``FEATURE()``, ``EXPERIMENT()``, ``DO_DEBUG()``,
    ``MGT_FEATURE()``, ``MGT_EXPERIMENT()``, ``MGT_DO_DEBUG()``
    and ``MGT_VCC_FEATURE()`` now return a boolean value (``0``
    or ``1``) instead of the (private) flag value.
  * A regression in the transport code led MAIN.client_req to be
    incremented for requests coming back from the waiting list,
    it was fixed.
- Delete varnish-5.1.2-add-fallthrough-comments.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1667995200">- Update to release 7.2.1
  * Attempts to mark well-known headers like Content-Length and
    Host hop-by-hop through a Connection-header will now cause a
    400 "Bad request" response.
    (VSV00010, CVE-2022-45059, boo#1205243)
  * Apply the same character set rules to HTTP/2 pseudo-headers
    as is done on the corresponding HTTP/1 request-line field
    parsing. (VSV00011, CVE-2022-45060, boo#1205242)</changelog>
</package>
<package pkgid="70f61819443b9b36160f644d0606caa0f2c42b03e81ef821a4e9f3995d16a23a" name="libvarnishapi3" arch="x86_64">
  <version epoch="0" ver="7.2.1" rel="bp154.2.9.1"/>
  <changelog author="Samu Voutilainen &lt;smar@smar.fi&gt;" date="1553688000">- Updated to 6.2.0
  * Added a thread pool watchdog which will restart the worker
    process if scheduling tasks onto worker threads appears
    stuck. The new parameter "thread_pool_watchdog" configures
    it.
- Disabled error for clobbering, which caused bogus
  error in varnishtest</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566820800">- Add uninit.patch.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1567598400">- Update to release 6.2.1
  * Bugfix for CVE-2019-15892 [boo#1149382]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1568721600">- Update to release 6.3.0
  * The Host: header is folded to lower-case in the builtin_vcl.
  * Improved performance of shared memory statistics counters.
  * Synthetic objects created from vcl_backend_error {} now
    replace existing stale objects as ordinary backend fetches
    would (for details see changes.rst)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1582632000">- Update to release 6.3.2
  * Fix a denial of service vulnerability when using the proxy
    protocol version 2.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1584446400">- Update to release 6.4.0
  * The MAIN.sess_drop counter is gone.
  * backend "none" was added for "no backend".
  * The hash algorithm of the hash director was changed, so
    backend selection will change once only when upgrading.
  * It is now possible for VMOD authors to customize the
    connection pooling of a dynamic backend.
  * For more, see changes.rst.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1591704000">- Update Git-Web repository link
- Set CFLAGS+=-fcommon.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1592913600">- Disable LTO, this randomly fails during link stage.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1600344000">- Update to release 6.5.0
  * `PRIV_TOP` is now thread-safe to support parallel ESI
    implementations.
  * varnishstat's JSON output format (-j option) has been changed.
  * Behavior for 304-type responses was changed not to update the
    Content-Encoding response header of the stored object.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1601640000">- Update to release 6.5.1
  * Bump the VRT_MAJOR_VERSION number defined in the vrt.h</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1625400000">- update to 6.6.0:
  * The ban_cutoff parameter now refers to the overall length of
    the ban list, including completed bans, where before only
    non-completed (?active?) bans were counted towards ban_cutoff.
  * Body bytes accounting has been fixed to always represent the
    number of body bytes moved on the wire, exclusive of
    protocol-specific overhead like HTTP/1 chunked encoding or
    HTTP/2 framing.
  * The connection close reason has been fixed to properly report
    SC_RESP_CLOSE where previously only SC_REQ_CLOSE was reported.
  * Unless the new validate_headers feature is disabled, all newly
    set headers are now validated to contain only characters
    allowed by RFC7230.
  * The filter_re, keep_re and get_re functions from the bundled
    cookie vmod have been changed to take the VCL_REGEX type. This
    implies that their regular expression arguments now need to be
    literal, not e.g. string.
  * The interface for private pointers in VMODs has been changed,
    the VRT backend interface has been changed, many filter
    (VDP/VFP) related signatures have been changed, and the
    stevedore API has been changed. (Details thereto, see online
    changelog.)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1628251200">- Update to release 6.6.1
  * Fix an HTTP/2.0 request smuggling vulnerability. [bnc#1188470]</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1638360000">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * varnish.service
  * varnishlog.service</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1652702400">- Update to release 7.1.0 [boo#1195188] [CVE-2022-23959]
  * VCL: It is now possible to assign a BLOB value to a BODY
    variable, in addition to STRING as before.
  * VMOD: New STRING strftime(TIME time, STRING format) function
    for UTC formatting.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1660305600">- Update to release 7.1.1 [boo#1202350] [CVE-2022-38150]
  * Resolve a denial of service attack involving reason phrases.</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1663502400">- Fix logrotate
- Add service reload</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1663588800">- Fix varnish.service stop</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1663761600">- Make reload fail nicely on vcl syntax error
- Set TasksMax=16384 because default thread_pool_max is 5000</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1667044800">- update to 7.2.0:
  * Functions ``VRT_AddVDP()``, ``VRT_AddVFP()``,
    ``VRT_RemoveVDP()`` and ``VRT_RemoveVFP()`` are deprecated.
  * Cookie headers generated by vmod_cookie no longer have a
    spurious trailing semicolon at the end of the string. This
    could break VCL relying on the previous incorrect behavior.
  * The ``SessClose`` and ``BackendClose`` reason ``rx_body``,
    which previously output ``Failure receiving req.body``, has
    been rewritten to ``Failure receiving body``.
  * Prototypical Varnish Extensions (VEXT). Similar to VMODs, a
    VEXT is loaded by the cache process. Unlike VMODs that have
    the combined lifetime of all the VCLs that reference them, a
    VEXT has the lifetime of the cache process itself. There are
    no built-in extensions so far.
  * Duration parameters can optionally take a unit, with the same
    syntax as duration units in VCL.
  * Calls to ``VRT_CacheReqBody()`` and ``std.cache_req_body``
    from outside client vcl subs now fail properly instead of
    triggering an assertion failure.
  * New "B" string for the package branch in ``VCS_String()``.
    For the 7.2.0 version, it would yield the 7.2 branch.
  * The new ``vcc_feature`` bits parameter replaces previous
    ``vcc_*`` boolean parameters. The latter still exist as
    deprecated aliases.
  * The ``-k`` option from ``varnishlog`` is now supported by
    ``varnishncsa``.
  * New functions ``std.now()`` and ``std.timed_call()`` in
    vmod_std.
  * New ``MAIN.shm_bytes`` counter.
  * A ``req.http.via`` header is set before entering
    ``vcl_recv``. Via headers are generated using the
    ``server.identity`` value. It defaults to the host name and
    can be turned into a pseudonym with the ``varnishd -i``
    option. Via headers are appended in both directions, to work
    with other hops that may advertise themselves.
  * A ``resp.http.via`` header is no longer overwritten by
    varnish, but rather appended to.
  * The ``server.identity`` syntax is now limited to a "token" as
    defined in the HTTP grammar to be suitable for Via headers.
  * In ``varnishtest`` a Varnish instance will use its VTC
    instance name as its instance name (``varnishd -i``) by
    default for predictable Via headers in test cases.
  * VMOD and VEXT authors can use functions from ``vnum.h``.
  * Do not filter pseudo-headers as regular headers.
  * The termination rules for ``WRK_BgThread()`` were relaxed to
    allow VMODs to use it.
  * ``(struct worker).handling`` has been moved to the newly
    introduced ``struct wrk_vpi`` and replaced by a pointer to
    it, as well as ``(struct vrt_ctx).handling`` has been
    replaced by that pointer. ``struct wrk_vpi`` is for state at
    the interface between VRT and VGC and, in particular, is not
    const as ``struct vrt_ctx`` aka ``VRT_CTX``.
  * Panics now contain information about VCL source files and
    lines.
  * The ``Begin`` log record has a 4th field for subtasks like
    ESI sub-requests.
  * The ``-E`` option for log utilities now works as documented,
    with any type of sub-task based on the ``Begin[4]`` field.
    This covers ESI like before, and sub-tasks spawned by VMODs
    (provided that they log the new field).
  * No more ``req.http.transfer-encoding`` for ESI sub-requests.
  * The thread pool reserve is now limited to tasks that can be
    queued. A backend background fetch is no longer eligible for
    queueing. It would otherwise slow a grace hit down
    significantly when thread pools are saturated.
  * The unused ``fetch_no_thread`` counter was renamed to
    ``bgfetch_no_thread`` because regular backend fetch tasks are
    always scheduled.
  * The macros ``FEATURE()``, ``EXPERIMENT()``, ``DO_DEBUG()``,
    ``MGT_FEATURE()``, ``MGT_EXPERIMENT()``, ``MGT_DO_DEBUG()``
    and ``MGT_VCC_FEATURE()`` now return a boolean value (``0``
    or ``1``) instead of the (private) flag value.
  * A regression in the transport code led MAIN.client_req to be
    incremented for requests coming back from the waiting list,
    it was fixed.
- Delete varnish-5.1.2-add-fallthrough-comments.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1667995200">- Update to release 7.2.1
  * Attempts to mark well-known headers like Content-Length and
    Host hop-by-hop through a Connection-header will now cause a
    400 "Bad request" response.
    (VSV00010, CVE-2022-45059, boo#1205243)
  * Apply the same character set rules to HTTP/2 pseudo-headers
    as is done on the corresponding HTTP/1 request-line field
    parsing. (VSV00011, CVE-2022-45060, boo#1205242)</changelog>
</package>
<package pkgid="1bfb4fed9db0979b99d09386f1b0a745a4973b9c749a3fd3837e15cc5bacb64b" name="libvlc5" arch="aarch64">
  <version epoch="0" ver="3.0.18" rel="bp154.2.3.1"/>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1616760000">- Add vlc-gcc11.patch: Fix build using gcc11 (boo#1181918).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1616760001">- Guard post scriptlets to only run %{_libdir}/vlc/vlc-cache-gen if
  it already (or still, in case of uninstall) exists.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1620129600">- Update to version 3.0.13:
  + Demux:
  - Adaptive: fix artefacts in HLS streams with wrong profiles/levels
  - Fix regression on some MP4 files for the audio track
  - Fix MPGA and ADTS probing in TS files
  - Fix Flac inside AVI files
  - Fix VP9/Webm artefacts when seeking
  + Codec:
  - Support SSA text scaling
  - Fix rotation on Android rotation
  - Fix WebVTT subtitles that start at 00:00
  + Access:
  - Update libnfs to support NFSv4
  - Improve SMB2 integration
  - Fix Blu-ray files using Unicode names on Windows
  - Disable mcast lookups on Android for RTSP playback
  + Video Output: Rework the D3D11 rendering wait, to fix
    choppiness on display
  + Interfaces:
  - Fix VLC getting stuck on close on X11 (#21875)
  - Improve RTL on preferences on macOS
  - Add mousewheel horizontal axis control
  - Fix crash on exit on macOS
  - Fix sizing of the fullscreen controls on macOS
  + Misc:
  - Improve MIDI fonts search on Linux
  - Update Soundcloud, Youtube, liveleak
  - Fix compilation with GCC11
  - Fix input-slave option for subtitles
  + Updated translations.
- Drop vlc-gcc11.patch: fixed upstream.
- Extend vlc-srto_tsbpddelay.patch: allow srt &gt;= 1.3 for openSUSE.</changelog>
  <changelog author="Fusion Future &lt;qydwhotmail@gmail.com&gt;" date="1624104000">- Update to version 3.0.16:
  + Video Output: Fix a D3D11 crash on Windows 8/8.1.
  + Access: Fix RTSP server timeout handling.
  + Interfaces: macOS: Add touchbar support.
  + Misc: Multiple settings improvements.
- Changes from version 3.0.15:
  + Core: Add Opus &amp; Alac wave format mappings.
  + Access: Fix opening DVD folders with non-ascii characters.
  + Demux:
  - Fix asf regression with broadcast streams.
  - MP4: Fix audio drop on seek.
  + Video Output:
  - Fix seek &amp; volume sliders overlapping with subtitles.
  - Fix delays when seeking with D3D11.
  + Text renderer: Improve freetype fonts outlining.
  + Misc: Fix GnuTLS support for Windows XP.
- Changes from version 3.0.14:
  + Core:
  - Fix double loading of slave input.
  - Fix an issue causing the auto-updater not to launch the new
    version installer.
- Add vlc-get-addr-by-ref-from-getConnectionEndpointAddress.patch:
  The maintainers of live555 changed connectionEndpointAddresss to
  getConnectionEndpointAddress, which now provides the address
  value by reference.
- Rebase vlc-srto_tsbpddelay.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1645531200">- Guard --enable-libplacebo configure parameter with is_opensuse:
  the buildrequires is also guarded the same way.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1645617600">- BuildRequires pkgconfig(smbclient) instead of smbclient-devel:
  smbclient-devel was merged into samba-devel, and we do not want
  to care for actual package names.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1646654400">- Update to version 3.0.17:
  + Core:
  * Fix a regression in parsing secondary source MRLs
  * Allow brackets in path part of URLs
  + Access:
  * Fix support for screen capture on macOS with avcapture
  * Fix closing of HTTP 1.x connections
  * Improve HTTP2 memory usage
  * Improve AVCapture module
  * Improve AudioCD support (audio/data mixed mode, musicbrainz)
  * Improve SMB compatibility by changing the read size
  * Several improvements on the SRT modules (including streamID)
  + Decoders/Packetizers:
  * Add support for DTS LBR
  * Fix some HEVC hardware decoding on Windows and crashes when aspect ratio changes
  * Fix hardware decoding for some AMD GPU drivers
  * Add support for new Fourcc for E-AC3, AV1, GeoVision
  * Fix crashes with VP9 streams
  * Fix styling issues with subs tx3g (mp4) tracks
  * Fix playback of live AV1 streams
  + Audio Output:
  * iOS/tvOS: add support for spatial audio
  * macOS: fix some channels ordering for &gt; 5.1 channels
  * Android: rework audio volume management
  + Video Output:
  * Fix a D3D11 crash when the stream changes aspect ratio
  + Demux:
  * Major overhaul of the adaptive streaming stack
  * Support for DAV video files
  * Add WebP image mapping
  * Fix missing audio start of Opus audio in MKV/WebM
  * Fix an infinite loop in MP4
  * Fix attachments extractions in ogg files
  * Support Uncompressed audio in mp4 (ISO/IEC 23003-5)
  * Fix some lip sync issue in rare MPEG-TS streams
  + Interface:
  * Qt/macOS: Fixup user provided URLs
  * Add safe area handling on macOS
  * Qt: improve preferences search
  * Qt: fix --no-mouse-events option
  + Misc:
  * Update YouTube script
  * Fix Icecast directory parsing which could lead to missing entries
  * Improve UPnP compatibility with some servers
- Drop vlc-srto_tsbpddelay.patch: fixed upstream.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1646913600">- Disable libnfs and soxr integration on suse_version &lt; 1500 (e.g
  SLE12).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1647691200">- Update to version 3.0.17.3:
  + This is a fixup release which fixes a regression that could
    cause a lack of audio for adaptive streaming playback. It is
    identical to 3.0.17.2 otherwise.
  + This updates contains various fixes and improvements:
  - Major adaptive streaming stack overhaul
  - Major codec updates
  - Many third party libraries update
  - Allow brackets in the path section of URLs
  - Better notch support for new macbooks
  - Add support for DAV video and Webp image formats
  - Improve AV1 live streaming support
  - Several SRT support improvements
  - Numerous crash fixes
  - Update youtube script
- Changes from version 3.0.17.2:
  + This is a fixup release which fixes youtube playback and
    contextual menus on integrated video for the Qt interface. It
    is identical to 3.0.17-1 otherwise.
- Changes from version 3.0.17-1:
  + This is a fixup release which bumps libflac to 1.3.4 in order
    to fix CVE-2020-0499 and CVE-2021-0561 on platforms for which
    we provide binary releases.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1650628800">- Update to version 3.0.17.4:
  + Service Discovery: Fix UPnP regression on Windows.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1653307200">- Add vlc-dav1d-1.0.patch: Fix build with dav1d 1.0. Upstream
  commits 2202c892 and d38ddd727.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1657108800">- Extend vlc-lua-5.3.patch: match upstream commit 0e0b070c26.
- Add 867.patch: support LUA 5.4 (boo#1200944).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1657713600">- Limit to Lua &lt; 5.4 (boo#1200944).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1659960000">- Also limit lua interpreter to &lt; 5.4 (boo#1200944).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1662552000">- Make vlc-vdpau supplement vlc, not vlc-noX: vdpau itself is based
  on top of the graphical stack.
- Move video_output/libegl_wl_plugin.so from vlc-noX to vlc: links
  GUI stack.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1667908800">- Limit to ffmpeg 4: we're also linking opencv3 which does not use
  ffmpeg 5.</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1668686400">- add vlc-caca-fix-to-0-99-beta20-version.patch: build with libcaca-0.99.beta20</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1669377600">- Update to version 3.0.18 (CVE-2022-41325, boo#1206142):
  + macOS: Fix audio device listing with non-latin names.
  + Misc: Fix rendering and performance issue with older GPUs.
  + Updated translations.
- Changes from version 3.0.18-rc2:
  + Codec/Demux:
  - Add support for Y16 chroma.
  - Fix build of gme plugin.
  + Lua:
  - Fix script for vocaroo.
  - Fix script for youtube to allow throttled playback.
  + Service Discovery: Fix UPnP regression on Windows.
  + Video Output: Fix video placement with caopengllayer.
  + Misc: Fix password search in kwallet module.
- Changes from version 3.0.18-rc:
  + Demux:
  - Major adaptive streaming update, notably for multiple
    timelies and webvtt.
  - Fix seeking with some fragmented MP4 files.
  - Add support for DVBSub inside MKV.
  - Fix some Flac files that could not be played.
  - Improve seeking in Ogg files.
  + Decoders:
  - Fix DxVA/D3D11 crashes on HEVC files with bogus references.
  - Fix libass storage size and crash.
  - Fix decoding errors on macOS hw decoding on some HEVC files.
  + Video Output:
  - Fix color regression with VAAPI/iOS and OpenGL output.
  - Fix some resizing issues with OpenGL on GLX/EGL/X11/XV.
  - Fix Direct3d9 texture stretching.
  - Fix 10-bit accelerated video filters on macOS.
  + Playlist: Avoid playlist liveloop on failed/tiny items
    (temporize EOS bursts).
  + Misc:
  - Misc fixes for the extension UI on macOS.
  - Improve SMBv1 and SMBv2 behaviours.
  - Improve FTP compatibility.
  - Support RISC-V.
  - Fix AVI muxing for Windows Media Player compatibility.
  - Fix seeking speed on macOS.
- Drop vlc-dav1d-1.0.patch and 867.patch: fixed upstream.
- Drop vlc-get-addr-by-ref-from-getConnectionEndpointAddress.patch:
  fixed upstream (commit 05445b74).
- Drop vlc-get-addr-by-ref-from-getConnectionEndpointAddress.patch:
  fixed upstream (commit b689202d).</changelog>
  <changelog author="Niklas Haas &lt;obs@haasn.xyz&gt;" date="1669377601">- Add vlc-libplacebo-5.patch: Backport fix for building with libplacebo v5</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1670846400">- Do not apply vlc.a52.patch if liba52 is &lt; 0.8.0
- Avoid ugly _FORTIFY_SOURCE redefinition warnings</changelog>
</package>
<package pkgid="8ee0725e9f3b13a9fcd2325bedc235947c7521bd0c4f521984c382049021c2fa" name="libvlc5" arch="ppc64le">
  <version epoch="0" ver="3.0.18" rel="bp154.2.3.1"/>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1616760000">- Add vlc-gcc11.patch: Fix build using gcc11 (boo#1181918).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1616760001">- Guard post scriptlets to only run %{_libdir}/vlc/vlc-cache-gen if
  it already (or still, in case of uninstall) exists.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1620129600">- Update to version 3.0.13:
  + Demux:
  - Adaptive: fix artefacts in HLS streams with wrong profiles/levels
  - Fix regression on some MP4 files for the audio track
  - Fix MPGA and ADTS probing in TS files
  - Fix Flac inside AVI files
  - Fix VP9/Webm artefacts when seeking
  + Codec:
  - Support SSA text scaling
  - Fix rotation on Android rotation
  - Fix WebVTT subtitles that start at 00:00
  + Access:
  - Update libnfs to support NFSv4
  - Improve SMB2 integration
  - Fix Blu-ray files using Unicode names on Windows
  - Disable mcast lookups on Android for RTSP playback
  + Video Output: Rework the D3D11 rendering wait, to fix
    choppiness on display
  + Interfaces:
  - Fix VLC getting stuck on close on X11 (#21875)
  - Improve RTL on preferences on macOS
  - Add mousewheel horizontal axis control
  - Fix crash on exit on macOS
  - Fix sizing of the fullscreen controls on macOS
  + Misc:
  - Improve MIDI fonts search on Linux
  - Update Soundcloud, Youtube, liveleak
  - Fix compilation with GCC11
  - Fix input-slave option for subtitles
  + Updated translations.
- Drop vlc-gcc11.patch: fixed upstream.
- Extend vlc-srto_tsbpddelay.patch: allow srt &gt;= 1.3 for openSUSE.</changelog>
  <changelog author="Fusion Future &lt;qydwhotmail@gmail.com&gt;" date="1624104000">- Update to version 3.0.16:
  + Video Output: Fix a D3D11 crash on Windows 8/8.1.
  + Access: Fix RTSP server timeout handling.
  + Interfaces: macOS: Add touchbar support.
  + Misc: Multiple settings improvements.
- Changes from version 3.0.15:
  + Core: Add Opus &amp; Alac wave format mappings.
  + Access: Fix opening DVD folders with non-ascii characters.
  + Demux:
  - Fix asf regression with broadcast streams.
  - MP4: Fix audio drop on seek.
  + Video Output:
  - Fix seek &amp; volume sliders overlapping with subtitles.
  - Fix delays when seeking with D3D11.
  + Text renderer: Improve freetype fonts outlining.
  + Misc: Fix GnuTLS support for Windows XP.
- Changes from version 3.0.14:
  + Core:
  - Fix double loading of slave input.
  - Fix an issue causing the auto-updater not to launch the new
    version installer.
- Add vlc-get-addr-by-ref-from-getConnectionEndpointAddress.patch:
  The maintainers of live555 changed connectionEndpointAddresss to
  getConnectionEndpointAddress, which now provides the address
  value by reference.
- Rebase vlc-srto_tsbpddelay.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1645531200">- Guard --enable-libplacebo configure parameter with is_opensuse:
  the buildrequires is also guarded the same way.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1645617600">- BuildRequires pkgconfig(smbclient) instead of smbclient-devel:
  smbclient-devel was merged into samba-devel, and we do not want
  to care for actual package names.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1646654400">- Update to version 3.0.17:
  + Core:
  * Fix a regression in parsing secondary source MRLs
  * Allow brackets in path part of URLs
  + Access:
  * Fix support for screen capture on macOS with avcapture
  * Fix closing of HTTP 1.x connections
  * Improve HTTP2 memory usage
  * Improve AVCapture module
  * Improve AudioCD support (audio/data mixed mode, musicbrainz)
  * Improve SMB compatibility by changing the read size
  * Several improvements on the SRT modules (including streamID)
  + Decoders/Packetizers:
  * Add support for DTS LBR
  * Fix some HEVC hardware decoding on Windows and crashes when aspect ratio changes
  * Fix hardware decoding for some AMD GPU drivers
  * Add support for new Fourcc for E-AC3, AV1, GeoVision
  * Fix crashes with VP9 streams
  * Fix styling issues with subs tx3g (mp4) tracks
  * Fix playback of live AV1 streams
  + Audio Output:
  * iOS/tvOS: add support for spatial audio
  * macOS: fix some channels ordering for &gt; 5.1 channels
  * Android: rework audio volume management
  + Video Output:
  * Fix a D3D11 crash when the stream changes aspect ratio
  + Demux:
  * Major overhaul of the adaptive streaming stack
  * Support for DAV video files
  * Add WebP image mapping
  * Fix missing audio start of Opus audio in MKV/WebM
  * Fix an infinite loop in MP4
  * Fix attachments extractions in ogg files
  * Support Uncompressed audio in mp4 (ISO/IEC 23003-5)
  * Fix some lip sync issue in rare MPEG-TS streams
  + Interface:
  * Qt/macOS: Fixup user provided URLs
  * Add safe area handling on macOS
  * Qt: improve preferences search
  * Qt: fix --no-mouse-events option
  + Misc:
  * Update YouTube script
  * Fix Icecast directory parsing which could lead to missing entries
  * Improve UPnP compatibility with some servers
- Drop vlc-srto_tsbpddelay.patch: fixed upstream.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1646913600">- Disable libnfs and soxr integration on suse_version &lt; 1500 (e.g
  SLE12).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1647691200">- Update to version 3.0.17.3:
  + This is a fixup release which fixes a regression that could
    cause a lack of audio for adaptive streaming playback. It is
    identical to 3.0.17.2 otherwise.
  + This updates contains various fixes and improvements:
  - Major adaptive streaming stack overhaul
  - Major codec updates
  - Many third party libraries update
  - Allow brackets in the path section of URLs
  - Better notch support for new macbooks
  - Add support for DAV video and Webp image formats
  - Improve AV1 live streaming support
  - Several SRT support improvements
  - Numerous crash fixes
  - Update youtube script
- Changes from version 3.0.17.2:
  + This is a fixup release which fixes youtube playback and
    contextual menus on integrated video for the Qt interface. It
    is identical to 3.0.17-1 otherwise.
- Changes from version 3.0.17-1:
  + This is a fixup release which bumps libflac to 1.3.4 in order
    to fix CVE-2020-0499 and CVE-2021-0561 on platforms for which
    we provide binary releases.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1650628800">- Update to version 3.0.17.4:
  + Service Discovery: Fix UPnP regression on Windows.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1653307200">- Add vlc-dav1d-1.0.patch: Fix build with dav1d 1.0. Upstream
  commits 2202c892 and d38ddd727.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1657108800">- Extend vlc-lua-5.3.patch: match upstream commit 0e0b070c26.
- Add 867.patch: support LUA 5.4 (boo#1200944).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1657713600">- Limit to Lua &lt; 5.4 (boo#1200944).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1659960000">- Also limit lua interpreter to &lt; 5.4 (boo#1200944).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1662552000">- Make vlc-vdpau supplement vlc, not vlc-noX: vdpau itself is based
  on top of the graphical stack.
- Move video_output/libegl_wl_plugin.so from vlc-noX to vlc: links
  GUI stack.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1667908800">- Limit to ffmpeg 4: we're also linking opencv3 which does not use
  ffmpeg 5.</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1668686400">- add vlc-caca-fix-to-0-99-beta20-version.patch: build with libcaca-0.99.beta20</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1669377600">- Update to version 3.0.18 (CVE-2022-41325, boo#1206142):
  + macOS: Fix audio device listing with non-latin names.
  + Misc: Fix rendering and performance issue with older GPUs.
  + Updated translations.
- Changes from version 3.0.18-rc2:
  + Codec/Demux:
  - Add support for Y16 chroma.
  - Fix build of gme plugin.
  + Lua:
  - Fix script for vocaroo.
  - Fix script for youtube to allow throttled playback.
  + Service Discovery: Fix UPnP regression on Windows.
  + Video Output: Fix video placement with caopengllayer.
  + Misc: Fix password search in kwallet module.
- Changes from version 3.0.18-rc:
  + Demux:
  - Major adaptive streaming update, notably for multiple
    timelies and webvtt.
  - Fix seeking with some fragmented MP4 files.
  - Add support for DVBSub inside MKV.
  - Fix some Flac files that could not be played.
  - Improve seeking in Ogg files.
  + Decoders:
  - Fix DxVA/D3D11 crashes on HEVC files with bogus references.
  - Fix libass storage size and crash.
  - Fix decoding errors on macOS hw decoding on some HEVC files.
  + Video Output:
  - Fix color regression with VAAPI/iOS and OpenGL output.
  - Fix some resizing issues with OpenGL on GLX/EGL/X11/XV.
  - Fix Direct3d9 texture stretching.
  - Fix 10-bit accelerated video filters on macOS.
  + Playlist: Avoid playlist liveloop on failed/tiny items
    (temporize EOS bursts).
  + Misc:
  - Misc fixes for the extension UI on macOS.
  - Improve SMBv1 and SMBv2 behaviours.
  - Improve FTP compatibility.
  - Support RISC-V.
  - Fix AVI muxing for Windows Media Player compatibility.
  - Fix seeking speed on macOS.
- Drop vlc-dav1d-1.0.patch and 867.patch: fixed upstream.
- Drop vlc-get-addr-by-ref-from-getConnectionEndpointAddress.patch:
  fixed upstream (commit 05445b74).
- Drop vlc-get-addr-by-ref-from-getConnectionEndpointAddress.patch:
  fixed upstream (commit b689202d).</changelog>
  <changelog author="Niklas Haas &lt;obs@haasn.xyz&gt;" date="1669377601">- Add vlc-libplacebo-5.patch: Backport fix for building with libplacebo v5</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1670846400">- Do not apply vlc.a52.patch if liba52 is &lt; 0.8.0
- Avoid ugly _FORTIFY_SOURCE redefinition warnings</changelog>
</package>
<package pkgid="4b1568edaf671ca5ffea37353b90099ac639153cf0946d07d65bafcfb76ca946" name="libvlc5" arch="x86_64">
  <version epoch="0" ver="3.0.18" rel="bp154.2.3.1"/>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1616760000">- Add vlc-gcc11.patch: Fix build using gcc11 (boo#1181918).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1616760001">- Guard post scriptlets to only run %{_libdir}/vlc/vlc-cache-gen if
  it already (or still, in case of uninstall) exists.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1620129600">- Update to version 3.0.13:
  + Demux:
  - Adaptive: fix artefacts in HLS streams with wrong profiles/levels
  - Fix regression on some MP4 files for the audio track
  - Fix MPGA and ADTS probing in TS files
  - Fix Flac inside AVI files
  - Fix VP9/Webm artefacts when seeking
  + Codec:
  - Support SSA text scaling
  - Fix rotation on Android rotation
  - Fix WebVTT subtitles that start at 00:00
  + Access:
  - Update libnfs to support NFSv4
  - Improve SMB2 integration
  - Fix Blu-ray files using Unicode names on Windows
  - Disable mcast lookups on Android for RTSP playback
  + Video Output: Rework the D3D11 rendering wait, to fix
    choppiness on display
  + Interfaces:
  - Fix VLC getting stuck on close on X11 (#21875)
  - Improve RTL on preferences on macOS
  - Add mousewheel horizontal axis control
  - Fix crash on exit on macOS
  - Fix sizing of the fullscreen controls on macOS
  + Misc:
  - Improve MIDI fonts search on Linux
  - Update Soundcloud, Youtube, liveleak
  - Fix compilation with GCC11
  - Fix input-slave option for subtitles
  + Updated translations.
- Drop vlc-gcc11.patch: fixed upstream.
- Extend vlc-srto_tsbpddelay.patch: allow srt &gt;= 1.3 for openSUSE.</changelog>
  <changelog author="Fusion Future &lt;qydwhotmail@gmail.com&gt;" date="1624104000">- Update to version 3.0.16:
  + Video Output: Fix a D3D11 crash on Windows 8/8.1.
  + Access: Fix RTSP server timeout handling.
  + Interfaces: macOS: Add touchbar support.
  + Misc: Multiple settings improvements.
- Changes from version 3.0.15:
  + Core: Add Opus &amp; Alac wave format mappings.
  + Access: Fix opening DVD folders with non-ascii characters.
  + Demux:
  - Fix asf regression with broadcast streams.
  - MP4: Fix audio drop on seek.
  + Video Output:
  - Fix seek &amp; volume sliders overlapping with subtitles.
  - Fix delays when seeking with D3D11.
  + Text renderer: Improve freetype fonts outlining.
  + Misc: Fix GnuTLS support for Windows XP.
- Changes from version 3.0.14:
  + Core:
  - Fix double loading of slave input.
  - Fix an issue causing the auto-updater not to launch the new
    version installer.
- Add vlc-get-addr-by-ref-from-getConnectionEndpointAddress.patch:
  The maintainers of live555 changed connectionEndpointAddresss to
  getConnectionEndpointAddress, which now provides the address
  value by reference.
- Rebase vlc-srto_tsbpddelay.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1645531200">- Guard --enable-libplacebo configure parameter with is_opensuse:
  the buildrequires is also guarded the same way.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1645617600">- BuildRequires pkgconfig(smbclient) instead of smbclient-devel:
  smbclient-devel was merged into samba-devel, and we do not want
  to care for actual package names.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1646654400">- Update to version 3.0.17:
  + Core:
  * Fix a regression in parsing secondary source MRLs
  * Allow brackets in path part of URLs
  + Access:
  * Fix support for screen capture on macOS with avcapture
  * Fix closing of HTTP 1.x connections
  * Improve HTTP2 memory usage
  * Improve AVCapture module
  * Improve AudioCD support (audio/data mixed mode, musicbrainz)
  * Improve SMB compatibility by changing the read size
  * Several improvements on the SRT modules (including streamID)
  + Decoders/Packetizers:
  * Add support for DTS LBR
  * Fix some HEVC hardware decoding on Windows and crashes when aspect ratio changes
  * Fix hardware decoding for some AMD GPU drivers
  * Add support for new Fourcc for E-AC3, AV1, GeoVision
  * Fix crashes with VP9 streams
  * Fix styling issues with subs tx3g (mp4) tracks
  * Fix playback of live AV1 streams
  + Audio Output:
  * iOS/tvOS: add support for spatial audio
  * macOS: fix some channels ordering for &gt; 5.1 channels
  * Android: rework audio volume management
  + Video Output:
  * Fix a D3D11 crash when the stream changes aspect ratio
  + Demux:
  * Major overhaul of the adaptive streaming stack
  * Support for DAV video files
  * Add WebP image mapping
  * Fix missing audio start of Opus audio in MKV/WebM
  * Fix an infinite loop in MP4
  * Fix attachments extractions in ogg files
  * Support Uncompressed audio in mp4 (ISO/IEC 23003-5)
  * Fix some lip sync issue in rare MPEG-TS streams
  + Interface:
  * Qt/macOS: Fixup user provided URLs
  * Add safe area handling on macOS
  * Qt: improve preferences search
  * Qt: fix --no-mouse-events option
  + Misc:
  * Update YouTube script
  * Fix Icecast directory parsing which could lead to missing entries
  * Improve UPnP compatibility with some servers
- Drop vlc-srto_tsbpddelay.patch: fixed upstream.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1646913600">- Disable libnfs and soxr integration on suse_version &lt; 1500 (e.g
  SLE12).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1647691200">- Update to version 3.0.17.3:
  + This is a fixup release which fixes a regression that could
    cause a lack of audio for adaptive streaming playback. It is
    identical to 3.0.17.2 otherwise.
  + This updates contains various fixes and improvements:
  - Major adaptive streaming stack overhaul
  - Major codec updates
  - Many third party libraries update
  - Allow brackets in the path section of URLs
  - Better notch support for new macbooks
  - Add support for DAV video and Webp image formats
  - Improve AV1 live streaming support
  - Several SRT support improvements
  - Numerous crash fixes
  - Update youtube script
- Changes from version 3.0.17.2:
  + This is a fixup release which fixes youtube playback and
    contextual menus on integrated video for the Qt interface. It
    is identical to 3.0.17-1 otherwise.
- Changes from version 3.0.17-1:
  + This is a fixup release which bumps libflac to 1.3.4 in order
    to fix CVE-2020-0499 and CVE-2021-0561 on platforms for which
    we provide binary releases.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1650628800">- Update to version 3.0.17.4:
  + Service Discovery: Fix UPnP regression on Windows.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1653307200">- Add vlc-dav1d-1.0.patch: Fix build with dav1d 1.0. Upstream
  commits 2202c892 and d38ddd727.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1657108800">- Extend vlc-lua-5.3.patch: match upstream commit 0e0b070c26.
- Add 867.patch: support LUA 5.4 (boo#1200944).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1657713600">- Limit to Lua &lt; 5.4 (boo#1200944).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1659960000">- Also limit lua interpreter to &lt; 5.4 (boo#1200944).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1662552000">- Make vlc-vdpau supplement vlc, not vlc-noX: vdpau itself is based
  on top of the graphical stack.
- Move video_output/libegl_wl_plugin.so from vlc-noX to vlc: links
  GUI stack.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1667908800">- Limit to ffmpeg 4: we're also linking opencv3 which does not use
  ffmpeg 5.</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1668686400">- add vlc-caca-fix-to-0-99-beta20-version.patch: build with libcaca-0.99.beta20</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1669377600">- Update to version 3.0.18 (CVE-2022-41325, boo#1206142):
  + macOS: Fix audio device listing with non-latin names.
  + Misc: Fix rendering and performance issue with older GPUs.
  + Updated translations.
- Changes from version 3.0.18-rc2:
  + Codec/Demux:
  - Add support for Y16 chroma.
  - Fix build of gme plugin.
  + Lua:
  - Fix script for vocaroo.
  - Fix script for youtube to allow throttled playback.
  + Service Discovery: Fix UPnP regression on Windows.
  + Video Output: Fix video placement with caopengllayer.
  + Misc: Fix password search in kwallet module.
- Changes from version 3.0.18-rc:
  + Demux:
  - Major adaptive streaming update, notably for multiple
    timelies and webvtt.
  - Fix seeking with some fragmented MP4 files.
  - Add support for DVBSub inside MKV.
  - Fix some Flac files that could not be played.
  - Improve seeking in Ogg files.
  + Decoders:
  - Fix DxVA/D3D11 crashes on HEVC files with bogus references.
  - Fix libass storage size and crash.
  - Fix decoding errors on macOS hw decoding on some HEVC files.
  + Video Output:
  - Fix color regression with VAAPI/iOS and OpenGL output.
  - Fix some resizing issues with OpenGL on GLX/EGL/X11/XV.
  - Fix Direct3d9 texture stretching.
  - Fix 10-bit accelerated video filters on macOS.
  + Playlist: Avoid playlist liveloop on failed/tiny items
    (temporize EOS bursts).
  + Misc:
  - Misc fixes for the extension UI on macOS.
  - Improve SMBv1 and SMBv2 behaviours.
  - Improve FTP compatibility.
  - Support RISC-V.
  - Fix AVI muxing for Windows Media Player compatibility.
  - Fix seeking speed on macOS.
- Drop vlc-dav1d-1.0.patch and 867.patch: fixed upstream.
- Drop vlc-get-addr-by-ref-from-getConnectionEndpointAddress.patch:
  fixed upstream (commit 05445b74).
- Drop vlc-get-addr-by-ref-from-getConnectionEndpointAddress.patch:
  fixed upstream (commit b689202d).</changelog>
  <changelog author="Niklas Haas &lt;obs@haasn.xyz&gt;" date="1669377601">- Add vlc-libplacebo-5.patch: Backport fix for building with libplacebo v5</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1670846400">- Do not apply vlc.a52.patch if liba52 is &lt; 0.8.0
- Avoid ugly _FORTIFY_SOURCE redefinition warnings</changelog>
</package>
<package pkgid="6c52ac24735ab5148e9fe7d60a80451aea5a1ce28499a4584bab1c8c2b0e3d73" name="libvlccore9" arch="aarch64">
  <version epoch="0" ver="3.0.18" rel="bp154.2.3.1"/>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1616760000">- Add vlc-gcc11.patch: Fix build using gcc11 (boo#1181918).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1616760001">- Guard post scriptlets to only run %{_libdir}/vlc/vlc-cache-gen if
  it already (or still, in case of uninstall) exists.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1620129600">- Update to version 3.0.13:
  + Demux:
  - Adaptive: fix artefacts in HLS streams with wrong profiles/levels
  - Fix regression on some MP4 files for the audio track
  - Fix MPGA and ADTS probing in TS files
  - Fix Flac inside AVI files
  - Fix VP9/Webm artefacts when seeking
  + Codec:
  - Support SSA text scaling
  - Fix rotation on Android rotation
  - Fix WebVTT subtitles that start at 00:00
  + Access:
  - Update libnfs to support NFSv4
  - Improve SMB2 integration
  - Fix Blu-ray files using Unicode names on Windows
  - Disable mcast lookups on Android for RTSP playback
  + Video Output: Rework the D3D11 rendering wait, to fix
    choppiness on display
  + Interfaces:
  - Fix VLC getting stuck on close on X11 (#21875)
  - Improve RTL on preferences on macOS
  - Add mousewheel horizontal axis control
  - Fix crash on exit on macOS
  - Fix sizing of the fullscreen controls on macOS
  + Misc:
  - Improve MIDI fonts search on Linux
  - Update Soundcloud, Youtube, liveleak
  - Fix compilation with GCC11
  - Fix input-slave option for subtitles
  + Updated translations.
- Drop vlc-gcc11.patch: fixed upstream.
- Extend vlc-srto_tsbpddelay.patch: allow srt &gt;= 1.3 for openSUSE.</changelog>
  <changelog author="Fusion Future &lt;qydwhotmail@gmail.com&gt;" date="1624104000">- Update to version 3.0.16:
  + Video Output: Fix a D3D11 crash on Windows 8/8.1.
  + Access: Fix RTSP server timeout handling.
  + Interfaces: macOS: Add touchbar support.
  + Misc: Multiple settings improvements.
- Changes from version 3.0.15:
  + Core: Add Opus &amp; Alac wave format mappings.
  + Access: Fix opening DVD folders with non-ascii characters.
  + Demux:
  - Fix asf regression with broadcast streams.
  - MP4: Fix audio drop on seek.
  + Video Output:
  - Fix seek &amp; volume sliders overlapping with subtitles.
  - Fix delays when seeking with D3D11.
  + Text renderer: Improve freetype fonts outlining.
  + Misc: Fix GnuTLS support for Windows XP.
- Changes from version 3.0.14:
  + Core:
  - Fix double loading of slave input.
  - Fix an issue causing the auto-updater not to launch the new
    version installer.
- Add vlc-get-addr-by-ref-from-getConnectionEndpointAddress.patch:
  The maintainers of live555 changed connectionEndpointAddresss to
  getConnectionEndpointAddress, which now provides the address
  value by reference.
- Rebase vlc-srto_tsbpddelay.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1645531200">- Guard --enable-libplacebo configure parameter with is_opensuse:
  the buildrequires is also guarded the same way.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1645617600">- BuildRequires pkgconfig(smbclient) instead of smbclient-devel:
  smbclient-devel was merged into samba-devel, and we do not want
  to care for actual package names.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1646654400">- Update to version 3.0.17:
  + Core:
  * Fix a regression in parsing secondary source MRLs
  * Allow brackets in path part of URLs
  + Access:
  * Fix support for screen capture on macOS with avcapture
  * Fix closing of HTTP 1.x connections
  * Improve HTTP2 memory usage
  * Improve AVCapture module
  * Improve AudioCD support (audio/data mixed mode, musicbrainz)
  * Improve SMB compatibility by changing the read size
  * Several improvements on the SRT modules (including streamID)
  + Decoders/Packetizers:
  * Add support for DTS LBR
  * Fix some HEVC hardware decoding on Windows and crashes when aspect ratio changes
  * Fix hardware decoding for some AMD GPU drivers
  * Add support for new Fourcc for E-AC3, AV1, GeoVision
  * Fix crashes with VP9 streams
  * Fix styling issues with subs tx3g (mp4) tracks
  * Fix playback of live AV1 streams
  + Audio Output:
  * iOS/tvOS: add support for spatial audio
  * macOS: fix some channels ordering for &gt; 5.1 channels
  * Android: rework audio volume management
  + Video Output:
  * Fix a D3D11 crash when the stream changes aspect ratio
  + Demux:
  * Major overhaul of the adaptive streaming stack
  * Support for DAV video files
  * Add WebP image mapping
  * Fix missing audio start of Opus audio in MKV/WebM
  * Fix an infinite loop in MP4
  * Fix attachments extractions in ogg files
  * Support Uncompressed audio in mp4 (ISO/IEC 23003-5)
  * Fix some lip sync issue in rare MPEG-TS streams
  + Interface:
  * Qt/macOS: Fixup user provided URLs
  * Add safe area handling on macOS
  * Qt: improve preferences search
  * Qt: fix --no-mouse-events option
  + Misc:
  * Update YouTube script
  * Fix Icecast directory parsing which could lead to missing entries
  * Improve UPnP compatibility with some servers
- Drop vlc-srto_tsbpddelay.patch: fixed upstream.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1646913600">- Disable libnfs and soxr integration on suse_version &lt; 1500 (e.g
  SLE12).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1647691200">- Update to version 3.0.17.3:
  + This is a fixup release which fixes a regression that could
    cause a lack of audio for adaptive streaming playback. It is
    identical to 3.0.17.2 otherwise.
  + This updates contains various fixes and improvements:
  - Major adaptive streaming stack overhaul
  - Major codec updates
  - Many third party libraries update
  - Allow brackets in the path section of URLs
  - Better notch support for new macbooks
  - Add support for DAV video and Webp image formats
  - Improve AV1 live streaming support
  - Several SRT support improvements
  - Numerous crash fixes
  - Update youtube script
- Changes from version 3.0.17.2:
  + This is a fixup release which fixes youtube playback and
    contextual menus on integrated video for the Qt interface. It
    is identical to 3.0.17-1 otherwise.
- Changes from version 3.0.17-1:
  + This is a fixup release which bumps libflac to 1.3.4 in order
    to fix CVE-2020-0499 and CVE-2021-0561 on platforms for which
    we provide binary releases.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1650628800">- Update to version 3.0.17.4:
  + Service Discovery: Fix UPnP regression on Windows.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1653307200">- Add vlc-dav1d-1.0.patch: Fix build with dav1d 1.0. Upstream
  commits 2202c892 and d38ddd727.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1657108800">- Extend vlc-lua-5.3.patch: match upstream commit 0e0b070c26.
- Add 867.patch: support LUA 5.4 (boo#1200944).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1657713600">- Limit to Lua &lt; 5.4 (boo#1200944).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1659960000">- Also limit lua interpreter to &lt; 5.4 (boo#1200944).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1662552000">- Make vlc-vdpau supplement vlc, not vlc-noX: vdpau itself is based
  on top of the graphical stack.
- Move video_output/libegl_wl_plugin.so from vlc-noX to vlc: links
  GUI stack.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1667908800">- Limit to ffmpeg 4: we're also linking opencv3 which does not use
  ffmpeg 5.</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1668686400">- add vlc-caca-fix-to-0-99-beta20-version.patch: build with libcaca-0.99.beta20</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1669377600">- Update to version 3.0.18 (CVE-2022-41325, boo#1206142):
  + macOS: Fix audio device listing with non-latin names.
  + Misc: Fix rendering and performance issue with older GPUs.
  + Updated translations.
- Changes from version 3.0.18-rc2:
  + Codec/Demux:
  - Add support for Y16 chroma.
  - Fix build of gme plugin.
  + Lua:
  - Fix script for vocaroo.
  - Fix script for youtube to allow throttled playback.
  + Service Discovery: Fix UPnP regression on Windows.
  + Video Output: Fix video placement with caopengllayer.
  + Misc: Fix password search in kwallet module.
- Changes from version 3.0.18-rc:
  + Demux:
  - Major adaptive streaming update, notably for multiple
    timelies and webvtt.
  - Fix seeking with some fragmented MP4 files.
  - Add support for DVBSub inside MKV.
  - Fix some Flac files that could not be played.
  - Improve seeking in Ogg files.
  + Decoders:
  - Fix DxVA/D3D11 crashes on HEVC files with bogus references.
  - Fix libass storage size and crash.
  - Fix decoding errors on macOS hw decoding on some HEVC files.
  + Video Output:
  - Fix color regression with VAAPI/iOS and OpenGL output.
  - Fix some resizing issues with OpenGL on GLX/EGL/X11/XV.
  - Fix Direct3d9 texture stretching.
  - Fix 10-bit accelerated video filters on macOS.
  + Playlist: Avoid playlist liveloop on failed/tiny items
    (temporize EOS bursts).
  + Misc:
  - Misc fixes for the extension UI on macOS.
  - Improve SMBv1 and SMBv2 behaviours.
  - Improve FTP compatibility.
  - Support RISC-V.
  - Fix AVI muxing for Windows Media Player compatibility.
  - Fix seeking speed on macOS.
- Drop vlc-dav1d-1.0.patch and 867.patch: fixed upstream.
- Drop vlc-get-addr-by-ref-from-getConnectionEndpointAddress.patch:
  fixed upstream (commit 05445b74).
- Drop vlc-get-addr-by-ref-from-getConnectionEndpointAddress.patch:
  fixed upstream (commit b689202d).</changelog>
  <changelog author="Niklas Haas &lt;obs@haasn.xyz&gt;" date="1669377601">- Add vlc-libplacebo-5.patch: Backport fix for building with libplacebo v5</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1670846400">- Do not apply vlc.a52.patch if liba52 is &lt; 0.8.0
- Avoid ugly _FORTIFY_SOURCE redefinition warnings</changelog>
</package>
<package pkgid="27af8d3ca29af13cc7711e8283bddf86f3d3787d3729f75db95e1ab4fd49f31a" name="libvlccore9" arch="ppc64le">
  <version epoch="0" ver="3.0.18" rel="bp154.2.3.1"/>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1616760000">- Add vlc-gcc11.patch: Fix build using gcc11 (boo#1181918).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1616760001">- Guard post scriptlets to only run %{_libdir}/vlc/vlc-cache-gen if
  it already (or still, in case of uninstall) exists.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1620129600">- Update to version 3.0.13:
  + Demux:
  - Adaptive: fix artefacts in HLS streams with wrong profiles/levels
  - Fix regression on some MP4 files for the audio track
  - Fix MPGA and ADTS probing in TS files
  - Fix Flac inside AVI files
  - Fix VP9/Webm artefacts when seeking
  + Codec:
  - Support SSA text scaling
  - Fix rotation on Android rotation
  - Fix WebVTT subtitles that start at 00:00
  + Access:
  - Update libnfs to support NFSv4
  - Improve SMB2 integration
  - Fix Blu-ray files using Unicode names on Windows
  - Disable mcast lookups on Android for RTSP playback
  + Video Output: Rework the D3D11 rendering wait, to fix
    choppiness on display
  + Interfaces:
  - Fix VLC getting stuck on close on X11 (#21875)
  - Improve RTL on preferences on macOS
  - Add mousewheel horizontal axis control
  - Fix crash on exit on macOS
  - Fix sizing of the fullscreen controls on macOS
  + Misc:
  - Improve MIDI fonts search on Linux
  - Update Soundcloud, Youtube, liveleak
  - Fix compilation with GCC11
  - Fix input-slave option for subtitles
  + Updated translations.
- Drop vlc-gcc11.patch: fixed upstream.
- Extend vlc-srto_tsbpddelay.patch: allow srt &gt;= 1.3 for openSUSE.</changelog>
  <changelog author="Fusion Future &lt;qydwhotmail@gmail.com&gt;" date="1624104000">- Update to version 3.0.16:
  + Video Output: Fix a D3D11 crash on Windows 8/8.1.
  + Access: Fix RTSP server timeout handling.
  + Interfaces: macOS: Add touchbar support.
  + Misc: Multiple settings improvements.
- Changes from version 3.0.15:
  + Core: Add Opus &amp; Alac wave format mappings.
  + Access: Fix opening DVD folders with non-ascii characters.
  + Demux:
  - Fix asf regression with broadcast streams.
  - MP4: Fix audio drop on seek.
  + Video Output:
  - Fix seek &amp; volume sliders overlapping with subtitles.
  - Fix delays when seeking with D3D11.
  + Text renderer: Improve freetype fonts outlining.
  + Misc: Fix GnuTLS support for Windows XP.
- Changes from version 3.0.14:
  + Core:
  - Fix double loading of slave input.
  - Fix an issue causing the auto-updater not to launch the new
    version installer.
- Add vlc-get-addr-by-ref-from-getConnectionEndpointAddress.patch:
  The maintainers of live555 changed connectionEndpointAddresss to
  getConnectionEndpointAddress, which now provides the address
  value by reference.
- Rebase vlc-srto_tsbpddelay.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1645531200">- Guard --enable-libplacebo configure parameter with is_opensuse:
  the buildrequires is also guarded the same way.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1645617600">- BuildRequires pkgconfig(smbclient) instead of smbclient-devel:
  smbclient-devel was merged into samba-devel, and we do not want
  to care for actual package names.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1646654400">- Update to version 3.0.17:
  + Core:
  * Fix a regression in parsing secondary source MRLs
  * Allow brackets in path part of URLs
  + Access:
  * Fix support for screen capture on macOS with avcapture
  * Fix closing of HTTP 1.x connections
  * Improve HTTP2 memory usage
  * Improve AVCapture module
  * Improve AudioCD support (audio/data mixed mode, musicbrainz)
  * Improve SMB compatibility by changing the read size
  * Several improvements on the SRT modules (including streamID)
  + Decoders/Packetizers:
  * Add support for DTS LBR
  * Fix some HEVC hardware decoding on Windows and crashes when aspect ratio changes
  * Fix hardware decoding for some AMD GPU drivers
  * Add support for new Fourcc for E-AC3, AV1, GeoVision
  * Fix crashes with VP9 streams
  * Fix styling issues with subs tx3g (mp4) tracks
  * Fix playback of live AV1 streams
  + Audio Output:
  * iOS/tvOS: add support for spatial audio
  * macOS: fix some channels ordering for &gt; 5.1 channels
  * Android: rework audio volume management
  + Video Output:
  * Fix a D3D11 crash when the stream changes aspect ratio
  + Demux:
  * Major overhaul of the adaptive streaming stack
  * Support for DAV video files
  * Add WebP image mapping
  * Fix missing audio start of Opus audio in MKV/WebM
  * Fix an infinite loop in MP4
  * Fix attachments extractions in ogg files
  * Support Uncompressed audio in mp4 (ISO/IEC 23003-5)
  * Fix some lip sync issue in rare MPEG-TS streams
  + Interface:
  * Qt/macOS: Fixup user provided URLs
  * Add safe area handling on macOS
  * Qt: improve preferences search
  * Qt: fix --no-mouse-events option
  + Misc:
  * Update YouTube script
  * Fix Icecast directory parsing which could lead to missing entries
  * Improve UPnP compatibility with some servers
- Drop vlc-srto_tsbpddelay.patch: fixed upstream.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1646913600">- Disable libnfs and soxr integration on suse_version &lt; 1500 (e.g
  SLE12).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1647691200">- Update to version 3.0.17.3:
  + This is a fixup release which fixes a regression that could
    cause a lack of audio for adaptive streaming playback. It is
    identical to 3.0.17.2 otherwise.
  + This updates contains various fixes and improvements:
  - Major adaptive streaming stack overhaul
  - Major codec updates
  - Many third party libraries update
  - Allow brackets in the path section of URLs
  - Better notch support for new macbooks
  - Add support for DAV video and Webp image formats
  - Improve AV1 live streaming support
  - Several SRT support improvements
  - Numerous crash fixes
  - Update youtube script
- Changes from version 3.0.17.2:
  + This is a fixup release which fixes youtube playback and
    contextual menus on integrated video for the Qt interface. It
    is identical to 3.0.17-1 otherwise.
- Changes from version 3.0.17-1:
  + This is a fixup release which bumps libflac to 1.3.4 in order
    to fix CVE-2020-0499 and CVE-2021-0561 on platforms for which
    we provide binary releases.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1650628800">- Update to version 3.0.17.4:
  + Service Discovery: Fix UPnP regression on Windows.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1653307200">- Add vlc-dav1d-1.0.patch: Fix build with dav1d 1.0. Upstream
  commits 2202c892 and d38ddd727.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1657108800">- Extend vlc-lua-5.3.patch: match upstream commit 0e0b070c26.
- Add 867.patch: support LUA 5.4 (boo#1200944).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1657713600">- Limit to Lua &lt; 5.4 (boo#1200944).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1659960000">- Also limit lua interpreter to &lt; 5.4 (boo#1200944).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1662552000">- Make vlc-vdpau supplement vlc, not vlc-noX: vdpau itself is based
  on top of the graphical stack.
- Move video_output/libegl_wl_plugin.so from vlc-noX to vlc: links
  GUI stack.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1667908800">- Limit to ffmpeg 4: we're also linking opencv3 which does not use
  ffmpeg 5.</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1668686400">- add vlc-caca-fix-to-0-99-beta20-version.patch: build with libcaca-0.99.beta20</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1669377600">- Update to version 3.0.18 (CVE-2022-41325, boo#1206142):
  + macOS: Fix audio device listing with non-latin names.
  + Misc: Fix rendering and performance issue with older GPUs.
  + Updated translations.
- Changes from version 3.0.18-rc2:
  + Codec/Demux:
  - Add support for Y16 chroma.
  - Fix build of gme plugin.
  + Lua:
  - Fix script for vocaroo.
  - Fix script for youtube to allow throttled playback.
  + Service Discovery: Fix UPnP regression on Windows.
  + Video Output: Fix video placement with caopengllayer.
  + Misc: Fix password search in kwallet module.
- Changes from version 3.0.18-rc:
  + Demux:
  - Major adaptive streaming update, notably for multiple
    timelies and webvtt.
  - Fix seeking with some fragmented MP4 files.
  - Add support for DVBSub inside MKV.
  - Fix some Flac files that could not be played.
  - Improve seeking in Ogg files.
  + Decoders:
  - Fix DxVA/D3D11 crashes on HEVC files with bogus references.
  - Fix libass storage size and crash.
  - Fix decoding errors on macOS hw decoding on some HEVC files.
  + Video Output:
  - Fix color regression with VAAPI/iOS and OpenGL output.
  - Fix some resizing issues with OpenGL on GLX/EGL/X11/XV.
  - Fix Direct3d9 texture stretching.
  - Fix 10-bit accelerated video filters on macOS.
  + Playlist: Avoid playlist liveloop on failed/tiny items
    (temporize EOS bursts).
  + Misc:
  - Misc fixes for the extension UI on macOS.
  - Improve SMBv1 and SMBv2 behaviours.
  - Improve FTP compatibility.
  - Support RISC-V.
  - Fix AVI muxing for Windows Media Player compatibility.
  - Fix seeking speed on macOS.
- Drop vlc-dav1d-1.0.patch and 867.patch: fixed upstream.
- Drop vlc-get-addr-by-ref-from-getConnectionEndpointAddress.patch:
  fixed upstream (commit 05445b74).
- Drop vlc-get-addr-by-ref-from-getConnectionEndpointAddress.patch:
  fixed upstream (commit b689202d).</changelog>
  <changelog author="Niklas Haas &lt;obs@haasn.xyz&gt;" date="1669377601">- Add vlc-libplacebo-5.patch: Backport fix for building with libplacebo v5</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1670846400">- Do not apply vlc.a52.patch if liba52 is &lt; 0.8.0
- Avoid ugly _FORTIFY_SOURCE redefinition warnings</changelog>
</package>
<package pkgid="01c3e10099d77b33caa84caf8b90877584595f2a202081b4e322fa4a06f02d22" name="libvlccore9" arch="x86_64">
  <version epoch="0" ver="3.0.18" rel="bp154.2.3.1"/>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1616760000">- Add vlc-gcc11.patch: Fix build using gcc11 (boo#1181918).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1616760001">- Guard post scriptlets to only run %{_libdir}/vlc/vlc-cache-gen if
  it already (or still, in case of uninstall) exists.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1620129600">- Update to version 3.0.13:
  + Demux:
  - Adaptive: fix artefacts in HLS streams with wrong profiles/levels
  - Fix regression on some MP4 files for the audio track
  - Fix MPGA and ADTS probing in TS files
  - Fix Flac inside AVI files
  - Fix VP9/Webm artefacts when seeking
  + Codec:
  - Support SSA text scaling
  - Fix rotation on Android rotation
  - Fix WebVTT subtitles that start at 00:00
  + Access:
  - Update libnfs to support NFSv4
  - Improve SMB2 integration
  - Fix Blu-ray files using Unicode names on Windows
  - Disable mcast lookups on Android for RTSP playback
  + Video Output: Rework the D3D11 rendering wait, to fix
    choppiness on display
  + Interfaces:
  - Fix VLC getting stuck on close on X11 (#21875)
  - Improve RTL on preferences on macOS
  - Add mousewheel horizontal axis control
  - Fix crash on exit on macOS
  - Fix sizing of the fullscreen controls on macOS
  + Misc:
  - Improve MIDI fonts search on Linux
  - Update Soundcloud, Youtube, liveleak
  - Fix compilation with GCC11
  - Fix input-slave option for subtitles
  + Updated translations.
- Drop vlc-gcc11.patch: fixed upstream.
- Extend vlc-srto_tsbpddelay.patch: allow srt &gt;= 1.3 for openSUSE.</changelog>
  <changelog author="Fusion Future &lt;qydwhotmail@gmail.com&gt;" date="1624104000">- Update to version 3.0.16:
  + Video Output: Fix a D3D11 crash on Windows 8/8.1.
  + Access: Fix RTSP server timeout handling.
  + Interfaces: macOS: Add touchbar support.
  + Misc: Multiple settings improvements.
- Changes from version 3.0.15:
  + Core: Add Opus &amp; Alac wave format mappings.
  + Access: Fix opening DVD folders with non-ascii characters.
  + Demux:
  - Fix asf regression with broadcast streams.
  - MP4: Fix audio drop on seek.
  + Video Output:
  - Fix seek &amp; volume sliders overlapping with subtitles.
  - Fix delays when seeking with D3D11.
  + Text renderer: Improve freetype fonts outlining.
  + Misc: Fix GnuTLS support for Windows XP.
- Changes from version 3.0.14:
  + Core:
  - Fix double loading of slave input.
  - Fix an issue causing the auto-updater not to launch the new
    version installer.
- Add vlc-get-addr-by-ref-from-getConnectionEndpointAddress.patch:
  The maintainers of live555 changed connectionEndpointAddresss to
  getConnectionEndpointAddress, which now provides the address
  value by reference.
- Rebase vlc-srto_tsbpddelay.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1645531200">- Guard --enable-libplacebo configure parameter with is_opensuse:
  the buildrequires is also guarded the same way.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1645617600">- BuildRequires pkgconfig(smbclient) instead of smbclient-devel:
  smbclient-devel was merged into samba-devel, and we do not want
  to care for actual package names.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1646654400">- Update to version 3.0.17:
  + Core:
  * Fix a regression in parsing secondary source MRLs
  * Allow brackets in path part of URLs
  + Access:
  * Fix support for screen capture on macOS with avcapture
  * Fix closing of HTTP 1.x connections
  * Improve HTTP2 memory usage
  * Improve AVCapture module
  * Improve AudioCD support (audio/data mixed mode, musicbrainz)
  * Improve SMB compatibility by changing the read size
  * Several improvements on the SRT modules (including streamID)
  + Decoders/Packetizers:
  * Add support for DTS LBR
  * Fix some HEVC hardware decoding on Windows and crashes when aspect ratio changes
  * Fix hardware decoding for some AMD GPU drivers
  * Add support for new Fourcc for E-AC3, AV1, GeoVision
  * Fix crashes with VP9 streams
  * Fix styling issues with subs tx3g (mp4) tracks
  * Fix playback of live AV1 streams
  + Audio Output:
  * iOS/tvOS: add support for spatial audio
  * macOS: fix some channels ordering for &gt; 5.1 channels
  * Android: rework audio volume management
  + Video Output:
  * Fix a D3D11 crash when the stream changes aspect ratio
  + Demux:
  * Major overhaul of the adaptive streaming stack
  * Support for DAV video files
  * Add WebP image mapping
  * Fix missing audio start of Opus audio in MKV/WebM
  * Fix an infinite loop in MP4
  * Fix attachments extractions in ogg files
  * Support Uncompressed audio in mp4 (ISO/IEC 23003-5)
  * Fix some lip sync issue in rare MPEG-TS streams
  + Interface:
  * Qt/macOS: Fixup user provided URLs
  * Add safe area handling on macOS
  * Qt: improve preferences search
  * Qt: fix --no-mouse-events option
  + Misc:
  * Update YouTube script
  * Fix Icecast directory parsing which could lead to missing entries
  * Improve UPnP compatibility with some servers
- Drop vlc-srto_tsbpddelay.patch: fixed upstream.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1646913600">- Disable libnfs and soxr integration on suse_version &lt; 1500 (e.g
  SLE12).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1647691200">- Update to version 3.0.17.3:
  + This is a fixup release which fixes a regression that could
    cause a lack of audio for adaptive streaming playback. It is
    identical to 3.0.17.2 otherwise.
  + This updates contains various fixes and improvements:
  - Major adaptive streaming stack overhaul
  - Major codec updates
  - Many third party libraries update
  - Allow brackets in the path section of URLs
  - Better notch support for new macbooks
  - Add support for DAV video and Webp image formats
  - Improve AV1 live streaming support
  - Several SRT support improvements
  - Numerous crash fixes
  - Update youtube script
- Changes from version 3.0.17.2:
  + This is a fixup release which fixes youtube playback and
    contextual menus on integrated video for the Qt interface. It
    is identical to 3.0.17-1 otherwise.
- Changes from version 3.0.17-1:
  + This is a fixup release which bumps libflac to 1.3.4 in order
    to fix CVE-2020-0499 and CVE-2021-0561 on platforms for which
    we provide binary releases.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1650628800">- Update to version 3.0.17.4:
  + Service Discovery: Fix UPnP regression on Windows.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1653307200">- Add vlc-dav1d-1.0.patch: Fix build with dav1d 1.0. Upstream
  commits 2202c892 and d38ddd727.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1657108800">- Extend vlc-lua-5.3.patch: match upstream commit 0e0b070c26.
- Add 867.patch: support LUA 5.4 (boo#1200944).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1657713600">- Limit to Lua &lt; 5.4 (boo#1200944).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1659960000">- Also limit lua interpreter to &lt; 5.4 (boo#1200944).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1662552000">- Make vlc-vdpau supplement vlc, not vlc-noX: vdpau itself is based
  on top of the graphical stack.
- Move video_output/libegl_wl_plugin.so from vlc-noX to vlc: links
  GUI stack.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1667908800">- Limit to ffmpeg 4: we're also linking opencv3 which does not use
  ffmpeg 5.</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1668686400">- add vlc-caca-fix-to-0-99-beta20-version.patch: build with libcaca-0.99.beta20</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1669377600">- Update to version 3.0.18 (CVE-2022-41325, boo#1206142):
  + macOS: Fix audio device listing with non-latin names.
  + Misc: Fix rendering and performance issue with older GPUs.
  + Updated translations.
- Changes from version 3.0.18-rc2:
  + Codec/Demux:
  - Add support for Y16 chroma.
  - Fix build of gme plugin.
  + Lua:
  - Fix script for vocaroo.
  - Fix script for youtube to allow throttled playback.
  + Service Discovery: Fix UPnP regression on Windows.
  + Video Output: Fix video placement with caopengllayer.
  + Misc: Fix password search in kwallet module.
- Changes from version 3.0.18-rc:
  + Demux:
  - Major adaptive streaming update, notably for multiple
    timelies and webvtt.
  - Fix seeking with some fragmented MP4 files.
  - Add support for DVBSub inside MKV.
  - Fix some Flac files that could not be played.
  - Improve seeking in Ogg files.
  + Decoders:
  - Fix DxVA/D3D11 crashes on HEVC files with bogus references.
  - Fix libass storage size and crash.
  - Fix decoding errors on macOS hw decoding on some HEVC files.
  + Video Output:
  - Fix color regression with VAAPI/iOS and OpenGL output.
  - Fix some resizing issues with OpenGL on GLX/EGL/X11/XV.
  - Fix Direct3d9 texture stretching.
  - Fix 10-bit accelerated video filters on macOS.
  + Playlist: Avoid playlist liveloop on failed/tiny items
    (temporize EOS bursts).
  + Misc:
  - Misc fixes for the extension UI on macOS.
  - Improve SMBv1 and SMBv2 behaviours.
  - Improve FTP compatibility.
  - Support RISC-V.
  - Fix AVI muxing for Windows Media Player compatibility.
  - Fix seeking speed on macOS.
- Drop vlc-dav1d-1.0.patch and 867.patch: fixed upstream.
- Drop vlc-get-addr-by-ref-from-getConnectionEndpointAddress.patch:
  fixed upstream (commit 05445b74).
- Drop vlc-get-addr-by-ref-from-getConnectionEndpointAddress.patch:
  fixed upstream (commit b689202d).</changelog>
  <changelog author="Niklas Haas &lt;obs@haasn.xyz&gt;" date="1669377601">- Add vlc-libplacebo-5.patch: Backport fix for building with libplacebo v5</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1670846400">- Do not apply vlc.a52.patch if liba52 is &lt; 0.8.0
- Avoid ugly _FORTIFY_SOURCE redefinition warnings</changelog>
</package>
<package pkgid="edf8d01ca68ee1cf5650e41140fc60c4a6f11f45bb8988828eea2f66ec33aae2" name="libvmaf1" arch="aarch64">
  <version epoch="0" ver="2.3.1" rel="bp154.2.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1602936000">- Initial package (version 1.5.3) for build.opensuse.org
- Add 0001-build-unbreak-x86-builds.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1603108800">- Add missing BuildRequires: pkg-config. This is still needed
  for rpm to pick up .pc and generate pkgconfig() symbols.</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1610020800">- Update to 2.1.0
  * New features:
  - Per-model feature overloading via new API
    vmaf_model_feature_overload().
  - Multiple unique configurations of the same feature extractor
    may be registered run at the same time.
  - --aom_ctc v1.0 preset, encompassing all metrics specified by
    the AOM CTC.
- Changes from 2.0.0
  * New features:
  - Add PSNR-HVS and CIEDE2000 metrics.
  - ci/actions: upload linux/macos artifacts (#738)
  - libvmaf/feature: deprecate daala_ssim (#735)
  - libvmaf: remove support for pkl models
  - libvmaf/psnr: rewrite using integer types, 2x speedup
  - vmaf: if no model is specified, enable v0.6.1 by default (#730)
  - libvmaf/x86: add AVX2/AVX-512 optimizations for adm, vif and
    motion
  - ci/actions: add xxd to build dependencies for Windows
  - libvmaf: add support for built-in models
  - libvmaf/integer_vif: use symmetrical mirroring on edges
  - Fix log2 by replacing log2f_approx with log2f
  - libvmaf_rc: provide a backwards compatible compute_vmaf(),
    link vmafossexec with libvmaf
  - libvmaf: add framework support for json models
  - libvmaf/libsvm: update libsvm to version 324
  - libvmaf/motion: add motion_force_zero to motion fex
  - return sha1 if Asset string is longer than 255
  - Add CID/iCID Matlab source code
  - build: unbreak x86 builds (Fixes: #374)
  - Add 12bit and 16bit support for python YUV reader; add tests.
  - Add PypsnrFeatureExtractor
  - Add processes to FeatureAssembler. (#662)
  * Fixed bugs:
  - fix motion flush for single frame input
  - Fixing the perf_metric for a single entry list input
- Drop 0001-build-unbreak-x86-builds.patch, because now in upstream.
- Remove data subpackage because models now build in.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1615204800">- update to 2.1.1:
  * Fixes a SSIM/MS-SSIM precision bug where a lossless comparison did not
    always result in a perfect 1.0 score. (#796).
  * Adds feature extractor options to clip the dB scores for both PSNR/SSIM.
  - -aom_ctc v1.0 has been updated to use these clipping options according to
    the AOM CTC. (#802).
- disable LTO build (fails at least since 2.1.0)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1625227200">- Update to release 2.2.0
  * Fixed a CIEDE-2000 precision issue, where cross-platform
    mismatches were seen.
  * Added function vmaf_feature_dictionary_free().</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Update to release 2.2.1
  * Fix a race condition in vmaf_thread_pool_wait().
  * Avoid chroma resampling for 420mpeg2 y4m input.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1634385600">- Update to release 2.3.0
  * Added Contrast Aware Multiscale Banding Index.
  * Added pixel format VMAF_PIX_FMT_YUV400P.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1649678400">- Update to release 2.3.1
  * CAMBI extensions: full reference, PQ eotf, up to 16 bit-depth
    support, max_log_contrast parameter.
  * CAMBI: option to output heatmaps.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1667995200">- Drop recommends on vmaf-data, the package is gone since vmaf 2.x.
  Build model data into the library, since `make install` does not
  do anything by default. [boo#1189023]</changelog>
</package>
<package pkgid="fe5f235f10df44f1859aebf22612463ca535779f0238d258799e176bc4ecc833" name="libvmaf1" arch="i586">
  <version epoch="0" ver="2.3.1" rel="bp154.2.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1602936000">- Initial package (version 1.5.3) for build.opensuse.org
- Add 0001-build-unbreak-x86-builds.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1603108800">- Add missing BuildRequires: pkg-config. This is still needed
  for rpm to pick up .pc and generate pkgconfig() symbols.</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1610020800">- Update to 2.1.0
  * New features:
  - Per-model feature overloading via new API
    vmaf_model_feature_overload().
  - Multiple unique configurations of the same feature extractor
    may be registered run at the same time.
  - --aom_ctc v1.0 preset, encompassing all metrics specified by
    the AOM CTC.
- Changes from 2.0.0
  * New features:
  - Add PSNR-HVS and CIEDE2000 metrics.
  - ci/actions: upload linux/macos artifacts (#738)
  - libvmaf/feature: deprecate daala_ssim (#735)
  - libvmaf: remove support for pkl models
  - libvmaf/psnr: rewrite using integer types, 2x speedup
  - vmaf: if no model is specified, enable v0.6.1 by default (#730)
  - libvmaf/x86: add AVX2/AVX-512 optimizations for adm, vif and
    motion
  - ci/actions: add xxd to build dependencies for Windows
  - libvmaf: add support for built-in models
  - libvmaf/integer_vif: use symmetrical mirroring on edges
  - Fix log2 by replacing log2f_approx with log2f
  - libvmaf_rc: provide a backwards compatible compute_vmaf(),
    link vmafossexec with libvmaf
  - libvmaf: add framework support for json models
  - libvmaf/libsvm: update libsvm to version 324
  - libvmaf/motion: add motion_force_zero to motion fex
  - return sha1 if Asset string is longer than 255
  - Add CID/iCID Matlab source code
  - build: unbreak x86 builds (Fixes: #374)
  - Add 12bit and 16bit support for python YUV reader; add tests.
  - Add PypsnrFeatureExtractor
  - Add processes to FeatureAssembler. (#662)
  * Fixed bugs:
  - fix motion flush for single frame input
  - Fixing the perf_metric for a single entry list input
- Drop 0001-build-unbreak-x86-builds.patch, because now in upstream.
- Remove data subpackage because models now build in.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1615204800">- update to 2.1.1:
  * Fixes a SSIM/MS-SSIM precision bug where a lossless comparison did not
    always result in a perfect 1.0 score. (#796).
  * Adds feature extractor options to clip the dB scores for both PSNR/SSIM.
  - -aom_ctc v1.0 has been updated to use these clipping options according to
    the AOM CTC. (#802).
- disable LTO build (fails at least since 2.1.0)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1625227200">- Update to release 2.2.0
  * Fixed a CIEDE-2000 precision issue, where cross-platform
    mismatches were seen.
  * Added function vmaf_feature_dictionary_free().</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Update to release 2.2.1
  * Fix a race condition in vmaf_thread_pool_wait().
  * Avoid chroma resampling for 420mpeg2 y4m input.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1634385600">- Update to release 2.3.0
  * Added Contrast Aware Multiscale Banding Index.
  * Added pixel format VMAF_PIX_FMT_YUV400P.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1649678400">- Update to release 2.3.1
  * CAMBI extensions: full reference, PQ eotf, up to 16 bit-depth
    support, max_log_contrast parameter.
  * CAMBI: option to output heatmaps.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1667995200">- Drop recommends on vmaf-data, the package is gone since vmaf 2.x.
  Build model data into the library, since `make install` does not
  do anything by default. [boo#1189023]</changelog>
</package>
<package pkgid="70900ade51ae8f877e96e2c1bd1ed87d76ce679a5a3647404d62cd759d142789" name="libvmaf1" arch="ppc64le">
  <version epoch="0" ver="2.3.1" rel="bp154.2.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1602936000">- Initial package (version 1.5.3) for build.opensuse.org
- Add 0001-build-unbreak-x86-builds.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1603108800">- Add missing BuildRequires: pkg-config. This is still needed
  for rpm to pick up .pc and generate pkgconfig() symbols.</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1610020800">- Update to 2.1.0
  * New features:
  - Per-model feature overloading via new API
    vmaf_model_feature_overload().
  - Multiple unique configurations of the same feature extractor
    may be registered run at the same time.
  - --aom_ctc v1.0 preset, encompassing all metrics specified by
    the AOM CTC.
- Changes from 2.0.0
  * New features:
  - Add PSNR-HVS and CIEDE2000 metrics.
  - ci/actions: upload linux/macos artifacts (#738)
  - libvmaf/feature: deprecate daala_ssim (#735)
  - libvmaf: remove support for pkl models
  - libvmaf/psnr: rewrite using integer types, 2x speedup
  - vmaf: if no model is specified, enable v0.6.1 by default (#730)
  - libvmaf/x86: add AVX2/AVX-512 optimizations for adm, vif and
    motion
  - ci/actions: add xxd to build dependencies for Windows
  - libvmaf: add support for built-in models
  - libvmaf/integer_vif: use symmetrical mirroring on edges
  - Fix log2 by replacing log2f_approx with log2f
  - libvmaf_rc: provide a backwards compatible compute_vmaf(),
    link vmafossexec with libvmaf
  - libvmaf: add framework support for json models
  - libvmaf/libsvm: update libsvm to version 324
  - libvmaf/motion: add motion_force_zero to motion fex
  - return sha1 if Asset string is longer than 255
  - Add CID/iCID Matlab source code
  - build: unbreak x86 builds (Fixes: #374)
  - Add 12bit and 16bit support for python YUV reader; add tests.
  - Add PypsnrFeatureExtractor
  - Add processes to FeatureAssembler. (#662)
  * Fixed bugs:
  - fix motion flush for single frame input
  - Fixing the perf_metric for a single entry list input
- Drop 0001-build-unbreak-x86-builds.patch, because now in upstream.
- Remove data subpackage because models now build in.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1615204800">- update to 2.1.1:
  * Fixes a SSIM/MS-SSIM precision bug where a lossless comparison did not
    always result in a perfect 1.0 score. (#796).
  * Adds feature extractor options to clip the dB scores for both PSNR/SSIM.
  - -aom_ctc v1.0 has been updated to use these clipping options according to
    the AOM CTC. (#802).
- disable LTO build (fails at least since 2.1.0)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1625227200">- Update to release 2.2.0
  * Fixed a CIEDE-2000 precision issue, where cross-platform
    mismatches were seen.
  * Added function vmaf_feature_dictionary_free().</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Update to release 2.2.1
  * Fix a race condition in vmaf_thread_pool_wait().
  * Avoid chroma resampling for 420mpeg2 y4m input.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1634385600">- Update to release 2.3.0
  * Added Contrast Aware Multiscale Banding Index.
  * Added pixel format VMAF_PIX_FMT_YUV400P.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1649678400">- Update to release 2.3.1
  * CAMBI extensions: full reference, PQ eotf, up to 16 bit-depth
    support, max_log_contrast parameter.
  * CAMBI: option to output heatmaps.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1667995200">- Drop recommends on vmaf-data, the package is gone since vmaf 2.x.
  Build model data into the library, since `make install` does not
  do anything by default. [boo#1189023]</changelog>
</package>
<package pkgid="668c232a5b0899a3532efb0f68fdb42459d710eea903d37a2152be3d0518bad8" name="libvmaf1" arch="s390x">
  <version epoch="0" ver="2.3.1" rel="bp154.2.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1602936000">- Initial package (version 1.5.3) for build.opensuse.org
- Add 0001-build-unbreak-x86-builds.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1603108800">- Add missing BuildRequires: pkg-config. This is still needed
  for rpm to pick up .pc and generate pkgconfig() symbols.</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1610020800">- Update to 2.1.0
  * New features:
  - Per-model feature overloading via new API
    vmaf_model_feature_overload().
  - Multiple unique configurations of the same feature extractor
    may be registered run at the same time.
  - --aom_ctc v1.0 preset, encompassing all metrics specified by
    the AOM CTC.
- Changes from 2.0.0
  * New features:
  - Add PSNR-HVS and CIEDE2000 metrics.
  - ci/actions: upload linux/macos artifacts (#738)
  - libvmaf/feature: deprecate daala_ssim (#735)
  - libvmaf: remove support for pkl models
  - libvmaf/psnr: rewrite using integer types, 2x speedup
  - vmaf: if no model is specified, enable v0.6.1 by default (#730)
  - libvmaf/x86: add AVX2/AVX-512 optimizations for adm, vif and
    motion
  - ci/actions: add xxd to build dependencies for Windows
  - libvmaf: add support for built-in models
  - libvmaf/integer_vif: use symmetrical mirroring on edges
  - Fix log2 by replacing log2f_approx with log2f
  - libvmaf_rc: provide a backwards compatible compute_vmaf(),
    link vmafossexec with libvmaf
  - libvmaf: add framework support for json models
  - libvmaf/libsvm: update libsvm to version 324
  - libvmaf/motion: add motion_force_zero to motion fex
  - return sha1 if Asset string is longer than 255
  - Add CID/iCID Matlab source code
  - build: unbreak x86 builds (Fixes: #374)
  - Add 12bit and 16bit support for python YUV reader; add tests.
  - Add PypsnrFeatureExtractor
  - Add processes to FeatureAssembler. (#662)
  * Fixed bugs:
  - fix motion flush for single frame input
  - Fixing the perf_metric for a single entry list input
- Drop 0001-build-unbreak-x86-builds.patch, because now in upstream.
- Remove data subpackage because models now build in.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1615204800">- update to 2.1.1:
  * Fixes a SSIM/MS-SSIM precision bug where a lossless comparison did not
    always result in a perfect 1.0 score. (#796).
  * Adds feature extractor options to clip the dB scores for both PSNR/SSIM.
  - -aom_ctc v1.0 has been updated to use these clipping options according to
    the AOM CTC. (#802).
- disable LTO build (fails at least since 2.1.0)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1625227200">- Update to release 2.2.0
  * Fixed a CIEDE-2000 precision issue, where cross-platform
    mismatches were seen.
  * Added function vmaf_feature_dictionary_free().</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Update to release 2.2.1
  * Fix a race condition in vmaf_thread_pool_wait().
  * Avoid chroma resampling for 420mpeg2 y4m input.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1634385600">- Update to release 2.3.0
  * Added Contrast Aware Multiscale Banding Index.
  * Added pixel format VMAF_PIX_FMT_YUV400P.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1649678400">- Update to release 2.3.1
  * CAMBI extensions: full reference, PQ eotf, up to 16 bit-depth
    support, max_log_contrast parameter.
  * CAMBI: option to output heatmaps.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1667995200">- Drop recommends on vmaf-data, the package is gone since vmaf 2.x.
  Build model data into the library, since `make install` does not
  do anything by default. [boo#1189023]</changelog>
</package>
<package pkgid="b8159ad814e0ff2135082c11d385114b035f12c308ffc8db81d26dcf371ef3eb" name="libvmaf1" arch="x86_64">
  <version epoch="0" ver="2.3.1" rel="bp154.2.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1602936000">- Initial package (version 1.5.3) for build.opensuse.org
- Add 0001-build-unbreak-x86-builds.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1603108800">- Add missing BuildRequires: pkg-config. This is still needed
  for rpm to pick up .pc and generate pkgconfig() symbols.</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1610020800">- Update to 2.1.0
  * New features:
  - Per-model feature overloading via new API
    vmaf_model_feature_overload().
  - Multiple unique configurations of the same feature extractor
    may be registered run at the same time.
  - --aom_ctc v1.0 preset, encompassing all metrics specified by
    the AOM CTC.
- Changes from 2.0.0
  * New features:
  - Add PSNR-HVS and CIEDE2000 metrics.
  - ci/actions: upload linux/macos artifacts (#738)
  - libvmaf/feature: deprecate daala_ssim (#735)
  - libvmaf: remove support for pkl models
  - libvmaf/psnr: rewrite using integer types, 2x speedup
  - vmaf: if no model is specified, enable v0.6.1 by default (#730)
  - libvmaf/x86: add AVX2/AVX-512 optimizations for adm, vif and
    motion
  - ci/actions: add xxd to build dependencies for Windows
  - libvmaf: add support for built-in models
  - libvmaf/integer_vif: use symmetrical mirroring on edges
  - Fix log2 by replacing log2f_approx with log2f
  - libvmaf_rc: provide a backwards compatible compute_vmaf(),
    link vmafossexec with libvmaf
  - libvmaf: add framework support for json models
  - libvmaf/libsvm: update libsvm to version 324
  - libvmaf/motion: add motion_force_zero to motion fex
  - return sha1 if Asset string is longer than 255
  - Add CID/iCID Matlab source code
  - build: unbreak x86 builds (Fixes: #374)
  - Add 12bit and 16bit support for python YUV reader; add tests.
  - Add PypsnrFeatureExtractor
  - Add processes to FeatureAssembler. (#662)
  * Fixed bugs:
  - fix motion flush for single frame input
  - Fixing the perf_metric for a single entry list input
- Drop 0001-build-unbreak-x86-builds.patch, because now in upstream.
- Remove data subpackage because models now build in.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1615204800">- update to 2.1.1:
  * Fixes a SSIM/MS-SSIM precision bug where a lossless comparison did not
    always result in a perfect 1.0 score. (#796).
  * Adds feature extractor options to clip the dB scores for both PSNR/SSIM.
  - -aom_ctc v1.0 has been updated to use these clipping options according to
    the AOM CTC. (#802).
- disable LTO build (fails at least since 2.1.0)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1625227200">- Update to release 2.2.0
  * Fixed a CIEDE-2000 precision issue, where cross-platform
    mismatches were seen.
  * Added function vmaf_feature_dictionary_free().</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Update to release 2.2.1
  * Fix a race condition in vmaf_thread_pool_wait().
  * Avoid chroma resampling for 420mpeg2 y4m input.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1634385600">- Update to release 2.3.0
  * Added Contrast Aware Multiscale Banding Index.
  * Added pixel format VMAF_PIX_FMT_YUV400P.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1649678400">- Update to release 2.3.1
  * CAMBI extensions: full reference, PQ eotf, up to 16 bit-depth
    support, max_log_contrast parameter.
  * CAMBI: option to output heatmaps.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1667995200">- Drop recommends on vmaf-data, the package is gone since vmaf 2.x.
  Build model data into the library, since `make install` does not
  do anything by default. [boo#1189023]</changelog>
</package>
<package pkgid="5856e0212fd2fc914792e94751e6418fc881564f6d88c7accaa6e692ed6b4844" name="libvmaf1-32bit" arch="x86_64">
  <version epoch="0" ver="2.3.1" rel="bp154.2.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1602936000">- Initial package (version 1.5.3) for build.opensuse.org
- Add 0001-build-unbreak-x86-builds.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1603108800">- Add missing BuildRequires: pkg-config. This is still needed
  for rpm to pick up .pc and generate pkgconfig() symbols.</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1610020800">- Update to 2.1.0
  * New features:
  - Per-model feature overloading via new API
    vmaf_model_feature_overload().
  - Multiple unique configurations of the same feature extractor
    may be registered run at the same time.
  - --aom_ctc v1.0 preset, encompassing all metrics specified by
    the AOM CTC.
- Changes from 2.0.0
  * New features:
  - Add PSNR-HVS and CIEDE2000 metrics.
  - ci/actions: upload linux/macos artifacts (#738)
  - libvmaf/feature: deprecate daala_ssim (#735)
  - libvmaf: remove support for pkl models
  - libvmaf/psnr: rewrite using integer types, 2x speedup
  - vmaf: if no model is specified, enable v0.6.1 by default (#730)
  - libvmaf/x86: add AVX2/AVX-512 optimizations for adm, vif and
    motion
  - ci/actions: add xxd to build dependencies for Windows
  - libvmaf: add support for built-in models
  - libvmaf/integer_vif: use symmetrical mirroring on edges
  - Fix log2 by replacing log2f_approx with log2f
  - libvmaf_rc: provide a backwards compatible compute_vmaf(),
    link vmafossexec with libvmaf
  - libvmaf: add framework support for json models
  - libvmaf/libsvm: update libsvm to version 324
  - libvmaf/motion: add motion_force_zero to motion fex
  - return sha1 if Asset string is longer than 255
  - Add CID/iCID Matlab source code
  - build: unbreak x86 builds (Fixes: #374)
  - Add 12bit and 16bit support for python YUV reader; add tests.
  - Add PypsnrFeatureExtractor
  - Add processes to FeatureAssembler. (#662)
  * Fixed bugs:
  - fix motion flush for single frame input
  - Fixing the perf_metric for a single entry list input
- Drop 0001-build-unbreak-x86-builds.patch, because now in upstream.
- Remove data subpackage because models now build in.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1615204800">- update to 2.1.1:
  * Fixes a SSIM/MS-SSIM precision bug where a lossless comparison did not
    always result in a perfect 1.0 score. (#796).
  * Adds feature extractor options to clip the dB scores for both PSNR/SSIM.
  - -aom_ctc v1.0 has been updated to use these clipping options according to
    the AOM CTC. (#802).
- disable LTO build (fails at least since 2.1.0)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1625227200">- Update to release 2.2.0
  * Fixed a CIEDE-2000 precision issue, where cross-platform
    mismatches were seen.
  * Added function vmaf_feature_dictionary_free().</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Update to release 2.2.1
  * Fix a race condition in vmaf_thread_pool_wait().
  * Avoid chroma resampling for 420mpeg2 y4m input.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1634385600">- Update to release 2.3.0
  * Added Contrast Aware Multiscale Banding Index.
  * Added pixel format VMAF_PIX_FMT_YUV400P.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1649678400">- Update to release 2.3.1
  * CAMBI extensions: full reference, PQ eotf, up to 16 bit-depth
    support, max_log_contrast parameter.
  * CAMBI: option to output heatmaps.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1667995200">- Drop recommends on vmaf-data, the package is gone since vmaf 2.x.
  Build model data into the library, since `make install` does not
  do anything by default. [boo#1189023]</changelog>
</package>
<package pkgid="8d4ddc1c0c7164d032a1f702115f765c1c816d368e1079d24c6d7e3b7630c0a0" name="libvmaf1-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="2.3.1" rel="bp154.2.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1602936000">- Initial package (version 1.5.3) for build.opensuse.org
- Add 0001-build-unbreak-x86-builds.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1603108800">- Add missing BuildRequires: pkg-config. This is still needed
  for rpm to pick up .pc and generate pkgconfig() symbols.</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1610020800">- Update to 2.1.0
  * New features:
  - Per-model feature overloading via new API
    vmaf_model_feature_overload().
  - Multiple unique configurations of the same feature extractor
    may be registered run at the same time.
  - --aom_ctc v1.0 preset, encompassing all metrics specified by
    the AOM CTC.
- Changes from 2.0.0
  * New features:
  - Add PSNR-HVS and CIEDE2000 metrics.
  - ci/actions: upload linux/macos artifacts (#738)
  - libvmaf/feature: deprecate daala_ssim (#735)
  - libvmaf: remove support for pkl models
  - libvmaf/psnr: rewrite using integer types, 2x speedup
  - vmaf: if no model is specified, enable v0.6.1 by default (#730)
  - libvmaf/x86: add AVX2/AVX-512 optimizations for adm, vif and
    motion
  - ci/actions: add xxd to build dependencies for Windows
  - libvmaf: add support for built-in models
  - libvmaf/integer_vif: use symmetrical mirroring on edges
  - Fix log2 by replacing log2f_approx with log2f
  - libvmaf_rc: provide a backwards compatible compute_vmaf(),
    link vmafossexec with libvmaf
  - libvmaf: add framework support for json models
  - libvmaf/libsvm: update libsvm to version 324
  - libvmaf/motion: add motion_force_zero to motion fex
  - return sha1 if Asset string is longer than 255
  - Add CID/iCID Matlab source code
  - build: unbreak x86 builds (Fixes: #374)
  - Add 12bit and 16bit support for python YUV reader; add tests.
  - Add PypsnrFeatureExtractor
  - Add processes to FeatureAssembler. (#662)
  * Fixed bugs:
  - fix motion flush for single frame input
  - Fixing the perf_metric for a single entry list input
- Drop 0001-build-unbreak-x86-builds.patch, because now in upstream.
- Remove data subpackage because models now build in.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1615204800">- update to 2.1.1:
  * Fixes a SSIM/MS-SSIM precision bug where a lossless comparison did not
    always result in a perfect 1.0 score. (#796).
  * Adds feature extractor options to clip the dB scores for both PSNR/SSIM.
  - -aom_ctc v1.0 has been updated to use these clipping options according to
    the AOM CTC. (#802).
- disable LTO build (fails at least since 2.1.0)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1625227200">- Update to release 2.2.0
  * Fixed a CIEDE-2000 precision issue, where cross-platform
    mismatches were seen.
  * Added function vmaf_feature_dictionary_free().</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Update to release 2.2.1
  * Fix a race condition in vmaf_thread_pool_wait().
  * Avoid chroma resampling for 420mpeg2 y4m input.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1634385600">- Update to release 2.3.0
  * Added Contrast Aware Multiscale Banding Index.
  * Added pixel format VMAF_PIX_FMT_YUV400P.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1649678400">- Update to release 2.3.1
  * CAMBI extensions: full reference, PQ eotf, up to 16 bit-depth
    support, max_log_contrast parameter.
  * CAMBI: option to output heatmaps.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1667995200">- Drop recommends on vmaf-data, the package is gone since vmaf 2.x.
  Build model data into the library, since `make install` does not
  do anything by default. [boo#1189023]</changelog>
</package>
<package pkgid="2ba7f7d2114ce9b1fb300cd7bebc8ec48333f7fcc5e6efa085ff9669ceb5ef70" name="libwind0" arch="aarch64">
  <version epoch="0" ver="7.8.0" rel="bp154.2.4.1"/>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1440936000">- Initial package, version 1.6rc2
- Added patch heimdal-version-script-client.map.patch to add file
  version-script-client.map (File is present in git for tag 1.6rc2
  but missing in tarball).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441108800">- Some changes in spec file to enable build for SLES.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441195200">- Added Conflicts tags to spec file because devel package conflicts
  with krb5-devel and krb5-mini-devel.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441454400">- Added a patched instead of the original tarball because only
  shared libraries will be build and source files of these (not to
  be build) programs have problematic licenses.
- Added script heimdal-patch-source.sh to sources.
- Added patch heimdal-patched.diff that fixes configure.ac and
  several Makefile.am files to successfully build patched source.
- Removed unneeded dependencies in spec file for build.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1483790400">- Update to version 7.1.0
- Removed heimdal-version-script-client.map.patch, fixed upstream.
- Fixed heimdal-patched.diff.
- Unfortunately there is no updated changelog file in tarball,
  changes can be seen in source code version control systems
  history log.</changelog>
  <changelog author="jengelh@inai.de" date="1486036800">- Summary and RPM group update. Do a direct call to ldconfig
  where possible.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1497528000">- Update to version 7.3.0
  - Security
    + Fix transit path validation. Commit f469fc6 (2010-10-02)
    inadvertently caused the previous hop realm to not be added
    to the transit path of issued tickets. This may, in some
    cases, enable bypass of capath policy in Heimdal versions 1.5
    through 7.2.
    Note, this may break sites that rely on the bug. With the bug
    some incomplete [capaths] worked, that should not have.
    These may now break authentication in some cross-realm
    configurations. (CVE-2017-6594)
- Version 7.2.0
  - Bug fixes
    + Portability improvements.
    + More strict parsing of encoded URI components in HTTP KDC.
    + Fixed memory leak in malloc error recovery in NTLM GSSAPI
    mechanism.
    + Avoid overly specific CPU info in krb5-config in aid of
    reproducible builds.
    + Don't do AFS string-to-key tests when feature is disabled.
    + Skip mdb_stat test when the command is not available.
    + Windows: update SHA2 timestamp server.
    + hdb: add missing export
    hdb_generate_key_set_password_with_ks_tuple.
    + Fix signature of hdb_generate_key_set_password().
    + Windows: enable KX509 support in the KDC.
    + kdc: fix kx509 service principal match.
    + iprop: handle case where master sends nothing new.
    + ipropd-slave: fix incorrect error codes.
    + Allow choice of sqlite for HDB pref.
    + check-iprop: don't fail to kill daemons.
    + roken: pidfile -&gt; rk_pidfile.
    + kdc: _kdc_do_kx509 fix use after free error.
    + Do not detect x32 as 64-bit platform.
    + No sys/ttydefaults.h on CYGWIN.
    + Fix check-iprop races.
    + roken_detach_prep() close pipe.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1501761600">- Update to version 7.4.0
  - Security
  - Fix CVE-2017-11103: Orpheus' Lyre KDC-REP service name
    validation.
    This is a critical vulnerability.
    In _krb5_extract_ticket() the KDC-REP service name must be
    obtained from encrypted version stored in 'enc_part' instead
    of the unencrypted version stored in 'ticket'.
    Use of the unecrypted version provides an opportunity for
    successful server impersonation and other attacks.
    Identified by Jeffrey Altman, Viktor Duchovni and
    Nico Williams.
    See https://www.orpheus-lyre.info/ for more details.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1512648000">- Added Avoid_NULL_structure_pointer_member_dereference.patch,
  fixes (bsc#1071675).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1514548800">- Update to version 7.5.0
  - Security
  - Fix CVE-2017-17439, which is a remote denial of service
    vulnerability:
    In Heimdal 7.1 through 7.4, remote unauthenticated attackers
    are able to crash the KDC by sending a crafted UDP packet
    containing empty data fields for client name or realm.
  - Bug fixes
  - Handle long input lines when reloading database dumps.
  - In pre-forked mode (default on Unix), correctly clear the
    process ids of exited children, allowing new child processes
    to replace the old.
  - Fixed incorrect KDC response when no-cross realm TGT exists,
    allowing client requests to fail quickly rather than time
    out after trying to get a correct answer from each KDC.
- Fixed heimdal-patched.diff.
- Removed Avoid_NULL_structure_pointer_member_dereference.patch,
  fixed upstream.</changelog>
  <changelog author="bwiedemann@suse.com" date="1533643200">- Add reproducible.patch to override build date (boo#1047218)
- Use constant hostname (boo#1084909)</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1561291200">- Update to version 7.7.0
  + Bug fixes:
  - PKCS#11 hcrypto back-end:
    + initialize the p11_module_load function list
    + verify that not only is a mechanism present but that its
    mechanism info states that it offers the required
    encryption, decryption or digest services
  - krb5:
    + Starting with 7.6, Heimdal permitted requesting
    authenticated anonymous tickets. However, it did not
    verify that a KDC in fact returned an anonymous ticket
    when one was requested.
    + Cease setting the KDCOption reaquest_anonymous flag when
    issuing S4UProxy (constrained delegation) TGS requests.
    + when the Win2K PKINIT compatibility option is set, do not
    require krbtgt otherName to match when validating KDC
    certificate.
    + set PKINIT_BTMM flag per Apple implementation
    + use memset_s() instead of memset()
  - kdc:
    + When generating KRB5SignedPath in the AS, use the reply
    client name rather than the one from the request, so
    validation will work correctly in the TGS.
    + allow checksum of PA-FOR-USER to be HMAC_MD5. Even if TGT
    used an enctype with a different checksum. Per [MS-SFU]
    2.2.1 PA-FOR-USER the checksum is always HMAC_MD5, and
    that's what Windows and MIT clients send.
    In Heimdal both the client and kdc use instead the
    checksum of the TGT, and therefore work with each other
    but Windows and MIT clients fail against Heimdal KDC.
    Both Windows and MIT KDC would allow any keyed checksum
    to be used so Heimdal client work fine against it.
    Change Heimdal KDC to allow HMAC_MD5 even for non RC4
    based TGT in order to support per-spec clients.
    + use memset_s() instead of memset()
    + Detect Heimdal 1.0 through 7.6 clients that issue
    S4UProxy (constrained delegation) TGS Requests with the
    request anonymous flag set. These requests will be
    treated as S4UProxy requests and not anonymous requests.
  - HDB:
    + Set SQLite3 backend default page size to 8KB.
    + Add hdb_set_sync() method
  - kadmind:
    + disable HDB sync during database load avoiding
    unnecessary disk i/o.
  - ipropd:
    + disable HDB sync during receive_everything. Doing an
    fsync per-record when receiving the complete HDB is a
    performance disaster. Among other things, if the HDB is
    very large, then one slave receving a full HDB can cause
    other slaves to timeout and, if HDB write activity is
    high enough to cause iprop log truncation, then also need
    full syncs, which leads to a cycle of full syncs for all
    slaves until HDB write activity drops.
    Allowing the iprop log to be larger helps, but improving
    receive_everything() performance helps even more.
  - kinit:
    + Anonymous PKINIT tickets discard the realm information
    used to locate the issuing AS. Store the issuing realm in
    the credentials cache in order to locate a KDC which can
    renew them.
    + Do not leak the result of krb5_cc_get_config() when
    determining anonymous PKINIT start realm.
  - klist:
    + Show transited-policy-checked, ok-as-delegate and
    anonymous flags when listing credentials.
  - tests:
    + Regenerate certs so that they expire before the 2038
    armageddon so the test suite will pass on 32-bit
    operating systems until the underlying issues can be
    resolved.
  - Solaris:
    + Define _STDC_C11_BCI for memset_s prototype
  - build tooling:
    + Convert from python 2 to python 3
  - documentation:
    + rename verify-password to verify-password-quality
    + hprop default mode is encrypt
    + kadmind "all" permission does not include "get-keys"
    + verify-password-quality might not be stateless
- Version 7.6.0
  + Security (#555):
  - CVE-2018-16860 Heimdal KDC: Reject PA-S4U2Self with unkeyed
    checksum
    When the Heimdal KDC checks the checksum that is placed on
    the S4U2Self packet by the server to protect the requested
    principal against modification, it does not confirm that
    the checksum algorithm that protects the user name
    (principal) in the request is keyed. This allows a
    man-in-the-middle attacker who can intercept the request to
    the KDC to modify the packet by replacing the user name
    (principal) in the request with any desired user name
    (principal) that exists in the KDC and replace the checksum
    protecting that name with a CRC32 checksum (which requires
    no prior knowledge to compute).
    This would allow a S4U2Self ticket requested on behalf of
    user name (principal) user@EXAMPLE.COM to any service to be
    changed to a S4U2Self ticket with a user name (principal) of
    Administrator@EXAMPLE.COM. This ticket would then contain
    the PAC of the modified user name (principal).
  - CVE-2019-12098, client-only:
    RFC8062 Section 7 requires verification of the PA-PKINIT-KX
    key exchange when anonymous PKINIT is used. Failure to do
    so can permit an active attacker to become a
    man-in-the-middle.
  + Bug fixes:
  - Happy eyeballs: Don't wait for responses from
    known-unreachable KDCs.
  - kdc:
    + check return copy_Realm, copy_PrincipalName,
    copy_EncryptionKey
  - kinit:
    + cleanup temporary ccaches
    + see man page for "kinit --anonymous" command line syntax
    change
  - kdc:
    + Make anonymous AS-requests more RFC8062-compliant.
    Updated expired test certificates
  - Solaris:
    + PKCS#11 hcrypto backend broken since 7.0.1
    + Building with Sun Pro C
  + Features:
  - kuser: support authenticated anonymous AS-REQs in kinit
  - kdc: support for anonymous TGS-REQs
  - kgetcred support for anonymous service tickets
  - Support builds with OpenSSL 1.1.1
- fixed heimdal-patched.diff and reproducible.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1653480000">- Apply Shared Library Packaging Policy and resolve rpmlint
  errors like "libheimdal.x86_64: E: shlib-policy-name-error
  SONAME: libasn1.so.8, expected package suffix: 8"</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656417600">- Add heimdal-7.7.0-autoconf-2.70.patch: Fix build with autoconf
  2.70 (gh#heimdal/heimdal#856).</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656590400">- Add ldconfig scriptlets.
- Fix 'Conflicts:' tags.
- Remove obsolete macros and conditionals.
- Ran spec-cleaner.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1671624000">- Update to version 7.8.0
  + This release includes both the Heimdal 7.7.1 Security
    Vulnerability fixes and non-Security bug fixes/improvements.
  + Security Vulnerabilities:
  - CVE-2022-42898 PAC parse integer overflows
  - CVE-2022-3437 Overflows and non-constant time leaks in
    DES{,3} and arcfour
  - CVE-2022-41916 Fix Unicode normalization read of 1 bytes past
    end of array
  - CVE-2021-44758 A null pointer de-reference DoS in SPNEGO
    acceptors
  - CVE-2021-3671 A null pointer de-reference when handling
    missing sname in TGS-REQ
  - CVE-2022-44640 Heimdal KDC: invalid free in ASN.1 codec
    Note that CVE-2022-44640 is a severe vulnerability,
    possibly a 10.0 on the Common Vulnerability Scoring
    System (CVSS) v3, as we believe it should be possible to
    get an RCE on a KDC, which means that credentials can be
    compromised that can be used to impersonate anyone in a
    realm or forest of realms.
    Heimdal's ASN.1 compiler generates code that allows
    specially crafted DER encodings of CHOICEs to invoke the
    wrong free function on the decoded structure upon decode
    error. This is known to impact the Heimdal KDC, leading to
    an invalid free() of an address partly or wholly under the
    control of the attacker, in turn leading to a potential
    remote code execution (RCE) vulnerability.
    This error affects the DER codec for all extensible CHOICE
    types used in Heimdal, though not all cases will be
    exploitable. We have not completed a thorough analysis of
    all the Heimdal components affected, thus the Kerberos
    client, the X.509 library, and other parts, may be affected
    as well.
    This bug has been in Heimdal's ASN.1 compiler since 2005,
    but it may only affect Heimdal 1.6 and up. It was first
    reported by Douglas Bagnall, though it had been found
    independently by the Heimdal maintainers via fuzzing a few
    weeks earlier.
    While no zero-day exploit is known, such an exploit will
    likely be available soon after public disclosure.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  + Other changes:
  - Bugs found by UBSAN (including the incorrect encoding of
    unconstrained INTEGER value -1).
  - Errors found by the LLVM scan-build static analyzer.
  - Errors found by the valgrind memory debugger.
  - Work around GCC Bug 95189 (memcmp wrongly stripped like
    strcmp).
  - Correct ASN.1 OID typo for SHA-384
  - Fix a deadlock in in the MEMORY ccache type.
  - TGS: strip forwardable and proxiable flags if the server is
    disallowed.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  - Incremental HDB propagation improvements
    Refactor send_diffs making it progressive
    Handle partial writes on non-blocking sockets
    Disable Nagle in iprop master and slave
    Use async I/O
    Don't send I_HAVE in response to AYT
    Do not recover log in kadm5_get_principal()
    Don't send diffs to slaves with not yet known version
    Don't stutter in send_diffs
  - Optional backwards-compatible anon-pkinit behavior
- Removed heimdal-7.7.0-autoconf-2.70.patch, fixed upstream.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1673352000">- replace libheimdal conflicts by obsoletes / provides to provide a
  smooth update in the new libheimdal-devel.</changelog>
</package>
<package pkgid="e62debebcdb6cfed350daf2ec95b4384977878959de314763cecde832ff0058e" name="libwind0" arch="i586">
  <version epoch="0" ver="7.8.0" rel="bp154.2.4.1"/>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1440936000">- Initial package, version 1.6rc2
- Added patch heimdal-version-script-client.map.patch to add file
  version-script-client.map (File is present in git for tag 1.6rc2
  but missing in tarball).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441108800">- Some changes in spec file to enable build for SLES.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441195200">- Added Conflicts tags to spec file because devel package conflicts
  with krb5-devel and krb5-mini-devel.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441454400">- Added a patched instead of the original tarball because only
  shared libraries will be build and source files of these (not to
  be build) programs have problematic licenses.
- Added script heimdal-patch-source.sh to sources.
- Added patch heimdal-patched.diff that fixes configure.ac and
  several Makefile.am files to successfully build patched source.
- Removed unneeded dependencies in spec file for build.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1483790400">- Update to version 7.1.0
- Removed heimdal-version-script-client.map.patch, fixed upstream.
- Fixed heimdal-patched.diff.
- Unfortunately there is no updated changelog file in tarball,
  changes can be seen in source code version control systems
  history log.</changelog>
  <changelog author="jengelh@inai.de" date="1486036800">- Summary and RPM group update. Do a direct call to ldconfig
  where possible.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1497528000">- Update to version 7.3.0
  - Security
    + Fix transit path validation. Commit f469fc6 (2010-10-02)
    inadvertently caused the previous hop realm to not be added
    to the transit path of issued tickets. This may, in some
    cases, enable bypass of capath policy in Heimdal versions 1.5
    through 7.2.
    Note, this may break sites that rely on the bug. With the bug
    some incomplete [capaths] worked, that should not have.
    These may now break authentication in some cross-realm
    configurations. (CVE-2017-6594)
- Version 7.2.0
  - Bug fixes
    + Portability improvements.
    + More strict parsing of encoded URI components in HTTP KDC.
    + Fixed memory leak in malloc error recovery in NTLM GSSAPI
    mechanism.
    + Avoid overly specific CPU info in krb5-config in aid of
    reproducible builds.
    + Don't do AFS string-to-key tests when feature is disabled.
    + Skip mdb_stat test when the command is not available.
    + Windows: update SHA2 timestamp server.
    + hdb: add missing export
    hdb_generate_key_set_password_with_ks_tuple.
    + Fix signature of hdb_generate_key_set_password().
    + Windows: enable KX509 support in the KDC.
    + kdc: fix kx509 service principal match.
    + iprop: handle case where master sends nothing new.
    + ipropd-slave: fix incorrect error codes.
    + Allow choice of sqlite for HDB pref.
    + check-iprop: don't fail to kill daemons.
    + roken: pidfile -&gt; rk_pidfile.
    + kdc: _kdc_do_kx509 fix use after free error.
    + Do not detect x32 as 64-bit platform.
    + No sys/ttydefaults.h on CYGWIN.
    + Fix check-iprop races.
    + roken_detach_prep() close pipe.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1501761600">- Update to version 7.4.0
  - Security
  - Fix CVE-2017-11103: Orpheus' Lyre KDC-REP service name
    validation.
    This is a critical vulnerability.
    In _krb5_extract_ticket() the KDC-REP service name must be
    obtained from encrypted version stored in 'enc_part' instead
    of the unencrypted version stored in 'ticket'.
    Use of the unecrypted version provides an opportunity for
    successful server impersonation and other attacks.
    Identified by Jeffrey Altman, Viktor Duchovni and
    Nico Williams.
    See https://www.orpheus-lyre.info/ for more details.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1512648000">- Added Avoid_NULL_structure_pointer_member_dereference.patch,
  fixes (bsc#1071675).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1514548800">- Update to version 7.5.0
  - Security
  - Fix CVE-2017-17439, which is a remote denial of service
    vulnerability:
    In Heimdal 7.1 through 7.4, remote unauthenticated attackers
    are able to crash the KDC by sending a crafted UDP packet
    containing empty data fields for client name or realm.
  - Bug fixes
  - Handle long input lines when reloading database dumps.
  - In pre-forked mode (default on Unix), correctly clear the
    process ids of exited children, allowing new child processes
    to replace the old.
  - Fixed incorrect KDC response when no-cross realm TGT exists,
    allowing client requests to fail quickly rather than time
    out after trying to get a correct answer from each KDC.
- Fixed heimdal-patched.diff.
- Removed Avoid_NULL_structure_pointer_member_dereference.patch,
  fixed upstream.</changelog>
  <changelog author="bwiedemann@suse.com" date="1533643200">- Add reproducible.patch to override build date (boo#1047218)
- Use constant hostname (boo#1084909)</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1561291200">- Update to version 7.7.0
  + Bug fixes:
  - PKCS#11 hcrypto back-end:
    + initialize the p11_module_load function list
    + verify that not only is a mechanism present but that its
    mechanism info states that it offers the required
    encryption, decryption or digest services
  - krb5:
    + Starting with 7.6, Heimdal permitted requesting
    authenticated anonymous tickets. However, it did not
    verify that a KDC in fact returned an anonymous ticket
    when one was requested.
    + Cease setting the KDCOption reaquest_anonymous flag when
    issuing S4UProxy (constrained delegation) TGS requests.
    + when the Win2K PKINIT compatibility option is set, do not
    require krbtgt otherName to match when validating KDC
    certificate.
    + set PKINIT_BTMM flag per Apple implementation
    + use memset_s() instead of memset()
  - kdc:
    + When generating KRB5SignedPath in the AS, use the reply
    client name rather than the one from the request, so
    validation will work correctly in the TGS.
    + allow checksum of PA-FOR-USER to be HMAC_MD5. Even if TGT
    used an enctype with a different checksum. Per [MS-SFU]
    2.2.1 PA-FOR-USER the checksum is always HMAC_MD5, and
    that's what Windows and MIT clients send.
    In Heimdal both the client and kdc use instead the
    checksum of the TGT, and therefore work with each other
    but Windows and MIT clients fail against Heimdal KDC.
    Both Windows and MIT KDC would allow any keyed checksum
    to be used so Heimdal client work fine against it.
    Change Heimdal KDC to allow HMAC_MD5 even for non RC4
    based TGT in order to support per-spec clients.
    + use memset_s() instead of memset()
    + Detect Heimdal 1.0 through 7.6 clients that issue
    S4UProxy (constrained delegation) TGS Requests with the
    request anonymous flag set. These requests will be
    treated as S4UProxy requests and not anonymous requests.
  - HDB:
    + Set SQLite3 backend default page size to 8KB.
    + Add hdb_set_sync() method
  - kadmind:
    + disable HDB sync during database load avoiding
    unnecessary disk i/o.
  - ipropd:
    + disable HDB sync during receive_everything. Doing an
    fsync per-record when receiving the complete HDB is a
    performance disaster. Among other things, if the HDB is
    very large, then one slave receving a full HDB can cause
    other slaves to timeout and, if HDB write activity is
    high enough to cause iprop log truncation, then also need
    full syncs, which leads to a cycle of full syncs for all
    slaves until HDB write activity drops.
    Allowing the iprop log to be larger helps, but improving
    receive_everything() performance helps even more.
  - kinit:
    + Anonymous PKINIT tickets discard the realm information
    used to locate the issuing AS. Store the issuing realm in
    the credentials cache in order to locate a KDC which can
    renew them.
    + Do not leak the result of krb5_cc_get_config() when
    determining anonymous PKINIT start realm.
  - klist:
    + Show transited-policy-checked, ok-as-delegate and
    anonymous flags when listing credentials.
  - tests:
    + Regenerate certs so that they expire before the 2038
    armageddon so the test suite will pass on 32-bit
    operating systems until the underlying issues can be
    resolved.
  - Solaris:
    + Define _STDC_C11_BCI for memset_s prototype
  - build tooling:
    + Convert from python 2 to python 3
  - documentation:
    + rename verify-password to verify-password-quality
    + hprop default mode is encrypt
    + kadmind "all" permission does not include "get-keys"
    + verify-password-quality might not be stateless
- Version 7.6.0
  + Security (#555):
  - CVE-2018-16860 Heimdal KDC: Reject PA-S4U2Self with unkeyed
    checksum
    When the Heimdal KDC checks the checksum that is placed on
    the S4U2Self packet by the server to protect the requested
    principal against modification, it does not confirm that
    the checksum algorithm that protects the user name
    (principal) in the request is keyed. This allows a
    man-in-the-middle attacker who can intercept the request to
    the KDC to modify the packet by replacing the user name
    (principal) in the request with any desired user name
    (principal) that exists in the KDC and replace the checksum
    protecting that name with a CRC32 checksum (which requires
    no prior knowledge to compute).
    This would allow a S4U2Self ticket requested on behalf of
    user name (principal) user@EXAMPLE.COM to any service to be
    changed to a S4U2Self ticket with a user name (principal) of
    Administrator@EXAMPLE.COM. This ticket would then contain
    the PAC of the modified user name (principal).
  - CVE-2019-12098, client-only:
    RFC8062 Section 7 requires verification of the PA-PKINIT-KX
    key exchange when anonymous PKINIT is used. Failure to do
    so can permit an active attacker to become a
    man-in-the-middle.
  + Bug fixes:
  - Happy eyeballs: Don't wait for responses from
    known-unreachable KDCs.
  - kdc:
    + check return copy_Realm, copy_PrincipalName,
    copy_EncryptionKey
  - kinit:
    + cleanup temporary ccaches
    + see man page for "kinit --anonymous" command line syntax
    change
  - kdc:
    + Make anonymous AS-requests more RFC8062-compliant.
    Updated expired test certificates
  - Solaris:
    + PKCS#11 hcrypto backend broken since 7.0.1
    + Building with Sun Pro C
  + Features:
  - kuser: support authenticated anonymous AS-REQs in kinit
  - kdc: support for anonymous TGS-REQs
  - kgetcred support for anonymous service tickets
  - Support builds with OpenSSL 1.1.1
- fixed heimdal-patched.diff and reproducible.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1653480000">- Apply Shared Library Packaging Policy and resolve rpmlint
  errors like "libheimdal.x86_64: E: shlib-policy-name-error
  SONAME: libasn1.so.8, expected package suffix: 8"</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656417600">- Add heimdal-7.7.0-autoconf-2.70.patch: Fix build with autoconf
  2.70 (gh#heimdal/heimdal#856).</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656590400">- Add ldconfig scriptlets.
- Fix 'Conflicts:' tags.
- Remove obsolete macros and conditionals.
- Ran spec-cleaner.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1671624000">- Update to version 7.8.0
  + This release includes both the Heimdal 7.7.1 Security
    Vulnerability fixes and non-Security bug fixes/improvements.
  + Security Vulnerabilities:
  - CVE-2022-42898 PAC parse integer overflows
  - CVE-2022-3437 Overflows and non-constant time leaks in
    DES{,3} and arcfour
  - CVE-2022-41916 Fix Unicode normalization read of 1 bytes past
    end of array
  - CVE-2021-44758 A null pointer de-reference DoS in SPNEGO
    acceptors
  - CVE-2021-3671 A null pointer de-reference when handling
    missing sname in TGS-REQ
  - CVE-2022-44640 Heimdal KDC: invalid free in ASN.1 codec
    Note that CVE-2022-44640 is a severe vulnerability,
    possibly a 10.0 on the Common Vulnerability Scoring
    System (CVSS) v3, as we believe it should be possible to
    get an RCE on a KDC, which means that credentials can be
    compromised that can be used to impersonate anyone in a
    realm or forest of realms.
    Heimdal's ASN.1 compiler generates code that allows
    specially crafted DER encodings of CHOICEs to invoke the
    wrong free function on the decoded structure upon decode
    error. This is known to impact the Heimdal KDC, leading to
    an invalid free() of an address partly or wholly under the
    control of the attacker, in turn leading to a potential
    remote code execution (RCE) vulnerability.
    This error affects the DER codec for all extensible CHOICE
    types used in Heimdal, though not all cases will be
    exploitable. We have not completed a thorough analysis of
    all the Heimdal components affected, thus the Kerberos
    client, the X.509 library, and other parts, may be affected
    as well.
    This bug has been in Heimdal's ASN.1 compiler since 2005,
    but it may only affect Heimdal 1.6 and up. It was first
    reported by Douglas Bagnall, though it had been found
    independently by the Heimdal maintainers via fuzzing a few
    weeks earlier.
    While no zero-day exploit is known, such an exploit will
    likely be available soon after public disclosure.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  + Other changes:
  - Bugs found by UBSAN (including the incorrect encoding of
    unconstrained INTEGER value -1).
  - Errors found by the LLVM scan-build static analyzer.
  - Errors found by the valgrind memory debugger.
  - Work around GCC Bug 95189 (memcmp wrongly stripped like
    strcmp).
  - Correct ASN.1 OID typo for SHA-384
  - Fix a deadlock in in the MEMORY ccache type.
  - TGS: strip forwardable and proxiable flags if the server is
    disallowed.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  - Incremental HDB propagation improvements
    Refactor send_diffs making it progressive
    Handle partial writes on non-blocking sockets
    Disable Nagle in iprop master and slave
    Use async I/O
    Don't send I_HAVE in response to AYT
    Do not recover log in kadm5_get_principal()
    Don't send diffs to slaves with not yet known version
    Don't stutter in send_diffs
  - Optional backwards-compatible anon-pkinit behavior
- Removed heimdal-7.7.0-autoconf-2.70.patch, fixed upstream.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1673352000">- replace libheimdal conflicts by obsoletes / provides to provide a
  smooth update in the new libheimdal-devel.</changelog>
</package>
<package pkgid="eeecb27cf2583a01a3a0fb5ebce796dd909053f23c69f872f4ea24c66d0dea26" name="libwind0" arch="ppc64le">
  <version epoch="0" ver="7.8.0" rel="bp154.2.4.1"/>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1440936000">- Initial package, version 1.6rc2
- Added patch heimdal-version-script-client.map.patch to add file
  version-script-client.map (File is present in git for tag 1.6rc2
  but missing in tarball).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441108800">- Some changes in spec file to enable build for SLES.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441195200">- Added Conflicts tags to spec file because devel package conflicts
  with krb5-devel and krb5-mini-devel.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441454400">- Added a patched instead of the original tarball because only
  shared libraries will be build and source files of these (not to
  be build) programs have problematic licenses.
- Added script heimdal-patch-source.sh to sources.
- Added patch heimdal-patched.diff that fixes configure.ac and
  several Makefile.am files to successfully build patched source.
- Removed unneeded dependencies in spec file for build.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1483790400">- Update to version 7.1.0
- Removed heimdal-version-script-client.map.patch, fixed upstream.
- Fixed heimdal-patched.diff.
- Unfortunately there is no updated changelog file in tarball,
  changes can be seen in source code version control systems
  history log.</changelog>
  <changelog author="jengelh@inai.de" date="1486036800">- Summary and RPM group update. Do a direct call to ldconfig
  where possible.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1497528000">- Update to version 7.3.0
  - Security
    + Fix transit path validation. Commit f469fc6 (2010-10-02)
    inadvertently caused the previous hop realm to not be added
    to the transit path of issued tickets. This may, in some
    cases, enable bypass of capath policy in Heimdal versions 1.5
    through 7.2.
    Note, this may break sites that rely on the bug. With the bug
    some incomplete [capaths] worked, that should not have.
    These may now break authentication in some cross-realm
    configurations. (CVE-2017-6594)
- Version 7.2.0
  - Bug fixes
    + Portability improvements.
    + More strict parsing of encoded URI components in HTTP KDC.
    + Fixed memory leak in malloc error recovery in NTLM GSSAPI
    mechanism.
    + Avoid overly specific CPU info in krb5-config in aid of
    reproducible builds.
    + Don't do AFS string-to-key tests when feature is disabled.
    + Skip mdb_stat test when the command is not available.
    + Windows: update SHA2 timestamp server.
    + hdb: add missing export
    hdb_generate_key_set_password_with_ks_tuple.
    + Fix signature of hdb_generate_key_set_password().
    + Windows: enable KX509 support in the KDC.
    + kdc: fix kx509 service principal match.
    + iprop: handle case where master sends nothing new.
    + ipropd-slave: fix incorrect error codes.
    + Allow choice of sqlite for HDB pref.
    + check-iprop: don't fail to kill daemons.
    + roken: pidfile -&gt; rk_pidfile.
    + kdc: _kdc_do_kx509 fix use after free error.
    + Do not detect x32 as 64-bit platform.
    + No sys/ttydefaults.h on CYGWIN.
    + Fix check-iprop races.
    + roken_detach_prep() close pipe.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1501761600">- Update to version 7.4.0
  - Security
  - Fix CVE-2017-11103: Orpheus' Lyre KDC-REP service name
    validation.
    This is a critical vulnerability.
    In _krb5_extract_ticket() the KDC-REP service name must be
    obtained from encrypted version stored in 'enc_part' instead
    of the unencrypted version stored in 'ticket'.
    Use of the unecrypted version provides an opportunity for
    successful server impersonation and other attacks.
    Identified by Jeffrey Altman, Viktor Duchovni and
    Nico Williams.
    See https://www.orpheus-lyre.info/ for more details.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1512648000">- Added Avoid_NULL_structure_pointer_member_dereference.patch,
  fixes (bsc#1071675).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1514548800">- Update to version 7.5.0
  - Security
  - Fix CVE-2017-17439, which is a remote denial of service
    vulnerability:
    In Heimdal 7.1 through 7.4, remote unauthenticated attackers
    are able to crash the KDC by sending a crafted UDP packet
    containing empty data fields for client name or realm.
  - Bug fixes
  - Handle long input lines when reloading database dumps.
  - In pre-forked mode (default on Unix), correctly clear the
    process ids of exited children, allowing new child processes
    to replace the old.
  - Fixed incorrect KDC response when no-cross realm TGT exists,
    allowing client requests to fail quickly rather than time
    out after trying to get a correct answer from each KDC.
- Fixed heimdal-patched.diff.
- Removed Avoid_NULL_structure_pointer_member_dereference.patch,
  fixed upstream.</changelog>
  <changelog author="bwiedemann@suse.com" date="1533643200">- Add reproducible.patch to override build date (boo#1047218)
- Use constant hostname (boo#1084909)</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1561291200">- Update to version 7.7.0
  + Bug fixes:
  - PKCS#11 hcrypto back-end:
    + initialize the p11_module_load function list
    + verify that not only is a mechanism present but that its
    mechanism info states that it offers the required
    encryption, decryption or digest services
  - krb5:
    + Starting with 7.6, Heimdal permitted requesting
    authenticated anonymous tickets. However, it did not
    verify that a KDC in fact returned an anonymous ticket
    when one was requested.
    + Cease setting the KDCOption reaquest_anonymous flag when
    issuing S4UProxy (constrained delegation) TGS requests.
    + when the Win2K PKINIT compatibility option is set, do not
    require krbtgt otherName to match when validating KDC
    certificate.
    + set PKINIT_BTMM flag per Apple implementation
    + use memset_s() instead of memset()
  - kdc:
    + When generating KRB5SignedPath in the AS, use the reply
    client name rather than the one from the request, so
    validation will work correctly in the TGS.
    + allow checksum of PA-FOR-USER to be HMAC_MD5. Even if TGT
    used an enctype with a different checksum. Per [MS-SFU]
    2.2.1 PA-FOR-USER the checksum is always HMAC_MD5, and
    that's what Windows and MIT clients send.
    In Heimdal both the client and kdc use instead the
    checksum of the TGT, and therefore work with each other
    but Windows and MIT clients fail against Heimdal KDC.
    Both Windows and MIT KDC would allow any keyed checksum
    to be used so Heimdal client work fine against it.
    Change Heimdal KDC to allow HMAC_MD5 even for non RC4
    based TGT in order to support per-spec clients.
    + use memset_s() instead of memset()
    + Detect Heimdal 1.0 through 7.6 clients that issue
    S4UProxy (constrained delegation) TGS Requests with the
    request anonymous flag set. These requests will be
    treated as S4UProxy requests and not anonymous requests.
  - HDB:
    + Set SQLite3 backend default page size to 8KB.
    + Add hdb_set_sync() method
  - kadmind:
    + disable HDB sync during database load avoiding
    unnecessary disk i/o.
  - ipropd:
    + disable HDB sync during receive_everything. Doing an
    fsync per-record when receiving the complete HDB is a
    performance disaster. Among other things, if the HDB is
    very large, then one slave receving a full HDB can cause
    other slaves to timeout and, if HDB write activity is
    high enough to cause iprop log truncation, then also need
    full syncs, which leads to a cycle of full syncs for all
    slaves until HDB write activity drops.
    Allowing the iprop log to be larger helps, but improving
    receive_everything() performance helps even more.
  - kinit:
    + Anonymous PKINIT tickets discard the realm information
    used to locate the issuing AS. Store the issuing realm in
    the credentials cache in order to locate a KDC which can
    renew them.
    + Do not leak the result of krb5_cc_get_config() when
    determining anonymous PKINIT start realm.
  - klist:
    + Show transited-policy-checked, ok-as-delegate and
    anonymous flags when listing credentials.
  - tests:
    + Regenerate certs so that they expire before the 2038
    armageddon so the test suite will pass on 32-bit
    operating systems until the underlying issues can be
    resolved.
  - Solaris:
    + Define _STDC_C11_BCI for memset_s prototype
  - build tooling:
    + Convert from python 2 to python 3
  - documentation:
    + rename verify-password to verify-password-quality
    + hprop default mode is encrypt
    + kadmind "all" permission does not include "get-keys"
    + verify-password-quality might not be stateless
- Version 7.6.0
  + Security (#555):
  - CVE-2018-16860 Heimdal KDC: Reject PA-S4U2Self with unkeyed
    checksum
    When the Heimdal KDC checks the checksum that is placed on
    the S4U2Self packet by the server to protect the requested
    principal against modification, it does not confirm that
    the checksum algorithm that protects the user name
    (principal) in the request is keyed. This allows a
    man-in-the-middle attacker who can intercept the request to
    the KDC to modify the packet by replacing the user name
    (principal) in the request with any desired user name
    (principal) that exists in the KDC and replace the checksum
    protecting that name with a CRC32 checksum (which requires
    no prior knowledge to compute).
    This would allow a S4U2Self ticket requested on behalf of
    user name (principal) user@EXAMPLE.COM to any service to be
    changed to a S4U2Self ticket with a user name (principal) of
    Administrator@EXAMPLE.COM. This ticket would then contain
    the PAC of the modified user name (principal).
  - CVE-2019-12098, client-only:
    RFC8062 Section 7 requires verification of the PA-PKINIT-KX
    key exchange when anonymous PKINIT is used. Failure to do
    so can permit an active attacker to become a
    man-in-the-middle.
  + Bug fixes:
  - Happy eyeballs: Don't wait for responses from
    known-unreachable KDCs.
  - kdc:
    + check return copy_Realm, copy_PrincipalName,
    copy_EncryptionKey
  - kinit:
    + cleanup temporary ccaches
    + see man page for "kinit --anonymous" command line syntax
    change
  - kdc:
    + Make anonymous AS-requests more RFC8062-compliant.
    Updated expired test certificates
  - Solaris:
    + PKCS#11 hcrypto backend broken since 7.0.1
    + Building with Sun Pro C
  + Features:
  - kuser: support authenticated anonymous AS-REQs in kinit
  - kdc: support for anonymous TGS-REQs
  - kgetcred support for anonymous service tickets
  - Support builds with OpenSSL 1.1.1
- fixed heimdal-patched.diff and reproducible.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1653480000">- Apply Shared Library Packaging Policy and resolve rpmlint
  errors like "libheimdal.x86_64: E: shlib-policy-name-error
  SONAME: libasn1.so.8, expected package suffix: 8"</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656417600">- Add heimdal-7.7.0-autoconf-2.70.patch: Fix build with autoconf
  2.70 (gh#heimdal/heimdal#856).</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656590400">- Add ldconfig scriptlets.
- Fix 'Conflicts:' tags.
- Remove obsolete macros and conditionals.
- Ran spec-cleaner.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1671624000">- Update to version 7.8.0
  + This release includes both the Heimdal 7.7.1 Security
    Vulnerability fixes and non-Security bug fixes/improvements.
  + Security Vulnerabilities:
  - CVE-2022-42898 PAC parse integer overflows
  - CVE-2022-3437 Overflows and non-constant time leaks in
    DES{,3} and arcfour
  - CVE-2022-41916 Fix Unicode normalization read of 1 bytes past
    end of array
  - CVE-2021-44758 A null pointer de-reference DoS in SPNEGO
    acceptors
  - CVE-2021-3671 A null pointer de-reference when handling
    missing sname in TGS-REQ
  - CVE-2022-44640 Heimdal KDC: invalid free in ASN.1 codec
    Note that CVE-2022-44640 is a severe vulnerability,
    possibly a 10.0 on the Common Vulnerability Scoring
    System (CVSS) v3, as we believe it should be possible to
    get an RCE on a KDC, which means that credentials can be
    compromised that can be used to impersonate anyone in a
    realm or forest of realms.
    Heimdal's ASN.1 compiler generates code that allows
    specially crafted DER encodings of CHOICEs to invoke the
    wrong free function on the decoded structure upon decode
    error. This is known to impact the Heimdal KDC, leading to
    an invalid free() of an address partly or wholly under the
    control of the attacker, in turn leading to a potential
    remote code execution (RCE) vulnerability.
    This error affects the DER codec for all extensible CHOICE
    types used in Heimdal, though not all cases will be
    exploitable. We have not completed a thorough analysis of
    all the Heimdal components affected, thus the Kerberos
    client, the X.509 library, and other parts, may be affected
    as well.
    This bug has been in Heimdal's ASN.1 compiler since 2005,
    but it may only affect Heimdal 1.6 and up. It was first
    reported by Douglas Bagnall, though it had been found
    independently by the Heimdal maintainers via fuzzing a few
    weeks earlier.
    While no zero-day exploit is known, such an exploit will
    likely be available soon after public disclosure.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  + Other changes:
  - Bugs found by UBSAN (including the incorrect encoding of
    unconstrained INTEGER value -1).
  - Errors found by the LLVM scan-build static analyzer.
  - Errors found by the valgrind memory debugger.
  - Work around GCC Bug 95189 (memcmp wrongly stripped like
    strcmp).
  - Correct ASN.1 OID typo for SHA-384
  - Fix a deadlock in in the MEMORY ccache type.
  - TGS: strip forwardable and proxiable flags if the server is
    disallowed.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  - Incremental HDB propagation improvements
    Refactor send_diffs making it progressive
    Handle partial writes on non-blocking sockets
    Disable Nagle in iprop master and slave
    Use async I/O
    Don't send I_HAVE in response to AYT
    Do not recover log in kadm5_get_principal()
    Don't send diffs to slaves with not yet known version
    Don't stutter in send_diffs
  - Optional backwards-compatible anon-pkinit behavior
- Removed heimdal-7.7.0-autoconf-2.70.patch, fixed upstream.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1673352000">- replace libheimdal conflicts by obsoletes / provides to provide a
  smooth update in the new libheimdal-devel.</changelog>
</package>
<package pkgid="10a075ea775c34dc5705bb81cd89cdaf29ed2e55118fd19db193d689a0c420bf" name="libwind0" arch="s390x">
  <version epoch="0" ver="7.8.0" rel="bp154.2.4.1"/>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1440936000">- Initial package, version 1.6rc2
- Added patch heimdal-version-script-client.map.patch to add file
  version-script-client.map (File is present in git for tag 1.6rc2
  but missing in tarball).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441108800">- Some changes in spec file to enable build for SLES.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441195200">- Added Conflicts tags to spec file because devel package conflicts
  with krb5-devel and krb5-mini-devel.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441454400">- Added a patched instead of the original tarball because only
  shared libraries will be build and source files of these (not to
  be build) programs have problematic licenses.
- Added script heimdal-patch-source.sh to sources.
- Added patch heimdal-patched.diff that fixes configure.ac and
  several Makefile.am files to successfully build patched source.
- Removed unneeded dependencies in spec file for build.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1483790400">- Update to version 7.1.0
- Removed heimdal-version-script-client.map.patch, fixed upstream.
- Fixed heimdal-patched.diff.
- Unfortunately there is no updated changelog file in tarball,
  changes can be seen in source code version control systems
  history log.</changelog>
  <changelog author="jengelh@inai.de" date="1486036800">- Summary and RPM group update. Do a direct call to ldconfig
  where possible.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1497528000">- Update to version 7.3.0
  - Security
    + Fix transit path validation. Commit f469fc6 (2010-10-02)
    inadvertently caused the previous hop realm to not be added
    to the transit path of issued tickets. This may, in some
    cases, enable bypass of capath policy in Heimdal versions 1.5
    through 7.2.
    Note, this may break sites that rely on the bug. With the bug
    some incomplete [capaths] worked, that should not have.
    These may now break authentication in some cross-realm
    configurations. (CVE-2017-6594)
- Version 7.2.0
  - Bug fixes
    + Portability improvements.
    + More strict parsing of encoded URI components in HTTP KDC.
    + Fixed memory leak in malloc error recovery in NTLM GSSAPI
    mechanism.
    + Avoid overly specific CPU info in krb5-config in aid of
    reproducible builds.
    + Don't do AFS string-to-key tests when feature is disabled.
    + Skip mdb_stat test when the command is not available.
    + Windows: update SHA2 timestamp server.
    + hdb: add missing export
    hdb_generate_key_set_password_with_ks_tuple.
    + Fix signature of hdb_generate_key_set_password().
    + Windows: enable KX509 support in the KDC.
    + kdc: fix kx509 service principal match.
    + iprop: handle case where master sends nothing new.
    + ipropd-slave: fix incorrect error codes.
    + Allow choice of sqlite for HDB pref.
    + check-iprop: don't fail to kill daemons.
    + roken: pidfile -&gt; rk_pidfile.
    + kdc: _kdc_do_kx509 fix use after free error.
    + Do not detect x32 as 64-bit platform.
    + No sys/ttydefaults.h on CYGWIN.
    + Fix check-iprop races.
    + roken_detach_prep() close pipe.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1501761600">- Update to version 7.4.0
  - Security
  - Fix CVE-2017-11103: Orpheus' Lyre KDC-REP service name
    validation.
    This is a critical vulnerability.
    In _krb5_extract_ticket() the KDC-REP service name must be
    obtained from encrypted version stored in 'enc_part' instead
    of the unencrypted version stored in 'ticket'.
    Use of the unecrypted version provides an opportunity for
    successful server impersonation and other attacks.
    Identified by Jeffrey Altman, Viktor Duchovni and
    Nico Williams.
    See https://www.orpheus-lyre.info/ for more details.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1512648000">- Added Avoid_NULL_structure_pointer_member_dereference.patch,
  fixes (bsc#1071675).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1514548800">- Update to version 7.5.0
  - Security
  - Fix CVE-2017-17439, which is a remote denial of service
    vulnerability:
    In Heimdal 7.1 through 7.4, remote unauthenticated attackers
    are able to crash the KDC by sending a crafted UDP packet
    containing empty data fields for client name or realm.
  - Bug fixes
  - Handle long input lines when reloading database dumps.
  - In pre-forked mode (default on Unix), correctly clear the
    process ids of exited children, allowing new child processes
    to replace the old.
  - Fixed incorrect KDC response when no-cross realm TGT exists,
    allowing client requests to fail quickly rather than time
    out after trying to get a correct answer from each KDC.
- Fixed heimdal-patched.diff.
- Removed Avoid_NULL_structure_pointer_member_dereference.patch,
  fixed upstream.</changelog>
  <changelog author="bwiedemann@suse.com" date="1533643200">- Add reproducible.patch to override build date (boo#1047218)
- Use constant hostname (boo#1084909)</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1561291200">- Update to version 7.7.0
  + Bug fixes:
  - PKCS#11 hcrypto back-end:
    + initialize the p11_module_load function list
    + verify that not only is a mechanism present but that its
    mechanism info states that it offers the required
    encryption, decryption or digest services
  - krb5:
    + Starting with 7.6, Heimdal permitted requesting
    authenticated anonymous tickets. However, it did not
    verify that a KDC in fact returned an anonymous ticket
    when one was requested.
    + Cease setting the KDCOption reaquest_anonymous flag when
    issuing S4UProxy (constrained delegation) TGS requests.
    + when the Win2K PKINIT compatibility option is set, do not
    require krbtgt otherName to match when validating KDC
    certificate.
    + set PKINIT_BTMM flag per Apple implementation
    + use memset_s() instead of memset()
  - kdc:
    + When generating KRB5SignedPath in the AS, use the reply
    client name rather than the one from the request, so
    validation will work correctly in the TGS.
    + allow checksum of PA-FOR-USER to be HMAC_MD5. Even if TGT
    used an enctype with a different checksum. Per [MS-SFU]
    2.2.1 PA-FOR-USER the checksum is always HMAC_MD5, and
    that's what Windows and MIT clients send.
    In Heimdal both the client and kdc use instead the
    checksum of the TGT, and therefore work with each other
    but Windows and MIT clients fail against Heimdal KDC.
    Both Windows and MIT KDC would allow any keyed checksum
    to be used so Heimdal client work fine against it.
    Change Heimdal KDC to allow HMAC_MD5 even for non RC4
    based TGT in order to support per-spec clients.
    + use memset_s() instead of memset()
    + Detect Heimdal 1.0 through 7.6 clients that issue
    S4UProxy (constrained delegation) TGS Requests with the
    request anonymous flag set. These requests will be
    treated as S4UProxy requests and not anonymous requests.
  - HDB:
    + Set SQLite3 backend default page size to 8KB.
    + Add hdb_set_sync() method
  - kadmind:
    + disable HDB sync during database load avoiding
    unnecessary disk i/o.
  - ipropd:
    + disable HDB sync during receive_everything. Doing an
    fsync per-record when receiving the complete HDB is a
    performance disaster. Among other things, if the HDB is
    very large, then one slave receving a full HDB can cause
    other slaves to timeout and, if HDB write activity is
    high enough to cause iprop log truncation, then also need
    full syncs, which leads to a cycle of full syncs for all
    slaves until HDB write activity drops.
    Allowing the iprop log to be larger helps, but improving
    receive_everything() performance helps even more.
  - kinit:
    + Anonymous PKINIT tickets discard the realm information
    used to locate the issuing AS. Store the issuing realm in
    the credentials cache in order to locate a KDC which can
    renew them.
    + Do not leak the result of krb5_cc_get_config() when
    determining anonymous PKINIT start realm.
  - klist:
    + Show transited-policy-checked, ok-as-delegate and
    anonymous flags when listing credentials.
  - tests:
    + Regenerate certs so that they expire before the 2038
    armageddon so the test suite will pass on 32-bit
    operating systems until the underlying issues can be
    resolved.
  - Solaris:
    + Define _STDC_C11_BCI for memset_s prototype
  - build tooling:
    + Convert from python 2 to python 3
  - documentation:
    + rename verify-password to verify-password-quality
    + hprop default mode is encrypt
    + kadmind "all" permission does not include "get-keys"
    + verify-password-quality might not be stateless
- Version 7.6.0
  + Security (#555):
  - CVE-2018-16860 Heimdal KDC: Reject PA-S4U2Self with unkeyed
    checksum
    When the Heimdal KDC checks the checksum that is placed on
    the S4U2Self packet by the server to protect the requested
    principal against modification, it does not confirm that
    the checksum algorithm that protects the user name
    (principal) in the request is keyed. This allows a
    man-in-the-middle attacker who can intercept the request to
    the KDC to modify the packet by replacing the user name
    (principal) in the request with any desired user name
    (principal) that exists in the KDC and replace the checksum
    protecting that name with a CRC32 checksum (which requires
    no prior knowledge to compute).
    This would allow a S4U2Self ticket requested on behalf of
    user name (principal) user@EXAMPLE.COM to any service to be
    changed to a S4U2Self ticket with a user name (principal) of
    Administrator@EXAMPLE.COM. This ticket would then contain
    the PAC of the modified user name (principal).
  - CVE-2019-12098, client-only:
    RFC8062 Section 7 requires verification of the PA-PKINIT-KX
    key exchange when anonymous PKINIT is used. Failure to do
    so can permit an active attacker to become a
    man-in-the-middle.
  + Bug fixes:
  - Happy eyeballs: Don't wait for responses from
    known-unreachable KDCs.
  - kdc:
    + check return copy_Realm, copy_PrincipalName,
    copy_EncryptionKey
  - kinit:
    + cleanup temporary ccaches
    + see man page for "kinit --anonymous" command line syntax
    change
  - kdc:
    + Make anonymous AS-requests more RFC8062-compliant.
    Updated expired test certificates
  - Solaris:
    + PKCS#11 hcrypto backend broken since 7.0.1
    + Building with Sun Pro C
  + Features:
  - kuser: support authenticated anonymous AS-REQs in kinit
  - kdc: support for anonymous TGS-REQs
  - kgetcred support for anonymous service tickets
  - Support builds with OpenSSL 1.1.1
- fixed heimdal-patched.diff and reproducible.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1653480000">- Apply Shared Library Packaging Policy and resolve rpmlint
  errors like "libheimdal.x86_64: E: shlib-policy-name-error
  SONAME: libasn1.so.8, expected package suffix: 8"</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656417600">- Add heimdal-7.7.0-autoconf-2.70.patch: Fix build with autoconf
  2.70 (gh#heimdal/heimdal#856).</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656590400">- Add ldconfig scriptlets.
- Fix 'Conflicts:' tags.
- Remove obsolete macros and conditionals.
- Ran spec-cleaner.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1671624000">- Update to version 7.8.0
  + This release includes both the Heimdal 7.7.1 Security
    Vulnerability fixes and non-Security bug fixes/improvements.
  + Security Vulnerabilities:
  - CVE-2022-42898 PAC parse integer overflows
  - CVE-2022-3437 Overflows and non-constant time leaks in
    DES{,3} and arcfour
  - CVE-2022-41916 Fix Unicode normalization read of 1 bytes past
    end of array
  - CVE-2021-44758 A null pointer de-reference DoS in SPNEGO
    acceptors
  - CVE-2021-3671 A null pointer de-reference when handling
    missing sname in TGS-REQ
  - CVE-2022-44640 Heimdal KDC: invalid free in ASN.1 codec
    Note that CVE-2022-44640 is a severe vulnerability,
    possibly a 10.0 on the Common Vulnerability Scoring
    System (CVSS) v3, as we believe it should be possible to
    get an RCE on a KDC, which means that credentials can be
    compromised that can be used to impersonate anyone in a
    realm or forest of realms.
    Heimdal's ASN.1 compiler generates code that allows
    specially crafted DER encodings of CHOICEs to invoke the
    wrong free function on the decoded structure upon decode
    error. This is known to impact the Heimdal KDC, leading to
    an invalid free() of an address partly or wholly under the
    control of the attacker, in turn leading to a potential
    remote code execution (RCE) vulnerability.
    This error affects the DER codec for all extensible CHOICE
    types used in Heimdal, though not all cases will be
    exploitable. We have not completed a thorough analysis of
    all the Heimdal components affected, thus the Kerberos
    client, the X.509 library, and other parts, may be affected
    as well.
    This bug has been in Heimdal's ASN.1 compiler since 2005,
    but it may only affect Heimdal 1.6 and up. It was first
    reported by Douglas Bagnall, though it had been found
    independently by the Heimdal maintainers via fuzzing a few
    weeks earlier.
    While no zero-day exploit is known, such an exploit will
    likely be available soon after public disclosure.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  + Other changes:
  - Bugs found by UBSAN (including the incorrect encoding of
    unconstrained INTEGER value -1).
  - Errors found by the LLVM scan-build static analyzer.
  - Errors found by the valgrind memory debugger.
  - Work around GCC Bug 95189 (memcmp wrongly stripped like
    strcmp).
  - Correct ASN.1 OID typo for SHA-384
  - Fix a deadlock in in the MEMORY ccache type.
  - TGS: strip forwardable and proxiable flags if the server is
    disallowed.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  - Incremental HDB propagation improvements
    Refactor send_diffs making it progressive
    Handle partial writes on non-blocking sockets
    Disable Nagle in iprop master and slave
    Use async I/O
    Don't send I_HAVE in response to AYT
    Do not recover log in kadm5_get_principal()
    Don't send diffs to slaves with not yet known version
    Don't stutter in send_diffs
  - Optional backwards-compatible anon-pkinit behavior
- Removed heimdal-7.7.0-autoconf-2.70.patch, fixed upstream.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1673352000">- replace libheimdal conflicts by obsoletes / provides to provide a
  smooth update in the new libheimdal-devel.</changelog>
</package>
<package pkgid="bf5fd4f7d3aec12b7ed663ff2660d1ad87e8375df21eee4d5affeacfe187eaca" name="libwind0" arch="x86_64">
  <version epoch="0" ver="7.8.0" rel="bp154.2.4.1"/>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1440936000">- Initial package, version 1.6rc2
- Added patch heimdal-version-script-client.map.patch to add file
  version-script-client.map (File is present in git for tag 1.6rc2
  but missing in tarball).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441108800">- Some changes in spec file to enable build for SLES.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441195200">- Added Conflicts tags to spec file because devel package conflicts
  with krb5-devel and krb5-mini-devel.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441454400">- Added a patched instead of the original tarball because only
  shared libraries will be build and source files of these (not to
  be build) programs have problematic licenses.
- Added script heimdal-patch-source.sh to sources.
- Added patch heimdal-patched.diff that fixes configure.ac and
  several Makefile.am files to successfully build patched source.
- Removed unneeded dependencies in spec file for build.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1483790400">- Update to version 7.1.0
- Removed heimdal-version-script-client.map.patch, fixed upstream.
- Fixed heimdal-patched.diff.
- Unfortunately there is no updated changelog file in tarball,
  changes can be seen in source code version control systems
  history log.</changelog>
  <changelog author="jengelh@inai.de" date="1486036800">- Summary and RPM group update. Do a direct call to ldconfig
  where possible.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1497528000">- Update to version 7.3.0
  - Security
    + Fix transit path validation. Commit f469fc6 (2010-10-02)
    inadvertently caused the previous hop realm to not be added
    to the transit path of issued tickets. This may, in some
    cases, enable bypass of capath policy in Heimdal versions 1.5
    through 7.2.
    Note, this may break sites that rely on the bug. With the bug
    some incomplete [capaths] worked, that should not have.
    These may now break authentication in some cross-realm
    configurations. (CVE-2017-6594)
- Version 7.2.0
  - Bug fixes
    + Portability improvements.
    + More strict parsing of encoded URI components in HTTP KDC.
    + Fixed memory leak in malloc error recovery in NTLM GSSAPI
    mechanism.
    + Avoid overly specific CPU info in krb5-config in aid of
    reproducible builds.
    + Don't do AFS string-to-key tests when feature is disabled.
    + Skip mdb_stat test when the command is not available.
    + Windows: update SHA2 timestamp server.
    + hdb: add missing export
    hdb_generate_key_set_password_with_ks_tuple.
    + Fix signature of hdb_generate_key_set_password().
    + Windows: enable KX509 support in the KDC.
    + kdc: fix kx509 service principal match.
    + iprop: handle case where master sends nothing new.
    + ipropd-slave: fix incorrect error codes.
    + Allow choice of sqlite for HDB pref.
    + check-iprop: don't fail to kill daemons.
    + roken: pidfile -&gt; rk_pidfile.
    + kdc: _kdc_do_kx509 fix use after free error.
    + Do not detect x32 as 64-bit platform.
    + No sys/ttydefaults.h on CYGWIN.
    + Fix check-iprop races.
    + roken_detach_prep() close pipe.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1501761600">- Update to version 7.4.0
  - Security
  - Fix CVE-2017-11103: Orpheus' Lyre KDC-REP service name
    validation.
    This is a critical vulnerability.
    In _krb5_extract_ticket() the KDC-REP service name must be
    obtained from encrypted version stored in 'enc_part' instead
    of the unencrypted version stored in 'ticket'.
    Use of the unecrypted version provides an opportunity for
    successful server impersonation and other attacks.
    Identified by Jeffrey Altman, Viktor Duchovni and
    Nico Williams.
    See https://www.orpheus-lyre.info/ for more details.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1512648000">- Added Avoid_NULL_structure_pointer_member_dereference.patch,
  fixes (bsc#1071675).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1514548800">- Update to version 7.5.0
  - Security
  - Fix CVE-2017-17439, which is a remote denial of service
    vulnerability:
    In Heimdal 7.1 through 7.4, remote unauthenticated attackers
    are able to crash the KDC by sending a crafted UDP packet
    containing empty data fields for client name or realm.
  - Bug fixes
  - Handle long input lines when reloading database dumps.
  - In pre-forked mode (default on Unix), correctly clear the
    process ids of exited children, allowing new child processes
    to replace the old.
  - Fixed incorrect KDC response when no-cross realm TGT exists,
    allowing client requests to fail quickly rather than time
    out after trying to get a correct answer from each KDC.
- Fixed heimdal-patched.diff.
- Removed Avoid_NULL_structure_pointer_member_dereference.patch,
  fixed upstream.</changelog>
  <changelog author="bwiedemann@suse.com" date="1533643200">- Add reproducible.patch to override build date (boo#1047218)
- Use constant hostname (boo#1084909)</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1561291200">- Update to version 7.7.0
  + Bug fixes:
  - PKCS#11 hcrypto back-end:
    + initialize the p11_module_load function list
    + verify that not only is a mechanism present but that its
    mechanism info states that it offers the required
    encryption, decryption or digest services
  - krb5:
    + Starting with 7.6, Heimdal permitted requesting
    authenticated anonymous tickets. However, it did not
    verify that a KDC in fact returned an anonymous ticket
    when one was requested.
    + Cease setting the KDCOption reaquest_anonymous flag when
    issuing S4UProxy (constrained delegation) TGS requests.
    + when the Win2K PKINIT compatibility option is set, do not
    require krbtgt otherName to match when validating KDC
    certificate.
    + set PKINIT_BTMM flag per Apple implementation
    + use memset_s() instead of memset()
  - kdc:
    + When generating KRB5SignedPath in the AS, use the reply
    client name rather than the one from the request, so
    validation will work correctly in the TGS.
    + allow checksum of PA-FOR-USER to be HMAC_MD5. Even if TGT
    used an enctype with a different checksum. Per [MS-SFU]
    2.2.1 PA-FOR-USER the checksum is always HMAC_MD5, and
    that's what Windows and MIT clients send.
    In Heimdal both the client and kdc use instead the
    checksum of the TGT, and therefore work with each other
    but Windows and MIT clients fail against Heimdal KDC.
    Both Windows and MIT KDC would allow any keyed checksum
    to be used so Heimdal client work fine against it.
    Change Heimdal KDC to allow HMAC_MD5 even for non RC4
    based TGT in order to support per-spec clients.
    + use memset_s() instead of memset()
    + Detect Heimdal 1.0 through 7.6 clients that issue
    S4UProxy (constrained delegation) TGS Requests with the
    request anonymous flag set. These requests will be
    treated as S4UProxy requests and not anonymous requests.
  - HDB:
    + Set SQLite3 backend default page size to 8KB.
    + Add hdb_set_sync() method
  - kadmind:
    + disable HDB sync during database load avoiding
    unnecessary disk i/o.
  - ipropd:
    + disable HDB sync during receive_everything. Doing an
    fsync per-record when receiving the complete HDB is a
    performance disaster. Among other things, if the HDB is
    very large, then one slave receving a full HDB can cause
    other slaves to timeout and, if HDB write activity is
    high enough to cause iprop log truncation, then also need
    full syncs, which leads to a cycle of full syncs for all
    slaves until HDB write activity drops.
    Allowing the iprop log to be larger helps, but improving
    receive_everything() performance helps even more.
  - kinit:
    + Anonymous PKINIT tickets discard the realm information
    used to locate the issuing AS. Store the issuing realm in
    the credentials cache in order to locate a KDC which can
    renew them.
    + Do not leak the result of krb5_cc_get_config() when
    determining anonymous PKINIT start realm.
  - klist:
    + Show transited-policy-checked, ok-as-delegate and
    anonymous flags when listing credentials.
  - tests:
    + Regenerate certs so that they expire before the 2038
    armageddon so the test suite will pass on 32-bit
    operating systems until the underlying issues can be
    resolved.
  - Solaris:
    + Define _STDC_C11_BCI for memset_s prototype
  - build tooling:
    + Convert from python 2 to python 3
  - documentation:
    + rename verify-password to verify-password-quality
    + hprop default mode is encrypt
    + kadmind "all" permission does not include "get-keys"
    + verify-password-quality might not be stateless
- Version 7.6.0
  + Security (#555):
  - CVE-2018-16860 Heimdal KDC: Reject PA-S4U2Self with unkeyed
    checksum
    When the Heimdal KDC checks the checksum that is placed on
    the S4U2Self packet by the server to protect the requested
    principal against modification, it does not confirm that
    the checksum algorithm that protects the user name
    (principal) in the request is keyed. This allows a
    man-in-the-middle attacker who can intercept the request to
    the KDC to modify the packet by replacing the user name
    (principal) in the request with any desired user name
    (principal) that exists in the KDC and replace the checksum
    protecting that name with a CRC32 checksum (which requires
    no prior knowledge to compute).
    This would allow a S4U2Self ticket requested on behalf of
    user name (principal) user@EXAMPLE.COM to any service to be
    changed to a S4U2Self ticket with a user name (principal) of
    Administrator@EXAMPLE.COM. This ticket would then contain
    the PAC of the modified user name (principal).
  - CVE-2019-12098, client-only:
    RFC8062 Section 7 requires verification of the PA-PKINIT-KX
    key exchange when anonymous PKINIT is used. Failure to do
    so can permit an active attacker to become a
    man-in-the-middle.
  + Bug fixes:
  - Happy eyeballs: Don't wait for responses from
    known-unreachable KDCs.
  - kdc:
    + check return copy_Realm, copy_PrincipalName,
    copy_EncryptionKey
  - kinit:
    + cleanup temporary ccaches
    + see man page for "kinit --anonymous" command line syntax
    change
  - kdc:
    + Make anonymous AS-requests more RFC8062-compliant.
    Updated expired test certificates
  - Solaris:
    + PKCS#11 hcrypto backend broken since 7.0.1
    + Building with Sun Pro C
  + Features:
  - kuser: support authenticated anonymous AS-REQs in kinit
  - kdc: support for anonymous TGS-REQs
  - kgetcred support for anonymous service tickets
  - Support builds with OpenSSL 1.1.1
- fixed heimdal-patched.diff and reproducible.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1653480000">- Apply Shared Library Packaging Policy and resolve rpmlint
  errors like "libheimdal.x86_64: E: shlib-policy-name-error
  SONAME: libasn1.so.8, expected package suffix: 8"</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656417600">- Add heimdal-7.7.0-autoconf-2.70.patch: Fix build with autoconf
  2.70 (gh#heimdal/heimdal#856).</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656590400">- Add ldconfig scriptlets.
- Fix 'Conflicts:' tags.
- Remove obsolete macros and conditionals.
- Ran spec-cleaner.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1671624000">- Update to version 7.8.0
  + This release includes both the Heimdal 7.7.1 Security
    Vulnerability fixes and non-Security bug fixes/improvements.
  + Security Vulnerabilities:
  - CVE-2022-42898 PAC parse integer overflows
  - CVE-2022-3437 Overflows and non-constant time leaks in
    DES{,3} and arcfour
  - CVE-2022-41916 Fix Unicode normalization read of 1 bytes past
    end of array
  - CVE-2021-44758 A null pointer de-reference DoS in SPNEGO
    acceptors
  - CVE-2021-3671 A null pointer de-reference when handling
    missing sname in TGS-REQ
  - CVE-2022-44640 Heimdal KDC: invalid free in ASN.1 codec
    Note that CVE-2022-44640 is a severe vulnerability,
    possibly a 10.0 on the Common Vulnerability Scoring
    System (CVSS) v3, as we believe it should be possible to
    get an RCE on a KDC, which means that credentials can be
    compromised that can be used to impersonate anyone in a
    realm or forest of realms.
    Heimdal's ASN.1 compiler generates code that allows
    specially crafted DER encodings of CHOICEs to invoke the
    wrong free function on the decoded structure upon decode
    error. This is known to impact the Heimdal KDC, leading to
    an invalid free() of an address partly or wholly under the
    control of the attacker, in turn leading to a potential
    remote code execution (RCE) vulnerability.
    This error affects the DER codec for all extensible CHOICE
    types used in Heimdal, though not all cases will be
    exploitable. We have not completed a thorough analysis of
    all the Heimdal components affected, thus the Kerberos
    client, the X.509 library, and other parts, may be affected
    as well.
    This bug has been in Heimdal's ASN.1 compiler since 2005,
    but it may only affect Heimdal 1.6 and up. It was first
    reported by Douglas Bagnall, though it had been found
    independently by the Heimdal maintainers via fuzzing a few
    weeks earlier.
    While no zero-day exploit is known, such an exploit will
    likely be available soon after public disclosure.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  + Other changes:
  - Bugs found by UBSAN (including the incorrect encoding of
    unconstrained INTEGER value -1).
  - Errors found by the LLVM scan-build static analyzer.
  - Errors found by the valgrind memory debugger.
  - Work around GCC Bug 95189 (memcmp wrongly stripped like
    strcmp).
  - Correct ASN.1 OID typo for SHA-384
  - Fix a deadlock in in the MEMORY ccache type.
  - TGS: strip forwardable and proxiable flags if the server is
    disallowed.
  - CVE-2019-14870: Validate client attributes in
    protocol-transition
  - CVE-2019-14870: Apply forwardable policy in
    protocol-transition
  - CVE-2019-14870: Always lookup impersonate client in DB
  - Incremental HDB propagation improvements
    Refactor send_diffs making it progressive
    Handle partial writes on non-blocking sockets
    Disable Nagle in iprop master and slave
    Use async I/O
    Don't send I_HAVE in response to AYT
    Do not recover log in kadm5_get_principal()
    Don't send diffs to slaves with not yet known version
    Don't stutter in send_diffs
  - Optional backwards-compatible anon-pkinit behavior
- Removed heimdal-7.7.0-autoconf-2.70.patch, fixed upstream.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1673352000">- replace libheimdal conflicts by obsoletes / provides to provide a
  smooth update in the new libheimdal-devel.</changelog>
</package>
<package pkgid="550c5d845ed0208f27ea58d362473dc5d5d3912eb38001cace9616971ee08a5e" name="libxls" arch="src">
  <version epoch="0" ver="1.6.2" rel="bp154.2.3.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1575201600">- Initial package for openSUSE</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1598356800">- update to 1.5.3:
  * Allow truncated XLS files
  * Fix long-standing "extra column" bug #73
  * Support for RSTRING records (rich-text cells in older
    BIFF5 files) tidyverse/readxl#611</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1599652800">- Update to release 1.6.1
  * Enabled decoding of non-Unicode character sets in older
    (BIFF5) XLS files.
  * Improved string conversion performance in newer files.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1611662400">- Update to release 1.6.2
  * Fix NULL pointer dereferences in the xls2csv tool
    [boo#1179532] [CVE-2020-27819]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1652702400">- Add 0001-Fixes-94-possible-null-ptr-deref.patch
  [boo#1192323] [CVE-2021-27836]</changelog>
</package>
<package pkgid="f1dc0b7c32976888bcec2175140a87b4e116b3b18888465cbe6af37faa981b4a" name="libxls-devel" arch="aarch64">
  <version epoch="0" ver="1.6.2" rel="bp154.2.3.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1575201600">- Initial package for openSUSE</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1598356800">- update to 1.5.3:
  * Allow truncated XLS files
  * Fix long-standing "extra column" bug #73
  * Support for RSTRING records (rich-text cells in older
    BIFF5 files) tidyverse/readxl#611</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1599652800">- Update to release 1.6.1
  * Enabled decoding of non-Unicode character sets in older
    (BIFF5) XLS files.
  * Improved string conversion performance in newer files.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1611662400">- Update to release 1.6.2
  * Fix NULL pointer dereferences in the xls2csv tool
    [boo#1179532] [CVE-2020-27819]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1652702400">- Add 0001-Fixes-94-possible-null-ptr-deref.patch
  [boo#1192323] [CVE-2021-27836]</changelog>
</package>
<package pkgid="53caae088ca572755976666c1bbf0c6206072c7d37efe8d1b2cc45d7ab3b9da4" name="libxls-devel" arch="i586">
  <version epoch="0" ver="1.6.2" rel="bp154.2.3.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1575201600">- Initial package for openSUSE</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1598356800">- update to 1.5.3:
  * Allow truncated XLS files
  * Fix long-standing "extra column" bug #73
  * Support for RSTRING records (rich-text cells in older
    BIFF5 files) tidyverse/readxl#611</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1599652800">- Update to release 1.6.1
  * Enabled decoding of non-Unicode character sets in older
    (BIFF5) XLS files.
  * Improved string conversion performance in newer files.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1611662400">- Update to release 1.6.2
  * Fix NULL pointer dereferences in the xls2csv tool
    [boo#1179532] [CVE-2020-27819]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1652702400">- Add 0001-Fixes-94-possible-null-ptr-deref.patch
  [boo#1192323] [CVE-2021-27836]</changelog>
</package>
<package pkgid="3b23ef378f97b13009ce5a4bfa3abafe7f2a4be0df6916a7fd2488c03ad4715c" name="libxls-devel" arch="ppc64le">
  <version epoch="0" ver="1.6.2" rel="bp154.2.3.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1575201600">- Initial package for openSUSE</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1598356800">- update to 1.5.3:
  * Allow truncated XLS files
  * Fix long-standing "extra column" bug #73
  * Support for RSTRING records (rich-text cells in older
    BIFF5 files) tidyverse/readxl#611</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1599652800">- Update to release 1.6.1
  * Enabled decoding of non-Unicode character sets in older
    (BIFF5) XLS files.
  * Improved string conversion performance in newer files.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1611662400">- Update to release 1.6.2
  * Fix NULL pointer dereferences in the xls2csv tool
    [boo#1179532] [CVE-2020-27819]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1652702400">- Add 0001-Fixes-94-possible-null-ptr-deref.patch
  [boo#1192323] [CVE-2021-27836]</changelog>
</package>
<package pkgid="2c6b5aa2230248f56b9cf46296538a03a44dfe1f3ffa790387ce089ea9afe7dd" name="libxls-devel" arch="s390x">
  <version epoch="0" ver="1.6.2" rel="bp154.2.3.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1575201600">- Initial package for openSUSE</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1598356800">- update to 1.5.3:
  * Allow truncated XLS files
  * Fix long-standing "extra column" bug #73
  * Support for RSTRING records (rich-text cells in older
    BIFF5 files) tidyverse/readxl#611</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1599652800">- Update to release 1.6.1
  * Enabled decoding of non-Unicode character sets in older
    (BIFF5) XLS files.
  * Improved string conversion performance in newer files.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1611662400">- Update to release 1.6.2
  * Fix NULL pointer dereferences in the xls2csv tool
    [boo#1179532] [CVE-2020-27819]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1652702400">- Add 0001-Fixes-94-possible-null-ptr-deref.patch
  [boo#1192323] [CVE-2021-27836]</changelog>
</package>
<package pkgid="d9e40c6a57f880a93066e9cf4cf0f2e92160af818ce5f875f0f0a458326bfe1d" name="libxls-devel" arch="x86_64">
  <version epoch="0" ver="1.6.2" rel="bp154.2.3.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1575201600">- Initial package for openSUSE</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1598356800">- update to 1.5.3:
  * Allow truncated XLS files
  * Fix long-standing "extra column" bug #73
  * Support for RSTRING records (rich-text cells in older
    BIFF5 files) tidyverse/readxl#611</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1599652800">- Update to release 1.6.1
  * Enabled decoding of non-Unicode character sets in older
    (BIFF5) XLS files.
  * Improved string conversion performance in newer files.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1611662400">- Update to release 1.6.2
  * Fix NULL pointer dereferences in the xls2csv tool
    [boo#1179532] [CVE-2020-27819]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1652702400">- Add 0001-Fixes-94-possible-null-ptr-deref.patch
  [boo#1192323] [CVE-2021-27836]</changelog>
</package>
<package pkgid="030fbbb3d10e2b8fea936d40f10a69f01b8b24fd0da324f9738962714fd1640c" name="libxls-tools" arch="aarch64">
  <version epoch="0" ver="1.6.2" rel="bp154.2.3.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1575201600">- Initial package for openSUSE</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1598356800">- update to 1.5.3:
  * Allow truncated XLS files
  * Fix long-standing "extra column" bug #73
  * Support for RSTRING records (rich-text cells in older
    BIFF5 files) tidyverse/readxl#611</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1599652800">- Update to release 1.6.1
  * Enabled decoding of non-Unicode character sets in older
    (BIFF5) XLS files.
  * Improved string conversion performance in newer files.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1611662400">- Update to release 1.6.2
  * Fix NULL pointer dereferences in the xls2csv tool
    [boo#1179532] [CVE-2020-27819]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1652702400">- Add 0001-Fixes-94-possible-null-ptr-deref.patch
  [boo#1192323] [CVE-2021-27836]</changelog>
</package>
<package pkgid="bf463ade7fd7b63686aa4fbd8c2ade4a4681fb2c26909158a5b853aa33a03d53" name="libxls-tools" arch="i586">
  <version epoch="0" ver="1.6.2" rel="bp154.2.3.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1575201600">- Initial package for openSUSE</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1598356800">- update to 1.5.3:
  * Allow truncated XLS files
  * Fix long-standing "extra column" bug #73
  * Support for RSTRING records (rich-text cells in older
    BIFF5 files) tidyverse/readxl#611</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1599652800">- Update to release 1.6.1
  * Enabled decoding of non-Unicode character sets in older
    (BIFF5) XLS files.
  * Improved string conversion performance in newer files.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1611662400">- Update to release 1.6.2
  * Fix NULL pointer dereferences in the xls2csv tool
    [boo#1179532] [CVE-2020-27819]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1652702400">- Add 0001-Fixes-94-possible-null-ptr-deref.patch
  [boo#1192323] [CVE-2021-27836]</changelog>
</package>
<package pkgid="041d18eeacaa71ce847884dc28ce819fc8cce1311d9532222de74479c33d4703" name="libxls-tools" arch="ppc64le">
  <version epoch="0" ver="1.6.2" rel="bp154.2.3.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1575201600">- Initial package for openSUSE</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1598356800">- update to 1.5.3:
  * Allow truncated XLS files
  * Fix long-standing "extra column" bug #73
  * Support for RSTRING records (rich-text cells in older
    BIFF5 files) tidyverse/readxl#611</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1599652800">- Update to release 1.6.1
  * Enabled decoding of non-Unicode character sets in older
    (BIFF5) XLS files.
  * Improved string conversion performance in newer files.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1611662400">- Update to release 1.6.2
  * Fix NULL pointer dereferences in the xls2csv tool
    [boo#1179532] [CVE-2020-27819]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1652702400">- Add 0001-Fixes-94-possible-null-ptr-deref.patch
  [boo#1192323] [CVE-2021-27836]</changelog>
</package>
<package pkgid="294f0e6897fb7f45f28d9ed730f03ab73ed4159bc24cd0e3fe3ecf299b8f5a0a" name="libxls-tools" arch="s390x">
  <version epoch="0" ver="1.6.2" rel="bp154.2.3.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1575201600">- Initial package for openSUSE</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1598356800">- update to 1.5.3:
  * Allow truncated XLS files
  * Fix long-standing "extra column" bug #73
  * Support for RSTRING records (rich-text cells in older
    BIFF5 files) tidyverse/readxl#611</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1599652800">- Update to release 1.6.1
  * Enabled decoding of non-Unicode character sets in older
    (BIFF5) XLS files.
  * Improved string conversion performance in newer files.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1611662400">- Update to release 1.6.2
  * Fix NULL pointer dereferences in the xls2csv tool
    [boo#1179532] [CVE-2020-27819]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1652702400">- Add 0001-Fixes-94-possible-null-ptr-deref.patch
  [boo#1192323] [CVE-2021-27836]</changelog>
</package>
<package pkgid="4b8c931c71a7d6b1d34c7e0960d5c20af02ec240ca893b96d7838bb008156b3f" name="libxls-tools" arch="x86_64">
  <version epoch="0" ver="1.6.2" rel="bp154.2.3.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1575201600">- Initial package for openSUSE</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1598356800">- update to 1.5.3:
  * Allow truncated XLS files
  * Fix long-standing "extra column" bug #73
  * Support for RSTRING records (rich-text cells in older
    BIFF5 files) tidyverse/readxl#611</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1599652800">- Update to release 1.6.1
  * Enabled decoding of non-Unicode character sets in older
    (BIFF5) XLS files.
  * Improved string conversion performance in newer files.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1611662400">- Update to release 1.6.2
  * Fix NULL pointer dereferences in the xls2csv tool
    [boo#1179532] [CVE-2020-27819]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1652702400">- Add 0001-Fixes-94-possible-null-ptr-deref.patch
  [boo#1192323] [CVE-2021-27836]</changelog>
</package>
<package pkgid="76b50820ecf98495d551960e65fef7a7d5ef6cda3344f1d499b78b43fd7dab9c" name="libxlsreader8" arch="aarch64">
  <version epoch="0" ver="1.6.2" rel="bp154.2.3.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1575201600">- Initial package for openSUSE</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1598356800">- update to 1.5.3:
  * Allow truncated XLS files
  * Fix long-standing "extra column" bug #73
  * Support for RSTRING records (rich-text cells in older
    BIFF5 files) tidyverse/readxl#611</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1599652800">- Update to release 1.6.1
  * Enabled decoding of non-Unicode character sets in older
    (BIFF5) XLS files.
  * Improved string conversion performance in newer files.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1611662400">- Update to release 1.6.2
  * Fix NULL pointer dereferences in the xls2csv tool
    [boo#1179532] [CVE-2020-27819]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1652702400">- Add 0001-Fixes-94-possible-null-ptr-deref.patch
  [boo#1192323] [CVE-2021-27836]</changelog>
</package>
<package pkgid="edd37ea4d8b1bf349dcac0aed7357bc59a2ba9d9e70a8b702fa4859c19df5a7d" name="libxlsreader8" arch="i586">
  <version epoch="0" ver="1.6.2" rel="bp154.2.3.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1575201600">- Initial package for openSUSE</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1598356800">- update to 1.5.3:
  * Allow truncated XLS files
  * Fix long-standing "extra column" bug #73
  * Support for RSTRING records (rich-text cells in older
    BIFF5 files) tidyverse/readxl#611</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1599652800">- Update to release 1.6.1
  * Enabled decoding of non-Unicode character sets in older
    (BIFF5) XLS files.
  * Improved string conversion performance in newer files.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1611662400">- Update to release 1.6.2
  * Fix NULL pointer dereferences in the xls2csv tool
    [boo#1179532] [CVE-2020-27819]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1652702400">- Add 0001-Fixes-94-possible-null-ptr-deref.patch
  [boo#1192323] [CVE-2021-27836]</changelog>
</package>
<package pkgid="6e57c49e3ee9421b02f3ba23171aa9c23778ed3b53ecb22117f5073bb17dfe1a" name="libxlsreader8" arch="ppc64le">
  <version epoch="0" ver="1.6.2" rel="bp154.2.3.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1575201600">- Initial package for openSUSE</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1598356800">- update to 1.5.3:
  * Allow truncated XLS files
  * Fix long-standing "extra column" bug #73
  * Support for RSTRING records (rich-text cells in older
    BIFF5 files) tidyverse/readxl#611</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1599652800">- Update to release 1.6.1
  * Enabled decoding of non-Unicode character sets in older
    (BIFF5) XLS files.
  * Improved string conversion performance in newer files.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1611662400">- Update to release 1.6.2
  * Fix NULL pointer dereferences in the xls2csv tool
    [boo#1179532] [CVE-2020-27819]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1652702400">- Add 0001-Fixes-94-possible-null-ptr-deref.patch
  [boo#1192323] [CVE-2021-27836]</changelog>
</package>
<package pkgid="2b705c37e7579cea288516e0b3caa8c77f63f4ca954c8a8f3460165bc906e55b" name="libxlsreader8" arch="s390x">
  <version epoch="0" ver="1.6.2" rel="bp154.2.3.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1575201600">- Initial package for openSUSE</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1598356800">- update to 1.5.3:
  * Allow truncated XLS files
  * Fix long-standing "extra column" bug #73
  * Support for RSTRING records (rich-text cells in older
    BIFF5 files) tidyverse/readxl#611</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1599652800">- Update to release 1.6.1
  * Enabled decoding of non-Unicode character sets in older
    (BIFF5) XLS files.
  * Improved string conversion performance in newer files.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1611662400">- Update to release 1.6.2
  * Fix NULL pointer dereferences in the xls2csv tool
    [boo#1179532] [CVE-2020-27819]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1652702400">- Add 0001-Fixes-94-possible-null-ptr-deref.patch
  [boo#1192323] [CVE-2021-27836]</changelog>
</package>
<package pkgid="e65b3cb86c92556e328d52ab9490160b4686258c4d7c8e1e59daa3281f9a2da0" name="libxlsreader8" arch="x86_64">
  <version epoch="0" ver="1.6.2" rel="bp154.2.3.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1575201600">- Initial package for openSUSE</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1598356800">- update to 1.5.3:
  * Allow truncated XLS files
  * Fix long-standing "extra column" bug #73
  * Support for RSTRING records (rich-text cells in older
    BIFF5 files) tidyverse/readxl#611</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1599652800">- Update to release 1.6.1
  * Enabled decoding of non-Unicode character sets in older
    (BIFF5) XLS files.
  * Improved string conversion performance in newer files.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1611662400">- Update to release 1.6.2
  * Fix NULL pointer dereferences in the xls2csv tool
    [boo#1179532] [CVE-2020-27819]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1652702400">- Add 0001-Fixes-94-possible-null-ptr-deref.patch
  [boo#1192323] [CVE-2021-27836]</changelog>
</package>
<package pkgid="b6128c09eb77b401ebd234bc39f0708986bd03c0f21b33768d2a5b4da8baf7c6" name="lighttpd" arch="aarch64">
  <version epoch="0" ver="1.4.66" rel="bp154.2.3.1"/>
  <changelog author="mikhail.kasimov@gmail.com" date="1523016000">- Updated 10-ssl.conf (TLSv1.2 only) for lighttpd.conf in
  lighttpd_1.4.49-1.1.debian.tar.xz</changelog>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
</package>
<package pkgid="965c45ef07336dbaa6866f85a867518063c1a021a21fd000a911fbb1e5289547" name="lighttpd" arch="i586">
  <version epoch="0" ver="1.4.66" rel="bp154.2.3.1"/>
  <changelog author="mikhail.kasimov@gmail.com" date="1523016000">- Updated 10-ssl.conf (TLSv1.2 only) for lighttpd.conf in
  lighttpd_1.4.49-1.1.debian.tar.xz</changelog>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
</package>
<package pkgid="ed5b8e9efa513317fb11e41ea980362e9f64d8c242ddd06a49b1ac42eb722f93" name="lighttpd" arch="ppc64le">
  <version epoch="0" ver="1.4.66" rel="bp154.2.3.1"/>
  <changelog author="mikhail.kasimov@gmail.com" date="1523016000">- Updated 10-ssl.conf (TLSv1.2 only) for lighttpd.conf in
  lighttpd_1.4.49-1.1.debian.tar.xz</changelog>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
</package>
<package pkgid="19b279ec61157c8ce0dffb18f369892274cdb4ba69bb020402c933d48ace216f" name="lighttpd" arch="s390x">
  <version epoch="0" ver="1.4.66" rel="bp154.2.3.1"/>
  <changelog author="mikhail.kasimov@gmail.com" date="1523016000">- Updated 10-ssl.conf (TLSv1.2 only) for lighttpd.conf in
  lighttpd_1.4.49-1.1.debian.tar.xz</changelog>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
</package>
<package pkgid="4f18a109f551dbe69425fab0da165ec1bfe9b0eefc349e94270d8e4517fadc88" name="lighttpd" arch="src">
  <version epoch="0" ver="1.4.66" rel="bp154.2.3.1"/>
  <changelog author="mikhail.kasimov@gmail.com" date="1523016000">- Updated 10-ssl.conf (TLSv1.2 only) for lighttpd.conf in
  lighttpd_1.4.49-1.1.debian.tar.xz</changelog>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
</package>
<package pkgid="5bbf5b861acb9082e331dfbef1ff28d71700c35ea394f490e43faea18f7c8252" name="lighttpd" arch="x86_64">
  <version epoch="0" ver="1.4.66" rel="bp154.2.3.1"/>
  <changelog author="mikhail.kasimov@gmail.com" date="1523016000">- Updated 10-ssl.conf (TLSv1.2 only) for lighttpd.conf in
  lighttpd_1.4.49-1.1.debian.tar.xz</changelog>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
</package>
<package pkgid="6bc57df6cca98cb4ac3044b353857eb77c24bdec766a094878b149a0d58212ba" name="lighttpd" arch="aarch64">
  <version epoch="0" ver="1.4.67" rel="bp154.2.6.1"/>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1663934400">- update to 1.4.67:
  * Update comment about TCP_INFO on OpenBSD
  * [mod_ajp13] fix crash with bad response headers (fixes #3170)
  * [core] handle RDHUP when collecting chunked body
    CVE-2022-41556 boo#1203872
  * [core] tweak streaming request body to backends
  * [core] handle ENOSPC with pwritev() (#3171)
  * [core] manually calculate off_t max (fixes #3171)
  * [autoconf] force large file support (#3171)
  * [multiple] quiet coverity warnings using casts
  * [meson] add license keyword to project declaration</changelog>
</package>
<package pkgid="0d10815424b0a0cdbf8f7fa07611df7c2495d940e753cd10c79d311077b682dc" name="lighttpd" arch="i586">
  <version epoch="0" ver="1.4.67" rel="bp154.2.6.1"/>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1663934400">- update to 1.4.67:
  * Update comment about TCP_INFO on OpenBSD
  * [mod_ajp13] fix crash with bad response headers (fixes #3170)
  * [core] handle RDHUP when collecting chunked body
    CVE-2022-41556 boo#1203872
  * [core] tweak streaming request body to backends
  * [core] handle ENOSPC with pwritev() (#3171)
  * [core] manually calculate off_t max (fixes #3171)
  * [autoconf] force large file support (#3171)
  * [multiple] quiet coverity warnings using casts
  * [meson] add license keyword to project declaration</changelog>
</package>
<package pkgid="5d2a5ecf707775057dddcf50b3641c93e97bd8b2a2d55122908362c7b3b842c8" name="lighttpd" arch="ppc64le">
  <version epoch="0" ver="1.4.67" rel="bp154.2.6.1"/>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1663934400">- update to 1.4.67:
  * Update comment about TCP_INFO on OpenBSD
  * [mod_ajp13] fix crash with bad response headers (fixes #3170)
  * [core] handle RDHUP when collecting chunked body
    CVE-2022-41556 boo#1203872
  * [core] tweak streaming request body to backends
  * [core] handle ENOSPC with pwritev() (#3171)
  * [core] manually calculate off_t max (fixes #3171)
  * [autoconf] force large file support (#3171)
  * [multiple] quiet coverity warnings using casts
  * [meson] add license keyword to project declaration</changelog>
</package>
<package pkgid="a128640bb050e60cd53e9942898a850b7469999cf2d22a74b32998ca5c335f77" name="lighttpd" arch="s390x">
  <version epoch="0" ver="1.4.67" rel="bp154.2.6.1"/>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1663934400">- update to 1.4.67:
  * Update comment about TCP_INFO on OpenBSD
  * [mod_ajp13] fix crash with bad response headers (fixes #3170)
  * [core] handle RDHUP when collecting chunked body
    CVE-2022-41556 boo#1203872
  * [core] tweak streaming request body to backends
  * [core] handle ENOSPC with pwritev() (#3171)
  * [core] manually calculate off_t max (fixes #3171)
  * [autoconf] force large file support (#3171)
  * [multiple] quiet coverity warnings using casts
  * [meson] add license keyword to project declaration</changelog>
</package>
<package pkgid="5f1f18513b502f9bc66e9725f5ef711f9f3a1a618f39092b9bd23bc1dad79603" name="lighttpd" arch="src">
  <version epoch="0" ver="1.4.67" rel="bp154.2.6.1"/>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1663934400">- update to 1.4.67:
  * Update comment about TCP_INFO on OpenBSD
  * [mod_ajp13] fix crash with bad response headers (fixes #3170)
  * [core] handle RDHUP when collecting chunked body
    CVE-2022-41556 boo#1203872
  * [core] tweak streaming request body to backends
  * [core] handle ENOSPC with pwritev() (#3171)
  * [core] manually calculate off_t max (fixes #3171)
  * [autoconf] force large file support (#3171)
  * [multiple] quiet coverity warnings using casts
  * [meson] add license keyword to project declaration</changelog>
</package>
<package pkgid="668c4194a4ce6895af1bff0e04f8478b4ac41c6f01392c936fa44a0419f15884" name="lighttpd" arch="x86_64">
  <version epoch="0" ver="1.4.67" rel="bp154.2.6.1"/>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1663934400">- update to 1.4.67:
  * Update comment about TCP_INFO on OpenBSD
  * [mod_ajp13] fix crash with bad response headers (fixes #3170)
  * [core] handle RDHUP when collecting chunked body
    CVE-2022-41556 boo#1203872
  * [core] tweak streaming request body to backends
  * [core] handle ENOSPC with pwritev() (#3171)
  * [core] manually calculate off_t max (fixes #3171)
  * [autoconf] force large file support (#3171)
  * [multiple] quiet coverity warnings using casts
  * [meson] add license keyword to project declaration</changelog>
</package>
<package pkgid="846dc24e973f1d3c951a740dd18e09576c4ee9a4a1565c2ba51d1c93b0910265" name="lighttpd-mod_authn_gssapi" arch="aarch64">
  <version epoch="0" ver="1.4.66" rel="bp154.2.3.1"/>
  <changelog author="mikhail.kasimov@gmail.com" date="1523016000">- Updated 10-ssl.conf (TLSv1.2 only) for lighttpd.conf in
  lighttpd_1.4.49-1.1.debian.tar.xz</changelog>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
</package>
<package pkgid="c473b958a59873d7da4923c965f9bb8e1a2684dd51914ffc8edd4435e7241791" name="lighttpd-mod_authn_gssapi" arch="i586">
  <version epoch="0" ver="1.4.66" rel="bp154.2.3.1"/>
  <changelog author="mikhail.kasimov@gmail.com" date="1523016000">- Updated 10-ssl.conf (TLSv1.2 only) for lighttpd.conf in
  lighttpd_1.4.49-1.1.debian.tar.xz</changelog>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
</package>
<package pkgid="2e26de6ccf11624e3494e630322ed7393504c62116261f6fb4f3b812d1c36189" name="lighttpd-mod_authn_gssapi" arch="ppc64le">
  <version epoch="0" ver="1.4.66" rel="bp154.2.3.1"/>
  <changelog author="mikhail.kasimov@gmail.com" date="1523016000">- Updated 10-ssl.conf (TLSv1.2 only) for lighttpd.conf in
  lighttpd_1.4.49-1.1.debian.tar.xz</changelog>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
</package>
<package pkgid="3f42f1d2266060e7f695fbd64c883a0e909139aa5fa8afe63497f2965ad8ba11" name="lighttpd-mod_authn_gssapi" arch="s390x">
  <version epoch="0" ver="1.4.66" rel="bp154.2.3.1"/>
  <changelog author="mikhail.kasimov@gmail.com" date="1523016000">- Updated 10-ssl.conf (TLSv1.2 only) for lighttpd.conf in
  lighttpd_1.4.49-1.1.debian.tar.xz</changelog>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
</package>
<package pkgid="02b32be769702f747988498f34fa4be538c2ddd50e237583dd889d07674eb421" name="lighttpd-mod_authn_gssapi" arch="x86_64">
  <version epoch="0" ver="1.4.66" rel="bp154.2.3.1"/>
  <changelog author="mikhail.kasimov@gmail.com" date="1523016000">- Updated 10-ssl.conf (TLSv1.2 only) for lighttpd.conf in
  lighttpd_1.4.49-1.1.debian.tar.xz</changelog>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
</package>
<package pkgid="1b273011aea4197de8f99d96c8c5c93fd5db1913859ec4745975d3616a128ade" name="lighttpd-mod_authn_gssapi" arch="aarch64">
  <version epoch="0" ver="1.4.67" rel="bp154.2.6.1"/>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1663934400">- update to 1.4.67:
  * Update comment about TCP_INFO on OpenBSD
  * [mod_ajp13] fix crash with bad response headers (fixes #3170)
  * [core] handle RDHUP when collecting chunked body
    CVE-2022-41556 boo#1203872
  * [core] tweak streaming request body to backends
  * [core] handle ENOSPC with pwritev() (#3171)
  * [core] manually calculate off_t max (fixes #3171)
  * [autoconf] force large file support (#3171)
  * [multiple] quiet coverity warnings using casts
  * [meson] add license keyword to project declaration</changelog>
</package>
<package pkgid="ea143c19c146812114fd38e94205a82c72db6a35d62134cf7a5c9d1739ee1a76" name="lighttpd-mod_authn_gssapi" arch="i586">
  <version epoch="0" ver="1.4.67" rel="bp154.2.6.1"/>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1663934400">- update to 1.4.67:
  * Update comment about TCP_INFO on OpenBSD
  * [mod_ajp13] fix crash with bad response headers (fixes #3170)
  * [core] handle RDHUP when collecting chunked body
    CVE-2022-41556 boo#1203872
  * [core] tweak streaming request body to backends
  * [core] handle ENOSPC with pwritev() (#3171)
  * [core] manually calculate off_t max (fixes #3171)
  * [autoconf] force large file support (#3171)
  * [multiple] quiet coverity warnings using casts
  * [meson] add license keyword to project declaration</changelog>
</package>
<package pkgid="36ea3cf2786fe102377236220ce4609421ed9dc657fc1e90c235ebcfacb54391" name="lighttpd-mod_authn_gssapi" arch="ppc64le">
  <version epoch="0" ver="1.4.67" rel="bp154.2.6.1"/>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1663934400">- update to 1.4.67:
  * Update comment about TCP_INFO on OpenBSD
  * [mod_ajp13] fix crash with bad response headers (fixes #3170)
  * [core] handle RDHUP when collecting chunked body
    CVE-2022-41556 boo#1203872
  * [core] tweak streaming request body to backends
  * [core] handle ENOSPC with pwritev() (#3171)
  * [core] manually calculate off_t max (fixes #3171)
  * [autoconf] force large file support (#3171)
  * [multiple] quiet coverity warnings using casts
  * [meson] add license keyword to project declaration</changelog>
</package>
<package pkgid="6f3cbfb65f2329f1fa816dce052f5190b9c5334818404d11f61176926d4c2ec5" name="lighttpd-mod_authn_gssapi" arch="s390x">
  <version epoch="0" ver="1.4.67" rel="bp154.2.6.1"/>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1663934400">- update to 1.4.67:
  * Update comment about TCP_INFO on OpenBSD
  * [mod_ajp13] fix crash with bad response headers (fixes #3170)
  * [core] handle RDHUP when collecting chunked body
    CVE-2022-41556 boo#1203872
  * [core] tweak streaming request body to backends
  * [core] handle ENOSPC with pwritev() (#3171)
  * [core] manually calculate off_t max (fixes #3171)
  * [autoconf] force large file support (#3171)
  * [multiple] quiet coverity warnings using casts
  * [meson] add license keyword to project declaration</changelog>
</package>
<package pkgid="841ddd7c729736b0b8caaef52700c43b70f0922ee54ca1afc7901f3d3dcc603d" name="lighttpd-mod_authn_gssapi" arch="x86_64">
  <version epoch="0" ver="1.4.67" rel="bp154.2.6.1"/>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1663934400">- update to 1.4.67:
  * Update comment about TCP_INFO on OpenBSD
  * [mod_ajp13] fix crash with bad response headers (fixes #3170)
  * [core] handle RDHUP when collecting chunked body
    CVE-2022-41556 boo#1203872
  * [core] tweak streaming request body to backends
  * [core] handle ENOSPC with pwritev() (#3171)
  * [core] manually calculate off_t max (fixes #3171)
  * [autoconf] force large file support (#3171)
  * [multiple] quiet coverity warnings using casts
  * [meson] add license keyword to project declaration</changelog>
</package>
<package pkgid="450170c3ca89376d3b6f87f2a8f55245b8c5d5ba0c164e9547b965c2f3921812" name="lighttpd-mod_authn_ldap" arch="aarch64">
  <version epoch="0" ver="1.4.66" rel="bp154.2.3.1"/>
  <changelog author="mikhail.kasimov@gmail.com" date="1523016000">- Updated 10-ssl.conf (TLSv1.2 only) for lighttpd.conf in
  lighttpd_1.4.49-1.1.debian.tar.xz</changelog>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
</package>
<package pkgid="1f69934b1613f1c8f24e3e2a9022aebb4166dff803c7153926a3819ac3e64c20" name="lighttpd-mod_authn_ldap" arch="i586">
  <version epoch="0" ver="1.4.66" rel="bp154.2.3.1"/>
  <changelog author="mikhail.kasimov@gmail.com" date="1523016000">- Updated 10-ssl.conf (TLSv1.2 only) for lighttpd.conf in
  lighttpd_1.4.49-1.1.debian.tar.xz</changelog>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
</package>
<package pkgid="bcc2fb95e0fbf3f503b039221810b4aea74b6da7095f014d591cc60319879a76" name="lighttpd-mod_authn_ldap" arch="ppc64le">
  <version epoch="0" ver="1.4.66" rel="bp154.2.3.1"/>
  <changelog author="mikhail.kasimov@gmail.com" date="1523016000">- Updated 10-ssl.conf (TLSv1.2 only) for lighttpd.conf in
  lighttpd_1.4.49-1.1.debian.tar.xz</changelog>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
</package>
<package pkgid="b0d5f0bc3cfb21e7043594429a5fa2cc7294e8c61bb83cab2c1f9ffb6f6e88db" name="lighttpd-mod_authn_ldap" arch="s390x">
  <version epoch="0" ver="1.4.66" rel="bp154.2.3.1"/>
  <changelog author="mikhail.kasimov@gmail.com" date="1523016000">- Updated 10-ssl.conf (TLSv1.2 only) for lighttpd.conf in
  lighttpd_1.4.49-1.1.debian.tar.xz</changelog>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
</package>
<package pkgid="f9899388ed3e93b9cc52295eb055ca00626964f6e7734bb4d402f1ab64af3100" name="lighttpd-mod_authn_ldap" arch="x86_64">
  <version epoch="0" ver="1.4.66" rel="bp154.2.3.1"/>
  <changelog author="mikhail.kasimov@gmail.com" date="1523016000">- Updated 10-ssl.conf (TLSv1.2 only) for lighttpd.conf in
  lighttpd_1.4.49-1.1.debian.tar.xz</changelog>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
</package>
<package pkgid="f0eb72637d0867f2d1377975d151a7c684cc6b977a211447d0aae80bb2e65006" name="lighttpd-mod_authn_ldap" arch="aarch64">
  <version epoch="0" ver="1.4.67" rel="bp154.2.6.1"/>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1663934400">- update to 1.4.67:
  * Update comment about TCP_INFO on OpenBSD
  * [mod_ajp13] fix crash with bad response headers (fixes #3170)
  * [core] handle RDHUP when collecting chunked body
    CVE-2022-41556 boo#1203872
  * [core] tweak streaming request body to backends
  * [core] handle ENOSPC with pwritev() (#3171)
  * [core] manually calculate off_t max (fixes #3171)
  * [autoconf] force large file support (#3171)
  * [multiple] quiet coverity warnings using casts
  * [meson] add license keyword to project declaration</changelog>
</package>
<package pkgid="35eebdfa4fea3d77d100562cb3e6b8f8345785c0e6ebbb58a6c3c5cd23b465d6" name="lighttpd-mod_authn_ldap" arch="i586">
  <version epoch="0" ver="1.4.67" rel="bp154.2.6.1"/>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1663934400">- update to 1.4.67:
  * Update comment about TCP_INFO on OpenBSD
  * [mod_ajp13] fix crash with bad response headers (fixes #3170)
  * [core] handle RDHUP when collecting chunked body
    CVE-2022-41556 boo#1203872
  * [core] tweak streaming request body to backends
  * [core] handle ENOSPC with pwritev() (#3171)
  * [core] manually calculate off_t max (fixes #3171)
  * [autoconf] force large file support (#3171)
  * [multiple] quiet coverity warnings using casts
  * [meson] add license keyword to project declaration</changelog>
</package>
<package pkgid="9bd7b82af0215a91f6f7a11f5b6ef3786fec91b7b9082a99021db3a0d83033ae" name="lighttpd-mod_authn_ldap" arch="ppc64le">
  <version epoch="0" ver="1.4.67" rel="bp154.2.6.1"/>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1663934400">- update to 1.4.67:
  * Update comment about TCP_INFO on OpenBSD
  * [mod_ajp13] fix crash with bad response headers (fixes #3170)
  * [core] handle RDHUP when collecting chunked body
    CVE-2022-41556 boo#1203872
  * [core] tweak streaming request body to backends
  * [core] handle ENOSPC with pwritev() (#3171)
  * [core] manually calculate off_t max (fixes #3171)
  * [autoconf] force large file support (#3171)
  * [multiple] quiet coverity warnings using casts
  * [meson] add license keyword to project declaration</changelog>
</package>
<package pkgid="fe0159af4b17353e097bc07cd6c6cbd57d4ccffeffe7d75cb16fe0497e3dd43c" name="lighttpd-mod_authn_ldap" arch="s390x">
  <version epoch="0" ver="1.4.67" rel="bp154.2.6.1"/>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1663934400">- update to 1.4.67:
  * Update comment about TCP_INFO on OpenBSD
  * [mod_ajp13] fix crash with bad response headers (fixes #3170)
  * [core] handle RDHUP when collecting chunked body
    CVE-2022-41556 boo#1203872
  * [core] tweak streaming request body to backends
  * [core] handle ENOSPC with pwritev() (#3171)
  * [core] manually calculate off_t max (fixes #3171)
  * [autoconf] force large file support (#3171)
  * [multiple] quiet coverity warnings using casts
  * [meson] add license keyword to project declaration</changelog>
</package>
<package pkgid="707eae02fcbcebfff1d993bd915b29a908dc86648a38a744f7706ccb08f5d4c1" name="lighttpd-mod_authn_ldap" arch="x86_64">
  <version epoch="0" ver="1.4.67" rel="bp154.2.6.1"/>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1663934400">- update to 1.4.67:
  * Update comment about TCP_INFO on OpenBSD
  * [mod_ajp13] fix crash with bad response headers (fixes #3170)
  * [core] handle RDHUP when collecting chunked body
    CVE-2022-41556 boo#1203872
  * [core] tweak streaming request body to backends
  * [core] handle ENOSPC with pwritev() (#3171)
  * [core] manually calculate off_t max (fixes #3171)
  * [autoconf] force large file support (#3171)
  * [multiple] quiet coverity warnings using casts
  * [meson] add license keyword to project declaration</changelog>
</package>
<package pkgid="fca502fb1d4de05d781240984136e4762e533d1f1c7246a4928cafdc148fe9cf" name="lighttpd-mod_authn_pam" arch="aarch64">
  <version epoch="0" ver="1.4.66" rel="bp154.2.3.1"/>
  <changelog author="mikhail.kasimov@gmail.com" date="1523016000">- Updated 10-ssl.conf (TLSv1.2 only) for lighttpd.conf in
  lighttpd_1.4.49-1.1.debian.tar.xz</changelog>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
</package>
<package pkgid="02812cee94ee059a32f583c824fcf16d8985ae7c3e4dfe751ee5a24dcbd92266" name="lighttpd-mod_authn_pam" arch="i586">
  <version epoch="0" ver="1.4.66" rel="bp154.2.3.1"/>
  <changelog author="mikhail.kasimov@gmail.com" date="1523016000">- Updated 10-ssl.conf (TLSv1.2 only) for lighttpd.conf in
  lighttpd_1.4.49-1.1.debian.tar.xz</changelog>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
</package>
<package pkgid="bb5515037005bb0acbdddb5c2f153ec9b02a9aef281d15da09e0cd2a82dbe3a3" name="lighttpd-mod_authn_pam" arch="ppc64le">
  <version epoch="0" ver="1.4.66" rel="bp154.2.3.1"/>
  <changelog author="mikhail.kasimov@gmail.com" date="1523016000">- Updated 10-ssl.conf (TLSv1.2 only) for lighttpd.conf in
  lighttpd_1.4.49-1.1.debian.tar.xz</changelog>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
</package>
<package pkgid="ea0f476f456820b7a8354e507a8db3ac1d1e6c07a4cc590a8ca78c0efeb747d8" name="lighttpd-mod_authn_pam" arch="s390x">
  <version epoch="0" ver="1.4.66" rel="bp154.2.3.1"/>
  <changelog author="mikhail.kasimov@gmail.com" date="1523016000">- Updated 10-ssl.conf (TLSv1.2 only) for lighttpd.conf in
  lighttpd_1.4.49-1.1.debian.tar.xz</changelog>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
</package>
<package pkgid="ac69cb3093cb98e70a62c69a596bbf5811c9ef525699b72af4896a281f656723" name="lighttpd-mod_authn_pam" arch="x86_64">
  <version epoch="0" ver="1.4.66" rel="bp154.2.3.1"/>
  <changelog author="mikhail.kasimov@gmail.com" date="1523016000">- Updated 10-ssl.conf (TLSv1.2 only) for lighttpd.conf in
  lighttpd_1.4.49-1.1.debian.tar.xz</changelog>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
</package>
<package pkgid="90babcca24cf4260cb4defc30d936d1a47aaf94097dc0a84f1768ffe486a5e39" name="lighttpd-mod_authn_pam" arch="aarch64">
  <version epoch="0" ver="1.4.67" rel="bp154.2.6.1"/>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1663934400">- update to 1.4.67:
  * Update comment about TCP_INFO on OpenBSD
  * [mod_ajp13] fix crash with bad response headers (fixes #3170)
  * [core] handle RDHUP when collecting chunked body
    CVE-2022-41556 boo#1203872
  * [core] tweak streaming request body to backends
  * [core] handle ENOSPC with pwritev() (#3171)
  * [core] manually calculate off_t max (fixes #3171)
  * [autoconf] force large file support (#3171)
  * [multiple] quiet coverity warnings using casts
  * [meson] add license keyword to project declaration</changelog>
</package>
<package pkgid="2eda5edfd7b7ea11ab1477fa4fdd0326a9495ab05f9c8745bd96138ad810092e" name="lighttpd-mod_authn_pam" arch="i586">
  <version epoch="0" ver="1.4.67" rel="bp154.2.6.1"/>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1663934400">- update to 1.4.67:
  * Update comment about TCP_INFO on OpenBSD
  * [mod_ajp13] fix crash with bad response headers (fixes #3170)
  * [core] handle RDHUP when collecting chunked body
    CVE-2022-41556 boo#1203872
  * [core] tweak streaming request body to backends
  * [core] handle ENOSPC with pwritev() (#3171)
  * [core] manually calculate off_t max (fixes #3171)
  * [autoconf] force large file support (#3171)
  * [multiple] quiet coverity warnings using casts
  * [meson] add license keyword to project declaration</changelog>
</package>
<package pkgid="9c528e3f7dee5506a0a670dd4f8052c19601ac552e966fdb193de0866c6345e0" name="lighttpd-mod_authn_pam" arch="ppc64le">
  <version epoch="0" ver="1.4.67" rel="bp154.2.6.1"/>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1663934400">- update to 1.4.67:
  * Update comment about TCP_INFO on OpenBSD
  * [mod_ajp13] fix crash with bad response headers (fixes #3170)
  * [core] handle RDHUP when collecting chunked body
    CVE-2022-41556 boo#1203872
  * [core] tweak streaming request body to backends
  * [core] handle ENOSPC with pwritev() (#3171)
  * [core] manually calculate off_t max (fixes #3171)
  * [autoconf] force large file support (#3171)
  * [multiple] quiet coverity warnings using casts
  * [meson] add license keyword to project declaration</changelog>
</package>
<package pkgid="ae3ce795f118cd082dfea45aa34d2f59393e51342911ee008ab341f0fc55deb1" name="lighttpd-mod_authn_pam" arch="s390x">
  <version epoch="0" ver="1.4.67" rel="bp154.2.6.1"/>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1663934400">- update to 1.4.67:
  * Update comment about TCP_INFO on OpenBSD
  * [mod_ajp13] fix crash with bad response headers (fixes #3170)
  * [core] handle RDHUP when collecting chunked body
    CVE-2022-41556 boo#1203872
  * [core] tweak streaming request body to backends
  * [core] handle ENOSPC with pwritev() (#3171)
  * [core] manually calculate off_t max (fixes #3171)
  * [autoconf] force large file support (#3171)
  * [multiple] quiet coverity warnings using casts
  * [meson] add license keyword to project declaration</changelog>
</package>
<package pkgid="a1203167c1b65357e0de77244fe6161f3a925fd38e0ef1f403aec255fb419dd5" name="lighttpd-mod_authn_pam" arch="x86_64">
  <version epoch="0" ver="1.4.67" rel="bp154.2.6.1"/>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1663934400">- update to 1.4.67:
  * Update comment about TCP_INFO on OpenBSD
  * [mod_ajp13] fix crash with bad response headers (fixes #3170)
  * [core] handle RDHUP when collecting chunked body
    CVE-2022-41556 boo#1203872
  * [core] tweak streaming request body to backends
  * [core] handle ENOSPC with pwritev() (#3171)
  * [core] manually calculate off_t max (fixes #3171)
  * [autoconf] force large file support (#3171)
  * [multiple] quiet coverity warnings using casts
  * [meson] add license keyword to project declaration</changelog>
</package>
<package pkgid="ed49a2f49df169a4b87d20d21dded7340693d4c1c669082e96dbe1de0759171b" name="lighttpd-mod_authn_sasl" arch="aarch64">
  <version epoch="0" ver="1.4.66" rel="bp154.2.3.1"/>
  <changelog author="mikhail.kasimov@gmail.com" date="1523016000">- Updated 10-ssl.conf (TLSv1.2 only) for lighttpd.conf in
  lighttpd_1.4.49-1.1.debian.tar.xz</changelog>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
</package>
<package pkgid="ecaf28ee680f7a588d97612fe4bda9ebc2087ff7b5144da87c5fd2aa8c208f82" name="lighttpd-mod_authn_sasl" arch="i586">
  <version epoch="0" ver="1.4.66" rel="bp154.2.3.1"/>
  <changelog author="mikhail.kasimov@gmail.com" date="1523016000">- Updated 10-ssl.conf (TLSv1.2 only) for lighttpd.conf in
  lighttpd_1.4.49-1.1.debian.tar.xz</changelog>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
</package>
<package pkgid="0a4f22a8e6ad2e4e473e9d775f3671fa980b8ab653299e7110983c185947dff2" name="lighttpd-mod_authn_sasl" arch="ppc64le">
  <version epoch="0" ver="1.4.66" rel="bp154.2.3.1"/>
  <changelog author="mikhail.kasimov@gmail.com" date="1523016000">- Updated 10-ssl.conf (TLSv1.2 only) for lighttpd.conf in
  lighttpd_1.4.49-1.1.debian.tar.xz</changelog>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
</package>
<package pkgid="2a407e8dcc74f371f70da197b44a922de66cf00b8a05e404ede0b4829e7c7b25" name="lighttpd-mod_authn_sasl" arch="s390x">
  <version epoch="0" ver="1.4.66" rel="bp154.2.3.1"/>
  <changelog author="mikhail.kasimov@gmail.com" date="1523016000">- Updated 10-ssl.conf (TLSv1.2 only) for lighttpd.conf in
  lighttpd_1.4.49-1.1.debian.tar.xz</changelog>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
</package>
<package pkgid="886d70e9f7ec7875acfa3757f8f89898f138e9345ec171395bb7245a26a0fa86" name="lighttpd-mod_authn_sasl" arch="x86_64">
  <version epoch="0" ver="1.4.66" rel="bp154.2.3.1"/>
  <changelog author="mikhail.kasimov@gmail.com" date="1523016000">- Updated 10-ssl.conf (TLSv1.2 only) for lighttpd.conf in
  lighttpd_1.4.49-1.1.debian.tar.xz</changelog>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
</package>
<package pkgid="d507f9ccc24d720f1024f1174acafb96b7a7eaa8e45e36e4bacdabbd155a877d" name="lighttpd-mod_authn_sasl" arch="aarch64">
  <version epoch="0" ver="1.4.67" rel="bp154.2.6.1"/>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1663934400">- update to 1.4.67:
  * Update comment about TCP_INFO on OpenBSD
  * [mod_ajp13] fix crash with bad response headers (fixes #3170)
  * [core] handle RDHUP when collecting chunked body
    CVE-2022-41556 boo#1203872
  * [core] tweak streaming request body to backends
  * [core] handle ENOSPC with pwritev() (#3171)
  * [core] manually calculate off_t max (fixes #3171)
  * [autoconf] force large file support (#3171)
  * [multiple] quiet coverity warnings using casts
  * [meson] add license keyword to project declaration</changelog>
</package>
<package pkgid="0359c1828116b2ecda12f1d47f33bad16c3bd4c49f0736c14ef8136f1d633f0d" name="lighttpd-mod_authn_sasl" arch="i586">
  <version epoch="0" ver="1.4.67" rel="bp154.2.6.1"/>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1663934400">- update to 1.4.67:
  * Update comment about TCP_INFO on OpenBSD
  * [mod_ajp13] fix crash with bad response headers (fixes #3170)
  * [core] handle RDHUP when collecting chunked body
    CVE-2022-41556 boo#1203872
  * [core] tweak streaming request body to backends
  * [core] handle ENOSPC with pwritev() (#3171)
  * [core] manually calculate off_t max (fixes #3171)
  * [autoconf] force large file support (#3171)
  * [multiple] quiet coverity warnings using casts
  * [meson] add license keyword to project declaration</changelog>
</package>
<package pkgid="44915be608e682e049da5d0ecaca8b4fb774dcee54cd163aafbcb265d84b8e15" name="lighttpd-mod_authn_sasl" arch="ppc64le">
  <version epoch="0" ver="1.4.67" rel="bp154.2.6.1"/>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1663934400">- update to 1.4.67:
  * Update comment about TCP_INFO on OpenBSD
  * [mod_ajp13] fix crash with bad response headers (fixes #3170)
  * [core] handle RDHUP when collecting chunked body
    CVE-2022-41556 boo#1203872
  * [core] tweak streaming request body to backends
  * [core] handle ENOSPC with pwritev() (#3171)
  * [core] manually calculate off_t max (fixes #3171)
  * [autoconf] force large file support (#3171)
  * [multiple] quiet coverity warnings using casts
  * [meson] add license keyword to project declaration</changelog>
</package>
<package pkgid="7016bcf3202e6c14da6e93ef8bcf40e4e444805e174c5c6c5bc267d5412258a0" name="lighttpd-mod_authn_sasl" arch="s390x">
  <version epoch="0" ver="1.4.67" rel="bp154.2.6.1"/>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1663934400">- update to 1.4.67:
  * Update comment about TCP_INFO on OpenBSD
  * [mod_ajp13] fix crash with bad response headers (fixes #3170)
  * [core] handle RDHUP when collecting chunked body
    CVE-2022-41556 boo#1203872
  * [core] tweak streaming request body to backends
  * [core] handle ENOSPC with pwritev() (#3171)
  * [core] manually calculate off_t max (fixes #3171)
  * [autoconf] force large file support (#3171)
  * [multiple] quiet coverity warnings using casts
  * [meson] add license keyword to project declaration</changelog>
</package>
<package pkgid="6f609643c35beb78dfc888651ec5d224fdcd8cda32120fe568aa665fd5840ec4" name="lighttpd-mod_authn_sasl" arch="x86_64">
  <version epoch="0" ver="1.4.67" rel="bp154.2.6.1"/>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1663934400">- update to 1.4.67:
  * Update comment about TCP_INFO on OpenBSD
  * [mod_ajp13] fix crash with bad response headers (fixes #3170)
  * [core] handle RDHUP when collecting chunked body
    CVE-2022-41556 boo#1203872
  * [core] tweak streaming request body to backends
  * [core] handle ENOSPC with pwritev() (#3171)
  * [core] manually calculate off_t max (fixes #3171)
  * [autoconf] force large file support (#3171)
  * [multiple] quiet coverity warnings using casts
  * [meson] add license keyword to project declaration</changelog>
</package>
<package pkgid="660f6e9fa80428b6186be2780a40313edd7495b22b22929e2c865c7994bd25ea" name="lighttpd-mod_magnet" arch="aarch64">
  <version epoch="0" ver="1.4.66" rel="bp154.2.3.1"/>
  <changelog author="mikhail.kasimov@gmail.com" date="1523016000">- Updated 10-ssl.conf (TLSv1.2 only) for lighttpd.conf in
  lighttpd_1.4.49-1.1.debian.tar.xz</changelog>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
</package>
<package pkgid="a58f5b516a30dbb99e0993679c60f5876862fd139ee0e9fb0542bdc087caf54e" name="lighttpd-mod_magnet" arch="i586">
  <version epoch="0" ver="1.4.66" rel="bp154.2.3.1"/>
  <changelog author="mikhail.kasimov@gmail.com" date="1523016000">- Updated 10-ssl.conf (TLSv1.2 only) for lighttpd.conf in
  lighttpd_1.4.49-1.1.debian.tar.xz</changelog>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
</package>
<package pkgid="d126da6bffd0922592ef531afef2250a043b364c98526dab35d750b21a9d1813" name="lighttpd-mod_magnet" arch="ppc64le">
  <version epoch="0" ver="1.4.66" rel="bp154.2.3.1"/>
  <changelog author="mikhail.kasimov@gmail.com" date="1523016000">- Updated 10-ssl.conf (TLSv1.2 only) for lighttpd.conf in
  lighttpd_1.4.49-1.1.debian.tar.xz</changelog>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
</package>
<package pkgid="0d6a49488a250a72d270d8d89886783f91690e32b48f8a8ac2d4a94ce760ef9c" name="lighttpd-mod_magnet" arch="s390x">
  <version epoch="0" ver="1.4.66" rel="bp154.2.3.1"/>
  <changelog author="mikhail.kasimov@gmail.com" date="1523016000">- Updated 10-ssl.conf (TLSv1.2 only) for lighttpd.conf in
  lighttpd_1.4.49-1.1.debian.tar.xz</changelog>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
</package>
<package pkgid="15392b4885beb708c9b1b9ff09cc143addb4cdaba8757178228ec44c155b00be" name="lighttpd-mod_magnet" arch="x86_64">
  <version epoch="0" ver="1.4.66" rel="bp154.2.3.1"/>
  <changelog author="mikhail.kasimov@gmail.com" date="1523016000">- Updated 10-ssl.conf (TLSv1.2 only) for lighttpd.conf in
  lighttpd_1.4.49-1.1.debian.tar.xz</changelog>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
</package>
<package pkgid="1353e2f90ffc2008878cb0d56cc83794067edb232369b38ce59b02c62cbc9436" name="lighttpd-mod_magnet" arch="aarch64">
  <version epoch="0" ver="1.4.67" rel="bp154.2.6.1"/>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1663934400">- update to 1.4.67:
  * Update comment about TCP_INFO on OpenBSD
  * [mod_ajp13] fix crash with bad response headers (fixes #3170)
  * [core] handle RDHUP when collecting chunked body
    CVE-2022-41556 boo#1203872
  * [core] tweak streaming request body to backends
  * [core] handle ENOSPC with pwritev() (#3171)
  * [core] manually calculate off_t max (fixes #3171)
  * [autoconf] force large file support (#3171)
  * [multiple] quiet coverity warnings using casts
  * [meson] add license keyword to project declaration</changelog>
</package>
<package pkgid="b07fe158314dfb0730d50116158c03adfe49ee4fef2998447e49b47a1ded685d" name="lighttpd-mod_magnet" arch="i586">
  <version epoch="0" ver="1.4.67" rel="bp154.2.6.1"/>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1663934400">- update to 1.4.67:
  * Update comment about TCP_INFO on OpenBSD
  * [mod_ajp13] fix crash with bad response headers (fixes #3170)
  * [core] handle RDHUP when collecting chunked body
    CVE-2022-41556 boo#1203872
  * [core] tweak streaming request body to backends
  * [core] handle ENOSPC with pwritev() (#3171)
  * [core] manually calculate off_t max (fixes #3171)
  * [autoconf] force large file support (#3171)
  * [multiple] quiet coverity warnings using casts
  * [meson] add license keyword to project declaration</changelog>
</package>
<package pkgid="0cf6f464d5fca96ba04b9f018255343f95ccad59e5ce808dfb6c746345ddfa41" name="lighttpd-mod_magnet" arch="ppc64le">
  <version epoch="0" ver="1.4.67" rel="bp154.2.6.1"/>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1663934400">- update to 1.4.67:
  * Update comment about TCP_INFO on OpenBSD
  * [mod_ajp13] fix crash with bad response headers (fixes #3170)
  * [core] handle RDHUP when collecting chunked body
    CVE-2022-41556 boo#1203872
  * [core] tweak streaming request body to backends
  * [core] handle ENOSPC with pwritev() (#3171)
  * [core] manually calculate off_t max (fixes #3171)
  * [autoconf] force large file support (#3171)
  * [multiple] quiet coverity warnings using casts
  * [meson] add license keyword to project declaration</changelog>
</package>
<package pkgid="23cc955c3ee88b77b5c7a6e6df40840820ff88391b2b679708058e5e904b062a" name="lighttpd-mod_magnet" arch="s390x">
  <version epoch="0" ver="1.4.67" rel="bp154.2.6.1"/>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1663934400">- update to 1.4.67:
  * Update comment about TCP_INFO on OpenBSD
  * [mod_ajp13] fix crash with bad response headers (fixes #3170)
  * [core] handle RDHUP when collecting chunked body
    CVE-2022-41556 boo#1203872
  * [core] tweak streaming request body to backends
  * [core] handle ENOSPC with pwritev() (#3171)
  * [core] manually calculate off_t max (fixes #3171)
  * [autoconf] force large file support (#3171)
  * [multiple] quiet coverity warnings using casts
  * [meson] add license keyword to project declaration</changelog>
</package>
<package pkgid="17499ffc303f7e0db2f864557db162b070301aeccb3c62e956802725d60b4a45" name="lighttpd-mod_magnet" arch="x86_64">
  <version epoch="0" ver="1.4.67" rel="bp154.2.6.1"/>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1663934400">- update to 1.4.67:
  * Update comment about TCP_INFO on OpenBSD
  * [mod_ajp13] fix crash with bad response headers (fixes #3170)
  * [core] handle RDHUP when collecting chunked body
    CVE-2022-41556 boo#1203872
  * [core] tweak streaming request body to backends
  * [core] handle ENOSPC with pwritev() (#3171)
  * [core] manually calculate off_t max (fixes #3171)
  * [autoconf] force large file support (#3171)
  * [multiple] quiet coverity warnings using casts
  * [meson] add license keyword to project declaration</changelog>
</package>
<package pkgid="8b8354e1447c106b2d2b6525e663ef91b1f792a93f3ee2a02debddffc855bb70" name="lighttpd-mod_maxminddb" arch="aarch64">
  <version epoch="0" ver="1.4.66" rel="bp154.2.3.1"/>
  <changelog author="mikhail.kasimov@gmail.com" date="1523016000">- Updated 10-ssl.conf (TLSv1.2 only) for lighttpd.conf in
  lighttpd_1.4.49-1.1.debian.tar.xz</changelog>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
</package>
<package pkgid="55d6b508dee34cdb033a3a994f0092f69ad2e05eabdc95c993302b522355c13b" name="lighttpd-mod_maxminddb" arch="i586">
  <version epoch="0" ver="1.4.66" rel="bp154.2.3.1"/>
  <changelog author="mikhail.kasimov@gmail.com" date="1523016000">- Updated 10-ssl.conf (TLSv1.2 only) for lighttpd.conf in
  lighttpd_1.4.49-1.1.debian.tar.xz</changelog>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
</package>
<package pkgid="df389bec26f9dabc23dbf653eb71deaff4b0e005480d57ff0ba52c66b83a3ea4" name="lighttpd-mod_maxminddb" arch="ppc64le">
  <version epoch="0" ver="1.4.66" rel="bp154.2.3.1"/>
  <changelog author="mikhail.kasimov@gmail.com" date="1523016000">- Updated 10-ssl.conf (TLSv1.2 only) for lighttpd.conf in
  lighttpd_1.4.49-1.1.debian.tar.xz</changelog>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
</package>
<package pkgid="5d37c6ccc4602a8d9e948e421069bb8c0700a7e9ee95a91b2db86cdc5c7f6eee" name="lighttpd-mod_maxminddb" arch="s390x">
  <version epoch="0" ver="1.4.66" rel="bp154.2.3.1"/>
  <changelog author="mikhail.kasimov@gmail.com" date="1523016000">- Updated 10-ssl.conf (TLSv1.2 only) for lighttpd.conf in
  lighttpd_1.4.49-1.1.debian.tar.xz</changelog>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
</package>
<package pkgid="9db7a570d46411e42b04e305ebef3dcbe3067afb141270be1e317d85fb648e58" name="lighttpd-mod_maxminddb" arch="x86_64">
  <version epoch="0" ver="1.4.66" rel="bp154.2.3.1"/>
  <changelog author="mikhail.kasimov@gmail.com" date="1523016000">- Updated 10-ssl.conf (TLSv1.2 only) for lighttpd.conf in
  lighttpd_1.4.49-1.1.debian.tar.xz</changelog>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
</package>
<package pkgid="d3122e7d3383c8f0ac87ac406944b94db55fac4723283924193f4445d602debe" name="lighttpd-mod_maxminddb" arch="aarch64">
  <version epoch="0" ver="1.4.67" rel="bp154.2.6.1"/>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1663934400">- update to 1.4.67:
  * Update comment about TCP_INFO on OpenBSD
  * [mod_ajp13] fix crash with bad response headers (fixes #3170)
  * [core] handle RDHUP when collecting chunked body
    CVE-2022-41556 boo#1203872
  * [core] tweak streaming request body to backends
  * [core] handle ENOSPC with pwritev() (#3171)
  * [core] manually calculate off_t max (fixes #3171)
  * [autoconf] force large file support (#3171)
  * [multiple] quiet coverity warnings using casts
  * [meson] add license keyword to project declaration</changelog>
</package>
<package pkgid="f1e24fe66cdd41962ea573e6f57b9a21fd8556e2ee55f22a3e08b442f17cdefd" name="lighttpd-mod_maxminddb" arch="i586">
  <version epoch="0" ver="1.4.67" rel="bp154.2.6.1"/>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1663934400">- update to 1.4.67:
  * Update comment about TCP_INFO on OpenBSD
  * [mod_ajp13] fix crash with bad response headers (fixes #3170)
  * [core] handle RDHUP when collecting chunked body
    CVE-2022-41556 boo#1203872
  * [core] tweak streaming request body to backends
  * [core] handle ENOSPC with pwritev() (#3171)
  * [core] manually calculate off_t max (fixes #3171)
  * [autoconf] force large file support (#3171)
  * [multiple] quiet coverity warnings using casts
  * [meson] add license keyword to project declaration</changelog>
</package>
<package pkgid="01446a4534188ac89045d10cd75ed4c03172b45504fdecc9eb3bf981183f3b1a" name="lighttpd-mod_maxminddb" arch="ppc64le">
  <version epoch="0" ver="1.4.67" rel="bp154.2.6.1"/>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1663934400">- update to 1.4.67:
  * Update comment about TCP_INFO on OpenBSD
  * [mod_ajp13] fix crash with bad response headers (fixes #3170)
  * [core] handle RDHUP when collecting chunked body
    CVE-2022-41556 boo#1203872
  * [core] tweak streaming request body to backends
  * [core] handle ENOSPC with pwritev() (#3171)
  * [core] manually calculate off_t max (fixes #3171)
  * [autoconf] force large file support (#3171)
  * [multiple] quiet coverity warnings using casts
  * [meson] add license keyword to project declaration</changelog>
</package>
<package pkgid="bc77128078da51e02379fa6151145b582b2ee089f49a5c61dee847a8118cb6a5" name="lighttpd-mod_maxminddb" arch="s390x">
  <version epoch="0" ver="1.4.67" rel="bp154.2.6.1"/>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1663934400">- update to 1.4.67:
  * Update comment about TCP_INFO on OpenBSD
  * [mod_ajp13] fix crash with bad response headers (fixes #3170)
  * [core] handle RDHUP when collecting chunked body
    CVE-2022-41556 boo#1203872
  * [core] tweak streaming request body to backends
  * [core] handle ENOSPC with pwritev() (#3171)
  * [core] manually calculate off_t max (fixes #3171)
  * [autoconf] force large file support (#3171)
  * [multiple] quiet coverity warnings using casts
  * [meson] add license keyword to project declaration</changelog>
</package>
<package pkgid="c17360396233e36e20db536e84ee612fb56e6197f799ed457c7099c93d3aed66" name="lighttpd-mod_maxminddb" arch="x86_64">
  <version epoch="0" ver="1.4.67" rel="bp154.2.6.1"/>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1663934400">- update to 1.4.67:
  * Update comment about TCP_INFO on OpenBSD
  * [mod_ajp13] fix crash with bad response headers (fixes #3170)
  * [core] handle RDHUP when collecting chunked body
    CVE-2022-41556 boo#1203872
  * [core] tweak streaming request body to backends
  * [core] handle ENOSPC with pwritev() (#3171)
  * [core] manually calculate off_t max (fixes #3171)
  * [autoconf] force large file support (#3171)
  * [multiple] quiet coverity warnings using casts
  * [meson] add license keyword to project declaration</changelog>
</package>
<package pkgid="cc484710c80d8a6ecd1a7066abf1e96d73444cac2f987ca268ce553be7f15f70" name="lighttpd-mod_rrdtool" arch="aarch64">
  <version epoch="0" ver="1.4.66" rel="bp154.2.3.1"/>
  <changelog author="mikhail.kasimov@gmail.com" date="1523016000">- Updated 10-ssl.conf (TLSv1.2 only) for lighttpd.conf in
  lighttpd_1.4.49-1.1.debian.tar.xz</changelog>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
</package>
<package pkgid="4b16423e91e949fc886684d84cc5675ca3afce21e476d429d865d724059f82cf" name="lighttpd-mod_rrdtool" arch="i586">
  <version epoch="0" ver="1.4.66" rel="bp154.2.3.1"/>
  <changelog author="mikhail.kasimov@gmail.com" date="1523016000">- Updated 10-ssl.conf (TLSv1.2 only) for lighttpd.conf in
  lighttpd_1.4.49-1.1.debian.tar.xz</changelog>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
</package>
<package pkgid="5197df5083cecbf0c1df0a189f4c71f0e2b7f994369a998e003b9334f5bac02d" name="lighttpd-mod_rrdtool" arch="ppc64le">
  <version epoch="0" ver="1.4.66" rel="bp154.2.3.1"/>
  <changelog author="mikhail.kasimov@gmail.com" date="1523016000">- Updated 10-ssl.conf (TLSv1.2 only) for lighttpd.conf in
  lighttpd_1.4.49-1.1.debian.tar.xz</changelog>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
</package>
<package pkgid="3d4eac2a1efb411697e920fa5ea7086026a3a9035165a69a09258264fa34e25a" name="lighttpd-mod_rrdtool" arch="s390x">
  <version epoch="0" ver="1.4.66" rel="bp154.2.3.1"/>
  <changelog author="mikhail.kasimov@gmail.com" date="1523016000">- Updated 10-ssl.conf (TLSv1.2 only) for lighttpd.conf in
  lighttpd_1.4.49-1.1.debian.tar.xz</changelog>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
</package>
<package pkgid="36c23637ebf3a306a23590f0cf76500cea966ccbb84d543df5b4c363bd87b318" name="lighttpd-mod_rrdtool" arch="x86_64">
  <version epoch="0" ver="1.4.66" rel="bp154.2.3.1"/>
  <changelog author="mikhail.kasimov@gmail.com" date="1523016000">- Updated 10-ssl.conf (TLSv1.2 only) for lighttpd.conf in
  lighttpd_1.4.49-1.1.debian.tar.xz</changelog>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
</package>
<package pkgid="2eccaefb2e0b215d8db02191125907400c5bafc5992da0732b185fd0de9ed257" name="lighttpd-mod_rrdtool" arch="aarch64">
  <version epoch="0" ver="1.4.67" rel="bp154.2.6.1"/>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1663934400">- update to 1.4.67:
  * Update comment about TCP_INFO on OpenBSD
  * [mod_ajp13] fix crash with bad response headers (fixes #3170)
  * [core] handle RDHUP when collecting chunked body
    CVE-2022-41556 boo#1203872
  * [core] tweak streaming request body to backends
  * [core] handle ENOSPC with pwritev() (#3171)
  * [core] manually calculate off_t max (fixes #3171)
  * [autoconf] force large file support (#3171)
  * [multiple] quiet coverity warnings using casts
  * [meson] add license keyword to project declaration</changelog>
</package>
<package pkgid="e3d116ae0685c1ab9b6504f621c767504d88ed2bbc3c8dc9935627bd0e09471e" name="lighttpd-mod_rrdtool" arch="i586">
  <version epoch="0" ver="1.4.67" rel="bp154.2.6.1"/>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1663934400">- update to 1.4.67:
  * Update comment about TCP_INFO on OpenBSD
  * [mod_ajp13] fix crash with bad response headers (fixes #3170)
  * [core] handle RDHUP when collecting chunked body
    CVE-2022-41556 boo#1203872
  * [core] tweak streaming request body to backends
  * [core] handle ENOSPC with pwritev() (#3171)
  * [core] manually calculate off_t max (fixes #3171)
  * [autoconf] force large file support (#3171)
  * [multiple] quiet coverity warnings using casts
  * [meson] add license keyword to project declaration</changelog>
</package>
<package pkgid="b83e9c869b67565e4a6a000b59191e93d028a71ed71fb67d5eaf34324a34d403" name="lighttpd-mod_rrdtool" arch="ppc64le">
  <version epoch="0" ver="1.4.67" rel="bp154.2.6.1"/>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1663934400">- update to 1.4.67:
  * Update comment about TCP_INFO on OpenBSD
  * [mod_ajp13] fix crash with bad response headers (fixes #3170)
  * [core] handle RDHUP when collecting chunked body
    CVE-2022-41556 boo#1203872
  * [core] tweak streaming request body to backends
  * [core] handle ENOSPC with pwritev() (#3171)
  * [core] manually calculate off_t max (fixes #3171)
  * [autoconf] force large file support (#3171)
  * [multiple] quiet coverity warnings using casts
  * [meson] add license keyword to project declaration</changelog>
</package>
<package pkgid="abd4a498d629da088a626fb380fa5c1b09f1b6865b98b156288d56d926b4da3b" name="lighttpd-mod_rrdtool" arch="s390x">
  <version epoch="0" ver="1.4.67" rel="bp154.2.6.1"/>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1663934400">- update to 1.4.67:
  * Update comment about TCP_INFO on OpenBSD
  * [mod_ajp13] fix crash with bad response headers (fixes #3170)
  * [core] handle RDHUP when collecting chunked body
    CVE-2022-41556 boo#1203872
  * [core] tweak streaming request body to backends
  * [core] handle ENOSPC with pwritev() (#3171)
  * [core] manually calculate off_t max (fixes #3171)
  * [autoconf] force large file support (#3171)
  * [multiple] quiet coverity warnings using casts
  * [meson] add license keyword to project declaration</changelog>
</package>
<package pkgid="181db6065cfc4343de43e6262f049f7dbe83beca856f08f58bde6fa027eb8685" name="lighttpd-mod_rrdtool" arch="x86_64">
  <version epoch="0" ver="1.4.67" rel="bp154.2.6.1"/>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1663934400">- update to 1.4.67:
  * Update comment about TCP_INFO on OpenBSD
  * [mod_ajp13] fix crash with bad response headers (fixes #3170)
  * [core] handle RDHUP when collecting chunked body
    CVE-2022-41556 boo#1203872
  * [core] tweak streaming request body to backends
  * [core] handle ENOSPC with pwritev() (#3171)
  * [core] manually calculate off_t max (fixes #3171)
  * [autoconf] force large file support (#3171)
  * [multiple] quiet coverity warnings using casts
  * [meson] add license keyword to project declaration</changelog>
</package>
<package pkgid="4e1321c7f04bd28b064e18a50c426b787fc10ef0179d725a88991084012ed03e" name="lighttpd-mod_vhostdb_dbi" arch="aarch64">
  <version epoch="0" ver="1.4.66" rel="bp154.2.3.1"/>
  <changelog author="mikhail.kasimov@gmail.com" date="1523016000">- Updated 10-ssl.conf (TLSv1.2 only) for lighttpd.conf in
  lighttpd_1.4.49-1.1.debian.tar.xz</changelog>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
</package>
<package pkgid="bdaa839d9682cd76d0bfa7f38b8d26cc0db1a9c1714d7e344cce7855cbb71190" name="lighttpd-mod_vhostdb_dbi" arch="i586">
  <version epoch="0" ver="1.4.66" rel="bp154.2.3.1"/>
  <changelog author="mikhail.kasimov@gmail.com" date="1523016000">- Updated 10-ssl.conf (TLSv1.2 only) for lighttpd.conf in
  lighttpd_1.4.49-1.1.debian.tar.xz</changelog>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
</package>
<package pkgid="1ab55ec16f1e96c7803de9564af79730627bf11aee49548d9e8eed8a51611a3c" name="lighttpd-mod_vhostdb_dbi" arch="ppc64le">
  <version epoch="0" ver="1.4.66" rel="bp154.2.3.1"/>
  <changelog author="mikhail.kasimov@gmail.com" date="1523016000">- Updated 10-ssl.conf (TLSv1.2 only) for lighttpd.conf in
  lighttpd_1.4.49-1.1.debian.tar.xz</changelog>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
</package>
<package pkgid="4730bf63b4ee2a19b4b17859fa4c56edfd1aa7853ea3b6f09b74d51ad22be203" name="lighttpd-mod_vhostdb_dbi" arch="s390x">
  <version epoch="0" ver="1.4.66" rel="bp154.2.3.1"/>
  <changelog author="mikhail.kasimov@gmail.com" date="1523016000">- Updated 10-ssl.conf (TLSv1.2 only) for lighttpd.conf in
  lighttpd_1.4.49-1.1.debian.tar.xz</changelog>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
</package>
<package pkgid="22a0ac6805f85a1696b9a38543c230700ea332008e7ec56505a9d41513bde021" name="lighttpd-mod_vhostdb_dbi" arch="x86_64">
  <version epoch="0" ver="1.4.66" rel="bp154.2.3.1"/>
  <changelog author="mikhail.kasimov@gmail.com" date="1523016000">- Updated 10-ssl.conf (TLSv1.2 only) for lighttpd.conf in
  lighttpd_1.4.49-1.1.debian.tar.xz</changelog>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
</package>
<package pkgid="c550dd5bfd47efa0e6140c2e0cf0419c99d3b4b61d3fef757a50a669e42870a6" name="lighttpd-mod_vhostdb_dbi" arch="aarch64">
  <version epoch="0" ver="1.4.67" rel="bp154.2.6.1"/>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1663934400">- update to 1.4.67:
  * Update comment about TCP_INFO on OpenBSD
  * [mod_ajp13] fix crash with bad response headers (fixes #3170)
  * [core] handle RDHUP when collecting chunked body
    CVE-2022-41556 boo#1203872
  * [core] tweak streaming request body to backends
  * [core] handle ENOSPC with pwritev() (#3171)
  * [core] manually calculate off_t max (fixes #3171)
  * [autoconf] force large file support (#3171)
  * [multiple] quiet coverity warnings using casts
  * [meson] add license keyword to project declaration</changelog>
</package>
<package pkgid="c0d86398ab8614f7767e05ed3f1f38223a5e24ff194a530a2e891d9f90914706" name="lighttpd-mod_vhostdb_dbi" arch="i586">
  <version epoch="0" ver="1.4.67" rel="bp154.2.6.1"/>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1663934400">- update to 1.4.67:
  * Update comment about TCP_INFO on OpenBSD
  * [mod_ajp13] fix crash with bad response headers (fixes #3170)
  * [core] handle RDHUP when collecting chunked body
    CVE-2022-41556 boo#1203872
  * [core] tweak streaming request body to backends
  * [core] handle ENOSPC with pwritev() (#3171)
  * [core] manually calculate off_t max (fixes #3171)
  * [autoconf] force large file support (#3171)
  * [multiple] quiet coverity warnings using casts
  * [meson] add license keyword to project declaration</changelog>
</package>
<package pkgid="9d719b4760ea397442be88c7625ae221018ac35c89700d8a7397cc2a04799baa" name="lighttpd-mod_vhostdb_dbi" arch="ppc64le">
  <version epoch="0" ver="1.4.67" rel="bp154.2.6.1"/>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1663934400">- update to 1.4.67:
  * Update comment about TCP_INFO on OpenBSD
  * [mod_ajp13] fix crash with bad response headers (fixes #3170)
  * [core] handle RDHUP when collecting chunked body
    CVE-2022-41556 boo#1203872
  * [core] tweak streaming request body to backends
  * [core] handle ENOSPC with pwritev() (#3171)
  * [core] manually calculate off_t max (fixes #3171)
  * [autoconf] force large file support (#3171)
  * [multiple] quiet coverity warnings using casts
  * [meson] add license keyword to project declaration</changelog>
</package>
<package pkgid="15db2cfd9160a8ff191ef711b5bb934a1377d799ed8fe5e6825876678f1daa9c" name="lighttpd-mod_vhostdb_dbi" arch="s390x">
  <version epoch="0" ver="1.4.67" rel="bp154.2.6.1"/>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1663934400">- update to 1.4.67:
  * Update comment about TCP_INFO on OpenBSD
  * [mod_ajp13] fix crash with bad response headers (fixes #3170)
  * [core] handle RDHUP when collecting chunked body
    CVE-2022-41556 boo#1203872
  * [core] tweak streaming request body to backends
  * [core] handle ENOSPC with pwritev() (#3171)
  * [core] manually calculate off_t max (fixes #3171)
  * [autoconf] force large file support (#3171)
  * [multiple] quiet coverity warnings using casts
  * [meson] add license keyword to project declaration</changelog>
</package>
<package pkgid="feebb7a0bde3a6305147bd2bb8daa2dc0160df8430f1049a5f47ace7eba1da05" name="lighttpd-mod_vhostdb_dbi" arch="x86_64">
  <version epoch="0" ver="1.4.67" rel="bp154.2.6.1"/>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1663934400">- update to 1.4.67:
  * Update comment about TCP_INFO on OpenBSD
  * [mod_ajp13] fix crash with bad response headers (fixes #3170)
  * [core] handle RDHUP when collecting chunked body
    CVE-2022-41556 boo#1203872
  * [core] tweak streaming request body to backends
  * [core] handle ENOSPC with pwritev() (#3171)
  * [core] manually calculate off_t max (fixes #3171)
  * [autoconf] force large file support (#3171)
  * [multiple] quiet coverity warnings using casts
  * [meson] add license keyword to project declaration</changelog>
</package>
<package pkgid="b859e217da497626d485023a356b14c7970193f59b4ae75c8580a27fb2edd157" name="lighttpd-mod_vhostdb_ldap" arch="aarch64">
  <version epoch="0" ver="1.4.66" rel="bp154.2.3.1"/>
  <changelog author="mikhail.kasimov@gmail.com" date="1523016000">- Updated 10-ssl.conf (TLSv1.2 only) for lighttpd.conf in
  lighttpd_1.4.49-1.1.debian.tar.xz</changelog>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
</package>
<package pkgid="40a89dd7cb175a33cda1fae3d65ca8db946bafbbe5ba0c91d9639a92fa1ebb12" name="lighttpd-mod_vhostdb_ldap" arch="i586">
  <version epoch="0" ver="1.4.66" rel="bp154.2.3.1"/>
  <changelog author="mikhail.kasimov@gmail.com" date="1523016000">- Updated 10-ssl.conf (TLSv1.2 only) for lighttpd.conf in
  lighttpd_1.4.49-1.1.debian.tar.xz</changelog>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
</package>
<package pkgid="24aad2c2e8d708eb1be34969a26986d6f403352fc05a7d6efdf4b3d8cb116ba6" name="lighttpd-mod_vhostdb_ldap" arch="ppc64le">
  <version epoch="0" ver="1.4.66" rel="bp154.2.3.1"/>
  <changelog author="mikhail.kasimov@gmail.com" date="1523016000">- Updated 10-ssl.conf (TLSv1.2 only) for lighttpd.conf in
  lighttpd_1.4.49-1.1.debian.tar.xz</changelog>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
</package>
<package pkgid="5cda257cdb27835f5e8f3703a0323f078c6e510d107f9aa3e93717951e8a0bbe" name="lighttpd-mod_vhostdb_ldap" arch="s390x">
  <version epoch="0" ver="1.4.66" rel="bp154.2.3.1"/>
  <changelog author="mikhail.kasimov@gmail.com" date="1523016000">- Updated 10-ssl.conf (TLSv1.2 only) for lighttpd.conf in
  lighttpd_1.4.49-1.1.debian.tar.xz</changelog>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
</package>
<package pkgid="2f74cd7bb488220f217ccfa55755ad11cc3dd65fe20240ae62446ebfa1be92a7" name="lighttpd-mod_vhostdb_ldap" arch="x86_64">
  <version epoch="0" ver="1.4.66" rel="bp154.2.3.1"/>
  <changelog author="mikhail.kasimov@gmail.com" date="1523016000">- Updated 10-ssl.conf (TLSv1.2 only) for lighttpd.conf in
  lighttpd_1.4.49-1.1.debian.tar.xz</changelog>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
</package>
<package pkgid="0070a63c9e3c69423820fcac2293224c1449ddd6abc58ef7742dbe41f97689d1" name="lighttpd-mod_vhostdb_ldap" arch="aarch64">
  <version epoch="0" ver="1.4.67" rel="bp154.2.6.1"/>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1663934400">- update to 1.4.67:
  * Update comment about TCP_INFO on OpenBSD
  * [mod_ajp13] fix crash with bad response headers (fixes #3170)
  * [core] handle RDHUP when collecting chunked body
    CVE-2022-41556 boo#1203872
  * [core] tweak streaming request body to backends
  * [core] handle ENOSPC with pwritev() (#3171)
  * [core] manually calculate off_t max (fixes #3171)
  * [autoconf] force large file support (#3171)
  * [multiple] quiet coverity warnings using casts
  * [meson] add license keyword to project declaration</changelog>
</package>
<package pkgid="32126de1c639642a7362520b86dd5cf244fd42d6c9eff099b310d7f4b5ef23b1" name="lighttpd-mod_vhostdb_ldap" arch="i586">
  <version epoch="0" ver="1.4.67" rel="bp154.2.6.1"/>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1663934400">- update to 1.4.67:
  * Update comment about TCP_INFO on OpenBSD
  * [mod_ajp13] fix crash with bad response headers (fixes #3170)
  * [core] handle RDHUP when collecting chunked body
    CVE-2022-41556 boo#1203872
  * [core] tweak streaming request body to backends
  * [core] handle ENOSPC with pwritev() (#3171)
  * [core] manually calculate off_t max (fixes #3171)
  * [autoconf] force large file support (#3171)
  * [multiple] quiet coverity warnings using casts
  * [meson] add license keyword to project declaration</changelog>
</package>
<package pkgid="e488966d7843096df213c20cb8b9e6d8b04ab6205841a2547cfb08eb8d4a3fcc" name="lighttpd-mod_vhostdb_ldap" arch="ppc64le">
  <version epoch="0" ver="1.4.67" rel="bp154.2.6.1"/>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1663934400">- update to 1.4.67:
  * Update comment about TCP_INFO on OpenBSD
  * [mod_ajp13] fix crash with bad response headers (fixes #3170)
  * [core] handle RDHUP when collecting chunked body
    CVE-2022-41556 boo#1203872
  * [core] tweak streaming request body to backends
  * [core] handle ENOSPC with pwritev() (#3171)
  * [core] manually calculate off_t max (fixes #3171)
  * [autoconf] force large file support (#3171)
  * [multiple] quiet coverity warnings using casts
  * [meson] add license keyword to project declaration</changelog>
</package>
<package pkgid="492ceef8c776738bf003591dbc4bf0f4e9837dc51aa919a30a32bbda3b0cb2ea" name="lighttpd-mod_vhostdb_ldap" arch="s390x">
  <version epoch="0" ver="1.4.67" rel="bp154.2.6.1"/>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1663934400">- update to 1.4.67:
  * Update comment about TCP_INFO on OpenBSD
  * [mod_ajp13] fix crash with bad response headers (fixes #3170)
  * [core] handle RDHUP when collecting chunked body
    CVE-2022-41556 boo#1203872
  * [core] tweak streaming request body to backends
  * [core] handle ENOSPC with pwritev() (#3171)
  * [core] manually calculate off_t max (fixes #3171)
  * [autoconf] force large file support (#3171)
  * [multiple] quiet coverity warnings using casts
  * [meson] add license keyword to project declaration</changelog>
</package>
<package pkgid="7d4dda03581b5d95f97899783bea6e8d0772cb045909dbd3b62905881c39eb17" name="lighttpd-mod_vhostdb_ldap" arch="x86_64">
  <version epoch="0" ver="1.4.67" rel="bp154.2.6.1"/>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1663934400">- update to 1.4.67:
  * Update comment about TCP_INFO on OpenBSD
  * [mod_ajp13] fix crash with bad response headers (fixes #3170)
  * [core] handle RDHUP when collecting chunked body
    CVE-2022-41556 boo#1203872
  * [core] tweak streaming request body to backends
  * [core] handle ENOSPC with pwritev() (#3171)
  * [core] manually calculate off_t max (fixes #3171)
  * [autoconf] force large file support (#3171)
  * [multiple] quiet coverity warnings using casts
  * [meson] add license keyword to project declaration</changelog>
</package>
<package pkgid="de39a8152c52407d3759bffc6fbc6808e3d256a2f77d3f455cc554359a827ecb" name="lighttpd-mod_vhostdb_mysql" arch="aarch64">
  <version epoch="0" ver="1.4.66" rel="bp154.2.3.1"/>
  <changelog author="mikhail.kasimov@gmail.com" date="1523016000">- Updated 10-ssl.conf (TLSv1.2 only) for lighttpd.conf in
  lighttpd_1.4.49-1.1.debian.tar.xz</changelog>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
</package>
<package pkgid="204c7e1bd3e5099b45c36fe1780209113263bb59779b44811f0eb10c5640c242" name="lighttpd-mod_vhostdb_mysql" arch="i586">
  <version epoch="0" ver="1.4.66" rel="bp154.2.3.1"/>
  <changelog author="mikhail.kasimov@gmail.com" date="1523016000">- Updated 10-ssl.conf (TLSv1.2 only) for lighttpd.conf in
  lighttpd_1.4.49-1.1.debian.tar.xz</changelog>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
</package>
<package pkgid="e88502ee8c77fbe2896c2d3ef87ba4d39d403795fd2ba38589e4bb716cc45583" name="lighttpd-mod_vhostdb_mysql" arch="ppc64le">
  <version epoch="0" ver="1.4.66" rel="bp154.2.3.1"/>
  <changelog author="mikhail.kasimov@gmail.com" date="1523016000">- Updated 10-ssl.conf (TLSv1.2 only) for lighttpd.conf in
  lighttpd_1.4.49-1.1.debian.tar.xz</changelog>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
</package>
<package pkgid="6d8581d00c34551c5441aabdd24a4ca86bae3e7d9dd52ce168e2a210615e1385" name="lighttpd-mod_vhostdb_mysql" arch="s390x">
  <version epoch="0" ver="1.4.66" rel="bp154.2.3.1"/>
  <changelog author="mikhail.kasimov@gmail.com" date="1523016000">- Updated 10-ssl.conf (TLSv1.2 only) for lighttpd.conf in
  lighttpd_1.4.49-1.1.debian.tar.xz</changelog>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
</package>
<package pkgid="84d44b71c678706fa391faa031c3c4fbba5652e57aa9cbddd6ee6d1ff673f2f5" name="lighttpd-mod_vhostdb_mysql" arch="x86_64">
  <version epoch="0" ver="1.4.66" rel="bp154.2.3.1"/>
  <changelog author="mikhail.kasimov@gmail.com" date="1523016000">- Updated 10-ssl.conf (TLSv1.2 only) for lighttpd.conf in
  lighttpd_1.4.49-1.1.debian.tar.xz</changelog>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
</package>
<package pkgid="24b25f79e4ac59ecef0c886aae5f9646611d2bc83342b4afe23b1115b18d96c1" name="lighttpd-mod_vhostdb_mysql" arch="aarch64">
  <version epoch="0" ver="1.4.67" rel="bp154.2.6.1"/>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1663934400">- update to 1.4.67:
  * Update comment about TCP_INFO on OpenBSD
  * [mod_ajp13] fix crash with bad response headers (fixes #3170)
  * [core] handle RDHUP when collecting chunked body
    CVE-2022-41556 boo#1203872
  * [core] tweak streaming request body to backends
  * [core] handle ENOSPC with pwritev() (#3171)
  * [core] manually calculate off_t max (fixes #3171)
  * [autoconf] force large file support (#3171)
  * [multiple] quiet coverity warnings using casts
  * [meson] add license keyword to project declaration</changelog>
</package>
<package pkgid="1331b6d117d6cbdef74831de59d3b35582c5b958e622559c48bbf91fb84a2bf4" name="lighttpd-mod_vhostdb_mysql" arch="i586">
  <version epoch="0" ver="1.4.67" rel="bp154.2.6.1"/>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1663934400">- update to 1.4.67:
  * Update comment about TCP_INFO on OpenBSD
  * [mod_ajp13] fix crash with bad response headers (fixes #3170)
  * [core] handle RDHUP when collecting chunked body
    CVE-2022-41556 boo#1203872
  * [core] tweak streaming request body to backends
  * [core] handle ENOSPC with pwritev() (#3171)
  * [core] manually calculate off_t max (fixes #3171)
  * [autoconf] force large file support (#3171)
  * [multiple] quiet coverity warnings using casts
  * [meson] add license keyword to project declaration</changelog>
</package>
<package pkgid="ab6411ef3fcbe55ad86eedf583a53f923ba561a9df1d3732580cdcd95347f168" name="lighttpd-mod_vhostdb_mysql" arch="ppc64le">
  <version epoch="0" ver="1.4.67" rel="bp154.2.6.1"/>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1663934400">- update to 1.4.67:
  * Update comment about TCP_INFO on OpenBSD
  * [mod_ajp13] fix crash with bad response headers (fixes #3170)
  * [core] handle RDHUP when collecting chunked body
    CVE-2022-41556 boo#1203872
  * [core] tweak streaming request body to backends
  * [core] handle ENOSPC with pwritev() (#3171)
  * [core] manually calculate off_t max (fixes #3171)
  * [autoconf] force large file support (#3171)
  * [multiple] quiet coverity warnings using casts
  * [meson] add license keyword to project declaration</changelog>
</package>
<package pkgid="68ee1402281de84dd1bcd3e95fd6a733ebd110b0649563fa877e4f140fb3776b" name="lighttpd-mod_vhostdb_mysql" arch="s390x">
  <version epoch="0" ver="1.4.67" rel="bp154.2.6.1"/>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1663934400">- update to 1.4.67:
  * Update comment about TCP_INFO on OpenBSD
  * [mod_ajp13] fix crash with bad response headers (fixes #3170)
  * [core] handle RDHUP when collecting chunked body
    CVE-2022-41556 boo#1203872
  * [core] tweak streaming request body to backends
  * [core] handle ENOSPC with pwritev() (#3171)
  * [core] manually calculate off_t max (fixes #3171)
  * [autoconf] force large file support (#3171)
  * [multiple] quiet coverity warnings using casts
  * [meson] add license keyword to project declaration</changelog>
</package>
<package pkgid="d6cb9462ace8d1767b067c8dad97b4a593dd1c87e63c6067f6ffc2398840349e" name="lighttpd-mod_vhostdb_mysql" arch="x86_64">
  <version epoch="0" ver="1.4.67" rel="bp154.2.6.1"/>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1663934400">- update to 1.4.67:
  * Update comment about TCP_INFO on OpenBSD
  * [mod_ajp13] fix crash with bad response headers (fixes #3170)
  * [core] handle RDHUP when collecting chunked body
    CVE-2022-41556 boo#1203872
  * [core] tweak streaming request body to backends
  * [core] handle ENOSPC with pwritev() (#3171)
  * [core] manually calculate off_t max (fixes #3171)
  * [autoconf] force large file support (#3171)
  * [multiple] quiet coverity warnings using casts
  * [meson] add license keyword to project declaration</changelog>
</package>
<package pkgid="dc7bcee239e414d51816bd9acbe7294b6924337c0e8db830822bcd957e56ecce" name="lighttpd-mod_vhostdb_pgsql" arch="aarch64">
  <version epoch="0" ver="1.4.66" rel="bp154.2.3.1"/>
  <changelog author="mikhail.kasimov@gmail.com" date="1523016000">- Updated 10-ssl.conf (TLSv1.2 only) for lighttpd.conf in
  lighttpd_1.4.49-1.1.debian.tar.xz</changelog>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
</package>
<package pkgid="c06ab906c1cc3c68fec937a0271e6b72ee93d11a66efdbb7acc40f67b851599b" name="lighttpd-mod_vhostdb_pgsql" arch="i586">
  <version epoch="0" ver="1.4.66" rel="bp154.2.3.1"/>
  <changelog author="mikhail.kasimov@gmail.com" date="1523016000">- Updated 10-ssl.conf (TLSv1.2 only) for lighttpd.conf in
  lighttpd_1.4.49-1.1.debian.tar.xz</changelog>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
</package>
<package pkgid="69533c1d327d03589db45724cfb823ed65120da4966cfc0f5ef27e67507feb48" name="lighttpd-mod_vhostdb_pgsql" arch="ppc64le">
  <version epoch="0" ver="1.4.66" rel="bp154.2.3.1"/>
  <changelog author="mikhail.kasimov@gmail.com" date="1523016000">- Updated 10-ssl.conf (TLSv1.2 only) for lighttpd.conf in
  lighttpd_1.4.49-1.1.debian.tar.xz</changelog>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
</package>
<package pkgid="da776f5a2a5ad3f7fd8aecd828c9713e8b8b3e2eb62596a1c1b80bef6d93502c" name="lighttpd-mod_vhostdb_pgsql" arch="s390x">
  <version epoch="0" ver="1.4.66" rel="bp154.2.3.1"/>
  <changelog author="mikhail.kasimov@gmail.com" date="1523016000">- Updated 10-ssl.conf (TLSv1.2 only) for lighttpd.conf in
  lighttpd_1.4.49-1.1.debian.tar.xz</changelog>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
</package>
<package pkgid="aab439f2733901887514d8c99a94a24b9ec4addfd9054ec3c447c26cac7acce8" name="lighttpd-mod_vhostdb_pgsql" arch="x86_64">
  <version epoch="0" ver="1.4.66" rel="bp154.2.3.1"/>
  <changelog author="mikhail.kasimov@gmail.com" date="1523016000">- Updated 10-ssl.conf (TLSv1.2 only) for lighttpd.conf in
  lighttpd_1.4.49-1.1.debian.tar.xz</changelog>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
</package>
<package pkgid="e93eae5037798327a8079799c5e2929e3bac4223a1a0e00f323321c01f27962d" name="lighttpd-mod_vhostdb_pgsql" arch="aarch64">
  <version epoch="0" ver="1.4.67" rel="bp154.2.6.1"/>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1663934400">- update to 1.4.67:
  * Update comment about TCP_INFO on OpenBSD
  * [mod_ajp13] fix crash with bad response headers (fixes #3170)
  * [core] handle RDHUP when collecting chunked body
    CVE-2022-41556 boo#1203872
  * [core] tweak streaming request body to backends
  * [core] handle ENOSPC with pwritev() (#3171)
  * [core] manually calculate off_t max (fixes #3171)
  * [autoconf] force large file support (#3171)
  * [multiple] quiet coverity warnings using casts
  * [meson] add license keyword to project declaration</changelog>
</package>
<package pkgid="3a971c4c363109217807029d00ca6906f86ea20a6a8e0864654897b2f1bfa161" name="lighttpd-mod_vhostdb_pgsql" arch="i586">
  <version epoch="0" ver="1.4.67" rel="bp154.2.6.1"/>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1663934400">- update to 1.4.67:
  * Update comment about TCP_INFO on OpenBSD
  * [mod_ajp13] fix crash with bad response headers (fixes #3170)
  * [core] handle RDHUP when collecting chunked body
    CVE-2022-41556 boo#1203872
  * [core] tweak streaming request body to backends
  * [core] handle ENOSPC with pwritev() (#3171)
  * [core] manually calculate off_t max (fixes #3171)
  * [autoconf] force large file support (#3171)
  * [multiple] quiet coverity warnings using casts
  * [meson] add license keyword to project declaration</changelog>
</package>
<package pkgid="e9fc36f5cbf0464c0c7d117ba7abd700aee85830c3b1e7332166d454e4caf07c" name="lighttpd-mod_vhostdb_pgsql" arch="ppc64le">
  <version epoch="0" ver="1.4.67" rel="bp154.2.6.1"/>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1663934400">- update to 1.4.67:
  * Update comment about TCP_INFO on OpenBSD
  * [mod_ajp13] fix crash with bad response headers (fixes #3170)
  * [core] handle RDHUP when collecting chunked body
    CVE-2022-41556 boo#1203872
  * [core] tweak streaming request body to backends
  * [core] handle ENOSPC with pwritev() (#3171)
  * [core] manually calculate off_t max (fixes #3171)
  * [autoconf] force large file support (#3171)
  * [multiple] quiet coverity warnings using casts
  * [meson] add license keyword to project declaration</changelog>
</package>
<package pkgid="05c25a4824223e15d2a41f79c3cfc14c936d65efee513e1253df474c3f1bc85c" name="lighttpd-mod_vhostdb_pgsql" arch="s390x">
  <version epoch="0" ver="1.4.67" rel="bp154.2.6.1"/>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1663934400">- update to 1.4.67:
  * Update comment about TCP_INFO on OpenBSD
  * [mod_ajp13] fix crash with bad response headers (fixes #3170)
  * [core] handle RDHUP when collecting chunked body
    CVE-2022-41556 boo#1203872
  * [core] tweak streaming request body to backends
  * [core] handle ENOSPC with pwritev() (#3171)
  * [core] manually calculate off_t max (fixes #3171)
  * [autoconf] force large file support (#3171)
  * [multiple] quiet coverity warnings using casts
  * [meson] add license keyword to project declaration</changelog>
</package>
<package pkgid="e6248c6d121dfe388b66430460eb84b6fcf8c9b7f41840a119597058275285f6" name="lighttpd-mod_vhostdb_pgsql" arch="x86_64">
  <version epoch="0" ver="1.4.67" rel="bp154.2.6.1"/>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1663934400">- update to 1.4.67:
  * Update comment about TCP_INFO on OpenBSD
  * [mod_ajp13] fix crash with bad response headers (fixes #3170)
  * [core] handle RDHUP when collecting chunked body
    CVE-2022-41556 boo#1203872
  * [core] tweak streaming request body to backends
  * [core] handle ENOSPC with pwritev() (#3171)
  * [core] manually calculate off_t max (fixes #3171)
  * [autoconf] force large file support (#3171)
  * [multiple] quiet coverity warnings using casts
  * [meson] add license keyword to project declaration</changelog>
</package>
<package pkgid="2604a5e02d58949453aaebef9f38e1dbf0f2381f70849a7f3529773196eec0a1" name="lighttpd-mod_webdav" arch="aarch64">
  <version epoch="0" ver="1.4.66" rel="bp154.2.3.1"/>
  <changelog author="mikhail.kasimov@gmail.com" date="1523016000">- Updated 10-ssl.conf (TLSv1.2 only) for lighttpd.conf in
  lighttpd_1.4.49-1.1.debian.tar.xz</changelog>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
</package>
<package pkgid="b7676bff2e52d4a66cd392ebc305e3e8313913c07901c8581797e3d7c65cb779" name="lighttpd-mod_webdav" arch="i586">
  <version epoch="0" ver="1.4.66" rel="bp154.2.3.1"/>
  <changelog author="mikhail.kasimov@gmail.com" date="1523016000">- Updated 10-ssl.conf (TLSv1.2 only) for lighttpd.conf in
  lighttpd_1.4.49-1.1.debian.tar.xz</changelog>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
</package>
<package pkgid="cf92c9b295a4df0117b4b732964fa88458d1323307f861ae02f71c4b4448ba7e" name="lighttpd-mod_webdav" arch="ppc64le">
  <version epoch="0" ver="1.4.66" rel="bp154.2.3.1"/>
  <changelog author="mikhail.kasimov@gmail.com" date="1523016000">- Updated 10-ssl.conf (TLSv1.2 only) for lighttpd.conf in
  lighttpd_1.4.49-1.1.debian.tar.xz</changelog>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
</package>
<package pkgid="770eaadb7995b205d4707ab5ec552940e14e4809325c4dd60d7fb64e6aeff752" name="lighttpd-mod_webdav" arch="s390x">
  <version epoch="0" ver="1.4.66" rel="bp154.2.3.1"/>
  <changelog author="mikhail.kasimov@gmail.com" date="1523016000">- Updated 10-ssl.conf (TLSv1.2 only) for lighttpd.conf in
  lighttpd_1.4.49-1.1.debian.tar.xz</changelog>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
</package>
<package pkgid="4e43e087f5508614a79aef947877911b95a519c64395a2b4e6e229f3590f3e75" name="lighttpd-mod_webdav" arch="x86_64">
  <version epoch="0" ver="1.4.66" rel="bp154.2.3.1"/>
  <changelog author="mikhail.kasimov@gmail.com" date="1523016000">- Updated 10-ssl.conf (TLSv1.2 only) for lighttpd.conf in
  lighttpd_1.4.49-1.1.debian.tar.xz</changelog>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
</package>
<package pkgid="d3f118678c13afd4780347e39fca1c0ff69e3b2cae2674ef9fc5dc215f072b17" name="lighttpd-mod_webdav" arch="aarch64">
  <version epoch="0" ver="1.4.67" rel="bp154.2.6.1"/>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1663934400">- update to 1.4.67:
  * Update comment about TCP_INFO on OpenBSD
  * [mod_ajp13] fix crash with bad response headers (fixes #3170)
  * [core] handle RDHUP when collecting chunked body
    CVE-2022-41556 boo#1203872
  * [core] tweak streaming request body to backends
  * [core] handle ENOSPC with pwritev() (#3171)
  * [core] manually calculate off_t max (fixes #3171)
  * [autoconf] force large file support (#3171)
  * [multiple] quiet coverity warnings using casts
  * [meson] add license keyword to project declaration</changelog>
</package>
<package pkgid="8bce4b8444da14fa411886605dd4c49b31e53dfdf384043cb809e2310c0968b7" name="lighttpd-mod_webdav" arch="i586">
  <version epoch="0" ver="1.4.67" rel="bp154.2.6.1"/>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1663934400">- update to 1.4.67:
  * Update comment about TCP_INFO on OpenBSD
  * [mod_ajp13] fix crash with bad response headers (fixes #3170)
  * [core] handle RDHUP when collecting chunked body
    CVE-2022-41556 boo#1203872
  * [core] tweak streaming request body to backends
  * [core] handle ENOSPC with pwritev() (#3171)
  * [core] manually calculate off_t max (fixes #3171)
  * [autoconf] force large file support (#3171)
  * [multiple] quiet coverity warnings using casts
  * [meson] add license keyword to project declaration</changelog>
</package>
<package pkgid="d0b7db5eb3eb1eb36200e7b2261daa5dcdcab64715bf1a4e4bd82a515f91d88b" name="lighttpd-mod_webdav" arch="ppc64le">
  <version epoch="0" ver="1.4.67" rel="bp154.2.6.1"/>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1663934400">- update to 1.4.67:
  * Update comment about TCP_INFO on OpenBSD
  * [mod_ajp13] fix crash with bad response headers (fixes #3170)
  * [core] handle RDHUP when collecting chunked body
    CVE-2022-41556 boo#1203872
  * [core] tweak streaming request body to backends
  * [core] handle ENOSPC with pwritev() (#3171)
  * [core] manually calculate off_t max (fixes #3171)
  * [autoconf] force large file support (#3171)
  * [multiple] quiet coverity warnings using casts
  * [meson] add license keyword to project declaration</changelog>
</package>
<package pkgid="4448825ab00c2dd7f50813e67954398504bd144c59d6de72a0209e274a035be2" name="lighttpd-mod_webdav" arch="s390x">
  <version epoch="0" ver="1.4.67" rel="bp154.2.6.1"/>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1663934400">- update to 1.4.67:
  * Update comment about TCP_INFO on OpenBSD
  * [mod_ajp13] fix crash with bad response headers (fixes #3170)
  * [core] handle RDHUP when collecting chunked body
    CVE-2022-41556 boo#1203872
  * [core] tweak streaming request body to backends
  * [core] handle ENOSPC with pwritev() (#3171)
  * [core] manually calculate off_t max (fixes #3171)
  * [autoconf] force large file support (#3171)
  * [multiple] quiet coverity warnings using casts
  * [meson] add license keyword to project declaration</changelog>
</package>
<package pkgid="ceb2a0a6cbeeaad3004eac8e251d87407ddb94d61e0b5910556f57ce065d384c" name="lighttpd-mod_webdav" arch="x86_64">
  <version epoch="0" ver="1.4.67" rel="bp154.2.6.1"/>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1663934400">- update to 1.4.67:
  * Update comment about TCP_INFO on OpenBSD
  * [mod_ajp13] fix crash with bad response headers (fixes #3170)
  * [core] handle RDHUP when collecting chunked body
    CVE-2022-41556 boo#1203872
  * [core] tweak streaming request body to backends
  * [core] handle ENOSPC with pwritev() (#3171)
  * [core] manually calculate off_t max (fixes #3171)
  * [autoconf] force large file support (#3171)
  * [multiple] quiet coverity warnings using casts
  * [meson] add license keyword to project declaration</changelog>
</package>
<package pkgid="6a5231c30d7658485dd6cbc4ef40441d2c592737637609aa68e67f0da675094f" name="lxd" arch="aarch64">
  <version epoch="0" ver="5.9" rel="bp154.2.3.1"/>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1622548800">- Fix build on i586 by if_arch-ing out the VM support on non-x86_64 platforms.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1622548801">- fix dependencies for aarch64/armv7l</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1622980800">- Update to LXD 4.15. The full upstream changelog is available from:
  https://discuss.linuxcontainers.org/t/lxd-4-15-has-been-released/11252
  bsc#1186906
  + Network interface hotplug in VMs
  + Configurable shutdown timeout
  + New persistent warnings (time skew, apparmor and virtiofsd)
  + Location field in /dev/lxd API
  + New type and name columns in lxc config trust list
  + Cluster members acting as database stand-by now visible
  + lxc monitor --pretty now supported with lifecycle events
  + New --expire flag for lxc publish
  + Requestor now recorded in lifecyle events
  + Proxy header support on main API endpoint
  + Full swagger coverage of REST API</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1623153600">- Build lxd-agent and lxd-p2c statically to match upstream LXD build scripts
  (and to make VMs work properly -- lxd-agent is injected into the VM).
- Update lxd-rpmlintrc to match this.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1624622400">- Add backport for &lt;https://github.com/lxc/lxd/pull/8908&gt; which fixes a
  Leap-specific kernel backport bug (close_range(2) was backported but not the
  flags that it supported in the first version). boo#1186786
  + boo1186786-0001-forkexec-handle-broken-close_range-backport-in-openS.patch</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1625659200">- Build with go1.15 for reproducible build results (boo#1102408)</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1627732800">- Update to LXD 4.16. The full upstream changelog is available from:
  https://discuss.linuxcontainers.org/t/lxd-4-16-has-been-released/11547
  boo#1188946
  + Cluster certificate update
  + Copy/move of custom volumes between projects
  + lxc monitor --pretty now works with all event types
  + Easier revocation of cluster join tokens
  + IP filtering on unmanaged bridges
  + New warnings
  + New lifecycle events
- Remove upstreamed patches:
  + boo1186786-0001-forkexec-handle-broken-close_range-backport-in-openS.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1629460800">- Update to LXD 4.17. The full upstream changelog is available from:
  https://discuss.linuxcontainers.org/t/lxd-4-17-has-been-released/11812
  boo#1189645
  + lxd import replaced by new lxd recover
  + Cluster member evacuation
  * Reworked lxc info output
  + Requestor address in lifecycle event
  + USB GPU support in the resources API
  + Monitoring of all projects in lxc monitor
  + Alternative format options in lxc monitor</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1630843200">- Update to LXD 4.18. The full upstream changelog is available from:
  https://discuss.linuxcontainers.org/t/lxd-4-18-has-been-released/12068/2
  boo#1190323
  + Network forwards (floating IPs)
  + Native BGP support
  * NAT address customization with OVN
  * lxd cluster edit for cluster disaster recovery
  + Refresh support for custom volume copies
  + Additional device restrictions for projects
  * --minimal option for lxd init
  * Additional network counters in instance state
- Disable stripping of binaries, which seems to be causing issues at runtime
  due to some ld.so assertion failing. In particular it seems that libdqlite is
  getting corrupted somehow.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1636372800">- Update to LXD 4.20. The full upstream changelog is available from:
  https://discuss.linuxcontainers.org/t/lxd-4-20-has-been-released/12540
  boo#1192432
  + Live migration of virtual machines
  + Network peering for OVN
  + Network zones (DNS)
  + SR-IOV acceleration for OVN networking
  + Linux sysctl configuration on containers
  + Core scheduling for virtual machines
  + Cluster member configuration
  * Improvement to network leases</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1639396800">- Update to LXD 4.21. The full upstream changelog is available from:
  https://discuss.linuxcontainers.org/t/lxd-4-21-has-been-released/12860
  boo#1193649
  + Cluster member groups
  * Reworked cloud-init support
  + Trust certificate self-renewal
  + Restricted disk passthrough in projects
  + Restricted idmap uid/gid in projects
  + List all lxc commands with --sub-commands
  + List instances across all projects with --all-projects
  + New database-leader cluster role
  * Consistent units for byte sizes.
  * Routed networking in virtual machines
  + Support for ipv4.routes and ipv6.routes on routed type NICs
  + Option to skip records for NAT-ed addresses in network zones
  + Allow blocking an IP address family with security filtering options
  + New ceph.rbd.du storage config option to disable potentially slow rbd du
  * Optimized moving of instances and volumes between projects
  * Support for copying/moving custom volumes between cluster members</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1651752000">- Update to LXD 4.24. The full upstream changelog is available from:
  https://discuss.linuxcontainers.org/t/lxd-4-24-has-been-released/13550
  boo#1199215
  This is the last release before LXD 5.0 (which does not support the Leap 15.3
  kernel -- LXD 5.0 requires kernel 5.4 or newer). Thus this will be the last
  LXD release for Leap 15.3.
  + lxc file mount and new files API
  + Cluster event hub role
  * Reworked lxc storage volume info
  + AppArmor profiles for image extractors
  + Grafana dashboard
  + Degraded startup (missing disk)
  + restricted.containers.interception project option
  + core.metrics_authentication server option
  + Network interface name and MTU in virtual machines
  + I/O uring support for VM storage
  + ipv4.neighbor_probe and ipv6.neighbor_probe NIC options</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1651752001">- Update to LXD 5.1. The full upstream changelog is available from:
  https://discuss.linuxcontainers.org/t/lxd-5-1-has-been-released/13956
  boo#1199216
  + Sysinfo system call interception
  + lxc cluster role sub-command
  * lxc storage volume info shows volume total size
  + Configurable host network interface naming pattern
  * Overrideable evacuation mode
  * Setting profiles during an image copy
- Backport upstream patch to fix build on x32 systems.
  + 0001-lxd-secommp-Fix-sysinfo-syscall-interception-on-32-b.patch
- Make CRIU a Recommends so that we can still use LXD on 32-bit openSUSE.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1653825600">- Update to LXD 5.2. The full upstream changelog is available from:
  https://discuss.linuxcontainers.org/t/lxd-5-2-has-been-released/14200
  boo#1200002
  + VPD information in resources API
  * Cross-project profile copy
  * HTTP streaming support in /dev/lxd API
  * Use of server-side filtering in CLI
  * Ceph librbd for virtual machines
- Remove upstreamed patch:
  + 0001-lxd-secommp-Fix-sysinfo-syscall-interception-on-32-b.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1656331200">- Update to LXD 5.3. The full upstream changelog is available from:
  https://discuss.linuxcontainers.org/t/lxd-5-3-has-been-released/14439
  boo#1200974
  + Extended raw.qemu support
  + fscache support for cephfs storage pools</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1658059200">- Change to using systemd-sysusers</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1664193600">- Update to LXD 5.6. The full upstream changelog is available from:
  https://discuss.linuxcontainers.org/t/lxd-5-6-has-been-released/15191
  boo#1203731
  LXD 5.6:
  + Grafana Loki support
  + Object storage on local storage pools
  + Infiniband support for virtual machines
  + Restricted network access in projects
  + instance-ready lifecycle event
  + Metric for total effective CPUs
  LXD 5.5:
  + Storage buckets (on Ceph)
  + Instance Ready state
  + Configurable BGP hold time
  + All projects queries for storage volumes
  + OOM kill counter in metrics
  * Database optimization
  LXD 5.4:
  + Load-balancers (OVN)
  + Bi-directional vsock interface (VM)
  * Changes to vsock API (LXD VMs)</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1666958400">- Update to LXD 5.7. The full upstream changelog is available from:
  https://discuss.linuxcontainers.org/t/lxd-5-7-has-been-released/15432
  boo#1204852
  + ACME / Let?s Encrypt support
  + Cloud-init validation
  + Internal metrics
  + Cluster join tokens expiry
  + Proxy device hotplugging to VM</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1669118400">- Update to LXD 5.8. The full upstream changelog is available from:
  https://discuss.linuxcontainers.org/t/lxd-5-8-has-been-released/15686
  boo#1205623
  + CPU hotplug in VMs
  + Device override on init and launch
  * Record volume creation date</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1670846400">- Update to LXD 5.9. The full upstream changelog is available from:
  https://discuss.linuxcontainers.org/t/lxd-5-9-has-been-released/15907
  boo#1206296
  + Network zones project feature</changelog>
</package>
<package pkgid="7145c830041b066022473aab9fe81f87bd93a34c8b0fd201e2f1595712d5f080" name="lxd" arch="ppc64le">
  <version epoch="0" ver="5.9" rel="bp154.2.3.1"/>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1622548800">- Fix build on i586 by if_arch-ing out the VM support on non-x86_64 platforms.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1622548801">- fix dependencies for aarch64/armv7l</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1622980800">- Update to LXD 4.15. The full upstream changelog is available from:
  https://discuss.linuxcontainers.org/t/lxd-4-15-has-been-released/11252
  bsc#1186906
  + Network interface hotplug in VMs
  + Configurable shutdown timeout
  + New persistent warnings (time skew, apparmor and virtiofsd)
  + Location field in /dev/lxd API
  + New type and name columns in lxc config trust list
  + Cluster members acting as database stand-by now visible
  + lxc monitor --pretty now supported with lifecycle events
  + New --expire flag for lxc publish
  + Requestor now recorded in lifecyle events
  + Proxy header support on main API endpoint
  + Full swagger coverage of REST API</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1623153600">- Build lxd-agent and lxd-p2c statically to match upstream LXD build scripts
  (and to make VMs work properly -- lxd-agent is injected into the VM).
- Update lxd-rpmlintrc to match this.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1624622400">- Add backport for &lt;https://github.com/lxc/lxd/pull/8908&gt; which fixes a
  Leap-specific kernel backport bug (close_range(2) was backported but not the
  flags that it supported in the first version). boo#1186786
  + boo1186786-0001-forkexec-handle-broken-close_range-backport-in-openS.patch</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1625659200">- Build with go1.15 for reproducible build results (boo#1102408)</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1627732800">- Update to LXD 4.16. The full upstream changelog is available from:
  https://discuss.linuxcontainers.org/t/lxd-4-16-has-been-released/11547
  boo#1188946
  + Cluster certificate update
  + Copy/move of custom volumes between projects
  + lxc monitor --pretty now works with all event types
  + Easier revocation of cluster join tokens
  + IP filtering on unmanaged bridges
  + New warnings
  + New lifecycle events
- Remove upstreamed patches:
  + boo1186786-0001-forkexec-handle-broken-close_range-backport-in-openS.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1629460800">- Update to LXD 4.17. The full upstream changelog is available from:
  https://discuss.linuxcontainers.org/t/lxd-4-17-has-been-released/11812
  boo#1189645
  + lxd import replaced by new lxd recover
  + Cluster member evacuation
  * Reworked lxc info output
  + Requestor address in lifecycle event
  + USB GPU support in the resources API
  + Monitoring of all projects in lxc monitor
  + Alternative format options in lxc monitor</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1630843200">- Update to LXD 4.18. The full upstream changelog is available from:
  https://discuss.linuxcontainers.org/t/lxd-4-18-has-been-released/12068/2
  boo#1190323
  + Network forwards (floating IPs)
  + Native BGP support
  * NAT address customization with OVN
  * lxd cluster edit for cluster disaster recovery
  + Refresh support for custom volume copies
  + Additional device restrictions for projects
  * --minimal option for lxd init
  * Additional network counters in instance state
- Disable stripping of binaries, which seems to be causing issues at runtime
  due to some ld.so assertion failing. In particular it seems that libdqlite is
  getting corrupted somehow.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1636372800">- Update to LXD 4.20. The full upstream changelog is available from:
  https://discuss.linuxcontainers.org/t/lxd-4-20-has-been-released/12540
  boo#1192432
  + Live migration of virtual machines
  + Network peering for OVN
  + Network zones (DNS)
  + SR-IOV acceleration for OVN networking
  + Linux sysctl configuration on containers
  + Core scheduling for virtual machines
  + Cluster member configuration
  * Improvement to network leases</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1639396800">- Update to LXD 4.21. The full upstream changelog is available from:
  https://discuss.linuxcontainers.org/t/lxd-4-21-has-been-released/12860
  boo#1193649
  + Cluster member groups
  * Reworked cloud-init support
  + Trust certificate self-renewal
  + Restricted disk passthrough in projects
  + Restricted idmap uid/gid in projects
  + List all lxc commands with --sub-commands
  + List instances across all projects with --all-projects
  + New database-leader cluster role
  * Consistent units for byte sizes.
  * Routed networking in virtual machines
  + Support for ipv4.routes and ipv6.routes on routed type NICs
  + Option to skip records for NAT-ed addresses in network zones
  + Allow blocking an IP address family with security filtering options
  + New ceph.rbd.du storage config option to disable potentially slow rbd du
  * Optimized moving of instances and volumes between projects
  * Support for copying/moving custom volumes between cluster members</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1651752000">- Update to LXD 4.24. The full upstream changelog is available from:
  https://discuss.linuxcontainers.org/t/lxd-4-24-has-been-released/13550
  boo#1199215
  This is the last release before LXD 5.0 (which does not support the Leap 15.3
  kernel -- LXD 5.0 requires kernel 5.4 or newer). Thus this will be the last
  LXD release for Leap 15.3.
  + lxc file mount and new files API
  + Cluster event hub role
  * Reworked lxc storage volume info
  + AppArmor profiles for image extractors
  + Grafana dashboard
  + Degraded startup (missing disk)
  + restricted.containers.interception project option
  + core.metrics_authentication server option
  + Network interface name and MTU in virtual machines
  + I/O uring support for VM storage
  + ipv4.neighbor_probe and ipv6.neighbor_probe NIC options</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1651752001">- Update to LXD 5.1. The full upstream changelog is available from:
  https://discuss.linuxcontainers.org/t/lxd-5-1-has-been-released/13956
  boo#1199216
  + Sysinfo system call interception
  + lxc cluster role sub-command
  * lxc storage volume info shows volume total size
  + Configurable host network interface naming pattern
  * Overrideable evacuation mode
  * Setting profiles during an image copy
- Backport upstream patch to fix build on x32 systems.
  + 0001-lxd-secommp-Fix-sysinfo-syscall-interception-on-32-b.patch
- Make CRIU a Recommends so that we can still use LXD on 32-bit openSUSE.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1653825600">- Update to LXD 5.2. The full upstream changelog is available from:
  https://discuss.linuxcontainers.org/t/lxd-5-2-has-been-released/14200
  boo#1200002
  + VPD information in resources API
  * Cross-project profile copy
  * HTTP streaming support in /dev/lxd API
  * Use of server-side filtering in CLI
  * Ceph librbd for virtual machines
- Remove upstreamed patch:
  + 0001-lxd-secommp-Fix-sysinfo-syscall-interception-on-32-b.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1656331200">- Update to LXD 5.3. The full upstream changelog is available from:
  https://discuss.linuxcontainers.org/t/lxd-5-3-has-been-released/14439
  boo#1200974
  + Extended raw.qemu support
  + fscache support for cephfs storage pools</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1658059200">- Change to using systemd-sysusers</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1664193600">- Update to LXD 5.6. The full upstream changelog is available from:
  https://discuss.linuxcontainers.org/t/lxd-5-6-has-been-released/15191
  boo#1203731
  LXD 5.6:
  + Grafana Loki support
  + Object storage on local storage pools
  + Infiniband support for virtual machines
  + Restricted network access in projects
  + instance-ready lifecycle event
  + Metric for total effective CPUs
  LXD 5.5:
  + Storage buckets (on Ceph)
  + Instance Ready state
  + Configurable BGP hold time
  + All projects queries for storage volumes
  + OOM kill counter in metrics
  * Database optimization
  LXD 5.4:
  + Load-balancers (OVN)
  + Bi-directional vsock interface (VM)
  * Changes to vsock API (LXD VMs)</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1666958400">- Update to LXD 5.7. The full upstream changelog is available from:
  https://discuss.linuxcontainers.org/t/lxd-5-7-has-been-released/15432
  boo#1204852
  + ACME / Let?s Encrypt support
  + Cloud-init validation
  + Internal metrics
  + Cluster join tokens expiry
  + Proxy device hotplugging to VM</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1669118400">- Update to LXD 5.8. The full upstream changelog is available from:
  https://discuss.linuxcontainers.org/t/lxd-5-8-has-been-released/15686
  boo#1205623
  + CPU hotplug in VMs
  + Device override on init and launch
  * Record volume creation date</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1670846400">- Update to LXD 5.9. The full upstream changelog is available from:
  https://discuss.linuxcontainers.org/t/lxd-5-9-has-been-released/15907
  boo#1206296
  + Network zones project feature</changelog>
</package>
<package pkgid="e811c80b15e4ed7ab4fd05ee174c52b95eb54c338838fa98a9cd9e2c2e4b9738" name="lxd" arch="s390x">
  <version epoch="0" ver="5.9" rel="bp154.2.3.1"/>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1622548800">- Fix build on i586 by if_arch-ing out the VM support on non-x86_64 platforms.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1622548801">- fix dependencies for aarch64/armv7l</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1622980800">- Update to LXD 4.15. The full upstream changelog is available from:
  https://discuss.linuxcontainers.org/t/lxd-4-15-has-been-released/11252
  bsc#1186906
  + Network interface hotplug in VMs
  + Configurable shutdown timeout
  + New persistent warnings (time skew, apparmor and virtiofsd)
  + Location field in /dev/lxd API
  + New type and name columns in lxc config trust list
  + Cluster members acting as database stand-by now visible
  + lxc monitor --pretty now supported with lifecycle events
  + New --expire flag for lxc publish
  + Requestor now recorded in lifecyle events
  + Proxy header support on main API endpoint
  + Full swagger coverage of REST API</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1623153600">- Build lxd-agent and lxd-p2c statically to match upstream LXD build scripts
  (and to make VMs work properly -- lxd-agent is injected into the VM).
- Update lxd-rpmlintrc to match this.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1624622400">- Add backport for &lt;https://github.com/lxc/lxd/pull/8908&gt; which fixes a
  Leap-specific kernel backport bug (close_range(2) was backported but not the
  flags that it supported in the first version). boo#1186786
  + boo1186786-0001-forkexec-handle-broken-close_range-backport-in-openS.patch</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1625659200">- Build with go1.15 for reproducible build results (boo#1102408)</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1627732800">- Update to LXD 4.16. The full upstream changelog is available from:
  https://discuss.linuxcontainers.org/t/lxd-4-16-has-been-released/11547
  boo#1188946
  + Cluster certificate update
  + Copy/move of custom volumes between projects
  + lxc monitor --pretty now works with all event types
  + Easier revocation of cluster join tokens
  + IP filtering on unmanaged bridges
  + New warnings
  + New lifecycle events
- Remove upstreamed patches:
  + boo1186786-0001-forkexec-handle-broken-close_range-backport-in-openS.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1629460800">- Update to LXD 4.17. The full upstream changelog is available from:
  https://discuss.linuxcontainers.org/t/lxd-4-17-has-been-released/11812
  boo#1189645
  + lxd import replaced by new lxd recover
  + Cluster member evacuation
  * Reworked lxc info output
  + Requestor address in lifecycle event
  + USB GPU support in the resources API
  + Monitoring of all projects in lxc monitor
  + Alternative format options in lxc monitor</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1630843200">- Update to LXD 4.18. The full upstream changelog is available from:
  https://discuss.linuxcontainers.org/t/lxd-4-18-has-been-released/12068/2
  boo#1190323
  + Network forwards (floating IPs)
  + Native BGP support
  * NAT address customization with OVN
  * lxd cluster edit for cluster disaster recovery
  + Refresh support for custom volume copies
  + Additional device restrictions for projects
  * --minimal option for lxd init
  * Additional network counters in instance state
- Disable stripping of binaries, which seems to be causing issues at runtime
  due to some ld.so assertion failing. In particular it seems that libdqlite is
  getting corrupted somehow.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1636372800">- Update to LXD 4.20. The full upstream changelog is available from:
  https://discuss.linuxcontainers.org/t/lxd-4-20-has-been-released/12540
  boo#1192432
  + Live migration of virtual machines
  + Network peering for OVN
  + Network zones (DNS)
  + SR-IOV acceleration for OVN networking
  + Linux sysctl configuration on containers
  + Core scheduling for virtual machines
  + Cluster member configuration
  * Improvement to network leases</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1639396800">- Update to LXD 4.21. The full upstream changelog is available from:
  https://discuss.linuxcontainers.org/t/lxd-4-21-has-been-released/12860
  boo#1193649
  + Cluster member groups
  * Reworked cloud-init support
  + Trust certificate self-renewal
  + Restricted disk passthrough in projects
  + Restricted idmap uid/gid in projects
  + List all lxc commands with --sub-commands
  + List instances across all projects with --all-projects
  + New database-leader cluster role
  * Consistent units for byte sizes.
  * Routed networking in virtual machines
  + Support for ipv4.routes and ipv6.routes on routed type NICs
  + Option to skip records for NAT-ed addresses in network zones
  + Allow blocking an IP address family with security filtering options
  + New ceph.rbd.du storage config option to disable potentially slow rbd du
  * Optimized moving of instances and volumes between projects
  * Support for copying/moving custom volumes between cluster members</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1651752000">- Update to LXD 4.24. The full upstream changelog is available from:
  https://discuss.linuxcontainers.org/t/lxd-4-24-has-been-released/13550
  boo#1199215
  This is the last release before LXD 5.0 (which does not support the Leap 15.3
  kernel -- LXD 5.0 requires kernel 5.4 or newer). Thus this will be the last
  LXD release for Leap 15.3.
  + lxc file mount and new files API
  + Cluster event hub role
  * Reworked lxc storage volume info
  + AppArmor profiles for image extractors
  + Grafana dashboard
  + Degraded startup (missing disk)
  + restricted.containers.interception project option
  + core.metrics_authentication server option
  + Network interface name and MTU in virtual machines
  + I/O uring support for VM storage
  + ipv4.neighbor_probe and ipv6.neighbor_probe NIC options</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1651752001">- Update to LXD 5.1. The full upstream changelog is available from:
  https://discuss.linuxcontainers.org/t/lxd-5-1-has-been-released/13956
  boo#1199216
  + Sysinfo system call interception
  + lxc cluster role sub-command
  * lxc storage volume info shows volume total size
  + Configurable host network interface naming pattern
  * Overrideable evacuation mode
  * Setting profiles during an image copy
- Backport upstream patch to fix build on x32 systems.
  + 0001-lxd-secommp-Fix-sysinfo-syscall-interception-on-32-b.patch
- Make CRIU a Recommends so that we can still use LXD on 32-bit openSUSE.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1653825600">- Update to LXD 5.2. The full upstream changelog is available from:
  https://discuss.linuxcontainers.org/t/lxd-5-2-has-been-released/14200
  boo#1200002
  + VPD information in resources API
  * Cross-project profile copy
  * HTTP streaming support in /dev/lxd API
  * Use of server-side filtering in CLI
  * Ceph librbd for virtual machines
- Remove upstreamed patch:
  + 0001-lxd-secommp-Fix-sysinfo-syscall-interception-on-32-b.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1656331200">- Update to LXD 5.3. The full upstream changelog is available from:
  https://discuss.linuxcontainers.org/t/lxd-5-3-has-been-released/14439
  boo#1200974
  + Extended raw.qemu support
  + fscache support for cephfs storage pools</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1658059200">- Change to using systemd-sysusers</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1664193600">- Update to LXD 5.6. The full upstream changelog is available from:
  https://discuss.linuxcontainers.org/t/lxd-5-6-has-been-released/15191
  boo#1203731
  LXD 5.6:
  + Grafana Loki support
  + Object storage on local storage pools
  + Infiniband support for virtual machines
  + Restricted network access in projects
  + instance-ready lifecycle event
  + Metric for total effective CPUs
  LXD 5.5:
  + Storage buckets (on Ceph)
  + Instance Ready state
  + Configurable BGP hold time
  + All projects queries for storage volumes
  + OOM kill counter in metrics
  * Database optimization
  LXD 5.4:
  + Load-balancers (OVN)
  + Bi-directional vsock interface (VM)
  * Changes to vsock API (LXD VMs)</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1666958400">- Update to LXD 5.7. The full upstream changelog is available from:
  https://discuss.linuxcontainers.org/t/lxd-5-7-has-been-released/15432
  boo#1204852
  + ACME / Let?s Encrypt support
  + Cloud-init validation
  + Internal metrics
  + Cluster join tokens expiry
  + Proxy device hotplugging to VM</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1669118400">- Update to LXD 5.8. The full upstream changelog is available from:
  https://discuss.linuxcontainers.org/t/lxd-5-8-has-been-released/15686
  boo#1205623
  + CPU hotplug in VMs
  + Device override on init and launch
  * Record volume creation date</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1670846400">- Update to LXD 5.9. The full upstream changelog is available from:
  https://discuss.linuxcontainers.org/t/lxd-5-9-has-been-released/15907
  boo#1206296
  + Network zones project feature</changelog>
</package>
<package pkgid="974069b6d684ebe8e233c0dd1e4d57896ee088fab7566aaf63082b9219aa1e83" name="lxd" arch="src">
  <version epoch="0" ver="5.9" rel="bp154.2.3.1"/>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1622548800">- Fix build on i586 by if_arch-ing out the VM support on non-x86_64 platforms.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1622548801">- fix dependencies for aarch64/armv7l</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1622980800">- Update to LXD 4.15. The full upstream changelog is available from:
  https://discuss.linuxcontainers.org/t/lxd-4-15-has-been-released/11252
  bsc#1186906
  + Network interface hotplug in VMs
  + Configurable shutdown timeout
  + New persistent warnings (time skew, apparmor and virtiofsd)
  + Location field in /dev/lxd API
  + New type and name columns in lxc config trust list
  + Cluster members acting as database stand-by now visible
  + lxc monitor --pretty now supported with lifecycle events
  + New --expire flag for lxc publish
  + Requestor now recorded in lifecyle events
  + Proxy header support on main API endpoint
  + Full swagger coverage of REST API</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1623153600">- Build lxd-agent and lxd-p2c statically to match upstream LXD build scripts
  (and to make VMs work properly -- lxd-agent is injected into the VM).
- Update lxd-rpmlintrc to match this.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1624622400">- Add backport for &lt;https://github.com/lxc/lxd/pull/8908&gt; which fixes a
  Leap-specific kernel backport bug (close_range(2) was backported but not the
  flags that it supported in the first version). boo#1186786
  + boo1186786-0001-forkexec-handle-broken-close_range-backport-in-openS.patch</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1625659200">- Build with go1.15 for reproducible build results (boo#1102408)</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1627732800">- Update to LXD 4.16. The full upstream changelog is available from:
  https://discuss.linuxcontainers.org/t/lxd-4-16-has-been-released/11547
  boo#1188946
  + Cluster certificate update
  + Copy/move of custom volumes between projects
  + lxc monitor --pretty now works with all event types
  + Easier revocation of cluster join tokens
  + IP filtering on unmanaged bridges
  + New warnings
  + New lifecycle events
- Remove upstreamed patches:
  + boo1186786-0001-forkexec-handle-broken-close_range-backport-in-openS.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1629460800">- Update to LXD 4.17. The full upstream changelog is available from:
  https://discuss.linuxcontainers.org/t/lxd-4-17-has-been-released/11812
  boo#1189645
  + lxd import replaced by new lxd recover
  + Cluster member evacuation
  * Reworked lxc info output
  + Requestor address in lifecycle event
  + USB GPU support in the resources API
  + Monitoring of all projects in lxc monitor
  + Alternative format options in lxc monitor</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1630843200">- Update to LXD 4.18. The full upstream changelog is available from:
  https://discuss.linuxcontainers.org/t/lxd-4-18-has-been-released/12068/2
  boo#1190323
  + Network forwards (floating IPs)
  + Native BGP support
  * NAT address customization with OVN
  * lxd cluster edit for cluster disaster recovery
  + Refresh support for custom volume copies
  + Additional device restrictions for projects
  * --minimal option for lxd init
  * Additional network counters in instance state
- Disable stripping of binaries, which seems to be causing issues at runtime
  due to some ld.so assertion failing. In particular it seems that libdqlite is
  getting corrupted somehow.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1636372800">- Update to LXD 4.20. The full upstream changelog is available from:
  https://discuss.linuxcontainers.org/t/lxd-4-20-has-been-released/12540
  boo#1192432
  + Live migration of virtual machines
  + Network peering for OVN
  + Network zones (DNS)
  + SR-IOV acceleration for OVN networking
  + Linux sysctl configuration on containers
  + Core scheduling for virtual machines
  + Cluster member configuration
  * Improvement to network leases</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1639396800">- Update to LXD 4.21. The full upstream changelog is available from:
  https://discuss.linuxcontainers.org/t/lxd-4-21-has-been-released/12860
  boo#1193649
  + Cluster member groups
  * Reworked cloud-init support
  + Trust certificate self-renewal
  + Restricted disk passthrough in projects
  + Restricted idmap uid/gid in projects
  + List all lxc commands with --sub-commands
  + List instances across all projects with --all-projects
  + New database-leader cluster role
  * Consistent units for byte sizes.
  * Routed networking in virtual machines
  + Support for ipv4.routes and ipv6.routes on routed type NICs
  + Option to skip records for NAT-ed addresses in network zones
  + Allow blocking an IP address family with security filtering options
  + New ceph.rbd.du storage config option to disable potentially slow rbd du
  * Optimized moving of instances and volumes between projects
  * Support for copying/moving custom volumes between cluster members</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1651752000">- Update to LXD 4.24. The full upstream changelog is available from:
  https://discuss.linuxcontainers.org/t/lxd-4-24-has-been-released/13550
  boo#1199215
  This is the last release before LXD 5.0 (which does not support the Leap 15.3
  kernel -- LXD 5.0 requires kernel 5.4 or newer). Thus this will be the last
  LXD release for Leap 15.3.
  + lxc file mount and new files API
  + Cluster event hub role
  * Reworked lxc storage volume info
  + AppArmor profiles for image extractors
  + Grafana dashboard
  + Degraded startup (missing disk)
  + restricted.containers.interception project option
  + core.metrics_authentication server option
  + Network interface name and MTU in virtual machines
  + I/O uring support for VM storage
  + ipv4.neighbor_probe and ipv6.neighbor_probe NIC options</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1651752001">- Update to LXD 5.1. The full upstream changelog is available from:
  https://discuss.linuxcontainers.org/t/lxd-5-1-has-been-released/13956
  boo#1199216
  + Sysinfo system call interception
  + lxc cluster role sub-command
  * lxc storage volume info shows volume total size
  + Configurable host network interface naming pattern
  * Overrideable evacuation mode
  * Setting profiles during an image copy
- Backport upstream patch to fix build on x32 systems.
  + 0001-lxd-secommp-Fix-sysinfo-syscall-interception-on-32-b.patch
- Make CRIU a Recommends so that we can still use LXD on 32-bit openSUSE.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1653825600">- Update to LXD 5.2. The full upstream changelog is available from:
  https://discuss.linuxcontainers.org/t/lxd-5-2-has-been-released/14200
  boo#1200002
  + VPD information in resources API
  * Cross-project profile copy
  * HTTP streaming support in /dev/lxd API
  * Use of server-side filtering in CLI
  * Ceph librbd for virtual machines
- Remove upstreamed patch:
  + 0001-lxd-secommp-Fix-sysinfo-syscall-interception-on-32-b.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1656331200">- Update to LXD 5.3. The full upstream changelog is available from:
  https://discuss.linuxcontainers.org/t/lxd-5-3-has-been-released/14439
  boo#1200974
  + Extended raw.qemu support
  + fscache support for cephfs storage pools</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1658059200">- Change to using systemd-sysusers</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1664193600">- Update to LXD 5.6. The full upstream changelog is available from:
  https://discuss.linuxcontainers.org/t/lxd-5-6-has-been-released/15191
  boo#1203731
  LXD 5.6:
  + Grafana Loki support
  + Object storage on local storage pools
  + Infiniband support for virtual machines
  + Restricted network access in projects
  + instance-ready lifecycle event
  + Metric for total effective CPUs
  LXD 5.5:
  + Storage buckets (on Ceph)
  + Instance Ready state
  + Configurable BGP hold time
  + All projects queries for storage volumes
  + OOM kill counter in metrics
  * Database optimization
  LXD 5.4:
  + Load-balancers (OVN)
  + Bi-directional vsock interface (VM)
  * Changes to vsock API (LXD VMs)</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1666958400">- Update to LXD 5.7. The full upstream changelog is available from:
  https://discuss.linuxcontainers.org/t/lxd-5-7-has-been-released/15432
  boo#1204852
  + ACME / Let?s Encrypt support
  + Cloud-init validation
  + Internal metrics
  + Cluster join tokens expiry
  + Proxy device hotplugging to VM</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1669118400">- Update to LXD 5.8. The full upstream changelog is available from:
  https://discuss.linuxcontainers.org/t/lxd-5-8-has-been-released/15686
  boo#1205623
  + CPU hotplug in VMs
  + Device override on init and launch
  * Record volume creation date</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1670846400">- Update to LXD 5.9. The full upstream changelog is available from:
  https://discuss.linuxcontainers.org/t/lxd-5-9-has-been-released/15907
  boo#1206296
  + Network zones project feature</changelog>
</package>
<package pkgid="2d39fec4952deaadbd98671c903a62920bfcc0775946ffb352ce008e2660167a" name="lxd" arch="x86_64">
  <version epoch="0" ver="5.9" rel="bp154.2.3.1"/>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1622548800">- Fix build on i586 by if_arch-ing out the VM support on non-x86_64 platforms.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1622548801">- fix dependencies for aarch64/armv7l</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1622980800">- Update to LXD 4.15. The full upstream changelog is available from:
  https://discuss.linuxcontainers.org/t/lxd-4-15-has-been-released/11252
  bsc#1186906
  + Network interface hotplug in VMs
  + Configurable shutdown timeout
  + New persistent warnings (time skew, apparmor and virtiofsd)
  + Location field in /dev/lxd API
  + New type and name columns in lxc config trust list
  + Cluster members acting as database stand-by now visible
  + lxc monitor --pretty now supported with lifecycle events
  + New --expire flag for lxc publish
  + Requestor now recorded in lifecyle events
  + Proxy header support on main API endpoint
  + Full swagger coverage of REST API</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1623153600">- Build lxd-agent and lxd-p2c statically to match upstream LXD build scripts
  (and to make VMs work properly -- lxd-agent is injected into the VM).
- Update lxd-rpmlintrc to match this.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1624622400">- Add backport for &lt;https://github.com/lxc/lxd/pull/8908&gt; which fixes a
  Leap-specific kernel backport bug (close_range(2) was backported but not the
  flags that it supported in the first version). boo#1186786
  + boo1186786-0001-forkexec-handle-broken-close_range-backport-in-openS.patch</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1625659200">- Build with go1.15 for reproducible build results (boo#1102408)</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1627732800">- Update to LXD 4.16. The full upstream changelog is available from:
  https://discuss.linuxcontainers.org/t/lxd-4-16-has-been-released/11547
  boo#1188946
  + Cluster certificate update
  + Copy/move of custom volumes between projects
  + lxc monitor --pretty now works with all event types
  + Easier revocation of cluster join tokens
  + IP filtering on unmanaged bridges
  + New warnings
  + New lifecycle events
- Remove upstreamed patches:
  + boo1186786-0001-forkexec-handle-broken-close_range-backport-in-openS.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1629460800">- Update to LXD 4.17. The full upstream changelog is available from:
  https://discuss.linuxcontainers.org/t/lxd-4-17-has-been-released/11812
  boo#1189645
  + lxd import replaced by new lxd recover
  + Cluster member evacuation
  * Reworked lxc info output
  + Requestor address in lifecycle event
  + USB GPU support in the resources API
  + Monitoring of all projects in lxc monitor
  + Alternative format options in lxc monitor</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1630843200">- Update to LXD 4.18. The full upstream changelog is available from:
  https://discuss.linuxcontainers.org/t/lxd-4-18-has-been-released/12068/2
  boo#1190323
  + Network forwards (floating IPs)
  + Native BGP support
  * NAT address customization with OVN
  * lxd cluster edit for cluster disaster recovery
  + Refresh support for custom volume copies
  + Additional device restrictions for projects
  * --minimal option for lxd init
  * Additional network counters in instance state
- Disable stripping of binaries, which seems to be causing issues at runtime
  due to some ld.so assertion failing. In particular it seems that libdqlite is
  getting corrupted somehow.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1636372800">- Update to LXD 4.20. The full upstream changelog is available from:
  https://discuss.linuxcontainers.org/t/lxd-4-20-has-been-released/12540
  boo#1192432
  + Live migration of virtual machines
  + Network peering for OVN
  + Network zones (DNS)
  + SR-IOV acceleration for OVN networking
  + Linux sysctl configuration on containers
  + Core scheduling for virtual machines
  + Cluster member configuration
  * Improvement to network leases</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1639396800">- Update to LXD 4.21. The full upstream changelog is available from:
  https://discuss.linuxcontainers.org/t/lxd-4-21-has-been-released/12860
  boo#1193649
  + Cluster member groups
  * Reworked cloud-init support
  + Trust certificate self-renewal
  + Restricted disk passthrough in projects
  + Restricted idmap uid/gid in projects
  + List all lxc commands with --sub-commands
  + List instances across all projects with --all-projects
  + New database-leader cluster role
  * Consistent units for byte sizes.
  * Routed networking in virtual machines
  + Support for ipv4.routes and ipv6.routes on routed type NICs
  + Option to skip records for NAT-ed addresses in network zones
  + Allow blocking an IP address family with security filtering options
  + New ceph.rbd.du storage config option to disable potentially slow rbd du
  * Optimized moving of instances and volumes between projects
  * Support for copying/moving custom volumes between cluster members</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1651752000">- Update to LXD 4.24. The full upstream changelog is available from:
  https://discuss.linuxcontainers.org/t/lxd-4-24-has-been-released/13550
  boo#1199215
  This is the last release before LXD 5.0 (which does not support the Leap 15.3
  kernel -- LXD 5.0 requires kernel 5.4 or newer). Thus this will be the last
  LXD release for Leap 15.3.
  + lxc file mount and new files API
  + Cluster event hub role
  * Reworked lxc storage volume info
  + AppArmor profiles for image extractors
  + Grafana dashboard
  + Degraded startup (missing disk)
  + restricted.containers.interception project option
  + core.metrics_authentication server option
  + Network interface name and MTU in virtual machines
  + I/O uring support for VM storage
  + ipv4.neighbor_probe and ipv6.neighbor_probe NIC options</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1651752001">- Update to LXD 5.1. The full upstream changelog is available from:
  https://discuss.linuxcontainers.org/t/lxd-5-1-has-been-released/13956
  boo#1199216
  + Sysinfo system call interception
  + lxc cluster role sub-command
  * lxc storage volume info shows volume total size
  + Configurable host network interface naming pattern
  * Overrideable evacuation mode
  * Setting profiles during an image copy
- Backport upstream patch to fix build on x32 systems.
  + 0001-lxd-secommp-Fix-sysinfo-syscall-interception-on-32-b.patch
- Make CRIU a Recommends so that we can still use LXD on 32-bit openSUSE.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1653825600">- Update to LXD 5.2. The full upstream changelog is available from:
  https://discuss.linuxcontainers.org/t/lxd-5-2-has-been-released/14200
  boo#1200002
  + VPD information in resources API
  * Cross-project profile copy
  * HTTP streaming support in /dev/lxd API
  * Use of server-side filtering in CLI
  * Ceph librbd for virtual machines
- Remove upstreamed patch:
  + 0001-lxd-secommp-Fix-sysinfo-syscall-interception-on-32-b.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1656331200">- Update to LXD 5.3. The full upstream changelog is available from:
  https://discuss.linuxcontainers.org/t/lxd-5-3-has-been-released/14439
  boo#1200974
  + Extended raw.qemu support
  + fscache support for cephfs storage pools</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1658059200">- Change to using systemd-sysusers</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1664193600">- Update to LXD 5.6. The full upstream changelog is available from:
  https://discuss.linuxcontainers.org/t/lxd-5-6-has-been-released/15191
  boo#1203731
  LXD 5.6:
  + Grafana Loki support
  + Object storage on local storage pools
  + Infiniband support for virtual machines
  + Restricted network access in projects
  + instance-ready lifecycle event
  + Metric for total effective CPUs
  LXD 5.5:
  + Storage buckets (on Ceph)
  + Instance Ready state
  + Configurable BGP hold time
  + All projects queries for storage volumes
  + OOM kill counter in metrics
  * Database optimization
  LXD 5.4:
  + Load-balancers (OVN)
  + Bi-directional vsock interface (VM)
  * Changes to vsock API (LXD VMs)</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1666958400">- Update to LXD 5.7. The full upstream changelog is available from:
  https://discuss.linuxcontainers.org/t/lxd-5-7-has-been-released/15432
  boo#1204852
  + ACME / Let?s Encrypt support
  + Cloud-init validation
  + Internal metrics
  + Cluster join tokens expiry
  + Proxy device hotplugging to VM</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1669118400">- Update to LXD 5.8. The full upstream changelog is available from:
  https://discuss.linuxcontainers.org/t/lxd-5-8-has-been-released/15686
  boo#1205623
  + CPU hotplug in VMs
  + Device override on init and launch
  * Record volume creation date</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1670846400">- Update to LXD 5.9. The full upstream changelog is available from:
  https://discuss.linuxcontainers.org/t/lxd-5-9-has-been-released/15907
  boo#1206296
  + Network zones project feature</changelog>
</package>
<package pkgid="d9ecb6d973e475785f1c2494de738445955e5633d58e4e37962e8271baa4b944" name="lxd-bash-completion" arch="noarch">
  <version epoch="0" ver="5.9" rel="bp154.2.3.1"/>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1622548800">- Fix build on i586 by if_arch-ing out the VM support on non-x86_64 platforms.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1622548801">- fix dependencies for aarch64/armv7l</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1622980800">- Update to LXD 4.15. The full upstream changelog is available from:
  https://discuss.linuxcontainers.org/t/lxd-4-15-has-been-released/11252
  bsc#1186906
  + Network interface hotplug in VMs
  + Configurable shutdown timeout
  + New persistent warnings (time skew, apparmor and virtiofsd)
  + Location field in /dev/lxd API
  + New type and name columns in lxc config trust list
  + Cluster members acting as database stand-by now visible
  + lxc monitor --pretty now supported with lifecycle events
  + New --expire flag for lxc publish
  + Requestor now recorded in lifecyle events
  + Proxy header support on main API endpoint
  + Full swagger coverage of REST API</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1623153600">- Build lxd-agent and lxd-p2c statically to match upstream LXD build scripts
  (and to make VMs work properly -- lxd-agent is injected into the VM).
- Update lxd-rpmlintrc to match this.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1624622400">- Add backport for &lt;https://github.com/lxc/lxd/pull/8908&gt; which fixes a
  Leap-specific kernel backport bug (close_range(2) was backported but not the
  flags that it supported in the first version). boo#1186786
  + boo1186786-0001-forkexec-handle-broken-close_range-backport-in-openS.patch</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1625659200">- Build with go1.15 for reproducible build results (boo#1102408)</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1627732800">- Update to LXD 4.16. The full upstream changelog is available from:
  https://discuss.linuxcontainers.org/t/lxd-4-16-has-been-released/11547
  boo#1188946
  + Cluster certificate update
  + Copy/move of custom volumes between projects
  + lxc monitor --pretty now works with all event types
  + Easier revocation of cluster join tokens
  + IP filtering on unmanaged bridges
  + New warnings
  + New lifecycle events
- Remove upstreamed patches:
  + boo1186786-0001-forkexec-handle-broken-close_range-backport-in-openS.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1629460800">- Update to LXD 4.17. The full upstream changelog is available from:
  https://discuss.linuxcontainers.org/t/lxd-4-17-has-been-released/11812
  boo#1189645
  + lxd import replaced by new lxd recover
  + Cluster member evacuation
  * Reworked lxc info output
  + Requestor address in lifecycle event
  + USB GPU support in the resources API
  + Monitoring of all projects in lxc monitor
  + Alternative format options in lxc monitor</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1630843200">- Update to LXD 4.18. The full upstream changelog is available from:
  https://discuss.linuxcontainers.org/t/lxd-4-18-has-been-released/12068/2
  boo#1190323
  + Network forwards (floating IPs)
  + Native BGP support
  * NAT address customization with OVN
  * lxd cluster edit for cluster disaster recovery
  + Refresh support for custom volume copies
  + Additional device restrictions for projects
  * --minimal option for lxd init
  * Additional network counters in instance state
- Disable stripping of binaries, which seems to be causing issues at runtime
  due to some ld.so assertion failing. In particular it seems that libdqlite is
  getting corrupted somehow.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1636372800">- Update to LXD 4.20. The full upstream changelog is available from:
  https://discuss.linuxcontainers.org/t/lxd-4-20-has-been-released/12540
  boo#1192432
  + Live migration of virtual machines
  + Network peering for OVN
  + Network zones (DNS)
  + SR-IOV acceleration for OVN networking
  + Linux sysctl configuration on containers
  + Core scheduling for virtual machines
  + Cluster member configuration
  * Improvement to network leases</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1639396800">- Update to LXD 4.21. The full upstream changelog is available from:
  https://discuss.linuxcontainers.org/t/lxd-4-21-has-been-released/12860
  boo#1193649
  + Cluster member groups
  * Reworked cloud-init support
  + Trust certificate self-renewal
  + Restricted disk passthrough in projects
  + Restricted idmap uid/gid in projects
  + List all lxc commands with --sub-commands
  + List instances across all projects with --all-projects
  + New database-leader cluster role
  * Consistent units for byte sizes.
  * Routed networking in virtual machines
  + Support for ipv4.routes and ipv6.routes on routed type NICs
  + Option to skip records for NAT-ed addresses in network zones
  + Allow blocking an IP address family with security filtering options
  + New ceph.rbd.du storage config option to disable potentially slow rbd du
  * Optimized moving of instances and volumes between projects
  * Support for copying/moving custom volumes between cluster members</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1651752000">- Update to LXD 4.24. The full upstream changelog is available from:
  https://discuss.linuxcontainers.org/t/lxd-4-24-has-been-released/13550
  boo#1199215
  This is the last release before LXD 5.0 (which does not support the Leap 15.3
  kernel -- LXD 5.0 requires kernel 5.4 or newer). Thus this will be the last
  LXD release for Leap 15.3.
  + lxc file mount and new files API
  + Cluster event hub role
  * Reworked lxc storage volume info
  + AppArmor profiles for image extractors
  + Grafana dashboard
  + Degraded startup (missing disk)
  + restricted.containers.interception project option
  + core.metrics_authentication server option
  + Network interface name and MTU in virtual machines
  + I/O uring support for VM storage
  + ipv4.neighbor_probe and ipv6.neighbor_probe NIC options</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1651752001">- Update to LXD 5.1. The full upstream changelog is available from:
  https://discuss.linuxcontainers.org/t/lxd-5-1-has-been-released/13956
  boo#1199216
  + Sysinfo system call interception
  + lxc cluster role sub-command
  * lxc storage volume info shows volume total size
  + Configurable host network interface naming pattern
  * Overrideable evacuation mode
  * Setting profiles during an image copy
- Backport upstream patch to fix build on x32 systems.
  + 0001-lxd-secommp-Fix-sysinfo-syscall-interception-on-32-b.patch
- Make CRIU a Recommends so that we can still use LXD on 32-bit openSUSE.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1653825600">- Update to LXD 5.2. The full upstream changelog is available from:
  https://discuss.linuxcontainers.org/t/lxd-5-2-has-been-released/14200
  boo#1200002
  + VPD information in resources API
  * Cross-project profile copy
  * HTTP streaming support in /dev/lxd API
  * Use of server-side filtering in CLI
  * Ceph librbd for virtual machines
- Remove upstreamed patch:
  + 0001-lxd-secommp-Fix-sysinfo-syscall-interception-on-32-b.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1656331200">- Update to LXD 5.3. The full upstream changelog is available from:
  https://discuss.linuxcontainers.org/t/lxd-5-3-has-been-released/14439
  boo#1200974
  + Extended raw.qemu support
  + fscache support for cephfs storage pools</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1658059200">- Change to using systemd-sysusers</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1664193600">- Update to LXD 5.6. The full upstream changelog is available from:
  https://discuss.linuxcontainers.org/t/lxd-5-6-has-been-released/15191
  boo#1203731
  LXD 5.6:
  + Grafana Loki support
  + Object storage on local storage pools
  + Infiniband support for virtual machines
  + Restricted network access in projects
  + instance-ready lifecycle event
  + Metric for total effective CPUs
  LXD 5.5:
  + Storage buckets (on Ceph)
  + Instance Ready state
  + Configurable BGP hold time
  + All projects queries for storage volumes
  + OOM kill counter in metrics
  * Database optimization
  LXD 5.4:
  + Load-balancers (OVN)
  + Bi-directional vsock interface (VM)
  * Changes to vsock API (LXD VMs)</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1666958400">- Update to LXD 5.7. The full upstream changelog is available from:
  https://discuss.linuxcontainers.org/t/lxd-5-7-has-been-released/15432
  boo#1204852
  + ACME / Let?s Encrypt support
  + Cloud-init validation
  + Internal metrics
  + Cluster join tokens expiry
  + Proxy device hotplugging to VM</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1669118400">- Update to LXD 5.8. The full upstream changelog is available from:
  https://discuss.linuxcontainers.org/t/lxd-5-8-has-been-released/15686
  boo#1205623
  + CPU hotplug in VMs
  + Device override on init and launch
  * Record volume creation date</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1670846400">- Update to LXD 5.9. The full upstream changelog is available from:
  https://discuss.linuxcontainers.org/t/lxd-5-9-has-been-released/15907
  boo#1206296
  + Network zones project feature</changelog>
</package>
<package pkgid="85b0c303f23ce7adcdf1ebef38342e98769e8e54c10f144579eb3d1528efdff5" name="lyx" arch="aarch64">
  <version epoch="0" ver="2.3.7" rel="bp154.3.3.1"/>
  <changelog author="Cor Blom &lt;cornelis@solcon.nl&gt;" date="1565697600">- Add Recommends: texlive-todonotes (supported since version 2.2.0)
- Add Recommends: texlive-fixme (supported since version 2.2.0)</changelog>
  <changelog author="Cor Blom &lt;cornelis@solcon.nl&gt;" date="1578830400">- Update to 2.3.4:
  * This is a maintenance release. Details can be found in the included
    ANNOUNCE file or on https://www.lyx.org/announce/2_3_4.txt
  * Most important fixes are the return of Dutch translation and
    improvements for RTL text
- update correct-shebang.patch</changelog>
  <changelog author="Cor Blom &lt;cornelis@solcon.nl&gt;" date="1581249600">- Update to 2.3.4.2, fixing four bugs:
  * lyx bug #11728: five second delay when saving files on windows
  * crash related to math toolbar
  * lyx bug #11724: bad output Beamer presentation in combination
    with certain page geometry settings
  * lyx bug #11579: CJKUtf8 not possible in ERT</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1588334400">- update to 2.3.4.4:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="Cor Blom &lt;cornelis@solcon.nl&gt;" date="1591012800">- Update to 2.3.5:
  * This is a maintenance release. Details can be found in the included
    ANNOUNCE file or on https://www.lyx.org/announce/2_3_5.txt
  * Perhaps most interesting is added support for inkscape 1.0</changelog>
  <changelog author="Cor Blom &lt;cornelis@solcon.nl&gt;" date="1591617600">- Because of some packaging errors the name of the package now has
  number 2.3.5.1, but this is actually 2.3.5 inside, numbered as
  2.3.5-1. It's a bit confusing. I decided to maintain 2.3.5 as
  version number.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1592049600">- Add remove_python_shebang.patch to get rid of all remaining
  python2 shebangs.</changelog>
  <changelog author="Cor Blom &lt;cornelis@solcon.nl&gt;" date="1592049601">- Don't use %autopatch, gives problems with patches in branched
  packages.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1593432000">- lyx 2.3.5.2:
  * fix quotation marks being reversed in moving arguments when
    hyperref is enabled</changelog>
  <changelog author="Cor Blom &lt;cornelis@solcon.nl&gt;" date="1599134400">- Place the math fonts coming with LyX in a separate package and
  install them in the system font directory. In this way fontconfig
  finds them, which is half of the fix for the diplay of math fonts
  in LyX. The other half comes with the next release</changelog>
  <changelog author="Cor Blom &lt;cornelis@solcon.nl&gt;" date="1605960000">- Add texlive-tablefootnote to recommends: The package tablefootnote
  is needed by LyX to be able to output footnotes in floating tables</changelog>
  <changelog author="Cor Blom &lt;cornelis@solcon.nl&gt;" date="1606564800">- Update to 2.3.6:
  * Small improvements and bug fixes all over the place. For
    details see included ANNOUNCE
    or https://www.lyx.org/announce/2_3_6.txt
  Some highlights:
  * On openSUSE: the correct mathfonts are now displayed
  * Added the ability to create new child documents from within the
    'include file' dialog
  * Pasting table content outside a table no longer pastes tab
    characters</changelog>
  <changelog author="Cor Blom &lt;cornelis@solcon.nl&gt;" date="1606824000">- Add  0001-Store-correctly-the-window-position-with-Wayland.patch
  to fix possible menu shifting on GNOME Wayland (see upstream bug
  https://www.lyx.org/trac/ticket/11746)</changelog>
  <changelog author="Cor Blom &lt;cornelis@solcon.nl&gt;" date="1609243200">- Update to 2.3.6.1:
- The fix for https://www.lyx.org/trac/ticket/12056, which prevented
  inclusion of TeX files
- Remove 0001-Store-correctly-the-window-position-with-Wayland.patch
  now part of release</changelog>
  <changelog author="Cor Blom &lt;cornelis@solcon.nl&gt;" date="1612699200">- Add BuildRequires: mythes-devel to build with system mythes</changelog>
  <changelog author="Cor Blom &lt;cornelis@solcon.nl&gt;" date="1612872000">- Add texlive-cprotect and texlive-doublestroke, needed to build
  the userguide from within LyX</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1622462400">- Stop owning directories provided by the filesystem package
  (boo#1184786)</changelog>
  <changelog author="Cor Blom &lt;cornelis@solcon.nl&gt;" date="1652529600">- Add lyx-2.3.6-fix-gcc12.patch to fix build with gcc-12
- Use autosetup</changelog>
  <changelog author="Cor Blom &lt;cornelis@solcon.nl&gt;" date="1670846400">- Update to 2.3.7:
  * Small improvements and bug fixes all over the place. For
    details see included ANNOUNCE
    or https://www.lyx.org/announce/2_3_7.txt
- Remove lyx-2.3.6-fix-gcc12.patch</changelog>
  <changelog author="Cor Blom &lt;cornelis@solcon.nl&gt;" date="1672660800">- Updated tarballs, still 2.3.7, although the tarballs add a -1</changelog>
</package>
<package pkgid="5c5db897ddc6f1b528f07ddc7ccbfad7a7aaa9653d21010ca96365006bb013c4" name="lyx" arch="i586">
  <version epoch="0" ver="2.3.7" rel="bp154.3.3.1"/>
  <changelog author="Cor Blom &lt;cornelis@solcon.nl&gt;" date="1565697600">- Add Recommends: texlive-todonotes (supported since version 2.2.0)
- Add Recommends: texlive-fixme (supported since version 2.2.0)</changelog>
  <changelog author="Cor Blom &lt;cornelis@solcon.nl&gt;" date="1578830400">- Update to 2.3.4:
  * This is a maintenance release. Details can be found in the included
    ANNOUNCE file or on https://www.lyx.org/announce/2_3_4.txt
  * Most important fixes are the return of Dutch translation and
    improvements for RTL text
- update correct-shebang.patch</changelog>
  <changelog author="Cor Blom &lt;cornelis@solcon.nl&gt;" date="1581249600">- Update to 2.3.4.2, fixing four bugs:
  * lyx bug #11728: five second delay when saving files on windows
  * crash related to math toolbar
  * lyx bug #11724: bad output Beamer presentation in combination
    with certain page geometry settings
  * lyx bug #11579: CJKUtf8 not possible in ERT</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1588334400">- update to 2.3.4.4:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="Cor Blom &lt;cornelis@solcon.nl&gt;" date="1591012800">- Update to 2.3.5:
  * This is a maintenance release. Details can be found in the included
    ANNOUNCE file or on https://www.lyx.org/announce/2_3_5.txt
  * Perhaps most interesting is added support for inkscape 1.0</changelog>
  <changelog author="Cor Blom &lt;cornelis@solcon.nl&gt;" date="1591617600">- Because of some packaging errors the name of the package now has
  number 2.3.5.1, but this is actually 2.3.5 inside, numbered as
  2.3.5-1. It's a bit confusing. I decided to maintain 2.3.5 as
  version number.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1592049600">- Add remove_python_shebang.patch to get rid of all remaining
  python2 shebangs.</changelog>
  <changelog author="Cor Blom &lt;cornelis@solcon.nl&gt;" date="1592049601">- Don't use %autopatch, gives problems with patches in branched
  packages.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1593432000">- lyx 2.3.5.2:
  * fix quotation marks being reversed in moving arguments when
    hyperref is enabled</changelog>
  <changelog author="Cor Blom &lt;cornelis@solcon.nl&gt;" date="1599134400">- Place the math fonts coming with LyX in a separate package and
  install them in the system font directory. In this way fontconfig
  finds them, which is half of the fix for the diplay of math fonts
  in LyX. The other half comes with the next release</changelog>
  <changelog author="Cor Blom &lt;cornelis@solcon.nl&gt;" date="1605960000">- Add texlive-tablefootnote to recommends: The package tablefootnote
  is needed by LyX to be able to output footnotes in floating tables</changelog>
  <changelog author="Cor Blom &lt;cornelis@solcon.nl&gt;" date="1606564800">- Update to 2.3.6:
  * Small improvements and bug fixes all over the place. For
    details see included ANNOUNCE
    or https://www.lyx.org/announce/2_3_6.txt
  Some highlights:
  * On openSUSE: the correct mathfonts are now displayed
  * Added the ability to create new child documents from within the
    'include file' dialog
  * Pasting table content outside a table no longer pastes tab
    characters</changelog>
  <changelog author="Cor Blom &lt;cornelis@solcon.nl&gt;" date="1606824000">- Add  0001-Store-correctly-the-window-position-with-Wayland.patch
  to fix possible menu shifting on GNOME Wayland (see upstream bug
  https://www.lyx.org/trac/ticket/11746)</changelog>
  <changelog author="Cor Blom &lt;cornelis@solcon.nl&gt;" date="1609243200">- Update to 2.3.6.1:
- The fix for https://www.lyx.org/trac/ticket/12056, which prevented
  inclusion of TeX files
- Remove 0001-Store-correctly-the-window-position-with-Wayland.patch
  now part of release</changelog>
  <changelog author="Cor Blom &lt;cornelis@solcon.nl&gt;" date="1612699200">- Add BuildRequires: mythes-devel to build with system mythes</changelog>
  <changelog author="Cor Blom &lt;cornelis@solcon.nl&gt;" date="1612872000">- Add texlive-cprotect and texlive-doublestroke, needed to build
  the userguide from within LyX</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1622462400">- Stop owning directories provided by the filesystem package
  (boo#1184786)</changelog>
  <changelog author="Cor Blom &lt;cornelis@solcon.nl&gt;" date="1652529600">- Add lyx-2.3.6-fix-gcc12.patch to fix build with gcc-12
- Use autosetup</changelog>
  <changelog author="Cor Blom &lt;cornelis@solcon.nl&gt;" date="1670846400">- Update to 2.3.7:
  * Small improvements and bug fixes all over the place. For
    details see included ANNOUNCE
    or https://www.lyx.org/announce/2_3_7.txt
- Remove lyx-2.3.6-fix-gcc12.patch</changelog>
  <changelog author="Cor Blom &lt;cornelis@solcon.nl&gt;" date="1672660800">- Updated tarballs, still 2.3.7, although the tarballs add a -1</changelog>
</package>
<package pkgid="d4ded307b06f073e5abd4004e491a345189a878da1c657e357060a7fb80ac5af" name="lyx" arch="ppc64le">
  <version epoch="0" ver="2.3.7" rel="bp154.3.3.1"/>
  <changelog author="Cor Blom &lt;cornelis@solcon.nl&gt;" date="1565697600">- Add Recommends: texlive-todonotes (supported since version 2.2.0)
- Add Recommends: texlive-fixme (supported since version 2.2.0)</changelog>
  <changelog author="Cor Blom &lt;cornelis@solcon.nl&gt;" date="1578830400">- Update to 2.3.4:
  * This is a maintenance release. Details can be found in the included
    ANNOUNCE file or on https://www.lyx.org/announce/2_3_4.txt
  * Most important fixes are the return of Dutch translation and
    improvements for RTL text
- update correct-shebang.patch</changelog>
  <changelog author="Cor Blom &lt;cornelis@solcon.nl&gt;" date="1581249600">- Update to 2.3.4.2, fixing four bugs:
  * lyx bug #11728: five second delay when saving files on windows
  * crash related to math toolbar
  * lyx bug #11724: bad output Beamer presentation in combination
    with certain page geometry settings
  * lyx bug #11579: CJKUtf8 not possible in ERT</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1588334400">- update to 2.3.4.4:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="Cor Blom &lt;cornelis@solcon.nl&gt;" date="1591012800">- Update to 2.3.5:
  * This is a maintenance release. Details can be found in the included
    ANNOUNCE file or on https://www.lyx.org/announce/2_3_5.txt
  * Perhaps most interesting is added support for inkscape 1.0</changelog>
  <changelog author="Cor Blom &lt;cornelis@solcon.nl&gt;" date="1591617600">- Because of some packaging errors the name of the package now has
  number 2.3.5.1, but this is actually 2.3.5 inside, numbered as
  2.3.5-1. It's a bit confusing. I decided to maintain 2.3.5 as
  version number.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1592049600">- Add remove_python_shebang.patch to get rid of all remaining
  python2 shebangs.</changelog>
  <changelog author="Cor Blom &lt;cornelis@solcon.nl&gt;" date="1592049601">- Don't use %autopatch, gives problems with patches in branched
  packages.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1593432000">- lyx 2.3.5.2:
  * fix quotation marks being reversed in moving arguments when
    hyperref is enabled</changelog>
  <changelog author="Cor Blom &lt;cornelis@solcon.nl&gt;" date="1599134400">- Place the math fonts coming with LyX in a separate package and
  install them in the system font directory. In this way fontconfig
  finds them, which is half of the fix for the diplay of math fonts
  in LyX. The other half comes with the next release</changelog>
  <changelog author="Cor Blom &lt;cornelis@solcon.nl&gt;" date="1605960000">- Add texlive-tablefootnote to recommends: The package tablefootnote
  is needed by LyX to be able to output footnotes in floating tables</changelog>
  <changelog author="Cor Blom &lt;cornelis@solcon.nl&gt;" date="1606564800">- Update to 2.3.6:
  * Small improvements and bug fixes all over the place. For
    details see included ANNOUNCE
    or https://www.lyx.org/announce/2_3_6.txt
  Some highlights:
  * On openSUSE: the correct mathfonts are now displayed
  * Added the ability to create new child documents from within the
    'include file' dialog
  * Pasting table content outside a table no longer pastes tab
    characters</changelog>
  <changelog author="Cor Blom &lt;cornelis@solcon.nl&gt;" date="1606824000">- Add  0001-Store-correctly-the-window-position-with-Wayland.patch
  to fix possible menu shifting on GNOME Wayland (see upstream bug
  https://www.lyx.org/trac/ticket/11746)</changelog>
  <changelog author="Cor Blom &lt;cornelis@solcon.nl&gt;" date="1609243200">- Update to 2.3.6.1:
- The fix for https://www.lyx.org/trac/ticket/12056, which prevented
  inclusion of TeX files
- Remove 0001-Store-correctly-the-window-position-with-Wayland.patch
  now part of release</changelog>
  <changelog author="Cor Blom &lt;cornelis@solcon.nl&gt;" date="1612699200">- Add BuildRequires: mythes-devel to build with system mythes</changelog>
  <changelog author="Cor Blom &lt;cornelis@solcon.nl&gt;" date="1612872000">- Add texlive-cprotect and texlive-doublestroke, needed to build
  the userguide from within LyX</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1622462400">- Stop owning directories provided by the filesystem package
  (boo#1184786)</changelog>
  <changelog author="Cor Blom &lt;cornelis@solcon.nl&gt;" date="1652529600">- Add lyx-2.3.6-fix-gcc12.patch to fix build with gcc-12
- Use autosetup</changelog>
  <changelog author="Cor Blom &lt;cornelis@solcon.nl&gt;" date="1670846400">- Update to 2.3.7:
  * Small improvements and bug fixes all over the place. For
    details see included ANNOUNCE
    or https://www.lyx.org/announce/2_3_7.txt
- Remove lyx-2.3.6-fix-gcc12.patch</changelog>
  <changelog author="Cor Blom &lt;cornelis@solcon.nl&gt;" date="1672660800">- Updated tarballs, still 2.3.7, although the tarballs add a -1</changelog>
</package>
<package pkgid="6b0f64abf9a9801e4eeaa1999b61d47649c0a55f22499adb73d73a9ab6d948d0" name="lyx" arch="s390x">
  <version epoch="0" ver="2.3.7" rel="bp154.3.3.1"/>
  <changelog author="Cor Blom &lt;cornelis@solcon.nl&gt;" date="1565697600">- Add Recommends: texlive-todonotes (supported since version 2.2.0)
- Add Recommends: texlive-fixme (supported since version 2.2.0)</changelog>
  <changelog author="Cor Blom &lt;cornelis@solcon.nl&gt;" date="1578830400">- Update to 2.3.4:
  * This is a maintenance release. Details can be found in the included
    ANNOUNCE file or on https://www.lyx.org/announce/2_3_4.txt
  * Most important fixes are the return of Dutch translation and
    improvements for RTL text
- update correct-shebang.patch</changelog>
  <changelog author="Cor Blom &lt;cornelis@solcon.nl&gt;" date="1581249600">- Update to 2.3.4.2, fixing four bugs:
  * lyx bug #11728: five second delay when saving files on windows
  * crash related to math toolbar
  * lyx bug #11724: bad output Beamer presentation in combination
    with certain page geometry settings
  * lyx bug #11579: CJKUtf8 not possible in ERT</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1588334400">- update to 2.3.4.4:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="Cor Blom &lt;cornelis@solcon.nl&gt;" date="1591012800">- Update to 2.3.5:
  * This is a maintenance release. Details can be found in the included
    ANNOUNCE file or on https://www.lyx.org/announce/2_3_5.txt
  * Perhaps most interesting is added support for inkscape 1.0</changelog>
  <changelog author="Cor Blom &lt;cornelis@solcon.nl&gt;" date="1591617600">- Because of some packaging errors the name of the package now has
  number 2.3.5.1, but this is actually 2.3.5 inside, numbered as
  2.3.5-1. It's a bit confusing. I decided to maintain 2.3.5 as
  version number.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1592049600">- Add remove_python_shebang.patch to get rid of all remaining
  python2 shebangs.</changelog>
  <changelog author="Cor Blom &lt;cornelis@solcon.nl&gt;" date="1592049601">- Don't use %autopatch, gives problems with patches in branched
  packages.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1593432000">- lyx 2.3.5.2:
  * fix quotation marks being reversed in moving arguments when
    hyperref is enabled</changelog>
  <changelog author="Cor Blom &lt;cornelis@solcon.nl&gt;" date="1599134400">- Place the math fonts coming with LyX in a separate package and
  install them in the system font directory. In this way fontconfig
  finds them, which is half of the fix for the diplay of math fonts
  in LyX. The other half comes with the next release</changelog>
  <changelog author="Cor Blom &lt;cornelis@solcon.nl&gt;" date="1605960000">- Add texlive-tablefootnote to recommends: The package tablefootnote
  is needed by LyX to be able to output footnotes in floating tables</changelog>
  <changelog author="Cor Blom &lt;cornelis@solcon.nl&gt;" date="1606564800">- Update to 2.3.6:
  * Small improvements and bug fixes all over the place. For
    details see included ANNOUNCE
    or https://www.lyx.org/announce/2_3_6.txt
  Some highlights:
  * On openSUSE: the correct mathfonts are now displayed
  * Added the ability to create new child documents from within the
    'include file' dialog
  * Pasting table content outside a table no longer pastes tab
    characters</changelog>
  <changelog author="Cor Blom &lt;cornelis@solcon.nl&gt;" date="1606824000">- Add  0001-Store-correctly-the-window-position-with-Wayland.patch
  to fix possible menu shifting on GNOME Wayland (see upstream bug
  https://www.lyx.org/trac/ticket/11746)</changelog>
  <changelog author="Cor Blom &lt;cornelis@solcon.nl&gt;" date="1609243200">- Update to 2.3.6.1:
- The fix for https://www.lyx.org/trac/ticket/12056, which prevented
  inclusion of TeX files
- Remove 0001-Store-correctly-the-window-position-with-Wayland.patch
  now part of release</changelog>
  <changelog author="Cor Blom &lt;cornelis@solcon.nl&gt;" date="1612699200">- Add BuildRequires: mythes-devel to build with system mythes</changelog>
  <changelog author="Cor Blom &lt;cornelis@solcon.nl&gt;" date="1612872000">- Add texlive-cprotect and texlive-doublestroke, needed to build
  the userguide from within LyX</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1622462400">- Stop owning directories provided by the filesystem package
  (boo#1184786)</changelog>
  <changelog author="Cor Blom &lt;cornelis@solcon.nl&gt;" date="1652529600">- Add lyx-2.3.6-fix-gcc12.patch to fix build with gcc-12
- Use autosetup</changelog>
  <changelog author="Cor Blom &lt;cornelis@solcon.nl&gt;" date="1670846400">- Update to 2.3.7:
  * Small improvements and bug fixes all over the place. For
    details see included ANNOUNCE
    or https://www.lyx.org/announce/2_3_7.txt
- Remove lyx-2.3.6-fix-gcc12.patch</changelog>
  <changelog author="Cor Blom &lt;cornelis@solcon.nl&gt;" date="1672660800">- Updated tarballs, still 2.3.7, although the tarballs add a -1</changelog>
</package>
<package pkgid="394772c2f24b57cc261a03472bc4f759feb7c71c731e00c1c767fa122188bedb" name="lyx" arch="src">
  <version epoch="0" ver="2.3.7" rel="bp154.3.3.1"/>
  <changelog author="Cor Blom &lt;cornelis@solcon.nl&gt;" date="1565697600">- Add Recommends: texlive-todonotes (supported since version 2.2.0)
- Add Recommends: texlive-fixme (supported since version 2.2.0)</changelog>
  <changelog author="Cor Blom &lt;cornelis@solcon.nl&gt;" date="1578830400">- Update to 2.3.4:
  * This is a maintenance release. Details can be found in the included
    ANNOUNCE file or on https://www.lyx.org/announce/2_3_4.txt
  * Most important fixes are the return of Dutch translation and
    improvements for RTL text
- update correct-shebang.patch</changelog>
  <changelog author="Cor Blom &lt;cornelis@solcon.nl&gt;" date="1581249600">- Update to 2.3.4.2, fixing four bugs:
  * lyx bug #11728: five second delay when saving files on windows
  * crash related to math toolbar
  * lyx bug #11724: bad output Beamer presentation in combination
    with certain page geometry settings
  * lyx bug #11579: CJKUtf8 not possible in ERT</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1588334400">- update to 2.3.4.4:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="Cor Blom &lt;cornelis@solcon.nl&gt;" date="1591012800">- Update to 2.3.5:
  * This is a maintenance release. Details can be found in the included
    ANNOUNCE file or on https://www.lyx.org/announce/2_3_5.txt
  * Perhaps most interesting is added support for inkscape 1.0</changelog>
  <changelog author="Cor Blom &lt;cornelis@solcon.nl&gt;" date="1591617600">- Because of some packaging errors the name of the package now has
  number 2.3.5.1, but this is actually 2.3.5 inside, numbered as
  2.3.5-1. It's a bit confusing. I decided to maintain 2.3.5 as
  version number.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1592049600">- Add remove_python_shebang.patch to get rid of all remaining
  python2 shebangs.</changelog>
  <changelog author="Cor Blom &lt;cornelis@solcon.nl&gt;" date="1592049601">- Don't use %autopatch, gives problems with patches in branched
  packages.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1593432000">- lyx 2.3.5.2:
  * fix quotation marks being reversed in moving arguments when
    hyperref is enabled</changelog>
  <changelog author="Cor Blom &lt;cornelis@solcon.nl&gt;" date="1599134400">- Place the math fonts coming with LyX in a separate package and
  install them in the system font directory. In this way fontconfig
  finds them, which is half of the fix for the diplay of math fonts
  in LyX. The other half comes with the next release</changelog>
  <changelog author="Cor Blom &lt;cornelis@solcon.nl&gt;" date="1605960000">- Add texlive-tablefootnote to recommends: The package tablefootnote
  is needed by LyX to be able to output footnotes in floating tables</changelog>
  <changelog author="Cor Blom &lt;cornelis@solcon.nl&gt;" date="1606564800">- Update to 2.3.6:
  * Small improvements and bug fixes all over the place. For
    details see included ANNOUNCE
    or https://www.lyx.org/announce/2_3_6.txt
  Some highlights:
  * On openSUSE: the correct mathfonts are now displayed
  * Added the ability to create new child documents from within the
    'include file' dialog
  * Pasting table content outside a table no longer pastes tab
    characters</changelog>
  <changelog author="Cor Blom &lt;cornelis@solcon.nl&gt;" date="1606824000">- Add  0001-Store-correctly-the-window-position-with-Wayland.patch
  to fix possible menu shifting on GNOME Wayland (see upstream bug
  https://www.lyx.org/trac/ticket/11746)</changelog>
  <changelog author="Cor Blom &lt;cornelis@solcon.nl&gt;" date="1609243200">- Update to 2.3.6.1:
- The fix for https://www.lyx.org/trac/ticket/12056, which prevented
  inclusion of TeX files
- Remove 0001-Store-correctly-the-window-position-with-Wayland.patch
  now part of release</changelog>
  <changelog author="Cor Blom &lt;cornelis@solcon.nl&gt;" date="1612699200">- Add BuildRequires: mythes-devel to build with system mythes</changelog>
  <changelog author="Cor Blom &lt;cornelis@solcon.nl&gt;" date="1612872000">- Add texlive-cprotect and texlive-doublestroke, needed to build
  the userguide from within LyX</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1622462400">- Stop owning directories provided by the filesystem package
  (boo#1184786)</changelog>
  <changelog author="Cor Blom &lt;cornelis@solcon.nl&gt;" date="1652529600">- Add lyx-2.3.6-fix-gcc12.patch to fix build with gcc-12
- Use autosetup</changelog>
  <changelog author="Cor Blom &lt;cornelis@solcon.nl&gt;" date="1670846400">- Update to 2.3.7:
  * Small improvements and bug fixes all over the place. For
    details see included ANNOUNCE
    or https://www.lyx.org/announce/2_3_7.txt
- Remove lyx-2.3.6-fix-gcc12.patch</changelog>
  <changelog author="Cor Blom &lt;cornelis@solcon.nl&gt;" date="1672660800">- Updated tarballs, still 2.3.7, although the tarballs add a -1</changelog>
</package>
<package pkgid="b0dfe74cfea70cf597fd07df48462125ec793495cf26bd17115c48daf282a80b" name="lyx" arch="x86_64">
  <version epoch="0" ver="2.3.7" rel="bp154.3.3.1"/>
  <changelog author="Cor Blom &lt;cornelis@solcon.nl&gt;" date="1565697600">- Add Recommends: texlive-todonotes (supported since version 2.2.0)
- Add Recommends: texlive-fixme (supported since version 2.2.0)</changelog>
  <changelog author="Cor Blom &lt;cornelis@solcon.nl&gt;" date="1578830400">- Update to 2.3.4:
  * This is a maintenance release. Details can be found in the included
    ANNOUNCE file or on https://www.lyx.org/announce/2_3_4.txt
  * Most important fixes are the return of Dutch translation and
    improvements for RTL text
- update correct-shebang.patch</changelog>
  <changelog author="Cor Blom &lt;cornelis@solcon.nl&gt;" date="1581249600">- Update to 2.3.4.2, fixing four bugs:
  * lyx bug #11728: five second delay when saving files on windows
  * crash related to math toolbar
  * lyx bug #11724: bad output Beamer presentation in combination
    with certain page geometry settings
  * lyx bug #11579: CJKUtf8 not possible in ERT</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1588334400">- update to 2.3.4.4:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="Cor Blom &lt;cornelis@solcon.nl&gt;" date="1591012800">- Update to 2.3.5:
  * This is a maintenance release. Details can be found in the included
    ANNOUNCE file or on https://www.lyx.org/announce/2_3_5.txt
  * Perhaps most interesting is added support for inkscape 1.0</changelog>
  <changelog author="Cor Blom &lt;cornelis@solcon.nl&gt;" date="1591617600">- Because of some packaging errors the name of the package now has
  number 2.3.5.1, but this is actually 2.3.5 inside, numbered as
  2.3.5-1. It's a bit confusing. I decided to maintain 2.3.5 as
  version number.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1592049600">- Add remove_python_shebang.patch to get rid of all remaining
  python2 shebangs.</changelog>
  <changelog author="Cor Blom &lt;cornelis@solcon.nl&gt;" date="1592049601">- Don't use %autopatch, gives problems with patches in branched
  packages.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1593432000">- lyx 2.3.5.2:
  * fix quotation marks being reversed in moving arguments when
    hyperref is enabled</changelog>
  <changelog author="Cor Blom &lt;cornelis@solcon.nl&gt;" date="1599134400">- Place the math fonts coming with LyX in a separate package and
  install them in the system font directory. In this way fontconfig
  finds them, which is half of the fix for the diplay of math fonts
  in LyX. The other half comes with the next release</changelog>
  <changelog author="Cor Blom &lt;cornelis@solcon.nl&gt;" date="1605960000">- Add texlive-tablefootnote to recommends: The package tablefootnote
  is needed by LyX to be able to output footnotes in floating tables</changelog>
  <changelog author="Cor Blom &lt;cornelis@solcon.nl&gt;" date="1606564800">- Update to 2.3.6:
  * Small improvements and bug fixes all over the place. For
    details see included ANNOUNCE
    or https://www.lyx.org/announce/2_3_6.txt
  Some highlights:
  * On openSUSE: the correct mathfonts are now displayed
  * Added the ability to create new child documents from within the
    'include file' dialog
  * Pasting table content outside a table no longer pastes tab
    characters</changelog>
  <changelog author="Cor Blom &lt;cornelis@solcon.nl&gt;" date="1606824000">- Add  0001-Store-correctly-the-window-position-with-Wayland.patch
  to fix possible menu shifting on GNOME Wayland (see upstream bug
  https://www.lyx.org/trac/ticket/11746)</changelog>
  <changelog author="Cor Blom &lt;cornelis@solcon.nl&gt;" date="1609243200">- Update to 2.3.6.1:
- The fix for https://www.lyx.org/trac/ticket/12056, which prevented
  inclusion of TeX files
- Remove 0001-Store-correctly-the-window-position-with-Wayland.patch
  now part of release</changelog>
  <changelog author="Cor Blom &lt;cornelis@solcon.nl&gt;" date="1612699200">- Add BuildRequires: mythes-devel to build with system mythes</changelog>
  <changelog author="Cor Blom &lt;cornelis@solcon.nl&gt;" date="1612872000">- Add texlive-cprotect and texlive-doublestroke, needed to build
  the userguide from within LyX</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1622462400">- Stop owning directories provided by the filesystem package
  (boo#1184786)</changelog>
  <changelog author="Cor Blom &lt;cornelis@solcon.nl&gt;" date="1652529600">- Add lyx-2.3.6-fix-gcc12.patch to fix build with gcc-12
- Use autosetup</changelog>
  <changelog author="Cor Blom &lt;cornelis@solcon.nl&gt;" date="1670846400">- Update to 2.3.7:
  * Small improvements and bug fixes all over the place. For
    details see included ANNOUNCE
    or https://www.lyx.org/announce/2_3_7.txt
- Remove lyx-2.3.6-fix-gcc12.patch</changelog>
  <changelog author="Cor Blom &lt;cornelis@solcon.nl&gt;" date="1672660800">- Updated tarballs, still 2.3.7, although the tarballs add a -1</changelog>
</package>
<package pkgid="2f18ba163baef9816888e67e7072a93804c7b949fb5113cefbfdf049c951ad12" name="lyx-fonts" arch="noarch">
  <version epoch="0" ver="2.3.7" rel="bp154.3.3.1"/>
  <changelog author="Cor Blom &lt;cornelis@solcon.nl&gt;" date="1565697600">- Add Recommends: texlive-todonotes (supported since version 2.2.0)
- Add Recommends: texlive-fixme (supported since version 2.2.0)</changelog>
  <changelog author="Cor Blom &lt;cornelis@solcon.nl&gt;" date="1578830400">- Update to 2.3.4:
  * This is a maintenance release. Details can be found in the included
    ANNOUNCE file or on https://www.lyx.org/announce/2_3_4.txt
  * Most important fixes are the return of Dutch translation and
    improvements for RTL text
- update correct-shebang.patch</changelog>
  <changelog author="Cor Blom &lt;cornelis@solcon.nl&gt;" date="1581249600">- Update to 2.3.4.2, fixing four bugs:
  * lyx bug #11728: five second delay when saving files on windows
  * crash related to math toolbar
  * lyx bug #11724: bad output Beamer presentation in combination
    with certain page geometry settings
  * lyx bug #11579: CJKUtf8 not possible in ERT</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1588334400">- update to 2.3.4.4:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="Cor Blom &lt;cornelis@solcon.nl&gt;" date="1591012800">- Update to 2.3.5:
  * This is a maintenance release. Details can be found in the included
    ANNOUNCE file or on https://www.lyx.org/announce/2_3_5.txt
  * Perhaps most interesting is added support for inkscape 1.0</changelog>
  <changelog author="Cor Blom &lt;cornelis@solcon.nl&gt;" date="1591617600">- Because of some packaging errors the name of the package now has
  number 2.3.5.1, but this is actually 2.3.5 inside, numbered as
  2.3.5-1. It's a bit confusing. I decided to maintain 2.3.5 as
  version number.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1592049600">- Add remove_python_shebang.patch to get rid of all remaining
  python2 shebangs.</changelog>
  <changelog author="Cor Blom &lt;cornelis@solcon.nl&gt;" date="1592049601">- Don't use %autopatch, gives problems with patches in branched
  packages.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1593432000">- lyx 2.3.5.2:
  * fix quotation marks being reversed in moving arguments when
    hyperref is enabled</changelog>
  <changelog author="Cor Blom &lt;cornelis@solcon.nl&gt;" date="1599134400">- Place the math fonts coming with LyX in a separate package and
  install them in the system font directory. In this way fontconfig
  finds them, which is half of the fix for the diplay of math fonts
  in LyX. The other half comes with the next release</changelog>
  <changelog author="Cor Blom &lt;cornelis@solcon.nl&gt;" date="1605960000">- Add texlive-tablefootnote to recommends: The package tablefootnote
  is needed by LyX to be able to output footnotes in floating tables</changelog>
  <changelog author="Cor Blom &lt;cornelis@solcon.nl&gt;" date="1606564800">- Update to 2.3.6:
  * Small improvements and bug fixes all over the place. For
    details see included ANNOUNCE
    or https://www.lyx.org/announce/2_3_6.txt
  Some highlights:
  * On openSUSE: the correct mathfonts are now displayed
  * Added the ability to create new child documents from within the
    'include file' dialog
  * Pasting table content outside a table no longer pastes tab
    characters</changelog>
  <changelog author="Cor Blom &lt;cornelis@solcon.nl&gt;" date="1606824000">- Add  0001-Store-correctly-the-window-position-with-Wayland.patch
  to fix possible menu shifting on GNOME Wayland (see upstream bug
  https://www.lyx.org/trac/ticket/11746)</changelog>
  <changelog author="Cor Blom &lt;cornelis@solcon.nl&gt;" date="1609243200">- Update to 2.3.6.1:
- The fix for https://www.lyx.org/trac/ticket/12056, which prevented
  inclusion of TeX files
- Remove 0001-Store-correctly-the-window-position-with-Wayland.patch
  now part of release</changelog>
  <changelog author="Cor Blom &lt;cornelis@solcon.nl&gt;" date="1612699200">- Add BuildRequires: mythes-devel to build with system mythes</changelog>
  <changelog author="Cor Blom &lt;cornelis@solcon.nl&gt;" date="1612872000">- Add texlive-cprotect and texlive-doublestroke, needed to build
  the userguide from within LyX</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1622462400">- Stop owning directories provided by the filesystem package
  (boo#1184786)</changelog>
  <changelog author="Cor Blom &lt;cornelis@solcon.nl&gt;" date="1652529600">- Add lyx-2.3.6-fix-gcc12.patch to fix build with gcc-12
- Use autosetup</changelog>
  <changelog author="Cor Blom &lt;cornelis@solcon.nl&gt;" date="1670846400">- Update to 2.3.7:
  * Small improvements and bug fixes all over the place. For
    details see included ANNOUNCE
    or https://www.lyx.org/announce/2_3_7.txt
- Remove lyx-2.3.6-fix-gcc12.patch</changelog>
  <changelog author="Cor Blom &lt;cornelis@solcon.nl&gt;" date="1672660800">- Updated tarballs, still 2.3.7, although the tarballs add a -1</changelog>
</package>
<package pkgid="9ed8e449efe34f6fdf8600acea33c32e17f7d04dfc1e64d546f4aef0f952efae" name="man-pages-cs" arch="noarch">
  <version epoch="0" ver="4.15.0" rel="bp154.2.3.1"/>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1593604800">- Initial version: manpages-l10n 4.1.0 (boo#1173602).</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1602763200">- Update to version 4.2.0:
  * Updated and added many translations.
  * Still skip Italian and Spanish, will be included in the next
    or any future release.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1611403200">- Update to version 4.9.0~pre1:
  * Updated and added many translations.
  * Enable Italian, Spanish and Macedonian.
  * Still skip Czech, it's in a very early state.
- Cosmetic changes in comments and in the distribution_id macro.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1611489600">- Simplify macro definitions.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1612612800">- Update to version 4.9.1:
  * Updated and added many translations.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1612958400">- Update to version 4.9.2:
  * Remove man pages of procps/procps-ng, now maintained upstream;
    only Debian Buster keeps the files for possible backports
    (boo#1182517).
  * Updated and added many translations.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1615291200">- Update to version 4.9.3:
  * Final release for Debian Bullseye.
  * Updated many translations.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1618315200">- Update to version 4.9.3+406:
  * Add support for openSUSE Leap 15.3.
  * Enable Czech and Danish.
  * Updated many translations.
- Update distribution_id macro to handle openSUSE Leap 15.3.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1623585600">- Update to version 4.10.0: Updated many translations.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1631620800">- Update to version 4.11.0:
  * Enable Hungarian translation.
  * Updated and added many translations.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1639915200">- Update to version 4.12.1:
  * Bugfix: Enable new languages in po/Makefile.am.
- Changes from version 4.12.0:
  * New languages: Finnish, Greek, Indonesian, Norwegian bokmål,
    Swedish, Serbian.
  * Persian (fa) is in a very early state; still disabled.
  * Updated and added many translations.
- Upgrade macros: Build for Leap has been upgraded to 15.4 - build
  for 15.3 has been dropped upstream.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1645358400">- Update to version 4.13:
  * New language: Vietnamese.
  * New distribution: Fedora 36.
  * Fix addendum creation for mdoc based files.
  * Updated many translations.
- Drop update path from Leap 15.2 since it has reached EOL.
- Update license to GPL-3.0-or-later as per Debian packaging.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1645876800">- Update to version 4.13+56:
  * Remove files with non-commercial licenses from sources.
  * Improve appearance and readability of the addendum.
  * Updated translations.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1651665600">- Update to version 4.14.0:
  * New language: Ukrainian.
  * Updated many translations.
- Remove unused argument in %man_lang_package macro definition.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1660046400">- Update to version 4.15.0: Updated many translations.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1660132800">- Remove ethers.5 German translation already provided by net-tools
  (https://salsa.debian.org/manpages-l10n-team/manpages-l10n/-/issues/8).</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1660132801">- Don't fail build if ethers.5 is not installed (typically on Leap
  15.4 for which net-tools translation is not enabled in
  manpages-l10n).</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1661515200">- Add manpages-l10n-4.15.0-fix-links.patch: Fix incorrect links in
  man2 (boo#1202798).</changelog>
</package>
<package pkgid="0daf861051a7613b5920b746749dd5cefb803ab33f346429bd0baa833eb84b3e" name="man-pages-da" arch="noarch">
  <version epoch="0" ver="4.15.0" rel="bp154.2.3.1"/>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1593604800">- Initial version: manpages-l10n 4.1.0 (boo#1173602).</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1602763200">- Update to version 4.2.0:
  * Updated and added many translations.
  * Still skip Italian and Spanish, will be included in the next
    or any future release.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1611403200">- Update to version 4.9.0~pre1:
  * Updated and added many translations.
  * Enable Italian, Spanish and Macedonian.
  * Still skip Czech, it's in a very early state.
- Cosmetic changes in comments and in the distribution_id macro.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1611489600">- Simplify macro definitions.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1612612800">- Update to version 4.9.1:
  * Updated and added many translations.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1612958400">- Update to version 4.9.2:
  * Remove man pages of procps/procps-ng, now maintained upstream;
    only Debian Buster keeps the files for possible backports
    (boo#1182517).
  * Updated and added many translations.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1615291200">- Update to version 4.9.3:
  * Final release for Debian Bullseye.
  * Updated many translations.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1618315200">- Update to version 4.9.3+406:
  * Add support for openSUSE Leap 15.3.
  * Enable Czech and Danish.
  * Updated many translations.
- Update distribution_id macro to handle openSUSE Leap 15.3.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1623585600">- Update to version 4.10.0: Updated many translations.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1631620800">- Update to version 4.11.0:
  * Enable Hungarian translation.
  * Updated and added many translations.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1639915200">- Update to version 4.12.1:
  * Bugfix: Enable new languages in po/Makefile.am.
- Changes from version 4.12.0:
  * New languages: Finnish, Greek, Indonesian, Norwegian bokmål,
    Swedish, Serbian.
  * Persian (fa) is in a very early state; still disabled.
  * Updated and added many translations.
- Upgrade macros: Build for Leap has been upgraded to 15.4 - build
  for 15.3 has been dropped upstream.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1645358400">- Update to version 4.13:
  * New language: Vietnamese.
  * New distribution: Fedora 36.
  * Fix addendum creation for mdoc based files.
  * Updated many translations.
- Drop update path from Leap 15.2 since it has reached EOL.
- Update license to GPL-3.0-or-later as per Debian packaging.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1645876800">- Update to version 4.13+56:
  * Remove files with non-commercial licenses from sources.
  * Improve appearance and readability of the addendum.
  * Updated translations.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1651665600">- Update to version 4.14.0:
  * New language: Ukrainian.
  * Updated many translations.
- Remove unused argument in %man_lang_package macro definition.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1660046400">- Update to version 4.15.0: Updated many translations.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1660132800">- Remove ethers.5 German translation already provided by net-tools
  (https://salsa.debian.org/manpages-l10n-team/manpages-l10n/-/issues/8).</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1660132801">- Don't fail build if ethers.5 is not installed (typically on Leap
  15.4 for which net-tools translation is not enabled in
  manpages-l10n).</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1661515200">- Add manpages-l10n-4.15.0-fix-links.patch: Fix incorrect links in
  man2 (boo#1202798).</changelog>
</package>
<package pkgid="d907f54c2cb56872139f39c6a8b72309dd8af76d8d2148d2591031ab4f79f72e" name="man-pages-de" arch="noarch">
  <version epoch="0" ver="4.15.0" rel="bp154.2.3.1"/>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1593604800">- Initial version: manpages-l10n 4.1.0 (boo#1173602).</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1602763200">- Update to version 4.2.0:
  * Updated and added many translations.
  * Still skip Italian and Spanish, will be included in the next
    or any future release.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1611403200">- Update to version 4.9.0~pre1:
  * Updated and added many translations.
  * Enable Italian, Spanish and Macedonian.
  * Still skip Czech, it's in a very early state.
- Cosmetic changes in comments and in the distribution_id macro.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1611489600">- Simplify macro definitions.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1612612800">- Update to version 4.9.1:
  * Updated and added many translations.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1612958400">- Update to version 4.9.2:
  * Remove man pages of procps/procps-ng, now maintained upstream;
    only Debian Buster keeps the files for possible backports
    (boo#1182517).
  * Updated and added many translations.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1615291200">- Update to version 4.9.3:
  * Final release for Debian Bullseye.
  * Updated many translations.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1618315200">- Update to version 4.9.3+406:
  * Add support for openSUSE Leap 15.3.
  * Enable Czech and Danish.
  * Updated many translations.
- Update distribution_id macro to handle openSUSE Leap 15.3.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1623585600">- Update to version 4.10.0: Updated many translations.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1631620800">- Update to version 4.11.0:
  * Enable Hungarian translation.
  * Updated and added many translations.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1639915200">- Update to version 4.12.1:
  * Bugfix: Enable new languages in po/Makefile.am.
- Changes from version 4.12.0:
  * New languages: Finnish, Greek, Indonesian, Norwegian bokmål,
    Swedish, Serbian.
  * Persian (fa) is in a very early state; still disabled.
  * Updated and added many translations.
- Upgrade macros: Build for Leap has been upgraded to 15.4 - build
  for 15.3 has been dropped upstream.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1645358400">- Update to version 4.13:
  * New language: Vietnamese.
  * New distribution: Fedora 36.
  * Fix addendum creation for mdoc based files.
  * Updated many translations.
- Drop update path from Leap 15.2 since it has reached EOL.
- Update license to GPL-3.0-or-later as per Debian packaging.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1645876800">- Update to version 4.13+56:
  * Remove files with non-commercial licenses from sources.
  * Improve appearance and readability of the addendum.
  * Updated translations.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1651665600">- Update to version 4.14.0:
  * New language: Ukrainian.
  * Updated many translations.
- Remove unused argument in %man_lang_package macro definition.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1660046400">- Update to version 4.15.0: Updated many translations.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1660132800">- Remove ethers.5 German translation already provided by net-tools
  (https://salsa.debian.org/manpages-l10n-team/manpages-l10n/-/issues/8).</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1660132801">- Don't fail build if ethers.5 is not installed (typically on Leap
  15.4 for which net-tools translation is not enabled in
  manpages-l10n).</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1661515200">- Add manpages-l10n-4.15.0-fix-links.patch: Fix incorrect links in
  man2 (boo#1202798).</changelog>
</package>
<package pkgid="508bf88a330c8b388cde12cdedbc4c464bd84d114ba882fa7e993d5be041ca51" name="man-pages-el" arch="noarch">
  <version epoch="0" ver="4.15.0" rel="bp154.2.3.1"/>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1593604800">- Initial version: manpages-l10n 4.1.0 (boo#1173602).</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1602763200">- Update to version 4.2.0:
  * Updated and added many translations.
  * Still skip Italian and Spanish, will be included in the next
    or any future release.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1611403200">- Update to version 4.9.0~pre1:
  * Updated and added many translations.
  * Enable Italian, Spanish and Macedonian.
  * Still skip Czech, it's in a very early state.
- Cosmetic changes in comments and in the distribution_id macro.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1611489600">- Simplify macro definitions.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1612612800">- Update to version 4.9.1:
  * Updated and added many translations.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1612958400">- Update to version 4.9.2:
  * Remove man pages of procps/procps-ng, now maintained upstream;
    only Debian Buster keeps the files for possible backports
    (boo#1182517).
  * Updated and added many translations.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1615291200">- Update to version 4.9.3:
  * Final release for Debian Bullseye.
  * Updated many translations.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1618315200">- Update to version 4.9.3+406:
  * Add support for openSUSE Leap 15.3.
  * Enable Czech and Danish.
  * Updated many translations.
- Update distribution_id macro to handle openSUSE Leap 15.3.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1623585600">- Update to version 4.10.0: Updated many translations.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1631620800">- Update to version 4.11.0:
  * Enable Hungarian translation.
  * Updated and added many translations.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1639915200">- Update to version 4.12.1:
  * Bugfix: Enable new languages in po/Makefile.am.
- Changes from version 4.12.0:
  * New languages: Finnish, Greek, Indonesian, Norwegian bokmål,
    Swedish, Serbian.
  * Persian (fa) is in a very early state; still disabled.
  * Updated and added many translations.
- Upgrade macros: Build for Leap has been upgraded to 15.4 - build
  for 15.3 has been dropped upstream.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1645358400">- Update to version 4.13:
  * New language: Vietnamese.
  * New distribution: Fedora 36.
  * Fix addendum creation for mdoc based files.
  * Updated many translations.
- Drop update path from Leap 15.2 since it has reached EOL.
- Update license to GPL-3.0-or-later as per Debian packaging.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1645876800">- Update to version 4.13+56:
  * Remove files with non-commercial licenses from sources.
  * Improve appearance and readability of the addendum.
  * Updated translations.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1651665600">- Update to version 4.14.0:
  * New language: Ukrainian.
  * Updated many translations.
- Remove unused argument in %man_lang_package macro definition.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1660046400">- Update to version 4.15.0: Updated many translations.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1660132800">- Remove ethers.5 German translation already provided by net-tools
  (https://salsa.debian.org/manpages-l10n-team/manpages-l10n/-/issues/8).</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1660132801">- Don't fail build if ethers.5 is not installed (typically on Leap
  15.4 for which net-tools translation is not enabled in
  manpages-l10n).</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1661515200">- Add manpages-l10n-4.15.0-fix-links.patch: Fix incorrect links in
  man2 (boo#1202798).</changelog>
</package>
<package pkgid="b3108f53139458d9000fa6b3c3f7a456efd444cf5f94c736f7afe3fe0542a173" name="man-pages-es" arch="noarch">
  <version epoch="0" ver="4.15.0" rel="bp154.2.3.1"/>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1593604800">- Initial version: manpages-l10n 4.1.0 (boo#1173602).</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1602763200">- Update to version 4.2.0:
  * Updated and added many translations.
  * Still skip Italian and Spanish, will be included in the next
    or any future release.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1611403200">- Update to version 4.9.0~pre1:
  * Updated and added many translations.
  * Enable Italian, Spanish and Macedonian.
  * Still skip Czech, it's in a very early state.
- Cosmetic changes in comments and in the distribution_id macro.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1611489600">- Simplify macro definitions.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1612612800">- Update to version 4.9.1:
  * Updated and added many translations.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1612958400">- Update to version 4.9.2:
  * Remove man pages of procps/procps-ng, now maintained upstream;
    only Debian Buster keeps the files for possible backports
    (boo#1182517).
  * Updated and added many translations.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1615291200">- Update to version 4.9.3:
  * Final release for Debian Bullseye.
  * Updated many translations.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1618315200">- Update to version 4.9.3+406:
  * Add support for openSUSE Leap 15.3.
  * Enable Czech and Danish.
  * Updated many translations.
- Update distribution_id macro to handle openSUSE Leap 15.3.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1623585600">- Update to version 4.10.0: Updated many translations.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1631620800">- Update to version 4.11.0:
  * Enable Hungarian translation.
  * Updated and added many translations.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1639915200">- Update to version 4.12.1:
  * Bugfix: Enable new languages in po/Makefile.am.
- Changes from version 4.12.0:
  * New languages: Finnish, Greek, Indonesian, Norwegian bokmål,
    Swedish, Serbian.
  * Persian (fa) is in a very early state; still disabled.
  * Updated and added many translations.
- Upgrade macros: Build for Leap has been upgraded to 15.4 - build
  for 15.3 has been dropped upstream.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1645358400">- Update to version 4.13:
  * New language: Vietnamese.
  * New distribution: Fedora 36.
  * Fix addendum creation for mdoc based files.
  * Updated many translations.
- Drop update path from Leap 15.2 since it has reached EOL.
- Update license to GPL-3.0-or-later as per Debian packaging.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1645876800">- Update to version 4.13+56:
  * Remove files with non-commercial licenses from sources.
  * Improve appearance and readability of the addendum.
  * Updated translations.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1651665600">- Update to version 4.14.0:
  * New language: Ukrainian.
  * Updated many translations.
- Remove unused argument in %man_lang_package macro definition.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1660046400">- Update to version 4.15.0: Updated many translations.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1660132800">- Remove ethers.5 German translation already provided by net-tools
  (https://salsa.debian.org/manpages-l10n-team/manpages-l10n/-/issues/8).</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1660132801">- Don't fail build if ethers.5 is not installed (typically on Leap
  15.4 for which net-tools translation is not enabled in
  manpages-l10n).</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1661515200">- Add manpages-l10n-4.15.0-fix-links.patch: Fix incorrect links in
  man2 (boo#1202798).</changelog>
</package>
<package pkgid="f2e49ef8b774e24cbb3e2bd6a6a8e9e532dc78483e53085567f095f18e4273f7" name="man-pages-fi" arch="noarch">
  <version epoch="0" ver="4.15.0" rel="bp154.2.3.1"/>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1593604800">- Initial version: manpages-l10n 4.1.0 (boo#1173602).</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1602763200">- Update to version 4.2.0:
  * Updated and added many translations.
  * Still skip Italian and Spanish, will be included in the next
    or any future release.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1611403200">- Update to version 4.9.0~pre1:
  * Updated and added many translations.
  * Enable Italian, Spanish and Macedonian.
  * Still skip Czech, it's in a very early state.
- Cosmetic changes in comments and in the distribution_id macro.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1611489600">- Simplify macro definitions.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1612612800">- Update to version 4.9.1:
  * Updated and added many translations.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1612958400">- Update to version 4.9.2:
  * Remove man pages of procps/procps-ng, now maintained upstream;
    only Debian Buster keeps the files for possible backports
    (boo#1182517).
  * Updated and added many translations.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1615291200">- Update to version 4.9.3:
  * Final release for Debian Bullseye.
  * Updated many translations.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1618315200">- Update to version 4.9.3+406:
  * Add support for openSUSE Leap 15.3.
  * Enable Czech and Danish.
  * Updated many translations.
- Update distribution_id macro to handle openSUSE Leap 15.3.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1623585600">- Update to version 4.10.0: Updated many translations.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1631620800">- Update to version 4.11.0:
  * Enable Hungarian translation.
  * Updated and added many translations.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1639915200">- Update to version 4.12.1:
  * Bugfix: Enable new languages in po/Makefile.am.
- Changes from version 4.12.0:
  * New languages: Finnish, Greek, Indonesian, Norwegian bokmål,
    Swedish, Serbian.
  * Persian (fa) is in a very early state; still disabled.
  * Updated and added many translations.
- Upgrade macros: Build for Leap has been upgraded to 15.4 - build
  for 15.3 has been dropped upstream.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1645358400">- Update to version 4.13:
  * New language: Vietnamese.
  * New distribution: Fedora 36.
  * Fix addendum creation for mdoc based files.
  * Updated many translations.
- Drop update path from Leap 15.2 since it has reached EOL.
- Update license to GPL-3.0-or-later as per Debian packaging.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1645876800">- Update to version 4.13+56:
  * Remove files with non-commercial licenses from sources.
  * Improve appearance and readability of the addendum.
  * Updated translations.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1651665600">- Update to version 4.14.0:
  * New language: Ukrainian.
  * Updated many translations.
- Remove unused argument in %man_lang_package macro definition.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1660046400">- Update to version 4.15.0: Updated many translations.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1660132800">- Remove ethers.5 German translation already provided by net-tools
  (https://salsa.debian.org/manpages-l10n-team/manpages-l10n/-/issues/8).</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1660132801">- Don't fail build if ethers.5 is not installed (typically on Leap
  15.4 for which net-tools translation is not enabled in
  manpages-l10n).</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1661515200">- Add manpages-l10n-4.15.0-fix-links.patch: Fix incorrect links in
  man2 (boo#1202798).</changelog>
</package>
<package pkgid="97b81a0eae04aadaaaee1bcbf749d076b9d3954a6e0938d3cb702d16fbb3ebe0" name="man-pages-fr" arch="noarch">
  <version epoch="0" ver="4.15.0" rel="bp154.2.3.1"/>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1593604800">- Initial version: manpages-l10n 4.1.0 (boo#1173602).</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1602763200">- Update to version 4.2.0:
  * Updated and added many translations.
  * Still skip Italian and Spanish, will be included in the next
    or any future release.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1611403200">- Update to version 4.9.0~pre1:
  * Updated and added many translations.
  * Enable Italian, Spanish and Macedonian.
  * Still skip Czech, it's in a very early state.
- Cosmetic changes in comments and in the distribution_id macro.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1611489600">- Simplify macro definitions.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1612612800">- Update to version 4.9.1:
  * Updated and added many translations.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1612958400">- Update to version 4.9.2:
  * Remove man pages of procps/procps-ng, now maintained upstream;
    only Debian Buster keeps the files for possible backports
    (boo#1182517).
  * Updated and added many translations.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1615291200">- Update to version 4.9.3:
  * Final release for Debian Bullseye.
  * Updated many translations.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1618315200">- Update to version 4.9.3+406:
  * Add support for openSUSE Leap 15.3.
  * Enable Czech and Danish.
  * Updated many translations.
- Update distribution_id macro to handle openSUSE Leap 15.3.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1623585600">- Update to version 4.10.0: Updated many translations.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1631620800">- Update to version 4.11.0:
  * Enable Hungarian translation.
  * Updated and added many translations.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1639915200">- Update to version 4.12.1:
  * Bugfix: Enable new languages in po/Makefile.am.
- Changes from version 4.12.0:
  * New languages: Finnish, Greek, Indonesian, Norwegian bokmål,
    Swedish, Serbian.
  * Persian (fa) is in a very early state; still disabled.
  * Updated and added many translations.
- Upgrade macros: Build for Leap has been upgraded to 15.4 - build
  for 15.3 has been dropped upstream.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1645358400">- Update to version 4.13:
  * New language: Vietnamese.
  * New distribution: Fedora 36.
  * Fix addendum creation for mdoc based files.
  * Updated many translations.
- Drop update path from Leap 15.2 since it has reached EOL.
- Update license to GPL-3.0-or-later as per Debian packaging.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1645876800">- Update to version 4.13+56:
  * Remove files with non-commercial licenses from sources.
  * Improve appearance and readability of the addendum.
  * Updated translations.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1651665600">- Update to version 4.14.0:
  * New language: Ukrainian.
  * Updated many translations.
- Remove unused argument in %man_lang_package macro definition.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1660046400">- Update to version 4.15.0: Updated many translations.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1660132800">- Remove ethers.5 German translation already provided by net-tools
  (https://salsa.debian.org/manpages-l10n-team/manpages-l10n/-/issues/8).</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1660132801">- Don't fail build if ethers.5 is not installed (typically on Leap
  15.4 for which net-tools translation is not enabled in
  manpages-l10n).</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1661515200">- Add manpages-l10n-4.15.0-fix-links.patch: Fix incorrect links in
  man2 (boo#1202798).</changelog>
</package>
<package pkgid="7f937122fdb7c5cb7415c74fad5431db97e79ad8f30835c85466a4ddd303b8fa" name="man-pages-hu" arch="noarch">
  <version epoch="0" ver="4.15.0" rel="bp154.2.3.1"/>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1593604800">- Initial version: manpages-l10n 4.1.0 (boo#1173602).</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1602763200">- Update to version 4.2.0:
  * Updated and added many translations.
  * Still skip Italian and Spanish, will be included in the next
    or any future release.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1611403200">- Update to version 4.9.0~pre1:
  * Updated and added many translations.
  * Enable Italian, Spanish and Macedonian.
  * Still skip Czech, it's in a very early state.
- Cosmetic changes in comments and in the distribution_id macro.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1611489600">- Simplify macro definitions.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1612612800">- Update to version 4.9.1:
  * Updated and added many translations.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1612958400">- Update to version 4.9.2:
  * Remove man pages of procps/procps-ng, now maintained upstream;
    only Debian Buster keeps the files for possible backports
    (boo#1182517).
  * Updated and added many translations.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1615291200">- Update to version 4.9.3:
  * Final release for Debian Bullseye.
  * Updated many translations.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1618315200">- Update to version 4.9.3+406:
  * Add support for openSUSE Leap 15.3.
  * Enable Czech and Danish.
  * Updated many translations.
- Update distribution_id macro to handle openSUSE Leap 15.3.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1623585600">- Update to version 4.10.0: Updated many translations.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1631620800">- Update to version 4.11.0:
  * Enable Hungarian translation.
  * Updated and added many translations.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1639915200">- Update to version 4.12.1:
  * Bugfix: Enable new languages in po/Makefile.am.
- Changes from version 4.12.0:
  * New languages: Finnish, Greek, Indonesian, Norwegian bokmål,
    Swedish, Serbian.
  * Persian (fa) is in a very early state; still disabled.
  * Updated and added many translations.
- Upgrade macros: Build for Leap has been upgraded to 15.4 - build
  for 15.3 has been dropped upstream.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1645358400">- Update to version 4.13:
  * New language: Vietnamese.
  * New distribution: Fedora 36.
  * Fix addendum creation for mdoc based files.
  * Updated many translations.
- Drop update path from Leap 15.2 since it has reached EOL.
- Update license to GPL-3.0-or-later as per Debian packaging.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1645876800">- Update to version 4.13+56:
  * Remove files with non-commercial licenses from sources.
  * Improve appearance and readability of the addendum.
  * Updated translations.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1651665600">- Update to version 4.14.0:
  * New language: Ukrainian.
  * Updated many translations.
- Remove unused argument in %man_lang_package macro definition.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1660046400">- Update to version 4.15.0: Updated many translations.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1660132800">- Remove ethers.5 German translation already provided by net-tools
  (https://salsa.debian.org/manpages-l10n-team/manpages-l10n/-/issues/8).</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1660132801">- Don't fail build if ethers.5 is not installed (typically on Leap
  15.4 for which net-tools translation is not enabled in
  manpages-l10n).</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1661515200">- Add manpages-l10n-4.15.0-fix-links.patch: Fix incorrect links in
  man2 (boo#1202798).</changelog>
</package>
<package pkgid="0cc7962435f59963251280dbeb4d200684db1fad4ea83c79da5917370348cda2" name="man-pages-id" arch="noarch">
  <version epoch="0" ver="4.15.0" rel="bp154.2.3.1"/>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1593604800">- Initial version: manpages-l10n 4.1.0 (boo#1173602).</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1602763200">- Update to version 4.2.0:
  * Updated and added many translations.
  * Still skip Italian and Spanish, will be included in the next
    or any future release.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1611403200">- Update to version 4.9.0~pre1:
  * Updated and added many translations.
  * Enable Italian, Spanish and Macedonian.
  * Still skip Czech, it's in a very early state.
- Cosmetic changes in comments and in the distribution_id macro.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1611489600">- Simplify macro definitions.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1612612800">- Update to version 4.9.1:
  * Updated and added many translations.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1612958400">- Update to version 4.9.2:
  * Remove man pages of procps/procps-ng, now maintained upstream;
    only Debian Buster keeps the files for possible backports
    (boo#1182517).
  * Updated and added many translations.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1615291200">- Update to version 4.9.3:
  * Final release for Debian Bullseye.
  * Updated many translations.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1618315200">- Update to version 4.9.3+406:
  * Add support for openSUSE Leap 15.3.
  * Enable Czech and Danish.
  * Updated many translations.
- Update distribution_id macro to handle openSUSE Leap 15.3.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1623585600">- Update to version 4.10.0: Updated many translations.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1631620800">- Update to version 4.11.0:
  * Enable Hungarian translation.
  * Updated and added many translations.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1639915200">- Update to version 4.12.1:
  * Bugfix: Enable new languages in po/Makefile.am.
- Changes from version 4.12.0:
  * New languages: Finnish, Greek, Indonesian, Norwegian bokmål,
    Swedish, Serbian.
  * Persian (fa) is in a very early state; still disabled.
  * Updated and added many translations.
- Upgrade macros: Build for Leap has been upgraded to 15.4 - build
  for 15.3 has been dropped upstream.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1645358400">- Update to version 4.13:
  * New language: Vietnamese.
  * New distribution: Fedora 36.
  * Fix addendum creation for mdoc based files.
  * Updated many translations.
- Drop update path from Leap 15.2 since it has reached EOL.
- Update license to GPL-3.0-or-later as per Debian packaging.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1645876800">- Update to version 4.13+56:
  * Remove files with non-commercial licenses from sources.
  * Improve appearance and readability of the addendum.
  * Updated translations.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1651665600">- Update to version 4.14.0:
  * New language: Ukrainian.
  * Updated many translations.
- Remove unused argument in %man_lang_package macro definition.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1660046400">- Update to version 4.15.0: Updated many translations.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1660132800">- Remove ethers.5 German translation already provided by net-tools
  (https://salsa.debian.org/manpages-l10n-team/manpages-l10n/-/issues/8).</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1660132801">- Don't fail build if ethers.5 is not installed (typically on Leap
  15.4 for which net-tools translation is not enabled in
  manpages-l10n).</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1661515200">- Add manpages-l10n-4.15.0-fix-links.patch: Fix incorrect links in
  man2 (boo#1202798).</changelog>
</package>
<package pkgid="2b01de700c88c3dbdcd8bbb1b0c7919266c2c937270070f1f60a6b8097fb86c4" name="man-pages-it" arch="noarch">
  <version epoch="0" ver="4.15.0" rel="bp154.2.3.1"/>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1593604800">- Initial version: manpages-l10n 4.1.0 (boo#1173602).</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1602763200">- Update to version 4.2.0:
  * Updated and added many translations.
  * Still skip Italian and Spanish, will be included in the next
    or any future release.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1611403200">- Update to version 4.9.0~pre1:
  * Updated and added many translations.
  * Enable Italian, Spanish and Macedonian.
  * Still skip Czech, it's in a very early state.
- Cosmetic changes in comments and in the distribution_id macro.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1611489600">- Simplify macro definitions.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1612612800">- Update to version 4.9.1:
  * Updated and added many translations.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1612958400">- Update to version 4.9.2:
  * Remove man pages of procps/procps-ng, now maintained upstream;
    only Debian Buster keeps the files for possible backports
    (boo#1182517).
  * Updated and added many translations.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1615291200">- Update to version 4.9.3:
  * Final release for Debian Bullseye.
  * Updated many translations.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1618315200">- Update to version 4.9.3+406:
  * Add support for openSUSE Leap 15.3.
  * Enable Czech and Danish.
  * Updated many translations.
- Update distribution_id macro to handle openSUSE Leap 15.3.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1623585600">- Update to version 4.10.0: Updated many translations.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1631620800">- Update to version 4.11.0:
  * Enable Hungarian translation.
  * Updated and added many translations.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1639915200">- Update to version 4.12.1:
  * Bugfix: Enable new languages in po/Makefile.am.
- Changes from version 4.12.0:
  * New languages: Finnish, Greek, Indonesian, Norwegian bokmål,
    Swedish, Serbian.
  * Persian (fa) is in a very early state; still disabled.
  * Updated and added many translations.
- Upgrade macros: Build for Leap has been upgraded to 15.4 - build
  for 15.3 has been dropped upstream.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1645358400">- Update to version 4.13:
  * New language: Vietnamese.
  * New distribution: Fedora 36.
  * Fix addendum creation for mdoc based files.
  * Updated many translations.
- Drop update path from Leap 15.2 since it has reached EOL.
- Update license to GPL-3.0-or-later as per Debian packaging.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1645876800">- Update to version 4.13+56:
  * Remove files with non-commercial licenses from sources.
  * Improve appearance and readability of the addendum.
  * Updated translations.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1651665600">- Update to version 4.14.0:
  * New language: Ukrainian.
  * Updated many translations.
- Remove unused argument in %man_lang_package macro definition.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1660046400">- Update to version 4.15.0: Updated many translations.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1660132800">- Remove ethers.5 German translation already provided by net-tools
  (https://salsa.debian.org/manpages-l10n-team/manpages-l10n/-/issues/8).</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1660132801">- Don't fail build if ethers.5 is not installed (typically on Leap
  15.4 for which net-tools translation is not enabled in
  manpages-l10n).</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1661515200">- Add manpages-l10n-4.15.0-fix-links.patch: Fix incorrect links in
  man2 (boo#1202798).</changelog>
</package>
<package pkgid="940bc9cf089d4ac40fb63ca8aa4cd8ac57bb6529a687b3afce005c13c21972fa" name="man-pages-mk" arch="noarch">
  <version epoch="0" ver="4.15.0" rel="bp154.2.3.1"/>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1593604800">- Initial version: manpages-l10n 4.1.0 (boo#1173602).</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1602763200">- Update to version 4.2.0:
  * Updated and added many translations.
  * Still skip Italian and Spanish, will be included in the next
    or any future release.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1611403200">- Update to version 4.9.0~pre1:
  * Updated and added many translations.
  * Enable Italian, Spanish and Macedonian.
  * Still skip Czech, it's in a very early state.
- Cosmetic changes in comments and in the distribution_id macro.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1611489600">- Simplify macro definitions.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1612612800">- Update to version 4.9.1:
  * Updated and added many translations.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1612958400">- Update to version 4.9.2:
  * Remove man pages of procps/procps-ng, now maintained upstream;
    only Debian Buster keeps the files for possible backports
    (boo#1182517).
  * Updated and added many translations.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1615291200">- Update to version 4.9.3:
  * Final release for Debian Bullseye.
  * Updated many translations.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1618315200">- Update to version 4.9.3+406:
  * Add support for openSUSE Leap 15.3.
  * Enable Czech and Danish.
  * Updated many translations.
- Update distribution_id macro to handle openSUSE Leap 15.3.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1623585600">- Update to version 4.10.0: Updated many translations.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1631620800">- Update to version 4.11.0:
  * Enable Hungarian translation.
  * Updated and added many translations.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1639915200">- Update to version 4.12.1:
  * Bugfix: Enable new languages in po/Makefile.am.
- Changes from version 4.12.0:
  * New languages: Finnish, Greek, Indonesian, Norwegian bokmål,
    Swedish, Serbian.
  * Persian (fa) is in a very early state; still disabled.
  * Updated and added many translations.
- Upgrade macros: Build for Leap has been upgraded to 15.4 - build
  for 15.3 has been dropped upstream.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1645358400">- Update to version 4.13:
  * New language: Vietnamese.
  * New distribution: Fedora 36.
  * Fix addendum creation for mdoc based files.
  * Updated many translations.
- Drop update path from Leap 15.2 since it has reached EOL.
- Update license to GPL-3.0-or-later as per Debian packaging.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1645876800">- Update to version 4.13+56:
  * Remove files with non-commercial licenses from sources.
  * Improve appearance and readability of the addendum.
  * Updated translations.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1651665600">- Update to version 4.14.0:
  * New language: Ukrainian.
  * Updated many translations.
- Remove unused argument in %man_lang_package macro definition.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1660046400">- Update to version 4.15.0: Updated many translations.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1660132800">- Remove ethers.5 German translation already provided by net-tools
  (https://salsa.debian.org/manpages-l10n-team/manpages-l10n/-/issues/8).</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1660132801">- Don't fail build if ethers.5 is not installed (typically on Leap
  15.4 for which net-tools translation is not enabled in
  manpages-l10n).</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1661515200">- Add manpages-l10n-4.15.0-fix-links.patch: Fix incorrect links in
  man2 (boo#1202798).</changelog>
</package>
<package pkgid="0cd89988617ed2377ecb7e4288acfb8022555794d6d78fb86e5f400ab9738624" name="man-pages-nb" arch="noarch">
  <version epoch="0" ver="4.15.0" rel="bp154.2.3.1"/>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1593604800">- Initial version: manpages-l10n 4.1.0 (boo#1173602).</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1602763200">- Update to version 4.2.0:
  * Updated and added many translations.
  * Still skip Italian and Spanish, will be included in the next
    or any future release.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1611403200">- Update to version 4.9.0~pre1:
  * Updated and added many translations.
  * Enable Italian, Spanish and Macedonian.
  * Still skip Czech, it's in a very early state.
- Cosmetic changes in comments and in the distribution_id macro.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1611489600">- Simplify macro definitions.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1612612800">- Update to version 4.9.1:
  * Updated and added many translations.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1612958400">- Update to version 4.9.2:
  * Remove man pages of procps/procps-ng, now maintained upstream;
    only Debian Buster keeps the files for possible backports
    (boo#1182517).
  * Updated and added many translations.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1615291200">- Update to version 4.9.3:
  * Final release for Debian Bullseye.
  * Updated many translations.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1618315200">- Update to version 4.9.3+406:
  * Add support for openSUSE Leap 15.3.
  * Enable Czech and Danish.
  * Updated many translations.
- Update distribution_id macro to handle openSUSE Leap 15.3.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1623585600">- Update to version 4.10.0: Updated many translations.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1631620800">- Update to version 4.11.0:
  * Enable Hungarian translation.
  * Updated and added many translations.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1639915200">- Update to version 4.12.1:
  * Bugfix: Enable new languages in po/Makefile.am.
- Changes from version 4.12.0:
  * New languages: Finnish, Greek, Indonesian, Norwegian bokmål,
    Swedish, Serbian.
  * Persian (fa) is in a very early state; still disabled.
  * Updated and added many translations.
- Upgrade macros: Build for Leap has been upgraded to 15.4 - build
  for 15.3 has been dropped upstream.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1645358400">- Update to version 4.13:
  * New language: Vietnamese.
  * New distribution: Fedora 36.
  * Fix addendum creation for mdoc based files.
  * Updated many translations.
- Drop update path from Leap 15.2 since it has reached EOL.
- Update license to GPL-3.0-or-later as per Debian packaging.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1645876800">- Update to version 4.13+56:
  * Remove files with non-commercial licenses from sources.
  * Improve appearance and readability of the addendum.
  * Updated translations.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1651665600">- Update to version 4.14.0:
  * New language: Ukrainian.
  * Updated many translations.
- Remove unused argument in %man_lang_package macro definition.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1660046400">- Update to version 4.15.0: Updated many translations.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1660132800">- Remove ethers.5 German translation already provided by net-tools
  (https://salsa.debian.org/manpages-l10n-team/manpages-l10n/-/issues/8).</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1660132801">- Don't fail build if ethers.5 is not installed (typically on Leap
  15.4 for which net-tools translation is not enabled in
  manpages-l10n).</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1661515200">- Add manpages-l10n-4.15.0-fix-links.patch: Fix incorrect links in
  man2 (boo#1202798).</changelog>
</package>
<package pkgid="5cebf092990ba637a892c450a0fe0b54d3610deaf4fd16b2280b07106dbc543b" name="man-pages-nl" arch="noarch">
  <version epoch="0" ver="4.15.0" rel="bp154.2.3.1"/>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1593604800">- Initial version: manpages-l10n 4.1.0 (boo#1173602).</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1602763200">- Update to version 4.2.0:
  * Updated and added many translations.
  * Still skip Italian and Spanish, will be included in the next
    or any future release.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1611403200">- Update to version 4.9.0~pre1:
  * Updated and added many translations.
  * Enable Italian, Spanish and Macedonian.
  * Still skip Czech, it's in a very early state.
- Cosmetic changes in comments and in the distribution_id macro.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1611489600">- Simplify macro definitions.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1612612800">- Update to version 4.9.1:
  * Updated and added many translations.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1612958400">- Update to version 4.9.2:
  * Remove man pages of procps/procps-ng, now maintained upstream;
    only Debian Buster keeps the files for possible backports
    (boo#1182517).
  * Updated and added many translations.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1615291200">- Update to version 4.9.3:
  * Final release for Debian Bullseye.
  * Updated many translations.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1618315200">- Update to version 4.9.3+406:
  * Add support for openSUSE Leap 15.3.
  * Enable Czech and Danish.
  * Updated many translations.
- Update distribution_id macro to handle openSUSE Leap 15.3.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1623585600">- Update to version 4.10.0: Updated many translations.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1631620800">- Update to version 4.11.0:
  * Enable Hungarian translation.
  * Updated and added many translations.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1639915200">- Update to version 4.12.1:
  * Bugfix: Enable new languages in po/Makefile.am.
- Changes from version 4.12.0:
  * New languages: Finnish, Greek, Indonesian, Norwegian bokmål,
    Swedish, Serbian.
  * Persian (fa) is in a very early state; still disabled.
  * Updated and added many translations.
- Upgrade macros: Build for Leap has been upgraded to 15.4 - build
  for 15.3 has been dropped upstream.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1645358400">- Update to version 4.13:
  * New language: Vietnamese.
  * New distribution: Fedora 36.
  * Fix addendum creation for mdoc based files.
  * Updated many translations.
- Drop update path from Leap 15.2 since it has reached EOL.
- Update license to GPL-3.0-or-later as per Debian packaging.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1645876800">- Update to version 4.13+56:
  * Remove files with non-commercial licenses from sources.
  * Improve appearance and readability of the addendum.
  * Updated translations.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1651665600">- Update to version 4.14.0:
  * New language: Ukrainian.
  * Updated many translations.
- Remove unused argument in %man_lang_package macro definition.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1660046400">- Update to version 4.15.0: Updated many translations.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1660132800">- Remove ethers.5 German translation already provided by net-tools
  (https://salsa.debian.org/manpages-l10n-team/manpages-l10n/-/issues/8).</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1660132801">- Don't fail build if ethers.5 is not installed (typically on Leap
  15.4 for which net-tools translation is not enabled in
  manpages-l10n).</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1661515200">- Add manpages-l10n-4.15.0-fix-links.patch: Fix incorrect links in
  man2 (boo#1202798).</changelog>
</package>
<package pkgid="ccffb0807da306dfbe3ed983da22ddf8035e2afa4025a6922fc9c1bd36dffe00" name="man-pages-pl" arch="noarch">
  <version epoch="0" ver="4.15.0" rel="bp154.2.3.1"/>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1593604800">- Initial version: manpages-l10n 4.1.0 (boo#1173602).</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1602763200">- Update to version 4.2.0:
  * Updated and added many translations.
  * Still skip Italian and Spanish, will be included in the next
    or any future release.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1611403200">- Update to version 4.9.0~pre1:
  * Updated and added many translations.
  * Enable Italian, Spanish and Macedonian.
  * Still skip Czech, it's in a very early state.
- Cosmetic changes in comments and in the distribution_id macro.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1611489600">- Simplify macro definitions.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1612612800">- Update to version 4.9.1:
  * Updated and added many translations.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1612958400">- Update to version 4.9.2:
  * Remove man pages of procps/procps-ng, now maintained upstream;
    only Debian Buster keeps the files for possible backports
    (boo#1182517).
  * Updated and added many translations.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1615291200">- Update to version 4.9.3:
  * Final release for Debian Bullseye.
  * Updated many translations.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1618315200">- Update to version 4.9.3+406:
  * Add support for openSUSE Leap 15.3.
  * Enable Czech and Danish.
  * Updated many translations.
- Update distribution_id macro to handle openSUSE Leap 15.3.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1623585600">- Update to version 4.10.0: Updated many translations.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1631620800">- Update to version 4.11.0:
  * Enable Hungarian translation.
  * Updated and added many translations.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1639915200">- Update to version 4.12.1:
  * Bugfix: Enable new languages in po/Makefile.am.
- Changes from version 4.12.0:
  * New languages: Finnish, Greek, Indonesian, Norwegian bokmål,
    Swedish, Serbian.
  * Persian (fa) is in a very early state; still disabled.
  * Updated and added many translations.
- Upgrade macros: Build for Leap has been upgraded to 15.4 - build
  for 15.3 has been dropped upstream.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1645358400">- Update to version 4.13:
  * New language: Vietnamese.
  * New distribution: Fedora 36.
  * Fix addendum creation for mdoc based files.
  * Updated many translations.
- Drop update path from Leap 15.2 since it has reached EOL.
- Update license to GPL-3.0-or-later as per Debian packaging.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1645876800">- Update to version 4.13+56:
  * Remove files with non-commercial licenses from sources.
  * Improve appearance and readability of the addendum.
  * Updated translations.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1651665600">- Update to version 4.14.0:
  * New language: Ukrainian.
  * Updated many translations.
- Remove unused argument in %man_lang_package macro definition.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1660046400">- Update to version 4.15.0: Updated many translations.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1660132800">- Remove ethers.5 German translation already provided by net-tools
  (https://salsa.debian.org/manpages-l10n-team/manpages-l10n/-/issues/8).</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1660132801">- Don't fail build if ethers.5 is not installed (typically on Leap
  15.4 for which net-tools translation is not enabled in
  manpages-l10n).</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1661515200">- Add manpages-l10n-4.15.0-fix-links.patch: Fix incorrect links in
  man2 (boo#1202798).</changelog>
</package>
<package pkgid="af279b7bf09cde575ca810768849f0f56a067835af7a0927ba2542bec37754cf" name="man-pages-pt_BR" arch="noarch">
  <version epoch="0" ver="4.15.0" rel="bp154.2.3.1"/>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1593604800">- Initial version: manpages-l10n 4.1.0 (boo#1173602).</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1602763200">- Update to version 4.2.0:
  * Updated and added many translations.
  * Still skip Italian and Spanish, will be included in the next
    or any future release.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1611403200">- Update to version 4.9.0~pre1:
  * Updated and added many translations.
  * Enable Italian, Spanish and Macedonian.
  * Still skip Czech, it's in a very early state.
- Cosmetic changes in comments and in the distribution_id macro.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1611489600">- Simplify macro definitions.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1612612800">- Update to version 4.9.1:
  * Updated and added many translations.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1612958400">- Update to version 4.9.2:
  * Remove man pages of procps/procps-ng, now maintained upstream;
    only Debian Buster keeps the files for possible backports
    (boo#1182517).
  * Updated and added many translations.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1615291200">- Update to version 4.9.3:
  * Final release for Debian Bullseye.
  * Updated many translations.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1618315200">- Update to version 4.9.3+406:
  * Add support for openSUSE Leap 15.3.
  * Enable Czech and Danish.
  * Updated many translations.
- Update distribution_id macro to handle openSUSE Leap 15.3.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1623585600">- Update to version 4.10.0: Updated many translations.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1631620800">- Update to version 4.11.0:
  * Enable Hungarian translation.
  * Updated and added many translations.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1639915200">- Update to version 4.12.1:
  * Bugfix: Enable new languages in po/Makefile.am.
- Changes from version 4.12.0:
  * New languages: Finnish, Greek, Indonesian, Norwegian bokmål,
    Swedish, Serbian.
  * Persian (fa) is in a very early state; still disabled.
  * Updated and added many translations.
- Upgrade macros: Build for Leap has been upgraded to 15.4 - build
  for 15.3 has been dropped upstream.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1645358400">- Update to version 4.13:
  * New language: Vietnamese.
  * New distribution: Fedora 36.
  * Fix addendum creation for mdoc based files.
  * Updated many translations.
- Drop update path from Leap 15.2 since it has reached EOL.
- Update license to GPL-3.0-or-later as per Debian packaging.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1645876800">- Update to version 4.13+56:
  * Remove files with non-commercial licenses from sources.
  * Improve appearance and readability of the addendum.
  * Updated translations.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1651665600">- Update to version 4.14.0:
  * New language: Ukrainian.
  * Updated many translations.
- Remove unused argument in %man_lang_package macro definition.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1660046400">- Update to version 4.15.0: Updated many translations.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1660132800">- Remove ethers.5 German translation already provided by net-tools
  (https://salsa.debian.org/manpages-l10n-team/manpages-l10n/-/issues/8).</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1660132801">- Don't fail build if ethers.5 is not installed (typically on Leap
  15.4 for which net-tools translation is not enabled in
  manpages-l10n).</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1661515200">- Add manpages-l10n-4.15.0-fix-links.patch: Fix incorrect links in
  man2 (boo#1202798).</changelog>
</package>
<package pkgid="fa2a01054404b10e4ed4efb16d3f1f57cf98f15dc8bb6ffe2e09082c1d55d6cf" name="man-pages-ro" arch="noarch">
  <version epoch="0" ver="4.15.0" rel="bp154.2.3.1"/>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1593604800">- Initial version: manpages-l10n 4.1.0 (boo#1173602).</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1602763200">- Update to version 4.2.0:
  * Updated and added many translations.
  * Still skip Italian and Spanish, will be included in the next
    or any future release.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1611403200">- Update to version 4.9.0~pre1:
  * Updated and added many translations.
  * Enable Italian, Spanish and Macedonian.
  * Still skip Czech, it's in a very early state.
- Cosmetic changes in comments and in the distribution_id macro.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1611489600">- Simplify macro definitions.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1612612800">- Update to version 4.9.1:
  * Updated and added many translations.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1612958400">- Update to version 4.9.2:
  * Remove man pages of procps/procps-ng, now maintained upstream;
    only Debian Buster keeps the files for possible backports
    (boo#1182517).
  * Updated and added many translations.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1615291200">- Update to version 4.9.3:
  * Final release for Debian Bullseye.
  * Updated many translations.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1618315200">- Update to version 4.9.3+406:
  * Add support for openSUSE Leap 15.3.
  * Enable Czech and Danish.
  * Updated many translations.
- Update distribution_id macro to handle openSUSE Leap 15.3.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1623585600">- Update to version 4.10.0: Updated many translations.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1631620800">- Update to version 4.11.0:
  * Enable Hungarian translation.
  * Updated and added many translations.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1639915200">- Update to version 4.12.1:
  * Bugfix: Enable new languages in po/Makefile.am.
- Changes from version 4.12.0:
  * New languages: Finnish, Greek, Indonesian, Norwegian bokmål,
    Swedish, Serbian.
  * Persian (fa) is in a very early state; still disabled.
  * Updated and added many translations.
- Upgrade macros: Build for Leap has been upgraded to 15.4 - build
  for 15.3 has been dropped upstream.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1645358400">- Update to version 4.13:
  * New language: Vietnamese.
  * New distribution: Fedora 36.
  * Fix addendum creation for mdoc based files.
  * Updated many translations.
- Drop update path from Leap 15.2 since it has reached EOL.
- Update license to GPL-3.0-or-later as per Debian packaging.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1645876800">- Update to version 4.13+56:
  * Remove files with non-commercial licenses from sources.
  * Improve appearance and readability of the addendum.
  * Updated translations.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1651665600">- Update to version 4.14.0:
  * New language: Ukrainian.
  * Updated many translations.
- Remove unused argument in %man_lang_package macro definition.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1660046400">- Update to version 4.15.0: Updated many translations.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1660132800">- Remove ethers.5 German translation already provided by net-tools
  (https://salsa.debian.org/manpages-l10n-team/manpages-l10n/-/issues/8).</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1660132801">- Don't fail build if ethers.5 is not installed (typically on Leap
  15.4 for which net-tools translation is not enabled in
  manpages-l10n).</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1661515200">- Add manpages-l10n-4.15.0-fix-links.patch: Fix incorrect links in
  man2 (boo#1202798).</changelog>
</package>
<package pkgid="1148af72e41b378c145102b309dc9d583f3d4fd78aa441bd8704c616fe5a8de4" name="man-pages-sr" arch="noarch">
  <version epoch="0" ver="4.15.0" rel="bp154.2.3.1"/>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1593604800">- Initial version: manpages-l10n 4.1.0 (boo#1173602).</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1602763200">- Update to version 4.2.0:
  * Updated and added many translations.
  * Still skip Italian and Spanish, will be included in the next
    or any future release.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1611403200">- Update to version 4.9.0~pre1:
  * Updated and added many translations.
  * Enable Italian, Spanish and Macedonian.
  * Still skip Czech, it's in a very early state.
- Cosmetic changes in comments and in the distribution_id macro.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1611489600">- Simplify macro definitions.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1612612800">- Update to version 4.9.1:
  * Updated and added many translations.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1612958400">- Update to version 4.9.2:
  * Remove man pages of procps/procps-ng, now maintained upstream;
    only Debian Buster keeps the files for possible backports
    (boo#1182517).
  * Updated and added many translations.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1615291200">- Update to version 4.9.3:
  * Final release for Debian Bullseye.
  * Updated many translations.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1618315200">- Update to version 4.9.3+406:
  * Add support for openSUSE Leap 15.3.
  * Enable Czech and Danish.
  * Updated many translations.
- Update distribution_id macro to handle openSUSE Leap 15.3.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1623585600">- Update to version 4.10.0: Updated many translations.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1631620800">- Update to version 4.11.0:
  * Enable Hungarian translation.
  * Updated and added many translations.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1639915200">- Update to version 4.12.1:
  * Bugfix: Enable new languages in po/Makefile.am.
- Changes from version 4.12.0:
  * New languages: Finnish, Greek, Indonesian, Norwegian bokmål,
    Swedish, Serbian.
  * Persian (fa) is in a very early state; still disabled.
  * Updated and added many translations.
- Upgrade macros: Build for Leap has been upgraded to 15.4 - build
  for 15.3 has been dropped upstream.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1645358400">- Update to version 4.13:
  * New language: Vietnamese.
  * New distribution: Fedora 36.
  * Fix addendum creation for mdoc based files.
  * Updated many translations.
- Drop update path from Leap 15.2 since it has reached EOL.
- Update license to GPL-3.0-or-later as per Debian packaging.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1645876800">- Update to version 4.13+56:
  * Remove files with non-commercial licenses from sources.
  * Improve appearance and readability of the addendum.
  * Updated translations.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1651665600">- Update to version 4.14.0:
  * New language: Ukrainian.
  * Updated many translations.
- Remove unused argument in %man_lang_package macro definition.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1660046400">- Update to version 4.15.0: Updated many translations.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1660132800">- Remove ethers.5 German translation already provided by net-tools
  (https://salsa.debian.org/manpages-l10n-team/manpages-l10n/-/issues/8).</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1660132801">- Don't fail build if ethers.5 is not installed (typically on Leap
  15.4 for which net-tools translation is not enabled in
  manpages-l10n).</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1661515200">- Add manpages-l10n-4.15.0-fix-links.patch: Fix incorrect links in
  man2 (boo#1202798).</changelog>
</package>
<package pkgid="43eb38229a94cf242eb49bcfbc1c67eb0eb140a23bd6a6a9bf066b0782a543f2" name="man-pages-sv" arch="noarch">
  <version epoch="0" ver="4.15.0" rel="bp154.2.3.1"/>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1593604800">- Initial version: manpages-l10n 4.1.0 (boo#1173602).</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1602763200">- Update to version 4.2.0:
  * Updated and added many translations.
  * Still skip Italian and Spanish, will be included in the next
    or any future release.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1611403200">- Update to version 4.9.0~pre1:
  * Updated and added many translations.
  * Enable Italian, Spanish and Macedonian.
  * Still skip Czech, it's in a very early state.
- Cosmetic changes in comments and in the distribution_id macro.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1611489600">- Simplify macro definitions.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1612612800">- Update to version 4.9.1:
  * Updated and added many translations.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1612958400">- Update to version 4.9.2:
  * Remove man pages of procps/procps-ng, now maintained upstream;
    only Debian Buster keeps the files for possible backports
    (boo#1182517).
  * Updated and added many translations.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1615291200">- Update to version 4.9.3:
  * Final release for Debian Bullseye.
  * Updated many translations.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1618315200">- Update to version 4.9.3+406:
  * Add support for openSUSE Leap 15.3.
  * Enable Czech and Danish.
  * Updated many translations.
- Update distribution_id macro to handle openSUSE Leap 15.3.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1623585600">- Update to version 4.10.0: Updated many translations.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1631620800">- Update to version 4.11.0:
  * Enable Hungarian translation.
  * Updated and added many translations.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1639915200">- Update to version 4.12.1:
  * Bugfix: Enable new languages in po/Makefile.am.
- Changes from version 4.12.0:
  * New languages: Finnish, Greek, Indonesian, Norwegian bokmål,
    Swedish, Serbian.
  * Persian (fa) is in a very early state; still disabled.
  * Updated and added many translations.
- Upgrade macros: Build for Leap has been upgraded to 15.4 - build
  for 15.3 has been dropped upstream.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1645358400">- Update to version 4.13:
  * New language: Vietnamese.
  * New distribution: Fedora 36.
  * Fix addendum creation for mdoc based files.
  * Updated many translations.
- Drop update path from Leap 15.2 since it has reached EOL.
- Update license to GPL-3.0-or-later as per Debian packaging.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1645876800">- Update to version 4.13+56:
  * Remove files with non-commercial licenses from sources.
  * Improve appearance and readability of the addendum.
  * Updated translations.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1651665600">- Update to version 4.14.0:
  * New language: Ukrainian.
  * Updated many translations.
- Remove unused argument in %man_lang_package macro definition.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1660046400">- Update to version 4.15.0: Updated many translations.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1660132800">- Remove ethers.5 German translation already provided by net-tools
  (https://salsa.debian.org/manpages-l10n-team/manpages-l10n/-/issues/8).</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1660132801">- Don't fail build if ethers.5 is not installed (typically on Leap
  15.4 for which net-tools translation is not enabled in
  manpages-l10n).</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1661515200">- Add manpages-l10n-4.15.0-fix-links.patch: Fix incorrect links in
  man2 (boo#1202798).</changelog>
</package>
<package pkgid="fa7f4c798e3a3e8828adf84c1f65728baec9faef414e54e4bf326707e6d688fe" name="man-pages-uk" arch="noarch">
  <version epoch="0" ver="4.15.0" rel="bp154.2.3.1"/>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1593604800">- Initial version: manpages-l10n 4.1.0 (boo#1173602).</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1602763200">- Update to version 4.2.0:
  * Updated and added many translations.
  * Still skip Italian and Spanish, will be included in the next
    or any future release.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1611403200">- Update to version 4.9.0~pre1:
  * Updated and added many translations.
  * Enable Italian, Spanish and Macedonian.
  * Still skip Czech, it's in a very early state.
- Cosmetic changes in comments and in the distribution_id macro.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1611489600">- Simplify macro definitions.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1612612800">- Update to version 4.9.1:
  * Updated and added many translations.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1612958400">- Update to version 4.9.2:
  * Remove man pages of procps/procps-ng, now maintained upstream;
    only Debian Buster keeps the files for possible backports
    (boo#1182517).
  * Updated and added many translations.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1615291200">- Update to version 4.9.3:
  * Final release for Debian Bullseye.
  * Updated many translations.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1618315200">- Update to version 4.9.3+406:
  * Add support for openSUSE Leap 15.3.
  * Enable Czech and Danish.
  * Updated many translations.
- Update distribution_id macro to handle openSUSE Leap 15.3.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1623585600">- Update to version 4.10.0: Updated many translations.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1631620800">- Update to version 4.11.0:
  * Enable Hungarian translation.
  * Updated and added many translations.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1639915200">- Update to version 4.12.1:
  * Bugfix: Enable new languages in po/Makefile.am.
- Changes from version 4.12.0:
  * New languages: Finnish, Greek, Indonesian, Norwegian bokmål,
    Swedish, Serbian.
  * Persian (fa) is in a very early state; still disabled.
  * Updated and added many translations.
- Upgrade macros: Build for Leap has been upgraded to 15.4 - build
  for 15.3 has been dropped upstream.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1645358400">- Update to version 4.13:
  * New language: Vietnamese.
  * New distribution: Fedora 36.
  * Fix addendum creation for mdoc based files.
  * Updated many translations.
- Drop update path from Leap 15.2 since it has reached EOL.
- Update license to GPL-3.0-or-later as per Debian packaging.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1645876800">- Update to version 4.13+56:
  * Remove files with non-commercial licenses from sources.
  * Improve appearance and readability of the addendum.
  * Updated translations.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1651665600">- Update to version 4.14.0:
  * New language: Ukrainian.
  * Updated many translations.
- Remove unused argument in %man_lang_package macro definition.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1660046400">- Update to version 4.15.0: Updated many translations.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1660132800">- Remove ethers.5 German translation already provided by net-tools
  (https://salsa.debian.org/manpages-l10n-team/manpages-l10n/-/issues/8).</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1660132801">- Don't fail build if ethers.5 is not installed (typically on Leap
  15.4 for which net-tools translation is not enabled in
  manpages-l10n).</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1661515200">- Add manpages-l10n-4.15.0-fix-links.patch: Fix incorrect links in
  man2 (boo#1202798).</changelog>
</package>
<package pkgid="9747a9bd6befa4490cf5f90accaae1fb9d25b8869fc8712d49625c3f6263de6f" name="man-pages-vi" arch="noarch">
  <version epoch="0" ver="4.15.0" rel="bp154.2.3.1"/>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1593604800">- Initial version: manpages-l10n 4.1.0 (boo#1173602).</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1602763200">- Update to version 4.2.0:
  * Updated and added many translations.
  * Still skip Italian and Spanish, will be included in the next
    or any future release.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1611403200">- Update to version 4.9.0~pre1:
  * Updated and added many translations.
  * Enable Italian, Spanish and Macedonian.
  * Still skip Czech, it's in a very early state.
- Cosmetic changes in comments and in the distribution_id macro.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1611489600">- Simplify macro definitions.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1612612800">- Update to version 4.9.1:
  * Updated and added many translations.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1612958400">- Update to version 4.9.2:
  * Remove man pages of procps/procps-ng, now maintained upstream;
    only Debian Buster keeps the files for possible backports
    (boo#1182517).
  * Updated and added many translations.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1615291200">- Update to version 4.9.3:
  * Final release for Debian Bullseye.
  * Updated many translations.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1618315200">- Update to version 4.9.3+406:
  * Add support for openSUSE Leap 15.3.
  * Enable Czech and Danish.
  * Updated many translations.
- Update distribution_id macro to handle openSUSE Leap 15.3.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1623585600">- Update to version 4.10.0: Updated many translations.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1631620800">- Update to version 4.11.0:
  * Enable Hungarian translation.
  * Updated and added many translations.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1639915200">- Update to version 4.12.1:
  * Bugfix: Enable new languages in po/Makefile.am.
- Changes from version 4.12.0:
  * New languages: Finnish, Greek, Indonesian, Norwegian bokmål,
    Swedish, Serbian.
  * Persian (fa) is in a very early state; still disabled.
  * Updated and added many translations.
- Upgrade macros: Build for Leap has been upgraded to 15.4 - build
  for 15.3 has been dropped upstream.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1645358400">- Update to version 4.13:
  * New language: Vietnamese.
  * New distribution: Fedora 36.
  * Fix addendum creation for mdoc based files.
  * Updated many translations.
- Drop update path from Leap 15.2 since it has reached EOL.
- Update license to GPL-3.0-or-later as per Debian packaging.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1645876800">- Update to version 4.13+56:
  * Remove files with non-commercial licenses from sources.
  * Improve appearance and readability of the addendum.
  * Updated translations.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1651665600">- Update to version 4.14.0:
  * New language: Ukrainian.
  * Updated many translations.
- Remove unused argument in %man_lang_package macro definition.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1660046400">- Update to version 4.15.0: Updated many translations.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1660132800">- Remove ethers.5 German translation already provided by net-tools
  (https://salsa.debian.org/manpages-l10n-team/manpages-l10n/-/issues/8).</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1660132801">- Don't fail build if ethers.5 is not installed (typically on Leap
  15.4 for which net-tools translation is not enabled in
  manpages-l10n).</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1661515200">- Add manpages-l10n-4.15.0-fix-links.patch: Fix incorrect links in
  man2 (boo#1202798).</changelog>
</package>
<package pkgid="e12a4bb6c8f04960fd2f592a85c20ab833d602d136167b226f217a01434aadb7" name="manpages-l10n" arch="src">
  <version epoch="0" ver="4.15.0" rel="bp154.2.3.1"/>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1593604800">- Initial version: manpages-l10n 4.1.0 (boo#1173602).</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1602763200">- Update to version 4.2.0:
  * Updated and added many translations.
  * Still skip Italian and Spanish, will be included in the next
    or any future release.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1611403200">- Update to version 4.9.0~pre1:
  * Updated and added many translations.
  * Enable Italian, Spanish and Macedonian.
  * Still skip Czech, it's in a very early state.
- Cosmetic changes in comments and in the distribution_id macro.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1611489600">- Simplify macro definitions.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1612612800">- Update to version 4.9.1:
  * Updated and added many translations.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1612958400">- Update to version 4.9.2:
  * Remove man pages of procps/procps-ng, now maintained upstream;
    only Debian Buster keeps the files for possible backports
    (boo#1182517).
  * Updated and added many translations.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1615291200">- Update to version 4.9.3:
  * Final release for Debian Bullseye.
  * Updated many translations.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1618315200">- Update to version 4.9.3+406:
  * Add support for openSUSE Leap 15.3.
  * Enable Czech and Danish.
  * Updated many translations.
- Update distribution_id macro to handle openSUSE Leap 15.3.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1623585600">- Update to version 4.10.0: Updated many translations.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1631620800">- Update to version 4.11.0:
  * Enable Hungarian translation.
  * Updated and added many translations.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1639915200">- Update to version 4.12.1:
  * Bugfix: Enable new languages in po/Makefile.am.
- Changes from version 4.12.0:
  * New languages: Finnish, Greek, Indonesian, Norwegian bokmål,
    Swedish, Serbian.
  * Persian (fa) is in a very early state; still disabled.
  * Updated and added many translations.
- Upgrade macros: Build for Leap has been upgraded to 15.4 - build
  for 15.3 has been dropped upstream.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1645358400">- Update to version 4.13:
  * New language: Vietnamese.
  * New distribution: Fedora 36.
  * Fix addendum creation for mdoc based files.
  * Updated many translations.
- Drop update path from Leap 15.2 since it has reached EOL.
- Update license to GPL-3.0-or-later as per Debian packaging.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1645876800">- Update to version 4.13+56:
  * Remove files with non-commercial licenses from sources.
  * Improve appearance and readability of the addendum.
  * Updated translations.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1651665600">- Update to version 4.14.0:
  * New language: Ukrainian.
  * Updated many translations.
- Remove unused argument in %man_lang_package macro definition.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1660046400">- Update to version 4.15.0: Updated many translations.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1660132800">- Remove ethers.5 German translation already provided by net-tools
  (https://salsa.debian.org/manpages-l10n-team/manpages-l10n/-/issues/8).</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1660132801">- Don't fail build if ethers.5 is not installed (typically on Leap
  15.4 for which net-tools translation is not enabled in
  manpages-l10n).</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1661515200">- Add manpages-l10n-4.15.0-fix-links.patch: Fix incorrect links in
  man2 (boo#1202798).</changelog>
</package>
<package pkgid="621ad75f30cc87ce0a8cf0b5dc14111dbff4373d2e29ed2a8ec41fdd33491b3e" name="matio" arch="src">
  <version epoch="0" ver="1.5.23" rel="bp154.2.3.1"/>
  <changelog author="dmitry_r@opensuse.org" date="1458561600">- Update to version 1.5.6
  * Added support of reading sparse array from v4 MAT files
  * Added support of writing sparse array to v4 MAT files
  * Added support of writing character array to v4 MAT files
  * Bug fixes</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1466683200">- Update to version 1.5.7
  * Added support for MAT_T_UTF16 when reading character array from v5 MAT file
  * Added support of HDF5 v1.10.x (with deprecated v1.8.x symbols exported)
  * Added warning on unsupported character data types when reading v5 MAT file
  * Added error check if variable already exists when writing to MAT file
  * Bug fixes</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1467979200">- Update to version 1.5.8
  * Bug fixes</changelog>
  <changelog author="badshah400@gmail.com" date="1470398400">- Add matio-hdf5_110-support.patch to fix support for
  hdf5 &gt;= 1.10; patch taken from upstream git (gh#tbeu/matio#37).
- Add matio-disable-failing-hdf5-tests.patch to disable "mat73"
  tests that fail (apparently) due to bugs in hdf5 1.10
  (gh#tbeu/matio#41); patch touches autotool files, add
  BuildRequires on libtool and run "autoreconf -fi" before
  configure.</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1477310400">- Update to version 1.5.9
  * Bug fixes
  * HDF5 1.10 support, drop obsolete matio-hdf5_110-support.patch
    matio-disable-failing-hdf5-tests.patch</changelog>
  <changelog author="badshah400@gmail.com" date="1506945600">- Update to version 1.5.10:
  * Added new API function Mat_GetDir to retrieve all variable
    names of a MAT file
  * Fixed performance of repeated calls to Mat_VarWrite (broken by
    v1.5.7)
  * Fixed bugs reading (hyperslabs of) numeric arrays where the
    variable data type differs from the desired output data type
  * Increased testsuite coverage</changelog>
  <changelog author="badshah400@gmail.com" date="1509019200">- Update to version 1.5.11:
  * Added new API function Mat_VarWriteAppend to append a numeric
    array to a previously written variable in HDF5 MAT file.
  * Fixed bug calculating sizes of cell/struct array with empty
    cells/fields in Mat_VarGetSize.
  * Fixed bug writing cell/struct array with empty cells/fields to
    v5 MAT file.
  * Fixed bug writing cell/struct array with empty cells/fields to
    HDF5 MAT file.
  * Fixed read performance of cell/struct array with empty
    cells/fields from v5 MAT file.
  * Fixed read performance of numeric array from uncompressed v5
    MAT file.
  * Fixed testsuite (if configured with the MATLAB application).
  * Updated man pages.
- Drop BuildRequires: libtool and the autoreconf run before
  configure; the patches that needed these have been long gone.
- Mat v7.3 tests fail, so turn off enable-mat73 for now.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1522497600">- Update to version 1.5.12:
  * Updated Mat_VarWriteAppend: Added support to append a variable
    to a previously written struct array in HDF5 MAT file
  * Fixed bug reading MAT_T_UINT16 encoded character array from
    HDF5 MAT file
  * Fixed bug reading MAT_T_UTF16 encoded character array from
    compressed v5 MAT file
  * Fixed bug writing MAT_T_UTF16 encoded character array to HDF5
    MAT file
  * Fixed buffer overflow in Mat_VarGetCells/Mat_VarGetStructs
- Reenable support for Mat v7.3
- Use significantly smaller 7z compressed sources (2.7 vs 10 MByte)</changelog>
  <changelog author="jengelh@inai.de" date="1522756800">- Fix SRPM group. Trim redundant wording from summaries.</changelog>
  <changelog author="adrian@suse.de" date="1523534400">- enforce hdf5 1.8 to ensure that files can still be exchanged</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1530273600">- BuildRequire p7zip-full instead of p7zip on TW, 7za was moved
  from p7zip to the new package, breaking backwards compatibility.
- use %license for COPYING</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1538481600">- Force writing of backwards compatible files with HDF5 1.10.x
  0001-Write-backwards-compatible-Mat7.3-files.patch
  (gh#tbeu/matio#93).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1538654400">- Fix preprocessor check for availability of H5F_LIBVER_V18</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1568980800">- Update to version 1.5.17
  * Fixed bug reading struct array with packed field names from v5
    MAT file
  * Fixed bug reading past EOF from (crafted) uncompressed v5 MAT
    file
- Drop 0001-Write-backwards-compatible-Mat7.3-files.patch:
  incorporated upstream.
- Update so number to 9 in keeping with upstream.</changelog>
  <changelog author="Max Lin &lt;mlin@suse.com&gt;" date="1582372800">- Leap 15.2 has newer p7zip, build requires p7zip-full on Tumbleweed,
  Leap 15.2 and SLE15 SP2.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1600516800">- Update to version 1.5.18:
  * Added support of HDF5 v1.12.x.
  * Added support for reading uncompressed v5 MAT file generated
    by SWAN.
  * Added error codes to public interface.
  * Added support for CMake build system.
  * Fixed read performance of numeric array from compressed v5 MAT
    file.
  * Fixed support for VS2005 and VS2008 (MSVC) (regression of
    v1.5.15).
  * Fixed mktemp linker warning when using GNU linker.
  * Fixed bug writing struct array to uncompressed v5 MAT file on
    big endian architecture (regression of v1.5.10).
  * Fixed bug writing cell array to uncompressed v5 MAT file on
    big endian architecture.
  * Fixed bug reading variable name from v4 MAT file
    (CVE-2019-17533).
  * Fixed bug reading dimensions from (crafted) compressed v5 MAT
    file (CVE-2019-20017, CVE-2019-20018, CVE-2019-20020,
    CVE-2019-20052).
- Bump soversion to 11.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1605441600">- Update to version 1.5.19:
  * Fixed support for CMake (&gt;= v3.19.0) build system.
  * Fixed bug reading variable from v4 MAT file (regression of
    v1.5.18).</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1616414400">- Update to version 1.5.20:
  * Added support for writing MAT_T_UTF8 encoded character array
    to HDF5 MAT file (by conversion to UTF-16 if in BMP).
  * Updated cmake-conan to v0.16.1.
  * Fixed bug with size_t arguments of logging function calls.
  * Fixed bug reading past EOF from (crafted) MAT file.
  * Fixed bug writing MAT_T_UTF8 encoded character array to v5 MAT
    file.
  * Fixed printing of MAT_T_UTF8 encoded character array.
  * Several other fixes, for example for memory leaks.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1622548800">- Update to version 1.5.21
  * Fixed: Avoid usage of strlen when creating MAT_T_UTF8 encoded
    character array
  * Fixed reading of compression flag from HDF5 MAT file
- Use https for URL and SourceURL</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1651838400">- Update to version 1.5.23:
  * Fixed testsuite regression from version 1.5.22.
- Changes from version 1.5.22:
  * Added support for reading large MAT file.
  * Updated cmake-conan to version 0.17.0.
  * Fixed CMake build with Conan (MATIO_USE_CONAN:BOOL=ON).
  * Fixed data type when reading 16-bit character data from HDF5
    MAT file.
  * Fixed heap-based buffer overflows when reading (crafted) MAT
    file (CVE-2020-36428, CVE-2021-36977).
  * Confirmed compatibility with HDF5 v1.13.0 and v1.13.1.
  * Several other fixes, for example for memory leaks.</changelog>
</package>
<package pkgid="31435cbeb266e5c0e6c4da9eabb2c5cb61deada2f0127298d529213fbf849027" name="matio-tools" arch="aarch64">
  <version epoch="0" ver="1.5.23" rel="bp154.2.3.1"/>
  <changelog author="dmitry_r@opensuse.org" date="1458561600">- Update to version 1.5.6
  * Added support of reading sparse array from v4 MAT files
  * Added support of writing sparse array to v4 MAT files
  * Added support of writing character array to v4 MAT files
  * Bug fixes</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1466683200">- Update to version 1.5.7
  * Added support for MAT_T_UTF16 when reading character array from v5 MAT file
  * Added support of HDF5 v1.10.x (with deprecated v1.8.x symbols exported)
  * Added warning on unsupported character data types when reading v5 MAT file
  * Added error check if variable already exists when writing to MAT file
  * Bug fixes</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1467979200">- Update to version 1.5.8
  * Bug fixes</changelog>
  <changelog author="badshah400@gmail.com" date="1470398400">- Add matio-hdf5_110-support.patch to fix support for
  hdf5 &gt;= 1.10; patch taken from upstream git (gh#tbeu/matio#37).
- Add matio-disable-failing-hdf5-tests.patch to disable "mat73"
  tests that fail (apparently) due to bugs in hdf5 1.10
  (gh#tbeu/matio#41); patch touches autotool files, add
  BuildRequires on libtool and run "autoreconf -fi" before
  configure.</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1477310400">- Update to version 1.5.9
  * Bug fixes
  * HDF5 1.10 support, drop obsolete matio-hdf5_110-support.patch
    matio-disable-failing-hdf5-tests.patch</changelog>
  <changelog author="badshah400@gmail.com" date="1506945600">- Update to version 1.5.10:
  * Added new API function Mat_GetDir to retrieve all variable
    names of a MAT file
  * Fixed performance of repeated calls to Mat_VarWrite (broken by
    v1.5.7)
  * Fixed bugs reading (hyperslabs of) numeric arrays where the
    variable data type differs from the desired output data type
  * Increased testsuite coverage</changelog>
  <changelog author="badshah400@gmail.com" date="1509019200">- Update to version 1.5.11:
  * Added new API function Mat_VarWriteAppend to append a numeric
    array to a previously written variable in HDF5 MAT file.
  * Fixed bug calculating sizes of cell/struct array with empty
    cells/fields in Mat_VarGetSize.
  * Fixed bug writing cell/struct array with empty cells/fields to
    v5 MAT file.
  * Fixed bug writing cell/struct array with empty cells/fields to
    HDF5 MAT file.
  * Fixed read performance of cell/struct array with empty
    cells/fields from v5 MAT file.
  * Fixed read performance of numeric array from uncompressed v5
    MAT file.
  * Fixed testsuite (if configured with the MATLAB application).
  * Updated man pages.
- Drop BuildRequires: libtool and the autoreconf run before
  configure; the patches that needed these have been long gone.
- Mat v7.3 tests fail, so turn off enable-mat73 for now.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1522497600">- Update to version 1.5.12:
  * Updated Mat_VarWriteAppend: Added support to append a variable
    to a previously written struct array in HDF5 MAT file
  * Fixed bug reading MAT_T_UINT16 encoded character array from
    HDF5 MAT file
  * Fixed bug reading MAT_T_UTF16 encoded character array from
    compressed v5 MAT file
  * Fixed bug writing MAT_T_UTF16 encoded character array to HDF5
    MAT file
  * Fixed buffer overflow in Mat_VarGetCells/Mat_VarGetStructs
- Reenable support for Mat v7.3
- Use significantly smaller 7z compressed sources (2.7 vs 10 MByte)</changelog>
  <changelog author="jengelh@inai.de" date="1522756800">- Fix SRPM group. Trim redundant wording from summaries.</changelog>
  <changelog author="adrian@suse.de" date="1523534400">- enforce hdf5 1.8 to ensure that files can still be exchanged</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1530273600">- BuildRequire p7zip-full instead of p7zip on TW, 7za was moved
  from p7zip to the new package, breaking backwards compatibility.
- use %license for COPYING</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1538481600">- Force writing of backwards compatible files with HDF5 1.10.x
  0001-Write-backwards-compatible-Mat7.3-files.patch
  (gh#tbeu/matio#93).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1538654400">- Fix preprocessor check for availability of H5F_LIBVER_V18</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1568980800">- Update to version 1.5.17
  * Fixed bug reading struct array with packed field names from v5
    MAT file
  * Fixed bug reading past EOF from (crafted) uncompressed v5 MAT
    file
- Drop 0001-Write-backwards-compatible-Mat7.3-files.patch:
  incorporated upstream.
- Update so number to 9 in keeping with upstream.</changelog>
  <changelog author="Max Lin &lt;mlin@suse.com&gt;" date="1582372800">- Leap 15.2 has newer p7zip, build requires p7zip-full on Tumbleweed,
  Leap 15.2 and SLE15 SP2.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1600516800">- Update to version 1.5.18:
  * Added support of HDF5 v1.12.x.
  * Added support for reading uncompressed v5 MAT file generated
    by SWAN.
  * Added error codes to public interface.
  * Added support for CMake build system.
  * Fixed read performance of numeric array from compressed v5 MAT
    file.
  * Fixed support for VS2005 and VS2008 (MSVC) (regression of
    v1.5.15).
  * Fixed mktemp linker warning when using GNU linker.
  * Fixed bug writing struct array to uncompressed v5 MAT file on
    big endian architecture (regression of v1.5.10).
  * Fixed bug writing cell array to uncompressed v5 MAT file on
    big endian architecture.
  * Fixed bug reading variable name from v4 MAT file
    (CVE-2019-17533).
  * Fixed bug reading dimensions from (crafted) compressed v5 MAT
    file (CVE-2019-20017, CVE-2019-20018, CVE-2019-20020,
    CVE-2019-20052).
- Bump soversion to 11.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1605441600">- Update to version 1.5.19:
  * Fixed support for CMake (&gt;= v3.19.0) build system.
  * Fixed bug reading variable from v4 MAT file (regression of
    v1.5.18).</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1616414400">- Update to version 1.5.20:
  * Added support for writing MAT_T_UTF8 encoded character array
    to HDF5 MAT file (by conversion to UTF-16 if in BMP).
  * Updated cmake-conan to v0.16.1.
  * Fixed bug with size_t arguments of logging function calls.
  * Fixed bug reading past EOF from (crafted) MAT file.
  * Fixed bug writing MAT_T_UTF8 encoded character array to v5 MAT
    file.
  * Fixed printing of MAT_T_UTF8 encoded character array.
  * Several other fixes, for example for memory leaks.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1622548800">- Update to version 1.5.21
  * Fixed: Avoid usage of strlen when creating MAT_T_UTF8 encoded
    character array
  * Fixed reading of compression flag from HDF5 MAT file
- Use https for URL and SourceURL</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1651838400">- Update to version 1.5.23:
  * Fixed testsuite regression from version 1.5.22.
- Changes from version 1.5.22:
  * Added support for reading large MAT file.
  * Updated cmake-conan to version 0.17.0.
  * Fixed CMake build with Conan (MATIO_USE_CONAN:BOOL=ON).
  * Fixed data type when reading 16-bit character data from HDF5
    MAT file.
  * Fixed heap-based buffer overflows when reading (crafted) MAT
    file (CVE-2020-36428, CVE-2021-36977).
  * Confirmed compatibility with HDF5 v1.13.0 and v1.13.1.
  * Several other fixes, for example for memory leaks.</changelog>
</package>
<package pkgid="9fadfd12a3758c3f3e7241ea7fed3cb6bcce7e8d12d0581098cb74b72cd15e40" name="matio-tools" arch="i586">
  <version epoch="0" ver="1.5.23" rel="bp154.2.3.1"/>
  <changelog author="dmitry_r@opensuse.org" date="1458561600">- Update to version 1.5.6
  * Added support of reading sparse array from v4 MAT files
  * Added support of writing sparse array to v4 MAT files
  * Added support of writing character array to v4 MAT files
  * Bug fixes</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1466683200">- Update to version 1.5.7
  * Added support for MAT_T_UTF16 when reading character array from v5 MAT file
  * Added support of HDF5 v1.10.x (with deprecated v1.8.x symbols exported)
  * Added warning on unsupported character data types when reading v5 MAT file
  * Added error check if variable already exists when writing to MAT file
  * Bug fixes</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1467979200">- Update to version 1.5.8
  * Bug fixes</changelog>
  <changelog author="badshah400@gmail.com" date="1470398400">- Add matio-hdf5_110-support.patch to fix support for
  hdf5 &gt;= 1.10; patch taken from upstream git (gh#tbeu/matio#37).
- Add matio-disable-failing-hdf5-tests.patch to disable "mat73"
  tests that fail (apparently) due to bugs in hdf5 1.10
  (gh#tbeu/matio#41); patch touches autotool files, add
  BuildRequires on libtool and run "autoreconf -fi" before
  configure.</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1477310400">- Update to version 1.5.9
  * Bug fixes
  * HDF5 1.10 support, drop obsolete matio-hdf5_110-support.patch
    matio-disable-failing-hdf5-tests.patch</changelog>
  <changelog author="badshah400@gmail.com" date="1506945600">- Update to version 1.5.10:
  * Added new API function Mat_GetDir to retrieve all variable
    names of a MAT file
  * Fixed performance of repeated calls to Mat_VarWrite (broken by
    v1.5.7)
  * Fixed bugs reading (hyperslabs of) numeric arrays where the
    variable data type differs from the desired output data type
  * Increased testsuite coverage</changelog>
  <changelog author="badshah400@gmail.com" date="1509019200">- Update to version 1.5.11:
  * Added new API function Mat_VarWriteAppend to append a numeric
    array to a previously written variable in HDF5 MAT file.
  * Fixed bug calculating sizes of cell/struct array with empty
    cells/fields in Mat_VarGetSize.
  * Fixed bug writing cell/struct array with empty cells/fields to
    v5 MAT file.
  * Fixed bug writing cell/struct array with empty cells/fields to
    HDF5 MAT file.
  * Fixed read performance of cell/struct array with empty
    cells/fields from v5 MAT file.
  * Fixed read performance of numeric array from uncompressed v5
    MAT file.
  * Fixed testsuite (if configured with the MATLAB application).
  * Updated man pages.
- Drop BuildRequires: libtool and the autoreconf run before
  configure; the patches that needed these have been long gone.
- Mat v7.3 tests fail, so turn off enable-mat73 for now.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1522497600">- Update to version 1.5.12:
  * Updated Mat_VarWriteAppend: Added support to append a variable
    to a previously written struct array in HDF5 MAT file
  * Fixed bug reading MAT_T_UINT16 encoded character array from
    HDF5 MAT file
  * Fixed bug reading MAT_T_UTF16 encoded character array from
    compressed v5 MAT file
  * Fixed bug writing MAT_T_UTF16 encoded character array to HDF5
    MAT file
  * Fixed buffer overflow in Mat_VarGetCells/Mat_VarGetStructs
- Reenable support for Mat v7.3
- Use significantly smaller 7z compressed sources (2.7 vs 10 MByte)</changelog>
  <changelog author="jengelh@inai.de" date="1522756800">- Fix SRPM group. Trim redundant wording from summaries.</changelog>
  <changelog author="adrian@suse.de" date="1523534400">- enforce hdf5 1.8 to ensure that files can still be exchanged</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1530273600">- BuildRequire p7zip-full instead of p7zip on TW, 7za was moved
  from p7zip to the new package, breaking backwards compatibility.
- use %license for COPYING</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1538481600">- Force writing of backwards compatible files with HDF5 1.10.x
  0001-Write-backwards-compatible-Mat7.3-files.patch
  (gh#tbeu/matio#93).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1538654400">- Fix preprocessor check for availability of H5F_LIBVER_V18</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1568980800">- Update to version 1.5.17
  * Fixed bug reading struct array with packed field names from v5
    MAT file
  * Fixed bug reading past EOF from (crafted) uncompressed v5 MAT
    file
- Drop 0001-Write-backwards-compatible-Mat7.3-files.patch:
  incorporated upstream.
- Update so number to 9 in keeping with upstream.</changelog>
  <changelog author="Max Lin &lt;mlin@suse.com&gt;" date="1582372800">- Leap 15.2 has newer p7zip, build requires p7zip-full on Tumbleweed,
  Leap 15.2 and SLE15 SP2.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1600516800">- Update to version 1.5.18:
  * Added support of HDF5 v1.12.x.
  * Added support for reading uncompressed v5 MAT file generated
    by SWAN.
  * Added error codes to public interface.
  * Added support for CMake build system.
  * Fixed read performance of numeric array from compressed v5 MAT
    file.
  * Fixed support for VS2005 and VS2008 (MSVC) (regression of
    v1.5.15).
  * Fixed mktemp linker warning when using GNU linker.
  * Fixed bug writing struct array to uncompressed v5 MAT file on
    big endian architecture (regression of v1.5.10).
  * Fixed bug writing cell array to uncompressed v5 MAT file on
    big endian architecture.
  * Fixed bug reading variable name from v4 MAT file
    (CVE-2019-17533).
  * Fixed bug reading dimensions from (crafted) compressed v5 MAT
    file (CVE-2019-20017, CVE-2019-20018, CVE-2019-20020,
    CVE-2019-20052).
- Bump soversion to 11.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1605441600">- Update to version 1.5.19:
  * Fixed support for CMake (&gt;= v3.19.0) build system.
  * Fixed bug reading variable from v4 MAT file (regression of
    v1.5.18).</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1616414400">- Update to version 1.5.20:
  * Added support for writing MAT_T_UTF8 encoded character array
    to HDF5 MAT file (by conversion to UTF-16 if in BMP).
  * Updated cmake-conan to v0.16.1.
  * Fixed bug with size_t arguments of logging function calls.
  * Fixed bug reading past EOF from (crafted) MAT file.
  * Fixed bug writing MAT_T_UTF8 encoded character array to v5 MAT
    file.
  * Fixed printing of MAT_T_UTF8 encoded character array.
  * Several other fixes, for example for memory leaks.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1622548800">- Update to version 1.5.21
  * Fixed: Avoid usage of strlen when creating MAT_T_UTF8 encoded
    character array
  * Fixed reading of compression flag from HDF5 MAT file
- Use https for URL and SourceURL</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1651838400">- Update to version 1.5.23:
  * Fixed testsuite regression from version 1.5.22.
- Changes from version 1.5.22:
  * Added support for reading large MAT file.
  * Updated cmake-conan to version 0.17.0.
  * Fixed CMake build with Conan (MATIO_USE_CONAN:BOOL=ON).
  * Fixed data type when reading 16-bit character data from HDF5
    MAT file.
  * Fixed heap-based buffer overflows when reading (crafted) MAT
    file (CVE-2020-36428, CVE-2021-36977).
  * Confirmed compatibility with HDF5 v1.13.0 and v1.13.1.
  * Several other fixes, for example for memory leaks.</changelog>
</package>
<package pkgid="235b778a5346de958a0d76f40e78eca327ed9dde72ab659ed11aefe93aede4a7" name="matio-tools" arch="ppc64le">
  <version epoch="0" ver="1.5.23" rel="bp154.2.3.1"/>
  <changelog author="dmitry_r@opensuse.org" date="1458561600">- Update to version 1.5.6
  * Added support of reading sparse array from v4 MAT files
  * Added support of writing sparse array to v4 MAT files
  * Added support of writing character array to v4 MAT files
  * Bug fixes</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1466683200">- Update to version 1.5.7
  * Added support for MAT_T_UTF16 when reading character array from v5 MAT file
  * Added support of HDF5 v1.10.x (with deprecated v1.8.x symbols exported)
  * Added warning on unsupported character data types when reading v5 MAT file
  * Added error check if variable already exists when writing to MAT file
  * Bug fixes</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1467979200">- Update to version 1.5.8
  * Bug fixes</changelog>
  <changelog author="badshah400@gmail.com" date="1470398400">- Add matio-hdf5_110-support.patch to fix support for
  hdf5 &gt;= 1.10; patch taken from upstream git (gh#tbeu/matio#37).
- Add matio-disable-failing-hdf5-tests.patch to disable "mat73"
  tests that fail (apparently) due to bugs in hdf5 1.10
  (gh#tbeu/matio#41); patch touches autotool files, add
  BuildRequires on libtool and run "autoreconf -fi" before
  configure.</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1477310400">- Update to version 1.5.9
  * Bug fixes
  * HDF5 1.10 support, drop obsolete matio-hdf5_110-support.patch
    matio-disable-failing-hdf5-tests.patch</changelog>
  <changelog author="badshah400@gmail.com" date="1506945600">- Update to version 1.5.10:
  * Added new API function Mat_GetDir to retrieve all variable
    names of a MAT file
  * Fixed performance of repeated calls to Mat_VarWrite (broken by
    v1.5.7)
  * Fixed bugs reading (hyperslabs of) numeric arrays where the
    variable data type differs from the desired output data type
  * Increased testsuite coverage</changelog>
  <changelog author="badshah400@gmail.com" date="1509019200">- Update to version 1.5.11:
  * Added new API function Mat_VarWriteAppend to append a numeric
    array to a previously written variable in HDF5 MAT file.
  * Fixed bug calculating sizes of cell/struct array with empty
    cells/fields in Mat_VarGetSize.
  * Fixed bug writing cell/struct array with empty cells/fields to
    v5 MAT file.
  * Fixed bug writing cell/struct array with empty cells/fields to
    HDF5 MAT file.
  * Fixed read performance of cell/struct array with empty
    cells/fields from v5 MAT file.
  * Fixed read performance of numeric array from uncompressed v5
    MAT file.
  * Fixed testsuite (if configured with the MATLAB application).
  * Updated man pages.
- Drop BuildRequires: libtool and the autoreconf run before
  configure; the patches that needed these have been long gone.
- Mat v7.3 tests fail, so turn off enable-mat73 for now.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1522497600">- Update to version 1.5.12:
  * Updated Mat_VarWriteAppend: Added support to append a variable
    to a previously written struct array in HDF5 MAT file
  * Fixed bug reading MAT_T_UINT16 encoded character array from
    HDF5 MAT file
  * Fixed bug reading MAT_T_UTF16 encoded character array from
    compressed v5 MAT file
  * Fixed bug writing MAT_T_UTF16 encoded character array to HDF5
    MAT file
  * Fixed buffer overflow in Mat_VarGetCells/Mat_VarGetStructs
- Reenable support for Mat v7.3
- Use significantly smaller 7z compressed sources (2.7 vs 10 MByte)</changelog>
  <changelog author="jengelh@inai.de" date="1522756800">- Fix SRPM group. Trim redundant wording from summaries.</changelog>
  <changelog author="adrian@suse.de" date="1523534400">- enforce hdf5 1.8 to ensure that files can still be exchanged</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1530273600">- BuildRequire p7zip-full instead of p7zip on TW, 7za was moved
  from p7zip to the new package, breaking backwards compatibility.
- use %license for COPYING</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1538481600">- Force writing of backwards compatible files with HDF5 1.10.x
  0001-Write-backwards-compatible-Mat7.3-files.patch
  (gh#tbeu/matio#93).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1538654400">- Fix preprocessor check for availability of H5F_LIBVER_V18</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1568980800">- Update to version 1.5.17
  * Fixed bug reading struct array with packed field names from v5
    MAT file
  * Fixed bug reading past EOF from (crafted) uncompressed v5 MAT
    file
- Drop 0001-Write-backwards-compatible-Mat7.3-files.patch:
  incorporated upstream.
- Update so number to 9 in keeping with upstream.</changelog>
  <changelog author="Max Lin &lt;mlin@suse.com&gt;" date="1582372800">- Leap 15.2 has newer p7zip, build requires p7zip-full on Tumbleweed,
  Leap 15.2 and SLE15 SP2.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1600516800">- Update to version 1.5.18:
  * Added support of HDF5 v1.12.x.
  * Added support for reading uncompressed v5 MAT file generated
    by SWAN.
  * Added error codes to public interface.
  * Added support for CMake build system.
  * Fixed read performance of numeric array from compressed v5 MAT
    file.
  * Fixed support for VS2005 and VS2008 (MSVC) (regression of
    v1.5.15).
  * Fixed mktemp linker warning when using GNU linker.
  * Fixed bug writing struct array to uncompressed v5 MAT file on
    big endian architecture (regression of v1.5.10).
  * Fixed bug writing cell array to uncompressed v5 MAT file on
    big endian architecture.
  * Fixed bug reading variable name from v4 MAT file
    (CVE-2019-17533).
  * Fixed bug reading dimensions from (crafted) compressed v5 MAT
    file (CVE-2019-20017, CVE-2019-20018, CVE-2019-20020,
    CVE-2019-20052).
- Bump soversion to 11.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1605441600">- Update to version 1.5.19:
  * Fixed support for CMake (&gt;= v3.19.0) build system.
  * Fixed bug reading variable from v4 MAT file (regression of
    v1.5.18).</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1616414400">- Update to version 1.5.20:
  * Added support for writing MAT_T_UTF8 encoded character array
    to HDF5 MAT file (by conversion to UTF-16 if in BMP).
  * Updated cmake-conan to v0.16.1.
  * Fixed bug with size_t arguments of logging function calls.
  * Fixed bug reading past EOF from (crafted) MAT file.
  * Fixed bug writing MAT_T_UTF8 encoded character array to v5 MAT
    file.
  * Fixed printing of MAT_T_UTF8 encoded character array.
  * Several other fixes, for example for memory leaks.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1622548800">- Update to version 1.5.21
  * Fixed: Avoid usage of strlen when creating MAT_T_UTF8 encoded
    character array
  * Fixed reading of compression flag from HDF5 MAT file
- Use https for URL and SourceURL</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1651838400">- Update to version 1.5.23:
  * Fixed testsuite regression from version 1.5.22.
- Changes from version 1.5.22:
  * Added support for reading large MAT file.
  * Updated cmake-conan to version 0.17.0.
  * Fixed CMake build with Conan (MATIO_USE_CONAN:BOOL=ON).
  * Fixed data type when reading 16-bit character data from HDF5
    MAT file.
  * Fixed heap-based buffer overflows when reading (crafted) MAT
    file (CVE-2020-36428, CVE-2021-36977).
  * Confirmed compatibility with HDF5 v1.13.0 and v1.13.1.
  * Several other fixes, for example for memory leaks.</changelog>
</package>
<package pkgid="dac08c62379214872e796c204dc92b3cc77acae25ed8058899ef412703c4c0be" name="matio-tools" arch="s390x">
  <version epoch="0" ver="1.5.23" rel="bp154.2.3.1"/>
  <changelog author="dmitry_r@opensuse.org" date="1458561600">- Update to version 1.5.6
  * Added support of reading sparse array from v4 MAT files
  * Added support of writing sparse array to v4 MAT files
  * Added support of writing character array to v4 MAT files
  * Bug fixes</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1466683200">- Update to version 1.5.7
  * Added support for MAT_T_UTF16 when reading character array from v5 MAT file
  * Added support of HDF5 v1.10.x (with deprecated v1.8.x symbols exported)
  * Added warning on unsupported character data types when reading v5 MAT file
  * Added error check if variable already exists when writing to MAT file
  * Bug fixes</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1467979200">- Update to version 1.5.8
  * Bug fixes</changelog>
  <changelog author="badshah400@gmail.com" date="1470398400">- Add matio-hdf5_110-support.patch to fix support for
  hdf5 &gt;= 1.10; patch taken from upstream git (gh#tbeu/matio#37).
- Add matio-disable-failing-hdf5-tests.patch to disable "mat73"
  tests that fail (apparently) due to bugs in hdf5 1.10
  (gh#tbeu/matio#41); patch touches autotool files, add
  BuildRequires on libtool and run "autoreconf -fi" before
  configure.</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1477310400">- Update to version 1.5.9
  * Bug fixes
  * HDF5 1.10 support, drop obsolete matio-hdf5_110-support.patch
    matio-disable-failing-hdf5-tests.patch</changelog>
  <changelog author="badshah400@gmail.com" date="1506945600">- Update to version 1.5.10:
  * Added new API function Mat_GetDir to retrieve all variable
    names of a MAT file
  * Fixed performance of repeated calls to Mat_VarWrite (broken by
    v1.5.7)
  * Fixed bugs reading (hyperslabs of) numeric arrays where the
    variable data type differs from the desired output data type
  * Increased testsuite coverage</changelog>
  <changelog author="badshah400@gmail.com" date="1509019200">- Update to version 1.5.11:
  * Added new API function Mat_VarWriteAppend to append a numeric
    array to a previously written variable in HDF5 MAT file.
  * Fixed bug calculating sizes of cell/struct array with empty
    cells/fields in Mat_VarGetSize.
  * Fixed bug writing cell/struct array with empty cells/fields to
    v5 MAT file.
  * Fixed bug writing cell/struct array with empty cells/fields to
    HDF5 MAT file.
  * Fixed read performance of cell/struct array with empty
    cells/fields from v5 MAT file.
  * Fixed read performance of numeric array from uncompressed v5
    MAT file.
  * Fixed testsuite (if configured with the MATLAB application).
  * Updated man pages.
- Drop BuildRequires: libtool and the autoreconf run before
  configure; the patches that needed these have been long gone.
- Mat v7.3 tests fail, so turn off enable-mat73 for now.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1522497600">- Update to version 1.5.12:
  * Updated Mat_VarWriteAppend: Added support to append a variable
    to a previously written struct array in HDF5 MAT file
  * Fixed bug reading MAT_T_UINT16 encoded character array from
    HDF5 MAT file
  * Fixed bug reading MAT_T_UTF16 encoded character array from
    compressed v5 MAT file
  * Fixed bug writing MAT_T_UTF16 encoded character array to HDF5
    MAT file
  * Fixed buffer overflow in Mat_VarGetCells/Mat_VarGetStructs
- Reenable support for Mat v7.3
- Use significantly smaller 7z compressed sources (2.7 vs 10 MByte)</changelog>
  <changelog author="jengelh@inai.de" date="1522756800">- Fix SRPM group. Trim redundant wording from summaries.</changelog>
  <changelog author="adrian@suse.de" date="1523534400">- enforce hdf5 1.8 to ensure that files can still be exchanged</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1530273600">- BuildRequire p7zip-full instead of p7zip on TW, 7za was moved
  from p7zip to the new package, breaking backwards compatibility.
- use %license for COPYING</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1538481600">- Force writing of backwards compatible files with HDF5 1.10.x
  0001-Write-backwards-compatible-Mat7.3-files.patch
  (gh#tbeu/matio#93).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1538654400">- Fix preprocessor check for availability of H5F_LIBVER_V18</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1568980800">- Update to version 1.5.17
  * Fixed bug reading struct array with packed field names from v5
    MAT file
  * Fixed bug reading past EOF from (crafted) uncompressed v5 MAT
    file
- Drop 0001-Write-backwards-compatible-Mat7.3-files.patch:
  incorporated upstream.
- Update so number to 9 in keeping with upstream.</changelog>
  <changelog author="Max Lin &lt;mlin@suse.com&gt;" date="1582372800">- Leap 15.2 has newer p7zip, build requires p7zip-full on Tumbleweed,
  Leap 15.2 and SLE15 SP2.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1600516800">- Update to version 1.5.18:
  * Added support of HDF5 v1.12.x.
  * Added support for reading uncompressed v5 MAT file generated
    by SWAN.
  * Added error codes to public interface.
  * Added support for CMake build system.
  * Fixed read performance of numeric array from compressed v5 MAT
    file.
  * Fixed support for VS2005 and VS2008 (MSVC) (regression of
    v1.5.15).
  * Fixed mktemp linker warning when using GNU linker.
  * Fixed bug writing struct array to uncompressed v5 MAT file on
    big endian architecture (regression of v1.5.10).
  * Fixed bug writing cell array to uncompressed v5 MAT file on
    big endian architecture.
  * Fixed bug reading variable name from v4 MAT file
    (CVE-2019-17533).
  * Fixed bug reading dimensions from (crafted) compressed v5 MAT
    file (CVE-2019-20017, CVE-2019-20018, CVE-2019-20020,
    CVE-2019-20052).
- Bump soversion to 11.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1605441600">- Update to version 1.5.19:
  * Fixed support for CMake (&gt;= v3.19.0) build system.
  * Fixed bug reading variable from v4 MAT file (regression of
    v1.5.18).</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1616414400">- Update to version 1.5.20:
  * Added support for writing MAT_T_UTF8 encoded character array
    to HDF5 MAT file (by conversion to UTF-16 if in BMP).
  * Updated cmake-conan to v0.16.1.
  * Fixed bug with size_t arguments of logging function calls.
  * Fixed bug reading past EOF from (crafted) MAT file.
  * Fixed bug writing MAT_T_UTF8 encoded character array to v5 MAT
    file.
  * Fixed printing of MAT_T_UTF8 encoded character array.
  * Several other fixes, for example for memory leaks.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1622548800">- Update to version 1.5.21
  * Fixed: Avoid usage of strlen when creating MAT_T_UTF8 encoded
    character array
  * Fixed reading of compression flag from HDF5 MAT file
- Use https for URL and SourceURL</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1651838400">- Update to version 1.5.23:
  * Fixed testsuite regression from version 1.5.22.
- Changes from version 1.5.22:
  * Added support for reading large MAT file.
  * Updated cmake-conan to version 0.17.0.
  * Fixed CMake build with Conan (MATIO_USE_CONAN:BOOL=ON).
  * Fixed data type when reading 16-bit character data from HDF5
    MAT file.
  * Fixed heap-based buffer overflows when reading (crafted) MAT
    file (CVE-2020-36428, CVE-2021-36977).
  * Confirmed compatibility with HDF5 v1.13.0 and v1.13.1.
  * Several other fixes, for example for memory leaks.</changelog>
</package>
<package pkgid="96bf269c7ec21598078582bf386c72a8579fcd92a8accf03f1e5b76a33812674" name="matio-tools" arch="x86_64">
  <version epoch="0" ver="1.5.23" rel="bp154.2.3.1"/>
  <changelog author="dmitry_r@opensuse.org" date="1458561600">- Update to version 1.5.6
  * Added support of reading sparse array from v4 MAT files
  * Added support of writing sparse array to v4 MAT files
  * Added support of writing character array to v4 MAT files
  * Bug fixes</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1466683200">- Update to version 1.5.7
  * Added support for MAT_T_UTF16 when reading character array from v5 MAT file
  * Added support of HDF5 v1.10.x (with deprecated v1.8.x symbols exported)
  * Added warning on unsupported character data types when reading v5 MAT file
  * Added error check if variable already exists when writing to MAT file
  * Bug fixes</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1467979200">- Update to version 1.5.8
  * Bug fixes</changelog>
  <changelog author="badshah400@gmail.com" date="1470398400">- Add matio-hdf5_110-support.patch to fix support for
  hdf5 &gt;= 1.10; patch taken from upstream git (gh#tbeu/matio#37).
- Add matio-disable-failing-hdf5-tests.patch to disable "mat73"
  tests that fail (apparently) due to bugs in hdf5 1.10
  (gh#tbeu/matio#41); patch touches autotool files, add
  BuildRequires on libtool and run "autoreconf -fi" before
  configure.</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1477310400">- Update to version 1.5.9
  * Bug fixes
  * HDF5 1.10 support, drop obsolete matio-hdf5_110-support.patch
    matio-disable-failing-hdf5-tests.patch</changelog>
  <changelog author="badshah400@gmail.com" date="1506945600">- Update to version 1.5.10:
  * Added new API function Mat_GetDir to retrieve all variable
    names of a MAT file
  * Fixed performance of repeated calls to Mat_VarWrite (broken by
    v1.5.7)
  * Fixed bugs reading (hyperslabs of) numeric arrays where the
    variable data type differs from the desired output data type
  * Increased testsuite coverage</changelog>
  <changelog author="badshah400@gmail.com" date="1509019200">- Update to version 1.5.11:
  * Added new API function Mat_VarWriteAppend to append a numeric
    array to a previously written variable in HDF5 MAT file.
  * Fixed bug calculating sizes of cell/struct array with empty
    cells/fields in Mat_VarGetSize.
  * Fixed bug writing cell/struct array with empty cells/fields to
    v5 MAT file.
  * Fixed bug writing cell/struct array with empty cells/fields to
    HDF5 MAT file.
  * Fixed read performance of cell/struct array with empty
    cells/fields from v5 MAT file.
  * Fixed read performance of numeric array from uncompressed v5
    MAT file.
  * Fixed testsuite (if configured with the MATLAB application).
  * Updated man pages.
- Drop BuildRequires: libtool and the autoreconf run before
  configure; the patches that needed these have been long gone.
- Mat v7.3 tests fail, so turn off enable-mat73 for now.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1522497600">- Update to version 1.5.12:
  * Updated Mat_VarWriteAppend: Added support to append a variable
    to a previously written struct array in HDF5 MAT file
  * Fixed bug reading MAT_T_UINT16 encoded character array from
    HDF5 MAT file
  * Fixed bug reading MAT_T_UTF16 encoded character array from
    compressed v5 MAT file
  * Fixed bug writing MAT_T_UTF16 encoded character array to HDF5
    MAT file
  * Fixed buffer overflow in Mat_VarGetCells/Mat_VarGetStructs
- Reenable support for Mat v7.3
- Use significantly smaller 7z compressed sources (2.7 vs 10 MByte)</changelog>
  <changelog author="jengelh@inai.de" date="1522756800">- Fix SRPM group. Trim redundant wording from summaries.</changelog>
  <changelog author="adrian@suse.de" date="1523534400">- enforce hdf5 1.8 to ensure that files can still be exchanged</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1530273600">- BuildRequire p7zip-full instead of p7zip on TW, 7za was moved
  from p7zip to the new package, breaking backwards compatibility.
- use %license for COPYING</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1538481600">- Force writing of backwards compatible files with HDF5 1.10.x
  0001-Write-backwards-compatible-Mat7.3-files.patch
  (gh#tbeu/matio#93).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1538654400">- Fix preprocessor check for availability of H5F_LIBVER_V18</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1568980800">- Update to version 1.5.17
  * Fixed bug reading struct array with packed field names from v5
    MAT file
  * Fixed bug reading past EOF from (crafted) uncompressed v5 MAT
    file
- Drop 0001-Write-backwards-compatible-Mat7.3-files.patch:
  incorporated upstream.
- Update so number to 9 in keeping with upstream.</changelog>
  <changelog author="Max Lin &lt;mlin@suse.com&gt;" date="1582372800">- Leap 15.2 has newer p7zip, build requires p7zip-full on Tumbleweed,
  Leap 15.2 and SLE15 SP2.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1600516800">- Update to version 1.5.18:
  * Added support of HDF5 v1.12.x.
  * Added support for reading uncompressed v5 MAT file generated
    by SWAN.
  * Added error codes to public interface.
  * Added support for CMake build system.
  * Fixed read performance of numeric array from compressed v5 MAT
    file.
  * Fixed support for VS2005 and VS2008 (MSVC) (regression of
    v1.5.15).
  * Fixed mktemp linker warning when using GNU linker.
  * Fixed bug writing struct array to uncompressed v5 MAT file on
    big endian architecture (regression of v1.5.10).
  * Fixed bug writing cell array to uncompressed v5 MAT file on
    big endian architecture.
  * Fixed bug reading variable name from v4 MAT file
    (CVE-2019-17533).
  * Fixed bug reading dimensions from (crafted) compressed v5 MAT
    file (CVE-2019-20017, CVE-2019-20018, CVE-2019-20020,
    CVE-2019-20052).
- Bump soversion to 11.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1605441600">- Update to version 1.5.19:
  * Fixed support for CMake (&gt;= v3.19.0) build system.
  * Fixed bug reading variable from v4 MAT file (regression of
    v1.5.18).</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1616414400">- Update to version 1.5.20:
  * Added support for writing MAT_T_UTF8 encoded character array
    to HDF5 MAT file (by conversion to UTF-16 if in BMP).
  * Updated cmake-conan to v0.16.1.
  * Fixed bug with size_t arguments of logging function calls.
  * Fixed bug reading past EOF from (crafted) MAT file.
  * Fixed bug writing MAT_T_UTF8 encoded character array to v5 MAT
    file.
  * Fixed printing of MAT_T_UTF8 encoded character array.
  * Several other fixes, for example for memory leaks.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1622548800">- Update to version 1.5.21
  * Fixed: Avoid usage of strlen when creating MAT_T_UTF8 encoded
    character array
  * Fixed reading of compression flag from HDF5 MAT file
- Use https for URL and SourceURL</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1651838400">- Update to version 1.5.23:
  * Fixed testsuite regression from version 1.5.22.
- Changes from version 1.5.22:
  * Added support for reading large MAT file.
  * Updated cmake-conan to version 0.17.0.
  * Fixed CMake build with Conan (MATIO_USE_CONAN:BOOL=ON).
  * Fixed data type when reading 16-bit character data from HDF5
    MAT file.
  * Fixed heap-based buffer overflows when reading (crafted) MAT
    file (CVE-2020-36428, CVE-2021-36977).
  * Confirmed compatibility with HDF5 v1.13.0 and v1.13.1.
  * Several other fixes, for example for memory leaks.</changelog>
</package>
<package pkgid="09cdedcafcce48f124ccf0af22a875cd781269f953c8c9492add428f4d56bf0c" name="mbedtls" arch="src">
  <version epoch="0" ver="2.28.0" rel="bp154.2.3.1"/>
  <changelog author="mpluskal@suse.com" date="1531137600">- Update to version 2.11.0:
  * Features
    + Added support for the XTS block cipher mode with AES (AES-XTS). Contributed by Aorimn in pull request #414.
    + Implemented the HMAC-based extract-and-expand key derivation function (HKDF) per RFC 5869. Contributed by Thomas Fossati.
    + For TLS servers, added support for offloading private key operations to an external cryptoprocessor. Private key operations can be asynchronous to allow non-blocking operation of the TLS server stack.
    + Added support for ARIA cipher (RFC 5794) and associated TLS ciphersuites (RFC 6209). ARIA is disabled by default. To enable, see MBEDTLS_ARIA_C in config.h.
    + Added support for the CCM* block cipher mode as defined in IEEE Std 802.15.4.
    + Added an additional block mode, OFB (Output Feedback) per NIST SP 800-38a, to the AES module and cipher abstraction module.
  * API Changes
    + Mbed TLS 2.11.0 maintains source code compatibility with the last minor version, Mbed TLS 2.9.0, but extends the interface with additional capabilities. Mbed TLS 2.11.0 modifies the ABI and increases the SOVERSION.
  * Bugfix
    + Fixed the cert_write example to handle certificates signed with elliptic curves as well as RSA. Fixes #777 found by dbedev.
    + Fixed the redefinition of _WIN32_WINNT, to avoid overriding a definition used by user applications. Found and fixed by Fabio Alessandrelli.
    + Fixed compilation warnings with the IAR toolchain on 32-bit platforms. Reported by rahmanih in #683.
    + Fixed an issue with MicroBlaze support in bn_mul.h which was causing the build to fail. Found by zv-io. Fixes #1651.
    + Fixed braces in mbedtls_memory_buffer_alloc_status(). Found by sbranden in #552.
    + Added the macro MBEDTLS_X509_MAX_FILE_PATH_LEN that enables the user to configure the maximum length of a file path that can be buffered when calling mbedtls_x509_crt_parse_path(). Fixes #492.
    + Fixed redundant declaration of mbedtls_ssl_list_ciphersuites. Raised by TrinityTonic in #1359.
- Changes for version 2.9.0:
  + Security
    + Fixed an issue in the X.509 module which could lead to a buffer overread during certificate validation. Additionally, the issue could also lead to unnecessary callback checks being made or to some validation checks to be omitted. The overread could be triggered remotely, while the other issues would require a non DER-compliant certificate to be correctly signed by a trusted CA, or a trusted CA with a non DER-compliant certificate. Found by luocm. Fixes #825.
    + Fixed the buffer length assertion in the ssl_parse_certificate_request() function which could lead to an arbitrary overread of the message buffer. The overreads could be caused by receiving a malformed algorithms section which was too short. In builds with debug output, this overread data was output with the debug data.
    + Fixed a client-side bug in the validation of the server's ciphersuite choice which could potentially lead to the client accepting a ciphersuite it didn't offer or a ciphersuite that could not be used with the TLS or DTLS version chosen by the server. This could lead to corruption of internal data structures for some configurations.
  * Features
    + Added an option of MBEDTLS_AES_FEWER_TABLES, to dynamically compute smaller AES tables during runtime, thereby reducing the RAM/ROM footprint by ~6KiB. Suggested and contributed by jkivilin.
    + Added initial support for Curve448 (RFC 7748). So far only mbedtls_ecp_mul() and ECDH primitive functions (mbedtls_ecdh_gen_public(), mbedtls_ecdh_compute_shared()) are supported for now. Contributed by Nicholas Wilson.
  * API Changes
    + Mbed TLS 2.9.0 maintains source code and binary compatibility with the last minor version, Mbed TLS 2.8.0, but extends the interface with additional capabilities.
    + Extended the API with the function of mbedtls_net_poll() to allow user applications to wait for a network context to become ready before reading or writing.
    + Added the function mbedtls_ssl_check_pending() to the public API to allow a check for whether more more data is pending to be processed in the internal message buffers. This function is necessary to determine the underlying transport when event-driven IO is used.
  * Bugfix
    + Fixed a spurious uninitialized variable warning in cmac.c. Fix independently contributed by Brian J Murray and David Brown.
    + Added missing dependencies in test suites that led to build failures in configurations that omit certain hashes or public-key algorithms. Fixes #1040.
    + Fixed a C89 incompatibility issue in benchmark.c. Contributed by Brendan Shanks. Fixes #1353.
    + Added missing dependencies for MBEDTLS_HAVE_TIME_DATE and MBEDTLS_VERSION_FEATURES in some test suites. Contributed by Deomid Ryabkov. Fixes #1299, #1475.
    + Fixed the Makefile build process for building shared libraries on Mac OS X. Fixed by mnacamura.
    + Fixed parsing of PKCS#8 encoded Elliptic Curve keys. Previously Mbed TLS was unable to parse keys which had only the optional parameters field of the ECPrivateKey structure. Found by Jethro Beekman, fixed in #1379.
    + Added an optimisation to return the plaintext data more quickly on unpadded CBC decryption, as stated in the mbedtls_cipher_update() documentation. Contributed by Andy Leiserson.
    + Fixed the overriding and ignoring of return values when parsing and writing to a file in the pk_sign program. Found by kevlut in #1142.
    + Added restrictions to the usage of the error code MBEDTLS_ERR_SSL_WANT_READ to situations where data needs to be fetched from the underlying transport in order to make progress. Previously, this error code was also occasionally returned when unexpected messages were being discarded, ignoring that further messages could potentially already be pending to be processed in the internal buffers; these cases led to deadlocks when event-driven I/O was used. Found and reported by Hubert Mis in #772.
    + Fixed buffer length assertions in the ssl_parse_certificate_request() function which led to a potential one byte overread of the message buffer.
    + Fixed invalid buffer sizes being passed to zlib during record compression and decompression.
    + Raised the soversion of libmbedcrypto to match the soversion of the maintained 2.7 branch. The soversion was increased in Mbed TLS version 2.7.1 to reflect breaking changes in that release, but the increment was missed in 2.8.0 and later releases outside of the 2.7 branch.</changelog>
  <changelog author="mpluskal@suse.com" date="1535025600">- Update to version 2.12.0:
  * Security
    + Fixed a vulnerability in the TLS ciphersuites based on use of CBC and SHA-384 in DTLS/TLS 1.0 to 1.2, that allowed an active network attacker to partially recover the plaintext of messages under certains conditions by exploiting timing side-channels.
    + Fixed a vulnerability in TLS ciphersuites based on CBC, in DTLS/TLS 1.0 to 1.2, that allowed a local attacker, with the ability to execute code on the local machine as well as to manipulate network packets, to partially recover the plaintext of messages under certain conditions by using a cache attack targetting an internal MD/SHA buffer.
    + Added a counter-measure against a vulnerability in TLS ciphersuites based on CBC, in DTLS/TLS 1.0 to 1.2, that allowed a local attacker with the ability to execute code on the local machine as well as manipulate network packets, to partially recover the plaintext of messages certain conditions (see previous entry) by using a cache attack targeting the SSL input record buffer.
  * Features
    + Added new cryptographic primitives, the stream cipher Chacha20, one-time authenticator Poly1305 and AEAD construct Chacha20-Poly1305, as defined in RFC 7539. Contributed by Daniel King.
    + Added support for the CHACHA20-POLY1305 ciphersuites from RFC 7905.
    + Made the receive and transmit buffers independently configurable in size, for situations where the outgoing buffer can be fixed at a smaller size than the incoming buffer
    + Added support for the AES based key wrapping modes defined by NIST SP 800-38F algorithms KW and KWP and by RFC's 3394 and 5649.
    + Added platform support for the Haiku OS.
  * Bugfix
    + Fixed the key_app_writer example which was creating an invalid ASN.1 tag by writing an additional leading zero byte. Found by Aryeh R. #1257.
    + Fixed a C++ compilation error, caused by a variable named new. Found and fixed by Hirotaka Niisato. #1783.
    + Fixed the "no symbols" warning issued by ranlib when building on Mac OS X. Fix contributed by tabascoeye.
    + Clarified documentation for mbedtls_ssl_write() to include 0 as a valid return value. Found by @davidwu2000. #839.
    + Fixed a memory leak in mbedtls_x509_csr_parse(). Found and fixed by catenacyber, Philippe Antoine. #1623.
    + Added length checks to some TLS parsing functions. Found and fixed by Philippe Antoine from Catena cyber. #1663.
    + Remove unused headers included in x509.c. Found by Chris Hanson and fixed by Brendan Shanks. #992.
    + Fixed compilation error when MBEDTLS_ARC4_C is disabled and MBEDTLS_CIPHER_NULL_CIPHER is enabled. Found by TrinityTonic in #1719.
    + Fixed the inline assembly for the MPI multiply helper function for i386 and i386 with SSE2. Found by László Langó. #1550.
    + Fixed the namespacing in header files. Remove the mbedtls namespacing in the #include in the header files. #857.
    + Fixed a compiler warning of 'use before initialisation' in mbedtls_pk_parse_key(). Found by Martin Boye Petersen and fixed by Dawid Drozd.#1098.
    + Fixed decryption of zero length messages (which contain all padding) when a CBC based ciphersuite was used together with Encrypt-then-MAC.
    + Fixed the ssl_client2 example to send application data with 0-length content when the request_size argument is set to 0 as stated in the documentation. #1833.
    + Corrected the documentation for mbedtls_ssl_get_session(). This API has deep copy of the session, and the peer certificate is not lost. #926.
    + Fixed issues when building to the C99 standard, using -std=c99. Fixed by Nick Wilson.
  * Changes
    + Fails when receiving a TLS alert message with an invalid length, or invalid zero-length messages when using TLS 1.2. Contributed by Espressif Systems.
    + Changed the default behaviour of mbedtls_hkdf_extract() to return an error when calling with a NULL salt and non-zero salt length. Contributed by Brian J Murray
    + Change the shebang line in Perl scripts to look up perl in the PATH. Contributed by fbrosson.
    + Allow overriding the time on Windows via the platform-time abstraction. Fixed by Nick Wilson.
    + Use gmtime_r/gmtime_s for thread-safety. Fixed by Nick Wilson.</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1544529600">- Update to version 2.14.1: [bsc#1118727, CVE-2018-19608]
  Security
  * Fix timing variations and memory access variations in RSA PKCS#1 v1.5
    decryption that could lead to a Bleichenbacher-style padding oracle
    attack. In TLS, this affects servers that accept ciphersuites based on
    RSA decryption (i.e. ciphersuites whose name contains RSA but not
    (EC)DH(E)). Discovered by Eyal Ronen (Weizmann Institute),  Robert Gillham
    (University of Adelaide), Daniel Genkin (University of Michigan),
    Adi Shamir (Weizmann Institute), David Wong (NCC Group), and Yuval Yarom
    (University of Adelaide, Data61). The attack is described in more detail
    in the paper available here: http://cat.eyalro.net/cat.pdf  CVE-2018-19608
  * In mbedtls_mpi_write_binary(), don't leak the exact size of the number
    via branching and memory access patterns. An attacker who could submit
    a plaintext for RSA PKCS#1 v1.5 decryption but only observe the timing
    of the decryption and not its result could nonetheless decrypt RSA
    plaintexts and forge RSA signatures. Other asymmetric algorithms may
    have been similarly vulnerable. Reported by Eyal Ronen, Robert Gillham,
    Daniel Genkin, Adi Shamir, David Wong and Yuval Yarom.
  * Wipe sensitive buffers on the stack in the CTR_DRBG and HMAC_DRBG
    modules.
  API Changes
  * The new functions mbedtls_ctr_drbg_update_ret() and
    mbedtls_hmac_drbg_update_ret() are similar to mbedtls_ctr_drbg_update()
    and mbedtls_hmac_drbg_update() respectively, but the new functions
    report errors whereas the old functions return void. We recommend that
    applications use the new functions.
- Version 2.14.0:
  Security
  * Fix overly strict DN comparison when looking for CRLs belonging to a
    particular CA. This previously led to ignoring CRLs when the CRL's issuer
    name and the CA's subject name differed in their string encoding (e.g.,
    one using PrintableString and the other UTF8String) or in the choice of
    upper and lower case. Reported by Henrik Andersson of Bosch GmbH in issue
    [#1784].
  * Fix a flawed bounds check in server PSK hint parsing. In case the
    incoming message buffer was placed within the first 64KiB of address
    space and a PSK-(EC)DHE ciphersuite was used, this allowed an attacker
    to trigger a memory access up to 64KiB beyond the incoming message buffer,
    potentially leading to an application crash or information disclosure.
  * Fix mbedtls_mpi_is_prime() to use more rounds of probabilistic testing. The
    previous settings for the number of rounds made it practical for an
    adversary to construct non-primes that would be erroneously accepted as
    primes with high probability. This does not have an impact on the
    security of TLS, but can matter in other contexts with numbers chosen
    potentially by an adversary that should be prime and can be validated.
    For example, the number of rounds was enough to securely generate RSA key
    pairs or Diffie-Hellman parameters, but was insufficient to validate
    Diffie-Hellman parameters properly.
    See "Prime and Prejudice" by by Martin R. Albrecht and Jake Massimo and
    Kenneth G. Paterson and Juraj Somorovsky.
  Features
  * Add support for temporarily suspending expensive ECC computations after
    some configurable amount of operations. This is intended to be used in
    constrained, single-threaded systems where ECC is time consuming and can
    block other operations until they complete. This is disabled by default,
    but can be enabled by MBEDTLS_ECP_RESTARTABLE at compile time and
    configured by mbedtls_ecp_set_max_ops() at runtime. It applies to the new
    xxx_restartable functions in ECP, ECDSA, PK and X.509 (CRL not supported
    yet), and to existing functions in ECDH and SSL (currently only
    implemented client-side, for ECDHE-ECDSA ciphersuites in TLS 1.2,
    including client authentication).
  * Add support for Arm CPU DSP extensions to accelerate asymmetric key
    operations. On CPUs where the extensions are available, they can accelerate
    MPI multiplications used in ECC and RSA cryptography. Contributed by
    Aurelien Jarno.
  * Extend RSASSA-PSS signature to allow a smaller salt size. Previously, PSS
    signature always used a salt with the same length as the hash, and returned
    an error if this was not possible. Now the salt size may be up to two bytes
    shorter. This allows the library to support all hash and signature sizes
    that comply with FIPS 186-4, including SHA-512 with a 1024-bit key.
  * Add support for 128-bit keys in CTR_DRBG. Note that using keys shorter
    than 256 bits limits the security of generated material to 128 bits.
  API Changes
  * Add a common error code of `MBEDTLS_ERR_PLATFORM_FEATURE_UNSUPPORTED` for
    a feature that is not supported by underlying alternative
    implementations implementing cryptographic primitives. This is useful for
    hardware accelerators that don't implement all options or features.
  New deprecations
  * All module specific errors following the form
    MBEDTLS_ERR_XXX_FEATURE_UNAVAILABLE that indicate a feature is not
    supported are deprecated and are now replaced by the new equivalent
    platform error.
  * All module specific generic hardware acceleration errors following the
    form MBEDTLS_ERR_XXX_HW_ACCEL_FAILED that are deprecated and are replaced
    by the equivalent plaform error.
  * Deprecate the function mbedtls_mpi_is_prime() in favor of
    mbedtls_mpi_is_prime_ext() which allows specifying the number of
    Miller-Rabin rounds.
  Bugfix
  * Fix wrong order of freeing in programs/ssl/ssl_server2 example
    application leading to a memory leak in case both
    MBEDTLS_MEMORY_BUFFER_ALLOC_C and MBEDTLS_MEMORY_BACKTRACE are set.
    Fixes #2069.
  * Fix a bug in the update function for SSL ticket keys which previously
    invalidated keys of a lifetime of less than a 1s. Fixes #1968.
  * Fix failure in hmac_drbg in the benchmark sample application, when
    MBEDTLS_THREADING_C is defined. Found by TrinityTonic, #1095
  * Fix a bug in the record decryption routine ssl_decrypt_buf()
    which lead to accepting properly authenticated but improperly
    padded records in case of CBC ciphersuites using Encrypt-then-MAC.
  * Fix memory leak and freeing without initialization in the example
    program programs/x509/cert_write. Fixes #1422.
  * Ignore IV in mbedtls_cipher_set_iv() when the cipher mode is
    MBEDTLS_MODE_ECB. Found by ezdevelop. Fixes #1091.
  * Zeroize memory used for buffering or reassembling handshake messages
    after use.
  * Use `mbedtls_platform_zeroize()` instead of `memset()` for zeroization
    of sensitive data in the example programs aescrypt2 and crypt_and_hash.
  * Change the default string format used for various X.509 DN attributes to
    UTF8String. Previously, the use of the PrintableString format led to
    wildcards and non-ASCII characters being unusable in some DN attributes.
    Reported by raprepo in #1860 and by kevinpt in #468. Fix contributed by
    Thomas-Dee.
  * Fix compilation failure for configurations which use compile time
    replacements of standard calloc/free functions through the macros
    MBEDTLS_PLATFORM_CALLOC_MACRO and MBEDTLS_PLATFORM_FREE_MACRO.
    Reported by ole-de and ddhome2006. Fixes #882, #1642 and #1706.
  Changes
  * Removed support for Yotta as a build tool.
  * Add tests for session resumption in DTLS.
  * Close a test gap in (D)TLS between the client side and the server side:
    test the handling of large packets and small packets on the client side
    in the same way as on the server side.
  * Change the dtls_client and dtls_server samples to work by default over
    IPv6 and optionally by a build option over IPv4.
  * Change the use of Windows threading to use Microsoft Visual C++ runtime
    calls, rather than Win32 API calls directly. This is necessary to avoid
    conflict with C runtime usage. Found and fixed by irwir.
  * Remember the string format of X.509 DN attributes when replicating
    X.509 DNs. Previously, DN attributes were always written in their default
    string format (mostly PrintableString), which could lead to CRTs being
    created which used PrintableStrings in the issuer field even though the
    signing CA used UTF8Strings in its subject field; while X.509 compliant,
    such CRTs were rejected in some applications, e.g. some versions of
    Firefox, curl and GnuTLS. Reported in #1033 by Moschn. Fix contributed by
    Thomas-Dee.
  * Improve documentation of mbedtls_ssl_get_verify_result().
    Fixes #517 reported by github-monoculture.
  * Add MBEDTLS_MPI_GEN_PRIME_FLAG_LOW_ERR flag to mbedtls_mpi_gen_prime() and
    use it to reduce error probability in RSA key generation to levels mandated
    by FIPS-186-4.
- Version 2.13.1
  API Changes
  * Extend the platform module with an abstraction mbedtls_platform_gmtime_r()
    whose implementation should behave as a thread-safe version of gmtime().
    This allows users to configure such an implementation at compile time when
    the target system cannot be deduced automatically, by setting the option
    MBEDTLS_PLATFORM_GMTIME_R_ALT. At this stage Mbed TLS is only able to
    automatically select implementations for Windows and POSIX C libraries.
  Bugfix
  * Fix build failures on platforms where only gmtime() is available but
    neither gmtime_r() nor gmtime_s() are present. Fixes #1907.
- Version 2.13.0
  Security
  * Fix an issue in the X.509 module which could lead to a buffer overread
    during certificate extensions parsing. In case of receiving malformed
    input (extensions length field equal to 0), an illegal read of one byte
    beyond the input buffer is made. Found and analyzed by Nathan Crandall.
  Features
  * Add support for fragmentation of outgoing DTLS handshake messages. This
    is controlled by the maximum fragment length as set locally or negotiated
    with the peer, as well as by a new per-connection MTU option, set using
    mbedtls_ssl_set_mtu().
  * Add support for auto-adjustment of MTU to a safe value during the
    handshake when flights do not get through (RFC 6347, section 4.1.1.1,
    last paragraph).
  * Add support for packing multiple records within a single datagram,
    enabled by default.
  * Add support for buffering out-of-order handshake messages in DTLS.
    The maximum amount of RAM used for this can be controlled by the
    compile-time constant MBEDTLS_SSL_DTLS_MAX_BUFFERING defined
    in mbedtls/config.h.
  API Changes
  * Add function mbedtls_ssl_set_datagram_packing() to configure
    the use of datagram packing (enabled by default).
  Bugfix
  * Fix a potential memory leak in mbedtls_ssl_setup() function. An allocation
    failure in the function could lead to other buffers being leaked.
  * Fixes an issue with MBEDTLS_CHACHAPOLY_C which would not compile if
    MBEDTLS_ARC4_C and MBEDTLS_CIPHER_NULL_CIPHER weren't also defined. #1890
  * Fix a memory leak in ecp_mul_comb() if ecp_precompute_comb() fails.
    Fix contributed by Espressif Systems.
  * Add ecc extensions only if an ecc based ciphersuite is used.
    This improves compliance to RFC 4492, and as a result, solves
    interoperability issues with BouncyCastle. Raised by milenamil in #1157.
  * Replace printf with mbedtls_printf in the ARIA module. Found by
    TrinityTonic in #1908.
  * Fix potential use-after-free in mbedtls_ssl_get_max_frag_len()
    and mbedtls_ssl_get_record_expansion() after a session reset. Fixes #1941.
  * Fix a bug that caused SSL/TLS clients to incorrectly abort the handshake
    with TLS versions 1.1 and earlier when the server requested authentication
    without providing a list of CAs. This was due to an overly strict bounds
    check in parsing the CertificateRequest message,
    introduced in Mbed TLS 2.12.0. Fixes #1954.
  * Fix a miscalculation of the maximum record expansion in
    mbedtls_ssl_get_record_expansion() in case of ChachaPoly ciphersuites,
    or CBC ciphersuites in (D)TLS versions 1.1 or higher. Fixes #1913, #1914.
  * Fix undefined shifts with negative values in certificates parsing
    (found by Catena cyber using oss-fuzz)
  * Fix memory leak and free without initialization in pk_encrypt
    and pk_decrypt example programs. Reported by Brace Stout. Fixes #1128.
  * Remove redundant else statement. Raised by irwir. Fixes #1776.
  Changes
  * Copy headers preserving timestamps when doing a "make install".
    Contributed by xueruini.
  * Allow the forward declaration of public structs. Contributed by Dawid
    Drozd. Fixes #1215 raised by randombit.
  * Improve compatibility with some alternative CCM implementations by using
    CCM test vectors from RAM.
  * Add support for buffering of out-of-order handshake messages.
  * Add warnings to the documentation of the HKDF module to reduce the risk
    of misusing the mbedtls_hkdf_extract() and mbedtls_hkdf_expand()
    functions. Fixes #1775. Reported by Brian J. Murray.</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1544529601">- Library package version bumped to libmbedtls12</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1546862400">- Update to version 2.16.0:
  Features
  * Add a new config.h option of MBEDTLS_CHECK_PARAMS that enables validation of parameters in the API. This allows detection of obvious misuses of the API, such as passing NULL pointers. The API of existing functions hasn't changed, but requirements on parameters have been made more explicit in the documentation. See the corresponding API documentation for each function to see for which parameter values it is defined. This feature is disabled by default. See its API documentation in config.h for additional steps you have to take when enabling it.
  API Changes
  * The following functions in the random generator modules have been deprecated and replaced as shown below. The new functions change the return type from void to int to allow returning error codes when using MBEDTLS_&lt;MODULE&gt;_ALT for the underlying AES or message digest primitive. Fixes #1798. mbedtls_ctr_drbg_update() -&gt; mbedtls_ctr_drbg_update_ret() mbedtls_hmac_drbg_update() -&gt; mbedtls_hmac_drbg_update_ret()
  * Extend ECDH interface to enable alternative implementations.
  * Deprecate error codes of the form MBEDTLS_ERR_xxx_INVALID_KEY_LENGTH for ARIA, CAMELLIA and Blowfish. These error codes will be replaced by the more generic per-module error codes MBEDTLS_ERR_xxx_BAD_INPUT_DATA.
  * Additional parameter validation checks have been added for the following modules - AES, ARIA, Blowfish, CAMELLIA, CCM, GCM, DHM, ECP, ECDSA, ECDH, ECJPAKE, SHA, Chacha20 and Poly1305, cipher, pk, RSA, and MPI. Where modules have had parameter validation added, existing parameter checks may have changed. Some modules, such as Chacha20 had existing parameter validation whereas other modules had little. This has now been changed so that the same level of validation is present in all modules, and that it is now optional with the MBEDTLS_CHECK_PARAMS flag which by default is off. That means that checks which were previously present by default will no longer be.
  New deprecations
  * Deprecate mbedtls_ctr_drbg_update() and mbedtls_hmac_drbg_update() in favor of functions that can return an error code.
  Bugfix
  * Fix for Clang, which was reporting a warning for the bignum.c inline assembly for AMD64 targets creating string literals greater than those permitted by the ISO C99 standard. Found by Aaron Jones. Fixes #482.
  * Fix runtime error in mbedtls_platform_entropy_poll() when run through qemu user emulation. Reported and fix suggested by randombit. Fixes #1212.
  * Fix an unsafe bounds check when restoring an SSL session from a ticket. This could lead to a buffer overflow, but only in case ticket authentication was broken. Reported and fix suggested by Guido Vranken in #659.
  * Add explicit integer to enumeration type casts to example program programs/pkey/gen_key which previously led to compilation failure on some toolchains. Reported by phoenixmcallister. Fixes #2170.
  * Clarify documentation of mbedtls_ssl_set_own_cert() regarding the absence of check for certificate/key matching. Reported by Attila Molnar, #507.
  * Fix double initialization of ECC hardware that made some accelerators hang.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1567512000">- Update to version 2.16.2:
  * Security improvements and bugfixes
- Use ninja to for build</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1573646400">- Update to version 2.16.3:
  * Security improvements and bugfixes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1585828800">- Update to version 2.16.5:
  * Security improvements and bugfixes</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597665600">- update to 2.23.0:
  a lot of changes see https://github.com/ARMmbed/mbedtls/releases/tag/v2.23.0
  * Fix a side channel vulnerability in modular exponentiation that could reveal an RSA private key used in a secure enclave. Noticed by Sangho Lee, Ming-Wei Shih, Prasun Gera, Taesoo Kim and Hyesoon Kim (Georgia Institute of Technology); and Marcus Peinado (Microsoft Research). Reported by Raoul Strackx (Fortanix) in #3394.
  * Fix side channel in mbedtls_ecp_check_pub_priv() and mbedtls_pk_parse_key() / mbedtls_pk_parse_keyfile() (when loading a private key that didn't include the uncompressed public key), as well as mbedtls_ecp_mul() / mbedtls_ecp_mul_restartable() when called with a NULL f_rng argument. An attacker with access to precise enough timing and memory access information (typically an untrusted operating system attacking a secure enclave) could fully recover the ECC private key. Found and reported by Alejandro Cabrera Aldaya and Billy Brumley.
  * Fix issue in Lucky 13 counter-measure that could make it ineffective when hardware accelerators were used (using one of the MBEDTLS_SHAxxx_ALT macros). This would cause the original Lucky 13 attack to be possible in those configurations, allowing an active network attacker to recover plaintext after repeated timing measurements under some conditions. Reported and fix suggested by Luc Perneel in #3246.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1598875200">- Do not run testsuite in parallel - its not reliable</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1599480000">- Add workaround for failing builds (Python not found) due to
  https://gitlab.kitware.com/cmake/cmake/-/issues/21168</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1599652800">- update to 2.24.0:
  * see https://github.com/ARMmbed/mbedtls/releases/tag/v2.24.0
  * Fix a vulnerability in the verification of X.509 certificates when matching
  the expected common name (the cn argument of mbedtls_x509_crt_verify())
  with the actual certificate name: when the subjecAltName extension is
  present, the expected name was compared to any name in that extension
  regardless of its type. This means that an attacker could for example
  impersonate a 4-bytes or 16-byte domain by getting a certificate for the
  corresponding IPv4 or IPv6 (this would require the attacker to control that
  IP address, though). Similar attacks using other subjectAltName name types
  might be possible.
  * When checking X.509 CRLs, a certificate was only considered as revoked if
  its revocationDate was in the past according to the local clock if
  available. In particular, on builds without MBEDTLS_HAVE_TIME_DATE,
  certificates were never considered as revoked. On builds with
  MBEDTLS_HAVE_TIME_DATE, an attacker able to control the local clock (for
  example, an untrusted OS attacking a secure enclave) could prevent
  revocation of certificates via CRLs. Fixed by no longer checking the
  revocationDate field, in accordance with RFC 5280. Reported by yuemonangong
  in #3340. Reported independently and fixed by Raoul Strackx and Jethro
  * In (D)TLS record decryption, when using a CBC ciphersuites without the
  Encrypt-then-Mac extension, use constant code flow memory access patterns
  to extract and check the MAC. This is an improvement to the existing
  countermeasure against Lucky 13 attacks. The previous countermeasure was
  effective against network-based attackers, but less so against local
  attackers. The new countermeasure defends against local attackers, even if
  they have access to fine-grained measurements. In particular, this fixes a
  local Lucky 13 cache attack found and reported by Tuba Yavuz, Farhaan
  Fowze, Ken (Yihan) Bai, Grant Hernandez, and Kevin Butler (University of
  Florida) and Dave Tian (Purdue University).
  * Fix side channel in RSA private key operations and static (finite-field)
  Diffie-Hellman. An adversary with precise enough timing and memory access
  information (typically an untrusted operating system attacking a secure
  enclave) could bypass an existing counter-measure (base blinding) and
  potentially fully recover the private key.
  * Fix a 1-byte buffer overread in mbedtls_x509_crl_parse_der(). Credit to
  OSS-Fuzz for detecting the problem and to Philippe Antoine for pinpointing
  the problematic code.
  * Zeroising of plaintext buffers in mbedtls_ssl_read() to erase unused
  application data from memory.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1608638400">- update to 2.25.0:
  * This release of Mbed TLS provides bug fixes, minor enhancements and new
  features. This release includes fixes for security issues.
  * see https://github.com/ARMmbed/mbedtls/releases/tag/v2.25.0
  * The functions mbedtls_cipher_auth_encrypt() and
  mbedtls_cipher_auth_decrypt() would write past the minimum documented size
  of the output buffer when used with NIST_KW. As a result, code using those
  functions as documented with NIST_KW could have a buffer overwrite of up to
  15 bytes, with consequences ranging up to arbitrary code execution
  depending on the location of the output buffer.
  * Limit the size of calculations performed by mbedtls_mpi_exp_mod to
  MBEDTLS_MPI_MAX_SIZE to prevent a potential denial of service when generating
  Diffie-Hellman key pairs. Credit to OSS-Fuzz.
  * A failure of the random generator was ignored in mbedtls_mpi_fill_random(),
  which is how most uses of randomization in asymmetric cryptography (including
  key generation, intermediate value randomization and blinding) are implemented.
  This could cause failures or the silent use of non-random values. A random
  generator can fail if it needs reseeding and cannot not obtain entropy, or due
  to an internal failure (which, for Mbed TLS's own CTR_DRBG or HMAC_DRBG, can
  only happen due to a misconfiguration).
  * Fix a compliance issue whereby we were not checking the tag on the algorithm
  parameters (only the size) when comparing the signature in the description part
  of the cert to the real signature. This meant that a NULL algorithm parameters
  entry would look identical to an array of REAL (size zero) to the library and
  thus the certificate would be considered valid. However, if the parameters do
  not match in any way then the certificate should be considered invalid, and
  indeed OpenSSL marks these certs as invalid when mbedtls did not. Many thanks
  to guidovranken who found this issue via differential fuzzing and reported it
  in #3629.
  * Zeroising of local buffers and variables which are used for calculations in
  mbedtls_pkcs5_pbkdf2_hmac(), mbedtls_internal_sha*_process(),
  mbedtls_internal_md*_process() and mbedtls_internal_ripemd160_process()
  functions to erase sensitive data from memory. Reported by Johan Malmgren and
  Johan Uppman Bruce from Sectra.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1611057600">- Fix build for Leap targets
- Use upstream tarball name</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1616414400">- Update to 2.26.0: [bsc#1189589, CVE-2021-24119]
  * * This release of Mbed TLS provides bug fixes, minor enhancements and new
  features. This release includes fixes for security issues.
  * see https://github.com/ARMmbed/mbedtls/releases/tag/v2.26.0
- Fix build with patch from https://github.com/ARMmbed/mbedtls/pull/4237
  mbedtls-4237.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1618488000">-  Workaround for building with gcc-11 boo#1181876</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1626782400">- Update to 2.27.0:
  API changes:
  * Update AEAD output size macros to bring them in line with the PSA Crypto
    API version 1.0 spec. This version of the spec parameterizes them on the
    key type used, as well as the key bit-size in the case of
    PSA_AEAD_TAG_LENGTH.
    The old versions of these macros were renamed and deprecated as follows:
  - PSA_AEAD_TAG_LENGTH          -&gt; PSA_AEAD_TAG_LENGTH_1_ARG
  - PSA_AEAD_ENCRYPT_OUTPUT_SIZE -&gt; PSA_AEAD_ENCRYPT_OUTPUT_SIZE_2_ARG
  - PSA_AEAD_DECRYPT_OUTPUT_SIZE -&gt; PSA_AEAD_DECRYPT_OUTPUT_SIZE_2_ARG
  - PSA_AEAD_UPDATE_OUTPUT_SIZE  -&gt; PSA_AEAD_UPDATE_OUTPUT_SIZE_2_ARG
  - PSA_AEAD_FINISH_OUTPUT_SIZE  -&gt; PSA_AEAD_FINISH_OUTPUT_SIZE_1_ARG
  - PSA_AEAD_VERIFY_OUTPUT_SIZE  -&gt; PSA_AEAD_VERIFY_OUTPUT_SIZE_1_ARG
  * Implement one-shot cipher functions, psa_cipher_encrypt and
    psa_cipher_decrypt, according to the PSA Crypto API 1.0.0
    specification.
  Features:
  * Add mbedtls_rsa_rsassa_pss_sign_ext() function allowing to generate a
    signature with a specific salt length. This function allows to validate
    test cases provided in the NIST's CAVP test suite.
  * Added support for built-in driver keys through the PSA opaque crypto
    driver interface. Refer to the documentation of
    MBEDTLS_PSA_CRYPTO_BUILTIN_KEYS for more information.
  * Implement psa_sign_message() and psa_verify_message().
  * The new function mbedtls_mpi_random() generates a random value in a
    given range uniformly.
  * Implement psa_mac_compute() and psa_mac_verify() as defined in the
    PSA Cryptograpy API 1.0.0 specification.
  * MBEDTLS_ECP_MAX_BITS is now determined automatically from the configured
    curves and no longer needs to be configured explicitly to save RAM.
  Security
  * Fix a bias in the generation of finite-field Diffie-Hellman-Merkle (DHM)
    private keys and of blinding values for DHM and elliptic curves (ECP)
    computations.
  * Fix a potential side channel vulnerability in ECDSA ephemeral key generation.
    An adversary who is capable of very precise timing measurements could
    learn partial information about the leading bits of the nonce used for the
    signature, allowing the recovery of the private key after observing a
    large number of signature operations. This completes a partial fix in
    Mbed TLS 2.20.0.
  * It was possible to configure MBEDTLS_ECP_MAX_BITS to a value that is
    too small, leading to buffer overflows in ECC operations. Fail the build
    in such a case.
  * An adversary with access to precise enough information about memory
    accesses (typically, an untrusted operating system attacking a secure
    enclave) could recover an RSA private key after observing the victim
    performing a single private-key operation.
  * An adversary with access to precise enough timing information (typically, a
    co-located process) could recover a Curve25519 or Curve448 static ECDH key
    after inputting a chosen public key and observing the victim performing the
    corresponding private-key operation.
  Bugfix
  * Add printf function attributes to mbedtls_debug_print_msg to ensure we
    get printf format specifier warnings.
  * Fix premature fopen() call in mbedtls_entropy_write_seed_file which may
    lead to seed file corruption in the case where the path to the seed file is
    equal to MBEDTLS_PLATFORM_STD_NV_SEED_FILE.
  * PSA functions other than psa_open_key now return PSA_ERROR_INVALID_HANDLE
    rather than PSA_ERROR_DOES_NOT_EXIST for an invalid handle, bringing them
    in line with version 1.0.0 of the specification.
  * PSA functions creating a key now return PSA_ERROR_INVALID_ARGUMENT rather
    than PSA_ERROR_INVALID_HANDLE when the identifier specified for the key
    to create is not valid, bringing them in line with version 1.0.0 of the
    specification.
  * Fix some cases in the bignum module where the library constructed an
    unintended representation of the value 0 which was not processed
    correctly by some bignum operations. This could happen when
    mbedtls_mpi_read_string() was called on "-0", or when
    mbedtls_mpi_mul_mpi() and mbedtls_mpi_mul_int() was called with one of
    the arguments being negative and the other being 0.
  * Fix a bug in ECDSA that would cause it to fail when the hash is all-bits
    zero.
  * Fix a compilation error when MBEDTLS_ECP_RANDOMIZE_MXZ_ALT is
    defined.
  * Fix an incorrect error code when parsing a PKCS#8 private key.
  * In a TLS client, enforce the Diffie-Hellman minimum parameter size
    set with mbedtls_ssl_conf_dhm_min_bitlen() precisely. Before, the
    minimum size was rounded down to the nearest multiple of 8.
  * In library/net_sockets.c, _POSIX_C_SOURCE and _XOPEN_SOURCE are
    defined to specific values.  If the code is used in a context
    where these are already defined, this can result in a compilation
    error.  Instead, assume that if they are defined, the values will
    be adequate to build Mbed TLS.
  * The cipher suite TLS-RSA-WITH-CAMELLIA-256-GCM-SHA384 was not available
    when SHA-1 was disabled and was offered when SHA-1 was enabled but SHA-384
    was disabled. Fix the dependency.
  * Do not offer SHA384 cipher suites when SHA-384 is disabled.
  * With MBEDTLS_PSA_CRYPTO_C disabled, some functions were getting built
    nonetheless, resulting in undefined reference errors when building a
    shared library.
  * Fix test suite code on platforms where int32_t is not int, such as
    Arm Cortex-M.
  * Fix some issues affecting MBEDTLS_ARIA_ALT implementations: a misplaced
    directive in a header and a missing initialization in the self-test.
  * Fix a missing initialization in the Camellia self-test, affecting
    MBEDTLS_CAMELLIA_ALT implementations.
  * Restore the ability to configure PSA via Mbed TLS options to support RSA
    key pair operations but exclude RSA key generation. When MBEDTLS_GENPRIME
    is not defined PSA will no longer attempt to use mbedtls_rsa_gen_key().
  * Fix a regression introduced in 2.24.0 which broke (D)TLS CBC ciphersuites
    (when the encrypt-then-MAC extension is not in use) with some ALT
    implementations of the underlying hash (SHA-1, SHA-256, SHA-384), causing
    the affected side to wrongly reject valid messages.
  * Remove outdated check-config.h check that prevented implementing the
    timing module on Mbed OS.
  * Fix PSA_ALG_TLS12_PRF and PSA_ALG_TLS12_PSK_TO_MS being too permissive
    about missing inputs.
  * Fix a resource leak in a test suite with an alternative AES
    implementation.
  * Fix a crash in mbedtls_mpi_debug_mpi on a bignum having 0 limbs. This
    could notably be triggered by setting the TLS debug level to 3 or above
    and using a Montgomery curve for the key exchange.
  * psa_verify_hash() was relying on implementation-specific behavior of
    mbedtls_rsa_rsassa_pss_verify() and was causing failures in some _ALT
    implementations. This reliance is now removed.
  * Disallow inputs of length different from the corresponding hash when
    signing or verifying with PSA_ALG_RSA_PSS (The PSA Crypto API mandates
    that PSA_ALG_RSA_PSS uses the same hash throughout the algorithm.)
  * Fix a null pointer dereference when mbedtls_mpi_exp_mod() was called with
    A=0 represented with 0 limbs. Up to and including Mbed TLS 2.26, this bug
    could not be triggered by code that constructed A with one of the
    mbedtls_mpi_read_xxx functions (including in particular TLS code) since
    those always built an mpi object with at least one limb.
  * Fix mbedtls_mpi_gcd(G,A,B) when the value of B is zero. This had no
    effect on Mbed TLS's internal use of mbedtls_mpi_gcd(), but may affect
    applications that call mbedtls_mpi_gcd() directly.
  * The PSA API no longer allows the creation or destruction of keys with a
    read-only lifetime. The persistence level PSA_KEY_PERSISTENCE_READ_ONLY
    can now only be used as intended, for keys that cannot be modified through
    normal use of the API.
  * When MBEDTLS_PSA_CRYPTO_SPM is enabled, crypto_spe.h was not included
    in all the right places. Include it from crypto_platform.h, which is
    the natural place.
  * mbedtls_pk_sign() and mbedtls_pk_verify() and their extended and
    restartable variants now always honor the specified hash length if
    nonzero. Before, for RSA, hash_len was ignored in favor of the length of
    the specified hash algorithm.
  * Fix which alert is sent in some cases to conform to the
    applicable RFC: on an invalid Finished message value, an
    invalid max_fragment_length extension, or an
    unsupported extension used by the server.
  * Correct (change from 12 to 13 bytes) the value of the macro describing the
    maximum nonce length returned by psa_aead_generate_nonce().
  Changes
  * Add extra printf compiler warning flags to builds.
  * Fix memsan build false positive in x509_crt.c with Clang 11
  * Fix the setting of the read timeout in the DTLS sample programs.
  * Remove the AES sample application programs/aes/aescrypt2 which shows
    bad cryptographic practice.
  * Alternative implementations of CMAC may now opt to not support 3DES as a
    CMAC block cipher, and still pass the CMAC self test.
  * Remove configs/config-psa-crypto.h, which was identical to the default
    configuration except for having some extra cryptographic mechanisms
    enabled and for unintended differences. This configuration was primarily
    intended to demonstrate the PSA API, and lost most of its usefulness when
    MBEDTLS_PSA_CRYPTO_C became enabled by default.
  * When building the test suites with GNU make, invoke python3 or python, not
    python2, which is no longer supported upstream.
  * When using session cache based session resumption on the server,
    double-check that custom session cache implementations return
    sessions which are consistent with the negotiated ciphersuite
    and compression method.
  * Fix build failure on MinGW toolchain when __USE_MING_ANSI_STDIO is on.
    When that flag is on, standard GNU C printf format specifiers
    should be used.
  * Reduce the default value of MBEDTLS_ECP_WINDOW_SIZE. This reduces RAM usage
    during ECC operations at a negligible performance cost.
  * mbedtls_mpi_read_binary(), mbedtls_mpi_read_binary_le() and
    mbedtls_mpi_read_string() now construct an mbedtls_mpi object with 0 limbs
    when their input has length 0. Note that this is an implementation detail
    and can change at any time, so this change should be transparent, but it
    may result in mbedtls_mpi_write_binary() or mbedtls_mpi_write_string()
    now writing an empty string where it previously wrote one or more
    zero digits when operating from values constructed with an mpi_read
    function and some mpi operations.
  * Implicitly add PSA_KEY_USAGE_SIGN_MESSAGE key usage policy flag when
    PSA_KEY_USAGE_SIGN_HASH flag is set and PSA_KEY_USAGE_VERIFY_MESSAGE flag
    when PSA_KEY_USAGE_VERIFY_HASH flag is set. This usage flag extension
    is also applied when loading a key from storage.
  * Remove mbedtls-4237.patch upstream
  * Library soname bump to libmbedcrypto7</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1642075200">- Update to 2.28.0: (bsc#1193979, CVE-2021-45450)
  API changes
  * Some fields of mbedtls_ssl_session and mbedtls_ssl_config are in a
  different order. This only affects applications that define such
  structures directly or serialize them.
  Requirement changes
  * Sign-magnitude and one's complement representations for signed integers are
  not supported. Two's complement is the only supported representation.
  Removals
  * Remove config option MBEDTLS_TLS_DEFAULT_ALLOW_SHA1_IN_CERTIFICATES,
  which allowed SHA-1 in the default TLS configuration for certificate
  signing. It was intended to facilitate the transition in environments
  with SHA-1 certificates. SHA-1 is considered a weak message digest and
  its use constitutes a security risk.
  * Remove the partial support for running unit tests via Greentea on Mbed OS,
  which had been unmaintained since 2018.
  Features
  * The identifier of the CID TLS extension can be configured by defining
  MBEDTLS_TLS_EXT_CID at compile time.
  * Warn if errors from certain functions are ignored. This is currently
  supported on GCC-like compilers and on MSVC and can be configured through
  the macro MBEDTLS_CHECK_RETURN. The warnings are always enabled
  (where supported) for critical functions where ignoring the return
  value is almost always a bug. Enable the new configuration option
  MBEDTLS_CHECK_RETURN_WARNING to get warnings for other functions. This
  is currently implemented in the AES, DES and md modules, and will be
  extended to other modules in the future.
  * Add missing PSA macros declared by PSA Crypto API 1.0.0:
  PSA_ALG_IS_SIGN_HASH, PSA_ALG_NONE, PSA_HASH_BLOCK_LENGTH, PSA_KEY_ID_NULL.
  * Add new API mbedtls_ct_memcmp for constant time buffer comparison.
  * Add PSA API definition for ARIA.
  Security
  * Zeroize several intermediate variables used to calculate the expected
  value when verifying a MAC or AEAD tag. This hardens the library in
  case the value leaks through a memory disclosure vulnerability. For
  example, a memory disclosure vulnerability could have allowed a
  man-in-the-middle to inject fake ciphertext into a DTLS connection.
  * In psa_cipher_generate_iv() and psa_cipher_encrypt(), do not read back
  from the output buffer. This fixes a potential policy bypass or decryption
  oracle vulnerability if the output buffer is in memory that is shared with
  an untrusted application.
  * Fix a double-free that happened after mbedtls_ssl_set_session() or
  mbedtls_ssl_get_session() failed with MBEDTLS_ERR_SSL_ALLOC_FAILED
  (out of memory). After that, calling mbedtls_ssl_session_free()
  and mbedtls_ssl_free() would cause an internal session buffer to
  be free()'d twice.
  Bugfix
  * Stop using reserved identifiers as local variables. Fixes #4630.
  * The GNU makefiles invoke python3 in preference to python except on Windows.
  * The check was accidentally not performed when cross-compiling for Windows
  on Linux. Fix this. Fixes #4774.
  * Prevent divide by zero if either of PSA_CIPHER_ENCRYPT_OUTPUT_SIZE() or
  PSA_CIPHER_UPDATE_OUTPUT_SIZE() were called using an asymmetric key type.
  * Fix a parameter set but unused in psa_crypto_cipher.c. Fixes #4935.
  * Don't use the obsolete header path sys/fcntl.h in unit tests.
  These header files cause compilation errors in musl.
  Fixes #4969.
  * Fix missing constraints on x86_64 and aarch64 assembly code
  for bignum multiplication that broke some bignum operations with
  (at least) Clang 12.
  Fixes #4116, #4786, #4917, #4962.
  * Fix mbedtls_cipher_crypt: AES-ECB when MBEDTLS_USE_PSA_CRYPTO is enabled.
  * Failures of alternative implementations of AES or DES single-block
  functions enabled with MBEDTLS_AES_ENCRYPT_ALT, MBEDTLS_AES_DECRYPT_ALT,
  MBEDTLS_DES_CRYPT_ECB_ALT or MBEDTLS_DES3_CRYPT_ECB_ALT were ignored.
  This does not concern the implementation provided with Mbed TLS,
  where this function cannot fail, or full-module replacements with
  MBEDTLS_AES_ALT or MBEDTLS_DES_ALT. Reported by Armelle Duboc in #1092.
  * Some failures of HMAC operations were ignored. These failures could only
  happen with an alternative implementation of the underlying hash module.
  * Fix the error returned by psa_generate_key() for a public key. Fixes #4551.
  * Fix the build of sample programs when neither MBEDTLS_ERROR_C nor
  MBEDTLS_ERROR_STRERROR_DUMMY is enabled.
  * Fix PSA_ALG_RSA_PSS verification accepting an arbitrary salt length.
  This algorithm now accepts only the same salt length for verification
  that it produces when signing, as documented. Use the new algorithm
  PSA_ALG_RSA_PSS_ANY_SALT to accept any salt length. Fixes #4946.
  * The existing predicate macro name PSA_ALG_IS_HASH_AND_SIGN is now reserved
  for algorithm values that fully encode the hashing step, as per the PSA
  Crypto API specification. This excludes PSA_ALG_RSA_PKCS1V15_SIGN_RAW and
  PSA_ALG_ECDSA_ANY. The new predicate macro PSA_ALG_IS_SIGN_HASH covers
  all algorithms that can be used with psa_{sign,verify}_hash(), including
  these two.
  * Fix issue in Makefile on Linux with SHARED=1, that caused shared libraries
  not to list other shared libraries they need.
  * Fix a bug in mbedtls_gcm_starts() when the bit length of the iv
  exceeds 2^32. Fixes #4884.
  * Fix an uninitialized variable warning in test_suite_ssl.function with GCC
  version 11.
  * Fix the build when no SHA2 module is included. Fixes #4930.
  * Fix the build when only the bignum module is included. Fixes #4929.
  * Fix a potential invalid pointer dereference and infinite loop bugs in
  pkcs12 functions when the password is empty. Fix the documentation to
  better describe the inputs to these functions and their possible values.
  Fixes #5136.
  * The key usage flags PSA_KEY_USAGE_SIGN_MESSAGE now allows the MAC
  operations psa_mac_compute() and psa_mac_sign_setup().
  * The key usage flags PSA_KEY_USAGE_VERIFY_MESSAGE now allows the MAC
  operations psa_mac_verify() and psa_mac_verify_setup().
  Changes
  * Set config option MBEDTLS_TLS_DEFAULT_ALLOW_SHA1_IN_KEY_EXCHANGE to be
  disabled by default.
  * Improve the performance of base64 constant-flow code. The result is still
  slower than the original non-constant-flow implementation, but much faster
  than the previous constant-flow implementation. Fixes #4814.
  * Indicate in the error returned if the nonce length used with
  ChaCha20-Poly1305 is invalid, and not just unsupported.
  * The mbedcrypto library includes a new source code module constant_time.c,
  containing various functions meant to resist timing side channel attacks.
  * This module does not have a separate configuration option, and functions
  from this module will be included in the build as required. Currently
  most of the interface of this module is private and may change at any
  time.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1642420800">- Fix baselib.conf</changelog>
  <changelog author="Alexander Bergmann &lt;abergmann@suse.com&gt;" date="1671624000">- Fix potential heap buffer overread and overwrite in DTLS if
  MBEDTLS_SSL_DTLS_CONNECTION_ID is enabled and
  MBEDTLS_SSL_CID_IN_LEN_MAX &gt; 2 * MBEDTLS_SSL_CID_OUT_LEN_MAX.
  (bsc#1206576, CVE-2022-46393).
  Add: mbedtls-CVE-2022-46393.patch</changelog>
</package>
<package pkgid="ce4f6bfba982903e90c23dd3192e8bbb4aba53eafc5e530a67b0450844de437f" name="mbedtls-devel" arch="aarch64">
  <version epoch="0" ver="2.28.0" rel="bp154.2.3.1"/>
  <changelog author="mpluskal@suse.com" date="1531137600">- Update to version 2.11.0:
  * Features
    + Added support for the XTS block cipher mode with AES (AES-XTS). Contributed by Aorimn in pull request #414.
    + Implemented the HMAC-based extract-and-expand key derivation function (HKDF) per RFC 5869. Contributed by Thomas Fossati.
    + For TLS servers, added support for offloading private key operations to an external cryptoprocessor. Private key operations can be asynchronous to allow non-blocking operation of the TLS server stack.
    + Added support for ARIA cipher (RFC 5794) and associated TLS ciphersuites (RFC 6209). ARIA is disabled by default. To enable, see MBEDTLS_ARIA_C in config.h.
    + Added support for the CCM* block cipher mode as defined in IEEE Std 802.15.4.
    + Added an additional block mode, OFB (Output Feedback) per NIST SP 800-38a, to the AES module and cipher abstraction module.
  * API Changes
    + Mbed TLS 2.11.0 maintains source code compatibility with the last minor version, Mbed TLS 2.9.0, but extends the interface with additional capabilities. Mbed TLS 2.11.0 modifies the ABI and increases the SOVERSION.
  * Bugfix
    + Fixed the cert_write example to handle certificates signed with elliptic curves as well as RSA. Fixes #777 found by dbedev.
    + Fixed the redefinition of _WIN32_WINNT, to avoid overriding a definition used by user applications. Found and fixed by Fabio Alessandrelli.
    + Fixed compilation warnings with the IAR toolchain on 32-bit platforms. Reported by rahmanih in #683.
    + Fixed an issue with MicroBlaze support in bn_mul.h which was causing the build to fail. Found by zv-io. Fixes #1651.
    + Fixed braces in mbedtls_memory_buffer_alloc_status(). Found by sbranden in #552.
    + Added the macro MBEDTLS_X509_MAX_FILE_PATH_LEN that enables the user to configure the maximum length of a file path that can be buffered when calling mbedtls_x509_crt_parse_path(). Fixes #492.
    + Fixed redundant declaration of mbedtls_ssl_list_ciphersuites. Raised by TrinityTonic in #1359.
- Changes for version 2.9.0:
  + Security
    + Fixed an issue in the X.509 module which could lead to a buffer overread during certificate validation. Additionally, the issue could also lead to unnecessary callback checks being made or to some validation checks to be omitted. The overread could be triggered remotely, while the other issues would require a non DER-compliant certificate to be correctly signed by a trusted CA, or a trusted CA with a non DER-compliant certificate. Found by luocm. Fixes #825.
    + Fixed the buffer length assertion in the ssl_parse_certificate_request() function which could lead to an arbitrary overread of the message buffer. The overreads could be caused by receiving a malformed algorithms section which was too short. In builds with debug output, this overread data was output with the debug data.
    + Fixed a client-side bug in the validation of the server's ciphersuite choice which could potentially lead to the client accepting a ciphersuite it didn't offer or a ciphersuite that could not be used with the TLS or DTLS version chosen by the server. This could lead to corruption of internal data structures for some configurations.
  * Features
    + Added an option of MBEDTLS_AES_FEWER_TABLES, to dynamically compute smaller AES tables during runtime, thereby reducing the RAM/ROM footprint by ~6KiB. Suggested and contributed by jkivilin.
    + Added initial support for Curve448 (RFC 7748). So far only mbedtls_ecp_mul() and ECDH primitive functions (mbedtls_ecdh_gen_public(), mbedtls_ecdh_compute_shared()) are supported for now. Contributed by Nicholas Wilson.
  * API Changes
    + Mbed TLS 2.9.0 maintains source code and binary compatibility with the last minor version, Mbed TLS 2.8.0, but extends the interface with additional capabilities.
    + Extended the API with the function of mbedtls_net_poll() to allow user applications to wait for a network context to become ready before reading or writing.
    + Added the function mbedtls_ssl_check_pending() to the public API to allow a check for whether more more data is pending to be processed in the internal message buffers. This function is necessary to determine the underlying transport when event-driven IO is used.
  * Bugfix
    + Fixed a spurious uninitialized variable warning in cmac.c. Fix independently contributed by Brian J Murray and David Brown.
    + Added missing dependencies in test suites that led to build failures in configurations that omit certain hashes or public-key algorithms. Fixes #1040.
    + Fixed a C89 incompatibility issue in benchmark.c. Contributed by Brendan Shanks. Fixes #1353.
    + Added missing dependencies for MBEDTLS_HAVE_TIME_DATE and MBEDTLS_VERSION_FEATURES in some test suites. Contributed by Deomid Ryabkov. Fixes #1299, #1475.
    + Fixed the Makefile build process for building shared libraries on Mac OS X. Fixed by mnacamura.
    + Fixed parsing of PKCS#8 encoded Elliptic Curve keys. Previously Mbed TLS was unable to parse keys which had only the optional parameters field of the ECPrivateKey structure. Found by Jethro Beekman, fixed in #1379.
    + Added an optimisation to return the plaintext data more quickly on unpadded CBC decryption, as stated in the mbedtls_cipher_update() documentation. Contributed by Andy Leiserson.
    + Fixed the overriding and ignoring of return values when parsing and writing to a file in the pk_sign program. Found by kevlut in #1142.
    + Added restrictions to the usage of the error code MBEDTLS_ERR_SSL_WANT_READ to situations where data needs to be fetched from the underlying transport in order to make progress. Previously, this error code was also occasionally returned when unexpected messages were being discarded, ignoring that further messages could potentially already be pending to be processed in the internal buffers; these cases led to deadlocks when event-driven I/O was used. Found and reported by Hubert Mis in #772.
    + Fixed buffer length assertions in the ssl_parse_certificate_request() function which led to a potential one byte overread of the message buffer.
    + Fixed invalid buffer sizes being passed to zlib during record compression and decompression.
    + Raised the soversion of libmbedcrypto to match the soversion of the maintained 2.7 branch. The soversion was increased in Mbed TLS version 2.7.1 to reflect breaking changes in that release, but the increment was missed in 2.8.0 and later releases outside of the 2.7 branch.</changelog>
  <changelog author="mpluskal@suse.com" date="1535025600">- Update to version 2.12.0:
  * Security
    + Fixed a vulnerability in the TLS ciphersuites based on use of CBC and SHA-384 in DTLS/TLS 1.0 to 1.2, that allowed an active network attacker to partially recover the plaintext of messages under certains conditions by exploiting timing side-channels.
    + Fixed a vulnerability in TLS ciphersuites based on CBC, in DTLS/TLS 1.0 to 1.2, that allowed a local attacker, with the ability to execute code on the local machine as well as to manipulate network packets, to partially recover the plaintext of messages under certain conditions by using a cache attack targetting an internal MD/SHA buffer.
    + Added a counter-measure against a vulnerability in TLS ciphersuites based on CBC, in DTLS/TLS 1.0 to 1.2, that allowed a local attacker with the ability to execute code on the local machine as well as manipulate network packets, to partially recover the plaintext of messages certain conditions (see previous entry) by using a cache attack targeting the SSL input record buffer.
  * Features
    + Added new cryptographic primitives, the stream cipher Chacha20, one-time authenticator Poly1305 and AEAD construct Chacha20-Poly1305, as defined in RFC 7539. Contributed by Daniel King.
    + Added support for the CHACHA20-POLY1305 ciphersuites from RFC 7905.
    + Made the receive and transmit buffers independently configurable in size, for situations where the outgoing buffer can be fixed at a smaller size than the incoming buffer
    + Added support for the AES based key wrapping modes defined by NIST SP 800-38F algorithms KW and KWP and by RFC's 3394 and 5649.
    + Added platform support for the Haiku OS.
  * Bugfix
    + Fixed the key_app_writer example which was creating an invalid ASN.1 tag by writing an additional leading zero byte. Found by Aryeh R. #1257.
    + Fixed a C++ compilation error, caused by a variable named new. Found and fixed by Hirotaka Niisato. #1783.
    + Fixed the "no symbols" warning issued by ranlib when building on Mac OS X. Fix contributed by tabascoeye.
    + Clarified documentation for mbedtls_ssl_write() to include 0 as a valid return value. Found by @davidwu2000. #839.
    + Fixed a memory leak in mbedtls_x509_csr_parse(). Found and fixed by catenacyber, Philippe Antoine. #1623.
    + Added length checks to some TLS parsing functions. Found and fixed by Philippe Antoine from Catena cyber. #1663.
    + Remove unused headers included in x509.c. Found by Chris Hanson and fixed by Brendan Shanks. #992.
    + Fixed compilation error when MBEDTLS_ARC4_C is disabled and MBEDTLS_CIPHER_NULL_CIPHER is enabled. Found by TrinityTonic in #1719.
    + Fixed the inline assembly for the MPI multiply helper function for i386 and i386 with SSE2. Found by László Langó. #1550.
    + Fixed the namespacing in header files. Remove the mbedtls namespacing in the #include in the header files. #857.
    + Fixed a compiler warning of 'use before initialisation' in mbedtls_pk_parse_key(). Found by Martin Boye Petersen and fixed by Dawid Drozd.#1098.
    + Fixed decryption of zero length messages (which contain all padding) when a CBC based ciphersuite was used together with Encrypt-then-MAC.
    + Fixed the ssl_client2 example to send application data with 0-length content when the request_size argument is set to 0 as stated in the documentation. #1833.
    + Corrected the documentation for mbedtls_ssl_get_session(). This API has deep copy of the session, and the peer certificate is not lost. #926.
    + Fixed issues when building to the C99 standard, using -std=c99. Fixed by Nick Wilson.
  * Changes
    + Fails when receiving a TLS alert message with an invalid length, or invalid zero-length messages when using TLS 1.2. Contributed by Espressif Systems.
    + Changed the default behaviour of mbedtls_hkdf_extract() to return an error when calling with a NULL salt and non-zero salt length. Contributed by Brian J Murray
    + Change the shebang line in Perl scripts to look up perl in the PATH. Contributed by fbrosson.
    + Allow overriding the time on Windows via the platform-time abstraction. Fixed by Nick Wilson.
    + Use gmtime_r/gmtime_s for thread-safety. Fixed by Nick Wilson.</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1544529600">- Update to version 2.14.1: [bsc#1118727, CVE-2018-19608]
  Security
  * Fix timing variations and memory access variations in RSA PKCS#1 v1.5
    decryption that could lead to a Bleichenbacher-style padding oracle
    attack. In TLS, this affects servers that accept ciphersuites based on
    RSA decryption (i.e. ciphersuites whose name contains RSA but not
    (EC)DH(E)). Discovered by Eyal Ronen (Weizmann Institute),  Robert Gillham
    (University of Adelaide), Daniel Genkin (University of Michigan),
    Adi Shamir (Weizmann Institute), David Wong (NCC Group), and Yuval Yarom
    (University of Adelaide, Data61). The attack is described in more detail
    in the paper available here: http://cat.eyalro.net/cat.pdf  CVE-2018-19608
  * In mbedtls_mpi_write_binary(), don't leak the exact size of the number
    via branching and memory access patterns. An attacker who could submit
    a plaintext for RSA PKCS#1 v1.5 decryption but only observe the timing
    of the decryption and not its result could nonetheless decrypt RSA
    plaintexts and forge RSA signatures. Other asymmetric algorithms may
    have been similarly vulnerable. Reported by Eyal Ronen, Robert Gillham,
    Daniel Genkin, Adi Shamir, David Wong and Yuval Yarom.
  * Wipe sensitive buffers on the stack in the CTR_DRBG and HMAC_DRBG
    modules.
  API Changes
  * The new functions mbedtls_ctr_drbg_update_ret() and
    mbedtls_hmac_drbg_update_ret() are similar to mbedtls_ctr_drbg_update()
    and mbedtls_hmac_drbg_update() respectively, but the new functions
    report errors whereas the old functions return void. We recommend that
    applications use the new functions.
- Version 2.14.0:
  Security
  * Fix overly strict DN comparison when looking for CRLs belonging to a
    particular CA. This previously led to ignoring CRLs when the CRL's issuer
    name and the CA's subject name differed in their string encoding (e.g.,
    one using PrintableString and the other UTF8String) or in the choice of
    upper and lower case. Reported by Henrik Andersson of Bosch GmbH in issue
    [#1784].
  * Fix a flawed bounds check in server PSK hint parsing. In case the
    incoming message buffer was placed within the first 64KiB of address
    space and a PSK-(EC)DHE ciphersuite was used, this allowed an attacker
    to trigger a memory access up to 64KiB beyond the incoming message buffer,
    potentially leading to an application crash or information disclosure.
  * Fix mbedtls_mpi_is_prime() to use more rounds of probabilistic testing. The
    previous settings for the number of rounds made it practical for an
    adversary to construct non-primes that would be erroneously accepted as
    primes with high probability. This does not have an impact on the
    security of TLS, but can matter in other contexts with numbers chosen
    potentially by an adversary that should be prime and can be validated.
    For example, the number of rounds was enough to securely generate RSA key
    pairs or Diffie-Hellman parameters, but was insufficient to validate
    Diffie-Hellman parameters properly.
    See "Prime and Prejudice" by by Martin R. Albrecht and Jake Massimo and
    Kenneth G. Paterson and Juraj Somorovsky.
  Features
  * Add support for temporarily suspending expensive ECC computations after
    some configurable amount of operations. This is intended to be used in
    constrained, single-threaded systems where ECC is time consuming and can
    block other operations until they complete. This is disabled by default,
    but can be enabled by MBEDTLS_ECP_RESTARTABLE at compile time and
    configured by mbedtls_ecp_set_max_ops() at runtime. It applies to the new
    xxx_restartable functions in ECP, ECDSA, PK and X.509 (CRL not supported
    yet), and to existing functions in ECDH and SSL (currently only
    implemented client-side, for ECDHE-ECDSA ciphersuites in TLS 1.2,
    including client authentication).
  * Add support for Arm CPU DSP extensions to accelerate asymmetric key
    operations. On CPUs where the extensions are available, they can accelerate
    MPI multiplications used in ECC and RSA cryptography. Contributed by
    Aurelien Jarno.
  * Extend RSASSA-PSS signature to allow a smaller salt size. Previously, PSS
    signature always used a salt with the same length as the hash, and returned
    an error if this was not possible. Now the salt size may be up to two bytes
    shorter. This allows the library to support all hash and signature sizes
    that comply with FIPS 186-4, including SHA-512 with a 1024-bit key.
  * Add support for 128-bit keys in CTR_DRBG. Note that using keys shorter
    than 256 bits limits the security of generated material to 128 bits.
  API Changes
  * Add a common error code of `MBEDTLS_ERR_PLATFORM_FEATURE_UNSUPPORTED` for
    a feature that is not supported by underlying alternative
    implementations implementing cryptographic primitives. This is useful for
    hardware accelerators that don't implement all options or features.
  New deprecations
  * All module specific errors following the form
    MBEDTLS_ERR_XXX_FEATURE_UNAVAILABLE that indicate a feature is not
    supported are deprecated and are now replaced by the new equivalent
    platform error.
  * All module specific generic hardware acceleration errors following the
    form MBEDTLS_ERR_XXX_HW_ACCEL_FAILED that are deprecated and are replaced
    by the equivalent plaform error.
  * Deprecate the function mbedtls_mpi_is_prime() in favor of
    mbedtls_mpi_is_prime_ext() which allows specifying the number of
    Miller-Rabin rounds.
  Bugfix
  * Fix wrong order of freeing in programs/ssl/ssl_server2 example
    application leading to a memory leak in case both
    MBEDTLS_MEMORY_BUFFER_ALLOC_C and MBEDTLS_MEMORY_BACKTRACE are set.
    Fixes #2069.
  * Fix a bug in the update function for SSL ticket keys which previously
    invalidated keys of a lifetime of less than a 1s. Fixes #1968.
  * Fix failure in hmac_drbg in the benchmark sample application, when
    MBEDTLS_THREADING_C is defined. Found by TrinityTonic, #1095
  * Fix a bug in the record decryption routine ssl_decrypt_buf()
    which lead to accepting properly authenticated but improperly
    padded records in case of CBC ciphersuites using Encrypt-then-MAC.
  * Fix memory leak and freeing without initialization in the example
    program programs/x509/cert_write. Fixes #1422.
  * Ignore IV in mbedtls_cipher_set_iv() when the cipher mode is
    MBEDTLS_MODE_ECB. Found by ezdevelop. Fixes #1091.
  * Zeroize memory used for buffering or reassembling handshake messages
    after use.
  * Use `mbedtls_platform_zeroize()` instead of `memset()` for zeroization
    of sensitive data in the example programs aescrypt2 and crypt_and_hash.
  * Change the default string format used for various X.509 DN attributes to
    UTF8String. Previously, the use of the PrintableString format led to
    wildcards and non-ASCII characters being unusable in some DN attributes.
    Reported by raprepo in #1860 and by kevinpt in #468. Fix contributed by
    Thomas-Dee.
  * Fix compilation failure for configurations which use compile time
    replacements of standard calloc/free functions through the macros
    MBEDTLS_PLATFORM_CALLOC_MACRO and MBEDTLS_PLATFORM_FREE_MACRO.
    Reported by ole-de and ddhome2006. Fixes #882, #1642 and #1706.
  Changes
  * Removed support for Yotta as a build tool.
  * Add tests for session resumption in DTLS.
  * Close a test gap in (D)TLS between the client side and the server side:
    test the handling of large packets and small packets on the client side
    in the same way as on the server side.
  * Change the dtls_client and dtls_server samples to work by default over
    IPv6 and optionally by a build option over IPv4.
  * Change the use of Windows threading to use Microsoft Visual C++ runtime
    calls, rather than Win32 API calls directly. This is necessary to avoid
    conflict with C runtime usage. Found and fixed by irwir.
  * Remember the string format of X.509 DN attributes when replicating
    X.509 DNs. Previously, DN attributes were always written in their default
    string format (mostly PrintableString), which could lead to CRTs being
    created which used PrintableStrings in the issuer field even though the
    signing CA used UTF8Strings in its subject field; while X.509 compliant,
    such CRTs were rejected in some applications, e.g. some versions of
    Firefox, curl and GnuTLS. Reported in #1033 by Moschn. Fix contributed by
    Thomas-Dee.
  * Improve documentation of mbedtls_ssl_get_verify_result().
    Fixes #517 reported by github-monoculture.
  * Add MBEDTLS_MPI_GEN_PRIME_FLAG_LOW_ERR flag to mbedtls_mpi_gen_prime() and
    use it to reduce error probability in RSA key generation to levels mandated
    by FIPS-186-4.
- Version 2.13.1
  API Changes
  * Extend the platform module with an abstraction mbedtls_platform_gmtime_r()
    whose implementation should behave as a thread-safe version of gmtime().
    This allows users to configure such an implementation at compile time when
    the target system cannot be deduced automatically, by setting the option
    MBEDTLS_PLATFORM_GMTIME_R_ALT. At this stage Mbed TLS is only able to
    automatically select implementations for Windows and POSIX C libraries.
  Bugfix
  * Fix build failures on platforms where only gmtime() is available but
    neither gmtime_r() nor gmtime_s() are present. Fixes #1907.
- Version 2.13.0
  Security
  * Fix an issue in the X.509 module which could lead to a buffer overread
    during certificate extensions parsing. In case of receiving malformed
    input (extensions length field equal to 0), an illegal read of one byte
    beyond the input buffer is made. Found and analyzed by Nathan Crandall.
  Features
  * Add support for fragmentation of outgoing DTLS handshake messages. This
    is controlled by the maximum fragment length as set locally or negotiated
    with the peer, as well as by a new per-connection MTU option, set using
    mbedtls_ssl_set_mtu().
  * Add support for auto-adjustment of MTU to a safe value during the
    handshake when flights do not get through (RFC 6347, section 4.1.1.1,
    last paragraph).
  * Add support for packing multiple records within a single datagram,
    enabled by default.
  * Add support for buffering out-of-order handshake messages in DTLS.
    The maximum amount of RAM used for this can be controlled by the
    compile-time constant MBEDTLS_SSL_DTLS_MAX_BUFFERING defined
    in mbedtls/config.h.
  API Changes
  * Add function mbedtls_ssl_set_datagram_packing() to configure
    the use of datagram packing (enabled by default).
  Bugfix
  * Fix a potential memory leak in mbedtls_ssl_setup() function. An allocation
    failure in the function could lead to other buffers being leaked.
  * Fixes an issue with MBEDTLS_CHACHAPOLY_C which would not compile if
    MBEDTLS_ARC4_C and MBEDTLS_CIPHER_NULL_CIPHER weren't also defined. #1890
  * Fix a memory leak in ecp_mul_comb() if ecp_precompute_comb() fails.
    Fix contributed by Espressif Systems.
  * Add ecc extensions only if an ecc based ciphersuite is used.
    This improves compliance to RFC 4492, and as a result, solves
    interoperability issues with BouncyCastle. Raised by milenamil in #1157.
  * Replace printf with mbedtls_printf in the ARIA module. Found by
    TrinityTonic in #1908.
  * Fix potential use-after-free in mbedtls_ssl_get_max_frag_len()
    and mbedtls_ssl_get_record_expansion() after a session reset. Fixes #1941.
  * Fix a bug that caused SSL/TLS clients to incorrectly abort the handshake
    with TLS versions 1.1 and earlier when the server requested authentication
    without providing a list of CAs. This was due to an overly strict bounds
    check in parsing the CertificateRequest message,
    introduced in Mbed TLS 2.12.0. Fixes #1954.
  * Fix a miscalculation of the maximum record expansion in
    mbedtls_ssl_get_record_expansion() in case of ChachaPoly ciphersuites,
    or CBC ciphersuites in (D)TLS versions 1.1 or higher. Fixes #1913, #1914.
  * Fix undefined shifts with negative values in certificates parsing
    (found by Catena cyber using oss-fuzz)
  * Fix memory leak and free without initialization in pk_encrypt
    and pk_decrypt example programs. Reported by Brace Stout. Fixes #1128.
  * Remove redundant else statement. Raised by irwir. Fixes #1776.
  Changes
  * Copy headers preserving timestamps when doing a "make install".
    Contributed by xueruini.
  * Allow the forward declaration of public structs. Contributed by Dawid
    Drozd. Fixes #1215 raised by randombit.
  * Improve compatibility with some alternative CCM implementations by using
    CCM test vectors from RAM.
  * Add support for buffering of out-of-order handshake messages.
  * Add warnings to the documentation of the HKDF module to reduce the risk
    of misusing the mbedtls_hkdf_extract() and mbedtls_hkdf_expand()
    functions. Fixes #1775. Reported by Brian J. Murray.</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1544529601">- Library package version bumped to libmbedtls12</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1546862400">- Update to version 2.16.0:
  Features
  * Add a new config.h option of MBEDTLS_CHECK_PARAMS that enables validation of parameters in the API. This allows detection of obvious misuses of the API, such as passing NULL pointers. The API of existing functions hasn't changed, but requirements on parameters have been made more explicit in the documentation. See the corresponding API documentation for each function to see for which parameter values it is defined. This feature is disabled by default. See its API documentation in config.h for additional steps you have to take when enabling it.
  API Changes
  * The following functions in the random generator modules have been deprecated and replaced as shown below. The new functions change the return type from void to int to allow returning error codes when using MBEDTLS_&lt;MODULE&gt;_ALT for the underlying AES or message digest primitive. Fixes #1798. mbedtls_ctr_drbg_update() -&gt; mbedtls_ctr_drbg_update_ret() mbedtls_hmac_drbg_update() -&gt; mbedtls_hmac_drbg_update_ret()
  * Extend ECDH interface to enable alternative implementations.
  * Deprecate error codes of the form MBEDTLS_ERR_xxx_INVALID_KEY_LENGTH for ARIA, CAMELLIA and Blowfish. These error codes will be replaced by the more generic per-module error codes MBEDTLS_ERR_xxx_BAD_INPUT_DATA.
  * Additional parameter validation checks have been added for the following modules - AES, ARIA, Blowfish, CAMELLIA, CCM, GCM, DHM, ECP, ECDSA, ECDH, ECJPAKE, SHA, Chacha20 and Poly1305, cipher, pk, RSA, and MPI. Where modules have had parameter validation added, existing parameter checks may have changed. Some modules, such as Chacha20 had existing parameter validation whereas other modules had little. This has now been changed so that the same level of validation is present in all modules, and that it is now optional with the MBEDTLS_CHECK_PARAMS flag which by default is off. That means that checks which were previously present by default will no longer be.
  New deprecations
  * Deprecate mbedtls_ctr_drbg_update() and mbedtls_hmac_drbg_update() in favor of functions that can return an error code.
  Bugfix
  * Fix for Clang, which was reporting a warning for the bignum.c inline assembly for AMD64 targets creating string literals greater than those permitted by the ISO C99 standard. Found by Aaron Jones. Fixes #482.
  * Fix runtime error in mbedtls_platform_entropy_poll() when run through qemu user emulation. Reported and fix suggested by randombit. Fixes #1212.
  * Fix an unsafe bounds check when restoring an SSL session from a ticket. This could lead to a buffer overflow, but only in case ticket authentication was broken. Reported and fix suggested by Guido Vranken in #659.
  * Add explicit integer to enumeration type casts to example program programs/pkey/gen_key which previously led to compilation failure on some toolchains. Reported by phoenixmcallister. Fixes #2170.
  * Clarify documentation of mbedtls_ssl_set_own_cert() regarding the absence of check for certificate/key matching. Reported by Attila Molnar, #507.
  * Fix double initialization of ECC hardware that made some accelerators hang.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1567512000">- Update to version 2.16.2:
  * Security improvements and bugfixes
- Use ninja to for build</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1573646400">- Update to version 2.16.3:
  * Security improvements and bugfixes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1585828800">- Update to version 2.16.5:
  * Security improvements and bugfixes</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597665600">- update to 2.23.0:
  a lot of changes see https://github.com/ARMmbed/mbedtls/releases/tag/v2.23.0
  * Fix a side channel vulnerability in modular exponentiation that could reveal an RSA private key used in a secure enclave. Noticed by Sangho Lee, Ming-Wei Shih, Prasun Gera, Taesoo Kim and Hyesoon Kim (Georgia Institute of Technology); and Marcus Peinado (Microsoft Research). Reported by Raoul Strackx (Fortanix) in #3394.
  * Fix side channel in mbedtls_ecp_check_pub_priv() and mbedtls_pk_parse_key() / mbedtls_pk_parse_keyfile() (when loading a private key that didn't include the uncompressed public key), as well as mbedtls_ecp_mul() / mbedtls_ecp_mul_restartable() when called with a NULL f_rng argument. An attacker with access to precise enough timing and memory access information (typically an untrusted operating system attacking a secure enclave) could fully recover the ECC private key. Found and reported by Alejandro Cabrera Aldaya and Billy Brumley.
  * Fix issue in Lucky 13 counter-measure that could make it ineffective when hardware accelerators were used (using one of the MBEDTLS_SHAxxx_ALT macros). This would cause the original Lucky 13 attack to be possible in those configurations, allowing an active network attacker to recover plaintext after repeated timing measurements under some conditions. Reported and fix suggested by Luc Perneel in #3246.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1598875200">- Do not run testsuite in parallel - its not reliable</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1599480000">- Add workaround for failing builds (Python not found) due to
  https://gitlab.kitware.com/cmake/cmake/-/issues/21168</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1599652800">- update to 2.24.0:
  * see https://github.com/ARMmbed/mbedtls/releases/tag/v2.24.0
  * Fix a vulnerability in the verification of X.509 certificates when matching
  the expected common name (the cn argument of mbedtls_x509_crt_verify())
  with the actual certificate name: when the subjecAltName extension is
  present, the expected name was compared to any name in that extension
  regardless of its type. This means that an attacker could for example
  impersonate a 4-bytes or 16-byte domain by getting a certificate for the
  corresponding IPv4 or IPv6 (this would require the attacker to control that
  IP address, though). Similar attacks using other subjectAltName name types
  might be possible.
  * When checking X.509 CRLs, a certificate was only considered as revoked if
  its revocationDate was in the past according to the local clock if
  available. In particular, on builds without MBEDTLS_HAVE_TIME_DATE,
  certificates were never considered as revoked. On builds with
  MBEDTLS_HAVE_TIME_DATE, an attacker able to control the local clock (for
  example, an untrusted OS attacking a secure enclave) could prevent
  revocation of certificates via CRLs. Fixed by no longer checking the
  revocationDate field, in accordance with RFC 5280. Reported by yuemonangong
  in #3340. Reported independently and fixed by Raoul Strackx and Jethro
  * In (D)TLS record decryption, when using a CBC ciphersuites without the
  Encrypt-then-Mac extension, use constant code flow memory access patterns
  to extract and check the MAC. This is an improvement to the existing
  countermeasure against Lucky 13 attacks. The previous countermeasure was
  effective against network-based attackers, but less so against local
  attackers. The new countermeasure defends against local attackers, even if
  they have access to fine-grained measurements. In particular, this fixes a
  local Lucky 13 cache attack found and reported by Tuba Yavuz, Farhaan
  Fowze, Ken (Yihan) Bai, Grant Hernandez, and Kevin Butler (University of
  Florida) and Dave Tian (Purdue University).
  * Fix side channel in RSA private key operations and static (finite-field)
  Diffie-Hellman. An adversary with precise enough timing and memory access
  information (typically an untrusted operating system attacking a secure
  enclave) could bypass an existing counter-measure (base blinding) and
  potentially fully recover the private key.
  * Fix a 1-byte buffer overread in mbedtls_x509_crl_parse_der(). Credit to
  OSS-Fuzz for detecting the problem and to Philippe Antoine for pinpointing
  the problematic code.
  * Zeroising of plaintext buffers in mbedtls_ssl_read() to erase unused
  application data from memory.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1608638400">- update to 2.25.0:
  * This release of Mbed TLS provides bug fixes, minor enhancements and new
  features. This release includes fixes for security issues.
  * see https://github.com/ARMmbed/mbedtls/releases/tag/v2.25.0
  * The functions mbedtls_cipher_auth_encrypt() and
  mbedtls_cipher_auth_decrypt() would write past the minimum documented size
  of the output buffer when used with NIST_KW. As a result, code using those
  functions as documented with NIST_KW could have a buffer overwrite of up to
  15 bytes, with consequences ranging up to arbitrary code execution
  depending on the location of the output buffer.
  * Limit the size of calculations performed by mbedtls_mpi_exp_mod to
  MBEDTLS_MPI_MAX_SIZE to prevent a potential denial of service when generating
  Diffie-Hellman key pairs. Credit to OSS-Fuzz.
  * A failure of the random generator was ignored in mbedtls_mpi_fill_random(),
  which is how most uses of randomization in asymmetric cryptography (including
  key generation, intermediate value randomization and blinding) are implemented.
  This could cause failures or the silent use of non-random values. A random
  generator can fail if it needs reseeding and cannot not obtain entropy, or due
  to an internal failure (which, for Mbed TLS's own CTR_DRBG or HMAC_DRBG, can
  only happen due to a misconfiguration).
  * Fix a compliance issue whereby we were not checking the tag on the algorithm
  parameters (only the size) when comparing the signature in the description part
  of the cert to the real signature. This meant that a NULL algorithm parameters
  entry would look identical to an array of REAL (size zero) to the library and
  thus the certificate would be considered valid. However, if the parameters do
  not match in any way then the certificate should be considered invalid, and
  indeed OpenSSL marks these certs as invalid when mbedtls did not. Many thanks
  to guidovranken who found this issue via differential fuzzing and reported it
  in #3629.
  * Zeroising of local buffers and variables which are used for calculations in
  mbedtls_pkcs5_pbkdf2_hmac(), mbedtls_internal_sha*_process(),
  mbedtls_internal_md*_process() and mbedtls_internal_ripemd160_process()
  functions to erase sensitive data from memory. Reported by Johan Malmgren and
  Johan Uppman Bruce from Sectra.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1611057600">- Fix build for Leap targets
- Use upstream tarball name</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1616414400">- Update to 2.26.0: [bsc#1189589, CVE-2021-24119]
  * * This release of Mbed TLS provides bug fixes, minor enhancements and new
  features. This release includes fixes for security issues.
  * see https://github.com/ARMmbed/mbedtls/releases/tag/v2.26.0
- Fix build with patch from https://github.com/ARMmbed/mbedtls/pull/4237
  mbedtls-4237.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1618488000">-  Workaround for building with gcc-11 boo#1181876</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1626782400">- Update to 2.27.0:
  API changes:
  * Update AEAD output size macros to bring them in line with the PSA Crypto
    API version 1.0 spec. This version of the spec parameterizes them on the
    key type used, as well as the key bit-size in the case of
    PSA_AEAD_TAG_LENGTH.
    The old versions of these macros were renamed and deprecated as follows:
  - PSA_AEAD_TAG_LENGTH          -&gt; PSA_AEAD_TAG_LENGTH_1_ARG
  - PSA_AEAD_ENCRYPT_OUTPUT_SIZE -&gt; PSA_AEAD_ENCRYPT_OUTPUT_SIZE_2_ARG
  - PSA_AEAD_DECRYPT_OUTPUT_SIZE -&gt; PSA_AEAD_DECRYPT_OUTPUT_SIZE_2_ARG
  - PSA_AEAD_UPDATE_OUTPUT_SIZE  -&gt; PSA_AEAD_UPDATE_OUTPUT_SIZE_2_ARG
  - PSA_AEAD_FINISH_OUTPUT_SIZE  -&gt; PSA_AEAD_FINISH_OUTPUT_SIZE_1_ARG
  - PSA_AEAD_VERIFY_OUTPUT_SIZE  -&gt; PSA_AEAD_VERIFY_OUTPUT_SIZE_1_ARG
  * Implement one-shot cipher functions, psa_cipher_encrypt and
    psa_cipher_decrypt, according to the PSA Crypto API 1.0.0
    specification.
  Features:
  * Add mbedtls_rsa_rsassa_pss_sign_ext() function allowing to generate a
    signature with a specific salt length. This function allows to validate
    test cases provided in the NIST's CAVP test suite.
  * Added support for built-in driver keys through the PSA opaque crypto
    driver interface. Refer to the documentation of
    MBEDTLS_PSA_CRYPTO_BUILTIN_KEYS for more information.
  * Implement psa_sign_message() and psa_verify_message().
  * The new function mbedtls_mpi_random() generates a random value in a
    given range uniformly.
  * Implement psa_mac_compute() and psa_mac_verify() as defined in the
    PSA Cryptograpy API 1.0.0 specification.
  * MBEDTLS_ECP_MAX_BITS is now determined automatically from the configured
    curves and no longer needs to be configured explicitly to save RAM.
  Security
  * Fix a bias in the generation of finite-field Diffie-Hellman-Merkle (DHM)
    private keys and of blinding values for DHM and elliptic curves (ECP)
    computations.
  * Fix a potential side channel vulnerability in ECDSA ephemeral key generation.
    An adversary who is capable of very precise timing measurements could
    learn partial information about the leading bits of the nonce used for the
    signature, allowing the recovery of the private key after observing a
    large number of signature operations. This completes a partial fix in
    Mbed TLS 2.20.0.
  * It was possible to configure MBEDTLS_ECP_MAX_BITS to a value that is
    too small, leading to buffer overflows in ECC operations. Fail the build
    in such a case.
  * An adversary with access to precise enough information about memory
    accesses (typically, an untrusted operating system attacking a secure
    enclave) could recover an RSA private key after observing the victim
    performing a single private-key operation.
  * An adversary with access to precise enough timing information (typically, a
    co-located process) could recover a Curve25519 or Curve448 static ECDH key
    after inputting a chosen public key and observing the victim performing the
    corresponding private-key operation.
  Bugfix
  * Add printf function attributes to mbedtls_debug_print_msg to ensure we
    get printf format specifier warnings.
  * Fix premature fopen() call in mbedtls_entropy_write_seed_file which may
    lead to seed file corruption in the case where the path to the seed file is
    equal to MBEDTLS_PLATFORM_STD_NV_SEED_FILE.
  * PSA functions other than psa_open_key now return PSA_ERROR_INVALID_HANDLE
    rather than PSA_ERROR_DOES_NOT_EXIST for an invalid handle, bringing them
    in line with version 1.0.0 of the specification.
  * PSA functions creating a key now return PSA_ERROR_INVALID_ARGUMENT rather
    than PSA_ERROR_INVALID_HANDLE when the identifier specified for the key
    to create is not valid, bringing them in line with version 1.0.0 of the
    specification.
  * Fix some cases in the bignum module where the library constructed an
    unintended representation of the value 0 which was not processed
    correctly by some bignum operations. This could happen when
    mbedtls_mpi_read_string() was called on "-0", or when
    mbedtls_mpi_mul_mpi() and mbedtls_mpi_mul_int() was called with one of
    the arguments being negative and the other being 0.
  * Fix a bug in ECDSA that would cause it to fail when the hash is all-bits
    zero.
  * Fix a compilation error when MBEDTLS_ECP_RANDOMIZE_MXZ_ALT is
    defined.
  * Fix an incorrect error code when parsing a PKCS#8 private key.
  * In a TLS client, enforce the Diffie-Hellman minimum parameter size
    set with mbedtls_ssl_conf_dhm_min_bitlen() precisely. Before, the
    minimum size was rounded down to the nearest multiple of 8.
  * In library/net_sockets.c, _POSIX_C_SOURCE and _XOPEN_SOURCE are
    defined to specific values.  If the code is used in a context
    where these are already defined, this can result in a compilation
    error.  Instead, assume that if they are defined, the values will
    be adequate to build Mbed TLS.
  * The cipher suite TLS-RSA-WITH-CAMELLIA-256-GCM-SHA384 was not available
    when SHA-1 was disabled and was offered when SHA-1 was enabled but SHA-384
    was disabled. Fix the dependency.
  * Do not offer SHA384 cipher suites when SHA-384 is disabled.
  * With MBEDTLS_PSA_CRYPTO_C disabled, some functions were getting built
    nonetheless, resulting in undefined reference errors when building a
    shared library.
  * Fix test suite code on platforms where int32_t is not int, such as
    Arm Cortex-M.
  * Fix some issues affecting MBEDTLS_ARIA_ALT implementations: a misplaced
    directive in a header and a missing initialization in the self-test.
  * Fix a missing initialization in the Camellia self-test, affecting
    MBEDTLS_CAMELLIA_ALT implementations.
  * Restore the ability to configure PSA via Mbed TLS options to support RSA
    key pair operations but exclude RSA key generation. When MBEDTLS_GENPRIME
    is not defined PSA will no longer attempt to use mbedtls_rsa_gen_key().
  * Fix a regression introduced in 2.24.0 which broke (D)TLS CBC ciphersuites
    (when the encrypt-then-MAC extension is not in use) with some ALT
    implementations of the underlying hash (SHA-1, SHA-256, SHA-384), causing
    the affected side to wrongly reject valid messages.
  * Remove outdated check-config.h check that prevented implementing the
    timing module on Mbed OS.
  * Fix PSA_ALG_TLS12_PRF and PSA_ALG_TLS12_PSK_TO_MS being too permissive
    about missing inputs.
  * Fix a resource leak in a test suite with an alternative AES
    implementation.
  * Fix a crash in mbedtls_mpi_debug_mpi on a bignum having 0 limbs. This
    could notably be triggered by setting the TLS debug level to 3 or above
    and using a Montgomery curve for the key exchange.
  * psa_verify_hash() was relying on implementation-specific behavior of
    mbedtls_rsa_rsassa_pss_verify() and was causing failures in some _ALT
    implementations. This reliance is now removed.
  * Disallow inputs of length different from the corresponding hash when
    signing or verifying with PSA_ALG_RSA_PSS (The PSA Crypto API mandates
    that PSA_ALG_RSA_PSS uses the same hash throughout the algorithm.)
  * Fix a null pointer dereference when mbedtls_mpi_exp_mod() was called with
    A=0 represented with 0 limbs. Up to and including Mbed TLS 2.26, this bug
    could not be triggered by code that constructed A with one of the
    mbedtls_mpi_read_xxx functions (including in particular TLS code) since
    those always built an mpi object with at least one limb.
  * Fix mbedtls_mpi_gcd(G,A,B) when the value of B is zero. This had no
    effect on Mbed TLS's internal use of mbedtls_mpi_gcd(), but may affect
    applications that call mbedtls_mpi_gcd() directly.
  * The PSA API no longer allows the creation or destruction of keys with a
    read-only lifetime. The persistence level PSA_KEY_PERSISTENCE_READ_ONLY
    can now only be used as intended, for keys that cannot be modified through
    normal use of the API.
  * When MBEDTLS_PSA_CRYPTO_SPM is enabled, crypto_spe.h was not included
    in all the right places. Include it from crypto_platform.h, which is
    the natural place.
  * mbedtls_pk_sign() and mbedtls_pk_verify() and their extended and
    restartable variants now always honor the specified hash length if
    nonzero. Before, for RSA, hash_len was ignored in favor of the length of
    the specified hash algorithm.
  * Fix which alert is sent in some cases to conform to the
    applicable RFC: on an invalid Finished message value, an
    invalid max_fragment_length extension, or an
    unsupported extension used by the server.
  * Correct (change from 12 to 13 bytes) the value of the macro describing the
    maximum nonce length returned by psa_aead_generate_nonce().
  Changes
  * Add extra printf compiler warning flags to builds.
  * Fix memsan build false positive in x509_crt.c with Clang 11
  * Fix the setting of the read timeout in the DTLS sample programs.
  * Remove the AES sample application programs/aes/aescrypt2 which shows
    bad cryptographic practice.
  * Alternative implementations of CMAC may now opt to not support 3DES as a
    CMAC block cipher, and still pass the CMAC self test.
  * Remove configs/config-psa-crypto.h, which was identical to the default
    configuration except for having some extra cryptographic mechanisms
    enabled and for unintended differences. This configuration was primarily
    intended to demonstrate the PSA API, and lost most of its usefulness when
    MBEDTLS_PSA_CRYPTO_C became enabled by default.
  * When building the test suites with GNU make, invoke python3 or python, not
    python2, which is no longer supported upstream.
  * When using session cache based session resumption on the server,
    double-check that custom session cache implementations return
    sessions which are consistent with the negotiated ciphersuite
    and compression method.
  * Fix build failure on MinGW toolchain when __USE_MING_ANSI_STDIO is on.
    When that flag is on, standard GNU C printf format specifiers
    should be used.
  * Reduce the default value of MBEDTLS_ECP_WINDOW_SIZE. This reduces RAM usage
    during ECC operations at a negligible performance cost.
  * mbedtls_mpi_read_binary(), mbedtls_mpi_read_binary_le() and
    mbedtls_mpi_read_string() now construct an mbedtls_mpi object with 0 limbs
    when their input has length 0. Note that this is an implementation detail
    and can change at any time, so this change should be transparent, but it
    may result in mbedtls_mpi_write_binary() or mbedtls_mpi_write_string()
    now writing an empty string where it previously wrote one or more
    zero digits when operating from values constructed with an mpi_read
    function and some mpi operations.
  * Implicitly add PSA_KEY_USAGE_SIGN_MESSAGE key usage policy flag when
    PSA_KEY_USAGE_SIGN_HASH flag is set and PSA_KEY_USAGE_VERIFY_MESSAGE flag
    when PSA_KEY_USAGE_VERIFY_HASH flag is set. This usage flag extension
    is also applied when loading a key from storage.
  * Remove mbedtls-4237.patch upstream
  * Library soname bump to libmbedcrypto7</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1642075200">- Update to 2.28.0: (bsc#1193979, CVE-2021-45450)
  API changes
  * Some fields of mbedtls_ssl_session and mbedtls_ssl_config are in a
  different order. This only affects applications that define such
  structures directly or serialize them.
  Requirement changes
  * Sign-magnitude and one's complement representations for signed integers are
  not supported. Two's complement is the only supported representation.
  Removals
  * Remove config option MBEDTLS_TLS_DEFAULT_ALLOW_SHA1_IN_CERTIFICATES,
  which allowed SHA-1 in the default TLS configuration for certificate
  signing. It was intended to facilitate the transition in environments
  with SHA-1 certificates. SHA-1 is considered a weak message digest and
  its use constitutes a security risk.
  * Remove the partial support for running unit tests via Greentea on Mbed OS,
  which had been unmaintained since 2018.
  Features
  * The identifier of the CID TLS extension can be configured by defining
  MBEDTLS_TLS_EXT_CID at compile time.
  * Warn if errors from certain functions are ignored. This is currently
  supported on GCC-like compilers and on MSVC and can be configured through
  the macro MBEDTLS_CHECK_RETURN. The warnings are always enabled
  (where supported) for critical functions where ignoring the return
  value is almost always a bug. Enable the new configuration option
  MBEDTLS_CHECK_RETURN_WARNING to get warnings for other functions. This
  is currently implemented in the AES, DES and md modules, and will be
  extended to other modules in the future.
  * Add missing PSA macros declared by PSA Crypto API 1.0.0:
  PSA_ALG_IS_SIGN_HASH, PSA_ALG_NONE, PSA_HASH_BLOCK_LENGTH, PSA_KEY_ID_NULL.
  * Add new API mbedtls_ct_memcmp for constant time buffer comparison.
  * Add PSA API definition for ARIA.
  Security
  * Zeroize several intermediate variables used to calculate the expected
  value when verifying a MAC or AEAD tag. This hardens the library in
  case the value leaks through a memory disclosure vulnerability. For
  example, a memory disclosure vulnerability could have allowed a
  man-in-the-middle to inject fake ciphertext into a DTLS connection.
  * In psa_cipher_generate_iv() and psa_cipher_encrypt(), do not read back
  from the output buffer. This fixes a potential policy bypass or decryption
  oracle vulnerability if the output buffer is in memory that is shared with
  an untrusted application.
  * Fix a double-free that happened after mbedtls_ssl_set_session() or
  mbedtls_ssl_get_session() failed with MBEDTLS_ERR_SSL_ALLOC_FAILED
  (out of memory). After that, calling mbedtls_ssl_session_free()
  and mbedtls_ssl_free() would cause an internal session buffer to
  be free()'d twice.
  Bugfix
  * Stop using reserved identifiers as local variables. Fixes #4630.
  * The GNU makefiles invoke python3 in preference to python except on Windows.
  * The check was accidentally not performed when cross-compiling for Windows
  on Linux. Fix this. Fixes #4774.
  * Prevent divide by zero if either of PSA_CIPHER_ENCRYPT_OUTPUT_SIZE() or
  PSA_CIPHER_UPDATE_OUTPUT_SIZE() were called using an asymmetric key type.
  * Fix a parameter set but unused in psa_crypto_cipher.c. Fixes #4935.
  * Don't use the obsolete header path sys/fcntl.h in unit tests.
  These header files cause compilation errors in musl.
  Fixes #4969.
  * Fix missing constraints on x86_64 and aarch64 assembly code
  for bignum multiplication that broke some bignum operations with
  (at least) Clang 12.
  Fixes #4116, #4786, #4917, #4962.
  * Fix mbedtls_cipher_crypt: AES-ECB when MBEDTLS_USE_PSA_CRYPTO is enabled.
  * Failures of alternative implementations of AES or DES single-block
  functions enabled with MBEDTLS_AES_ENCRYPT_ALT, MBEDTLS_AES_DECRYPT_ALT,
  MBEDTLS_DES_CRYPT_ECB_ALT or MBEDTLS_DES3_CRYPT_ECB_ALT were ignored.
  This does not concern the implementation provided with Mbed TLS,
  where this function cannot fail, or full-module replacements with
  MBEDTLS_AES_ALT or MBEDTLS_DES_ALT. Reported by Armelle Duboc in #1092.
  * Some failures of HMAC operations were ignored. These failures could only
  happen with an alternative implementation of the underlying hash module.
  * Fix the error returned by psa_generate_key() for a public key. Fixes #4551.
  * Fix the build of sample programs when neither MBEDTLS_ERROR_C nor
  MBEDTLS_ERROR_STRERROR_DUMMY is enabled.
  * Fix PSA_ALG_RSA_PSS verification accepting an arbitrary salt length.
  This algorithm now accepts only the same salt length for verification
  that it produces when signing, as documented. Use the new algorithm
  PSA_ALG_RSA_PSS_ANY_SALT to accept any salt length. Fixes #4946.
  * The existing predicate macro name PSA_ALG_IS_HASH_AND_SIGN is now reserved
  for algorithm values that fully encode the hashing step, as per the PSA
  Crypto API specification. This excludes PSA_ALG_RSA_PKCS1V15_SIGN_RAW and
  PSA_ALG_ECDSA_ANY. The new predicate macro PSA_ALG_IS_SIGN_HASH covers
  all algorithms that can be used with psa_{sign,verify}_hash(), including
  these two.
  * Fix issue in Makefile on Linux with SHARED=1, that caused shared libraries
  not to list other shared libraries they need.
  * Fix a bug in mbedtls_gcm_starts() when the bit length of the iv
  exceeds 2^32. Fixes #4884.
  * Fix an uninitialized variable warning in test_suite_ssl.function with GCC
  version 11.
  * Fix the build when no SHA2 module is included. Fixes #4930.
  * Fix the build when only the bignum module is included. Fixes #4929.
  * Fix a potential invalid pointer dereference and infinite loop bugs in
  pkcs12 functions when the password is empty. Fix the documentation to
  better describe the inputs to these functions and their possible values.
  Fixes #5136.
  * The key usage flags PSA_KEY_USAGE_SIGN_MESSAGE now allows the MAC
  operations psa_mac_compute() and psa_mac_sign_setup().
  * The key usage flags PSA_KEY_USAGE_VERIFY_MESSAGE now allows the MAC
  operations psa_mac_verify() and psa_mac_verify_setup().
  Changes
  * Set config option MBEDTLS_TLS_DEFAULT_ALLOW_SHA1_IN_KEY_EXCHANGE to be
  disabled by default.
  * Improve the performance of base64 constant-flow code. The result is still
  slower than the original non-constant-flow implementation, but much faster
  than the previous constant-flow implementation. Fixes #4814.
  * Indicate in the error returned if the nonce length used with
  ChaCha20-Poly1305 is invalid, and not just unsupported.
  * The mbedcrypto library includes a new source code module constant_time.c,
  containing various functions meant to resist timing side channel attacks.
  * This module does not have a separate configuration option, and functions
  from this module will be included in the build as required. Currently
  most of the interface of this module is private and may change at any
  time.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1642420800">- Fix baselib.conf</changelog>
  <changelog author="Alexander Bergmann &lt;abergmann@suse.com&gt;" date="1671624000">- Fix potential heap buffer overread and overwrite in DTLS if
  MBEDTLS_SSL_DTLS_CONNECTION_ID is enabled and
  MBEDTLS_SSL_CID_IN_LEN_MAX &gt; 2 * MBEDTLS_SSL_CID_OUT_LEN_MAX.
  (bsc#1206576, CVE-2022-46393).
  Add: mbedtls-CVE-2022-46393.patch</changelog>
</package>
<package pkgid="37907239d1667bbb151d33a0bf3d9482675e04dec07758f9f20e9e992167dca6" name="mbedtls-devel" arch="i586">
  <version epoch="0" ver="2.28.0" rel="bp154.2.3.1"/>
  <changelog author="mpluskal@suse.com" date="1531137600">- Update to version 2.11.0:
  * Features
    + Added support for the XTS block cipher mode with AES (AES-XTS). Contributed by Aorimn in pull request #414.
    + Implemented the HMAC-based extract-and-expand key derivation function (HKDF) per RFC 5869. Contributed by Thomas Fossati.
    + For TLS servers, added support for offloading private key operations to an external cryptoprocessor. Private key operations can be asynchronous to allow non-blocking operation of the TLS server stack.
    + Added support for ARIA cipher (RFC 5794) and associated TLS ciphersuites (RFC 6209). ARIA is disabled by default. To enable, see MBEDTLS_ARIA_C in config.h.
    + Added support for the CCM* block cipher mode as defined in IEEE Std 802.15.4.
    + Added an additional block mode, OFB (Output Feedback) per NIST SP 800-38a, to the AES module and cipher abstraction module.
  * API Changes
    + Mbed TLS 2.11.0 maintains source code compatibility with the last minor version, Mbed TLS 2.9.0, but extends the interface with additional capabilities. Mbed TLS 2.11.0 modifies the ABI and increases the SOVERSION.
  * Bugfix
    + Fixed the cert_write example to handle certificates signed with elliptic curves as well as RSA. Fixes #777 found by dbedev.
    + Fixed the redefinition of _WIN32_WINNT, to avoid overriding a definition used by user applications. Found and fixed by Fabio Alessandrelli.
    + Fixed compilation warnings with the IAR toolchain on 32-bit platforms. Reported by rahmanih in #683.
    + Fixed an issue with MicroBlaze support in bn_mul.h which was causing the build to fail. Found by zv-io. Fixes #1651.
    + Fixed braces in mbedtls_memory_buffer_alloc_status(). Found by sbranden in #552.
    + Added the macro MBEDTLS_X509_MAX_FILE_PATH_LEN that enables the user to configure the maximum length of a file path that can be buffered when calling mbedtls_x509_crt_parse_path(). Fixes #492.
    + Fixed redundant declaration of mbedtls_ssl_list_ciphersuites. Raised by TrinityTonic in #1359.
- Changes for version 2.9.0:
  + Security
    + Fixed an issue in the X.509 module which could lead to a buffer overread during certificate validation. Additionally, the issue could also lead to unnecessary callback checks being made or to some validation checks to be omitted. The overread could be triggered remotely, while the other issues would require a non DER-compliant certificate to be correctly signed by a trusted CA, or a trusted CA with a non DER-compliant certificate. Found by luocm. Fixes #825.
    + Fixed the buffer length assertion in the ssl_parse_certificate_request() function which could lead to an arbitrary overread of the message buffer. The overreads could be caused by receiving a malformed algorithms section which was too short. In builds with debug output, this overread data was output with the debug data.
    + Fixed a client-side bug in the validation of the server's ciphersuite choice which could potentially lead to the client accepting a ciphersuite it didn't offer or a ciphersuite that could not be used with the TLS or DTLS version chosen by the server. This could lead to corruption of internal data structures for some configurations.
  * Features
    + Added an option of MBEDTLS_AES_FEWER_TABLES, to dynamically compute smaller AES tables during runtime, thereby reducing the RAM/ROM footprint by ~6KiB. Suggested and contributed by jkivilin.
    + Added initial support for Curve448 (RFC 7748). So far only mbedtls_ecp_mul() and ECDH primitive functions (mbedtls_ecdh_gen_public(), mbedtls_ecdh_compute_shared()) are supported for now. Contributed by Nicholas Wilson.
  * API Changes
    + Mbed TLS 2.9.0 maintains source code and binary compatibility with the last minor version, Mbed TLS 2.8.0, but extends the interface with additional capabilities.
    + Extended the API with the function of mbedtls_net_poll() to allow user applications to wait for a network context to become ready before reading or writing.
    + Added the function mbedtls_ssl_check_pending() to the public API to allow a check for whether more more data is pending to be processed in the internal message buffers. This function is necessary to determine the underlying transport when event-driven IO is used.
  * Bugfix
    + Fixed a spurious uninitialized variable warning in cmac.c. Fix independently contributed by Brian J Murray and David Brown.
    + Added missing dependencies in test suites that led to build failures in configurations that omit certain hashes or public-key algorithms. Fixes #1040.
    + Fixed a C89 incompatibility issue in benchmark.c. Contributed by Brendan Shanks. Fixes #1353.
    + Added missing dependencies for MBEDTLS_HAVE_TIME_DATE and MBEDTLS_VERSION_FEATURES in some test suites. Contributed by Deomid Ryabkov. Fixes #1299, #1475.
    + Fixed the Makefile build process for building shared libraries on Mac OS X. Fixed by mnacamura.
    + Fixed parsing of PKCS#8 encoded Elliptic Curve keys. Previously Mbed TLS was unable to parse keys which had only the optional parameters field of the ECPrivateKey structure. Found by Jethro Beekman, fixed in #1379.
    + Added an optimisation to return the plaintext data more quickly on unpadded CBC decryption, as stated in the mbedtls_cipher_update() documentation. Contributed by Andy Leiserson.
    + Fixed the overriding and ignoring of return values when parsing and writing to a file in the pk_sign program. Found by kevlut in #1142.
    + Added restrictions to the usage of the error code MBEDTLS_ERR_SSL_WANT_READ to situations where data needs to be fetched from the underlying transport in order to make progress. Previously, this error code was also occasionally returned when unexpected messages were being discarded, ignoring that further messages could potentially already be pending to be processed in the internal buffers; these cases led to deadlocks when event-driven I/O was used. Found and reported by Hubert Mis in #772.
    + Fixed buffer length assertions in the ssl_parse_certificate_request() function which led to a potential one byte overread of the message buffer.
    + Fixed invalid buffer sizes being passed to zlib during record compression and decompression.
    + Raised the soversion of libmbedcrypto to match the soversion of the maintained 2.7 branch. The soversion was increased in Mbed TLS version 2.7.1 to reflect breaking changes in that release, but the increment was missed in 2.8.0 and later releases outside of the 2.7 branch.</changelog>
  <changelog author="mpluskal@suse.com" date="1535025600">- Update to version 2.12.0:
  * Security
    + Fixed a vulnerability in the TLS ciphersuites based on use of CBC and SHA-384 in DTLS/TLS 1.0 to 1.2, that allowed an active network attacker to partially recover the plaintext of messages under certains conditions by exploiting timing side-channels.
    + Fixed a vulnerability in TLS ciphersuites based on CBC, in DTLS/TLS 1.0 to 1.2, that allowed a local attacker, with the ability to execute code on the local machine as well as to manipulate network packets, to partially recover the plaintext of messages under certain conditions by using a cache attack targetting an internal MD/SHA buffer.
    + Added a counter-measure against a vulnerability in TLS ciphersuites based on CBC, in DTLS/TLS 1.0 to 1.2, that allowed a local attacker with the ability to execute code on the local machine as well as manipulate network packets, to partially recover the plaintext of messages certain conditions (see previous entry) by using a cache attack targeting the SSL input record buffer.
  * Features
    + Added new cryptographic primitives, the stream cipher Chacha20, one-time authenticator Poly1305 and AEAD construct Chacha20-Poly1305, as defined in RFC 7539. Contributed by Daniel King.
    + Added support for the CHACHA20-POLY1305 ciphersuites from RFC 7905.
    + Made the receive and transmit buffers independently configurable in size, for situations where the outgoing buffer can be fixed at a smaller size than the incoming buffer
    + Added support for the AES based key wrapping modes defined by NIST SP 800-38F algorithms KW and KWP and by RFC's 3394 and 5649.
    + Added platform support for the Haiku OS.
  * Bugfix
    + Fixed the key_app_writer example which was creating an invalid ASN.1 tag by writing an additional leading zero byte. Found by Aryeh R. #1257.
    + Fixed a C++ compilation error, caused by a variable named new. Found and fixed by Hirotaka Niisato. #1783.
    + Fixed the "no symbols" warning issued by ranlib when building on Mac OS X. Fix contributed by tabascoeye.
    + Clarified documentation for mbedtls_ssl_write() to include 0 as a valid return value. Found by @davidwu2000. #839.
    + Fixed a memory leak in mbedtls_x509_csr_parse(). Found and fixed by catenacyber, Philippe Antoine. #1623.
    + Added length checks to some TLS parsing functions. Found and fixed by Philippe Antoine from Catena cyber. #1663.
    + Remove unused headers included in x509.c. Found by Chris Hanson and fixed by Brendan Shanks. #992.
    + Fixed compilation error when MBEDTLS_ARC4_C is disabled and MBEDTLS_CIPHER_NULL_CIPHER is enabled. Found by TrinityTonic in #1719.
    + Fixed the inline assembly for the MPI multiply helper function for i386 and i386 with SSE2. Found by László Langó. #1550.
    + Fixed the namespacing in header files. Remove the mbedtls namespacing in the #include in the header files. #857.
    + Fixed a compiler warning of 'use before initialisation' in mbedtls_pk_parse_key(). Found by Martin Boye Petersen and fixed by Dawid Drozd.#1098.
    + Fixed decryption of zero length messages (which contain all padding) when a CBC based ciphersuite was used together with Encrypt-then-MAC.
    + Fixed the ssl_client2 example to send application data with 0-length content when the request_size argument is set to 0 as stated in the documentation. #1833.
    + Corrected the documentation for mbedtls_ssl_get_session(). This API has deep copy of the session, and the peer certificate is not lost. #926.
    + Fixed issues when building to the C99 standard, using -std=c99. Fixed by Nick Wilson.
  * Changes
    + Fails when receiving a TLS alert message with an invalid length, or invalid zero-length messages when using TLS 1.2. Contributed by Espressif Systems.
    + Changed the default behaviour of mbedtls_hkdf_extract() to return an error when calling with a NULL salt and non-zero salt length. Contributed by Brian J Murray
    + Change the shebang line in Perl scripts to look up perl in the PATH. Contributed by fbrosson.
    + Allow overriding the time on Windows via the platform-time abstraction. Fixed by Nick Wilson.
    + Use gmtime_r/gmtime_s for thread-safety. Fixed by Nick Wilson.</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1544529600">- Update to version 2.14.1: [bsc#1118727, CVE-2018-19608]
  Security
  * Fix timing variations and memory access variations in RSA PKCS#1 v1.5
    decryption that could lead to a Bleichenbacher-style padding oracle
    attack. In TLS, this affects servers that accept ciphersuites based on
    RSA decryption (i.e. ciphersuites whose name contains RSA but not
    (EC)DH(E)). Discovered by Eyal Ronen (Weizmann Institute),  Robert Gillham
    (University of Adelaide), Daniel Genkin (University of Michigan),
    Adi Shamir (Weizmann Institute), David Wong (NCC Group), and Yuval Yarom
    (University of Adelaide, Data61). The attack is described in more detail
    in the paper available here: http://cat.eyalro.net/cat.pdf  CVE-2018-19608
  * In mbedtls_mpi_write_binary(), don't leak the exact size of the number
    via branching and memory access patterns. An attacker who could submit
    a plaintext for RSA PKCS#1 v1.5 decryption but only observe the timing
    of the decryption and not its result could nonetheless decrypt RSA
    plaintexts and forge RSA signatures. Other asymmetric algorithms may
    have been similarly vulnerable. Reported by Eyal Ronen, Robert Gillham,
    Daniel Genkin, Adi Shamir, David Wong and Yuval Yarom.
  * Wipe sensitive buffers on the stack in the CTR_DRBG and HMAC_DRBG
    modules.
  API Changes
  * The new functions mbedtls_ctr_drbg_update_ret() and
    mbedtls_hmac_drbg_update_ret() are similar to mbedtls_ctr_drbg_update()
    and mbedtls_hmac_drbg_update() respectively, but the new functions
    report errors whereas the old functions return void. We recommend that
    applications use the new functions.
- Version 2.14.0:
  Security
  * Fix overly strict DN comparison when looking for CRLs belonging to a
    particular CA. This previously led to ignoring CRLs when the CRL's issuer
    name and the CA's subject name differed in their string encoding (e.g.,
    one using PrintableString and the other UTF8String) or in the choice of
    upper and lower case. Reported by Henrik Andersson of Bosch GmbH in issue
    [#1784].
  * Fix a flawed bounds check in server PSK hint parsing. In case the
    incoming message buffer was placed within the first 64KiB of address
    space and a PSK-(EC)DHE ciphersuite was used, this allowed an attacker
    to trigger a memory access up to 64KiB beyond the incoming message buffer,
    potentially leading to an application crash or information disclosure.
  * Fix mbedtls_mpi_is_prime() to use more rounds of probabilistic testing. The
    previous settings for the number of rounds made it practical for an
    adversary to construct non-primes that would be erroneously accepted as
    primes with high probability. This does not have an impact on the
    security of TLS, but can matter in other contexts with numbers chosen
    potentially by an adversary that should be prime and can be validated.
    For example, the number of rounds was enough to securely generate RSA key
    pairs or Diffie-Hellman parameters, but was insufficient to validate
    Diffie-Hellman parameters properly.
    See "Prime and Prejudice" by by Martin R. Albrecht and Jake Massimo and
    Kenneth G. Paterson and Juraj Somorovsky.
  Features
  * Add support for temporarily suspending expensive ECC computations after
    some configurable amount of operations. This is intended to be used in
    constrained, single-threaded systems where ECC is time consuming and can
    block other operations until they complete. This is disabled by default,
    but can be enabled by MBEDTLS_ECP_RESTARTABLE at compile time and
    configured by mbedtls_ecp_set_max_ops() at runtime. It applies to the new
    xxx_restartable functions in ECP, ECDSA, PK and X.509 (CRL not supported
    yet), and to existing functions in ECDH and SSL (currently only
    implemented client-side, for ECDHE-ECDSA ciphersuites in TLS 1.2,
    including client authentication).
  * Add support for Arm CPU DSP extensions to accelerate asymmetric key
    operations. On CPUs where the extensions are available, they can accelerate
    MPI multiplications used in ECC and RSA cryptography. Contributed by
    Aurelien Jarno.
  * Extend RSASSA-PSS signature to allow a smaller salt size. Previously, PSS
    signature always used a salt with the same length as the hash, and returned
    an error if this was not possible. Now the salt size may be up to two bytes
    shorter. This allows the library to support all hash and signature sizes
    that comply with FIPS 186-4, including SHA-512 with a 1024-bit key.
  * Add support for 128-bit keys in CTR_DRBG. Note that using keys shorter
    than 256 bits limits the security of generated material to 128 bits.
  API Changes
  * Add a common error code of `MBEDTLS_ERR_PLATFORM_FEATURE_UNSUPPORTED` for
    a feature that is not supported by underlying alternative
    implementations implementing cryptographic primitives. This is useful for
    hardware accelerators that don't implement all options or features.
  New deprecations
  * All module specific errors following the form
    MBEDTLS_ERR_XXX_FEATURE_UNAVAILABLE that indicate a feature is not
    supported are deprecated and are now replaced by the new equivalent
    platform error.
  * All module specific generic hardware acceleration errors following the
    form MBEDTLS_ERR_XXX_HW_ACCEL_FAILED that are deprecated and are replaced
    by the equivalent plaform error.
  * Deprecate the function mbedtls_mpi_is_prime() in favor of
    mbedtls_mpi_is_prime_ext() which allows specifying the number of
    Miller-Rabin rounds.
  Bugfix
  * Fix wrong order of freeing in programs/ssl/ssl_server2 example
    application leading to a memory leak in case both
    MBEDTLS_MEMORY_BUFFER_ALLOC_C and MBEDTLS_MEMORY_BACKTRACE are set.
    Fixes #2069.
  * Fix a bug in the update function for SSL ticket keys which previously
    invalidated keys of a lifetime of less than a 1s. Fixes #1968.
  * Fix failure in hmac_drbg in the benchmark sample application, when
    MBEDTLS_THREADING_C is defined. Found by TrinityTonic, #1095
  * Fix a bug in the record decryption routine ssl_decrypt_buf()
    which lead to accepting properly authenticated but improperly
    padded records in case of CBC ciphersuites using Encrypt-then-MAC.
  * Fix memory leak and freeing without initialization in the example
    program programs/x509/cert_write. Fixes #1422.
  * Ignore IV in mbedtls_cipher_set_iv() when the cipher mode is
    MBEDTLS_MODE_ECB. Found by ezdevelop. Fixes #1091.
  * Zeroize memory used for buffering or reassembling handshake messages
    after use.
  * Use `mbedtls_platform_zeroize()` instead of `memset()` for zeroization
    of sensitive data in the example programs aescrypt2 and crypt_and_hash.
  * Change the default string format used for various X.509 DN attributes to
    UTF8String. Previously, the use of the PrintableString format led to
    wildcards and non-ASCII characters being unusable in some DN attributes.
    Reported by raprepo in #1860 and by kevinpt in #468. Fix contributed by
    Thomas-Dee.
  * Fix compilation failure for configurations which use compile time
    replacements of standard calloc/free functions through the macros
    MBEDTLS_PLATFORM_CALLOC_MACRO and MBEDTLS_PLATFORM_FREE_MACRO.
    Reported by ole-de and ddhome2006. Fixes #882, #1642 and #1706.
  Changes
  * Removed support for Yotta as a build tool.
  * Add tests for session resumption in DTLS.
  * Close a test gap in (D)TLS between the client side and the server side:
    test the handling of large packets and small packets on the client side
    in the same way as on the server side.
  * Change the dtls_client and dtls_server samples to work by default over
    IPv6 and optionally by a build option over IPv4.
  * Change the use of Windows threading to use Microsoft Visual C++ runtime
    calls, rather than Win32 API calls directly. This is necessary to avoid
    conflict with C runtime usage. Found and fixed by irwir.
  * Remember the string format of X.509 DN attributes when replicating
    X.509 DNs. Previously, DN attributes were always written in their default
    string format (mostly PrintableString), which could lead to CRTs being
    created which used PrintableStrings in the issuer field even though the
    signing CA used UTF8Strings in its subject field; while X.509 compliant,
    such CRTs were rejected in some applications, e.g. some versions of
    Firefox, curl and GnuTLS. Reported in #1033 by Moschn. Fix contributed by
    Thomas-Dee.
  * Improve documentation of mbedtls_ssl_get_verify_result().
    Fixes #517 reported by github-monoculture.
  * Add MBEDTLS_MPI_GEN_PRIME_FLAG_LOW_ERR flag to mbedtls_mpi_gen_prime() and
    use it to reduce error probability in RSA key generation to levels mandated
    by FIPS-186-4.
- Version 2.13.1
  API Changes
  * Extend the platform module with an abstraction mbedtls_platform_gmtime_r()
    whose implementation should behave as a thread-safe version of gmtime().
    This allows users to configure such an implementation at compile time when
    the target system cannot be deduced automatically, by setting the option
    MBEDTLS_PLATFORM_GMTIME_R_ALT. At this stage Mbed TLS is only able to
    automatically select implementations for Windows and POSIX C libraries.
  Bugfix
  * Fix build failures on platforms where only gmtime() is available but
    neither gmtime_r() nor gmtime_s() are present. Fixes #1907.
- Version 2.13.0
  Security
  * Fix an issue in the X.509 module which could lead to a buffer overread
    during certificate extensions parsing. In case of receiving malformed
    input (extensions length field equal to 0), an illegal read of one byte
    beyond the input buffer is made. Found and analyzed by Nathan Crandall.
  Features
  * Add support for fragmentation of outgoing DTLS handshake messages. This
    is controlled by the maximum fragment length as set locally or negotiated
    with the peer, as well as by a new per-connection MTU option, set using
    mbedtls_ssl_set_mtu().
  * Add support for auto-adjustment of MTU to a safe value during the
    handshake when flights do not get through (RFC 6347, section 4.1.1.1,
    last paragraph).
  * Add support for packing multiple records within a single datagram,
    enabled by default.
  * Add support for buffering out-of-order handshake messages in DTLS.
    The maximum amount of RAM used for this can be controlled by the
    compile-time constant MBEDTLS_SSL_DTLS_MAX_BUFFERING defined
    in mbedtls/config.h.
  API Changes
  * Add function mbedtls_ssl_set_datagram_packing() to configure
    the use of datagram packing (enabled by default).
  Bugfix
  * Fix a potential memory leak in mbedtls_ssl_setup() function. An allocation
    failure in the function could lead to other buffers being leaked.
  * Fixes an issue with MBEDTLS_CHACHAPOLY_C which would not compile if
    MBEDTLS_ARC4_C and MBEDTLS_CIPHER_NULL_CIPHER weren't also defined. #1890
  * Fix a memory leak in ecp_mul_comb() if ecp_precompute_comb() fails.
    Fix contributed by Espressif Systems.
  * Add ecc extensions only if an ecc based ciphersuite is used.
    This improves compliance to RFC 4492, and as a result, solves
    interoperability issues with BouncyCastle. Raised by milenamil in #1157.
  * Replace printf with mbedtls_printf in the ARIA module. Found by
    TrinityTonic in #1908.
  * Fix potential use-after-free in mbedtls_ssl_get_max_frag_len()
    and mbedtls_ssl_get_record_expansion() after a session reset. Fixes #1941.
  * Fix a bug that caused SSL/TLS clients to incorrectly abort the handshake
    with TLS versions 1.1 and earlier when the server requested authentication
    without providing a list of CAs. This was due to an overly strict bounds
    check in parsing the CertificateRequest message,
    introduced in Mbed TLS 2.12.0. Fixes #1954.
  * Fix a miscalculation of the maximum record expansion in
    mbedtls_ssl_get_record_expansion() in case of ChachaPoly ciphersuites,
    or CBC ciphersuites in (D)TLS versions 1.1 or higher. Fixes #1913, #1914.
  * Fix undefined shifts with negative values in certificates parsing
    (found by Catena cyber using oss-fuzz)
  * Fix memory leak and free without initialization in pk_encrypt
    and pk_decrypt example programs. Reported by Brace Stout. Fixes #1128.
  * Remove redundant else statement. Raised by irwir. Fixes #1776.
  Changes
  * Copy headers preserving timestamps when doing a "make install".
    Contributed by xueruini.
  * Allow the forward declaration of public structs. Contributed by Dawid
    Drozd. Fixes #1215 raised by randombit.
  * Improve compatibility with some alternative CCM implementations by using
    CCM test vectors from RAM.
  * Add support for buffering of out-of-order handshake messages.
  * Add warnings to the documentation of the HKDF module to reduce the risk
    of misusing the mbedtls_hkdf_extract() and mbedtls_hkdf_expand()
    functions. Fixes #1775. Reported by Brian J. Murray.</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1544529601">- Library package version bumped to libmbedtls12</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1546862400">- Update to version 2.16.0:
  Features
  * Add a new config.h option of MBEDTLS_CHECK_PARAMS that enables validation of parameters in the API. This allows detection of obvious misuses of the API, such as passing NULL pointers. The API of existing functions hasn't changed, but requirements on parameters have been made more explicit in the documentation. See the corresponding API documentation for each function to see for which parameter values it is defined. This feature is disabled by default. See its API documentation in config.h for additional steps you have to take when enabling it.
  API Changes
  * The following functions in the random generator modules have been deprecated and replaced as shown below. The new functions change the return type from void to int to allow returning error codes when using MBEDTLS_&lt;MODULE&gt;_ALT for the underlying AES or message digest primitive. Fixes #1798. mbedtls_ctr_drbg_update() -&gt; mbedtls_ctr_drbg_update_ret() mbedtls_hmac_drbg_update() -&gt; mbedtls_hmac_drbg_update_ret()
  * Extend ECDH interface to enable alternative implementations.
  * Deprecate error codes of the form MBEDTLS_ERR_xxx_INVALID_KEY_LENGTH for ARIA, CAMELLIA and Blowfish. These error codes will be replaced by the more generic per-module error codes MBEDTLS_ERR_xxx_BAD_INPUT_DATA.
  * Additional parameter validation checks have been added for the following modules - AES, ARIA, Blowfish, CAMELLIA, CCM, GCM, DHM, ECP, ECDSA, ECDH, ECJPAKE, SHA, Chacha20 and Poly1305, cipher, pk, RSA, and MPI. Where modules have had parameter validation added, existing parameter checks may have changed. Some modules, such as Chacha20 had existing parameter validation whereas other modules had little. This has now been changed so that the same level of validation is present in all modules, and that it is now optional with the MBEDTLS_CHECK_PARAMS flag which by default is off. That means that checks which were previously present by default will no longer be.
  New deprecations
  * Deprecate mbedtls_ctr_drbg_update() and mbedtls_hmac_drbg_update() in favor of functions that can return an error code.
  Bugfix
  * Fix for Clang, which was reporting a warning for the bignum.c inline assembly for AMD64 targets creating string literals greater than those permitted by the ISO C99 standard. Found by Aaron Jones. Fixes #482.
  * Fix runtime error in mbedtls_platform_entropy_poll() when run through qemu user emulation. Reported and fix suggested by randombit. Fixes #1212.
  * Fix an unsafe bounds check when restoring an SSL session from a ticket. This could lead to a buffer overflow, but only in case ticket authentication was broken. Reported and fix suggested by Guido Vranken in #659.
  * Add explicit integer to enumeration type casts to example program programs/pkey/gen_key which previously led to compilation failure on some toolchains. Reported by phoenixmcallister. Fixes #2170.
  * Clarify documentation of mbedtls_ssl_set_own_cert() regarding the absence of check for certificate/key matching. Reported by Attila Molnar, #507.
  * Fix double initialization of ECC hardware that made some accelerators hang.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1567512000">- Update to version 2.16.2:
  * Security improvements and bugfixes
- Use ninja to for build</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1573646400">- Update to version 2.16.3:
  * Security improvements and bugfixes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1585828800">- Update to version 2.16.5:
  * Security improvements and bugfixes</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597665600">- update to 2.23.0:
  a lot of changes see https://github.com/ARMmbed/mbedtls/releases/tag/v2.23.0
  * Fix a side channel vulnerability in modular exponentiation that could reveal an RSA private key used in a secure enclave. Noticed by Sangho Lee, Ming-Wei Shih, Prasun Gera, Taesoo Kim and Hyesoon Kim (Georgia Institute of Technology); and Marcus Peinado (Microsoft Research). Reported by Raoul Strackx (Fortanix) in #3394.
  * Fix side channel in mbedtls_ecp_check_pub_priv() and mbedtls_pk_parse_key() / mbedtls_pk_parse_keyfile() (when loading a private key that didn't include the uncompressed public key), as well as mbedtls_ecp_mul() / mbedtls_ecp_mul_restartable() when called with a NULL f_rng argument. An attacker with access to precise enough timing and memory access information (typically an untrusted operating system attacking a secure enclave) could fully recover the ECC private key. Found and reported by Alejandro Cabrera Aldaya and Billy Brumley.
  * Fix issue in Lucky 13 counter-measure that could make it ineffective when hardware accelerators were used (using one of the MBEDTLS_SHAxxx_ALT macros). This would cause the original Lucky 13 attack to be possible in those configurations, allowing an active network attacker to recover plaintext after repeated timing measurements under some conditions. Reported and fix suggested by Luc Perneel in #3246.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1598875200">- Do not run testsuite in parallel - its not reliable</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1599480000">- Add workaround for failing builds (Python not found) due to
  https://gitlab.kitware.com/cmake/cmake/-/issues/21168</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1599652800">- update to 2.24.0:
  * see https://github.com/ARMmbed/mbedtls/releases/tag/v2.24.0
  * Fix a vulnerability in the verification of X.509 certificates when matching
  the expected common name (the cn argument of mbedtls_x509_crt_verify())
  with the actual certificate name: when the subjecAltName extension is
  present, the expected name was compared to any name in that extension
  regardless of its type. This means that an attacker could for example
  impersonate a 4-bytes or 16-byte domain by getting a certificate for the
  corresponding IPv4 or IPv6 (this would require the attacker to control that
  IP address, though). Similar attacks using other subjectAltName name types
  might be possible.
  * When checking X.509 CRLs, a certificate was only considered as revoked if
  its revocationDate was in the past according to the local clock if
  available. In particular, on builds without MBEDTLS_HAVE_TIME_DATE,
  certificates were never considered as revoked. On builds with
  MBEDTLS_HAVE_TIME_DATE, an attacker able to control the local clock (for
  example, an untrusted OS attacking a secure enclave) could prevent
  revocation of certificates via CRLs. Fixed by no longer checking the
  revocationDate field, in accordance with RFC 5280. Reported by yuemonangong
  in #3340. Reported independently and fixed by Raoul Strackx and Jethro
  * In (D)TLS record decryption, when using a CBC ciphersuites without the
  Encrypt-then-Mac extension, use constant code flow memory access patterns
  to extract and check the MAC. This is an improvement to the existing
  countermeasure against Lucky 13 attacks. The previous countermeasure was
  effective against network-based attackers, but less so against local
  attackers. The new countermeasure defends against local attackers, even if
  they have access to fine-grained measurements. In particular, this fixes a
  local Lucky 13 cache attack found and reported by Tuba Yavuz, Farhaan
  Fowze, Ken (Yihan) Bai, Grant Hernandez, and Kevin Butler (University of
  Florida) and Dave Tian (Purdue University).
  * Fix side channel in RSA private key operations and static (finite-field)
  Diffie-Hellman. An adversary with precise enough timing and memory access
  information (typically an untrusted operating system attacking a secure
  enclave) could bypass an existing counter-measure (base blinding) and
  potentially fully recover the private key.
  * Fix a 1-byte buffer overread in mbedtls_x509_crl_parse_der(). Credit to
  OSS-Fuzz for detecting the problem and to Philippe Antoine for pinpointing
  the problematic code.
  * Zeroising of plaintext buffers in mbedtls_ssl_read() to erase unused
  application data from memory.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1608638400">- update to 2.25.0:
  * This release of Mbed TLS provides bug fixes, minor enhancements and new
  features. This release includes fixes for security issues.
  * see https://github.com/ARMmbed/mbedtls/releases/tag/v2.25.0
  * The functions mbedtls_cipher_auth_encrypt() and
  mbedtls_cipher_auth_decrypt() would write past the minimum documented size
  of the output buffer when used with NIST_KW. As a result, code using those
  functions as documented with NIST_KW could have a buffer overwrite of up to
  15 bytes, with consequences ranging up to arbitrary code execution
  depending on the location of the output buffer.
  * Limit the size of calculations performed by mbedtls_mpi_exp_mod to
  MBEDTLS_MPI_MAX_SIZE to prevent a potential denial of service when generating
  Diffie-Hellman key pairs. Credit to OSS-Fuzz.
  * A failure of the random generator was ignored in mbedtls_mpi_fill_random(),
  which is how most uses of randomization in asymmetric cryptography (including
  key generation, intermediate value randomization and blinding) are implemented.
  This could cause failures or the silent use of non-random values. A random
  generator can fail if it needs reseeding and cannot not obtain entropy, or due
  to an internal failure (which, for Mbed TLS's own CTR_DRBG or HMAC_DRBG, can
  only happen due to a misconfiguration).
  * Fix a compliance issue whereby we were not checking the tag on the algorithm
  parameters (only the size) when comparing the signature in the description part
  of the cert to the real signature. This meant that a NULL algorithm parameters
  entry would look identical to an array of REAL (size zero) to the library and
  thus the certificate would be considered valid. However, if the parameters do
  not match in any way then the certificate should be considered invalid, and
  indeed OpenSSL marks these certs as invalid when mbedtls did not. Many thanks
  to guidovranken who found this issue via differential fuzzing and reported it
  in #3629.
  * Zeroising of local buffers and variables which are used for calculations in
  mbedtls_pkcs5_pbkdf2_hmac(), mbedtls_internal_sha*_process(),
  mbedtls_internal_md*_process() and mbedtls_internal_ripemd160_process()
  functions to erase sensitive data from memory. Reported by Johan Malmgren and
  Johan Uppman Bruce from Sectra.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1611057600">- Fix build for Leap targets
- Use upstream tarball name</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1616414400">- Update to 2.26.0: [bsc#1189589, CVE-2021-24119]
  * * This release of Mbed TLS provides bug fixes, minor enhancements and new
  features. This release includes fixes for security issues.
  * see https://github.com/ARMmbed/mbedtls/releases/tag/v2.26.0
- Fix build with patch from https://github.com/ARMmbed/mbedtls/pull/4237
  mbedtls-4237.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1618488000">-  Workaround for building with gcc-11 boo#1181876</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1626782400">- Update to 2.27.0:
  API changes:
  * Update AEAD output size macros to bring them in line with the PSA Crypto
    API version 1.0 spec. This version of the spec parameterizes them on the
    key type used, as well as the key bit-size in the case of
    PSA_AEAD_TAG_LENGTH.
    The old versions of these macros were renamed and deprecated as follows:
  - PSA_AEAD_TAG_LENGTH          -&gt; PSA_AEAD_TAG_LENGTH_1_ARG
  - PSA_AEAD_ENCRYPT_OUTPUT_SIZE -&gt; PSA_AEAD_ENCRYPT_OUTPUT_SIZE_2_ARG
  - PSA_AEAD_DECRYPT_OUTPUT_SIZE -&gt; PSA_AEAD_DECRYPT_OUTPUT_SIZE_2_ARG
  - PSA_AEAD_UPDATE_OUTPUT_SIZE  -&gt; PSA_AEAD_UPDATE_OUTPUT_SIZE_2_ARG
  - PSA_AEAD_FINISH_OUTPUT_SIZE  -&gt; PSA_AEAD_FINISH_OUTPUT_SIZE_1_ARG
  - PSA_AEAD_VERIFY_OUTPUT_SIZE  -&gt; PSA_AEAD_VERIFY_OUTPUT_SIZE_1_ARG
  * Implement one-shot cipher functions, psa_cipher_encrypt and
    psa_cipher_decrypt, according to the PSA Crypto API 1.0.0
    specification.
  Features:
  * Add mbedtls_rsa_rsassa_pss_sign_ext() function allowing to generate a
    signature with a specific salt length. This function allows to validate
    test cases provided in the NIST's CAVP test suite.
  * Added support for built-in driver keys through the PSA opaque crypto
    driver interface. Refer to the documentation of
    MBEDTLS_PSA_CRYPTO_BUILTIN_KEYS for more information.
  * Implement psa_sign_message() and psa_verify_message().
  * The new function mbedtls_mpi_random() generates a random value in a
    given range uniformly.
  * Implement psa_mac_compute() and psa_mac_verify() as defined in the
    PSA Cryptograpy API 1.0.0 specification.
  * MBEDTLS_ECP_MAX_BITS is now determined automatically from the configured
    curves and no longer needs to be configured explicitly to save RAM.
  Security
  * Fix a bias in the generation of finite-field Diffie-Hellman-Merkle (DHM)
    private keys and of blinding values for DHM and elliptic curves (ECP)
    computations.
  * Fix a potential side channel vulnerability in ECDSA ephemeral key generation.
    An adversary who is capable of very precise timing measurements could
    learn partial information about the leading bits of the nonce used for the
    signature, allowing the recovery of the private key after observing a
    large number of signature operations. This completes a partial fix in
    Mbed TLS 2.20.0.
  * It was possible to configure MBEDTLS_ECP_MAX_BITS to a value that is
    too small, leading to buffer overflows in ECC operations. Fail the build
    in such a case.
  * An adversary with access to precise enough information about memory
    accesses (typically, an untrusted operating system attacking a secure
    enclave) could recover an RSA private key after observing the victim
    performing a single private-key operation.
  * An adversary with access to precise enough timing information (typically, a
    co-located process) could recover a Curve25519 or Curve448 static ECDH key
    after inputting a chosen public key and observing the victim performing the
    corresponding private-key operation.
  Bugfix
  * Add printf function attributes to mbedtls_debug_print_msg to ensure we
    get printf format specifier warnings.
  * Fix premature fopen() call in mbedtls_entropy_write_seed_file which may
    lead to seed file corruption in the case where the path to the seed file is
    equal to MBEDTLS_PLATFORM_STD_NV_SEED_FILE.
  * PSA functions other than psa_open_key now return PSA_ERROR_INVALID_HANDLE
    rather than PSA_ERROR_DOES_NOT_EXIST for an invalid handle, bringing them
    in line with version 1.0.0 of the specification.
  * PSA functions creating a key now return PSA_ERROR_INVALID_ARGUMENT rather
    than PSA_ERROR_INVALID_HANDLE when the identifier specified for the key
    to create is not valid, bringing them in line with version 1.0.0 of the
    specification.
  * Fix some cases in the bignum module where the library constructed an
    unintended representation of the value 0 which was not processed
    correctly by some bignum operations. This could happen when
    mbedtls_mpi_read_string() was called on "-0", or when
    mbedtls_mpi_mul_mpi() and mbedtls_mpi_mul_int() was called with one of
    the arguments being negative and the other being 0.
  * Fix a bug in ECDSA that would cause it to fail when the hash is all-bits
    zero.
  * Fix a compilation error when MBEDTLS_ECP_RANDOMIZE_MXZ_ALT is
    defined.
  * Fix an incorrect error code when parsing a PKCS#8 private key.
  * In a TLS client, enforce the Diffie-Hellman minimum parameter size
    set with mbedtls_ssl_conf_dhm_min_bitlen() precisely. Before, the
    minimum size was rounded down to the nearest multiple of 8.
  * In library/net_sockets.c, _POSIX_C_SOURCE and _XOPEN_SOURCE are
    defined to specific values.  If the code is used in a context
    where these are already defined, this can result in a compilation
    error.  Instead, assume that if they are defined, the values will
    be adequate to build Mbed TLS.
  * The cipher suite TLS-RSA-WITH-CAMELLIA-256-GCM-SHA384 was not available
    when SHA-1 was disabled and was offered when SHA-1 was enabled but SHA-384
    was disabled. Fix the dependency.
  * Do not offer SHA384 cipher suites when SHA-384 is disabled.
  * With MBEDTLS_PSA_CRYPTO_C disabled, some functions were getting built
    nonetheless, resulting in undefined reference errors when building a
    shared library.
  * Fix test suite code on platforms where int32_t is not int, such as
    Arm Cortex-M.
  * Fix some issues affecting MBEDTLS_ARIA_ALT implementations: a misplaced
    directive in a header and a missing initialization in the self-test.
  * Fix a missing initialization in the Camellia self-test, affecting
    MBEDTLS_CAMELLIA_ALT implementations.
  * Restore the ability to configure PSA via Mbed TLS options to support RSA
    key pair operations but exclude RSA key generation. When MBEDTLS_GENPRIME
    is not defined PSA will no longer attempt to use mbedtls_rsa_gen_key().
  * Fix a regression introduced in 2.24.0 which broke (D)TLS CBC ciphersuites
    (when the encrypt-then-MAC extension is not in use) with some ALT
    implementations of the underlying hash (SHA-1, SHA-256, SHA-384), causing
    the affected side to wrongly reject valid messages.
  * Remove outdated check-config.h check that prevented implementing the
    timing module on Mbed OS.
  * Fix PSA_ALG_TLS12_PRF and PSA_ALG_TLS12_PSK_TO_MS being too permissive
    about missing inputs.
  * Fix a resource leak in a test suite with an alternative AES
    implementation.
  * Fix a crash in mbedtls_mpi_debug_mpi on a bignum having 0 limbs. This
    could notably be triggered by setting the TLS debug level to 3 or above
    and using a Montgomery curve for the key exchange.
  * psa_verify_hash() was relying on implementation-specific behavior of
    mbedtls_rsa_rsassa_pss_verify() and was causing failures in some _ALT
    implementations. This reliance is now removed.
  * Disallow inputs of length different from the corresponding hash when
    signing or verifying with PSA_ALG_RSA_PSS (The PSA Crypto API mandates
    that PSA_ALG_RSA_PSS uses the same hash throughout the algorithm.)
  * Fix a null pointer dereference when mbedtls_mpi_exp_mod() was called with
    A=0 represented with 0 limbs. Up to and including Mbed TLS 2.26, this bug
    could not be triggered by code that constructed A with one of the
    mbedtls_mpi_read_xxx functions (including in particular TLS code) since
    those always built an mpi object with at least one limb.
  * Fix mbedtls_mpi_gcd(G,A,B) when the value of B is zero. This had no
    effect on Mbed TLS's internal use of mbedtls_mpi_gcd(), but may affect
    applications that call mbedtls_mpi_gcd() directly.
  * The PSA API no longer allows the creation or destruction of keys with a
    read-only lifetime. The persistence level PSA_KEY_PERSISTENCE_READ_ONLY
    can now only be used as intended, for keys that cannot be modified through
    normal use of the API.
  * When MBEDTLS_PSA_CRYPTO_SPM is enabled, crypto_spe.h was not included
    in all the right places. Include it from crypto_platform.h, which is
    the natural place.
  * mbedtls_pk_sign() and mbedtls_pk_verify() and their extended and
    restartable variants now always honor the specified hash length if
    nonzero. Before, for RSA, hash_len was ignored in favor of the length of
    the specified hash algorithm.
  * Fix which alert is sent in some cases to conform to the
    applicable RFC: on an invalid Finished message value, an
    invalid max_fragment_length extension, or an
    unsupported extension used by the server.
  * Correct (change from 12 to 13 bytes) the value of the macro describing the
    maximum nonce length returned by psa_aead_generate_nonce().
  Changes
  * Add extra printf compiler warning flags to builds.
  * Fix memsan build false positive in x509_crt.c with Clang 11
  * Fix the setting of the read timeout in the DTLS sample programs.
  * Remove the AES sample application programs/aes/aescrypt2 which shows
    bad cryptographic practice.
  * Alternative implementations of CMAC may now opt to not support 3DES as a
    CMAC block cipher, and still pass the CMAC self test.
  * Remove configs/config-psa-crypto.h, which was identical to the default
    configuration except for having some extra cryptographic mechanisms
    enabled and for unintended differences. This configuration was primarily
    intended to demonstrate the PSA API, and lost most of its usefulness when
    MBEDTLS_PSA_CRYPTO_C became enabled by default.
  * When building the test suites with GNU make, invoke python3 or python, not
    python2, which is no longer supported upstream.
  * When using session cache based session resumption on the server,
    double-check that custom session cache implementations return
    sessions which are consistent with the negotiated ciphersuite
    and compression method.
  * Fix build failure on MinGW toolchain when __USE_MING_ANSI_STDIO is on.
    When that flag is on, standard GNU C printf format specifiers
    should be used.
  * Reduce the default value of MBEDTLS_ECP_WINDOW_SIZE. This reduces RAM usage
    during ECC operations at a negligible performance cost.
  * mbedtls_mpi_read_binary(), mbedtls_mpi_read_binary_le() and
    mbedtls_mpi_read_string() now construct an mbedtls_mpi object with 0 limbs
    when their input has length 0. Note that this is an implementation detail
    and can change at any time, so this change should be transparent, but it
    may result in mbedtls_mpi_write_binary() or mbedtls_mpi_write_string()
    now writing an empty string where it previously wrote one or more
    zero digits when operating from values constructed with an mpi_read
    function and some mpi operations.
  * Implicitly add PSA_KEY_USAGE_SIGN_MESSAGE key usage policy flag when
    PSA_KEY_USAGE_SIGN_HASH flag is set and PSA_KEY_USAGE_VERIFY_MESSAGE flag
    when PSA_KEY_USAGE_VERIFY_HASH flag is set. This usage flag extension
    is also applied when loading a key from storage.
  * Remove mbedtls-4237.patch upstream
  * Library soname bump to libmbedcrypto7</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1642075200">- Update to 2.28.0: (bsc#1193979, CVE-2021-45450)
  API changes
  * Some fields of mbedtls_ssl_session and mbedtls_ssl_config are in a
  different order. This only affects applications that define such
  structures directly or serialize them.
  Requirement changes
  * Sign-magnitude and one's complement representations for signed integers are
  not supported. Two's complement is the only supported representation.
  Removals
  * Remove config option MBEDTLS_TLS_DEFAULT_ALLOW_SHA1_IN_CERTIFICATES,
  which allowed SHA-1 in the default TLS configuration for certificate
  signing. It was intended to facilitate the transition in environments
  with SHA-1 certificates. SHA-1 is considered a weak message digest and
  its use constitutes a security risk.
  * Remove the partial support for running unit tests via Greentea on Mbed OS,
  which had been unmaintained since 2018.
  Features
  * The identifier of the CID TLS extension can be configured by defining
  MBEDTLS_TLS_EXT_CID at compile time.
  * Warn if errors from certain functions are ignored. This is currently
  supported on GCC-like compilers and on MSVC and can be configured through
  the macro MBEDTLS_CHECK_RETURN. The warnings are always enabled
  (where supported) for critical functions where ignoring the return
  value is almost always a bug. Enable the new configuration option
  MBEDTLS_CHECK_RETURN_WARNING to get warnings for other functions. This
  is currently implemented in the AES, DES and md modules, and will be
  extended to other modules in the future.
  * Add missing PSA macros declared by PSA Crypto API 1.0.0:
  PSA_ALG_IS_SIGN_HASH, PSA_ALG_NONE, PSA_HASH_BLOCK_LENGTH, PSA_KEY_ID_NULL.
  * Add new API mbedtls_ct_memcmp for constant time buffer comparison.
  * Add PSA API definition for ARIA.
  Security
  * Zeroize several intermediate variables used to calculate the expected
  value when verifying a MAC or AEAD tag. This hardens the library in
  case the value leaks through a memory disclosure vulnerability. For
  example, a memory disclosure vulnerability could have allowed a
  man-in-the-middle to inject fake ciphertext into a DTLS connection.
  * In psa_cipher_generate_iv() and psa_cipher_encrypt(), do not read back
  from the output buffer. This fixes a potential policy bypass or decryption
  oracle vulnerability if the output buffer is in memory that is shared with
  an untrusted application.
  * Fix a double-free that happened after mbedtls_ssl_set_session() or
  mbedtls_ssl_get_session() failed with MBEDTLS_ERR_SSL_ALLOC_FAILED
  (out of memory). After that, calling mbedtls_ssl_session_free()
  and mbedtls_ssl_free() would cause an internal session buffer to
  be free()'d twice.
  Bugfix
  * Stop using reserved identifiers as local variables. Fixes #4630.
  * The GNU makefiles invoke python3 in preference to python except on Windows.
  * The check was accidentally not performed when cross-compiling for Windows
  on Linux. Fix this. Fixes #4774.
  * Prevent divide by zero if either of PSA_CIPHER_ENCRYPT_OUTPUT_SIZE() or
  PSA_CIPHER_UPDATE_OUTPUT_SIZE() were called using an asymmetric key type.
  * Fix a parameter set but unused in psa_crypto_cipher.c. Fixes #4935.
  * Don't use the obsolete header path sys/fcntl.h in unit tests.
  These header files cause compilation errors in musl.
  Fixes #4969.
  * Fix missing constraints on x86_64 and aarch64 assembly code
  for bignum multiplication that broke some bignum operations with
  (at least) Clang 12.
  Fixes #4116, #4786, #4917, #4962.
  * Fix mbedtls_cipher_crypt: AES-ECB when MBEDTLS_USE_PSA_CRYPTO is enabled.
  * Failures of alternative implementations of AES or DES single-block
  functions enabled with MBEDTLS_AES_ENCRYPT_ALT, MBEDTLS_AES_DECRYPT_ALT,
  MBEDTLS_DES_CRYPT_ECB_ALT or MBEDTLS_DES3_CRYPT_ECB_ALT were ignored.
  This does not concern the implementation provided with Mbed TLS,
  where this function cannot fail, or full-module replacements with
  MBEDTLS_AES_ALT or MBEDTLS_DES_ALT. Reported by Armelle Duboc in #1092.
  * Some failures of HMAC operations were ignored. These failures could only
  happen with an alternative implementation of the underlying hash module.
  * Fix the error returned by psa_generate_key() for a public key. Fixes #4551.
  * Fix the build of sample programs when neither MBEDTLS_ERROR_C nor
  MBEDTLS_ERROR_STRERROR_DUMMY is enabled.
  * Fix PSA_ALG_RSA_PSS verification accepting an arbitrary salt length.
  This algorithm now accepts only the same salt length for verification
  that it produces when signing, as documented. Use the new algorithm
  PSA_ALG_RSA_PSS_ANY_SALT to accept any salt length. Fixes #4946.
  * The existing predicate macro name PSA_ALG_IS_HASH_AND_SIGN is now reserved
  for algorithm values that fully encode the hashing step, as per the PSA
  Crypto API specification. This excludes PSA_ALG_RSA_PKCS1V15_SIGN_RAW and
  PSA_ALG_ECDSA_ANY. The new predicate macro PSA_ALG_IS_SIGN_HASH covers
  all algorithms that can be used with psa_{sign,verify}_hash(), including
  these two.
  * Fix issue in Makefile on Linux with SHARED=1, that caused shared libraries
  not to list other shared libraries they need.
  * Fix a bug in mbedtls_gcm_starts() when the bit length of the iv
  exceeds 2^32. Fixes #4884.
  * Fix an uninitialized variable warning in test_suite_ssl.function with GCC
  version 11.
  * Fix the build when no SHA2 module is included. Fixes #4930.
  * Fix the build when only the bignum module is included. Fixes #4929.
  * Fix a potential invalid pointer dereference and infinite loop bugs in
  pkcs12 functions when the password is empty. Fix the documentation to
  better describe the inputs to these functions and their possible values.
  Fixes #5136.
  * The key usage flags PSA_KEY_USAGE_SIGN_MESSAGE now allows the MAC
  operations psa_mac_compute() and psa_mac_sign_setup().
  * The key usage flags PSA_KEY_USAGE_VERIFY_MESSAGE now allows the MAC
  operations psa_mac_verify() and psa_mac_verify_setup().
  Changes
  * Set config option MBEDTLS_TLS_DEFAULT_ALLOW_SHA1_IN_KEY_EXCHANGE to be
  disabled by default.
  * Improve the performance of base64 constant-flow code. The result is still
  slower than the original non-constant-flow implementation, but much faster
  than the previous constant-flow implementation. Fixes #4814.
  * Indicate in the error returned if the nonce length used with
  ChaCha20-Poly1305 is invalid, and not just unsupported.
  * The mbedcrypto library includes a new source code module constant_time.c,
  containing various functions meant to resist timing side channel attacks.
  * This module does not have a separate configuration option, and functions
  from this module will be included in the build as required. Currently
  most of the interface of this module is private and may change at any
  time.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1642420800">- Fix baselib.conf</changelog>
  <changelog author="Alexander Bergmann &lt;abergmann@suse.com&gt;" date="1671624000">- Fix potential heap buffer overread and overwrite in DTLS if
  MBEDTLS_SSL_DTLS_CONNECTION_ID is enabled and
  MBEDTLS_SSL_CID_IN_LEN_MAX &gt; 2 * MBEDTLS_SSL_CID_OUT_LEN_MAX.
  (bsc#1206576, CVE-2022-46393).
  Add: mbedtls-CVE-2022-46393.patch</changelog>
</package>
<package pkgid="58dcdbdc5032260ea2da9d425ead8da0a65ea87da7a09149b6f1675f630ea6f1" name="mbedtls-devel" arch="ppc64le">
  <version epoch="0" ver="2.28.0" rel="bp154.2.3.1"/>
  <changelog author="mpluskal@suse.com" date="1531137600">- Update to version 2.11.0:
  * Features
    + Added support for the XTS block cipher mode with AES (AES-XTS). Contributed by Aorimn in pull request #414.
    + Implemented the HMAC-based extract-and-expand key derivation function (HKDF) per RFC 5869. Contributed by Thomas Fossati.
    + For TLS servers, added support for offloading private key operations to an external cryptoprocessor. Private key operations can be asynchronous to allow non-blocking operation of the TLS server stack.
    + Added support for ARIA cipher (RFC 5794) and associated TLS ciphersuites (RFC 6209). ARIA is disabled by default. To enable, see MBEDTLS_ARIA_C in config.h.
    + Added support for the CCM* block cipher mode as defined in IEEE Std 802.15.4.
    + Added an additional block mode, OFB (Output Feedback) per NIST SP 800-38a, to the AES module and cipher abstraction module.
  * API Changes
    + Mbed TLS 2.11.0 maintains source code compatibility with the last minor version, Mbed TLS 2.9.0, but extends the interface with additional capabilities. Mbed TLS 2.11.0 modifies the ABI and increases the SOVERSION.
  * Bugfix
    + Fixed the cert_write example to handle certificates signed with elliptic curves as well as RSA. Fixes #777 found by dbedev.
    + Fixed the redefinition of _WIN32_WINNT, to avoid overriding a definition used by user applications. Found and fixed by Fabio Alessandrelli.
    + Fixed compilation warnings with the IAR toolchain on 32-bit platforms. Reported by rahmanih in #683.
    + Fixed an issue with MicroBlaze support in bn_mul.h which was causing the build to fail. Found by zv-io. Fixes #1651.
    + Fixed braces in mbedtls_memory_buffer_alloc_status(). Found by sbranden in #552.
    + Added the macro MBEDTLS_X509_MAX_FILE_PATH_LEN that enables the user to configure the maximum length of a file path that can be buffered when calling mbedtls_x509_crt_parse_path(). Fixes #492.
    + Fixed redundant declaration of mbedtls_ssl_list_ciphersuites. Raised by TrinityTonic in #1359.
- Changes for version 2.9.0:
  + Security
    + Fixed an issue in the X.509 module which could lead to a buffer overread during certificate validation. Additionally, the issue could also lead to unnecessary callback checks being made or to some validation checks to be omitted. The overread could be triggered remotely, while the other issues would require a non DER-compliant certificate to be correctly signed by a trusted CA, or a trusted CA with a non DER-compliant certificate. Found by luocm. Fixes #825.
    + Fixed the buffer length assertion in the ssl_parse_certificate_request() function which could lead to an arbitrary overread of the message buffer. The overreads could be caused by receiving a malformed algorithms section which was too short. In builds with debug output, this overread data was output with the debug data.
    + Fixed a client-side bug in the validation of the server's ciphersuite choice which could potentially lead to the client accepting a ciphersuite it didn't offer or a ciphersuite that could not be used with the TLS or DTLS version chosen by the server. This could lead to corruption of internal data structures for some configurations.
  * Features
    + Added an option of MBEDTLS_AES_FEWER_TABLES, to dynamically compute smaller AES tables during runtime, thereby reducing the RAM/ROM footprint by ~6KiB. Suggested and contributed by jkivilin.
    + Added initial support for Curve448 (RFC 7748). So far only mbedtls_ecp_mul() and ECDH primitive functions (mbedtls_ecdh_gen_public(), mbedtls_ecdh_compute_shared()) are supported for now. Contributed by Nicholas Wilson.
  * API Changes
    + Mbed TLS 2.9.0 maintains source code and binary compatibility with the last minor version, Mbed TLS 2.8.0, but extends the interface with additional capabilities.
    + Extended the API with the function of mbedtls_net_poll() to allow user applications to wait for a network context to become ready before reading or writing.
    + Added the function mbedtls_ssl_check_pending() to the public API to allow a check for whether more more data is pending to be processed in the internal message buffers. This function is necessary to determine the underlying transport when event-driven IO is used.
  * Bugfix
    + Fixed a spurious uninitialized variable warning in cmac.c. Fix independently contributed by Brian J Murray and David Brown.
    + Added missing dependencies in test suites that led to build failures in configurations that omit certain hashes or public-key algorithms. Fixes #1040.
    + Fixed a C89 incompatibility issue in benchmark.c. Contributed by Brendan Shanks. Fixes #1353.
    + Added missing dependencies for MBEDTLS_HAVE_TIME_DATE and MBEDTLS_VERSION_FEATURES in some test suites. Contributed by Deomid Ryabkov. Fixes #1299, #1475.
    + Fixed the Makefile build process for building shared libraries on Mac OS X. Fixed by mnacamura.
    + Fixed parsing of PKCS#8 encoded Elliptic Curve keys. Previously Mbed TLS was unable to parse keys which had only the optional parameters field of the ECPrivateKey structure. Found by Jethro Beekman, fixed in #1379.
    + Added an optimisation to return the plaintext data more quickly on unpadded CBC decryption, as stated in the mbedtls_cipher_update() documentation. Contributed by Andy Leiserson.
    + Fixed the overriding and ignoring of return values when parsing and writing to a file in the pk_sign program. Found by kevlut in #1142.
    + Added restrictions to the usage of the error code MBEDTLS_ERR_SSL_WANT_READ to situations where data needs to be fetched from the underlying transport in order to make progress. Previously, this error code was also occasionally returned when unexpected messages were being discarded, ignoring that further messages could potentially already be pending to be processed in the internal buffers; these cases led to deadlocks when event-driven I/O was used. Found and reported by Hubert Mis in #772.
    + Fixed buffer length assertions in the ssl_parse_certificate_request() function which led to a potential one byte overread of the message buffer.
    + Fixed invalid buffer sizes being passed to zlib during record compression and decompression.
    + Raised the soversion of libmbedcrypto to match the soversion of the maintained 2.7 branch. The soversion was increased in Mbed TLS version 2.7.1 to reflect breaking changes in that release, but the increment was missed in 2.8.0 and later releases outside of the 2.7 branch.</changelog>
  <changelog author="mpluskal@suse.com" date="1535025600">- Update to version 2.12.0:
  * Security
    + Fixed a vulnerability in the TLS ciphersuites based on use of CBC and SHA-384 in DTLS/TLS 1.0 to 1.2, that allowed an active network attacker to partially recover the plaintext of messages under certains conditions by exploiting timing side-channels.
    + Fixed a vulnerability in TLS ciphersuites based on CBC, in DTLS/TLS 1.0 to 1.2, that allowed a local attacker, with the ability to execute code on the local machine as well as to manipulate network packets, to partially recover the plaintext of messages under certain conditions by using a cache attack targetting an internal MD/SHA buffer.
    + Added a counter-measure against a vulnerability in TLS ciphersuites based on CBC, in DTLS/TLS 1.0 to 1.2, that allowed a local attacker with the ability to execute code on the local machine as well as manipulate network packets, to partially recover the plaintext of messages certain conditions (see previous entry) by using a cache attack targeting the SSL input record buffer.
  * Features
    + Added new cryptographic primitives, the stream cipher Chacha20, one-time authenticator Poly1305 and AEAD construct Chacha20-Poly1305, as defined in RFC 7539. Contributed by Daniel King.
    + Added support for the CHACHA20-POLY1305 ciphersuites from RFC 7905.
    + Made the receive and transmit buffers independently configurable in size, for situations where the outgoing buffer can be fixed at a smaller size than the incoming buffer
    + Added support for the AES based key wrapping modes defined by NIST SP 800-38F algorithms KW and KWP and by RFC's 3394 and 5649.
    + Added platform support for the Haiku OS.
  * Bugfix
    + Fixed the key_app_writer example which was creating an invalid ASN.1 tag by writing an additional leading zero byte. Found by Aryeh R. #1257.
    + Fixed a C++ compilation error, caused by a variable named new. Found and fixed by Hirotaka Niisato. #1783.
    + Fixed the "no symbols" warning issued by ranlib when building on Mac OS X. Fix contributed by tabascoeye.
    + Clarified documentation for mbedtls_ssl_write() to include 0 as a valid return value. Found by @davidwu2000. #839.
    + Fixed a memory leak in mbedtls_x509_csr_parse(). Found and fixed by catenacyber, Philippe Antoine. #1623.
    + Added length checks to some TLS parsing functions. Found and fixed by Philippe Antoine from Catena cyber. #1663.
    + Remove unused headers included in x509.c. Found by Chris Hanson and fixed by Brendan Shanks. #992.
    + Fixed compilation error when MBEDTLS_ARC4_C is disabled and MBEDTLS_CIPHER_NULL_CIPHER is enabled. Found by TrinityTonic in #1719.
    + Fixed the inline assembly for the MPI multiply helper function for i386 and i386 with SSE2. Found by László Langó. #1550.
    + Fixed the namespacing in header files. Remove the mbedtls namespacing in the #include in the header files. #857.
    + Fixed a compiler warning of 'use before initialisation' in mbedtls_pk_parse_key(). Found by Martin Boye Petersen and fixed by Dawid Drozd.#1098.
    + Fixed decryption of zero length messages (which contain all padding) when a CBC based ciphersuite was used together with Encrypt-then-MAC.
    + Fixed the ssl_client2 example to send application data with 0-length content when the request_size argument is set to 0 as stated in the documentation. #1833.
    + Corrected the documentation for mbedtls_ssl_get_session(). This API has deep copy of the session, and the peer certificate is not lost. #926.
    + Fixed issues when building to the C99 standard, using -std=c99. Fixed by Nick Wilson.
  * Changes
    + Fails when receiving a TLS alert message with an invalid length, or invalid zero-length messages when using TLS 1.2. Contributed by Espressif Systems.
    + Changed the default behaviour of mbedtls_hkdf_extract() to return an error when calling with a NULL salt and non-zero salt length. Contributed by Brian J Murray
    + Change the shebang line in Perl scripts to look up perl in the PATH. Contributed by fbrosson.
    + Allow overriding the time on Windows via the platform-time abstraction. Fixed by Nick Wilson.
    + Use gmtime_r/gmtime_s for thread-safety. Fixed by Nick Wilson.</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1544529600">- Update to version 2.14.1: [bsc#1118727, CVE-2018-19608]
  Security
  * Fix timing variations and memory access variations in RSA PKCS#1 v1.5
    decryption that could lead to a Bleichenbacher-style padding oracle
    attack. In TLS, this affects servers that accept ciphersuites based on
    RSA decryption (i.e. ciphersuites whose name contains RSA but not
    (EC)DH(E)). Discovered by Eyal Ronen (Weizmann Institute),  Robert Gillham
    (University of Adelaide), Daniel Genkin (University of Michigan),
    Adi Shamir (Weizmann Institute), David Wong (NCC Group), and Yuval Yarom
    (University of Adelaide, Data61). The attack is described in more detail
    in the paper available here: http://cat.eyalro.net/cat.pdf  CVE-2018-19608
  * In mbedtls_mpi_write_binary(), don't leak the exact size of the number
    via branching and memory access patterns. An attacker who could submit
    a plaintext for RSA PKCS#1 v1.5 decryption but only observe the timing
    of the decryption and not its result could nonetheless decrypt RSA
    plaintexts and forge RSA signatures. Other asymmetric algorithms may
    have been similarly vulnerable. Reported by Eyal Ronen, Robert Gillham,
    Daniel Genkin, Adi Shamir, David Wong and Yuval Yarom.
  * Wipe sensitive buffers on the stack in the CTR_DRBG and HMAC_DRBG
    modules.
  API Changes
  * The new functions mbedtls_ctr_drbg_update_ret() and
    mbedtls_hmac_drbg_update_ret() are similar to mbedtls_ctr_drbg_update()
    and mbedtls_hmac_drbg_update() respectively, but the new functions
    report errors whereas the old functions return void. We recommend that
    applications use the new functions.
- Version 2.14.0:
  Security
  * Fix overly strict DN comparison when looking for CRLs belonging to a
    particular CA. This previously led to ignoring CRLs when the CRL's issuer
    name and the CA's subject name differed in their string encoding (e.g.,
    one using PrintableString and the other UTF8String) or in the choice of
    upper and lower case. Reported by Henrik Andersson of Bosch GmbH in issue
    [#1784].
  * Fix a flawed bounds check in server PSK hint parsing. In case the
    incoming message buffer was placed within the first 64KiB of address
    space and a PSK-(EC)DHE ciphersuite was used, this allowed an attacker
    to trigger a memory access up to 64KiB beyond the incoming message buffer,
    potentially leading to an application crash or information disclosure.
  * Fix mbedtls_mpi_is_prime() to use more rounds of probabilistic testing. The
    previous settings for the number of rounds made it practical for an
    adversary to construct non-primes that would be erroneously accepted as
    primes with high probability. This does not have an impact on the
    security of TLS, but can matter in other contexts with numbers chosen
    potentially by an adversary that should be prime and can be validated.
    For example, the number of rounds was enough to securely generate RSA key
    pairs or Diffie-Hellman parameters, but was insufficient to validate
    Diffie-Hellman parameters properly.
    See "Prime and Prejudice" by by Martin R. Albrecht and Jake Massimo and
    Kenneth G. Paterson and Juraj Somorovsky.
  Features
  * Add support for temporarily suspending expensive ECC computations after
    some configurable amount of operations. This is intended to be used in
    constrained, single-threaded systems where ECC is time consuming and can
    block other operations until they complete. This is disabled by default,
    but can be enabled by MBEDTLS_ECP_RESTARTABLE at compile time and
    configured by mbedtls_ecp_set_max_ops() at runtime. It applies to the new
    xxx_restartable functions in ECP, ECDSA, PK and X.509 (CRL not supported
    yet), and to existing functions in ECDH and SSL (currently only
    implemented client-side, for ECDHE-ECDSA ciphersuites in TLS 1.2,
    including client authentication).
  * Add support for Arm CPU DSP extensions to accelerate asymmetric key
    operations. On CPUs where the extensions are available, they can accelerate
    MPI multiplications used in ECC and RSA cryptography. Contributed by
    Aurelien Jarno.
  * Extend RSASSA-PSS signature to allow a smaller salt size. Previously, PSS
    signature always used a salt with the same length as the hash, and returned
    an error if this was not possible. Now the salt size may be up to two bytes
    shorter. This allows the library to support all hash and signature sizes
    that comply with FIPS 186-4, including SHA-512 with a 1024-bit key.
  * Add support for 128-bit keys in CTR_DRBG. Note that using keys shorter
    than 256 bits limits the security of generated material to 128 bits.
  API Changes
  * Add a common error code of `MBEDTLS_ERR_PLATFORM_FEATURE_UNSUPPORTED` for
    a feature that is not supported by underlying alternative
    implementations implementing cryptographic primitives. This is useful for
    hardware accelerators that don't implement all options or features.
  New deprecations
  * All module specific errors following the form
    MBEDTLS_ERR_XXX_FEATURE_UNAVAILABLE that indicate a feature is not
    supported are deprecated and are now replaced by the new equivalent
    platform error.
  * All module specific generic hardware acceleration errors following the
    form MBEDTLS_ERR_XXX_HW_ACCEL_FAILED that are deprecated and are replaced
    by the equivalent plaform error.
  * Deprecate the function mbedtls_mpi_is_prime() in favor of
    mbedtls_mpi_is_prime_ext() which allows specifying the number of
    Miller-Rabin rounds.
  Bugfix
  * Fix wrong order of freeing in programs/ssl/ssl_server2 example
    application leading to a memory leak in case both
    MBEDTLS_MEMORY_BUFFER_ALLOC_C and MBEDTLS_MEMORY_BACKTRACE are set.
    Fixes #2069.
  * Fix a bug in the update function for SSL ticket keys which previously
    invalidated keys of a lifetime of less than a 1s. Fixes #1968.
  * Fix failure in hmac_drbg in the benchmark sample application, when
    MBEDTLS_THREADING_C is defined. Found by TrinityTonic, #1095
  * Fix a bug in the record decryption routine ssl_decrypt_buf()
    which lead to accepting properly authenticated but improperly
    padded records in case of CBC ciphersuites using Encrypt-then-MAC.
  * Fix memory leak and freeing without initialization in the example
    program programs/x509/cert_write. Fixes #1422.
  * Ignore IV in mbedtls_cipher_set_iv() when the cipher mode is
    MBEDTLS_MODE_ECB. Found by ezdevelop. Fixes #1091.
  * Zeroize memory used for buffering or reassembling handshake messages
    after use.
  * Use `mbedtls_platform_zeroize()` instead of `memset()` for zeroization
    of sensitive data in the example programs aescrypt2 and crypt_and_hash.
  * Change the default string format used for various X.509 DN attributes to
    UTF8String. Previously, the use of the PrintableString format led to
    wildcards and non-ASCII characters being unusable in some DN attributes.
    Reported by raprepo in #1860 and by kevinpt in #468. Fix contributed by
    Thomas-Dee.
  * Fix compilation failure for configurations which use compile time
    replacements of standard calloc/free functions through the macros
    MBEDTLS_PLATFORM_CALLOC_MACRO and MBEDTLS_PLATFORM_FREE_MACRO.
    Reported by ole-de and ddhome2006. Fixes #882, #1642 and #1706.
  Changes
  * Removed support for Yotta as a build tool.
  * Add tests for session resumption in DTLS.
  * Close a test gap in (D)TLS between the client side and the server side:
    test the handling of large packets and small packets on the client side
    in the same way as on the server side.
  * Change the dtls_client and dtls_server samples to work by default over
    IPv6 and optionally by a build option over IPv4.
  * Change the use of Windows threading to use Microsoft Visual C++ runtime
    calls, rather than Win32 API calls directly. This is necessary to avoid
    conflict with C runtime usage. Found and fixed by irwir.
  * Remember the string format of X.509 DN attributes when replicating
    X.509 DNs. Previously, DN attributes were always written in their default
    string format (mostly PrintableString), which could lead to CRTs being
    created which used PrintableStrings in the issuer field even though the
    signing CA used UTF8Strings in its subject field; while X.509 compliant,
    such CRTs were rejected in some applications, e.g. some versions of
    Firefox, curl and GnuTLS. Reported in #1033 by Moschn. Fix contributed by
    Thomas-Dee.
  * Improve documentation of mbedtls_ssl_get_verify_result().
    Fixes #517 reported by github-monoculture.
  * Add MBEDTLS_MPI_GEN_PRIME_FLAG_LOW_ERR flag to mbedtls_mpi_gen_prime() and
    use it to reduce error probability in RSA key generation to levels mandated
    by FIPS-186-4.
- Version 2.13.1
  API Changes
  * Extend the platform module with an abstraction mbedtls_platform_gmtime_r()
    whose implementation should behave as a thread-safe version of gmtime().
    This allows users to configure such an implementation at compile time when
    the target system cannot be deduced automatically, by setting the option
    MBEDTLS_PLATFORM_GMTIME_R_ALT. At this stage Mbed TLS is only able to
    automatically select implementations for Windows and POSIX C libraries.
  Bugfix
  * Fix build failures on platforms where only gmtime() is available but
    neither gmtime_r() nor gmtime_s() are present. Fixes #1907.
- Version 2.13.0
  Security
  * Fix an issue in the X.509 module which could lead to a buffer overread
    during certificate extensions parsing. In case of receiving malformed
    input (extensions length field equal to 0), an illegal read of one byte
    beyond the input buffer is made. Found and analyzed by Nathan Crandall.
  Features
  * Add support for fragmentation of outgoing DTLS handshake messages. This
    is controlled by the maximum fragment length as set locally or negotiated
    with the peer, as well as by a new per-connection MTU option, set using
    mbedtls_ssl_set_mtu().
  * Add support for auto-adjustment of MTU to a safe value during the
    handshake when flights do not get through (RFC 6347, section 4.1.1.1,
    last paragraph).
  * Add support for packing multiple records within a single datagram,
    enabled by default.
  * Add support for buffering out-of-order handshake messages in DTLS.
    The maximum amount of RAM used for this can be controlled by the
    compile-time constant MBEDTLS_SSL_DTLS_MAX_BUFFERING defined
    in mbedtls/config.h.
  API Changes
  * Add function mbedtls_ssl_set_datagram_packing() to configure
    the use of datagram packing (enabled by default).
  Bugfix
  * Fix a potential memory leak in mbedtls_ssl_setup() function. An allocation
    failure in the function could lead to other buffers being leaked.
  * Fixes an issue with MBEDTLS_CHACHAPOLY_C which would not compile if
    MBEDTLS_ARC4_C and MBEDTLS_CIPHER_NULL_CIPHER weren't also defined. #1890
  * Fix a memory leak in ecp_mul_comb() if ecp_precompute_comb() fails.
    Fix contributed by Espressif Systems.
  * Add ecc extensions only if an ecc based ciphersuite is used.
    This improves compliance to RFC 4492, and as a result, solves
    interoperability issues with BouncyCastle. Raised by milenamil in #1157.
  * Replace printf with mbedtls_printf in the ARIA module. Found by
    TrinityTonic in #1908.
  * Fix potential use-after-free in mbedtls_ssl_get_max_frag_len()
    and mbedtls_ssl_get_record_expansion() after a session reset. Fixes #1941.
  * Fix a bug that caused SSL/TLS clients to incorrectly abort the handshake
    with TLS versions 1.1 and earlier when the server requested authentication
    without providing a list of CAs. This was due to an overly strict bounds
    check in parsing the CertificateRequest message,
    introduced in Mbed TLS 2.12.0. Fixes #1954.
  * Fix a miscalculation of the maximum record expansion in
    mbedtls_ssl_get_record_expansion() in case of ChachaPoly ciphersuites,
    or CBC ciphersuites in (D)TLS versions 1.1 or higher. Fixes #1913, #1914.
  * Fix undefined shifts with negative values in certificates parsing
    (found by Catena cyber using oss-fuzz)
  * Fix memory leak and free without initialization in pk_encrypt
    and pk_decrypt example programs. Reported by Brace Stout. Fixes #1128.
  * Remove redundant else statement. Raised by irwir. Fixes #1776.
  Changes
  * Copy headers preserving timestamps when doing a "make install".
    Contributed by xueruini.
  * Allow the forward declaration of public structs. Contributed by Dawid
    Drozd. Fixes #1215 raised by randombit.
  * Improve compatibility with some alternative CCM implementations by using
    CCM test vectors from RAM.
  * Add support for buffering of out-of-order handshake messages.
  * Add warnings to the documentation of the HKDF module to reduce the risk
    of misusing the mbedtls_hkdf_extract() and mbedtls_hkdf_expand()
    functions. Fixes #1775. Reported by Brian J. Murray.</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1544529601">- Library package version bumped to libmbedtls12</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1546862400">- Update to version 2.16.0:
  Features
  * Add a new config.h option of MBEDTLS_CHECK_PARAMS that enables validation of parameters in the API. This allows detection of obvious misuses of the API, such as passing NULL pointers. The API of existing functions hasn't changed, but requirements on parameters have been made more explicit in the documentation. See the corresponding API documentation for each function to see for which parameter values it is defined. This feature is disabled by default. See its API documentation in config.h for additional steps you have to take when enabling it.
  API Changes
  * The following functions in the random generator modules have been deprecated and replaced as shown below. The new functions change the return type from void to int to allow returning error codes when using MBEDTLS_&lt;MODULE&gt;_ALT for the underlying AES or message digest primitive. Fixes #1798. mbedtls_ctr_drbg_update() -&gt; mbedtls_ctr_drbg_update_ret() mbedtls_hmac_drbg_update() -&gt; mbedtls_hmac_drbg_update_ret()
  * Extend ECDH interface to enable alternative implementations.
  * Deprecate error codes of the form MBEDTLS_ERR_xxx_INVALID_KEY_LENGTH for ARIA, CAMELLIA and Blowfish. These error codes will be replaced by the more generic per-module error codes MBEDTLS_ERR_xxx_BAD_INPUT_DATA.
  * Additional parameter validation checks have been added for the following modules - AES, ARIA, Blowfish, CAMELLIA, CCM, GCM, DHM, ECP, ECDSA, ECDH, ECJPAKE, SHA, Chacha20 and Poly1305, cipher, pk, RSA, and MPI. Where modules have had parameter validation added, existing parameter checks may have changed. Some modules, such as Chacha20 had existing parameter validation whereas other modules had little. This has now been changed so that the same level of validation is present in all modules, and that it is now optional with the MBEDTLS_CHECK_PARAMS flag which by default is off. That means that checks which were previously present by default will no longer be.
  New deprecations
  * Deprecate mbedtls_ctr_drbg_update() and mbedtls_hmac_drbg_update() in favor of functions that can return an error code.
  Bugfix
  * Fix for Clang, which was reporting a warning for the bignum.c inline assembly for AMD64 targets creating string literals greater than those permitted by the ISO C99 standard. Found by Aaron Jones. Fixes #482.
  * Fix runtime error in mbedtls_platform_entropy_poll() when run through qemu user emulation. Reported and fix suggested by randombit. Fixes #1212.
  * Fix an unsafe bounds check when restoring an SSL session from a ticket. This could lead to a buffer overflow, but only in case ticket authentication was broken. Reported and fix suggested by Guido Vranken in #659.
  * Add explicit integer to enumeration type casts to example program programs/pkey/gen_key which previously led to compilation failure on some toolchains. Reported by phoenixmcallister. Fixes #2170.
  * Clarify documentation of mbedtls_ssl_set_own_cert() regarding the absence of check for certificate/key matching. Reported by Attila Molnar, #507.
  * Fix double initialization of ECC hardware that made some accelerators hang.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1567512000">- Update to version 2.16.2:
  * Security improvements and bugfixes
- Use ninja to for build</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1573646400">- Update to version 2.16.3:
  * Security improvements and bugfixes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1585828800">- Update to version 2.16.5:
  * Security improvements and bugfixes</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597665600">- update to 2.23.0:
  a lot of changes see https://github.com/ARMmbed/mbedtls/releases/tag/v2.23.0
  * Fix a side channel vulnerability in modular exponentiation that could reveal an RSA private key used in a secure enclave. Noticed by Sangho Lee, Ming-Wei Shih, Prasun Gera, Taesoo Kim and Hyesoon Kim (Georgia Institute of Technology); and Marcus Peinado (Microsoft Research). Reported by Raoul Strackx (Fortanix) in #3394.
  * Fix side channel in mbedtls_ecp_check_pub_priv() and mbedtls_pk_parse_key() / mbedtls_pk_parse_keyfile() (when loading a private key that didn't include the uncompressed public key), as well as mbedtls_ecp_mul() / mbedtls_ecp_mul_restartable() when called with a NULL f_rng argument. An attacker with access to precise enough timing and memory access information (typically an untrusted operating system attacking a secure enclave) could fully recover the ECC private key. Found and reported by Alejandro Cabrera Aldaya and Billy Brumley.
  * Fix issue in Lucky 13 counter-measure that could make it ineffective when hardware accelerators were used (using one of the MBEDTLS_SHAxxx_ALT macros). This would cause the original Lucky 13 attack to be possible in those configurations, allowing an active network attacker to recover plaintext after repeated timing measurements under some conditions. Reported and fix suggested by Luc Perneel in #3246.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1598875200">- Do not run testsuite in parallel - its not reliable</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1599480000">- Add workaround for failing builds (Python not found) due to
  https://gitlab.kitware.com/cmake/cmake/-/issues/21168</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1599652800">- update to 2.24.0:
  * see https://github.com/ARMmbed/mbedtls/releases/tag/v2.24.0
  * Fix a vulnerability in the verification of X.509 certificates when matching
  the expected common name (the cn argument of mbedtls_x509_crt_verify())
  with the actual certificate name: when the subjecAltName extension is
  present, the expected name was compared to any name in that extension
  regardless of its type. This means that an attacker could for example
  impersonate a 4-bytes or 16-byte domain by getting a certificate for the
  corresponding IPv4 or IPv6 (this would require the attacker to control that
  IP address, though). Similar attacks using other subjectAltName name types
  might be possible.
  * When checking X.509 CRLs, a certificate was only considered as revoked if
  its revocationDate was in the past according to the local clock if
  available. In particular, on builds without MBEDTLS_HAVE_TIME_DATE,
  certificates were never considered as revoked. On builds with
  MBEDTLS_HAVE_TIME_DATE, an attacker able to control the local clock (for
  example, an untrusted OS attacking a secure enclave) could prevent
  revocation of certificates via CRLs. Fixed by no longer checking the
  revocationDate field, in accordance with RFC 5280. Reported by yuemonangong
  in #3340. Reported independently and fixed by Raoul Strackx and Jethro
  * In (D)TLS record decryption, when using a CBC ciphersuites without the
  Encrypt-then-Mac extension, use constant code flow memory access patterns
  to extract and check the MAC. This is an improvement to the existing
  countermeasure against Lucky 13 attacks. The previous countermeasure was
  effective against network-based attackers, but less so against local
  attackers. The new countermeasure defends against local attackers, even if
  they have access to fine-grained measurements. In particular, this fixes a
  local Lucky 13 cache attack found and reported by Tuba Yavuz, Farhaan
  Fowze, Ken (Yihan) Bai, Grant Hernandez, and Kevin Butler (University of
  Florida) and Dave Tian (Purdue University).
  * Fix side channel in RSA private key operations and static (finite-field)
  Diffie-Hellman. An adversary with precise enough timing and memory access
  information (typically an untrusted operating system attacking a secure
  enclave) could bypass an existing counter-measure (base blinding) and
  potentially fully recover the private key.
  * Fix a 1-byte buffer overread in mbedtls_x509_crl_parse_der(). Credit to
  OSS-Fuzz for detecting the problem and to Philippe Antoine for pinpointing
  the problematic code.
  * Zeroising of plaintext buffers in mbedtls_ssl_read() to erase unused
  application data from memory.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1608638400">- update to 2.25.0:
  * This release of Mbed TLS provides bug fixes, minor enhancements and new
  features. This release includes fixes for security issues.
  * see https://github.com/ARMmbed/mbedtls/releases/tag/v2.25.0
  * The functions mbedtls_cipher_auth_encrypt() and
  mbedtls_cipher_auth_decrypt() would write past the minimum documented size
  of the output buffer when used with NIST_KW. As a result, code using those
  functions as documented with NIST_KW could have a buffer overwrite of up to
  15 bytes, with consequences ranging up to arbitrary code execution
  depending on the location of the output buffer.
  * Limit the size of calculations performed by mbedtls_mpi_exp_mod to
  MBEDTLS_MPI_MAX_SIZE to prevent a potential denial of service when generating
  Diffie-Hellman key pairs. Credit to OSS-Fuzz.
  * A failure of the random generator was ignored in mbedtls_mpi_fill_random(),
  which is how most uses of randomization in asymmetric cryptography (including
  key generation, intermediate value randomization and blinding) are implemented.
  This could cause failures or the silent use of non-random values. A random
  generator can fail if it needs reseeding and cannot not obtain entropy, or due
  to an internal failure (which, for Mbed TLS's own CTR_DRBG or HMAC_DRBG, can
  only happen due to a misconfiguration).
  * Fix a compliance issue whereby we were not checking the tag on the algorithm
  parameters (only the size) when comparing the signature in the description part
  of the cert to the real signature. This meant that a NULL algorithm parameters
  entry would look identical to an array of REAL (size zero) to the library and
  thus the certificate would be considered valid. However, if the parameters do
  not match in any way then the certificate should be considered invalid, and
  indeed OpenSSL marks these certs as invalid when mbedtls did not. Many thanks
  to guidovranken who found this issue via differential fuzzing and reported it
  in #3629.
  * Zeroising of local buffers and variables which are used for calculations in
  mbedtls_pkcs5_pbkdf2_hmac(), mbedtls_internal_sha*_process(),
  mbedtls_internal_md*_process() and mbedtls_internal_ripemd160_process()
  functions to erase sensitive data from memory. Reported by Johan Malmgren and
  Johan Uppman Bruce from Sectra.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1611057600">- Fix build for Leap targets
- Use upstream tarball name</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1616414400">- Update to 2.26.0: [bsc#1189589, CVE-2021-24119]
  * * This release of Mbed TLS provides bug fixes, minor enhancements and new
  features. This release includes fixes for security issues.
  * see https://github.com/ARMmbed/mbedtls/releases/tag/v2.26.0
- Fix build with patch from https://github.com/ARMmbed/mbedtls/pull/4237
  mbedtls-4237.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1618488000">-  Workaround for building with gcc-11 boo#1181876</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1626782400">- Update to 2.27.0:
  API changes:
  * Update AEAD output size macros to bring them in line with the PSA Crypto
    API version 1.0 spec. This version of the spec parameterizes them on the
    key type used, as well as the key bit-size in the case of
    PSA_AEAD_TAG_LENGTH.
    The old versions of these macros were renamed and deprecated as follows:
  - PSA_AEAD_TAG_LENGTH          -&gt; PSA_AEAD_TAG_LENGTH_1_ARG
  - PSA_AEAD_ENCRYPT_OUTPUT_SIZE -&gt; PSA_AEAD_ENCRYPT_OUTPUT_SIZE_2_ARG
  - PSA_AEAD_DECRYPT_OUTPUT_SIZE -&gt; PSA_AEAD_DECRYPT_OUTPUT_SIZE_2_ARG
  - PSA_AEAD_UPDATE_OUTPUT_SIZE  -&gt; PSA_AEAD_UPDATE_OUTPUT_SIZE_2_ARG
  - PSA_AEAD_FINISH_OUTPUT_SIZE  -&gt; PSA_AEAD_FINISH_OUTPUT_SIZE_1_ARG
  - PSA_AEAD_VERIFY_OUTPUT_SIZE  -&gt; PSA_AEAD_VERIFY_OUTPUT_SIZE_1_ARG
  * Implement one-shot cipher functions, psa_cipher_encrypt and
    psa_cipher_decrypt, according to the PSA Crypto API 1.0.0
    specification.
  Features:
  * Add mbedtls_rsa_rsassa_pss_sign_ext() function allowing to generate a
    signature with a specific salt length. This function allows to validate
    test cases provided in the NIST's CAVP test suite.
  * Added support for built-in driver keys through the PSA opaque crypto
    driver interface. Refer to the documentation of
    MBEDTLS_PSA_CRYPTO_BUILTIN_KEYS for more information.
  * Implement psa_sign_message() and psa_verify_message().
  * The new function mbedtls_mpi_random() generates a random value in a
    given range uniformly.
  * Implement psa_mac_compute() and psa_mac_verify() as defined in the
    PSA Cryptograpy API 1.0.0 specification.
  * MBEDTLS_ECP_MAX_BITS is now determined automatically from the configured
    curves and no longer needs to be configured explicitly to save RAM.
  Security
  * Fix a bias in the generation of finite-field Diffie-Hellman-Merkle (DHM)
    private keys and of blinding values for DHM and elliptic curves (ECP)
    computations.
  * Fix a potential side channel vulnerability in ECDSA ephemeral key generation.
    An adversary who is capable of very precise timing measurements could
    learn partial information about the leading bits of the nonce used for the
    signature, allowing the recovery of the private key after observing a
    large number of signature operations. This completes a partial fix in
    Mbed TLS 2.20.0.
  * It was possible to configure MBEDTLS_ECP_MAX_BITS to a value that is
    too small, leading to buffer overflows in ECC operations. Fail the build
    in such a case.
  * An adversary with access to precise enough information about memory
    accesses (typically, an untrusted operating system attacking a secure
    enclave) could recover an RSA private key after observing the victim
    performing a single private-key operation.
  * An adversary with access to precise enough timing information (typically, a
    co-located process) could recover a Curve25519 or Curve448 static ECDH key
    after inputting a chosen public key and observing the victim performing the
    corresponding private-key operation.
  Bugfix
  * Add printf function attributes to mbedtls_debug_print_msg to ensure we
    get printf format specifier warnings.
  * Fix premature fopen() call in mbedtls_entropy_write_seed_file which may
    lead to seed file corruption in the case where the path to the seed file is
    equal to MBEDTLS_PLATFORM_STD_NV_SEED_FILE.
  * PSA functions other than psa_open_key now return PSA_ERROR_INVALID_HANDLE
    rather than PSA_ERROR_DOES_NOT_EXIST for an invalid handle, bringing them
    in line with version 1.0.0 of the specification.
  * PSA functions creating a key now return PSA_ERROR_INVALID_ARGUMENT rather
    than PSA_ERROR_INVALID_HANDLE when the identifier specified for the key
    to create is not valid, bringing them in line with version 1.0.0 of the
    specification.
  * Fix some cases in the bignum module where the library constructed an
    unintended representation of the value 0 which was not processed
    correctly by some bignum operations. This could happen when
    mbedtls_mpi_read_string() was called on "-0", or when
    mbedtls_mpi_mul_mpi() and mbedtls_mpi_mul_int() was called with one of
    the arguments being negative and the other being 0.
  * Fix a bug in ECDSA that would cause it to fail when the hash is all-bits
    zero.
  * Fix a compilation error when MBEDTLS_ECP_RANDOMIZE_MXZ_ALT is
    defined.
  * Fix an incorrect error code when parsing a PKCS#8 private key.
  * In a TLS client, enforce the Diffie-Hellman minimum parameter size
    set with mbedtls_ssl_conf_dhm_min_bitlen() precisely. Before, the
    minimum size was rounded down to the nearest multiple of 8.
  * In library/net_sockets.c, _POSIX_C_SOURCE and _XOPEN_SOURCE are
    defined to specific values.  If the code is used in a context
    where these are already defined, this can result in a compilation
    error.  Instead, assume that if they are defined, the values will
    be adequate to build Mbed TLS.
  * The cipher suite TLS-RSA-WITH-CAMELLIA-256-GCM-SHA384 was not available
    when SHA-1 was disabled and was offered when SHA-1 was enabled but SHA-384
    was disabled. Fix the dependency.
  * Do not offer SHA384 cipher suites when SHA-384 is disabled.
  * With MBEDTLS_PSA_CRYPTO_C disabled, some functions were getting built
    nonetheless, resulting in undefined reference errors when building a
    shared library.
  * Fix test suite code on platforms where int32_t is not int, such as
    Arm Cortex-M.
  * Fix some issues affecting MBEDTLS_ARIA_ALT implementations: a misplaced
    directive in a header and a missing initialization in the self-test.
  * Fix a missing initialization in the Camellia self-test, affecting
    MBEDTLS_CAMELLIA_ALT implementations.
  * Restore the ability to configure PSA via Mbed TLS options to support RSA
    key pair operations but exclude RSA key generation. When MBEDTLS_GENPRIME
    is not defined PSA will no longer attempt to use mbedtls_rsa_gen_key().
  * Fix a regression introduced in 2.24.0 which broke (D)TLS CBC ciphersuites
    (when the encrypt-then-MAC extension is not in use) with some ALT
    implementations of the underlying hash (SHA-1, SHA-256, SHA-384), causing
    the affected side to wrongly reject valid messages.
  * Remove outdated check-config.h check that prevented implementing the
    timing module on Mbed OS.
  * Fix PSA_ALG_TLS12_PRF and PSA_ALG_TLS12_PSK_TO_MS being too permissive
    about missing inputs.
  * Fix a resource leak in a test suite with an alternative AES
    implementation.
  * Fix a crash in mbedtls_mpi_debug_mpi on a bignum having 0 limbs. This
    could notably be triggered by setting the TLS debug level to 3 or above
    and using a Montgomery curve for the key exchange.
  * psa_verify_hash() was relying on implementation-specific behavior of
    mbedtls_rsa_rsassa_pss_verify() and was causing failures in some _ALT
    implementations. This reliance is now removed.
  * Disallow inputs of length different from the corresponding hash when
    signing or verifying with PSA_ALG_RSA_PSS (The PSA Crypto API mandates
    that PSA_ALG_RSA_PSS uses the same hash throughout the algorithm.)
  * Fix a null pointer dereference when mbedtls_mpi_exp_mod() was called with
    A=0 represented with 0 limbs. Up to and including Mbed TLS 2.26, this bug
    could not be triggered by code that constructed A with one of the
    mbedtls_mpi_read_xxx functions (including in particular TLS code) since
    those always built an mpi object with at least one limb.
  * Fix mbedtls_mpi_gcd(G,A,B) when the value of B is zero. This had no
    effect on Mbed TLS's internal use of mbedtls_mpi_gcd(), but may affect
    applications that call mbedtls_mpi_gcd() directly.
  * The PSA API no longer allows the creation or destruction of keys with a
    read-only lifetime. The persistence level PSA_KEY_PERSISTENCE_READ_ONLY
    can now only be used as intended, for keys that cannot be modified through
    normal use of the API.
  * When MBEDTLS_PSA_CRYPTO_SPM is enabled, crypto_spe.h was not included
    in all the right places. Include it from crypto_platform.h, which is
    the natural place.
  * mbedtls_pk_sign() and mbedtls_pk_verify() and their extended and
    restartable variants now always honor the specified hash length if
    nonzero. Before, for RSA, hash_len was ignored in favor of the length of
    the specified hash algorithm.
  * Fix which alert is sent in some cases to conform to the
    applicable RFC: on an invalid Finished message value, an
    invalid max_fragment_length extension, or an
    unsupported extension used by the server.
  * Correct (change from 12 to 13 bytes) the value of the macro describing the
    maximum nonce length returned by psa_aead_generate_nonce().
  Changes
  * Add extra printf compiler warning flags to builds.
  * Fix memsan build false positive in x509_crt.c with Clang 11
  * Fix the setting of the read timeout in the DTLS sample programs.
  * Remove the AES sample application programs/aes/aescrypt2 which shows
    bad cryptographic practice.
  * Alternative implementations of CMAC may now opt to not support 3DES as a
    CMAC block cipher, and still pass the CMAC self test.
  * Remove configs/config-psa-crypto.h, which was identical to the default
    configuration except for having some extra cryptographic mechanisms
    enabled and for unintended differences. This configuration was primarily
    intended to demonstrate the PSA API, and lost most of its usefulness when
    MBEDTLS_PSA_CRYPTO_C became enabled by default.
  * When building the test suites with GNU make, invoke python3 or python, not
    python2, which is no longer supported upstream.
  * When using session cache based session resumption on the server,
    double-check that custom session cache implementations return
    sessions which are consistent with the negotiated ciphersuite
    and compression method.
  * Fix build failure on MinGW toolchain when __USE_MING_ANSI_STDIO is on.
    When that flag is on, standard GNU C printf format specifiers
    should be used.
  * Reduce the default value of MBEDTLS_ECP_WINDOW_SIZE. This reduces RAM usage
    during ECC operations at a negligible performance cost.
  * mbedtls_mpi_read_binary(), mbedtls_mpi_read_binary_le() and
    mbedtls_mpi_read_string() now construct an mbedtls_mpi object with 0 limbs
    when their input has length 0. Note that this is an implementation detail
    and can change at any time, so this change should be transparent, but it
    may result in mbedtls_mpi_write_binary() or mbedtls_mpi_write_string()
    now writing an empty string where it previously wrote one or more
    zero digits when operating from values constructed with an mpi_read
    function and some mpi operations.
  * Implicitly add PSA_KEY_USAGE_SIGN_MESSAGE key usage policy flag when
    PSA_KEY_USAGE_SIGN_HASH flag is set and PSA_KEY_USAGE_VERIFY_MESSAGE flag
    when PSA_KEY_USAGE_VERIFY_HASH flag is set. This usage flag extension
    is also applied when loading a key from storage.
  * Remove mbedtls-4237.patch upstream
  * Library soname bump to libmbedcrypto7</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1642075200">- Update to 2.28.0: (bsc#1193979, CVE-2021-45450)
  API changes
  * Some fields of mbedtls_ssl_session and mbedtls_ssl_config are in a
  different order. This only affects applications that define such
  structures directly or serialize them.
  Requirement changes
  * Sign-magnitude and one's complement representations for signed integers are
  not supported. Two's complement is the only supported representation.
  Removals
  * Remove config option MBEDTLS_TLS_DEFAULT_ALLOW_SHA1_IN_CERTIFICATES,
  which allowed SHA-1 in the default TLS configuration for certificate
  signing. It was intended to facilitate the transition in environments
  with SHA-1 certificates. SHA-1 is considered a weak message digest and
  its use constitutes a security risk.
  * Remove the partial support for running unit tests via Greentea on Mbed OS,
  which had been unmaintained since 2018.
  Features
  * The identifier of the CID TLS extension can be configured by defining
  MBEDTLS_TLS_EXT_CID at compile time.
  * Warn if errors from certain functions are ignored. This is currently
  supported on GCC-like compilers and on MSVC and can be configured through
  the macro MBEDTLS_CHECK_RETURN. The warnings are always enabled
  (where supported) for critical functions where ignoring the return
  value is almost always a bug. Enable the new configuration option
  MBEDTLS_CHECK_RETURN_WARNING to get warnings for other functions. This
  is currently implemented in the AES, DES and md modules, and will be
  extended to other modules in the future.
  * Add missing PSA macros declared by PSA Crypto API 1.0.0:
  PSA_ALG_IS_SIGN_HASH, PSA_ALG_NONE, PSA_HASH_BLOCK_LENGTH, PSA_KEY_ID_NULL.
  * Add new API mbedtls_ct_memcmp for constant time buffer comparison.
  * Add PSA API definition for ARIA.
  Security
  * Zeroize several intermediate variables used to calculate the expected
  value when verifying a MAC or AEAD tag. This hardens the library in
  case the value leaks through a memory disclosure vulnerability. For
  example, a memory disclosure vulnerability could have allowed a
  man-in-the-middle to inject fake ciphertext into a DTLS connection.
  * In psa_cipher_generate_iv() and psa_cipher_encrypt(), do not read back
  from the output buffer. This fixes a potential policy bypass or decryption
  oracle vulnerability if the output buffer is in memory that is shared with
  an untrusted application.
  * Fix a double-free that happened after mbedtls_ssl_set_session() or
  mbedtls_ssl_get_session() failed with MBEDTLS_ERR_SSL_ALLOC_FAILED
  (out of memory). After that, calling mbedtls_ssl_session_free()
  and mbedtls_ssl_free() would cause an internal session buffer to
  be free()'d twice.
  Bugfix
  * Stop using reserved identifiers as local variables. Fixes #4630.
  * The GNU makefiles invoke python3 in preference to python except on Windows.
  * The check was accidentally not performed when cross-compiling for Windows
  on Linux. Fix this. Fixes #4774.
  * Prevent divide by zero if either of PSA_CIPHER_ENCRYPT_OUTPUT_SIZE() or
  PSA_CIPHER_UPDATE_OUTPUT_SIZE() were called using an asymmetric key type.
  * Fix a parameter set but unused in psa_crypto_cipher.c. Fixes #4935.
  * Don't use the obsolete header path sys/fcntl.h in unit tests.
  These header files cause compilation errors in musl.
  Fixes #4969.
  * Fix missing constraints on x86_64 and aarch64 assembly code
  for bignum multiplication that broke some bignum operations with
  (at least) Clang 12.
  Fixes #4116, #4786, #4917, #4962.
  * Fix mbedtls_cipher_crypt: AES-ECB when MBEDTLS_USE_PSA_CRYPTO is enabled.
  * Failures of alternative implementations of AES or DES single-block
  functions enabled with MBEDTLS_AES_ENCRYPT_ALT, MBEDTLS_AES_DECRYPT_ALT,
  MBEDTLS_DES_CRYPT_ECB_ALT or MBEDTLS_DES3_CRYPT_ECB_ALT were ignored.
  This does not concern the implementation provided with Mbed TLS,
  where this function cannot fail, or full-module replacements with
  MBEDTLS_AES_ALT or MBEDTLS_DES_ALT. Reported by Armelle Duboc in #1092.
  * Some failures of HMAC operations were ignored. These failures could only
  happen with an alternative implementation of the underlying hash module.
  * Fix the error returned by psa_generate_key() for a public key. Fixes #4551.
  * Fix the build of sample programs when neither MBEDTLS_ERROR_C nor
  MBEDTLS_ERROR_STRERROR_DUMMY is enabled.
  * Fix PSA_ALG_RSA_PSS verification accepting an arbitrary salt length.
  This algorithm now accepts only the same salt length for verification
  that it produces when signing, as documented. Use the new algorithm
  PSA_ALG_RSA_PSS_ANY_SALT to accept any salt length. Fixes #4946.
  * The existing predicate macro name PSA_ALG_IS_HASH_AND_SIGN is now reserved
  for algorithm values that fully encode the hashing step, as per the PSA
  Crypto API specification. This excludes PSA_ALG_RSA_PKCS1V15_SIGN_RAW and
  PSA_ALG_ECDSA_ANY. The new predicate macro PSA_ALG_IS_SIGN_HASH covers
  all algorithms that can be used with psa_{sign,verify}_hash(), including
  these two.
  * Fix issue in Makefile on Linux with SHARED=1, that caused shared libraries
  not to list other shared libraries they need.
  * Fix a bug in mbedtls_gcm_starts() when the bit length of the iv
  exceeds 2^32. Fixes #4884.
  * Fix an uninitialized variable warning in test_suite_ssl.function with GCC
  version 11.
  * Fix the build when no SHA2 module is included. Fixes #4930.
  * Fix the build when only the bignum module is included. Fixes #4929.
  * Fix a potential invalid pointer dereference and infinite loop bugs in
  pkcs12 functions when the password is empty. Fix the documentation to
  better describe the inputs to these functions and their possible values.
  Fixes #5136.
  * The key usage flags PSA_KEY_USAGE_SIGN_MESSAGE now allows the MAC
  operations psa_mac_compute() and psa_mac_sign_setup().
  * The key usage flags PSA_KEY_USAGE_VERIFY_MESSAGE now allows the MAC
  operations psa_mac_verify() and psa_mac_verify_setup().
  Changes
  * Set config option MBEDTLS_TLS_DEFAULT_ALLOW_SHA1_IN_KEY_EXCHANGE to be
  disabled by default.
  * Improve the performance of base64 constant-flow code. The result is still
  slower than the original non-constant-flow implementation, but much faster
  than the previous constant-flow implementation. Fixes #4814.
  * Indicate in the error returned if the nonce length used with
  ChaCha20-Poly1305 is invalid, and not just unsupported.
  * The mbedcrypto library includes a new source code module constant_time.c,
  containing various functions meant to resist timing side channel attacks.
  * This module does not have a separate configuration option, and functions
  from this module will be included in the build as required. Currently
  most of the interface of this module is private and may change at any
  time.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1642420800">- Fix baselib.conf</changelog>
  <changelog author="Alexander Bergmann &lt;abergmann@suse.com&gt;" date="1671624000">- Fix potential heap buffer overread and overwrite in DTLS if
  MBEDTLS_SSL_DTLS_CONNECTION_ID is enabled and
  MBEDTLS_SSL_CID_IN_LEN_MAX &gt; 2 * MBEDTLS_SSL_CID_OUT_LEN_MAX.
  (bsc#1206576, CVE-2022-46393).
  Add: mbedtls-CVE-2022-46393.patch</changelog>
</package>
<package pkgid="633cc2f53ee039b053efe29d1e56a86e0e8535b5833e58f8c447c536fce34637" name="mbedtls-devel" arch="s390x">
  <version epoch="0" ver="2.28.0" rel="bp154.2.3.1"/>
  <changelog author="mpluskal@suse.com" date="1531137600">- Update to version 2.11.0:
  * Features
    + Added support for the XTS block cipher mode with AES (AES-XTS). Contributed by Aorimn in pull request #414.
    + Implemented the HMAC-based extract-and-expand key derivation function (HKDF) per RFC 5869. Contributed by Thomas Fossati.
    + For TLS servers, added support for offloading private key operations to an external cryptoprocessor. Private key operations can be asynchronous to allow non-blocking operation of the TLS server stack.
    + Added support for ARIA cipher (RFC 5794) and associated TLS ciphersuites (RFC 6209). ARIA is disabled by default. To enable, see MBEDTLS_ARIA_C in config.h.
    + Added support for the CCM* block cipher mode as defined in IEEE Std 802.15.4.
    + Added an additional block mode, OFB (Output Feedback) per NIST SP 800-38a, to the AES module and cipher abstraction module.
  * API Changes
    + Mbed TLS 2.11.0 maintains source code compatibility with the last minor version, Mbed TLS 2.9.0, but extends the interface with additional capabilities. Mbed TLS 2.11.0 modifies the ABI and increases the SOVERSION.
  * Bugfix
    + Fixed the cert_write example to handle certificates signed with elliptic curves as well as RSA. Fixes #777 found by dbedev.
    + Fixed the redefinition of _WIN32_WINNT, to avoid overriding a definition used by user applications. Found and fixed by Fabio Alessandrelli.
    + Fixed compilation warnings with the IAR toolchain on 32-bit platforms. Reported by rahmanih in #683.
    + Fixed an issue with MicroBlaze support in bn_mul.h which was causing the build to fail. Found by zv-io. Fixes #1651.
    + Fixed braces in mbedtls_memory_buffer_alloc_status(). Found by sbranden in #552.
    + Added the macro MBEDTLS_X509_MAX_FILE_PATH_LEN that enables the user to configure the maximum length of a file path that can be buffered when calling mbedtls_x509_crt_parse_path(). Fixes #492.
    + Fixed redundant declaration of mbedtls_ssl_list_ciphersuites. Raised by TrinityTonic in #1359.
- Changes for version 2.9.0:
  + Security
    + Fixed an issue in the X.509 module which could lead to a buffer overread during certificate validation. Additionally, the issue could also lead to unnecessary callback checks being made or to some validation checks to be omitted. The overread could be triggered remotely, while the other issues would require a non DER-compliant certificate to be correctly signed by a trusted CA, or a trusted CA with a non DER-compliant certificate. Found by luocm. Fixes #825.
    + Fixed the buffer length assertion in the ssl_parse_certificate_request() function which could lead to an arbitrary overread of the message buffer. The overreads could be caused by receiving a malformed algorithms section which was too short. In builds with debug output, this overread data was output with the debug data.
    + Fixed a client-side bug in the validation of the server's ciphersuite choice which could potentially lead to the client accepting a ciphersuite it didn't offer or a ciphersuite that could not be used with the TLS or DTLS version chosen by the server. This could lead to corruption of internal data structures for some configurations.
  * Features
    + Added an option of MBEDTLS_AES_FEWER_TABLES, to dynamically compute smaller AES tables during runtime, thereby reducing the RAM/ROM footprint by ~6KiB. Suggested and contributed by jkivilin.
    + Added initial support for Curve448 (RFC 7748). So far only mbedtls_ecp_mul() and ECDH primitive functions (mbedtls_ecdh_gen_public(), mbedtls_ecdh_compute_shared()) are supported for now. Contributed by Nicholas Wilson.
  * API Changes
    + Mbed TLS 2.9.0 maintains source code and binary compatibility with the last minor version, Mbed TLS 2.8.0, but extends the interface with additional capabilities.
    + Extended the API with the function of mbedtls_net_poll() to allow user applications to wait for a network context to become ready before reading or writing.
    + Added the function mbedtls_ssl_check_pending() to the public API to allow a check for whether more more data is pending to be processed in the internal message buffers. This function is necessary to determine the underlying transport when event-driven IO is used.
  * Bugfix
    + Fixed a spurious uninitialized variable warning in cmac.c. Fix independently contributed by Brian J Murray and David Brown.
    + Added missing dependencies in test suites that led to build failures in configurations that omit certain hashes or public-key algorithms. Fixes #1040.
    + Fixed a C89 incompatibility issue in benchmark.c. Contributed by Brendan Shanks. Fixes #1353.
    + Added missing dependencies for MBEDTLS_HAVE_TIME_DATE and MBEDTLS_VERSION_FEATURES in some test suites. Contributed by Deomid Ryabkov. Fixes #1299, #1475.
    + Fixed the Makefile build process for building shared libraries on Mac OS X. Fixed by mnacamura.
    + Fixed parsing of PKCS#8 encoded Elliptic Curve keys. Previously Mbed TLS was unable to parse keys which had only the optional parameters field of the ECPrivateKey structure. Found by Jethro Beekman, fixed in #1379.
    + Added an optimisation to return the plaintext data more quickly on unpadded CBC decryption, as stated in the mbedtls_cipher_update() documentation. Contributed by Andy Leiserson.
    + Fixed the overriding and ignoring of return values when parsing and writing to a file in the pk_sign program. Found by kevlut in #1142.
    + Added restrictions to the usage of the error code MBEDTLS_ERR_SSL_WANT_READ to situations where data needs to be fetched from the underlying transport in order to make progress. Previously, this error code was also occasionally returned when unexpected messages were being discarded, ignoring that further messages could potentially already be pending to be processed in the internal buffers; these cases led to deadlocks when event-driven I/O was used. Found and reported by Hubert Mis in #772.
    + Fixed buffer length assertions in the ssl_parse_certificate_request() function which led to a potential one byte overread of the message buffer.
    + Fixed invalid buffer sizes being passed to zlib during record compression and decompression.
    + Raised the soversion of libmbedcrypto to match the soversion of the maintained 2.7 branch. The soversion was increased in Mbed TLS version 2.7.1 to reflect breaking changes in that release, but the increment was missed in 2.8.0 and later releases outside of the 2.7 branch.</changelog>
  <changelog author="mpluskal@suse.com" date="1535025600">- Update to version 2.12.0:
  * Security
    + Fixed a vulnerability in the TLS ciphersuites based on use of CBC and SHA-384 in DTLS/TLS 1.0 to 1.2, that allowed an active network attacker to partially recover the plaintext of messages under certains conditions by exploiting timing side-channels.
    + Fixed a vulnerability in TLS ciphersuites based on CBC, in DTLS/TLS 1.0 to 1.2, that allowed a local attacker, with the ability to execute code on the local machine as well as to manipulate network packets, to partially recover the plaintext of messages under certain conditions by using a cache attack targetting an internal MD/SHA buffer.
    + Added a counter-measure against a vulnerability in TLS ciphersuites based on CBC, in DTLS/TLS 1.0 to 1.2, that allowed a local attacker with the ability to execute code on the local machine as well as manipulate network packets, to partially recover the plaintext of messages certain conditions (see previous entry) by using a cache attack targeting the SSL input record buffer.
  * Features
    + Added new cryptographic primitives, the stream cipher Chacha20, one-time authenticator Poly1305 and AEAD construct Chacha20-Poly1305, as defined in RFC 7539. Contributed by Daniel King.
    + Added support for the CHACHA20-POLY1305 ciphersuites from RFC 7905.
    + Made the receive and transmit buffers independently configurable in size, for situations where the outgoing buffer can be fixed at a smaller size than the incoming buffer
    + Added support for the AES based key wrapping modes defined by NIST SP 800-38F algorithms KW and KWP and by RFC's 3394 and 5649.
    + Added platform support for the Haiku OS.
  * Bugfix
    + Fixed the key_app_writer example which was creating an invalid ASN.1 tag by writing an additional leading zero byte. Found by Aryeh R. #1257.
    + Fixed a C++ compilation error, caused by a variable named new. Found and fixed by Hirotaka Niisato. #1783.
    + Fixed the "no symbols" warning issued by ranlib when building on Mac OS X. Fix contributed by tabascoeye.
    + Clarified documentation for mbedtls_ssl_write() to include 0 as a valid return value. Found by @davidwu2000. #839.
    + Fixed a memory leak in mbedtls_x509_csr_parse(). Found and fixed by catenacyber, Philippe Antoine. #1623.
    + Added length checks to some TLS parsing functions. Found and fixed by Philippe Antoine from Catena cyber. #1663.
    + Remove unused headers included in x509.c. Found by Chris Hanson and fixed by Brendan Shanks. #992.
    + Fixed compilation error when MBEDTLS_ARC4_C is disabled and MBEDTLS_CIPHER_NULL_CIPHER is enabled. Found by TrinityTonic in #1719.
    + Fixed the inline assembly for the MPI multiply helper function for i386 and i386 with SSE2. Found by László Langó. #1550.
    + Fixed the namespacing in header files. Remove the mbedtls namespacing in the #include in the header files. #857.
    + Fixed a compiler warning of 'use before initialisation' in mbedtls_pk_parse_key(). Found by Martin Boye Petersen and fixed by Dawid Drozd.#1098.
    + Fixed decryption of zero length messages (which contain all padding) when a CBC based ciphersuite was used together with Encrypt-then-MAC.
    + Fixed the ssl_client2 example to send application data with 0-length content when the request_size argument is set to 0 as stated in the documentation. #1833.
    + Corrected the documentation for mbedtls_ssl_get_session(). This API has deep copy of the session, and the peer certificate is not lost. #926.
    + Fixed issues when building to the C99 standard, using -std=c99. Fixed by Nick Wilson.
  * Changes
    + Fails when receiving a TLS alert message with an invalid length, or invalid zero-length messages when using TLS 1.2. Contributed by Espressif Systems.
    + Changed the default behaviour of mbedtls_hkdf_extract() to return an error when calling with a NULL salt and non-zero salt length. Contributed by Brian J Murray
    + Change the shebang line in Perl scripts to look up perl in the PATH. Contributed by fbrosson.
    + Allow overriding the time on Windows via the platform-time abstraction. Fixed by Nick Wilson.
    + Use gmtime_r/gmtime_s for thread-safety. Fixed by Nick Wilson.</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1544529600">- Update to version 2.14.1: [bsc#1118727, CVE-2018-19608]
  Security
  * Fix timing variations and memory access variations in RSA PKCS#1 v1.5
    decryption that could lead to a Bleichenbacher-style padding oracle
    attack. In TLS, this affects servers that accept ciphersuites based on
    RSA decryption (i.e. ciphersuites whose name contains RSA but not
    (EC)DH(E)). Discovered by Eyal Ronen (Weizmann Institute),  Robert Gillham
    (University of Adelaide), Daniel Genkin (University of Michigan),
    Adi Shamir (Weizmann Institute), David Wong (NCC Group), and Yuval Yarom
    (University of Adelaide, Data61). The attack is described in more detail
    in the paper available here: http://cat.eyalro.net/cat.pdf  CVE-2018-19608
  * In mbedtls_mpi_write_binary(), don't leak the exact size of the number
    via branching and memory access patterns. An attacker who could submit
    a plaintext for RSA PKCS#1 v1.5 decryption but only observe the timing
    of the decryption and not its result could nonetheless decrypt RSA
    plaintexts and forge RSA signatures. Other asymmetric algorithms may
    have been similarly vulnerable. Reported by Eyal Ronen, Robert Gillham,
    Daniel Genkin, Adi Shamir, David Wong and Yuval Yarom.
  * Wipe sensitive buffers on the stack in the CTR_DRBG and HMAC_DRBG
    modules.
  API Changes
  * The new functions mbedtls_ctr_drbg_update_ret() and
    mbedtls_hmac_drbg_update_ret() are similar to mbedtls_ctr_drbg_update()
    and mbedtls_hmac_drbg_update() respectively, but the new functions
    report errors whereas the old functions return void. We recommend that
    applications use the new functions.
- Version 2.14.0:
  Security
  * Fix overly strict DN comparison when looking for CRLs belonging to a
    particular CA. This previously led to ignoring CRLs when the CRL's issuer
    name and the CA's subject name differed in their string encoding (e.g.,
    one using PrintableString and the other UTF8String) or in the choice of
    upper and lower case. Reported by Henrik Andersson of Bosch GmbH in issue
    [#1784].
  * Fix a flawed bounds check in server PSK hint parsing. In case the
    incoming message buffer was placed within the first 64KiB of address
    space and a PSK-(EC)DHE ciphersuite was used, this allowed an attacker
    to trigger a memory access up to 64KiB beyond the incoming message buffer,
    potentially leading to an application crash or information disclosure.
  * Fix mbedtls_mpi_is_prime() to use more rounds of probabilistic testing. The
    previous settings for the number of rounds made it practical for an
    adversary to construct non-primes that would be erroneously accepted as
    primes with high probability. This does not have an impact on the
    security of TLS, but can matter in other contexts with numbers chosen
    potentially by an adversary that should be prime and can be validated.
    For example, the number of rounds was enough to securely generate RSA key
    pairs or Diffie-Hellman parameters, but was insufficient to validate
    Diffie-Hellman parameters properly.
    See "Prime and Prejudice" by by Martin R. Albrecht and Jake Massimo and
    Kenneth G. Paterson and Juraj Somorovsky.
  Features
  * Add support for temporarily suspending expensive ECC computations after
    some configurable amount of operations. This is intended to be used in
    constrained, single-threaded systems where ECC is time consuming and can
    block other operations until they complete. This is disabled by default,
    but can be enabled by MBEDTLS_ECP_RESTARTABLE at compile time and
    configured by mbedtls_ecp_set_max_ops() at runtime. It applies to the new
    xxx_restartable functions in ECP, ECDSA, PK and X.509 (CRL not supported
    yet), and to existing functions in ECDH and SSL (currently only
    implemented client-side, for ECDHE-ECDSA ciphersuites in TLS 1.2,
    including client authentication).
  * Add support for Arm CPU DSP extensions to accelerate asymmetric key
    operations. On CPUs where the extensions are available, they can accelerate
    MPI multiplications used in ECC and RSA cryptography. Contributed by
    Aurelien Jarno.
  * Extend RSASSA-PSS signature to allow a smaller salt size. Previously, PSS
    signature always used a salt with the same length as the hash, and returned
    an error if this was not possible. Now the salt size may be up to two bytes
    shorter. This allows the library to support all hash and signature sizes
    that comply with FIPS 186-4, including SHA-512 with a 1024-bit key.
  * Add support for 128-bit keys in CTR_DRBG. Note that using keys shorter
    than 256 bits limits the security of generated material to 128 bits.
  API Changes
  * Add a common error code of `MBEDTLS_ERR_PLATFORM_FEATURE_UNSUPPORTED` for
    a feature that is not supported by underlying alternative
    implementations implementing cryptographic primitives. This is useful for
    hardware accelerators that don't implement all options or features.
  New deprecations
  * All module specific errors following the form
    MBEDTLS_ERR_XXX_FEATURE_UNAVAILABLE that indicate a feature is not
    supported are deprecated and are now replaced by the new equivalent
    platform error.
  * All module specific generic hardware acceleration errors following the
    form MBEDTLS_ERR_XXX_HW_ACCEL_FAILED that are deprecated and are replaced
    by the equivalent plaform error.
  * Deprecate the function mbedtls_mpi_is_prime() in favor of
    mbedtls_mpi_is_prime_ext() which allows specifying the number of
    Miller-Rabin rounds.
  Bugfix
  * Fix wrong order of freeing in programs/ssl/ssl_server2 example
    application leading to a memory leak in case both
    MBEDTLS_MEMORY_BUFFER_ALLOC_C and MBEDTLS_MEMORY_BACKTRACE are set.
    Fixes #2069.
  * Fix a bug in the update function for SSL ticket keys which previously
    invalidated keys of a lifetime of less than a 1s. Fixes #1968.
  * Fix failure in hmac_drbg in the benchmark sample application, when
    MBEDTLS_THREADING_C is defined. Found by TrinityTonic, #1095
  * Fix a bug in the record decryption routine ssl_decrypt_buf()
    which lead to accepting properly authenticated but improperly
    padded records in case of CBC ciphersuites using Encrypt-then-MAC.
  * Fix memory leak and freeing without initialization in the example
    program programs/x509/cert_write. Fixes #1422.
  * Ignore IV in mbedtls_cipher_set_iv() when the cipher mode is
    MBEDTLS_MODE_ECB. Found by ezdevelop. Fixes #1091.
  * Zeroize memory used for buffering or reassembling handshake messages
    after use.
  * Use `mbedtls_platform_zeroize()` instead of `memset()` for zeroization
    of sensitive data in the example programs aescrypt2 and crypt_and_hash.
  * Change the default string format used for various X.509 DN attributes to
    UTF8String. Previously, the use of the PrintableString format led to
    wildcards and non-ASCII characters being unusable in some DN attributes.
    Reported by raprepo in #1860 and by kevinpt in #468. Fix contributed by
    Thomas-Dee.
  * Fix compilation failure for configurations which use compile time
    replacements of standard calloc/free functions through the macros
    MBEDTLS_PLATFORM_CALLOC_MACRO and MBEDTLS_PLATFORM_FREE_MACRO.
    Reported by ole-de and ddhome2006. Fixes #882, #1642 and #1706.
  Changes
  * Removed support for Yotta as a build tool.
  * Add tests for session resumption in DTLS.
  * Close a test gap in (D)TLS between the client side and the server side:
    test the handling of large packets and small packets on the client side
    in the same way as on the server side.
  * Change the dtls_client and dtls_server samples to work by default over
    IPv6 and optionally by a build option over IPv4.
  * Change the use of Windows threading to use Microsoft Visual C++ runtime
    calls, rather than Win32 API calls directly. This is necessary to avoid
    conflict with C runtime usage. Found and fixed by irwir.
  * Remember the string format of X.509 DN attributes when replicating
    X.509 DNs. Previously, DN attributes were always written in their default
    string format (mostly PrintableString), which could lead to CRTs being
    created which used PrintableStrings in the issuer field even though the
    signing CA used UTF8Strings in its subject field; while X.509 compliant,
    such CRTs were rejected in some applications, e.g. some versions of
    Firefox, curl and GnuTLS. Reported in #1033 by Moschn. Fix contributed by
    Thomas-Dee.
  * Improve documentation of mbedtls_ssl_get_verify_result().
    Fixes #517 reported by github-monoculture.
  * Add MBEDTLS_MPI_GEN_PRIME_FLAG_LOW_ERR flag to mbedtls_mpi_gen_prime() and
    use it to reduce error probability in RSA key generation to levels mandated
    by FIPS-186-4.
- Version 2.13.1
  API Changes
  * Extend the platform module with an abstraction mbedtls_platform_gmtime_r()
    whose implementation should behave as a thread-safe version of gmtime().
    This allows users to configure such an implementation at compile time when
    the target system cannot be deduced automatically, by setting the option
    MBEDTLS_PLATFORM_GMTIME_R_ALT. At this stage Mbed TLS is only able to
    automatically select implementations for Windows and POSIX C libraries.
  Bugfix
  * Fix build failures on platforms where only gmtime() is available but
    neither gmtime_r() nor gmtime_s() are present. Fixes #1907.
- Version 2.13.0
  Security
  * Fix an issue in the X.509 module which could lead to a buffer overread
    during certificate extensions parsing. In case of receiving malformed
    input (extensions length field equal to 0), an illegal read of one byte
    beyond the input buffer is made. Found and analyzed by Nathan Crandall.
  Features
  * Add support for fragmentation of outgoing DTLS handshake messages. This
    is controlled by the maximum fragment length as set locally or negotiated
    with the peer, as well as by a new per-connection MTU option, set using
    mbedtls_ssl_set_mtu().
  * Add support for auto-adjustment of MTU to a safe value during the
    handshake when flights do not get through (RFC 6347, section 4.1.1.1,
    last paragraph).
  * Add support for packing multiple records within a single datagram,
    enabled by default.
  * Add support for buffering out-of-order handshake messages in DTLS.
    The maximum amount of RAM used for this can be controlled by the
    compile-time constant MBEDTLS_SSL_DTLS_MAX_BUFFERING defined
    in mbedtls/config.h.
  API Changes
  * Add function mbedtls_ssl_set_datagram_packing() to configure
    the use of datagram packing (enabled by default).
  Bugfix
  * Fix a potential memory leak in mbedtls_ssl_setup() function. An allocation
    failure in the function could lead to other buffers being leaked.
  * Fixes an issue with MBEDTLS_CHACHAPOLY_C which would not compile if
    MBEDTLS_ARC4_C and MBEDTLS_CIPHER_NULL_CIPHER weren't also defined. #1890
  * Fix a memory leak in ecp_mul_comb() if ecp_precompute_comb() fails.
    Fix contributed by Espressif Systems.
  * Add ecc extensions only if an ecc based ciphersuite is used.
    This improves compliance to RFC 4492, and as a result, solves
    interoperability issues with BouncyCastle. Raised by milenamil in #1157.
  * Replace printf with mbedtls_printf in the ARIA module. Found by
    TrinityTonic in #1908.
  * Fix potential use-after-free in mbedtls_ssl_get_max_frag_len()
    and mbedtls_ssl_get_record_expansion() after a session reset. Fixes #1941.
  * Fix a bug that caused SSL/TLS clients to incorrectly abort the handshake
    with TLS versions 1.1 and earlier when the server requested authentication
    without providing a list of CAs. This was due to an overly strict bounds
    check in parsing the CertificateRequest message,
    introduced in Mbed TLS 2.12.0. Fixes #1954.
  * Fix a miscalculation of the maximum record expansion in
    mbedtls_ssl_get_record_expansion() in case of ChachaPoly ciphersuites,
    or CBC ciphersuites in (D)TLS versions 1.1 or higher. Fixes #1913, #1914.
  * Fix undefined shifts with negative values in certificates parsing
    (found by Catena cyber using oss-fuzz)
  * Fix memory leak and free without initialization in pk_encrypt
    and pk_decrypt example programs. Reported by Brace Stout. Fixes #1128.
  * Remove redundant else statement. Raised by irwir. Fixes #1776.
  Changes
  * Copy headers preserving timestamps when doing a "make install".
    Contributed by xueruini.
  * Allow the forward declaration of public structs. Contributed by Dawid
    Drozd. Fixes #1215 raised by randombit.
  * Improve compatibility with some alternative CCM implementations by using
    CCM test vectors from RAM.
  * Add support for buffering of out-of-order handshake messages.
  * Add warnings to the documentation of the HKDF module to reduce the risk
    of misusing the mbedtls_hkdf_extract() and mbedtls_hkdf_expand()
    functions. Fixes #1775. Reported by Brian J. Murray.</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1544529601">- Library package version bumped to libmbedtls12</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1546862400">- Update to version 2.16.0:
  Features
  * Add a new config.h option of MBEDTLS_CHECK_PARAMS that enables validation of parameters in the API. This allows detection of obvious misuses of the API, such as passing NULL pointers. The API of existing functions hasn't changed, but requirements on parameters have been made more explicit in the documentation. See the corresponding API documentation for each function to see for which parameter values it is defined. This feature is disabled by default. See its API documentation in config.h for additional steps you have to take when enabling it.
  API Changes
  * The following functions in the random generator modules have been deprecated and replaced as shown below. The new functions change the return type from void to int to allow returning error codes when using MBEDTLS_&lt;MODULE&gt;_ALT for the underlying AES or message digest primitive. Fixes #1798. mbedtls_ctr_drbg_update() -&gt; mbedtls_ctr_drbg_update_ret() mbedtls_hmac_drbg_update() -&gt; mbedtls_hmac_drbg_update_ret()
  * Extend ECDH interface to enable alternative implementations.
  * Deprecate error codes of the form MBEDTLS_ERR_xxx_INVALID_KEY_LENGTH for ARIA, CAMELLIA and Blowfish. These error codes will be replaced by the more generic per-module error codes MBEDTLS_ERR_xxx_BAD_INPUT_DATA.
  * Additional parameter validation checks have been added for the following modules - AES, ARIA, Blowfish, CAMELLIA, CCM, GCM, DHM, ECP, ECDSA, ECDH, ECJPAKE, SHA, Chacha20 and Poly1305, cipher, pk, RSA, and MPI. Where modules have had parameter validation added, existing parameter checks may have changed. Some modules, such as Chacha20 had existing parameter validation whereas other modules had little. This has now been changed so that the same level of validation is present in all modules, and that it is now optional with the MBEDTLS_CHECK_PARAMS flag which by default is off. That means that checks which were previously present by default will no longer be.
  New deprecations
  * Deprecate mbedtls_ctr_drbg_update() and mbedtls_hmac_drbg_update() in favor of functions that can return an error code.
  Bugfix
  * Fix for Clang, which was reporting a warning for the bignum.c inline assembly for AMD64 targets creating string literals greater than those permitted by the ISO C99 standard. Found by Aaron Jones. Fixes #482.
  * Fix runtime error in mbedtls_platform_entropy_poll() when run through qemu user emulation. Reported and fix suggested by randombit. Fixes #1212.
  * Fix an unsafe bounds check when restoring an SSL session from a ticket. This could lead to a buffer overflow, but only in case ticket authentication was broken. Reported and fix suggested by Guido Vranken in #659.
  * Add explicit integer to enumeration type casts to example program programs/pkey/gen_key which previously led to compilation failure on some toolchains. Reported by phoenixmcallister. Fixes #2170.
  * Clarify documentation of mbedtls_ssl_set_own_cert() regarding the absence of check for certificate/key matching. Reported by Attila Molnar, #507.
  * Fix double initialization of ECC hardware that made some accelerators hang.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1567512000">- Update to version 2.16.2:
  * Security improvements and bugfixes
- Use ninja to for build</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1573646400">- Update to version 2.16.3:
  * Security improvements and bugfixes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1585828800">- Update to version 2.16.5:
  * Security improvements and bugfixes</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597665600">- update to 2.23.0:
  a lot of changes see https://github.com/ARMmbed/mbedtls/releases/tag/v2.23.0
  * Fix a side channel vulnerability in modular exponentiation that could reveal an RSA private key used in a secure enclave. Noticed by Sangho Lee, Ming-Wei Shih, Prasun Gera, Taesoo Kim and Hyesoon Kim (Georgia Institute of Technology); and Marcus Peinado (Microsoft Research). Reported by Raoul Strackx (Fortanix) in #3394.
  * Fix side channel in mbedtls_ecp_check_pub_priv() and mbedtls_pk_parse_key() / mbedtls_pk_parse_keyfile() (when loading a private key that didn't include the uncompressed public key), as well as mbedtls_ecp_mul() / mbedtls_ecp_mul_restartable() when called with a NULL f_rng argument. An attacker with access to precise enough timing and memory access information (typically an untrusted operating system attacking a secure enclave) could fully recover the ECC private key. Found and reported by Alejandro Cabrera Aldaya and Billy Brumley.
  * Fix issue in Lucky 13 counter-measure that could make it ineffective when hardware accelerators were used (using one of the MBEDTLS_SHAxxx_ALT macros). This would cause the original Lucky 13 attack to be possible in those configurations, allowing an active network attacker to recover plaintext after repeated timing measurements under some conditions. Reported and fix suggested by Luc Perneel in #3246.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1598875200">- Do not run testsuite in parallel - its not reliable</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1599480000">- Add workaround for failing builds (Python not found) due to
  https://gitlab.kitware.com/cmake/cmake/-/issues/21168</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1599652800">- update to 2.24.0:
  * see https://github.com/ARMmbed/mbedtls/releases/tag/v2.24.0
  * Fix a vulnerability in the verification of X.509 certificates when matching
  the expected common name (the cn argument of mbedtls_x509_crt_verify())
  with the actual certificate name: when the subjecAltName extension is
  present, the expected name was compared to any name in that extension
  regardless of its type. This means that an attacker could for example
  impersonate a 4-bytes or 16-byte domain by getting a certificate for the
  corresponding IPv4 or IPv6 (this would require the attacker to control that
  IP address, though). Similar attacks using other subjectAltName name types
  might be possible.
  * When checking X.509 CRLs, a certificate was only considered as revoked if
  its revocationDate was in the past according to the local clock if
  available. In particular, on builds without MBEDTLS_HAVE_TIME_DATE,
  certificates were never considered as revoked. On builds with
  MBEDTLS_HAVE_TIME_DATE, an attacker able to control the local clock (for
  example, an untrusted OS attacking a secure enclave) could prevent
  revocation of certificates via CRLs. Fixed by no longer checking the
  revocationDate field, in accordance with RFC 5280. Reported by yuemonangong
  in #3340. Reported independently and fixed by Raoul Strackx and Jethro
  * In (D)TLS record decryption, when using a CBC ciphersuites without the
  Encrypt-then-Mac extension, use constant code flow memory access patterns
  to extract and check the MAC. This is an improvement to the existing
  countermeasure against Lucky 13 attacks. The previous countermeasure was
  effective against network-based attackers, but less so against local
  attackers. The new countermeasure defends against local attackers, even if
  they have access to fine-grained measurements. In particular, this fixes a
  local Lucky 13 cache attack found and reported by Tuba Yavuz, Farhaan
  Fowze, Ken (Yihan) Bai, Grant Hernandez, and Kevin Butler (University of
  Florida) and Dave Tian (Purdue University).
  * Fix side channel in RSA private key operations and static (finite-field)
  Diffie-Hellman. An adversary with precise enough timing and memory access
  information (typically an untrusted operating system attacking a secure
  enclave) could bypass an existing counter-measure (base blinding) and
  potentially fully recover the private key.
  * Fix a 1-byte buffer overread in mbedtls_x509_crl_parse_der(). Credit to
  OSS-Fuzz for detecting the problem and to Philippe Antoine for pinpointing
  the problematic code.
  * Zeroising of plaintext buffers in mbedtls_ssl_read() to erase unused
  application data from memory.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1608638400">- update to 2.25.0:
  * This release of Mbed TLS provides bug fixes, minor enhancements and new
  features. This release includes fixes for security issues.
  * see https://github.com/ARMmbed/mbedtls/releases/tag/v2.25.0
  * The functions mbedtls_cipher_auth_encrypt() and
  mbedtls_cipher_auth_decrypt() would write past the minimum documented size
  of the output buffer when used with NIST_KW. As a result, code using those
  functions as documented with NIST_KW could have a buffer overwrite of up to
  15 bytes, with consequences ranging up to arbitrary code execution
  depending on the location of the output buffer.
  * Limit the size of calculations performed by mbedtls_mpi_exp_mod to
  MBEDTLS_MPI_MAX_SIZE to prevent a potential denial of service when generating
  Diffie-Hellman key pairs. Credit to OSS-Fuzz.
  * A failure of the random generator was ignored in mbedtls_mpi_fill_random(),
  which is how most uses of randomization in asymmetric cryptography (including
  key generation, intermediate value randomization and blinding) are implemented.
  This could cause failures or the silent use of non-random values. A random
  generator can fail if it needs reseeding and cannot not obtain entropy, or due
  to an internal failure (which, for Mbed TLS's own CTR_DRBG or HMAC_DRBG, can
  only happen due to a misconfiguration).
  * Fix a compliance issue whereby we were not checking the tag on the algorithm
  parameters (only the size) when comparing the signature in the description part
  of the cert to the real signature. This meant that a NULL algorithm parameters
  entry would look identical to an array of REAL (size zero) to the library and
  thus the certificate would be considered valid. However, if the parameters do
  not match in any way then the certificate should be considered invalid, and
  indeed OpenSSL marks these certs as invalid when mbedtls did not. Many thanks
  to guidovranken who found this issue via differential fuzzing and reported it
  in #3629.
  * Zeroising of local buffers and variables which are used for calculations in
  mbedtls_pkcs5_pbkdf2_hmac(), mbedtls_internal_sha*_process(),
  mbedtls_internal_md*_process() and mbedtls_internal_ripemd160_process()
  functions to erase sensitive data from memory. Reported by Johan Malmgren and
  Johan Uppman Bruce from Sectra.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1611057600">- Fix build for Leap targets
- Use upstream tarball name</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1616414400">- Update to 2.26.0: [bsc#1189589, CVE-2021-24119]
  * * This release of Mbed TLS provides bug fixes, minor enhancements and new
  features. This release includes fixes for security issues.
  * see https://github.com/ARMmbed/mbedtls/releases/tag/v2.26.0
- Fix build with patch from https://github.com/ARMmbed/mbedtls/pull/4237
  mbedtls-4237.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1618488000">-  Workaround for building with gcc-11 boo#1181876</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1626782400">- Update to 2.27.0:
  API changes:
  * Update AEAD output size macros to bring them in line with the PSA Crypto
    API version 1.0 spec. This version of the spec parameterizes them on the
    key type used, as well as the key bit-size in the case of
    PSA_AEAD_TAG_LENGTH.
    The old versions of these macros were renamed and deprecated as follows:
  - PSA_AEAD_TAG_LENGTH          -&gt; PSA_AEAD_TAG_LENGTH_1_ARG
  - PSA_AEAD_ENCRYPT_OUTPUT_SIZE -&gt; PSA_AEAD_ENCRYPT_OUTPUT_SIZE_2_ARG
  - PSA_AEAD_DECRYPT_OUTPUT_SIZE -&gt; PSA_AEAD_DECRYPT_OUTPUT_SIZE_2_ARG
  - PSA_AEAD_UPDATE_OUTPUT_SIZE  -&gt; PSA_AEAD_UPDATE_OUTPUT_SIZE_2_ARG
  - PSA_AEAD_FINISH_OUTPUT_SIZE  -&gt; PSA_AEAD_FINISH_OUTPUT_SIZE_1_ARG
  - PSA_AEAD_VERIFY_OUTPUT_SIZE  -&gt; PSA_AEAD_VERIFY_OUTPUT_SIZE_1_ARG
  * Implement one-shot cipher functions, psa_cipher_encrypt and
    psa_cipher_decrypt, according to the PSA Crypto API 1.0.0
    specification.
  Features:
  * Add mbedtls_rsa_rsassa_pss_sign_ext() function allowing to generate a
    signature with a specific salt length. This function allows to validate
    test cases provided in the NIST's CAVP test suite.
  * Added support for built-in driver keys through the PSA opaque crypto
    driver interface. Refer to the documentation of
    MBEDTLS_PSA_CRYPTO_BUILTIN_KEYS for more information.
  * Implement psa_sign_message() and psa_verify_message().
  * The new function mbedtls_mpi_random() generates a random value in a
    given range uniformly.
  * Implement psa_mac_compute() and psa_mac_verify() as defined in the
    PSA Cryptograpy API 1.0.0 specification.
  * MBEDTLS_ECP_MAX_BITS is now determined automatically from the configured
    curves and no longer needs to be configured explicitly to save RAM.
  Security
  * Fix a bias in the generation of finite-field Diffie-Hellman-Merkle (DHM)
    private keys and of blinding values for DHM and elliptic curves (ECP)
    computations.
  * Fix a potential side channel vulnerability in ECDSA ephemeral key generation.
    An adversary who is capable of very precise timing measurements could
    learn partial information about the leading bits of the nonce used for the
    signature, allowing the recovery of the private key after observing a
    large number of signature operations. This completes a partial fix in
    Mbed TLS 2.20.0.
  * It was possible to configure MBEDTLS_ECP_MAX_BITS to a value that is
    too small, leading to buffer overflows in ECC operations. Fail the build
    in such a case.
  * An adversary with access to precise enough information about memory
    accesses (typically, an untrusted operating system attacking a secure
    enclave) could recover an RSA private key after observing the victim
    performing a single private-key operation.
  * An adversary with access to precise enough timing information (typically, a
    co-located process) could recover a Curve25519 or Curve448 static ECDH key
    after inputting a chosen public key and observing the victim performing the
    corresponding private-key operation.
  Bugfix
  * Add printf function attributes to mbedtls_debug_print_msg to ensure we
    get printf format specifier warnings.
  * Fix premature fopen() call in mbedtls_entropy_write_seed_file which may
    lead to seed file corruption in the case where the path to the seed file is
    equal to MBEDTLS_PLATFORM_STD_NV_SEED_FILE.
  * PSA functions other than psa_open_key now return PSA_ERROR_INVALID_HANDLE
    rather than PSA_ERROR_DOES_NOT_EXIST for an invalid handle, bringing them
    in line with version 1.0.0 of the specification.
  * PSA functions creating a key now return PSA_ERROR_INVALID_ARGUMENT rather
    than PSA_ERROR_INVALID_HANDLE when the identifier specified for the key
    to create is not valid, bringing them in line with version 1.0.0 of the
    specification.
  * Fix some cases in the bignum module where the library constructed an
    unintended representation of the value 0 which was not processed
    correctly by some bignum operations. This could happen when
    mbedtls_mpi_read_string() was called on "-0", or when
    mbedtls_mpi_mul_mpi() and mbedtls_mpi_mul_int() was called with one of
    the arguments being negative and the other being 0.
  * Fix a bug in ECDSA that would cause it to fail when the hash is all-bits
    zero.
  * Fix a compilation error when MBEDTLS_ECP_RANDOMIZE_MXZ_ALT is
    defined.
  * Fix an incorrect error code when parsing a PKCS#8 private key.
  * In a TLS client, enforce the Diffie-Hellman minimum parameter size
    set with mbedtls_ssl_conf_dhm_min_bitlen() precisely. Before, the
    minimum size was rounded down to the nearest multiple of 8.
  * In library/net_sockets.c, _POSIX_C_SOURCE and _XOPEN_SOURCE are
    defined to specific values.  If the code is used in a context
    where these are already defined, this can result in a compilation
    error.  Instead, assume that if they are defined, the values will
    be adequate to build Mbed TLS.
  * The cipher suite TLS-RSA-WITH-CAMELLIA-256-GCM-SHA384 was not available
    when SHA-1 was disabled and was offered when SHA-1 was enabled but SHA-384
    was disabled. Fix the dependency.
  * Do not offer SHA384 cipher suites when SHA-384 is disabled.
  * With MBEDTLS_PSA_CRYPTO_C disabled, some functions were getting built
    nonetheless, resulting in undefined reference errors when building a
    shared library.
  * Fix test suite code on platforms where int32_t is not int, such as
    Arm Cortex-M.
  * Fix some issues affecting MBEDTLS_ARIA_ALT implementations: a misplaced
    directive in a header and a missing initialization in the self-test.
  * Fix a missing initialization in the Camellia self-test, affecting
    MBEDTLS_CAMELLIA_ALT implementations.
  * Restore the ability to configure PSA via Mbed TLS options to support RSA
    key pair operations but exclude RSA key generation. When MBEDTLS_GENPRIME
    is not defined PSA will no longer attempt to use mbedtls_rsa_gen_key().
  * Fix a regression introduced in 2.24.0 which broke (D)TLS CBC ciphersuites
    (when the encrypt-then-MAC extension is not in use) with some ALT
    implementations of the underlying hash (SHA-1, SHA-256, SHA-384), causing
    the affected side to wrongly reject valid messages.
  * Remove outdated check-config.h check that prevented implementing the
    timing module on Mbed OS.
  * Fix PSA_ALG_TLS12_PRF and PSA_ALG_TLS12_PSK_TO_MS being too permissive
    about missing inputs.
  * Fix a resource leak in a test suite with an alternative AES
    implementation.
  * Fix a crash in mbedtls_mpi_debug_mpi on a bignum having 0 limbs. This
    could notably be triggered by setting the TLS debug level to 3 or above
    and using a Montgomery curve for the key exchange.
  * psa_verify_hash() was relying on implementation-specific behavior of
    mbedtls_rsa_rsassa_pss_verify() and was causing failures in some _ALT
    implementations. This reliance is now removed.
  * Disallow inputs of length different from the corresponding hash when
    signing or verifying with PSA_ALG_RSA_PSS (The PSA Crypto API mandates
    that PSA_ALG_RSA_PSS uses the same hash throughout the algorithm.)
  * Fix a null pointer dereference when mbedtls_mpi_exp_mod() was called with
    A=0 represented with 0 limbs. Up to and including Mbed TLS 2.26, this bug
    could not be triggered by code that constructed A with one of the
    mbedtls_mpi_read_xxx functions (including in particular TLS code) since
    those always built an mpi object with at least one limb.
  * Fix mbedtls_mpi_gcd(G,A,B) when the value of B is zero. This had no
    effect on Mbed TLS's internal use of mbedtls_mpi_gcd(), but may affect
    applications that call mbedtls_mpi_gcd() directly.
  * The PSA API no longer allows the creation or destruction of keys with a
    read-only lifetime. The persistence level PSA_KEY_PERSISTENCE_READ_ONLY
    can now only be used as intended, for keys that cannot be modified through
    normal use of the API.
  * When MBEDTLS_PSA_CRYPTO_SPM is enabled, crypto_spe.h was not included
    in all the right places. Include it from crypto_platform.h, which is
    the natural place.
  * mbedtls_pk_sign() and mbedtls_pk_verify() and their extended and
    restartable variants now always honor the specified hash length if
    nonzero. Before, for RSA, hash_len was ignored in favor of the length of
    the specified hash algorithm.
  * Fix which alert is sent in some cases to conform to the
    applicable RFC: on an invalid Finished message value, an
    invalid max_fragment_length extension, or an
    unsupported extension used by the server.
  * Correct (change from 12 to 13 bytes) the value of the macro describing the
    maximum nonce length returned by psa_aead_generate_nonce().
  Changes
  * Add extra printf compiler warning flags to builds.
  * Fix memsan build false positive in x509_crt.c with Clang 11
  * Fix the setting of the read timeout in the DTLS sample programs.
  * Remove the AES sample application programs/aes/aescrypt2 which shows
    bad cryptographic practice.
  * Alternative implementations of CMAC may now opt to not support 3DES as a
    CMAC block cipher, and still pass the CMAC self test.
  * Remove configs/config-psa-crypto.h, which was identical to the default
    configuration except for having some extra cryptographic mechanisms
    enabled and for unintended differences. This configuration was primarily
    intended to demonstrate the PSA API, and lost most of its usefulness when
    MBEDTLS_PSA_CRYPTO_C became enabled by default.
  * When building the test suites with GNU make, invoke python3 or python, not
    python2, which is no longer supported upstream.
  * When using session cache based session resumption on the server,
    double-check that custom session cache implementations return
    sessions which are consistent with the negotiated ciphersuite
    and compression method.
  * Fix build failure on MinGW toolchain when __USE_MING_ANSI_STDIO is on.
    When that flag is on, standard GNU C printf format specifiers
    should be used.
  * Reduce the default value of MBEDTLS_ECP_WINDOW_SIZE. This reduces RAM usage
    during ECC operations at a negligible performance cost.
  * mbedtls_mpi_read_binary(), mbedtls_mpi_read_binary_le() and
    mbedtls_mpi_read_string() now construct an mbedtls_mpi object with 0 limbs
    when their input has length 0. Note that this is an implementation detail
    and can change at any time, so this change should be transparent, but it
    may result in mbedtls_mpi_write_binary() or mbedtls_mpi_write_string()
    now writing an empty string where it previously wrote one or more
    zero digits when operating from values constructed with an mpi_read
    function and some mpi operations.
  * Implicitly add PSA_KEY_USAGE_SIGN_MESSAGE key usage policy flag when
    PSA_KEY_USAGE_SIGN_HASH flag is set and PSA_KEY_USAGE_VERIFY_MESSAGE flag
    when PSA_KEY_USAGE_VERIFY_HASH flag is set. This usage flag extension
    is also applied when loading a key from storage.
  * Remove mbedtls-4237.patch upstream
  * Library soname bump to libmbedcrypto7</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1642075200">- Update to 2.28.0: (bsc#1193979, CVE-2021-45450)
  API changes
  * Some fields of mbedtls_ssl_session and mbedtls_ssl_config are in a
  different order. This only affects applications that define such
  structures directly or serialize them.
  Requirement changes
  * Sign-magnitude and one's complement representations for signed integers are
  not supported. Two's complement is the only supported representation.
  Removals
  * Remove config option MBEDTLS_TLS_DEFAULT_ALLOW_SHA1_IN_CERTIFICATES,
  which allowed SHA-1 in the default TLS configuration for certificate
  signing. It was intended to facilitate the transition in environments
  with SHA-1 certificates. SHA-1 is considered a weak message digest and
  its use constitutes a security risk.
  * Remove the partial support for running unit tests via Greentea on Mbed OS,
  which had been unmaintained since 2018.
  Features
  * The identifier of the CID TLS extension can be configured by defining
  MBEDTLS_TLS_EXT_CID at compile time.
  * Warn if errors from certain functions are ignored. This is currently
  supported on GCC-like compilers and on MSVC and can be configured through
  the macro MBEDTLS_CHECK_RETURN. The warnings are always enabled
  (where supported) for critical functions where ignoring the return
  value is almost always a bug. Enable the new configuration option
  MBEDTLS_CHECK_RETURN_WARNING to get warnings for other functions. This
  is currently implemented in the AES, DES and md modules, and will be
  extended to other modules in the future.
  * Add missing PSA macros declared by PSA Crypto API 1.0.0:
  PSA_ALG_IS_SIGN_HASH, PSA_ALG_NONE, PSA_HASH_BLOCK_LENGTH, PSA_KEY_ID_NULL.
  * Add new API mbedtls_ct_memcmp for constant time buffer comparison.
  * Add PSA API definition for ARIA.
  Security
  * Zeroize several intermediate variables used to calculate the expected
  value when verifying a MAC or AEAD tag. This hardens the library in
  case the value leaks through a memory disclosure vulnerability. For
  example, a memory disclosure vulnerability could have allowed a
  man-in-the-middle to inject fake ciphertext into a DTLS connection.
  * In psa_cipher_generate_iv() and psa_cipher_encrypt(), do not read back
  from the output buffer. This fixes a potential policy bypass or decryption
  oracle vulnerability if the output buffer is in memory that is shared with
  an untrusted application.
  * Fix a double-free that happened after mbedtls_ssl_set_session() or
  mbedtls_ssl_get_session() failed with MBEDTLS_ERR_SSL_ALLOC_FAILED
  (out of memory). After that, calling mbedtls_ssl_session_free()
  and mbedtls_ssl_free() would cause an internal session buffer to
  be free()'d twice.
  Bugfix
  * Stop using reserved identifiers as local variables. Fixes #4630.
  * The GNU makefiles invoke python3 in preference to python except on Windows.
  * The check was accidentally not performed when cross-compiling for Windows
  on Linux. Fix this. Fixes #4774.
  * Prevent divide by zero if either of PSA_CIPHER_ENCRYPT_OUTPUT_SIZE() or
  PSA_CIPHER_UPDATE_OUTPUT_SIZE() were called using an asymmetric key type.
  * Fix a parameter set but unused in psa_crypto_cipher.c. Fixes #4935.
  * Don't use the obsolete header path sys/fcntl.h in unit tests.
  These header files cause compilation errors in musl.
  Fixes #4969.
  * Fix missing constraints on x86_64 and aarch64 assembly code
  for bignum multiplication that broke some bignum operations with
  (at least) Clang 12.
  Fixes #4116, #4786, #4917, #4962.
  * Fix mbedtls_cipher_crypt: AES-ECB when MBEDTLS_USE_PSA_CRYPTO is enabled.
  * Failures of alternative implementations of AES or DES single-block
  functions enabled with MBEDTLS_AES_ENCRYPT_ALT, MBEDTLS_AES_DECRYPT_ALT,
  MBEDTLS_DES_CRYPT_ECB_ALT or MBEDTLS_DES3_CRYPT_ECB_ALT were ignored.
  This does not concern the implementation provided with Mbed TLS,
  where this function cannot fail, or full-module replacements with
  MBEDTLS_AES_ALT or MBEDTLS_DES_ALT. Reported by Armelle Duboc in #1092.
  * Some failures of HMAC operations were ignored. These failures could only
  happen with an alternative implementation of the underlying hash module.
  * Fix the error returned by psa_generate_key() for a public key. Fixes #4551.
  * Fix the build of sample programs when neither MBEDTLS_ERROR_C nor
  MBEDTLS_ERROR_STRERROR_DUMMY is enabled.
  * Fix PSA_ALG_RSA_PSS verification accepting an arbitrary salt length.
  This algorithm now accepts only the same salt length for verification
  that it produces when signing, as documented. Use the new algorithm
  PSA_ALG_RSA_PSS_ANY_SALT to accept any salt length. Fixes #4946.
  * The existing predicate macro name PSA_ALG_IS_HASH_AND_SIGN is now reserved
  for algorithm values that fully encode the hashing step, as per the PSA
  Crypto API specification. This excludes PSA_ALG_RSA_PKCS1V15_SIGN_RAW and
  PSA_ALG_ECDSA_ANY. The new predicate macro PSA_ALG_IS_SIGN_HASH covers
  all algorithms that can be used with psa_{sign,verify}_hash(), including
  these two.
  * Fix issue in Makefile on Linux with SHARED=1, that caused shared libraries
  not to list other shared libraries they need.
  * Fix a bug in mbedtls_gcm_starts() when the bit length of the iv
  exceeds 2^32. Fixes #4884.
  * Fix an uninitialized variable warning in test_suite_ssl.function with GCC
  version 11.
  * Fix the build when no SHA2 module is included. Fixes #4930.
  * Fix the build when only the bignum module is included. Fixes #4929.
  * Fix a potential invalid pointer dereference and infinite loop bugs in
  pkcs12 functions when the password is empty. Fix the documentation to
  better describe the inputs to these functions and their possible values.
  Fixes #5136.
  * The key usage flags PSA_KEY_USAGE_SIGN_MESSAGE now allows the MAC
  operations psa_mac_compute() and psa_mac_sign_setup().
  * The key usage flags PSA_KEY_USAGE_VERIFY_MESSAGE now allows the MAC
  operations psa_mac_verify() and psa_mac_verify_setup().
  Changes
  * Set config option MBEDTLS_TLS_DEFAULT_ALLOW_SHA1_IN_KEY_EXCHANGE to be
  disabled by default.
  * Improve the performance of base64 constant-flow code. The result is still
  slower than the original non-constant-flow implementation, but much faster
  than the previous constant-flow implementation. Fixes #4814.
  * Indicate in the error returned if the nonce length used with
  ChaCha20-Poly1305 is invalid, and not just unsupported.
  * The mbedcrypto library includes a new source code module constant_time.c,
  containing various functions meant to resist timing side channel attacks.
  * This module does not have a separate configuration option, and functions
  from this module will be included in the build as required. Currently
  most of the interface of this module is private and may change at any
  time.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1642420800">- Fix baselib.conf</changelog>
  <changelog author="Alexander Bergmann &lt;abergmann@suse.com&gt;" date="1671624000">- Fix potential heap buffer overread and overwrite in DTLS if
  MBEDTLS_SSL_DTLS_CONNECTION_ID is enabled and
  MBEDTLS_SSL_CID_IN_LEN_MAX &gt; 2 * MBEDTLS_SSL_CID_OUT_LEN_MAX.
  (bsc#1206576, CVE-2022-46393).
  Add: mbedtls-CVE-2022-46393.patch</changelog>
</package>
<package pkgid="9dd17984429db784839ae8f7668c683805fe4e5d044f61017f8661c68897f67a" name="mbedtls-devel" arch="x86_64">
  <version epoch="0" ver="2.28.0" rel="bp154.2.3.1"/>
  <changelog author="mpluskal@suse.com" date="1531137600">- Update to version 2.11.0:
  * Features
    + Added support for the XTS block cipher mode with AES (AES-XTS). Contributed by Aorimn in pull request #414.
    + Implemented the HMAC-based extract-and-expand key derivation function (HKDF) per RFC 5869. Contributed by Thomas Fossati.
    + For TLS servers, added support for offloading private key operations to an external cryptoprocessor. Private key operations can be asynchronous to allow non-blocking operation of the TLS server stack.
    + Added support for ARIA cipher (RFC 5794) and associated TLS ciphersuites (RFC 6209). ARIA is disabled by default. To enable, see MBEDTLS_ARIA_C in config.h.
    + Added support for the CCM* block cipher mode as defined in IEEE Std 802.15.4.
    + Added an additional block mode, OFB (Output Feedback) per NIST SP 800-38a, to the AES module and cipher abstraction module.
  * API Changes
    + Mbed TLS 2.11.0 maintains source code compatibility with the last minor version, Mbed TLS 2.9.0, but extends the interface with additional capabilities. Mbed TLS 2.11.0 modifies the ABI and increases the SOVERSION.
  * Bugfix
    + Fixed the cert_write example to handle certificates signed with elliptic curves as well as RSA. Fixes #777 found by dbedev.
    + Fixed the redefinition of _WIN32_WINNT, to avoid overriding a definition used by user applications. Found and fixed by Fabio Alessandrelli.
    + Fixed compilation warnings with the IAR toolchain on 32-bit platforms. Reported by rahmanih in #683.
    + Fixed an issue with MicroBlaze support in bn_mul.h which was causing the build to fail. Found by zv-io. Fixes #1651.
    + Fixed braces in mbedtls_memory_buffer_alloc_status(). Found by sbranden in #552.
    + Added the macro MBEDTLS_X509_MAX_FILE_PATH_LEN that enables the user to configure the maximum length of a file path that can be buffered when calling mbedtls_x509_crt_parse_path(). Fixes #492.
    + Fixed redundant declaration of mbedtls_ssl_list_ciphersuites. Raised by TrinityTonic in #1359.
- Changes for version 2.9.0:
  + Security
    + Fixed an issue in the X.509 module which could lead to a buffer overread during certificate validation. Additionally, the issue could also lead to unnecessary callback checks being made or to some validation checks to be omitted. The overread could be triggered remotely, while the other issues would require a non DER-compliant certificate to be correctly signed by a trusted CA, or a trusted CA with a non DER-compliant certificate. Found by luocm. Fixes #825.
    + Fixed the buffer length assertion in the ssl_parse_certificate_request() function which could lead to an arbitrary overread of the message buffer. The overreads could be caused by receiving a malformed algorithms section which was too short. In builds with debug output, this overread data was output with the debug data.
    + Fixed a client-side bug in the validation of the server's ciphersuite choice which could potentially lead to the client accepting a ciphersuite it didn't offer or a ciphersuite that could not be used with the TLS or DTLS version chosen by the server. This could lead to corruption of internal data structures for some configurations.
  * Features
    + Added an option of MBEDTLS_AES_FEWER_TABLES, to dynamically compute smaller AES tables during runtime, thereby reducing the RAM/ROM footprint by ~6KiB. Suggested and contributed by jkivilin.
    + Added initial support for Curve448 (RFC 7748). So far only mbedtls_ecp_mul() and ECDH primitive functions (mbedtls_ecdh_gen_public(), mbedtls_ecdh_compute_shared()) are supported for now. Contributed by Nicholas Wilson.
  * API Changes
    + Mbed TLS 2.9.0 maintains source code and binary compatibility with the last minor version, Mbed TLS 2.8.0, but extends the interface with additional capabilities.
    + Extended the API with the function of mbedtls_net_poll() to allow user applications to wait for a network context to become ready before reading or writing.
    + Added the function mbedtls_ssl_check_pending() to the public API to allow a check for whether more more data is pending to be processed in the internal message buffers. This function is necessary to determine the underlying transport when event-driven IO is used.
  * Bugfix
    + Fixed a spurious uninitialized variable warning in cmac.c. Fix independently contributed by Brian J Murray and David Brown.
    + Added missing dependencies in test suites that led to build failures in configurations that omit certain hashes or public-key algorithms. Fixes #1040.
    + Fixed a C89 incompatibility issue in benchmark.c. Contributed by Brendan Shanks. Fixes #1353.
    + Added missing dependencies for MBEDTLS_HAVE_TIME_DATE and MBEDTLS_VERSION_FEATURES in some test suites. Contributed by Deomid Ryabkov. Fixes #1299, #1475.
    + Fixed the Makefile build process for building shared libraries on Mac OS X. Fixed by mnacamura.
    + Fixed parsing of PKCS#8 encoded Elliptic Curve keys. Previously Mbed TLS was unable to parse keys which had only the optional parameters field of the ECPrivateKey structure. Found by Jethro Beekman, fixed in #1379.
    + Added an optimisation to return the plaintext data more quickly on unpadded CBC decryption, as stated in the mbedtls_cipher_update() documentation. Contributed by Andy Leiserson.
    + Fixed the overriding and ignoring of return values when parsing and writing to a file in the pk_sign program. Found by kevlut in #1142.
    + Added restrictions to the usage of the error code MBEDTLS_ERR_SSL_WANT_READ to situations where data needs to be fetched from the underlying transport in order to make progress. Previously, this error code was also occasionally returned when unexpected messages were being discarded, ignoring that further messages could potentially already be pending to be processed in the internal buffers; these cases led to deadlocks when event-driven I/O was used. Found and reported by Hubert Mis in #772.
    + Fixed buffer length assertions in the ssl_parse_certificate_request() function which led to a potential one byte overread of the message buffer.
    + Fixed invalid buffer sizes being passed to zlib during record compression and decompression.
    + Raised the soversion of libmbedcrypto to match the soversion of the maintained 2.7 branch. The soversion was increased in Mbed TLS version 2.7.1 to reflect breaking changes in that release, but the increment was missed in 2.8.0 and later releases outside of the 2.7 branch.</changelog>
  <changelog author="mpluskal@suse.com" date="1535025600">- Update to version 2.12.0:
  * Security
    + Fixed a vulnerability in the TLS ciphersuites based on use of CBC and SHA-384 in DTLS/TLS 1.0 to 1.2, that allowed an active network attacker to partially recover the plaintext of messages under certains conditions by exploiting timing side-channels.
    + Fixed a vulnerability in TLS ciphersuites based on CBC, in DTLS/TLS 1.0 to 1.2, that allowed a local attacker, with the ability to execute code on the local machine as well as to manipulate network packets, to partially recover the plaintext of messages under certain conditions by using a cache attack targetting an internal MD/SHA buffer.
    + Added a counter-measure against a vulnerability in TLS ciphersuites based on CBC, in DTLS/TLS 1.0 to 1.2, that allowed a local attacker with the ability to execute code on the local machine as well as manipulate network packets, to partially recover the plaintext of messages certain conditions (see previous entry) by using a cache attack targeting the SSL input record buffer.
  * Features
    + Added new cryptographic primitives, the stream cipher Chacha20, one-time authenticator Poly1305 and AEAD construct Chacha20-Poly1305, as defined in RFC 7539. Contributed by Daniel King.
    + Added support for the CHACHA20-POLY1305 ciphersuites from RFC 7905.
    + Made the receive and transmit buffers independently configurable in size, for situations where the outgoing buffer can be fixed at a smaller size than the incoming buffer
    + Added support for the AES based key wrapping modes defined by NIST SP 800-38F algorithms KW and KWP and by RFC's 3394 and 5649.
    + Added platform support for the Haiku OS.
  * Bugfix
    + Fixed the key_app_writer example which was creating an invalid ASN.1 tag by writing an additional leading zero byte. Found by Aryeh R. #1257.
    + Fixed a C++ compilation error, caused by a variable named new. Found and fixed by Hirotaka Niisato. #1783.
    + Fixed the "no symbols" warning issued by ranlib when building on Mac OS X. Fix contributed by tabascoeye.
    + Clarified documentation for mbedtls_ssl_write() to include 0 as a valid return value. Found by @davidwu2000. #839.
    + Fixed a memory leak in mbedtls_x509_csr_parse(). Found and fixed by catenacyber, Philippe Antoine. #1623.
    + Added length checks to some TLS parsing functions. Found and fixed by Philippe Antoine from Catena cyber. #1663.
    + Remove unused headers included in x509.c. Found by Chris Hanson and fixed by Brendan Shanks. #992.
    + Fixed compilation error when MBEDTLS_ARC4_C is disabled and MBEDTLS_CIPHER_NULL_CIPHER is enabled. Found by TrinityTonic in #1719.
    + Fixed the inline assembly for the MPI multiply helper function for i386 and i386 with SSE2. Found by László Langó. #1550.
    + Fixed the namespacing in header files. Remove the mbedtls namespacing in the #include in the header files. #857.
    + Fixed a compiler warning of 'use before initialisation' in mbedtls_pk_parse_key(). Found by Martin Boye Petersen and fixed by Dawid Drozd.#1098.
    + Fixed decryption of zero length messages (which contain all padding) when a CBC based ciphersuite was used together with Encrypt-then-MAC.
    + Fixed the ssl_client2 example to send application data with 0-length content when the request_size argument is set to 0 as stated in the documentation. #1833.
    + Corrected the documentation for mbedtls_ssl_get_session(). This API has deep copy of the session, and the peer certificate is not lost. #926.
    + Fixed issues when building to the C99 standard, using -std=c99. Fixed by Nick Wilson.
  * Changes
    + Fails when receiving a TLS alert message with an invalid length, or invalid zero-length messages when using TLS 1.2. Contributed by Espressif Systems.
    + Changed the default behaviour of mbedtls_hkdf_extract() to return an error when calling with a NULL salt and non-zero salt length. Contributed by Brian J Murray
    + Change the shebang line in Perl scripts to look up perl in the PATH. Contributed by fbrosson.
    + Allow overriding the time on Windows via the platform-time abstraction. Fixed by Nick Wilson.
    + Use gmtime_r/gmtime_s for thread-safety. Fixed by Nick Wilson.</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1544529600">- Update to version 2.14.1: [bsc#1118727, CVE-2018-19608]
  Security
  * Fix timing variations and memory access variations in RSA PKCS#1 v1.5
    decryption that could lead to a Bleichenbacher-style padding oracle
    attack. In TLS, this affects servers that accept ciphersuites based on
    RSA decryption (i.e. ciphersuites whose name contains RSA but not
    (EC)DH(E)). Discovered by Eyal Ronen (Weizmann Institute),  Robert Gillham
    (University of Adelaide), Daniel Genkin (University of Michigan),
    Adi Shamir (Weizmann Institute), David Wong (NCC Group), and Yuval Yarom
    (University of Adelaide, Data61). The attack is described in more detail
    in the paper available here: http://cat.eyalro.net/cat.pdf  CVE-2018-19608
  * In mbedtls_mpi_write_binary(), don't leak the exact size of the number
    via branching and memory access patterns. An attacker who could submit
    a plaintext for RSA PKCS#1 v1.5 decryption but only observe the timing
    of the decryption and not its result could nonetheless decrypt RSA
    plaintexts and forge RSA signatures. Other asymmetric algorithms may
    have been similarly vulnerable. Reported by Eyal Ronen, Robert Gillham,
    Daniel Genkin, Adi Shamir, David Wong and Yuval Yarom.
  * Wipe sensitive buffers on the stack in the CTR_DRBG and HMAC_DRBG
    modules.
  API Changes
  * The new functions mbedtls_ctr_drbg_update_ret() and
    mbedtls_hmac_drbg_update_ret() are similar to mbedtls_ctr_drbg_update()
    and mbedtls_hmac_drbg_update() respectively, but the new functions
    report errors whereas the old functions return void. We recommend that
    applications use the new functions.
- Version 2.14.0:
  Security
  * Fix overly strict DN comparison when looking for CRLs belonging to a
    particular CA. This previously led to ignoring CRLs when the CRL's issuer
    name and the CA's subject name differed in their string encoding (e.g.,
    one using PrintableString and the other UTF8String) or in the choice of
    upper and lower case. Reported by Henrik Andersson of Bosch GmbH in issue
    [#1784].
  * Fix a flawed bounds check in server PSK hint parsing. In case the
    incoming message buffer was placed within the first 64KiB of address
    space and a PSK-(EC)DHE ciphersuite was used, this allowed an attacker
    to trigger a memory access up to 64KiB beyond the incoming message buffer,
    potentially leading to an application crash or information disclosure.
  * Fix mbedtls_mpi_is_prime() to use more rounds of probabilistic testing. The
    previous settings for the number of rounds made it practical for an
    adversary to construct non-primes that would be erroneously accepted as
    primes with high probability. This does not have an impact on the
    security of TLS, but can matter in other contexts with numbers chosen
    potentially by an adversary that should be prime and can be validated.
    For example, the number of rounds was enough to securely generate RSA key
    pairs or Diffie-Hellman parameters, but was insufficient to validate
    Diffie-Hellman parameters properly.
    See "Prime and Prejudice" by by Martin R. Albrecht and Jake Massimo and
    Kenneth G. Paterson and Juraj Somorovsky.
  Features
  * Add support for temporarily suspending expensive ECC computations after
    some configurable amount of operations. This is intended to be used in
    constrained, single-threaded systems where ECC is time consuming and can
    block other operations until they complete. This is disabled by default,
    but can be enabled by MBEDTLS_ECP_RESTARTABLE at compile time and
    configured by mbedtls_ecp_set_max_ops() at runtime. It applies to the new
    xxx_restartable functions in ECP, ECDSA, PK and X.509 (CRL not supported
    yet), and to existing functions in ECDH and SSL (currently only
    implemented client-side, for ECDHE-ECDSA ciphersuites in TLS 1.2,
    including client authentication).
  * Add support for Arm CPU DSP extensions to accelerate asymmetric key
    operations. On CPUs where the extensions are available, they can accelerate
    MPI multiplications used in ECC and RSA cryptography. Contributed by
    Aurelien Jarno.
  * Extend RSASSA-PSS signature to allow a smaller salt size. Previously, PSS
    signature always used a salt with the same length as the hash, and returned
    an error if this was not possible. Now the salt size may be up to two bytes
    shorter. This allows the library to support all hash and signature sizes
    that comply with FIPS 186-4, including SHA-512 with a 1024-bit key.
  * Add support for 128-bit keys in CTR_DRBG. Note that using keys shorter
    than 256 bits limits the security of generated material to 128 bits.
  API Changes
  * Add a common error code of `MBEDTLS_ERR_PLATFORM_FEATURE_UNSUPPORTED` for
    a feature that is not supported by underlying alternative
    implementations implementing cryptographic primitives. This is useful for
    hardware accelerators that don't implement all options or features.
  New deprecations
  * All module specific errors following the form
    MBEDTLS_ERR_XXX_FEATURE_UNAVAILABLE that indicate a feature is not
    supported are deprecated and are now replaced by the new equivalent
    platform error.
  * All module specific generic hardware acceleration errors following the
    form MBEDTLS_ERR_XXX_HW_ACCEL_FAILED that are deprecated and are replaced
    by the equivalent plaform error.
  * Deprecate the function mbedtls_mpi_is_prime() in favor of
    mbedtls_mpi_is_prime_ext() which allows specifying the number of
    Miller-Rabin rounds.
  Bugfix
  * Fix wrong order of freeing in programs/ssl/ssl_server2 example
    application leading to a memory leak in case both
    MBEDTLS_MEMORY_BUFFER_ALLOC_C and MBEDTLS_MEMORY_BACKTRACE are set.
    Fixes #2069.
  * Fix a bug in the update function for SSL ticket keys which previously
    invalidated keys of a lifetime of less than a 1s. Fixes #1968.
  * Fix failure in hmac_drbg in the benchmark sample application, when
    MBEDTLS_THREADING_C is defined. Found by TrinityTonic, #1095
  * Fix a bug in the record decryption routine ssl_decrypt_buf()
    which lead to accepting properly authenticated but improperly
    padded records in case of CBC ciphersuites using Encrypt-then-MAC.
  * Fix memory leak and freeing without initialization in the example
    program programs/x509/cert_write. Fixes #1422.
  * Ignore IV in mbedtls_cipher_set_iv() when the cipher mode is
    MBEDTLS_MODE_ECB. Found by ezdevelop. Fixes #1091.
  * Zeroize memory used for buffering or reassembling handshake messages
    after use.
  * Use `mbedtls_platform_zeroize()` instead of `memset()` for zeroization
    of sensitive data in the example programs aescrypt2 and crypt_and_hash.
  * Change the default string format used for various X.509 DN attributes to
    UTF8String. Previously, the use of the PrintableString format led to
    wildcards and non-ASCII characters being unusable in some DN attributes.
    Reported by raprepo in #1860 and by kevinpt in #468. Fix contributed by
    Thomas-Dee.
  * Fix compilation failure for configurations which use compile time
    replacements of standard calloc/free functions through the macros
    MBEDTLS_PLATFORM_CALLOC_MACRO and MBEDTLS_PLATFORM_FREE_MACRO.
    Reported by ole-de and ddhome2006. Fixes #882, #1642 and #1706.
  Changes
  * Removed support for Yotta as a build tool.
  * Add tests for session resumption in DTLS.
  * Close a test gap in (D)TLS between the client side and the server side:
    test the handling of large packets and small packets on the client side
    in the same way as on the server side.
  * Change the dtls_client and dtls_server samples to work by default over
    IPv6 and optionally by a build option over IPv4.
  * Change the use of Windows threading to use Microsoft Visual C++ runtime
    calls, rather than Win32 API calls directly. This is necessary to avoid
    conflict with C runtime usage. Found and fixed by irwir.
  * Remember the string format of X.509 DN attributes when replicating
    X.509 DNs. Previously, DN attributes were always written in their default
    string format (mostly PrintableString), which could lead to CRTs being
    created which used PrintableStrings in the issuer field even though the
    signing CA used UTF8Strings in its subject field; while X.509 compliant,
    such CRTs were rejected in some applications, e.g. some versions of
    Firefox, curl and GnuTLS. Reported in #1033 by Moschn. Fix contributed by
    Thomas-Dee.
  * Improve documentation of mbedtls_ssl_get_verify_result().
    Fixes #517 reported by github-monoculture.
  * Add MBEDTLS_MPI_GEN_PRIME_FLAG_LOW_ERR flag to mbedtls_mpi_gen_prime() and
    use it to reduce error probability in RSA key generation to levels mandated
    by FIPS-186-4.
- Version 2.13.1
  API Changes
  * Extend the platform module with an abstraction mbedtls_platform_gmtime_r()
    whose implementation should behave as a thread-safe version of gmtime().
    This allows users to configure such an implementation at compile time when
    the target system cannot be deduced automatically, by setting the option
    MBEDTLS_PLATFORM_GMTIME_R_ALT. At this stage Mbed TLS is only able to
    automatically select implementations for Windows and POSIX C libraries.
  Bugfix
  * Fix build failures on platforms where only gmtime() is available but
    neither gmtime_r() nor gmtime_s() are present. Fixes #1907.
- Version 2.13.0
  Security
  * Fix an issue in the X.509 module which could lead to a buffer overread
    during certificate extensions parsing. In case of receiving malformed
    input (extensions length field equal to 0), an illegal read of one byte
    beyond the input buffer is made. Found and analyzed by Nathan Crandall.
  Features
  * Add support for fragmentation of outgoing DTLS handshake messages. This
    is controlled by the maximum fragment length as set locally or negotiated
    with the peer, as well as by a new per-connection MTU option, set using
    mbedtls_ssl_set_mtu().
  * Add support for auto-adjustment of MTU to a safe value during the
    handshake when flights do not get through (RFC 6347, section 4.1.1.1,
    last paragraph).
  * Add support for packing multiple records within a single datagram,
    enabled by default.
  * Add support for buffering out-of-order handshake messages in DTLS.
    The maximum amount of RAM used for this can be controlled by the
    compile-time constant MBEDTLS_SSL_DTLS_MAX_BUFFERING defined
    in mbedtls/config.h.
  API Changes
  * Add function mbedtls_ssl_set_datagram_packing() to configure
    the use of datagram packing (enabled by default).
  Bugfix
  * Fix a potential memory leak in mbedtls_ssl_setup() function. An allocation
    failure in the function could lead to other buffers being leaked.
  * Fixes an issue with MBEDTLS_CHACHAPOLY_C which would not compile if
    MBEDTLS_ARC4_C and MBEDTLS_CIPHER_NULL_CIPHER weren't also defined. #1890
  * Fix a memory leak in ecp_mul_comb() if ecp_precompute_comb() fails.
    Fix contributed by Espressif Systems.
  * Add ecc extensions only if an ecc based ciphersuite is used.
    This improves compliance to RFC 4492, and as a result, solves
    interoperability issues with BouncyCastle. Raised by milenamil in #1157.
  * Replace printf with mbedtls_printf in the ARIA module. Found by
    TrinityTonic in #1908.
  * Fix potential use-after-free in mbedtls_ssl_get_max_frag_len()
    and mbedtls_ssl_get_record_expansion() after a session reset. Fixes #1941.
  * Fix a bug that caused SSL/TLS clients to incorrectly abort the handshake
    with TLS versions 1.1 and earlier when the server requested authentication
    without providing a list of CAs. This was due to an overly strict bounds
    check in parsing the CertificateRequest message,
    introduced in Mbed TLS 2.12.0. Fixes #1954.
  * Fix a miscalculation of the maximum record expansion in
    mbedtls_ssl_get_record_expansion() in case of ChachaPoly ciphersuites,
    or CBC ciphersuites in (D)TLS versions 1.1 or higher. Fixes #1913, #1914.
  * Fix undefined shifts with negative values in certificates parsing
    (found by Catena cyber using oss-fuzz)
  * Fix memory leak and free without initialization in pk_encrypt
    and pk_decrypt example programs. Reported by Brace Stout. Fixes #1128.
  * Remove redundant else statement. Raised by irwir. Fixes #1776.
  Changes
  * Copy headers preserving timestamps when doing a "make install".
    Contributed by xueruini.
  * Allow the forward declaration of public structs. Contributed by Dawid
    Drozd. Fixes #1215 raised by randombit.
  * Improve compatibility with some alternative CCM implementations by using
    CCM test vectors from RAM.
  * Add support for buffering of out-of-order handshake messages.
  * Add warnings to the documentation of the HKDF module to reduce the risk
    of misusing the mbedtls_hkdf_extract() and mbedtls_hkdf_expand()
    functions. Fixes #1775. Reported by Brian J. Murray.</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1544529601">- Library package version bumped to libmbedtls12</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1546862400">- Update to version 2.16.0:
  Features
  * Add a new config.h option of MBEDTLS_CHECK_PARAMS that enables validation of parameters in the API. This allows detection of obvious misuses of the API, such as passing NULL pointers. The API of existing functions hasn't changed, but requirements on parameters have been made more explicit in the documentation. See the corresponding API documentation for each function to see for which parameter values it is defined. This feature is disabled by default. See its API documentation in config.h for additional steps you have to take when enabling it.
  API Changes
  * The following functions in the random generator modules have been deprecated and replaced as shown below. The new functions change the return type from void to int to allow returning error codes when using MBEDTLS_&lt;MODULE&gt;_ALT for the underlying AES or message digest primitive. Fixes #1798. mbedtls_ctr_drbg_update() -&gt; mbedtls_ctr_drbg_update_ret() mbedtls_hmac_drbg_update() -&gt; mbedtls_hmac_drbg_update_ret()
  * Extend ECDH interface to enable alternative implementations.
  * Deprecate error codes of the form MBEDTLS_ERR_xxx_INVALID_KEY_LENGTH for ARIA, CAMELLIA and Blowfish. These error codes will be replaced by the more generic per-module error codes MBEDTLS_ERR_xxx_BAD_INPUT_DATA.
  * Additional parameter validation checks have been added for the following modules - AES, ARIA, Blowfish, CAMELLIA, CCM, GCM, DHM, ECP, ECDSA, ECDH, ECJPAKE, SHA, Chacha20 and Poly1305, cipher, pk, RSA, and MPI. Where modules have had parameter validation added, existing parameter checks may have changed. Some modules, such as Chacha20 had existing parameter validation whereas other modules had little. This has now been changed so that the same level of validation is present in all modules, and that it is now optional with the MBEDTLS_CHECK_PARAMS flag which by default is off. That means that checks which were previously present by default will no longer be.
  New deprecations
  * Deprecate mbedtls_ctr_drbg_update() and mbedtls_hmac_drbg_update() in favor of functions that can return an error code.
  Bugfix
  * Fix for Clang, which was reporting a warning for the bignum.c inline assembly for AMD64 targets creating string literals greater than those permitted by the ISO C99 standard. Found by Aaron Jones. Fixes #482.
  * Fix runtime error in mbedtls_platform_entropy_poll() when run through qemu user emulation. Reported and fix suggested by randombit. Fixes #1212.
  * Fix an unsafe bounds check when restoring an SSL session from a ticket. This could lead to a buffer overflow, but only in case ticket authentication was broken. Reported and fix suggested by Guido Vranken in #659.
  * Add explicit integer to enumeration type casts to example program programs/pkey/gen_key which previously led to compilation failure on some toolchains. Reported by phoenixmcallister. Fixes #2170.
  * Clarify documentation of mbedtls_ssl_set_own_cert() regarding the absence of check for certificate/key matching. Reported by Attila Molnar, #507.
  * Fix double initialization of ECC hardware that made some accelerators hang.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1567512000">- Update to version 2.16.2:
  * Security improvements and bugfixes
- Use ninja to for build</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1573646400">- Update to version 2.16.3:
  * Security improvements and bugfixes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1585828800">- Update to version 2.16.5:
  * Security improvements and bugfixes</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597665600">- update to 2.23.0:
  a lot of changes see https://github.com/ARMmbed/mbedtls/releases/tag/v2.23.0
  * Fix a side channel vulnerability in modular exponentiation that could reveal an RSA private key used in a secure enclave. Noticed by Sangho Lee, Ming-Wei Shih, Prasun Gera, Taesoo Kim and Hyesoon Kim (Georgia Institute of Technology); and Marcus Peinado (Microsoft Research). Reported by Raoul Strackx (Fortanix) in #3394.
  * Fix side channel in mbedtls_ecp_check_pub_priv() and mbedtls_pk_parse_key() / mbedtls_pk_parse_keyfile() (when loading a private key that didn't include the uncompressed public key), as well as mbedtls_ecp_mul() / mbedtls_ecp_mul_restartable() when called with a NULL f_rng argument. An attacker with access to precise enough timing and memory access information (typically an untrusted operating system attacking a secure enclave) could fully recover the ECC private key. Found and reported by Alejandro Cabrera Aldaya and Billy Brumley.
  * Fix issue in Lucky 13 counter-measure that could make it ineffective when hardware accelerators were used (using one of the MBEDTLS_SHAxxx_ALT macros). This would cause the original Lucky 13 attack to be possible in those configurations, allowing an active network attacker to recover plaintext after repeated timing measurements under some conditions. Reported and fix suggested by Luc Perneel in #3246.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1598875200">- Do not run testsuite in parallel - its not reliable</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1599480000">- Add workaround for failing builds (Python not found) due to
  https://gitlab.kitware.com/cmake/cmake/-/issues/21168</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1599652800">- update to 2.24.0:
  * see https://github.com/ARMmbed/mbedtls/releases/tag/v2.24.0
  * Fix a vulnerability in the verification of X.509 certificates when matching
  the expected common name (the cn argument of mbedtls_x509_crt_verify())
  with the actual certificate name: when the subjecAltName extension is
  present, the expected name was compared to any name in that extension
  regardless of its type. This means that an attacker could for example
  impersonate a 4-bytes or 16-byte domain by getting a certificate for the
  corresponding IPv4 or IPv6 (this would require the attacker to control that
  IP address, though). Similar attacks using other subjectAltName name types
  might be possible.
  * When checking X.509 CRLs, a certificate was only considered as revoked if
  its revocationDate was in the past according to the local clock if
  available. In particular, on builds without MBEDTLS_HAVE_TIME_DATE,
  certificates were never considered as revoked. On builds with
  MBEDTLS_HAVE_TIME_DATE, an attacker able to control the local clock (for
  example, an untrusted OS attacking a secure enclave) could prevent
  revocation of certificates via CRLs. Fixed by no longer checking the
  revocationDate field, in accordance with RFC 5280. Reported by yuemonangong
  in #3340. Reported independently and fixed by Raoul Strackx and Jethro
  * In (D)TLS record decryption, when using a CBC ciphersuites without the
  Encrypt-then-Mac extension, use constant code flow memory access patterns
  to extract and check the MAC. This is an improvement to the existing
  countermeasure against Lucky 13 attacks. The previous countermeasure was
  effective against network-based attackers, but less so against local
  attackers. The new countermeasure defends against local attackers, even if
  they have access to fine-grained measurements. In particular, this fixes a
  local Lucky 13 cache attack found and reported by Tuba Yavuz, Farhaan
  Fowze, Ken (Yihan) Bai, Grant Hernandez, and Kevin Butler (University of
  Florida) and Dave Tian (Purdue University).
  * Fix side channel in RSA private key operations and static (finite-field)
  Diffie-Hellman. An adversary with precise enough timing and memory access
  information (typically an untrusted operating system attacking a secure
  enclave) could bypass an existing counter-measure (base blinding) and
  potentially fully recover the private key.
  * Fix a 1-byte buffer overread in mbedtls_x509_crl_parse_der(). Credit to
  OSS-Fuzz for detecting the problem and to Philippe Antoine for pinpointing
  the problematic code.
  * Zeroising of plaintext buffers in mbedtls_ssl_read() to erase unused
  application data from memory.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1608638400">- update to 2.25.0:
  * This release of Mbed TLS provides bug fixes, minor enhancements and new
  features. This release includes fixes for security issues.
  * see https://github.com/ARMmbed/mbedtls/releases/tag/v2.25.0
  * The functions mbedtls_cipher_auth_encrypt() and
  mbedtls_cipher_auth_decrypt() would write past the minimum documented size
  of the output buffer when used with NIST_KW. As a result, code using those
  functions as documented with NIST_KW could have a buffer overwrite of up to
  15 bytes, with consequences ranging up to arbitrary code execution
  depending on the location of the output buffer.
  * Limit the size of calculations performed by mbedtls_mpi_exp_mod to
  MBEDTLS_MPI_MAX_SIZE to prevent a potential denial of service when generating
  Diffie-Hellman key pairs. Credit to OSS-Fuzz.
  * A failure of the random generator was ignored in mbedtls_mpi_fill_random(),
  which is how most uses of randomization in asymmetric cryptography (including
  key generation, intermediate value randomization and blinding) are implemented.
  This could cause failures or the silent use of non-random values. A random
  generator can fail if it needs reseeding and cannot not obtain entropy, or due
  to an internal failure (which, for Mbed TLS's own CTR_DRBG or HMAC_DRBG, can
  only happen due to a misconfiguration).
  * Fix a compliance issue whereby we were not checking the tag on the algorithm
  parameters (only the size) when comparing the signature in the description part
  of the cert to the real signature. This meant that a NULL algorithm parameters
  entry would look identical to an array of REAL (size zero) to the library and
  thus the certificate would be considered valid. However, if the parameters do
  not match in any way then the certificate should be considered invalid, and
  indeed OpenSSL marks these certs as invalid when mbedtls did not. Many thanks
  to guidovranken who found this issue via differential fuzzing and reported it
  in #3629.
  * Zeroising of local buffers and variables which are used for calculations in
  mbedtls_pkcs5_pbkdf2_hmac(), mbedtls_internal_sha*_process(),
  mbedtls_internal_md*_process() and mbedtls_internal_ripemd160_process()
  functions to erase sensitive data from memory. Reported by Johan Malmgren and
  Johan Uppman Bruce from Sectra.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1611057600">- Fix build for Leap targets
- Use upstream tarball name</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1616414400">- Update to 2.26.0: [bsc#1189589, CVE-2021-24119]
  * * This release of Mbed TLS provides bug fixes, minor enhancements and new
  features. This release includes fixes for security issues.
  * see https://github.com/ARMmbed/mbedtls/releases/tag/v2.26.0
- Fix build with patch from https://github.com/ARMmbed/mbedtls/pull/4237
  mbedtls-4237.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1618488000">-  Workaround for building with gcc-11 boo#1181876</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1626782400">- Update to 2.27.0:
  API changes:
  * Update AEAD output size macros to bring them in line with the PSA Crypto
    API version 1.0 spec. This version of the spec parameterizes them on the
    key type used, as well as the key bit-size in the case of
    PSA_AEAD_TAG_LENGTH.
    The old versions of these macros were renamed and deprecated as follows:
  - PSA_AEAD_TAG_LENGTH          -&gt; PSA_AEAD_TAG_LENGTH_1_ARG
  - PSA_AEAD_ENCRYPT_OUTPUT_SIZE -&gt; PSA_AEAD_ENCRYPT_OUTPUT_SIZE_2_ARG
  - PSA_AEAD_DECRYPT_OUTPUT_SIZE -&gt; PSA_AEAD_DECRYPT_OUTPUT_SIZE_2_ARG
  - PSA_AEAD_UPDATE_OUTPUT_SIZE  -&gt; PSA_AEAD_UPDATE_OUTPUT_SIZE_2_ARG
  - PSA_AEAD_FINISH_OUTPUT_SIZE  -&gt; PSA_AEAD_FINISH_OUTPUT_SIZE_1_ARG
  - PSA_AEAD_VERIFY_OUTPUT_SIZE  -&gt; PSA_AEAD_VERIFY_OUTPUT_SIZE_1_ARG
  * Implement one-shot cipher functions, psa_cipher_encrypt and
    psa_cipher_decrypt, according to the PSA Crypto API 1.0.0
    specification.
  Features:
  * Add mbedtls_rsa_rsassa_pss_sign_ext() function allowing to generate a
    signature with a specific salt length. This function allows to validate
    test cases provided in the NIST's CAVP test suite.
  * Added support for built-in driver keys through the PSA opaque crypto
    driver interface. Refer to the documentation of
    MBEDTLS_PSA_CRYPTO_BUILTIN_KEYS for more information.
  * Implement psa_sign_message() and psa_verify_message().
  * The new function mbedtls_mpi_random() generates a random value in a
    given range uniformly.
  * Implement psa_mac_compute() and psa_mac_verify() as defined in the
    PSA Cryptograpy API 1.0.0 specification.
  * MBEDTLS_ECP_MAX_BITS is now determined automatically from the configured
    curves and no longer needs to be configured explicitly to save RAM.
  Security
  * Fix a bias in the generation of finite-field Diffie-Hellman-Merkle (DHM)
    private keys and of blinding values for DHM and elliptic curves (ECP)
    computations.
  * Fix a potential side channel vulnerability in ECDSA ephemeral key generation.
    An adversary who is capable of very precise timing measurements could
    learn partial information about the leading bits of the nonce used for the
    signature, allowing the recovery of the private key after observing a
    large number of signature operations. This completes a partial fix in
    Mbed TLS 2.20.0.
  * It was possible to configure MBEDTLS_ECP_MAX_BITS to a value that is
    too small, leading to buffer overflows in ECC operations. Fail the build
    in such a case.
  * An adversary with access to precise enough information about memory
    accesses (typically, an untrusted operating system attacking a secure
    enclave) could recover an RSA private key after observing the victim
    performing a single private-key operation.
  * An adversary with access to precise enough timing information (typically, a
    co-located process) could recover a Curve25519 or Curve448 static ECDH key
    after inputting a chosen public key and observing the victim performing the
    corresponding private-key operation.
  Bugfix
  * Add printf function attributes to mbedtls_debug_print_msg to ensure we
    get printf format specifier warnings.
  * Fix premature fopen() call in mbedtls_entropy_write_seed_file which may
    lead to seed file corruption in the case where the path to the seed file is
    equal to MBEDTLS_PLATFORM_STD_NV_SEED_FILE.
  * PSA functions other than psa_open_key now return PSA_ERROR_INVALID_HANDLE
    rather than PSA_ERROR_DOES_NOT_EXIST for an invalid handle, bringing them
    in line with version 1.0.0 of the specification.
  * PSA functions creating a key now return PSA_ERROR_INVALID_ARGUMENT rather
    than PSA_ERROR_INVALID_HANDLE when the identifier specified for the key
    to create is not valid, bringing them in line with version 1.0.0 of the
    specification.
  * Fix some cases in the bignum module where the library constructed an
    unintended representation of the value 0 which was not processed
    correctly by some bignum operations. This could happen when
    mbedtls_mpi_read_string() was called on "-0", or when
    mbedtls_mpi_mul_mpi() and mbedtls_mpi_mul_int() was called with one of
    the arguments being negative and the other being 0.
  * Fix a bug in ECDSA that would cause it to fail when the hash is all-bits
    zero.
  * Fix a compilation error when MBEDTLS_ECP_RANDOMIZE_MXZ_ALT is
    defined.
  * Fix an incorrect error code when parsing a PKCS#8 private key.
  * In a TLS client, enforce the Diffie-Hellman minimum parameter size
    set with mbedtls_ssl_conf_dhm_min_bitlen() precisely. Before, the
    minimum size was rounded down to the nearest multiple of 8.
  * In library/net_sockets.c, _POSIX_C_SOURCE and _XOPEN_SOURCE are
    defined to specific values.  If the code is used in a context
    where these are already defined, this can result in a compilation
    error.  Instead, assume that if they are defined, the values will
    be adequate to build Mbed TLS.
  * The cipher suite TLS-RSA-WITH-CAMELLIA-256-GCM-SHA384 was not available
    when SHA-1 was disabled and was offered when SHA-1 was enabled but SHA-384
    was disabled. Fix the dependency.
  * Do not offer SHA384 cipher suites when SHA-384 is disabled.
  * With MBEDTLS_PSA_CRYPTO_C disabled, some functions were getting built
    nonetheless, resulting in undefined reference errors when building a
    shared library.
  * Fix test suite code on platforms where int32_t is not int, such as
    Arm Cortex-M.
  * Fix some issues affecting MBEDTLS_ARIA_ALT implementations: a misplaced
    directive in a header and a missing initialization in the self-test.
  * Fix a missing initialization in the Camellia self-test, affecting
    MBEDTLS_CAMELLIA_ALT implementations.
  * Restore the ability to configure PSA via Mbed TLS options to support RSA
    key pair operations but exclude RSA key generation. When MBEDTLS_GENPRIME
    is not defined PSA will no longer attempt to use mbedtls_rsa_gen_key().
  * Fix a regression introduced in 2.24.0 which broke (D)TLS CBC ciphersuites
    (when the encrypt-then-MAC extension is not in use) with some ALT
    implementations of the underlying hash (SHA-1, SHA-256, SHA-384), causing
    the affected side to wrongly reject valid messages.
  * Remove outdated check-config.h check that prevented implementing the
    timing module on Mbed OS.
  * Fix PSA_ALG_TLS12_PRF and PSA_ALG_TLS12_PSK_TO_MS being too permissive
    about missing inputs.
  * Fix a resource leak in a test suite with an alternative AES
    implementation.
  * Fix a crash in mbedtls_mpi_debug_mpi on a bignum having 0 limbs. This
    could notably be triggered by setting the TLS debug level to 3 or above
    and using a Montgomery curve for the key exchange.
  * psa_verify_hash() was relying on implementation-specific behavior of
    mbedtls_rsa_rsassa_pss_verify() and was causing failures in some _ALT
    implementations. This reliance is now removed.
  * Disallow inputs of length different from the corresponding hash when
    signing or verifying with PSA_ALG_RSA_PSS (The PSA Crypto API mandates
    that PSA_ALG_RSA_PSS uses the same hash throughout the algorithm.)
  * Fix a null pointer dereference when mbedtls_mpi_exp_mod() was called with
    A=0 represented with 0 limbs. Up to and including Mbed TLS 2.26, this bug
    could not be triggered by code that constructed A with one of the
    mbedtls_mpi_read_xxx functions (including in particular TLS code) since
    those always built an mpi object with at least one limb.
  * Fix mbedtls_mpi_gcd(G,A,B) when the value of B is zero. This had no
    effect on Mbed TLS's internal use of mbedtls_mpi_gcd(), but may affect
    applications that call mbedtls_mpi_gcd() directly.
  * The PSA API no longer allows the creation or destruction of keys with a
    read-only lifetime. The persistence level PSA_KEY_PERSISTENCE_READ_ONLY
    can now only be used as intended, for keys that cannot be modified through
    normal use of the API.
  * When MBEDTLS_PSA_CRYPTO_SPM is enabled, crypto_spe.h was not included
    in all the right places. Include it from crypto_platform.h, which is
    the natural place.
  * mbedtls_pk_sign() and mbedtls_pk_verify() and their extended and
    restartable variants now always honor the specified hash length if
    nonzero. Before, for RSA, hash_len was ignored in favor of the length of
    the specified hash algorithm.
  * Fix which alert is sent in some cases to conform to the
    applicable RFC: on an invalid Finished message value, an
    invalid max_fragment_length extension, or an
    unsupported extension used by the server.
  * Correct (change from 12 to 13 bytes) the value of the macro describing the
    maximum nonce length returned by psa_aead_generate_nonce().
  Changes
  * Add extra printf compiler warning flags to builds.
  * Fix memsan build false positive in x509_crt.c with Clang 11
  * Fix the setting of the read timeout in the DTLS sample programs.
  * Remove the AES sample application programs/aes/aescrypt2 which shows
    bad cryptographic practice.
  * Alternative implementations of CMAC may now opt to not support 3DES as a
    CMAC block cipher, and still pass the CMAC self test.
  * Remove configs/config-psa-crypto.h, which was identical to the default
    configuration except for having some extra cryptographic mechanisms
    enabled and for unintended differences. This configuration was primarily
    intended to demonstrate the PSA API, and lost most of its usefulness when
    MBEDTLS_PSA_CRYPTO_C became enabled by default.
  * When building the test suites with GNU make, invoke python3 or python, not
    python2, which is no longer supported upstream.
  * When using session cache based session resumption on the server,
    double-check that custom session cache implementations return
    sessions which are consistent with the negotiated ciphersuite
    and compression method.
  * Fix build failure on MinGW toolchain when __USE_MING_ANSI_STDIO is on.
    When that flag is on, standard GNU C printf format specifiers
    should be used.
  * Reduce the default value of MBEDTLS_ECP_WINDOW_SIZE. This reduces RAM usage
    during ECC operations at a negligible performance cost.
  * mbedtls_mpi_read_binary(), mbedtls_mpi_read_binary_le() and
    mbedtls_mpi_read_string() now construct an mbedtls_mpi object with 0 limbs
    when their input has length 0. Note that this is an implementation detail
    and can change at any time, so this change should be transparent, but it
    may result in mbedtls_mpi_write_binary() or mbedtls_mpi_write_string()
    now writing an empty string where it previously wrote one or more
    zero digits when operating from values constructed with an mpi_read
    function and some mpi operations.
  * Implicitly add PSA_KEY_USAGE_SIGN_MESSAGE key usage policy flag when
    PSA_KEY_USAGE_SIGN_HASH flag is set and PSA_KEY_USAGE_VERIFY_MESSAGE flag
    when PSA_KEY_USAGE_VERIFY_HASH flag is set. This usage flag extension
    is also applied when loading a key from storage.
  * Remove mbedtls-4237.patch upstream
  * Library soname bump to libmbedcrypto7</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1642075200">- Update to 2.28.0: (bsc#1193979, CVE-2021-45450)
  API changes
  * Some fields of mbedtls_ssl_session and mbedtls_ssl_config are in a
  different order. This only affects applications that define such
  structures directly or serialize them.
  Requirement changes
  * Sign-magnitude and one's complement representations for signed integers are
  not supported. Two's complement is the only supported representation.
  Removals
  * Remove config option MBEDTLS_TLS_DEFAULT_ALLOW_SHA1_IN_CERTIFICATES,
  which allowed SHA-1 in the default TLS configuration for certificate
  signing. It was intended to facilitate the transition in environments
  with SHA-1 certificates. SHA-1 is considered a weak message digest and
  its use constitutes a security risk.
  * Remove the partial support for running unit tests via Greentea on Mbed OS,
  which had been unmaintained since 2018.
  Features
  * The identifier of the CID TLS extension can be configured by defining
  MBEDTLS_TLS_EXT_CID at compile time.
  * Warn if errors from certain functions are ignored. This is currently
  supported on GCC-like compilers and on MSVC and can be configured through
  the macro MBEDTLS_CHECK_RETURN. The warnings are always enabled
  (where supported) for critical functions where ignoring the return
  value is almost always a bug. Enable the new configuration option
  MBEDTLS_CHECK_RETURN_WARNING to get warnings for other functions. This
  is currently implemented in the AES, DES and md modules, and will be
  extended to other modules in the future.
  * Add missing PSA macros declared by PSA Crypto API 1.0.0:
  PSA_ALG_IS_SIGN_HASH, PSA_ALG_NONE, PSA_HASH_BLOCK_LENGTH, PSA_KEY_ID_NULL.
  * Add new API mbedtls_ct_memcmp for constant time buffer comparison.
  * Add PSA API definition for ARIA.
  Security
  * Zeroize several intermediate variables used to calculate the expected
  value when verifying a MAC or AEAD tag. This hardens the library in
  case the value leaks through a memory disclosure vulnerability. For
  example, a memory disclosure vulnerability could have allowed a
  man-in-the-middle to inject fake ciphertext into a DTLS connection.
  * In psa_cipher_generate_iv() and psa_cipher_encrypt(), do not read back
  from the output buffer. This fixes a potential policy bypass or decryption
  oracle vulnerability if the output buffer is in memory that is shared with
  an untrusted application.
  * Fix a double-free that happened after mbedtls_ssl_set_session() or
  mbedtls_ssl_get_session() failed with MBEDTLS_ERR_SSL_ALLOC_FAILED
  (out of memory). After that, calling mbedtls_ssl_session_free()
  and mbedtls_ssl_free() would cause an internal session buffer to
  be free()'d twice.
  Bugfix
  * Stop using reserved identifiers as local variables. Fixes #4630.
  * The GNU makefiles invoke python3 in preference to python except on Windows.
  * The check was accidentally not performed when cross-compiling for Windows
  on Linux. Fix this. Fixes #4774.
  * Prevent divide by zero if either of PSA_CIPHER_ENCRYPT_OUTPUT_SIZE() or
  PSA_CIPHER_UPDATE_OUTPUT_SIZE() were called using an asymmetric key type.
  * Fix a parameter set but unused in psa_crypto_cipher.c. Fixes #4935.
  * Don't use the obsolete header path sys/fcntl.h in unit tests.
  These header files cause compilation errors in musl.
  Fixes #4969.
  * Fix missing constraints on x86_64 and aarch64 assembly code
  for bignum multiplication that broke some bignum operations with
  (at least) Clang 12.
  Fixes #4116, #4786, #4917, #4962.
  * Fix mbedtls_cipher_crypt: AES-ECB when MBEDTLS_USE_PSA_CRYPTO is enabled.
  * Failures of alternative implementations of AES or DES single-block
  functions enabled with MBEDTLS_AES_ENCRYPT_ALT, MBEDTLS_AES_DECRYPT_ALT,
  MBEDTLS_DES_CRYPT_ECB_ALT or MBEDTLS_DES3_CRYPT_ECB_ALT were ignored.
  This does not concern the implementation provided with Mbed TLS,
  where this function cannot fail, or full-module replacements with
  MBEDTLS_AES_ALT or MBEDTLS_DES_ALT. Reported by Armelle Duboc in #1092.
  * Some failures of HMAC operations were ignored. These failures could only
  happen with an alternative implementation of the underlying hash module.
  * Fix the error returned by psa_generate_key() for a public key. Fixes #4551.
  * Fix the build of sample programs when neither MBEDTLS_ERROR_C nor
  MBEDTLS_ERROR_STRERROR_DUMMY is enabled.
  * Fix PSA_ALG_RSA_PSS verification accepting an arbitrary salt length.
  This algorithm now accepts only the same salt length for verification
  that it produces when signing, as documented. Use the new algorithm
  PSA_ALG_RSA_PSS_ANY_SALT to accept any salt length. Fixes #4946.
  * The existing predicate macro name PSA_ALG_IS_HASH_AND_SIGN is now reserved
  for algorithm values that fully encode the hashing step, as per the PSA
  Crypto API specification. This excludes PSA_ALG_RSA_PKCS1V15_SIGN_RAW and
  PSA_ALG_ECDSA_ANY. The new predicate macro PSA_ALG_IS_SIGN_HASH covers
  all algorithms that can be used with psa_{sign,verify}_hash(), including
  these two.
  * Fix issue in Makefile on Linux with SHARED=1, that caused shared libraries
  not to list other shared libraries they need.
  * Fix a bug in mbedtls_gcm_starts() when the bit length of the iv
  exceeds 2^32. Fixes #4884.
  * Fix an uninitialized variable warning in test_suite_ssl.function with GCC
  version 11.
  * Fix the build when no SHA2 module is included. Fixes #4930.
  * Fix the build when only the bignum module is included. Fixes #4929.
  * Fix a potential invalid pointer dereference and infinite loop bugs in
  pkcs12 functions when the password is empty. Fix the documentation to
  better describe the inputs to these functions and their possible values.
  Fixes #5136.
  * The key usage flags PSA_KEY_USAGE_SIGN_MESSAGE now allows the MAC
  operations psa_mac_compute() and psa_mac_sign_setup().
  * The key usage flags PSA_KEY_USAGE_VERIFY_MESSAGE now allows the MAC
  operations psa_mac_verify() and psa_mac_verify_setup().
  Changes
  * Set config option MBEDTLS_TLS_DEFAULT_ALLOW_SHA1_IN_KEY_EXCHANGE to be
  disabled by default.
  * Improve the performance of base64 constant-flow code. The result is still
  slower than the original non-constant-flow implementation, but much faster
  than the previous constant-flow implementation. Fixes #4814.
  * Indicate in the error returned if the nonce length used with
  ChaCha20-Poly1305 is invalid, and not just unsupported.
  * The mbedcrypto library includes a new source code module constant_time.c,
  containing various functions meant to resist timing side channel attacks.
  * This module does not have a separate configuration option, and functions
  from this module will be included in the build as required. Currently
  most of the interface of this module is private and may change at any
  time.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1642420800">- Fix baselib.conf</changelog>
  <changelog author="Alexander Bergmann &lt;abergmann@suse.com&gt;" date="1671624000">- Fix potential heap buffer overread and overwrite in DTLS if
  MBEDTLS_SSL_DTLS_CONNECTION_ID is enabled and
  MBEDTLS_SSL_CID_IN_LEN_MAX &gt; 2 * MBEDTLS_SSL_CID_OUT_LEN_MAX.
  (bsc#1206576, CVE-2022-46393).
  Add: mbedtls-CVE-2022-46393.patch</changelog>
</package>
<package pkgid="bc7c54b601e5e2763f95374fac0d3b1b6ce7f2b201999115e9754f9e256f4b0e" name="minetest" arch="aarch64">
  <version epoch="0" ver="5.6.0" rel="bp154.2.3.5"/>
  <changelog author="werner@suse.de" date="1520596800">- Use latest libpng</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1533643200">- Update to version 0.4.17.1:
  * Fix boo#1103904
  * Fix crash caused by log_deprecated
    and the use of deprecated functions
  * Fix crash on pause menu when pressing up/down keys
- Remove use-pkg-config-to-find-luajit.patch: fixed upstream.
- Update to version 0.4.17:
  * Dungeons: Mostly fix missing stair nodes
  * Cavegen: Fix variable typo that broke mgvalleys large cave
    distribution
  * Prevent translating empty strings
  * upright_sprite: Fix texture position for players
  * core.rotate_node: Do not trigger after_place_node for mod
    compatibility
  * Generate Notifier: Clear events once after all
    'on generated' functions
  * Fix liquid post effect colour behaviour in third person view
  * Delete world dialog: Move buttons to avoid
    double click deletion
  * Fix /shutdown countdown parameter
  * Check argument types inside MetaDataRef Lua API
  * dropped items and falling nodes: Delete in 'ignore' nodes
  * Fix off-by-one in log output line length
  * Fix buffer parameter not working in getMapSlice()
  * Fix rounding error in g/set_node caused by truncation to float
  * Fix dancing text in text input fields
  * Fix undefined behaviour on getting pointer to data in
    empty vector
  * Fix wrong scrolling in text areas
  * Damage: Remove damage ignore timer due to abuse potential
  * Ensure no item stack is being held before crafting
  * Several documentation additions, improvements
  * core.rotate_node: Run callbacks like with any
    regular placed node
  * Biome dust node: Only place on 'walkable' cubic
    non-liquid drawtypes
  * Fix issue Minetest crash when custom font path is not exist
  * Fix Settings tab formspec alignment
  * Do not scale texture unless necessary
  * Fix day_night_ratio_do_override not being initialised
    server-side
  * Fix default item callbacks to work with nil users
  * Prevent from crafting non-existent, unknown items
  * Profiler: Fix var args not being passed to
    callback register function
  * Fix attached particle spawners far from spawn
  * Localplayer: Fix disable_jump effect and standing node position
  * Fix blocks written by vmanip not being marked as modified
  * Fix Rotate Node Placement
  * ServerEnv: Clean up object lifecycle handling
  * Fix the core.wrap_text function
  * Fix empty legacy meta being persisted
  * Statbars: fix incorrect half-images in non-standard
    orientations
  * serialize: use a temporary for SerializeException
  * Fix player coordinate rounding in collisionMoveSimple()
  * Fix for empty key/value when reading item string with
    wear but no metadata
  * Fix render order of overlays
  * Fix console resize issue when maximising game window
  * Fix console not being properly resized after
    window size changed
  * Verify HudSetParams input when hotbar textures are set
  * (Re)spawn players within 'mapgen_limit'
  * Fix sending color codes to clients that don't support them</changelog>
  <changelog author="mvetter@suse.com" date="1551787200">- Update to 5.0.0
  * 5.0.0 is a breaking release and not compatible to the 0.4 series.
  * See changes: https://dev.minetest.net/Changelog#0.4.16_.E2.86.92_5.0.0
- Remove shared_mods.patch: global mods possible by default now.
  See builtin/mainmenu/pkgmgr.lua
- bsc#1127911: is tracking whitelisting of `minetest` user/group
  in rpmlint</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1554120000">- bsc#1131077: BuildRequire postgresql-server-devel as a workaround
  for CMake which explicitly looks for server headers even if just
  building a client application.
  CAUTION: This workaround should not blindly be copied to other
  packages that fail to build with PostgreSQL 11. It is always
  preferrable to convert the package to use pkg-config for linking
  against libpq instead of pulling in postgresql-server-devel
  to have pg_config. If in doubt, please talk to max@suse.com
  before applying such a workaround.</changelog>
  <changelog author="mvetter@suse.com" date="1554206400">- Update to 5.0.1:
  * Fix detached inventory serialisation
  * Fix texture rotation for wallmounted nodeboxes
  * Fix build failing on some compilers
  * Warn about issues with the num_emerge_threads setting
  * HPChange Reason: Fix issues with custom reasons
  * Fix FreeBSD build by handling std::time_t properly
  * Confirm registration GUI: Remove positional strings to fix Windows bug
  * Prevent multi-line chat messages server-side
  * httpfetch: Disable IPv6 here too if requested by settings</changelog>
  <changelog author="Maximilian Trummer &lt;opensuse@trummer.xyz&gt;" date="1570968000">- Update to 5.1.0:
  * Mapgen Carpathian: Add optional rivers (paramat)
  * Move more dungeon parameter selection to mapgens (paramat)
  * Dungeons: Make multiple large rooms possible (paramat)
  * Change pitch fly binding to 'P', add to change keys menu (rubenwardy)
  * Android settings: Use 'simple' leaves instead of 'fancy' (paramat)
  * Fix 3rd person selection range (srifqi)
  * Make scrollbars' bar variable in size (stujones11)
  * Damage: Play no damage sound when immortal (SmallJoker)
  * Increase upper limit of display_gamma to 10 (ClobberXD)
  * Optimize and unify mesh processing (Vitaliy)
  * Re-order mapgens in mainmenu and 'all settings' mapgen selection (paramat)
  * Scrollbars: Move directly to clicked pos if clicked into tray (DS-Minetest)
  * Fix broken attachments on join (SmallJoker)
  * Fix inventory_overlay for nodes without inventory_image (DS-Minetest)
  * Better F6 profiler (SmallJoker)
  * Fix minimap markers (theviper121)
  * Textures: Load base pack only as last fallback (SmallJoker)
  * Add /help formspec for commands and privileges (SmallJoker)
  * Lua API: Add link to Minetest Modding Book (ClobberXD)
  * Force item entities out of solid nodes (sfan5, based on Wuzzy`s work)
  * Lua API: Various fixes (DS-Minetest, SmallJoker)
  * Rename "private messages" to "direct messages" (Calinou)
  * Automatically enable depending mods in the dialogue (HybridDog)
  * All settings: Fix missing flags checkboxes (srifqi)
  * Various network performance improvements (osjc)
  * Force send a mapblock to a player (sofar)
  * Revert ItemStacks being limited to the 'stack_size' value (ClobberXD)
  * Save forceloaded blocks file periodically (Thomas Rudin)
  * Improve ABM time budget handling (lhofhansl)
  * Group "immortal" also protects players from damage (Wuzzy)
  * Optimize usage of TOSERVER_GOTBLOCKS packet (sfan5)
  * Network: several bugfixes (sfan5)
  * Mapgen::spreadLight performance improvement (DS-Minetest)
  * Improve occlusion culling in corridors with additional check (sfan5)
  * Inventory: Delay dirty lists, and send changes incrementally (SmallJoker)
  * Other inventory bugfixes (sfan5, SmallJoker)
  * Move debug.txt after it grows too big (HybridDog)
  * Trigger on_place in many situations even if prediction failed (DS-Minetest)
  * Punchwear (improved) (sfan5)
  * Add deprecation warnings for ObjectRef:get/set_attribute (ClobberXD)
  * Nodedef 'drop' documentation: Improve (Paramat)
  * Mark tool filtering in node drop documentation as deprecated (Paramat)
  * Add node field to PlayerHPChangeReason table (pauloue)
  * Don't call on_hpchange callbacks if HP hasn't changed (ClobberXD)
  * Add disable_jump to liquids and ladders (SmallJoker)
  * Add support for 9-sliced backgrounds (rubenwardy)
  * Add compatible, consistent coordinate system to FormSpecs (v-rob)
  * Document ObjectRef:remove under Lua entity (ClobberXD)
  * Docs: Clarify where to check for 'protection_bypass' (SmallJoker)
  * Add vector.dot and vector.cross (HybridDog)
  * Improve documentation of mapgen aliases (Paramat)
  * Remove debug.upvaluejoin to prevent leak of insecure environment (fluxionary)
  * Fix previously crashing minetest.get_craft_result() (pauloue)
  * Allow toolcaps to override the built-in times for dig_immediate (sfan5)
  * Formspec styling using style[] (rubenwardy)
  * Customizable chat message format (ClobberXD)
  * Velocity modifiers for players (sfan5)
  * Fix some issues with minetest.clear_craft (pauloue)
  * Add function `minetest.read_schematic` (paly2)
  * Formspecs: formspec_version[] element (SmallJoker)
  * Per-player FOV overrides and multipliers (ClobberXD)
  * Find PostgreSQL correctly (adrido)
  * Add compatibility to vcpkg buildsystem (adrido)
  * Android: Use system provided path for default TMPFolder setting (stujones11)
  * Fix handling of --color and --worldlist command line arguments (mmattes)
  * Unified OpenGL ES support (sfan5)</changelog>
  <changelog author="Simon Puchert &lt;simonpuchert@alice.de&gt;" date="1574424000">- Explicitly require libXxf86vm-devel.</changelog>
  <changelog author="Maximilian Trummer &lt;opensuse@trummer.xyz&gt;" date="1579348800">- Update to version 5.1.1
  * See https://dev.minetest.net/Changelog#5.1.0_.E2.86.92_5.1.1
  * Fix player-bound sound playback (SmallJoker)
  * Fix item eat sound not played if last item (Wuzzy2)
  * Formspecs: Reset version number on rebuild (SmallJoker)
  * Rework packet receiving in ServerThread (sfan5)
  * Fix core.chat_format_message crashes (ClobberXD)
  * Fix spaces breaking formspec_version[] tag (rubenwardy)
  * Fix find_path for newer jsoncpp installations (vilhelmgray)
  * Update translations</changelog>
  <changelog author="Maximilian Trummer &lt;opensuse@trummer.xyz&gt;" date="1579348801">- build with spatialindex-devel, this speeds up AreaStores, see
  https://github.com/minetest/minetest#cmake-options</changelog>
  <changelog author="Maximilian Trummer &lt;opensuse@trummer.xyz&gt;" date="1586174400">- Update to version 5.2.0
- See https://dev.minetest.net/Changelog#5.1.0_.E2.86.92_5.2.0
- Client / Audiovisuals:
  * Fix alpha blending in texture modifiers (Warr1024)
  * Make natural night light as bright as MT 0.4.16 (paramat)
  * Shader fixes (lhofhansl, SmallJoker)
  * Clean up font caching, fix bitmap fonts (SmallJoker)
  * Waves generated with Perlin-type noise #8994 (lhofhansl)
  * Attachments: Fix glitches after detach (SmallJoker)
  * Let node 'place' and 'dug' sounds be heard
    by other players (sfan5)
  * Fix weird looking liquid source (Wuzzy2)
  * Basic model shading (dcbrwn)
  * Improve arm inertia animations (kilbith)
- GUI improvements:
  * Add visual feedback for button states (Df458)
  * Formspec: draw order and clipping for all elements (DS)
  * Refactor internal button styling/rendering code (Df458')
  * Formspec: Fix clicking on tooltip-obstructed elements (DS)
  * Formspec: change cursor on fields and co. (DS)
  * Various new formspec bug fixes (SmallJoker)
  * Formspec: Add 9-slice background support
    to button elements (Df458)
  * Formspec: add hypertext[] element (pyrollo)
  * Formspec: animated_image[] (Df458, kilbith)
  * Make clipping of formspec elements more consistent (Df458)
  * Remove outdated field_close_on_enter[] warnings
    in element parameters (SmallJoker)
  * Fix mouse events sent to wrong GUI elements
    when dragging (sfan5)
  * Restore intuitive click-through behaviour (DS)
- Enhancements:
  * Wear out tools on punch (sfan5)
  * Tunnels: Completely disable generation
    when 'cave width' &gt;= 10.0 (paramat)
  * Randomwalk cave liquids:
    Remove deprecated 'lava depth' (paramat)
  * Automatically enable the mod's dependencies
    in the world config menu (HybridDog)
  * Clean up craft replacements docs (pauloue)
  * Falling nodes: add missing support for light sources,
    most drawtypes, and paramtype2s (Wuzzy2)
  * Remove legacy flat-file map code
    and documentation (random-geek)
  * Fix packet receiving in server and client (sfan5)
  * Key settings: Cancel with escape,
    clear with delete (SmallJoker)
- Script API / Modding:
  * CSM: Introduce get_modpath() (sfan5)
  * CSM: Remove non-functional minetest.get_day_count() (sfan5)
  * Add z-index management to HUD (pyrollo)
  * Add table.key_value_swap and table.shuffle (HybridDog)
  * Map download:
    Escape ':' to '_' (NTFS/FAT* systems) (Montandalar)
  * Settings: Add get_flags API for mapgen flags (SmallJoker)
  * Improve minetest.sound_play with ephemeral sounds
    and player exclusion (sfan5)
  * Reworked validity checks for entities (sfan5)
  * Documentation: Add advice on lifetime of ObjectRefs (sfan5)
  * Allow texture modifiers in hotbar textures (Warr1024)
  * Nodes with torchlike drawtype and custom visual_scale now are
    rendered attached to surface instead of being centered (Wuzzy2)
  * Add documentation of VoxelArea 'ystride', 'zstride' (paramat)
  * Lua API: Document HP, breath and damage limits (SmallJoker)
  * Various documentation improvements (Wuzzy2)
  * CSM: Corrections to client_lua_api.txt (sfan5)
  * Make minetest.item_place_node return position
    of placed node (Bluebird)
  * Call on_secondary_use when object is right-clicked (sfan5)
  * CSM: Various fixes (sfan5)
  * Many pathfinder bugfixes and improvements (Wuzzy2)
    + Fix failure to find path
    if start or end pos is over air (Wuzzy2)
    + Fix very broken implementation of A* search (Wuzzy2)
    + No longer jump through solid nodes (Wuzzy2)
    + Return nil if start or end pos is solid (Wuzzy2)
  * New set_sky, set_sun, set_moon and set_stars (Jordach)
  * Secure and document minetest.deserialize() (luk3yx)
  * minetest.get_content_id: throw error
    for unknown nodes (HybridDog)
- Misc / Build:
  * Don't install fonts on ENABLE_CLIENT=0 configurations (sfan5)
  * Fix memleaks in formspecs (SmallJoker)
  * Run luacheck in travis, add luacheck (rubenwardy)
  * Various build issue fixes (Clang, Travis CI) (sfan5)</changelog>
  <changelog author="Mia Herkt &lt;mia@0x0.st&gt;" date="1592827200">- spec-cleaner
- Make sure the package does not build with bundled libraries
- Add minetest-fix-luajit-include-path.patch
  Fixes the FindLuaJIT CMake module so it also looks for the
  moonjit include path</changelog>
  <changelog author="andy great &lt;andythe_great@pm.me&gt;" date="1594641600">- Update to version 5.3.0.
  (see https://dev.minetest.net/Changelog#5.2.0_.E2.86.92_5.3.0)
  * Formspec improvements, including a scrolling GUI element
  * Performance improvements to the Server and API
  * Many bug fixes and small features
- Now requires desktop-file-utils version &gt;= 0.25.</changelog>
  <changelog author="Dirk Stoecker &lt;opensuse@dstoecker.de&gt;" date="1599566400">- added patch to build .desktop file without 'PrefersNonDefaultGPU'
  option on Leap 15.2 and below (old-desktopfile-standard.patch)
- removed conditional build for very old openSUSE/SLES versions
- add minetest-runtime provides</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1614168000">- Fixed build on current Factory (checking symlinks)
- Update to version 5.4.0
  * Full log: https://dev.minetest.net/Changelog#5.3.0_.E2.86.92_5.4.0
  * Removed support for bumpmapping, generated normal maps
    and parallax occlusion
  * By default, the crosshair will now change to an "X" when
    pointing to objects
  * Prevent players accessing inventories of other players
  * Prevent interacting with items out of the hotbar
  * Prevent players from being able to modify ItemStack meta</changelog>
  <changelog author="Maximilian Trummer &lt;opensuse@trummer.xyz&gt;" date="1618833600">- Update to version 5.4.1:
  * This is a maintenance release based on 5.4.0,
    it contains bugfixes but no new features.
  * Apply 'old-desktopfile-standard.patch' to Leap 15.3 as well.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1622548800">- Add GCC 11 compatibility patch:
  * 0001-Fix-build-for-newer-versions-of-GCC-11246.patch</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633521600">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * minetest@.service</changelog>
  <changelog author="Simon Vogl &lt;simon.vogl@gmx.net&gt;" date="1659182400">- Drop 0001-Fix-build-for-newer-versions-of-GCC-11246.patch as it is merged upstream
- Only apply minetest-fix-luajit-include-path.patch on openSUSE Leap as TW versions do not require it any more.
- Switch to from system irrlicht to IrrlichtMt library version 1.9.0mt5
- Don't purge the bundled bitop library
- Add new libzstd build dependency
- Update to version 5.5.0 &amp; 5.5.1:
  * Full log for version 5.5.0: https://dev.minetest.net/Changelog#5.4.0_.E2.86.92_5.5.0
  * This release switches from Irrlicht to our own fork called IrrlichtMt.
  * Full log for version 5.5.1: https://dev.minetest.net/Changelog#5.5.0_.E2.86.92_5.5.1
  * This is a maintenance release based on 5.5.0, it contains bugfixes but no new features.</changelog>
  <changelog author="Dmitriy Perlow &lt;dap.darkness@gmail.com&gt;" date="1660564800">- Introduced mbranch-protection=none CXX flag to resolve bnc#1193141
  (aarch64).</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1660824000">- Update to version 5.6.0
  * Fix CVE-2022-35978 ( boo#1202423 ): Mod scripts can escape
    sandbox in single player mode
  * `name` in game.conf is deprecated for the game title, use `title` instead
  * Add depth sorting for node faces
  * Various bug fixes
  * Full changes: https://dev.minetest.net/Changelog#5.5.0_.E2.86.92_5.6.0</changelog>
</package>
<package pkgid="d291f40f6d4f961e6f0bc76a95046bf245aa94794d75187979603cb8fa9d91e1" name="minetest" arch="ppc64le">
  <version epoch="0" ver="5.6.0" rel="bp154.2.3.5"/>
  <changelog author="werner@suse.de" date="1520596800">- Use latest libpng</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1533643200">- Update to version 0.4.17.1:
  * Fix boo#1103904
  * Fix crash caused by log_deprecated
    and the use of deprecated functions
  * Fix crash on pause menu when pressing up/down keys
- Remove use-pkg-config-to-find-luajit.patch: fixed upstream.
- Update to version 0.4.17:
  * Dungeons: Mostly fix missing stair nodes
  * Cavegen: Fix variable typo that broke mgvalleys large cave
    distribution
  * Prevent translating empty strings
  * upright_sprite: Fix texture position for players
  * core.rotate_node: Do not trigger after_place_node for mod
    compatibility
  * Generate Notifier: Clear events once after all
    'on generated' functions
  * Fix liquid post effect colour behaviour in third person view
  * Delete world dialog: Move buttons to avoid
    double click deletion
  * Fix /shutdown countdown parameter
  * Check argument types inside MetaDataRef Lua API
  * dropped items and falling nodes: Delete in 'ignore' nodes
  * Fix off-by-one in log output line length
  * Fix buffer parameter not working in getMapSlice()
  * Fix rounding error in g/set_node caused by truncation to float
  * Fix dancing text in text input fields
  * Fix undefined behaviour on getting pointer to data in
    empty vector
  * Fix wrong scrolling in text areas
  * Damage: Remove damage ignore timer due to abuse potential
  * Ensure no item stack is being held before crafting
  * Several documentation additions, improvements
  * core.rotate_node: Run callbacks like with any
    regular placed node
  * Biome dust node: Only place on 'walkable' cubic
    non-liquid drawtypes
  * Fix issue Minetest crash when custom font path is not exist
  * Fix Settings tab formspec alignment
  * Do not scale texture unless necessary
  * Fix day_night_ratio_do_override not being initialised
    server-side
  * Fix default item callbacks to work with nil users
  * Prevent from crafting non-existent, unknown items
  * Profiler: Fix var args not being passed to
    callback register function
  * Fix attached particle spawners far from spawn
  * Localplayer: Fix disable_jump effect and standing node position
  * Fix blocks written by vmanip not being marked as modified
  * Fix Rotate Node Placement
  * ServerEnv: Clean up object lifecycle handling
  * Fix the core.wrap_text function
  * Fix empty legacy meta being persisted
  * Statbars: fix incorrect half-images in non-standard
    orientations
  * serialize: use a temporary for SerializeException
  * Fix player coordinate rounding in collisionMoveSimple()
  * Fix for empty key/value when reading item string with
    wear but no metadata
  * Fix render order of overlays
  * Fix console resize issue when maximising game window
  * Fix console not being properly resized after
    window size changed
  * Verify HudSetParams input when hotbar textures are set
  * (Re)spawn players within 'mapgen_limit'
  * Fix sending color codes to clients that don't support them</changelog>
  <changelog author="mvetter@suse.com" date="1551787200">- Update to 5.0.0
  * 5.0.0 is a breaking release and not compatible to the 0.4 series.
  * See changes: https://dev.minetest.net/Changelog#0.4.16_.E2.86.92_5.0.0
- Remove shared_mods.patch: global mods possible by default now.
  See builtin/mainmenu/pkgmgr.lua
- bsc#1127911: is tracking whitelisting of `minetest` user/group
  in rpmlint</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1554120000">- bsc#1131077: BuildRequire postgresql-server-devel as a workaround
  for CMake which explicitly looks for server headers even if just
  building a client application.
  CAUTION: This workaround should not blindly be copied to other
  packages that fail to build with PostgreSQL 11. It is always
  preferrable to convert the package to use pkg-config for linking
  against libpq instead of pulling in postgresql-server-devel
  to have pg_config. If in doubt, please talk to max@suse.com
  before applying such a workaround.</changelog>
  <changelog author="mvetter@suse.com" date="1554206400">- Update to 5.0.1:
  * Fix detached inventory serialisation
  * Fix texture rotation for wallmounted nodeboxes
  * Fix build failing on some compilers
  * Warn about issues with the num_emerge_threads setting
  * HPChange Reason: Fix issues with custom reasons
  * Fix FreeBSD build by handling std::time_t properly
  * Confirm registration GUI: Remove positional strings to fix Windows bug
  * Prevent multi-line chat messages server-side
  * httpfetch: Disable IPv6 here too if requested by settings</changelog>
  <changelog author="Maximilian Trummer &lt;opensuse@trummer.xyz&gt;" date="1570968000">- Update to 5.1.0:
  * Mapgen Carpathian: Add optional rivers (paramat)
  * Move more dungeon parameter selection to mapgens (paramat)
  * Dungeons: Make multiple large rooms possible (paramat)
  * Change pitch fly binding to 'P', add to change keys menu (rubenwardy)
  * Android settings: Use 'simple' leaves instead of 'fancy' (paramat)
  * Fix 3rd person selection range (srifqi)
  * Make scrollbars' bar variable in size (stujones11)
  * Damage: Play no damage sound when immortal (SmallJoker)
  * Increase upper limit of display_gamma to 10 (ClobberXD)
  * Optimize and unify mesh processing (Vitaliy)
  * Re-order mapgens in mainmenu and 'all settings' mapgen selection (paramat)
  * Scrollbars: Move directly to clicked pos if clicked into tray (DS-Minetest)
  * Fix broken attachments on join (SmallJoker)
  * Fix inventory_overlay for nodes without inventory_image (DS-Minetest)
  * Better F6 profiler (SmallJoker)
  * Fix minimap markers (theviper121)
  * Textures: Load base pack only as last fallback (SmallJoker)
  * Add /help formspec for commands and privileges (SmallJoker)
  * Lua API: Add link to Minetest Modding Book (ClobberXD)
  * Force item entities out of solid nodes (sfan5, based on Wuzzy`s work)
  * Lua API: Various fixes (DS-Minetest, SmallJoker)
  * Rename "private messages" to "direct messages" (Calinou)
  * Automatically enable depending mods in the dialogue (HybridDog)
  * All settings: Fix missing flags checkboxes (srifqi)
  * Various network performance improvements (osjc)
  * Force send a mapblock to a player (sofar)
  * Revert ItemStacks being limited to the 'stack_size' value (ClobberXD)
  * Save forceloaded blocks file periodically (Thomas Rudin)
  * Improve ABM time budget handling (lhofhansl)
  * Group "immortal" also protects players from damage (Wuzzy)
  * Optimize usage of TOSERVER_GOTBLOCKS packet (sfan5)
  * Network: several bugfixes (sfan5)
  * Mapgen::spreadLight performance improvement (DS-Minetest)
  * Improve occlusion culling in corridors with additional check (sfan5)
  * Inventory: Delay dirty lists, and send changes incrementally (SmallJoker)
  * Other inventory bugfixes (sfan5, SmallJoker)
  * Move debug.txt after it grows too big (HybridDog)
  * Trigger on_place in many situations even if prediction failed (DS-Minetest)
  * Punchwear (improved) (sfan5)
  * Add deprecation warnings for ObjectRef:get/set_attribute (ClobberXD)
  * Nodedef 'drop' documentation: Improve (Paramat)
  * Mark tool filtering in node drop documentation as deprecated (Paramat)
  * Add node field to PlayerHPChangeReason table (pauloue)
  * Don't call on_hpchange callbacks if HP hasn't changed (ClobberXD)
  * Add disable_jump to liquids and ladders (SmallJoker)
  * Add support for 9-sliced backgrounds (rubenwardy)
  * Add compatible, consistent coordinate system to FormSpecs (v-rob)
  * Document ObjectRef:remove under Lua entity (ClobberXD)
  * Docs: Clarify where to check for 'protection_bypass' (SmallJoker)
  * Add vector.dot and vector.cross (HybridDog)
  * Improve documentation of mapgen aliases (Paramat)
  * Remove debug.upvaluejoin to prevent leak of insecure environment (fluxionary)
  * Fix previously crashing minetest.get_craft_result() (pauloue)
  * Allow toolcaps to override the built-in times for dig_immediate (sfan5)
  * Formspec styling using style[] (rubenwardy)
  * Customizable chat message format (ClobberXD)
  * Velocity modifiers for players (sfan5)
  * Fix some issues with minetest.clear_craft (pauloue)
  * Add function `minetest.read_schematic` (paly2)
  * Formspecs: formspec_version[] element (SmallJoker)
  * Per-player FOV overrides and multipliers (ClobberXD)
  * Find PostgreSQL correctly (adrido)
  * Add compatibility to vcpkg buildsystem (adrido)
  * Android: Use system provided path for default TMPFolder setting (stujones11)
  * Fix handling of --color and --worldlist command line arguments (mmattes)
  * Unified OpenGL ES support (sfan5)</changelog>
  <changelog author="Simon Puchert &lt;simonpuchert@alice.de&gt;" date="1574424000">- Explicitly require libXxf86vm-devel.</changelog>
  <changelog author="Maximilian Trummer &lt;opensuse@trummer.xyz&gt;" date="1579348800">- Update to version 5.1.1
  * See https://dev.minetest.net/Changelog#5.1.0_.E2.86.92_5.1.1
  * Fix player-bound sound playback (SmallJoker)
  * Fix item eat sound not played if last item (Wuzzy2)
  * Formspecs: Reset version number on rebuild (SmallJoker)
  * Rework packet receiving in ServerThread (sfan5)
  * Fix core.chat_format_message crashes (ClobberXD)
  * Fix spaces breaking formspec_version[] tag (rubenwardy)
  * Fix find_path for newer jsoncpp installations (vilhelmgray)
  * Update translations</changelog>
  <changelog author="Maximilian Trummer &lt;opensuse@trummer.xyz&gt;" date="1579348801">- build with spatialindex-devel, this speeds up AreaStores, see
  https://github.com/minetest/minetest#cmake-options</changelog>
  <changelog author="Maximilian Trummer &lt;opensuse@trummer.xyz&gt;" date="1586174400">- Update to version 5.2.0
- See https://dev.minetest.net/Changelog#5.1.0_.E2.86.92_5.2.0
- Client / Audiovisuals:
  * Fix alpha blending in texture modifiers (Warr1024)
  * Make natural night light as bright as MT 0.4.16 (paramat)
  * Shader fixes (lhofhansl, SmallJoker)
  * Clean up font caching, fix bitmap fonts (SmallJoker)
  * Waves generated with Perlin-type noise #8994 (lhofhansl)
  * Attachments: Fix glitches after detach (SmallJoker)
  * Let node 'place' and 'dug' sounds be heard
    by other players (sfan5)
  * Fix weird looking liquid source (Wuzzy2)
  * Basic model shading (dcbrwn)
  * Improve arm inertia animations (kilbith)
- GUI improvements:
  * Add visual feedback for button states (Df458)
  * Formspec: draw order and clipping for all elements (DS)
  * Refactor internal button styling/rendering code (Df458')
  * Formspec: Fix clicking on tooltip-obstructed elements (DS)
  * Formspec: change cursor on fields and co. (DS)
  * Various new formspec bug fixes (SmallJoker)
  * Formspec: Add 9-slice background support
    to button elements (Df458)
  * Formspec: add hypertext[] element (pyrollo)
  * Formspec: animated_image[] (Df458, kilbith)
  * Make clipping of formspec elements more consistent (Df458)
  * Remove outdated field_close_on_enter[] warnings
    in element parameters (SmallJoker)
  * Fix mouse events sent to wrong GUI elements
    when dragging (sfan5)
  * Restore intuitive click-through behaviour (DS)
- Enhancements:
  * Wear out tools on punch (sfan5)
  * Tunnels: Completely disable generation
    when 'cave width' &gt;= 10.0 (paramat)
  * Randomwalk cave liquids:
    Remove deprecated 'lava depth' (paramat)
  * Automatically enable the mod's dependencies
    in the world config menu (HybridDog)
  * Clean up craft replacements docs (pauloue)
  * Falling nodes: add missing support for light sources,
    most drawtypes, and paramtype2s (Wuzzy2)
  * Remove legacy flat-file map code
    and documentation (random-geek)
  * Fix packet receiving in server and client (sfan5)
  * Key settings: Cancel with escape,
    clear with delete (SmallJoker)
- Script API / Modding:
  * CSM: Introduce get_modpath() (sfan5)
  * CSM: Remove non-functional minetest.get_day_count() (sfan5)
  * Add z-index management to HUD (pyrollo)
  * Add table.key_value_swap and table.shuffle (HybridDog)
  * Map download:
    Escape ':' to '_' (NTFS/FAT* systems) (Montandalar)
  * Settings: Add get_flags API for mapgen flags (SmallJoker)
  * Improve minetest.sound_play with ephemeral sounds
    and player exclusion (sfan5)
  * Reworked validity checks for entities (sfan5)
  * Documentation: Add advice on lifetime of ObjectRefs (sfan5)
  * Allow texture modifiers in hotbar textures (Warr1024)
  * Nodes with torchlike drawtype and custom visual_scale now are
    rendered attached to surface instead of being centered (Wuzzy2)
  * Add documentation of VoxelArea 'ystride', 'zstride' (paramat)
  * Lua API: Document HP, breath and damage limits (SmallJoker)
  * Various documentation improvements (Wuzzy2)
  * CSM: Corrections to client_lua_api.txt (sfan5)
  * Make minetest.item_place_node return position
    of placed node (Bluebird)
  * Call on_secondary_use when object is right-clicked (sfan5)
  * CSM: Various fixes (sfan5)
  * Many pathfinder bugfixes and improvements (Wuzzy2)
    + Fix failure to find path
    if start or end pos is over air (Wuzzy2)
    + Fix very broken implementation of A* search (Wuzzy2)
    + No longer jump through solid nodes (Wuzzy2)
    + Return nil if start or end pos is solid (Wuzzy2)
  * New set_sky, set_sun, set_moon and set_stars (Jordach)
  * Secure and document minetest.deserialize() (luk3yx)
  * minetest.get_content_id: throw error
    for unknown nodes (HybridDog)
- Misc / Build:
  * Don't install fonts on ENABLE_CLIENT=0 configurations (sfan5)
  * Fix memleaks in formspecs (SmallJoker)
  * Run luacheck in travis, add luacheck (rubenwardy)
  * Various build issue fixes (Clang, Travis CI) (sfan5)</changelog>
  <changelog author="Mia Herkt &lt;mia@0x0.st&gt;" date="1592827200">- spec-cleaner
- Make sure the package does not build with bundled libraries
- Add minetest-fix-luajit-include-path.patch
  Fixes the FindLuaJIT CMake module so it also looks for the
  moonjit include path</changelog>
  <changelog author="andy great &lt;andythe_great@pm.me&gt;" date="1594641600">- Update to version 5.3.0.
  (see https://dev.minetest.net/Changelog#5.2.0_.E2.86.92_5.3.0)
  * Formspec improvements, including a scrolling GUI element
  * Performance improvements to the Server and API
  * Many bug fixes and small features
- Now requires desktop-file-utils version &gt;= 0.25.</changelog>
  <changelog author="Dirk Stoecker &lt;opensuse@dstoecker.de&gt;" date="1599566400">- added patch to build .desktop file without 'PrefersNonDefaultGPU'
  option on Leap 15.2 and below (old-desktopfile-standard.patch)
- removed conditional build for very old openSUSE/SLES versions
- add minetest-runtime provides</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1614168000">- Fixed build on current Factory (checking symlinks)
- Update to version 5.4.0
  * Full log: https://dev.minetest.net/Changelog#5.3.0_.E2.86.92_5.4.0
  * Removed support for bumpmapping, generated normal maps
    and parallax occlusion
  * By default, the crosshair will now change to an "X" when
    pointing to objects
  * Prevent players accessing inventories of other players
  * Prevent interacting with items out of the hotbar
  * Prevent players from being able to modify ItemStack meta</changelog>
  <changelog author="Maximilian Trummer &lt;opensuse@trummer.xyz&gt;" date="1618833600">- Update to version 5.4.1:
  * This is a maintenance release based on 5.4.0,
    it contains bugfixes but no new features.
  * Apply 'old-desktopfile-standard.patch' to Leap 15.3 as well.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1622548800">- Add GCC 11 compatibility patch:
  * 0001-Fix-build-for-newer-versions-of-GCC-11246.patch</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633521600">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * minetest@.service</changelog>
  <changelog author="Simon Vogl &lt;simon.vogl@gmx.net&gt;" date="1659182400">- Drop 0001-Fix-build-for-newer-versions-of-GCC-11246.patch as it is merged upstream
- Only apply minetest-fix-luajit-include-path.patch on openSUSE Leap as TW versions do not require it any more.
- Switch to from system irrlicht to IrrlichtMt library version 1.9.0mt5
- Don't purge the bundled bitop library
- Add new libzstd build dependency
- Update to version 5.5.0 &amp; 5.5.1:
  * Full log for version 5.5.0: https://dev.minetest.net/Changelog#5.4.0_.E2.86.92_5.5.0
  * This release switches from Irrlicht to our own fork called IrrlichtMt.
  * Full log for version 5.5.1: https://dev.minetest.net/Changelog#5.5.0_.E2.86.92_5.5.1
  * This is a maintenance release based on 5.5.0, it contains bugfixes but no new features.</changelog>
  <changelog author="Dmitriy Perlow &lt;dap.darkness@gmail.com&gt;" date="1660564800">- Introduced mbranch-protection=none CXX flag to resolve bnc#1193141
  (aarch64).</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1660824000">- Update to version 5.6.0
  * Fix CVE-2022-35978 ( boo#1202423 ): Mod scripts can escape
    sandbox in single player mode
  * `name` in game.conf is deprecated for the game title, use `title` instead
  * Add depth sorting for node faces
  * Various bug fixes
  * Full changes: https://dev.minetest.net/Changelog#5.5.0_.E2.86.92_5.6.0</changelog>
</package>
<package pkgid="c789085f7f8f3b058687ed4121cb5b377acae6c1ecd98e651cf28dd2e00d1e07" name="minetest" arch="s390x">
  <version epoch="0" ver="5.6.0" rel="bp154.2.3.5"/>
  <changelog author="werner@suse.de" date="1520596800">- Use latest libpng</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1533643200">- Update to version 0.4.17.1:
  * Fix boo#1103904
  * Fix crash caused by log_deprecated
    and the use of deprecated functions
  * Fix crash on pause menu when pressing up/down keys
- Remove use-pkg-config-to-find-luajit.patch: fixed upstream.
- Update to version 0.4.17:
  * Dungeons: Mostly fix missing stair nodes
  * Cavegen: Fix variable typo that broke mgvalleys large cave
    distribution
  * Prevent translating empty strings
  * upright_sprite: Fix texture position for players
  * core.rotate_node: Do not trigger after_place_node for mod
    compatibility
  * Generate Notifier: Clear events once after all
    'on generated' functions
  * Fix liquid post effect colour behaviour in third person view
  * Delete world dialog: Move buttons to avoid
    double click deletion
  * Fix /shutdown countdown parameter
  * Check argument types inside MetaDataRef Lua API
  * dropped items and falling nodes: Delete in 'ignore' nodes
  * Fix off-by-one in log output line length
  * Fix buffer parameter not working in getMapSlice()
  * Fix rounding error in g/set_node caused by truncation to float
  * Fix dancing text in text input fields
  * Fix undefined behaviour on getting pointer to data in
    empty vector
  * Fix wrong scrolling in text areas
  * Damage: Remove damage ignore timer due to abuse potential
  * Ensure no item stack is being held before crafting
  * Several documentation additions, improvements
  * core.rotate_node: Run callbacks like with any
    regular placed node
  * Biome dust node: Only place on 'walkable' cubic
    non-liquid drawtypes
  * Fix issue Minetest crash when custom font path is not exist
  * Fix Settings tab formspec alignment
  * Do not scale texture unless necessary
  * Fix day_night_ratio_do_override not being initialised
    server-side
  * Fix default item callbacks to work with nil users
  * Prevent from crafting non-existent, unknown items
  * Profiler: Fix var args not being passed to
    callback register function
  * Fix attached particle spawners far from spawn
  * Localplayer: Fix disable_jump effect and standing node position
  * Fix blocks written by vmanip not being marked as modified
  * Fix Rotate Node Placement
  * ServerEnv: Clean up object lifecycle handling
  * Fix the core.wrap_text function
  * Fix empty legacy meta being persisted
  * Statbars: fix incorrect half-images in non-standard
    orientations
  * serialize: use a temporary for SerializeException
  * Fix player coordinate rounding in collisionMoveSimple()
  * Fix for empty key/value when reading item string with
    wear but no metadata
  * Fix render order of overlays
  * Fix console resize issue when maximising game window
  * Fix console not being properly resized after
    window size changed
  * Verify HudSetParams input when hotbar textures are set
  * (Re)spawn players within 'mapgen_limit'
  * Fix sending color codes to clients that don't support them</changelog>
  <changelog author="mvetter@suse.com" date="1551787200">- Update to 5.0.0
  * 5.0.0 is a breaking release and not compatible to the 0.4 series.
  * See changes: https://dev.minetest.net/Changelog#0.4.16_.E2.86.92_5.0.0
- Remove shared_mods.patch: global mods possible by default now.
  See builtin/mainmenu/pkgmgr.lua
- bsc#1127911: is tracking whitelisting of `minetest` user/group
  in rpmlint</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1554120000">- bsc#1131077: BuildRequire postgresql-server-devel as a workaround
  for CMake which explicitly looks for server headers even if just
  building a client application.
  CAUTION: This workaround should not blindly be copied to other
  packages that fail to build with PostgreSQL 11. It is always
  preferrable to convert the package to use pkg-config for linking
  against libpq instead of pulling in postgresql-server-devel
  to have pg_config. If in doubt, please talk to max@suse.com
  before applying such a workaround.</changelog>
  <changelog author="mvetter@suse.com" date="1554206400">- Update to 5.0.1:
  * Fix detached inventory serialisation
  * Fix texture rotation for wallmounted nodeboxes
  * Fix build failing on some compilers
  * Warn about issues with the num_emerge_threads setting
  * HPChange Reason: Fix issues with custom reasons
  * Fix FreeBSD build by handling std::time_t properly
  * Confirm registration GUI: Remove positional strings to fix Windows bug
  * Prevent multi-line chat messages server-side
  * httpfetch: Disable IPv6 here too if requested by settings</changelog>
  <changelog author="Maximilian Trummer &lt;opensuse@trummer.xyz&gt;" date="1570968000">- Update to 5.1.0:
  * Mapgen Carpathian: Add optional rivers (paramat)
  * Move more dungeon parameter selection to mapgens (paramat)
  * Dungeons: Make multiple large rooms possible (paramat)
  * Change pitch fly binding to 'P', add to change keys menu (rubenwardy)
  * Android settings: Use 'simple' leaves instead of 'fancy' (paramat)
  * Fix 3rd person selection range (srifqi)
  * Make scrollbars' bar variable in size (stujones11)
  * Damage: Play no damage sound when immortal (SmallJoker)
  * Increase upper limit of display_gamma to 10 (ClobberXD)
  * Optimize and unify mesh processing (Vitaliy)
  * Re-order mapgens in mainmenu and 'all settings' mapgen selection (paramat)
  * Scrollbars: Move directly to clicked pos if clicked into tray (DS-Minetest)
  * Fix broken attachments on join (SmallJoker)
  * Fix inventory_overlay for nodes without inventory_image (DS-Minetest)
  * Better F6 profiler (SmallJoker)
  * Fix minimap markers (theviper121)
  * Textures: Load base pack only as last fallback (SmallJoker)
  * Add /help formspec for commands and privileges (SmallJoker)
  * Lua API: Add link to Minetest Modding Book (ClobberXD)
  * Force item entities out of solid nodes (sfan5, based on Wuzzy`s work)
  * Lua API: Various fixes (DS-Minetest, SmallJoker)
  * Rename "private messages" to "direct messages" (Calinou)
  * Automatically enable depending mods in the dialogue (HybridDog)
  * All settings: Fix missing flags checkboxes (srifqi)
  * Various network performance improvements (osjc)
  * Force send a mapblock to a player (sofar)
  * Revert ItemStacks being limited to the 'stack_size' value (ClobberXD)
  * Save forceloaded blocks file periodically (Thomas Rudin)
  * Improve ABM time budget handling (lhofhansl)
  * Group "immortal" also protects players from damage (Wuzzy)
  * Optimize usage of TOSERVER_GOTBLOCKS packet (sfan5)
  * Network: several bugfixes (sfan5)
  * Mapgen::spreadLight performance improvement (DS-Minetest)
  * Improve occlusion culling in corridors with additional check (sfan5)
  * Inventory: Delay dirty lists, and send changes incrementally (SmallJoker)
  * Other inventory bugfixes (sfan5, SmallJoker)
  * Move debug.txt after it grows too big (HybridDog)
  * Trigger on_place in many situations even if prediction failed (DS-Minetest)
  * Punchwear (improved) (sfan5)
  * Add deprecation warnings for ObjectRef:get/set_attribute (ClobberXD)
  * Nodedef 'drop' documentation: Improve (Paramat)
  * Mark tool filtering in node drop documentation as deprecated (Paramat)
  * Add node field to PlayerHPChangeReason table (pauloue)
  * Don't call on_hpchange callbacks if HP hasn't changed (ClobberXD)
  * Add disable_jump to liquids and ladders (SmallJoker)
  * Add support for 9-sliced backgrounds (rubenwardy)
  * Add compatible, consistent coordinate system to FormSpecs (v-rob)
  * Document ObjectRef:remove under Lua entity (ClobberXD)
  * Docs: Clarify where to check for 'protection_bypass' (SmallJoker)
  * Add vector.dot and vector.cross (HybridDog)
  * Improve documentation of mapgen aliases (Paramat)
  * Remove debug.upvaluejoin to prevent leak of insecure environment (fluxionary)
  * Fix previously crashing minetest.get_craft_result() (pauloue)
  * Allow toolcaps to override the built-in times for dig_immediate (sfan5)
  * Formspec styling using style[] (rubenwardy)
  * Customizable chat message format (ClobberXD)
  * Velocity modifiers for players (sfan5)
  * Fix some issues with minetest.clear_craft (pauloue)
  * Add function `minetest.read_schematic` (paly2)
  * Formspecs: formspec_version[] element (SmallJoker)
  * Per-player FOV overrides and multipliers (ClobberXD)
  * Find PostgreSQL correctly (adrido)
  * Add compatibility to vcpkg buildsystem (adrido)
  * Android: Use system provided path for default TMPFolder setting (stujones11)
  * Fix handling of --color and --worldlist command line arguments (mmattes)
  * Unified OpenGL ES support (sfan5)</changelog>
  <changelog author="Simon Puchert &lt;simonpuchert@alice.de&gt;" date="1574424000">- Explicitly require libXxf86vm-devel.</changelog>
  <changelog author="Maximilian Trummer &lt;opensuse@trummer.xyz&gt;" date="1579348800">- Update to version 5.1.1
  * See https://dev.minetest.net/Changelog#5.1.0_.E2.86.92_5.1.1
  * Fix player-bound sound playback (SmallJoker)
  * Fix item eat sound not played if last item (Wuzzy2)
  * Formspecs: Reset version number on rebuild (SmallJoker)
  * Rework packet receiving in ServerThread (sfan5)
  * Fix core.chat_format_message crashes (ClobberXD)
  * Fix spaces breaking formspec_version[] tag (rubenwardy)
  * Fix find_path for newer jsoncpp installations (vilhelmgray)
  * Update translations</changelog>
  <changelog author="Maximilian Trummer &lt;opensuse@trummer.xyz&gt;" date="1579348801">- build with spatialindex-devel, this speeds up AreaStores, see
  https://github.com/minetest/minetest#cmake-options</changelog>
  <changelog author="Maximilian Trummer &lt;opensuse@trummer.xyz&gt;" date="1586174400">- Update to version 5.2.0
- See https://dev.minetest.net/Changelog#5.1.0_.E2.86.92_5.2.0
- Client / Audiovisuals:
  * Fix alpha blending in texture modifiers (Warr1024)
  * Make natural night light as bright as MT 0.4.16 (paramat)
  * Shader fixes (lhofhansl, SmallJoker)
  * Clean up font caching, fix bitmap fonts (SmallJoker)
  * Waves generated with Perlin-type noise #8994 (lhofhansl)
  * Attachments: Fix glitches after detach (SmallJoker)
  * Let node 'place' and 'dug' sounds be heard
    by other players (sfan5)
  * Fix weird looking liquid source (Wuzzy2)
  * Basic model shading (dcbrwn)
  * Improve arm inertia animations (kilbith)
- GUI improvements:
  * Add visual feedback for button states (Df458)
  * Formspec: draw order and clipping for all elements (DS)
  * Refactor internal button styling/rendering code (Df458')
  * Formspec: Fix clicking on tooltip-obstructed elements (DS)
  * Formspec: change cursor on fields and co. (DS)
  * Various new formspec bug fixes (SmallJoker)
  * Formspec: Add 9-slice background support
    to button elements (Df458)
  * Formspec: add hypertext[] element (pyrollo)
  * Formspec: animated_image[] (Df458, kilbith)
  * Make clipping of formspec elements more consistent (Df458)
  * Remove outdated field_close_on_enter[] warnings
    in element parameters (SmallJoker)
  * Fix mouse events sent to wrong GUI elements
    when dragging (sfan5)
  * Restore intuitive click-through behaviour (DS)
- Enhancements:
  * Wear out tools on punch (sfan5)
  * Tunnels: Completely disable generation
    when 'cave width' &gt;= 10.0 (paramat)
  * Randomwalk cave liquids:
    Remove deprecated 'lava depth' (paramat)
  * Automatically enable the mod's dependencies
    in the world config menu (HybridDog)
  * Clean up craft replacements docs (pauloue)
  * Falling nodes: add missing support for light sources,
    most drawtypes, and paramtype2s (Wuzzy2)
  * Remove legacy flat-file map code
    and documentation (random-geek)
  * Fix packet receiving in server and client (sfan5)
  * Key settings: Cancel with escape,
    clear with delete (SmallJoker)
- Script API / Modding:
  * CSM: Introduce get_modpath() (sfan5)
  * CSM: Remove non-functional minetest.get_day_count() (sfan5)
  * Add z-index management to HUD (pyrollo)
  * Add table.key_value_swap and table.shuffle (HybridDog)
  * Map download:
    Escape ':' to '_' (NTFS/FAT* systems) (Montandalar)
  * Settings: Add get_flags API for mapgen flags (SmallJoker)
  * Improve minetest.sound_play with ephemeral sounds
    and player exclusion (sfan5)
  * Reworked validity checks for entities (sfan5)
  * Documentation: Add advice on lifetime of ObjectRefs (sfan5)
  * Allow texture modifiers in hotbar textures (Warr1024)
  * Nodes with torchlike drawtype and custom visual_scale now are
    rendered attached to surface instead of being centered (Wuzzy2)
  * Add documentation of VoxelArea 'ystride', 'zstride' (paramat)
  * Lua API: Document HP, breath and damage limits (SmallJoker)
  * Various documentation improvements (Wuzzy2)
  * CSM: Corrections to client_lua_api.txt (sfan5)
  * Make minetest.item_place_node return position
    of placed node (Bluebird)
  * Call on_secondary_use when object is right-clicked (sfan5)
  * CSM: Various fixes (sfan5)
  * Many pathfinder bugfixes and improvements (Wuzzy2)
    + Fix failure to find path
    if start or end pos is over air (Wuzzy2)
    + Fix very broken implementation of A* search (Wuzzy2)
    + No longer jump through solid nodes (Wuzzy2)
    + Return nil if start or end pos is solid (Wuzzy2)
  * New set_sky, set_sun, set_moon and set_stars (Jordach)
  * Secure and document minetest.deserialize() (luk3yx)
  * minetest.get_content_id: throw error
    for unknown nodes (HybridDog)
- Misc / Build:
  * Don't install fonts on ENABLE_CLIENT=0 configurations (sfan5)
  * Fix memleaks in formspecs (SmallJoker)
  * Run luacheck in travis, add luacheck (rubenwardy)
  * Various build issue fixes (Clang, Travis CI) (sfan5)</changelog>
  <changelog author="Mia Herkt &lt;mia@0x0.st&gt;" date="1592827200">- spec-cleaner
- Make sure the package does not build with bundled libraries
- Add minetest-fix-luajit-include-path.patch
  Fixes the FindLuaJIT CMake module so it also looks for the
  moonjit include path</changelog>
  <changelog author="andy great &lt;andythe_great@pm.me&gt;" date="1594641600">- Update to version 5.3.0.
  (see https://dev.minetest.net/Changelog#5.2.0_.E2.86.92_5.3.0)
  * Formspec improvements, including a scrolling GUI element
  * Performance improvements to the Server and API
  * Many bug fixes and small features
- Now requires desktop-file-utils version &gt;= 0.25.</changelog>
  <changelog author="Dirk Stoecker &lt;opensuse@dstoecker.de&gt;" date="1599566400">- added patch to build .desktop file without 'PrefersNonDefaultGPU'
  option on Leap 15.2 and below (old-desktopfile-standard.patch)
- removed conditional build for very old openSUSE/SLES versions
- add minetest-runtime provides</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1614168000">- Fixed build on current Factory (checking symlinks)
- Update to version 5.4.0
  * Full log: https://dev.minetest.net/Changelog#5.3.0_.E2.86.92_5.4.0
  * Removed support for bumpmapping, generated normal maps
    and parallax occlusion
  * By default, the crosshair will now change to an "X" when
    pointing to objects
  * Prevent players accessing inventories of other players
  * Prevent interacting with items out of the hotbar
  * Prevent players from being able to modify ItemStack meta</changelog>
  <changelog author="Maximilian Trummer &lt;opensuse@trummer.xyz&gt;" date="1618833600">- Update to version 5.4.1:
  * This is a maintenance release based on 5.4.0,
    it contains bugfixes but no new features.
  * Apply 'old-desktopfile-standard.patch' to Leap 15.3 as well.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1622548800">- Add GCC 11 compatibility patch:
  * 0001-Fix-build-for-newer-versions-of-GCC-11246.patch</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633521600">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * minetest@.service</changelog>
  <changelog author="Simon Vogl &lt;simon.vogl@gmx.net&gt;" date="1659182400">- Drop 0001-Fix-build-for-newer-versions-of-GCC-11246.patch as it is merged upstream
- Only apply minetest-fix-luajit-include-path.patch on openSUSE Leap as TW versions do not require it any more.
- Switch to from system irrlicht to IrrlichtMt library version 1.9.0mt5
- Don't purge the bundled bitop library
- Add new libzstd build dependency
- Update to version 5.5.0 &amp; 5.5.1:
  * Full log for version 5.5.0: https://dev.minetest.net/Changelog#5.4.0_.E2.86.92_5.5.0
  * This release switches from Irrlicht to our own fork called IrrlichtMt.
  * Full log for version 5.5.1: https://dev.minetest.net/Changelog#5.5.0_.E2.86.92_5.5.1
  * This is a maintenance release based on 5.5.0, it contains bugfixes but no new features.</changelog>
  <changelog author="Dmitriy Perlow &lt;dap.darkness@gmail.com&gt;" date="1660564800">- Introduced mbranch-protection=none CXX flag to resolve bnc#1193141
  (aarch64).</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1660824000">- Update to version 5.6.0
  * Fix CVE-2022-35978 ( boo#1202423 ): Mod scripts can escape
    sandbox in single player mode
  * `name` in game.conf is deprecated for the game title, use `title` instead
  * Add depth sorting for node faces
  * Various bug fixes
  * Full changes: https://dev.minetest.net/Changelog#5.5.0_.E2.86.92_5.6.0</changelog>
</package>
<package pkgid="d4add5bcac5a24ff591425cf26f4adc9fa7e925fd24b2fe0fbe51c122a1a6231" name="minetest" arch="src">
  <version epoch="0" ver="5.6.0" rel="bp154.2.3.5"/>
  <changelog author="werner@suse.de" date="1520596800">- Use latest libpng</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1533643200">- Update to version 0.4.17.1:
  * Fix boo#1103904
  * Fix crash caused by log_deprecated
    and the use of deprecated functions
  * Fix crash on pause menu when pressing up/down keys
- Remove use-pkg-config-to-find-luajit.patch: fixed upstream.
- Update to version 0.4.17:
  * Dungeons: Mostly fix missing stair nodes
  * Cavegen: Fix variable typo that broke mgvalleys large cave
    distribution
  * Prevent translating empty strings
  * upright_sprite: Fix texture position for players
  * core.rotate_node: Do not trigger after_place_node for mod
    compatibility
  * Generate Notifier: Clear events once after all
    'on generated' functions
  * Fix liquid post effect colour behaviour in third person view
  * Delete world dialog: Move buttons to avoid
    double click deletion
  * Fix /shutdown countdown parameter
  * Check argument types inside MetaDataRef Lua API
  * dropped items and falling nodes: Delete in 'ignore' nodes
  * Fix off-by-one in log output line length
  * Fix buffer parameter not working in getMapSlice()
  * Fix rounding error in g/set_node caused by truncation to float
  * Fix dancing text in text input fields
  * Fix undefined behaviour on getting pointer to data in
    empty vector
  * Fix wrong scrolling in text areas
  * Damage: Remove damage ignore timer due to abuse potential
  * Ensure no item stack is being held before crafting
  * Several documentation additions, improvements
  * core.rotate_node: Run callbacks like with any
    regular placed node
  * Biome dust node: Only place on 'walkable' cubic
    non-liquid drawtypes
  * Fix issue Minetest crash when custom font path is not exist
  * Fix Settings tab formspec alignment
  * Do not scale texture unless necessary
  * Fix day_night_ratio_do_override not being initialised
    server-side
  * Fix default item callbacks to work with nil users
  * Prevent from crafting non-existent, unknown items
  * Profiler: Fix var args not being passed to
    callback register function
  * Fix attached particle spawners far from spawn
  * Localplayer: Fix disable_jump effect and standing node position
  * Fix blocks written by vmanip not being marked as modified
  * Fix Rotate Node Placement
  * ServerEnv: Clean up object lifecycle handling
  * Fix the core.wrap_text function
  * Fix empty legacy meta being persisted
  * Statbars: fix incorrect half-images in non-standard
    orientations
  * serialize: use a temporary for SerializeException
  * Fix player coordinate rounding in collisionMoveSimple()
  * Fix for empty key/value when reading item string with
    wear but no metadata
  * Fix render order of overlays
  * Fix console resize issue when maximising game window
  * Fix console not being properly resized after
    window size changed
  * Verify HudSetParams input when hotbar textures are set
  * (Re)spawn players within 'mapgen_limit'
  * Fix sending color codes to clients that don't support them</changelog>
  <changelog author="mvetter@suse.com" date="1551787200">- Update to 5.0.0
  * 5.0.0 is a breaking release and not compatible to the 0.4 series.
  * See changes: https://dev.minetest.net/Changelog#0.4.16_.E2.86.92_5.0.0
- Remove shared_mods.patch: global mods possible by default now.
  See builtin/mainmenu/pkgmgr.lua
- bsc#1127911: is tracking whitelisting of `minetest` user/group
  in rpmlint</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1554120000">- bsc#1131077: BuildRequire postgresql-server-devel as a workaround
  for CMake which explicitly looks for server headers even if just
  building a client application.
  CAUTION: This workaround should not blindly be copied to other
  packages that fail to build with PostgreSQL 11. It is always
  preferrable to convert the package to use pkg-config for linking
  against libpq instead of pulling in postgresql-server-devel
  to have pg_config. If in doubt, please talk to max@suse.com
  before applying such a workaround.</changelog>
  <changelog author="mvetter@suse.com" date="1554206400">- Update to 5.0.1:
  * Fix detached inventory serialisation
  * Fix texture rotation for wallmounted nodeboxes
  * Fix build failing on some compilers
  * Warn about issues with the num_emerge_threads setting
  * HPChange Reason: Fix issues with custom reasons
  * Fix FreeBSD build by handling std::time_t properly
  * Confirm registration GUI: Remove positional strings to fix Windows bug
  * Prevent multi-line chat messages server-side
  * httpfetch: Disable IPv6 here too if requested by settings</changelog>
  <changelog author="Maximilian Trummer &lt;opensuse@trummer.xyz&gt;" date="1570968000">- Update to 5.1.0:
  * Mapgen Carpathian: Add optional rivers (paramat)
  * Move more dungeon parameter selection to mapgens (paramat)
  * Dungeons: Make multiple large rooms possible (paramat)
  * Change pitch fly binding to 'P', add to change keys menu (rubenwardy)
  * Android settings: Use 'simple' leaves instead of 'fancy' (paramat)
  * Fix 3rd person selection range (srifqi)
  * Make scrollbars' bar variable in size (stujones11)
  * Damage: Play no damage sound when immortal (SmallJoker)
  * Increase upper limit of display_gamma to 10 (ClobberXD)
  * Optimize and unify mesh processing (Vitaliy)
  * Re-order mapgens in mainmenu and 'all settings' mapgen selection (paramat)
  * Scrollbars: Move directly to clicked pos if clicked into tray (DS-Minetest)
  * Fix broken attachments on join (SmallJoker)
  * Fix inventory_overlay for nodes without inventory_image (DS-Minetest)
  * Better F6 profiler (SmallJoker)
  * Fix minimap markers (theviper121)
  * Textures: Load base pack only as last fallback (SmallJoker)
  * Add /help formspec for commands and privileges (SmallJoker)
  * Lua API: Add link to Minetest Modding Book (ClobberXD)
  * Force item entities out of solid nodes (sfan5, based on Wuzzy`s work)
  * Lua API: Various fixes (DS-Minetest, SmallJoker)
  * Rename "private messages" to "direct messages" (Calinou)
  * Automatically enable depending mods in the dialogue (HybridDog)
  * All settings: Fix missing flags checkboxes (srifqi)
  * Various network performance improvements (osjc)
  * Force send a mapblock to a player (sofar)
  * Revert ItemStacks being limited to the 'stack_size' value (ClobberXD)
  * Save forceloaded blocks file periodically (Thomas Rudin)
  * Improve ABM time budget handling (lhofhansl)
  * Group "immortal" also protects players from damage (Wuzzy)
  * Optimize usage of TOSERVER_GOTBLOCKS packet (sfan5)
  * Network: several bugfixes (sfan5)
  * Mapgen::spreadLight performance improvement (DS-Minetest)
  * Improve occlusion culling in corridors with additional check (sfan5)
  * Inventory: Delay dirty lists, and send changes incrementally (SmallJoker)
  * Other inventory bugfixes (sfan5, SmallJoker)
  * Move debug.txt after it grows too big (HybridDog)
  * Trigger on_place in many situations even if prediction failed (DS-Minetest)
  * Punchwear (improved) (sfan5)
  * Add deprecation warnings for ObjectRef:get/set_attribute (ClobberXD)
  * Nodedef 'drop' documentation: Improve (Paramat)
  * Mark tool filtering in node drop documentation as deprecated (Paramat)
  * Add node field to PlayerHPChangeReason table (pauloue)
  * Don't call on_hpchange callbacks if HP hasn't changed (ClobberXD)
  * Add disable_jump to liquids and ladders (SmallJoker)
  * Add support for 9-sliced backgrounds (rubenwardy)
  * Add compatible, consistent coordinate system to FormSpecs (v-rob)
  * Document ObjectRef:remove under Lua entity (ClobberXD)
  * Docs: Clarify where to check for 'protection_bypass' (SmallJoker)
  * Add vector.dot and vector.cross (HybridDog)
  * Improve documentation of mapgen aliases (Paramat)
  * Remove debug.upvaluejoin to prevent leak of insecure environment (fluxionary)
  * Fix previously crashing minetest.get_craft_result() (pauloue)
  * Allow toolcaps to override the built-in times for dig_immediate (sfan5)
  * Formspec styling using style[] (rubenwardy)
  * Customizable chat message format (ClobberXD)
  * Velocity modifiers for players (sfan5)
  * Fix some issues with minetest.clear_craft (pauloue)
  * Add function `minetest.read_schematic` (paly2)
  * Formspecs: formspec_version[] element (SmallJoker)
  * Per-player FOV overrides and multipliers (ClobberXD)
  * Find PostgreSQL correctly (adrido)
  * Add compatibility to vcpkg buildsystem (adrido)
  * Android: Use system provided path for default TMPFolder setting (stujones11)
  * Fix handling of --color and --worldlist command line arguments (mmattes)
  * Unified OpenGL ES support (sfan5)</changelog>
  <changelog author="Simon Puchert &lt;simonpuchert@alice.de&gt;" date="1574424000">- Explicitly require libXxf86vm-devel.</changelog>
  <changelog author="Maximilian Trummer &lt;opensuse@trummer.xyz&gt;" date="1579348800">- Update to version 5.1.1
  * See https://dev.minetest.net/Changelog#5.1.0_.E2.86.92_5.1.1
  * Fix player-bound sound playback (SmallJoker)
  * Fix item eat sound not played if last item (Wuzzy2)
  * Formspecs: Reset version number on rebuild (SmallJoker)
  * Rework packet receiving in ServerThread (sfan5)
  * Fix core.chat_format_message crashes (ClobberXD)
  * Fix spaces breaking formspec_version[] tag (rubenwardy)
  * Fix find_path for newer jsoncpp installations (vilhelmgray)
  * Update translations</changelog>
  <changelog author="Maximilian Trummer &lt;opensuse@trummer.xyz&gt;" date="1579348801">- build with spatialindex-devel, this speeds up AreaStores, see
  https://github.com/minetest/minetest#cmake-options</changelog>
  <changelog author="Maximilian Trummer &lt;opensuse@trummer.xyz&gt;" date="1586174400">- Update to version 5.2.0
- See https://dev.minetest.net/Changelog#5.1.0_.E2.86.92_5.2.0
- Client / Audiovisuals:
  * Fix alpha blending in texture modifiers (Warr1024)
  * Make natural night light as bright as MT 0.4.16 (paramat)
  * Shader fixes (lhofhansl, SmallJoker)
  * Clean up font caching, fix bitmap fonts (SmallJoker)
  * Waves generated with Perlin-type noise #8994 (lhofhansl)
  * Attachments: Fix glitches after detach (SmallJoker)
  * Let node 'place' and 'dug' sounds be heard
    by other players (sfan5)
  * Fix weird looking liquid source (Wuzzy2)
  * Basic model shading (dcbrwn)
  * Improve arm inertia animations (kilbith)
- GUI improvements:
  * Add visual feedback for button states (Df458)
  * Formspec: draw order and clipping for all elements (DS)
  * Refactor internal button styling/rendering code (Df458')
  * Formspec: Fix clicking on tooltip-obstructed elements (DS)
  * Formspec: change cursor on fields and co. (DS)
  * Various new formspec bug fixes (SmallJoker)
  * Formspec: Add 9-slice background support
    to button elements (Df458)
  * Formspec: add hypertext[] element (pyrollo)
  * Formspec: animated_image[] (Df458, kilbith)
  * Make clipping of formspec elements more consistent (Df458)
  * Remove outdated field_close_on_enter[] warnings
    in element parameters (SmallJoker)
  * Fix mouse events sent to wrong GUI elements
    when dragging (sfan5)
  * Restore intuitive click-through behaviour (DS)
- Enhancements:
  * Wear out tools on punch (sfan5)
  * Tunnels: Completely disable generation
    when 'cave width' &gt;= 10.0 (paramat)
  * Randomwalk cave liquids:
    Remove deprecated 'lava depth' (paramat)
  * Automatically enable the mod's dependencies
    in the world config menu (HybridDog)
  * Clean up craft replacements docs (pauloue)
  * Falling nodes: add missing support for light sources,
    most drawtypes, and paramtype2s (Wuzzy2)
  * Remove legacy flat-file map code
    and documentation (random-geek)
  * Fix packet receiving in server and client (sfan5)
  * Key settings: Cancel with escape,
    clear with delete (SmallJoker)
- Script API / Modding:
  * CSM: Introduce get_modpath() (sfan5)
  * CSM: Remove non-functional minetest.get_day_count() (sfan5)
  * Add z-index management to HUD (pyrollo)
  * Add table.key_value_swap and table.shuffle (HybridDog)
  * Map download:
    Escape ':' to '_' (NTFS/FAT* systems) (Montandalar)
  * Settings: Add get_flags API for mapgen flags (SmallJoker)
  * Improve minetest.sound_play with ephemeral sounds
    and player exclusion (sfan5)
  * Reworked validity checks for entities (sfan5)
  * Documentation: Add advice on lifetime of ObjectRefs (sfan5)
  * Allow texture modifiers in hotbar textures (Warr1024)
  * Nodes with torchlike drawtype and custom visual_scale now are
    rendered attached to surface instead of being centered (Wuzzy2)
  * Add documentation of VoxelArea 'ystride', 'zstride' (paramat)
  * Lua API: Document HP, breath and damage limits (SmallJoker)
  * Various documentation improvements (Wuzzy2)
  * CSM: Corrections to client_lua_api.txt (sfan5)
  * Make minetest.item_place_node return position
    of placed node (Bluebird)
  * Call on_secondary_use when object is right-clicked (sfan5)
  * CSM: Various fixes (sfan5)
  * Many pathfinder bugfixes and improvements (Wuzzy2)
    + Fix failure to find path
    if start or end pos is over air (Wuzzy2)
    + Fix very broken implementation of A* search (Wuzzy2)
    + No longer jump through solid nodes (Wuzzy2)
    + Return nil if start or end pos is solid (Wuzzy2)
  * New set_sky, set_sun, set_moon and set_stars (Jordach)
  * Secure and document minetest.deserialize() (luk3yx)
  * minetest.get_content_id: throw error
    for unknown nodes (HybridDog)
- Misc / Build:
  * Don't install fonts on ENABLE_CLIENT=0 configurations (sfan5)
  * Fix memleaks in formspecs (SmallJoker)
  * Run luacheck in travis, add luacheck (rubenwardy)
  * Various build issue fixes (Clang, Travis CI) (sfan5)</changelog>
  <changelog author="Mia Herkt &lt;mia@0x0.st&gt;" date="1592827200">- spec-cleaner
- Make sure the package does not build with bundled libraries
- Add minetest-fix-luajit-include-path.patch
  Fixes the FindLuaJIT CMake module so it also looks for the
  moonjit include path</changelog>
  <changelog author="andy great &lt;andythe_great@pm.me&gt;" date="1594641600">- Update to version 5.3.0.
  (see https://dev.minetest.net/Changelog#5.2.0_.E2.86.92_5.3.0)
  * Formspec improvements, including a scrolling GUI element
  * Performance improvements to the Server and API
  * Many bug fixes and small features
- Now requires desktop-file-utils version &gt;= 0.25.</changelog>
  <changelog author="Dirk Stoecker &lt;opensuse@dstoecker.de&gt;" date="1599566400">- added patch to build .desktop file without 'PrefersNonDefaultGPU'
  option on Leap 15.2 and below (old-desktopfile-standard.patch)
- removed conditional build for very old openSUSE/SLES versions
- add minetest-runtime provides</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1614168000">- Fixed build on current Factory (checking symlinks)
- Update to version 5.4.0
  * Full log: https://dev.minetest.net/Changelog#5.3.0_.E2.86.92_5.4.0
  * Removed support for bumpmapping, generated normal maps
    and parallax occlusion
  * By default, the crosshair will now change to an "X" when
    pointing to objects
  * Prevent players accessing inventories of other players
  * Prevent interacting with items out of the hotbar
  * Prevent players from being able to modify ItemStack meta</changelog>
  <changelog author="Maximilian Trummer &lt;opensuse@trummer.xyz&gt;" date="1618833600">- Update to version 5.4.1:
  * This is a maintenance release based on 5.4.0,
    it contains bugfixes but no new features.
  * Apply 'old-desktopfile-standard.patch' to Leap 15.3 as well.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1622548800">- Add GCC 11 compatibility patch:
  * 0001-Fix-build-for-newer-versions-of-GCC-11246.patch</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633521600">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * minetest@.service</changelog>
  <changelog author="Simon Vogl &lt;simon.vogl@gmx.net&gt;" date="1659182400">- Drop 0001-Fix-build-for-newer-versions-of-GCC-11246.patch as it is merged upstream
- Only apply minetest-fix-luajit-include-path.patch on openSUSE Leap as TW versions do not require it any more.
- Switch to from system irrlicht to IrrlichtMt library version 1.9.0mt5
- Don't purge the bundled bitop library
- Add new libzstd build dependency
- Update to version 5.5.0 &amp; 5.5.1:
  * Full log for version 5.5.0: https://dev.minetest.net/Changelog#5.4.0_.E2.86.92_5.5.0
  * This release switches from Irrlicht to our own fork called IrrlichtMt.
  * Full log for version 5.5.1: https://dev.minetest.net/Changelog#5.5.0_.E2.86.92_5.5.1
  * This is a maintenance release based on 5.5.0, it contains bugfixes but no new features.</changelog>
  <changelog author="Dmitriy Perlow &lt;dap.darkness@gmail.com&gt;" date="1660564800">- Introduced mbranch-protection=none CXX flag to resolve bnc#1193141
  (aarch64).</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1660824000">- Update to version 5.6.0
  * Fix CVE-2022-35978 ( boo#1202423 ): Mod scripts can escape
    sandbox in single player mode
  * `name` in game.conf is deprecated for the game title, use `title` instead
  * Add depth sorting for node faces
  * Various bug fixes
  * Full changes: https://dev.minetest.net/Changelog#5.5.0_.E2.86.92_5.6.0</changelog>
</package>
<package pkgid="f6d92dbb338ce2ed9ed4a5979ba4f7dae0e749f59b3ddc575322e2089057e4da" name="minetest" arch="x86_64">
  <version epoch="0" ver="5.6.0" rel="bp154.2.3.5"/>
  <changelog author="werner@suse.de" date="1520596800">- Use latest libpng</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1533643200">- Update to version 0.4.17.1:
  * Fix boo#1103904
  * Fix crash caused by log_deprecated
    and the use of deprecated functions
  * Fix crash on pause menu when pressing up/down keys
- Remove use-pkg-config-to-find-luajit.patch: fixed upstream.
- Update to version 0.4.17:
  * Dungeons: Mostly fix missing stair nodes
  * Cavegen: Fix variable typo that broke mgvalleys large cave
    distribution
  * Prevent translating empty strings
  * upright_sprite: Fix texture position for players
  * core.rotate_node: Do not trigger after_place_node for mod
    compatibility
  * Generate Notifier: Clear events once after all
    'on generated' functions
  * Fix liquid post effect colour behaviour in third person view
  * Delete world dialog: Move buttons to avoid
    double click deletion
  * Fix /shutdown countdown parameter
  * Check argument types inside MetaDataRef Lua API
  * dropped items and falling nodes: Delete in 'ignore' nodes
  * Fix off-by-one in log output line length
  * Fix buffer parameter not working in getMapSlice()
  * Fix rounding error in g/set_node caused by truncation to float
  * Fix dancing text in text input fields
  * Fix undefined behaviour on getting pointer to data in
    empty vector
  * Fix wrong scrolling in text areas
  * Damage: Remove damage ignore timer due to abuse potential
  * Ensure no item stack is being held before crafting
  * Several documentation additions, improvements
  * core.rotate_node: Run callbacks like with any
    regular placed node
  * Biome dust node: Only place on 'walkable' cubic
    non-liquid drawtypes
  * Fix issue Minetest crash when custom font path is not exist
  * Fix Settings tab formspec alignment
  * Do not scale texture unless necessary
  * Fix day_night_ratio_do_override not being initialised
    server-side
  * Fix default item callbacks to work with nil users
  * Prevent from crafting non-existent, unknown items
  * Profiler: Fix var args not being passed to
    callback register function
  * Fix attached particle spawners far from spawn
  * Localplayer: Fix disable_jump effect and standing node position
  * Fix blocks written by vmanip not being marked as modified
  * Fix Rotate Node Placement
  * ServerEnv: Clean up object lifecycle handling
  * Fix the core.wrap_text function
  * Fix empty legacy meta being persisted
  * Statbars: fix incorrect half-images in non-standard
    orientations
  * serialize: use a temporary for SerializeException
  * Fix player coordinate rounding in collisionMoveSimple()
  * Fix for empty key/value when reading item string with
    wear but no metadata
  * Fix render order of overlays
  * Fix console resize issue when maximising game window
  * Fix console not being properly resized after
    window size changed
  * Verify HudSetParams input when hotbar textures are set
  * (Re)spawn players within 'mapgen_limit'
  * Fix sending color codes to clients that don't support them</changelog>
  <changelog author="mvetter@suse.com" date="1551787200">- Update to 5.0.0
  * 5.0.0 is a breaking release and not compatible to the 0.4 series.
  * See changes: https://dev.minetest.net/Changelog#0.4.16_.E2.86.92_5.0.0
- Remove shared_mods.patch: global mods possible by default now.
  See builtin/mainmenu/pkgmgr.lua
- bsc#1127911: is tracking whitelisting of `minetest` user/group
  in rpmlint</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1554120000">- bsc#1131077: BuildRequire postgresql-server-devel as a workaround
  for CMake which explicitly looks for server headers even if just
  building a client application.
  CAUTION: This workaround should not blindly be copied to other
  packages that fail to build with PostgreSQL 11. It is always
  preferrable to convert the package to use pkg-config for linking
  against libpq instead of pulling in postgresql-server-devel
  to have pg_config. If in doubt, please talk to max@suse.com
  before applying such a workaround.</changelog>
  <changelog author="mvetter@suse.com" date="1554206400">- Update to 5.0.1:
  * Fix detached inventory serialisation
  * Fix texture rotation for wallmounted nodeboxes
  * Fix build failing on some compilers
  * Warn about issues with the num_emerge_threads setting
  * HPChange Reason: Fix issues with custom reasons
  * Fix FreeBSD build by handling std::time_t properly
  * Confirm registration GUI: Remove positional strings to fix Windows bug
  * Prevent multi-line chat messages server-side
  * httpfetch: Disable IPv6 here too if requested by settings</changelog>
  <changelog author="Maximilian Trummer &lt;opensuse@trummer.xyz&gt;" date="1570968000">- Update to 5.1.0:
  * Mapgen Carpathian: Add optional rivers (paramat)
  * Move more dungeon parameter selection to mapgens (paramat)
  * Dungeons: Make multiple large rooms possible (paramat)
  * Change pitch fly binding to 'P', add to change keys menu (rubenwardy)
  * Android settings: Use 'simple' leaves instead of 'fancy' (paramat)
  * Fix 3rd person selection range (srifqi)
  * Make scrollbars' bar variable in size (stujones11)
  * Damage: Play no damage sound when immortal (SmallJoker)
  * Increase upper limit of display_gamma to 10 (ClobberXD)
  * Optimize and unify mesh processing (Vitaliy)
  * Re-order mapgens in mainmenu and 'all settings' mapgen selection (paramat)
  * Scrollbars: Move directly to clicked pos if clicked into tray (DS-Minetest)
  * Fix broken attachments on join (SmallJoker)
  * Fix inventory_overlay for nodes without inventory_image (DS-Minetest)
  * Better F6 profiler (SmallJoker)
  * Fix minimap markers (theviper121)
  * Textures: Load base pack only as last fallback (SmallJoker)
  * Add /help formspec for commands and privileges (SmallJoker)
  * Lua API: Add link to Minetest Modding Book (ClobberXD)
  * Force item entities out of solid nodes (sfan5, based on Wuzzy`s work)
  * Lua API: Various fixes (DS-Minetest, SmallJoker)
  * Rename "private messages" to "direct messages" (Calinou)
  * Automatically enable depending mods in the dialogue (HybridDog)
  * All settings: Fix missing flags checkboxes (srifqi)
  * Various network performance improvements (osjc)
  * Force send a mapblock to a player (sofar)
  * Revert ItemStacks being limited to the 'stack_size' value (ClobberXD)
  * Save forceloaded blocks file periodically (Thomas Rudin)
  * Improve ABM time budget handling (lhofhansl)
  * Group "immortal" also protects players from damage (Wuzzy)
  * Optimize usage of TOSERVER_GOTBLOCKS packet (sfan5)
  * Network: several bugfixes (sfan5)
  * Mapgen::spreadLight performance improvement (DS-Minetest)
  * Improve occlusion culling in corridors with additional check (sfan5)
  * Inventory: Delay dirty lists, and send changes incrementally (SmallJoker)
  * Other inventory bugfixes (sfan5, SmallJoker)
  * Move debug.txt after it grows too big (HybridDog)
  * Trigger on_place in many situations even if prediction failed (DS-Minetest)
  * Punchwear (improved) (sfan5)
  * Add deprecation warnings for ObjectRef:get/set_attribute (ClobberXD)
  * Nodedef 'drop' documentation: Improve (Paramat)
  * Mark tool filtering in node drop documentation as deprecated (Paramat)
  * Add node field to PlayerHPChangeReason table (pauloue)
  * Don't call on_hpchange callbacks if HP hasn't changed (ClobberXD)
  * Add disable_jump to liquids and ladders (SmallJoker)
  * Add support for 9-sliced backgrounds (rubenwardy)
  * Add compatible, consistent coordinate system to FormSpecs (v-rob)
  * Document ObjectRef:remove under Lua entity (ClobberXD)
  * Docs: Clarify where to check for 'protection_bypass' (SmallJoker)
  * Add vector.dot and vector.cross (HybridDog)
  * Improve documentation of mapgen aliases (Paramat)
  * Remove debug.upvaluejoin to prevent leak of insecure environment (fluxionary)
  * Fix previously crashing minetest.get_craft_result() (pauloue)
  * Allow toolcaps to override the built-in times for dig_immediate (sfan5)
  * Formspec styling using style[] (rubenwardy)
  * Customizable chat message format (ClobberXD)
  * Velocity modifiers for players (sfan5)
  * Fix some issues with minetest.clear_craft (pauloue)
  * Add function `minetest.read_schematic` (paly2)
  * Formspecs: formspec_version[] element (SmallJoker)
  * Per-player FOV overrides and multipliers (ClobberXD)
  * Find PostgreSQL correctly (adrido)
  * Add compatibility to vcpkg buildsystem (adrido)
  * Android: Use system provided path for default TMPFolder setting (stujones11)
  * Fix handling of --color and --worldlist command line arguments (mmattes)
  * Unified OpenGL ES support (sfan5)</changelog>
  <changelog author="Simon Puchert &lt;simonpuchert@alice.de&gt;" date="1574424000">- Explicitly require libXxf86vm-devel.</changelog>
  <changelog author="Maximilian Trummer &lt;opensuse@trummer.xyz&gt;" date="1579348800">- Update to version 5.1.1
  * See https://dev.minetest.net/Changelog#5.1.0_.E2.86.92_5.1.1
  * Fix player-bound sound playback (SmallJoker)
  * Fix item eat sound not played if last item (Wuzzy2)
  * Formspecs: Reset version number on rebuild (SmallJoker)
  * Rework packet receiving in ServerThread (sfan5)
  * Fix core.chat_format_message crashes (ClobberXD)
  * Fix spaces breaking formspec_version[] tag (rubenwardy)
  * Fix find_path for newer jsoncpp installations (vilhelmgray)
  * Update translations</changelog>
  <changelog author="Maximilian Trummer &lt;opensuse@trummer.xyz&gt;" date="1579348801">- build with spatialindex-devel, this speeds up AreaStores, see
  https://github.com/minetest/minetest#cmake-options</changelog>
  <changelog author="Maximilian Trummer &lt;opensuse@trummer.xyz&gt;" date="1586174400">- Update to version 5.2.0
- See https://dev.minetest.net/Changelog#5.1.0_.E2.86.92_5.2.0
- Client / Audiovisuals:
  * Fix alpha blending in texture modifiers (Warr1024)
  * Make natural night light as bright as MT 0.4.16 (paramat)
  * Shader fixes (lhofhansl, SmallJoker)
  * Clean up font caching, fix bitmap fonts (SmallJoker)
  * Waves generated with Perlin-type noise #8994 (lhofhansl)
  * Attachments: Fix glitches after detach (SmallJoker)
  * Let node 'place' and 'dug' sounds be heard
    by other players (sfan5)
  * Fix weird looking liquid source (Wuzzy2)
  * Basic model shading (dcbrwn)
  * Improve arm inertia animations (kilbith)
- GUI improvements:
  * Add visual feedback for button states (Df458)
  * Formspec: draw order and clipping for all elements (DS)
  * Refactor internal button styling/rendering code (Df458')
  * Formspec: Fix clicking on tooltip-obstructed elements (DS)
  * Formspec: change cursor on fields and co. (DS)
  * Various new formspec bug fixes (SmallJoker)
  * Formspec: Add 9-slice background support
    to button elements (Df458)
  * Formspec: add hypertext[] element (pyrollo)
  * Formspec: animated_image[] (Df458, kilbith)
  * Make clipping of formspec elements more consistent (Df458)
  * Remove outdated field_close_on_enter[] warnings
    in element parameters (SmallJoker)
  * Fix mouse events sent to wrong GUI elements
    when dragging (sfan5)
  * Restore intuitive click-through behaviour (DS)
- Enhancements:
  * Wear out tools on punch (sfan5)
  * Tunnels: Completely disable generation
    when 'cave width' &gt;= 10.0 (paramat)
  * Randomwalk cave liquids:
    Remove deprecated 'lava depth' (paramat)
  * Automatically enable the mod's dependencies
    in the world config menu (HybridDog)
  * Clean up craft replacements docs (pauloue)
  * Falling nodes: add missing support for light sources,
    most drawtypes, and paramtype2s (Wuzzy2)
  * Remove legacy flat-file map code
    and documentation (random-geek)
  * Fix packet receiving in server and client (sfan5)
  * Key settings: Cancel with escape,
    clear with delete (SmallJoker)
- Script API / Modding:
  * CSM: Introduce get_modpath() (sfan5)
  * CSM: Remove non-functional minetest.get_day_count() (sfan5)
  * Add z-index management to HUD (pyrollo)
  * Add table.key_value_swap and table.shuffle (HybridDog)
  * Map download:
    Escape ':' to '_' (NTFS/FAT* systems) (Montandalar)
  * Settings: Add get_flags API for mapgen flags (SmallJoker)
  * Improve minetest.sound_play with ephemeral sounds
    and player exclusion (sfan5)
  * Reworked validity checks for entities (sfan5)
  * Documentation: Add advice on lifetime of ObjectRefs (sfan5)
  * Allow texture modifiers in hotbar textures (Warr1024)
  * Nodes with torchlike drawtype and custom visual_scale now are
    rendered attached to surface instead of being centered (Wuzzy2)
  * Add documentation of VoxelArea 'ystride', 'zstride' (paramat)
  * Lua API: Document HP, breath and damage limits (SmallJoker)
  * Various documentation improvements (Wuzzy2)
  * CSM: Corrections to client_lua_api.txt (sfan5)
  * Make minetest.item_place_node return position
    of placed node (Bluebird)
  * Call on_secondary_use when object is right-clicked (sfan5)
  * CSM: Various fixes (sfan5)
  * Many pathfinder bugfixes and improvements (Wuzzy2)
    + Fix failure to find path
    if start or end pos is over air (Wuzzy2)
    + Fix very broken implementation of A* search (Wuzzy2)
    + No longer jump through solid nodes (Wuzzy2)
    + Return nil if start or end pos is solid (Wuzzy2)
  * New set_sky, set_sun, set_moon and set_stars (Jordach)
  * Secure and document minetest.deserialize() (luk3yx)
  * minetest.get_content_id: throw error
    for unknown nodes (HybridDog)
- Misc / Build:
  * Don't install fonts on ENABLE_CLIENT=0 configurations (sfan5)
  * Fix memleaks in formspecs (SmallJoker)
  * Run luacheck in travis, add luacheck (rubenwardy)
  * Various build issue fixes (Clang, Travis CI) (sfan5)</changelog>
  <changelog author="Mia Herkt &lt;mia@0x0.st&gt;" date="1592827200">- spec-cleaner
- Make sure the package does not build with bundled libraries
- Add minetest-fix-luajit-include-path.patch
  Fixes the FindLuaJIT CMake module so it also looks for the
  moonjit include path</changelog>
  <changelog author="andy great &lt;andythe_great@pm.me&gt;" date="1594641600">- Update to version 5.3.0.
  (see https://dev.minetest.net/Changelog#5.2.0_.E2.86.92_5.3.0)
  * Formspec improvements, including a scrolling GUI element
  * Performance improvements to the Server and API
  * Many bug fixes and small features
- Now requires desktop-file-utils version &gt;= 0.25.</changelog>
  <changelog author="Dirk Stoecker &lt;opensuse@dstoecker.de&gt;" date="1599566400">- added patch to build .desktop file without 'PrefersNonDefaultGPU'
  option on Leap 15.2 and below (old-desktopfile-standard.patch)
- removed conditional build for very old openSUSE/SLES versions
- add minetest-runtime provides</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1614168000">- Fixed build on current Factory (checking symlinks)
- Update to version 5.4.0
  * Full log: https://dev.minetest.net/Changelog#5.3.0_.E2.86.92_5.4.0
  * Removed support for bumpmapping, generated normal maps
    and parallax occlusion
  * By default, the crosshair will now change to an "X" when
    pointing to objects
  * Prevent players accessing inventories of other players
  * Prevent interacting with items out of the hotbar
  * Prevent players from being able to modify ItemStack meta</changelog>
  <changelog author="Maximilian Trummer &lt;opensuse@trummer.xyz&gt;" date="1618833600">- Update to version 5.4.1:
  * This is a maintenance release based on 5.4.0,
    it contains bugfixes but no new features.
  * Apply 'old-desktopfile-standard.patch' to Leap 15.3 as well.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1622548800">- Add GCC 11 compatibility patch:
  * 0001-Fix-build-for-newer-versions-of-GCC-11246.patch</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633521600">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * minetest@.service</changelog>
  <changelog author="Simon Vogl &lt;simon.vogl@gmx.net&gt;" date="1659182400">- Drop 0001-Fix-build-for-newer-versions-of-GCC-11246.patch as it is merged upstream
- Only apply minetest-fix-luajit-include-path.patch on openSUSE Leap as TW versions do not require it any more.
- Switch to from system irrlicht to IrrlichtMt library version 1.9.0mt5
- Don't purge the bundled bitop library
- Add new libzstd build dependency
- Update to version 5.5.0 &amp; 5.5.1:
  * Full log for version 5.5.0: https://dev.minetest.net/Changelog#5.4.0_.E2.86.92_5.5.0
  * This release switches from Irrlicht to our own fork called IrrlichtMt.
  * Full log for version 5.5.1: https://dev.minetest.net/Changelog#5.5.0_.E2.86.92_5.5.1
  * This is a maintenance release based on 5.5.0, it contains bugfixes but no new features.</changelog>
  <changelog author="Dmitriy Perlow &lt;dap.darkness@gmail.com&gt;" date="1660564800">- Introduced mbranch-protection=none CXX flag to resolve bnc#1193141
  (aarch64).</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1660824000">- Update to version 5.6.0
  * Fix CVE-2022-35978 ( boo#1202423 ): Mod scripts can escape
    sandbox in single player mode
  * `name` in game.conf is deprecated for the game title, use `title` instead
  * Add depth sorting for node faces
  * Various bug fixes
  * Full changes: https://dev.minetest.net/Changelog#5.5.0_.E2.86.92_5.6.0</changelog>
</package>
<package pkgid="988a036036d59aa7640082776e2f59d044dac748eb000ba4b4c22e473fd4899f" name="minetest-data" arch="noarch">
  <version epoch="0" ver="5.6.0" rel="bp154.2.3.5"/>
  <changelog author="werner@suse.de" date="1520596800">- Use latest libpng</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1533643200">- Update to version 0.4.17.1:
  * Fix boo#1103904
  * Fix crash caused by log_deprecated
    and the use of deprecated functions
  * Fix crash on pause menu when pressing up/down keys
- Remove use-pkg-config-to-find-luajit.patch: fixed upstream.
- Update to version 0.4.17:
  * Dungeons: Mostly fix missing stair nodes
  * Cavegen: Fix variable typo that broke mgvalleys large cave
    distribution
  * Prevent translating empty strings
  * upright_sprite: Fix texture position for players
  * core.rotate_node: Do not trigger after_place_node for mod
    compatibility
  * Generate Notifier: Clear events once after all
    'on generated' functions
  * Fix liquid post effect colour behaviour in third person view
  * Delete world dialog: Move buttons to avoid
    double click deletion
  * Fix /shutdown countdown parameter
  * Check argument types inside MetaDataRef Lua API
  * dropped items and falling nodes: Delete in 'ignore' nodes
  * Fix off-by-one in log output line length
  * Fix buffer parameter not working in getMapSlice()
  * Fix rounding error in g/set_node caused by truncation to float
  * Fix dancing text in text input fields
  * Fix undefined behaviour on getting pointer to data in
    empty vector
  * Fix wrong scrolling in text areas
  * Damage: Remove damage ignore timer due to abuse potential
  * Ensure no item stack is being held before crafting
  * Several documentation additions, improvements
  * core.rotate_node: Run callbacks like with any
    regular placed node
  * Biome dust node: Only place on 'walkable' cubic
    non-liquid drawtypes
  * Fix issue Minetest crash when custom font path is not exist
  * Fix Settings tab formspec alignment
  * Do not scale texture unless necessary
  * Fix day_night_ratio_do_override not being initialised
    server-side
  * Fix default item callbacks to work with nil users
  * Prevent from crafting non-existent, unknown items
  * Profiler: Fix var args not being passed to
    callback register function
  * Fix attached particle spawners far from spawn
  * Localplayer: Fix disable_jump effect and standing node position
  * Fix blocks written by vmanip not being marked as modified
  * Fix Rotate Node Placement
  * ServerEnv: Clean up object lifecycle handling
  * Fix the core.wrap_text function
  * Fix empty legacy meta being persisted
  * Statbars: fix incorrect half-images in non-standard
    orientations
  * serialize: use a temporary for SerializeException
  * Fix player coordinate rounding in collisionMoveSimple()
  * Fix for empty key/value when reading item string with
    wear but no metadata
  * Fix render order of overlays
  * Fix console resize issue when maximising game window
  * Fix console not being properly resized after
    window size changed
  * Verify HudSetParams input when hotbar textures are set
  * (Re)spawn players within 'mapgen_limit'
  * Fix sending color codes to clients that don't support them</changelog>
  <changelog author="mvetter@suse.com" date="1551787200">- Update to 5.0.0
  * 5.0.0 is a breaking release and not compatible to the 0.4 series.
  * See changes: https://dev.minetest.net/Changelog#0.4.16_.E2.86.92_5.0.0
- Remove shared_mods.patch: global mods possible by default now.
  See builtin/mainmenu/pkgmgr.lua
- bsc#1127911: is tracking whitelisting of `minetest` user/group
  in rpmlint</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1554120000">- bsc#1131077: BuildRequire postgresql-server-devel as a workaround
  for CMake which explicitly looks for server headers even if just
  building a client application.
  CAUTION: This workaround should not blindly be copied to other
  packages that fail to build with PostgreSQL 11. It is always
  preferrable to convert the package to use pkg-config for linking
  against libpq instead of pulling in postgresql-server-devel
  to have pg_config. If in doubt, please talk to max@suse.com
  before applying such a workaround.</changelog>
  <changelog author="mvetter@suse.com" date="1554206400">- Update to 5.0.1:
  * Fix detached inventory serialisation
  * Fix texture rotation for wallmounted nodeboxes
  * Fix build failing on some compilers
  * Warn about issues with the num_emerge_threads setting
  * HPChange Reason: Fix issues with custom reasons
  * Fix FreeBSD build by handling std::time_t properly
  * Confirm registration GUI: Remove positional strings to fix Windows bug
  * Prevent multi-line chat messages server-side
  * httpfetch: Disable IPv6 here too if requested by settings</changelog>
  <changelog author="Maximilian Trummer &lt;opensuse@trummer.xyz&gt;" date="1570968000">- Update to 5.1.0:
  * Mapgen Carpathian: Add optional rivers (paramat)
  * Move more dungeon parameter selection to mapgens (paramat)
  * Dungeons: Make multiple large rooms possible (paramat)
  * Change pitch fly binding to 'P', add to change keys menu (rubenwardy)
  * Android settings: Use 'simple' leaves instead of 'fancy' (paramat)
  * Fix 3rd person selection range (srifqi)
  * Make scrollbars' bar variable in size (stujones11)
  * Damage: Play no damage sound when immortal (SmallJoker)
  * Increase upper limit of display_gamma to 10 (ClobberXD)
  * Optimize and unify mesh processing (Vitaliy)
  * Re-order mapgens in mainmenu and 'all settings' mapgen selection (paramat)
  * Scrollbars: Move directly to clicked pos if clicked into tray (DS-Minetest)
  * Fix broken attachments on join (SmallJoker)
  * Fix inventory_overlay for nodes without inventory_image (DS-Minetest)
  * Better F6 profiler (SmallJoker)
  * Fix minimap markers (theviper121)
  * Textures: Load base pack only as last fallback (SmallJoker)
  * Add /help formspec for commands and privileges (SmallJoker)
  * Lua API: Add link to Minetest Modding Book (ClobberXD)
  * Force item entities out of solid nodes (sfan5, based on Wuzzy`s work)
  * Lua API: Various fixes (DS-Minetest, SmallJoker)
  * Rename "private messages" to "direct messages" (Calinou)
  * Automatically enable depending mods in the dialogue (HybridDog)
  * All settings: Fix missing flags checkboxes (srifqi)
  * Various network performance improvements (osjc)
  * Force send a mapblock to a player (sofar)
  * Revert ItemStacks being limited to the 'stack_size' value (ClobberXD)
  * Save forceloaded blocks file periodically (Thomas Rudin)
  * Improve ABM time budget handling (lhofhansl)
  * Group "immortal" also protects players from damage (Wuzzy)
  * Optimize usage of TOSERVER_GOTBLOCKS packet (sfan5)
  * Network: several bugfixes (sfan5)
  * Mapgen::spreadLight performance improvement (DS-Minetest)
  * Improve occlusion culling in corridors with additional check (sfan5)
  * Inventory: Delay dirty lists, and send changes incrementally (SmallJoker)
  * Other inventory bugfixes (sfan5, SmallJoker)
  * Move debug.txt after it grows too big (HybridDog)
  * Trigger on_place in many situations even if prediction failed (DS-Minetest)
  * Punchwear (improved) (sfan5)
  * Add deprecation warnings for ObjectRef:get/set_attribute (ClobberXD)
  * Nodedef 'drop' documentation: Improve (Paramat)
  * Mark tool filtering in node drop documentation as deprecated (Paramat)
  * Add node field to PlayerHPChangeReason table (pauloue)
  * Don't call on_hpchange callbacks if HP hasn't changed (ClobberXD)
  * Add disable_jump to liquids and ladders (SmallJoker)
  * Add support for 9-sliced backgrounds (rubenwardy)
  * Add compatible, consistent coordinate system to FormSpecs (v-rob)
  * Document ObjectRef:remove under Lua entity (ClobberXD)
  * Docs: Clarify where to check for 'protection_bypass' (SmallJoker)
  * Add vector.dot and vector.cross (HybridDog)
  * Improve documentation of mapgen aliases (Paramat)
  * Remove debug.upvaluejoin to prevent leak of insecure environment (fluxionary)
  * Fix previously crashing minetest.get_craft_result() (pauloue)
  * Allow toolcaps to override the built-in times for dig_immediate (sfan5)
  * Formspec styling using style[] (rubenwardy)
  * Customizable chat message format (ClobberXD)
  * Velocity modifiers for players (sfan5)
  * Fix some issues with minetest.clear_craft (pauloue)
  * Add function `minetest.read_schematic` (paly2)
  * Formspecs: formspec_version[] element (SmallJoker)
  * Per-player FOV overrides and multipliers (ClobberXD)
  * Find PostgreSQL correctly (adrido)
  * Add compatibility to vcpkg buildsystem (adrido)
  * Android: Use system provided path for default TMPFolder setting (stujones11)
  * Fix handling of --color and --worldlist command line arguments (mmattes)
  * Unified OpenGL ES support (sfan5)</changelog>
  <changelog author="Simon Puchert &lt;simonpuchert@alice.de&gt;" date="1574424000">- Explicitly require libXxf86vm-devel.</changelog>
  <changelog author="Maximilian Trummer &lt;opensuse@trummer.xyz&gt;" date="1579348800">- Update to version 5.1.1
  * See https://dev.minetest.net/Changelog#5.1.0_.E2.86.92_5.1.1
  * Fix player-bound sound playback (SmallJoker)
  * Fix item eat sound not played if last item (Wuzzy2)
  * Formspecs: Reset version number on rebuild (SmallJoker)
  * Rework packet receiving in ServerThread (sfan5)
  * Fix core.chat_format_message crashes (ClobberXD)
  * Fix spaces breaking formspec_version[] tag (rubenwardy)
  * Fix find_path for newer jsoncpp installations (vilhelmgray)
  * Update translations</changelog>
  <changelog author="Maximilian Trummer &lt;opensuse@trummer.xyz&gt;" date="1579348801">- build with spatialindex-devel, this speeds up AreaStores, see
  https://github.com/minetest/minetest#cmake-options</changelog>
  <changelog author="Maximilian Trummer &lt;opensuse@trummer.xyz&gt;" date="1586174400">- Update to version 5.2.0
- See https://dev.minetest.net/Changelog#5.1.0_.E2.86.92_5.2.0
- Client / Audiovisuals:
  * Fix alpha blending in texture modifiers (Warr1024)
  * Make natural night light as bright as MT 0.4.16 (paramat)
  * Shader fixes (lhofhansl, SmallJoker)
  * Clean up font caching, fix bitmap fonts (SmallJoker)
  * Waves generated with Perlin-type noise #8994 (lhofhansl)
  * Attachments: Fix glitches after detach (SmallJoker)
  * Let node 'place' and 'dug' sounds be heard
    by other players (sfan5)
  * Fix weird looking liquid source (Wuzzy2)
  * Basic model shading (dcbrwn)
  * Improve arm inertia animations (kilbith)
- GUI improvements:
  * Add visual feedback for button states (Df458)
  * Formspec: draw order and clipping for all elements (DS)
  * Refactor internal button styling/rendering code (Df458')
  * Formspec: Fix clicking on tooltip-obstructed elements (DS)
  * Formspec: change cursor on fields and co. (DS)
  * Various new formspec bug fixes (SmallJoker)
  * Formspec: Add 9-slice background support
    to button elements (Df458)
  * Formspec: add hypertext[] element (pyrollo)
  * Formspec: animated_image[] (Df458, kilbith)
  * Make clipping of formspec elements more consistent (Df458)
  * Remove outdated field_close_on_enter[] warnings
    in element parameters (SmallJoker)
  * Fix mouse events sent to wrong GUI elements
    when dragging (sfan5)
  * Restore intuitive click-through behaviour (DS)
- Enhancements:
  * Wear out tools on punch (sfan5)
  * Tunnels: Completely disable generation
    when 'cave width' &gt;= 10.0 (paramat)
  * Randomwalk cave liquids:
    Remove deprecated 'lava depth' (paramat)
  * Automatically enable the mod's dependencies
    in the world config menu (HybridDog)
  * Clean up craft replacements docs (pauloue)
  * Falling nodes: add missing support for light sources,
    most drawtypes, and paramtype2s (Wuzzy2)
  * Remove legacy flat-file map code
    and documentation (random-geek)
  * Fix packet receiving in server and client (sfan5)
  * Key settings: Cancel with escape,
    clear with delete (SmallJoker)
- Script API / Modding:
  * CSM: Introduce get_modpath() (sfan5)
  * CSM: Remove non-functional minetest.get_day_count() (sfan5)
  * Add z-index management to HUD (pyrollo)
  * Add table.key_value_swap and table.shuffle (HybridDog)
  * Map download:
    Escape ':' to '_' (NTFS/FAT* systems) (Montandalar)
  * Settings: Add get_flags API for mapgen flags (SmallJoker)
  * Improve minetest.sound_play with ephemeral sounds
    and player exclusion (sfan5)
  * Reworked validity checks for entities (sfan5)
  * Documentation: Add advice on lifetime of ObjectRefs (sfan5)
  * Allow texture modifiers in hotbar textures (Warr1024)
  * Nodes with torchlike drawtype and custom visual_scale now are
    rendered attached to surface instead of being centered (Wuzzy2)
  * Add documentation of VoxelArea 'ystride', 'zstride' (paramat)
  * Lua API: Document HP, breath and damage limits (SmallJoker)
  * Various documentation improvements (Wuzzy2)
  * CSM: Corrections to client_lua_api.txt (sfan5)
  * Make minetest.item_place_node return position
    of placed node (Bluebird)
  * Call on_secondary_use when object is right-clicked (sfan5)
  * CSM: Various fixes (sfan5)
  * Many pathfinder bugfixes and improvements (Wuzzy2)
    + Fix failure to find path
    if start or end pos is over air (Wuzzy2)
    + Fix very broken implementation of A* search (Wuzzy2)
    + No longer jump through solid nodes (Wuzzy2)
    + Return nil if start or end pos is solid (Wuzzy2)
  * New set_sky, set_sun, set_moon and set_stars (Jordach)
  * Secure and document minetest.deserialize() (luk3yx)
  * minetest.get_content_id: throw error
    for unknown nodes (HybridDog)
- Misc / Build:
  * Don't install fonts on ENABLE_CLIENT=0 configurations (sfan5)
  * Fix memleaks in formspecs (SmallJoker)
  * Run luacheck in travis, add luacheck (rubenwardy)
  * Various build issue fixes (Clang, Travis CI) (sfan5)</changelog>
  <changelog author="Mia Herkt &lt;mia@0x0.st&gt;" date="1592827200">- spec-cleaner
- Make sure the package does not build with bundled libraries
- Add minetest-fix-luajit-include-path.patch
  Fixes the FindLuaJIT CMake module so it also looks for the
  moonjit include path</changelog>
  <changelog author="andy great &lt;andythe_great@pm.me&gt;" date="1594641600">- Update to version 5.3.0.
  (see https://dev.minetest.net/Changelog#5.2.0_.E2.86.92_5.3.0)
  * Formspec improvements, including a scrolling GUI element
  * Performance improvements to the Server and API
  * Many bug fixes and small features
- Now requires desktop-file-utils version &gt;= 0.25.</changelog>
  <changelog author="Dirk Stoecker &lt;opensuse@dstoecker.de&gt;" date="1599566400">- added patch to build .desktop file without 'PrefersNonDefaultGPU'
  option on Leap 15.2 and below (old-desktopfile-standard.patch)
- removed conditional build for very old openSUSE/SLES versions
- add minetest-runtime provides</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1614168000">- Fixed build on current Factory (checking symlinks)
- Update to version 5.4.0
  * Full log: https://dev.minetest.net/Changelog#5.3.0_.E2.86.92_5.4.0
  * Removed support for bumpmapping, generated normal maps
    and parallax occlusion
  * By default, the crosshair will now change to an "X" when
    pointing to objects
  * Prevent players accessing inventories of other players
  * Prevent interacting with items out of the hotbar
  * Prevent players from being able to modify ItemStack meta</changelog>
  <changelog author="Maximilian Trummer &lt;opensuse@trummer.xyz&gt;" date="1618833600">- Update to version 5.4.1:
  * This is a maintenance release based on 5.4.0,
    it contains bugfixes but no new features.
  * Apply 'old-desktopfile-standard.patch' to Leap 15.3 as well.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1622548800">- Add GCC 11 compatibility patch:
  * 0001-Fix-build-for-newer-versions-of-GCC-11246.patch</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633521600">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * minetest@.service</changelog>
  <changelog author="Simon Vogl &lt;simon.vogl@gmx.net&gt;" date="1659182400">- Drop 0001-Fix-build-for-newer-versions-of-GCC-11246.patch as it is merged upstream
- Only apply minetest-fix-luajit-include-path.patch on openSUSE Leap as TW versions do not require it any more.
- Switch to from system irrlicht to IrrlichtMt library version 1.9.0mt5
- Don't purge the bundled bitop library
- Add new libzstd build dependency
- Update to version 5.5.0 &amp; 5.5.1:
  * Full log for version 5.5.0: https://dev.minetest.net/Changelog#5.4.0_.E2.86.92_5.5.0
  * This release switches from Irrlicht to our own fork called IrrlichtMt.
  * Full log for version 5.5.1: https://dev.minetest.net/Changelog#5.5.0_.E2.86.92_5.5.1
  * This is a maintenance release based on 5.5.0, it contains bugfixes but no new features.</changelog>
  <changelog author="Dmitriy Perlow &lt;dap.darkness@gmail.com&gt;" date="1660564800">- Introduced mbranch-protection=none CXX flag to resolve bnc#1193141
  (aarch64).</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1660824000">- Update to version 5.6.0
  * Fix CVE-2022-35978 ( boo#1202423 ): Mod scripts can escape
    sandbox in single player mode
  * `name` in game.conf is deprecated for the game title, use `title` instead
  * Add depth sorting for node faces
  * Various bug fixes
  * Full changes: https://dev.minetest.net/Changelog#5.5.0_.E2.86.92_5.6.0</changelog>
</package>
<package pkgid="09484edffc42580036cfa4314b03ff042cc66650b6ee1291798b1376a7fe8e7f" name="minetest-game" arch="noarch">
  <version epoch="0" ver="5.6.0" rel="bp154.2.3.1"/>
  <changelog author="rpm@fthiessen.de" date="1448452800">- Update to 0.4.13</changelog>
  <changelog author="rpm@fthiessen.de" date="1463400000">- Update to 0.4.14</changelog>
  <changelog author="jengelh@inai.de" date="1469620800">- Update License field</changelog>
  <changelog author="mailaender@opensuse.org" date="1482753600">- Update to version 0.4.15</changelog>
  <changelog author="rpm@fthiessen.de" date="1484049600">- Added minetest-game-rpmlintrc to fix build on openSUSE 13.1</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1496664000">- Update to version 0.4.16:
  * See http://dev.minetest.net/Changelog#0.4.15_.E2.86.92_0.4.16</changelog>
  <changelog author="opensuse@trummer.xyz" date="1516622400">- Don't require minetest, to make headless installation possible</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1533643200">- Update to version 0.4.17:
  * Fix boo#1103904
  * See https://dev.minetest.net/Changelog#0.4.16_.E2.86.92_0.4.17
- Add the licence file to the package.</changelog>
  <changelog author="Maximilian Trummer &lt;opensuse@trummer.xyz&gt;" date="1553428800">- Update to version 5.0.0
  * See https://dev.minetest.net/Changelog#0.4.16_.E2.86.92_5.0.0</changelog>
  <changelog author="Maximilian Trummer &lt;opensuse@trummer.xyz&gt;" date="1554206400">- Update to version 5.0.1
  * See https://dev.minetest.net/Changelog#5.0.0_.E2.86.92_5.0.1</changelog>
  <changelog author="Maximilian Trummer &lt;opensuse@trummer.xyz&gt;" date="1570968000">- Update to version 5.1.0
  * See https://dev.minetest.net/Changelog#5.0.0_.E2.86.92_5.0.1
  * Added dry dirt and dry dirt with dry grass. Grass never spreads on dry dirt
  * Savannas now have dry dirt and dry dirt with dry grass
  * Added steel bar door and steel bar trap door
  * Added setting ?enable_fence_tall? for fences that cannot be jumped over (mbartlett21)
  * Firefly in a bottle can now be placed into vessels shelf
  * Add flowing water sound
  * Underground biomes extend much deeper, down to Y=-255
  * Make the creative mod hand dig 'dig_immediate' nodes fast (paramat)
  * Add new TNT sounds (TumeniNodes)
  * Add missing infotext to nodes (An0n3m0us)
  * Added translation support
  * Added German, French, Spanish and Italian translations (Wuzzy, Hamlet, JDiaz, DrHackberry)</changelog>
  <changelog author="Maximilian Trummer &lt;opensuse@trummer.xyz&gt;" date="1579348800">- Update to version 5.1.1
  * See https://dev.minetest.net/Changelog#5.1.0_.E2.86.92_5.1.1
  * no changes, this is only a version bump to keep the
    package version in sync with minetest</changelog>
  <changelog author="Maximilian Trummer &lt;opensuse@trummer.xyz&gt;" date="1586174400">- Update to version 5.2.0
  * Simple weather that varies the clouds (paramat)
  * More realistic boat physics (gang65)
  * Creative Inventory search:
    Item with exact match appears in first spot (sfan5)
  * Creative Inventory: More visual tweaks (Andrey2470T)
  * Improve player model animation (An0n3m0us)
  * Increase water opacity (lhofhansl)
  * Reset spawn position when bed is destroyed (Desour)
  * Papyrus now appears in rainforest swamps as well (paramat)
  * New/updated translations:
    + French (DrHackberrry)
    + Spanish (runsy)
    + Italian (h4ml3t)
    + Russian (Andrey2470T)
    + Swedish (Aresiel)
    + Malay (MuhdNurHidayat)
    + Chinese (zaoqi, IFRFSX)
  * Bugfix: TNT mod crashed when entities disappeared
    during explosion (sfan5)
  * Bugfix: Papyrus in savanna did not appear in 5.1.0,
    it has been added back (paramat)
  * Bugfix: Screwdriver was able to rotate torches
    into weird positions (An0n3m0us)
  * Bugfix: Players could be knocked back when attached (sfan5)</changelog>
  <changelog author="Martin Rey &lt;mrey@suse.com&gt;" date="1596024000">- Update to version 5.3.0
  * Rename ?Dry Dirt? and related blocks to ?Savanna Dirt? and
    similar (paramat)
  * Added Wild Cotton: grows in savannas, drops Cotton Seeds
    (paramat)
  * Sort items into correct categories (An0n3m0us)
  * Tune cloud density variation (paramat)
  * Fix broken Creative inventory search in translation (sfan5)
  * Make Straw Stairs/Slabs usable as fuel (Paul Ouellette)
  * New textures: Dry Shrub, Brake Rail (Extex101, Hooded Ice)
  * Block particles when leaves decay, TNT explodes (sfan5)
- Use spec-cleaner on spec file</changelog>
  <changelog author="Dirk Stoecker &lt;opensuse@dstoecker.de&gt;" date="1599566400">- require minetest-runtime</changelog>
  <changelog author="Maximilian Trummer &lt;opensuse@trummer.xyz&gt;" date="1599566401">- Changed requirement for minetest-runtime to greater or equal,
  since running the game in a higher engine version works as well.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1614168000">- Dropped rpmlintrc
- Update to 5.4.0:
  * Add crafting guide
  * Added 5 wood variants of Mese Post Light
  * Add environment sounds for lava and active furnace
  * Change several block sounds
  * Fix players sleeping in an occupied bed
  * Fix 'sleepwalking' in bed
  * Fix sleeping player flying off the bed when damaged and flying
    far away from the bed after death
  * Fix sleeping player being immobilized and bed undiggable after
    death
  * Fix furnace infotext not always updating when removing item
  * New translation: Slovak, Brazilian Portuguese and
    Lojban (admittedly not a very good translation)
  * Update existing translations</changelog>
  <changelog author="Maximilian Trummer &lt;opensuse@trummer.xyz&gt;" date="1618833600">- Update to version 5.4.1:
  * This is a maintenance release based on 5.4.0,
    it contains bugfixes but no new features.</changelog>
  <changelog author="Simon Vogl &lt;simon.vogl@gmx.net&gt;" date="1659182400">- Update to version 5.5.0 &amp; 5.5.1:
  * Add ?Read? and ?Write? tabs to book interface when you own the book (orbea)
  * Allow to write books without text or title (orbea)
  * Make identical keys stackable (Luis Royer)
  * Fix creative inventory trash slot not working for player named ?trash? (Montandalar)
  * Fix sunlight propagation for glass stair/slab (An0n3m0us)
  * Fix glass bottle with firefly not being placable in vessels shelf (An0n3m0us)
  * Other bugfixes
  * Translations: Esperanto (Jason Cartwright), Russian (ptah-alexs), Japanese (nogajun), German (Wuzzy), Slovak (Daretmavi), French (Olivier Dragon), Swedish (ROllerozxa), Chinese (???), Ukrainian (baytuch)
  * player_api mod: Fix crash if player has no model (appgurueu)
  * player_api mod: Mods can now override globalstep by overriding player_api.globalstep (LoneWolfHT)
  * Shadow intensity (of dynamic shadows) changes with weather (lhofhansl)
  * Some cart movement behavior fixes (SmallJoker)
  * Fix some translations in uk and ru locales (baytuch)</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1660824000">- Update to version 5.6.0 to match up minetest version
  * Improved cart movement behavior
  * Dynamic shadow intensity increases with cloud density
  * Allow mods to override player animation globalstep
  * Log API added
  * New translation: Polish
  * Translation updates: Ukrainian, Russian, German, Lojban, and Esperanto
  * Various bug fixes</changelog>
</package>
<package pkgid="45d5765b6d7f4e830a517e22bf5b03c7d242efc1309b188a80ccfc66653e0725" name="minetest-game" arch="src">
  <version epoch="0" ver="5.6.0" rel="bp154.2.3.1"/>
  <changelog author="rpm@fthiessen.de" date="1448452800">- Update to 0.4.13</changelog>
  <changelog author="rpm@fthiessen.de" date="1463400000">- Update to 0.4.14</changelog>
  <changelog author="jengelh@inai.de" date="1469620800">- Update License field</changelog>
  <changelog author="mailaender@opensuse.org" date="1482753600">- Update to version 0.4.15</changelog>
  <changelog author="rpm@fthiessen.de" date="1484049600">- Added minetest-game-rpmlintrc to fix build on openSUSE 13.1</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1496664000">- Update to version 0.4.16:
  * See http://dev.minetest.net/Changelog#0.4.15_.E2.86.92_0.4.16</changelog>
  <changelog author="opensuse@trummer.xyz" date="1516622400">- Don't require minetest, to make headless installation possible</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1533643200">- Update to version 0.4.17:
  * Fix boo#1103904
  * See https://dev.minetest.net/Changelog#0.4.16_.E2.86.92_0.4.17
- Add the licence file to the package.</changelog>
  <changelog author="Maximilian Trummer &lt;opensuse@trummer.xyz&gt;" date="1553428800">- Update to version 5.0.0
  * See https://dev.minetest.net/Changelog#0.4.16_.E2.86.92_5.0.0</changelog>
  <changelog author="Maximilian Trummer &lt;opensuse@trummer.xyz&gt;" date="1554206400">- Update to version 5.0.1
  * See https://dev.minetest.net/Changelog#5.0.0_.E2.86.92_5.0.1</changelog>
  <changelog author="Maximilian Trummer &lt;opensuse@trummer.xyz&gt;" date="1570968000">- Update to version 5.1.0
  * See https://dev.minetest.net/Changelog#5.0.0_.E2.86.92_5.0.1
  * Added dry dirt and dry dirt with dry grass. Grass never spreads on dry dirt
  * Savannas now have dry dirt and dry dirt with dry grass
  * Added steel bar door and steel bar trap door
  * Added setting ?enable_fence_tall? for fences that cannot be jumped over (mbartlett21)
  * Firefly in a bottle can now be placed into vessels shelf
  * Add flowing water sound
  * Underground biomes extend much deeper, down to Y=-255
  * Make the creative mod hand dig 'dig_immediate' nodes fast (paramat)
  * Add new TNT sounds (TumeniNodes)
  * Add missing infotext to nodes (An0n3m0us)
  * Added translation support
  * Added German, French, Spanish and Italian translations (Wuzzy, Hamlet, JDiaz, DrHackberry)</changelog>
  <changelog author="Maximilian Trummer &lt;opensuse@trummer.xyz&gt;" date="1579348800">- Update to version 5.1.1
  * See https://dev.minetest.net/Changelog#5.1.0_.E2.86.92_5.1.1
  * no changes, this is only a version bump to keep the
    package version in sync with minetest</changelog>
  <changelog author="Maximilian Trummer &lt;opensuse@trummer.xyz&gt;" date="1586174400">- Update to version 5.2.0
  * Simple weather that varies the clouds (paramat)
  * More realistic boat physics (gang65)
  * Creative Inventory search:
    Item with exact match appears in first spot (sfan5)
  * Creative Inventory: More visual tweaks (Andrey2470T)
  * Improve player model animation (An0n3m0us)
  * Increase water opacity (lhofhansl)
  * Reset spawn position when bed is destroyed (Desour)
  * Papyrus now appears in rainforest swamps as well (paramat)
  * New/updated translations:
    + French (DrHackberrry)
    + Spanish (runsy)
    + Italian (h4ml3t)
    + Russian (Andrey2470T)
    + Swedish (Aresiel)
    + Malay (MuhdNurHidayat)
    + Chinese (zaoqi, IFRFSX)
  * Bugfix: TNT mod crashed when entities disappeared
    during explosion (sfan5)
  * Bugfix: Papyrus in savanna did not appear in 5.1.0,
    it has been added back (paramat)
  * Bugfix: Screwdriver was able to rotate torches
    into weird positions (An0n3m0us)
  * Bugfix: Players could be knocked back when attached (sfan5)</changelog>
  <changelog author="Martin Rey &lt;mrey@suse.com&gt;" date="1596024000">- Update to version 5.3.0
  * Rename ?Dry Dirt? and related blocks to ?Savanna Dirt? and
    similar (paramat)
  * Added Wild Cotton: grows in savannas, drops Cotton Seeds
    (paramat)
  * Sort items into correct categories (An0n3m0us)
  * Tune cloud density variation (paramat)
  * Fix broken Creative inventory search in translation (sfan5)
  * Make Straw Stairs/Slabs usable as fuel (Paul Ouellette)
  * New textures: Dry Shrub, Brake Rail (Extex101, Hooded Ice)
  * Block particles when leaves decay, TNT explodes (sfan5)
- Use spec-cleaner on spec file</changelog>
  <changelog author="Dirk Stoecker &lt;opensuse@dstoecker.de&gt;" date="1599566400">- require minetest-runtime</changelog>
  <changelog author="Maximilian Trummer &lt;opensuse@trummer.xyz&gt;" date="1599566401">- Changed requirement for minetest-runtime to greater or equal,
  since running the game in a higher engine version works as well.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1614168000">- Dropped rpmlintrc
- Update to 5.4.0:
  * Add crafting guide
  * Added 5 wood variants of Mese Post Light
  * Add environment sounds for lava and active furnace
  * Change several block sounds
  * Fix players sleeping in an occupied bed
  * Fix 'sleepwalking' in bed
  * Fix sleeping player flying off the bed when damaged and flying
    far away from the bed after death
  * Fix sleeping player being immobilized and bed undiggable after
    death
  * Fix furnace infotext not always updating when removing item
  * New translation: Slovak, Brazilian Portuguese and
    Lojban (admittedly not a very good translation)
  * Update existing translations</changelog>
  <changelog author="Maximilian Trummer &lt;opensuse@trummer.xyz&gt;" date="1618833600">- Update to version 5.4.1:
  * This is a maintenance release based on 5.4.0,
    it contains bugfixes but no new features.</changelog>
  <changelog author="Simon Vogl &lt;simon.vogl@gmx.net&gt;" date="1659182400">- Update to version 5.5.0 &amp; 5.5.1:
  * Add ?Read? and ?Write? tabs to book interface when you own the book (orbea)
  * Allow to write books without text or title (orbea)
  * Make identical keys stackable (Luis Royer)
  * Fix creative inventory trash slot not working for player named ?trash? (Montandalar)
  * Fix sunlight propagation for glass stair/slab (An0n3m0us)
  * Fix glass bottle with firefly not being placable in vessels shelf (An0n3m0us)
  * Other bugfixes
  * Translations: Esperanto (Jason Cartwright), Russian (ptah-alexs), Japanese (nogajun), German (Wuzzy), Slovak (Daretmavi), French (Olivier Dragon), Swedish (ROllerozxa), Chinese (???), Ukrainian (baytuch)
  * player_api mod: Fix crash if player has no model (appgurueu)
  * player_api mod: Mods can now override globalstep by overriding player_api.globalstep (LoneWolfHT)
  * Shadow intensity (of dynamic shadows) changes with weather (lhofhansl)
  * Some cart movement behavior fixes (SmallJoker)
  * Fix some translations in uk and ru locales (baytuch)</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1660824000">- Update to version 5.6.0 to match up minetest version
  * Improved cart movement behavior
  * Dynamic shadow intensity increases with cloud density
  * Allow mods to override player animation globalstep
  * Log API added
  * New translation: Polish
  * Translation updates: Ukrainian, Russian, German, Lojban, and Esperanto
  * Various bug fixes</changelog>
</package>
<package pkgid="20b0e1f0a2cfac0d4444df7f6c355c1de2a661aba1f5e0c1372941eb8886a0aa" name="minetest-lang" arch="noarch">
  <version epoch="0" ver="5.6.0" rel="bp154.2.3.5"/>
  <changelog author="werner@suse.de" date="1520596800">- Use latest libpng</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1533643200">- Update to version 0.4.17.1:
  * Fix boo#1103904
  * Fix crash caused by log_deprecated
    and the use of deprecated functions
  * Fix crash on pause menu when pressing up/down keys
- Remove use-pkg-config-to-find-luajit.patch: fixed upstream.
- Update to version 0.4.17:
  * Dungeons: Mostly fix missing stair nodes
  * Cavegen: Fix variable typo that broke mgvalleys large cave
    distribution
  * Prevent translating empty strings
  * upright_sprite: Fix texture position for players
  * core.rotate_node: Do not trigger after_place_node for mod
    compatibility
  * Generate Notifier: Clear events once after all
    'on generated' functions
  * Fix liquid post effect colour behaviour in third person view
  * Delete world dialog: Move buttons to avoid
    double click deletion
  * Fix /shutdown countdown parameter
  * Check argument types inside MetaDataRef Lua API
  * dropped items and falling nodes: Delete in 'ignore' nodes
  * Fix off-by-one in log output line length
  * Fix buffer parameter not working in getMapSlice()
  * Fix rounding error in g/set_node caused by truncation to float
  * Fix dancing text in text input fields
  * Fix undefined behaviour on getting pointer to data in
    empty vector
  * Fix wrong scrolling in text areas
  * Damage: Remove damage ignore timer due to abuse potential
  * Ensure no item stack is being held before crafting
  * Several documentation additions, improvements
  * core.rotate_node: Run callbacks like with any
    regular placed node
  * Biome dust node: Only place on 'walkable' cubic
    non-liquid drawtypes
  * Fix issue Minetest crash when custom font path is not exist
  * Fix Settings tab formspec alignment
  * Do not scale texture unless necessary
  * Fix day_night_ratio_do_override not being initialised
    server-side
  * Fix default item callbacks to work with nil users
  * Prevent from crafting non-existent, unknown items
  * Profiler: Fix var args not being passed to
    callback register function
  * Fix attached particle spawners far from spawn
  * Localplayer: Fix disable_jump effect and standing node position
  * Fix blocks written by vmanip not being marked as modified
  * Fix Rotate Node Placement
  * ServerEnv: Clean up object lifecycle handling
  * Fix the core.wrap_text function
  * Fix empty legacy meta being persisted
  * Statbars: fix incorrect half-images in non-standard
    orientations
  * serialize: use a temporary for SerializeException
  * Fix player coordinate rounding in collisionMoveSimple()
  * Fix for empty key/value when reading item string with
    wear but no metadata
  * Fix render order of overlays
  * Fix console resize issue when maximising game window
  * Fix console not being properly resized after
    window size changed
  * Verify HudSetParams input when hotbar textures are set
  * (Re)spawn players within 'mapgen_limit'
  * Fix sending color codes to clients that don't support them</changelog>
  <changelog author="mvetter@suse.com" date="1551787200">- Update to 5.0.0
  * 5.0.0 is a breaking release and not compatible to the 0.4 series.
  * See changes: https://dev.minetest.net/Changelog#0.4.16_.E2.86.92_5.0.0
- Remove shared_mods.patch: global mods possible by default now.
  See builtin/mainmenu/pkgmgr.lua
- bsc#1127911: is tracking whitelisting of `minetest` user/group
  in rpmlint</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1554120000">- bsc#1131077: BuildRequire postgresql-server-devel as a workaround
  for CMake which explicitly looks for server headers even if just
  building a client application.
  CAUTION: This workaround should not blindly be copied to other
  packages that fail to build with PostgreSQL 11. It is always
  preferrable to convert the package to use pkg-config for linking
  against libpq instead of pulling in postgresql-server-devel
  to have pg_config. If in doubt, please talk to max@suse.com
  before applying such a workaround.</changelog>
  <changelog author="mvetter@suse.com" date="1554206400">- Update to 5.0.1:
  * Fix detached inventory serialisation
  * Fix texture rotation for wallmounted nodeboxes
  * Fix build failing on some compilers
  * Warn about issues with the num_emerge_threads setting
  * HPChange Reason: Fix issues with custom reasons
  * Fix FreeBSD build by handling std::time_t properly
  * Confirm registration GUI: Remove positional strings to fix Windows bug
  * Prevent multi-line chat messages server-side
  * httpfetch: Disable IPv6 here too if requested by settings</changelog>
  <changelog author="Maximilian Trummer &lt;opensuse@trummer.xyz&gt;" date="1570968000">- Update to 5.1.0:
  * Mapgen Carpathian: Add optional rivers (paramat)
  * Move more dungeon parameter selection to mapgens (paramat)
  * Dungeons: Make multiple large rooms possible (paramat)
  * Change pitch fly binding to 'P', add to change keys menu (rubenwardy)
  * Android settings: Use 'simple' leaves instead of 'fancy' (paramat)
  * Fix 3rd person selection range (srifqi)
  * Make scrollbars' bar variable in size (stujones11)
  * Damage: Play no damage sound when immortal (SmallJoker)
  * Increase upper limit of display_gamma to 10 (ClobberXD)
  * Optimize and unify mesh processing (Vitaliy)
  * Re-order mapgens in mainmenu and 'all settings' mapgen selection (paramat)
  * Scrollbars: Move directly to clicked pos if clicked into tray (DS-Minetest)
  * Fix broken attachments on join (SmallJoker)
  * Fix inventory_overlay for nodes without inventory_image (DS-Minetest)
  * Better F6 profiler (SmallJoker)
  * Fix minimap markers (theviper121)
  * Textures: Load base pack only as last fallback (SmallJoker)
  * Add /help formspec for commands and privileges (SmallJoker)
  * Lua API: Add link to Minetest Modding Book (ClobberXD)
  * Force item entities out of solid nodes (sfan5, based on Wuzzy`s work)
  * Lua API: Various fixes (DS-Minetest, SmallJoker)
  * Rename "private messages" to "direct messages" (Calinou)
  * Automatically enable depending mods in the dialogue (HybridDog)
  * All settings: Fix missing flags checkboxes (srifqi)
  * Various network performance improvements (osjc)
  * Force send a mapblock to a player (sofar)
  * Revert ItemStacks being limited to the 'stack_size' value (ClobberXD)
  * Save forceloaded blocks file periodically (Thomas Rudin)
  * Improve ABM time budget handling (lhofhansl)
  * Group "immortal" also protects players from damage (Wuzzy)
  * Optimize usage of TOSERVER_GOTBLOCKS packet (sfan5)
  * Network: several bugfixes (sfan5)
  * Mapgen::spreadLight performance improvement (DS-Minetest)
  * Improve occlusion culling in corridors with additional check (sfan5)
  * Inventory: Delay dirty lists, and send changes incrementally (SmallJoker)
  * Other inventory bugfixes (sfan5, SmallJoker)
  * Move debug.txt after it grows too big (HybridDog)
  * Trigger on_place in many situations even if prediction failed (DS-Minetest)
  * Punchwear (improved) (sfan5)
  * Add deprecation warnings for ObjectRef:get/set_attribute (ClobberXD)
  * Nodedef 'drop' documentation: Improve (Paramat)
  * Mark tool filtering in node drop documentation as deprecated (Paramat)
  * Add node field to PlayerHPChangeReason table (pauloue)
  * Don't call on_hpchange callbacks if HP hasn't changed (ClobberXD)
  * Add disable_jump to liquids and ladders (SmallJoker)
  * Add support for 9-sliced backgrounds (rubenwardy)
  * Add compatible, consistent coordinate system to FormSpecs (v-rob)
  * Document ObjectRef:remove under Lua entity (ClobberXD)
  * Docs: Clarify where to check for 'protection_bypass' (SmallJoker)
  * Add vector.dot and vector.cross (HybridDog)
  * Improve documentation of mapgen aliases (Paramat)
  * Remove debug.upvaluejoin to prevent leak of insecure environment (fluxionary)
  * Fix previously crashing minetest.get_craft_result() (pauloue)
  * Allow toolcaps to override the built-in times for dig_immediate (sfan5)
  * Formspec styling using style[] (rubenwardy)
  * Customizable chat message format (ClobberXD)
  * Velocity modifiers for players (sfan5)
  * Fix some issues with minetest.clear_craft (pauloue)
  * Add function `minetest.read_schematic` (paly2)
  * Formspecs: formspec_version[] element (SmallJoker)
  * Per-player FOV overrides and multipliers (ClobberXD)
  * Find PostgreSQL correctly (adrido)
  * Add compatibility to vcpkg buildsystem (adrido)
  * Android: Use system provided path for default TMPFolder setting (stujones11)
  * Fix handling of --color and --worldlist command line arguments (mmattes)
  * Unified OpenGL ES support (sfan5)</changelog>
  <changelog author="Simon Puchert &lt;simonpuchert@alice.de&gt;" date="1574424000">- Explicitly require libXxf86vm-devel.</changelog>
  <changelog author="Maximilian Trummer &lt;opensuse@trummer.xyz&gt;" date="1579348800">- Update to version 5.1.1
  * See https://dev.minetest.net/Changelog#5.1.0_.E2.86.92_5.1.1
  * Fix player-bound sound playback (SmallJoker)
  * Fix item eat sound not played if last item (Wuzzy2)
  * Formspecs: Reset version number on rebuild (SmallJoker)
  * Rework packet receiving in ServerThread (sfan5)
  * Fix core.chat_format_message crashes (ClobberXD)
  * Fix spaces breaking formspec_version[] tag (rubenwardy)
  * Fix find_path for newer jsoncpp installations (vilhelmgray)
  * Update translations</changelog>
  <changelog author="Maximilian Trummer &lt;opensuse@trummer.xyz&gt;" date="1579348801">- build with spatialindex-devel, this speeds up AreaStores, see
  https://github.com/minetest/minetest#cmake-options</changelog>
  <changelog author="Maximilian Trummer &lt;opensuse@trummer.xyz&gt;" date="1586174400">- Update to version 5.2.0
- See https://dev.minetest.net/Changelog#5.1.0_.E2.86.92_5.2.0
- Client / Audiovisuals:
  * Fix alpha blending in texture modifiers (Warr1024)
  * Make natural night light as bright as MT 0.4.16 (paramat)
  * Shader fixes (lhofhansl, SmallJoker)
  * Clean up font caching, fix bitmap fonts (SmallJoker)
  * Waves generated with Perlin-type noise #8994 (lhofhansl)
  * Attachments: Fix glitches after detach (SmallJoker)
  * Let node 'place' and 'dug' sounds be heard
    by other players (sfan5)
  * Fix weird looking liquid source (Wuzzy2)
  * Basic model shading (dcbrwn)
  * Improve arm inertia animations (kilbith)
- GUI improvements:
  * Add visual feedback for button states (Df458)
  * Formspec: draw order and clipping for all elements (DS)
  * Refactor internal button styling/rendering code (Df458')
  * Formspec: Fix clicking on tooltip-obstructed elements (DS)
  * Formspec: change cursor on fields and co. (DS)
  * Various new formspec bug fixes (SmallJoker)
  * Formspec: Add 9-slice background support
    to button elements (Df458)
  * Formspec: add hypertext[] element (pyrollo)
  * Formspec: animated_image[] (Df458, kilbith)
  * Make clipping of formspec elements more consistent (Df458)
  * Remove outdated field_close_on_enter[] warnings
    in element parameters (SmallJoker)
  * Fix mouse events sent to wrong GUI elements
    when dragging (sfan5)
  * Restore intuitive click-through behaviour (DS)
- Enhancements:
  * Wear out tools on punch (sfan5)
  * Tunnels: Completely disable generation
    when 'cave width' &gt;= 10.0 (paramat)
  * Randomwalk cave liquids:
    Remove deprecated 'lava depth' (paramat)
  * Automatically enable the mod's dependencies
    in the world config menu (HybridDog)
  * Clean up craft replacements docs (pauloue)
  * Falling nodes: add missing support for light sources,
    most drawtypes, and paramtype2s (Wuzzy2)
  * Remove legacy flat-file map code
    and documentation (random-geek)
  * Fix packet receiving in server and client (sfan5)
  * Key settings: Cancel with escape,
    clear with delete (SmallJoker)
- Script API / Modding:
  * CSM: Introduce get_modpath() (sfan5)
  * CSM: Remove non-functional minetest.get_day_count() (sfan5)
  * Add z-index management to HUD (pyrollo)
  * Add table.key_value_swap and table.shuffle (HybridDog)
  * Map download:
    Escape ':' to '_' (NTFS/FAT* systems) (Montandalar)
  * Settings: Add get_flags API for mapgen flags (SmallJoker)
  * Improve minetest.sound_play with ephemeral sounds
    and player exclusion (sfan5)
  * Reworked validity checks for entities (sfan5)
  * Documentation: Add advice on lifetime of ObjectRefs (sfan5)
  * Allow texture modifiers in hotbar textures (Warr1024)
  * Nodes with torchlike drawtype and custom visual_scale now are
    rendered attached to surface instead of being centered (Wuzzy2)
  * Add documentation of VoxelArea 'ystride', 'zstride' (paramat)
  * Lua API: Document HP, breath and damage limits (SmallJoker)
  * Various documentation improvements (Wuzzy2)
  * CSM: Corrections to client_lua_api.txt (sfan5)
  * Make minetest.item_place_node return position
    of placed node (Bluebird)
  * Call on_secondary_use when object is right-clicked (sfan5)
  * CSM: Various fixes (sfan5)
  * Many pathfinder bugfixes and improvements (Wuzzy2)
    + Fix failure to find path
    if start or end pos is over air (Wuzzy2)
    + Fix very broken implementation of A* search (Wuzzy2)
    + No longer jump through solid nodes (Wuzzy2)
    + Return nil if start or end pos is solid (Wuzzy2)
  * New set_sky, set_sun, set_moon and set_stars (Jordach)
  * Secure and document minetest.deserialize() (luk3yx)
  * minetest.get_content_id: throw error
    for unknown nodes (HybridDog)
- Misc / Build:
  * Don't install fonts on ENABLE_CLIENT=0 configurations (sfan5)
  * Fix memleaks in formspecs (SmallJoker)
  * Run luacheck in travis, add luacheck (rubenwardy)
  * Various build issue fixes (Clang, Travis CI) (sfan5)</changelog>
  <changelog author="Mia Herkt &lt;mia@0x0.st&gt;" date="1592827200">- spec-cleaner
- Make sure the package does not build with bundled libraries
- Add minetest-fix-luajit-include-path.patch
  Fixes the FindLuaJIT CMake module so it also looks for the
  moonjit include path</changelog>
  <changelog author="andy great &lt;andythe_great@pm.me&gt;" date="1594641600">- Update to version 5.3.0.
  (see https://dev.minetest.net/Changelog#5.2.0_.E2.86.92_5.3.0)
  * Formspec improvements, including a scrolling GUI element
  * Performance improvements to the Server and API
  * Many bug fixes and small features
- Now requires desktop-file-utils version &gt;= 0.25.</changelog>
  <changelog author="Dirk Stoecker &lt;opensuse@dstoecker.de&gt;" date="1599566400">- added patch to build .desktop file without 'PrefersNonDefaultGPU'
  option on Leap 15.2 and below (old-desktopfile-standard.patch)
- removed conditional build for very old openSUSE/SLES versions
- add minetest-runtime provides</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1614168000">- Fixed build on current Factory (checking symlinks)
- Update to version 5.4.0
  * Full log: https://dev.minetest.net/Changelog#5.3.0_.E2.86.92_5.4.0
  * Removed support for bumpmapping, generated normal maps
    and parallax occlusion
  * By default, the crosshair will now change to an "X" when
    pointing to objects
  * Prevent players accessing inventories of other players
  * Prevent interacting with items out of the hotbar
  * Prevent players from being able to modify ItemStack meta</changelog>
  <changelog author="Maximilian Trummer &lt;opensuse@trummer.xyz&gt;" date="1618833600">- Update to version 5.4.1:
  * This is a maintenance release based on 5.4.0,
    it contains bugfixes but no new features.
  * Apply 'old-desktopfile-standard.patch' to Leap 15.3 as well.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1622548800">- Add GCC 11 compatibility patch:
  * 0001-Fix-build-for-newer-versions-of-GCC-11246.patch</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633521600">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * minetest@.service</changelog>
  <changelog author="Simon Vogl &lt;simon.vogl@gmx.net&gt;" date="1659182400">- Drop 0001-Fix-build-for-newer-versions-of-GCC-11246.patch as it is merged upstream
- Only apply minetest-fix-luajit-include-path.patch on openSUSE Leap as TW versions do not require it any more.
- Switch to from system irrlicht to IrrlichtMt library version 1.9.0mt5
- Don't purge the bundled bitop library
- Add new libzstd build dependency
- Update to version 5.5.0 &amp; 5.5.1:
  * Full log for version 5.5.0: https://dev.minetest.net/Changelog#5.4.0_.E2.86.92_5.5.0
  * This release switches from Irrlicht to our own fork called IrrlichtMt.
  * Full log for version 5.5.1: https://dev.minetest.net/Changelog#5.5.0_.E2.86.92_5.5.1
  * This is a maintenance release based on 5.5.0, it contains bugfixes but no new features.</changelog>
  <changelog author="Dmitriy Perlow &lt;dap.darkness@gmail.com&gt;" date="1660564800">- Introduced mbranch-protection=none CXX flag to resolve bnc#1193141
  (aarch64).</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1660824000">- Update to version 5.6.0
  * Fix CVE-2022-35978 ( boo#1202423 ): Mod scripts can escape
    sandbox in single player mode
  * `name` in game.conf is deprecated for the game title, use `title` instead
  * Add depth sorting for node faces
  * Various bug fixes
  * Full changes: https://dev.minetest.net/Changelog#5.5.0_.E2.86.92_5.6.0</changelog>
</package>
<package pkgid="9aedd9403b475e491a0e196729b1605e358535f067d5ae8825dce68817cd480e" name="minetestserver" arch="aarch64">
  <version epoch="0" ver="5.6.0" rel="bp154.2.3.5"/>
  <changelog author="werner@suse.de" date="1520596800">- Use latest libpng</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1533643200">- Update to version 0.4.17.1:
  * Fix boo#1103904
  * Fix crash caused by log_deprecated
    and the use of deprecated functions
  * Fix crash on pause menu when pressing up/down keys
- Remove use-pkg-config-to-find-luajit.patch: fixed upstream.
- Update to version 0.4.17:
  * Dungeons: Mostly fix missing stair nodes
  * Cavegen: Fix variable typo that broke mgvalleys large cave
    distribution
  * Prevent translating empty strings
  * upright_sprite: Fix texture position for players
  * core.rotate_node: Do not trigger after_place_node for mod
    compatibility
  * Generate Notifier: Clear events once after all
    'on generated' functions
  * Fix liquid post effect colour behaviour in third person view
  * Delete world dialog: Move buttons to avoid
    double click deletion
  * Fix /shutdown countdown parameter
  * Check argument types inside MetaDataRef Lua API
  * dropped items and falling nodes: Delete in 'ignore' nodes
  * Fix off-by-one in log output line length
  * Fix buffer parameter not working in getMapSlice()
  * Fix rounding error in g/set_node caused by truncation to float
  * Fix dancing text in text input fields
  * Fix undefined behaviour on getting pointer to data in
    empty vector
  * Fix wrong scrolling in text areas
  * Damage: Remove damage ignore timer due to abuse potential
  * Ensure no item stack is being held before crafting
  * Several documentation additions, improvements
  * core.rotate_node: Run callbacks like with any
    regular placed node
  * Biome dust node: Only place on 'walkable' cubic
    non-liquid drawtypes
  * Fix issue Minetest crash when custom font path is not exist
  * Fix Settings tab formspec alignment
  * Do not scale texture unless necessary
  * Fix day_night_ratio_do_override not being initialised
    server-side
  * Fix default item callbacks to work with nil users
  * Prevent from crafting non-existent, unknown items
  * Profiler: Fix var args not being passed to
    callback register function
  * Fix attached particle spawners far from spawn
  * Localplayer: Fix disable_jump effect and standing node position
  * Fix blocks written by vmanip not being marked as modified
  * Fix Rotate Node Placement
  * ServerEnv: Clean up object lifecycle handling
  * Fix the core.wrap_text function
  * Fix empty legacy meta being persisted
  * Statbars: fix incorrect half-images in non-standard
    orientations
  * serialize: use a temporary for SerializeException
  * Fix player coordinate rounding in collisionMoveSimple()
  * Fix for empty key/value when reading item string with
    wear but no metadata
  * Fix render order of overlays
  * Fix console resize issue when maximising game window
  * Fix console not being properly resized after
    window size changed
  * Verify HudSetParams input when hotbar textures are set
  * (Re)spawn players within 'mapgen_limit'
  * Fix sending color codes to clients that don't support them</changelog>
  <changelog author="mvetter@suse.com" date="1551787200">- Update to 5.0.0
  * 5.0.0 is a breaking release and not compatible to the 0.4 series.
  * See changes: https://dev.minetest.net/Changelog#0.4.16_.E2.86.92_5.0.0
- Remove shared_mods.patch: global mods possible by default now.
  See builtin/mainmenu/pkgmgr.lua
- bsc#1127911: is tracking whitelisting of `minetest` user/group
  in rpmlint</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1554120000">- bsc#1131077: BuildRequire postgresql-server-devel as a workaround
  for CMake which explicitly looks for server headers even if just
  building a client application.
  CAUTION: This workaround should not blindly be copied to other
  packages that fail to build with PostgreSQL 11. It is always
  preferrable to convert the package to use pkg-config for linking
  against libpq instead of pulling in postgresql-server-devel
  to have pg_config. If in doubt, please talk to max@suse.com
  before applying such a workaround.</changelog>
  <changelog author="mvetter@suse.com" date="1554206400">- Update to 5.0.1:
  * Fix detached inventory serialisation
  * Fix texture rotation for wallmounted nodeboxes
  * Fix build failing on some compilers
  * Warn about issues with the num_emerge_threads setting
  * HPChange Reason: Fix issues with custom reasons
  * Fix FreeBSD build by handling std::time_t properly
  * Confirm registration GUI: Remove positional strings to fix Windows bug
  * Prevent multi-line chat messages server-side
  * httpfetch: Disable IPv6 here too if requested by settings</changelog>
  <changelog author="Maximilian Trummer &lt;opensuse@trummer.xyz&gt;" date="1570968000">- Update to 5.1.0:
  * Mapgen Carpathian: Add optional rivers (paramat)
  * Move more dungeon parameter selection to mapgens (paramat)
  * Dungeons: Make multiple large rooms possible (paramat)
  * Change pitch fly binding to 'P', add to change keys menu (rubenwardy)
  * Android settings: Use 'simple' leaves instead of 'fancy' (paramat)
  * Fix 3rd person selection range (srifqi)
  * Make scrollbars' bar variable in size (stujones11)
  * Damage: Play no damage sound when immortal (SmallJoker)
  * Increase upper limit of display_gamma to 10 (ClobberXD)
  * Optimize and unify mesh processing (Vitaliy)
  * Re-order mapgens in mainmenu and 'all settings' mapgen selection (paramat)
  * Scrollbars: Move directly to clicked pos if clicked into tray (DS-Minetest)
  * Fix broken attachments on join (SmallJoker)
  * Fix inventory_overlay for nodes without inventory_image (DS-Minetest)
  * Better F6 profiler (SmallJoker)
  * Fix minimap markers (theviper121)
  * Textures: Load base pack only as last fallback (SmallJoker)
  * Add /help formspec for commands and privileges (SmallJoker)
  * Lua API: Add link to Minetest Modding Book (ClobberXD)
  * Force item entities out of solid nodes (sfan5, based on Wuzzy`s work)
  * Lua API: Various fixes (DS-Minetest, SmallJoker)
  * Rename "private messages" to "direct messages" (Calinou)
  * Automatically enable depending mods in the dialogue (HybridDog)
  * All settings: Fix missing flags checkboxes (srifqi)
  * Various network performance improvements (osjc)
  * Force send a mapblock to a player (sofar)
  * Revert ItemStacks being limited to the 'stack_size' value (ClobberXD)
  * Save forceloaded blocks file periodically (Thomas Rudin)
  * Improve ABM time budget handling (lhofhansl)
  * Group "immortal" also protects players from damage (Wuzzy)
  * Optimize usage of TOSERVER_GOTBLOCKS packet (sfan5)
  * Network: several bugfixes (sfan5)
  * Mapgen::spreadLight performance improvement (DS-Minetest)
  * Improve occlusion culling in corridors with additional check (sfan5)
  * Inventory: Delay dirty lists, and send changes incrementally (SmallJoker)
  * Other inventory bugfixes (sfan5, SmallJoker)
  * Move debug.txt after it grows too big (HybridDog)
  * Trigger on_place in many situations even if prediction failed (DS-Minetest)
  * Punchwear (improved) (sfan5)
  * Add deprecation warnings for ObjectRef:get/set_attribute (ClobberXD)
  * Nodedef 'drop' documentation: Improve (Paramat)
  * Mark tool filtering in node drop documentation as deprecated (Paramat)
  * Add node field to PlayerHPChangeReason table (pauloue)
  * Don't call on_hpchange callbacks if HP hasn't changed (ClobberXD)
  * Add disable_jump to liquids and ladders (SmallJoker)
  * Add support for 9-sliced backgrounds (rubenwardy)
  * Add compatible, consistent coordinate system to FormSpecs (v-rob)
  * Document ObjectRef:remove under Lua entity (ClobberXD)
  * Docs: Clarify where to check for 'protection_bypass' (SmallJoker)
  * Add vector.dot and vector.cross (HybridDog)
  * Improve documentation of mapgen aliases (Paramat)
  * Remove debug.upvaluejoin to prevent leak of insecure environment (fluxionary)
  * Fix previously crashing minetest.get_craft_result() (pauloue)
  * Allow toolcaps to override the built-in times for dig_immediate (sfan5)
  * Formspec styling using style[] (rubenwardy)
  * Customizable chat message format (ClobberXD)
  * Velocity modifiers for players (sfan5)
  * Fix some issues with minetest.clear_craft (pauloue)
  * Add function `minetest.read_schematic` (paly2)
  * Formspecs: formspec_version[] element (SmallJoker)
  * Per-player FOV overrides and multipliers (ClobberXD)
  * Find PostgreSQL correctly (adrido)
  * Add compatibility to vcpkg buildsystem (adrido)
  * Android: Use system provided path for default TMPFolder setting (stujones11)
  * Fix handling of --color and --worldlist command line arguments (mmattes)
  * Unified OpenGL ES support (sfan5)</changelog>
  <changelog author="Simon Puchert &lt;simonpuchert@alice.de&gt;" date="1574424000">- Explicitly require libXxf86vm-devel.</changelog>
  <changelog author="Maximilian Trummer &lt;opensuse@trummer.xyz&gt;" date="1579348800">- Update to version 5.1.1
  * See https://dev.minetest.net/Changelog#5.1.0_.E2.86.92_5.1.1
  * Fix player-bound sound playback (SmallJoker)
  * Fix item eat sound not played if last item (Wuzzy2)
  * Formspecs: Reset version number on rebuild (SmallJoker)
  * Rework packet receiving in ServerThread (sfan5)
  * Fix core.chat_format_message crashes (ClobberXD)
  * Fix spaces breaking formspec_version[] tag (rubenwardy)
  * Fix find_path for newer jsoncpp installations (vilhelmgray)
  * Update translations</changelog>
  <changelog author="Maximilian Trummer &lt;opensuse@trummer.xyz&gt;" date="1579348801">- build with spatialindex-devel, this speeds up AreaStores, see
  https://github.com/minetest/minetest#cmake-options</changelog>
  <changelog author="Maximilian Trummer &lt;opensuse@trummer.xyz&gt;" date="1586174400">- Update to version 5.2.0
- See https://dev.minetest.net/Changelog#5.1.0_.E2.86.92_5.2.0
- Client / Audiovisuals:
  * Fix alpha blending in texture modifiers (Warr1024)
  * Make natural night light as bright as MT 0.4.16 (paramat)
  * Shader fixes (lhofhansl, SmallJoker)
  * Clean up font caching, fix bitmap fonts (SmallJoker)
  * Waves generated with Perlin-type noise #8994 (lhofhansl)
  * Attachments: Fix glitches after detach (SmallJoker)
  * Let node 'place' and 'dug' sounds be heard
    by other players (sfan5)
  * Fix weird looking liquid source (Wuzzy2)
  * Basic model shading (dcbrwn)
  * Improve arm inertia animations (kilbith)
- GUI improvements:
  * Add visual feedback for button states (Df458)
  * Formspec: draw order and clipping for all elements (DS)
  * Refactor internal button styling/rendering code (Df458')
  * Formspec: Fix clicking on tooltip-obstructed elements (DS)
  * Formspec: change cursor on fields and co. (DS)
  * Various new formspec bug fixes (SmallJoker)
  * Formspec: Add 9-slice background support
    to button elements (Df458)
  * Formspec: add hypertext[] element (pyrollo)
  * Formspec: animated_image[] (Df458, kilbith)
  * Make clipping of formspec elements more consistent (Df458)
  * Remove outdated field_close_on_enter[] warnings
    in element parameters (SmallJoker)
  * Fix mouse events sent to wrong GUI elements
    when dragging (sfan5)
  * Restore intuitive click-through behaviour (DS)
- Enhancements:
  * Wear out tools on punch (sfan5)
  * Tunnels: Completely disable generation
    when 'cave width' &gt;= 10.0 (paramat)
  * Randomwalk cave liquids:
    Remove deprecated 'lava depth' (paramat)
  * Automatically enable the mod's dependencies
    in the world config menu (HybridDog)
  * Clean up craft replacements docs (pauloue)
  * Falling nodes: add missing support for light sources,
    most drawtypes, and paramtype2s (Wuzzy2)
  * Remove legacy flat-file map code
    and documentation (random-geek)
  * Fix packet receiving in server and client (sfan5)
  * Key settings: Cancel with escape,
    clear with delete (SmallJoker)
- Script API / Modding:
  * CSM: Introduce get_modpath() (sfan5)
  * CSM: Remove non-functional minetest.get_day_count() (sfan5)
  * Add z-index management to HUD (pyrollo)
  * Add table.key_value_swap and table.shuffle (HybridDog)
  * Map download:
    Escape ':' to '_' (NTFS/FAT* systems) (Montandalar)
  * Settings: Add get_flags API for mapgen flags (SmallJoker)
  * Improve minetest.sound_play with ephemeral sounds
    and player exclusion (sfan5)
  * Reworked validity checks for entities (sfan5)
  * Documentation: Add advice on lifetime of ObjectRefs (sfan5)
  * Allow texture modifiers in hotbar textures (Warr1024)
  * Nodes with torchlike drawtype and custom visual_scale now are
    rendered attached to surface instead of being centered (Wuzzy2)
  * Add documentation of VoxelArea 'ystride', 'zstride' (paramat)
  * Lua API: Document HP, breath and damage limits (SmallJoker)
  * Various documentation improvements (Wuzzy2)
  * CSM: Corrections to client_lua_api.txt (sfan5)
  * Make minetest.item_place_node return position
    of placed node (Bluebird)
  * Call on_secondary_use when object is right-clicked (sfan5)
  * CSM: Various fixes (sfan5)
  * Many pathfinder bugfixes and improvements (Wuzzy2)
    + Fix failure to find path
    if start or end pos is over air (Wuzzy2)
    + Fix very broken implementation of A* search (Wuzzy2)
    + No longer jump through solid nodes (Wuzzy2)
    + Return nil if start or end pos is solid (Wuzzy2)
  * New set_sky, set_sun, set_moon and set_stars (Jordach)
  * Secure and document minetest.deserialize() (luk3yx)
  * minetest.get_content_id: throw error
    for unknown nodes (HybridDog)
- Misc / Build:
  * Don't install fonts on ENABLE_CLIENT=0 configurations (sfan5)
  * Fix memleaks in formspecs (SmallJoker)
  * Run luacheck in travis, add luacheck (rubenwardy)
  * Various build issue fixes (Clang, Travis CI) (sfan5)</changelog>
  <changelog author="Mia Herkt &lt;mia@0x0.st&gt;" date="1592827200">- spec-cleaner
- Make sure the package does not build with bundled libraries
- Add minetest-fix-luajit-include-path.patch
  Fixes the FindLuaJIT CMake module so it also looks for the
  moonjit include path</changelog>
  <changelog author="andy great &lt;andythe_great@pm.me&gt;" date="1594641600">- Update to version 5.3.0.
  (see https://dev.minetest.net/Changelog#5.2.0_.E2.86.92_5.3.0)
  * Formspec improvements, including a scrolling GUI element
  * Performance improvements to the Server and API
  * Many bug fixes and small features
- Now requires desktop-file-utils version &gt;= 0.25.</changelog>
  <changelog author="Dirk Stoecker &lt;opensuse@dstoecker.de&gt;" date="1599566400">- added patch to build .desktop file without 'PrefersNonDefaultGPU'
  option on Leap 15.2 and below (old-desktopfile-standard.patch)
- removed conditional build for very old openSUSE/SLES versions
- add minetest-runtime provides</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1614168000">- Fixed build on current Factory (checking symlinks)
- Update to version 5.4.0
  * Full log: https://dev.minetest.net/Changelog#5.3.0_.E2.86.92_5.4.0
  * Removed support for bumpmapping, generated normal maps
    and parallax occlusion
  * By default, the crosshair will now change to an "X" when
    pointing to objects
  * Prevent players accessing inventories of other players
  * Prevent interacting with items out of the hotbar
  * Prevent players from being able to modify ItemStack meta</changelog>
  <changelog author="Maximilian Trummer &lt;opensuse@trummer.xyz&gt;" date="1618833600">- Update to version 5.4.1:
  * This is a maintenance release based on 5.4.0,
    it contains bugfixes but no new features.
  * Apply 'old-desktopfile-standard.patch' to Leap 15.3 as well.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1622548800">- Add GCC 11 compatibility patch:
  * 0001-Fix-build-for-newer-versions-of-GCC-11246.patch</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633521600">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * minetest@.service</changelog>
  <changelog author="Simon Vogl &lt;simon.vogl@gmx.net&gt;" date="1659182400">- Drop 0001-Fix-build-for-newer-versions-of-GCC-11246.patch as it is merged upstream
- Only apply minetest-fix-luajit-include-path.patch on openSUSE Leap as TW versions do not require it any more.
- Switch to from system irrlicht to IrrlichtMt library version 1.9.0mt5
- Don't purge the bundled bitop library
- Add new libzstd build dependency
- Update to version 5.5.0 &amp; 5.5.1:
  * Full log for version 5.5.0: https://dev.minetest.net/Changelog#5.4.0_.E2.86.92_5.5.0
  * This release switches from Irrlicht to our own fork called IrrlichtMt.
  * Full log for version 5.5.1: https://dev.minetest.net/Changelog#5.5.0_.E2.86.92_5.5.1
  * This is a maintenance release based on 5.5.0, it contains bugfixes but no new features.</changelog>
  <changelog author="Dmitriy Perlow &lt;dap.darkness@gmail.com&gt;" date="1660564800">- Introduced mbranch-protection=none CXX flag to resolve bnc#1193141
  (aarch64).</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1660824000">- Update to version 5.6.0
  * Fix CVE-2022-35978 ( boo#1202423 ): Mod scripts can escape
    sandbox in single player mode
  * `name` in game.conf is deprecated for the game title, use `title` instead
  * Add depth sorting for node faces
  * Various bug fixes
  * Full changes: https://dev.minetest.net/Changelog#5.5.0_.E2.86.92_5.6.0</changelog>
</package>
<package pkgid="22aa29c8c52a10e0db7148d229fde4b53f8b6848b915eb9c61f4c67c81f7239b" name="minetestserver" arch="ppc64le">
  <version epoch="0" ver="5.6.0" rel="bp154.2.3.5"/>
  <changelog author="werner@suse.de" date="1520596800">- Use latest libpng</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1533643200">- Update to version 0.4.17.1:
  * Fix boo#1103904
  * Fix crash caused by log_deprecated
    and the use of deprecated functions
  * Fix crash on pause menu when pressing up/down keys
- Remove use-pkg-config-to-find-luajit.patch: fixed upstream.
- Update to version 0.4.17:
  * Dungeons: Mostly fix missing stair nodes
  * Cavegen: Fix variable typo that broke mgvalleys large cave
    distribution
  * Prevent translating empty strings
  * upright_sprite: Fix texture position for players
  * core.rotate_node: Do not trigger after_place_node for mod
    compatibility
  * Generate Notifier: Clear events once after all
    'on generated' functions
  * Fix liquid post effect colour behaviour in third person view
  * Delete world dialog: Move buttons to avoid
    double click deletion
  * Fix /shutdown countdown parameter
  * Check argument types inside MetaDataRef Lua API
  * dropped items and falling nodes: Delete in 'ignore' nodes
  * Fix off-by-one in log output line length
  * Fix buffer parameter not working in getMapSlice()
  * Fix rounding error in g/set_node caused by truncation to float
  * Fix dancing text in text input fields
  * Fix undefined behaviour on getting pointer to data in
    empty vector
  * Fix wrong scrolling in text areas
  * Damage: Remove damage ignore timer due to abuse potential
  * Ensure no item stack is being held before crafting
  * Several documentation additions, improvements
  * core.rotate_node: Run callbacks like with any
    regular placed node
  * Biome dust node: Only place on 'walkable' cubic
    non-liquid drawtypes
  * Fix issue Minetest crash when custom font path is not exist
  * Fix Settings tab formspec alignment
  * Do not scale texture unless necessary
  * Fix day_night_ratio_do_override not being initialised
    server-side
  * Fix default item callbacks to work with nil users
  * Prevent from crafting non-existent, unknown items
  * Profiler: Fix var args not being passed to
    callback register function
  * Fix attached particle spawners far from spawn
  * Localplayer: Fix disable_jump effect and standing node position
  * Fix blocks written by vmanip not being marked as modified
  * Fix Rotate Node Placement
  * ServerEnv: Clean up object lifecycle handling
  * Fix the core.wrap_text function
  * Fix empty legacy meta being persisted
  * Statbars: fix incorrect half-images in non-standard
    orientations
  * serialize: use a temporary for SerializeException
  * Fix player coordinate rounding in collisionMoveSimple()
  * Fix for empty key/value when reading item string with
    wear but no metadata
  * Fix render order of overlays
  * Fix console resize issue when maximising game window
  * Fix console not being properly resized after
    window size changed
  * Verify HudSetParams input when hotbar textures are set
  * (Re)spawn players within 'mapgen_limit'
  * Fix sending color codes to clients that don't support them</changelog>
  <changelog author="mvetter@suse.com" date="1551787200">- Update to 5.0.0
  * 5.0.0 is a breaking release and not compatible to the 0.4 series.
  * See changes: https://dev.minetest.net/Changelog#0.4.16_.E2.86.92_5.0.0
- Remove shared_mods.patch: global mods possible by default now.
  See builtin/mainmenu/pkgmgr.lua
- bsc#1127911: is tracking whitelisting of `minetest` user/group
  in rpmlint</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1554120000">- bsc#1131077: BuildRequire postgresql-server-devel as a workaround
  for CMake which explicitly looks for server headers even if just
  building a client application.
  CAUTION: This workaround should not blindly be copied to other
  packages that fail to build with PostgreSQL 11. It is always
  preferrable to convert the package to use pkg-config for linking
  against libpq instead of pulling in postgresql-server-devel
  to have pg_config. If in doubt, please talk to max@suse.com
  before applying such a workaround.</changelog>
  <changelog author="mvetter@suse.com" date="1554206400">- Update to 5.0.1:
  * Fix detached inventory serialisation
  * Fix texture rotation for wallmounted nodeboxes
  * Fix build failing on some compilers
  * Warn about issues with the num_emerge_threads setting
  * HPChange Reason: Fix issues with custom reasons
  * Fix FreeBSD build by handling std::time_t properly
  * Confirm registration GUI: Remove positional strings to fix Windows bug
  * Prevent multi-line chat messages server-side
  * httpfetch: Disable IPv6 here too if requested by settings</changelog>
  <changelog author="Maximilian Trummer &lt;opensuse@trummer.xyz&gt;" date="1570968000">- Update to 5.1.0:
  * Mapgen Carpathian: Add optional rivers (paramat)
  * Move more dungeon parameter selection to mapgens (paramat)
  * Dungeons: Make multiple large rooms possible (paramat)
  * Change pitch fly binding to 'P', add to change keys menu (rubenwardy)
  * Android settings: Use 'simple' leaves instead of 'fancy' (paramat)
  * Fix 3rd person selection range (srifqi)
  * Make scrollbars' bar variable in size (stujones11)
  * Damage: Play no damage sound when immortal (SmallJoker)
  * Increase upper limit of display_gamma to 10 (ClobberXD)
  * Optimize and unify mesh processing (Vitaliy)
  * Re-order mapgens in mainmenu and 'all settings' mapgen selection (paramat)
  * Scrollbars: Move directly to clicked pos if clicked into tray (DS-Minetest)
  * Fix broken attachments on join (SmallJoker)
  * Fix inventory_overlay for nodes without inventory_image (DS-Minetest)
  * Better F6 profiler (SmallJoker)
  * Fix minimap markers (theviper121)
  * Textures: Load base pack only as last fallback (SmallJoker)
  * Add /help formspec for commands and privileges (SmallJoker)
  * Lua API: Add link to Minetest Modding Book (ClobberXD)
  * Force item entities out of solid nodes (sfan5, based on Wuzzy`s work)
  * Lua API: Various fixes (DS-Minetest, SmallJoker)
  * Rename "private messages" to "direct messages" (Calinou)
  * Automatically enable depending mods in the dialogue (HybridDog)
  * All settings: Fix missing flags checkboxes (srifqi)
  * Various network performance improvements (osjc)
  * Force send a mapblock to a player (sofar)
  * Revert ItemStacks being limited to the 'stack_size' value (ClobberXD)
  * Save forceloaded blocks file periodically (Thomas Rudin)
  * Improve ABM time budget handling (lhofhansl)
  * Group "immortal" also protects players from damage (Wuzzy)
  * Optimize usage of TOSERVER_GOTBLOCKS packet (sfan5)
  * Network: several bugfixes (sfan5)
  * Mapgen::spreadLight performance improvement (DS-Minetest)
  * Improve occlusion culling in corridors with additional check (sfan5)
  * Inventory: Delay dirty lists, and send changes incrementally (SmallJoker)
  * Other inventory bugfixes (sfan5, SmallJoker)
  * Move debug.txt after it grows too big (HybridDog)
  * Trigger on_place in many situations even if prediction failed (DS-Minetest)
  * Punchwear (improved) (sfan5)
  * Add deprecation warnings for ObjectRef:get/set_attribute (ClobberXD)
  * Nodedef 'drop' documentation: Improve (Paramat)
  * Mark tool filtering in node drop documentation as deprecated (Paramat)
  * Add node field to PlayerHPChangeReason table (pauloue)
  * Don't call on_hpchange callbacks if HP hasn't changed (ClobberXD)
  * Add disable_jump to liquids and ladders (SmallJoker)
  * Add support for 9-sliced backgrounds (rubenwardy)
  * Add compatible, consistent coordinate system to FormSpecs (v-rob)
  * Document ObjectRef:remove under Lua entity (ClobberXD)
  * Docs: Clarify where to check for 'protection_bypass' (SmallJoker)
  * Add vector.dot and vector.cross (HybridDog)
  * Improve documentation of mapgen aliases (Paramat)
  * Remove debug.upvaluejoin to prevent leak of insecure environment (fluxionary)
  * Fix previously crashing minetest.get_craft_result() (pauloue)
  * Allow toolcaps to override the built-in times for dig_immediate (sfan5)
  * Formspec styling using style[] (rubenwardy)
  * Customizable chat message format (ClobberXD)
  * Velocity modifiers for players (sfan5)
  * Fix some issues with minetest.clear_craft (pauloue)
  * Add function `minetest.read_schematic` (paly2)
  * Formspecs: formspec_version[] element (SmallJoker)
  * Per-player FOV overrides and multipliers (ClobberXD)
  * Find PostgreSQL correctly (adrido)
  * Add compatibility to vcpkg buildsystem (adrido)
  * Android: Use system provided path for default TMPFolder setting (stujones11)
  * Fix handling of --color and --worldlist command line arguments (mmattes)
  * Unified OpenGL ES support (sfan5)</changelog>
  <changelog author="Simon Puchert &lt;simonpuchert@alice.de&gt;" date="1574424000">- Explicitly require libXxf86vm-devel.</changelog>
  <changelog author="Maximilian Trummer &lt;opensuse@trummer.xyz&gt;" date="1579348800">- Update to version 5.1.1
  * See https://dev.minetest.net/Changelog#5.1.0_.E2.86.92_5.1.1
  * Fix player-bound sound playback (SmallJoker)
  * Fix item eat sound not played if last item (Wuzzy2)
  * Formspecs: Reset version number on rebuild (SmallJoker)
  * Rework packet receiving in ServerThread (sfan5)
  * Fix core.chat_format_message crashes (ClobberXD)
  * Fix spaces breaking formspec_version[] tag (rubenwardy)
  * Fix find_path for newer jsoncpp installations (vilhelmgray)
  * Update translations</changelog>
  <changelog author="Maximilian Trummer &lt;opensuse@trummer.xyz&gt;" date="1579348801">- build with spatialindex-devel, this speeds up AreaStores, see
  https://github.com/minetest/minetest#cmake-options</changelog>
  <changelog author="Maximilian Trummer &lt;opensuse@trummer.xyz&gt;" date="1586174400">- Update to version 5.2.0
- See https://dev.minetest.net/Changelog#5.1.0_.E2.86.92_5.2.0
- Client / Audiovisuals:
  * Fix alpha blending in texture modifiers (Warr1024)
  * Make natural night light as bright as MT 0.4.16 (paramat)
  * Shader fixes (lhofhansl, SmallJoker)
  * Clean up font caching, fix bitmap fonts (SmallJoker)
  * Waves generated with Perlin-type noise #8994 (lhofhansl)
  * Attachments: Fix glitches after detach (SmallJoker)
  * Let node 'place' and 'dug' sounds be heard
    by other players (sfan5)
  * Fix weird looking liquid source (Wuzzy2)
  * Basic model shading (dcbrwn)
  * Improve arm inertia animations (kilbith)
- GUI improvements:
  * Add visual feedback for button states (Df458)
  * Formspec: draw order and clipping for all elements (DS)
  * Refactor internal button styling/rendering code (Df458')
  * Formspec: Fix clicking on tooltip-obstructed elements (DS)
  * Formspec: change cursor on fields and co. (DS)
  * Various new formspec bug fixes (SmallJoker)
  * Formspec: Add 9-slice background support
    to button elements (Df458)
  * Formspec: add hypertext[] element (pyrollo)
  * Formspec: animated_image[] (Df458, kilbith)
  * Make clipping of formspec elements more consistent (Df458)
  * Remove outdated field_close_on_enter[] warnings
    in element parameters (SmallJoker)
  * Fix mouse events sent to wrong GUI elements
    when dragging (sfan5)
  * Restore intuitive click-through behaviour (DS)
- Enhancements:
  * Wear out tools on punch (sfan5)
  * Tunnels: Completely disable generation
    when 'cave width' &gt;= 10.0 (paramat)
  * Randomwalk cave liquids:
    Remove deprecated 'lava depth' (paramat)
  * Automatically enable the mod's dependencies
    in the world config menu (HybridDog)
  * Clean up craft replacements docs (pauloue)
  * Falling nodes: add missing support for light sources,
    most drawtypes, and paramtype2s (Wuzzy2)
  * Remove legacy flat-file map code
    and documentation (random-geek)
  * Fix packet receiving in server and client (sfan5)
  * Key settings: Cancel with escape,
    clear with delete (SmallJoker)
- Script API / Modding:
  * CSM: Introduce get_modpath() (sfan5)
  * CSM: Remove non-functional minetest.get_day_count() (sfan5)
  * Add z-index management to HUD (pyrollo)
  * Add table.key_value_swap and table.shuffle (HybridDog)
  * Map download:
    Escape ':' to '_' (NTFS/FAT* systems) (Montandalar)
  * Settings: Add get_flags API for mapgen flags (SmallJoker)
  * Improve minetest.sound_play with ephemeral sounds
    and player exclusion (sfan5)
  * Reworked validity checks for entities (sfan5)
  * Documentation: Add advice on lifetime of ObjectRefs (sfan5)
  * Allow texture modifiers in hotbar textures (Warr1024)
  * Nodes with torchlike drawtype and custom visual_scale now are
    rendered attached to surface instead of being centered (Wuzzy2)
  * Add documentation of VoxelArea 'ystride', 'zstride' (paramat)
  * Lua API: Document HP, breath and damage limits (SmallJoker)
  * Various documentation improvements (Wuzzy2)
  * CSM: Corrections to client_lua_api.txt (sfan5)
  * Make minetest.item_place_node return position
    of placed node (Bluebird)
  * Call on_secondary_use when object is right-clicked (sfan5)
  * CSM: Various fixes (sfan5)
  * Many pathfinder bugfixes and improvements (Wuzzy2)
    + Fix failure to find path
    if start or end pos is over air (Wuzzy2)
    + Fix very broken implementation of A* search (Wuzzy2)
    + No longer jump through solid nodes (Wuzzy2)
    + Return nil if start or end pos is solid (Wuzzy2)
  * New set_sky, set_sun, set_moon and set_stars (Jordach)
  * Secure and document minetest.deserialize() (luk3yx)
  * minetest.get_content_id: throw error
    for unknown nodes (HybridDog)
- Misc / Build:
  * Don't install fonts on ENABLE_CLIENT=0 configurations (sfan5)
  * Fix memleaks in formspecs (SmallJoker)
  * Run luacheck in travis, add luacheck (rubenwardy)
  * Various build issue fixes (Clang, Travis CI) (sfan5)</changelog>
  <changelog author="Mia Herkt &lt;mia@0x0.st&gt;" date="1592827200">- spec-cleaner
- Make sure the package does not build with bundled libraries
- Add minetest-fix-luajit-include-path.patch
  Fixes the FindLuaJIT CMake module so it also looks for the
  moonjit include path</changelog>
  <changelog author="andy great &lt;andythe_great@pm.me&gt;" date="1594641600">- Update to version 5.3.0.
  (see https://dev.minetest.net/Changelog#5.2.0_.E2.86.92_5.3.0)
  * Formspec improvements, including a scrolling GUI element
  * Performance improvements to the Server and API
  * Many bug fixes and small features
- Now requires desktop-file-utils version &gt;= 0.25.</changelog>
  <changelog author="Dirk Stoecker &lt;opensuse@dstoecker.de&gt;" date="1599566400">- added patch to build .desktop file without 'PrefersNonDefaultGPU'
  option on Leap 15.2 and below (old-desktopfile-standard.patch)
- removed conditional build for very old openSUSE/SLES versions
- add minetest-runtime provides</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1614168000">- Fixed build on current Factory (checking symlinks)
- Update to version 5.4.0
  * Full log: https://dev.minetest.net/Changelog#5.3.0_.E2.86.92_5.4.0
  * Removed support for bumpmapping, generated normal maps
    and parallax occlusion
  * By default, the crosshair will now change to an "X" when
    pointing to objects
  * Prevent players accessing inventories of other players
  * Prevent interacting with items out of the hotbar
  * Prevent players from being able to modify ItemStack meta</changelog>
  <changelog author="Maximilian Trummer &lt;opensuse@trummer.xyz&gt;" date="1618833600">- Update to version 5.4.1:
  * This is a maintenance release based on 5.4.0,
    it contains bugfixes but no new features.
  * Apply 'old-desktopfile-standard.patch' to Leap 15.3 as well.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1622548800">- Add GCC 11 compatibility patch:
  * 0001-Fix-build-for-newer-versions-of-GCC-11246.patch</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633521600">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * minetest@.service</changelog>
  <changelog author="Simon Vogl &lt;simon.vogl@gmx.net&gt;" date="1659182400">- Drop 0001-Fix-build-for-newer-versions-of-GCC-11246.patch as it is merged upstream
- Only apply minetest-fix-luajit-include-path.patch on openSUSE Leap as TW versions do not require it any more.
- Switch to from system irrlicht to IrrlichtMt library version 1.9.0mt5
- Don't purge the bundled bitop library
- Add new libzstd build dependency
- Update to version 5.5.0 &amp; 5.5.1:
  * Full log for version 5.5.0: https://dev.minetest.net/Changelog#5.4.0_.E2.86.92_5.5.0
  * This release switches from Irrlicht to our own fork called IrrlichtMt.
  * Full log for version 5.5.1: https://dev.minetest.net/Changelog#5.5.0_.E2.86.92_5.5.1
  * This is a maintenance release based on 5.5.0, it contains bugfixes but no new features.</changelog>
  <changelog author="Dmitriy Perlow &lt;dap.darkness@gmail.com&gt;" date="1660564800">- Introduced mbranch-protection=none CXX flag to resolve bnc#1193141
  (aarch64).</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1660824000">- Update to version 5.6.0
  * Fix CVE-2022-35978 ( boo#1202423 ): Mod scripts can escape
    sandbox in single player mode
  * `name` in game.conf is deprecated for the game title, use `title` instead
  * Add depth sorting for node faces
  * Various bug fixes
  * Full changes: https://dev.minetest.net/Changelog#5.5.0_.E2.86.92_5.6.0</changelog>
</package>
<package pkgid="ca4018239a7f7df5378857867b9279d14f33c7c7ba9b7ed7cfa05602eadab74b" name="minetestserver" arch="s390x">
  <version epoch="0" ver="5.6.0" rel="bp154.2.3.5"/>
  <changelog author="werner@suse.de" date="1520596800">- Use latest libpng</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1533643200">- Update to version 0.4.17.1:
  * Fix boo#1103904
  * Fix crash caused by log_deprecated
    and the use of deprecated functions
  * Fix crash on pause menu when pressing up/down keys
- Remove use-pkg-config-to-find-luajit.patch: fixed upstream.
- Update to version 0.4.17:
  * Dungeons: Mostly fix missing stair nodes
  * Cavegen: Fix variable typo that broke mgvalleys large cave
    distribution
  * Prevent translating empty strings
  * upright_sprite: Fix texture position for players
  * core.rotate_node: Do not trigger after_place_node for mod
    compatibility
  * Generate Notifier: Clear events once after all
    'on generated' functions
  * Fix liquid post effect colour behaviour in third person view
  * Delete world dialog: Move buttons to avoid
    double click deletion
  * Fix /shutdown countdown parameter
  * Check argument types inside MetaDataRef Lua API
  * dropped items and falling nodes: Delete in 'ignore' nodes
  * Fix off-by-one in log output line length
  * Fix buffer parameter not working in getMapSlice()
  * Fix rounding error in g/set_node caused by truncation to float
  * Fix dancing text in text input fields
  * Fix undefined behaviour on getting pointer to data in
    empty vector
  * Fix wrong scrolling in text areas
  * Damage: Remove damage ignore timer due to abuse potential
  * Ensure no item stack is being held before crafting
  * Several documentation additions, improvements
  * core.rotate_node: Run callbacks like with any
    regular placed node
  * Biome dust node: Only place on 'walkable' cubic
    non-liquid drawtypes
  * Fix issue Minetest crash when custom font path is not exist
  * Fix Settings tab formspec alignment
  * Do not scale texture unless necessary
  * Fix day_night_ratio_do_override not being initialised
    server-side
  * Fix default item callbacks to work with nil users
  * Prevent from crafting non-existent, unknown items
  * Profiler: Fix var args not being passed to
    callback register function
  * Fix attached particle spawners far from spawn
  * Localplayer: Fix disable_jump effect and standing node position
  * Fix blocks written by vmanip not being marked as modified
  * Fix Rotate Node Placement
  * ServerEnv: Clean up object lifecycle handling
  * Fix the core.wrap_text function
  * Fix empty legacy meta being persisted
  * Statbars: fix incorrect half-images in non-standard
    orientations
  * serialize: use a temporary for SerializeException
  * Fix player coordinate rounding in collisionMoveSimple()
  * Fix for empty key/value when reading item string with
    wear but no metadata
  * Fix render order of overlays
  * Fix console resize issue when maximising game window
  * Fix console not being properly resized after
    window size changed
  * Verify HudSetParams input when hotbar textures are set
  * (Re)spawn players within 'mapgen_limit'
  * Fix sending color codes to clients that don't support them</changelog>
  <changelog author="mvetter@suse.com" date="1551787200">- Update to 5.0.0
  * 5.0.0 is a breaking release and not compatible to the 0.4 series.
  * See changes: https://dev.minetest.net/Changelog#0.4.16_.E2.86.92_5.0.0
- Remove shared_mods.patch: global mods possible by default now.
  See builtin/mainmenu/pkgmgr.lua
- bsc#1127911: is tracking whitelisting of `minetest` user/group
  in rpmlint</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1554120000">- bsc#1131077: BuildRequire postgresql-server-devel as a workaround
  for CMake which explicitly looks for server headers even if just
  building a client application.
  CAUTION: This workaround should not blindly be copied to other
  packages that fail to build with PostgreSQL 11. It is always
  preferrable to convert the package to use pkg-config for linking
  against libpq instead of pulling in postgresql-server-devel
  to have pg_config. If in doubt, please talk to max@suse.com
  before applying such a workaround.</changelog>
  <changelog author="mvetter@suse.com" date="1554206400">- Update to 5.0.1:
  * Fix detached inventory serialisation
  * Fix texture rotation for wallmounted nodeboxes
  * Fix build failing on some compilers
  * Warn about issues with the num_emerge_threads setting
  * HPChange Reason: Fix issues with custom reasons
  * Fix FreeBSD build by handling std::time_t properly
  * Confirm registration GUI: Remove positional strings to fix Windows bug
  * Prevent multi-line chat messages server-side
  * httpfetch: Disable IPv6 here too if requested by settings</changelog>
  <changelog author="Maximilian Trummer &lt;opensuse@trummer.xyz&gt;" date="1570968000">- Update to 5.1.0:
  * Mapgen Carpathian: Add optional rivers (paramat)
  * Move more dungeon parameter selection to mapgens (paramat)
  * Dungeons: Make multiple large rooms possible (paramat)
  * Change pitch fly binding to 'P', add to change keys menu (rubenwardy)
  * Android settings: Use 'simple' leaves instead of 'fancy' (paramat)
  * Fix 3rd person selection range (srifqi)
  * Make scrollbars' bar variable in size (stujones11)
  * Damage: Play no damage sound when immortal (SmallJoker)
  * Increase upper limit of display_gamma to 10 (ClobberXD)
  * Optimize and unify mesh processing (Vitaliy)
  * Re-order mapgens in mainmenu and 'all settings' mapgen selection (paramat)
  * Scrollbars: Move directly to clicked pos if clicked into tray (DS-Minetest)
  * Fix broken attachments on join (SmallJoker)
  * Fix inventory_overlay for nodes without inventory_image (DS-Minetest)
  * Better F6 profiler (SmallJoker)
  * Fix minimap markers (theviper121)
  * Textures: Load base pack only as last fallback (SmallJoker)
  * Add /help formspec for commands and privileges (SmallJoker)
  * Lua API: Add link to Minetest Modding Book (ClobberXD)
  * Force item entities out of solid nodes (sfan5, based on Wuzzy`s work)
  * Lua API: Various fixes (DS-Minetest, SmallJoker)
  * Rename "private messages" to "direct messages" (Calinou)
  * Automatically enable depending mods in the dialogue (HybridDog)
  * All settings: Fix missing flags checkboxes (srifqi)
  * Various network performance improvements (osjc)
  * Force send a mapblock to a player (sofar)
  * Revert ItemStacks being limited to the 'stack_size' value (ClobberXD)
  * Save forceloaded blocks file periodically (Thomas Rudin)
  * Improve ABM time budget handling (lhofhansl)
  * Group "immortal" also protects players from damage (Wuzzy)
  * Optimize usage of TOSERVER_GOTBLOCKS packet (sfan5)
  * Network: several bugfixes (sfan5)
  * Mapgen::spreadLight performance improvement (DS-Minetest)
  * Improve occlusion culling in corridors with additional check (sfan5)
  * Inventory: Delay dirty lists, and send changes incrementally (SmallJoker)
  * Other inventory bugfixes (sfan5, SmallJoker)
  * Move debug.txt after it grows too big (HybridDog)
  * Trigger on_place in many situations even if prediction failed (DS-Minetest)
  * Punchwear (improved) (sfan5)
  * Add deprecation warnings for ObjectRef:get/set_attribute (ClobberXD)
  * Nodedef 'drop' documentation: Improve (Paramat)
  * Mark tool filtering in node drop documentation as deprecated (Paramat)
  * Add node field to PlayerHPChangeReason table (pauloue)
  * Don't call on_hpchange callbacks if HP hasn't changed (ClobberXD)
  * Add disable_jump to liquids and ladders (SmallJoker)
  * Add support for 9-sliced backgrounds (rubenwardy)
  * Add compatible, consistent coordinate system to FormSpecs (v-rob)
  * Document ObjectRef:remove under Lua entity (ClobberXD)
  * Docs: Clarify where to check for 'protection_bypass' (SmallJoker)
  * Add vector.dot and vector.cross (HybridDog)
  * Improve documentation of mapgen aliases (Paramat)
  * Remove debug.upvaluejoin to prevent leak of insecure environment (fluxionary)
  * Fix previously crashing minetest.get_craft_result() (pauloue)
  * Allow toolcaps to override the built-in times for dig_immediate (sfan5)
  * Formspec styling using style[] (rubenwardy)
  * Customizable chat message format (ClobberXD)
  * Velocity modifiers for players (sfan5)
  * Fix some issues with minetest.clear_craft (pauloue)
  * Add function `minetest.read_schematic` (paly2)
  * Formspecs: formspec_version[] element (SmallJoker)
  * Per-player FOV overrides and multipliers (ClobberXD)
  * Find PostgreSQL correctly (adrido)
  * Add compatibility to vcpkg buildsystem (adrido)
  * Android: Use system provided path for default TMPFolder setting (stujones11)
  * Fix handling of --color and --worldlist command line arguments (mmattes)
  * Unified OpenGL ES support (sfan5)</changelog>
  <changelog author="Simon Puchert &lt;simonpuchert@alice.de&gt;" date="1574424000">- Explicitly require libXxf86vm-devel.</changelog>
  <changelog author="Maximilian Trummer &lt;opensuse@trummer.xyz&gt;" date="1579348800">- Update to version 5.1.1
  * See https://dev.minetest.net/Changelog#5.1.0_.E2.86.92_5.1.1
  * Fix player-bound sound playback (SmallJoker)
  * Fix item eat sound not played if last item (Wuzzy2)
  * Formspecs: Reset version number on rebuild (SmallJoker)
  * Rework packet receiving in ServerThread (sfan5)
  * Fix core.chat_format_message crashes (ClobberXD)
  * Fix spaces breaking formspec_version[] tag (rubenwardy)
  * Fix find_path for newer jsoncpp installations (vilhelmgray)
  * Update translations</changelog>
  <changelog author="Maximilian Trummer &lt;opensuse@trummer.xyz&gt;" date="1579348801">- build with spatialindex-devel, this speeds up AreaStores, see
  https://github.com/minetest/minetest#cmake-options</changelog>
  <changelog author="Maximilian Trummer &lt;opensuse@trummer.xyz&gt;" date="1586174400">- Update to version 5.2.0
- See https://dev.minetest.net/Changelog#5.1.0_.E2.86.92_5.2.0
- Client / Audiovisuals:
  * Fix alpha blending in texture modifiers (Warr1024)
  * Make natural night light as bright as MT 0.4.16 (paramat)
  * Shader fixes (lhofhansl, SmallJoker)
  * Clean up font caching, fix bitmap fonts (SmallJoker)
  * Waves generated with Perlin-type noise #8994 (lhofhansl)
  * Attachments: Fix glitches after detach (SmallJoker)
  * Let node 'place' and 'dug' sounds be heard
    by other players (sfan5)
  * Fix weird looking liquid source (Wuzzy2)
  * Basic model shading (dcbrwn)
  * Improve arm inertia animations (kilbith)
- GUI improvements:
  * Add visual feedback for button states (Df458)
  * Formspec: draw order and clipping for all elements (DS)
  * Refactor internal button styling/rendering code (Df458')
  * Formspec: Fix clicking on tooltip-obstructed elements (DS)
  * Formspec: change cursor on fields and co. (DS)
  * Various new formspec bug fixes (SmallJoker)
  * Formspec: Add 9-slice background support
    to button elements (Df458)
  * Formspec: add hypertext[] element (pyrollo)
  * Formspec: animated_image[] (Df458, kilbith)
  * Make clipping of formspec elements more consistent (Df458)
  * Remove outdated field_close_on_enter[] warnings
    in element parameters (SmallJoker)
  * Fix mouse events sent to wrong GUI elements
    when dragging (sfan5)
  * Restore intuitive click-through behaviour (DS)
- Enhancements:
  * Wear out tools on punch (sfan5)
  * Tunnels: Completely disable generation
    when 'cave width' &gt;= 10.0 (paramat)
  * Randomwalk cave liquids:
    Remove deprecated 'lava depth' (paramat)
  * Automatically enable the mod's dependencies
    in the world config menu (HybridDog)
  * Clean up craft replacements docs (pauloue)
  * Falling nodes: add missing support for light sources,
    most drawtypes, and paramtype2s (Wuzzy2)
  * Remove legacy flat-file map code
    and documentation (random-geek)
  * Fix packet receiving in server and client (sfan5)
  * Key settings: Cancel with escape,
    clear with delete (SmallJoker)
- Script API / Modding:
  * CSM: Introduce get_modpath() (sfan5)
  * CSM: Remove non-functional minetest.get_day_count() (sfan5)
  * Add z-index management to HUD (pyrollo)
  * Add table.key_value_swap and table.shuffle (HybridDog)
  * Map download:
    Escape ':' to '_' (NTFS/FAT* systems) (Montandalar)
  * Settings: Add get_flags API for mapgen flags (SmallJoker)
  * Improve minetest.sound_play with ephemeral sounds
    and player exclusion (sfan5)
  * Reworked validity checks for entities (sfan5)
  * Documentation: Add advice on lifetime of ObjectRefs (sfan5)
  * Allow texture modifiers in hotbar textures (Warr1024)
  * Nodes with torchlike drawtype and custom visual_scale now are
    rendered attached to surface instead of being centered (Wuzzy2)
  * Add documentation of VoxelArea 'ystride', 'zstride' (paramat)
  * Lua API: Document HP, breath and damage limits (SmallJoker)
  * Various documentation improvements (Wuzzy2)
  * CSM: Corrections to client_lua_api.txt (sfan5)
  * Make minetest.item_place_node return position
    of placed node (Bluebird)
  * Call on_secondary_use when object is right-clicked (sfan5)
  * CSM: Various fixes (sfan5)
  * Many pathfinder bugfixes and improvements (Wuzzy2)
    + Fix failure to find path
    if start or end pos is over air (Wuzzy2)
    + Fix very broken implementation of A* search (Wuzzy2)
    + No longer jump through solid nodes (Wuzzy2)
    + Return nil if start or end pos is solid (Wuzzy2)
  * New set_sky, set_sun, set_moon and set_stars (Jordach)
  * Secure and document minetest.deserialize() (luk3yx)
  * minetest.get_content_id: throw error
    for unknown nodes (HybridDog)
- Misc / Build:
  * Don't install fonts on ENABLE_CLIENT=0 configurations (sfan5)
  * Fix memleaks in formspecs (SmallJoker)
  * Run luacheck in travis, add luacheck (rubenwardy)
  * Various build issue fixes (Clang, Travis CI) (sfan5)</changelog>
  <changelog author="Mia Herkt &lt;mia@0x0.st&gt;" date="1592827200">- spec-cleaner
- Make sure the package does not build with bundled libraries
- Add minetest-fix-luajit-include-path.patch
  Fixes the FindLuaJIT CMake module so it also looks for the
  moonjit include path</changelog>
  <changelog author="andy great &lt;andythe_great@pm.me&gt;" date="1594641600">- Update to version 5.3.0.
  (see https://dev.minetest.net/Changelog#5.2.0_.E2.86.92_5.3.0)
  * Formspec improvements, including a scrolling GUI element
  * Performance improvements to the Server and API
  * Many bug fixes and small features
- Now requires desktop-file-utils version &gt;= 0.25.</changelog>
  <changelog author="Dirk Stoecker &lt;opensuse@dstoecker.de&gt;" date="1599566400">- added patch to build .desktop file without 'PrefersNonDefaultGPU'
  option on Leap 15.2 and below (old-desktopfile-standard.patch)
- removed conditional build for very old openSUSE/SLES versions
- add minetest-runtime provides</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1614168000">- Fixed build on current Factory (checking symlinks)
- Update to version 5.4.0
  * Full log: https://dev.minetest.net/Changelog#5.3.0_.E2.86.92_5.4.0
  * Removed support for bumpmapping, generated normal maps
    and parallax occlusion
  * By default, the crosshair will now change to an "X" when
    pointing to objects
  * Prevent players accessing inventories of other players
  * Prevent interacting with items out of the hotbar
  * Prevent players from being able to modify ItemStack meta</changelog>
  <changelog author="Maximilian Trummer &lt;opensuse@trummer.xyz&gt;" date="1618833600">- Update to version 5.4.1:
  * This is a maintenance release based on 5.4.0,
    it contains bugfixes but no new features.
  * Apply 'old-desktopfile-standard.patch' to Leap 15.3 as well.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1622548800">- Add GCC 11 compatibility patch:
  * 0001-Fix-build-for-newer-versions-of-GCC-11246.patch</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633521600">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * minetest@.service</changelog>
  <changelog author="Simon Vogl &lt;simon.vogl@gmx.net&gt;" date="1659182400">- Drop 0001-Fix-build-for-newer-versions-of-GCC-11246.patch as it is merged upstream
- Only apply minetest-fix-luajit-include-path.patch on openSUSE Leap as TW versions do not require it any more.
- Switch to from system irrlicht to IrrlichtMt library version 1.9.0mt5
- Don't purge the bundled bitop library
- Add new libzstd build dependency
- Update to version 5.5.0 &amp; 5.5.1:
  * Full log for version 5.5.0: https://dev.minetest.net/Changelog#5.4.0_.E2.86.92_5.5.0
  * This release switches from Irrlicht to our own fork called IrrlichtMt.
  * Full log for version 5.5.1: https://dev.minetest.net/Changelog#5.5.0_.E2.86.92_5.5.1
  * This is a maintenance release based on 5.5.0, it contains bugfixes but no new features.</changelog>
  <changelog author="Dmitriy Perlow &lt;dap.darkness@gmail.com&gt;" date="1660564800">- Introduced mbranch-protection=none CXX flag to resolve bnc#1193141
  (aarch64).</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1660824000">- Update to version 5.6.0
  * Fix CVE-2022-35978 ( boo#1202423 ): Mod scripts can escape
    sandbox in single player mode
  * `name` in game.conf is deprecated for the game title, use `title` instead
  * Add depth sorting for node faces
  * Various bug fixes
  * Full changes: https://dev.minetest.net/Changelog#5.5.0_.E2.86.92_5.6.0</changelog>
</package>
<package pkgid="e5a546cf7f30f34e03c2cdca149c75c8bd115e1cd62006baa23d6618938ee168" name="minetestserver" arch="x86_64">
  <version epoch="0" ver="5.6.0" rel="bp154.2.3.5"/>
  <changelog author="werner@suse.de" date="1520596800">- Use latest libpng</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1533643200">- Update to version 0.4.17.1:
  * Fix boo#1103904
  * Fix crash caused by log_deprecated
    and the use of deprecated functions
  * Fix crash on pause menu when pressing up/down keys
- Remove use-pkg-config-to-find-luajit.patch: fixed upstream.
- Update to version 0.4.17:
  * Dungeons: Mostly fix missing stair nodes
  * Cavegen: Fix variable typo that broke mgvalleys large cave
    distribution
  * Prevent translating empty strings
  * upright_sprite: Fix texture position for players
  * core.rotate_node: Do not trigger after_place_node for mod
    compatibility
  * Generate Notifier: Clear events once after all
    'on generated' functions
  * Fix liquid post effect colour behaviour in third person view
  * Delete world dialog: Move buttons to avoid
    double click deletion
  * Fix /shutdown countdown parameter
  * Check argument types inside MetaDataRef Lua API
  * dropped items and falling nodes: Delete in 'ignore' nodes
  * Fix off-by-one in log output line length
  * Fix buffer parameter not working in getMapSlice()
  * Fix rounding error in g/set_node caused by truncation to float
  * Fix dancing text in text input fields
  * Fix undefined behaviour on getting pointer to data in
    empty vector
  * Fix wrong scrolling in text areas
  * Damage: Remove damage ignore timer due to abuse potential
  * Ensure no item stack is being held before crafting
  * Several documentation additions, improvements
  * core.rotate_node: Run callbacks like with any
    regular placed node
  * Biome dust node: Only place on 'walkable' cubic
    non-liquid drawtypes
  * Fix issue Minetest crash when custom font path is not exist
  * Fix Settings tab formspec alignment
  * Do not scale texture unless necessary
  * Fix day_night_ratio_do_override not being initialised
    server-side
  * Fix default item callbacks to work with nil users
  * Prevent from crafting non-existent, unknown items
  * Profiler: Fix var args not being passed to
    callback register function
  * Fix attached particle spawners far from spawn
  * Localplayer: Fix disable_jump effect and standing node position
  * Fix blocks written by vmanip not being marked as modified
  * Fix Rotate Node Placement
  * ServerEnv: Clean up object lifecycle handling
  * Fix the core.wrap_text function
  * Fix empty legacy meta being persisted
  * Statbars: fix incorrect half-images in non-standard
    orientations
  * serialize: use a temporary for SerializeException
  * Fix player coordinate rounding in collisionMoveSimple()
  * Fix for empty key/value when reading item string with
    wear but no metadata
  * Fix render order of overlays
  * Fix console resize issue when maximising game window
  * Fix console not being properly resized after
    window size changed
  * Verify HudSetParams input when hotbar textures are set
  * (Re)spawn players within 'mapgen_limit'
  * Fix sending color codes to clients that don't support them</changelog>
  <changelog author="mvetter@suse.com" date="1551787200">- Update to 5.0.0
  * 5.0.0 is a breaking release and not compatible to the 0.4 series.
  * See changes: https://dev.minetest.net/Changelog#0.4.16_.E2.86.92_5.0.0
- Remove shared_mods.patch: global mods possible by default now.
  See builtin/mainmenu/pkgmgr.lua
- bsc#1127911: is tracking whitelisting of `minetest` user/group
  in rpmlint</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1554120000">- bsc#1131077: BuildRequire postgresql-server-devel as a workaround
  for CMake which explicitly looks for server headers even if just
  building a client application.
  CAUTION: This workaround should not blindly be copied to other
  packages that fail to build with PostgreSQL 11. It is always
  preferrable to convert the package to use pkg-config for linking
  against libpq instead of pulling in postgresql-server-devel
  to have pg_config. If in doubt, please talk to max@suse.com
  before applying such a workaround.</changelog>
  <changelog author="mvetter@suse.com" date="1554206400">- Update to 5.0.1:
  * Fix detached inventory serialisation
  * Fix texture rotation for wallmounted nodeboxes
  * Fix build failing on some compilers
  * Warn about issues with the num_emerge_threads setting
  * HPChange Reason: Fix issues with custom reasons
  * Fix FreeBSD build by handling std::time_t properly
  * Confirm registration GUI: Remove positional strings to fix Windows bug
  * Prevent multi-line chat messages server-side
  * httpfetch: Disable IPv6 here too if requested by settings</changelog>
  <changelog author="Maximilian Trummer &lt;opensuse@trummer.xyz&gt;" date="1570968000">- Update to 5.1.0:
  * Mapgen Carpathian: Add optional rivers (paramat)
  * Move more dungeon parameter selection to mapgens (paramat)
  * Dungeons: Make multiple large rooms possible (paramat)
  * Change pitch fly binding to 'P', add to change keys menu (rubenwardy)
  * Android settings: Use 'simple' leaves instead of 'fancy' (paramat)
  * Fix 3rd person selection range (srifqi)
  * Make scrollbars' bar variable in size (stujones11)
  * Damage: Play no damage sound when immortal (SmallJoker)
  * Increase upper limit of display_gamma to 10 (ClobberXD)
  * Optimize and unify mesh processing (Vitaliy)
  * Re-order mapgens in mainmenu and 'all settings' mapgen selection (paramat)
  * Scrollbars: Move directly to clicked pos if clicked into tray (DS-Minetest)
  * Fix broken attachments on join (SmallJoker)
  * Fix inventory_overlay for nodes without inventory_image (DS-Minetest)
  * Better F6 profiler (SmallJoker)
  * Fix minimap markers (theviper121)
  * Textures: Load base pack only as last fallback (SmallJoker)
  * Add /help formspec for commands and privileges (SmallJoker)
  * Lua API: Add link to Minetest Modding Book (ClobberXD)
  * Force item entities out of solid nodes (sfan5, based on Wuzzy`s work)
  * Lua API: Various fixes (DS-Minetest, SmallJoker)
  * Rename "private messages" to "direct messages" (Calinou)
  * Automatically enable depending mods in the dialogue (HybridDog)
  * All settings: Fix missing flags checkboxes (srifqi)
  * Various network performance improvements (osjc)
  * Force send a mapblock to a player (sofar)
  * Revert ItemStacks being limited to the 'stack_size' value (ClobberXD)
  * Save forceloaded blocks file periodically (Thomas Rudin)
  * Improve ABM time budget handling (lhofhansl)
  * Group "immortal" also protects players from damage (Wuzzy)
  * Optimize usage of TOSERVER_GOTBLOCKS packet (sfan5)
  * Network: several bugfixes (sfan5)
  * Mapgen::spreadLight performance improvement (DS-Minetest)
  * Improve occlusion culling in corridors with additional check (sfan5)
  * Inventory: Delay dirty lists, and send changes incrementally (SmallJoker)
  * Other inventory bugfixes (sfan5, SmallJoker)
  * Move debug.txt after it grows too big (HybridDog)
  * Trigger on_place in many situations even if prediction failed (DS-Minetest)
  * Punchwear (improved) (sfan5)
  * Add deprecation warnings for ObjectRef:get/set_attribute (ClobberXD)
  * Nodedef 'drop' documentation: Improve (Paramat)
  * Mark tool filtering in node drop documentation as deprecated (Paramat)
  * Add node field to PlayerHPChangeReason table (pauloue)
  * Don't call on_hpchange callbacks if HP hasn't changed (ClobberXD)
  * Add disable_jump to liquids and ladders (SmallJoker)
  * Add support for 9-sliced backgrounds (rubenwardy)
  * Add compatible, consistent coordinate system to FormSpecs (v-rob)
  * Document ObjectRef:remove under Lua entity (ClobberXD)
  * Docs: Clarify where to check for 'protection_bypass' (SmallJoker)
  * Add vector.dot and vector.cross (HybridDog)
  * Improve documentation of mapgen aliases (Paramat)
  * Remove debug.upvaluejoin to prevent leak of insecure environment (fluxionary)
  * Fix previously crashing minetest.get_craft_result() (pauloue)
  * Allow toolcaps to override the built-in times for dig_immediate (sfan5)
  * Formspec styling using style[] (rubenwardy)
  * Customizable chat message format (ClobberXD)
  * Velocity modifiers for players (sfan5)
  * Fix some issues with minetest.clear_craft (pauloue)
  * Add function `minetest.read_schematic` (paly2)
  * Formspecs: formspec_version[] element (SmallJoker)
  * Per-player FOV overrides and multipliers (ClobberXD)
  * Find PostgreSQL correctly (adrido)
  * Add compatibility to vcpkg buildsystem (adrido)
  * Android: Use system provided path for default TMPFolder setting (stujones11)
  * Fix handling of --color and --worldlist command line arguments (mmattes)
  * Unified OpenGL ES support (sfan5)</changelog>
  <changelog author="Simon Puchert &lt;simonpuchert@alice.de&gt;" date="1574424000">- Explicitly require libXxf86vm-devel.</changelog>
  <changelog author="Maximilian Trummer &lt;opensuse@trummer.xyz&gt;" date="1579348800">- Update to version 5.1.1
  * See https://dev.minetest.net/Changelog#5.1.0_.E2.86.92_5.1.1
  * Fix player-bound sound playback (SmallJoker)
  * Fix item eat sound not played if last item (Wuzzy2)
  * Formspecs: Reset version number on rebuild (SmallJoker)
  * Rework packet receiving in ServerThread (sfan5)
  * Fix core.chat_format_message crashes (ClobberXD)
  * Fix spaces breaking formspec_version[] tag (rubenwardy)
  * Fix find_path for newer jsoncpp installations (vilhelmgray)
  * Update translations</changelog>
  <changelog author="Maximilian Trummer &lt;opensuse@trummer.xyz&gt;" date="1579348801">- build with spatialindex-devel, this speeds up AreaStores, see
  https://github.com/minetest/minetest#cmake-options</changelog>
  <changelog author="Maximilian Trummer &lt;opensuse@trummer.xyz&gt;" date="1586174400">- Update to version 5.2.0
- See https://dev.minetest.net/Changelog#5.1.0_.E2.86.92_5.2.0
- Client / Audiovisuals:
  * Fix alpha blending in texture modifiers (Warr1024)
  * Make natural night light as bright as MT 0.4.16 (paramat)
  * Shader fixes (lhofhansl, SmallJoker)
  * Clean up font caching, fix bitmap fonts (SmallJoker)
  * Waves generated with Perlin-type noise #8994 (lhofhansl)
  * Attachments: Fix glitches after detach (SmallJoker)
  * Let node 'place' and 'dug' sounds be heard
    by other players (sfan5)
  * Fix weird looking liquid source (Wuzzy2)
  * Basic model shading (dcbrwn)
  * Improve arm inertia animations (kilbith)
- GUI improvements:
  * Add visual feedback for button states (Df458)
  * Formspec: draw order and clipping for all elements (DS)
  * Refactor internal button styling/rendering code (Df458')
  * Formspec: Fix clicking on tooltip-obstructed elements (DS)
  * Formspec: change cursor on fields and co. (DS)
  * Various new formspec bug fixes (SmallJoker)
  * Formspec: Add 9-slice background support
    to button elements (Df458)
  * Formspec: add hypertext[] element (pyrollo)
  * Formspec: animated_image[] (Df458, kilbith)
  * Make clipping of formspec elements more consistent (Df458)
  * Remove outdated field_close_on_enter[] warnings
    in element parameters (SmallJoker)
  * Fix mouse events sent to wrong GUI elements
    when dragging (sfan5)
  * Restore intuitive click-through behaviour (DS)
- Enhancements:
  * Wear out tools on punch (sfan5)
  * Tunnels: Completely disable generation
    when 'cave width' &gt;= 10.0 (paramat)
  * Randomwalk cave liquids:
    Remove deprecated 'lava depth' (paramat)
  * Automatically enable the mod's dependencies
    in the world config menu (HybridDog)
  * Clean up craft replacements docs (pauloue)
  * Falling nodes: add missing support for light sources,
    most drawtypes, and paramtype2s (Wuzzy2)
  * Remove legacy flat-file map code
    and documentation (random-geek)
  * Fix packet receiving in server and client (sfan5)
  * Key settings: Cancel with escape,
    clear with delete (SmallJoker)
- Script API / Modding:
  * CSM: Introduce get_modpath() (sfan5)
  * CSM: Remove non-functional minetest.get_day_count() (sfan5)
  * Add z-index management to HUD (pyrollo)
  * Add table.key_value_swap and table.shuffle (HybridDog)
  * Map download:
    Escape ':' to '_' (NTFS/FAT* systems) (Montandalar)
  * Settings: Add get_flags API for mapgen flags (SmallJoker)
  * Improve minetest.sound_play with ephemeral sounds
    and player exclusion (sfan5)
  * Reworked validity checks for entities (sfan5)
  * Documentation: Add advice on lifetime of ObjectRefs (sfan5)
  * Allow texture modifiers in hotbar textures (Warr1024)
  * Nodes with torchlike drawtype and custom visual_scale now are
    rendered attached to surface instead of being centered (Wuzzy2)
  * Add documentation of VoxelArea 'ystride', 'zstride' (paramat)
  * Lua API: Document HP, breath and damage limits (SmallJoker)
  * Various documentation improvements (Wuzzy2)
  * CSM: Corrections to client_lua_api.txt (sfan5)
  * Make minetest.item_place_node return position
    of placed node (Bluebird)
  * Call on_secondary_use when object is right-clicked (sfan5)
  * CSM: Various fixes (sfan5)
  * Many pathfinder bugfixes and improvements (Wuzzy2)
    + Fix failure to find path
    if start or end pos is over air (Wuzzy2)
    + Fix very broken implementation of A* search (Wuzzy2)
    + No longer jump through solid nodes (Wuzzy2)
    + Return nil if start or end pos is solid (Wuzzy2)
  * New set_sky, set_sun, set_moon and set_stars (Jordach)
  * Secure and document minetest.deserialize() (luk3yx)
  * minetest.get_content_id: throw error
    for unknown nodes (HybridDog)
- Misc / Build:
  * Don't install fonts on ENABLE_CLIENT=0 configurations (sfan5)
  * Fix memleaks in formspecs (SmallJoker)
  * Run luacheck in travis, add luacheck (rubenwardy)
  * Various build issue fixes (Clang, Travis CI) (sfan5)</changelog>
  <changelog author="Mia Herkt &lt;mia@0x0.st&gt;" date="1592827200">- spec-cleaner
- Make sure the package does not build with bundled libraries
- Add minetest-fix-luajit-include-path.patch
  Fixes the FindLuaJIT CMake module so it also looks for the
  moonjit include path</changelog>
  <changelog author="andy great &lt;andythe_great@pm.me&gt;" date="1594641600">- Update to version 5.3.0.
  (see https://dev.minetest.net/Changelog#5.2.0_.E2.86.92_5.3.0)
  * Formspec improvements, including a scrolling GUI element
  * Performance improvements to the Server and API
  * Many bug fixes and small features
- Now requires desktop-file-utils version &gt;= 0.25.</changelog>
  <changelog author="Dirk Stoecker &lt;opensuse@dstoecker.de&gt;" date="1599566400">- added patch to build .desktop file without 'PrefersNonDefaultGPU'
  option on Leap 15.2 and below (old-desktopfile-standard.patch)
- removed conditional build for very old openSUSE/SLES versions
- add minetest-runtime provides</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1614168000">- Fixed build on current Factory (checking symlinks)
- Update to version 5.4.0
  * Full log: https://dev.minetest.net/Changelog#5.3.0_.E2.86.92_5.4.0
  * Removed support for bumpmapping, generated normal maps
    and parallax occlusion
  * By default, the crosshair will now change to an "X" when
    pointing to objects
  * Prevent players accessing inventories of other players
  * Prevent interacting with items out of the hotbar
  * Prevent players from being able to modify ItemStack meta</changelog>
  <changelog author="Maximilian Trummer &lt;opensuse@trummer.xyz&gt;" date="1618833600">- Update to version 5.4.1:
  * This is a maintenance release based on 5.4.0,
    it contains bugfixes but no new features.
  * Apply 'old-desktopfile-standard.patch' to Leap 15.3 as well.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1622548800">- Add GCC 11 compatibility patch:
  * 0001-Fix-build-for-newer-versions-of-GCC-11246.patch</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633521600">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * minetest@.service</changelog>
  <changelog author="Simon Vogl &lt;simon.vogl@gmx.net&gt;" date="1659182400">- Drop 0001-Fix-build-for-newer-versions-of-GCC-11246.patch as it is merged upstream
- Only apply minetest-fix-luajit-include-path.patch on openSUSE Leap as TW versions do not require it any more.
- Switch to from system irrlicht to IrrlichtMt library version 1.9.0mt5
- Don't purge the bundled bitop library
- Add new libzstd build dependency
- Update to version 5.5.0 &amp; 5.5.1:
  * Full log for version 5.5.0: https://dev.minetest.net/Changelog#5.4.0_.E2.86.92_5.5.0
  * This release switches from Irrlicht to our own fork called IrrlichtMt.
  * Full log for version 5.5.1: https://dev.minetest.net/Changelog#5.5.0_.E2.86.92_5.5.1
  * This is a maintenance release based on 5.5.0, it contains bugfixes but no new features.</changelog>
  <changelog author="Dmitriy Perlow &lt;dap.darkness@gmail.com&gt;" date="1660564800">- Introduced mbranch-protection=none CXX flag to resolve bnc#1193141
  (aarch64).</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1660824000">- Update to version 5.6.0
  * Fix CVE-2022-35978 ( boo#1202423 ): Mod scripts can escape
    sandbox in single player mode
  * `name` in game.conf is deprecated for the game title, use `title` instead
  * Add depth sorting for node faces
  * Various bug fixes
  * Full changes: https://dev.minetest.net/Changelog#5.5.0_.E2.86.92_5.6.0</changelog>
</package>
<package pkgid="3e226a5169c4801e37ddaf02d5f5c7c353846fcf028a65b5772c6b29cffd8411" name="multimon-ng" arch="aarch64">
  <version epoch="0" ver="1.2.0" rel="bp154.2.3.1"/>
  <changelog author="mardnh@gmx.de" date="1421236800">- Update to version 0.0.0.git1417245058.538a758:
  + Add FMS decoder by copying the CLIP decoder
  + Add forgotten files to project file
  + Rename file
  + Fix variable naming ...
  + Avoid duplicate function naming ...
  + Avoid duplicate function naming ...
  + Avoid duplicate function naming ...
  + Make the FMS decoder basically work
  + Fix bit inversion
  + Use one bit less for synchronisation
  + Rewrite the rest to reverse bit direction and make output a little more verbose
  + Use verbosity levels in a sane way and make output more useful
  + Remove FMS gen
  + Really revert gen* stuff
  + Also revert unintended changes in multimon.h
  + expanded a comment
  + Fix compilation error
  + Add a basic CRC check (no automatic data correction on CRC errors yet
  + Prepare for correction on wrong CRC
  + Remove no longer needed parameter
  + Implement fixing one bit errors (assuming the CRC is correct?)
  + multimon-ng: added build for building with cmake</changelog>
  <changelog author="mardnh@gmx.de" date="1431864000">- Update to version 0.0.0.git1431688037.4cc984f:
  + Update fms.c</changelog>
  <changelog author="mardnh@gmx.de" date="1447070400">- Update to version 1.1.0.git1447073843.04847c5:
  + Add support for FLEX pager protocol to multimon-ng
  + Added FLEX to list of supported protocols in README
  + Corrected sign of slicer
  + Tuned FLEX locking params to avoid lock on POC1200
  + Corrected long integer declarations
  + Fix include for X11 on FreeBSD
  + updated readme</changelog>
  <changelog author="mardnh@gmx.de" date="1457006400">- Update to version 1.1.0.git1457005494.6d75ea1:
  + fixed dumpcsv warning and removed superfluous includes</changelog>
  <changelog author="mardnh@gmx.de" date="1472385600">- Update to version 1.1.0.git1472378460.e88b22f:
  * Basic fixes to get FLEX decoder working for 3200 baud.
  * Clean up the FLEX decoder a little bit to work on 32-bit targets.
  * Fix failed inlinings resulting in linker errors
  * Fallback if __builtin_popcount isn't available
  * White Space: replace spaces with tabs</changelog>
  <changelog author="mardnh@gmx.de" date="1490184000">- Update to version 1.1.0.git1489481434.9408b02:
  * Update fms.c
  * FLEX: Fix type errors on aarch64
  * Fix pulse-simple linking to find_library() it first in case it's not in default search path</changelog>
  <changelog author="mardnh@gmx.de" date="1500379200">- Update to version 1.2.0+git.20170718:
  * Adapting vehicle-id from dec to hex
  * Update Flex Code
  * Fixed handling of Numeric Only messages
  * Version number and Group Messaging (fix)
  * Added Debugging, removed multiple loops
  * Version rolled, added debugging and improved CPU usage slightly
  * Group Message fix
  * Updated demod_flex.c (Changed GPN back to ALN)
  * add timestamp option
  * add usage descritpion for time stamp option
  * simplify code and remove buffers for timestamps
  * cleanup</changelog>
  <changelog author="mardnh@gmx.de" date="1504267200">- Update to version 1.2.0+git.20170901:
  * Add --label / -l which prefixes lines with text
  * Fix indent.
  * Just store the label pointer rather that allocating memory etc.
  * Print label even when --timestamp isn't used.
  * without make install, buildroot breaks..
  * Fixed --label implementation
- Remove patch:
  * multimon-ng-makefile-add-make-install.diff (fixed upstream)</changelog>
  <changelog author="mardnh@gmx.de" date="1506859200">- Update to version 1.3.0+git.20170901:
  * Update Flex Code
  * Fixed handling of Numeric Only messages
  * Version number and Group Messaging (fix)
  * Added Debugging, removed multiple loops
  * Version rolled, added debugging and improved CPU usage slightly
  * Group Message fix
  * Updated demod_flex.c (Changed GPN back to ALN)
  * simplify code and remove buffers for timestamps
  * cleanup</changelog>
  <changelog author="mardnh@gmx.de" date="1508500800">- Update to version 1.3.0+git.20171016:
  * flex: don't drop first message characters in alphanumeric parsing
  * fix compilation warnings
  * Issue #78 - Found a problem in the length detection sequence, modified the if statement to ensure the message length is only checked for Aplha messages, the other types calculate thier length while decoding
  * Added version info to the top of the demod_flex.c file after the previous updates to the code. I should have done it a while ago. see last commits for the actual updates.
  * Change debug level on Found Long address message to be 4, outside of the normal range as only I need it at the moment..
  * An issue with group messaging has been identified, the long address handling seems to be hit and miss. modified the demod_flex.c code to ignore the flag while decoding gorup messages
  * Fixed CMake build, bumped version and updated README.
  * Found a code flow issue (identified by: bertinholland issue #74 within EliasOenal's master multimon-ng branch) I was checking for the end of the message block on group messages before splitting the message, therefore incorrectly identified the end block as an Invlaid OFfset.
  * Add sample script which can decode multiple pager channels in parallel.
  * work in progress
  * code to demodulate X10RF signals</changelog>
  <changelog author="mpluskal@suse.com" date="1513598400">- Update dependencies</changelog>
  <changelog author="mardnh@gmx.de" date="1522670400">- Update to version 1.1.5+git.20180402:
  * Implemented chzchzchz's fix for 'processing unfragmented FLEX messages, multimon-ng produces corrupted messages'
  * x10: fix various compiler warnings
  * Revert "Issue #78 - Found a problem in the length detection sequence, modified the if statement to ensure the message length is"
  * Revert "Revert "Issue #78 - Found a problem in the length detection sequence, modified the if statement to ensure the message length is""
  * Issue #87 created by bertinhollan:
  * fix for EAS issue #94
  * silenced debug message
  * Comment out includes for sys/wait and sys/resource
  * Fix event polling loop with SCOPE demodulator
  * cleaned up unused x10 includes
  * version 1.1.5</changelog>
  <changelog author="mardnh@gmx.de" date="1527854400">- Update to version 1.1.5+git.20180527:
  * Restore FSF copyright notices on win32_getopt.[ch]
  * Version 0.8.7v (11 APR 2018)
  * Modification (to this file) made by Bruce Quinton and Rob0101
    (as seen on github: https://github.com/rob0101)
  * Issue *95 created by rob0101: '-a FLEX dropping first character
    of some message on regular basis'
  * Implemented Rob0101's suggestion of K, F and C flags to indicate
    the message fragmentation:
    'K' message is complete and O'K' to display to the world.
    'F' message is a 'F'ragment and needs a 'C'ontinuation message
    to complete it.
    Message = Fragment + Continuation  *         'C' message is a
    'C'ontinuation of another fragmented message
  * I missed a null terminator on the 'Message' array and therefore
    was printing garbage to the output. Fixed now!
  * Addressed issue #101: group messaging misbehaving when the
    message frame is a corrupt packet.
  * Version 0.9.0v (22 May 2018) Modification (to this file) made
    by Bruce Quinton (zanoroy@gmail.com) - Addded Define at top of
    file to modify the way missed group messages are reported in
    the debug output (default is 1; report missed capcodes on the
    same line) REPORT_GROUP_CODES   1 // Report each cleared faulty
    group capcode : 0 = Each on a new line; 1 = All on the same line;</changelog>
  <changelog author="mardnh@gmx.de" date="1539777600">- Update to version 1.1.6+git.20181017:
  * version 1.1.6
  * Add a stub replacement for BCHCode.c
  * Restore copyright notice from bch3121.c
  * Restore FSF notice on the FLEX decoder derived from GNU Radio</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1542542400">- Grammar fix in summary.</changelog>
  <changelog author="mardnh@gmx.de" date="1547553600">- Update to version 1.1.7+git.20190115:
  * version 1.1.7
  * Fix typo
  * Fix frament idetification
  * Add a charset option for POCSAG demodulators</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1562068800">- Update to new upstream release 1.1.8
  * POCSAG: Support for the Swedish charset, as well as smaller
    fixes. The decoder now by default detects the message type
    according to the POCSAG standard, use "-f auto" to enable the
    old behaviour of heuristically detecting the type.
  * FLEX: Numeric messages now won't have spaces stripped anymore.
  * DTMF: Filter false positives.</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1600776000">- Update to new upstream release 1.1.9
  * multimon-ng now has a man page, let's try to keep it updated.
  * FLEX: Changes to group messages and delimiters.
  * FMS: Fixed a problem with the direction of telegrams.
  * POCSAG: Support for the Slovenian charset.</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1671796800">- Update to new upstream release 1.2.0
  * Separated FLEX and FLEX_NEXT. The former is identical to 1.1.9,
    while FLEX_NEXT gained new features, as well as known
    regressions. (See #168)
  * Fix CVE-2020-36619 (boo#1206542)
  * Several smaller POCSAG fixes.
  * Fix for opening large wav files with improper header.</changelog>
</package>
<package pkgid="f857d0fd65df35930d65f92f3063dc3eedc19d45ef8670e7e166e2bb7d1a0422" name="multimon-ng" arch="i586">
  <version epoch="0" ver="1.2.0" rel="bp154.2.3.1"/>
  <changelog author="mardnh@gmx.de" date="1421236800">- Update to version 0.0.0.git1417245058.538a758:
  + Add FMS decoder by copying the CLIP decoder
  + Add forgotten files to project file
  + Rename file
  + Fix variable naming ...
  + Avoid duplicate function naming ...
  + Avoid duplicate function naming ...
  + Avoid duplicate function naming ...
  + Make the FMS decoder basically work
  + Fix bit inversion
  + Use one bit less for synchronisation
  + Rewrite the rest to reverse bit direction and make output a little more verbose
  + Use verbosity levels in a sane way and make output more useful
  + Remove FMS gen
  + Really revert gen* stuff
  + Also revert unintended changes in multimon.h
  + expanded a comment
  + Fix compilation error
  + Add a basic CRC check (no automatic data correction on CRC errors yet
  + Prepare for correction on wrong CRC
  + Remove no longer needed parameter
  + Implement fixing one bit errors (assuming the CRC is correct?)
  + multimon-ng: added build for building with cmake</changelog>
  <changelog author="mardnh@gmx.de" date="1431864000">- Update to version 0.0.0.git1431688037.4cc984f:
  + Update fms.c</changelog>
  <changelog author="mardnh@gmx.de" date="1447070400">- Update to version 1.1.0.git1447073843.04847c5:
  + Add support for FLEX pager protocol to multimon-ng
  + Added FLEX to list of supported protocols in README
  + Corrected sign of slicer
  + Tuned FLEX locking params to avoid lock on POC1200
  + Corrected long integer declarations
  + Fix include for X11 on FreeBSD
  + updated readme</changelog>
  <changelog author="mardnh@gmx.de" date="1457006400">- Update to version 1.1.0.git1457005494.6d75ea1:
  + fixed dumpcsv warning and removed superfluous includes</changelog>
  <changelog author="mardnh@gmx.de" date="1472385600">- Update to version 1.1.0.git1472378460.e88b22f:
  * Basic fixes to get FLEX decoder working for 3200 baud.
  * Clean up the FLEX decoder a little bit to work on 32-bit targets.
  * Fix failed inlinings resulting in linker errors
  * Fallback if __builtin_popcount isn't available
  * White Space: replace spaces with tabs</changelog>
  <changelog author="mardnh@gmx.de" date="1490184000">- Update to version 1.1.0.git1489481434.9408b02:
  * Update fms.c
  * FLEX: Fix type errors on aarch64
  * Fix pulse-simple linking to find_library() it first in case it's not in default search path</changelog>
  <changelog author="mardnh@gmx.de" date="1500379200">- Update to version 1.2.0+git.20170718:
  * Adapting vehicle-id from dec to hex
  * Update Flex Code
  * Fixed handling of Numeric Only messages
  * Version number and Group Messaging (fix)
  * Added Debugging, removed multiple loops
  * Version rolled, added debugging and improved CPU usage slightly
  * Group Message fix
  * Updated demod_flex.c (Changed GPN back to ALN)
  * add timestamp option
  * add usage descritpion for time stamp option
  * simplify code and remove buffers for timestamps
  * cleanup</changelog>
  <changelog author="mardnh@gmx.de" date="1504267200">- Update to version 1.2.0+git.20170901:
  * Add --label / -l which prefixes lines with text
  * Fix indent.
  * Just store the label pointer rather that allocating memory etc.
  * Print label even when --timestamp isn't used.
  * without make install, buildroot breaks..
  * Fixed --label implementation
- Remove patch:
  * multimon-ng-makefile-add-make-install.diff (fixed upstream)</changelog>
  <changelog author="mardnh@gmx.de" date="1506859200">- Update to version 1.3.0+git.20170901:
  * Update Flex Code
  * Fixed handling of Numeric Only messages
  * Version number and Group Messaging (fix)
  * Added Debugging, removed multiple loops
  * Version rolled, added debugging and improved CPU usage slightly
  * Group Message fix
  * Updated demod_flex.c (Changed GPN back to ALN)
  * simplify code and remove buffers for timestamps
  * cleanup</changelog>
  <changelog author="mardnh@gmx.de" date="1508500800">- Update to version 1.3.0+git.20171016:
  * flex: don't drop first message characters in alphanumeric parsing
  * fix compilation warnings
  * Issue #78 - Found a problem in the length detection sequence, modified the if statement to ensure the message length is only checked for Aplha messages, the other types calculate thier length while decoding
  * Added version info to the top of the demod_flex.c file after the previous updates to the code. I should have done it a while ago. see last commits for the actual updates.
  * Change debug level on Found Long address message to be 4, outside of the normal range as only I need it at the moment..
  * An issue with group messaging has been identified, the long address handling seems to be hit and miss. modified the demod_flex.c code to ignore the flag while decoding gorup messages
  * Fixed CMake build, bumped version and updated README.
  * Found a code flow issue (identified by: bertinholland issue #74 within EliasOenal's master multimon-ng branch) I was checking for the end of the message block on group messages before splitting the message, therefore incorrectly identified the end block as an Invlaid OFfset.
  * Add sample script which can decode multiple pager channels in parallel.
  * work in progress
  * code to demodulate X10RF signals</changelog>
  <changelog author="mpluskal@suse.com" date="1513598400">- Update dependencies</changelog>
  <changelog author="mardnh@gmx.de" date="1522670400">- Update to version 1.1.5+git.20180402:
  * Implemented chzchzchz's fix for 'processing unfragmented FLEX messages, multimon-ng produces corrupted messages'
  * x10: fix various compiler warnings
  * Revert "Issue #78 - Found a problem in the length detection sequence, modified the if statement to ensure the message length is"
  * Revert "Revert "Issue #78 - Found a problem in the length detection sequence, modified the if statement to ensure the message length is""
  * Issue #87 created by bertinhollan:
  * fix for EAS issue #94
  * silenced debug message
  * Comment out includes for sys/wait and sys/resource
  * Fix event polling loop with SCOPE demodulator
  * cleaned up unused x10 includes
  * version 1.1.5</changelog>
  <changelog author="mardnh@gmx.de" date="1527854400">- Update to version 1.1.5+git.20180527:
  * Restore FSF copyright notices on win32_getopt.[ch]
  * Version 0.8.7v (11 APR 2018)
  * Modification (to this file) made by Bruce Quinton and Rob0101
    (as seen on github: https://github.com/rob0101)
  * Issue *95 created by rob0101: '-a FLEX dropping first character
    of some message on regular basis'
  * Implemented Rob0101's suggestion of K, F and C flags to indicate
    the message fragmentation:
    'K' message is complete and O'K' to display to the world.
    'F' message is a 'F'ragment and needs a 'C'ontinuation message
    to complete it.
    Message = Fragment + Continuation  *         'C' message is a
    'C'ontinuation of another fragmented message
  * I missed a null terminator on the 'Message' array and therefore
    was printing garbage to the output. Fixed now!
  * Addressed issue #101: group messaging misbehaving when the
    message frame is a corrupt packet.
  * Version 0.9.0v (22 May 2018) Modification (to this file) made
    by Bruce Quinton (zanoroy@gmail.com) - Addded Define at top of
    file to modify the way missed group messages are reported in
    the debug output (default is 1; report missed capcodes on the
    same line) REPORT_GROUP_CODES   1 // Report each cleared faulty
    group capcode : 0 = Each on a new line; 1 = All on the same line;</changelog>
  <changelog author="mardnh@gmx.de" date="1539777600">- Update to version 1.1.6+git.20181017:
  * version 1.1.6
  * Add a stub replacement for BCHCode.c
  * Restore copyright notice from bch3121.c
  * Restore FSF notice on the FLEX decoder derived from GNU Radio</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1542542400">- Grammar fix in summary.</changelog>
  <changelog author="mardnh@gmx.de" date="1547553600">- Update to version 1.1.7+git.20190115:
  * version 1.1.7
  * Fix typo
  * Fix frament idetification
  * Add a charset option for POCSAG demodulators</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1562068800">- Update to new upstream release 1.1.8
  * POCSAG: Support for the Swedish charset, as well as smaller
    fixes. The decoder now by default detects the message type
    according to the POCSAG standard, use "-f auto" to enable the
    old behaviour of heuristically detecting the type.
  * FLEX: Numeric messages now won't have spaces stripped anymore.
  * DTMF: Filter false positives.</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1600776000">- Update to new upstream release 1.1.9
  * multimon-ng now has a man page, let's try to keep it updated.
  * FLEX: Changes to group messages and delimiters.
  * FMS: Fixed a problem with the direction of telegrams.
  * POCSAG: Support for the Slovenian charset.</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1671796800">- Update to new upstream release 1.2.0
  * Separated FLEX and FLEX_NEXT. The former is identical to 1.1.9,
    while FLEX_NEXT gained new features, as well as known
    regressions. (See #168)
  * Fix CVE-2020-36619 (boo#1206542)
  * Several smaller POCSAG fixes.
  * Fix for opening large wav files with improper header.</changelog>
</package>
<package pkgid="aa3a25fd2db7a00adb3e66cb9fe25bc2eaf327c30d2ccecdff805971ddcd9f17" name="multimon-ng" arch="ppc64le">
  <version epoch="0" ver="1.2.0" rel="bp154.2.3.1"/>
  <changelog author="mardnh@gmx.de" date="1421236800">- Update to version 0.0.0.git1417245058.538a758:
  + Add FMS decoder by copying the CLIP decoder
  + Add forgotten files to project file
  + Rename file
  + Fix variable naming ...
  + Avoid duplicate function naming ...
  + Avoid duplicate function naming ...
  + Avoid duplicate function naming ...
  + Make the FMS decoder basically work
  + Fix bit inversion
  + Use one bit less for synchronisation
  + Rewrite the rest to reverse bit direction and make output a little more verbose
  + Use verbosity levels in a sane way and make output more useful
  + Remove FMS gen
  + Really revert gen* stuff
  + Also revert unintended changes in multimon.h
  + expanded a comment
  + Fix compilation error
  + Add a basic CRC check (no automatic data correction on CRC errors yet
  + Prepare for correction on wrong CRC
  + Remove no longer needed parameter
  + Implement fixing one bit errors (assuming the CRC is correct?)
  + multimon-ng: added build for building with cmake</changelog>
  <changelog author="mardnh@gmx.de" date="1431864000">- Update to version 0.0.0.git1431688037.4cc984f:
  + Update fms.c</changelog>
  <changelog author="mardnh@gmx.de" date="1447070400">- Update to version 1.1.0.git1447073843.04847c5:
  + Add support for FLEX pager protocol to multimon-ng
  + Added FLEX to list of supported protocols in README
  + Corrected sign of slicer
  + Tuned FLEX locking params to avoid lock on POC1200
  + Corrected long integer declarations
  + Fix include for X11 on FreeBSD
  + updated readme</changelog>
  <changelog author="mardnh@gmx.de" date="1457006400">- Update to version 1.1.0.git1457005494.6d75ea1:
  + fixed dumpcsv warning and removed superfluous includes</changelog>
  <changelog author="mardnh@gmx.de" date="1472385600">- Update to version 1.1.0.git1472378460.e88b22f:
  * Basic fixes to get FLEX decoder working for 3200 baud.
  * Clean up the FLEX decoder a little bit to work on 32-bit targets.
  * Fix failed inlinings resulting in linker errors
  * Fallback if __builtin_popcount isn't available
  * White Space: replace spaces with tabs</changelog>
  <changelog author="mardnh@gmx.de" date="1490184000">- Update to version 1.1.0.git1489481434.9408b02:
  * Update fms.c
  * FLEX: Fix type errors on aarch64
  * Fix pulse-simple linking to find_library() it first in case it's not in default search path</changelog>
  <changelog author="mardnh@gmx.de" date="1500379200">- Update to version 1.2.0+git.20170718:
  * Adapting vehicle-id from dec to hex
  * Update Flex Code
  * Fixed handling of Numeric Only messages
  * Version number and Group Messaging (fix)
  * Added Debugging, removed multiple loops
  * Version rolled, added debugging and improved CPU usage slightly
  * Group Message fix
  * Updated demod_flex.c (Changed GPN back to ALN)
  * add timestamp option
  * add usage descritpion for time stamp option
  * simplify code and remove buffers for timestamps
  * cleanup</changelog>
  <changelog author="mardnh@gmx.de" date="1504267200">- Update to version 1.2.0+git.20170901:
  * Add --label / -l which prefixes lines with text
  * Fix indent.
  * Just store the label pointer rather that allocating memory etc.
  * Print label even when --timestamp isn't used.
  * without make install, buildroot breaks..
  * Fixed --label implementation
- Remove patch:
  * multimon-ng-makefile-add-make-install.diff (fixed upstream)</changelog>
  <changelog author="mardnh@gmx.de" date="1506859200">- Update to version 1.3.0+git.20170901:
  * Update Flex Code
  * Fixed handling of Numeric Only messages
  * Version number and Group Messaging (fix)
  * Added Debugging, removed multiple loops
  * Version rolled, added debugging and improved CPU usage slightly
  * Group Message fix
  * Updated demod_flex.c (Changed GPN back to ALN)
  * simplify code and remove buffers for timestamps
  * cleanup</changelog>
  <changelog author="mardnh@gmx.de" date="1508500800">- Update to version 1.3.0+git.20171016:
  * flex: don't drop first message characters in alphanumeric parsing
  * fix compilation warnings
  * Issue #78 - Found a problem in the length detection sequence, modified the if statement to ensure the message length is only checked for Aplha messages, the other types calculate thier length while decoding
  * Added version info to the top of the demod_flex.c file after the previous updates to the code. I should have done it a while ago. see last commits for the actual updates.
  * Change debug level on Found Long address message to be 4, outside of the normal range as only I need it at the moment..
  * An issue with group messaging has been identified, the long address handling seems to be hit and miss. modified the demod_flex.c code to ignore the flag while decoding gorup messages
  * Fixed CMake build, bumped version and updated README.
  * Found a code flow issue (identified by: bertinholland issue #74 within EliasOenal's master multimon-ng branch) I was checking for the end of the message block on group messages before splitting the message, therefore incorrectly identified the end block as an Invlaid OFfset.
  * Add sample script which can decode multiple pager channels in parallel.
  * work in progress
  * code to demodulate X10RF signals</changelog>
  <changelog author="mpluskal@suse.com" date="1513598400">- Update dependencies</changelog>
  <changelog author="mardnh@gmx.de" date="1522670400">- Update to version 1.1.5+git.20180402:
  * Implemented chzchzchz's fix for 'processing unfragmented FLEX messages, multimon-ng produces corrupted messages'
  * x10: fix various compiler warnings
  * Revert "Issue #78 - Found a problem in the length detection sequence, modified the if statement to ensure the message length is"
  * Revert "Revert "Issue #78 - Found a problem in the length detection sequence, modified the if statement to ensure the message length is""
  * Issue #87 created by bertinhollan:
  * fix for EAS issue #94
  * silenced debug message
  * Comment out includes for sys/wait and sys/resource
  * Fix event polling loop with SCOPE demodulator
  * cleaned up unused x10 includes
  * version 1.1.5</changelog>
  <changelog author="mardnh@gmx.de" date="1527854400">- Update to version 1.1.5+git.20180527:
  * Restore FSF copyright notices on win32_getopt.[ch]
  * Version 0.8.7v (11 APR 2018)
  * Modification (to this file) made by Bruce Quinton and Rob0101
    (as seen on github: https://github.com/rob0101)
  * Issue *95 created by rob0101: '-a FLEX dropping first character
    of some message on regular basis'
  * Implemented Rob0101's suggestion of K, F and C flags to indicate
    the message fragmentation:
    'K' message is complete and O'K' to display to the world.
    'F' message is a 'F'ragment and needs a 'C'ontinuation message
    to complete it.
    Message = Fragment + Continuation  *         'C' message is a
    'C'ontinuation of another fragmented message
  * I missed a null terminator on the 'Message' array and therefore
    was printing garbage to the output. Fixed now!
  * Addressed issue #101: group messaging misbehaving when the
    message frame is a corrupt packet.
  * Version 0.9.0v (22 May 2018) Modification (to this file) made
    by Bruce Quinton (zanoroy@gmail.com) - Addded Define at top of
    file to modify the way missed group messages are reported in
    the debug output (default is 1; report missed capcodes on the
    same line) REPORT_GROUP_CODES   1 // Report each cleared faulty
    group capcode : 0 = Each on a new line; 1 = All on the same line;</changelog>
  <changelog author="mardnh@gmx.de" date="1539777600">- Update to version 1.1.6+git.20181017:
  * version 1.1.6
  * Add a stub replacement for BCHCode.c
  * Restore copyright notice from bch3121.c
  * Restore FSF notice on the FLEX decoder derived from GNU Radio</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1542542400">- Grammar fix in summary.</changelog>
  <changelog author="mardnh@gmx.de" date="1547553600">- Update to version 1.1.7+git.20190115:
  * version 1.1.7
  * Fix typo
  * Fix frament idetification
  * Add a charset option for POCSAG demodulators</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1562068800">- Update to new upstream release 1.1.8
  * POCSAG: Support for the Swedish charset, as well as smaller
    fixes. The decoder now by default detects the message type
    according to the POCSAG standard, use "-f auto" to enable the
    old behaviour of heuristically detecting the type.
  * FLEX: Numeric messages now won't have spaces stripped anymore.
  * DTMF: Filter false positives.</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1600776000">- Update to new upstream release 1.1.9
  * multimon-ng now has a man page, let's try to keep it updated.
  * FLEX: Changes to group messages and delimiters.
  * FMS: Fixed a problem with the direction of telegrams.
  * POCSAG: Support for the Slovenian charset.</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1671796800">- Update to new upstream release 1.2.0
  * Separated FLEX and FLEX_NEXT. The former is identical to 1.1.9,
    while FLEX_NEXT gained new features, as well as known
    regressions. (See #168)
  * Fix CVE-2020-36619 (boo#1206542)
  * Several smaller POCSAG fixes.
  * Fix for opening large wav files with improper header.</changelog>
</package>
<package pkgid="f45ab78c79f0b7b1694c341e8e64e17e226661613f11a330fe0b0eef8ff04cdc" name="multimon-ng" arch="s390x">
  <version epoch="0" ver="1.2.0" rel="bp154.2.3.1"/>
  <changelog author="mardnh@gmx.de" date="1421236800">- Update to version 0.0.0.git1417245058.538a758:
  + Add FMS decoder by copying the CLIP decoder
  + Add forgotten files to project file
  + Rename file
  + Fix variable naming ...
  + Avoid duplicate function naming ...
  + Avoid duplicate function naming ...
  + Avoid duplicate function naming ...
  + Make the FMS decoder basically work
  + Fix bit inversion
  + Use one bit less for synchronisation
  + Rewrite the rest to reverse bit direction and make output a little more verbose
  + Use verbosity levels in a sane way and make output more useful
  + Remove FMS gen
  + Really revert gen* stuff
  + Also revert unintended changes in multimon.h
  + expanded a comment
  + Fix compilation error
  + Add a basic CRC check (no automatic data correction on CRC errors yet
  + Prepare for correction on wrong CRC
  + Remove no longer needed parameter
  + Implement fixing one bit errors (assuming the CRC is correct?)
  + multimon-ng: added build for building with cmake</changelog>
  <changelog author="mardnh@gmx.de" date="1431864000">- Update to version 0.0.0.git1431688037.4cc984f:
  + Update fms.c</changelog>
  <changelog author="mardnh@gmx.de" date="1447070400">- Update to version 1.1.0.git1447073843.04847c5:
  + Add support for FLEX pager protocol to multimon-ng
  + Added FLEX to list of supported protocols in README
  + Corrected sign of slicer
  + Tuned FLEX locking params to avoid lock on POC1200
  + Corrected long integer declarations
  + Fix include for X11 on FreeBSD
  + updated readme</changelog>
  <changelog author="mardnh@gmx.de" date="1457006400">- Update to version 1.1.0.git1457005494.6d75ea1:
  + fixed dumpcsv warning and removed superfluous includes</changelog>
  <changelog author="mardnh@gmx.de" date="1472385600">- Update to version 1.1.0.git1472378460.e88b22f:
  * Basic fixes to get FLEX decoder working for 3200 baud.
  * Clean up the FLEX decoder a little bit to work on 32-bit targets.
  * Fix failed inlinings resulting in linker errors
  * Fallback if __builtin_popcount isn't available
  * White Space: replace spaces with tabs</changelog>
  <changelog author="mardnh@gmx.de" date="1490184000">- Update to version 1.1.0.git1489481434.9408b02:
  * Update fms.c
  * FLEX: Fix type errors on aarch64
  * Fix pulse-simple linking to find_library() it first in case it's not in default search path</changelog>
  <changelog author="mardnh@gmx.de" date="1500379200">- Update to version 1.2.0+git.20170718:
  * Adapting vehicle-id from dec to hex
  * Update Flex Code
  * Fixed handling of Numeric Only messages
  * Version number and Group Messaging (fix)
  * Added Debugging, removed multiple loops
  * Version rolled, added debugging and improved CPU usage slightly
  * Group Message fix
  * Updated demod_flex.c (Changed GPN back to ALN)
  * add timestamp option
  * add usage descritpion for time stamp option
  * simplify code and remove buffers for timestamps
  * cleanup</changelog>
  <changelog author="mardnh@gmx.de" date="1504267200">- Update to version 1.2.0+git.20170901:
  * Add --label / -l which prefixes lines with text
  * Fix indent.
  * Just store the label pointer rather that allocating memory etc.
  * Print label even when --timestamp isn't used.
  * without make install, buildroot breaks..
  * Fixed --label implementation
- Remove patch:
  * multimon-ng-makefile-add-make-install.diff (fixed upstream)</changelog>
  <changelog author="mardnh@gmx.de" date="1506859200">- Update to version 1.3.0+git.20170901:
  * Update Flex Code
  * Fixed handling of Numeric Only messages
  * Version number and Group Messaging (fix)
  * Added Debugging, removed multiple loops
  * Version rolled, added debugging and improved CPU usage slightly
  * Group Message fix
  * Updated demod_flex.c (Changed GPN back to ALN)
  * simplify code and remove buffers for timestamps
  * cleanup</changelog>
  <changelog author="mardnh@gmx.de" date="1508500800">- Update to version 1.3.0+git.20171016:
  * flex: don't drop first message characters in alphanumeric parsing
  * fix compilation warnings
  * Issue #78 - Found a problem in the length detection sequence, modified the if statement to ensure the message length is only checked for Aplha messages, the other types calculate thier length while decoding
  * Added version info to the top of the demod_flex.c file after the previous updates to the code. I should have done it a while ago. see last commits for the actual updates.
  * Change debug level on Found Long address message to be 4, outside of the normal range as only I need it at the moment..
  * An issue with group messaging has been identified, the long address handling seems to be hit and miss. modified the demod_flex.c code to ignore the flag while decoding gorup messages
  * Fixed CMake build, bumped version and updated README.
  * Found a code flow issue (identified by: bertinholland issue #74 within EliasOenal's master multimon-ng branch) I was checking for the end of the message block on group messages before splitting the message, therefore incorrectly identified the end block as an Invlaid OFfset.
  * Add sample script which can decode multiple pager channels in parallel.
  * work in progress
  * code to demodulate X10RF signals</changelog>
  <changelog author="mpluskal@suse.com" date="1513598400">- Update dependencies</changelog>
  <changelog author="mardnh@gmx.de" date="1522670400">- Update to version 1.1.5+git.20180402:
  * Implemented chzchzchz's fix for 'processing unfragmented FLEX messages, multimon-ng produces corrupted messages'
  * x10: fix various compiler warnings
  * Revert "Issue #78 - Found a problem in the length detection sequence, modified the if statement to ensure the message length is"
  * Revert "Revert "Issue #78 - Found a problem in the length detection sequence, modified the if statement to ensure the message length is""
  * Issue #87 created by bertinhollan:
  * fix for EAS issue #94
  * silenced debug message
  * Comment out includes for sys/wait and sys/resource
  * Fix event polling loop with SCOPE demodulator
  * cleaned up unused x10 includes
  * version 1.1.5</changelog>
  <changelog author="mardnh@gmx.de" date="1527854400">- Update to version 1.1.5+git.20180527:
  * Restore FSF copyright notices on win32_getopt.[ch]
  * Version 0.8.7v (11 APR 2018)
  * Modification (to this file) made by Bruce Quinton and Rob0101
    (as seen on github: https://github.com/rob0101)
  * Issue *95 created by rob0101: '-a FLEX dropping first character
    of some message on regular basis'
  * Implemented Rob0101's suggestion of K, F and C flags to indicate
    the message fragmentation:
    'K' message is complete and O'K' to display to the world.
    'F' message is a 'F'ragment and needs a 'C'ontinuation message
    to complete it.
    Message = Fragment + Continuation  *         'C' message is a
    'C'ontinuation of another fragmented message
  * I missed a null terminator on the 'Message' array and therefore
    was printing garbage to the output. Fixed now!
  * Addressed issue #101: group messaging misbehaving when the
    message frame is a corrupt packet.
  * Version 0.9.0v (22 May 2018) Modification (to this file) made
    by Bruce Quinton (zanoroy@gmail.com) - Addded Define at top of
    file to modify the way missed group messages are reported in
    the debug output (default is 1; report missed capcodes on the
    same line) REPORT_GROUP_CODES   1 // Report each cleared faulty
    group capcode : 0 = Each on a new line; 1 = All on the same line;</changelog>
  <changelog author="mardnh@gmx.de" date="1539777600">- Update to version 1.1.6+git.20181017:
  * version 1.1.6
  * Add a stub replacement for BCHCode.c
  * Restore copyright notice from bch3121.c
  * Restore FSF notice on the FLEX decoder derived from GNU Radio</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1542542400">- Grammar fix in summary.</changelog>
  <changelog author="mardnh@gmx.de" date="1547553600">- Update to version 1.1.7+git.20190115:
  * version 1.1.7
  * Fix typo
  * Fix frament idetification
  * Add a charset option for POCSAG demodulators</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1562068800">- Update to new upstream release 1.1.8
  * POCSAG: Support for the Swedish charset, as well as smaller
    fixes. The decoder now by default detects the message type
    according to the POCSAG standard, use "-f auto" to enable the
    old behaviour of heuristically detecting the type.
  * FLEX: Numeric messages now won't have spaces stripped anymore.
  * DTMF: Filter false positives.</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1600776000">- Update to new upstream release 1.1.9
  * multimon-ng now has a man page, let's try to keep it updated.
  * FLEX: Changes to group messages and delimiters.
  * FMS: Fixed a problem with the direction of telegrams.
  * POCSAG: Support for the Slovenian charset.</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1671796800">- Update to new upstream release 1.2.0
  * Separated FLEX and FLEX_NEXT. The former is identical to 1.1.9,
    while FLEX_NEXT gained new features, as well as known
    regressions. (See #168)
  * Fix CVE-2020-36619 (boo#1206542)
  * Several smaller POCSAG fixes.
  * Fix for opening large wav files with improper header.</changelog>
</package>
<package pkgid="5758034ca16c6bf3edbde92155fc747ebb239703026e26a43241d7af0da3ff4b" name="multimon-ng" arch="src">
  <version epoch="0" ver="1.2.0" rel="bp154.2.3.1"/>
  <changelog author="mardnh@gmx.de" date="1407758400">- Update to version 0.0.0+git.1396234264.6119707:
  + Compiler warning cleanup
  + pay heed to the quietflg
  + Substituted u_int with unsigned int to avoid posix dependencies
  + FreeBSD fixed
  + ufsk1200 example
  + proper handling of corrupt messages
  + Changed &lt;CORRUPT&gt; tags and moved them to -v2. New POCSAG settings and improvements.
  + parameter -p shows partial decodes. improved type detection heuristic.
  + option to utilize heuristic to prune likely false positive decodes</changelog>
  <changelog author="mardnh@gmx.de" date="1421236800">- Update to version 0.0.0.git1417245058.538a758:
  + Add FMS decoder by copying the CLIP decoder
  + Add forgotten files to project file
  + Rename file
  + Fix variable naming ...
  + Avoid duplicate function naming ...
  + Avoid duplicate function naming ...
  + Avoid duplicate function naming ...
  + Make the FMS decoder basically work
  + Fix bit inversion
  + Use one bit less for synchronisation
  + Rewrite the rest to reverse bit direction and make output a little more verbose
  + Use verbosity levels in a sane way and make output more useful
  + Remove FMS gen
  + Really revert gen* stuff
  + Also revert unintended changes in multimon.h
  + expanded a comment
  + Fix compilation error
  + Add a basic CRC check (no automatic data correction on CRC errors yet
  + Prepare for correction on wrong CRC
  + Remove no longer needed parameter
  + Implement fixing one bit errors (assuming the CRC is correct?)
  + multimon-ng: added build for building with cmake</changelog>
  <changelog author="mardnh@gmx.de" date="1431864000">- Update to version 0.0.0.git1431688037.4cc984f:
  + Update fms.c</changelog>
  <changelog author="mardnh@gmx.de" date="1447070400">- Update to version 1.1.0.git1447073843.04847c5:
  + Add support for FLEX pager protocol to multimon-ng
  + Added FLEX to list of supported protocols in README
  + Corrected sign of slicer
  + Tuned FLEX locking params to avoid lock on POC1200
  + Corrected long integer declarations
  + Fix include for X11 on FreeBSD
  + updated readme</changelog>
  <changelog author="mardnh@gmx.de" date="1457006400">- Update to version 1.1.0.git1457005494.6d75ea1:
  + fixed dumpcsv warning and removed superfluous includes</changelog>
  <changelog author="mardnh@gmx.de" date="1472385600">- Update to version 1.1.0.git1472378460.e88b22f:
  * Basic fixes to get FLEX decoder working for 3200 baud.
  * Clean up the FLEX decoder a little bit to work on 32-bit targets.
  * Fix failed inlinings resulting in linker errors
  * Fallback if __builtin_popcount isn't available
  * White Space: replace spaces with tabs</changelog>
  <changelog author="mardnh@gmx.de" date="1490184000">- Update to version 1.1.0.git1489481434.9408b02:
  * Update fms.c
  * FLEX: Fix type errors on aarch64
  * Fix pulse-simple linking to find_library() it first in case it's not in default search path</changelog>
  <changelog author="mardnh@gmx.de" date="1500379200">- Update to version 1.2.0+git.20170718:
  * Adapting vehicle-id from dec to hex
  * Update Flex Code
  * Fixed handling of Numeric Only messages
  * Version number and Group Messaging (fix)
  * Added Debugging, removed multiple loops
  * Version rolled, added debugging and improved CPU usage slightly
  * Group Message fix
  * Updated demod_flex.c (Changed GPN back to ALN)
  * add timestamp option
  * add usage descritpion for time stamp option
  * simplify code and remove buffers for timestamps
  * cleanup</changelog>
  <changelog author="mardnh@gmx.de" date="1504267200">- Update to version 1.2.0+git.20170901:
  * Add --label / -l which prefixes lines with text
  * Fix indent.
  * Just store the label pointer rather that allocating memory etc.
  * Print label even when --timestamp isn't used.
  * without make install, buildroot breaks..
  * Fixed --label implementation
- Remove patch:
  * multimon-ng-makefile-add-make-install.diff (fixed upstream)</changelog>
  <changelog author="mardnh@gmx.de" date="1506859200">- Update to version 1.3.0+git.20170901:
  * Update Flex Code
  * Fixed handling of Numeric Only messages
  * Version number and Group Messaging (fix)
  * Added Debugging, removed multiple loops
  * Version rolled, added debugging and improved CPU usage slightly
  * Group Message fix
  * Updated demod_flex.c (Changed GPN back to ALN)
  * simplify code and remove buffers for timestamps
  * cleanup</changelog>
  <changelog author="mardnh@gmx.de" date="1508500800">- Update to version 1.3.0+git.20171016:
  * flex: don't drop first message characters in alphanumeric parsing
  * fix compilation warnings
  * Issue #78 - Found a problem in the length detection sequence, modified the if statement to ensure the message length is only checked for Aplha messages, the other types calculate thier length while decoding
  * Added version info to the top of the demod_flex.c file after the previous updates to the code. I should have done it a while ago. see last commits for the actual updates.
  * Change debug level on Found Long address message to be 4, outside of the normal range as only I need it at the moment..
  * An issue with group messaging has been identified, the long address handling seems to be hit and miss. modified the demod_flex.c code to ignore the flag while decoding gorup messages
  * Fixed CMake build, bumped version and updated README.
  * Found a code flow issue (identified by: bertinholland issue #74 within EliasOenal's master multimon-ng branch) I was checking for the end of the message block on group messages before splitting the message, therefore incorrectly identified the end block as an Invlaid OFfset.
  * Add sample script which can decode multiple pager channels in parallel.
  * work in progress
  * code to demodulate X10RF signals</changelog>
  <changelog author="mpluskal@suse.com" date="1513598400">- Update dependencies</changelog>
  <changelog author="mardnh@gmx.de" date="1522670400">- Update to version 1.1.5+git.20180402:
  * Implemented chzchzchz's fix for 'processing unfragmented FLEX messages, multimon-ng produces corrupted messages'
  * x10: fix various compiler warnings
  * Revert "Issue #78 - Found a problem in the length detection sequence, modified the if statement to ensure the message length is"
  * Revert "Revert "Issue #78 - Found a problem in the length detection sequence, modified the if statement to ensure the message length is""
  * Issue #87 created by bertinhollan:
  * fix for EAS issue #94
  * silenced debug message
  * Comment out includes for sys/wait and sys/resource
  * Fix event polling loop with SCOPE demodulator
  * cleaned up unused x10 includes
  * version 1.1.5</changelog>
  <changelog author="mardnh@gmx.de" date="1527854400">- Update to version 1.1.5+git.20180527:
  * Restore FSF copyright notices on win32_getopt.[ch]
  * Version 0.8.7v (11 APR 2018)
  * Modification (to this file) made by Bruce Quinton and Rob0101
    (as seen on github: https://github.com/rob0101)
  * Issue *95 created by rob0101: '-a FLEX dropping first character
    of some message on regular basis'
  * Implemented Rob0101's suggestion of K, F and C flags to indicate
    the message fragmentation:
    'K' message is complete and O'K' to display to the world.
    'F' message is a 'F'ragment and needs a 'C'ontinuation message
    to complete it.
    Message = Fragment + Continuation  *         'C' message is a
    'C'ontinuation of another fragmented message
  * I missed a null terminator on the 'Message' array and therefore
    was printing garbage to the output. Fixed now!
  * Addressed issue #101: group messaging misbehaving when the
    message frame is a corrupt packet.
  * Version 0.9.0v (22 May 2018) Modification (to this file) made
    by Bruce Quinton (zanoroy@gmail.com) - Addded Define at top of
    file to modify the way missed group messages are reported in
    the debug output (default is 1; report missed capcodes on the
    same line) REPORT_GROUP_CODES   1 // Report each cleared faulty
    group capcode : 0 = Each on a new line; 1 = All on the same line;</changelog>
  <changelog author="mardnh@gmx.de" date="1539777600">- Update to version 1.1.6+git.20181017:
  * version 1.1.6
  * Add a stub replacement for BCHCode.c
  * Restore copyright notice from bch3121.c
  * Restore FSF notice on the FLEX decoder derived from GNU Radio</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1542542400">- Grammar fix in summary.</changelog>
  <changelog author="mardnh@gmx.de" date="1547553600">- Update to version 1.1.7+git.20190115:
  * version 1.1.7
  * Fix typo
  * Fix frament idetification
  * Add a charset option for POCSAG demodulators</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1562068800">- Update to new upstream release 1.1.8
  * POCSAG: Support for the Swedish charset, as well as smaller
    fixes. The decoder now by default detects the message type
    according to the POCSAG standard, use "-f auto" to enable the
    old behaviour of heuristically detecting the type.
  * FLEX: Numeric messages now won't have spaces stripped anymore.
  * DTMF: Filter false positives.</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1600776000">- Update to new upstream release 1.1.9
  * multimon-ng now has a man page, let's try to keep it updated.
  * FLEX: Changes to group messages and delimiters.
  * FMS: Fixed a problem with the direction of telegrams.
  * POCSAG: Support for the Slovenian charset.</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1671796800">- Update to new upstream release 1.2.0
  * Separated FLEX and FLEX_NEXT. The former is identical to 1.1.9,
    while FLEX_NEXT gained new features, as well as known
    regressions. (See #168)
  * Fix CVE-2020-36619 (boo#1206542)
  * Several smaller POCSAG fixes.
  * Fix for opening large wav files with improper header.</changelog>
</package>
<package pkgid="92b385280150482a0c36483d68d135c8d198a3d4426a8a3220e43b4a6a816e5d" name="multimon-ng" arch="x86_64">
  <version epoch="0" ver="1.2.0" rel="bp154.2.3.1"/>
  <changelog author="mardnh@gmx.de" date="1421236800">- Update to version 0.0.0.git1417245058.538a758:
  + Add FMS decoder by copying the CLIP decoder
  + Add forgotten files to project file
  + Rename file
  + Fix variable naming ...
  + Avoid duplicate function naming ...
  + Avoid duplicate function naming ...
  + Avoid duplicate function naming ...
  + Make the FMS decoder basically work
  + Fix bit inversion
  + Use one bit less for synchronisation
  + Rewrite the rest to reverse bit direction and make output a little more verbose
  + Use verbosity levels in a sane way and make output more useful
  + Remove FMS gen
  + Really revert gen* stuff
  + Also revert unintended changes in multimon.h
  + expanded a comment
  + Fix compilation error
  + Add a basic CRC check (no automatic data correction on CRC errors yet
  + Prepare for correction on wrong CRC
  + Remove no longer needed parameter
  + Implement fixing one bit errors (assuming the CRC is correct?)
  + multimon-ng: added build for building with cmake</changelog>
  <changelog author="mardnh@gmx.de" date="1431864000">- Update to version 0.0.0.git1431688037.4cc984f:
  + Update fms.c</changelog>
  <changelog author="mardnh@gmx.de" date="1447070400">- Update to version 1.1.0.git1447073843.04847c5:
  + Add support for FLEX pager protocol to multimon-ng
  + Added FLEX to list of supported protocols in README
  + Corrected sign of slicer
  + Tuned FLEX locking params to avoid lock on POC1200
  + Corrected long integer declarations
  + Fix include for X11 on FreeBSD
  + updated readme</changelog>
  <changelog author="mardnh@gmx.de" date="1457006400">- Update to version 1.1.0.git1457005494.6d75ea1:
  + fixed dumpcsv warning and removed superfluous includes</changelog>
  <changelog author="mardnh@gmx.de" date="1472385600">- Update to version 1.1.0.git1472378460.e88b22f:
  * Basic fixes to get FLEX decoder working for 3200 baud.
  * Clean up the FLEX decoder a little bit to work on 32-bit targets.
  * Fix failed inlinings resulting in linker errors
  * Fallback if __builtin_popcount isn't available
  * White Space: replace spaces with tabs</changelog>
  <changelog author="mardnh@gmx.de" date="1490184000">- Update to version 1.1.0.git1489481434.9408b02:
  * Update fms.c
  * FLEX: Fix type errors on aarch64
  * Fix pulse-simple linking to find_library() it first in case it's not in default search path</changelog>
  <changelog author="mardnh@gmx.de" date="1500379200">- Update to version 1.2.0+git.20170718:
  * Adapting vehicle-id from dec to hex
  * Update Flex Code
  * Fixed handling of Numeric Only messages
  * Version number and Group Messaging (fix)
  * Added Debugging, removed multiple loops
  * Version rolled, added debugging and improved CPU usage slightly
  * Group Message fix
  * Updated demod_flex.c (Changed GPN back to ALN)
  * add timestamp option
  * add usage descritpion for time stamp option
  * simplify code and remove buffers for timestamps
  * cleanup</changelog>
  <changelog author="mardnh@gmx.de" date="1504267200">- Update to version 1.2.0+git.20170901:
  * Add --label / -l which prefixes lines with text
  * Fix indent.
  * Just store the label pointer rather that allocating memory etc.
  * Print label even when --timestamp isn't used.
  * without make install, buildroot breaks..
  * Fixed --label implementation
- Remove patch:
  * multimon-ng-makefile-add-make-install.diff (fixed upstream)</changelog>
  <changelog author="mardnh@gmx.de" date="1506859200">- Update to version 1.3.0+git.20170901:
  * Update Flex Code
  * Fixed handling of Numeric Only messages
  * Version number and Group Messaging (fix)
  * Added Debugging, removed multiple loops
  * Version rolled, added debugging and improved CPU usage slightly
  * Group Message fix
  * Updated demod_flex.c (Changed GPN back to ALN)
  * simplify code and remove buffers for timestamps
  * cleanup</changelog>
  <changelog author="mardnh@gmx.de" date="1508500800">- Update to version 1.3.0+git.20171016:
  * flex: don't drop first message characters in alphanumeric parsing
  * fix compilation warnings
  * Issue #78 - Found a problem in the length detection sequence, modified the if statement to ensure the message length is only checked for Aplha messages, the other types calculate thier length while decoding
  * Added version info to the top of the demod_flex.c file after the previous updates to the code. I should have done it a while ago. see last commits for the actual updates.
  * Change debug level on Found Long address message to be 4, outside of the normal range as only I need it at the moment..
  * An issue with group messaging has been identified, the long address handling seems to be hit and miss. modified the demod_flex.c code to ignore the flag while decoding gorup messages
  * Fixed CMake build, bumped version and updated README.
  * Found a code flow issue (identified by: bertinholland issue #74 within EliasOenal's master multimon-ng branch) I was checking for the end of the message block on group messages before splitting the message, therefore incorrectly identified the end block as an Invlaid OFfset.
  * Add sample script which can decode multiple pager channels in parallel.
  * work in progress
  * code to demodulate X10RF signals</changelog>
  <changelog author="mpluskal@suse.com" date="1513598400">- Update dependencies</changelog>
  <changelog author="mardnh@gmx.de" date="1522670400">- Update to version 1.1.5+git.20180402:
  * Implemented chzchzchz's fix for 'processing unfragmented FLEX messages, multimon-ng produces corrupted messages'
  * x10: fix various compiler warnings
  * Revert "Issue #78 - Found a problem in the length detection sequence, modified the if statement to ensure the message length is"
  * Revert "Revert "Issue #78 - Found a problem in the length detection sequence, modified the if statement to ensure the message length is""
  * Issue #87 created by bertinhollan:
  * fix for EAS issue #94
  * silenced debug message
  * Comment out includes for sys/wait and sys/resource
  * Fix event polling loop with SCOPE demodulator
  * cleaned up unused x10 includes
  * version 1.1.5</changelog>
  <changelog author="mardnh@gmx.de" date="1527854400">- Update to version 1.1.5+git.20180527:
  * Restore FSF copyright notices on win32_getopt.[ch]
  * Version 0.8.7v (11 APR 2018)
  * Modification (to this file) made by Bruce Quinton and Rob0101
    (as seen on github: https://github.com/rob0101)
  * Issue *95 created by rob0101: '-a FLEX dropping first character
    of some message on regular basis'
  * Implemented Rob0101's suggestion of K, F and C flags to indicate
    the message fragmentation:
    'K' message is complete and O'K' to display to the world.
    'F' message is a 'F'ragment and needs a 'C'ontinuation message
    to complete it.
    Message = Fragment + Continuation  *         'C' message is a
    'C'ontinuation of another fragmented message
  * I missed a null terminator on the 'Message' array and therefore
    was printing garbage to the output. Fixed now!
  * Addressed issue #101: group messaging misbehaving when the
    message frame is a corrupt packet.
  * Version 0.9.0v (22 May 2018) Modification (to this file) made
    by Bruce Quinton (zanoroy@gmail.com) - Addded Define at top of
    file to modify the way missed group messages are reported in
    the debug output (default is 1; report missed capcodes on the
    same line) REPORT_GROUP_CODES   1 // Report each cleared faulty
    group capcode : 0 = Each on a new line; 1 = All on the same line;</changelog>
  <changelog author="mardnh@gmx.de" date="1539777600">- Update to version 1.1.6+git.20181017:
  * version 1.1.6
  * Add a stub replacement for BCHCode.c
  * Restore copyright notice from bch3121.c
  * Restore FSF notice on the FLEX decoder derived from GNU Radio</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1542542400">- Grammar fix in summary.</changelog>
  <changelog author="mardnh@gmx.de" date="1547553600">- Update to version 1.1.7+git.20190115:
  * version 1.1.7
  * Fix typo
  * Fix frament idetification
  * Add a charset option for POCSAG demodulators</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1562068800">- Update to new upstream release 1.1.8
  * POCSAG: Support for the Swedish charset, as well as smaller
    fixes. The decoder now by default detects the message type
    according to the POCSAG standard, use "-f auto" to enable the
    old behaviour of heuristically detecting the type.
  * FLEX: Numeric messages now won't have spaces stripped anymore.
  * DTMF: Filter false positives.</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1600776000">- Update to new upstream release 1.1.9
  * multimon-ng now has a man page, let's try to keep it updated.
  * FLEX: Changes to group messages and delimiters.
  * FMS: Fixed a problem with the direction of telegrams.
  * POCSAG: Support for the Slovenian charset.</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1671796800">- Update to new upstream release 1.2.0
  * Separated FLEX and FLEX_NEXT. The former is identical to 1.1.9,
    while FLEX_NEXT gained new features, as well as known
    regressions. (See #168)
  * Fix CVE-2020-36619 (boo#1206542)
  * Several smaller POCSAG fixes.
  * Fix for opening large wav files with improper header.</changelog>
</package>
<package pkgid="b59764ff03c4b7b025e653c1ea7f2e824087a9b36418003fcdd959879a063976" name="mupdf" arch="aarch64">
  <version epoch="0" ver="1.20.3" rel="bp154.2.3.1"/>
  <changelog author="kbabioch@suse.com" date="1517572800">- Add CVE-2018-6187.patch to fix a heap buffer overflow in in pdf-write.c
  in the do_pdf_save_document function (CVE-2018-6187 boo#1077407)</changelog>
  <changelog author="kbabioch@suse.com" date="1517572801">- Add CVE-2018-6544.patch to fix a DoS in pdf_load_obj_stm within in
  pdf/pdf-xref.c (CVE-2018-6544 boo#1079100)
- Add CVE-2018-6192.patch to fix a DoS in pdf_read_new_xref within
  pdf/pdf-xref.c via crafted PDF file (CVE-2018-6192 boo#1077755)</changelog>
  <changelog author="kbabioch@suse.com" date="1517572802">- CVE-2018-6192.patch: Use official fix from usptream (CVE-2018-6192
  boo#1077755)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- use freetype2-devel explictily as buildrequires</changelog>
  <changelog author="kbabioch@suse.com" date="1518436800">- Add CVE-2018-1000051.patch: Fix a Use After Free vulnerability in
  fz_keep_key_storable that can potentially result in DoS / remote
  code execution (CVE-2018-1000051 bsc#1080531)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1518609600">- Remove xorg-x11-devel from buildrequires</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1518609601">-mupdf-no-strip.patch: fix debuginfo generation</changelog>
  <changelog author="kbabioch@suse.com" date="1524484800">- Update to version 1.13:
  - primarily a bugfix release.
  - New "mutool sign" tool for showing and verifying digital signatures.
  - Chinese, Japanese, Korean, Cyrillic, and Greek font support in mutool create.
  - Improvements to annotation editing API.
- Dropped patches, which are included upstream now:
  - CVE-2018-6192.patch
  - CVE-2018-5686.patch
  - CVE-2018-6187.patch
  - CVE-2018-1000051.patch
  - CVE-2017-17858.patch
  - CVE-2018-6544.patch
  - fix-openjpeg-flags.patch</changelog>
  <changelog author="jengelh@inai.de" date="1524484801">- Ensure neutrality of description.</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1552305600">- Add build dependencies:
  * liblcms2-devel
  * Mesa-libGL-devel
  * freeglut-devel
  * pkgconfig(openssl)
  * pkgconfig(xi)
  * pkgconfig(xrandr)
- Change COPYING to %licnese instead of %doc
- Update mupdf-no-strip.patch
- Add patches from Fedora project:
  * mupdf-CVE-2018-16647.patch
  * mupdf-CVE-2018-16648.patch
  * mupdf-CVE-2018-18662.patch
  * 0001-Fix-699840-Use-saved-sig_widget-pointer-to-sign-sign.patch
  * 0001-Write-placeholder-appearance-streams-for-digital-sig.patch
  * 0001-fix-build-on-big-endian.patch
- Update to version 1.14:
  * New features:
  * Added "Source Han Serif" CJK fallback font.
  * Added more scripts to the Noto fallback fonts.
  * Multi-page PNM support.
  * "mutool show" now supports a path syntax for selecting objects to show.
  * Build system simplifications:
  * Auto-generated CMap, ICC, and JS source files are checked in to git.
  * Embedded CMap resources are now generated by a python script.
  * Embedded font resources are linked directly if using GNU ld or windows.
  * Namegen tool replaced by use of C macros.
  * Simplified Makefile.
  * Annotation editing:
  * New annotation editing mode in mupdf-gl.
  * Can create, edit, and delete most annotation types.
  * Can create appearance streams for most annotation types.
  * Can create appearance streams for Tx form fields.
  * Can create appearance streams for Ch form fields.
  * Form filling in mupdf-gl:
  * Can click buttons, checkboxes, and radioboxes.
  * Can fill out text fields using dialog box.
  * Can select choice options using dialog box.
  * Can verify and sign digital signatures.
  * Improved UI for mupdf-gl:
  * Password dialog.
  * Error dialog.
  * Open/save file dialog.
  * Snap selection to words or lines by holding control or control+shift.
  * Save and restore current location, bookmarks, and navigation history.
  * Bug fixes:
  * Improved CJK character fallback handling in EPUB.
  * API changes:
  * Pass rectangle and matrix structs by value.
  * Replaced PDF_NAME_Xxx macros with PDF_NAME(Xxx).
  * Added PDF_TRUE, PDF_FALSE, and PDF_NULL constant pdf_obj* macros.
  * Added helper functions: pdf_dict_get_int, etc.
  * Removed 'doc' argument in pdf_new_int, etc.
  * Quads instead of rects when highlighting and searching text.
  * mutool run: Pass arguments to script in scriptArgs global.</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1552564800">- Update source download link so we can submit it to Factory</changelog>
  <changelog author="Xaver Hellauer &lt;xaver@hellauer.bayern&gt;" date="1565784000">- Update to version 1.16.1
  * Changes in version 1.16.1:
  * Bugfixes
  * Changes in version 1.16.0:
  * api: Major overhaul of color management architecture.
  * api: Improved functions to verify/sign PDF documents.
  * api: Number tree accessor function pdf_lookup_number.
  * api: Parse and handle more options for PWG output.
  * api: Removed obsolete gproof document type.
  * api: User callbacks for warning and error messages.
  * epub: Changed default page size to A5.
  * epub: Draw embedded SVG documents in EPUB/XHTML.
  * epub: New Noto fonts covering more unicode scripts.
  * epub: Support small-caps font-variant.
  * pdf: Add Redact annotation type and function to apply redactions.
  * pdf: Add/remove/change encryption and password when saving PDF files.
  * pdf: Improvements to text handling in PDF filter processor.
  * pdf: MP and DP operators now call begin/end_layer device methods.
  * pdf: New and improved progressive loading.
  * svg: Draw external images in SVG documents.
  * mutool show: Add 'form' selector to list PDF form fields.
  * mutool sign: Sign PDF documents from the command line.
  * mutool sign: Verify signatures in PDF documents from the command line.
  * viewer: Option to save a script of user actions for replay with mutool run.
  * viewer: Runtime toggle for ICC and spot rendering.
  * viewer: Tooltip when hovering over a link in mupdf-gl.
  * Changes in version 1.15.0:
  * WebAssembly build target and examples.
  * Improved forms API in both C and Java bindings.
  * Improved forms JavaScript support.
  * Create appearance streams for more form field types.
  * Fixed many bugs in ICC color management.
  * Fixed many memory leaks in error cleanup.
  * Fixed bugs in pdfwrite output.
  * Improved text extraction from LaTeX documents with math symbols.
  * Improved trace device formatting.
  * Support CBZ and CBT files larger than 2Gb.
  * Show table of contents for FB2 and XHTML documents.
  * Show embedded raster images in SVG and XHTML documents.
  * Show FB2 cover page.
  * Add option to save PDF files without encryption.
  * Add inhibit-spaces option to stext device to turn off missing space detection.
  * Simplified fz_try/fz_always/fz_catch macros.
  * mupdf-gl improvements:
  * Automatically open annotation editor when selecting an annotation.
  * Full page color tinting option in mupdf-gl.
  * Show/hide table of contents sections.
  * Trigger a reload with sighup.
  * Toggle spot color mode with 'e'.
- Remove merged patches:
  * mupdf-CVE-2018-16647.patch
  * mupdf-CVE-2018-16648.patch
  * mupdf-CVE-2018-18662.patch
  * 0001-Fix-699840-Use-saved-sig_widget-pointer-to-sign-sign.patch
  * 0001-Write-placeholder-appearance-streams-for-digital-sig.patch
  * 0001-fix-build-on-big-endian.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1568116800">- Use -ffat-lto-objects when building static libraries.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1591963200">- Fix building with gcc10</changelog>
  <changelog author="Dan ?erm&#xE1;k &lt;dcermak@suse.com&gt;" date="1592568000">- Update to version 1.17.0
  * api: Improved accessors for markup/ink/polygon annotation data.
  * api: Chapter based API for faster EPUB loading.
  * api: Add more documentation to header files.
  * api: Improved digital signature signing and verification.
  * api: Validate changes in a signed PDF file.
  * build: Moved windows build to VS2019 solution.
  * pdf: Redaction now works on images and links as well as text.
  * pdf: Greek, Cyrillic, Chinese, Japanese, and Korean scripts in forms and annotations.
  * pdf: File attachment annotations.
  * pdf: Use CCITT Fax compression for 1-bit images when creating PDF files.
  * epub: More forgiving XHTML parsing.
  * epub: Accelerator files to cache chapter data for faster EPUB loading.
  * epub: Optimized memory use.
  * mutool run: Edit Markup, Ink, and Polygon annotation data.
  * mutool run: Fill out form fields.
  * viewer: Ask for confirmation before closing a PDF with unsaved changes.
  * viewer: Embed and extract file attachment annotations.
  * library: Miscellaneous bugfixes.
  * library: Fixes to store operation.
  * thirdparty: Updated Harfbuzz to 2.6.4.
  * thirdparty: Updated jbig2dec to 0.18.
  * thirdparty: Updated MuJS to 1.0.7.
  * thirdparty: Updated OpenJPEG to 2.3.1.
  * thirdparty: Updated cURL to 7.66.0 (windows only).</changelog>
  <changelog author="Hsiu-Ming Chang &lt;cges30901@gmail.com&gt;" date="1603627200">- Update to version 1.18.0
  * mutool draw: bbox output format.
  * mutool draw: structured text extraction in JSON format.
  * mutool run: StructuredText.walk()
  * mutool run: PDFPage.process() and PDFAnnotation.process()
  * mupdf-gl: Added IBM Common User Access shortcuts for copy &amp; paste.
  * mupdf-gl: Improved redaction UI.
  * java: Example desktop Java viewer.
  * wasm: WebAssembly viewer that runs in a browser.
  * html: Added HTML5 parser.
  * api: Dehyphenation option in structured text extraction, to improve searching for words that are hyphenated across lines.
  * api: pdf_new_date, pdf_to_date, pdf_dict_put_date and pdf_dict_get_date.
  * api: Added choice of image redaction algorithms: none, full, partial.
  * api: Optional use of Tesseract to use OCR to extract text.
  * svg: Many small parsing fixes.
  * svg: Parse inline CSS style attributes.
  * svg: Text elements (simple text layout only).
  * High security redaction -- save redacted PDF as flattened bitmap, guaranteed to not leak any sensitive redacted information.
  * Experimental C++ bindings.
  * Experimental Python bindings.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635163200">- update to 1.19.0
  * Remov support for Luratech JBIG2 and JPEG2000 decoders
  * Add 'extract' library for more output options: DOCX, ODT
  * Journal for undo and redo
  * Snapshot for auto-save and restore
  * Reflow document wrapper
  * Rollover appearance for annotations and widgets
  * Customize appearance of signed digital signatures
  * Progress and cancel callbacks to OCR functions
  * Create signature form fields
  * Improved Font and format support
  * developer visible improvements</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1650628800">- update to 1.19.1:
  * Updated zlib to 1.2.12 due to CVE-2018-25032</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1659355200">- update to 1.20.0 (bsc#1202858, CVE-2021-4216):
  * Experimental C# bindings
  * Cross compilation should no longer need a host compiler
  * Major additions to JNI bindings
  * New API to edit outline
  * New API to resolve and create links
  * New API to toggle individual layers in PDF
  * Layer panel in mupdf-gl
  * Layer option in mutool draw
  * New API to add a Javascript console
  * Console panel in mupdf-gl
  * Text search API extended to be able to distinguish between separate search hits
  * Command line tool improvements:
  * all: Negative page numbers to index from the last page
  * mutool draw: Add option to render document without text
  * mutool draw and convert: Support DPI option in text and HTML output
  * New hybrid HTML output format using "scripts/pdftohtml" script:
  * Graphics in a background image
  * Text on top
  * Improved WASM viewer demo
  * Support high DPI screens
  * Progressive loading
  * Update to zlib 1.2.12 for security fix</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1660737600">- update to 1.20.3:
  * return error, not success when unable to lock native device resource.
  * Bug 705620: Start journal operation instead of pushing local xref.
  * Ensure AndroidDrawDevice is destroyed, even upon exception.
  * source/pdf/pdf-clean.c: fix segv from incorrect call to fz_drop_pixmap().
  * Bug 705681: Enclose code in begin/end operation.
  * Guard against SEGVs when calling archive functions with NULL archive.</changelog>
</package>
<package pkgid="4538d72eae553a968088f90b17f48811d9c3382429ff38a31b95afe5cec71d93" name="mupdf" arch="ppc64le">
  <version epoch="0" ver="1.20.3" rel="bp154.2.3.1"/>
  <changelog author="kbabioch@suse.com" date="1517572800">- Add CVE-2018-6187.patch to fix a heap buffer overflow in in pdf-write.c
  in the do_pdf_save_document function (CVE-2018-6187 boo#1077407)</changelog>
  <changelog author="kbabioch@suse.com" date="1517572801">- Add CVE-2018-6544.patch to fix a DoS in pdf_load_obj_stm within in
  pdf/pdf-xref.c (CVE-2018-6544 boo#1079100)
- Add CVE-2018-6192.patch to fix a DoS in pdf_read_new_xref within
  pdf/pdf-xref.c via crafted PDF file (CVE-2018-6192 boo#1077755)</changelog>
  <changelog author="kbabioch@suse.com" date="1517572802">- CVE-2018-6192.patch: Use official fix from usptream (CVE-2018-6192
  boo#1077755)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- use freetype2-devel explictily as buildrequires</changelog>
  <changelog author="kbabioch@suse.com" date="1518436800">- Add CVE-2018-1000051.patch: Fix a Use After Free vulnerability in
  fz_keep_key_storable that can potentially result in DoS / remote
  code execution (CVE-2018-1000051 bsc#1080531)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1518609600">- Remove xorg-x11-devel from buildrequires</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1518609601">-mupdf-no-strip.patch: fix debuginfo generation</changelog>
  <changelog author="kbabioch@suse.com" date="1524484800">- Update to version 1.13:
  - primarily a bugfix release.
  - New "mutool sign" tool for showing and verifying digital signatures.
  - Chinese, Japanese, Korean, Cyrillic, and Greek font support in mutool create.
  - Improvements to annotation editing API.
- Dropped patches, which are included upstream now:
  - CVE-2018-6192.patch
  - CVE-2018-5686.patch
  - CVE-2018-6187.patch
  - CVE-2018-1000051.patch
  - CVE-2017-17858.patch
  - CVE-2018-6544.patch
  - fix-openjpeg-flags.patch</changelog>
  <changelog author="jengelh@inai.de" date="1524484801">- Ensure neutrality of description.</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1552305600">- Add build dependencies:
  * liblcms2-devel
  * Mesa-libGL-devel
  * freeglut-devel
  * pkgconfig(openssl)
  * pkgconfig(xi)
  * pkgconfig(xrandr)
- Change COPYING to %licnese instead of %doc
- Update mupdf-no-strip.patch
- Add patches from Fedora project:
  * mupdf-CVE-2018-16647.patch
  * mupdf-CVE-2018-16648.patch
  * mupdf-CVE-2018-18662.patch
  * 0001-Fix-699840-Use-saved-sig_widget-pointer-to-sign-sign.patch
  * 0001-Write-placeholder-appearance-streams-for-digital-sig.patch
  * 0001-fix-build-on-big-endian.patch
- Update to version 1.14:
  * New features:
  * Added "Source Han Serif" CJK fallback font.
  * Added more scripts to the Noto fallback fonts.
  * Multi-page PNM support.
  * "mutool show" now supports a path syntax for selecting objects to show.
  * Build system simplifications:
  * Auto-generated CMap, ICC, and JS source files are checked in to git.
  * Embedded CMap resources are now generated by a python script.
  * Embedded font resources are linked directly if using GNU ld or windows.
  * Namegen tool replaced by use of C macros.
  * Simplified Makefile.
  * Annotation editing:
  * New annotation editing mode in mupdf-gl.
  * Can create, edit, and delete most annotation types.
  * Can create appearance streams for most annotation types.
  * Can create appearance streams for Tx form fields.
  * Can create appearance streams for Ch form fields.
  * Form filling in mupdf-gl:
  * Can click buttons, checkboxes, and radioboxes.
  * Can fill out text fields using dialog box.
  * Can select choice options using dialog box.
  * Can verify and sign digital signatures.
  * Improved UI for mupdf-gl:
  * Password dialog.
  * Error dialog.
  * Open/save file dialog.
  * Snap selection to words or lines by holding control or control+shift.
  * Save and restore current location, bookmarks, and navigation history.
  * Bug fixes:
  * Improved CJK character fallback handling in EPUB.
  * API changes:
  * Pass rectangle and matrix structs by value.
  * Replaced PDF_NAME_Xxx macros with PDF_NAME(Xxx).
  * Added PDF_TRUE, PDF_FALSE, and PDF_NULL constant pdf_obj* macros.
  * Added helper functions: pdf_dict_get_int, etc.
  * Removed 'doc' argument in pdf_new_int, etc.
  * Quads instead of rects when highlighting and searching text.
  * mutool run: Pass arguments to script in scriptArgs global.</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1552564800">- Update source download link so we can submit it to Factory</changelog>
  <changelog author="Xaver Hellauer &lt;xaver@hellauer.bayern&gt;" date="1565784000">- Update to version 1.16.1
  * Changes in version 1.16.1:
  * Bugfixes
  * Changes in version 1.16.0:
  * api: Major overhaul of color management architecture.
  * api: Improved functions to verify/sign PDF documents.
  * api: Number tree accessor function pdf_lookup_number.
  * api: Parse and handle more options for PWG output.
  * api: Removed obsolete gproof document type.
  * api: User callbacks for warning and error messages.
  * epub: Changed default page size to A5.
  * epub: Draw embedded SVG documents in EPUB/XHTML.
  * epub: New Noto fonts covering more unicode scripts.
  * epub: Support small-caps font-variant.
  * pdf: Add Redact annotation type and function to apply redactions.
  * pdf: Add/remove/change encryption and password when saving PDF files.
  * pdf: Improvements to text handling in PDF filter processor.
  * pdf: MP and DP operators now call begin/end_layer device methods.
  * pdf: New and improved progressive loading.
  * svg: Draw external images in SVG documents.
  * mutool show: Add 'form' selector to list PDF form fields.
  * mutool sign: Sign PDF documents from the command line.
  * mutool sign: Verify signatures in PDF documents from the command line.
  * viewer: Option to save a script of user actions for replay with mutool run.
  * viewer: Runtime toggle for ICC and spot rendering.
  * viewer: Tooltip when hovering over a link in mupdf-gl.
  * Changes in version 1.15.0:
  * WebAssembly build target and examples.
  * Improved forms API in both C and Java bindings.
  * Improved forms JavaScript support.
  * Create appearance streams for more form field types.
  * Fixed many bugs in ICC color management.
  * Fixed many memory leaks in error cleanup.
  * Fixed bugs in pdfwrite output.
  * Improved text extraction from LaTeX documents with math symbols.
  * Improved trace device formatting.
  * Support CBZ and CBT files larger than 2Gb.
  * Show table of contents for FB2 and XHTML documents.
  * Show embedded raster images in SVG and XHTML documents.
  * Show FB2 cover page.
  * Add option to save PDF files without encryption.
  * Add inhibit-spaces option to stext device to turn off missing space detection.
  * Simplified fz_try/fz_always/fz_catch macros.
  * mupdf-gl improvements:
  * Automatically open annotation editor when selecting an annotation.
  * Full page color tinting option in mupdf-gl.
  * Show/hide table of contents sections.
  * Trigger a reload with sighup.
  * Toggle spot color mode with 'e'.
- Remove merged patches:
  * mupdf-CVE-2018-16647.patch
  * mupdf-CVE-2018-16648.patch
  * mupdf-CVE-2018-18662.patch
  * 0001-Fix-699840-Use-saved-sig_widget-pointer-to-sign-sign.patch
  * 0001-Write-placeholder-appearance-streams-for-digital-sig.patch
  * 0001-fix-build-on-big-endian.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1568116800">- Use -ffat-lto-objects when building static libraries.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1591963200">- Fix building with gcc10</changelog>
  <changelog author="Dan ?erm&#xE1;k &lt;dcermak@suse.com&gt;" date="1592568000">- Update to version 1.17.0
  * api: Improved accessors for markup/ink/polygon annotation data.
  * api: Chapter based API for faster EPUB loading.
  * api: Add more documentation to header files.
  * api: Improved digital signature signing and verification.
  * api: Validate changes in a signed PDF file.
  * build: Moved windows build to VS2019 solution.
  * pdf: Redaction now works on images and links as well as text.
  * pdf: Greek, Cyrillic, Chinese, Japanese, and Korean scripts in forms and annotations.
  * pdf: File attachment annotations.
  * pdf: Use CCITT Fax compression for 1-bit images when creating PDF files.
  * epub: More forgiving XHTML parsing.
  * epub: Accelerator files to cache chapter data for faster EPUB loading.
  * epub: Optimized memory use.
  * mutool run: Edit Markup, Ink, and Polygon annotation data.
  * mutool run: Fill out form fields.
  * viewer: Ask for confirmation before closing a PDF with unsaved changes.
  * viewer: Embed and extract file attachment annotations.
  * library: Miscellaneous bugfixes.
  * library: Fixes to store operation.
  * thirdparty: Updated Harfbuzz to 2.6.4.
  * thirdparty: Updated jbig2dec to 0.18.
  * thirdparty: Updated MuJS to 1.0.7.
  * thirdparty: Updated OpenJPEG to 2.3.1.
  * thirdparty: Updated cURL to 7.66.0 (windows only).</changelog>
  <changelog author="Hsiu-Ming Chang &lt;cges30901@gmail.com&gt;" date="1603627200">- Update to version 1.18.0
  * mutool draw: bbox output format.
  * mutool draw: structured text extraction in JSON format.
  * mutool run: StructuredText.walk()
  * mutool run: PDFPage.process() and PDFAnnotation.process()
  * mupdf-gl: Added IBM Common User Access shortcuts for copy &amp; paste.
  * mupdf-gl: Improved redaction UI.
  * java: Example desktop Java viewer.
  * wasm: WebAssembly viewer that runs in a browser.
  * html: Added HTML5 parser.
  * api: Dehyphenation option in structured text extraction, to improve searching for words that are hyphenated across lines.
  * api: pdf_new_date, pdf_to_date, pdf_dict_put_date and pdf_dict_get_date.
  * api: Added choice of image redaction algorithms: none, full, partial.
  * api: Optional use of Tesseract to use OCR to extract text.
  * svg: Many small parsing fixes.
  * svg: Parse inline CSS style attributes.
  * svg: Text elements (simple text layout only).
  * High security redaction -- save redacted PDF as flattened bitmap, guaranteed to not leak any sensitive redacted information.
  * Experimental C++ bindings.
  * Experimental Python bindings.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635163200">- update to 1.19.0
  * Remov support for Luratech JBIG2 and JPEG2000 decoders
  * Add 'extract' library for more output options: DOCX, ODT
  * Journal for undo and redo
  * Snapshot for auto-save and restore
  * Reflow document wrapper
  * Rollover appearance for annotations and widgets
  * Customize appearance of signed digital signatures
  * Progress and cancel callbacks to OCR functions
  * Create signature form fields
  * Improved Font and format support
  * developer visible improvements</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1650628800">- update to 1.19.1:
  * Updated zlib to 1.2.12 due to CVE-2018-25032</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1659355200">- update to 1.20.0 (bsc#1202858, CVE-2021-4216):
  * Experimental C# bindings
  * Cross compilation should no longer need a host compiler
  * Major additions to JNI bindings
  * New API to edit outline
  * New API to resolve and create links
  * New API to toggle individual layers in PDF
  * Layer panel in mupdf-gl
  * Layer option in mutool draw
  * New API to add a Javascript console
  * Console panel in mupdf-gl
  * Text search API extended to be able to distinguish between separate search hits
  * Command line tool improvements:
  * all: Negative page numbers to index from the last page
  * mutool draw: Add option to render document without text
  * mutool draw and convert: Support DPI option in text and HTML output
  * New hybrid HTML output format using "scripts/pdftohtml" script:
  * Graphics in a background image
  * Text on top
  * Improved WASM viewer demo
  * Support high DPI screens
  * Progressive loading
  * Update to zlib 1.2.12 for security fix</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1660737600">- update to 1.20.3:
  * return error, not success when unable to lock native device resource.
  * Bug 705620: Start journal operation instead of pushing local xref.
  * Ensure AndroidDrawDevice is destroyed, even upon exception.
  * source/pdf/pdf-clean.c: fix segv from incorrect call to fz_drop_pixmap().
  * Bug 705681: Enclose code in begin/end operation.
  * Guard against SEGVs when calling archive functions with NULL archive.</changelog>
</package>
<package pkgid="18c410b7d05f4a0f99303e2a992d5079b44c2ed8483caf3bca50ca8efd6d464a" name="mupdf" arch="s390x">
  <version epoch="0" ver="1.20.3" rel="bp154.2.3.1"/>
  <changelog author="kbabioch@suse.com" date="1517572800">- Add CVE-2018-6187.patch to fix a heap buffer overflow in in pdf-write.c
  in the do_pdf_save_document function (CVE-2018-6187 boo#1077407)</changelog>
  <changelog author="kbabioch@suse.com" date="1517572801">- Add CVE-2018-6544.patch to fix a DoS in pdf_load_obj_stm within in
  pdf/pdf-xref.c (CVE-2018-6544 boo#1079100)
- Add CVE-2018-6192.patch to fix a DoS in pdf_read_new_xref within
  pdf/pdf-xref.c via crafted PDF file (CVE-2018-6192 boo#1077755)</changelog>
  <changelog author="kbabioch@suse.com" date="1517572802">- CVE-2018-6192.patch: Use official fix from usptream (CVE-2018-6192
  boo#1077755)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- use freetype2-devel explictily as buildrequires</changelog>
  <changelog author="kbabioch@suse.com" date="1518436800">- Add CVE-2018-1000051.patch: Fix a Use After Free vulnerability in
  fz_keep_key_storable that can potentially result in DoS / remote
  code execution (CVE-2018-1000051 bsc#1080531)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1518609600">- Remove xorg-x11-devel from buildrequires</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1518609601">-mupdf-no-strip.patch: fix debuginfo generation</changelog>
  <changelog author="kbabioch@suse.com" date="1524484800">- Update to version 1.13:
  - primarily a bugfix release.
  - New "mutool sign" tool for showing and verifying digital signatures.
  - Chinese, Japanese, Korean, Cyrillic, and Greek font support in mutool create.
  - Improvements to annotation editing API.
- Dropped patches, which are included upstream now:
  - CVE-2018-6192.patch
  - CVE-2018-5686.patch
  - CVE-2018-6187.patch
  - CVE-2018-1000051.patch
  - CVE-2017-17858.patch
  - CVE-2018-6544.patch
  - fix-openjpeg-flags.patch</changelog>
  <changelog author="jengelh@inai.de" date="1524484801">- Ensure neutrality of description.</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1552305600">- Add build dependencies:
  * liblcms2-devel
  * Mesa-libGL-devel
  * freeglut-devel
  * pkgconfig(openssl)
  * pkgconfig(xi)
  * pkgconfig(xrandr)
- Change COPYING to %licnese instead of %doc
- Update mupdf-no-strip.patch
- Add patches from Fedora project:
  * mupdf-CVE-2018-16647.patch
  * mupdf-CVE-2018-16648.patch
  * mupdf-CVE-2018-18662.patch
  * 0001-Fix-699840-Use-saved-sig_widget-pointer-to-sign-sign.patch
  * 0001-Write-placeholder-appearance-streams-for-digital-sig.patch
  * 0001-fix-build-on-big-endian.patch
- Update to version 1.14:
  * New features:
  * Added "Source Han Serif" CJK fallback font.
  * Added more scripts to the Noto fallback fonts.
  * Multi-page PNM support.
  * "mutool show" now supports a path syntax for selecting objects to show.
  * Build system simplifications:
  * Auto-generated CMap, ICC, and JS source files are checked in to git.
  * Embedded CMap resources are now generated by a python script.
  * Embedded font resources are linked directly if using GNU ld or windows.
  * Namegen tool replaced by use of C macros.
  * Simplified Makefile.
  * Annotation editing:
  * New annotation editing mode in mupdf-gl.
  * Can create, edit, and delete most annotation types.
  * Can create appearance streams for most annotation types.
  * Can create appearance streams for Tx form fields.
  * Can create appearance streams for Ch form fields.
  * Form filling in mupdf-gl:
  * Can click buttons, checkboxes, and radioboxes.
  * Can fill out text fields using dialog box.
  * Can select choice options using dialog box.
  * Can verify and sign digital signatures.
  * Improved UI for mupdf-gl:
  * Password dialog.
  * Error dialog.
  * Open/save file dialog.
  * Snap selection to words or lines by holding control or control+shift.
  * Save and restore current location, bookmarks, and navigation history.
  * Bug fixes:
  * Improved CJK character fallback handling in EPUB.
  * API changes:
  * Pass rectangle and matrix structs by value.
  * Replaced PDF_NAME_Xxx macros with PDF_NAME(Xxx).
  * Added PDF_TRUE, PDF_FALSE, and PDF_NULL constant pdf_obj* macros.
  * Added helper functions: pdf_dict_get_int, etc.
  * Removed 'doc' argument in pdf_new_int, etc.
  * Quads instead of rects when highlighting and searching text.
  * mutool run: Pass arguments to script in scriptArgs global.</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1552564800">- Update source download link so we can submit it to Factory</changelog>
  <changelog author="Xaver Hellauer &lt;xaver@hellauer.bayern&gt;" date="1565784000">- Update to version 1.16.1
  * Changes in version 1.16.1:
  * Bugfixes
  * Changes in version 1.16.0:
  * api: Major overhaul of color management architecture.
  * api: Improved functions to verify/sign PDF documents.
  * api: Number tree accessor function pdf_lookup_number.
  * api: Parse and handle more options for PWG output.
  * api: Removed obsolete gproof document type.
  * api: User callbacks for warning and error messages.
  * epub: Changed default page size to A5.
  * epub: Draw embedded SVG documents in EPUB/XHTML.
  * epub: New Noto fonts covering more unicode scripts.
  * epub: Support small-caps font-variant.
  * pdf: Add Redact annotation type and function to apply redactions.
  * pdf: Add/remove/change encryption and password when saving PDF files.
  * pdf: Improvements to text handling in PDF filter processor.
  * pdf: MP and DP operators now call begin/end_layer device methods.
  * pdf: New and improved progressive loading.
  * svg: Draw external images in SVG documents.
  * mutool show: Add 'form' selector to list PDF form fields.
  * mutool sign: Sign PDF documents from the command line.
  * mutool sign: Verify signatures in PDF documents from the command line.
  * viewer: Option to save a script of user actions for replay with mutool run.
  * viewer: Runtime toggle for ICC and spot rendering.
  * viewer: Tooltip when hovering over a link in mupdf-gl.
  * Changes in version 1.15.0:
  * WebAssembly build target and examples.
  * Improved forms API in both C and Java bindings.
  * Improved forms JavaScript support.
  * Create appearance streams for more form field types.
  * Fixed many bugs in ICC color management.
  * Fixed many memory leaks in error cleanup.
  * Fixed bugs in pdfwrite output.
  * Improved text extraction from LaTeX documents with math symbols.
  * Improved trace device formatting.
  * Support CBZ and CBT files larger than 2Gb.
  * Show table of contents for FB2 and XHTML documents.
  * Show embedded raster images in SVG and XHTML documents.
  * Show FB2 cover page.
  * Add option to save PDF files without encryption.
  * Add inhibit-spaces option to stext device to turn off missing space detection.
  * Simplified fz_try/fz_always/fz_catch macros.
  * mupdf-gl improvements:
  * Automatically open annotation editor when selecting an annotation.
  * Full page color tinting option in mupdf-gl.
  * Show/hide table of contents sections.
  * Trigger a reload with sighup.
  * Toggle spot color mode with 'e'.
- Remove merged patches:
  * mupdf-CVE-2018-16647.patch
  * mupdf-CVE-2018-16648.patch
  * mupdf-CVE-2018-18662.patch
  * 0001-Fix-699840-Use-saved-sig_widget-pointer-to-sign-sign.patch
  * 0001-Write-placeholder-appearance-streams-for-digital-sig.patch
  * 0001-fix-build-on-big-endian.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1568116800">- Use -ffat-lto-objects when building static libraries.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1591963200">- Fix building with gcc10</changelog>
  <changelog author="Dan ?erm&#xE1;k &lt;dcermak@suse.com&gt;" date="1592568000">- Update to version 1.17.0
  * api: Improved accessors for markup/ink/polygon annotation data.
  * api: Chapter based API for faster EPUB loading.
  * api: Add more documentation to header files.
  * api: Improved digital signature signing and verification.
  * api: Validate changes in a signed PDF file.
  * build: Moved windows build to VS2019 solution.
  * pdf: Redaction now works on images and links as well as text.
  * pdf: Greek, Cyrillic, Chinese, Japanese, and Korean scripts in forms and annotations.
  * pdf: File attachment annotations.
  * pdf: Use CCITT Fax compression for 1-bit images when creating PDF files.
  * epub: More forgiving XHTML parsing.
  * epub: Accelerator files to cache chapter data for faster EPUB loading.
  * epub: Optimized memory use.
  * mutool run: Edit Markup, Ink, and Polygon annotation data.
  * mutool run: Fill out form fields.
  * viewer: Ask for confirmation before closing a PDF with unsaved changes.
  * viewer: Embed and extract file attachment annotations.
  * library: Miscellaneous bugfixes.
  * library: Fixes to store operation.
  * thirdparty: Updated Harfbuzz to 2.6.4.
  * thirdparty: Updated jbig2dec to 0.18.
  * thirdparty: Updated MuJS to 1.0.7.
  * thirdparty: Updated OpenJPEG to 2.3.1.
  * thirdparty: Updated cURL to 7.66.0 (windows only).</changelog>
  <changelog author="Hsiu-Ming Chang &lt;cges30901@gmail.com&gt;" date="1603627200">- Update to version 1.18.0
  * mutool draw: bbox output format.
  * mutool draw: structured text extraction in JSON format.
  * mutool run: StructuredText.walk()
  * mutool run: PDFPage.process() and PDFAnnotation.process()
  * mupdf-gl: Added IBM Common User Access shortcuts for copy &amp; paste.
  * mupdf-gl: Improved redaction UI.
  * java: Example desktop Java viewer.
  * wasm: WebAssembly viewer that runs in a browser.
  * html: Added HTML5 parser.
  * api: Dehyphenation option in structured text extraction, to improve searching for words that are hyphenated across lines.
  * api: pdf_new_date, pdf_to_date, pdf_dict_put_date and pdf_dict_get_date.
  * api: Added choice of image redaction algorithms: none, full, partial.
  * api: Optional use of Tesseract to use OCR to extract text.
  * svg: Many small parsing fixes.
  * svg: Parse inline CSS style attributes.
  * svg: Text elements (simple text layout only).
  * High security redaction -- save redacted PDF as flattened bitmap, guaranteed to not leak any sensitive redacted information.
  * Experimental C++ bindings.
  * Experimental Python bindings.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635163200">- update to 1.19.0
  * Remov support for Luratech JBIG2 and JPEG2000 decoders
  * Add 'extract' library for more output options: DOCX, ODT
  * Journal for undo and redo
  * Snapshot for auto-save and restore
  * Reflow document wrapper
  * Rollover appearance for annotations and widgets
  * Customize appearance of signed digital signatures
  * Progress and cancel callbacks to OCR functions
  * Create signature form fields
  * Improved Font and format support
  * developer visible improvements</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1650628800">- update to 1.19.1:
  * Updated zlib to 1.2.12 due to CVE-2018-25032</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1659355200">- update to 1.20.0 (bsc#1202858, CVE-2021-4216):
  * Experimental C# bindings
  * Cross compilation should no longer need a host compiler
  * Major additions to JNI bindings
  * New API to edit outline
  * New API to resolve and create links
  * New API to toggle individual layers in PDF
  * Layer panel in mupdf-gl
  * Layer option in mutool draw
  * New API to add a Javascript console
  * Console panel in mupdf-gl
  * Text search API extended to be able to distinguish between separate search hits
  * Command line tool improvements:
  * all: Negative page numbers to index from the last page
  * mutool draw: Add option to render document without text
  * mutool draw and convert: Support DPI option in text and HTML output
  * New hybrid HTML output format using "scripts/pdftohtml" script:
  * Graphics in a background image
  * Text on top
  * Improved WASM viewer demo
  * Support high DPI screens
  * Progressive loading
  * Update to zlib 1.2.12 for security fix</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1660737600">- update to 1.20.3:
  * return error, not success when unable to lock native device resource.
  * Bug 705620: Start journal operation instead of pushing local xref.
  * Ensure AndroidDrawDevice is destroyed, even upon exception.
  * source/pdf/pdf-clean.c: fix segv from incorrect call to fz_drop_pixmap().
  * Bug 705681: Enclose code in begin/end operation.
  * Guard against SEGVs when calling archive functions with NULL archive.</changelog>
</package>
<package pkgid="36687c5130af047171352ad761fadd3fc34642c32c35578c60aa9f3e8ddf877f" name="mupdf" arch="src">
  <version epoch="0" ver="1.20.3" rel="bp154.2.3.1"/>
  <changelog author="kbabioch@suse.com" date="1517572800">- Add CVE-2018-6187.patch to fix a heap buffer overflow in in pdf-write.c
  in the do_pdf_save_document function (CVE-2018-6187 boo#1077407)</changelog>
  <changelog author="kbabioch@suse.com" date="1517572801">- Add CVE-2018-6544.patch to fix a DoS in pdf_load_obj_stm within in
  pdf/pdf-xref.c (CVE-2018-6544 boo#1079100)
- Add CVE-2018-6192.patch to fix a DoS in pdf_read_new_xref within
  pdf/pdf-xref.c via crafted PDF file (CVE-2018-6192 boo#1077755)</changelog>
  <changelog author="kbabioch@suse.com" date="1517572802">- CVE-2018-6192.patch: Use official fix from usptream (CVE-2018-6192
  boo#1077755)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- use freetype2-devel explictily as buildrequires</changelog>
  <changelog author="kbabioch@suse.com" date="1518436800">- Add CVE-2018-1000051.patch: Fix a Use After Free vulnerability in
  fz_keep_key_storable that can potentially result in DoS / remote
  code execution (CVE-2018-1000051 bsc#1080531)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1518609600">- Remove xorg-x11-devel from buildrequires</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1518609601">-mupdf-no-strip.patch: fix debuginfo generation</changelog>
  <changelog author="kbabioch@suse.com" date="1524484800">- Update to version 1.13:
  - primarily a bugfix release.
  - New "mutool sign" tool for showing and verifying digital signatures.
  - Chinese, Japanese, Korean, Cyrillic, and Greek font support in mutool create.
  - Improvements to annotation editing API.
- Dropped patches, which are included upstream now:
  - CVE-2018-6192.patch
  - CVE-2018-5686.patch
  - CVE-2018-6187.patch
  - CVE-2018-1000051.patch
  - CVE-2017-17858.patch
  - CVE-2018-6544.patch
  - fix-openjpeg-flags.patch</changelog>
  <changelog author="jengelh@inai.de" date="1524484801">- Ensure neutrality of description.</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1552305600">- Add build dependencies:
  * liblcms2-devel
  * Mesa-libGL-devel
  * freeglut-devel
  * pkgconfig(openssl)
  * pkgconfig(xi)
  * pkgconfig(xrandr)
- Change COPYING to %licnese instead of %doc
- Update mupdf-no-strip.patch
- Add patches from Fedora project:
  * mupdf-CVE-2018-16647.patch
  * mupdf-CVE-2018-16648.patch
  * mupdf-CVE-2018-18662.patch
  * 0001-Fix-699840-Use-saved-sig_widget-pointer-to-sign-sign.patch
  * 0001-Write-placeholder-appearance-streams-for-digital-sig.patch
  * 0001-fix-build-on-big-endian.patch
- Update to version 1.14:
  * New features:
  * Added "Source Han Serif" CJK fallback font.
  * Added more scripts to the Noto fallback fonts.
  * Multi-page PNM support.
  * "mutool show" now supports a path syntax for selecting objects to show.
  * Build system simplifications:
  * Auto-generated CMap, ICC, and JS source files are checked in to git.
  * Embedded CMap resources are now generated by a python script.
  * Embedded font resources are linked directly if using GNU ld or windows.
  * Namegen tool replaced by use of C macros.
  * Simplified Makefile.
  * Annotation editing:
  * New annotation editing mode in mupdf-gl.
  * Can create, edit, and delete most annotation types.
  * Can create appearance streams for most annotation types.
  * Can create appearance streams for Tx form fields.
  * Can create appearance streams for Ch form fields.
  * Form filling in mupdf-gl:
  * Can click buttons, checkboxes, and radioboxes.
  * Can fill out text fields using dialog box.
  * Can select choice options using dialog box.
  * Can verify and sign digital signatures.
  * Improved UI for mupdf-gl:
  * Password dialog.
  * Error dialog.
  * Open/save file dialog.
  * Snap selection to words or lines by holding control or control+shift.
  * Save and restore current location, bookmarks, and navigation history.
  * Bug fixes:
  * Improved CJK character fallback handling in EPUB.
  * API changes:
  * Pass rectangle and matrix structs by value.
  * Replaced PDF_NAME_Xxx macros with PDF_NAME(Xxx).
  * Added PDF_TRUE, PDF_FALSE, and PDF_NULL constant pdf_obj* macros.
  * Added helper functions: pdf_dict_get_int, etc.
  * Removed 'doc' argument in pdf_new_int, etc.
  * Quads instead of rects when highlighting and searching text.
  * mutool run: Pass arguments to script in scriptArgs global.</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1552564800">- Update source download link so we can submit it to Factory</changelog>
  <changelog author="Xaver Hellauer &lt;xaver@hellauer.bayern&gt;" date="1565784000">- Update to version 1.16.1
  * Changes in version 1.16.1:
  * Bugfixes
  * Changes in version 1.16.0:
  * api: Major overhaul of color management architecture.
  * api: Improved functions to verify/sign PDF documents.
  * api: Number tree accessor function pdf_lookup_number.
  * api: Parse and handle more options for PWG output.
  * api: Removed obsolete gproof document type.
  * api: User callbacks for warning and error messages.
  * epub: Changed default page size to A5.
  * epub: Draw embedded SVG documents in EPUB/XHTML.
  * epub: New Noto fonts covering more unicode scripts.
  * epub: Support small-caps font-variant.
  * pdf: Add Redact annotation type and function to apply redactions.
  * pdf: Add/remove/change encryption and password when saving PDF files.
  * pdf: Improvements to text handling in PDF filter processor.
  * pdf: MP and DP operators now call begin/end_layer device methods.
  * pdf: New and improved progressive loading.
  * svg: Draw external images in SVG documents.
  * mutool show: Add 'form' selector to list PDF form fields.
  * mutool sign: Sign PDF documents from the command line.
  * mutool sign: Verify signatures in PDF documents from the command line.
  * viewer: Option to save a script of user actions for replay with mutool run.
  * viewer: Runtime toggle for ICC and spot rendering.
  * viewer: Tooltip when hovering over a link in mupdf-gl.
  * Changes in version 1.15.0:
  * WebAssembly build target and examples.
  * Improved forms API in both C and Java bindings.
  * Improved forms JavaScript support.
  * Create appearance streams for more form field types.
  * Fixed many bugs in ICC color management.
  * Fixed many memory leaks in error cleanup.
  * Fixed bugs in pdfwrite output.
  * Improved text extraction from LaTeX documents with math symbols.
  * Improved trace device formatting.
  * Support CBZ and CBT files larger than 2Gb.
  * Show table of contents for FB2 and XHTML documents.
  * Show embedded raster images in SVG and XHTML documents.
  * Show FB2 cover page.
  * Add option to save PDF files without encryption.
  * Add inhibit-spaces option to stext device to turn off missing space detection.
  * Simplified fz_try/fz_always/fz_catch macros.
  * mupdf-gl improvements:
  * Automatically open annotation editor when selecting an annotation.
  * Full page color tinting option in mupdf-gl.
  * Show/hide table of contents sections.
  * Trigger a reload with sighup.
  * Toggle spot color mode with 'e'.
- Remove merged patches:
  * mupdf-CVE-2018-16647.patch
  * mupdf-CVE-2018-16648.patch
  * mupdf-CVE-2018-18662.patch
  * 0001-Fix-699840-Use-saved-sig_widget-pointer-to-sign-sign.patch
  * 0001-Write-placeholder-appearance-streams-for-digital-sig.patch
  * 0001-fix-build-on-big-endian.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1568116800">- Use -ffat-lto-objects when building static libraries.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1591963200">- Fix building with gcc10</changelog>
  <changelog author="Dan ?erm&#xE1;k &lt;dcermak@suse.com&gt;" date="1592568000">- Update to version 1.17.0
  * api: Improved accessors for markup/ink/polygon annotation data.
  * api: Chapter based API for faster EPUB loading.
  * api: Add more documentation to header files.
  * api: Improved digital signature signing and verification.
  * api: Validate changes in a signed PDF file.
  * build: Moved windows build to VS2019 solution.
  * pdf: Redaction now works on images and links as well as text.
  * pdf: Greek, Cyrillic, Chinese, Japanese, and Korean scripts in forms and annotations.
  * pdf: File attachment annotations.
  * pdf: Use CCITT Fax compression for 1-bit images when creating PDF files.
  * epub: More forgiving XHTML parsing.
  * epub: Accelerator files to cache chapter data for faster EPUB loading.
  * epub: Optimized memory use.
  * mutool run: Edit Markup, Ink, and Polygon annotation data.
  * mutool run: Fill out form fields.
  * viewer: Ask for confirmation before closing a PDF with unsaved changes.
  * viewer: Embed and extract file attachment annotations.
  * library: Miscellaneous bugfixes.
  * library: Fixes to store operation.
  * thirdparty: Updated Harfbuzz to 2.6.4.
  * thirdparty: Updated jbig2dec to 0.18.
  * thirdparty: Updated MuJS to 1.0.7.
  * thirdparty: Updated OpenJPEG to 2.3.1.
  * thirdparty: Updated cURL to 7.66.0 (windows only).</changelog>
  <changelog author="Hsiu-Ming Chang &lt;cges30901@gmail.com&gt;" date="1603627200">- Update to version 1.18.0
  * mutool draw: bbox output format.
  * mutool draw: structured text extraction in JSON format.
  * mutool run: StructuredText.walk()
  * mutool run: PDFPage.process() and PDFAnnotation.process()
  * mupdf-gl: Added IBM Common User Access shortcuts for copy &amp; paste.
  * mupdf-gl: Improved redaction UI.
  * java: Example desktop Java viewer.
  * wasm: WebAssembly viewer that runs in a browser.
  * html: Added HTML5 parser.
  * api: Dehyphenation option in structured text extraction, to improve searching for words that are hyphenated across lines.
  * api: pdf_new_date, pdf_to_date, pdf_dict_put_date and pdf_dict_get_date.
  * api: Added choice of image redaction algorithms: none, full, partial.
  * api: Optional use of Tesseract to use OCR to extract text.
  * svg: Many small parsing fixes.
  * svg: Parse inline CSS style attributes.
  * svg: Text elements (simple text layout only).
  * High security redaction -- save redacted PDF as flattened bitmap, guaranteed to not leak any sensitive redacted information.
  * Experimental C++ bindings.
  * Experimental Python bindings.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635163200">- update to 1.19.0
  * Remov support for Luratech JBIG2 and JPEG2000 decoders
  * Add 'extract' library for more output options: DOCX, ODT
  * Journal for undo and redo
  * Snapshot for auto-save and restore
  * Reflow document wrapper
  * Rollover appearance for annotations and widgets
  * Customize appearance of signed digital signatures
  * Progress and cancel callbacks to OCR functions
  * Create signature form fields
  * Improved Font and format support
  * developer visible improvements</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1650628800">- update to 1.19.1:
  * Updated zlib to 1.2.12 due to CVE-2018-25032</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1659355200">- update to 1.20.0 (bsc#1202858, CVE-2021-4216):
  * Experimental C# bindings
  * Cross compilation should no longer need a host compiler
  * Major additions to JNI bindings
  * New API to edit outline
  * New API to resolve and create links
  * New API to toggle individual layers in PDF
  * Layer panel in mupdf-gl
  * Layer option in mutool draw
  * New API to add a Javascript console
  * Console panel in mupdf-gl
  * Text search API extended to be able to distinguish between separate search hits
  * Command line tool improvements:
  * all: Negative page numbers to index from the last page
  * mutool draw: Add option to render document without text
  * mutool draw and convert: Support DPI option in text and HTML output
  * New hybrid HTML output format using "scripts/pdftohtml" script:
  * Graphics in a background image
  * Text on top
  * Improved WASM viewer demo
  * Support high DPI screens
  * Progressive loading
  * Update to zlib 1.2.12 for security fix</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1660737600">- update to 1.20.3:
  * return error, not success when unable to lock native device resource.
  * Bug 705620: Start journal operation instead of pushing local xref.
  * Ensure AndroidDrawDevice is destroyed, even upon exception.
  * source/pdf/pdf-clean.c: fix segv from incorrect call to fz_drop_pixmap().
  * Bug 705681: Enclose code in begin/end operation.
  * Guard against SEGVs when calling archive functions with NULL archive.</changelog>
</package>
<package pkgid="8fdac97ce97535278e6f6acada6b1481742d54bb8e5ee84a85c56b934987eb71" name="mupdf" arch="x86_64">
  <version epoch="0" ver="1.20.3" rel="bp154.2.3.1"/>
  <changelog author="kbabioch@suse.com" date="1517572800">- Add CVE-2018-6187.patch to fix a heap buffer overflow in in pdf-write.c
  in the do_pdf_save_document function (CVE-2018-6187 boo#1077407)</changelog>
  <changelog author="kbabioch@suse.com" date="1517572801">- Add CVE-2018-6544.patch to fix a DoS in pdf_load_obj_stm within in
  pdf/pdf-xref.c (CVE-2018-6544 boo#1079100)
- Add CVE-2018-6192.patch to fix a DoS in pdf_read_new_xref within
  pdf/pdf-xref.c via crafted PDF file (CVE-2018-6192 boo#1077755)</changelog>
  <changelog author="kbabioch@suse.com" date="1517572802">- CVE-2018-6192.patch: Use official fix from usptream (CVE-2018-6192
  boo#1077755)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- use freetype2-devel explictily as buildrequires</changelog>
  <changelog author="kbabioch@suse.com" date="1518436800">- Add CVE-2018-1000051.patch: Fix a Use After Free vulnerability in
  fz_keep_key_storable that can potentially result in DoS / remote
  code execution (CVE-2018-1000051 bsc#1080531)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1518609600">- Remove xorg-x11-devel from buildrequires</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1518609601">-mupdf-no-strip.patch: fix debuginfo generation</changelog>
  <changelog author="kbabioch@suse.com" date="1524484800">- Update to version 1.13:
  - primarily a bugfix release.
  - New "mutool sign" tool for showing and verifying digital signatures.
  - Chinese, Japanese, Korean, Cyrillic, and Greek font support in mutool create.
  - Improvements to annotation editing API.
- Dropped patches, which are included upstream now:
  - CVE-2018-6192.patch
  - CVE-2018-5686.patch
  - CVE-2018-6187.patch
  - CVE-2018-1000051.patch
  - CVE-2017-17858.patch
  - CVE-2018-6544.patch
  - fix-openjpeg-flags.patch</changelog>
  <changelog author="jengelh@inai.de" date="1524484801">- Ensure neutrality of description.</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1552305600">- Add build dependencies:
  * liblcms2-devel
  * Mesa-libGL-devel
  * freeglut-devel
  * pkgconfig(openssl)
  * pkgconfig(xi)
  * pkgconfig(xrandr)
- Change COPYING to %licnese instead of %doc
- Update mupdf-no-strip.patch
- Add patches from Fedora project:
  * mupdf-CVE-2018-16647.patch
  * mupdf-CVE-2018-16648.patch
  * mupdf-CVE-2018-18662.patch
  * 0001-Fix-699840-Use-saved-sig_widget-pointer-to-sign-sign.patch
  * 0001-Write-placeholder-appearance-streams-for-digital-sig.patch
  * 0001-fix-build-on-big-endian.patch
- Update to version 1.14:
  * New features:
  * Added "Source Han Serif" CJK fallback font.
  * Added more scripts to the Noto fallback fonts.
  * Multi-page PNM support.
  * "mutool show" now supports a path syntax for selecting objects to show.
  * Build system simplifications:
  * Auto-generated CMap, ICC, and JS source files are checked in to git.
  * Embedded CMap resources are now generated by a python script.
  * Embedded font resources are linked directly if using GNU ld or windows.
  * Namegen tool replaced by use of C macros.
  * Simplified Makefile.
  * Annotation editing:
  * New annotation editing mode in mupdf-gl.
  * Can create, edit, and delete most annotation types.
  * Can create appearance streams for most annotation types.
  * Can create appearance streams for Tx form fields.
  * Can create appearance streams for Ch form fields.
  * Form filling in mupdf-gl:
  * Can click buttons, checkboxes, and radioboxes.
  * Can fill out text fields using dialog box.
  * Can select choice options using dialog box.
  * Can verify and sign digital signatures.
  * Improved UI for mupdf-gl:
  * Password dialog.
  * Error dialog.
  * Open/save file dialog.
  * Snap selection to words or lines by holding control or control+shift.
  * Save and restore current location, bookmarks, and navigation history.
  * Bug fixes:
  * Improved CJK character fallback handling in EPUB.
  * API changes:
  * Pass rectangle and matrix structs by value.
  * Replaced PDF_NAME_Xxx macros with PDF_NAME(Xxx).
  * Added PDF_TRUE, PDF_FALSE, and PDF_NULL constant pdf_obj* macros.
  * Added helper functions: pdf_dict_get_int, etc.
  * Removed 'doc' argument in pdf_new_int, etc.
  * Quads instead of rects when highlighting and searching text.
  * mutool run: Pass arguments to script in scriptArgs global.</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1552564800">- Update source download link so we can submit it to Factory</changelog>
  <changelog author="Xaver Hellauer &lt;xaver@hellauer.bayern&gt;" date="1565784000">- Update to version 1.16.1
  * Changes in version 1.16.1:
  * Bugfixes
  * Changes in version 1.16.0:
  * api: Major overhaul of color management architecture.
  * api: Improved functions to verify/sign PDF documents.
  * api: Number tree accessor function pdf_lookup_number.
  * api: Parse and handle more options for PWG output.
  * api: Removed obsolete gproof document type.
  * api: User callbacks for warning and error messages.
  * epub: Changed default page size to A5.
  * epub: Draw embedded SVG documents in EPUB/XHTML.
  * epub: New Noto fonts covering more unicode scripts.
  * epub: Support small-caps font-variant.
  * pdf: Add Redact annotation type and function to apply redactions.
  * pdf: Add/remove/change encryption and password when saving PDF files.
  * pdf: Improvements to text handling in PDF filter processor.
  * pdf: MP and DP operators now call begin/end_layer device methods.
  * pdf: New and improved progressive loading.
  * svg: Draw external images in SVG documents.
  * mutool show: Add 'form' selector to list PDF form fields.
  * mutool sign: Sign PDF documents from the command line.
  * mutool sign: Verify signatures in PDF documents from the command line.
  * viewer: Option to save a script of user actions for replay with mutool run.
  * viewer: Runtime toggle for ICC and spot rendering.
  * viewer: Tooltip when hovering over a link in mupdf-gl.
  * Changes in version 1.15.0:
  * WebAssembly build target and examples.
  * Improved forms API in both C and Java bindings.
  * Improved forms JavaScript support.
  * Create appearance streams for more form field types.
  * Fixed many bugs in ICC color management.
  * Fixed many memory leaks in error cleanup.
  * Fixed bugs in pdfwrite output.
  * Improved text extraction from LaTeX documents with math symbols.
  * Improved trace device formatting.
  * Support CBZ and CBT files larger than 2Gb.
  * Show table of contents for FB2 and XHTML documents.
  * Show embedded raster images in SVG and XHTML documents.
  * Show FB2 cover page.
  * Add option to save PDF files without encryption.
  * Add inhibit-spaces option to stext device to turn off missing space detection.
  * Simplified fz_try/fz_always/fz_catch macros.
  * mupdf-gl improvements:
  * Automatically open annotation editor when selecting an annotation.
  * Full page color tinting option in mupdf-gl.
  * Show/hide table of contents sections.
  * Trigger a reload with sighup.
  * Toggle spot color mode with 'e'.
- Remove merged patches:
  * mupdf-CVE-2018-16647.patch
  * mupdf-CVE-2018-16648.patch
  * mupdf-CVE-2018-18662.patch
  * 0001-Fix-699840-Use-saved-sig_widget-pointer-to-sign-sign.patch
  * 0001-Write-placeholder-appearance-streams-for-digital-sig.patch
  * 0001-fix-build-on-big-endian.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1568116800">- Use -ffat-lto-objects when building static libraries.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1591963200">- Fix building with gcc10</changelog>
  <changelog author="Dan ?erm&#xE1;k &lt;dcermak@suse.com&gt;" date="1592568000">- Update to version 1.17.0
  * api: Improved accessors for markup/ink/polygon annotation data.
  * api: Chapter based API for faster EPUB loading.
  * api: Add more documentation to header files.
  * api: Improved digital signature signing and verification.
  * api: Validate changes in a signed PDF file.
  * build: Moved windows build to VS2019 solution.
  * pdf: Redaction now works on images and links as well as text.
  * pdf: Greek, Cyrillic, Chinese, Japanese, and Korean scripts in forms and annotations.
  * pdf: File attachment annotations.
  * pdf: Use CCITT Fax compression for 1-bit images when creating PDF files.
  * epub: More forgiving XHTML parsing.
  * epub: Accelerator files to cache chapter data for faster EPUB loading.
  * epub: Optimized memory use.
  * mutool run: Edit Markup, Ink, and Polygon annotation data.
  * mutool run: Fill out form fields.
  * viewer: Ask for confirmation before closing a PDF with unsaved changes.
  * viewer: Embed and extract file attachment annotations.
  * library: Miscellaneous bugfixes.
  * library: Fixes to store operation.
  * thirdparty: Updated Harfbuzz to 2.6.4.
  * thirdparty: Updated jbig2dec to 0.18.
  * thirdparty: Updated MuJS to 1.0.7.
  * thirdparty: Updated OpenJPEG to 2.3.1.
  * thirdparty: Updated cURL to 7.66.0 (windows only).</changelog>
  <changelog author="Hsiu-Ming Chang &lt;cges30901@gmail.com&gt;" date="1603627200">- Update to version 1.18.0
  * mutool draw: bbox output format.
  * mutool draw: structured text extraction in JSON format.
  * mutool run: StructuredText.walk()
  * mutool run: PDFPage.process() and PDFAnnotation.process()
  * mupdf-gl: Added IBM Common User Access shortcuts for copy &amp; paste.
  * mupdf-gl: Improved redaction UI.
  * java: Example desktop Java viewer.
  * wasm: WebAssembly viewer that runs in a browser.
  * html: Added HTML5 parser.
  * api: Dehyphenation option in structured text extraction, to improve searching for words that are hyphenated across lines.
  * api: pdf_new_date, pdf_to_date, pdf_dict_put_date and pdf_dict_get_date.
  * api: Added choice of image redaction algorithms: none, full, partial.
  * api: Optional use of Tesseract to use OCR to extract text.
  * svg: Many small parsing fixes.
  * svg: Parse inline CSS style attributes.
  * svg: Text elements (simple text layout only).
  * High security redaction -- save redacted PDF as flattened bitmap, guaranteed to not leak any sensitive redacted information.
  * Experimental C++ bindings.
  * Experimental Python bindings.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635163200">- update to 1.19.0
  * Remov support for Luratech JBIG2 and JPEG2000 decoders
  * Add 'extract' library for more output options: DOCX, ODT
  * Journal for undo and redo
  * Snapshot for auto-save and restore
  * Reflow document wrapper
  * Rollover appearance for annotations and widgets
  * Customize appearance of signed digital signatures
  * Progress and cancel callbacks to OCR functions
  * Create signature form fields
  * Improved Font and format support
  * developer visible improvements</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1650628800">- update to 1.19.1:
  * Updated zlib to 1.2.12 due to CVE-2018-25032</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1659355200">- update to 1.20.0 (bsc#1202858, CVE-2021-4216):
  * Experimental C# bindings
  * Cross compilation should no longer need a host compiler
  * Major additions to JNI bindings
  * New API to edit outline
  * New API to resolve and create links
  * New API to toggle individual layers in PDF
  * Layer panel in mupdf-gl
  * Layer option in mutool draw
  * New API to add a Javascript console
  * Console panel in mupdf-gl
  * Text search API extended to be able to distinguish between separate search hits
  * Command line tool improvements:
  * all: Negative page numbers to index from the last page
  * mutool draw: Add option to render document without text
  * mutool draw and convert: Support DPI option in text and HTML output
  * New hybrid HTML output format using "scripts/pdftohtml" script:
  * Graphics in a background image
  * Text on top
  * Improved WASM viewer demo
  * Support high DPI screens
  * Progressive loading
  * Update to zlib 1.2.12 for security fix</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1660737600">- update to 1.20.3:
  * return error, not success when unable to lock native device resource.
  * Bug 705620: Start journal operation instead of pushing local xref.
  * Ensure AndroidDrawDevice is destroyed, even upon exception.
  * source/pdf/pdf-clean.c: fix segv from incorrect call to fz_drop_pixmap().
  * Bug 705681: Enclose code in begin/end operation.
  * Guard against SEGVs when calling archive functions with NULL archive.</changelog>
</package>
<package pkgid="43639f1d814577d354a4f0999b79fccb69e1b1ae1f19d09e7c7a0f77de978954" name="mupdf-devel-static" arch="aarch64">
  <version epoch="0" ver="1.20.3" rel="bp154.2.3.1"/>
  <changelog author="kbabioch@suse.com" date="1517572800">- Add CVE-2018-6187.patch to fix a heap buffer overflow in in pdf-write.c
  in the do_pdf_save_document function (CVE-2018-6187 boo#1077407)</changelog>
  <changelog author="kbabioch@suse.com" date="1517572801">- Add CVE-2018-6544.patch to fix a DoS in pdf_load_obj_stm within in
  pdf/pdf-xref.c (CVE-2018-6544 boo#1079100)
- Add CVE-2018-6192.patch to fix a DoS in pdf_read_new_xref within
  pdf/pdf-xref.c via crafted PDF file (CVE-2018-6192 boo#1077755)</changelog>
  <changelog author="kbabioch@suse.com" date="1517572802">- CVE-2018-6192.patch: Use official fix from usptream (CVE-2018-6192
  boo#1077755)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- use freetype2-devel explictily as buildrequires</changelog>
  <changelog author="kbabioch@suse.com" date="1518436800">- Add CVE-2018-1000051.patch: Fix a Use After Free vulnerability in
  fz_keep_key_storable that can potentially result in DoS / remote
  code execution (CVE-2018-1000051 bsc#1080531)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1518609600">- Remove xorg-x11-devel from buildrequires</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1518609601">-mupdf-no-strip.patch: fix debuginfo generation</changelog>
  <changelog author="kbabioch@suse.com" date="1524484800">- Update to version 1.13:
  - primarily a bugfix release.
  - New "mutool sign" tool for showing and verifying digital signatures.
  - Chinese, Japanese, Korean, Cyrillic, and Greek font support in mutool create.
  - Improvements to annotation editing API.
- Dropped patches, which are included upstream now:
  - CVE-2018-6192.patch
  - CVE-2018-5686.patch
  - CVE-2018-6187.patch
  - CVE-2018-1000051.patch
  - CVE-2017-17858.patch
  - CVE-2018-6544.patch
  - fix-openjpeg-flags.patch</changelog>
  <changelog author="jengelh@inai.de" date="1524484801">- Ensure neutrality of description.</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1552305600">- Add build dependencies:
  * liblcms2-devel
  * Mesa-libGL-devel
  * freeglut-devel
  * pkgconfig(openssl)
  * pkgconfig(xi)
  * pkgconfig(xrandr)
- Change COPYING to %licnese instead of %doc
- Update mupdf-no-strip.patch
- Add patches from Fedora project:
  * mupdf-CVE-2018-16647.patch
  * mupdf-CVE-2018-16648.patch
  * mupdf-CVE-2018-18662.patch
  * 0001-Fix-699840-Use-saved-sig_widget-pointer-to-sign-sign.patch
  * 0001-Write-placeholder-appearance-streams-for-digital-sig.patch
  * 0001-fix-build-on-big-endian.patch
- Update to version 1.14:
  * New features:
  * Added "Source Han Serif" CJK fallback font.
  * Added more scripts to the Noto fallback fonts.
  * Multi-page PNM support.
  * "mutool show" now supports a path syntax for selecting objects to show.
  * Build system simplifications:
  * Auto-generated CMap, ICC, and JS source files are checked in to git.
  * Embedded CMap resources are now generated by a python script.
  * Embedded font resources are linked directly if using GNU ld or windows.
  * Namegen tool replaced by use of C macros.
  * Simplified Makefile.
  * Annotation editing:
  * New annotation editing mode in mupdf-gl.
  * Can create, edit, and delete most annotation types.
  * Can create appearance streams for most annotation types.
  * Can create appearance streams for Tx form fields.
  * Can create appearance streams for Ch form fields.
  * Form filling in mupdf-gl:
  * Can click buttons, checkboxes, and radioboxes.
  * Can fill out text fields using dialog box.
  * Can select choice options using dialog box.
  * Can verify and sign digital signatures.
  * Improved UI for mupdf-gl:
  * Password dialog.
  * Error dialog.
  * Open/save file dialog.
  * Snap selection to words or lines by holding control or control+shift.
  * Save and restore current location, bookmarks, and navigation history.
  * Bug fixes:
  * Improved CJK character fallback handling in EPUB.
  * API changes:
  * Pass rectangle and matrix structs by value.
  * Replaced PDF_NAME_Xxx macros with PDF_NAME(Xxx).
  * Added PDF_TRUE, PDF_FALSE, and PDF_NULL constant pdf_obj* macros.
  * Added helper functions: pdf_dict_get_int, etc.
  * Removed 'doc' argument in pdf_new_int, etc.
  * Quads instead of rects when highlighting and searching text.
  * mutool run: Pass arguments to script in scriptArgs global.</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1552564800">- Update source download link so we can submit it to Factory</changelog>
  <changelog author="Xaver Hellauer &lt;xaver@hellauer.bayern&gt;" date="1565784000">- Update to version 1.16.1
  * Changes in version 1.16.1:
  * Bugfixes
  * Changes in version 1.16.0:
  * api: Major overhaul of color management architecture.
  * api: Improved functions to verify/sign PDF documents.
  * api: Number tree accessor function pdf_lookup_number.
  * api: Parse and handle more options for PWG output.
  * api: Removed obsolete gproof document type.
  * api: User callbacks for warning and error messages.
  * epub: Changed default page size to A5.
  * epub: Draw embedded SVG documents in EPUB/XHTML.
  * epub: New Noto fonts covering more unicode scripts.
  * epub: Support small-caps font-variant.
  * pdf: Add Redact annotation type and function to apply redactions.
  * pdf: Add/remove/change encryption and password when saving PDF files.
  * pdf: Improvements to text handling in PDF filter processor.
  * pdf: MP and DP operators now call begin/end_layer device methods.
  * pdf: New and improved progressive loading.
  * svg: Draw external images in SVG documents.
  * mutool show: Add 'form' selector to list PDF form fields.
  * mutool sign: Sign PDF documents from the command line.
  * mutool sign: Verify signatures in PDF documents from the command line.
  * viewer: Option to save a script of user actions for replay with mutool run.
  * viewer: Runtime toggle for ICC and spot rendering.
  * viewer: Tooltip when hovering over a link in mupdf-gl.
  * Changes in version 1.15.0:
  * WebAssembly build target and examples.
  * Improved forms API in both C and Java bindings.
  * Improved forms JavaScript support.
  * Create appearance streams for more form field types.
  * Fixed many bugs in ICC color management.
  * Fixed many memory leaks in error cleanup.
  * Fixed bugs in pdfwrite output.
  * Improved text extraction from LaTeX documents with math symbols.
  * Improved trace device formatting.
  * Support CBZ and CBT files larger than 2Gb.
  * Show table of contents for FB2 and XHTML documents.
  * Show embedded raster images in SVG and XHTML documents.
  * Show FB2 cover page.
  * Add option to save PDF files without encryption.
  * Add inhibit-spaces option to stext device to turn off missing space detection.
  * Simplified fz_try/fz_always/fz_catch macros.
  * mupdf-gl improvements:
  * Automatically open annotation editor when selecting an annotation.
  * Full page color tinting option in mupdf-gl.
  * Show/hide table of contents sections.
  * Trigger a reload with sighup.
  * Toggle spot color mode with 'e'.
- Remove merged patches:
  * mupdf-CVE-2018-16647.patch
  * mupdf-CVE-2018-16648.patch
  * mupdf-CVE-2018-18662.patch
  * 0001-Fix-699840-Use-saved-sig_widget-pointer-to-sign-sign.patch
  * 0001-Write-placeholder-appearance-streams-for-digital-sig.patch
  * 0001-fix-build-on-big-endian.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1568116800">- Use -ffat-lto-objects when building static libraries.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1591963200">- Fix building with gcc10</changelog>
  <changelog author="Dan ?erm&#xE1;k &lt;dcermak@suse.com&gt;" date="1592568000">- Update to version 1.17.0
  * api: Improved accessors for markup/ink/polygon annotation data.
  * api: Chapter based API for faster EPUB loading.
  * api: Add more documentation to header files.
  * api: Improved digital signature signing and verification.
  * api: Validate changes in a signed PDF file.
  * build: Moved windows build to VS2019 solution.
  * pdf: Redaction now works on images and links as well as text.
  * pdf: Greek, Cyrillic, Chinese, Japanese, and Korean scripts in forms and annotations.
  * pdf: File attachment annotations.
  * pdf: Use CCITT Fax compression for 1-bit images when creating PDF files.
  * epub: More forgiving XHTML parsing.
  * epub: Accelerator files to cache chapter data for faster EPUB loading.
  * epub: Optimized memory use.
  * mutool run: Edit Markup, Ink, and Polygon annotation data.
  * mutool run: Fill out form fields.
  * viewer: Ask for confirmation before closing a PDF with unsaved changes.
  * viewer: Embed and extract file attachment annotations.
  * library: Miscellaneous bugfixes.
  * library: Fixes to store operation.
  * thirdparty: Updated Harfbuzz to 2.6.4.
  * thirdparty: Updated jbig2dec to 0.18.
  * thirdparty: Updated MuJS to 1.0.7.
  * thirdparty: Updated OpenJPEG to 2.3.1.
  * thirdparty: Updated cURL to 7.66.0 (windows only).</changelog>
  <changelog author="Hsiu-Ming Chang &lt;cges30901@gmail.com&gt;" date="1603627200">- Update to version 1.18.0
  * mutool draw: bbox output format.
  * mutool draw: structured text extraction in JSON format.
  * mutool run: StructuredText.walk()
  * mutool run: PDFPage.process() and PDFAnnotation.process()
  * mupdf-gl: Added IBM Common User Access shortcuts for copy &amp; paste.
  * mupdf-gl: Improved redaction UI.
  * java: Example desktop Java viewer.
  * wasm: WebAssembly viewer that runs in a browser.
  * html: Added HTML5 parser.
  * api: Dehyphenation option in structured text extraction, to improve searching for words that are hyphenated across lines.
  * api: pdf_new_date, pdf_to_date, pdf_dict_put_date and pdf_dict_get_date.
  * api: Added choice of image redaction algorithms: none, full, partial.
  * api: Optional use of Tesseract to use OCR to extract text.
  * svg: Many small parsing fixes.
  * svg: Parse inline CSS style attributes.
  * svg: Text elements (simple text layout only).
  * High security redaction -- save redacted PDF as flattened bitmap, guaranteed to not leak any sensitive redacted information.
  * Experimental C++ bindings.
  * Experimental Python bindings.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635163200">- update to 1.19.0
  * Remov support for Luratech JBIG2 and JPEG2000 decoders
  * Add 'extract' library for more output options: DOCX, ODT
  * Journal for undo and redo
  * Snapshot for auto-save and restore
  * Reflow document wrapper
  * Rollover appearance for annotations and widgets
  * Customize appearance of signed digital signatures
  * Progress and cancel callbacks to OCR functions
  * Create signature form fields
  * Improved Font and format support
  * developer visible improvements</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1650628800">- update to 1.19.1:
  * Updated zlib to 1.2.12 due to CVE-2018-25032</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1659355200">- update to 1.20.0 (bsc#1202858, CVE-2021-4216):
  * Experimental C# bindings
  * Cross compilation should no longer need a host compiler
  * Major additions to JNI bindings
  * New API to edit outline
  * New API to resolve and create links
  * New API to toggle individual layers in PDF
  * Layer panel in mupdf-gl
  * Layer option in mutool draw
  * New API to add a Javascript console
  * Console panel in mupdf-gl
  * Text search API extended to be able to distinguish between separate search hits
  * Command line tool improvements:
  * all: Negative page numbers to index from the last page
  * mutool draw: Add option to render document without text
  * mutool draw and convert: Support DPI option in text and HTML output
  * New hybrid HTML output format using "scripts/pdftohtml" script:
  * Graphics in a background image
  * Text on top
  * Improved WASM viewer demo
  * Support high DPI screens
  * Progressive loading
  * Update to zlib 1.2.12 for security fix</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1660737600">- update to 1.20.3:
  * return error, not success when unable to lock native device resource.
  * Bug 705620: Start journal operation instead of pushing local xref.
  * Ensure AndroidDrawDevice is destroyed, even upon exception.
  * source/pdf/pdf-clean.c: fix segv from incorrect call to fz_drop_pixmap().
  * Bug 705681: Enclose code in begin/end operation.
  * Guard against SEGVs when calling archive functions with NULL archive.</changelog>
</package>
<package pkgid="ac928a18c6dd034091d6087dc6dded88bb857db82fc9d811a07f6b1b1a1652dd" name="mupdf-devel-static" arch="ppc64le">
  <version epoch="0" ver="1.20.3" rel="bp154.2.3.1"/>
  <changelog author="kbabioch@suse.com" date="1517572800">- Add CVE-2018-6187.patch to fix a heap buffer overflow in in pdf-write.c
  in the do_pdf_save_document function (CVE-2018-6187 boo#1077407)</changelog>
  <changelog author="kbabioch@suse.com" date="1517572801">- Add CVE-2018-6544.patch to fix a DoS in pdf_load_obj_stm within in
  pdf/pdf-xref.c (CVE-2018-6544 boo#1079100)
- Add CVE-2018-6192.patch to fix a DoS in pdf_read_new_xref within
  pdf/pdf-xref.c via crafted PDF file (CVE-2018-6192 boo#1077755)</changelog>
  <changelog author="kbabioch@suse.com" date="1517572802">- CVE-2018-6192.patch: Use official fix from usptream (CVE-2018-6192
  boo#1077755)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- use freetype2-devel explictily as buildrequires</changelog>
  <changelog author="kbabioch@suse.com" date="1518436800">- Add CVE-2018-1000051.patch: Fix a Use After Free vulnerability in
  fz_keep_key_storable that can potentially result in DoS / remote
  code execution (CVE-2018-1000051 bsc#1080531)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1518609600">- Remove xorg-x11-devel from buildrequires</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1518609601">-mupdf-no-strip.patch: fix debuginfo generation</changelog>
  <changelog author="kbabioch@suse.com" date="1524484800">- Update to version 1.13:
  - primarily a bugfix release.
  - New "mutool sign" tool for showing and verifying digital signatures.
  - Chinese, Japanese, Korean, Cyrillic, and Greek font support in mutool create.
  - Improvements to annotation editing API.
- Dropped patches, which are included upstream now:
  - CVE-2018-6192.patch
  - CVE-2018-5686.patch
  - CVE-2018-6187.patch
  - CVE-2018-1000051.patch
  - CVE-2017-17858.patch
  - CVE-2018-6544.patch
  - fix-openjpeg-flags.patch</changelog>
  <changelog author="jengelh@inai.de" date="1524484801">- Ensure neutrality of description.</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1552305600">- Add build dependencies:
  * liblcms2-devel
  * Mesa-libGL-devel
  * freeglut-devel
  * pkgconfig(openssl)
  * pkgconfig(xi)
  * pkgconfig(xrandr)
- Change COPYING to %licnese instead of %doc
- Update mupdf-no-strip.patch
- Add patches from Fedora project:
  * mupdf-CVE-2018-16647.patch
  * mupdf-CVE-2018-16648.patch
  * mupdf-CVE-2018-18662.patch
  * 0001-Fix-699840-Use-saved-sig_widget-pointer-to-sign-sign.patch
  * 0001-Write-placeholder-appearance-streams-for-digital-sig.patch
  * 0001-fix-build-on-big-endian.patch
- Update to version 1.14:
  * New features:
  * Added "Source Han Serif" CJK fallback font.
  * Added more scripts to the Noto fallback fonts.
  * Multi-page PNM support.
  * "mutool show" now supports a path syntax for selecting objects to show.
  * Build system simplifications:
  * Auto-generated CMap, ICC, and JS source files are checked in to git.
  * Embedded CMap resources are now generated by a python script.
  * Embedded font resources are linked directly if using GNU ld or windows.
  * Namegen tool replaced by use of C macros.
  * Simplified Makefile.
  * Annotation editing:
  * New annotation editing mode in mupdf-gl.
  * Can create, edit, and delete most annotation types.
  * Can create appearance streams for most annotation types.
  * Can create appearance streams for Tx form fields.
  * Can create appearance streams for Ch form fields.
  * Form filling in mupdf-gl:
  * Can click buttons, checkboxes, and radioboxes.
  * Can fill out text fields using dialog box.
  * Can select choice options using dialog box.
  * Can verify and sign digital signatures.
  * Improved UI for mupdf-gl:
  * Password dialog.
  * Error dialog.
  * Open/save file dialog.
  * Snap selection to words or lines by holding control or control+shift.
  * Save and restore current location, bookmarks, and navigation history.
  * Bug fixes:
  * Improved CJK character fallback handling in EPUB.
  * API changes:
  * Pass rectangle and matrix structs by value.
  * Replaced PDF_NAME_Xxx macros with PDF_NAME(Xxx).
  * Added PDF_TRUE, PDF_FALSE, and PDF_NULL constant pdf_obj* macros.
  * Added helper functions: pdf_dict_get_int, etc.
  * Removed 'doc' argument in pdf_new_int, etc.
  * Quads instead of rects when highlighting and searching text.
  * mutool run: Pass arguments to script in scriptArgs global.</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1552564800">- Update source download link so we can submit it to Factory</changelog>
  <changelog author="Xaver Hellauer &lt;xaver@hellauer.bayern&gt;" date="1565784000">- Update to version 1.16.1
  * Changes in version 1.16.1:
  * Bugfixes
  * Changes in version 1.16.0:
  * api: Major overhaul of color management architecture.
  * api: Improved functions to verify/sign PDF documents.
  * api: Number tree accessor function pdf_lookup_number.
  * api: Parse and handle more options for PWG output.
  * api: Removed obsolete gproof document type.
  * api: User callbacks for warning and error messages.
  * epub: Changed default page size to A5.
  * epub: Draw embedded SVG documents in EPUB/XHTML.
  * epub: New Noto fonts covering more unicode scripts.
  * epub: Support small-caps font-variant.
  * pdf: Add Redact annotation type and function to apply redactions.
  * pdf: Add/remove/change encryption and password when saving PDF files.
  * pdf: Improvements to text handling in PDF filter processor.
  * pdf: MP and DP operators now call begin/end_layer device methods.
  * pdf: New and improved progressive loading.
  * svg: Draw external images in SVG documents.
  * mutool show: Add 'form' selector to list PDF form fields.
  * mutool sign: Sign PDF documents from the command line.
  * mutool sign: Verify signatures in PDF documents from the command line.
  * viewer: Option to save a script of user actions for replay with mutool run.
  * viewer: Runtime toggle for ICC and spot rendering.
  * viewer: Tooltip when hovering over a link in mupdf-gl.
  * Changes in version 1.15.0:
  * WebAssembly build target and examples.
  * Improved forms API in both C and Java bindings.
  * Improved forms JavaScript support.
  * Create appearance streams for more form field types.
  * Fixed many bugs in ICC color management.
  * Fixed many memory leaks in error cleanup.
  * Fixed bugs in pdfwrite output.
  * Improved text extraction from LaTeX documents with math symbols.
  * Improved trace device formatting.
  * Support CBZ and CBT files larger than 2Gb.
  * Show table of contents for FB2 and XHTML documents.
  * Show embedded raster images in SVG and XHTML documents.
  * Show FB2 cover page.
  * Add option to save PDF files without encryption.
  * Add inhibit-spaces option to stext device to turn off missing space detection.
  * Simplified fz_try/fz_always/fz_catch macros.
  * mupdf-gl improvements:
  * Automatically open annotation editor when selecting an annotation.
  * Full page color tinting option in mupdf-gl.
  * Show/hide table of contents sections.
  * Trigger a reload with sighup.
  * Toggle spot color mode with 'e'.
- Remove merged patches:
  * mupdf-CVE-2018-16647.patch
  * mupdf-CVE-2018-16648.patch
  * mupdf-CVE-2018-18662.patch
  * 0001-Fix-699840-Use-saved-sig_widget-pointer-to-sign-sign.patch
  * 0001-Write-placeholder-appearance-streams-for-digital-sig.patch
  * 0001-fix-build-on-big-endian.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1568116800">- Use -ffat-lto-objects when building static libraries.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1591963200">- Fix building with gcc10</changelog>
  <changelog author="Dan ?erm&#xE1;k &lt;dcermak@suse.com&gt;" date="1592568000">- Update to version 1.17.0
  * api: Improved accessors for markup/ink/polygon annotation data.
  * api: Chapter based API for faster EPUB loading.
  * api: Add more documentation to header files.
  * api: Improved digital signature signing and verification.
  * api: Validate changes in a signed PDF file.
  * build: Moved windows build to VS2019 solution.
  * pdf: Redaction now works on images and links as well as text.
  * pdf: Greek, Cyrillic, Chinese, Japanese, and Korean scripts in forms and annotations.
  * pdf: File attachment annotations.
  * pdf: Use CCITT Fax compression for 1-bit images when creating PDF files.
  * epub: More forgiving XHTML parsing.
  * epub: Accelerator files to cache chapter data for faster EPUB loading.
  * epub: Optimized memory use.
  * mutool run: Edit Markup, Ink, and Polygon annotation data.
  * mutool run: Fill out form fields.
  * viewer: Ask for confirmation before closing a PDF with unsaved changes.
  * viewer: Embed and extract file attachment annotations.
  * library: Miscellaneous bugfixes.
  * library: Fixes to store operation.
  * thirdparty: Updated Harfbuzz to 2.6.4.
  * thirdparty: Updated jbig2dec to 0.18.
  * thirdparty: Updated MuJS to 1.0.7.
  * thirdparty: Updated OpenJPEG to 2.3.1.
  * thirdparty: Updated cURL to 7.66.0 (windows only).</changelog>
  <changelog author="Hsiu-Ming Chang &lt;cges30901@gmail.com&gt;" date="1603627200">- Update to version 1.18.0
  * mutool draw: bbox output format.
  * mutool draw: structured text extraction in JSON format.
  * mutool run: StructuredText.walk()
  * mutool run: PDFPage.process() and PDFAnnotation.process()
  * mupdf-gl: Added IBM Common User Access shortcuts for copy &amp; paste.
  * mupdf-gl: Improved redaction UI.
  * java: Example desktop Java viewer.
  * wasm: WebAssembly viewer that runs in a browser.
  * html: Added HTML5 parser.
  * api: Dehyphenation option in structured text extraction, to improve searching for words that are hyphenated across lines.
  * api: pdf_new_date, pdf_to_date, pdf_dict_put_date and pdf_dict_get_date.
  * api: Added choice of image redaction algorithms: none, full, partial.
  * api: Optional use of Tesseract to use OCR to extract text.
  * svg: Many small parsing fixes.
  * svg: Parse inline CSS style attributes.
  * svg: Text elements (simple text layout only).
  * High security redaction -- save redacted PDF as flattened bitmap, guaranteed to not leak any sensitive redacted information.
  * Experimental C++ bindings.
  * Experimental Python bindings.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635163200">- update to 1.19.0
  * Remov support for Luratech JBIG2 and JPEG2000 decoders
  * Add 'extract' library for more output options: DOCX, ODT
  * Journal for undo and redo
  * Snapshot for auto-save and restore
  * Reflow document wrapper
  * Rollover appearance for annotations and widgets
  * Customize appearance of signed digital signatures
  * Progress and cancel callbacks to OCR functions
  * Create signature form fields
  * Improved Font and format support
  * developer visible improvements</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1650628800">- update to 1.19.1:
  * Updated zlib to 1.2.12 due to CVE-2018-25032</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1659355200">- update to 1.20.0 (bsc#1202858, CVE-2021-4216):
  * Experimental C# bindings
  * Cross compilation should no longer need a host compiler
  * Major additions to JNI bindings
  * New API to edit outline
  * New API to resolve and create links
  * New API to toggle individual layers in PDF
  * Layer panel in mupdf-gl
  * Layer option in mutool draw
  * New API to add a Javascript console
  * Console panel in mupdf-gl
  * Text search API extended to be able to distinguish between separate search hits
  * Command line tool improvements:
  * all: Negative page numbers to index from the last page
  * mutool draw: Add option to render document without text
  * mutool draw and convert: Support DPI option in text and HTML output
  * New hybrid HTML output format using "scripts/pdftohtml" script:
  * Graphics in a background image
  * Text on top
  * Improved WASM viewer demo
  * Support high DPI screens
  * Progressive loading
  * Update to zlib 1.2.12 for security fix</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1660737600">- update to 1.20.3:
  * return error, not success when unable to lock native device resource.
  * Bug 705620: Start journal operation instead of pushing local xref.
  * Ensure AndroidDrawDevice is destroyed, even upon exception.
  * source/pdf/pdf-clean.c: fix segv from incorrect call to fz_drop_pixmap().
  * Bug 705681: Enclose code in begin/end operation.
  * Guard against SEGVs when calling archive functions with NULL archive.</changelog>
</package>
<package pkgid="823edb67518e84bb424b5906795d9aaa2398706aa1823bdeccb5b8ce46970c46" name="mupdf-devel-static" arch="s390x">
  <version epoch="0" ver="1.20.3" rel="bp154.2.3.1"/>
  <changelog author="kbabioch@suse.com" date="1517572800">- Add CVE-2018-6187.patch to fix a heap buffer overflow in in pdf-write.c
  in the do_pdf_save_document function (CVE-2018-6187 boo#1077407)</changelog>
  <changelog author="kbabioch@suse.com" date="1517572801">- Add CVE-2018-6544.patch to fix a DoS in pdf_load_obj_stm within in
  pdf/pdf-xref.c (CVE-2018-6544 boo#1079100)
- Add CVE-2018-6192.patch to fix a DoS in pdf_read_new_xref within
  pdf/pdf-xref.c via crafted PDF file (CVE-2018-6192 boo#1077755)</changelog>
  <changelog author="kbabioch@suse.com" date="1517572802">- CVE-2018-6192.patch: Use official fix from usptream (CVE-2018-6192
  boo#1077755)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- use freetype2-devel explictily as buildrequires</changelog>
  <changelog author="kbabioch@suse.com" date="1518436800">- Add CVE-2018-1000051.patch: Fix a Use After Free vulnerability in
  fz_keep_key_storable that can potentially result in DoS / remote
  code execution (CVE-2018-1000051 bsc#1080531)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1518609600">- Remove xorg-x11-devel from buildrequires</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1518609601">-mupdf-no-strip.patch: fix debuginfo generation</changelog>
  <changelog author="kbabioch@suse.com" date="1524484800">- Update to version 1.13:
  - primarily a bugfix release.
  - New "mutool sign" tool for showing and verifying digital signatures.
  - Chinese, Japanese, Korean, Cyrillic, and Greek font support in mutool create.
  - Improvements to annotation editing API.
- Dropped patches, which are included upstream now:
  - CVE-2018-6192.patch
  - CVE-2018-5686.patch
  - CVE-2018-6187.patch
  - CVE-2018-1000051.patch
  - CVE-2017-17858.patch
  - CVE-2018-6544.patch
  - fix-openjpeg-flags.patch</changelog>
  <changelog author="jengelh@inai.de" date="1524484801">- Ensure neutrality of description.</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1552305600">- Add build dependencies:
  * liblcms2-devel
  * Mesa-libGL-devel
  * freeglut-devel
  * pkgconfig(openssl)
  * pkgconfig(xi)
  * pkgconfig(xrandr)
- Change COPYING to %licnese instead of %doc
- Update mupdf-no-strip.patch
- Add patches from Fedora project:
  * mupdf-CVE-2018-16647.patch
  * mupdf-CVE-2018-16648.patch
  * mupdf-CVE-2018-18662.patch
  * 0001-Fix-699840-Use-saved-sig_widget-pointer-to-sign-sign.patch
  * 0001-Write-placeholder-appearance-streams-for-digital-sig.patch
  * 0001-fix-build-on-big-endian.patch
- Update to version 1.14:
  * New features:
  * Added "Source Han Serif" CJK fallback font.
  * Added more scripts to the Noto fallback fonts.
  * Multi-page PNM support.
  * "mutool show" now supports a path syntax for selecting objects to show.
  * Build system simplifications:
  * Auto-generated CMap, ICC, and JS source files are checked in to git.
  * Embedded CMap resources are now generated by a python script.
  * Embedded font resources are linked directly if using GNU ld or windows.
  * Namegen tool replaced by use of C macros.
  * Simplified Makefile.
  * Annotation editing:
  * New annotation editing mode in mupdf-gl.
  * Can create, edit, and delete most annotation types.
  * Can create appearance streams for most annotation types.
  * Can create appearance streams for Tx form fields.
  * Can create appearance streams for Ch form fields.
  * Form filling in mupdf-gl:
  * Can click buttons, checkboxes, and radioboxes.
  * Can fill out text fields using dialog box.
  * Can select choice options using dialog box.
  * Can verify and sign digital signatures.
  * Improved UI for mupdf-gl:
  * Password dialog.
  * Error dialog.
  * Open/save file dialog.
  * Snap selection to words or lines by holding control or control+shift.
  * Save and restore current location, bookmarks, and navigation history.
  * Bug fixes:
  * Improved CJK character fallback handling in EPUB.
  * API changes:
  * Pass rectangle and matrix structs by value.
  * Replaced PDF_NAME_Xxx macros with PDF_NAME(Xxx).
  * Added PDF_TRUE, PDF_FALSE, and PDF_NULL constant pdf_obj* macros.
  * Added helper functions: pdf_dict_get_int, etc.
  * Removed 'doc' argument in pdf_new_int, etc.
  * Quads instead of rects when highlighting and searching text.
  * mutool run: Pass arguments to script in scriptArgs global.</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1552564800">- Update source download link so we can submit it to Factory</changelog>
  <changelog author="Xaver Hellauer &lt;xaver@hellauer.bayern&gt;" date="1565784000">- Update to version 1.16.1
  * Changes in version 1.16.1:
  * Bugfixes
  * Changes in version 1.16.0:
  * api: Major overhaul of color management architecture.
  * api: Improved functions to verify/sign PDF documents.
  * api: Number tree accessor function pdf_lookup_number.
  * api: Parse and handle more options for PWG output.
  * api: Removed obsolete gproof document type.
  * api: User callbacks for warning and error messages.
  * epub: Changed default page size to A5.
  * epub: Draw embedded SVG documents in EPUB/XHTML.
  * epub: New Noto fonts covering more unicode scripts.
  * epub: Support small-caps font-variant.
  * pdf: Add Redact annotation type and function to apply redactions.
  * pdf: Add/remove/change encryption and password when saving PDF files.
  * pdf: Improvements to text handling in PDF filter processor.
  * pdf: MP and DP operators now call begin/end_layer device methods.
  * pdf: New and improved progressive loading.
  * svg: Draw external images in SVG documents.
  * mutool show: Add 'form' selector to list PDF form fields.
  * mutool sign: Sign PDF documents from the command line.
  * mutool sign: Verify signatures in PDF documents from the command line.
  * viewer: Option to save a script of user actions for replay with mutool run.
  * viewer: Runtime toggle for ICC and spot rendering.
  * viewer: Tooltip when hovering over a link in mupdf-gl.
  * Changes in version 1.15.0:
  * WebAssembly build target and examples.
  * Improved forms API in both C and Java bindings.
  * Improved forms JavaScript support.
  * Create appearance streams for more form field types.
  * Fixed many bugs in ICC color management.
  * Fixed many memory leaks in error cleanup.
  * Fixed bugs in pdfwrite output.
  * Improved text extraction from LaTeX documents with math symbols.
  * Improved trace device formatting.
  * Support CBZ and CBT files larger than 2Gb.
  * Show table of contents for FB2 and XHTML documents.
  * Show embedded raster images in SVG and XHTML documents.
  * Show FB2 cover page.
  * Add option to save PDF files without encryption.
  * Add inhibit-spaces option to stext device to turn off missing space detection.
  * Simplified fz_try/fz_always/fz_catch macros.
  * mupdf-gl improvements:
  * Automatically open annotation editor when selecting an annotation.
  * Full page color tinting option in mupdf-gl.
  * Show/hide table of contents sections.
  * Trigger a reload with sighup.
  * Toggle spot color mode with 'e'.
- Remove merged patches:
  * mupdf-CVE-2018-16647.patch
  * mupdf-CVE-2018-16648.patch
  * mupdf-CVE-2018-18662.patch
  * 0001-Fix-699840-Use-saved-sig_widget-pointer-to-sign-sign.patch
  * 0001-Write-placeholder-appearance-streams-for-digital-sig.patch
  * 0001-fix-build-on-big-endian.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1568116800">- Use -ffat-lto-objects when building static libraries.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1591963200">- Fix building with gcc10</changelog>
  <changelog author="Dan ?erm&#xE1;k &lt;dcermak@suse.com&gt;" date="1592568000">- Update to version 1.17.0
  * api: Improved accessors for markup/ink/polygon annotation data.
  * api: Chapter based API for faster EPUB loading.
  * api: Add more documentation to header files.
  * api: Improved digital signature signing and verification.
  * api: Validate changes in a signed PDF file.
  * build: Moved windows build to VS2019 solution.
  * pdf: Redaction now works on images and links as well as text.
  * pdf: Greek, Cyrillic, Chinese, Japanese, and Korean scripts in forms and annotations.
  * pdf: File attachment annotations.
  * pdf: Use CCITT Fax compression for 1-bit images when creating PDF files.
  * epub: More forgiving XHTML parsing.
  * epub: Accelerator files to cache chapter data for faster EPUB loading.
  * epub: Optimized memory use.
  * mutool run: Edit Markup, Ink, and Polygon annotation data.
  * mutool run: Fill out form fields.
  * viewer: Ask for confirmation before closing a PDF with unsaved changes.
  * viewer: Embed and extract file attachment annotations.
  * library: Miscellaneous bugfixes.
  * library: Fixes to store operation.
  * thirdparty: Updated Harfbuzz to 2.6.4.
  * thirdparty: Updated jbig2dec to 0.18.
  * thirdparty: Updated MuJS to 1.0.7.
  * thirdparty: Updated OpenJPEG to 2.3.1.
  * thirdparty: Updated cURL to 7.66.0 (windows only).</changelog>
  <changelog author="Hsiu-Ming Chang &lt;cges30901@gmail.com&gt;" date="1603627200">- Update to version 1.18.0
  * mutool draw: bbox output format.
  * mutool draw: structured text extraction in JSON format.
  * mutool run: StructuredText.walk()
  * mutool run: PDFPage.process() and PDFAnnotation.process()
  * mupdf-gl: Added IBM Common User Access shortcuts for copy &amp; paste.
  * mupdf-gl: Improved redaction UI.
  * java: Example desktop Java viewer.
  * wasm: WebAssembly viewer that runs in a browser.
  * html: Added HTML5 parser.
  * api: Dehyphenation option in structured text extraction, to improve searching for words that are hyphenated across lines.
  * api: pdf_new_date, pdf_to_date, pdf_dict_put_date and pdf_dict_get_date.
  * api: Added choice of image redaction algorithms: none, full, partial.
  * api: Optional use of Tesseract to use OCR to extract text.
  * svg: Many small parsing fixes.
  * svg: Parse inline CSS style attributes.
  * svg: Text elements (simple text layout only).
  * High security redaction -- save redacted PDF as flattened bitmap, guaranteed to not leak any sensitive redacted information.
  * Experimental C++ bindings.
  * Experimental Python bindings.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635163200">- update to 1.19.0
  * Remov support for Luratech JBIG2 and JPEG2000 decoders
  * Add 'extract' library for more output options: DOCX, ODT
  * Journal for undo and redo
  * Snapshot for auto-save and restore
  * Reflow document wrapper
  * Rollover appearance for annotations and widgets
  * Customize appearance of signed digital signatures
  * Progress and cancel callbacks to OCR functions
  * Create signature form fields
  * Improved Font and format support
  * developer visible improvements</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1650628800">- update to 1.19.1:
  * Updated zlib to 1.2.12 due to CVE-2018-25032</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1659355200">- update to 1.20.0 (bsc#1202858, CVE-2021-4216):
  * Experimental C# bindings
  * Cross compilation should no longer need a host compiler
  * Major additions to JNI bindings
  * New API to edit outline
  * New API to resolve and create links
  * New API to toggle individual layers in PDF
  * Layer panel in mupdf-gl
  * Layer option in mutool draw
  * New API to add a Javascript console
  * Console panel in mupdf-gl
  * Text search API extended to be able to distinguish between separate search hits
  * Command line tool improvements:
  * all: Negative page numbers to index from the last page
  * mutool draw: Add option to render document without text
  * mutool draw and convert: Support DPI option in text and HTML output
  * New hybrid HTML output format using "scripts/pdftohtml" script:
  * Graphics in a background image
  * Text on top
  * Improved WASM viewer demo
  * Support high DPI screens
  * Progressive loading
  * Update to zlib 1.2.12 for security fix</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1660737600">- update to 1.20.3:
  * return error, not success when unable to lock native device resource.
  * Bug 705620: Start journal operation instead of pushing local xref.
  * Ensure AndroidDrawDevice is destroyed, even upon exception.
  * source/pdf/pdf-clean.c: fix segv from incorrect call to fz_drop_pixmap().
  * Bug 705681: Enclose code in begin/end operation.
  * Guard against SEGVs when calling archive functions with NULL archive.</changelog>
</package>
<package pkgid="ac7ec42c635552bab74c1f294696f0f61f80e910869bcfd856a07f8e5c140a99" name="mupdf-devel-static" arch="x86_64">
  <version epoch="0" ver="1.20.3" rel="bp154.2.3.1"/>
  <changelog author="kbabioch@suse.com" date="1517572800">- Add CVE-2018-6187.patch to fix a heap buffer overflow in in pdf-write.c
  in the do_pdf_save_document function (CVE-2018-6187 boo#1077407)</changelog>
  <changelog author="kbabioch@suse.com" date="1517572801">- Add CVE-2018-6544.patch to fix a DoS in pdf_load_obj_stm within in
  pdf/pdf-xref.c (CVE-2018-6544 boo#1079100)
- Add CVE-2018-6192.patch to fix a DoS in pdf_read_new_xref within
  pdf/pdf-xref.c via crafted PDF file (CVE-2018-6192 boo#1077755)</changelog>
  <changelog author="kbabioch@suse.com" date="1517572802">- CVE-2018-6192.patch: Use official fix from usptream (CVE-2018-6192
  boo#1077755)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- use freetype2-devel explictily as buildrequires</changelog>
  <changelog author="kbabioch@suse.com" date="1518436800">- Add CVE-2018-1000051.patch: Fix a Use After Free vulnerability in
  fz_keep_key_storable that can potentially result in DoS / remote
  code execution (CVE-2018-1000051 bsc#1080531)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1518609600">- Remove xorg-x11-devel from buildrequires</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1518609601">-mupdf-no-strip.patch: fix debuginfo generation</changelog>
  <changelog author="kbabioch@suse.com" date="1524484800">- Update to version 1.13:
  - primarily a bugfix release.
  - New "mutool sign" tool for showing and verifying digital signatures.
  - Chinese, Japanese, Korean, Cyrillic, and Greek font support in mutool create.
  - Improvements to annotation editing API.
- Dropped patches, which are included upstream now:
  - CVE-2018-6192.patch
  - CVE-2018-5686.patch
  - CVE-2018-6187.patch
  - CVE-2018-1000051.patch
  - CVE-2017-17858.patch
  - CVE-2018-6544.patch
  - fix-openjpeg-flags.patch</changelog>
  <changelog author="jengelh@inai.de" date="1524484801">- Ensure neutrality of description.</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1552305600">- Add build dependencies:
  * liblcms2-devel
  * Mesa-libGL-devel
  * freeglut-devel
  * pkgconfig(openssl)
  * pkgconfig(xi)
  * pkgconfig(xrandr)
- Change COPYING to %licnese instead of %doc
- Update mupdf-no-strip.patch
- Add patches from Fedora project:
  * mupdf-CVE-2018-16647.patch
  * mupdf-CVE-2018-16648.patch
  * mupdf-CVE-2018-18662.patch
  * 0001-Fix-699840-Use-saved-sig_widget-pointer-to-sign-sign.patch
  * 0001-Write-placeholder-appearance-streams-for-digital-sig.patch
  * 0001-fix-build-on-big-endian.patch
- Update to version 1.14:
  * New features:
  * Added "Source Han Serif" CJK fallback font.
  * Added more scripts to the Noto fallback fonts.
  * Multi-page PNM support.
  * "mutool show" now supports a path syntax for selecting objects to show.
  * Build system simplifications:
  * Auto-generated CMap, ICC, and JS source files are checked in to git.
  * Embedded CMap resources are now generated by a python script.
  * Embedded font resources are linked directly if using GNU ld or windows.
  * Namegen tool replaced by use of C macros.
  * Simplified Makefile.
  * Annotation editing:
  * New annotation editing mode in mupdf-gl.
  * Can create, edit, and delete most annotation types.
  * Can create appearance streams for most annotation types.
  * Can create appearance streams for Tx form fields.
  * Can create appearance streams for Ch form fields.
  * Form filling in mupdf-gl:
  * Can click buttons, checkboxes, and radioboxes.
  * Can fill out text fields using dialog box.
  * Can select choice options using dialog box.
  * Can verify and sign digital signatures.
  * Improved UI for mupdf-gl:
  * Password dialog.
  * Error dialog.
  * Open/save file dialog.
  * Snap selection to words or lines by holding control or control+shift.
  * Save and restore current location, bookmarks, and navigation history.
  * Bug fixes:
  * Improved CJK character fallback handling in EPUB.
  * API changes:
  * Pass rectangle and matrix structs by value.
  * Replaced PDF_NAME_Xxx macros with PDF_NAME(Xxx).
  * Added PDF_TRUE, PDF_FALSE, and PDF_NULL constant pdf_obj* macros.
  * Added helper functions: pdf_dict_get_int, etc.
  * Removed 'doc' argument in pdf_new_int, etc.
  * Quads instead of rects when highlighting and searching text.
  * mutool run: Pass arguments to script in scriptArgs global.</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1552564800">- Update source download link so we can submit it to Factory</changelog>
  <changelog author="Xaver Hellauer &lt;xaver@hellauer.bayern&gt;" date="1565784000">- Update to version 1.16.1
  * Changes in version 1.16.1:
  * Bugfixes
  * Changes in version 1.16.0:
  * api: Major overhaul of color management architecture.
  * api: Improved functions to verify/sign PDF documents.
  * api: Number tree accessor function pdf_lookup_number.
  * api: Parse and handle more options for PWG output.
  * api: Removed obsolete gproof document type.
  * api: User callbacks for warning and error messages.
  * epub: Changed default page size to A5.
  * epub: Draw embedded SVG documents in EPUB/XHTML.
  * epub: New Noto fonts covering more unicode scripts.
  * epub: Support small-caps font-variant.
  * pdf: Add Redact annotation type and function to apply redactions.
  * pdf: Add/remove/change encryption and password when saving PDF files.
  * pdf: Improvements to text handling in PDF filter processor.
  * pdf: MP and DP operators now call begin/end_layer device methods.
  * pdf: New and improved progressive loading.
  * svg: Draw external images in SVG documents.
  * mutool show: Add 'form' selector to list PDF form fields.
  * mutool sign: Sign PDF documents from the command line.
  * mutool sign: Verify signatures in PDF documents from the command line.
  * viewer: Option to save a script of user actions for replay with mutool run.
  * viewer: Runtime toggle for ICC and spot rendering.
  * viewer: Tooltip when hovering over a link in mupdf-gl.
  * Changes in version 1.15.0:
  * WebAssembly build target and examples.
  * Improved forms API in both C and Java bindings.
  * Improved forms JavaScript support.
  * Create appearance streams for more form field types.
  * Fixed many bugs in ICC color management.
  * Fixed many memory leaks in error cleanup.
  * Fixed bugs in pdfwrite output.
  * Improved text extraction from LaTeX documents with math symbols.
  * Improved trace device formatting.
  * Support CBZ and CBT files larger than 2Gb.
  * Show table of contents for FB2 and XHTML documents.
  * Show embedded raster images in SVG and XHTML documents.
  * Show FB2 cover page.
  * Add option to save PDF files without encryption.
  * Add inhibit-spaces option to stext device to turn off missing space detection.
  * Simplified fz_try/fz_always/fz_catch macros.
  * mupdf-gl improvements:
  * Automatically open annotation editor when selecting an annotation.
  * Full page color tinting option in mupdf-gl.
  * Show/hide table of contents sections.
  * Trigger a reload with sighup.
  * Toggle spot color mode with 'e'.
- Remove merged patches:
  * mupdf-CVE-2018-16647.patch
  * mupdf-CVE-2018-16648.patch
  * mupdf-CVE-2018-18662.patch
  * 0001-Fix-699840-Use-saved-sig_widget-pointer-to-sign-sign.patch
  * 0001-Write-placeholder-appearance-streams-for-digital-sig.patch
  * 0001-fix-build-on-big-endian.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1568116800">- Use -ffat-lto-objects when building static libraries.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1591963200">- Fix building with gcc10</changelog>
  <changelog author="Dan ?erm&#xE1;k &lt;dcermak@suse.com&gt;" date="1592568000">- Update to version 1.17.0
  * api: Improved accessors for markup/ink/polygon annotation data.
  * api: Chapter based API for faster EPUB loading.
  * api: Add more documentation to header files.
  * api: Improved digital signature signing and verification.
  * api: Validate changes in a signed PDF file.
  * build: Moved windows build to VS2019 solution.
  * pdf: Redaction now works on images and links as well as text.
  * pdf: Greek, Cyrillic, Chinese, Japanese, and Korean scripts in forms and annotations.
  * pdf: File attachment annotations.
  * pdf: Use CCITT Fax compression for 1-bit images when creating PDF files.
  * epub: More forgiving XHTML parsing.
  * epub: Accelerator files to cache chapter data for faster EPUB loading.
  * epub: Optimized memory use.
  * mutool run: Edit Markup, Ink, and Polygon annotation data.
  * mutool run: Fill out form fields.
  * viewer: Ask for confirmation before closing a PDF with unsaved changes.
  * viewer: Embed and extract file attachment annotations.
  * library: Miscellaneous bugfixes.
  * library: Fixes to store operation.
  * thirdparty: Updated Harfbuzz to 2.6.4.
  * thirdparty: Updated jbig2dec to 0.18.
  * thirdparty: Updated MuJS to 1.0.7.
  * thirdparty: Updated OpenJPEG to 2.3.1.
  * thirdparty: Updated cURL to 7.66.0 (windows only).</changelog>
  <changelog author="Hsiu-Ming Chang &lt;cges30901@gmail.com&gt;" date="1603627200">- Update to version 1.18.0
  * mutool draw: bbox output format.
  * mutool draw: structured text extraction in JSON format.
  * mutool run: StructuredText.walk()
  * mutool run: PDFPage.process() and PDFAnnotation.process()
  * mupdf-gl: Added IBM Common User Access shortcuts for copy &amp; paste.
  * mupdf-gl: Improved redaction UI.
  * java: Example desktop Java viewer.
  * wasm: WebAssembly viewer that runs in a browser.
  * html: Added HTML5 parser.
  * api: Dehyphenation option in structured text extraction, to improve searching for words that are hyphenated across lines.
  * api: pdf_new_date, pdf_to_date, pdf_dict_put_date and pdf_dict_get_date.
  * api: Added choice of image redaction algorithms: none, full, partial.
  * api: Optional use of Tesseract to use OCR to extract text.
  * svg: Many small parsing fixes.
  * svg: Parse inline CSS style attributes.
  * svg: Text elements (simple text layout only).
  * High security redaction -- save redacted PDF as flattened bitmap, guaranteed to not leak any sensitive redacted information.
  * Experimental C++ bindings.
  * Experimental Python bindings.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635163200">- update to 1.19.0
  * Remov support for Luratech JBIG2 and JPEG2000 decoders
  * Add 'extract' library for more output options: DOCX, ODT
  * Journal for undo and redo
  * Snapshot for auto-save and restore
  * Reflow document wrapper
  * Rollover appearance for annotations and widgets
  * Customize appearance of signed digital signatures
  * Progress and cancel callbacks to OCR functions
  * Create signature form fields
  * Improved Font and format support
  * developer visible improvements</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1650628800">- update to 1.19.1:
  * Updated zlib to 1.2.12 due to CVE-2018-25032</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1659355200">- update to 1.20.0 (bsc#1202858, CVE-2021-4216):
  * Experimental C# bindings
  * Cross compilation should no longer need a host compiler
  * Major additions to JNI bindings
  * New API to edit outline
  * New API to resolve and create links
  * New API to toggle individual layers in PDF
  * Layer panel in mupdf-gl
  * Layer option in mutool draw
  * New API to add a Javascript console
  * Console panel in mupdf-gl
  * Text search API extended to be able to distinguish between separate search hits
  * Command line tool improvements:
  * all: Negative page numbers to index from the last page
  * mutool draw: Add option to render document without text
  * mutool draw and convert: Support DPI option in text and HTML output
  * New hybrid HTML output format using "scripts/pdftohtml" script:
  * Graphics in a background image
  * Text on top
  * Improved WASM viewer demo
  * Support high DPI screens
  * Progressive loading
  * Update to zlib 1.2.12 for security fix</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1660737600">- update to 1.20.3:
  * return error, not success when unable to lock native device resource.
  * Bug 705620: Start journal operation instead of pushing local xref.
  * Ensure AndroidDrawDevice is destroyed, even upon exception.
  * source/pdf/pdf-clean.c: fix segv from incorrect call to fz_drop_pixmap().
  * Bug 705681: Enclose code in begin/end operation.
  * Guard against SEGVs when calling archive functions with NULL archive.</changelog>
</package>
<package pkgid="b106d5aba57705c9c3b5dfef69be6188d6271c88f07486ee16620c54e4de93a4" name="nano" arch="aarch64">
  <version epoch="0" ver="6.3" rel="bp154.2.3.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586260800">- GNU nano 4.9.2:
  * fix crash after undoing an &lt;Enter&gt; at the end of leading
    whitespace</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1590321600">- GNU nano 4.9.3:
  * fix a crash when the terminal screen is resized while at a
    lock-file prompt</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1596024000">- GNU nano 5.0:
  * With --indicator (or -q or 'set indicator') nano will show a kind
    of scrollbar on the righthand side of the screen to indicate where
    in the buffer the viewport is located and how much it covers.
  * With &lt;Alt+Insert&gt; any line can be "tagged" with an anchor, and
    &lt;Alt+PageUp&gt; and &lt;Alt+PageDown&gt; will jump to the nearest anchor.
    When using line numbers, an anchor is shown as "+" in the margin.
  * The Execute Command prompt is now directly accessible from the
    main menu (with ^T, replacing the Spell Checker). The Linter,
    Formatter, Spell Checker, Full Justification, Suspension, and
    Cut-Till-End functions are available in this menu too.
  * On terminals that support at least 256 colors, nine new color
    names are available: pink, purple, mauve, lagoon, mint, lime,
    peach, orange, and latte. These do not have lighter versions.
  * For the color names red, green, blue, yellow, cyan, magenta,
    white, and black, the prefix 'light' gives a brighter color.
    Prefix 'bright' is deprecated, as it means both bold AND light.
  * All color names can be preceded with "bold," and/or "italic,"
    (in that order) to get a bold and/or italic typeface.
  * With --bookstyle (or -O or 'set bookstyle') nano considers any
    line that begins with whitespace as the start of a paragraph.
  * Refreshing the screen with ^L now works in every menu.
  * In the main menu, ^L also centers the line with the cursor.
  * Toggling the help lines with M-X now works in all menus except
    in the help viewer and the linter.
  * At a filename prompt, the first &lt;Tab&gt; lists the possibilities,
    and these are listed near the bottom instead of near the top.
  * Bindable function 'curpos' has been renamed to 'location'.
  * Long option --tempfile has been renamed to --saveonexit.
  * Short option -S is now a synonym of --softwrap.
  * The New Buffer toggle (M-F) has become non-persistent. Options
  - -multibuffer and 'set multibuffer' still make it default to on.
  * Backup files will retain their group ownership (when possible).
  * Data is synced to disk before "... lines written" is shown.
  * The raw escape sequences for F13 to F16 are no longer recognized.
  * Distro-specific syntaxes, and syntaxes of less common languages,
    have been moved down to subdirectory syntax/extra/. The affected
    distros and others may wish to move wanted syntaxes one level up.
    Syntaxes for Markdown, Haskell, and Ada were added.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1597233600">- GNU nano 5.1:
  * Make M-Bsp (Alt+Backspace) delete a word backwards
  * Make M-[ bindable
  * Fix crash on first keystroke in an empty buffer --indicator
    and --softwrap
  * Fix crash when invoking the formatter while text is marked
  * In UTF-8 locales, an anchor is shown as a diamond</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1598270400">- GNU nano 5.2:
  * Making certain replacements after a large paste does not crash
  * Hitting a toggle at the Search prompt does not clear the answer
  * Using --positionlog does not complain at the first start
  * A macro containing a Search command will not sometimes fail</changelog>
  <changelog author="Aaron Stern &lt;ukbeast89@protonmail.com&gt;" date="1602072000">- GNU nano 5.3:
  * Option 'set stateflags' makes nano show the state of auto-indenting,
    the mark, hard-wrapping, macro recording, and soft-wrapping in the
    title bar. The flags take the place of "Modified", and a modified
    buffer is instead indicated by an asterisk (*) after its name.
  * Nano no longer by default tries using libmagic to determine the type
    of a file (when neither filename nor first line gave a clue), because
    in most cases it is a waste of time. It requires using the option
  - -magic or -! or 'set magic' to make nano try libmagic.
  * The color of the indicator can be changed with 'set scrollercolor'.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1606996800">- GNU nano 5.4:
  * Moving the cursor now skips over combining characters (an
    other zero-width characters)
  * Deleting a character deletes also any succeeding zero-width
    characters but backspacing deletes just one character at a time</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1609416000">- Install a useful default nanorc configuration
- Enable useful extra definitions for syntax highlighting</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1610625600">- GNU nano 5.5:
  * Option 'set minibar' to suppress the title bar and show a bar
    with basic information
  * 'set promptcolor' can configure the prompt bar
  * 'set markmatch' highlights the result of a successful search
  * AThe bindable toggle 'nowrap' has been renamed to
    'breaklonglines'
  * Support for Slang has been removed</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1614168000">- GNU nano 5.6:
  * A search match gets highlighted (in black on yellow by
    default), in addition to placing the cursor at the start of
    the matchA. The color combination can be changed with
    'set highlightcolor'. By default the cursor is hidden until the
    next keystroke, but it can be forced on with --showcursor /
    'set showcursor'.
  * Option --markmatch / 'set markmatch' has been removed
  * Cursor position and character code are displayed in the
    minibar only when option --constantshow / 'set constantshow'
    is used, and their display can be toggled with M-C
  * The state flags are displayed in the minibar only when option
  - -stateflags / 'set stateflags' is used</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1614772800">- GNU nano 5.6.1:
  * Search matches are properly colorized in softwrap mode too
  * Option 'highlightcolor' has been renamed to 'spotlightcolor'</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1615204800">- Fox signature sources
- Drop no longer needed scriplets</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1619697600">- GNU nano 5.7:
  * The output of --constantshow (without --minibar) is more stable
  * When opening multiple buffers and there is an error message,
    this message is shown again upon first switch to the relevant
    buffer
  * The position and size of the indicator now follow actual
    lines, instead of visual lines when in softwrap mode, meaning
    that the size of the indicator can change when scrolling in
    softwrap mode</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1623931200">- GNU nano 5.8:
  * After a search, the spotlighting is dropped after 1.5 seconds
    (0.8 seconds with --quick) to avoid the idea that the text is
    selected.
  * A + and a space before a filename on the command line will put
    the cursor at the end of the corresponding buffer.
  * Linter messages no longer include filename and line/column
    numbers.
  * Color name "grey" or "gray" can be used instead of "lightblack"
  * The color of the minibar can be chosen with 'set minicolor'.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1633780800">- GNU nano 5.9:
  * The extension of a filename is added to the name of a
    corresponding temporary file, so that spell checking a C file,
    for example, will check only the comments and strings
    (when using 'aspell').
  * The process number is added to the name of an emergency save
    file, so that when multiple nanos die they will not fight over
    a filename.
  * Undoing a cutting operation will restore an anchor that was
    located in the cut area to its original line.
  * When using --locking, saving a new buffer will create a lock
    file.
  * Syntax highlighting for YAML files has been added</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1639656000">- GNU nano 6.0:
  * Option --zero hides the interface and uses the whole terminal
    for editing
  * Colors can be given also in #rgb hexadecimal, to select the
    nearest color from the 6x6x6 color-cube palette available on
    256-color terminals
  * Fourteen new color names are available, from rosy to crimson</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1644494400">- GNU nano 6.1:
  * The behavior of ^K at a prompt has been enhanced: when there
    is text after the cursor, just this text is erased
  * At a prompt, M-6 copies the current answer into the cutbuffer
  * Large external pastes into nano are handled more quickly</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1645185600">- GNU nano 6.2
  * The file browser clears the prompt bar also when using
  - -minibar
  * Linting now works also with a newer 'pyflakes'</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1651233600">- Update to version 6.3:
  * For multiline regexes, text is now colored as soon a start
    match is found, also when there is no end match at all.
  * The colorizing of any line is stopped after two thousand bytes
    to avoid frustrating delays.
  * When environment variable NO_COLOR is set, the two default
    colors (yellow for the spotlight, red for error messages) are
    suppressed when no interface colors are specified in a nanorc
    file.
  * Full justification and piping the whole buffer through a
    command now keep the cursor at the same line number.
  * Utility 'xsel' can be used to copy a marked region to the
    system's clipboard.  See doc/sample.nanorc for an example.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1658750400">- Added obs-channel-and-patchinfo-syntax.patch to support syntax
  highlighting for _channel and _patchinfo files used by OBS</changelog>
</package>
<package pkgid="9ff1f13d62d98ac2295589286f38fc93adfd2786559ed5e96b8d686ac62c484f" name="nano" arch="i586">
  <version epoch="0" ver="6.3" rel="bp154.2.3.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586260800">- GNU nano 4.9.2:
  * fix crash after undoing an &lt;Enter&gt; at the end of leading
    whitespace</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1590321600">- GNU nano 4.9.3:
  * fix a crash when the terminal screen is resized while at a
    lock-file prompt</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1596024000">- GNU nano 5.0:
  * With --indicator (or -q or 'set indicator') nano will show a kind
    of scrollbar on the righthand side of the screen to indicate where
    in the buffer the viewport is located and how much it covers.
  * With &lt;Alt+Insert&gt; any line can be "tagged" with an anchor, and
    &lt;Alt+PageUp&gt; and &lt;Alt+PageDown&gt; will jump to the nearest anchor.
    When using line numbers, an anchor is shown as "+" in the margin.
  * The Execute Command prompt is now directly accessible from the
    main menu (with ^T, replacing the Spell Checker). The Linter,
    Formatter, Spell Checker, Full Justification, Suspension, and
    Cut-Till-End functions are available in this menu too.
  * On terminals that support at least 256 colors, nine new color
    names are available: pink, purple, mauve, lagoon, mint, lime,
    peach, orange, and latte. These do not have lighter versions.
  * For the color names red, green, blue, yellow, cyan, magenta,
    white, and black, the prefix 'light' gives a brighter color.
    Prefix 'bright' is deprecated, as it means both bold AND light.
  * All color names can be preceded with "bold," and/or "italic,"
    (in that order) to get a bold and/or italic typeface.
  * With --bookstyle (or -O or 'set bookstyle') nano considers any
    line that begins with whitespace as the start of a paragraph.
  * Refreshing the screen with ^L now works in every menu.
  * In the main menu, ^L also centers the line with the cursor.
  * Toggling the help lines with M-X now works in all menus except
    in the help viewer and the linter.
  * At a filename prompt, the first &lt;Tab&gt; lists the possibilities,
    and these are listed near the bottom instead of near the top.
  * Bindable function 'curpos' has been renamed to 'location'.
  * Long option --tempfile has been renamed to --saveonexit.
  * Short option -S is now a synonym of --softwrap.
  * The New Buffer toggle (M-F) has become non-persistent. Options
  - -multibuffer and 'set multibuffer' still make it default to on.
  * Backup files will retain their group ownership (when possible).
  * Data is synced to disk before "... lines written" is shown.
  * The raw escape sequences for F13 to F16 are no longer recognized.
  * Distro-specific syntaxes, and syntaxes of less common languages,
    have been moved down to subdirectory syntax/extra/. The affected
    distros and others may wish to move wanted syntaxes one level up.
    Syntaxes for Markdown, Haskell, and Ada were added.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1597233600">- GNU nano 5.1:
  * Make M-Bsp (Alt+Backspace) delete a word backwards
  * Make M-[ bindable
  * Fix crash on first keystroke in an empty buffer --indicator
    and --softwrap
  * Fix crash when invoking the formatter while text is marked
  * In UTF-8 locales, an anchor is shown as a diamond</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1598270400">- GNU nano 5.2:
  * Making certain replacements after a large paste does not crash
  * Hitting a toggle at the Search prompt does not clear the answer
  * Using --positionlog does not complain at the first start
  * A macro containing a Search command will not sometimes fail</changelog>
  <changelog author="Aaron Stern &lt;ukbeast89@protonmail.com&gt;" date="1602072000">- GNU nano 5.3:
  * Option 'set stateflags' makes nano show the state of auto-indenting,
    the mark, hard-wrapping, macro recording, and soft-wrapping in the
    title bar. The flags take the place of "Modified", and a modified
    buffer is instead indicated by an asterisk (*) after its name.
  * Nano no longer by default tries using libmagic to determine the type
    of a file (when neither filename nor first line gave a clue), because
    in most cases it is a waste of time. It requires using the option
  - -magic or -! or 'set magic' to make nano try libmagic.
  * The color of the indicator can be changed with 'set scrollercolor'.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1606996800">- GNU nano 5.4:
  * Moving the cursor now skips over combining characters (an
    other zero-width characters)
  * Deleting a character deletes also any succeeding zero-width
    characters but backspacing deletes just one character at a time</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1609416000">- Install a useful default nanorc configuration
- Enable useful extra definitions for syntax highlighting</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1610625600">- GNU nano 5.5:
  * Option 'set minibar' to suppress the title bar and show a bar
    with basic information
  * 'set promptcolor' can configure the prompt bar
  * 'set markmatch' highlights the result of a successful search
  * AThe bindable toggle 'nowrap' has been renamed to
    'breaklonglines'
  * Support for Slang has been removed</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1614168000">- GNU nano 5.6:
  * A search match gets highlighted (in black on yellow by
    default), in addition to placing the cursor at the start of
    the matchA. The color combination can be changed with
    'set highlightcolor'. By default the cursor is hidden until the
    next keystroke, but it can be forced on with --showcursor /
    'set showcursor'.
  * Option --markmatch / 'set markmatch' has been removed
  * Cursor position and character code are displayed in the
    minibar only when option --constantshow / 'set constantshow'
    is used, and their display can be toggled with M-C
  * The state flags are displayed in the minibar only when option
  - -stateflags / 'set stateflags' is used</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1614772800">- GNU nano 5.6.1:
  * Search matches are properly colorized in softwrap mode too
  * Option 'highlightcolor' has been renamed to 'spotlightcolor'</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1615204800">- Fox signature sources
- Drop no longer needed scriplets</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1619697600">- GNU nano 5.7:
  * The output of --constantshow (without --minibar) is more stable
  * When opening multiple buffers and there is an error message,
    this message is shown again upon first switch to the relevant
    buffer
  * The position and size of the indicator now follow actual
    lines, instead of visual lines when in softwrap mode, meaning
    that the size of the indicator can change when scrolling in
    softwrap mode</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1623931200">- GNU nano 5.8:
  * After a search, the spotlighting is dropped after 1.5 seconds
    (0.8 seconds with --quick) to avoid the idea that the text is
    selected.
  * A + and a space before a filename on the command line will put
    the cursor at the end of the corresponding buffer.
  * Linter messages no longer include filename and line/column
    numbers.
  * Color name "grey" or "gray" can be used instead of "lightblack"
  * The color of the minibar can be chosen with 'set minicolor'.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1633780800">- GNU nano 5.9:
  * The extension of a filename is added to the name of a
    corresponding temporary file, so that spell checking a C file,
    for example, will check only the comments and strings
    (when using 'aspell').
  * The process number is added to the name of an emergency save
    file, so that when multiple nanos die they will not fight over
    a filename.
  * Undoing a cutting operation will restore an anchor that was
    located in the cut area to its original line.
  * When using --locking, saving a new buffer will create a lock
    file.
  * Syntax highlighting for YAML files has been added</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1639656000">- GNU nano 6.0:
  * Option --zero hides the interface and uses the whole terminal
    for editing
  * Colors can be given also in #rgb hexadecimal, to select the
    nearest color from the 6x6x6 color-cube palette available on
    256-color terminals
  * Fourteen new color names are available, from rosy to crimson</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1644494400">- GNU nano 6.1:
  * The behavior of ^K at a prompt has been enhanced: when there
    is text after the cursor, just this text is erased
  * At a prompt, M-6 copies the current answer into the cutbuffer
  * Large external pastes into nano are handled more quickly</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1645185600">- GNU nano 6.2
  * The file browser clears the prompt bar also when using
  - -minibar
  * Linting now works also with a newer 'pyflakes'</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1651233600">- Update to version 6.3:
  * For multiline regexes, text is now colored as soon a start
    match is found, also when there is no end match at all.
  * The colorizing of any line is stopped after two thousand bytes
    to avoid frustrating delays.
  * When environment variable NO_COLOR is set, the two default
    colors (yellow for the spotlight, red for error messages) are
    suppressed when no interface colors are specified in a nanorc
    file.
  * Full justification and piping the whole buffer through a
    command now keep the cursor at the same line number.
  * Utility 'xsel' can be used to copy a marked region to the
    system's clipboard.  See doc/sample.nanorc for an example.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1658750400">- Added obs-channel-and-patchinfo-syntax.patch to support syntax
  highlighting for _channel and _patchinfo files used by OBS</changelog>
</package>
<package pkgid="ee2845811e161f6728e5b6a31d34d5632e77de059c6a2e01d23c554a44245b04" name="nano" arch="ppc64le">
  <version epoch="0" ver="6.3" rel="bp154.2.3.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586260800">- GNU nano 4.9.2:
  * fix crash after undoing an &lt;Enter&gt; at the end of leading
    whitespace</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1590321600">- GNU nano 4.9.3:
  * fix a crash when the terminal screen is resized while at a
    lock-file prompt</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1596024000">- GNU nano 5.0:
  * With --indicator (or -q or 'set indicator') nano will show a kind
    of scrollbar on the righthand side of the screen to indicate where
    in the buffer the viewport is located and how much it covers.
  * With &lt;Alt+Insert&gt; any line can be "tagged" with an anchor, and
    &lt;Alt+PageUp&gt; and &lt;Alt+PageDown&gt; will jump to the nearest anchor.
    When using line numbers, an anchor is shown as "+" in the margin.
  * The Execute Command prompt is now directly accessible from the
    main menu (with ^T, replacing the Spell Checker). The Linter,
    Formatter, Spell Checker, Full Justification, Suspension, and
    Cut-Till-End functions are available in this menu too.
  * On terminals that support at least 256 colors, nine new color
    names are available: pink, purple, mauve, lagoon, mint, lime,
    peach, orange, and latte. These do not have lighter versions.
  * For the color names red, green, blue, yellow, cyan, magenta,
    white, and black, the prefix 'light' gives a brighter color.
    Prefix 'bright' is deprecated, as it means both bold AND light.
  * All color names can be preceded with "bold," and/or "italic,"
    (in that order) to get a bold and/or italic typeface.
  * With --bookstyle (or -O or 'set bookstyle') nano considers any
    line that begins with whitespace as the start of a paragraph.
  * Refreshing the screen with ^L now works in every menu.
  * In the main menu, ^L also centers the line with the cursor.
  * Toggling the help lines with M-X now works in all menus except
    in the help viewer and the linter.
  * At a filename prompt, the first &lt;Tab&gt; lists the possibilities,
    and these are listed near the bottom instead of near the top.
  * Bindable function 'curpos' has been renamed to 'location'.
  * Long option --tempfile has been renamed to --saveonexit.
  * Short option -S is now a synonym of --softwrap.
  * The New Buffer toggle (M-F) has become non-persistent. Options
  - -multibuffer and 'set multibuffer' still make it default to on.
  * Backup files will retain their group ownership (when possible).
  * Data is synced to disk before "... lines written" is shown.
  * The raw escape sequences for F13 to F16 are no longer recognized.
  * Distro-specific syntaxes, and syntaxes of less common languages,
    have been moved down to subdirectory syntax/extra/. The affected
    distros and others may wish to move wanted syntaxes one level up.
    Syntaxes for Markdown, Haskell, and Ada were added.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1597233600">- GNU nano 5.1:
  * Make M-Bsp (Alt+Backspace) delete a word backwards
  * Make M-[ bindable
  * Fix crash on first keystroke in an empty buffer --indicator
    and --softwrap
  * Fix crash when invoking the formatter while text is marked
  * In UTF-8 locales, an anchor is shown as a diamond</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1598270400">- GNU nano 5.2:
  * Making certain replacements after a large paste does not crash
  * Hitting a toggle at the Search prompt does not clear the answer
  * Using --positionlog does not complain at the first start
  * A macro containing a Search command will not sometimes fail</changelog>
  <changelog author="Aaron Stern &lt;ukbeast89@protonmail.com&gt;" date="1602072000">- GNU nano 5.3:
  * Option 'set stateflags' makes nano show the state of auto-indenting,
    the mark, hard-wrapping, macro recording, and soft-wrapping in the
    title bar. The flags take the place of "Modified", and a modified
    buffer is instead indicated by an asterisk (*) after its name.
  * Nano no longer by default tries using libmagic to determine the type
    of a file (when neither filename nor first line gave a clue), because
    in most cases it is a waste of time. It requires using the option
  - -magic or -! or 'set magic' to make nano try libmagic.
  * The color of the indicator can be changed with 'set scrollercolor'.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1606996800">- GNU nano 5.4:
  * Moving the cursor now skips over combining characters (an
    other zero-width characters)
  * Deleting a character deletes also any succeeding zero-width
    characters but backspacing deletes just one character at a time</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1609416000">- Install a useful default nanorc configuration
- Enable useful extra definitions for syntax highlighting</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1610625600">- GNU nano 5.5:
  * Option 'set minibar' to suppress the title bar and show a bar
    with basic information
  * 'set promptcolor' can configure the prompt bar
  * 'set markmatch' highlights the result of a successful search
  * AThe bindable toggle 'nowrap' has been renamed to
    'breaklonglines'
  * Support for Slang has been removed</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1614168000">- GNU nano 5.6:
  * A search match gets highlighted (in black on yellow by
    default), in addition to placing the cursor at the start of
    the matchA. The color combination can be changed with
    'set highlightcolor'. By default the cursor is hidden until the
    next keystroke, but it can be forced on with --showcursor /
    'set showcursor'.
  * Option --markmatch / 'set markmatch' has been removed
  * Cursor position and character code are displayed in the
    minibar only when option --constantshow / 'set constantshow'
    is used, and their display can be toggled with M-C
  * The state flags are displayed in the minibar only when option
  - -stateflags / 'set stateflags' is used</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1614772800">- GNU nano 5.6.1:
  * Search matches are properly colorized in softwrap mode too
  * Option 'highlightcolor' has been renamed to 'spotlightcolor'</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1615204800">- Fox signature sources
- Drop no longer needed scriplets</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1619697600">- GNU nano 5.7:
  * The output of --constantshow (without --minibar) is more stable
  * When opening multiple buffers and there is an error message,
    this message is shown again upon first switch to the relevant
    buffer
  * The position and size of the indicator now follow actual
    lines, instead of visual lines when in softwrap mode, meaning
    that the size of the indicator can change when scrolling in
    softwrap mode</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1623931200">- GNU nano 5.8:
  * After a search, the spotlighting is dropped after 1.5 seconds
    (0.8 seconds with --quick) to avoid the idea that the text is
    selected.
  * A + and a space before a filename on the command line will put
    the cursor at the end of the corresponding buffer.
  * Linter messages no longer include filename and line/column
    numbers.
  * Color name "grey" or "gray" can be used instead of "lightblack"
  * The color of the minibar can be chosen with 'set minicolor'.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1633780800">- GNU nano 5.9:
  * The extension of a filename is added to the name of a
    corresponding temporary file, so that spell checking a C file,
    for example, will check only the comments and strings
    (when using 'aspell').
  * The process number is added to the name of an emergency save
    file, so that when multiple nanos die they will not fight over
    a filename.
  * Undoing a cutting operation will restore an anchor that was
    located in the cut area to its original line.
  * When using --locking, saving a new buffer will create a lock
    file.
  * Syntax highlighting for YAML files has been added</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1639656000">- GNU nano 6.0:
  * Option --zero hides the interface and uses the whole terminal
    for editing
  * Colors can be given also in #rgb hexadecimal, to select the
    nearest color from the 6x6x6 color-cube palette available on
    256-color terminals
  * Fourteen new color names are available, from rosy to crimson</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1644494400">- GNU nano 6.1:
  * The behavior of ^K at a prompt has been enhanced: when there
    is text after the cursor, just this text is erased
  * At a prompt, M-6 copies the current answer into the cutbuffer
  * Large external pastes into nano are handled more quickly</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1645185600">- GNU nano 6.2
  * The file browser clears the prompt bar also when using
  - -minibar
  * Linting now works also with a newer 'pyflakes'</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1651233600">- Update to version 6.3:
  * For multiline regexes, text is now colored as soon a start
    match is found, also when there is no end match at all.
  * The colorizing of any line is stopped after two thousand bytes
    to avoid frustrating delays.
  * When environment variable NO_COLOR is set, the two default
    colors (yellow for the spotlight, red for error messages) are
    suppressed when no interface colors are specified in a nanorc
    file.
  * Full justification and piping the whole buffer through a
    command now keep the cursor at the same line number.
  * Utility 'xsel' can be used to copy a marked region to the
    system's clipboard.  See doc/sample.nanorc for an example.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1658750400">- Added obs-channel-and-patchinfo-syntax.patch to support syntax
  highlighting for _channel and _patchinfo files used by OBS</changelog>
</package>
<package pkgid="7e941c8064818f7f4d22bafabd99011b3a62ecf6bedde664b41d40e80b73852e" name="nano" arch="s390x">
  <version epoch="0" ver="6.3" rel="bp154.2.3.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586260800">- GNU nano 4.9.2:
  * fix crash after undoing an &lt;Enter&gt; at the end of leading
    whitespace</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1590321600">- GNU nano 4.9.3:
  * fix a crash when the terminal screen is resized while at a
    lock-file prompt</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1596024000">- GNU nano 5.0:
  * With --indicator (or -q or 'set indicator') nano will show a kind
    of scrollbar on the righthand side of the screen to indicate where
    in the buffer the viewport is located and how much it covers.
  * With &lt;Alt+Insert&gt; any line can be "tagged" with an anchor, and
    &lt;Alt+PageUp&gt; and &lt;Alt+PageDown&gt; will jump to the nearest anchor.
    When using line numbers, an anchor is shown as "+" in the margin.
  * The Execute Command prompt is now directly accessible from the
    main menu (with ^T, replacing the Spell Checker). The Linter,
    Formatter, Spell Checker, Full Justification, Suspension, and
    Cut-Till-End functions are available in this menu too.
  * On terminals that support at least 256 colors, nine new color
    names are available: pink, purple, mauve, lagoon, mint, lime,
    peach, orange, and latte. These do not have lighter versions.
  * For the color names red, green, blue, yellow, cyan, magenta,
    white, and black, the prefix 'light' gives a brighter color.
    Prefix 'bright' is deprecated, as it means both bold AND light.
  * All color names can be preceded with "bold," and/or "italic,"
    (in that order) to get a bold and/or italic typeface.
  * With --bookstyle (or -O or 'set bookstyle') nano considers any
    line that begins with whitespace as the start of a paragraph.
  * Refreshing the screen with ^L now works in every menu.
  * In the main menu, ^L also centers the line with the cursor.
  * Toggling the help lines with M-X now works in all menus except
    in the help viewer and the linter.
  * At a filename prompt, the first &lt;Tab&gt; lists the possibilities,
    and these are listed near the bottom instead of near the top.
  * Bindable function 'curpos' has been renamed to 'location'.
  * Long option --tempfile has been renamed to --saveonexit.
  * Short option -S is now a synonym of --softwrap.
  * The New Buffer toggle (M-F) has become non-persistent. Options
  - -multibuffer and 'set multibuffer' still make it default to on.
  * Backup files will retain their group ownership (when possible).
  * Data is synced to disk before "... lines written" is shown.
  * The raw escape sequences for F13 to F16 are no longer recognized.
  * Distro-specific syntaxes, and syntaxes of less common languages,
    have been moved down to subdirectory syntax/extra/. The affected
    distros and others may wish to move wanted syntaxes one level up.
    Syntaxes for Markdown, Haskell, and Ada were added.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1597233600">- GNU nano 5.1:
  * Make M-Bsp (Alt+Backspace) delete a word backwards
  * Make M-[ bindable
  * Fix crash on first keystroke in an empty buffer --indicator
    and --softwrap
  * Fix crash when invoking the formatter while text is marked
  * In UTF-8 locales, an anchor is shown as a diamond</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1598270400">- GNU nano 5.2:
  * Making certain replacements after a large paste does not crash
  * Hitting a toggle at the Search prompt does not clear the answer
  * Using --positionlog does not complain at the first start
  * A macro containing a Search command will not sometimes fail</changelog>
  <changelog author="Aaron Stern &lt;ukbeast89@protonmail.com&gt;" date="1602072000">- GNU nano 5.3:
  * Option 'set stateflags' makes nano show the state of auto-indenting,
    the mark, hard-wrapping, macro recording, and soft-wrapping in the
    title bar. The flags take the place of "Modified", and a modified
    buffer is instead indicated by an asterisk (*) after its name.
  * Nano no longer by default tries using libmagic to determine the type
    of a file (when neither filename nor first line gave a clue), because
    in most cases it is a waste of time. It requires using the option
  - -magic or -! or 'set magic' to make nano try libmagic.
  * The color of the indicator can be changed with 'set scrollercolor'.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1606996800">- GNU nano 5.4:
  * Moving the cursor now skips over combining characters (an
    other zero-width characters)
  * Deleting a character deletes also any succeeding zero-width
    characters but backspacing deletes just one character at a time</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1609416000">- Install a useful default nanorc configuration
- Enable useful extra definitions for syntax highlighting</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1610625600">- GNU nano 5.5:
  * Option 'set minibar' to suppress the title bar and show a bar
    with basic information
  * 'set promptcolor' can configure the prompt bar
  * 'set markmatch' highlights the result of a successful search
  * AThe bindable toggle 'nowrap' has been renamed to
    'breaklonglines'
  * Support for Slang has been removed</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1614168000">- GNU nano 5.6:
  * A search match gets highlighted (in black on yellow by
    default), in addition to placing the cursor at the start of
    the matchA. The color combination can be changed with
    'set highlightcolor'. By default the cursor is hidden until the
    next keystroke, but it can be forced on with --showcursor /
    'set showcursor'.
  * Option --markmatch / 'set markmatch' has been removed
  * Cursor position and character code are displayed in the
    minibar only when option --constantshow / 'set constantshow'
    is used, and their display can be toggled with M-C
  * The state flags are displayed in the minibar only when option
  - -stateflags / 'set stateflags' is used</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1614772800">- GNU nano 5.6.1:
  * Search matches are properly colorized in softwrap mode too
  * Option 'highlightcolor' has been renamed to 'spotlightcolor'</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1615204800">- Fox signature sources
- Drop no longer needed scriplets</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1619697600">- GNU nano 5.7:
  * The output of --constantshow (without --minibar) is more stable
  * When opening multiple buffers and there is an error message,
    this message is shown again upon first switch to the relevant
    buffer
  * The position and size of the indicator now follow actual
    lines, instead of visual lines when in softwrap mode, meaning
    that the size of the indicator can change when scrolling in
    softwrap mode</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1623931200">- GNU nano 5.8:
  * After a search, the spotlighting is dropped after 1.5 seconds
    (0.8 seconds with --quick) to avoid the idea that the text is
    selected.
  * A + and a space before a filename on the command line will put
    the cursor at the end of the corresponding buffer.
  * Linter messages no longer include filename and line/column
    numbers.
  * Color name "grey" or "gray" can be used instead of "lightblack"
  * The color of the minibar can be chosen with 'set minicolor'.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1633780800">- GNU nano 5.9:
  * The extension of a filename is added to the name of a
    corresponding temporary file, so that spell checking a C file,
    for example, will check only the comments and strings
    (when using 'aspell').
  * The process number is added to the name of an emergency save
    file, so that when multiple nanos die they will not fight over
    a filename.
  * Undoing a cutting operation will restore an anchor that was
    located in the cut area to its original line.
  * When using --locking, saving a new buffer will create a lock
    file.
  * Syntax highlighting for YAML files has been added</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1639656000">- GNU nano 6.0:
  * Option --zero hides the interface and uses the whole terminal
    for editing
  * Colors can be given also in #rgb hexadecimal, to select the
    nearest color from the 6x6x6 color-cube palette available on
    256-color terminals
  * Fourteen new color names are available, from rosy to crimson</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1644494400">- GNU nano 6.1:
  * The behavior of ^K at a prompt has been enhanced: when there
    is text after the cursor, just this text is erased
  * At a prompt, M-6 copies the current answer into the cutbuffer
  * Large external pastes into nano are handled more quickly</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1645185600">- GNU nano 6.2
  * The file browser clears the prompt bar also when using
  - -minibar
  * Linting now works also with a newer 'pyflakes'</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1651233600">- Update to version 6.3:
  * For multiline regexes, text is now colored as soon a start
    match is found, also when there is no end match at all.
  * The colorizing of any line is stopped after two thousand bytes
    to avoid frustrating delays.
  * When environment variable NO_COLOR is set, the two default
    colors (yellow for the spotlight, red for error messages) are
    suppressed when no interface colors are specified in a nanorc
    file.
  * Full justification and piping the whole buffer through a
    command now keep the cursor at the same line number.
  * Utility 'xsel' can be used to copy a marked region to the
    system's clipboard.  See doc/sample.nanorc for an example.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1658750400">- Added obs-channel-and-patchinfo-syntax.patch to support syntax
  highlighting for _channel and _patchinfo files used by OBS</changelog>
</package>
<package pkgid="5562abcb878980d3981099577004369233711e2c683de837af7d86a15bcec3d1" name="nano" arch="src">
  <version epoch="0" ver="6.3" rel="bp154.2.3.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586260800">- GNU nano 4.9.2:
  * fix crash after undoing an &lt;Enter&gt; at the end of leading
    whitespace</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1590321600">- GNU nano 4.9.3:
  * fix a crash when the terminal screen is resized while at a
    lock-file prompt</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1596024000">- GNU nano 5.0:
  * With --indicator (or -q or 'set indicator') nano will show a kind
    of scrollbar on the righthand side of the screen to indicate where
    in the buffer the viewport is located and how much it covers.
  * With &lt;Alt+Insert&gt; any line can be "tagged" with an anchor, and
    &lt;Alt+PageUp&gt; and &lt;Alt+PageDown&gt; will jump to the nearest anchor.
    When using line numbers, an anchor is shown as "+" in the margin.
  * The Execute Command prompt is now directly accessible from the
    main menu (with ^T, replacing the Spell Checker). The Linter,
    Formatter, Spell Checker, Full Justification, Suspension, and
    Cut-Till-End functions are available in this menu too.
  * On terminals that support at least 256 colors, nine new color
    names are available: pink, purple, mauve, lagoon, mint, lime,
    peach, orange, and latte. These do not have lighter versions.
  * For the color names red, green, blue, yellow, cyan, magenta,
    white, and black, the prefix 'light' gives a brighter color.
    Prefix 'bright' is deprecated, as it means both bold AND light.
  * All color names can be preceded with "bold," and/or "italic,"
    (in that order) to get a bold and/or italic typeface.
  * With --bookstyle (or -O or 'set bookstyle') nano considers any
    line that begins with whitespace as the start of a paragraph.
  * Refreshing the screen with ^L now works in every menu.
  * In the main menu, ^L also centers the line with the cursor.
  * Toggling the help lines with M-X now works in all menus except
    in the help viewer and the linter.
  * At a filename prompt, the first &lt;Tab&gt; lists the possibilities,
    and these are listed near the bottom instead of near the top.
  * Bindable function 'curpos' has been renamed to 'location'.
  * Long option --tempfile has been renamed to --saveonexit.
  * Short option -S is now a synonym of --softwrap.
  * The New Buffer toggle (M-F) has become non-persistent. Options
  - -multibuffer and 'set multibuffer' still make it default to on.
  * Backup files will retain their group ownership (when possible).
  * Data is synced to disk before "... lines written" is shown.
  * The raw escape sequences for F13 to F16 are no longer recognized.
  * Distro-specific syntaxes, and syntaxes of less common languages,
    have been moved down to subdirectory syntax/extra/. The affected
    distros and others may wish to move wanted syntaxes one level up.
    Syntaxes for Markdown, Haskell, and Ada were added.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1597233600">- GNU nano 5.1:
  * Make M-Bsp (Alt+Backspace) delete a word backwards
  * Make M-[ bindable
  * Fix crash on first keystroke in an empty buffer --indicator
    and --softwrap
  * Fix crash when invoking the formatter while text is marked
  * In UTF-8 locales, an anchor is shown as a diamond</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1598270400">- GNU nano 5.2:
  * Making certain replacements after a large paste does not crash
  * Hitting a toggle at the Search prompt does not clear the answer
  * Using --positionlog does not complain at the first start
  * A macro containing a Search command will not sometimes fail</changelog>
  <changelog author="Aaron Stern &lt;ukbeast89@protonmail.com&gt;" date="1602072000">- GNU nano 5.3:
  * Option 'set stateflags' makes nano show the state of auto-indenting,
    the mark, hard-wrapping, macro recording, and soft-wrapping in the
    title bar. The flags take the place of "Modified", and a modified
    buffer is instead indicated by an asterisk (*) after its name.
  * Nano no longer by default tries using libmagic to determine the type
    of a file (when neither filename nor first line gave a clue), because
    in most cases it is a waste of time. It requires using the option
  - -magic or -! or 'set magic' to make nano try libmagic.
  * The color of the indicator can be changed with 'set scrollercolor'.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1606996800">- GNU nano 5.4:
  * Moving the cursor now skips over combining characters (an
    other zero-width characters)
  * Deleting a character deletes also any succeeding zero-width
    characters but backspacing deletes just one character at a time</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1609416000">- Install a useful default nanorc configuration
- Enable useful extra definitions for syntax highlighting</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1610625600">- GNU nano 5.5:
  * Option 'set minibar' to suppress the title bar and show a bar
    with basic information
  * 'set promptcolor' can configure the prompt bar
  * 'set markmatch' highlights the result of a successful search
  * AThe bindable toggle 'nowrap' has been renamed to
    'breaklonglines'
  * Support for Slang has been removed</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1614168000">- GNU nano 5.6:
  * A search match gets highlighted (in black on yellow by
    default), in addition to placing the cursor at the start of
    the matchA. The color combination can be changed with
    'set highlightcolor'. By default the cursor is hidden until the
    next keystroke, but it can be forced on with --showcursor /
    'set showcursor'.
  * Option --markmatch / 'set markmatch' has been removed
  * Cursor position and character code are displayed in the
    minibar only when option --constantshow / 'set constantshow'
    is used, and their display can be toggled with M-C
  * The state flags are displayed in the minibar only when option
  - -stateflags / 'set stateflags' is used</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1614772800">- GNU nano 5.6.1:
  * Search matches are properly colorized in softwrap mode too
  * Option 'highlightcolor' has been renamed to 'spotlightcolor'</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1615204800">- Fox signature sources
- Drop no longer needed scriplets</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1619697600">- GNU nano 5.7:
  * The output of --constantshow (without --minibar) is more stable
  * When opening multiple buffers and there is an error message,
    this message is shown again upon first switch to the relevant
    buffer
  * The position and size of the indicator now follow actual
    lines, instead of visual lines when in softwrap mode, meaning
    that the size of the indicator can change when scrolling in
    softwrap mode</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1623931200">- GNU nano 5.8:
  * After a search, the spotlighting is dropped after 1.5 seconds
    (0.8 seconds with --quick) to avoid the idea that the text is
    selected.
  * A + and a space before a filename on the command line will put
    the cursor at the end of the corresponding buffer.
  * Linter messages no longer include filename and line/column
    numbers.
  * Color name "grey" or "gray" can be used instead of "lightblack"
  * The color of the minibar can be chosen with 'set minicolor'.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1633780800">- GNU nano 5.9:
  * The extension of a filename is added to the name of a
    corresponding temporary file, so that spell checking a C file,
    for example, will check only the comments and strings
    (when using 'aspell').
  * The process number is added to the name of an emergency save
    file, so that when multiple nanos die they will not fight over
    a filename.
  * Undoing a cutting operation will restore an anchor that was
    located in the cut area to its original line.
  * When using --locking, saving a new buffer will create a lock
    file.
  * Syntax highlighting for YAML files has been added</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1639656000">- GNU nano 6.0:
  * Option --zero hides the interface and uses the whole terminal
    for editing
  * Colors can be given also in #rgb hexadecimal, to select the
    nearest color from the 6x6x6 color-cube palette available on
    256-color terminals
  * Fourteen new color names are available, from rosy to crimson</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1644494400">- GNU nano 6.1:
  * The behavior of ^K at a prompt has been enhanced: when there
    is text after the cursor, just this text is erased
  * At a prompt, M-6 copies the current answer into the cutbuffer
  * Large external pastes into nano are handled more quickly</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1645185600">- GNU nano 6.2
  * The file browser clears the prompt bar also when using
  - -minibar
  * Linting now works also with a newer 'pyflakes'</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1651233600">- Update to version 6.3:
  * For multiline regexes, text is now colored as soon a start
    match is found, also when there is no end match at all.
  * The colorizing of any line is stopped after two thousand bytes
    to avoid frustrating delays.
  * When environment variable NO_COLOR is set, the two default
    colors (yellow for the spotlight, red for error messages) are
    suppressed when no interface colors are specified in a nanorc
    file.
  * Full justification and piping the whole buffer through a
    command now keep the cursor at the same line number.
  * Utility 'xsel' can be used to copy a marked region to the
    system's clipboard.  See doc/sample.nanorc for an example.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1658750400">- Added obs-channel-and-patchinfo-syntax.patch to support syntax
  highlighting for _channel and _patchinfo files used by OBS</changelog>
</package>
<package pkgid="0f6fd4bea92febe346e681c40924aa5020697bf5a0feaad6536ac8f2af3b6e03" name="nano" arch="x86_64">
  <version epoch="0" ver="6.3" rel="bp154.2.3.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586260800">- GNU nano 4.9.2:
  * fix crash after undoing an &lt;Enter&gt; at the end of leading
    whitespace</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1590321600">- GNU nano 4.9.3:
  * fix a crash when the terminal screen is resized while at a
    lock-file prompt</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1596024000">- GNU nano 5.0:
  * With --indicator (or -q or 'set indicator') nano will show a kind
    of scrollbar on the righthand side of the screen to indicate where
    in the buffer the viewport is located and how much it covers.
  * With &lt;Alt+Insert&gt; any line can be "tagged" with an anchor, and
    &lt;Alt+PageUp&gt; and &lt;Alt+PageDown&gt; will jump to the nearest anchor.
    When using line numbers, an anchor is shown as "+" in the margin.
  * The Execute Command prompt is now directly accessible from the
    main menu (with ^T, replacing the Spell Checker). The Linter,
    Formatter, Spell Checker, Full Justification, Suspension, and
    Cut-Till-End functions are available in this menu too.
  * On terminals that support at least 256 colors, nine new color
    names are available: pink, purple, mauve, lagoon, mint, lime,
    peach, orange, and latte. These do not have lighter versions.
  * For the color names red, green, blue, yellow, cyan, magenta,
    white, and black, the prefix 'light' gives a brighter color.
    Prefix 'bright' is deprecated, as it means both bold AND light.
  * All color names can be preceded with "bold," and/or "italic,"
    (in that order) to get a bold and/or italic typeface.
  * With --bookstyle (or -O or 'set bookstyle') nano considers any
    line that begins with whitespace as the start of a paragraph.
  * Refreshing the screen with ^L now works in every menu.
  * In the main menu, ^L also centers the line with the cursor.
  * Toggling the help lines with M-X now works in all menus except
    in the help viewer and the linter.
  * At a filename prompt, the first &lt;Tab&gt; lists the possibilities,
    and these are listed near the bottom instead of near the top.
  * Bindable function 'curpos' has been renamed to 'location'.
  * Long option --tempfile has been renamed to --saveonexit.
  * Short option -S is now a synonym of --softwrap.
  * The New Buffer toggle (M-F) has become non-persistent. Options
  - -multibuffer and 'set multibuffer' still make it default to on.
  * Backup files will retain their group ownership (when possible).
  * Data is synced to disk before "... lines written" is shown.
  * The raw escape sequences for F13 to F16 are no longer recognized.
  * Distro-specific syntaxes, and syntaxes of less common languages,
    have been moved down to subdirectory syntax/extra/. The affected
    distros and others may wish to move wanted syntaxes one level up.
    Syntaxes for Markdown, Haskell, and Ada were added.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1597233600">- GNU nano 5.1:
  * Make M-Bsp (Alt+Backspace) delete a word backwards
  * Make M-[ bindable
  * Fix crash on first keystroke in an empty buffer --indicator
    and --softwrap
  * Fix crash when invoking the formatter while text is marked
  * In UTF-8 locales, an anchor is shown as a diamond</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1598270400">- GNU nano 5.2:
  * Making certain replacements after a large paste does not crash
  * Hitting a toggle at the Search prompt does not clear the answer
  * Using --positionlog does not complain at the first start
  * A macro containing a Search command will not sometimes fail</changelog>
  <changelog author="Aaron Stern &lt;ukbeast89@protonmail.com&gt;" date="1602072000">- GNU nano 5.3:
  * Option 'set stateflags' makes nano show the state of auto-indenting,
    the mark, hard-wrapping, macro recording, and soft-wrapping in the
    title bar. The flags take the place of "Modified", and a modified
    buffer is instead indicated by an asterisk (*) after its name.
  * Nano no longer by default tries using libmagic to determine the type
    of a file (when neither filename nor first line gave a clue), because
    in most cases it is a waste of time. It requires using the option
  - -magic or -! or 'set magic' to make nano try libmagic.
  * The color of the indicator can be changed with 'set scrollercolor'.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1606996800">- GNU nano 5.4:
  * Moving the cursor now skips over combining characters (an
    other zero-width characters)
  * Deleting a character deletes also any succeeding zero-width
    characters but backspacing deletes just one character at a time</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1609416000">- Install a useful default nanorc configuration
- Enable useful extra definitions for syntax highlighting</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1610625600">- GNU nano 5.5:
  * Option 'set minibar' to suppress the title bar and show a bar
    with basic information
  * 'set promptcolor' can configure the prompt bar
  * 'set markmatch' highlights the result of a successful search
  * AThe bindable toggle 'nowrap' has been renamed to
    'breaklonglines'
  * Support for Slang has been removed</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1614168000">- GNU nano 5.6:
  * A search match gets highlighted (in black on yellow by
    default), in addition to placing the cursor at the start of
    the matchA. The color combination can be changed with
    'set highlightcolor'. By default the cursor is hidden until the
    next keystroke, but it can be forced on with --showcursor /
    'set showcursor'.
  * Option --markmatch / 'set markmatch' has been removed
  * Cursor position and character code are displayed in the
    minibar only when option --constantshow / 'set constantshow'
    is used, and their display can be toggled with M-C
  * The state flags are displayed in the minibar only when option
  - -stateflags / 'set stateflags' is used</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1614772800">- GNU nano 5.6.1:
  * Search matches are properly colorized in softwrap mode too
  * Option 'highlightcolor' has been renamed to 'spotlightcolor'</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1615204800">- Fox signature sources
- Drop no longer needed scriplets</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1619697600">- GNU nano 5.7:
  * The output of --constantshow (without --minibar) is more stable
  * When opening multiple buffers and there is an error message,
    this message is shown again upon first switch to the relevant
    buffer
  * The position and size of the indicator now follow actual
    lines, instead of visual lines when in softwrap mode, meaning
    that the size of the indicator can change when scrolling in
    softwrap mode</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1623931200">- GNU nano 5.8:
  * After a search, the spotlighting is dropped after 1.5 seconds
    (0.8 seconds with --quick) to avoid the idea that the text is
    selected.
  * A + and a space before a filename on the command line will put
    the cursor at the end of the corresponding buffer.
  * Linter messages no longer include filename and line/column
    numbers.
  * Color name "grey" or "gray" can be used instead of "lightblack"
  * The color of the minibar can be chosen with 'set minicolor'.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1633780800">- GNU nano 5.9:
  * The extension of a filename is added to the name of a
    corresponding temporary file, so that spell checking a C file,
    for example, will check only the comments and strings
    (when using 'aspell').
  * The process number is added to the name of an emergency save
    file, so that when multiple nanos die they will not fight over
    a filename.
  * Undoing a cutting operation will restore an anchor that was
    located in the cut area to its original line.
  * When using --locking, saving a new buffer will create a lock
    file.
  * Syntax highlighting for YAML files has been added</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1639656000">- GNU nano 6.0:
  * Option --zero hides the interface and uses the whole terminal
    for editing
  * Colors can be given also in #rgb hexadecimal, to select the
    nearest color from the 6x6x6 color-cube palette available on
    256-color terminals
  * Fourteen new color names are available, from rosy to crimson</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1644494400">- GNU nano 6.1:
  * The behavior of ^K at a prompt has been enhanced: when there
    is text after the cursor, just this text is erased
  * At a prompt, M-6 copies the current answer into the cutbuffer
  * Large external pastes into nano are handled more quickly</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1645185600">- GNU nano 6.2
  * The file browser clears the prompt bar also when using
  - -minibar
  * Linting now works also with a newer 'pyflakes'</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1651233600">- Update to version 6.3:
  * For multiline regexes, text is now colored as soon a start
    match is found, also when there is no end match at all.
  * The colorizing of any line is stopped after two thousand bytes
    to avoid frustrating delays.
  * When environment variable NO_COLOR is set, the two default
    colors (yellow for the spotlight, red for error messages) are
    suppressed when no interface colors are specified in a nanorc
    file.
  * Full justification and piping the whole buffer through a
    command now keep the cursor at the same line number.
  * Utility 'xsel' can be used to copy a marked region to the
    system's clipboard.  See doc/sample.nanorc for an example.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1658750400">- Added obs-channel-and-patchinfo-syntax.patch to support syntax
  highlighting for _channel and _patchinfo files used by OBS</changelog>
</package>
<package pkgid="474df021afbfb0248138e0f0e727cfee307c869e9d2e72236190bda5ca53a444" name="nano-lang" arch="noarch">
  <version epoch="0" ver="6.3" rel="bp154.2.3.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586260800">- GNU nano 4.9.2:
  * fix crash after undoing an &lt;Enter&gt; at the end of leading
    whitespace</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1590321600">- GNU nano 4.9.3:
  * fix a crash when the terminal screen is resized while at a
    lock-file prompt</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1596024000">- GNU nano 5.0:
  * With --indicator (or -q or 'set indicator') nano will show a kind
    of scrollbar on the righthand side of the screen to indicate where
    in the buffer the viewport is located and how much it covers.
  * With &lt;Alt+Insert&gt; any line can be "tagged" with an anchor, and
    &lt;Alt+PageUp&gt; and &lt;Alt+PageDown&gt; will jump to the nearest anchor.
    When using line numbers, an anchor is shown as "+" in the margin.
  * The Execute Command prompt is now directly accessible from the
    main menu (with ^T, replacing the Spell Checker). The Linter,
    Formatter, Spell Checker, Full Justification, Suspension, and
    Cut-Till-End functions are available in this menu too.
  * On terminals that support at least 256 colors, nine new color
    names are available: pink, purple, mauve, lagoon, mint, lime,
    peach, orange, and latte. These do not have lighter versions.
  * For the color names red, green, blue, yellow, cyan, magenta,
    white, and black, the prefix 'light' gives a brighter color.
    Prefix 'bright' is deprecated, as it means both bold AND light.
  * All color names can be preceded with "bold," and/or "italic,"
    (in that order) to get a bold and/or italic typeface.
  * With --bookstyle (or -O or 'set bookstyle') nano considers any
    line that begins with whitespace as the start of a paragraph.
  * Refreshing the screen with ^L now works in every menu.
  * In the main menu, ^L also centers the line with the cursor.
  * Toggling the help lines with M-X now works in all menus except
    in the help viewer and the linter.
  * At a filename prompt, the first &lt;Tab&gt; lists the possibilities,
    and these are listed near the bottom instead of near the top.
  * Bindable function 'curpos' has been renamed to 'location'.
  * Long option --tempfile has been renamed to --saveonexit.
  * Short option -S is now a synonym of --softwrap.
  * The New Buffer toggle (M-F) has become non-persistent. Options
  - -multibuffer and 'set multibuffer' still make it default to on.
  * Backup files will retain their group ownership (when possible).
  * Data is synced to disk before "... lines written" is shown.
  * The raw escape sequences for F13 to F16 are no longer recognized.
  * Distro-specific syntaxes, and syntaxes of less common languages,
    have been moved down to subdirectory syntax/extra/. The affected
    distros and others may wish to move wanted syntaxes one level up.
    Syntaxes for Markdown, Haskell, and Ada were added.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1597233600">- GNU nano 5.1:
  * Make M-Bsp (Alt+Backspace) delete a word backwards
  * Make M-[ bindable
  * Fix crash on first keystroke in an empty buffer --indicator
    and --softwrap
  * Fix crash when invoking the formatter while text is marked
  * In UTF-8 locales, an anchor is shown as a diamond</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1598270400">- GNU nano 5.2:
  * Making certain replacements after a large paste does not crash
  * Hitting a toggle at the Search prompt does not clear the answer
  * Using --positionlog does not complain at the first start
  * A macro containing a Search command will not sometimes fail</changelog>
  <changelog author="Aaron Stern &lt;ukbeast89@protonmail.com&gt;" date="1602072000">- GNU nano 5.3:
  * Option 'set stateflags' makes nano show the state of auto-indenting,
    the mark, hard-wrapping, macro recording, and soft-wrapping in the
    title bar. The flags take the place of "Modified", and a modified
    buffer is instead indicated by an asterisk (*) after its name.
  * Nano no longer by default tries using libmagic to determine the type
    of a file (when neither filename nor first line gave a clue), because
    in most cases it is a waste of time. It requires using the option
  - -magic or -! or 'set magic' to make nano try libmagic.
  * The color of the indicator can be changed with 'set scrollercolor'.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1606996800">- GNU nano 5.4:
  * Moving the cursor now skips over combining characters (an
    other zero-width characters)
  * Deleting a character deletes also any succeeding zero-width
    characters but backspacing deletes just one character at a time</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1609416000">- Install a useful default nanorc configuration
- Enable useful extra definitions for syntax highlighting</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1610625600">- GNU nano 5.5:
  * Option 'set minibar' to suppress the title bar and show a bar
    with basic information
  * 'set promptcolor' can configure the prompt bar
  * 'set markmatch' highlights the result of a successful search
  * AThe bindable toggle 'nowrap' has been renamed to
    'breaklonglines'
  * Support for Slang has been removed</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1614168000">- GNU nano 5.6:
  * A search match gets highlighted (in black on yellow by
    default), in addition to placing the cursor at the start of
    the matchA. The color combination can be changed with
    'set highlightcolor'. By default the cursor is hidden until the
    next keystroke, but it can be forced on with --showcursor /
    'set showcursor'.
  * Option --markmatch / 'set markmatch' has been removed
  * Cursor position and character code are displayed in the
    minibar only when option --constantshow / 'set constantshow'
    is used, and their display can be toggled with M-C
  * The state flags are displayed in the minibar only when option
  - -stateflags / 'set stateflags' is used</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1614772800">- GNU nano 5.6.1:
  * Search matches are properly colorized in softwrap mode too
  * Option 'highlightcolor' has been renamed to 'spotlightcolor'</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1615204800">- Fox signature sources
- Drop no longer needed scriplets</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1619697600">- GNU nano 5.7:
  * The output of --constantshow (without --minibar) is more stable
  * When opening multiple buffers and there is an error message,
    this message is shown again upon first switch to the relevant
    buffer
  * The position and size of the indicator now follow actual
    lines, instead of visual lines when in softwrap mode, meaning
    that the size of the indicator can change when scrolling in
    softwrap mode</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1623931200">- GNU nano 5.8:
  * After a search, the spotlighting is dropped after 1.5 seconds
    (0.8 seconds with --quick) to avoid the idea that the text is
    selected.
  * A + and a space before a filename on the command line will put
    the cursor at the end of the corresponding buffer.
  * Linter messages no longer include filename and line/column
    numbers.
  * Color name "grey" or "gray" can be used instead of "lightblack"
  * The color of the minibar can be chosen with 'set minicolor'.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1633780800">- GNU nano 5.9:
  * The extension of a filename is added to the name of a
    corresponding temporary file, so that spell checking a C file,
    for example, will check only the comments and strings
    (when using 'aspell').
  * The process number is added to the name of an emergency save
    file, so that when multiple nanos die they will not fight over
    a filename.
  * Undoing a cutting operation will restore an anchor that was
    located in the cut area to its original line.
  * When using --locking, saving a new buffer will create a lock
    file.
  * Syntax highlighting for YAML files has been added</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1639656000">- GNU nano 6.0:
  * Option --zero hides the interface and uses the whole terminal
    for editing
  * Colors can be given also in #rgb hexadecimal, to select the
    nearest color from the 6x6x6 color-cube palette available on
    256-color terminals
  * Fourteen new color names are available, from rosy to crimson</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1644494400">- GNU nano 6.1:
  * The behavior of ^K at a prompt has been enhanced: when there
    is text after the cursor, just this text is erased
  * At a prompt, M-6 copies the current answer into the cutbuffer
  * Large external pastes into nano are handled more quickly</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1645185600">- GNU nano 6.2
  * The file browser clears the prompt bar also when using
  - -minibar
  * Linting now works also with a newer 'pyflakes'</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1651233600">- Update to version 6.3:
  * For multiline regexes, text is now colored as soon a start
    match is found, also when there is no end match at all.
  * The colorizing of any line is stopped after two thousand bytes
    to avoid frustrating delays.
  * When environment variable NO_COLOR is set, the two default
    colors (yellow for the spotlight, red for error messages) are
    suppressed when no interface colors are specified in a nanorc
    file.
  * Full justification and piping the whole buffer through a
    command now keep the cursor at the same line number.
  * Utility 'xsel' can be used to copy a marked region to the
    system's clipboard.  See doc/sample.nanorc for an example.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1658750400">- Added obs-channel-and-patchinfo-syntax.patch to support syntax
  highlighting for _channel and _patchinfo files used by OBS</changelog>
</package>
<package pkgid="570763b2c5d780eb1bb90c8319fc9d653e384e3f73dd3985db6761d3aa113e5f" name="neomutt" arch="aarch64">
  <version epoch="0" ver="20220429" rel="bp154.2.3.1"/>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1574942400">- Update to 20191111:
  Bug fixes:
  * browser: fix directory view
  * fix crash in mutt_extract_token()
  * force a screen refresh
  * fix crash sending message from command line
  * notmuch: use nm_default_uri if no mailbox data
  * fix forward attachments
  * fix: vfprintf undefined behaviour in body_handler
  * Fix relative symlink resolution
  * fix: trash to non-existent file/dir
  * fix re-opening of mbox Mailboxes
  * close logging as late as possible
  * log unknown mailboxes
  * fix crash in command line postpone
  * fix memory leaks
  * fix icommand parsing
  * fix new mail interaction with mail_check_recent</changelog>
  <changelog author="Martin Rey &lt;mrey@suse.com&gt;" date="1580472000">- Update to 20191207:
  * Features:
  - compose: draw status bar with highlights
  * Bug Fixes:
  - crash opening notmuch mailbox
  - crash in mutt_autocrypt_ui_recommendation
  - Avoid negative allocation
  - Mbox new mail
  - Setting of DT_MAILBOX type variables from Lua
  - imap: empty cmdbuf before connecting
  - imap: select the mailbox on reconnect
  - compose: fix attach message
  * Build:
  - make files conditional
  * Code:
  - enum-ify log levels
  - fix function prototypes
  - refactor virtual email lookups
  - factor out global Context
- Changes from 20191129:
  * Features:
  - Add raw mailsize expando (%cr)
  * Bug Fixes:
  - Avoid double question marks in bounce confirmation msg
  - Fix bounce confirmation
  - fix new-mail flags and behaviour
  - fix: browser &lt;descend-directory&gt;
  - fix ssl crash
  - fix move to trash
  - fix flickering
  - Do not check hidden mailboxes for new mail
  - Fix new_mail_command notifications
  - fix crash in examine_mailboxes()
  - fix crash in mutt_sort_threads()
  - fix: crash after sending
  - Fix crash in tunnel's conn_close
  - fix fcc for deep dirs
  - imap: fix crash when new mail arrives
  - fix colour 'quoted9'
  - quieten messages on exit
  - fix: crash after failed mbox_check
  - browser: default to a file/dir view when attaching a file
  * Changed Config:
  - Change $write_bcc to default off
  * Docs:
  - Add a bit more documentation about sending
  - Clarify $write_bcc documentation.
  - Update documentation for raw size expando
  - docbook: set generate.consistent.ids to make generated html
    reproducible
  * Build:
  - fix build/tests for 32-bit arches
  - tests: fix test that would fail soon
  - tests: fix context for failing idna tests</changelog>
  <changelog author="Martin Rey &lt;mrey@suse.com&gt;" date="1584100800">- Update to 20200313:
  * Window layout
  - Sidebar is only visible when it's usable.
  * Features
  - UI: add number of old messages to sidebar_format
  - UI: support ISO 8601 calendar date
  - UI: fix commands that don?t need to have a non-empty mailbox
    to be valid
  - PGP: inform about successful decryption of inline PGP
    messages
  - PGP: try to infer the signing key from the From address
  - PGP: enable GPGMe by default
  - Notmuch: use query as name for vfolder-from-query
  - IMAP: add network traffic compression
    (COMPRESS=DEFLATE, RFC4978)
  - Header cache: add support for generic header cache
    compression
  * Bug Fixes
  - Fix uncollapse_jump
  - Only try to perform entire-thread on maildir/mh mailboxes
  - Fix crash in pager
  - Avoid logging single new lines at the end of header fields
  - Fix listing mailboxes
  - Do not recurse a non-threaded message
  - Fix initial window order
  - Fix leaks on IMAP error paths
  - Notmuch: compose(attach-message): support notmuch backend
  - Fix IMAP flag comparison code
  - Fix $move for IMAP mailboxes
  - Maildir: maildir_mbox_check_stats should only update mailbox
    stats if requested
  - Fix unmailboxes for virtual mailboxes
  - Maildir: sanitize filename before hashing
  - OAuth: if 'login' name isn't available use 'user'
  - Add error message on failed encryption
  - Fix a bunch of crashes
  - Force C locale for email date
  - Abort if run without a terminal
  * Changed Config
  - $crypt_use_gpgme - Now defaults to 'yes' (enabled)
  - $abort_backspace - Hitting backspace against an empty prompt
    aborts the prompt
  - $abort_key - String representation of key to abort prompts
  - $arrow_string - Use an custom string for arrow_cursor
  - $crypt_opportunistic_encrypt_strong_keys - Enable encryption
    only when strong a key is available
  - $header_cache_compress_dictionary - Filepath to dictionary
    for zstd compression
  - $header_cache_compress_level - Level of compression for
    method
  - $header_cache_compress_method - Enable generic hcache
    database compression
  - $imap_deflate - Compress network traffic
  - $smtp_user - Username for the SMTP server
  * Translations
  - 100% Lithuanian
  - 81% Spanish
  - 78% Russian
  * Build
  - Add libdebug
  - Rename public headers to lib.h
  - Create libcompress for compressed folders code
  * Code
  - Refactor Windows and Dialogs
  - Lots of code tidying
  - Refactor: mutt_addrlist_{search,write}
  - Lots of improvements to the Config code
  - Use Buffers more pervasively
  - Unify API function naming
  - Rename library shared headers
  - Refactor libconn gui dependencies
  - Refactor: init.[ch]
  - Refactor config to use subsets
  - Config: add path type
  - Remove backend deps from the connection code
  * Upstream
  - Allow ~b ~B ~h patterns in send2-hook
  - Rename smime oppenc mode parameter to get_keys_by_addr()
  - Add $crypt_opportunistic_encrypt_strong_keys config var
  - Fix crash when polling a closed ssl connection
  - Turn off auto-clear outside of autocrypt initialization
  - Add protected-headers="v1" to Content-Type when protecting
    headers
  - Fix segv in IMAP postponed menu caused by reopen_allow
  - Adding ISO 8601 calendar date
  - Fix $fcc_attach to not prompt in batch mode
  - Convert remaining mutt_encode_path() call to use struct
    Buffer
  - Fix rendering of replacement_char when Charset_is_utf8
  - Update to latest acutest.h</changelog>
  <changelog author="Martin Rey &lt;mrey@suse.com&gt;" date="1584705600">- Update to 20200320:
  * Bug Fixes
  - Fix COLUMNS env var
  - Fix sync after delete
  - Fix crash in notmuch
  - Fix sidebar indent
  - Fix emptying trash
  - Fix command line sending
  - Fix reading large address lists
  - Resolve symlinks only when necessary
  * Translations
  - lithuania 100% Lithuanian
  - es 96% Spanish
  * Docs
  - Include OpenSSL/LibreSSL/GnuTLS version in neomutt -v output
  - Fix case of GPGME and SQLite
  * Build
  - Create libcompress (lz4, zlib, zstd)
  - Create libhistory
  - Create libbcache
  - Move zstrm to libconn
  * Code
  - Add more test coverage
  - Rename magic to type
  - Use mutt_file_fopen() on config variables
  - Change commands to use intptr_t for data</changelog>
  <changelog author="Kai Liu &lt;kai.liu@suse.com&gt;" date="1590148800">- Update to 20200501:
  * Bug Fixes
  - Make sure buffers are initialized on error
  - fix(sidebar): use abbreviated path if possible
  * Translations
  - 100% Lithuanian
  * Docs
  - make header cache config more explicit
- Changes from 20200424:
  * Bug Fixes
  - Fix history corruption
  - Handle pretty much anything in a URL query part
  - Correctly parse escaped characters in header phrases
  - Fix crash reading received header
  - Fix sidebar indentation
  - Avoid crashing on failure to parse an IMAP mailbox
  - Maildir: handle deleted emails correctly
  - Ensure OP_NULL is always first
  * Translations
  - 100% Czech
  * Build
  - cirrus: enable pcre2, make pkgconf a special case
  - Fix finding pcre2 w/o pkgconf
  - build: tdb.h needs size_t, bring it in with stddef.h
- Changes from 20200417:
  * Features
  - Fluid layout for Compose Screen, see: vimeo.com/407231157
  - Trivial Database (TDB) header cache backend
  - RocksDB header cache backend
  - Add &lt;sidebar-first&gt; and &lt;sidebar-last&gt; functions
  * Bug Fixes
  - add error for CLI empty emails
  - Allow spaces and square brackets in paths
  - browser: fix hidden mailboxes
  - fix initial email display
  - notmuch: fix time window search.
  - fix resize bugs
  - notmuch: fix entire-thread: update current email pointer
  - sidebar: support indenting and shortening of names
  - Handle variables inside backticks in sidebar_whitelist
  - browser: fix mask regex error reporting
  * Translations
  - 100% Lithuanian
  - 99% Chinese (simplified)
  * Build
  - Use regexes for common parsing tasks: urls, dates
  - Add configure option --pcre2 -- Enable PCRE2 regular expressions
  - Add configure option --tdb -- Use TDB for the header cache
  - Add configure option --rocksdb -- Use RocksDB for the header cache
  - Create libstore (key/value backends)
  - Update to latest autosetup
  - Update to latest acutest.h
  - Rename doc/ directory to docs/
  - make: fix location of .Po dependency files
  - Change libcompress to be more universal
  - Fix test fails on ?32
  - fix uidvalidity to unsigned 32-bit int
  * Code
  - Increase test coverage
  - Fix memory leaks
  - Fix null checks
  * Upstream
  - Buffer refactoring
  - Fix use-after-free in mutt_str_replace()
  - Clarify PGP Pseudo-header S&lt;id&gt; duration
  - Try to respect MUTT_QUIET for IMAP contexts too
  - Limit recurse depth when parsing mime messages</changelog>
  <changelog author="Kai Liu &lt;kai.liu@suse.com&gt;" date="1593950400">- Update to 20200626:
  * Bug Fixes
  - Avoid opening the same hcache file twice
  - Re-open Mailbox after folder-hook
  - Fix the matching of the spoolfile Mailbox
  - Fix link-thread to link all tagged emails
  * Changed Config
  - Add $tunnel_is_secure config, defaulting to true
  * Upstream
  - Don't check IMAP PREAUTH encryption if $tunnel is in use
  - Add recommendation to use $ssl_force_tls
- Changes from 20200501:
  * Security
  - Abort GnuTLS certificate check if a cert in the chain is rejected
    CVE-2020-14154 bsc#1172906
  - TLS: clear data after a starttls acknowledgement
    CVE-2020-14954 bsc#1173197
  - Prevent possible IMAP MITM via PREAUTH response
    CVE-2020-14093 bsc#1172935
  * Features
  - add config operations +=/-= for number,long
  - Address book has a comment field
  - Query menu has a comment field
  * Contrib
    sample.neomuttrc-starter: Do not echo prompted password
  * Bug Fixes
  - make "news://" and "nntp://" schemes interchangeable
  - Fix CRLF to LF conversion in base64 decoding
  - Double comma in query
  - compose: fix redraw after history
  - Crash inside empty query menu
  - mmdf: fix creating new mailbox
  - mh: fix creating new mailbox
  - mbox: error out when an mbox/mmdf is a pipe
  - Fix list-reply by correct parsing of List-Post headers
  - Decode references according to RFC2047
  - fix tagged message count
  - hcache: fix keylen not being considered when building the full key
  - sidebar: fix path comparison
  - Don't mess with the original pattern when running IMAP searches
  - Handle IMAP "NO" resps by issuing a msg instead of failing badly
  - imap: use the connection delimiter if provided
  - Memory leaks
  * Changed Config
  - $alias_format default changed to include %c comment
  - $query_format default changed to include %e extra info
  * Translations
  - 100% Lithuanian
  - 84% French
  - Log the translation in use
  * Docs
  - Add missing commands unbind, unmacro to man pages
  * Build
  - Check size of long using LONG_MAX instead of __WORDSIZE
  - Allow ./configure to not record cflags
  - fix out-of-tree build
  - Avoid locating gdbm symbols in qdbm library
  * Code
  - Refactor unsafe TAILQ returns
  - add window notifications
  - flip negative ifs
  - Update to latest acutest.h
  - test: add store tests
  - test: add compression tests
  - graphviz: email
  - make more opcode info available
  - refactor: main_change_folder()
  - refactor: mutt_mailbox_next()
  - refactor: generate_body()
  - compress: add {min,max}_level to ComprOps
  - emphasise empty loops: "// do nothing"
  - prex: convert is_from() to use regex
  - Refactor IMAP's search routines</changelog>
  <changelog author="Kai Liu &lt;kai.liu@suse.com&gt;" date="1597492800">- Update to 20200814:
  * Notes
  - Add one-liner docs to config items
    See: neomutt -O -Q smart_wrap
  - Remove the built-in editor
    A large unused and unusable feature
  * Security
  - Add mitigation against DoS from thousands of parts
    boo#1179113
  * Features
  - Allow index-style searching in postpone menu
  - Open NeoMutt using a mailbox name
  - Add cd command to change the current working directory
  - Add tab-completion menu for patterns
  - Allow renaming existing mailboxes
  - Check for missing attachments in alternative parts
  - Add one-liner docs to config items
  * Bug Fixes
  - Fix logic in checking an empty From address
  - Fix Imap crash in cmd_parse_expunge()
  - Fix setting attributes with S-Lang
  - Fix: redrawing of $pager_index_lines
  - Fix progress percentage for syncing large mboxes
  - Fix sidebar drawing in presence of indentation + named mailboxes
  - Fix retrieval of drafts when "postponed" is not in the mailboxes list
  - Do not add comments to address group terminators
  - Fix alias sorting for degenerate addresses
  - Fix attaching emails
  - Create directories for nonexistent file hcache case
  - Avoid creating mailboxes for failed subscribes
  - Fix crash if rejecting cert
  * Changed Config
  - Add $copy_decode_weed, $pipe_decode_weed, $print_decode_weed
  - Change default of $crypt_protected_headers_subject to "..."
  - Add default keybindings to history-up/down
  * Translations
  - 100% Czech
  - 100% Spanish
  * Build
  - Allow building against Lua 5.4
  - Fix when sqlite3.h is missing
  * Docs
  - Add a brief section on stty to the manual
  - Update section "Terminal Keybindings" in the manual
  - Clarify PGP Pseudo-header S&lt;id&gt; duration
  * Code
  - Clean up String API
  - Make the Sidebar more independent
  - De-centralise the Config Variables
  - Refactor dialogs
  - Refactor: Help Bar generation
  - Make more APIs Context-free
  - Adjust the edata use in Maildir and Notmuch
  - Window refactoring
  - Convert libsend to use Config functions
  - Refactor notifications to reduce noise
  - Convert Keymaps to use STAILQ
  - Track currently selected email by msgid
  - Config: no backing global variable
  - Add events for key binding
  * Upstream
  - Fix imap postponed mailbox use-after-free error
  - Speed up thread sort when many long threads exist
  - Fix ~v tagging when switching to non-threaded sorting
  - Add message/global to the list of known "message" types
  - Print progress meter when copying/saving tagged messages
  - Remove ansi formatting from autoview generated quoted replies
  - Change postpone mode to write Date header too
  - Unstuff format=flowed</changelog>
  <changelog author="Kai Liu &lt;kai.liu@suse.com&gt;" date="1597665600">- Enable --zlib configure option explicitely. In version 20200814 if
  it's not enabled header cache compression will not be turned on,
  unlike in previous versions which would turn it on when zlib is
  detected.</changelog>
  <changelog author="Kai Liu &lt;kai.liu@suse.com&gt;" date="1597752000">- Fix sidebar mailbox name display problem. Patch from the yet to
  be merge upstream commit:
  https://github.com/neomutt/neomutt/commit/a6f91bc9c890581cff189e143d86e656cab6d2dc</changelog>
  <changelog author="Kai Liu &lt;kai.liu@suse.com&gt;" date="1598184000">- Update to 20200821:
  * Bug Fixes
  - fix maildir flag generation
  - fix query notmuch if file is missing
  - notmuch: don't abort sync on error
  - fix type checking for send config variables
  * Changed Config
  - $sidebar_format - Use %D rather than %B for named mailboxes
  * Translations
  - 96% Lithuanian
  - 90% Polish
- add neomutt-sidebar-abbreviate-shorten-what-user-sees.patch
  * fix(sidebar): abbreviate/shorten what user sees</changelog>
  <changelog author="Kai Liu &lt;kai.liu@suse.com&gt;" date="1605960000">- Update to 20201120. Address boo#1179035, CVE-2020-28896.
  * Security
  - imap: close connection on all failures
  * Features
  - alias: add function to Alias/Query dialogs
  - config: add validators for {imap,smtp,pop}_authenticators
  - config: warn when signature file is missing or not readable
  - smtp: support for native SMTP LOGIN auth mech
  - notmuch: show originating folder in index
  * Bug Fixes
  - sidebar: prevent the divider colour bleeding out
  - sidebar: fix &lt;sidebar-{next,prev}-new&gt;
  - notmuch: fix query for current email
  - restore shutdown-hook functionality
  - crash in reply-to
  - user-after-free in folder-hook
  - fix some leaks
  - fix application of limits to modified mailboxes
  - write Date header when postponing
  * Translations
  - 100% Lithuanian
  - 100% Czech
  - 70% Turkish
  * Docs
  - Document that $sort_alias affects the query menu
  * Build
  - improve ASAN flags
  - add SASL and S/MIME to --everything
  - fix contrib (un)install
  * Code
  - my_hdr compose screen notifications
  - add contracts to the MXAPI
  - maildir refactoring
  - further reduce the use of global variables
  * Upstream
  - Add $count_alternatives to count attachments inside alternatives
- Changes from 20200925
  * Features
  - Compose: display user-defined headers
  - Address Book / Query: live sorting
  - Address Book / Query: patterns for searching
  - Config: Add '+=' and '-=' operators for String Lists
  - Config: Add '+=' operator for Strings
  - Allow postfix query ':setenv NAME?' for env vars
  * Bug Fixes
  - Fix crash when searching with invalid regexes
  - Compose: Prevent infinite loop of send2-hooks
  - Fix sidebar on new/removed mailboxes
  - Restore indentation for named mailboxes
  - Prevent half-parsing an alias
  - Remove folder creation prompt for POP path
  - Show error if $message_cachedir doesn't point to a valid directory
  - Fix tracking LastDir in case of IMAP paths with Unicode characters
  - Make sure all mail gets applied the index limit
  - Add warnings to -Q query CLI option
  - Fix index tracking functionality
  * Changed Config
  - Add $compose_show_user_headers (yes)
  * Translations
  - 100% Czech
  - 100% Lithuanian
  - Split up usage strings
  * Build
  - Run shellcheck on hcachever.sh
  - Add the Address Sanitizer
  - Move compose files to lib under compose/
  - Move address config into libaddress
  - Update to latest acutest - fixes a memory leak in the unit tests
  * Code
  - Implement ARRAY API
  - Deglobalised the Config Sort functions
  - Refactor the Sidebar to be Event-Driven
  - Refactor the Color Event
  - Refactor the Commands list
  - Make ctx_update_tables private
  - Reduce the scope/deps of some Validator functions
  - Use the Email's IMAP UID instead of an increasing number as index
  - debug: log window focus
- Removed neomutt-sidebar-abbreviate-shorten-what-user-sees.patch.
  No longer needed.
- Misc spec file cleanups.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1605960001">- add upstream signing key and validate source signature</changelog>
  <changelog author="Kai Liu &lt;kai.liu@suse.com&gt;" date="1606478400">- Update to version 20201127:
  * Bug Fixes
  - Fix crash when saving an alias
  * Translations
  - 70% Russian
  * Code
  - Remove redundant function call</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1615204800">- update to 20210205:
  * Features
  - Add &lt;skip-headers&gt; to skip past message headers in pager
  - Add &lt;view-pager&gt; function to attachment menu
  * Bug Fixes
  - Fix detection of mbox files with new mail
  - Fix crash on collapsed thread
  - Fix group-chat-reply
  - Clear the message window on resize
  - Do not crash on return from shell-exec if there's no open mailbox
  - Abort IMAP open if condstore/qresync updates fetch fails
  - Fix smtp crash on invalid $smtp_authenticators list
  - Fix pager dropped input on screen resize
  - Fix mime forwarding
  - Check config after hooks
  - Always recreate a mailbox after folder-hook
  * Translations
  - 88% Slovakian
  * Docs
  - Adjust doc to explicitly mention $count_alternative
  - Restore correct "$sort_re" documentation
  - Clarify pattern completion
  - Man pages: Clear up "-H" and "-O"
  * Build
  - Update to latest acutest
  - Update to latest autosetup
  - Make the location of /tmp configurable</changelog>
  <changelog author="lmb &lt;lmb@suse.com&gt;" date="1616673600">- build: Enable pcre2 for regex matching (bsc#1183989)
- Add libprce2-devel as build dependency</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1619265600">- stop owning directories provided by filesystem (bsc#1184787)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1641384000">- update to 20211029 (bsc#1185705, CVE-2021-32055):
  * Notmuch: support separate database and mail roots without .notmuch
  * fix notmuch crash on open failure
  * fix crypto crash handling pgp keys
  * fix ncrypt/pgp file_get_size return check
  * fix restore case-insensitive header sort
  * fix pager redrawing of long lines
  * fix notmuch: check database dir for xapian dir
  * fix notmuch: update index count after &lt;entire-thread&gt;
  * fix protect hash table against empty keys
  * fix prevent real_subj being set but empty
  * fix leak when saving fcc
  * fix leak after &lt;edit-or-view-raw-message&gt;
  * fix leak after trash to hidden mailbox
  * fix leak restoring postponed emails
  * fix new mail notifications
  * fix pattern compilation error for ( !&gt;(~P) )
  * fix menu display on window resize
  * Stop batch mode emails with no argument or recipients
  * Add sanitize call in print mailcap function
  * fix hdr_order to use the longest match
  * fix (un)setenv to not return an error with unset env vars
  * fix Imap sync when closing a mailbox
  * fix segfault on OpenBSD current
  * sidebar: restore sidebar_spoolfile colour
  * fix assert when displaying a file from the browser
  * fix exec command in compose
  * fix check_stats for Notmuch mailboxes
  * Fallback: Open Notmuch database without config
  * fix gui hook commands on startup
  * threads: implement the $use_threads feature
  * https://neomutt.org/feature/use-threads
  * hooks: allow a -noregex param to folder and mbox hooks
  * mailing lists: implement list-(un)subscribe using RFC2369 headers
  * mailcap: implement x-neomutt-nowrap flag
  * pager: add $local_date_header option
  * imap, smtp: add support for authenticating using XOAUTH2
  * Allow &lt;sync-mailbox&gt; to fail quietly
  * imap: speed up server-side searches
  * pager: improve skip-quoted and skip-headers
  * notmuch: open database with user's configuration
  * notmuch: implement &lt;vfolder-window-reset&gt;
  * config: allow += modification of my_ variables
  * notmuch: tolerate file renames behind neomutt's back
  * pager: implement $pager_read_delay
  * notmuch: validate nm_query_window_timebase
  * notmuch: make $nm_record work in non-notmuch mailboxes
  * compose: add $greeting - a welcome message on top of emails
  * notmuch: show additional mail in query windows
  * imap: fix crash on external IMAP events
  * notmuch: handle missing libnotmuch version bumps
  * imap: add sanity check for qresync
  * notmuch: allow windows with 0 duration
  * index: fix index selection on &lt;collapse-all&gt;
  * imap: fix crash when sync'ing labels
  * search: fix searching by Message-Id in &lt;mark-message&gt;
  * threads: fix double sorting of threads
  * stats: don't check mailbox stats unless told
  * alias: fix crash on empty query
  * pager: honor mid-message config changes
  * mailbox: don't propagate read-only state across reopens
  * hcache: fix caching new labels in the header cache
  * crypto: set invalidity flags for gpgme/smime keys
  * notmuch: fix parsing of multiple type=
  * notmuch: validate $nm_default_url
  * messages: avoid unnecessary opening of messages
  * imap: fix seqset iterator when it ends in a comma
  * build: refuse to build without pcre2 when pcre2 is linked in ncurses</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1649592000">- update to 20220408:
  * Compose multipart emails
  * Fix screen mode after attempting decryption
  * imap: increase max size of oauth2 token
  * Fix autocrypt
  * Unify Alias/Query workflow
  * Fix colours
  * Say which file exists when saving attachments
  * Force SMTP authentication if `smtp_user` is set
  * Fix selecting the right email after limiting
  * Make sure we have enough memory for a new email
  * Don't overwrite with zeroes after unlinking the file
  * Fix crash when forwarding attachments
  * Fix help reformatting on window resize
  * Fix poll to use PollFdsCount and not PollFdsLen
  * regex: range check arrays strictly
  * Fix Coverity defects
  * Fix out of bounds write with long log lines
  * Apply `fast_reply` to 'to', 'cc', or 'bcc'
  * Prevent warning on empty emails
  * New default: `set rfc2047_parameters = yes`
  * 100% German
  * 100% Lithuanian
  * 100% Serbian
  * 100% Czech
  * 100% Turkish
  * 72% Hungarian
  * Improve header cache explanation
  * Improve description of some notmuch variables
  * Explain how timezones and `!`s work inside `%{}`, `%[]` and `%()`
  * Document config synonyms and deprecations
  * Create lots of GitHub Actions
  * Drop TravisCI
  * Add automated Fuzzing tests
  * Add automated ASAN tests
  * Create Dockers for building Centos/Fedora
  * Build fixes for Solaris 10
  * New libraries: browser, enter, envelope
  * New configure options: `--fuzzing` `--debug-color` `--debug-queue`
  * Split Index/Pager GUIs/functions
  * Add lots of function dispatchers
  * Eliminate `menu_loop()`
  * Refactor function opcodes
  * Refactor cursor setting
  * Unify Alias/Query functions
  * Refactor Compose/Envelope functions
  * Modernise the Colour handling
  * Refactor the Attachment View
  * Eliminate the global `Context`
  * Upgrade `mutt_get_field()`
  * Refactor the `color quoted` code
  * Fix lots of memory leaks
  * Refactor Index resolve code
  * Refactor PatternList parsing
  * Refactor Mailbox freeing
  * Improve key mapping
  * Factor out charset hooks
  * Expose mutt_file_seek API
  * Improve API of `strto*` wrappers
  * imap QRESYNC fixes
  * Allow an empty To: address prompt
  * Fix argc==0 handling
  * Don't queue IMAP close commands
  * Fix IMAP UTF-7 for code points &gt;= U+10000
  * Don't include inactive messages in msgset generation</changelog>
  <changelog author="Lars Marowsky-Bree &lt;lmb@suse.com&gt;" date="1653480000">- update to 20220429:
  * Bug Fixes
  * Do not crash on an invalid use_threads/sort combination
  * Fix: stuck browser cursor
  * Resolve (move) the cursor after &lt;edit-label&gt;
  * Index: fix menu size on new mail
  * Don't overlimit LMDB mmap size
  * OpenBSD y/n translation fix
  * Generic: split out OP_EXIT binding
  * Fix parsing of sendmail cmd
  * Fix: crash with menu_move_off=no
  * Newsrc: bugfix; nntp_user and nntp_pass ignored
  * Menu: ensure config changes cause a repaint
  * Mbox: fix sync duplicates
  * Make sure the index redraws all that's needed
  * Translations
  * 100% Chinese (Simplified)
  * 100% Czech
  * 100% German
  * 100% Hungarian
  * 100% Lithuanian
  * 100% Serbian
  * 100% Turkish
  * Docs
  * add missing pattern modifier ~I for external_search_command
  * Code
  * menu: eliminate custom_redraw()
  * modernise mixmaster
  * Kill global and Propagate display attach status through State-
- update to 20220415:
  * Security
  * Fix uudecode buffer overflow (CVE-2022-1328)
  * Features
  * Colours, colours, colours
  * Bug Fixes
  * Pager: fix pager_stop
  * Merge colours with normal
  * Color: disable mono command
  * Fix forwarding text attachments when honor_disposition is set
  * Pager: drop the nntp change-group bindings
  * Use mailbox_check flags coherently, add IMMEDIATE flag
  * Fix: tagging in attachment list
  * Fix: misalignment of mini-index
  * Make sure to update the menu size after a resort
  * Translations
  * 100% Hungarian
  * Build
  * Update acutest
  * Code
  * Unify pipe functions
  * Index: notify if navigation fails
  * Gui: set colour to be merged with normal
  * Fix: leak in tls_check_one_certificate()
  * Upstream
  * Flush iconv() in mutt_convert_string()
  * Fix integer overflow in mutt_convert_string()
  * Fix uudecode cleanup on unexpected eof</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655208000">- fix build for older dists</changelog>
</package>
<package pkgid="f44bb9562901f9053331f340e6e6d79d0b5706cf64af5de0da040c288348c7df" name="neomutt" arch="ppc64le">
  <version epoch="0" ver="20220429" rel="bp154.2.3.1"/>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1574942400">- Update to 20191111:
  Bug fixes:
  * browser: fix directory view
  * fix crash in mutt_extract_token()
  * force a screen refresh
  * fix crash sending message from command line
  * notmuch: use nm_default_uri if no mailbox data
  * fix forward attachments
  * fix: vfprintf undefined behaviour in body_handler
  * Fix relative symlink resolution
  * fix: trash to non-existent file/dir
  * fix re-opening of mbox Mailboxes
  * close logging as late as possible
  * log unknown mailboxes
  * fix crash in command line postpone
  * fix memory leaks
  * fix icommand parsing
  * fix new mail interaction with mail_check_recent</changelog>
  <changelog author="Martin Rey &lt;mrey@suse.com&gt;" date="1580472000">- Update to 20191207:
  * Features:
  - compose: draw status bar with highlights
  * Bug Fixes:
  - crash opening notmuch mailbox
  - crash in mutt_autocrypt_ui_recommendation
  - Avoid negative allocation
  - Mbox new mail
  - Setting of DT_MAILBOX type variables from Lua
  - imap: empty cmdbuf before connecting
  - imap: select the mailbox on reconnect
  - compose: fix attach message
  * Build:
  - make files conditional
  * Code:
  - enum-ify log levels
  - fix function prototypes
  - refactor virtual email lookups
  - factor out global Context
- Changes from 20191129:
  * Features:
  - Add raw mailsize expando (%cr)
  * Bug Fixes:
  - Avoid double question marks in bounce confirmation msg
  - Fix bounce confirmation
  - fix new-mail flags and behaviour
  - fix: browser &lt;descend-directory&gt;
  - fix ssl crash
  - fix move to trash
  - fix flickering
  - Do not check hidden mailboxes for new mail
  - Fix new_mail_command notifications
  - fix crash in examine_mailboxes()
  - fix crash in mutt_sort_threads()
  - fix: crash after sending
  - Fix crash in tunnel's conn_close
  - fix fcc for deep dirs
  - imap: fix crash when new mail arrives
  - fix colour 'quoted9'
  - quieten messages on exit
  - fix: crash after failed mbox_check
  - browser: default to a file/dir view when attaching a file
  * Changed Config:
  - Change $write_bcc to default off
  * Docs:
  - Add a bit more documentation about sending
  - Clarify $write_bcc documentation.
  - Update documentation for raw size expando
  - docbook: set generate.consistent.ids to make generated html
    reproducible
  * Build:
  - fix build/tests for 32-bit arches
  - tests: fix test that would fail soon
  - tests: fix context for failing idna tests</changelog>
  <changelog author="Martin Rey &lt;mrey@suse.com&gt;" date="1584100800">- Update to 20200313:
  * Window layout
  - Sidebar is only visible when it's usable.
  * Features
  - UI: add number of old messages to sidebar_format
  - UI: support ISO 8601 calendar date
  - UI: fix commands that don?t need to have a non-empty mailbox
    to be valid
  - PGP: inform about successful decryption of inline PGP
    messages
  - PGP: try to infer the signing key from the From address
  - PGP: enable GPGMe by default
  - Notmuch: use query as name for vfolder-from-query
  - IMAP: add network traffic compression
    (COMPRESS=DEFLATE, RFC4978)
  - Header cache: add support for generic header cache
    compression
  * Bug Fixes
  - Fix uncollapse_jump
  - Only try to perform entire-thread on maildir/mh mailboxes
  - Fix crash in pager
  - Avoid logging single new lines at the end of header fields
  - Fix listing mailboxes
  - Do not recurse a non-threaded message
  - Fix initial window order
  - Fix leaks on IMAP error paths
  - Notmuch: compose(attach-message): support notmuch backend
  - Fix IMAP flag comparison code
  - Fix $move for IMAP mailboxes
  - Maildir: maildir_mbox_check_stats should only update mailbox
    stats if requested
  - Fix unmailboxes for virtual mailboxes
  - Maildir: sanitize filename before hashing
  - OAuth: if 'login' name isn't available use 'user'
  - Add error message on failed encryption
  - Fix a bunch of crashes
  - Force C locale for email date
  - Abort if run without a terminal
  * Changed Config
  - $crypt_use_gpgme - Now defaults to 'yes' (enabled)
  - $abort_backspace - Hitting backspace against an empty prompt
    aborts the prompt
  - $abort_key - String representation of key to abort prompts
  - $arrow_string - Use an custom string for arrow_cursor
  - $crypt_opportunistic_encrypt_strong_keys - Enable encryption
    only when strong a key is available
  - $header_cache_compress_dictionary - Filepath to dictionary
    for zstd compression
  - $header_cache_compress_level - Level of compression for
    method
  - $header_cache_compress_method - Enable generic hcache
    database compression
  - $imap_deflate - Compress network traffic
  - $smtp_user - Username for the SMTP server
  * Translations
  - 100% Lithuanian
  - 81% Spanish
  - 78% Russian
  * Build
  - Add libdebug
  - Rename public headers to lib.h
  - Create libcompress for compressed folders code
  * Code
  - Refactor Windows and Dialogs
  - Lots of code tidying
  - Refactor: mutt_addrlist_{search,write}
  - Lots of improvements to the Config code
  - Use Buffers more pervasively
  - Unify API function naming
  - Rename library shared headers
  - Refactor libconn gui dependencies
  - Refactor: init.[ch]
  - Refactor config to use subsets
  - Config: add path type
  - Remove backend deps from the connection code
  * Upstream
  - Allow ~b ~B ~h patterns in send2-hook
  - Rename smime oppenc mode parameter to get_keys_by_addr()
  - Add $crypt_opportunistic_encrypt_strong_keys config var
  - Fix crash when polling a closed ssl connection
  - Turn off auto-clear outside of autocrypt initialization
  - Add protected-headers="v1" to Content-Type when protecting
    headers
  - Fix segv in IMAP postponed menu caused by reopen_allow
  - Adding ISO 8601 calendar date
  - Fix $fcc_attach to not prompt in batch mode
  - Convert remaining mutt_encode_path() call to use struct
    Buffer
  - Fix rendering of replacement_char when Charset_is_utf8
  - Update to latest acutest.h</changelog>
  <changelog author="Martin Rey &lt;mrey@suse.com&gt;" date="1584705600">- Update to 20200320:
  * Bug Fixes
  - Fix COLUMNS env var
  - Fix sync after delete
  - Fix crash in notmuch
  - Fix sidebar indent
  - Fix emptying trash
  - Fix command line sending
  - Fix reading large address lists
  - Resolve symlinks only when necessary
  * Translations
  - lithuania 100% Lithuanian
  - es 96% Spanish
  * Docs
  - Include OpenSSL/LibreSSL/GnuTLS version in neomutt -v output
  - Fix case of GPGME and SQLite
  * Build
  - Create libcompress (lz4, zlib, zstd)
  - Create libhistory
  - Create libbcache
  - Move zstrm to libconn
  * Code
  - Add more test coverage
  - Rename magic to type
  - Use mutt_file_fopen() on config variables
  - Change commands to use intptr_t for data</changelog>
  <changelog author="Kai Liu &lt;kai.liu@suse.com&gt;" date="1590148800">- Update to 20200501:
  * Bug Fixes
  - Make sure buffers are initialized on error
  - fix(sidebar): use abbreviated path if possible
  * Translations
  - 100% Lithuanian
  * Docs
  - make header cache config more explicit
- Changes from 20200424:
  * Bug Fixes
  - Fix history corruption
  - Handle pretty much anything in a URL query part
  - Correctly parse escaped characters in header phrases
  - Fix crash reading received header
  - Fix sidebar indentation
  - Avoid crashing on failure to parse an IMAP mailbox
  - Maildir: handle deleted emails correctly
  - Ensure OP_NULL is always first
  * Translations
  - 100% Czech
  * Build
  - cirrus: enable pcre2, make pkgconf a special case
  - Fix finding pcre2 w/o pkgconf
  - build: tdb.h needs size_t, bring it in with stddef.h
- Changes from 20200417:
  * Features
  - Fluid layout for Compose Screen, see: vimeo.com/407231157
  - Trivial Database (TDB) header cache backend
  - RocksDB header cache backend
  - Add &lt;sidebar-first&gt; and &lt;sidebar-last&gt; functions
  * Bug Fixes
  - add error for CLI empty emails
  - Allow spaces and square brackets in paths
  - browser: fix hidden mailboxes
  - fix initial email display
  - notmuch: fix time window search.
  - fix resize bugs
  - notmuch: fix entire-thread: update current email pointer
  - sidebar: support indenting and shortening of names
  - Handle variables inside backticks in sidebar_whitelist
  - browser: fix mask regex error reporting
  * Translations
  - 100% Lithuanian
  - 99% Chinese (simplified)
  * Build
  - Use regexes for common parsing tasks: urls, dates
  - Add configure option --pcre2 -- Enable PCRE2 regular expressions
  - Add configure option --tdb -- Use TDB for the header cache
  - Add configure option --rocksdb -- Use RocksDB for the header cache
  - Create libstore (key/value backends)
  - Update to latest autosetup
  - Update to latest acutest.h
  - Rename doc/ directory to docs/
  - make: fix location of .Po dependency files
  - Change libcompress to be more universal
  - Fix test fails on ?32
  - fix uidvalidity to unsigned 32-bit int
  * Code
  - Increase test coverage
  - Fix memory leaks
  - Fix null checks
  * Upstream
  - Buffer refactoring
  - Fix use-after-free in mutt_str_replace()
  - Clarify PGP Pseudo-header S&lt;id&gt; duration
  - Try to respect MUTT_QUIET for IMAP contexts too
  - Limit recurse depth when parsing mime messages</changelog>
  <changelog author="Kai Liu &lt;kai.liu@suse.com&gt;" date="1593950400">- Update to 20200626:
  * Bug Fixes
  - Avoid opening the same hcache file twice
  - Re-open Mailbox after folder-hook
  - Fix the matching of the spoolfile Mailbox
  - Fix link-thread to link all tagged emails
  * Changed Config
  - Add $tunnel_is_secure config, defaulting to true
  * Upstream
  - Don't check IMAP PREAUTH encryption if $tunnel is in use
  - Add recommendation to use $ssl_force_tls
- Changes from 20200501:
  * Security
  - Abort GnuTLS certificate check if a cert in the chain is rejected
    CVE-2020-14154 bsc#1172906
  - TLS: clear data after a starttls acknowledgement
    CVE-2020-14954 bsc#1173197
  - Prevent possible IMAP MITM via PREAUTH response
    CVE-2020-14093 bsc#1172935
  * Features
  - add config operations +=/-= for number,long
  - Address book has a comment field
  - Query menu has a comment field
  * Contrib
    sample.neomuttrc-starter: Do not echo prompted password
  * Bug Fixes
  - make "news://" and "nntp://" schemes interchangeable
  - Fix CRLF to LF conversion in base64 decoding
  - Double comma in query
  - compose: fix redraw after history
  - Crash inside empty query menu
  - mmdf: fix creating new mailbox
  - mh: fix creating new mailbox
  - mbox: error out when an mbox/mmdf is a pipe
  - Fix list-reply by correct parsing of List-Post headers
  - Decode references according to RFC2047
  - fix tagged message count
  - hcache: fix keylen not being considered when building the full key
  - sidebar: fix path comparison
  - Don't mess with the original pattern when running IMAP searches
  - Handle IMAP "NO" resps by issuing a msg instead of failing badly
  - imap: use the connection delimiter if provided
  - Memory leaks
  * Changed Config
  - $alias_format default changed to include %c comment
  - $query_format default changed to include %e extra info
  * Translations
  - 100% Lithuanian
  - 84% French
  - Log the translation in use
  * Docs
  - Add missing commands unbind, unmacro to man pages
  * Build
  - Check size of long using LONG_MAX instead of __WORDSIZE
  - Allow ./configure to not record cflags
  - fix out-of-tree build
  - Avoid locating gdbm symbols in qdbm library
  * Code
  - Refactor unsafe TAILQ returns
  - add window notifications
  - flip negative ifs
  - Update to latest acutest.h
  - test: add store tests
  - test: add compression tests
  - graphviz: email
  - make more opcode info available
  - refactor: main_change_folder()
  - refactor: mutt_mailbox_next()
  - refactor: generate_body()
  - compress: add {min,max}_level to ComprOps
  - emphasise empty loops: "// do nothing"
  - prex: convert is_from() to use regex
  - Refactor IMAP's search routines</changelog>
  <changelog author="Kai Liu &lt;kai.liu@suse.com&gt;" date="1597492800">- Update to 20200814:
  * Notes
  - Add one-liner docs to config items
    See: neomutt -O -Q smart_wrap
  - Remove the built-in editor
    A large unused and unusable feature
  * Security
  - Add mitigation against DoS from thousands of parts
    boo#1179113
  * Features
  - Allow index-style searching in postpone menu
  - Open NeoMutt using a mailbox name
  - Add cd command to change the current working directory
  - Add tab-completion menu for patterns
  - Allow renaming existing mailboxes
  - Check for missing attachments in alternative parts
  - Add one-liner docs to config items
  * Bug Fixes
  - Fix logic in checking an empty From address
  - Fix Imap crash in cmd_parse_expunge()
  - Fix setting attributes with S-Lang
  - Fix: redrawing of $pager_index_lines
  - Fix progress percentage for syncing large mboxes
  - Fix sidebar drawing in presence of indentation + named mailboxes
  - Fix retrieval of drafts when "postponed" is not in the mailboxes list
  - Do not add comments to address group terminators
  - Fix alias sorting for degenerate addresses
  - Fix attaching emails
  - Create directories for nonexistent file hcache case
  - Avoid creating mailboxes for failed subscribes
  - Fix crash if rejecting cert
  * Changed Config
  - Add $copy_decode_weed, $pipe_decode_weed, $print_decode_weed
  - Change default of $crypt_protected_headers_subject to "..."
  - Add default keybindings to history-up/down
  * Translations
  - 100% Czech
  - 100% Spanish
  * Build
  - Allow building against Lua 5.4
  - Fix when sqlite3.h is missing
  * Docs
  - Add a brief section on stty to the manual
  - Update section "Terminal Keybindings" in the manual
  - Clarify PGP Pseudo-header S&lt;id&gt; duration
  * Code
  - Clean up String API
  - Make the Sidebar more independent
  - De-centralise the Config Variables
  - Refactor dialogs
  - Refactor: Help Bar generation
  - Make more APIs Context-free
  - Adjust the edata use in Maildir and Notmuch
  - Window refactoring
  - Convert libsend to use Config functions
  - Refactor notifications to reduce noise
  - Convert Keymaps to use STAILQ
  - Track currently selected email by msgid
  - Config: no backing global variable
  - Add events for key binding
  * Upstream
  - Fix imap postponed mailbox use-after-free error
  - Speed up thread sort when many long threads exist
  - Fix ~v tagging when switching to non-threaded sorting
  - Add message/global to the list of known "message" types
  - Print progress meter when copying/saving tagged messages
  - Remove ansi formatting from autoview generated quoted replies
  - Change postpone mode to write Date header too
  - Unstuff format=flowed</changelog>
  <changelog author="Kai Liu &lt;kai.liu@suse.com&gt;" date="1597665600">- Enable --zlib configure option explicitely. In version 20200814 if
  it's not enabled header cache compression will not be turned on,
  unlike in previous versions which would turn it on when zlib is
  detected.</changelog>
  <changelog author="Kai Liu &lt;kai.liu@suse.com&gt;" date="1597752000">- Fix sidebar mailbox name display problem. Patch from the yet to
  be merge upstream commit:
  https://github.com/neomutt/neomutt/commit/a6f91bc9c890581cff189e143d86e656cab6d2dc</changelog>
  <changelog author="Kai Liu &lt;kai.liu@suse.com&gt;" date="1598184000">- Update to 20200821:
  * Bug Fixes
  - fix maildir flag generation
  - fix query notmuch if file is missing
  - notmuch: don't abort sync on error
  - fix type checking for send config variables
  * Changed Config
  - $sidebar_format - Use %D rather than %B for named mailboxes
  * Translations
  - 96% Lithuanian
  - 90% Polish
- add neomutt-sidebar-abbreviate-shorten-what-user-sees.patch
  * fix(sidebar): abbreviate/shorten what user sees</changelog>
  <changelog author="Kai Liu &lt;kai.liu@suse.com&gt;" date="1605960000">- Update to 20201120. Address boo#1179035, CVE-2020-28896.
  * Security
  - imap: close connection on all failures
  * Features
  - alias: add function to Alias/Query dialogs
  - config: add validators for {imap,smtp,pop}_authenticators
  - config: warn when signature file is missing or not readable
  - smtp: support for native SMTP LOGIN auth mech
  - notmuch: show originating folder in index
  * Bug Fixes
  - sidebar: prevent the divider colour bleeding out
  - sidebar: fix &lt;sidebar-{next,prev}-new&gt;
  - notmuch: fix query for current email
  - restore shutdown-hook functionality
  - crash in reply-to
  - user-after-free in folder-hook
  - fix some leaks
  - fix application of limits to modified mailboxes
  - write Date header when postponing
  * Translations
  - 100% Lithuanian
  - 100% Czech
  - 70% Turkish
  * Docs
  - Document that $sort_alias affects the query menu
  * Build
  - improve ASAN flags
  - add SASL and S/MIME to --everything
  - fix contrib (un)install
  * Code
  - my_hdr compose screen notifications
  - add contracts to the MXAPI
  - maildir refactoring
  - further reduce the use of global variables
  * Upstream
  - Add $count_alternatives to count attachments inside alternatives
- Changes from 20200925
  * Features
  - Compose: display user-defined headers
  - Address Book / Query: live sorting
  - Address Book / Query: patterns for searching
  - Config: Add '+=' and '-=' operators for String Lists
  - Config: Add '+=' operator for Strings
  - Allow postfix query ':setenv NAME?' for env vars
  * Bug Fixes
  - Fix crash when searching with invalid regexes
  - Compose: Prevent infinite loop of send2-hooks
  - Fix sidebar on new/removed mailboxes
  - Restore indentation for named mailboxes
  - Prevent half-parsing an alias
  - Remove folder creation prompt for POP path
  - Show error if $message_cachedir doesn't point to a valid directory
  - Fix tracking LastDir in case of IMAP paths with Unicode characters
  - Make sure all mail gets applied the index limit
  - Add warnings to -Q query CLI option
  - Fix index tracking functionality
  * Changed Config
  - Add $compose_show_user_headers (yes)
  * Translations
  - 100% Czech
  - 100% Lithuanian
  - Split up usage strings
  * Build
  - Run shellcheck on hcachever.sh
  - Add the Address Sanitizer
  - Move compose files to lib under compose/
  - Move address config into libaddress
  - Update to latest acutest - fixes a memory leak in the unit tests
  * Code
  - Implement ARRAY API
  - Deglobalised the Config Sort functions
  - Refactor the Sidebar to be Event-Driven
  - Refactor the Color Event
  - Refactor the Commands list
  - Make ctx_update_tables private
  - Reduce the scope/deps of some Validator functions
  - Use the Email's IMAP UID instead of an increasing number as index
  - debug: log window focus
- Removed neomutt-sidebar-abbreviate-shorten-what-user-sees.patch.
  No longer needed.
- Misc spec file cleanups.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1605960001">- add upstream signing key and validate source signature</changelog>
  <changelog author="Kai Liu &lt;kai.liu@suse.com&gt;" date="1606478400">- Update to version 20201127:
  * Bug Fixes
  - Fix crash when saving an alias
  * Translations
  - 70% Russian
  * Code
  - Remove redundant function call</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1615204800">- update to 20210205:
  * Features
  - Add &lt;skip-headers&gt; to skip past message headers in pager
  - Add &lt;view-pager&gt; function to attachment menu
  * Bug Fixes
  - Fix detection of mbox files with new mail
  - Fix crash on collapsed thread
  - Fix group-chat-reply
  - Clear the message window on resize
  - Do not crash on return from shell-exec if there's no open mailbox
  - Abort IMAP open if condstore/qresync updates fetch fails
  - Fix smtp crash on invalid $smtp_authenticators list
  - Fix pager dropped input on screen resize
  - Fix mime forwarding
  - Check config after hooks
  - Always recreate a mailbox after folder-hook
  * Translations
  - 88% Slovakian
  * Docs
  - Adjust doc to explicitly mention $count_alternative
  - Restore correct "$sort_re" documentation
  - Clarify pattern completion
  - Man pages: Clear up "-H" and "-O"
  * Build
  - Update to latest acutest
  - Update to latest autosetup
  - Make the location of /tmp configurable</changelog>
  <changelog author="lmb &lt;lmb@suse.com&gt;" date="1616673600">- build: Enable pcre2 for regex matching (bsc#1183989)
- Add libprce2-devel as build dependency</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1619265600">- stop owning directories provided by filesystem (bsc#1184787)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1641384000">- update to 20211029 (bsc#1185705, CVE-2021-32055):
  * Notmuch: support separate database and mail roots without .notmuch
  * fix notmuch crash on open failure
  * fix crypto crash handling pgp keys
  * fix ncrypt/pgp file_get_size return check
  * fix restore case-insensitive header sort
  * fix pager redrawing of long lines
  * fix notmuch: check database dir for xapian dir
  * fix notmuch: update index count after &lt;entire-thread&gt;
  * fix protect hash table against empty keys
  * fix prevent real_subj being set but empty
  * fix leak when saving fcc
  * fix leak after &lt;edit-or-view-raw-message&gt;
  * fix leak after trash to hidden mailbox
  * fix leak restoring postponed emails
  * fix new mail notifications
  * fix pattern compilation error for ( !&gt;(~P) )
  * fix menu display on window resize
  * Stop batch mode emails with no argument or recipients
  * Add sanitize call in print mailcap function
  * fix hdr_order to use the longest match
  * fix (un)setenv to not return an error with unset env vars
  * fix Imap sync when closing a mailbox
  * fix segfault on OpenBSD current
  * sidebar: restore sidebar_spoolfile colour
  * fix assert when displaying a file from the browser
  * fix exec command in compose
  * fix check_stats for Notmuch mailboxes
  * Fallback: Open Notmuch database without config
  * fix gui hook commands on startup
  * threads: implement the $use_threads feature
  * https://neomutt.org/feature/use-threads
  * hooks: allow a -noregex param to folder and mbox hooks
  * mailing lists: implement list-(un)subscribe using RFC2369 headers
  * mailcap: implement x-neomutt-nowrap flag
  * pager: add $local_date_header option
  * imap, smtp: add support for authenticating using XOAUTH2
  * Allow &lt;sync-mailbox&gt; to fail quietly
  * imap: speed up server-side searches
  * pager: improve skip-quoted and skip-headers
  * notmuch: open database with user's configuration
  * notmuch: implement &lt;vfolder-window-reset&gt;
  * config: allow += modification of my_ variables
  * notmuch: tolerate file renames behind neomutt's back
  * pager: implement $pager_read_delay
  * notmuch: validate nm_query_window_timebase
  * notmuch: make $nm_record work in non-notmuch mailboxes
  * compose: add $greeting - a welcome message on top of emails
  * notmuch: show additional mail in query windows
  * imap: fix crash on external IMAP events
  * notmuch: handle missing libnotmuch version bumps
  * imap: add sanity check for qresync
  * notmuch: allow windows with 0 duration
  * index: fix index selection on &lt;collapse-all&gt;
  * imap: fix crash when sync'ing labels
  * search: fix searching by Message-Id in &lt;mark-message&gt;
  * threads: fix double sorting of threads
  * stats: don't check mailbox stats unless told
  * alias: fix crash on empty query
  * pager: honor mid-message config changes
  * mailbox: don't propagate read-only state across reopens
  * hcache: fix caching new labels in the header cache
  * crypto: set invalidity flags for gpgme/smime keys
  * notmuch: fix parsing of multiple type=
  * notmuch: validate $nm_default_url
  * messages: avoid unnecessary opening of messages
  * imap: fix seqset iterator when it ends in a comma
  * build: refuse to build without pcre2 when pcre2 is linked in ncurses</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1649592000">- update to 20220408:
  * Compose multipart emails
  * Fix screen mode after attempting decryption
  * imap: increase max size of oauth2 token
  * Fix autocrypt
  * Unify Alias/Query workflow
  * Fix colours
  * Say which file exists when saving attachments
  * Force SMTP authentication if `smtp_user` is set
  * Fix selecting the right email after limiting
  * Make sure we have enough memory for a new email
  * Don't overwrite with zeroes after unlinking the file
  * Fix crash when forwarding attachments
  * Fix help reformatting on window resize
  * Fix poll to use PollFdsCount and not PollFdsLen
  * regex: range check arrays strictly
  * Fix Coverity defects
  * Fix out of bounds write with long log lines
  * Apply `fast_reply` to 'to', 'cc', or 'bcc'
  * Prevent warning on empty emails
  * New default: `set rfc2047_parameters = yes`
  * 100% German
  * 100% Lithuanian
  * 100% Serbian
  * 100% Czech
  * 100% Turkish
  * 72% Hungarian
  * Improve header cache explanation
  * Improve description of some notmuch variables
  * Explain how timezones and `!`s work inside `%{}`, `%[]` and `%()`
  * Document config synonyms and deprecations
  * Create lots of GitHub Actions
  * Drop TravisCI
  * Add automated Fuzzing tests
  * Add automated ASAN tests
  * Create Dockers for building Centos/Fedora
  * Build fixes for Solaris 10
  * New libraries: browser, enter, envelope
  * New configure options: `--fuzzing` `--debug-color` `--debug-queue`
  * Split Index/Pager GUIs/functions
  * Add lots of function dispatchers
  * Eliminate `menu_loop()`
  * Refactor function opcodes
  * Refactor cursor setting
  * Unify Alias/Query functions
  * Refactor Compose/Envelope functions
  * Modernise the Colour handling
  * Refactor the Attachment View
  * Eliminate the global `Context`
  * Upgrade `mutt_get_field()`
  * Refactor the `color quoted` code
  * Fix lots of memory leaks
  * Refactor Index resolve code
  * Refactor PatternList parsing
  * Refactor Mailbox freeing
  * Improve key mapping
  * Factor out charset hooks
  * Expose mutt_file_seek API
  * Improve API of `strto*` wrappers
  * imap QRESYNC fixes
  * Allow an empty To: address prompt
  * Fix argc==0 handling
  * Don't queue IMAP close commands
  * Fix IMAP UTF-7 for code points &gt;= U+10000
  * Don't include inactive messages in msgset generation</changelog>
  <changelog author="Lars Marowsky-Bree &lt;lmb@suse.com&gt;" date="1653480000">- update to 20220429:
  * Bug Fixes
  * Do not crash on an invalid use_threads/sort combination
  * Fix: stuck browser cursor
  * Resolve (move) the cursor after &lt;edit-label&gt;
  * Index: fix menu size on new mail
  * Don't overlimit LMDB mmap size
  * OpenBSD y/n translation fix
  * Generic: split out OP_EXIT binding
  * Fix parsing of sendmail cmd
  * Fix: crash with menu_move_off=no
  * Newsrc: bugfix; nntp_user and nntp_pass ignored
  * Menu: ensure config changes cause a repaint
  * Mbox: fix sync duplicates
  * Make sure the index redraws all that's needed
  * Translations
  * 100% Chinese (Simplified)
  * 100% Czech
  * 100% German
  * 100% Hungarian
  * 100% Lithuanian
  * 100% Serbian
  * 100% Turkish
  * Docs
  * add missing pattern modifier ~I for external_search_command
  * Code
  * menu: eliminate custom_redraw()
  * modernise mixmaster
  * Kill global and Propagate display attach status through State-
- update to 20220415:
  * Security
  * Fix uudecode buffer overflow (CVE-2022-1328)
  * Features
  * Colours, colours, colours
  * Bug Fixes
  * Pager: fix pager_stop
  * Merge colours with normal
  * Color: disable mono command
  * Fix forwarding text attachments when honor_disposition is set
  * Pager: drop the nntp change-group bindings
  * Use mailbox_check flags coherently, add IMMEDIATE flag
  * Fix: tagging in attachment list
  * Fix: misalignment of mini-index
  * Make sure to update the menu size after a resort
  * Translations
  * 100% Hungarian
  * Build
  * Update acutest
  * Code
  * Unify pipe functions
  * Index: notify if navigation fails
  * Gui: set colour to be merged with normal
  * Fix: leak in tls_check_one_certificate()
  * Upstream
  * Flush iconv() in mutt_convert_string()
  * Fix integer overflow in mutt_convert_string()
  * Fix uudecode cleanup on unexpected eof</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655208000">- fix build for older dists</changelog>
</package>
<package pkgid="b2c5c10a1fe7457011f958e497292e30ea10b62026dacd3b4713ae41c33d98fe" name="neomutt" arch="s390x">
  <version epoch="0" ver="20220429" rel="bp154.2.3.1"/>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1574942400">- Update to 20191111:
  Bug fixes:
  * browser: fix directory view
  * fix crash in mutt_extract_token()
  * force a screen refresh
  * fix crash sending message from command line
  * notmuch: use nm_default_uri if no mailbox data
  * fix forward attachments
  * fix: vfprintf undefined behaviour in body_handler
  * Fix relative symlink resolution
  * fix: trash to non-existent file/dir
  * fix re-opening of mbox Mailboxes
  * close logging as late as possible
  * log unknown mailboxes
  * fix crash in command line postpone
  * fix memory leaks
  * fix icommand parsing
  * fix new mail interaction with mail_check_recent</changelog>
  <changelog author="Martin Rey &lt;mrey@suse.com&gt;" date="1580472000">- Update to 20191207:
  * Features:
  - compose: draw status bar with highlights
  * Bug Fixes:
  - crash opening notmuch mailbox
  - crash in mutt_autocrypt_ui_recommendation
  - Avoid negative allocation
  - Mbox new mail
  - Setting of DT_MAILBOX type variables from Lua
  - imap: empty cmdbuf before connecting
  - imap: select the mailbox on reconnect
  - compose: fix attach message
  * Build:
  - make files conditional
  * Code:
  - enum-ify log levels
  - fix function prototypes
  - refactor virtual email lookups
  - factor out global Context
- Changes from 20191129:
  * Features:
  - Add raw mailsize expando (%cr)
  * Bug Fixes:
  - Avoid double question marks in bounce confirmation msg
  - Fix bounce confirmation
  - fix new-mail flags and behaviour
  - fix: browser &lt;descend-directory&gt;
  - fix ssl crash
  - fix move to trash
  - fix flickering
  - Do not check hidden mailboxes for new mail
  - Fix new_mail_command notifications
  - fix crash in examine_mailboxes()
  - fix crash in mutt_sort_threads()
  - fix: crash after sending
  - Fix crash in tunnel's conn_close
  - fix fcc for deep dirs
  - imap: fix crash when new mail arrives
  - fix colour 'quoted9'
  - quieten messages on exit
  - fix: crash after failed mbox_check
  - browser: default to a file/dir view when attaching a file
  * Changed Config:
  - Change $write_bcc to default off
  * Docs:
  - Add a bit more documentation about sending
  - Clarify $write_bcc documentation.
  - Update documentation for raw size expando
  - docbook: set generate.consistent.ids to make generated html
    reproducible
  * Build:
  - fix build/tests for 32-bit arches
  - tests: fix test that would fail soon
  - tests: fix context for failing idna tests</changelog>
  <changelog author="Martin Rey &lt;mrey@suse.com&gt;" date="1584100800">- Update to 20200313:
  * Window layout
  - Sidebar is only visible when it's usable.
  * Features
  - UI: add number of old messages to sidebar_format
  - UI: support ISO 8601 calendar date
  - UI: fix commands that don?t need to have a non-empty mailbox
    to be valid
  - PGP: inform about successful decryption of inline PGP
    messages
  - PGP: try to infer the signing key from the From address
  - PGP: enable GPGMe by default
  - Notmuch: use query as name for vfolder-from-query
  - IMAP: add network traffic compression
    (COMPRESS=DEFLATE, RFC4978)
  - Header cache: add support for generic header cache
    compression
  * Bug Fixes
  - Fix uncollapse_jump
  - Only try to perform entire-thread on maildir/mh mailboxes
  - Fix crash in pager
  - Avoid logging single new lines at the end of header fields
  - Fix listing mailboxes
  - Do not recurse a non-threaded message
  - Fix initial window order
  - Fix leaks on IMAP error paths
  - Notmuch: compose(attach-message): support notmuch backend
  - Fix IMAP flag comparison code
  - Fix $move for IMAP mailboxes
  - Maildir: maildir_mbox_check_stats should only update mailbox
    stats if requested
  - Fix unmailboxes for virtual mailboxes
  - Maildir: sanitize filename before hashing
  - OAuth: if 'login' name isn't available use 'user'
  - Add error message on failed encryption
  - Fix a bunch of crashes
  - Force C locale for email date
  - Abort if run without a terminal
  * Changed Config
  - $crypt_use_gpgme - Now defaults to 'yes' (enabled)
  - $abort_backspace - Hitting backspace against an empty prompt
    aborts the prompt
  - $abort_key - String representation of key to abort prompts
  - $arrow_string - Use an custom string for arrow_cursor
  - $crypt_opportunistic_encrypt_strong_keys - Enable encryption
    only when strong a key is available
  - $header_cache_compress_dictionary - Filepath to dictionary
    for zstd compression
  - $header_cache_compress_level - Level of compression for
    method
  - $header_cache_compress_method - Enable generic hcache
    database compression
  - $imap_deflate - Compress network traffic
  - $smtp_user - Username for the SMTP server
  * Translations
  - 100% Lithuanian
  - 81% Spanish
  - 78% Russian
  * Build
  - Add libdebug
  - Rename public headers to lib.h
  - Create libcompress for compressed folders code
  * Code
  - Refactor Windows and Dialogs
  - Lots of code tidying
  - Refactor: mutt_addrlist_{search,write}
  - Lots of improvements to the Config code
  - Use Buffers more pervasively
  - Unify API function naming
  - Rename library shared headers
  - Refactor libconn gui dependencies
  - Refactor: init.[ch]
  - Refactor config to use subsets
  - Config: add path type
  - Remove backend deps from the connection code
  * Upstream
  - Allow ~b ~B ~h patterns in send2-hook
  - Rename smime oppenc mode parameter to get_keys_by_addr()
  - Add $crypt_opportunistic_encrypt_strong_keys config var
  - Fix crash when polling a closed ssl connection
  - Turn off auto-clear outside of autocrypt initialization
  - Add protected-headers="v1" to Content-Type when protecting
    headers
  - Fix segv in IMAP postponed menu caused by reopen_allow
  - Adding ISO 8601 calendar date
  - Fix $fcc_attach to not prompt in batch mode
  - Convert remaining mutt_encode_path() call to use struct
    Buffer
  - Fix rendering of replacement_char when Charset_is_utf8
  - Update to latest acutest.h</changelog>
  <changelog author="Martin Rey &lt;mrey@suse.com&gt;" date="1584705600">- Update to 20200320:
  * Bug Fixes
  - Fix COLUMNS env var
  - Fix sync after delete
  - Fix crash in notmuch
  - Fix sidebar indent
  - Fix emptying trash
  - Fix command line sending
  - Fix reading large address lists
  - Resolve symlinks only when necessary
  * Translations
  - lithuania 100% Lithuanian
  - es 96% Spanish
  * Docs
  - Include OpenSSL/LibreSSL/GnuTLS version in neomutt -v output
  - Fix case of GPGME and SQLite
  * Build
  - Create libcompress (lz4, zlib, zstd)
  - Create libhistory
  - Create libbcache
  - Move zstrm to libconn
  * Code
  - Add more test coverage
  - Rename magic to type
  - Use mutt_file_fopen() on config variables
  - Change commands to use intptr_t for data</changelog>
  <changelog author="Kai Liu &lt;kai.liu@suse.com&gt;" date="1590148800">- Update to 20200501:
  * Bug Fixes
  - Make sure buffers are initialized on error
  - fix(sidebar): use abbreviated path if possible
  * Translations
  - 100% Lithuanian
  * Docs
  - make header cache config more explicit
- Changes from 20200424:
  * Bug Fixes
  - Fix history corruption
  - Handle pretty much anything in a URL query part
  - Correctly parse escaped characters in header phrases
  - Fix crash reading received header
  - Fix sidebar indentation
  - Avoid crashing on failure to parse an IMAP mailbox
  - Maildir: handle deleted emails correctly
  - Ensure OP_NULL is always first
  * Translations
  - 100% Czech
  * Build
  - cirrus: enable pcre2, make pkgconf a special case
  - Fix finding pcre2 w/o pkgconf
  - build: tdb.h needs size_t, bring it in with stddef.h
- Changes from 20200417:
  * Features
  - Fluid layout for Compose Screen, see: vimeo.com/407231157
  - Trivial Database (TDB) header cache backend
  - RocksDB header cache backend
  - Add &lt;sidebar-first&gt; and &lt;sidebar-last&gt; functions
  * Bug Fixes
  - add error for CLI empty emails
  - Allow spaces and square brackets in paths
  - browser: fix hidden mailboxes
  - fix initial email display
  - notmuch: fix time window search.
  - fix resize bugs
  - notmuch: fix entire-thread: update current email pointer
  - sidebar: support indenting and shortening of names
  - Handle variables inside backticks in sidebar_whitelist
  - browser: fix mask regex error reporting
  * Translations
  - 100% Lithuanian
  - 99% Chinese (simplified)
  * Build
  - Use regexes for common parsing tasks: urls, dates
  - Add configure option --pcre2 -- Enable PCRE2 regular expressions
  - Add configure option --tdb -- Use TDB for the header cache
  - Add configure option --rocksdb -- Use RocksDB for the header cache
  - Create libstore (key/value backends)
  - Update to latest autosetup
  - Update to latest acutest.h
  - Rename doc/ directory to docs/
  - make: fix location of .Po dependency files
  - Change libcompress to be more universal
  - Fix test fails on ?32
  - fix uidvalidity to unsigned 32-bit int
  * Code
  - Increase test coverage
  - Fix memory leaks
  - Fix null checks
  * Upstream
  - Buffer refactoring
  - Fix use-after-free in mutt_str_replace()
  - Clarify PGP Pseudo-header S&lt;id&gt; duration
  - Try to respect MUTT_QUIET for IMAP contexts too
  - Limit recurse depth when parsing mime messages</changelog>
  <changelog author="Kai Liu &lt;kai.liu@suse.com&gt;" date="1593950400">- Update to 20200626:
  * Bug Fixes
  - Avoid opening the same hcache file twice
  - Re-open Mailbox after folder-hook
  - Fix the matching of the spoolfile Mailbox
  - Fix link-thread to link all tagged emails
  * Changed Config
  - Add $tunnel_is_secure config, defaulting to true
  * Upstream
  - Don't check IMAP PREAUTH encryption if $tunnel is in use
  - Add recommendation to use $ssl_force_tls
- Changes from 20200501:
  * Security
  - Abort GnuTLS certificate check if a cert in the chain is rejected
    CVE-2020-14154 bsc#1172906
  - TLS: clear data after a starttls acknowledgement
    CVE-2020-14954 bsc#1173197
  - Prevent possible IMAP MITM via PREAUTH response
    CVE-2020-14093 bsc#1172935
  * Features
  - add config operations +=/-= for number,long
  - Address book has a comment field
  - Query menu has a comment field
  * Contrib
    sample.neomuttrc-starter: Do not echo prompted password
  * Bug Fixes
  - make "news://" and "nntp://" schemes interchangeable
  - Fix CRLF to LF conversion in base64 decoding
  - Double comma in query
  - compose: fix redraw after history
  - Crash inside empty query menu
  - mmdf: fix creating new mailbox
  - mh: fix creating new mailbox
  - mbox: error out when an mbox/mmdf is a pipe
  - Fix list-reply by correct parsing of List-Post headers
  - Decode references according to RFC2047
  - fix tagged message count
  - hcache: fix keylen not being considered when building the full key
  - sidebar: fix path comparison
  - Don't mess with the original pattern when running IMAP searches
  - Handle IMAP "NO" resps by issuing a msg instead of failing badly
  - imap: use the connection delimiter if provided
  - Memory leaks
  * Changed Config
  - $alias_format default changed to include %c comment
  - $query_format default changed to include %e extra info
  * Translations
  - 100% Lithuanian
  - 84% French
  - Log the translation in use
  * Docs
  - Add missing commands unbind, unmacro to man pages
  * Build
  - Check size of long using LONG_MAX instead of __WORDSIZE
  - Allow ./configure to not record cflags
  - fix out-of-tree build
  - Avoid locating gdbm symbols in qdbm library
  * Code
  - Refactor unsafe TAILQ returns
  - add window notifications
  - flip negative ifs
  - Update to latest acutest.h
  - test: add store tests
  - test: add compression tests
  - graphviz: email
  - make more opcode info available
  - refactor: main_change_folder()
  - refactor: mutt_mailbox_next()
  - refactor: generate_body()
  - compress: add {min,max}_level to ComprOps
  - emphasise empty loops: "// do nothing"
  - prex: convert is_from() to use regex
  - Refactor IMAP's search routines</changelog>
  <changelog author="Kai Liu &lt;kai.liu@suse.com&gt;" date="1597492800">- Update to 20200814:
  * Notes
  - Add one-liner docs to config items
    See: neomutt -O -Q smart_wrap
  - Remove the built-in editor
    A large unused and unusable feature
  * Security
  - Add mitigation against DoS from thousands of parts
    boo#1179113
  * Features
  - Allow index-style searching in postpone menu
  - Open NeoMutt using a mailbox name
  - Add cd command to change the current working directory
  - Add tab-completion menu for patterns
  - Allow renaming existing mailboxes
  - Check for missing attachments in alternative parts
  - Add one-liner docs to config items
  * Bug Fixes
  - Fix logic in checking an empty From address
  - Fix Imap crash in cmd_parse_expunge()
  - Fix setting attributes with S-Lang
  - Fix: redrawing of $pager_index_lines
  - Fix progress percentage for syncing large mboxes
  - Fix sidebar drawing in presence of indentation + named mailboxes
  - Fix retrieval of drafts when "postponed" is not in the mailboxes list
  - Do not add comments to address group terminators
  - Fix alias sorting for degenerate addresses
  - Fix attaching emails
  - Create directories for nonexistent file hcache case
  - Avoid creating mailboxes for failed subscribes
  - Fix crash if rejecting cert
  * Changed Config
  - Add $copy_decode_weed, $pipe_decode_weed, $print_decode_weed
  - Change default of $crypt_protected_headers_subject to "..."
  - Add default keybindings to history-up/down
  * Translations
  - 100% Czech
  - 100% Spanish
  * Build
  - Allow building against Lua 5.4
  - Fix when sqlite3.h is missing
  * Docs
  - Add a brief section on stty to the manual
  - Update section "Terminal Keybindings" in the manual
  - Clarify PGP Pseudo-header S&lt;id&gt; duration
  * Code
  - Clean up String API
  - Make the Sidebar more independent
  - De-centralise the Config Variables
  - Refactor dialogs
  - Refactor: Help Bar generation
  - Make more APIs Context-free
  - Adjust the edata use in Maildir and Notmuch
  - Window refactoring
  - Convert libsend to use Config functions
  - Refactor notifications to reduce noise
  - Convert Keymaps to use STAILQ
  - Track currently selected email by msgid
  - Config: no backing global variable
  - Add events for key binding
  * Upstream
  - Fix imap postponed mailbox use-after-free error
  - Speed up thread sort when many long threads exist
  - Fix ~v tagging when switching to non-threaded sorting
  - Add message/global to the list of known "message" types
  - Print progress meter when copying/saving tagged messages
  - Remove ansi formatting from autoview generated quoted replies
  - Change postpone mode to write Date header too
  - Unstuff format=flowed</changelog>
  <changelog author="Kai Liu &lt;kai.liu@suse.com&gt;" date="1597665600">- Enable --zlib configure option explicitely. In version 20200814 if
  it's not enabled header cache compression will not be turned on,
  unlike in previous versions which would turn it on when zlib is
  detected.</changelog>
  <changelog author="Kai Liu &lt;kai.liu@suse.com&gt;" date="1597752000">- Fix sidebar mailbox name display problem. Patch from the yet to
  be merge upstream commit:
  https://github.com/neomutt/neomutt/commit/a6f91bc9c890581cff189e143d86e656cab6d2dc</changelog>
  <changelog author="Kai Liu &lt;kai.liu@suse.com&gt;" date="1598184000">- Update to 20200821:
  * Bug Fixes
  - fix maildir flag generation
  - fix query notmuch if file is missing
  - notmuch: don't abort sync on error
  - fix type checking for send config variables
  * Changed Config
  - $sidebar_format - Use %D rather than %B for named mailboxes
  * Translations
  - 96% Lithuanian
  - 90% Polish
- add neomutt-sidebar-abbreviate-shorten-what-user-sees.patch
  * fix(sidebar): abbreviate/shorten what user sees</changelog>
  <changelog author="Kai Liu &lt;kai.liu@suse.com&gt;" date="1605960000">- Update to 20201120. Address boo#1179035, CVE-2020-28896.
  * Security
  - imap: close connection on all failures
  * Features
  - alias: add function to Alias/Query dialogs
  - config: add validators for {imap,smtp,pop}_authenticators
  - config: warn when signature file is missing or not readable
  - smtp: support for native SMTP LOGIN auth mech
  - notmuch: show originating folder in index
  * Bug Fixes
  - sidebar: prevent the divider colour bleeding out
  - sidebar: fix &lt;sidebar-{next,prev}-new&gt;
  - notmuch: fix query for current email
  - restore shutdown-hook functionality
  - crash in reply-to
  - user-after-free in folder-hook
  - fix some leaks
  - fix application of limits to modified mailboxes
  - write Date header when postponing
  * Translations
  - 100% Lithuanian
  - 100% Czech
  - 70% Turkish
  * Docs
  - Document that $sort_alias affects the query menu
  * Build
  - improve ASAN flags
  - add SASL and S/MIME to --everything
  - fix contrib (un)install
  * Code
  - my_hdr compose screen notifications
  - add contracts to the MXAPI
  - maildir refactoring
  - further reduce the use of global variables
  * Upstream
  - Add $count_alternatives to count attachments inside alternatives
- Changes from 20200925
  * Features
  - Compose: display user-defined headers
  - Address Book / Query: live sorting
  - Address Book / Query: patterns for searching
  - Config: Add '+=' and '-=' operators for String Lists
  - Config: Add '+=' operator for Strings
  - Allow postfix query ':setenv NAME?' for env vars
  * Bug Fixes
  - Fix crash when searching with invalid regexes
  - Compose: Prevent infinite loop of send2-hooks
  - Fix sidebar on new/removed mailboxes
  - Restore indentation for named mailboxes
  - Prevent half-parsing an alias
  - Remove folder creation prompt for POP path
  - Show error if $message_cachedir doesn't point to a valid directory
  - Fix tracking LastDir in case of IMAP paths with Unicode characters
  - Make sure all mail gets applied the index limit
  - Add warnings to -Q query CLI option
  - Fix index tracking functionality
  * Changed Config
  - Add $compose_show_user_headers (yes)
  * Translations
  - 100% Czech
  - 100% Lithuanian
  - Split up usage strings
  * Build
  - Run shellcheck on hcachever.sh
  - Add the Address Sanitizer
  - Move compose files to lib under compose/
  - Move address config into libaddress
  - Update to latest acutest - fixes a memory leak in the unit tests
  * Code
  - Implement ARRAY API
  - Deglobalised the Config Sort functions
  - Refactor the Sidebar to be Event-Driven
  - Refactor the Color Event
  - Refactor the Commands list
  - Make ctx_update_tables private
  - Reduce the scope/deps of some Validator functions
  - Use the Email's IMAP UID instead of an increasing number as index
  - debug: log window focus
- Removed neomutt-sidebar-abbreviate-shorten-what-user-sees.patch.
  No longer needed.
- Misc spec file cleanups.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1605960001">- add upstream signing key and validate source signature</changelog>
  <changelog author="Kai Liu &lt;kai.liu@suse.com&gt;" date="1606478400">- Update to version 20201127:
  * Bug Fixes
  - Fix crash when saving an alias
  * Translations
  - 70% Russian
  * Code
  - Remove redundant function call</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1615204800">- update to 20210205:
  * Features
  - Add &lt;skip-headers&gt; to skip past message headers in pager
  - Add &lt;view-pager&gt; function to attachment menu
  * Bug Fixes
  - Fix detection of mbox files with new mail
  - Fix crash on collapsed thread
  - Fix group-chat-reply
  - Clear the message window on resize
  - Do not crash on return from shell-exec if there's no open mailbox
  - Abort IMAP open if condstore/qresync updates fetch fails
  - Fix smtp crash on invalid $smtp_authenticators list
  - Fix pager dropped input on screen resize
  - Fix mime forwarding
  - Check config after hooks
  - Always recreate a mailbox after folder-hook
  * Translations
  - 88% Slovakian
  * Docs
  - Adjust doc to explicitly mention $count_alternative
  - Restore correct "$sort_re" documentation
  - Clarify pattern completion
  - Man pages: Clear up "-H" and "-O"
  * Build
  - Update to latest acutest
  - Update to latest autosetup
  - Make the location of /tmp configurable</changelog>
  <changelog author="lmb &lt;lmb@suse.com&gt;" date="1616673600">- build: Enable pcre2 for regex matching (bsc#1183989)
- Add libprce2-devel as build dependency</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1619265600">- stop owning directories provided by filesystem (bsc#1184787)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1641384000">- update to 20211029 (bsc#1185705, CVE-2021-32055):
  * Notmuch: support separate database and mail roots without .notmuch
  * fix notmuch crash on open failure
  * fix crypto crash handling pgp keys
  * fix ncrypt/pgp file_get_size return check
  * fix restore case-insensitive header sort
  * fix pager redrawing of long lines
  * fix notmuch: check database dir for xapian dir
  * fix notmuch: update index count after &lt;entire-thread&gt;
  * fix protect hash table against empty keys
  * fix prevent real_subj being set but empty
  * fix leak when saving fcc
  * fix leak after &lt;edit-or-view-raw-message&gt;
  * fix leak after trash to hidden mailbox
  * fix leak restoring postponed emails
  * fix new mail notifications
  * fix pattern compilation error for ( !&gt;(~P) )
  * fix menu display on window resize
  * Stop batch mode emails with no argument or recipients
  * Add sanitize call in print mailcap function
  * fix hdr_order to use the longest match
  * fix (un)setenv to not return an error with unset env vars
  * fix Imap sync when closing a mailbox
  * fix segfault on OpenBSD current
  * sidebar: restore sidebar_spoolfile colour
  * fix assert when displaying a file from the browser
  * fix exec command in compose
  * fix check_stats for Notmuch mailboxes
  * Fallback: Open Notmuch database without config
  * fix gui hook commands on startup
  * threads: implement the $use_threads feature
  * https://neomutt.org/feature/use-threads
  * hooks: allow a -noregex param to folder and mbox hooks
  * mailing lists: implement list-(un)subscribe using RFC2369 headers
  * mailcap: implement x-neomutt-nowrap flag
  * pager: add $local_date_header option
  * imap, smtp: add support for authenticating using XOAUTH2
  * Allow &lt;sync-mailbox&gt; to fail quietly
  * imap: speed up server-side searches
  * pager: improve skip-quoted and skip-headers
  * notmuch: open database with user's configuration
  * notmuch: implement &lt;vfolder-window-reset&gt;
  * config: allow += modification of my_ variables
  * notmuch: tolerate file renames behind neomutt's back
  * pager: implement $pager_read_delay
  * notmuch: validate nm_query_window_timebase
  * notmuch: make $nm_record work in non-notmuch mailboxes
  * compose: add $greeting - a welcome message on top of emails
  * notmuch: show additional mail in query windows
  * imap: fix crash on external IMAP events
  * notmuch: handle missing libnotmuch version bumps
  * imap: add sanity check for qresync
  * notmuch: allow windows with 0 duration
  * index: fix index selection on &lt;collapse-all&gt;
  * imap: fix crash when sync'ing labels
  * search: fix searching by Message-Id in &lt;mark-message&gt;
  * threads: fix double sorting of threads
  * stats: don't check mailbox stats unless told
  * alias: fix crash on empty query
  * pager: honor mid-message config changes
  * mailbox: don't propagate read-only state across reopens
  * hcache: fix caching new labels in the header cache
  * crypto: set invalidity flags for gpgme/smime keys
  * notmuch: fix parsing of multiple type=
  * notmuch: validate $nm_default_url
  * messages: avoid unnecessary opening of messages
  * imap: fix seqset iterator when it ends in a comma
  * build: refuse to build without pcre2 when pcre2 is linked in ncurses</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1649592000">- update to 20220408:
  * Compose multipart emails
  * Fix screen mode after attempting decryption
  * imap: increase max size of oauth2 token
  * Fix autocrypt
  * Unify Alias/Query workflow
  * Fix colours
  * Say which file exists when saving attachments
  * Force SMTP authentication if `smtp_user` is set
  * Fix selecting the right email after limiting
  * Make sure we have enough memory for a new email
  * Don't overwrite with zeroes after unlinking the file
  * Fix crash when forwarding attachments
  * Fix help reformatting on window resize
  * Fix poll to use PollFdsCount and not PollFdsLen
  * regex: range check arrays strictly
  * Fix Coverity defects
  * Fix out of bounds write with long log lines
  * Apply `fast_reply` to 'to', 'cc', or 'bcc'
  * Prevent warning on empty emails
  * New default: `set rfc2047_parameters = yes`
  * 100% German
  * 100% Lithuanian
  * 100% Serbian
  * 100% Czech
  * 100% Turkish
  * 72% Hungarian
  * Improve header cache explanation
  * Improve description of some notmuch variables
  * Explain how timezones and `!`s work inside `%{}`, `%[]` and `%()`
  * Document config synonyms and deprecations
  * Create lots of GitHub Actions
  * Drop TravisCI
  * Add automated Fuzzing tests
  * Add automated ASAN tests
  * Create Dockers for building Centos/Fedora
  * Build fixes for Solaris 10
  * New libraries: browser, enter, envelope
  * New configure options: `--fuzzing` `--debug-color` `--debug-queue`
  * Split Index/Pager GUIs/functions
  * Add lots of function dispatchers
  * Eliminate `menu_loop()`
  * Refactor function opcodes
  * Refactor cursor setting
  * Unify Alias/Query functions
  * Refactor Compose/Envelope functions
  * Modernise the Colour handling
  * Refactor the Attachment View
  * Eliminate the global `Context`
  * Upgrade `mutt_get_field()`
  * Refactor the `color quoted` code
  * Fix lots of memory leaks
  * Refactor Index resolve code
  * Refactor PatternList parsing
  * Refactor Mailbox freeing
  * Improve key mapping
  * Factor out charset hooks
  * Expose mutt_file_seek API
  * Improve API of `strto*` wrappers
  * imap QRESYNC fixes
  * Allow an empty To: address prompt
  * Fix argc==0 handling
  * Don't queue IMAP close commands
  * Fix IMAP UTF-7 for code points &gt;= U+10000
  * Don't include inactive messages in msgset generation</changelog>
  <changelog author="Lars Marowsky-Bree &lt;lmb@suse.com&gt;" date="1653480000">- update to 20220429:
  * Bug Fixes
  * Do not crash on an invalid use_threads/sort combination
  * Fix: stuck browser cursor
  * Resolve (move) the cursor after &lt;edit-label&gt;
  * Index: fix menu size on new mail
  * Don't overlimit LMDB mmap size
  * OpenBSD y/n translation fix
  * Generic: split out OP_EXIT binding
  * Fix parsing of sendmail cmd
  * Fix: crash with menu_move_off=no
  * Newsrc: bugfix; nntp_user and nntp_pass ignored
  * Menu: ensure config changes cause a repaint
  * Mbox: fix sync duplicates
  * Make sure the index redraws all that's needed
  * Translations
  * 100% Chinese (Simplified)
  * 100% Czech
  * 100% German
  * 100% Hungarian
  * 100% Lithuanian
  * 100% Serbian
  * 100% Turkish
  * Docs
  * add missing pattern modifier ~I for external_search_command
  * Code
  * menu: eliminate custom_redraw()
  * modernise mixmaster
  * Kill global and Propagate display attach status through State-
- update to 20220415:
  * Security
  * Fix uudecode buffer overflow (CVE-2022-1328)
  * Features
  * Colours, colours, colours
  * Bug Fixes
  * Pager: fix pager_stop
  * Merge colours with normal
  * Color: disable mono command
  * Fix forwarding text attachments when honor_disposition is set
  * Pager: drop the nntp change-group bindings
  * Use mailbox_check flags coherently, add IMMEDIATE flag
  * Fix: tagging in attachment list
  * Fix: misalignment of mini-index
  * Make sure to update the menu size after a resort
  * Translations
  * 100% Hungarian
  * Build
  * Update acutest
  * Code
  * Unify pipe functions
  * Index: notify if navigation fails
  * Gui: set colour to be merged with normal
  * Fix: leak in tls_check_one_certificate()
  * Upstream
  * Flush iconv() in mutt_convert_string()
  * Fix integer overflow in mutt_convert_string()
  * Fix uudecode cleanup on unexpected eof</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655208000">- fix build for older dists</changelog>
</package>
<package pkgid="2b101a2b72c90a7fba704e9ede3b6c390ef2eb2df111ae080b6bdbb6b55f3063" name="neomutt" arch="src">
  <version epoch="0" ver="20220429" rel="bp154.2.3.1"/>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1574942400">- Update to 20191111:
  Bug fixes:
  * browser: fix directory view
  * fix crash in mutt_extract_token()
  * force a screen refresh
  * fix crash sending message from command line
  * notmuch: use nm_default_uri if no mailbox data
  * fix forward attachments
  * fix: vfprintf undefined behaviour in body_handler
  * Fix relative symlink resolution
  * fix: trash to non-existent file/dir
  * fix re-opening of mbox Mailboxes
  * close logging as late as possible
  * log unknown mailboxes
  * fix crash in command line postpone
  * fix memory leaks
  * fix icommand parsing
  * fix new mail interaction with mail_check_recent</changelog>
  <changelog author="Martin Rey &lt;mrey@suse.com&gt;" date="1580472000">- Update to 20191207:
  * Features:
  - compose: draw status bar with highlights
  * Bug Fixes:
  - crash opening notmuch mailbox
  - crash in mutt_autocrypt_ui_recommendation
  - Avoid negative allocation
  - Mbox new mail
  - Setting of DT_MAILBOX type variables from Lua
  - imap: empty cmdbuf before connecting
  - imap: select the mailbox on reconnect
  - compose: fix attach message
  * Build:
  - make files conditional
  * Code:
  - enum-ify log levels
  - fix function prototypes
  - refactor virtual email lookups
  - factor out global Context
- Changes from 20191129:
  * Features:
  - Add raw mailsize expando (%cr)
  * Bug Fixes:
  - Avoid double question marks in bounce confirmation msg
  - Fix bounce confirmation
  - fix new-mail flags and behaviour
  - fix: browser &lt;descend-directory&gt;
  - fix ssl crash
  - fix move to trash
  - fix flickering
  - Do not check hidden mailboxes for new mail
  - Fix new_mail_command notifications
  - fix crash in examine_mailboxes()
  - fix crash in mutt_sort_threads()
  - fix: crash after sending
  - Fix crash in tunnel's conn_close
  - fix fcc for deep dirs
  - imap: fix crash when new mail arrives
  - fix colour 'quoted9'
  - quieten messages on exit
  - fix: crash after failed mbox_check
  - browser: default to a file/dir view when attaching a file
  * Changed Config:
  - Change $write_bcc to default off
  * Docs:
  - Add a bit more documentation about sending
  - Clarify $write_bcc documentation.
  - Update documentation for raw size expando
  - docbook: set generate.consistent.ids to make generated html
    reproducible
  * Build:
  - fix build/tests for 32-bit arches
  - tests: fix test that would fail soon
  - tests: fix context for failing idna tests</changelog>
  <changelog author="Martin Rey &lt;mrey@suse.com&gt;" date="1584100800">- Update to 20200313:
  * Window layout
  - Sidebar is only visible when it's usable.
  * Features
  - UI: add number of old messages to sidebar_format
  - UI: support ISO 8601 calendar date
  - UI: fix commands that don?t need to have a non-empty mailbox
    to be valid
  - PGP: inform about successful decryption of inline PGP
    messages
  - PGP: try to infer the signing key from the From address
  - PGP: enable GPGMe by default
  - Notmuch: use query as name for vfolder-from-query
  - IMAP: add network traffic compression
    (COMPRESS=DEFLATE, RFC4978)
  - Header cache: add support for generic header cache
    compression
  * Bug Fixes
  - Fix uncollapse_jump
  - Only try to perform entire-thread on maildir/mh mailboxes
  - Fix crash in pager
  - Avoid logging single new lines at the end of header fields
  - Fix listing mailboxes
  - Do not recurse a non-threaded message
  - Fix initial window order
  - Fix leaks on IMAP error paths
  - Notmuch: compose(attach-message): support notmuch backend
  - Fix IMAP flag comparison code
  - Fix $move for IMAP mailboxes
  - Maildir: maildir_mbox_check_stats should only update mailbox
    stats if requested
  - Fix unmailboxes for virtual mailboxes
  - Maildir: sanitize filename before hashing
  - OAuth: if 'login' name isn't available use 'user'
  - Add error message on failed encryption
  - Fix a bunch of crashes
  - Force C locale for email date
  - Abort if run without a terminal
  * Changed Config
  - $crypt_use_gpgme - Now defaults to 'yes' (enabled)
  - $abort_backspace - Hitting backspace against an empty prompt
    aborts the prompt
  - $abort_key - String representation of key to abort prompts
  - $arrow_string - Use an custom string for arrow_cursor
  - $crypt_opportunistic_encrypt_strong_keys - Enable encryption
    only when strong a key is available
  - $header_cache_compress_dictionary - Filepath to dictionary
    for zstd compression
  - $header_cache_compress_level - Level of compression for
    method
  - $header_cache_compress_method - Enable generic hcache
    database compression
  - $imap_deflate - Compress network traffic
  - $smtp_user - Username for the SMTP server
  * Translations
  - 100% Lithuanian
  - 81% Spanish
  - 78% Russian
  * Build
  - Add libdebug
  - Rename public headers to lib.h
  - Create libcompress for compressed folders code
  * Code
  - Refactor Windows and Dialogs
  - Lots of code tidying
  - Refactor: mutt_addrlist_{search,write}
  - Lots of improvements to the Config code
  - Use Buffers more pervasively
  - Unify API function naming
  - Rename library shared headers
  - Refactor libconn gui dependencies
  - Refactor: init.[ch]
  - Refactor config to use subsets
  - Config: add path type
  - Remove backend deps from the connection code
  * Upstream
  - Allow ~b ~B ~h patterns in send2-hook
  - Rename smime oppenc mode parameter to get_keys_by_addr()
  - Add $crypt_opportunistic_encrypt_strong_keys config var
  - Fix crash when polling a closed ssl connection
  - Turn off auto-clear outside of autocrypt initialization
  - Add protected-headers="v1" to Content-Type when protecting
    headers
  - Fix segv in IMAP postponed menu caused by reopen_allow
  - Adding ISO 8601 calendar date
  - Fix $fcc_attach to not prompt in batch mode
  - Convert remaining mutt_encode_path() call to use struct
    Buffer
  - Fix rendering of replacement_char when Charset_is_utf8
  - Update to latest acutest.h</changelog>
  <changelog author="Martin Rey &lt;mrey@suse.com&gt;" date="1584705600">- Update to 20200320:
  * Bug Fixes
  - Fix COLUMNS env var
  - Fix sync after delete
  - Fix crash in notmuch
  - Fix sidebar indent
  - Fix emptying trash
  - Fix command line sending
  - Fix reading large address lists
  - Resolve symlinks only when necessary
  * Translations
  - lithuania 100% Lithuanian
  - es 96% Spanish
  * Docs
  - Include OpenSSL/LibreSSL/GnuTLS version in neomutt -v output
  - Fix case of GPGME and SQLite
  * Build
  - Create libcompress (lz4, zlib, zstd)
  - Create libhistory
  - Create libbcache
  - Move zstrm to libconn
  * Code
  - Add more test coverage
  - Rename magic to type
  - Use mutt_file_fopen() on config variables
  - Change commands to use intptr_t for data</changelog>
  <changelog author="Kai Liu &lt;kai.liu@suse.com&gt;" date="1590148800">- Update to 20200501:
  * Bug Fixes
  - Make sure buffers are initialized on error
  - fix(sidebar): use abbreviated path if possible
  * Translations
  - 100% Lithuanian
  * Docs
  - make header cache config more explicit
- Changes from 20200424:
  * Bug Fixes
  - Fix history corruption
  - Handle pretty much anything in a URL query part
  - Correctly parse escaped characters in header phrases
  - Fix crash reading received header
  - Fix sidebar indentation
  - Avoid crashing on failure to parse an IMAP mailbox
  - Maildir: handle deleted emails correctly
  - Ensure OP_NULL is always first
  * Translations
  - 100% Czech
  * Build
  - cirrus: enable pcre2, make pkgconf a special case
  - Fix finding pcre2 w/o pkgconf
  - build: tdb.h needs size_t, bring it in with stddef.h
- Changes from 20200417:
  * Features
  - Fluid layout for Compose Screen, see: vimeo.com/407231157
  - Trivial Database (TDB) header cache backend
  - RocksDB header cache backend
  - Add &lt;sidebar-first&gt; and &lt;sidebar-last&gt; functions
  * Bug Fixes
  - add error for CLI empty emails
  - Allow spaces and square brackets in paths
  - browser: fix hidden mailboxes
  - fix initial email display
  - notmuch: fix time window search.
  - fix resize bugs
  - notmuch: fix entire-thread: update current email pointer
  - sidebar: support indenting and shortening of names
  - Handle variables inside backticks in sidebar_whitelist
  - browser: fix mask regex error reporting
  * Translations
  - 100% Lithuanian
  - 99% Chinese (simplified)
  * Build
  - Use regexes for common parsing tasks: urls, dates
  - Add configure option --pcre2 -- Enable PCRE2 regular expressions
  - Add configure option --tdb -- Use TDB for the header cache
  - Add configure option --rocksdb -- Use RocksDB for the header cache
  - Create libstore (key/value backends)
  - Update to latest autosetup
  - Update to latest acutest.h
  - Rename doc/ directory to docs/
  - make: fix location of .Po dependency files
  - Change libcompress to be more universal
  - Fix test fails on ?32
  - fix uidvalidity to unsigned 32-bit int
  * Code
  - Increase test coverage
  - Fix memory leaks
  - Fix null checks
  * Upstream
  - Buffer refactoring
  - Fix use-after-free in mutt_str_replace()
  - Clarify PGP Pseudo-header S&lt;id&gt; duration
  - Try to respect MUTT_QUIET for IMAP contexts too
  - Limit recurse depth when parsing mime messages</changelog>
  <changelog author="Kai Liu &lt;kai.liu@suse.com&gt;" date="1593950400">- Update to 20200626:
  * Bug Fixes
  - Avoid opening the same hcache file twice
  - Re-open Mailbox after folder-hook
  - Fix the matching of the spoolfile Mailbox
  - Fix link-thread to link all tagged emails
  * Changed Config
  - Add $tunnel_is_secure config, defaulting to true
  * Upstream
  - Don't check IMAP PREAUTH encryption if $tunnel is in use
  - Add recommendation to use $ssl_force_tls
- Changes from 20200501:
  * Security
  - Abort GnuTLS certificate check if a cert in the chain is rejected
    CVE-2020-14154 bsc#1172906
  - TLS: clear data after a starttls acknowledgement
    CVE-2020-14954 bsc#1173197
  - Prevent possible IMAP MITM via PREAUTH response
    CVE-2020-14093 bsc#1172935
  * Features
  - add config operations +=/-= for number,long
  - Address book has a comment field
  - Query menu has a comment field
  * Contrib
    sample.neomuttrc-starter: Do not echo prompted password
  * Bug Fixes
  - make "news://" and "nntp://" schemes interchangeable
  - Fix CRLF to LF conversion in base64 decoding
  - Double comma in query
  - compose: fix redraw after history
  - Crash inside empty query menu
  - mmdf: fix creating new mailbox
  - mh: fix creating new mailbox
  - mbox: error out when an mbox/mmdf is a pipe
  - Fix list-reply by correct parsing of List-Post headers
  - Decode references according to RFC2047
  - fix tagged message count
  - hcache: fix keylen not being considered when building the full key
  - sidebar: fix path comparison
  - Don't mess with the original pattern when running IMAP searches
  - Handle IMAP "NO" resps by issuing a msg instead of failing badly
  - imap: use the connection delimiter if provided
  - Memory leaks
  * Changed Config
  - $alias_format default changed to include %c comment
  - $query_format default changed to include %e extra info
  * Translations
  - 100% Lithuanian
  - 84% French
  - Log the translation in use
  * Docs
  - Add missing commands unbind, unmacro to man pages
  * Build
  - Check size of long using LONG_MAX instead of __WORDSIZE
  - Allow ./configure to not record cflags
  - fix out-of-tree build
  - Avoid locating gdbm symbols in qdbm library
  * Code
  - Refactor unsafe TAILQ returns
  - add window notifications
  - flip negative ifs
  - Update to latest acutest.h
  - test: add store tests
  - test: add compression tests
  - graphviz: email
  - make more opcode info available
  - refactor: main_change_folder()
  - refactor: mutt_mailbox_next()
  - refactor: generate_body()
  - compress: add {min,max}_level to ComprOps
  - emphasise empty loops: "// do nothing"
  - prex: convert is_from() to use regex
  - Refactor IMAP's search routines</changelog>
  <changelog author="Kai Liu &lt;kai.liu@suse.com&gt;" date="1597492800">- Update to 20200814:
  * Notes
  - Add one-liner docs to config items
    See: neomutt -O -Q smart_wrap
  - Remove the built-in editor
    A large unused and unusable feature
  * Security
  - Add mitigation against DoS from thousands of parts
    boo#1179113
  * Features
  - Allow index-style searching in postpone menu
  - Open NeoMutt using a mailbox name
  - Add cd command to change the current working directory
  - Add tab-completion menu for patterns
  - Allow renaming existing mailboxes
  - Check for missing attachments in alternative parts
  - Add one-liner docs to config items
  * Bug Fixes
  - Fix logic in checking an empty From address
  - Fix Imap crash in cmd_parse_expunge()
  - Fix setting attributes with S-Lang
  - Fix: redrawing of $pager_index_lines
  - Fix progress percentage for syncing large mboxes
  - Fix sidebar drawing in presence of indentation + named mailboxes
  - Fix retrieval of drafts when "postponed" is not in the mailboxes list
  - Do not add comments to address group terminators
  - Fix alias sorting for degenerate addresses
  - Fix attaching emails
  - Create directories for nonexistent file hcache case
  - Avoid creating mailboxes for failed subscribes
  - Fix crash if rejecting cert
  * Changed Config
  - Add $copy_decode_weed, $pipe_decode_weed, $print_decode_weed
  - Change default of $crypt_protected_headers_subject to "..."
  - Add default keybindings to history-up/down
  * Translations
  - 100% Czech
  - 100% Spanish
  * Build
  - Allow building against Lua 5.4
  - Fix when sqlite3.h is missing
  * Docs
  - Add a brief section on stty to the manual
  - Update section "Terminal Keybindings" in the manual
  - Clarify PGP Pseudo-header S&lt;id&gt; duration
  * Code
  - Clean up String API
  - Make the Sidebar more independent
  - De-centralise the Config Variables
  - Refactor dialogs
  - Refactor: Help Bar generation
  - Make more APIs Context-free
  - Adjust the edata use in Maildir and Notmuch
  - Window refactoring
  - Convert libsend to use Config functions
  - Refactor notifications to reduce noise
  - Convert Keymaps to use STAILQ
  - Track currently selected email by msgid
  - Config: no backing global variable
  - Add events for key binding
  * Upstream
  - Fix imap postponed mailbox use-after-free error
  - Speed up thread sort when many long threads exist
  - Fix ~v tagging when switching to non-threaded sorting
  - Add message/global to the list of known "message" types
  - Print progress meter when copying/saving tagged messages
  - Remove ansi formatting from autoview generated quoted replies
  - Change postpone mode to write Date header too
  - Unstuff format=flowed</changelog>
  <changelog author="Kai Liu &lt;kai.liu@suse.com&gt;" date="1597665600">- Enable --zlib configure option explicitely. In version 20200814 if
  it's not enabled header cache compression will not be turned on,
  unlike in previous versions which would turn it on when zlib is
  detected.</changelog>
  <changelog author="Kai Liu &lt;kai.liu@suse.com&gt;" date="1597752000">- Fix sidebar mailbox name display problem. Patch from the yet to
  be merge upstream commit:
  https://github.com/neomutt/neomutt/commit/a6f91bc9c890581cff189e143d86e656cab6d2dc</changelog>
  <changelog author="Kai Liu &lt;kai.liu@suse.com&gt;" date="1598184000">- Update to 20200821:
  * Bug Fixes
  - fix maildir flag generation
  - fix query notmuch if file is missing
  - notmuch: don't abort sync on error
  - fix type checking for send config variables
  * Changed Config
  - $sidebar_format - Use %D rather than %B for named mailboxes
  * Translations
  - 96% Lithuanian
  - 90% Polish
- add neomutt-sidebar-abbreviate-shorten-what-user-sees.patch
  * fix(sidebar): abbreviate/shorten what user sees</changelog>
  <changelog author="Kai Liu &lt;kai.liu@suse.com&gt;" date="1605960000">- Update to 20201120. Address boo#1179035, CVE-2020-28896.
  * Security
  - imap: close connection on all failures
  * Features
  - alias: add function to Alias/Query dialogs
  - config: add validators for {imap,smtp,pop}_authenticators
  - config: warn when signature file is missing or not readable
  - smtp: support for native SMTP LOGIN auth mech
  - notmuch: show originating folder in index
  * Bug Fixes
  - sidebar: prevent the divider colour bleeding out
  - sidebar: fix &lt;sidebar-{next,prev}-new&gt;
  - notmuch: fix query for current email
  - restore shutdown-hook functionality
  - crash in reply-to
  - user-after-free in folder-hook
  - fix some leaks
  - fix application of limits to modified mailboxes
  - write Date header when postponing
  * Translations
  - 100% Lithuanian
  - 100% Czech
  - 70% Turkish
  * Docs
  - Document that $sort_alias affects the query menu
  * Build
  - improve ASAN flags
  - add SASL and S/MIME to --everything
  - fix contrib (un)install
  * Code
  - my_hdr compose screen notifications
  - add contracts to the MXAPI
  - maildir refactoring
  - further reduce the use of global variables
  * Upstream
  - Add $count_alternatives to count attachments inside alternatives
- Changes from 20200925
  * Features
  - Compose: display user-defined headers
  - Address Book / Query: live sorting
  - Address Book / Query: patterns for searching
  - Config: Add '+=' and '-=' operators for String Lists
  - Config: Add '+=' operator for Strings
  - Allow postfix query ':setenv NAME?' for env vars
  * Bug Fixes
  - Fix crash when searching with invalid regexes
  - Compose: Prevent infinite loop of send2-hooks
  - Fix sidebar on new/removed mailboxes
  - Restore indentation for named mailboxes
  - Prevent half-parsing an alias
  - Remove folder creation prompt for POP path
  - Show error if $message_cachedir doesn't point to a valid directory
  - Fix tracking LastDir in case of IMAP paths with Unicode characters
  - Make sure all mail gets applied the index limit
  - Add warnings to -Q query CLI option
  - Fix index tracking functionality
  * Changed Config
  - Add $compose_show_user_headers (yes)
  * Translations
  - 100% Czech
  - 100% Lithuanian
  - Split up usage strings
  * Build
  - Run shellcheck on hcachever.sh
  - Add the Address Sanitizer
  - Move compose files to lib under compose/
  - Move address config into libaddress
  - Update to latest acutest - fixes a memory leak in the unit tests
  * Code
  - Implement ARRAY API
  - Deglobalised the Config Sort functions
  - Refactor the Sidebar to be Event-Driven
  - Refactor the Color Event
  - Refactor the Commands list
  - Make ctx_update_tables private
  - Reduce the scope/deps of some Validator functions
  - Use the Email's IMAP UID instead of an increasing number as index
  - debug: log window focus
- Removed neomutt-sidebar-abbreviate-shorten-what-user-sees.patch.
  No longer needed.
- Misc spec file cleanups.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1605960001">- add upstream signing key and validate source signature</changelog>
  <changelog author="Kai Liu &lt;kai.liu@suse.com&gt;" date="1606478400">- Update to version 20201127:
  * Bug Fixes
  - Fix crash when saving an alias
  * Translations
  - 70% Russian
  * Code
  - Remove redundant function call</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1615204800">- update to 20210205:
  * Features
  - Add &lt;skip-headers&gt; to skip past message headers in pager
  - Add &lt;view-pager&gt; function to attachment menu
  * Bug Fixes
  - Fix detection of mbox files with new mail
  - Fix crash on collapsed thread
  - Fix group-chat-reply
  - Clear the message window on resize
  - Do not crash on return from shell-exec if there's no open mailbox
  - Abort IMAP open if condstore/qresync updates fetch fails
  - Fix smtp crash on invalid $smtp_authenticators list
  - Fix pager dropped input on screen resize
  - Fix mime forwarding
  - Check config after hooks
  - Always recreate a mailbox after folder-hook
  * Translations
  - 88% Slovakian
  * Docs
  - Adjust doc to explicitly mention $count_alternative
  - Restore correct "$sort_re" documentation
  - Clarify pattern completion
  - Man pages: Clear up "-H" and "-O"
  * Build
  - Update to latest acutest
  - Update to latest autosetup
  - Make the location of /tmp configurable</changelog>
  <changelog author="lmb &lt;lmb@suse.com&gt;" date="1616673600">- build: Enable pcre2 for regex matching (bsc#1183989)
- Add libprce2-devel as build dependency</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1619265600">- stop owning directories provided by filesystem (bsc#1184787)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1641384000">- update to 20211029 (bsc#1185705, CVE-2021-32055):
  * Notmuch: support separate database and mail roots without .notmuch
  * fix notmuch crash on open failure
  * fix crypto crash handling pgp keys
  * fix ncrypt/pgp file_get_size return check
  * fix restore case-insensitive header sort
  * fix pager redrawing of long lines
  * fix notmuch: check database dir for xapian dir
  * fix notmuch: update index count after &lt;entire-thread&gt;
  * fix protect hash table against empty keys
  * fix prevent real_subj being set but empty
  * fix leak when saving fcc
  * fix leak after &lt;edit-or-view-raw-message&gt;
  * fix leak after trash to hidden mailbox
  * fix leak restoring postponed emails
  * fix new mail notifications
  * fix pattern compilation error for ( !&gt;(~P) )
  * fix menu display on window resize
  * Stop batch mode emails with no argument or recipients
  * Add sanitize call in print mailcap function
  * fix hdr_order to use the longest match
  * fix (un)setenv to not return an error with unset env vars
  * fix Imap sync when closing a mailbox
  * fix segfault on OpenBSD current
  * sidebar: restore sidebar_spoolfile colour
  * fix assert when displaying a file from the browser
  * fix exec command in compose
  * fix check_stats for Notmuch mailboxes
  * Fallback: Open Notmuch database without config
  * fix gui hook commands on startup
  * threads: implement the $use_threads feature
  * https://neomutt.org/feature/use-threads
  * hooks: allow a -noregex param to folder and mbox hooks
  * mailing lists: implement list-(un)subscribe using RFC2369 headers
  * mailcap: implement x-neomutt-nowrap flag
  * pager: add $local_date_header option
  * imap, smtp: add support for authenticating using XOAUTH2
  * Allow &lt;sync-mailbox&gt; to fail quietly
  * imap: speed up server-side searches
  * pager: improve skip-quoted and skip-headers
  * notmuch: open database with user's configuration
  * notmuch: implement &lt;vfolder-window-reset&gt;
  * config: allow += modification of my_ variables
  * notmuch: tolerate file renames behind neomutt's back
  * pager: implement $pager_read_delay
  * notmuch: validate nm_query_window_timebase
  * notmuch: make $nm_record work in non-notmuch mailboxes
  * compose: add $greeting - a welcome message on top of emails
  * notmuch: show additional mail in query windows
  * imap: fix crash on external IMAP events
  * notmuch: handle missing libnotmuch version bumps
  * imap: add sanity check for qresync
  * notmuch: allow windows with 0 duration
  * index: fix index selection on &lt;collapse-all&gt;
  * imap: fix crash when sync'ing labels
  * search: fix searching by Message-Id in &lt;mark-message&gt;
  * threads: fix double sorting of threads
  * stats: don't check mailbox stats unless told
  * alias: fix crash on empty query
  * pager: honor mid-message config changes
  * mailbox: don't propagate read-only state across reopens
  * hcache: fix caching new labels in the header cache
  * crypto: set invalidity flags for gpgme/smime keys
  * notmuch: fix parsing of multiple type=
  * notmuch: validate $nm_default_url
  * messages: avoid unnecessary opening of messages
  * imap: fix seqset iterator when it ends in a comma
  * build: refuse to build without pcre2 when pcre2 is linked in ncurses</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1649592000">- update to 20220408:
  * Compose multipart emails
  * Fix screen mode after attempting decryption
  * imap: increase max size of oauth2 token
  * Fix autocrypt
  * Unify Alias/Query workflow
  * Fix colours
  * Say which file exists when saving attachments
  * Force SMTP authentication if `smtp_user` is set
  * Fix selecting the right email after limiting
  * Make sure we have enough memory for a new email
  * Don't overwrite with zeroes after unlinking the file
  * Fix crash when forwarding attachments
  * Fix help reformatting on window resize
  * Fix poll to use PollFdsCount and not PollFdsLen
  * regex: range check arrays strictly
  * Fix Coverity defects
  * Fix out of bounds write with long log lines
  * Apply `fast_reply` to 'to', 'cc', or 'bcc'
  * Prevent warning on empty emails
  * New default: `set rfc2047_parameters = yes`
  * 100% German
  * 100% Lithuanian
  * 100% Serbian
  * 100% Czech
  * 100% Turkish
  * 72% Hungarian
  * Improve header cache explanation
  * Improve description of some notmuch variables
  * Explain how timezones and `!`s work inside `%{}`, `%[]` and `%()`
  * Document config synonyms and deprecations
  * Create lots of GitHub Actions
  * Drop TravisCI
  * Add automated Fuzzing tests
  * Add automated ASAN tests
  * Create Dockers for building Centos/Fedora
  * Build fixes for Solaris 10
  * New libraries: browser, enter, envelope
  * New configure options: `--fuzzing` `--debug-color` `--debug-queue`
  * Split Index/Pager GUIs/functions
  * Add lots of function dispatchers
  * Eliminate `menu_loop()`
  * Refactor function opcodes
  * Refactor cursor setting
  * Unify Alias/Query functions
  * Refactor Compose/Envelope functions
  * Modernise the Colour handling
  * Refactor the Attachment View
  * Eliminate the global `Context`
  * Upgrade `mutt_get_field()`
  * Refactor the `color quoted` code
  * Fix lots of memory leaks
  * Refactor Index resolve code
  * Refactor PatternList parsing
  * Refactor Mailbox freeing
  * Improve key mapping
  * Factor out charset hooks
  * Expose mutt_file_seek API
  * Improve API of `strto*` wrappers
  * imap QRESYNC fixes
  * Allow an empty To: address prompt
  * Fix argc==0 handling
  * Don't queue IMAP close commands
  * Fix IMAP UTF-7 for code points &gt;= U+10000
  * Don't include inactive messages in msgset generation</changelog>
  <changelog author="Lars Marowsky-Bree &lt;lmb@suse.com&gt;" date="1653480000">- update to 20220429:
  * Bug Fixes
  * Do not crash on an invalid use_threads/sort combination
  * Fix: stuck browser cursor
  * Resolve (move) the cursor after &lt;edit-label&gt;
  * Index: fix menu size on new mail
  * Don't overlimit LMDB mmap size
  * OpenBSD y/n translation fix
  * Generic: split out OP_EXIT binding
  * Fix parsing of sendmail cmd
  * Fix: crash with menu_move_off=no
  * Newsrc: bugfix; nntp_user and nntp_pass ignored
  * Menu: ensure config changes cause a repaint
  * Mbox: fix sync duplicates
  * Make sure the index redraws all that's needed
  * Translations
  * 100% Chinese (Simplified)
  * 100% Czech
  * 100% German
  * 100% Hungarian
  * 100% Lithuanian
  * 100% Serbian
  * 100% Turkish
  * Docs
  * add missing pattern modifier ~I for external_search_command
  * Code
  * menu: eliminate custom_redraw()
  * modernise mixmaster
  * Kill global and Propagate display attach status through State-
- update to 20220415:
  * Security
  * Fix uudecode buffer overflow (CVE-2022-1328)
  * Features
  * Colours, colours, colours
  * Bug Fixes
  * Pager: fix pager_stop
  * Merge colours with normal
  * Color: disable mono command
  * Fix forwarding text attachments when honor_disposition is set
  * Pager: drop the nntp change-group bindings
  * Use mailbox_check flags coherently, add IMMEDIATE flag
  * Fix: tagging in attachment list
  * Fix: misalignment of mini-index
  * Make sure to update the menu size after a resort
  * Translations
  * 100% Hungarian
  * Build
  * Update acutest
  * Code
  * Unify pipe functions
  * Index: notify if navigation fails
  * Gui: set colour to be merged with normal
  * Fix: leak in tls_check_one_certificate()
  * Upstream
  * Flush iconv() in mutt_convert_string()
  * Fix integer overflow in mutt_convert_string()
  * Fix uudecode cleanup on unexpected eof</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655208000">- fix build for older dists</changelog>
</package>
<package pkgid="f92155ef33284f91ce8869f1456de6c82ac1daf2a0e18b305406f0d17385c510" name="neomutt" arch="x86_64">
  <version epoch="0" ver="20220429" rel="bp154.2.3.1"/>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1574942400">- Update to 20191111:
  Bug fixes:
  * browser: fix directory view
  * fix crash in mutt_extract_token()
  * force a screen refresh
  * fix crash sending message from command line
  * notmuch: use nm_default_uri if no mailbox data
  * fix forward attachments
  * fix: vfprintf undefined behaviour in body_handler
  * Fix relative symlink resolution
  * fix: trash to non-existent file/dir
  * fix re-opening of mbox Mailboxes
  * close logging as late as possible
  * log unknown mailboxes
  * fix crash in command line postpone
  * fix memory leaks
  * fix icommand parsing
  * fix new mail interaction with mail_check_recent</changelog>
  <changelog author="Martin Rey &lt;mrey@suse.com&gt;" date="1580472000">- Update to 20191207:
  * Features:
  - compose: draw status bar with highlights
  * Bug Fixes:
  - crash opening notmuch mailbox
  - crash in mutt_autocrypt_ui_recommendation
  - Avoid negative allocation
  - Mbox new mail
  - Setting of DT_MAILBOX type variables from Lua
  - imap: empty cmdbuf before connecting
  - imap: select the mailbox on reconnect
  - compose: fix attach message
  * Build:
  - make files conditional
  * Code:
  - enum-ify log levels
  - fix function prototypes
  - refactor virtual email lookups
  - factor out global Context
- Changes from 20191129:
  * Features:
  - Add raw mailsize expando (%cr)
  * Bug Fixes:
  - Avoid double question marks in bounce confirmation msg
  - Fix bounce confirmation
  - fix new-mail flags and behaviour
  - fix: browser &lt;descend-directory&gt;
  - fix ssl crash
  - fix move to trash
  - fix flickering
  - Do not check hidden mailboxes for new mail
  - Fix new_mail_command notifications
  - fix crash in examine_mailboxes()
  - fix crash in mutt_sort_threads()
  - fix: crash after sending
  - Fix crash in tunnel's conn_close
  - fix fcc for deep dirs
  - imap: fix crash when new mail arrives
  - fix colour 'quoted9'
  - quieten messages on exit
  - fix: crash after failed mbox_check
  - browser: default to a file/dir view when attaching a file
  * Changed Config:
  - Change $write_bcc to default off
  * Docs:
  - Add a bit more documentation about sending
  - Clarify $write_bcc documentation.
  - Update documentation for raw size expando
  - docbook: set generate.consistent.ids to make generated html
    reproducible
  * Build:
  - fix build/tests for 32-bit arches
  - tests: fix test that would fail soon
  - tests: fix context for failing idna tests</changelog>
  <changelog author="Martin Rey &lt;mrey@suse.com&gt;" date="1584100800">- Update to 20200313:
  * Window layout
  - Sidebar is only visible when it's usable.
  * Features
  - UI: add number of old messages to sidebar_format
  - UI: support ISO 8601 calendar date
  - UI: fix commands that don?t need to have a non-empty mailbox
    to be valid
  - PGP: inform about successful decryption of inline PGP
    messages
  - PGP: try to infer the signing key from the From address
  - PGP: enable GPGMe by default
  - Notmuch: use query as name for vfolder-from-query
  - IMAP: add network traffic compression
    (COMPRESS=DEFLATE, RFC4978)
  - Header cache: add support for generic header cache
    compression
  * Bug Fixes
  - Fix uncollapse_jump
  - Only try to perform entire-thread on maildir/mh mailboxes
  - Fix crash in pager
  - Avoid logging single new lines at the end of header fields
  - Fix listing mailboxes
  - Do not recurse a non-threaded message
  - Fix initial window order
  - Fix leaks on IMAP error paths
  - Notmuch: compose(attach-message): support notmuch backend
  - Fix IMAP flag comparison code
  - Fix $move for IMAP mailboxes
  - Maildir: maildir_mbox_check_stats should only update mailbox
    stats if requested
  - Fix unmailboxes for virtual mailboxes
  - Maildir: sanitize filename before hashing
  - OAuth: if 'login' name isn't available use 'user'
  - Add error message on failed encryption
  - Fix a bunch of crashes
  - Force C locale for email date
  - Abort if run without a terminal
  * Changed Config
  - $crypt_use_gpgme - Now defaults to 'yes' (enabled)
  - $abort_backspace - Hitting backspace against an empty prompt
    aborts the prompt
  - $abort_key - String representation of key to abort prompts
  - $arrow_string - Use an custom string for arrow_cursor
  - $crypt_opportunistic_encrypt_strong_keys - Enable encryption
    only when strong a key is available
  - $header_cache_compress_dictionary - Filepath to dictionary
    for zstd compression
  - $header_cache_compress_level - Level of compression for
    method
  - $header_cache_compress_method - Enable generic hcache
    database compression
  - $imap_deflate - Compress network traffic
  - $smtp_user - Username for the SMTP server
  * Translations
  - 100% Lithuanian
  - 81% Spanish
  - 78% Russian
  * Build
  - Add libdebug
  - Rename public headers to lib.h
  - Create libcompress for compressed folders code
  * Code
  - Refactor Windows and Dialogs
  - Lots of code tidying
  - Refactor: mutt_addrlist_{search,write}
  - Lots of improvements to the Config code
  - Use Buffers more pervasively
  - Unify API function naming
  - Rename library shared headers
  - Refactor libconn gui dependencies
  - Refactor: init.[ch]
  - Refactor config to use subsets
  - Config: add path type
  - Remove backend deps from the connection code
  * Upstream
  - Allow ~b ~B ~h patterns in send2-hook
  - Rename smime oppenc mode parameter to get_keys_by_addr()
  - Add $crypt_opportunistic_encrypt_strong_keys config var
  - Fix crash when polling a closed ssl connection
  - Turn off auto-clear outside of autocrypt initialization
  - Add protected-headers="v1" to Content-Type when protecting
    headers
  - Fix segv in IMAP postponed menu caused by reopen_allow
  - Adding ISO 8601 calendar date
  - Fix $fcc_attach to not prompt in batch mode
  - Convert remaining mutt_encode_path() call to use struct
    Buffer
  - Fix rendering of replacement_char when Charset_is_utf8
  - Update to latest acutest.h</changelog>
  <changelog author="Martin Rey &lt;mrey@suse.com&gt;" date="1584705600">- Update to 20200320:
  * Bug Fixes
  - Fix COLUMNS env var
  - Fix sync after delete
  - Fix crash in notmuch
  - Fix sidebar indent
  - Fix emptying trash
  - Fix command line sending
  - Fix reading large address lists
  - Resolve symlinks only when necessary
  * Translations
  - lithuania 100% Lithuanian
  - es 96% Spanish
  * Docs
  - Include OpenSSL/LibreSSL/GnuTLS version in neomutt -v output
  - Fix case of GPGME and SQLite
  * Build
  - Create libcompress (lz4, zlib, zstd)
  - Create libhistory
  - Create libbcache
  - Move zstrm to libconn
  * Code
  - Add more test coverage
  - Rename magic to type
  - Use mutt_file_fopen() on config variables
  - Change commands to use intptr_t for data</changelog>
  <changelog author="Kai Liu &lt;kai.liu@suse.com&gt;" date="1590148800">- Update to 20200501:
  * Bug Fixes
  - Make sure buffers are initialized on error
  - fix(sidebar): use abbreviated path if possible
  * Translations
  - 100% Lithuanian
  * Docs
  - make header cache config more explicit
- Changes from 20200424:
  * Bug Fixes
  - Fix history corruption
  - Handle pretty much anything in a URL query part
  - Correctly parse escaped characters in header phrases
  - Fix crash reading received header
  - Fix sidebar indentation
  - Avoid crashing on failure to parse an IMAP mailbox
  - Maildir: handle deleted emails correctly
  - Ensure OP_NULL is always first
  * Translations
  - 100% Czech
  * Build
  - cirrus: enable pcre2, make pkgconf a special case
  - Fix finding pcre2 w/o pkgconf
  - build: tdb.h needs size_t, bring it in with stddef.h
- Changes from 20200417:
  * Features
  - Fluid layout for Compose Screen, see: vimeo.com/407231157
  - Trivial Database (TDB) header cache backend
  - RocksDB header cache backend
  - Add &lt;sidebar-first&gt; and &lt;sidebar-last&gt; functions
  * Bug Fixes
  - add error for CLI empty emails
  - Allow spaces and square brackets in paths
  - browser: fix hidden mailboxes
  - fix initial email display
  - notmuch: fix time window search.
  - fix resize bugs
  - notmuch: fix entire-thread: update current email pointer
  - sidebar: support indenting and shortening of names
  - Handle variables inside backticks in sidebar_whitelist
  - browser: fix mask regex error reporting
  * Translations
  - 100% Lithuanian
  - 99% Chinese (simplified)
  * Build
  - Use regexes for common parsing tasks: urls, dates
  - Add configure option --pcre2 -- Enable PCRE2 regular expressions
  - Add configure option --tdb -- Use TDB for the header cache
  - Add configure option --rocksdb -- Use RocksDB for the header cache
  - Create libstore (key/value backends)
  - Update to latest autosetup
  - Update to latest acutest.h
  - Rename doc/ directory to docs/
  - make: fix location of .Po dependency files
  - Change libcompress to be more universal
  - Fix test fails on ?32
  - fix uidvalidity to unsigned 32-bit int
  * Code
  - Increase test coverage
  - Fix memory leaks
  - Fix null checks
  * Upstream
  - Buffer refactoring
  - Fix use-after-free in mutt_str_replace()
  - Clarify PGP Pseudo-header S&lt;id&gt; duration
  - Try to respect MUTT_QUIET for IMAP contexts too
  - Limit recurse depth when parsing mime messages</changelog>
  <changelog author="Kai Liu &lt;kai.liu@suse.com&gt;" date="1593950400">- Update to 20200626:
  * Bug Fixes
  - Avoid opening the same hcache file twice
  - Re-open Mailbox after folder-hook
  - Fix the matching of the spoolfile Mailbox
  - Fix link-thread to link all tagged emails
  * Changed Config
  - Add $tunnel_is_secure config, defaulting to true
  * Upstream
  - Don't check IMAP PREAUTH encryption if $tunnel is in use
  - Add recommendation to use $ssl_force_tls
- Changes from 20200501:
  * Security
  - Abort GnuTLS certificate check if a cert in the chain is rejected
    CVE-2020-14154 bsc#1172906
  - TLS: clear data after a starttls acknowledgement
    CVE-2020-14954 bsc#1173197
  - Prevent possible IMAP MITM via PREAUTH response
    CVE-2020-14093 bsc#1172935
  * Features
  - add config operations +=/-= for number,long
  - Address book has a comment field
  - Query menu has a comment field
  * Contrib
    sample.neomuttrc-starter: Do not echo prompted password
  * Bug Fixes
  - make "news://" and "nntp://" schemes interchangeable
  - Fix CRLF to LF conversion in base64 decoding
  - Double comma in query
  - compose: fix redraw after history
  - Crash inside empty query menu
  - mmdf: fix creating new mailbox
  - mh: fix creating new mailbox
  - mbox: error out when an mbox/mmdf is a pipe
  - Fix list-reply by correct parsing of List-Post headers
  - Decode references according to RFC2047
  - fix tagged message count
  - hcache: fix keylen not being considered when building the full key
  - sidebar: fix path comparison
  - Don't mess with the original pattern when running IMAP searches
  - Handle IMAP "NO" resps by issuing a msg instead of failing badly
  - imap: use the connection delimiter if provided
  - Memory leaks
  * Changed Config
  - $alias_format default changed to include %c comment
  - $query_format default changed to include %e extra info
  * Translations
  - 100% Lithuanian
  - 84% French
  - Log the translation in use
  * Docs
  - Add missing commands unbind, unmacro to man pages
  * Build
  - Check size of long using LONG_MAX instead of __WORDSIZE
  - Allow ./configure to not record cflags
  - fix out-of-tree build
  - Avoid locating gdbm symbols in qdbm library
  * Code
  - Refactor unsafe TAILQ returns
  - add window notifications
  - flip negative ifs
  - Update to latest acutest.h
  - test: add store tests
  - test: add compression tests
  - graphviz: email
  - make more opcode info available
  - refactor: main_change_folder()
  - refactor: mutt_mailbox_next()
  - refactor: generate_body()
  - compress: add {min,max}_level to ComprOps
  - emphasise empty loops: "// do nothing"
  - prex: convert is_from() to use regex
  - Refactor IMAP's search routines</changelog>
  <changelog author="Kai Liu &lt;kai.liu@suse.com&gt;" date="1597492800">- Update to 20200814:
  * Notes
  - Add one-liner docs to config items
    See: neomutt -O -Q smart_wrap
  - Remove the built-in editor
    A large unused and unusable feature
  * Security
  - Add mitigation against DoS from thousands of parts
    boo#1179113
  * Features
  - Allow index-style searching in postpone menu
  - Open NeoMutt using a mailbox name
  - Add cd command to change the current working directory
  - Add tab-completion menu for patterns
  - Allow renaming existing mailboxes
  - Check for missing attachments in alternative parts
  - Add one-liner docs to config items
  * Bug Fixes
  - Fix logic in checking an empty From address
  - Fix Imap crash in cmd_parse_expunge()
  - Fix setting attributes with S-Lang
  - Fix: redrawing of $pager_index_lines
  - Fix progress percentage for syncing large mboxes
  - Fix sidebar drawing in presence of indentation + named mailboxes
  - Fix retrieval of drafts when "postponed" is not in the mailboxes list
  - Do not add comments to address group terminators
  - Fix alias sorting for degenerate addresses
  - Fix attaching emails
  - Create directories for nonexistent file hcache case
  - Avoid creating mailboxes for failed subscribes
  - Fix crash if rejecting cert
  * Changed Config
  - Add $copy_decode_weed, $pipe_decode_weed, $print_decode_weed
  - Change default of $crypt_protected_headers_subject to "..."
  - Add default keybindings to history-up/down
  * Translations
  - 100% Czech
  - 100% Spanish
  * Build
  - Allow building against Lua 5.4
  - Fix when sqlite3.h is missing
  * Docs
  - Add a brief section on stty to the manual
  - Update section "Terminal Keybindings" in the manual
  - Clarify PGP Pseudo-header S&lt;id&gt; duration
  * Code
  - Clean up String API
  - Make the Sidebar more independent
  - De-centralise the Config Variables
  - Refactor dialogs
  - Refactor: Help Bar generation
  - Make more APIs Context-free
  - Adjust the edata use in Maildir and Notmuch
  - Window refactoring
  - Convert libsend to use Config functions
  - Refactor notifications to reduce noise
  - Convert Keymaps to use STAILQ
  - Track currently selected email by msgid
  - Config: no backing global variable
  - Add events for key binding
  * Upstream
  - Fix imap postponed mailbox use-after-free error
  - Speed up thread sort when many long threads exist
  - Fix ~v tagging when switching to non-threaded sorting
  - Add message/global to the list of known "message" types
  - Print progress meter when copying/saving tagged messages
  - Remove ansi formatting from autoview generated quoted replies
  - Change postpone mode to write Date header too
  - Unstuff format=flowed</changelog>
  <changelog author="Kai Liu &lt;kai.liu@suse.com&gt;" date="1597665600">- Enable --zlib configure option explicitely. In version 20200814 if
  it's not enabled header cache compression will not be turned on,
  unlike in previous versions which would turn it on when zlib is
  detected.</changelog>
  <changelog author="Kai Liu &lt;kai.liu@suse.com&gt;" date="1597752000">- Fix sidebar mailbox name display problem. Patch from the yet to
  be merge upstream commit:
  https://github.com/neomutt/neomutt/commit/a6f91bc9c890581cff189e143d86e656cab6d2dc</changelog>
  <changelog author="Kai Liu &lt;kai.liu@suse.com&gt;" date="1598184000">- Update to 20200821:
  * Bug Fixes
  - fix maildir flag generation
  - fix query notmuch if file is missing
  - notmuch: don't abort sync on error
  - fix type checking for send config variables
  * Changed Config
  - $sidebar_format - Use %D rather than %B for named mailboxes
  * Translations
  - 96% Lithuanian
  - 90% Polish
- add neomutt-sidebar-abbreviate-shorten-what-user-sees.patch
  * fix(sidebar): abbreviate/shorten what user sees</changelog>
  <changelog author="Kai Liu &lt;kai.liu@suse.com&gt;" date="1605960000">- Update to 20201120. Address boo#1179035, CVE-2020-28896.
  * Security
  - imap: close connection on all failures
  * Features
  - alias: add function to Alias/Query dialogs
  - config: add validators for {imap,smtp,pop}_authenticators
  - config: warn when signature file is missing or not readable
  - smtp: support for native SMTP LOGIN auth mech
  - notmuch: show originating folder in index
  * Bug Fixes
  - sidebar: prevent the divider colour bleeding out
  - sidebar: fix &lt;sidebar-{next,prev}-new&gt;
  - notmuch: fix query for current email
  - restore shutdown-hook functionality
  - crash in reply-to
  - user-after-free in folder-hook
  - fix some leaks
  - fix application of limits to modified mailboxes
  - write Date header when postponing
  * Translations
  - 100% Lithuanian
  - 100% Czech
  - 70% Turkish
  * Docs
  - Document that $sort_alias affects the query menu
  * Build
  - improve ASAN flags
  - add SASL and S/MIME to --everything
  - fix contrib (un)install
  * Code
  - my_hdr compose screen notifications
  - add contracts to the MXAPI
  - maildir refactoring
  - further reduce the use of global variables
  * Upstream
  - Add $count_alternatives to count attachments inside alternatives
- Changes from 20200925
  * Features
  - Compose: display user-defined headers
  - Address Book / Query: live sorting
  - Address Book / Query: patterns for searching
  - Config: Add '+=' and '-=' operators for String Lists
  - Config: Add '+=' operator for Strings
  - Allow postfix query ':setenv NAME?' for env vars
  * Bug Fixes
  - Fix crash when searching with invalid regexes
  - Compose: Prevent infinite loop of send2-hooks
  - Fix sidebar on new/removed mailboxes
  - Restore indentation for named mailboxes
  - Prevent half-parsing an alias
  - Remove folder creation prompt for POP path
  - Show error if $message_cachedir doesn't point to a valid directory
  - Fix tracking LastDir in case of IMAP paths with Unicode characters
  - Make sure all mail gets applied the index limit
  - Add warnings to -Q query CLI option
  - Fix index tracking functionality
  * Changed Config
  - Add $compose_show_user_headers (yes)
  * Translations
  - 100% Czech
  - 100% Lithuanian
  - Split up usage strings
  * Build
  - Run shellcheck on hcachever.sh
  - Add the Address Sanitizer
  - Move compose files to lib under compose/
  - Move address config into libaddress
  - Update to latest acutest - fixes a memory leak in the unit tests
  * Code
  - Implement ARRAY API
  - Deglobalised the Config Sort functions
  - Refactor the Sidebar to be Event-Driven
  - Refactor the Color Event
  - Refactor the Commands list
  - Make ctx_update_tables private
  - Reduce the scope/deps of some Validator functions
  - Use the Email's IMAP UID instead of an increasing number as index
  - debug: log window focus
- Removed neomutt-sidebar-abbreviate-shorten-what-user-sees.patch.
  No longer needed.
- Misc spec file cleanups.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1605960001">- add upstream signing key and validate source signature</changelog>
  <changelog author="Kai Liu &lt;kai.liu@suse.com&gt;" date="1606478400">- Update to version 20201127:
  * Bug Fixes
  - Fix crash when saving an alias
  * Translations
  - 70% Russian
  * Code
  - Remove redundant function call</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1615204800">- update to 20210205:
  * Features
  - Add &lt;skip-headers&gt; to skip past message headers in pager
  - Add &lt;view-pager&gt; function to attachment menu
  * Bug Fixes
  - Fix detection of mbox files with new mail
  - Fix crash on collapsed thread
  - Fix group-chat-reply
  - Clear the message window on resize
  - Do not crash on return from shell-exec if there's no open mailbox
  - Abort IMAP open if condstore/qresync updates fetch fails
  - Fix smtp crash on invalid $smtp_authenticators list
  - Fix pager dropped input on screen resize
  - Fix mime forwarding
  - Check config after hooks
  - Always recreate a mailbox after folder-hook
  * Translations
  - 88% Slovakian
  * Docs
  - Adjust doc to explicitly mention $count_alternative
  - Restore correct "$sort_re" documentation
  - Clarify pattern completion
  - Man pages: Clear up "-H" and "-O"
  * Build
  - Update to latest acutest
  - Update to latest autosetup
  - Make the location of /tmp configurable</changelog>
  <changelog author="lmb &lt;lmb@suse.com&gt;" date="1616673600">- build: Enable pcre2 for regex matching (bsc#1183989)
- Add libprce2-devel as build dependency</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1619265600">- stop owning directories provided by filesystem (bsc#1184787)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1641384000">- update to 20211029 (bsc#1185705, CVE-2021-32055):
  * Notmuch: support separate database and mail roots without .notmuch
  * fix notmuch crash on open failure
  * fix crypto crash handling pgp keys
  * fix ncrypt/pgp file_get_size return check
  * fix restore case-insensitive header sort
  * fix pager redrawing of long lines
  * fix notmuch: check database dir for xapian dir
  * fix notmuch: update index count after &lt;entire-thread&gt;
  * fix protect hash table against empty keys
  * fix prevent real_subj being set but empty
  * fix leak when saving fcc
  * fix leak after &lt;edit-or-view-raw-message&gt;
  * fix leak after trash to hidden mailbox
  * fix leak restoring postponed emails
  * fix new mail notifications
  * fix pattern compilation error for ( !&gt;(~P) )
  * fix menu display on window resize
  * Stop batch mode emails with no argument or recipients
  * Add sanitize call in print mailcap function
  * fix hdr_order to use the longest match
  * fix (un)setenv to not return an error with unset env vars
  * fix Imap sync when closing a mailbox
  * fix segfault on OpenBSD current
  * sidebar: restore sidebar_spoolfile colour
  * fix assert when displaying a file from the browser
  * fix exec command in compose
  * fix check_stats for Notmuch mailboxes
  * Fallback: Open Notmuch database without config
  * fix gui hook commands on startup
  * threads: implement the $use_threads feature
  * https://neomutt.org/feature/use-threads
  * hooks: allow a -noregex param to folder and mbox hooks
  * mailing lists: implement list-(un)subscribe using RFC2369 headers
  * mailcap: implement x-neomutt-nowrap flag
  * pager: add $local_date_header option
  * imap, smtp: add support for authenticating using XOAUTH2
  * Allow &lt;sync-mailbox&gt; to fail quietly
  * imap: speed up server-side searches
  * pager: improve skip-quoted and skip-headers
  * notmuch: open database with user's configuration
  * notmuch: implement &lt;vfolder-window-reset&gt;
  * config: allow += modification of my_ variables
  * notmuch: tolerate file renames behind neomutt's back
  * pager: implement $pager_read_delay
  * notmuch: validate nm_query_window_timebase
  * notmuch: make $nm_record work in non-notmuch mailboxes
  * compose: add $greeting - a welcome message on top of emails
  * notmuch: show additional mail in query windows
  * imap: fix crash on external IMAP events
  * notmuch: handle missing libnotmuch version bumps
  * imap: add sanity check for qresync
  * notmuch: allow windows with 0 duration
  * index: fix index selection on &lt;collapse-all&gt;
  * imap: fix crash when sync'ing labels
  * search: fix searching by Message-Id in &lt;mark-message&gt;
  * threads: fix double sorting of threads
  * stats: don't check mailbox stats unless told
  * alias: fix crash on empty query
  * pager: honor mid-message config changes
  * mailbox: don't propagate read-only state across reopens
  * hcache: fix caching new labels in the header cache
  * crypto: set invalidity flags for gpgme/smime keys
  * notmuch: fix parsing of multiple type=
  * notmuch: validate $nm_default_url
  * messages: avoid unnecessary opening of messages
  * imap: fix seqset iterator when it ends in a comma
  * build: refuse to build without pcre2 when pcre2 is linked in ncurses</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1649592000">- update to 20220408:
  * Compose multipart emails
  * Fix screen mode after attempting decryption
  * imap: increase max size of oauth2 token
  * Fix autocrypt
  * Unify Alias/Query workflow
  * Fix colours
  * Say which file exists when saving attachments
  * Force SMTP authentication if `smtp_user` is set
  * Fix selecting the right email after limiting
  * Make sure we have enough memory for a new email
  * Don't overwrite with zeroes after unlinking the file
  * Fix crash when forwarding attachments
  * Fix help reformatting on window resize
  * Fix poll to use PollFdsCount and not PollFdsLen
  * regex: range check arrays strictly
  * Fix Coverity defects
  * Fix out of bounds write with long log lines
  * Apply `fast_reply` to 'to', 'cc', or 'bcc'
  * Prevent warning on empty emails
  * New default: `set rfc2047_parameters = yes`
  * 100% German
  * 100% Lithuanian
  * 100% Serbian
  * 100% Czech
  * 100% Turkish
  * 72% Hungarian
  * Improve header cache explanation
  * Improve description of some notmuch variables
  * Explain how timezones and `!`s work inside `%{}`, `%[]` and `%()`
  * Document config synonyms and deprecations
  * Create lots of GitHub Actions
  * Drop TravisCI
  * Add automated Fuzzing tests
  * Add automated ASAN tests
  * Create Dockers for building Centos/Fedora
  * Build fixes for Solaris 10
  * New libraries: browser, enter, envelope
  * New configure options: `--fuzzing` `--debug-color` `--debug-queue`
  * Split Index/Pager GUIs/functions
  * Add lots of function dispatchers
  * Eliminate `menu_loop()`
  * Refactor function opcodes
  * Refactor cursor setting
  * Unify Alias/Query functions
  * Refactor Compose/Envelope functions
  * Modernise the Colour handling
  * Refactor the Attachment View
  * Eliminate the global `Context`
  * Upgrade `mutt_get_field()`
  * Refactor the `color quoted` code
  * Fix lots of memory leaks
  * Refactor Index resolve code
  * Refactor PatternList parsing
  * Refactor Mailbox freeing
  * Improve key mapping
  * Factor out charset hooks
  * Expose mutt_file_seek API
  * Improve API of `strto*` wrappers
  * imap QRESYNC fixes
  * Allow an empty To: address prompt
  * Fix argc==0 handling
  * Don't queue IMAP close commands
  * Fix IMAP UTF-7 for code points &gt;= U+10000
  * Don't include inactive messages in msgset generation</changelog>
  <changelog author="Lars Marowsky-Bree &lt;lmb@suse.com&gt;" date="1653480000">- update to 20220429:
  * Bug Fixes
  * Do not crash on an invalid use_threads/sort combination
  * Fix: stuck browser cursor
  * Resolve (move) the cursor after &lt;edit-label&gt;
  * Index: fix menu size on new mail
  * Don't overlimit LMDB mmap size
  * OpenBSD y/n translation fix
  * Generic: split out OP_EXIT binding
  * Fix parsing of sendmail cmd
  * Fix: crash with menu_move_off=no
  * Newsrc: bugfix; nntp_user and nntp_pass ignored
  * Menu: ensure config changes cause a repaint
  * Mbox: fix sync duplicates
  * Make sure the index redraws all that's needed
  * Translations
  * 100% Chinese (Simplified)
  * 100% Czech
  * 100% German
  * 100% Hungarian
  * 100% Lithuanian
  * 100% Serbian
  * 100% Turkish
  * Docs
  * add missing pattern modifier ~I for external_search_command
  * Code
  * menu: eliminate custom_redraw()
  * modernise mixmaster
  * Kill global and Propagate display attach status through State-
- update to 20220415:
  * Security
  * Fix uudecode buffer overflow (CVE-2022-1328)
  * Features
  * Colours, colours, colours
  * Bug Fixes
  * Pager: fix pager_stop
  * Merge colours with normal
  * Color: disable mono command
  * Fix forwarding text attachments when honor_disposition is set
  * Pager: drop the nntp change-group bindings
  * Use mailbox_check flags coherently, add IMMEDIATE flag
  * Fix: tagging in attachment list
  * Fix: misalignment of mini-index
  * Make sure to update the menu size after a resort
  * Translations
  * 100% Hungarian
  * Build
  * Update acutest
  * Code
  * Unify pipe functions
  * Index: notify if navigation fails
  * Gui: set colour to be merged with normal
  * Fix: leak in tls_check_one_certificate()
  * Upstream
  * Flush iconv() in mutt_convert_string()
  * Fix integer overflow in mutt_convert_string()
  * Fix uudecode cleanup on unexpected eof</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655208000">- fix build for older dists</changelog>
</package>
<package pkgid="9f34004885fe1106659b6ca88d7a99b8c0bf44340903eeb359706a6ddb3d6794" name="neomutt-doc" arch="noarch">
  <version epoch="0" ver="20220429" rel="bp154.2.3.1"/>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1574942400">- Update to 20191111:
  Bug fixes:
  * browser: fix directory view
  * fix crash in mutt_extract_token()
  * force a screen refresh
  * fix crash sending message from command line
  * notmuch: use nm_default_uri if no mailbox data
  * fix forward attachments
  * fix: vfprintf undefined behaviour in body_handler
  * Fix relative symlink resolution
  * fix: trash to non-existent file/dir
  * fix re-opening of mbox Mailboxes
  * close logging as late as possible
  * log unknown mailboxes
  * fix crash in command line postpone
  * fix memory leaks
  * fix icommand parsing
  * fix new mail interaction with mail_check_recent</changelog>
  <changelog author="Martin Rey &lt;mrey@suse.com&gt;" date="1580472000">- Update to 20191207:
  * Features:
  - compose: draw status bar with highlights
  * Bug Fixes:
  - crash opening notmuch mailbox
  - crash in mutt_autocrypt_ui_recommendation
  - Avoid negative allocation
  - Mbox new mail
  - Setting of DT_MAILBOX type variables from Lua
  - imap: empty cmdbuf before connecting
  - imap: select the mailbox on reconnect
  - compose: fix attach message
  * Build:
  - make files conditional
  * Code:
  - enum-ify log levels
  - fix function prototypes
  - refactor virtual email lookups
  - factor out global Context
- Changes from 20191129:
  * Features:
  - Add raw mailsize expando (%cr)
  * Bug Fixes:
  - Avoid double question marks in bounce confirmation msg
  - Fix bounce confirmation
  - fix new-mail flags and behaviour
  - fix: browser &lt;descend-directory&gt;
  - fix ssl crash
  - fix move to trash
  - fix flickering
  - Do not check hidden mailboxes for new mail
  - Fix new_mail_command notifications
  - fix crash in examine_mailboxes()
  - fix crash in mutt_sort_threads()
  - fix: crash after sending
  - Fix crash in tunnel's conn_close
  - fix fcc for deep dirs
  - imap: fix crash when new mail arrives
  - fix colour 'quoted9'
  - quieten messages on exit
  - fix: crash after failed mbox_check
  - browser: default to a file/dir view when attaching a file
  * Changed Config:
  - Change $write_bcc to default off
  * Docs:
  - Add a bit more documentation about sending
  - Clarify $write_bcc documentation.
  - Update documentation for raw size expando
  - docbook: set generate.consistent.ids to make generated html
    reproducible
  * Build:
  - fix build/tests for 32-bit arches
  - tests: fix test that would fail soon
  - tests: fix context for failing idna tests</changelog>
  <changelog author="Martin Rey &lt;mrey@suse.com&gt;" date="1584100800">- Update to 20200313:
  * Window layout
  - Sidebar is only visible when it's usable.
  * Features
  - UI: add number of old messages to sidebar_format
  - UI: support ISO 8601 calendar date
  - UI: fix commands that don?t need to have a non-empty mailbox
    to be valid
  - PGP: inform about successful decryption of inline PGP
    messages
  - PGP: try to infer the signing key from the From address
  - PGP: enable GPGMe by default
  - Notmuch: use query as name for vfolder-from-query
  - IMAP: add network traffic compression
    (COMPRESS=DEFLATE, RFC4978)
  - Header cache: add support for generic header cache
    compression
  * Bug Fixes
  - Fix uncollapse_jump
  - Only try to perform entire-thread on maildir/mh mailboxes
  - Fix crash in pager
  - Avoid logging single new lines at the end of header fields
  - Fix listing mailboxes
  - Do not recurse a non-threaded message
  - Fix initial window order
  - Fix leaks on IMAP error paths
  - Notmuch: compose(attach-message): support notmuch backend
  - Fix IMAP flag comparison code
  - Fix $move for IMAP mailboxes
  - Maildir: maildir_mbox_check_stats should only update mailbox
    stats if requested
  - Fix unmailboxes for virtual mailboxes
  - Maildir: sanitize filename before hashing
  - OAuth: if 'login' name isn't available use 'user'
  - Add error message on failed encryption
  - Fix a bunch of crashes
  - Force C locale for email date
  - Abort if run without a terminal
  * Changed Config
  - $crypt_use_gpgme - Now defaults to 'yes' (enabled)
  - $abort_backspace - Hitting backspace against an empty prompt
    aborts the prompt
  - $abort_key - String representation of key to abort prompts
  - $arrow_string - Use an custom string for arrow_cursor
  - $crypt_opportunistic_encrypt_strong_keys - Enable encryption
    only when strong a key is available
  - $header_cache_compress_dictionary - Filepath to dictionary
    for zstd compression
  - $header_cache_compress_level - Level of compression for
    method
  - $header_cache_compress_method - Enable generic hcache
    database compression
  - $imap_deflate - Compress network traffic
  - $smtp_user - Username for the SMTP server
  * Translations
  - 100% Lithuanian
  - 81% Spanish
  - 78% Russian
  * Build
  - Add libdebug
  - Rename public headers to lib.h
  - Create libcompress for compressed folders code
  * Code
  - Refactor Windows and Dialogs
  - Lots of code tidying
  - Refactor: mutt_addrlist_{search,write}
  - Lots of improvements to the Config code
  - Use Buffers more pervasively
  - Unify API function naming
  - Rename library shared headers
  - Refactor libconn gui dependencies
  - Refactor: init.[ch]
  - Refactor config to use subsets
  - Config: add path type
  - Remove backend deps from the connection code
  * Upstream
  - Allow ~b ~B ~h patterns in send2-hook
  - Rename smime oppenc mode parameter to get_keys_by_addr()
  - Add $crypt_opportunistic_encrypt_strong_keys config var
  - Fix crash when polling a closed ssl connection
  - Turn off auto-clear outside of autocrypt initialization
  - Add protected-headers="v1" to Content-Type when protecting
    headers
  - Fix segv in IMAP postponed menu caused by reopen_allow
  - Adding ISO 8601 calendar date
  - Fix $fcc_attach to not prompt in batch mode
  - Convert remaining mutt_encode_path() call to use struct
    Buffer
  - Fix rendering of replacement_char when Charset_is_utf8
  - Update to latest acutest.h</changelog>
  <changelog author="Martin Rey &lt;mrey@suse.com&gt;" date="1584705600">- Update to 20200320:
  * Bug Fixes
  - Fix COLUMNS env var
  - Fix sync after delete
  - Fix crash in notmuch
  - Fix sidebar indent
  - Fix emptying trash
  - Fix command line sending
  - Fix reading large address lists
  - Resolve symlinks only when necessary
  * Translations
  - lithuania 100% Lithuanian
  - es 96% Spanish
  * Docs
  - Include OpenSSL/LibreSSL/GnuTLS version in neomutt -v output
  - Fix case of GPGME and SQLite
  * Build
  - Create libcompress (lz4, zlib, zstd)
  - Create libhistory
  - Create libbcache
  - Move zstrm to libconn
  * Code
  - Add more test coverage
  - Rename magic to type
  - Use mutt_file_fopen() on config variables
  - Change commands to use intptr_t for data</changelog>
  <changelog author="Kai Liu &lt;kai.liu@suse.com&gt;" date="1590148800">- Update to 20200501:
  * Bug Fixes
  - Make sure buffers are initialized on error
  - fix(sidebar): use abbreviated path if possible
  * Translations
  - 100% Lithuanian
  * Docs
  - make header cache config more explicit
- Changes from 20200424:
  * Bug Fixes
  - Fix history corruption
  - Handle pretty much anything in a URL query part
  - Correctly parse escaped characters in header phrases
  - Fix crash reading received header
  - Fix sidebar indentation
  - Avoid crashing on failure to parse an IMAP mailbox
  - Maildir: handle deleted emails correctly
  - Ensure OP_NULL is always first
  * Translations
  - 100% Czech
  * Build
  - cirrus: enable pcre2, make pkgconf a special case
  - Fix finding pcre2 w/o pkgconf
  - build: tdb.h needs size_t, bring it in with stddef.h
- Changes from 20200417:
  * Features
  - Fluid layout for Compose Screen, see: vimeo.com/407231157
  - Trivial Database (TDB) header cache backend
  - RocksDB header cache backend
  - Add &lt;sidebar-first&gt; and &lt;sidebar-last&gt; functions
  * Bug Fixes
  - add error for CLI empty emails
  - Allow spaces and square brackets in paths
  - browser: fix hidden mailboxes
  - fix initial email display
  - notmuch: fix time window search.
  - fix resize bugs
  - notmuch: fix entire-thread: update current email pointer
  - sidebar: support indenting and shortening of names
  - Handle variables inside backticks in sidebar_whitelist
  - browser: fix mask regex error reporting
  * Translations
  - 100% Lithuanian
  - 99% Chinese (simplified)
  * Build
  - Use regexes for common parsing tasks: urls, dates
  - Add configure option --pcre2 -- Enable PCRE2 regular expressions
  - Add configure option --tdb -- Use TDB for the header cache
  - Add configure option --rocksdb -- Use RocksDB for the header cache
  - Create libstore (key/value backends)
  - Update to latest autosetup
  - Update to latest acutest.h
  - Rename doc/ directory to docs/
  - make: fix location of .Po dependency files
  - Change libcompress to be more universal
  - Fix test fails on ?32
  - fix uidvalidity to unsigned 32-bit int
  * Code
  - Increase test coverage
  - Fix memory leaks
  - Fix null checks
  * Upstream
  - Buffer refactoring
  - Fix use-after-free in mutt_str_replace()
  - Clarify PGP Pseudo-header S&lt;id&gt; duration
  - Try to respect MUTT_QUIET for IMAP contexts too
  - Limit recurse depth when parsing mime messages</changelog>
  <changelog author="Kai Liu &lt;kai.liu@suse.com&gt;" date="1593950400">- Update to 20200626:
  * Bug Fixes
  - Avoid opening the same hcache file twice
  - Re-open Mailbox after folder-hook
  - Fix the matching of the spoolfile Mailbox
  - Fix link-thread to link all tagged emails
  * Changed Config
  - Add $tunnel_is_secure config, defaulting to true
  * Upstream
  - Don't check IMAP PREAUTH encryption if $tunnel is in use
  - Add recommendation to use $ssl_force_tls
- Changes from 20200501:
  * Security
  - Abort GnuTLS certificate check if a cert in the chain is rejected
    CVE-2020-14154 bsc#1172906
  - TLS: clear data after a starttls acknowledgement
    CVE-2020-14954 bsc#1173197
  - Prevent possible IMAP MITM via PREAUTH response
    CVE-2020-14093 bsc#1172935
  * Features
  - add config operations +=/-= for number,long
  - Address book has a comment field
  - Query menu has a comment field
  * Contrib
    sample.neomuttrc-starter: Do not echo prompted password
  * Bug Fixes
  - make "news://" and "nntp://" schemes interchangeable
  - Fix CRLF to LF conversion in base64 decoding
  - Double comma in query
  - compose: fix redraw after history
  - Crash inside empty query menu
  - mmdf: fix creating new mailbox
  - mh: fix creating new mailbox
  - mbox: error out when an mbox/mmdf is a pipe
  - Fix list-reply by correct parsing of List-Post headers
  - Decode references according to RFC2047
  - fix tagged message count
  - hcache: fix keylen not being considered when building the full key
  - sidebar: fix path comparison
  - Don't mess with the original pattern when running IMAP searches
  - Handle IMAP "NO" resps by issuing a msg instead of failing badly
  - imap: use the connection delimiter if provided
  - Memory leaks
  * Changed Config
  - $alias_format default changed to include %c comment
  - $query_format default changed to include %e extra info
  * Translations
  - 100% Lithuanian
  - 84% French
  - Log the translation in use
  * Docs
  - Add missing commands unbind, unmacro to man pages
  * Build
  - Check size of long using LONG_MAX instead of __WORDSIZE
  - Allow ./configure to not record cflags
  - fix out-of-tree build
  - Avoid locating gdbm symbols in qdbm library
  * Code
  - Refactor unsafe TAILQ returns
  - add window notifications
  - flip negative ifs
  - Update to latest acutest.h
  - test: add store tests
  - test: add compression tests
  - graphviz: email
  - make more opcode info available
  - refactor: main_change_folder()
  - refactor: mutt_mailbox_next()
  - refactor: generate_body()
  - compress: add {min,max}_level to ComprOps
  - emphasise empty loops: "// do nothing"
  - prex: convert is_from() to use regex
  - Refactor IMAP's search routines</changelog>
  <changelog author="Kai Liu &lt;kai.liu@suse.com&gt;" date="1597492800">- Update to 20200814:
  * Notes
  - Add one-liner docs to config items
    See: neomutt -O -Q smart_wrap
  - Remove the built-in editor
    A large unused and unusable feature
  * Security
  - Add mitigation against DoS from thousands of parts
    boo#1179113
  * Features
  - Allow index-style searching in postpone menu
  - Open NeoMutt using a mailbox name
  - Add cd command to change the current working directory
  - Add tab-completion menu for patterns
  - Allow renaming existing mailboxes
  - Check for missing attachments in alternative parts
  - Add one-liner docs to config items
  * Bug Fixes
  - Fix logic in checking an empty From address
  - Fix Imap crash in cmd_parse_expunge()
  - Fix setting attributes with S-Lang
  - Fix: redrawing of $pager_index_lines
  - Fix progress percentage for syncing large mboxes
  - Fix sidebar drawing in presence of indentation + named mailboxes
  - Fix retrieval of drafts when "postponed" is not in the mailboxes list
  - Do not add comments to address group terminators
  - Fix alias sorting for degenerate addresses
  - Fix attaching emails
  - Create directories for nonexistent file hcache case
  - Avoid creating mailboxes for failed subscribes
  - Fix crash if rejecting cert
  * Changed Config
  - Add $copy_decode_weed, $pipe_decode_weed, $print_decode_weed
  - Change default of $crypt_protected_headers_subject to "..."
  - Add default keybindings to history-up/down
  * Translations
  - 100% Czech
  - 100% Spanish
  * Build
  - Allow building against Lua 5.4
  - Fix when sqlite3.h is missing
  * Docs
  - Add a brief section on stty to the manual
  - Update section "Terminal Keybindings" in the manual
  - Clarify PGP Pseudo-header S&lt;id&gt; duration
  * Code
  - Clean up String API
  - Make the Sidebar more independent
  - De-centralise the Config Variables
  - Refactor dialogs
  - Refactor: Help Bar generation
  - Make more APIs Context-free
  - Adjust the edata use in Maildir and Notmuch
  - Window refactoring
  - Convert libsend to use Config functions
  - Refactor notifications to reduce noise
  - Convert Keymaps to use STAILQ
  - Track currently selected email by msgid
  - Config: no backing global variable
  - Add events for key binding
  * Upstream
  - Fix imap postponed mailbox use-after-free error
  - Speed up thread sort when many long threads exist
  - Fix ~v tagging when switching to non-threaded sorting
  - Add message/global to the list of known "message" types
  - Print progress meter when copying/saving tagged messages
  - Remove ansi formatting from autoview generated quoted replies
  - Change postpone mode to write Date header too
  - Unstuff format=flowed</changelog>
  <changelog author="Kai Liu &lt;kai.liu@suse.com&gt;" date="1597665600">- Enable --zlib configure option explicitely. In version 20200814 if
  it's not enabled header cache compression will not be turned on,
  unlike in previous versions which would turn it on when zlib is
  detected.</changelog>
  <changelog author="Kai Liu &lt;kai.liu@suse.com&gt;" date="1597752000">- Fix sidebar mailbox name display problem. Patch from the yet to
  be merge upstream commit:
  https://github.com/neomutt/neomutt/commit/a6f91bc9c890581cff189e143d86e656cab6d2dc</changelog>
  <changelog author="Kai Liu &lt;kai.liu@suse.com&gt;" date="1598184000">- Update to 20200821:
  * Bug Fixes
  - fix maildir flag generation
  - fix query notmuch if file is missing
  - notmuch: don't abort sync on error
  - fix type checking for send config variables
  * Changed Config
  - $sidebar_format - Use %D rather than %B for named mailboxes
  * Translations
  - 96% Lithuanian
  - 90% Polish
- add neomutt-sidebar-abbreviate-shorten-what-user-sees.patch
  * fix(sidebar): abbreviate/shorten what user sees</changelog>
  <changelog author="Kai Liu &lt;kai.liu@suse.com&gt;" date="1605960000">- Update to 20201120. Address boo#1179035, CVE-2020-28896.
  * Security
  - imap: close connection on all failures
  * Features
  - alias: add function to Alias/Query dialogs
  - config: add validators for {imap,smtp,pop}_authenticators
  - config: warn when signature file is missing or not readable
  - smtp: support for native SMTP LOGIN auth mech
  - notmuch: show originating folder in index
  * Bug Fixes
  - sidebar: prevent the divider colour bleeding out
  - sidebar: fix &lt;sidebar-{next,prev}-new&gt;
  - notmuch: fix query for current email
  - restore shutdown-hook functionality
  - crash in reply-to
  - user-after-free in folder-hook
  - fix some leaks
  - fix application of limits to modified mailboxes
  - write Date header when postponing
  * Translations
  - 100% Lithuanian
  - 100% Czech
  - 70% Turkish
  * Docs
  - Document that $sort_alias affects the query menu
  * Build
  - improve ASAN flags
  - add SASL and S/MIME to --everything
  - fix contrib (un)install
  * Code
  - my_hdr compose screen notifications
  - add contracts to the MXAPI
  - maildir refactoring
  - further reduce the use of global variables
  * Upstream
  - Add $count_alternatives to count attachments inside alternatives
- Changes from 20200925
  * Features
  - Compose: display user-defined headers
  - Address Book / Query: live sorting
  - Address Book / Query: patterns for searching
  - Config: Add '+=' and '-=' operators for String Lists
  - Config: Add '+=' operator for Strings
  - Allow postfix query ':setenv NAME?' for env vars
  * Bug Fixes
  - Fix crash when searching with invalid regexes
  - Compose: Prevent infinite loop of send2-hooks
  - Fix sidebar on new/removed mailboxes
  - Restore indentation for named mailboxes
  - Prevent half-parsing an alias
  - Remove folder creation prompt for POP path
  - Show error if $message_cachedir doesn't point to a valid directory
  - Fix tracking LastDir in case of IMAP paths with Unicode characters
  - Make sure all mail gets applied the index limit
  - Add warnings to -Q query CLI option
  - Fix index tracking functionality
  * Changed Config
  - Add $compose_show_user_headers (yes)
  * Translations
  - 100% Czech
  - 100% Lithuanian
  - Split up usage strings
  * Build
  - Run shellcheck on hcachever.sh
  - Add the Address Sanitizer
  - Move compose files to lib under compose/
  - Move address config into libaddress
  - Update to latest acutest - fixes a memory leak in the unit tests
  * Code
  - Implement ARRAY API
  - Deglobalised the Config Sort functions
  - Refactor the Sidebar to be Event-Driven
  - Refactor the Color Event
  - Refactor the Commands list
  - Make ctx_update_tables private
  - Reduce the scope/deps of some Validator functions
  - Use the Email's IMAP UID instead of an increasing number as index
  - debug: log window focus
- Removed neomutt-sidebar-abbreviate-shorten-what-user-sees.patch.
  No longer needed.
- Misc spec file cleanups.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1605960001">- add upstream signing key and validate source signature</changelog>
  <changelog author="Kai Liu &lt;kai.liu@suse.com&gt;" date="1606478400">- Update to version 20201127:
  * Bug Fixes
  - Fix crash when saving an alias
  * Translations
  - 70% Russian
  * Code
  - Remove redundant function call</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1615204800">- update to 20210205:
  * Features
  - Add &lt;skip-headers&gt; to skip past message headers in pager
  - Add &lt;view-pager&gt; function to attachment menu
  * Bug Fixes
  - Fix detection of mbox files with new mail
  - Fix crash on collapsed thread
  - Fix group-chat-reply
  - Clear the message window on resize
  - Do not crash on return from shell-exec if there's no open mailbox
  - Abort IMAP open if condstore/qresync updates fetch fails
  - Fix smtp crash on invalid $smtp_authenticators list
  - Fix pager dropped input on screen resize
  - Fix mime forwarding
  - Check config after hooks
  - Always recreate a mailbox after folder-hook
  * Translations
  - 88% Slovakian
  * Docs
  - Adjust doc to explicitly mention $count_alternative
  - Restore correct "$sort_re" documentation
  - Clarify pattern completion
  - Man pages: Clear up "-H" and "-O"
  * Build
  - Update to latest acutest
  - Update to latest autosetup
  - Make the location of /tmp configurable</changelog>
  <changelog author="lmb &lt;lmb@suse.com&gt;" date="1616673600">- build: Enable pcre2 for regex matching (bsc#1183989)
- Add libprce2-devel as build dependency</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1619265600">- stop owning directories provided by filesystem (bsc#1184787)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1641384000">- update to 20211029 (bsc#1185705, CVE-2021-32055):
  * Notmuch: support separate database and mail roots without .notmuch
  * fix notmuch crash on open failure
  * fix crypto crash handling pgp keys
  * fix ncrypt/pgp file_get_size return check
  * fix restore case-insensitive header sort
  * fix pager redrawing of long lines
  * fix notmuch: check database dir for xapian dir
  * fix notmuch: update index count after &lt;entire-thread&gt;
  * fix protect hash table against empty keys
  * fix prevent real_subj being set but empty
  * fix leak when saving fcc
  * fix leak after &lt;edit-or-view-raw-message&gt;
  * fix leak after trash to hidden mailbox
  * fix leak restoring postponed emails
  * fix new mail notifications
  * fix pattern compilation error for ( !&gt;(~P) )
  * fix menu display on window resize
  * Stop batch mode emails with no argument or recipients
  * Add sanitize call in print mailcap function
  * fix hdr_order to use the longest match
  * fix (un)setenv to not return an error with unset env vars
  * fix Imap sync when closing a mailbox
  * fix segfault on OpenBSD current
  * sidebar: restore sidebar_spoolfile colour
  * fix assert when displaying a file from the browser
  * fix exec command in compose
  * fix check_stats for Notmuch mailboxes
  * Fallback: Open Notmuch database without config
  * fix gui hook commands on startup
  * threads: implement the $use_threads feature
  * https://neomutt.org/feature/use-threads
  * hooks: allow a -noregex param to folder and mbox hooks
  * mailing lists: implement list-(un)subscribe using RFC2369 headers
  * mailcap: implement x-neomutt-nowrap flag
  * pager: add $local_date_header option
  * imap, smtp: add support for authenticating using XOAUTH2
  * Allow &lt;sync-mailbox&gt; to fail quietly
  * imap: speed up server-side searches
  * pager: improve skip-quoted and skip-headers
  * notmuch: open database with user's configuration
  * notmuch: implement &lt;vfolder-window-reset&gt;
  * config: allow += modification of my_ variables
  * notmuch: tolerate file renames behind neomutt's back
  * pager: implement $pager_read_delay
  * notmuch: validate nm_query_window_timebase
  * notmuch: make $nm_record work in non-notmuch mailboxes
  * compose: add $greeting - a welcome message on top of emails
  * notmuch: show additional mail in query windows
  * imap: fix crash on external IMAP events
  * notmuch: handle missing libnotmuch version bumps
  * imap: add sanity check for qresync
  * notmuch: allow windows with 0 duration
  * index: fix index selection on &lt;collapse-all&gt;
  * imap: fix crash when sync'ing labels
  * search: fix searching by Message-Id in &lt;mark-message&gt;
  * threads: fix double sorting of threads
  * stats: don't check mailbox stats unless told
  * alias: fix crash on empty query
  * pager: honor mid-message config changes
  * mailbox: don't propagate read-only state across reopens
  * hcache: fix caching new labels in the header cache
  * crypto: set invalidity flags for gpgme/smime keys
  * notmuch: fix parsing of multiple type=
  * notmuch: validate $nm_default_url
  * messages: avoid unnecessary opening of messages
  * imap: fix seqset iterator when it ends in a comma
  * build: refuse to build without pcre2 when pcre2 is linked in ncurses</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1649592000">- update to 20220408:
  * Compose multipart emails
  * Fix screen mode after attempting decryption
  * imap: increase max size of oauth2 token
  * Fix autocrypt
  * Unify Alias/Query workflow
  * Fix colours
  * Say which file exists when saving attachments
  * Force SMTP authentication if `smtp_user` is set
  * Fix selecting the right email after limiting
  * Make sure we have enough memory for a new email
  * Don't overwrite with zeroes after unlinking the file
  * Fix crash when forwarding attachments
  * Fix help reformatting on window resize
  * Fix poll to use PollFdsCount and not PollFdsLen
  * regex: range check arrays strictly
  * Fix Coverity defects
  * Fix out of bounds write with long log lines
  * Apply `fast_reply` to 'to', 'cc', or 'bcc'
  * Prevent warning on empty emails
  * New default: `set rfc2047_parameters = yes`
  * 100% German
  * 100% Lithuanian
  * 100% Serbian
  * 100% Czech
  * 100% Turkish
  * 72% Hungarian
  * Improve header cache explanation
  * Improve description of some notmuch variables
  * Explain how timezones and `!`s work inside `%{}`, `%[]` and `%()`
  * Document config synonyms and deprecations
  * Create lots of GitHub Actions
  * Drop TravisCI
  * Add automated Fuzzing tests
  * Add automated ASAN tests
  * Create Dockers for building Centos/Fedora
  * Build fixes for Solaris 10
  * New libraries: browser, enter, envelope
  * New configure options: `--fuzzing` `--debug-color` `--debug-queue`
  * Split Index/Pager GUIs/functions
  * Add lots of function dispatchers
  * Eliminate `menu_loop()`
  * Refactor function opcodes
  * Refactor cursor setting
  * Unify Alias/Query functions
  * Refactor Compose/Envelope functions
  * Modernise the Colour handling
  * Refactor the Attachment View
  * Eliminate the global `Context`
  * Upgrade `mutt_get_field()`
  * Refactor the `color quoted` code
  * Fix lots of memory leaks
  * Refactor Index resolve code
  * Refactor PatternList parsing
  * Refactor Mailbox freeing
  * Improve key mapping
  * Factor out charset hooks
  * Expose mutt_file_seek API
  * Improve API of `strto*` wrappers
  * imap QRESYNC fixes
  * Allow an empty To: address prompt
  * Fix argc==0 handling
  * Don't queue IMAP close commands
  * Fix IMAP UTF-7 for code points &gt;= U+10000
  * Don't include inactive messages in msgset generation</changelog>
  <changelog author="Lars Marowsky-Bree &lt;lmb@suse.com&gt;" date="1653480000">- update to 20220429:
  * Bug Fixes
  * Do not crash on an invalid use_threads/sort combination
  * Fix: stuck browser cursor
  * Resolve (move) the cursor after &lt;edit-label&gt;
  * Index: fix menu size on new mail
  * Don't overlimit LMDB mmap size
  * OpenBSD y/n translation fix
  * Generic: split out OP_EXIT binding
  * Fix parsing of sendmail cmd
  * Fix: crash with menu_move_off=no
  * Newsrc: bugfix; nntp_user and nntp_pass ignored
  * Menu: ensure config changes cause a repaint
  * Mbox: fix sync duplicates
  * Make sure the index redraws all that's needed
  * Translations
  * 100% Chinese (Simplified)
  * 100% Czech
  * 100% German
  * 100% Hungarian
  * 100% Lithuanian
  * 100% Serbian
  * 100% Turkish
  * Docs
  * add missing pattern modifier ~I for external_search_command
  * Code
  * menu: eliminate custom_redraw()
  * modernise mixmaster
  * Kill global and Propagate display attach status through State-
- update to 20220415:
  * Security
  * Fix uudecode buffer overflow (CVE-2022-1328)
  * Features
  * Colours, colours, colours
  * Bug Fixes
  * Pager: fix pager_stop
  * Merge colours with normal
  * Color: disable mono command
  * Fix forwarding text attachments when honor_disposition is set
  * Pager: drop the nntp change-group bindings
  * Use mailbox_check flags coherently, add IMMEDIATE flag
  * Fix: tagging in attachment list
  * Fix: misalignment of mini-index
  * Make sure to update the menu size after a resort
  * Translations
  * 100% Hungarian
  * Build
  * Update acutest
  * Code
  * Unify pipe functions
  * Index: notify if navigation fails
  * Gui: set colour to be merged with normal
  * Fix: leak in tls_check_one_certificate()
  * Upstream
  * Flush iconv() in mutt_convert_string()
  * Fix integer overflow in mutt_convert_string()
  * Fix uudecode cleanup on unexpected eof</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655208000">- fix build for older dists</changelog>
</package>
<package pkgid="3f02a7aa62c1efcae89d4a027479d06c487c58b13919d0d9a602b0ea923c49b1" name="neomutt-lang" arch="noarch">
  <version epoch="0" ver="20220429" rel="bp154.2.3.1"/>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1574942400">- Update to 20191111:
  Bug fixes:
  * browser: fix directory view
  * fix crash in mutt_extract_token()
  * force a screen refresh
  * fix crash sending message from command line
  * notmuch: use nm_default_uri if no mailbox data
  * fix forward attachments
  * fix: vfprintf undefined behaviour in body_handler
  * Fix relative symlink resolution
  * fix: trash to non-existent file/dir
  * fix re-opening of mbox Mailboxes
  * close logging as late as possible
  * log unknown mailboxes
  * fix crash in command line postpone
  * fix memory leaks
  * fix icommand parsing
  * fix new mail interaction with mail_check_recent</changelog>
  <changelog author="Martin Rey &lt;mrey@suse.com&gt;" date="1580472000">- Update to 20191207:
  * Features:
  - compose: draw status bar with highlights
  * Bug Fixes:
  - crash opening notmuch mailbox
  - crash in mutt_autocrypt_ui_recommendation
  - Avoid negative allocation
  - Mbox new mail
  - Setting of DT_MAILBOX type variables from Lua
  - imap: empty cmdbuf before connecting
  - imap: select the mailbox on reconnect
  - compose: fix attach message
  * Build:
  - make files conditional
  * Code:
  - enum-ify log levels
  - fix function prototypes
  - refactor virtual email lookups
  - factor out global Context
- Changes from 20191129:
  * Features:
  - Add raw mailsize expando (%cr)
  * Bug Fixes:
  - Avoid double question marks in bounce confirmation msg
  - Fix bounce confirmation
  - fix new-mail flags and behaviour
  - fix: browser &lt;descend-directory&gt;
  - fix ssl crash
  - fix move to trash
  - fix flickering
  - Do not check hidden mailboxes for new mail
  - Fix new_mail_command notifications
  - fix crash in examine_mailboxes()
  - fix crash in mutt_sort_threads()
  - fix: crash after sending
  - Fix crash in tunnel's conn_close
  - fix fcc for deep dirs
  - imap: fix crash when new mail arrives
  - fix colour 'quoted9'
  - quieten messages on exit
  - fix: crash after failed mbox_check
  - browser: default to a file/dir view when attaching a file
  * Changed Config:
  - Change $write_bcc to default off
  * Docs:
  - Add a bit more documentation about sending
  - Clarify $write_bcc documentation.
  - Update documentation for raw size expando
  - docbook: set generate.consistent.ids to make generated html
    reproducible
  * Build:
  - fix build/tests for 32-bit arches
  - tests: fix test that would fail soon
  - tests: fix context for failing idna tests</changelog>
  <changelog author="Martin Rey &lt;mrey@suse.com&gt;" date="1584100800">- Update to 20200313:
  * Window layout
  - Sidebar is only visible when it's usable.
  * Features
  - UI: add number of old messages to sidebar_format
  - UI: support ISO 8601 calendar date
  - UI: fix commands that don?t need to have a non-empty mailbox
    to be valid
  - PGP: inform about successful decryption of inline PGP
    messages
  - PGP: try to infer the signing key from the From address
  - PGP: enable GPGMe by default
  - Notmuch: use query as name for vfolder-from-query
  - IMAP: add network traffic compression
    (COMPRESS=DEFLATE, RFC4978)
  - Header cache: add support for generic header cache
    compression
  * Bug Fixes
  - Fix uncollapse_jump
  - Only try to perform entire-thread on maildir/mh mailboxes
  - Fix crash in pager
  - Avoid logging single new lines at the end of header fields
  - Fix listing mailboxes
  - Do not recurse a non-threaded message
  - Fix initial window order
  - Fix leaks on IMAP error paths
  - Notmuch: compose(attach-message): support notmuch backend
  - Fix IMAP flag comparison code
  - Fix $move for IMAP mailboxes
  - Maildir: maildir_mbox_check_stats should only update mailbox
    stats if requested
  - Fix unmailboxes for virtual mailboxes
  - Maildir: sanitize filename before hashing
  - OAuth: if 'login' name isn't available use 'user'
  - Add error message on failed encryption
  - Fix a bunch of crashes
  - Force C locale for email date
  - Abort if run without a terminal
  * Changed Config
  - $crypt_use_gpgme - Now defaults to 'yes' (enabled)
  - $abort_backspace - Hitting backspace against an empty prompt
    aborts the prompt
  - $abort_key - String representation of key to abort prompts
  - $arrow_string - Use an custom string for arrow_cursor
  - $crypt_opportunistic_encrypt_strong_keys - Enable encryption
    only when strong a key is available
  - $header_cache_compress_dictionary - Filepath to dictionary
    for zstd compression
  - $header_cache_compress_level - Level of compression for
    method
  - $header_cache_compress_method - Enable generic hcache
    database compression
  - $imap_deflate - Compress network traffic
  - $smtp_user - Username for the SMTP server
  * Translations
  - 100% Lithuanian
  - 81% Spanish
  - 78% Russian
  * Build
  - Add libdebug
  - Rename public headers to lib.h
  - Create libcompress for compressed folders code
  * Code
  - Refactor Windows and Dialogs
  - Lots of code tidying
  - Refactor: mutt_addrlist_{search,write}
  - Lots of improvements to the Config code
  - Use Buffers more pervasively
  - Unify API function naming
  - Rename library shared headers
  - Refactor libconn gui dependencies
  - Refactor: init.[ch]
  - Refactor config to use subsets
  - Config: add path type
  - Remove backend deps from the connection code
  * Upstream
  - Allow ~b ~B ~h patterns in send2-hook
  - Rename smime oppenc mode parameter to get_keys_by_addr()
  - Add $crypt_opportunistic_encrypt_strong_keys config var
  - Fix crash when polling a closed ssl connection
  - Turn off auto-clear outside of autocrypt initialization
  - Add protected-headers="v1" to Content-Type when protecting
    headers
  - Fix segv in IMAP postponed menu caused by reopen_allow
  - Adding ISO 8601 calendar date
  - Fix $fcc_attach to not prompt in batch mode
  - Convert remaining mutt_encode_path() call to use struct
    Buffer
  - Fix rendering of replacement_char when Charset_is_utf8
  - Update to latest acutest.h</changelog>
  <changelog author="Martin Rey &lt;mrey@suse.com&gt;" date="1584705600">- Update to 20200320:
  * Bug Fixes
  - Fix COLUMNS env var
  - Fix sync after delete
  - Fix crash in notmuch
  - Fix sidebar indent
  - Fix emptying trash
  - Fix command line sending
  - Fix reading large address lists
  - Resolve symlinks only when necessary
  * Translations
  - lithuania 100% Lithuanian
  - es 96% Spanish
  * Docs
  - Include OpenSSL/LibreSSL/GnuTLS version in neomutt -v output
  - Fix case of GPGME and SQLite
  * Build
  - Create libcompress (lz4, zlib, zstd)
  - Create libhistory
  - Create libbcache
  - Move zstrm to libconn
  * Code
  - Add more test coverage
  - Rename magic to type
  - Use mutt_file_fopen() on config variables
  - Change commands to use intptr_t for data</changelog>
  <changelog author="Kai Liu &lt;kai.liu@suse.com&gt;" date="1590148800">- Update to 20200501:
  * Bug Fixes
  - Make sure buffers are initialized on error
  - fix(sidebar): use abbreviated path if possible
  * Translations
  - 100% Lithuanian
  * Docs
  - make header cache config more explicit
- Changes from 20200424:
  * Bug Fixes
  - Fix history corruption
  - Handle pretty much anything in a URL query part
  - Correctly parse escaped characters in header phrases
  - Fix crash reading received header
  - Fix sidebar indentation
  - Avoid crashing on failure to parse an IMAP mailbox
  - Maildir: handle deleted emails correctly
  - Ensure OP_NULL is always first
  * Translations
  - 100% Czech
  * Build
  - cirrus: enable pcre2, make pkgconf a special case
  - Fix finding pcre2 w/o pkgconf
  - build: tdb.h needs size_t, bring it in with stddef.h
- Changes from 20200417:
  * Features
  - Fluid layout for Compose Screen, see: vimeo.com/407231157
  - Trivial Database (TDB) header cache backend
  - RocksDB header cache backend
  - Add &lt;sidebar-first&gt; and &lt;sidebar-last&gt; functions
  * Bug Fixes
  - add error for CLI empty emails
  - Allow spaces and square brackets in paths
  - browser: fix hidden mailboxes
  - fix initial email display
  - notmuch: fix time window search.
  - fix resize bugs
  - notmuch: fix entire-thread: update current email pointer
  - sidebar: support indenting and shortening of names
  - Handle variables inside backticks in sidebar_whitelist
  - browser: fix mask regex error reporting
  * Translations
  - 100% Lithuanian
  - 99% Chinese (simplified)
  * Build
  - Use regexes for common parsing tasks: urls, dates
  - Add configure option --pcre2 -- Enable PCRE2 regular expressions
  - Add configure option --tdb -- Use TDB for the header cache
  - Add configure option --rocksdb -- Use RocksDB for the header cache
  - Create libstore (key/value backends)
  - Update to latest autosetup
  - Update to latest acutest.h
  - Rename doc/ directory to docs/
  - make: fix location of .Po dependency files
  - Change libcompress to be more universal
  - Fix test fails on ?32
  - fix uidvalidity to unsigned 32-bit int
  * Code
  - Increase test coverage
  - Fix memory leaks
  - Fix null checks
  * Upstream
  - Buffer refactoring
  - Fix use-after-free in mutt_str_replace()
  - Clarify PGP Pseudo-header S&lt;id&gt; duration
  - Try to respect MUTT_QUIET for IMAP contexts too
  - Limit recurse depth when parsing mime messages</changelog>
  <changelog author="Kai Liu &lt;kai.liu@suse.com&gt;" date="1593950400">- Update to 20200626:
  * Bug Fixes
  - Avoid opening the same hcache file twice
  - Re-open Mailbox after folder-hook
  - Fix the matching of the spoolfile Mailbox
  - Fix link-thread to link all tagged emails
  * Changed Config
  - Add $tunnel_is_secure config, defaulting to true
  * Upstream
  - Don't check IMAP PREAUTH encryption if $tunnel is in use
  - Add recommendation to use $ssl_force_tls
- Changes from 20200501:
  * Security
  - Abort GnuTLS certificate check if a cert in the chain is rejected
    CVE-2020-14154 bsc#1172906
  - TLS: clear data after a starttls acknowledgement
    CVE-2020-14954 bsc#1173197
  - Prevent possible IMAP MITM via PREAUTH response
    CVE-2020-14093 bsc#1172935
  * Features
  - add config operations +=/-= for number,long
  - Address book has a comment field
  - Query menu has a comment field
  * Contrib
    sample.neomuttrc-starter: Do not echo prompted password
  * Bug Fixes
  - make "news://" and "nntp://" schemes interchangeable
  - Fix CRLF to LF conversion in base64 decoding
  - Double comma in query
  - compose: fix redraw after history
  - Crash inside empty query menu
  - mmdf: fix creating new mailbox
  - mh: fix creating new mailbox
  - mbox: error out when an mbox/mmdf is a pipe
  - Fix list-reply by correct parsing of List-Post headers
  - Decode references according to RFC2047
  - fix tagged message count
  - hcache: fix keylen not being considered when building the full key
  - sidebar: fix path comparison
  - Don't mess with the original pattern when running IMAP searches
  - Handle IMAP "NO" resps by issuing a msg instead of failing badly
  - imap: use the connection delimiter if provided
  - Memory leaks
  * Changed Config
  - $alias_format default changed to include %c comment
  - $query_format default changed to include %e extra info
  * Translations
  - 100% Lithuanian
  - 84% French
  - Log the translation in use
  * Docs
  - Add missing commands unbind, unmacro to man pages
  * Build
  - Check size of long using LONG_MAX instead of __WORDSIZE
  - Allow ./configure to not record cflags
  - fix out-of-tree build
  - Avoid locating gdbm symbols in qdbm library
  * Code
  - Refactor unsafe TAILQ returns
  - add window notifications
  - flip negative ifs
  - Update to latest acutest.h
  - test: add store tests
  - test: add compression tests
  - graphviz: email
  - make more opcode info available
  - refactor: main_change_folder()
  - refactor: mutt_mailbox_next()
  - refactor: generate_body()
  - compress: add {min,max}_level to ComprOps
  - emphasise empty loops: "// do nothing"
  - prex: convert is_from() to use regex
  - Refactor IMAP's search routines</changelog>
  <changelog author="Kai Liu &lt;kai.liu@suse.com&gt;" date="1597492800">- Update to 20200814:
  * Notes
  - Add one-liner docs to config items
    See: neomutt -O -Q smart_wrap
  - Remove the built-in editor
    A large unused and unusable feature
  * Security
  - Add mitigation against DoS from thousands of parts
    boo#1179113
  * Features
  - Allow index-style searching in postpone menu
  - Open NeoMutt using a mailbox name
  - Add cd command to change the current working directory
  - Add tab-completion menu for patterns
  - Allow renaming existing mailboxes
  - Check for missing attachments in alternative parts
  - Add one-liner docs to config items
  * Bug Fixes
  - Fix logic in checking an empty From address
  - Fix Imap crash in cmd_parse_expunge()
  - Fix setting attributes with S-Lang
  - Fix: redrawing of $pager_index_lines
  - Fix progress percentage for syncing large mboxes
  - Fix sidebar drawing in presence of indentation + named mailboxes
  - Fix retrieval of drafts when "postponed" is not in the mailboxes list
  - Do not add comments to address group terminators
  - Fix alias sorting for degenerate addresses
  - Fix attaching emails
  - Create directories for nonexistent file hcache case
  - Avoid creating mailboxes for failed subscribes
  - Fix crash if rejecting cert
  * Changed Config
  - Add $copy_decode_weed, $pipe_decode_weed, $print_decode_weed
  - Change default of $crypt_protected_headers_subject to "..."
  - Add default keybindings to history-up/down
  * Translations
  - 100% Czech
  - 100% Spanish
  * Build
  - Allow building against Lua 5.4
  - Fix when sqlite3.h is missing
  * Docs
  - Add a brief section on stty to the manual
  - Update section "Terminal Keybindings" in the manual
  - Clarify PGP Pseudo-header S&lt;id&gt; duration
  * Code
  - Clean up String API
  - Make the Sidebar more independent
  - De-centralise the Config Variables
  - Refactor dialogs
  - Refactor: Help Bar generation
  - Make more APIs Context-free
  - Adjust the edata use in Maildir and Notmuch
  - Window refactoring
  - Convert libsend to use Config functions
  - Refactor notifications to reduce noise
  - Convert Keymaps to use STAILQ
  - Track currently selected email by msgid
  - Config: no backing global variable
  - Add events for key binding
  * Upstream
  - Fix imap postponed mailbox use-after-free error
  - Speed up thread sort when many long threads exist
  - Fix ~v tagging when switching to non-threaded sorting
  - Add message/global to the list of known "message" types
  - Print progress meter when copying/saving tagged messages
  - Remove ansi formatting from autoview generated quoted replies
  - Change postpone mode to write Date header too
  - Unstuff format=flowed</changelog>
  <changelog author="Kai Liu &lt;kai.liu@suse.com&gt;" date="1597665600">- Enable --zlib configure option explicitely. In version 20200814 if
  it's not enabled header cache compression will not be turned on,
  unlike in previous versions which would turn it on when zlib is
  detected.</changelog>
  <changelog author="Kai Liu &lt;kai.liu@suse.com&gt;" date="1597752000">- Fix sidebar mailbox name display problem. Patch from the yet to
  be merge upstream commit:
  https://github.com/neomutt/neomutt/commit/a6f91bc9c890581cff189e143d86e656cab6d2dc</changelog>
  <changelog author="Kai Liu &lt;kai.liu@suse.com&gt;" date="1598184000">- Update to 20200821:
  * Bug Fixes
  - fix maildir flag generation
  - fix query notmuch if file is missing
  - notmuch: don't abort sync on error
  - fix type checking for send config variables
  * Changed Config
  - $sidebar_format - Use %D rather than %B for named mailboxes
  * Translations
  - 96% Lithuanian
  - 90% Polish
- add neomutt-sidebar-abbreviate-shorten-what-user-sees.patch
  * fix(sidebar): abbreviate/shorten what user sees</changelog>
  <changelog author="Kai Liu &lt;kai.liu@suse.com&gt;" date="1605960000">- Update to 20201120. Address boo#1179035, CVE-2020-28896.
  * Security
  - imap: close connection on all failures
  * Features
  - alias: add function to Alias/Query dialogs
  - config: add validators for {imap,smtp,pop}_authenticators
  - config: warn when signature file is missing or not readable
  - smtp: support for native SMTP LOGIN auth mech
  - notmuch: show originating folder in index
  * Bug Fixes
  - sidebar: prevent the divider colour bleeding out
  - sidebar: fix &lt;sidebar-{next,prev}-new&gt;
  - notmuch: fix query for current email
  - restore shutdown-hook functionality
  - crash in reply-to
  - user-after-free in folder-hook
  - fix some leaks
  - fix application of limits to modified mailboxes
  - write Date header when postponing
  * Translations
  - 100% Lithuanian
  - 100% Czech
  - 70% Turkish
  * Docs
  - Document that $sort_alias affects the query menu
  * Build
  - improve ASAN flags
  - add SASL and S/MIME to --everything
  - fix contrib (un)install
  * Code
  - my_hdr compose screen notifications
  - add contracts to the MXAPI
  - maildir refactoring
  - further reduce the use of global variables
  * Upstream
  - Add $count_alternatives to count attachments inside alternatives
- Changes from 20200925
  * Features
  - Compose: display user-defined headers
  - Address Book / Query: live sorting
  - Address Book / Query: patterns for searching
  - Config: Add '+=' and '-=' operators for String Lists
  - Config: Add '+=' operator for Strings
  - Allow postfix query ':setenv NAME?' for env vars
  * Bug Fixes
  - Fix crash when searching with invalid regexes
  - Compose: Prevent infinite loop of send2-hooks
  - Fix sidebar on new/removed mailboxes
  - Restore indentation for named mailboxes
  - Prevent half-parsing an alias
  - Remove folder creation prompt for POP path
  - Show error if $message_cachedir doesn't point to a valid directory
  - Fix tracking LastDir in case of IMAP paths with Unicode characters
  - Make sure all mail gets applied the index limit
  - Add warnings to -Q query CLI option
  - Fix index tracking functionality
  * Changed Config
  - Add $compose_show_user_headers (yes)
  * Translations
  - 100% Czech
  - 100% Lithuanian
  - Split up usage strings
  * Build
  - Run shellcheck on hcachever.sh
  - Add the Address Sanitizer
  - Move compose files to lib under compose/
  - Move address config into libaddress
  - Update to latest acutest - fixes a memory leak in the unit tests
  * Code
  - Implement ARRAY API
  - Deglobalised the Config Sort functions
  - Refactor the Sidebar to be Event-Driven
  - Refactor the Color Event
  - Refactor the Commands list
  - Make ctx_update_tables private
  - Reduce the scope/deps of some Validator functions
  - Use the Email's IMAP UID instead of an increasing number as index
  - debug: log window focus
- Removed neomutt-sidebar-abbreviate-shorten-what-user-sees.patch.
  No longer needed.
- Misc spec file cleanups.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1605960001">- add upstream signing key and validate source signature</changelog>
  <changelog author="Kai Liu &lt;kai.liu@suse.com&gt;" date="1606478400">- Update to version 20201127:
  * Bug Fixes
  - Fix crash when saving an alias
  * Translations
  - 70% Russian
  * Code
  - Remove redundant function call</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1615204800">- update to 20210205:
  * Features
  - Add &lt;skip-headers&gt; to skip past message headers in pager
  - Add &lt;view-pager&gt; function to attachment menu
  * Bug Fixes
  - Fix detection of mbox files with new mail
  - Fix crash on collapsed thread
  - Fix group-chat-reply
  - Clear the message window on resize
  - Do not crash on return from shell-exec if there's no open mailbox
  - Abort IMAP open if condstore/qresync updates fetch fails
  - Fix smtp crash on invalid $smtp_authenticators list
  - Fix pager dropped input on screen resize
  - Fix mime forwarding
  - Check config after hooks
  - Always recreate a mailbox after folder-hook
  * Translations
  - 88% Slovakian
  * Docs
  - Adjust doc to explicitly mention $count_alternative
  - Restore correct "$sort_re" documentation
  - Clarify pattern completion
  - Man pages: Clear up "-H" and "-O"
  * Build
  - Update to latest acutest
  - Update to latest autosetup
  - Make the location of /tmp configurable</changelog>
  <changelog author="lmb &lt;lmb@suse.com&gt;" date="1616673600">- build: Enable pcre2 for regex matching (bsc#1183989)
- Add libprce2-devel as build dependency</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1619265600">- stop owning directories provided by filesystem (bsc#1184787)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1641384000">- update to 20211029 (bsc#1185705, CVE-2021-32055):
  * Notmuch: support separate database and mail roots without .notmuch
  * fix notmuch crash on open failure
  * fix crypto crash handling pgp keys
  * fix ncrypt/pgp file_get_size return check
  * fix restore case-insensitive header sort
  * fix pager redrawing of long lines
  * fix notmuch: check database dir for xapian dir
  * fix notmuch: update index count after &lt;entire-thread&gt;
  * fix protect hash table against empty keys
  * fix prevent real_subj being set but empty
  * fix leak when saving fcc
  * fix leak after &lt;edit-or-view-raw-message&gt;
  * fix leak after trash to hidden mailbox
  * fix leak restoring postponed emails
  * fix new mail notifications
  * fix pattern compilation error for ( !&gt;(~P) )
  * fix menu display on window resize
  * Stop batch mode emails with no argument or recipients
  * Add sanitize call in print mailcap function
  * fix hdr_order to use the longest match
  * fix (un)setenv to not return an error with unset env vars
  * fix Imap sync when closing a mailbox
  * fix segfault on OpenBSD current
  * sidebar: restore sidebar_spoolfile colour
  * fix assert when displaying a file from the browser
  * fix exec command in compose
  * fix check_stats for Notmuch mailboxes
  * Fallback: Open Notmuch database without config
  * fix gui hook commands on startup
  * threads: implement the $use_threads feature
  * https://neomutt.org/feature/use-threads
  * hooks: allow a -noregex param to folder and mbox hooks
  * mailing lists: implement list-(un)subscribe using RFC2369 headers
  * mailcap: implement x-neomutt-nowrap flag
  * pager: add $local_date_header option
  * imap, smtp: add support for authenticating using XOAUTH2
  * Allow &lt;sync-mailbox&gt; to fail quietly
  * imap: speed up server-side searches
  * pager: improve skip-quoted and skip-headers
  * notmuch: open database with user's configuration
  * notmuch: implement &lt;vfolder-window-reset&gt;
  * config: allow += modification of my_ variables
  * notmuch: tolerate file renames behind neomutt's back
  * pager: implement $pager_read_delay
  * notmuch: validate nm_query_window_timebase
  * notmuch: make $nm_record work in non-notmuch mailboxes
  * compose: add $greeting - a welcome message on top of emails
  * notmuch: show additional mail in query windows
  * imap: fix crash on external IMAP events
  * notmuch: handle missing libnotmuch version bumps
  * imap: add sanity check for qresync
  * notmuch: allow windows with 0 duration
  * index: fix index selection on &lt;collapse-all&gt;
  * imap: fix crash when sync'ing labels
  * search: fix searching by Message-Id in &lt;mark-message&gt;
  * threads: fix double sorting of threads
  * stats: don't check mailbox stats unless told
  * alias: fix crash on empty query
  * pager: honor mid-message config changes
  * mailbox: don't propagate read-only state across reopens
  * hcache: fix caching new labels in the header cache
  * crypto: set invalidity flags for gpgme/smime keys
  * notmuch: fix parsing of multiple type=
  * notmuch: validate $nm_default_url
  * messages: avoid unnecessary opening of messages
  * imap: fix seqset iterator when it ends in a comma
  * build: refuse to build without pcre2 when pcre2 is linked in ncurses</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1649592000">- update to 20220408:
  * Compose multipart emails
  * Fix screen mode after attempting decryption
  * imap: increase max size of oauth2 token
  * Fix autocrypt
  * Unify Alias/Query workflow
  * Fix colours
  * Say which file exists when saving attachments
  * Force SMTP authentication if `smtp_user` is set
  * Fix selecting the right email after limiting
  * Make sure we have enough memory for a new email
  * Don't overwrite with zeroes after unlinking the file
  * Fix crash when forwarding attachments
  * Fix help reformatting on window resize
  * Fix poll to use PollFdsCount and not PollFdsLen
  * regex: range check arrays strictly
  * Fix Coverity defects
  * Fix out of bounds write with long log lines
  * Apply `fast_reply` to 'to', 'cc', or 'bcc'
  * Prevent warning on empty emails
  * New default: `set rfc2047_parameters = yes`
  * 100% German
  * 100% Lithuanian
  * 100% Serbian
  * 100% Czech
  * 100% Turkish
  * 72% Hungarian
  * Improve header cache explanation
  * Improve description of some notmuch variables
  * Explain how timezones and `!`s work inside `%{}`, `%[]` and `%()`
  * Document config synonyms and deprecations
  * Create lots of GitHub Actions
  * Drop TravisCI
  * Add automated Fuzzing tests
  * Add automated ASAN tests
  * Create Dockers for building Centos/Fedora
  * Build fixes for Solaris 10
  * New libraries: browser, enter, envelope
  * New configure options: `--fuzzing` `--debug-color` `--debug-queue`
  * Split Index/Pager GUIs/functions
  * Add lots of function dispatchers
  * Eliminate `menu_loop()`
  * Refactor function opcodes
  * Refactor cursor setting
  * Unify Alias/Query functions
  * Refactor Compose/Envelope functions
  * Modernise the Colour handling
  * Refactor the Attachment View
  * Eliminate the global `Context`
  * Upgrade `mutt_get_field()`
  * Refactor the `color quoted` code
  * Fix lots of memory leaks
  * Refactor Index resolve code
  * Refactor PatternList parsing
  * Refactor Mailbox freeing
  * Improve key mapping
  * Factor out charset hooks
  * Expose mutt_file_seek API
  * Improve API of `strto*` wrappers
  * imap QRESYNC fixes
  * Allow an empty To: address prompt
  * Fix argc==0 handling
  * Don't queue IMAP close commands
  * Fix IMAP UTF-7 for code points &gt;= U+10000
  * Don't include inactive messages in msgset generation</changelog>
  <changelog author="Lars Marowsky-Bree &lt;lmb@suse.com&gt;" date="1653480000">- update to 20220429:
  * Bug Fixes
  * Do not crash on an invalid use_threads/sort combination
  * Fix: stuck browser cursor
  * Resolve (move) the cursor after &lt;edit-label&gt;
  * Index: fix menu size on new mail
  * Don't overlimit LMDB mmap size
  * OpenBSD y/n translation fix
  * Generic: split out OP_EXIT binding
  * Fix parsing of sendmail cmd
  * Fix: crash with menu_move_off=no
  * Newsrc: bugfix; nntp_user and nntp_pass ignored
  * Menu: ensure config changes cause a repaint
  * Mbox: fix sync duplicates
  * Make sure the index redraws all that's needed
  * Translations
  * 100% Chinese (Simplified)
  * 100% Czech
  * 100% German
  * 100% Hungarian
  * 100% Lithuanian
  * 100% Serbian
  * 100% Turkish
  * Docs
  * add missing pattern modifier ~I for external_search_command
  * Code
  * menu: eliminate custom_redraw()
  * modernise mixmaster
  * Kill global and Propagate display attach status through State-
- update to 20220415:
  * Security
  * Fix uudecode buffer overflow (CVE-2022-1328)
  * Features
  * Colours, colours, colours
  * Bug Fixes
  * Pager: fix pager_stop
  * Merge colours with normal
  * Color: disable mono command
  * Fix forwarding text attachments when honor_disposition is set
  * Pager: drop the nntp change-group bindings
  * Use mailbox_check flags coherently, add IMMEDIATE flag
  * Fix: tagging in attachment list
  * Fix: misalignment of mini-index
  * Make sure to update the menu size after a resort
  * Translations
  * 100% Hungarian
  * Build
  * Update acutest
  * Code
  * Unify pipe functions
  * Index: notify if navigation fails
  * Gui: set colour to be merged with normal
  * Fix: leak in tls_check_one_certificate()
  * Upstream
  * Flush iconv() in mutt_convert_string()
  * Fix integer overflow in mutt_convert_string()
  * Fix uudecode cleanup on unexpected eof</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655208000">- fix build for older dists</changelog>
</package>
<package pkgid="9075b4e3ec4371f47c4a50325fb60085f9ed0a6dc8e405bdc7e7a3ea29317ad4" name="netgen" arch="aarch64">
  <version epoch="0" ver="6.2.2105" rel="bp154.2.3.1"/>
  <changelog author="adrian@suse.de" date="1465819200">- Using source service to follow git master (pre-6.1)
- use new oce instead of OpenCASCADE
- enable openmpi
- use fixes for rpath from Johannes Obermayer
  Sun Jan 23 2014 Torben Hansen &lt;build at sciomnis dot com&gt;
- Changed to upstream version</changelog>
  <changelog author="adrian@suse.de" date="1485864000">- enable python for openSUSE Tumbleweed</changelog>
  <changelog author="adrian@suse.de" date="1501243200">- switch to OpenCASCADE 7.1.0 and newer boost</changelog>
  <changelog author="adrian@suse.de" date="1510056000">- switch to OpenCASCADE 7.2.0</changelog>
  <changelog author="adrian@suse.de" date="1512734400">- move include files into /usr/include/netgen/
- use -fno-strict-aliasing
- add some extra header wrapper files missed by FreeCAD</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1552910400">- update to version 6.2.1810
  obsoletes:
    allow_fine_curves.patch
    occ-pi-constant.patch
    do_stl_init.patch
- switch to cmake, obsoletes AM_PROG_AR.patch
- use obs_scm, obsoletes svnfetch.sh and netgen.sh</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1552910401">- Remove ldconfig calls since there are only dlopened plugins,
  no standard libraries.
- Wrap description.
- Use convenient %make_install, and run fdupes.</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1552910402">- switch to gcc7</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1552910403">- Correct License:, netgen has always been LGPL-2.1-only.
- Package License file.
- Remove boost BuildRequires:, it is not used at all.
- Guard Requires: occt-devel in devel package with bcond, so it
  does not get pulled in if netgen is built without OpenCascade.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1553169600">- Fix build on ARM and PPC, only include immintrin.h when SSE is available</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1614600000">- update to version 6.2.2101
  * no changelog provided
- Properly split package: libraries (as required by e.g FreeCAD),
  python-bindings, examples and standalone GUI.
- Drop upstream fix_build.patch
- Replace 0001-Allow-compilation-on-archs-beyond-x86.patch
  with -DUSE_NATIVE_ARCH=OFF
- Fix build:
  * Add 0001-Disable-backtrace-generation.patch, do not call "nm"
    or "addr2line" from library.
  * Add 0001-Set-explicit-OBJECT-library-type-for-internal-togl.patch
  * Add 0001-Throw-in-case-enum-value-is-unhandled.patch
  * Disable -Wl,--no-undefined, libs have circular dependencies
  * Add 0001-Fix-GetTimeCounter-for-Aarch64-variants.patch
- Enable Catch2 unittests, add
  0001-Optionally-use-system-provided-Catch2.patch</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1620648000">- Exclude all 32bit archs, no longer supported upstream (fails to
  build).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1643284800">- update to version 6.2.2105
  * no changelog provided
- Drop upstream 0001-Fix-GetTimeCounter-for-Aarch64-variants.patch
- Add patches:
  * 0001-Optionally-prefer-system-wide-pybind11.patch
  * 0001-Throw-Exception-when-shape-has-invalid-type.patch
  * 0001-Fix-signedness-for-ARM-Neon-mask-type.patch</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1644235200">- Fix RUNPATH on Leap 15.x</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1646395200">- Fix RUNPATH also for Leap/SLE 15.4, which now uses
  CMAKE_SKIP_INSTALL_RPATH=ON by default.</changelog>
</package>
<package pkgid="3fc4e507c9016e56312eef3ad6b101014931c831a87f9864ed4128e3ff4193f8" name="netgen" arch="ppc64le">
  <version epoch="0" ver="6.2.2105" rel="bp154.2.3.1"/>
  <changelog author="adrian@suse.de" date="1465819200">- Using source service to follow git master (pre-6.1)
- use new oce instead of OpenCASCADE
- enable openmpi
- use fixes for rpath from Johannes Obermayer
  Sun Jan 23 2014 Torben Hansen &lt;build at sciomnis dot com&gt;
- Changed to upstream version</changelog>
  <changelog author="adrian@suse.de" date="1485864000">- enable python for openSUSE Tumbleweed</changelog>
  <changelog author="adrian@suse.de" date="1501243200">- switch to OpenCASCADE 7.1.0 and newer boost</changelog>
  <changelog author="adrian@suse.de" date="1510056000">- switch to OpenCASCADE 7.2.0</changelog>
  <changelog author="adrian@suse.de" date="1512734400">- move include files into /usr/include/netgen/
- use -fno-strict-aliasing
- add some extra header wrapper files missed by FreeCAD</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1552910400">- update to version 6.2.1810
  obsoletes:
    allow_fine_curves.patch
    occ-pi-constant.patch
    do_stl_init.patch
- switch to cmake, obsoletes AM_PROG_AR.patch
- use obs_scm, obsoletes svnfetch.sh and netgen.sh</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1552910401">- Remove ldconfig calls since there are only dlopened plugins,
  no standard libraries.
- Wrap description.
- Use convenient %make_install, and run fdupes.</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1552910402">- switch to gcc7</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1552910403">- Correct License:, netgen has always been LGPL-2.1-only.
- Package License file.
- Remove boost BuildRequires:, it is not used at all.
- Guard Requires: occt-devel in devel package with bcond, so it
  does not get pulled in if netgen is built without OpenCascade.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1553169600">- Fix build on ARM and PPC, only include immintrin.h when SSE is available</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1614600000">- update to version 6.2.2101
  * no changelog provided
- Properly split package: libraries (as required by e.g FreeCAD),
  python-bindings, examples and standalone GUI.
- Drop upstream fix_build.patch
- Replace 0001-Allow-compilation-on-archs-beyond-x86.patch
  with -DUSE_NATIVE_ARCH=OFF
- Fix build:
  * Add 0001-Disable-backtrace-generation.patch, do not call "nm"
    or "addr2line" from library.
  * Add 0001-Set-explicit-OBJECT-library-type-for-internal-togl.patch
  * Add 0001-Throw-in-case-enum-value-is-unhandled.patch
  * Disable -Wl,--no-undefined, libs have circular dependencies
  * Add 0001-Fix-GetTimeCounter-for-Aarch64-variants.patch
- Enable Catch2 unittests, add
  0001-Optionally-use-system-provided-Catch2.patch</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1620648000">- Exclude all 32bit archs, no longer supported upstream (fails to
  build).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1643284800">- update to version 6.2.2105
  * no changelog provided
- Drop upstream 0001-Fix-GetTimeCounter-for-Aarch64-variants.patch
- Add patches:
  * 0001-Optionally-prefer-system-wide-pybind11.patch
  * 0001-Throw-Exception-when-shape-has-invalid-type.patch
  * 0001-Fix-signedness-for-ARM-Neon-mask-type.patch</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1644235200">- Fix RUNPATH on Leap 15.x</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1646395200">- Fix RUNPATH also for Leap/SLE 15.4, which now uses
  CMAKE_SKIP_INSTALL_RPATH=ON by default.</changelog>
</package>
<package pkgid="1592f4015aff26e545268276d732835aef560527d541af8dc137269e081cbc07" name="netgen" arch="s390x">
  <version epoch="0" ver="6.2.2105" rel="bp154.2.3.1"/>
  <changelog author="adrian@suse.de" date="1465819200">- Using source service to follow git master (pre-6.1)
- use new oce instead of OpenCASCADE
- enable openmpi
- use fixes for rpath from Johannes Obermayer
  Sun Jan 23 2014 Torben Hansen &lt;build at sciomnis dot com&gt;
- Changed to upstream version</changelog>
  <changelog author="adrian@suse.de" date="1485864000">- enable python for openSUSE Tumbleweed</changelog>
  <changelog author="adrian@suse.de" date="1501243200">- switch to OpenCASCADE 7.1.0 and newer boost</changelog>
  <changelog author="adrian@suse.de" date="1510056000">- switch to OpenCASCADE 7.2.0</changelog>
  <changelog author="adrian@suse.de" date="1512734400">- move include files into /usr/include/netgen/
- use -fno-strict-aliasing
- add some extra header wrapper files missed by FreeCAD</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1552910400">- update to version 6.2.1810
  obsoletes:
    allow_fine_curves.patch
    occ-pi-constant.patch
    do_stl_init.patch
- switch to cmake, obsoletes AM_PROG_AR.patch
- use obs_scm, obsoletes svnfetch.sh and netgen.sh</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1552910401">- Remove ldconfig calls since there are only dlopened plugins,
  no standard libraries.
- Wrap description.
- Use convenient %make_install, and run fdupes.</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1552910402">- switch to gcc7</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1552910403">- Correct License:, netgen has always been LGPL-2.1-only.
- Package License file.
- Remove boost BuildRequires:, it is not used at all.
- Guard Requires: occt-devel in devel package with bcond, so it
  does not get pulled in if netgen is built without OpenCascade.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1553169600">- Fix build on ARM and PPC, only include immintrin.h when SSE is available</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1614600000">- update to version 6.2.2101
  * no changelog provided
- Properly split package: libraries (as required by e.g FreeCAD),
  python-bindings, examples and standalone GUI.
- Drop upstream fix_build.patch
- Replace 0001-Allow-compilation-on-archs-beyond-x86.patch
  with -DUSE_NATIVE_ARCH=OFF
- Fix build:
  * Add 0001-Disable-backtrace-generation.patch, do not call "nm"
    or "addr2line" from library.
  * Add 0001-Set-explicit-OBJECT-library-type-for-internal-togl.patch
  * Add 0001-Throw-in-case-enum-value-is-unhandled.patch
  * Disable -Wl,--no-undefined, libs have circular dependencies
  * Add 0001-Fix-GetTimeCounter-for-Aarch64-variants.patch
- Enable Catch2 unittests, add
  0001-Optionally-use-system-provided-Catch2.patch</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1620648000">- Exclude all 32bit archs, no longer supported upstream (fails to
  build).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1643284800">- update to version 6.2.2105
  * no changelog provided
- Drop upstream 0001-Fix-GetTimeCounter-for-Aarch64-variants.patch
- Add patches:
  * 0001-Optionally-prefer-system-wide-pybind11.patch
  * 0001-Throw-Exception-when-shape-has-invalid-type.patch
  * 0001-Fix-signedness-for-ARM-Neon-mask-type.patch</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1644235200">- Fix RUNPATH on Leap 15.x</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1646395200">- Fix RUNPATH also for Leap/SLE 15.4, which now uses
  CMAKE_SKIP_INSTALL_RPATH=ON by default.</changelog>
</package>
<package pkgid="b3e33d5cd7adf606731e882f7c33f9be5a44072c0c27e6b830489272979f533c" name="netgen" arch="src">
  <version epoch="0" ver="6.2.2105" rel="bp154.2.3.1"/>
  <changelog author="andrea@opensuse.org" date="1255694400">- new upstream version 4.9.11</changelog>
  <changelog author="Werner Hoch &lt;werner.ho@gmx.de&gt;" date="1306843200">- new version 4.9.13
- added patch occ-6.5.0.patch taken from debian package
  Sat Mar 27 16:46:40 CET 2010
- fixed compiling errors on gcc44</changelog>
  <changelog author="scorot@free.fr" date="1332072000">- remove unneeded lam and lam-devel package requirement</changelog>
  <changelog author="jw@suse.com" date="1362916800">- update to 5.0.0
  * upstream changelog is empty
- obsolete fully upstreamed occ-6.5.0 patch
- patching ng/Makefile to find -lTogl1.7
- improved netgen.sh to allow parameters and preserve cwd.
- allow_fine_curves.patch added, finer defaults, extended slider range</changelog>
  <changelog author="jw@suse.com" date="1362916801">- /usr/bin/netgen was a policy violation, -&gt; /usr/lib/netgen
- Pulling git snapshot 5.1-dev, as the official 5.0.0 release only compiles
  with _MSC_VER; Ng_stl_Init() missing otherwise
- added full autoconf tooling to spec-file, sigh...
- renamed /usr/bin/netgen.sh to /usr/bin/netgen</changelog>
  <changelog author="adrian@suse.de" date="1465819200">- Using source service to follow git master (pre-6.1)
- use new oce instead of OpenCASCADE
- enable openmpi
- use fixes for rpath from Johannes Obermayer
  Sun Jan 23 2014 Torben Hansen &lt;build at sciomnis dot com&gt;
- Changed to upstream version</changelog>
  <changelog author="adrian@suse.de" date="1485864000">- enable python for openSUSE Tumbleweed</changelog>
  <changelog author="adrian@suse.de" date="1501243200">- switch to OpenCASCADE 7.1.0 and newer boost</changelog>
  <changelog author="adrian@suse.de" date="1510056000">- switch to OpenCASCADE 7.2.0</changelog>
  <changelog author="adrian@suse.de" date="1512734400">- move include files into /usr/include/netgen/
- use -fno-strict-aliasing
- add some extra header wrapper files missed by FreeCAD</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1552910400">- update to version 6.2.1810
  obsoletes:
    allow_fine_curves.patch
    occ-pi-constant.patch
    do_stl_init.patch
- switch to cmake, obsoletes AM_PROG_AR.patch
- use obs_scm, obsoletes svnfetch.sh and netgen.sh</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1552910401">- Remove ldconfig calls since there are only dlopened plugins,
  no standard libraries.
- Wrap description.
- Use convenient %make_install, and run fdupes.</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1552910402">- switch to gcc7</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1552910403">- Correct License:, netgen has always been LGPL-2.1-only.
- Package License file.
- Remove boost BuildRequires:, it is not used at all.
- Guard Requires: occt-devel in devel package with bcond, so it
  does not get pulled in if netgen is built without OpenCascade.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1553169600">- Fix build on ARM and PPC, only include immintrin.h when SSE is available</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1614600000">- update to version 6.2.2101
  * no changelog provided
- Properly split package: libraries (as required by e.g FreeCAD),
  python-bindings, examples and standalone GUI.
- Drop upstream fix_build.patch
- Replace 0001-Allow-compilation-on-archs-beyond-x86.patch
  with -DUSE_NATIVE_ARCH=OFF
- Fix build:
  * Add 0001-Disable-backtrace-generation.patch, do not call "nm"
    or "addr2line" from library.
  * Add 0001-Set-explicit-OBJECT-library-type-for-internal-togl.patch
  * Add 0001-Throw-in-case-enum-value-is-unhandled.patch
  * Disable -Wl,--no-undefined, libs have circular dependencies
  * Add 0001-Fix-GetTimeCounter-for-Aarch64-variants.patch
- Enable Catch2 unittests, add
  0001-Optionally-use-system-provided-Catch2.patch</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1620648000">- Exclude all 32bit archs, no longer supported upstream (fails to
  build).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1643284800">- update to version 6.2.2105
  * no changelog provided
- Drop upstream 0001-Fix-GetTimeCounter-for-Aarch64-variants.patch
- Add patches:
  * 0001-Optionally-prefer-system-wide-pybind11.patch
  * 0001-Throw-Exception-when-shape-has-invalid-type.patch
  * 0001-Fix-signedness-for-ARM-Neon-mask-type.patch</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1644235200">- Fix RUNPATH on Leap 15.x</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1646395200">- Fix RUNPATH also for Leap/SLE 15.4, which now uses
  CMAKE_SKIP_INSTALL_RPATH=ON by default.</changelog>
</package>
<package pkgid="7388dcacb6d2a390adf6dec32ca9b9ae15125f2106b502a8bd9b0ae701e60f31" name="netgen" arch="x86_64">
  <version epoch="0" ver="6.2.2105" rel="bp154.2.3.1"/>
  <changelog author="adrian@suse.de" date="1465819200">- Using source service to follow git master (pre-6.1)
- use new oce instead of OpenCASCADE
- enable openmpi
- use fixes for rpath from Johannes Obermayer
  Sun Jan 23 2014 Torben Hansen &lt;build at sciomnis dot com&gt;
- Changed to upstream version</changelog>
  <changelog author="adrian@suse.de" date="1485864000">- enable python for openSUSE Tumbleweed</changelog>
  <changelog author="adrian@suse.de" date="1501243200">- switch to OpenCASCADE 7.1.0 and newer boost</changelog>
  <changelog author="adrian@suse.de" date="1510056000">- switch to OpenCASCADE 7.2.0</changelog>
  <changelog author="adrian@suse.de" date="1512734400">- move include files into /usr/include/netgen/
- use -fno-strict-aliasing
- add some extra header wrapper files missed by FreeCAD</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1552910400">- update to version 6.2.1810
  obsoletes:
    allow_fine_curves.patch
    occ-pi-constant.patch
    do_stl_init.patch
- switch to cmake, obsoletes AM_PROG_AR.patch
- use obs_scm, obsoletes svnfetch.sh and netgen.sh</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1552910401">- Remove ldconfig calls since there are only dlopened plugins,
  no standard libraries.
- Wrap description.
- Use convenient %make_install, and run fdupes.</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1552910402">- switch to gcc7</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1552910403">- Correct License:, netgen has always been LGPL-2.1-only.
- Package License file.
- Remove boost BuildRequires:, it is not used at all.
- Guard Requires: occt-devel in devel package with bcond, so it
  does not get pulled in if netgen is built without OpenCascade.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1553169600">- Fix build on ARM and PPC, only include immintrin.h when SSE is available</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1614600000">- update to version 6.2.2101
  * no changelog provided
- Properly split package: libraries (as required by e.g FreeCAD),
  python-bindings, examples and standalone GUI.
- Drop upstream fix_build.patch
- Replace 0001-Allow-compilation-on-archs-beyond-x86.patch
  with -DUSE_NATIVE_ARCH=OFF
- Fix build:
  * Add 0001-Disable-backtrace-generation.patch, do not call "nm"
    or "addr2line" from library.
  * Add 0001-Set-explicit-OBJECT-library-type-for-internal-togl.patch
  * Add 0001-Throw-in-case-enum-value-is-unhandled.patch
  * Disable -Wl,--no-undefined, libs have circular dependencies
  * Add 0001-Fix-GetTimeCounter-for-Aarch64-variants.patch
- Enable Catch2 unittests, add
  0001-Optionally-use-system-provided-Catch2.patch</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1620648000">- Exclude all 32bit archs, no longer supported upstream (fails to
  build).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1643284800">- update to version 6.2.2105
  * no changelog provided
- Drop upstream 0001-Fix-GetTimeCounter-for-Aarch64-variants.patch
- Add patches:
  * 0001-Optionally-prefer-system-wide-pybind11.patch
  * 0001-Throw-Exception-when-shape-has-invalid-type.patch
  * 0001-Fix-signedness-for-ARM-Neon-mask-type.patch</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1644235200">- Fix RUNPATH on Leap 15.x</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1646395200">- Fix RUNPATH also for Leap/SLE 15.4, which now uses
  CMAKE_SKIP_INSTALL_RPATH=ON by default.</changelog>
</package>
<package pkgid="82836700d276b15bc8e83ca1c2bf1f1221c3099f083f129a0dc27926c56be86d" name="netgen-devel" arch="aarch64">
  <version epoch="0" ver="6.2.2105" rel="bp154.2.3.1"/>
  <changelog author="adrian@suse.de" date="1465819200">- Using source service to follow git master (pre-6.1)
- use new oce instead of OpenCASCADE
- enable openmpi
- use fixes for rpath from Johannes Obermayer
  Sun Jan 23 2014 Torben Hansen &lt;build at sciomnis dot com&gt;
- Changed to upstream version</changelog>
  <changelog author="adrian@suse.de" date="1485864000">- enable python for openSUSE Tumbleweed</changelog>
  <changelog author="adrian@suse.de" date="1501243200">- switch to OpenCASCADE 7.1.0 and newer boost</changelog>
  <changelog author="adrian@suse.de" date="1510056000">- switch to OpenCASCADE 7.2.0</changelog>
  <changelog author="adrian@suse.de" date="1512734400">- move include files into /usr/include/netgen/
- use -fno-strict-aliasing
- add some extra header wrapper files missed by FreeCAD</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1552910400">- update to version 6.2.1810
  obsoletes:
    allow_fine_curves.patch
    occ-pi-constant.patch
    do_stl_init.patch
- switch to cmake, obsoletes AM_PROG_AR.patch
- use obs_scm, obsoletes svnfetch.sh and netgen.sh</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1552910401">- Remove ldconfig calls since there are only dlopened plugins,
  no standard libraries.
- Wrap description.
- Use convenient %make_install, and run fdupes.</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1552910402">- switch to gcc7</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1552910403">- Correct License:, netgen has always been LGPL-2.1-only.
- Package License file.
- Remove boost BuildRequires:, it is not used at all.
- Guard Requires: occt-devel in devel package with bcond, so it
  does not get pulled in if netgen is built without OpenCascade.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1553169600">- Fix build on ARM and PPC, only include immintrin.h when SSE is available</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1614600000">- update to version 6.2.2101
  * no changelog provided
- Properly split package: libraries (as required by e.g FreeCAD),
  python-bindings, examples and standalone GUI.
- Drop upstream fix_build.patch
- Replace 0001-Allow-compilation-on-archs-beyond-x86.patch
  with -DUSE_NATIVE_ARCH=OFF
- Fix build:
  * Add 0001-Disable-backtrace-generation.patch, do not call "nm"
    or "addr2line" from library.
  * Add 0001-Set-explicit-OBJECT-library-type-for-internal-togl.patch
  * Add 0001-Throw-in-case-enum-value-is-unhandled.patch
  * Disable -Wl,--no-undefined, libs have circular dependencies
  * Add 0001-Fix-GetTimeCounter-for-Aarch64-variants.patch
- Enable Catch2 unittests, add
  0001-Optionally-use-system-provided-Catch2.patch</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1620648000">- Exclude all 32bit archs, no longer supported upstream (fails to
  build).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1643284800">- update to version 6.2.2105
  * no changelog provided
- Drop upstream 0001-Fix-GetTimeCounter-for-Aarch64-variants.patch
- Add patches:
  * 0001-Optionally-prefer-system-wide-pybind11.patch
  * 0001-Throw-Exception-when-shape-has-invalid-type.patch
  * 0001-Fix-signedness-for-ARM-Neon-mask-type.patch</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1644235200">- Fix RUNPATH on Leap 15.x</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1646395200">- Fix RUNPATH also for Leap/SLE 15.4, which now uses
  CMAKE_SKIP_INSTALL_RPATH=ON by default.</changelog>
</package>
<package pkgid="bdbee8319ccb8639a8923def9ef11434a1702086f307146477ed5c37302610ea" name="netgen-devel" arch="ppc64le">
  <version epoch="0" ver="6.2.2105" rel="bp154.2.3.1"/>
  <changelog author="adrian@suse.de" date="1465819200">- Using source service to follow git master (pre-6.1)
- use new oce instead of OpenCASCADE
- enable openmpi
- use fixes for rpath from Johannes Obermayer
  Sun Jan 23 2014 Torben Hansen &lt;build at sciomnis dot com&gt;
- Changed to upstream version</changelog>
  <changelog author="adrian@suse.de" date="1485864000">- enable python for openSUSE Tumbleweed</changelog>
  <changelog author="adrian@suse.de" date="1501243200">- switch to OpenCASCADE 7.1.0 and newer boost</changelog>
  <changelog author="adrian@suse.de" date="1510056000">- switch to OpenCASCADE 7.2.0</changelog>
  <changelog author="adrian@suse.de" date="1512734400">- move include files into /usr/include/netgen/
- use -fno-strict-aliasing
- add some extra header wrapper files missed by FreeCAD</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1552910400">- update to version 6.2.1810
  obsoletes:
    allow_fine_curves.patch
    occ-pi-constant.patch
    do_stl_init.patch
- switch to cmake, obsoletes AM_PROG_AR.patch
- use obs_scm, obsoletes svnfetch.sh and netgen.sh</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1552910401">- Remove ldconfig calls since there are only dlopened plugins,
  no standard libraries.
- Wrap description.
- Use convenient %make_install, and run fdupes.</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1552910402">- switch to gcc7</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1552910403">- Correct License:, netgen has always been LGPL-2.1-only.
- Package License file.
- Remove boost BuildRequires:, it is not used at all.
- Guard Requires: occt-devel in devel package with bcond, so it
  does not get pulled in if netgen is built without OpenCascade.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1553169600">- Fix build on ARM and PPC, only include immintrin.h when SSE is available</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1614600000">- update to version 6.2.2101
  * no changelog provided
- Properly split package: libraries (as required by e.g FreeCAD),
  python-bindings, examples and standalone GUI.
- Drop upstream fix_build.patch
- Replace 0001-Allow-compilation-on-archs-beyond-x86.patch
  with -DUSE_NATIVE_ARCH=OFF
- Fix build:
  * Add 0001-Disable-backtrace-generation.patch, do not call "nm"
    or "addr2line" from library.
  * Add 0001-Set-explicit-OBJECT-library-type-for-internal-togl.patch
  * Add 0001-Throw-in-case-enum-value-is-unhandled.patch
  * Disable -Wl,--no-undefined, libs have circular dependencies
  * Add 0001-Fix-GetTimeCounter-for-Aarch64-variants.patch
- Enable Catch2 unittests, add
  0001-Optionally-use-system-provided-Catch2.patch</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1620648000">- Exclude all 32bit archs, no longer supported upstream (fails to
  build).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1643284800">- update to version 6.2.2105
  * no changelog provided
- Drop upstream 0001-Fix-GetTimeCounter-for-Aarch64-variants.patch
- Add patches:
  * 0001-Optionally-prefer-system-wide-pybind11.patch
  * 0001-Throw-Exception-when-shape-has-invalid-type.patch
  * 0001-Fix-signedness-for-ARM-Neon-mask-type.patch</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1644235200">- Fix RUNPATH on Leap 15.x</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1646395200">- Fix RUNPATH also for Leap/SLE 15.4, which now uses
  CMAKE_SKIP_INSTALL_RPATH=ON by default.</changelog>
</package>
<package pkgid="bc1f013ea073feb2e21041183a8abab89fb4e78e3653c95169b588fc6a808e55" name="netgen-devel" arch="s390x">
  <version epoch="0" ver="6.2.2105" rel="bp154.2.3.1"/>
  <changelog author="adrian@suse.de" date="1465819200">- Using source service to follow git master (pre-6.1)
- use new oce instead of OpenCASCADE
- enable openmpi
- use fixes for rpath from Johannes Obermayer
  Sun Jan 23 2014 Torben Hansen &lt;build at sciomnis dot com&gt;
- Changed to upstream version</changelog>
  <changelog author="adrian@suse.de" date="1485864000">- enable python for openSUSE Tumbleweed</changelog>
  <changelog author="adrian@suse.de" date="1501243200">- switch to OpenCASCADE 7.1.0 and newer boost</changelog>
  <changelog author="adrian@suse.de" date="1510056000">- switch to OpenCASCADE 7.2.0</changelog>
  <changelog author="adrian@suse.de" date="1512734400">- move include files into /usr/include/netgen/
- use -fno-strict-aliasing
- add some extra header wrapper files missed by FreeCAD</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1552910400">- update to version 6.2.1810
  obsoletes:
    allow_fine_curves.patch
    occ-pi-constant.patch
    do_stl_init.patch
- switch to cmake, obsoletes AM_PROG_AR.patch
- use obs_scm, obsoletes svnfetch.sh and netgen.sh</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1552910401">- Remove ldconfig calls since there are only dlopened plugins,
  no standard libraries.
- Wrap description.
- Use convenient %make_install, and run fdupes.</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1552910402">- switch to gcc7</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1552910403">- Correct License:, netgen has always been LGPL-2.1-only.
- Package License file.
- Remove boost BuildRequires:, it is not used at all.
- Guard Requires: occt-devel in devel package with bcond, so it
  does not get pulled in if netgen is built without OpenCascade.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1553169600">- Fix build on ARM and PPC, only include immintrin.h when SSE is available</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1614600000">- update to version 6.2.2101
  * no changelog provided
- Properly split package: libraries (as required by e.g FreeCAD),
  python-bindings, examples and standalone GUI.
- Drop upstream fix_build.patch
- Replace 0001-Allow-compilation-on-archs-beyond-x86.patch
  with -DUSE_NATIVE_ARCH=OFF
- Fix build:
  * Add 0001-Disable-backtrace-generation.patch, do not call "nm"
    or "addr2line" from library.
  * Add 0001-Set-explicit-OBJECT-library-type-for-internal-togl.patch
  * Add 0001-Throw-in-case-enum-value-is-unhandled.patch
  * Disable -Wl,--no-undefined, libs have circular dependencies
  * Add 0001-Fix-GetTimeCounter-for-Aarch64-variants.patch
- Enable Catch2 unittests, add
  0001-Optionally-use-system-provided-Catch2.patch</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1620648000">- Exclude all 32bit archs, no longer supported upstream (fails to
  build).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1643284800">- update to version 6.2.2105
  * no changelog provided
- Drop upstream 0001-Fix-GetTimeCounter-for-Aarch64-variants.patch
- Add patches:
  * 0001-Optionally-prefer-system-wide-pybind11.patch
  * 0001-Throw-Exception-when-shape-has-invalid-type.patch
  * 0001-Fix-signedness-for-ARM-Neon-mask-type.patch</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1644235200">- Fix RUNPATH on Leap 15.x</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1646395200">- Fix RUNPATH also for Leap/SLE 15.4, which now uses
  CMAKE_SKIP_INSTALL_RPATH=ON by default.</changelog>
</package>
<package pkgid="4a842ccb20d0dbe89ea3659c1aa37944ae423b7f249b9cc8ceb00592edb246cc" name="netgen-devel" arch="x86_64">
  <version epoch="0" ver="6.2.2105" rel="bp154.2.3.1"/>
  <changelog author="adrian@suse.de" date="1465819200">- Using source service to follow git master (pre-6.1)
- use new oce instead of OpenCASCADE
- enable openmpi
- use fixes for rpath from Johannes Obermayer
  Sun Jan 23 2014 Torben Hansen &lt;build at sciomnis dot com&gt;
- Changed to upstream version</changelog>
  <changelog author="adrian@suse.de" date="1485864000">- enable python for openSUSE Tumbleweed</changelog>
  <changelog author="adrian@suse.de" date="1501243200">- switch to OpenCASCADE 7.1.0 and newer boost</changelog>
  <changelog author="adrian@suse.de" date="1510056000">- switch to OpenCASCADE 7.2.0</changelog>
  <changelog author="adrian@suse.de" date="1512734400">- move include files into /usr/include/netgen/
- use -fno-strict-aliasing
- add some extra header wrapper files missed by FreeCAD</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1552910400">- update to version 6.2.1810
  obsoletes:
    allow_fine_curves.patch
    occ-pi-constant.patch
    do_stl_init.patch
- switch to cmake, obsoletes AM_PROG_AR.patch
- use obs_scm, obsoletes svnfetch.sh and netgen.sh</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1552910401">- Remove ldconfig calls since there are only dlopened plugins,
  no standard libraries.
- Wrap description.
- Use convenient %make_install, and run fdupes.</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1552910402">- switch to gcc7</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1552910403">- Correct License:, netgen has always been LGPL-2.1-only.
- Package License file.
- Remove boost BuildRequires:, it is not used at all.
- Guard Requires: occt-devel in devel package with bcond, so it
  does not get pulled in if netgen is built without OpenCascade.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1553169600">- Fix build on ARM and PPC, only include immintrin.h when SSE is available</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1614600000">- update to version 6.2.2101
  * no changelog provided
- Properly split package: libraries (as required by e.g FreeCAD),
  python-bindings, examples and standalone GUI.
- Drop upstream fix_build.patch
- Replace 0001-Allow-compilation-on-archs-beyond-x86.patch
  with -DUSE_NATIVE_ARCH=OFF
- Fix build:
  * Add 0001-Disable-backtrace-generation.patch, do not call "nm"
    or "addr2line" from library.
  * Add 0001-Set-explicit-OBJECT-library-type-for-internal-togl.patch
  * Add 0001-Throw-in-case-enum-value-is-unhandled.patch
  * Disable -Wl,--no-undefined, libs have circular dependencies
  * Add 0001-Fix-GetTimeCounter-for-Aarch64-variants.patch
- Enable Catch2 unittests, add
  0001-Optionally-use-system-provided-Catch2.patch</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1620648000">- Exclude all 32bit archs, no longer supported upstream (fails to
  build).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1643284800">- update to version 6.2.2105
  * no changelog provided
- Drop upstream 0001-Fix-GetTimeCounter-for-Aarch64-variants.patch
- Add patches:
  * 0001-Optionally-prefer-system-wide-pybind11.patch
  * 0001-Throw-Exception-when-shape-has-invalid-type.patch
  * 0001-Fix-signedness-for-ARM-Neon-mask-type.patch</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1644235200">- Fix RUNPATH on Leap 15.x</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1646395200">- Fix RUNPATH also for Leap/SLE 15.4, which now uses
  CMAKE_SKIP_INSTALL_RPATH=ON by default.</changelog>
</package>
<package pkgid="33853bdcfc6179b460a438c3b8845cf9da30b73eb7c8133a2ffa2572f6e24bd8" name="netgen-examples" arch="noarch">
  <version epoch="0" ver="6.2.2105" rel="bp154.2.3.1"/>
  <changelog author="adrian@suse.de" date="1465819200">- Using source service to follow git master (pre-6.1)
- use new oce instead of OpenCASCADE
- enable openmpi
- use fixes for rpath from Johannes Obermayer
  Sun Jan 23 2014 Torben Hansen &lt;build at sciomnis dot com&gt;
- Changed to upstream version</changelog>
  <changelog author="adrian@suse.de" date="1485864000">- enable python for openSUSE Tumbleweed</changelog>
  <changelog author="adrian@suse.de" date="1501243200">- switch to OpenCASCADE 7.1.0 and newer boost</changelog>
  <changelog author="adrian@suse.de" date="1510056000">- switch to OpenCASCADE 7.2.0</changelog>
  <changelog author="adrian@suse.de" date="1512734400">- move include files into /usr/include/netgen/
- use -fno-strict-aliasing
- add some extra header wrapper files missed by FreeCAD</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1552910400">- update to version 6.2.1810
  obsoletes:
    allow_fine_curves.patch
    occ-pi-constant.patch
    do_stl_init.patch
- switch to cmake, obsoletes AM_PROG_AR.patch
- use obs_scm, obsoletes svnfetch.sh and netgen.sh</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1552910401">- Remove ldconfig calls since there are only dlopened plugins,
  no standard libraries.
- Wrap description.
- Use convenient %make_install, and run fdupes.</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1552910402">- switch to gcc7</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1552910403">- Correct License:, netgen has always been LGPL-2.1-only.
- Package License file.
- Remove boost BuildRequires:, it is not used at all.
- Guard Requires: occt-devel in devel package with bcond, so it
  does not get pulled in if netgen is built without OpenCascade.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1553169600">- Fix build on ARM and PPC, only include immintrin.h when SSE is available</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1614600000">- update to version 6.2.2101
  * no changelog provided
- Properly split package: libraries (as required by e.g FreeCAD),
  python-bindings, examples and standalone GUI.
- Drop upstream fix_build.patch
- Replace 0001-Allow-compilation-on-archs-beyond-x86.patch
  with -DUSE_NATIVE_ARCH=OFF
- Fix build:
  * Add 0001-Disable-backtrace-generation.patch, do not call "nm"
    or "addr2line" from library.
  * Add 0001-Set-explicit-OBJECT-library-type-for-internal-togl.patch
  * Add 0001-Throw-in-case-enum-value-is-unhandled.patch
  * Disable -Wl,--no-undefined, libs have circular dependencies
  * Add 0001-Fix-GetTimeCounter-for-Aarch64-variants.patch
- Enable Catch2 unittests, add
  0001-Optionally-use-system-provided-Catch2.patch</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1620648000">- Exclude all 32bit archs, no longer supported upstream (fails to
  build).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1643284800">- update to version 6.2.2105
  * no changelog provided
- Drop upstream 0001-Fix-GetTimeCounter-for-Aarch64-variants.patch
- Add patches:
  * 0001-Optionally-prefer-system-wide-pybind11.patch
  * 0001-Throw-Exception-when-shape-has-invalid-type.patch
  * 0001-Fix-signedness-for-ARM-Neon-mask-type.patch</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1644235200">- Fix RUNPATH on Leap 15.x</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1646395200">- Fix RUNPATH also for Leap/SLE 15.4, which now uses
  CMAKE_SKIP_INSTALL_RPATH=ON by default.</changelog>
</package>
<package pkgid="1b3507e304e67decb91aa232cdb0ca92b3849c2e0955cf5ba3682348f7641d45" name="netgen-libs" arch="aarch64">
  <version epoch="0" ver="6.2.2105" rel="bp154.2.3.1"/>
  <changelog author="adrian@suse.de" date="1465819200">- Using source service to follow git master (pre-6.1)
- use new oce instead of OpenCASCADE
- enable openmpi
- use fixes for rpath from Johannes Obermayer
  Sun Jan 23 2014 Torben Hansen &lt;build at sciomnis dot com&gt;
- Changed to upstream version</changelog>
  <changelog author="adrian@suse.de" date="1485864000">- enable python for openSUSE Tumbleweed</changelog>
  <changelog author="adrian@suse.de" date="1501243200">- switch to OpenCASCADE 7.1.0 and newer boost</changelog>
  <changelog author="adrian@suse.de" date="1510056000">- switch to OpenCASCADE 7.2.0</changelog>
  <changelog author="adrian@suse.de" date="1512734400">- move include files into /usr/include/netgen/
- use -fno-strict-aliasing
- add some extra header wrapper files missed by FreeCAD</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1552910400">- update to version 6.2.1810
  obsoletes:
    allow_fine_curves.patch
    occ-pi-constant.patch
    do_stl_init.patch
- switch to cmake, obsoletes AM_PROG_AR.patch
- use obs_scm, obsoletes svnfetch.sh and netgen.sh</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1552910401">- Remove ldconfig calls since there are only dlopened plugins,
  no standard libraries.
- Wrap description.
- Use convenient %make_install, and run fdupes.</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1552910402">- switch to gcc7</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1552910403">- Correct License:, netgen has always been LGPL-2.1-only.
- Package License file.
- Remove boost BuildRequires:, it is not used at all.
- Guard Requires: occt-devel in devel package with bcond, so it
  does not get pulled in if netgen is built without OpenCascade.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1553169600">- Fix build on ARM and PPC, only include immintrin.h when SSE is available</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1614600000">- update to version 6.2.2101
  * no changelog provided
- Properly split package: libraries (as required by e.g FreeCAD),
  python-bindings, examples and standalone GUI.
- Drop upstream fix_build.patch
- Replace 0001-Allow-compilation-on-archs-beyond-x86.patch
  with -DUSE_NATIVE_ARCH=OFF
- Fix build:
  * Add 0001-Disable-backtrace-generation.patch, do not call "nm"
    or "addr2line" from library.
  * Add 0001-Set-explicit-OBJECT-library-type-for-internal-togl.patch
  * Add 0001-Throw-in-case-enum-value-is-unhandled.patch
  * Disable -Wl,--no-undefined, libs have circular dependencies
  * Add 0001-Fix-GetTimeCounter-for-Aarch64-variants.patch
- Enable Catch2 unittests, add
  0001-Optionally-use-system-provided-Catch2.patch</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1620648000">- Exclude all 32bit archs, no longer supported upstream (fails to
  build).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1643284800">- update to version 6.2.2105
  * no changelog provided
- Drop upstream 0001-Fix-GetTimeCounter-for-Aarch64-variants.patch
- Add patches:
  * 0001-Optionally-prefer-system-wide-pybind11.patch
  * 0001-Throw-Exception-when-shape-has-invalid-type.patch
  * 0001-Fix-signedness-for-ARM-Neon-mask-type.patch</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1644235200">- Fix RUNPATH on Leap 15.x</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1646395200">- Fix RUNPATH also for Leap/SLE 15.4, which now uses
  CMAKE_SKIP_INSTALL_RPATH=ON by default.</changelog>
</package>
<package pkgid="4e3c83d65396370b160a0f1e97d5b80ab8075794b800d8b366e45cf46a73608d" name="netgen-libs" arch="ppc64le">
  <version epoch="0" ver="6.2.2105" rel="bp154.2.3.1"/>
  <changelog author="adrian@suse.de" date="1465819200">- Using source service to follow git master (pre-6.1)
- use new oce instead of OpenCASCADE
- enable openmpi
- use fixes for rpath from Johannes Obermayer
  Sun Jan 23 2014 Torben Hansen &lt;build at sciomnis dot com&gt;
- Changed to upstream version</changelog>
  <changelog author="adrian@suse.de" date="1485864000">- enable python for openSUSE Tumbleweed</changelog>
  <changelog author="adrian@suse.de" date="1501243200">- switch to OpenCASCADE 7.1.0 and newer boost</changelog>
  <changelog author="adrian@suse.de" date="1510056000">- switch to OpenCASCADE 7.2.0</changelog>
  <changelog author="adrian@suse.de" date="1512734400">- move include files into /usr/include/netgen/
- use -fno-strict-aliasing
- add some extra header wrapper files missed by FreeCAD</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1552910400">- update to version 6.2.1810
  obsoletes:
    allow_fine_curves.patch
    occ-pi-constant.patch
    do_stl_init.patch
- switch to cmake, obsoletes AM_PROG_AR.patch
- use obs_scm, obsoletes svnfetch.sh and netgen.sh</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1552910401">- Remove ldconfig calls since there are only dlopened plugins,
  no standard libraries.
- Wrap description.
- Use convenient %make_install, and run fdupes.</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1552910402">- switch to gcc7</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1552910403">- Correct License:, netgen has always been LGPL-2.1-only.
- Package License file.
- Remove boost BuildRequires:, it is not used at all.
- Guard Requires: occt-devel in devel package with bcond, so it
  does not get pulled in if netgen is built without OpenCascade.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1553169600">- Fix build on ARM and PPC, only include immintrin.h when SSE is available</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1614600000">- update to version 6.2.2101
  * no changelog provided
- Properly split package: libraries (as required by e.g FreeCAD),
  python-bindings, examples and standalone GUI.
- Drop upstream fix_build.patch
- Replace 0001-Allow-compilation-on-archs-beyond-x86.patch
  with -DUSE_NATIVE_ARCH=OFF
- Fix build:
  * Add 0001-Disable-backtrace-generation.patch, do not call "nm"
    or "addr2line" from library.
  * Add 0001-Set-explicit-OBJECT-library-type-for-internal-togl.patch
  * Add 0001-Throw-in-case-enum-value-is-unhandled.patch
  * Disable -Wl,--no-undefined, libs have circular dependencies
  * Add 0001-Fix-GetTimeCounter-for-Aarch64-variants.patch
- Enable Catch2 unittests, add
  0001-Optionally-use-system-provided-Catch2.patch</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1620648000">- Exclude all 32bit archs, no longer supported upstream (fails to
  build).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1643284800">- update to version 6.2.2105
  * no changelog provided
- Drop upstream 0001-Fix-GetTimeCounter-for-Aarch64-variants.patch
- Add patches:
  * 0001-Optionally-prefer-system-wide-pybind11.patch
  * 0001-Throw-Exception-when-shape-has-invalid-type.patch
  * 0001-Fix-signedness-for-ARM-Neon-mask-type.patch</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1644235200">- Fix RUNPATH on Leap 15.x</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1646395200">- Fix RUNPATH also for Leap/SLE 15.4, which now uses
  CMAKE_SKIP_INSTALL_RPATH=ON by default.</changelog>
</package>
<package pkgid="a76a2b0b7105b7220d626606e78e5993871ebbfe2323a6bb4f6fc1cd5f806f0b" name="netgen-libs" arch="s390x">
  <version epoch="0" ver="6.2.2105" rel="bp154.2.3.1"/>
  <changelog author="adrian@suse.de" date="1465819200">- Using source service to follow git master (pre-6.1)
- use new oce instead of OpenCASCADE
- enable openmpi
- use fixes for rpath from Johannes Obermayer
  Sun Jan 23 2014 Torben Hansen &lt;build at sciomnis dot com&gt;
- Changed to upstream version</changelog>
  <changelog author="adrian@suse.de" date="1485864000">- enable python for openSUSE Tumbleweed</changelog>
  <changelog author="adrian@suse.de" date="1501243200">- switch to OpenCASCADE 7.1.0 and newer boost</changelog>
  <changelog author="adrian@suse.de" date="1510056000">- switch to OpenCASCADE 7.2.0</changelog>
  <changelog author="adrian@suse.de" date="1512734400">- move include files into /usr/include/netgen/
- use -fno-strict-aliasing
- add some extra header wrapper files missed by FreeCAD</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1552910400">- update to version 6.2.1810
  obsoletes:
    allow_fine_curves.patch
    occ-pi-constant.patch
    do_stl_init.patch
- switch to cmake, obsoletes AM_PROG_AR.patch
- use obs_scm, obsoletes svnfetch.sh and netgen.sh</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1552910401">- Remove ldconfig calls since there are only dlopened plugins,
  no standard libraries.
- Wrap description.
- Use convenient %make_install, and run fdupes.</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1552910402">- switch to gcc7</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1552910403">- Correct License:, netgen has always been LGPL-2.1-only.
- Package License file.
- Remove boost BuildRequires:, it is not used at all.
- Guard Requires: occt-devel in devel package with bcond, so it
  does not get pulled in if netgen is built without OpenCascade.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1553169600">- Fix build on ARM and PPC, only include immintrin.h when SSE is available</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1614600000">- update to version 6.2.2101
  * no changelog provided
- Properly split package: libraries (as required by e.g FreeCAD),
  python-bindings, examples and standalone GUI.
- Drop upstream fix_build.patch
- Replace 0001-Allow-compilation-on-archs-beyond-x86.patch
  with -DUSE_NATIVE_ARCH=OFF
- Fix build:
  * Add 0001-Disable-backtrace-generation.patch, do not call "nm"
    or "addr2line" from library.
  * Add 0001-Set-explicit-OBJECT-library-type-for-internal-togl.patch
  * Add 0001-Throw-in-case-enum-value-is-unhandled.patch
  * Disable -Wl,--no-undefined, libs have circular dependencies
  * Add 0001-Fix-GetTimeCounter-for-Aarch64-variants.patch
- Enable Catch2 unittests, add
  0001-Optionally-use-system-provided-Catch2.patch</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1620648000">- Exclude all 32bit archs, no longer supported upstream (fails to
  build).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1643284800">- update to version 6.2.2105
  * no changelog provided
- Drop upstream 0001-Fix-GetTimeCounter-for-Aarch64-variants.patch
- Add patches:
  * 0001-Optionally-prefer-system-wide-pybind11.patch
  * 0001-Throw-Exception-when-shape-has-invalid-type.patch
  * 0001-Fix-signedness-for-ARM-Neon-mask-type.patch</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1644235200">- Fix RUNPATH on Leap 15.x</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1646395200">- Fix RUNPATH also for Leap/SLE 15.4, which now uses
  CMAKE_SKIP_INSTALL_RPATH=ON by default.</changelog>
</package>
<package pkgid="3aed4110d8d9b1afd49388c6d975c7a6f8d13bcf91511d8007d85a306fd1245b" name="netgen-libs" arch="x86_64">
  <version epoch="0" ver="6.2.2105" rel="bp154.2.3.1"/>
  <changelog author="adrian@suse.de" date="1465819200">- Using source service to follow git master (pre-6.1)
- use new oce instead of OpenCASCADE
- enable openmpi
- use fixes for rpath from Johannes Obermayer
  Sun Jan 23 2014 Torben Hansen &lt;build at sciomnis dot com&gt;
- Changed to upstream version</changelog>
  <changelog author="adrian@suse.de" date="1485864000">- enable python for openSUSE Tumbleweed</changelog>
  <changelog author="adrian@suse.de" date="1501243200">- switch to OpenCASCADE 7.1.0 and newer boost</changelog>
  <changelog author="adrian@suse.de" date="1510056000">- switch to OpenCASCADE 7.2.0</changelog>
  <changelog author="adrian@suse.de" date="1512734400">- move include files into /usr/include/netgen/
- use -fno-strict-aliasing
- add some extra header wrapper files missed by FreeCAD</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1552910400">- update to version 6.2.1810
  obsoletes:
    allow_fine_curves.patch
    occ-pi-constant.patch
    do_stl_init.patch
- switch to cmake, obsoletes AM_PROG_AR.patch
- use obs_scm, obsoletes svnfetch.sh and netgen.sh</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1552910401">- Remove ldconfig calls since there are only dlopened plugins,
  no standard libraries.
- Wrap description.
- Use convenient %make_install, and run fdupes.</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1552910402">- switch to gcc7</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1552910403">- Correct License:, netgen has always been LGPL-2.1-only.
- Package License file.
- Remove boost BuildRequires:, it is not used at all.
- Guard Requires: occt-devel in devel package with bcond, so it
  does not get pulled in if netgen is built without OpenCascade.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1553169600">- Fix build on ARM and PPC, only include immintrin.h when SSE is available</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1614600000">- update to version 6.2.2101
  * no changelog provided
- Properly split package: libraries (as required by e.g FreeCAD),
  python-bindings, examples and standalone GUI.
- Drop upstream fix_build.patch
- Replace 0001-Allow-compilation-on-archs-beyond-x86.patch
  with -DUSE_NATIVE_ARCH=OFF
- Fix build:
  * Add 0001-Disable-backtrace-generation.patch, do not call "nm"
    or "addr2line" from library.
  * Add 0001-Set-explicit-OBJECT-library-type-for-internal-togl.patch
  * Add 0001-Throw-in-case-enum-value-is-unhandled.patch
  * Disable -Wl,--no-undefined, libs have circular dependencies
  * Add 0001-Fix-GetTimeCounter-for-Aarch64-variants.patch
- Enable Catch2 unittests, add
  0001-Optionally-use-system-provided-Catch2.patch</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1620648000">- Exclude all 32bit archs, no longer supported upstream (fails to
  build).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1643284800">- update to version 6.2.2105
  * no changelog provided
- Drop upstream 0001-Fix-GetTimeCounter-for-Aarch64-variants.patch
- Add patches:
  * 0001-Optionally-prefer-system-wide-pybind11.patch
  * 0001-Throw-Exception-when-shape-has-invalid-type.patch
  * 0001-Fix-signedness-for-ARM-Neon-mask-type.patch</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1644235200">- Fix RUNPATH on Leap 15.x</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1646395200">- Fix RUNPATH also for Leap/SLE 15.4, which now uses
  CMAKE_SKIP_INSTALL_RPATH=ON by default.</changelog>
</package>
<package pkgid="3367408ba0cf993d3a8c6d97f30b2a105496a3240e5184cb37c124f349e99d6d" name="nim" arch="aarch64">
  <version epoch="0" ver="1.6.6" rel="bp154.2.3.1"/>
  <changelog author="mpluskal@suse.com" date="1482494400">- Cleanup package to follow packaging guidelines</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1487505600">- Update to version 0.16.0:
  * No changelog available.
- Build and install libraries, etc.
- Install configuration files.
- Recommend git for nimble.</changelog>
  <changelog author="jengelh@inai.de" date="1488456000">- Update description</changelog>
  <changelog author="mpluskal@suse.com" date="1489233600">- Update list of files to fix building on Factory</changelog>
  <changelog author="mpluskal@suse.com" date="1496491200">- Update to version 0.17.0:
  * https://nim-lang.org/blog/2017/05/17/version-0170-released.html</changelog>
  <changelog author="mpluskal@suse.com" date="1515153600">- Update to version 0.17.2:
  * Bugfix release
  * For details see:
    https://nim-lang.org/blog/2017/09/07/version-0172-released.html</changelog>
  <changelog author="mvetter@suse.com" date="1519992000">- Update to version 0.18.0:
  * Please see:
    https://nim-lang.org/blog/2018/03/01/version-0180-released.html
- Add nim-rpmlintrc</changelog>
  <changelog author="mvetter@suse.com" date="1540209600">- Update to version 0.19.0:
  * Please see:
    https://nim-lang.org/blog/2018/09/26/version-0190-released.html</changelog>
  <changelog author="mvetter@suse.com" date="1546344000">- Update to version 0.19.2:
  Please see:
  https://nim-lang.org/blog/2018/12/31/version-0192-released.html</changelog>
  <changelog author="m.szczepaniak.000@gmail.com" date="1557835200">- Update to version 0.19.6:
  Please see:
  https://nim-lang.org/blog/2019/05/13/version-0196-released.html</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1559304000">- Force more optflags usage
- Fix location of config files (boo#1137006)</changelog>
  <changelog author="m.szczepaniak.000@gmail.com" date="1559563200">- Added armv7l and aarch64</changelog>
  <changelog author="m.szczepaniak.000@gmail.com" date="1559563201">- Added ppc64le</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1573646400">- Update to version 1.0.2:
  * See https://nim-lang.org/blog.html for details
- Update dependencies (based on changes by Federico Ceratto</changelog>
  <changelog author="dmacvicar@suse.com" date="1592740800">- Update to version 1.2.2:
  * See https://nim-lang.org/blog.html for details
- Enable the full testsuite in the %check section
  * Add build dependencies to run the testsuite
  * Whitelists a few tests that are not passing yet</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1619006400">- Update to version 1.2.12
  * Fixed GC crash resulting from inlining of the memory
    allocation procs
  * Fixed ?incorrect raises effect for $(NimNode)? (#17454)
- from version 1.2.10
  * Fixed ?JS backend doesn?t handle float-&gt;int type conversion ? (#8404)
  * Fixed ?The ?try except? not work when the ?OSError:
    Too many open files? error occurs!? (#15925)
  * Fixed ?Nim emits #line 0 C preprocessor directives with
    ?debugger:native, with ICE in gcc-10? (#15942)
  * Fixed ?tfuturevar fails when activated? (#9695)
  * Fixed ?nre.escapeRe is not gcsafe? (#16103)
  * Fixed ??Error: internal error: genRecordFieldAux? - in
    the ?version-1-4? branch? (#16069)
  * Fixed ?-d:fulldebug switch does not compile with gc:arc? (#16214)
  * Fixed ?osLastError may randomly raise defect and crash? (#16359)
  * Fixed ?generic importc proc?s don?t work (breaking lots
    of vmops procs for js)? (#16428)
  * Fixed ?Concept: codegen ignores parameter passing? (#16897)
  * Fixed ?{.push exportc.} interacts with anonymous functions? (#16967)
  * Fixed ?memory allocation during {.global.} init breaks GC? (#17085)
  * Fixed "Nimble arbitrary code execution for specially crafted package metadata"
    + https://github.com/nim-lang/security/security/advisories/GHSA-rg9f-w24h-962p
    + (bsc#1185083, CVE-2021-21372)
  * Fixed "Nimble falls back to insecure http url when fetching packages"
    + https://github.com/nim-lang/security/security/advisories/GHSA-8w52-r35x-rgp8
    + (bsc#1185084, CVE-2021-21373)
  * Fixed "Nimble fails to validate certificates due to insecure httpClient defaults"
    + https://github.com/nim-lang/security/security/advisories/GHSA-c2wm-v66h-xhxx
    + (bsc#1185085, CVE-2021-21374)
- from version 1.2.8
  * Fixed ?Defer and ?gc:arc? (#15071)
  * Fixed ?Issue with ?gc:arc at compile time? (#15129)
  * Fixed ?Nil check on each field fails in generic function? (#15101)
  * Fixed ?[strscans] scanf doesn?t match a single character with
    $+ if it?s the end of the string? (#15064)
  * Fixed ?Crash and incorrect return values when using
    readPasswordFromStdin on Windows.? (#15207)
  * Fixed ?Inconsistent unsigned -&gt; signed RangeDefect usage
    across integer sizes? (#15210)
  * Fixed ?toHex results in RangeDefect exception when
    used with large uint64? (#15257)
  * Fixed ?Mixing ?return? with expressions is allowed in 1.2? (#15280)
  * Fixed ?proc execCmdEx doesn?t work with -d:useWinAnsi? (#14203)
  * Fixed ?memory corruption in tmarshall.nim? (#9754)
  * Fixed ?Wrong number of variables? (#15360)
  * Fixed ?defer doesnt work with block, break and await? (#15243)
  * Fixed ?Sizeof of case object is incorrect. Showstopper? (#15516)
  * Fixed ?Mixing ?return? with expressions is allowed in 1.2? (#15280)
  * Fixed ?regression(1.0.2 =&gt; 1.0.4) VM register messed up
    depending on unrelated context? (#15704)
- from version 1.2.6
  * Fixed ?The pegs module doesn?t work with generics!? (#14718)
  * Fixed ?[goto exceptions] {.noReturn.} pragma is not detected
    in a case expression? (#14458)
  * Fixed ?[exceptions:goto] C compiler error with dynlib pragma
    calling a proc? (#14240)
  * Fixed ?Nim source archive install: ?install.sh? fails with error:
    cp: cannot stat ?bin/nim-gdb?: No such file or directory? (#14748)
  * Fixed ?Stropped identifiers don?t work as field names in
    tuple literals? (#14911)
  * Fixed ?uri.decodeUrl crashes on incorrectly formatted input? (#14082)
  * Fixed ?odbcsql module has some wrong integer types? (#9771)
  * Fixed ?[ARC] Compiler crash declaring a finalizer proc
    directly in ?new?? (#15044)
  * Fixed ?code with named arguments in proc of winim/com can
    not been compiled? (#15056)
  * Fixed ?javascript backend produces javascript code with syntax
    error in object syntax? (#14534)
  * Fixed ?[ARC] SIGSEGV when calling a closure as a tuple
    field in a seq? (#15038)
  * Fixed ?Compiler crashes when using string as object variant
    selector with else branch? (#14189)
  * Fixed ?Constructing a uint64 range on a 32-bit machine leads
    to incorrect codegen? (#14616)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1644062400">- update to 1.2.16
  * oids: switch from PRNG to random module
  * nimc.rst: fix table markup
  * nimRawSetjmp: support Windows
  * correctly enable chronos
  * bigints are not supposed to work on 1.2.x
  * disable nimpy
  * misc bugfixes
  * fixes a 'mixin' statement handling regression [backport:1.2</changelog>
  <changelog author="David Anes &lt;david.anes@suse.com&gt;" date="1651665600">- Reworked whole package.
- Includes upstream fixes for:
  * (bsc#1175333, CVE-2020-15693) httpClient is vulnerable to a
    CR-LF injection
  * (bsc#1175334, CVE-2020-15692) mishandle of argument to
    browsers.openDefaultBrowser
  * (bsc#1175332, CVE-2020-15694) httpClient.get().contentLength()
    fails to properly validate the server response
  * (bsc#1192712, CVE-2021-41259) null byte accepted in getContent
    function, leading to URI validation bypass
  * (bsc#1185948, CVE-2021-29495) stdlib httpClient does not
    validate peer certificates by default
  * (bsc#1185085, CVE-2021-21374) Improper verification of the
    SSL/TLS certificate
  * (bsc#1185084, CVE-2021-21373) "nimble refresh" falls back to a
    non-TLS URL in case of error
  * (bsc#1185083, CVE-2021-21372) doCmd can be leveraged to execute
    arbitrary commands
  * (bsc#1181705, CVE-2020-15690) Standard library asyncftpclient
    lacks a check for newline character
- Add patches:
  * nim-fix-tests-certificate-key-too-small.patch
  * nim-fix-tests-ip-protocol-missing.patch
  * nim-nim-gdb_fix_interpreter.patch
- Following nim tools now work as expected:
  * nim_dbg is now installed.
  * nim-gdb can be successfully launched as it finds and loads
    nim-gdb.py correctly under gdb.
  * nimble package manager stores package information per user.
  * compiler package can be found and used, as it may be required
    by other packages.
- Update to 1.6.6
  * standard library use consistent styles for variable names so it
    can be used in projects which force a consistent style with
  - -styleCheck:usages option.
  * ARC/ORC are now considerably faster at method dispatching,
    bringing its performance back on the level of the refc memory
    management.
  * Full changelog:
    https://nim-lang.org/blog/2022/05/05/version-166-released.html
- Previous updates and changelogs:
  * 1.6.4:
    https://nim-lang.org/blog/2022/02/08/version-164-released.html
  * 1.6.2:
    https://nim-lang.org/blog/2021/12/17/version-162-released.html
  * 1.6.0:
    https://nim-lang.org/blog/2021/10/19/version-160-released.html
  * 1.4.8:
    https://nim-lang.org/blog/2021/05/25/version-148-released.html
  * 1.4.6:
    https://nim-lang.org/blog/2021/04/15/versions-146-and-1212-released.html
  * 1.4.4:
    https://nim-lang.org/blog/2021/02/23/versions-144-and-1210-released.html
  * 1.4.2:
    https://nim-lang.org/blog/2020/12/01/version-142-released.html
  * 1.4.0:
    https://nim-lang.org/blog/2020/10/16/version-140-released.html</changelog>
  <changelog author="David Anes &lt;david.anes@suse.com&gt;" date="1657800000">- Remove duplicated strip for nimble.
- Require (at least) a C compiler.
- Addded _constraints file to require more RAM on build nodes.
- Add patch to correctly detect GCC version, so it builds in i586
  and arm:
  * nim-fix-gcc-major-version-detection.patch</changelog>
  <changelog author="David Anes &lt;david.anes@suse.com&gt;" date="1659960000">- Disable some tests for some platforms:
  * SFML tests/buildrequires are removed to simplify having the same
    version in all repositories (SLE, backports, etc.).
  * Disable test "tests/arc/tasyncorc.nim", which is failing in
    ppc64le (backports).
- Require/recommend NodeJS 12 only where it is provided, so the
  package is buildable on more codestreams.</changelog>
</package>
<package pkgid="b1b550a21659b4500760d7475c5cb32ae0a4221c44e3f4da440e283e99c01cd5" name="nim" arch="ppc64le">
  <version epoch="0" ver="1.6.6" rel="bp154.2.3.1"/>
  <changelog author="mpluskal@suse.com" date="1482494400">- Cleanup package to follow packaging guidelines</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1487505600">- Update to version 0.16.0:
  * No changelog available.
- Build and install libraries, etc.
- Install configuration files.
- Recommend git for nimble.</changelog>
  <changelog author="jengelh@inai.de" date="1488456000">- Update description</changelog>
  <changelog author="mpluskal@suse.com" date="1489233600">- Update list of files to fix building on Factory</changelog>
  <changelog author="mpluskal@suse.com" date="1496491200">- Update to version 0.17.0:
  * https://nim-lang.org/blog/2017/05/17/version-0170-released.html</changelog>
  <changelog author="mpluskal@suse.com" date="1515153600">- Update to version 0.17.2:
  * Bugfix release
  * For details see:
    https://nim-lang.org/blog/2017/09/07/version-0172-released.html</changelog>
  <changelog author="mvetter@suse.com" date="1519992000">- Update to version 0.18.0:
  * Please see:
    https://nim-lang.org/blog/2018/03/01/version-0180-released.html
- Add nim-rpmlintrc</changelog>
  <changelog author="mvetter@suse.com" date="1540209600">- Update to version 0.19.0:
  * Please see:
    https://nim-lang.org/blog/2018/09/26/version-0190-released.html</changelog>
  <changelog author="mvetter@suse.com" date="1546344000">- Update to version 0.19.2:
  Please see:
  https://nim-lang.org/blog/2018/12/31/version-0192-released.html</changelog>
  <changelog author="m.szczepaniak.000@gmail.com" date="1557835200">- Update to version 0.19.6:
  Please see:
  https://nim-lang.org/blog/2019/05/13/version-0196-released.html</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1559304000">- Force more optflags usage
- Fix location of config files (boo#1137006)</changelog>
  <changelog author="m.szczepaniak.000@gmail.com" date="1559563200">- Added armv7l and aarch64</changelog>
  <changelog author="m.szczepaniak.000@gmail.com" date="1559563201">- Added ppc64le</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1573646400">- Update to version 1.0.2:
  * See https://nim-lang.org/blog.html for details
- Update dependencies (based on changes by Federico Ceratto</changelog>
  <changelog author="dmacvicar@suse.com" date="1592740800">- Update to version 1.2.2:
  * See https://nim-lang.org/blog.html for details
- Enable the full testsuite in the %check section
  * Add build dependencies to run the testsuite
  * Whitelists a few tests that are not passing yet</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1619006400">- Update to version 1.2.12
  * Fixed GC crash resulting from inlining of the memory
    allocation procs
  * Fixed ?incorrect raises effect for $(NimNode)? (#17454)
- from version 1.2.10
  * Fixed ?JS backend doesn?t handle float-&gt;int type conversion ? (#8404)
  * Fixed ?The ?try except? not work when the ?OSError:
    Too many open files? error occurs!? (#15925)
  * Fixed ?Nim emits #line 0 C preprocessor directives with
    ?debugger:native, with ICE in gcc-10? (#15942)
  * Fixed ?tfuturevar fails when activated? (#9695)
  * Fixed ?nre.escapeRe is not gcsafe? (#16103)
  * Fixed ??Error: internal error: genRecordFieldAux? - in
    the ?version-1-4? branch? (#16069)
  * Fixed ?-d:fulldebug switch does not compile with gc:arc? (#16214)
  * Fixed ?osLastError may randomly raise defect and crash? (#16359)
  * Fixed ?generic importc proc?s don?t work (breaking lots
    of vmops procs for js)? (#16428)
  * Fixed ?Concept: codegen ignores parameter passing? (#16897)
  * Fixed ?{.push exportc.} interacts with anonymous functions? (#16967)
  * Fixed ?memory allocation during {.global.} init breaks GC? (#17085)
  * Fixed "Nimble arbitrary code execution for specially crafted package metadata"
    + https://github.com/nim-lang/security/security/advisories/GHSA-rg9f-w24h-962p
    + (bsc#1185083, CVE-2021-21372)
  * Fixed "Nimble falls back to insecure http url when fetching packages"
    + https://github.com/nim-lang/security/security/advisories/GHSA-8w52-r35x-rgp8
    + (bsc#1185084, CVE-2021-21373)
  * Fixed "Nimble fails to validate certificates due to insecure httpClient defaults"
    + https://github.com/nim-lang/security/security/advisories/GHSA-c2wm-v66h-xhxx
    + (bsc#1185085, CVE-2021-21374)
- from version 1.2.8
  * Fixed ?Defer and ?gc:arc? (#15071)
  * Fixed ?Issue with ?gc:arc at compile time? (#15129)
  * Fixed ?Nil check on each field fails in generic function? (#15101)
  * Fixed ?[strscans] scanf doesn?t match a single character with
    $+ if it?s the end of the string? (#15064)
  * Fixed ?Crash and incorrect return values when using
    readPasswordFromStdin on Windows.? (#15207)
  * Fixed ?Inconsistent unsigned -&gt; signed RangeDefect usage
    across integer sizes? (#15210)
  * Fixed ?toHex results in RangeDefect exception when
    used with large uint64? (#15257)
  * Fixed ?Mixing ?return? with expressions is allowed in 1.2? (#15280)
  * Fixed ?proc execCmdEx doesn?t work with -d:useWinAnsi? (#14203)
  * Fixed ?memory corruption in tmarshall.nim? (#9754)
  * Fixed ?Wrong number of variables? (#15360)
  * Fixed ?defer doesnt work with block, break and await? (#15243)
  * Fixed ?Sizeof of case object is incorrect. Showstopper? (#15516)
  * Fixed ?Mixing ?return? with expressions is allowed in 1.2? (#15280)
  * Fixed ?regression(1.0.2 =&gt; 1.0.4) VM register messed up
    depending on unrelated context? (#15704)
- from version 1.2.6
  * Fixed ?The pegs module doesn?t work with generics!? (#14718)
  * Fixed ?[goto exceptions] {.noReturn.} pragma is not detected
    in a case expression? (#14458)
  * Fixed ?[exceptions:goto] C compiler error with dynlib pragma
    calling a proc? (#14240)
  * Fixed ?Nim source archive install: ?install.sh? fails with error:
    cp: cannot stat ?bin/nim-gdb?: No such file or directory? (#14748)
  * Fixed ?Stropped identifiers don?t work as field names in
    tuple literals? (#14911)
  * Fixed ?uri.decodeUrl crashes on incorrectly formatted input? (#14082)
  * Fixed ?odbcsql module has some wrong integer types? (#9771)
  * Fixed ?[ARC] Compiler crash declaring a finalizer proc
    directly in ?new?? (#15044)
  * Fixed ?code with named arguments in proc of winim/com can
    not been compiled? (#15056)
  * Fixed ?javascript backend produces javascript code with syntax
    error in object syntax? (#14534)
  * Fixed ?[ARC] SIGSEGV when calling a closure as a tuple
    field in a seq? (#15038)
  * Fixed ?Compiler crashes when using string as object variant
    selector with else branch? (#14189)
  * Fixed ?Constructing a uint64 range on a 32-bit machine leads
    to incorrect codegen? (#14616)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1644062400">- update to 1.2.16
  * oids: switch from PRNG to random module
  * nimc.rst: fix table markup
  * nimRawSetjmp: support Windows
  * correctly enable chronos
  * bigints are not supposed to work on 1.2.x
  * disable nimpy
  * misc bugfixes
  * fixes a 'mixin' statement handling regression [backport:1.2</changelog>
  <changelog author="David Anes &lt;david.anes@suse.com&gt;" date="1651665600">- Reworked whole package.
- Includes upstream fixes for:
  * (bsc#1175333, CVE-2020-15693) httpClient is vulnerable to a
    CR-LF injection
  * (bsc#1175334, CVE-2020-15692) mishandle of argument to
    browsers.openDefaultBrowser
  * (bsc#1175332, CVE-2020-15694) httpClient.get().contentLength()
    fails to properly validate the server response
  * (bsc#1192712, CVE-2021-41259) null byte accepted in getContent
    function, leading to URI validation bypass
  * (bsc#1185948, CVE-2021-29495) stdlib httpClient does not
    validate peer certificates by default
  * (bsc#1185085, CVE-2021-21374) Improper verification of the
    SSL/TLS certificate
  * (bsc#1185084, CVE-2021-21373) "nimble refresh" falls back to a
    non-TLS URL in case of error
  * (bsc#1185083, CVE-2021-21372) doCmd can be leveraged to execute
    arbitrary commands
  * (bsc#1181705, CVE-2020-15690) Standard library asyncftpclient
    lacks a check for newline character
- Add patches:
  * nim-fix-tests-certificate-key-too-small.patch
  * nim-fix-tests-ip-protocol-missing.patch
  * nim-nim-gdb_fix_interpreter.patch
- Following nim tools now work as expected:
  * nim_dbg is now installed.
  * nim-gdb can be successfully launched as it finds and loads
    nim-gdb.py correctly under gdb.
  * nimble package manager stores package information per user.
  * compiler package can be found and used, as it may be required
    by other packages.
- Update to 1.6.6
  * standard library use consistent styles for variable names so it
    can be used in projects which force a consistent style with
  - -styleCheck:usages option.
  * ARC/ORC are now considerably faster at method dispatching,
    bringing its performance back on the level of the refc memory
    management.
  * Full changelog:
    https://nim-lang.org/blog/2022/05/05/version-166-released.html
- Previous updates and changelogs:
  * 1.6.4:
    https://nim-lang.org/blog/2022/02/08/version-164-released.html
  * 1.6.2:
    https://nim-lang.org/blog/2021/12/17/version-162-released.html
  * 1.6.0:
    https://nim-lang.org/blog/2021/10/19/version-160-released.html
  * 1.4.8:
    https://nim-lang.org/blog/2021/05/25/version-148-released.html
  * 1.4.6:
    https://nim-lang.org/blog/2021/04/15/versions-146-and-1212-released.html
  * 1.4.4:
    https://nim-lang.org/blog/2021/02/23/versions-144-and-1210-released.html
  * 1.4.2:
    https://nim-lang.org/blog/2020/12/01/version-142-released.html
  * 1.4.0:
    https://nim-lang.org/blog/2020/10/16/version-140-released.html</changelog>
  <changelog author="David Anes &lt;david.anes@suse.com&gt;" date="1657800000">- Remove duplicated strip for nimble.
- Require (at least) a C compiler.
- Addded _constraints file to require more RAM on build nodes.
- Add patch to correctly detect GCC version, so it builds in i586
  and arm:
  * nim-fix-gcc-major-version-detection.patch</changelog>
  <changelog author="David Anes &lt;david.anes@suse.com&gt;" date="1659960000">- Disable some tests for some platforms:
  * SFML tests/buildrequires are removed to simplify having the same
    version in all repositories (SLE, backports, etc.).
  * Disable test "tests/arc/tasyncorc.nim", which is failing in
    ppc64le (backports).
- Require/recommend NodeJS 12 only where it is provided, so the
  package is buildable on more codestreams.</changelog>
</package>
<package pkgid="641a6c980c5afd37a4647e65d918dbe5e9a1b7f39d3745d6e56a84695965da18" name="nim" arch="src">
  <version epoch="0" ver="1.6.6" rel="bp154.2.3.1"/>
  <changelog author="mpluskal@suse.com" date="1482494400">- Cleanup package to follow packaging guidelines</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1487505600">- Update to version 0.16.0:
  * No changelog available.
- Build and install libraries, etc.
- Install configuration files.
- Recommend git for nimble.</changelog>
  <changelog author="jengelh@inai.de" date="1488456000">- Update description</changelog>
  <changelog author="mpluskal@suse.com" date="1489233600">- Update list of files to fix building on Factory</changelog>
  <changelog author="mpluskal@suse.com" date="1496491200">- Update to version 0.17.0:
  * https://nim-lang.org/blog/2017/05/17/version-0170-released.html</changelog>
  <changelog author="mpluskal@suse.com" date="1515153600">- Update to version 0.17.2:
  * Bugfix release
  * For details see:
    https://nim-lang.org/blog/2017/09/07/version-0172-released.html</changelog>
  <changelog author="mvetter@suse.com" date="1519992000">- Update to version 0.18.0:
  * Please see:
    https://nim-lang.org/blog/2018/03/01/version-0180-released.html
- Add nim-rpmlintrc</changelog>
  <changelog author="mvetter@suse.com" date="1540209600">- Update to version 0.19.0:
  * Please see:
    https://nim-lang.org/blog/2018/09/26/version-0190-released.html</changelog>
  <changelog author="mvetter@suse.com" date="1546344000">- Update to version 0.19.2:
  Please see:
  https://nim-lang.org/blog/2018/12/31/version-0192-released.html</changelog>
  <changelog author="m.szczepaniak.000@gmail.com" date="1557835200">- Update to version 0.19.6:
  Please see:
  https://nim-lang.org/blog/2019/05/13/version-0196-released.html</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1559304000">- Force more optflags usage
- Fix location of config files (boo#1137006)</changelog>
  <changelog author="m.szczepaniak.000@gmail.com" date="1559563200">- Added armv7l and aarch64</changelog>
  <changelog author="m.szczepaniak.000@gmail.com" date="1559563201">- Added ppc64le</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1573646400">- Update to version 1.0.2:
  * See https://nim-lang.org/blog.html for details
- Update dependencies (based on changes by Federico Ceratto</changelog>
  <changelog author="dmacvicar@suse.com" date="1592740800">- Update to version 1.2.2:
  * See https://nim-lang.org/blog.html for details
- Enable the full testsuite in the %check section
  * Add build dependencies to run the testsuite
  * Whitelists a few tests that are not passing yet</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1619006400">- Update to version 1.2.12
  * Fixed GC crash resulting from inlining of the memory
    allocation procs
  * Fixed ?incorrect raises effect for $(NimNode)? (#17454)
- from version 1.2.10
  * Fixed ?JS backend doesn?t handle float-&gt;int type conversion ? (#8404)
  * Fixed ?The ?try except? not work when the ?OSError:
    Too many open files? error occurs!? (#15925)
  * Fixed ?Nim emits #line 0 C preprocessor directives with
    ?debugger:native, with ICE in gcc-10? (#15942)
  * Fixed ?tfuturevar fails when activated? (#9695)
  * Fixed ?nre.escapeRe is not gcsafe? (#16103)
  * Fixed ??Error: internal error: genRecordFieldAux? - in
    the ?version-1-4? branch? (#16069)
  * Fixed ?-d:fulldebug switch does not compile with gc:arc? (#16214)
  * Fixed ?osLastError may randomly raise defect and crash? (#16359)
  * Fixed ?generic importc proc?s don?t work (breaking lots
    of vmops procs for js)? (#16428)
  * Fixed ?Concept: codegen ignores parameter passing? (#16897)
  * Fixed ?{.push exportc.} interacts with anonymous functions? (#16967)
  * Fixed ?memory allocation during {.global.} init breaks GC? (#17085)
  * Fixed "Nimble arbitrary code execution for specially crafted package metadata"
    + https://github.com/nim-lang/security/security/advisories/GHSA-rg9f-w24h-962p
    + (bsc#1185083, CVE-2021-21372)
  * Fixed "Nimble falls back to insecure http url when fetching packages"
    + https://github.com/nim-lang/security/security/advisories/GHSA-8w52-r35x-rgp8
    + (bsc#1185084, CVE-2021-21373)
  * Fixed "Nimble fails to validate certificates due to insecure httpClient defaults"
    + https://github.com/nim-lang/security/security/advisories/GHSA-c2wm-v66h-xhxx
    + (bsc#1185085, CVE-2021-21374)
- from version 1.2.8
  * Fixed ?Defer and ?gc:arc? (#15071)
  * Fixed ?Issue with ?gc:arc at compile time? (#15129)
  * Fixed ?Nil check on each field fails in generic function? (#15101)
  * Fixed ?[strscans] scanf doesn?t match a single character with
    $+ if it?s the end of the string? (#15064)
  * Fixed ?Crash and incorrect return values when using
    readPasswordFromStdin on Windows.? (#15207)
  * Fixed ?Inconsistent unsigned -&gt; signed RangeDefect usage
    across integer sizes? (#15210)
  * Fixed ?toHex results in RangeDefect exception when
    used with large uint64? (#15257)
  * Fixed ?Mixing ?return? with expressions is allowed in 1.2? (#15280)
  * Fixed ?proc execCmdEx doesn?t work with -d:useWinAnsi? (#14203)
  * Fixed ?memory corruption in tmarshall.nim? (#9754)
  * Fixed ?Wrong number of variables? (#15360)
  * Fixed ?defer doesnt work with block, break and await? (#15243)
  * Fixed ?Sizeof of case object is incorrect. Showstopper? (#15516)
  * Fixed ?Mixing ?return? with expressions is allowed in 1.2? (#15280)
  * Fixed ?regression(1.0.2 =&gt; 1.0.4) VM register messed up
    depending on unrelated context? (#15704)
- from version 1.2.6
  * Fixed ?The pegs module doesn?t work with generics!? (#14718)
  * Fixed ?[goto exceptions] {.noReturn.} pragma is not detected
    in a case expression? (#14458)
  * Fixed ?[exceptions:goto] C compiler error with dynlib pragma
    calling a proc? (#14240)
  * Fixed ?Nim source archive install: ?install.sh? fails with error:
    cp: cannot stat ?bin/nim-gdb?: No such file or directory? (#14748)
  * Fixed ?Stropped identifiers don?t work as field names in
    tuple literals? (#14911)
  * Fixed ?uri.decodeUrl crashes on incorrectly formatted input? (#14082)
  * Fixed ?odbcsql module has some wrong integer types? (#9771)
  * Fixed ?[ARC] Compiler crash declaring a finalizer proc
    directly in ?new?? (#15044)
  * Fixed ?code with named arguments in proc of winim/com can
    not been compiled? (#15056)
  * Fixed ?javascript backend produces javascript code with syntax
    error in object syntax? (#14534)
  * Fixed ?[ARC] SIGSEGV when calling a closure as a tuple
    field in a seq? (#15038)
  * Fixed ?Compiler crashes when using string as object variant
    selector with else branch? (#14189)
  * Fixed ?Constructing a uint64 range on a 32-bit machine leads
    to incorrect codegen? (#14616)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1644062400">- update to 1.2.16
  * oids: switch from PRNG to random module
  * nimc.rst: fix table markup
  * nimRawSetjmp: support Windows
  * correctly enable chronos
  * bigints are not supposed to work on 1.2.x
  * disable nimpy
  * misc bugfixes
  * fixes a 'mixin' statement handling regression [backport:1.2</changelog>
  <changelog author="David Anes &lt;david.anes@suse.com&gt;" date="1651665600">- Reworked whole package.
- Includes upstream fixes for:
  * (bsc#1175333, CVE-2020-15693) httpClient is vulnerable to a
    CR-LF injection
  * (bsc#1175334, CVE-2020-15692) mishandle of argument to
    browsers.openDefaultBrowser
  * (bsc#1175332, CVE-2020-15694) httpClient.get().contentLength()
    fails to properly validate the server response
  * (bsc#1192712, CVE-2021-41259) null byte accepted in getContent
    function, leading to URI validation bypass
  * (bsc#1185948, CVE-2021-29495) stdlib httpClient does not
    validate peer certificates by default
  * (bsc#1185085, CVE-2021-21374) Improper verification of the
    SSL/TLS certificate
  * (bsc#1185084, CVE-2021-21373) "nimble refresh" falls back to a
    non-TLS URL in case of error
  * (bsc#1185083, CVE-2021-21372) doCmd can be leveraged to execute
    arbitrary commands
  * (bsc#1181705, CVE-2020-15690) Standard library asyncftpclient
    lacks a check for newline character
- Add patches:
  * nim-fix-tests-certificate-key-too-small.patch
  * nim-fix-tests-ip-protocol-missing.patch
  * nim-nim-gdb_fix_interpreter.patch
- Following nim tools now work as expected:
  * nim_dbg is now installed.
  * nim-gdb can be successfully launched as it finds and loads
    nim-gdb.py correctly under gdb.
  * nimble package manager stores package information per user.
  * compiler package can be found and used, as it may be required
    by other packages.
- Update to 1.6.6
  * standard library use consistent styles for variable names so it
    can be used in projects which force a consistent style with
  - -styleCheck:usages option.
  * ARC/ORC are now considerably faster at method dispatching,
    bringing its performance back on the level of the refc memory
    management.
  * Full changelog:
    https://nim-lang.org/blog/2022/05/05/version-166-released.html
- Previous updates and changelogs:
  * 1.6.4:
    https://nim-lang.org/blog/2022/02/08/version-164-released.html
  * 1.6.2:
    https://nim-lang.org/blog/2021/12/17/version-162-released.html
  * 1.6.0:
    https://nim-lang.org/blog/2021/10/19/version-160-released.html
  * 1.4.8:
    https://nim-lang.org/blog/2021/05/25/version-148-released.html
  * 1.4.6:
    https://nim-lang.org/blog/2021/04/15/versions-146-and-1212-released.html
  * 1.4.4:
    https://nim-lang.org/blog/2021/02/23/versions-144-and-1210-released.html
  * 1.4.2:
    https://nim-lang.org/blog/2020/12/01/version-142-released.html
  * 1.4.0:
    https://nim-lang.org/blog/2020/10/16/version-140-released.html</changelog>
  <changelog author="David Anes &lt;david.anes@suse.com&gt;" date="1657800000">- Remove duplicated strip for nimble.
- Require (at least) a C compiler.
- Addded _constraints file to require more RAM on build nodes.
- Add patch to correctly detect GCC version, so it builds in i586
  and arm:
  * nim-fix-gcc-major-version-detection.patch</changelog>
  <changelog author="David Anes &lt;david.anes@suse.com&gt;" date="1659960000">- Disable some tests for some platforms:
  * SFML tests/buildrequires are removed to simplify having the same
    version in all repositories (SLE, backports, etc.).
  * Disable test "tests/arc/tasyncorc.nim", which is failing in
    ppc64le (backports).
- Require/recommend NodeJS 12 only where it is provided, so the
  package is buildable on more codestreams.</changelog>
</package>
<package pkgid="9a688d81d8201ac0548e5640d5ed88a02eb8df24a7f11d67a3214524526772f9" name="nim" arch="x86_64">
  <version epoch="0" ver="1.6.6" rel="bp154.2.3.1"/>
  <changelog author="mpluskal@suse.com" date="1482494400">- Cleanup package to follow packaging guidelines</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1487505600">- Update to version 0.16.0:
  * No changelog available.
- Build and install libraries, etc.
- Install configuration files.
- Recommend git for nimble.</changelog>
  <changelog author="jengelh@inai.de" date="1488456000">- Update description</changelog>
  <changelog author="mpluskal@suse.com" date="1489233600">- Update list of files to fix building on Factory</changelog>
  <changelog author="mpluskal@suse.com" date="1496491200">- Update to version 0.17.0:
  * https://nim-lang.org/blog/2017/05/17/version-0170-released.html</changelog>
  <changelog author="mpluskal@suse.com" date="1515153600">- Update to version 0.17.2:
  * Bugfix release
  * For details see:
    https://nim-lang.org/blog/2017/09/07/version-0172-released.html</changelog>
  <changelog author="mvetter@suse.com" date="1519992000">- Update to version 0.18.0:
  * Please see:
    https://nim-lang.org/blog/2018/03/01/version-0180-released.html
- Add nim-rpmlintrc</changelog>
  <changelog author="mvetter@suse.com" date="1540209600">- Update to version 0.19.0:
  * Please see:
    https://nim-lang.org/blog/2018/09/26/version-0190-released.html</changelog>
  <changelog author="mvetter@suse.com" date="1546344000">- Update to version 0.19.2:
  Please see:
  https://nim-lang.org/blog/2018/12/31/version-0192-released.html</changelog>
  <changelog author="m.szczepaniak.000@gmail.com" date="1557835200">- Update to version 0.19.6:
  Please see:
  https://nim-lang.org/blog/2019/05/13/version-0196-released.html</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1559304000">- Force more optflags usage
- Fix location of config files (boo#1137006)</changelog>
  <changelog author="m.szczepaniak.000@gmail.com" date="1559563200">- Added armv7l and aarch64</changelog>
  <changelog author="m.szczepaniak.000@gmail.com" date="1559563201">- Added ppc64le</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1573646400">- Update to version 1.0.2:
  * See https://nim-lang.org/blog.html for details
- Update dependencies (based on changes by Federico Ceratto</changelog>
  <changelog author="dmacvicar@suse.com" date="1592740800">- Update to version 1.2.2:
  * See https://nim-lang.org/blog.html for details
- Enable the full testsuite in the %check section
  * Add build dependencies to run the testsuite
  * Whitelists a few tests that are not passing yet</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1619006400">- Update to version 1.2.12
  * Fixed GC crash resulting from inlining of the memory
    allocation procs
  * Fixed ?incorrect raises effect for $(NimNode)? (#17454)
- from version 1.2.10
  * Fixed ?JS backend doesn?t handle float-&gt;int type conversion ? (#8404)
  * Fixed ?The ?try except? not work when the ?OSError:
    Too many open files? error occurs!? (#15925)
  * Fixed ?Nim emits #line 0 C preprocessor directives with
    ?debugger:native, with ICE in gcc-10? (#15942)
  * Fixed ?tfuturevar fails when activated? (#9695)
  * Fixed ?nre.escapeRe is not gcsafe? (#16103)
  * Fixed ??Error: internal error: genRecordFieldAux? - in
    the ?version-1-4? branch? (#16069)
  * Fixed ?-d:fulldebug switch does not compile with gc:arc? (#16214)
  * Fixed ?osLastError may randomly raise defect and crash? (#16359)
  * Fixed ?generic importc proc?s don?t work (breaking lots
    of vmops procs for js)? (#16428)
  * Fixed ?Concept: codegen ignores parameter passing? (#16897)
  * Fixed ?{.push exportc.} interacts with anonymous functions? (#16967)
  * Fixed ?memory allocation during {.global.} init breaks GC? (#17085)
  * Fixed "Nimble arbitrary code execution for specially crafted package metadata"
    + https://github.com/nim-lang/security/security/advisories/GHSA-rg9f-w24h-962p
    + (bsc#1185083, CVE-2021-21372)
  * Fixed "Nimble falls back to insecure http url when fetching packages"
    + https://github.com/nim-lang/security/security/advisories/GHSA-8w52-r35x-rgp8
    + (bsc#1185084, CVE-2021-21373)
  * Fixed "Nimble fails to validate certificates due to insecure httpClient defaults"
    + https://github.com/nim-lang/security/security/advisories/GHSA-c2wm-v66h-xhxx
    + (bsc#1185085, CVE-2021-21374)
- from version 1.2.8
  * Fixed ?Defer and ?gc:arc? (#15071)
  * Fixed ?Issue with ?gc:arc at compile time? (#15129)
  * Fixed ?Nil check on each field fails in generic function? (#15101)
  * Fixed ?[strscans] scanf doesn?t match a single character with
    $+ if it?s the end of the string? (#15064)
  * Fixed ?Crash and incorrect return values when using
    readPasswordFromStdin on Windows.? (#15207)
  * Fixed ?Inconsistent unsigned -&gt; signed RangeDefect usage
    across integer sizes? (#15210)
  * Fixed ?toHex results in RangeDefect exception when
    used with large uint64? (#15257)
  * Fixed ?Mixing ?return? with expressions is allowed in 1.2? (#15280)
  * Fixed ?proc execCmdEx doesn?t work with -d:useWinAnsi? (#14203)
  * Fixed ?memory corruption in tmarshall.nim? (#9754)
  * Fixed ?Wrong number of variables? (#15360)
  * Fixed ?defer doesnt work with block, break and await? (#15243)
  * Fixed ?Sizeof of case object is incorrect. Showstopper? (#15516)
  * Fixed ?Mixing ?return? with expressions is allowed in 1.2? (#15280)
  * Fixed ?regression(1.0.2 =&gt; 1.0.4) VM register messed up
    depending on unrelated context? (#15704)
- from version 1.2.6
  * Fixed ?The pegs module doesn?t work with generics!? (#14718)
  * Fixed ?[goto exceptions] {.noReturn.} pragma is not detected
    in a case expression? (#14458)
  * Fixed ?[exceptions:goto] C compiler error with dynlib pragma
    calling a proc? (#14240)
  * Fixed ?Nim source archive install: ?install.sh? fails with error:
    cp: cannot stat ?bin/nim-gdb?: No such file or directory? (#14748)
  * Fixed ?Stropped identifiers don?t work as field names in
    tuple literals? (#14911)
  * Fixed ?uri.decodeUrl crashes on incorrectly formatted input? (#14082)
  * Fixed ?odbcsql module has some wrong integer types? (#9771)
  * Fixed ?[ARC] Compiler crash declaring a finalizer proc
    directly in ?new?? (#15044)
  * Fixed ?code with named arguments in proc of winim/com can
    not been compiled? (#15056)
  * Fixed ?javascript backend produces javascript code with syntax
    error in object syntax? (#14534)
  * Fixed ?[ARC] SIGSEGV when calling a closure as a tuple
    field in a seq? (#15038)
  * Fixed ?Compiler crashes when using string as object variant
    selector with else branch? (#14189)
  * Fixed ?Constructing a uint64 range on a 32-bit machine leads
    to incorrect codegen? (#14616)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1644062400">- update to 1.2.16
  * oids: switch from PRNG to random module
  * nimc.rst: fix table markup
  * nimRawSetjmp: support Windows
  * correctly enable chronos
  * bigints are not supposed to work on 1.2.x
  * disable nimpy
  * misc bugfixes
  * fixes a 'mixin' statement handling regression [backport:1.2</changelog>
  <changelog author="David Anes &lt;david.anes@suse.com&gt;" date="1651665600">- Reworked whole package.
- Includes upstream fixes for:
  * (bsc#1175333, CVE-2020-15693) httpClient is vulnerable to a
    CR-LF injection
  * (bsc#1175334, CVE-2020-15692) mishandle of argument to
    browsers.openDefaultBrowser
  * (bsc#1175332, CVE-2020-15694) httpClient.get().contentLength()
    fails to properly validate the server response
  * (bsc#1192712, CVE-2021-41259) null byte accepted in getContent
    function, leading to URI validation bypass
  * (bsc#1185948, CVE-2021-29495) stdlib httpClient does not
    validate peer certificates by default
  * (bsc#1185085, CVE-2021-21374) Improper verification of the
    SSL/TLS certificate
  * (bsc#1185084, CVE-2021-21373) "nimble refresh" falls back to a
    non-TLS URL in case of error
  * (bsc#1185083, CVE-2021-21372) doCmd can be leveraged to execute
    arbitrary commands
  * (bsc#1181705, CVE-2020-15690) Standard library asyncftpclient
    lacks a check for newline character
- Add patches:
  * nim-fix-tests-certificate-key-too-small.patch
  * nim-fix-tests-ip-protocol-missing.patch
  * nim-nim-gdb_fix_interpreter.patch
- Following nim tools now work as expected:
  * nim_dbg is now installed.
  * nim-gdb can be successfully launched as it finds and loads
    nim-gdb.py correctly under gdb.
  * nimble package manager stores package information per user.
  * compiler package can be found and used, as it may be required
    by other packages.
- Update to 1.6.6
  * standard library use consistent styles for variable names so it
    can be used in projects which force a consistent style with
  - -styleCheck:usages option.
  * ARC/ORC are now considerably faster at method dispatching,
    bringing its performance back on the level of the refc memory
    management.
  * Full changelog:
    https://nim-lang.org/blog/2022/05/05/version-166-released.html
- Previous updates and changelogs:
  * 1.6.4:
    https://nim-lang.org/blog/2022/02/08/version-164-released.html
  * 1.6.2:
    https://nim-lang.org/blog/2021/12/17/version-162-released.html
  * 1.6.0:
    https://nim-lang.org/blog/2021/10/19/version-160-released.html
  * 1.4.8:
    https://nim-lang.org/blog/2021/05/25/version-148-released.html
  * 1.4.6:
    https://nim-lang.org/blog/2021/04/15/versions-146-and-1212-released.html
  * 1.4.4:
    https://nim-lang.org/blog/2021/02/23/versions-144-and-1210-released.html
  * 1.4.2:
    https://nim-lang.org/blog/2020/12/01/version-142-released.html
  * 1.4.0:
    https://nim-lang.org/blog/2020/10/16/version-140-released.html</changelog>
  <changelog author="David Anes &lt;david.anes@suse.com&gt;" date="1657800000">- Remove duplicated strip for nimble.
- Require (at least) a C compiler.
- Addded _constraints file to require more RAM on build nodes.
- Add patch to correctly detect GCC version, so it builds in i586
  and arm:
  * nim-fix-gcc-major-version-detection.patch</changelog>
  <changelog author="David Anes &lt;david.anes@suse.com&gt;" date="1659960000">- Disable some tests for some platforms:
  * SFML tests/buildrequires are removed to simplify having the same
    version in all repositories (SLE, backports, etc.).
  * Disable test "tests/arc/tasyncorc.nim", which is failing in
    ppc64le (backports).
- Require/recommend NodeJS 12 only where it is provided, so the
  package is buildable on more codestreams.</changelog>
</package>
<package pkgid="f3641236309deb6ea4691fb4a134b4d87b52633203e757d9322be1fafc51a40a" name="opensuse-welcome" arch="aarch64">
  <version epoch="0" ver="0.1.9+git.0.66be0d8" rel="bp154.2.3.1"/>
  <changelog author="Carson Black &lt;uhhadd@gmail.com&gt;" date="1558440000">- initial version</changelog>
  <changelog author="Carson Black &lt;uhhadd@gmail.com&gt;" date="1558526400">- update to version 0.2</changelog>
  <changelog author="Carson Black &lt;uhhadd@gmail.com&gt;" date="1558612800">- Update to version 0.5
- Copy desktop files to needed locations</changelog>
  <changelog author="Carson Black &lt;uhhadd@gmail.com&gt;" date="1559649600">- looks like we're hopping back down some versions to 0.1.0, openSUSE Leap style
- move to openSUSE github</changelog>
  <changelog author="Carson Black &lt;uhhadd@gmail.com&gt;" date="1561032000">- update to version 0.1.1
- cmake installs desktop files now
- uses ninja now too</changelog>
  <changelog author="Carson Black &lt;uhhadd@gmail.com&gt;" date="1561118400">- update to version 0.1.2
- files now have license headers</changelog>
  <changelog author="Carson Black &lt;uhhadd@gmail.com&gt;" date="1562760000">- fix naming issue pointed out by factory-auto
- fix license to match LICENSE file</changelog>
  <changelog author="Carson Black &lt;uhhadd@gmail.com&gt;" date="1562760001">- Update to 1.3
- Fix license (again)
- Improved metadata (appstream, reverse dns)
- New icon
- Better RSS security</changelog>
  <changelog author="Carson Black &lt;uhhadd@gmail.com&gt;" date="1563019200">- Update to 1.4
- Even better RSS security
- Spanish translation</changelog>
  <changelog author="Carson Black &lt;uhhadd@gmail.com&gt;" date="1563710400">- Update to 0.1.5
- Translations are bundled outside of the binary now
- Messages are no longer spammed to console when running from terminal
- Unneeded and unused things removed for a smaller binary
- Mastodon social media now listed
- Subpackage translations</changelog>
  <changelog author="Carson Black &lt;uhhadd@gmail.com&gt;" date="1566388800">- Update to 0.1.6
- More translations, woo-hoo
- Fix bug where launching a help program causes the program to freeze</changelog>
  <changelog author="Carson Black &lt;uhhadd@gmail.com&gt;" date="1569931200">- Update to 0.1.7.1
- Way more translations have been added.
- The available translations are now:
  * Catalan
  * Chinese (China)
  * Czech
  * Dutch
  * French
  * German
  * Italian [45.1%]
  * Japanese
  * Polish
  * Portuguese (Brazil)
  * Russian [51.2%]
  - Spanish</changelog>
  <changelog author="Carson Black &lt;uhhadd@gmail.com&gt;" date="1590840000">- Update to 0.1.8</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1643889600">- Update to 0.1.8+git.40.95061c3
  * Translation updates
- Add _service to get latest source + translations from git,
  fixes boo#1185893</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1644148800">- Update to version 0.1.8+git.44.7923e16:
  * Added Lithuanian translation using Weblate</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1653393600">- Do not recommend lang package: the lang package has smarter
  supplements in place.</changelog>
  <changelog author="dimstar@opensuse.org" date="1653998400">- Update to version 0.1.8+git.46.64e51ec:
  + Updated translations (Catalan, Russian, Swedish, Ukrainian).
- Add back -lang recommends to the main package: the -lang package
  does not follow the standard method of installing translations to
  /usr/share/locale, but installs everything to
  /usr/share/opensuse-welcome. As such, the automatic supplements
  do not trigger as intended. A opensuse-welcome-lang.inc is being
  generated to make the recommends still smarter, based on selected
  locales in zypp.</changelog>
  <changelog author="tux93@opensuse.org" date="1663588800">- Update to version 0.1.9+git.0.66be0d8:
  * fix: it's called Plasma
  * fix: make openSUSE welcome work again (boo#1194380)
  * fix: undead the URLs to Telegram groups
  * Translation updates</changelog>
</package>
<package pkgid="cec3c32019bffb7c118e1b54ca437681379c9e8293a1e195fbab628112f191aa" name="opensuse-welcome" arch="src">
  <version epoch="0" ver="0.1.9+git.0.66be0d8" rel="bp154.2.3.1"/>
  <changelog author="Carson Black &lt;uhhadd@gmail.com&gt;" date="1558440000">- initial version</changelog>
  <changelog author="Carson Black &lt;uhhadd@gmail.com&gt;" date="1558526400">- update to version 0.2</changelog>
  <changelog author="Carson Black &lt;uhhadd@gmail.com&gt;" date="1558612800">- Update to version 0.5
- Copy desktop files to needed locations</changelog>
  <changelog author="Carson Black &lt;uhhadd@gmail.com&gt;" date="1559649600">- looks like we're hopping back down some versions to 0.1.0, openSUSE Leap style
- move to openSUSE github</changelog>
  <changelog author="Carson Black &lt;uhhadd@gmail.com&gt;" date="1561032000">- update to version 0.1.1
- cmake installs desktop files now
- uses ninja now too</changelog>
  <changelog author="Carson Black &lt;uhhadd@gmail.com&gt;" date="1561118400">- update to version 0.1.2
- files now have license headers</changelog>
  <changelog author="Carson Black &lt;uhhadd@gmail.com&gt;" date="1562760000">- fix naming issue pointed out by factory-auto
- fix license to match LICENSE file</changelog>
  <changelog author="Carson Black &lt;uhhadd@gmail.com&gt;" date="1562760001">- Update to 1.3
- Fix license (again)
- Improved metadata (appstream, reverse dns)
- New icon
- Better RSS security</changelog>
  <changelog author="Carson Black &lt;uhhadd@gmail.com&gt;" date="1563019200">- Update to 1.4
- Even better RSS security
- Spanish translation</changelog>
  <changelog author="Carson Black &lt;uhhadd@gmail.com&gt;" date="1563710400">- Update to 0.1.5
- Translations are bundled outside of the binary now
- Messages are no longer spammed to console when running from terminal
- Unneeded and unused things removed for a smaller binary
- Mastodon social media now listed
- Subpackage translations</changelog>
  <changelog author="Carson Black &lt;uhhadd@gmail.com&gt;" date="1566388800">- Update to 0.1.6
- More translations, woo-hoo
- Fix bug where launching a help program causes the program to freeze</changelog>
  <changelog author="Carson Black &lt;uhhadd@gmail.com&gt;" date="1569931200">- Update to 0.1.7.1
- Way more translations have been added.
- The available translations are now:
  * Catalan
  * Chinese (China)
  * Czech
  * Dutch
  * French
  * German
  * Italian [45.1%]
  * Japanese
  * Polish
  * Portuguese (Brazil)
  * Russian [51.2%]
  - Spanish</changelog>
  <changelog author="Carson Black &lt;uhhadd@gmail.com&gt;" date="1590840000">- Update to 0.1.8</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1643889600">- Update to 0.1.8+git.40.95061c3
  * Translation updates
- Add _service to get latest source + translations from git,
  fixes boo#1185893</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1644148800">- Update to version 0.1.8+git.44.7923e16:
  * Added Lithuanian translation using Weblate</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1653393600">- Do not recommend lang package: the lang package has smarter
  supplements in place.</changelog>
  <changelog author="dimstar@opensuse.org" date="1653998400">- Update to version 0.1.8+git.46.64e51ec:
  + Updated translations (Catalan, Russian, Swedish, Ukrainian).
- Add back -lang recommends to the main package: the -lang package
  does not follow the standard method of installing translations to
  /usr/share/locale, but installs everything to
  /usr/share/opensuse-welcome. As such, the automatic supplements
  do not trigger as intended. A opensuse-welcome-lang.inc is being
  generated to make the recommends still smarter, based on selected
  locales in zypp.</changelog>
  <changelog author="tux93@opensuse.org" date="1663588800">- Update to version 0.1.9+git.0.66be0d8:
  * fix: it's called Plasma
  * fix: make openSUSE welcome work again (boo#1194380)
  * fix: undead the URLs to Telegram groups
  * Translation updates</changelog>
</package>
<package pkgid="24f55999e20e606e6662bd5f9da0818f2b097018671933786a42f28d4a407881" name="opensuse-welcome" arch="x86_64">
  <version epoch="0" ver="0.1.9+git.0.66be0d8" rel="bp154.2.3.1"/>
  <changelog author="Carson Black &lt;uhhadd@gmail.com&gt;" date="1558440000">- initial version</changelog>
  <changelog author="Carson Black &lt;uhhadd@gmail.com&gt;" date="1558526400">- update to version 0.2</changelog>
  <changelog author="Carson Black &lt;uhhadd@gmail.com&gt;" date="1558612800">- Update to version 0.5
- Copy desktop files to needed locations</changelog>
  <changelog author="Carson Black &lt;uhhadd@gmail.com&gt;" date="1559649600">- looks like we're hopping back down some versions to 0.1.0, openSUSE Leap style
- move to openSUSE github</changelog>
  <changelog author="Carson Black &lt;uhhadd@gmail.com&gt;" date="1561032000">- update to version 0.1.1
- cmake installs desktop files now
- uses ninja now too</changelog>
  <changelog author="Carson Black &lt;uhhadd@gmail.com&gt;" date="1561118400">- update to version 0.1.2
- files now have license headers</changelog>
  <changelog author="Carson Black &lt;uhhadd@gmail.com&gt;" date="1562760000">- fix naming issue pointed out by factory-auto
- fix license to match LICENSE file</changelog>
  <changelog author="Carson Black &lt;uhhadd@gmail.com&gt;" date="1562760001">- Update to 1.3
- Fix license (again)
- Improved metadata (appstream, reverse dns)
- New icon
- Better RSS security</changelog>
  <changelog author="Carson Black &lt;uhhadd@gmail.com&gt;" date="1563019200">- Update to 1.4
- Even better RSS security
- Spanish translation</changelog>
  <changelog author="Carson Black &lt;uhhadd@gmail.com&gt;" date="1563710400">- Update to 0.1.5
- Translations are bundled outside of the binary now
- Messages are no longer spammed to console when running from terminal
- Unneeded and unused things removed for a smaller binary
- Mastodon social media now listed
- Subpackage translations</changelog>
  <changelog author="Carson Black &lt;uhhadd@gmail.com&gt;" date="1566388800">- Update to 0.1.6
- More translations, woo-hoo
- Fix bug where launching a help program causes the program to freeze</changelog>
  <changelog author="Carson Black &lt;uhhadd@gmail.com&gt;" date="1569931200">- Update to 0.1.7.1
- Way more translations have been added.
- The available translations are now:
  * Catalan
  * Chinese (China)
  * Czech
  * Dutch
  * French
  * German
  * Italian [45.1%]
  * Japanese
  * Polish
  * Portuguese (Brazil)
  * Russian [51.2%]
  - Spanish</changelog>
  <changelog author="Carson Black &lt;uhhadd@gmail.com&gt;" date="1590840000">- Update to 0.1.8</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1643889600">- Update to 0.1.8+git.40.95061c3
  * Translation updates
- Add _service to get latest source + translations from git,
  fixes boo#1185893</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1644148800">- Update to version 0.1.8+git.44.7923e16:
  * Added Lithuanian translation using Weblate</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1653393600">- Do not recommend lang package: the lang package has smarter
  supplements in place.</changelog>
  <changelog author="dimstar@opensuse.org" date="1653998400">- Update to version 0.1.8+git.46.64e51ec:
  + Updated translations (Catalan, Russian, Swedish, Ukrainian).
- Add back -lang recommends to the main package: the -lang package
  does not follow the standard method of installing translations to
  /usr/share/locale, but installs everything to
  /usr/share/opensuse-welcome. As such, the automatic supplements
  do not trigger as intended. A opensuse-welcome-lang.inc is being
  generated to make the recommends still smarter, based on selected
  locales in zypp.</changelog>
  <changelog author="tux93@opensuse.org" date="1663588800">- Update to version 0.1.9+git.0.66be0d8:
  * fix: it's called Plasma
  * fix: make openSUSE welcome work again (boo#1194380)
  * fix: undead the URLs to Telegram groups
  * Translation updates</changelog>
</package>
<package pkgid="84220f35af53cbfdf7fd274f16580f10e1472beecc106f20b462d60bebbbe8a6" name="opensuse-welcome-lang" arch="noarch">
  <version epoch="0" ver="0.1.9+git.0.66be0d8" rel="bp154.2.3.1"/>
  <changelog author="Carson Black &lt;uhhadd@gmail.com&gt;" date="1558440000">- initial version</changelog>
  <changelog author="Carson Black &lt;uhhadd@gmail.com&gt;" date="1558526400">- update to version 0.2</changelog>
  <changelog author="Carson Black &lt;uhhadd@gmail.com&gt;" date="1558612800">- Update to version 0.5
- Copy desktop files to needed locations</changelog>
  <changelog author="Carson Black &lt;uhhadd@gmail.com&gt;" date="1559649600">- looks like we're hopping back down some versions to 0.1.0, openSUSE Leap style
- move to openSUSE github</changelog>
  <changelog author="Carson Black &lt;uhhadd@gmail.com&gt;" date="1561032000">- update to version 0.1.1
- cmake installs desktop files now
- uses ninja now too</changelog>
  <changelog author="Carson Black &lt;uhhadd@gmail.com&gt;" date="1561118400">- update to version 0.1.2
- files now have license headers</changelog>
  <changelog author="Carson Black &lt;uhhadd@gmail.com&gt;" date="1562760000">- fix naming issue pointed out by factory-auto
- fix license to match LICENSE file</changelog>
  <changelog author="Carson Black &lt;uhhadd@gmail.com&gt;" date="1562760001">- Update to 1.3
- Fix license (again)
- Improved metadata (appstream, reverse dns)
- New icon
- Better RSS security</changelog>
  <changelog author="Carson Black &lt;uhhadd@gmail.com&gt;" date="1563019200">- Update to 1.4
- Even better RSS security
- Spanish translation</changelog>
  <changelog author="Carson Black &lt;uhhadd@gmail.com&gt;" date="1563710400">- Update to 0.1.5
- Translations are bundled outside of the binary now
- Messages are no longer spammed to console when running from terminal
- Unneeded and unused things removed for a smaller binary
- Mastodon social media now listed
- Subpackage translations</changelog>
  <changelog author="Carson Black &lt;uhhadd@gmail.com&gt;" date="1566388800">- Update to 0.1.6
- More translations, woo-hoo
- Fix bug where launching a help program causes the program to freeze</changelog>
  <changelog author="Carson Black &lt;uhhadd@gmail.com&gt;" date="1569931200">- Update to 0.1.7.1
- Way more translations have been added.
- The available translations are now:
  * Catalan
  * Chinese (China)
  * Czech
  * Dutch
  * French
  * German
  * Italian [45.1%]
  * Japanese
  * Polish
  * Portuguese (Brazil)
  * Russian [51.2%]
  - Spanish</changelog>
  <changelog author="Carson Black &lt;uhhadd@gmail.com&gt;" date="1590840000">- Update to 0.1.8</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1643889600">- Update to 0.1.8+git.40.95061c3
  * Translation updates
- Add _service to get latest source + translations from git,
  fixes boo#1185893</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1644148800">- Update to version 0.1.8+git.44.7923e16:
  * Added Lithuanian translation using Weblate</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1653393600">- Do not recommend lang package: the lang package has smarter
  supplements in place.</changelog>
  <changelog author="dimstar@opensuse.org" date="1653998400">- Update to version 0.1.8+git.46.64e51ec:
  + Updated translations (Catalan, Russian, Swedish, Ukrainian).
- Add back -lang recommends to the main package: the -lang package
  does not follow the standard method of installing translations to
  /usr/share/locale, but installs everything to
  /usr/share/opensuse-welcome. As such, the automatic supplements
  do not trigger as intended. A opensuse-welcome-lang.inc is being
  generated to make the recommends still smarter, based on selected
  locales in zypp.</changelog>
  <changelog author="tux93@opensuse.org" date="1663588800">- Update to version 0.1.9+git.0.66be0d8:
  * fix: it's called Plasma
  * fix: make openSUSE welcome work again (boo#1194380)
  * fix: undead the URLs to Telegram groups
  * Translation updates</changelog>
</package>
<package pkgid="c81c7918c349359f2ae32ccd4a90edc926779d4335f03da0cdb5fab5dcb41402" name="opi" arch="noarch">
  <version epoch="0" ver="2.10.0" rel="bp154.2.9.1"/>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1620043200">- Version 2.0.0
  * Added
  - Automated tests
  - Extensible Plugin interface for plugins (eg. this one)
  - Added plugins for chrome, dotnet, edge, teams, packman, plex,
    skype, slack, teamviewer, vivaldi, vscode, vscodium, zoom
  * Changed
  - Rewrote the complete tool in python3</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1625572800">- Version 2.1.0
  * Added
  - Support for dnf backend
  * Changed
  - Deduplicated packman repo creation code</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1628596800">- Version 2.1.1
  * Added
  - Plugin for Brave Browser</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1629460800">- Version 2.2.0
  * Added
  - Plugin for MEGA
  - Plugin for Edge Beta
  - Argument parser with option for reverse output order</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1630929600">- Version 2.3.0
  * Changed
  - Fixed gpgcheck entry in add_repo()
  - Allowed using multiple query keywords that are combined using AND
  * Added
  - Plugin for sublime text
  - Plugin for yandex-disk</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1633953600">- Version 2.4.0
  * Added
  - Scrolling of results
  - Plugin for atom editor</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1633953601">- Version 2.4.1
  * Changed
  - Don't expect output to be a tty</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1635163200">- Version 2.4.2
  * Changed
  - Switched to opensuse provided opi proxy</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1643025600">- Version 2.4.3
- Fix for tumbleweed based MicroOS</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1643371200">- Version 2.4.4
- Fix for Alpha/Beta dist versions (boo#1195206)</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1646136000">- Version 2.4.5
- Packman codec changes</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1650628800">- Version 2.4.6
- Update .NET SDK to 6.0</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1650888000">- Version 2.4.7
- Fix release script
- Fix numbering in --help
- Update README.md
- Add release helper script</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1652702400">- Version 2.5.0
- Improve testsuite when ran locally
- Fix 01_install_from_packman.py test for leap
- Fix 02_install_from_home.py test for leap
- Run ci for both tumbleweed and leap
- Use $releasever in repo creation on Leap
- Run "osc up" in release.sh</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1653998400">- Version 2.6.0
- Move to global config in /etc/opi.cfg
- Check if desired repo is already added instead of relying on prefix
- Add config option use_releasever_var</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1653998401">- Do not compress man page during build/install phase, but rather
  rely on the brp-scripts to pick the right compression format.</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1655121600">- Version 2.7.0
- Make repo parsing more stable and improve error handling</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1660046400">- Version 2.8.0
- add anydesk
- add yandex browser
- Use list for plugin queries and check for conflicts
- Don't show projects with non-matching repo</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1672660800">- Version 2.9.0
- Install selected package explicitly from the selected repo
- Switch to resilio-sync for testsuite
- add resilio-sync</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1674734400">- Version 2.10.0
- Ask for submit in release.sh
- Fix packman plugin for 15.4
- Introduce repo key handling (bsc#1207334)</changelog>
</package>
<package pkgid="b8f77f9014812405ebc11e311eca09a530cc6cbd1569234bbc08817734a64133" name="opi" arch="src">
  <version epoch="0" ver="2.10.0" rel="bp154.2.9.1"/>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1620043200">- Version 2.0.0
  * Added
  - Automated tests
  - Extensible Plugin interface for plugins (eg. this one)
  - Added plugins for chrome, dotnet, edge, teams, packman, plex,
    skype, slack, teamviewer, vivaldi, vscode, vscodium, zoom
  * Changed
  - Rewrote the complete tool in python3</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1625572800">- Version 2.1.0
  * Added
  - Support for dnf backend
  * Changed
  - Deduplicated packman repo creation code</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1628596800">- Version 2.1.1
  * Added
  - Plugin for Brave Browser</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1629460800">- Version 2.2.0
  * Added
  - Plugin for MEGA
  - Plugin for Edge Beta
  - Argument parser with option for reverse output order</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1630929600">- Version 2.3.0
  * Changed
  - Fixed gpgcheck entry in add_repo()
  - Allowed using multiple query keywords that are combined using AND
  * Added
  - Plugin for sublime text
  - Plugin for yandex-disk</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1633953600">- Version 2.4.0
  * Added
  - Scrolling of results
  - Plugin for atom editor</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1633953601">- Version 2.4.1
  * Changed
  - Don't expect output to be a tty</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1635163200">- Version 2.4.2
  * Changed
  - Switched to opensuse provided opi proxy</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1643025600">- Version 2.4.3
- Fix for tumbleweed based MicroOS</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1643371200">- Version 2.4.4
- Fix for Alpha/Beta dist versions (boo#1195206)</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1646136000">- Version 2.4.5
- Packman codec changes</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1650628800">- Version 2.4.6
- Update .NET SDK to 6.0</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1650888000">- Version 2.4.7
- Fix release script
- Fix numbering in --help
- Update README.md
- Add release helper script</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1652702400">- Version 2.5.0
- Improve testsuite when ran locally
- Fix 01_install_from_packman.py test for leap
- Fix 02_install_from_home.py test for leap
- Run ci for both tumbleweed and leap
- Use $releasever in repo creation on Leap
- Run "osc up" in release.sh</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1653998400">- Version 2.6.0
- Move to global config in /etc/opi.cfg
- Check if desired repo is already added instead of relying on prefix
- Add config option use_releasever_var</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1653998401">- Do not compress man page during build/install phase, but rather
  rely on the brp-scripts to pick the right compression format.</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1655121600">- Version 2.7.0
- Make repo parsing more stable and improve error handling</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1660046400">- Version 2.8.0
- add anydesk
- add yandex browser
- Use list for plugin queries and check for conflicts
- Don't show projects with non-matching repo</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1672660800">- Version 2.9.0
- Install selected package explicitly from the selected repo
- Switch to resilio-sync for testsuite
- add resilio-sync</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1674734400">- Version 2.10.0
- Ask for submit in release.sh
- Fix packman plugin for 15.4
- Introduce repo key handling (bsc#1207334)</changelog>
</package>
<package pkgid="aeaa2b47ebe01a57c7886636f00f6bb7504240026acd5b9e5799ca97df259427" name="opi" arch="noarch">
  <version epoch="0" ver="2.11.0" rel="bp154.2.12.1"/>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1625572800">- Version 2.1.0
  * Added
  - Support for dnf backend
  * Changed
  - Deduplicated packman repo creation code</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1628596800">- Version 2.1.1
  * Added
  - Plugin for Brave Browser</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1629460800">- Version 2.2.0
  * Added
  - Plugin for MEGA
  - Plugin for Edge Beta
  - Argument parser with option for reverse output order</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1630929600">- Version 2.3.0
  * Changed
  - Fixed gpgcheck entry in add_repo()
  - Allowed using multiple query keywords that are combined using AND
  * Added
  - Plugin for sublime text
  - Plugin for yandex-disk</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1633953600">- Version 2.4.0
  * Added
  - Scrolling of results
  - Plugin for atom editor</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1633953601">- Version 2.4.1
  * Changed
  - Don't expect output to be a tty</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1635163200">- Version 2.4.2
  * Changed
  - Switched to opensuse provided opi proxy</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1643025600">- Version 2.4.3
- Fix for tumbleweed based MicroOS</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1643371200">- Version 2.4.4
- Fix for Alpha/Beta dist versions (boo#1195206)</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1646136000">- Version 2.4.5
- Packman codec changes</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1650628800">- Version 2.4.6
- Update .NET SDK to 6.0</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1650888000">- Version 2.4.7
- Fix release script
- Fix numbering in --help
- Update README.md
- Add release helper script</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1652702400">- Version 2.5.0
- Improve testsuite when ran locally
- Fix 01_install_from_packman.py test for leap
- Fix 02_install_from_home.py test for leap
- Run ci for both tumbleweed and leap
- Use $releasever in repo creation on Leap
- Run "osc up" in release.sh</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1653998400">- Version 2.6.0
- Move to global config in /etc/opi.cfg
- Check if desired repo is already added instead of relying on prefix
- Add config option use_releasever_var</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1653998401">- Do not compress man page during build/install phase, but rather
  rely on the brp-scripts to pick the right compression format.</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1655121600">- Version 2.7.0
- Make repo parsing more stable and improve error handling</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1660046400">- Version 2.8.0
- add anydesk
- add yandex browser
- Use list for plugin queries and check for conflicts
- Don't show projects with non-matching repo</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1672660800">- Version 2.9.0
- Install selected package explicitly from the selected repo
- Switch to resilio-sync for testsuite
- add resilio-sync</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1674734400">- Version 2.10.0
- Ask for submit in release.sh
- Fix packman plugin for 15.4
- Introduce repo key handling (bsc#1207334)</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1675080000">- Version 2.11.0
- Handle repos with multiple keys in key file (fixes #118)</changelog>
</package>
<package pkgid="651d62799e6c72247f8ff60087e107facb2ff22af191b11c185fdf8ddd2623ab" name="opi" arch="src">
  <version epoch="0" ver="2.11.0" rel="bp154.2.12.1"/>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1625572800">- Version 2.1.0
  * Added
  - Support for dnf backend
  * Changed
  - Deduplicated packman repo creation code</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1628596800">- Version 2.1.1
  * Added
  - Plugin for Brave Browser</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1629460800">- Version 2.2.0
  * Added
  - Plugin for MEGA
  - Plugin for Edge Beta
  - Argument parser with option for reverse output order</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1630929600">- Version 2.3.0
  * Changed
  - Fixed gpgcheck entry in add_repo()
  - Allowed using multiple query keywords that are combined using AND
  * Added
  - Plugin for sublime text
  - Plugin for yandex-disk</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1633953600">- Version 2.4.0
  * Added
  - Scrolling of results
  - Plugin for atom editor</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1633953601">- Version 2.4.1
  * Changed
  - Don't expect output to be a tty</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1635163200">- Version 2.4.2
  * Changed
  - Switched to opensuse provided opi proxy</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1643025600">- Version 2.4.3
- Fix for tumbleweed based MicroOS</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1643371200">- Version 2.4.4
- Fix for Alpha/Beta dist versions (boo#1195206)</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1646136000">- Version 2.4.5
- Packman codec changes</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1650628800">- Version 2.4.6
- Update .NET SDK to 6.0</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1650888000">- Version 2.4.7
- Fix release script
- Fix numbering in --help
- Update README.md
- Add release helper script</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1652702400">- Version 2.5.0
- Improve testsuite when ran locally
- Fix 01_install_from_packman.py test for leap
- Fix 02_install_from_home.py test for leap
- Run ci for both tumbleweed and leap
- Use $releasever in repo creation on Leap
- Run "osc up" in release.sh</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1653998400">- Version 2.6.0
- Move to global config in /etc/opi.cfg
- Check if desired repo is already added instead of relying on prefix
- Add config option use_releasever_var</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1653998401">- Do not compress man page during build/install phase, but rather
  rely on the brp-scripts to pick the right compression format.</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1655121600">- Version 2.7.0
- Make repo parsing more stable and improve error handling</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1660046400">- Version 2.8.0
- add anydesk
- add yandex browser
- Use list for plugin queries and check for conflicts
- Don't show projects with non-matching repo</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1672660800">- Version 2.9.0
- Install selected package explicitly from the selected repo
- Switch to resilio-sync for testsuite
- add resilio-sync</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1674734400">- Version 2.10.0
- Ask for submit in release.sh
- Fix packman plugin for 15.4
- Introduce repo key handling (bsc#1207334)</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1675080000">- Version 2.11.0
- Handle repos with multiple keys in key file (fixes #118)</changelog>
</package>
<package pkgid="6f8ac54e2f4013bbe7ab9ad6dd591c80f2b338f5cc3eb10ac6128ee6fa6cb948" name="opi" arch="noarch">
  <version epoch="0" ver="2.5.0" rel="bp154.2.3.1"/>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1589630400">- Version 0.8.2
  * Fixed
  - Ghost process on XML parsing failure</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1595678400">- Version 0.8.3
  * Fixed
  - ffmpeg/libav packages due to Packman update</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1601726400">- Version 0.9.0
  * Added
  - Help (-h, --help) and version (-v, --version) option
  * Changed
  - Filter out -devel, -docs and -lang packages
  - Don't show i586 packages on x86_64 system</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1604232000">- Fix appstream file location</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1610884800">- Version 0.10.0
  * Added
  - Microsoft Teams installer
  - Warning for personal repository</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1618574400">- stop owning dirs provided by filesytem rpm (bsc#1184786)</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1620043200">- Version 2.0.0
  * Added
  - Automated tests
  - Extensible Plugin interface for plugins (eg. this one)
  - Added plugins for chrome, dotnet, edge, teams, packman, plex,
    skype, slack, teamviewer, vivaldi, vscode, vscodium, zoom
  * Changed
  - Rewrote the complete tool in python3</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1625572800">- Version 2.1.0
  * Added
  - Support for dnf backend
  * Changed
  - Deduplicated packman repo creation code</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1628596800">- Version 2.1.1
  * Added
  - Plugin for Brave Browser</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1629460800">- Version 2.2.0
  * Added
  - Plugin for MEGA
  - Plugin for Edge Beta
  - Argument parser with option for reverse output order</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1630929600">- Version 2.3.0
  * Changed
  - Fixed gpgcheck entry in add_repo()
  - Allowed using multiple query keywords that are combined using AND
  * Added
  - Plugin for sublime text
  - Plugin for yandex-disk</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1633953600">- Version 2.4.0
  * Added
  - Scrolling of results
  - Plugin for atom editor</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1633953601">- Version 2.4.1
  * Changed
  - Don't expect output to be a tty</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1635163200">- Version 2.4.2
  * Changed
  - Switched to opensuse provided opi proxy</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1643025600">- Version 2.4.3
- Fix for tumbleweed based MicroOS</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1643371200">- Version 2.4.4
- Fix for Alpha/Beta dist versions (boo#1195206)</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1646136000">- Version 2.4.5
- Packman codec changes</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1650628800">- Version 2.4.6
- Update .NET SDK to 6.0</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1650888000">- Version 2.4.7
- Fix release script
- Fix numbering in --help
- Update README.md
- Add release helper script</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1652702400">- Version 2.5.0
- Improve testsuite when ran locally
- Fix 01_install_from_packman.py test for leap
- Fix 02_install_from_home.py test for leap
- Run ci for both tumbleweed and leap
- Use $releasever in repo creation on Leap
- Run "osc up" in release.sh</changelog>
</package>
<package pkgid="689dca5794a604424e3d2cd09f07542f4d8e8365e8058a8fecd2937defba44c7" name="opi" arch="src">
  <version epoch="0" ver="2.5.0" rel="bp154.2.3.1"/>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1589630400">- Version 0.8.2
  * Fixed
  - Ghost process on XML parsing failure</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1595678400">- Version 0.8.3
  * Fixed
  - ffmpeg/libav packages due to Packman update</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1601726400">- Version 0.9.0
  * Added
  - Help (-h, --help) and version (-v, --version) option
  * Changed
  - Filter out -devel, -docs and -lang packages
  - Don't show i586 packages on x86_64 system</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1604232000">- Fix appstream file location</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1610884800">- Version 0.10.0
  * Added
  - Microsoft Teams installer
  - Warning for personal repository</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1618574400">- stop owning dirs provided by filesytem rpm (bsc#1184786)</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1620043200">- Version 2.0.0
  * Added
  - Automated tests
  - Extensible Plugin interface for plugins (eg. this one)
  - Added plugins for chrome, dotnet, edge, teams, packman, plex,
    skype, slack, teamviewer, vivaldi, vscode, vscodium, zoom
  * Changed
  - Rewrote the complete tool in python3</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1625572800">- Version 2.1.0
  * Added
  - Support for dnf backend
  * Changed
  - Deduplicated packman repo creation code</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1628596800">- Version 2.1.1
  * Added
  - Plugin for Brave Browser</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1629460800">- Version 2.2.0
  * Added
  - Plugin for MEGA
  - Plugin for Edge Beta
  - Argument parser with option for reverse output order</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1630929600">- Version 2.3.0
  * Changed
  - Fixed gpgcheck entry in add_repo()
  - Allowed using multiple query keywords that are combined using AND
  * Added
  - Plugin for sublime text
  - Plugin for yandex-disk</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1633953600">- Version 2.4.0
  * Added
  - Scrolling of results
  - Plugin for atom editor</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1633953601">- Version 2.4.1
  * Changed
  - Don't expect output to be a tty</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1635163200">- Version 2.4.2
  * Changed
  - Switched to opensuse provided opi proxy</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1643025600">- Version 2.4.3
- Fix for tumbleweed based MicroOS</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1643371200">- Version 2.4.4
- Fix for Alpha/Beta dist versions (boo#1195206)</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1646136000">- Version 2.4.5
- Packman codec changes</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1650628800">- Version 2.4.6
- Update .NET SDK to 6.0</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1650888000">- Version 2.4.7
- Fix release script
- Fix numbering in --help
- Update README.md
- Add release helper script</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1652702400">- Version 2.5.0
- Improve testsuite when ran locally
- Fix 01_install_from_packman.py test for leap
- Fix 02_install_from_home.py test for leap
- Run ci for both tumbleweed and leap
- Use $releasever in repo creation on Leap
- Run "osc up" in release.sh</changelog>
</package>
<package pkgid="e17670c8e8acf5dfa32c5335de060ba5b5213b8171223d6efb089d4f1626af8c" name="opi" arch="noarch">
  <version epoch="0" ver="2.7.0" rel="bp154.2.6.1"/>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1604232000">- Fix appstream file location</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1610884800">- Version 0.10.0
  * Added
  - Microsoft Teams installer
  - Warning for personal repository</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1618574400">- stop owning dirs provided by filesytem rpm (bsc#1184786)</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1620043200">- Version 2.0.0
  * Added
  - Automated tests
  - Extensible Plugin interface for plugins (eg. this one)
  - Added plugins for chrome, dotnet, edge, teams, packman, plex,
    skype, slack, teamviewer, vivaldi, vscode, vscodium, zoom
  * Changed
  - Rewrote the complete tool in python3</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1625572800">- Version 2.1.0
  * Added
  - Support for dnf backend
  * Changed
  - Deduplicated packman repo creation code</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1628596800">- Version 2.1.1
  * Added
  - Plugin for Brave Browser</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1629460800">- Version 2.2.0
  * Added
  - Plugin for MEGA
  - Plugin for Edge Beta
  - Argument parser with option for reverse output order</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1630929600">- Version 2.3.0
  * Changed
  - Fixed gpgcheck entry in add_repo()
  - Allowed using multiple query keywords that are combined using AND
  * Added
  - Plugin for sublime text
  - Plugin for yandex-disk</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1633953600">- Version 2.4.0
  * Added
  - Scrolling of results
  - Plugin for atom editor</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1633953601">- Version 2.4.1
  * Changed
  - Don't expect output to be a tty</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1635163200">- Version 2.4.2
  * Changed
  - Switched to opensuse provided opi proxy</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1643025600">- Version 2.4.3
- Fix for tumbleweed based MicroOS</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1643371200">- Version 2.4.4
- Fix for Alpha/Beta dist versions (boo#1195206)</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1646136000">- Version 2.4.5
- Packman codec changes</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1650628800">- Version 2.4.6
- Update .NET SDK to 6.0</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1650888000">- Version 2.4.7
- Fix release script
- Fix numbering in --help
- Update README.md
- Add release helper script</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1652702400">- Version 2.5.0
- Improve testsuite when ran locally
- Fix 01_install_from_packman.py test for leap
- Fix 02_install_from_home.py test for leap
- Run ci for both tumbleweed and leap
- Use $releasever in repo creation on Leap
- Run "osc up" in release.sh</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1653998400">- Version 2.6.0
- Move to global config in /etc/opi.cfg
- Check if desired repo is already added instead of relying on prefix
- Add config option use_releasever_var</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1653998401">- Do not compress man page during build/install phase, but rather
  rely on the brp-scripts to pick the right compression format.</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1655121600">- Version 2.7.0
- Make repo parsing more stable and improve error handling</changelog>
</package>
<package pkgid="e5e31eb49241aecbbb7c5d507adbe9d5c7401d759e0b9c0d5622bfffbe2bde30" name="opi" arch="src">
  <version epoch="0" ver="2.7.0" rel="bp154.2.6.1"/>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1604232000">- Fix appstream file location</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1610884800">- Version 0.10.0
  * Added
  - Microsoft Teams installer
  - Warning for personal repository</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1618574400">- stop owning dirs provided by filesytem rpm (bsc#1184786)</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1620043200">- Version 2.0.0
  * Added
  - Automated tests
  - Extensible Plugin interface for plugins (eg. this one)
  - Added plugins for chrome, dotnet, edge, teams, packman, plex,
    skype, slack, teamviewer, vivaldi, vscode, vscodium, zoom
  * Changed
  - Rewrote the complete tool in python3</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1625572800">- Version 2.1.0
  * Added
  - Support for dnf backend
  * Changed
  - Deduplicated packman repo creation code</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1628596800">- Version 2.1.1
  * Added
  - Plugin for Brave Browser</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1629460800">- Version 2.2.0
  * Added
  - Plugin for MEGA
  - Plugin for Edge Beta
  - Argument parser with option for reverse output order</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1630929600">- Version 2.3.0
  * Changed
  - Fixed gpgcheck entry in add_repo()
  - Allowed using multiple query keywords that are combined using AND
  * Added
  - Plugin for sublime text
  - Plugin for yandex-disk</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1633953600">- Version 2.4.0
  * Added
  - Scrolling of results
  - Plugin for atom editor</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1633953601">- Version 2.4.1
  * Changed
  - Don't expect output to be a tty</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1635163200">- Version 2.4.2
  * Changed
  - Switched to opensuse provided opi proxy</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1643025600">- Version 2.4.3
- Fix for tumbleweed based MicroOS</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1643371200">- Version 2.4.4
- Fix for Alpha/Beta dist versions (boo#1195206)</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1646136000">- Version 2.4.5
- Packman codec changes</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1650628800">- Version 2.4.6
- Update .NET SDK to 6.0</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1650888000">- Version 2.4.7
- Fix release script
- Fix numbering in --help
- Update README.md
- Add release helper script</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1652702400">- Version 2.5.0
- Improve testsuite when ran locally
- Fix 01_install_from_packman.py test for leap
- Fix 02_install_from_home.py test for leap
- Run ci for both tumbleweed and leap
- Use $releasever in repo creation on Leap
- Run "osc up" in release.sh</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1653998400">- Version 2.6.0
- Move to global config in /etc/opi.cfg
- Check if desired repo is already added instead of relying on prefix
- Add config option use_releasever_var</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1653998401">- Do not compress man page during build/install phase, but rather
  rely on the brp-scripts to pick the right compression format.</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1655121600">- Version 2.7.0
- Make repo parsing more stable and improve error handling</changelog>
</package>
<package pkgid="141630963333ce1f646546fe34b1100ea98083aa7668c7fca57d2ada43e64b74" name="orthanc" arch="aarch64">
  <version epoch="0" ver="1.11.2" rel="bp154.2.3.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1598356800">- Version 1.7.3
  * API version upgraded to 8
  * "/peers/{id}/store": New option "Compress" to compress DICOM data using gzip
  * "OrthancPeerStore" jobs now report the transmitted size in their public content
  * New config option "Worklist.LimitAnswers" for the sample modality worklist plugin
  * Add missing tag "Retrieve AE Title (0008,0054)" in C-FIND SCP responses
  * Fix DICOM SCP filters if some query tag has &gt; 256 characters (list of UIDs matching)
  * "/series/.../ordered-slices" supports spaces in Image Position/Orientation Patient tags
  * Fix possible crash in HttpClient if sending multipart body (can occur in STOW-RS)
  * Support receiving multipart messages larger than 2GB in the embedded HTTP server</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1600430400">- Version 1.7.4
  * New configuration options to enable HTTP peers identification through certificates:
  "SslVerifyPeers" and "SslTrustedClientCertificates"
  * New configuration option "SyncStorageArea" to immediately commit the files onto the disk
  (through fsync()), so as to avoid discrepencies between DB and filesystem in case of hard
  shutdown of the machine running Orthanc. This slows down adding new files into Orthanc.
  * Underscores are now allowed in peers/modalities symbolic names
  * Fix compatibility with C-MOVE SCU requests issued by Ambra
  * Fix transcoding in C-MOVE SCP, in the case where "SynchronousCMove" is "true"
  * When checking DICOM allowed methods, if there are multiple modalities with the same AET,
  differentiate them from the calling IP
  * Enable the access to raw frames in Philips ELSCINT1 proprietary compression
  * Support empty key passwords when using HTTP client certificates
  * Fix handling of "ModalitiesInStudy" (0008,0061) in C-FIND and "/tools/find"</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1602849600">- version 1.8.0
  * Serving the content of Orthanc as a WebDAV network share
  * New config options: "WebDavEnabled", "WebDavDeleteAllowed" and "WebDavUploadAllowed"</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1607428800">- Version 1.8.1
  * adaption to new systemd-macros (OBS)
  * New sample tool "OrthancImport.py" to easily import compressed archives (ZIP) into Orthanc
  * Logging categories (cf. command-line options starting with "--verbose-" and "--trace=")
  * New command-line option "--trace-dicom" to access full debug information from DCMTK
  * New config option "DicomEchoChecksFind" to automatically complement C-GET SCU with C-FIND SCU
  * API version upgraded to 9
  * "/tools/dicom-echo": Execute C-Echo SCU to a modality that is not registered in "/modalities"
  * "/tools/log-level-*": Dynamically access and/or change the verbosity of logging categories
  * "/peers/{id}/configuration": Get the configuration of one peer (cf. "/peers?expand")
  * "/modalities/{id}/configuration": Get the configuration of one modality (cf. "/modalities?expand")
  * "/tools/dicom-echo" and "/modalities/{id}/echo" now accept the field "CheckFind" in their JSON
  body to complement C-GET SCU with C-FIND SCU ("DicomEchoChecksFind" on a per-connection basis)
  * Archive/media jobs report the size of the created ZIP file in content field "ArchiveSizeMB"
  * New function in the SDK: OrthancPluginGenerateRestApiAuthorizationToken()
  * C-GET SCP: Fix responses and handling of cancel
  * Fix decoding sequence if "BuiltinDecoderTranscoderOrder" is "Before"
  * Fix keep-alive in the embedded HTTP server by setting the "Keep-Alive" HTTP header
  * Fix access to videos as a single raw frame (feature broken since Orthanc 1.6.0)
  * REST API now returns 404 error if deleting an inexistent peer or modality
  * Improved forward ABI compatibility of Orthanc Framework (notably, no inline methods anymore)
  * Upgraded dependencies for static builds (notably on Windows and LSB):
  - civetweb 1.13</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1608379200">- Version 1.8.2
  * ZIP archives containing DICOM files can be uploaded using WebDAV
  * New config option "MallocArenaMax" to control memory usage on GNU/Linux
  * Explicit error log if trying to load a 32bit (resp. 64bit) plugin into
  a 64bit (resp. 32bit) version of Orthanc
  * New configuration options contributed by Varian Medical Systems:
  - "DeidentifyLogs" to remove patient identification from the logs (C-GET, C-MOVE, C-FIND)
  - "DeidentifyLogsDicomVersion" to specify the deidentification rules for the logs
  - "OrthancExplorerEnabled" to enable/disable the Orthanc Explorer Web user interface
  - "SslMinimumProtocolVersion" to set the minimal SSL protocol version (now defaults to SSL 1.2)
  - "SslCiphersAccepted" to set the accepted ciphers over SSL (now defaults to FIPS 140-2)
  * New configuration options related to ingest transcoding:
  - "IngestTranscodingOfUncompressed" to control whether uncompressed transfer syntaxes are transcoded
  - "IngestTranscodingOfCompressed" to control whether compressed transfer syntaxes are transcoded
  * "/instances" can be used to import ZIP archives provided in the POST body
  * Allow concurrency on the OrthancPluginRegisterIncomingHttpRequestFilter() callbacks
  * Allow empty request body in "/modalities/{id}/echo"
  * If meta-header is missing, best-effort to extract "TransferSyntax" in "/instances/{id}/metadata"</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1609329600">- Workaround for boo#1180359</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1611921600">- Version 1.9.0
  * Support of DICOM TLS
  * New configuration options related to DICOM networking:
  - "DicomTlsEnabled" to enable DICOM TLS in Orthanc SCP
  - "DicomTlsCertificate" to provide the TLS certificate to be used in both Orthanc SCU and SCP
  - "DicomTlsPrivateKey" to provide the private key of the TLS certificate
  - "DicomTlsTrustedCertificates" to provide the list of TLS certificates to be trusted by Orthanc
  - "UseDicomTls" in "DicomModalities" to enable DICOM TLS in outgoing SCU on a per-modality basis
  - "MaximumPduLength" to tune the maximum PDU length (Protocol Data Unit)
  - "LocalAet" in "DicomModalities" to overwrite global "DicomAet" for SCU on a per-modality basis
  - "AcceptedTransferSyntaxes" to set the transfer syntax UIDs accepted by Orthanc C-STORE SCP
  - "H265TransferSyntaxAccepted" to enable/disable all the transfer syntaxes related to H.265
  - "DicomAlwaysAllowFind" to disable verification of the remote modality in C-FIND SCP
  - "DicomAlwaysAllowGet" to disable verification of the remote modality in C-GET SCP
  * New configuration option: "DicomScuPreferredTransferSyntax" to control transcoding in C-STORE SCU
  * New command-line option: "--openapi" to write the OpenAPI documentation of the REST API to a file
  * New metadata automatically computed at the series level: "RemoteAET"
  * The DICOM meta-header and the transfer syntax are displayed at the "Instance" level
  * API version upgraded to 10
  * "/tools/accepted-transfer-syntaxes": Get/set transfer syntaxes accepted by Orthanc C-STORE SCP
  * "/tools/unknown-sop-class-accepted": Get/set whether C-STORE SCP accepts unknown SOP class UID
  * "/modalities/{...}/query": New string argument "LocalAet"
  * "/tools/create-dicom": New flag "Force" to bypass consistency checks for the DICOM tags
  * BREAKING CHANGE: All the Lua callbacks "IsXXXTransferSyntaxAccepted()" and
  "IsUnknownSopClassAccepted()" have been removed
  * New functions in the SDK:
  - OrthancPluginCreateMemoryBuffer64()
  - OrthancPluginRegisterStorageArea2()
  - OrthancPluginCreateDicom2()
  * Refactoring and improvements to the cache of DICOM files (it can now hold many files)
  * New Prometheus metrics "orthanc_dicom_cache_count" and "orthanc_dicom_cache_size"
  * Fix upload of multiple DICOM files using one single POST call to "multipart/form-data"
  Could be the final resolution of issue #21 (DICOM files missing after uploading with Firefox)
  * Partial fix of issue #48 (Windows service not stopped properly), cf. comments 4 and 5
  * Explicitly use little-endian to encode uncompressed file size with zlib compression
  * Upgraded dependencies for static builds (notably on Windows):
  - dcmtk 3.6.6
  - jsoncpp 1.9.4</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1614254400">- version 1.9.1
  * The "dicom-as-json" attachments are not explicitly stored anymore to improve performance
  * If the storage area doesn't support range reading, or if "StorageCompression"
  is enabled, a new type of attachment "dicom-until-pixel-data" is generated
  * New metadata automatically computed at the instance level: "PixelDataOffset"
  * New configuration option related to networking:
  - "Timeout" in "DicomModalities" to set DICOM SCU timeout on a per-modality basis
  - "Timeout" in "OrthancPeers" to set HTTP client timeout on a per-peer basis
  * API version upgraded to 11
  * BREAKING CHANGES:
  - External applications should not call "/instances/.../attachments/dicom-as-json" anymore,
    and should use "/instances/.../tags" instead
  - "/instances/.../tags" route does not report the tags after "Pixel Data" (7fe0,0010) anymore
  * "/peers/{id}/store-straight": Synchronously send the DICOM instance in POST body to the peer
  * New arguments in the REST API:
  - "Timeout" in "/modalities/.../query"
  - "Timeout" in "/modalities/.../storage-commitment"
  - "Timeout" in "/queries/.../answers/.../query-{studies|series|instances}"
  * New value in enumeration: OrthancPluginDicomToJsonFlags_StopAfterPixelData
  * New value in enumeration: OrthancPluginDicomToJsonFlags_SkipGroupLengths
  * Improved precision of floating-point numbers in DICOM-as-JSON and DICOM summary
  * Optimization in C-STORE SCP by avoiding an unnecessary DICOM parsing
  * Fix build on big-endian architectures
  * Handle public tags with "UN" value representation and containing a string (cf. DICOM CP 246)
  * The numbering of sequences in Orthanc Explorer now uses the DICOM convention (starts at 1)
  * Possibility to generate a static library containing the Orthanc Framework</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1620561600">- Version 1.9.3
  * New configuration option: "DicomTlsRemoteCertificateRequired" to allow secure DICOM TLS
  connections without certificate
  * "ETag" headers for metadata and attachments now allow strong comparison (MD5 is included)
  * New CMake option: "ORTHANC_LUA_VERSION" to use a specific version of system-wide Lua
  * Fix the lifetime of temporary files associated with jobs that create ZIP archive/media:
  - In synchronous mode, their number could grow up to "JobsHistorySize" in Orthanc &lt;= 1.9.2
  - In asynchronous mode, the temporary files are removed as soon as their job gets canceled
  * Fix regression in the handling of "DicomCheckModalityHost" configuration option
  introduced by changeset 4182 in Orthanc 1.7.4
  * Reduced memory consumption of "OrthancPluginHttpClient()", "OrthancPluginHttpClient2()" and
  "OrthancPluginCallPeerApi()" on POST/PUT if chunked transfer is disabled
  * Fix issue #195 (No need for BulkDataURI when Data Element is empty)
- from version 1.9.2:
  * New configuration options related to multiple readers/writers:
  - "DatabaseServerIdentifier" identifies the server in the DB among a pool of Orthanc servers
  - "CheckRevisions" to protect against concurrent modifications of metadata and attachments
  * API version upgraded to 12
  * "/system" reports the value of the "CheckRevisions" global option
  * "/.../{id}/metadata/{name}" and "/.../{id}/attachments/{name}/..." URIs handle the
  HTTP headers "If-Match", "If-None-Match" and "ETag" to cope with revisions
  * New function in the SDK: OrthancPluginCallRestApi()
  * Full refactoring of the database plugin SDK to handle multiple readers/writers,
  which notably implies the handling of retries in the case of collisions
  * Use the local timezone for query/retrieve in the Orthanc Explorer interface (was UTC before)
  * Fix "OrthancServer/Resources/Samples/Python/Replicate.py" for Python 3.x
  * Fix issue #83 (ServerIndex shall implement retries for DB temporary errors)
  * Upgraded dependencies for static builds (notably on Windows and LSB):
  - civetweb 1.14
  - openssl 1.1.1k</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1624536000">- version 1.9.4
  * Orthanc now anonymizes according to Basic Profile of PS 3.15-2021b Table E.1-1
  * New configuration options:
  - "ExternalDictionaries" to load external DICOM dictionaries (useful for DICONDE)
  - "SynchronousZipStream" to disable streaming of ZIP
  * Orthanc Explorer supports the DICONDE dictionary
  * API version upgraded to 13
  * New routes to handle groups of multiple, unrelated DICOM resources at once:
  - "/tools/bulk-anonymize" to anonymize a set of resources
  - "/tools/bulk-content" to get the content of a set of resources
  - "/tools/bulk-delete" to delete a set of resources
  - "/tools/bulk-modify" to modify a set of resources
  * ZIP archive/media generated in synchronous mode are now streamed by default
  * "Replace" tags in "/modify" and "/anonymize" now supports value representation AT
  * "/jobs/..." has new field "ErrorDetails" to help identify the cause of an error
  * "Replace", "Keep" and "Remove" in "/modify" and "/anonymize" accept paths to subsequences
  using the syntax of the dcmodify command-line tool (wildcards are supported as well)
  * Added "short", "simplify" and/or "full" options to control the format of DICOM tags in:
  - GET /patients, GET /studies, GET /series, GET /instances (together with "&amp;expand")
  - GET /patients/{id}, GET /studies/{id}, GET /series/{id}, GET /instances/{id}
  - GET /patients/{id}/studies, GET /patients/{id}/series, GET /patients/{id}/instances
  - GET /studies/{id}/patient, GET /studies/{id}/series, GET /studies/{id}/instances
  - GET /series/{id}/patient, GET /series/{id}/study, GET /series/{id}/instances
  - GET /instances/{id}/patient, GET /instances/{id}/study, GET /instances/{id}/series
  - GET /patients/{id}/instances-tags, GET /patients/{id}/shared-tags
  - GET /studies/{id}/instances-tags, GET /series/{id}/shared-tags
  - GET /series/{id}/instances-tags, GET /studies/{id}/shared-tags
  - GET /patients/{id}/module, GET /patients/{id}/patient-module
  - GET /series/{id}/module, GET /studies/{id}/module, GET /instances/{id}/module
  - POST /tools/find
  * "/studies/{id}/split" accepts "Instances" parameter to split instances instead of series
  * "/studies/{id}/merge" accepts instances inside its "Resources" parameter
  * Full support of hierarchical relationships in tags whose VR is UI during anonymization
  * C-MOVE SCP: added possible DIMSE status "Sub-operations Complete - One or more Failures"
  * Fix issue #146 (Update Anonyization to 2019c) - was actually updated to 2021b
  * Upgraded dependencies for static builds (notably on Windows):
  - curl 7.77.0</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1626004800">- version 1.9.5
  * Anonymization is applied recursively to nested tags
  * API version upgraded to 14
  * Added "Short", "Simplify" and/or "Full" options to control the format of DICOM tags in:
  - POST /modalities/{id}/find-worklist
  - POST /queries/{id}/answers/{index}/retrieve
  - POST /queries/{id}/retrieve
  * Fix broken "Do lookup" button in Orthanc Explorer
  * Error code and description of jobs are now saved into the Orthanc database</changelog>
  <changelog author="Steve Kowalik &lt;steven.kowalik@suse.com&gt;" date="1626696000">- Remove executable bits from Python scripts when creating the source
  tree for the -source package to stop it requiring /usr/bin/python</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1626955200">- version 1.9.6
  * In lookup and query/retrieve, possibility to provide a specific study date
  * Clicking on "Send to remote modality" displays the job information to monitor progress
  * Fix orphaned attachments if bad revision number is provided</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1630497600">- Version 1.9.7
  * New configuration option "DicomAlwaysAllowMove" to disable verification of
  the remote modality in C-MOVE SCP
  * API version upgraded to 15
  * Added "Level" option to POST /tools/bulk-modify
  * Added missing OpenAPI documentation of "KeepSource" in ".../modify" and ".../anonymize"
  * Added file CITATION.cff
  * Linux Standard Base (LSB) builds of Orthanc can load non-LSB builds of plugins
  * Fix upload of ZIP archives containing a DICOMDIR file
  * Fix computation of the estimated time of arrival in jobs
  * Support detection of windowing and rescale in Philips multiframe images</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1632657600">- Test for SharedLibrary.Basic disabled (fails with new glibc)</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634126400">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * orthanc.service</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648209600">- version 1.10.1
  * for detailed changelog see NEWS</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1651838400">- switched source urls to https</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1652184000">- version 1.11.0
  * new API version 1.7
  * new configuration parameter
  * for detailed changelog see NEWS</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664280000">- version 1.11.2
  * Added support for RGBA64 images in tools/create-dicom and /preview
  * New configuration "MaximumStorageMode" to choose between recyling of
    old patients (default behavior) and rejection of new incoming data when
    the MaximumStorageSize has been reached.
  * New sample plugin: "DelayedDeletion" that will delete files from disk
    asynchronously to speed up deletion of large studies.
  * Lua: new "SetHttpTimeout" function
  * Lua: new "OnHeartBeat" callback called at regular interval provided that
    you have configured "LuaHeartBeatPeriod" &gt; 0.
  * "ExtraMainDicomTags" configuration now accepts Dicom Sequences.  Sequences are
    stored in a dedicated new metadata "MainDicomSequences".  This should improve
    DicomWeb QIDO-RS and avoid warnings like "Accessing Dicom tags from storage when
    accessing series : 0040,0275".
    Main dicom sequences can now be returned in "MainDicomTags" and in "RequestedTags".
  * Fix the "Never" option of the "StorageAccessOnFind" that was sill accessing
    files (bug introduced in 1.11.0).
  * Fix the Storage Cache for compressed files (bug introduced in 1.11.1).
  * Fix the storage cache that was not used by the Plugin SDK.  This fixes the
    DicomWeb plugin "/rendered" route performance issues.
  * DelayedDeletion plugin: Fix leaking of symbols
  * SQLite now closes and deletes WAL and SHM files on exit.  This should improve
    handling of SQLite DB over network drives.
  * Fix static compilation of boost 1.69 on Ubuntu 22.04
  * Upgraded dependencies for static builds:
  - boost 1.80.0
  - dcmtk 3.6.7  (fixes CVE-2022-2119 and CVE-2022-2120)
  - openssl 3.0.5
  * Housekeeper plugin: Fix resume of previous processing
  * Added missing MOVEPatientRootQueryRetrieveInformationModel in
    DicomControlUserConnection::SetupPresentationContexts()
  * Improved HttpClient error logging (add method + url)
  * API version upgraded to 18
  * /system is now reporting "DatabaseServerIdentifier"
  * Added an Asynchronous mode to /modalities/../move.
  * "RequestedTags" option can now include DICOM sequences.
  * New function in the SDK: "OrthancPluginGetDatabaseServerIdentifier"
  * DicomMap::ParseMainDicomTags has been deprecated -&gt; retrieve "full" tags
    and use DicomMap::FromDicomAsJson instead</changelog>
</package>
<package pkgid="5916de9c4fba56905c2c3901de0eea21ab0ac4b06efcb2db9417e246200d925b" name="orthanc" arch="ppc64le">
  <version epoch="0" ver="1.11.2" rel="bp154.2.3.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1598356800">- Version 1.7.3
  * API version upgraded to 8
  * "/peers/{id}/store": New option "Compress" to compress DICOM data using gzip
  * "OrthancPeerStore" jobs now report the transmitted size in their public content
  * New config option "Worklist.LimitAnswers" for the sample modality worklist plugin
  * Add missing tag "Retrieve AE Title (0008,0054)" in C-FIND SCP responses
  * Fix DICOM SCP filters if some query tag has &gt; 256 characters (list of UIDs matching)
  * "/series/.../ordered-slices" supports spaces in Image Position/Orientation Patient tags
  * Fix possible crash in HttpClient if sending multipart body (can occur in STOW-RS)
  * Support receiving multipart messages larger than 2GB in the embedded HTTP server</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1600430400">- Version 1.7.4
  * New configuration options to enable HTTP peers identification through certificates:
  "SslVerifyPeers" and "SslTrustedClientCertificates"
  * New configuration option "SyncStorageArea" to immediately commit the files onto the disk
  (through fsync()), so as to avoid discrepencies between DB and filesystem in case of hard
  shutdown of the machine running Orthanc. This slows down adding new files into Orthanc.
  * Underscores are now allowed in peers/modalities symbolic names
  * Fix compatibility with C-MOVE SCU requests issued by Ambra
  * Fix transcoding in C-MOVE SCP, in the case where "SynchronousCMove" is "true"
  * When checking DICOM allowed methods, if there are multiple modalities with the same AET,
  differentiate them from the calling IP
  * Enable the access to raw frames in Philips ELSCINT1 proprietary compression
  * Support empty key passwords when using HTTP client certificates
  * Fix handling of "ModalitiesInStudy" (0008,0061) in C-FIND and "/tools/find"</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1602849600">- version 1.8.0
  * Serving the content of Orthanc as a WebDAV network share
  * New config options: "WebDavEnabled", "WebDavDeleteAllowed" and "WebDavUploadAllowed"</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1607428800">- Version 1.8.1
  * adaption to new systemd-macros (OBS)
  * New sample tool "OrthancImport.py" to easily import compressed archives (ZIP) into Orthanc
  * Logging categories (cf. command-line options starting with "--verbose-" and "--trace=")
  * New command-line option "--trace-dicom" to access full debug information from DCMTK
  * New config option "DicomEchoChecksFind" to automatically complement C-GET SCU with C-FIND SCU
  * API version upgraded to 9
  * "/tools/dicom-echo": Execute C-Echo SCU to a modality that is not registered in "/modalities"
  * "/tools/log-level-*": Dynamically access and/or change the verbosity of logging categories
  * "/peers/{id}/configuration": Get the configuration of one peer (cf. "/peers?expand")
  * "/modalities/{id}/configuration": Get the configuration of one modality (cf. "/modalities?expand")
  * "/tools/dicom-echo" and "/modalities/{id}/echo" now accept the field "CheckFind" in their JSON
  body to complement C-GET SCU with C-FIND SCU ("DicomEchoChecksFind" on a per-connection basis)
  * Archive/media jobs report the size of the created ZIP file in content field "ArchiveSizeMB"
  * New function in the SDK: OrthancPluginGenerateRestApiAuthorizationToken()
  * C-GET SCP: Fix responses and handling of cancel
  * Fix decoding sequence if "BuiltinDecoderTranscoderOrder" is "Before"
  * Fix keep-alive in the embedded HTTP server by setting the "Keep-Alive" HTTP header
  * Fix access to videos as a single raw frame (feature broken since Orthanc 1.6.0)
  * REST API now returns 404 error if deleting an inexistent peer or modality
  * Improved forward ABI compatibility of Orthanc Framework (notably, no inline methods anymore)
  * Upgraded dependencies for static builds (notably on Windows and LSB):
  - civetweb 1.13</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1608379200">- Version 1.8.2
  * ZIP archives containing DICOM files can be uploaded using WebDAV
  * New config option "MallocArenaMax" to control memory usage on GNU/Linux
  * Explicit error log if trying to load a 32bit (resp. 64bit) plugin into
  a 64bit (resp. 32bit) version of Orthanc
  * New configuration options contributed by Varian Medical Systems:
  - "DeidentifyLogs" to remove patient identification from the logs (C-GET, C-MOVE, C-FIND)
  - "DeidentifyLogsDicomVersion" to specify the deidentification rules for the logs
  - "OrthancExplorerEnabled" to enable/disable the Orthanc Explorer Web user interface
  - "SslMinimumProtocolVersion" to set the minimal SSL protocol version (now defaults to SSL 1.2)
  - "SslCiphersAccepted" to set the accepted ciphers over SSL (now defaults to FIPS 140-2)
  * New configuration options related to ingest transcoding:
  - "IngestTranscodingOfUncompressed" to control whether uncompressed transfer syntaxes are transcoded
  - "IngestTranscodingOfCompressed" to control whether compressed transfer syntaxes are transcoded
  * "/instances" can be used to import ZIP archives provided in the POST body
  * Allow concurrency on the OrthancPluginRegisterIncomingHttpRequestFilter() callbacks
  * Allow empty request body in "/modalities/{id}/echo"
  * If meta-header is missing, best-effort to extract "TransferSyntax" in "/instances/{id}/metadata"</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1609329600">- Workaround for boo#1180359</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1611921600">- Version 1.9.0
  * Support of DICOM TLS
  * New configuration options related to DICOM networking:
  - "DicomTlsEnabled" to enable DICOM TLS in Orthanc SCP
  - "DicomTlsCertificate" to provide the TLS certificate to be used in both Orthanc SCU and SCP
  - "DicomTlsPrivateKey" to provide the private key of the TLS certificate
  - "DicomTlsTrustedCertificates" to provide the list of TLS certificates to be trusted by Orthanc
  - "UseDicomTls" in "DicomModalities" to enable DICOM TLS in outgoing SCU on a per-modality basis
  - "MaximumPduLength" to tune the maximum PDU length (Protocol Data Unit)
  - "LocalAet" in "DicomModalities" to overwrite global "DicomAet" for SCU on a per-modality basis
  - "AcceptedTransferSyntaxes" to set the transfer syntax UIDs accepted by Orthanc C-STORE SCP
  - "H265TransferSyntaxAccepted" to enable/disable all the transfer syntaxes related to H.265
  - "DicomAlwaysAllowFind" to disable verification of the remote modality in C-FIND SCP
  - "DicomAlwaysAllowGet" to disable verification of the remote modality in C-GET SCP
  * New configuration option: "DicomScuPreferredTransferSyntax" to control transcoding in C-STORE SCU
  * New command-line option: "--openapi" to write the OpenAPI documentation of the REST API to a file
  * New metadata automatically computed at the series level: "RemoteAET"
  * The DICOM meta-header and the transfer syntax are displayed at the "Instance" level
  * API version upgraded to 10
  * "/tools/accepted-transfer-syntaxes": Get/set transfer syntaxes accepted by Orthanc C-STORE SCP
  * "/tools/unknown-sop-class-accepted": Get/set whether C-STORE SCP accepts unknown SOP class UID
  * "/modalities/{...}/query": New string argument "LocalAet"
  * "/tools/create-dicom": New flag "Force" to bypass consistency checks for the DICOM tags
  * BREAKING CHANGE: All the Lua callbacks "IsXXXTransferSyntaxAccepted()" and
  "IsUnknownSopClassAccepted()" have been removed
  * New functions in the SDK:
  - OrthancPluginCreateMemoryBuffer64()
  - OrthancPluginRegisterStorageArea2()
  - OrthancPluginCreateDicom2()
  * Refactoring and improvements to the cache of DICOM files (it can now hold many files)
  * New Prometheus metrics "orthanc_dicom_cache_count" and "orthanc_dicom_cache_size"
  * Fix upload of multiple DICOM files using one single POST call to "multipart/form-data"
  Could be the final resolution of issue #21 (DICOM files missing after uploading with Firefox)
  * Partial fix of issue #48 (Windows service not stopped properly), cf. comments 4 and 5
  * Explicitly use little-endian to encode uncompressed file size with zlib compression
  * Upgraded dependencies for static builds (notably on Windows):
  - dcmtk 3.6.6
  - jsoncpp 1.9.4</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1614254400">- version 1.9.1
  * The "dicom-as-json" attachments are not explicitly stored anymore to improve performance
  * If the storage area doesn't support range reading, or if "StorageCompression"
  is enabled, a new type of attachment "dicom-until-pixel-data" is generated
  * New metadata automatically computed at the instance level: "PixelDataOffset"
  * New configuration option related to networking:
  - "Timeout" in "DicomModalities" to set DICOM SCU timeout on a per-modality basis
  - "Timeout" in "OrthancPeers" to set HTTP client timeout on a per-peer basis
  * API version upgraded to 11
  * BREAKING CHANGES:
  - External applications should not call "/instances/.../attachments/dicom-as-json" anymore,
    and should use "/instances/.../tags" instead
  - "/instances/.../tags" route does not report the tags after "Pixel Data" (7fe0,0010) anymore
  * "/peers/{id}/store-straight": Synchronously send the DICOM instance in POST body to the peer
  * New arguments in the REST API:
  - "Timeout" in "/modalities/.../query"
  - "Timeout" in "/modalities/.../storage-commitment"
  - "Timeout" in "/queries/.../answers/.../query-{studies|series|instances}"
  * New value in enumeration: OrthancPluginDicomToJsonFlags_StopAfterPixelData
  * New value in enumeration: OrthancPluginDicomToJsonFlags_SkipGroupLengths
  * Improved precision of floating-point numbers in DICOM-as-JSON and DICOM summary
  * Optimization in C-STORE SCP by avoiding an unnecessary DICOM parsing
  * Fix build on big-endian architectures
  * Handle public tags with "UN" value representation and containing a string (cf. DICOM CP 246)
  * The numbering of sequences in Orthanc Explorer now uses the DICOM convention (starts at 1)
  * Possibility to generate a static library containing the Orthanc Framework</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1620561600">- Version 1.9.3
  * New configuration option: "DicomTlsRemoteCertificateRequired" to allow secure DICOM TLS
  connections without certificate
  * "ETag" headers for metadata and attachments now allow strong comparison (MD5 is included)
  * New CMake option: "ORTHANC_LUA_VERSION" to use a specific version of system-wide Lua
  * Fix the lifetime of temporary files associated with jobs that create ZIP archive/media:
  - In synchronous mode, their number could grow up to "JobsHistorySize" in Orthanc &lt;= 1.9.2
  - In asynchronous mode, the temporary files are removed as soon as their job gets canceled
  * Fix regression in the handling of "DicomCheckModalityHost" configuration option
  introduced by changeset 4182 in Orthanc 1.7.4
  * Reduced memory consumption of "OrthancPluginHttpClient()", "OrthancPluginHttpClient2()" and
  "OrthancPluginCallPeerApi()" on POST/PUT if chunked transfer is disabled
  * Fix issue #195 (No need for BulkDataURI when Data Element is empty)
- from version 1.9.2:
  * New configuration options related to multiple readers/writers:
  - "DatabaseServerIdentifier" identifies the server in the DB among a pool of Orthanc servers
  - "CheckRevisions" to protect against concurrent modifications of metadata and attachments
  * API version upgraded to 12
  * "/system" reports the value of the "CheckRevisions" global option
  * "/.../{id}/metadata/{name}" and "/.../{id}/attachments/{name}/..." URIs handle the
  HTTP headers "If-Match", "If-None-Match" and "ETag" to cope with revisions
  * New function in the SDK: OrthancPluginCallRestApi()
  * Full refactoring of the database plugin SDK to handle multiple readers/writers,
  which notably implies the handling of retries in the case of collisions
  * Use the local timezone for query/retrieve in the Orthanc Explorer interface (was UTC before)
  * Fix "OrthancServer/Resources/Samples/Python/Replicate.py" for Python 3.x
  * Fix issue #83 (ServerIndex shall implement retries for DB temporary errors)
  * Upgraded dependencies for static builds (notably on Windows and LSB):
  - civetweb 1.14
  - openssl 1.1.1k</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1624536000">- version 1.9.4
  * Orthanc now anonymizes according to Basic Profile of PS 3.15-2021b Table E.1-1
  * New configuration options:
  - "ExternalDictionaries" to load external DICOM dictionaries (useful for DICONDE)
  - "SynchronousZipStream" to disable streaming of ZIP
  * Orthanc Explorer supports the DICONDE dictionary
  * API version upgraded to 13
  * New routes to handle groups of multiple, unrelated DICOM resources at once:
  - "/tools/bulk-anonymize" to anonymize a set of resources
  - "/tools/bulk-content" to get the content of a set of resources
  - "/tools/bulk-delete" to delete a set of resources
  - "/tools/bulk-modify" to modify a set of resources
  * ZIP archive/media generated in synchronous mode are now streamed by default
  * "Replace" tags in "/modify" and "/anonymize" now supports value representation AT
  * "/jobs/..." has new field "ErrorDetails" to help identify the cause of an error
  * "Replace", "Keep" and "Remove" in "/modify" and "/anonymize" accept paths to subsequences
  using the syntax of the dcmodify command-line tool (wildcards are supported as well)
  * Added "short", "simplify" and/or "full" options to control the format of DICOM tags in:
  - GET /patients, GET /studies, GET /series, GET /instances (together with "&amp;expand")
  - GET /patients/{id}, GET /studies/{id}, GET /series/{id}, GET /instances/{id}
  - GET /patients/{id}/studies, GET /patients/{id}/series, GET /patients/{id}/instances
  - GET /studies/{id}/patient, GET /studies/{id}/series, GET /studies/{id}/instances
  - GET /series/{id}/patient, GET /series/{id}/study, GET /series/{id}/instances
  - GET /instances/{id}/patient, GET /instances/{id}/study, GET /instances/{id}/series
  - GET /patients/{id}/instances-tags, GET /patients/{id}/shared-tags
  - GET /studies/{id}/instances-tags, GET /series/{id}/shared-tags
  - GET /series/{id}/instances-tags, GET /studies/{id}/shared-tags
  - GET /patients/{id}/module, GET /patients/{id}/patient-module
  - GET /series/{id}/module, GET /studies/{id}/module, GET /instances/{id}/module
  - POST /tools/find
  * "/studies/{id}/split" accepts "Instances" parameter to split instances instead of series
  * "/studies/{id}/merge" accepts instances inside its "Resources" parameter
  * Full support of hierarchical relationships in tags whose VR is UI during anonymization
  * C-MOVE SCP: added possible DIMSE status "Sub-operations Complete - One or more Failures"
  * Fix issue #146 (Update Anonyization to 2019c) - was actually updated to 2021b
  * Upgraded dependencies for static builds (notably on Windows):
  - curl 7.77.0</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1626004800">- version 1.9.5
  * Anonymization is applied recursively to nested tags
  * API version upgraded to 14
  * Added "Short", "Simplify" and/or "Full" options to control the format of DICOM tags in:
  - POST /modalities/{id}/find-worklist
  - POST /queries/{id}/answers/{index}/retrieve
  - POST /queries/{id}/retrieve
  * Fix broken "Do lookup" button in Orthanc Explorer
  * Error code and description of jobs are now saved into the Orthanc database</changelog>
  <changelog author="Steve Kowalik &lt;steven.kowalik@suse.com&gt;" date="1626696000">- Remove executable bits from Python scripts when creating the source
  tree for the -source package to stop it requiring /usr/bin/python</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1626955200">- version 1.9.6
  * In lookup and query/retrieve, possibility to provide a specific study date
  * Clicking on "Send to remote modality" displays the job information to monitor progress
  * Fix orphaned attachments if bad revision number is provided</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1630497600">- Version 1.9.7
  * New configuration option "DicomAlwaysAllowMove" to disable verification of
  the remote modality in C-MOVE SCP
  * API version upgraded to 15
  * Added "Level" option to POST /tools/bulk-modify
  * Added missing OpenAPI documentation of "KeepSource" in ".../modify" and ".../anonymize"
  * Added file CITATION.cff
  * Linux Standard Base (LSB) builds of Orthanc can load non-LSB builds of plugins
  * Fix upload of ZIP archives containing a DICOMDIR file
  * Fix computation of the estimated time of arrival in jobs
  * Support detection of windowing and rescale in Philips multiframe images</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1632657600">- Test for SharedLibrary.Basic disabled (fails with new glibc)</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634126400">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * orthanc.service</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648209600">- version 1.10.1
  * for detailed changelog see NEWS</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1651838400">- switched source urls to https</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1652184000">- version 1.11.0
  * new API version 1.7
  * new configuration parameter
  * for detailed changelog see NEWS</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664280000">- version 1.11.2
  * Added support for RGBA64 images in tools/create-dicom and /preview
  * New configuration "MaximumStorageMode" to choose between recyling of
    old patients (default behavior) and rejection of new incoming data when
    the MaximumStorageSize has been reached.
  * New sample plugin: "DelayedDeletion" that will delete files from disk
    asynchronously to speed up deletion of large studies.
  * Lua: new "SetHttpTimeout" function
  * Lua: new "OnHeartBeat" callback called at regular interval provided that
    you have configured "LuaHeartBeatPeriod" &gt; 0.
  * "ExtraMainDicomTags" configuration now accepts Dicom Sequences.  Sequences are
    stored in a dedicated new metadata "MainDicomSequences".  This should improve
    DicomWeb QIDO-RS and avoid warnings like "Accessing Dicom tags from storage when
    accessing series : 0040,0275".
    Main dicom sequences can now be returned in "MainDicomTags" and in "RequestedTags".
  * Fix the "Never" option of the "StorageAccessOnFind" that was sill accessing
    files (bug introduced in 1.11.0).
  * Fix the Storage Cache for compressed files (bug introduced in 1.11.1).
  * Fix the storage cache that was not used by the Plugin SDK.  This fixes the
    DicomWeb plugin "/rendered" route performance issues.
  * DelayedDeletion plugin: Fix leaking of symbols
  * SQLite now closes and deletes WAL and SHM files on exit.  This should improve
    handling of SQLite DB over network drives.
  * Fix static compilation of boost 1.69 on Ubuntu 22.04
  * Upgraded dependencies for static builds:
  - boost 1.80.0
  - dcmtk 3.6.7  (fixes CVE-2022-2119 and CVE-2022-2120)
  - openssl 3.0.5
  * Housekeeper plugin: Fix resume of previous processing
  * Added missing MOVEPatientRootQueryRetrieveInformationModel in
    DicomControlUserConnection::SetupPresentationContexts()
  * Improved HttpClient error logging (add method + url)
  * API version upgraded to 18
  * /system is now reporting "DatabaseServerIdentifier"
  * Added an Asynchronous mode to /modalities/../move.
  * "RequestedTags" option can now include DICOM sequences.
  * New function in the SDK: "OrthancPluginGetDatabaseServerIdentifier"
  * DicomMap::ParseMainDicomTags has been deprecated -&gt; retrieve "full" tags
    and use DicomMap::FromDicomAsJson instead</changelog>
</package>
<package pkgid="614e1ad0bf10a9061f227439b600741b61805d53b63a51b9e217addcbe9500f4" name="orthanc" arch="src">
  <version epoch="0" ver="1.11.2" rel="bp154.2.3.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1598356800">- Version 1.7.3
  * API version upgraded to 8
  * "/peers/{id}/store": New option "Compress" to compress DICOM data using gzip
  * "OrthancPeerStore" jobs now report the transmitted size in their public content
  * New config option "Worklist.LimitAnswers" for the sample modality worklist plugin
  * Add missing tag "Retrieve AE Title (0008,0054)" in C-FIND SCP responses
  * Fix DICOM SCP filters if some query tag has &gt; 256 characters (list of UIDs matching)
  * "/series/.../ordered-slices" supports spaces in Image Position/Orientation Patient tags
  * Fix possible crash in HttpClient if sending multipart body (can occur in STOW-RS)
  * Support receiving multipart messages larger than 2GB in the embedded HTTP server</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1600430400">- Version 1.7.4
  * New configuration options to enable HTTP peers identification through certificates:
  "SslVerifyPeers" and "SslTrustedClientCertificates"
  * New configuration option "SyncStorageArea" to immediately commit the files onto the disk
  (through fsync()), so as to avoid discrepencies between DB and filesystem in case of hard
  shutdown of the machine running Orthanc. This slows down adding new files into Orthanc.
  * Underscores are now allowed in peers/modalities symbolic names
  * Fix compatibility with C-MOVE SCU requests issued by Ambra
  * Fix transcoding in C-MOVE SCP, in the case where "SynchronousCMove" is "true"
  * When checking DICOM allowed methods, if there are multiple modalities with the same AET,
  differentiate them from the calling IP
  * Enable the access to raw frames in Philips ELSCINT1 proprietary compression
  * Support empty key passwords when using HTTP client certificates
  * Fix handling of "ModalitiesInStudy" (0008,0061) in C-FIND and "/tools/find"</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1602849600">- version 1.8.0
  * Serving the content of Orthanc as a WebDAV network share
  * New config options: "WebDavEnabled", "WebDavDeleteAllowed" and "WebDavUploadAllowed"</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1607428800">- Version 1.8.1
  * adaption to new systemd-macros (OBS)
  * New sample tool "OrthancImport.py" to easily import compressed archives (ZIP) into Orthanc
  * Logging categories (cf. command-line options starting with "--verbose-" and "--trace=")
  * New command-line option "--trace-dicom" to access full debug information from DCMTK
  * New config option "DicomEchoChecksFind" to automatically complement C-GET SCU with C-FIND SCU
  * API version upgraded to 9
  * "/tools/dicom-echo": Execute C-Echo SCU to a modality that is not registered in "/modalities"
  * "/tools/log-level-*": Dynamically access and/or change the verbosity of logging categories
  * "/peers/{id}/configuration": Get the configuration of one peer (cf. "/peers?expand")
  * "/modalities/{id}/configuration": Get the configuration of one modality (cf. "/modalities?expand")
  * "/tools/dicom-echo" and "/modalities/{id}/echo" now accept the field "CheckFind" in their JSON
  body to complement C-GET SCU with C-FIND SCU ("DicomEchoChecksFind" on a per-connection basis)
  * Archive/media jobs report the size of the created ZIP file in content field "ArchiveSizeMB"
  * New function in the SDK: OrthancPluginGenerateRestApiAuthorizationToken()
  * C-GET SCP: Fix responses and handling of cancel
  * Fix decoding sequence if "BuiltinDecoderTranscoderOrder" is "Before"
  * Fix keep-alive in the embedded HTTP server by setting the "Keep-Alive" HTTP header
  * Fix access to videos as a single raw frame (feature broken since Orthanc 1.6.0)
  * REST API now returns 404 error if deleting an inexistent peer or modality
  * Improved forward ABI compatibility of Orthanc Framework (notably, no inline methods anymore)
  * Upgraded dependencies for static builds (notably on Windows and LSB):
  - civetweb 1.13</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1608379200">- Version 1.8.2
  * ZIP archives containing DICOM files can be uploaded using WebDAV
  * New config option "MallocArenaMax" to control memory usage on GNU/Linux
  * Explicit error log if trying to load a 32bit (resp. 64bit) plugin into
  a 64bit (resp. 32bit) version of Orthanc
  * New configuration options contributed by Varian Medical Systems:
  - "DeidentifyLogs" to remove patient identification from the logs (C-GET, C-MOVE, C-FIND)
  - "DeidentifyLogsDicomVersion" to specify the deidentification rules for the logs
  - "OrthancExplorerEnabled" to enable/disable the Orthanc Explorer Web user interface
  - "SslMinimumProtocolVersion" to set the minimal SSL protocol version (now defaults to SSL 1.2)
  - "SslCiphersAccepted" to set the accepted ciphers over SSL (now defaults to FIPS 140-2)
  * New configuration options related to ingest transcoding:
  - "IngestTranscodingOfUncompressed" to control whether uncompressed transfer syntaxes are transcoded
  - "IngestTranscodingOfCompressed" to control whether compressed transfer syntaxes are transcoded
  * "/instances" can be used to import ZIP archives provided in the POST body
  * Allow concurrency on the OrthancPluginRegisterIncomingHttpRequestFilter() callbacks
  * Allow empty request body in "/modalities/{id}/echo"
  * If meta-header is missing, best-effort to extract "TransferSyntax" in "/instances/{id}/metadata"</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1609329600">- Workaround for boo#1180359</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1611921600">- Version 1.9.0
  * Support of DICOM TLS
  * New configuration options related to DICOM networking:
  - "DicomTlsEnabled" to enable DICOM TLS in Orthanc SCP
  - "DicomTlsCertificate" to provide the TLS certificate to be used in both Orthanc SCU and SCP
  - "DicomTlsPrivateKey" to provide the private key of the TLS certificate
  - "DicomTlsTrustedCertificates" to provide the list of TLS certificates to be trusted by Orthanc
  - "UseDicomTls" in "DicomModalities" to enable DICOM TLS in outgoing SCU on a per-modality basis
  - "MaximumPduLength" to tune the maximum PDU length (Protocol Data Unit)
  - "LocalAet" in "DicomModalities" to overwrite global "DicomAet" for SCU on a per-modality basis
  - "AcceptedTransferSyntaxes" to set the transfer syntax UIDs accepted by Orthanc C-STORE SCP
  - "H265TransferSyntaxAccepted" to enable/disable all the transfer syntaxes related to H.265
  - "DicomAlwaysAllowFind" to disable verification of the remote modality in C-FIND SCP
  - "DicomAlwaysAllowGet" to disable verification of the remote modality in C-GET SCP
  * New configuration option: "DicomScuPreferredTransferSyntax" to control transcoding in C-STORE SCU
  * New command-line option: "--openapi" to write the OpenAPI documentation of the REST API to a file
  * New metadata automatically computed at the series level: "RemoteAET"
  * The DICOM meta-header and the transfer syntax are displayed at the "Instance" level
  * API version upgraded to 10
  * "/tools/accepted-transfer-syntaxes": Get/set transfer syntaxes accepted by Orthanc C-STORE SCP
  * "/tools/unknown-sop-class-accepted": Get/set whether C-STORE SCP accepts unknown SOP class UID
  * "/modalities/{...}/query": New string argument "LocalAet"
  * "/tools/create-dicom": New flag "Force" to bypass consistency checks for the DICOM tags
  * BREAKING CHANGE: All the Lua callbacks "IsXXXTransferSyntaxAccepted()" and
  "IsUnknownSopClassAccepted()" have been removed
  * New functions in the SDK:
  - OrthancPluginCreateMemoryBuffer64()
  - OrthancPluginRegisterStorageArea2()
  - OrthancPluginCreateDicom2()
  * Refactoring and improvements to the cache of DICOM files (it can now hold many files)
  * New Prometheus metrics "orthanc_dicom_cache_count" and "orthanc_dicom_cache_size"
  * Fix upload of multiple DICOM files using one single POST call to "multipart/form-data"
  Could be the final resolution of issue #21 (DICOM files missing after uploading with Firefox)
  * Partial fix of issue #48 (Windows service not stopped properly), cf. comments 4 and 5
  * Explicitly use little-endian to encode uncompressed file size with zlib compression
  * Upgraded dependencies for static builds (notably on Windows):
  - dcmtk 3.6.6
  - jsoncpp 1.9.4</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1614254400">- version 1.9.1
  * The "dicom-as-json" attachments are not explicitly stored anymore to improve performance
  * If the storage area doesn't support range reading, or if "StorageCompression"
  is enabled, a new type of attachment "dicom-until-pixel-data" is generated
  * New metadata automatically computed at the instance level: "PixelDataOffset"
  * New configuration option related to networking:
  - "Timeout" in "DicomModalities" to set DICOM SCU timeout on a per-modality basis
  - "Timeout" in "OrthancPeers" to set HTTP client timeout on a per-peer basis
  * API version upgraded to 11
  * BREAKING CHANGES:
  - External applications should not call "/instances/.../attachments/dicom-as-json" anymore,
    and should use "/instances/.../tags" instead
  - "/instances/.../tags" route does not report the tags after "Pixel Data" (7fe0,0010) anymore
  * "/peers/{id}/store-straight": Synchronously send the DICOM instance in POST body to the peer
  * New arguments in the REST API:
  - "Timeout" in "/modalities/.../query"
  - "Timeout" in "/modalities/.../storage-commitment"
  - "Timeout" in "/queries/.../answers/.../query-{studies|series|instances}"
  * New value in enumeration: OrthancPluginDicomToJsonFlags_StopAfterPixelData
  * New value in enumeration: OrthancPluginDicomToJsonFlags_SkipGroupLengths
  * Improved precision of floating-point numbers in DICOM-as-JSON and DICOM summary
  * Optimization in C-STORE SCP by avoiding an unnecessary DICOM parsing
  * Fix build on big-endian architectures
  * Handle public tags with "UN" value representation and containing a string (cf. DICOM CP 246)
  * The numbering of sequences in Orthanc Explorer now uses the DICOM convention (starts at 1)
  * Possibility to generate a static library containing the Orthanc Framework</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1620561600">- Version 1.9.3
  * New configuration option: "DicomTlsRemoteCertificateRequired" to allow secure DICOM TLS
  connections without certificate
  * "ETag" headers for metadata and attachments now allow strong comparison (MD5 is included)
  * New CMake option: "ORTHANC_LUA_VERSION" to use a specific version of system-wide Lua
  * Fix the lifetime of temporary files associated with jobs that create ZIP archive/media:
  - In synchronous mode, their number could grow up to "JobsHistorySize" in Orthanc &lt;= 1.9.2
  - In asynchronous mode, the temporary files are removed as soon as their job gets canceled
  * Fix regression in the handling of "DicomCheckModalityHost" configuration option
  introduced by changeset 4182 in Orthanc 1.7.4
  * Reduced memory consumption of "OrthancPluginHttpClient()", "OrthancPluginHttpClient2()" and
  "OrthancPluginCallPeerApi()" on POST/PUT if chunked transfer is disabled
  * Fix issue #195 (No need for BulkDataURI when Data Element is empty)
- from version 1.9.2:
  * New configuration options related to multiple readers/writers:
  - "DatabaseServerIdentifier" identifies the server in the DB among a pool of Orthanc servers
  - "CheckRevisions" to protect against concurrent modifications of metadata and attachments
  * API version upgraded to 12
  * "/system" reports the value of the "CheckRevisions" global option
  * "/.../{id}/metadata/{name}" and "/.../{id}/attachments/{name}/..." URIs handle the
  HTTP headers "If-Match", "If-None-Match" and "ETag" to cope with revisions
  * New function in the SDK: OrthancPluginCallRestApi()
  * Full refactoring of the database plugin SDK to handle multiple readers/writers,
  which notably implies the handling of retries in the case of collisions
  * Use the local timezone for query/retrieve in the Orthanc Explorer interface (was UTC before)
  * Fix "OrthancServer/Resources/Samples/Python/Replicate.py" for Python 3.x
  * Fix issue #83 (ServerIndex shall implement retries for DB temporary errors)
  * Upgraded dependencies for static builds (notably on Windows and LSB):
  - civetweb 1.14
  - openssl 1.1.1k</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1624536000">- version 1.9.4
  * Orthanc now anonymizes according to Basic Profile of PS 3.15-2021b Table E.1-1
  * New configuration options:
  - "ExternalDictionaries" to load external DICOM dictionaries (useful for DICONDE)
  - "SynchronousZipStream" to disable streaming of ZIP
  * Orthanc Explorer supports the DICONDE dictionary
  * API version upgraded to 13
  * New routes to handle groups of multiple, unrelated DICOM resources at once:
  - "/tools/bulk-anonymize" to anonymize a set of resources
  - "/tools/bulk-content" to get the content of a set of resources
  - "/tools/bulk-delete" to delete a set of resources
  - "/tools/bulk-modify" to modify a set of resources
  * ZIP archive/media generated in synchronous mode are now streamed by default
  * "Replace" tags in "/modify" and "/anonymize" now supports value representation AT
  * "/jobs/..." has new field "ErrorDetails" to help identify the cause of an error
  * "Replace", "Keep" and "Remove" in "/modify" and "/anonymize" accept paths to subsequences
  using the syntax of the dcmodify command-line tool (wildcards are supported as well)
  * Added "short", "simplify" and/or "full" options to control the format of DICOM tags in:
  - GET /patients, GET /studies, GET /series, GET /instances (together with "&amp;expand")
  - GET /patients/{id}, GET /studies/{id}, GET /series/{id}, GET /instances/{id}
  - GET /patients/{id}/studies, GET /patients/{id}/series, GET /patients/{id}/instances
  - GET /studies/{id}/patient, GET /studies/{id}/series, GET /studies/{id}/instances
  - GET /series/{id}/patient, GET /series/{id}/study, GET /series/{id}/instances
  - GET /instances/{id}/patient, GET /instances/{id}/study, GET /instances/{id}/series
  - GET /patients/{id}/instances-tags, GET /patients/{id}/shared-tags
  - GET /studies/{id}/instances-tags, GET /series/{id}/shared-tags
  - GET /series/{id}/instances-tags, GET /studies/{id}/shared-tags
  - GET /patients/{id}/module, GET /patients/{id}/patient-module
  - GET /series/{id}/module, GET /studies/{id}/module, GET /instances/{id}/module
  - POST /tools/find
  * "/studies/{id}/split" accepts "Instances" parameter to split instances instead of series
  * "/studies/{id}/merge" accepts instances inside its "Resources" parameter
  * Full support of hierarchical relationships in tags whose VR is UI during anonymization
  * C-MOVE SCP: added possible DIMSE status "Sub-operations Complete - One or more Failures"
  * Fix issue #146 (Update Anonyization to 2019c) - was actually updated to 2021b
  * Upgraded dependencies for static builds (notably on Windows):
  - curl 7.77.0</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1626004800">- version 1.9.5
  * Anonymization is applied recursively to nested tags
  * API version upgraded to 14
  * Added "Short", "Simplify" and/or "Full" options to control the format of DICOM tags in:
  - POST /modalities/{id}/find-worklist
  - POST /queries/{id}/answers/{index}/retrieve
  - POST /queries/{id}/retrieve
  * Fix broken "Do lookup" button in Orthanc Explorer
  * Error code and description of jobs are now saved into the Orthanc database</changelog>
  <changelog author="Steve Kowalik &lt;steven.kowalik@suse.com&gt;" date="1626696000">- Remove executable bits from Python scripts when creating the source
  tree for the -source package to stop it requiring /usr/bin/python</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1626955200">- version 1.9.6
  * In lookup and query/retrieve, possibility to provide a specific study date
  * Clicking on "Send to remote modality" displays the job information to monitor progress
  * Fix orphaned attachments if bad revision number is provided</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1630497600">- Version 1.9.7
  * New configuration option "DicomAlwaysAllowMove" to disable verification of
  the remote modality in C-MOVE SCP
  * API version upgraded to 15
  * Added "Level" option to POST /tools/bulk-modify
  * Added missing OpenAPI documentation of "KeepSource" in ".../modify" and ".../anonymize"
  * Added file CITATION.cff
  * Linux Standard Base (LSB) builds of Orthanc can load non-LSB builds of plugins
  * Fix upload of ZIP archives containing a DICOMDIR file
  * Fix computation of the estimated time of arrival in jobs
  * Support detection of windowing and rescale in Philips multiframe images</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1632657600">- Test for SharedLibrary.Basic disabled (fails with new glibc)</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634126400">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * orthanc.service</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648209600">- version 1.10.1
  * for detailed changelog see NEWS</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1651838400">- switched source urls to https</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1652184000">- version 1.11.0
  * new API version 1.7
  * new configuration parameter
  * for detailed changelog see NEWS</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664280000">- version 1.11.2
  * Added support for RGBA64 images in tools/create-dicom and /preview
  * New configuration "MaximumStorageMode" to choose between recyling of
    old patients (default behavior) and rejection of new incoming data when
    the MaximumStorageSize has been reached.
  * New sample plugin: "DelayedDeletion" that will delete files from disk
    asynchronously to speed up deletion of large studies.
  * Lua: new "SetHttpTimeout" function
  * Lua: new "OnHeartBeat" callback called at regular interval provided that
    you have configured "LuaHeartBeatPeriod" &gt; 0.
  * "ExtraMainDicomTags" configuration now accepts Dicom Sequences.  Sequences are
    stored in a dedicated new metadata "MainDicomSequences".  This should improve
    DicomWeb QIDO-RS and avoid warnings like "Accessing Dicom tags from storage when
    accessing series : 0040,0275".
    Main dicom sequences can now be returned in "MainDicomTags" and in "RequestedTags".
  * Fix the "Never" option of the "StorageAccessOnFind" that was sill accessing
    files (bug introduced in 1.11.0).
  * Fix the Storage Cache for compressed files (bug introduced in 1.11.1).
  * Fix the storage cache that was not used by the Plugin SDK.  This fixes the
    DicomWeb plugin "/rendered" route performance issues.
  * DelayedDeletion plugin: Fix leaking of symbols
  * SQLite now closes and deletes WAL and SHM files on exit.  This should improve
    handling of SQLite DB over network drives.
  * Fix static compilation of boost 1.69 on Ubuntu 22.04
  * Upgraded dependencies for static builds:
  - boost 1.80.0
  - dcmtk 3.6.7  (fixes CVE-2022-2119 and CVE-2022-2120)
  - openssl 3.0.5
  * Housekeeper plugin: Fix resume of previous processing
  * Added missing MOVEPatientRootQueryRetrieveInformationModel in
    DicomControlUserConnection::SetupPresentationContexts()
  * Improved HttpClient error logging (add method + url)
  * API version upgraded to 18
  * /system is now reporting "DatabaseServerIdentifier"
  * Added an Asynchronous mode to /modalities/../move.
  * "RequestedTags" option can now include DICOM sequences.
  * New function in the SDK: "OrthancPluginGetDatabaseServerIdentifier"
  * DicomMap::ParseMainDicomTags has been deprecated -&gt; retrieve "full" tags
    and use DicomMap::FromDicomAsJson instead</changelog>
</package>
<package pkgid="b2d7e4ac6f73f882a33279c775986afc84ed73d046fba0487cd98424140f928a" name="orthanc" arch="x86_64">
  <version epoch="0" ver="1.11.2" rel="bp154.2.3.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1598356800">- Version 1.7.3
  * API version upgraded to 8
  * "/peers/{id}/store": New option "Compress" to compress DICOM data using gzip
  * "OrthancPeerStore" jobs now report the transmitted size in their public content
  * New config option "Worklist.LimitAnswers" for the sample modality worklist plugin
  * Add missing tag "Retrieve AE Title (0008,0054)" in C-FIND SCP responses
  * Fix DICOM SCP filters if some query tag has &gt; 256 characters (list of UIDs matching)
  * "/series/.../ordered-slices" supports spaces in Image Position/Orientation Patient tags
  * Fix possible crash in HttpClient if sending multipart body (can occur in STOW-RS)
  * Support receiving multipart messages larger than 2GB in the embedded HTTP server</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1600430400">- Version 1.7.4
  * New configuration options to enable HTTP peers identification through certificates:
  "SslVerifyPeers" and "SslTrustedClientCertificates"
  * New configuration option "SyncStorageArea" to immediately commit the files onto the disk
  (through fsync()), so as to avoid discrepencies between DB and filesystem in case of hard
  shutdown of the machine running Orthanc. This slows down adding new files into Orthanc.
  * Underscores are now allowed in peers/modalities symbolic names
  * Fix compatibility with C-MOVE SCU requests issued by Ambra
  * Fix transcoding in C-MOVE SCP, in the case where "SynchronousCMove" is "true"
  * When checking DICOM allowed methods, if there are multiple modalities with the same AET,
  differentiate them from the calling IP
  * Enable the access to raw frames in Philips ELSCINT1 proprietary compression
  * Support empty key passwords when using HTTP client certificates
  * Fix handling of "ModalitiesInStudy" (0008,0061) in C-FIND and "/tools/find"</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1602849600">- version 1.8.0
  * Serving the content of Orthanc as a WebDAV network share
  * New config options: "WebDavEnabled", "WebDavDeleteAllowed" and "WebDavUploadAllowed"</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1607428800">- Version 1.8.1
  * adaption to new systemd-macros (OBS)
  * New sample tool "OrthancImport.py" to easily import compressed archives (ZIP) into Orthanc
  * Logging categories (cf. command-line options starting with "--verbose-" and "--trace=")
  * New command-line option "--trace-dicom" to access full debug information from DCMTK
  * New config option "DicomEchoChecksFind" to automatically complement C-GET SCU with C-FIND SCU
  * API version upgraded to 9
  * "/tools/dicom-echo": Execute C-Echo SCU to a modality that is not registered in "/modalities"
  * "/tools/log-level-*": Dynamically access and/or change the verbosity of logging categories
  * "/peers/{id}/configuration": Get the configuration of one peer (cf. "/peers?expand")
  * "/modalities/{id}/configuration": Get the configuration of one modality (cf. "/modalities?expand")
  * "/tools/dicom-echo" and "/modalities/{id}/echo" now accept the field "CheckFind" in their JSON
  body to complement C-GET SCU with C-FIND SCU ("DicomEchoChecksFind" on a per-connection basis)
  * Archive/media jobs report the size of the created ZIP file in content field "ArchiveSizeMB"
  * New function in the SDK: OrthancPluginGenerateRestApiAuthorizationToken()
  * C-GET SCP: Fix responses and handling of cancel
  * Fix decoding sequence if "BuiltinDecoderTranscoderOrder" is "Before"
  * Fix keep-alive in the embedded HTTP server by setting the "Keep-Alive" HTTP header
  * Fix access to videos as a single raw frame (feature broken since Orthanc 1.6.0)
  * REST API now returns 404 error if deleting an inexistent peer or modality
  * Improved forward ABI compatibility of Orthanc Framework (notably, no inline methods anymore)
  * Upgraded dependencies for static builds (notably on Windows and LSB):
  - civetweb 1.13</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1608379200">- Version 1.8.2
  * ZIP archives containing DICOM files can be uploaded using WebDAV
  * New config option "MallocArenaMax" to control memory usage on GNU/Linux
  * Explicit error log if trying to load a 32bit (resp. 64bit) plugin into
  a 64bit (resp. 32bit) version of Orthanc
  * New configuration options contributed by Varian Medical Systems:
  - "DeidentifyLogs" to remove patient identification from the logs (C-GET, C-MOVE, C-FIND)
  - "DeidentifyLogsDicomVersion" to specify the deidentification rules for the logs
  - "OrthancExplorerEnabled" to enable/disable the Orthanc Explorer Web user interface
  - "SslMinimumProtocolVersion" to set the minimal SSL protocol version (now defaults to SSL 1.2)
  - "SslCiphersAccepted" to set the accepted ciphers over SSL (now defaults to FIPS 140-2)
  * New configuration options related to ingest transcoding:
  - "IngestTranscodingOfUncompressed" to control whether uncompressed transfer syntaxes are transcoded
  - "IngestTranscodingOfCompressed" to control whether compressed transfer syntaxes are transcoded
  * "/instances" can be used to import ZIP archives provided in the POST body
  * Allow concurrency on the OrthancPluginRegisterIncomingHttpRequestFilter() callbacks
  * Allow empty request body in "/modalities/{id}/echo"
  * If meta-header is missing, best-effort to extract "TransferSyntax" in "/instances/{id}/metadata"</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1609329600">- Workaround for boo#1180359</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1611921600">- Version 1.9.0
  * Support of DICOM TLS
  * New configuration options related to DICOM networking:
  - "DicomTlsEnabled" to enable DICOM TLS in Orthanc SCP
  - "DicomTlsCertificate" to provide the TLS certificate to be used in both Orthanc SCU and SCP
  - "DicomTlsPrivateKey" to provide the private key of the TLS certificate
  - "DicomTlsTrustedCertificates" to provide the list of TLS certificates to be trusted by Orthanc
  - "UseDicomTls" in "DicomModalities" to enable DICOM TLS in outgoing SCU on a per-modality basis
  - "MaximumPduLength" to tune the maximum PDU length (Protocol Data Unit)
  - "LocalAet" in "DicomModalities" to overwrite global "DicomAet" for SCU on a per-modality basis
  - "AcceptedTransferSyntaxes" to set the transfer syntax UIDs accepted by Orthanc C-STORE SCP
  - "H265TransferSyntaxAccepted" to enable/disable all the transfer syntaxes related to H.265
  - "DicomAlwaysAllowFind" to disable verification of the remote modality in C-FIND SCP
  - "DicomAlwaysAllowGet" to disable verification of the remote modality in C-GET SCP
  * New configuration option: "DicomScuPreferredTransferSyntax" to control transcoding in C-STORE SCU
  * New command-line option: "--openapi" to write the OpenAPI documentation of the REST API to a file
  * New metadata automatically computed at the series level: "RemoteAET"
  * The DICOM meta-header and the transfer syntax are displayed at the "Instance" level
  * API version upgraded to 10
  * "/tools/accepted-transfer-syntaxes": Get/set transfer syntaxes accepted by Orthanc C-STORE SCP
  * "/tools/unknown-sop-class-accepted": Get/set whether C-STORE SCP accepts unknown SOP class UID
  * "/modalities/{...}/query": New string argument "LocalAet"
  * "/tools/create-dicom": New flag "Force" to bypass consistency checks for the DICOM tags
  * BREAKING CHANGE: All the Lua callbacks "IsXXXTransferSyntaxAccepted()" and
  "IsUnknownSopClassAccepted()" have been removed
  * New functions in the SDK:
  - OrthancPluginCreateMemoryBuffer64()
  - OrthancPluginRegisterStorageArea2()
  - OrthancPluginCreateDicom2()
  * Refactoring and improvements to the cache of DICOM files (it can now hold many files)
  * New Prometheus metrics "orthanc_dicom_cache_count" and "orthanc_dicom_cache_size"
  * Fix upload of multiple DICOM files using one single POST call to "multipart/form-data"
  Could be the final resolution of issue #21 (DICOM files missing after uploading with Firefox)
  * Partial fix of issue #48 (Windows service not stopped properly), cf. comments 4 and 5
  * Explicitly use little-endian to encode uncompressed file size with zlib compression
  * Upgraded dependencies for static builds (notably on Windows):
  - dcmtk 3.6.6
  - jsoncpp 1.9.4</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1614254400">- version 1.9.1
  * The "dicom-as-json" attachments are not explicitly stored anymore to improve performance
  * If the storage area doesn't support range reading, or if "StorageCompression"
  is enabled, a new type of attachment "dicom-until-pixel-data" is generated
  * New metadata automatically computed at the instance level: "PixelDataOffset"
  * New configuration option related to networking:
  - "Timeout" in "DicomModalities" to set DICOM SCU timeout on a per-modality basis
  - "Timeout" in "OrthancPeers" to set HTTP client timeout on a per-peer basis
  * API version upgraded to 11
  * BREAKING CHANGES:
  - External applications should not call "/instances/.../attachments/dicom-as-json" anymore,
    and should use "/instances/.../tags" instead
  - "/instances/.../tags" route does not report the tags after "Pixel Data" (7fe0,0010) anymore
  * "/peers/{id}/store-straight": Synchronously send the DICOM instance in POST body to the peer
  * New arguments in the REST API:
  - "Timeout" in "/modalities/.../query"
  - "Timeout" in "/modalities/.../storage-commitment"
  - "Timeout" in "/queries/.../answers/.../query-{studies|series|instances}"
  * New value in enumeration: OrthancPluginDicomToJsonFlags_StopAfterPixelData
  * New value in enumeration: OrthancPluginDicomToJsonFlags_SkipGroupLengths
  * Improved precision of floating-point numbers in DICOM-as-JSON and DICOM summary
  * Optimization in C-STORE SCP by avoiding an unnecessary DICOM parsing
  * Fix build on big-endian architectures
  * Handle public tags with "UN" value representation and containing a string (cf. DICOM CP 246)
  * The numbering of sequences in Orthanc Explorer now uses the DICOM convention (starts at 1)
  * Possibility to generate a static library containing the Orthanc Framework</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1620561600">- Version 1.9.3
  * New configuration option: "DicomTlsRemoteCertificateRequired" to allow secure DICOM TLS
  connections without certificate
  * "ETag" headers for metadata and attachments now allow strong comparison (MD5 is included)
  * New CMake option: "ORTHANC_LUA_VERSION" to use a specific version of system-wide Lua
  * Fix the lifetime of temporary files associated with jobs that create ZIP archive/media:
  - In synchronous mode, their number could grow up to "JobsHistorySize" in Orthanc &lt;= 1.9.2
  - In asynchronous mode, the temporary files are removed as soon as their job gets canceled
  * Fix regression in the handling of "DicomCheckModalityHost" configuration option
  introduced by changeset 4182 in Orthanc 1.7.4
  * Reduced memory consumption of "OrthancPluginHttpClient()", "OrthancPluginHttpClient2()" and
  "OrthancPluginCallPeerApi()" on POST/PUT if chunked transfer is disabled
  * Fix issue #195 (No need for BulkDataURI when Data Element is empty)
- from version 1.9.2:
  * New configuration options related to multiple readers/writers:
  - "DatabaseServerIdentifier" identifies the server in the DB among a pool of Orthanc servers
  - "CheckRevisions" to protect against concurrent modifications of metadata and attachments
  * API version upgraded to 12
  * "/system" reports the value of the "CheckRevisions" global option
  * "/.../{id}/metadata/{name}" and "/.../{id}/attachments/{name}/..." URIs handle the
  HTTP headers "If-Match", "If-None-Match" and "ETag" to cope with revisions
  * New function in the SDK: OrthancPluginCallRestApi()
  * Full refactoring of the database plugin SDK to handle multiple readers/writers,
  which notably implies the handling of retries in the case of collisions
  * Use the local timezone for query/retrieve in the Orthanc Explorer interface (was UTC before)
  * Fix "OrthancServer/Resources/Samples/Python/Replicate.py" for Python 3.x
  * Fix issue #83 (ServerIndex shall implement retries for DB temporary errors)
  * Upgraded dependencies for static builds (notably on Windows and LSB):
  - civetweb 1.14
  - openssl 1.1.1k</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1624536000">- version 1.9.4
  * Orthanc now anonymizes according to Basic Profile of PS 3.15-2021b Table E.1-1
  * New configuration options:
  - "ExternalDictionaries" to load external DICOM dictionaries (useful for DICONDE)
  - "SynchronousZipStream" to disable streaming of ZIP
  * Orthanc Explorer supports the DICONDE dictionary
  * API version upgraded to 13
  * New routes to handle groups of multiple, unrelated DICOM resources at once:
  - "/tools/bulk-anonymize" to anonymize a set of resources
  - "/tools/bulk-content" to get the content of a set of resources
  - "/tools/bulk-delete" to delete a set of resources
  - "/tools/bulk-modify" to modify a set of resources
  * ZIP archive/media generated in synchronous mode are now streamed by default
  * "Replace" tags in "/modify" and "/anonymize" now supports value representation AT
  * "/jobs/..." has new field "ErrorDetails" to help identify the cause of an error
  * "Replace", "Keep" and "Remove" in "/modify" and "/anonymize" accept paths to subsequences
  using the syntax of the dcmodify command-line tool (wildcards are supported as well)
  * Added "short", "simplify" and/or "full" options to control the format of DICOM tags in:
  - GET /patients, GET /studies, GET /series, GET /instances (together with "&amp;expand")
  - GET /patients/{id}, GET /studies/{id}, GET /series/{id}, GET /instances/{id}
  - GET /patients/{id}/studies, GET /patients/{id}/series, GET /patients/{id}/instances
  - GET /studies/{id}/patient, GET /studies/{id}/series, GET /studies/{id}/instances
  - GET /series/{id}/patient, GET /series/{id}/study, GET /series/{id}/instances
  - GET /instances/{id}/patient, GET /instances/{id}/study, GET /instances/{id}/series
  - GET /patients/{id}/instances-tags, GET /patients/{id}/shared-tags
  - GET /studies/{id}/instances-tags, GET /series/{id}/shared-tags
  - GET /series/{id}/instances-tags, GET /studies/{id}/shared-tags
  - GET /patients/{id}/module, GET /patients/{id}/patient-module
  - GET /series/{id}/module, GET /studies/{id}/module, GET /instances/{id}/module
  - POST /tools/find
  * "/studies/{id}/split" accepts "Instances" parameter to split instances instead of series
  * "/studies/{id}/merge" accepts instances inside its "Resources" parameter
  * Full support of hierarchical relationships in tags whose VR is UI during anonymization
  * C-MOVE SCP: added possible DIMSE status "Sub-operations Complete - One or more Failures"
  * Fix issue #146 (Update Anonyization to 2019c) - was actually updated to 2021b
  * Upgraded dependencies for static builds (notably on Windows):
  - curl 7.77.0</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1626004800">- version 1.9.5
  * Anonymization is applied recursively to nested tags
  * API version upgraded to 14
  * Added "Short", "Simplify" and/or "Full" options to control the format of DICOM tags in:
  - POST /modalities/{id}/find-worklist
  - POST /queries/{id}/answers/{index}/retrieve
  - POST /queries/{id}/retrieve
  * Fix broken "Do lookup" button in Orthanc Explorer
  * Error code and description of jobs are now saved into the Orthanc database</changelog>
  <changelog author="Steve Kowalik &lt;steven.kowalik@suse.com&gt;" date="1626696000">- Remove executable bits from Python scripts when creating the source
  tree for the -source package to stop it requiring /usr/bin/python</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1626955200">- version 1.9.6
  * In lookup and query/retrieve, possibility to provide a specific study date
  * Clicking on "Send to remote modality" displays the job information to monitor progress
  * Fix orphaned attachments if bad revision number is provided</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1630497600">- Version 1.9.7
  * New configuration option "DicomAlwaysAllowMove" to disable verification of
  the remote modality in C-MOVE SCP
  * API version upgraded to 15
  * Added "Level" option to POST /tools/bulk-modify
  * Added missing OpenAPI documentation of "KeepSource" in ".../modify" and ".../anonymize"
  * Added file CITATION.cff
  * Linux Standard Base (LSB) builds of Orthanc can load non-LSB builds of plugins
  * Fix upload of ZIP archives containing a DICOMDIR file
  * Fix computation of the estimated time of arrival in jobs
  * Support detection of windowing and rescale in Philips multiframe images</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1632657600">- Test for SharedLibrary.Basic disabled (fails with new glibc)</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634126400">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * orthanc.service</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648209600">- version 1.10.1
  * for detailed changelog see NEWS</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1651838400">- switched source urls to https</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1652184000">- version 1.11.0
  * new API version 1.7
  * new configuration parameter
  * for detailed changelog see NEWS</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664280000">- version 1.11.2
  * Added support for RGBA64 images in tools/create-dicom and /preview
  * New configuration "MaximumStorageMode" to choose between recyling of
    old patients (default behavior) and rejection of new incoming data when
    the MaximumStorageSize has been reached.
  * New sample plugin: "DelayedDeletion" that will delete files from disk
    asynchronously to speed up deletion of large studies.
  * Lua: new "SetHttpTimeout" function
  * Lua: new "OnHeartBeat" callback called at regular interval provided that
    you have configured "LuaHeartBeatPeriod" &gt; 0.
  * "ExtraMainDicomTags" configuration now accepts Dicom Sequences.  Sequences are
    stored in a dedicated new metadata "MainDicomSequences".  This should improve
    DicomWeb QIDO-RS and avoid warnings like "Accessing Dicom tags from storage when
    accessing series : 0040,0275".
    Main dicom sequences can now be returned in "MainDicomTags" and in "RequestedTags".
  * Fix the "Never" option of the "StorageAccessOnFind" that was sill accessing
    files (bug introduced in 1.11.0).
  * Fix the Storage Cache for compressed files (bug introduced in 1.11.1).
  * Fix the storage cache that was not used by the Plugin SDK.  This fixes the
    DicomWeb plugin "/rendered" route performance issues.
  * DelayedDeletion plugin: Fix leaking of symbols
  * SQLite now closes and deletes WAL and SHM files on exit.  This should improve
    handling of SQLite DB over network drives.
  * Fix static compilation of boost 1.69 on Ubuntu 22.04
  * Upgraded dependencies for static builds:
  - boost 1.80.0
  - dcmtk 3.6.7  (fixes CVE-2022-2119 and CVE-2022-2120)
  - openssl 3.0.5
  * Housekeeper plugin: Fix resume of previous processing
  * Added missing MOVEPatientRootQueryRetrieveInformationModel in
    DicomControlUserConnection::SetupPresentationContexts()
  * Improved HttpClient error logging (add method + url)
  * API version upgraded to 18
  * /system is now reporting "DatabaseServerIdentifier"
  * Added an Asynchronous mode to /modalities/../move.
  * "RequestedTags" option can now include DICOM sequences.
  * New function in the SDK: "OrthancPluginGetDatabaseServerIdentifier"
  * DicomMap::ParseMainDicomTags has been deprecated -&gt; retrieve "full" tags
    and use DicomMap::FromDicomAsJson instead</changelog>
</package>
<package pkgid="33a5b77fb221e1dca0a0c7fcf0927af9b7038e21a89ab71189da2c882c612271" name="orthanc-devel" arch="aarch64">
  <version epoch="0" ver="1.11.2" rel="bp154.2.3.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1598356800">- Version 1.7.3
  * API version upgraded to 8
  * "/peers/{id}/store": New option "Compress" to compress DICOM data using gzip
  * "OrthancPeerStore" jobs now report the transmitted size in their public content
  * New config option "Worklist.LimitAnswers" for the sample modality worklist plugin
  * Add missing tag "Retrieve AE Title (0008,0054)" in C-FIND SCP responses
  * Fix DICOM SCP filters if some query tag has &gt; 256 characters (list of UIDs matching)
  * "/series/.../ordered-slices" supports spaces in Image Position/Orientation Patient tags
  * Fix possible crash in HttpClient if sending multipart body (can occur in STOW-RS)
  * Support receiving multipart messages larger than 2GB in the embedded HTTP server</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1600430400">- Version 1.7.4
  * New configuration options to enable HTTP peers identification through certificates:
  "SslVerifyPeers" and "SslTrustedClientCertificates"
  * New configuration option "SyncStorageArea" to immediately commit the files onto the disk
  (through fsync()), so as to avoid discrepencies between DB and filesystem in case of hard
  shutdown of the machine running Orthanc. This slows down adding new files into Orthanc.
  * Underscores are now allowed in peers/modalities symbolic names
  * Fix compatibility with C-MOVE SCU requests issued by Ambra
  * Fix transcoding in C-MOVE SCP, in the case where "SynchronousCMove" is "true"
  * When checking DICOM allowed methods, if there are multiple modalities with the same AET,
  differentiate them from the calling IP
  * Enable the access to raw frames in Philips ELSCINT1 proprietary compression
  * Support empty key passwords when using HTTP client certificates
  * Fix handling of "ModalitiesInStudy" (0008,0061) in C-FIND and "/tools/find"</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1602849600">- version 1.8.0
  * Serving the content of Orthanc as a WebDAV network share
  * New config options: "WebDavEnabled", "WebDavDeleteAllowed" and "WebDavUploadAllowed"</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1607428800">- Version 1.8.1
  * adaption to new systemd-macros (OBS)
  * New sample tool "OrthancImport.py" to easily import compressed archives (ZIP) into Orthanc
  * Logging categories (cf. command-line options starting with "--verbose-" and "--trace=")
  * New command-line option "--trace-dicom" to access full debug information from DCMTK
  * New config option "DicomEchoChecksFind" to automatically complement C-GET SCU with C-FIND SCU
  * API version upgraded to 9
  * "/tools/dicom-echo": Execute C-Echo SCU to a modality that is not registered in "/modalities"
  * "/tools/log-level-*": Dynamically access and/or change the verbosity of logging categories
  * "/peers/{id}/configuration": Get the configuration of one peer (cf. "/peers?expand")
  * "/modalities/{id}/configuration": Get the configuration of one modality (cf. "/modalities?expand")
  * "/tools/dicom-echo" and "/modalities/{id}/echo" now accept the field "CheckFind" in their JSON
  body to complement C-GET SCU with C-FIND SCU ("DicomEchoChecksFind" on a per-connection basis)
  * Archive/media jobs report the size of the created ZIP file in content field "ArchiveSizeMB"
  * New function in the SDK: OrthancPluginGenerateRestApiAuthorizationToken()
  * C-GET SCP: Fix responses and handling of cancel
  * Fix decoding sequence if "BuiltinDecoderTranscoderOrder" is "Before"
  * Fix keep-alive in the embedded HTTP server by setting the "Keep-Alive" HTTP header
  * Fix access to videos as a single raw frame (feature broken since Orthanc 1.6.0)
  * REST API now returns 404 error if deleting an inexistent peer or modality
  * Improved forward ABI compatibility of Orthanc Framework (notably, no inline methods anymore)
  * Upgraded dependencies for static builds (notably on Windows and LSB):
  - civetweb 1.13</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1608379200">- Version 1.8.2
  * ZIP archives containing DICOM files can be uploaded using WebDAV
  * New config option "MallocArenaMax" to control memory usage on GNU/Linux
  * Explicit error log if trying to load a 32bit (resp. 64bit) plugin into
  a 64bit (resp. 32bit) version of Orthanc
  * New configuration options contributed by Varian Medical Systems:
  - "DeidentifyLogs" to remove patient identification from the logs (C-GET, C-MOVE, C-FIND)
  - "DeidentifyLogsDicomVersion" to specify the deidentification rules for the logs
  - "OrthancExplorerEnabled" to enable/disable the Orthanc Explorer Web user interface
  - "SslMinimumProtocolVersion" to set the minimal SSL protocol version (now defaults to SSL 1.2)
  - "SslCiphersAccepted" to set the accepted ciphers over SSL (now defaults to FIPS 140-2)
  * New configuration options related to ingest transcoding:
  - "IngestTranscodingOfUncompressed" to control whether uncompressed transfer syntaxes are transcoded
  - "IngestTranscodingOfCompressed" to control whether compressed transfer syntaxes are transcoded
  * "/instances" can be used to import ZIP archives provided in the POST body
  * Allow concurrency on the OrthancPluginRegisterIncomingHttpRequestFilter() callbacks
  * Allow empty request body in "/modalities/{id}/echo"
  * If meta-header is missing, best-effort to extract "TransferSyntax" in "/instances/{id}/metadata"</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1609329600">- Workaround for boo#1180359</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1611921600">- Version 1.9.0
  * Support of DICOM TLS
  * New configuration options related to DICOM networking:
  - "DicomTlsEnabled" to enable DICOM TLS in Orthanc SCP
  - "DicomTlsCertificate" to provide the TLS certificate to be used in both Orthanc SCU and SCP
  - "DicomTlsPrivateKey" to provide the private key of the TLS certificate
  - "DicomTlsTrustedCertificates" to provide the list of TLS certificates to be trusted by Orthanc
  - "UseDicomTls" in "DicomModalities" to enable DICOM TLS in outgoing SCU on a per-modality basis
  - "MaximumPduLength" to tune the maximum PDU length (Protocol Data Unit)
  - "LocalAet" in "DicomModalities" to overwrite global "DicomAet" for SCU on a per-modality basis
  - "AcceptedTransferSyntaxes" to set the transfer syntax UIDs accepted by Orthanc C-STORE SCP
  - "H265TransferSyntaxAccepted" to enable/disable all the transfer syntaxes related to H.265
  - "DicomAlwaysAllowFind" to disable verification of the remote modality in C-FIND SCP
  - "DicomAlwaysAllowGet" to disable verification of the remote modality in C-GET SCP
  * New configuration option: "DicomScuPreferredTransferSyntax" to control transcoding in C-STORE SCU
  * New command-line option: "--openapi" to write the OpenAPI documentation of the REST API to a file
  * New metadata automatically computed at the series level: "RemoteAET"
  * The DICOM meta-header and the transfer syntax are displayed at the "Instance" level
  * API version upgraded to 10
  * "/tools/accepted-transfer-syntaxes": Get/set transfer syntaxes accepted by Orthanc C-STORE SCP
  * "/tools/unknown-sop-class-accepted": Get/set whether C-STORE SCP accepts unknown SOP class UID
  * "/modalities/{...}/query": New string argument "LocalAet"
  * "/tools/create-dicom": New flag "Force" to bypass consistency checks for the DICOM tags
  * BREAKING CHANGE: All the Lua callbacks "IsXXXTransferSyntaxAccepted()" and
  "IsUnknownSopClassAccepted()" have been removed
  * New functions in the SDK:
  - OrthancPluginCreateMemoryBuffer64()
  - OrthancPluginRegisterStorageArea2()
  - OrthancPluginCreateDicom2()
  * Refactoring and improvements to the cache of DICOM files (it can now hold many files)
  * New Prometheus metrics "orthanc_dicom_cache_count" and "orthanc_dicom_cache_size"
  * Fix upload of multiple DICOM files using one single POST call to "multipart/form-data"
  Could be the final resolution of issue #21 (DICOM files missing after uploading with Firefox)
  * Partial fix of issue #48 (Windows service not stopped properly), cf. comments 4 and 5
  * Explicitly use little-endian to encode uncompressed file size with zlib compression
  * Upgraded dependencies for static builds (notably on Windows):
  - dcmtk 3.6.6
  - jsoncpp 1.9.4</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1614254400">- version 1.9.1
  * The "dicom-as-json" attachments are not explicitly stored anymore to improve performance
  * If the storage area doesn't support range reading, or if "StorageCompression"
  is enabled, a new type of attachment "dicom-until-pixel-data" is generated
  * New metadata automatically computed at the instance level: "PixelDataOffset"
  * New configuration option related to networking:
  - "Timeout" in "DicomModalities" to set DICOM SCU timeout on a per-modality basis
  - "Timeout" in "OrthancPeers" to set HTTP client timeout on a per-peer basis
  * API version upgraded to 11
  * BREAKING CHANGES:
  - External applications should not call "/instances/.../attachments/dicom-as-json" anymore,
    and should use "/instances/.../tags" instead
  - "/instances/.../tags" route does not report the tags after "Pixel Data" (7fe0,0010) anymore
  * "/peers/{id}/store-straight": Synchronously send the DICOM instance in POST body to the peer
  * New arguments in the REST API:
  - "Timeout" in "/modalities/.../query"
  - "Timeout" in "/modalities/.../storage-commitment"
  - "Timeout" in "/queries/.../answers/.../query-{studies|series|instances}"
  * New value in enumeration: OrthancPluginDicomToJsonFlags_StopAfterPixelData
  * New value in enumeration: OrthancPluginDicomToJsonFlags_SkipGroupLengths
  * Improved precision of floating-point numbers in DICOM-as-JSON and DICOM summary
  * Optimization in C-STORE SCP by avoiding an unnecessary DICOM parsing
  * Fix build on big-endian architectures
  * Handle public tags with "UN" value representation and containing a string (cf. DICOM CP 246)
  * The numbering of sequences in Orthanc Explorer now uses the DICOM convention (starts at 1)
  * Possibility to generate a static library containing the Orthanc Framework</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1620561600">- Version 1.9.3
  * New configuration option: "DicomTlsRemoteCertificateRequired" to allow secure DICOM TLS
  connections without certificate
  * "ETag" headers for metadata and attachments now allow strong comparison (MD5 is included)
  * New CMake option: "ORTHANC_LUA_VERSION" to use a specific version of system-wide Lua
  * Fix the lifetime of temporary files associated with jobs that create ZIP archive/media:
  - In synchronous mode, their number could grow up to "JobsHistorySize" in Orthanc &lt;= 1.9.2
  - In asynchronous mode, the temporary files are removed as soon as their job gets canceled
  * Fix regression in the handling of "DicomCheckModalityHost" configuration option
  introduced by changeset 4182 in Orthanc 1.7.4
  * Reduced memory consumption of "OrthancPluginHttpClient()", "OrthancPluginHttpClient2()" and
  "OrthancPluginCallPeerApi()" on POST/PUT if chunked transfer is disabled
  * Fix issue #195 (No need for BulkDataURI when Data Element is empty)
- from version 1.9.2:
  * New configuration options related to multiple readers/writers:
  - "DatabaseServerIdentifier" identifies the server in the DB among a pool of Orthanc servers
  - "CheckRevisions" to protect against concurrent modifications of metadata and attachments
  * API version upgraded to 12
  * "/system" reports the value of the "CheckRevisions" global option
  * "/.../{id}/metadata/{name}" and "/.../{id}/attachments/{name}/..." URIs handle the
  HTTP headers "If-Match", "If-None-Match" and "ETag" to cope with revisions
  * New function in the SDK: OrthancPluginCallRestApi()
  * Full refactoring of the database plugin SDK to handle multiple readers/writers,
  which notably implies the handling of retries in the case of collisions
  * Use the local timezone for query/retrieve in the Orthanc Explorer interface (was UTC before)
  * Fix "OrthancServer/Resources/Samples/Python/Replicate.py" for Python 3.x
  * Fix issue #83 (ServerIndex shall implement retries for DB temporary errors)
  * Upgraded dependencies for static builds (notably on Windows and LSB):
  - civetweb 1.14
  - openssl 1.1.1k</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1624536000">- version 1.9.4
  * Orthanc now anonymizes according to Basic Profile of PS 3.15-2021b Table E.1-1
  * New configuration options:
  - "ExternalDictionaries" to load external DICOM dictionaries (useful for DICONDE)
  - "SynchronousZipStream" to disable streaming of ZIP
  * Orthanc Explorer supports the DICONDE dictionary
  * API version upgraded to 13
  * New routes to handle groups of multiple, unrelated DICOM resources at once:
  - "/tools/bulk-anonymize" to anonymize a set of resources
  - "/tools/bulk-content" to get the content of a set of resources
  - "/tools/bulk-delete" to delete a set of resources
  - "/tools/bulk-modify" to modify a set of resources
  * ZIP archive/media generated in synchronous mode are now streamed by default
  * "Replace" tags in "/modify" and "/anonymize" now supports value representation AT
  * "/jobs/..." has new field "ErrorDetails" to help identify the cause of an error
  * "Replace", "Keep" and "Remove" in "/modify" and "/anonymize" accept paths to subsequences
  using the syntax of the dcmodify command-line tool (wildcards are supported as well)
  * Added "short", "simplify" and/or "full" options to control the format of DICOM tags in:
  - GET /patients, GET /studies, GET /series, GET /instances (together with "&amp;expand")
  - GET /patients/{id}, GET /studies/{id}, GET /series/{id}, GET /instances/{id}
  - GET /patients/{id}/studies, GET /patients/{id}/series, GET /patients/{id}/instances
  - GET /studies/{id}/patient, GET /studies/{id}/series, GET /studies/{id}/instances
  - GET /series/{id}/patient, GET /series/{id}/study, GET /series/{id}/instances
  - GET /instances/{id}/patient, GET /instances/{id}/study, GET /instances/{id}/series
  - GET /patients/{id}/instances-tags, GET /patients/{id}/shared-tags
  - GET /studies/{id}/instances-tags, GET /series/{id}/shared-tags
  - GET /series/{id}/instances-tags, GET /studies/{id}/shared-tags
  - GET /patients/{id}/module, GET /patients/{id}/patient-module
  - GET /series/{id}/module, GET /studies/{id}/module, GET /instances/{id}/module
  - POST /tools/find
  * "/studies/{id}/split" accepts "Instances" parameter to split instances instead of series
  * "/studies/{id}/merge" accepts instances inside its "Resources" parameter
  * Full support of hierarchical relationships in tags whose VR is UI during anonymization
  * C-MOVE SCP: added possible DIMSE status "Sub-operations Complete - One or more Failures"
  * Fix issue #146 (Update Anonyization to 2019c) - was actually updated to 2021b
  * Upgraded dependencies for static builds (notably on Windows):
  - curl 7.77.0</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1626004800">- version 1.9.5
  * Anonymization is applied recursively to nested tags
  * API version upgraded to 14
  * Added "Short", "Simplify" and/or "Full" options to control the format of DICOM tags in:
  - POST /modalities/{id}/find-worklist
  - POST /queries/{id}/answers/{index}/retrieve
  - POST /queries/{id}/retrieve
  * Fix broken "Do lookup" button in Orthanc Explorer
  * Error code and description of jobs are now saved into the Orthanc database</changelog>
  <changelog author="Steve Kowalik &lt;steven.kowalik@suse.com&gt;" date="1626696000">- Remove executable bits from Python scripts when creating the source
  tree for the -source package to stop it requiring /usr/bin/python</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1626955200">- version 1.9.6
  * In lookup and query/retrieve, possibility to provide a specific study date
  * Clicking on "Send to remote modality" displays the job information to monitor progress
  * Fix orphaned attachments if bad revision number is provided</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1630497600">- Version 1.9.7
  * New configuration option "DicomAlwaysAllowMove" to disable verification of
  the remote modality in C-MOVE SCP
  * API version upgraded to 15
  * Added "Level" option to POST /tools/bulk-modify
  * Added missing OpenAPI documentation of "KeepSource" in ".../modify" and ".../anonymize"
  * Added file CITATION.cff
  * Linux Standard Base (LSB) builds of Orthanc can load non-LSB builds of plugins
  * Fix upload of ZIP archives containing a DICOMDIR file
  * Fix computation of the estimated time of arrival in jobs
  * Support detection of windowing and rescale in Philips multiframe images</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1632657600">- Test for SharedLibrary.Basic disabled (fails with new glibc)</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634126400">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * orthanc.service</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648209600">- version 1.10.1
  * for detailed changelog see NEWS</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1651838400">- switched source urls to https</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1652184000">- version 1.11.0
  * new API version 1.7
  * new configuration parameter
  * for detailed changelog see NEWS</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664280000">- version 1.11.2
  * Added support for RGBA64 images in tools/create-dicom and /preview
  * New configuration "MaximumStorageMode" to choose between recyling of
    old patients (default behavior) and rejection of new incoming data when
    the MaximumStorageSize has been reached.
  * New sample plugin: "DelayedDeletion" that will delete files from disk
    asynchronously to speed up deletion of large studies.
  * Lua: new "SetHttpTimeout" function
  * Lua: new "OnHeartBeat" callback called at regular interval provided that
    you have configured "LuaHeartBeatPeriod" &gt; 0.
  * "ExtraMainDicomTags" configuration now accepts Dicom Sequences.  Sequences are
    stored in a dedicated new metadata "MainDicomSequences".  This should improve
    DicomWeb QIDO-RS and avoid warnings like "Accessing Dicom tags from storage when
    accessing series : 0040,0275".
    Main dicom sequences can now be returned in "MainDicomTags" and in "RequestedTags".
  * Fix the "Never" option of the "StorageAccessOnFind" that was sill accessing
    files (bug introduced in 1.11.0).
  * Fix the Storage Cache for compressed files (bug introduced in 1.11.1).
  * Fix the storage cache that was not used by the Plugin SDK.  This fixes the
    DicomWeb plugin "/rendered" route performance issues.
  * DelayedDeletion plugin: Fix leaking of symbols
  * SQLite now closes and deletes WAL and SHM files on exit.  This should improve
    handling of SQLite DB over network drives.
  * Fix static compilation of boost 1.69 on Ubuntu 22.04
  * Upgraded dependencies for static builds:
  - boost 1.80.0
  - dcmtk 3.6.7  (fixes CVE-2022-2119 and CVE-2022-2120)
  - openssl 3.0.5
  * Housekeeper plugin: Fix resume of previous processing
  * Added missing MOVEPatientRootQueryRetrieveInformationModel in
    DicomControlUserConnection::SetupPresentationContexts()
  * Improved HttpClient error logging (add method + url)
  * API version upgraded to 18
  * /system is now reporting "DatabaseServerIdentifier"
  * Added an Asynchronous mode to /modalities/../move.
  * "RequestedTags" option can now include DICOM sequences.
  * New function in the SDK: "OrthancPluginGetDatabaseServerIdentifier"
  * DicomMap::ParseMainDicomTags has been deprecated -&gt; retrieve "full" tags
    and use DicomMap::FromDicomAsJson instead</changelog>
</package>
<package pkgid="056b1f342d843d51aee9abc9c872d800b12a1e0a25c1525f17cc11eb0fa0c6a9" name="orthanc-devel" arch="ppc64le">
  <version epoch="0" ver="1.11.2" rel="bp154.2.3.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1598356800">- Version 1.7.3
  * API version upgraded to 8
  * "/peers/{id}/store": New option "Compress" to compress DICOM data using gzip
  * "OrthancPeerStore" jobs now report the transmitted size in their public content
  * New config option "Worklist.LimitAnswers" for the sample modality worklist plugin
  * Add missing tag "Retrieve AE Title (0008,0054)" in C-FIND SCP responses
  * Fix DICOM SCP filters if some query tag has &gt; 256 characters (list of UIDs matching)
  * "/series/.../ordered-slices" supports spaces in Image Position/Orientation Patient tags
  * Fix possible crash in HttpClient if sending multipart body (can occur in STOW-RS)
  * Support receiving multipart messages larger than 2GB in the embedded HTTP server</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1600430400">- Version 1.7.4
  * New configuration options to enable HTTP peers identification through certificates:
  "SslVerifyPeers" and "SslTrustedClientCertificates"
  * New configuration option "SyncStorageArea" to immediately commit the files onto the disk
  (through fsync()), so as to avoid discrepencies between DB and filesystem in case of hard
  shutdown of the machine running Orthanc. This slows down adding new files into Orthanc.
  * Underscores are now allowed in peers/modalities symbolic names
  * Fix compatibility with C-MOVE SCU requests issued by Ambra
  * Fix transcoding in C-MOVE SCP, in the case where "SynchronousCMove" is "true"
  * When checking DICOM allowed methods, if there are multiple modalities with the same AET,
  differentiate them from the calling IP
  * Enable the access to raw frames in Philips ELSCINT1 proprietary compression
  * Support empty key passwords when using HTTP client certificates
  * Fix handling of "ModalitiesInStudy" (0008,0061) in C-FIND and "/tools/find"</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1602849600">- version 1.8.0
  * Serving the content of Orthanc as a WebDAV network share
  * New config options: "WebDavEnabled", "WebDavDeleteAllowed" and "WebDavUploadAllowed"</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1607428800">- Version 1.8.1
  * adaption to new systemd-macros (OBS)
  * New sample tool "OrthancImport.py" to easily import compressed archives (ZIP) into Orthanc
  * Logging categories (cf. command-line options starting with "--verbose-" and "--trace=")
  * New command-line option "--trace-dicom" to access full debug information from DCMTK
  * New config option "DicomEchoChecksFind" to automatically complement C-GET SCU with C-FIND SCU
  * API version upgraded to 9
  * "/tools/dicom-echo": Execute C-Echo SCU to a modality that is not registered in "/modalities"
  * "/tools/log-level-*": Dynamically access and/or change the verbosity of logging categories
  * "/peers/{id}/configuration": Get the configuration of one peer (cf. "/peers?expand")
  * "/modalities/{id}/configuration": Get the configuration of one modality (cf. "/modalities?expand")
  * "/tools/dicom-echo" and "/modalities/{id}/echo" now accept the field "CheckFind" in their JSON
  body to complement C-GET SCU with C-FIND SCU ("DicomEchoChecksFind" on a per-connection basis)
  * Archive/media jobs report the size of the created ZIP file in content field "ArchiveSizeMB"
  * New function in the SDK: OrthancPluginGenerateRestApiAuthorizationToken()
  * C-GET SCP: Fix responses and handling of cancel
  * Fix decoding sequence if "BuiltinDecoderTranscoderOrder" is "Before"
  * Fix keep-alive in the embedded HTTP server by setting the "Keep-Alive" HTTP header
  * Fix access to videos as a single raw frame (feature broken since Orthanc 1.6.0)
  * REST API now returns 404 error if deleting an inexistent peer or modality
  * Improved forward ABI compatibility of Orthanc Framework (notably, no inline methods anymore)
  * Upgraded dependencies for static builds (notably on Windows and LSB):
  - civetweb 1.13</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1608379200">- Version 1.8.2
  * ZIP archives containing DICOM files can be uploaded using WebDAV
  * New config option "MallocArenaMax" to control memory usage on GNU/Linux
  * Explicit error log if trying to load a 32bit (resp. 64bit) plugin into
  a 64bit (resp. 32bit) version of Orthanc
  * New configuration options contributed by Varian Medical Systems:
  - "DeidentifyLogs" to remove patient identification from the logs (C-GET, C-MOVE, C-FIND)
  - "DeidentifyLogsDicomVersion" to specify the deidentification rules for the logs
  - "OrthancExplorerEnabled" to enable/disable the Orthanc Explorer Web user interface
  - "SslMinimumProtocolVersion" to set the minimal SSL protocol version (now defaults to SSL 1.2)
  - "SslCiphersAccepted" to set the accepted ciphers over SSL (now defaults to FIPS 140-2)
  * New configuration options related to ingest transcoding:
  - "IngestTranscodingOfUncompressed" to control whether uncompressed transfer syntaxes are transcoded
  - "IngestTranscodingOfCompressed" to control whether compressed transfer syntaxes are transcoded
  * "/instances" can be used to import ZIP archives provided in the POST body
  * Allow concurrency on the OrthancPluginRegisterIncomingHttpRequestFilter() callbacks
  * Allow empty request body in "/modalities/{id}/echo"
  * If meta-header is missing, best-effort to extract "TransferSyntax" in "/instances/{id}/metadata"</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1609329600">- Workaround for boo#1180359</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1611921600">- Version 1.9.0
  * Support of DICOM TLS
  * New configuration options related to DICOM networking:
  - "DicomTlsEnabled" to enable DICOM TLS in Orthanc SCP
  - "DicomTlsCertificate" to provide the TLS certificate to be used in both Orthanc SCU and SCP
  - "DicomTlsPrivateKey" to provide the private key of the TLS certificate
  - "DicomTlsTrustedCertificates" to provide the list of TLS certificates to be trusted by Orthanc
  - "UseDicomTls" in "DicomModalities" to enable DICOM TLS in outgoing SCU on a per-modality basis
  - "MaximumPduLength" to tune the maximum PDU length (Protocol Data Unit)
  - "LocalAet" in "DicomModalities" to overwrite global "DicomAet" for SCU on a per-modality basis
  - "AcceptedTransferSyntaxes" to set the transfer syntax UIDs accepted by Orthanc C-STORE SCP
  - "H265TransferSyntaxAccepted" to enable/disable all the transfer syntaxes related to H.265
  - "DicomAlwaysAllowFind" to disable verification of the remote modality in C-FIND SCP
  - "DicomAlwaysAllowGet" to disable verification of the remote modality in C-GET SCP
  * New configuration option: "DicomScuPreferredTransferSyntax" to control transcoding in C-STORE SCU
  * New command-line option: "--openapi" to write the OpenAPI documentation of the REST API to a file
  * New metadata automatically computed at the series level: "RemoteAET"
  * The DICOM meta-header and the transfer syntax are displayed at the "Instance" level
  * API version upgraded to 10
  * "/tools/accepted-transfer-syntaxes": Get/set transfer syntaxes accepted by Orthanc C-STORE SCP
  * "/tools/unknown-sop-class-accepted": Get/set whether C-STORE SCP accepts unknown SOP class UID
  * "/modalities/{...}/query": New string argument "LocalAet"
  * "/tools/create-dicom": New flag "Force" to bypass consistency checks for the DICOM tags
  * BREAKING CHANGE: All the Lua callbacks "IsXXXTransferSyntaxAccepted()" and
  "IsUnknownSopClassAccepted()" have been removed
  * New functions in the SDK:
  - OrthancPluginCreateMemoryBuffer64()
  - OrthancPluginRegisterStorageArea2()
  - OrthancPluginCreateDicom2()
  * Refactoring and improvements to the cache of DICOM files (it can now hold many files)
  * New Prometheus metrics "orthanc_dicom_cache_count" and "orthanc_dicom_cache_size"
  * Fix upload of multiple DICOM files using one single POST call to "multipart/form-data"
  Could be the final resolution of issue #21 (DICOM files missing after uploading with Firefox)
  * Partial fix of issue #48 (Windows service not stopped properly), cf. comments 4 and 5
  * Explicitly use little-endian to encode uncompressed file size with zlib compression
  * Upgraded dependencies for static builds (notably on Windows):
  - dcmtk 3.6.6
  - jsoncpp 1.9.4</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1614254400">- version 1.9.1
  * The "dicom-as-json" attachments are not explicitly stored anymore to improve performance
  * If the storage area doesn't support range reading, or if "StorageCompression"
  is enabled, a new type of attachment "dicom-until-pixel-data" is generated
  * New metadata automatically computed at the instance level: "PixelDataOffset"
  * New configuration option related to networking:
  - "Timeout" in "DicomModalities" to set DICOM SCU timeout on a per-modality basis
  - "Timeout" in "OrthancPeers" to set HTTP client timeout on a per-peer basis
  * API version upgraded to 11
  * BREAKING CHANGES:
  - External applications should not call "/instances/.../attachments/dicom-as-json" anymore,
    and should use "/instances/.../tags" instead
  - "/instances/.../tags" route does not report the tags after "Pixel Data" (7fe0,0010) anymore
  * "/peers/{id}/store-straight": Synchronously send the DICOM instance in POST body to the peer
  * New arguments in the REST API:
  - "Timeout" in "/modalities/.../query"
  - "Timeout" in "/modalities/.../storage-commitment"
  - "Timeout" in "/queries/.../answers/.../query-{studies|series|instances}"
  * New value in enumeration: OrthancPluginDicomToJsonFlags_StopAfterPixelData
  * New value in enumeration: OrthancPluginDicomToJsonFlags_SkipGroupLengths
  * Improved precision of floating-point numbers in DICOM-as-JSON and DICOM summary
  * Optimization in C-STORE SCP by avoiding an unnecessary DICOM parsing
  * Fix build on big-endian architectures
  * Handle public tags with "UN" value representation and containing a string (cf. DICOM CP 246)
  * The numbering of sequences in Orthanc Explorer now uses the DICOM convention (starts at 1)
  * Possibility to generate a static library containing the Orthanc Framework</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1620561600">- Version 1.9.3
  * New configuration option: "DicomTlsRemoteCertificateRequired" to allow secure DICOM TLS
  connections without certificate
  * "ETag" headers for metadata and attachments now allow strong comparison (MD5 is included)
  * New CMake option: "ORTHANC_LUA_VERSION" to use a specific version of system-wide Lua
  * Fix the lifetime of temporary files associated with jobs that create ZIP archive/media:
  - In synchronous mode, their number could grow up to "JobsHistorySize" in Orthanc &lt;= 1.9.2
  - In asynchronous mode, the temporary files are removed as soon as their job gets canceled
  * Fix regression in the handling of "DicomCheckModalityHost" configuration option
  introduced by changeset 4182 in Orthanc 1.7.4
  * Reduced memory consumption of "OrthancPluginHttpClient()", "OrthancPluginHttpClient2()" and
  "OrthancPluginCallPeerApi()" on POST/PUT if chunked transfer is disabled
  * Fix issue #195 (No need for BulkDataURI when Data Element is empty)
- from version 1.9.2:
  * New configuration options related to multiple readers/writers:
  - "DatabaseServerIdentifier" identifies the server in the DB among a pool of Orthanc servers
  - "CheckRevisions" to protect against concurrent modifications of metadata and attachments
  * API version upgraded to 12
  * "/system" reports the value of the "CheckRevisions" global option
  * "/.../{id}/metadata/{name}" and "/.../{id}/attachments/{name}/..." URIs handle the
  HTTP headers "If-Match", "If-None-Match" and "ETag" to cope with revisions
  * New function in the SDK: OrthancPluginCallRestApi()
  * Full refactoring of the database plugin SDK to handle multiple readers/writers,
  which notably implies the handling of retries in the case of collisions
  * Use the local timezone for query/retrieve in the Orthanc Explorer interface (was UTC before)
  * Fix "OrthancServer/Resources/Samples/Python/Replicate.py" for Python 3.x
  * Fix issue #83 (ServerIndex shall implement retries for DB temporary errors)
  * Upgraded dependencies for static builds (notably on Windows and LSB):
  - civetweb 1.14
  - openssl 1.1.1k</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1624536000">- version 1.9.4
  * Orthanc now anonymizes according to Basic Profile of PS 3.15-2021b Table E.1-1
  * New configuration options:
  - "ExternalDictionaries" to load external DICOM dictionaries (useful for DICONDE)
  - "SynchronousZipStream" to disable streaming of ZIP
  * Orthanc Explorer supports the DICONDE dictionary
  * API version upgraded to 13
  * New routes to handle groups of multiple, unrelated DICOM resources at once:
  - "/tools/bulk-anonymize" to anonymize a set of resources
  - "/tools/bulk-content" to get the content of a set of resources
  - "/tools/bulk-delete" to delete a set of resources
  - "/tools/bulk-modify" to modify a set of resources
  * ZIP archive/media generated in synchronous mode are now streamed by default
  * "Replace" tags in "/modify" and "/anonymize" now supports value representation AT
  * "/jobs/..." has new field "ErrorDetails" to help identify the cause of an error
  * "Replace", "Keep" and "Remove" in "/modify" and "/anonymize" accept paths to subsequences
  using the syntax of the dcmodify command-line tool (wildcards are supported as well)
  * Added "short", "simplify" and/or "full" options to control the format of DICOM tags in:
  - GET /patients, GET /studies, GET /series, GET /instances (together with "&amp;expand")
  - GET /patients/{id}, GET /studies/{id}, GET /series/{id}, GET /instances/{id}
  - GET /patients/{id}/studies, GET /patients/{id}/series, GET /patients/{id}/instances
  - GET /studies/{id}/patient, GET /studies/{id}/series, GET /studies/{id}/instances
  - GET /series/{id}/patient, GET /series/{id}/study, GET /series/{id}/instances
  - GET /instances/{id}/patient, GET /instances/{id}/study, GET /instances/{id}/series
  - GET /patients/{id}/instances-tags, GET /patients/{id}/shared-tags
  - GET /studies/{id}/instances-tags, GET /series/{id}/shared-tags
  - GET /series/{id}/instances-tags, GET /studies/{id}/shared-tags
  - GET /patients/{id}/module, GET /patients/{id}/patient-module
  - GET /series/{id}/module, GET /studies/{id}/module, GET /instances/{id}/module
  - POST /tools/find
  * "/studies/{id}/split" accepts "Instances" parameter to split instances instead of series
  * "/studies/{id}/merge" accepts instances inside its "Resources" parameter
  * Full support of hierarchical relationships in tags whose VR is UI during anonymization
  * C-MOVE SCP: added possible DIMSE status "Sub-operations Complete - One or more Failures"
  * Fix issue #146 (Update Anonyization to 2019c) - was actually updated to 2021b
  * Upgraded dependencies for static builds (notably on Windows):
  - curl 7.77.0</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1626004800">- version 1.9.5
  * Anonymization is applied recursively to nested tags
  * API version upgraded to 14
  * Added "Short", "Simplify" and/or "Full" options to control the format of DICOM tags in:
  - POST /modalities/{id}/find-worklist
  - POST /queries/{id}/answers/{index}/retrieve
  - POST /queries/{id}/retrieve
  * Fix broken "Do lookup" button in Orthanc Explorer
  * Error code and description of jobs are now saved into the Orthanc database</changelog>
  <changelog author="Steve Kowalik &lt;steven.kowalik@suse.com&gt;" date="1626696000">- Remove executable bits from Python scripts when creating the source
  tree for the -source package to stop it requiring /usr/bin/python</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1626955200">- version 1.9.6
  * In lookup and query/retrieve, possibility to provide a specific study date
  * Clicking on "Send to remote modality" displays the job information to monitor progress
  * Fix orphaned attachments if bad revision number is provided</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1630497600">- Version 1.9.7
  * New configuration option "DicomAlwaysAllowMove" to disable verification of
  the remote modality in C-MOVE SCP
  * API version upgraded to 15
  * Added "Level" option to POST /tools/bulk-modify
  * Added missing OpenAPI documentation of "KeepSource" in ".../modify" and ".../anonymize"
  * Added file CITATION.cff
  * Linux Standard Base (LSB) builds of Orthanc can load non-LSB builds of plugins
  * Fix upload of ZIP archives containing a DICOMDIR file
  * Fix computation of the estimated time of arrival in jobs
  * Support detection of windowing and rescale in Philips multiframe images</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1632657600">- Test for SharedLibrary.Basic disabled (fails with new glibc)</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634126400">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * orthanc.service</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648209600">- version 1.10.1
  * for detailed changelog see NEWS</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1651838400">- switched source urls to https</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1652184000">- version 1.11.0
  * new API version 1.7
  * new configuration parameter
  * for detailed changelog see NEWS</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664280000">- version 1.11.2
  * Added support for RGBA64 images in tools/create-dicom and /preview
  * New configuration "MaximumStorageMode" to choose between recyling of
    old patients (default behavior) and rejection of new incoming data when
    the MaximumStorageSize has been reached.
  * New sample plugin: "DelayedDeletion" that will delete files from disk
    asynchronously to speed up deletion of large studies.
  * Lua: new "SetHttpTimeout" function
  * Lua: new "OnHeartBeat" callback called at regular interval provided that
    you have configured "LuaHeartBeatPeriod" &gt; 0.
  * "ExtraMainDicomTags" configuration now accepts Dicom Sequences.  Sequences are
    stored in a dedicated new metadata "MainDicomSequences".  This should improve
    DicomWeb QIDO-RS and avoid warnings like "Accessing Dicom tags from storage when
    accessing series : 0040,0275".
    Main dicom sequences can now be returned in "MainDicomTags" and in "RequestedTags".
  * Fix the "Never" option of the "StorageAccessOnFind" that was sill accessing
    files (bug introduced in 1.11.0).
  * Fix the Storage Cache for compressed files (bug introduced in 1.11.1).
  * Fix the storage cache that was not used by the Plugin SDK.  This fixes the
    DicomWeb plugin "/rendered" route performance issues.
  * DelayedDeletion plugin: Fix leaking of symbols
  * SQLite now closes and deletes WAL and SHM files on exit.  This should improve
    handling of SQLite DB over network drives.
  * Fix static compilation of boost 1.69 on Ubuntu 22.04
  * Upgraded dependencies for static builds:
  - boost 1.80.0
  - dcmtk 3.6.7  (fixes CVE-2022-2119 and CVE-2022-2120)
  - openssl 3.0.5
  * Housekeeper plugin: Fix resume of previous processing
  * Added missing MOVEPatientRootQueryRetrieveInformationModel in
    DicomControlUserConnection::SetupPresentationContexts()
  * Improved HttpClient error logging (add method + url)
  * API version upgraded to 18
  * /system is now reporting "DatabaseServerIdentifier"
  * Added an Asynchronous mode to /modalities/../move.
  * "RequestedTags" option can now include DICOM sequences.
  * New function in the SDK: "OrthancPluginGetDatabaseServerIdentifier"
  * DicomMap::ParseMainDicomTags has been deprecated -&gt; retrieve "full" tags
    and use DicomMap::FromDicomAsJson instead</changelog>
</package>
<package pkgid="62bf6f9b38829961cf1004dc7dda5b9156d13444c0f33f62fc40d4723f9196aa" name="orthanc-devel" arch="x86_64">
  <version epoch="0" ver="1.11.2" rel="bp154.2.3.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1598356800">- Version 1.7.3
  * API version upgraded to 8
  * "/peers/{id}/store": New option "Compress" to compress DICOM data using gzip
  * "OrthancPeerStore" jobs now report the transmitted size in their public content
  * New config option "Worklist.LimitAnswers" for the sample modality worklist plugin
  * Add missing tag "Retrieve AE Title (0008,0054)" in C-FIND SCP responses
  * Fix DICOM SCP filters if some query tag has &gt; 256 characters (list of UIDs matching)
  * "/series/.../ordered-slices" supports spaces in Image Position/Orientation Patient tags
  * Fix possible crash in HttpClient if sending multipart body (can occur in STOW-RS)
  * Support receiving multipart messages larger than 2GB in the embedded HTTP server</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1600430400">- Version 1.7.4
  * New configuration options to enable HTTP peers identification through certificates:
  "SslVerifyPeers" and "SslTrustedClientCertificates"
  * New configuration option "SyncStorageArea" to immediately commit the files onto the disk
  (through fsync()), so as to avoid discrepencies between DB and filesystem in case of hard
  shutdown of the machine running Orthanc. This slows down adding new files into Orthanc.
  * Underscores are now allowed in peers/modalities symbolic names
  * Fix compatibility with C-MOVE SCU requests issued by Ambra
  * Fix transcoding in C-MOVE SCP, in the case where "SynchronousCMove" is "true"
  * When checking DICOM allowed methods, if there are multiple modalities with the same AET,
  differentiate them from the calling IP
  * Enable the access to raw frames in Philips ELSCINT1 proprietary compression
  * Support empty key passwords when using HTTP client certificates
  * Fix handling of "ModalitiesInStudy" (0008,0061) in C-FIND and "/tools/find"</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1602849600">- version 1.8.0
  * Serving the content of Orthanc as a WebDAV network share
  * New config options: "WebDavEnabled", "WebDavDeleteAllowed" and "WebDavUploadAllowed"</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1607428800">- Version 1.8.1
  * adaption to new systemd-macros (OBS)
  * New sample tool "OrthancImport.py" to easily import compressed archives (ZIP) into Orthanc
  * Logging categories (cf. command-line options starting with "--verbose-" and "--trace=")
  * New command-line option "--trace-dicom" to access full debug information from DCMTK
  * New config option "DicomEchoChecksFind" to automatically complement C-GET SCU with C-FIND SCU
  * API version upgraded to 9
  * "/tools/dicom-echo": Execute C-Echo SCU to a modality that is not registered in "/modalities"
  * "/tools/log-level-*": Dynamically access and/or change the verbosity of logging categories
  * "/peers/{id}/configuration": Get the configuration of one peer (cf. "/peers?expand")
  * "/modalities/{id}/configuration": Get the configuration of one modality (cf. "/modalities?expand")
  * "/tools/dicom-echo" and "/modalities/{id}/echo" now accept the field "CheckFind" in their JSON
  body to complement C-GET SCU with C-FIND SCU ("DicomEchoChecksFind" on a per-connection basis)
  * Archive/media jobs report the size of the created ZIP file in content field "ArchiveSizeMB"
  * New function in the SDK: OrthancPluginGenerateRestApiAuthorizationToken()
  * C-GET SCP: Fix responses and handling of cancel
  * Fix decoding sequence if "BuiltinDecoderTranscoderOrder" is "Before"
  * Fix keep-alive in the embedded HTTP server by setting the "Keep-Alive" HTTP header
  * Fix access to videos as a single raw frame (feature broken since Orthanc 1.6.0)
  * REST API now returns 404 error if deleting an inexistent peer or modality
  * Improved forward ABI compatibility of Orthanc Framework (notably, no inline methods anymore)
  * Upgraded dependencies for static builds (notably on Windows and LSB):
  - civetweb 1.13</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1608379200">- Version 1.8.2
  * ZIP archives containing DICOM files can be uploaded using WebDAV
  * New config option "MallocArenaMax" to control memory usage on GNU/Linux
  * Explicit error log if trying to load a 32bit (resp. 64bit) plugin into
  a 64bit (resp. 32bit) version of Orthanc
  * New configuration options contributed by Varian Medical Systems:
  - "DeidentifyLogs" to remove patient identification from the logs (C-GET, C-MOVE, C-FIND)
  - "DeidentifyLogsDicomVersion" to specify the deidentification rules for the logs
  - "OrthancExplorerEnabled" to enable/disable the Orthanc Explorer Web user interface
  - "SslMinimumProtocolVersion" to set the minimal SSL protocol version (now defaults to SSL 1.2)
  - "SslCiphersAccepted" to set the accepted ciphers over SSL (now defaults to FIPS 140-2)
  * New configuration options related to ingest transcoding:
  - "IngestTranscodingOfUncompressed" to control whether uncompressed transfer syntaxes are transcoded
  - "IngestTranscodingOfCompressed" to control whether compressed transfer syntaxes are transcoded
  * "/instances" can be used to import ZIP archives provided in the POST body
  * Allow concurrency on the OrthancPluginRegisterIncomingHttpRequestFilter() callbacks
  * Allow empty request body in "/modalities/{id}/echo"
  * If meta-header is missing, best-effort to extract "TransferSyntax" in "/instances/{id}/metadata"</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1609329600">- Workaround for boo#1180359</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1611921600">- Version 1.9.0
  * Support of DICOM TLS
  * New configuration options related to DICOM networking:
  - "DicomTlsEnabled" to enable DICOM TLS in Orthanc SCP
  - "DicomTlsCertificate" to provide the TLS certificate to be used in both Orthanc SCU and SCP
  - "DicomTlsPrivateKey" to provide the private key of the TLS certificate
  - "DicomTlsTrustedCertificates" to provide the list of TLS certificates to be trusted by Orthanc
  - "UseDicomTls" in "DicomModalities" to enable DICOM TLS in outgoing SCU on a per-modality basis
  - "MaximumPduLength" to tune the maximum PDU length (Protocol Data Unit)
  - "LocalAet" in "DicomModalities" to overwrite global "DicomAet" for SCU on a per-modality basis
  - "AcceptedTransferSyntaxes" to set the transfer syntax UIDs accepted by Orthanc C-STORE SCP
  - "H265TransferSyntaxAccepted" to enable/disable all the transfer syntaxes related to H.265
  - "DicomAlwaysAllowFind" to disable verification of the remote modality in C-FIND SCP
  - "DicomAlwaysAllowGet" to disable verification of the remote modality in C-GET SCP
  * New configuration option: "DicomScuPreferredTransferSyntax" to control transcoding in C-STORE SCU
  * New command-line option: "--openapi" to write the OpenAPI documentation of the REST API to a file
  * New metadata automatically computed at the series level: "RemoteAET"
  * The DICOM meta-header and the transfer syntax are displayed at the "Instance" level
  * API version upgraded to 10
  * "/tools/accepted-transfer-syntaxes": Get/set transfer syntaxes accepted by Orthanc C-STORE SCP
  * "/tools/unknown-sop-class-accepted": Get/set whether C-STORE SCP accepts unknown SOP class UID
  * "/modalities/{...}/query": New string argument "LocalAet"
  * "/tools/create-dicom": New flag "Force" to bypass consistency checks for the DICOM tags
  * BREAKING CHANGE: All the Lua callbacks "IsXXXTransferSyntaxAccepted()" and
  "IsUnknownSopClassAccepted()" have been removed
  * New functions in the SDK:
  - OrthancPluginCreateMemoryBuffer64()
  - OrthancPluginRegisterStorageArea2()
  - OrthancPluginCreateDicom2()
  * Refactoring and improvements to the cache of DICOM files (it can now hold many files)
  * New Prometheus metrics "orthanc_dicom_cache_count" and "orthanc_dicom_cache_size"
  * Fix upload of multiple DICOM files using one single POST call to "multipart/form-data"
  Could be the final resolution of issue #21 (DICOM files missing after uploading with Firefox)
  * Partial fix of issue #48 (Windows service not stopped properly), cf. comments 4 and 5
  * Explicitly use little-endian to encode uncompressed file size with zlib compression
  * Upgraded dependencies for static builds (notably on Windows):
  - dcmtk 3.6.6
  - jsoncpp 1.9.4</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1614254400">- version 1.9.1
  * The "dicom-as-json" attachments are not explicitly stored anymore to improve performance
  * If the storage area doesn't support range reading, or if "StorageCompression"
  is enabled, a new type of attachment "dicom-until-pixel-data" is generated
  * New metadata automatically computed at the instance level: "PixelDataOffset"
  * New configuration option related to networking:
  - "Timeout" in "DicomModalities" to set DICOM SCU timeout on a per-modality basis
  - "Timeout" in "OrthancPeers" to set HTTP client timeout on a per-peer basis
  * API version upgraded to 11
  * BREAKING CHANGES:
  - External applications should not call "/instances/.../attachments/dicom-as-json" anymore,
    and should use "/instances/.../tags" instead
  - "/instances/.../tags" route does not report the tags after "Pixel Data" (7fe0,0010) anymore
  * "/peers/{id}/store-straight": Synchronously send the DICOM instance in POST body to the peer
  * New arguments in the REST API:
  - "Timeout" in "/modalities/.../query"
  - "Timeout" in "/modalities/.../storage-commitment"
  - "Timeout" in "/queries/.../answers/.../query-{studies|series|instances}"
  * New value in enumeration: OrthancPluginDicomToJsonFlags_StopAfterPixelData
  * New value in enumeration: OrthancPluginDicomToJsonFlags_SkipGroupLengths
  * Improved precision of floating-point numbers in DICOM-as-JSON and DICOM summary
  * Optimization in C-STORE SCP by avoiding an unnecessary DICOM parsing
  * Fix build on big-endian architectures
  * Handle public tags with "UN" value representation and containing a string (cf. DICOM CP 246)
  * The numbering of sequences in Orthanc Explorer now uses the DICOM convention (starts at 1)
  * Possibility to generate a static library containing the Orthanc Framework</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1620561600">- Version 1.9.3
  * New configuration option: "DicomTlsRemoteCertificateRequired" to allow secure DICOM TLS
  connections without certificate
  * "ETag" headers for metadata and attachments now allow strong comparison (MD5 is included)
  * New CMake option: "ORTHANC_LUA_VERSION" to use a specific version of system-wide Lua
  * Fix the lifetime of temporary files associated with jobs that create ZIP archive/media:
  - In synchronous mode, their number could grow up to "JobsHistorySize" in Orthanc &lt;= 1.9.2
  - In asynchronous mode, the temporary files are removed as soon as their job gets canceled
  * Fix regression in the handling of "DicomCheckModalityHost" configuration option
  introduced by changeset 4182 in Orthanc 1.7.4
  * Reduced memory consumption of "OrthancPluginHttpClient()", "OrthancPluginHttpClient2()" and
  "OrthancPluginCallPeerApi()" on POST/PUT if chunked transfer is disabled
  * Fix issue #195 (No need for BulkDataURI when Data Element is empty)
- from version 1.9.2:
  * New configuration options related to multiple readers/writers:
  - "DatabaseServerIdentifier" identifies the server in the DB among a pool of Orthanc servers
  - "CheckRevisions" to protect against concurrent modifications of metadata and attachments
  * API version upgraded to 12
  * "/system" reports the value of the "CheckRevisions" global option
  * "/.../{id}/metadata/{name}" and "/.../{id}/attachments/{name}/..." URIs handle the
  HTTP headers "If-Match", "If-None-Match" and "ETag" to cope with revisions
  * New function in the SDK: OrthancPluginCallRestApi()
  * Full refactoring of the database plugin SDK to handle multiple readers/writers,
  which notably implies the handling of retries in the case of collisions
  * Use the local timezone for query/retrieve in the Orthanc Explorer interface (was UTC before)
  * Fix "OrthancServer/Resources/Samples/Python/Replicate.py" for Python 3.x
  * Fix issue #83 (ServerIndex shall implement retries for DB temporary errors)
  * Upgraded dependencies for static builds (notably on Windows and LSB):
  - civetweb 1.14
  - openssl 1.1.1k</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1624536000">- version 1.9.4
  * Orthanc now anonymizes according to Basic Profile of PS 3.15-2021b Table E.1-1
  * New configuration options:
  - "ExternalDictionaries" to load external DICOM dictionaries (useful for DICONDE)
  - "SynchronousZipStream" to disable streaming of ZIP
  * Orthanc Explorer supports the DICONDE dictionary
  * API version upgraded to 13
  * New routes to handle groups of multiple, unrelated DICOM resources at once:
  - "/tools/bulk-anonymize" to anonymize a set of resources
  - "/tools/bulk-content" to get the content of a set of resources
  - "/tools/bulk-delete" to delete a set of resources
  - "/tools/bulk-modify" to modify a set of resources
  * ZIP archive/media generated in synchronous mode are now streamed by default
  * "Replace" tags in "/modify" and "/anonymize" now supports value representation AT
  * "/jobs/..." has new field "ErrorDetails" to help identify the cause of an error
  * "Replace", "Keep" and "Remove" in "/modify" and "/anonymize" accept paths to subsequences
  using the syntax of the dcmodify command-line tool (wildcards are supported as well)
  * Added "short", "simplify" and/or "full" options to control the format of DICOM tags in:
  - GET /patients, GET /studies, GET /series, GET /instances (together with "&amp;expand")
  - GET /patients/{id}, GET /studies/{id}, GET /series/{id}, GET /instances/{id}
  - GET /patients/{id}/studies, GET /patients/{id}/series, GET /patients/{id}/instances
  - GET /studies/{id}/patient, GET /studies/{id}/series, GET /studies/{id}/instances
  - GET /series/{id}/patient, GET /series/{id}/study, GET /series/{id}/instances
  - GET /instances/{id}/patient, GET /instances/{id}/study, GET /instances/{id}/series
  - GET /patients/{id}/instances-tags, GET /patients/{id}/shared-tags
  - GET /studies/{id}/instances-tags, GET /series/{id}/shared-tags
  - GET /series/{id}/instances-tags, GET /studies/{id}/shared-tags
  - GET /patients/{id}/module, GET /patients/{id}/patient-module
  - GET /series/{id}/module, GET /studies/{id}/module, GET /instances/{id}/module
  - POST /tools/find
  * "/studies/{id}/split" accepts "Instances" parameter to split instances instead of series
  * "/studies/{id}/merge" accepts instances inside its "Resources" parameter
  * Full support of hierarchical relationships in tags whose VR is UI during anonymization
  * C-MOVE SCP: added possible DIMSE status "Sub-operations Complete - One or more Failures"
  * Fix issue #146 (Update Anonyization to 2019c) - was actually updated to 2021b
  * Upgraded dependencies for static builds (notably on Windows):
  - curl 7.77.0</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1626004800">- version 1.9.5
  * Anonymization is applied recursively to nested tags
  * API version upgraded to 14
  * Added "Short", "Simplify" and/or "Full" options to control the format of DICOM tags in:
  - POST /modalities/{id}/find-worklist
  - POST /queries/{id}/answers/{index}/retrieve
  - POST /queries/{id}/retrieve
  * Fix broken "Do lookup" button in Orthanc Explorer
  * Error code and description of jobs are now saved into the Orthanc database</changelog>
  <changelog author="Steve Kowalik &lt;steven.kowalik@suse.com&gt;" date="1626696000">- Remove executable bits from Python scripts when creating the source
  tree for the -source package to stop it requiring /usr/bin/python</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1626955200">- version 1.9.6
  * In lookup and query/retrieve, possibility to provide a specific study date
  * Clicking on "Send to remote modality" displays the job information to monitor progress
  * Fix orphaned attachments if bad revision number is provided</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1630497600">- Version 1.9.7
  * New configuration option "DicomAlwaysAllowMove" to disable verification of
  the remote modality in C-MOVE SCP
  * API version upgraded to 15
  * Added "Level" option to POST /tools/bulk-modify
  * Added missing OpenAPI documentation of "KeepSource" in ".../modify" and ".../anonymize"
  * Added file CITATION.cff
  * Linux Standard Base (LSB) builds of Orthanc can load non-LSB builds of plugins
  * Fix upload of ZIP archives containing a DICOMDIR file
  * Fix computation of the estimated time of arrival in jobs
  * Support detection of windowing and rescale in Philips multiframe images</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1632657600">- Test for SharedLibrary.Basic disabled (fails with new glibc)</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634126400">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * orthanc.service</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648209600">- version 1.10.1
  * for detailed changelog see NEWS</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1651838400">- switched source urls to https</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1652184000">- version 1.11.0
  * new API version 1.7
  * new configuration parameter
  * for detailed changelog see NEWS</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664280000">- version 1.11.2
  * Added support for RGBA64 images in tools/create-dicom and /preview
  * New configuration "MaximumStorageMode" to choose between recyling of
    old patients (default behavior) and rejection of new incoming data when
    the MaximumStorageSize has been reached.
  * New sample plugin: "DelayedDeletion" that will delete files from disk
    asynchronously to speed up deletion of large studies.
  * Lua: new "SetHttpTimeout" function
  * Lua: new "OnHeartBeat" callback called at regular interval provided that
    you have configured "LuaHeartBeatPeriod" &gt; 0.
  * "ExtraMainDicomTags" configuration now accepts Dicom Sequences.  Sequences are
    stored in a dedicated new metadata "MainDicomSequences".  This should improve
    DicomWeb QIDO-RS and avoid warnings like "Accessing Dicom tags from storage when
    accessing series : 0040,0275".
    Main dicom sequences can now be returned in "MainDicomTags" and in "RequestedTags".
  * Fix the "Never" option of the "StorageAccessOnFind" that was sill accessing
    files (bug introduced in 1.11.0).
  * Fix the Storage Cache for compressed files (bug introduced in 1.11.1).
  * Fix the storage cache that was not used by the Plugin SDK.  This fixes the
    DicomWeb plugin "/rendered" route performance issues.
  * DelayedDeletion plugin: Fix leaking of symbols
  * SQLite now closes and deletes WAL and SHM files on exit.  This should improve
    handling of SQLite DB over network drives.
  * Fix static compilation of boost 1.69 on Ubuntu 22.04
  * Upgraded dependencies for static builds:
  - boost 1.80.0
  - dcmtk 3.6.7  (fixes CVE-2022-2119 and CVE-2022-2120)
  - openssl 3.0.5
  * Housekeeper plugin: Fix resume of previous processing
  * Added missing MOVEPatientRootQueryRetrieveInformationModel in
    DicomControlUserConnection::SetupPresentationContexts()
  * Improved HttpClient error logging (add method + url)
  * API version upgraded to 18
  * /system is now reporting "DatabaseServerIdentifier"
  * Added an Asynchronous mode to /modalities/../move.
  * "RequestedTags" option can now include DICOM sequences.
  * New function in the SDK: "OrthancPluginGetDatabaseServerIdentifier"
  * DicomMap::ParseMainDicomTags has been deprecated -&gt; retrieve "full" tags
    and use DicomMap::FromDicomAsJson instead</changelog>
</package>
<package pkgid="c3a6c9abb352b5e9b1ed013f53271b0a209a22665ea1a6f3d61ab57b5fd9fb0e" name="orthanc-dicomweb" arch="aarch64">
  <version epoch="0" ver="1.10" rel="bp154.2.3.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1565265600">- Version 1.0
  initial build on OBS</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1583409600">- Version 1.1
  * Support of "window", "viewport" and "quality" parameters in "Retrieve Rendered Transaction"
  * Support of "/studies/.../rendered" and "/studies/.../series/.../rendered"
  * QIDO-RS: Allow to query against a list of multiple values separated by commas
  * WADO-RS "Retrieve Metadata": Configuration options "StudiesMetadata"
  and "SeriesMetadata", whose value can be "Full" (read all DICOM
  instances from the storage area), "MainDicomTags" (only report the
  main DICOM tags from the Orthanc database), or "Extrapolate" (main
  DICOM tags + user-specified tags extrapolated from a few random instances)
  * QIDO-RS: Optimization for large studies/series
  * QIDO-RS: Fix returned attributes if Study/Series Instance UIDs are not filtered
  * Fix handling of the "Forwarded" HTTP header
  * Fix support for client certificate authentication
  * Accept multiple MIME types in Accept header for WADO-RS "Retrieve Metadata"
  https://groups.google.com/d/msg/orthanc-users/P3B6J9abZpE/syn5dnW2AwAJ
  * Added explicit "Accept" header to avoid uncompressing DICOM files by Google cloud,
  can be turned off by setting "HasWadoRsUniversalTransferSyntax" to "false" (for
  instance if contacting a remote Orthanc plugin with DICOMweb version &lt;= 1.0)
  https://groups.google.com/d/msg/orthanc-users/w1Ekrsc6-U8/T2a_DoQ5CwAJ
  * Fix issue #162 ("DICOMweb metadata resource reads all instances")
  * Fix issue #164 ("JPEG YBR_422 generates a 500 in the DicomWeb plugin")
  * Upgrade to GDCM 3.0.4 in static builds</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1590580800">- version 1.2
  * requires orthanc 1.7
  * Removed dependency on GDCM
  * "QidoCaseSensitive" defaults to "CaseSensitivePN" of Orthanc configuration (instead of "true")</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1603368000">- version 1.3
  * Support transcoding in WADO-RS RetrieveStudy, RetrieveSeries and RetrieveInstance
  * Support of dynamic linking against the system-wide Orthanc framework library
  * Support rendering of images whose pixel format is uint8_t
  * Fix ".../rendered" on MONOCHROME1 images
  * Fix default windowing in rendered frames using WADO-URI and WADO-RS
  * More verbose logs to debug chunked transfers</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1607601600">- patches_logging.patch added to fix issue with orthanc 1.8.1</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1608292800">- Version 1.4
  * "Extrapolate" mode doesn't fail if no consensus is found in WADO-RS Retrieve Metadata.
  This is necessary for proper behavior of the Stone Web viewer on very small series.
  * Fix issue #190 (STOW-RS fails is multipart boundary is surrounded by quotes in headers)
  * patches_logging.patch removed (included in source)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1611748800">- Version 1.5
  * Possibility to store the definition of DICOMweb servers into the Orthanc database
  * New configuration option "DicomWeb.ServersInDatabase"
  * Fix compliance with DICOM &gt;= 2016c: If no "transfer-syntax" is provided in WADO-RS
  Retrieve Instance/Series/Study, DICOM shall be transcoded to Little Endian Explicit</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1620561600">- Version 1.6
  * New field "Timeout" in "DicomWeb.Servers" to specify HTTP timeout on a per-server basis
  * Reduced memory consumption in STOW-RS server thanks to an optimization of
  Orthanc::MultipartStreamReader in Orthanc framework 1.9.3
  * Fix issue #194 (Upgrade media types to DICOM 2021a, cf. table 8.7.3-5)
  * Fix issue #196 (STOW-RS: Should return 200 only when successfully stored all instances)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1630497600">- Version 1.7
  * Detection of windowing and rescale in ".../rendered" for Philips multiframe images</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1652184000">- Version 1.8
  * Show an error message when trying to send studies &gt; 4GB via STOW-RS
  * Optimized QIDO-RS to build its responses from DB if tags are saved in "ExtraMainDicomTags".
  * New configuration "PublicRoot"</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664280000">- version 1.10
  * bugfix release, see 'NEWS' for details</changelog>
</package>
<package pkgid="becb30c4b781f44542ec0c5ea39ed23f7823ddced57ee6732f306fa894474ebc" name="orthanc-dicomweb" arch="ppc64le">
  <version epoch="0" ver="1.10" rel="bp154.2.3.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1565265600">- Version 1.0
  initial build on OBS</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1583409600">- Version 1.1
  * Support of "window", "viewport" and "quality" parameters in "Retrieve Rendered Transaction"
  * Support of "/studies/.../rendered" and "/studies/.../series/.../rendered"
  * QIDO-RS: Allow to query against a list of multiple values separated by commas
  * WADO-RS "Retrieve Metadata": Configuration options "StudiesMetadata"
  and "SeriesMetadata", whose value can be "Full" (read all DICOM
  instances from the storage area), "MainDicomTags" (only report the
  main DICOM tags from the Orthanc database), or "Extrapolate" (main
  DICOM tags + user-specified tags extrapolated from a few random instances)
  * QIDO-RS: Optimization for large studies/series
  * QIDO-RS: Fix returned attributes if Study/Series Instance UIDs are not filtered
  * Fix handling of the "Forwarded" HTTP header
  * Fix support for client certificate authentication
  * Accept multiple MIME types in Accept header for WADO-RS "Retrieve Metadata"
  https://groups.google.com/d/msg/orthanc-users/P3B6J9abZpE/syn5dnW2AwAJ
  * Added explicit "Accept" header to avoid uncompressing DICOM files by Google cloud,
  can be turned off by setting "HasWadoRsUniversalTransferSyntax" to "false" (for
  instance if contacting a remote Orthanc plugin with DICOMweb version &lt;= 1.0)
  https://groups.google.com/d/msg/orthanc-users/w1Ekrsc6-U8/T2a_DoQ5CwAJ
  * Fix issue #162 ("DICOMweb metadata resource reads all instances")
  * Fix issue #164 ("JPEG YBR_422 generates a 500 in the DicomWeb plugin")
  * Upgrade to GDCM 3.0.4 in static builds</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1590580800">- version 1.2
  * requires orthanc 1.7
  * Removed dependency on GDCM
  * "QidoCaseSensitive" defaults to "CaseSensitivePN" of Orthanc configuration (instead of "true")</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1603368000">- version 1.3
  * Support transcoding in WADO-RS RetrieveStudy, RetrieveSeries and RetrieveInstance
  * Support of dynamic linking against the system-wide Orthanc framework library
  * Support rendering of images whose pixel format is uint8_t
  * Fix ".../rendered" on MONOCHROME1 images
  * Fix default windowing in rendered frames using WADO-URI and WADO-RS
  * More verbose logs to debug chunked transfers</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1607601600">- patches_logging.patch added to fix issue with orthanc 1.8.1</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1608292800">- Version 1.4
  * "Extrapolate" mode doesn't fail if no consensus is found in WADO-RS Retrieve Metadata.
  This is necessary for proper behavior of the Stone Web viewer on very small series.
  * Fix issue #190 (STOW-RS fails is multipart boundary is surrounded by quotes in headers)
  * patches_logging.patch removed (included in source)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1611748800">- Version 1.5
  * Possibility to store the definition of DICOMweb servers into the Orthanc database
  * New configuration option "DicomWeb.ServersInDatabase"
  * Fix compliance with DICOM &gt;= 2016c: If no "transfer-syntax" is provided in WADO-RS
  Retrieve Instance/Series/Study, DICOM shall be transcoded to Little Endian Explicit</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1620561600">- Version 1.6
  * New field "Timeout" in "DicomWeb.Servers" to specify HTTP timeout on a per-server basis
  * Reduced memory consumption in STOW-RS server thanks to an optimization of
  Orthanc::MultipartStreamReader in Orthanc framework 1.9.3
  * Fix issue #194 (Upgrade media types to DICOM 2021a, cf. table 8.7.3-5)
  * Fix issue #196 (STOW-RS: Should return 200 only when successfully stored all instances)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1630497600">- Version 1.7
  * Detection of windowing and rescale in ".../rendered" for Philips multiframe images</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1652184000">- Version 1.8
  * Show an error message when trying to send studies &gt; 4GB via STOW-RS
  * Optimized QIDO-RS to build its responses from DB if tags are saved in "ExtraMainDicomTags".
  * New configuration "PublicRoot"</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664280000">- version 1.10
  * bugfix release, see 'NEWS' for details</changelog>
</package>
<package pkgid="b8b8905f2ea911824313fca7e31f1b11e9b90b9145055348f8792205ac2c0a54" name="orthanc-dicomweb" arch="src">
  <version epoch="0" ver="1.10" rel="bp154.2.3.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1565265600">- Version 1.0
  initial build on OBS</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1583409600">- Version 1.1
  * Support of "window", "viewport" and "quality" parameters in "Retrieve Rendered Transaction"
  * Support of "/studies/.../rendered" and "/studies/.../series/.../rendered"
  * QIDO-RS: Allow to query against a list of multiple values separated by commas
  * WADO-RS "Retrieve Metadata": Configuration options "StudiesMetadata"
  and "SeriesMetadata", whose value can be "Full" (read all DICOM
  instances from the storage area), "MainDicomTags" (only report the
  main DICOM tags from the Orthanc database), or "Extrapolate" (main
  DICOM tags + user-specified tags extrapolated from a few random instances)
  * QIDO-RS: Optimization for large studies/series
  * QIDO-RS: Fix returned attributes if Study/Series Instance UIDs are not filtered
  * Fix handling of the "Forwarded" HTTP header
  * Fix support for client certificate authentication
  * Accept multiple MIME types in Accept header for WADO-RS "Retrieve Metadata"
  https://groups.google.com/d/msg/orthanc-users/P3B6J9abZpE/syn5dnW2AwAJ
  * Added explicit "Accept" header to avoid uncompressing DICOM files by Google cloud,
  can be turned off by setting "HasWadoRsUniversalTransferSyntax" to "false" (for
  instance if contacting a remote Orthanc plugin with DICOMweb version &lt;= 1.0)
  https://groups.google.com/d/msg/orthanc-users/w1Ekrsc6-U8/T2a_DoQ5CwAJ
  * Fix issue #162 ("DICOMweb metadata resource reads all instances")
  * Fix issue #164 ("JPEG YBR_422 generates a 500 in the DicomWeb plugin")
  * Upgrade to GDCM 3.0.4 in static builds</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1590580800">- version 1.2
  * requires orthanc 1.7
  * Removed dependency on GDCM
  * "QidoCaseSensitive" defaults to "CaseSensitivePN" of Orthanc configuration (instead of "true")</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1603368000">- version 1.3
  * Support transcoding in WADO-RS RetrieveStudy, RetrieveSeries and RetrieveInstance
  * Support of dynamic linking against the system-wide Orthanc framework library
  * Support rendering of images whose pixel format is uint8_t
  * Fix ".../rendered" on MONOCHROME1 images
  * Fix default windowing in rendered frames using WADO-URI and WADO-RS
  * More verbose logs to debug chunked transfers</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1607601600">- patches_logging.patch added to fix issue with orthanc 1.8.1</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1608292800">- Version 1.4
  * "Extrapolate" mode doesn't fail if no consensus is found in WADO-RS Retrieve Metadata.
  This is necessary for proper behavior of the Stone Web viewer on very small series.
  * Fix issue #190 (STOW-RS fails is multipart boundary is surrounded by quotes in headers)
  * patches_logging.patch removed (included in source)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1611748800">- Version 1.5
  * Possibility to store the definition of DICOMweb servers into the Orthanc database
  * New configuration option "DicomWeb.ServersInDatabase"
  * Fix compliance with DICOM &gt;= 2016c: If no "transfer-syntax" is provided in WADO-RS
  Retrieve Instance/Series/Study, DICOM shall be transcoded to Little Endian Explicit</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1620561600">- Version 1.6
  * New field "Timeout" in "DicomWeb.Servers" to specify HTTP timeout on a per-server basis
  * Reduced memory consumption in STOW-RS server thanks to an optimization of
  Orthanc::MultipartStreamReader in Orthanc framework 1.9.3
  * Fix issue #194 (Upgrade media types to DICOM 2021a, cf. table 8.7.3-5)
  * Fix issue #196 (STOW-RS: Should return 200 only when successfully stored all instances)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1630497600">- Version 1.7
  * Detection of windowing and rescale in ".../rendered" for Philips multiframe images</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1652184000">- Version 1.8
  * Show an error message when trying to send studies &gt; 4GB via STOW-RS
  * Optimized QIDO-RS to build its responses from DB if tags are saved in "ExtraMainDicomTags".
  * New configuration "PublicRoot"</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664280000">- version 1.10
  * bugfix release, see 'NEWS' for details</changelog>
</package>
<package pkgid="43c9bff67a3fd97bcae307ec3c6778b631e9408117665c60c50a1fc57c690f5a" name="orthanc-dicomweb" arch="x86_64">
  <version epoch="0" ver="1.10" rel="bp154.2.3.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1565265600">- Version 1.0
  initial build on OBS</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1583409600">- Version 1.1
  * Support of "window", "viewport" and "quality" parameters in "Retrieve Rendered Transaction"
  * Support of "/studies/.../rendered" and "/studies/.../series/.../rendered"
  * QIDO-RS: Allow to query against a list of multiple values separated by commas
  * WADO-RS "Retrieve Metadata": Configuration options "StudiesMetadata"
  and "SeriesMetadata", whose value can be "Full" (read all DICOM
  instances from the storage area), "MainDicomTags" (only report the
  main DICOM tags from the Orthanc database), or "Extrapolate" (main
  DICOM tags + user-specified tags extrapolated from a few random instances)
  * QIDO-RS: Optimization for large studies/series
  * QIDO-RS: Fix returned attributes if Study/Series Instance UIDs are not filtered
  * Fix handling of the "Forwarded" HTTP header
  * Fix support for client certificate authentication
  * Accept multiple MIME types in Accept header for WADO-RS "Retrieve Metadata"
  https://groups.google.com/d/msg/orthanc-users/P3B6J9abZpE/syn5dnW2AwAJ
  * Added explicit "Accept" header to avoid uncompressing DICOM files by Google cloud,
  can be turned off by setting "HasWadoRsUniversalTransferSyntax" to "false" (for
  instance if contacting a remote Orthanc plugin with DICOMweb version &lt;= 1.0)
  https://groups.google.com/d/msg/orthanc-users/w1Ekrsc6-U8/T2a_DoQ5CwAJ
  * Fix issue #162 ("DICOMweb metadata resource reads all instances")
  * Fix issue #164 ("JPEG YBR_422 generates a 500 in the DicomWeb plugin")
  * Upgrade to GDCM 3.0.4 in static builds</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1590580800">- version 1.2
  * requires orthanc 1.7
  * Removed dependency on GDCM
  * "QidoCaseSensitive" defaults to "CaseSensitivePN" of Orthanc configuration (instead of "true")</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1603368000">- version 1.3
  * Support transcoding in WADO-RS RetrieveStudy, RetrieveSeries and RetrieveInstance
  * Support of dynamic linking against the system-wide Orthanc framework library
  * Support rendering of images whose pixel format is uint8_t
  * Fix ".../rendered" on MONOCHROME1 images
  * Fix default windowing in rendered frames using WADO-URI and WADO-RS
  * More verbose logs to debug chunked transfers</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1607601600">- patches_logging.patch added to fix issue with orthanc 1.8.1</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1608292800">- Version 1.4
  * "Extrapolate" mode doesn't fail if no consensus is found in WADO-RS Retrieve Metadata.
  This is necessary for proper behavior of the Stone Web viewer on very small series.
  * Fix issue #190 (STOW-RS fails is multipart boundary is surrounded by quotes in headers)
  * patches_logging.patch removed (included in source)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1611748800">- Version 1.5
  * Possibility to store the definition of DICOMweb servers into the Orthanc database
  * New configuration option "DicomWeb.ServersInDatabase"
  * Fix compliance with DICOM &gt;= 2016c: If no "transfer-syntax" is provided in WADO-RS
  Retrieve Instance/Series/Study, DICOM shall be transcoded to Little Endian Explicit</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1620561600">- Version 1.6
  * New field "Timeout" in "DicomWeb.Servers" to specify HTTP timeout on a per-server basis
  * Reduced memory consumption in STOW-RS server thanks to an optimization of
  Orthanc::MultipartStreamReader in Orthanc framework 1.9.3
  * Fix issue #194 (Upgrade media types to DICOM 2021a, cf. table 8.7.3-5)
  * Fix issue #196 (STOW-RS: Should return 200 only when successfully stored all instances)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1630497600">- Version 1.7
  * Detection of windowing and rescale in ".../rendered" for Philips multiframe images</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1652184000">- Version 1.8
  * Show an error message when trying to send studies &gt; 4GB via STOW-RS
  * Optimized QIDO-RS to build its responses from DB if tags are saved in "ExtraMainDicomTags".
  * New configuration "PublicRoot"</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664280000">- version 1.10
  * bugfix release, see 'NEWS' for details</changelog>
</package>
<package pkgid="a5c24b2c66ba56176bfc3056cea0acef6b6a79cca6dc6ada846a876d814786b4" name="orthanc-doc" arch="noarch">
  <version epoch="0" ver="1.11.2" rel="bp154.2.3.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1598356800">- Version 1.7.3
  * API version upgraded to 8
  * "/peers/{id}/store": New option "Compress" to compress DICOM data using gzip
  * "OrthancPeerStore" jobs now report the transmitted size in their public content
  * New config option "Worklist.LimitAnswers" for the sample modality worklist plugin
  * Add missing tag "Retrieve AE Title (0008,0054)" in C-FIND SCP responses
  * Fix DICOM SCP filters if some query tag has &gt; 256 characters (list of UIDs matching)
  * "/series/.../ordered-slices" supports spaces in Image Position/Orientation Patient tags
  * Fix possible crash in HttpClient if sending multipart body (can occur in STOW-RS)
  * Support receiving multipart messages larger than 2GB in the embedded HTTP server</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1600430400">- Version 1.7.4
  * New configuration options to enable HTTP peers identification through certificates:
  "SslVerifyPeers" and "SslTrustedClientCertificates"
  * New configuration option "SyncStorageArea" to immediately commit the files onto the disk
  (through fsync()), so as to avoid discrepencies between DB and filesystem in case of hard
  shutdown of the machine running Orthanc. This slows down adding new files into Orthanc.
  * Underscores are now allowed in peers/modalities symbolic names
  * Fix compatibility with C-MOVE SCU requests issued by Ambra
  * Fix transcoding in C-MOVE SCP, in the case where "SynchronousCMove" is "true"
  * When checking DICOM allowed methods, if there are multiple modalities with the same AET,
  differentiate them from the calling IP
  * Enable the access to raw frames in Philips ELSCINT1 proprietary compression
  * Support empty key passwords when using HTTP client certificates
  * Fix handling of "ModalitiesInStudy" (0008,0061) in C-FIND and "/tools/find"</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1602849600">- version 1.8.0
  * Serving the content of Orthanc as a WebDAV network share
  * New config options: "WebDavEnabled", "WebDavDeleteAllowed" and "WebDavUploadAllowed"</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1607428800">- Version 1.8.1
  * adaption to new systemd-macros (OBS)
  * New sample tool "OrthancImport.py" to easily import compressed archives (ZIP) into Orthanc
  * Logging categories (cf. command-line options starting with "--verbose-" and "--trace=")
  * New command-line option "--trace-dicom" to access full debug information from DCMTK
  * New config option "DicomEchoChecksFind" to automatically complement C-GET SCU with C-FIND SCU
  * API version upgraded to 9
  * "/tools/dicom-echo": Execute C-Echo SCU to a modality that is not registered in "/modalities"
  * "/tools/log-level-*": Dynamically access and/or change the verbosity of logging categories
  * "/peers/{id}/configuration": Get the configuration of one peer (cf. "/peers?expand")
  * "/modalities/{id}/configuration": Get the configuration of one modality (cf. "/modalities?expand")
  * "/tools/dicom-echo" and "/modalities/{id}/echo" now accept the field "CheckFind" in their JSON
  body to complement C-GET SCU with C-FIND SCU ("DicomEchoChecksFind" on a per-connection basis)
  * Archive/media jobs report the size of the created ZIP file in content field "ArchiveSizeMB"
  * New function in the SDK: OrthancPluginGenerateRestApiAuthorizationToken()
  * C-GET SCP: Fix responses and handling of cancel
  * Fix decoding sequence if "BuiltinDecoderTranscoderOrder" is "Before"
  * Fix keep-alive in the embedded HTTP server by setting the "Keep-Alive" HTTP header
  * Fix access to videos as a single raw frame (feature broken since Orthanc 1.6.0)
  * REST API now returns 404 error if deleting an inexistent peer or modality
  * Improved forward ABI compatibility of Orthanc Framework (notably, no inline methods anymore)
  * Upgraded dependencies for static builds (notably on Windows and LSB):
  - civetweb 1.13</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1608379200">- Version 1.8.2
  * ZIP archives containing DICOM files can be uploaded using WebDAV
  * New config option "MallocArenaMax" to control memory usage on GNU/Linux
  * Explicit error log if trying to load a 32bit (resp. 64bit) plugin into
  a 64bit (resp. 32bit) version of Orthanc
  * New configuration options contributed by Varian Medical Systems:
  - "DeidentifyLogs" to remove patient identification from the logs (C-GET, C-MOVE, C-FIND)
  - "DeidentifyLogsDicomVersion" to specify the deidentification rules for the logs
  - "OrthancExplorerEnabled" to enable/disable the Orthanc Explorer Web user interface
  - "SslMinimumProtocolVersion" to set the minimal SSL protocol version (now defaults to SSL 1.2)
  - "SslCiphersAccepted" to set the accepted ciphers over SSL (now defaults to FIPS 140-2)
  * New configuration options related to ingest transcoding:
  - "IngestTranscodingOfUncompressed" to control whether uncompressed transfer syntaxes are transcoded
  - "IngestTranscodingOfCompressed" to control whether compressed transfer syntaxes are transcoded
  * "/instances" can be used to import ZIP archives provided in the POST body
  * Allow concurrency on the OrthancPluginRegisterIncomingHttpRequestFilter() callbacks
  * Allow empty request body in "/modalities/{id}/echo"
  * If meta-header is missing, best-effort to extract "TransferSyntax" in "/instances/{id}/metadata"</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1609329600">- Workaround for boo#1180359</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1611921600">- Version 1.9.0
  * Support of DICOM TLS
  * New configuration options related to DICOM networking:
  - "DicomTlsEnabled" to enable DICOM TLS in Orthanc SCP
  - "DicomTlsCertificate" to provide the TLS certificate to be used in both Orthanc SCU and SCP
  - "DicomTlsPrivateKey" to provide the private key of the TLS certificate
  - "DicomTlsTrustedCertificates" to provide the list of TLS certificates to be trusted by Orthanc
  - "UseDicomTls" in "DicomModalities" to enable DICOM TLS in outgoing SCU on a per-modality basis
  - "MaximumPduLength" to tune the maximum PDU length (Protocol Data Unit)
  - "LocalAet" in "DicomModalities" to overwrite global "DicomAet" for SCU on a per-modality basis
  - "AcceptedTransferSyntaxes" to set the transfer syntax UIDs accepted by Orthanc C-STORE SCP
  - "H265TransferSyntaxAccepted" to enable/disable all the transfer syntaxes related to H.265
  - "DicomAlwaysAllowFind" to disable verification of the remote modality in C-FIND SCP
  - "DicomAlwaysAllowGet" to disable verification of the remote modality in C-GET SCP
  * New configuration option: "DicomScuPreferredTransferSyntax" to control transcoding in C-STORE SCU
  * New command-line option: "--openapi" to write the OpenAPI documentation of the REST API to a file
  * New metadata automatically computed at the series level: "RemoteAET"
  * The DICOM meta-header and the transfer syntax are displayed at the "Instance" level
  * API version upgraded to 10
  * "/tools/accepted-transfer-syntaxes": Get/set transfer syntaxes accepted by Orthanc C-STORE SCP
  * "/tools/unknown-sop-class-accepted": Get/set whether C-STORE SCP accepts unknown SOP class UID
  * "/modalities/{...}/query": New string argument "LocalAet"
  * "/tools/create-dicom": New flag "Force" to bypass consistency checks for the DICOM tags
  * BREAKING CHANGE: All the Lua callbacks "IsXXXTransferSyntaxAccepted()" and
  "IsUnknownSopClassAccepted()" have been removed
  * New functions in the SDK:
  - OrthancPluginCreateMemoryBuffer64()
  - OrthancPluginRegisterStorageArea2()
  - OrthancPluginCreateDicom2()
  * Refactoring and improvements to the cache of DICOM files (it can now hold many files)
  * New Prometheus metrics "orthanc_dicom_cache_count" and "orthanc_dicom_cache_size"
  * Fix upload of multiple DICOM files using one single POST call to "multipart/form-data"
  Could be the final resolution of issue #21 (DICOM files missing after uploading with Firefox)
  * Partial fix of issue #48 (Windows service not stopped properly), cf. comments 4 and 5
  * Explicitly use little-endian to encode uncompressed file size with zlib compression
  * Upgraded dependencies for static builds (notably on Windows):
  - dcmtk 3.6.6
  - jsoncpp 1.9.4</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1614254400">- version 1.9.1
  * The "dicom-as-json" attachments are not explicitly stored anymore to improve performance
  * If the storage area doesn't support range reading, or if "StorageCompression"
  is enabled, a new type of attachment "dicom-until-pixel-data" is generated
  * New metadata automatically computed at the instance level: "PixelDataOffset"
  * New configuration option related to networking:
  - "Timeout" in "DicomModalities" to set DICOM SCU timeout on a per-modality basis
  - "Timeout" in "OrthancPeers" to set HTTP client timeout on a per-peer basis
  * API version upgraded to 11
  * BREAKING CHANGES:
  - External applications should not call "/instances/.../attachments/dicom-as-json" anymore,
    and should use "/instances/.../tags" instead
  - "/instances/.../tags" route does not report the tags after "Pixel Data" (7fe0,0010) anymore
  * "/peers/{id}/store-straight": Synchronously send the DICOM instance in POST body to the peer
  * New arguments in the REST API:
  - "Timeout" in "/modalities/.../query"
  - "Timeout" in "/modalities/.../storage-commitment"
  - "Timeout" in "/queries/.../answers/.../query-{studies|series|instances}"
  * New value in enumeration: OrthancPluginDicomToJsonFlags_StopAfterPixelData
  * New value in enumeration: OrthancPluginDicomToJsonFlags_SkipGroupLengths
  * Improved precision of floating-point numbers in DICOM-as-JSON and DICOM summary
  * Optimization in C-STORE SCP by avoiding an unnecessary DICOM parsing
  * Fix build on big-endian architectures
  * Handle public tags with "UN" value representation and containing a string (cf. DICOM CP 246)
  * The numbering of sequences in Orthanc Explorer now uses the DICOM convention (starts at 1)
  * Possibility to generate a static library containing the Orthanc Framework</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1620561600">- Version 1.9.3
  * New configuration option: "DicomTlsRemoteCertificateRequired" to allow secure DICOM TLS
  connections without certificate
  * "ETag" headers for metadata and attachments now allow strong comparison (MD5 is included)
  * New CMake option: "ORTHANC_LUA_VERSION" to use a specific version of system-wide Lua
  * Fix the lifetime of temporary files associated with jobs that create ZIP archive/media:
  - In synchronous mode, their number could grow up to "JobsHistorySize" in Orthanc &lt;= 1.9.2
  - In asynchronous mode, the temporary files are removed as soon as their job gets canceled
  * Fix regression in the handling of "DicomCheckModalityHost" configuration option
  introduced by changeset 4182 in Orthanc 1.7.4
  * Reduced memory consumption of "OrthancPluginHttpClient()", "OrthancPluginHttpClient2()" and
  "OrthancPluginCallPeerApi()" on POST/PUT if chunked transfer is disabled
  * Fix issue #195 (No need for BulkDataURI when Data Element is empty)
- from version 1.9.2:
  * New configuration options related to multiple readers/writers:
  - "DatabaseServerIdentifier" identifies the server in the DB among a pool of Orthanc servers
  - "CheckRevisions" to protect against concurrent modifications of metadata and attachments
  * API version upgraded to 12
  * "/system" reports the value of the "CheckRevisions" global option
  * "/.../{id}/metadata/{name}" and "/.../{id}/attachments/{name}/..." URIs handle the
  HTTP headers "If-Match", "If-None-Match" and "ETag" to cope with revisions
  * New function in the SDK: OrthancPluginCallRestApi()
  * Full refactoring of the database plugin SDK to handle multiple readers/writers,
  which notably implies the handling of retries in the case of collisions
  * Use the local timezone for query/retrieve in the Orthanc Explorer interface (was UTC before)
  * Fix "OrthancServer/Resources/Samples/Python/Replicate.py" for Python 3.x
  * Fix issue #83 (ServerIndex shall implement retries for DB temporary errors)
  * Upgraded dependencies for static builds (notably on Windows and LSB):
  - civetweb 1.14
  - openssl 1.1.1k</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1624536000">- version 1.9.4
  * Orthanc now anonymizes according to Basic Profile of PS 3.15-2021b Table E.1-1
  * New configuration options:
  - "ExternalDictionaries" to load external DICOM dictionaries (useful for DICONDE)
  - "SynchronousZipStream" to disable streaming of ZIP
  * Orthanc Explorer supports the DICONDE dictionary
  * API version upgraded to 13
  * New routes to handle groups of multiple, unrelated DICOM resources at once:
  - "/tools/bulk-anonymize" to anonymize a set of resources
  - "/tools/bulk-content" to get the content of a set of resources
  - "/tools/bulk-delete" to delete a set of resources
  - "/tools/bulk-modify" to modify a set of resources
  * ZIP archive/media generated in synchronous mode are now streamed by default
  * "Replace" tags in "/modify" and "/anonymize" now supports value representation AT
  * "/jobs/..." has new field "ErrorDetails" to help identify the cause of an error
  * "Replace", "Keep" and "Remove" in "/modify" and "/anonymize" accept paths to subsequences
  using the syntax of the dcmodify command-line tool (wildcards are supported as well)
  * Added "short", "simplify" and/or "full" options to control the format of DICOM tags in:
  - GET /patients, GET /studies, GET /series, GET /instances (together with "&amp;expand")
  - GET /patients/{id}, GET /studies/{id}, GET /series/{id}, GET /instances/{id}
  - GET /patients/{id}/studies, GET /patients/{id}/series, GET /patients/{id}/instances
  - GET /studies/{id}/patient, GET /studies/{id}/series, GET /studies/{id}/instances
  - GET /series/{id}/patient, GET /series/{id}/study, GET /series/{id}/instances
  - GET /instances/{id}/patient, GET /instances/{id}/study, GET /instances/{id}/series
  - GET /patients/{id}/instances-tags, GET /patients/{id}/shared-tags
  - GET /studies/{id}/instances-tags, GET /series/{id}/shared-tags
  - GET /series/{id}/instances-tags, GET /studies/{id}/shared-tags
  - GET /patients/{id}/module, GET /patients/{id}/patient-module
  - GET /series/{id}/module, GET /studies/{id}/module, GET /instances/{id}/module
  - POST /tools/find
  * "/studies/{id}/split" accepts "Instances" parameter to split instances instead of series
  * "/studies/{id}/merge" accepts instances inside its "Resources" parameter
  * Full support of hierarchical relationships in tags whose VR is UI during anonymization
  * C-MOVE SCP: added possible DIMSE status "Sub-operations Complete - One or more Failures"
  * Fix issue #146 (Update Anonyization to 2019c) - was actually updated to 2021b
  * Upgraded dependencies for static builds (notably on Windows):
  - curl 7.77.0</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1626004800">- version 1.9.5
  * Anonymization is applied recursively to nested tags
  * API version upgraded to 14
  * Added "Short", "Simplify" and/or "Full" options to control the format of DICOM tags in:
  - POST /modalities/{id}/find-worklist
  - POST /queries/{id}/answers/{index}/retrieve
  - POST /queries/{id}/retrieve
  * Fix broken "Do lookup" button in Orthanc Explorer
  * Error code and description of jobs are now saved into the Orthanc database</changelog>
  <changelog author="Steve Kowalik &lt;steven.kowalik@suse.com&gt;" date="1626696000">- Remove executable bits from Python scripts when creating the source
  tree for the -source package to stop it requiring /usr/bin/python</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1626955200">- version 1.9.6
  * In lookup and query/retrieve, possibility to provide a specific study date
  * Clicking on "Send to remote modality" displays the job information to monitor progress
  * Fix orphaned attachments if bad revision number is provided</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1630497600">- Version 1.9.7
  * New configuration option "DicomAlwaysAllowMove" to disable verification of
  the remote modality in C-MOVE SCP
  * API version upgraded to 15
  * Added "Level" option to POST /tools/bulk-modify
  * Added missing OpenAPI documentation of "KeepSource" in ".../modify" and ".../anonymize"
  * Added file CITATION.cff
  * Linux Standard Base (LSB) builds of Orthanc can load non-LSB builds of plugins
  * Fix upload of ZIP archives containing a DICOMDIR file
  * Fix computation of the estimated time of arrival in jobs
  * Support detection of windowing and rescale in Philips multiframe images</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1632657600">- Test for SharedLibrary.Basic disabled (fails with new glibc)</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634126400">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * orthanc.service</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648209600">- version 1.10.1
  * for detailed changelog see NEWS</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1651838400">- switched source urls to https</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1652184000">- version 1.11.0
  * new API version 1.7
  * new configuration parameter
  * for detailed changelog see NEWS</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664280000">- version 1.11.2
  * Added support for RGBA64 images in tools/create-dicom and /preview
  * New configuration "MaximumStorageMode" to choose between recyling of
    old patients (default behavior) and rejection of new incoming data when
    the MaximumStorageSize has been reached.
  * New sample plugin: "DelayedDeletion" that will delete files from disk
    asynchronously to speed up deletion of large studies.
  * Lua: new "SetHttpTimeout" function
  * Lua: new "OnHeartBeat" callback called at regular interval provided that
    you have configured "LuaHeartBeatPeriod" &gt; 0.
  * "ExtraMainDicomTags" configuration now accepts Dicom Sequences.  Sequences are
    stored in a dedicated new metadata "MainDicomSequences".  This should improve
    DicomWeb QIDO-RS and avoid warnings like "Accessing Dicom tags from storage when
    accessing series : 0040,0275".
    Main dicom sequences can now be returned in "MainDicomTags" and in "RequestedTags".
  * Fix the "Never" option of the "StorageAccessOnFind" that was sill accessing
    files (bug introduced in 1.11.0).
  * Fix the Storage Cache for compressed files (bug introduced in 1.11.1).
  * Fix the storage cache that was not used by the Plugin SDK.  This fixes the
    DicomWeb plugin "/rendered" route performance issues.
  * DelayedDeletion plugin: Fix leaking of symbols
  * SQLite now closes and deletes WAL and SHM files on exit.  This should improve
    handling of SQLite DB over network drives.
  * Fix static compilation of boost 1.69 on Ubuntu 22.04
  * Upgraded dependencies for static builds:
  - boost 1.80.0
  - dcmtk 3.6.7  (fixes CVE-2022-2119 and CVE-2022-2120)
  - openssl 3.0.5
  * Housekeeper plugin: Fix resume of previous processing
  * Added missing MOVEPatientRootQueryRetrieveInformationModel in
    DicomControlUserConnection::SetupPresentationContexts()
  * Improved HttpClient error logging (add method + url)
  * API version upgraded to 18
  * /system is now reporting "DatabaseServerIdentifier"
  * Added an Asynchronous mode to /modalities/../move.
  * "RequestedTags" option can now include DICOM sequences.
  * New function in the SDK: "OrthancPluginGetDatabaseServerIdentifier"
  * DicomMap::ParseMainDicomTags has been deprecated -&gt; retrieve "full" tags
    and use DicomMap::FromDicomAsJson instead</changelog>
</package>
<package pkgid="ee80fd28dc053c5b62d17b8f372b24851dcd49416d5e8614120fcf7de55d3949" name="orthanc-gdcm" arch="aarch64">
  <version epoch="0" ver="1.5" rel="bp154.2.3.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1590494400">- version 1.0 of the plugin
  iniital build on OBS</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1602936000">- version 1.1
  * Fix transcoding of DICOM files encoded using an implicit transfer syntax
  * Support of dynamic linking against the system-wide Orthanc framework
    library
  * Upgrade to GDCM 3.0.7 for static builds</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1607601600">- patches_logging.patch added to fix build error w. orthanc 1.8.1</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1608552000">- Version 1.2
  * Temporarily prevent transcoding of 16bpp images to JPEG, as this might crash GDCM
  * Upgrade to GDCM 3.0.8 for static builds
  * patches_logging.patch removed (included in source)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1609329600">- Workaround for boo#1180359</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1624104000">- version 1.3
  * Prevent changing SOP class UID from "MR Image Storage" to "Enhanced
  MR Image Storage" during the transcoding</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1626955200">- version 1.4
  * Prevent transcoding of 1bpp DICOM images, as this might crash GDCM</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648209600">- Version 1.5
  * Take the configuration option "RestrictTransferSyntaxes" into
  account not only for decoding, but also for transcoding
  * Upgrade to GDCM 3.0.10 for static builds-</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1663934400">- changed dependency gdcm-libgdcm3_0 -&gt; libgdcm3_0</changelog>
</package>
<package pkgid="8ea87754cee00c4b55532036a0dd8513eb01175697a3cfec9496948eb2560ebb" name="orthanc-gdcm" arch="ppc64le">
  <version epoch="0" ver="1.5" rel="bp154.2.3.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1590494400">- version 1.0 of the plugin
  iniital build on OBS</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1602936000">- version 1.1
  * Fix transcoding of DICOM files encoded using an implicit transfer syntax
  * Support of dynamic linking against the system-wide Orthanc framework
    library
  * Upgrade to GDCM 3.0.7 for static builds</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1607601600">- patches_logging.patch added to fix build error w. orthanc 1.8.1</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1608552000">- Version 1.2
  * Temporarily prevent transcoding of 16bpp images to JPEG, as this might crash GDCM
  * Upgrade to GDCM 3.0.8 for static builds
  * patches_logging.patch removed (included in source)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1609329600">- Workaround for boo#1180359</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1624104000">- version 1.3
  * Prevent changing SOP class UID from "MR Image Storage" to "Enhanced
  MR Image Storage" during the transcoding</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1626955200">- version 1.4
  * Prevent transcoding of 1bpp DICOM images, as this might crash GDCM</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648209600">- Version 1.5
  * Take the configuration option "RestrictTransferSyntaxes" into
  account not only for decoding, but also for transcoding
  * Upgrade to GDCM 3.0.10 for static builds-</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1663934400">- changed dependency gdcm-libgdcm3_0 -&gt; libgdcm3_0</changelog>
</package>
<package pkgid="9d6ac5a826c3c46074846ae699443a4ffc51edea0c4ac7ba5709a54bc5035fd1" name="orthanc-gdcm" arch="s390x">
  <version epoch="0" ver="1.5" rel="bp154.2.3.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1590494400">- version 1.0 of the plugin
  iniital build on OBS</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1602936000">- version 1.1
  * Fix transcoding of DICOM files encoded using an implicit transfer syntax
  * Support of dynamic linking against the system-wide Orthanc framework
    library
  * Upgrade to GDCM 3.0.7 for static builds</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1607601600">- patches_logging.patch added to fix build error w. orthanc 1.8.1</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1608552000">- Version 1.2
  * Temporarily prevent transcoding of 16bpp images to JPEG, as this might crash GDCM
  * Upgrade to GDCM 3.0.8 for static builds
  * patches_logging.patch removed (included in source)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1609329600">- Workaround for boo#1180359</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1624104000">- version 1.3
  * Prevent changing SOP class UID from "MR Image Storage" to "Enhanced
  MR Image Storage" during the transcoding</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1626955200">- version 1.4
  * Prevent transcoding of 1bpp DICOM images, as this might crash GDCM</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648209600">- Version 1.5
  * Take the configuration option "RestrictTransferSyntaxes" into
  account not only for decoding, but also for transcoding
  * Upgrade to GDCM 3.0.10 for static builds-</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1663934400">- changed dependency gdcm-libgdcm3_0 -&gt; libgdcm3_0</changelog>
</package>
<package pkgid="c01e0c97d118af29faa521a329dd6a3b76347866fa300315227433fb627a2c91" name="orthanc-gdcm" arch="src">
  <version epoch="0" ver="1.5" rel="bp154.2.3.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1590494400">- version 1.0 of the plugin
  iniital build on OBS</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1602936000">- version 1.1
  * Fix transcoding of DICOM files encoded using an implicit transfer syntax
  * Support of dynamic linking against the system-wide Orthanc framework
    library
  * Upgrade to GDCM 3.0.7 for static builds</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1607601600">- patches_logging.patch added to fix build error w. orthanc 1.8.1</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1608552000">- Version 1.2
  * Temporarily prevent transcoding of 16bpp images to JPEG, as this might crash GDCM
  * Upgrade to GDCM 3.0.8 for static builds
  * patches_logging.patch removed (included in source)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1609329600">- Workaround for boo#1180359</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1624104000">- version 1.3
  * Prevent changing SOP class UID from "MR Image Storage" to "Enhanced
  MR Image Storage" during the transcoding</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1626955200">- version 1.4
  * Prevent transcoding of 1bpp DICOM images, as this might crash GDCM</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648209600">- Version 1.5
  * Take the configuration option "RestrictTransferSyntaxes" into
  account not only for decoding, but also for transcoding
  * Upgrade to GDCM 3.0.10 for static builds-</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1663934400">- changed dependency gdcm-libgdcm3_0 -&gt; libgdcm3_0</changelog>
</package>
<package pkgid="6a443ffdd7c346b6ab95ba2b9f97412707a3ac8bacd44ba2364bc41fc9d672ec" name="orthanc-gdcm" arch="x86_64">
  <version epoch="0" ver="1.5" rel="bp154.2.3.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1590494400">- version 1.0 of the plugin
  iniital build on OBS</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1602936000">- version 1.1
  * Fix transcoding of DICOM files encoded using an implicit transfer syntax
  * Support of dynamic linking against the system-wide Orthanc framework
    library
  * Upgrade to GDCM 3.0.7 for static builds</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1607601600">- patches_logging.patch added to fix build error w. orthanc 1.8.1</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1608552000">- Version 1.2
  * Temporarily prevent transcoding of 16bpp images to JPEG, as this might crash GDCM
  * Upgrade to GDCM 3.0.8 for static builds
  * patches_logging.patch removed (included in source)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1609329600">- Workaround for boo#1180359</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1624104000">- version 1.3
  * Prevent changing SOP class UID from "MR Image Storage" to "Enhanced
  MR Image Storage" during the transcoding</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1626955200">- version 1.4
  * Prevent transcoding of 1bpp DICOM images, as this might crash GDCM</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648209600">- Version 1.5
  * Take the configuration option "RestrictTransferSyntaxes" into
  account not only for decoding, but also for transcoding
  * Upgrade to GDCM 3.0.10 for static builds-</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1663934400">- changed dependency gdcm-libgdcm3_0 -&gt; libgdcm3_0</changelog>
</package>
<package pkgid="721b7fbc0ecfbf09cca127c21a11ecfa130eb1a80d8bcc1a5d0c39c4d4397c6a" name="orthanc-source" arch="aarch64">
  <version epoch="0" ver="1.11.2" rel="bp154.2.3.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1598356800">- Version 1.7.3
  * API version upgraded to 8
  * "/peers/{id}/store": New option "Compress" to compress DICOM data using gzip
  * "OrthancPeerStore" jobs now report the transmitted size in their public content
  * New config option "Worklist.LimitAnswers" for the sample modality worklist plugin
  * Add missing tag "Retrieve AE Title (0008,0054)" in C-FIND SCP responses
  * Fix DICOM SCP filters if some query tag has &gt; 256 characters (list of UIDs matching)
  * "/series/.../ordered-slices" supports spaces in Image Position/Orientation Patient tags
  * Fix possible crash in HttpClient if sending multipart body (can occur in STOW-RS)
  * Support receiving multipart messages larger than 2GB in the embedded HTTP server</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1600430400">- Version 1.7.4
  * New configuration options to enable HTTP peers identification through certificates:
  "SslVerifyPeers" and "SslTrustedClientCertificates"
  * New configuration option "SyncStorageArea" to immediately commit the files onto the disk
  (through fsync()), so as to avoid discrepencies between DB and filesystem in case of hard
  shutdown of the machine running Orthanc. This slows down adding new files into Orthanc.
  * Underscores are now allowed in peers/modalities symbolic names
  * Fix compatibility with C-MOVE SCU requests issued by Ambra
  * Fix transcoding in C-MOVE SCP, in the case where "SynchronousCMove" is "true"
  * When checking DICOM allowed methods, if there are multiple modalities with the same AET,
  differentiate them from the calling IP
  * Enable the access to raw frames in Philips ELSCINT1 proprietary compression
  * Support empty key passwords when using HTTP client certificates
  * Fix handling of "ModalitiesInStudy" (0008,0061) in C-FIND and "/tools/find"</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1602849600">- version 1.8.0
  * Serving the content of Orthanc as a WebDAV network share
  * New config options: "WebDavEnabled", "WebDavDeleteAllowed" and "WebDavUploadAllowed"</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1607428800">- Version 1.8.1
  * adaption to new systemd-macros (OBS)
  * New sample tool "OrthancImport.py" to easily import compressed archives (ZIP) into Orthanc
  * Logging categories (cf. command-line options starting with "--verbose-" and "--trace=")
  * New command-line option "--trace-dicom" to access full debug information from DCMTK
  * New config option "DicomEchoChecksFind" to automatically complement C-GET SCU with C-FIND SCU
  * API version upgraded to 9
  * "/tools/dicom-echo": Execute C-Echo SCU to a modality that is not registered in "/modalities"
  * "/tools/log-level-*": Dynamically access and/or change the verbosity of logging categories
  * "/peers/{id}/configuration": Get the configuration of one peer (cf. "/peers?expand")
  * "/modalities/{id}/configuration": Get the configuration of one modality (cf. "/modalities?expand")
  * "/tools/dicom-echo" and "/modalities/{id}/echo" now accept the field "CheckFind" in their JSON
  body to complement C-GET SCU with C-FIND SCU ("DicomEchoChecksFind" on a per-connection basis)
  * Archive/media jobs report the size of the created ZIP file in content field "ArchiveSizeMB"
  * New function in the SDK: OrthancPluginGenerateRestApiAuthorizationToken()
  * C-GET SCP: Fix responses and handling of cancel
  * Fix decoding sequence if "BuiltinDecoderTranscoderOrder" is "Before"
  * Fix keep-alive in the embedded HTTP server by setting the "Keep-Alive" HTTP header
  * Fix access to videos as a single raw frame (feature broken since Orthanc 1.6.0)
  * REST API now returns 404 error if deleting an inexistent peer or modality
  * Improved forward ABI compatibility of Orthanc Framework (notably, no inline methods anymore)
  * Upgraded dependencies for static builds (notably on Windows and LSB):
  - civetweb 1.13</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1608379200">- Version 1.8.2
  * ZIP archives containing DICOM files can be uploaded using WebDAV
  * New config option "MallocArenaMax" to control memory usage on GNU/Linux
  * Explicit error log if trying to load a 32bit (resp. 64bit) plugin into
  a 64bit (resp. 32bit) version of Orthanc
  * New configuration options contributed by Varian Medical Systems:
  - "DeidentifyLogs" to remove patient identification from the logs (C-GET, C-MOVE, C-FIND)
  - "DeidentifyLogsDicomVersion" to specify the deidentification rules for the logs
  - "OrthancExplorerEnabled" to enable/disable the Orthanc Explorer Web user interface
  - "SslMinimumProtocolVersion" to set the minimal SSL protocol version (now defaults to SSL 1.2)
  - "SslCiphersAccepted" to set the accepted ciphers over SSL (now defaults to FIPS 140-2)
  * New configuration options related to ingest transcoding:
  - "IngestTranscodingOfUncompressed" to control whether uncompressed transfer syntaxes are transcoded
  - "IngestTranscodingOfCompressed" to control whether compressed transfer syntaxes are transcoded
  * "/instances" can be used to import ZIP archives provided in the POST body
  * Allow concurrency on the OrthancPluginRegisterIncomingHttpRequestFilter() callbacks
  * Allow empty request body in "/modalities/{id}/echo"
  * If meta-header is missing, best-effort to extract "TransferSyntax" in "/instances/{id}/metadata"</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1609329600">- Workaround for boo#1180359</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1611921600">- Version 1.9.0
  * Support of DICOM TLS
  * New configuration options related to DICOM networking:
  - "DicomTlsEnabled" to enable DICOM TLS in Orthanc SCP
  - "DicomTlsCertificate" to provide the TLS certificate to be used in both Orthanc SCU and SCP
  - "DicomTlsPrivateKey" to provide the private key of the TLS certificate
  - "DicomTlsTrustedCertificates" to provide the list of TLS certificates to be trusted by Orthanc
  - "UseDicomTls" in "DicomModalities" to enable DICOM TLS in outgoing SCU on a per-modality basis
  - "MaximumPduLength" to tune the maximum PDU length (Protocol Data Unit)
  - "LocalAet" in "DicomModalities" to overwrite global "DicomAet" for SCU on a per-modality basis
  - "AcceptedTransferSyntaxes" to set the transfer syntax UIDs accepted by Orthanc C-STORE SCP
  - "H265TransferSyntaxAccepted" to enable/disable all the transfer syntaxes related to H.265
  - "DicomAlwaysAllowFind" to disable verification of the remote modality in C-FIND SCP
  - "DicomAlwaysAllowGet" to disable verification of the remote modality in C-GET SCP
  * New configuration option: "DicomScuPreferredTransferSyntax" to control transcoding in C-STORE SCU
  * New command-line option: "--openapi" to write the OpenAPI documentation of the REST API to a file
  * New metadata automatically computed at the series level: "RemoteAET"
  * The DICOM meta-header and the transfer syntax are displayed at the "Instance" level
  * API version upgraded to 10
  * "/tools/accepted-transfer-syntaxes": Get/set transfer syntaxes accepted by Orthanc C-STORE SCP
  * "/tools/unknown-sop-class-accepted": Get/set whether C-STORE SCP accepts unknown SOP class UID
  * "/modalities/{...}/query": New string argument "LocalAet"
  * "/tools/create-dicom": New flag "Force" to bypass consistency checks for the DICOM tags
  * BREAKING CHANGE: All the Lua callbacks "IsXXXTransferSyntaxAccepted()" and
  "IsUnknownSopClassAccepted()" have been removed
  * New functions in the SDK:
  - OrthancPluginCreateMemoryBuffer64()
  - OrthancPluginRegisterStorageArea2()
  - OrthancPluginCreateDicom2()
  * Refactoring and improvements to the cache of DICOM files (it can now hold many files)
  * New Prometheus metrics "orthanc_dicom_cache_count" and "orthanc_dicom_cache_size"
  * Fix upload of multiple DICOM files using one single POST call to "multipart/form-data"
  Could be the final resolution of issue #21 (DICOM files missing after uploading with Firefox)
  * Partial fix of issue #48 (Windows service not stopped properly), cf. comments 4 and 5
  * Explicitly use little-endian to encode uncompressed file size with zlib compression
  * Upgraded dependencies for static builds (notably on Windows):
  - dcmtk 3.6.6
  - jsoncpp 1.9.4</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1614254400">- version 1.9.1
  * The "dicom-as-json" attachments are not explicitly stored anymore to improve performance
  * If the storage area doesn't support range reading, or if "StorageCompression"
  is enabled, a new type of attachment "dicom-until-pixel-data" is generated
  * New metadata automatically computed at the instance level: "PixelDataOffset"
  * New configuration option related to networking:
  - "Timeout" in "DicomModalities" to set DICOM SCU timeout on a per-modality basis
  - "Timeout" in "OrthancPeers" to set HTTP client timeout on a per-peer basis
  * API version upgraded to 11
  * BREAKING CHANGES:
  - External applications should not call "/instances/.../attachments/dicom-as-json" anymore,
    and should use "/instances/.../tags" instead
  - "/instances/.../tags" route does not report the tags after "Pixel Data" (7fe0,0010) anymore
  * "/peers/{id}/store-straight": Synchronously send the DICOM instance in POST body to the peer
  * New arguments in the REST API:
  - "Timeout" in "/modalities/.../query"
  - "Timeout" in "/modalities/.../storage-commitment"
  - "Timeout" in "/queries/.../answers/.../query-{studies|series|instances}"
  * New value in enumeration: OrthancPluginDicomToJsonFlags_StopAfterPixelData
  * New value in enumeration: OrthancPluginDicomToJsonFlags_SkipGroupLengths
  * Improved precision of floating-point numbers in DICOM-as-JSON and DICOM summary
  * Optimization in C-STORE SCP by avoiding an unnecessary DICOM parsing
  * Fix build on big-endian architectures
  * Handle public tags with "UN" value representation and containing a string (cf. DICOM CP 246)
  * The numbering of sequences in Orthanc Explorer now uses the DICOM convention (starts at 1)
  * Possibility to generate a static library containing the Orthanc Framework</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1620561600">- Version 1.9.3
  * New configuration option: "DicomTlsRemoteCertificateRequired" to allow secure DICOM TLS
  connections without certificate
  * "ETag" headers for metadata and attachments now allow strong comparison (MD5 is included)
  * New CMake option: "ORTHANC_LUA_VERSION" to use a specific version of system-wide Lua
  * Fix the lifetime of temporary files associated with jobs that create ZIP archive/media:
  - In synchronous mode, their number could grow up to "JobsHistorySize" in Orthanc &lt;= 1.9.2
  - In asynchronous mode, the temporary files are removed as soon as their job gets canceled
  * Fix regression in the handling of "DicomCheckModalityHost" configuration option
  introduced by changeset 4182 in Orthanc 1.7.4
  * Reduced memory consumption of "OrthancPluginHttpClient()", "OrthancPluginHttpClient2()" and
  "OrthancPluginCallPeerApi()" on POST/PUT if chunked transfer is disabled
  * Fix issue #195 (No need for BulkDataURI when Data Element is empty)
- from version 1.9.2:
  * New configuration options related to multiple readers/writers:
  - "DatabaseServerIdentifier" identifies the server in the DB among a pool of Orthanc servers
  - "CheckRevisions" to protect against concurrent modifications of metadata and attachments
  * API version upgraded to 12
  * "/system" reports the value of the "CheckRevisions" global option
  * "/.../{id}/metadata/{name}" and "/.../{id}/attachments/{name}/..." URIs handle the
  HTTP headers "If-Match", "If-None-Match" and "ETag" to cope with revisions
  * New function in the SDK: OrthancPluginCallRestApi()
  * Full refactoring of the database plugin SDK to handle multiple readers/writers,
  which notably implies the handling of retries in the case of collisions
  * Use the local timezone for query/retrieve in the Orthanc Explorer interface (was UTC before)
  * Fix "OrthancServer/Resources/Samples/Python/Replicate.py" for Python 3.x
  * Fix issue #83 (ServerIndex shall implement retries for DB temporary errors)
  * Upgraded dependencies for static builds (notably on Windows and LSB):
  - civetweb 1.14
  - openssl 1.1.1k</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1624536000">- version 1.9.4
  * Orthanc now anonymizes according to Basic Profile of PS 3.15-2021b Table E.1-1
  * New configuration options:
  - "ExternalDictionaries" to load external DICOM dictionaries (useful for DICONDE)
  - "SynchronousZipStream" to disable streaming of ZIP
  * Orthanc Explorer supports the DICONDE dictionary
  * API version upgraded to 13
  * New routes to handle groups of multiple, unrelated DICOM resources at once:
  - "/tools/bulk-anonymize" to anonymize a set of resources
  - "/tools/bulk-content" to get the content of a set of resources
  - "/tools/bulk-delete" to delete a set of resources
  - "/tools/bulk-modify" to modify a set of resources
  * ZIP archive/media generated in synchronous mode are now streamed by default
  * "Replace" tags in "/modify" and "/anonymize" now supports value representation AT
  * "/jobs/..." has new field "ErrorDetails" to help identify the cause of an error
  * "Replace", "Keep" and "Remove" in "/modify" and "/anonymize" accept paths to subsequences
  using the syntax of the dcmodify command-line tool (wildcards are supported as well)
  * Added "short", "simplify" and/or "full" options to control the format of DICOM tags in:
  - GET /patients, GET /studies, GET /series, GET /instances (together with "&amp;expand")
  - GET /patients/{id}, GET /studies/{id}, GET /series/{id}, GET /instances/{id}
  - GET /patients/{id}/studies, GET /patients/{id}/series, GET /patients/{id}/instances
  - GET /studies/{id}/patient, GET /studies/{id}/series, GET /studies/{id}/instances
  - GET /series/{id}/patient, GET /series/{id}/study, GET /series/{id}/instances
  - GET /instances/{id}/patient, GET /instances/{id}/study, GET /instances/{id}/series
  - GET /patients/{id}/instances-tags, GET /patients/{id}/shared-tags
  - GET /studies/{id}/instances-tags, GET /series/{id}/shared-tags
  - GET /series/{id}/instances-tags, GET /studies/{id}/shared-tags
  - GET /patients/{id}/module, GET /patients/{id}/patient-module
  - GET /series/{id}/module, GET /studies/{id}/module, GET /instances/{id}/module
  - POST /tools/find
  * "/studies/{id}/split" accepts "Instances" parameter to split instances instead of series
  * "/studies/{id}/merge" accepts instances inside its "Resources" parameter
  * Full support of hierarchical relationships in tags whose VR is UI during anonymization
  * C-MOVE SCP: added possible DIMSE status "Sub-operations Complete - One or more Failures"
  * Fix issue #146 (Update Anonyization to 2019c) - was actually updated to 2021b
  * Upgraded dependencies for static builds (notably on Windows):
  - curl 7.77.0</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1626004800">- version 1.9.5
  * Anonymization is applied recursively to nested tags
  * API version upgraded to 14
  * Added "Short", "Simplify" and/or "Full" options to control the format of DICOM tags in:
  - POST /modalities/{id}/find-worklist
  - POST /queries/{id}/answers/{index}/retrieve
  - POST /queries/{id}/retrieve
  * Fix broken "Do lookup" button in Orthanc Explorer
  * Error code and description of jobs are now saved into the Orthanc database</changelog>
  <changelog author="Steve Kowalik &lt;steven.kowalik@suse.com&gt;" date="1626696000">- Remove executable bits from Python scripts when creating the source
  tree for the -source package to stop it requiring /usr/bin/python</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1626955200">- version 1.9.6
  * In lookup and query/retrieve, possibility to provide a specific study date
  * Clicking on "Send to remote modality" displays the job information to monitor progress
  * Fix orphaned attachments if bad revision number is provided</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1630497600">- Version 1.9.7
  * New configuration option "DicomAlwaysAllowMove" to disable verification of
  the remote modality in C-MOVE SCP
  * API version upgraded to 15
  * Added "Level" option to POST /tools/bulk-modify
  * Added missing OpenAPI documentation of "KeepSource" in ".../modify" and ".../anonymize"
  * Added file CITATION.cff
  * Linux Standard Base (LSB) builds of Orthanc can load non-LSB builds of plugins
  * Fix upload of ZIP archives containing a DICOMDIR file
  * Fix computation of the estimated time of arrival in jobs
  * Support detection of windowing and rescale in Philips multiframe images</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1632657600">- Test for SharedLibrary.Basic disabled (fails with new glibc)</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634126400">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * orthanc.service</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648209600">- version 1.10.1
  * for detailed changelog see NEWS</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1651838400">- switched source urls to https</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1652184000">- version 1.11.0
  * new API version 1.7
  * new configuration parameter
  * for detailed changelog see NEWS</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664280000">- version 1.11.2
  * Added support for RGBA64 images in tools/create-dicom and /preview
  * New configuration "MaximumStorageMode" to choose between recyling of
    old patients (default behavior) and rejection of new incoming data when
    the MaximumStorageSize has been reached.
  * New sample plugin: "DelayedDeletion" that will delete files from disk
    asynchronously to speed up deletion of large studies.
  * Lua: new "SetHttpTimeout" function
  * Lua: new "OnHeartBeat" callback called at regular interval provided that
    you have configured "LuaHeartBeatPeriod" &gt; 0.
  * "ExtraMainDicomTags" configuration now accepts Dicom Sequences.  Sequences are
    stored in a dedicated new metadata "MainDicomSequences".  This should improve
    DicomWeb QIDO-RS and avoid warnings like "Accessing Dicom tags from storage when
    accessing series : 0040,0275".
    Main dicom sequences can now be returned in "MainDicomTags" and in "RequestedTags".
  * Fix the "Never" option of the "StorageAccessOnFind" that was sill accessing
    files (bug introduced in 1.11.0).
  * Fix the Storage Cache for compressed files (bug introduced in 1.11.1).
  * Fix the storage cache that was not used by the Plugin SDK.  This fixes the
    DicomWeb plugin "/rendered" route performance issues.
  * DelayedDeletion plugin: Fix leaking of symbols
  * SQLite now closes and deletes WAL and SHM files on exit.  This should improve
    handling of SQLite DB over network drives.
  * Fix static compilation of boost 1.69 on Ubuntu 22.04
  * Upgraded dependencies for static builds:
  - boost 1.80.0
  - dcmtk 3.6.7  (fixes CVE-2022-2119 and CVE-2022-2120)
  - openssl 3.0.5
  * Housekeeper plugin: Fix resume of previous processing
  * Added missing MOVEPatientRootQueryRetrieveInformationModel in
    DicomControlUserConnection::SetupPresentationContexts()
  * Improved HttpClient error logging (add method + url)
  * API version upgraded to 18
  * /system is now reporting "DatabaseServerIdentifier"
  * Added an Asynchronous mode to /modalities/../move.
  * "RequestedTags" option can now include DICOM sequences.
  * New function in the SDK: "OrthancPluginGetDatabaseServerIdentifier"
  * DicomMap::ParseMainDicomTags has been deprecated -&gt; retrieve "full" tags
    and use DicomMap::FromDicomAsJson instead</changelog>
</package>
<package pkgid="347766ff92da7d083926dda51faf0321e9a3fb18ddcb2cf5c9714c72c6abfd53" name="orthanc-source" arch="ppc64le">
  <version epoch="0" ver="1.11.2" rel="bp154.2.3.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1598356800">- Version 1.7.3
  * API version upgraded to 8
  * "/peers/{id}/store": New option "Compress" to compress DICOM data using gzip
  * "OrthancPeerStore" jobs now report the transmitted size in their public content
  * New config option "Worklist.LimitAnswers" for the sample modality worklist plugin
  * Add missing tag "Retrieve AE Title (0008,0054)" in C-FIND SCP responses
  * Fix DICOM SCP filters if some query tag has &gt; 256 characters (list of UIDs matching)
  * "/series/.../ordered-slices" supports spaces in Image Position/Orientation Patient tags
  * Fix possible crash in HttpClient if sending multipart body (can occur in STOW-RS)
  * Support receiving multipart messages larger than 2GB in the embedded HTTP server</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1600430400">- Version 1.7.4
  * New configuration options to enable HTTP peers identification through certificates:
  "SslVerifyPeers" and "SslTrustedClientCertificates"
  * New configuration option "SyncStorageArea" to immediately commit the files onto the disk
  (through fsync()), so as to avoid discrepencies between DB and filesystem in case of hard
  shutdown of the machine running Orthanc. This slows down adding new files into Orthanc.
  * Underscores are now allowed in peers/modalities symbolic names
  * Fix compatibility with C-MOVE SCU requests issued by Ambra
  * Fix transcoding in C-MOVE SCP, in the case where "SynchronousCMove" is "true"
  * When checking DICOM allowed methods, if there are multiple modalities with the same AET,
  differentiate them from the calling IP
  * Enable the access to raw frames in Philips ELSCINT1 proprietary compression
  * Support empty key passwords when using HTTP client certificates
  * Fix handling of "ModalitiesInStudy" (0008,0061) in C-FIND and "/tools/find"</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1602849600">- version 1.8.0
  * Serving the content of Orthanc as a WebDAV network share
  * New config options: "WebDavEnabled", "WebDavDeleteAllowed" and "WebDavUploadAllowed"</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1607428800">- Version 1.8.1
  * adaption to new systemd-macros (OBS)
  * New sample tool "OrthancImport.py" to easily import compressed archives (ZIP) into Orthanc
  * Logging categories (cf. command-line options starting with "--verbose-" and "--trace=")
  * New command-line option "--trace-dicom" to access full debug information from DCMTK
  * New config option "DicomEchoChecksFind" to automatically complement C-GET SCU with C-FIND SCU
  * API version upgraded to 9
  * "/tools/dicom-echo": Execute C-Echo SCU to a modality that is not registered in "/modalities"
  * "/tools/log-level-*": Dynamically access and/or change the verbosity of logging categories
  * "/peers/{id}/configuration": Get the configuration of one peer (cf. "/peers?expand")
  * "/modalities/{id}/configuration": Get the configuration of one modality (cf. "/modalities?expand")
  * "/tools/dicom-echo" and "/modalities/{id}/echo" now accept the field "CheckFind" in their JSON
  body to complement C-GET SCU with C-FIND SCU ("DicomEchoChecksFind" on a per-connection basis)
  * Archive/media jobs report the size of the created ZIP file in content field "ArchiveSizeMB"
  * New function in the SDK: OrthancPluginGenerateRestApiAuthorizationToken()
  * C-GET SCP: Fix responses and handling of cancel
  * Fix decoding sequence if "BuiltinDecoderTranscoderOrder" is "Before"
  * Fix keep-alive in the embedded HTTP server by setting the "Keep-Alive" HTTP header
  * Fix access to videos as a single raw frame (feature broken since Orthanc 1.6.0)
  * REST API now returns 404 error if deleting an inexistent peer or modality
  * Improved forward ABI compatibility of Orthanc Framework (notably, no inline methods anymore)
  * Upgraded dependencies for static builds (notably on Windows and LSB):
  - civetweb 1.13</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1608379200">- Version 1.8.2
  * ZIP archives containing DICOM files can be uploaded using WebDAV
  * New config option "MallocArenaMax" to control memory usage on GNU/Linux
  * Explicit error log if trying to load a 32bit (resp. 64bit) plugin into
  a 64bit (resp. 32bit) version of Orthanc
  * New configuration options contributed by Varian Medical Systems:
  - "DeidentifyLogs" to remove patient identification from the logs (C-GET, C-MOVE, C-FIND)
  - "DeidentifyLogsDicomVersion" to specify the deidentification rules for the logs
  - "OrthancExplorerEnabled" to enable/disable the Orthanc Explorer Web user interface
  - "SslMinimumProtocolVersion" to set the minimal SSL protocol version (now defaults to SSL 1.2)
  - "SslCiphersAccepted" to set the accepted ciphers over SSL (now defaults to FIPS 140-2)
  * New configuration options related to ingest transcoding:
  - "IngestTranscodingOfUncompressed" to control whether uncompressed transfer syntaxes are transcoded
  - "IngestTranscodingOfCompressed" to control whether compressed transfer syntaxes are transcoded
  * "/instances" can be used to import ZIP archives provided in the POST body
  * Allow concurrency on the OrthancPluginRegisterIncomingHttpRequestFilter() callbacks
  * Allow empty request body in "/modalities/{id}/echo"
  * If meta-header is missing, best-effort to extract "TransferSyntax" in "/instances/{id}/metadata"</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1609329600">- Workaround for boo#1180359</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1611921600">- Version 1.9.0
  * Support of DICOM TLS
  * New configuration options related to DICOM networking:
  - "DicomTlsEnabled" to enable DICOM TLS in Orthanc SCP
  - "DicomTlsCertificate" to provide the TLS certificate to be used in both Orthanc SCU and SCP
  - "DicomTlsPrivateKey" to provide the private key of the TLS certificate
  - "DicomTlsTrustedCertificates" to provide the list of TLS certificates to be trusted by Orthanc
  - "UseDicomTls" in "DicomModalities" to enable DICOM TLS in outgoing SCU on a per-modality basis
  - "MaximumPduLength" to tune the maximum PDU length (Protocol Data Unit)
  - "LocalAet" in "DicomModalities" to overwrite global "DicomAet" for SCU on a per-modality basis
  - "AcceptedTransferSyntaxes" to set the transfer syntax UIDs accepted by Orthanc C-STORE SCP
  - "H265TransferSyntaxAccepted" to enable/disable all the transfer syntaxes related to H.265
  - "DicomAlwaysAllowFind" to disable verification of the remote modality in C-FIND SCP
  - "DicomAlwaysAllowGet" to disable verification of the remote modality in C-GET SCP
  * New configuration option: "DicomScuPreferredTransferSyntax" to control transcoding in C-STORE SCU
  * New command-line option: "--openapi" to write the OpenAPI documentation of the REST API to a file
  * New metadata automatically computed at the series level: "RemoteAET"
  * The DICOM meta-header and the transfer syntax are displayed at the "Instance" level
  * API version upgraded to 10
  * "/tools/accepted-transfer-syntaxes": Get/set transfer syntaxes accepted by Orthanc C-STORE SCP
  * "/tools/unknown-sop-class-accepted": Get/set whether C-STORE SCP accepts unknown SOP class UID
  * "/modalities/{...}/query": New string argument "LocalAet"
  * "/tools/create-dicom": New flag "Force" to bypass consistency checks for the DICOM tags
  * BREAKING CHANGE: All the Lua callbacks "IsXXXTransferSyntaxAccepted()" and
  "IsUnknownSopClassAccepted()" have been removed
  * New functions in the SDK:
  - OrthancPluginCreateMemoryBuffer64()
  - OrthancPluginRegisterStorageArea2()
  - OrthancPluginCreateDicom2()
  * Refactoring and improvements to the cache of DICOM files (it can now hold many files)
  * New Prometheus metrics "orthanc_dicom_cache_count" and "orthanc_dicom_cache_size"
  * Fix upload of multiple DICOM files using one single POST call to "multipart/form-data"
  Could be the final resolution of issue #21 (DICOM files missing after uploading with Firefox)
  * Partial fix of issue #48 (Windows service not stopped properly), cf. comments 4 and 5
  * Explicitly use little-endian to encode uncompressed file size with zlib compression
  * Upgraded dependencies for static builds (notably on Windows):
  - dcmtk 3.6.6
  - jsoncpp 1.9.4</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1614254400">- version 1.9.1
  * The "dicom-as-json" attachments are not explicitly stored anymore to improve performance
  * If the storage area doesn't support range reading, or if "StorageCompression"
  is enabled, a new type of attachment "dicom-until-pixel-data" is generated
  * New metadata automatically computed at the instance level: "PixelDataOffset"
  * New configuration option related to networking:
  - "Timeout" in "DicomModalities" to set DICOM SCU timeout on a per-modality basis
  - "Timeout" in "OrthancPeers" to set HTTP client timeout on a per-peer basis
  * API version upgraded to 11
  * BREAKING CHANGES:
  - External applications should not call "/instances/.../attachments/dicom-as-json" anymore,
    and should use "/instances/.../tags" instead
  - "/instances/.../tags" route does not report the tags after "Pixel Data" (7fe0,0010) anymore
  * "/peers/{id}/store-straight": Synchronously send the DICOM instance in POST body to the peer
  * New arguments in the REST API:
  - "Timeout" in "/modalities/.../query"
  - "Timeout" in "/modalities/.../storage-commitment"
  - "Timeout" in "/queries/.../answers/.../query-{studies|series|instances}"
  * New value in enumeration: OrthancPluginDicomToJsonFlags_StopAfterPixelData
  * New value in enumeration: OrthancPluginDicomToJsonFlags_SkipGroupLengths
  * Improved precision of floating-point numbers in DICOM-as-JSON and DICOM summary
  * Optimization in C-STORE SCP by avoiding an unnecessary DICOM parsing
  * Fix build on big-endian architectures
  * Handle public tags with "UN" value representation and containing a string (cf. DICOM CP 246)
  * The numbering of sequences in Orthanc Explorer now uses the DICOM convention (starts at 1)
  * Possibility to generate a static library containing the Orthanc Framework</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1620561600">- Version 1.9.3
  * New configuration option: "DicomTlsRemoteCertificateRequired" to allow secure DICOM TLS
  connections without certificate
  * "ETag" headers for metadata and attachments now allow strong comparison (MD5 is included)
  * New CMake option: "ORTHANC_LUA_VERSION" to use a specific version of system-wide Lua
  * Fix the lifetime of temporary files associated with jobs that create ZIP archive/media:
  - In synchronous mode, their number could grow up to "JobsHistorySize" in Orthanc &lt;= 1.9.2
  - In asynchronous mode, the temporary files are removed as soon as their job gets canceled
  * Fix regression in the handling of "DicomCheckModalityHost" configuration option
  introduced by changeset 4182 in Orthanc 1.7.4
  * Reduced memory consumption of "OrthancPluginHttpClient()", "OrthancPluginHttpClient2()" and
  "OrthancPluginCallPeerApi()" on POST/PUT if chunked transfer is disabled
  * Fix issue #195 (No need for BulkDataURI when Data Element is empty)
- from version 1.9.2:
  * New configuration options related to multiple readers/writers:
  - "DatabaseServerIdentifier" identifies the server in the DB among a pool of Orthanc servers
  - "CheckRevisions" to protect against concurrent modifications of metadata and attachments
  * API version upgraded to 12
  * "/system" reports the value of the "CheckRevisions" global option
  * "/.../{id}/metadata/{name}" and "/.../{id}/attachments/{name}/..." URIs handle the
  HTTP headers "If-Match", "If-None-Match" and "ETag" to cope with revisions
  * New function in the SDK: OrthancPluginCallRestApi()
  * Full refactoring of the database plugin SDK to handle multiple readers/writers,
  which notably implies the handling of retries in the case of collisions
  * Use the local timezone for query/retrieve in the Orthanc Explorer interface (was UTC before)
  * Fix "OrthancServer/Resources/Samples/Python/Replicate.py" for Python 3.x
  * Fix issue #83 (ServerIndex shall implement retries for DB temporary errors)
  * Upgraded dependencies for static builds (notably on Windows and LSB):
  - civetweb 1.14
  - openssl 1.1.1k</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1624536000">- version 1.9.4
  * Orthanc now anonymizes according to Basic Profile of PS 3.15-2021b Table E.1-1
  * New configuration options:
  - "ExternalDictionaries" to load external DICOM dictionaries (useful for DICONDE)
  - "SynchronousZipStream" to disable streaming of ZIP
  * Orthanc Explorer supports the DICONDE dictionary
  * API version upgraded to 13
  * New routes to handle groups of multiple, unrelated DICOM resources at once:
  - "/tools/bulk-anonymize" to anonymize a set of resources
  - "/tools/bulk-content" to get the content of a set of resources
  - "/tools/bulk-delete" to delete a set of resources
  - "/tools/bulk-modify" to modify a set of resources
  * ZIP archive/media generated in synchronous mode are now streamed by default
  * "Replace" tags in "/modify" and "/anonymize" now supports value representation AT
  * "/jobs/..." has new field "ErrorDetails" to help identify the cause of an error
  * "Replace", "Keep" and "Remove" in "/modify" and "/anonymize" accept paths to subsequences
  using the syntax of the dcmodify command-line tool (wildcards are supported as well)
  * Added "short", "simplify" and/or "full" options to control the format of DICOM tags in:
  - GET /patients, GET /studies, GET /series, GET /instances (together with "&amp;expand")
  - GET /patients/{id}, GET /studies/{id}, GET /series/{id}, GET /instances/{id}
  - GET /patients/{id}/studies, GET /patients/{id}/series, GET /patients/{id}/instances
  - GET /studies/{id}/patient, GET /studies/{id}/series, GET /studies/{id}/instances
  - GET /series/{id}/patient, GET /series/{id}/study, GET /series/{id}/instances
  - GET /instances/{id}/patient, GET /instances/{id}/study, GET /instances/{id}/series
  - GET /patients/{id}/instances-tags, GET /patients/{id}/shared-tags
  - GET /studies/{id}/instances-tags, GET /series/{id}/shared-tags
  - GET /series/{id}/instances-tags, GET /studies/{id}/shared-tags
  - GET /patients/{id}/module, GET /patients/{id}/patient-module
  - GET /series/{id}/module, GET /studies/{id}/module, GET /instances/{id}/module
  - POST /tools/find
  * "/studies/{id}/split" accepts "Instances" parameter to split instances instead of series
  * "/studies/{id}/merge" accepts instances inside its "Resources" parameter
  * Full support of hierarchical relationships in tags whose VR is UI during anonymization
  * C-MOVE SCP: added possible DIMSE status "Sub-operations Complete - One or more Failures"
  * Fix issue #146 (Update Anonyization to 2019c) - was actually updated to 2021b
  * Upgraded dependencies for static builds (notably on Windows):
  - curl 7.77.0</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1626004800">- version 1.9.5
  * Anonymization is applied recursively to nested tags
  * API version upgraded to 14
  * Added "Short", "Simplify" and/or "Full" options to control the format of DICOM tags in:
  - POST /modalities/{id}/find-worklist
  - POST /queries/{id}/answers/{index}/retrieve
  - POST /queries/{id}/retrieve
  * Fix broken "Do lookup" button in Orthanc Explorer
  * Error code and description of jobs are now saved into the Orthanc database</changelog>
  <changelog author="Steve Kowalik &lt;steven.kowalik@suse.com&gt;" date="1626696000">- Remove executable bits from Python scripts when creating the source
  tree for the -source package to stop it requiring /usr/bin/python</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1626955200">- version 1.9.6
  * In lookup and query/retrieve, possibility to provide a specific study date
  * Clicking on "Send to remote modality" displays the job information to monitor progress
  * Fix orphaned attachments if bad revision number is provided</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1630497600">- Version 1.9.7
  * New configuration option "DicomAlwaysAllowMove" to disable verification of
  the remote modality in C-MOVE SCP
  * API version upgraded to 15
  * Added "Level" option to POST /tools/bulk-modify
  * Added missing OpenAPI documentation of "KeepSource" in ".../modify" and ".../anonymize"
  * Added file CITATION.cff
  * Linux Standard Base (LSB) builds of Orthanc can load non-LSB builds of plugins
  * Fix upload of ZIP archives containing a DICOMDIR file
  * Fix computation of the estimated time of arrival in jobs
  * Support detection of windowing and rescale in Philips multiframe images</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1632657600">- Test for SharedLibrary.Basic disabled (fails with new glibc)</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634126400">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * orthanc.service</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648209600">- version 1.10.1
  * for detailed changelog see NEWS</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1651838400">- switched source urls to https</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1652184000">- version 1.11.0
  * new API version 1.7
  * new configuration parameter
  * for detailed changelog see NEWS</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664280000">- version 1.11.2
  * Added support for RGBA64 images in tools/create-dicom and /preview
  * New configuration "MaximumStorageMode" to choose between recyling of
    old patients (default behavior) and rejection of new incoming data when
    the MaximumStorageSize has been reached.
  * New sample plugin: "DelayedDeletion" that will delete files from disk
    asynchronously to speed up deletion of large studies.
  * Lua: new "SetHttpTimeout" function
  * Lua: new "OnHeartBeat" callback called at regular interval provided that
    you have configured "LuaHeartBeatPeriod" &gt; 0.
  * "ExtraMainDicomTags" configuration now accepts Dicom Sequences.  Sequences are
    stored in a dedicated new metadata "MainDicomSequences".  This should improve
    DicomWeb QIDO-RS and avoid warnings like "Accessing Dicom tags from storage when
    accessing series : 0040,0275".
    Main dicom sequences can now be returned in "MainDicomTags" and in "RequestedTags".
  * Fix the "Never" option of the "StorageAccessOnFind" that was sill accessing
    files (bug introduced in 1.11.0).
  * Fix the Storage Cache for compressed files (bug introduced in 1.11.1).
  * Fix the storage cache that was not used by the Plugin SDK.  This fixes the
    DicomWeb plugin "/rendered" route performance issues.
  * DelayedDeletion plugin: Fix leaking of symbols
  * SQLite now closes and deletes WAL and SHM files on exit.  This should improve
    handling of SQLite DB over network drives.
  * Fix static compilation of boost 1.69 on Ubuntu 22.04
  * Upgraded dependencies for static builds:
  - boost 1.80.0
  - dcmtk 3.6.7  (fixes CVE-2022-2119 and CVE-2022-2120)
  - openssl 3.0.5
  * Housekeeper plugin: Fix resume of previous processing
  * Added missing MOVEPatientRootQueryRetrieveInformationModel in
    DicomControlUserConnection::SetupPresentationContexts()
  * Improved HttpClient error logging (add method + url)
  * API version upgraded to 18
  * /system is now reporting "DatabaseServerIdentifier"
  * Added an Asynchronous mode to /modalities/../move.
  * "RequestedTags" option can now include DICOM sequences.
  * New function in the SDK: "OrthancPluginGetDatabaseServerIdentifier"
  * DicomMap::ParseMainDicomTags has been deprecated -&gt; retrieve "full" tags
    and use DicomMap::FromDicomAsJson instead</changelog>
</package>
<package pkgid="72250a60eec2b5d59fe759aa7135673d9e0b40e53dc6f91ec7a9b5311be0ae96" name="orthanc-source" arch="x86_64">
  <version epoch="0" ver="1.11.2" rel="bp154.2.3.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1598356800">- Version 1.7.3
  * API version upgraded to 8
  * "/peers/{id}/store": New option "Compress" to compress DICOM data using gzip
  * "OrthancPeerStore" jobs now report the transmitted size in their public content
  * New config option "Worklist.LimitAnswers" for the sample modality worklist plugin
  * Add missing tag "Retrieve AE Title (0008,0054)" in C-FIND SCP responses
  * Fix DICOM SCP filters if some query tag has &gt; 256 characters (list of UIDs matching)
  * "/series/.../ordered-slices" supports spaces in Image Position/Orientation Patient tags
  * Fix possible crash in HttpClient if sending multipart body (can occur in STOW-RS)
  * Support receiving multipart messages larger than 2GB in the embedded HTTP server</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1600430400">- Version 1.7.4
  * New configuration options to enable HTTP peers identification through certificates:
  "SslVerifyPeers" and "SslTrustedClientCertificates"
  * New configuration option "SyncStorageArea" to immediately commit the files onto the disk
  (through fsync()), so as to avoid discrepencies between DB and filesystem in case of hard
  shutdown of the machine running Orthanc. This slows down adding new files into Orthanc.
  * Underscores are now allowed in peers/modalities symbolic names
  * Fix compatibility with C-MOVE SCU requests issued by Ambra
  * Fix transcoding in C-MOVE SCP, in the case where "SynchronousCMove" is "true"
  * When checking DICOM allowed methods, if there are multiple modalities with the same AET,
  differentiate them from the calling IP
  * Enable the access to raw frames in Philips ELSCINT1 proprietary compression
  * Support empty key passwords when using HTTP client certificates
  * Fix handling of "ModalitiesInStudy" (0008,0061) in C-FIND and "/tools/find"</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1602849600">- version 1.8.0
  * Serving the content of Orthanc as a WebDAV network share
  * New config options: "WebDavEnabled", "WebDavDeleteAllowed" and "WebDavUploadAllowed"</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1607428800">- Version 1.8.1
  * adaption to new systemd-macros (OBS)
  * New sample tool "OrthancImport.py" to easily import compressed archives (ZIP) into Orthanc
  * Logging categories (cf. command-line options starting with "--verbose-" and "--trace=")
  * New command-line option "--trace-dicom" to access full debug information from DCMTK
  * New config option "DicomEchoChecksFind" to automatically complement C-GET SCU with C-FIND SCU
  * API version upgraded to 9
  * "/tools/dicom-echo": Execute C-Echo SCU to a modality that is not registered in "/modalities"
  * "/tools/log-level-*": Dynamically access and/or change the verbosity of logging categories
  * "/peers/{id}/configuration": Get the configuration of one peer (cf. "/peers?expand")
  * "/modalities/{id}/configuration": Get the configuration of one modality (cf. "/modalities?expand")
  * "/tools/dicom-echo" and "/modalities/{id}/echo" now accept the field "CheckFind" in their JSON
  body to complement C-GET SCU with C-FIND SCU ("DicomEchoChecksFind" on a per-connection basis)
  * Archive/media jobs report the size of the created ZIP file in content field "ArchiveSizeMB"
  * New function in the SDK: OrthancPluginGenerateRestApiAuthorizationToken()
  * C-GET SCP: Fix responses and handling of cancel
  * Fix decoding sequence if "BuiltinDecoderTranscoderOrder" is "Before"
  * Fix keep-alive in the embedded HTTP server by setting the "Keep-Alive" HTTP header
  * Fix access to videos as a single raw frame (feature broken since Orthanc 1.6.0)
  * REST API now returns 404 error if deleting an inexistent peer or modality
  * Improved forward ABI compatibility of Orthanc Framework (notably, no inline methods anymore)
  * Upgraded dependencies for static builds (notably on Windows and LSB):
  - civetweb 1.13</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1608379200">- Version 1.8.2
  * ZIP archives containing DICOM files can be uploaded using WebDAV
  * New config option "MallocArenaMax" to control memory usage on GNU/Linux
  * Explicit error log if trying to load a 32bit (resp. 64bit) plugin into
  a 64bit (resp. 32bit) version of Orthanc
  * New configuration options contributed by Varian Medical Systems:
  - "DeidentifyLogs" to remove patient identification from the logs (C-GET, C-MOVE, C-FIND)
  - "DeidentifyLogsDicomVersion" to specify the deidentification rules for the logs
  - "OrthancExplorerEnabled" to enable/disable the Orthanc Explorer Web user interface
  - "SslMinimumProtocolVersion" to set the minimal SSL protocol version (now defaults to SSL 1.2)
  - "SslCiphersAccepted" to set the accepted ciphers over SSL (now defaults to FIPS 140-2)
  * New configuration options related to ingest transcoding:
  - "IngestTranscodingOfUncompressed" to control whether uncompressed transfer syntaxes are transcoded
  - "IngestTranscodingOfCompressed" to control whether compressed transfer syntaxes are transcoded
  * "/instances" can be used to import ZIP archives provided in the POST body
  * Allow concurrency on the OrthancPluginRegisterIncomingHttpRequestFilter() callbacks
  * Allow empty request body in "/modalities/{id}/echo"
  * If meta-header is missing, best-effort to extract "TransferSyntax" in "/instances/{id}/metadata"</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1609329600">- Workaround for boo#1180359</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1611921600">- Version 1.9.0
  * Support of DICOM TLS
  * New configuration options related to DICOM networking:
  - "DicomTlsEnabled" to enable DICOM TLS in Orthanc SCP
  - "DicomTlsCertificate" to provide the TLS certificate to be used in both Orthanc SCU and SCP
  - "DicomTlsPrivateKey" to provide the private key of the TLS certificate
  - "DicomTlsTrustedCertificates" to provide the list of TLS certificates to be trusted by Orthanc
  - "UseDicomTls" in "DicomModalities" to enable DICOM TLS in outgoing SCU on a per-modality basis
  - "MaximumPduLength" to tune the maximum PDU length (Protocol Data Unit)
  - "LocalAet" in "DicomModalities" to overwrite global "DicomAet" for SCU on a per-modality basis
  - "AcceptedTransferSyntaxes" to set the transfer syntax UIDs accepted by Orthanc C-STORE SCP
  - "H265TransferSyntaxAccepted" to enable/disable all the transfer syntaxes related to H.265
  - "DicomAlwaysAllowFind" to disable verification of the remote modality in C-FIND SCP
  - "DicomAlwaysAllowGet" to disable verification of the remote modality in C-GET SCP
  * New configuration option: "DicomScuPreferredTransferSyntax" to control transcoding in C-STORE SCU
  * New command-line option: "--openapi" to write the OpenAPI documentation of the REST API to a file
  * New metadata automatically computed at the series level: "RemoteAET"
  * The DICOM meta-header and the transfer syntax are displayed at the "Instance" level
  * API version upgraded to 10
  * "/tools/accepted-transfer-syntaxes": Get/set transfer syntaxes accepted by Orthanc C-STORE SCP
  * "/tools/unknown-sop-class-accepted": Get/set whether C-STORE SCP accepts unknown SOP class UID
  * "/modalities/{...}/query": New string argument "LocalAet"
  * "/tools/create-dicom": New flag "Force" to bypass consistency checks for the DICOM tags
  * BREAKING CHANGE: All the Lua callbacks "IsXXXTransferSyntaxAccepted()" and
  "IsUnknownSopClassAccepted()" have been removed
  * New functions in the SDK:
  - OrthancPluginCreateMemoryBuffer64()
  - OrthancPluginRegisterStorageArea2()
  - OrthancPluginCreateDicom2()
  * Refactoring and improvements to the cache of DICOM files (it can now hold many files)
  * New Prometheus metrics "orthanc_dicom_cache_count" and "orthanc_dicom_cache_size"
  * Fix upload of multiple DICOM files using one single POST call to "multipart/form-data"
  Could be the final resolution of issue #21 (DICOM files missing after uploading with Firefox)
  * Partial fix of issue #48 (Windows service not stopped properly), cf. comments 4 and 5
  * Explicitly use little-endian to encode uncompressed file size with zlib compression
  * Upgraded dependencies for static builds (notably on Windows):
  - dcmtk 3.6.6
  - jsoncpp 1.9.4</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1614254400">- version 1.9.1
  * The "dicom-as-json" attachments are not explicitly stored anymore to improve performance
  * If the storage area doesn't support range reading, or if "StorageCompression"
  is enabled, a new type of attachment "dicom-until-pixel-data" is generated
  * New metadata automatically computed at the instance level: "PixelDataOffset"
  * New configuration option related to networking:
  - "Timeout" in "DicomModalities" to set DICOM SCU timeout on a per-modality basis
  - "Timeout" in "OrthancPeers" to set HTTP client timeout on a per-peer basis
  * API version upgraded to 11
  * BREAKING CHANGES:
  - External applications should not call "/instances/.../attachments/dicom-as-json" anymore,
    and should use "/instances/.../tags" instead
  - "/instances/.../tags" route does not report the tags after "Pixel Data" (7fe0,0010) anymore
  * "/peers/{id}/store-straight": Synchronously send the DICOM instance in POST body to the peer
  * New arguments in the REST API:
  - "Timeout" in "/modalities/.../query"
  - "Timeout" in "/modalities/.../storage-commitment"
  - "Timeout" in "/queries/.../answers/.../query-{studies|series|instances}"
  * New value in enumeration: OrthancPluginDicomToJsonFlags_StopAfterPixelData
  * New value in enumeration: OrthancPluginDicomToJsonFlags_SkipGroupLengths
  * Improved precision of floating-point numbers in DICOM-as-JSON and DICOM summary
  * Optimization in C-STORE SCP by avoiding an unnecessary DICOM parsing
  * Fix build on big-endian architectures
  * Handle public tags with "UN" value representation and containing a string (cf. DICOM CP 246)
  * The numbering of sequences in Orthanc Explorer now uses the DICOM convention (starts at 1)
  * Possibility to generate a static library containing the Orthanc Framework</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1620561600">- Version 1.9.3
  * New configuration option: "DicomTlsRemoteCertificateRequired" to allow secure DICOM TLS
  connections without certificate
  * "ETag" headers for metadata and attachments now allow strong comparison (MD5 is included)
  * New CMake option: "ORTHANC_LUA_VERSION" to use a specific version of system-wide Lua
  * Fix the lifetime of temporary files associated with jobs that create ZIP archive/media:
  - In synchronous mode, their number could grow up to "JobsHistorySize" in Orthanc &lt;= 1.9.2
  - In asynchronous mode, the temporary files are removed as soon as their job gets canceled
  * Fix regression in the handling of "DicomCheckModalityHost" configuration option
  introduced by changeset 4182 in Orthanc 1.7.4
  * Reduced memory consumption of "OrthancPluginHttpClient()", "OrthancPluginHttpClient2()" and
  "OrthancPluginCallPeerApi()" on POST/PUT if chunked transfer is disabled
  * Fix issue #195 (No need for BulkDataURI when Data Element is empty)
- from version 1.9.2:
  * New configuration options related to multiple readers/writers:
  - "DatabaseServerIdentifier" identifies the server in the DB among a pool of Orthanc servers
  - "CheckRevisions" to protect against concurrent modifications of metadata and attachments
  * API version upgraded to 12
  * "/system" reports the value of the "CheckRevisions" global option
  * "/.../{id}/metadata/{name}" and "/.../{id}/attachments/{name}/..." URIs handle the
  HTTP headers "If-Match", "If-None-Match" and "ETag" to cope with revisions
  * New function in the SDK: OrthancPluginCallRestApi()
  * Full refactoring of the database plugin SDK to handle multiple readers/writers,
  which notably implies the handling of retries in the case of collisions
  * Use the local timezone for query/retrieve in the Orthanc Explorer interface (was UTC before)
  * Fix "OrthancServer/Resources/Samples/Python/Replicate.py" for Python 3.x
  * Fix issue #83 (ServerIndex shall implement retries for DB temporary errors)
  * Upgraded dependencies for static builds (notably on Windows and LSB):
  - civetweb 1.14
  - openssl 1.1.1k</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1624536000">- version 1.9.4
  * Orthanc now anonymizes according to Basic Profile of PS 3.15-2021b Table E.1-1
  * New configuration options:
  - "ExternalDictionaries" to load external DICOM dictionaries (useful for DICONDE)
  - "SynchronousZipStream" to disable streaming of ZIP
  * Orthanc Explorer supports the DICONDE dictionary
  * API version upgraded to 13
  * New routes to handle groups of multiple, unrelated DICOM resources at once:
  - "/tools/bulk-anonymize" to anonymize a set of resources
  - "/tools/bulk-content" to get the content of a set of resources
  - "/tools/bulk-delete" to delete a set of resources
  - "/tools/bulk-modify" to modify a set of resources
  * ZIP archive/media generated in synchronous mode are now streamed by default
  * "Replace" tags in "/modify" and "/anonymize" now supports value representation AT
  * "/jobs/..." has new field "ErrorDetails" to help identify the cause of an error
  * "Replace", "Keep" and "Remove" in "/modify" and "/anonymize" accept paths to subsequences
  using the syntax of the dcmodify command-line tool (wildcards are supported as well)
  * Added "short", "simplify" and/or "full" options to control the format of DICOM tags in:
  - GET /patients, GET /studies, GET /series, GET /instances (together with "&amp;expand")
  - GET /patients/{id}, GET /studies/{id}, GET /series/{id}, GET /instances/{id}
  - GET /patients/{id}/studies, GET /patients/{id}/series, GET /patients/{id}/instances
  - GET /studies/{id}/patient, GET /studies/{id}/series, GET /studies/{id}/instances
  - GET /series/{id}/patient, GET /series/{id}/study, GET /series/{id}/instances
  - GET /instances/{id}/patient, GET /instances/{id}/study, GET /instances/{id}/series
  - GET /patients/{id}/instances-tags, GET /patients/{id}/shared-tags
  - GET /studies/{id}/instances-tags, GET /series/{id}/shared-tags
  - GET /series/{id}/instances-tags, GET /studies/{id}/shared-tags
  - GET /patients/{id}/module, GET /patients/{id}/patient-module
  - GET /series/{id}/module, GET /studies/{id}/module, GET /instances/{id}/module
  - POST /tools/find
  * "/studies/{id}/split" accepts "Instances" parameter to split instances instead of series
  * "/studies/{id}/merge" accepts instances inside its "Resources" parameter
  * Full support of hierarchical relationships in tags whose VR is UI during anonymization
  * C-MOVE SCP: added possible DIMSE status "Sub-operations Complete - One or more Failures"
  * Fix issue #146 (Update Anonyization to 2019c) - was actually updated to 2021b
  * Upgraded dependencies for static builds (notably on Windows):
  - curl 7.77.0</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1626004800">- version 1.9.5
  * Anonymization is applied recursively to nested tags
  * API version upgraded to 14
  * Added "Short", "Simplify" and/or "Full" options to control the format of DICOM tags in:
  - POST /modalities/{id}/find-worklist
  - POST /queries/{id}/answers/{index}/retrieve
  - POST /queries/{id}/retrieve
  * Fix broken "Do lookup" button in Orthanc Explorer
  * Error code and description of jobs are now saved into the Orthanc database</changelog>
  <changelog author="Steve Kowalik &lt;steven.kowalik@suse.com&gt;" date="1626696000">- Remove executable bits from Python scripts when creating the source
  tree for the -source package to stop it requiring /usr/bin/python</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1626955200">- version 1.9.6
  * In lookup and query/retrieve, possibility to provide a specific study date
  * Clicking on "Send to remote modality" displays the job information to monitor progress
  * Fix orphaned attachments if bad revision number is provided</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1630497600">- Version 1.9.7
  * New configuration option "DicomAlwaysAllowMove" to disable verification of
  the remote modality in C-MOVE SCP
  * API version upgraded to 15
  * Added "Level" option to POST /tools/bulk-modify
  * Added missing OpenAPI documentation of "KeepSource" in ".../modify" and ".../anonymize"
  * Added file CITATION.cff
  * Linux Standard Base (LSB) builds of Orthanc can load non-LSB builds of plugins
  * Fix upload of ZIP archives containing a DICOMDIR file
  * Fix computation of the estimated time of arrival in jobs
  * Support detection of windowing and rescale in Philips multiframe images</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1632657600">- Test for SharedLibrary.Basic disabled (fails with new glibc)</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634126400">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * orthanc.service</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648209600">- version 1.10.1
  * for detailed changelog see NEWS</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1651838400">- switched source urls to https</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1652184000">- version 1.11.0
  * new API version 1.7
  * new configuration parameter
  * for detailed changelog see NEWS</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664280000">- version 1.11.2
  * Added support for RGBA64 images in tools/create-dicom and /preview
  * New configuration "MaximumStorageMode" to choose between recyling of
    old patients (default behavior) and rejection of new incoming data when
    the MaximumStorageSize has been reached.
  * New sample plugin: "DelayedDeletion" that will delete files from disk
    asynchronously to speed up deletion of large studies.
  * Lua: new "SetHttpTimeout" function
  * Lua: new "OnHeartBeat" callback called at regular interval provided that
    you have configured "LuaHeartBeatPeriod" &gt; 0.
  * "ExtraMainDicomTags" configuration now accepts Dicom Sequences.  Sequences are
    stored in a dedicated new metadata "MainDicomSequences".  This should improve
    DicomWeb QIDO-RS and avoid warnings like "Accessing Dicom tags from storage when
    accessing series : 0040,0275".
    Main dicom sequences can now be returned in "MainDicomTags" and in "RequestedTags".
  * Fix the "Never" option of the "StorageAccessOnFind" that was sill accessing
    files (bug introduced in 1.11.0).
  * Fix the Storage Cache for compressed files (bug introduced in 1.11.1).
  * Fix the storage cache that was not used by the Plugin SDK.  This fixes the
    DicomWeb plugin "/rendered" route performance issues.
  * DelayedDeletion plugin: Fix leaking of symbols
  * SQLite now closes and deletes WAL and SHM files on exit.  This should improve
    handling of SQLite DB over network drives.
  * Fix static compilation of boost 1.69 on Ubuntu 22.04
  * Upgraded dependencies for static builds:
  - boost 1.80.0
  - dcmtk 3.6.7  (fixes CVE-2022-2119 and CVE-2022-2120)
  - openssl 3.0.5
  * Housekeeper plugin: Fix resume of previous processing
  * Added missing MOVEPatientRootQueryRetrieveInformationModel in
    DicomControlUserConnection::SetupPresentationContexts()
  * Improved HttpClient error logging (add method + url)
  * API version upgraded to 18
  * /system is now reporting "DatabaseServerIdentifier"
  * Added an Asynchronous mode to /modalities/../move.
  * "RequestedTags" option can now include DICOM sequences.
  * New function in the SDK: "OrthancPluginGetDatabaseServerIdentifier"
  * DicomMap::ParseMainDicomTags has been deprecated -&gt; retrieve "full" tags
    and use DicomMap::FromDicomAsJson instead</changelog>
</package>
<package pkgid="e9921958d64c2972d05aad6df8436076862780d06f1bd58050c8f96302b0884a" name="orthanc-webviewer" arch="aarch64">
  <version epoch="0" ver="2.8" rel="bp154.2.3.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1573214400">- version 2.5
  Initial build on OBS</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1574942400">- cachmngr.diff fixes missing include</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1587297600">- webjierwer.json &amp; README adapted</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1590580800">- version 2.6
  * cachemngr.diff removed
  * DecodedImageAdapter.cpp removed
  * Move the GDCM decoder out of the Orthanc Web viewer plugin as a
  separate plugin: https://book.orthanc-server.com/plugins/gdcm.html
  * Performance: Replaced "OrthancPluginRegisterRestCallback" by
  "OrthancPluginRegisterRestCallbackNoLock"
  * Authorization tokens passed as url search params in Orthanc Explorer
  are now transmitted to the viewer and included as headers in every
  HTTP request to the Rest API easing the usage of the Authorization
  plugin
  * Upgrade to Orthanc framework to 1.7.0</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1603368000">- switched to orthanc-framework (static orthanc version)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1608033600">- Version 2.7
  * Support of dynamic linking against the system-wide Orthanc framework library
  * Upgrade to Orthanc framework 1.8.1</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1611921600">- framework190.diff added for compatibility with framework 1.9.0</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664280000">- version 2.8
  * Fix XSS inside DICOM in Orthanc Web Viewer (as reported by Stuart
    Kurutac, NCC Group)
  * framework190.diff removed (covered in actual version)</changelog>
</package>
<package pkgid="6aff8372bc48161474d2f5e1adb908dd82b5d668b43cdb36543af9248fc43785" name="orthanc-webviewer" arch="ppc64le">
  <version epoch="0" ver="2.8" rel="bp154.2.3.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1573214400">- version 2.5
  Initial build on OBS</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1574942400">- cachmngr.diff fixes missing include</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1587297600">- webjierwer.json &amp; README adapted</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1590580800">- version 2.6
  * cachemngr.diff removed
  * DecodedImageAdapter.cpp removed
  * Move the GDCM decoder out of the Orthanc Web viewer plugin as a
  separate plugin: https://book.orthanc-server.com/plugins/gdcm.html
  * Performance: Replaced "OrthancPluginRegisterRestCallback" by
  "OrthancPluginRegisterRestCallbackNoLock"
  * Authorization tokens passed as url search params in Orthanc Explorer
  are now transmitted to the viewer and included as headers in every
  HTTP request to the Rest API easing the usage of the Authorization
  plugin
  * Upgrade to Orthanc framework to 1.7.0</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1603368000">- switched to orthanc-framework (static orthanc version)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1608033600">- Version 2.7
  * Support of dynamic linking against the system-wide Orthanc framework library
  * Upgrade to Orthanc framework 1.8.1</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1611921600">- framework190.diff added for compatibility with framework 1.9.0</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664280000">- version 2.8
  * Fix XSS inside DICOM in Orthanc Web Viewer (as reported by Stuart
    Kurutac, NCC Group)
  * framework190.diff removed (covered in actual version)</changelog>
</package>
<package pkgid="ae69f40ae93901122f0af6341b2d0d0b502961cb86ed53310d7ead34caadc076" name="orthanc-webviewer" arch="s390x">
  <version epoch="0" ver="2.8" rel="bp154.2.3.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1573214400">- version 2.5
  Initial build on OBS</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1574942400">- cachmngr.diff fixes missing include</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1587297600">- webjierwer.json &amp; README adapted</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1590580800">- version 2.6
  * cachemngr.diff removed
  * DecodedImageAdapter.cpp removed
  * Move the GDCM decoder out of the Orthanc Web viewer plugin as a
  separate plugin: https://book.orthanc-server.com/plugins/gdcm.html
  * Performance: Replaced "OrthancPluginRegisterRestCallback" by
  "OrthancPluginRegisterRestCallbackNoLock"
  * Authorization tokens passed as url search params in Orthanc Explorer
  are now transmitted to the viewer and included as headers in every
  HTTP request to the Rest API easing the usage of the Authorization
  plugin
  * Upgrade to Orthanc framework to 1.7.0</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1603368000">- switched to orthanc-framework (static orthanc version)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1608033600">- Version 2.7
  * Support of dynamic linking against the system-wide Orthanc framework library
  * Upgrade to Orthanc framework 1.8.1</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1611921600">- framework190.diff added for compatibility with framework 1.9.0</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664280000">- version 2.8
  * Fix XSS inside DICOM in Orthanc Web Viewer (as reported by Stuart
    Kurutac, NCC Group)
  * framework190.diff removed (covered in actual version)</changelog>
</package>
<package pkgid="23f91884ceccb0579fd4ec2a66780b109a394df79aba66c9fe16f80e78d328f3" name="orthanc-webviewer" arch="src">
  <version epoch="0" ver="2.8" rel="bp154.2.3.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1573214400">- version 2.5
  Initial build on OBS</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1574942400">- cachmngr.diff fixes missing include</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1587297600">- webjierwer.json &amp; README adapted</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1590580800">- version 2.6
  * cachemngr.diff removed
  * DecodedImageAdapter.cpp removed
  * Move the GDCM decoder out of the Orthanc Web viewer plugin as a
  separate plugin: https://book.orthanc-server.com/plugins/gdcm.html
  * Performance: Replaced "OrthancPluginRegisterRestCallback" by
  "OrthancPluginRegisterRestCallbackNoLock"
  * Authorization tokens passed as url search params in Orthanc Explorer
  are now transmitted to the viewer and included as headers in every
  HTTP request to the Rest API easing the usage of the Authorization
  plugin
  * Upgrade to Orthanc framework to 1.7.0</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1603368000">- switched to orthanc-framework (static orthanc version)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1608033600">- Version 2.7
  * Support of dynamic linking against the system-wide Orthanc framework library
  * Upgrade to Orthanc framework 1.8.1</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1611921600">- framework190.diff added for compatibility with framework 1.9.0</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664280000">- version 2.8
  * Fix XSS inside DICOM in Orthanc Web Viewer (as reported by Stuart
    Kurutac, NCC Group)
  * framework190.diff removed (covered in actual version)</changelog>
</package>
<package pkgid="975e9fb20fc1d290d8610d02d9f3e88bfcfd4bd85fd51600a17330560ff98cf0" name="orthanc-webviewer" arch="x86_64">
  <version epoch="0" ver="2.8" rel="bp154.2.3.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1573214400">- version 2.5
  Initial build on OBS</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1574942400">- cachmngr.diff fixes missing include</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1587297600">- webjierwer.json &amp; README adapted</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1590580800">- version 2.6
  * cachemngr.diff removed
  * DecodedImageAdapter.cpp removed
  * Move the GDCM decoder out of the Orthanc Web viewer plugin as a
  separate plugin: https://book.orthanc-server.com/plugins/gdcm.html
  * Performance: Replaced "OrthancPluginRegisterRestCallback" by
  "OrthancPluginRegisterRestCallbackNoLock"
  * Authorization tokens passed as url search params in Orthanc Explorer
  are now transmitted to the viewer and included as headers in every
  HTTP request to the Rest API easing the usage of the Authorization
  plugin
  * Upgrade to Orthanc framework to 1.7.0</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1603368000">- switched to orthanc-framework (static orthanc version)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1608033600">- Version 2.7
  * Support of dynamic linking against the system-wide Orthanc framework library
  * Upgrade to Orthanc framework 1.8.1</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1611921600">- framework190.diff added for compatibility with framework 1.9.0</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664280000">- version 2.8
  * Fix XSS inside DICOM in Orthanc Web Viewer (as reported by Stuart
    Kurutac, NCC Group)
  * framework190.diff removed (covered in actual version)</changelog>
</package>
<package pkgid="df912e1f18067eb7d2c9a716d14035af78bb4b72f37df14efe55d3a3db10ab2c" name="os-autoinst" arch="aarch64">
  <version epoch="0" ver="4.6.1639403953.ae94c4bd" rel="bp154.2.3.1"/>
  <changelog author="okurz@suse.com" date="1632225600">- Update to version 4.6.1632209573.6778e83a:
  * mmapi: Allow for longer and more retries after observed failures
  * Fix spelling for svirt xml file
  * Add OPENQA_HOSTNAME to xml metadata</changelog>
  <changelog author="okurz@suse.com" date="1632484800">- Update to version 4.6.1632416043.04a757ed:
  * Remove check for qemu &gt;= 4 in qemu backend</changelog>
  <changelog author="okurz@suse.com" date="1632830400">- Update to version 4.6.1632799442.f77d4e14:
  * Add support for timeout on SSH based commands if possible
  * Allow spaces and comma as delimiter for SCHEDULE variable
  * Flush Python's `stderr` to ensure error messages end up in logs
  * Adapt container path in README in accordance with 16d2b42e0960
  * Use Leap 15.3 container
  * Correctly use QEMU_COMPRESS_QCOW2
  * Use Leap 15.3 as TW's glibc 2.34 breaks CI</changelog>
  <changelog author="okurz@suse.com" date="1633608000">- Update to version 4.6.1633618600.9b31e877:
  * testapi: Remove redundant "use 5.018" replaced by Mojo::Base -strict
  * Use proper perl "signatures" in t
  * t: Output backend state message on error for debugging
  * tools: Use git for faster tidy file cleanup if possible
  * Select sensible default of 5 minutes for SSH command timeout
  * ssh_screen::type_string(): Print error code if write() fails
  * Add unit tests for baseclass::wait_serial
  * Avoid tidy script failures when a filename has spaces
  * Allow running tidy on single files
  * Rename subroutine to clear serial line buffer
  * Set offset in serial output buffer
  * Use consistent abbreviated SPDX license identifiers
  * Speedup, simplify and fix log format with Time::Moment
  * Use consistent "Copyright" header without problematic characters
  * t: Add Test::Warnings to 08-autotest
  * t: Fix "Useless use of a constant"
  * Fully tidy consoles/VNC.pm
  * Use proper perl "signatures" in tools
  * Use proper perl "signatures" in t/data
  * workflows/commit_message_checker.yml: Fix file based prefix
  * Replace all possible occurences of docker with generic version
  * Use simpler 'podman' as drop-in replacement for our checks</changelog>
  <changelog author="okurz@suse.com" date="1634040000">- Update to version 4.6.1634046033.a9024b37:
  * validate_script_output: Fix static timeout when typing command
  * testapi: Fix POD parsing for "distri-&gt;script_run" with escaping
  * Reformat code to current perltidy style
  * tools/tidy: Disable aligning assignments
  * Revert "qemu: fall back to HDDSIZEGB value, even for backing file"
  * Use proper perl "signatures" in OpenQA::Isotovideo
  * Document `imgsearch` script
  * Add test for imgsearch script
  * Add standalone script for using fuzzy image comparison
  * Use proper perl "signatures" in OpenQA
  * Use proper perl "signatures" in OpenQA::Qemu
  * OpenQA: Simplify variable use to avoid typo
  * CI: Allow exception for "git subrepo pull" messages
  * git subrepo pull (merge) external/os-autoinst-common
  * qemu: fall back to HDDSIZEGB value, even for backing file</changelog>
  <changelog author="okurz@suse.com" date="1634299200">- Update to version 4.6.1634214936.d7a89a59:
  * Exclude all currently generated files in git
  * ci: Update codecov-action to v2
  * dist: Bump up timeout scale due to recent OBS observed failures
  * .mergify.yml: Make rules stricter requiring patch coverage</changelog>
  <changelog author="okurz@suse.com" date="1634817600">- Update to version 4.6.1634839907.cef5afdf:
  * t: Cleanup files at the and of tests
  * Exclude more files in .gitignore and remove others
  * Upload coverage data to codecov from the build directory
  * Use signatures in ocr
  * Use signatures in signalblocker
  * Run `codecovbash` in the source directory so it can find source files
  * Fix assignment of `build_dir` for CI build/tests
  * consoles/sshSerial: Make ssh port configurable
  * Use signatures in myjsonrpc
  * CI: Do out-of-source tree build</changelog>
  <changelog author="okurz@suse.com" date="1635422400">- Update to version 4.6.1635464770.6790629e:
  * Add quirk for QEMU &gt;= 5 on PPC
  * t: Add test for qemu_params_ofw
  * backend:qemu: Extract 'qemu_params_ofw'
  * t: Check git status at the end of every test
  * t: Add test for one error handling of myjsonrpc
  * myjsonrpc: Remove redundant next at end of while
  * myjsonrpc: Slightly simplify the code
  * t: Use signatures in 24-myjsonrpc.t
  * myjsonrpc: Provide stack trace on undefined value used as symbol ref</changelog>
  <changelog author="okurz@suse.com" date="1635854400">- Update to version 4.6.1635869279.8838dc09:
  * Fix handling resume command (of developer mode) when not paused
  * Fix passing border_offset parameter to mouse_hide
  * t: Use Test::Warnings in all tests
  * Use proper SPDX identifier in t/15-logging.t as well
  * t: Add Test::Warnings to 30-mmapi.t
  * xt: Add style check to ensure all tests use Test::Most
  * t: Use Test::Most in all tests for consistency
  * Switch from usb-ehci to qemu-xhci
  * Provide more explicit error handling on invalid product dir
  * t: Move subtest in 14-isotovideo which does not need mocked backend
  * t: Extract OpenQA::Isotovideo::Utils specific test</changelog>
  <changelog author="okurz@suse.com" date="1636459200">- Update to version 4.6.1636474618.9c079e07:
  * t: Add test for backend::spvm
  * t: Add test for backend::driver
  * t: Add test for backend::null
  * Simplify backend::baseclass::alive
  * Delete unused exception handling in backend::qemu
  * backend::qemu: Fix bug that qemu alive status was never tested
  * Declare likely obsolete backend::pvm as deprecated
  * Mark only sporadically test covered statements
  * t: Improve Test::More error output context in helper
  * t: Output state file content in case of error where missing
  * Add simple instantiation test of backend::pvm
  * dist: Do not build for i586
  * Fix missing subsecond display in video captions
  * doc: Add missing documentation for NOVALINK variables
  * Update tidy to 20211029</changelog>
  <changelog author="okurz@suse.com" date="1636718400">- Update to version 4.6.1636551041.85fc82ce:
  * Warn about backend errors more prominently in log</changelog>
  <changelog author="okurz@suse.com" date="1636977600">- Update to version 4.6.1636972309.195774f7:
  * dist: Also disable i586 build for -test flavor
  * Extend all backend API function signatures with optional slurpy @
  * Use proper perl "signatures" in backend</changelog>
  <changelog author="okurz@suse.com" date="1637841600">- Update to version 4.6.1637851285.25850081:
  * Fix collecting coverage when invoking `run_all` in `t/08-autotest.t`
  * Avoid redundant code in `t/08-autotest.t`
  * Add test for early stop due to `TESTDEBUG`
  * Improve coding style and simplify `t/08-autotest.t`
  * Log reason for stopping the test execution early
  * Avoid running into TBB's soft limit for the max. number of threads
  * docs: Clearly mention devel:openQA in README
  * Fix working directory for generating HTML coverage report
  * Add unit test for basetest::get_new_serial_output
  * osutils: Do not hide errors of exec call in run() and run_diag()
  * qemu: Don't call chattr with timeout and remove -f arg
  * baseclass: Fix errors in some tests by increasing _CHKSEL_RATE_HITS
  * testapi: Add die_on_timeout option to testapi::script::run()
  * ipmi: Make persistent SOL console enabled by default
  * Ignore the previous tests fail hook output in the search for issues</changelog>
  <changelog author="okurz@suse.com" date="1638100800">- Update to version 4.6.1638007345.ae6eed2a:
  * Update deprecated 'short-form boolean' qemu args
  * imgsearch: disable OpenCV logging
  * qemu: Automatically create swtpm device
  * commands: Use same log format as isotovideo</changelog>
  <changelog author="okurz@suse.com" date="1638273600">- Update to version 4.6.1638289529.0a3f5b98:
  * Fix sporadic error in t/10-virtio_terminal.t
  * t: Reduce test timeout for 31-sshSerial as feasible
  * t: Simplify mocked methods in 31-sshSerial.t
  * t: Add full coverage for 31-sshSerial.t</changelog>
  <changelog author="okurz@suse.com" date="1638532800">- Update to version 4.6.1638454781.7b07525b:
  * xt: Fix style check when called in CI from other directory
  * t: Fix missing Test::Warning check in 36-openqa-namedioselect
  * Remove obsolete consoles::remoteVnc
  * Use proper perl "signatures" in some consoles
  * baseclass: Add test for check_select_rate() function
  * baseclass: Improve error message on "half-open socket"</changelog>
  <changelog author="okurz@suse.com" date="1638705600">- Update to version 4.6.1638540755.a348c6d8:
  * ci: Fix OpenQA::Test::CheckGitStatus exit status
  * ci: Fix exit code of OpenQA::Test::CheckGitStatus
  * basetest.pm: Add signatures for new method
  * Add execution time for failed test modules</changelog>
  <changelog author="okurz@suse.com" date="1638878400">- Update to version 4.6.1638699195.e4430abe:
  * Streamline the use of "|||" log marker with new "modstate" function</changelog>
  <changelog author="okurz@suse.com" date="1639396800">- Update to version 4.6.1639403953.ae94c4bd:
  * mergify: Add more useful checks
  * mergify: Use non-deprecated 'check-succes' instead of 'status-success'
  * mergify: Reduce duplication with YAML anchors
  * mergify: Rely on more reviewers
  * Makefile: Fix build dir when calling make with "-C" itself</changelog>
  <changelog author="Oliver Kurz &lt;okurz@suse.com&gt;" date="1657886400">- Fix os-autoinst-devel opencv dependency for upgrade (boo#1201552)</changelog>
</package>
<package pkgid="a1618cf1d8cee3bbb7ccc3a18504fee48533b2e925dddaffd4c0b9d217169ce2" name="os-autoinst" arch="ppc64le">
  <version epoch="0" ver="4.6.1639403953.ae94c4bd" rel="bp154.2.3.1"/>
  <changelog author="okurz@suse.com" date="1632225600">- Update to version 4.6.1632209573.6778e83a:
  * mmapi: Allow for longer and more retries after observed failures
  * Fix spelling for svirt xml file
  * Add OPENQA_HOSTNAME to xml metadata</changelog>
  <changelog author="okurz@suse.com" date="1632484800">- Update to version 4.6.1632416043.04a757ed:
  * Remove check for qemu &gt;= 4 in qemu backend</changelog>
  <changelog author="okurz@suse.com" date="1632830400">- Update to version 4.6.1632799442.f77d4e14:
  * Add support for timeout on SSH based commands if possible
  * Allow spaces and comma as delimiter for SCHEDULE variable
  * Flush Python's `stderr` to ensure error messages end up in logs
  * Adapt container path in README in accordance with 16d2b42e0960
  * Use Leap 15.3 container
  * Correctly use QEMU_COMPRESS_QCOW2
  * Use Leap 15.3 as TW's glibc 2.34 breaks CI</changelog>
  <changelog author="okurz@suse.com" date="1633608000">- Update to version 4.6.1633618600.9b31e877:
  * testapi: Remove redundant "use 5.018" replaced by Mojo::Base -strict
  * Use proper perl "signatures" in t
  * t: Output backend state message on error for debugging
  * tools: Use git for faster tidy file cleanup if possible
  * Select sensible default of 5 minutes for SSH command timeout
  * ssh_screen::type_string(): Print error code if write() fails
  * Add unit tests for baseclass::wait_serial
  * Avoid tidy script failures when a filename has spaces
  * Allow running tidy on single files
  * Rename subroutine to clear serial line buffer
  * Set offset in serial output buffer
  * Use consistent abbreviated SPDX license identifiers
  * Speedup, simplify and fix log format with Time::Moment
  * Use consistent "Copyright" header without problematic characters
  * t: Add Test::Warnings to 08-autotest
  * t: Fix "Useless use of a constant"
  * Fully tidy consoles/VNC.pm
  * Use proper perl "signatures" in tools
  * Use proper perl "signatures" in t/data
  * workflows/commit_message_checker.yml: Fix file based prefix
  * Replace all possible occurences of docker with generic version
  * Use simpler 'podman' as drop-in replacement for our checks</changelog>
  <changelog author="okurz@suse.com" date="1634040000">- Update to version 4.6.1634046033.a9024b37:
  * validate_script_output: Fix static timeout when typing command
  * testapi: Fix POD parsing for "distri-&gt;script_run" with escaping
  * Reformat code to current perltidy style
  * tools/tidy: Disable aligning assignments
  * Revert "qemu: fall back to HDDSIZEGB value, even for backing file"
  * Use proper perl "signatures" in OpenQA::Isotovideo
  * Document `imgsearch` script
  * Add test for imgsearch script
  * Add standalone script for using fuzzy image comparison
  * Use proper perl "signatures" in OpenQA
  * Use proper perl "signatures" in OpenQA::Qemu
  * OpenQA: Simplify variable use to avoid typo
  * CI: Allow exception for "git subrepo pull" messages
  * git subrepo pull (merge) external/os-autoinst-common
  * qemu: fall back to HDDSIZEGB value, even for backing file</changelog>
  <changelog author="okurz@suse.com" date="1634299200">- Update to version 4.6.1634214936.d7a89a59:
  * Exclude all currently generated files in git
  * ci: Update codecov-action to v2
  * dist: Bump up timeout scale due to recent OBS observed failures
  * .mergify.yml: Make rules stricter requiring patch coverage</changelog>
  <changelog author="okurz@suse.com" date="1634817600">- Update to version 4.6.1634839907.cef5afdf:
  * t: Cleanup files at the and of tests
  * Exclude more files in .gitignore and remove others
  * Upload coverage data to codecov from the build directory
  * Use signatures in ocr
  * Use signatures in signalblocker
  * Run `codecovbash` in the source directory so it can find source files
  * Fix assignment of `build_dir` for CI build/tests
  * consoles/sshSerial: Make ssh port configurable
  * Use signatures in myjsonrpc
  * CI: Do out-of-source tree build</changelog>
  <changelog author="okurz@suse.com" date="1635422400">- Update to version 4.6.1635464770.6790629e:
  * Add quirk for QEMU &gt;= 5 on PPC
  * t: Add test for qemu_params_ofw
  * backend:qemu: Extract 'qemu_params_ofw'
  * t: Check git status at the end of every test
  * t: Add test for one error handling of myjsonrpc
  * myjsonrpc: Remove redundant next at end of while
  * myjsonrpc: Slightly simplify the code
  * t: Use signatures in 24-myjsonrpc.t
  * myjsonrpc: Provide stack trace on undefined value used as symbol ref</changelog>
  <changelog author="okurz@suse.com" date="1635854400">- Update to version 4.6.1635869279.8838dc09:
  * Fix handling resume command (of developer mode) when not paused
  * Fix passing border_offset parameter to mouse_hide
  * t: Use Test::Warnings in all tests
  * Use proper SPDX identifier in t/15-logging.t as well
  * t: Add Test::Warnings to 30-mmapi.t
  * xt: Add style check to ensure all tests use Test::Most
  * t: Use Test::Most in all tests for consistency
  * Switch from usb-ehci to qemu-xhci
  * Provide more explicit error handling on invalid product dir
  * t: Move subtest in 14-isotovideo which does not need mocked backend
  * t: Extract OpenQA::Isotovideo::Utils specific test</changelog>
  <changelog author="okurz@suse.com" date="1636459200">- Update to version 4.6.1636474618.9c079e07:
  * t: Add test for backend::spvm
  * t: Add test for backend::driver
  * t: Add test for backend::null
  * Simplify backend::baseclass::alive
  * Delete unused exception handling in backend::qemu
  * backend::qemu: Fix bug that qemu alive status was never tested
  * Declare likely obsolete backend::pvm as deprecated
  * Mark only sporadically test covered statements
  * t: Improve Test::More error output context in helper
  * t: Output state file content in case of error where missing
  * Add simple instantiation test of backend::pvm
  * dist: Do not build for i586
  * Fix missing subsecond display in video captions
  * doc: Add missing documentation for NOVALINK variables
  * Update tidy to 20211029</changelog>
  <changelog author="okurz@suse.com" date="1636718400">- Update to version 4.6.1636551041.85fc82ce:
  * Warn about backend errors more prominently in log</changelog>
  <changelog author="okurz@suse.com" date="1636977600">- Update to version 4.6.1636972309.195774f7:
  * dist: Also disable i586 build for -test flavor
  * Extend all backend API function signatures with optional slurpy @
  * Use proper perl "signatures" in backend</changelog>
  <changelog author="okurz@suse.com" date="1637841600">- Update to version 4.6.1637851285.25850081:
  * Fix collecting coverage when invoking `run_all` in `t/08-autotest.t`
  * Avoid redundant code in `t/08-autotest.t`
  * Add test for early stop due to `TESTDEBUG`
  * Improve coding style and simplify `t/08-autotest.t`
  * Log reason for stopping the test execution early
  * Avoid running into TBB's soft limit for the max. number of threads
  * docs: Clearly mention devel:openQA in README
  * Fix working directory for generating HTML coverage report
  * Add unit test for basetest::get_new_serial_output
  * osutils: Do not hide errors of exec call in run() and run_diag()
  * qemu: Don't call chattr with timeout and remove -f arg
  * baseclass: Fix errors in some tests by increasing _CHKSEL_RATE_HITS
  * testapi: Add die_on_timeout option to testapi::script::run()
  * ipmi: Make persistent SOL console enabled by default
  * Ignore the previous tests fail hook output in the search for issues</changelog>
  <changelog author="okurz@suse.com" date="1638100800">- Update to version 4.6.1638007345.ae6eed2a:
  * Update deprecated 'short-form boolean' qemu args
  * imgsearch: disable OpenCV logging
  * qemu: Automatically create swtpm device
  * commands: Use same log format as isotovideo</changelog>
  <changelog author="okurz@suse.com" date="1638273600">- Update to version 4.6.1638289529.0a3f5b98:
  * Fix sporadic error in t/10-virtio_terminal.t
  * t: Reduce test timeout for 31-sshSerial as feasible
  * t: Simplify mocked methods in 31-sshSerial.t
  * t: Add full coverage for 31-sshSerial.t</changelog>
  <changelog author="okurz@suse.com" date="1638532800">- Update to version 4.6.1638454781.7b07525b:
  * xt: Fix style check when called in CI from other directory
  * t: Fix missing Test::Warning check in 36-openqa-namedioselect
  * Remove obsolete consoles::remoteVnc
  * Use proper perl "signatures" in some consoles
  * baseclass: Add test for check_select_rate() function
  * baseclass: Improve error message on "half-open socket"</changelog>
  <changelog author="okurz@suse.com" date="1638705600">- Update to version 4.6.1638540755.a348c6d8:
  * ci: Fix OpenQA::Test::CheckGitStatus exit status
  * ci: Fix exit code of OpenQA::Test::CheckGitStatus
  * basetest.pm: Add signatures for new method
  * Add execution time for failed test modules</changelog>
  <changelog author="okurz@suse.com" date="1638878400">- Update to version 4.6.1638699195.e4430abe:
  * Streamline the use of "|||" log marker with new "modstate" function</changelog>
  <changelog author="okurz@suse.com" date="1639396800">- Update to version 4.6.1639403953.ae94c4bd:
  * mergify: Add more useful checks
  * mergify: Use non-deprecated 'check-succes' instead of 'status-success'
  * mergify: Reduce duplication with YAML anchors
  * mergify: Rely on more reviewers
  * Makefile: Fix build dir when calling make with "-C" itself</changelog>
  <changelog author="Oliver Kurz &lt;okurz@suse.com&gt;" date="1657886400">- Fix os-autoinst-devel opencv dependency for upgrade (boo#1201552)</changelog>
</package>
<package pkgid="c1ddecd06a0484ffa7997ba0369a02aa70d41ada7dbbf35754c4f0fac1f02d69" name="os-autoinst" arch="s390x">
  <version epoch="0" ver="4.6.1639403953.ae94c4bd" rel="bp154.2.3.1"/>
  <changelog author="okurz@suse.com" date="1632225600">- Update to version 4.6.1632209573.6778e83a:
  * mmapi: Allow for longer and more retries after observed failures
  * Fix spelling for svirt xml file
  * Add OPENQA_HOSTNAME to xml metadata</changelog>
  <changelog author="okurz@suse.com" date="1632484800">- Update to version 4.6.1632416043.04a757ed:
  * Remove check for qemu &gt;= 4 in qemu backend</changelog>
  <changelog author="okurz@suse.com" date="1632830400">- Update to version 4.6.1632799442.f77d4e14:
  * Add support for timeout on SSH based commands if possible
  * Allow spaces and comma as delimiter for SCHEDULE variable
  * Flush Python's `stderr` to ensure error messages end up in logs
  * Adapt container path in README in accordance with 16d2b42e0960
  * Use Leap 15.3 container
  * Correctly use QEMU_COMPRESS_QCOW2
  * Use Leap 15.3 as TW's glibc 2.34 breaks CI</changelog>
  <changelog author="okurz@suse.com" date="1633608000">- Update to version 4.6.1633618600.9b31e877:
  * testapi: Remove redundant "use 5.018" replaced by Mojo::Base -strict
  * Use proper perl "signatures" in t
  * t: Output backend state message on error for debugging
  * tools: Use git for faster tidy file cleanup if possible
  * Select sensible default of 5 minutes for SSH command timeout
  * ssh_screen::type_string(): Print error code if write() fails
  * Add unit tests for baseclass::wait_serial
  * Avoid tidy script failures when a filename has spaces
  * Allow running tidy on single files
  * Rename subroutine to clear serial line buffer
  * Set offset in serial output buffer
  * Use consistent abbreviated SPDX license identifiers
  * Speedup, simplify and fix log format with Time::Moment
  * Use consistent "Copyright" header without problematic characters
  * t: Add Test::Warnings to 08-autotest
  * t: Fix "Useless use of a constant"
  * Fully tidy consoles/VNC.pm
  * Use proper perl "signatures" in tools
  * Use proper perl "signatures" in t/data
  * workflows/commit_message_checker.yml: Fix file based prefix
  * Replace all possible occurences of docker with generic version
  * Use simpler 'podman' as drop-in replacement for our checks</changelog>
  <changelog author="okurz@suse.com" date="1634040000">- Update to version 4.6.1634046033.a9024b37:
  * validate_script_output: Fix static timeout when typing command
  * testapi: Fix POD parsing for "distri-&gt;script_run" with escaping
  * Reformat code to current perltidy style
  * tools/tidy: Disable aligning assignments
  * Revert "qemu: fall back to HDDSIZEGB value, even for backing file"
  * Use proper perl "signatures" in OpenQA::Isotovideo
  * Document `imgsearch` script
  * Add test for imgsearch script
  * Add standalone script for using fuzzy image comparison
  * Use proper perl "signatures" in OpenQA
  * Use proper perl "signatures" in OpenQA::Qemu
  * OpenQA: Simplify variable use to avoid typo
  * CI: Allow exception for "git subrepo pull" messages
  * git subrepo pull (merge) external/os-autoinst-common
  * qemu: fall back to HDDSIZEGB value, even for backing file</changelog>
  <changelog author="okurz@suse.com" date="1634299200">- Update to version 4.6.1634214936.d7a89a59:
  * Exclude all currently generated files in git
  * ci: Update codecov-action to v2
  * dist: Bump up timeout scale due to recent OBS observed failures
  * .mergify.yml: Make rules stricter requiring patch coverage</changelog>
  <changelog author="okurz@suse.com" date="1634817600">- Update to version 4.6.1634839907.cef5afdf:
  * t: Cleanup files at the and of tests
  * Exclude more files in .gitignore and remove others
  * Upload coverage data to codecov from the build directory
  * Use signatures in ocr
  * Use signatures in signalblocker
  * Run `codecovbash` in the source directory so it can find source files
  * Fix assignment of `build_dir` for CI build/tests
  * consoles/sshSerial: Make ssh port configurable
  * Use signatures in myjsonrpc
  * CI: Do out-of-source tree build</changelog>
  <changelog author="okurz@suse.com" date="1635422400">- Update to version 4.6.1635464770.6790629e:
  * Add quirk for QEMU &gt;= 5 on PPC
  * t: Add test for qemu_params_ofw
  * backend:qemu: Extract 'qemu_params_ofw'
  * t: Check git status at the end of every test
  * t: Add test for one error handling of myjsonrpc
  * myjsonrpc: Remove redundant next at end of while
  * myjsonrpc: Slightly simplify the code
  * t: Use signatures in 24-myjsonrpc.t
  * myjsonrpc: Provide stack trace on undefined value used as symbol ref</changelog>
  <changelog author="okurz@suse.com" date="1635854400">- Update to version 4.6.1635869279.8838dc09:
  * Fix handling resume command (of developer mode) when not paused
  * Fix passing border_offset parameter to mouse_hide
  * t: Use Test::Warnings in all tests
  * Use proper SPDX identifier in t/15-logging.t as well
  * t: Add Test::Warnings to 30-mmapi.t
  * xt: Add style check to ensure all tests use Test::Most
  * t: Use Test::Most in all tests for consistency
  * Switch from usb-ehci to qemu-xhci
  * Provide more explicit error handling on invalid product dir
  * t: Move subtest in 14-isotovideo which does not need mocked backend
  * t: Extract OpenQA::Isotovideo::Utils specific test</changelog>
  <changelog author="okurz@suse.com" date="1636459200">- Update to version 4.6.1636474618.9c079e07:
  * t: Add test for backend::spvm
  * t: Add test for backend::driver
  * t: Add test for backend::null
  * Simplify backend::baseclass::alive
  * Delete unused exception handling in backend::qemu
  * backend::qemu: Fix bug that qemu alive status was never tested
  * Declare likely obsolete backend::pvm as deprecated
  * Mark only sporadically test covered statements
  * t: Improve Test::More error output context in helper
  * t: Output state file content in case of error where missing
  * Add simple instantiation test of backend::pvm
  * dist: Do not build for i586
  * Fix missing subsecond display in video captions
  * doc: Add missing documentation for NOVALINK variables
  * Update tidy to 20211029</changelog>
  <changelog author="okurz@suse.com" date="1636718400">- Update to version 4.6.1636551041.85fc82ce:
  * Warn about backend errors more prominently in log</changelog>
  <changelog author="okurz@suse.com" date="1636977600">- Update to version 4.6.1636972309.195774f7:
  * dist: Also disable i586 build for -test flavor
  * Extend all backend API function signatures with optional slurpy @
  * Use proper perl "signatures" in backend</changelog>
  <changelog author="okurz@suse.com" date="1637841600">- Update to version 4.6.1637851285.25850081:
  * Fix collecting coverage when invoking `run_all` in `t/08-autotest.t`
  * Avoid redundant code in `t/08-autotest.t`
  * Add test for early stop due to `TESTDEBUG`
  * Improve coding style and simplify `t/08-autotest.t`
  * Log reason for stopping the test execution early
  * Avoid running into TBB's soft limit for the max. number of threads
  * docs: Clearly mention devel:openQA in README
  * Fix working directory for generating HTML coverage report
  * Add unit test for basetest::get_new_serial_output
  * osutils: Do not hide errors of exec call in run() and run_diag()
  * qemu: Don't call chattr with timeout and remove -f arg
  * baseclass: Fix errors in some tests by increasing _CHKSEL_RATE_HITS
  * testapi: Add die_on_timeout option to testapi::script::run()
  * ipmi: Make persistent SOL console enabled by default
  * Ignore the previous tests fail hook output in the search for issues</changelog>
  <changelog author="okurz@suse.com" date="1638100800">- Update to version 4.6.1638007345.ae6eed2a:
  * Update deprecated 'short-form boolean' qemu args
  * imgsearch: disable OpenCV logging
  * qemu: Automatically create swtpm device
  * commands: Use same log format as isotovideo</changelog>
  <changelog author="okurz@suse.com" date="1638273600">- Update to version 4.6.1638289529.0a3f5b98:
  * Fix sporadic error in t/10-virtio_terminal.t
  * t: Reduce test timeout for 31-sshSerial as feasible
  * t: Simplify mocked methods in 31-sshSerial.t
  * t: Add full coverage for 31-sshSerial.t</changelog>
  <changelog author="okurz@suse.com" date="1638532800">- Update to version 4.6.1638454781.7b07525b:
  * xt: Fix style check when called in CI from other directory
  * t: Fix missing Test::Warning check in 36-openqa-namedioselect
  * Remove obsolete consoles::remoteVnc
  * Use proper perl "signatures" in some consoles
  * baseclass: Add test for check_select_rate() function
  * baseclass: Improve error message on "half-open socket"</changelog>
  <changelog author="okurz@suse.com" date="1638705600">- Update to version 4.6.1638540755.a348c6d8:
  * ci: Fix OpenQA::Test::CheckGitStatus exit status
  * ci: Fix exit code of OpenQA::Test::CheckGitStatus
  * basetest.pm: Add signatures for new method
  * Add execution time for failed test modules</changelog>
  <changelog author="okurz@suse.com" date="1638878400">- Update to version 4.6.1638699195.e4430abe:
  * Streamline the use of "|||" log marker with new "modstate" function</changelog>
  <changelog author="okurz@suse.com" date="1639396800">- Update to version 4.6.1639403953.ae94c4bd:
  * mergify: Add more useful checks
  * mergify: Use non-deprecated 'check-succes' instead of 'status-success'
  * mergify: Reduce duplication with YAML anchors
  * mergify: Rely on more reviewers
  * Makefile: Fix build dir when calling make with "-C" itself</changelog>
  <changelog author="Oliver Kurz &lt;okurz@suse.com&gt;" date="1657886400">- Fix os-autoinst-devel opencv dependency for upgrade (boo#1201552)</changelog>
</package>
<package pkgid="0dc0c5888c17e5f498f3f0fb424f3e122479a454f7fe11932fe5a35ee44c8392" name="os-autoinst" arch="src">
  <version epoch="0" ver="4.6.1639403953.ae94c4bd" rel="bp154.2.3.1"/>
  <changelog author="okurz@suse.com" date="1632225600">- Update to version 4.6.1632209573.6778e83a:
  * mmapi: Allow for longer and more retries after observed failures
  * Fix spelling for svirt xml file
  * Add OPENQA_HOSTNAME to xml metadata</changelog>
  <changelog author="okurz@suse.com" date="1632484800">- Update to version 4.6.1632416043.04a757ed:
  * Remove check for qemu &gt;= 4 in qemu backend</changelog>
  <changelog author="okurz@suse.com" date="1632830400">- Update to version 4.6.1632799442.f77d4e14:
  * Add support for timeout on SSH based commands if possible
  * Allow spaces and comma as delimiter for SCHEDULE variable
  * Flush Python's `stderr` to ensure error messages end up in logs
  * Adapt container path in README in accordance with 16d2b42e0960
  * Use Leap 15.3 container
  * Correctly use QEMU_COMPRESS_QCOW2
  * Use Leap 15.3 as TW's glibc 2.34 breaks CI</changelog>
  <changelog author="okurz@suse.com" date="1633608000">- Update to version 4.6.1633618600.9b31e877:
  * testapi: Remove redundant "use 5.018" replaced by Mojo::Base -strict
  * Use proper perl "signatures" in t
  * t: Output backend state message on error for debugging
  * tools: Use git for faster tidy file cleanup if possible
  * Select sensible default of 5 minutes for SSH command timeout
  * ssh_screen::type_string(): Print error code if write() fails
  * Add unit tests for baseclass::wait_serial
  * Avoid tidy script failures when a filename has spaces
  * Allow running tidy on single files
  * Rename subroutine to clear serial line buffer
  * Set offset in serial output buffer
  * Use consistent abbreviated SPDX license identifiers
  * Speedup, simplify and fix log format with Time::Moment
  * Use consistent "Copyright" header without problematic characters
  * t: Add Test::Warnings to 08-autotest
  * t: Fix "Useless use of a constant"
  * Fully tidy consoles/VNC.pm
  * Use proper perl "signatures" in tools
  * Use proper perl "signatures" in t/data
  * workflows/commit_message_checker.yml: Fix file based prefix
  * Replace all possible occurences of docker with generic version
  * Use simpler 'podman' as drop-in replacement for our checks</changelog>
  <changelog author="okurz@suse.com" date="1634040000">- Update to version 4.6.1634046033.a9024b37:
  * validate_script_output: Fix static timeout when typing command
  * testapi: Fix POD parsing for "distri-&gt;script_run" with escaping
  * Reformat code to current perltidy style
  * tools/tidy: Disable aligning assignments
  * Revert "qemu: fall back to HDDSIZEGB value, even for backing file"
  * Use proper perl "signatures" in OpenQA::Isotovideo
  * Document `imgsearch` script
  * Add test for imgsearch script
  * Add standalone script for using fuzzy image comparison
  * Use proper perl "signatures" in OpenQA
  * Use proper perl "signatures" in OpenQA::Qemu
  * OpenQA: Simplify variable use to avoid typo
  * CI: Allow exception for "git subrepo pull" messages
  * git subrepo pull (merge) external/os-autoinst-common
  * qemu: fall back to HDDSIZEGB value, even for backing file</changelog>
  <changelog author="okurz@suse.com" date="1634299200">- Update to version 4.6.1634214936.d7a89a59:
  * Exclude all currently generated files in git
  * ci: Update codecov-action to v2
  * dist: Bump up timeout scale due to recent OBS observed failures
  * .mergify.yml: Make rules stricter requiring patch coverage</changelog>
  <changelog author="okurz@suse.com" date="1634817600">- Update to version 4.6.1634839907.cef5afdf:
  * t: Cleanup files at the and of tests
  * Exclude more files in .gitignore and remove others
  * Upload coverage data to codecov from the build directory
  * Use signatures in ocr
  * Use signatures in signalblocker
  * Run `codecovbash` in the source directory so it can find source files
  * Fix assignment of `build_dir` for CI build/tests
  * consoles/sshSerial: Make ssh port configurable
  * Use signatures in myjsonrpc
  * CI: Do out-of-source tree build</changelog>
  <changelog author="okurz@suse.com" date="1635422400">- Update to version 4.6.1635464770.6790629e:
  * Add quirk for QEMU &gt;= 5 on PPC
  * t: Add test for qemu_params_ofw
  * backend:qemu: Extract 'qemu_params_ofw'
  * t: Check git status at the end of every test
  * t: Add test for one error handling of myjsonrpc
  * myjsonrpc: Remove redundant next at end of while
  * myjsonrpc: Slightly simplify the code
  * t: Use signatures in 24-myjsonrpc.t
  * myjsonrpc: Provide stack trace on undefined value used as symbol ref</changelog>
  <changelog author="okurz@suse.com" date="1635854400">- Update to version 4.6.1635869279.8838dc09:
  * Fix handling resume command (of developer mode) when not paused
  * Fix passing border_offset parameter to mouse_hide
  * t: Use Test::Warnings in all tests
  * Use proper SPDX identifier in t/15-logging.t as well
  * t: Add Test::Warnings to 30-mmapi.t
  * xt: Add style check to ensure all tests use Test::Most
  * t: Use Test::Most in all tests for consistency
  * Switch from usb-ehci to qemu-xhci
  * Provide more explicit error handling on invalid product dir
  * t: Move subtest in 14-isotovideo which does not need mocked backend
  * t: Extract OpenQA::Isotovideo::Utils specific test</changelog>
  <changelog author="okurz@suse.com" date="1636459200">- Update to version 4.6.1636474618.9c079e07:
  * t: Add test for backend::spvm
  * t: Add test for backend::driver
  * t: Add test for backend::null
  * Simplify backend::baseclass::alive
  * Delete unused exception handling in backend::qemu
  * backend::qemu: Fix bug that qemu alive status was never tested
  * Declare likely obsolete backend::pvm as deprecated
  * Mark only sporadically test covered statements
  * t: Improve Test::More error output context in helper
  * t: Output state file content in case of error where missing
  * Add simple instantiation test of backend::pvm
  * dist: Do not build for i586
  * Fix missing subsecond display in video captions
  * doc: Add missing documentation for NOVALINK variables
  * Update tidy to 20211029</changelog>
  <changelog author="okurz@suse.com" date="1636718400">- Update to version 4.6.1636551041.85fc82ce:
  * Warn about backend errors more prominently in log</changelog>
  <changelog author="okurz@suse.com" date="1636977600">- Update to version 4.6.1636972309.195774f7:
  * dist: Also disable i586 build for -test flavor
  * Extend all backend API function signatures with optional slurpy @
  * Use proper perl "signatures" in backend</changelog>
  <changelog author="okurz@suse.com" date="1637841600">- Update to version 4.6.1637851285.25850081:
  * Fix collecting coverage when invoking `run_all` in `t/08-autotest.t`
  * Avoid redundant code in `t/08-autotest.t`
  * Add test for early stop due to `TESTDEBUG`
  * Improve coding style and simplify `t/08-autotest.t`
  * Log reason for stopping the test execution early
  * Avoid running into TBB's soft limit for the max. number of threads
  * docs: Clearly mention devel:openQA in README
  * Fix working directory for generating HTML coverage report
  * Add unit test for basetest::get_new_serial_output
  * osutils: Do not hide errors of exec call in run() and run_diag()
  * qemu: Don't call chattr with timeout and remove -f arg
  * baseclass: Fix errors in some tests by increasing _CHKSEL_RATE_HITS
  * testapi: Add die_on_timeout option to testapi::script::run()
  * ipmi: Make persistent SOL console enabled by default
  * Ignore the previous tests fail hook output in the search for issues</changelog>
  <changelog author="okurz@suse.com" date="1638100800">- Update to version 4.6.1638007345.ae6eed2a:
  * Update deprecated 'short-form boolean' qemu args
  * imgsearch: disable OpenCV logging
  * qemu: Automatically create swtpm device
  * commands: Use same log format as isotovideo</changelog>
  <changelog author="okurz@suse.com" date="1638273600">- Update to version 4.6.1638289529.0a3f5b98:
  * Fix sporadic error in t/10-virtio_terminal.t
  * t: Reduce test timeout for 31-sshSerial as feasible
  * t: Simplify mocked methods in 31-sshSerial.t
  * t: Add full coverage for 31-sshSerial.t</changelog>
  <changelog author="okurz@suse.com" date="1638532800">- Update to version 4.6.1638454781.7b07525b:
  * xt: Fix style check when called in CI from other directory
  * t: Fix missing Test::Warning check in 36-openqa-namedioselect
  * Remove obsolete consoles::remoteVnc
  * Use proper perl "signatures" in some consoles
  * baseclass: Add test for check_select_rate() function
  * baseclass: Improve error message on "half-open socket"</changelog>
  <changelog author="okurz@suse.com" date="1638705600">- Update to version 4.6.1638540755.a348c6d8:
  * ci: Fix OpenQA::Test::CheckGitStatus exit status
  * ci: Fix exit code of OpenQA::Test::CheckGitStatus
  * basetest.pm: Add signatures for new method
  * Add execution time for failed test modules</changelog>
  <changelog author="okurz@suse.com" date="1638878400">- Update to version 4.6.1638699195.e4430abe:
  * Streamline the use of "|||" log marker with new "modstate" function</changelog>
  <changelog author="okurz@suse.com" date="1639396800">- Update to version 4.6.1639403953.ae94c4bd:
  * mergify: Add more useful checks
  * mergify: Use non-deprecated 'check-succes' instead of 'status-success'
  * mergify: Reduce duplication with YAML anchors
  * mergify: Rely on more reviewers
  * Makefile: Fix build dir when calling make with "-C" itself</changelog>
  <changelog author="Oliver Kurz &lt;okurz@suse.com&gt;" date="1657886400">- Fix os-autoinst-devel opencv dependency for upgrade (boo#1201552)</changelog>
</package>
<package pkgid="c0f940a2fd949a8901f215b61af24864188a70df82a2b8023e01d85383e96eac" name="os-autoinst" arch="x86_64">
  <version epoch="0" ver="4.6.1639403953.ae94c4bd" rel="bp154.2.3.1"/>
  <changelog author="okurz@suse.com" date="1632225600">- Update to version 4.6.1632209573.6778e83a:
  * mmapi: Allow for longer and more retries after observed failures
  * Fix spelling for svirt xml file
  * Add OPENQA_HOSTNAME to xml metadata</changelog>
  <changelog author="okurz@suse.com" date="1632484800">- Update to version 4.6.1632416043.04a757ed:
  * Remove check for qemu &gt;= 4 in qemu backend</changelog>
  <changelog author="okurz@suse.com" date="1632830400">- Update to version 4.6.1632799442.f77d4e14:
  * Add support for timeout on SSH based commands if possible
  * Allow spaces and comma as delimiter for SCHEDULE variable
  * Flush Python's `stderr` to ensure error messages end up in logs
  * Adapt container path in README in accordance with 16d2b42e0960
  * Use Leap 15.3 container
  * Correctly use QEMU_COMPRESS_QCOW2
  * Use Leap 15.3 as TW's glibc 2.34 breaks CI</changelog>
  <changelog author="okurz@suse.com" date="1633608000">- Update to version 4.6.1633618600.9b31e877:
  * testapi: Remove redundant "use 5.018" replaced by Mojo::Base -strict
  * Use proper perl "signatures" in t
  * t: Output backend state message on error for debugging
  * tools: Use git for faster tidy file cleanup if possible
  * Select sensible default of 5 minutes for SSH command timeout
  * ssh_screen::type_string(): Print error code if write() fails
  * Add unit tests for baseclass::wait_serial
  * Avoid tidy script failures when a filename has spaces
  * Allow running tidy on single files
  * Rename subroutine to clear serial line buffer
  * Set offset in serial output buffer
  * Use consistent abbreviated SPDX license identifiers
  * Speedup, simplify and fix log format with Time::Moment
  * Use consistent "Copyright" header without problematic characters
  * t: Add Test::Warnings to 08-autotest
  * t: Fix "Useless use of a constant"
  * Fully tidy consoles/VNC.pm
  * Use proper perl "signatures" in tools
  * Use proper perl "signatures" in t/data
  * workflows/commit_message_checker.yml: Fix file based prefix
  * Replace all possible occurences of docker with generic version
  * Use simpler 'podman' as drop-in replacement for our checks</changelog>
  <changelog author="okurz@suse.com" date="1634040000">- Update to version 4.6.1634046033.a9024b37:
  * validate_script_output: Fix static timeout when typing command
  * testapi: Fix POD parsing for "distri-&gt;script_run" with escaping
  * Reformat code to current perltidy style
  * tools/tidy: Disable aligning assignments
  * Revert "qemu: fall back to HDDSIZEGB value, even for backing file"
  * Use proper perl "signatures" in OpenQA::Isotovideo
  * Document `imgsearch` script
  * Add test for imgsearch script
  * Add standalone script for using fuzzy image comparison
  * Use proper perl "signatures" in OpenQA
  * Use proper perl "signatures" in OpenQA::Qemu
  * OpenQA: Simplify variable use to avoid typo
  * CI: Allow exception for "git subrepo pull" messages
  * git subrepo pull (merge) external/os-autoinst-common
  * qemu: fall back to HDDSIZEGB value, even for backing file</changelog>
  <changelog author="okurz@suse.com" date="1634299200">- Update to version 4.6.1634214936.d7a89a59:
  * Exclude all currently generated files in git
  * ci: Update codecov-action to v2
  * dist: Bump up timeout scale due to recent OBS observed failures
  * .mergify.yml: Make rules stricter requiring patch coverage</changelog>
  <changelog author="okurz@suse.com" date="1634817600">- Update to version 4.6.1634839907.cef5afdf:
  * t: Cleanup files at the and of tests
  * Exclude more files in .gitignore and remove others
  * Upload coverage data to codecov from the build directory
  * Use signatures in ocr
  * Use signatures in signalblocker
  * Run `codecovbash` in the source directory so it can find source files
  * Fix assignment of `build_dir` for CI build/tests
  * consoles/sshSerial: Make ssh port configurable
  * Use signatures in myjsonrpc
  * CI: Do out-of-source tree build</changelog>
  <changelog author="okurz@suse.com" date="1635422400">- Update to version 4.6.1635464770.6790629e:
  * Add quirk for QEMU &gt;= 5 on PPC
  * t: Add test for qemu_params_ofw
  * backend:qemu: Extract 'qemu_params_ofw'
  * t: Check git status at the end of every test
  * t: Add test for one error handling of myjsonrpc
  * myjsonrpc: Remove redundant next at end of while
  * myjsonrpc: Slightly simplify the code
  * t: Use signatures in 24-myjsonrpc.t
  * myjsonrpc: Provide stack trace on undefined value used as symbol ref</changelog>
  <changelog author="okurz@suse.com" date="1635854400">- Update to version 4.6.1635869279.8838dc09:
  * Fix handling resume command (of developer mode) when not paused
  * Fix passing border_offset parameter to mouse_hide
  * t: Use Test::Warnings in all tests
  * Use proper SPDX identifier in t/15-logging.t as well
  * t: Add Test::Warnings to 30-mmapi.t
  * xt: Add style check to ensure all tests use Test::Most
  * t: Use Test::Most in all tests for consistency
  * Switch from usb-ehci to qemu-xhci
  * Provide more explicit error handling on invalid product dir
  * t: Move subtest in 14-isotovideo which does not need mocked backend
  * t: Extract OpenQA::Isotovideo::Utils specific test</changelog>
  <changelog author="okurz@suse.com" date="1636459200">- Update to version 4.6.1636474618.9c079e07:
  * t: Add test for backend::spvm
  * t: Add test for backend::driver
  * t: Add test for backend::null
  * Simplify backend::baseclass::alive
  * Delete unused exception handling in backend::qemu
  * backend::qemu: Fix bug that qemu alive status was never tested
  * Declare likely obsolete backend::pvm as deprecated
  * Mark only sporadically test covered statements
  * t: Improve Test::More error output context in helper
  * t: Output state file content in case of error where missing
  * Add simple instantiation test of backend::pvm
  * dist: Do not build for i586
  * Fix missing subsecond display in video captions
  * doc: Add missing documentation for NOVALINK variables
  * Update tidy to 20211029</changelog>
  <changelog author="okurz@suse.com" date="1636718400">- Update to version 4.6.1636551041.85fc82ce:
  * Warn about backend errors more prominently in log</changelog>
  <changelog author="okurz@suse.com" date="1636977600">- Update to version 4.6.1636972309.195774f7:
  * dist: Also disable i586 build for -test flavor
  * Extend all backend API function signatures with optional slurpy @
  * Use proper perl "signatures" in backend</changelog>
  <changelog author="okurz@suse.com" date="1637841600">- Update to version 4.6.1637851285.25850081:
  * Fix collecting coverage when invoking `run_all` in `t/08-autotest.t`
  * Avoid redundant code in `t/08-autotest.t`
  * Add test for early stop due to `TESTDEBUG`
  * Improve coding style and simplify `t/08-autotest.t`
  * Log reason for stopping the test execution early
  * Avoid running into TBB's soft limit for the max. number of threads
  * docs: Clearly mention devel:openQA in README
  * Fix working directory for generating HTML coverage report
  * Add unit test for basetest::get_new_serial_output
  * osutils: Do not hide errors of exec call in run() and run_diag()
  * qemu: Don't call chattr with timeout and remove -f arg
  * baseclass: Fix errors in some tests by increasing _CHKSEL_RATE_HITS
  * testapi: Add die_on_timeout option to testapi::script::run()
  * ipmi: Make persistent SOL console enabled by default
  * Ignore the previous tests fail hook output in the search for issues</changelog>
  <changelog author="okurz@suse.com" date="1638100800">- Update to version 4.6.1638007345.ae6eed2a:
  * Update deprecated 'short-form boolean' qemu args
  * imgsearch: disable OpenCV logging
  * qemu: Automatically create swtpm device
  * commands: Use same log format as isotovideo</changelog>
  <changelog author="okurz@suse.com" date="1638273600">- Update to version 4.6.1638289529.0a3f5b98:
  * Fix sporadic error in t/10-virtio_terminal.t
  * t: Reduce test timeout for 31-sshSerial as feasible
  * t: Simplify mocked methods in 31-sshSerial.t
  * t: Add full coverage for 31-sshSerial.t</changelog>
  <changelog author="okurz@suse.com" date="1638532800">- Update to version 4.6.1638454781.7b07525b:
  * xt: Fix style check when called in CI from other directory
  * t: Fix missing Test::Warning check in 36-openqa-namedioselect
  * Remove obsolete consoles::remoteVnc
  * Use proper perl "signatures" in some consoles
  * baseclass: Add test for check_select_rate() function
  * baseclass: Improve error message on "half-open socket"</changelog>
  <changelog author="okurz@suse.com" date="1638705600">- Update to version 4.6.1638540755.a348c6d8:
  * ci: Fix OpenQA::Test::CheckGitStatus exit status
  * ci: Fix exit code of OpenQA::Test::CheckGitStatus
  * basetest.pm: Add signatures for new method
  * Add execution time for failed test modules</changelog>
  <changelog author="okurz@suse.com" date="1638878400">- Update to version 4.6.1638699195.e4430abe:
  * Streamline the use of "|||" log marker with new "modstate" function</changelog>
  <changelog author="okurz@suse.com" date="1639396800">- Update to version 4.6.1639403953.ae94c4bd:
  * mergify: Add more useful checks
  * mergify: Use non-deprecated 'check-succes' instead of 'status-success'
  * mergify: Reduce duplication with YAML anchors
  * mergify: Rely on more reviewers
  * Makefile: Fix build dir when calling make with "-C" itself</changelog>
  <changelog author="Oliver Kurz &lt;okurz@suse.com&gt;" date="1657886400">- Fix os-autoinst-devel opencv dependency for upgrade (boo#1201552)</changelog>
</package>
<package pkgid="534940c3d2e78fce7dcef73a1e3bea66b0e2ec0005244af969f5e8dd5b9da36a" name="os-autoinst-devel" arch="aarch64">
  <version epoch="0" ver="4.6.1639403953.ae94c4bd" rel="bp154.2.3.1"/>
  <changelog author="okurz@suse.com" date="1632225600">- Update to version 4.6.1632209573.6778e83a:
  * mmapi: Allow for longer and more retries after observed failures
  * Fix spelling for svirt xml file
  * Add OPENQA_HOSTNAME to xml metadata</changelog>
  <changelog author="okurz@suse.com" date="1632484800">- Update to version 4.6.1632416043.04a757ed:
  * Remove check for qemu &gt;= 4 in qemu backend</changelog>
  <changelog author="okurz@suse.com" date="1632830400">- Update to version 4.6.1632799442.f77d4e14:
  * Add support for timeout on SSH based commands if possible
  * Allow spaces and comma as delimiter for SCHEDULE variable
  * Flush Python's `stderr` to ensure error messages end up in logs
  * Adapt container path in README in accordance with 16d2b42e0960
  * Use Leap 15.3 container
  * Correctly use QEMU_COMPRESS_QCOW2
  * Use Leap 15.3 as TW's glibc 2.34 breaks CI</changelog>
  <changelog author="okurz@suse.com" date="1633608000">- Update to version 4.6.1633618600.9b31e877:
  * testapi: Remove redundant "use 5.018" replaced by Mojo::Base -strict
  * Use proper perl "signatures" in t
  * t: Output backend state message on error for debugging
  * tools: Use git for faster tidy file cleanup if possible
  * Select sensible default of 5 minutes for SSH command timeout
  * ssh_screen::type_string(): Print error code if write() fails
  * Add unit tests for baseclass::wait_serial
  * Avoid tidy script failures when a filename has spaces
  * Allow running tidy on single files
  * Rename subroutine to clear serial line buffer
  * Set offset in serial output buffer
  * Use consistent abbreviated SPDX license identifiers
  * Speedup, simplify and fix log format with Time::Moment
  * Use consistent "Copyright" header without problematic characters
  * t: Add Test::Warnings to 08-autotest
  * t: Fix "Useless use of a constant"
  * Fully tidy consoles/VNC.pm
  * Use proper perl "signatures" in tools
  * Use proper perl "signatures" in t/data
  * workflows/commit_message_checker.yml: Fix file based prefix
  * Replace all possible occurences of docker with generic version
  * Use simpler 'podman' as drop-in replacement for our checks</changelog>
  <changelog author="okurz@suse.com" date="1634040000">- Update to version 4.6.1634046033.a9024b37:
  * validate_script_output: Fix static timeout when typing command
  * testapi: Fix POD parsing for "distri-&gt;script_run" with escaping
  * Reformat code to current perltidy style
  * tools/tidy: Disable aligning assignments
  * Revert "qemu: fall back to HDDSIZEGB value, even for backing file"
  * Use proper perl "signatures" in OpenQA::Isotovideo
  * Document `imgsearch` script
  * Add test for imgsearch script
  * Add standalone script for using fuzzy image comparison
  * Use proper perl "signatures" in OpenQA
  * Use proper perl "signatures" in OpenQA::Qemu
  * OpenQA: Simplify variable use to avoid typo
  * CI: Allow exception for "git subrepo pull" messages
  * git subrepo pull (merge) external/os-autoinst-common
  * qemu: fall back to HDDSIZEGB value, even for backing file</changelog>
  <changelog author="okurz@suse.com" date="1634299200">- Update to version 4.6.1634214936.d7a89a59:
  * Exclude all currently generated files in git
  * ci: Update codecov-action to v2
  * dist: Bump up timeout scale due to recent OBS observed failures
  * .mergify.yml: Make rules stricter requiring patch coverage</changelog>
  <changelog author="okurz@suse.com" date="1634817600">- Update to version 4.6.1634839907.cef5afdf:
  * t: Cleanup files at the and of tests
  * Exclude more files in .gitignore and remove others
  * Upload coverage data to codecov from the build directory
  * Use signatures in ocr
  * Use signatures in signalblocker
  * Run `codecovbash` in the source directory so it can find source files
  * Fix assignment of `build_dir` for CI build/tests
  * consoles/sshSerial: Make ssh port configurable
  * Use signatures in myjsonrpc
  * CI: Do out-of-source tree build</changelog>
  <changelog author="okurz@suse.com" date="1635422400">- Update to version 4.6.1635464770.6790629e:
  * Add quirk for QEMU &gt;= 5 on PPC
  * t: Add test for qemu_params_ofw
  * backend:qemu: Extract 'qemu_params_ofw'
  * t: Check git status at the end of every test
  * t: Add test for one error handling of myjsonrpc
  * myjsonrpc: Remove redundant next at end of while
  * myjsonrpc: Slightly simplify the code
  * t: Use signatures in 24-myjsonrpc.t
  * myjsonrpc: Provide stack trace on undefined value used as symbol ref</changelog>
  <changelog author="okurz@suse.com" date="1635854400">- Update to version 4.6.1635869279.8838dc09:
  * Fix handling resume command (of developer mode) when not paused
  * Fix passing border_offset parameter to mouse_hide
  * t: Use Test::Warnings in all tests
  * Use proper SPDX identifier in t/15-logging.t as well
  * t: Add Test::Warnings to 30-mmapi.t
  * xt: Add style check to ensure all tests use Test::Most
  * t: Use Test::Most in all tests for consistency
  * Switch from usb-ehci to qemu-xhci
  * Provide more explicit error handling on invalid product dir
  * t: Move subtest in 14-isotovideo which does not need mocked backend
  * t: Extract OpenQA::Isotovideo::Utils specific test</changelog>
  <changelog author="okurz@suse.com" date="1636459200">- Update to version 4.6.1636474618.9c079e07:
  * t: Add test for backend::spvm
  * t: Add test for backend::driver
  * t: Add test for backend::null
  * Simplify backend::baseclass::alive
  * Delete unused exception handling in backend::qemu
  * backend::qemu: Fix bug that qemu alive status was never tested
  * Declare likely obsolete backend::pvm as deprecated
  * Mark only sporadically test covered statements
  * t: Improve Test::More error output context in helper
  * t: Output state file content in case of error where missing
  * Add simple instantiation test of backend::pvm
  * dist: Do not build for i586
  * Fix missing subsecond display in video captions
  * doc: Add missing documentation for NOVALINK variables
  * Update tidy to 20211029</changelog>
  <changelog author="okurz@suse.com" date="1636718400">- Update to version 4.6.1636551041.85fc82ce:
  * Warn about backend errors more prominently in log</changelog>
  <changelog author="okurz@suse.com" date="1636977600">- Update to version 4.6.1636972309.195774f7:
  * dist: Also disable i586 build for -test flavor
  * Extend all backend API function signatures with optional slurpy @
  * Use proper perl "signatures" in backend</changelog>
  <changelog author="okurz@suse.com" date="1637841600">- Update to version 4.6.1637851285.25850081:
  * Fix collecting coverage when invoking `run_all` in `t/08-autotest.t`
  * Avoid redundant code in `t/08-autotest.t`
  * Add test for early stop due to `TESTDEBUG`
  * Improve coding style and simplify `t/08-autotest.t`
  * Log reason for stopping the test execution early
  * Avoid running into TBB's soft limit for the max. number of threads
  * docs: Clearly mention devel:openQA in README
  * Fix working directory for generating HTML coverage report
  * Add unit test for basetest::get_new_serial_output
  * osutils: Do not hide errors of exec call in run() and run_diag()
  * qemu: Don't call chattr with timeout and remove -f arg
  * baseclass: Fix errors in some tests by increasing _CHKSEL_RATE_HITS
  * testapi: Add die_on_timeout option to testapi::script::run()
  * ipmi: Make persistent SOL console enabled by default
  * Ignore the previous tests fail hook output in the search for issues</changelog>
  <changelog author="okurz@suse.com" date="1638100800">- Update to version 4.6.1638007345.ae6eed2a:
  * Update deprecated 'short-form boolean' qemu args
  * imgsearch: disable OpenCV logging
  * qemu: Automatically create swtpm device
  * commands: Use same log format as isotovideo</changelog>
  <changelog author="okurz@suse.com" date="1638273600">- Update to version 4.6.1638289529.0a3f5b98:
  * Fix sporadic error in t/10-virtio_terminal.t
  * t: Reduce test timeout for 31-sshSerial as feasible
  * t: Simplify mocked methods in 31-sshSerial.t
  * t: Add full coverage for 31-sshSerial.t</changelog>
  <changelog author="okurz@suse.com" date="1638532800">- Update to version 4.6.1638454781.7b07525b:
  * xt: Fix style check when called in CI from other directory
  * t: Fix missing Test::Warning check in 36-openqa-namedioselect
  * Remove obsolete consoles::remoteVnc
  * Use proper perl "signatures" in some consoles
  * baseclass: Add test for check_select_rate() function
  * baseclass: Improve error message on "half-open socket"</changelog>
  <changelog author="okurz@suse.com" date="1638705600">- Update to version 4.6.1638540755.a348c6d8:
  * ci: Fix OpenQA::Test::CheckGitStatus exit status
  * ci: Fix exit code of OpenQA::Test::CheckGitStatus
  * basetest.pm: Add signatures for new method
  * Add execution time for failed test modules</changelog>
  <changelog author="okurz@suse.com" date="1638878400">- Update to version 4.6.1638699195.e4430abe:
  * Streamline the use of "|||" log marker with new "modstate" function</changelog>
  <changelog author="okurz@suse.com" date="1639396800">- Update to version 4.6.1639403953.ae94c4bd:
  * mergify: Add more useful checks
  * mergify: Use non-deprecated 'check-succes' instead of 'status-success'
  * mergify: Reduce duplication with YAML anchors
  * mergify: Rely on more reviewers
  * Makefile: Fix build dir when calling make with "-C" itself</changelog>
  <changelog author="Oliver Kurz &lt;okurz@suse.com&gt;" date="1657886400">- Fix os-autoinst-devel opencv dependency for upgrade (boo#1201552)</changelog>
</package>
<package pkgid="848e40cbdb2e08e2ecd5e594feb7376717b402f2d2c856580b31634608a54fa5" name="os-autoinst-devel" arch="ppc64le">
  <version epoch="0" ver="4.6.1639403953.ae94c4bd" rel="bp154.2.3.1"/>
  <changelog author="okurz@suse.com" date="1632225600">- Update to version 4.6.1632209573.6778e83a:
  * mmapi: Allow for longer and more retries after observed failures
  * Fix spelling for svirt xml file
  * Add OPENQA_HOSTNAME to xml metadata</changelog>
  <changelog author="okurz@suse.com" date="1632484800">- Update to version 4.6.1632416043.04a757ed:
  * Remove check for qemu &gt;= 4 in qemu backend</changelog>
  <changelog author="okurz@suse.com" date="1632830400">- Update to version 4.6.1632799442.f77d4e14:
  * Add support for timeout on SSH based commands if possible
  * Allow spaces and comma as delimiter for SCHEDULE variable
  * Flush Python's `stderr` to ensure error messages end up in logs
  * Adapt container path in README in accordance with 16d2b42e0960
  * Use Leap 15.3 container
  * Correctly use QEMU_COMPRESS_QCOW2
  * Use Leap 15.3 as TW's glibc 2.34 breaks CI</changelog>
  <changelog author="okurz@suse.com" date="1633608000">- Update to version 4.6.1633618600.9b31e877:
  * testapi: Remove redundant "use 5.018" replaced by Mojo::Base -strict
  * Use proper perl "signatures" in t
  * t: Output backend state message on error for debugging
  * tools: Use git for faster tidy file cleanup if possible
  * Select sensible default of 5 minutes for SSH command timeout
  * ssh_screen::type_string(): Print error code if write() fails
  * Add unit tests for baseclass::wait_serial
  * Avoid tidy script failures when a filename has spaces
  * Allow running tidy on single files
  * Rename subroutine to clear serial line buffer
  * Set offset in serial output buffer
  * Use consistent abbreviated SPDX license identifiers
  * Speedup, simplify and fix log format with Time::Moment
  * Use consistent "Copyright" header without problematic characters
  * t: Add Test::Warnings to 08-autotest
  * t: Fix "Useless use of a constant"
  * Fully tidy consoles/VNC.pm
  * Use proper perl "signatures" in tools
  * Use proper perl "signatures" in t/data
  * workflows/commit_message_checker.yml: Fix file based prefix
  * Replace all possible occurences of docker with generic version
  * Use simpler 'podman' as drop-in replacement for our checks</changelog>
  <changelog author="okurz@suse.com" date="1634040000">- Update to version 4.6.1634046033.a9024b37:
  * validate_script_output: Fix static timeout when typing command
  * testapi: Fix POD parsing for "distri-&gt;script_run" with escaping
  * Reformat code to current perltidy style
  * tools/tidy: Disable aligning assignments
  * Revert "qemu: fall back to HDDSIZEGB value, even for backing file"
  * Use proper perl "signatures" in OpenQA::Isotovideo
  * Document `imgsearch` script
  * Add test for imgsearch script
  * Add standalone script for using fuzzy image comparison
  * Use proper perl "signatures" in OpenQA
  * Use proper perl "signatures" in OpenQA::Qemu
  * OpenQA: Simplify variable use to avoid typo
  * CI: Allow exception for "git subrepo pull" messages
  * git subrepo pull (merge) external/os-autoinst-common
  * qemu: fall back to HDDSIZEGB value, even for backing file</changelog>
  <changelog author="okurz@suse.com" date="1634299200">- Update to version 4.6.1634214936.d7a89a59:
  * Exclude all currently generated files in git
  * ci: Update codecov-action to v2
  * dist: Bump up timeout scale due to recent OBS observed failures
  * .mergify.yml: Make rules stricter requiring patch coverage</changelog>
  <changelog author="okurz@suse.com" date="1634817600">- Update to version 4.6.1634839907.cef5afdf:
  * t: Cleanup files at the and of tests
  * Exclude more files in .gitignore and remove others
  * Upload coverage data to codecov from the build directory
  * Use signatures in ocr
  * Use signatures in signalblocker
  * Run `codecovbash` in the source directory so it can find source files
  * Fix assignment of `build_dir` for CI build/tests
  * consoles/sshSerial: Make ssh port configurable
  * Use signatures in myjsonrpc
  * CI: Do out-of-source tree build</changelog>
  <changelog author="okurz@suse.com" date="1635422400">- Update to version 4.6.1635464770.6790629e:
  * Add quirk for QEMU &gt;= 5 on PPC
  * t: Add test for qemu_params_ofw
  * backend:qemu: Extract 'qemu_params_ofw'
  * t: Check git status at the end of every test
  * t: Add test for one error handling of myjsonrpc
  * myjsonrpc: Remove redundant next at end of while
  * myjsonrpc: Slightly simplify the code
  * t: Use signatures in 24-myjsonrpc.t
  * myjsonrpc: Provide stack trace on undefined value used as symbol ref</changelog>
  <changelog author="okurz@suse.com" date="1635854400">- Update to version 4.6.1635869279.8838dc09:
  * Fix handling resume command (of developer mode) when not paused
  * Fix passing border_offset parameter to mouse_hide
  * t: Use Test::Warnings in all tests
  * Use proper SPDX identifier in t/15-logging.t as well
  * t: Add Test::Warnings to 30-mmapi.t
  * xt: Add style check to ensure all tests use Test::Most
  * t: Use Test::Most in all tests for consistency
  * Switch from usb-ehci to qemu-xhci
  * Provide more explicit error handling on invalid product dir
  * t: Move subtest in 14-isotovideo which does not need mocked backend
  * t: Extract OpenQA::Isotovideo::Utils specific test</changelog>
  <changelog author="okurz@suse.com" date="1636459200">- Update to version 4.6.1636474618.9c079e07:
  * t: Add test for backend::spvm
  * t: Add test for backend::driver
  * t: Add test for backend::null
  * Simplify backend::baseclass::alive
  * Delete unused exception handling in backend::qemu
  * backend::qemu: Fix bug that qemu alive status was never tested
  * Declare likely obsolete backend::pvm as deprecated
  * Mark only sporadically test covered statements
  * t: Improve Test::More error output context in helper
  * t: Output state file content in case of error where missing
  * Add simple instantiation test of backend::pvm
  * dist: Do not build for i586
  * Fix missing subsecond display in video captions
  * doc: Add missing documentation for NOVALINK variables
  * Update tidy to 20211029</changelog>
  <changelog author="okurz@suse.com" date="1636718400">- Update to version 4.6.1636551041.85fc82ce:
  * Warn about backend errors more prominently in log</changelog>
  <changelog author="okurz@suse.com" date="1636977600">- Update to version 4.6.1636972309.195774f7:
  * dist: Also disable i586 build for -test flavor
  * Extend all backend API function signatures with optional slurpy @
  * Use proper perl "signatures" in backend</changelog>
  <changelog author="okurz@suse.com" date="1637841600">- Update to version 4.6.1637851285.25850081:
  * Fix collecting coverage when invoking `run_all` in `t/08-autotest.t`
  * Avoid redundant code in `t/08-autotest.t`
  * Add test for early stop due to `TESTDEBUG`
  * Improve coding style and simplify `t/08-autotest.t`
  * Log reason for stopping the test execution early
  * Avoid running into TBB's soft limit for the max. number of threads
  * docs: Clearly mention devel:openQA in README
  * Fix working directory for generating HTML coverage report
  * Add unit test for basetest::get_new_serial_output
  * osutils: Do not hide errors of exec call in run() and run_diag()
  * qemu: Don't call chattr with timeout and remove -f arg
  * baseclass: Fix errors in some tests by increasing _CHKSEL_RATE_HITS
  * testapi: Add die_on_timeout option to testapi::script::run()
  * ipmi: Make persistent SOL console enabled by default
  * Ignore the previous tests fail hook output in the search for issues</changelog>
  <changelog author="okurz@suse.com" date="1638100800">- Update to version 4.6.1638007345.ae6eed2a:
  * Update deprecated 'short-form boolean' qemu args
  * imgsearch: disable OpenCV logging
  * qemu: Automatically create swtpm device
  * commands: Use same log format as isotovideo</changelog>
  <changelog author="okurz@suse.com" date="1638273600">- Update to version 4.6.1638289529.0a3f5b98:
  * Fix sporadic error in t/10-virtio_terminal.t
  * t: Reduce test timeout for 31-sshSerial as feasible
  * t: Simplify mocked methods in 31-sshSerial.t
  * t: Add full coverage for 31-sshSerial.t</changelog>
  <changelog author="okurz@suse.com" date="1638532800">- Update to version 4.6.1638454781.7b07525b:
  * xt: Fix style check when called in CI from other directory
  * t: Fix missing Test::Warning check in 36-openqa-namedioselect
  * Remove obsolete consoles::remoteVnc
  * Use proper perl "signatures" in some consoles
  * baseclass: Add test for check_select_rate() function
  * baseclass: Improve error message on "half-open socket"</changelog>
  <changelog author="okurz@suse.com" date="1638705600">- Update to version 4.6.1638540755.a348c6d8:
  * ci: Fix OpenQA::Test::CheckGitStatus exit status
  * ci: Fix exit code of OpenQA::Test::CheckGitStatus
  * basetest.pm: Add signatures for new method
  * Add execution time for failed test modules</changelog>
  <changelog author="okurz@suse.com" date="1638878400">- Update to version 4.6.1638699195.e4430abe:
  * Streamline the use of "|||" log marker with new "modstate" function</changelog>
  <changelog author="okurz@suse.com" date="1639396800">- Update to version 4.6.1639403953.ae94c4bd:
  * mergify: Add more useful checks
  * mergify: Use non-deprecated 'check-succes' instead of 'status-success'
  * mergify: Reduce duplication with YAML anchors
  * mergify: Rely on more reviewers
  * Makefile: Fix build dir when calling make with "-C" itself</changelog>
  <changelog author="Oliver Kurz &lt;okurz@suse.com&gt;" date="1657886400">- Fix os-autoinst-devel opencv dependency for upgrade (boo#1201552)</changelog>
</package>
<package pkgid="d8b44cd4ea0a41b0c365b4df662dd285342c1902564a50f5219771482afe4f59" name="os-autoinst-devel" arch="s390x">
  <version epoch="0" ver="4.6.1639403953.ae94c4bd" rel="bp154.2.3.1"/>
  <changelog author="okurz@suse.com" date="1632225600">- Update to version 4.6.1632209573.6778e83a:
  * mmapi: Allow for longer and more retries after observed failures
  * Fix spelling for svirt xml file
  * Add OPENQA_HOSTNAME to xml metadata</changelog>
  <changelog author="okurz@suse.com" date="1632484800">- Update to version 4.6.1632416043.04a757ed:
  * Remove check for qemu &gt;= 4 in qemu backend</changelog>
  <changelog author="okurz@suse.com" date="1632830400">- Update to version 4.6.1632799442.f77d4e14:
  * Add support for timeout on SSH based commands if possible
  * Allow spaces and comma as delimiter for SCHEDULE variable
  * Flush Python's `stderr` to ensure error messages end up in logs
  * Adapt container path in README in accordance with 16d2b42e0960
  * Use Leap 15.3 container
  * Correctly use QEMU_COMPRESS_QCOW2
  * Use Leap 15.3 as TW's glibc 2.34 breaks CI</changelog>
  <changelog author="okurz@suse.com" date="1633608000">- Update to version 4.6.1633618600.9b31e877:
  * testapi: Remove redundant "use 5.018" replaced by Mojo::Base -strict
  * Use proper perl "signatures" in t
  * t: Output backend state message on error for debugging
  * tools: Use git for faster tidy file cleanup if possible
  * Select sensible default of 5 minutes for SSH command timeout
  * ssh_screen::type_string(): Print error code if write() fails
  * Add unit tests for baseclass::wait_serial
  * Avoid tidy script failures when a filename has spaces
  * Allow running tidy on single files
  * Rename subroutine to clear serial line buffer
  * Set offset in serial output buffer
  * Use consistent abbreviated SPDX license identifiers
  * Speedup, simplify and fix log format with Time::Moment
  * Use consistent "Copyright" header without problematic characters
  * t: Add Test::Warnings to 08-autotest
  * t: Fix "Useless use of a constant"
  * Fully tidy consoles/VNC.pm
  * Use proper perl "signatures" in tools
  * Use proper perl "signatures" in t/data
  * workflows/commit_message_checker.yml: Fix file based prefix
  * Replace all possible occurences of docker with generic version
  * Use simpler 'podman' as drop-in replacement for our checks</changelog>
  <changelog author="okurz@suse.com" date="1634040000">- Update to version 4.6.1634046033.a9024b37:
  * validate_script_output: Fix static timeout when typing command
  * testapi: Fix POD parsing for "distri-&gt;script_run" with escaping
  * Reformat code to current perltidy style
  * tools/tidy: Disable aligning assignments
  * Revert "qemu: fall back to HDDSIZEGB value, even for backing file"
  * Use proper perl "signatures" in OpenQA::Isotovideo
  * Document `imgsearch` script
  * Add test for imgsearch script
  * Add standalone script for using fuzzy image comparison
  * Use proper perl "signatures" in OpenQA
  * Use proper perl "signatures" in OpenQA::Qemu
  * OpenQA: Simplify variable use to avoid typo
  * CI: Allow exception for "git subrepo pull" messages
  * git subrepo pull (merge) external/os-autoinst-common
  * qemu: fall back to HDDSIZEGB value, even for backing file</changelog>
  <changelog author="okurz@suse.com" date="1634299200">- Update to version 4.6.1634214936.d7a89a59:
  * Exclude all currently generated files in git
  * ci: Update codecov-action to v2
  * dist: Bump up timeout scale due to recent OBS observed failures
  * .mergify.yml: Make rules stricter requiring patch coverage</changelog>
  <changelog author="okurz@suse.com" date="1634817600">- Update to version 4.6.1634839907.cef5afdf:
  * t: Cleanup files at the and of tests
  * Exclude more files in .gitignore and remove others
  * Upload coverage data to codecov from the build directory
  * Use signatures in ocr
  * Use signatures in signalblocker
  * Run `codecovbash` in the source directory so it can find source files
  * Fix assignment of `build_dir` for CI build/tests
  * consoles/sshSerial: Make ssh port configurable
  * Use signatures in myjsonrpc
  * CI: Do out-of-source tree build</changelog>
  <changelog author="okurz@suse.com" date="1635422400">- Update to version 4.6.1635464770.6790629e:
  * Add quirk for QEMU &gt;= 5 on PPC
  * t: Add test for qemu_params_ofw
  * backend:qemu: Extract 'qemu_params_ofw'
  * t: Check git status at the end of every test
  * t: Add test for one error handling of myjsonrpc
  * myjsonrpc: Remove redundant next at end of while
  * myjsonrpc: Slightly simplify the code
  * t: Use signatures in 24-myjsonrpc.t
  * myjsonrpc: Provide stack trace on undefined value used as symbol ref</changelog>
  <changelog author="okurz@suse.com" date="1635854400">- Update to version 4.6.1635869279.8838dc09:
  * Fix handling resume command (of developer mode) when not paused
  * Fix passing border_offset parameter to mouse_hide
  * t: Use Test::Warnings in all tests
  * Use proper SPDX identifier in t/15-logging.t as well
  * t: Add Test::Warnings to 30-mmapi.t
  * xt: Add style check to ensure all tests use Test::Most
  * t: Use Test::Most in all tests for consistency
  * Switch from usb-ehci to qemu-xhci
  * Provide more explicit error handling on invalid product dir
  * t: Move subtest in 14-isotovideo which does not need mocked backend
  * t: Extract OpenQA::Isotovideo::Utils specific test</changelog>
  <changelog author="okurz@suse.com" date="1636459200">- Update to version 4.6.1636474618.9c079e07:
  * t: Add test for backend::spvm
  * t: Add test for backend::driver
  * t: Add test for backend::null
  * Simplify backend::baseclass::alive
  * Delete unused exception handling in backend::qemu
  * backend::qemu: Fix bug that qemu alive status was never tested
  * Declare likely obsolete backend::pvm as deprecated
  * Mark only sporadically test covered statements
  * t: Improve Test::More error output context in helper
  * t: Output state file content in case of error where missing
  * Add simple instantiation test of backend::pvm
  * dist: Do not build for i586
  * Fix missing subsecond display in video captions
  * doc: Add missing documentation for NOVALINK variables
  * Update tidy to 20211029</changelog>
  <changelog author="okurz@suse.com" date="1636718400">- Update to version 4.6.1636551041.85fc82ce:
  * Warn about backend errors more prominently in log</changelog>
  <changelog author="okurz@suse.com" date="1636977600">- Update to version 4.6.1636972309.195774f7:
  * dist: Also disable i586 build for -test flavor
  * Extend all backend API function signatures with optional slurpy @
  * Use proper perl "signatures" in backend</changelog>
  <changelog author="okurz@suse.com" date="1637841600">- Update to version 4.6.1637851285.25850081:
  * Fix collecting coverage when invoking `run_all` in `t/08-autotest.t`
  * Avoid redundant code in `t/08-autotest.t`
  * Add test for early stop due to `TESTDEBUG`
  * Improve coding style and simplify `t/08-autotest.t`
  * Log reason for stopping the test execution early
  * Avoid running into TBB's soft limit for the max. number of threads
  * docs: Clearly mention devel:openQA in README
  * Fix working directory for generating HTML coverage report
  * Add unit test for basetest::get_new_serial_output
  * osutils: Do not hide errors of exec call in run() and run_diag()
  * qemu: Don't call chattr with timeout and remove -f arg
  * baseclass: Fix errors in some tests by increasing _CHKSEL_RATE_HITS
  * testapi: Add die_on_timeout option to testapi::script::run()
  * ipmi: Make persistent SOL console enabled by default
  * Ignore the previous tests fail hook output in the search for issues</changelog>
  <changelog author="okurz@suse.com" date="1638100800">- Update to version 4.6.1638007345.ae6eed2a:
  * Update deprecated 'short-form boolean' qemu args
  * imgsearch: disable OpenCV logging
  * qemu: Automatically create swtpm device
  * commands: Use same log format as isotovideo</changelog>
  <changelog author="okurz@suse.com" date="1638273600">- Update to version 4.6.1638289529.0a3f5b98:
  * Fix sporadic error in t/10-virtio_terminal.t
  * t: Reduce test timeout for 31-sshSerial as feasible
  * t: Simplify mocked methods in 31-sshSerial.t
  * t: Add full coverage for 31-sshSerial.t</changelog>
  <changelog author="okurz@suse.com" date="1638532800">- Update to version 4.6.1638454781.7b07525b:
  * xt: Fix style check when called in CI from other directory
  * t: Fix missing Test::Warning check in 36-openqa-namedioselect
  * Remove obsolete consoles::remoteVnc
  * Use proper perl "signatures" in some consoles
  * baseclass: Add test for check_select_rate() function
  * baseclass: Improve error message on "half-open socket"</changelog>
  <changelog author="okurz@suse.com" date="1638705600">- Update to version 4.6.1638540755.a348c6d8:
  * ci: Fix OpenQA::Test::CheckGitStatus exit status
  * ci: Fix exit code of OpenQA::Test::CheckGitStatus
  * basetest.pm: Add signatures for new method
  * Add execution time for failed test modules</changelog>
  <changelog author="okurz@suse.com" date="1638878400">- Update to version 4.6.1638699195.e4430abe:
  * Streamline the use of "|||" log marker with new "modstate" function</changelog>
  <changelog author="okurz@suse.com" date="1639396800">- Update to version 4.6.1639403953.ae94c4bd:
  * mergify: Add more useful checks
  * mergify: Use non-deprecated 'check-succes' instead of 'status-success'
  * mergify: Reduce duplication with YAML anchors
  * mergify: Rely on more reviewers
  * Makefile: Fix build dir when calling make with "-C" itself</changelog>
  <changelog author="Oliver Kurz &lt;okurz@suse.com&gt;" date="1657886400">- Fix os-autoinst-devel opencv dependency for upgrade (boo#1201552)</changelog>
</package>
<package pkgid="0adaf4384daecdbdee05ca43791e1ecbfbe419e51ae6ad779db9275a380605c1" name="os-autoinst-devel" arch="x86_64">
  <version epoch="0" ver="4.6.1639403953.ae94c4bd" rel="bp154.2.3.1"/>
  <changelog author="okurz@suse.com" date="1632225600">- Update to version 4.6.1632209573.6778e83a:
  * mmapi: Allow for longer and more retries after observed failures
  * Fix spelling for svirt xml file
  * Add OPENQA_HOSTNAME to xml metadata</changelog>
  <changelog author="okurz@suse.com" date="1632484800">- Update to version 4.6.1632416043.04a757ed:
  * Remove check for qemu &gt;= 4 in qemu backend</changelog>
  <changelog author="okurz@suse.com" date="1632830400">- Update to version 4.6.1632799442.f77d4e14:
  * Add support for timeout on SSH based commands if possible
  * Allow spaces and comma as delimiter for SCHEDULE variable
  * Flush Python's `stderr` to ensure error messages end up in logs
  * Adapt container path in README in accordance with 16d2b42e0960
  * Use Leap 15.3 container
  * Correctly use QEMU_COMPRESS_QCOW2
  * Use Leap 15.3 as TW's glibc 2.34 breaks CI</changelog>
  <changelog author="okurz@suse.com" date="1633608000">- Update to version 4.6.1633618600.9b31e877:
  * testapi: Remove redundant "use 5.018" replaced by Mojo::Base -strict
  * Use proper perl "signatures" in t
  * t: Output backend state message on error for debugging
  * tools: Use git for faster tidy file cleanup if possible
  * Select sensible default of 5 minutes for SSH command timeout
  * ssh_screen::type_string(): Print error code if write() fails
  * Add unit tests for baseclass::wait_serial
  * Avoid tidy script failures when a filename has spaces
  * Allow running tidy on single files
  * Rename subroutine to clear serial line buffer
  * Set offset in serial output buffer
  * Use consistent abbreviated SPDX license identifiers
  * Speedup, simplify and fix log format with Time::Moment
  * Use consistent "Copyright" header without problematic characters
  * t: Add Test::Warnings to 08-autotest
  * t: Fix "Useless use of a constant"
  * Fully tidy consoles/VNC.pm
  * Use proper perl "signatures" in tools
  * Use proper perl "signatures" in t/data
  * workflows/commit_message_checker.yml: Fix file based prefix
  * Replace all possible occurences of docker with generic version
  * Use simpler 'podman' as drop-in replacement for our checks</changelog>
  <changelog author="okurz@suse.com" date="1634040000">- Update to version 4.6.1634046033.a9024b37:
  * validate_script_output: Fix static timeout when typing command
  * testapi: Fix POD parsing for "distri-&gt;script_run" with escaping
  * Reformat code to current perltidy style
  * tools/tidy: Disable aligning assignments
  * Revert "qemu: fall back to HDDSIZEGB value, even for backing file"
  * Use proper perl "signatures" in OpenQA::Isotovideo
  * Document `imgsearch` script
  * Add test for imgsearch script
  * Add standalone script for using fuzzy image comparison
  * Use proper perl "signatures" in OpenQA
  * Use proper perl "signatures" in OpenQA::Qemu
  * OpenQA: Simplify variable use to avoid typo
  * CI: Allow exception for "git subrepo pull" messages
  * git subrepo pull (merge) external/os-autoinst-common
  * qemu: fall back to HDDSIZEGB value, even for backing file</changelog>
  <changelog author="okurz@suse.com" date="1634299200">- Update to version 4.6.1634214936.d7a89a59:
  * Exclude all currently generated files in git
  * ci: Update codecov-action to v2
  * dist: Bump up timeout scale due to recent OBS observed failures
  * .mergify.yml: Make rules stricter requiring patch coverage</changelog>
  <changelog author="okurz@suse.com" date="1634817600">- Update to version 4.6.1634839907.cef5afdf:
  * t: Cleanup files at the and of tests
  * Exclude more files in .gitignore and remove others
  * Upload coverage data to codecov from the build directory
  * Use signatures in ocr
  * Use signatures in signalblocker
  * Run `codecovbash` in the source directory so it can find source files
  * Fix assignment of `build_dir` for CI build/tests
  * consoles/sshSerial: Make ssh port configurable
  * Use signatures in myjsonrpc
  * CI: Do out-of-source tree build</changelog>
  <changelog author="okurz@suse.com" date="1635422400">- Update to version 4.6.1635464770.6790629e:
  * Add quirk for QEMU &gt;= 5 on PPC
  * t: Add test for qemu_params_ofw
  * backend:qemu: Extract 'qemu_params_ofw'
  * t: Check git status at the end of every test
  * t: Add test for one error handling of myjsonrpc
  * myjsonrpc: Remove redundant next at end of while
  * myjsonrpc: Slightly simplify the code
  * t: Use signatures in 24-myjsonrpc.t
  * myjsonrpc: Provide stack trace on undefined value used as symbol ref</changelog>
  <changelog author="okurz@suse.com" date="1635854400">- Update to version 4.6.1635869279.8838dc09:
  * Fix handling resume command (of developer mode) when not paused
  * Fix passing border_offset parameter to mouse_hide
  * t: Use Test::Warnings in all tests
  * Use proper SPDX identifier in t/15-logging.t as well
  * t: Add Test::Warnings to 30-mmapi.t
  * xt: Add style check to ensure all tests use Test::Most
  * t: Use Test::Most in all tests for consistency
  * Switch from usb-ehci to qemu-xhci
  * Provide more explicit error handling on invalid product dir
  * t: Move subtest in 14-isotovideo which does not need mocked backend
  * t: Extract OpenQA::Isotovideo::Utils specific test</changelog>
  <changelog author="okurz@suse.com" date="1636459200">- Update to version 4.6.1636474618.9c079e07:
  * t: Add test for backend::spvm
  * t: Add test for backend::driver
  * t: Add test for backend::null
  * Simplify backend::baseclass::alive
  * Delete unused exception handling in backend::qemu
  * backend::qemu: Fix bug that qemu alive status was never tested
  * Declare likely obsolete backend::pvm as deprecated
  * Mark only sporadically test covered statements
  * t: Improve Test::More error output context in helper
  * t: Output state file content in case of error where missing
  * Add simple instantiation test of backend::pvm
  * dist: Do not build for i586
  * Fix missing subsecond display in video captions
  * doc: Add missing documentation for NOVALINK variables
  * Update tidy to 20211029</changelog>
  <changelog author="okurz@suse.com" date="1636718400">- Update to version 4.6.1636551041.85fc82ce:
  * Warn about backend errors more prominently in log</changelog>
  <changelog author="okurz@suse.com" date="1636977600">- Update to version 4.6.1636972309.195774f7:
  * dist: Also disable i586 build for -test flavor
  * Extend all backend API function signatures with optional slurpy @
  * Use proper perl "signatures" in backend</changelog>
  <changelog author="okurz@suse.com" date="1637841600">- Update to version 4.6.1637851285.25850081:
  * Fix collecting coverage when invoking `run_all` in `t/08-autotest.t`
  * Avoid redundant code in `t/08-autotest.t`
  * Add test for early stop due to `TESTDEBUG`
  * Improve coding style and simplify `t/08-autotest.t`
  * Log reason for stopping the test execution early
  * Avoid running into TBB's soft limit for the max. number of threads
  * docs: Clearly mention devel:openQA in README
  * Fix working directory for generating HTML coverage report
  * Add unit test for basetest::get_new_serial_output
  * osutils: Do not hide errors of exec call in run() and run_diag()
  * qemu: Don't call chattr with timeout and remove -f arg
  * baseclass: Fix errors in some tests by increasing _CHKSEL_RATE_HITS
  * testapi: Add die_on_timeout option to testapi::script::run()
  * ipmi: Make persistent SOL console enabled by default
  * Ignore the previous tests fail hook output in the search for issues</changelog>
  <changelog author="okurz@suse.com" date="1638100800">- Update to version 4.6.1638007345.ae6eed2a:
  * Update deprecated 'short-form boolean' qemu args
  * imgsearch: disable OpenCV logging
  * qemu: Automatically create swtpm device
  * commands: Use same log format as isotovideo</changelog>
  <changelog author="okurz@suse.com" date="1638273600">- Update to version 4.6.1638289529.0a3f5b98:
  * Fix sporadic error in t/10-virtio_terminal.t
  * t: Reduce test timeout for 31-sshSerial as feasible
  * t: Simplify mocked methods in 31-sshSerial.t
  * t: Add full coverage for 31-sshSerial.t</changelog>
  <changelog author="okurz@suse.com" date="1638532800">- Update to version 4.6.1638454781.7b07525b:
  * xt: Fix style check when called in CI from other directory
  * t: Fix missing Test::Warning check in 36-openqa-namedioselect
  * Remove obsolete consoles::remoteVnc
  * Use proper perl "signatures" in some consoles
  * baseclass: Add test for check_select_rate() function
  * baseclass: Improve error message on "half-open socket"</changelog>
  <changelog author="okurz@suse.com" date="1638705600">- Update to version 4.6.1638540755.a348c6d8:
  * ci: Fix OpenQA::Test::CheckGitStatus exit status
  * ci: Fix exit code of OpenQA::Test::CheckGitStatus
  * basetest.pm: Add signatures for new method
  * Add execution time for failed test modules</changelog>
  <changelog author="okurz@suse.com" date="1638878400">- Update to version 4.6.1638699195.e4430abe:
  * Streamline the use of "|||" log marker with new "modstate" function</changelog>
  <changelog author="okurz@suse.com" date="1639396800">- Update to version 4.6.1639403953.ae94c4bd:
  * mergify: Add more useful checks
  * mergify: Use non-deprecated 'check-succes' instead of 'status-success'
  * mergify: Reduce duplication with YAML anchors
  * mergify: Rely on more reviewers
  * Makefile: Fix build dir when calling make with "-C" itself</changelog>
  <changelog author="Oliver Kurz &lt;okurz@suse.com&gt;" date="1657886400">- Fix os-autoinst-devel opencv dependency for upgrade (boo#1201552)</changelog>
</package>
<package pkgid="973c4a3b8dd434cd6d861b91f05f35d2bd41ab6fd7bfcf2b10b5cbe14ffeb56a" name="os-autoinst-openvswitch" arch="aarch64">
  <version epoch="0" ver="4.6.1639403953.ae94c4bd" rel="bp154.2.3.1"/>
  <changelog author="okurz@suse.com" date="1632225600">- Update to version 4.6.1632209573.6778e83a:
  * mmapi: Allow for longer and more retries after observed failures
  * Fix spelling for svirt xml file
  * Add OPENQA_HOSTNAME to xml metadata</changelog>
  <changelog author="okurz@suse.com" date="1632484800">- Update to version 4.6.1632416043.04a757ed:
  * Remove check for qemu &gt;= 4 in qemu backend</changelog>
  <changelog author="okurz@suse.com" date="1632830400">- Update to version 4.6.1632799442.f77d4e14:
  * Add support for timeout on SSH based commands if possible
  * Allow spaces and comma as delimiter for SCHEDULE variable
  * Flush Python's `stderr` to ensure error messages end up in logs
  * Adapt container path in README in accordance with 16d2b42e0960
  * Use Leap 15.3 container
  * Correctly use QEMU_COMPRESS_QCOW2
  * Use Leap 15.3 as TW's glibc 2.34 breaks CI</changelog>
  <changelog author="okurz@suse.com" date="1633608000">- Update to version 4.6.1633618600.9b31e877:
  * testapi: Remove redundant "use 5.018" replaced by Mojo::Base -strict
  * Use proper perl "signatures" in t
  * t: Output backend state message on error for debugging
  * tools: Use git for faster tidy file cleanup if possible
  * Select sensible default of 5 minutes for SSH command timeout
  * ssh_screen::type_string(): Print error code if write() fails
  * Add unit tests for baseclass::wait_serial
  * Avoid tidy script failures when a filename has spaces
  * Allow running tidy on single files
  * Rename subroutine to clear serial line buffer
  * Set offset in serial output buffer
  * Use consistent abbreviated SPDX license identifiers
  * Speedup, simplify and fix log format with Time::Moment
  * Use consistent "Copyright" header without problematic characters
  * t: Add Test::Warnings to 08-autotest
  * t: Fix "Useless use of a constant"
  * Fully tidy consoles/VNC.pm
  * Use proper perl "signatures" in tools
  * Use proper perl "signatures" in t/data
  * workflows/commit_message_checker.yml: Fix file based prefix
  * Replace all possible occurences of docker with generic version
  * Use simpler 'podman' as drop-in replacement for our checks</changelog>
  <changelog author="okurz@suse.com" date="1634040000">- Update to version 4.6.1634046033.a9024b37:
  * validate_script_output: Fix static timeout when typing command
  * testapi: Fix POD parsing for "distri-&gt;script_run" with escaping
  * Reformat code to current perltidy style
  * tools/tidy: Disable aligning assignments
  * Revert "qemu: fall back to HDDSIZEGB value, even for backing file"
  * Use proper perl "signatures" in OpenQA::Isotovideo
  * Document `imgsearch` script
  * Add test for imgsearch script
  * Add standalone script for using fuzzy image comparison
  * Use proper perl "signatures" in OpenQA
  * Use proper perl "signatures" in OpenQA::Qemu
  * OpenQA: Simplify variable use to avoid typo
  * CI: Allow exception for "git subrepo pull" messages
  * git subrepo pull (merge) external/os-autoinst-common
  * qemu: fall back to HDDSIZEGB value, even for backing file</changelog>
  <changelog author="okurz@suse.com" date="1634299200">- Update to version 4.6.1634214936.d7a89a59:
  * Exclude all currently generated files in git
  * ci: Update codecov-action to v2
  * dist: Bump up timeout scale due to recent OBS observed failures
  * .mergify.yml: Make rules stricter requiring patch coverage</changelog>
  <changelog author="okurz@suse.com" date="1634817600">- Update to version 4.6.1634839907.cef5afdf:
  * t: Cleanup files at the and of tests
  * Exclude more files in .gitignore and remove others
  * Upload coverage data to codecov from the build directory
  * Use signatures in ocr
  * Use signatures in signalblocker
  * Run `codecovbash` in the source directory so it can find source files
  * Fix assignment of `build_dir` for CI build/tests
  * consoles/sshSerial: Make ssh port configurable
  * Use signatures in myjsonrpc
  * CI: Do out-of-source tree build</changelog>
  <changelog author="okurz@suse.com" date="1635422400">- Update to version 4.6.1635464770.6790629e:
  * Add quirk for QEMU &gt;= 5 on PPC
  * t: Add test for qemu_params_ofw
  * backend:qemu: Extract 'qemu_params_ofw'
  * t: Check git status at the end of every test
  * t: Add test for one error handling of myjsonrpc
  * myjsonrpc: Remove redundant next at end of while
  * myjsonrpc: Slightly simplify the code
  * t: Use signatures in 24-myjsonrpc.t
  * myjsonrpc: Provide stack trace on undefined value used as symbol ref</changelog>
  <changelog author="okurz@suse.com" date="1635854400">- Update to version 4.6.1635869279.8838dc09:
  * Fix handling resume command (of developer mode) when not paused
  * Fix passing border_offset parameter to mouse_hide
  * t: Use Test::Warnings in all tests
  * Use proper SPDX identifier in t/15-logging.t as well
  * t: Add Test::Warnings to 30-mmapi.t
  * xt: Add style check to ensure all tests use Test::Most
  * t: Use Test::Most in all tests for consistency
  * Switch from usb-ehci to qemu-xhci
  * Provide more explicit error handling on invalid product dir
  * t: Move subtest in 14-isotovideo which does not need mocked backend
  * t: Extract OpenQA::Isotovideo::Utils specific test</changelog>
  <changelog author="okurz@suse.com" date="1636459200">- Update to version 4.6.1636474618.9c079e07:
  * t: Add test for backend::spvm
  * t: Add test for backend::driver
  * t: Add test for backend::null
  * Simplify backend::baseclass::alive
  * Delete unused exception handling in backend::qemu
  * backend::qemu: Fix bug that qemu alive status was never tested
  * Declare likely obsolete backend::pvm as deprecated
  * Mark only sporadically test covered statements
  * t: Improve Test::More error output context in helper
  * t: Output state file content in case of error where missing
  * Add simple instantiation test of backend::pvm
  * dist: Do not build for i586
  * Fix missing subsecond display in video captions
  * doc: Add missing documentation for NOVALINK variables
  * Update tidy to 20211029</changelog>
  <changelog author="okurz@suse.com" date="1636718400">- Update to version 4.6.1636551041.85fc82ce:
  * Warn about backend errors more prominently in log</changelog>
  <changelog author="okurz@suse.com" date="1636977600">- Update to version 4.6.1636972309.195774f7:
  * dist: Also disable i586 build for -test flavor
  * Extend all backend API function signatures with optional slurpy @
  * Use proper perl "signatures" in backend</changelog>
  <changelog author="okurz@suse.com" date="1637841600">- Update to version 4.6.1637851285.25850081:
  * Fix collecting coverage when invoking `run_all` in `t/08-autotest.t`
  * Avoid redundant code in `t/08-autotest.t`
  * Add test for early stop due to `TESTDEBUG`
  * Improve coding style and simplify `t/08-autotest.t`
  * Log reason for stopping the test execution early
  * Avoid running into TBB's soft limit for the max. number of threads
  * docs: Clearly mention devel:openQA in README
  * Fix working directory for generating HTML coverage report
  * Add unit test for basetest::get_new_serial_output
  * osutils: Do not hide errors of exec call in run() and run_diag()
  * qemu: Don't call chattr with timeout and remove -f arg
  * baseclass: Fix errors in some tests by increasing _CHKSEL_RATE_HITS
  * testapi: Add die_on_timeout option to testapi::script::run()
  * ipmi: Make persistent SOL console enabled by default
  * Ignore the previous tests fail hook output in the search for issues</changelog>
  <changelog author="okurz@suse.com" date="1638100800">- Update to version 4.6.1638007345.ae6eed2a:
  * Update deprecated 'short-form boolean' qemu args
  * imgsearch: disable OpenCV logging
  * qemu: Automatically create swtpm device
  * commands: Use same log format as isotovideo</changelog>
  <changelog author="okurz@suse.com" date="1638273600">- Update to version 4.6.1638289529.0a3f5b98:
  * Fix sporadic error in t/10-virtio_terminal.t
  * t: Reduce test timeout for 31-sshSerial as feasible
  * t: Simplify mocked methods in 31-sshSerial.t
  * t: Add full coverage for 31-sshSerial.t</changelog>
  <changelog author="okurz@suse.com" date="1638532800">- Update to version 4.6.1638454781.7b07525b:
  * xt: Fix style check when called in CI from other directory
  * t: Fix missing Test::Warning check in 36-openqa-namedioselect
  * Remove obsolete consoles::remoteVnc
  * Use proper perl "signatures" in some consoles
  * baseclass: Add test for check_select_rate() function
  * baseclass: Improve error message on "half-open socket"</changelog>
  <changelog author="okurz@suse.com" date="1638705600">- Update to version 4.6.1638540755.a348c6d8:
  * ci: Fix OpenQA::Test::CheckGitStatus exit status
  * ci: Fix exit code of OpenQA::Test::CheckGitStatus
  * basetest.pm: Add signatures for new method
  * Add execution time for failed test modules</changelog>
  <changelog author="okurz@suse.com" date="1638878400">- Update to version 4.6.1638699195.e4430abe:
  * Streamline the use of "|||" log marker with new "modstate" function</changelog>
  <changelog author="okurz@suse.com" date="1639396800">- Update to version 4.6.1639403953.ae94c4bd:
  * mergify: Add more useful checks
  * mergify: Use non-deprecated 'check-succes' instead of 'status-success'
  * mergify: Reduce duplication with YAML anchors
  * mergify: Rely on more reviewers
  * Makefile: Fix build dir when calling make with "-C" itself</changelog>
  <changelog author="Oliver Kurz &lt;okurz@suse.com&gt;" date="1657886400">- Fix os-autoinst-devel opencv dependency for upgrade (boo#1201552)</changelog>
</package>
<package pkgid="fdfb408088d32aa6390bd0babc301358f4bfe5cdb352b055061a9f46459b3f53" name="os-autoinst-openvswitch" arch="ppc64le">
  <version epoch="0" ver="4.6.1639403953.ae94c4bd" rel="bp154.2.3.1"/>
  <changelog author="okurz@suse.com" date="1632225600">- Update to version 4.6.1632209573.6778e83a:
  * mmapi: Allow for longer and more retries after observed failures
  * Fix spelling for svirt xml file
  * Add OPENQA_HOSTNAME to xml metadata</changelog>
  <changelog author="okurz@suse.com" date="1632484800">- Update to version 4.6.1632416043.04a757ed:
  * Remove check for qemu &gt;= 4 in qemu backend</changelog>
  <changelog author="okurz@suse.com" date="1632830400">- Update to version 4.6.1632799442.f77d4e14:
  * Add support for timeout on SSH based commands if possible
  * Allow spaces and comma as delimiter for SCHEDULE variable
  * Flush Python's `stderr` to ensure error messages end up in logs
  * Adapt container path in README in accordance with 16d2b42e0960
  * Use Leap 15.3 container
  * Correctly use QEMU_COMPRESS_QCOW2
  * Use Leap 15.3 as TW's glibc 2.34 breaks CI</changelog>
  <changelog author="okurz@suse.com" date="1633608000">- Update to version 4.6.1633618600.9b31e877:
  * testapi: Remove redundant "use 5.018" replaced by Mojo::Base -strict
  * Use proper perl "signatures" in t
  * t: Output backend state message on error for debugging
  * tools: Use git for faster tidy file cleanup if possible
  * Select sensible default of 5 minutes for SSH command timeout
  * ssh_screen::type_string(): Print error code if write() fails
  * Add unit tests for baseclass::wait_serial
  * Avoid tidy script failures when a filename has spaces
  * Allow running tidy on single files
  * Rename subroutine to clear serial line buffer
  * Set offset in serial output buffer
  * Use consistent abbreviated SPDX license identifiers
  * Speedup, simplify and fix log format with Time::Moment
  * Use consistent "Copyright" header without problematic characters
  * t: Add Test::Warnings to 08-autotest
  * t: Fix "Useless use of a constant"
  * Fully tidy consoles/VNC.pm
  * Use proper perl "signatures" in tools
  * Use proper perl "signatures" in t/data
  * workflows/commit_message_checker.yml: Fix file based prefix
  * Replace all possible occurences of docker with generic version
  * Use simpler 'podman' as drop-in replacement for our checks</changelog>
  <changelog author="okurz@suse.com" date="1634040000">- Update to version 4.6.1634046033.a9024b37:
  * validate_script_output: Fix static timeout when typing command
  * testapi: Fix POD parsing for "distri-&gt;script_run" with escaping
  * Reformat code to current perltidy style
  * tools/tidy: Disable aligning assignments
  * Revert "qemu: fall back to HDDSIZEGB value, even for backing file"
  * Use proper perl "signatures" in OpenQA::Isotovideo
  * Document `imgsearch` script
  * Add test for imgsearch script
  * Add standalone script for using fuzzy image comparison
  * Use proper perl "signatures" in OpenQA
  * Use proper perl "signatures" in OpenQA::Qemu
  * OpenQA: Simplify variable use to avoid typo
  * CI: Allow exception for "git subrepo pull" messages
  * git subrepo pull (merge) external/os-autoinst-common
  * qemu: fall back to HDDSIZEGB value, even for backing file</changelog>
  <changelog author="okurz@suse.com" date="1634299200">- Update to version 4.6.1634214936.d7a89a59:
  * Exclude all currently generated files in git
  * ci: Update codecov-action to v2
  * dist: Bump up timeout scale due to recent OBS observed failures
  * .mergify.yml: Make rules stricter requiring patch coverage</changelog>
  <changelog author="okurz@suse.com" date="1634817600">- Update to version 4.6.1634839907.cef5afdf:
  * t: Cleanup files at the and of tests
  * Exclude more files in .gitignore and remove others
  * Upload coverage data to codecov from the build directory
  * Use signatures in ocr
  * Use signatures in signalblocker
  * Run `codecovbash` in the source directory so it can find source files
  * Fix assignment of `build_dir` for CI build/tests
  * consoles/sshSerial: Make ssh port configurable
  * Use signatures in myjsonrpc
  * CI: Do out-of-source tree build</changelog>
  <changelog author="okurz@suse.com" date="1635422400">- Update to version 4.6.1635464770.6790629e:
  * Add quirk for QEMU &gt;= 5 on PPC
  * t: Add test for qemu_params_ofw
  * backend:qemu: Extract 'qemu_params_ofw'
  * t: Check git status at the end of every test
  * t: Add test for one error handling of myjsonrpc
  * myjsonrpc: Remove redundant next at end of while
  * myjsonrpc: Slightly simplify the code
  * t: Use signatures in 24-myjsonrpc.t
  * myjsonrpc: Provide stack trace on undefined value used as symbol ref</changelog>
  <changelog author="okurz@suse.com" date="1635854400">- Update to version 4.6.1635869279.8838dc09:
  * Fix handling resume command (of developer mode) when not paused
  * Fix passing border_offset parameter to mouse_hide
  * t: Use Test::Warnings in all tests
  * Use proper SPDX identifier in t/15-logging.t as well
  * t: Add Test::Warnings to 30-mmapi.t
  * xt: Add style check to ensure all tests use Test::Most
  * t: Use Test::Most in all tests for consistency
  * Switch from usb-ehci to qemu-xhci
  * Provide more explicit error handling on invalid product dir
  * t: Move subtest in 14-isotovideo which does not need mocked backend
  * t: Extract OpenQA::Isotovideo::Utils specific test</changelog>
  <changelog author="okurz@suse.com" date="1636459200">- Update to version 4.6.1636474618.9c079e07:
  * t: Add test for backend::spvm
  * t: Add test for backend::driver
  * t: Add test for backend::null
  * Simplify backend::baseclass::alive
  * Delete unused exception handling in backend::qemu
  * backend::qemu: Fix bug that qemu alive status was never tested
  * Declare likely obsolete backend::pvm as deprecated
  * Mark only sporadically test covered statements
  * t: Improve Test::More error output context in helper
  * t: Output state file content in case of error where missing
  * Add simple instantiation test of backend::pvm
  * dist: Do not build for i586
  * Fix missing subsecond display in video captions
  * doc: Add missing documentation for NOVALINK variables
  * Update tidy to 20211029</changelog>
  <changelog author="okurz@suse.com" date="1636718400">- Update to version 4.6.1636551041.85fc82ce:
  * Warn about backend errors more prominently in log</changelog>
  <changelog author="okurz@suse.com" date="1636977600">- Update to version 4.6.1636972309.195774f7:
  * dist: Also disable i586 build for -test flavor
  * Extend all backend API function signatures with optional slurpy @
  * Use proper perl "signatures" in backend</changelog>
  <changelog author="okurz@suse.com" date="1637841600">- Update to version 4.6.1637851285.25850081:
  * Fix collecting coverage when invoking `run_all` in `t/08-autotest.t`
  * Avoid redundant code in `t/08-autotest.t`
  * Add test for early stop due to `TESTDEBUG`
  * Improve coding style and simplify `t/08-autotest.t`
  * Log reason for stopping the test execution early
  * Avoid running into TBB's soft limit for the max. number of threads
  * docs: Clearly mention devel:openQA in README
  * Fix working directory for generating HTML coverage report
  * Add unit test for basetest::get_new_serial_output
  * osutils: Do not hide errors of exec call in run() and run_diag()
  * qemu: Don't call chattr with timeout and remove -f arg
  * baseclass: Fix errors in some tests by increasing _CHKSEL_RATE_HITS
  * testapi: Add die_on_timeout option to testapi::script::run()
  * ipmi: Make persistent SOL console enabled by default
  * Ignore the previous tests fail hook output in the search for issues</changelog>
  <changelog author="okurz@suse.com" date="1638100800">- Update to version 4.6.1638007345.ae6eed2a:
  * Update deprecated 'short-form boolean' qemu args
  * imgsearch: disable OpenCV logging
  * qemu: Automatically create swtpm device
  * commands: Use same log format as isotovideo</changelog>
  <changelog author="okurz@suse.com" date="1638273600">- Update to version 4.6.1638289529.0a3f5b98:
  * Fix sporadic error in t/10-virtio_terminal.t
  * t: Reduce test timeout for 31-sshSerial as feasible
  * t: Simplify mocked methods in 31-sshSerial.t
  * t: Add full coverage for 31-sshSerial.t</changelog>
  <changelog author="okurz@suse.com" date="1638532800">- Update to version 4.6.1638454781.7b07525b:
  * xt: Fix style check when called in CI from other directory
  * t: Fix missing Test::Warning check in 36-openqa-namedioselect
  * Remove obsolete consoles::remoteVnc
  * Use proper perl "signatures" in some consoles
  * baseclass: Add test for check_select_rate() function
  * baseclass: Improve error message on "half-open socket"</changelog>
  <changelog author="okurz@suse.com" date="1638705600">- Update to version 4.6.1638540755.a348c6d8:
  * ci: Fix OpenQA::Test::CheckGitStatus exit status
  * ci: Fix exit code of OpenQA::Test::CheckGitStatus
  * basetest.pm: Add signatures for new method
  * Add execution time for failed test modules</changelog>
  <changelog author="okurz@suse.com" date="1638878400">- Update to version 4.6.1638699195.e4430abe:
  * Streamline the use of "|||" log marker with new "modstate" function</changelog>
  <changelog author="okurz@suse.com" date="1639396800">- Update to version 4.6.1639403953.ae94c4bd:
  * mergify: Add more useful checks
  * mergify: Use non-deprecated 'check-succes' instead of 'status-success'
  * mergify: Reduce duplication with YAML anchors
  * mergify: Rely on more reviewers
  * Makefile: Fix build dir when calling make with "-C" itself</changelog>
  <changelog author="Oliver Kurz &lt;okurz@suse.com&gt;" date="1657886400">- Fix os-autoinst-devel opencv dependency for upgrade (boo#1201552)</changelog>
</package>
<package pkgid="9b6434c414cd5cf5582b5f88c890ac25d87de4489106bf62ad4450f3515058fc" name="os-autoinst-openvswitch" arch="s390x">
  <version epoch="0" ver="4.6.1639403953.ae94c4bd" rel="bp154.2.3.1"/>
  <changelog author="okurz@suse.com" date="1632225600">- Update to version 4.6.1632209573.6778e83a:
  * mmapi: Allow for longer and more retries after observed failures
  * Fix spelling for svirt xml file
  * Add OPENQA_HOSTNAME to xml metadata</changelog>
  <changelog author="okurz@suse.com" date="1632484800">- Update to version 4.6.1632416043.04a757ed:
  * Remove check for qemu &gt;= 4 in qemu backend</changelog>
  <changelog author="okurz@suse.com" date="1632830400">- Update to version 4.6.1632799442.f77d4e14:
  * Add support for timeout on SSH based commands if possible
  * Allow spaces and comma as delimiter for SCHEDULE variable
  * Flush Python's `stderr` to ensure error messages end up in logs
  * Adapt container path in README in accordance with 16d2b42e0960
  * Use Leap 15.3 container
  * Correctly use QEMU_COMPRESS_QCOW2
  * Use Leap 15.3 as TW's glibc 2.34 breaks CI</changelog>
  <changelog author="okurz@suse.com" date="1633608000">- Update to version 4.6.1633618600.9b31e877:
  * testapi: Remove redundant "use 5.018" replaced by Mojo::Base -strict
  * Use proper perl "signatures" in t
  * t: Output backend state message on error for debugging
  * tools: Use git for faster tidy file cleanup if possible
  * Select sensible default of 5 minutes for SSH command timeout
  * ssh_screen::type_string(): Print error code if write() fails
  * Add unit tests for baseclass::wait_serial
  * Avoid tidy script failures when a filename has spaces
  * Allow running tidy on single files
  * Rename subroutine to clear serial line buffer
  * Set offset in serial output buffer
  * Use consistent abbreviated SPDX license identifiers
  * Speedup, simplify and fix log format with Time::Moment
  * Use consistent "Copyright" header without problematic characters
  * t: Add Test::Warnings to 08-autotest
  * t: Fix "Useless use of a constant"
  * Fully tidy consoles/VNC.pm
  * Use proper perl "signatures" in tools
  * Use proper perl "signatures" in t/data
  * workflows/commit_message_checker.yml: Fix file based prefix
  * Replace all possible occurences of docker with generic version
  * Use simpler 'podman' as drop-in replacement for our checks</changelog>
  <changelog author="okurz@suse.com" date="1634040000">- Update to version 4.6.1634046033.a9024b37:
  * validate_script_output: Fix static timeout when typing command
  * testapi: Fix POD parsing for "distri-&gt;script_run" with escaping
  * Reformat code to current perltidy style
  * tools/tidy: Disable aligning assignments
  * Revert "qemu: fall back to HDDSIZEGB value, even for backing file"
  * Use proper perl "signatures" in OpenQA::Isotovideo
  * Document `imgsearch` script
  * Add test for imgsearch script
  * Add standalone script for using fuzzy image comparison
  * Use proper perl "signatures" in OpenQA
  * Use proper perl "signatures" in OpenQA::Qemu
  * OpenQA: Simplify variable use to avoid typo
  * CI: Allow exception for "git subrepo pull" messages
  * git subrepo pull (merge) external/os-autoinst-common
  * qemu: fall back to HDDSIZEGB value, even for backing file</changelog>
  <changelog author="okurz@suse.com" date="1634299200">- Update to version 4.6.1634214936.d7a89a59:
  * Exclude all currently generated files in git
  * ci: Update codecov-action to v2
  * dist: Bump up timeout scale due to recent OBS observed failures
  * .mergify.yml: Make rules stricter requiring patch coverage</changelog>
  <changelog author="okurz@suse.com" date="1634817600">- Update to version 4.6.1634839907.cef5afdf:
  * t: Cleanup files at the and of tests
  * Exclude more files in .gitignore and remove others
  * Upload coverage data to codecov from the build directory
  * Use signatures in ocr
  * Use signatures in signalblocker
  * Run `codecovbash` in the source directory so it can find source files
  * Fix assignment of `build_dir` for CI build/tests
  * consoles/sshSerial: Make ssh port configurable
  * Use signatures in myjsonrpc
  * CI: Do out-of-source tree build</changelog>
  <changelog author="okurz@suse.com" date="1635422400">- Update to version 4.6.1635464770.6790629e:
  * Add quirk for QEMU &gt;= 5 on PPC
  * t: Add test for qemu_params_ofw
  * backend:qemu: Extract 'qemu_params_ofw'
  * t: Check git status at the end of every test
  * t: Add test for one error handling of myjsonrpc
  * myjsonrpc: Remove redundant next at end of while
  * myjsonrpc: Slightly simplify the code
  * t: Use signatures in 24-myjsonrpc.t
  * myjsonrpc: Provide stack trace on undefined value used as symbol ref</changelog>
  <changelog author="okurz@suse.com" date="1635854400">- Update to version 4.6.1635869279.8838dc09:
  * Fix handling resume command (of developer mode) when not paused
  * Fix passing border_offset parameter to mouse_hide
  * t: Use Test::Warnings in all tests
  * Use proper SPDX identifier in t/15-logging.t as well
  * t: Add Test::Warnings to 30-mmapi.t
  * xt: Add style check to ensure all tests use Test::Most
  * t: Use Test::Most in all tests for consistency
  * Switch from usb-ehci to qemu-xhci
  * Provide more explicit error handling on invalid product dir
  * t: Move subtest in 14-isotovideo which does not need mocked backend
  * t: Extract OpenQA::Isotovideo::Utils specific test</changelog>
  <changelog author="okurz@suse.com" date="1636459200">- Update to version 4.6.1636474618.9c079e07:
  * t: Add test for backend::spvm
  * t: Add test for backend::driver
  * t: Add test for backend::null
  * Simplify backend::baseclass::alive
  * Delete unused exception handling in backend::qemu
  * backend::qemu: Fix bug that qemu alive status was never tested
  * Declare likely obsolete backend::pvm as deprecated
  * Mark only sporadically test covered statements
  * t: Improve Test::More error output context in helper
  * t: Output state file content in case of error where missing
  * Add simple instantiation test of backend::pvm
  * dist: Do not build for i586
  * Fix missing subsecond display in video captions
  * doc: Add missing documentation for NOVALINK variables
  * Update tidy to 20211029</changelog>
  <changelog author="okurz@suse.com" date="1636718400">- Update to version 4.6.1636551041.85fc82ce:
  * Warn about backend errors more prominently in log</changelog>
  <changelog author="okurz@suse.com" date="1636977600">- Update to version 4.6.1636972309.195774f7:
  * dist: Also disable i586 build for -test flavor
  * Extend all backend API function signatures with optional slurpy @
  * Use proper perl "signatures" in backend</changelog>
  <changelog author="okurz@suse.com" date="1637841600">- Update to version 4.6.1637851285.25850081:
  * Fix collecting coverage when invoking `run_all` in `t/08-autotest.t`
  * Avoid redundant code in `t/08-autotest.t`
  * Add test for early stop due to `TESTDEBUG`
  * Improve coding style and simplify `t/08-autotest.t`
  * Log reason for stopping the test execution early
  * Avoid running into TBB's soft limit for the max. number of threads
  * docs: Clearly mention devel:openQA in README
  * Fix working directory for generating HTML coverage report
  * Add unit test for basetest::get_new_serial_output
  * osutils: Do not hide errors of exec call in run() and run_diag()
  * qemu: Don't call chattr with timeout and remove -f arg
  * baseclass: Fix errors in some tests by increasing _CHKSEL_RATE_HITS
  * testapi: Add die_on_timeout option to testapi::script::run()
  * ipmi: Make persistent SOL console enabled by default
  * Ignore the previous tests fail hook output in the search for issues</changelog>
  <changelog author="okurz@suse.com" date="1638100800">- Update to version 4.6.1638007345.ae6eed2a:
  * Update deprecated 'short-form boolean' qemu args
  * imgsearch: disable OpenCV logging
  * qemu: Automatically create swtpm device
  * commands: Use same log format as isotovideo</changelog>
  <changelog author="okurz@suse.com" date="1638273600">- Update to version 4.6.1638289529.0a3f5b98:
  * Fix sporadic error in t/10-virtio_terminal.t
  * t: Reduce test timeout for 31-sshSerial as feasible
  * t: Simplify mocked methods in 31-sshSerial.t
  * t: Add full coverage for 31-sshSerial.t</changelog>
  <changelog author="okurz@suse.com" date="1638532800">- Update to version 4.6.1638454781.7b07525b:
  * xt: Fix style check when called in CI from other directory
  * t: Fix missing Test::Warning check in 36-openqa-namedioselect
  * Remove obsolete consoles::remoteVnc
  * Use proper perl "signatures" in some consoles
  * baseclass: Add test for check_select_rate() function
  * baseclass: Improve error message on "half-open socket"</changelog>
  <changelog author="okurz@suse.com" date="1638705600">- Update to version 4.6.1638540755.a348c6d8:
  * ci: Fix OpenQA::Test::CheckGitStatus exit status
  * ci: Fix exit code of OpenQA::Test::CheckGitStatus
  * basetest.pm: Add signatures for new method
  * Add execution time for failed test modules</changelog>
  <changelog author="okurz@suse.com" date="1638878400">- Update to version 4.6.1638699195.e4430abe:
  * Streamline the use of "|||" log marker with new "modstate" function</changelog>
  <changelog author="okurz@suse.com" date="1639396800">- Update to version 4.6.1639403953.ae94c4bd:
  * mergify: Add more useful checks
  * mergify: Use non-deprecated 'check-succes' instead of 'status-success'
  * mergify: Reduce duplication with YAML anchors
  * mergify: Rely on more reviewers
  * Makefile: Fix build dir when calling make with "-C" itself</changelog>
  <changelog author="Oliver Kurz &lt;okurz@suse.com&gt;" date="1657886400">- Fix os-autoinst-devel opencv dependency for upgrade (boo#1201552)</changelog>
</package>
<package pkgid="a216e57e2e9681ef5194c066960bd97e17ecfc42efe237d8b8746ab41f142aed" name="os-autoinst-openvswitch" arch="x86_64">
  <version epoch="0" ver="4.6.1639403953.ae94c4bd" rel="bp154.2.3.1"/>
  <changelog author="okurz@suse.com" date="1632225600">- Update to version 4.6.1632209573.6778e83a:
  * mmapi: Allow for longer and more retries after observed failures
  * Fix spelling for svirt xml file
  * Add OPENQA_HOSTNAME to xml metadata</changelog>
  <changelog author="okurz@suse.com" date="1632484800">- Update to version 4.6.1632416043.04a757ed:
  * Remove check for qemu &gt;= 4 in qemu backend</changelog>
  <changelog author="okurz@suse.com" date="1632830400">- Update to version 4.6.1632799442.f77d4e14:
  * Add support for timeout on SSH based commands if possible
  * Allow spaces and comma as delimiter for SCHEDULE variable
  * Flush Python's `stderr` to ensure error messages end up in logs
  * Adapt container path in README in accordance with 16d2b42e0960
  * Use Leap 15.3 container
  * Correctly use QEMU_COMPRESS_QCOW2
  * Use Leap 15.3 as TW's glibc 2.34 breaks CI</changelog>
  <changelog author="okurz@suse.com" date="1633608000">- Update to version 4.6.1633618600.9b31e877:
  * testapi: Remove redundant "use 5.018" replaced by Mojo::Base -strict
  * Use proper perl "signatures" in t
  * t: Output backend state message on error for debugging
  * tools: Use git for faster tidy file cleanup if possible
  * Select sensible default of 5 minutes for SSH command timeout
  * ssh_screen::type_string(): Print error code if write() fails
  * Add unit tests for baseclass::wait_serial
  * Avoid tidy script failures when a filename has spaces
  * Allow running tidy on single files
  * Rename subroutine to clear serial line buffer
  * Set offset in serial output buffer
  * Use consistent abbreviated SPDX license identifiers
  * Speedup, simplify and fix log format with Time::Moment
  * Use consistent "Copyright" header without problematic characters
  * t: Add Test::Warnings to 08-autotest
  * t: Fix "Useless use of a constant"
  * Fully tidy consoles/VNC.pm
  * Use proper perl "signatures" in tools
  * Use proper perl "signatures" in t/data
  * workflows/commit_message_checker.yml: Fix file based prefix
  * Replace all possible occurences of docker with generic version
  * Use simpler 'podman' as drop-in replacement for our checks</changelog>
  <changelog author="okurz@suse.com" date="1634040000">- Update to version 4.6.1634046033.a9024b37:
  * validate_script_output: Fix static timeout when typing command
  * testapi: Fix POD parsing for "distri-&gt;script_run" with escaping
  * Reformat code to current perltidy style
  * tools/tidy: Disable aligning assignments
  * Revert "qemu: fall back to HDDSIZEGB value, even for backing file"
  * Use proper perl "signatures" in OpenQA::Isotovideo
  * Document `imgsearch` script
  * Add test for imgsearch script
  * Add standalone script for using fuzzy image comparison
  * Use proper perl "signatures" in OpenQA
  * Use proper perl "signatures" in OpenQA::Qemu
  * OpenQA: Simplify variable use to avoid typo
  * CI: Allow exception for "git subrepo pull" messages
  * git subrepo pull (merge) external/os-autoinst-common
  * qemu: fall back to HDDSIZEGB value, even for backing file</changelog>
  <changelog author="okurz@suse.com" date="1634299200">- Update to version 4.6.1634214936.d7a89a59:
  * Exclude all currently generated files in git
  * ci: Update codecov-action to v2
  * dist: Bump up timeout scale due to recent OBS observed failures
  * .mergify.yml: Make rules stricter requiring patch coverage</changelog>
  <changelog author="okurz@suse.com" date="1634817600">- Update to version 4.6.1634839907.cef5afdf:
  * t: Cleanup files at the and of tests
  * Exclude more files in .gitignore and remove others
  * Upload coverage data to codecov from the build directory
  * Use signatures in ocr
  * Use signatures in signalblocker
  * Run `codecovbash` in the source directory so it can find source files
  * Fix assignment of `build_dir` for CI build/tests
  * consoles/sshSerial: Make ssh port configurable
  * Use signatures in myjsonrpc
  * CI: Do out-of-source tree build</changelog>
  <changelog author="okurz@suse.com" date="1635422400">- Update to version 4.6.1635464770.6790629e:
  * Add quirk for QEMU &gt;= 5 on PPC
  * t: Add test for qemu_params_ofw
  * backend:qemu: Extract 'qemu_params_ofw'
  * t: Check git status at the end of every test
  * t: Add test for one error handling of myjsonrpc
  * myjsonrpc: Remove redundant next at end of while
  * myjsonrpc: Slightly simplify the code
  * t: Use signatures in 24-myjsonrpc.t
  * myjsonrpc: Provide stack trace on undefined value used as symbol ref</changelog>
  <changelog author="okurz@suse.com" date="1635854400">- Update to version 4.6.1635869279.8838dc09:
  * Fix handling resume command (of developer mode) when not paused
  * Fix passing border_offset parameter to mouse_hide
  * t: Use Test::Warnings in all tests
  * Use proper SPDX identifier in t/15-logging.t as well
  * t: Add Test::Warnings to 30-mmapi.t
  * xt: Add style check to ensure all tests use Test::Most
  * t: Use Test::Most in all tests for consistency
  * Switch from usb-ehci to qemu-xhci
  * Provide more explicit error handling on invalid product dir
  * t: Move subtest in 14-isotovideo which does not need mocked backend
  * t: Extract OpenQA::Isotovideo::Utils specific test</changelog>
  <changelog author="okurz@suse.com" date="1636459200">- Update to version 4.6.1636474618.9c079e07:
  * t: Add test for backend::spvm
  * t: Add test for backend::driver
  * t: Add test for backend::null
  * Simplify backend::baseclass::alive
  * Delete unused exception handling in backend::qemu
  * backend::qemu: Fix bug that qemu alive status was never tested
  * Declare likely obsolete backend::pvm as deprecated
  * Mark only sporadically test covered statements
  * t: Improve Test::More error output context in helper
  * t: Output state file content in case of error where missing
  * Add simple instantiation test of backend::pvm
  * dist: Do not build for i586
  * Fix missing subsecond display in video captions
  * doc: Add missing documentation for NOVALINK variables
  * Update tidy to 20211029</changelog>
  <changelog author="okurz@suse.com" date="1636718400">- Update to version 4.6.1636551041.85fc82ce:
  * Warn about backend errors more prominently in log</changelog>
  <changelog author="okurz@suse.com" date="1636977600">- Update to version 4.6.1636972309.195774f7:
  * dist: Also disable i586 build for -test flavor
  * Extend all backend API function signatures with optional slurpy @
  * Use proper perl "signatures" in backend</changelog>
  <changelog author="okurz@suse.com" date="1637841600">- Update to version 4.6.1637851285.25850081:
  * Fix collecting coverage when invoking `run_all` in `t/08-autotest.t`
  * Avoid redundant code in `t/08-autotest.t`
  * Add test for early stop due to `TESTDEBUG`
  * Improve coding style and simplify `t/08-autotest.t`
  * Log reason for stopping the test execution early
  * Avoid running into TBB's soft limit for the max. number of threads
  * docs: Clearly mention devel:openQA in README
  * Fix working directory for generating HTML coverage report
  * Add unit test for basetest::get_new_serial_output
  * osutils: Do not hide errors of exec call in run() and run_diag()
  * qemu: Don't call chattr with timeout and remove -f arg
  * baseclass: Fix errors in some tests by increasing _CHKSEL_RATE_HITS
  * testapi: Add die_on_timeout option to testapi::script::run()
  * ipmi: Make persistent SOL console enabled by default
  * Ignore the previous tests fail hook output in the search for issues</changelog>
  <changelog author="okurz@suse.com" date="1638100800">- Update to version 4.6.1638007345.ae6eed2a:
  * Update deprecated 'short-form boolean' qemu args
  * imgsearch: disable OpenCV logging
  * qemu: Automatically create swtpm device
  * commands: Use same log format as isotovideo</changelog>
  <changelog author="okurz@suse.com" date="1638273600">- Update to version 4.6.1638289529.0a3f5b98:
  * Fix sporadic error in t/10-virtio_terminal.t
  * t: Reduce test timeout for 31-sshSerial as feasible
  * t: Simplify mocked methods in 31-sshSerial.t
  * t: Add full coverage for 31-sshSerial.t</changelog>
  <changelog author="okurz@suse.com" date="1638532800">- Update to version 4.6.1638454781.7b07525b:
  * xt: Fix style check when called in CI from other directory
  * t: Fix missing Test::Warning check in 36-openqa-namedioselect
  * Remove obsolete consoles::remoteVnc
  * Use proper perl "signatures" in some consoles
  * baseclass: Add test for check_select_rate() function
  * baseclass: Improve error message on "half-open socket"</changelog>
  <changelog author="okurz@suse.com" date="1638705600">- Update to version 4.6.1638540755.a348c6d8:
  * ci: Fix OpenQA::Test::CheckGitStatus exit status
  * ci: Fix exit code of OpenQA::Test::CheckGitStatus
  * basetest.pm: Add signatures for new method
  * Add execution time for failed test modules</changelog>
  <changelog author="okurz@suse.com" date="1638878400">- Update to version 4.6.1638699195.e4430abe:
  * Streamline the use of "|||" log marker with new "modstate" function</changelog>
  <changelog author="okurz@suse.com" date="1639396800">- Update to version 4.6.1639403953.ae94c4bd:
  * mergify: Add more useful checks
  * mergify: Use non-deprecated 'check-succes' instead of 'status-success'
  * mergify: Reduce duplication with YAML anchors
  * mergify: Rely on more reviewers
  * Makefile: Fix build dir when calling make with "-C" itself</changelog>
  <changelog author="Oliver Kurz &lt;okurz@suse.com&gt;" date="1657886400">- Fix os-autoinst-devel opencv dependency for upgrade (boo#1201552)</changelog>
</package>
<package pkgid="59d12edb5b902e7471ce419c81c9094654fc92a2a2c42480a508b315a807b4b0" name="os-autoinst-qemu-kvm" arch="x86_64">
  <version epoch="0" ver="4.6.1639403953.ae94c4bd" rel="bp154.2.3.1"/>
  <changelog author="okurz@suse.com" date="1632225600">- Update to version 4.6.1632209573.6778e83a:
  * mmapi: Allow for longer and more retries after observed failures
  * Fix spelling for svirt xml file
  * Add OPENQA_HOSTNAME to xml metadata</changelog>
  <changelog author="okurz@suse.com" date="1632484800">- Update to version 4.6.1632416043.04a757ed:
  * Remove check for qemu &gt;= 4 in qemu backend</changelog>
  <changelog author="okurz@suse.com" date="1632830400">- Update to version 4.6.1632799442.f77d4e14:
  * Add support for timeout on SSH based commands if possible
  * Allow spaces and comma as delimiter for SCHEDULE variable
  * Flush Python's `stderr` to ensure error messages end up in logs
  * Adapt container path in README in accordance with 16d2b42e0960
  * Use Leap 15.3 container
  * Correctly use QEMU_COMPRESS_QCOW2
  * Use Leap 15.3 as TW's glibc 2.34 breaks CI</changelog>
  <changelog author="okurz@suse.com" date="1633608000">- Update to version 4.6.1633618600.9b31e877:
  * testapi: Remove redundant "use 5.018" replaced by Mojo::Base -strict
  * Use proper perl "signatures" in t
  * t: Output backend state message on error for debugging
  * tools: Use git for faster tidy file cleanup if possible
  * Select sensible default of 5 minutes for SSH command timeout
  * ssh_screen::type_string(): Print error code if write() fails
  * Add unit tests for baseclass::wait_serial
  * Avoid tidy script failures when a filename has spaces
  * Allow running tidy on single files
  * Rename subroutine to clear serial line buffer
  * Set offset in serial output buffer
  * Use consistent abbreviated SPDX license identifiers
  * Speedup, simplify and fix log format with Time::Moment
  * Use consistent "Copyright" header without problematic characters
  * t: Add Test::Warnings to 08-autotest
  * t: Fix "Useless use of a constant"
  * Fully tidy consoles/VNC.pm
  * Use proper perl "signatures" in tools
  * Use proper perl "signatures" in t/data
  * workflows/commit_message_checker.yml: Fix file based prefix
  * Replace all possible occurences of docker with generic version
  * Use simpler 'podman' as drop-in replacement for our checks</changelog>
  <changelog author="okurz@suse.com" date="1634040000">- Update to version 4.6.1634046033.a9024b37:
  * validate_script_output: Fix static timeout when typing command
  * testapi: Fix POD parsing for "distri-&gt;script_run" with escaping
  * Reformat code to current perltidy style
  * tools/tidy: Disable aligning assignments
  * Revert "qemu: fall back to HDDSIZEGB value, even for backing file"
  * Use proper perl "signatures" in OpenQA::Isotovideo
  * Document `imgsearch` script
  * Add test for imgsearch script
  * Add standalone script for using fuzzy image comparison
  * Use proper perl "signatures" in OpenQA
  * Use proper perl "signatures" in OpenQA::Qemu
  * OpenQA: Simplify variable use to avoid typo
  * CI: Allow exception for "git subrepo pull" messages
  * git subrepo pull (merge) external/os-autoinst-common
  * qemu: fall back to HDDSIZEGB value, even for backing file</changelog>
  <changelog author="okurz@suse.com" date="1634299200">- Update to version 4.6.1634214936.d7a89a59:
  * Exclude all currently generated files in git
  * ci: Update codecov-action to v2
  * dist: Bump up timeout scale due to recent OBS observed failures
  * .mergify.yml: Make rules stricter requiring patch coverage</changelog>
  <changelog author="okurz@suse.com" date="1634817600">- Update to version 4.6.1634839907.cef5afdf:
  * t: Cleanup files at the and of tests
  * Exclude more files in .gitignore and remove others
  * Upload coverage data to codecov from the build directory
  * Use signatures in ocr
  * Use signatures in signalblocker
  * Run `codecovbash` in the source directory so it can find source files
  * Fix assignment of `build_dir` for CI build/tests
  * consoles/sshSerial: Make ssh port configurable
  * Use signatures in myjsonrpc
  * CI: Do out-of-source tree build</changelog>
  <changelog author="okurz@suse.com" date="1635422400">- Update to version 4.6.1635464770.6790629e:
  * Add quirk for QEMU &gt;= 5 on PPC
  * t: Add test for qemu_params_ofw
  * backend:qemu: Extract 'qemu_params_ofw'
  * t: Check git status at the end of every test
  * t: Add test for one error handling of myjsonrpc
  * myjsonrpc: Remove redundant next at end of while
  * myjsonrpc: Slightly simplify the code
  * t: Use signatures in 24-myjsonrpc.t
  * myjsonrpc: Provide stack trace on undefined value used as symbol ref</changelog>
  <changelog author="okurz@suse.com" date="1635854400">- Update to version 4.6.1635869279.8838dc09:
  * Fix handling resume command (of developer mode) when not paused
  * Fix passing border_offset parameter to mouse_hide
  * t: Use Test::Warnings in all tests
  * Use proper SPDX identifier in t/15-logging.t as well
  * t: Add Test::Warnings to 30-mmapi.t
  * xt: Add style check to ensure all tests use Test::Most
  * t: Use Test::Most in all tests for consistency
  * Switch from usb-ehci to qemu-xhci
  * Provide more explicit error handling on invalid product dir
  * t: Move subtest in 14-isotovideo which does not need mocked backend
  * t: Extract OpenQA::Isotovideo::Utils specific test</changelog>
  <changelog author="okurz@suse.com" date="1636459200">- Update to version 4.6.1636474618.9c079e07:
  * t: Add test for backend::spvm
  * t: Add test for backend::driver
  * t: Add test for backend::null
  * Simplify backend::baseclass::alive
  * Delete unused exception handling in backend::qemu
  * backend::qemu: Fix bug that qemu alive status was never tested
  * Declare likely obsolete backend::pvm as deprecated
  * Mark only sporadically test covered statements
  * t: Improve Test::More error output context in helper
  * t: Output state file content in case of error where missing
  * Add simple instantiation test of backend::pvm
  * dist: Do not build for i586
  * Fix missing subsecond display in video captions
  * doc: Add missing documentation for NOVALINK variables
  * Update tidy to 20211029</changelog>
  <changelog author="okurz@suse.com" date="1636718400">- Update to version 4.6.1636551041.85fc82ce:
  * Warn about backend errors more prominently in log</changelog>
  <changelog author="okurz@suse.com" date="1636977600">- Update to version 4.6.1636972309.195774f7:
  * dist: Also disable i586 build for -test flavor
  * Extend all backend API function signatures with optional slurpy @
  * Use proper perl "signatures" in backend</changelog>
  <changelog author="okurz@suse.com" date="1637841600">- Update to version 4.6.1637851285.25850081:
  * Fix collecting coverage when invoking `run_all` in `t/08-autotest.t`
  * Avoid redundant code in `t/08-autotest.t`
  * Add test for early stop due to `TESTDEBUG`
  * Improve coding style and simplify `t/08-autotest.t`
  * Log reason for stopping the test execution early
  * Avoid running into TBB's soft limit for the max. number of threads
  * docs: Clearly mention devel:openQA in README
  * Fix working directory for generating HTML coverage report
  * Add unit test for basetest::get_new_serial_output
  * osutils: Do not hide errors of exec call in run() and run_diag()
  * qemu: Don't call chattr with timeout and remove -f arg
  * baseclass: Fix errors in some tests by increasing _CHKSEL_RATE_HITS
  * testapi: Add die_on_timeout option to testapi::script::run()
  * ipmi: Make persistent SOL console enabled by default
  * Ignore the previous tests fail hook output in the search for issues</changelog>
  <changelog author="okurz@suse.com" date="1638100800">- Update to version 4.6.1638007345.ae6eed2a:
  * Update deprecated 'short-form boolean' qemu args
  * imgsearch: disable OpenCV logging
  * qemu: Automatically create swtpm device
  * commands: Use same log format as isotovideo</changelog>
  <changelog author="okurz@suse.com" date="1638273600">- Update to version 4.6.1638289529.0a3f5b98:
  * Fix sporadic error in t/10-virtio_terminal.t
  * t: Reduce test timeout for 31-sshSerial as feasible
  * t: Simplify mocked methods in 31-sshSerial.t
  * t: Add full coverage for 31-sshSerial.t</changelog>
  <changelog author="okurz@suse.com" date="1638532800">- Update to version 4.6.1638454781.7b07525b:
  * xt: Fix style check when called in CI from other directory
  * t: Fix missing Test::Warning check in 36-openqa-namedioselect
  * Remove obsolete consoles::remoteVnc
  * Use proper perl "signatures" in some consoles
  * baseclass: Add test for check_select_rate() function
  * baseclass: Improve error message on "half-open socket"</changelog>
  <changelog author="okurz@suse.com" date="1638705600">- Update to version 4.6.1638540755.a348c6d8:
  * ci: Fix OpenQA::Test::CheckGitStatus exit status
  * ci: Fix exit code of OpenQA::Test::CheckGitStatus
  * basetest.pm: Add signatures for new method
  * Add execution time for failed test modules</changelog>
  <changelog author="okurz@suse.com" date="1638878400">- Update to version 4.6.1638699195.e4430abe:
  * Streamline the use of "|||" log marker with new "modstate" function</changelog>
  <changelog author="okurz@suse.com" date="1639396800">- Update to version 4.6.1639403953.ae94c4bd:
  * mergify: Add more useful checks
  * mergify: Use non-deprecated 'check-succes' instead of 'status-success'
  * mergify: Reduce duplication with YAML anchors
  * mergify: Rely on more reviewers
  * Makefile: Fix build dir when calling make with "-C" itself</changelog>
  <changelog author="Oliver Kurz &lt;okurz@suse.com&gt;" date="1657886400">- Fix os-autoinst-devel opencv dependency for upgrade (boo#1201552)</changelog>
</package>
<package pkgid="702df4a1e793ead516f6c5c253ddbef4e8944e065d690c39990af7bc3a536c65" name="os-autoinst-qemu-x86" arch="x86_64">
  <version epoch="0" ver="4.6.1639403953.ae94c4bd" rel="bp154.2.3.1"/>
  <changelog author="okurz@suse.com" date="1632225600">- Update to version 4.6.1632209573.6778e83a:
  * mmapi: Allow for longer and more retries after observed failures
  * Fix spelling for svirt xml file
  * Add OPENQA_HOSTNAME to xml metadata</changelog>
  <changelog author="okurz@suse.com" date="1632484800">- Update to version 4.6.1632416043.04a757ed:
  * Remove check for qemu &gt;= 4 in qemu backend</changelog>
  <changelog author="okurz@suse.com" date="1632830400">- Update to version 4.6.1632799442.f77d4e14:
  * Add support for timeout on SSH based commands if possible
  * Allow spaces and comma as delimiter for SCHEDULE variable
  * Flush Python's `stderr` to ensure error messages end up in logs
  * Adapt container path in README in accordance with 16d2b42e0960
  * Use Leap 15.3 container
  * Correctly use QEMU_COMPRESS_QCOW2
  * Use Leap 15.3 as TW's glibc 2.34 breaks CI</changelog>
  <changelog author="okurz@suse.com" date="1633608000">- Update to version 4.6.1633618600.9b31e877:
  * testapi: Remove redundant "use 5.018" replaced by Mojo::Base -strict
  * Use proper perl "signatures" in t
  * t: Output backend state message on error for debugging
  * tools: Use git for faster tidy file cleanup if possible
  * Select sensible default of 5 minutes for SSH command timeout
  * ssh_screen::type_string(): Print error code if write() fails
  * Add unit tests for baseclass::wait_serial
  * Avoid tidy script failures when a filename has spaces
  * Allow running tidy on single files
  * Rename subroutine to clear serial line buffer
  * Set offset in serial output buffer
  * Use consistent abbreviated SPDX license identifiers
  * Speedup, simplify and fix log format with Time::Moment
  * Use consistent "Copyright" header without problematic characters
  * t: Add Test::Warnings to 08-autotest
  * t: Fix "Useless use of a constant"
  * Fully tidy consoles/VNC.pm
  * Use proper perl "signatures" in tools
  * Use proper perl "signatures" in t/data
  * workflows/commit_message_checker.yml: Fix file based prefix
  * Replace all possible occurences of docker with generic version
  * Use simpler 'podman' as drop-in replacement for our checks</changelog>
  <changelog author="okurz@suse.com" date="1634040000">- Update to version 4.6.1634046033.a9024b37:
  * validate_script_output: Fix static timeout when typing command
  * testapi: Fix POD parsing for "distri-&gt;script_run" with escaping
  * Reformat code to current perltidy style
  * tools/tidy: Disable aligning assignments
  * Revert "qemu: fall back to HDDSIZEGB value, even for backing file"
  * Use proper perl "signatures" in OpenQA::Isotovideo
  * Document `imgsearch` script
  * Add test for imgsearch script
  * Add standalone script for using fuzzy image comparison
  * Use proper perl "signatures" in OpenQA
  * Use proper perl "signatures" in OpenQA::Qemu
  * OpenQA: Simplify variable use to avoid typo
  * CI: Allow exception for "git subrepo pull" messages
  * git subrepo pull (merge) external/os-autoinst-common
  * qemu: fall back to HDDSIZEGB value, even for backing file</changelog>
  <changelog author="okurz@suse.com" date="1634299200">- Update to version 4.6.1634214936.d7a89a59:
  * Exclude all currently generated files in git
  * ci: Update codecov-action to v2
  * dist: Bump up timeout scale due to recent OBS observed failures
  * .mergify.yml: Make rules stricter requiring patch coverage</changelog>
  <changelog author="okurz@suse.com" date="1634817600">- Update to version 4.6.1634839907.cef5afdf:
  * t: Cleanup files at the and of tests
  * Exclude more files in .gitignore and remove others
  * Upload coverage data to codecov from the build directory
  * Use signatures in ocr
  * Use signatures in signalblocker
  * Run `codecovbash` in the source directory so it can find source files
  * Fix assignment of `build_dir` for CI build/tests
  * consoles/sshSerial: Make ssh port configurable
  * Use signatures in myjsonrpc
  * CI: Do out-of-source tree build</changelog>
  <changelog author="okurz@suse.com" date="1635422400">- Update to version 4.6.1635464770.6790629e:
  * Add quirk for QEMU &gt;= 5 on PPC
  * t: Add test for qemu_params_ofw
  * backend:qemu: Extract 'qemu_params_ofw'
  * t: Check git status at the end of every test
  * t: Add test for one error handling of myjsonrpc
  * myjsonrpc: Remove redundant next at end of while
  * myjsonrpc: Slightly simplify the code
  * t: Use signatures in 24-myjsonrpc.t
  * myjsonrpc: Provide stack trace on undefined value used as symbol ref</changelog>
  <changelog author="okurz@suse.com" date="1635854400">- Update to version 4.6.1635869279.8838dc09:
  * Fix handling resume command (of developer mode) when not paused
  * Fix passing border_offset parameter to mouse_hide
  * t: Use Test::Warnings in all tests
  * Use proper SPDX identifier in t/15-logging.t as well
  * t: Add Test::Warnings to 30-mmapi.t
  * xt: Add style check to ensure all tests use Test::Most
  * t: Use Test::Most in all tests for consistency
  * Switch from usb-ehci to qemu-xhci
  * Provide more explicit error handling on invalid product dir
  * t: Move subtest in 14-isotovideo which does not need mocked backend
  * t: Extract OpenQA::Isotovideo::Utils specific test</changelog>
  <changelog author="okurz@suse.com" date="1636459200">- Update to version 4.6.1636474618.9c079e07:
  * t: Add test for backend::spvm
  * t: Add test for backend::driver
  * t: Add test for backend::null
  * Simplify backend::baseclass::alive
  * Delete unused exception handling in backend::qemu
  * backend::qemu: Fix bug that qemu alive status was never tested
  * Declare likely obsolete backend::pvm as deprecated
  * Mark only sporadically test covered statements
  * t: Improve Test::More error output context in helper
  * t: Output state file content in case of error where missing
  * Add simple instantiation test of backend::pvm
  * dist: Do not build for i586
  * Fix missing subsecond display in video captions
  * doc: Add missing documentation for NOVALINK variables
  * Update tidy to 20211029</changelog>
  <changelog author="okurz@suse.com" date="1636718400">- Update to version 4.6.1636551041.85fc82ce:
  * Warn about backend errors more prominently in log</changelog>
  <changelog author="okurz@suse.com" date="1636977600">- Update to version 4.6.1636972309.195774f7:
  * dist: Also disable i586 build for -test flavor
  * Extend all backend API function signatures with optional slurpy @
  * Use proper perl "signatures" in backend</changelog>
  <changelog author="okurz@suse.com" date="1637841600">- Update to version 4.6.1637851285.25850081:
  * Fix collecting coverage when invoking `run_all` in `t/08-autotest.t`
  * Avoid redundant code in `t/08-autotest.t`
  * Add test for early stop due to `TESTDEBUG`
  * Improve coding style and simplify `t/08-autotest.t`
  * Log reason for stopping the test execution early
  * Avoid running into TBB's soft limit for the max. number of threads
  * docs: Clearly mention devel:openQA in README
  * Fix working directory for generating HTML coverage report
  * Add unit test for basetest::get_new_serial_output
  * osutils: Do not hide errors of exec call in run() and run_diag()
  * qemu: Don't call chattr with timeout and remove -f arg
  * baseclass: Fix errors in some tests by increasing _CHKSEL_RATE_HITS
  * testapi: Add die_on_timeout option to testapi::script::run()
  * ipmi: Make persistent SOL console enabled by default
  * Ignore the previous tests fail hook output in the search for issues</changelog>
  <changelog author="okurz@suse.com" date="1638100800">- Update to version 4.6.1638007345.ae6eed2a:
  * Update deprecated 'short-form boolean' qemu args
  * imgsearch: disable OpenCV logging
  * qemu: Automatically create swtpm device
  * commands: Use same log format as isotovideo</changelog>
  <changelog author="okurz@suse.com" date="1638273600">- Update to version 4.6.1638289529.0a3f5b98:
  * Fix sporadic error in t/10-virtio_terminal.t
  * t: Reduce test timeout for 31-sshSerial as feasible
  * t: Simplify mocked methods in 31-sshSerial.t
  * t: Add full coverage for 31-sshSerial.t</changelog>
  <changelog author="okurz@suse.com" date="1638532800">- Update to version 4.6.1638454781.7b07525b:
  * xt: Fix style check when called in CI from other directory
  * t: Fix missing Test::Warning check in 36-openqa-namedioselect
  * Remove obsolete consoles::remoteVnc
  * Use proper perl "signatures" in some consoles
  * baseclass: Add test for check_select_rate() function
  * baseclass: Improve error message on "half-open socket"</changelog>
  <changelog author="okurz@suse.com" date="1638705600">- Update to version 4.6.1638540755.a348c6d8:
  * ci: Fix OpenQA::Test::CheckGitStatus exit status
  * ci: Fix exit code of OpenQA::Test::CheckGitStatus
  * basetest.pm: Add signatures for new method
  * Add execution time for failed test modules</changelog>
  <changelog author="okurz@suse.com" date="1638878400">- Update to version 4.6.1638699195.e4430abe:
  * Streamline the use of "|||" log marker with new "modstate" function</changelog>
  <changelog author="okurz@suse.com" date="1639396800">- Update to version 4.6.1639403953.ae94c4bd:
  * mergify: Add more useful checks
  * mergify: Use non-deprecated 'check-succes' instead of 'status-success'
  * mergify: Reduce duplication with YAML anchors
  * mergify: Rely on more reviewers
  * Makefile: Fix build dir when calling make with "-C" itself</changelog>
  <changelog author="Oliver Kurz &lt;okurz@suse.com&gt;" date="1657886400">- Fix os-autoinst-devel opencv dependency for upgrade (boo#1201552)</changelog>
</package>
<package pkgid="e5497116ed640e9bc9e758e09b057abdaf4ab4db73a1c17e00d700de85ccd7ee" name="os-autoinst-s390-deps" arch="aarch64">
  <version epoch="0" ver="4.6.1639403953.ae94c4bd" rel="bp154.2.3.1"/>
  <changelog author="okurz@suse.com" date="1632225600">- Update to version 4.6.1632209573.6778e83a:
  * mmapi: Allow for longer and more retries after observed failures
  * Fix spelling for svirt xml file
  * Add OPENQA_HOSTNAME to xml metadata</changelog>
  <changelog author="okurz@suse.com" date="1632484800">- Update to version 4.6.1632416043.04a757ed:
  * Remove check for qemu &gt;= 4 in qemu backend</changelog>
  <changelog author="okurz@suse.com" date="1632830400">- Update to version 4.6.1632799442.f77d4e14:
  * Add support for timeout on SSH based commands if possible
  * Allow spaces and comma as delimiter for SCHEDULE variable
  * Flush Python's `stderr` to ensure error messages end up in logs
  * Adapt container path in README in accordance with 16d2b42e0960
  * Use Leap 15.3 container
  * Correctly use QEMU_COMPRESS_QCOW2
  * Use Leap 15.3 as TW's glibc 2.34 breaks CI</changelog>
  <changelog author="okurz@suse.com" date="1633608000">- Update to version 4.6.1633618600.9b31e877:
  * testapi: Remove redundant "use 5.018" replaced by Mojo::Base -strict
  * Use proper perl "signatures" in t
  * t: Output backend state message on error for debugging
  * tools: Use git for faster tidy file cleanup if possible
  * Select sensible default of 5 minutes for SSH command timeout
  * ssh_screen::type_string(): Print error code if write() fails
  * Add unit tests for baseclass::wait_serial
  * Avoid tidy script failures when a filename has spaces
  * Allow running tidy on single files
  * Rename subroutine to clear serial line buffer
  * Set offset in serial output buffer
  * Use consistent abbreviated SPDX license identifiers
  * Speedup, simplify and fix log format with Time::Moment
  * Use consistent "Copyright" header without problematic characters
  * t: Add Test::Warnings to 08-autotest
  * t: Fix "Useless use of a constant"
  * Fully tidy consoles/VNC.pm
  * Use proper perl "signatures" in tools
  * Use proper perl "signatures" in t/data
  * workflows/commit_message_checker.yml: Fix file based prefix
  * Replace all possible occurences of docker with generic version
  * Use simpler 'podman' as drop-in replacement for our checks</changelog>
  <changelog author="okurz@suse.com" date="1634040000">- Update to version 4.6.1634046033.a9024b37:
  * validate_script_output: Fix static timeout when typing command
  * testapi: Fix POD parsing for "distri-&gt;script_run" with escaping
  * Reformat code to current perltidy style
  * tools/tidy: Disable aligning assignments
  * Revert "qemu: fall back to HDDSIZEGB value, even for backing file"
  * Use proper perl "signatures" in OpenQA::Isotovideo
  * Document `imgsearch` script
  * Add test for imgsearch script
  * Add standalone script for using fuzzy image comparison
  * Use proper perl "signatures" in OpenQA
  * Use proper perl "signatures" in OpenQA::Qemu
  * OpenQA: Simplify variable use to avoid typo
  * CI: Allow exception for "git subrepo pull" messages
  * git subrepo pull (merge) external/os-autoinst-common
  * qemu: fall back to HDDSIZEGB value, even for backing file</changelog>
  <changelog author="okurz@suse.com" date="1634299200">- Update to version 4.6.1634214936.d7a89a59:
  * Exclude all currently generated files in git
  * ci: Update codecov-action to v2
  * dist: Bump up timeout scale due to recent OBS observed failures
  * .mergify.yml: Make rules stricter requiring patch coverage</changelog>
  <changelog author="okurz@suse.com" date="1634817600">- Update to version 4.6.1634839907.cef5afdf:
  * t: Cleanup files at the and of tests
  * Exclude more files in .gitignore and remove others
  * Upload coverage data to codecov from the build directory
  * Use signatures in ocr
  * Use signatures in signalblocker
  * Run `codecovbash` in the source directory so it can find source files
  * Fix assignment of `build_dir` for CI build/tests
  * consoles/sshSerial: Make ssh port configurable
  * Use signatures in myjsonrpc
  * CI: Do out-of-source tree build</changelog>
  <changelog author="okurz@suse.com" date="1635422400">- Update to version 4.6.1635464770.6790629e:
  * Add quirk for QEMU &gt;= 5 on PPC
  * t: Add test for qemu_params_ofw
  * backend:qemu: Extract 'qemu_params_ofw'
  * t: Check git status at the end of every test
  * t: Add test for one error handling of myjsonrpc
  * myjsonrpc: Remove redundant next at end of while
  * myjsonrpc: Slightly simplify the code
  * t: Use signatures in 24-myjsonrpc.t
  * myjsonrpc: Provide stack trace on undefined value used as symbol ref</changelog>
  <changelog author="okurz@suse.com" date="1635854400">- Update to version 4.6.1635869279.8838dc09:
  * Fix handling resume command (of developer mode) when not paused
  * Fix passing border_offset parameter to mouse_hide
  * t: Use Test::Warnings in all tests
  * Use proper SPDX identifier in t/15-logging.t as well
  * t: Add Test::Warnings to 30-mmapi.t
  * xt: Add style check to ensure all tests use Test::Most
  * t: Use Test::Most in all tests for consistency
  * Switch from usb-ehci to qemu-xhci
  * Provide more explicit error handling on invalid product dir
  * t: Move subtest in 14-isotovideo which does not need mocked backend
  * t: Extract OpenQA::Isotovideo::Utils specific test</changelog>
  <changelog author="okurz@suse.com" date="1636459200">- Update to version 4.6.1636474618.9c079e07:
  * t: Add test for backend::spvm
  * t: Add test for backend::driver
  * t: Add test for backend::null
  * Simplify backend::baseclass::alive
  * Delete unused exception handling in backend::qemu
  * backend::qemu: Fix bug that qemu alive status was never tested
  * Declare likely obsolete backend::pvm as deprecated
  * Mark only sporadically test covered statements
  * t: Improve Test::More error output context in helper
  * t: Output state file content in case of error where missing
  * Add simple instantiation test of backend::pvm
  * dist: Do not build for i586
  * Fix missing subsecond display in video captions
  * doc: Add missing documentation for NOVALINK variables
  * Update tidy to 20211029</changelog>
  <changelog author="okurz@suse.com" date="1636718400">- Update to version 4.6.1636551041.85fc82ce:
  * Warn about backend errors more prominently in log</changelog>
  <changelog author="okurz@suse.com" date="1636977600">- Update to version 4.6.1636972309.195774f7:
  * dist: Also disable i586 build for -test flavor
  * Extend all backend API function signatures with optional slurpy @
  * Use proper perl "signatures" in backend</changelog>
  <changelog author="okurz@suse.com" date="1637841600">- Update to version 4.6.1637851285.25850081:
  * Fix collecting coverage when invoking `run_all` in `t/08-autotest.t`
  * Avoid redundant code in `t/08-autotest.t`
  * Add test for early stop due to `TESTDEBUG`
  * Improve coding style and simplify `t/08-autotest.t`
  * Log reason for stopping the test execution early
  * Avoid running into TBB's soft limit for the max. number of threads
  * docs: Clearly mention devel:openQA in README
  * Fix working directory for generating HTML coverage report
  * Add unit test for basetest::get_new_serial_output
  * osutils: Do not hide errors of exec call in run() and run_diag()
  * qemu: Don't call chattr with timeout and remove -f arg
  * baseclass: Fix errors in some tests by increasing _CHKSEL_RATE_HITS
  * testapi: Add die_on_timeout option to testapi::script::run()
  * ipmi: Make persistent SOL console enabled by default
  * Ignore the previous tests fail hook output in the search for issues</changelog>
  <changelog author="okurz@suse.com" date="1638100800">- Update to version 4.6.1638007345.ae6eed2a:
  * Update deprecated 'short-form boolean' qemu args
  * imgsearch: disable OpenCV logging
  * qemu: Automatically create swtpm device
  * commands: Use same log format as isotovideo</changelog>
  <changelog author="okurz@suse.com" date="1638273600">- Update to version 4.6.1638289529.0a3f5b98:
  * Fix sporadic error in t/10-virtio_terminal.t
  * t: Reduce test timeout for 31-sshSerial as feasible
  * t: Simplify mocked methods in 31-sshSerial.t
  * t: Add full coverage for 31-sshSerial.t</changelog>
  <changelog author="okurz@suse.com" date="1638532800">- Update to version 4.6.1638454781.7b07525b:
  * xt: Fix style check when called in CI from other directory
  * t: Fix missing Test::Warning check in 36-openqa-namedioselect
  * Remove obsolete consoles::remoteVnc
  * Use proper perl "signatures" in some consoles
  * baseclass: Add test for check_select_rate() function
  * baseclass: Improve error message on "half-open socket"</changelog>
  <changelog author="okurz@suse.com" date="1638705600">- Update to version 4.6.1638540755.a348c6d8:
  * ci: Fix OpenQA::Test::CheckGitStatus exit status
  * ci: Fix exit code of OpenQA::Test::CheckGitStatus
  * basetest.pm: Add signatures for new method
  * Add execution time for failed test modules</changelog>
  <changelog author="okurz@suse.com" date="1638878400">- Update to version 4.6.1638699195.e4430abe:
  * Streamline the use of "|||" log marker with new "modstate" function</changelog>
  <changelog author="okurz@suse.com" date="1639396800">- Update to version 4.6.1639403953.ae94c4bd:
  * mergify: Add more useful checks
  * mergify: Use non-deprecated 'check-succes' instead of 'status-success'
  * mergify: Reduce duplication with YAML anchors
  * mergify: Rely on more reviewers
  * Makefile: Fix build dir when calling make with "-C" itself</changelog>
  <changelog author="Oliver Kurz &lt;okurz@suse.com&gt;" date="1657886400">- Fix os-autoinst-devel opencv dependency for upgrade (boo#1201552)</changelog>
</package>
<package pkgid="3b7b27b471bd60e79866111783e7caa9fe036c04d822db01a0e8f88181d88c40" name="os-autoinst-s390-deps" arch="ppc64le">
  <version epoch="0" ver="4.6.1639403953.ae94c4bd" rel="bp154.2.3.1"/>
  <changelog author="okurz@suse.com" date="1632225600">- Update to version 4.6.1632209573.6778e83a:
  * mmapi: Allow for longer and more retries after observed failures
  * Fix spelling for svirt xml file
  * Add OPENQA_HOSTNAME to xml metadata</changelog>
  <changelog author="okurz@suse.com" date="1632484800">- Update to version 4.6.1632416043.04a757ed:
  * Remove check for qemu &gt;= 4 in qemu backend</changelog>
  <changelog author="okurz@suse.com" date="1632830400">- Update to version 4.6.1632799442.f77d4e14:
  * Add support for timeout on SSH based commands if possible
  * Allow spaces and comma as delimiter for SCHEDULE variable
  * Flush Python's `stderr` to ensure error messages end up in logs
  * Adapt container path in README in accordance with 16d2b42e0960
  * Use Leap 15.3 container
  * Correctly use QEMU_COMPRESS_QCOW2
  * Use Leap 15.3 as TW's glibc 2.34 breaks CI</changelog>
  <changelog author="okurz@suse.com" date="1633608000">- Update to version 4.6.1633618600.9b31e877:
  * testapi: Remove redundant "use 5.018" replaced by Mojo::Base -strict
  * Use proper perl "signatures" in t
  * t: Output backend state message on error for debugging
  * tools: Use git for faster tidy file cleanup if possible
  * Select sensible default of 5 minutes for SSH command timeout
  * ssh_screen::type_string(): Print error code if write() fails
  * Add unit tests for baseclass::wait_serial
  * Avoid tidy script failures when a filename has spaces
  * Allow running tidy on single files
  * Rename subroutine to clear serial line buffer
  * Set offset in serial output buffer
  * Use consistent abbreviated SPDX license identifiers
  * Speedup, simplify and fix log format with Time::Moment
  * Use consistent "Copyright" header without problematic characters
  * t: Add Test::Warnings to 08-autotest
  * t: Fix "Useless use of a constant"
  * Fully tidy consoles/VNC.pm
  * Use proper perl "signatures" in tools
  * Use proper perl "signatures" in t/data
  * workflows/commit_message_checker.yml: Fix file based prefix
  * Replace all possible occurences of docker with generic version
  * Use simpler 'podman' as drop-in replacement for our checks</changelog>
  <changelog author="okurz@suse.com" date="1634040000">- Update to version 4.6.1634046033.a9024b37:
  * validate_script_output: Fix static timeout when typing command
  * testapi: Fix POD parsing for "distri-&gt;script_run" with escaping
  * Reformat code to current perltidy style
  * tools/tidy: Disable aligning assignments
  * Revert "qemu: fall back to HDDSIZEGB value, even for backing file"
  * Use proper perl "signatures" in OpenQA::Isotovideo
  * Document `imgsearch` script
  * Add test for imgsearch script
  * Add standalone script for using fuzzy image comparison
  * Use proper perl "signatures" in OpenQA
  * Use proper perl "signatures" in OpenQA::Qemu
  * OpenQA: Simplify variable use to avoid typo
  * CI: Allow exception for "git subrepo pull" messages
  * git subrepo pull (merge) external/os-autoinst-common
  * qemu: fall back to HDDSIZEGB value, even for backing file</changelog>
  <changelog author="okurz@suse.com" date="1634299200">- Update to version 4.6.1634214936.d7a89a59:
  * Exclude all currently generated files in git
  * ci: Update codecov-action to v2
  * dist: Bump up timeout scale due to recent OBS observed failures
  * .mergify.yml: Make rules stricter requiring patch coverage</changelog>
  <changelog author="okurz@suse.com" date="1634817600">- Update to version 4.6.1634839907.cef5afdf:
  * t: Cleanup files at the and of tests
  * Exclude more files in .gitignore and remove others
  * Upload coverage data to codecov from the build directory
  * Use signatures in ocr
  * Use signatures in signalblocker
  * Run `codecovbash` in the source directory so it can find source files
  * Fix assignment of `build_dir` for CI build/tests
  * consoles/sshSerial: Make ssh port configurable
  * Use signatures in myjsonrpc
  * CI: Do out-of-source tree build</changelog>
  <changelog author="okurz@suse.com" date="1635422400">- Update to version 4.6.1635464770.6790629e:
  * Add quirk for QEMU &gt;= 5 on PPC
  * t: Add test for qemu_params_ofw
  * backend:qemu: Extract 'qemu_params_ofw'
  * t: Check git status at the end of every test
  * t: Add test for one error handling of myjsonrpc
  * myjsonrpc: Remove redundant next at end of while
  * myjsonrpc: Slightly simplify the code
  * t: Use signatures in 24-myjsonrpc.t
  * myjsonrpc: Provide stack trace on undefined value used as symbol ref</changelog>
  <changelog author="okurz@suse.com" date="1635854400">- Update to version 4.6.1635869279.8838dc09:
  * Fix handling resume command (of developer mode) when not paused
  * Fix passing border_offset parameter to mouse_hide
  * t: Use Test::Warnings in all tests
  * Use proper SPDX identifier in t/15-logging.t as well
  * t: Add Test::Warnings to 30-mmapi.t
  * xt: Add style check to ensure all tests use Test::Most
  * t: Use Test::Most in all tests for consistency
  * Switch from usb-ehci to qemu-xhci
  * Provide more explicit error handling on invalid product dir
  * t: Move subtest in 14-isotovideo which does not need mocked backend
  * t: Extract OpenQA::Isotovideo::Utils specific test</changelog>
  <changelog author="okurz@suse.com" date="1636459200">- Update to version 4.6.1636474618.9c079e07:
  * t: Add test for backend::spvm
  * t: Add test for backend::driver
  * t: Add test for backend::null
  * Simplify backend::baseclass::alive
  * Delete unused exception handling in backend::qemu
  * backend::qemu: Fix bug that qemu alive status was never tested
  * Declare likely obsolete backend::pvm as deprecated
  * Mark only sporadically test covered statements
  * t: Improve Test::More error output context in helper
  * t: Output state file content in case of error where missing
  * Add simple instantiation test of backend::pvm
  * dist: Do not build for i586
  * Fix missing subsecond display in video captions
  * doc: Add missing documentation for NOVALINK variables
  * Update tidy to 20211029</changelog>
  <changelog author="okurz@suse.com" date="1636718400">- Update to version 4.6.1636551041.85fc82ce:
  * Warn about backend errors more prominently in log</changelog>
  <changelog author="okurz@suse.com" date="1636977600">- Update to version 4.6.1636972309.195774f7:
  * dist: Also disable i586 build for -test flavor
  * Extend all backend API function signatures with optional slurpy @
  * Use proper perl "signatures" in backend</changelog>
  <changelog author="okurz@suse.com" date="1637841600">- Update to version 4.6.1637851285.25850081:
  * Fix collecting coverage when invoking `run_all` in `t/08-autotest.t`
  * Avoid redundant code in `t/08-autotest.t`
  * Add test for early stop due to `TESTDEBUG`
  * Improve coding style and simplify `t/08-autotest.t`
  * Log reason for stopping the test execution early
  * Avoid running into TBB's soft limit for the max. number of threads
  * docs: Clearly mention devel:openQA in README
  * Fix working directory for generating HTML coverage report
  * Add unit test for basetest::get_new_serial_output
  * osutils: Do not hide errors of exec call in run() and run_diag()
  * qemu: Don't call chattr with timeout and remove -f arg
  * baseclass: Fix errors in some tests by increasing _CHKSEL_RATE_HITS
  * testapi: Add die_on_timeout option to testapi::script::run()
  * ipmi: Make persistent SOL console enabled by default
  * Ignore the previous tests fail hook output in the search for issues</changelog>
  <changelog author="okurz@suse.com" date="1638100800">- Update to version 4.6.1638007345.ae6eed2a:
  * Update deprecated 'short-form boolean' qemu args
  * imgsearch: disable OpenCV logging
  * qemu: Automatically create swtpm device
  * commands: Use same log format as isotovideo</changelog>
  <changelog author="okurz@suse.com" date="1638273600">- Update to version 4.6.1638289529.0a3f5b98:
  * Fix sporadic error in t/10-virtio_terminal.t
  * t: Reduce test timeout for 31-sshSerial as feasible
  * t: Simplify mocked methods in 31-sshSerial.t
  * t: Add full coverage for 31-sshSerial.t</changelog>
  <changelog author="okurz@suse.com" date="1638532800">- Update to version 4.6.1638454781.7b07525b:
  * xt: Fix style check when called in CI from other directory
  * t: Fix missing Test::Warning check in 36-openqa-namedioselect
  * Remove obsolete consoles::remoteVnc
  * Use proper perl "signatures" in some consoles
  * baseclass: Add test for check_select_rate() function
  * baseclass: Improve error message on "half-open socket"</changelog>
  <changelog author="okurz@suse.com" date="1638705600">- Update to version 4.6.1638540755.a348c6d8:
  * ci: Fix OpenQA::Test::CheckGitStatus exit status
  * ci: Fix exit code of OpenQA::Test::CheckGitStatus
  * basetest.pm: Add signatures for new method
  * Add execution time for failed test modules</changelog>
  <changelog author="okurz@suse.com" date="1638878400">- Update to version 4.6.1638699195.e4430abe:
  * Streamline the use of "|||" log marker with new "modstate" function</changelog>
  <changelog author="okurz@suse.com" date="1639396800">- Update to version 4.6.1639403953.ae94c4bd:
  * mergify: Add more useful checks
  * mergify: Use non-deprecated 'check-succes' instead of 'status-success'
  * mergify: Reduce duplication with YAML anchors
  * mergify: Rely on more reviewers
  * Makefile: Fix build dir when calling make with "-C" itself</changelog>
  <changelog author="Oliver Kurz &lt;okurz@suse.com&gt;" date="1657886400">- Fix os-autoinst-devel opencv dependency for upgrade (boo#1201552)</changelog>
</package>
<package pkgid="19107bc9dfc1c5c4e6f3588fcaf5efe9436d5494441211587bcb1377bb683e3e" name="os-autoinst-s390-deps" arch="s390x">
  <version epoch="0" ver="4.6.1639403953.ae94c4bd" rel="bp154.2.3.1"/>
  <changelog author="okurz@suse.com" date="1632225600">- Update to version 4.6.1632209573.6778e83a:
  * mmapi: Allow for longer and more retries after observed failures
  * Fix spelling for svirt xml file
  * Add OPENQA_HOSTNAME to xml metadata</changelog>
  <changelog author="okurz@suse.com" date="1632484800">- Update to version 4.6.1632416043.04a757ed:
  * Remove check for qemu &gt;= 4 in qemu backend</changelog>
  <changelog author="okurz@suse.com" date="1632830400">- Update to version 4.6.1632799442.f77d4e14:
  * Add support for timeout on SSH based commands if possible
  * Allow spaces and comma as delimiter for SCHEDULE variable
  * Flush Python's `stderr` to ensure error messages end up in logs
  * Adapt container path in README in accordance with 16d2b42e0960
  * Use Leap 15.3 container
  * Correctly use QEMU_COMPRESS_QCOW2
  * Use Leap 15.3 as TW's glibc 2.34 breaks CI</changelog>
  <changelog author="okurz@suse.com" date="1633608000">- Update to version 4.6.1633618600.9b31e877:
  * testapi: Remove redundant "use 5.018" replaced by Mojo::Base -strict
  * Use proper perl "signatures" in t
  * t: Output backend state message on error for debugging
  * tools: Use git for faster tidy file cleanup if possible
  * Select sensible default of 5 minutes for SSH command timeout
  * ssh_screen::type_string(): Print error code if write() fails
  * Add unit tests for baseclass::wait_serial
  * Avoid tidy script failures when a filename has spaces
  * Allow running tidy on single files
  * Rename subroutine to clear serial line buffer
  * Set offset in serial output buffer
  * Use consistent abbreviated SPDX license identifiers
  * Speedup, simplify and fix log format with Time::Moment
  * Use consistent "Copyright" header without problematic characters
  * t: Add Test::Warnings to 08-autotest
  * t: Fix "Useless use of a constant"
  * Fully tidy consoles/VNC.pm
  * Use proper perl "signatures" in tools
  * Use proper perl "signatures" in t/data
  * workflows/commit_message_checker.yml: Fix file based prefix
  * Replace all possible occurences of docker with generic version
  * Use simpler 'podman' as drop-in replacement for our checks</changelog>
  <changelog author="okurz@suse.com" date="1634040000">- Update to version 4.6.1634046033.a9024b37:
  * validate_script_output: Fix static timeout when typing command
  * testapi: Fix POD parsing for "distri-&gt;script_run" with escaping
  * Reformat code to current perltidy style
  * tools/tidy: Disable aligning assignments
  * Revert "qemu: fall back to HDDSIZEGB value, even for backing file"
  * Use proper perl "signatures" in OpenQA::Isotovideo
  * Document `imgsearch` script
  * Add test for imgsearch script
  * Add standalone script for using fuzzy image comparison
  * Use proper perl "signatures" in OpenQA
  * Use proper perl "signatures" in OpenQA::Qemu
  * OpenQA: Simplify variable use to avoid typo
  * CI: Allow exception for "git subrepo pull" messages
  * git subrepo pull (merge) external/os-autoinst-common
  * qemu: fall back to HDDSIZEGB value, even for backing file</changelog>
  <changelog author="okurz@suse.com" date="1634299200">- Update to version 4.6.1634214936.d7a89a59:
  * Exclude all currently generated files in git
  * ci: Update codecov-action to v2
  * dist: Bump up timeout scale due to recent OBS observed failures
  * .mergify.yml: Make rules stricter requiring patch coverage</changelog>
  <changelog author="okurz@suse.com" date="1634817600">- Update to version 4.6.1634839907.cef5afdf:
  * t: Cleanup files at the and of tests
  * Exclude more files in .gitignore and remove others
  * Upload coverage data to codecov from the build directory
  * Use signatures in ocr
  * Use signatures in signalblocker
  * Run `codecovbash` in the source directory so it can find source files
  * Fix assignment of `build_dir` for CI build/tests
  * consoles/sshSerial: Make ssh port configurable
  * Use signatures in myjsonrpc
  * CI: Do out-of-source tree build</changelog>
  <changelog author="okurz@suse.com" date="1635422400">- Update to version 4.6.1635464770.6790629e:
  * Add quirk for QEMU &gt;= 5 on PPC
  * t: Add test for qemu_params_ofw
  * backend:qemu: Extract 'qemu_params_ofw'
  * t: Check git status at the end of every test
  * t: Add test for one error handling of myjsonrpc
  * myjsonrpc: Remove redundant next at end of while
  * myjsonrpc: Slightly simplify the code
  * t: Use signatures in 24-myjsonrpc.t
  * myjsonrpc: Provide stack trace on undefined value used as symbol ref</changelog>
  <changelog author="okurz@suse.com" date="1635854400">- Update to version 4.6.1635869279.8838dc09:
  * Fix handling resume command (of developer mode) when not paused
  * Fix passing border_offset parameter to mouse_hide
  * t: Use Test::Warnings in all tests
  * Use proper SPDX identifier in t/15-logging.t as well
  * t: Add Test::Warnings to 30-mmapi.t
  * xt: Add style check to ensure all tests use Test::Most
  * t: Use Test::Most in all tests for consistency
  * Switch from usb-ehci to qemu-xhci
  * Provide more explicit error handling on invalid product dir
  * t: Move subtest in 14-isotovideo which does not need mocked backend
  * t: Extract OpenQA::Isotovideo::Utils specific test</changelog>
  <changelog author="okurz@suse.com" date="1636459200">- Update to version 4.6.1636474618.9c079e07:
  * t: Add test for backend::spvm
  * t: Add test for backend::driver
  * t: Add test for backend::null
  * Simplify backend::baseclass::alive
  * Delete unused exception handling in backend::qemu
  * backend::qemu: Fix bug that qemu alive status was never tested
  * Declare likely obsolete backend::pvm as deprecated
  * Mark only sporadically test covered statements
  * t: Improve Test::More error output context in helper
  * t: Output state file content in case of error where missing
  * Add simple instantiation test of backend::pvm
  * dist: Do not build for i586
  * Fix missing subsecond display in video captions
  * doc: Add missing documentation for NOVALINK variables
  * Update tidy to 20211029</changelog>
  <changelog author="okurz@suse.com" date="1636718400">- Update to version 4.6.1636551041.85fc82ce:
  * Warn about backend errors more prominently in log</changelog>
  <changelog author="okurz@suse.com" date="1636977600">- Update to version 4.6.1636972309.195774f7:
  * dist: Also disable i586 build for -test flavor
  * Extend all backend API function signatures with optional slurpy @
  * Use proper perl "signatures" in backend</changelog>
  <changelog author="okurz@suse.com" date="1637841600">- Update to version 4.6.1637851285.25850081:
  * Fix collecting coverage when invoking `run_all` in `t/08-autotest.t`
  * Avoid redundant code in `t/08-autotest.t`
  * Add test for early stop due to `TESTDEBUG`
  * Improve coding style and simplify `t/08-autotest.t`
  * Log reason for stopping the test execution early
  * Avoid running into TBB's soft limit for the max. number of threads
  * docs: Clearly mention devel:openQA in README
  * Fix working directory for generating HTML coverage report
  * Add unit test for basetest::get_new_serial_output
  * osutils: Do not hide errors of exec call in run() and run_diag()
  * qemu: Don't call chattr with timeout and remove -f arg
  * baseclass: Fix errors in some tests by increasing _CHKSEL_RATE_HITS
  * testapi: Add die_on_timeout option to testapi::script::run()
  * ipmi: Make persistent SOL console enabled by default
  * Ignore the previous tests fail hook output in the search for issues</changelog>
  <changelog author="okurz@suse.com" date="1638100800">- Update to version 4.6.1638007345.ae6eed2a:
  * Update deprecated 'short-form boolean' qemu args
  * imgsearch: disable OpenCV logging
  * qemu: Automatically create swtpm device
  * commands: Use same log format as isotovideo</changelog>
  <changelog author="okurz@suse.com" date="1638273600">- Update to version 4.6.1638289529.0a3f5b98:
  * Fix sporadic error in t/10-virtio_terminal.t
  * t: Reduce test timeout for 31-sshSerial as feasible
  * t: Simplify mocked methods in 31-sshSerial.t
  * t: Add full coverage for 31-sshSerial.t</changelog>
  <changelog author="okurz@suse.com" date="1638532800">- Update to version 4.6.1638454781.7b07525b:
  * xt: Fix style check when called in CI from other directory
  * t: Fix missing Test::Warning check in 36-openqa-namedioselect
  * Remove obsolete consoles::remoteVnc
  * Use proper perl "signatures" in some consoles
  * baseclass: Add test for check_select_rate() function
  * baseclass: Improve error message on "half-open socket"</changelog>
  <changelog author="okurz@suse.com" date="1638705600">- Update to version 4.6.1638540755.a348c6d8:
  * ci: Fix OpenQA::Test::CheckGitStatus exit status
  * ci: Fix exit code of OpenQA::Test::CheckGitStatus
  * basetest.pm: Add signatures for new method
  * Add execution time for failed test modules</changelog>
  <changelog author="okurz@suse.com" date="1638878400">- Update to version 4.6.1638699195.e4430abe:
  * Streamline the use of "|||" log marker with new "modstate" function</changelog>
  <changelog author="okurz@suse.com" date="1639396800">- Update to version 4.6.1639403953.ae94c4bd:
  * mergify: Add more useful checks
  * mergify: Use non-deprecated 'check-succes' instead of 'status-success'
  * mergify: Reduce duplication with YAML anchors
  * mergify: Rely on more reviewers
  * Makefile: Fix build dir when calling make with "-C" itself</changelog>
  <changelog author="Oliver Kurz &lt;okurz@suse.com&gt;" date="1657886400">- Fix os-autoinst-devel opencv dependency for upgrade (boo#1201552)</changelog>
</package>
<package pkgid="c5bd2793308b9a60da3d02dba3d70197f5850728f00c4fd40113fbd4d8e800a0" name="os-autoinst-s390-deps" arch="x86_64">
  <version epoch="0" ver="4.6.1639403953.ae94c4bd" rel="bp154.2.3.1"/>
  <changelog author="okurz@suse.com" date="1632225600">- Update to version 4.6.1632209573.6778e83a:
  * mmapi: Allow for longer and more retries after observed failures
  * Fix spelling for svirt xml file
  * Add OPENQA_HOSTNAME to xml metadata</changelog>
  <changelog author="okurz@suse.com" date="1632484800">- Update to version 4.6.1632416043.04a757ed:
  * Remove check for qemu &gt;= 4 in qemu backend</changelog>
  <changelog author="okurz@suse.com" date="1632830400">- Update to version 4.6.1632799442.f77d4e14:
  * Add support for timeout on SSH based commands if possible
  * Allow spaces and comma as delimiter for SCHEDULE variable
  * Flush Python's `stderr` to ensure error messages end up in logs
  * Adapt container path in README in accordance with 16d2b42e0960
  * Use Leap 15.3 container
  * Correctly use QEMU_COMPRESS_QCOW2
  * Use Leap 15.3 as TW's glibc 2.34 breaks CI</changelog>
  <changelog author="okurz@suse.com" date="1633608000">- Update to version 4.6.1633618600.9b31e877:
  * testapi: Remove redundant "use 5.018" replaced by Mojo::Base -strict
  * Use proper perl "signatures" in t
  * t: Output backend state message on error for debugging
  * tools: Use git for faster tidy file cleanup if possible
  * Select sensible default of 5 minutes for SSH command timeout
  * ssh_screen::type_string(): Print error code if write() fails
  * Add unit tests for baseclass::wait_serial
  * Avoid tidy script failures when a filename has spaces
  * Allow running tidy on single files
  * Rename subroutine to clear serial line buffer
  * Set offset in serial output buffer
  * Use consistent abbreviated SPDX license identifiers
  * Speedup, simplify and fix log format with Time::Moment
  * Use consistent "Copyright" header without problematic characters
  * t: Add Test::Warnings to 08-autotest
  * t: Fix "Useless use of a constant"
  * Fully tidy consoles/VNC.pm
  * Use proper perl "signatures" in tools
  * Use proper perl "signatures" in t/data
  * workflows/commit_message_checker.yml: Fix file based prefix
  * Replace all possible occurences of docker with generic version
  * Use simpler 'podman' as drop-in replacement for our checks</changelog>
  <changelog author="okurz@suse.com" date="1634040000">- Update to version 4.6.1634046033.a9024b37:
  * validate_script_output: Fix static timeout when typing command
  * testapi: Fix POD parsing for "distri-&gt;script_run" with escaping
  * Reformat code to current perltidy style
  * tools/tidy: Disable aligning assignments
  * Revert "qemu: fall back to HDDSIZEGB value, even for backing file"
  * Use proper perl "signatures" in OpenQA::Isotovideo
  * Document `imgsearch` script
  * Add test for imgsearch script
  * Add standalone script for using fuzzy image comparison
  * Use proper perl "signatures" in OpenQA
  * Use proper perl "signatures" in OpenQA::Qemu
  * OpenQA: Simplify variable use to avoid typo
  * CI: Allow exception for "git subrepo pull" messages
  * git subrepo pull (merge) external/os-autoinst-common
  * qemu: fall back to HDDSIZEGB value, even for backing file</changelog>
  <changelog author="okurz@suse.com" date="1634299200">- Update to version 4.6.1634214936.d7a89a59:
  * Exclude all currently generated files in git
  * ci: Update codecov-action to v2
  * dist: Bump up timeout scale due to recent OBS observed failures
  * .mergify.yml: Make rules stricter requiring patch coverage</changelog>
  <changelog author="okurz@suse.com" date="1634817600">- Update to version 4.6.1634839907.cef5afdf:
  * t: Cleanup files at the and of tests
  * Exclude more files in .gitignore and remove others
  * Upload coverage data to codecov from the build directory
  * Use signatures in ocr
  * Use signatures in signalblocker
  * Run `codecovbash` in the source directory so it can find source files
  * Fix assignment of `build_dir` for CI build/tests
  * consoles/sshSerial: Make ssh port configurable
  * Use signatures in myjsonrpc
  * CI: Do out-of-source tree build</changelog>
  <changelog author="okurz@suse.com" date="1635422400">- Update to version 4.6.1635464770.6790629e:
  * Add quirk for QEMU &gt;= 5 on PPC
  * t: Add test for qemu_params_ofw
  * backend:qemu: Extract 'qemu_params_ofw'
  * t: Check git status at the end of every test
  * t: Add test for one error handling of myjsonrpc
  * myjsonrpc: Remove redundant next at end of while
  * myjsonrpc: Slightly simplify the code
  * t: Use signatures in 24-myjsonrpc.t
  * myjsonrpc: Provide stack trace on undefined value used as symbol ref</changelog>
  <changelog author="okurz@suse.com" date="1635854400">- Update to version 4.6.1635869279.8838dc09:
  * Fix handling resume command (of developer mode) when not paused
  * Fix passing border_offset parameter to mouse_hide
  * t: Use Test::Warnings in all tests
  * Use proper SPDX identifier in t/15-logging.t as well
  * t: Add Test::Warnings to 30-mmapi.t
  * xt: Add style check to ensure all tests use Test::Most
  * t: Use Test::Most in all tests for consistency
  * Switch from usb-ehci to qemu-xhci
  * Provide more explicit error handling on invalid product dir
  * t: Move subtest in 14-isotovideo which does not need mocked backend
  * t: Extract OpenQA::Isotovideo::Utils specific test</changelog>
  <changelog author="okurz@suse.com" date="1636459200">- Update to version 4.6.1636474618.9c079e07:
  * t: Add test for backend::spvm
  * t: Add test for backend::driver
  * t: Add test for backend::null
  * Simplify backend::baseclass::alive
  * Delete unused exception handling in backend::qemu
  * backend::qemu: Fix bug that qemu alive status was never tested
  * Declare likely obsolete backend::pvm as deprecated
  * Mark only sporadically test covered statements
  * t: Improve Test::More error output context in helper
  * t: Output state file content in case of error where missing
  * Add simple instantiation test of backend::pvm
  * dist: Do not build for i586
  * Fix missing subsecond display in video captions
  * doc: Add missing documentation for NOVALINK variables
  * Update tidy to 20211029</changelog>
  <changelog author="okurz@suse.com" date="1636718400">- Update to version 4.6.1636551041.85fc82ce:
  * Warn about backend errors more prominently in log</changelog>
  <changelog author="okurz@suse.com" date="1636977600">- Update to version 4.6.1636972309.195774f7:
  * dist: Also disable i586 build for -test flavor
  * Extend all backend API function signatures with optional slurpy @
  * Use proper perl "signatures" in backend</changelog>
  <changelog author="okurz@suse.com" date="1637841600">- Update to version 4.6.1637851285.25850081:
  * Fix collecting coverage when invoking `run_all` in `t/08-autotest.t`
  * Avoid redundant code in `t/08-autotest.t`
  * Add test for early stop due to `TESTDEBUG`
  * Improve coding style and simplify `t/08-autotest.t`
  * Log reason for stopping the test execution early
  * Avoid running into TBB's soft limit for the max. number of threads
  * docs: Clearly mention devel:openQA in README
  * Fix working directory for generating HTML coverage report
  * Add unit test for basetest::get_new_serial_output
  * osutils: Do not hide errors of exec call in run() and run_diag()
  * qemu: Don't call chattr with timeout and remove -f arg
  * baseclass: Fix errors in some tests by increasing _CHKSEL_RATE_HITS
  * testapi: Add die_on_timeout option to testapi::script::run()
  * ipmi: Make persistent SOL console enabled by default
  * Ignore the previous tests fail hook output in the search for issues</changelog>
  <changelog author="okurz@suse.com" date="1638100800">- Update to version 4.6.1638007345.ae6eed2a:
  * Update deprecated 'short-form boolean' qemu args
  * imgsearch: disable OpenCV logging
  * qemu: Automatically create swtpm device
  * commands: Use same log format as isotovideo</changelog>
  <changelog author="okurz@suse.com" date="1638273600">- Update to version 4.6.1638289529.0a3f5b98:
  * Fix sporadic error in t/10-virtio_terminal.t
  * t: Reduce test timeout for 31-sshSerial as feasible
  * t: Simplify mocked methods in 31-sshSerial.t
  * t: Add full coverage for 31-sshSerial.t</changelog>
  <changelog author="okurz@suse.com" date="1638532800">- Update to version 4.6.1638454781.7b07525b:
  * xt: Fix style check when called in CI from other directory
  * t: Fix missing Test::Warning check in 36-openqa-namedioselect
  * Remove obsolete consoles::remoteVnc
  * Use proper perl "signatures" in some consoles
  * baseclass: Add test for check_select_rate() function
  * baseclass: Improve error message on "half-open socket"</changelog>
  <changelog author="okurz@suse.com" date="1638705600">- Update to version 4.6.1638540755.a348c6d8:
  * ci: Fix OpenQA::Test::CheckGitStatus exit status
  * ci: Fix exit code of OpenQA::Test::CheckGitStatus
  * basetest.pm: Add signatures for new method
  * Add execution time for failed test modules</changelog>
  <changelog author="okurz@suse.com" date="1638878400">- Update to version 4.6.1638699195.e4430abe:
  * Streamline the use of "|||" log marker with new "modstate" function</changelog>
  <changelog author="okurz@suse.com" date="1639396800">- Update to version 4.6.1639403953.ae94c4bd:
  * mergify: Add more useful checks
  * mergify: Use non-deprecated 'check-succes' instead of 'status-success'
  * mergify: Reduce duplication with YAML anchors
  * mergify: Rely on more reviewers
  * Makefile: Fix build dir when calling make with "-C" itself</changelog>
  <changelog author="Oliver Kurz &lt;okurz@suse.com&gt;" date="1657886400">- Fix os-autoinst-devel opencv dependency for upgrade (boo#1201552)</changelog>
</package>
<package pkgid="48c679b61d7bb8d2f611e9a9cfd223b31c4a84ebc90c252780c11a1150c81aa0" name="os-autoinst-test" arch="src">
  <version epoch="0" ver="4.6.1639403953.ae94c4bd" rel="bp154.2.3.1"/>
  <changelog author="Stephan Kulow &lt;coolo@suse.com&gt;" date="1571054400">- No changelog - see os-autoinst.changes</changelog>
</package>
<package pkgid="417304dc848647c19ee41d2bc199b5988a0f3d31d1dc970696ab17473bfb8fe9" name="pcm" arch="i586">
  <version epoch="0" ver="202212" rel="bp154.2.3.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555588800">- Initial commit, jsc#6867</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1556539200">- Remove the TM/etc. blurbs</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1588161600">- Build only for %ix86 x86_64 as it targets Intel CPU only</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598529600">- Update to 202007:
  * no upstream changelog</changelog>
  <changelog author="Roman Dementiev &lt;roman.dementiev@intel.com&gt;" date="1613822400">- Update to 202101:
  * Add Comet Lake support
  * Add Tiger Lake support
  * Add support for additional Icelake cpu model
  * Support Linux resctrl driver for RDT Metrics (see ENVVAR_README.md)
  * Improve robustness in handling rare core event overflows
  * A few fixes for c_example
  * Support using Linux perf API for core PMU for systems with offlined cores
  * Add -i parameter to more tools
  * support select metrics in virtual machines with vPMU support (e.g. AWS virtualized instances with arch_perfmon flag). Screenshot of grafana dashboard with PCM data from a c5.9xlarge virtualized AWS instance
  * pcm-iio: fix VT-d events on SKX
  * pcm-memory: make -pmm/-pmem the default option on systems with PMM/PMem support
  * pcm-tsx: update events for ICL and SKL, allow collection of up to 8 events
  * pcm-raw: support fixed PMU counters
  * fix UBOX MSR addresses for Jaketown/Ivytown
  * support Icelake client CPUs
  * new pcm-raw utility: to program arbitrary core and uncore events by specifying raw register event ID encoding
  * pcm-memory: support -all option to show channels event if they do not have any traffic (inactive memory channels)
  * pcm-memory: csv output for Near Memory hit rate (in PMem Memory Mode)
  * pcm-memory: show memory channels with PMM but w/o DRAM DIMMs
  * unfreeze counters using global uncore counter control register during uncore PMU initialization (some other tools freeze using global control before exit)</changelog>
  <changelog author="Roman Dementiev &lt;roman.dementiev@intel.com&gt;" date="1620129600">- Update to 202104:
  * Add Icelake server support</changelog>
  <changelog author="Roman Dementiev &lt;roman.dementiev@intel.com&gt;" date="1621944000">- Update to 202105:
  * support Intel Atom Processor P5900 Series (previously codenamed SnowRidge)
  * address Linux warnings</changelog>
  <changelog author="Roman Dementiev &lt;roman.dementiev@intel.com&gt;" date="1627214400">- Update to 202107:
  * support systems with &gt; 1024 logical cores
  * support Rocket Lake
  * pcm-pcie: fix HIT metrics calculation on Broadwell/Haswell server platforms
  * pcm: add several additional columns to the socket and core sections in csv output
  * pcm-iio: fix multiplier value for outbound events on Snowridge and Icelake server platforms
  * implement workaround for Linux watchdog not clearing its event programming
  * move Icelake top-down events to a separate group to fix counting through Linux perf API
  * added pcm-mmio utility to rpm</changelog>
  <changelog author="Roman Dementiev &lt;roman.dementiev@intel.com&gt;" date="1635595200">- Update to 202110:
  * support ADL (Alder Lake) in pcm tool
  * display average uncore frequency in pcm.x
  * allow verbose CPU topology printing with PCM_PRINT_TOPOLOGY environment variables
  * pcm-raw: support event group multiplexing
  * pcm-iio: support csv output
  * developed a workaround to make PCM work in VMware guest
  * various bug fixes</changelog>
  <changelog author="Roman Dementiev &lt;roman.dementiev@intel.com&gt;" date="1640520000">- Update to 202112:
  * pcm: expose DRAM_GT_REQUESTS and DRAM_IA_REQUESTS bandwdith metrics
  * pcm: added client IO and GT bandwidth metrics to CSV output
  * pcm-memory: added -u option (clear screen before stat update)
  * pcm-memory: added -s option (silent mode)
  * pcm-memory: add csv print support for DRAM rank monitoring
  * pcm-memory: disable pmem output when rank monitoring is enabled
  * pcm-power: support for &lt;1 sec delay
  * pcm-raw: added -i option (limits the number of iterations/samples)
  * pcm-raw: add support of IRP events
  * pcm-raw: add thousand separator and tab separator options
  * pcm-pcie: support 8 socket platforms
  * pcm-power: add core power license statistics
  * various small fixes and enhancements</changelog>
  <changelog author="Roman Dementiev &lt;roman.dementiev@intel.com&gt;" date="1643371200">- Update to 202201 upstream version:
  * use cmake to build the project
  * reduce pcm overhead
  * pcm-raw: add -r option (PMU reset)
  * pcm-raw: add a sample separator option
  * freeze/unfreeze all core PMU counters during the read operation
  * change ulimit recommendations
  * various performance and bug fixes</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1651665600">- Update to version 202203:
  * Add experimental pcm csv data plot and background collection scripts
  * Print 4 digits for MPI metrics
  * Uncore linux perf event robustness enhancements
  * pcm-raw: additional overhead reduction for multi-group collection
  * general overhead reduction (skip restoring thread affinity when not required)
  * pcm-numa, pcm-tsx: add -pid option
  * Fix compilation of examples on old gcc
  * Fix: restore affinity for caller process
  * Fixed race condition in resctrl (when not available)</changelog>
  <changelog author="Roman Dementiev &lt;roman.dementiev@intel.com&gt;" date="1658836800">- Update to version 202207:
  * pcm-raw: add json output to pcm-raw
  * pcm-memory: fix csv output inconsistency for channels without traffic
  * fix automatic version generation on checkout
  * use GNUInstallDirs for install paths
  * pcm-iio: optionally display root port pci device id
  * automatically increase limit on open files on Linux
  * pcm-daemon: add 'memory mode hit approximation' metric + client sample app fixes
  * pcm-daemon: document all pcm-daemon metrics in the common.h header
  * add CPU model number in processor information list
  * correct hardcoded QPI strings and change to UPI when applicable
  * pcm-iio: add missing header item
  * pcm-raw: fix "EDP" format prints for offlined cores
  * PCM_KEEP_NMI_WATCHDOG=1 env variable to keep NMI watchdog running
  * support pcm-iio on ICX-D
  * support additional Alderlake cpu model
  * document -pid option in pcm-numa and pcm-tsx</changelog>
  <changelog author="Coly Li &lt;colyli@suse.de&gt;" date="1667217600">- Synchronize pcm package from openSUSE to SLES15-SP* supported
  produces (jsc#PED-395, jsc#PED-1004)
- Update to version 202210:
  * Add simdjson submodule and move simdjson lib to version 2.0.4
  * Add  SNR register definitions
  * Fix some build related issues
  * Improvement on printing error messages
  * Fix sporadic crashes
  * Fix top-down events on some Linux kernels
  * Remove 32 bit code from DriverInterface
  * Remove public header file and remove header files from installation
  * Add IOUserClient class to CMake builds, and add fields in kernel
    topology structure to match userland structure
  * Remove of use of volatile and make memory allocation only for the
    lifetime of a function that needs it
  * Move DriverInterface code into MSRAccessor
  * Expand custom counter memory for PCM-Service
  * Removing of potentially existed files (symlinks) before writing
  * pcm-memory: option to enforce output flush
  * Implement RPL support
  * Introduce Raptor Lake IDs</changelog>
  <changelog author="Roman Dementiev &lt;roman.dementiev@intel.com&gt;" date="1669291200">updated to the new upstream repository location and the name
- Update to version 202211:
  * added Sapphire Rapids processor support
  * added new pcm-accel utility to monitor Sapphire Rapids accelerator performance
  * added --version option to all pcm tools
  * pcm: new "enforce flush output" option
  * pcm-raw: support ocr_msr_val and tid modifiers
  * fixed default value for CHA filter1 on CLX and SKX
  * pcm-sensor-server: allow build on FreeBSD
  * pcm-raw: adopt new JSON event file format, new URLs for perfmon event lists</changelog>
  <changelog author="Roman Dementiev &lt;roman.dementiev@intel.com&gt;" date="1671796800">- Update to version 202212:
  * pcm-memory: add SPR HBM support
  * support multiple hosts for Grafana dashboard with prometheus
  * fixes for pcm-iio/pcm-accel</changelog>
</package>
<package pkgid="51108fe172d03df159f0a8b4f033be9ce339c2a96768c60572260453d35f0e53" name="pcm" arch="src">
  <version epoch="0" ver="202212" rel="bp154.2.3.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555588800">- Initial commit, jsc#6867</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1556539200">- Remove the TM/etc. blurbs</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1588161600">- Build only for %ix86 x86_64 as it targets Intel CPU only</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598529600">- Update to 202007:
  * no upstream changelog</changelog>
  <changelog author="Roman Dementiev &lt;roman.dementiev@intel.com&gt;" date="1613822400">- Update to 202101:
  * Add Comet Lake support
  * Add Tiger Lake support
  * Add support for additional Icelake cpu model
  * Support Linux resctrl driver for RDT Metrics (see ENVVAR_README.md)
  * Improve robustness in handling rare core event overflows
  * A few fixes for c_example
  * Support using Linux perf API for core PMU for systems with offlined cores
  * Add -i parameter to more tools
  * support select metrics in virtual machines with vPMU support (e.g. AWS virtualized instances with arch_perfmon flag). Screenshot of grafana dashboard with PCM data from a c5.9xlarge virtualized AWS instance
  * pcm-iio: fix VT-d events on SKX
  * pcm-memory: make -pmm/-pmem the default option on systems with PMM/PMem support
  * pcm-tsx: update events for ICL and SKL, allow collection of up to 8 events
  * pcm-raw: support fixed PMU counters
  * fix UBOX MSR addresses for Jaketown/Ivytown
  * support Icelake client CPUs
  * new pcm-raw utility: to program arbitrary core and uncore events by specifying raw register event ID encoding
  * pcm-memory: support -all option to show channels event if they do not have any traffic (inactive memory channels)
  * pcm-memory: csv output for Near Memory hit rate (in PMem Memory Mode)
  * pcm-memory: show memory channels with PMM but w/o DRAM DIMMs
  * unfreeze counters using global uncore counter control register during uncore PMU initialization (some other tools freeze using global control before exit)</changelog>
  <changelog author="Roman Dementiev &lt;roman.dementiev@intel.com&gt;" date="1620129600">- Update to 202104:
  * Add Icelake server support</changelog>
  <changelog author="Roman Dementiev &lt;roman.dementiev@intel.com&gt;" date="1621944000">- Update to 202105:
  * support Intel Atom Processor P5900 Series (previously codenamed SnowRidge)
  * address Linux warnings</changelog>
  <changelog author="Roman Dementiev &lt;roman.dementiev@intel.com&gt;" date="1627214400">- Update to 202107:
  * support systems with &gt; 1024 logical cores
  * support Rocket Lake
  * pcm-pcie: fix HIT metrics calculation on Broadwell/Haswell server platforms
  * pcm: add several additional columns to the socket and core sections in csv output
  * pcm-iio: fix multiplier value for outbound events on Snowridge and Icelake server platforms
  * implement workaround for Linux watchdog not clearing its event programming
  * move Icelake top-down events to a separate group to fix counting through Linux perf API
  * added pcm-mmio utility to rpm</changelog>
  <changelog author="Roman Dementiev &lt;roman.dementiev@intel.com&gt;" date="1635595200">- Update to 202110:
  * support ADL (Alder Lake) in pcm tool
  * display average uncore frequency in pcm.x
  * allow verbose CPU topology printing with PCM_PRINT_TOPOLOGY environment variables
  * pcm-raw: support event group multiplexing
  * pcm-iio: support csv output
  * developed a workaround to make PCM work in VMware guest
  * various bug fixes</changelog>
  <changelog author="Roman Dementiev &lt;roman.dementiev@intel.com&gt;" date="1640520000">- Update to 202112:
  * pcm: expose DRAM_GT_REQUESTS and DRAM_IA_REQUESTS bandwdith metrics
  * pcm: added client IO and GT bandwidth metrics to CSV output
  * pcm-memory: added -u option (clear screen before stat update)
  * pcm-memory: added -s option (silent mode)
  * pcm-memory: add csv print support for DRAM rank monitoring
  * pcm-memory: disable pmem output when rank monitoring is enabled
  * pcm-power: support for &lt;1 sec delay
  * pcm-raw: added -i option (limits the number of iterations/samples)
  * pcm-raw: add support of IRP events
  * pcm-raw: add thousand separator and tab separator options
  * pcm-pcie: support 8 socket platforms
  * pcm-power: add core power license statistics
  * various small fixes and enhancements</changelog>
  <changelog author="Roman Dementiev &lt;roman.dementiev@intel.com&gt;" date="1643371200">- Update to 202201 upstream version:
  * use cmake to build the project
  * reduce pcm overhead
  * pcm-raw: add -r option (PMU reset)
  * pcm-raw: add a sample separator option
  * freeze/unfreeze all core PMU counters during the read operation
  * change ulimit recommendations
  * various performance and bug fixes</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1651665600">- Update to version 202203:
  * Add experimental pcm csv data plot and background collection scripts
  * Print 4 digits for MPI metrics
  * Uncore linux perf event robustness enhancements
  * pcm-raw: additional overhead reduction for multi-group collection
  * general overhead reduction (skip restoring thread affinity when not required)
  * pcm-numa, pcm-tsx: add -pid option
  * Fix compilation of examples on old gcc
  * Fix: restore affinity for caller process
  * Fixed race condition in resctrl (when not available)</changelog>
  <changelog author="Roman Dementiev &lt;roman.dementiev@intel.com&gt;" date="1658836800">- Update to version 202207:
  * pcm-raw: add json output to pcm-raw
  * pcm-memory: fix csv output inconsistency for channels without traffic
  * fix automatic version generation on checkout
  * use GNUInstallDirs for install paths
  * pcm-iio: optionally display root port pci device id
  * automatically increase limit on open files on Linux
  * pcm-daemon: add 'memory mode hit approximation' metric + client sample app fixes
  * pcm-daemon: document all pcm-daemon metrics in the common.h header
  * add CPU model number in processor information list
  * correct hardcoded QPI strings and change to UPI when applicable
  * pcm-iio: add missing header item
  * pcm-raw: fix "EDP" format prints for offlined cores
  * PCM_KEEP_NMI_WATCHDOG=1 env variable to keep NMI watchdog running
  * support pcm-iio on ICX-D
  * support additional Alderlake cpu model
  * document -pid option in pcm-numa and pcm-tsx</changelog>
  <changelog author="Coly Li &lt;colyli@suse.de&gt;" date="1667217600">- Synchronize pcm package from openSUSE to SLES15-SP* supported
  produces (jsc#PED-395, jsc#PED-1004)
- Update to version 202210:
  * Add simdjson submodule and move simdjson lib to version 2.0.4
  * Add  SNR register definitions
  * Fix some build related issues
  * Improvement on printing error messages
  * Fix sporadic crashes
  * Fix top-down events on some Linux kernels
  * Remove 32 bit code from DriverInterface
  * Remove public header file and remove header files from installation
  * Add IOUserClient class to CMake builds, and add fields in kernel
    topology structure to match userland structure
  * Remove of use of volatile and make memory allocation only for the
    lifetime of a function that needs it
  * Move DriverInterface code into MSRAccessor
  * Expand custom counter memory for PCM-Service
  * Removing of potentially existed files (symlinks) before writing
  * pcm-memory: option to enforce output flush
  * Implement RPL support
  * Introduce Raptor Lake IDs</changelog>
  <changelog author="Roman Dementiev &lt;roman.dementiev@intel.com&gt;" date="1669291200">updated to the new upstream repository location and the name
- Update to version 202211:
  * added Sapphire Rapids processor support
  * added new pcm-accel utility to monitor Sapphire Rapids accelerator performance
  * added --version option to all pcm tools
  * pcm: new "enforce flush output" option
  * pcm-raw: support ocr_msr_val and tid modifiers
  * fixed default value for CHA filter1 on CLX and SKX
  * pcm-sensor-server: allow build on FreeBSD
  * pcm-raw: adopt new JSON event file format, new URLs for perfmon event lists</changelog>
  <changelog author="Roman Dementiev &lt;roman.dementiev@intel.com&gt;" date="1671796800">- Update to version 202212:
  * pcm-memory: add SPR HBM support
  * support multiple hosts for Grafana dashboard with prometheus
  * fixes for pcm-iio/pcm-accel</changelog>
</package>
<package pkgid="813f1a721aeb1ae519ac77c31168991776a6cca80bdb2f9159684f69b4a086f7" name="pcm" arch="x86_64">
  <version epoch="0" ver="202212" rel="bp154.2.3.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555588800">- Initial commit, jsc#6867</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1556539200">- Remove the TM/etc. blurbs</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1588161600">- Build only for %ix86 x86_64 as it targets Intel CPU only</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598529600">- Update to 202007:
  * no upstream changelog</changelog>
  <changelog author="Roman Dementiev &lt;roman.dementiev@intel.com&gt;" date="1613822400">- Update to 202101:
  * Add Comet Lake support
  * Add Tiger Lake support
  * Add support for additional Icelake cpu model
  * Support Linux resctrl driver for RDT Metrics (see ENVVAR_README.md)
  * Improve robustness in handling rare core event overflows
  * A few fixes for c_example
  * Support using Linux perf API for core PMU for systems with offlined cores
  * Add -i parameter to more tools
  * support select metrics in virtual machines with vPMU support (e.g. AWS virtualized instances with arch_perfmon flag). Screenshot of grafana dashboard with PCM data from a c5.9xlarge virtualized AWS instance
  * pcm-iio: fix VT-d events on SKX
  * pcm-memory: make -pmm/-pmem the default option on systems with PMM/PMem support
  * pcm-tsx: update events for ICL and SKL, allow collection of up to 8 events
  * pcm-raw: support fixed PMU counters
  * fix UBOX MSR addresses for Jaketown/Ivytown
  * support Icelake client CPUs
  * new pcm-raw utility: to program arbitrary core and uncore events by specifying raw register event ID encoding
  * pcm-memory: support -all option to show channels event if they do not have any traffic (inactive memory channels)
  * pcm-memory: csv output for Near Memory hit rate (in PMem Memory Mode)
  * pcm-memory: show memory channels with PMM but w/o DRAM DIMMs
  * unfreeze counters using global uncore counter control register during uncore PMU initialization (some other tools freeze using global control before exit)</changelog>
  <changelog author="Roman Dementiev &lt;roman.dementiev@intel.com&gt;" date="1620129600">- Update to 202104:
  * Add Icelake server support</changelog>
  <changelog author="Roman Dementiev &lt;roman.dementiev@intel.com&gt;" date="1621944000">- Update to 202105:
  * support Intel Atom Processor P5900 Series (previously codenamed SnowRidge)
  * address Linux warnings</changelog>
  <changelog author="Roman Dementiev &lt;roman.dementiev@intel.com&gt;" date="1627214400">- Update to 202107:
  * support systems with &gt; 1024 logical cores
  * support Rocket Lake
  * pcm-pcie: fix HIT metrics calculation on Broadwell/Haswell server platforms
  * pcm: add several additional columns to the socket and core sections in csv output
  * pcm-iio: fix multiplier value for outbound events on Snowridge and Icelake server platforms
  * implement workaround for Linux watchdog not clearing its event programming
  * move Icelake top-down events to a separate group to fix counting through Linux perf API
  * added pcm-mmio utility to rpm</changelog>
  <changelog author="Roman Dementiev &lt;roman.dementiev@intel.com&gt;" date="1635595200">- Update to 202110:
  * support ADL (Alder Lake) in pcm tool
  * display average uncore frequency in pcm.x
  * allow verbose CPU topology printing with PCM_PRINT_TOPOLOGY environment variables
  * pcm-raw: support event group multiplexing
  * pcm-iio: support csv output
  * developed a workaround to make PCM work in VMware guest
  * various bug fixes</changelog>
  <changelog author="Roman Dementiev &lt;roman.dementiev@intel.com&gt;" date="1640520000">- Update to 202112:
  * pcm: expose DRAM_GT_REQUESTS and DRAM_IA_REQUESTS bandwdith metrics
  * pcm: added client IO and GT bandwidth metrics to CSV output
  * pcm-memory: added -u option (clear screen before stat update)
  * pcm-memory: added -s option (silent mode)
  * pcm-memory: add csv print support for DRAM rank monitoring
  * pcm-memory: disable pmem output when rank monitoring is enabled
  * pcm-power: support for &lt;1 sec delay
  * pcm-raw: added -i option (limits the number of iterations/samples)
  * pcm-raw: add support of IRP events
  * pcm-raw: add thousand separator and tab separator options
  * pcm-pcie: support 8 socket platforms
  * pcm-power: add core power license statistics
  * various small fixes and enhancements</changelog>
  <changelog author="Roman Dementiev &lt;roman.dementiev@intel.com&gt;" date="1643371200">- Update to 202201 upstream version:
  * use cmake to build the project
  * reduce pcm overhead
  * pcm-raw: add -r option (PMU reset)
  * pcm-raw: add a sample separator option
  * freeze/unfreeze all core PMU counters during the read operation
  * change ulimit recommendations
  * various performance and bug fixes</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1651665600">- Update to version 202203:
  * Add experimental pcm csv data plot and background collection scripts
  * Print 4 digits for MPI metrics
  * Uncore linux perf event robustness enhancements
  * pcm-raw: additional overhead reduction for multi-group collection
  * general overhead reduction (skip restoring thread affinity when not required)
  * pcm-numa, pcm-tsx: add -pid option
  * Fix compilation of examples on old gcc
  * Fix: restore affinity for caller process
  * Fixed race condition in resctrl (when not available)</changelog>
  <changelog author="Roman Dementiev &lt;roman.dementiev@intel.com&gt;" date="1658836800">- Update to version 202207:
  * pcm-raw: add json output to pcm-raw
  * pcm-memory: fix csv output inconsistency for channels without traffic
  * fix automatic version generation on checkout
  * use GNUInstallDirs for install paths
  * pcm-iio: optionally display root port pci device id
  * automatically increase limit on open files on Linux
  * pcm-daemon: add 'memory mode hit approximation' metric + client sample app fixes
  * pcm-daemon: document all pcm-daemon metrics in the common.h header
  * add CPU model number in processor information list
  * correct hardcoded QPI strings and change to UPI when applicable
  * pcm-iio: add missing header item
  * pcm-raw: fix "EDP" format prints for offlined cores
  * PCM_KEEP_NMI_WATCHDOG=1 env variable to keep NMI watchdog running
  * support pcm-iio on ICX-D
  * support additional Alderlake cpu model
  * document -pid option in pcm-numa and pcm-tsx</changelog>
  <changelog author="Coly Li &lt;colyli@suse.de&gt;" date="1667217600">- Synchronize pcm package from openSUSE to SLES15-SP* supported
  produces (jsc#PED-395, jsc#PED-1004)
- Update to version 202210:
  * Add simdjson submodule and move simdjson lib to version 2.0.4
  * Add  SNR register definitions
  * Fix some build related issues
  * Improvement on printing error messages
  * Fix sporadic crashes
  * Fix top-down events on some Linux kernels
  * Remove 32 bit code from DriverInterface
  * Remove public header file and remove header files from installation
  * Add IOUserClient class to CMake builds, and add fields in kernel
    topology structure to match userland structure
  * Remove of use of volatile and make memory allocation only for the
    lifetime of a function that needs it
  * Move DriverInterface code into MSRAccessor
  * Expand custom counter memory for PCM-Service
  * Removing of potentially existed files (symlinks) before writing
  * pcm-memory: option to enforce output flush
  * Implement RPL support
  * Introduce Raptor Lake IDs</changelog>
  <changelog author="Roman Dementiev &lt;roman.dementiev@intel.com&gt;" date="1669291200">updated to the new upstream repository location and the name
- Update to version 202211:
  * added Sapphire Rapids processor support
  * added new pcm-accel utility to monitor Sapphire Rapids accelerator performance
  * added --version option to all pcm tools
  * pcm: new "enforce flush output" option
  * pcm-raw: support ocr_msr_val and tid modifiers
  * fixed default value for CHA filter1 on CLX and SKX
  * pcm-sensor-server: allow build on FreeBSD
  * pcm-raw: adopt new JSON event file format, new URLs for perfmon event lists</changelog>
  <changelog author="Roman Dementiev &lt;roman.dementiev@intel.com&gt;" date="1671796800">- Update to version 202212:
  * pcm-memory: add SPR HBM support
  * support multiple hosts for Grafana dashboard with prometheus
  * fixes for pcm-iio/pcm-accel</changelog>
</package>
<package pkgid="1ff62eb0ecbf064682286804575157a6d0bfffe71bd4dd1f56f95e3f5e6f2038" name="pdns-recursor" arch="aarch64">
  <version epoch="0" ver="4.6.3" rel="bp154.2.3.1"/>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1599566400">- update to 4.3.4
  * fixes an issue where certain CNAMEs could lead to resolver failure
  * fixes an issue with the hostname reported in Carbon messages
  * allows for multiple recursor services to run under systemd
- use HTTPS scheme for all URLs</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1599652800">- 9070.patch: backport compilation fix vs. latest Boost 1.74
  based on https://github.com/PowerDNS/pdns/pull/9070</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1602590400">- update to 4.3.5:
  * fixes cache pollution related to DNSSEC validation.
    (CVE-2020-25829, bsc#1177383)
  * now raise an exception on invalid content in unknown records
  * fixes the parsing of dont-throttle-netmasks in the presence of
    dont-throttle-names
- 9070.patch: refreshed, looks like only partially upstreamed</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1603108800">- update to 4.4.0 with these major enhancements:
  * Native DNS64 support, without the need to use Lua.
  * The ability to add custom tags to RPZ hits.
  * Names encountered while resolving CNAMEs are now subject to RPZ
    processing.
  * More detailed information about RPZ handling is now available while
    tracing, in Lua and in the protobuf logging messages.
  * To allow more efficient use, the record cache is now shared between
    threads.
  * A routing tag[3] can be added in Lua code, which will be used as an
    additional record cache key instead of an EDNS subnet mask,
    enabling for a simpler record cache structure which will enhance
    query processing where the EDNS subnet mask is relevant.
  * The Proxy Protocol version 2 has been implemented to allow for a
    structured exchange of information between a client (typically
    dnsdist) and the Recursor.
- removed obsolete back-port fix 9070.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1603713600">- fix default config
  - turn off chroot by default as it is not supported on systemd
    enabled systems
  - set query-local-address to ::,0.0.0.0
    to make ipv6 only nameservers work out of the box</changelog>
  <changelog author="Franck Bui &lt;fbui@suse.com&gt;" date="1606132800">- Only require 'insserv' when this package ships an initscript</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1606305600">- update to 4.4.1
  * Allow specifying a name in getMetric() that is used for Prometheus
  * Avoids a CNAME loop detection issue with DNS64
  * No longer sends overly long NOD lookups.
  * If a.b.c CNAME x.a.b.c is encountered, switch off QName Minimization.
  * Fix the processing of answers generated from gettag.</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1607947200">- update to 4.4.2:
  Improvements
  * UUID: Use the non-cryptographic variant of the boost::uuid.
  * Keep a cached, valid entry over a fresher Bogus one.
  * Ensure socket-dir matches runtime directory on old systemd
  * Move to several distinct Bogus states, for easier debugging.
  * Do not chase CNAME during qname minimization step 4.
  Bug Fixes
  * Untangle the validation/resolving qnames and qtypes.
  * APL records: fix endianness problem.
  For details see,
  https://doc.powerdns.com/recursor/changelog/4.4.html#change-4.4.2</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1617192000">- update to 4.4.3:
  Improvements
    Use a short-lived NSEC3 hashes cache for denial validation.
    References: #9856, pull request 10221
  Bug Fixes
    More fail-safe handling of Newly Discovered Domain files.
    Handle policy (if needed) after postresolve.
    Return current rcode instead of 0 if there are no CNAME records to follow.
    Lookup DS entries before CNAME entries.
    Handle failure to start the web server more gracefully.
    Test that we correctly cap the answer?s TTL in expanded wildcard cases.
    Fix the gathering of denial proof for wildcard-expanded answers.
    Make sure we take the right minimum for the packet cache TTL data in the SERVFAIL case.
  For details see,
  https://doc.powerdns.com/recursor/changelog/4.4.html#change-4.4.3</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1620734400">- update to 4.5.1:
- Main changes:
  * Dropped support for 32-bit platforms!
  * Rewrite of the way zone cuts are determined, reducing the number of
    outgoing queries by up to 17% when doing DNSSEC validation while reducing
    the CPU usage more than 20% .
  * Added implementation of EDNS0 padding (RFC 7830) for answers sent to clients.
  * Added implementation of RFC 8198[2]: Aggressive use of DNSSEC-Validated Cache.
  * Added a cache of non-resolving nameservers.
  * Re-worked negative cache that is shared between threads.
  * Added support for Extended DNS Errors (RFC 8914[5]).
  * A "refresh almost expired records" (also called "refetch") mechanism[8]
    has been introduced to keep the record cache warm.
- Other new features and improvements:
  * The complete protobuf and dnstap logging code has been rewritten to
    have much smaller performance impact.
  * We have introduced non-offensive synonyms for words used in
    settings. See the upgrade[9] guide.
  * The default minimum TTL[10] override has been changed from 0 to 1.
  * The spoof-nearmiss-max setting[11]'s default has been changed to 1.
    This has the consequence that the Recursor will switch to do TCP
    queries to authoritative nameservers sooner as an effective measure
    against many spoofing attacks.
  * Incoming queries over TCP now also use the packet cache, providing
    another performance increase.
  * File written to by the rec_control command are new opened by the
    command itself. It is also possible to write the content to the
    standard output stream by using a hyphen as file name.
  * TCP FastOpen (RFC 7413[12]) support for outgoing TCP connections to
    authoritative servers and forwarders.</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1623240000">- update to 4.5.2:
  * default value of nsec3-max-iterations[1] has been lowered to 150
  * fixed issue affecting the "refresh almost expired" function</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1624622400">- no longer supports 32-bit arches -- requiers 64-bit time_t
- specfile cleanup - drop initrd cases
- build-require gcc7 on SLE-12 variant</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1625486400">- update to 4.5.4:
  * Make sure that we pass the SOA along the NSEC(3) proof for
    DS queries.</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1627646400">- update to 4.5.5:
  * Improvements
  - Work around clueless servers sending AA=0 answers.
    References: #10555, pull request 10564
  * Bug Fixes
  - Ancestor NSEC3s can only deny the existence of a DS.
    References: #10587, pull request 10593
  - Make really sure we did not miss a cut on validation failure.
    References: #10570, pull request 10575
  - Clear the current proxy protocol values each iteration.
    References: #10515, pull request 10573</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1633953600">- update to 4.5.6:
  * Bug Fixes
  - fixes to the way RPZ updates are handled
  - fix to a case where traffic to a forwarder could be throttled while it should not.
  - fixed few minor DNSSEC validation issues
  - fix for case where the combining of equivalent queries wasn't
    effective were resolved</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1636113600">- update to 4.5.7:
  * A SHA-384 DS should not trump a SHA-256 one, only potentially ignore SHA-1 DS records.
    References: #10908, pull request 10912
  * rec_control wipe-cache-typed should check if a qtype arg is present and valid.
    References: #10905, pull request 10911
  * Put the correct string into appliedPolicyTrigger for Netmask matching rules.
    References: #10842, pull request 10863</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1639742400">- update to 4.6.0
  Compared to the previous major (4.5) release of PowerDNS Recursor, this
  release contains several sets of changes:
  * The ability to flush records from the caches on a incoming
    notify requests.
  * A rewrite of the outgoing TCP code, adding both re-use of
    connections and support for DoT to authoritative servers or
    forwarders.
  * Many improvements in the area of metrics: more metrics are
    collected and more metrics are now exported in a Prometheus
    friendly way.
  * A new Zone to Cache function that will retrieve a zone (using
    AXFR, HTTP, HTTPS or a local file) periodically and insert the
    contents into the record cache, allowing the cache to be always hot
    for a zone. This can be used for the root or any other zone.
  * An experimental Event Tracing function, providing insight into
    the time taken by the steps in the process of resolving a name.</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1648209600">- update to 4.6.1
  fixes incomplete validation of incoming IXFR transfer in
  the Recursor. It applies to setups retrieving one or more RPZ
  zones from a remote server if the network path to the server
  is not trusted. (bsc#1197525, CVE-2022-27227)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1648468800">- fix building against sle-12 backports with gcc-9
- remove obsolete BR on protobuf
- add bundled information to the spec file
- boost_context.patch: Boost.Context detection fix on SLE12</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1661342400">- update to 4.6.3
  * fixes incomplete exception handling related to protobuf message generation
  (bsc#1202664, CVE-2022-37428)
- fixes in 4.6.2
  * Reject non-apex NSEC(3)s that have both the NS and SOA bits set
  * A CNAME answer on DS query should abort DS retrieval
  * Allow disabling of processing the root hints
  * If we get NODATA on an AAAA in followCNAMERecords, try native dns64</changelog>
</package>
<package pkgid="f9bbf114e78ecfa7faaf84b3ebc03e73273d40d6dec79f01caa395239bc7bbc0" name="pdns-recursor" arch="ppc64le">
  <version epoch="0" ver="4.6.3" rel="bp154.2.3.1"/>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1599566400">- update to 4.3.4
  * fixes an issue where certain CNAMEs could lead to resolver failure
  * fixes an issue with the hostname reported in Carbon messages
  * allows for multiple recursor services to run under systemd
- use HTTPS scheme for all URLs</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1599652800">- 9070.patch: backport compilation fix vs. latest Boost 1.74
  based on https://github.com/PowerDNS/pdns/pull/9070</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1602590400">- update to 4.3.5:
  * fixes cache pollution related to DNSSEC validation.
    (CVE-2020-25829, bsc#1177383)
  * now raise an exception on invalid content in unknown records
  * fixes the parsing of dont-throttle-netmasks in the presence of
    dont-throttle-names
- 9070.patch: refreshed, looks like only partially upstreamed</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1603108800">- update to 4.4.0 with these major enhancements:
  * Native DNS64 support, without the need to use Lua.
  * The ability to add custom tags to RPZ hits.
  * Names encountered while resolving CNAMEs are now subject to RPZ
    processing.
  * More detailed information about RPZ handling is now available while
    tracing, in Lua and in the protobuf logging messages.
  * To allow more efficient use, the record cache is now shared between
    threads.
  * A routing tag[3] can be added in Lua code, which will be used as an
    additional record cache key instead of an EDNS subnet mask,
    enabling for a simpler record cache structure which will enhance
    query processing where the EDNS subnet mask is relevant.
  * The Proxy Protocol version 2 has been implemented to allow for a
    structured exchange of information between a client (typically
    dnsdist) and the Recursor.
- removed obsolete back-port fix 9070.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1603713600">- fix default config
  - turn off chroot by default as it is not supported on systemd
    enabled systems
  - set query-local-address to ::,0.0.0.0
    to make ipv6 only nameservers work out of the box</changelog>
  <changelog author="Franck Bui &lt;fbui@suse.com&gt;" date="1606132800">- Only require 'insserv' when this package ships an initscript</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1606305600">- update to 4.4.1
  * Allow specifying a name in getMetric() that is used for Prometheus
  * Avoids a CNAME loop detection issue with DNS64
  * No longer sends overly long NOD lookups.
  * If a.b.c CNAME x.a.b.c is encountered, switch off QName Minimization.
  * Fix the processing of answers generated from gettag.</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1607947200">- update to 4.4.2:
  Improvements
  * UUID: Use the non-cryptographic variant of the boost::uuid.
  * Keep a cached, valid entry over a fresher Bogus one.
  * Ensure socket-dir matches runtime directory on old systemd
  * Move to several distinct Bogus states, for easier debugging.
  * Do not chase CNAME during qname minimization step 4.
  Bug Fixes
  * Untangle the validation/resolving qnames and qtypes.
  * APL records: fix endianness problem.
  For details see,
  https://doc.powerdns.com/recursor/changelog/4.4.html#change-4.4.2</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1617192000">- update to 4.4.3:
  Improvements
    Use a short-lived NSEC3 hashes cache for denial validation.
    References: #9856, pull request 10221
  Bug Fixes
    More fail-safe handling of Newly Discovered Domain files.
    Handle policy (if needed) after postresolve.
    Return current rcode instead of 0 if there are no CNAME records to follow.
    Lookup DS entries before CNAME entries.
    Handle failure to start the web server more gracefully.
    Test that we correctly cap the answer?s TTL in expanded wildcard cases.
    Fix the gathering of denial proof for wildcard-expanded answers.
    Make sure we take the right minimum for the packet cache TTL data in the SERVFAIL case.
  For details see,
  https://doc.powerdns.com/recursor/changelog/4.4.html#change-4.4.3</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1620734400">- update to 4.5.1:
- Main changes:
  * Dropped support for 32-bit platforms!
  * Rewrite of the way zone cuts are determined, reducing the number of
    outgoing queries by up to 17% when doing DNSSEC validation while reducing
    the CPU usage more than 20% .
  * Added implementation of EDNS0 padding (RFC 7830) for answers sent to clients.
  * Added implementation of RFC 8198[2]: Aggressive use of DNSSEC-Validated Cache.
  * Added a cache of non-resolving nameservers.
  * Re-worked negative cache that is shared between threads.
  * Added support for Extended DNS Errors (RFC 8914[5]).
  * A "refresh almost expired records" (also called "refetch") mechanism[8]
    has been introduced to keep the record cache warm.
- Other new features and improvements:
  * The complete protobuf and dnstap logging code has been rewritten to
    have much smaller performance impact.
  * We have introduced non-offensive synonyms for words used in
    settings. See the upgrade[9] guide.
  * The default minimum TTL[10] override has been changed from 0 to 1.
  * The spoof-nearmiss-max setting[11]'s default has been changed to 1.
    This has the consequence that the Recursor will switch to do TCP
    queries to authoritative nameservers sooner as an effective measure
    against many spoofing attacks.
  * Incoming queries over TCP now also use the packet cache, providing
    another performance increase.
  * File written to by the rec_control command are new opened by the
    command itself. It is also possible to write the content to the
    standard output stream by using a hyphen as file name.
  * TCP FastOpen (RFC 7413[12]) support for outgoing TCP connections to
    authoritative servers and forwarders.</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1623240000">- update to 4.5.2:
  * default value of nsec3-max-iterations[1] has been lowered to 150
  * fixed issue affecting the "refresh almost expired" function</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1624622400">- no longer supports 32-bit arches -- requiers 64-bit time_t
- specfile cleanup - drop initrd cases
- build-require gcc7 on SLE-12 variant</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1625486400">- update to 4.5.4:
  * Make sure that we pass the SOA along the NSEC(3) proof for
    DS queries.</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1627646400">- update to 4.5.5:
  * Improvements
  - Work around clueless servers sending AA=0 answers.
    References: #10555, pull request 10564
  * Bug Fixes
  - Ancestor NSEC3s can only deny the existence of a DS.
    References: #10587, pull request 10593
  - Make really sure we did not miss a cut on validation failure.
    References: #10570, pull request 10575
  - Clear the current proxy protocol values each iteration.
    References: #10515, pull request 10573</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1633953600">- update to 4.5.6:
  * Bug Fixes
  - fixes to the way RPZ updates are handled
  - fix to a case where traffic to a forwarder could be throttled while it should not.
  - fixed few minor DNSSEC validation issues
  - fix for case where the combining of equivalent queries wasn't
    effective were resolved</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1636113600">- update to 4.5.7:
  * A SHA-384 DS should not trump a SHA-256 one, only potentially ignore SHA-1 DS records.
    References: #10908, pull request 10912
  * rec_control wipe-cache-typed should check if a qtype arg is present and valid.
    References: #10905, pull request 10911
  * Put the correct string into appliedPolicyTrigger for Netmask matching rules.
    References: #10842, pull request 10863</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1639742400">- update to 4.6.0
  Compared to the previous major (4.5) release of PowerDNS Recursor, this
  release contains several sets of changes:
  * The ability to flush records from the caches on a incoming
    notify requests.
  * A rewrite of the outgoing TCP code, adding both re-use of
    connections and support for DoT to authoritative servers or
    forwarders.
  * Many improvements in the area of metrics: more metrics are
    collected and more metrics are now exported in a Prometheus
    friendly way.
  * A new Zone to Cache function that will retrieve a zone (using
    AXFR, HTTP, HTTPS or a local file) periodically and insert the
    contents into the record cache, allowing the cache to be always hot
    for a zone. This can be used for the root or any other zone.
  * An experimental Event Tracing function, providing insight into
    the time taken by the steps in the process of resolving a name.</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1648209600">- update to 4.6.1
  fixes incomplete validation of incoming IXFR transfer in
  the Recursor. It applies to setups retrieving one or more RPZ
  zones from a remote server if the network path to the server
  is not trusted. (bsc#1197525, CVE-2022-27227)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1648468800">- fix building against sle-12 backports with gcc-9
- remove obsolete BR on protobuf
- add bundled information to the spec file
- boost_context.patch: Boost.Context detection fix on SLE12</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1661342400">- update to 4.6.3
  * fixes incomplete exception handling related to protobuf message generation
  (bsc#1202664, CVE-2022-37428)
- fixes in 4.6.2
  * Reject non-apex NSEC(3)s that have both the NS and SOA bits set
  * A CNAME answer on DS query should abort DS retrieval
  * Allow disabling of processing the root hints
  * If we get NODATA on an AAAA in followCNAMERecords, try native dns64</changelog>
</package>
<package pkgid="5d448e1dab87097c99b7d46be540e80dd707fe264fbd52246a6e51b15f159e70" name="pdns-recursor" arch="src">
  <version epoch="0" ver="4.6.3" rel="bp154.2.3.1"/>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1599566400">- update to 4.3.4
  * fixes an issue where certain CNAMEs could lead to resolver failure
  * fixes an issue with the hostname reported in Carbon messages
  * allows for multiple recursor services to run under systemd
- use HTTPS scheme for all URLs</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1599652800">- 9070.patch: backport compilation fix vs. latest Boost 1.74
  based on https://github.com/PowerDNS/pdns/pull/9070</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1602590400">- update to 4.3.5:
  * fixes cache pollution related to DNSSEC validation.
    (CVE-2020-25829, bsc#1177383)
  * now raise an exception on invalid content in unknown records
  * fixes the parsing of dont-throttle-netmasks in the presence of
    dont-throttle-names
- 9070.patch: refreshed, looks like only partially upstreamed</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1603108800">- update to 4.4.0 with these major enhancements:
  * Native DNS64 support, without the need to use Lua.
  * The ability to add custom tags to RPZ hits.
  * Names encountered while resolving CNAMEs are now subject to RPZ
    processing.
  * More detailed information about RPZ handling is now available while
    tracing, in Lua and in the protobuf logging messages.
  * To allow more efficient use, the record cache is now shared between
    threads.
  * A routing tag[3] can be added in Lua code, which will be used as an
    additional record cache key instead of an EDNS subnet mask,
    enabling for a simpler record cache structure which will enhance
    query processing where the EDNS subnet mask is relevant.
  * The Proxy Protocol version 2 has been implemented to allow for a
    structured exchange of information between a client (typically
    dnsdist) and the Recursor.
- removed obsolete back-port fix 9070.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1603713600">- fix default config
  - turn off chroot by default as it is not supported on systemd
    enabled systems
  - set query-local-address to ::,0.0.0.0
    to make ipv6 only nameservers work out of the box</changelog>
  <changelog author="Franck Bui &lt;fbui@suse.com&gt;" date="1606132800">- Only require 'insserv' when this package ships an initscript</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1606305600">- update to 4.4.1
  * Allow specifying a name in getMetric() that is used for Prometheus
  * Avoids a CNAME loop detection issue with DNS64
  * No longer sends overly long NOD lookups.
  * If a.b.c CNAME x.a.b.c is encountered, switch off QName Minimization.
  * Fix the processing of answers generated from gettag.</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1607947200">- update to 4.4.2:
  Improvements
  * UUID: Use the non-cryptographic variant of the boost::uuid.
  * Keep a cached, valid entry over a fresher Bogus one.
  * Ensure socket-dir matches runtime directory on old systemd
  * Move to several distinct Bogus states, for easier debugging.
  * Do not chase CNAME during qname minimization step 4.
  Bug Fixes
  * Untangle the validation/resolving qnames and qtypes.
  * APL records: fix endianness problem.
  For details see,
  https://doc.powerdns.com/recursor/changelog/4.4.html#change-4.4.2</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1617192000">- update to 4.4.3:
  Improvements
    Use a short-lived NSEC3 hashes cache for denial validation.
    References: #9856, pull request 10221
  Bug Fixes
    More fail-safe handling of Newly Discovered Domain files.
    Handle policy (if needed) after postresolve.
    Return current rcode instead of 0 if there are no CNAME records to follow.
    Lookup DS entries before CNAME entries.
    Handle failure to start the web server more gracefully.
    Test that we correctly cap the answer?s TTL in expanded wildcard cases.
    Fix the gathering of denial proof for wildcard-expanded answers.
    Make sure we take the right minimum for the packet cache TTL data in the SERVFAIL case.
  For details see,
  https://doc.powerdns.com/recursor/changelog/4.4.html#change-4.4.3</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1620734400">- update to 4.5.1:
- Main changes:
  * Dropped support for 32-bit platforms!
  * Rewrite of the way zone cuts are determined, reducing the number of
    outgoing queries by up to 17% when doing DNSSEC validation while reducing
    the CPU usage more than 20% .
  * Added implementation of EDNS0 padding (RFC 7830) for answers sent to clients.
  * Added implementation of RFC 8198[2]: Aggressive use of DNSSEC-Validated Cache.
  * Added a cache of non-resolving nameservers.
  * Re-worked negative cache that is shared between threads.
  * Added support for Extended DNS Errors (RFC 8914[5]).
  * A "refresh almost expired records" (also called "refetch") mechanism[8]
    has been introduced to keep the record cache warm.
- Other new features and improvements:
  * The complete protobuf and dnstap logging code has been rewritten to
    have much smaller performance impact.
  * We have introduced non-offensive synonyms for words used in
    settings. See the upgrade[9] guide.
  * The default minimum TTL[10] override has been changed from 0 to 1.
  * The spoof-nearmiss-max setting[11]'s default has been changed to 1.
    This has the consequence that the Recursor will switch to do TCP
    queries to authoritative nameservers sooner as an effective measure
    against many spoofing attacks.
  * Incoming queries over TCP now also use the packet cache, providing
    another performance increase.
  * File written to by the rec_control command are new opened by the
    command itself. It is also possible to write the content to the
    standard output stream by using a hyphen as file name.
  * TCP FastOpen (RFC 7413[12]) support for outgoing TCP connections to
    authoritative servers and forwarders.</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1623240000">- update to 4.5.2:
  * default value of nsec3-max-iterations[1] has been lowered to 150
  * fixed issue affecting the "refresh almost expired" function</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1624622400">- no longer supports 32-bit arches -- requiers 64-bit time_t
- specfile cleanup - drop initrd cases
- build-require gcc7 on SLE-12 variant</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1625486400">- update to 4.5.4:
  * Make sure that we pass the SOA along the NSEC(3) proof for
    DS queries.</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1627646400">- update to 4.5.5:
  * Improvements
  - Work around clueless servers sending AA=0 answers.
    References: #10555, pull request 10564
  * Bug Fixes
  - Ancestor NSEC3s can only deny the existence of a DS.
    References: #10587, pull request 10593
  - Make really sure we did not miss a cut on validation failure.
    References: #10570, pull request 10575
  - Clear the current proxy protocol values each iteration.
    References: #10515, pull request 10573</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1633953600">- update to 4.5.6:
  * Bug Fixes
  - fixes to the way RPZ updates are handled
  - fix to a case where traffic to a forwarder could be throttled while it should not.
  - fixed few minor DNSSEC validation issues
  - fix for case where the combining of equivalent queries wasn't
    effective were resolved</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1636113600">- update to 4.5.7:
  * A SHA-384 DS should not trump a SHA-256 one, only potentially ignore SHA-1 DS records.
    References: #10908, pull request 10912
  * rec_control wipe-cache-typed should check if a qtype arg is present and valid.
    References: #10905, pull request 10911
  * Put the correct string into appliedPolicyTrigger for Netmask matching rules.
    References: #10842, pull request 10863</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1639742400">- update to 4.6.0
  Compared to the previous major (4.5) release of PowerDNS Recursor, this
  release contains several sets of changes:
  * The ability to flush records from the caches on a incoming
    notify requests.
  * A rewrite of the outgoing TCP code, adding both re-use of
    connections and support for DoT to authoritative servers or
    forwarders.
  * Many improvements in the area of metrics: more metrics are
    collected and more metrics are now exported in a Prometheus
    friendly way.
  * A new Zone to Cache function that will retrieve a zone (using
    AXFR, HTTP, HTTPS or a local file) periodically and insert the
    contents into the record cache, allowing the cache to be always hot
    for a zone. This can be used for the root or any other zone.
  * An experimental Event Tracing function, providing insight into
    the time taken by the steps in the process of resolving a name.</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1648209600">- update to 4.6.1
  fixes incomplete validation of incoming IXFR transfer in
  the Recursor. It applies to setups retrieving one or more RPZ
  zones from a remote server if the network path to the server
  is not trusted. (bsc#1197525, CVE-2022-27227)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1648468800">- fix building against sle-12 backports with gcc-9
- remove obsolete BR on protobuf
- add bundled information to the spec file
- boost_context.patch: Boost.Context detection fix on SLE12</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1661342400">- update to 4.6.3
  * fixes incomplete exception handling related to protobuf message generation
  (bsc#1202664, CVE-2022-37428)
- fixes in 4.6.2
  * Reject non-apex NSEC(3)s that have both the NS and SOA bits set
  * A CNAME answer on DS query should abort DS retrieval
  * Allow disabling of processing the root hints
  * If we get NODATA on an AAAA in followCNAMERecords, try native dns64</changelog>
</package>
<package pkgid="84641147086b95c22bfd549576f11bd4851a7930592f8ea929d81a6d947aafeb" name="pdns-recursor" arch="x86_64">
  <version epoch="0" ver="4.6.3" rel="bp154.2.3.1"/>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1599566400">- update to 4.3.4
  * fixes an issue where certain CNAMEs could lead to resolver failure
  * fixes an issue with the hostname reported in Carbon messages
  * allows for multiple recursor services to run under systemd
- use HTTPS scheme for all URLs</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1599652800">- 9070.patch: backport compilation fix vs. latest Boost 1.74
  based on https://github.com/PowerDNS/pdns/pull/9070</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1602590400">- update to 4.3.5:
  * fixes cache pollution related to DNSSEC validation.
    (CVE-2020-25829, bsc#1177383)
  * now raise an exception on invalid content in unknown records
  * fixes the parsing of dont-throttle-netmasks in the presence of
    dont-throttle-names
- 9070.patch: refreshed, looks like only partially upstreamed</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1603108800">- update to 4.4.0 with these major enhancements:
  * Native DNS64 support, without the need to use Lua.
  * The ability to add custom tags to RPZ hits.
  * Names encountered while resolving CNAMEs are now subject to RPZ
    processing.
  * More detailed information about RPZ handling is now available while
    tracing, in Lua and in the protobuf logging messages.
  * To allow more efficient use, the record cache is now shared between
    threads.
  * A routing tag[3] can be added in Lua code, which will be used as an
    additional record cache key instead of an EDNS subnet mask,
    enabling for a simpler record cache structure which will enhance
    query processing where the EDNS subnet mask is relevant.
  * The Proxy Protocol version 2 has been implemented to allow for a
    structured exchange of information between a client (typically
    dnsdist) and the Recursor.
- removed obsolete back-port fix 9070.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1603713600">- fix default config
  - turn off chroot by default as it is not supported on systemd
    enabled systems
  - set query-local-address to ::,0.0.0.0
    to make ipv6 only nameservers work out of the box</changelog>
  <changelog author="Franck Bui &lt;fbui@suse.com&gt;" date="1606132800">- Only require 'insserv' when this package ships an initscript</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1606305600">- update to 4.4.1
  * Allow specifying a name in getMetric() that is used for Prometheus
  * Avoids a CNAME loop detection issue with DNS64
  * No longer sends overly long NOD lookups.
  * If a.b.c CNAME x.a.b.c is encountered, switch off QName Minimization.
  * Fix the processing of answers generated from gettag.</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1607947200">- update to 4.4.2:
  Improvements
  * UUID: Use the non-cryptographic variant of the boost::uuid.
  * Keep a cached, valid entry over a fresher Bogus one.
  * Ensure socket-dir matches runtime directory on old systemd
  * Move to several distinct Bogus states, for easier debugging.
  * Do not chase CNAME during qname minimization step 4.
  Bug Fixes
  * Untangle the validation/resolving qnames and qtypes.
  * APL records: fix endianness problem.
  For details see,
  https://doc.powerdns.com/recursor/changelog/4.4.html#change-4.4.2</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1617192000">- update to 4.4.3:
  Improvements
    Use a short-lived NSEC3 hashes cache for denial validation.
    References: #9856, pull request 10221
  Bug Fixes
    More fail-safe handling of Newly Discovered Domain files.
    Handle policy (if needed) after postresolve.
    Return current rcode instead of 0 if there are no CNAME records to follow.
    Lookup DS entries before CNAME entries.
    Handle failure to start the web server more gracefully.
    Test that we correctly cap the answer?s TTL in expanded wildcard cases.
    Fix the gathering of denial proof for wildcard-expanded answers.
    Make sure we take the right minimum for the packet cache TTL data in the SERVFAIL case.
  For details see,
  https://doc.powerdns.com/recursor/changelog/4.4.html#change-4.4.3</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1620734400">- update to 4.5.1:
- Main changes:
  * Dropped support for 32-bit platforms!
  * Rewrite of the way zone cuts are determined, reducing the number of
    outgoing queries by up to 17% when doing DNSSEC validation while reducing
    the CPU usage more than 20% .
  * Added implementation of EDNS0 padding (RFC 7830) for answers sent to clients.
  * Added implementation of RFC 8198[2]: Aggressive use of DNSSEC-Validated Cache.
  * Added a cache of non-resolving nameservers.
  * Re-worked negative cache that is shared between threads.
  * Added support for Extended DNS Errors (RFC 8914[5]).
  * A "refresh almost expired records" (also called "refetch") mechanism[8]
    has been introduced to keep the record cache warm.
- Other new features and improvements:
  * The complete protobuf and dnstap logging code has been rewritten to
    have much smaller performance impact.
  * We have introduced non-offensive synonyms for words used in
    settings. See the upgrade[9] guide.
  * The default minimum TTL[10] override has been changed from 0 to 1.
  * The spoof-nearmiss-max setting[11]'s default has been changed to 1.
    This has the consequence that the Recursor will switch to do TCP
    queries to authoritative nameservers sooner as an effective measure
    against many spoofing attacks.
  * Incoming queries over TCP now also use the packet cache, providing
    another performance increase.
  * File written to by the rec_control command are new opened by the
    command itself. It is also possible to write the content to the
    standard output stream by using a hyphen as file name.
  * TCP FastOpen (RFC 7413[12]) support for outgoing TCP connections to
    authoritative servers and forwarders.</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1623240000">- update to 4.5.2:
  * default value of nsec3-max-iterations[1] has been lowered to 150
  * fixed issue affecting the "refresh almost expired" function</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1624622400">- no longer supports 32-bit arches -- requiers 64-bit time_t
- specfile cleanup - drop initrd cases
- build-require gcc7 on SLE-12 variant</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1625486400">- update to 4.5.4:
  * Make sure that we pass the SOA along the NSEC(3) proof for
    DS queries.</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1627646400">- update to 4.5.5:
  * Improvements
  - Work around clueless servers sending AA=0 answers.
    References: #10555, pull request 10564
  * Bug Fixes
  - Ancestor NSEC3s can only deny the existence of a DS.
    References: #10587, pull request 10593
  - Make really sure we did not miss a cut on validation failure.
    References: #10570, pull request 10575
  - Clear the current proxy protocol values each iteration.
    References: #10515, pull request 10573</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1633953600">- update to 4.5.6:
  * Bug Fixes
  - fixes to the way RPZ updates are handled
  - fix to a case where traffic to a forwarder could be throttled while it should not.
  - fixed few minor DNSSEC validation issues
  - fix for case where the combining of equivalent queries wasn't
    effective were resolved</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1636113600">- update to 4.5.7:
  * A SHA-384 DS should not trump a SHA-256 one, only potentially ignore SHA-1 DS records.
    References: #10908, pull request 10912
  * rec_control wipe-cache-typed should check if a qtype arg is present and valid.
    References: #10905, pull request 10911
  * Put the correct string into appliedPolicyTrigger for Netmask matching rules.
    References: #10842, pull request 10863</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1639742400">- update to 4.6.0
  Compared to the previous major (4.5) release of PowerDNS Recursor, this
  release contains several sets of changes:
  * The ability to flush records from the caches on a incoming
    notify requests.
  * A rewrite of the outgoing TCP code, adding both re-use of
    connections and support for DoT to authoritative servers or
    forwarders.
  * Many improvements in the area of metrics: more metrics are
    collected and more metrics are now exported in a Prometheus
    friendly way.
  * A new Zone to Cache function that will retrieve a zone (using
    AXFR, HTTP, HTTPS or a local file) periodically and insert the
    contents into the record cache, allowing the cache to be always hot
    for a zone. This can be used for the root or any other zone.
  * An experimental Event Tracing function, providing insight into
    the time taken by the steps in the process of resolving a name.</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1648209600">- update to 4.6.1
  fixes incomplete validation of incoming IXFR transfer in
  the Recursor. It applies to setups retrieving one or more RPZ
  zones from a remote server if the network path to the server
  is not trusted. (bsc#1197525, CVE-2022-27227)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1648468800">- fix building against sle-12 backports with gcc-9
- remove obsolete BR on protobuf
- add bundled information to the spec file
- boost_context.patch: Boost.Context detection fix on SLE12</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1661342400">- update to 4.6.3
  * fixes incomplete exception handling related to protobuf message generation
  (bsc#1202664, CVE-2022-37428)
- fixes in 4.6.2
  * Reject non-apex NSEC(3)s that have both the NS and SOA bits set
  * A CNAME answer on DS query should abort DS retrieval
  * Allow disabling of processing the root hints
  * If we get NODATA on an AAAA in followCNAMERecords, try native dns64</changelog>
</package>
<package pkgid="adc58103e14575dcd6ec15d8b89174aac1e453a8dc2a6132074ee74d5b8cf0af" name="perl-gdal" arch="aarch64">
  <version epoch="0" ver="3.4.1" rel="bp154.2.2.1"/>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1593518400">- Update to 3.1.1 version with full changelog
  https://github.com/OSGeo/gdal/blob/v3.1.1/gdal/NEWS
- Packaging:
  + drop merged upstream gdal-fix-docs.patch
  + Rework our way to deliver the package:
  - Remove building doc as we don't deliver it
  - Use upstream man page already present in tar
  - Simplify all %if doc related stuff
  + Lower again a bit _constraints: 2.5G RAM 4.0G HDD</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1594123200">- Update to 3.1.2 version bug fix release see changelog
  https://github.com/OSGeo/gdal/blob/v3.1.1/gdal/NEWS</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595160000">- Work-around occasional build failures due to incomplete ordering
  in Makefile. (https://github.com/OSGeo/gdal/issues/2777)
- Avoid double gdal prefix for /usr/share/gdal/gdal/*</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1599566400">- Update to 3.1.3 version bug fix release see changelog
  https://github.com/OSGeo/gdal/blob/v3.1.3/gdal/NEWS</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1603540800">- Update to 3.1.4 version bug fix release see changelog
  https://github.com/OSGeo/gdal/blob/v3.1.4/gdal/NEWS</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1604491200">- Update to 3.2.0:
  * Full changelog
    https://github.com/OSGeo/gdal/blob/v3.2.0/gdal/NEWS
- Packaging:
  + Add python3-GDAL as require in gdal package
  + Remove shebang where it's not allowed in python's scripts</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1609761600">- Update to 3.2.1:
  * Full changelog
    https://github.com/OSGeo/gdal/blob/v3.2.1/gdal/NEWS
- Packaging:
  + Update copyright year</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1615550400">- Update to 3.2.2 (bug fix release):
  * Full changelog
    https://github.com/OSGeo/gdal/blob/v3.2.2/gdal/NEWS</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1620129600">- Update to 3.2.3 (bug fix release)
  * Full changelog
    https://github.com/OSGeo/gdal/blob/v3.2.3/gdal/NEWS
- Be warned about ahead changes with future 3.3.x version
    https://github.com/OSGeo/gdal/blob/v3.3.0/gdal/NEWS</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1621252800">- remove bundled libraries, use system provided ones</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1621857600">- Update to 3.3.0 version
  * Full changelog
    https://github.com/OSGeo/gdal/blob/v3.3.0/gdal/NEWS
  * Main changes python2 is now gone
- Packaging
  + bump libso version to 2.9
  + Remove python2 related stuff
  + Add support for heif,pcre,kml,sfcgal
    make conditionnal support of libkml, sfcgal, heif
  + Prepare tests also conditionnal
  + Several small cleanup (merged, no more)
  + Remove autoreconf upstream is using last available</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1626004800">- Update to version 3.3.1 bugfix release
  + Full changelog
    https://github.com/OSGeo/gdal/blob/v3.3.1/gdal/NEWS</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1631016000">- Update to version 3.3.2 bugfix release
  + Full changelog
    https://github.com/OSGeo/gdal/blob/v3.3.2/gdal/NEWS</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1634731200">- Fix build with poppler 2.10:
  * gdal-poppler-2.10-a.patch
  * gdal-poppler-2.10-b.patch</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1635768000">- Update to version 3.3.3 bugfix release
  + Full changelog https://github.com/OSGeo/gdal/blob/v3.3.3/gdal/NEWS
- Removed upstream patches
  + gdal-poppler-2.10-a.patch
  + gdal-poppler-2.10-b.patch</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1638187200">- Fix xerces detection by adding --with-xerces-inc parameter</changelog>
  <changelog author="D. Berge &lt;opensuse@navlost.eu&gt;" date="1640952000">- Fix build on Leap 15.3</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1641297600">- Upgrade to version 3.4.1 bugfix release
  + Full changelog https://github.com/OSGeo/gdal/blob/v3.4.0/gdal/NEWS
  + Explicitly add a call to autogen.sh
  + Upstream PCIDSK: fix write heap-buffer-overflow boo#1194263
- Removed GDALmake.opt.in.patch due to cc1plus: warning:
  - I gcore: No such file or directory [-Wmissing-include-dirs]
- Add conditionnal support for hdf4 boo#1192614 on Leap
  build -with hdf4_support can be enabled
- Update copyright year</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1646654400">- Add gdal-fix-build-poppler.patch: Fix build with poppler 22.03.0
  and newer.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1646740800">- Add gdal-fix-poppler-leap.patch: Fix build on Leap 15.4 and
  poppler.
- Add fdups macro, BuildRequires already in place, remove
  duplicate files.</changelog>
</package>
<package pkgid="e8898da6fd2dec636fe75a14414663397ac30c7a808ec810c79297fdea2ab8be" name="perl-gdal" arch="ppc64le">
  <version epoch="0" ver="3.4.1" rel="bp154.2.2.1"/>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1593518400">- Update to 3.1.1 version with full changelog
  https://github.com/OSGeo/gdal/blob/v3.1.1/gdal/NEWS
- Packaging:
  + drop merged upstream gdal-fix-docs.patch
  + Rework our way to deliver the package:
  - Remove building doc as we don't deliver it
  - Use upstream man page already present in tar
  - Simplify all %if doc related stuff
  + Lower again a bit _constraints: 2.5G RAM 4.0G HDD</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1594123200">- Update to 3.1.2 version bug fix release see changelog
  https://github.com/OSGeo/gdal/blob/v3.1.1/gdal/NEWS</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595160000">- Work-around occasional build failures due to incomplete ordering
  in Makefile. (https://github.com/OSGeo/gdal/issues/2777)
- Avoid double gdal prefix for /usr/share/gdal/gdal/*</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1599566400">- Update to 3.1.3 version bug fix release see changelog
  https://github.com/OSGeo/gdal/blob/v3.1.3/gdal/NEWS</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1603540800">- Update to 3.1.4 version bug fix release see changelog
  https://github.com/OSGeo/gdal/blob/v3.1.4/gdal/NEWS</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1604491200">- Update to 3.2.0:
  * Full changelog
    https://github.com/OSGeo/gdal/blob/v3.2.0/gdal/NEWS
- Packaging:
  + Add python3-GDAL as require in gdal package
  + Remove shebang where it's not allowed in python's scripts</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1609761600">- Update to 3.2.1:
  * Full changelog
    https://github.com/OSGeo/gdal/blob/v3.2.1/gdal/NEWS
- Packaging:
  + Update copyright year</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1615550400">- Update to 3.2.2 (bug fix release):
  * Full changelog
    https://github.com/OSGeo/gdal/blob/v3.2.2/gdal/NEWS</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1620129600">- Update to 3.2.3 (bug fix release)
  * Full changelog
    https://github.com/OSGeo/gdal/blob/v3.2.3/gdal/NEWS
- Be warned about ahead changes with future 3.3.x version
    https://github.com/OSGeo/gdal/blob/v3.3.0/gdal/NEWS</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1621252800">- remove bundled libraries, use system provided ones</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1621857600">- Update to 3.3.0 version
  * Full changelog
    https://github.com/OSGeo/gdal/blob/v3.3.0/gdal/NEWS
  * Main changes python2 is now gone
- Packaging
  + bump libso version to 2.9
  + Remove python2 related stuff
  + Add support for heif,pcre,kml,sfcgal
    make conditionnal support of libkml, sfcgal, heif
  + Prepare tests also conditionnal
  + Several small cleanup (merged, no more)
  + Remove autoreconf upstream is using last available</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1626004800">- Update to version 3.3.1 bugfix release
  + Full changelog
    https://github.com/OSGeo/gdal/blob/v3.3.1/gdal/NEWS</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1631016000">- Update to version 3.3.2 bugfix release
  + Full changelog
    https://github.com/OSGeo/gdal/blob/v3.3.2/gdal/NEWS</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1634731200">- Fix build with poppler 2.10:
  * gdal-poppler-2.10-a.patch
  * gdal-poppler-2.10-b.patch</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1635768000">- Update to version 3.3.3 bugfix release
  + Full changelog https://github.com/OSGeo/gdal/blob/v3.3.3/gdal/NEWS
- Removed upstream patches
  + gdal-poppler-2.10-a.patch
  + gdal-poppler-2.10-b.patch</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1638187200">- Fix xerces detection by adding --with-xerces-inc parameter</changelog>
  <changelog author="D. Berge &lt;opensuse@navlost.eu&gt;" date="1640952000">- Fix build on Leap 15.3</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1641297600">- Upgrade to version 3.4.1 bugfix release
  + Full changelog https://github.com/OSGeo/gdal/blob/v3.4.0/gdal/NEWS
  + Explicitly add a call to autogen.sh
  + Upstream PCIDSK: fix write heap-buffer-overflow boo#1194263
- Removed GDALmake.opt.in.patch due to cc1plus: warning:
  - I gcore: No such file or directory [-Wmissing-include-dirs]
- Add conditionnal support for hdf4 boo#1192614 on Leap
  build -with hdf4_support can be enabled
- Update copyright year</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1646654400">- Add gdal-fix-build-poppler.patch: Fix build with poppler 22.03.0
  and newer.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1646740800">- Add gdal-fix-poppler-leap.patch: Fix build on Leap 15.4 and
  poppler.
- Add fdups macro, BuildRequires already in place, remove
  duplicate files.</changelog>
</package>
<package pkgid="958d2608de051cbd3fd40f3b1f9223b6cab8de189435d6cd762af80c0bc6a48c" name="perl-gdal" arch="s390x">
  <version epoch="0" ver="3.4.1" rel="bp154.2.2.1"/>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1593518400">- Update to 3.1.1 version with full changelog
  https://github.com/OSGeo/gdal/blob/v3.1.1/gdal/NEWS
- Packaging:
  + drop merged upstream gdal-fix-docs.patch
  + Rework our way to deliver the package:
  - Remove building doc as we don't deliver it
  - Use upstream man page already present in tar
  - Simplify all %if doc related stuff
  + Lower again a bit _constraints: 2.5G RAM 4.0G HDD</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1594123200">- Update to 3.1.2 version bug fix release see changelog
  https://github.com/OSGeo/gdal/blob/v3.1.1/gdal/NEWS</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595160000">- Work-around occasional build failures due to incomplete ordering
  in Makefile. (https://github.com/OSGeo/gdal/issues/2777)
- Avoid double gdal prefix for /usr/share/gdal/gdal/*</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1599566400">- Update to 3.1.3 version bug fix release see changelog
  https://github.com/OSGeo/gdal/blob/v3.1.3/gdal/NEWS</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1603540800">- Update to 3.1.4 version bug fix release see changelog
  https://github.com/OSGeo/gdal/blob/v3.1.4/gdal/NEWS</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1604491200">- Update to 3.2.0:
  * Full changelog
    https://github.com/OSGeo/gdal/blob/v3.2.0/gdal/NEWS
- Packaging:
  + Add python3-GDAL as require in gdal package
  + Remove shebang where it's not allowed in python's scripts</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1609761600">- Update to 3.2.1:
  * Full changelog
    https://github.com/OSGeo/gdal/blob/v3.2.1/gdal/NEWS
- Packaging:
  + Update copyright year</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1615550400">- Update to 3.2.2 (bug fix release):
  * Full changelog
    https://github.com/OSGeo/gdal/blob/v3.2.2/gdal/NEWS</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1620129600">- Update to 3.2.3 (bug fix release)
  * Full changelog
    https://github.com/OSGeo/gdal/blob/v3.2.3/gdal/NEWS
- Be warned about ahead changes with future 3.3.x version
    https://github.com/OSGeo/gdal/blob/v3.3.0/gdal/NEWS</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1621252800">- remove bundled libraries, use system provided ones</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1621857600">- Update to 3.3.0 version
  * Full changelog
    https://github.com/OSGeo/gdal/blob/v3.3.0/gdal/NEWS
  * Main changes python2 is now gone
- Packaging
  + bump libso version to 2.9
  + Remove python2 related stuff
  + Add support for heif,pcre,kml,sfcgal
    make conditionnal support of libkml, sfcgal, heif
  + Prepare tests also conditionnal
  + Several small cleanup (merged, no more)
  + Remove autoreconf upstream is using last available</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1626004800">- Update to version 3.3.1 bugfix release
  + Full changelog
    https://github.com/OSGeo/gdal/blob/v3.3.1/gdal/NEWS</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1631016000">- Update to version 3.3.2 bugfix release
  + Full changelog
    https://github.com/OSGeo/gdal/blob/v3.3.2/gdal/NEWS</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1634731200">- Fix build with poppler 2.10:
  * gdal-poppler-2.10-a.patch
  * gdal-poppler-2.10-b.patch</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1635768000">- Update to version 3.3.3 bugfix release
  + Full changelog https://github.com/OSGeo/gdal/blob/v3.3.3/gdal/NEWS
- Removed upstream patches
  + gdal-poppler-2.10-a.patch
  + gdal-poppler-2.10-b.patch</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1638187200">- Fix xerces detection by adding --with-xerces-inc parameter</changelog>
  <changelog author="D. Berge &lt;opensuse@navlost.eu&gt;" date="1640952000">- Fix build on Leap 15.3</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1641297600">- Upgrade to version 3.4.1 bugfix release
  + Full changelog https://github.com/OSGeo/gdal/blob/v3.4.0/gdal/NEWS
  + Explicitly add a call to autogen.sh
  + Upstream PCIDSK: fix write heap-buffer-overflow boo#1194263
- Removed GDALmake.opt.in.patch due to cc1plus: warning:
  - I gcore: No such file or directory [-Wmissing-include-dirs]
- Add conditionnal support for hdf4 boo#1192614 on Leap
  build -with hdf4_support can be enabled
- Update copyright year</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1646654400">- Add gdal-fix-build-poppler.patch: Fix build with poppler 22.03.0
  and newer.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1646740800">- Add gdal-fix-poppler-leap.patch: Fix build on Leap 15.4 and
  poppler.
- Add fdups macro, BuildRequires already in place, remove
  duplicate files.</changelog>
</package>
<package pkgid="a47b6cae5252535568bf1af2714bd903c9823c5a3bdf727a19de5f65d57f046c" name="perl-gdal" arch="x86_64">
  <version epoch="0" ver="3.4.1" rel="bp154.2.2.1"/>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1593518400">- Update to 3.1.1 version with full changelog
  https://github.com/OSGeo/gdal/blob/v3.1.1/gdal/NEWS
- Packaging:
  + drop merged upstream gdal-fix-docs.patch
  + Rework our way to deliver the package:
  - Remove building doc as we don't deliver it
  - Use upstream man page already present in tar
  - Simplify all %if doc related stuff
  + Lower again a bit _constraints: 2.5G RAM 4.0G HDD</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1594123200">- Update to 3.1.2 version bug fix release see changelog
  https://github.com/OSGeo/gdal/blob/v3.1.1/gdal/NEWS</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595160000">- Work-around occasional build failures due to incomplete ordering
  in Makefile. (https://github.com/OSGeo/gdal/issues/2777)
- Avoid double gdal prefix for /usr/share/gdal/gdal/*</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1599566400">- Update to 3.1.3 version bug fix release see changelog
  https://github.com/OSGeo/gdal/blob/v3.1.3/gdal/NEWS</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1603540800">- Update to 3.1.4 version bug fix release see changelog
  https://github.com/OSGeo/gdal/blob/v3.1.4/gdal/NEWS</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1604491200">- Update to 3.2.0:
  * Full changelog
    https://github.com/OSGeo/gdal/blob/v3.2.0/gdal/NEWS
- Packaging:
  + Add python3-GDAL as require in gdal package
  + Remove shebang where it's not allowed in python's scripts</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1609761600">- Update to 3.2.1:
  * Full changelog
    https://github.com/OSGeo/gdal/blob/v3.2.1/gdal/NEWS
- Packaging:
  + Update copyright year</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1615550400">- Update to 3.2.2 (bug fix release):
  * Full changelog
    https://github.com/OSGeo/gdal/blob/v3.2.2/gdal/NEWS</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1620129600">- Update to 3.2.3 (bug fix release)
  * Full changelog
    https://github.com/OSGeo/gdal/blob/v3.2.3/gdal/NEWS
- Be warned about ahead changes with future 3.3.x version
    https://github.com/OSGeo/gdal/blob/v3.3.0/gdal/NEWS</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1621252800">- remove bundled libraries, use system provided ones</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1621857600">- Update to 3.3.0 version
  * Full changelog
    https://github.com/OSGeo/gdal/blob/v3.3.0/gdal/NEWS
  * Main changes python2 is now gone
- Packaging
  + bump libso version to 2.9
  + Remove python2 related stuff
  + Add support for heif,pcre,kml,sfcgal
    make conditionnal support of libkml, sfcgal, heif
  + Prepare tests also conditionnal
  + Several small cleanup (merged, no more)
  + Remove autoreconf upstream is using last available</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1626004800">- Update to version 3.3.1 bugfix release
  + Full changelog
    https://github.com/OSGeo/gdal/blob/v3.3.1/gdal/NEWS</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1631016000">- Update to version 3.3.2 bugfix release
  + Full changelog
    https://github.com/OSGeo/gdal/blob/v3.3.2/gdal/NEWS</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1634731200">- Fix build with poppler 2.10:
  * gdal-poppler-2.10-a.patch
  * gdal-poppler-2.10-b.patch</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1635768000">- Update to version 3.3.3 bugfix release
  + Full changelog https://github.com/OSGeo/gdal/blob/v3.3.3/gdal/NEWS
- Removed upstream patches
  + gdal-poppler-2.10-a.patch
  + gdal-poppler-2.10-b.patch</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1638187200">- Fix xerces detection by adding --with-xerces-inc parameter</changelog>
  <changelog author="D. Berge &lt;opensuse@navlost.eu&gt;" date="1640952000">- Fix build on Leap 15.3</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1641297600">- Upgrade to version 3.4.1 bugfix release
  + Full changelog https://github.com/OSGeo/gdal/blob/v3.4.0/gdal/NEWS
  + Explicitly add a call to autogen.sh
  + Upstream PCIDSK: fix write heap-buffer-overflow boo#1194263
- Removed GDALmake.opt.in.patch due to cc1plus: warning:
  - I gcore: No such file or directory [-Wmissing-include-dirs]
- Add conditionnal support for hdf4 boo#1192614 on Leap
  build -with hdf4_support can be enabled
- Update copyright year</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1646654400">- Add gdal-fix-build-poppler.patch: Fix build with poppler 22.03.0
  and newer.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1646740800">- Add gdal-fix-poppler-leap.patch: Fix build on Leap 15.4 and
  poppler.
- Add fdups macro, BuildRequires already in place, remove
  duplicate files.</changelog>
</package>
<package pkgid="b37dacb3b9d7c10b7689de883ff304bdf1f0385089cc21960b672305200aeccc" name="pgloader" arch="aarch64">
  <version epoch="0" ver="3.6.9" rel="bp154.2.1"/>
  <changelog author="bruno@ioda-net.ch" date="1512302400">- Update to last 3.4.1 upstream version
  + Have a look at readme and https://pgloader.io numerous changes
    happened between previous 2.3.2 and 3.4.1
- Packaging:
  + spec-cleaner : Adding full header
  + remove old pgloader-makefile.patch (Python makefile)
  + Add and remove buildrequires (-python +lisp)
  + Fix License pgloader is PostgreSQL licenced (still BSD)
  + Fix URL and source
  + Adapt description to upstream
  + Bundle is used due to the lack of lisp packages
  + Use DYNSIZE=1024 for 32bits
- Binary is using gethostbyname(), and don't use -fpie due to sbcl</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1536321600">- Update to version 3.5.2
  + A lot of changes details at
  + https://github.com/dimitri/pgloader/compare/v3.4.1...v3.5.2
- Packaging:
  + spec-cleaner with pkgconfig (but keep Leap 42.3 building)
  + Remove man1 there's no more available
  + Use %license only remove obsolete if dist
  + Remove Buildrequires python* not needed
  + Add arm in the DYNSIZE=1024 4096 is too much</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1551700800">- Update to version 3.6.1
  This release contains three major themes: usual maintenance and
  bug fixing, support for new database systems as sources and
  targets, and support for Citus distribution.
  https://github.com/dimitri/pgloader/releases/tag/v3.6.1
- Packaging: update date</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1583236800">- Add module cffi to version 0.21.0 in the bundle to fix compilation
  error with newer sbcl 2+
- cleanup spec minimal</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1584964800">- Update to version 3.6.2
  + Permit compilation with sbcl 2+ (module cffi updated to 0.21.0
  + Big improvement in DBF module
- Packaging
  + Remove merged related fixes (cffi)</changelog>
  <changelog author="Stasiek Michalski &lt;stasiek@michalski.cc&gt;" date="1595073600">- Add patch for a broken dependency gh#fare/command-line-arguments#6
  + command-line-arguments.patch</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1602590400">- fix compilation errors with sbcl 2.0.9 by using upstream patch
  for csv-cl component 82397a78.patch</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1615809600">- fix compilation errors with sbcl 2.{1,2} by upgrading ironclad
  included version (0.48 to 0.54)
- fix CFLAGS and CXXFLAGS variable name</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1629288000">- Reduce filesize of /usr/bin/pgloader by 19MB
- Fix leap&gt;=43 condition (there is no Leap 43 anywhere near).</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1656936000">- Update to version 3.6.6
  + Maintenance release fixing the bundle build process
- Removed old merged patches: command-line-arguments.patch
  82397a78.patch
- Update copyright year</changelog>
  <changelog author="Emiliano Langella &lt;emiliano.langella@suse.com&gt;" date="1675166400">- Update to version 3.6.9
  + Add default support for MSSQL auto-incrementing bigint and smallint
  + Improve pgloader docs
- Changes from version 3.6.8
  + Use the unix-namestring as the hash key for SQL queries
  + Added support for sequences with minvalue defined
  + Fix mapping mysql signed int with auto_incement to postgresql serial
- Changes from version 3.6.7
  + Set SBCL dynamic space size to 16 GB on 64 bit architectures
  + Improve documentation with command lines and defaults
  + SBCL compiler notes should not be fatal to pgloader
- Update copyright year</changelog>
</package>
<package pkgid="895809e4a4fab83ed08a08cf7e38160a8b014847665e63e8a477ddd5e02fdc5f" name="pgloader" arch="ppc64le">
  <version epoch="0" ver="3.6.9" rel="bp154.2.1"/>
  <changelog author="bruno@ioda-net.ch" date="1512302400">- Update to last 3.4.1 upstream version
  + Have a look at readme and https://pgloader.io numerous changes
    happened between previous 2.3.2 and 3.4.1
- Packaging:
  + spec-cleaner : Adding full header
  + remove old pgloader-makefile.patch (Python makefile)
  + Add and remove buildrequires (-python +lisp)
  + Fix License pgloader is PostgreSQL licenced (still BSD)
  + Fix URL and source
  + Adapt description to upstream
  + Bundle is used due to the lack of lisp packages
  + Use DYNSIZE=1024 for 32bits
- Binary is using gethostbyname(), and don't use -fpie due to sbcl</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1536321600">- Update to version 3.5.2
  + A lot of changes details at
  + https://github.com/dimitri/pgloader/compare/v3.4.1...v3.5.2
- Packaging:
  + spec-cleaner with pkgconfig (but keep Leap 42.3 building)
  + Remove man1 there's no more available
  + Use %license only remove obsolete if dist
  + Remove Buildrequires python* not needed
  + Add arm in the DYNSIZE=1024 4096 is too much</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1551700800">- Update to version 3.6.1
  This release contains three major themes: usual maintenance and
  bug fixing, support for new database systems as sources and
  targets, and support for Citus distribution.
  https://github.com/dimitri/pgloader/releases/tag/v3.6.1
- Packaging: update date</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1583236800">- Add module cffi to version 0.21.0 in the bundle to fix compilation
  error with newer sbcl 2+
- cleanup spec minimal</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1584964800">- Update to version 3.6.2
  + Permit compilation with sbcl 2+ (module cffi updated to 0.21.0
  + Big improvement in DBF module
- Packaging
  + Remove merged related fixes (cffi)</changelog>
  <changelog author="Stasiek Michalski &lt;stasiek@michalski.cc&gt;" date="1595073600">- Add patch for a broken dependency gh#fare/command-line-arguments#6
  + command-line-arguments.patch</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1602590400">- fix compilation errors with sbcl 2.0.9 by using upstream patch
  for csv-cl component 82397a78.patch</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1615809600">- fix compilation errors with sbcl 2.{1,2} by upgrading ironclad
  included version (0.48 to 0.54)
- fix CFLAGS and CXXFLAGS variable name</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1629288000">- Reduce filesize of /usr/bin/pgloader by 19MB
- Fix leap&gt;=43 condition (there is no Leap 43 anywhere near).</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1656936000">- Update to version 3.6.6
  + Maintenance release fixing the bundle build process
- Removed old merged patches: command-line-arguments.patch
  82397a78.patch
- Update copyright year</changelog>
  <changelog author="Emiliano Langella &lt;emiliano.langella@suse.com&gt;" date="1675166400">- Update to version 3.6.9
  + Add default support for MSSQL auto-incrementing bigint and smallint
  + Improve pgloader docs
- Changes from version 3.6.8
  + Use the unix-namestring as the hash key for SQL queries
  + Added support for sequences with minvalue defined
  + Fix mapping mysql signed int with auto_incement to postgresql serial
- Changes from version 3.6.7
  + Set SBCL dynamic space size to 16 GB on 64 bit architectures
  + Improve documentation with command lines and defaults
  + SBCL compiler notes should not be fatal to pgloader
- Update copyright year</changelog>
</package>
<package pkgid="934c8f3ba8a6c7deb8245c91fc5821e8e651cbe9fbce10cef1c742fbac6459b2" name="pgloader" arch="src">
  <version epoch="0" ver="3.6.9" rel="bp154.2.1"/>
  <changelog author="Devrim Gunduz &lt;devrim@CommandPrompt.com&gt; 2.2.0-1" date="1182427200">- Initial packaging</changelog>
  <changelog author="Devrim Gunduz &lt;devrim@CommandPrompt.com&gt; 2.2.5-1" date="1200744000">- Update to 2.2.5</changelog>
  <changelog author="Devrim Gunduz &lt;devrim@CommandPrompt.com&gt; 2.2.6-1" date="1201867200">- Update to 2.2.6</changelog>
  <changelog author="Devrim Gunduz &lt;devrim@CommandPrompt.com&gt; 2.3.0-1" date="1207742400">- Update to 2.3.0
- Various spec file fixes</changelog>
  <changelog author="Devrim Gunduz &lt;devrim@CommandPrompt.com&gt; 2.3.1-1" date="1213531200">- Update to 2.3.1</changelog>
  <changelog author="Devrim Gunduz &lt;devrim@CommandPrompt.com&gt; 2.3.2-1" date="1248782400">- Update to 2.3.2</changelog>
  <changelog author="darin@darins.net" date="1324987200">- Adapted .spec for OpenSuSE
- moved %changelog to .changes file
- Added py_compile and fdupes
  http://en.opensuse.org/openSUSE:Packaging_Python#Byte_Compiled_Files</changelog>
  <changelog author="darin@darins.net" date="1324987201">- removed BuildArch
- fixed non-standard group
- added %build and python-base require</changelog>
  <changelog author="darin@darins.net" date="1324987202">- fixed non-standard usage of %doc</changelog>
  <changelog author="bruno@ioda-net.ch" date="1512302400">- Update to last 3.4.1 upstream version
  + Have a look at readme and https://pgloader.io numerous changes
    happened between previous 2.3.2 and 3.4.1
- Packaging:
  + spec-cleaner : Adding full header
  + remove old pgloader-makefile.patch (Python makefile)
  + Add and remove buildrequires (-python +lisp)
  + Fix License pgloader is PostgreSQL licenced (still BSD)
  + Fix URL and source
  + Adapt description to upstream
  + Bundle is used due to the lack of lisp packages
  + Use DYNSIZE=1024 for 32bits
- Binary is using gethostbyname(), and don't use -fpie due to sbcl</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1536321600">- Update to version 3.5.2
  + A lot of changes details at
  + https://github.com/dimitri/pgloader/compare/v3.4.1...v3.5.2
- Packaging:
  + spec-cleaner with pkgconfig (but keep Leap 42.3 building)
  + Remove man1 there's no more available
  + Use %license only remove obsolete if dist
  + Remove Buildrequires python* not needed
  + Add arm in the DYNSIZE=1024 4096 is too much</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1551700800">- Update to version 3.6.1
  This release contains three major themes: usual maintenance and
  bug fixing, support for new database systems as sources and
  targets, and support for Citus distribution.
  https://github.com/dimitri/pgloader/releases/tag/v3.6.1
- Packaging: update date</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1583236800">- Add module cffi to version 0.21.0 in the bundle to fix compilation
  error with newer sbcl 2+
- cleanup spec minimal</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1584964800">- Update to version 3.6.2
  + Permit compilation with sbcl 2+ (module cffi updated to 0.21.0
  + Big improvement in DBF module
- Packaging
  + Remove merged related fixes (cffi)</changelog>
  <changelog author="Stasiek Michalski &lt;stasiek@michalski.cc&gt;" date="1595073600">- Add patch for a broken dependency gh#fare/command-line-arguments#6
  + command-line-arguments.patch</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1602590400">- fix compilation errors with sbcl 2.0.9 by using upstream patch
  for csv-cl component 82397a78.patch</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1615809600">- fix compilation errors with sbcl 2.{1,2} by upgrading ironclad
  included version (0.48 to 0.54)
- fix CFLAGS and CXXFLAGS variable name</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1629288000">- Reduce filesize of /usr/bin/pgloader by 19MB
- Fix leap&gt;=43 condition (there is no Leap 43 anywhere near).</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1656936000">- Update to version 3.6.6
  + Maintenance release fixing the bundle build process
- Removed old merged patches: command-line-arguments.patch
  82397a78.patch
- Update copyright year</changelog>
  <changelog author="Emiliano Langella &lt;emiliano.langella@suse.com&gt;" date="1675166400">- Update to version 3.6.9
  + Add default support for MSSQL auto-incrementing bigint and smallint
  + Improve pgloader docs
- Changes from version 3.6.8
  + Use the unix-namestring as the hash key for SQL queries
  + Added support for sequences with minvalue defined
  + Fix mapping mysql signed int with auto_incement to postgresql serial
- Changes from version 3.6.7
  + Set SBCL dynamic space size to 16 GB on 64 bit architectures
  + Improve documentation with command lines and defaults
  + SBCL compiler notes should not be fatal to pgloader
- Update copyright year</changelog>
</package>
<package pkgid="aa0f32f8e760c9ca1f32dfe546a08b1dc8b71e84bb48ad73305b64212abd47dc" name="pgloader" arch="x86_64">
  <version epoch="0" ver="3.6.9" rel="bp154.2.1"/>
  <changelog author="bruno@ioda-net.ch" date="1512302400">- Update to last 3.4.1 upstream version
  + Have a look at readme and https://pgloader.io numerous changes
    happened between previous 2.3.2 and 3.4.1
- Packaging:
  + spec-cleaner : Adding full header
  + remove old pgloader-makefile.patch (Python makefile)
  + Add and remove buildrequires (-python +lisp)
  + Fix License pgloader is PostgreSQL licenced (still BSD)
  + Fix URL and source
  + Adapt description to upstream
  + Bundle is used due to the lack of lisp packages
  + Use DYNSIZE=1024 for 32bits
- Binary is using gethostbyname(), and don't use -fpie due to sbcl</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1536321600">- Update to version 3.5.2
  + A lot of changes details at
  + https://github.com/dimitri/pgloader/compare/v3.4.1...v3.5.2
- Packaging:
  + spec-cleaner with pkgconfig (but keep Leap 42.3 building)
  + Remove man1 there's no more available
  + Use %license only remove obsolete if dist
  + Remove Buildrequires python* not needed
  + Add arm in the DYNSIZE=1024 4096 is too much</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1551700800">- Update to version 3.6.1
  This release contains three major themes: usual maintenance and
  bug fixing, support for new database systems as sources and
  targets, and support for Citus distribution.
  https://github.com/dimitri/pgloader/releases/tag/v3.6.1
- Packaging: update date</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1583236800">- Add module cffi to version 0.21.0 in the bundle to fix compilation
  error with newer sbcl 2+
- cleanup spec minimal</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1584964800">- Update to version 3.6.2
  + Permit compilation with sbcl 2+ (module cffi updated to 0.21.0
  + Big improvement in DBF module
- Packaging
  + Remove merged related fixes (cffi)</changelog>
  <changelog author="Stasiek Michalski &lt;stasiek@michalski.cc&gt;" date="1595073600">- Add patch for a broken dependency gh#fare/command-line-arguments#6
  + command-line-arguments.patch</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1602590400">- fix compilation errors with sbcl 2.0.9 by using upstream patch
  for csv-cl component 82397a78.patch</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1615809600">- fix compilation errors with sbcl 2.{1,2} by upgrading ironclad
  included version (0.48 to 0.54)
- fix CFLAGS and CXXFLAGS variable name</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1629288000">- Reduce filesize of /usr/bin/pgloader by 19MB
- Fix leap&gt;=43 condition (there is no Leap 43 anywhere near).</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1656936000">- Update to version 3.6.6
  + Maintenance release fixing the bundle build process
- Removed old merged patches: command-line-arguments.patch
  82397a78.patch
- Update copyright year</changelog>
  <changelog author="Emiliano Langella &lt;emiliano.langella@suse.com&gt;" date="1675166400">- Update to version 3.6.9
  + Add default support for MSSQL auto-incrementing bigint and smallint
  + Improve pgloader docs
- Changes from version 3.6.8
  + Use the unix-namestring as the hash key for SQL queries
  + Added support for sequences with minvalue defined
  + Fix mapping mysql signed int with auto_incement to postgresql serial
- Changes from version 3.6.7
  + Set SBCL dynamic space size to 16 GB on 64 bit architectures
  + Improve documentation with command lines and defaults
  + SBCL compiler notes should not be fatal to pgloader
- Update copyright year</changelog>
</package>
<package pkgid="e757cb50e4e77084d54261c5dc3ecd5863491da06c99b7b8a1851398efc00eab" name="php7-imagick" arch="aarch64">
  <version epoch="0" ver="3.7.0" rel="bp154.2.4.1"/>
  <changelog author="jweberhofer@weberhofer.at" date="1486209600">- Upgrade to version 3.4.3
  - Fixes:
  * Avoid internal segfault.
  * Imagick::getRegistry() now throws an exception if the key does not exist,
    rather than terminating the program.
  * Prevent attempts to resize image to zero width or height, which is not
    supported by ImageMagick.
  * Fix compiling on Windows issue.
  * Imagick::transformImage and Imagick::orderedPosterizeImage now correctly
    excluded from
  * Bug 72311 - compiling against PHP 7.1.
  * Bug 72226 - regression for Imagick Exception classes being final on 7.x
  * Corrected reference of constants. Imagick::METRIC_MEANERRORPERPIXELMETRIC
    from MeanErrorPerPixelMetric to MeanErrorPerPixelErrorMetric.
    Imagick::METRIC_PEAKSIGNALTONOISERATIO from PeakSignalToNoiseRatioMetric
    to PeakSignalToNoiseRatioErrorMetric
  - Added:
  * function Imagick::setImageAlpha() which replaces Imagick::setOpacity()
  * function Imagick::identifyImageType() : int returns one of the
    Imagick::IMGTYPE_* constants
  * Imagick::INTERPOLATE_NEAREST_PIXEL for ImageMagick &gt;= 7
  * In ImageMagick, the names of two filter constants were corrected to the
    standard spelling. Support for the new spelling has been added. The old
    constants are left in place for legacy support.
    Legacy: FILTER_HANNING, new name: FILTER_HANN
    Legacy: FILTER_WELSH, new name: FILTER_WELCH
  * The Imagick::IMGTYPE_*MATTE* constants are deprecated for ImageMagick 7.
  * Instead an appropriate Imagick::IMGTYPE_*MATTE* should be used.
    IMGTYPE_GRAYSCALEMATTE =&gt; IMGTYPE_GRAYSCALEALPHA
    IMGTYPE_PALETTEMATTE =&gt; IMGTYPE_PALETTEALPHA
    IMGTYPE_TRUECOLORALPHA =&gt; IMGTYPE_TRUECOLORMATTE
    IMGTYPE_COLORSEPARATIONALPHA =&gt; IMGTYPE_COLORSEPARATIONMATTE
    IMGTYPE_PALETTEBILEVELALPHA =&gt; IMGTYPE_PALETTEBILEVELMATTE
  * Several ALPHACHANNEL_* constants are only available in ImageMagick &lt; 7
    IMAGICK_REGISTER_CONST_LONG("ALPHACHANNEL_RESET", ResetAlphaChannel);
    IMAGICK_REGISTER_CONST_LONG("ALPHACHANNEL_COPY", CopyAlphaChannel);
    IMAGICK_REGISTER_CONST_LONG("ALPHACHANNEL_OPAQUE", OpaqueAlphaChannel);
  * Several ALPHACHANNEL_* constants are only available in ImageMagick &gt;= 7.
    These constants re-use the values of the constants removed.
    IMAGICK_REGISTER_CONST_LONG("ALPHACHANNEL_ON", OnAlphaChannel);
    IMAGICK_REGISTER_CONST_LONG("ALPHACHANNEL_OFF", OffAlphaChannel);
    IMAGICK_REGISTER_CONST_LONG("ALPHACHANNEL_DISCRETE", DiscreteAlphaChannel);</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1491566400">- removed -devel package which is of no use
- Simplified spec in the build section
- Enabled tests</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1499774400">- Reconfigurate spec-file</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1520337600">- remove double ./configure and build
- imagick-reproducible.patch: We only care if ImageMagick
  is binary compatible, not about what version the extension
  is compiled against, which changes on every minor
  revision.</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1520510400">- Add %licence macros.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521201600">- add a Conflict between this extension and gmagick.
  (boo#1085595)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521201601">- Build module with fvisibility=hidden, this should
  avoid additional symbol conflicts.</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1525608000">Fixes for bnc#1091929
- Due to a packaging change in ghostscript the ghostscript-fonts-std
  has to be included explicitly to successfully run the tests. Elsewise
  the required helvetica-font is missing.
- ImageMagick's commit 97a319 makes ImagaMagick to no longer throw an
  an exception if image registry tag is not found.
  Added imagic-3.4.3-relax_test_150_to_follow_upstream_change.patch</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1525694400">- Print test failures in detail</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1525867200">- removed Test 229 which fails occasionally with timeouts
  on the OBS build server</changelog>
  <changelog author="schwab@suse.de" date="1549972800">- Use bigger timeout when running under qemu</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1557230400">- removed patch imagic-3.4.3-relax_test_150_to_follow_upstream_change.patch
  which is no longer necessary.
- Upgrade to version 3.4.4
  Added:
  * function Imagick::optimizeImageTransparency()
  * METRIC_STRUCTURAL_SIMILARITY_ERROR
  * METRIC_STRUCTURAL_DISSIMILARITY_ERROR
  * COMPRESSION_ZSTD - https://github.com/facebook/zstd
  * COMPRESSION_WEBP
  * CHANNEL_COMPOSITE_MASK
  * FILTER_CUBIC_SPLINE - "Define the lobes with the -define
    filter:lobes={2,3,4}
    (reference https://imagemagick.org/discourse-server/viewtopic.php?f=2&amp;t=32506)."
  * Imagick now explicitly conflicts with the Gmagick extension.
  Fixes:
  * Correct version check to make RemoveAlphaChannel and FlattenAlphaChannel
    be available when using Imagick with ImageMagick version 6.7.8-x
  * Bug 77128 - Imagick::setImageInterpolateMethod() not available on Windows
  * Prevent memory leak when ImagickPixel::__construct called after object instantiation.
  * Prevent segfault when ImagickPixel internal constructor not called.
  * Imagick::setResourceLimit support for values larger than 2GB (2^31) on 32bit platforms.
  * Corrected memory overwrite in Imagick::colorDecisionListImage()
  * Bug 77791 - ImagickKernel::fromMatrix() out of bounds write.
    Fixes CVE-2019-11037, boo#1135418
  The following functions have been deprecated:
  * ImagickDraw, matte
  * Imagick::averageimages
  * Imagick::colorfloodfillimage
  * Imagick::filter
  * Imagick::flattenimages
  * Imagick::getimageattribute
  * Imagick::getimagechannelextrema
  * Imagick::getimageclipmask
  * Imagick::getimageextrema
  * Imagick::getimageindex
  * Imagick::getimagematte
  * Imagick::getimagemattecolor
  * Imagick::getimagesize
  * Imagick::mapimage
  * Imagick::mattefloodfillimage
  * Imagick::medianfilterimage
  * Imagick::mosaicimages
  * Imagick::orderedposterizeimage
  * Imagick::paintfloodfillimage
  * Imagick::paintopaqueimage
  * Imagick::painttransparentimage
  * Imagick::radialblurimage
  * Imagick::recolorimage
  * Imagick::reducenoiseimage
  * Imagick::roundcornersimage
  * Imagick::roundcorners
  * Imagick::setimageattribute
  * Imagick::setimagebias
  * Imagick::setimageclipmask
  * Imagick::setimageindex
  * Imagick::setimagemattecolor
  * Imagick::setimagebiasquantum
  * Imagick::setimageopacity
  * Imagick::transformimage</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1610107200">- fix %defattr preventing setting executable bits on imagick.so</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1613649600">- Use _multibuild (prepare to build for php8)
- Use php_cfgdir and php_extdir macros to determine location of files</changelog>
  <changelog author="munix9@googlemail.com" date="1624190400">- Upgrade to version 3.5.0
  - Fixed multiple parameter information issues found in 3.5.0RC1.
  - ImageMagick 7 is still not widely available on systems.
    So contrary to previous plans, ImageMagick 6 support will
    continue for now.
    But users are recommeded to use ImageMagick 7 if possible.
  - Method names have been changed to not be all lower case. Both
    method names and parameter information is built from the
    Imagick*.stub.php files.
  - Prevent accidental creation of zero dimension images.
    ImageMagick doesn't prevent creation of zero dimension images,
    but will give an error when that image is used. I don't think
    this will affect any correctly program, but if it does, and
    you need to re-enable zero dimension images, please open an
    issue at https://phpimagick.com/issues
  - Various pieces of work have been done to make GOMP not
    segfault including:
  * Call omp_pause_resource_all when available during shutdown.
  * Added the 'imagick.shutdown_sleep_count' (default 10) and
    'imagick.set_single_thread' (default On). Both of these
    exist to mitigate the segaults on shutdown.
  - Fixes:
  * Correct version check to make RemoveAlphaChannel and
    FlattenAlphaChannel be available when using Imagick with
    ImageMagick version 6.7.8-x
  * Imagick::morphology now no longer ignores channel parameter
  - Added:
  * PHP 8.0 support.
  * Location check for ImageMagick 7 for NixOS and Brew.
  * Imagick::houghLineImage(int $width, int $height, float $threshold): bool {}
  * Imagick::setImagePixelColor(int $x, int $y, ImagickPixel|string $color)
  * Imagick::setImageMask(Imagick $clip_mask, int $pixelmask_type)
  * Imagick::getImageMask(int $pixelmask_type)
  * Imagick::VIRTUALPIXELMETHOD_DITHER
  * Imagick::VIRTUALPIXELMETHOD_RANDOM
  * Imagick::COMPOSITE_FREEZE
  * Imagick::COMPOSITE_INTERPOLATE
  * Imagick::COMPOSITE_NEGATE
  * Imagick::COMPOSITE_REFLECT
  * Imagick::COMPOSITE_SOFTBURN
  * Imagick::COMPOSITE_SOFTDODGE
  * Imagick::COMPOSITE_STAMP
  * Imagick::COMPOSITE_RMSE
  * Imagick::COMPRESSION_DWAA
  * Imagick::COMPRESSION_DWAB
  * Imagick::EVALUATE_INVERSE_LOG
  * Imagick::COLORSPACE_DISPLAYP3
  * Imagick::COLORSPACE_ADOBE98
  * Imagick::COLORSPACE_PROPHOTO
  * Imagick::COLORSPACE_JZAZBZ
  * Imagick::DISTORTION_RIGID_AFFINE
  * Imagick::DISTORTION_BARRELINVERSE
  * Imagick::STATISTIC_ROOT_MEAN_SQUARE</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1636459200">- Upgrade to version 3.5.1
  - Better detection of appropriate OpenMP library to use, i.e. GCC
    or Clang.</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1636545600">- added imagick-fix-457-ensure-format-is-always-lowercase.patch
  to fix test-failures in latest tumbleweed/factory builds
  [#]gh/Imagick/imagick#457</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1639137600">- Upgrade to version 3.6.0
  - No change from 3.6.0RC2
  - removed imagick-fix-457-ensure-format-is-always-lowercase.patch
    (upstreamed)
- Upgrade to version 3.6.0RC2
  - Fixes:
  * Remove deprecated message from Imagick::roundCorners()
  - Added:
  * Imagick::addNoiseImageWithAttenuate()
- Upgrade to version 3.6.0RC1
  - Imagick::getImageInterlaceScheme is undeprecated. It's the
    appropriate function to call to get the image interlace setting.
  - Image formats are now normalised to lower case.
  - Imagick::getImageIndex and Imagick::setImageIndex are undeprecated
    and work on ImageMagick 7. They call MagickGetIteratorIndex and
    MagickSetIteratorIndex internally.
  - Imagick::averageImages is undeprecated. For IM 7 it now calls
    EvaluateImages(wand-&gt;images,MeanEvaluateOperator).
  - Imagick::flattenImages is undeprecated. For IM 7 it now calls
    MagickMergeImageLayers(intern-&gt;magick_wand, FlattenLayer);
    internally.
  - Imagick::getImageSize is undeprecated. For IM 7 it now calls
    MagickGetImageLength internally.
  - Imagick::roundCornersImage is undeprecated and available on IM7.
  - Fixes:
  * Imagick::borderImage() changed internally to use OverCompositeOp
    rather than AtopCompositeOp for ImageMagick &gt; 7. If you need the
    old behaviour, please use Imagick::borderImageWithComposite()
    instead, which allows you to set the composite method.
  * Imagick::frameImage() changed internally to use OverCompositeOp
    rather than AtopCompositeOp for ImageMagick &gt; 7. If you need the
    old behaviour, please use
    Imagick::frameImageWithComposite()instead, which allows you to
    set the composite method.
  * Imagick::profileImage() fixed to allow null as second paramter
    again. If you can't upgrade to this version yet, pass in "",
    which has the same effect.
  * Imagick::ALPHACHANNEL_COPY and Imagick::ALPHACHANNEL_OPAQUE should
    be available on IM7.
  * Imagick::setImageMatteColor() should be available on IM7.
  - Added:
  * Imagick::borderImageWithComposite() same as Imagick::borderImage()
    but allows user to set composite operator used.
  * Imagick::frameImageWithComposite() same as Imagick::frameImage()
    but allows user to set composite operator used.
  * function Imagick::cannyEdgeImage
  * function Imagick::setSeed
  * function Imagick::waveletDenoiseImage
  * function Imagick::meanShiftImage
  * function Imagick::kmeansImage
  * function Imagick::rangeThresholdImage
  * function Imagick::autoThresholdImage
  * function Imagick::bilateralBlurImage
  * function Imagick::claheImage
  * function Imagick::channelFxImage
  * function Imagick::colorThresholdImage
  * function Imagick::complexImages
  * function Imagick::interpolativeResizeImage
  * function Imagick::levelImageColors
  * function Imagick::levelizeImage
  * function Imagick::orderedDitherImage
  * function Imagick::whiteBalanceImage</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1641988800">- Upgrade to version 3.7.0
  - Added:
  * Imagick::COMPOSITE_SALIENCY_BLEND
- Upgrade to version 3.7.0RC1
  - Added:
  * function Imagick::deleteOption(string $option): bool {}
  * function Imagick::getBackgroundColor(): ImagickPixel {}
  * function Imagick::getImageArtifacts(string $pattern = "*"): array {}
  * function Imagick::getImageKurtosis(): array {}
  * function Imagick::getImageMean(): array {}
  * function Imagick::getImageRange(): array {}
  * function Imagick::getInterpolateMethod(): int {}
  * function Imagick::getOptions(string $pattern = "*"): array {}
  * function Imagick::getOrientation(): int {}
  * function Imagick::getResolution(): array {}
  * function Imagick::getType(): int {}
  * function Imagick::implodeImageWithMethod(float $radius,
    int $pixel_interpolate_method): bool {}
  * function Imagick::oilPaintImageWithSigma(float $radius, float $sigma)
  * function Imagick::polaroidWithTextAndMethod(ImagickDraw $settings,
    float $angle, string $caption, int $method): bool {}
  * function Imagick::polynomialImage(array $terms): bool {}
  * function Imagick::setDepth(int $depth): bool {}
  * function Imagick::setExtract(string $geometry): bool {}
  * function Imagick::setInterpolateMethod(int $method): bool{}
  * function Imagick::setOrientation(int $orientation): bool {}
  * function Imagick::spreadImageWithMethod(float $radius,
    int $interpolate_method): bool {}
  * function Imagick::swirlImageWithMethod(float $degrees,
    int $interpolate_method): bool {}
  * function Imagick::waveImageWithMethod(float $amplitude,
    float $length, int $interpolate_method): bool {}
  * Imagick::IMAGE_TYPE_BILEVEL
  * Imagick::IMAGE_TYPE_GRAYSCALE
  * Imagick::IMAGE_TYPE_GRAYSCALE_ALPHA
  * Imagick::IMAGE_TYPE_PALETTE
  * Imagick::IMAGE_TYPE_PALETTE_ALPHA
  * Imagick::IMAGE_TYPE_TRUE_COLOR
  * Imagick::IMAGE_TYPE_TRUE_COLOR_ALPHA
  * Imagick::IMAGE_TYPE_COLOR_SEPARATION
  * Imagick::IMAGE_TYPE_COLOR_SEPARATION_ALPHA
  * Imagick::IMAGE_TYPE_OPTIMIZE
  * Imagick::IMAGE_TYPE_PALETTE_BILEVEL_ALPHA
  * Imagick::COMPOSITE_SEAMLESS_BLEND
  - Changed:
  * Imagick::setImageArtifact can now take null for the string value.
  * Return type for Imagick::getImageArtifact is string|null instead of
    string.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1664539200">- buildrequire autoconf. (bsc#1201574)</changelog>
</package>
<package pkgid="f725cc2c7b6558991d5390c08c6dab1a8fdf206028c9be6daac15ff6d2ffac58" name="php7-imagick" arch="i586">
  <version epoch="0" ver="3.7.0" rel="bp154.2.4.1"/>
  <changelog author="jweberhofer@weberhofer.at" date="1486209600">- Upgrade to version 3.4.3
  - Fixes:
  * Avoid internal segfault.
  * Imagick::getRegistry() now throws an exception if the key does not exist,
    rather than terminating the program.
  * Prevent attempts to resize image to zero width or height, which is not
    supported by ImageMagick.
  * Fix compiling on Windows issue.
  * Imagick::transformImage and Imagick::orderedPosterizeImage now correctly
    excluded from
  * Bug 72311 - compiling against PHP 7.1.
  * Bug 72226 - regression for Imagick Exception classes being final on 7.x
  * Corrected reference of constants. Imagick::METRIC_MEANERRORPERPIXELMETRIC
    from MeanErrorPerPixelMetric to MeanErrorPerPixelErrorMetric.
    Imagick::METRIC_PEAKSIGNALTONOISERATIO from PeakSignalToNoiseRatioMetric
    to PeakSignalToNoiseRatioErrorMetric
  - Added:
  * function Imagick::setImageAlpha() which replaces Imagick::setOpacity()
  * function Imagick::identifyImageType() : int returns one of the
    Imagick::IMGTYPE_* constants
  * Imagick::INTERPOLATE_NEAREST_PIXEL for ImageMagick &gt;= 7
  * In ImageMagick, the names of two filter constants were corrected to the
    standard spelling. Support for the new spelling has been added. The old
    constants are left in place for legacy support.
    Legacy: FILTER_HANNING, new name: FILTER_HANN
    Legacy: FILTER_WELSH, new name: FILTER_WELCH
  * The Imagick::IMGTYPE_*MATTE* constants are deprecated for ImageMagick 7.
  * Instead an appropriate Imagick::IMGTYPE_*MATTE* should be used.
    IMGTYPE_GRAYSCALEMATTE =&gt; IMGTYPE_GRAYSCALEALPHA
    IMGTYPE_PALETTEMATTE =&gt; IMGTYPE_PALETTEALPHA
    IMGTYPE_TRUECOLORALPHA =&gt; IMGTYPE_TRUECOLORMATTE
    IMGTYPE_COLORSEPARATIONALPHA =&gt; IMGTYPE_COLORSEPARATIONMATTE
    IMGTYPE_PALETTEBILEVELALPHA =&gt; IMGTYPE_PALETTEBILEVELMATTE
  * Several ALPHACHANNEL_* constants are only available in ImageMagick &lt; 7
    IMAGICK_REGISTER_CONST_LONG("ALPHACHANNEL_RESET", ResetAlphaChannel);
    IMAGICK_REGISTER_CONST_LONG("ALPHACHANNEL_COPY", CopyAlphaChannel);
    IMAGICK_REGISTER_CONST_LONG("ALPHACHANNEL_OPAQUE", OpaqueAlphaChannel);
  * Several ALPHACHANNEL_* constants are only available in ImageMagick &gt;= 7.
    These constants re-use the values of the constants removed.
    IMAGICK_REGISTER_CONST_LONG("ALPHACHANNEL_ON", OnAlphaChannel);
    IMAGICK_REGISTER_CONST_LONG("ALPHACHANNEL_OFF", OffAlphaChannel);
    IMAGICK_REGISTER_CONST_LONG("ALPHACHANNEL_DISCRETE", DiscreteAlphaChannel);</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1491566400">- removed -devel package which is of no use
- Simplified spec in the build section
- Enabled tests</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1499774400">- Reconfigurate spec-file</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1520337600">- remove double ./configure and build
- imagick-reproducible.patch: We only care if ImageMagick
  is binary compatible, not about what version the extension
  is compiled against, which changes on every minor
  revision.</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1520510400">- Add %licence macros.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521201600">- add a Conflict between this extension and gmagick.
  (boo#1085595)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521201601">- Build module with fvisibility=hidden, this should
  avoid additional symbol conflicts.</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1525608000">Fixes for bnc#1091929
- Due to a packaging change in ghostscript the ghostscript-fonts-std
  has to be included explicitly to successfully run the tests. Elsewise
  the required helvetica-font is missing.
- ImageMagick's commit 97a319 makes ImagaMagick to no longer throw an
  an exception if image registry tag is not found.
  Added imagic-3.4.3-relax_test_150_to_follow_upstream_change.patch</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1525694400">- Print test failures in detail</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1525867200">- removed Test 229 which fails occasionally with timeouts
  on the OBS build server</changelog>
  <changelog author="schwab@suse.de" date="1549972800">- Use bigger timeout when running under qemu</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1557230400">- removed patch imagic-3.4.3-relax_test_150_to_follow_upstream_change.patch
  which is no longer necessary.
- Upgrade to version 3.4.4
  Added:
  * function Imagick::optimizeImageTransparency()
  * METRIC_STRUCTURAL_SIMILARITY_ERROR
  * METRIC_STRUCTURAL_DISSIMILARITY_ERROR
  * COMPRESSION_ZSTD - https://github.com/facebook/zstd
  * COMPRESSION_WEBP
  * CHANNEL_COMPOSITE_MASK
  * FILTER_CUBIC_SPLINE - "Define the lobes with the -define
    filter:lobes={2,3,4}
    (reference https://imagemagick.org/discourse-server/viewtopic.php?f=2&amp;t=32506)."
  * Imagick now explicitly conflicts with the Gmagick extension.
  Fixes:
  * Correct version check to make RemoveAlphaChannel and FlattenAlphaChannel
    be available when using Imagick with ImageMagick version 6.7.8-x
  * Bug 77128 - Imagick::setImageInterpolateMethod() not available on Windows
  * Prevent memory leak when ImagickPixel::__construct called after object instantiation.
  * Prevent segfault when ImagickPixel internal constructor not called.
  * Imagick::setResourceLimit support for values larger than 2GB (2^31) on 32bit platforms.
  * Corrected memory overwrite in Imagick::colorDecisionListImage()
  * Bug 77791 - ImagickKernel::fromMatrix() out of bounds write.
    Fixes CVE-2019-11037, boo#1135418
  The following functions have been deprecated:
  * ImagickDraw, matte
  * Imagick::averageimages
  * Imagick::colorfloodfillimage
  * Imagick::filter
  * Imagick::flattenimages
  * Imagick::getimageattribute
  * Imagick::getimagechannelextrema
  * Imagick::getimageclipmask
  * Imagick::getimageextrema
  * Imagick::getimageindex
  * Imagick::getimagematte
  * Imagick::getimagemattecolor
  * Imagick::getimagesize
  * Imagick::mapimage
  * Imagick::mattefloodfillimage
  * Imagick::medianfilterimage
  * Imagick::mosaicimages
  * Imagick::orderedposterizeimage
  * Imagick::paintfloodfillimage
  * Imagick::paintopaqueimage
  * Imagick::painttransparentimage
  * Imagick::radialblurimage
  * Imagick::recolorimage
  * Imagick::reducenoiseimage
  * Imagick::roundcornersimage
  * Imagick::roundcorners
  * Imagick::setimageattribute
  * Imagick::setimagebias
  * Imagick::setimageclipmask
  * Imagick::setimageindex
  * Imagick::setimagemattecolor
  * Imagick::setimagebiasquantum
  * Imagick::setimageopacity
  * Imagick::transformimage</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1610107200">- fix %defattr preventing setting executable bits on imagick.so</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1613649600">- Use _multibuild (prepare to build for php8)
- Use php_cfgdir and php_extdir macros to determine location of files</changelog>
  <changelog author="munix9@googlemail.com" date="1624190400">- Upgrade to version 3.5.0
  - Fixed multiple parameter information issues found in 3.5.0RC1.
  - ImageMagick 7 is still not widely available on systems.
    So contrary to previous plans, ImageMagick 6 support will
    continue for now.
    But users are recommeded to use ImageMagick 7 if possible.
  - Method names have been changed to not be all lower case. Both
    method names and parameter information is built from the
    Imagick*.stub.php files.
  - Prevent accidental creation of zero dimension images.
    ImageMagick doesn't prevent creation of zero dimension images,
    but will give an error when that image is used. I don't think
    this will affect any correctly program, but if it does, and
    you need to re-enable zero dimension images, please open an
    issue at https://phpimagick.com/issues
  - Various pieces of work have been done to make GOMP not
    segfault including:
  * Call omp_pause_resource_all when available during shutdown.
  * Added the 'imagick.shutdown_sleep_count' (default 10) and
    'imagick.set_single_thread' (default On). Both of these
    exist to mitigate the segaults on shutdown.
  - Fixes:
  * Correct version check to make RemoveAlphaChannel and
    FlattenAlphaChannel be available when using Imagick with
    ImageMagick version 6.7.8-x
  * Imagick::morphology now no longer ignores channel parameter
  - Added:
  * PHP 8.0 support.
  * Location check for ImageMagick 7 for NixOS and Brew.
  * Imagick::houghLineImage(int $width, int $height, float $threshold): bool {}
  * Imagick::setImagePixelColor(int $x, int $y, ImagickPixel|string $color)
  * Imagick::setImageMask(Imagick $clip_mask, int $pixelmask_type)
  * Imagick::getImageMask(int $pixelmask_type)
  * Imagick::VIRTUALPIXELMETHOD_DITHER
  * Imagick::VIRTUALPIXELMETHOD_RANDOM
  * Imagick::COMPOSITE_FREEZE
  * Imagick::COMPOSITE_INTERPOLATE
  * Imagick::COMPOSITE_NEGATE
  * Imagick::COMPOSITE_REFLECT
  * Imagick::COMPOSITE_SOFTBURN
  * Imagick::COMPOSITE_SOFTDODGE
  * Imagick::COMPOSITE_STAMP
  * Imagick::COMPOSITE_RMSE
  * Imagick::COMPRESSION_DWAA
  * Imagick::COMPRESSION_DWAB
  * Imagick::EVALUATE_INVERSE_LOG
  * Imagick::COLORSPACE_DISPLAYP3
  * Imagick::COLORSPACE_ADOBE98
  * Imagick::COLORSPACE_PROPHOTO
  * Imagick::COLORSPACE_JZAZBZ
  * Imagick::DISTORTION_RIGID_AFFINE
  * Imagick::DISTORTION_BARRELINVERSE
  * Imagick::STATISTIC_ROOT_MEAN_SQUARE</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1636459200">- Upgrade to version 3.5.1
  - Better detection of appropriate OpenMP library to use, i.e. GCC
    or Clang.</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1636545600">- added imagick-fix-457-ensure-format-is-always-lowercase.patch
  to fix test-failures in latest tumbleweed/factory builds
  [#]gh/Imagick/imagick#457</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1639137600">- Upgrade to version 3.6.0
  - No change from 3.6.0RC2
  - removed imagick-fix-457-ensure-format-is-always-lowercase.patch
    (upstreamed)
- Upgrade to version 3.6.0RC2
  - Fixes:
  * Remove deprecated message from Imagick::roundCorners()
  - Added:
  * Imagick::addNoiseImageWithAttenuate()
- Upgrade to version 3.6.0RC1
  - Imagick::getImageInterlaceScheme is undeprecated. It's the
    appropriate function to call to get the image interlace setting.
  - Image formats are now normalised to lower case.
  - Imagick::getImageIndex and Imagick::setImageIndex are undeprecated
    and work on ImageMagick 7. They call MagickGetIteratorIndex and
    MagickSetIteratorIndex internally.
  - Imagick::averageImages is undeprecated. For IM 7 it now calls
    EvaluateImages(wand-&gt;images,MeanEvaluateOperator).
  - Imagick::flattenImages is undeprecated. For IM 7 it now calls
    MagickMergeImageLayers(intern-&gt;magick_wand, FlattenLayer);
    internally.
  - Imagick::getImageSize is undeprecated. For IM 7 it now calls
    MagickGetImageLength internally.
  - Imagick::roundCornersImage is undeprecated and available on IM7.
  - Fixes:
  * Imagick::borderImage() changed internally to use OverCompositeOp
    rather than AtopCompositeOp for ImageMagick &gt; 7. If you need the
    old behaviour, please use Imagick::borderImageWithComposite()
    instead, which allows you to set the composite method.
  * Imagick::frameImage() changed internally to use OverCompositeOp
    rather than AtopCompositeOp for ImageMagick &gt; 7. If you need the
    old behaviour, please use
    Imagick::frameImageWithComposite()instead, which allows you to
    set the composite method.
  * Imagick::profileImage() fixed to allow null as second paramter
    again. If you can't upgrade to this version yet, pass in "",
    which has the same effect.
  * Imagick::ALPHACHANNEL_COPY and Imagick::ALPHACHANNEL_OPAQUE should
    be available on IM7.
  * Imagick::setImageMatteColor() should be available on IM7.
  - Added:
  * Imagick::borderImageWithComposite() same as Imagick::borderImage()
    but allows user to set composite operator used.
  * Imagick::frameImageWithComposite() same as Imagick::frameImage()
    but allows user to set composite operator used.
  * function Imagick::cannyEdgeImage
  * function Imagick::setSeed
  * function Imagick::waveletDenoiseImage
  * function Imagick::meanShiftImage
  * function Imagick::kmeansImage
  * function Imagick::rangeThresholdImage
  * function Imagick::autoThresholdImage
  * function Imagick::bilateralBlurImage
  * function Imagick::claheImage
  * function Imagick::channelFxImage
  * function Imagick::colorThresholdImage
  * function Imagick::complexImages
  * function Imagick::interpolativeResizeImage
  * function Imagick::levelImageColors
  * function Imagick::levelizeImage
  * function Imagick::orderedDitherImage
  * function Imagick::whiteBalanceImage</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1641988800">- Upgrade to version 3.7.0
  - Added:
  * Imagick::COMPOSITE_SALIENCY_BLEND
- Upgrade to version 3.7.0RC1
  - Added:
  * function Imagick::deleteOption(string $option): bool {}
  * function Imagick::getBackgroundColor(): ImagickPixel {}
  * function Imagick::getImageArtifacts(string $pattern = "*"): array {}
  * function Imagick::getImageKurtosis(): array {}
  * function Imagick::getImageMean(): array {}
  * function Imagick::getImageRange(): array {}
  * function Imagick::getInterpolateMethod(): int {}
  * function Imagick::getOptions(string $pattern = "*"): array {}
  * function Imagick::getOrientation(): int {}
  * function Imagick::getResolution(): array {}
  * function Imagick::getType(): int {}
  * function Imagick::implodeImageWithMethod(float $radius,
    int $pixel_interpolate_method): bool {}
  * function Imagick::oilPaintImageWithSigma(float $radius, float $sigma)
  * function Imagick::polaroidWithTextAndMethod(ImagickDraw $settings,
    float $angle, string $caption, int $method): bool {}
  * function Imagick::polynomialImage(array $terms): bool {}
  * function Imagick::setDepth(int $depth): bool {}
  * function Imagick::setExtract(string $geometry): bool {}
  * function Imagick::setInterpolateMethod(int $method): bool{}
  * function Imagick::setOrientation(int $orientation): bool {}
  * function Imagick::spreadImageWithMethod(float $radius,
    int $interpolate_method): bool {}
  * function Imagick::swirlImageWithMethod(float $degrees,
    int $interpolate_method): bool {}
  * function Imagick::waveImageWithMethod(float $amplitude,
    float $length, int $interpolate_method): bool {}
  * Imagick::IMAGE_TYPE_BILEVEL
  * Imagick::IMAGE_TYPE_GRAYSCALE
  * Imagick::IMAGE_TYPE_GRAYSCALE_ALPHA
  * Imagick::IMAGE_TYPE_PALETTE
  * Imagick::IMAGE_TYPE_PALETTE_ALPHA
  * Imagick::IMAGE_TYPE_TRUE_COLOR
  * Imagick::IMAGE_TYPE_TRUE_COLOR_ALPHA
  * Imagick::IMAGE_TYPE_COLOR_SEPARATION
  * Imagick::IMAGE_TYPE_COLOR_SEPARATION_ALPHA
  * Imagick::IMAGE_TYPE_OPTIMIZE
  * Imagick::IMAGE_TYPE_PALETTE_BILEVEL_ALPHA
  * Imagick::COMPOSITE_SEAMLESS_BLEND
  - Changed:
  * Imagick::setImageArtifact can now take null for the string value.
  * Return type for Imagick::getImageArtifact is string|null instead of
    string.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1664539200">- buildrequire autoconf. (bsc#1201574)</changelog>
</package>
<package pkgid="d32b6709ade5a27ea3b5983f3f33d1430c09f7f6ad81a1fb95177b9d913a8a3c" name="php7-imagick" arch="ppc64le">
  <version epoch="0" ver="3.7.0" rel="bp154.2.4.1"/>
  <changelog author="jweberhofer@weberhofer.at" date="1486209600">- Upgrade to version 3.4.3
  - Fixes:
  * Avoid internal segfault.
  * Imagick::getRegistry() now throws an exception if the key does not exist,
    rather than terminating the program.
  * Prevent attempts to resize image to zero width or height, which is not
    supported by ImageMagick.
  * Fix compiling on Windows issue.
  * Imagick::transformImage and Imagick::orderedPosterizeImage now correctly
    excluded from
  * Bug 72311 - compiling against PHP 7.1.
  * Bug 72226 - regression for Imagick Exception classes being final on 7.x
  * Corrected reference of constants. Imagick::METRIC_MEANERRORPERPIXELMETRIC
    from MeanErrorPerPixelMetric to MeanErrorPerPixelErrorMetric.
    Imagick::METRIC_PEAKSIGNALTONOISERATIO from PeakSignalToNoiseRatioMetric
    to PeakSignalToNoiseRatioErrorMetric
  - Added:
  * function Imagick::setImageAlpha() which replaces Imagick::setOpacity()
  * function Imagick::identifyImageType() : int returns one of the
    Imagick::IMGTYPE_* constants
  * Imagick::INTERPOLATE_NEAREST_PIXEL for ImageMagick &gt;= 7
  * In ImageMagick, the names of two filter constants were corrected to the
    standard spelling. Support for the new spelling has been added. The old
    constants are left in place for legacy support.
    Legacy: FILTER_HANNING, new name: FILTER_HANN
    Legacy: FILTER_WELSH, new name: FILTER_WELCH
  * The Imagick::IMGTYPE_*MATTE* constants are deprecated for ImageMagick 7.
  * Instead an appropriate Imagick::IMGTYPE_*MATTE* should be used.
    IMGTYPE_GRAYSCALEMATTE =&gt; IMGTYPE_GRAYSCALEALPHA
    IMGTYPE_PALETTEMATTE =&gt; IMGTYPE_PALETTEALPHA
    IMGTYPE_TRUECOLORALPHA =&gt; IMGTYPE_TRUECOLORMATTE
    IMGTYPE_COLORSEPARATIONALPHA =&gt; IMGTYPE_COLORSEPARATIONMATTE
    IMGTYPE_PALETTEBILEVELALPHA =&gt; IMGTYPE_PALETTEBILEVELMATTE
  * Several ALPHACHANNEL_* constants are only available in ImageMagick &lt; 7
    IMAGICK_REGISTER_CONST_LONG("ALPHACHANNEL_RESET", ResetAlphaChannel);
    IMAGICK_REGISTER_CONST_LONG("ALPHACHANNEL_COPY", CopyAlphaChannel);
    IMAGICK_REGISTER_CONST_LONG("ALPHACHANNEL_OPAQUE", OpaqueAlphaChannel);
  * Several ALPHACHANNEL_* constants are only available in ImageMagick &gt;= 7.
    These constants re-use the values of the constants removed.
    IMAGICK_REGISTER_CONST_LONG("ALPHACHANNEL_ON", OnAlphaChannel);
    IMAGICK_REGISTER_CONST_LONG("ALPHACHANNEL_OFF", OffAlphaChannel);
    IMAGICK_REGISTER_CONST_LONG("ALPHACHANNEL_DISCRETE", DiscreteAlphaChannel);</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1491566400">- removed -devel package which is of no use
- Simplified spec in the build section
- Enabled tests</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1499774400">- Reconfigurate spec-file</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1520337600">- remove double ./configure and build
- imagick-reproducible.patch: We only care if ImageMagick
  is binary compatible, not about what version the extension
  is compiled against, which changes on every minor
  revision.</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1520510400">- Add %licence macros.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521201600">- add a Conflict between this extension and gmagick.
  (boo#1085595)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521201601">- Build module with fvisibility=hidden, this should
  avoid additional symbol conflicts.</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1525608000">Fixes for bnc#1091929
- Due to a packaging change in ghostscript the ghostscript-fonts-std
  has to be included explicitly to successfully run the tests. Elsewise
  the required helvetica-font is missing.
- ImageMagick's commit 97a319 makes ImagaMagick to no longer throw an
  an exception if image registry tag is not found.
  Added imagic-3.4.3-relax_test_150_to_follow_upstream_change.patch</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1525694400">- Print test failures in detail</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1525867200">- removed Test 229 which fails occasionally with timeouts
  on the OBS build server</changelog>
  <changelog author="schwab@suse.de" date="1549972800">- Use bigger timeout when running under qemu</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1557230400">- removed patch imagic-3.4.3-relax_test_150_to_follow_upstream_change.patch
  which is no longer necessary.
- Upgrade to version 3.4.4
  Added:
  * function Imagick::optimizeImageTransparency()
  * METRIC_STRUCTURAL_SIMILARITY_ERROR
  * METRIC_STRUCTURAL_DISSIMILARITY_ERROR
  * COMPRESSION_ZSTD - https://github.com/facebook/zstd
  * COMPRESSION_WEBP
  * CHANNEL_COMPOSITE_MASK
  * FILTER_CUBIC_SPLINE - "Define the lobes with the -define
    filter:lobes={2,3,4}
    (reference https://imagemagick.org/discourse-server/viewtopic.php?f=2&amp;t=32506)."
  * Imagick now explicitly conflicts with the Gmagick extension.
  Fixes:
  * Correct version check to make RemoveAlphaChannel and FlattenAlphaChannel
    be available when using Imagick with ImageMagick version 6.7.8-x
  * Bug 77128 - Imagick::setImageInterpolateMethod() not available on Windows
  * Prevent memory leak when ImagickPixel::__construct called after object instantiation.
  * Prevent segfault when ImagickPixel internal constructor not called.
  * Imagick::setResourceLimit support for values larger than 2GB (2^31) on 32bit platforms.
  * Corrected memory overwrite in Imagick::colorDecisionListImage()
  * Bug 77791 - ImagickKernel::fromMatrix() out of bounds write.
    Fixes CVE-2019-11037, boo#1135418
  The following functions have been deprecated:
  * ImagickDraw, matte
  * Imagick::averageimages
  * Imagick::colorfloodfillimage
  * Imagick::filter
  * Imagick::flattenimages
  * Imagick::getimageattribute
  * Imagick::getimagechannelextrema
  * Imagick::getimageclipmask
  * Imagick::getimageextrema
  * Imagick::getimageindex
  * Imagick::getimagematte
  * Imagick::getimagemattecolor
  * Imagick::getimagesize
  * Imagick::mapimage
  * Imagick::mattefloodfillimage
  * Imagick::medianfilterimage
  * Imagick::mosaicimages
  * Imagick::orderedposterizeimage
  * Imagick::paintfloodfillimage
  * Imagick::paintopaqueimage
  * Imagick::painttransparentimage
  * Imagick::radialblurimage
  * Imagick::recolorimage
  * Imagick::reducenoiseimage
  * Imagick::roundcornersimage
  * Imagick::roundcorners
  * Imagick::setimageattribute
  * Imagick::setimagebias
  * Imagick::setimageclipmask
  * Imagick::setimageindex
  * Imagick::setimagemattecolor
  * Imagick::setimagebiasquantum
  * Imagick::setimageopacity
  * Imagick::transformimage</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1610107200">- fix %defattr preventing setting executable bits on imagick.so</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1613649600">- Use _multibuild (prepare to build for php8)
- Use php_cfgdir and php_extdir macros to determine location of files</changelog>
  <changelog author="munix9@googlemail.com" date="1624190400">- Upgrade to version 3.5.0
  - Fixed multiple parameter information issues found in 3.5.0RC1.
  - ImageMagick 7 is still not widely available on systems.
    So contrary to previous plans, ImageMagick 6 support will
    continue for now.
    But users are recommeded to use ImageMagick 7 if possible.
  - Method names have been changed to not be all lower case. Both
    method names and parameter information is built from the
    Imagick*.stub.php files.
  - Prevent accidental creation of zero dimension images.
    ImageMagick doesn't prevent creation of zero dimension images,
    but will give an error when that image is used. I don't think
    this will affect any correctly program, but if it does, and
    you need to re-enable zero dimension images, please open an
    issue at https://phpimagick.com/issues
  - Various pieces of work have been done to make GOMP not
    segfault including:
  * Call omp_pause_resource_all when available during shutdown.
  * Added the 'imagick.shutdown_sleep_count' (default 10) and
    'imagick.set_single_thread' (default On). Both of these
    exist to mitigate the segaults on shutdown.
  - Fixes:
  * Correct version check to make RemoveAlphaChannel and
    FlattenAlphaChannel be available when using Imagick with
    ImageMagick version 6.7.8-x
  * Imagick::morphology now no longer ignores channel parameter
  - Added:
  * PHP 8.0 support.
  * Location check for ImageMagick 7 for NixOS and Brew.
  * Imagick::houghLineImage(int $width, int $height, float $threshold): bool {}
  * Imagick::setImagePixelColor(int $x, int $y, ImagickPixel|string $color)
  * Imagick::setImageMask(Imagick $clip_mask, int $pixelmask_type)
  * Imagick::getImageMask(int $pixelmask_type)
  * Imagick::VIRTUALPIXELMETHOD_DITHER
  * Imagick::VIRTUALPIXELMETHOD_RANDOM
  * Imagick::COMPOSITE_FREEZE
  * Imagick::COMPOSITE_INTERPOLATE
  * Imagick::COMPOSITE_NEGATE
  * Imagick::COMPOSITE_REFLECT
  * Imagick::COMPOSITE_SOFTBURN
  * Imagick::COMPOSITE_SOFTDODGE
  * Imagick::COMPOSITE_STAMP
  * Imagick::COMPOSITE_RMSE
  * Imagick::COMPRESSION_DWAA
  * Imagick::COMPRESSION_DWAB
  * Imagick::EVALUATE_INVERSE_LOG
  * Imagick::COLORSPACE_DISPLAYP3
  * Imagick::COLORSPACE_ADOBE98
  * Imagick::COLORSPACE_PROPHOTO
  * Imagick::COLORSPACE_JZAZBZ
  * Imagick::DISTORTION_RIGID_AFFINE
  * Imagick::DISTORTION_BARRELINVERSE
  * Imagick::STATISTIC_ROOT_MEAN_SQUARE</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1636459200">- Upgrade to version 3.5.1
  - Better detection of appropriate OpenMP library to use, i.e. GCC
    or Clang.</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1636545600">- added imagick-fix-457-ensure-format-is-always-lowercase.patch
  to fix test-failures in latest tumbleweed/factory builds
  [#]gh/Imagick/imagick#457</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1639137600">- Upgrade to version 3.6.0
  - No change from 3.6.0RC2
  - removed imagick-fix-457-ensure-format-is-always-lowercase.patch
    (upstreamed)
- Upgrade to version 3.6.0RC2
  - Fixes:
  * Remove deprecated message from Imagick::roundCorners()
  - Added:
  * Imagick::addNoiseImageWithAttenuate()
- Upgrade to version 3.6.0RC1
  - Imagick::getImageInterlaceScheme is undeprecated. It's the
    appropriate function to call to get the image interlace setting.
  - Image formats are now normalised to lower case.
  - Imagick::getImageIndex and Imagick::setImageIndex are undeprecated
    and work on ImageMagick 7. They call MagickGetIteratorIndex and
    MagickSetIteratorIndex internally.
  - Imagick::averageImages is undeprecated. For IM 7 it now calls
    EvaluateImages(wand-&gt;images,MeanEvaluateOperator).
  - Imagick::flattenImages is undeprecated. For IM 7 it now calls
    MagickMergeImageLayers(intern-&gt;magick_wand, FlattenLayer);
    internally.
  - Imagick::getImageSize is undeprecated. For IM 7 it now calls
    MagickGetImageLength internally.
  - Imagick::roundCornersImage is undeprecated and available on IM7.
  - Fixes:
  * Imagick::borderImage() changed internally to use OverCompositeOp
    rather than AtopCompositeOp for ImageMagick &gt; 7. If you need the
    old behaviour, please use Imagick::borderImageWithComposite()
    instead, which allows you to set the composite method.
  * Imagick::frameImage() changed internally to use OverCompositeOp
    rather than AtopCompositeOp for ImageMagick &gt; 7. If you need the
    old behaviour, please use
    Imagick::frameImageWithComposite()instead, which allows you to
    set the composite method.
  * Imagick::profileImage() fixed to allow null as second paramter
    again. If you can't upgrade to this version yet, pass in "",
    which has the same effect.
  * Imagick::ALPHACHANNEL_COPY and Imagick::ALPHACHANNEL_OPAQUE should
    be available on IM7.
  * Imagick::setImageMatteColor() should be available on IM7.
  - Added:
  * Imagick::borderImageWithComposite() same as Imagick::borderImage()
    but allows user to set composite operator used.
  * Imagick::frameImageWithComposite() same as Imagick::frameImage()
    but allows user to set composite operator used.
  * function Imagick::cannyEdgeImage
  * function Imagick::setSeed
  * function Imagick::waveletDenoiseImage
  * function Imagick::meanShiftImage
  * function Imagick::kmeansImage
  * function Imagick::rangeThresholdImage
  * function Imagick::autoThresholdImage
  * function Imagick::bilateralBlurImage
  * function Imagick::claheImage
  * function Imagick::channelFxImage
  * function Imagick::colorThresholdImage
  * function Imagick::complexImages
  * function Imagick::interpolativeResizeImage
  * function Imagick::levelImageColors
  * function Imagick::levelizeImage
  * function Imagick::orderedDitherImage
  * function Imagick::whiteBalanceImage</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1641988800">- Upgrade to version 3.7.0
  - Added:
  * Imagick::COMPOSITE_SALIENCY_BLEND
- Upgrade to version 3.7.0RC1
  - Added:
  * function Imagick::deleteOption(string $option): bool {}
  * function Imagick::getBackgroundColor(): ImagickPixel {}
  * function Imagick::getImageArtifacts(string $pattern = "*"): array {}
  * function Imagick::getImageKurtosis(): array {}
  * function Imagick::getImageMean(): array {}
  * function Imagick::getImageRange(): array {}
  * function Imagick::getInterpolateMethod(): int {}
  * function Imagick::getOptions(string $pattern = "*"): array {}
  * function Imagick::getOrientation(): int {}
  * function Imagick::getResolution(): array {}
  * function Imagick::getType(): int {}
  * function Imagick::implodeImageWithMethod(float $radius,
    int $pixel_interpolate_method): bool {}
  * function Imagick::oilPaintImageWithSigma(float $radius, float $sigma)
  * function Imagick::polaroidWithTextAndMethod(ImagickDraw $settings,
    float $angle, string $caption, int $method): bool {}
  * function Imagick::polynomialImage(array $terms): bool {}
  * function Imagick::setDepth(int $depth): bool {}
  * function Imagick::setExtract(string $geometry): bool {}
  * function Imagick::setInterpolateMethod(int $method): bool{}
  * function Imagick::setOrientation(int $orientation): bool {}
  * function Imagick::spreadImageWithMethod(float $radius,
    int $interpolate_method): bool {}
  * function Imagick::swirlImageWithMethod(float $degrees,
    int $interpolate_method): bool {}
  * function Imagick::waveImageWithMethod(float $amplitude,
    float $length, int $interpolate_method): bool {}
  * Imagick::IMAGE_TYPE_BILEVEL
  * Imagick::IMAGE_TYPE_GRAYSCALE
  * Imagick::IMAGE_TYPE_GRAYSCALE_ALPHA
  * Imagick::IMAGE_TYPE_PALETTE
  * Imagick::IMAGE_TYPE_PALETTE_ALPHA
  * Imagick::IMAGE_TYPE_TRUE_COLOR
  * Imagick::IMAGE_TYPE_TRUE_COLOR_ALPHA
  * Imagick::IMAGE_TYPE_COLOR_SEPARATION
  * Imagick::IMAGE_TYPE_COLOR_SEPARATION_ALPHA
  * Imagick::IMAGE_TYPE_OPTIMIZE
  * Imagick::IMAGE_TYPE_PALETTE_BILEVEL_ALPHA
  * Imagick::COMPOSITE_SEAMLESS_BLEND
  - Changed:
  * Imagick::setImageArtifact can now take null for the string value.
  * Return type for Imagick::getImageArtifact is string|null instead of
    string.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1664539200">- buildrequire autoconf. (bsc#1201574)</changelog>
</package>
<package pkgid="02086417ea1398c185ff2a569d10107c5c7a7f75106e21b294233a6c712c0a15" name="php7-imagick" arch="s390x">
  <version epoch="0" ver="3.7.0" rel="bp154.2.4.1"/>
  <changelog author="jweberhofer@weberhofer.at" date="1486209600">- Upgrade to version 3.4.3
  - Fixes:
  * Avoid internal segfault.
  * Imagick::getRegistry() now throws an exception if the key does not exist,
    rather than terminating the program.
  * Prevent attempts to resize image to zero width or height, which is not
    supported by ImageMagick.
  * Fix compiling on Windows issue.
  * Imagick::transformImage and Imagick::orderedPosterizeImage now correctly
    excluded from
  * Bug 72311 - compiling against PHP 7.1.
  * Bug 72226 - regression for Imagick Exception classes being final on 7.x
  * Corrected reference of constants. Imagick::METRIC_MEANERRORPERPIXELMETRIC
    from MeanErrorPerPixelMetric to MeanErrorPerPixelErrorMetric.
    Imagick::METRIC_PEAKSIGNALTONOISERATIO from PeakSignalToNoiseRatioMetric
    to PeakSignalToNoiseRatioErrorMetric
  - Added:
  * function Imagick::setImageAlpha() which replaces Imagick::setOpacity()
  * function Imagick::identifyImageType() : int returns one of the
    Imagick::IMGTYPE_* constants
  * Imagick::INTERPOLATE_NEAREST_PIXEL for ImageMagick &gt;= 7
  * In ImageMagick, the names of two filter constants were corrected to the
    standard spelling. Support for the new spelling has been added. The old
    constants are left in place for legacy support.
    Legacy: FILTER_HANNING, new name: FILTER_HANN
    Legacy: FILTER_WELSH, new name: FILTER_WELCH
  * The Imagick::IMGTYPE_*MATTE* constants are deprecated for ImageMagick 7.
  * Instead an appropriate Imagick::IMGTYPE_*MATTE* should be used.
    IMGTYPE_GRAYSCALEMATTE =&gt; IMGTYPE_GRAYSCALEALPHA
    IMGTYPE_PALETTEMATTE =&gt; IMGTYPE_PALETTEALPHA
    IMGTYPE_TRUECOLORALPHA =&gt; IMGTYPE_TRUECOLORMATTE
    IMGTYPE_COLORSEPARATIONALPHA =&gt; IMGTYPE_COLORSEPARATIONMATTE
    IMGTYPE_PALETTEBILEVELALPHA =&gt; IMGTYPE_PALETTEBILEVELMATTE
  * Several ALPHACHANNEL_* constants are only available in ImageMagick &lt; 7
    IMAGICK_REGISTER_CONST_LONG("ALPHACHANNEL_RESET", ResetAlphaChannel);
    IMAGICK_REGISTER_CONST_LONG("ALPHACHANNEL_COPY", CopyAlphaChannel);
    IMAGICK_REGISTER_CONST_LONG("ALPHACHANNEL_OPAQUE", OpaqueAlphaChannel);
  * Several ALPHACHANNEL_* constants are only available in ImageMagick &gt;= 7.
    These constants re-use the values of the constants removed.
    IMAGICK_REGISTER_CONST_LONG("ALPHACHANNEL_ON", OnAlphaChannel);
    IMAGICK_REGISTER_CONST_LONG("ALPHACHANNEL_OFF", OffAlphaChannel);
    IMAGICK_REGISTER_CONST_LONG("ALPHACHANNEL_DISCRETE", DiscreteAlphaChannel);</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1491566400">- removed -devel package which is of no use
- Simplified spec in the build section
- Enabled tests</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1499774400">- Reconfigurate spec-file</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1520337600">- remove double ./configure and build
- imagick-reproducible.patch: We only care if ImageMagick
  is binary compatible, not about what version the extension
  is compiled against, which changes on every minor
  revision.</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1520510400">- Add %licence macros.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521201600">- add a Conflict between this extension and gmagick.
  (boo#1085595)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521201601">- Build module with fvisibility=hidden, this should
  avoid additional symbol conflicts.</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1525608000">Fixes for bnc#1091929
- Due to a packaging change in ghostscript the ghostscript-fonts-std
  has to be included explicitly to successfully run the tests. Elsewise
  the required helvetica-font is missing.
- ImageMagick's commit 97a319 makes ImagaMagick to no longer throw an
  an exception if image registry tag is not found.
  Added imagic-3.4.3-relax_test_150_to_follow_upstream_change.patch</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1525694400">- Print test failures in detail</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1525867200">- removed Test 229 which fails occasionally with timeouts
  on the OBS build server</changelog>
  <changelog author="schwab@suse.de" date="1549972800">- Use bigger timeout when running under qemu</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1557230400">- removed patch imagic-3.4.3-relax_test_150_to_follow_upstream_change.patch
  which is no longer necessary.
- Upgrade to version 3.4.4
  Added:
  * function Imagick::optimizeImageTransparency()
  * METRIC_STRUCTURAL_SIMILARITY_ERROR
  * METRIC_STRUCTURAL_DISSIMILARITY_ERROR
  * COMPRESSION_ZSTD - https://github.com/facebook/zstd
  * COMPRESSION_WEBP
  * CHANNEL_COMPOSITE_MASK
  * FILTER_CUBIC_SPLINE - "Define the lobes with the -define
    filter:lobes={2,3,4}
    (reference https://imagemagick.org/discourse-server/viewtopic.php?f=2&amp;t=32506)."
  * Imagick now explicitly conflicts with the Gmagick extension.
  Fixes:
  * Correct version check to make RemoveAlphaChannel and FlattenAlphaChannel
    be available when using Imagick with ImageMagick version 6.7.8-x
  * Bug 77128 - Imagick::setImageInterpolateMethod() not available on Windows
  * Prevent memory leak when ImagickPixel::__construct called after object instantiation.
  * Prevent segfault when ImagickPixel internal constructor not called.
  * Imagick::setResourceLimit support for values larger than 2GB (2^31) on 32bit platforms.
  * Corrected memory overwrite in Imagick::colorDecisionListImage()
  * Bug 77791 - ImagickKernel::fromMatrix() out of bounds write.
    Fixes CVE-2019-11037, boo#1135418
  The following functions have been deprecated:
  * ImagickDraw, matte
  * Imagick::averageimages
  * Imagick::colorfloodfillimage
  * Imagick::filter
  * Imagick::flattenimages
  * Imagick::getimageattribute
  * Imagick::getimagechannelextrema
  * Imagick::getimageclipmask
  * Imagick::getimageextrema
  * Imagick::getimageindex
  * Imagick::getimagematte
  * Imagick::getimagemattecolor
  * Imagick::getimagesize
  * Imagick::mapimage
  * Imagick::mattefloodfillimage
  * Imagick::medianfilterimage
  * Imagick::mosaicimages
  * Imagick::orderedposterizeimage
  * Imagick::paintfloodfillimage
  * Imagick::paintopaqueimage
  * Imagick::painttransparentimage
  * Imagick::radialblurimage
  * Imagick::recolorimage
  * Imagick::reducenoiseimage
  * Imagick::roundcornersimage
  * Imagick::roundcorners
  * Imagick::setimageattribute
  * Imagick::setimagebias
  * Imagick::setimageclipmask
  * Imagick::setimageindex
  * Imagick::setimagemattecolor
  * Imagick::setimagebiasquantum
  * Imagick::setimageopacity
  * Imagick::transformimage</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1610107200">- fix %defattr preventing setting executable bits on imagick.so</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1613649600">- Use _multibuild (prepare to build for php8)
- Use php_cfgdir and php_extdir macros to determine location of files</changelog>
  <changelog author="munix9@googlemail.com" date="1624190400">- Upgrade to version 3.5.0
  - Fixed multiple parameter information issues found in 3.5.0RC1.
  - ImageMagick 7 is still not widely available on systems.
    So contrary to previous plans, ImageMagick 6 support will
    continue for now.
    But users are recommeded to use ImageMagick 7 if possible.
  - Method names have been changed to not be all lower case. Both
    method names and parameter information is built from the
    Imagick*.stub.php files.
  - Prevent accidental creation of zero dimension images.
    ImageMagick doesn't prevent creation of zero dimension images,
    but will give an error when that image is used. I don't think
    this will affect any correctly program, but if it does, and
    you need to re-enable zero dimension images, please open an
    issue at https://phpimagick.com/issues
  - Various pieces of work have been done to make GOMP not
    segfault including:
  * Call omp_pause_resource_all when available during shutdown.
  * Added the 'imagick.shutdown_sleep_count' (default 10) and
    'imagick.set_single_thread' (default On). Both of these
    exist to mitigate the segaults on shutdown.
  - Fixes:
  * Correct version check to make RemoveAlphaChannel and
    FlattenAlphaChannel be available when using Imagick with
    ImageMagick version 6.7.8-x
  * Imagick::morphology now no longer ignores channel parameter
  - Added:
  * PHP 8.0 support.
  * Location check for ImageMagick 7 for NixOS and Brew.
  * Imagick::houghLineImage(int $width, int $height, float $threshold): bool {}
  * Imagick::setImagePixelColor(int $x, int $y, ImagickPixel|string $color)
  * Imagick::setImageMask(Imagick $clip_mask, int $pixelmask_type)
  * Imagick::getImageMask(int $pixelmask_type)
  * Imagick::VIRTUALPIXELMETHOD_DITHER
  * Imagick::VIRTUALPIXELMETHOD_RANDOM
  * Imagick::COMPOSITE_FREEZE
  * Imagick::COMPOSITE_INTERPOLATE
  * Imagick::COMPOSITE_NEGATE
  * Imagick::COMPOSITE_REFLECT
  * Imagick::COMPOSITE_SOFTBURN
  * Imagick::COMPOSITE_SOFTDODGE
  * Imagick::COMPOSITE_STAMP
  * Imagick::COMPOSITE_RMSE
  * Imagick::COMPRESSION_DWAA
  * Imagick::COMPRESSION_DWAB
  * Imagick::EVALUATE_INVERSE_LOG
  * Imagick::COLORSPACE_DISPLAYP3
  * Imagick::COLORSPACE_ADOBE98
  * Imagick::COLORSPACE_PROPHOTO
  * Imagick::COLORSPACE_JZAZBZ
  * Imagick::DISTORTION_RIGID_AFFINE
  * Imagick::DISTORTION_BARRELINVERSE
  * Imagick::STATISTIC_ROOT_MEAN_SQUARE</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1636459200">- Upgrade to version 3.5.1
  - Better detection of appropriate OpenMP library to use, i.e. GCC
    or Clang.</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1636545600">- added imagick-fix-457-ensure-format-is-always-lowercase.patch
  to fix test-failures in latest tumbleweed/factory builds
  [#]gh/Imagick/imagick#457</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1639137600">- Upgrade to version 3.6.0
  - No change from 3.6.0RC2
  - removed imagick-fix-457-ensure-format-is-always-lowercase.patch
    (upstreamed)
- Upgrade to version 3.6.0RC2
  - Fixes:
  * Remove deprecated message from Imagick::roundCorners()
  - Added:
  * Imagick::addNoiseImageWithAttenuate()
- Upgrade to version 3.6.0RC1
  - Imagick::getImageInterlaceScheme is undeprecated. It's the
    appropriate function to call to get the image interlace setting.
  - Image formats are now normalised to lower case.
  - Imagick::getImageIndex and Imagick::setImageIndex are undeprecated
    and work on ImageMagick 7. They call MagickGetIteratorIndex and
    MagickSetIteratorIndex internally.
  - Imagick::averageImages is undeprecated. For IM 7 it now calls
    EvaluateImages(wand-&gt;images,MeanEvaluateOperator).
  - Imagick::flattenImages is undeprecated. For IM 7 it now calls
    MagickMergeImageLayers(intern-&gt;magick_wand, FlattenLayer);
    internally.
  - Imagick::getImageSize is undeprecated. For IM 7 it now calls
    MagickGetImageLength internally.
  - Imagick::roundCornersImage is undeprecated and available on IM7.
  - Fixes:
  * Imagick::borderImage() changed internally to use OverCompositeOp
    rather than AtopCompositeOp for ImageMagick &gt; 7. If you need the
    old behaviour, please use Imagick::borderImageWithComposite()
    instead, which allows you to set the composite method.
  * Imagick::frameImage() changed internally to use OverCompositeOp
    rather than AtopCompositeOp for ImageMagick &gt; 7. If you need the
    old behaviour, please use
    Imagick::frameImageWithComposite()instead, which allows you to
    set the composite method.
  * Imagick::profileImage() fixed to allow null as second paramter
    again. If you can't upgrade to this version yet, pass in "",
    which has the same effect.
  * Imagick::ALPHACHANNEL_COPY and Imagick::ALPHACHANNEL_OPAQUE should
    be available on IM7.
  * Imagick::setImageMatteColor() should be available on IM7.
  - Added:
  * Imagick::borderImageWithComposite() same as Imagick::borderImage()
    but allows user to set composite operator used.
  * Imagick::frameImageWithComposite() same as Imagick::frameImage()
    but allows user to set composite operator used.
  * function Imagick::cannyEdgeImage
  * function Imagick::setSeed
  * function Imagick::waveletDenoiseImage
  * function Imagick::meanShiftImage
  * function Imagick::kmeansImage
  * function Imagick::rangeThresholdImage
  * function Imagick::autoThresholdImage
  * function Imagick::bilateralBlurImage
  * function Imagick::claheImage
  * function Imagick::channelFxImage
  * function Imagick::colorThresholdImage
  * function Imagick::complexImages
  * function Imagick::interpolativeResizeImage
  * function Imagick::levelImageColors
  * function Imagick::levelizeImage
  * function Imagick::orderedDitherImage
  * function Imagick::whiteBalanceImage</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1641988800">- Upgrade to version 3.7.0
  - Added:
  * Imagick::COMPOSITE_SALIENCY_BLEND
- Upgrade to version 3.7.0RC1
  - Added:
  * function Imagick::deleteOption(string $option): bool {}
  * function Imagick::getBackgroundColor(): ImagickPixel {}
  * function Imagick::getImageArtifacts(string $pattern = "*"): array {}
  * function Imagick::getImageKurtosis(): array {}
  * function Imagick::getImageMean(): array {}
  * function Imagick::getImageRange(): array {}
  * function Imagick::getInterpolateMethod(): int {}
  * function Imagick::getOptions(string $pattern = "*"): array {}
  * function Imagick::getOrientation(): int {}
  * function Imagick::getResolution(): array {}
  * function Imagick::getType(): int {}
  * function Imagick::implodeImageWithMethod(float $radius,
    int $pixel_interpolate_method): bool {}
  * function Imagick::oilPaintImageWithSigma(float $radius, float $sigma)
  * function Imagick::polaroidWithTextAndMethod(ImagickDraw $settings,
    float $angle, string $caption, int $method): bool {}
  * function Imagick::polynomialImage(array $terms): bool {}
  * function Imagick::setDepth(int $depth): bool {}
  * function Imagick::setExtract(string $geometry): bool {}
  * function Imagick::setInterpolateMethod(int $method): bool{}
  * function Imagick::setOrientation(int $orientation): bool {}
  * function Imagick::spreadImageWithMethod(float $radius,
    int $interpolate_method): bool {}
  * function Imagick::swirlImageWithMethod(float $degrees,
    int $interpolate_method): bool {}
  * function Imagick::waveImageWithMethod(float $amplitude,
    float $length, int $interpolate_method): bool {}
  * Imagick::IMAGE_TYPE_BILEVEL
  * Imagick::IMAGE_TYPE_GRAYSCALE
  * Imagick::IMAGE_TYPE_GRAYSCALE_ALPHA
  * Imagick::IMAGE_TYPE_PALETTE
  * Imagick::IMAGE_TYPE_PALETTE_ALPHA
  * Imagick::IMAGE_TYPE_TRUE_COLOR
  * Imagick::IMAGE_TYPE_TRUE_COLOR_ALPHA
  * Imagick::IMAGE_TYPE_COLOR_SEPARATION
  * Imagick::IMAGE_TYPE_COLOR_SEPARATION_ALPHA
  * Imagick::IMAGE_TYPE_OPTIMIZE
  * Imagick::IMAGE_TYPE_PALETTE_BILEVEL_ALPHA
  * Imagick::COMPOSITE_SEAMLESS_BLEND
  - Changed:
  * Imagick::setImageArtifact can now take null for the string value.
  * Return type for Imagick::getImageArtifact is string|null instead of
    string.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1664539200">- buildrequire autoconf. (bsc#1201574)</changelog>
</package>
<package pkgid="87822d5c57964e34f9d298833304895551289106b052820a3442d685b561697c" name="php7-imagick" arch="src">
  <version epoch="0" ver="3.7.0" rel="bp154.2.4.1"/>
  <changelog author="jweberhofer@weberhofer.at" date="1486209600">- Upgrade to version 3.4.3
  - Fixes:
  * Avoid internal segfault.
  * Imagick::getRegistry() now throws an exception if the key does not exist,
    rather than terminating the program.
  * Prevent attempts to resize image to zero width or height, which is not
    supported by ImageMagick.
  * Fix compiling on Windows issue.
  * Imagick::transformImage and Imagick::orderedPosterizeImage now correctly
    excluded from
  * Bug 72311 - compiling against PHP 7.1.
  * Bug 72226 - regression for Imagick Exception classes being final on 7.x
  * Corrected reference of constants. Imagick::METRIC_MEANERRORPERPIXELMETRIC
    from MeanErrorPerPixelMetric to MeanErrorPerPixelErrorMetric.
    Imagick::METRIC_PEAKSIGNALTONOISERATIO from PeakSignalToNoiseRatioMetric
    to PeakSignalToNoiseRatioErrorMetric
  - Added:
  * function Imagick::setImageAlpha() which replaces Imagick::setOpacity()
  * function Imagick::identifyImageType() : int returns one of the
    Imagick::IMGTYPE_* constants
  * Imagick::INTERPOLATE_NEAREST_PIXEL for ImageMagick &gt;= 7
  * In ImageMagick, the names of two filter constants were corrected to the
    standard spelling. Support for the new spelling has been added. The old
    constants are left in place for legacy support.
    Legacy: FILTER_HANNING, new name: FILTER_HANN
    Legacy: FILTER_WELSH, new name: FILTER_WELCH
  * The Imagick::IMGTYPE_*MATTE* constants are deprecated for ImageMagick 7.
  * Instead an appropriate Imagick::IMGTYPE_*MATTE* should be used.
    IMGTYPE_GRAYSCALEMATTE =&gt; IMGTYPE_GRAYSCALEALPHA
    IMGTYPE_PALETTEMATTE =&gt; IMGTYPE_PALETTEALPHA
    IMGTYPE_TRUECOLORALPHA =&gt; IMGTYPE_TRUECOLORMATTE
    IMGTYPE_COLORSEPARATIONALPHA =&gt; IMGTYPE_COLORSEPARATIONMATTE
    IMGTYPE_PALETTEBILEVELALPHA =&gt; IMGTYPE_PALETTEBILEVELMATTE
  * Several ALPHACHANNEL_* constants are only available in ImageMagick &lt; 7
    IMAGICK_REGISTER_CONST_LONG("ALPHACHANNEL_RESET", ResetAlphaChannel);
    IMAGICK_REGISTER_CONST_LONG("ALPHACHANNEL_COPY", CopyAlphaChannel);
    IMAGICK_REGISTER_CONST_LONG("ALPHACHANNEL_OPAQUE", OpaqueAlphaChannel);
  * Several ALPHACHANNEL_* constants are only available in ImageMagick &gt;= 7.
    These constants re-use the values of the constants removed.
    IMAGICK_REGISTER_CONST_LONG("ALPHACHANNEL_ON", OnAlphaChannel);
    IMAGICK_REGISTER_CONST_LONG("ALPHACHANNEL_OFF", OffAlphaChannel);
    IMAGICK_REGISTER_CONST_LONG("ALPHACHANNEL_DISCRETE", DiscreteAlphaChannel);</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1491566400">- removed -devel package which is of no use
- Simplified spec in the build section
- Enabled tests</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1499774400">- Reconfigurate spec-file</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1520337600">- remove double ./configure and build
- imagick-reproducible.patch: We only care if ImageMagick
  is binary compatible, not about what version the extension
  is compiled against, which changes on every minor
  revision.</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1520510400">- Add %licence macros.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521201600">- add a Conflict between this extension and gmagick.
  (boo#1085595)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521201601">- Build module with fvisibility=hidden, this should
  avoid additional symbol conflicts.</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1525608000">Fixes for bnc#1091929
- Due to a packaging change in ghostscript the ghostscript-fonts-std
  has to be included explicitly to successfully run the tests. Elsewise
  the required helvetica-font is missing.
- ImageMagick's commit 97a319 makes ImagaMagick to no longer throw an
  an exception if image registry tag is not found.
  Added imagic-3.4.3-relax_test_150_to_follow_upstream_change.patch</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1525694400">- Print test failures in detail</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1525867200">- removed Test 229 which fails occasionally with timeouts
  on the OBS build server</changelog>
  <changelog author="schwab@suse.de" date="1549972800">- Use bigger timeout when running under qemu</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1557230400">- removed patch imagic-3.4.3-relax_test_150_to_follow_upstream_change.patch
  which is no longer necessary.
- Upgrade to version 3.4.4
  Added:
  * function Imagick::optimizeImageTransparency()
  * METRIC_STRUCTURAL_SIMILARITY_ERROR
  * METRIC_STRUCTURAL_DISSIMILARITY_ERROR
  * COMPRESSION_ZSTD - https://github.com/facebook/zstd
  * COMPRESSION_WEBP
  * CHANNEL_COMPOSITE_MASK
  * FILTER_CUBIC_SPLINE - "Define the lobes with the -define
    filter:lobes={2,3,4}
    (reference https://imagemagick.org/discourse-server/viewtopic.php?f=2&amp;t=32506)."
  * Imagick now explicitly conflicts with the Gmagick extension.
  Fixes:
  * Correct version check to make RemoveAlphaChannel and FlattenAlphaChannel
    be available when using Imagick with ImageMagick version 6.7.8-x
  * Bug 77128 - Imagick::setImageInterpolateMethod() not available on Windows
  * Prevent memory leak when ImagickPixel::__construct called after object instantiation.
  * Prevent segfault when ImagickPixel internal constructor not called.
  * Imagick::setResourceLimit support for values larger than 2GB (2^31) on 32bit platforms.
  * Corrected memory overwrite in Imagick::colorDecisionListImage()
  * Bug 77791 - ImagickKernel::fromMatrix() out of bounds write.
    Fixes CVE-2019-11037, boo#1135418
  The following functions have been deprecated:
  * ImagickDraw, matte
  * Imagick::averageimages
  * Imagick::colorfloodfillimage
  * Imagick::filter
  * Imagick::flattenimages
  * Imagick::getimageattribute
  * Imagick::getimagechannelextrema
  * Imagick::getimageclipmask
  * Imagick::getimageextrema
  * Imagick::getimageindex
  * Imagick::getimagematte
  * Imagick::getimagemattecolor
  * Imagick::getimagesize
  * Imagick::mapimage
  * Imagick::mattefloodfillimage
  * Imagick::medianfilterimage
  * Imagick::mosaicimages
  * Imagick::orderedposterizeimage
  * Imagick::paintfloodfillimage
  * Imagick::paintopaqueimage
  * Imagick::painttransparentimage
  * Imagick::radialblurimage
  * Imagick::recolorimage
  * Imagick::reducenoiseimage
  * Imagick::roundcornersimage
  * Imagick::roundcorners
  * Imagick::setimageattribute
  * Imagick::setimagebias
  * Imagick::setimageclipmask
  * Imagick::setimageindex
  * Imagick::setimagemattecolor
  * Imagick::setimagebiasquantum
  * Imagick::setimageopacity
  * Imagick::transformimage</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1610107200">- fix %defattr preventing setting executable bits on imagick.so</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1613649600">- Use _multibuild (prepare to build for php8)
- Use php_cfgdir and php_extdir macros to determine location of files</changelog>
  <changelog author="munix9@googlemail.com" date="1624190400">- Upgrade to version 3.5.0
  - Fixed multiple parameter information issues found in 3.5.0RC1.
  - ImageMagick 7 is still not widely available on systems.
    So contrary to previous plans, ImageMagick 6 support will
    continue for now.
    But users are recommeded to use ImageMagick 7 if possible.
  - Method names have been changed to not be all lower case. Both
    method names and parameter information is built from the
    Imagick*.stub.php files.
  - Prevent accidental creation of zero dimension images.
    ImageMagick doesn't prevent creation of zero dimension images,
    but will give an error when that image is used. I don't think
    this will affect any correctly program, but if it does, and
    you need to re-enable zero dimension images, please open an
    issue at https://phpimagick.com/issues
  - Various pieces of work have been done to make GOMP not
    segfault including:
  * Call omp_pause_resource_all when available during shutdown.
  * Added the 'imagick.shutdown_sleep_count' (default 10) and
    'imagick.set_single_thread' (default On). Both of these
    exist to mitigate the segaults on shutdown.
  - Fixes:
  * Correct version check to make RemoveAlphaChannel and
    FlattenAlphaChannel be available when using Imagick with
    ImageMagick version 6.7.8-x
  * Imagick::morphology now no longer ignores channel parameter
  - Added:
  * PHP 8.0 support.
  * Location check for ImageMagick 7 for NixOS and Brew.
  * Imagick::houghLineImage(int $width, int $height, float $threshold): bool {}
  * Imagick::setImagePixelColor(int $x, int $y, ImagickPixel|string $color)
  * Imagick::setImageMask(Imagick $clip_mask, int $pixelmask_type)
  * Imagick::getImageMask(int $pixelmask_type)
  * Imagick::VIRTUALPIXELMETHOD_DITHER
  * Imagick::VIRTUALPIXELMETHOD_RANDOM
  * Imagick::COMPOSITE_FREEZE
  * Imagick::COMPOSITE_INTERPOLATE
  * Imagick::COMPOSITE_NEGATE
  * Imagick::COMPOSITE_REFLECT
  * Imagick::COMPOSITE_SOFTBURN
  * Imagick::COMPOSITE_SOFTDODGE
  * Imagick::COMPOSITE_STAMP
  * Imagick::COMPOSITE_RMSE
  * Imagick::COMPRESSION_DWAA
  * Imagick::COMPRESSION_DWAB
  * Imagick::EVALUATE_INVERSE_LOG
  * Imagick::COLORSPACE_DISPLAYP3
  * Imagick::COLORSPACE_ADOBE98
  * Imagick::COLORSPACE_PROPHOTO
  * Imagick::COLORSPACE_JZAZBZ
  * Imagick::DISTORTION_RIGID_AFFINE
  * Imagick::DISTORTION_BARRELINVERSE
  * Imagick::STATISTIC_ROOT_MEAN_SQUARE</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1636459200">- Upgrade to version 3.5.1
  - Better detection of appropriate OpenMP library to use, i.e. GCC
    or Clang.</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1636545600">- added imagick-fix-457-ensure-format-is-always-lowercase.patch
  to fix test-failures in latest tumbleweed/factory builds
  [#]gh/Imagick/imagick#457</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1639137600">- Upgrade to version 3.6.0
  - No change from 3.6.0RC2
  - removed imagick-fix-457-ensure-format-is-always-lowercase.patch
    (upstreamed)
- Upgrade to version 3.6.0RC2
  - Fixes:
  * Remove deprecated message from Imagick::roundCorners()
  - Added:
  * Imagick::addNoiseImageWithAttenuate()
- Upgrade to version 3.6.0RC1
  - Imagick::getImageInterlaceScheme is undeprecated. It's the
    appropriate function to call to get the image interlace setting.
  - Image formats are now normalised to lower case.
  - Imagick::getImageIndex and Imagick::setImageIndex are undeprecated
    and work on ImageMagick 7. They call MagickGetIteratorIndex and
    MagickSetIteratorIndex internally.
  - Imagick::averageImages is undeprecated. For IM 7 it now calls
    EvaluateImages(wand-&gt;images,MeanEvaluateOperator).
  - Imagick::flattenImages is undeprecated. For IM 7 it now calls
    MagickMergeImageLayers(intern-&gt;magick_wand, FlattenLayer);
    internally.
  - Imagick::getImageSize is undeprecated. For IM 7 it now calls
    MagickGetImageLength internally.
  - Imagick::roundCornersImage is undeprecated and available on IM7.
  - Fixes:
  * Imagick::borderImage() changed internally to use OverCompositeOp
    rather than AtopCompositeOp for ImageMagick &gt; 7. If you need the
    old behaviour, please use Imagick::borderImageWithComposite()
    instead, which allows you to set the composite method.
  * Imagick::frameImage() changed internally to use OverCompositeOp
    rather than AtopCompositeOp for ImageMagick &gt; 7. If you need the
    old behaviour, please use
    Imagick::frameImageWithComposite()instead, which allows you to
    set the composite method.
  * Imagick::profileImage() fixed to allow null as second paramter
    again. If you can't upgrade to this version yet, pass in "",
    which has the same effect.
  * Imagick::ALPHACHANNEL_COPY and Imagick::ALPHACHANNEL_OPAQUE should
    be available on IM7.
  * Imagick::setImageMatteColor() should be available on IM7.
  - Added:
  * Imagick::borderImageWithComposite() same as Imagick::borderImage()
    but allows user to set composite operator used.
  * Imagick::frameImageWithComposite() same as Imagick::frameImage()
    but allows user to set composite operator used.
  * function Imagick::cannyEdgeImage
  * function Imagick::setSeed
  * function Imagick::waveletDenoiseImage
  * function Imagick::meanShiftImage
  * function Imagick::kmeansImage
  * function Imagick::rangeThresholdImage
  * function Imagick::autoThresholdImage
  * function Imagick::bilateralBlurImage
  * function Imagick::claheImage
  * function Imagick::channelFxImage
  * function Imagick::colorThresholdImage
  * function Imagick::complexImages
  * function Imagick::interpolativeResizeImage
  * function Imagick::levelImageColors
  * function Imagick::levelizeImage
  * function Imagick::orderedDitherImage
  * function Imagick::whiteBalanceImage</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1641988800">- Upgrade to version 3.7.0
  - Added:
  * Imagick::COMPOSITE_SALIENCY_BLEND
- Upgrade to version 3.7.0RC1
  - Added:
  * function Imagick::deleteOption(string $option): bool {}
  * function Imagick::getBackgroundColor(): ImagickPixel {}
  * function Imagick::getImageArtifacts(string $pattern = "*"): array {}
  * function Imagick::getImageKurtosis(): array {}
  * function Imagick::getImageMean(): array {}
  * function Imagick::getImageRange(): array {}
  * function Imagick::getInterpolateMethod(): int {}
  * function Imagick::getOptions(string $pattern = "*"): array {}
  * function Imagick::getOrientation(): int {}
  * function Imagick::getResolution(): array {}
  * function Imagick::getType(): int {}
  * function Imagick::implodeImageWithMethod(float $radius,
    int $pixel_interpolate_method): bool {}
  * function Imagick::oilPaintImageWithSigma(float $radius, float $sigma)
  * function Imagick::polaroidWithTextAndMethod(ImagickDraw $settings,
    float $angle, string $caption, int $method): bool {}
  * function Imagick::polynomialImage(array $terms): bool {}
  * function Imagick::setDepth(int $depth): bool {}
  * function Imagick::setExtract(string $geometry): bool {}
  * function Imagick::setInterpolateMethod(int $method): bool{}
  * function Imagick::setOrientation(int $orientation): bool {}
  * function Imagick::spreadImageWithMethod(float $radius,
    int $interpolate_method): bool {}
  * function Imagick::swirlImageWithMethod(float $degrees,
    int $interpolate_method): bool {}
  * function Imagick::waveImageWithMethod(float $amplitude,
    float $length, int $interpolate_method): bool {}
  * Imagick::IMAGE_TYPE_BILEVEL
  * Imagick::IMAGE_TYPE_GRAYSCALE
  * Imagick::IMAGE_TYPE_GRAYSCALE_ALPHA
  * Imagick::IMAGE_TYPE_PALETTE
  * Imagick::IMAGE_TYPE_PALETTE_ALPHA
  * Imagick::IMAGE_TYPE_TRUE_COLOR
  * Imagick::IMAGE_TYPE_TRUE_COLOR_ALPHA
  * Imagick::IMAGE_TYPE_COLOR_SEPARATION
  * Imagick::IMAGE_TYPE_COLOR_SEPARATION_ALPHA
  * Imagick::IMAGE_TYPE_OPTIMIZE
  * Imagick::IMAGE_TYPE_PALETTE_BILEVEL_ALPHA
  * Imagick::COMPOSITE_SEAMLESS_BLEND
  - Changed:
  * Imagick::setImageArtifact can now take null for the string value.
  * Return type for Imagick::getImageArtifact is string|null instead of
    string.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1664539200">- buildrequire autoconf. (bsc#1201574)</changelog>
</package>
<package pkgid="425194d1f8bc83227869f41b40a3546e243157b4701ec79ede77a551a95b06c5" name="php7-imagick" arch="x86_64">
  <version epoch="0" ver="3.7.0" rel="bp154.2.4.1"/>
  <changelog author="jweberhofer@weberhofer.at" date="1486209600">- Upgrade to version 3.4.3
  - Fixes:
  * Avoid internal segfault.
  * Imagick::getRegistry() now throws an exception if the key does not exist,
    rather than terminating the program.
  * Prevent attempts to resize image to zero width or height, which is not
    supported by ImageMagick.
  * Fix compiling on Windows issue.
  * Imagick::transformImage and Imagick::orderedPosterizeImage now correctly
    excluded from
  * Bug 72311 - compiling against PHP 7.1.
  * Bug 72226 - regression for Imagick Exception classes being final on 7.x
  * Corrected reference of constants. Imagick::METRIC_MEANERRORPERPIXELMETRIC
    from MeanErrorPerPixelMetric to MeanErrorPerPixelErrorMetric.
    Imagick::METRIC_PEAKSIGNALTONOISERATIO from PeakSignalToNoiseRatioMetric
    to PeakSignalToNoiseRatioErrorMetric
  - Added:
  * function Imagick::setImageAlpha() which replaces Imagick::setOpacity()
  * function Imagick::identifyImageType() : int returns one of the
    Imagick::IMGTYPE_* constants
  * Imagick::INTERPOLATE_NEAREST_PIXEL for ImageMagick &gt;= 7
  * In ImageMagick, the names of two filter constants were corrected to the
    standard spelling. Support for the new spelling has been added. The old
    constants are left in place for legacy support.
    Legacy: FILTER_HANNING, new name: FILTER_HANN
    Legacy: FILTER_WELSH, new name: FILTER_WELCH
  * The Imagick::IMGTYPE_*MATTE* constants are deprecated for ImageMagick 7.
  * Instead an appropriate Imagick::IMGTYPE_*MATTE* should be used.
    IMGTYPE_GRAYSCALEMATTE =&gt; IMGTYPE_GRAYSCALEALPHA
    IMGTYPE_PALETTEMATTE =&gt; IMGTYPE_PALETTEALPHA
    IMGTYPE_TRUECOLORALPHA =&gt; IMGTYPE_TRUECOLORMATTE
    IMGTYPE_COLORSEPARATIONALPHA =&gt; IMGTYPE_COLORSEPARATIONMATTE
    IMGTYPE_PALETTEBILEVELALPHA =&gt; IMGTYPE_PALETTEBILEVELMATTE
  * Several ALPHACHANNEL_* constants are only available in ImageMagick &lt; 7
    IMAGICK_REGISTER_CONST_LONG("ALPHACHANNEL_RESET", ResetAlphaChannel);
    IMAGICK_REGISTER_CONST_LONG("ALPHACHANNEL_COPY", CopyAlphaChannel);
    IMAGICK_REGISTER_CONST_LONG("ALPHACHANNEL_OPAQUE", OpaqueAlphaChannel);
  * Several ALPHACHANNEL_* constants are only available in ImageMagick &gt;= 7.
    These constants re-use the values of the constants removed.
    IMAGICK_REGISTER_CONST_LONG("ALPHACHANNEL_ON", OnAlphaChannel);
    IMAGICK_REGISTER_CONST_LONG("ALPHACHANNEL_OFF", OffAlphaChannel);
    IMAGICK_REGISTER_CONST_LONG("ALPHACHANNEL_DISCRETE", DiscreteAlphaChannel);</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1491566400">- removed -devel package which is of no use
- Simplified spec in the build section
- Enabled tests</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1499774400">- Reconfigurate spec-file</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1520337600">- remove double ./configure and build
- imagick-reproducible.patch: We only care if ImageMagick
  is binary compatible, not about what version the extension
  is compiled against, which changes on every minor
  revision.</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1520510400">- Add %licence macros.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521201600">- add a Conflict between this extension and gmagick.
  (boo#1085595)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521201601">- Build module with fvisibility=hidden, this should
  avoid additional symbol conflicts.</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1525608000">Fixes for bnc#1091929
- Due to a packaging change in ghostscript the ghostscript-fonts-std
  has to be included explicitly to successfully run the tests. Elsewise
  the required helvetica-font is missing.
- ImageMagick's commit 97a319 makes ImagaMagick to no longer throw an
  an exception if image registry tag is not found.
  Added imagic-3.4.3-relax_test_150_to_follow_upstream_change.patch</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1525694400">- Print test failures in detail</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1525867200">- removed Test 229 which fails occasionally with timeouts
  on the OBS build server</changelog>
  <changelog author="schwab@suse.de" date="1549972800">- Use bigger timeout when running under qemu</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1557230400">- removed patch imagic-3.4.3-relax_test_150_to_follow_upstream_change.patch
  which is no longer necessary.
- Upgrade to version 3.4.4
  Added:
  * function Imagick::optimizeImageTransparency()
  * METRIC_STRUCTURAL_SIMILARITY_ERROR
  * METRIC_STRUCTURAL_DISSIMILARITY_ERROR
  * COMPRESSION_ZSTD - https://github.com/facebook/zstd
  * COMPRESSION_WEBP
  * CHANNEL_COMPOSITE_MASK
  * FILTER_CUBIC_SPLINE - "Define the lobes with the -define
    filter:lobes={2,3,4}
    (reference https://imagemagick.org/discourse-server/viewtopic.php?f=2&amp;t=32506)."
  * Imagick now explicitly conflicts with the Gmagick extension.
  Fixes:
  * Correct version check to make RemoveAlphaChannel and FlattenAlphaChannel
    be available when using Imagick with ImageMagick version 6.7.8-x
  * Bug 77128 - Imagick::setImageInterpolateMethod() not available on Windows
  * Prevent memory leak when ImagickPixel::__construct called after object instantiation.
  * Prevent segfault when ImagickPixel internal constructor not called.
  * Imagick::setResourceLimit support for values larger than 2GB (2^31) on 32bit platforms.
  * Corrected memory overwrite in Imagick::colorDecisionListImage()
  * Bug 77791 - ImagickKernel::fromMatrix() out of bounds write.
    Fixes CVE-2019-11037, boo#1135418
  The following functions have been deprecated:
  * ImagickDraw, matte
  * Imagick::averageimages
  * Imagick::colorfloodfillimage
  * Imagick::filter
  * Imagick::flattenimages
  * Imagick::getimageattribute
  * Imagick::getimagechannelextrema
  * Imagick::getimageclipmask
  * Imagick::getimageextrema
  * Imagick::getimageindex
  * Imagick::getimagematte
  * Imagick::getimagemattecolor
  * Imagick::getimagesize
  * Imagick::mapimage
  * Imagick::mattefloodfillimage
  * Imagick::medianfilterimage
  * Imagick::mosaicimages
  * Imagick::orderedposterizeimage
  * Imagick::paintfloodfillimage
  * Imagick::paintopaqueimage
  * Imagick::painttransparentimage
  * Imagick::radialblurimage
  * Imagick::recolorimage
  * Imagick::reducenoiseimage
  * Imagick::roundcornersimage
  * Imagick::roundcorners
  * Imagick::setimageattribute
  * Imagick::setimagebias
  * Imagick::setimageclipmask
  * Imagick::setimageindex
  * Imagick::setimagemattecolor
  * Imagick::setimagebiasquantum
  * Imagick::setimageopacity
  * Imagick::transformimage</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1610107200">- fix %defattr preventing setting executable bits on imagick.so</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1613649600">- Use _multibuild (prepare to build for php8)
- Use php_cfgdir and php_extdir macros to determine location of files</changelog>
  <changelog author="munix9@googlemail.com" date="1624190400">- Upgrade to version 3.5.0
  - Fixed multiple parameter information issues found in 3.5.0RC1.
  - ImageMagick 7 is still not widely available on systems.
    So contrary to previous plans, ImageMagick 6 support will
    continue for now.
    But users are recommeded to use ImageMagick 7 if possible.
  - Method names have been changed to not be all lower case. Both
    method names and parameter information is built from the
    Imagick*.stub.php files.
  - Prevent accidental creation of zero dimension images.
    ImageMagick doesn't prevent creation of zero dimension images,
    but will give an error when that image is used. I don't think
    this will affect any correctly program, but if it does, and
    you need to re-enable zero dimension images, please open an
    issue at https://phpimagick.com/issues
  - Various pieces of work have been done to make GOMP not
    segfault including:
  * Call omp_pause_resource_all when available during shutdown.
  * Added the 'imagick.shutdown_sleep_count' (default 10) and
    'imagick.set_single_thread' (default On). Both of these
    exist to mitigate the segaults on shutdown.
  - Fixes:
  * Correct version check to make RemoveAlphaChannel and
    FlattenAlphaChannel be available when using Imagick with
    ImageMagick version 6.7.8-x
  * Imagick::morphology now no longer ignores channel parameter
  - Added:
  * PHP 8.0 support.
  * Location check for ImageMagick 7 for NixOS and Brew.
  * Imagick::houghLineImage(int $width, int $height, float $threshold): bool {}
  * Imagick::setImagePixelColor(int $x, int $y, ImagickPixel|string $color)
  * Imagick::setImageMask(Imagick $clip_mask, int $pixelmask_type)
  * Imagick::getImageMask(int $pixelmask_type)
  * Imagick::VIRTUALPIXELMETHOD_DITHER
  * Imagick::VIRTUALPIXELMETHOD_RANDOM
  * Imagick::COMPOSITE_FREEZE
  * Imagick::COMPOSITE_INTERPOLATE
  * Imagick::COMPOSITE_NEGATE
  * Imagick::COMPOSITE_REFLECT
  * Imagick::COMPOSITE_SOFTBURN
  * Imagick::COMPOSITE_SOFTDODGE
  * Imagick::COMPOSITE_STAMP
  * Imagick::COMPOSITE_RMSE
  * Imagick::COMPRESSION_DWAA
  * Imagick::COMPRESSION_DWAB
  * Imagick::EVALUATE_INVERSE_LOG
  * Imagick::COLORSPACE_DISPLAYP3
  * Imagick::COLORSPACE_ADOBE98
  * Imagick::COLORSPACE_PROPHOTO
  * Imagick::COLORSPACE_JZAZBZ
  * Imagick::DISTORTION_RIGID_AFFINE
  * Imagick::DISTORTION_BARRELINVERSE
  * Imagick::STATISTIC_ROOT_MEAN_SQUARE</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1636459200">- Upgrade to version 3.5.1
  - Better detection of appropriate OpenMP library to use, i.e. GCC
    or Clang.</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1636545600">- added imagick-fix-457-ensure-format-is-always-lowercase.patch
  to fix test-failures in latest tumbleweed/factory builds
  [#]gh/Imagick/imagick#457</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1639137600">- Upgrade to version 3.6.0
  - No change from 3.6.0RC2
  - removed imagick-fix-457-ensure-format-is-always-lowercase.patch
    (upstreamed)
- Upgrade to version 3.6.0RC2
  - Fixes:
  * Remove deprecated message from Imagick::roundCorners()
  - Added:
  * Imagick::addNoiseImageWithAttenuate()
- Upgrade to version 3.6.0RC1
  - Imagick::getImageInterlaceScheme is undeprecated. It's the
    appropriate function to call to get the image interlace setting.
  - Image formats are now normalised to lower case.
  - Imagick::getImageIndex and Imagick::setImageIndex are undeprecated
    and work on ImageMagick 7. They call MagickGetIteratorIndex and
    MagickSetIteratorIndex internally.
  - Imagick::averageImages is undeprecated. For IM 7 it now calls
    EvaluateImages(wand-&gt;images,MeanEvaluateOperator).
  - Imagick::flattenImages is undeprecated. For IM 7 it now calls
    MagickMergeImageLayers(intern-&gt;magick_wand, FlattenLayer);
    internally.
  - Imagick::getImageSize is undeprecated. For IM 7 it now calls
    MagickGetImageLength internally.
  - Imagick::roundCornersImage is undeprecated and available on IM7.
  - Fixes:
  * Imagick::borderImage() changed internally to use OverCompositeOp
    rather than AtopCompositeOp for ImageMagick &gt; 7. If you need the
    old behaviour, please use Imagick::borderImageWithComposite()
    instead, which allows you to set the composite method.
  * Imagick::frameImage() changed internally to use OverCompositeOp
    rather than AtopCompositeOp for ImageMagick &gt; 7. If you need the
    old behaviour, please use
    Imagick::frameImageWithComposite()instead, which allows you to
    set the composite method.
  * Imagick::profileImage() fixed to allow null as second paramter
    again. If you can't upgrade to this version yet, pass in "",
    which has the same effect.
  * Imagick::ALPHACHANNEL_COPY and Imagick::ALPHACHANNEL_OPAQUE should
    be available on IM7.
  * Imagick::setImageMatteColor() should be available on IM7.
  - Added:
  * Imagick::borderImageWithComposite() same as Imagick::borderImage()
    but allows user to set composite operator used.
  * Imagick::frameImageWithComposite() same as Imagick::frameImage()
    but allows user to set composite operator used.
  * function Imagick::cannyEdgeImage
  * function Imagick::setSeed
  * function Imagick::waveletDenoiseImage
  * function Imagick::meanShiftImage
  * function Imagick::kmeansImage
  * function Imagick::rangeThresholdImage
  * function Imagick::autoThresholdImage
  * function Imagick::bilateralBlurImage
  * function Imagick::claheImage
  * function Imagick::channelFxImage
  * function Imagick::colorThresholdImage
  * function Imagick::complexImages
  * function Imagick::interpolativeResizeImage
  * function Imagick::levelImageColors
  * function Imagick::levelizeImage
  * function Imagick::orderedDitherImage
  * function Imagick::whiteBalanceImage</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1641988800">- Upgrade to version 3.7.0
  - Added:
  * Imagick::COMPOSITE_SALIENCY_BLEND
- Upgrade to version 3.7.0RC1
  - Added:
  * function Imagick::deleteOption(string $option): bool {}
  * function Imagick::getBackgroundColor(): ImagickPixel {}
  * function Imagick::getImageArtifacts(string $pattern = "*"): array {}
  * function Imagick::getImageKurtosis(): array {}
  * function Imagick::getImageMean(): array {}
  * function Imagick::getImageRange(): array {}
  * function Imagick::getInterpolateMethod(): int {}
  * function Imagick::getOptions(string $pattern = "*"): array {}
  * function Imagick::getOrientation(): int {}
  * function Imagick::getResolution(): array {}
  * function Imagick::getType(): int {}
  * function Imagick::implodeImageWithMethod(float $radius,
    int $pixel_interpolate_method): bool {}
  * function Imagick::oilPaintImageWithSigma(float $radius, float $sigma)
  * function Imagick::polaroidWithTextAndMethod(ImagickDraw $settings,
    float $angle, string $caption, int $method): bool {}
  * function Imagick::polynomialImage(array $terms): bool {}
  * function Imagick::setDepth(int $depth): bool {}
  * function Imagick::setExtract(string $geometry): bool {}
  * function Imagick::setInterpolateMethod(int $method): bool{}
  * function Imagick::setOrientation(int $orientation): bool {}
  * function Imagick::spreadImageWithMethod(float $radius,
    int $interpolate_method): bool {}
  * function Imagick::swirlImageWithMethod(float $degrees,
    int $interpolate_method): bool {}
  * function Imagick::waveImageWithMethod(float $amplitude,
    float $length, int $interpolate_method): bool {}
  * Imagick::IMAGE_TYPE_BILEVEL
  * Imagick::IMAGE_TYPE_GRAYSCALE
  * Imagick::IMAGE_TYPE_GRAYSCALE_ALPHA
  * Imagick::IMAGE_TYPE_PALETTE
  * Imagick::IMAGE_TYPE_PALETTE_ALPHA
  * Imagick::IMAGE_TYPE_TRUE_COLOR
  * Imagick::IMAGE_TYPE_TRUE_COLOR_ALPHA
  * Imagick::IMAGE_TYPE_COLOR_SEPARATION
  * Imagick::IMAGE_TYPE_COLOR_SEPARATION_ALPHA
  * Imagick::IMAGE_TYPE_OPTIMIZE
  * Imagick::IMAGE_TYPE_PALETTE_BILEVEL_ALPHA
  * Imagick::COMPOSITE_SEAMLESS_BLEND
  - Changed:
  * Imagick::setImageArtifact can now take null for the string value.
  * Return type for Imagick::getImageArtifact is string|null instead of
    string.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1664539200">- buildrequire autoconf. (bsc#1201574)</changelog>
</package>
<package pkgid="fd1d1ef21b1b4d5ec25eea5bb6c709ffd56ab2bfc95a5b65a94551b235cef446" name="php7-phpunit" arch="noarch">
  <version epoch="0" ver="9.5.28" rel="bp154.2.1"/>
  <changelog author="suse+build@de-korte.org" date="1549368000">- Initial release for php7-phpunit8</changelog>
  <changelog author="suse+build@de-korte.org" date="1549454400">- Remove fixup of shebang (causes a SHA1 failure)</changelog>
  <changelog author="suse+build@de-korte.org" date="1549454401">- Only build for supported PHP versions
- Added source verification</changelog>
  <changelog author="suse+build@de-korte.org" date="1550059200">- Updated package to release 8.0.2
  * Fixed #3352: Using phpunit.phar with PHPDBG does not work with
    auto_globals_jit=On
  * Fixed #3508: TypeError in Fileloader when trying to load
    nonexistent file
  * Fixed #3511: Asserting that an object is contained in an
    iterable while using == instead of === is no longer possible</changelog>
  <changelog author="suse+build@de-korte.org" date="1550232000">- Add macros.phpunit to fixup unit tests for PHPUnit</changelog>
  <changelog author="suse+build@de-korte.org" date="1550318400">- Update package to release 8.0.3
  * Fixed #3011: Unsupported PHPT --SECTION-- throws unhandled
    exception
  * Fixed #3461: StringEndsWith matches too loosely
  * Fixed #3515: Random order seed is only printed in verbose mode
  * Fixed #3517: Useless error message when depending on test that
    does not exist</changelog>
  <changelog author="suse+build@de-korte.org" date="1550491200">- Change install location of macros.phpunit</changelog>
  <changelog author="suse+build@de-korte.org" date="1550577600">- Update package to release 8.0.4
  * Fixed #3530: generateClassFromWsdl() does not handle methods
    with multiple output values
  * Fixed #3531: Test suite fails on warning
  * Fixed #3534: Wrong message in ConstraintTestCase
  * Fixed #3535: TypeError in Command</changelog>
  <changelog author="suse+build@de-korte.org" date="1552824000">- Update package to release 8.0.5
  * Fixed #3480: Wrong return type declaration for TestCase::getExpectedExceptionMessage()
    and TestCase::getExpectedExceptionMessageRegExp()
  * Fixed #3532: Wrong default value for cacheResult in phpunit.xsd
  * Fixed #3539: Wrong default value for resolveDependencies in
    phpunit.xsd
  * Fixed #3550: Check for valid attribute names in assertObjectHasAttribute()
    is too strict
  * Fixed #3555: Extension loader only allows objects that implement
    TestHook but should also allow Hook
  * Fixed #3560: TestDox does not work when tests are filtered</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1553601600">- Added obsoletes statements to php7-phpunit7_0 and php7-phpunit6 to allow
  a smooth update</changelog>
  <changelog author="suse+build@de-korte.org" date="1553860800">- Update package to release 8.0.6
  * Fixed #3564: Production code uses class from test suite's fixture</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1576411200">- Update package to release 8.5.0
  * https://github.com/sebastianbergmann/phpunit/blob/8.5/ChangeLog-8.5.md
- Update package to release 8.4.3
  * https://github.com/sebastianbergmann/phpunit/blob/8.4.3/ChangeLog-8.4.md
- Update package to release 8.3.5
  * https://github.com/sebastianbergmann/phpunit/blob/8.3.5/ChangeLog-8.3.md
- Update package to release 8.2.5
  * https://github.com/sebastianbergmann/phpunit/blob/8.2.5/ChangeLog-8.2.md
- Update package to release 8.1.6
  * https://github.com/sebastianbergmann/phpunit/blob/8.1.6/ChangeLog-8.1.md</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1597838400">- Use %_rpmmacrodir instead of wrong %{_libexecdir}/rpm/macros.d
  (libexecdir changes to /usr/libexec).</changelog>
  <changelog author="pgajdos@suse.com" date="1673524800">- package reworked, php7 and php8 flavors
- Update package to release 9.5.28
  * https://github.com/sebastianbergmann/phpunit/blob/9.5/ChangeLog-9.5.md</changelog>
  <changelog author="pgajdos@suse.com" date="1673956800">- %nil flavor implies Name: phpunit</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1674216000">- Refresh 9.5.28 source files as they seem to have been republished</changelog>
</package>
<package pkgid="48644d0ab0e0e6677a9b4ad018d2b829d50a4d179167cd32e5a39135fd7930fb" name="php7-phpunit" arch="src">
  <version epoch="0" ver="9.5.28" rel="bp154.2.1"/>
  <changelog author="suse+build@de-korte.org" date="1549368000">- Initial release for php7-phpunit8</changelog>
  <changelog author="suse+build@de-korte.org" date="1549454400">- Remove fixup of shebang (causes a SHA1 failure)</changelog>
  <changelog author="suse+build@de-korte.org" date="1549454401">- Only build for supported PHP versions
- Added source verification</changelog>
  <changelog author="suse+build@de-korte.org" date="1550059200">- Updated package to release 8.0.2
  * Fixed #3352: Using phpunit.phar with PHPDBG does not work with
    auto_globals_jit=On
  * Fixed #3508: TypeError in Fileloader when trying to load
    nonexistent file
  * Fixed #3511: Asserting that an object is contained in an
    iterable while using == instead of === is no longer possible</changelog>
  <changelog author="suse+build@de-korte.org" date="1550232000">- Add macros.phpunit to fixup unit tests for PHPUnit</changelog>
  <changelog author="suse+build@de-korte.org" date="1550318400">- Update package to release 8.0.3
  * Fixed #3011: Unsupported PHPT --SECTION-- throws unhandled
    exception
  * Fixed #3461: StringEndsWith matches too loosely
  * Fixed #3515: Random order seed is only printed in verbose mode
  * Fixed #3517: Useless error message when depending on test that
    does not exist</changelog>
  <changelog author="suse+build@de-korte.org" date="1550491200">- Change install location of macros.phpunit</changelog>
  <changelog author="suse+build@de-korte.org" date="1550577600">- Update package to release 8.0.4
  * Fixed #3530: generateClassFromWsdl() does not handle methods
    with multiple output values
  * Fixed #3531: Test suite fails on warning
  * Fixed #3534: Wrong message in ConstraintTestCase
  * Fixed #3535: TypeError in Command</changelog>
  <changelog author="suse+build@de-korte.org" date="1552824000">- Update package to release 8.0.5
  * Fixed #3480: Wrong return type declaration for TestCase::getExpectedExceptionMessage()
    and TestCase::getExpectedExceptionMessageRegExp()
  * Fixed #3532: Wrong default value for cacheResult in phpunit.xsd
  * Fixed #3539: Wrong default value for resolveDependencies in
    phpunit.xsd
  * Fixed #3550: Check for valid attribute names in assertObjectHasAttribute()
    is too strict
  * Fixed #3555: Extension loader only allows objects that implement
    TestHook but should also allow Hook
  * Fixed #3560: TestDox does not work when tests are filtered</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1553601600">- Added obsoletes statements to php7-phpunit7_0 and php7-phpunit6 to allow
  a smooth update</changelog>
  <changelog author="suse+build@de-korte.org" date="1553860800">- Update package to release 8.0.6
  * Fixed #3564: Production code uses class from test suite's fixture</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1576411200">- Update package to release 8.5.0
  * https://github.com/sebastianbergmann/phpunit/blob/8.5/ChangeLog-8.5.md
- Update package to release 8.4.3
  * https://github.com/sebastianbergmann/phpunit/blob/8.4.3/ChangeLog-8.4.md
- Update package to release 8.3.5
  * https://github.com/sebastianbergmann/phpunit/blob/8.3.5/ChangeLog-8.3.md
- Update package to release 8.2.5
  * https://github.com/sebastianbergmann/phpunit/blob/8.2.5/ChangeLog-8.2.md
- Update package to release 8.1.6
  * https://github.com/sebastianbergmann/phpunit/blob/8.1.6/ChangeLog-8.1.md</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1597838400">- Use %_rpmmacrodir instead of wrong %{_libexecdir}/rpm/macros.d
  (libexecdir changes to /usr/libexec).</changelog>
  <changelog author="pgajdos@suse.com" date="1673524800">- package reworked, php7 and php8 flavors
- Update package to release 9.5.28
  * https://github.com/sebastianbergmann/phpunit/blob/9.5/ChangeLog-9.5.md</changelog>
  <changelog author="pgajdos@suse.com" date="1673956800">- %nil flavor implies Name: phpunit</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1674216000">- Refresh 9.5.28 source files as they seem to have been republished</changelog>
</package>
<package pkgid="beec4ecd18c7eb1886d2530b6b2642adad52a0b229dcdad10a6981a76b3fde3d" name="php7-redis" arch="aarch64">
  <version epoch="0" ver="5.3.7" rel="bp154.2.1"/>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1552651200">- Update to 4.3.0
  * Proper persistent connections pooling implementation
  * RedisArray auth
  * Use zend_string for storing key
  * Add ZPOPMAX and ZPOPMIN support
  * Implement GEORADIUS_RO and GEORADIUSBYMEMBER_RO
  * Add callback parameter to subscribe/psubscribe arginfo
  * Don't check the number affected keys in PS_UPDATE_TIMESTAMP_FUNC
  * Xgroup updates
  * RedisCluster auth
  * Cancel pipeline mode without executing commands
  * Use zend_string for pipeline_cmd
  * Different key hashing algorithms from hash extension
  * Breaking the lock acquire loop in case of network problems
  * Implement consistent hashing algorithm for RedisArray
  * Use zend_string for storing RedisArray hosts
  * Update lzf_compress to be compatible with PECL lzf extension
  * Fix RedisCluster keys memory leak
  * Directly use return_value in RedisCluster::keys method
  * Fix segfault in Redis Cluster with inconsistent configuration
  * Masters info leakfix
  * Refactor redis_sock_read_bulk_reply
  * Remove unused parameter lazy_connect from redis_sock_create
  * Remove useless ZEND_ACC_[C|D]TOR.
  * Documentation improvements
- Added additional settings to redis.ini</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1562068800">- Update to 5.0.0
  This release contains important improvements and breaking changes.
  The most interesting are: drop PHP5 support, RedisCluster slots caching,
  JSON and msgpack serializers, soft deprecation of non-Redis commands.
  * Remove HAVE_SPL
  * Allow compilation without JSON serialization enabled and fixes for
    deprecated helper methods.
  * Enable connection pooling by default
  * Soft deprecate methods that aren't actually Redis commands
  * Enable pooling for cluster slave nodes
  * xInfo response format
  * Make the XREADGROUP optional COUNT and BLOCK arguments nullable
  * Allow PING to take an optional argument
  * Allow ZRANGE to be called either with `true` or `['withscores' =&gt; true]`
  * Allow to specify server address as schema://host
  * Allow persistent_id to be passed as NULL with strict_types enabled
  * Add server address to exception message
  * Adds OPT_REPLY_LITERAL for rawCommand and EVAL
  * JSON serializer
  * Add support for STREAM to the type command
  * Fix TypeError when using built-in constants in `setOption`
  * Handle references in MGET
  * msgpack serializer
  * Add Cluster slots caching
  * Drop PHP5 support
  * Documentation improvements</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1565179200">- Refresh spec-file with manual optmizations
  * Remove version limit from BuildRequires:php7-devel (no actual).
  * Remove BuildRequires:php7-soap (no needed).
  * Add BuildRequires:php7-json (need for tests, but still does not load).
  * Add %make_build and %make_install macros.
- Update to 5.0.2
  * https://pecl.php.net/package-changelog.php?package=redis&amp;release=5.0.2
  * RedisCluster segfaults after second connection with cache_slots enabled.
  * Cleanup TSRMLS_* usage.
  * Replace ulong with zend_ulong.
  * Replace uint with uint32_t.
  * Fix regression for conntecting to ports &gt; 32767.
  * RedisCluster segfaults after second connection with cache_slots enabled.
  * Documentation improvements.</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1572696000">- Update to 5.1.0
  * https://pecl.php.net/package-changelog.php?package=redis&amp;release=5.1.0
  * Fix regression for multihost_distribute_call added in 112c77e3.
  * Fix regression for conntecting to unix sockets with relative path
    added in 1f41da64.
  * Fix unix-socket detection logic broken in 418428fa.
  * Fix memory leak and bug with getLastError for redis_mbulk_reply_assoc
    and redis_mbulk_reply_zipped.
  * Fix bug with password contain "#" for redis_session.
  * Add optional support for Zstd compression, using --enable-redis-ztsd.
    This requires libzstd version &gt;= 1.3.0.
  * Fix overallocation in RedisCluster directed node commands.
  * Also attach slaves when caching cluster slots.
  * Use zend_register_persistent_resource_ex for connection pooling.
  * Refactor redis_session.
  * Documentation improvements.
  * Fix missing null byte in PHP_MINFO_FUNCTION.
  * Remove dead code generic_unsubscribe_cmd.
  * Add documentation for zpopmin and zpopmax.
  * Allow to specify scheme for session handler.</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1575028800">- Update to 5.1.1
  * https://pecl.php.net/package-changelog.php?package=redis&amp;release=5.1.1
  * Fix fail to connect to redis through unix socket.
  * Documentation improvements.</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1583323200">- Update to 5.2.0
  * https://pecl.php.net/package-changelog.php?package=redis&amp;release=5.2.0
  * Include RedisSentinelTest.php in package.xml!
  * Fix -Wmaybe-uninitialized warning.
  * Fix improper destructor when zipping values and scores.
  * Use php_rand instead of php_mt_rand for liveness challenge string.
  * Initial support for RedisSentinel.
  * Fix for ASK redirections.
  * Create specific 'test skipped' exception.
  * Fixed memory leaks in RedisCluster.
  * Fixes for session lifetime values that underflow or overflow.
  * Enables slot caching for Redis Cluster.
  * Support TYPE argument for SCAN.
  * Added challenge/response mechanism for persistent connections.</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1585310400">- Update to 5.2.1
  * https://pecl.php.net/package-changelog.php?package=redis&amp;release=5.2.1
  * Fix arginfo for Redis::zadd.
  * Fix segfault on closing persistent stream.</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1588766400">- Update to 5.2.2
  * https://pecl.php.net/package-changelog.php?package=redis&amp;release=5.2.2
    This is a bugfix release that contains a fix for authentication
    when using persistent connections, and an option to make the
    ECHO challenge response logic optional.
  * Inexpensive liveness check, and making ECHO optional [56898f81] (Pavlo Yatsukhnenko)
  * Move `AUTH` to `redis_sock_server_open` [80f2529b](Pavlo Yatsukhnenko)</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1593777600">- Update to 5.3.0
  * https://pecl.php.net/package-changelog.php?package=redis&amp;release=5.3.0
  * Support for Redis 6 ACLs.
  * LZ4 Compression.
  * Support for new Redis 6 arguments.
  * Support for TLS connections.
  * New option Redis::SCAN_PREFIX, Redis::SCAN_NOPREFIX.
  * Configurable unit test authentication arguments.
  * Improved cluster slot caching mechanism to fix a couple
    of bugs and make it more efficient.
  * Stop calling Redis constructor when creating a RedisArray.
  * Use ZEND_LONG_FMT instead of system `long`.
  * Use long for SCAN iteration to fix potential overflow.
  * Avoid use-after-free of RediSock.
  * Use the portable `ZEND_LONG_FORMAT` family
    instead of C format specifiers.
  * PHP 8 compatibility.</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1594209600">- Update to 5.3.1
  * https://pecl.php.net/package-changelog.php?package=redis&amp;release=5.3.1
  * Properly clean up on session start failure.
  * Treat NULL as a failure for redis_extract_auth_info.
  * Don't dereference a NULL zend_string or efree one.
  * Fix config.m4 messages and test for and include php_hash.h.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1603368000">- Update to 5.3.2
  * Use "%.17g" sprintf format for doubles as done in Redis server.
  * Allow to pass NULL as RedisCluster stream context options.
  * Verify SET options are strings before testing them as strings
  * Fix cluster segfault when dealing with NULL multi bulk replies
    in RedisCluster
  * Fix xReadGroup() must return message id
  * Fix memory leak in rediscluster session handler
  * Fix XInfo() returns false if the stream is empty
  * Relax requirements on set's expire argument
  * Refactor redis_sock_check_liveness
  * PHP8 compatibility
  * Update documentation
  * Add Redis::OPT_NULL_MULTIBULK_AS_NULL setting to treat NULL
    multi bulk replies as NULL instead of [].
  * Allow to specify stream context for rediscluster session handler
  * Add new parameter to RedisCluster to specify stream ssl/tls
    context.
  * Add new parameter to RedisSentinel to specify auth information</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1611316800">- Remove BuildRequires:php7-json (don't need in php7, but in php8 work in core).</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1612267200">- Update to 5.3.3
  * Fix PHP8 Windows includes
  * Fix hash ops for php 8.0.1
  * Disable cloning Redis and RedisCluster objects</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1613563200">- Use _multibuild to also build for php8
- Use php_cfgdir and php_extdir macros to determine location of files</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1613563201">- Refresh spec-file via spec-cleaner.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1616587200">- Update to 5.3.4
  * Fix multi/pipeline segfault on Apple silicon
  * Pass compression flag on HMGET in RedisCluster
  * Abide by ZSTD error return constants
  * Fix timing related CI session tests</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1639915200">- Updated to 5.3.5
  * https://pecl.php.net/package-changelog.php?package=redis&amp;release=5.3.5
  * Added experimental support for detecting a dirty connection.
  * Fixed RedisArray constructor bug.
  * Fixed segfault in redis_setoption_handler.
  * Fixed masters array in the event of a cluster failover.
  * Fixed 32 bit type error.
  * Fixed radix character in certain locales.
  * Fixed ZSTD Validation.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1643112000">- Updated to 5.3.6
  * Fix a segfault in RedisArray::del</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1645099200">- Updated to 5.3.7
  * https://pecl.php.net/package-changelog.php?package=redis&amp;release=5.3.7
  * Fixed RedisArray::[hsz]scan and tests.
  * Fixed RedisArray::scan.
  * Fixed LZF decompression logic.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1670673600">- Remove php7 build for Tumbleweed (PHP 7.4 has reached EOL)</changelog>
</package>
<package pkgid="b333130d8bf9b8eabfabe92744a99d8ef29106f2028e8b6d2d9619b49a3336e7" name="php7-redis" arch="i586">
  <version epoch="0" ver="5.3.7" rel="bp154.2.1"/>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1552651200">- Update to 4.3.0
  * Proper persistent connections pooling implementation
  * RedisArray auth
  * Use zend_string for storing key
  * Add ZPOPMAX and ZPOPMIN support
  * Implement GEORADIUS_RO and GEORADIUSBYMEMBER_RO
  * Add callback parameter to subscribe/psubscribe arginfo
  * Don't check the number affected keys in PS_UPDATE_TIMESTAMP_FUNC
  * Xgroup updates
  * RedisCluster auth
  * Cancel pipeline mode without executing commands
  * Use zend_string for pipeline_cmd
  * Different key hashing algorithms from hash extension
  * Breaking the lock acquire loop in case of network problems
  * Implement consistent hashing algorithm for RedisArray
  * Use zend_string for storing RedisArray hosts
  * Update lzf_compress to be compatible with PECL lzf extension
  * Fix RedisCluster keys memory leak
  * Directly use return_value in RedisCluster::keys method
  * Fix segfault in Redis Cluster with inconsistent configuration
  * Masters info leakfix
  * Refactor redis_sock_read_bulk_reply
  * Remove unused parameter lazy_connect from redis_sock_create
  * Remove useless ZEND_ACC_[C|D]TOR.
  * Documentation improvements
- Added additional settings to redis.ini</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1562068800">- Update to 5.0.0
  This release contains important improvements and breaking changes.
  The most interesting are: drop PHP5 support, RedisCluster slots caching,
  JSON and msgpack serializers, soft deprecation of non-Redis commands.
  * Remove HAVE_SPL
  * Allow compilation without JSON serialization enabled and fixes for
    deprecated helper methods.
  * Enable connection pooling by default
  * Soft deprecate methods that aren't actually Redis commands
  * Enable pooling for cluster slave nodes
  * xInfo response format
  * Make the XREADGROUP optional COUNT and BLOCK arguments nullable
  * Allow PING to take an optional argument
  * Allow ZRANGE to be called either with `true` or `['withscores' =&gt; true]`
  * Allow to specify server address as schema://host
  * Allow persistent_id to be passed as NULL with strict_types enabled
  * Add server address to exception message
  * Adds OPT_REPLY_LITERAL for rawCommand and EVAL
  * JSON serializer
  * Add support for STREAM to the type command
  * Fix TypeError when using built-in constants in `setOption`
  * Handle references in MGET
  * msgpack serializer
  * Add Cluster slots caching
  * Drop PHP5 support
  * Documentation improvements</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1565179200">- Refresh spec-file with manual optmizations
  * Remove version limit from BuildRequires:php7-devel (no actual).
  * Remove BuildRequires:php7-soap (no needed).
  * Add BuildRequires:php7-json (need for tests, but still does not load).
  * Add %make_build and %make_install macros.
- Update to 5.0.2
  * https://pecl.php.net/package-changelog.php?package=redis&amp;release=5.0.2
  * RedisCluster segfaults after second connection with cache_slots enabled.
  * Cleanup TSRMLS_* usage.
  * Replace ulong with zend_ulong.
  * Replace uint with uint32_t.
  * Fix regression for conntecting to ports &gt; 32767.
  * RedisCluster segfaults after second connection with cache_slots enabled.
  * Documentation improvements.</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1572696000">- Update to 5.1.0
  * https://pecl.php.net/package-changelog.php?package=redis&amp;release=5.1.0
  * Fix regression for multihost_distribute_call added in 112c77e3.
  * Fix regression for conntecting to unix sockets with relative path
    added in 1f41da64.
  * Fix unix-socket detection logic broken in 418428fa.
  * Fix memory leak and bug with getLastError for redis_mbulk_reply_assoc
    and redis_mbulk_reply_zipped.
  * Fix bug with password contain "#" for redis_session.
  * Add optional support for Zstd compression, using --enable-redis-ztsd.
    This requires libzstd version &gt;= 1.3.0.
  * Fix overallocation in RedisCluster directed node commands.
  * Also attach slaves when caching cluster slots.
  * Use zend_register_persistent_resource_ex for connection pooling.
  * Refactor redis_session.
  * Documentation improvements.
  * Fix missing null byte in PHP_MINFO_FUNCTION.
  * Remove dead code generic_unsubscribe_cmd.
  * Add documentation for zpopmin and zpopmax.
  * Allow to specify scheme for session handler.</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1575028800">- Update to 5.1.1
  * https://pecl.php.net/package-changelog.php?package=redis&amp;release=5.1.1
  * Fix fail to connect to redis through unix socket.
  * Documentation improvements.</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1583323200">- Update to 5.2.0
  * https://pecl.php.net/package-changelog.php?package=redis&amp;release=5.2.0
  * Include RedisSentinelTest.php in package.xml!
  * Fix -Wmaybe-uninitialized warning.
  * Fix improper destructor when zipping values and scores.
  * Use php_rand instead of php_mt_rand for liveness challenge string.
  * Initial support for RedisSentinel.
  * Fix for ASK redirections.
  * Create specific 'test skipped' exception.
  * Fixed memory leaks in RedisCluster.
  * Fixes for session lifetime values that underflow or overflow.
  * Enables slot caching for Redis Cluster.
  * Support TYPE argument for SCAN.
  * Added challenge/response mechanism for persistent connections.</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1585310400">- Update to 5.2.1
  * https://pecl.php.net/package-changelog.php?package=redis&amp;release=5.2.1
  * Fix arginfo for Redis::zadd.
  * Fix segfault on closing persistent stream.</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1588766400">- Update to 5.2.2
  * https://pecl.php.net/package-changelog.php?package=redis&amp;release=5.2.2
    This is a bugfix release that contains a fix for authentication
    when using persistent connections, and an option to make the
    ECHO challenge response logic optional.
  * Inexpensive liveness check, and making ECHO optional [56898f81] (Pavlo Yatsukhnenko)
  * Move `AUTH` to `redis_sock_server_open` [80f2529b](Pavlo Yatsukhnenko)</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1593777600">- Update to 5.3.0
  * https://pecl.php.net/package-changelog.php?package=redis&amp;release=5.3.0
  * Support for Redis 6 ACLs.
  * LZ4 Compression.
  * Support for new Redis 6 arguments.
  * Support for TLS connections.
  * New option Redis::SCAN_PREFIX, Redis::SCAN_NOPREFIX.
  * Configurable unit test authentication arguments.
  * Improved cluster slot caching mechanism to fix a couple
    of bugs and make it more efficient.
  * Stop calling Redis constructor when creating a RedisArray.
  * Use ZEND_LONG_FMT instead of system `long`.
  * Use long for SCAN iteration to fix potential overflow.
  * Avoid use-after-free of RediSock.
  * Use the portable `ZEND_LONG_FORMAT` family
    instead of C format specifiers.
  * PHP 8 compatibility.</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1594209600">- Update to 5.3.1
  * https://pecl.php.net/package-changelog.php?package=redis&amp;release=5.3.1
  * Properly clean up on session start failure.
  * Treat NULL as a failure for redis_extract_auth_info.
  * Don't dereference a NULL zend_string or efree one.
  * Fix config.m4 messages and test for and include php_hash.h.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1603368000">- Update to 5.3.2
  * Use "%.17g" sprintf format for doubles as done in Redis server.
  * Allow to pass NULL as RedisCluster stream context options.
  * Verify SET options are strings before testing them as strings
  * Fix cluster segfault when dealing with NULL multi bulk replies
    in RedisCluster
  * Fix xReadGroup() must return message id
  * Fix memory leak in rediscluster session handler
  * Fix XInfo() returns false if the stream is empty
  * Relax requirements on set's expire argument
  * Refactor redis_sock_check_liveness
  * PHP8 compatibility
  * Update documentation
  * Add Redis::OPT_NULL_MULTIBULK_AS_NULL setting to treat NULL
    multi bulk replies as NULL instead of [].
  * Allow to specify stream context for rediscluster session handler
  * Add new parameter to RedisCluster to specify stream ssl/tls
    context.
  * Add new parameter to RedisSentinel to specify auth information</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1611316800">- Remove BuildRequires:php7-json (don't need in php7, but in php8 work in core).</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1612267200">- Update to 5.3.3
  * Fix PHP8 Windows includes
  * Fix hash ops for php 8.0.1
  * Disable cloning Redis and RedisCluster objects</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1613563200">- Use _multibuild to also build for php8
- Use php_cfgdir and php_extdir macros to determine location of files</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1613563201">- Refresh spec-file via spec-cleaner.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1616587200">- Update to 5.3.4
  * Fix multi/pipeline segfault on Apple silicon
  * Pass compression flag on HMGET in RedisCluster
  * Abide by ZSTD error return constants
  * Fix timing related CI session tests</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1639915200">- Updated to 5.3.5
  * https://pecl.php.net/package-changelog.php?package=redis&amp;release=5.3.5
  * Added experimental support for detecting a dirty connection.
  * Fixed RedisArray constructor bug.
  * Fixed segfault in redis_setoption_handler.
  * Fixed masters array in the event of a cluster failover.
  * Fixed 32 bit type error.
  * Fixed radix character in certain locales.
  * Fixed ZSTD Validation.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1643112000">- Updated to 5.3.6
  * Fix a segfault in RedisArray::del</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1645099200">- Updated to 5.3.7
  * https://pecl.php.net/package-changelog.php?package=redis&amp;release=5.3.7
  * Fixed RedisArray::[hsz]scan and tests.
  * Fixed RedisArray::scan.
  * Fixed LZF decompression logic.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1670673600">- Remove php7 build for Tumbleweed (PHP 7.4 has reached EOL)</changelog>
</package>
<package pkgid="4d7b907d4eb1a2be8b61b1c0a76c326142340b071e996c4232164e38b810507f" name="php7-redis" arch="ppc64le">
  <version epoch="0" ver="5.3.7" rel="bp154.2.1"/>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1552651200">- Update to 4.3.0
  * Proper persistent connections pooling implementation
  * RedisArray auth
  * Use zend_string for storing key
  * Add ZPOPMAX and ZPOPMIN support
  * Implement GEORADIUS_RO and GEORADIUSBYMEMBER_RO
  * Add callback parameter to subscribe/psubscribe arginfo
  * Don't check the number affected keys in PS_UPDATE_TIMESTAMP_FUNC
  * Xgroup updates
  * RedisCluster auth
  * Cancel pipeline mode without executing commands
  * Use zend_string for pipeline_cmd
  * Different key hashing algorithms from hash extension
  * Breaking the lock acquire loop in case of network problems
  * Implement consistent hashing algorithm for RedisArray
  * Use zend_string for storing RedisArray hosts
  * Update lzf_compress to be compatible with PECL lzf extension
  * Fix RedisCluster keys memory leak
  * Directly use return_value in RedisCluster::keys method
  * Fix segfault in Redis Cluster with inconsistent configuration
  * Masters info leakfix
  * Refactor redis_sock_read_bulk_reply
  * Remove unused parameter lazy_connect from redis_sock_create
  * Remove useless ZEND_ACC_[C|D]TOR.
  * Documentation improvements
- Added additional settings to redis.ini</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1562068800">- Update to 5.0.0
  This release contains important improvements and breaking changes.
  The most interesting are: drop PHP5 support, RedisCluster slots caching,
  JSON and msgpack serializers, soft deprecation of non-Redis commands.
  * Remove HAVE_SPL
  * Allow compilation without JSON serialization enabled and fixes for
    deprecated helper methods.
  * Enable connection pooling by default
  * Soft deprecate methods that aren't actually Redis commands
  * Enable pooling for cluster slave nodes
  * xInfo response format
  * Make the XREADGROUP optional COUNT and BLOCK arguments nullable
  * Allow PING to take an optional argument
  * Allow ZRANGE to be called either with `true` or `['withscores' =&gt; true]`
  * Allow to specify server address as schema://host
  * Allow persistent_id to be passed as NULL with strict_types enabled
  * Add server address to exception message
  * Adds OPT_REPLY_LITERAL for rawCommand and EVAL
  * JSON serializer
  * Add support for STREAM to the type command
  * Fix TypeError when using built-in constants in `setOption`
  * Handle references in MGET
  * msgpack serializer
  * Add Cluster slots caching
  * Drop PHP5 support
  * Documentation improvements</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1565179200">- Refresh spec-file with manual optmizations
  * Remove version limit from BuildRequires:php7-devel (no actual).
  * Remove BuildRequires:php7-soap (no needed).
  * Add BuildRequires:php7-json (need for tests, but still does not load).
  * Add %make_build and %make_install macros.
- Update to 5.0.2
  * https://pecl.php.net/package-changelog.php?package=redis&amp;release=5.0.2
  * RedisCluster segfaults after second connection with cache_slots enabled.
  * Cleanup TSRMLS_* usage.
  * Replace ulong with zend_ulong.
  * Replace uint with uint32_t.
  * Fix regression for conntecting to ports &gt; 32767.
  * RedisCluster segfaults after second connection with cache_slots enabled.
  * Documentation improvements.</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1572696000">- Update to 5.1.0
  * https://pecl.php.net/package-changelog.php?package=redis&amp;release=5.1.0
  * Fix regression for multihost_distribute_call added in 112c77e3.
  * Fix regression for conntecting to unix sockets with relative path
    added in 1f41da64.
  * Fix unix-socket detection logic broken in 418428fa.
  * Fix memory leak and bug with getLastError for redis_mbulk_reply_assoc
    and redis_mbulk_reply_zipped.
  * Fix bug with password contain "#" for redis_session.
  * Add optional support for Zstd compression, using --enable-redis-ztsd.
    This requires libzstd version &gt;= 1.3.0.
  * Fix overallocation in RedisCluster directed node commands.
  * Also attach slaves when caching cluster slots.
  * Use zend_register_persistent_resource_ex for connection pooling.
  * Refactor redis_session.
  * Documentation improvements.
  * Fix missing null byte in PHP_MINFO_FUNCTION.
  * Remove dead code generic_unsubscribe_cmd.
  * Add documentation for zpopmin and zpopmax.
  * Allow to specify scheme for session handler.</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1575028800">- Update to 5.1.1
  * https://pecl.php.net/package-changelog.php?package=redis&amp;release=5.1.1
  * Fix fail to connect to redis through unix socket.
  * Documentation improvements.</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1583323200">- Update to 5.2.0
  * https://pecl.php.net/package-changelog.php?package=redis&amp;release=5.2.0
  * Include RedisSentinelTest.php in package.xml!
  * Fix -Wmaybe-uninitialized warning.
  * Fix improper destructor when zipping values and scores.
  * Use php_rand instead of php_mt_rand for liveness challenge string.
  * Initial support for RedisSentinel.
  * Fix for ASK redirections.
  * Create specific 'test skipped' exception.
  * Fixed memory leaks in RedisCluster.
  * Fixes for session lifetime values that underflow or overflow.
  * Enables slot caching for Redis Cluster.
  * Support TYPE argument for SCAN.
  * Added challenge/response mechanism for persistent connections.</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1585310400">- Update to 5.2.1
  * https://pecl.php.net/package-changelog.php?package=redis&amp;release=5.2.1
  * Fix arginfo for Redis::zadd.
  * Fix segfault on closing persistent stream.</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1588766400">- Update to 5.2.2
  * https://pecl.php.net/package-changelog.php?package=redis&amp;release=5.2.2
    This is a bugfix release that contains a fix for authentication
    when using persistent connections, and an option to make the
    ECHO challenge response logic optional.
  * Inexpensive liveness check, and making ECHO optional [56898f81] (Pavlo Yatsukhnenko)
  * Move `AUTH` to `redis_sock_server_open` [80f2529b](Pavlo Yatsukhnenko)</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1593777600">- Update to 5.3.0
  * https://pecl.php.net/package-changelog.php?package=redis&amp;release=5.3.0
  * Support for Redis 6 ACLs.
  * LZ4 Compression.
  * Support for new Redis 6 arguments.
  * Support for TLS connections.
  * New option Redis::SCAN_PREFIX, Redis::SCAN_NOPREFIX.
  * Configurable unit test authentication arguments.
  * Improved cluster slot caching mechanism to fix a couple
    of bugs and make it more efficient.
  * Stop calling Redis constructor when creating a RedisArray.
  * Use ZEND_LONG_FMT instead of system `long`.
  * Use long for SCAN iteration to fix potential overflow.
  * Avoid use-after-free of RediSock.
  * Use the portable `ZEND_LONG_FORMAT` family
    instead of C format specifiers.
  * PHP 8 compatibility.</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1594209600">- Update to 5.3.1
  * https://pecl.php.net/package-changelog.php?package=redis&amp;release=5.3.1
  * Properly clean up on session start failure.
  * Treat NULL as a failure for redis_extract_auth_info.
  * Don't dereference a NULL zend_string or efree one.
  * Fix config.m4 messages and test for and include php_hash.h.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1603368000">- Update to 5.3.2
  * Use "%.17g" sprintf format for doubles as done in Redis server.
  * Allow to pass NULL as RedisCluster stream context options.
  * Verify SET options are strings before testing them as strings
  * Fix cluster segfault when dealing with NULL multi bulk replies
    in RedisCluster
  * Fix xReadGroup() must return message id
  * Fix memory leak in rediscluster session handler
  * Fix XInfo() returns false if the stream is empty
  * Relax requirements on set's expire argument
  * Refactor redis_sock_check_liveness
  * PHP8 compatibility
  * Update documentation
  * Add Redis::OPT_NULL_MULTIBULK_AS_NULL setting to treat NULL
    multi bulk replies as NULL instead of [].
  * Allow to specify stream context for rediscluster session handler
  * Add new parameter to RedisCluster to specify stream ssl/tls
    context.
  * Add new parameter to RedisSentinel to specify auth information</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1611316800">- Remove BuildRequires:php7-json (don't need in php7, but in php8 work in core).</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1612267200">- Update to 5.3.3
  * Fix PHP8 Windows includes
  * Fix hash ops for php 8.0.1
  * Disable cloning Redis and RedisCluster objects</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1613563200">- Use _multibuild to also build for php8
- Use php_cfgdir and php_extdir macros to determine location of files</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1613563201">- Refresh spec-file via spec-cleaner.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1616587200">- Update to 5.3.4
  * Fix multi/pipeline segfault on Apple silicon
  * Pass compression flag on HMGET in RedisCluster
  * Abide by ZSTD error return constants
  * Fix timing related CI session tests</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1639915200">- Updated to 5.3.5
  * https://pecl.php.net/package-changelog.php?package=redis&amp;release=5.3.5
  * Added experimental support for detecting a dirty connection.
  * Fixed RedisArray constructor bug.
  * Fixed segfault in redis_setoption_handler.
  * Fixed masters array in the event of a cluster failover.
  * Fixed 32 bit type error.
  * Fixed radix character in certain locales.
  * Fixed ZSTD Validation.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1643112000">- Updated to 5.3.6
  * Fix a segfault in RedisArray::del</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1645099200">- Updated to 5.3.7
  * https://pecl.php.net/package-changelog.php?package=redis&amp;release=5.3.7
  * Fixed RedisArray::[hsz]scan and tests.
  * Fixed RedisArray::scan.
  * Fixed LZF decompression logic.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1670673600">- Remove php7 build for Tumbleweed (PHP 7.4 has reached EOL)</changelog>
</package>
<package pkgid="eb23a458dae1b13586796b8b015c70080e20b45f4966ac0453bac2dbad6963b5" name="php7-redis" arch="s390x">
  <version epoch="0" ver="5.3.7" rel="bp154.2.1"/>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1552651200">- Update to 4.3.0
  * Proper persistent connections pooling implementation
  * RedisArray auth
  * Use zend_string for storing key
  * Add ZPOPMAX and ZPOPMIN support
  * Implement GEORADIUS_RO and GEORADIUSBYMEMBER_RO
  * Add callback parameter to subscribe/psubscribe arginfo
  * Don't check the number affected keys in PS_UPDATE_TIMESTAMP_FUNC
  * Xgroup updates
  * RedisCluster auth
  * Cancel pipeline mode without executing commands
  * Use zend_string for pipeline_cmd
  * Different key hashing algorithms from hash extension
  * Breaking the lock acquire loop in case of network problems
  * Implement consistent hashing algorithm for RedisArray
  * Use zend_string for storing RedisArray hosts
  * Update lzf_compress to be compatible with PECL lzf extension
  * Fix RedisCluster keys memory leak
  * Directly use return_value in RedisCluster::keys method
  * Fix segfault in Redis Cluster with inconsistent configuration
  * Masters info leakfix
  * Refactor redis_sock_read_bulk_reply
  * Remove unused parameter lazy_connect from redis_sock_create
  * Remove useless ZEND_ACC_[C|D]TOR.
  * Documentation improvements
- Added additional settings to redis.ini</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1562068800">- Update to 5.0.0
  This release contains important improvements and breaking changes.
  The most interesting are: drop PHP5 support, RedisCluster slots caching,
  JSON and msgpack serializers, soft deprecation of non-Redis commands.
  * Remove HAVE_SPL
  * Allow compilation without JSON serialization enabled and fixes for
    deprecated helper methods.
  * Enable connection pooling by default
  * Soft deprecate methods that aren't actually Redis commands
  * Enable pooling for cluster slave nodes
  * xInfo response format
  * Make the XREADGROUP optional COUNT and BLOCK arguments nullable
  * Allow PING to take an optional argument
  * Allow ZRANGE to be called either with `true` or `['withscores' =&gt; true]`
  * Allow to specify server address as schema://host
  * Allow persistent_id to be passed as NULL with strict_types enabled
  * Add server address to exception message
  * Adds OPT_REPLY_LITERAL for rawCommand and EVAL
  * JSON serializer
  * Add support for STREAM to the type command
  * Fix TypeError when using built-in constants in `setOption`
  * Handle references in MGET
  * msgpack serializer
  * Add Cluster slots caching
  * Drop PHP5 support
  * Documentation improvements</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1565179200">- Refresh spec-file with manual optmizations
  * Remove version limit from BuildRequires:php7-devel (no actual).
  * Remove BuildRequires:php7-soap (no needed).
  * Add BuildRequires:php7-json (need for tests, but still does not load).
  * Add %make_build and %make_install macros.
- Update to 5.0.2
  * https://pecl.php.net/package-changelog.php?package=redis&amp;release=5.0.2
  * RedisCluster segfaults after second connection with cache_slots enabled.
  * Cleanup TSRMLS_* usage.
  * Replace ulong with zend_ulong.
  * Replace uint with uint32_t.
  * Fix regression for conntecting to ports &gt; 32767.
  * RedisCluster segfaults after second connection with cache_slots enabled.
  * Documentation improvements.</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1572696000">- Update to 5.1.0
  * https://pecl.php.net/package-changelog.php?package=redis&amp;release=5.1.0
  * Fix regression for multihost_distribute_call added in 112c77e3.
  * Fix regression for conntecting to unix sockets with relative path
    added in 1f41da64.
  * Fix unix-socket detection logic broken in 418428fa.
  * Fix memory leak and bug with getLastError for redis_mbulk_reply_assoc
    and redis_mbulk_reply_zipped.
  * Fix bug with password contain "#" for redis_session.
  * Add optional support for Zstd compression, using --enable-redis-ztsd.
    This requires libzstd version &gt;= 1.3.0.
  * Fix overallocation in RedisCluster directed node commands.
  * Also attach slaves when caching cluster slots.
  * Use zend_register_persistent_resource_ex for connection pooling.
  * Refactor redis_session.
  * Documentation improvements.
  * Fix missing null byte in PHP_MINFO_FUNCTION.
  * Remove dead code generic_unsubscribe_cmd.
  * Add documentation for zpopmin and zpopmax.
  * Allow to specify scheme for session handler.</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1575028800">- Update to 5.1.1
  * https://pecl.php.net/package-changelog.php?package=redis&amp;release=5.1.1
  * Fix fail to connect to redis through unix socket.
  * Documentation improvements.</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1583323200">- Update to 5.2.0
  * https://pecl.php.net/package-changelog.php?package=redis&amp;release=5.2.0
  * Include RedisSentinelTest.php in package.xml!
  * Fix -Wmaybe-uninitialized warning.
  * Fix improper destructor when zipping values and scores.
  * Use php_rand instead of php_mt_rand for liveness challenge string.
  * Initial support for RedisSentinel.
  * Fix for ASK redirections.
  * Create specific 'test skipped' exception.
  * Fixed memory leaks in RedisCluster.
  * Fixes for session lifetime values that underflow or overflow.
  * Enables slot caching for Redis Cluster.
  * Support TYPE argument for SCAN.
  * Added challenge/response mechanism for persistent connections.</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1585310400">- Update to 5.2.1
  * https://pecl.php.net/package-changelog.php?package=redis&amp;release=5.2.1
  * Fix arginfo for Redis::zadd.
  * Fix segfault on closing persistent stream.</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1588766400">- Update to 5.2.2
  * https://pecl.php.net/package-changelog.php?package=redis&amp;release=5.2.2
    This is a bugfix release that contains a fix for authentication
    when using persistent connections, and an option to make the
    ECHO challenge response logic optional.
  * Inexpensive liveness check, and making ECHO optional [56898f81] (Pavlo Yatsukhnenko)
  * Move `AUTH` to `redis_sock_server_open` [80f2529b](Pavlo Yatsukhnenko)</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1593777600">- Update to 5.3.0
  * https://pecl.php.net/package-changelog.php?package=redis&amp;release=5.3.0
  * Support for Redis 6 ACLs.
  * LZ4 Compression.
  * Support for new Redis 6 arguments.
  * Support for TLS connections.
  * New option Redis::SCAN_PREFIX, Redis::SCAN_NOPREFIX.
  * Configurable unit test authentication arguments.
  * Improved cluster slot caching mechanism to fix a couple
    of bugs and make it more efficient.
  * Stop calling Redis constructor when creating a RedisArray.
  * Use ZEND_LONG_FMT instead of system `long`.
  * Use long for SCAN iteration to fix potential overflow.
  * Avoid use-after-free of RediSock.
  * Use the portable `ZEND_LONG_FORMAT` family
    instead of C format specifiers.
  * PHP 8 compatibility.</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1594209600">- Update to 5.3.1
  * https://pecl.php.net/package-changelog.php?package=redis&amp;release=5.3.1
  * Properly clean up on session start failure.
  * Treat NULL as a failure for redis_extract_auth_info.
  * Don't dereference a NULL zend_string or efree one.
  * Fix config.m4 messages and test for and include php_hash.h.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1603368000">- Update to 5.3.2
  * Use "%.17g" sprintf format for doubles as done in Redis server.
  * Allow to pass NULL as RedisCluster stream context options.
  * Verify SET options are strings before testing them as strings
  * Fix cluster segfault when dealing with NULL multi bulk replies
    in RedisCluster
  * Fix xReadGroup() must return message id
  * Fix memory leak in rediscluster session handler
  * Fix XInfo() returns false if the stream is empty
  * Relax requirements on set's expire argument
  * Refactor redis_sock_check_liveness
  * PHP8 compatibility
  * Update documentation
  * Add Redis::OPT_NULL_MULTIBULK_AS_NULL setting to treat NULL
    multi bulk replies as NULL instead of [].
  * Allow to specify stream context for rediscluster session handler
  * Add new parameter to RedisCluster to specify stream ssl/tls
    context.
  * Add new parameter to RedisSentinel to specify auth information</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1611316800">- Remove BuildRequires:php7-json (don't need in php7, but in php8 work in core).</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1612267200">- Update to 5.3.3
  * Fix PHP8 Windows includes
  * Fix hash ops for php 8.0.1
  * Disable cloning Redis and RedisCluster objects</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1613563200">- Use _multibuild to also build for php8
- Use php_cfgdir and php_extdir macros to determine location of files</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1613563201">- Refresh spec-file via spec-cleaner.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1616587200">- Update to 5.3.4
  * Fix multi/pipeline segfault on Apple silicon
  * Pass compression flag on HMGET in RedisCluster
  * Abide by ZSTD error return constants
  * Fix timing related CI session tests</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1639915200">- Updated to 5.3.5
  * https://pecl.php.net/package-changelog.php?package=redis&amp;release=5.3.5
  * Added experimental support for detecting a dirty connection.
  * Fixed RedisArray constructor bug.
  * Fixed segfault in redis_setoption_handler.
  * Fixed masters array in the event of a cluster failover.
  * Fixed 32 bit type error.
  * Fixed radix character in certain locales.
  * Fixed ZSTD Validation.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1643112000">- Updated to 5.3.6
  * Fix a segfault in RedisArray::del</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1645099200">- Updated to 5.3.7
  * https://pecl.php.net/package-changelog.php?package=redis&amp;release=5.3.7
  * Fixed RedisArray::[hsz]scan and tests.
  * Fixed RedisArray::scan.
  * Fixed LZF decompression logic.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1670673600">- Remove php7 build for Tumbleweed (PHP 7.4 has reached EOL)</changelog>
</package>
<package pkgid="fea9d3b163b220501895e56842ec417a7df14b456fab1e3b0a9fcec9474c7ded" name="php7-redis" arch="src">
  <version epoch="0" ver="5.3.7" rel="bp154.2.1"/>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1552651200">- Update to 4.3.0
  * Proper persistent connections pooling implementation
  * RedisArray auth
  * Use zend_string for storing key
  * Add ZPOPMAX and ZPOPMIN support
  * Implement GEORADIUS_RO and GEORADIUSBYMEMBER_RO
  * Add callback parameter to subscribe/psubscribe arginfo
  * Don't check the number affected keys in PS_UPDATE_TIMESTAMP_FUNC
  * Xgroup updates
  * RedisCluster auth
  * Cancel pipeline mode without executing commands
  * Use zend_string for pipeline_cmd
  * Different key hashing algorithms from hash extension
  * Breaking the lock acquire loop in case of network problems
  * Implement consistent hashing algorithm for RedisArray
  * Use zend_string for storing RedisArray hosts
  * Update lzf_compress to be compatible with PECL lzf extension
  * Fix RedisCluster keys memory leak
  * Directly use return_value in RedisCluster::keys method
  * Fix segfault in Redis Cluster with inconsistent configuration
  * Masters info leakfix
  * Refactor redis_sock_read_bulk_reply
  * Remove unused parameter lazy_connect from redis_sock_create
  * Remove useless ZEND_ACC_[C|D]TOR.
  * Documentation improvements
- Added additional settings to redis.ini</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1562068800">- Update to 5.0.0
  This release contains important improvements and breaking changes.
  The most interesting are: drop PHP5 support, RedisCluster slots caching,
  JSON and msgpack serializers, soft deprecation of non-Redis commands.
  * Remove HAVE_SPL
  * Allow compilation without JSON serialization enabled and fixes for
    deprecated helper methods.
  * Enable connection pooling by default
  * Soft deprecate methods that aren't actually Redis commands
  * Enable pooling for cluster slave nodes
  * xInfo response format
  * Make the XREADGROUP optional COUNT and BLOCK arguments nullable
  * Allow PING to take an optional argument
  * Allow ZRANGE to be called either with `true` or `['withscores' =&gt; true]`
  * Allow to specify server address as schema://host
  * Allow persistent_id to be passed as NULL with strict_types enabled
  * Add server address to exception message
  * Adds OPT_REPLY_LITERAL for rawCommand and EVAL
  * JSON serializer
  * Add support for STREAM to the type command
  * Fix TypeError when using built-in constants in `setOption`
  * Handle references in MGET
  * msgpack serializer
  * Add Cluster slots caching
  * Drop PHP5 support
  * Documentation improvements</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1565179200">- Refresh spec-file with manual optmizations
  * Remove version limit from BuildRequires:php7-devel (no actual).
  * Remove BuildRequires:php7-soap (no needed).
  * Add BuildRequires:php7-json (need for tests, but still does not load).
  * Add %make_build and %make_install macros.
- Update to 5.0.2
  * https://pecl.php.net/package-changelog.php?package=redis&amp;release=5.0.2
  * RedisCluster segfaults after second connection with cache_slots enabled.
  * Cleanup TSRMLS_* usage.
  * Replace ulong with zend_ulong.
  * Replace uint with uint32_t.
  * Fix regression for conntecting to ports &gt; 32767.
  * RedisCluster segfaults after second connection with cache_slots enabled.
  * Documentation improvements.</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1572696000">- Update to 5.1.0
  * https://pecl.php.net/package-changelog.php?package=redis&amp;release=5.1.0
  * Fix regression for multihost_distribute_call added in 112c77e3.
  * Fix regression for conntecting to unix sockets with relative path
    added in 1f41da64.
  * Fix unix-socket detection logic broken in 418428fa.
  * Fix memory leak and bug with getLastError for redis_mbulk_reply_assoc
    and redis_mbulk_reply_zipped.
  * Fix bug with password contain "#" for redis_session.
  * Add optional support for Zstd compression, using --enable-redis-ztsd.
    This requires libzstd version &gt;= 1.3.0.
  * Fix overallocation in RedisCluster directed node commands.
  * Also attach slaves when caching cluster slots.
  * Use zend_register_persistent_resource_ex for connection pooling.
  * Refactor redis_session.
  * Documentation improvements.
  * Fix missing null byte in PHP_MINFO_FUNCTION.
  * Remove dead code generic_unsubscribe_cmd.
  * Add documentation for zpopmin and zpopmax.
  * Allow to specify scheme for session handler.</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1575028800">- Update to 5.1.1
  * https://pecl.php.net/package-changelog.php?package=redis&amp;release=5.1.1
  * Fix fail to connect to redis through unix socket.
  * Documentation improvements.</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1583323200">- Update to 5.2.0
  * https://pecl.php.net/package-changelog.php?package=redis&amp;release=5.2.0
  * Include RedisSentinelTest.php in package.xml!
  * Fix -Wmaybe-uninitialized warning.
  * Fix improper destructor when zipping values and scores.
  * Use php_rand instead of php_mt_rand for liveness challenge string.
  * Initial support for RedisSentinel.
  * Fix for ASK redirections.
  * Create specific 'test skipped' exception.
  * Fixed memory leaks in RedisCluster.
  * Fixes for session lifetime values that underflow or overflow.
  * Enables slot caching for Redis Cluster.
  * Support TYPE argument for SCAN.
  * Added challenge/response mechanism for persistent connections.</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1585310400">- Update to 5.2.1
  * https://pecl.php.net/package-changelog.php?package=redis&amp;release=5.2.1
  * Fix arginfo for Redis::zadd.
  * Fix segfault on closing persistent stream.</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1588766400">- Update to 5.2.2
  * https://pecl.php.net/package-changelog.php?package=redis&amp;release=5.2.2
    This is a bugfix release that contains a fix for authentication
    when using persistent connections, and an option to make the
    ECHO challenge response logic optional.
  * Inexpensive liveness check, and making ECHO optional [56898f81] (Pavlo Yatsukhnenko)
  * Move `AUTH` to `redis_sock_server_open` [80f2529b](Pavlo Yatsukhnenko)</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1593777600">- Update to 5.3.0
  * https://pecl.php.net/package-changelog.php?package=redis&amp;release=5.3.0
  * Support for Redis 6 ACLs.
  * LZ4 Compression.
  * Support for new Redis 6 arguments.
  * Support for TLS connections.
  * New option Redis::SCAN_PREFIX, Redis::SCAN_NOPREFIX.
  * Configurable unit test authentication arguments.
  * Improved cluster slot caching mechanism to fix a couple
    of bugs and make it more efficient.
  * Stop calling Redis constructor when creating a RedisArray.
  * Use ZEND_LONG_FMT instead of system `long`.
  * Use long for SCAN iteration to fix potential overflow.
  * Avoid use-after-free of RediSock.
  * Use the portable `ZEND_LONG_FORMAT` family
    instead of C format specifiers.
  * PHP 8 compatibility.</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1594209600">- Update to 5.3.1
  * https://pecl.php.net/package-changelog.php?package=redis&amp;release=5.3.1
  * Properly clean up on session start failure.
  * Treat NULL as a failure for redis_extract_auth_info.
  * Don't dereference a NULL zend_string or efree one.
  * Fix config.m4 messages and test for and include php_hash.h.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1603368000">- Update to 5.3.2
  * Use "%.17g" sprintf format for doubles as done in Redis server.
  * Allow to pass NULL as RedisCluster stream context options.
  * Verify SET options are strings before testing them as strings
  * Fix cluster segfault when dealing with NULL multi bulk replies
    in RedisCluster
  * Fix xReadGroup() must return message id
  * Fix memory leak in rediscluster session handler
  * Fix XInfo() returns false if the stream is empty
  * Relax requirements on set's expire argument
  * Refactor redis_sock_check_liveness
  * PHP8 compatibility
  * Update documentation
  * Add Redis::OPT_NULL_MULTIBULK_AS_NULL setting to treat NULL
    multi bulk replies as NULL instead of [].
  * Allow to specify stream context for rediscluster session handler
  * Add new parameter to RedisCluster to specify stream ssl/tls
    context.
  * Add new parameter to RedisSentinel to specify auth information</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1611316800">- Remove BuildRequires:php7-json (don't need in php7, but in php8 work in core).</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1612267200">- Update to 5.3.3
  * Fix PHP8 Windows includes
  * Fix hash ops for php 8.0.1
  * Disable cloning Redis and RedisCluster objects</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1613563200">- Use _multibuild to also build for php8
- Use php_cfgdir and php_extdir macros to determine location of files</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1613563201">- Refresh spec-file via spec-cleaner.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1616587200">- Update to 5.3.4
  * Fix multi/pipeline segfault on Apple silicon
  * Pass compression flag on HMGET in RedisCluster
  * Abide by ZSTD error return constants
  * Fix timing related CI session tests</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1639915200">- Updated to 5.3.5
  * https://pecl.php.net/package-changelog.php?package=redis&amp;release=5.3.5
  * Added experimental support for detecting a dirty connection.
  * Fixed RedisArray constructor bug.
  * Fixed segfault in redis_setoption_handler.
  * Fixed masters array in the event of a cluster failover.
  * Fixed 32 bit type error.
  * Fixed radix character in certain locales.
  * Fixed ZSTD Validation.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1643112000">- Updated to 5.3.6
  * Fix a segfault in RedisArray::del</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1645099200">- Updated to 5.3.7
  * https://pecl.php.net/package-changelog.php?package=redis&amp;release=5.3.7
  * Fixed RedisArray::[hsz]scan and tests.
  * Fixed RedisArray::scan.
  * Fixed LZF decompression logic.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1670673600">- Remove php7 build for Tumbleweed (PHP 7.4 has reached EOL)</changelog>
</package>
<package pkgid="55fcfe21e361af7829bed933c11059eea71c4ec2e0458d760c6a2ec176307a90" name="php7-redis" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="bp154.2.1"/>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1552651200">- Update to 4.3.0
  * Proper persistent connections pooling implementation
  * RedisArray auth
  * Use zend_string for storing key
  * Add ZPOPMAX and ZPOPMIN support
  * Implement GEORADIUS_RO and GEORADIUSBYMEMBER_RO
  * Add callback parameter to subscribe/psubscribe arginfo
  * Don't check the number affected keys in PS_UPDATE_TIMESTAMP_FUNC
  * Xgroup updates
  * RedisCluster auth
  * Cancel pipeline mode without executing commands
  * Use zend_string for pipeline_cmd
  * Different key hashing algorithms from hash extension
  * Breaking the lock acquire loop in case of network problems
  * Implement consistent hashing algorithm for RedisArray
  * Use zend_string for storing RedisArray hosts
  * Update lzf_compress to be compatible with PECL lzf extension
  * Fix RedisCluster keys memory leak
  * Directly use return_value in RedisCluster::keys method
  * Fix segfault in Redis Cluster with inconsistent configuration
  * Masters info leakfix
  * Refactor redis_sock_read_bulk_reply
  * Remove unused parameter lazy_connect from redis_sock_create
  * Remove useless ZEND_ACC_[C|D]TOR.
  * Documentation improvements
- Added additional settings to redis.ini</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1562068800">- Update to 5.0.0
  This release contains important improvements and breaking changes.
  The most interesting are: drop PHP5 support, RedisCluster slots caching,
  JSON and msgpack serializers, soft deprecation of non-Redis commands.
  * Remove HAVE_SPL
  * Allow compilation without JSON serialization enabled and fixes for
    deprecated helper methods.
  * Enable connection pooling by default
  * Soft deprecate methods that aren't actually Redis commands
  * Enable pooling for cluster slave nodes
  * xInfo response format
  * Make the XREADGROUP optional COUNT and BLOCK arguments nullable
  * Allow PING to take an optional argument
  * Allow ZRANGE to be called either with `true` or `['withscores' =&gt; true]`
  * Allow to specify server address as schema://host
  * Allow persistent_id to be passed as NULL with strict_types enabled
  * Add server address to exception message
  * Adds OPT_REPLY_LITERAL for rawCommand and EVAL
  * JSON serializer
  * Add support for STREAM to the type command
  * Fix TypeError when using built-in constants in `setOption`
  * Handle references in MGET
  * msgpack serializer
  * Add Cluster slots caching
  * Drop PHP5 support
  * Documentation improvements</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1565179200">- Refresh spec-file with manual optmizations
  * Remove version limit from BuildRequires:php7-devel (no actual).
  * Remove BuildRequires:php7-soap (no needed).
  * Add BuildRequires:php7-json (need for tests, but still does not load).
  * Add %make_build and %make_install macros.
- Update to 5.0.2
  * https://pecl.php.net/package-changelog.php?package=redis&amp;release=5.0.2
  * RedisCluster segfaults after second connection with cache_slots enabled.
  * Cleanup TSRMLS_* usage.
  * Replace ulong with zend_ulong.
  * Replace uint with uint32_t.
  * Fix regression for conntecting to ports &gt; 32767.
  * RedisCluster segfaults after second connection with cache_slots enabled.
  * Documentation improvements.</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1572696000">- Update to 5.1.0
  * https://pecl.php.net/package-changelog.php?package=redis&amp;release=5.1.0
  * Fix regression for multihost_distribute_call added in 112c77e3.
  * Fix regression for conntecting to unix sockets with relative path
    added in 1f41da64.
  * Fix unix-socket detection logic broken in 418428fa.
  * Fix memory leak and bug with getLastError for redis_mbulk_reply_assoc
    and redis_mbulk_reply_zipped.
  * Fix bug with password contain "#" for redis_session.
  * Add optional support for Zstd compression, using --enable-redis-ztsd.
    This requires libzstd version &gt;= 1.3.0.
  * Fix overallocation in RedisCluster directed node commands.
  * Also attach slaves when caching cluster slots.
  * Use zend_register_persistent_resource_ex for connection pooling.
  * Refactor redis_session.
  * Documentation improvements.
  * Fix missing null byte in PHP_MINFO_FUNCTION.
  * Remove dead code generic_unsubscribe_cmd.
  * Add documentation for zpopmin and zpopmax.
  * Allow to specify scheme for session handler.</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1575028800">- Update to 5.1.1
  * https://pecl.php.net/package-changelog.php?package=redis&amp;release=5.1.1
  * Fix fail to connect to redis through unix socket.
  * Documentation improvements.</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1583323200">- Update to 5.2.0
  * https://pecl.php.net/package-changelog.php?package=redis&amp;release=5.2.0
  * Include RedisSentinelTest.php in package.xml!
  * Fix -Wmaybe-uninitialized warning.
  * Fix improper destructor when zipping values and scores.
  * Use php_rand instead of php_mt_rand for liveness challenge string.
  * Initial support for RedisSentinel.
  * Fix for ASK redirections.
  * Create specific 'test skipped' exception.
  * Fixed memory leaks in RedisCluster.
  * Fixes for session lifetime values that underflow or overflow.
  * Enables slot caching for Redis Cluster.
  * Support TYPE argument for SCAN.
  * Added challenge/response mechanism for persistent connections.</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1585310400">- Update to 5.2.1
  * https://pecl.php.net/package-changelog.php?package=redis&amp;release=5.2.1
  * Fix arginfo for Redis::zadd.
  * Fix segfault on closing persistent stream.</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1588766400">- Update to 5.2.2
  * https://pecl.php.net/package-changelog.php?package=redis&amp;release=5.2.2
    This is a bugfix release that contains a fix for authentication
    when using persistent connections, and an option to make the
    ECHO challenge response logic optional.
  * Inexpensive liveness check, and making ECHO optional [56898f81] (Pavlo Yatsukhnenko)
  * Move `AUTH` to `redis_sock_server_open` [80f2529b](Pavlo Yatsukhnenko)</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1593777600">- Update to 5.3.0
  * https://pecl.php.net/package-changelog.php?package=redis&amp;release=5.3.0
  * Support for Redis 6 ACLs.
  * LZ4 Compression.
  * Support for new Redis 6 arguments.
  * Support for TLS connections.
  * New option Redis::SCAN_PREFIX, Redis::SCAN_NOPREFIX.
  * Configurable unit test authentication arguments.
  * Improved cluster slot caching mechanism to fix a couple
    of bugs and make it more efficient.
  * Stop calling Redis constructor when creating a RedisArray.
  * Use ZEND_LONG_FMT instead of system `long`.
  * Use long for SCAN iteration to fix potential overflow.
  * Avoid use-after-free of RediSock.
  * Use the portable `ZEND_LONG_FORMAT` family
    instead of C format specifiers.
  * PHP 8 compatibility.</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1594209600">- Update to 5.3.1
  * https://pecl.php.net/package-changelog.php?package=redis&amp;release=5.3.1
  * Properly clean up on session start failure.
  * Treat NULL as a failure for redis_extract_auth_info.
  * Don't dereference a NULL zend_string or efree one.
  * Fix config.m4 messages and test for and include php_hash.h.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1603368000">- Update to 5.3.2
  * Use "%.17g" sprintf format for doubles as done in Redis server.
  * Allow to pass NULL as RedisCluster stream context options.
  * Verify SET options are strings before testing them as strings
  * Fix cluster segfault when dealing with NULL multi bulk replies
    in RedisCluster
  * Fix xReadGroup() must return message id
  * Fix memory leak in rediscluster session handler
  * Fix XInfo() returns false if the stream is empty
  * Relax requirements on set's expire argument
  * Refactor redis_sock_check_liveness
  * PHP8 compatibility
  * Update documentation
  * Add Redis::OPT_NULL_MULTIBULK_AS_NULL setting to treat NULL
    multi bulk replies as NULL instead of [].
  * Allow to specify stream context for rediscluster session handler
  * Add new parameter to RedisCluster to specify stream ssl/tls
    context.
  * Add new parameter to RedisSentinel to specify auth information</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1611316800">- Remove BuildRequires:php7-json (don't need in php7, but in php8 work in core).</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1612267200">- Update to 5.3.3
  * Fix PHP8 Windows includes
  * Fix hash ops for php 8.0.1
  * Disable cloning Redis and RedisCluster objects</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1613563200">- Use _multibuild to also build for php8
- Use php_cfgdir and php_extdir macros to determine location of files</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1613563201">- Refresh spec-file via spec-cleaner.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1616587200">- Update to 5.3.4
  * Fix multi/pipeline segfault on Apple silicon
  * Pass compression flag on HMGET in RedisCluster
  * Abide by ZSTD error return constants
  * Fix timing related CI session tests</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1639915200">- Updated to 5.3.5
  * https://pecl.php.net/package-changelog.php?package=redis&amp;release=5.3.5
  * Added experimental support for detecting a dirty connection.
  * Fixed RedisArray constructor bug.
  * Fixed segfault in redis_setoption_handler.
  * Fixed masters array in the event of a cluster failover.
  * Fixed 32 bit type error.
  * Fixed radix character in certain locales.
  * Fixed ZSTD Validation.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1643112000">- Updated to 5.3.6
  * Fix a segfault in RedisArray::del</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1645099200">- Updated to 5.3.7
  * https://pecl.php.net/package-changelog.php?package=redis&amp;release=5.3.7
  * Fixed RedisArray::[hsz]scan and tests.
  * Fixed RedisArray::scan.
  * Fixed LZF decompression logic.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1670673600">- Remove php7 build for Tumbleweed (PHP 7.4 has reached EOL)</changelog>
</package>
<package pkgid="1e23f31304602b44b0f276970cb25970cac0571ecec402db523b64d1e41371d2" name="php7-ssh2" arch="aarch64">
  <version epoch="0" ver="1.3.1" rel="bp154.2.1"/>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1640433600">- Initial release version 1.3.1</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1670673600">- Remove php7 build for Tumbleweed (PHP 7.4 has reached EOL)</changelog>
</package>
<package pkgid="d94100dc0e7e22a6f56e65c687dad1d0db19e1c6fe4c78af09c2e92d392064f4" name="php7-ssh2" arch="i586">
  <version epoch="0" ver="1.3.1" rel="bp154.2.1"/>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1640433600">- Initial release version 1.3.1</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1670673600">- Remove php7 build for Tumbleweed (PHP 7.4 has reached EOL)</changelog>
</package>
<package pkgid="25b5cef1b6a64fa8070875fbb790bb2e706892a246cddbb2e3e1d71347b9696d" name="php7-ssh2" arch="ppc64le">
  <version epoch="0" ver="1.3.1" rel="bp154.2.1"/>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1640433600">- Initial release version 1.3.1</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1670673600">- Remove php7 build for Tumbleweed (PHP 7.4 has reached EOL)</changelog>
</package>
<package pkgid="cd5807e3bb4aa3358d9812005ac2356ac880c798c808eaa753d71164339d8f43" name="php7-ssh2" arch="s390x">
  <version epoch="0" ver="1.3.1" rel="bp154.2.1"/>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1640433600">- Initial release version 1.3.1</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1670673600">- Remove php7 build for Tumbleweed (PHP 7.4 has reached EOL)</changelog>
</package>
<package pkgid="93305bed89e74af56b4bf00378a6a9299b3479605caf76c4bdda39fe3a3bd7fa" name="php7-ssh2" arch="src">
  <version epoch="0" ver="1.3.1" rel="bp154.2.1"/>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1640433600">- Initial release version 1.3.1</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1670673600">- Remove php7 build for Tumbleweed (PHP 7.4 has reached EOL)</changelog>
</package>
<package pkgid="80e12bfc7031331034e85cfdcbc06304694cd8ac367ca42d8bbf190aee124df1" name="php7-ssh2" arch="x86_64">
  <version epoch="0" ver="1.3.1" rel="bp154.2.1"/>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1640433600">- Initial release version 1.3.1</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1670673600">- Remove php7 build for Tumbleweed (PHP 7.4 has reached EOL)</changelog>
</package>
<package pkgid="19b2f07fed996e867a500df5aeba204a8b44b92194d79a8c375b2a8aef0c79b8" name="php8-imagick" arch="aarch64">
  <version epoch="0" ver="3.7.0" rel="bp154.2.4.1"/>
  <changelog author="jweberhofer@weberhofer.at" date="1486209600">- Upgrade to version 3.4.3
  - Fixes:
  * Avoid internal segfault.
  * Imagick::getRegistry() now throws an exception if the key does not exist,
    rather than terminating the program.
  * Prevent attempts to resize image to zero width or height, which is not
    supported by ImageMagick.
  * Fix compiling on Windows issue.
  * Imagick::transformImage and Imagick::orderedPosterizeImage now correctly
    excluded from
  * Bug 72311 - compiling against PHP 7.1.
  * Bug 72226 - regression for Imagick Exception classes being final on 7.x
  * Corrected reference of constants. Imagick::METRIC_MEANERRORPERPIXELMETRIC
    from MeanErrorPerPixelMetric to MeanErrorPerPixelErrorMetric.
    Imagick::METRIC_PEAKSIGNALTONOISERATIO from PeakSignalToNoiseRatioMetric
    to PeakSignalToNoiseRatioErrorMetric
  - Added:
  * function Imagick::setImageAlpha() which replaces Imagick::setOpacity()
  * function Imagick::identifyImageType() : int returns one of the
    Imagick::IMGTYPE_* constants
  * Imagick::INTERPOLATE_NEAREST_PIXEL for ImageMagick &gt;= 7
  * In ImageMagick, the names of two filter constants were corrected to the
    standard spelling. Support for the new spelling has been added. The old
    constants are left in place for legacy support.
    Legacy: FILTER_HANNING, new name: FILTER_HANN
    Legacy: FILTER_WELSH, new name: FILTER_WELCH
  * The Imagick::IMGTYPE_*MATTE* constants are deprecated for ImageMagick 7.
  * Instead an appropriate Imagick::IMGTYPE_*MATTE* should be used.
    IMGTYPE_GRAYSCALEMATTE =&gt; IMGTYPE_GRAYSCALEALPHA
    IMGTYPE_PALETTEMATTE =&gt; IMGTYPE_PALETTEALPHA
    IMGTYPE_TRUECOLORALPHA =&gt; IMGTYPE_TRUECOLORMATTE
    IMGTYPE_COLORSEPARATIONALPHA =&gt; IMGTYPE_COLORSEPARATIONMATTE
    IMGTYPE_PALETTEBILEVELALPHA =&gt; IMGTYPE_PALETTEBILEVELMATTE
  * Several ALPHACHANNEL_* constants are only available in ImageMagick &lt; 7
    IMAGICK_REGISTER_CONST_LONG("ALPHACHANNEL_RESET", ResetAlphaChannel);
    IMAGICK_REGISTER_CONST_LONG("ALPHACHANNEL_COPY", CopyAlphaChannel);
    IMAGICK_REGISTER_CONST_LONG("ALPHACHANNEL_OPAQUE", OpaqueAlphaChannel);
  * Several ALPHACHANNEL_* constants are only available in ImageMagick &gt;= 7.
    These constants re-use the values of the constants removed.
    IMAGICK_REGISTER_CONST_LONG("ALPHACHANNEL_ON", OnAlphaChannel);
    IMAGICK_REGISTER_CONST_LONG("ALPHACHANNEL_OFF", OffAlphaChannel);
    IMAGICK_REGISTER_CONST_LONG("ALPHACHANNEL_DISCRETE", DiscreteAlphaChannel);</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1491566400">- removed -devel package which is of no use
- Simplified spec in the build section
- Enabled tests</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1499774400">- Reconfigurate spec-file</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1520337600">- remove double ./configure and build
- imagick-reproducible.patch: We only care if ImageMagick
  is binary compatible, not about what version the extension
  is compiled against, which changes on every minor
  revision.</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1520510400">- Add %licence macros.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521201600">- add a Conflict between this extension and gmagick.
  (boo#1085595)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521201601">- Build module with fvisibility=hidden, this should
  avoid additional symbol conflicts.</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1525608000">Fixes for bnc#1091929
- Due to a packaging change in ghostscript the ghostscript-fonts-std
  has to be included explicitly to successfully run the tests. Elsewise
  the required helvetica-font is missing.
- ImageMagick's commit 97a319 makes ImagaMagick to no longer throw an
  an exception if image registry tag is not found.
  Added imagic-3.4.3-relax_test_150_to_follow_upstream_change.patch</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1525694400">- Print test failures in detail</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1525867200">- removed Test 229 which fails occasionally with timeouts
  on the OBS build server</changelog>
  <changelog author="schwab@suse.de" date="1549972800">- Use bigger timeout when running under qemu</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1557230400">- removed patch imagic-3.4.3-relax_test_150_to_follow_upstream_change.patch
  which is no longer necessary.
- Upgrade to version 3.4.4
  Added:
  * function Imagick::optimizeImageTransparency()
  * METRIC_STRUCTURAL_SIMILARITY_ERROR
  * METRIC_STRUCTURAL_DISSIMILARITY_ERROR
  * COMPRESSION_ZSTD - https://github.com/facebook/zstd
  * COMPRESSION_WEBP
  * CHANNEL_COMPOSITE_MASK
  * FILTER_CUBIC_SPLINE - "Define the lobes with the -define
    filter:lobes={2,3,4}
    (reference https://imagemagick.org/discourse-server/viewtopic.php?f=2&amp;t=32506)."
  * Imagick now explicitly conflicts with the Gmagick extension.
  Fixes:
  * Correct version check to make RemoveAlphaChannel and FlattenAlphaChannel
    be available when using Imagick with ImageMagick version 6.7.8-x
  * Bug 77128 - Imagick::setImageInterpolateMethod() not available on Windows
  * Prevent memory leak when ImagickPixel::__construct called after object instantiation.
  * Prevent segfault when ImagickPixel internal constructor not called.
  * Imagick::setResourceLimit support for values larger than 2GB (2^31) on 32bit platforms.
  * Corrected memory overwrite in Imagick::colorDecisionListImage()
  * Bug 77791 - ImagickKernel::fromMatrix() out of bounds write.
    Fixes CVE-2019-11037, boo#1135418
  The following functions have been deprecated:
  * ImagickDraw, matte
  * Imagick::averageimages
  * Imagick::colorfloodfillimage
  * Imagick::filter
  * Imagick::flattenimages
  * Imagick::getimageattribute
  * Imagick::getimagechannelextrema
  * Imagick::getimageclipmask
  * Imagick::getimageextrema
  * Imagick::getimageindex
  * Imagick::getimagematte
  * Imagick::getimagemattecolor
  * Imagick::getimagesize
  * Imagick::mapimage
  * Imagick::mattefloodfillimage
  * Imagick::medianfilterimage
  * Imagick::mosaicimages
  * Imagick::orderedposterizeimage
  * Imagick::paintfloodfillimage
  * Imagick::paintopaqueimage
  * Imagick::painttransparentimage
  * Imagick::radialblurimage
  * Imagick::recolorimage
  * Imagick::reducenoiseimage
  * Imagick::roundcornersimage
  * Imagick::roundcorners
  * Imagick::setimageattribute
  * Imagick::setimagebias
  * Imagick::setimageclipmask
  * Imagick::setimageindex
  * Imagick::setimagemattecolor
  * Imagick::setimagebiasquantum
  * Imagick::setimageopacity
  * Imagick::transformimage</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1610107200">- fix %defattr preventing setting executable bits on imagick.so</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1613649600">- Use _multibuild (prepare to build for php8)
- Use php_cfgdir and php_extdir macros to determine location of files</changelog>
  <changelog author="munix9@googlemail.com" date="1624190400">- Upgrade to version 3.5.0
  - Fixed multiple parameter information issues found in 3.5.0RC1.
  - ImageMagick 7 is still not widely available on systems.
    So contrary to previous plans, ImageMagick 6 support will
    continue for now.
    But users are recommeded to use ImageMagick 7 if possible.
  - Method names have been changed to not be all lower case. Both
    method names and parameter information is built from the
    Imagick*.stub.php files.
  - Prevent accidental creation of zero dimension images.
    ImageMagick doesn't prevent creation of zero dimension images,
    but will give an error when that image is used. I don't think
    this will affect any correctly program, but if it does, and
    you need to re-enable zero dimension images, please open an
    issue at https://phpimagick.com/issues
  - Various pieces of work have been done to make GOMP not
    segfault including:
  * Call omp_pause_resource_all when available during shutdown.
  * Added the 'imagick.shutdown_sleep_count' (default 10) and
    'imagick.set_single_thread' (default On). Both of these
    exist to mitigate the segaults on shutdown.
  - Fixes:
  * Correct version check to make RemoveAlphaChannel and
    FlattenAlphaChannel be available when using Imagick with
    ImageMagick version 6.7.8-x
  * Imagick::morphology now no longer ignores channel parameter
  - Added:
  * PHP 8.0 support.
  * Location check for ImageMagick 7 for NixOS and Brew.
  * Imagick::houghLineImage(int $width, int $height, float $threshold): bool {}
  * Imagick::setImagePixelColor(int $x, int $y, ImagickPixel|string $color)
  * Imagick::setImageMask(Imagick $clip_mask, int $pixelmask_type)
  * Imagick::getImageMask(int $pixelmask_type)
  * Imagick::VIRTUALPIXELMETHOD_DITHER
  * Imagick::VIRTUALPIXELMETHOD_RANDOM
  * Imagick::COMPOSITE_FREEZE
  * Imagick::COMPOSITE_INTERPOLATE
  * Imagick::COMPOSITE_NEGATE
  * Imagick::COMPOSITE_REFLECT
  * Imagick::COMPOSITE_SOFTBURN
  * Imagick::COMPOSITE_SOFTDODGE
  * Imagick::COMPOSITE_STAMP
  * Imagick::COMPOSITE_RMSE
  * Imagick::COMPRESSION_DWAA
  * Imagick::COMPRESSION_DWAB
  * Imagick::EVALUATE_INVERSE_LOG
  * Imagick::COLORSPACE_DISPLAYP3
  * Imagick::COLORSPACE_ADOBE98
  * Imagick::COLORSPACE_PROPHOTO
  * Imagick::COLORSPACE_JZAZBZ
  * Imagick::DISTORTION_RIGID_AFFINE
  * Imagick::DISTORTION_BARRELINVERSE
  * Imagick::STATISTIC_ROOT_MEAN_SQUARE</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1636459200">- Upgrade to version 3.5.1
  - Better detection of appropriate OpenMP library to use, i.e. GCC
    or Clang.</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1636545600">- added imagick-fix-457-ensure-format-is-always-lowercase.patch
  to fix test-failures in latest tumbleweed/factory builds
  [#]gh/Imagick/imagick#457</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1639137600">- Upgrade to version 3.6.0
  - No change from 3.6.0RC2
  - removed imagick-fix-457-ensure-format-is-always-lowercase.patch
    (upstreamed)
- Upgrade to version 3.6.0RC2
  - Fixes:
  * Remove deprecated message from Imagick::roundCorners()
  - Added:
  * Imagick::addNoiseImageWithAttenuate()
- Upgrade to version 3.6.0RC1
  - Imagick::getImageInterlaceScheme is undeprecated. It's the
    appropriate function to call to get the image interlace setting.
  - Image formats are now normalised to lower case.
  - Imagick::getImageIndex and Imagick::setImageIndex are undeprecated
    and work on ImageMagick 7. They call MagickGetIteratorIndex and
    MagickSetIteratorIndex internally.
  - Imagick::averageImages is undeprecated. For IM 7 it now calls
    EvaluateImages(wand-&gt;images,MeanEvaluateOperator).
  - Imagick::flattenImages is undeprecated. For IM 7 it now calls
    MagickMergeImageLayers(intern-&gt;magick_wand, FlattenLayer);
    internally.
  - Imagick::getImageSize is undeprecated. For IM 7 it now calls
    MagickGetImageLength internally.
  - Imagick::roundCornersImage is undeprecated and available on IM7.
  - Fixes:
  * Imagick::borderImage() changed internally to use OverCompositeOp
    rather than AtopCompositeOp for ImageMagick &gt; 7. If you need the
    old behaviour, please use Imagick::borderImageWithComposite()
    instead, which allows you to set the composite method.
  * Imagick::frameImage() changed internally to use OverCompositeOp
    rather than AtopCompositeOp for ImageMagick &gt; 7. If you need the
    old behaviour, please use
    Imagick::frameImageWithComposite()instead, which allows you to
    set the composite method.
  * Imagick::profileImage() fixed to allow null as second paramter
    again. If you can't upgrade to this version yet, pass in "",
    which has the same effect.
  * Imagick::ALPHACHANNEL_COPY and Imagick::ALPHACHANNEL_OPAQUE should
    be available on IM7.
  * Imagick::setImageMatteColor() should be available on IM7.
  - Added:
  * Imagick::borderImageWithComposite() same as Imagick::borderImage()
    but allows user to set composite operator used.
  * Imagick::frameImageWithComposite() same as Imagick::frameImage()
    but allows user to set composite operator used.
  * function Imagick::cannyEdgeImage
  * function Imagick::setSeed
  * function Imagick::waveletDenoiseImage
  * function Imagick::meanShiftImage
  * function Imagick::kmeansImage
  * function Imagick::rangeThresholdImage
  * function Imagick::autoThresholdImage
  * function Imagick::bilateralBlurImage
  * function Imagick::claheImage
  * function Imagick::channelFxImage
  * function Imagick::colorThresholdImage
  * function Imagick::complexImages
  * function Imagick::interpolativeResizeImage
  * function Imagick::levelImageColors
  * function Imagick::levelizeImage
  * function Imagick::orderedDitherImage
  * function Imagick::whiteBalanceImage</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1641988800">- Upgrade to version 3.7.0
  - Added:
  * Imagick::COMPOSITE_SALIENCY_BLEND
- Upgrade to version 3.7.0RC1
  - Added:
  * function Imagick::deleteOption(string $option): bool {}
  * function Imagick::getBackgroundColor(): ImagickPixel {}
  * function Imagick::getImageArtifacts(string $pattern = "*"): array {}
  * function Imagick::getImageKurtosis(): array {}
  * function Imagick::getImageMean(): array {}
  * function Imagick::getImageRange(): array {}
  * function Imagick::getInterpolateMethod(): int {}
  * function Imagick::getOptions(string $pattern = "*"): array {}
  * function Imagick::getOrientation(): int {}
  * function Imagick::getResolution(): array {}
  * function Imagick::getType(): int {}
  * function Imagick::implodeImageWithMethod(float $radius,
    int $pixel_interpolate_method): bool {}
  * function Imagick::oilPaintImageWithSigma(float $radius, float $sigma)
  * function Imagick::polaroidWithTextAndMethod(ImagickDraw $settings,
    float $angle, string $caption, int $method): bool {}
  * function Imagick::polynomialImage(array $terms): bool {}
  * function Imagick::setDepth(int $depth): bool {}
  * function Imagick::setExtract(string $geometry): bool {}
  * function Imagick::setInterpolateMethod(int $method): bool{}
  * function Imagick::setOrientation(int $orientation): bool {}
  * function Imagick::spreadImageWithMethod(float $radius,
    int $interpolate_method): bool {}
  * function Imagick::swirlImageWithMethod(float $degrees,
    int $interpolate_method): bool {}
  * function Imagick::waveImageWithMethod(float $amplitude,
    float $length, int $interpolate_method): bool {}
  * Imagick::IMAGE_TYPE_BILEVEL
  * Imagick::IMAGE_TYPE_GRAYSCALE
  * Imagick::IMAGE_TYPE_GRAYSCALE_ALPHA
  * Imagick::IMAGE_TYPE_PALETTE
  * Imagick::IMAGE_TYPE_PALETTE_ALPHA
  * Imagick::IMAGE_TYPE_TRUE_COLOR
  * Imagick::IMAGE_TYPE_TRUE_COLOR_ALPHA
  * Imagick::IMAGE_TYPE_COLOR_SEPARATION
  * Imagick::IMAGE_TYPE_COLOR_SEPARATION_ALPHA
  * Imagick::IMAGE_TYPE_OPTIMIZE
  * Imagick::IMAGE_TYPE_PALETTE_BILEVEL_ALPHA
  * Imagick::COMPOSITE_SEAMLESS_BLEND
  - Changed:
  * Imagick::setImageArtifact can now take null for the string value.
  * Return type for Imagick::getImageArtifact is string|null instead of
    string.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1664539200">- buildrequire autoconf. (bsc#1201574)</changelog>
</package>
<package pkgid="41ab10d2ca6351adc580b1077df07e23f86e3d34daa3d9ee5cec9c7247e3c40a" name="php8-imagick" arch="i586">
  <version epoch="0" ver="3.7.0" rel="bp154.2.4.1"/>
  <changelog author="jweberhofer@weberhofer.at" date="1486209600">- Upgrade to version 3.4.3
  - Fixes:
  * Avoid internal segfault.
  * Imagick::getRegistry() now throws an exception if the key does not exist,
    rather than terminating the program.
  * Prevent attempts to resize image to zero width or height, which is not
    supported by ImageMagick.
  * Fix compiling on Windows issue.
  * Imagick::transformImage and Imagick::orderedPosterizeImage now correctly
    excluded from
  * Bug 72311 - compiling against PHP 7.1.
  * Bug 72226 - regression for Imagick Exception classes being final on 7.x
  * Corrected reference of constants. Imagick::METRIC_MEANERRORPERPIXELMETRIC
    from MeanErrorPerPixelMetric to MeanErrorPerPixelErrorMetric.
    Imagick::METRIC_PEAKSIGNALTONOISERATIO from PeakSignalToNoiseRatioMetric
    to PeakSignalToNoiseRatioErrorMetric
  - Added:
  * function Imagick::setImageAlpha() which replaces Imagick::setOpacity()
  * function Imagick::identifyImageType() : int returns one of the
    Imagick::IMGTYPE_* constants
  * Imagick::INTERPOLATE_NEAREST_PIXEL for ImageMagick &gt;= 7
  * In ImageMagick, the names of two filter constants were corrected to the
    standard spelling. Support for the new spelling has been added. The old
    constants are left in place for legacy support.
    Legacy: FILTER_HANNING, new name: FILTER_HANN
    Legacy: FILTER_WELSH, new name: FILTER_WELCH
  * The Imagick::IMGTYPE_*MATTE* constants are deprecated for ImageMagick 7.
  * Instead an appropriate Imagick::IMGTYPE_*MATTE* should be used.
    IMGTYPE_GRAYSCALEMATTE =&gt; IMGTYPE_GRAYSCALEALPHA
    IMGTYPE_PALETTEMATTE =&gt; IMGTYPE_PALETTEALPHA
    IMGTYPE_TRUECOLORALPHA =&gt; IMGTYPE_TRUECOLORMATTE
    IMGTYPE_COLORSEPARATIONALPHA =&gt; IMGTYPE_COLORSEPARATIONMATTE
    IMGTYPE_PALETTEBILEVELALPHA =&gt; IMGTYPE_PALETTEBILEVELMATTE
  * Several ALPHACHANNEL_* constants are only available in ImageMagick &lt; 7
    IMAGICK_REGISTER_CONST_LONG("ALPHACHANNEL_RESET", ResetAlphaChannel);
    IMAGICK_REGISTER_CONST_LONG("ALPHACHANNEL_COPY", CopyAlphaChannel);
    IMAGICK_REGISTER_CONST_LONG("ALPHACHANNEL_OPAQUE", OpaqueAlphaChannel);
  * Several ALPHACHANNEL_* constants are only available in ImageMagick &gt;= 7.
    These constants re-use the values of the constants removed.
    IMAGICK_REGISTER_CONST_LONG("ALPHACHANNEL_ON", OnAlphaChannel);
    IMAGICK_REGISTER_CONST_LONG("ALPHACHANNEL_OFF", OffAlphaChannel);
    IMAGICK_REGISTER_CONST_LONG("ALPHACHANNEL_DISCRETE", DiscreteAlphaChannel);</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1491566400">- removed -devel package which is of no use
- Simplified spec in the build section
- Enabled tests</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1499774400">- Reconfigurate spec-file</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1520337600">- remove double ./configure and build
- imagick-reproducible.patch: We only care if ImageMagick
  is binary compatible, not about what version the extension
  is compiled against, which changes on every minor
  revision.</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1520510400">- Add %licence macros.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521201600">- add a Conflict between this extension and gmagick.
  (boo#1085595)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521201601">- Build module with fvisibility=hidden, this should
  avoid additional symbol conflicts.</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1525608000">Fixes for bnc#1091929
- Due to a packaging change in ghostscript the ghostscript-fonts-std
  has to be included explicitly to successfully run the tests. Elsewise
  the required helvetica-font is missing.
- ImageMagick's commit 97a319 makes ImagaMagick to no longer throw an
  an exception if image registry tag is not found.
  Added imagic-3.4.3-relax_test_150_to_follow_upstream_change.patch</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1525694400">- Print test failures in detail</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1525867200">- removed Test 229 which fails occasionally with timeouts
  on the OBS build server</changelog>
  <changelog author="schwab@suse.de" date="1549972800">- Use bigger timeout when running under qemu</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1557230400">- removed patch imagic-3.4.3-relax_test_150_to_follow_upstream_change.patch
  which is no longer necessary.
- Upgrade to version 3.4.4
  Added:
  * function Imagick::optimizeImageTransparency()
  * METRIC_STRUCTURAL_SIMILARITY_ERROR
  * METRIC_STRUCTURAL_DISSIMILARITY_ERROR
  * COMPRESSION_ZSTD - https://github.com/facebook/zstd
  * COMPRESSION_WEBP
  * CHANNEL_COMPOSITE_MASK
  * FILTER_CUBIC_SPLINE - "Define the lobes with the -define
    filter:lobes={2,3,4}
    (reference https://imagemagick.org/discourse-server/viewtopic.php?f=2&amp;t=32506)."
  * Imagick now explicitly conflicts with the Gmagick extension.
  Fixes:
  * Correct version check to make RemoveAlphaChannel and FlattenAlphaChannel
    be available when using Imagick with ImageMagick version 6.7.8-x
  * Bug 77128 - Imagick::setImageInterpolateMethod() not available on Windows
  * Prevent memory leak when ImagickPixel::__construct called after object instantiation.
  * Prevent segfault when ImagickPixel internal constructor not called.
  * Imagick::setResourceLimit support for values larger than 2GB (2^31) on 32bit platforms.
  * Corrected memory overwrite in Imagick::colorDecisionListImage()
  * Bug 77791 - ImagickKernel::fromMatrix() out of bounds write.
    Fixes CVE-2019-11037, boo#1135418
  The following functions have been deprecated:
  * ImagickDraw, matte
  * Imagick::averageimages
  * Imagick::colorfloodfillimage
  * Imagick::filter
  * Imagick::flattenimages
  * Imagick::getimageattribute
  * Imagick::getimagechannelextrema
  * Imagick::getimageclipmask
  * Imagick::getimageextrema
  * Imagick::getimageindex
  * Imagick::getimagematte
  * Imagick::getimagemattecolor
  * Imagick::getimagesize
  * Imagick::mapimage
  * Imagick::mattefloodfillimage
  * Imagick::medianfilterimage
  * Imagick::mosaicimages
  * Imagick::orderedposterizeimage
  * Imagick::paintfloodfillimage
  * Imagick::paintopaqueimage
  * Imagick::painttransparentimage
  * Imagick::radialblurimage
  * Imagick::recolorimage
  * Imagick::reducenoiseimage
  * Imagick::roundcornersimage
  * Imagick::roundcorners
  * Imagick::setimageattribute
  * Imagick::setimagebias
  * Imagick::setimageclipmask
  * Imagick::setimageindex
  * Imagick::setimagemattecolor
  * Imagick::setimagebiasquantum
  * Imagick::setimageopacity
  * Imagick::transformimage</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1610107200">- fix %defattr preventing setting executable bits on imagick.so</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1613649600">- Use _multibuild (prepare to build for php8)
- Use php_cfgdir and php_extdir macros to determine location of files</changelog>
  <changelog author="munix9@googlemail.com" date="1624190400">- Upgrade to version 3.5.0
  - Fixed multiple parameter information issues found in 3.5.0RC1.
  - ImageMagick 7 is still not widely available on systems.
    So contrary to previous plans, ImageMagick 6 support will
    continue for now.
    But users are recommeded to use ImageMagick 7 if possible.
  - Method names have been changed to not be all lower case. Both
    method names and parameter information is built from the
    Imagick*.stub.php files.
  - Prevent accidental creation of zero dimension images.
    ImageMagick doesn't prevent creation of zero dimension images,
    but will give an error when that image is used. I don't think
    this will affect any correctly program, but if it does, and
    you need to re-enable zero dimension images, please open an
    issue at https://phpimagick.com/issues
  - Various pieces of work have been done to make GOMP not
    segfault including:
  * Call omp_pause_resource_all when available during shutdown.
  * Added the 'imagick.shutdown_sleep_count' (default 10) and
    'imagick.set_single_thread' (default On). Both of these
    exist to mitigate the segaults on shutdown.
  - Fixes:
  * Correct version check to make RemoveAlphaChannel and
    FlattenAlphaChannel be available when using Imagick with
    ImageMagick version 6.7.8-x
  * Imagick::morphology now no longer ignores channel parameter
  - Added:
  * PHP 8.0 support.
  * Location check for ImageMagick 7 for NixOS and Brew.
  * Imagick::houghLineImage(int $width, int $height, float $threshold): bool {}
  * Imagick::setImagePixelColor(int $x, int $y, ImagickPixel|string $color)
  * Imagick::setImageMask(Imagick $clip_mask, int $pixelmask_type)
  * Imagick::getImageMask(int $pixelmask_type)
  * Imagick::VIRTUALPIXELMETHOD_DITHER
  * Imagick::VIRTUALPIXELMETHOD_RANDOM
  * Imagick::COMPOSITE_FREEZE
  * Imagick::COMPOSITE_INTERPOLATE
  * Imagick::COMPOSITE_NEGATE
  * Imagick::COMPOSITE_REFLECT
  * Imagick::COMPOSITE_SOFTBURN
  * Imagick::COMPOSITE_SOFTDODGE
  * Imagick::COMPOSITE_STAMP
  * Imagick::COMPOSITE_RMSE
  * Imagick::COMPRESSION_DWAA
  * Imagick::COMPRESSION_DWAB
  * Imagick::EVALUATE_INVERSE_LOG
  * Imagick::COLORSPACE_DISPLAYP3
  * Imagick::COLORSPACE_ADOBE98
  * Imagick::COLORSPACE_PROPHOTO
  * Imagick::COLORSPACE_JZAZBZ
  * Imagick::DISTORTION_RIGID_AFFINE
  * Imagick::DISTORTION_BARRELINVERSE
  * Imagick::STATISTIC_ROOT_MEAN_SQUARE</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1636459200">- Upgrade to version 3.5.1
  - Better detection of appropriate OpenMP library to use, i.e. GCC
    or Clang.</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1636545600">- added imagick-fix-457-ensure-format-is-always-lowercase.patch
  to fix test-failures in latest tumbleweed/factory builds
  [#]gh/Imagick/imagick#457</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1639137600">- Upgrade to version 3.6.0
  - No change from 3.6.0RC2
  - removed imagick-fix-457-ensure-format-is-always-lowercase.patch
    (upstreamed)
- Upgrade to version 3.6.0RC2
  - Fixes:
  * Remove deprecated message from Imagick::roundCorners()
  - Added:
  * Imagick::addNoiseImageWithAttenuate()
- Upgrade to version 3.6.0RC1
  - Imagick::getImageInterlaceScheme is undeprecated. It's the
    appropriate function to call to get the image interlace setting.
  - Image formats are now normalised to lower case.
  - Imagick::getImageIndex and Imagick::setImageIndex are undeprecated
    and work on ImageMagick 7. They call MagickGetIteratorIndex and
    MagickSetIteratorIndex internally.
  - Imagick::averageImages is undeprecated. For IM 7 it now calls
    EvaluateImages(wand-&gt;images,MeanEvaluateOperator).
  - Imagick::flattenImages is undeprecated. For IM 7 it now calls
    MagickMergeImageLayers(intern-&gt;magick_wand, FlattenLayer);
    internally.
  - Imagick::getImageSize is undeprecated. For IM 7 it now calls
    MagickGetImageLength internally.
  - Imagick::roundCornersImage is undeprecated and available on IM7.
  - Fixes:
  * Imagick::borderImage() changed internally to use OverCompositeOp
    rather than AtopCompositeOp for ImageMagick &gt; 7. If you need the
    old behaviour, please use Imagick::borderImageWithComposite()
    instead, which allows you to set the composite method.
  * Imagick::frameImage() changed internally to use OverCompositeOp
    rather than AtopCompositeOp for ImageMagick &gt; 7. If you need the
    old behaviour, please use
    Imagick::frameImageWithComposite()instead, which allows you to
    set the composite method.
  * Imagick::profileImage() fixed to allow null as second paramter
    again. If you can't upgrade to this version yet, pass in "",
    which has the same effect.
  * Imagick::ALPHACHANNEL_COPY and Imagick::ALPHACHANNEL_OPAQUE should
    be available on IM7.
  * Imagick::setImageMatteColor() should be available on IM7.
  - Added:
  * Imagick::borderImageWithComposite() same as Imagick::borderImage()
    but allows user to set composite operator used.
  * Imagick::frameImageWithComposite() same as Imagick::frameImage()
    but allows user to set composite operator used.
  * function Imagick::cannyEdgeImage
  * function Imagick::setSeed
  * function Imagick::waveletDenoiseImage
  * function Imagick::meanShiftImage
  * function Imagick::kmeansImage
  * function Imagick::rangeThresholdImage
  * function Imagick::autoThresholdImage
  * function Imagick::bilateralBlurImage
  * function Imagick::claheImage
  * function Imagick::channelFxImage
  * function Imagick::colorThresholdImage
  * function Imagick::complexImages
  * function Imagick::interpolativeResizeImage
  * function Imagick::levelImageColors
  * function Imagick::levelizeImage
  * function Imagick::orderedDitherImage
  * function Imagick::whiteBalanceImage</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1641988800">- Upgrade to version 3.7.0
  - Added:
  * Imagick::COMPOSITE_SALIENCY_BLEND
- Upgrade to version 3.7.0RC1
  - Added:
  * function Imagick::deleteOption(string $option): bool {}
  * function Imagick::getBackgroundColor(): ImagickPixel {}
  * function Imagick::getImageArtifacts(string $pattern = "*"): array {}
  * function Imagick::getImageKurtosis(): array {}
  * function Imagick::getImageMean(): array {}
  * function Imagick::getImageRange(): array {}
  * function Imagick::getInterpolateMethod(): int {}
  * function Imagick::getOptions(string $pattern = "*"): array {}
  * function Imagick::getOrientation(): int {}
  * function Imagick::getResolution(): array {}
  * function Imagick::getType(): int {}
  * function Imagick::implodeImageWithMethod(float $radius,
    int $pixel_interpolate_method): bool {}
  * function Imagick::oilPaintImageWithSigma(float $radius, float $sigma)
  * function Imagick::polaroidWithTextAndMethod(ImagickDraw $settings,
    float $angle, string $caption, int $method): bool {}
  * function Imagick::polynomialImage(array $terms): bool {}
  * function Imagick::setDepth(int $depth): bool {}
  * function Imagick::setExtract(string $geometry): bool {}
  * function Imagick::setInterpolateMethod(int $method): bool{}
  * function Imagick::setOrientation(int $orientation): bool {}
  * function Imagick::spreadImageWithMethod(float $radius,
    int $interpolate_method): bool {}
  * function Imagick::swirlImageWithMethod(float $degrees,
    int $interpolate_method): bool {}
  * function Imagick::waveImageWithMethod(float $amplitude,
    float $length, int $interpolate_method): bool {}
  * Imagick::IMAGE_TYPE_BILEVEL
  * Imagick::IMAGE_TYPE_GRAYSCALE
  * Imagick::IMAGE_TYPE_GRAYSCALE_ALPHA
  * Imagick::IMAGE_TYPE_PALETTE
  * Imagick::IMAGE_TYPE_PALETTE_ALPHA
  * Imagick::IMAGE_TYPE_TRUE_COLOR
  * Imagick::IMAGE_TYPE_TRUE_COLOR_ALPHA
  * Imagick::IMAGE_TYPE_COLOR_SEPARATION
  * Imagick::IMAGE_TYPE_COLOR_SEPARATION_ALPHA
  * Imagick::IMAGE_TYPE_OPTIMIZE
  * Imagick::IMAGE_TYPE_PALETTE_BILEVEL_ALPHA
  * Imagick::COMPOSITE_SEAMLESS_BLEND
  - Changed:
  * Imagick::setImageArtifact can now take null for the string value.
  * Return type for Imagick::getImageArtifact is string|null instead of
    string.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1664539200">- buildrequire autoconf. (bsc#1201574)</changelog>
</package>
<package pkgid="d39b95e5dab85a4e48f15d4daa62019917375ad3243461c21945b20dbfa68e8c" name="php8-imagick" arch="ppc64le">
  <version epoch="0" ver="3.7.0" rel="bp154.2.4.1"/>
  <changelog author="jweberhofer@weberhofer.at" date="1486209600">- Upgrade to version 3.4.3
  - Fixes:
  * Avoid internal segfault.
  * Imagick::getRegistry() now throws an exception if the key does not exist,
    rather than terminating the program.
  * Prevent attempts to resize image to zero width or height, which is not
    supported by ImageMagick.
  * Fix compiling on Windows issue.
  * Imagick::transformImage and Imagick::orderedPosterizeImage now correctly
    excluded from
  * Bug 72311 - compiling against PHP 7.1.
  * Bug 72226 - regression for Imagick Exception classes being final on 7.x
  * Corrected reference of constants. Imagick::METRIC_MEANERRORPERPIXELMETRIC
    from MeanErrorPerPixelMetric to MeanErrorPerPixelErrorMetric.
    Imagick::METRIC_PEAKSIGNALTONOISERATIO from PeakSignalToNoiseRatioMetric
    to PeakSignalToNoiseRatioErrorMetric
  - Added:
  * function Imagick::setImageAlpha() which replaces Imagick::setOpacity()
  * function Imagick::identifyImageType() : int returns one of the
    Imagick::IMGTYPE_* constants
  * Imagick::INTERPOLATE_NEAREST_PIXEL for ImageMagick &gt;= 7
  * In ImageMagick, the names of two filter constants were corrected to the
    standard spelling. Support for the new spelling has been added. The old
    constants are left in place for legacy support.
    Legacy: FILTER_HANNING, new name: FILTER_HANN
    Legacy: FILTER_WELSH, new name: FILTER_WELCH
  * The Imagick::IMGTYPE_*MATTE* constants are deprecated for ImageMagick 7.
  * Instead an appropriate Imagick::IMGTYPE_*MATTE* should be used.
    IMGTYPE_GRAYSCALEMATTE =&gt; IMGTYPE_GRAYSCALEALPHA
    IMGTYPE_PALETTEMATTE =&gt; IMGTYPE_PALETTEALPHA
    IMGTYPE_TRUECOLORALPHA =&gt; IMGTYPE_TRUECOLORMATTE
    IMGTYPE_COLORSEPARATIONALPHA =&gt; IMGTYPE_COLORSEPARATIONMATTE
    IMGTYPE_PALETTEBILEVELALPHA =&gt; IMGTYPE_PALETTEBILEVELMATTE
  * Several ALPHACHANNEL_* constants are only available in ImageMagick &lt; 7
    IMAGICK_REGISTER_CONST_LONG("ALPHACHANNEL_RESET", ResetAlphaChannel);
    IMAGICK_REGISTER_CONST_LONG("ALPHACHANNEL_COPY", CopyAlphaChannel);
    IMAGICK_REGISTER_CONST_LONG("ALPHACHANNEL_OPAQUE", OpaqueAlphaChannel);
  * Several ALPHACHANNEL_* constants are only available in ImageMagick &gt;= 7.
    These constants re-use the values of the constants removed.
    IMAGICK_REGISTER_CONST_LONG("ALPHACHANNEL_ON", OnAlphaChannel);
    IMAGICK_REGISTER_CONST_LONG("ALPHACHANNEL_OFF", OffAlphaChannel);
    IMAGICK_REGISTER_CONST_LONG("ALPHACHANNEL_DISCRETE", DiscreteAlphaChannel);</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1491566400">- removed -devel package which is of no use
- Simplified spec in the build section
- Enabled tests</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1499774400">- Reconfigurate spec-file</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1520337600">- remove double ./configure and build
- imagick-reproducible.patch: We only care if ImageMagick
  is binary compatible, not about what version the extension
  is compiled against, which changes on every minor
  revision.</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1520510400">- Add %licence macros.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521201600">- add a Conflict between this extension and gmagick.
  (boo#1085595)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521201601">- Build module with fvisibility=hidden, this should
  avoid additional symbol conflicts.</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1525608000">Fixes for bnc#1091929
- Due to a packaging change in ghostscript the ghostscript-fonts-std
  has to be included explicitly to successfully run the tests. Elsewise
  the required helvetica-font is missing.
- ImageMagick's commit 97a319 makes ImagaMagick to no longer throw an
  an exception if image registry tag is not found.
  Added imagic-3.4.3-relax_test_150_to_follow_upstream_change.patch</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1525694400">- Print test failures in detail</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1525867200">- removed Test 229 which fails occasionally with timeouts
  on the OBS build server</changelog>
  <changelog author="schwab@suse.de" date="1549972800">- Use bigger timeout when running under qemu</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1557230400">- removed patch imagic-3.4.3-relax_test_150_to_follow_upstream_change.patch
  which is no longer necessary.
- Upgrade to version 3.4.4
  Added:
  * function Imagick::optimizeImageTransparency()
  * METRIC_STRUCTURAL_SIMILARITY_ERROR
  * METRIC_STRUCTURAL_DISSIMILARITY_ERROR
  * COMPRESSION_ZSTD - https://github.com/facebook/zstd
  * COMPRESSION_WEBP
  * CHANNEL_COMPOSITE_MASK
  * FILTER_CUBIC_SPLINE - "Define the lobes with the -define
    filter:lobes={2,3,4}
    (reference https://imagemagick.org/discourse-server/viewtopic.php?f=2&amp;t=32506)."
  * Imagick now explicitly conflicts with the Gmagick extension.
  Fixes:
  * Correct version check to make RemoveAlphaChannel and FlattenAlphaChannel
    be available when using Imagick with ImageMagick version 6.7.8-x
  * Bug 77128 - Imagick::setImageInterpolateMethod() not available on Windows
  * Prevent memory leak when ImagickPixel::__construct called after object instantiation.
  * Prevent segfault when ImagickPixel internal constructor not called.
  * Imagick::setResourceLimit support for values larger than 2GB (2^31) on 32bit platforms.
  * Corrected memory overwrite in Imagick::colorDecisionListImage()
  * Bug 77791 - ImagickKernel::fromMatrix() out of bounds write.
    Fixes CVE-2019-11037, boo#1135418
  The following functions have been deprecated:
  * ImagickDraw, matte
  * Imagick::averageimages
  * Imagick::colorfloodfillimage
  * Imagick::filter
  * Imagick::flattenimages
  * Imagick::getimageattribute
  * Imagick::getimagechannelextrema
  * Imagick::getimageclipmask
  * Imagick::getimageextrema
  * Imagick::getimageindex
  * Imagick::getimagematte
  * Imagick::getimagemattecolor
  * Imagick::getimagesize
  * Imagick::mapimage
  * Imagick::mattefloodfillimage
  * Imagick::medianfilterimage
  * Imagick::mosaicimages
  * Imagick::orderedposterizeimage
  * Imagick::paintfloodfillimage
  * Imagick::paintopaqueimage
  * Imagick::painttransparentimage
  * Imagick::radialblurimage
  * Imagick::recolorimage
  * Imagick::reducenoiseimage
  * Imagick::roundcornersimage
  * Imagick::roundcorners
  * Imagick::setimageattribute
  * Imagick::setimagebias
  * Imagick::setimageclipmask
  * Imagick::setimageindex
  * Imagick::setimagemattecolor
  * Imagick::setimagebiasquantum
  * Imagick::setimageopacity
  * Imagick::transformimage</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1610107200">- fix %defattr preventing setting executable bits on imagick.so</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1613649600">- Use _multibuild (prepare to build for php8)
- Use php_cfgdir and php_extdir macros to determine location of files</changelog>
  <changelog author="munix9@googlemail.com" date="1624190400">- Upgrade to version 3.5.0
  - Fixed multiple parameter information issues found in 3.5.0RC1.
  - ImageMagick 7 is still not widely available on systems.
    So contrary to previous plans, ImageMagick 6 support will
    continue for now.
    But users are recommeded to use ImageMagick 7 if possible.
  - Method names have been changed to not be all lower case. Both
    method names and parameter information is built from the
    Imagick*.stub.php files.
  - Prevent accidental creation of zero dimension images.
    ImageMagick doesn't prevent creation of zero dimension images,
    but will give an error when that image is used. I don't think
    this will affect any correctly program, but if it does, and
    you need to re-enable zero dimension images, please open an
    issue at https://phpimagick.com/issues
  - Various pieces of work have been done to make GOMP not
    segfault including:
  * Call omp_pause_resource_all when available during shutdown.
  * Added the 'imagick.shutdown_sleep_count' (default 10) and
    'imagick.set_single_thread' (default On). Both of these
    exist to mitigate the segaults on shutdown.
  - Fixes:
  * Correct version check to make RemoveAlphaChannel and
    FlattenAlphaChannel be available when using Imagick with
    ImageMagick version 6.7.8-x
  * Imagick::morphology now no longer ignores channel parameter
  - Added:
  * PHP 8.0 support.
  * Location check for ImageMagick 7 for NixOS and Brew.
  * Imagick::houghLineImage(int $width, int $height, float $threshold): bool {}
  * Imagick::setImagePixelColor(int $x, int $y, ImagickPixel|string $color)
  * Imagick::setImageMask(Imagick $clip_mask, int $pixelmask_type)
  * Imagick::getImageMask(int $pixelmask_type)
  * Imagick::VIRTUALPIXELMETHOD_DITHER
  * Imagick::VIRTUALPIXELMETHOD_RANDOM
  * Imagick::COMPOSITE_FREEZE
  * Imagick::COMPOSITE_INTERPOLATE
  * Imagick::COMPOSITE_NEGATE
  * Imagick::COMPOSITE_REFLECT
  * Imagick::COMPOSITE_SOFTBURN
  * Imagick::COMPOSITE_SOFTDODGE
  * Imagick::COMPOSITE_STAMP
  * Imagick::COMPOSITE_RMSE
  * Imagick::COMPRESSION_DWAA
  * Imagick::COMPRESSION_DWAB
  * Imagick::EVALUATE_INVERSE_LOG
  * Imagick::COLORSPACE_DISPLAYP3
  * Imagick::COLORSPACE_ADOBE98
  * Imagick::COLORSPACE_PROPHOTO
  * Imagick::COLORSPACE_JZAZBZ
  * Imagick::DISTORTION_RIGID_AFFINE
  * Imagick::DISTORTION_BARRELINVERSE
  * Imagick::STATISTIC_ROOT_MEAN_SQUARE</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1636459200">- Upgrade to version 3.5.1
  - Better detection of appropriate OpenMP library to use, i.e. GCC
    or Clang.</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1636545600">- added imagick-fix-457-ensure-format-is-always-lowercase.patch
  to fix test-failures in latest tumbleweed/factory builds
  [#]gh/Imagick/imagick#457</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1639137600">- Upgrade to version 3.6.0
  - No change from 3.6.0RC2
  - removed imagick-fix-457-ensure-format-is-always-lowercase.patch
    (upstreamed)
- Upgrade to version 3.6.0RC2
  - Fixes:
  * Remove deprecated message from Imagick::roundCorners()
  - Added:
  * Imagick::addNoiseImageWithAttenuate()
- Upgrade to version 3.6.0RC1
  - Imagick::getImageInterlaceScheme is undeprecated. It's the
    appropriate function to call to get the image interlace setting.
  - Image formats are now normalised to lower case.
  - Imagick::getImageIndex and Imagick::setImageIndex are undeprecated
    and work on ImageMagick 7. They call MagickGetIteratorIndex and
    MagickSetIteratorIndex internally.
  - Imagick::averageImages is undeprecated. For IM 7 it now calls
    EvaluateImages(wand-&gt;images,MeanEvaluateOperator).
  - Imagick::flattenImages is undeprecated. For IM 7 it now calls
    MagickMergeImageLayers(intern-&gt;magick_wand, FlattenLayer);
    internally.
  - Imagick::getImageSize is undeprecated. For IM 7 it now calls
    MagickGetImageLength internally.
  - Imagick::roundCornersImage is undeprecated and available on IM7.
  - Fixes:
  * Imagick::borderImage() changed internally to use OverCompositeOp
    rather than AtopCompositeOp for ImageMagick &gt; 7. If you need the
    old behaviour, please use Imagick::borderImageWithComposite()
    instead, which allows you to set the composite method.
  * Imagick::frameImage() changed internally to use OverCompositeOp
    rather than AtopCompositeOp for ImageMagick &gt; 7. If you need the
    old behaviour, please use
    Imagick::frameImageWithComposite()instead, which allows you to
    set the composite method.
  * Imagick::profileImage() fixed to allow null as second paramter
    again. If you can't upgrade to this version yet, pass in "",
    which has the same effect.
  * Imagick::ALPHACHANNEL_COPY and Imagick::ALPHACHANNEL_OPAQUE should
    be available on IM7.
  * Imagick::setImageMatteColor() should be available on IM7.
  - Added:
  * Imagick::borderImageWithComposite() same as Imagick::borderImage()
    but allows user to set composite operator used.
  * Imagick::frameImageWithComposite() same as Imagick::frameImage()
    but allows user to set composite operator used.
  * function Imagick::cannyEdgeImage
  * function Imagick::setSeed
  * function Imagick::waveletDenoiseImage
  * function Imagick::meanShiftImage
  * function Imagick::kmeansImage
  * function Imagick::rangeThresholdImage
  * function Imagick::autoThresholdImage
  * function Imagick::bilateralBlurImage
  * function Imagick::claheImage
  * function Imagick::channelFxImage
  * function Imagick::colorThresholdImage
  * function Imagick::complexImages
  * function Imagick::interpolativeResizeImage
  * function Imagick::levelImageColors
  * function Imagick::levelizeImage
  * function Imagick::orderedDitherImage
  * function Imagick::whiteBalanceImage</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1641988800">- Upgrade to version 3.7.0
  - Added:
  * Imagick::COMPOSITE_SALIENCY_BLEND
- Upgrade to version 3.7.0RC1
  - Added:
  * function Imagick::deleteOption(string $option): bool {}
  * function Imagick::getBackgroundColor(): ImagickPixel {}
  * function Imagick::getImageArtifacts(string $pattern = "*"): array {}
  * function Imagick::getImageKurtosis(): array {}
  * function Imagick::getImageMean(): array {}
  * function Imagick::getImageRange(): array {}
  * function Imagick::getInterpolateMethod(): int {}
  * function Imagick::getOptions(string $pattern = "*"): array {}
  * function Imagick::getOrientation(): int {}
  * function Imagick::getResolution(): array {}
  * function Imagick::getType(): int {}
  * function Imagick::implodeImageWithMethod(float $radius,
    int $pixel_interpolate_method): bool {}
  * function Imagick::oilPaintImageWithSigma(float $radius, float $sigma)
  * function Imagick::polaroidWithTextAndMethod(ImagickDraw $settings,
    float $angle, string $caption, int $method): bool {}
  * function Imagick::polynomialImage(array $terms): bool {}
  * function Imagick::setDepth(int $depth): bool {}
  * function Imagick::setExtract(string $geometry): bool {}
  * function Imagick::setInterpolateMethod(int $method): bool{}
  * function Imagick::setOrientation(int $orientation): bool {}
  * function Imagick::spreadImageWithMethod(float $radius,
    int $interpolate_method): bool {}
  * function Imagick::swirlImageWithMethod(float $degrees,
    int $interpolate_method): bool {}
  * function Imagick::waveImageWithMethod(float $amplitude,
    float $length, int $interpolate_method): bool {}
  * Imagick::IMAGE_TYPE_BILEVEL
  * Imagick::IMAGE_TYPE_GRAYSCALE
  * Imagick::IMAGE_TYPE_GRAYSCALE_ALPHA
  * Imagick::IMAGE_TYPE_PALETTE
  * Imagick::IMAGE_TYPE_PALETTE_ALPHA
  * Imagick::IMAGE_TYPE_TRUE_COLOR
  * Imagick::IMAGE_TYPE_TRUE_COLOR_ALPHA
  * Imagick::IMAGE_TYPE_COLOR_SEPARATION
  * Imagick::IMAGE_TYPE_COLOR_SEPARATION_ALPHA
  * Imagick::IMAGE_TYPE_OPTIMIZE
  * Imagick::IMAGE_TYPE_PALETTE_BILEVEL_ALPHA
  * Imagick::COMPOSITE_SEAMLESS_BLEND
  - Changed:
  * Imagick::setImageArtifact can now take null for the string value.
  * Return type for Imagick::getImageArtifact is string|null instead of
    string.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1664539200">- buildrequire autoconf. (bsc#1201574)</changelog>
</package>
<package pkgid="898e42c3432a0213bb22dbf2a03419a755e9eae4eaf3dc3ad4ee5cf8d8d6d6dd" name="php8-imagick" arch="src">
  <version epoch="0" ver="3.7.0" rel="bp154.2.4.1"/>
  <changelog author="jweberhofer@weberhofer.at" date="1486209600">- Upgrade to version 3.4.3
  - Fixes:
  * Avoid internal segfault.
  * Imagick::getRegistry() now throws an exception if the key does not exist,
    rather than terminating the program.
  * Prevent attempts to resize image to zero width or height, which is not
    supported by ImageMagick.
  * Fix compiling on Windows issue.
  * Imagick::transformImage and Imagick::orderedPosterizeImage now correctly
    excluded from
  * Bug 72311 - compiling against PHP 7.1.
  * Bug 72226 - regression for Imagick Exception classes being final on 7.x
  * Corrected reference of constants. Imagick::METRIC_MEANERRORPERPIXELMETRIC
    from MeanErrorPerPixelMetric to MeanErrorPerPixelErrorMetric.
    Imagick::METRIC_PEAKSIGNALTONOISERATIO from PeakSignalToNoiseRatioMetric
    to PeakSignalToNoiseRatioErrorMetric
  - Added:
  * function Imagick::setImageAlpha() which replaces Imagick::setOpacity()
  * function Imagick::identifyImageType() : int returns one of the
    Imagick::IMGTYPE_* constants
  * Imagick::INTERPOLATE_NEAREST_PIXEL for ImageMagick &gt;= 7
  * In ImageMagick, the names of two filter constants were corrected to the
    standard spelling. Support for the new spelling has been added. The old
    constants are left in place for legacy support.
    Legacy: FILTER_HANNING, new name: FILTER_HANN
    Legacy: FILTER_WELSH, new name: FILTER_WELCH
  * The Imagick::IMGTYPE_*MATTE* constants are deprecated for ImageMagick 7.
  * Instead an appropriate Imagick::IMGTYPE_*MATTE* should be used.
    IMGTYPE_GRAYSCALEMATTE =&gt; IMGTYPE_GRAYSCALEALPHA
    IMGTYPE_PALETTEMATTE =&gt; IMGTYPE_PALETTEALPHA
    IMGTYPE_TRUECOLORALPHA =&gt; IMGTYPE_TRUECOLORMATTE
    IMGTYPE_COLORSEPARATIONALPHA =&gt; IMGTYPE_COLORSEPARATIONMATTE
    IMGTYPE_PALETTEBILEVELALPHA =&gt; IMGTYPE_PALETTEBILEVELMATTE
  * Several ALPHACHANNEL_* constants are only available in ImageMagick &lt; 7
    IMAGICK_REGISTER_CONST_LONG("ALPHACHANNEL_RESET", ResetAlphaChannel);
    IMAGICK_REGISTER_CONST_LONG("ALPHACHANNEL_COPY", CopyAlphaChannel);
    IMAGICK_REGISTER_CONST_LONG("ALPHACHANNEL_OPAQUE", OpaqueAlphaChannel);
  * Several ALPHACHANNEL_* constants are only available in ImageMagick &gt;= 7.
    These constants re-use the values of the constants removed.
    IMAGICK_REGISTER_CONST_LONG("ALPHACHANNEL_ON", OnAlphaChannel);
    IMAGICK_REGISTER_CONST_LONG("ALPHACHANNEL_OFF", OffAlphaChannel);
    IMAGICK_REGISTER_CONST_LONG("ALPHACHANNEL_DISCRETE", DiscreteAlphaChannel);</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1491566400">- removed -devel package which is of no use
- Simplified spec in the build section
- Enabled tests</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1499774400">- Reconfigurate spec-file</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1520337600">- remove double ./configure and build
- imagick-reproducible.patch: We only care if ImageMagick
  is binary compatible, not about what version the extension
  is compiled against, which changes on every minor
  revision.</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1520510400">- Add %licence macros.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521201600">- add a Conflict between this extension and gmagick.
  (boo#1085595)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521201601">- Build module with fvisibility=hidden, this should
  avoid additional symbol conflicts.</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1525608000">Fixes for bnc#1091929
- Due to a packaging change in ghostscript the ghostscript-fonts-std
  has to be included explicitly to successfully run the tests. Elsewise
  the required helvetica-font is missing.
- ImageMagick's commit 97a319 makes ImagaMagick to no longer throw an
  an exception if image registry tag is not found.
  Added imagic-3.4.3-relax_test_150_to_follow_upstream_change.patch</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1525694400">- Print test failures in detail</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1525867200">- removed Test 229 which fails occasionally with timeouts
  on the OBS build server</changelog>
  <changelog author="schwab@suse.de" date="1549972800">- Use bigger timeout when running under qemu</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1557230400">- removed patch imagic-3.4.3-relax_test_150_to_follow_upstream_change.patch
  which is no longer necessary.
- Upgrade to version 3.4.4
  Added:
  * function Imagick::optimizeImageTransparency()
  * METRIC_STRUCTURAL_SIMILARITY_ERROR
  * METRIC_STRUCTURAL_DISSIMILARITY_ERROR
  * COMPRESSION_ZSTD - https://github.com/facebook/zstd
  * COMPRESSION_WEBP
  * CHANNEL_COMPOSITE_MASK
  * FILTER_CUBIC_SPLINE - "Define the lobes with the -define
    filter:lobes={2,3,4}
    (reference https://imagemagick.org/discourse-server/viewtopic.php?f=2&amp;t=32506)."
  * Imagick now explicitly conflicts with the Gmagick extension.
  Fixes:
  * Correct version check to make RemoveAlphaChannel and FlattenAlphaChannel
    be available when using Imagick with ImageMagick version 6.7.8-x
  * Bug 77128 - Imagick::setImageInterpolateMethod() not available on Windows
  * Prevent memory leak when ImagickPixel::__construct called after object instantiation.
  * Prevent segfault when ImagickPixel internal constructor not called.
  * Imagick::setResourceLimit support for values larger than 2GB (2^31) on 32bit platforms.
  * Corrected memory overwrite in Imagick::colorDecisionListImage()
  * Bug 77791 - ImagickKernel::fromMatrix() out of bounds write.
    Fixes CVE-2019-11037, boo#1135418
  The following functions have been deprecated:
  * ImagickDraw, matte
  * Imagick::averageimages
  * Imagick::colorfloodfillimage
  * Imagick::filter
  * Imagick::flattenimages
  * Imagick::getimageattribute
  * Imagick::getimagechannelextrema
  * Imagick::getimageclipmask
  * Imagick::getimageextrema
  * Imagick::getimageindex
  * Imagick::getimagematte
  * Imagick::getimagemattecolor
  * Imagick::getimagesize
  * Imagick::mapimage
  * Imagick::mattefloodfillimage
  * Imagick::medianfilterimage
  * Imagick::mosaicimages
  * Imagick::orderedposterizeimage
  * Imagick::paintfloodfillimage
  * Imagick::paintopaqueimage
  * Imagick::painttransparentimage
  * Imagick::radialblurimage
  * Imagick::recolorimage
  * Imagick::reducenoiseimage
  * Imagick::roundcornersimage
  * Imagick::roundcorners
  * Imagick::setimageattribute
  * Imagick::setimagebias
  * Imagick::setimageclipmask
  * Imagick::setimageindex
  * Imagick::setimagemattecolor
  * Imagick::setimagebiasquantum
  * Imagick::setimageopacity
  * Imagick::transformimage</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1610107200">- fix %defattr preventing setting executable bits on imagick.so</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1613649600">- Use _multibuild (prepare to build for php8)
- Use php_cfgdir and php_extdir macros to determine location of files</changelog>
  <changelog author="munix9@googlemail.com" date="1624190400">- Upgrade to version 3.5.0
  - Fixed multiple parameter information issues found in 3.5.0RC1.
  - ImageMagick 7 is still not widely available on systems.
    So contrary to previous plans, ImageMagick 6 support will
    continue for now.
    But users are recommeded to use ImageMagick 7 if possible.
  - Method names have been changed to not be all lower case. Both
    method names and parameter information is built from the
    Imagick*.stub.php files.
  - Prevent accidental creation of zero dimension images.
    ImageMagick doesn't prevent creation of zero dimension images,
    but will give an error when that image is used. I don't think
    this will affect any correctly program, but if it does, and
    you need to re-enable zero dimension images, please open an
    issue at https://phpimagick.com/issues
  - Various pieces of work have been done to make GOMP not
    segfault including:
  * Call omp_pause_resource_all when available during shutdown.
  * Added the 'imagick.shutdown_sleep_count' (default 10) and
    'imagick.set_single_thread' (default On). Both of these
    exist to mitigate the segaults on shutdown.
  - Fixes:
  * Correct version check to make RemoveAlphaChannel and
    FlattenAlphaChannel be available when using Imagick with
    ImageMagick version 6.7.8-x
  * Imagick::morphology now no longer ignores channel parameter
  - Added:
  * PHP 8.0 support.
  * Location check for ImageMagick 7 for NixOS and Brew.
  * Imagick::houghLineImage(int $width, int $height, float $threshold): bool {}
  * Imagick::setImagePixelColor(int $x, int $y, ImagickPixel|string $color)
  * Imagick::setImageMask(Imagick $clip_mask, int $pixelmask_type)
  * Imagick::getImageMask(int $pixelmask_type)
  * Imagick::VIRTUALPIXELMETHOD_DITHER
  * Imagick::VIRTUALPIXELMETHOD_RANDOM
  * Imagick::COMPOSITE_FREEZE
  * Imagick::COMPOSITE_INTERPOLATE
  * Imagick::COMPOSITE_NEGATE
  * Imagick::COMPOSITE_REFLECT
  * Imagick::COMPOSITE_SOFTBURN
  * Imagick::COMPOSITE_SOFTDODGE
  * Imagick::COMPOSITE_STAMP
  * Imagick::COMPOSITE_RMSE
  * Imagick::COMPRESSION_DWAA
  * Imagick::COMPRESSION_DWAB
  * Imagick::EVALUATE_INVERSE_LOG
  * Imagick::COLORSPACE_DISPLAYP3
  * Imagick::COLORSPACE_ADOBE98
  * Imagick::COLORSPACE_PROPHOTO
  * Imagick::COLORSPACE_JZAZBZ
  * Imagick::DISTORTION_RIGID_AFFINE
  * Imagick::DISTORTION_BARRELINVERSE
  * Imagick::STATISTIC_ROOT_MEAN_SQUARE</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1636459200">- Upgrade to version 3.5.1
  - Better detection of appropriate OpenMP library to use, i.e. GCC
    or Clang.</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1636545600">- added imagick-fix-457-ensure-format-is-always-lowercase.patch
  to fix test-failures in latest tumbleweed/factory builds
  [#]gh/Imagick/imagick#457</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1639137600">- Upgrade to version 3.6.0
  - No change from 3.6.0RC2
  - removed imagick-fix-457-ensure-format-is-always-lowercase.patch
    (upstreamed)
- Upgrade to version 3.6.0RC2
  - Fixes:
  * Remove deprecated message from Imagick::roundCorners()
  - Added:
  * Imagick::addNoiseImageWithAttenuate()
- Upgrade to version 3.6.0RC1
  - Imagick::getImageInterlaceScheme is undeprecated. It's the
    appropriate function to call to get the image interlace setting.
  - Image formats are now normalised to lower case.
  - Imagick::getImageIndex and Imagick::setImageIndex are undeprecated
    and work on ImageMagick 7. They call MagickGetIteratorIndex and
    MagickSetIteratorIndex internally.
  - Imagick::averageImages is undeprecated. For IM 7 it now calls
    EvaluateImages(wand-&gt;images,MeanEvaluateOperator).
  - Imagick::flattenImages is undeprecated. For IM 7 it now calls
    MagickMergeImageLayers(intern-&gt;magick_wand, FlattenLayer);
    internally.
  - Imagick::getImageSize is undeprecated. For IM 7 it now calls
    MagickGetImageLength internally.
  - Imagick::roundCornersImage is undeprecated and available on IM7.
  - Fixes:
  * Imagick::borderImage() changed internally to use OverCompositeOp
    rather than AtopCompositeOp for ImageMagick &gt; 7. If you need the
    old behaviour, please use Imagick::borderImageWithComposite()
    instead, which allows you to set the composite method.
  * Imagick::frameImage() changed internally to use OverCompositeOp
    rather than AtopCompositeOp for ImageMagick &gt; 7. If you need the
    old behaviour, please use
    Imagick::frameImageWithComposite()instead, which allows you to
    set the composite method.
  * Imagick::profileImage() fixed to allow null as second paramter
    again. If you can't upgrade to this version yet, pass in "",
    which has the same effect.
  * Imagick::ALPHACHANNEL_COPY and Imagick::ALPHACHANNEL_OPAQUE should
    be available on IM7.
  * Imagick::setImageMatteColor() should be available on IM7.
  - Added:
  * Imagick::borderImageWithComposite() same as Imagick::borderImage()
    but allows user to set composite operator used.
  * Imagick::frameImageWithComposite() same as Imagick::frameImage()
    but allows user to set composite operator used.
  * function Imagick::cannyEdgeImage
  * function Imagick::setSeed
  * function Imagick::waveletDenoiseImage
  * function Imagick::meanShiftImage
  * function Imagick::kmeansImage
  * function Imagick::rangeThresholdImage
  * function Imagick::autoThresholdImage
  * function Imagick::bilateralBlurImage
  * function Imagick::claheImage
  * function Imagick::channelFxImage
  * function Imagick::colorThresholdImage
  * function Imagick::complexImages
  * function Imagick::interpolativeResizeImage
  * function Imagick::levelImageColors
  * function Imagick::levelizeImage
  * function Imagick::orderedDitherImage
  * function Imagick::whiteBalanceImage</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1641988800">- Upgrade to version 3.7.0
  - Added:
  * Imagick::COMPOSITE_SALIENCY_BLEND
- Upgrade to version 3.7.0RC1
  - Added:
  * function Imagick::deleteOption(string $option): bool {}
  * function Imagick::getBackgroundColor(): ImagickPixel {}
  * function Imagick::getImageArtifacts(string $pattern = "*"): array {}
  * function Imagick::getImageKurtosis(): array {}
  * function Imagick::getImageMean(): array {}
  * function Imagick::getImageRange(): array {}
  * function Imagick::getInterpolateMethod(): int {}
  * function Imagick::getOptions(string $pattern = "*"): array {}
  * function Imagick::getOrientation(): int {}
  * function Imagick::getResolution(): array {}
  * function Imagick::getType(): int {}
  * function Imagick::implodeImageWithMethod(float $radius,
    int $pixel_interpolate_method): bool {}
  * function Imagick::oilPaintImageWithSigma(float $radius, float $sigma)
  * function Imagick::polaroidWithTextAndMethod(ImagickDraw $settings,
    float $angle, string $caption, int $method): bool {}
  * function Imagick::polynomialImage(array $terms): bool {}
  * function Imagick::setDepth(int $depth): bool {}
  * function Imagick::setExtract(string $geometry): bool {}
  * function Imagick::setInterpolateMethod(int $method): bool{}
  * function Imagick::setOrientation(int $orientation): bool {}
  * function Imagick::spreadImageWithMethod(float $radius,
    int $interpolate_method): bool {}
  * function Imagick::swirlImageWithMethod(float $degrees,
    int $interpolate_method): bool {}
  * function Imagick::waveImageWithMethod(float $amplitude,
    float $length, int $interpolate_method): bool {}
  * Imagick::IMAGE_TYPE_BILEVEL
  * Imagick::IMAGE_TYPE_GRAYSCALE
  * Imagick::IMAGE_TYPE_GRAYSCALE_ALPHA
  * Imagick::IMAGE_TYPE_PALETTE
  * Imagick::IMAGE_TYPE_PALETTE_ALPHA
  * Imagick::IMAGE_TYPE_TRUE_COLOR
  * Imagick::IMAGE_TYPE_TRUE_COLOR_ALPHA
  * Imagick::IMAGE_TYPE_COLOR_SEPARATION
  * Imagick::IMAGE_TYPE_COLOR_SEPARATION_ALPHA
  * Imagick::IMAGE_TYPE_OPTIMIZE
  * Imagick::IMAGE_TYPE_PALETTE_BILEVEL_ALPHA
  * Imagick::COMPOSITE_SEAMLESS_BLEND
  - Changed:
  * Imagick::setImageArtifact can now take null for the string value.
  * Return type for Imagick::getImageArtifact is string|null instead of
    string.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1664539200">- buildrequire autoconf. (bsc#1201574)</changelog>
</package>
<package pkgid="f748673418358b9bb908d39c989dc04d05fc4f9efd9fd8125f5a1b49f2c17eaa" name="php8-imagick" arch="x86_64">
  <version epoch="0" ver="3.7.0" rel="bp154.2.4.1"/>
  <changelog author="jweberhofer@weberhofer.at" date="1486209600">- Upgrade to version 3.4.3
  - Fixes:
  * Avoid internal segfault.
  * Imagick::getRegistry() now throws an exception if the key does not exist,
    rather than terminating the program.
  * Prevent attempts to resize image to zero width or height, which is not
    supported by ImageMagick.
  * Fix compiling on Windows issue.
  * Imagick::transformImage and Imagick::orderedPosterizeImage now correctly
    excluded from
  * Bug 72311 - compiling against PHP 7.1.
  * Bug 72226 - regression for Imagick Exception classes being final on 7.x
  * Corrected reference of constants. Imagick::METRIC_MEANERRORPERPIXELMETRIC
    from MeanErrorPerPixelMetric to MeanErrorPerPixelErrorMetric.
    Imagick::METRIC_PEAKSIGNALTONOISERATIO from PeakSignalToNoiseRatioMetric
    to PeakSignalToNoiseRatioErrorMetric
  - Added:
  * function Imagick::setImageAlpha() which replaces Imagick::setOpacity()
  * function Imagick::identifyImageType() : int returns one of the
    Imagick::IMGTYPE_* constants
  * Imagick::INTERPOLATE_NEAREST_PIXEL for ImageMagick &gt;= 7
  * In ImageMagick, the names of two filter constants were corrected to the
    standard spelling. Support for the new spelling has been added. The old
    constants are left in place for legacy support.
    Legacy: FILTER_HANNING, new name: FILTER_HANN
    Legacy: FILTER_WELSH, new name: FILTER_WELCH
  * The Imagick::IMGTYPE_*MATTE* constants are deprecated for ImageMagick 7.
  * Instead an appropriate Imagick::IMGTYPE_*MATTE* should be used.
    IMGTYPE_GRAYSCALEMATTE =&gt; IMGTYPE_GRAYSCALEALPHA
    IMGTYPE_PALETTEMATTE =&gt; IMGTYPE_PALETTEALPHA
    IMGTYPE_TRUECOLORALPHA =&gt; IMGTYPE_TRUECOLORMATTE
    IMGTYPE_COLORSEPARATIONALPHA =&gt; IMGTYPE_COLORSEPARATIONMATTE
    IMGTYPE_PALETTEBILEVELALPHA =&gt; IMGTYPE_PALETTEBILEVELMATTE
  * Several ALPHACHANNEL_* constants are only available in ImageMagick &lt; 7
    IMAGICK_REGISTER_CONST_LONG("ALPHACHANNEL_RESET", ResetAlphaChannel);
    IMAGICK_REGISTER_CONST_LONG("ALPHACHANNEL_COPY", CopyAlphaChannel);
    IMAGICK_REGISTER_CONST_LONG("ALPHACHANNEL_OPAQUE", OpaqueAlphaChannel);
  * Several ALPHACHANNEL_* constants are only available in ImageMagick &gt;= 7.
    These constants re-use the values of the constants removed.
    IMAGICK_REGISTER_CONST_LONG("ALPHACHANNEL_ON", OnAlphaChannel);
    IMAGICK_REGISTER_CONST_LONG("ALPHACHANNEL_OFF", OffAlphaChannel);
    IMAGICK_REGISTER_CONST_LONG("ALPHACHANNEL_DISCRETE", DiscreteAlphaChannel);</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1491566400">- removed -devel package which is of no use
- Simplified spec in the build section
- Enabled tests</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1499774400">- Reconfigurate spec-file</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1520337600">- remove double ./configure and build
- imagick-reproducible.patch: We only care if ImageMagick
  is binary compatible, not about what version the extension
  is compiled against, which changes on every minor
  revision.</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1520510400">- Add %licence macros.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521201600">- add a Conflict between this extension and gmagick.
  (boo#1085595)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521201601">- Build module with fvisibility=hidden, this should
  avoid additional symbol conflicts.</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1525608000">Fixes for bnc#1091929
- Due to a packaging change in ghostscript the ghostscript-fonts-std
  has to be included explicitly to successfully run the tests. Elsewise
  the required helvetica-font is missing.
- ImageMagick's commit 97a319 makes ImagaMagick to no longer throw an
  an exception if image registry tag is not found.
  Added imagic-3.4.3-relax_test_150_to_follow_upstream_change.patch</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1525694400">- Print test failures in detail</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1525867200">- removed Test 229 which fails occasionally with timeouts
  on the OBS build server</changelog>
  <changelog author="schwab@suse.de" date="1549972800">- Use bigger timeout when running under qemu</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1557230400">- removed patch imagic-3.4.3-relax_test_150_to_follow_upstream_change.patch
  which is no longer necessary.
- Upgrade to version 3.4.4
  Added:
  * function Imagick::optimizeImageTransparency()
  * METRIC_STRUCTURAL_SIMILARITY_ERROR
  * METRIC_STRUCTURAL_DISSIMILARITY_ERROR
  * COMPRESSION_ZSTD - https://github.com/facebook/zstd
  * COMPRESSION_WEBP
  * CHANNEL_COMPOSITE_MASK
  * FILTER_CUBIC_SPLINE - "Define the lobes with the -define
    filter:lobes={2,3,4}
    (reference https://imagemagick.org/discourse-server/viewtopic.php?f=2&amp;t=32506)."
  * Imagick now explicitly conflicts with the Gmagick extension.
  Fixes:
  * Correct version check to make RemoveAlphaChannel and FlattenAlphaChannel
    be available when using Imagick with ImageMagick version 6.7.8-x
  * Bug 77128 - Imagick::setImageInterpolateMethod() not available on Windows
  * Prevent memory leak when ImagickPixel::__construct called after object instantiation.
  * Prevent segfault when ImagickPixel internal constructor not called.
  * Imagick::setResourceLimit support for values larger than 2GB (2^31) on 32bit platforms.
  * Corrected memory overwrite in Imagick::colorDecisionListImage()
  * Bug 77791 - ImagickKernel::fromMatrix() out of bounds write.
    Fixes CVE-2019-11037, boo#1135418
  The following functions have been deprecated:
  * ImagickDraw, matte
  * Imagick::averageimages
  * Imagick::colorfloodfillimage
  * Imagick::filter
  * Imagick::flattenimages
  * Imagick::getimageattribute
  * Imagick::getimagechannelextrema
  * Imagick::getimageclipmask
  * Imagick::getimageextrema
  * Imagick::getimageindex
  * Imagick::getimagematte
  * Imagick::getimagemattecolor
  * Imagick::getimagesize
  * Imagick::mapimage
  * Imagick::mattefloodfillimage
  * Imagick::medianfilterimage
  * Imagick::mosaicimages
  * Imagick::orderedposterizeimage
  * Imagick::paintfloodfillimage
  * Imagick::paintopaqueimage
  * Imagick::painttransparentimage
  * Imagick::radialblurimage
  * Imagick::recolorimage
  * Imagick::reducenoiseimage
  * Imagick::roundcornersimage
  * Imagick::roundcorners
  * Imagick::setimageattribute
  * Imagick::setimagebias
  * Imagick::setimageclipmask
  * Imagick::setimageindex
  * Imagick::setimagemattecolor
  * Imagick::setimagebiasquantum
  * Imagick::setimageopacity
  * Imagick::transformimage</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1610107200">- fix %defattr preventing setting executable bits on imagick.so</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1613649600">- Use _multibuild (prepare to build for php8)
- Use php_cfgdir and php_extdir macros to determine location of files</changelog>
  <changelog author="munix9@googlemail.com" date="1624190400">- Upgrade to version 3.5.0
  - Fixed multiple parameter information issues found in 3.5.0RC1.
  - ImageMagick 7 is still not widely available on systems.
    So contrary to previous plans, ImageMagick 6 support will
    continue for now.
    But users are recommeded to use ImageMagick 7 if possible.
  - Method names have been changed to not be all lower case. Both
    method names and parameter information is built from the
    Imagick*.stub.php files.
  - Prevent accidental creation of zero dimension images.
    ImageMagick doesn't prevent creation of zero dimension images,
    but will give an error when that image is used. I don't think
    this will affect any correctly program, but if it does, and
    you need to re-enable zero dimension images, please open an
    issue at https://phpimagick.com/issues
  - Various pieces of work have been done to make GOMP not
    segfault including:
  * Call omp_pause_resource_all when available during shutdown.
  * Added the 'imagick.shutdown_sleep_count' (default 10) and
    'imagick.set_single_thread' (default On). Both of these
    exist to mitigate the segaults on shutdown.
  - Fixes:
  * Correct version check to make RemoveAlphaChannel and
    FlattenAlphaChannel be available when using Imagick with
    ImageMagick version 6.7.8-x
  * Imagick::morphology now no longer ignores channel parameter
  - Added:
  * PHP 8.0 support.
  * Location check for ImageMagick 7 for NixOS and Brew.
  * Imagick::houghLineImage(int $width, int $height, float $threshold): bool {}
  * Imagick::setImagePixelColor(int $x, int $y, ImagickPixel|string $color)
  * Imagick::setImageMask(Imagick $clip_mask, int $pixelmask_type)
  * Imagick::getImageMask(int $pixelmask_type)
  * Imagick::VIRTUALPIXELMETHOD_DITHER
  * Imagick::VIRTUALPIXELMETHOD_RANDOM
  * Imagick::COMPOSITE_FREEZE
  * Imagick::COMPOSITE_INTERPOLATE
  * Imagick::COMPOSITE_NEGATE
  * Imagick::COMPOSITE_REFLECT
  * Imagick::COMPOSITE_SOFTBURN
  * Imagick::COMPOSITE_SOFTDODGE
  * Imagick::COMPOSITE_STAMP
  * Imagick::COMPOSITE_RMSE
  * Imagick::COMPRESSION_DWAA
  * Imagick::COMPRESSION_DWAB
  * Imagick::EVALUATE_INVERSE_LOG
  * Imagick::COLORSPACE_DISPLAYP3
  * Imagick::COLORSPACE_ADOBE98
  * Imagick::COLORSPACE_PROPHOTO
  * Imagick::COLORSPACE_JZAZBZ
  * Imagick::DISTORTION_RIGID_AFFINE
  * Imagick::DISTORTION_BARRELINVERSE
  * Imagick::STATISTIC_ROOT_MEAN_SQUARE</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1636459200">- Upgrade to version 3.5.1
  - Better detection of appropriate OpenMP library to use, i.e. GCC
    or Clang.</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1636545600">- added imagick-fix-457-ensure-format-is-always-lowercase.patch
  to fix test-failures in latest tumbleweed/factory builds
  [#]gh/Imagick/imagick#457</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1639137600">- Upgrade to version 3.6.0
  - No change from 3.6.0RC2
  - removed imagick-fix-457-ensure-format-is-always-lowercase.patch
    (upstreamed)
- Upgrade to version 3.6.0RC2
  - Fixes:
  * Remove deprecated message from Imagick::roundCorners()
  - Added:
  * Imagick::addNoiseImageWithAttenuate()
- Upgrade to version 3.6.0RC1
  - Imagick::getImageInterlaceScheme is undeprecated. It's the
    appropriate function to call to get the image interlace setting.
  - Image formats are now normalised to lower case.
  - Imagick::getImageIndex and Imagick::setImageIndex are undeprecated
    and work on ImageMagick 7. They call MagickGetIteratorIndex and
    MagickSetIteratorIndex internally.
  - Imagick::averageImages is undeprecated. For IM 7 it now calls
    EvaluateImages(wand-&gt;images,MeanEvaluateOperator).
  - Imagick::flattenImages is undeprecated. For IM 7 it now calls
    MagickMergeImageLayers(intern-&gt;magick_wand, FlattenLayer);
    internally.
  - Imagick::getImageSize is undeprecated. For IM 7 it now calls
    MagickGetImageLength internally.
  - Imagick::roundCornersImage is undeprecated and available on IM7.
  - Fixes:
  * Imagick::borderImage() changed internally to use OverCompositeOp
    rather than AtopCompositeOp for ImageMagick &gt; 7. If you need the
    old behaviour, please use Imagick::borderImageWithComposite()
    instead, which allows you to set the composite method.
  * Imagick::frameImage() changed internally to use OverCompositeOp
    rather than AtopCompositeOp for ImageMagick &gt; 7. If you need the
    old behaviour, please use
    Imagick::frameImageWithComposite()instead, which allows you to
    set the composite method.
  * Imagick::profileImage() fixed to allow null as second paramter
    again. If you can't upgrade to this version yet, pass in "",
    which has the same effect.
  * Imagick::ALPHACHANNEL_COPY and Imagick::ALPHACHANNEL_OPAQUE should
    be available on IM7.
  * Imagick::setImageMatteColor() should be available on IM7.
  - Added:
  * Imagick::borderImageWithComposite() same as Imagick::borderImage()
    but allows user to set composite operator used.
  * Imagick::frameImageWithComposite() same as Imagick::frameImage()
    but allows user to set composite operator used.
  * function Imagick::cannyEdgeImage
  * function Imagick::setSeed
  * function Imagick::waveletDenoiseImage
  * function Imagick::meanShiftImage
  * function Imagick::kmeansImage
  * function Imagick::rangeThresholdImage
  * function Imagick::autoThresholdImage
  * function Imagick::bilateralBlurImage
  * function Imagick::claheImage
  * function Imagick::channelFxImage
  * function Imagick::colorThresholdImage
  * function Imagick::complexImages
  * function Imagick::interpolativeResizeImage
  * function Imagick::levelImageColors
  * function Imagick::levelizeImage
  * function Imagick::orderedDitherImage
  * function Imagick::whiteBalanceImage</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1641988800">- Upgrade to version 3.7.0
  - Added:
  * Imagick::COMPOSITE_SALIENCY_BLEND
- Upgrade to version 3.7.0RC1
  - Added:
  * function Imagick::deleteOption(string $option): bool {}
  * function Imagick::getBackgroundColor(): ImagickPixel {}
  * function Imagick::getImageArtifacts(string $pattern = "*"): array {}
  * function Imagick::getImageKurtosis(): array {}
  * function Imagick::getImageMean(): array {}
  * function Imagick::getImageRange(): array {}
  * function Imagick::getInterpolateMethod(): int {}
  * function Imagick::getOptions(string $pattern = "*"): array {}
  * function Imagick::getOrientation(): int {}
  * function Imagick::getResolution(): array {}
  * function Imagick::getType(): int {}
  * function Imagick::implodeImageWithMethod(float $radius,
    int $pixel_interpolate_method): bool {}
  * function Imagick::oilPaintImageWithSigma(float $radius, float $sigma)
  * function Imagick::polaroidWithTextAndMethod(ImagickDraw $settings,
    float $angle, string $caption, int $method): bool {}
  * function Imagick::polynomialImage(array $terms): bool {}
  * function Imagick::setDepth(int $depth): bool {}
  * function Imagick::setExtract(string $geometry): bool {}
  * function Imagick::setInterpolateMethod(int $method): bool{}
  * function Imagick::setOrientation(int $orientation): bool {}
  * function Imagick::spreadImageWithMethod(float $radius,
    int $interpolate_method): bool {}
  * function Imagick::swirlImageWithMethod(float $degrees,
    int $interpolate_method): bool {}
  * function Imagick::waveImageWithMethod(float $amplitude,
    float $length, int $interpolate_method): bool {}
  * Imagick::IMAGE_TYPE_BILEVEL
  * Imagick::IMAGE_TYPE_GRAYSCALE
  * Imagick::IMAGE_TYPE_GRAYSCALE_ALPHA
  * Imagick::IMAGE_TYPE_PALETTE
  * Imagick::IMAGE_TYPE_PALETTE_ALPHA
  * Imagick::IMAGE_TYPE_TRUE_COLOR
  * Imagick::IMAGE_TYPE_TRUE_COLOR_ALPHA
  * Imagick::IMAGE_TYPE_COLOR_SEPARATION
  * Imagick::IMAGE_TYPE_COLOR_SEPARATION_ALPHA
  * Imagick::IMAGE_TYPE_OPTIMIZE
  * Imagick::IMAGE_TYPE_PALETTE_BILEVEL_ALPHA
  * Imagick::COMPOSITE_SEAMLESS_BLEND
  - Changed:
  * Imagick::setImageArtifact can now take null for the string value.
  * Return type for Imagick::getImageArtifact is string|null instead of
    string.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1664539200">- buildrequire autoconf. (bsc#1201574)</changelog>
</package>
<package pkgid="7ffe8668db5c9ccd0f105161759838780fa24ac56cbec59304ee991af9d4eb26" name="php8-phpunit" arch="noarch">
  <version epoch="0" ver="9.5.28" rel="bp154.2.1"/>
  <changelog author="suse+build@de-korte.org" date="1549368000">- Initial release for php7-phpunit8</changelog>
  <changelog author="suse+build@de-korte.org" date="1549454400">- Remove fixup of shebang (causes a SHA1 failure)</changelog>
  <changelog author="suse+build@de-korte.org" date="1549454401">- Only build for supported PHP versions
- Added source verification</changelog>
  <changelog author="suse+build@de-korte.org" date="1550059200">- Updated package to release 8.0.2
  * Fixed #3352: Using phpunit.phar with PHPDBG does not work with
    auto_globals_jit=On
  * Fixed #3508: TypeError in Fileloader when trying to load
    nonexistent file
  * Fixed #3511: Asserting that an object is contained in an
    iterable while using == instead of === is no longer possible</changelog>
  <changelog author="suse+build@de-korte.org" date="1550232000">- Add macros.phpunit to fixup unit tests for PHPUnit</changelog>
  <changelog author="suse+build@de-korte.org" date="1550318400">- Update package to release 8.0.3
  * Fixed #3011: Unsupported PHPT --SECTION-- throws unhandled
    exception
  * Fixed #3461: StringEndsWith matches too loosely
  * Fixed #3515: Random order seed is only printed in verbose mode
  * Fixed #3517: Useless error message when depending on test that
    does not exist</changelog>
  <changelog author="suse+build@de-korte.org" date="1550491200">- Change install location of macros.phpunit</changelog>
  <changelog author="suse+build@de-korte.org" date="1550577600">- Update package to release 8.0.4
  * Fixed #3530: generateClassFromWsdl() does not handle methods
    with multiple output values
  * Fixed #3531: Test suite fails on warning
  * Fixed #3534: Wrong message in ConstraintTestCase
  * Fixed #3535: TypeError in Command</changelog>
  <changelog author="suse+build@de-korte.org" date="1552824000">- Update package to release 8.0.5
  * Fixed #3480: Wrong return type declaration for TestCase::getExpectedExceptionMessage()
    and TestCase::getExpectedExceptionMessageRegExp()
  * Fixed #3532: Wrong default value for cacheResult in phpunit.xsd
  * Fixed #3539: Wrong default value for resolveDependencies in
    phpunit.xsd
  * Fixed #3550: Check for valid attribute names in assertObjectHasAttribute()
    is too strict
  * Fixed #3555: Extension loader only allows objects that implement
    TestHook but should also allow Hook
  * Fixed #3560: TestDox does not work when tests are filtered</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1553601600">- Added obsoletes statements to php7-phpunit7_0 and php7-phpunit6 to allow
  a smooth update</changelog>
  <changelog author="suse+build@de-korte.org" date="1553860800">- Update package to release 8.0.6
  * Fixed #3564: Production code uses class from test suite's fixture</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1576411200">- Update package to release 8.5.0
  * https://github.com/sebastianbergmann/phpunit/blob/8.5/ChangeLog-8.5.md
- Update package to release 8.4.3
  * https://github.com/sebastianbergmann/phpunit/blob/8.4.3/ChangeLog-8.4.md
- Update package to release 8.3.5
  * https://github.com/sebastianbergmann/phpunit/blob/8.3.5/ChangeLog-8.3.md
- Update package to release 8.2.5
  * https://github.com/sebastianbergmann/phpunit/blob/8.2.5/ChangeLog-8.2.md
- Update package to release 8.1.6
  * https://github.com/sebastianbergmann/phpunit/blob/8.1.6/ChangeLog-8.1.md</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1597838400">- Use %_rpmmacrodir instead of wrong %{_libexecdir}/rpm/macros.d
  (libexecdir changes to /usr/libexec).</changelog>
  <changelog author="pgajdos@suse.com" date="1673524800">- package reworked, php7 and php8 flavors
- Update package to release 9.5.28
  * https://github.com/sebastianbergmann/phpunit/blob/9.5/ChangeLog-9.5.md</changelog>
  <changelog author="pgajdos@suse.com" date="1673956800">- %nil flavor implies Name: phpunit</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1674216000">- Refresh 9.5.28 source files as they seem to have been republished</changelog>
</package>
<package pkgid="466a16c9401a0be5d71880b901d423c7a61834e73150f1e771fee423ee180fe6" name="php8-phpunit" arch="src">
  <version epoch="0" ver="9.5.28" rel="bp154.2.1"/>
  <changelog author="suse+build@de-korte.org" date="1549368000">- Initial release for php7-phpunit8</changelog>
  <changelog author="suse+build@de-korte.org" date="1549454400">- Remove fixup of shebang (causes a SHA1 failure)</changelog>
  <changelog author="suse+build@de-korte.org" date="1549454401">- Only build for supported PHP versions
- Added source verification</changelog>
  <changelog author="suse+build@de-korte.org" date="1550059200">- Updated package to release 8.0.2
  * Fixed #3352: Using phpunit.phar with PHPDBG does not work with
    auto_globals_jit=On
  * Fixed #3508: TypeError in Fileloader when trying to load
    nonexistent file
  * Fixed #3511: Asserting that an object is contained in an
    iterable while using == instead of === is no longer possible</changelog>
  <changelog author="suse+build@de-korte.org" date="1550232000">- Add macros.phpunit to fixup unit tests for PHPUnit</changelog>
  <changelog author="suse+build@de-korte.org" date="1550318400">- Update package to release 8.0.3
  * Fixed #3011: Unsupported PHPT --SECTION-- throws unhandled
    exception
  * Fixed #3461: StringEndsWith matches too loosely
  * Fixed #3515: Random order seed is only printed in verbose mode
  * Fixed #3517: Useless error message when depending on test that
    does not exist</changelog>
  <changelog author="suse+build@de-korte.org" date="1550491200">- Change install location of macros.phpunit</changelog>
  <changelog author="suse+build@de-korte.org" date="1550577600">- Update package to release 8.0.4
  * Fixed #3530: generateClassFromWsdl() does not handle methods
    with multiple output values
  * Fixed #3531: Test suite fails on warning
  * Fixed #3534: Wrong message in ConstraintTestCase
  * Fixed #3535: TypeError in Command</changelog>
  <changelog author="suse+build@de-korte.org" date="1552824000">- Update package to release 8.0.5
  * Fixed #3480: Wrong return type declaration for TestCase::getExpectedExceptionMessage()
    and TestCase::getExpectedExceptionMessageRegExp()
  * Fixed #3532: Wrong default value for cacheResult in phpunit.xsd
  * Fixed #3539: Wrong default value for resolveDependencies in
    phpunit.xsd
  * Fixed #3550: Check for valid attribute names in assertObjectHasAttribute()
    is too strict
  * Fixed #3555: Extension loader only allows objects that implement
    TestHook but should also allow Hook
  * Fixed #3560: TestDox does not work when tests are filtered</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1553601600">- Added obsoletes statements to php7-phpunit7_0 and php7-phpunit6 to allow
  a smooth update</changelog>
  <changelog author="suse+build@de-korte.org" date="1553860800">- Update package to release 8.0.6
  * Fixed #3564: Production code uses class from test suite's fixture</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1576411200">- Update package to release 8.5.0
  * https://github.com/sebastianbergmann/phpunit/blob/8.5/ChangeLog-8.5.md
- Update package to release 8.4.3
  * https://github.com/sebastianbergmann/phpunit/blob/8.4.3/ChangeLog-8.4.md
- Update package to release 8.3.5
  * https://github.com/sebastianbergmann/phpunit/blob/8.3.5/ChangeLog-8.3.md
- Update package to release 8.2.5
  * https://github.com/sebastianbergmann/phpunit/blob/8.2.5/ChangeLog-8.2.md
- Update package to release 8.1.6
  * https://github.com/sebastianbergmann/phpunit/blob/8.1.6/ChangeLog-8.1.md</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1597838400">- Use %_rpmmacrodir instead of wrong %{_libexecdir}/rpm/macros.d
  (libexecdir changes to /usr/libexec).</changelog>
  <changelog author="pgajdos@suse.com" date="1673524800">- package reworked, php7 and php8 flavors
- Update package to release 9.5.28
  * https://github.com/sebastianbergmann/phpunit/blob/9.5/ChangeLog-9.5.md</changelog>
  <changelog author="pgajdos@suse.com" date="1673956800">- %nil flavor implies Name: phpunit</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1674216000">- Refresh 9.5.28 source files as they seem to have been republished</changelog>
</package>
<package pkgid="2dd63d54f90b550f46e2261b795119268cfbdb7de25edb60d5b2cdeab7b11a04" name="php8-redis" arch="aarch64">
  <version epoch="0" ver="5.3.7" rel="bp154.2.1"/>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1552651200">- Update to 4.3.0
  * Proper persistent connections pooling implementation
  * RedisArray auth
  * Use zend_string for storing key
  * Add ZPOPMAX and ZPOPMIN support
  * Implement GEORADIUS_RO and GEORADIUSBYMEMBER_RO
  * Add callback parameter to subscribe/psubscribe arginfo
  * Don't check the number affected keys in PS_UPDATE_TIMESTAMP_FUNC
  * Xgroup updates
  * RedisCluster auth
  * Cancel pipeline mode without executing commands
  * Use zend_string for pipeline_cmd
  * Different key hashing algorithms from hash extension
  * Breaking the lock acquire loop in case of network problems
  * Implement consistent hashing algorithm for RedisArray
  * Use zend_string for storing RedisArray hosts
  * Update lzf_compress to be compatible with PECL lzf extension
  * Fix RedisCluster keys memory leak
  * Directly use return_value in RedisCluster::keys method
  * Fix segfault in Redis Cluster with inconsistent configuration
  * Masters info leakfix
  * Refactor redis_sock_read_bulk_reply
  * Remove unused parameter lazy_connect from redis_sock_create
  * Remove useless ZEND_ACC_[C|D]TOR.
  * Documentation improvements
- Added additional settings to redis.ini</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1562068800">- Update to 5.0.0
  This release contains important improvements and breaking changes.
  The most interesting are: drop PHP5 support, RedisCluster slots caching,
  JSON and msgpack serializers, soft deprecation of non-Redis commands.
  * Remove HAVE_SPL
  * Allow compilation without JSON serialization enabled and fixes for
    deprecated helper methods.
  * Enable connection pooling by default
  * Soft deprecate methods that aren't actually Redis commands
  * Enable pooling for cluster slave nodes
  * xInfo response format
  * Make the XREADGROUP optional COUNT and BLOCK arguments nullable
  * Allow PING to take an optional argument
  * Allow ZRANGE to be called either with `true` or `['withscores' =&gt; true]`
  * Allow to specify server address as schema://host
  * Allow persistent_id to be passed as NULL with strict_types enabled
  * Add server address to exception message
  * Adds OPT_REPLY_LITERAL for rawCommand and EVAL
  * JSON serializer
  * Add support for STREAM to the type command
  * Fix TypeError when using built-in constants in `setOption`
  * Handle references in MGET
  * msgpack serializer
  * Add Cluster slots caching
  * Drop PHP5 support
  * Documentation improvements</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1565179200">- Refresh spec-file with manual optmizations
  * Remove version limit from BuildRequires:php7-devel (no actual).
  * Remove BuildRequires:php7-soap (no needed).
  * Add BuildRequires:php7-json (need for tests, but still does not load).
  * Add %make_build and %make_install macros.
- Update to 5.0.2
  * https://pecl.php.net/package-changelog.php?package=redis&amp;release=5.0.2
  * RedisCluster segfaults after second connection with cache_slots enabled.
  * Cleanup TSRMLS_* usage.
  * Replace ulong with zend_ulong.
  * Replace uint with uint32_t.
  * Fix regression for conntecting to ports &gt; 32767.
  * RedisCluster segfaults after second connection with cache_slots enabled.
  * Documentation improvements.</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1572696000">- Update to 5.1.0
  * https://pecl.php.net/package-changelog.php?package=redis&amp;release=5.1.0
  * Fix regression for multihost_distribute_call added in 112c77e3.
  * Fix regression for conntecting to unix sockets with relative path
    added in 1f41da64.
  * Fix unix-socket detection logic broken in 418428fa.
  * Fix memory leak and bug with getLastError for redis_mbulk_reply_assoc
    and redis_mbulk_reply_zipped.
  * Fix bug with password contain "#" for redis_session.
  * Add optional support for Zstd compression, using --enable-redis-ztsd.
    This requires libzstd version &gt;= 1.3.0.
  * Fix overallocation in RedisCluster directed node commands.
  * Also attach slaves when caching cluster slots.
  * Use zend_register_persistent_resource_ex for connection pooling.
  * Refactor redis_session.
  * Documentation improvements.
  * Fix missing null byte in PHP_MINFO_FUNCTION.
  * Remove dead code generic_unsubscribe_cmd.
  * Add documentation for zpopmin and zpopmax.
  * Allow to specify scheme for session handler.</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1575028800">- Update to 5.1.1
  * https://pecl.php.net/package-changelog.php?package=redis&amp;release=5.1.1
  * Fix fail to connect to redis through unix socket.
  * Documentation improvements.</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1583323200">- Update to 5.2.0
  * https://pecl.php.net/package-changelog.php?package=redis&amp;release=5.2.0
  * Include RedisSentinelTest.php in package.xml!
  * Fix -Wmaybe-uninitialized warning.
  * Fix improper destructor when zipping values and scores.
  * Use php_rand instead of php_mt_rand for liveness challenge string.
  * Initial support for RedisSentinel.
  * Fix for ASK redirections.
  * Create specific 'test skipped' exception.
  * Fixed memory leaks in RedisCluster.
  * Fixes for session lifetime values that underflow or overflow.
  * Enables slot caching for Redis Cluster.
  * Support TYPE argument for SCAN.
  * Added challenge/response mechanism for persistent connections.</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1585310400">- Update to 5.2.1
  * https://pecl.php.net/package-changelog.php?package=redis&amp;release=5.2.1
  * Fix arginfo for Redis::zadd.
  * Fix segfault on closing persistent stream.</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1588766400">- Update to 5.2.2
  * https://pecl.php.net/package-changelog.php?package=redis&amp;release=5.2.2
    This is a bugfix release that contains a fix for authentication
    when using persistent connections, and an option to make the
    ECHO challenge response logic optional.
  * Inexpensive liveness check, and making ECHO optional [56898f81] (Pavlo Yatsukhnenko)
  * Move `AUTH` to `redis_sock_server_open` [80f2529b](Pavlo Yatsukhnenko)</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1593777600">- Update to 5.3.0
  * https://pecl.php.net/package-changelog.php?package=redis&amp;release=5.3.0
  * Support for Redis 6 ACLs.
  * LZ4 Compression.
  * Support for new Redis 6 arguments.
  * Support for TLS connections.
  * New option Redis::SCAN_PREFIX, Redis::SCAN_NOPREFIX.
  * Configurable unit test authentication arguments.
  * Improved cluster slot caching mechanism to fix a couple
    of bugs and make it more efficient.
  * Stop calling Redis constructor when creating a RedisArray.
  * Use ZEND_LONG_FMT instead of system `long`.
  * Use long for SCAN iteration to fix potential overflow.
  * Avoid use-after-free of RediSock.
  * Use the portable `ZEND_LONG_FORMAT` family
    instead of C format specifiers.
  * PHP 8 compatibility.</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1594209600">- Update to 5.3.1
  * https://pecl.php.net/package-changelog.php?package=redis&amp;release=5.3.1
  * Properly clean up on session start failure.
  * Treat NULL as a failure for redis_extract_auth_info.
  * Don't dereference a NULL zend_string or efree one.
  * Fix config.m4 messages and test for and include php_hash.h.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1603368000">- Update to 5.3.2
  * Use "%.17g" sprintf format for doubles as done in Redis server.
  * Allow to pass NULL as RedisCluster stream context options.
  * Verify SET options are strings before testing them as strings
  * Fix cluster segfault when dealing with NULL multi bulk replies
    in RedisCluster
  * Fix xReadGroup() must return message id
  * Fix memory leak in rediscluster session handler
  * Fix XInfo() returns false if the stream is empty
  * Relax requirements on set's expire argument
  * Refactor redis_sock_check_liveness
  * PHP8 compatibility
  * Update documentation
  * Add Redis::OPT_NULL_MULTIBULK_AS_NULL setting to treat NULL
    multi bulk replies as NULL instead of [].
  * Allow to specify stream context for rediscluster session handler
  * Add new parameter to RedisCluster to specify stream ssl/tls
    context.
  * Add new parameter to RedisSentinel to specify auth information</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1611316800">- Remove BuildRequires:php7-json (don't need in php7, but in php8 work in core).</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1612267200">- Update to 5.3.3
  * Fix PHP8 Windows includes
  * Fix hash ops for php 8.0.1
  * Disable cloning Redis and RedisCluster objects</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1613563200">- Use _multibuild to also build for php8
- Use php_cfgdir and php_extdir macros to determine location of files</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1613563201">- Refresh spec-file via spec-cleaner.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1616587200">- Update to 5.3.4
  * Fix multi/pipeline segfault on Apple silicon
  * Pass compression flag on HMGET in RedisCluster
  * Abide by ZSTD error return constants
  * Fix timing related CI session tests</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1639915200">- Updated to 5.3.5
  * https://pecl.php.net/package-changelog.php?package=redis&amp;release=5.3.5
  * Added experimental support for detecting a dirty connection.
  * Fixed RedisArray constructor bug.
  * Fixed segfault in redis_setoption_handler.
  * Fixed masters array in the event of a cluster failover.
  * Fixed 32 bit type error.
  * Fixed radix character in certain locales.
  * Fixed ZSTD Validation.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1643112000">- Updated to 5.3.6
  * Fix a segfault in RedisArray::del</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1645099200">- Updated to 5.3.7
  * https://pecl.php.net/package-changelog.php?package=redis&amp;release=5.3.7
  * Fixed RedisArray::[hsz]scan and tests.
  * Fixed RedisArray::scan.
  * Fixed LZF decompression logic.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1670673600">- Remove php7 build for Tumbleweed (PHP 7.4 has reached EOL)</changelog>
</package>
<package pkgid="2c96664a79eb47ace5868940673c8fdfb95399484c1f2b0edeed5ca58ce56760" name="php8-redis" arch="i586">
  <version epoch="0" ver="5.3.7" rel="bp154.2.1"/>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1552651200">- Update to 4.3.0
  * Proper persistent connections pooling implementation
  * RedisArray auth
  * Use zend_string for storing key
  * Add ZPOPMAX and ZPOPMIN support
  * Implement GEORADIUS_RO and GEORADIUSBYMEMBER_RO
  * Add callback parameter to subscribe/psubscribe arginfo
  * Don't check the number affected keys in PS_UPDATE_TIMESTAMP_FUNC
  * Xgroup updates
  * RedisCluster auth
  * Cancel pipeline mode without executing commands
  * Use zend_string for pipeline_cmd
  * Different key hashing algorithms from hash extension
  * Breaking the lock acquire loop in case of network problems
  * Implement consistent hashing algorithm for RedisArray
  * Use zend_string for storing RedisArray hosts
  * Update lzf_compress to be compatible with PECL lzf extension
  * Fix RedisCluster keys memory leak
  * Directly use return_value in RedisCluster::keys method
  * Fix segfault in Redis Cluster with inconsistent configuration
  * Masters info leakfix
  * Refactor redis_sock_read_bulk_reply
  * Remove unused parameter lazy_connect from redis_sock_create
  * Remove useless ZEND_ACC_[C|D]TOR.
  * Documentation improvements
- Added additional settings to redis.ini</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1562068800">- Update to 5.0.0
  This release contains important improvements and breaking changes.
  The most interesting are: drop PHP5 support, RedisCluster slots caching,
  JSON and msgpack serializers, soft deprecation of non-Redis commands.
  * Remove HAVE_SPL
  * Allow compilation without JSON serialization enabled and fixes for
    deprecated helper methods.
  * Enable connection pooling by default
  * Soft deprecate methods that aren't actually Redis commands
  * Enable pooling for cluster slave nodes
  * xInfo response format
  * Make the XREADGROUP optional COUNT and BLOCK arguments nullable
  * Allow PING to take an optional argument
  * Allow ZRANGE to be called either with `true` or `['withscores' =&gt; true]`
  * Allow to specify server address as schema://host
  * Allow persistent_id to be passed as NULL with strict_types enabled
  * Add server address to exception message
  * Adds OPT_REPLY_LITERAL for rawCommand and EVAL
  * JSON serializer
  * Add support for STREAM to the type command
  * Fix TypeError when using built-in constants in `setOption`
  * Handle references in MGET
  * msgpack serializer
  * Add Cluster slots caching
  * Drop PHP5 support
  * Documentation improvements</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1565179200">- Refresh spec-file with manual optmizations
  * Remove version limit from BuildRequires:php7-devel (no actual).
  * Remove BuildRequires:php7-soap (no needed).
  * Add BuildRequires:php7-json (need for tests, but still does not load).
  * Add %make_build and %make_install macros.
- Update to 5.0.2
  * https://pecl.php.net/package-changelog.php?package=redis&amp;release=5.0.2
  * RedisCluster segfaults after second connection with cache_slots enabled.
  * Cleanup TSRMLS_* usage.
  * Replace ulong with zend_ulong.
  * Replace uint with uint32_t.
  * Fix regression for conntecting to ports &gt; 32767.
  * RedisCluster segfaults after second connection with cache_slots enabled.
  * Documentation improvements.</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1572696000">- Update to 5.1.0
  * https://pecl.php.net/package-changelog.php?package=redis&amp;release=5.1.0
  * Fix regression for multihost_distribute_call added in 112c77e3.
  * Fix regression for conntecting to unix sockets with relative path
    added in 1f41da64.
  * Fix unix-socket detection logic broken in 418428fa.
  * Fix memory leak and bug with getLastError for redis_mbulk_reply_assoc
    and redis_mbulk_reply_zipped.
  * Fix bug with password contain "#" for redis_session.
  * Add optional support for Zstd compression, using --enable-redis-ztsd.
    This requires libzstd version &gt;= 1.3.0.
  * Fix overallocation in RedisCluster directed node commands.
  * Also attach slaves when caching cluster slots.
  * Use zend_register_persistent_resource_ex for connection pooling.
  * Refactor redis_session.
  * Documentation improvements.
  * Fix missing null byte in PHP_MINFO_FUNCTION.
  * Remove dead code generic_unsubscribe_cmd.
  * Add documentation for zpopmin and zpopmax.
  * Allow to specify scheme for session handler.</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1575028800">- Update to 5.1.1
  * https://pecl.php.net/package-changelog.php?package=redis&amp;release=5.1.1
  * Fix fail to connect to redis through unix socket.
  * Documentation improvements.</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1583323200">- Update to 5.2.0
  * https://pecl.php.net/package-changelog.php?package=redis&amp;release=5.2.0
  * Include RedisSentinelTest.php in package.xml!
  * Fix -Wmaybe-uninitialized warning.
  * Fix improper destructor when zipping values and scores.
  * Use php_rand instead of php_mt_rand for liveness challenge string.
  * Initial support for RedisSentinel.
  * Fix for ASK redirections.
  * Create specific 'test skipped' exception.
  * Fixed memory leaks in RedisCluster.
  * Fixes for session lifetime values that underflow or overflow.
  * Enables slot caching for Redis Cluster.
  * Support TYPE argument for SCAN.
  * Added challenge/response mechanism for persistent connections.</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1585310400">- Update to 5.2.1
  * https://pecl.php.net/package-changelog.php?package=redis&amp;release=5.2.1
  * Fix arginfo for Redis::zadd.
  * Fix segfault on closing persistent stream.</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1588766400">- Update to 5.2.2
  * https://pecl.php.net/package-changelog.php?package=redis&amp;release=5.2.2
    This is a bugfix release that contains a fix for authentication
    when using persistent connections, and an option to make the
    ECHO challenge response logic optional.
  * Inexpensive liveness check, and making ECHO optional [56898f81] (Pavlo Yatsukhnenko)
  * Move `AUTH` to `redis_sock_server_open` [80f2529b](Pavlo Yatsukhnenko)</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1593777600">- Update to 5.3.0
  * https://pecl.php.net/package-changelog.php?package=redis&amp;release=5.3.0
  * Support for Redis 6 ACLs.
  * LZ4 Compression.
  * Support for new Redis 6 arguments.
  * Support for TLS connections.
  * New option Redis::SCAN_PREFIX, Redis::SCAN_NOPREFIX.
  * Configurable unit test authentication arguments.
  * Improved cluster slot caching mechanism to fix a couple
    of bugs and make it more efficient.
  * Stop calling Redis constructor when creating a RedisArray.
  * Use ZEND_LONG_FMT instead of system `long`.
  * Use long for SCAN iteration to fix potential overflow.
  * Avoid use-after-free of RediSock.
  * Use the portable `ZEND_LONG_FORMAT` family
    instead of C format specifiers.
  * PHP 8 compatibility.</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1594209600">- Update to 5.3.1
  * https://pecl.php.net/package-changelog.php?package=redis&amp;release=5.3.1
  * Properly clean up on session start failure.
  * Treat NULL as a failure for redis_extract_auth_info.
  * Don't dereference a NULL zend_string or efree one.
  * Fix config.m4 messages and test for and include php_hash.h.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1603368000">- Update to 5.3.2
  * Use "%.17g" sprintf format for doubles as done in Redis server.
  * Allow to pass NULL as RedisCluster stream context options.
  * Verify SET options are strings before testing them as strings
  * Fix cluster segfault when dealing with NULL multi bulk replies
    in RedisCluster
  * Fix xReadGroup() must return message id
  * Fix memory leak in rediscluster session handler
  * Fix XInfo() returns false if the stream is empty
  * Relax requirements on set's expire argument
  * Refactor redis_sock_check_liveness
  * PHP8 compatibility
  * Update documentation
  * Add Redis::OPT_NULL_MULTIBULK_AS_NULL setting to treat NULL
    multi bulk replies as NULL instead of [].
  * Allow to specify stream context for rediscluster session handler
  * Add new parameter to RedisCluster to specify stream ssl/tls
    context.
  * Add new parameter to RedisSentinel to specify auth information</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1611316800">- Remove BuildRequires:php7-json (don't need in php7, but in php8 work in core).</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1612267200">- Update to 5.3.3
  * Fix PHP8 Windows includes
  * Fix hash ops for php 8.0.1
  * Disable cloning Redis and RedisCluster objects</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1613563200">- Use _multibuild to also build for php8
- Use php_cfgdir and php_extdir macros to determine location of files</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1613563201">- Refresh spec-file via spec-cleaner.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1616587200">- Update to 5.3.4
  * Fix multi/pipeline segfault on Apple silicon
  * Pass compression flag on HMGET in RedisCluster
  * Abide by ZSTD error return constants
  * Fix timing related CI session tests</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1639915200">- Updated to 5.3.5
  * https://pecl.php.net/package-changelog.php?package=redis&amp;release=5.3.5
  * Added experimental support for detecting a dirty connection.
  * Fixed RedisArray constructor bug.
  * Fixed segfault in redis_setoption_handler.
  * Fixed masters array in the event of a cluster failover.
  * Fixed 32 bit type error.
  * Fixed radix character in certain locales.
  * Fixed ZSTD Validation.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1643112000">- Updated to 5.3.6
  * Fix a segfault in RedisArray::del</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1645099200">- Updated to 5.3.7
  * https://pecl.php.net/package-changelog.php?package=redis&amp;release=5.3.7
  * Fixed RedisArray::[hsz]scan and tests.
  * Fixed RedisArray::scan.
  * Fixed LZF decompression logic.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1670673600">- Remove php7 build for Tumbleweed (PHP 7.4 has reached EOL)</changelog>
</package>
<package pkgid="e614984feebbfb8dca51e059207a4403065d4cd1cf1fbfc6ab6032d9a2628ced" name="php8-redis" arch="ppc64le">
  <version epoch="0" ver="5.3.7" rel="bp154.2.1"/>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1552651200">- Update to 4.3.0
  * Proper persistent connections pooling implementation
  * RedisArray auth
  * Use zend_string for storing key
  * Add ZPOPMAX and ZPOPMIN support
  * Implement GEORADIUS_RO and GEORADIUSBYMEMBER_RO
  * Add callback parameter to subscribe/psubscribe arginfo
  * Don't check the number affected keys in PS_UPDATE_TIMESTAMP_FUNC
  * Xgroup updates
  * RedisCluster auth
  * Cancel pipeline mode without executing commands
  * Use zend_string for pipeline_cmd
  * Different key hashing algorithms from hash extension
  * Breaking the lock acquire loop in case of network problems
  * Implement consistent hashing algorithm for RedisArray
  * Use zend_string for storing RedisArray hosts
  * Update lzf_compress to be compatible with PECL lzf extension
  * Fix RedisCluster keys memory leak
  * Directly use return_value in RedisCluster::keys method
  * Fix segfault in Redis Cluster with inconsistent configuration
  * Masters info leakfix
  * Refactor redis_sock_read_bulk_reply
  * Remove unused parameter lazy_connect from redis_sock_create
  * Remove useless ZEND_ACC_[C|D]TOR.
  * Documentation improvements
- Added additional settings to redis.ini</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1562068800">- Update to 5.0.0
  This release contains important improvements and breaking changes.
  The most interesting are: drop PHP5 support, RedisCluster slots caching,
  JSON and msgpack serializers, soft deprecation of non-Redis commands.
  * Remove HAVE_SPL
  * Allow compilation without JSON serialization enabled and fixes for
    deprecated helper methods.
  * Enable connection pooling by default
  * Soft deprecate methods that aren't actually Redis commands
  * Enable pooling for cluster slave nodes
  * xInfo response format
  * Make the XREADGROUP optional COUNT and BLOCK arguments nullable
  * Allow PING to take an optional argument
  * Allow ZRANGE to be called either with `true` or `['withscores' =&gt; true]`
  * Allow to specify server address as schema://host
  * Allow persistent_id to be passed as NULL with strict_types enabled
  * Add server address to exception message
  * Adds OPT_REPLY_LITERAL for rawCommand and EVAL
  * JSON serializer
  * Add support for STREAM to the type command
  * Fix TypeError when using built-in constants in `setOption`
  * Handle references in MGET
  * msgpack serializer
  * Add Cluster slots caching
  * Drop PHP5 support
  * Documentation improvements</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1565179200">- Refresh spec-file with manual optmizations
  * Remove version limit from BuildRequires:php7-devel (no actual).
  * Remove BuildRequires:php7-soap (no needed).
  * Add BuildRequires:php7-json (need for tests, but still does not load).
  * Add %make_build and %make_install macros.
- Update to 5.0.2
  * https://pecl.php.net/package-changelog.php?package=redis&amp;release=5.0.2
  * RedisCluster segfaults after second connection with cache_slots enabled.
  * Cleanup TSRMLS_* usage.
  * Replace ulong with zend_ulong.
  * Replace uint with uint32_t.
  * Fix regression for conntecting to ports &gt; 32767.
  * RedisCluster segfaults after second connection with cache_slots enabled.
  * Documentation improvements.</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1572696000">- Update to 5.1.0
  * https://pecl.php.net/package-changelog.php?package=redis&amp;release=5.1.0
  * Fix regression for multihost_distribute_call added in 112c77e3.
  * Fix regression for conntecting to unix sockets with relative path
    added in 1f41da64.
  * Fix unix-socket detection logic broken in 418428fa.
  * Fix memory leak and bug with getLastError for redis_mbulk_reply_assoc
    and redis_mbulk_reply_zipped.
  * Fix bug with password contain "#" for redis_session.
  * Add optional support for Zstd compression, using --enable-redis-ztsd.
    This requires libzstd version &gt;= 1.3.0.
  * Fix overallocation in RedisCluster directed node commands.
  * Also attach slaves when caching cluster slots.
  * Use zend_register_persistent_resource_ex for connection pooling.
  * Refactor redis_session.
  * Documentation improvements.
  * Fix missing null byte in PHP_MINFO_FUNCTION.
  * Remove dead code generic_unsubscribe_cmd.
  * Add documentation for zpopmin and zpopmax.
  * Allow to specify scheme for session handler.</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1575028800">- Update to 5.1.1
  * https://pecl.php.net/package-changelog.php?package=redis&amp;release=5.1.1
  * Fix fail to connect to redis through unix socket.
  * Documentation improvements.</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1583323200">- Update to 5.2.0
  * https://pecl.php.net/package-changelog.php?package=redis&amp;release=5.2.0
  * Include RedisSentinelTest.php in package.xml!
  * Fix -Wmaybe-uninitialized warning.
  * Fix improper destructor when zipping values and scores.
  * Use php_rand instead of php_mt_rand for liveness challenge string.
  * Initial support for RedisSentinel.
  * Fix for ASK redirections.
  * Create specific 'test skipped' exception.
  * Fixed memory leaks in RedisCluster.
  * Fixes for session lifetime values that underflow or overflow.
  * Enables slot caching for Redis Cluster.
  * Support TYPE argument for SCAN.
  * Added challenge/response mechanism for persistent connections.</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1585310400">- Update to 5.2.1
  * https://pecl.php.net/package-changelog.php?package=redis&amp;release=5.2.1
  * Fix arginfo for Redis::zadd.
  * Fix segfault on closing persistent stream.</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1588766400">- Update to 5.2.2
  * https://pecl.php.net/package-changelog.php?package=redis&amp;release=5.2.2
    This is a bugfix release that contains a fix for authentication
    when using persistent connections, and an option to make the
    ECHO challenge response logic optional.
  * Inexpensive liveness check, and making ECHO optional [56898f81] (Pavlo Yatsukhnenko)
  * Move `AUTH` to `redis_sock_server_open` [80f2529b](Pavlo Yatsukhnenko)</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1593777600">- Update to 5.3.0
  * https://pecl.php.net/package-changelog.php?package=redis&amp;release=5.3.0
  * Support for Redis 6 ACLs.
  * LZ4 Compression.
  * Support for new Redis 6 arguments.
  * Support for TLS connections.
  * New option Redis::SCAN_PREFIX, Redis::SCAN_NOPREFIX.
  * Configurable unit test authentication arguments.
  * Improved cluster slot caching mechanism to fix a couple
    of bugs and make it more efficient.
  * Stop calling Redis constructor when creating a RedisArray.
  * Use ZEND_LONG_FMT instead of system `long`.
  * Use long for SCAN iteration to fix potential overflow.
  * Avoid use-after-free of RediSock.
  * Use the portable `ZEND_LONG_FORMAT` family
    instead of C format specifiers.
  * PHP 8 compatibility.</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1594209600">- Update to 5.3.1
  * https://pecl.php.net/package-changelog.php?package=redis&amp;release=5.3.1
  * Properly clean up on session start failure.
  * Treat NULL as a failure for redis_extract_auth_info.
  * Don't dereference a NULL zend_string or efree one.
  * Fix config.m4 messages and test for and include php_hash.h.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1603368000">- Update to 5.3.2
  * Use "%.17g" sprintf format for doubles as done in Redis server.
  * Allow to pass NULL as RedisCluster stream context options.
  * Verify SET options are strings before testing them as strings
  * Fix cluster segfault when dealing with NULL multi bulk replies
    in RedisCluster
  * Fix xReadGroup() must return message id
  * Fix memory leak in rediscluster session handler
  * Fix XInfo() returns false if the stream is empty
  * Relax requirements on set's expire argument
  * Refactor redis_sock_check_liveness
  * PHP8 compatibility
  * Update documentation
  * Add Redis::OPT_NULL_MULTIBULK_AS_NULL setting to treat NULL
    multi bulk replies as NULL instead of [].
  * Allow to specify stream context for rediscluster session handler
  * Add new parameter to RedisCluster to specify stream ssl/tls
    context.
  * Add new parameter to RedisSentinel to specify auth information</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1611316800">- Remove BuildRequires:php7-json (don't need in php7, but in php8 work in core).</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1612267200">- Update to 5.3.3
  * Fix PHP8 Windows includes
  * Fix hash ops for php 8.0.1
  * Disable cloning Redis and RedisCluster objects</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1613563200">- Use _multibuild to also build for php8
- Use php_cfgdir and php_extdir macros to determine location of files</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1613563201">- Refresh spec-file via spec-cleaner.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1616587200">- Update to 5.3.4
  * Fix multi/pipeline segfault on Apple silicon
  * Pass compression flag on HMGET in RedisCluster
  * Abide by ZSTD error return constants
  * Fix timing related CI session tests</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1639915200">- Updated to 5.3.5
  * https://pecl.php.net/package-changelog.php?package=redis&amp;release=5.3.5
  * Added experimental support for detecting a dirty connection.
  * Fixed RedisArray constructor bug.
  * Fixed segfault in redis_setoption_handler.
  * Fixed masters array in the event of a cluster failover.
  * Fixed 32 bit type error.
  * Fixed radix character in certain locales.
  * Fixed ZSTD Validation.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1643112000">- Updated to 5.3.6
  * Fix a segfault in RedisArray::del</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1645099200">- Updated to 5.3.7
  * https://pecl.php.net/package-changelog.php?package=redis&amp;release=5.3.7
  * Fixed RedisArray::[hsz]scan and tests.
  * Fixed RedisArray::scan.
  * Fixed LZF decompression logic.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1670673600">- Remove php7 build for Tumbleweed (PHP 7.4 has reached EOL)</changelog>
</package>
<package pkgid="fb3906561a374429afb45c3f7af80a5fb0f538e4bb9099274b0a6e4f77000633" name="php8-redis" arch="s390x">
  <version epoch="0" ver="5.3.7" rel="bp154.2.1"/>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1552651200">- Update to 4.3.0
  * Proper persistent connections pooling implementation
  * RedisArray auth
  * Use zend_string for storing key
  * Add ZPOPMAX and ZPOPMIN support
  * Implement GEORADIUS_RO and GEORADIUSBYMEMBER_RO
  * Add callback parameter to subscribe/psubscribe arginfo
  * Don't check the number affected keys in PS_UPDATE_TIMESTAMP_FUNC
  * Xgroup updates
  * RedisCluster auth
  * Cancel pipeline mode without executing commands
  * Use zend_string for pipeline_cmd
  * Different key hashing algorithms from hash extension
  * Breaking the lock acquire loop in case of network problems
  * Implement consistent hashing algorithm for RedisArray
  * Use zend_string for storing RedisArray hosts
  * Update lzf_compress to be compatible with PECL lzf extension
  * Fix RedisCluster keys memory leak
  * Directly use return_value in RedisCluster::keys method
  * Fix segfault in Redis Cluster with inconsistent configuration
  * Masters info leakfix
  * Refactor redis_sock_read_bulk_reply
  * Remove unused parameter lazy_connect from redis_sock_create
  * Remove useless ZEND_ACC_[C|D]TOR.
  * Documentation improvements
- Added additional settings to redis.ini</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1562068800">- Update to 5.0.0
  This release contains important improvements and breaking changes.
  The most interesting are: drop PHP5 support, RedisCluster slots caching,
  JSON and msgpack serializers, soft deprecation of non-Redis commands.
  * Remove HAVE_SPL
  * Allow compilation without JSON serialization enabled and fixes for
    deprecated helper methods.
  * Enable connection pooling by default
  * Soft deprecate methods that aren't actually Redis commands
  * Enable pooling for cluster slave nodes
  * xInfo response format
  * Make the XREADGROUP optional COUNT and BLOCK arguments nullable
  * Allow PING to take an optional argument
  * Allow ZRANGE to be called either with `true` or `['withscores' =&gt; true]`
  * Allow to specify server address as schema://host
  * Allow persistent_id to be passed as NULL with strict_types enabled
  * Add server address to exception message
  * Adds OPT_REPLY_LITERAL for rawCommand and EVAL
  * JSON serializer
  * Add support for STREAM to the type command
  * Fix TypeError when using built-in constants in `setOption`
  * Handle references in MGET
  * msgpack serializer
  * Add Cluster slots caching
  * Drop PHP5 support
  * Documentation improvements</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1565179200">- Refresh spec-file with manual optmizations
  * Remove version limit from BuildRequires:php7-devel (no actual).
  * Remove BuildRequires:php7-soap (no needed).
  * Add BuildRequires:php7-json (need for tests, but still does not load).
  * Add %make_build and %make_install macros.
- Update to 5.0.2
  * https://pecl.php.net/package-changelog.php?package=redis&amp;release=5.0.2
  * RedisCluster segfaults after second connection with cache_slots enabled.
  * Cleanup TSRMLS_* usage.
  * Replace ulong with zend_ulong.
  * Replace uint with uint32_t.
  * Fix regression for conntecting to ports &gt; 32767.
  * RedisCluster segfaults after second connection with cache_slots enabled.
  * Documentation improvements.</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1572696000">- Update to 5.1.0
  * https://pecl.php.net/package-changelog.php?package=redis&amp;release=5.1.0
  * Fix regression for multihost_distribute_call added in 112c77e3.
  * Fix regression for conntecting to unix sockets with relative path
    added in 1f41da64.
  * Fix unix-socket detection logic broken in 418428fa.
  * Fix memory leak and bug with getLastError for redis_mbulk_reply_assoc
    and redis_mbulk_reply_zipped.
  * Fix bug with password contain "#" for redis_session.
  * Add optional support for Zstd compression, using --enable-redis-ztsd.
    This requires libzstd version &gt;= 1.3.0.
  * Fix overallocation in RedisCluster directed node commands.
  * Also attach slaves when caching cluster slots.
  * Use zend_register_persistent_resource_ex for connection pooling.
  * Refactor redis_session.
  * Documentation improvements.
  * Fix missing null byte in PHP_MINFO_FUNCTION.
  * Remove dead code generic_unsubscribe_cmd.
  * Add documentation for zpopmin and zpopmax.
  * Allow to specify scheme for session handler.</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1575028800">- Update to 5.1.1
  * https://pecl.php.net/package-changelog.php?package=redis&amp;release=5.1.1
  * Fix fail to connect to redis through unix socket.
  * Documentation improvements.</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1583323200">- Update to 5.2.0
  * https://pecl.php.net/package-changelog.php?package=redis&amp;release=5.2.0
  * Include RedisSentinelTest.php in package.xml!
  * Fix -Wmaybe-uninitialized warning.
  * Fix improper destructor when zipping values and scores.
  * Use php_rand instead of php_mt_rand for liveness challenge string.
  * Initial support for RedisSentinel.
  * Fix for ASK redirections.
  * Create specific 'test skipped' exception.
  * Fixed memory leaks in RedisCluster.
  * Fixes for session lifetime values that underflow or overflow.
  * Enables slot caching for Redis Cluster.
  * Support TYPE argument for SCAN.
  * Added challenge/response mechanism for persistent connections.</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1585310400">- Update to 5.2.1
  * https://pecl.php.net/package-changelog.php?package=redis&amp;release=5.2.1
  * Fix arginfo for Redis::zadd.
  * Fix segfault on closing persistent stream.</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1588766400">- Update to 5.2.2
  * https://pecl.php.net/package-changelog.php?package=redis&amp;release=5.2.2
    This is a bugfix release that contains a fix for authentication
    when using persistent connections, and an option to make the
    ECHO challenge response logic optional.
  * Inexpensive liveness check, and making ECHO optional [56898f81] (Pavlo Yatsukhnenko)
  * Move `AUTH` to `redis_sock_server_open` [80f2529b](Pavlo Yatsukhnenko)</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1593777600">- Update to 5.3.0
  * https://pecl.php.net/package-changelog.php?package=redis&amp;release=5.3.0
  * Support for Redis 6 ACLs.
  * LZ4 Compression.
  * Support for new Redis 6 arguments.
  * Support for TLS connections.
  * New option Redis::SCAN_PREFIX, Redis::SCAN_NOPREFIX.
  * Configurable unit test authentication arguments.
  * Improved cluster slot caching mechanism to fix a couple
    of bugs and make it more efficient.
  * Stop calling Redis constructor when creating a RedisArray.
  * Use ZEND_LONG_FMT instead of system `long`.
  * Use long for SCAN iteration to fix potential overflow.
  * Avoid use-after-free of RediSock.
  * Use the portable `ZEND_LONG_FORMAT` family
    instead of C format specifiers.
  * PHP 8 compatibility.</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1594209600">- Update to 5.3.1
  * https://pecl.php.net/package-changelog.php?package=redis&amp;release=5.3.1
  * Properly clean up on session start failure.
  * Treat NULL as a failure for redis_extract_auth_info.
  * Don't dereference a NULL zend_string or efree one.
  * Fix config.m4 messages and test for and include php_hash.h.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1603368000">- Update to 5.3.2
  * Use "%.17g" sprintf format for doubles as done in Redis server.
  * Allow to pass NULL as RedisCluster stream context options.
  * Verify SET options are strings before testing them as strings
  * Fix cluster segfault when dealing with NULL multi bulk replies
    in RedisCluster
  * Fix xReadGroup() must return message id
  * Fix memory leak in rediscluster session handler
  * Fix XInfo() returns false if the stream is empty
  * Relax requirements on set's expire argument
  * Refactor redis_sock_check_liveness
  * PHP8 compatibility
  * Update documentation
  * Add Redis::OPT_NULL_MULTIBULK_AS_NULL setting to treat NULL
    multi bulk replies as NULL instead of [].
  * Allow to specify stream context for rediscluster session handler
  * Add new parameter to RedisCluster to specify stream ssl/tls
    context.
  * Add new parameter to RedisSentinel to specify auth information</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1611316800">- Remove BuildRequires:php7-json (don't need in php7, but in php8 work in core).</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1612267200">- Update to 5.3.3
  * Fix PHP8 Windows includes
  * Fix hash ops for php 8.0.1
  * Disable cloning Redis and RedisCluster objects</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1613563200">- Use _multibuild to also build for php8
- Use php_cfgdir and php_extdir macros to determine location of files</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1613563201">- Refresh spec-file via spec-cleaner.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1616587200">- Update to 5.3.4
  * Fix multi/pipeline segfault on Apple silicon
  * Pass compression flag on HMGET in RedisCluster
  * Abide by ZSTD error return constants
  * Fix timing related CI session tests</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1639915200">- Updated to 5.3.5
  * https://pecl.php.net/package-changelog.php?package=redis&amp;release=5.3.5
  * Added experimental support for detecting a dirty connection.
  * Fixed RedisArray constructor bug.
  * Fixed segfault in redis_setoption_handler.
  * Fixed masters array in the event of a cluster failover.
  * Fixed 32 bit type error.
  * Fixed radix character in certain locales.
  * Fixed ZSTD Validation.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1643112000">- Updated to 5.3.6
  * Fix a segfault in RedisArray::del</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1645099200">- Updated to 5.3.7
  * https://pecl.php.net/package-changelog.php?package=redis&amp;release=5.3.7
  * Fixed RedisArray::[hsz]scan and tests.
  * Fixed RedisArray::scan.
  * Fixed LZF decompression logic.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1670673600">- Remove php7 build for Tumbleweed (PHP 7.4 has reached EOL)</changelog>
</package>
<package pkgid="6d71b202a43efba8036036fda91a83e7dc1b2e8718b8fe84e2f93d41b5862962" name="php8-redis" arch="src">
  <version epoch="0" ver="5.3.7" rel="bp154.2.1"/>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1552651200">- Update to 4.3.0
  * Proper persistent connections pooling implementation
  * RedisArray auth
  * Use zend_string for storing key
  * Add ZPOPMAX and ZPOPMIN support
  * Implement GEORADIUS_RO and GEORADIUSBYMEMBER_RO
  * Add callback parameter to subscribe/psubscribe arginfo
  * Don't check the number affected keys in PS_UPDATE_TIMESTAMP_FUNC
  * Xgroup updates
  * RedisCluster auth
  * Cancel pipeline mode without executing commands
  * Use zend_string for pipeline_cmd
  * Different key hashing algorithms from hash extension
  * Breaking the lock acquire loop in case of network problems
  * Implement consistent hashing algorithm for RedisArray
  * Use zend_string for storing RedisArray hosts
  * Update lzf_compress to be compatible with PECL lzf extension
  * Fix RedisCluster keys memory leak
  * Directly use return_value in RedisCluster::keys method
  * Fix segfault in Redis Cluster with inconsistent configuration
  * Masters info leakfix
  * Refactor redis_sock_read_bulk_reply
  * Remove unused parameter lazy_connect from redis_sock_create
  * Remove useless ZEND_ACC_[C|D]TOR.
  * Documentation improvements
- Added additional settings to redis.ini</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1562068800">- Update to 5.0.0
  This release contains important improvements and breaking changes.
  The most interesting are: drop PHP5 support, RedisCluster slots caching,
  JSON and msgpack serializers, soft deprecation of non-Redis commands.
  * Remove HAVE_SPL
  * Allow compilation without JSON serialization enabled and fixes for
    deprecated helper methods.
  * Enable connection pooling by default
  * Soft deprecate methods that aren't actually Redis commands
  * Enable pooling for cluster slave nodes
  * xInfo response format
  * Make the XREADGROUP optional COUNT and BLOCK arguments nullable
  * Allow PING to take an optional argument
  * Allow ZRANGE to be called either with `true` or `['withscores' =&gt; true]`
  * Allow to specify server address as schema://host
  * Allow persistent_id to be passed as NULL with strict_types enabled
  * Add server address to exception message
  * Adds OPT_REPLY_LITERAL for rawCommand and EVAL
  * JSON serializer
  * Add support for STREAM to the type command
  * Fix TypeError when using built-in constants in `setOption`
  * Handle references in MGET
  * msgpack serializer
  * Add Cluster slots caching
  * Drop PHP5 support
  * Documentation improvements</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1565179200">- Refresh spec-file with manual optmizations
  * Remove version limit from BuildRequires:php7-devel (no actual).
  * Remove BuildRequires:php7-soap (no needed).
  * Add BuildRequires:php7-json (need for tests, but still does not load).
  * Add %make_build and %make_install macros.
- Update to 5.0.2
  * https://pecl.php.net/package-changelog.php?package=redis&amp;release=5.0.2
  * RedisCluster segfaults after second connection with cache_slots enabled.
  * Cleanup TSRMLS_* usage.
  * Replace ulong with zend_ulong.
  * Replace uint with uint32_t.
  * Fix regression for conntecting to ports &gt; 32767.
  * RedisCluster segfaults after second connection with cache_slots enabled.
  * Documentation improvements.</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1572696000">- Update to 5.1.0
  * https://pecl.php.net/package-changelog.php?package=redis&amp;release=5.1.0
  * Fix regression for multihost_distribute_call added in 112c77e3.
  * Fix regression for conntecting to unix sockets with relative path
    added in 1f41da64.
  * Fix unix-socket detection logic broken in 418428fa.
  * Fix memory leak and bug with getLastError for redis_mbulk_reply_assoc
    and redis_mbulk_reply_zipped.
  * Fix bug with password contain "#" for redis_session.
  * Add optional support for Zstd compression, using --enable-redis-ztsd.
    This requires libzstd version &gt;= 1.3.0.
  * Fix overallocation in RedisCluster directed node commands.
  * Also attach slaves when caching cluster slots.
  * Use zend_register_persistent_resource_ex for connection pooling.
  * Refactor redis_session.
  * Documentation improvements.
  * Fix missing null byte in PHP_MINFO_FUNCTION.
  * Remove dead code generic_unsubscribe_cmd.
  * Add documentation for zpopmin and zpopmax.
  * Allow to specify scheme for session handler.</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1575028800">- Update to 5.1.1
  * https://pecl.php.net/package-changelog.php?package=redis&amp;release=5.1.1
  * Fix fail to connect to redis through unix socket.
  * Documentation improvements.</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1583323200">- Update to 5.2.0
  * https://pecl.php.net/package-changelog.php?package=redis&amp;release=5.2.0
  * Include RedisSentinelTest.php in package.xml!
  * Fix -Wmaybe-uninitialized warning.
  * Fix improper destructor when zipping values and scores.
  * Use php_rand instead of php_mt_rand for liveness challenge string.
  * Initial support for RedisSentinel.
  * Fix for ASK redirections.
  * Create specific 'test skipped' exception.
  * Fixed memory leaks in RedisCluster.
  * Fixes for session lifetime values that underflow or overflow.
  * Enables slot caching for Redis Cluster.
  * Support TYPE argument for SCAN.
  * Added challenge/response mechanism for persistent connections.</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1585310400">- Update to 5.2.1
  * https://pecl.php.net/package-changelog.php?package=redis&amp;release=5.2.1
  * Fix arginfo for Redis::zadd.
  * Fix segfault on closing persistent stream.</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1588766400">- Update to 5.2.2
  * https://pecl.php.net/package-changelog.php?package=redis&amp;release=5.2.2
    This is a bugfix release that contains a fix for authentication
    when using persistent connections, and an option to make the
    ECHO challenge response logic optional.
  * Inexpensive liveness check, and making ECHO optional [56898f81] (Pavlo Yatsukhnenko)
  * Move `AUTH` to `redis_sock_server_open` [80f2529b](Pavlo Yatsukhnenko)</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1593777600">- Update to 5.3.0
  * https://pecl.php.net/package-changelog.php?package=redis&amp;release=5.3.0
  * Support for Redis 6 ACLs.
  * LZ4 Compression.
  * Support for new Redis 6 arguments.
  * Support for TLS connections.
  * New option Redis::SCAN_PREFIX, Redis::SCAN_NOPREFIX.
  * Configurable unit test authentication arguments.
  * Improved cluster slot caching mechanism to fix a couple
    of bugs and make it more efficient.
  * Stop calling Redis constructor when creating a RedisArray.
  * Use ZEND_LONG_FMT instead of system `long`.
  * Use long for SCAN iteration to fix potential overflow.
  * Avoid use-after-free of RediSock.
  * Use the portable `ZEND_LONG_FORMAT` family
    instead of C format specifiers.
  * PHP 8 compatibility.</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1594209600">- Update to 5.3.1
  * https://pecl.php.net/package-changelog.php?package=redis&amp;release=5.3.1
  * Properly clean up on session start failure.
  * Treat NULL as a failure for redis_extract_auth_info.
  * Don't dereference a NULL zend_string or efree one.
  * Fix config.m4 messages and test for and include php_hash.h.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1603368000">- Update to 5.3.2
  * Use "%.17g" sprintf format for doubles as done in Redis server.
  * Allow to pass NULL as RedisCluster stream context options.
  * Verify SET options are strings before testing them as strings
  * Fix cluster segfault when dealing with NULL multi bulk replies
    in RedisCluster
  * Fix xReadGroup() must return message id
  * Fix memory leak in rediscluster session handler
  * Fix XInfo() returns false if the stream is empty
  * Relax requirements on set's expire argument
  * Refactor redis_sock_check_liveness
  * PHP8 compatibility
  * Update documentation
  * Add Redis::OPT_NULL_MULTIBULK_AS_NULL setting to treat NULL
    multi bulk replies as NULL instead of [].
  * Allow to specify stream context for rediscluster session handler
  * Add new parameter to RedisCluster to specify stream ssl/tls
    context.
  * Add new parameter to RedisSentinel to specify auth information</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1611316800">- Remove BuildRequires:php7-json (don't need in php7, but in php8 work in core).</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1612267200">- Update to 5.3.3
  * Fix PHP8 Windows includes
  * Fix hash ops for php 8.0.1
  * Disable cloning Redis and RedisCluster objects</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1613563200">- Use _multibuild to also build for php8
- Use php_cfgdir and php_extdir macros to determine location of files</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1613563201">- Refresh spec-file via spec-cleaner.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1616587200">- Update to 5.3.4
  * Fix multi/pipeline segfault on Apple silicon
  * Pass compression flag on HMGET in RedisCluster
  * Abide by ZSTD error return constants
  * Fix timing related CI session tests</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1639915200">- Updated to 5.3.5
  * https://pecl.php.net/package-changelog.php?package=redis&amp;release=5.3.5
  * Added experimental support for detecting a dirty connection.
  * Fixed RedisArray constructor bug.
  * Fixed segfault in redis_setoption_handler.
  * Fixed masters array in the event of a cluster failover.
  * Fixed 32 bit type error.
  * Fixed radix character in certain locales.
  * Fixed ZSTD Validation.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1643112000">- Updated to 5.3.6
  * Fix a segfault in RedisArray::del</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1645099200">- Updated to 5.3.7
  * https://pecl.php.net/package-changelog.php?package=redis&amp;release=5.3.7
  * Fixed RedisArray::[hsz]scan and tests.
  * Fixed RedisArray::scan.
  * Fixed LZF decompression logic.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1670673600">- Remove php7 build for Tumbleweed (PHP 7.4 has reached EOL)</changelog>
</package>
<package pkgid="941a6e3e0aaadde36fc5c4989cd3ea6a2016926dfef69b6f3f51dac8c11f9efb" name="php8-redis" arch="x86_64">
  <version epoch="0" ver="5.3.7" rel="bp154.2.1"/>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1552651200">- Update to 4.3.0
  * Proper persistent connections pooling implementation
  * RedisArray auth
  * Use zend_string for storing key
  * Add ZPOPMAX and ZPOPMIN support
  * Implement GEORADIUS_RO and GEORADIUSBYMEMBER_RO
  * Add callback parameter to subscribe/psubscribe arginfo
  * Don't check the number affected keys in PS_UPDATE_TIMESTAMP_FUNC
  * Xgroup updates
  * RedisCluster auth
  * Cancel pipeline mode without executing commands
  * Use zend_string for pipeline_cmd
  * Different key hashing algorithms from hash extension
  * Breaking the lock acquire loop in case of network problems
  * Implement consistent hashing algorithm for RedisArray
  * Use zend_string for storing RedisArray hosts
  * Update lzf_compress to be compatible with PECL lzf extension
  * Fix RedisCluster keys memory leak
  * Directly use return_value in RedisCluster::keys method
  * Fix segfault in Redis Cluster with inconsistent configuration
  * Masters info leakfix
  * Refactor redis_sock_read_bulk_reply
  * Remove unused parameter lazy_connect from redis_sock_create
  * Remove useless ZEND_ACC_[C|D]TOR.
  * Documentation improvements
- Added additional settings to redis.ini</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1562068800">- Update to 5.0.0
  This release contains important improvements and breaking changes.
  The most interesting are: drop PHP5 support, RedisCluster slots caching,
  JSON and msgpack serializers, soft deprecation of non-Redis commands.
  * Remove HAVE_SPL
  * Allow compilation without JSON serialization enabled and fixes for
    deprecated helper methods.
  * Enable connection pooling by default
  * Soft deprecate methods that aren't actually Redis commands
  * Enable pooling for cluster slave nodes
  * xInfo response format
  * Make the XREADGROUP optional COUNT and BLOCK arguments nullable
  * Allow PING to take an optional argument
  * Allow ZRANGE to be called either with `true` or `['withscores' =&gt; true]`
  * Allow to specify server address as schema://host
  * Allow persistent_id to be passed as NULL with strict_types enabled
  * Add server address to exception message
  * Adds OPT_REPLY_LITERAL for rawCommand and EVAL
  * JSON serializer
  * Add support for STREAM to the type command
  * Fix TypeError when using built-in constants in `setOption`
  * Handle references in MGET
  * msgpack serializer
  * Add Cluster slots caching
  * Drop PHP5 support
  * Documentation improvements</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1565179200">- Refresh spec-file with manual optmizations
  * Remove version limit from BuildRequires:php7-devel (no actual).
  * Remove BuildRequires:php7-soap (no needed).
  * Add BuildRequires:php7-json (need for tests, but still does not load).
  * Add %make_build and %make_install macros.
- Update to 5.0.2
  * https://pecl.php.net/package-changelog.php?package=redis&amp;release=5.0.2
  * RedisCluster segfaults after second connection with cache_slots enabled.
  * Cleanup TSRMLS_* usage.
  * Replace ulong with zend_ulong.
  * Replace uint with uint32_t.
  * Fix regression for conntecting to ports &gt; 32767.
  * RedisCluster segfaults after second connection with cache_slots enabled.
  * Documentation improvements.</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1572696000">- Update to 5.1.0
  * https://pecl.php.net/package-changelog.php?package=redis&amp;release=5.1.0
  * Fix regression for multihost_distribute_call added in 112c77e3.
  * Fix regression for conntecting to unix sockets with relative path
    added in 1f41da64.
  * Fix unix-socket detection logic broken in 418428fa.
  * Fix memory leak and bug with getLastError for redis_mbulk_reply_assoc
    and redis_mbulk_reply_zipped.
  * Fix bug with password contain "#" for redis_session.
  * Add optional support for Zstd compression, using --enable-redis-ztsd.
    This requires libzstd version &gt;= 1.3.0.
  * Fix overallocation in RedisCluster directed node commands.
  * Also attach slaves when caching cluster slots.
  * Use zend_register_persistent_resource_ex for connection pooling.
  * Refactor redis_session.
  * Documentation improvements.
  * Fix missing null byte in PHP_MINFO_FUNCTION.
  * Remove dead code generic_unsubscribe_cmd.
  * Add documentation for zpopmin and zpopmax.
  * Allow to specify scheme for session handler.</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1575028800">- Update to 5.1.1
  * https://pecl.php.net/package-changelog.php?package=redis&amp;release=5.1.1
  * Fix fail to connect to redis through unix socket.
  * Documentation improvements.</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1583323200">- Update to 5.2.0
  * https://pecl.php.net/package-changelog.php?package=redis&amp;release=5.2.0
  * Include RedisSentinelTest.php in package.xml!
  * Fix -Wmaybe-uninitialized warning.
  * Fix improper destructor when zipping values and scores.
  * Use php_rand instead of php_mt_rand for liveness challenge string.
  * Initial support for RedisSentinel.
  * Fix for ASK redirections.
  * Create specific 'test skipped' exception.
  * Fixed memory leaks in RedisCluster.
  * Fixes for session lifetime values that underflow or overflow.
  * Enables slot caching for Redis Cluster.
  * Support TYPE argument for SCAN.
  * Added challenge/response mechanism for persistent connections.</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1585310400">- Update to 5.2.1
  * https://pecl.php.net/package-changelog.php?package=redis&amp;release=5.2.1
  * Fix arginfo for Redis::zadd.
  * Fix segfault on closing persistent stream.</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1588766400">- Update to 5.2.2
  * https://pecl.php.net/package-changelog.php?package=redis&amp;release=5.2.2
    This is a bugfix release that contains a fix for authentication
    when using persistent connections, and an option to make the
    ECHO challenge response logic optional.
  * Inexpensive liveness check, and making ECHO optional [56898f81] (Pavlo Yatsukhnenko)
  * Move `AUTH` to `redis_sock_server_open` [80f2529b](Pavlo Yatsukhnenko)</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1593777600">- Update to 5.3.0
  * https://pecl.php.net/package-changelog.php?package=redis&amp;release=5.3.0
  * Support for Redis 6 ACLs.
  * LZ4 Compression.
  * Support for new Redis 6 arguments.
  * Support for TLS connections.
  * New option Redis::SCAN_PREFIX, Redis::SCAN_NOPREFIX.
  * Configurable unit test authentication arguments.
  * Improved cluster slot caching mechanism to fix a couple
    of bugs and make it more efficient.
  * Stop calling Redis constructor when creating a RedisArray.
  * Use ZEND_LONG_FMT instead of system `long`.
  * Use long for SCAN iteration to fix potential overflow.
  * Avoid use-after-free of RediSock.
  * Use the portable `ZEND_LONG_FORMAT` family
    instead of C format specifiers.
  * PHP 8 compatibility.</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1594209600">- Update to 5.3.1
  * https://pecl.php.net/package-changelog.php?package=redis&amp;release=5.3.1
  * Properly clean up on session start failure.
  * Treat NULL as a failure for redis_extract_auth_info.
  * Don't dereference a NULL zend_string or efree one.
  * Fix config.m4 messages and test for and include php_hash.h.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1603368000">- Update to 5.3.2
  * Use "%.17g" sprintf format for doubles as done in Redis server.
  * Allow to pass NULL as RedisCluster stream context options.
  * Verify SET options are strings before testing them as strings
  * Fix cluster segfault when dealing with NULL multi bulk replies
    in RedisCluster
  * Fix xReadGroup() must return message id
  * Fix memory leak in rediscluster session handler
  * Fix XInfo() returns false if the stream is empty
  * Relax requirements on set's expire argument
  * Refactor redis_sock_check_liveness
  * PHP8 compatibility
  * Update documentation
  * Add Redis::OPT_NULL_MULTIBULK_AS_NULL setting to treat NULL
    multi bulk replies as NULL instead of [].
  * Allow to specify stream context for rediscluster session handler
  * Add new parameter to RedisCluster to specify stream ssl/tls
    context.
  * Add new parameter to RedisSentinel to specify auth information</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1611316800">- Remove BuildRequires:php7-json (don't need in php7, but in php8 work in core).</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1612267200">- Update to 5.3.3
  * Fix PHP8 Windows includes
  * Fix hash ops for php 8.0.1
  * Disable cloning Redis and RedisCluster objects</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1613563200">- Use _multibuild to also build for php8
- Use php_cfgdir and php_extdir macros to determine location of files</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1613563201">- Refresh spec-file via spec-cleaner.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1616587200">- Update to 5.3.4
  * Fix multi/pipeline segfault on Apple silicon
  * Pass compression flag on HMGET in RedisCluster
  * Abide by ZSTD error return constants
  * Fix timing related CI session tests</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1639915200">- Updated to 5.3.5
  * https://pecl.php.net/package-changelog.php?package=redis&amp;release=5.3.5
  * Added experimental support for detecting a dirty connection.
  * Fixed RedisArray constructor bug.
  * Fixed segfault in redis_setoption_handler.
  * Fixed masters array in the event of a cluster failover.
  * Fixed 32 bit type error.
  * Fixed radix character in certain locales.
  * Fixed ZSTD Validation.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1643112000">- Updated to 5.3.6
  * Fix a segfault in RedisArray::del</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1645099200">- Updated to 5.3.7
  * https://pecl.php.net/package-changelog.php?package=redis&amp;release=5.3.7
  * Fixed RedisArray::[hsz]scan and tests.
  * Fixed RedisArray::scan.
  * Fixed LZF decompression logic.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1670673600">- Remove php7 build for Tumbleweed (PHP 7.4 has reached EOL)</changelog>
</package>
<package pkgid="7ed5cecedae035ee5834ef8cc81cb1ee0dbd9dd3d2a061d154aac8c66c63d762" name="php8-ssh2" arch="aarch64">
  <version epoch="0" ver="1.3.1" rel="bp154.2.1"/>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1640433600">- Initial release version 1.3.1</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1670673600">- Remove php7 build for Tumbleweed (PHP 7.4 has reached EOL)</changelog>
</package>
<package pkgid="c55376101a057390c3e2a158635531a82305fa2b78c539dd51b87f53ab265920" name="php8-ssh2" arch="i586">
  <version epoch="0" ver="1.3.1" rel="bp154.2.1"/>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1640433600">- Initial release version 1.3.1</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1670673600">- Remove php7 build for Tumbleweed (PHP 7.4 has reached EOL)</changelog>
</package>
<package pkgid="422053c454a94b119ddefcd333d52168c43e3c0a393e178bd72c81b6a6755cd0" name="php8-ssh2" arch="ppc64le">
  <version epoch="0" ver="1.3.1" rel="bp154.2.1"/>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1640433600">- Initial release version 1.3.1</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1670673600">- Remove php7 build for Tumbleweed (PHP 7.4 has reached EOL)</changelog>
</package>
<package pkgid="8769e1e6be1611321fb0d3768c1f80c876e2be67b101467cac1bb814fa400c5f" name="php8-ssh2" arch="s390x">
  <version epoch="0" ver="1.3.1" rel="bp154.2.1"/>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1640433600">- Initial release version 1.3.1</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1670673600">- Remove php7 build for Tumbleweed (PHP 7.4 has reached EOL)</changelog>
</package>
<package pkgid="8a0973f4824d6374daf7e0ebc811465baf1a554bcf9fe85afef7e9c5be47255f" name="php8-ssh2" arch="src">
  <version epoch="0" ver="1.3.1" rel="bp154.2.1"/>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1640433600">- Initial release version 1.3.1</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1670673600">- Remove php7 build for Tumbleweed (PHP 7.4 has reached EOL)</changelog>
</package>
<package pkgid="dede29a018d627113d0296d84f0007d6c2f6eb1d7057536466be44750e2c94f6" name="php8-ssh2" arch="x86_64">
  <version epoch="0" ver="1.3.1" rel="bp154.2.1"/>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1640433600">- Initial release version 1.3.1</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1670673600">- Remove php7 build for Tumbleweed (PHP 7.4 has reached EOL)</changelog>
</package>
<package pkgid="425985cf27fdb216e3025354b5a8aa7c68da8e84caf018a39f31f7bd485b8e60" name="phpMyAdmin" arch="noarch">
  <version epoch="0" ver="5.2.1" rel="bp154.2.3.1"/>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1588420800">- Don't expand @FQDN@ from /etc/HOSTNAME (this used to set
  $cfg['PmaAbsoluteUri'] parameter, but this variable is no longer
  in the config.sample.ini file)</changelog>
  <changelog author="chris@computersalat.de" date="1588507200">- fix for boo#1170743
  phpMyAdmin installation wipes it's sysconfig apache_server_flag entry</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1602504000">- Update to 4.9.6
    This is a security release.
- Fix boo#1177561 (CVE-2020-26934, PMASA-2020-5) XSS relating to
  the transformation feature
- Fix boo#1177562 (CVE-2020-26935, PMASA-2020-6) SQL injection
  vulnerability in SearchController</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1602849600">- phpMyAdmin 4.9.7:
  * Fix two factor authentication that was broken in 4.9.6
  * Fix incompatibilities with older PHP versions</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1604923200">- Update to 5.0.4
  - issue #16245 Fix failed Zoom search clears existing values
  - issue        Fixed a PHP error when reporting a particular JS error
  - issue #16326 Fixed latitude and longitude swap for geometries in edit mode
  - issue #16032 Fix CREATE TABLE not being tracked when auto tracking is enabled
  - issue #16397 Fix compatibility problems with older PHP versions (also issue #16399)
  - issue #16396 Fix broken two-factor authentication
- Changes from 5.0.3
  - https://github.com/phpmyadmin/phpmyadmin/blob/RELEASE_5_0_3/ChangeLog
- Changes from 5.0.2
  - https://github.com/phpmyadmin/phpmyadmin/blob/RELEASE_5_0_2/ChangeLog
- Changes from 5.0.1
  - https://github.com/phpmyadmin/phpmyadmin/blob/RELEASE_5_0_1/ChangeLog
- Changes from 5.0.0
  - https://github.com/phpmyadmin/phpmyadmin/blob/RELEASE_5_0_0/ChangeLog
- Set php &gt;= 7.4 as recommends because:
  Due to changes in the MySQL authentication method, PHP versions
  prior to 7.4 are unable to authenticate to a MySQL 8.0 or newer
  server (our tests show the problem actually began with MySQL 8.0.11).
  This relates to a PHP bug https://bugs.php.net/bug.php?id=76243.
- Remove Suggests: php-mcrypt as described in boo#1050980
- Change tmpdir from ap_docroot/tmp to localstatedir/cache/phpMyAdmin.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1607601600">- Use system apache rpm macros</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1607688000">- Put Apache configuration files in separate subpackage
- Generate blowfish secret with openssl on non-openSUSE systems as
  pwgen is not available</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1607688001">- Package language files in separately</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1607860800">- Use %apache_request_restart/%apache_restart_if_needed macros to restart
  apache in order to prevent unneccessary restarts</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1607860801">- Generate blowfish secret and enable Apache modules/flags only on
  install
- Only empty temporary directory on upgrade/uninstall (not remove)
  to prevent RPM warnings/errors
- Don't empty directories not owned by this package (these should
  have been cleaned up by previous versions that owned them)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1608033600">- The apache subpackage must require the main package, otherwise it
  will not be uninstalled when the main package is uninstalled</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1608033601">- Attempt to migrate modified configuration file rather than just
  replacing it by default configuration</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1608638400">- Use coreutils to generate blowfish secret to reduce dependencies</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1614340800">- Update to 5.1.0
  - issue #15350 Change Media (MIME) type references to Media type
  - issue #15377 Add a request router
  - issue        Automatically focus input in the two-factor authentication window
  - issue #15509 Replace gender-specific pronouns with gender-neutral pronouns
  - issue #15491 Improve complexity of generated passwords
  - issue #14909 Add a configuration option to define the 1st day of week
  - issue #12726 Made user names clickable in user accounts overview
  - issue #15729 Improve virtuality dropdown for MariaDB &gt; 10.1
  - issue #15312 Added an option to perform ALTER ONLINE (ALGORITHM=INPLACE)
    when editing a table structure
  - issue        Added missing 'IF EXISTS' to 'DROP EVENT' when exporting databases
  - issue #15232 Improve the padding in query result tool links
  - issue #15064 Support exporting raw SQL queries
  - issue #15555 Added ip2long transformation
  - issue #15194 Fixed horizontal scroll on structure edit page
  - issue #14820 Move table hide buttons in navigation to avoid hiding a table by mistake
  - issue #14947 Use correct MySQL version if the version is 8.0 or above for documentation links
  - issue #15790 Use "MariaDB Documentation" instead of "MySQL Documentation" on a MariaDB server
  - issue #15880 Change "Show Query" link to a button
  - issue #13371 Automatically toggle the radio button to "Create a page and save it" on Designer
  - issue #12969 Tap and hold will not dismiss the error box anymore, you can now copy the error
  - issue #15582 Don't disable "Empty" table button after clicking it
  - issue #15662 Stay on the structure page after editing/adding/dropping indexes
  - issue #15663 show structure after adding a column
  - issue #16005 Remove symfony/yaml dependency
  - issue #16005 Improve performance of dependency injection system by removing yaml parsing
  - issue #15447 Disable phpMyAdmin storage database checkbox on databases list
  - issue #16001 Add autocomplete attributes on login form
  - issue #13519 Add "Preview SQL" option on Index dialog box when creating a new table
  - issue #15954 Fixed export maximal length of created query input is too small
  - issue        Redesign the server status advisor page
  - issue #13124 Use same height for SQL query textarea and Columns select in SQL page
  - issue #16005 Add a new vendor constant "CACHE_DIR" that defaults
    to "libraries/cache/" and store routing cache into this folder
  - issue #16005 Warm-up the routing cache before building the release
  - issue #16005 Use --optimize-autoloader when installing composer vendors before building the release
  - issue #15992 Add back the table name to the printable version on "Structure" page
  - issue #14815 Allow simplifying exported view syntax to only "CREATE VIEW"
  - issue #15496 Add $cfg['CaptchaSiteVerifyURL'] for Google ReCaptcha siteVerifyUrl
  - issue #14772 Add the password_hash PHP function as an option when inserting data
  - issue #15136 Add a notice for Hex converter giving invalid results
  - issue #16139 Use a textarea for JSON columns
  - issue #16223 Make JSON input transformation editor less narrow
  - issue #14340 Add a button on Export Page to show the SQL Query
  - issue #16304 Add support for INET6 column type
  - issue #16337 Fix example insert/update query default values
  - issue #12961 Remove indexes from table relation
  - issue #13557 Use a full list of functions instead of a separated one on insert/edit page "Function" selector
  - issue #14795 Include routines in the export in a predictable order
  - issue #16227 Fixed autocomplete is not working in case the table name is quoted by "`" symbols
  - issue #15463 Force BINARY comparison when looking at privileges to avoid an SQL error on privileges tab
  - issue #16430 Fixed Windows error message uses trailing / instead of \
  - issue #16316 Added support for "SameSite=Strict" on cookies using configuration "$cfg['CookieSameSite']"
  - issue #16451 Fixed AWS RDS IAM authentication doesn't work because pma_password is truncated
  - issue #16451 Show an error message when the security limit is
    reached instead of silently trimming the password to avoid confusion
  - issue #15001 Add back Login Cookie Validity setting to the features form
  - issue #16457 Add config parameters to support third-party ReCaptcha v2 compatible APIs like hCaptcha
  - issue #13077 Moved tools section to left on large devices (Bootstrap xl)
  - issue #15711 Moved some buttons to left on large devices (Bootstrap xl)
  - issue #15584 Add $cfg['MysqlSslWarningSafeHosts'] to set the red text black when ssl is not used on a private network
  - issue #15652 Replace deprecated FOUND_ROWS() function call on "distinct values" feature
  - issue        Export blobs as hex on JSON export
  - issue #16095 Fix leading space not shown in a CHAR column when browsing a table
  - issue        Make procedures/functions SQL editor both side scrollable
  - issue #16407 Bump pragmarx/google2fa conflict to &gt;8.0
  - issue #14953 Added a rename Button to use RENAME INDEX syntax of MySQL 5.7 (and MariaDB &gt;= 10.5.2)
  - issue #16477 Fixed no Option to enter TABLE specific permissions when the database name contains an "_" (underscore)
  - issue #16498 Fixed empty text not appearing after deleting all Routines
  - issue #16467 Fixed a PHP notice "Trying to access array offset on value of type null" on Designer PDF export
  - issue #15658 Fixed saving UI displayed columns on a non database request fails
  - issue #16495 Fix drop tables checkbox is above the checkbox for foreign keys
  - issue #16485 Fix visual query builder missing "Build Query" button
  - issue #16565 Added 'IF EXISTS' to 'DROP EVENT' when updating events to avoid replication issues
  - issue        Removed metro fonts that where Apache-2.0 files that are incompatible with GPL-2.0
  - issue #16464 Made the relation view default to the current database when creating relations
  - issue #16463 Fixed 'REFERENCES' privilege checkbox's title on new MySQL versions and on MariaDB
  - issue #16405 Added jest as a Unit Testing tool for our javascript code
  - issue #16252 Fixed the too small font size when editing rows (textareas)
  - issue #16585 Fixed BLOB to JPG transformation PHP errors
  - issue        Made the console setup async to avoid blocking the page render
  - issue #16429 Use PHP 8.0 fixed version (commit) for TCPDF
  - issue #16005 Major performance improvements on browsing a lot of rows
  - issue #16595 Fixed editing columns having a `_` in their name in specific conditions
  - issue #16608 Fix "Sort by key" restore auto saved value
  - issue #16611 Fixed unable to add tables to rename aliases twice on Export
  - issue #16621 Fixed link HTML messed up in Advisor
  - issue #16622 Fixed Advisor formatting incorrect for long_query_time notice
  - issue #15389 Fixed reset current page indicator after deleting all rows to current page and not page 1
  - issue #15997 Fixed auto save query
  - issue #15997 Made auto saved query database or database+table independent
  - issue #16641 Fixed query generation that was allowing JSON to have a length
  - issue #15994 Fixed the selected value detection for "on update current_timestamp"
  - issue #16614 Fixed PHP 8.0 dataseek offset call to the MySQLI extension
  - issue #16662 Fixed Uncaught TypeError on "delete" button click of a database search results page
  - issue        Fixed Undefined index: selected_usr when the user tried to delete no selected user
  - issue #16657 Fixed the QBE interface when the configuration storage is not enabled
  - issue #16479 Fix our Selenium test-suite
  - issue #16669 Fixed table search modal for BETWEEN
  - issue #16667 Fixed LIKE and TINYINT in search not working properly
  - issue #16424 Fixed numerical search in table and zoom
  - issue        Improve the version handling (new Version class) and add a VERSION_SUFFIX for vendors
  - issue #14494 Fix uncaught TypeError when editing partitioning
  - issue #16525 Fix PHP 8.0 failing tests when comparing 0 to ''
  - issue #16429 Fixed PHP 8.0 errors on preg_replace and operand types
  - issue #16490 Fixed PHP 8.0 function libxml_disable_entity_loader() is deprecated
  - issue #16429 Fixed failing unit tests on PHP 8.0
  - issue #16609 Fixed Sql.rearrangeStickyColumns is not a function
- Rebase phpMyAdmin-config.patch.</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1622894400">- Update to 5.1.1
  - Fixes for several PHP errors
  - Fixes for "$cfg['DefaultTabDatabase']" and other related configuration directives not working properly
  - Fix Yaml export to quote strings even when they are numeric
  - Fix TCPDF open_basedir issue due to internal guessing code from TCPDF
  - Fix for quick search not working when using more than one configured server
    Fix datetime decimals displayed (.00000) after edit
  - Fix new lines in text fields are doubled
  - Fixed URL generation by removing un-needed &amp;amp; escaping for &amp; char
  - Improvements for working with PHP 8.1
  - Improved handling of adding a new user with the Percona database server
  For a detail changelog see:
  https://demo.phpmyadmin.net/master-config/index.php?route=/changelog</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1642852800">- Update to 5.1.2
  This is a security and bufix release.
  * Security
  - Fix boo#1195017 (CVE-2022-23807, PMASA-2022-1, CWE-661)
    Two factor authentication bypass
  - Fix boo#1195018 (CVE-2022-23808, PMASA-2022-2, CWE-661)
    Multiple XSS and HTML injection attacks in setup script
  * Bugfixes
  - Revert a changed to $cfg['CharTextareaRows'] allow values
    less than 7
  - Fix encoding of enum and set values on edit value
  - Fixed possible "Undefined index: clause_is_unique" error
  - Fixed some situations where a user is logged out when working
    with more than one server
  - Fixed a problem with assigning privileges to a user using the
    multiselect list when the database name has an underscore
  - Enable cookie parameter "SameSite" when the PHP version
    is 7.3 or newer
  - Correctly handle the removal of "innodb_file_format" in
    MariaDB and MySQL</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1644580800">- Update to 5.1.3
  This is a security and bufix release.
  * Security
  - Fix for boo#1197036 (CVE-2022-0813)
  - Fix for path disclosure under certain server configurations
    (if display_errors is on, for instance)
  * Bugfix
  - issue #17308 Fix broken pagination links in the navigation sidebar
  - issue #17331 Fix MariaDB has no support for system variable "disabled_storage_engines"
  - issue #17315 Fix unsupported operand types in Results.php when running "SHOW PROCESSLIST" SQL query
  - issue #17288 Fixed importing browser settings question box after login when having no pmadb
  - issue #17288 Fix "First day of calendar" user override has no effect
  - issue #17239 Fixed repeating headers are not working
  - issue #17298 Fixed import of email-adresses or links from ODS results in empty contents
  - issue #17344 Fixed a type error on ODS import with non string values
  - issue #17239 Fixed header row show/hide columns buttons on each line after hover are shown on each row</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1652356800">- Update to 5.2.0
  * Bugfix
  - issue #16521 Upgrade Bootstrap to version 5
  - issue #16521 Drop support for Internet Explorer and others
  - issue        Upgrade to shapefile 3
  - issue #16555 Bump minimum PHP version to 7.2
  - issue        Remove the phpseclib dependency
  - issue        Upgrade Symfony components to version 5.2
  - issue        Upgrade to Motranslator 4
  - issue #16005 Improve the performance of the Export logic
  - issue #16829 Add NOT LIKE %...% operator to Table search
  - issue #16845 Fixed some links not passing through url.php
  - issue #16382 Remove apc upload progress method (all upload progress code was removed from the PHP extension)
  - issue #16974 Replace zxcvbn by zxcvbn-ts
  - issue #15691 Disable the last column checkbox in the column list dropdown instead of not allowing un-check
  - issue #16138 Ignore the length of integer types and show a warning on MySQL &gt;= 8.0.18
  - issue        Add support for the Mroonga engine
  - issue        Double click column name to directly copy to clipboard
  - issue #16425 Add DELETE FROM table on table operations page
  - issue #16482 Add a select all link for table-specific privileges
  - issue #14276 Add support for account locking
  - issue #17143 Use composer/ca-bundle to manage the CA cert file
  - issue #17143 Require the openssl PHP extension
  - issue #17171 Remove the printview.css file from themes
  - issue #17203 Redesign the export and the import pages
  - issue #16197 Replace the master/slave terminology
  - issue #17257 Replace libraries/vendor_config.php constants with an array
  - issue        Add the Bootstrap theme
  - issue #17499 Remove stickyfilljs JavaScript dependency
- Rebase phpMyAdmin-config.patch.</changelog>
  <changelog author="chris@computersalat.de" date="1657713600">- update changes file
  * fix missing bugzilla information</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1675857600">- Update to 5.2.1
  This is a security and bufix release.
  * Security
  - Fix (PMASA-2023-01, CWE-661, boo#1208186, CVE-2023-25727)
    Fix an XSS attack through the drag-and-drop upload feature.
  * Bugfix
  - issue #17522 Fix case where the routes cache file is invalid
  - issue #17506 Fix error when configuring 2FA without XMLWriter or Imagick
  - issue        Fix blank page when some error occurs
  - issue #17519 Fix Export pages not working in certain conditions
  - issue #17496 Fix error in table operation page when partitions are broken
  - issue #17386 Fix system memory and system swap values on Windows
  - issue #17517 Fix Database Server panel not getting hidden by ShowServerInfo configuration directive
  - issue #17271 Fix database names not showing on Processes tab
  - issue #17424 Fix export limit size calculation
  - issue #17366 Fix refresh rate popup on Monitor page
  - issue #17577 Fix monitor charts size on RTL languages
  - issue #17121 Fix password_hash function incorrectly adding single quotes to password before hashing
  - issue #17586 Fix statistics not showing for empty databases
  - issue #17592 Clicking on the New index link on the sidebar does not throw an error anymore
  - issue #17584 It's now possible to browse a database that includes two % in its name
  - issue        Fix PHP 8.2 deprecated string interpolation syntax
  - issue        Some languages are now correctly detected from the HTTP header
  - issue #17617 Sorting is correctly remembered when $cfg['RememberSorting'] is true
  - issue #17593 Table filtering now works when action buttons are on the right side of the row
  - issue #17388 Find and Replace using regex now makes a valid query if no matching result set found
  - issue #17551 Enum/Set editor will not fail to open when creating a new column
  - issue #17659 Fix error when a database group is named tables, views, functions, procedures or events
  - issue #17673 Allow empty values to be inserted into columns
  - issue #17620 Fix error handling at phpMyAdmin startup for the JS SQL console
  - issue        Fixed debug queries console broken UI for query time and group count
  - issue        Fixed escaping of SQL query and errors for the debug console
  - issue        Fix console toolbar UI when the bookmark feature is disabled and sql debug is enabled
  - issue #17543 Fix JS error on saving a new designer page
  - issue #17546 Fix JS error after using save as and open page operation on the designer
  - issue        Fix PHP warning on GIS visualization when there is only one GIS column
  - issue #17728 Some select HTML tags will now have the correct UI style
  - issue #17734 PHP deprecations will only be shown when in a development environment
  - issue #17369 Fix server error when blowfish_secret is not exactly 32 bytes long
  - issue #17736 Add utf8mb3 as an alias of utf8 on the charset description page
  - issue #16418 Fix FAQ 1.44 about manually removing vendor folders
  - issue #12359 Setup page now sends the Content-Security-Policy headers
  - issue #17747 The Column Visibility Toggle will not be hidden by other elements
  - issue #17756 Edit/Copy/Delete row now works when using GROUP BY
  - issue #17248 Support the UUID data type for MariaDB &gt;= 10.7
  - issue #17656 Fix replace/change/set table prefix is not working
  - issue        Fix monitor page filter queries only filtering the first row
  - issue        Fix "Link not found!" on foreign columns for tables having no char column to show
  - issue #17390 Fix "Create view" modal doesn't show on results and empty results
  - issue #17772 Fix wrong styles for add button from central columns
  - issue #17389 Fix HTML disappears when exporting settings to browser's storage
  - issue #17166 Fix "Warning: #1287 'X' is deprecated [...] Please use ST_X instead." on search page
  - issue        Use jquery-migrate.min.js (14KB) instead of jquery-migrate.min.js (31KB)
  - issue #17842 Use jquery.validate.min.js (24 KB) instead of jquery.validate.js (50 KB)
  - issue #17281 Fix links to databases for information_schema.SCHEMATA
  - issue #17553 Fix Metro theme unreadable links above navigation tree
  - issue #17553 Metro theme UI fixes and improvements
  - issue #17553 Fix Metro theme login form with
  - issue #16042 Exported gzip file of database has first ~73 kB uncompressed and rest is gzip compressed in Firefox
  - issue #17705 Fix inline SQL query edit FK checkbox preventing submit buttons from working
  - issue #17777 Fix Uncaught TypeError: Cannot read properties of null (reading 'inline') on datepickers when re-opened
  - issue        Fix Original theme buttons style and login form width
  - issue #17892 Fix closing index edit modal and reopening causes it to fire twice
  - issue #17606 Fix preview SQL modal not working inside "Add Index" modal
  - issue        Fix PHP error on adding new column on create table form
  - issue #17482 Default to "Full texts" when running explain statements
  - issue        Fixed Chrome scrolling performance issue on a textarea of an "export as text" page
  - issue #17703 Fix datepicker appears on all fields, not just date
  - issue        Fix space in the tree line when a DB is expanded
  - issue #17340 Fix "New Table" page -&gt; "VIRTUAL" attribute is lost when adding a new column
  - issue #17446 Fix missing option for STORED virtual column on MySQL and PERSISTENT is not supported on MySQL
  - issue #17446 Lower the check for virtual columns to MySQL&gt;=5.7.6 nothing is supported on 5.7.5
  - issue        Fix column names option for CSV Export
  - issue #17177 Fix preview SQL when reordering columns doesn't work on move columns
  - issue #15887 Fixed DROP TABLE errors ignored on multi table select for DROP
  - issue #17944 Fix unable to create a view from tree view button
  - issue #17927 Fix key navigation between select inputs (drop an old Firefox workaround)
  - issue #17967 Fix missing icon for collapse all button
  - issue #18006 Fixed UUID columns can't be moved
  - issue        Add `spellcheck="false"` to all password fields and some text fields to avoid spell-jacking data leaks
  - issue        Remove non working "Analyze Explain at MariaDB.org" button (MariaDB stopped this service)
  - issue #17229 Add support for Web Authentication API because Chrome removed support for the U2F API
  - issue #18019 Fix "Call to a member function fetchAssoc() on bool" with SQL mode ONLY_FULL_GROUP_BY on monitor search logs
  - issue        Add back UUID and UUID_SHORT to functions on MySQL and all MariaDB versions
  - issue #17398 Fix clicking on JSON columns triggers update query
  - issue        Fix silent JSON parse error on upload progress
  - issue #17833 Fix "Add Parameter" button not working for Add Routine Screen
  - issue #17365 Fixed "Uncaught Error: regexp too big" on server status variables page
- Rebase phpMyAdmin-config.patch.</changelog>
</package>
<package pkgid="2c9842ea12bdb312525078332f1f68dc2f4bff10ad1865140bc171587b5545d2" name="phpMyAdmin" arch="src">
  <version epoch="0" ver="5.2.1" rel="bp154.2.3.1"/>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1588420800">- Don't expand @FQDN@ from /etc/HOSTNAME (this used to set
  $cfg['PmaAbsoluteUri'] parameter, but this variable is no longer
  in the config.sample.ini file)</changelog>
  <changelog author="chris@computersalat.de" date="1588507200">- fix for boo#1170743
  phpMyAdmin installation wipes it's sysconfig apache_server_flag entry</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1602504000">- Update to 4.9.6
    This is a security release.
- Fix boo#1177561 (CVE-2020-26934, PMASA-2020-5) XSS relating to
  the transformation feature
- Fix boo#1177562 (CVE-2020-26935, PMASA-2020-6) SQL injection
  vulnerability in SearchController</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1602849600">- phpMyAdmin 4.9.7:
  * Fix two factor authentication that was broken in 4.9.6
  * Fix incompatibilities with older PHP versions</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1604923200">- Update to 5.0.4
  - issue #16245 Fix failed Zoom search clears existing values
  - issue        Fixed a PHP error when reporting a particular JS error
  - issue #16326 Fixed latitude and longitude swap for geometries in edit mode
  - issue #16032 Fix CREATE TABLE not being tracked when auto tracking is enabled
  - issue #16397 Fix compatibility problems with older PHP versions (also issue #16399)
  - issue #16396 Fix broken two-factor authentication
- Changes from 5.0.3
  - https://github.com/phpmyadmin/phpmyadmin/blob/RELEASE_5_0_3/ChangeLog
- Changes from 5.0.2
  - https://github.com/phpmyadmin/phpmyadmin/blob/RELEASE_5_0_2/ChangeLog
- Changes from 5.0.1
  - https://github.com/phpmyadmin/phpmyadmin/blob/RELEASE_5_0_1/ChangeLog
- Changes from 5.0.0
  - https://github.com/phpmyadmin/phpmyadmin/blob/RELEASE_5_0_0/ChangeLog
- Set php &gt;= 7.4 as recommends because:
  Due to changes in the MySQL authentication method, PHP versions
  prior to 7.4 are unable to authenticate to a MySQL 8.0 or newer
  server (our tests show the problem actually began with MySQL 8.0.11).
  This relates to a PHP bug https://bugs.php.net/bug.php?id=76243.
- Remove Suggests: php-mcrypt as described in boo#1050980
- Change tmpdir from ap_docroot/tmp to localstatedir/cache/phpMyAdmin.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1607601600">- Use system apache rpm macros</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1607688000">- Put Apache configuration files in separate subpackage
- Generate blowfish secret with openssl on non-openSUSE systems as
  pwgen is not available</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1607688001">- Package language files in separately</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1607860800">- Use %apache_request_restart/%apache_restart_if_needed macros to restart
  apache in order to prevent unneccessary restarts</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1607860801">- Generate blowfish secret and enable Apache modules/flags only on
  install
- Only empty temporary directory on upgrade/uninstall (not remove)
  to prevent RPM warnings/errors
- Don't empty directories not owned by this package (these should
  have been cleaned up by previous versions that owned them)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1608033600">- The apache subpackage must require the main package, otherwise it
  will not be uninstalled when the main package is uninstalled</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1608033601">- Attempt to migrate modified configuration file rather than just
  replacing it by default configuration</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1608638400">- Use coreutils to generate blowfish secret to reduce dependencies</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1614340800">- Update to 5.1.0
  - issue #15350 Change Media (MIME) type references to Media type
  - issue #15377 Add a request router
  - issue        Automatically focus input in the two-factor authentication window
  - issue #15509 Replace gender-specific pronouns with gender-neutral pronouns
  - issue #15491 Improve complexity of generated passwords
  - issue #14909 Add a configuration option to define the 1st day of week
  - issue #12726 Made user names clickable in user accounts overview
  - issue #15729 Improve virtuality dropdown for MariaDB &gt; 10.1
  - issue #15312 Added an option to perform ALTER ONLINE (ALGORITHM=INPLACE)
    when editing a table structure
  - issue        Added missing 'IF EXISTS' to 'DROP EVENT' when exporting databases
  - issue #15232 Improve the padding in query result tool links
  - issue #15064 Support exporting raw SQL queries
  - issue #15555 Added ip2long transformation
  - issue #15194 Fixed horizontal scroll on structure edit page
  - issue #14820 Move table hide buttons in navigation to avoid hiding a table by mistake
  - issue #14947 Use correct MySQL version if the version is 8.0 or above for documentation links
  - issue #15790 Use "MariaDB Documentation" instead of "MySQL Documentation" on a MariaDB server
  - issue #15880 Change "Show Query" link to a button
  - issue #13371 Automatically toggle the radio button to "Create a page and save it" on Designer
  - issue #12969 Tap and hold will not dismiss the error box anymore, you can now copy the error
  - issue #15582 Don't disable "Empty" table button after clicking it
  - issue #15662 Stay on the structure page after editing/adding/dropping indexes
  - issue #15663 show structure after adding a column
  - issue #16005 Remove symfony/yaml dependency
  - issue #16005 Improve performance of dependency injection system by removing yaml parsing
  - issue #15447 Disable phpMyAdmin storage database checkbox on databases list
  - issue #16001 Add autocomplete attributes on login form
  - issue #13519 Add "Preview SQL" option on Index dialog box when creating a new table
  - issue #15954 Fixed export maximal length of created query input is too small
  - issue        Redesign the server status advisor page
  - issue #13124 Use same height for SQL query textarea and Columns select in SQL page
  - issue #16005 Add a new vendor constant "CACHE_DIR" that defaults
    to "libraries/cache/" and store routing cache into this folder
  - issue #16005 Warm-up the routing cache before building the release
  - issue #16005 Use --optimize-autoloader when installing composer vendors before building the release
  - issue #15992 Add back the table name to the printable version on "Structure" page
  - issue #14815 Allow simplifying exported view syntax to only "CREATE VIEW"
  - issue #15496 Add $cfg['CaptchaSiteVerifyURL'] for Google ReCaptcha siteVerifyUrl
  - issue #14772 Add the password_hash PHP function as an option when inserting data
  - issue #15136 Add a notice for Hex converter giving invalid results
  - issue #16139 Use a textarea for JSON columns
  - issue #16223 Make JSON input transformation editor less narrow
  - issue #14340 Add a button on Export Page to show the SQL Query
  - issue #16304 Add support for INET6 column type
  - issue #16337 Fix example insert/update query default values
  - issue #12961 Remove indexes from table relation
  - issue #13557 Use a full list of functions instead of a separated one on insert/edit page "Function" selector
  - issue #14795 Include routines in the export in a predictable order
  - issue #16227 Fixed autocomplete is not working in case the table name is quoted by "`" symbols
  - issue #15463 Force BINARY comparison when looking at privileges to avoid an SQL error on privileges tab
  - issue #16430 Fixed Windows error message uses trailing / instead of \
  - issue #16316 Added support for "SameSite=Strict" on cookies using configuration "$cfg['CookieSameSite']"
  - issue #16451 Fixed AWS RDS IAM authentication doesn't work because pma_password is truncated
  - issue #16451 Show an error message when the security limit is
    reached instead of silently trimming the password to avoid confusion
  - issue #15001 Add back Login Cookie Validity setting to the features form
  - issue #16457 Add config parameters to support third-party ReCaptcha v2 compatible APIs like hCaptcha
  - issue #13077 Moved tools section to left on large devices (Bootstrap xl)
  - issue #15711 Moved some buttons to left on large devices (Bootstrap xl)
  - issue #15584 Add $cfg['MysqlSslWarningSafeHosts'] to set the red text black when ssl is not used on a private network
  - issue #15652 Replace deprecated FOUND_ROWS() function call on "distinct values" feature
  - issue        Export blobs as hex on JSON export
  - issue #16095 Fix leading space not shown in a CHAR column when browsing a table
  - issue        Make procedures/functions SQL editor both side scrollable
  - issue #16407 Bump pragmarx/google2fa conflict to &gt;8.0
  - issue #14953 Added a rename Button to use RENAME INDEX syntax of MySQL 5.7 (and MariaDB &gt;= 10.5.2)
  - issue #16477 Fixed no Option to enter TABLE specific permissions when the database name contains an "_" (underscore)
  - issue #16498 Fixed empty text not appearing after deleting all Routines
  - issue #16467 Fixed a PHP notice "Trying to access array offset on value of type null" on Designer PDF export
  - issue #15658 Fixed saving UI displayed columns on a non database request fails
  - issue #16495 Fix drop tables checkbox is above the checkbox for foreign keys
  - issue #16485 Fix visual query builder missing "Build Query" button
  - issue #16565 Added 'IF EXISTS' to 'DROP EVENT' when updating events to avoid replication issues
  - issue        Removed metro fonts that where Apache-2.0 files that are incompatible with GPL-2.0
  - issue #16464 Made the relation view default to the current database when creating relations
  - issue #16463 Fixed 'REFERENCES' privilege checkbox's title on new MySQL versions and on MariaDB
  - issue #16405 Added jest as a Unit Testing tool for our javascript code
  - issue #16252 Fixed the too small font size when editing rows (textareas)
  - issue #16585 Fixed BLOB to JPG transformation PHP errors
  - issue        Made the console setup async to avoid blocking the page render
  - issue #16429 Use PHP 8.0 fixed version (commit) for TCPDF
  - issue #16005 Major performance improvements on browsing a lot of rows
  - issue #16595 Fixed editing columns having a `_` in their name in specific conditions
  - issue #16608 Fix "Sort by key" restore auto saved value
  - issue #16611 Fixed unable to add tables to rename aliases twice on Export
  - issue #16621 Fixed link HTML messed up in Advisor
  - issue #16622 Fixed Advisor formatting incorrect for long_query_time notice
  - issue #15389 Fixed reset current page indicator after deleting all rows to current page and not page 1
  - issue #15997 Fixed auto save query
  - issue #15997 Made auto saved query database or database+table independent
  - issue #16641 Fixed query generation that was allowing JSON to have a length
  - issue #15994 Fixed the selected value detection for "on update current_timestamp"
  - issue #16614 Fixed PHP 8.0 dataseek offset call to the MySQLI extension
  - issue #16662 Fixed Uncaught TypeError on "delete" button click of a database search results page
  - issue        Fixed Undefined index: selected_usr when the user tried to delete no selected user
  - issue #16657 Fixed the QBE interface when the configuration storage is not enabled
  - issue #16479 Fix our Selenium test-suite
  - issue #16669 Fixed table search modal for BETWEEN
  - issue #16667 Fixed LIKE and TINYINT in search not working properly
  - issue #16424 Fixed numerical search in table and zoom
  - issue        Improve the version handling (new Version class) and add a VERSION_SUFFIX for vendors
  - issue #14494 Fix uncaught TypeError when editing partitioning
  - issue #16525 Fix PHP 8.0 failing tests when comparing 0 to ''
  - issue #16429 Fixed PHP 8.0 errors on preg_replace and operand types
  - issue #16490 Fixed PHP 8.0 function libxml_disable_entity_loader() is deprecated
  - issue #16429 Fixed failing unit tests on PHP 8.0
  - issue #16609 Fixed Sql.rearrangeStickyColumns is not a function
- Rebase phpMyAdmin-config.patch.</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1622894400">- Update to 5.1.1
  - Fixes for several PHP errors
  - Fixes for "$cfg['DefaultTabDatabase']" and other related configuration directives not working properly
  - Fix Yaml export to quote strings even when they are numeric
  - Fix TCPDF open_basedir issue due to internal guessing code from TCPDF
  - Fix for quick search not working when using more than one configured server
    Fix datetime decimals displayed (.00000) after edit
  - Fix new lines in text fields are doubled
  - Fixed URL generation by removing un-needed &amp;amp; escaping for &amp; char
  - Improvements for working with PHP 8.1
  - Improved handling of adding a new user with the Percona database server
  For a detail changelog see:
  https://demo.phpmyadmin.net/master-config/index.php?route=/changelog</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1642852800">- Update to 5.1.2
  This is a security and bufix release.
  * Security
  - Fix boo#1195017 (CVE-2022-23807, PMASA-2022-1, CWE-661)
    Two factor authentication bypass
  - Fix boo#1195018 (CVE-2022-23808, PMASA-2022-2, CWE-661)
    Multiple XSS and HTML injection attacks in setup script
  * Bugfixes
  - Revert a changed to $cfg['CharTextareaRows'] allow values
    less than 7
  - Fix encoding of enum and set values on edit value
  - Fixed possible "Undefined index: clause_is_unique" error
  - Fixed some situations where a user is logged out when working
    with more than one server
  - Fixed a problem with assigning privileges to a user using the
    multiselect list when the database name has an underscore
  - Enable cookie parameter "SameSite" when the PHP version
    is 7.3 or newer
  - Correctly handle the removal of "innodb_file_format" in
    MariaDB and MySQL</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1644580800">- Update to 5.1.3
  This is a security and bufix release.
  * Security
  - Fix for boo#1197036 (CVE-2022-0813)
  - Fix for path disclosure under certain server configurations
    (if display_errors is on, for instance)
  * Bugfix
  - issue #17308 Fix broken pagination links in the navigation sidebar
  - issue #17331 Fix MariaDB has no support for system variable "disabled_storage_engines"
  - issue #17315 Fix unsupported operand types in Results.php when running "SHOW PROCESSLIST" SQL query
  - issue #17288 Fixed importing browser settings question box after login when having no pmadb
  - issue #17288 Fix "First day of calendar" user override has no effect
  - issue #17239 Fixed repeating headers are not working
  - issue #17298 Fixed import of email-adresses or links from ODS results in empty contents
  - issue #17344 Fixed a type error on ODS import with non string values
  - issue #17239 Fixed header row show/hide columns buttons on each line after hover are shown on each row</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1652356800">- Update to 5.2.0
  * Bugfix
  - issue #16521 Upgrade Bootstrap to version 5
  - issue #16521 Drop support for Internet Explorer and others
  - issue        Upgrade to shapefile 3
  - issue #16555 Bump minimum PHP version to 7.2
  - issue        Remove the phpseclib dependency
  - issue        Upgrade Symfony components to version 5.2
  - issue        Upgrade to Motranslator 4
  - issue #16005 Improve the performance of the Export logic
  - issue #16829 Add NOT LIKE %...% operator to Table search
  - issue #16845 Fixed some links not passing through url.php
  - issue #16382 Remove apc upload progress method (all upload progress code was removed from the PHP extension)
  - issue #16974 Replace zxcvbn by zxcvbn-ts
  - issue #15691 Disable the last column checkbox in the column list dropdown instead of not allowing un-check
  - issue #16138 Ignore the length of integer types and show a warning on MySQL &gt;= 8.0.18
  - issue        Add support for the Mroonga engine
  - issue        Double click column name to directly copy to clipboard
  - issue #16425 Add DELETE FROM table on table operations page
  - issue #16482 Add a select all link for table-specific privileges
  - issue #14276 Add support for account locking
  - issue #17143 Use composer/ca-bundle to manage the CA cert file
  - issue #17143 Require the openssl PHP extension
  - issue #17171 Remove the printview.css file from themes
  - issue #17203 Redesign the export and the import pages
  - issue #16197 Replace the master/slave terminology
  - issue #17257 Replace libraries/vendor_config.php constants with an array
  - issue        Add the Bootstrap theme
  - issue #17499 Remove stickyfilljs JavaScript dependency
- Rebase phpMyAdmin-config.patch.</changelog>
  <changelog author="chris@computersalat.de" date="1657713600">- update changes file
  * fix missing bugzilla information</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1675857600">- Update to 5.2.1
  This is a security and bufix release.
  * Security
  - Fix (PMASA-2023-01, CWE-661, boo#1208186, CVE-2023-25727)
    Fix an XSS attack through the drag-and-drop upload feature.
  * Bugfix
  - issue #17522 Fix case where the routes cache file is invalid
  - issue #17506 Fix error when configuring 2FA without XMLWriter or Imagick
  - issue        Fix blank page when some error occurs
  - issue #17519 Fix Export pages not working in certain conditions
  - issue #17496 Fix error in table operation page when partitions are broken
  - issue #17386 Fix system memory and system swap values on Windows
  - issue #17517 Fix Database Server panel not getting hidden by ShowServerInfo configuration directive
  - issue #17271 Fix database names not showing on Processes tab
  - issue #17424 Fix export limit size calculation
  - issue #17366 Fix refresh rate popup on Monitor page
  - issue #17577 Fix monitor charts size on RTL languages
  - issue #17121 Fix password_hash function incorrectly adding single quotes to password before hashing
  - issue #17586 Fix statistics not showing for empty databases
  - issue #17592 Clicking on the New index link on the sidebar does not throw an error anymore
  - issue #17584 It's now possible to browse a database that includes two % in its name
  - issue        Fix PHP 8.2 deprecated string interpolation syntax
  - issue        Some languages are now correctly detected from the HTTP header
  - issue #17617 Sorting is correctly remembered when $cfg['RememberSorting'] is true
  - issue #17593 Table filtering now works when action buttons are on the right side of the row
  - issue #17388 Find and Replace using regex now makes a valid query if no matching result set found
  - issue #17551 Enum/Set editor will not fail to open when creating a new column
  - issue #17659 Fix error when a database group is named tables, views, functions, procedures or events
  - issue #17673 Allow empty values to be inserted into columns
  - issue #17620 Fix error handling at phpMyAdmin startup for the JS SQL console
  - issue        Fixed debug queries console broken UI for query time and group count
  - issue        Fixed escaping of SQL query and errors for the debug console
  - issue        Fix console toolbar UI when the bookmark feature is disabled and sql debug is enabled
  - issue #17543 Fix JS error on saving a new designer page
  - issue #17546 Fix JS error after using save as and open page operation on the designer
  - issue        Fix PHP warning on GIS visualization when there is only one GIS column
  - issue #17728 Some select HTML tags will now have the correct UI style
  - issue #17734 PHP deprecations will only be shown when in a development environment
  - issue #17369 Fix server error when blowfish_secret is not exactly 32 bytes long
  - issue #17736 Add utf8mb3 as an alias of utf8 on the charset description page
  - issue #16418 Fix FAQ 1.44 about manually removing vendor folders
  - issue #12359 Setup page now sends the Content-Security-Policy headers
  - issue #17747 The Column Visibility Toggle will not be hidden by other elements
  - issue #17756 Edit/Copy/Delete row now works when using GROUP BY
  - issue #17248 Support the UUID data type for MariaDB &gt;= 10.7
  - issue #17656 Fix replace/change/set table prefix is not working
  - issue        Fix monitor page filter queries only filtering the first row
  - issue        Fix "Link not found!" on foreign columns for tables having no char column to show
  - issue #17390 Fix "Create view" modal doesn't show on results and empty results
  - issue #17772 Fix wrong styles for add button from central columns
  - issue #17389 Fix HTML disappears when exporting settings to browser's storage
  - issue #17166 Fix "Warning: #1287 'X' is deprecated [...] Please use ST_X instead." on search page
  - issue        Use jquery-migrate.min.js (14KB) instead of jquery-migrate.min.js (31KB)
  - issue #17842 Use jquery.validate.min.js (24 KB) instead of jquery.validate.js (50 KB)
  - issue #17281 Fix links to databases for information_schema.SCHEMATA
  - issue #17553 Fix Metro theme unreadable links above navigation tree
  - issue #17553 Metro theme UI fixes and improvements
  - issue #17553 Fix Metro theme login form with
  - issue #16042 Exported gzip file of database has first ~73 kB uncompressed and rest is gzip compressed in Firefox
  - issue #17705 Fix inline SQL query edit FK checkbox preventing submit buttons from working
  - issue #17777 Fix Uncaught TypeError: Cannot read properties of null (reading 'inline') on datepickers when re-opened
  - issue        Fix Original theme buttons style and login form width
  - issue #17892 Fix closing index edit modal and reopening causes it to fire twice
  - issue #17606 Fix preview SQL modal not working inside "Add Index" modal
  - issue        Fix PHP error on adding new column on create table form
  - issue #17482 Default to "Full texts" when running explain statements
  - issue        Fixed Chrome scrolling performance issue on a textarea of an "export as text" page
  - issue #17703 Fix datepicker appears on all fields, not just date
  - issue        Fix space in the tree line when a DB is expanded
  - issue #17340 Fix "New Table" page -&gt; "VIRTUAL" attribute is lost when adding a new column
  - issue #17446 Fix missing option for STORED virtual column on MySQL and PERSISTENT is not supported on MySQL
  - issue #17446 Lower the check for virtual columns to MySQL&gt;=5.7.6 nothing is supported on 5.7.5
  - issue        Fix column names option for CSV Export
  - issue #17177 Fix preview SQL when reordering columns doesn't work on move columns
  - issue #15887 Fixed DROP TABLE errors ignored on multi table select for DROP
  - issue #17944 Fix unable to create a view from tree view button
  - issue #17927 Fix key navigation between select inputs (drop an old Firefox workaround)
  - issue #17967 Fix missing icon for collapse all button
  - issue #18006 Fixed UUID columns can't be moved
  - issue        Add `spellcheck="false"` to all password fields and some text fields to avoid spell-jacking data leaks
  - issue        Remove non working "Analyze Explain at MariaDB.org" button (MariaDB stopped this service)
  - issue #17229 Add support for Web Authentication API because Chrome removed support for the U2F API
  - issue #18019 Fix "Call to a member function fetchAssoc() on bool" with SQL mode ONLY_FULL_GROUP_BY on monitor search logs
  - issue        Add back UUID and UUID_SHORT to functions on MySQL and all MariaDB versions
  - issue #17398 Fix clicking on JSON columns triggers update query
  - issue        Fix silent JSON parse error on upload progress
  - issue #17833 Fix "Add Parameter" button not working for Add Routine Screen
  - issue #17365 Fixed "Uncaught Error: regexp too big" on server status variables page
- Rebase phpMyAdmin-config.patch.</changelog>
</package>
<package pkgid="f4c09138ce25f4e81c4a4f88a35c05df1acca080e326cc01d1e3ea555f7ffc99" name="phpMyAdmin-apache" arch="noarch">
  <version epoch="0" ver="5.2.1" rel="bp154.2.3.1"/>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1588420800">- Don't expand @FQDN@ from /etc/HOSTNAME (this used to set
  $cfg['PmaAbsoluteUri'] parameter, but this variable is no longer
  in the config.sample.ini file)</changelog>
  <changelog author="chris@computersalat.de" date="1588507200">- fix for boo#1170743
  phpMyAdmin installation wipes it's sysconfig apache_server_flag entry</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1602504000">- Update to 4.9.6
    This is a security release.
- Fix boo#1177561 (CVE-2020-26934, PMASA-2020-5) XSS relating to
  the transformation feature
- Fix boo#1177562 (CVE-2020-26935, PMASA-2020-6) SQL injection
  vulnerability in SearchController</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1602849600">- phpMyAdmin 4.9.7:
  * Fix two factor authentication that was broken in 4.9.6
  * Fix incompatibilities with older PHP versions</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1604923200">- Update to 5.0.4
  - issue #16245 Fix failed Zoom search clears existing values
  - issue        Fixed a PHP error when reporting a particular JS error
  - issue #16326 Fixed latitude and longitude swap for geometries in edit mode
  - issue #16032 Fix CREATE TABLE not being tracked when auto tracking is enabled
  - issue #16397 Fix compatibility problems with older PHP versions (also issue #16399)
  - issue #16396 Fix broken two-factor authentication
- Changes from 5.0.3
  - https://github.com/phpmyadmin/phpmyadmin/blob/RELEASE_5_0_3/ChangeLog
- Changes from 5.0.2
  - https://github.com/phpmyadmin/phpmyadmin/blob/RELEASE_5_0_2/ChangeLog
- Changes from 5.0.1
  - https://github.com/phpmyadmin/phpmyadmin/blob/RELEASE_5_0_1/ChangeLog
- Changes from 5.0.0
  - https://github.com/phpmyadmin/phpmyadmin/blob/RELEASE_5_0_0/ChangeLog
- Set php &gt;= 7.4 as recommends because:
  Due to changes in the MySQL authentication method, PHP versions
  prior to 7.4 are unable to authenticate to a MySQL 8.0 or newer
  server (our tests show the problem actually began with MySQL 8.0.11).
  This relates to a PHP bug https://bugs.php.net/bug.php?id=76243.
- Remove Suggests: php-mcrypt as described in boo#1050980
- Change tmpdir from ap_docroot/tmp to localstatedir/cache/phpMyAdmin.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1607601600">- Use system apache rpm macros</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1607688000">- Put Apache configuration files in separate subpackage
- Generate blowfish secret with openssl on non-openSUSE systems as
  pwgen is not available</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1607688001">- Package language files in separately</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1607860800">- Use %apache_request_restart/%apache_restart_if_needed macros to restart
  apache in order to prevent unneccessary restarts</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1607860801">- Generate blowfish secret and enable Apache modules/flags only on
  install
- Only empty temporary directory on upgrade/uninstall (not remove)
  to prevent RPM warnings/errors
- Don't empty directories not owned by this package (these should
  have been cleaned up by previous versions that owned them)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1608033600">- The apache subpackage must require the main package, otherwise it
  will not be uninstalled when the main package is uninstalled</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1608033601">- Attempt to migrate modified configuration file rather than just
  replacing it by default configuration</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1608638400">- Use coreutils to generate blowfish secret to reduce dependencies</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1614340800">- Update to 5.1.0
  - issue #15350 Change Media (MIME) type references to Media type
  - issue #15377 Add a request router
  - issue        Automatically focus input in the two-factor authentication window
  - issue #15509 Replace gender-specific pronouns with gender-neutral pronouns
  - issue #15491 Improve complexity of generated passwords
  - issue #14909 Add a configuration option to define the 1st day of week
  - issue #12726 Made user names clickable in user accounts overview
  - issue #15729 Improve virtuality dropdown for MariaDB &gt; 10.1
  - issue #15312 Added an option to perform ALTER ONLINE (ALGORITHM=INPLACE)
    when editing a table structure
  - issue        Added missing 'IF EXISTS' to 'DROP EVENT' when exporting databases
  - issue #15232 Improve the padding in query result tool links
  - issue #15064 Support exporting raw SQL queries
  - issue #15555 Added ip2long transformation
  - issue #15194 Fixed horizontal scroll on structure edit page
  - issue #14820 Move table hide buttons in navigation to avoid hiding a table by mistake
  - issue #14947 Use correct MySQL version if the version is 8.0 or above for documentation links
  - issue #15790 Use "MariaDB Documentation" instead of "MySQL Documentation" on a MariaDB server
  - issue #15880 Change "Show Query" link to a button
  - issue #13371 Automatically toggle the radio button to "Create a page and save it" on Designer
  - issue #12969 Tap and hold will not dismiss the error box anymore, you can now copy the error
  - issue #15582 Don't disable "Empty" table button after clicking it
  - issue #15662 Stay on the structure page after editing/adding/dropping indexes
  - issue #15663 show structure after adding a column
  - issue #16005 Remove symfony/yaml dependency
  - issue #16005 Improve performance of dependency injection system by removing yaml parsing
  - issue #15447 Disable phpMyAdmin storage database checkbox on databases list
  - issue #16001 Add autocomplete attributes on login form
  - issue #13519 Add "Preview SQL" option on Index dialog box when creating a new table
  - issue #15954 Fixed export maximal length of created query input is too small
  - issue        Redesign the server status advisor page
  - issue #13124 Use same height for SQL query textarea and Columns select in SQL page
  - issue #16005 Add a new vendor constant "CACHE_DIR" that defaults
    to "libraries/cache/" and store routing cache into this folder
  - issue #16005 Warm-up the routing cache before building the release
  - issue #16005 Use --optimize-autoloader when installing composer vendors before building the release
  - issue #15992 Add back the table name to the printable version on "Structure" page
  - issue #14815 Allow simplifying exported view syntax to only "CREATE VIEW"
  - issue #15496 Add $cfg['CaptchaSiteVerifyURL'] for Google ReCaptcha siteVerifyUrl
  - issue #14772 Add the password_hash PHP function as an option when inserting data
  - issue #15136 Add a notice for Hex converter giving invalid results
  - issue #16139 Use a textarea for JSON columns
  - issue #16223 Make JSON input transformation editor less narrow
  - issue #14340 Add a button on Export Page to show the SQL Query
  - issue #16304 Add support for INET6 column type
  - issue #16337 Fix example insert/update query default values
  - issue #12961 Remove indexes from table relation
  - issue #13557 Use a full list of functions instead of a separated one on insert/edit page "Function" selector
  - issue #14795 Include routines in the export in a predictable order
  - issue #16227 Fixed autocomplete is not working in case the table name is quoted by "`" symbols
  - issue #15463 Force BINARY comparison when looking at privileges to avoid an SQL error on privileges tab
  - issue #16430 Fixed Windows error message uses trailing / instead of \
  - issue #16316 Added support for "SameSite=Strict" on cookies using configuration "$cfg['CookieSameSite']"
  - issue #16451 Fixed AWS RDS IAM authentication doesn't work because pma_password is truncated
  - issue #16451 Show an error message when the security limit is
    reached instead of silently trimming the password to avoid confusion
  - issue #15001 Add back Login Cookie Validity setting to the features form
  - issue #16457 Add config parameters to support third-party ReCaptcha v2 compatible APIs like hCaptcha
  - issue #13077 Moved tools section to left on large devices (Bootstrap xl)
  - issue #15711 Moved some buttons to left on large devices (Bootstrap xl)
  - issue #15584 Add $cfg['MysqlSslWarningSafeHosts'] to set the red text black when ssl is not used on a private network
  - issue #15652 Replace deprecated FOUND_ROWS() function call on "distinct values" feature
  - issue        Export blobs as hex on JSON export
  - issue #16095 Fix leading space not shown in a CHAR column when browsing a table
  - issue        Make procedures/functions SQL editor both side scrollable
  - issue #16407 Bump pragmarx/google2fa conflict to &gt;8.0
  - issue #14953 Added a rename Button to use RENAME INDEX syntax of MySQL 5.7 (and MariaDB &gt;= 10.5.2)
  - issue #16477 Fixed no Option to enter TABLE specific permissions when the database name contains an "_" (underscore)
  - issue #16498 Fixed empty text not appearing after deleting all Routines
  - issue #16467 Fixed a PHP notice "Trying to access array offset on value of type null" on Designer PDF export
  - issue #15658 Fixed saving UI displayed columns on a non database request fails
  - issue #16495 Fix drop tables checkbox is above the checkbox for foreign keys
  - issue #16485 Fix visual query builder missing "Build Query" button
  - issue #16565 Added 'IF EXISTS' to 'DROP EVENT' when updating events to avoid replication issues
  - issue        Removed metro fonts that where Apache-2.0 files that are incompatible with GPL-2.0
  - issue #16464 Made the relation view default to the current database when creating relations
  - issue #16463 Fixed 'REFERENCES' privilege checkbox's title on new MySQL versions and on MariaDB
  - issue #16405 Added jest as a Unit Testing tool for our javascript code
  - issue #16252 Fixed the too small font size when editing rows (textareas)
  - issue #16585 Fixed BLOB to JPG transformation PHP errors
  - issue        Made the console setup async to avoid blocking the page render
  - issue #16429 Use PHP 8.0 fixed version (commit) for TCPDF
  - issue #16005 Major performance improvements on browsing a lot of rows
  - issue #16595 Fixed editing columns having a `_` in their name in specific conditions
  - issue #16608 Fix "Sort by key" restore auto saved value
  - issue #16611 Fixed unable to add tables to rename aliases twice on Export
  - issue #16621 Fixed link HTML messed up in Advisor
  - issue #16622 Fixed Advisor formatting incorrect for long_query_time notice
  - issue #15389 Fixed reset current page indicator after deleting all rows to current page and not page 1
  - issue #15997 Fixed auto save query
  - issue #15997 Made auto saved query database or database+table independent
  - issue #16641 Fixed query generation that was allowing JSON to have a length
  - issue #15994 Fixed the selected value detection for "on update current_timestamp"
  - issue #16614 Fixed PHP 8.0 dataseek offset call to the MySQLI extension
  - issue #16662 Fixed Uncaught TypeError on "delete" button click of a database search results page
  - issue        Fixed Undefined index: selected_usr when the user tried to delete no selected user
  - issue #16657 Fixed the QBE interface when the configuration storage is not enabled
  - issue #16479 Fix our Selenium test-suite
  - issue #16669 Fixed table search modal for BETWEEN
  - issue #16667 Fixed LIKE and TINYINT in search not working properly
  - issue #16424 Fixed numerical search in table and zoom
  - issue        Improve the version handling (new Version class) and add a VERSION_SUFFIX for vendors
  - issue #14494 Fix uncaught TypeError when editing partitioning
  - issue #16525 Fix PHP 8.0 failing tests when comparing 0 to ''
  - issue #16429 Fixed PHP 8.0 errors on preg_replace and operand types
  - issue #16490 Fixed PHP 8.0 function libxml_disable_entity_loader() is deprecated
  - issue #16429 Fixed failing unit tests on PHP 8.0
  - issue #16609 Fixed Sql.rearrangeStickyColumns is not a function
- Rebase phpMyAdmin-config.patch.</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1622894400">- Update to 5.1.1
  - Fixes for several PHP errors
  - Fixes for "$cfg['DefaultTabDatabase']" and other related configuration directives not working properly
  - Fix Yaml export to quote strings even when they are numeric
  - Fix TCPDF open_basedir issue due to internal guessing code from TCPDF
  - Fix for quick search not working when using more than one configured server
    Fix datetime decimals displayed (.00000) after edit
  - Fix new lines in text fields are doubled
  - Fixed URL generation by removing un-needed &amp;amp; escaping for &amp; char
  - Improvements for working with PHP 8.1
  - Improved handling of adding a new user with the Percona database server
  For a detail changelog see:
  https://demo.phpmyadmin.net/master-config/index.php?route=/changelog</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1642852800">- Update to 5.1.2
  This is a security and bufix release.
  * Security
  - Fix boo#1195017 (CVE-2022-23807, PMASA-2022-1, CWE-661)
    Two factor authentication bypass
  - Fix boo#1195018 (CVE-2022-23808, PMASA-2022-2, CWE-661)
    Multiple XSS and HTML injection attacks in setup script
  * Bugfixes
  - Revert a changed to $cfg['CharTextareaRows'] allow values
    less than 7
  - Fix encoding of enum and set values on edit value
  - Fixed possible "Undefined index: clause_is_unique" error
  - Fixed some situations where a user is logged out when working
    with more than one server
  - Fixed a problem with assigning privileges to a user using the
    multiselect list when the database name has an underscore
  - Enable cookie parameter "SameSite" when the PHP version
    is 7.3 or newer
  - Correctly handle the removal of "innodb_file_format" in
    MariaDB and MySQL</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1644580800">- Update to 5.1.3
  This is a security and bufix release.
  * Security
  - Fix for boo#1197036 (CVE-2022-0813)
  - Fix for path disclosure under certain server configurations
    (if display_errors is on, for instance)
  * Bugfix
  - issue #17308 Fix broken pagination links in the navigation sidebar
  - issue #17331 Fix MariaDB has no support for system variable "disabled_storage_engines"
  - issue #17315 Fix unsupported operand types in Results.php when running "SHOW PROCESSLIST" SQL query
  - issue #17288 Fixed importing browser settings question box after login when having no pmadb
  - issue #17288 Fix "First day of calendar" user override has no effect
  - issue #17239 Fixed repeating headers are not working
  - issue #17298 Fixed import of email-adresses or links from ODS results in empty contents
  - issue #17344 Fixed a type error on ODS import with non string values
  - issue #17239 Fixed header row show/hide columns buttons on each line after hover are shown on each row</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1652356800">- Update to 5.2.0
  * Bugfix
  - issue #16521 Upgrade Bootstrap to version 5
  - issue #16521 Drop support for Internet Explorer and others
  - issue        Upgrade to shapefile 3
  - issue #16555 Bump minimum PHP version to 7.2
  - issue        Remove the phpseclib dependency
  - issue        Upgrade Symfony components to version 5.2
  - issue        Upgrade to Motranslator 4
  - issue #16005 Improve the performance of the Export logic
  - issue #16829 Add NOT LIKE %...% operator to Table search
  - issue #16845 Fixed some links not passing through url.php
  - issue #16382 Remove apc upload progress method (all upload progress code was removed from the PHP extension)
  - issue #16974 Replace zxcvbn by zxcvbn-ts
  - issue #15691 Disable the last column checkbox in the column list dropdown instead of not allowing un-check
  - issue #16138 Ignore the length of integer types and show a warning on MySQL &gt;= 8.0.18
  - issue        Add support for the Mroonga engine
  - issue        Double click column name to directly copy to clipboard
  - issue #16425 Add DELETE FROM table on table operations page
  - issue #16482 Add a select all link for table-specific privileges
  - issue #14276 Add support for account locking
  - issue #17143 Use composer/ca-bundle to manage the CA cert file
  - issue #17143 Require the openssl PHP extension
  - issue #17171 Remove the printview.css file from themes
  - issue #17203 Redesign the export and the import pages
  - issue #16197 Replace the master/slave terminology
  - issue #17257 Replace libraries/vendor_config.php constants with an array
  - issue        Add the Bootstrap theme
  - issue #17499 Remove stickyfilljs JavaScript dependency
- Rebase phpMyAdmin-config.patch.</changelog>
  <changelog author="chris@computersalat.de" date="1657713600">- update changes file
  * fix missing bugzilla information</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1675857600">- Update to 5.2.1
  This is a security and bufix release.
  * Security
  - Fix (PMASA-2023-01, CWE-661, boo#1208186, CVE-2023-25727)
    Fix an XSS attack through the drag-and-drop upload feature.
  * Bugfix
  - issue #17522 Fix case where the routes cache file is invalid
  - issue #17506 Fix error when configuring 2FA without XMLWriter or Imagick
  - issue        Fix blank page when some error occurs
  - issue #17519 Fix Export pages not working in certain conditions
  - issue #17496 Fix error in table operation page when partitions are broken
  - issue #17386 Fix system memory and system swap values on Windows
  - issue #17517 Fix Database Server panel not getting hidden by ShowServerInfo configuration directive
  - issue #17271 Fix database names not showing on Processes tab
  - issue #17424 Fix export limit size calculation
  - issue #17366 Fix refresh rate popup on Monitor page
  - issue #17577 Fix monitor charts size on RTL languages
  - issue #17121 Fix password_hash function incorrectly adding single quotes to password before hashing
  - issue #17586 Fix statistics not showing for empty databases
  - issue #17592 Clicking on the New index link on the sidebar does not throw an error anymore
  - issue #17584 It's now possible to browse a database that includes two % in its name
  - issue        Fix PHP 8.2 deprecated string interpolation syntax
  - issue        Some languages are now correctly detected from the HTTP header
  - issue #17617 Sorting is correctly remembered when $cfg['RememberSorting'] is true
  - issue #17593 Table filtering now works when action buttons are on the right side of the row
  - issue #17388 Find and Replace using regex now makes a valid query if no matching result set found
  - issue #17551 Enum/Set editor will not fail to open when creating a new column
  - issue #17659 Fix error when a database group is named tables, views, functions, procedures or events
  - issue #17673 Allow empty values to be inserted into columns
  - issue #17620 Fix error handling at phpMyAdmin startup for the JS SQL console
  - issue        Fixed debug queries console broken UI for query time and group count
  - issue        Fixed escaping of SQL query and errors for the debug console
  - issue        Fix console toolbar UI when the bookmark feature is disabled and sql debug is enabled
  - issue #17543 Fix JS error on saving a new designer page
  - issue #17546 Fix JS error after using save as and open page operation on the designer
  - issue        Fix PHP warning on GIS visualization when there is only one GIS column
  - issue #17728 Some select HTML tags will now have the correct UI style
  - issue #17734 PHP deprecations will only be shown when in a development environment
  - issue #17369 Fix server error when blowfish_secret is not exactly 32 bytes long
  - issue #17736 Add utf8mb3 as an alias of utf8 on the charset description page
  - issue #16418 Fix FAQ 1.44 about manually removing vendor folders
  - issue #12359 Setup page now sends the Content-Security-Policy headers
  - issue #17747 The Column Visibility Toggle will not be hidden by other elements
  - issue #17756 Edit/Copy/Delete row now works when using GROUP BY
  - issue #17248 Support the UUID data type for MariaDB &gt;= 10.7
  - issue #17656 Fix replace/change/set table prefix is not working
  - issue        Fix monitor page filter queries only filtering the first row
  - issue        Fix "Link not found!" on foreign columns for tables having no char column to show
  - issue #17390 Fix "Create view" modal doesn't show on results and empty results
  - issue #17772 Fix wrong styles for add button from central columns
  - issue #17389 Fix HTML disappears when exporting settings to browser's storage
  - issue #17166 Fix "Warning: #1287 'X' is deprecated [...] Please use ST_X instead." on search page
  - issue        Use jquery-migrate.min.js (14KB) instead of jquery-migrate.min.js (31KB)
  - issue #17842 Use jquery.validate.min.js (24 KB) instead of jquery.validate.js (50 KB)
  - issue #17281 Fix links to databases for information_schema.SCHEMATA
  - issue #17553 Fix Metro theme unreadable links above navigation tree
  - issue #17553 Metro theme UI fixes and improvements
  - issue #17553 Fix Metro theme login form with
  - issue #16042 Exported gzip file of database has first ~73 kB uncompressed and rest is gzip compressed in Firefox
  - issue #17705 Fix inline SQL query edit FK checkbox preventing submit buttons from working
  - issue #17777 Fix Uncaught TypeError: Cannot read properties of null (reading 'inline') on datepickers when re-opened
  - issue        Fix Original theme buttons style and login form width
  - issue #17892 Fix closing index edit modal and reopening causes it to fire twice
  - issue #17606 Fix preview SQL modal not working inside "Add Index" modal
  - issue        Fix PHP error on adding new column on create table form
  - issue #17482 Default to "Full texts" when running explain statements
  - issue        Fixed Chrome scrolling performance issue on a textarea of an "export as text" page
  - issue #17703 Fix datepicker appears on all fields, not just date
  - issue        Fix space in the tree line when a DB is expanded
  - issue #17340 Fix "New Table" page -&gt; "VIRTUAL" attribute is lost when adding a new column
  - issue #17446 Fix missing option for STORED virtual column on MySQL and PERSISTENT is not supported on MySQL
  - issue #17446 Lower the check for virtual columns to MySQL&gt;=5.7.6 nothing is supported on 5.7.5
  - issue        Fix column names option for CSV Export
  - issue #17177 Fix preview SQL when reordering columns doesn't work on move columns
  - issue #15887 Fixed DROP TABLE errors ignored on multi table select for DROP
  - issue #17944 Fix unable to create a view from tree view button
  - issue #17927 Fix key navigation between select inputs (drop an old Firefox workaround)
  - issue #17967 Fix missing icon for collapse all button
  - issue #18006 Fixed UUID columns can't be moved
  - issue        Add `spellcheck="false"` to all password fields and some text fields to avoid spell-jacking data leaks
  - issue        Remove non working "Analyze Explain at MariaDB.org" button (MariaDB stopped this service)
  - issue #17229 Add support for Web Authentication API because Chrome removed support for the U2F API
  - issue #18019 Fix "Call to a member function fetchAssoc() on bool" with SQL mode ONLY_FULL_GROUP_BY on monitor search logs
  - issue        Add back UUID and UUID_SHORT to functions on MySQL and all MariaDB versions
  - issue #17398 Fix clicking on JSON columns triggers update query
  - issue        Fix silent JSON parse error on upload progress
  - issue #17833 Fix "Add Parameter" button not working for Add Routine Screen
  - issue #17365 Fixed "Uncaught Error: regexp too big" on server status variables page
- Rebase phpMyAdmin-config.patch.</changelog>
</package>
<package pkgid="1b82df4845279af1957fd90e6018e3d6b78f186ee98bc23c2ddd817b2beb3643" name="phpMyAdmin-lang" arch="noarch">
  <version epoch="0" ver="5.2.1" rel="bp154.2.3.1"/>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1588420800">- Don't expand @FQDN@ from /etc/HOSTNAME (this used to set
  $cfg['PmaAbsoluteUri'] parameter, but this variable is no longer
  in the config.sample.ini file)</changelog>
  <changelog author="chris@computersalat.de" date="1588507200">- fix for boo#1170743
  phpMyAdmin installation wipes it's sysconfig apache_server_flag entry</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1602504000">- Update to 4.9.6
    This is a security release.
- Fix boo#1177561 (CVE-2020-26934, PMASA-2020-5) XSS relating to
  the transformation feature
- Fix boo#1177562 (CVE-2020-26935, PMASA-2020-6) SQL injection
  vulnerability in SearchController</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1602849600">- phpMyAdmin 4.9.7:
  * Fix two factor authentication that was broken in 4.9.6
  * Fix incompatibilities with older PHP versions</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1604923200">- Update to 5.0.4
  - issue #16245 Fix failed Zoom search clears existing values
  - issue        Fixed a PHP error when reporting a particular JS error
  - issue #16326 Fixed latitude and longitude swap for geometries in edit mode
  - issue #16032 Fix CREATE TABLE not being tracked when auto tracking is enabled
  - issue #16397 Fix compatibility problems with older PHP versions (also issue #16399)
  - issue #16396 Fix broken two-factor authentication
- Changes from 5.0.3
  - https://github.com/phpmyadmin/phpmyadmin/blob/RELEASE_5_0_3/ChangeLog
- Changes from 5.0.2
  - https://github.com/phpmyadmin/phpmyadmin/blob/RELEASE_5_0_2/ChangeLog
- Changes from 5.0.1
  - https://github.com/phpmyadmin/phpmyadmin/blob/RELEASE_5_0_1/ChangeLog
- Changes from 5.0.0
  - https://github.com/phpmyadmin/phpmyadmin/blob/RELEASE_5_0_0/ChangeLog
- Set php &gt;= 7.4 as recommends because:
  Due to changes in the MySQL authentication method, PHP versions
  prior to 7.4 are unable to authenticate to a MySQL 8.0 or newer
  server (our tests show the problem actually began with MySQL 8.0.11).
  This relates to a PHP bug https://bugs.php.net/bug.php?id=76243.
- Remove Suggests: php-mcrypt as described in boo#1050980
- Change tmpdir from ap_docroot/tmp to localstatedir/cache/phpMyAdmin.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1607601600">- Use system apache rpm macros</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1607688000">- Put Apache configuration files in separate subpackage
- Generate blowfish secret with openssl on non-openSUSE systems as
  pwgen is not available</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1607688001">- Package language files in separately</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1607860800">- Use %apache_request_restart/%apache_restart_if_needed macros to restart
  apache in order to prevent unneccessary restarts</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1607860801">- Generate blowfish secret and enable Apache modules/flags only on
  install
- Only empty temporary directory on upgrade/uninstall (not remove)
  to prevent RPM warnings/errors
- Don't empty directories not owned by this package (these should
  have been cleaned up by previous versions that owned them)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1608033600">- The apache subpackage must require the main package, otherwise it
  will not be uninstalled when the main package is uninstalled</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1608033601">- Attempt to migrate modified configuration file rather than just
  replacing it by default configuration</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1608638400">- Use coreutils to generate blowfish secret to reduce dependencies</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1614340800">- Update to 5.1.0
  - issue #15350 Change Media (MIME) type references to Media type
  - issue #15377 Add a request router
  - issue        Automatically focus input in the two-factor authentication window
  - issue #15509 Replace gender-specific pronouns with gender-neutral pronouns
  - issue #15491 Improve complexity of generated passwords
  - issue #14909 Add a configuration option to define the 1st day of week
  - issue #12726 Made user names clickable in user accounts overview
  - issue #15729 Improve virtuality dropdown for MariaDB &gt; 10.1
  - issue #15312 Added an option to perform ALTER ONLINE (ALGORITHM=INPLACE)
    when editing a table structure
  - issue        Added missing 'IF EXISTS' to 'DROP EVENT' when exporting databases
  - issue #15232 Improve the padding in query result tool links
  - issue #15064 Support exporting raw SQL queries
  - issue #15555 Added ip2long transformation
  - issue #15194 Fixed horizontal scroll on structure edit page
  - issue #14820 Move table hide buttons in navigation to avoid hiding a table by mistake
  - issue #14947 Use correct MySQL version if the version is 8.0 or above for documentation links
  - issue #15790 Use "MariaDB Documentation" instead of "MySQL Documentation" on a MariaDB server
  - issue #15880 Change "Show Query" link to a button
  - issue #13371 Automatically toggle the radio button to "Create a page and save it" on Designer
  - issue #12969 Tap and hold will not dismiss the error box anymore, you can now copy the error
  - issue #15582 Don't disable "Empty" table button after clicking it
  - issue #15662 Stay on the structure page after editing/adding/dropping indexes
  - issue #15663 show structure after adding a column
  - issue #16005 Remove symfony/yaml dependency
  - issue #16005 Improve performance of dependency injection system by removing yaml parsing
  - issue #15447 Disable phpMyAdmin storage database checkbox on databases list
  - issue #16001 Add autocomplete attributes on login form
  - issue #13519 Add "Preview SQL" option on Index dialog box when creating a new table
  - issue #15954 Fixed export maximal length of created query input is too small
  - issue        Redesign the server status advisor page
  - issue #13124 Use same height for SQL query textarea and Columns select in SQL page
  - issue #16005 Add a new vendor constant "CACHE_DIR" that defaults
    to "libraries/cache/" and store routing cache into this folder
  - issue #16005 Warm-up the routing cache before building the release
  - issue #16005 Use --optimize-autoloader when installing composer vendors before building the release
  - issue #15992 Add back the table name to the printable version on "Structure" page
  - issue #14815 Allow simplifying exported view syntax to only "CREATE VIEW"
  - issue #15496 Add $cfg['CaptchaSiteVerifyURL'] for Google ReCaptcha siteVerifyUrl
  - issue #14772 Add the password_hash PHP function as an option when inserting data
  - issue #15136 Add a notice for Hex converter giving invalid results
  - issue #16139 Use a textarea for JSON columns
  - issue #16223 Make JSON input transformation editor less narrow
  - issue #14340 Add a button on Export Page to show the SQL Query
  - issue #16304 Add support for INET6 column type
  - issue #16337 Fix example insert/update query default values
  - issue #12961 Remove indexes from table relation
  - issue #13557 Use a full list of functions instead of a separated one on insert/edit page "Function" selector
  - issue #14795 Include routines in the export in a predictable order
  - issue #16227 Fixed autocomplete is not working in case the table name is quoted by "`" symbols
  - issue #15463 Force BINARY comparison when looking at privileges to avoid an SQL error on privileges tab
  - issue #16430 Fixed Windows error message uses trailing / instead of \
  - issue #16316 Added support for "SameSite=Strict" on cookies using configuration "$cfg['CookieSameSite']"
  - issue #16451 Fixed AWS RDS IAM authentication doesn't work because pma_password is truncated
  - issue #16451 Show an error message when the security limit is
    reached instead of silently trimming the password to avoid confusion
  - issue #15001 Add back Login Cookie Validity setting to the features form
  - issue #16457 Add config parameters to support third-party ReCaptcha v2 compatible APIs like hCaptcha
  - issue #13077 Moved tools section to left on large devices (Bootstrap xl)
  - issue #15711 Moved some buttons to left on large devices (Bootstrap xl)
  - issue #15584 Add $cfg['MysqlSslWarningSafeHosts'] to set the red text black when ssl is not used on a private network
  - issue #15652 Replace deprecated FOUND_ROWS() function call on "distinct values" feature
  - issue        Export blobs as hex on JSON export
  - issue #16095 Fix leading space not shown in a CHAR column when browsing a table
  - issue        Make procedures/functions SQL editor both side scrollable
  - issue #16407 Bump pragmarx/google2fa conflict to &gt;8.0
  - issue #14953 Added a rename Button to use RENAME INDEX syntax of MySQL 5.7 (and MariaDB &gt;= 10.5.2)
  - issue #16477 Fixed no Option to enter TABLE specific permissions when the database name contains an "_" (underscore)
  - issue #16498 Fixed empty text not appearing after deleting all Routines
  - issue #16467 Fixed a PHP notice "Trying to access array offset on value of type null" on Designer PDF export
  - issue #15658 Fixed saving UI displayed columns on a non database request fails
  - issue #16495 Fix drop tables checkbox is above the checkbox for foreign keys
  - issue #16485 Fix visual query builder missing "Build Query" button
  - issue #16565 Added 'IF EXISTS' to 'DROP EVENT' when updating events to avoid replication issues
  - issue        Removed metro fonts that where Apache-2.0 files that are incompatible with GPL-2.0
  - issue #16464 Made the relation view default to the current database when creating relations
  - issue #16463 Fixed 'REFERENCES' privilege checkbox's title on new MySQL versions and on MariaDB
  - issue #16405 Added jest as a Unit Testing tool for our javascript code
  - issue #16252 Fixed the too small font size when editing rows (textareas)
  - issue #16585 Fixed BLOB to JPG transformation PHP errors
  - issue        Made the console setup async to avoid blocking the page render
  - issue #16429 Use PHP 8.0 fixed version (commit) for TCPDF
  - issue #16005 Major performance improvements on browsing a lot of rows
  - issue #16595 Fixed editing columns having a `_` in their name in specific conditions
  - issue #16608 Fix "Sort by key" restore auto saved value
  - issue #16611 Fixed unable to add tables to rename aliases twice on Export
  - issue #16621 Fixed link HTML messed up in Advisor
  - issue #16622 Fixed Advisor formatting incorrect for long_query_time notice
  - issue #15389 Fixed reset current page indicator after deleting all rows to current page and not page 1
  - issue #15997 Fixed auto save query
  - issue #15997 Made auto saved query database or database+table independent
  - issue #16641 Fixed query generation that was allowing JSON to have a length
  - issue #15994 Fixed the selected value detection for "on update current_timestamp"
  - issue #16614 Fixed PHP 8.0 dataseek offset call to the MySQLI extension
  - issue #16662 Fixed Uncaught TypeError on "delete" button click of a database search results page
  - issue        Fixed Undefined index: selected_usr when the user tried to delete no selected user
  - issue #16657 Fixed the QBE interface when the configuration storage is not enabled
  - issue #16479 Fix our Selenium test-suite
  - issue #16669 Fixed table search modal for BETWEEN
  - issue #16667 Fixed LIKE and TINYINT in search not working properly
  - issue #16424 Fixed numerical search in table and zoom
  - issue        Improve the version handling (new Version class) and add a VERSION_SUFFIX for vendors
  - issue #14494 Fix uncaught TypeError when editing partitioning
  - issue #16525 Fix PHP 8.0 failing tests when comparing 0 to ''
  - issue #16429 Fixed PHP 8.0 errors on preg_replace and operand types
  - issue #16490 Fixed PHP 8.0 function libxml_disable_entity_loader() is deprecated
  - issue #16429 Fixed failing unit tests on PHP 8.0
  - issue #16609 Fixed Sql.rearrangeStickyColumns is not a function
- Rebase phpMyAdmin-config.patch.</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1622894400">- Update to 5.1.1
  - Fixes for several PHP errors
  - Fixes for "$cfg['DefaultTabDatabase']" and other related configuration directives not working properly
  - Fix Yaml export to quote strings even when they are numeric
  - Fix TCPDF open_basedir issue due to internal guessing code from TCPDF
  - Fix for quick search not working when using more than one configured server
    Fix datetime decimals displayed (.00000) after edit
  - Fix new lines in text fields are doubled
  - Fixed URL generation by removing un-needed &amp;amp; escaping for &amp; char
  - Improvements for working with PHP 8.1
  - Improved handling of adding a new user with the Percona database server
  For a detail changelog see:
  https://demo.phpmyadmin.net/master-config/index.php?route=/changelog</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1642852800">- Update to 5.1.2
  This is a security and bufix release.
  * Security
  - Fix boo#1195017 (CVE-2022-23807, PMASA-2022-1, CWE-661)
    Two factor authentication bypass
  - Fix boo#1195018 (CVE-2022-23808, PMASA-2022-2, CWE-661)
    Multiple XSS and HTML injection attacks in setup script
  * Bugfixes
  - Revert a changed to $cfg['CharTextareaRows'] allow values
    less than 7
  - Fix encoding of enum and set values on edit value
  - Fixed possible "Undefined index: clause_is_unique" error
  - Fixed some situations where a user is logged out when working
    with more than one server
  - Fixed a problem with assigning privileges to a user using the
    multiselect list when the database name has an underscore
  - Enable cookie parameter "SameSite" when the PHP version
    is 7.3 or newer
  - Correctly handle the removal of "innodb_file_format" in
    MariaDB and MySQL</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1644580800">- Update to 5.1.3
  This is a security and bufix release.
  * Security
  - Fix for boo#1197036 (CVE-2022-0813)
  - Fix for path disclosure under certain server configurations
    (if display_errors is on, for instance)
  * Bugfix
  - issue #17308 Fix broken pagination links in the navigation sidebar
  - issue #17331 Fix MariaDB has no support for system variable "disabled_storage_engines"
  - issue #17315 Fix unsupported operand types in Results.php when running "SHOW PROCESSLIST" SQL query
  - issue #17288 Fixed importing browser settings question box after login when having no pmadb
  - issue #17288 Fix "First day of calendar" user override has no effect
  - issue #17239 Fixed repeating headers are not working
  - issue #17298 Fixed import of email-adresses or links from ODS results in empty contents
  - issue #17344 Fixed a type error on ODS import with non string values
  - issue #17239 Fixed header row show/hide columns buttons on each line after hover are shown on each row</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1652356800">- Update to 5.2.0
  * Bugfix
  - issue #16521 Upgrade Bootstrap to version 5
  - issue #16521 Drop support for Internet Explorer and others
  - issue        Upgrade to shapefile 3
  - issue #16555 Bump minimum PHP version to 7.2
  - issue        Remove the phpseclib dependency
  - issue        Upgrade Symfony components to version 5.2
  - issue        Upgrade to Motranslator 4
  - issue #16005 Improve the performance of the Export logic
  - issue #16829 Add NOT LIKE %...% operator to Table search
  - issue #16845 Fixed some links not passing through url.php
  - issue #16382 Remove apc upload progress method (all upload progress code was removed from the PHP extension)
  - issue #16974 Replace zxcvbn by zxcvbn-ts
  - issue #15691 Disable the last column checkbox in the column list dropdown instead of not allowing un-check
  - issue #16138 Ignore the length of integer types and show a warning on MySQL &gt;= 8.0.18
  - issue        Add support for the Mroonga engine
  - issue        Double click column name to directly copy to clipboard
  - issue #16425 Add DELETE FROM table on table operations page
  - issue #16482 Add a select all link for table-specific privileges
  - issue #14276 Add support for account locking
  - issue #17143 Use composer/ca-bundle to manage the CA cert file
  - issue #17143 Require the openssl PHP extension
  - issue #17171 Remove the printview.css file from themes
  - issue #17203 Redesign the export and the import pages
  - issue #16197 Replace the master/slave terminology
  - issue #17257 Replace libraries/vendor_config.php constants with an array
  - issue        Add the Bootstrap theme
  - issue #17499 Remove stickyfilljs JavaScript dependency
- Rebase phpMyAdmin-config.patch.</changelog>
  <changelog author="chris@computersalat.de" date="1657713600">- update changes file
  * fix missing bugzilla information</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1675857600">- Update to 5.2.1
  This is a security and bufix release.
  * Security
  - Fix (PMASA-2023-01, CWE-661, boo#1208186, CVE-2023-25727)
    Fix an XSS attack through the drag-and-drop upload feature.
  * Bugfix
  - issue #17522 Fix case where the routes cache file is invalid
  - issue #17506 Fix error when configuring 2FA without XMLWriter or Imagick
  - issue        Fix blank page when some error occurs
  - issue #17519 Fix Export pages not working in certain conditions
  - issue #17496 Fix error in table operation page when partitions are broken
  - issue #17386 Fix system memory and system swap values on Windows
  - issue #17517 Fix Database Server panel not getting hidden by ShowServerInfo configuration directive
  - issue #17271 Fix database names not showing on Processes tab
  - issue #17424 Fix export limit size calculation
  - issue #17366 Fix refresh rate popup on Monitor page
  - issue #17577 Fix monitor charts size on RTL languages
  - issue #17121 Fix password_hash function incorrectly adding single quotes to password before hashing
  - issue #17586 Fix statistics not showing for empty databases
  - issue #17592 Clicking on the New index link on the sidebar does not throw an error anymore
  - issue #17584 It's now possible to browse a database that includes two % in its name
  - issue        Fix PHP 8.2 deprecated string interpolation syntax
  - issue        Some languages are now correctly detected from the HTTP header
  - issue #17617 Sorting is correctly remembered when $cfg['RememberSorting'] is true
  - issue #17593 Table filtering now works when action buttons are on the right side of the row
  - issue #17388 Find and Replace using regex now makes a valid query if no matching result set found
  - issue #17551 Enum/Set editor will not fail to open when creating a new column
  - issue #17659 Fix error when a database group is named tables, views, functions, procedures or events
  - issue #17673 Allow empty values to be inserted into columns
  - issue #17620 Fix error handling at phpMyAdmin startup for the JS SQL console
  - issue        Fixed debug queries console broken UI for query time and group count
  - issue        Fixed escaping of SQL query and errors for the debug console
  - issue        Fix console toolbar UI when the bookmark feature is disabled and sql debug is enabled
  - issue #17543 Fix JS error on saving a new designer page
  - issue #17546 Fix JS error after using save as and open page operation on the designer
  - issue        Fix PHP warning on GIS visualization when there is only one GIS column
  - issue #17728 Some select HTML tags will now have the correct UI style
  - issue #17734 PHP deprecations will only be shown when in a development environment
  - issue #17369 Fix server error when blowfish_secret is not exactly 32 bytes long
  - issue #17736 Add utf8mb3 as an alias of utf8 on the charset description page
  - issue #16418 Fix FAQ 1.44 about manually removing vendor folders
  - issue #12359 Setup page now sends the Content-Security-Policy headers
  - issue #17747 The Column Visibility Toggle will not be hidden by other elements
  - issue #17756 Edit/Copy/Delete row now works when using GROUP BY
  - issue #17248 Support the UUID data type for MariaDB &gt;= 10.7
  - issue #17656 Fix replace/change/set table prefix is not working
  - issue        Fix monitor page filter queries only filtering the first row
  - issue        Fix "Link not found!" on foreign columns for tables having no char column to show
  - issue #17390 Fix "Create view" modal doesn't show on results and empty results
  - issue #17772 Fix wrong styles for add button from central columns
  - issue #17389 Fix HTML disappears when exporting settings to browser's storage
  - issue #17166 Fix "Warning: #1287 'X' is deprecated [...] Please use ST_X instead." on search page
  - issue        Use jquery-migrate.min.js (14KB) instead of jquery-migrate.min.js (31KB)
  - issue #17842 Use jquery.validate.min.js (24 KB) instead of jquery.validate.js (50 KB)
  - issue #17281 Fix links to databases for information_schema.SCHEMATA
  - issue #17553 Fix Metro theme unreadable links above navigation tree
  - issue #17553 Metro theme UI fixes and improvements
  - issue #17553 Fix Metro theme login form with
  - issue #16042 Exported gzip file of database has first ~73 kB uncompressed and rest is gzip compressed in Firefox
  - issue #17705 Fix inline SQL query edit FK checkbox preventing submit buttons from working
  - issue #17777 Fix Uncaught TypeError: Cannot read properties of null (reading 'inline') on datepickers when re-opened
  - issue        Fix Original theme buttons style and login form width
  - issue #17892 Fix closing index edit modal and reopening causes it to fire twice
  - issue #17606 Fix preview SQL modal not working inside "Add Index" modal
  - issue        Fix PHP error on adding new column on create table form
  - issue #17482 Default to "Full texts" when running explain statements
  - issue        Fixed Chrome scrolling performance issue on a textarea of an "export as text" page
  - issue #17703 Fix datepicker appears on all fields, not just date
  - issue        Fix space in the tree line when a DB is expanded
  - issue #17340 Fix "New Table" page -&gt; "VIRTUAL" attribute is lost when adding a new column
  - issue #17446 Fix missing option for STORED virtual column on MySQL and PERSISTENT is not supported on MySQL
  - issue #17446 Lower the check for virtual columns to MySQL&gt;=5.7.6 nothing is supported on 5.7.5
  - issue        Fix column names option for CSV Export
  - issue #17177 Fix preview SQL when reordering columns doesn't work on move columns
  - issue #15887 Fixed DROP TABLE errors ignored on multi table select for DROP
  - issue #17944 Fix unable to create a view from tree view button
  - issue #17927 Fix key navigation between select inputs (drop an old Firefox workaround)
  - issue #17967 Fix missing icon for collapse all button
  - issue #18006 Fixed UUID columns can't be moved
  - issue        Add `spellcheck="false"` to all password fields and some text fields to avoid spell-jacking data leaks
  - issue        Remove non working "Analyze Explain at MariaDB.org" button (MariaDB stopped this service)
  - issue #17229 Add support for Web Authentication API because Chrome removed support for the U2F API
  - issue #18019 Fix "Call to a member function fetchAssoc() on bool" with SQL mode ONLY_FULL_GROUP_BY on monitor search logs
  - issue        Add back UUID and UUID_SHORT to functions on MySQL and all MariaDB versions
  - issue #17398 Fix clicking on JSON columns triggers update query
  - issue        Fix silent JSON parse error on upload progress
  - issue #17833 Fix "Add Parameter" button not working for Add Routine Screen
  - issue #17365 Fixed "Uncaught Error: regexp too big" on server status variables page
- Rebase phpMyAdmin-config.patch.</changelog>
</package>
<package pkgid="b540281daaf5fc0bc3fd5c6be9125a390522abf523579be060706eaeaf8b241f" name="phpPgAdmin" arch="noarch">
  <version epoch="0" ver="7.13.0" rel="bp154.2.3.1"/>
  <changelog author="chris@computersalat.de" date="1333022400">- update to 5.0.4
  - Released: 22th March 2012
  - Bug fixes.
  * Fix #3468882 "UPDATE single row with varchar key: empty where
    clause", reported by "Dirk Kraemer"
  * Fix XSS in function.php, reported by Mateusz Goik
  * Fix bug where renaming a tablespace was leading to an error
  * Fix a bug where clicking to "Show all schemas" on schema
    privilege page leads back to the latest tab used in database level
  * Fix a bug when executing a query from the history
  * Fix bad confirmation message when droping an autovacuum table setup
  * Fix bug #3429633 '"Back" link from "Browse" leads to error'
  * Fix a PHP warning when Slony conf parameters are not set
  * Show cancel/kill actions in process page only if role is a superuser
  * Some more small code cleanup and fixes.
- fix for bnc#754694 (CVE-2012-1600)
  * https://bugzilla.novell.com/show_bug.cgi?id=754694</changelog>
  <changelog author="rsalevsky@suse.com" date="1391169600">-update to 5.1
  - Released: 14th April 2013
  - Features
  * Full support for PostgreSQL 9.1 and 9.2
  * New plugin architecture, including addition of several new hooks
  * Support nested groups of servers
  * Expanded test coverage in Selenium test suite
  * Highlight referencing fields on hovering Foriegn Key values when browsing tables
  * Simplified translation system implementation
  * Don't show cancel/kill options in process page to non-superusers
  * Add download ability from the History window
  * User queries now paginate by default
  - Translations
  * Lithuanian
  - Bug Fixes
  * Numeruous fixes for running under PHP Strict Standards
  * Fix an issue with autocompletion of text based Foreign Keys
  * Fix a bug when browsing tables with no unique key
  * Fix several bugs with bytea support, including possible data
  corruption bugs when updating rows that have bytea fields</changelog>
  <changelog author="chris@computersalat.de" date="1452081600">- fix for boo#951002
  * make http config compatible with apache 2.4</changelog>
  <changelog author="chris@computersalat.de" date="1480680000">- udpate phpPgAdmin.http
  * add support for Apache 2.2/2.4
  * add suppport for php7</changelog>
  <changelog author="chris@computersalat.de" date="1547899200">- update to 5.6.0
  - fix for boo#1094772
    Distributed phpPgAdmin 5.1 does not support distributed PostgreSQL 10.3
  - Released: 12th November, 2018
  - Features
  * Add support for PostgreSQL 9.3, 9.4, 9.5, 9.6, 10, 11
  * Development support for PostgreSQL 12
  * Add support for brows/select navigation tabs (firzen)
  * Add new theme, "bootstrap" (amenadiel)
  * Improved support for json/jsonb
  - Bugs
  * Fix bug in Turkish translation which caused failed ajax responses
  * Account for Blocked field in admin processes Selenium test
  * Properly handle column comments
  * Fix background css issue
  * Additional language updates
  - Incompatabilities
  * Dropped testing of pre-9.3 versions of Postgres, which are now EOL
- add license tag</changelog>
  <changelog author="chris@computersalat.de" date="1583150400">- Version 7.12.1 (December 10, 2019)
  Features:
  * Add support for granting USAGE on sequences
  * Update French translation
  Bugs:
  * Fix issues with OID removal in Postgres 12+
  * Remove broken tree branch from table/view browse option
  * Properly escape identifiers when browsing tables/views/schemas
  * Fix truncation of long multibyte strings
  * Clean up a number of misspellings and typos from codespell report
  Incompatabilities:
  * Require mbstring module support in PHP
- Version 7.12.0 (September 28, 2019)
  Features
  * Add Support for PHP 7.x
  * Add Support for Postgres 12
  * Update Bootstrap to version 3.3.7 (wisekeep)
  Bugs
  * Fix several issues with CSS files (wisekeep)
  * Clean up file permissions (nirgal)
  * Fixed Reflected XSS vulnerability (om3rcitak)
  * Fixes with sequence visbility and permission handling.
  Incompatabilities:
  * We no longer support php5 (&gt;= 7.1)
  * Change in version numbering system
- rebase patch
  * rename phpPgAdmin-4.2.3-config.inc.patch to phpPgAdmin-config.inc.patch
- fix changes file</changelog>
  <changelog author="chris@computersalat.de" date="1592654400">- change ap_docroot from /srv/www/htdocs to /usr/share
  if phpPgAdmin.conf for apache was changed by local admin, we will
  create a backup and replace the original file with the new version
  sorry admins, but you need to apply your changes again
- needed Alias /phpPgAdmin is an enabled APACHE_SERVER_FLAGS default
    for more info have a look into /etc/apache2/conf.d/phpPgAdmin.conf
- add phpPgAdmin.http.inc
- some rpmlint fixes</changelog>
  <changelog author="pgajdos@suse.com" date="1606824000">- use system apache rpm macros</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1607947200">- Update to 7.13.0
  - Add support for Postgres 13
  - Add provisional support for Postgres 14
  - Upgrade Jquery library to 3.4.1
  - Allow users to see group owned databases when using "owned only"
  - Fix bug where sorting on selects dumped you to the table screen
  - This release drops support for PHP 7.1
  - This will be the last release to support PHP 7.2
- Put apache configuration files in separate subpackage.</changelog>
  <changelog author="chris@computersalat.de" date="1657800000">- Fix for boo#1162794 (CVE-2019-10784)
  * add csrf-samesite-fix.patch
    taken from here:
    https://github.com/phppgadmin/phppgadmin/issues/94
    https://github.com/phppgadmin/phppgadmin/pull/99</changelog>
</package>
<package pkgid="0596618320e63352af4ab4225dd2017b82660aa0a1facb35afa1aefb72c01013" name="phpPgAdmin" arch="src">
  <version epoch="0" ver="7.13.0" rel="bp154.2.3.1"/>
  <changelog author="tpatzig@suse.de" date="1161172800">- initial build of phpPgAdmin Version 4.0.1</changelog>
  <changelog author="tpatzig@suse.de" date="1186228800">- update to Version 4.1.3
  * Send encrypted passwords over the wire wherever possible.
  * Alter sequence, nextval and setval (Guillaume)
  * Autovacuum configuration support (Robert Treat)
  * Basic ROLE support (Chris Kings-Lynne, Javier Carlos)
  * Add support for SSL connections (Eric Kinolik)
  * Display Prepared Transactions (Javier Carlos)
  * Add automatic lookup of foreign key values in insert/update fields (John Jawed)
  * several bugfixes</changelog>
  <changelog author="tpatzig@suse.de" date="1207656000">- update to Version 4.2
  * Add Analyze to Table Level Actions (ioguix)
  * Add support for multiple actions on main pages (ioguix, Robert Treat)
  * Added favicon for Mozilla and a backwards compatible version for IE.
  * Allow browsers to save different usernames and passwords for different servers.
  * Pagination selection available for reports
  * You can configure reports db, schema and table names
  * Add support for creating a table using an exsting one (ioguix)
  * Auto-expand a node in the tree browser if there are no other nodes (Tomasz Pala)
  * Add column about fields constraints type + links in table properties page (ioguix)
  * Support for built-in Full Text Search (Ivan Zolotukhin)
  * Addd alter name, owner &amp; comment on views (ioguix)
  * Add column about called procedure + links to their definition in the triggers
  properties page (ioguix)
  * Add Support for Enum type creation (ioguix,xzilla)
  * Add alter name, owner, comment and properties for sequences (ioguix)
  * Add function costing options (xzilla)
  * Add alter owner &amp; schema on function (xzilla)
  * Add a popup window for the session requests history (karl, ioguix)
  * Add alter table, view, sequence schema (ioguix)
  * several bugfixes</changelog>
  <changelog author="max@suse.de" date="1233662400">- Added phpPgAdmin-CVE-2008-5587.patch to fix a directory
  traversal vulnerability (bnc#462762).</changelog>
  <changelog author="chris@computersalat.de" date="1298030400">- update to 4.2.3
  * Fix bug where space as first character in a bytea column was
    removed by html renderer
  * Check if the given pg_dumpall / pg_dump paths are correct before
    using them
  * Fix some transalation files that had bad UTF-8 declaration, rising
    a warning
  * Fix bug with tables that contain quote in their name
  * support PHP 5.3
- Version 4.2.2
  * Fix bug where long SQL queries get truncated
  * Fix createFunction method on PostgreSQL &lt; 7.3
  * Fix bug with alter schema in PostgreSQL &lt; 7.4
  * Remove alter domain for PostgreSQL &lt; 7.4
  * Fix local file inclusion vulnerability:
    http://www.securityfocus.com/bid/32670/
    Unset language variable before determine file includes
- Version 4.2.1
  * Fix table icon/link disapearing when navigating between pages
    during column browse (ioguix)
  * Fix import/export links from tree menu (Denis Golovtsov, ioguix)
  * Fix missing language string for shared credential logout
  * Add missing text search functions/operators (Loomis K, xzilla)
  * Update FAQ info for postgres win32 releases
  * Fix database list error for users without connect privileges on
    all databases (Thomi Dammann, xzilla)
- add/remove patches
  * remove obsolete CVE-2008-5587 patch
  * add config.inc patch
- add http config
- add some macros
- fix deps
- fix descr
- remove changelog from spec</changelog>
  <changelog author="chris@computersalat.de" date="1306411200">- update to 5.0.2
  - Released: 3rd January 2011
  - Some bug fixes.
  * Fix a css typo &amp; error in cappuccino theme
  * Fix #3139003 "Autocomplete doesn't insert value", report and
    patch by Aleksander Machniak
  * Fix bad inheritance between pg83 -&gt; pg instead of pg83 -&gt; pg84 in
    the database access classes. This bug was breaking some
    functionnalities with 8.3
  * Fix a lot of nonstandard escaped string in the database access
    classes
  - Version 5.0.1
  - Released: 14th December 2010
  - Minor bug fix and update version.
  * Fix #3124417 "Wrong german translation", reported by schnoesel
  * Fix (officialy) a bug where non-super user roles cannot check
    ownership on objects
  * Add forgotten Galician language to the target "all" of lang/Makefile
  * Update jQuery library to current stable 1.4.4
  * remove useless date from the topbar informations.
    This was the only place that did PHP 5.3 complain about bad timezone
    configuration (a non-PPA related warning). As it was a totaly
    useless information, we decide to remove it.
  - Version 5.0
  - Released: 29th November 2010
  - Features
  * Support for PostgreSQL 8.4 and 9.0
  * Support for database level collation for 8.4+
  * Support for schema level export
  * Add ability to alter schema ownership
  * Clean up domain support and improve interface
  * Add support for commenting on functions
  * Allow user to rename role/users and set new passwords at the same time
  * Greatly enhanced Full-Text-Search capabilities (ioguix, Loomis_K)
  * Overhauled Selenium Test suite to support multiple database versions
  * Optimized application graphics (Limo Driver)
  * Support for Column Level Privileges
  * Allow users to specify a template database at database creation time
  * Support killing processes
  * Add ability to create indexes concurrently
  * Much better support of autovacuum configuration
  * Add an admin page for table level
  * Refactored autocompletion:
  * fix support for cross-schema objects
  * support multi-field FK
  * support for pagination of values in the auto-complete list
  * Allow user to logicaly group their server under custom named
    node in the browser tree
  * New themes (Cappuccino and Gotar) and a theme switcher on the
    introduction page
  * Auto refresh Locks page
  * Auto refresh Processes page
  * Link in the bottom of the page to go to top of page
  * Browsing on Foreign Keys (When browsing a table, clicking on a
    FK value, jump to the PK row)
  - Bugs
  * Fix problems with query tracking on overly long queries
  * Ensure pg_dump paths are valid
  * Fix multiple bugs about quoting and escaping database objects
    names with special chars
  * Fix multiple bugs in the browser tree
  * Fix multiple bugs on the SQL and script file import form
  * One security fix about code injection
  * Don't allow inserting on a table without fields
  * Some fix about commenting databases
  * removed deprecated functions from PHP 5.3
  * Lot of code cleanup
  * Many other small minor bugs found on our way
  * Fix the operator property page
  - Translations
  * Czech (Marek Cernocky)
  * Greek (Adamantios Diamantidis)
  * Brazillian Portuguese (Fernando Wendt)
  * Galician (Adrián Chaves Fernández)
  - Incompatabilities
  * No longer support PHP &lt; 5.0
  * No longer support Postgres &lt; 7.4
- some spec cleanup
  o fix description</changelog>
  <changelog author="chris@computersalat.de" date="1319112000">- update to 5.0.3
  - Released: 3rd October 2011
  - Some bug fixes.
  * Fix bug with enable/disable triggers on multiple triggers
    (Dawid 'DeyV' Polak)
  * Fix bug #3353670: Error when executing a report with paging
  * Fix bug with OpenBSD about where setting application_name using
    PGOPTIONS was raising an ERROR
  * Two security fix about code injection, reported by Mateusz Goik,
    fixed by ioguix
  * Fix character-encoding problem with autocomplete
- fixes bnc#721976 (CVE-2011-3598)
  * http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3598</changelog>
  <changelog author="chris@computersalat.de" date="1333022400">- update to 5.0.4
  - Released: 22th March 2012
  - Bug fixes.
  * Fix #3468882 "UPDATE single row with varchar key: empty where
    clause", reported by "Dirk Kraemer"
  * Fix XSS in function.php, reported by Mateusz Goik
  * Fix bug where renaming a tablespace was leading to an error
  * Fix a bug where clicking to "Show all schemas" on schema
    privilege page leads back to the latest tab used in database level
  * Fix a bug when executing a query from the history
  * Fix bad confirmation message when droping an autovacuum table setup
  * Fix bug #3429633 '"Back" link from "Browse" leads to error'
  * Fix a PHP warning when Slony conf parameters are not set
  * Show cancel/kill actions in process page only if role is a superuser
  * Some more small code cleanup and fixes.
- fix for bnc#754694 (CVE-2012-1600)
  * https://bugzilla.novell.com/show_bug.cgi?id=754694</changelog>
  <changelog author="rsalevsky@suse.com" date="1391169600">-update to 5.1
  - Released: 14th April 2013
  - Features
  * Full support for PostgreSQL 9.1 and 9.2
  * New plugin architecture, including addition of several new hooks
  * Support nested groups of servers
  * Expanded test coverage in Selenium test suite
  * Highlight referencing fields on hovering Foriegn Key values when browsing tables
  * Simplified translation system implementation
  * Don't show cancel/kill options in process page to non-superusers
  * Add download ability from the History window
  * User queries now paginate by default
  - Translations
  * Lithuanian
  - Bug Fixes
  * Numeruous fixes for running under PHP Strict Standards
  * Fix an issue with autocompletion of text based Foreign Keys
  * Fix a bug when browsing tables with no unique key
  * Fix several bugs with bytea support, including possible data
  corruption bugs when updating rows that have bytea fields</changelog>
  <changelog author="chris@computersalat.de" date="1452081600">- fix for boo#951002
  * make http config compatible with apache 2.4</changelog>
  <changelog author="chris@computersalat.de" date="1480680000">- udpate phpPgAdmin.http
  * add support for Apache 2.2/2.4
  * add suppport for php7</changelog>
  <changelog author="chris@computersalat.de" date="1547899200">- update to 5.6.0
  - fix for boo#1094772
    Distributed phpPgAdmin 5.1 does not support distributed PostgreSQL 10.3
  - Released: 12th November, 2018
  - Features
  * Add support for PostgreSQL 9.3, 9.4, 9.5, 9.6, 10, 11
  * Development support for PostgreSQL 12
  * Add support for brows/select navigation tabs (firzen)
  * Add new theme, "bootstrap" (amenadiel)
  * Improved support for json/jsonb
  - Bugs
  * Fix bug in Turkish translation which caused failed ajax responses
  * Account for Blocked field in admin processes Selenium test
  * Properly handle column comments
  * Fix background css issue
  * Additional language updates
  - Incompatabilities
  * Dropped testing of pre-9.3 versions of Postgres, which are now EOL
- add license tag</changelog>
  <changelog author="chris@computersalat.de" date="1583150400">- Version 7.12.1 (December 10, 2019)
  Features:
  * Add support for granting USAGE on sequences
  * Update French translation
  Bugs:
  * Fix issues with OID removal in Postgres 12+
  * Remove broken tree branch from table/view browse option
  * Properly escape identifiers when browsing tables/views/schemas
  * Fix truncation of long multibyte strings
  * Clean up a number of misspellings and typos from codespell report
  Incompatabilities:
  * Require mbstring module support in PHP
- Version 7.12.0 (September 28, 2019)
  Features
  * Add Support for PHP 7.x
  * Add Support for Postgres 12
  * Update Bootstrap to version 3.3.7 (wisekeep)
  Bugs
  * Fix several issues with CSS files (wisekeep)
  * Clean up file permissions (nirgal)
  * Fixed Reflected XSS vulnerability (om3rcitak)
  * Fixes with sequence visbility and permission handling.
  Incompatabilities:
  * We no longer support php5 (&gt;= 7.1)
  * Change in version numbering system
- rebase patch
  * rename phpPgAdmin-4.2.3-config.inc.patch to phpPgAdmin-config.inc.patch
- fix changes file</changelog>
  <changelog author="chris@computersalat.de" date="1592654400">- change ap_docroot from /srv/www/htdocs to /usr/share
  if phpPgAdmin.conf for apache was changed by local admin, we will
  create a backup and replace the original file with the new version
  sorry admins, but you need to apply your changes again
- needed Alias /phpPgAdmin is an enabled APACHE_SERVER_FLAGS default
    for more info have a look into /etc/apache2/conf.d/phpPgAdmin.conf
- add phpPgAdmin.http.inc
- some rpmlint fixes</changelog>
  <changelog author="pgajdos@suse.com" date="1606824000">- use system apache rpm macros</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1607947200">- Update to 7.13.0
  - Add support for Postgres 13
  - Add provisional support for Postgres 14
  - Upgrade Jquery library to 3.4.1
  - Allow users to see group owned databases when using "owned only"
  - Fix bug where sorting on selects dumped you to the table screen
  - This release drops support for PHP 7.1
  - This will be the last release to support PHP 7.2
- Put apache configuration files in separate subpackage.</changelog>
  <changelog author="chris@computersalat.de" date="1657800000">- Fix for boo#1162794 (CVE-2019-10784)
  * add csrf-samesite-fix.patch
    taken from here:
    https://github.com/phppgadmin/phppgadmin/issues/94
    https://github.com/phppgadmin/phppgadmin/pull/99</changelog>
</package>
<package pkgid="0ee8adf208e3940a2a0ce3172b60d2e66add5107cfa9ac42cd0f2ee54d4d6715" name="phpPgAdmin-apache" arch="noarch">
  <version epoch="0" ver="7.13.0" rel="bp154.2.3.1"/>
  <changelog author="chris@computersalat.de" date="1333022400">- update to 5.0.4
  - Released: 22th March 2012
  - Bug fixes.
  * Fix #3468882 "UPDATE single row with varchar key: empty where
    clause", reported by "Dirk Kraemer"
  * Fix XSS in function.php, reported by Mateusz Goik
  * Fix bug where renaming a tablespace was leading to an error
  * Fix a bug where clicking to "Show all schemas" on schema
    privilege page leads back to the latest tab used in database level
  * Fix a bug when executing a query from the history
  * Fix bad confirmation message when droping an autovacuum table setup
  * Fix bug #3429633 '"Back" link from "Browse" leads to error'
  * Fix a PHP warning when Slony conf parameters are not set
  * Show cancel/kill actions in process page only if role is a superuser
  * Some more small code cleanup and fixes.
- fix for bnc#754694 (CVE-2012-1600)
  * https://bugzilla.novell.com/show_bug.cgi?id=754694</changelog>
  <changelog author="rsalevsky@suse.com" date="1391169600">-update to 5.1
  - Released: 14th April 2013
  - Features
  * Full support for PostgreSQL 9.1 and 9.2
  * New plugin architecture, including addition of several new hooks
  * Support nested groups of servers
  * Expanded test coverage in Selenium test suite
  * Highlight referencing fields on hovering Foriegn Key values when browsing tables
  * Simplified translation system implementation
  * Don't show cancel/kill options in process page to non-superusers
  * Add download ability from the History window
  * User queries now paginate by default
  - Translations
  * Lithuanian
  - Bug Fixes
  * Numeruous fixes for running under PHP Strict Standards
  * Fix an issue with autocompletion of text based Foreign Keys
  * Fix a bug when browsing tables with no unique key
  * Fix several bugs with bytea support, including possible data
  corruption bugs when updating rows that have bytea fields</changelog>
  <changelog author="chris@computersalat.de" date="1452081600">- fix for boo#951002
  * make http config compatible with apache 2.4</changelog>
  <changelog author="chris@computersalat.de" date="1480680000">- udpate phpPgAdmin.http
  * add support for Apache 2.2/2.4
  * add suppport for php7</changelog>
  <changelog author="chris@computersalat.de" date="1547899200">- update to 5.6.0
  - fix for boo#1094772
    Distributed phpPgAdmin 5.1 does not support distributed PostgreSQL 10.3
  - Released: 12th November, 2018
  - Features
  * Add support for PostgreSQL 9.3, 9.4, 9.5, 9.6, 10, 11
  * Development support for PostgreSQL 12
  * Add support for brows/select navigation tabs (firzen)
  * Add new theme, "bootstrap" (amenadiel)
  * Improved support for json/jsonb
  - Bugs
  * Fix bug in Turkish translation which caused failed ajax responses
  * Account for Blocked field in admin processes Selenium test
  * Properly handle column comments
  * Fix background css issue
  * Additional language updates
  - Incompatabilities
  * Dropped testing of pre-9.3 versions of Postgres, which are now EOL
- add license tag</changelog>
  <changelog author="chris@computersalat.de" date="1583150400">- Version 7.12.1 (December 10, 2019)
  Features:
  * Add support for granting USAGE on sequences
  * Update French translation
  Bugs:
  * Fix issues with OID removal in Postgres 12+
  * Remove broken tree branch from table/view browse option
  * Properly escape identifiers when browsing tables/views/schemas
  * Fix truncation of long multibyte strings
  * Clean up a number of misspellings and typos from codespell report
  Incompatabilities:
  * Require mbstring module support in PHP
- Version 7.12.0 (September 28, 2019)
  Features
  * Add Support for PHP 7.x
  * Add Support for Postgres 12
  * Update Bootstrap to version 3.3.7 (wisekeep)
  Bugs
  * Fix several issues with CSS files (wisekeep)
  * Clean up file permissions (nirgal)
  * Fixed Reflected XSS vulnerability (om3rcitak)
  * Fixes with sequence visbility and permission handling.
  Incompatabilities:
  * We no longer support php5 (&gt;= 7.1)
  * Change in version numbering system
- rebase patch
  * rename phpPgAdmin-4.2.3-config.inc.patch to phpPgAdmin-config.inc.patch
- fix changes file</changelog>
  <changelog author="chris@computersalat.de" date="1592654400">- change ap_docroot from /srv/www/htdocs to /usr/share
  if phpPgAdmin.conf for apache was changed by local admin, we will
  create a backup and replace the original file with the new version
  sorry admins, but you need to apply your changes again
- needed Alias /phpPgAdmin is an enabled APACHE_SERVER_FLAGS default
    for more info have a look into /etc/apache2/conf.d/phpPgAdmin.conf
- add phpPgAdmin.http.inc
- some rpmlint fixes</changelog>
  <changelog author="pgajdos@suse.com" date="1606824000">- use system apache rpm macros</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1607947200">- Update to 7.13.0
  - Add support for Postgres 13
  - Add provisional support for Postgres 14
  - Upgrade Jquery library to 3.4.1
  - Allow users to see group owned databases when using "owned only"
  - Fix bug where sorting on selects dumped you to the table screen
  - This release drops support for PHP 7.1
  - This will be the last release to support PHP 7.2
- Put apache configuration files in separate subpackage.</changelog>
  <changelog author="chris@computersalat.de" date="1657800000">- Fix for boo#1162794 (CVE-2019-10784)
  * add csrf-samesite-fix.patch
    taken from here:
    https://github.com/phppgadmin/phppgadmin/issues/94
    https://github.com/phppgadmin/phppgadmin/pull/99</changelog>
</package>
<package pkgid="f50a27087cefd08166fae9992526f62c249e55d598d058b1c002f43fce62ed46" name="plasma5-desktop" arch="aarch64">
  <version epoch="0" ver="5.24.4" rel="bp154.2.3.2"/>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1632312000">- Add patch to fix fallback user icon in Kickoff (kde#442776):
  * 0001-Use-Kirigami.Avatar-in-Kickoff-Header-bar.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1633608000">- Update to 5.23.0
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.0
- Changes since 5.22.90:
  * [wayland] fix activity switching shortcut (Meta+Tab) (kde#443323)
  * kickoff: Fix dragEnabled error for KickoffItemDelegates in singleton
  * [applets/taskmanger] Do not overlay scrollbars over contents (kde#443173)
  * kickoff: Fix null width/height error for some app grid view delegates
  * kickoff: re-add drag and drop for favorites (kde#440308)
  * kickoff: center align GridView
  * kickoff: move isSearchDelegate binding to where search view is
  * kickoff: simplify KickoffItemDelegate MouseArea anchor margins
  * kickoff: fix hover changing index when moving between search and normal pages (kde#443076)
  * kickoff: fix wrong activefocus being used in KickoffItemDelegate
  * kickoff: Fix misspelled module qualifier
  * Make clicking one item when multiple are selected deselect everything else (kde#424152)
  * kcm_touchpad: fix translation for scroll speed setting slider
  * Indicate when one of the thumbnails on the quick settings kcm has focus
  * Check for currentApplet existence (kde#443287)
  * KCM Touchpad: hide right and middle click sections when unavailable
  * Open context menu under the cursor again (kde#443278)
  * Adjust position of panel config bar when Enter is pressed (kde#443280)
  * CompactApplet: Only draw separator line for panel applets (kde#439374)
  * [keyboardlayout applet] fix non-working context menu (kde#441239)
  * [Emojier] Set highlightMoveDuration to zero
  * applets/kickoff: Improve list item touch targets and general aesthetics (kde#442661)
  * Use Kirigami.Avatar in Kickoff Header bar (kde#442776)
  * [kcms/activities] Fix QML i18n calls (kde#442514)
  * kickoff: implement directional navigation
  * kickoff: keep delegate highlight visible more often
  * kickoff: Use attached tooltip for leave buttons
- Drop patches, now upstream:
  * 0001-Use-Kirigami.Avatar-in-Kickoff-Header-bar.patch
- Add new key + signature to plasma.keyring</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1634644800">- Update to 5.23.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.1
- Changes since 5.23.0:
  * Fix "clear emoji history" action (kde#443974)
  * kickoff: Replace Kicker DragHelper with Qt Quick Drag (kde#443708)
  * Make tooltip interactive when there is a player but no window is present (kde#443425)
  * taskmanager: Disconnect from backend.showAllPlaces on destruction (kde#443820)
  * Add systemsettings runner to hardcoded list of allowed runners for kicker (kde#443776)
  * Folder View: Don't cancel multi-selection with right-click (kde#443743)
  * [applets/kicker] Explicitly set visible property when opacity is 0</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1635249600">- Update to 5.23.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.2
- Changes since 5.23.1:
  * [Folder View] Fix executing file without prompting (kde#435560)
  * KCM Touchpad: Load config for touchpad on init (kde#443011)
  * Remove defunct check for proxyAction in foldermodel (kde#444128)
  * taskmanager: Show highlight before ToolTipInstance starts loading for grouped tooltips
  * Fix updating apps model (kde#444101)
  * Fix pinned applet closes (kde#443589)
  * taskmanager: Prevent useless component creation/destruction for grouped tooltips
  * applets/taskmanager: Always set mprisSourceName to parentPid
  * Make Applet config window a tiny bit smaller and reduce minimum size (kde#443712)
  * Set Qt.ImhNoPredictiveText for text fields that act as search fields (kde#439914)
  * Desktop as folder: restore functionality of the "delete" action (kde#442765)
  * Fix create-folder-shortcut (F10) (kde#443512)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1635336000">- Update to 5.23.2.1
  * New bugfix release
- Changes since 5.23.2:
  * kickoff: Fix drag and drop causing delegates to reset to a 0 X position and overlap (kde#443975)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1636459200">- Update to 5.23.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.3
- Changes since 5.23.2.1:
  * keyboardlayout: Fix missing Esperanto flag icon in the menu (kde#445077)
  * kickoff: Do not accept stylus in TapHandler (kde#445111)
  * DRAFT: Fix issues with LayoutManager.insertAtCoordinates (kde#444071)
  * Revert "taskmanager: Show highlight before ToolTipInstance starts loading for grouped tooltips" (kde#444633)
  * Do not unnecessarily reset panel opacity when starting an animation (kde#437093)
  * foldermodel: Drop overlay(s) to icons in plasma folder view (kde#444514)
  * plasma-desktop runner: Fix showing interactive plasma/kwin console (kde#444366)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1638273600">- Update to 5.23.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.4
- Changes since 5.23.3:
  * kickoff: Do not reset action for KickoffItemDelegate in Places tab (kde#446269)
  * applets/taskmanager: Always show album art for single non-browser windows
  * kcms/touchpad: make applet read-only
  * Revert "Delete the Touchpad applet" (kde#445095)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1640692800">- Add patch to fix empty window appearing on activity switching
  (kde#443968, boo#1193960):
  * 0001-SwitcherBackend-Only-create-the-workaround-window-on.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1641297600">- Update to 5.23.5
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.5
- Changes since 5.23.4:
  * [kcms/keyboard] Fix setting options on X11 (kde#443609)
  * [kcms/keyboard] Fix fallback handling in X11Helper::getGroupNames
  * SwitcherBackend: Only create the workaround window on wayland (kde#443968)
  * Touchpad KCM: Don't write default values to active config (kde#427771)
  * Change ListView code to match GridView
  * Fix GridView size/position
  * Move plasmoid specific properties out of singleton (kde#443131)
  * kcms/touchpad/applet: Fix mousearea lookup
  * containments/panel: Fix initial sizing
  * kcms/touchpad/applet: Make the popup close on click (kde#445982)
- Drop patches, fixed upstream:
  * 0001-SwitcherBackend-Only-create-the-workaround-window-on.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1641902400">- Apply openSUSE branding of favorites as patch:
  * 0001-Apply-branding-to-default-favorites.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1642075200">- Update to 5.23.90
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.90
- Too many changes to list here
- Rebase 0001-Apply-branding-to-default-favorites.patch
- Add patches to fix setting keyboard options (kde#448377):
  * 0001-kcms-keyboard-Fix-setting-more-than-one-option.patch
  * 0002-kcms-keyboard-Port-XkbHelper-away-from-KProcess-with.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1644062400">- Update to 5.24.0
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.0
- Too many changes to list here
- Drop patches, now upstream:
  * 0001-kcms-keyboard-Fix-setting-more-than-one-option.patch
  * 0002-kcms-keyboard-Port-XkbHelper-away-from-KProcess-with.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1644926400">- Update to 5.24.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.1
- Changes since 5.24.0:
  * attica-kde: Allow it to use HTTP2</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1645531200">- Update to 5.24.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.2
- Changes since 5.24.1:
  * applet/pager: Divide window size by devicePixelRatio on X11 when it's &gt;1 (kde#446627)
  * applet/pager: Properly adjust the icon size
  * Fix build
  * Only trust the expiration date if it's less than 24 hours
  * Fix missing variable name
  * Add a granular cache preference thing to attica-kde
  * taskmanager: Hide unneeded scrollbar (kde#450463)
  * Emoji Selector: Use a more appropriate icon for the Symbols page (kde#450380)
  * applets/minimizeall: make active indicator line touch panel edges (kde#444810)
  * applets/showdesktop: Give it an active indicator line (kde#447998)
  * foldermodel: hide paste action when right-clicking on files (kde#448913)
  * Folder View: hide additional settings not relevant to list view (kde#450063)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1645704000">- Adjust patch for khelpcenter desktop file rename:
  * 0001-Apply-branding-to-default-favorites.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1645790400">- Add patch to fix the apply button in the touchpad KCM (kde#449843):
  * 0001-kcms-touchpad-Remove-weird-Q_EMIT-changed-false-in-r.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1646654400">- Replace %_libdir/libexec with %_libexecdir (boo#1174075)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1646740800">- Update to 5.24.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.3
- Changes since 5.24.2:
  * kcms/touchpad: Remove weird Q_EMIT changed(false) in resizeEvent
- Drop patches, now upstream:
  * 0001-kcms-touchpad-Remove-weird-Q_EMIT-changed-false-in-r.patch
- Restore compatibility with older kf5-filesystem
- Remove duplicate mention of kimpanel-ibus-panel</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1648555200">- Update to 5.24.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.4
- Changes since 5.24.3:
  * kcms/componentchooser: unify combobox lengths (kde#451365)</changelog>
  <changelog author="Fushan Wen &lt;qydwhotmail@gmail.com&gt;" date="1656590400">- Disable reuseItems to avoid a crash in plasmashell (kde#452660)
  * 0001-applets-taskmanager-Disable-reuseItems-to-avoid-a-cr.patch</changelog>
</package>
<package pkgid="ee8984dbdd9173d70d07f69be80a36589df4a98104cb07ec32cd388d157a46c3" name="plasma5-desktop" arch="ppc64le">
  <version epoch="0" ver="5.24.4" rel="bp154.2.3.2"/>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1632312000">- Add patch to fix fallback user icon in Kickoff (kde#442776):
  * 0001-Use-Kirigami.Avatar-in-Kickoff-Header-bar.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1633608000">- Update to 5.23.0
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.0
- Changes since 5.22.90:
  * [wayland] fix activity switching shortcut (Meta+Tab) (kde#443323)
  * kickoff: Fix dragEnabled error for KickoffItemDelegates in singleton
  * [applets/taskmanger] Do not overlay scrollbars over contents (kde#443173)
  * kickoff: Fix null width/height error for some app grid view delegates
  * kickoff: re-add drag and drop for favorites (kde#440308)
  * kickoff: center align GridView
  * kickoff: move isSearchDelegate binding to where search view is
  * kickoff: simplify KickoffItemDelegate MouseArea anchor margins
  * kickoff: fix hover changing index when moving between search and normal pages (kde#443076)
  * kickoff: fix wrong activefocus being used in KickoffItemDelegate
  * kickoff: Fix misspelled module qualifier
  * Make clicking one item when multiple are selected deselect everything else (kde#424152)
  * kcm_touchpad: fix translation for scroll speed setting slider
  * Indicate when one of the thumbnails on the quick settings kcm has focus
  * Check for currentApplet existence (kde#443287)
  * KCM Touchpad: hide right and middle click sections when unavailable
  * Open context menu under the cursor again (kde#443278)
  * Adjust position of panel config bar when Enter is pressed (kde#443280)
  * CompactApplet: Only draw separator line for panel applets (kde#439374)
  * [keyboardlayout applet] fix non-working context menu (kde#441239)
  * [Emojier] Set highlightMoveDuration to zero
  * applets/kickoff: Improve list item touch targets and general aesthetics (kde#442661)
  * Use Kirigami.Avatar in Kickoff Header bar (kde#442776)
  * [kcms/activities] Fix QML i18n calls (kde#442514)
  * kickoff: implement directional navigation
  * kickoff: keep delegate highlight visible more often
  * kickoff: Use attached tooltip for leave buttons
- Drop patches, now upstream:
  * 0001-Use-Kirigami.Avatar-in-Kickoff-Header-bar.patch
- Add new key + signature to plasma.keyring</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1634644800">- Update to 5.23.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.1
- Changes since 5.23.0:
  * Fix "clear emoji history" action (kde#443974)
  * kickoff: Replace Kicker DragHelper with Qt Quick Drag (kde#443708)
  * Make tooltip interactive when there is a player but no window is present (kde#443425)
  * taskmanager: Disconnect from backend.showAllPlaces on destruction (kde#443820)
  * Add systemsettings runner to hardcoded list of allowed runners for kicker (kde#443776)
  * Folder View: Don't cancel multi-selection with right-click (kde#443743)
  * [applets/kicker] Explicitly set visible property when opacity is 0</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1635249600">- Update to 5.23.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.2
- Changes since 5.23.1:
  * [Folder View] Fix executing file without prompting (kde#435560)
  * KCM Touchpad: Load config for touchpad on init (kde#443011)
  * Remove defunct check for proxyAction in foldermodel (kde#444128)
  * taskmanager: Show highlight before ToolTipInstance starts loading for grouped tooltips
  * Fix updating apps model (kde#444101)
  * Fix pinned applet closes (kde#443589)
  * taskmanager: Prevent useless component creation/destruction for grouped tooltips
  * applets/taskmanager: Always set mprisSourceName to parentPid
  * Make Applet config window a tiny bit smaller and reduce minimum size (kde#443712)
  * Set Qt.ImhNoPredictiveText for text fields that act as search fields (kde#439914)
  * Desktop as folder: restore functionality of the "delete" action (kde#442765)
  * Fix create-folder-shortcut (F10) (kde#443512)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1635336000">- Update to 5.23.2.1
  * New bugfix release
- Changes since 5.23.2:
  * kickoff: Fix drag and drop causing delegates to reset to a 0 X position and overlap (kde#443975)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1636459200">- Update to 5.23.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.3
- Changes since 5.23.2.1:
  * keyboardlayout: Fix missing Esperanto flag icon in the menu (kde#445077)
  * kickoff: Do not accept stylus in TapHandler (kde#445111)
  * DRAFT: Fix issues with LayoutManager.insertAtCoordinates (kde#444071)
  * Revert "taskmanager: Show highlight before ToolTipInstance starts loading for grouped tooltips" (kde#444633)
  * Do not unnecessarily reset panel opacity when starting an animation (kde#437093)
  * foldermodel: Drop overlay(s) to icons in plasma folder view (kde#444514)
  * plasma-desktop runner: Fix showing interactive plasma/kwin console (kde#444366)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1638273600">- Update to 5.23.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.4
- Changes since 5.23.3:
  * kickoff: Do not reset action for KickoffItemDelegate in Places tab (kde#446269)
  * applets/taskmanager: Always show album art for single non-browser windows
  * kcms/touchpad: make applet read-only
  * Revert "Delete the Touchpad applet" (kde#445095)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1640692800">- Add patch to fix empty window appearing on activity switching
  (kde#443968, boo#1193960):
  * 0001-SwitcherBackend-Only-create-the-workaround-window-on.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1641297600">- Update to 5.23.5
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.5
- Changes since 5.23.4:
  * [kcms/keyboard] Fix setting options on X11 (kde#443609)
  * [kcms/keyboard] Fix fallback handling in X11Helper::getGroupNames
  * SwitcherBackend: Only create the workaround window on wayland (kde#443968)
  * Touchpad KCM: Don't write default values to active config (kde#427771)
  * Change ListView code to match GridView
  * Fix GridView size/position
  * Move plasmoid specific properties out of singleton (kde#443131)
  * kcms/touchpad/applet: Fix mousearea lookup
  * containments/panel: Fix initial sizing
  * kcms/touchpad/applet: Make the popup close on click (kde#445982)
- Drop patches, fixed upstream:
  * 0001-SwitcherBackend-Only-create-the-workaround-window-on.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1641902400">- Apply openSUSE branding of favorites as patch:
  * 0001-Apply-branding-to-default-favorites.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1642075200">- Update to 5.23.90
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.90
- Too many changes to list here
- Rebase 0001-Apply-branding-to-default-favorites.patch
- Add patches to fix setting keyboard options (kde#448377):
  * 0001-kcms-keyboard-Fix-setting-more-than-one-option.patch
  * 0002-kcms-keyboard-Port-XkbHelper-away-from-KProcess-with.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1644062400">- Update to 5.24.0
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.0
- Too many changes to list here
- Drop patches, now upstream:
  * 0001-kcms-keyboard-Fix-setting-more-than-one-option.patch
  * 0002-kcms-keyboard-Port-XkbHelper-away-from-KProcess-with.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1644926400">- Update to 5.24.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.1
- Changes since 5.24.0:
  * attica-kde: Allow it to use HTTP2</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1645531200">- Update to 5.24.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.2
- Changes since 5.24.1:
  * applet/pager: Divide window size by devicePixelRatio on X11 when it's &gt;1 (kde#446627)
  * applet/pager: Properly adjust the icon size
  * Fix build
  * Only trust the expiration date if it's less than 24 hours
  * Fix missing variable name
  * Add a granular cache preference thing to attica-kde
  * taskmanager: Hide unneeded scrollbar (kde#450463)
  * Emoji Selector: Use a more appropriate icon for the Symbols page (kde#450380)
  * applets/minimizeall: make active indicator line touch panel edges (kde#444810)
  * applets/showdesktop: Give it an active indicator line (kde#447998)
  * foldermodel: hide paste action when right-clicking on files (kde#448913)
  * Folder View: hide additional settings not relevant to list view (kde#450063)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1645704000">- Adjust patch for khelpcenter desktop file rename:
  * 0001-Apply-branding-to-default-favorites.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1645790400">- Add patch to fix the apply button in the touchpad KCM (kde#449843):
  * 0001-kcms-touchpad-Remove-weird-Q_EMIT-changed-false-in-r.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1646654400">- Replace %_libdir/libexec with %_libexecdir (boo#1174075)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1646740800">- Update to 5.24.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.3
- Changes since 5.24.2:
  * kcms/touchpad: Remove weird Q_EMIT changed(false) in resizeEvent
- Drop patches, now upstream:
  * 0001-kcms-touchpad-Remove-weird-Q_EMIT-changed-false-in-r.patch
- Restore compatibility with older kf5-filesystem
- Remove duplicate mention of kimpanel-ibus-panel</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1648555200">- Update to 5.24.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.4
- Changes since 5.24.3:
  * kcms/componentchooser: unify combobox lengths (kde#451365)</changelog>
  <changelog author="Fushan Wen &lt;qydwhotmail@gmail.com&gt;" date="1656590400">- Disable reuseItems to avoid a crash in plasmashell (kde#452660)
  * 0001-applets-taskmanager-Disable-reuseItems-to-avoid-a-cr.patch</changelog>
</package>
<package pkgid="e253417a8baa8836da7807d7cb0d602fe582e6d29e11ffcfd7e9b313145dc530" name="plasma5-desktop" arch="src">
  <version epoch="0" ver="5.24.4" rel="bp154.2.3.2"/>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1632312000">- Add patch to fix fallback user icon in Kickoff (kde#442776):
  * 0001-Use-Kirigami.Avatar-in-Kickoff-Header-bar.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1633608000">- Update to 5.23.0
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.0
- Changes since 5.22.90:
  * [wayland] fix activity switching shortcut (Meta+Tab) (kde#443323)
  * kickoff: Fix dragEnabled error for KickoffItemDelegates in singleton
  * [applets/taskmanger] Do not overlay scrollbars over contents (kde#443173)
  * kickoff: Fix null width/height error for some app grid view delegates
  * kickoff: re-add drag and drop for favorites (kde#440308)
  * kickoff: center align GridView
  * kickoff: move isSearchDelegate binding to where search view is
  * kickoff: simplify KickoffItemDelegate MouseArea anchor margins
  * kickoff: fix hover changing index when moving between search and normal pages (kde#443076)
  * kickoff: fix wrong activefocus being used in KickoffItemDelegate
  * kickoff: Fix misspelled module qualifier
  * Make clicking one item when multiple are selected deselect everything else (kde#424152)
  * kcm_touchpad: fix translation for scroll speed setting slider
  * Indicate when one of the thumbnails on the quick settings kcm has focus
  * Check for currentApplet existence (kde#443287)
  * KCM Touchpad: hide right and middle click sections when unavailable
  * Open context menu under the cursor again (kde#443278)
  * Adjust position of panel config bar when Enter is pressed (kde#443280)
  * CompactApplet: Only draw separator line for panel applets (kde#439374)
  * [keyboardlayout applet] fix non-working context menu (kde#441239)
  * [Emojier] Set highlightMoveDuration to zero
  * applets/kickoff: Improve list item touch targets and general aesthetics (kde#442661)
  * Use Kirigami.Avatar in Kickoff Header bar (kde#442776)
  * [kcms/activities] Fix QML i18n calls (kde#442514)
  * kickoff: implement directional navigation
  * kickoff: keep delegate highlight visible more often
  * kickoff: Use attached tooltip for leave buttons
- Drop patches, now upstream:
  * 0001-Use-Kirigami.Avatar-in-Kickoff-Header-bar.patch
- Add new key + signature to plasma.keyring</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1634644800">- Update to 5.23.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.1
- Changes since 5.23.0:
  * Fix "clear emoji history" action (kde#443974)
  * kickoff: Replace Kicker DragHelper with Qt Quick Drag (kde#443708)
  * Make tooltip interactive when there is a player but no window is present (kde#443425)
  * taskmanager: Disconnect from backend.showAllPlaces on destruction (kde#443820)
  * Add systemsettings runner to hardcoded list of allowed runners for kicker (kde#443776)
  * Folder View: Don't cancel multi-selection with right-click (kde#443743)
  * [applets/kicker] Explicitly set visible property when opacity is 0</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1635249600">- Update to 5.23.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.2
- Changes since 5.23.1:
  * [Folder View] Fix executing file without prompting (kde#435560)
  * KCM Touchpad: Load config for touchpad on init (kde#443011)
  * Remove defunct check for proxyAction in foldermodel (kde#444128)
  * taskmanager: Show highlight before ToolTipInstance starts loading for grouped tooltips
  * Fix updating apps model (kde#444101)
  * Fix pinned applet closes (kde#443589)
  * taskmanager: Prevent useless component creation/destruction for grouped tooltips
  * applets/taskmanager: Always set mprisSourceName to parentPid
  * Make Applet config window a tiny bit smaller and reduce minimum size (kde#443712)
  * Set Qt.ImhNoPredictiveText for text fields that act as search fields (kde#439914)
  * Desktop as folder: restore functionality of the "delete" action (kde#442765)
  * Fix create-folder-shortcut (F10) (kde#443512)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1635336000">- Update to 5.23.2.1
  * New bugfix release
- Changes since 5.23.2:
  * kickoff: Fix drag and drop causing delegates to reset to a 0 X position and overlap (kde#443975)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1636459200">- Update to 5.23.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.3
- Changes since 5.23.2.1:
  * keyboardlayout: Fix missing Esperanto flag icon in the menu (kde#445077)
  * kickoff: Do not accept stylus in TapHandler (kde#445111)
  * DRAFT: Fix issues with LayoutManager.insertAtCoordinates (kde#444071)
  * Revert "taskmanager: Show highlight before ToolTipInstance starts loading for grouped tooltips" (kde#444633)
  * Do not unnecessarily reset panel opacity when starting an animation (kde#437093)
  * foldermodel: Drop overlay(s) to icons in plasma folder view (kde#444514)
  * plasma-desktop runner: Fix showing interactive plasma/kwin console (kde#444366)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1638273600">- Update to 5.23.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.4
- Changes since 5.23.3:
  * kickoff: Do not reset action for KickoffItemDelegate in Places tab (kde#446269)
  * applets/taskmanager: Always show album art for single non-browser windows
  * kcms/touchpad: make applet read-only
  * Revert "Delete the Touchpad applet" (kde#445095)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1640692800">- Add patch to fix empty window appearing on activity switching
  (kde#443968, boo#1193960):
  * 0001-SwitcherBackend-Only-create-the-workaround-window-on.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1641297600">- Update to 5.23.5
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.5
- Changes since 5.23.4:
  * [kcms/keyboard] Fix setting options on X11 (kde#443609)
  * [kcms/keyboard] Fix fallback handling in X11Helper::getGroupNames
  * SwitcherBackend: Only create the workaround window on wayland (kde#443968)
  * Touchpad KCM: Don't write default values to active config (kde#427771)
  * Change ListView code to match GridView
  * Fix GridView size/position
  * Move plasmoid specific properties out of singleton (kde#443131)
  * kcms/touchpad/applet: Fix mousearea lookup
  * containments/panel: Fix initial sizing
  * kcms/touchpad/applet: Make the popup close on click (kde#445982)
- Drop patches, fixed upstream:
  * 0001-SwitcherBackend-Only-create-the-workaround-window-on.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1641902400">- Apply openSUSE branding of favorites as patch:
  * 0001-Apply-branding-to-default-favorites.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1642075200">- Update to 5.23.90
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.90
- Too many changes to list here
- Rebase 0001-Apply-branding-to-default-favorites.patch
- Add patches to fix setting keyboard options (kde#448377):
  * 0001-kcms-keyboard-Fix-setting-more-than-one-option.patch
  * 0002-kcms-keyboard-Port-XkbHelper-away-from-KProcess-with.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1644062400">- Update to 5.24.0
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.0
- Too many changes to list here
- Drop patches, now upstream:
  * 0001-kcms-keyboard-Fix-setting-more-than-one-option.patch
  * 0002-kcms-keyboard-Port-XkbHelper-away-from-KProcess-with.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1644926400">- Update to 5.24.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.1
- Changes since 5.24.0:
  * attica-kde: Allow it to use HTTP2</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1645531200">- Update to 5.24.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.2
- Changes since 5.24.1:
  * applet/pager: Divide window size by devicePixelRatio on X11 when it's &gt;1 (kde#446627)
  * applet/pager: Properly adjust the icon size
  * Fix build
  * Only trust the expiration date if it's less than 24 hours
  * Fix missing variable name
  * Add a granular cache preference thing to attica-kde
  * taskmanager: Hide unneeded scrollbar (kde#450463)
  * Emoji Selector: Use a more appropriate icon for the Symbols page (kde#450380)
  * applets/minimizeall: make active indicator line touch panel edges (kde#444810)
  * applets/showdesktop: Give it an active indicator line (kde#447998)
  * foldermodel: hide paste action when right-clicking on files (kde#448913)
  * Folder View: hide additional settings not relevant to list view (kde#450063)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1645704000">- Adjust patch for khelpcenter desktop file rename:
  * 0001-Apply-branding-to-default-favorites.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1645790400">- Add patch to fix the apply button in the touchpad KCM (kde#449843):
  * 0001-kcms-touchpad-Remove-weird-Q_EMIT-changed-false-in-r.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1646654400">- Replace %_libdir/libexec with %_libexecdir (boo#1174075)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1646740800">- Update to 5.24.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.3
- Changes since 5.24.2:
  * kcms/touchpad: Remove weird Q_EMIT changed(false) in resizeEvent
- Drop patches, now upstream:
  * 0001-kcms-touchpad-Remove-weird-Q_EMIT-changed-false-in-r.patch
- Restore compatibility with older kf5-filesystem
- Remove duplicate mention of kimpanel-ibus-panel</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1648555200">- Update to 5.24.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.4
- Changes since 5.24.3:
  * kcms/componentchooser: unify combobox lengths (kde#451365)</changelog>
  <changelog author="Fushan Wen &lt;qydwhotmail@gmail.com&gt;" date="1656590400">- Disable reuseItems to avoid a crash in plasmashell (kde#452660)
  * 0001-applets-taskmanager-Disable-reuseItems-to-avoid-a-cr.patch</changelog>
</package>
<package pkgid="e833f2c359478ad588fb07e5d711a1dba079f04b24c5ea5556a82a79a841fcaa" name="plasma5-desktop" arch="x86_64">
  <version epoch="0" ver="5.24.4" rel="bp154.2.3.2"/>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1632312000">- Add patch to fix fallback user icon in Kickoff (kde#442776):
  * 0001-Use-Kirigami.Avatar-in-Kickoff-Header-bar.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1633608000">- Update to 5.23.0
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.0
- Changes since 5.22.90:
  * [wayland] fix activity switching shortcut (Meta+Tab) (kde#443323)
  * kickoff: Fix dragEnabled error for KickoffItemDelegates in singleton
  * [applets/taskmanger] Do not overlay scrollbars over contents (kde#443173)
  * kickoff: Fix null width/height error for some app grid view delegates
  * kickoff: re-add drag and drop for favorites (kde#440308)
  * kickoff: center align GridView
  * kickoff: move isSearchDelegate binding to where search view is
  * kickoff: simplify KickoffItemDelegate MouseArea anchor margins
  * kickoff: fix hover changing index when moving between search and normal pages (kde#443076)
  * kickoff: fix wrong activefocus being used in KickoffItemDelegate
  * kickoff: Fix misspelled module qualifier
  * Make clicking one item when multiple are selected deselect everything else (kde#424152)
  * kcm_touchpad: fix translation for scroll speed setting slider
  * Indicate when one of the thumbnails on the quick settings kcm has focus
  * Check for currentApplet existence (kde#443287)
  * KCM Touchpad: hide right and middle click sections when unavailable
  * Open context menu under the cursor again (kde#443278)
  * Adjust position of panel config bar when Enter is pressed (kde#443280)
  * CompactApplet: Only draw separator line for panel applets (kde#439374)
  * [keyboardlayout applet] fix non-working context menu (kde#441239)
  * [Emojier] Set highlightMoveDuration to zero
  * applets/kickoff: Improve list item touch targets and general aesthetics (kde#442661)
  * Use Kirigami.Avatar in Kickoff Header bar (kde#442776)
  * [kcms/activities] Fix QML i18n calls (kde#442514)
  * kickoff: implement directional navigation
  * kickoff: keep delegate highlight visible more often
  * kickoff: Use attached tooltip for leave buttons
- Drop patches, now upstream:
  * 0001-Use-Kirigami.Avatar-in-Kickoff-Header-bar.patch
- Add new key + signature to plasma.keyring</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1634644800">- Update to 5.23.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.1
- Changes since 5.23.0:
  * Fix "clear emoji history" action (kde#443974)
  * kickoff: Replace Kicker DragHelper with Qt Quick Drag (kde#443708)
  * Make tooltip interactive when there is a player but no window is present (kde#443425)
  * taskmanager: Disconnect from backend.showAllPlaces on destruction (kde#443820)
  * Add systemsettings runner to hardcoded list of allowed runners for kicker (kde#443776)
  * Folder View: Don't cancel multi-selection with right-click (kde#443743)
  * [applets/kicker] Explicitly set visible property when opacity is 0</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1635249600">- Update to 5.23.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.2
- Changes since 5.23.1:
  * [Folder View] Fix executing file without prompting (kde#435560)
  * KCM Touchpad: Load config for touchpad on init (kde#443011)
  * Remove defunct check for proxyAction in foldermodel (kde#444128)
  * taskmanager: Show highlight before ToolTipInstance starts loading for grouped tooltips
  * Fix updating apps model (kde#444101)
  * Fix pinned applet closes (kde#443589)
  * taskmanager: Prevent useless component creation/destruction for grouped tooltips
  * applets/taskmanager: Always set mprisSourceName to parentPid
  * Make Applet config window a tiny bit smaller and reduce minimum size (kde#443712)
  * Set Qt.ImhNoPredictiveText for text fields that act as search fields (kde#439914)
  * Desktop as folder: restore functionality of the "delete" action (kde#442765)
  * Fix create-folder-shortcut (F10) (kde#443512)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1635336000">- Update to 5.23.2.1
  * New bugfix release
- Changes since 5.23.2:
  * kickoff: Fix drag and drop causing delegates to reset to a 0 X position and overlap (kde#443975)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1636459200">- Update to 5.23.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.3
- Changes since 5.23.2.1:
  * keyboardlayout: Fix missing Esperanto flag icon in the menu (kde#445077)
  * kickoff: Do not accept stylus in TapHandler (kde#445111)
  * DRAFT: Fix issues with LayoutManager.insertAtCoordinates (kde#444071)
  * Revert "taskmanager: Show highlight before ToolTipInstance starts loading for grouped tooltips" (kde#444633)
  * Do not unnecessarily reset panel opacity when starting an animation (kde#437093)
  * foldermodel: Drop overlay(s) to icons in plasma folder view (kde#444514)
  * plasma-desktop runner: Fix showing interactive plasma/kwin console (kde#444366)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1638273600">- Update to 5.23.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.4
- Changes since 5.23.3:
  * kickoff: Do not reset action for KickoffItemDelegate in Places tab (kde#446269)
  * applets/taskmanager: Always show album art for single non-browser windows
  * kcms/touchpad: make applet read-only
  * Revert "Delete the Touchpad applet" (kde#445095)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1640692800">- Add patch to fix empty window appearing on activity switching
  (kde#443968, boo#1193960):
  * 0001-SwitcherBackend-Only-create-the-workaround-window-on.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1641297600">- Update to 5.23.5
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.5
- Changes since 5.23.4:
  * [kcms/keyboard] Fix setting options on X11 (kde#443609)
  * [kcms/keyboard] Fix fallback handling in X11Helper::getGroupNames
  * SwitcherBackend: Only create the workaround window on wayland (kde#443968)
  * Touchpad KCM: Don't write default values to active config (kde#427771)
  * Change ListView code to match GridView
  * Fix GridView size/position
  * Move plasmoid specific properties out of singleton (kde#443131)
  * kcms/touchpad/applet: Fix mousearea lookup
  * containments/panel: Fix initial sizing
  * kcms/touchpad/applet: Make the popup close on click (kde#445982)
- Drop patches, fixed upstream:
  * 0001-SwitcherBackend-Only-create-the-workaround-window-on.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1641902400">- Apply openSUSE branding of favorites as patch:
  * 0001-Apply-branding-to-default-favorites.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1642075200">- Update to 5.23.90
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.90
- Too many changes to list here
- Rebase 0001-Apply-branding-to-default-favorites.patch
- Add patches to fix setting keyboard options (kde#448377):
  * 0001-kcms-keyboard-Fix-setting-more-than-one-option.patch
  * 0002-kcms-keyboard-Port-XkbHelper-away-from-KProcess-with.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1644062400">- Update to 5.24.0
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.0
- Too many changes to list here
- Drop patches, now upstream:
  * 0001-kcms-keyboard-Fix-setting-more-than-one-option.patch
  * 0002-kcms-keyboard-Port-XkbHelper-away-from-KProcess-with.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1644926400">- Update to 5.24.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.1
- Changes since 5.24.0:
  * attica-kde: Allow it to use HTTP2</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1645531200">- Update to 5.24.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.2
- Changes since 5.24.1:
  * applet/pager: Divide window size by devicePixelRatio on X11 when it's &gt;1 (kde#446627)
  * applet/pager: Properly adjust the icon size
  * Fix build
  * Only trust the expiration date if it's less than 24 hours
  * Fix missing variable name
  * Add a granular cache preference thing to attica-kde
  * taskmanager: Hide unneeded scrollbar (kde#450463)
  * Emoji Selector: Use a more appropriate icon for the Symbols page (kde#450380)
  * applets/minimizeall: make active indicator line touch panel edges (kde#444810)
  * applets/showdesktop: Give it an active indicator line (kde#447998)
  * foldermodel: hide paste action when right-clicking on files (kde#448913)
  * Folder View: hide additional settings not relevant to list view (kde#450063)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1645704000">- Adjust patch for khelpcenter desktop file rename:
  * 0001-Apply-branding-to-default-favorites.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1645790400">- Add patch to fix the apply button in the touchpad KCM (kde#449843):
  * 0001-kcms-touchpad-Remove-weird-Q_EMIT-changed-false-in-r.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1646654400">- Replace %_libdir/libexec with %_libexecdir (boo#1174075)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1646740800">- Update to 5.24.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.3
- Changes since 5.24.2:
  * kcms/touchpad: Remove weird Q_EMIT changed(false) in resizeEvent
- Drop patches, now upstream:
  * 0001-kcms-touchpad-Remove-weird-Q_EMIT-changed-false-in-r.patch
- Restore compatibility with older kf5-filesystem
- Remove duplicate mention of kimpanel-ibus-panel</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1648555200">- Update to 5.24.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.4
- Changes since 5.24.3:
  * kcms/componentchooser: unify combobox lengths (kde#451365)</changelog>
  <changelog author="Fushan Wen &lt;qydwhotmail@gmail.com&gt;" date="1656590400">- Disable reuseItems to avoid a crash in plasmashell (kde#452660)
  * 0001-applets-taskmanager-Disable-reuseItems-to-avoid-a-cr.patch</changelog>
</package>
<package pkgid="0da35da07d7f1e6f078d54e6754bcf763b00a8c7d4862965fb8b41ddb365f492" name="plasma5-desktop-emojier" arch="aarch64">
  <version epoch="0" ver="5.24.4" rel="bp154.2.3.2"/>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1632312000">- Add patch to fix fallback user icon in Kickoff (kde#442776):
  * 0001-Use-Kirigami.Avatar-in-Kickoff-Header-bar.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1633608000">- Update to 5.23.0
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.0
- Changes since 5.22.90:
  * [wayland] fix activity switching shortcut (Meta+Tab) (kde#443323)
  * kickoff: Fix dragEnabled error for KickoffItemDelegates in singleton
  * [applets/taskmanger] Do not overlay scrollbars over contents (kde#443173)
  * kickoff: Fix null width/height error for some app grid view delegates
  * kickoff: re-add drag and drop for favorites (kde#440308)
  * kickoff: center align GridView
  * kickoff: move isSearchDelegate binding to where search view is
  * kickoff: simplify KickoffItemDelegate MouseArea anchor margins
  * kickoff: fix hover changing index when moving between search and normal pages (kde#443076)
  * kickoff: fix wrong activefocus being used in KickoffItemDelegate
  * kickoff: Fix misspelled module qualifier
  * Make clicking one item when multiple are selected deselect everything else (kde#424152)
  * kcm_touchpad: fix translation for scroll speed setting slider
  * Indicate when one of the thumbnails on the quick settings kcm has focus
  * Check for currentApplet existence (kde#443287)
  * KCM Touchpad: hide right and middle click sections when unavailable
  * Open context menu under the cursor again (kde#443278)
  * Adjust position of panel config bar when Enter is pressed (kde#443280)
  * CompactApplet: Only draw separator line for panel applets (kde#439374)
  * [keyboardlayout applet] fix non-working context menu (kde#441239)
  * [Emojier] Set highlightMoveDuration to zero
  * applets/kickoff: Improve list item touch targets and general aesthetics (kde#442661)
  * Use Kirigami.Avatar in Kickoff Header bar (kde#442776)
  * [kcms/activities] Fix QML i18n calls (kde#442514)
  * kickoff: implement directional navigation
  * kickoff: keep delegate highlight visible more often
  * kickoff: Use attached tooltip for leave buttons
- Drop patches, now upstream:
  * 0001-Use-Kirigami.Avatar-in-Kickoff-Header-bar.patch
- Add new key + signature to plasma.keyring</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1634644800">- Update to 5.23.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.1
- Changes since 5.23.0:
  * Fix "clear emoji history" action (kde#443974)
  * kickoff: Replace Kicker DragHelper with Qt Quick Drag (kde#443708)
  * Make tooltip interactive when there is a player but no window is present (kde#443425)
  * taskmanager: Disconnect from backend.showAllPlaces on destruction (kde#443820)
  * Add systemsettings runner to hardcoded list of allowed runners for kicker (kde#443776)
  * Folder View: Don't cancel multi-selection with right-click (kde#443743)
  * [applets/kicker] Explicitly set visible property when opacity is 0</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1635249600">- Update to 5.23.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.2
- Changes since 5.23.1:
  * [Folder View] Fix executing file without prompting (kde#435560)
  * KCM Touchpad: Load config for touchpad on init (kde#443011)
  * Remove defunct check for proxyAction in foldermodel (kde#444128)
  * taskmanager: Show highlight before ToolTipInstance starts loading for grouped tooltips
  * Fix updating apps model (kde#444101)
  * Fix pinned applet closes (kde#443589)
  * taskmanager: Prevent useless component creation/destruction for grouped tooltips
  * applets/taskmanager: Always set mprisSourceName to parentPid
  * Make Applet config window a tiny bit smaller and reduce minimum size (kde#443712)
  * Set Qt.ImhNoPredictiveText for text fields that act as search fields (kde#439914)
  * Desktop as folder: restore functionality of the "delete" action (kde#442765)
  * Fix create-folder-shortcut (F10) (kde#443512)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1635336000">- Update to 5.23.2.1
  * New bugfix release
- Changes since 5.23.2:
  * kickoff: Fix drag and drop causing delegates to reset to a 0 X position and overlap (kde#443975)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1636459200">- Update to 5.23.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.3
- Changes since 5.23.2.1:
  * keyboardlayout: Fix missing Esperanto flag icon in the menu (kde#445077)
  * kickoff: Do not accept stylus in TapHandler (kde#445111)
  * DRAFT: Fix issues with LayoutManager.insertAtCoordinates (kde#444071)
  * Revert "taskmanager: Show highlight before ToolTipInstance starts loading for grouped tooltips" (kde#444633)
  * Do not unnecessarily reset panel opacity when starting an animation (kde#437093)
  * foldermodel: Drop overlay(s) to icons in plasma folder view (kde#444514)
  * plasma-desktop runner: Fix showing interactive plasma/kwin console (kde#444366)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1638273600">- Update to 5.23.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.4
- Changes since 5.23.3:
  * kickoff: Do not reset action for KickoffItemDelegate in Places tab (kde#446269)
  * applets/taskmanager: Always show album art for single non-browser windows
  * kcms/touchpad: make applet read-only
  * Revert "Delete the Touchpad applet" (kde#445095)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1640692800">- Add patch to fix empty window appearing on activity switching
  (kde#443968, boo#1193960):
  * 0001-SwitcherBackend-Only-create-the-workaround-window-on.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1641297600">- Update to 5.23.5
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.5
- Changes since 5.23.4:
  * [kcms/keyboard] Fix setting options on X11 (kde#443609)
  * [kcms/keyboard] Fix fallback handling in X11Helper::getGroupNames
  * SwitcherBackend: Only create the workaround window on wayland (kde#443968)
  * Touchpad KCM: Don't write default values to active config (kde#427771)
  * Change ListView code to match GridView
  * Fix GridView size/position
  * Move plasmoid specific properties out of singleton (kde#443131)
  * kcms/touchpad/applet: Fix mousearea lookup
  * containments/panel: Fix initial sizing
  * kcms/touchpad/applet: Make the popup close on click (kde#445982)
- Drop patches, fixed upstream:
  * 0001-SwitcherBackend-Only-create-the-workaround-window-on.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1641902400">- Apply openSUSE branding of favorites as patch:
  * 0001-Apply-branding-to-default-favorites.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1642075200">- Update to 5.23.90
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.90
- Too many changes to list here
- Rebase 0001-Apply-branding-to-default-favorites.patch
- Add patches to fix setting keyboard options (kde#448377):
  * 0001-kcms-keyboard-Fix-setting-more-than-one-option.patch
  * 0002-kcms-keyboard-Port-XkbHelper-away-from-KProcess-with.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1644062400">- Update to 5.24.0
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.0
- Too many changes to list here
- Drop patches, now upstream:
  * 0001-kcms-keyboard-Fix-setting-more-than-one-option.patch
  * 0002-kcms-keyboard-Port-XkbHelper-away-from-KProcess-with.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1644926400">- Update to 5.24.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.1
- Changes since 5.24.0:
  * attica-kde: Allow it to use HTTP2</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1645531200">- Update to 5.24.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.2
- Changes since 5.24.1:
  * applet/pager: Divide window size by devicePixelRatio on X11 when it's &gt;1 (kde#446627)
  * applet/pager: Properly adjust the icon size
  * Fix build
  * Only trust the expiration date if it's less than 24 hours
  * Fix missing variable name
  * Add a granular cache preference thing to attica-kde
  * taskmanager: Hide unneeded scrollbar (kde#450463)
  * Emoji Selector: Use a more appropriate icon for the Symbols page (kde#450380)
  * applets/minimizeall: make active indicator line touch panel edges (kde#444810)
  * applets/showdesktop: Give it an active indicator line (kde#447998)
  * foldermodel: hide paste action when right-clicking on files (kde#448913)
  * Folder View: hide additional settings not relevant to list view (kde#450063)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1645704000">- Adjust patch for khelpcenter desktop file rename:
  * 0001-Apply-branding-to-default-favorites.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1645790400">- Add patch to fix the apply button in the touchpad KCM (kde#449843):
  * 0001-kcms-touchpad-Remove-weird-Q_EMIT-changed-false-in-r.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1646654400">- Replace %_libdir/libexec with %_libexecdir (boo#1174075)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1646740800">- Update to 5.24.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.3
- Changes since 5.24.2:
  * kcms/touchpad: Remove weird Q_EMIT changed(false) in resizeEvent
- Drop patches, now upstream:
  * 0001-kcms-touchpad-Remove-weird-Q_EMIT-changed-false-in-r.patch
- Restore compatibility with older kf5-filesystem
- Remove duplicate mention of kimpanel-ibus-panel</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1648555200">- Update to 5.24.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.4
- Changes since 5.24.3:
  * kcms/componentchooser: unify combobox lengths (kde#451365)</changelog>
  <changelog author="Fushan Wen &lt;qydwhotmail@gmail.com&gt;" date="1656590400">- Disable reuseItems to avoid a crash in plasmashell (kde#452660)
  * 0001-applets-taskmanager-Disable-reuseItems-to-avoid-a-cr.patch</changelog>
</package>
<package pkgid="aeae4d1d4ed267cae6165c294b5e4402e70e9c652355c67a05575f3b48d5104e" name="plasma5-desktop-emojier" arch="ppc64le">
  <version epoch="0" ver="5.24.4" rel="bp154.2.3.2"/>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1632312000">- Add patch to fix fallback user icon in Kickoff (kde#442776):
  * 0001-Use-Kirigami.Avatar-in-Kickoff-Header-bar.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1633608000">- Update to 5.23.0
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.0
- Changes since 5.22.90:
  * [wayland] fix activity switching shortcut (Meta+Tab) (kde#443323)
  * kickoff: Fix dragEnabled error for KickoffItemDelegates in singleton
  * [applets/taskmanger] Do not overlay scrollbars over contents (kde#443173)
  * kickoff: Fix null width/height error for some app grid view delegates
  * kickoff: re-add drag and drop for favorites (kde#440308)
  * kickoff: center align GridView
  * kickoff: move isSearchDelegate binding to where search view is
  * kickoff: simplify KickoffItemDelegate MouseArea anchor margins
  * kickoff: fix hover changing index when moving between search and normal pages (kde#443076)
  * kickoff: fix wrong activefocus being used in KickoffItemDelegate
  * kickoff: Fix misspelled module qualifier
  * Make clicking one item when multiple are selected deselect everything else (kde#424152)
  * kcm_touchpad: fix translation for scroll speed setting slider
  * Indicate when one of the thumbnails on the quick settings kcm has focus
  * Check for currentApplet existence (kde#443287)
  * KCM Touchpad: hide right and middle click sections when unavailable
  * Open context menu under the cursor again (kde#443278)
  * Adjust position of panel config bar when Enter is pressed (kde#443280)
  * CompactApplet: Only draw separator line for panel applets (kde#439374)
  * [keyboardlayout applet] fix non-working context menu (kde#441239)
  * [Emojier] Set highlightMoveDuration to zero
  * applets/kickoff: Improve list item touch targets and general aesthetics (kde#442661)
  * Use Kirigami.Avatar in Kickoff Header bar (kde#442776)
  * [kcms/activities] Fix QML i18n calls (kde#442514)
  * kickoff: implement directional navigation
  * kickoff: keep delegate highlight visible more often
  * kickoff: Use attached tooltip for leave buttons
- Drop patches, now upstream:
  * 0001-Use-Kirigami.Avatar-in-Kickoff-Header-bar.patch
- Add new key + signature to plasma.keyring</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1634644800">- Update to 5.23.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.1
- Changes since 5.23.0:
  * Fix "clear emoji history" action (kde#443974)
  * kickoff: Replace Kicker DragHelper with Qt Quick Drag (kde#443708)
  * Make tooltip interactive when there is a player but no window is present (kde#443425)
  * taskmanager: Disconnect from backend.showAllPlaces on destruction (kde#443820)
  * Add systemsettings runner to hardcoded list of allowed runners for kicker (kde#443776)
  * Folder View: Don't cancel multi-selection with right-click (kde#443743)
  * [applets/kicker] Explicitly set visible property when opacity is 0</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1635249600">- Update to 5.23.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.2
- Changes since 5.23.1:
  * [Folder View] Fix executing file without prompting (kde#435560)
  * KCM Touchpad: Load config for touchpad on init (kde#443011)
  * Remove defunct check for proxyAction in foldermodel (kde#444128)
  * taskmanager: Show highlight before ToolTipInstance starts loading for grouped tooltips
  * Fix updating apps model (kde#444101)
  * Fix pinned applet closes (kde#443589)
  * taskmanager: Prevent useless component creation/destruction for grouped tooltips
  * applets/taskmanager: Always set mprisSourceName to parentPid
  * Make Applet config window a tiny bit smaller and reduce minimum size (kde#443712)
  * Set Qt.ImhNoPredictiveText for text fields that act as search fields (kde#439914)
  * Desktop as folder: restore functionality of the "delete" action (kde#442765)
  * Fix create-folder-shortcut (F10) (kde#443512)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1635336000">- Update to 5.23.2.1
  * New bugfix release
- Changes since 5.23.2:
  * kickoff: Fix drag and drop causing delegates to reset to a 0 X position and overlap (kde#443975)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1636459200">- Update to 5.23.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.3
- Changes since 5.23.2.1:
  * keyboardlayout: Fix missing Esperanto flag icon in the menu (kde#445077)
  * kickoff: Do not accept stylus in TapHandler (kde#445111)
  * DRAFT: Fix issues with LayoutManager.insertAtCoordinates (kde#444071)
  * Revert "taskmanager: Show highlight before ToolTipInstance starts loading for grouped tooltips" (kde#444633)
  * Do not unnecessarily reset panel opacity when starting an animation (kde#437093)
  * foldermodel: Drop overlay(s) to icons in plasma folder view (kde#444514)
  * plasma-desktop runner: Fix showing interactive plasma/kwin console (kde#444366)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1638273600">- Update to 5.23.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.4
- Changes since 5.23.3:
  * kickoff: Do not reset action for KickoffItemDelegate in Places tab (kde#446269)
  * applets/taskmanager: Always show album art for single non-browser windows
  * kcms/touchpad: make applet read-only
  * Revert "Delete the Touchpad applet" (kde#445095)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1640692800">- Add patch to fix empty window appearing on activity switching
  (kde#443968, boo#1193960):
  * 0001-SwitcherBackend-Only-create-the-workaround-window-on.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1641297600">- Update to 5.23.5
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.5
- Changes since 5.23.4:
  * [kcms/keyboard] Fix setting options on X11 (kde#443609)
  * [kcms/keyboard] Fix fallback handling in X11Helper::getGroupNames
  * SwitcherBackend: Only create the workaround window on wayland (kde#443968)
  * Touchpad KCM: Don't write default values to active config (kde#427771)
  * Change ListView code to match GridView
  * Fix GridView size/position
  * Move plasmoid specific properties out of singleton (kde#443131)
  * kcms/touchpad/applet: Fix mousearea lookup
  * containments/panel: Fix initial sizing
  * kcms/touchpad/applet: Make the popup close on click (kde#445982)
- Drop patches, fixed upstream:
  * 0001-SwitcherBackend-Only-create-the-workaround-window-on.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1641902400">- Apply openSUSE branding of favorites as patch:
  * 0001-Apply-branding-to-default-favorites.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1642075200">- Update to 5.23.90
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.90
- Too many changes to list here
- Rebase 0001-Apply-branding-to-default-favorites.patch
- Add patches to fix setting keyboard options (kde#448377):
  * 0001-kcms-keyboard-Fix-setting-more-than-one-option.patch
  * 0002-kcms-keyboard-Port-XkbHelper-away-from-KProcess-with.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1644062400">- Update to 5.24.0
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.0
- Too many changes to list here
- Drop patches, now upstream:
  * 0001-kcms-keyboard-Fix-setting-more-than-one-option.patch
  * 0002-kcms-keyboard-Port-XkbHelper-away-from-KProcess-with.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1644926400">- Update to 5.24.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.1
- Changes since 5.24.0:
  * attica-kde: Allow it to use HTTP2</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1645531200">- Update to 5.24.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.2
- Changes since 5.24.1:
  * applet/pager: Divide window size by devicePixelRatio on X11 when it's &gt;1 (kde#446627)
  * applet/pager: Properly adjust the icon size
  * Fix build
  * Only trust the expiration date if it's less than 24 hours
  * Fix missing variable name
  * Add a granular cache preference thing to attica-kde
  * taskmanager: Hide unneeded scrollbar (kde#450463)
  * Emoji Selector: Use a more appropriate icon for the Symbols page (kde#450380)
  * applets/minimizeall: make active indicator line touch panel edges (kde#444810)
  * applets/showdesktop: Give it an active indicator line (kde#447998)
  * foldermodel: hide paste action when right-clicking on files (kde#448913)
  * Folder View: hide additional settings not relevant to list view (kde#450063)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1645704000">- Adjust patch for khelpcenter desktop file rename:
  * 0001-Apply-branding-to-default-favorites.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1645790400">- Add patch to fix the apply button in the touchpad KCM (kde#449843):
  * 0001-kcms-touchpad-Remove-weird-Q_EMIT-changed-false-in-r.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1646654400">- Replace %_libdir/libexec with %_libexecdir (boo#1174075)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1646740800">- Update to 5.24.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.3
- Changes since 5.24.2:
  * kcms/touchpad: Remove weird Q_EMIT changed(false) in resizeEvent
- Drop patches, now upstream:
  * 0001-kcms-touchpad-Remove-weird-Q_EMIT-changed-false-in-r.patch
- Restore compatibility with older kf5-filesystem
- Remove duplicate mention of kimpanel-ibus-panel</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1648555200">- Update to 5.24.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.4
- Changes since 5.24.3:
  * kcms/componentchooser: unify combobox lengths (kde#451365)</changelog>
  <changelog author="Fushan Wen &lt;qydwhotmail@gmail.com&gt;" date="1656590400">- Disable reuseItems to avoid a crash in plasmashell (kde#452660)
  * 0001-applets-taskmanager-Disable-reuseItems-to-avoid-a-cr.patch</changelog>
</package>
<package pkgid="c6630833993bb83e55f77fb5ca2c659796bf0af8f5124b0a3f8ca6c4fad342ec" name="plasma5-desktop-emojier" arch="x86_64">
  <version epoch="0" ver="5.24.4" rel="bp154.2.3.2"/>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1632312000">- Add patch to fix fallback user icon in Kickoff (kde#442776):
  * 0001-Use-Kirigami.Avatar-in-Kickoff-Header-bar.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1633608000">- Update to 5.23.0
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.0
- Changes since 5.22.90:
  * [wayland] fix activity switching shortcut (Meta+Tab) (kde#443323)
  * kickoff: Fix dragEnabled error for KickoffItemDelegates in singleton
  * [applets/taskmanger] Do not overlay scrollbars over contents (kde#443173)
  * kickoff: Fix null width/height error for some app grid view delegates
  * kickoff: re-add drag and drop for favorites (kde#440308)
  * kickoff: center align GridView
  * kickoff: move isSearchDelegate binding to where search view is
  * kickoff: simplify KickoffItemDelegate MouseArea anchor margins
  * kickoff: fix hover changing index when moving between search and normal pages (kde#443076)
  * kickoff: fix wrong activefocus being used in KickoffItemDelegate
  * kickoff: Fix misspelled module qualifier
  * Make clicking one item when multiple are selected deselect everything else (kde#424152)
  * kcm_touchpad: fix translation for scroll speed setting slider
  * Indicate when one of the thumbnails on the quick settings kcm has focus
  * Check for currentApplet existence (kde#443287)
  * KCM Touchpad: hide right and middle click sections when unavailable
  * Open context menu under the cursor again (kde#443278)
  * Adjust position of panel config bar when Enter is pressed (kde#443280)
  * CompactApplet: Only draw separator line for panel applets (kde#439374)
  * [keyboardlayout applet] fix non-working context menu (kde#441239)
  * [Emojier] Set highlightMoveDuration to zero
  * applets/kickoff: Improve list item touch targets and general aesthetics (kde#442661)
  * Use Kirigami.Avatar in Kickoff Header bar (kde#442776)
  * [kcms/activities] Fix QML i18n calls (kde#442514)
  * kickoff: implement directional navigation
  * kickoff: keep delegate highlight visible more often
  * kickoff: Use attached tooltip for leave buttons
- Drop patches, now upstream:
  * 0001-Use-Kirigami.Avatar-in-Kickoff-Header-bar.patch
- Add new key + signature to plasma.keyring</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1634644800">- Update to 5.23.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.1
- Changes since 5.23.0:
  * Fix "clear emoji history" action (kde#443974)
  * kickoff: Replace Kicker DragHelper with Qt Quick Drag (kde#443708)
  * Make tooltip interactive when there is a player but no window is present (kde#443425)
  * taskmanager: Disconnect from backend.showAllPlaces on destruction (kde#443820)
  * Add systemsettings runner to hardcoded list of allowed runners for kicker (kde#443776)
  * Folder View: Don't cancel multi-selection with right-click (kde#443743)
  * [applets/kicker] Explicitly set visible property when opacity is 0</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1635249600">- Update to 5.23.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.2
- Changes since 5.23.1:
  * [Folder View] Fix executing file without prompting (kde#435560)
  * KCM Touchpad: Load config for touchpad on init (kde#443011)
  * Remove defunct check for proxyAction in foldermodel (kde#444128)
  * taskmanager: Show highlight before ToolTipInstance starts loading for grouped tooltips
  * Fix updating apps model (kde#444101)
  * Fix pinned applet closes (kde#443589)
  * taskmanager: Prevent useless component creation/destruction for grouped tooltips
  * applets/taskmanager: Always set mprisSourceName to parentPid
  * Make Applet config window a tiny bit smaller and reduce minimum size (kde#443712)
  * Set Qt.ImhNoPredictiveText for text fields that act as search fields (kde#439914)
  * Desktop as folder: restore functionality of the "delete" action (kde#442765)
  * Fix create-folder-shortcut (F10) (kde#443512)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1635336000">- Update to 5.23.2.1
  * New bugfix release
- Changes since 5.23.2:
  * kickoff: Fix drag and drop causing delegates to reset to a 0 X position and overlap (kde#443975)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1636459200">- Update to 5.23.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.3
- Changes since 5.23.2.1:
  * keyboardlayout: Fix missing Esperanto flag icon in the menu (kde#445077)
  * kickoff: Do not accept stylus in TapHandler (kde#445111)
  * DRAFT: Fix issues with LayoutManager.insertAtCoordinates (kde#444071)
  * Revert "taskmanager: Show highlight before ToolTipInstance starts loading for grouped tooltips" (kde#444633)
  * Do not unnecessarily reset panel opacity when starting an animation (kde#437093)
  * foldermodel: Drop overlay(s) to icons in plasma folder view (kde#444514)
  * plasma-desktop runner: Fix showing interactive plasma/kwin console (kde#444366)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1638273600">- Update to 5.23.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.4
- Changes since 5.23.3:
  * kickoff: Do not reset action for KickoffItemDelegate in Places tab (kde#446269)
  * applets/taskmanager: Always show album art for single non-browser windows
  * kcms/touchpad: make applet read-only
  * Revert "Delete the Touchpad applet" (kde#445095)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1640692800">- Add patch to fix empty window appearing on activity switching
  (kde#443968, boo#1193960):
  * 0001-SwitcherBackend-Only-create-the-workaround-window-on.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1641297600">- Update to 5.23.5
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.5
- Changes since 5.23.4:
  * [kcms/keyboard] Fix setting options on X11 (kde#443609)
  * [kcms/keyboard] Fix fallback handling in X11Helper::getGroupNames
  * SwitcherBackend: Only create the workaround window on wayland (kde#443968)
  * Touchpad KCM: Don't write default values to active config (kde#427771)
  * Change ListView code to match GridView
  * Fix GridView size/position
  * Move plasmoid specific properties out of singleton (kde#443131)
  * kcms/touchpad/applet: Fix mousearea lookup
  * containments/panel: Fix initial sizing
  * kcms/touchpad/applet: Make the popup close on click (kde#445982)
- Drop patches, fixed upstream:
  * 0001-SwitcherBackend-Only-create-the-workaround-window-on.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1641902400">- Apply openSUSE branding of favorites as patch:
  * 0001-Apply-branding-to-default-favorites.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1642075200">- Update to 5.23.90
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.90
- Too many changes to list here
- Rebase 0001-Apply-branding-to-default-favorites.patch
- Add patches to fix setting keyboard options (kde#448377):
  * 0001-kcms-keyboard-Fix-setting-more-than-one-option.patch
  * 0002-kcms-keyboard-Port-XkbHelper-away-from-KProcess-with.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1644062400">- Update to 5.24.0
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.0
- Too many changes to list here
- Drop patches, now upstream:
  * 0001-kcms-keyboard-Fix-setting-more-than-one-option.patch
  * 0002-kcms-keyboard-Port-XkbHelper-away-from-KProcess-with.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1644926400">- Update to 5.24.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.1
- Changes since 5.24.0:
  * attica-kde: Allow it to use HTTP2</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1645531200">- Update to 5.24.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.2
- Changes since 5.24.1:
  * applet/pager: Divide window size by devicePixelRatio on X11 when it's &gt;1 (kde#446627)
  * applet/pager: Properly adjust the icon size
  * Fix build
  * Only trust the expiration date if it's less than 24 hours
  * Fix missing variable name
  * Add a granular cache preference thing to attica-kde
  * taskmanager: Hide unneeded scrollbar (kde#450463)
  * Emoji Selector: Use a more appropriate icon for the Symbols page (kde#450380)
  * applets/minimizeall: make active indicator line touch panel edges (kde#444810)
  * applets/showdesktop: Give it an active indicator line (kde#447998)
  * foldermodel: hide paste action when right-clicking on files (kde#448913)
  * Folder View: hide additional settings not relevant to list view (kde#450063)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1645704000">- Adjust patch for khelpcenter desktop file rename:
  * 0001-Apply-branding-to-default-favorites.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1645790400">- Add patch to fix the apply button in the touchpad KCM (kde#449843):
  * 0001-kcms-touchpad-Remove-weird-Q_EMIT-changed-false-in-r.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1646654400">- Replace %_libdir/libexec with %_libexecdir (boo#1174075)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1646740800">- Update to 5.24.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.3
- Changes since 5.24.2:
  * kcms/touchpad: Remove weird Q_EMIT changed(false) in resizeEvent
- Drop patches, now upstream:
  * 0001-kcms-touchpad-Remove-weird-Q_EMIT-changed-false-in-r.patch
- Restore compatibility with older kf5-filesystem
- Remove duplicate mention of kimpanel-ibus-panel</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1648555200">- Update to 5.24.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.4
- Changes since 5.24.3:
  * kcms/componentchooser: unify combobox lengths (kde#451365)</changelog>
  <changelog author="Fushan Wen &lt;qydwhotmail@gmail.com&gt;" date="1656590400">- Disable reuseItems to avoid a crash in plasmashell (kde#452660)
  * 0001-applets-taskmanager-Disable-reuseItems-to-avoid-a-cr.patch</changelog>
</package>
<package pkgid="67fc30dad675856252e0a5046377ebeebd7b8b962a8a5e358f77c84a6b68752c" name="plasma5-desktop-lang" arch="noarch">
  <version epoch="0" ver="5.24.4" rel="bp154.2.3.2"/>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1632312000">- Add patch to fix fallback user icon in Kickoff (kde#442776):
  * 0001-Use-Kirigami.Avatar-in-Kickoff-Header-bar.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1633608000">- Update to 5.23.0
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.0
- Changes since 5.22.90:
  * [wayland] fix activity switching shortcut (Meta+Tab) (kde#443323)
  * kickoff: Fix dragEnabled error for KickoffItemDelegates in singleton
  * [applets/taskmanger] Do not overlay scrollbars over contents (kde#443173)
  * kickoff: Fix null width/height error for some app grid view delegates
  * kickoff: re-add drag and drop for favorites (kde#440308)
  * kickoff: center align GridView
  * kickoff: move isSearchDelegate binding to where search view is
  * kickoff: simplify KickoffItemDelegate MouseArea anchor margins
  * kickoff: fix hover changing index when moving between search and normal pages (kde#443076)
  * kickoff: fix wrong activefocus being used in KickoffItemDelegate
  * kickoff: Fix misspelled module qualifier
  * Make clicking one item when multiple are selected deselect everything else (kde#424152)
  * kcm_touchpad: fix translation for scroll speed setting slider
  * Indicate when one of the thumbnails on the quick settings kcm has focus
  * Check for currentApplet existence (kde#443287)
  * KCM Touchpad: hide right and middle click sections when unavailable
  * Open context menu under the cursor again (kde#443278)
  * Adjust position of panel config bar when Enter is pressed (kde#443280)
  * CompactApplet: Only draw separator line for panel applets (kde#439374)
  * [keyboardlayout applet] fix non-working context menu (kde#441239)
  * [Emojier] Set highlightMoveDuration to zero
  * applets/kickoff: Improve list item touch targets and general aesthetics (kde#442661)
  * Use Kirigami.Avatar in Kickoff Header bar (kde#442776)
  * [kcms/activities] Fix QML i18n calls (kde#442514)
  * kickoff: implement directional navigation
  * kickoff: keep delegate highlight visible more often
  * kickoff: Use attached tooltip for leave buttons
- Drop patches, now upstream:
  * 0001-Use-Kirigami.Avatar-in-Kickoff-Header-bar.patch
- Add new key + signature to plasma.keyring</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1634644800">- Update to 5.23.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.1
- Changes since 5.23.0:
  * Fix "clear emoji history" action (kde#443974)
  * kickoff: Replace Kicker DragHelper with Qt Quick Drag (kde#443708)
  * Make tooltip interactive when there is a player but no window is present (kde#443425)
  * taskmanager: Disconnect from backend.showAllPlaces on destruction (kde#443820)
  * Add systemsettings runner to hardcoded list of allowed runners for kicker (kde#443776)
  * Folder View: Don't cancel multi-selection with right-click (kde#443743)
  * [applets/kicker] Explicitly set visible property when opacity is 0</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1635249600">- Update to 5.23.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.2
- Changes since 5.23.1:
  * [Folder View] Fix executing file without prompting (kde#435560)
  * KCM Touchpad: Load config for touchpad on init (kde#443011)
  * Remove defunct check for proxyAction in foldermodel (kde#444128)
  * taskmanager: Show highlight before ToolTipInstance starts loading for grouped tooltips
  * Fix updating apps model (kde#444101)
  * Fix pinned applet closes (kde#443589)
  * taskmanager: Prevent useless component creation/destruction for grouped tooltips
  * applets/taskmanager: Always set mprisSourceName to parentPid
  * Make Applet config window a tiny bit smaller and reduce minimum size (kde#443712)
  * Set Qt.ImhNoPredictiveText for text fields that act as search fields (kde#439914)
  * Desktop as folder: restore functionality of the "delete" action (kde#442765)
  * Fix create-folder-shortcut (F10) (kde#443512)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1635336000">- Update to 5.23.2.1
  * New bugfix release
- Changes since 5.23.2:
  * kickoff: Fix drag and drop causing delegates to reset to a 0 X position and overlap (kde#443975)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1636459200">- Update to 5.23.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.3
- Changes since 5.23.2.1:
  * keyboardlayout: Fix missing Esperanto flag icon in the menu (kde#445077)
  * kickoff: Do not accept stylus in TapHandler (kde#445111)
  * DRAFT: Fix issues with LayoutManager.insertAtCoordinates (kde#444071)
  * Revert "taskmanager: Show highlight before ToolTipInstance starts loading for grouped tooltips" (kde#444633)
  * Do not unnecessarily reset panel opacity when starting an animation (kde#437093)
  * foldermodel: Drop overlay(s) to icons in plasma folder view (kde#444514)
  * plasma-desktop runner: Fix showing interactive plasma/kwin console (kde#444366)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1638273600">- Update to 5.23.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.4
- Changes since 5.23.3:
  * kickoff: Do not reset action for KickoffItemDelegate in Places tab (kde#446269)
  * applets/taskmanager: Always show album art for single non-browser windows
  * kcms/touchpad: make applet read-only
  * Revert "Delete the Touchpad applet" (kde#445095)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1640692800">- Add patch to fix empty window appearing on activity switching
  (kde#443968, boo#1193960):
  * 0001-SwitcherBackend-Only-create-the-workaround-window-on.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1641297600">- Update to 5.23.5
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.5
- Changes since 5.23.4:
  * [kcms/keyboard] Fix setting options on X11 (kde#443609)
  * [kcms/keyboard] Fix fallback handling in X11Helper::getGroupNames
  * SwitcherBackend: Only create the workaround window on wayland (kde#443968)
  * Touchpad KCM: Don't write default values to active config (kde#427771)
  * Change ListView code to match GridView
  * Fix GridView size/position
  * Move plasmoid specific properties out of singleton (kde#443131)
  * kcms/touchpad/applet: Fix mousearea lookup
  * containments/panel: Fix initial sizing
  * kcms/touchpad/applet: Make the popup close on click (kde#445982)
- Drop patches, fixed upstream:
  * 0001-SwitcherBackend-Only-create-the-workaround-window-on.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1641902400">- Apply openSUSE branding of favorites as patch:
  * 0001-Apply-branding-to-default-favorites.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1642075200">- Update to 5.23.90
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.90
- Too many changes to list here
- Rebase 0001-Apply-branding-to-default-favorites.patch
- Add patches to fix setting keyboard options (kde#448377):
  * 0001-kcms-keyboard-Fix-setting-more-than-one-option.patch
  * 0002-kcms-keyboard-Port-XkbHelper-away-from-KProcess-with.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1644062400">- Update to 5.24.0
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.0
- Too many changes to list here
- Drop patches, now upstream:
  * 0001-kcms-keyboard-Fix-setting-more-than-one-option.patch
  * 0002-kcms-keyboard-Port-XkbHelper-away-from-KProcess-with.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1644926400">- Update to 5.24.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.1
- Changes since 5.24.0:
  * attica-kde: Allow it to use HTTP2</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1645531200">- Update to 5.24.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.2
- Changes since 5.24.1:
  * applet/pager: Divide window size by devicePixelRatio on X11 when it's &gt;1 (kde#446627)
  * applet/pager: Properly adjust the icon size
  * Fix build
  * Only trust the expiration date if it's less than 24 hours
  * Fix missing variable name
  * Add a granular cache preference thing to attica-kde
  * taskmanager: Hide unneeded scrollbar (kde#450463)
  * Emoji Selector: Use a more appropriate icon for the Symbols page (kde#450380)
  * applets/minimizeall: make active indicator line touch panel edges (kde#444810)
  * applets/showdesktop: Give it an active indicator line (kde#447998)
  * foldermodel: hide paste action when right-clicking on files (kde#448913)
  * Folder View: hide additional settings not relevant to list view (kde#450063)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1645704000">- Adjust patch for khelpcenter desktop file rename:
  * 0001-Apply-branding-to-default-favorites.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1645790400">- Add patch to fix the apply button in the touchpad KCM (kde#449843):
  * 0001-kcms-touchpad-Remove-weird-Q_EMIT-changed-false-in-r.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1646654400">- Replace %_libdir/libexec with %_libexecdir (boo#1174075)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1646740800">- Update to 5.24.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.3
- Changes since 5.24.2:
  * kcms/touchpad: Remove weird Q_EMIT changed(false) in resizeEvent
- Drop patches, now upstream:
  * 0001-kcms-touchpad-Remove-weird-Q_EMIT-changed-false-in-r.patch
- Restore compatibility with older kf5-filesystem
- Remove duplicate mention of kimpanel-ibus-panel</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1648555200">- Update to 5.24.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.4
- Changes since 5.24.3:
  * kcms/componentchooser: unify combobox lengths (kde#451365)</changelog>
  <changelog author="Fushan Wen &lt;qydwhotmail@gmail.com&gt;" date="1656590400">- Disable reuseItems to avoid a crash in plasmashell (kde#452660)
  * 0001-applets-taskmanager-Disable-reuseItems-to-avoid-a-cr.patch</changelog>
</package>
<package pkgid="40f05053ab2956c08f373ad5750a89377cd839f21e4d15cb57026c11211c10e1" name="plasma5-session" arch="noarch">
  <version epoch="0" ver="5.24.4" rel="bp154.2.3.1"/>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1632312000">- Add patches from Plasma/5.23 branch:
  * 0001-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0002-shell-panel-Fix-ability-to-type-in-textfield.patch
  * 0003-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0004-PipeWire-Make-sure-thumbnails-properly-use-dmabuf-ag.patch
  * 0005-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0006-Klipper-Handle-incoming-UTF-8-mime-types.patch
  * 0007-Klipper-Guard-against-broken-data-fetches.patch
  * 0008-pipewire-Properly-compare-pipewire-versions-using-QV.patch
  * 0009-PipeWire-Include-defines-for-older-PipeWire-versions.patch
  * 0010-sddm-theme-fix-default-username-font-size.patch
- Add patch to fix XEmbed context menus (kde#442758)
  * 0011-Revert-xembed-adapt-to-changes-in-KNotifications.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1632484800">- Add patch to fix build with gpsd:
  * 0001-Fix-build-with-gpsd-3.23.1.patch
- Add patch to fix window thumbnails if dmabuf is not supported (kde#428284):
  * 0002-libtaskmanager-Don-t-request-dmabuf-if-not-supported.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1633608000">- Update to 5.23.0
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.0
- Changes since 5.22.90:
  * Revert "xembed: adapt to changes in KNotifications" (kde#442758)
  * sddm-theme: Fix using mouse movements to show the UI
  * [systemtray] Check for menuItemFactory.object existence (kde#443377)
  * applets/devicenotifier: Remove applet list item animations
  * sddm-theme: Fix use of needsPassword and related button layout
  * [klipper] Fix shortcut of OK button in the clipboard content edit dialog (kde#400623)
  * Fix Kickoff context menu actions for System Settings results (kde#442522)
  * klipper: Fix reading from plasma on wayland
  * Fix build with gpsd 3.23.1
  * Unbreak fontinst KCM (kde#442748)
  * Address regression in VT switching code (kde#442852)
  * libtaskmanager: Don't request dmabuf if not supported (kde#428284)
  * Port away from Kirigami.Units.devicePixelRatio
  * lookandfeel: don't nuke accent colour (kde#442812)
  * kcm/colors: Improve some bindings on accent colors
  * sddm-theme: fix default username font size
  * PipeWire: Include defines for older PipeWire versions
  * pipewire: Properly compare pipewire versions using QVersionNumber
  * [Klipper] Guard against broken data fetches
  * [Klipper] Handle incoming UTF-8 mime types (kde#424694)
  * PipeWire: Make sure thumbnails properly use dmabuf again
  * [shell/panel] Fix ability to type in textfield (kde#442557)
- Drop patches, now upstream:
  * 0001-Fix-build-with-gpsd-3.23.1.patch
  * 0001-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0002-libtaskmanager-Don-t-request-dmabuf-if-not-supported.patch
  * 0002-shell-panel-Fix-ability-to-type-in-textfield.patch
  * 0003-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0004-PipeWire-Make-sure-thumbnails-properly-use-dmabuf-ag.patch
  * 0005-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0006-Klipper-Handle-incoming-UTF-8-mime-types.patch
  * 0007-Klipper-Guard-against-broken-data-fetches.patch
  * 0008-pipewire-Properly-compare-pipewire-versions-using-QV.patch
  * 0009-PipeWire-Include-defines-for-older-PipeWire-versions.patch
  * 0010-sddm-theme-fix-default-username-font-size.patch
  * 0011-Revert-xembed-adapt-to-changes-in-KNotifications.patch
- Refresh 0001-Ignore-default-sddm-face-icons.patch
- Add new key + signature to plasma.keyring</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1634299200">- Add patch to show password input on the "Other" page in SDDM (kde#443737):
  * 0001-sddm-theme-fix-missing-password-field-on-Other-page.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1634644800">- Update to 5.23.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.1
- Changes since 5.23.0:
  * [freespacenotifier] impr: no notification for ro filesystems
  * kcms/colors: Don't apply header accent colors to non-Header color schemes (kde#443786)
  * [kcms/colors] Notify global settings change after saving
  * krdb: Fix removal of Xft.dpi from Xresources (kde#350039)
  * sddm-theme: fix missing password field on "Other" page (kde#443737)
  * pipewire: Report DRM_FORMAT_MOD_INVALID when no modifiers are offered
  * [digital-clock] Do not assign undefined when agenda is not visible (kde#443380)
- Drop patches, now upstream:
  * 0001-sddm-theme-fix-missing-password-field-on-Other-page.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1634817600">- Add back X11 root window properties until firefox is adjusted
  (boo#1191825):
  * 0001-Revert-Drop-setupX11-from-startplasma-waylandsession.patch
  * 0002-Revert-Drop-X11-root-properties-for-KDE-full-session.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1635249600">- Update to 5.23.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.2
- Changes since 5.23.1:
  * Hide KRunner window when pressing escape (kde#444240)
  * [applets/clipboard] Fix selecting clipboard entries with Enter
  * Set Qt.ImhNoPredictiveText for text fields that act as search fields
  * [shell] Ignore placeholder screens
- Add a version to BuildRequires: cmake(Breeze)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1636459200">- Update to 5.23.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.3
- Changes since 5.23.2:
  * fixed size hints to the osd
  * use implicit size to not cause binding loops (kde#422072)
  * wayland: don't create DesktopView for placeholder screen (kde#438839,kde#444801)
  * [startplasma] Detect systemd service in linked state
  * [Notifications] Fix grouping container side line
  * Disconnect watcher for xdgActivationTokenArrived (kde#444385)
  * interactiveconsole: Allow specifying mode from command line parameter</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1638273600">- Update to 5.23.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.4
- Changes since 5.23.3:
  * Lock &amp; login screens: Use RTL-friendly arrows when in RTL mode
  * [logout-greeter] Set window class name (kde#444898,kde#444899)
  * systemtray: Connect to StatusNotifierWatcher before initializing QDBusPendingReply
  * systemtray: Check if a service is already added before processing QDBusReply (kde#443961)
  * baloosearchruner: Emit DBus error when baloo is disabled (kde#445342)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1641297600">- Update to 5.23.5
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.5
- Changes since 5.23.4:
  * applets/systemtray: Follow panel opacity (kde#439025)
  * [webshortcutsrunner] Fix private browsing with some Firefoxes
  * [kcms/style] Don't call setNeedsSave when style config changes (kde#439297)
  * digital-clock: fix calendar popup contrast when opened from desktop (kde#446991)
  * [libnotificationmanager] Fix memory leak
  * [kcms/lookandfeel] Guard reading invalid first entry (kde#446100)
  * [Global Menu] Set translation domain
  * lookandfeel: Add missing check if list of files is empty (kde#439797)
  * [KSplash] Start with zero opacity
  * Fix Klipper Actions content truncation (kde#444365)
  * [klipper] Use full text for DBus return values (kde#446441)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1642075200">- Update to 5.23.90
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.90
- Too many changes to list here
- Rebase 0001-Use-qdbus-qt5.patch
- Replace xprop-kde-full-session.desktop with autostart file:
  * 0001-Revert-Drop-setupX11-from-startplasma-waylandsession.patch
  * 0002-Revert-Drop-X11-root-properties-for-KDE-full-session.patch
- Add patch to fix the upstream sddm theme background:
  * 0001-sddm-theme-Change-wallpaper-extension-so-that-it-poi.patch
- Add patch to fix screen sharing dialog (kde#448423):
  * 0001-systemdialogs-Remove-leftover-and-broken-components.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1642852800">- Add patch to fix initial focus in SDDM (kde#447817):
  * 0001-Make-SessionManagementScreen-a-FocusScope.patch
- Add patch to fix initial focus in the lockscreen:
  * 0001-Fix-initial-focus-in-LockScreenUi.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1644062400">- Update to 5.24.0
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.0
- Too many changes to list here
- Drop patches, now upstream:
  * 0001-sddm-theme-Change-wallpaper-extension-so-that-it-poi.patch
  * 0001-systemdialogs-Remove-leftover-and-broken-components.patch
  * 0001-Make-SessionManagementScreen-a-FocusScope.patch
  * 0001-Fix-initial-focus-in-LockScreenUi.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1644926400">- Update to 5.24.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.1
- Changes since 5.24.0:
  * Move to runtime check of valid font DPI (kde#449918)
  * applets/battery: adjust show/hide conditions for charge limits (kde#435931)
  * applets/systemtray: fix SNI context menu usage without libappindicator (kde#449870)
  * applets/notifications: Increase implicit size of standalone popup (kde#448383)
  * applets-digital/clock: Add workaround for QTBUG-83890 (kde#448387)
  * Clean up "empty" mimeType containg only whitespaces
  * dataengines/apps: Use KIO::ApplicationLauncherJob for starting KService
  * [containmentactions/applauncher] Use ApplicationLauncherJob instead of OpenUrlJob (kde#449900)
  * Desktop: Still show services with nodisplay=true set (kde#449243)
  * appstream runner: De-duplicate results from multiple sources (kde#448619)
  * Fix ksplash always using default theme. (kde#446966)
  * kcms/users: Fix missing template arguments before reply in FingerprintModel
  * De-duplicate 'Uninstall or manage addons' option in the context menu of Kickoff (kde#448564)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1645531200">- Update to 5.24.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.2
- Changes since 5.24.1:
  * applets/clipboard: Focus on the search field for the first time opening the applet
  * applets/clipboard: Make Up/Down arrow keys work in ClipboardPage (kde#448811,kde#450040)
  * applets/panelspacer: Fix optimal size calculation (kde#431668)
  * Fix overdraw on Wayland
  * PanelView: Do not crash when the state is transitioning (kde#373461)
  * Fix launch kscreen kcm in font kcm.
  * Don't install two copies of kcm_fontinst
  * Lock/login themes: stop adjusting shadows based on color scheme (kde#449985)
  * Top-align lock/login/logout screen action buttons (kde#450238)
  * [kcms/user] Set interactive auth flag for more calls (kde#450122)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1645704000">- Add patch to fix log output of some processes (boo#1196206):
  * 0001-startkde-Forward-stdout-stderr-of-started-processes.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1646654400">- Replace %_libdir/libexec with %_libexecdir (boo#1174075)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1646740800">- Update to 5.24.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.3
- Changes since 5.24.2:
  * kcms/colors: Implement radio button layouts better
  * kcms/colors: fix spacing between radio buttons and content
  * [Battery Monitor] Only show charge threshold hint for power supply batteries (kde#451161)
  * [Icons KCM] Give measure delegate a text
  * wallpapers: Sort BackgroundListModel by title
  * applets/digital-clock: Fix `Qt.formatDateTime` returns different date when minute changes (kde#436796)
  * applets/systray: align applet labels with differing line counts in hidden view (kde#438347)
  * Show panel config above other windows (kde#450794)
  * Use current accent colour to set ColorDialog object in colour picker
  * SystemDialog: Allow accepting the dialogs with the keyboard (kde#450223)
  * applets/systemtray: Do not open context menu on mouse pressed for SNI (kde#409768)
  * Revert "Fix overdraw on Wayland"
  * startkde: Forward stdout/stderr of started processes
  * SDDM theme: stop eliding people's names so aggressively (kde#450673)
  * applets/digital-clock: Word-wrap date string for desktop representation (kde#450632)
  * wrap completely the invariants timer in NDEBUG
  * ScreenPool as the source of truth of QScreen info
  * Always ensure there is an user selected (kde#450182)
  * Prevent panel going out of screen boundaries
  * applets/clipboard: Focus on text area when transition is done
  * applets/clipboard: Fix highlight after exiting edit mode
- Drop patches, now upstream:
  * 0001-startkde-Forward-stdout-stderr-of-started-processes.patch
- Restore compatibility with older kf5-filesystem</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1648555200">- Update to 5.24.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.4
- Changes since 5.24.3:
  * kcms/users: Adjust for padding in overlay sheet (kde#451031)
  * [Media Controller] Explicitly set slider "to" before setting "value"
  * [Notifications] Fix implicit size propagation in SelectableLabel
  * applets/kicker: Skip creating KService for non-desktop files or folders (kde#442970)
  * Fix sleep/suspend sometimes not working ... from ksmserver-logout-greeter, by making the DBus calls synchronous.
  * kicker/actionlist: Ensure we parse the args for the jumplist actions (kde#451418)
  * libtaskmanager: recompute active task when a task is removed
  * sddm/lockscreen: Fix weird behaviour
  * [Notifications] Limit notification heading line count</changelog>
  <changelog author="Fushan Wen &lt;qydwhotmail@gmail.com&gt;" date="1656590400">- Fix a potential crash when deleting a panel with a system tray applet
  (kde#453726)
  * 0001-applets-systemtray-disconnect-KConfigLoader-signal-w.patch
- Fix a potential crash on logout (kde#454159)
  * 0001-Avoid-crash-in-plasma-session-teardown.patch</changelog>
</package>
<package pkgid="1703ef513b751749faa5a7bbd87d2842ece16c1b23cbb66d871567633a63383c" name="plasma5-session-wayland" arch="aarch64">
  <version epoch="0" ver="5.24.4" rel="bp154.2.3.1"/>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1632312000">- Add patches from Plasma/5.23 branch:
  * 0001-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0002-shell-panel-Fix-ability-to-type-in-textfield.patch
  * 0003-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0004-PipeWire-Make-sure-thumbnails-properly-use-dmabuf-ag.patch
  * 0005-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0006-Klipper-Handle-incoming-UTF-8-mime-types.patch
  * 0007-Klipper-Guard-against-broken-data-fetches.patch
  * 0008-pipewire-Properly-compare-pipewire-versions-using-QV.patch
  * 0009-PipeWire-Include-defines-for-older-PipeWire-versions.patch
  * 0010-sddm-theme-fix-default-username-font-size.patch
- Add patch to fix XEmbed context menus (kde#442758)
  * 0011-Revert-xembed-adapt-to-changes-in-KNotifications.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1632484800">- Add patch to fix build with gpsd:
  * 0001-Fix-build-with-gpsd-3.23.1.patch
- Add patch to fix window thumbnails if dmabuf is not supported (kde#428284):
  * 0002-libtaskmanager-Don-t-request-dmabuf-if-not-supported.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1633608000">- Update to 5.23.0
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.0
- Changes since 5.22.90:
  * Revert "xembed: adapt to changes in KNotifications" (kde#442758)
  * sddm-theme: Fix using mouse movements to show the UI
  * [systemtray] Check for menuItemFactory.object existence (kde#443377)
  * applets/devicenotifier: Remove applet list item animations
  * sddm-theme: Fix use of needsPassword and related button layout
  * [klipper] Fix shortcut of OK button in the clipboard content edit dialog (kde#400623)
  * Fix Kickoff context menu actions for System Settings results (kde#442522)
  * klipper: Fix reading from plasma on wayland
  * Fix build with gpsd 3.23.1
  * Unbreak fontinst KCM (kde#442748)
  * Address regression in VT switching code (kde#442852)
  * libtaskmanager: Don't request dmabuf if not supported (kde#428284)
  * Port away from Kirigami.Units.devicePixelRatio
  * lookandfeel: don't nuke accent colour (kde#442812)
  * kcm/colors: Improve some bindings on accent colors
  * sddm-theme: fix default username font size
  * PipeWire: Include defines for older PipeWire versions
  * pipewire: Properly compare pipewire versions using QVersionNumber
  * [Klipper] Guard against broken data fetches
  * [Klipper] Handle incoming UTF-8 mime types (kde#424694)
  * PipeWire: Make sure thumbnails properly use dmabuf again
  * [shell/panel] Fix ability to type in textfield (kde#442557)
- Drop patches, now upstream:
  * 0001-Fix-build-with-gpsd-3.23.1.patch
  * 0001-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0002-libtaskmanager-Don-t-request-dmabuf-if-not-supported.patch
  * 0002-shell-panel-Fix-ability-to-type-in-textfield.patch
  * 0003-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0004-PipeWire-Make-sure-thumbnails-properly-use-dmabuf-ag.patch
  * 0005-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0006-Klipper-Handle-incoming-UTF-8-mime-types.patch
  * 0007-Klipper-Guard-against-broken-data-fetches.patch
  * 0008-pipewire-Properly-compare-pipewire-versions-using-QV.patch
  * 0009-PipeWire-Include-defines-for-older-PipeWire-versions.patch
  * 0010-sddm-theme-fix-default-username-font-size.patch
  * 0011-Revert-xembed-adapt-to-changes-in-KNotifications.patch
- Refresh 0001-Ignore-default-sddm-face-icons.patch
- Add new key + signature to plasma.keyring</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1634299200">- Add patch to show password input on the "Other" page in SDDM (kde#443737):
  * 0001-sddm-theme-fix-missing-password-field-on-Other-page.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1634644800">- Update to 5.23.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.1
- Changes since 5.23.0:
  * [freespacenotifier] impr: no notification for ro filesystems
  * kcms/colors: Don't apply header accent colors to non-Header color schemes (kde#443786)
  * [kcms/colors] Notify global settings change after saving
  * krdb: Fix removal of Xft.dpi from Xresources (kde#350039)
  * sddm-theme: fix missing password field on "Other" page (kde#443737)
  * pipewire: Report DRM_FORMAT_MOD_INVALID when no modifiers are offered
  * [digital-clock] Do not assign undefined when agenda is not visible (kde#443380)
- Drop patches, now upstream:
  * 0001-sddm-theme-fix-missing-password-field-on-Other-page.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1634817600">- Add back X11 root window properties until firefox is adjusted
  (boo#1191825):
  * 0001-Revert-Drop-setupX11-from-startplasma-waylandsession.patch
  * 0002-Revert-Drop-X11-root-properties-for-KDE-full-session.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1635249600">- Update to 5.23.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.2
- Changes since 5.23.1:
  * Hide KRunner window when pressing escape (kde#444240)
  * [applets/clipboard] Fix selecting clipboard entries with Enter
  * Set Qt.ImhNoPredictiveText for text fields that act as search fields
  * [shell] Ignore placeholder screens
- Add a version to BuildRequires: cmake(Breeze)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1636459200">- Update to 5.23.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.3
- Changes since 5.23.2:
  * fixed size hints to the osd
  * use implicit size to not cause binding loops (kde#422072)
  * wayland: don't create DesktopView for placeholder screen (kde#438839,kde#444801)
  * [startplasma] Detect systemd service in linked state
  * [Notifications] Fix grouping container side line
  * Disconnect watcher for xdgActivationTokenArrived (kde#444385)
  * interactiveconsole: Allow specifying mode from command line parameter</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1638273600">- Update to 5.23.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.4
- Changes since 5.23.3:
  * Lock &amp; login screens: Use RTL-friendly arrows when in RTL mode
  * [logout-greeter] Set window class name (kde#444898,kde#444899)
  * systemtray: Connect to StatusNotifierWatcher before initializing QDBusPendingReply
  * systemtray: Check if a service is already added before processing QDBusReply (kde#443961)
  * baloosearchruner: Emit DBus error when baloo is disabled (kde#445342)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1641297600">- Update to 5.23.5
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.5
- Changes since 5.23.4:
  * applets/systemtray: Follow panel opacity (kde#439025)
  * [webshortcutsrunner] Fix private browsing with some Firefoxes
  * [kcms/style] Don't call setNeedsSave when style config changes (kde#439297)
  * digital-clock: fix calendar popup contrast when opened from desktop (kde#446991)
  * [libnotificationmanager] Fix memory leak
  * [kcms/lookandfeel] Guard reading invalid first entry (kde#446100)
  * [Global Menu] Set translation domain
  * lookandfeel: Add missing check if list of files is empty (kde#439797)
  * [KSplash] Start with zero opacity
  * Fix Klipper Actions content truncation (kde#444365)
  * [klipper] Use full text for DBus return values (kde#446441)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1642075200">- Update to 5.23.90
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.90
- Too many changes to list here
- Rebase 0001-Use-qdbus-qt5.patch
- Replace xprop-kde-full-session.desktop with autostart file:
  * 0001-Revert-Drop-setupX11-from-startplasma-waylandsession.patch
  * 0002-Revert-Drop-X11-root-properties-for-KDE-full-session.patch
- Add patch to fix the upstream sddm theme background:
  * 0001-sddm-theme-Change-wallpaper-extension-so-that-it-poi.patch
- Add patch to fix screen sharing dialog (kde#448423):
  * 0001-systemdialogs-Remove-leftover-and-broken-components.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1642852800">- Add patch to fix initial focus in SDDM (kde#447817):
  * 0001-Make-SessionManagementScreen-a-FocusScope.patch
- Add patch to fix initial focus in the lockscreen:
  * 0001-Fix-initial-focus-in-LockScreenUi.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1644062400">- Update to 5.24.0
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.0
- Too many changes to list here
- Drop patches, now upstream:
  * 0001-sddm-theme-Change-wallpaper-extension-so-that-it-poi.patch
  * 0001-systemdialogs-Remove-leftover-and-broken-components.patch
  * 0001-Make-SessionManagementScreen-a-FocusScope.patch
  * 0001-Fix-initial-focus-in-LockScreenUi.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1644926400">- Update to 5.24.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.1
- Changes since 5.24.0:
  * Move to runtime check of valid font DPI (kde#449918)
  * applets/battery: adjust show/hide conditions for charge limits (kde#435931)
  * applets/systemtray: fix SNI context menu usage without libappindicator (kde#449870)
  * applets/notifications: Increase implicit size of standalone popup (kde#448383)
  * applets-digital/clock: Add workaround for QTBUG-83890 (kde#448387)
  * Clean up "empty" mimeType containg only whitespaces
  * dataengines/apps: Use KIO::ApplicationLauncherJob for starting KService
  * [containmentactions/applauncher] Use ApplicationLauncherJob instead of OpenUrlJob (kde#449900)
  * Desktop: Still show services with nodisplay=true set (kde#449243)
  * appstream runner: De-duplicate results from multiple sources (kde#448619)
  * Fix ksplash always using default theme. (kde#446966)
  * kcms/users: Fix missing template arguments before reply in FingerprintModel
  * De-duplicate 'Uninstall or manage addons' option in the context menu of Kickoff (kde#448564)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1645531200">- Update to 5.24.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.2
- Changes since 5.24.1:
  * applets/clipboard: Focus on the search field for the first time opening the applet
  * applets/clipboard: Make Up/Down arrow keys work in ClipboardPage (kde#448811,kde#450040)
  * applets/panelspacer: Fix optimal size calculation (kde#431668)
  * Fix overdraw on Wayland
  * PanelView: Do not crash when the state is transitioning (kde#373461)
  * Fix launch kscreen kcm in font kcm.
  * Don't install two copies of kcm_fontinst
  * Lock/login themes: stop adjusting shadows based on color scheme (kde#449985)
  * Top-align lock/login/logout screen action buttons (kde#450238)
  * [kcms/user] Set interactive auth flag for more calls (kde#450122)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1645704000">- Add patch to fix log output of some processes (boo#1196206):
  * 0001-startkde-Forward-stdout-stderr-of-started-processes.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1646654400">- Replace %_libdir/libexec with %_libexecdir (boo#1174075)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1646740800">- Update to 5.24.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.3
- Changes since 5.24.2:
  * kcms/colors: Implement radio button layouts better
  * kcms/colors: fix spacing between radio buttons and content
  * [Battery Monitor] Only show charge threshold hint for power supply batteries (kde#451161)
  * [Icons KCM] Give measure delegate a text
  * wallpapers: Sort BackgroundListModel by title
  * applets/digital-clock: Fix `Qt.formatDateTime` returns different date when minute changes (kde#436796)
  * applets/systray: align applet labels with differing line counts in hidden view (kde#438347)
  * Show panel config above other windows (kde#450794)
  * Use current accent colour to set ColorDialog object in colour picker
  * SystemDialog: Allow accepting the dialogs with the keyboard (kde#450223)
  * applets/systemtray: Do not open context menu on mouse pressed for SNI (kde#409768)
  * Revert "Fix overdraw on Wayland"
  * startkde: Forward stdout/stderr of started processes
  * SDDM theme: stop eliding people's names so aggressively (kde#450673)
  * applets/digital-clock: Word-wrap date string for desktop representation (kde#450632)
  * wrap completely the invariants timer in NDEBUG
  * ScreenPool as the source of truth of QScreen info
  * Always ensure there is an user selected (kde#450182)
  * Prevent panel going out of screen boundaries
  * applets/clipboard: Focus on text area when transition is done
  * applets/clipboard: Fix highlight after exiting edit mode
- Drop patches, now upstream:
  * 0001-startkde-Forward-stdout-stderr-of-started-processes.patch
- Restore compatibility with older kf5-filesystem</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1648555200">- Update to 5.24.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.4
- Changes since 5.24.3:
  * kcms/users: Adjust for padding in overlay sheet (kde#451031)
  * [Media Controller] Explicitly set slider "to" before setting "value"
  * [Notifications] Fix implicit size propagation in SelectableLabel
  * applets/kicker: Skip creating KService for non-desktop files or folders (kde#442970)
  * Fix sleep/suspend sometimes not working ... from ksmserver-logout-greeter, by making the DBus calls synchronous.
  * kicker/actionlist: Ensure we parse the args for the jumplist actions (kde#451418)
  * libtaskmanager: recompute active task when a task is removed
  * sddm/lockscreen: Fix weird behaviour
  * [Notifications] Limit notification heading line count</changelog>
  <changelog author="Fushan Wen &lt;qydwhotmail@gmail.com&gt;" date="1656590400">- Fix a potential crash when deleting a panel with a system tray applet
  (kde#453726)
  * 0001-applets-systemtray-disconnect-KConfigLoader-signal-w.patch
- Fix a potential crash on logout (kde#454159)
  * 0001-Avoid-crash-in-plasma-session-teardown.patch</changelog>
</package>
<package pkgid="138d05f3fc6be6c44c383c19fdc4e808731aaf30b1ac34f4f8553bd3545f8c7f" name="plasma5-session-wayland" arch="ppc64le">
  <version epoch="0" ver="5.24.4" rel="bp154.2.3.1"/>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1632312000">- Add patches from Plasma/5.23 branch:
  * 0001-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0002-shell-panel-Fix-ability-to-type-in-textfield.patch
  * 0003-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0004-PipeWire-Make-sure-thumbnails-properly-use-dmabuf-ag.patch
  * 0005-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0006-Klipper-Handle-incoming-UTF-8-mime-types.patch
  * 0007-Klipper-Guard-against-broken-data-fetches.patch
  * 0008-pipewire-Properly-compare-pipewire-versions-using-QV.patch
  * 0009-PipeWire-Include-defines-for-older-PipeWire-versions.patch
  * 0010-sddm-theme-fix-default-username-font-size.patch
- Add patch to fix XEmbed context menus (kde#442758)
  * 0011-Revert-xembed-adapt-to-changes-in-KNotifications.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1632484800">- Add patch to fix build with gpsd:
  * 0001-Fix-build-with-gpsd-3.23.1.patch
- Add patch to fix window thumbnails if dmabuf is not supported (kde#428284):
  * 0002-libtaskmanager-Don-t-request-dmabuf-if-not-supported.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1633608000">- Update to 5.23.0
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.0
- Changes since 5.22.90:
  * Revert "xembed: adapt to changes in KNotifications" (kde#442758)
  * sddm-theme: Fix using mouse movements to show the UI
  * [systemtray] Check for menuItemFactory.object existence (kde#443377)
  * applets/devicenotifier: Remove applet list item animations
  * sddm-theme: Fix use of needsPassword and related button layout
  * [klipper] Fix shortcut of OK button in the clipboard content edit dialog (kde#400623)
  * Fix Kickoff context menu actions for System Settings results (kde#442522)
  * klipper: Fix reading from plasma on wayland
  * Fix build with gpsd 3.23.1
  * Unbreak fontinst KCM (kde#442748)
  * Address regression in VT switching code (kde#442852)
  * libtaskmanager: Don't request dmabuf if not supported (kde#428284)
  * Port away from Kirigami.Units.devicePixelRatio
  * lookandfeel: don't nuke accent colour (kde#442812)
  * kcm/colors: Improve some bindings on accent colors
  * sddm-theme: fix default username font size
  * PipeWire: Include defines for older PipeWire versions
  * pipewire: Properly compare pipewire versions using QVersionNumber
  * [Klipper] Guard against broken data fetches
  * [Klipper] Handle incoming UTF-8 mime types (kde#424694)
  * PipeWire: Make sure thumbnails properly use dmabuf again
  * [shell/panel] Fix ability to type in textfield (kde#442557)
- Drop patches, now upstream:
  * 0001-Fix-build-with-gpsd-3.23.1.patch
  * 0001-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0002-libtaskmanager-Don-t-request-dmabuf-if-not-supported.patch
  * 0002-shell-panel-Fix-ability-to-type-in-textfield.patch
  * 0003-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0004-PipeWire-Make-sure-thumbnails-properly-use-dmabuf-ag.patch
  * 0005-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0006-Klipper-Handle-incoming-UTF-8-mime-types.patch
  * 0007-Klipper-Guard-against-broken-data-fetches.patch
  * 0008-pipewire-Properly-compare-pipewire-versions-using-QV.patch
  * 0009-PipeWire-Include-defines-for-older-PipeWire-versions.patch
  * 0010-sddm-theme-fix-default-username-font-size.patch
  * 0011-Revert-xembed-adapt-to-changes-in-KNotifications.patch
- Refresh 0001-Ignore-default-sddm-face-icons.patch
- Add new key + signature to plasma.keyring</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1634299200">- Add patch to show password input on the "Other" page in SDDM (kde#443737):
  * 0001-sddm-theme-fix-missing-password-field-on-Other-page.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1634644800">- Update to 5.23.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.1
- Changes since 5.23.0:
  * [freespacenotifier] impr: no notification for ro filesystems
  * kcms/colors: Don't apply header accent colors to non-Header color schemes (kde#443786)
  * [kcms/colors] Notify global settings change after saving
  * krdb: Fix removal of Xft.dpi from Xresources (kde#350039)
  * sddm-theme: fix missing password field on "Other" page (kde#443737)
  * pipewire: Report DRM_FORMAT_MOD_INVALID when no modifiers are offered
  * [digital-clock] Do not assign undefined when agenda is not visible (kde#443380)
- Drop patches, now upstream:
  * 0001-sddm-theme-fix-missing-password-field-on-Other-page.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1634817600">- Add back X11 root window properties until firefox is adjusted
  (boo#1191825):
  * 0001-Revert-Drop-setupX11-from-startplasma-waylandsession.patch
  * 0002-Revert-Drop-X11-root-properties-for-KDE-full-session.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1635249600">- Update to 5.23.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.2
- Changes since 5.23.1:
  * Hide KRunner window when pressing escape (kde#444240)
  * [applets/clipboard] Fix selecting clipboard entries with Enter
  * Set Qt.ImhNoPredictiveText for text fields that act as search fields
  * [shell] Ignore placeholder screens
- Add a version to BuildRequires: cmake(Breeze)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1636459200">- Update to 5.23.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.3
- Changes since 5.23.2:
  * fixed size hints to the osd
  * use implicit size to not cause binding loops (kde#422072)
  * wayland: don't create DesktopView for placeholder screen (kde#438839,kde#444801)
  * [startplasma] Detect systemd service in linked state
  * [Notifications] Fix grouping container side line
  * Disconnect watcher for xdgActivationTokenArrived (kde#444385)
  * interactiveconsole: Allow specifying mode from command line parameter</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1638273600">- Update to 5.23.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.4
- Changes since 5.23.3:
  * Lock &amp; login screens: Use RTL-friendly arrows when in RTL mode
  * [logout-greeter] Set window class name (kde#444898,kde#444899)
  * systemtray: Connect to StatusNotifierWatcher before initializing QDBusPendingReply
  * systemtray: Check if a service is already added before processing QDBusReply (kde#443961)
  * baloosearchruner: Emit DBus error when baloo is disabled (kde#445342)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1641297600">- Update to 5.23.5
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.5
- Changes since 5.23.4:
  * applets/systemtray: Follow panel opacity (kde#439025)
  * [webshortcutsrunner] Fix private browsing with some Firefoxes
  * [kcms/style] Don't call setNeedsSave when style config changes (kde#439297)
  * digital-clock: fix calendar popup contrast when opened from desktop (kde#446991)
  * [libnotificationmanager] Fix memory leak
  * [kcms/lookandfeel] Guard reading invalid first entry (kde#446100)
  * [Global Menu] Set translation domain
  * lookandfeel: Add missing check if list of files is empty (kde#439797)
  * [KSplash] Start with zero opacity
  * Fix Klipper Actions content truncation (kde#444365)
  * [klipper] Use full text for DBus return values (kde#446441)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1642075200">- Update to 5.23.90
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.90
- Too many changes to list here
- Rebase 0001-Use-qdbus-qt5.patch
- Replace xprop-kde-full-session.desktop with autostart file:
  * 0001-Revert-Drop-setupX11-from-startplasma-waylandsession.patch
  * 0002-Revert-Drop-X11-root-properties-for-KDE-full-session.patch
- Add patch to fix the upstream sddm theme background:
  * 0001-sddm-theme-Change-wallpaper-extension-so-that-it-poi.patch
- Add patch to fix screen sharing dialog (kde#448423):
  * 0001-systemdialogs-Remove-leftover-and-broken-components.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1642852800">- Add patch to fix initial focus in SDDM (kde#447817):
  * 0001-Make-SessionManagementScreen-a-FocusScope.patch
- Add patch to fix initial focus in the lockscreen:
  * 0001-Fix-initial-focus-in-LockScreenUi.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1644062400">- Update to 5.24.0
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.0
- Too many changes to list here
- Drop patches, now upstream:
  * 0001-sddm-theme-Change-wallpaper-extension-so-that-it-poi.patch
  * 0001-systemdialogs-Remove-leftover-and-broken-components.patch
  * 0001-Make-SessionManagementScreen-a-FocusScope.patch
  * 0001-Fix-initial-focus-in-LockScreenUi.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1644926400">- Update to 5.24.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.1
- Changes since 5.24.0:
  * Move to runtime check of valid font DPI (kde#449918)
  * applets/battery: adjust show/hide conditions for charge limits (kde#435931)
  * applets/systemtray: fix SNI context menu usage without libappindicator (kde#449870)
  * applets/notifications: Increase implicit size of standalone popup (kde#448383)
  * applets-digital/clock: Add workaround for QTBUG-83890 (kde#448387)
  * Clean up "empty" mimeType containg only whitespaces
  * dataengines/apps: Use KIO::ApplicationLauncherJob for starting KService
  * [containmentactions/applauncher] Use ApplicationLauncherJob instead of OpenUrlJob (kde#449900)
  * Desktop: Still show services with nodisplay=true set (kde#449243)
  * appstream runner: De-duplicate results from multiple sources (kde#448619)
  * Fix ksplash always using default theme. (kde#446966)
  * kcms/users: Fix missing template arguments before reply in FingerprintModel
  * De-duplicate 'Uninstall or manage addons' option in the context menu of Kickoff (kde#448564)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1645531200">- Update to 5.24.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.2
- Changes since 5.24.1:
  * applets/clipboard: Focus on the search field for the first time opening the applet
  * applets/clipboard: Make Up/Down arrow keys work in ClipboardPage (kde#448811,kde#450040)
  * applets/panelspacer: Fix optimal size calculation (kde#431668)
  * Fix overdraw on Wayland
  * PanelView: Do not crash when the state is transitioning (kde#373461)
  * Fix launch kscreen kcm in font kcm.
  * Don't install two copies of kcm_fontinst
  * Lock/login themes: stop adjusting shadows based on color scheme (kde#449985)
  * Top-align lock/login/logout screen action buttons (kde#450238)
  * [kcms/user] Set interactive auth flag for more calls (kde#450122)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1645704000">- Add patch to fix log output of some processes (boo#1196206):
  * 0001-startkde-Forward-stdout-stderr-of-started-processes.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1646654400">- Replace %_libdir/libexec with %_libexecdir (boo#1174075)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1646740800">- Update to 5.24.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.3
- Changes since 5.24.2:
  * kcms/colors: Implement radio button layouts better
  * kcms/colors: fix spacing between radio buttons and content
  * [Battery Monitor] Only show charge threshold hint for power supply batteries (kde#451161)
  * [Icons KCM] Give measure delegate a text
  * wallpapers: Sort BackgroundListModel by title
  * applets/digital-clock: Fix `Qt.formatDateTime` returns different date when minute changes (kde#436796)
  * applets/systray: align applet labels with differing line counts in hidden view (kde#438347)
  * Show panel config above other windows (kde#450794)
  * Use current accent colour to set ColorDialog object in colour picker
  * SystemDialog: Allow accepting the dialogs with the keyboard (kde#450223)
  * applets/systemtray: Do not open context menu on mouse pressed for SNI (kde#409768)
  * Revert "Fix overdraw on Wayland"
  * startkde: Forward stdout/stderr of started processes
  * SDDM theme: stop eliding people's names so aggressively (kde#450673)
  * applets/digital-clock: Word-wrap date string for desktop representation (kde#450632)
  * wrap completely the invariants timer in NDEBUG
  * ScreenPool as the source of truth of QScreen info
  * Always ensure there is an user selected (kde#450182)
  * Prevent panel going out of screen boundaries
  * applets/clipboard: Focus on text area when transition is done
  * applets/clipboard: Fix highlight after exiting edit mode
- Drop patches, now upstream:
  * 0001-startkde-Forward-stdout-stderr-of-started-processes.patch
- Restore compatibility with older kf5-filesystem</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1648555200">- Update to 5.24.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.4
- Changes since 5.24.3:
  * kcms/users: Adjust for padding in overlay sheet (kde#451031)
  * [Media Controller] Explicitly set slider "to" before setting "value"
  * [Notifications] Fix implicit size propagation in SelectableLabel
  * applets/kicker: Skip creating KService for non-desktop files or folders (kde#442970)
  * Fix sleep/suspend sometimes not working ... from ksmserver-logout-greeter, by making the DBus calls synchronous.
  * kicker/actionlist: Ensure we parse the args for the jumplist actions (kde#451418)
  * libtaskmanager: recompute active task when a task is removed
  * sddm/lockscreen: Fix weird behaviour
  * [Notifications] Limit notification heading line count</changelog>
  <changelog author="Fushan Wen &lt;qydwhotmail@gmail.com&gt;" date="1656590400">- Fix a potential crash when deleting a panel with a system tray applet
  (kde#453726)
  * 0001-applets-systemtray-disconnect-KConfigLoader-signal-w.patch
- Fix a potential crash on logout (kde#454159)
  * 0001-Avoid-crash-in-plasma-session-teardown.patch</changelog>
</package>
<package pkgid="e6a303ff13c5ed2373000cb4a3554aa5a3ee142fb0f66f417c12e551151fadec" name="plasma5-session-wayland" arch="x86_64">
  <version epoch="0" ver="5.24.4" rel="bp154.2.3.1"/>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1632312000">- Add patches from Plasma/5.23 branch:
  * 0001-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0002-shell-panel-Fix-ability-to-type-in-textfield.patch
  * 0003-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0004-PipeWire-Make-sure-thumbnails-properly-use-dmabuf-ag.patch
  * 0005-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0006-Klipper-Handle-incoming-UTF-8-mime-types.patch
  * 0007-Klipper-Guard-against-broken-data-fetches.patch
  * 0008-pipewire-Properly-compare-pipewire-versions-using-QV.patch
  * 0009-PipeWire-Include-defines-for-older-PipeWire-versions.patch
  * 0010-sddm-theme-fix-default-username-font-size.patch
- Add patch to fix XEmbed context menus (kde#442758)
  * 0011-Revert-xembed-adapt-to-changes-in-KNotifications.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1632484800">- Add patch to fix build with gpsd:
  * 0001-Fix-build-with-gpsd-3.23.1.patch
- Add patch to fix window thumbnails if dmabuf is not supported (kde#428284):
  * 0002-libtaskmanager-Don-t-request-dmabuf-if-not-supported.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1633608000">- Update to 5.23.0
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.0
- Changes since 5.22.90:
  * Revert "xembed: adapt to changes in KNotifications" (kde#442758)
  * sddm-theme: Fix using mouse movements to show the UI
  * [systemtray] Check for menuItemFactory.object existence (kde#443377)
  * applets/devicenotifier: Remove applet list item animations
  * sddm-theme: Fix use of needsPassword and related button layout
  * [klipper] Fix shortcut of OK button in the clipboard content edit dialog (kde#400623)
  * Fix Kickoff context menu actions for System Settings results (kde#442522)
  * klipper: Fix reading from plasma on wayland
  * Fix build with gpsd 3.23.1
  * Unbreak fontinst KCM (kde#442748)
  * Address regression in VT switching code (kde#442852)
  * libtaskmanager: Don't request dmabuf if not supported (kde#428284)
  * Port away from Kirigami.Units.devicePixelRatio
  * lookandfeel: don't nuke accent colour (kde#442812)
  * kcm/colors: Improve some bindings on accent colors
  * sddm-theme: fix default username font size
  * PipeWire: Include defines for older PipeWire versions
  * pipewire: Properly compare pipewire versions using QVersionNumber
  * [Klipper] Guard against broken data fetches
  * [Klipper] Handle incoming UTF-8 mime types (kde#424694)
  * PipeWire: Make sure thumbnails properly use dmabuf again
  * [shell/panel] Fix ability to type in textfield (kde#442557)
- Drop patches, now upstream:
  * 0001-Fix-build-with-gpsd-3.23.1.patch
  * 0001-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0002-libtaskmanager-Don-t-request-dmabuf-if-not-supported.patch
  * 0002-shell-panel-Fix-ability-to-type-in-textfield.patch
  * 0003-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0004-PipeWire-Make-sure-thumbnails-properly-use-dmabuf-ag.patch
  * 0005-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0006-Klipper-Handle-incoming-UTF-8-mime-types.patch
  * 0007-Klipper-Guard-against-broken-data-fetches.patch
  * 0008-pipewire-Properly-compare-pipewire-versions-using-QV.patch
  * 0009-PipeWire-Include-defines-for-older-PipeWire-versions.patch
  * 0010-sddm-theme-fix-default-username-font-size.patch
  * 0011-Revert-xembed-adapt-to-changes-in-KNotifications.patch
- Refresh 0001-Ignore-default-sddm-face-icons.patch
- Add new key + signature to plasma.keyring</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1634299200">- Add patch to show password input on the "Other" page in SDDM (kde#443737):
  * 0001-sddm-theme-fix-missing-password-field-on-Other-page.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1634644800">- Update to 5.23.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.1
- Changes since 5.23.0:
  * [freespacenotifier] impr: no notification for ro filesystems
  * kcms/colors: Don't apply header accent colors to non-Header color schemes (kde#443786)
  * [kcms/colors] Notify global settings change after saving
  * krdb: Fix removal of Xft.dpi from Xresources (kde#350039)
  * sddm-theme: fix missing password field on "Other" page (kde#443737)
  * pipewire: Report DRM_FORMAT_MOD_INVALID when no modifiers are offered
  * [digital-clock] Do not assign undefined when agenda is not visible (kde#443380)
- Drop patches, now upstream:
  * 0001-sddm-theme-fix-missing-password-field-on-Other-page.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1634817600">- Add back X11 root window properties until firefox is adjusted
  (boo#1191825):
  * 0001-Revert-Drop-setupX11-from-startplasma-waylandsession.patch
  * 0002-Revert-Drop-X11-root-properties-for-KDE-full-session.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1635249600">- Update to 5.23.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.2
- Changes since 5.23.1:
  * Hide KRunner window when pressing escape (kde#444240)
  * [applets/clipboard] Fix selecting clipboard entries with Enter
  * Set Qt.ImhNoPredictiveText for text fields that act as search fields
  * [shell] Ignore placeholder screens
- Add a version to BuildRequires: cmake(Breeze)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1636459200">- Update to 5.23.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.3
- Changes since 5.23.2:
  * fixed size hints to the osd
  * use implicit size to not cause binding loops (kde#422072)
  * wayland: don't create DesktopView for placeholder screen (kde#438839,kde#444801)
  * [startplasma] Detect systemd service in linked state
  * [Notifications] Fix grouping container side line
  * Disconnect watcher for xdgActivationTokenArrived (kde#444385)
  * interactiveconsole: Allow specifying mode from command line parameter</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1638273600">- Update to 5.23.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.4
- Changes since 5.23.3:
  * Lock &amp; login screens: Use RTL-friendly arrows when in RTL mode
  * [logout-greeter] Set window class name (kde#444898,kde#444899)
  * systemtray: Connect to StatusNotifierWatcher before initializing QDBusPendingReply
  * systemtray: Check if a service is already added before processing QDBusReply (kde#443961)
  * baloosearchruner: Emit DBus error when baloo is disabled (kde#445342)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1641297600">- Update to 5.23.5
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.5
- Changes since 5.23.4:
  * applets/systemtray: Follow panel opacity (kde#439025)
  * [webshortcutsrunner] Fix private browsing with some Firefoxes
  * [kcms/style] Don't call setNeedsSave when style config changes (kde#439297)
  * digital-clock: fix calendar popup contrast when opened from desktop (kde#446991)
  * [libnotificationmanager] Fix memory leak
  * [kcms/lookandfeel] Guard reading invalid first entry (kde#446100)
  * [Global Menu] Set translation domain
  * lookandfeel: Add missing check if list of files is empty (kde#439797)
  * [KSplash] Start with zero opacity
  * Fix Klipper Actions content truncation (kde#444365)
  * [klipper] Use full text for DBus return values (kde#446441)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1642075200">- Update to 5.23.90
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.90
- Too many changes to list here
- Rebase 0001-Use-qdbus-qt5.patch
- Replace xprop-kde-full-session.desktop with autostart file:
  * 0001-Revert-Drop-setupX11-from-startplasma-waylandsession.patch
  * 0002-Revert-Drop-X11-root-properties-for-KDE-full-session.patch
- Add patch to fix the upstream sddm theme background:
  * 0001-sddm-theme-Change-wallpaper-extension-so-that-it-poi.patch
- Add patch to fix screen sharing dialog (kde#448423):
  * 0001-systemdialogs-Remove-leftover-and-broken-components.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1642852800">- Add patch to fix initial focus in SDDM (kde#447817):
  * 0001-Make-SessionManagementScreen-a-FocusScope.patch
- Add patch to fix initial focus in the lockscreen:
  * 0001-Fix-initial-focus-in-LockScreenUi.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1644062400">- Update to 5.24.0
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.0
- Too many changes to list here
- Drop patches, now upstream:
  * 0001-sddm-theme-Change-wallpaper-extension-so-that-it-poi.patch
  * 0001-systemdialogs-Remove-leftover-and-broken-components.patch
  * 0001-Make-SessionManagementScreen-a-FocusScope.patch
  * 0001-Fix-initial-focus-in-LockScreenUi.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1644926400">- Update to 5.24.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.1
- Changes since 5.24.0:
  * Move to runtime check of valid font DPI (kde#449918)
  * applets/battery: adjust show/hide conditions for charge limits (kde#435931)
  * applets/systemtray: fix SNI context menu usage without libappindicator (kde#449870)
  * applets/notifications: Increase implicit size of standalone popup (kde#448383)
  * applets-digital/clock: Add workaround for QTBUG-83890 (kde#448387)
  * Clean up "empty" mimeType containg only whitespaces
  * dataengines/apps: Use KIO::ApplicationLauncherJob for starting KService
  * [containmentactions/applauncher] Use ApplicationLauncherJob instead of OpenUrlJob (kde#449900)
  * Desktop: Still show services with nodisplay=true set (kde#449243)
  * appstream runner: De-duplicate results from multiple sources (kde#448619)
  * Fix ksplash always using default theme. (kde#446966)
  * kcms/users: Fix missing template arguments before reply in FingerprintModel
  * De-duplicate 'Uninstall or manage addons' option in the context menu of Kickoff (kde#448564)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1645531200">- Update to 5.24.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.2
- Changes since 5.24.1:
  * applets/clipboard: Focus on the search field for the first time opening the applet
  * applets/clipboard: Make Up/Down arrow keys work in ClipboardPage (kde#448811,kde#450040)
  * applets/panelspacer: Fix optimal size calculation (kde#431668)
  * Fix overdraw on Wayland
  * PanelView: Do not crash when the state is transitioning (kde#373461)
  * Fix launch kscreen kcm in font kcm.
  * Don't install two copies of kcm_fontinst
  * Lock/login themes: stop adjusting shadows based on color scheme (kde#449985)
  * Top-align lock/login/logout screen action buttons (kde#450238)
  * [kcms/user] Set interactive auth flag for more calls (kde#450122)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1645704000">- Add patch to fix log output of some processes (boo#1196206):
  * 0001-startkde-Forward-stdout-stderr-of-started-processes.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1646654400">- Replace %_libdir/libexec with %_libexecdir (boo#1174075)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1646740800">- Update to 5.24.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.3
- Changes since 5.24.2:
  * kcms/colors: Implement radio button layouts better
  * kcms/colors: fix spacing between radio buttons and content
  * [Battery Monitor] Only show charge threshold hint for power supply batteries (kde#451161)
  * [Icons KCM] Give measure delegate a text
  * wallpapers: Sort BackgroundListModel by title
  * applets/digital-clock: Fix `Qt.formatDateTime` returns different date when minute changes (kde#436796)
  * applets/systray: align applet labels with differing line counts in hidden view (kde#438347)
  * Show panel config above other windows (kde#450794)
  * Use current accent colour to set ColorDialog object in colour picker
  * SystemDialog: Allow accepting the dialogs with the keyboard (kde#450223)
  * applets/systemtray: Do not open context menu on mouse pressed for SNI (kde#409768)
  * Revert "Fix overdraw on Wayland"
  * startkde: Forward stdout/stderr of started processes
  * SDDM theme: stop eliding people's names so aggressively (kde#450673)
  * applets/digital-clock: Word-wrap date string for desktop representation (kde#450632)
  * wrap completely the invariants timer in NDEBUG
  * ScreenPool as the source of truth of QScreen info
  * Always ensure there is an user selected (kde#450182)
  * Prevent panel going out of screen boundaries
  * applets/clipboard: Focus on text area when transition is done
  * applets/clipboard: Fix highlight after exiting edit mode
- Drop patches, now upstream:
  * 0001-startkde-Forward-stdout-stderr-of-started-processes.patch
- Restore compatibility with older kf5-filesystem</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1648555200">- Update to 5.24.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.4
- Changes since 5.24.3:
  * kcms/users: Adjust for padding in overlay sheet (kde#451031)
  * [Media Controller] Explicitly set slider "to" before setting "value"
  * [Notifications] Fix implicit size propagation in SelectableLabel
  * applets/kicker: Skip creating KService for non-desktop files or folders (kde#442970)
  * Fix sleep/suspend sometimes not working ... from ksmserver-logout-greeter, by making the DBus calls synchronous.
  * kicker/actionlist: Ensure we parse the args for the jumplist actions (kde#451418)
  * libtaskmanager: recompute active task when a task is removed
  * sddm/lockscreen: Fix weird behaviour
  * [Notifications] Limit notification heading line count</changelog>
  <changelog author="Fushan Wen &lt;qydwhotmail@gmail.com&gt;" date="1656590400">- Fix a potential crash when deleting a panel with a system tray applet
  (kde#453726)
  * 0001-applets-systemtray-disconnect-KConfigLoader-signal-w.patch
- Fix a potential crash on logout (kde#454159)
  * 0001-Avoid-crash-in-plasma-session-teardown.patch</changelog>
</package>
<package pkgid="16da459ac3339c2ba0ccfc7c7a59bf19418e22dedca5a844ca580916acecef01" name="plasma5-workspace" arch="aarch64">
  <version epoch="0" ver="5.24.4" rel="bp154.2.3.1"/>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1632312000">- Add patches from Plasma/5.23 branch:
  * 0001-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0002-shell-panel-Fix-ability-to-type-in-textfield.patch
  * 0003-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0004-PipeWire-Make-sure-thumbnails-properly-use-dmabuf-ag.patch
  * 0005-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0006-Klipper-Handle-incoming-UTF-8-mime-types.patch
  * 0007-Klipper-Guard-against-broken-data-fetches.patch
  * 0008-pipewire-Properly-compare-pipewire-versions-using-QV.patch
  * 0009-PipeWire-Include-defines-for-older-PipeWire-versions.patch
  * 0010-sddm-theme-fix-default-username-font-size.patch
- Add patch to fix XEmbed context menus (kde#442758)
  * 0011-Revert-xembed-adapt-to-changes-in-KNotifications.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1632484800">- Add patch to fix build with gpsd:
  * 0001-Fix-build-with-gpsd-3.23.1.patch
- Add patch to fix window thumbnails if dmabuf is not supported (kde#428284):
  * 0002-libtaskmanager-Don-t-request-dmabuf-if-not-supported.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1633608000">- Update to 5.23.0
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.0
- Changes since 5.22.90:
  * Revert "xembed: adapt to changes in KNotifications" (kde#442758)
  * sddm-theme: Fix using mouse movements to show the UI
  * [systemtray] Check for menuItemFactory.object existence (kde#443377)
  * applets/devicenotifier: Remove applet list item animations
  * sddm-theme: Fix use of needsPassword and related button layout
  * [klipper] Fix shortcut of OK button in the clipboard content edit dialog (kde#400623)
  * Fix Kickoff context menu actions for System Settings results (kde#442522)
  * klipper: Fix reading from plasma on wayland
  * Fix build with gpsd 3.23.1
  * Unbreak fontinst KCM (kde#442748)
  * Address regression in VT switching code (kde#442852)
  * libtaskmanager: Don't request dmabuf if not supported (kde#428284)
  * Port away from Kirigami.Units.devicePixelRatio
  * lookandfeel: don't nuke accent colour (kde#442812)
  * kcm/colors: Improve some bindings on accent colors
  * sddm-theme: fix default username font size
  * PipeWire: Include defines for older PipeWire versions
  * pipewire: Properly compare pipewire versions using QVersionNumber
  * [Klipper] Guard against broken data fetches
  * [Klipper] Handle incoming UTF-8 mime types (kde#424694)
  * PipeWire: Make sure thumbnails properly use dmabuf again
  * [shell/panel] Fix ability to type in textfield (kde#442557)
- Drop patches, now upstream:
  * 0001-Fix-build-with-gpsd-3.23.1.patch
  * 0001-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0002-libtaskmanager-Don-t-request-dmabuf-if-not-supported.patch
  * 0002-shell-panel-Fix-ability-to-type-in-textfield.patch
  * 0003-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0004-PipeWire-Make-sure-thumbnails-properly-use-dmabuf-ag.patch
  * 0005-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0006-Klipper-Handle-incoming-UTF-8-mime-types.patch
  * 0007-Klipper-Guard-against-broken-data-fetches.patch
  * 0008-pipewire-Properly-compare-pipewire-versions-using-QV.patch
  * 0009-PipeWire-Include-defines-for-older-PipeWire-versions.patch
  * 0010-sddm-theme-fix-default-username-font-size.patch
  * 0011-Revert-xembed-adapt-to-changes-in-KNotifications.patch
- Refresh 0001-Ignore-default-sddm-face-icons.patch
- Add new key + signature to plasma.keyring</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1634299200">- Add patch to show password input on the "Other" page in SDDM (kde#443737):
  * 0001-sddm-theme-fix-missing-password-field-on-Other-page.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1634644800">- Update to 5.23.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.1
- Changes since 5.23.0:
  * [freespacenotifier] impr: no notification for ro filesystems
  * kcms/colors: Don't apply header accent colors to non-Header color schemes (kde#443786)
  * [kcms/colors] Notify global settings change after saving
  * krdb: Fix removal of Xft.dpi from Xresources (kde#350039)
  * sddm-theme: fix missing password field on "Other" page (kde#443737)
  * pipewire: Report DRM_FORMAT_MOD_INVALID when no modifiers are offered
  * [digital-clock] Do not assign undefined when agenda is not visible (kde#443380)
- Drop patches, now upstream:
  * 0001-sddm-theme-fix-missing-password-field-on-Other-page.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1634817600">- Add back X11 root window properties until firefox is adjusted
  (boo#1191825):
  * 0001-Revert-Drop-setupX11-from-startplasma-waylandsession.patch
  * 0002-Revert-Drop-X11-root-properties-for-KDE-full-session.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1635249600">- Update to 5.23.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.2
- Changes since 5.23.1:
  * Hide KRunner window when pressing escape (kde#444240)
  * [applets/clipboard] Fix selecting clipboard entries with Enter
  * Set Qt.ImhNoPredictiveText for text fields that act as search fields
  * [shell] Ignore placeholder screens
- Add a version to BuildRequires: cmake(Breeze)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1636459200">- Update to 5.23.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.3
- Changes since 5.23.2:
  * fixed size hints to the osd
  * use implicit size to not cause binding loops (kde#422072)
  * wayland: don't create DesktopView for placeholder screen (kde#438839,kde#444801)
  * [startplasma] Detect systemd service in linked state
  * [Notifications] Fix grouping container side line
  * Disconnect watcher for xdgActivationTokenArrived (kde#444385)
  * interactiveconsole: Allow specifying mode from command line parameter</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1638273600">- Update to 5.23.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.4
- Changes since 5.23.3:
  * Lock &amp; login screens: Use RTL-friendly arrows when in RTL mode
  * [logout-greeter] Set window class name (kde#444898,kde#444899)
  * systemtray: Connect to StatusNotifierWatcher before initializing QDBusPendingReply
  * systemtray: Check if a service is already added before processing QDBusReply (kde#443961)
  * baloosearchruner: Emit DBus error when baloo is disabled (kde#445342)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1641297600">- Update to 5.23.5
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.5
- Changes since 5.23.4:
  * applets/systemtray: Follow panel opacity (kde#439025)
  * [webshortcutsrunner] Fix private browsing with some Firefoxes
  * [kcms/style] Don't call setNeedsSave when style config changes (kde#439297)
  * digital-clock: fix calendar popup contrast when opened from desktop (kde#446991)
  * [libnotificationmanager] Fix memory leak
  * [kcms/lookandfeel] Guard reading invalid first entry (kde#446100)
  * [Global Menu] Set translation domain
  * lookandfeel: Add missing check if list of files is empty (kde#439797)
  * [KSplash] Start with zero opacity
  * Fix Klipper Actions content truncation (kde#444365)
  * [klipper] Use full text for DBus return values (kde#446441)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1642075200">- Update to 5.23.90
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.90
- Too many changes to list here
- Rebase 0001-Use-qdbus-qt5.patch
- Replace xprop-kde-full-session.desktop with autostart file:
  * 0001-Revert-Drop-setupX11-from-startplasma-waylandsession.patch
  * 0002-Revert-Drop-X11-root-properties-for-KDE-full-session.patch
- Add patch to fix the upstream sddm theme background:
  * 0001-sddm-theme-Change-wallpaper-extension-so-that-it-poi.patch
- Add patch to fix screen sharing dialog (kde#448423):
  * 0001-systemdialogs-Remove-leftover-and-broken-components.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1642852800">- Add patch to fix initial focus in SDDM (kde#447817):
  * 0001-Make-SessionManagementScreen-a-FocusScope.patch
- Add patch to fix initial focus in the lockscreen:
  * 0001-Fix-initial-focus-in-LockScreenUi.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1644062400">- Update to 5.24.0
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.0
- Too many changes to list here
- Drop patches, now upstream:
  * 0001-sddm-theme-Change-wallpaper-extension-so-that-it-poi.patch
  * 0001-systemdialogs-Remove-leftover-and-broken-components.patch
  * 0001-Make-SessionManagementScreen-a-FocusScope.patch
  * 0001-Fix-initial-focus-in-LockScreenUi.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1644926400">- Update to 5.24.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.1
- Changes since 5.24.0:
  * Move to runtime check of valid font DPI (kde#449918)
  * applets/battery: adjust show/hide conditions for charge limits (kde#435931)
  * applets/systemtray: fix SNI context menu usage without libappindicator (kde#449870)
  * applets/notifications: Increase implicit size of standalone popup (kde#448383)
  * applets-digital/clock: Add workaround for QTBUG-83890 (kde#448387)
  * Clean up "empty" mimeType containg only whitespaces
  * dataengines/apps: Use KIO::ApplicationLauncherJob for starting KService
  * [containmentactions/applauncher] Use ApplicationLauncherJob instead of OpenUrlJob (kde#449900)
  * Desktop: Still show services with nodisplay=true set (kde#449243)
  * appstream runner: De-duplicate results from multiple sources (kde#448619)
  * Fix ksplash always using default theme. (kde#446966)
  * kcms/users: Fix missing template arguments before reply in FingerprintModel
  * De-duplicate 'Uninstall or manage addons' option in the context menu of Kickoff (kde#448564)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1645531200">- Update to 5.24.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.2
- Changes since 5.24.1:
  * applets/clipboard: Focus on the search field for the first time opening the applet
  * applets/clipboard: Make Up/Down arrow keys work in ClipboardPage (kde#448811,kde#450040)
  * applets/panelspacer: Fix optimal size calculation (kde#431668)
  * Fix overdraw on Wayland
  * PanelView: Do not crash when the state is transitioning (kde#373461)
  * Fix launch kscreen kcm in font kcm.
  * Don't install two copies of kcm_fontinst
  * Lock/login themes: stop adjusting shadows based on color scheme (kde#449985)
  * Top-align lock/login/logout screen action buttons (kde#450238)
  * [kcms/user] Set interactive auth flag for more calls (kde#450122)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1645704000">- Add patch to fix log output of some processes (boo#1196206):
  * 0001-startkde-Forward-stdout-stderr-of-started-processes.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1646654400">- Replace %_libdir/libexec with %_libexecdir (boo#1174075)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1646740800">- Update to 5.24.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.3
- Changes since 5.24.2:
  * kcms/colors: Implement radio button layouts better
  * kcms/colors: fix spacing between radio buttons and content
  * [Battery Monitor] Only show charge threshold hint for power supply batteries (kde#451161)
  * [Icons KCM] Give measure delegate a text
  * wallpapers: Sort BackgroundListModel by title
  * applets/digital-clock: Fix `Qt.formatDateTime` returns different date when minute changes (kde#436796)
  * applets/systray: align applet labels with differing line counts in hidden view (kde#438347)
  * Show panel config above other windows (kde#450794)
  * Use current accent colour to set ColorDialog object in colour picker
  * SystemDialog: Allow accepting the dialogs with the keyboard (kde#450223)
  * applets/systemtray: Do not open context menu on mouse pressed for SNI (kde#409768)
  * Revert "Fix overdraw on Wayland"
  * startkde: Forward stdout/stderr of started processes
  * SDDM theme: stop eliding people's names so aggressively (kde#450673)
  * applets/digital-clock: Word-wrap date string for desktop representation (kde#450632)
  * wrap completely the invariants timer in NDEBUG
  * ScreenPool as the source of truth of QScreen info
  * Always ensure there is an user selected (kde#450182)
  * Prevent panel going out of screen boundaries
  * applets/clipboard: Focus on text area when transition is done
  * applets/clipboard: Fix highlight after exiting edit mode
- Drop patches, now upstream:
  * 0001-startkde-Forward-stdout-stderr-of-started-processes.patch
- Restore compatibility with older kf5-filesystem</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1648555200">- Update to 5.24.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.4
- Changes since 5.24.3:
  * kcms/users: Adjust for padding in overlay sheet (kde#451031)
  * [Media Controller] Explicitly set slider "to" before setting "value"
  * [Notifications] Fix implicit size propagation in SelectableLabel
  * applets/kicker: Skip creating KService for non-desktop files or folders (kde#442970)
  * Fix sleep/suspend sometimes not working ... from ksmserver-logout-greeter, by making the DBus calls synchronous.
  * kicker/actionlist: Ensure we parse the args for the jumplist actions (kde#451418)
  * libtaskmanager: recompute active task when a task is removed
  * sddm/lockscreen: Fix weird behaviour
  * [Notifications] Limit notification heading line count</changelog>
  <changelog author="Fushan Wen &lt;qydwhotmail@gmail.com&gt;" date="1656590400">- Fix a potential crash when deleting a panel with a system tray applet
  (kde#453726)
  * 0001-applets-systemtray-disconnect-KConfigLoader-signal-w.patch
- Fix a potential crash on logout (kde#454159)
  * 0001-Avoid-crash-in-plasma-session-teardown.patch</changelog>
</package>
<package pkgid="ac9c07842f201a50fbc46233550f783a61c451ed0c55bf533b41903cb5da2973" name="plasma5-workspace" arch="ppc64le">
  <version epoch="0" ver="5.24.4" rel="bp154.2.3.1"/>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1632312000">- Add patches from Plasma/5.23 branch:
  * 0001-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0002-shell-panel-Fix-ability-to-type-in-textfield.patch
  * 0003-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0004-PipeWire-Make-sure-thumbnails-properly-use-dmabuf-ag.patch
  * 0005-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0006-Klipper-Handle-incoming-UTF-8-mime-types.patch
  * 0007-Klipper-Guard-against-broken-data-fetches.patch
  * 0008-pipewire-Properly-compare-pipewire-versions-using-QV.patch
  * 0009-PipeWire-Include-defines-for-older-PipeWire-versions.patch
  * 0010-sddm-theme-fix-default-username-font-size.patch
- Add patch to fix XEmbed context menus (kde#442758)
  * 0011-Revert-xembed-adapt-to-changes-in-KNotifications.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1632484800">- Add patch to fix build with gpsd:
  * 0001-Fix-build-with-gpsd-3.23.1.patch
- Add patch to fix window thumbnails if dmabuf is not supported (kde#428284):
  * 0002-libtaskmanager-Don-t-request-dmabuf-if-not-supported.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1633608000">- Update to 5.23.0
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.0
- Changes since 5.22.90:
  * Revert "xembed: adapt to changes in KNotifications" (kde#442758)
  * sddm-theme: Fix using mouse movements to show the UI
  * [systemtray] Check for menuItemFactory.object existence (kde#443377)
  * applets/devicenotifier: Remove applet list item animations
  * sddm-theme: Fix use of needsPassword and related button layout
  * [klipper] Fix shortcut of OK button in the clipboard content edit dialog (kde#400623)
  * Fix Kickoff context menu actions for System Settings results (kde#442522)
  * klipper: Fix reading from plasma on wayland
  * Fix build with gpsd 3.23.1
  * Unbreak fontinst KCM (kde#442748)
  * Address regression in VT switching code (kde#442852)
  * libtaskmanager: Don't request dmabuf if not supported (kde#428284)
  * Port away from Kirigami.Units.devicePixelRatio
  * lookandfeel: don't nuke accent colour (kde#442812)
  * kcm/colors: Improve some bindings on accent colors
  * sddm-theme: fix default username font size
  * PipeWire: Include defines for older PipeWire versions
  * pipewire: Properly compare pipewire versions using QVersionNumber
  * [Klipper] Guard against broken data fetches
  * [Klipper] Handle incoming UTF-8 mime types (kde#424694)
  * PipeWire: Make sure thumbnails properly use dmabuf again
  * [shell/panel] Fix ability to type in textfield (kde#442557)
- Drop patches, now upstream:
  * 0001-Fix-build-with-gpsd-3.23.1.patch
  * 0001-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0002-libtaskmanager-Don-t-request-dmabuf-if-not-supported.patch
  * 0002-shell-panel-Fix-ability-to-type-in-textfield.patch
  * 0003-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0004-PipeWire-Make-sure-thumbnails-properly-use-dmabuf-ag.patch
  * 0005-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0006-Klipper-Handle-incoming-UTF-8-mime-types.patch
  * 0007-Klipper-Guard-against-broken-data-fetches.patch
  * 0008-pipewire-Properly-compare-pipewire-versions-using-QV.patch
  * 0009-PipeWire-Include-defines-for-older-PipeWire-versions.patch
  * 0010-sddm-theme-fix-default-username-font-size.patch
  * 0011-Revert-xembed-adapt-to-changes-in-KNotifications.patch
- Refresh 0001-Ignore-default-sddm-face-icons.patch
- Add new key + signature to plasma.keyring</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1634299200">- Add patch to show password input on the "Other" page in SDDM (kde#443737):
  * 0001-sddm-theme-fix-missing-password-field-on-Other-page.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1634644800">- Update to 5.23.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.1
- Changes since 5.23.0:
  * [freespacenotifier] impr: no notification for ro filesystems
  * kcms/colors: Don't apply header accent colors to non-Header color schemes (kde#443786)
  * [kcms/colors] Notify global settings change after saving
  * krdb: Fix removal of Xft.dpi from Xresources (kde#350039)
  * sddm-theme: fix missing password field on "Other" page (kde#443737)
  * pipewire: Report DRM_FORMAT_MOD_INVALID when no modifiers are offered
  * [digital-clock] Do not assign undefined when agenda is not visible (kde#443380)
- Drop patches, now upstream:
  * 0001-sddm-theme-fix-missing-password-field-on-Other-page.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1634817600">- Add back X11 root window properties until firefox is adjusted
  (boo#1191825):
  * 0001-Revert-Drop-setupX11-from-startplasma-waylandsession.patch
  * 0002-Revert-Drop-X11-root-properties-for-KDE-full-session.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1635249600">- Update to 5.23.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.2
- Changes since 5.23.1:
  * Hide KRunner window when pressing escape (kde#444240)
  * [applets/clipboard] Fix selecting clipboard entries with Enter
  * Set Qt.ImhNoPredictiveText for text fields that act as search fields
  * [shell] Ignore placeholder screens
- Add a version to BuildRequires: cmake(Breeze)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1636459200">- Update to 5.23.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.3
- Changes since 5.23.2:
  * fixed size hints to the osd
  * use implicit size to not cause binding loops (kde#422072)
  * wayland: don't create DesktopView for placeholder screen (kde#438839,kde#444801)
  * [startplasma] Detect systemd service in linked state
  * [Notifications] Fix grouping container side line
  * Disconnect watcher for xdgActivationTokenArrived (kde#444385)
  * interactiveconsole: Allow specifying mode from command line parameter</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1638273600">- Update to 5.23.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.4
- Changes since 5.23.3:
  * Lock &amp; login screens: Use RTL-friendly arrows when in RTL mode
  * [logout-greeter] Set window class name (kde#444898,kde#444899)
  * systemtray: Connect to StatusNotifierWatcher before initializing QDBusPendingReply
  * systemtray: Check if a service is already added before processing QDBusReply (kde#443961)
  * baloosearchruner: Emit DBus error when baloo is disabled (kde#445342)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1641297600">- Update to 5.23.5
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.5
- Changes since 5.23.4:
  * applets/systemtray: Follow panel opacity (kde#439025)
  * [webshortcutsrunner] Fix private browsing with some Firefoxes
  * [kcms/style] Don't call setNeedsSave when style config changes (kde#439297)
  * digital-clock: fix calendar popup contrast when opened from desktop (kde#446991)
  * [libnotificationmanager] Fix memory leak
  * [kcms/lookandfeel] Guard reading invalid first entry (kde#446100)
  * [Global Menu] Set translation domain
  * lookandfeel: Add missing check if list of files is empty (kde#439797)
  * [KSplash] Start with zero opacity
  * Fix Klipper Actions content truncation (kde#444365)
  * [klipper] Use full text for DBus return values (kde#446441)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1642075200">- Update to 5.23.90
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.90
- Too many changes to list here
- Rebase 0001-Use-qdbus-qt5.patch
- Replace xprop-kde-full-session.desktop with autostart file:
  * 0001-Revert-Drop-setupX11-from-startplasma-waylandsession.patch
  * 0002-Revert-Drop-X11-root-properties-for-KDE-full-session.patch
- Add patch to fix the upstream sddm theme background:
  * 0001-sddm-theme-Change-wallpaper-extension-so-that-it-poi.patch
- Add patch to fix screen sharing dialog (kde#448423):
  * 0001-systemdialogs-Remove-leftover-and-broken-components.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1642852800">- Add patch to fix initial focus in SDDM (kde#447817):
  * 0001-Make-SessionManagementScreen-a-FocusScope.patch
- Add patch to fix initial focus in the lockscreen:
  * 0001-Fix-initial-focus-in-LockScreenUi.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1644062400">- Update to 5.24.0
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.0
- Too many changes to list here
- Drop patches, now upstream:
  * 0001-sddm-theme-Change-wallpaper-extension-so-that-it-poi.patch
  * 0001-systemdialogs-Remove-leftover-and-broken-components.patch
  * 0001-Make-SessionManagementScreen-a-FocusScope.patch
  * 0001-Fix-initial-focus-in-LockScreenUi.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1644926400">- Update to 5.24.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.1
- Changes since 5.24.0:
  * Move to runtime check of valid font DPI (kde#449918)
  * applets/battery: adjust show/hide conditions for charge limits (kde#435931)
  * applets/systemtray: fix SNI context menu usage without libappindicator (kde#449870)
  * applets/notifications: Increase implicit size of standalone popup (kde#448383)
  * applets-digital/clock: Add workaround for QTBUG-83890 (kde#448387)
  * Clean up "empty" mimeType containg only whitespaces
  * dataengines/apps: Use KIO::ApplicationLauncherJob for starting KService
  * [containmentactions/applauncher] Use ApplicationLauncherJob instead of OpenUrlJob (kde#449900)
  * Desktop: Still show services with nodisplay=true set (kde#449243)
  * appstream runner: De-duplicate results from multiple sources (kde#448619)
  * Fix ksplash always using default theme. (kde#446966)
  * kcms/users: Fix missing template arguments before reply in FingerprintModel
  * De-duplicate 'Uninstall or manage addons' option in the context menu of Kickoff (kde#448564)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1645531200">- Update to 5.24.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.2
- Changes since 5.24.1:
  * applets/clipboard: Focus on the search field for the first time opening the applet
  * applets/clipboard: Make Up/Down arrow keys work in ClipboardPage (kde#448811,kde#450040)
  * applets/panelspacer: Fix optimal size calculation (kde#431668)
  * Fix overdraw on Wayland
  * PanelView: Do not crash when the state is transitioning (kde#373461)
  * Fix launch kscreen kcm in font kcm.
  * Don't install two copies of kcm_fontinst
  * Lock/login themes: stop adjusting shadows based on color scheme (kde#449985)
  * Top-align lock/login/logout screen action buttons (kde#450238)
  * [kcms/user] Set interactive auth flag for more calls (kde#450122)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1645704000">- Add patch to fix log output of some processes (boo#1196206):
  * 0001-startkde-Forward-stdout-stderr-of-started-processes.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1646654400">- Replace %_libdir/libexec with %_libexecdir (boo#1174075)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1646740800">- Update to 5.24.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.3
- Changes since 5.24.2:
  * kcms/colors: Implement radio button layouts better
  * kcms/colors: fix spacing between radio buttons and content
  * [Battery Monitor] Only show charge threshold hint for power supply batteries (kde#451161)
  * [Icons KCM] Give measure delegate a text
  * wallpapers: Sort BackgroundListModel by title
  * applets/digital-clock: Fix `Qt.formatDateTime` returns different date when minute changes (kde#436796)
  * applets/systray: align applet labels with differing line counts in hidden view (kde#438347)
  * Show panel config above other windows (kde#450794)
  * Use current accent colour to set ColorDialog object in colour picker
  * SystemDialog: Allow accepting the dialogs with the keyboard (kde#450223)
  * applets/systemtray: Do not open context menu on mouse pressed for SNI (kde#409768)
  * Revert "Fix overdraw on Wayland"
  * startkde: Forward stdout/stderr of started processes
  * SDDM theme: stop eliding people's names so aggressively (kde#450673)
  * applets/digital-clock: Word-wrap date string for desktop representation (kde#450632)
  * wrap completely the invariants timer in NDEBUG
  * ScreenPool as the source of truth of QScreen info
  * Always ensure there is an user selected (kde#450182)
  * Prevent panel going out of screen boundaries
  * applets/clipboard: Focus on text area when transition is done
  * applets/clipboard: Fix highlight after exiting edit mode
- Drop patches, now upstream:
  * 0001-startkde-Forward-stdout-stderr-of-started-processes.patch
- Restore compatibility with older kf5-filesystem</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1648555200">- Update to 5.24.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.4
- Changes since 5.24.3:
  * kcms/users: Adjust for padding in overlay sheet (kde#451031)
  * [Media Controller] Explicitly set slider "to" before setting "value"
  * [Notifications] Fix implicit size propagation in SelectableLabel
  * applets/kicker: Skip creating KService for non-desktop files or folders (kde#442970)
  * Fix sleep/suspend sometimes not working ... from ksmserver-logout-greeter, by making the DBus calls synchronous.
  * kicker/actionlist: Ensure we parse the args for the jumplist actions (kde#451418)
  * libtaskmanager: recompute active task when a task is removed
  * sddm/lockscreen: Fix weird behaviour
  * [Notifications] Limit notification heading line count</changelog>
  <changelog author="Fushan Wen &lt;qydwhotmail@gmail.com&gt;" date="1656590400">- Fix a potential crash when deleting a panel with a system tray applet
  (kde#453726)
  * 0001-applets-systemtray-disconnect-KConfigLoader-signal-w.patch
- Fix a potential crash on logout (kde#454159)
  * 0001-Avoid-crash-in-plasma-session-teardown.patch</changelog>
</package>
<package pkgid="16c62c4004730e3228399df6a93dfa2c2bb110b142619469aaf18cba7f942f7a" name="plasma5-workspace" arch="src">
  <version epoch="0" ver="5.24.4" rel="bp154.2.3.1"/>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1632312000">- Add patches from Plasma/5.23 branch:
  * 0001-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0002-shell-panel-Fix-ability-to-type-in-textfield.patch
  * 0003-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0004-PipeWire-Make-sure-thumbnails-properly-use-dmabuf-ag.patch
  * 0005-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0006-Klipper-Handle-incoming-UTF-8-mime-types.patch
  * 0007-Klipper-Guard-against-broken-data-fetches.patch
  * 0008-pipewire-Properly-compare-pipewire-versions-using-QV.patch
  * 0009-PipeWire-Include-defines-for-older-PipeWire-versions.patch
  * 0010-sddm-theme-fix-default-username-font-size.patch
- Add patch to fix XEmbed context menus (kde#442758)
  * 0011-Revert-xembed-adapt-to-changes-in-KNotifications.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1632484800">- Add patch to fix build with gpsd:
  * 0001-Fix-build-with-gpsd-3.23.1.patch
- Add patch to fix window thumbnails if dmabuf is not supported (kde#428284):
  * 0002-libtaskmanager-Don-t-request-dmabuf-if-not-supported.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1633608000">- Update to 5.23.0
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.0
- Changes since 5.22.90:
  * Revert "xembed: adapt to changes in KNotifications" (kde#442758)
  * sddm-theme: Fix using mouse movements to show the UI
  * [systemtray] Check for menuItemFactory.object existence (kde#443377)
  * applets/devicenotifier: Remove applet list item animations
  * sddm-theme: Fix use of needsPassword and related button layout
  * [klipper] Fix shortcut of OK button in the clipboard content edit dialog (kde#400623)
  * Fix Kickoff context menu actions for System Settings results (kde#442522)
  * klipper: Fix reading from plasma on wayland
  * Fix build with gpsd 3.23.1
  * Unbreak fontinst KCM (kde#442748)
  * Address regression in VT switching code (kde#442852)
  * libtaskmanager: Don't request dmabuf if not supported (kde#428284)
  * Port away from Kirigami.Units.devicePixelRatio
  * lookandfeel: don't nuke accent colour (kde#442812)
  * kcm/colors: Improve some bindings on accent colors
  * sddm-theme: fix default username font size
  * PipeWire: Include defines for older PipeWire versions
  * pipewire: Properly compare pipewire versions using QVersionNumber
  * [Klipper] Guard against broken data fetches
  * [Klipper] Handle incoming UTF-8 mime types (kde#424694)
  * PipeWire: Make sure thumbnails properly use dmabuf again
  * [shell/panel] Fix ability to type in textfield (kde#442557)
- Drop patches, now upstream:
  * 0001-Fix-build-with-gpsd-3.23.1.patch
  * 0001-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0002-libtaskmanager-Don-t-request-dmabuf-if-not-supported.patch
  * 0002-shell-panel-Fix-ability-to-type-in-textfield.patch
  * 0003-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0004-PipeWire-Make-sure-thumbnails-properly-use-dmabuf-ag.patch
  * 0005-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0006-Klipper-Handle-incoming-UTF-8-mime-types.patch
  * 0007-Klipper-Guard-against-broken-data-fetches.patch
  * 0008-pipewire-Properly-compare-pipewire-versions-using-QV.patch
  * 0009-PipeWire-Include-defines-for-older-PipeWire-versions.patch
  * 0010-sddm-theme-fix-default-username-font-size.patch
  * 0011-Revert-xembed-adapt-to-changes-in-KNotifications.patch
- Refresh 0001-Ignore-default-sddm-face-icons.patch
- Add new key + signature to plasma.keyring</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1634299200">- Add patch to show password input on the "Other" page in SDDM (kde#443737):
  * 0001-sddm-theme-fix-missing-password-field-on-Other-page.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1634644800">- Update to 5.23.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.1
- Changes since 5.23.0:
  * [freespacenotifier] impr: no notification for ro filesystems
  * kcms/colors: Don't apply header accent colors to non-Header color schemes (kde#443786)
  * [kcms/colors] Notify global settings change after saving
  * krdb: Fix removal of Xft.dpi from Xresources (kde#350039)
  * sddm-theme: fix missing password field on "Other" page (kde#443737)
  * pipewire: Report DRM_FORMAT_MOD_INVALID when no modifiers are offered
  * [digital-clock] Do not assign undefined when agenda is not visible (kde#443380)
- Drop patches, now upstream:
  * 0001-sddm-theme-fix-missing-password-field-on-Other-page.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1634817600">- Add back X11 root window properties until firefox is adjusted
  (boo#1191825):
  * 0001-Revert-Drop-setupX11-from-startplasma-waylandsession.patch
  * 0002-Revert-Drop-X11-root-properties-for-KDE-full-session.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1635249600">- Update to 5.23.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.2
- Changes since 5.23.1:
  * Hide KRunner window when pressing escape (kde#444240)
  * [applets/clipboard] Fix selecting clipboard entries with Enter
  * Set Qt.ImhNoPredictiveText for text fields that act as search fields
  * [shell] Ignore placeholder screens
- Add a version to BuildRequires: cmake(Breeze)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1636459200">- Update to 5.23.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.3
- Changes since 5.23.2:
  * fixed size hints to the osd
  * use implicit size to not cause binding loops (kde#422072)
  * wayland: don't create DesktopView for placeholder screen (kde#438839,kde#444801)
  * [startplasma] Detect systemd service in linked state
  * [Notifications] Fix grouping container side line
  * Disconnect watcher for xdgActivationTokenArrived (kde#444385)
  * interactiveconsole: Allow specifying mode from command line parameter</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1638273600">- Update to 5.23.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.4
- Changes since 5.23.3:
  * Lock &amp; login screens: Use RTL-friendly arrows when in RTL mode
  * [logout-greeter] Set window class name (kde#444898,kde#444899)
  * systemtray: Connect to StatusNotifierWatcher before initializing QDBusPendingReply
  * systemtray: Check if a service is already added before processing QDBusReply (kde#443961)
  * baloosearchruner: Emit DBus error when baloo is disabled (kde#445342)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1641297600">- Update to 5.23.5
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.5
- Changes since 5.23.4:
  * applets/systemtray: Follow panel opacity (kde#439025)
  * [webshortcutsrunner] Fix private browsing with some Firefoxes
  * [kcms/style] Don't call setNeedsSave when style config changes (kde#439297)
  * digital-clock: fix calendar popup contrast when opened from desktop (kde#446991)
  * [libnotificationmanager] Fix memory leak
  * [kcms/lookandfeel] Guard reading invalid first entry (kde#446100)
  * [Global Menu] Set translation domain
  * lookandfeel: Add missing check if list of files is empty (kde#439797)
  * [KSplash] Start with zero opacity
  * Fix Klipper Actions content truncation (kde#444365)
  * [klipper] Use full text for DBus return values (kde#446441)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1642075200">- Update to 5.23.90
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.90
- Too many changes to list here
- Rebase 0001-Use-qdbus-qt5.patch
- Replace xprop-kde-full-session.desktop with autostart file:
  * 0001-Revert-Drop-setupX11-from-startplasma-waylandsession.patch
  * 0002-Revert-Drop-X11-root-properties-for-KDE-full-session.patch
- Add patch to fix the upstream sddm theme background:
  * 0001-sddm-theme-Change-wallpaper-extension-so-that-it-poi.patch
- Add patch to fix screen sharing dialog (kde#448423):
  * 0001-systemdialogs-Remove-leftover-and-broken-components.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1642852800">- Add patch to fix initial focus in SDDM (kde#447817):
  * 0001-Make-SessionManagementScreen-a-FocusScope.patch
- Add patch to fix initial focus in the lockscreen:
  * 0001-Fix-initial-focus-in-LockScreenUi.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1644062400">- Update to 5.24.0
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.0
- Too many changes to list here
- Drop patches, now upstream:
  * 0001-sddm-theme-Change-wallpaper-extension-so-that-it-poi.patch
  * 0001-systemdialogs-Remove-leftover-and-broken-components.patch
  * 0001-Make-SessionManagementScreen-a-FocusScope.patch
  * 0001-Fix-initial-focus-in-LockScreenUi.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1644926400">- Update to 5.24.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.1
- Changes since 5.24.0:
  * Move to runtime check of valid font DPI (kde#449918)
  * applets/battery: adjust show/hide conditions for charge limits (kde#435931)
  * applets/systemtray: fix SNI context menu usage without libappindicator (kde#449870)
  * applets/notifications: Increase implicit size of standalone popup (kde#448383)
  * applets-digital/clock: Add workaround for QTBUG-83890 (kde#448387)
  * Clean up "empty" mimeType containg only whitespaces
  * dataengines/apps: Use KIO::ApplicationLauncherJob for starting KService
  * [containmentactions/applauncher] Use ApplicationLauncherJob instead of OpenUrlJob (kde#449900)
  * Desktop: Still show services with nodisplay=true set (kde#449243)
  * appstream runner: De-duplicate results from multiple sources (kde#448619)
  * Fix ksplash always using default theme. (kde#446966)
  * kcms/users: Fix missing template arguments before reply in FingerprintModel
  * De-duplicate 'Uninstall or manage addons' option in the context menu of Kickoff (kde#448564)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1645531200">- Update to 5.24.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.2
- Changes since 5.24.1:
  * applets/clipboard: Focus on the search field for the first time opening the applet
  * applets/clipboard: Make Up/Down arrow keys work in ClipboardPage (kde#448811,kde#450040)
  * applets/panelspacer: Fix optimal size calculation (kde#431668)
  * Fix overdraw on Wayland
  * PanelView: Do not crash when the state is transitioning (kde#373461)
  * Fix launch kscreen kcm in font kcm.
  * Don't install two copies of kcm_fontinst
  * Lock/login themes: stop adjusting shadows based on color scheme (kde#449985)
  * Top-align lock/login/logout screen action buttons (kde#450238)
  * [kcms/user] Set interactive auth flag for more calls (kde#450122)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1645704000">- Add patch to fix log output of some processes (boo#1196206):
  * 0001-startkde-Forward-stdout-stderr-of-started-processes.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1646654400">- Replace %_libdir/libexec with %_libexecdir (boo#1174075)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1646740800">- Update to 5.24.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.3
- Changes since 5.24.2:
  * kcms/colors: Implement radio button layouts better
  * kcms/colors: fix spacing between radio buttons and content
  * [Battery Monitor] Only show charge threshold hint for power supply batteries (kde#451161)
  * [Icons KCM] Give measure delegate a text
  * wallpapers: Sort BackgroundListModel by title
  * applets/digital-clock: Fix `Qt.formatDateTime` returns different date when minute changes (kde#436796)
  * applets/systray: align applet labels with differing line counts in hidden view (kde#438347)
  * Show panel config above other windows (kde#450794)
  * Use current accent colour to set ColorDialog object in colour picker
  * SystemDialog: Allow accepting the dialogs with the keyboard (kde#450223)
  * applets/systemtray: Do not open context menu on mouse pressed for SNI (kde#409768)
  * Revert "Fix overdraw on Wayland"
  * startkde: Forward stdout/stderr of started processes
  * SDDM theme: stop eliding people's names so aggressively (kde#450673)
  * applets/digital-clock: Word-wrap date string for desktop representation (kde#450632)
  * wrap completely the invariants timer in NDEBUG
  * ScreenPool as the source of truth of QScreen info
  * Always ensure there is an user selected (kde#450182)
  * Prevent panel going out of screen boundaries
  * applets/clipboard: Focus on text area when transition is done
  * applets/clipboard: Fix highlight after exiting edit mode
- Drop patches, now upstream:
  * 0001-startkde-Forward-stdout-stderr-of-started-processes.patch
- Restore compatibility with older kf5-filesystem</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1648555200">- Update to 5.24.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.4
- Changes since 5.24.3:
  * kcms/users: Adjust for padding in overlay sheet (kde#451031)
  * [Media Controller] Explicitly set slider "to" before setting "value"
  * [Notifications] Fix implicit size propagation in SelectableLabel
  * applets/kicker: Skip creating KService for non-desktop files or folders (kde#442970)
  * Fix sleep/suspend sometimes not working ... from ksmserver-logout-greeter, by making the DBus calls synchronous.
  * kicker/actionlist: Ensure we parse the args for the jumplist actions (kde#451418)
  * libtaskmanager: recompute active task when a task is removed
  * sddm/lockscreen: Fix weird behaviour
  * [Notifications] Limit notification heading line count</changelog>
  <changelog author="Fushan Wen &lt;qydwhotmail@gmail.com&gt;" date="1656590400">- Fix a potential crash when deleting a panel with a system tray applet
  (kde#453726)
  * 0001-applets-systemtray-disconnect-KConfigLoader-signal-w.patch
- Fix a potential crash on logout (kde#454159)
  * 0001-Avoid-crash-in-plasma-session-teardown.patch</changelog>
</package>
<package pkgid="975b5b49e596c925fabe792be498b5b3827f9e8b2b9c880a81b25c3234f6be5f" name="plasma5-workspace" arch="x86_64">
  <version epoch="0" ver="5.24.4" rel="bp154.2.3.1"/>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1632312000">- Add patches from Plasma/5.23 branch:
  * 0001-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0002-shell-panel-Fix-ability-to-type-in-textfield.patch
  * 0003-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0004-PipeWire-Make-sure-thumbnails-properly-use-dmabuf-ag.patch
  * 0005-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0006-Klipper-Handle-incoming-UTF-8-mime-types.patch
  * 0007-Klipper-Guard-against-broken-data-fetches.patch
  * 0008-pipewire-Properly-compare-pipewire-versions-using-QV.patch
  * 0009-PipeWire-Include-defines-for-older-PipeWire-versions.patch
  * 0010-sddm-theme-fix-default-username-font-size.patch
- Add patch to fix XEmbed context menus (kde#442758)
  * 0011-Revert-xembed-adapt-to-changes-in-KNotifications.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1632484800">- Add patch to fix build with gpsd:
  * 0001-Fix-build-with-gpsd-3.23.1.patch
- Add patch to fix window thumbnails if dmabuf is not supported (kde#428284):
  * 0002-libtaskmanager-Don-t-request-dmabuf-if-not-supported.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1633608000">- Update to 5.23.0
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.0
- Changes since 5.22.90:
  * Revert "xembed: adapt to changes in KNotifications" (kde#442758)
  * sddm-theme: Fix using mouse movements to show the UI
  * [systemtray] Check for menuItemFactory.object existence (kde#443377)
  * applets/devicenotifier: Remove applet list item animations
  * sddm-theme: Fix use of needsPassword and related button layout
  * [klipper] Fix shortcut of OK button in the clipboard content edit dialog (kde#400623)
  * Fix Kickoff context menu actions for System Settings results (kde#442522)
  * klipper: Fix reading from plasma on wayland
  * Fix build with gpsd 3.23.1
  * Unbreak fontinst KCM (kde#442748)
  * Address regression in VT switching code (kde#442852)
  * libtaskmanager: Don't request dmabuf if not supported (kde#428284)
  * Port away from Kirigami.Units.devicePixelRatio
  * lookandfeel: don't nuke accent colour (kde#442812)
  * kcm/colors: Improve some bindings on accent colors
  * sddm-theme: fix default username font size
  * PipeWire: Include defines for older PipeWire versions
  * pipewire: Properly compare pipewire versions using QVersionNumber
  * [Klipper] Guard against broken data fetches
  * [Klipper] Handle incoming UTF-8 mime types (kde#424694)
  * PipeWire: Make sure thumbnails properly use dmabuf again
  * [shell/panel] Fix ability to type in textfield (kde#442557)
- Drop patches, now upstream:
  * 0001-Fix-build-with-gpsd-3.23.1.patch
  * 0001-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0002-libtaskmanager-Don-t-request-dmabuf-if-not-supported.patch
  * 0002-shell-panel-Fix-ability-to-type-in-textfield.patch
  * 0003-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0004-PipeWire-Make-sure-thumbnails-properly-use-dmabuf-ag.patch
  * 0005-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0006-Klipper-Handle-incoming-UTF-8-mime-types.patch
  * 0007-Klipper-Guard-against-broken-data-fetches.patch
  * 0008-pipewire-Properly-compare-pipewire-versions-using-QV.patch
  * 0009-PipeWire-Include-defines-for-older-PipeWire-versions.patch
  * 0010-sddm-theme-fix-default-username-font-size.patch
  * 0011-Revert-xembed-adapt-to-changes-in-KNotifications.patch
- Refresh 0001-Ignore-default-sddm-face-icons.patch
- Add new key + signature to plasma.keyring</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1634299200">- Add patch to show password input on the "Other" page in SDDM (kde#443737):
  * 0001-sddm-theme-fix-missing-password-field-on-Other-page.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1634644800">- Update to 5.23.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.1
- Changes since 5.23.0:
  * [freespacenotifier] impr: no notification for ro filesystems
  * kcms/colors: Don't apply header accent colors to non-Header color schemes (kde#443786)
  * [kcms/colors] Notify global settings change after saving
  * krdb: Fix removal of Xft.dpi from Xresources (kde#350039)
  * sddm-theme: fix missing password field on "Other" page (kde#443737)
  * pipewire: Report DRM_FORMAT_MOD_INVALID when no modifiers are offered
  * [digital-clock] Do not assign undefined when agenda is not visible (kde#443380)
- Drop patches, now upstream:
  * 0001-sddm-theme-fix-missing-password-field-on-Other-page.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1634817600">- Add back X11 root window properties until firefox is adjusted
  (boo#1191825):
  * 0001-Revert-Drop-setupX11-from-startplasma-waylandsession.patch
  * 0002-Revert-Drop-X11-root-properties-for-KDE-full-session.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1635249600">- Update to 5.23.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.2
- Changes since 5.23.1:
  * Hide KRunner window when pressing escape (kde#444240)
  * [applets/clipboard] Fix selecting clipboard entries with Enter
  * Set Qt.ImhNoPredictiveText for text fields that act as search fields
  * [shell] Ignore placeholder screens
- Add a version to BuildRequires: cmake(Breeze)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1636459200">- Update to 5.23.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.3
- Changes since 5.23.2:
  * fixed size hints to the osd
  * use implicit size to not cause binding loops (kde#422072)
  * wayland: don't create DesktopView for placeholder screen (kde#438839,kde#444801)
  * [startplasma] Detect systemd service in linked state
  * [Notifications] Fix grouping container side line
  * Disconnect watcher for xdgActivationTokenArrived (kde#444385)
  * interactiveconsole: Allow specifying mode from command line parameter</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1638273600">- Update to 5.23.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.4
- Changes since 5.23.3:
  * Lock &amp; login screens: Use RTL-friendly arrows when in RTL mode
  * [logout-greeter] Set window class name (kde#444898,kde#444899)
  * systemtray: Connect to StatusNotifierWatcher before initializing QDBusPendingReply
  * systemtray: Check if a service is already added before processing QDBusReply (kde#443961)
  * baloosearchruner: Emit DBus error when baloo is disabled (kde#445342)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1641297600">- Update to 5.23.5
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.5
- Changes since 5.23.4:
  * applets/systemtray: Follow panel opacity (kde#439025)
  * [webshortcutsrunner] Fix private browsing with some Firefoxes
  * [kcms/style] Don't call setNeedsSave when style config changes (kde#439297)
  * digital-clock: fix calendar popup contrast when opened from desktop (kde#446991)
  * [libnotificationmanager] Fix memory leak
  * [kcms/lookandfeel] Guard reading invalid first entry (kde#446100)
  * [Global Menu] Set translation domain
  * lookandfeel: Add missing check if list of files is empty (kde#439797)
  * [KSplash] Start with zero opacity
  * Fix Klipper Actions content truncation (kde#444365)
  * [klipper] Use full text for DBus return values (kde#446441)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1642075200">- Update to 5.23.90
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.90
- Too many changes to list here
- Rebase 0001-Use-qdbus-qt5.patch
- Replace xprop-kde-full-session.desktop with autostart file:
  * 0001-Revert-Drop-setupX11-from-startplasma-waylandsession.patch
  * 0002-Revert-Drop-X11-root-properties-for-KDE-full-session.patch
- Add patch to fix the upstream sddm theme background:
  * 0001-sddm-theme-Change-wallpaper-extension-so-that-it-poi.patch
- Add patch to fix screen sharing dialog (kde#448423):
  * 0001-systemdialogs-Remove-leftover-and-broken-components.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1642852800">- Add patch to fix initial focus in SDDM (kde#447817):
  * 0001-Make-SessionManagementScreen-a-FocusScope.patch
- Add patch to fix initial focus in the lockscreen:
  * 0001-Fix-initial-focus-in-LockScreenUi.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1644062400">- Update to 5.24.0
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.0
- Too many changes to list here
- Drop patches, now upstream:
  * 0001-sddm-theme-Change-wallpaper-extension-so-that-it-poi.patch
  * 0001-systemdialogs-Remove-leftover-and-broken-components.patch
  * 0001-Make-SessionManagementScreen-a-FocusScope.patch
  * 0001-Fix-initial-focus-in-LockScreenUi.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1644926400">- Update to 5.24.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.1
- Changes since 5.24.0:
  * Move to runtime check of valid font DPI (kde#449918)
  * applets/battery: adjust show/hide conditions for charge limits (kde#435931)
  * applets/systemtray: fix SNI context menu usage without libappindicator (kde#449870)
  * applets/notifications: Increase implicit size of standalone popup (kde#448383)
  * applets-digital/clock: Add workaround for QTBUG-83890 (kde#448387)
  * Clean up "empty" mimeType containg only whitespaces
  * dataengines/apps: Use KIO::ApplicationLauncherJob for starting KService
  * [containmentactions/applauncher] Use ApplicationLauncherJob instead of OpenUrlJob (kde#449900)
  * Desktop: Still show services with nodisplay=true set (kde#449243)
  * appstream runner: De-duplicate results from multiple sources (kde#448619)
  * Fix ksplash always using default theme. (kde#446966)
  * kcms/users: Fix missing template arguments before reply in FingerprintModel
  * De-duplicate 'Uninstall or manage addons' option in the context menu of Kickoff (kde#448564)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1645531200">- Update to 5.24.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.2
- Changes since 5.24.1:
  * applets/clipboard: Focus on the search field for the first time opening the applet
  * applets/clipboard: Make Up/Down arrow keys work in ClipboardPage (kde#448811,kde#450040)
  * applets/panelspacer: Fix optimal size calculation (kde#431668)
  * Fix overdraw on Wayland
  * PanelView: Do not crash when the state is transitioning (kde#373461)
  * Fix launch kscreen kcm in font kcm.
  * Don't install two copies of kcm_fontinst
  * Lock/login themes: stop adjusting shadows based on color scheme (kde#449985)
  * Top-align lock/login/logout screen action buttons (kde#450238)
  * [kcms/user] Set interactive auth flag for more calls (kde#450122)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1645704000">- Add patch to fix log output of some processes (boo#1196206):
  * 0001-startkde-Forward-stdout-stderr-of-started-processes.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1646654400">- Replace %_libdir/libexec with %_libexecdir (boo#1174075)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1646740800">- Update to 5.24.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.3
- Changes since 5.24.2:
  * kcms/colors: Implement radio button layouts better
  * kcms/colors: fix spacing between radio buttons and content
  * [Battery Monitor] Only show charge threshold hint for power supply batteries (kde#451161)
  * [Icons KCM] Give measure delegate a text
  * wallpapers: Sort BackgroundListModel by title
  * applets/digital-clock: Fix `Qt.formatDateTime` returns different date when minute changes (kde#436796)
  * applets/systray: align applet labels with differing line counts in hidden view (kde#438347)
  * Show panel config above other windows (kde#450794)
  * Use current accent colour to set ColorDialog object in colour picker
  * SystemDialog: Allow accepting the dialogs with the keyboard (kde#450223)
  * applets/systemtray: Do not open context menu on mouse pressed for SNI (kde#409768)
  * Revert "Fix overdraw on Wayland"
  * startkde: Forward stdout/stderr of started processes
  * SDDM theme: stop eliding people's names so aggressively (kde#450673)
  * applets/digital-clock: Word-wrap date string for desktop representation (kde#450632)
  * wrap completely the invariants timer in NDEBUG
  * ScreenPool as the source of truth of QScreen info
  * Always ensure there is an user selected (kde#450182)
  * Prevent panel going out of screen boundaries
  * applets/clipboard: Focus on text area when transition is done
  * applets/clipboard: Fix highlight after exiting edit mode
- Drop patches, now upstream:
  * 0001-startkde-Forward-stdout-stderr-of-started-processes.patch
- Restore compatibility with older kf5-filesystem</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1648555200">- Update to 5.24.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.4
- Changes since 5.24.3:
  * kcms/users: Adjust for padding in overlay sheet (kde#451031)
  * [Media Controller] Explicitly set slider "to" before setting "value"
  * [Notifications] Fix implicit size propagation in SelectableLabel
  * applets/kicker: Skip creating KService for non-desktop files or folders (kde#442970)
  * Fix sleep/suspend sometimes not working ... from ksmserver-logout-greeter, by making the DBus calls synchronous.
  * kicker/actionlist: Ensure we parse the args for the jumplist actions (kde#451418)
  * libtaskmanager: recompute active task when a task is removed
  * sddm/lockscreen: Fix weird behaviour
  * [Notifications] Limit notification heading line count</changelog>
  <changelog author="Fushan Wen &lt;qydwhotmail@gmail.com&gt;" date="1656590400">- Fix a potential crash when deleting a panel with a system tray applet
  (kde#453726)
  * 0001-applets-systemtray-disconnect-KConfigLoader-signal-w.patch
- Fix a potential crash on logout (kde#454159)
  * 0001-Avoid-crash-in-plasma-session-teardown.patch</changelog>
</package>
<package pkgid="cae31cdde5f7c4ecf0749bced3c92d16a0eaf77ed3ead218f5ceea813c65e2a5" name="plasma5-workspace-devel" arch="aarch64">
  <version epoch="0" ver="5.24.4" rel="bp154.2.3.1"/>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1632312000">- Add patches from Plasma/5.23 branch:
  * 0001-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0002-shell-panel-Fix-ability-to-type-in-textfield.patch
  * 0003-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0004-PipeWire-Make-sure-thumbnails-properly-use-dmabuf-ag.patch
  * 0005-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0006-Klipper-Handle-incoming-UTF-8-mime-types.patch
  * 0007-Klipper-Guard-against-broken-data-fetches.patch
  * 0008-pipewire-Properly-compare-pipewire-versions-using-QV.patch
  * 0009-PipeWire-Include-defines-for-older-PipeWire-versions.patch
  * 0010-sddm-theme-fix-default-username-font-size.patch
- Add patch to fix XEmbed context menus (kde#442758)
  * 0011-Revert-xembed-adapt-to-changes-in-KNotifications.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1632484800">- Add patch to fix build with gpsd:
  * 0001-Fix-build-with-gpsd-3.23.1.patch
- Add patch to fix window thumbnails if dmabuf is not supported (kde#428284):
  * 0002-libtaskmanager-Don-t-request-dmabuf-if-not-supported.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1633608000">- Update to 5.23.0
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.0
- Changes since 5.22.90:
  * Revert "xembed: adapt to changes in KNotifications" (kde#442758)
  * sddm-theme: Fix using mouse movements to show the UI
  * [systemtray] Check for menuItemFactory.object existence (kde#443377)
  * applets/devicenotifier: Remove applet list item animations
  * sddm-theme: Fix use of needsPassword and related button layout
  * [klipper] Fix shortcut of OK button in the clipboard content edit dialog (kde#400623)
  * Fix Kickoff context menu actions for System Settings results (kde#442522)
  * klipper: Fix reading from plasma on wayland
  * Fix build with gpsd 3.23.1
  * Unbreak fontinst KCM (kde#442748)
  * Address regression in VT switching code (kde#442852)
  * libtaskmanager: Don't request dmabuf if not supported (kde#428284)
  * Port away from Kirigami.Units.devicePixelRatio
  * lookandfeel: don't nuke accent colour (kde#442812)
  * kcm/colors: Improve some bindings on accent colors
  * sddm-theme: fix default username font size
  * PipeWire: Include defines for older PipeWire versions
  * pipewire: Properly compare pipewire versions using QVersionNumber
  * [Klipper] Guard against broken data fetches
  * [Klipper] Handle incoming UTF-8 mime types (kde#424694)
  * PipeWire: Make sure thumbnails properly use dmabuf again
  * [shell/panel] Fix ability to type in textfield (kde#442557)
- Drop patches, now upstream:
  * 0001-Fix-build-with-gpsd-3.23.1.patch
  * 0001-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0002-libtaskmanager-Don-t-request-dmabuf-if-not-supported.patch
  * 0002-shell-panel-Fix-ability-to-type-in-textfield.patch
  * 0003-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0004-PipeWire-Make-sure-thumbnails-properly-use-dmabuf-ag.patch
  * 0005-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0006-Klipper-Handle-incoming-UTF-8-mime-types.patch
  * 0007-Klipper-Guard-against-broken-data-fetches.patch
  * 0008-pipewire-Properly-compare-pipewire-versions-using-QV.patch
  * 0009-PipeWire-Include-defines-for-older-PipeWire-versions.patch
  * 0010-sddm-theme-fix-default-username-font-size.patch
  * 0011-Revert-xembed-adapt-to-changes-in-KNotifications.patch
- Refresh 0001-Ignore-default-sddm-face-icons.patch
- Add new key + signature to plasma.keyring</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1634299200">- Add patch to show password input on the "Other" page in SDDM (kde#443737):
  * 0001-sddm-theme-fix-missing-password-field-on-Other-page.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1634644800">- Update to 5.23.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.1
- Changes since 5.23.0:
  * [freespacenotifier] impr: no notification for ro filesystems
  * kcms/colors: Don't apply header accent colors to non-Header color schemes (kde#443786)
  * [kcms/colors] Notify global settings change after saving
  * krdb: Fix removal of Xft.dpi from Xresources (kde#350039)
  * sddm-theme: fix missing password field on "Other" page (kde#443737)
  * pipewire: Report DRM_FORMAT_MOD_INVALID when no modifiers are offered
  * [digital-clock] Do not assign undefined when agenda is not visible (kde#443380)
- Drop patches, now upstream:
  * 0001-sddm-theme-fix-missing-password-field-on-Other-page.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1634817600">- Add back X11 root window properties until firefox is adjusted
  (boo#1191825):
  * 0001-Revert-Drop-setupX11-from-startplasma-waylandsession.patch
  * 0002-Revert-Drop-X11-root-properties-for-KDE-full-session.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1635249600">- Update to 5.23.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.2
- Changes since 5.23.1:
  * Hide KRunner window when pressing escape (kde#444240)
  * [applets/clipboard] Fix selecting clipboard entries with Enter
  * Set Qt.ImhNoPredictiveText for text fields that act as search fields
  * [shell] Ignore placeholder screens
- Add a version to BuildRequires: cmake(Breeze)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1636459200">- Update to 5.23.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.3
- Changes since 5.23.2:
  * fixed size hints to the osd
  * use implicit size to not cause binding loops (kde#422072)
  * wayland: don't create DesktopView for placeholder screen (kde#438839,kde#444801)
  * [startplasma] Detect systemd service in linked state
  * [Notifications] Fix grouping container side line
  * Disconnect watcher for xdgActivationTokenArrived (kde#444385)
  * interactiveconsole: Allow specifying mode from command line parameter</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1638273600">- Update to 5.23.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.4
- Changes since 5.23.3:
  * Lock &amp; login screens: Use RTL-friendly arrows when in RTL mode
  * [logout-greeter] Set window class name (kde#444898,kde#444899)
  * systemtray: Connect to StatusNotifierWatcher before initializing QDBusPendingReply
  * systemtray: Check if a service is already added before processing QDBusReply (kde#443961)
  * baloosearchruner: Emit DBus error when baloo is disabled (kde#445342)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1641297600">- Update to 5.23.5
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.5
- Changes since 5.23.4:
  * applets/systemtray: Follow panel opacity (kde#439025)
  * [webshortcutsrunner] Fix private browsing with some Firefoxes
  * [kcms/style] Don't call setNeedsSave when style config changes (kde#439297)
  * digital-clock: fix calendar popup contrast when opened from desktop (kde#446991)
  * [libnotificationmanager] Fix memory leak
  * [kcms/lookandfeel] Guard reading invalid first entry (kde#446100)
  * [Global Menu] Set translation domain
  * lookandfeel: Add missing check if list of files is empty (kde#439797)
  * [KSplash] Start with zero opacity
  * Fix Klipper Actions content truncation (kde#444365)
  * [klipper] Use full text for DBus return values (kde#446441)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1642075200">- Update to 5.23.90
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.90
- Too many changes to list here
- Rebase 0001-Use-qdbus-qt5.patch
- Replace xprop-kde-full-session.desktop with autostart file:
  * 0001-Revert-Drop-setupX11-from-startplasma-waylandsession.patch
  * 0002-Revert-Drop-X11-root-properties-for-KDE-full-session.patch
- Add patch to fix the upstream sddm theme background:
  * 0001-sddm-theme-Change-wallpaper-extension-so-that-it-poi.patch
- Add patch to fix screen sharing dialog (kde#448423):
  * 0001-systemdialogs-Remove-leftover-and-broken-components.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1642852800">- Add patch to fix initial focus in SDDM (kde#447817):
  * 0001-Make-SessionManagementScreen-a-FocusScope.patch
- Add patch to fix initial focus in the lockscreen:
  * 0001-Fix-initial-focus-in-LockScreenUi.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1644062400">- Update to 5.24.0
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.0
- Too many changes to list here
- Drop patches, now upstream:
  * 0001-sddm-theme-Change-wallpaper-extension-so-that-it-poi.patch
  * 0001-systemdialogs-Remove-leftover-and-broken-components.patch
  * 0001-Make-SessionManagementScreen-a-FocusScope.patch
  * 0001-Fix-initial-focus-in-LockScreenUi.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1644926400">- Update to 5.24.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.1
- Changes since 5.24.0:
  * Move to runtime check of valid font DPI (kde#449918)
  * applets/battery: adjust show/hide conditions for charge limits (kde#435931)
  * applets/systemtray: fix SNI context menu usage without libappindicator (kde#449870)
  * applets/notifications: Increase implicit size of standalone popup (kde#448383)
  * applets-digital/clock: Add workaround for QTBUG-83890 (kde#448387)
  * Clean up "empty" mimeType containg only whitespaces
  * dataengines/apps: Use KIO::ApplicationLauncherJob for starting KService
  * [containmentactions/applauncher] Use ApplicationLauncherJob instead of OpenUrlJob (kde#449900)
  * Desktop: Still show services with nodisplay=true set (kde#449243)
  * appstream runner: De-duplicate results from multiple sources (kde#448619)
  * Fix ksplash always using default theme. (kde#446966)
  * kcms/users: Fix missing template arguments before reply in FingerprintModel
  * De-duplicate 'Uninstall or manage addons' option in the context menu of Kickoff (kde#448564)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1645531200">- Update to 5.24.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.2
- Changes since 5.24.1:
  * applets/clipboard: Focus on the search field for the first time opening the applet
  * applets/clipboard: Make Up/Down arrow keys work in ClipboardPage (kde#448811,kde#450040)
  * applets/panelspacer: Fix optimal size calculation (kde#431668)
  * Fix overdraw on Wayland
  * PanelView: Do not crash when the state is transitioning (kde#373461)
  * Fix launch kscreen kcm in font kcm.
  * Don't install two copies of kcm_fontinst
  * Lock/login themes: stop adjusting shadows based on color scheme (kde#449985)
  * Top-align lock/login/logout screen action buttons (kde#450238)
  * [kcms/user] Set interactive auth flag for more calls (kde#450122)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1645704000">- Add patch to fix log output of some processes (boo#1196206):
  * 0001-startkde-Forward-stdout-stderr-of-started-processes.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1646654400">- Replace %_libdir/libexec with %_libexecdir (boo#1174075)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1646740800">- Update to 5.24.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.3
- Changes since 5.24.2:
  * kcms/colors: Implement radio button layouts better
  * kcms/colors: fix spacing between radio buttons and content
  * [Battery Monitor] Only show charge threshold hint for power supply batteries (kde#451161)
  * [Icons KCM] Give measure delegate a text
  * wallpapers: Sort BackgroundListModel by title
  * applets/digital-clock: Fix `Qt.formatDateTime` returns different date when minute changes (kde#436796)
  * applets/systray: align applet labels with differing line counts in hidden view (kde#438347)
  * Show panel config above other windows (kde#450794)
  * Use current accent colour to set ColorDialog object in colour picker
  * SystemDialog: Allow accepting the dialogs with the keyboard (kde#450223)
  * applets/systemtray: Do not open context menu on mouse pressed for SNI (kde#409768)
  * Revert "Fix overdraw on Wayland"
  * startkde: Forward stdout/stderr of started processes
  * SDDM theme: stop eliding people's names so aggressively (kde#450673)
  * applets/digital-clock: Word-wrap date string for desktop representation (kde#450632)
  * wrap completely the invariants timer in NDEBUG
  * ScreenPool as the source of truth of QScreen info
  * Always ensure there is an user selected (kde#450182)
  * Prevent panel going out of screen boundaries
  * applets/clipboard: Focus on text area when transition is done
  * applets/clipboard: Fix highlight after exiting edit mode
- Drop patches, now upstream:
  * 0001-startkde-Forward-stdout-stderr-of-started-processes.patch
- Restore compatibility with older kf5-filesystem</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1648555200">- Update to 5.24.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.4
- Changes since 5.24.3:
  * kcms/users: Adjust for padding in overlay sheet (kde#451031)
  * [Media Controller] Explicitly set slider "to" before setting "value"
  * [Notifications] Fix implicit size propagation in SelectableLabel
  * applets/kicker: Skip creating KService for non-desktop files or folders (kde#442970)
  * Fix sleep/suspend sometimes not working ... from ksmserver-logout-greeter, by making the DBus calls synchronous.
  * kicker/actionlist: Ensure we parse the args for the jumplist actions (kde#451418)
  * libtaskmanager: recompute active task when a task is removed
  * sddm/lockscreen: Fix weird behaviour
  * [Notifications] Limit notification heading line count</changelog>
  <changelog author="Fushan Wen &lt;qydwhotmail@gmail.com&gt;" date="1656590400">- Fix a potential crash when deleting a panel with a system tray applet
  (kde#453726)
  * 0001-applets-systemtray-disconnect-KConfigLoader-signal-w.patch
- Fix a potential crash on logout (kde#454159)
  * 0001-Avoid-crash-in-plasma-session-teardown.patch</changelog>
</package>
<package pkgid="c0f0da5830ba1390e331a5ec7297b599ef31dd16f33216d9120d5139a9cd7086" name="plasma5-workspace-devel" arch="ppc64le">
  <version epoch="0" ver="5.24.4" rel="bp154.2.3.1"/>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1632312000">- Add patches from Plasma/5.23 branch:
  * 0001-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0002-shell-panel-Fix-ability-to-type-in-textfield.patch
  * 0003-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0004-PipeWire-Make-sure-thumbnails-properly-use-dmabuf-ag.patch
  * 0005-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0006-Klipper-Handle-incoming-UTF-8-mime-types.patch
  * 0007-Klipper-Guard-against-broken-data-fetches.patch
  * 0008-pipewire-Properly-compare-pipewire-versions-using-QV.patch
  * 0009-PipeWire-Include-defines-for-older-PipeWire-versions.patch
  * 0010-sddm-theme-fix-default-username-font-size.patch
- Add patch to fix XEmbed context menus (kde#442758)
  * 0011-Revert-xembed-adapt-to-changes-in-KNotifications.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1632484800">- Add patch to fix build with gpsd:
  * 0001-Fix-build-with-gpsd-3.23.1.patch
- Add patch to fix window thumbnails if dmabuf is not supported (kde#428284):
  * 0002-libtaskmanager-Don-t-request-dmabuf-if-not-supported.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1633608000">- Update to 5.23.0
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.0
- Changes since 5.22.90:
  * Revert "xembed: adapt to changes in KNotifications" (kde#442758)
  * sddm-theme: Fix using mouse movements to show the UI
  * [systemtray] Check for menuItemFactory.object existence (kde#443377)
  * applets/devicenotifier: Remove applet list item animations
  * sddm-theme: Fix use of needsPassword and related button layout
  * [klipper] Fix shortcut of OK button in the clipboard content edit dialog (kde#400623)
  * Fix Kickoff context menu actions for System Settings results (kde#442522)
  * klipper: Fix reading from plasma on wayland
  * Fix build with gpsd 3.23.1
  * Unbreak fontinst KCM (kde#442748)
  * Address regression in VT switching code (kde#442852)
  * libtaskmanager: Don't request dmabuf if not supported (kde#428284)
  * Port away from Kirigami.Units.devicePixelRatio
  * lookandfeel: don't nuke accent colour (kde#442812)
  * kcm/colors: Improve some bindings on accent colors
  * sddm-theme: fix default username font size
  * PipeWire: Include defines for older PipeWire versions
  * pipewire: Properly compare pipewire versions using QVersionNumber
  * [Klipper] Guard against broken data fetches
  * [Klipper] Handle incoming UTF-8 mime types (kde#424694)
  * PipeWire: Make sure thumbnails properly use dmabuf again
  * [shell/panel] Fix ability to type in textfield (kde#442557)
- Drop patches, now upstream:
  * 0001-Fix-build-with-gpsd-3.23.1.patch
  * 0001-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0002-libtaskmanager-Don-t-request-dmabuf-if-not-supported.patch
  * 0002-shell-panel-Fix-ability-to-type-in-textfield.patch
  * 0003-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0004-PipeWire-Make-sure-thumbnails-properly-use-dmabuf-ag.patch
  * 0005-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0006-Klipper-Handle-incoming-UTF-8-mime-types.patch
  * 0007-Klipper-Guard-against-broken-data-fetches.patch
  * 0008-pipewire-Properly-compare-pipewire-versions-using-QV.patch
  * 0009-PipeWire-Include-defines-for-older-PipeWire-versions.patch
  * 0010-sddm-theme-fix-default-username-font-size.patch
  * 0011-Revert-xembed-adapt-to-changes-in-KNotifications.patch
- Refresh 0001-Ignore-default-sddm-face-icons.patch
- Add new key + signature to plasma.keyring</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1634299200">- Add patch to show password input on the "Other" page in SDDM (kde#443737):
  * 0001-sddm-theme-fix-missing-password-field-on-Other-page.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1634644800">- Update to 5.23.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.1
- Changes since 5.23.0:
  * [freespacenotifier] impr: no notification for ro filesystems
  * kcms/colors: Don't apply header accent colors to non-Header color schemes (kde#443786)
  * [kcms/colors] Notify global settings change after saving
  * krdb: Fix removal of Xft.dpi from Xresources (kde#350039)
  * sddm-theme: fix missing password field on "Other" page (kde#443737)
  * pipewire: Report DRM_FORMAT_MOD_INVALID when no modifiers are offered
  * [digital-clock] Do not assign undefined when agenda is not visible (kde#443380)
- Drop patches, now upstream:
  * 0001-sddm-theme-fix-missing-password-field-on-Other-page.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1634817600">- Add back X11 root window properties until firefox is adjusted
  (boo#1191825):
  * 0001-Revert-Drop-setupX11-from-startplasma-waylandsession.patch
  * 0002-Revert-Drop-X11-root-properties-for-KDE-full-session.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1635249600">- Update to 5.23.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.2
- Changes since 5.23.1:
  * Hide KRunner window when pressing escape (kde#444240)
  * [applets/clipboard] Fix selecting clipboard entries with Enter
  * Set Qt.ImhNoPredictiveText for text fields that act as search fields
  * [shell] Ignore placeholder screens
- Add a version to BuildRequires: cmake(Breeze)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1636459200">- Update to 5.23.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.3
- Changes since 5.23.2:
  * fixed size hints to the osd
  * use implicit size to not cause binding loops (kde#422072)
  * wayland: don't create DesktopView for placeholder screen (kde#438839,kde#444801)
  * [startplasma] Detect systemd service in linked state
  * [Notifications] Fix grouping container side line
  * Disconnect watcher for xdgActivationTokenArrived (kde#444385)
  * interactiveconsole: Allow specifying mode from command line parameter</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1638273600">- Update to 5.23.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.4
- Changes since 5.23.3:
  * Lock &amp; login screens: Use RTL-friendly arrows when in RTL mode
  * [logout-greeter] Set window class name (kde#444898,kde#444899)
  * systemtray: Connect to StatusNotifierWatcher before initializing QDBusPendingReply
  * systemtray: Check if a service is already added before processing QDBusReply (kde#443961)
  * baloosearchruner: Emit DBus error when baloo is disabled (kde#445342)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1641297600">- Update to 5.23.5
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.5
- Changes since 5.23.4:
  * applets/systemtray: Follow panel opacity (kde#439025)
  * [webshortcutsrunner] Fix private browsing with some Firefoxes
  * [kcms/style] Don't call setNeedsSave when style config changes (kde#439297)
  * digital-clock: fix calendar popup contrast when opened from desktop (kde#446991)
  * [libnotificationmanager] Fix memory leak
  * [kcms/lookandfeel] Guard reading invalid first entry (kde#446100)
  * [Global Menu] Set translation domain
  * lookandfeel: Add missing check if list of files is empty (kde#439797)
  * [KSplash] Start with zero opacity
  * Fix Klipper Actions content truncation (kde#444365)
  * [klipper] Use full text for DBus return values (kde#446441)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1642075200">- Update to 5.23.90
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.90
- Too many changes to list here
- Rebase 0001-Use-qdbus-qt5.patch
- Replace xprop-kde-full-session.desktop with autostart file:
  * 0001-Revert-Drop-setupX11-from-startplasma-waylandsession.patch
  * 0002-Revert-Drop-X11-root-properties-for-KDE-full-session.patch
- Add patch to fix the upstream sddm theme background:
  * 0001-sddm-theme-Change-wallpaper-extension-so-that-it-poi.patch
- Add patch to fix screen sharing dialog (kde#448423):
  * 0001-systemdialogs-Remove-leftover-and-broken-components.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1642852800">- Add patch to fix initial focus in SDDM (kde#447817):
  * 0001-Make-SessionManagementScreen-a-FocusScope.patch
- Add patch to fix initial focus in the lockscreen:
  * 0001-Fix-initial-focus-in-LockScreenUi.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1644062400">- Update to 5.24.0
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.0
- Too many changes to list here
- Drop patches, now upstream:
  * 0001-sddm-theme-Change-wallpaper-extension-so-that-it-poi.patch
  * 0001-systemdialogs-Remove-leftover-and-broken-components.patch
  * 0001-Make-SessionManagementScreen-a-FocusScope.patch
  * 0001-Fix-initial-focus-in-LockScreenUi.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1644926400">- Update to 5.24.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.1
- Changes since 5.24.0:
  * Move to runtime check of valid font DPI (kde#449918)
  * applets/battery: adjust show/hide conditions for charge limits (kde#435931)
  * applets/systemtray: fix SNI context menu usage without libappindicator (kde#449870)
  * applets/notifications: Increase implicit size of standalone popup (kde#448383)
  * applets-digital/clock: Add workaround for QTBUG-83890 (kde#448387)
  * Clean up "empty" mimeType containg only whitespaces
  * dataengines/apps: Use KIO::ApplicationLauncherJob for starting KService
  * [containmentactions/applauncher] Use ApplicationLauncherJob instead of OpenUrlJob (kde#449900)
  * Desktop: Still show services with nodisplay=true set (kde#449243)
  * appstream runner: De-duplicate results from multiple sources (kde#448619)
  * Fix ksplash always using default theme. (kde#446966)
  * kcms/users: Fix missing template arguments before reply in FingerprintModel
  * De-duplicate 'Uninstall or manage addons' option in the context menu of Kickoff (kde#448564)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1645531200">- Update to 5.24.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.2
- Changes since 5.24.1:
  * applets/clipboard: Focus on the search field for the first time opening the applet
  * applets/clipboard: Make Up/Down arrow keys work in ClipboardPage (kde#448811,kde#450040)
  * applets/panelspacer: Fix optimal size calculation (kde#431668)
  * Fix overdraw on Wayland
  * PanelView: Do not crash when the state is transitioning (kde#373461)
  * Fix launch kscreen kcm in font kcm.
  * Don't install two copies of kcm_fontinst
  * Lock/login themes: stop adjusting shadows based on color scheme (kde#449985)
  * Top-align lock/login/logout screen action buttons (kde#450238)
  * [kcms/user] Set interactive auth flag for more calls (kde#450122)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1645704000">- Add patch to fix log output of some processes (boo#1196206):
  * 0001-startkde-Forward-stdout-stderr-of-started-processes.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1646654400">- Replace %_libdir/libexec with %_libexecdir (boo#1174075)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1646740800">- Update to 5.24.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.3
- Changes since 5.24.2:
  * kcms/colors: Implement radio button layouts better
  * kcms/colors: fix spacing between radio buttons and content
  * [Battery Monitor] Only show charge threshold hint for power supply batteries (kde#451161)
  * [Icons KCM] Give measure delegate a text
  * wallpapers: Sort BackgroundListModel by title
  * applets/digital-clock: Fix `Qt.formatDateTime` returns different date when minute changes (kde#436796)
  * applets/systray: align applet labels with differing line counts in hidden view (kde#438347)
  * Show panel config above other windows (kde#450794)
  * Use current accent colour to set ColorDialog object in colour picker
  * SystemDialog: Allow accepting the dialogs with the keyboard (kde#450223)
  * applets/systemtray: Do not open context menu on mouse pressed for SNI (kde#409768)
  * Revert "Fix overdraw on Wayland"
  * startkde: Forward stdout/stderr of started processes
  * SDDM theme: stop eliding people's names so aggressively (kde#450673)
  * applets/digital-clock: Word-wrap date string for desktop representation (kde#450632)
  * wrap completely the invariants timer in NDEBUG
  * ScreenPool as the source of truth of QScreen info
  * Always ensure there is an user selected (kde#450182)
  * Prevent panel going out of screen boundaries
  * applets/clipboard: Focus on text area when transition is done
  * applets/clipboard: Fix highlight after exiting edit mode
- Drop patches, now upstream:
  * 0001-startkde-Forward-stdout-stderr-of-started-processes.patch
- Restore compatibility with older kf5-filesystem</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1648555200">- Update to 5.24.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.4
- Changes since 5.24.3:
  * kcms/users: Adjust for padding in overlay sheet (kde#451031)
  * [Media Controller] Explicitly set slider "to" before setting "value"
  * [Notifications] Fix implicit size propagation in SelectableLabel
  * applets/kicker: Skip creating KService for non-desktop files or folders (kde#442970)
  * Fix sleep/suspend sometimes not working ... from ksmserver-logout-greeter, by making the DBus calls synchronous.
  * kicker/actionlist: Ensure we parse the args for the jumplist actions (kde#451418)
  * libtaskmanager: recompute active task when a task is removed
  * sddm/lockscreen: Fix weird behaviour
  * [Notifications] Limit notification heading line count</changelog>
  <changelog author="Fushan Wen &lt;qydwhotmail@gmail.com&gt;" date="1656590400">- Fix a potential crash when deleting a panel with a system tray applet
  (kde#453726)
  * 0001-applets-systemtray-disconnect-KConfigLoader-signal-w.patch
- Fix a potential crash on logout (kde#454159)
  * 0001-Avoid-crash-in-plasma-session-teardown.patch</changelog>
</package>
<package pkgid="dc1d3fbd6662cc79d76f645debd00de6d1f84cfecc89bd13c3478a4471610f6e" name="plasma5-workspace-devel" arch="x86_64">
  <version epoch="0" ver="5.24.4" rel="bp154.2.3.1"/>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1632312000">- Add patches from Plasma/5.23 branch:
  * 0001-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0002-shell-panel-Fix-ability-to-type-in-textfield.patch
  * 0003-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0004-PipeWire-Make-sure-thumbnails-properly-use-dmabuf-ag.patch
  * 0005-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0006-Klipper-Handle-incoming-UTF-8-mime-types.patch
  * 0007-Klipper-Guard-against-broken-data-fetches.patch
  * 0008-pipewire-Properly-compare-pipewire-versions-using-QV.patch
  * 0009-PipeWire-Include-defines-for-older-PipeWire-versions.patch
  * 0010-sddm-theme-fix-default-username-font-size.patch
- Add patch to fix XEmbed context menus (kde#442758)
  * 0011-Revert-xembed-adapt-to-changes-in-KNotifications.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1632484800">- Add patch to fix build with gpsd:
  * 0001-Fix-build-with-gpsd-3.23.1.patch
- Add patch to fix window thumbnails if dmabuf is not supported (kde#428284):
  * 0002-libtaskmanager-Don-t-request-dmabuf-if-not-supported.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1633608000">- Update to 5.23.0
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.0
- Changes since 5.22.90:
  * Revert "xembed: adapt to changes in KNotifications" (kde#442758)
  * sddm-theme: Fix using mouse movements to show the UI
  * [systemtray] Check for menuItemFactory.object existence (kde#443377)
  * applets/devicenotifier: Remove applet list item animations
  * sddm-theme: Fix use of needsPassword and related button layout
  * [klipper] Fix shortcut of OK button in the clipboard content edit dialog (kde#400623)
  * Fix Kickoff context menu actions for System Settings results (kde#442522)
  * klipper: Fix reading from plasma on wayland
  * Fix build with gpsd 3.23.1
  * Unbreak fontinst KCM (kde#442748)
  * Address regression in VT switching code (kde#442852)
  * libtaskmanager: Don't request dmabuf if not supported (kde#428284)
  * Port away from Kirigami.Units.devicePixelRatio
  * lookandfeel: don't nuke accent colour (kde#442812)
  * kcm/colors: Improve some bindings on accent colors
  * sddm-theme: fix default username font size
  * PipeWire: Include defines for older PipeWire versions
  * pipewire: Properly compare pipewire versions using QVersionNumber
  * [Klipper] Guard against broken data fetches
  * [Klipper] Handle incoming UTF-8 mime types (kde#424694)
  * PipeWire: Make sure thumbnails properly use dmabuf again
  * [shell/panel] Fix ability to type in textfield (kde#442557)
- Drop patches, now upstream:
  * 0001-Fix-build-with-gpsd-3.23.1.patch
  * 0001-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0002-libtaskmanager-Don-t-request-dmabuf-if-not-supported.patch
  * 0002-shell-panel-Fix-ability-to-type-in-textfield.patch
  * 0003-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0004-PipeWire-Make-sure-thumbnails-properly-use-dmabuf-ag.patch
  * 0005-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0006-Klipper-Handle-incoming-UTF-8-mime-types.patch
  * 0007-Klipper-Guard-against-broken-data-fetches.patch
  * 0008-pipewire-Properly-compare-pipewire-versions-using-QV.patch
  * 0009-PipeWire-Include-defines-for-older-PipeWire-versions.patch
  * 0010-sddm-theme-fix-default-username-font-size.patch
  * 0011-Revert-xembed-adapt-to-changes-in-KNotifications.patch
- Refresh 0001-Ignore-default-sddm-face-icons.patch
- Add new key + signature to plasma.keyring</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1634299200">- Add patch to show password input on the "Other" page in SDDM (kde#443737):
  * 0001-sddm-theme-fix-missing-password-field-on-Other-page.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1634644800">- Update to 5.23.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.1
- Changes since 5.23.0:
  * [freespacenotifier] impr: no notification for ro filesystems
  * kcms/colors: Don't apply header accent colors to non-Header color schemes (kde#443786)
  * [kcms/colors] Notify global settings change after saving
  * krdb: Fix removal of Xft.dpi from Xresources (kde#350039)
  * sddm-theme: fix missing password field on "Other" page (kde#443737)
  * pipewire: Report DRM_FORMAT_MOD_INVALID when no modifiers are offered
  * [digital-clock] Do not assign undefined when agenda is not visible (kde#443380)
- Drop patches, now upstream:
  * 0001-sddm-theme-fix-missing-password-field-on-Other-page.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1634817600">- Add back X11 root window properties until firefox is adjusted
  (boo#1191825):
  * 0001-Revert-Drop-setupX11-from-startplasma-waylandsession.patch
  * 0002-Revert-Drop-X11-root-properties-for-KDE-full-session.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1635249600">- Update to 5.23.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.2
- Changes since 5.23.1:
  * Hide KRunner window when pressing escape (kde#444240)
  * [applets/clipboard] Fix selecting clipboard entries with Enter
  * Set Qt.ImhNoPredictiveText for text fields that act as search fields
  * [shell] Ignore placeholder screens
- Add a version to BuildRequires: cmake(Breeze)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1636459200">- Update to 5.23.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.3
- Changes since 5.23.2:
  * fixed size hints to the osd
  * use implicit size to not cause binding loops (kde#422072)
  * wayland: don't create DesktopView for placeholder screen (kde#438839,kde#444801)
  * [startplasma] Detect systemd service in linked state
  * [Notifications] Fix grouping container side line
  * Disconnect watcher for xdgActivationTokenArrived (kde#444385)
  * interactiveconsole: Allow specifying mode from command line parameter</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1638273600">- Update to 5.23.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.4
- Changes since 5.23.3:
  * Lock &amp; login screens: Use RTL-friendly arrows when in RTL mode
  * [logout-greeter] Set window class name (kde#444898,kde#444899)
  * systemtray: Connect to StatusNotifierWatcher before initializing QDBusPendingReply
  * systemtray: Check if a service is already added before processing QDBusReply (kde#443961)
  * baloosearchruner: Emit DBus error when baloo is disabled (kde#445342)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1641297600">- Update to 5.23.5
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.5
- Changes since 5.23.4:
  * applets/systemtray: Follow panel opacity (kde#439025)
  * [webshortcutsrunner] Fix private browsing with some Firefoxes
  * [kcms/style] Don't call setNeedsSave when style config changes (kde#439297)
  * digital-clock: fix calendar popup contrast when opened from desktop (kde#446991)
  * [libnotificationmanager] Fix memory leak
  * [kcms/lookandfeel] Guard reading invalid first entry (kde#446100)
  * [Global Menu] Set translation domain
  * lookandfeel: Add missing check if list of files is empty (kde#439797)
  * [KSplash] Start with zero opacity
  * Fix Klipper Actions content truncation (kde#444365)
  * [klipper] Use full text for DBus return values (kde#446441)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1642075200">- Update to 5.23.90
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.90
- Too many changes to list here
- Rebase 0001-Use-qdbus-qt5.patch
- Replace xprop-kde-full-session.desktop with autostart file:
  * 0001-Revert-Drop-setupX11-from-startplasma-waylandsession.patch
  * 0002-Revert-Drop-X11-root-properties-for-KDE-full-session.patch
- Add patch to fix the upstream sddm theme background:
  * 0001-sddm-theme-Change-wallpaper-extension-so-that-it-poi.patch
- Add patch to fix screen sharing dialog (kde#448423):
  * 0001-systemdialogs-Remove-leftover-and-broken-components.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1642852800">- Add patch to fix initial focus in SDDM (kde#447817):
  * 0001-Make-SessionManagementScreen-a-FocusScope.patch
- Add patch to fix initial focus in the lockscreen:
  * 0001-Fix-initial-focus-in-LockScreenUi.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1644062400">- Update to 5.24.0
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.0
- Too many changes to list here
- Drop patches, now upstream:
  * 0001-sddm-theme-Change-wallpaper-extension-so-that-it-poi.patch
  * 0001-systemdialogs-Remove-leftover-and-broken-components.patch
  * 0001-Make-SessionManagementScreen-a-FocusScope.patch
  * 0001-Fix-initial-focus-in-LockScreenUi.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1644926400">- Update to 5.24.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.1
- Changes since 5.24.0:
  * Move to runtime check of valid font DPI (kde#449918)
  * applets/battery: adjust show/hide conditions for charge limits (kde#435931)
  * applets/systemtray: fix SNI context menu usage without libappindicator (kde#449870)
  * applets/notifications: Increase implicit size of standalone popup (kde#448383)
  * applets-digital/clock: Add workaround for QTBUG-83890 (kde#448387)
  * Clean up "empty" mimeType containg only whitespaces
  * dataengines/apps: Use KIO::ApplicationLauncherJob for starting KService
  * [containmentactions/applauncher] Use ApplicationLauncherJob instead of OpenUrlJob (kde#449900)
  * Desktop: Still show services with nodisplay=true set (kde#449243)
  * appstream runner: De-duplicate results from multiple sources (kde#448619)
  * Fix ksplash always using default theme. (kde#446966)
  * kcms/users: Fix missing template arguments before reply in FingerprintModel
  * De-duplicate 'Uninstall or manage addons' option in the context menu of Kickoff (kde#448564)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1645531200">- Update to 5.24.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.2
- Changes since 5.24.1:
  * applets/clipboard: Focus on the search field for the first time opening the applet
  * applets/clipboard: Make Up/Down arrow keys work in ClipboardPage (kde#448811,kde#450040)
  * applets/panelspacer: Fix optimal size calculation (kde#431668)
  * Fix overdraw on Wayland
  * PanelView: Do not crash when the state is transitioning (kde#373461)
  * Fix launch kscreen kcm in font kcm.
  * Don't install two copies of kcm_fontinst
  * Lock/login themes: stop adjusting shadows based on color scheme (kde#449985)
  * Top-align lock/login/logout screen action buttons (kde#450238)
  * [kcms/user] Set interactive auth flag for more calls (kde#450122)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1645704000">- Add patch to fix log output of some processes (boo#1196206):
  * 0001-startkde-Forward-stdout-stderr-of-started-processes.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1646654400">- Replace %_libdir/libexec with %_libexecdir (boo#1174075)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1646740800">- Update to 5.24.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.3
- Changes since 5.24.2:
  * kcms/colors: Implement radio button layouts better
  * kcms/colors: fix spacing between radio buttons and content
  * [Battery Monitor] Only show charge threshold hint for power supply batteries (kde#451161)
  * [Icons KCM] Give measure delegate a text
  * wallpapers: Sort BackgroundListModel by title
  * applets/digital-clock: Fix `Qt.formatDateTime` returns different date when minute changes (kde#436796)
  * applets/systray: align applet labels with differing line counts in hidden view (kde#438347)
  * Show panel config above other windows (kde#450794)
  * Use current accent colour to set ColorDialog object in colour picker
  * SystemDialog: Allow accepting the dialogs with the keyboard (kde#450223)
  * applets/systemtray: Do not open context menu on mouse pressed for SNI (kde#409768)
  * Revert "Fix overdraw on Wayland"
  * startkde: Forward stdout/stderr of started processes
  * SDDM theme: stop eliding people's names so aggressively (kde#450673)
  * applets/digital-clock: Word-wrap date string for desktop representation (kde#450632)
  * wrap completely the invariants timer in NDEBUG
  * ScreenPool as the source of truth of QScreen info
  * Always ensure there is an user selected (kde#450182)
  * Prevent panel going out of screen boundaries
  * applets/clipboard: Focus on text area when transition is done
  * applets/clipboard: Fix highlight after exiting edit mode
- Drop patches, now upstream:
  * 0001-startkde-Forward-stdout-stderr-of-started-processes.patch
- Restore compatibility with older kf5-filesystem</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1648555200">- Update to 5.24.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.4
- Changes since 5.24.3:
  * kcms/users: Adjust for padding in overlay sheet (kde#451031)
  * [Media Controller] Explicitly set slider "to" before setting "value"
  * [Notifications] Fix implicit size propagation in SelectableLabel
  * applets/kicker: Skip creating KService for non-desktop files or folders (kde#442970)
  * Fix sleep/suspend sometimes not working ... from ksmserver-logout-greeter, by making the DBus calls synchronous.
  * kicker/actionlist: Ensure we parse the args for the jumplist actions (kde#451418)
  * libtaskmanager: recompute active task when a task is removed
  * sddm/lockscreen: Fix weird behaviour
  * [Notifications] Limit notification heading line count</changelog>
  <changelog author="Fushan Wen &lt;qydwhotmail@gmail.com&gt;" date="1656590400">- Fix a potential crash when deleting a panel with a system tray applet
  (kde#453726)
  * 0001-applets-systemtray-disconnect-KConfigLoader-signal-w.patch
- Fix a potential crash on logout (kde#454159)
  * 0001-Avoid-crash-in-plasma-session-teardown.patch</changelog>
</package>
<package pkgid="6fba7eba83e695852e7628984b99e005ff890cfcd18faf20df754d1ae4cad862" name="plasma5-workspace-lang" arch="noarch">
  <version epoch="0" ver="5.24.4" rel="bp154.2.3.1"/>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1632312000">- Add patches from Plasma/5.23 branch:
  * 0001-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0002-shell-panel-Fix-ability-to-type-in-textfield.patch
  * 0003-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0004-PipeWire-Make-sure-thumbnails-properly-use-dmabuf-ag.patch
  * 0005-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0006-Klipper-Handle-incoming-UTF-8-mime-types.patch
  * 0007-Klipper-Guard-against-broken-data-fetches.patch
  * 0008-pipewire-Properly-compare-pipewire-versions-using-QV.patch
  * 0009-PipeWire-Include-defines-for-older-PipeWire-versions.patch
  * 0010-sddm-theme-fix-default-username-font-size.patch
- Add patch to fix XEmbed context menus (kde#442758)
  * 0011-Revert-xembed-adapt-to-changes-in-KNotifications.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1632484800">- Add patch to fix build with gpsd:
  * 0001-Fix-build-with-gpsd-3.23.1.patch
- Add patch to fix window thumbnails if dmabuf is not supported (kde#428284):
  * 0002-libtaskmanager-Don-t-request-dmabuf-if-not-supported.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1633608000">- Update to 5.23.0
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.0
- Changes since 5.22.90:
  * Revert "xembed: adapt to changes in KNotifications" (kde#442758)
  * sddm-theme: Fix using mouse movements to show the UI
  * [systemtray] Check for menuItemFactory.object existence (kde#443377)
  * applets/devicenotifier: Remove applet list item animations
  * sddm-theme: Fix use of needsPassword and related button layout
  * [klipper] Fix shortcut of OK button in the clipboard content edit dialog (kde#400623)
  * Fix Kickoff context menu actions for System Settings results (kde#442522)
  * klipper: Fix reading from plasma on wayland
  * Fix build with gpsd 3.23.1
  * Unbreak fontinst KCM (kde#442748)
  * Address regression in VT switching code (kde#442852)
  * libtaskmanager: Don't request dmabuf if not supported (kde#428284)
  * Port away from Kirigami.Units.devicePixelRatio
  * lookandfeel: don't nuke accent colour (kde#442812)
  * kcm/colors: Improve some bindings on accent colors
  * sddm-theme: fix default username font size
  * PipeWire: Include defines for older PipeWire versions
  * pipewire: Properly compare pipewire versions using QVersionNumber
  * [Klipper] Guard against broken data fetches
  * [Klipper] Handle incoming UTF-8 mime types (kde#424694)
  * PipeWire: Make sure thumbnails properly use dmabuf again
  * [shell/panel] Fix ability to type in textfield (kde#442557)
- Drop patches, now upstream:
  * 0001-Fix-build-with-gpsd-3.23.1.patch
  * 0001-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0002-libtaskmanager-Don-t-request-dmabuf-if-not-supported.patch
  * 0002-shell-panel-Fix-ability-to-type-in-textfield.patch
  * 0003-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0004-PipeWire-Make-sure-thumbnails-properly-use-dmabuf-ag.patch
  * 0005-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0006-Klipper-Handle-incoming-UTF-8-mime-types.patch
  * 0007-Klipper-Guard-against-broken-data-fetches.patch
  * 0008-pipewire-Properly-compare-pipewire-versions-using-QV.patch
  * 0009-PipeWire-Include-defines-for-older-PipeWire-versions.patch
  * 0010-sddm-theme-fix-default-username-font-size.patch
  * 0011-Revert-xembed-adapt-to-changes-in-KNotifications.patch
- Refresh 0001-Ignore-default-sddm-face-icons.patch
- Add new key + signature to plasma.keyring</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1634299200">- Add patch to show password input on the "Other" page in SDDM (kde#443737):
  * 0001-sddm-theme-fix-missing-password-field-on-Other-page.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1634644800">- Update to 5.23.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.1
- Changes since 5.23.0:
  * [freespacenotifier] impr: no notification for ro filesystems
  * kcms/colors: Don't apply header accent colors to non-Header color schemes (kde#443786)
  * [kcms/colors] Notify global settings change after saving
  * krdb: Fix removal of Xft.dpi from Xresources (kde#350039)
  * sddm-theme: fix missing password field on "Other" page (kde#443737)
  * pipewire: Report DRM_FORMAT_MOD_INVALID when no modifiers are offered
  * [digital-clock] Do not assign undefined when agenda is not visible (kde#443380)
- Drop patches, now upstream:
  * 0001-sddm-theme-fix-missing-password-field-on-Other-page.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1634817600">- Add back X11 root window properties until firefox is adjusted
  (boo#1191825):
  * 0001-Revert-Drop-setupX11-from-startplasma-waylandsession.patch
  * 0002-Revert-Drop-X11-root-properties-for-KDE-full-session.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1635249600">- Update to 5.23.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.2
- Changes since 5.23.1:
  * Hide KRunner window when pressing escape (kde#444240)
  * [applets/clipboard] Fix selecting clipboard entries with Enter
  * Set Qt.ImhNoPredictiveText for text fields that act as search fields
  * [shell] Ignore placeholder screens
- Add a version to BuildRequires: cmake(Breeze)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1636459200">- Update to 5.23.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.3
- Changes since 5.23.2:
  * fixed size hints to the osd
  * use implicit size to not cause binding loops (kde#422072)
  * wayland: don't create DesktopView for placeholder screen (kde#438839,kde#444801)
  * [startplasma] Detect systemd service in linked state
  * [Notifications] Fix grouping container side line
  * Disconnect watcher for xdgActivationTokenArrived (kde#444385)
  * interactiveconsole: Allow specifying mode from command line parameter</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1638273600">- Update to 5.23.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.4
- Changes since 5.23.3:
  * Lock &amp; login screens: Use RTL-friendly arrows when in RTL mode
  * [logout-greeter] Set window class name (kde#444898,kde#444899)
  * systemtray: Connect to StatusNotifierWatcher before initializing QDBusPendingReply
  * systemtray: Check if a service is already added before processing QDBusReply (kde#443961)
  * baloosearchruner: Emit DBus error when baloo is disabled (kde#445342)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1641297600">- Update to 5.23.5
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.5
- Changes since 5.23.4:
  * applets/systemtray: Follow panel opacity (kde#439025)
  * [webshortcutsrunner] Fix private browsing with some Firefoxes
  * [kcms/style] Don't call setNeedsSave when style config changes (kde#439297)
  * digital-clock: fix calendar popup contrast when opened from desktop (kde#446991)
  * [libnotificationmanager] Fix memory leak
  * [kcms/lookandfeel] Guard reading invalid first entry (kde#446100)
  * [Global Menu] Set translation domain
  * lookandfeel: Add missing check if list of files is empty (kde#439797)
  * [KSplash] Start with zero opacity
  * Fix Klipper Actions content truncation (kde#444365)
  * [klipper] Use full text for DBus return values (kde#446441)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1642075200">- Update to 5.23.90
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.90
- Too many changes to list here
- Rebase 0001-Use-qdbus-qt5.patch
- Replace xprop-kde-full-session.desktop with autostart file:
  * 0001-Revert-Drop-setupX11-from-startplasma-waylandsession.patch
  * 0002-Revert-Drop-X11-root-properties-for-KDE-full-session.patch
- Add patch to fix the upstream sddm theme background:
  * 0001-sddm-theme-Change-wallpaper-extension-so-that-it-poi.patch
- Add patch to fix screen sharing dialog (kde#448423):
  * 0001-systemdialogs-Remove-leftover-and-broken-components.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1642852800">- Add patch to fix initial focus in SDDM (kde#447817):
  * 0001-Make-SessionManagementScreen-a-FocusScope.patch
- Add patch to fix initial focus in the lockscreen:
  * 0001-Fix-initial-focus-in-LockScreenUi.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1644062400">- Update to 5.24.0
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.0
- Too many changes to list here
- Drop patches, now upstream:
  * 0001-sddm-theme-Change-wallpaper-extension-so-that-it-poi.patch
  * 0001-systemdialogs-Remove-leftover-and-broken-components.patch
  * 0001-Make-SessionManagementScreen-a-FocusScope.patch
  * 0001-Fix-initial-focus-in-LockScreenUi.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1644926400">- Update to 5.24.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.1
- Changes since 5.24.0:
  * Move to runtime check of valid font DPI (kde#449918)
  * applets/battery: adjust show/hide conditions for charge limits (kde#435931)
  * applets/systemtray: fix SNI context menu usage without libappindicator (kde#449870)
  * applets/notifications: Increase implicit size of standalone popup (kde#448383)
  * applets-digital/clock: Add workaround for QTBUG-83890 (kde#448387)
  * Clean up "empty" mimeType containg only whitespaces
  * dataengines/apps: Use KIO::ApplicationLauncherJob for starting KService
  * [containmentactions/applauncher] Use ApplicationLauncherJob instead of OpenUrlJob (kde#449900)
  * Desktop: Still show services with nodisplay=true set (kde#449243)
  * appstream runner: De-duplicate results from multiple sources (kde#448619)
  * Fix ksplash always using default theme. (kde#446966)
  * kcms/users: Fix missing template arguments before reply in FingerprintModel
  * De-duplicate 'Uninstall or manage addons' option in the context menu of Kickoff (kde#448564)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1645531200">- Update to 5.24.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.2
- Changes since 5.24.1:
  * applets/clipboard: Focus on the search field for the first time opening the applet
  * applets/clipboard: Make Up/Down arrow keys work in ClipboardPage (kde#448811,kde#450040)
  * applets/panelspacer: Fix optimal size calculation (kde#431668)
  * Fix overdraw on Wayland
  * PanelView: Do not crash when the state is transitioning (kde#373461)
  * Fix launch kscreen kcm in font kcm.
  * Don't install two copies of kcm_fontinst
  * Lock/login themes: stop adjusting shadows based on color scheme (kde#449985)
  * Top-align lock/login/logout screen action buttons (kde#450238)
  * [kcms/user] Set interactive auth flag for more calls (kde#450122)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1645704000">- Add patch to fix log output of some processes (boo#1196206):
  * 0001-startkde-Forward-stdout-stderr-of-started-processes.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1646654400">- Replace %_libdir/libexec with %_libexecdir (boo#1174075)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1646740800">- Update to 5.24.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.3
- Changes since 5.24.2:
  * kcms/colors: Implement radio button layouts better
  * kcms/colors: fix spacing between radio buttons and content
  * [Battery Monitor] Only show charge threshold hint for power supply batteries (kde#451161)
  * [Icons KCM] Give measure delegate a text
  * wallpapers: Sort BackgroundListModel by title
  * applets/digital-clock: Fix `Qt.formatDateTime` returns different date when minute changes (kde#436796)
  * applets/systray: align applet labels with differing line counts in hidden view (kde#438347)
  * Show panel config above other windows (kde#450794)
  * Use current accent colour to set ColorDialog object in colour picker
  * SystemDialog: Allow accepting the dialogs with the keyboard (kde#450223)
  * applets/systemtray: Do not open context menu on mouse pressed for SNI (kde#409768)
  * Revert "Fix overdraw on Wayland"
  * startkde: Forward stdout/stderr of started processes
  * SDDM theme: stop eliding people's names so aggressively (kde#450673)
  * applets/digital-clock: Word-wrap date string for desktop representation (kde#450632)
  * wrap completely the invariants timer in NDEBUG
  * ScreenPool as the source of truth of QScreen info
  * Always ensure there is an user selected (kde#450182)
  * Prevent panel going out of screen boundaries
  * applets/clipboard: Focus on text area when transition is done
  * applets/clipboard: Fix highlight after exiting edit mode
- Drop patches, now upstream:
  * 0001-startkde-Forward-stdout-stderr-of-started-processes.patch
- Restore compatibility with older kf5-filesystem</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1648555200">- Update to 5.24.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.4
- Changes since 5.24.3:
  * kcms/users: Adjust for padding in overlay sheet (kde#451031)
  * [Media Controller] Explicitly set slider "to" before setting "value"
  * [Notifications] Fix implicit size propagation in SelectableLabel
  * applets/kicker: Skip creating KService for non-desktop files or folders (kde#442970)
  * Fix sleep/suspend sometimes not working ... from ksmserver-logout-greeter, by making the DBus calls synchronous.
  * kicker/actionlist: Ensure we parse the args for the jumplist actions (kde#451418)
  * libtaskmanager: recompute active task when a task is removed
  * sddm/lockscreen: Fix weird behaviour
  * [Notifications] Limit notification heading line count</changelog>
  <changelog author="Fushan Wen &lt;qydwhotmail@gmail.com&gt;" date="1656590400">- Fix a potential crash when deleting a panel with a system tray applet
  (kde#453726)
  * 0001-applets-systemtray-disconnect-KConfigLoader-signal-w.patch
- Fix a potential crash on logout (kde#454159)
  * 0001-Avoid-crash-in-plasma-session-teardown.patch</changelog>
</package>
<package pkgid="c0682efba997578f9f0f483cb5c4c96229f00694f53f2de449bd187f65d96458" name="plasma5-workspace-libs" arch="aarch64">
  <version epoch="0" ver="5.24.4" rel="bp154.2.3.1"/>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1632312000">- Add patches from Plasma/5.23 branch:
  * 0001-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0002-shell-panel-Fix-ability-to-type-in-textfield.patch
  * 0003-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0004-PipeWire-Make-sure-thumbnails-properly-use-dmabuf-ag.patch
  * 0005-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0006-Klipper-Handle-incoming-UTF-8-mime-types.patch
  * 0007-Klipper-Guard-against-broken-data-fetches.patch
  * 0008-pipewire-Properly-compare-pipewire-versions-using-QV.patch
  * 0009-PipeWire-Include-defines-for-older-PipeWire-versions.patch
  * 0010-sddm-theme-fix-default-username-font-size.patch
- Add patch to fix XEmbed context menus (kde#442758)
  * 0011-Revert-xembed-adapt-to-changes-in-KNotifications.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1632484800">- Add patch to fix build with gpsd:
  * 0001-Fix-build-with-gpsd-3.23.1.patch
- Add patch to fix window thumbnails if dmabuf is not supported (kde#428284):
  * 0002-libtaskmanager-Don-t-request-dmabuf-if-not-supported.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1633608000">- Update to 5.23.0
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.0
- Changes since 5.22.90:
  * Revert "xembed: adapt to changes in KNotifications" (kde#442758)
  * sddm-theme: Fix using mouse movements to show the UI
  * [systemtray] Check for menuItemFactory.object existence (kde#443377)
  * applets/devicenotifier: Remove applet list item animations
  * sddm-theme: Fix use of needsPassword and related button layout
  * [klipper] Fix shortcut of OK button in the clipboard content edit dialog (kde#400623)
  * Fix Kickoff context menu actions for System Settings results (kde#442522)
  * klipper: Fix reading from plasma on wayland
  * Fix build with gpsd 3.23.1
  * Unbreak fontinst KCM (kde#442748)
  * Address regression in VT switching code (kde#442852)
  * libtaskmanager: Don't request dmabuf if not supported (kde#428284)
  * Port away from Kirigami.Units.devicePixelRatio
  * lookandfeel: don't nuke accent colour (kde#442812)
  * kcm/colors: Improve some bindings on accent colors
  * sddm-theme: fix default username font size
  * PipeWire: Include defines for older PipeWire versions
  * pipewire: Properly compare pipewire versions using QVersionNumber
  * [Klipper] Guard against broken data fetches
  * [Klipper] Handle incoming UTF-8 mime types (kde#424694)
  * PipeWire: Make sure thumbnails properly use dmabuf again
  * [shell/panel] Fix ability to type in textfield (kde#442557)
- Drop patches, now upstream:
  * 0001-Fix-build-with-gpsd-3.23.1.patch
  * 0001-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0002-libtaskmanager-Don-t-request-dmabuf-if-not-supported.patch
  * 0002-shell-panel-Fix-ability-to-type-in-textfield.patch
  * 0003-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0004-PipeWire-Make-sure-thumbnails-properly-use-dmabuf-ag.patch
  * 0005-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0006-Klipper-Handle-incoming-UTF-8-mime-types.patch
  * 0007-Klipper-Guard-against-broken-data-fetches.patch
  * 0008-pipewire-Properly-compare-pipewire-versions-using-QV.patch
  * 0009-PipeWire-Include-defines-for-older-PipeWire-versions.patch
  * 0010-sddm-theme-fix-default-username-font-size.patch
  * 0011-Revert-xembed-adapt-to-changes-in-KNotifications.patch
- Refresh 0001-Ignore-default-sddm-face-icons.patch
- Add new key + signature to plasma.keyring</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1634299200">- Add patch to show password input on the "Other" page in SDDM (kde#443737):
  * 0001-sddm-theme-fix-missing-password-field-on-Other-page.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1634644800">- Update to 5.23.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.1
- Changes since 5.23.0:
  * [freespacenotifier] impr: no notification for ro filesystems
  * kcms/colors: Don't apply header accent colors to non-Header color schemes (kde#443786)
  * [kcms/colors] Notify global settings change after saving
  * krdb: Fix removal of Xft.dpi from Xresources (kde#350039)
  * sddm-theme: fix missing password field on "Other" page (kde#443737)
  * pipewire: Report DRM_FORMAT_MOD_INVALID when no modifiers are offered
  * [digital-clock] Do not assign undefined when agenda is not visible (kde#443380)
- Drop patches, now upstream:
  * 0001-sddm-theme-fix-missing-password-field-on-Other-page.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1634817600">- Add back X11 root window properties until firefox is adjusted
  (boo#1191825):
  * 0001-Revert-Drop-setupX11-from-startplasma-waylandsession.patch
  * 0002-Revert-Drop-X11-root-properties-for-KDE-full-session.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1635249600">- Update to 5.23.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.2
- Changes since 5.23.1:
  * Hide KRunner window when pressing escape (kde#444240)
  * [applets/clipboard] Fix selecting clipboard entries with Enter
  * Set Qt.ImhNoPredictiveText for text fields that act as search fields
  * [shell] Ignore placeholder screens
- Add a version to BuildRequires: cmake(Breeze)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1636459200">- Update to 5.23.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.3
- Changes since 5.23.2:
  * fixed size hints to the osd
  * use implicit size to not cause binding loops (kde#422072)
  * wayland: don't create DesktopView for placeholder screen (kde#438839,kde#444801)
  * [startplasma] Detect systemd service in linked state
  * [Notifications] Fix grouping container side line
  * Disconnect watcher for xdgActivationTokenArrived (kde#444385)
  * interactiveconsole: Allow specifying mode from command line parameter</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1638273600">- Update to 5.23.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.4
- Changes since 5.23.3:
  * Lock &amp; login screens: Use RTL-friendly arrows when in RTL mode
  * [logout-greeter] Set window class name (kde#444898,kde#444899)
  * systemtray: Connect to StatusNotifierWatcher before initializing QDBusPendingReply
  * systemtray: Check if a service is already added before processing QDBusReply (kde#443961)
  * baloosearchruner: Emit DBus error when baloo is disabled (kde#445342)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1641297600">- Update to 5.23.5
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.5
- Changes since 5.23.4:
  * applets/systemtray: Follow panel opacity (kde#439025)
  * [webshortcutsrunner] Fix private browsing with some Firefoxes
  * [kcms/style] Don't call setNeedsSave when style config changes (kde#439297)
  * digital-clock: fix calendar popup contrast when opened from desktop (kde#446991)
  * [libnotificationmanager] Fix memory leak
  * [kcms/lookandfeel] Guard reading invalid first entry (kde#446100)
  * [Global Menu] Set translation domain
  * lookandfeel: Add missing check if list of files is empty (kde#439797)
  * [KSplash] Start with zero opacity
  * Fix Klipper Actions content truncation (kde#444365)
  * [klipper] Use full text for DBus return values (kde#446441)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1642075200">- Update to 5.23.90
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.90
- Too many changes to list here
- Rebase 0001-Use-qdbus-qt5.patch
- Replace xprop-kde-full-session.desktop with autostart file:
  * 0001-Revert-Drop-setupX11-from-startplasma-waylandsession.patch
  * 0002-Revert-Drop-X11-root-properties-for-KDE-full-session.patch
- Add patch to fix the upstream sddm theme background:
  * 0001-sddm-theme-Change-wallpaper-extension-so-that-it-poi.patch
- Add patch to fix screen sharing dialog (kde#448423):
  * 0001-systemdialogs-Remove-leftover-and-broken-components.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1642852800">- Add patch to fix initial focus in SDDM (kde#447817):
  * 0001-Make-SessionManagementScreen-a-FocusScope.patch
- Add patch to fix initial focus in the lockscreen:
  * 0001-Fix-initial-focus-in-LockScreenUi.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1644062400">- Update to 5.24.0
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.0
- Too many changes to list here
- Drop patches, now upstream:
  * 0001-sddm-theme-Change-wallpaper-extension-so-that-it-poi.patch
  * 0001-systemdialogs-Remove-leftover-and-broken-components.patch
  * 0001-Make-SessionManagementScreen-a-FocusScope.patch
  * 0001-Fix-initial-focus-in-LockScreenUi.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1644926400">- Update to 5.24.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.1
- Changes since 5.24.0:
  * Move to runtime check of valid font DPI (kde#449918)
  * applets/battery: adjust show/hide conditions for charge limits (kde#435931)
  * applets/systemtray: fix SNI context menu usage without libappindicator (kde#449870)
  * applets/notifications: Increase implicit size of standalone popup (kde#448383)
  * applets-digital/clock: Add workaround for QTBUG-83890 (kde#448387)
  * Clean up "empty" mimeType containg only whitespaces
  * dataengines/apps: Use KIO::ApplicationLauncherJob for starting KService
  * [containmentactions/applauncher] Use ApplicationLauncherJob instead of OpenUrlJob (kde#449900)
  * Desktop: Still show services with nodisplay=true set (kde#449243)
  * appstream runner: De-duplicate results from multiple sources (kde#448619)
  * Fix ksplash always using default theme. (kde#446966)
  * kcms/users: Fix missing template arguments before reply in FingerprintModel
  * De-duplicate 'Uninstall or manage addons' option in the context menu of Kickoff (kde#448564)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1645531200">- Update to 5.24.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.2
- Changes since 5.24.1:
  * applets/clipboard: Focus on the search field for the first time opening the applet
  * applets/clipboard: Make Up/Down arrow keys work in ClipboardPage (kde#448811,kde#450040)
  * applets/panelspacer: Fix optimal size calculation (kde#431668)
  * Fix overdraw on Wayland
  * PanelView: Do not crash when the state is transitioning (kde#373461)
  * Fix launch kscreen kcm in font kcm.
  * Don't install two copies of kcm_fontinst
  * Lock/login themes: stop adjusting shadows based on color scheme (kde#449985)
  * Top-align lock/login/logout screen action buttons (kde#450238)
  * [kcms/user] Set interactive auth flag for more calls (kde#450122)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1645704000">- Add patch to fix log output of some processes (boo#1196206):
  * 0001-startkde-Forward-stdout-stderr-of-started-processes.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1646654400">- Replace %_libdir/libexec with %_libexecdir (boo#1174075)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1646740800">- Update to 5.24.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.3
- Changes since 5.24.2:
  * kcms/colors: Implement radio button layouts better
  * kcms/colors: fix spacing between radio buttons and content
  * [Battery Monitor] Only show charge threshold hint for power supply batteries (kde#451161)
  * [Icons KCM] Give measure delegate a text
  * wallpapers: Sort BackgroundListModel by title
  * applets/digital-clock: Fix `Qt.formatDateTime` returns different date when minute changes (kde#436796)
  * applets/systray: align applet labels with differing line counts in hidden view (kde#438347)
  * Show panel config above other windows (kde#450794)
  * Use current accent colour to set ColorDialog object in colour picker
  * SystemDialog: Allow accepting the dialogs with the keyboard (kde#450223)
  * applets/systemtray: Do not open context menu on mouse pressed for SNI (kde#409768)
  * Revert "Fix overdraw on Wayland"
  * startkde: Forward stdout/stderr of started processes
  * SDDM theme: stop eliding people's names so aggressively (kde#450673)
  * applets/digital-clock: Word-wrap date string for desktop representation (kde#450632)
  * wrap completely the invariants timer in NDEBUG
  * ScreenPool as the source of truth of QScreen info
  * Always ensure there is an user selected (kde#450182)
  * Prevent panel going out of screen boundaries
  * applets/clipboard: Focus on text area when transition is done
  * applets/clipboard: Fix highlight after exiting edit mode
- Drop patches, now upstream:
  * 0001-startkde-Forward-stdout-stderr-of-started-processes.patch
- Restore compatibility with older kf5-filesystem</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1648555200">- Update to 5.24.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.4
- Changes since 5.24.3:
  * kcms/users: Adjust for padding in overlay sheet (kde#451031)
  * [Media Controller] Explicitly set slider "to" before setting "value"
  * [Notifications] Fix implicit size propagation in SelectableLabel
  * applets/kicker: Skip creating KService for non-desktop files or folders (kde#442970)
  * Fix sleep/suspend sometimes not working ... from ksmserver-logout-greeter, by making the DBus calls synchronous.
  * kicker/actionlist: Ensure we parse the args for the jumplist actions (kde#451418)
  * libtaskmanager: recompute active task when a task is removed
  * sddm/lockscreen: Fix weird behaviour
  * [Notifications] Limit notification heading line count</changelog>
  <changelog author="Fushan Wen &lt;qydwhotmail@gmail.com&gt;" date="1656590400">- Fix a potential crash when deleting a panel with a system tray applet
  (kde#453726)
  * 0001-applets-systemtray-disconnect-KConfigLoader-signal-w.patch
- Fix a potential crash on logout (kde#454159)
  * 0001-Avoid-crash-in-plasma-session-teardown.patch</changelog>
</package>
<package pkgid="4d4b2ef95565992c929a7e28d2b99f9e86c051a41f19735a6a67ff4aceabadd4" name="plasma5-workspace-libs" arch="ppc64le">
  <version epoch="0" ver="5.24.4" rel="bp154.2.3.1"/>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1632312000">- Add patches from Plasma/5.23 branch:
  * 0001-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0002-shell-panel-Fix-ability-to-type-in-textfield.patch
  * 0003-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0004-PipeWire-Make-sure-thumbnails-properly-use-dmabuf-ag.patch
  * 0005-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0006-Klipper-Handle-incoming-UTF-8-mime-types.patch
  * 0007-Klipper-Guard-against-broken-data-fetches.patch
  * 0008-pipewire-Properly-compare-pipewire-versions-using-QV.patch
  * 0009-PipeWire-Include-defines-for-older-PipeWire-versions.patch
  * 0010-sddm-theme-fix-default-username-font-size.patch
- Add patch to fix XEmbed context menus (kde#442758)
  * 0011-Revert-xembed-adapt-to-changes-in-KNotifications.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1632484800">- Add patch to fix build with gpsd:
  * 0001-Fix-build-with-gpsd-3.23.1.patch
- Add patch to fix window thumbnails if dmabuf is not supported (kde#428284):
  * 0002-libtaskmanager-Don-t-request-dmabuf-if-not-supported.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1633608000">- Update to 5.23.0
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.0
- Changes since 5.22.90:
  * Revert "xembed: adapt to changes in KNotifications" (kde#442758)
  * sddm-theme: Fix using mouse movements to show the UI
  * [systemtray] Check for menuItemFactory.object existence (kde#443377)
  * applets/devicenotifier: Remove applet list item animations
  * sddm-theme: Fix use of needsPassword and related button layout
  * [klipper] Fix shortcut of OK button in the clipboard content edit dialog (kde#400623)
  * Fix Kickoff context menu actions for System Settings results (kde#442522)
  * klipper: Fix reading from plasma on wayland
  * Fix build with gpsd 3.23.1
  * Unbreak fontinst KCM (kde#442748)
  * Address regression in VT switching code (kde#442852)
  * libtaskmanager: Don't request dmabuf if not supported (kde#428284)
  * Port away from Kirigami.Units.devicePixelRatio
  * lookandfeel: don't nuke accent colour (kde#442812)
  * kcm/colors: Improve some bindings on accent colors
  * sddm-theme: fix default username font size
  * PipeWire: Include defines for older PipeWire versions
  * pipewire: Properly compare pipewire versions using QVersionNumber
  * [Klipper] Guard against broken data fetches
  * [Klipper] Handle incoming UTF-8 mime types (kde#424694)
  * PipeWire: Make sure thumbnails properly use dmabuf again
  * [shell/panel] Fix ability to type in textfield (kde#442557)
- Drop patches, now upstream:
  * 0001-Fix-build-with-gpsd-3.23.1.patch
  * 0001-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0002-libtaskmanager-Don-t-request-dmabuf-if-not-supported.patch
  * 0002-shell-panel-Fix-ability-to-type-in-textfield.patch
  * 0003-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0004-PipeWire-Make-sure-thumbnails-properly-use-dmabuf-ag.patch
  * 0005-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0006-Klipper-Handle-incoming-UTF-8-mime-types.patch
  * 0007-Klipper-Guard-against-broken-data-fetches.patch
  * 0008-pipewire-Properly-compare-pipewire-versions-using-QV.patch
  * 0009-PipeWire-Include-defines-for-older-PipeWire-versions.patch
  * 0010-sddm-theme-fix-default-username-font-size.patch
  * 0011-Revert-xembed-adapt-to-changes-in-KNotifications.patch
- Refresh 0001-Ignore-default-sddm-face-icons.patch
- Add new key + signature to plasma.keyring</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1634299200">- Add patch to show password input on the "Other" page in SDDM (kde#443737):
  * 0001-sddm-theme-fix-missing-password-field-on-Other-page.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1634644800">- Update to 5.23.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.1
- Changes since 5.23.0:
  * [freespacenotifier] impr: no notification for ro filesystems
  * kcms/colors: Don't apply header accent colors to non-Header color schemes (kde#443786)
  * [kcms/colors] Notify global settings change after saving
  * krdb: Fix removal of Xft.dpi from Xresources (kde#350039)
  * sddm-theme: fix missing password field on "Other" page (kde#443737)
  * pipewire: Report DRM_FORMAT_MOD_INVALID when no modifiers are offered
  * [digital-clock] Do not assign undefined when agenda is not visible (kde#443380)
- Drop patches, now upstream:
  * 0001-sddm-theme-fix-missing-password-field-on-Other-page.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1634817600">- Add back X11 root window properties until firefox is adjusted
  (boo#1191825):
  * 0001-Revert-Drop-setupX11-from-startplasma-waylandsession.patch
  * 0002-Revert-Drop-X11-root-properties-for-KDE-full-session.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1635249600">- Update to 5.23.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.2
- Changes since 5.23.1:
  * Hide KRunner window when pressing escape (kde#444240)
  * [applets/clipboard] Fix selecting clipboard entries with Enter
  * Set Qt.ImhNoPredictiveText for text fields that act as search fields
  * [shell] Ignore placeholder screens
- Add a version to BuildRequires: cmake(Breeze)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1636459200">- Update to 5.23.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.3
- Changes since 5.23.2:
  * fixed size hints to the osd
  * use implicit size to not cause binding loops (kde#422072)
  * wayland: don't create DesktopView for placeholder screen (kde#438839,kde#444801)
  * [startplasma] Detect systemd service in linked state
  * [Notifications] Fix grouping container side line
  * Disconnect watcher for xdgActivationTokenArrived (kde#444385)
  * interactiveconsole: Allow specifying mode from command line parameter</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1638273600">- Update to 5.23.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.4
- Changes since 5.23.3:
  * Lock &amp; login screens: Use RTL-friendly arrows when in RTL mode
  * [logout-greeter] Set window class name (kde#444898,kde#444899)
  * systemtray: Connect to StatusNotifierWatcher before initializing QDBusPendingReply
  * systemtray: Check if a service is already added before processing QDBusReply (kde#443961)
  * baloosearchruner: Emit DBus error when baloo is disabled (kde#445342)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1641297600">- Update to 5.23.5
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.5
- Changes since 5.23.4:
  * applets/systemtray: Follow panel opacity (kde#439025)
  * [webshortcutsrunner] Fix private browsing with some Firefoxes
  * [kcms/style] Don't call setNeedsSave when style config changes (kde#439297)
  * digital-clock: fix calendar popup contrast when opened from desktop (kde#446991)
  * [libnotificationmanager] Fix memory leak
  * [kcms/lookandfeel] Guard reading invalid first entry (kde#446100)
  * [Global Menu] Set translation domain
  * lookandfeel: Add missing check if list of files is empty (kde#439797)
  * [KSplash] Start with zero opacity
  * Fix Klipper Actions content truncation (kde#444365)
  * [klipper] Use full text for DBus return values (kde#446441)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1642075200">- Update to 5.23.90
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.90
- Too many changes to list here
- Rebase 0001-Use-qdbus-qt5.patch
- Replace xprop-kde-full-session.desktop with autostart file:
  * 0001-Revert-Drop-setupX11-from-startplasma-waylandsession.patch
  * 0002-Revert-Drop-X11-root-properties-for-KDE-full-session.patch
- Add patch to fix the upstream sddm theme background:
  * 0001-sddm-theme-Change-wallpaper-extension-so-that-it-poi.patch
- Add patch to fix screen sharing dialog (kde#448423):
  * 0001-systemdialogs-Remove-leftover-and-broken-components.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1642852800">- Add patch to fix initial focus in SDDM (kde#447817):
  * 0001-Make-SessionManagementScreen-a-FocusScope.patch
- Add patch to fix initial focus in the lockscreen:
  * 0001-Fix-initial-focus-in-LockScreenUi.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1644062400">- Update to 5.24.0
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.0
- Too many changes to list here
- Drop patches, now upstream:
  * 0001-sddm-theme-Change-wallpaper-extension-so-that-it-poi.patch
  * 0001-systemdialogs-Remove-leftover-and-broken-components.patch
  * 0001-Make-SessionManagementScreen-a-FocusScope.patch
  * 0001-Fix-initial-focus-in-LockScreenUi.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1644926400">- Update to 5.24.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.1
- Changes since 5.24.0:
  * Move to runtime check of valid font DPI (kde#449918)
  * applets/battery: adjust show/hide conditions for charge limits (kde#435931)
  * applets/systemtray: fix SNI context menu usage without libappindicator (kde#449870)
  * applets/notifications: Increase implicit size of standalone popup (kde#448383)
  * applets-digital/clock: Add workaround for QTBUG-83890 (kde#448387)
  * Clean up "empty" mimeType containg only whitespaces
  * dataengines/apps: Use KIO::ApplicationLauncherJob for starting KService
  * [containmentactions/applauncher] Use ApplicationLauncherJob instead of OpenUrlJob (kde#449900)
  * Desktop: Still show services with nodisplay=true set (kde#449243)
  * appstream runner: De-duplicate results from multiple sources (kde#448619)
  * Fix ksplash always using default theme. (kde#446966)
  * kcms/users: Fix missing template arguments before reply in FingerprintModel
  * De-duplicate 'Uninstall or manage addons' option in the context menu of Kickoff (kde#448564)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1645531200">- Update to 5.24.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.2
- Changes since 5.24.1:
  * applets/clipboard: Focus on the search field for the first time opening the applet
  * applets/clipboard: Make Up/Down arrow keys work in ClipboardPage (kde#448811,kde#450040)
  * applets/panelspacer: Fix optimal size calculation (kde#431668)
  * Fix overdraw on Wayland
  * PanelView: Do not crash when the state is transitioning (kde#373461)
  * Fix launch kscreen kcm in font kcm.
  * Don't install two copies of kcm_fontinst
  * Lock/login themes: stop adjusting shadows based on color scheme (kde#449985)
  * Top-align lock/login/logout screen action buttons (kde#450238)
  * [kcms/user] Set interactive auth flag for more calls (kde#450122)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1645704000">- Add patch to fix log output of some processes (boo#1196206):
  * 0001-startkde-Forward-stdout-stderr-of-started-processes.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1646654400">- Replace %_libdir/libexec with %_libexecdir (boo#1174075)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1646740800">- Update to 5.24.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.3
- Changes since 5.24.2:
  * kcms/colors: Implement radio button layouts better
  * kcms/colors: fix spacing between radio buttons and content
  * [Battery Monitor] Only show charge threshold hint for power supply batteries (kde#451161)
  * [Icons KCM] Give measure delegate a text
  * wallpapers: Sort BackgroundListModel by title
  * applets/digital-clock: Fix `Qt.formatDateTime` returns different date when minute changes (kde#436796)
  * applets/systray: align applet labels with differing line counts in hidden view (kde#438347)
  * Show panel config above other windows (kde#450794)
  * Use current accent colour to set ColorDialog object in colour picker
  * SystemDialog: Allow accepting the dialogs with the keyboard (kde#450223)
  * applets/systemtray: Do not open context menu on mouse pressed for SNI (kde#409768)
  * Revert "Fix overdraw on Wayland"
  * startkde: Forward stdout/stderr of started processes
  * SDDM theme: stop eliding people's names so aggressively (kde#450673)
  * applets/digital-clock: Word-wrap date string for desktop representation (kde#450632)
  * wrap completely the invariants timer in NDEBUG
  * ScreenPool as the source of truth of QScreen info
  * Always ensure there is an user selected (kde#450182)
  * Prevent panel going out of screen boundaries
  * applets/clipboard: Focus on text area when transition is done
  * applets/clipboard: Fix highlight after exiting edit mode
- Drop patches, now upstream:
  * 0001-startkde-Forward-stdout-stderr-of-started-processes.patch
- Restore compatibility with older kf5-filesystem</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1648555200">- Update to 5.24.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.4
- Changes since 5.24.3:
  * kcms/users: Adjust for padding in overlay sheet (kde#451031)
  * [Media Controller] Explicitly set slider "to" before setting "value"
  * [Notifications] Fix implicit size propagation in SelectableLabel
  * applets/kicker: Skip creating KService for non-desktop files or folders (kde#442970)
  * Fix sleep/suspend sometimes not working ... from ksmserver-logout-greeter, by making the DBus calls synchronous.
  * kicker/actionlist: Ensure we parse the args for the jumplist actions (kde#451418)
  * libtaskmanager: recompute active task when a task is removed
  * sddm/lockscreen: Fix weird behaviour
  * [Notifications] Limit notification heading line count</changelog>
  <changelog author="Fushan Wen &lt;qydwhotmail@gmail.com&gt;" date="1656590400">- Fix a potential crash when deleting a panel with a system tray applet
  (kde#453726)
  * 0001-applets-systemtray-disconnect-KConfigLoader-signal-w.patch
- Fix a potential crash on logout (kde#454159)
  * 0001-Avoid-crash-in-plasma-session-teardown.patch</changelog>
</package>
<package pkgid="dea48b3465d21f187b104def918a33a07f27ef2add522ee0797cfc06d72be095" name="plasma5-workspace-libs" arch="x86_64">
  <version epoch="0" ver="5.24.4" rel="bp154.2.3.1"/>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1632312000">- Add patches from Plasma/5.23 branch:
  * 0001-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0002-shell-panel-Fix-ability-to-type-in-textfield.patch
  * 0003-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0004-PipeWire-Make-sure-thumbnails-properly-use-dmabuf-ag.patch
  * 0005-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0006-Klipper-Handle-incoming-UTF-8-mime-types.patch
  * 0007-Klipper-Guard-against-broken-data-fetches.patch
  * 0008-pipewire-Properly-compare-pipewire-versions-using-QV.patch
  * 0009-PipeWire-Include-defines-for-older-PipeWire-versions.patch
  * 0010-sddm-theme-fix-default-username-font-size.patch
- Add patch to fix XEmbed context menus (kde#442758)
  * 0011-Revert-xembed-adapt-to-changes-in-KNotifications.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1632484800">- Add patch to fix build with gpsd:
  * 0001-Fix-build-with-gpsd-3.23.1.patch
- Add patch to fix window thumbnails if dmabuf is not supported (kde#428284):
  * 0002-libtaskmanager-Don-t-request-dmabuf-if-not-supported.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1633608000">- Update to 5.23.0
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.0
- Changes since 5.22.90:
  * Revert "xembed: adapt to changes in KNotifications" (kde#442758)
  * sddm-theme: Fix using mouse movements to show the UI
  * [systemtray] Check for menuItemFactory.object existence (kde#443377)
  * applets/devicenotifier: Remove applet list item animations
  * sddm-theme: Fix use of needsPassword and related button layout
  * [klipper] Fix shortcut of OK button in the clipboard content edit dialog (kde#400623)
  * Fix Kickoff context menu actions for System Settings results (kde#442522)
  * klipper: Fix reading from plasma on wayland
  * Fix build with gpsd 3.23.1
  * Unbreak fontinst KCM (kde#442748)
  * Address regression in VT switching code (kde#442852)
  * libtaskmanager: Don't request dmabuf if not supported (kde#428284)
  * Port away from Kirigami.Units.devicePixelRatio
  * lookandfeel: don't nuke accent colour (kde#442812)
  * kcm/colors: Improve some bindings on accent colors
  * sddm-theme: fix default username font size
  * PipeWire: Include defines for older PipeWire versions
  * pipewire: Properly compare pipewire versions using QVersionNumber
  * [Klipper] Guard against broken data fetches
  * [Klipper] Handle incoming UTF-8 mime types (kde#424694)
  * PipeWire: Make sure thumbnails properly use dmabuf again
  * [shell/panel] Fix ability to type in textfield (kde#442557)
- Drop patches, now upstream:
  * 0001-Fix-build-with-gpsd-3.23.1.patch
  * 0001-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0002-libtaskmanager-Don-t-request-dmabuf-if-not-supported.patch
  * 0002-shell-panel-Fix-ability-to-type-in-textfield.patch
  * 0003-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0004-PipeWire-Make-sure-thumbnails-properly-use-dmabuf-ag.patch
  * 0005-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0006-Klipper-Handle-incoming-UTF-8-mime-types.patch
  * 0007-Klipper-Guard-against-broken-data-fetches.patch
  * 0008-pipewire-Properly-compare-pipewire-versions-using-QV.patch
  * 0009-PipeWire-Include-defines-for-older-PipeWire-versions.patch
  * 0010-sddm-theme-fix-default-username-font-size.patch
  * 0011-Revert-xembed-adapt-to-changes-in-KNotifications.patch
- Refresh 0001-Ignore-default-sddm-face-icons.patch
- Add new key + signature to plasma.keyring</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1634299200">- Add patch to show password input on the "Other" page in SDDM (kde#443737):
  * 0001-sddm-theme-fix-missing-password-field-on-Other-page.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1634644800">- Update to 5.23.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.1
- Changes since 5.23.0:
  * [freespacenotifier] impr: no notification for ro filesystems
  * kcms/colors: Don't apply header accent colors to non-Header color schemes (kde#443786)
  * [kcms/colors] Notify global settings change after saving
  * krdb: Fix removal of Xft.dpi from Xresources (kde#350039)
  * sddm-theme: fix missing password field on "Other" page (kde#443737)
  * pipewire: Report DRM_FORMAT_MOD_INVALID when no modifiers are offered
  * [digital-clock] Do not assign undefined when agenda is not visible (kde#443380)
- Drop patches, now upstream:
  * 0001-sddm-theme-fix-missing-password-field-on-Other-page.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1634817600">- Add back X11 root window properties until firefox is adjusted
  (boo#1191825):
  * 0001-Revert-Drop-setupX11-from-startplasma-waylandsession.patch
  * 0002-Revert-Drop-X11-root-properties-for-KDE-full-session.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1635249600">- Update to 5.23.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.2
- Changes since 5.23.1:
  * Hide KRunner window when pressing escape (kde#444240)
  * [applets/clipboard] Fix selecting clipboard entries with Enter
  * Set Qt.ImhNoPredictiveText for text fields that act as search fields
  * [shell] Ignore placeholder screens
- Add a version to BuildRequires: cmake(Breeze)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1636459200">- Update to 5.23.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.3
- Changes since 5.23.2:
  * fixed size hints to the osd
  * use implicit size to not cause binding loops (kde#422072)
  * wayland: don't create DesktopView for placeholder screen (kde#438839,kde#444801)
  * [startplasma] Detect systemd service in linked state
  * [Notifications] Fix grouping container side line
  * Disconnect watcher for xdgActivationTokenArrived (kde#444385)
  * interactiveconsole: Allow specifying mode from command line parameter</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1638273600">- Update to 5.23.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.4
- Changes since 5.23.3:
  * Lock &amp; login screens: Use RTL-friendly arrows when in RTL mode
  * [logout-greeter] Set window class name (kde#444898,kde#444899)
  * systemtray: Connect to StatusNotifierWatcher before initializing QDBusPendingReply
  * systemtray: Check if a service is already added before processing QDBusReply (kde#443961)
  * baloosearchruner: Emit DBus error when baloo is disabled (kde#445342)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1641297600">- Update to 5.23.5
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.5
- Changes since 5.23.4:
  * applets/systemtray: Follow panel opacity (kde#439025)
  * [webshortcutsrunner] Fix private browsing with some Firefoxes
  * [kcms/style] Don't call setNeedsSave when style config changes (kde#439297)
  * digital-clock: fix calendar popup contrast when opened from desktop (kde#446991)
  * [libnotificationmanager] Fix memory leak
  * [kcms/lookandfeel] Guard reading invalid first entry (kde#446100)
  * [Global Menu] Set translation domain
  * lookandfeel: Add missing check if list of files is empty (kde#439797)
  * [KSplash] Start with zero opacity
  * Fix Klipper Actions content truncation (kde#444365)
  * [klipper] Use full text for DBus return values (kde#446441)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1642075200">- Update to 5.23.90
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.90
- Too many changes to list here
- Rebase 0001-Use-qdbus-qt5.patch
- Replace xprop-kde-full-session.desktop with autostart file:
  * 0001-Revert-Drop-setupX11-from-startplasma-waylandsession.patch
  * 0002-Revert-Drop-X11-root-properties-for-KDE-full-session.patch
- Add patch to fix the upstream sddm theme background:
  * 0001-sddm-theme-Change-wallpaper-extension-so-that-it-poi.patch
- Add patch to fix screen sharing dialog (kde#448423):
  * 0001-systemdialogs-Remove-leftover-and-broken-components.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1642852800">- Add patch to fix initial focus in SDDM (kde#447817):
  * 0001-Make-SessionManagementScreen-a-FocusScope.patch
- Add patch to fix initial focus in the lockscreen:
  * 0001-Fix-initial-focus-in-LockScreenUi.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1644062400">- Update to 5.24.0
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.0
- Too many changes to list here
- Drop patches, now upstream:
  * 0001-sddm-theme-Change-wallpaper-extension-so-that-it-poi.patch
  * 0001-systemdialogs-Remove-leftover-and-broken-components.patch
  * 0001-Make-SessionManagementScreen-a-FocusScope.patch
  * 0001-Fix-initial-focus-in-LockScreenUi.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1644926400">- Update to 5.24.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.1
- Changes since 5.24.0:
  * Move to runtime check of valid font DPI (kde#449918)
  * applets/battery: adjust show/hide conditions for charge limits (kde#435931)
  * applets/systemtray: fix SNI context menu usage without libappindicator (kde#449870)
  * applets/notifications: Increase implicit size of standalone popup (kde#448383)
  * applets-digital/clock: Add workaround for QTBUG-83890 (kde#448387)
  * Clean up "empty" mimeType containg only whitespaces
  * dataengines/apps: Use KIO::ApplicationLauncherJob for starting KService
  * [containmentactions/applauncher] Use ApplicationLauncherJob instead of OpenUrlJob (kde#449900)
  * Desktop: Still show services with nodisplay=true set (kde#449243)
  * appstream runner: De-duplicate results from multiple sources (kde#448619)
  * Fix ksplash always using default theme. (kde#446966)
  * kcms/users: Fix missing template arguments before reply in FingerprintModel
  * De-duplicate 'Uninstall or manage addons' option in the context menu of Kickoff (kde#448564)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1645531200">- Update to 5.24.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.2
- Changes since 5.24.1:
  * applets/clipboard: Focus on the search field for the first time opening the applet
  * applets/clipboard: Make Up/Down arrow keys work in ClipboardPage (kde#448811,kde#450040)
  * applets/panelspacer: Fix optimal size calculation (kde#431668)
  * Fix overdraw on Wayland
  * PanelView: Do not crash when the state is transitioning (kde#373461)
  * Fix launch kscreen kcm in font kcm.
  * Don't install two copies of kcm_fontinst
  * Lock/login themes: stop adjusting shadows based on color scheme (kde#449985)
  * Top-align lock/login/logout screen action buttons (kde#450238)
  * [kcms/user] Set interactive auth flag for more calls (kde#450122)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1645704000">- Add patch to fix log output of some processes (boo#1196206):
  * 0001-startkde-Forward-stdout-stderr-of-started-processes.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1646654400">- Replace %_libdir/libexec with %_libexecdir (boo#1174075)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1646740800">- Update to 5.24.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.3
- Changes since 5.24.2:
  * kcms/colors: Implement radio button layouts better
  * kcms/colors: fix spacing between radio buttons and content
  * [Battery Monitor] Only show charge threshold hint for power supply batteries (kde#451161)
  * [Icons KCM] Give measure delegate a text
  * wallpapers: Sort BackgroundListModel by title
  * applets/digital-clock: Fix `Qt.formatDateTime` returns different date when minute changes (kde#436796)
  * applets/systray: align applet labels with differing line counts in hidden view (kde#438347)
  * Show panel config above other windows (kde#450794)
  * Use current accent colour to set ColorDialog object in colour picker
  * SystemDialog: Allow accepting the dialogs with the keyboard (kde#450223)
  * applets/systemtray: Do not open context menu on mouse pressed for SNI (kde#409768)
  * Revert "Fix overdraw on Wayland"
  * startkde: Forward stdout/stderr of started processes
  * SDDM theme: stop eliding people's names so aggressively (kde#450673)
  * applets/digital-clock: Word-wrap date string for desktop representation (kde#450632)
  * wrap completely the invariants timer in NDEBUG
  * ScreenPool as the source of truth of QScreen info
  * Always ensure there is an user selected (kde#450182)
  * Prevent panel going out of screen boundaries
  * applets/clipboard: Focus on text area when transition is done
  * applets/clipboard: Fix highlight after exiting edit mode
- Drop patches, now upstream:
  * 0001-startkde-Forward-stdout-stderr-of-started-processes.patch
- Restore compatibility with older kf5-filesystem</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1648555200">- Update to 5.24.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.4
- Changes since 5.24.3:
  * kcms/users: Adjust for padding in overlay sheet (kde#451031)
  * [Media Controller] Explicitly set slider "to" before setting "value"
  * [Notifications] Fix implicit size propagation in SelectableLabel
  * applets/kicker: Skip creating KService for non-desktop files or folders (kde#442970)
  * Fix sleep/suspend sometimes not working ... from ksmserver-logout-greeter, by making the DBus calls synchronous.
  * kicker/actionlist: Ensure we parse the args for the jumplist actions (kde#451418)
  * libtaskmanager: recompute active task when a task is removed
  * sddm/lockscreen: Fix weird behaviour
  * [Notifications] Limit notification heading line count</changelog>
  <changelog author="Fushan Wen &lt;qydwhotmail@gmail.com&gt;" date="1656590400">- Fix a potential crash when deleting a panel with a system tray applet
  (kde#453726)
  * 0001-applets-systemtray-disconnect-KConfigLoader-signal-w.patch
- Fix a potential crash on logout (kde#454159)
  * 0001-Avoid-crash-in-plasma-session-teardown.patch</changelog>
</package>
<package pkgid="3b56176ddd01206da12c9ff4affbf9dd3d69387200333520e7cedc9c36a4a260" name="pngcheck" arch="aarch64">
  <version epoch="0" ver="3.0.3" rel="bp154.2.3.1"/>
  <changelog author="opensuse@dstoecker.de" date="1251633600">- created 2.3.0</changelog>
  <changelog author="pgajdos@suse.com" date="1376049600">- micro spec file cleanup, created *.changes</changelog>
  <changelog author="mpluskal@suse.com" date="1438516800">- Use url for source
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="pgajdos@suse.com" date="1606996800">- security update
- added patches
  fix CVE-2020-27818 [bsc#1179528], global buffer overflow was discovered in check_chunk_name function via crafted pngfile
  + pngcheck-CVE-2020-27818.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1609156800">- version update to 3.0.0
  * 20070709 GRR: tweaked color definitions slightly to work better on terminals
  * with white/light backgrounds
  * 20070712 GRR: added Makefile.mingw32
  * 20100504 GRR: fixed DHDR (pre-MNG-1.0) bug identified by Winfried &lt;szukw000@arcor.de&gt;
  * 20170713 GRP: added eXIf support (GRR: added check for II/MM/unknown format)
  * 20201012 BB:  converted static const help/usage-related strings to macros so
  * -Werror=format-security doesn't trigger (Ben Beasley)
  * 20201015 BB:  added (help2man-generated) man pages for all three utils
  * 20201017 GRR: added top-level LICENSE file; fixed various compiler warnings
  * 20201031 GRR: replaced gpl/COPYING (outdated address, references to Library
  * GPL) with https://www.gnu.org/licenses/old-licenses/gpl-2.0.txt
  * (thanks to Ben Beasley for catching that)
  * 20201113 BB:  fixed buffer-overflow vulnerability discovered by "giantbranch
  * of NSFOCUS Security Team"
  * https://bugzilla.redhat.com/show_bug.cgi?id=1897485
  * 20201128 BB:  found and fixed four additional vulnerabilities (null-pointer
  * dereference and three buffer overruns)
  * 20201209 LP:  fixed an off-by-one bug in check_magic() (Lucy Phipps)
  * 20201209 LL:  converted two zlib-version warnings/errors to go to stderr
  * (Lemures Lemniscati, actually from 20180318; forwarded by LP)
  * 20201210 BB:  fixed another buffer-overflow vulnerability discovered by
  * "giantbranch of NSFOCUS Security Team"
  * https://bugzilla.redhat.com/show_bug.cgi?id=1905775
  * 20201212 GRR: removed -f ("force") option due to multiple security issues
- modified patches
  % fixbuild.diff (refreshed)
- deleted patches
  - pngcheck-CVE-2020-27818.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1639396800">- version update to 3.0.3
  * 20210124 GRR: released version 3.0.1
  * ----------------------
  * 20201217 BB:  fixed a crash bug (and probable vulnerability) in large (MNG)
  * LOOP chunks
  * 20210131 GRR: updated Makefile.mingw32 for modern versions and added
  * Makefile.mingw64 (targets Win64); both are essentially
  * UNTESTED, however!
  * 20210131 GRR: released version 3.0.2
  * ----------------------
  * 20210416 BB:  fixed a divide-by-zero crash bug (and probable vulnerability)
  * in interlaced images with extra compressed data beyond the
  * nominal end of the image data (found by "chiba of topsec alpha
  * lab")</changelog>
</package>
<package pkgid="1f7202c700cc801130692fb2b1af86650487e7164240ecf4dcd9e8c7a2a85df3" name="pngcheck" arch="i586">
  <version epoch="0" ver="3.0.3" rel="bp154.2.3.1"/>
  <changelog author="opensuse@dstoecker.de" date="1251633600">- created 2.3.0</changelog>
  <changelog author="pgajdos@suse.com" date="1376049600">- micro spec file cleanup, created *.changes</changelog>
  <changelog author="mpluskal@suse.com" date="1438516800">- Use url for source
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="pgajdos@suse.com" date="1606996800">- security update
- added patches
  fix CVE-2020-27818 [bsc#1179528], global buffer overflow was discovered in check_chunk_name function via crafted pngfile
  + pngcheck-CVE-2020-27818.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1609156800">- version update to 3.0.0
  * 20070709 GRR: tweaked color definitions slightly to work better on terminals
  * with white/light backgrounds
  * 20070712 GRR: added Makefile.mingw32
  * 20100504 GRR: fixed DHDR (pre-MNG-1.0) bug identified by Winfried &lt;szukw000@arcor.de&gt;
  * 20170713 GRP: added eXIf support (GRR: added check for II/MM/unknown format)
  * 20201012 BB:  converted static const help/usage-related strings to macros so
  * -Werror=format-security doesn't trigger (Ben Beasley)
  * 20201015 BB:  added (help2man-generated) man pages for all three utils
  * 20201017 GRR: added top-level LICENSE file; fixed various compiler warnings
  * 20201031 GRR: replaced gpl/COPYING (outdated address, references to Library
  * GPL) with https://www.gnu.org/licenses/old-licenses/gpl-2.0.txt
  * (thanks to Ben Beasley for catching that)
  * 20201113 BB:  fixed buffer-overflow vulnerability discovered by "giantbranch
  * of NSFOCUS Security Team"
  * https://bugzilla.redhat.com/show_bug.cgi?id=1897485
  * 20201128 BB:  found and fixed four additional vulnerabilities (null-pointer
  * dereference and three buffer overruns)
  * 20201209 LP:  fixed an off-by-one bug in check_magic() (Lucy Phipps)
  * 20201209 LL:  converted two zlib-version warnings/errors to go to stderr
  * (Lemures Lemniscati, actually from 20180318; forwarded by LP)
  * 20201210 BB:  fixed another buffer-overflow vulnerability discovered by
  * "giantbranch of NSFOCUS Security Team"
  * https://bugzilla.redhat.com/show_bug.cgi?id=1905775
  * 20201212 GRR: removed -f ("force") option due to multiple security issues
- modified patches
  % fixbuild.diff (refreshed)
- deleted patches
  - pngcheck-CVE-2020-27818.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1639396800">- version update to 3.0.3
  * 20210124 GRR: released version 3.0.1
  * ----------------------
  * 20201217 BB:  fixed a crash bug (and probable vulnerability) in large (MNG)
  * LOOP chunks
  * 20210131 GRR: updated Makefile.mingw32 for modern versions and added
  * Makefile.mingw64 (targets Win64); both are essentially
  * UNTESTED, however!
  * 20210131 GRR: released version 3.0.2
  * ----------------------
  * 20210416 BB:  fixed a divide-by-zero crash bug (and probable vulnerability)
  * in interlaced images with extra compressed data beyond the
  * nominal end of the image data (found by "chiba of topsec alpha
  * lab")</changelog>
</package>
<package pkgid="2859476075e66b6c23aa23281ee519df78a415f9e3dca75b1fd8c57be9e78032" name="pngcheck" arch="ppc64le">
  <version epoch="0" ver="3.0.3" rel="bp154.2.3.1"/>
  <changelog author="opensuse@dstoecker.de" date="1251633600">- created 2.3.0</changelog>
  <changelog author="pgajdos@suse.com" date="1376049600">- micro spec file cleanup, created *.changes</changelog>
  <changelog author="mpluskal@suse.com" date="1438516800">- Use url for source
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="pgajdos@suse.com" date="1606996800">- security update
- added patches
  fix CVE-2020-27818 [bsc#1179528], global buffer overflow was discovered in check_chunk_name function via crafted pngfile
  + pngcheck-CVE-2020-27818.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1609156800">- version update to 3.0.0
  * 20070709 GRR: tweaked color definitions slightly to work better on terminals
  * with white/light backgrounds
  * 20070712 GRR: added Makefile.mingw32
  * 20100504 GRR: fixed DHDR (pre-MNG-1.0) bug identified by Winfried &lt;szukw000@arcor.de&gt;
  * 20170713 GRP: added eXIf support (GRR: added check for II/MM/unknown format)
  * 20201012 BB:  converted static const help/usage-related strings to macros so
  * -Werror=format-security doesn't trigger (Ben Beasley)
  * 20201015 BB:  added (help2man-generated) man pages for all three utils
  * 20201017 GRR: added top-level LICENSE file; fixed various compiler warnings
  * 20201031 GRR: replaced gpl/COPYING (outdated address, references to Library
  * GPL) with https://www.gnu.org/licenses/old-licenses/gpl-2.0.txt
  * (thanks to Ben Beasley for catching that)
  * 20201113 BB:  fixed buffer-overflow vulnerability discovered by "giantbranch
  * of NSFOCUS Security Team"
  * https://bugzilla.redhat.com/show_bug.cgi?id=1897485
  * 20201128 BB:  found and fixed four additional vulnerabilities (null-pointer
  * dereference and three buffer overruns)
  * 20201209 LP:  fixed an off-by-one bug in check_magic() (Lucy Phipps)
  * 20201209 LL:  converted two zlib-version warnings/errors to go to stderr
  * (Lemures Lemniscati, actually from 20180318; forwarded by LP)
  * 20201210 BB:  fixed another buffer-overflow vulnerability discovered by
  * "giantbranch of NSFOCUS Security Team"
  * https://bugzilla.redhat.com/show_bug.cgi?id=1905775
  * 20201212 GRR: removed -f ("force") option due to multiple security issues
- modified patches
  % fixbuild.diff (refreshed)
- deleted patches
  - pngcheck-CVE-2020-27818.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1639396800">- version update to 3.0.3
  * 20210124 GRR: released version 3.0.1
  * ----------------------
  * 20201217 BB:  fixed a crash bug (and probable vulnerability) in large (MNG)
  * LOOP chunks
  * 20210131 GRR: updated Makefile.mingw32 for modern versions and added
  * Makefile.mingw64 (targets Win64); both are essentially
  * UNTESTED, however!
  * 20210131 GRR: released version 3.0.2
  * ----------------------
  * 20210416 BB:  fixed a divide-by-zero crash bug (and probable vulnerability)
  * in interlaced images with extra compressed data beyond the
  * nominal end of the image data (found by "chiba of topsec alpha
  * lab")</changelog>
</package>
<package pkgid="c7f423f984604cf0b8746d73dea6e9d3705babdfd85b7e5cfa7f8eeb8430af9a" name="pngcheck" arch="s390x">
  <version epoch="0" ver="3.0.3" rel="bp154.2.3.1"/>
  <changelog author="opensuse@dstoecker.de" date="1251633600">- created 2.3.0</changelog>
  <changelog author="pgajdos@suse.com" date="1376049600">- micro spec file cleanup, created *.changes</changelog>
  <changelog author="mpluskal@suse.com" date="1438516800">- Use url for source
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="pgajdos@suse.com" date="1606996800">- security update
- added patches
  fix CVE-2020-27818 [bsc#1179528], global buffer overflow was discovered in check_chunk_name function via crafted pngfile
  + pngcheck-CVE-2020-27818.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1609156800">- version update to 3.0.0
  * 20070709 GRR: tweaked color definitions slightly to work better on terminals
  * with white/light backgrounds
  * 20070712 GRR: added Makefile.mingw32
  * 20100504 GRR: fixed DHDR (pre-MNG-1.0) bug identified by Winfried &lt;szukw000@arcor.de&gt;
  * 20170713 GRP: added eXIf support (GRR: added check for II/MM/unknown format)
  * 20201012 BB:  converted static const help/usage-related strings to macros so
  * -Werror=format-security doesn't trigger (Ben Beasley)
  * 20201015 BB:  added (help2man-generated) man pages for all three utils
  * 20201017 GRR: added top-level LICENSE file; fixed various compiler warnings
  * 20201031 GRR: replaced gpl/COPYING (outdated address, references to Library
  * GPL) with https://www.gnu.org/licenses/old-licenses/gpl-2.0.txt
  * (thanks to Ben Beasley for catching that)
  * 20201113 BB:  fixed buffer-overflow vulnerability discovered by "giantbranch
  * of NSFOCUS Security Team"
  * https://bugzilla.redhat.com/show_bug.cgi?id=1897485
  * 20201128 BB:  found and fixed four additional vulnerabilities (null-pointer
  * dereference and three buffer overruns)
  * 20201209 LP:  fixed an off-by-one bug in check_magic() (Lucy Phipps)
  * 20201209 LL:  converted two zlib-version warnings/errors to go to stderr
  * (Lemures Lemniscati, actually from 20180318; forwarded by LP)
  * 20201210 BB:  fixed another buffer-overflow vulnerability discovered by
  * "giantbranch of NSFOCUS Security Team"
  * https://bugzilla.redhat.com/show_bug.cgi?id=1905775
  * 20201212 GRR: removed -f ("force") option due to multiple security issues
- modified patches
  % fixbuild.diff (refreshed)
- deleted patches
  - pngcheck-CVE-2020-27818.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1639396800">- version update to 3.0.3
  * 20210124 GRR: released version 3.0.1
  * ----------------------
  * 20201217 BB:  fixed a crash bug (and probable vulnerability) in large (MNG)
  * LOOP chunks
  * 20210131 GRR: updated Makefile.mingw32 for modern versions and added
  * Makefile.mingw64 (targets Win64); both are essentially
  * UNTESTED, however!
  * 20210131 GRR: released version 3.0.2
  * ----------------------
  * 20210416 BB:  fixed a divide-by-zero crash bug (and probable vulnerability)
  * in interlaced images with extra compressed data beyond the
  * nominal end of the image data (found by "chiba of topsec alpha
  * lab")</changelog>
</package>
<package pkgid="550487d11b5a4bf569ab394fd2738b3dab4842f20bf4f628330b159c8823cb5a" name="pngcheck" arch="src">
  <version epoch="0" ver="3.0.3" rel="bp154.2.3.1"/>
  <changelog author="opensuse@dstoecker.de" date="1251633600">- created 2.3.0</changelog>
  <changelog author="pgajdos@suse.com" date="1376049600">- micro spec file cleanup, created *.changes</changelog>
  <changelog author="mpluskal@suse.com" date="1438516800">- Use url for source
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="pgajdos@suse.com" date="1606996800">- security update
- added patches
  fix CVE-2020-27818 [bsc#1179528], global buffer overflow was discovered in check_chunk_name function via crafted pngfile
  + pngcheck-CVE-2020-27818.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1609156800">- version update to 3.0.0
  * 20070709 GRR: tweaked color definitions slightly to work better on terminals
  * with white/light backgrounds
  * 20070712 GRR: added Makefile.mingw32
  * 20100504 GRR: fixed DHDR (pre-MNG-1.0) bug identified by Winfried &lt;szukw000@arcor.de&gt;
  * 20170713 GRP: added eXIf support (GRR: added check for II/MM/unknown format)
  * 20201012 BB:  converted static const help/usage-related strings to macros so
  * -Werror=format-security doesn't trigger (Ben Beasley)
  * 20201015 BB:  added (help2man-generated) man pages for all three utils
  * 20201017 GRR: added top-level LICENSE file; fixed various compiler warnings
  * 20201031 GRR: replaced gpl/COPYING (outdated address, references to Library
  * GPL) with https://www.gnu.org/licenses/old-licenses/gpl-2.0.txt
  * (thanks to Ben Beasley for catching that)
  * 20201113 BB:  fixed buffer-overflow vulnerability discovered by "giantbranch
  * of NSFOCUS Security Team"
  * https://bugzilla.redhat.com/show_bug.cgi?id=1897485
  * 20201128 BB:  found and fixed four additional vulnerabilities (null-pointer
  * dereference and three buffer overruns)
  * 20201209 LP:  fixed an off-by-one bug in check_magic() (Lucy Phipps)
  * 20201209 LL:  converted two zlib-version warnings/errors to go to stderr
  * (Lemures Lemniscati, actually from 20180318; forwarded by LP)
  * 20201210 BB:  fixed another buffer-overflow vulnerability discovered by
  * "giantbranch of NSFOCUS Security Team"
  * https://bugzilla.redhat.com/show_bug.cgi?id=1905775
  * 20201212 GRR: removed -f ("force") option due to multiple security issues
- modified patches
  % fixbuild.diff (refreshed)
- deleted patches
  - pngcheck-CVE-2020-27818.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1639396800">- version update to 3.0.3
  * 20210124 GRR: released version 3.0.1
  * ----------------------
  * 20201217 BB:  fixed a crash bug (and probable vulnerability) in large (MNG)
  * LOOP chunks
  * 20210131 GRR: updated Makefile.mingw32 for modern versions and added
  * Makefile.mingw64 (targets Win64); both are essentially
  * UNTESTED, however!
  * 20210131 GRR: released version 3.0.2
  * ----------------------
  * 20210416 BB:  fixed a divide-by-zero crash bug (and probable vulnerability)
  * in interlaced images with extra compressed data beyond the
  * nominal end of the image data (found by "chiba of topsec alpha
  * lab")</changelog>
</package>
<package pkgid="6b5046604d953aa2aadeba26d15496aed83aadf35a37b1f08d2df4bcc23040f7" name="pngcheck" arch="x86_64">
  <version epoch="0" ver="3.0.3" rel="bp154.2.3.1"/>
  <changelog author="opensuse@dstoecker.de" date="1251633600">- created 2.3.0</changelog>
  <changelog author="pgajdos@suse.com" date="1376049600">- micro spec file cleanup, created *.changes</changelog>
  <changelog author="mpluskal@suse.com" date="1438516800">- Use url for source
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="pgajdos@suse.com" date="1606996800">- security update
- added patches
  fix CVE-2020-27818 [bsc#1179528], global buffer overflow was discovered in check_chunk_name function via crafted pngfile
  + pngcheck-CVE-2020-27818.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1609156800">- version update to 3.0.0
  * 20070709 GRR: tweaked color definitions slightly to work better on terminals
  * with white/light backgrounds
  * 20070712 GRR: added Makefile.mingw32
  * 20100504 GRR: fixed DHDR (pre-MNG-1.0) bug identified by Winfried &lt;szukw000@arcor.de&gt;
  * 20170713 GRP: added eXIf support (GRR: added check for II/MM/unknown format)
  * 20201012 BB:  converted static const help/usage-related strings to macros so
  * -Werror=format-security doesn't trigger (Ben Beasley)
  * 20201015 BB:  added (help2man-generated) man pages for all three utils
  * 20201017 GRR: added top-level LICENSE file; fixed various compiler warnings
  * 20201031 GRR: replaced gpl/COPYING (outdated address, references to Library
  * GPL) with https://www.gnu.org/licenses/old-licenses/gpl-2.0.txt
  * (thanks to Ben Beasley for catching that)
  * 20201113 BB:  fixed buffer-overflow vulnerability discovered by "giantbranch
  * of NSFOCUS Security Team"
  * https://bugzilla.redhat.com/show_bug.cgi?id=1897485
  * 20201128 BB:  found and fixed four additional vulnerabilities (null-pointer
  * dereference and three buffer overruns)
  * 20201209 LP:  fixed an off-by-one bug in check_magic() (Lucy Phipps)
  * 20201209 LL:  converted two zlib-version warnings/errors to go to stderr
  * (Lemures Lemniscati, actually from 20180318; forwarded by LP)
  * 20201210 BB:  fixed another buffer-overflow vulnerability discovered by
  * "giantbranch of NSFOCUS Security Team"
  * https://bugzilla.redhat.com/show_bug.cgi?id=1905775
  * 20201212 GRR: removed -f ("force") option due to multiple security issues
- modified patches
  % fixbuild.diff (refreshed)
- deleted patches
  - pngcheck-CVE-2020-27818.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1639396800">- version update to 3.0.3
  * 20210124 GRR: released version 3.0.1
  * ----------------------
  * 20201217 BB:  fixed a crash bug (and probable vulnerability) in large (MNG)
  * LOOP chunks
  * 20210131 GRR: updated Makefile.mingw32 for modern versions and added
  * Makefile.mingw64 (targets Win64); both are essentially
  * UNTESTED, however!
  * 20210131 GRR: released version 3.0.2
  * ----------------------
  * 20210416 BB:  fixed a divide-by-zero crash bug (and probable vulnerability)
  * in interlaced images with extra compressed data beyond the
  * nominal end of the image data (found by "chiba of topsec alpha
  * lab")</changelog>
</package>
<package pkgid="b2dc25bc176189aefe79a1dbd76417970fd51e44c5f53c46adc2e75935792797" name="postgresql12-orafce" arch="aarch64">
  <version epoch="0" ver="4.1.1+git0.519b5b5" rel="bp154.3.1"/>
  <changelog author="mrueckert@suse.de" date="1424347200">- update to 3.0.9
  * PostgreSQL 9.4 compilation
  * new datatype and related functions: oracle.date
  * new varchar2, nvarchar2 types and related functions
    (Amit Langote)
  * oracle.substr emulate better Oracle substr function behave
    (Vinayak Pokale)
  * fix few internal issues that breaks a PGXN tests (Pavel Stehule)</changelog>
  <changelog author="mrueckert@suse.de" date="1502366400">- switch to multibuild</changelog>
  <changelog author="mrueckert@suse.de" date="1502366401">- update to 3.4.0
  * new aggregate function wm_concat
  * PostgreSQL 9.6, 10 are supported well
  * remove support for 8.3, 8.4, 9.0, 9.1 (only 9.2 and higher
    are supported)
  * new functions: sysdate, sessiontimezone, dbtimezone
  * remove support for 8.2
  * add support for 9.5
  * change the releasion number system
  * new functions: to_single_byte, to_multi_byte, nanvl, length,
    ltrim, btrim, rtrim, lpad, rpad
  * fix compilation issue in new code for Pg &lt;= 9.1</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1540468800">- Add build for PostgreSQL 11 and drop 9.3.
- BuildRequire server-devel instead of devel.</changelog>
  <changelog author="mrueckert@suse.de" date="1540641600">- Update to version 3.6.1+git24.cf58d28:
  * remove strict flag for nvl functions
  * minor cleaning
  * remove pre 9.4 support
  * fixes for 12
  * fix compile on PostgreSQL 12
  * missing reset fsec in ora_timestamptz_round function
  * #74 - badly joined comment
  * #75 set correct type for trunc and round two params functions - float4
  * allow usage of schema oracle and plunit
  * copy paste correction intarray -&gt; orafce
  * fix broken compilation on non MSC platforms
  * fix output path
  * add postgresql 10.3 target support need ICU header by path c:\icu
  * fix conversion from 'size_t' to 'int'
  * add 9.6 build environments fix C89 compatible compliance
  * fix nensenses related yyllex, using older form of bison option
  * new function  oracle.numtodsinterval
  * disallow functions from utl_file package on MS Windows
  * clean headers used by msvc
  * cleaning complete build on msvc
  * add missing files for windows compilation
  * fix #64
  * dba_segments view, cleaning
  * Fix formatting of examples.
  * Append documentation about how to translate REGEXP_SUBSTR Oracle function to PostgreSQL.
  * fix the position of a half-width space added by rpad().
  * enhancing emulation of Oracle views
  * fix some segfaults reported by Andreas Seltenreich #59
  * new few Oracle system views
  * prepare for 3.6
  * Minor bug in doc
  * Avoid setting unused variable value
  * Fix issue #54 - missing collatable flag for string types varchar2, nvarchar2.
  * Ensure LWLockRegisterTranche call in every session before LWLockAcquire call.
  * Preparation for 3.5 release.
  * add missing V1 signatures
  * Add Orafce Documentation and Oracle to PostgreSQL Migration Guide
- drop patch orafce-orafce_sql_yyparse-bison26.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1571745600">- adding postgresql12 to _multibuild</changelog>
  <changelog author="mrueckert@suse.de" date="1571745601">- Update to version 3.8.0+git4.a65cfb8:
  * return back missing files
  * fresh parser files
  * master is now unreleased 3.9
  * minor enhancing user_constraints view - use conrelid::regclass instead table_name. This will be  consistent with index name, and show schema for tables that are not on search_path
  * prepare for 3.8
  * qualify decode function to be installable on greenplum
  * fix PostgreSQL 12 support
  * missing files
  * typo
  * fix compilation and regress tests for PostgreSQL 11
  * Revert "Merge pull request #83 from kato-sho/fix-build-for-PG12"
  * Fix build for PostgreSQL 12
  * remove extra #include utils/nabstime.h
  * update against change format of FunctionCallInfo in PostgreSQL 12
  * fix compilation for pre PostgreSQL 12
  * fix compile for PostgreSQL 12
  * prepare for 3.7.2
  * bug fix release
  * fix bad filter in oracle.user_tables view
  * update NEWS
  * use older syntax for create operator command
  * add warning about possible compatibility issue
  * fix docs
  * null safe pipe operator for (n)varchar2 should be explicitly enabled (due compatibility)
  * bugfix should to use OR REPLACE clause
  * add bugfixes to update script
  * fix readme
  * more faster (n)varchar2 null safe concat
  * null safe concat operator for varchar2 and nvarchar2
  * fix compilation for PostgreSQL 12
  * target type should be qualified
  * broken formula for add_month
  * fix broken oracle.add_months for last day in month
  * fix comment assigned to wrong object
  * minor doc nvl</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273600">- remove dead PG versions</changelog>
  <changelog author="mrueckert@suse.de" date="1638273601">- Update to version 3.17.0+git12.e9ab8a3:
  * Fix some typos in plunit.c and plvdate.c.
  * Fix a non-standard function declaration.
  * pg_nextpower2_32 is available for pg13+|
  * fix typo in plvdate.c
  * fix typo in alert.c
  * Improve the place that double the size of a buffer
  * Fix access privileges of utl_file.tmpdir()
  * prepare for 3.17.0
  * This patch reproduce the same behavior of the regexp_* function with null input.
  * Fix version number in install script.
  * Remove duplicate variable declarations
  * Allow even longer runtimes in DBMS_UTILITY.GET_TIME test
  * prepare for 3.16.2
  * fix build for msvc
  * prepare for 3.16.1
  * sql/dbms_utility.sql: Allow longer test runtime
  * fix some shared memory leaks, reduce an possibility to raise an error 'lock requested error' by cleaning locks (these locks are not Postgres's locks) in dbms_alert_removeall and by triggering cleaning shared memory from locks related to closed processes when there are not free locks - per #PR 140 reported by @rbapin
  * prepare for 3.16.0
  * rename pipe type to orafce_pipe due conflict with pipe function from unistd.h
  * ensure public access to public schema
  * add missing sql file for 3.16
  * Add DBMS_UTILITY.GET_TIME function, it returns the current time in 100th's of a second from a point in time in the past. This function is used for determining elapsed time. This function is widely used in some Oracle installation for timing of functions or statements.
  * fix warning on MSVC
  * prepare for 3.15.1
  * Remove reference to pg_enc2name_tbl variable. It is not available on MSVC, and for this functionality it is not necessary
  * prepare for 3.15.0
  * function regexp_match cannot be used because it is available from Postgres 10
  * Add Oracle regexp_replace() function which supports start position and occurrence. It correspond to the Oracle behavior and consist in plpgsql functions based on PG regexp_matches() and regexp_replace(). All details of the implementation is explained in the documentation. Also include in this patch also include regression tests for regexp_replace() including the Oracle queries and results in comment.
  * just reformatting
  * just reformatting
  * Remove wrong and unused code.
  * Apply orafce rule for assignment on remaining call to position() and length.
  * Use better style for assignment instead of pseudo query.
  * - Improve performances by replacing SELECT ... INTO syntax with := - Replace call to regexp_match() by regexp_matches() to support   PostgreSQL 9.5 and 9.6. - Remove obsolete orafce--3.14.sql file - Update regression test to disable CONTEXT trace.
  * Add Oracle regexp_like(), regexp_count(), regexp_instr() and regexp_substr() functions. They correspond to the Oracle behavior and consist in plpgsql functions based on PG regexp_matches(). All details of the implementation is explained in the documentation. This patch also include a regression test regexp_func.sql including the Oracle queries and results in comment.
  * more ilustrative description of msvc project properties
  * Oracle.sysdate uses time zone stored in GUC orafce.timezone. The setting of configuration value was correct - the global variable orafce_timezone has correct content (it can be checked by SELECT oracle.dbtimezone(). But direct output of this GUC (show orafce.timezone) was broken because the handler of system timezone was used and the statement "show orafce.timezone" did same output like "show timezone", and it is surely wrong.
  * pre 3.14 changes
  * When nvarchar2 and varchar2 was introduced, then was not possibility to correctly set protransform column. Orafce used UPDATE of pg_proc table. Unfortunatelly, this new dependency was not coverget by entry in pg_depend. Today this issue breaks binary upgrade. Fix is simple - on new Postgres it uses ALTER FUNCTION SUPPORT, for older releases it tries to fix pg_depend table.
  * implementation of unistr function
  * Added ppc64le architecture
  * Added some transactions behavior differences
  * Catch dbms_random.string() output variation on big-endian
  * Fix the wrong filter in oracle.user_tables view in orafce--3.6--3.7.sql.
  * Update README.asciidoc
  * Update others.c
  * Use correct macros to convert between Datums and pointers.
  * note in readme
  * prepare for 3.13.4
  * forgotten files
  * prepare for 3.13.3
  * enable utf_file on MSWin
  * cleaning build on MSWin
  * reduce stack size
  * minor cleaning
  * prepare for 3.12
  * fix warning for postgres 13
  * fix asciidoc format
  * minor README fix
  * travis status
  * PostgreSQL 9.4 is not supported
  * example to trigger func
  * fix build and tests for older releases
  * trigger functions - ensure so only null or only empty string is used
  * fix: 'if' condition is always true
  * prepare for 3.11.1
  * missing test output file
  * only PostgreSQL 9.4 and higher are supported
  * Run the testsuite on travis-ci.org
  * clean warnings detected by -Wextra
  * forgot. GRANT
  * The previous securing of utl_file package required SECURITY DEFINER flags on functions. Using this flag is security risk. Insted using SECURITY DEFINER we allow READ from utl_file.utl_file_dir to PUBLIC. This design has one advantage - the final user can control usage of these function with granting user rights just only on table utl_file.utl_file_dir.
  * Update README.asciidoc
  * Update README.asciidoc
  * Update README.asciidoc
  * Update README.asciidoc
  * fix long standing bug - function with access to utl_file_dir should to has security definer flag
  * fix compilation against Postgres 13
  * small fixes and rewrite of utl_file paragraph
  * the safe dictionary in utl_file package can be identified by name too
  * Fix doc and comment about months_between returning numeric (not float8).
  * there are some differences between Oracle and Orafce
  * fix compilation on PostgreSQL 13 (by removing useless include), fix to_multi_byte('\')
  * prepare for 3.9.0
  * remove extra clean to allow repeateable build without bison
  * Orafce is licenced under 0-clause BSD licence
  * polishing licence
  * use postgres routines for printing float4, float8 values in to_char function (reduce garbage and trailing zeroes)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273602">- enable pg 13 and 14</changelog>
  <changelog author="mrueckert@suse.de" date="1675166400">- Update to version 4.1.1+git0.519b5b5:
  * prepare for 4.1.1
  * build on master (16) branch
  * use adv lock to synchronize start of pipe and alert tests
  * add connect by level &lt; num in migration docs
  * Hierarchical Query identifys the leaves
  * Update the connect_by_root example, for better semantics
  * fix: CONNECT_BY_ROOT in hierarchical query is converted to WITH RECURSIVE syntax
  * the table [200~utl_file.utl_file_dir is dumpable
  * fix compilation against pg master
  * prepare for 4.0.2
  * fix -wextra warnings
  * fix shadowed variable varning
  * fix msvc build for PostgreSQL 14
  * fix build for pg16
  * fix META file and prepare for 4.0.1
  * to_multi_byte and to_single_byte support euc_cn(gb2312)
  * add  oracle sql migration : CONNECT_BY_ROOT
  * fix oracle connect by
  * prepare for 4.0.0 release
  * remove obsolete ref on orafce_sql
  * rename shadow variable
  * initial merge of dbms_sql from orafce_sql
  * other cleaning after removing support for unsupported pg releases
  * increase version
  * remove support for PostgreSQL 10 and older
  * Fix database creation during installchecks for ICU cluster
  * fix dbms_output.serveroutput(true) clear the buffer.It conforms to the features of oracle.
  * prepare for 3.25.1
  * fix calculation of plvstr.is_prefix for negative numeric values - see issue #198
  * fix for pre 14 releases
  * doc and regress tests
  * remove useless func decl
  * support for older releases
  * initial implementation
  * initial
  * fix build against master (16) branch
  * wrap possible unsupported DDL to dynamic SQL
  * specify schema inside definition function tanh
  * only set editorconfig
  * prepare for 3.24.4
  * remove redundant ALTER FUNCTION #191
  * prepare for 3.24.3
  * PostgreSQL older than 12 doesn't allow ALTER FUNCTION pg_catalog.x SET SCHEMA oracle. Only dirty way by direct modification of system catalogue is possible. see issue #190
  * prepare for 3.24.2
  * fix missing oracle.mod functions in update scripts
  * prepare for 3.24.1
  * fix regress nlssort test for PostgreSQL 9.5 without \if command
  * Fix race condition during initialization in ora_lock_shmem.
  * nlssort: Add a missing call to PG_RE_THROW.
  * Limit nlssort test to Linux/glibc systems with en_US.utf8 installed.
  * NEWS
  * set storage for varchar2 and nvarchar2 to extended strategy
  * prepare for 3.23
  * fix broken calculation in plvdate_isleapyear function #184
  * fix support for pg9.5, fix regress tests for older releases
  * prepare for 3.22.1
  * Fix read past the end of string in to_sigle_byte().
  * Fix dbms_utility.get_time() to use the full range of int32.
  * fix readme
  * prepare for 3.22.0
  * move dbobjects from public and pg_catalog schemas to oracle schema
  * moving objects from public and pg_catalog to oracle schema
  * move RequestAddinShmemSpace to shmem_request_hook for PostgreSQL 15
  * Update sql_migration06.md
  * Restore sqlparse.c and sqlparse.h
  * Undo comment
  * Add comment
  * Add Parallel safe to mod function
  * Bug fix
  * Add mod function for Oracle compatibility
  * Fix typos and spelling in docs and error messages
  * prepare for 3.21.1
  * fix mswin build - regexp functions was not really marked as dllexport due missing include of builtins.h
  * remove empty line
  * fix of some compatibility issues
  * REG_NOSUB is working only on PostgreSQL 15
  * workable release for PostgreSQL 15
  * modification for compotibility with orafce.regexp_instr
  * backport regexp_instr from PostgreSQL 15, use C version instead PLpgSQL for better possibilities of usage regexp API
  * prepare for 3.20.0
  * Fix regexp_instr() function with occurrence when the same value matching a pattern is found at several place in the string.
  * signature of nvl2 function is enhanced to "any", anyelement, anyelement. After this change, the behavior is more close to Oracle. Unfortunatelly - this change can break extension update for some customers that uses nvl2 in views.
  * support negative start argument for function substrb. Originally orafce used buildin bytea substr function. Now it recalculate start argument. see issue #172
  * prepare for 3.19
  * Allow empty string on input of functions to_number and to_date. In this case returns NULL.
  * remove white spaces
  * replace obsolete CSTRING macro by text_to_csring function
  * prepare for 3.18.1
  * fix - badly handled fn_extra in oracle.greatest(least) function
  * prepare for 3.18.0
  * Update README.asciidoc
  * Update README.asciidoc
  * use older API for iteration over an array. Now, oracle.greatest and oracle.least are working on all supported releases
  * remove negative tests related to orafce.greatest because: a) error message is different on supported pg versions, b) the coverage and benefit of these tests is low
  * remove two lines from regress tests of greatest due dependency on used collate
  * Add documentation for greatest and least functions.
  * Update upgrade extension file with the smallint addition.
  * Add greatest/least SQL redefinition for smallint Add regression tests fot the two functions.
  * Oracle functions LEAST and GREATEST return NULL if at least one of the parameters is NULL. This is not the case for the PostgreSQL equivalent functions which only return NULL when all the parameters are NULL. This patch creates the two functions in the oracle schema to have the same behavior than in Oracle.
  * Minor grammatical fix to README.asciidoc
  * fix typo in charpad.c
  * fix typo in orafce--3.17.sql
  * Update Orafce_Documentation_05.md
  * Catch dbms_random.string() output variation on Windows</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675166401">- enable pg 15</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675166402">- remove pg 10 support</changelog>
  <changelog author="Emiliano Langella &lt;emiliano.langella@suse.com&gt;" date="1676030400">- Added "Name:" tag.</changelog>
</package>
<package pkgid="be1e557044e65dba5a7279bb31ac7d10a5c9a7e7c9f5933197c65cd141782c76" name="postgresql12-orafce" arch="i586">
  <version epoch="0" ver="4.1.1+git0.519b5b5" rel="bp154.3.1"/>
  <changelog author="mrueckert@suse.de" date="1424347200">- update to 3.0.9
  * PostgreSQL 9.4 compilation
  * new datatype and related functions: oracle.date
  * new varchar2, nvarchar2 types and related functions
    (Amit Langote)
  * oracle.substr emulate better Oracle substr function behave
    (Vinayak Pokale)
  * fix few internal issues that breaks a PGXN tests (Pavel Stehule)</changelog>
  <changelog author="mrueckert@suse.de" date="1502366400">- switch to multibuild</changelog>
  <changelog author="mrueckert@suse.de" date="1502366401">- update to 3.4.0
  * new aggregate function wm_concat
  * PostgreSQL 9.6, 10 are supported well
  * remove support for 8.3, 8.4, 9.0, 9.1 (only 9.2 and higher
    are supported)
  * new functions: sysdate, sessiontimezone, dbtimezone
  * remove support for 8.2
  * add support for 9.5
  * change the releasion number system
  * new functions: to_single_byte, to_multi_byte, nanvl, length,
    ltrim, btrim, rtrim, lpad, rpad
  * fix compilation issue in new code for Pg &lt;= 9.1</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1540468800">- Add build for PostgreSQL 11 and drop 9.3.
- BuildRequire server-devel instead of devel.</changelog>
  <changelog author="mrueckert@suse.de" date="1540641600">- Update to version 3.6.1+git24.cf58d28:
  * remove strict flag for nvl functions
  * minor cleaning
  * remove pre 9.4 support
  * fixes for 12
  * fix compile on PostgreSQL 12
  * missing reset fsec in ora_timestamptz_round function
  * #74 - badly joined comment
  * #75 set correct type for trunc and round two params functions - float4
  * allow usage of schema oracle and plunit
  * copy paste correction intarray -&gt; orafce
  * fix broken compilation on non MSC platforms
  * fix output path
  * add postgresql 10.3 target support need ICU header by path c:\icu
  * fix conversion from 'size_t' to 'int'
  * add 9.6 build environments fix C89 compatible compliance
  * fix nensenses related yyllex, using older form of bison option
  * new function  oracle.numtodsinterval
  * disallow functions from utl_file package on MS Windows
  * clean headers used by msvc
  * cleaning complete build on msvc
  * add missing files for windows compilation
  * fix #64
  * dba_segments view, cleaning
  * Fix formatting of examples.
  * Append documentation about how to translate REGEXP_SUBSTR Oracle function to PostgreSQL.
  * fix the position of a half-width space added by rpad().
  * enhancing emulation of Oracle views
  * fix some segfaults reported by Andreas Seltenreich #59
  * new few Oracle system views
  * prepare for 3.6
  * Minor bug in doc
  * Avoid setting unused variable value
  * Fix issue #54 - missing collatable flag for string types varchar2, nvarchar2.
  * Ensure LWLockRegisterTranche call in every session before LWLockAcquire call.
  * Preparation for 3.5 release.
  * add missing V1 signatures
  * Add Orafce Documentation and Oracle to PostgreSQL Migration Guide
- drop patch orafce-orafce_sql_yyparse-bison26.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1571745600">- adding postgresql12 to _multibuild</changelog>
  <changelog author="mrueckert@suse.de" date="1571745601">- Update to version 3.8.0+git4.a65cfb8:
  * return back missing files
  * fresh parser files
  * master is now unreleased 3.9
  * minor enhancing user_constraints view - use conrelid::regclass instead table_name. This will be  consistent with index name, and show schema for tables that are not on search_path
  * prepare for 3.8
  * qualify decode function to be installable on greenplum
  * fix PostgreSQL 12 support
  * missing files
  * typo
  * fix compilation and regress tests for PostgreSQL 11
  * Revert "Merge pull request #83 from kato-sho/fix-build-for-PG12"
  * Fix build for PostgreSQL 12
  * remove extra #include utils/nabstime.h
  * update against change format of FunctionCallInfo in PostgreSQL 12
  * fix compilation for pre PostgreSQL 12
  * fix compile for PostgreSQL 12
  * prepare for 3.7.2
  * bug fix release
  * fix bad filter in oracle.user_tables view
  * update NEWS
  * use older syntax for create operator command
  * add warning about possible compatibility issue
  * fix docs
  * null safe pipe operator for (n)varchar2 should be explicitly enabled (due compatibility)
  * bugfix should to use OR REPLACE clause
  * add bugfixes to update script
  * fix readme
  * more faster (n)varchar2 null safe concat
  * null safe concat operator for varchar2 and nvarchar2
  * fix compilation for PostgreSQL 12
  * target type should be qualified
  * broken formula for add_month
  * fix broken oracle.add_months for last day in month
  * fix comment assigned to wrong object
  * minor doc nvl</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273600">- remove dead PG versions</changelog>
  <changelog author="mrueckert@suse.de" date="1638273601">- Update to version 3.17.0+git12.e9ab8a3:
  * Fix some typos in plunit.c and plvdate.c.
  * Fix a non-standard function declaration.
  * pg_nextpower2_32 is available for pg13+|
  * fix typo in plvdate.c
  * fix typo in alert.c
  * Improve the place that double the size of a buffer
  * Fix access privileges of utl_file.tmpdir()
  * prepare for 3.17.0
  * This patch reproduce the same behavior of the regexp_* function with null input.
  * Fix version number in install script.
  * Remove duplicate variable declarations
  * Allow even longer runtimes in DBMS_UTILITY.GET_TIME test
  * prepare for 3.16.2
  * fix build for msvc
  * prepare for 3.16.1
  * sql/dbms_utility.sql: Allow longer test runtime
  * fix some shared memory leaks, reduce an possibility to raise an error 'lock requested error' by cleaning locks (these locks are not Postgres's locks) in dbms_alert_removeall and by triggering cleaning shared memory from locks related to closed processes when there are not free locks - per #PR 140 reported by @rbapin
  * prepare for 3.16.0
  * rename pipe type to orafce_pipe due conflict with pipe function from unistd.h
  * ensure public access to public schema
  * add missing sql file for 3.16
  * Add DBMS_UTILITY.GET_TIME function, it returns the current time in 100th's of a second from a point in time in the past. This function is used for determining elapsed time. This function is widely used in some Oracle installation for timing of functions or statements.
  * fix warning on MSVC
  * prepare for 3.15.1
  * Remove reference to pg_enc2name_tbl variable. It is not available on MSVC, and for this functionality it is not necessary
  * prepare for 3.15.0
  * function regexp_match cannot be used because it is available from Postgres 10
  * Add Oracle regexp_replace() function which supports start position and occurrence. It correspond to the Oracle behavior and consist in plpgsql functions based on PG regexp_matches() and regexp_replace(). All details of the implementation is explained in the documentation. Also include in this patch also include regression tests for regexp_replace() including the Oracle queries and results in comment.
  * just reformatting
  * just reformatting
  * Remove wrong and unused code.
  * Apply orafce rule for assignment on remaining call to position() and length.
  * Use better style for assignment instead of pseudo query.
  * - Improve performances by replacing SELECT ... INTO syntax with := - Replace call to regexp_match() by regexp_matches() to support   PostgreSQL 9.5 and 9.6. - Remove obsolete orafce--3.14.sql file - Update regression test to disable CONTEXT trace.
  * Add Oracle regexp_like(), regexp_count(), regexp_instr() and regexp_substr() functions. They correspond to the Oracle behavior and consist in plpgsql functions based on PG regexp_matches(). All details of the implementation is explained in the documentation. This patch also include a regression test regexp_func.sql including the Oracle queries and results in comment.
  * more ilustrative description of msvc project properties
  * Oracle.sysdate uses time zone stored in GUC orafce.timezone. The setting of configuration value was correct - the global variable orafce_timezone has correct content (it can be checked by SELECT oracle.dbtimezone(). But direct output of this GUC (show orafce.timezone) was broken because the handler of system timezone was used and the statement "show orafce.timezone" did same output like "show timezone", and it is surely wrong.
  * pre 3.14 changes
  * When nvarchar2 and varchar2 was introduced, then was not possibility to correctly set protransform column. Orafce used UPDATE of pg_proc table. Unfortunatelly, this new dependency was not coverget by entry in pg_depend. Today this issue breaks binary upgrade. Fix is simple - on new Postgres it uses ALTER FUNCTION SUPPORT, for older releases it tries to fix pg_depend table.
  * implementation of unistr function
  * Added ppc64le architecture
  * Added some transactions behavior differences
  * Catch dbms_random.string() output variation on big-endian
  * Fix the wrong filter in oracle.user_tables view in orafce--3.6--3.7.sql.
  * Update README.asciidoc
  * Update others.c
  * Use correct macros to convert between Datums and pointers.
  * note in readme
  * prepare for 3.13.4
  * forgotten files
  * prepare for 3.13.3
  * enable utf_file on MSWin
  * cleaning build on MSWin
  * reduce stack size
  * minor cleaning
  * prepare for 3.12
  * fix warning for postgres 13
  * fix asciidoc format
  * minor README fix
  * travis status
  * PostgreSQL 9.4 is not supported
  * example to trigger func
  * fix build and tests for older releases
  * trigger functions - ensure so only null or only empty string is used
  * fix: 'if' condition is always true
  * prepare for 3.11.1
  * missing test output file
  * only PostgreSQL 9.4 and higher are supported
  * Run the testsuite on travis-ci.org
  * clean warnings detected by -Wextra
  * forgot. GRANT
  * The previous securing of utl_file package required SECURITY DEFINER flags on functions. Using this flag is security risk. Insted using SECURITY DEFINER we allow READ from utl_file.utl_file_dir to PUBLIC. This design has one advantage - the final user can control usage of these function with granting user rights just only on table utl_file.utl_file_dir.
  * Update README.asciidoc
  * Update README.asciidoc
  * Update README.asciidoc
  * Update README.asciidoc
  * fix long standing bug - function with access to utl_file_dir should to has security definer flag
  * fix compilation against Postgres 13
  * small fixes and rewrite of utl_file paragraph
  * the safe dictionary in utl_file package can be identified by name too
  * Fix doc and comment about months_between returning numeric (not float8).
  * there are some differences between Oracle and Orafce
  * fix compilation on PostgreSQL 13 (by removing useless include), fix to_multi_byte('\')
  * prepare for 3.9.0
  * remove extra clean to allow repeateable build without bison
  * Orafce is licenced under 0-clause BSD licence
  * polishing licence
  * use postgres routines for printing float4, float8 values in to_char function (reduce garbage and trailing zeroes)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273602">- enable pg 13 and 14</changelog>
  <changelog author="mrueckert@suse.de" date="1675166400">- Update to version 4.1.1+git0.519b5b5:
  * prepare for 4.1.1
  * build on master (16) branch
  * use adv lock to synchronize start of pipe and alert tests
  * add connect by level &lt; num in migration docs
  * Hierarchical Query identifys the leaves
  * Update the connect_by_root example, for better semantics
  * fix: CONNECT_BY_ROOT in hierarchical query is converted to WITH RECURSIVE syntax
  * the table [200~utl_file.utl_file_dir is dumpable
  * fix compilation against pg master
  * prepare for 4.0.2
  * fix -wextra warnings
  * fix shadowed variable varning
  * fix msvc build for PostgreSQL 14
  * fix build for pg16
  * fix META file and prepare for 4.0.1
  * to_multi_byte and to_single_byte support euc_cn(gb2312)
  * add  oracle sql migration : CONNECT_BY_ROOT
  * fix oracle connect by
  * prepare for 4.0.0 release
  * remove obsolete ref on orafce_sql
  * rename shadow variable
  * initial merge of dbms_sql from orafce_sql
  * other cleaning after removing support for unsupported pg releases
  * increase version
  * remove support for PostgreSQL 10 and older
  * Fix database creation during installchecks for ICU cluster
  * fix dbms_output.serveroutput(true) clear the buffer.It conforms to the features of oracle.
  * prepare for 3.25.1
  * fix calculation of plvstr.is_prefix for negative numeric values - see issue #198
  * fix for pre 14 releases
  * doc and regress tests
  * remove useless func decl
  * support for older releases
  * initial implementation
  * initial
  * fix build against master (16) branch
  * wrap possible unsupported DDL to dynamic SQL
  * specify schema inside definition function tanh
  * only set editorconfig
  * prepare for 3.24.4
  * remove redundant ALTER FUNCTION #191
  * prepare for 3.24.3
  * PostgreSQL older than 12 doesn't allow ALTER FUNCTION pg_catalog.x SET SCHEMA oracle. Only dirty way by direct modification of system catalogue is possible. see issue #190
  * prepare for 3.24.2
  * fix missing oracle.mod functions in update scripts
  * prepare for 3.24.1
  * fix regress nlssort test for PostgreSQL 9.5 without \if command
  * Fix race condition during initialization in ora_lock_shmem.
  * nlssort: Add a missing call to PG_RE_THROW.
  * Limit nlssort test to Linux/glibc systems with en_US.utf8 installed.
  * NEWS
  * set storage for varchar2 and nvarchar2 to extended strategy
  * prepare for 3.23
  * fix broken calculation in plvdate_isleapyear function #184
  * fix support for pg9.5, fix regress tests for older releases
  * prepare for 3.22.1
  * Fix read past the end of string in to_sigle_byte().
  * Fix dbms_utility.get_time() to use the full range of int32.
  * fix readme
  * prepare for 3.22.0
  * move dbobjects from public and pg_catalog schemas to oracle schema
  * moving objects from public and pg_catalog to oracle schema
  * move RequestAddinShmemSpace to shmem_request_hook for PostgreSQL 15
  * Update sql_migration06.md
  * Restore sqlparse.c and sqlparse.h
  * Undo comment
  * Add comment
  * Add Parallel safe to mod function
  * Bug fix
  * Add mod function for Oracle compatibility
  * Fix typos and spelling in docs and error messages
  * prepare for 3.21.1
  * fix mswin build - regexp functions was not really marked as dllexport due missing include of builtins.h
  * remove empty line
  * fix of some compatibility issues
  * REG_NOSUB is working only on PostgreSQL 15
  * workable release for PostgreSQL 15
  * modification for compotibility with orafce.regexp_instr
  * backport regexp_instr from PostgreSQL 15, use C version instead PLpgSQL for better possibilities of usage regexp API
  * prepare for 3.20.0
  * Fix regexp_instr() function with occurrence when the same value matching a pattern is found at several place in the string.
  * signature of nvl2 function is enhanced to "any", anyelement, anyelement. After this change, the behavior is more close to Oracle. Unfortunatelly - this change can break extension update for some customers that uses nvl2 in views.
  * support negative start argument for function substrb. Originally orafce used buildin bytea substr function. Now it recalculate start argument. see issue #172
  * prepare for 3.19
  * Allow empty string on input of functions to_number and to_date. In this case returns NULL.
  * remove white spaces
  * replace obsolete CSTRING macro by text_to_csring function
  * prepare for 3.18.1
  * fix - badly handled fn_extra in oracle.greatest(least) function
  * prepare for 3.18.0
  * Update README.asciidoc
  * Update README.asciidoc
  * use older API for iteration over an array. Now, oracle.greatest and oracle.least are working on all supported releases
  * remove negative tests related to orafce.greatest because: a) error message is different on supported pg versions, b) the coverage and benefit of these tests is low
  * remove two lines from regress tests of greatest due dependency on used collate
  * Add documentation for greatest and least functions.
  * Update upgrade extension file with the smallint addition.
  * Add greatest/least SQL redefinition for smallint Add regression tests fot the two functions.
  * Oracle functions LEAST and GREATEST return NULL if at least one of the parameters is NULL. This is not the case for the PostgreSQL equivalent functions which only return NULL when all the parameters are NULL. This patch creates the two functions in the oracle schema to have the same behavior than in Oracle.
  * Minor grammatical fix to README.asciidoc
  * fix typo in charpad.c
  * fix typo in orafce--3.17.sql
  * Update Orafce_Documentation_05.md
  * Catch dbms_random.string() output variation on Windows</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675166401">- enable pg 15</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675166402">- remove pg 10 support</changelog>
  <changelog author="Emiliano Langella &lt;emiliano.langella@suse.com&gt;" date="1676030400">- Added "Name:" tag.</changelog>
</package>
<package pkgid="cc1d714e3a96738ddfce569d120964b2da36ba60ec6e61840e584ef82fca417b" name="postgresql12-orafce" arch="ppc64le">
  <version epoch="0" ver="4.1.1+git0.519b5b5" rel="bp154.3.1"/>
  <changelog author="mrueckert@suse.de" date="1424347200">- update to 3.0.9
  * PostgreSQL 9.4 compilation
  * new datatype and related functions: oracle.date
  * new varchar2, nvarchar2 types and related functions
    (Amit Langote)
  * oracle.substr emulate better Oracle substr function behave
    (Vinayak Pokale)
  * fix few internal issues that breaks a PGXN tests (Pavel Stehule)</changelog>
  <changelog author="mrueckert@suse.de" date="1502366400">- switch to multibuild</changelog>
  <changelog author="mrueckert@suse.de" date="1502366401">- update to 3.4.0
  * new aggregate function wm_concat
  * PostgreSQL 9.6, 10 are supported well
  * remove support for 8.3, 8.4, 9.0, 9.1 (only 9.2 and higher
    are supported)
  * new functions: sysdate, sessiontimezone, dbtimezone
  * remove support for 8.2
  * add support for 9.5
  * change the releasion number system
  * new functions: to_single_byte, to_multi_byte, nanvl, length,
    ltrim, btrim, rtrim, lpad, rpad
  * fix compilation issue in new code for Pg &lt;= 9.1</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1540468800">- Add build for PostgreSQL 11 and drop 9.3.
- BuildRequire server-devel instead of devel.</changelog>
  <changelog author="mrueckert@suse.de" date="1540641600">- Update to version 3.6.1+git24.cf58d28:
  * remove strict flag for nvl functions
  * minor cleaning
  * remove pre 9.4 support
  * fixes for 12
  * fix compile on PostgreSQL 12
  * missing reset fsec in ora_timestamptz_round function
  * #74 - badly joined comment
  * #75 set correct type for trunc and round two params functions - float4
  * allow usage of schema oracle and plunit
  * copy paste correction intarray -&gt; orafce
  * fix broken compilation on non MSC platforms
  * fix output path
  * add postgresql 10.3 target support need ICU header by path c:\icu
  * fix conversion from 'size_t' to 'int'
  * add 9.6 build environments fix C89 compatible compliance
  * fix nensenses related yyllex, using older form of bison option
  * new function  oracle.numtodsinterval
  * disallow functions from utl_file package on MS Windows
  * clean headers used by msvc
  * cleaning complete build on msvc
  * add missing files for windows compilation
  * fix #64
  * dba_segments view, cleaning
  * Fix formatting of examples.
  * Append documentation about how to translate REGEXP_SUBSTR Oracle function to PostgreSQL.
  * fix the position of a half-width space added by rpad().
  * enhancing emulation of Oracle views
  * fix some segfaults reported by Andreas Seltenreich #59
  * new few Oracle system views
  * prepare for 3.6
  * Minor bug in doc
  * Avoid setting unused variable value
  * Fix issue #54 - missing collatable flag for string types varchar2, nvarchar2.
  * Ensure LWLockRegisterTranche call in every session before LWLockAcquire call.
  * Preparation for 3.5 release.
  * add missing V1 signatures
  * Add Orafce Documentation and Oracle to PostgreSQL Migration Guide
- drop patch orafce-orafce_sql_yyparse-bison26.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1571745600">- adding postgresql12 to _multibuild</changelog>
  <changelog author="mrueckert@suse.de" date="1571745601">- Update to version 3.8.0+git4.a65cfb8:
  * return back missing files
  * fresh parser files
  * master is now unreleased 3.9
  * minor enhancing user_constraints view - use conrelid::regclass instead table_name. This will be  consistent with index name, and show schema for tables that are not on search_path
  * prepare for 3.8
  * qualify decode function to be installable on greenplum
  * fix PostgreSQL 12 support
  * missing files
  * typo
  * fix compilation and regress tests for PostgreSQL 11
  * Revert "Merge pull request #83 from kato-sho/fix-build-for-PG12"
  * Fix build for PostgreSQL 12
  * remove extra #include utils/nabstime.h
  * update against change format of FunctionCallInfo in PostgreSQL 12
  * fix compilation for pre PostgreSQL 12
  * fix compile for PostgreSQL 12
  * prepare for 3.7.2
  * bug fix release
  * fix bad filter in oracle.user_tables view
  * update NEWS
  * use older syntax for create operator command
  * add warning about possible compatibility issue
  * fix docs
  * null safe pipe operator for (n)varchar2 should be explicitly enabled (due compatibility)
  * bugfix should to use OR REPLACE clause
  * add bugfixes to update script
  * fix readme
  * more faster (n)varchar2 null safe concat
  * null safe concat operator for varchar2 and nvarchar2
  * fix compilation for PostgreSQL 12
  * target type should be qualified
  * broken formula for add_month
  * fix broken oracle.add_months for last day in month
  * fix comment assigned to wrong object
  * minor doc nvl</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273600">- remove dead PG versions</changelog>
  <changelog author="mrueckert@suse.de" date="1638273601">- Update to version 3.17.0+git12.e9ab8a3:
  * Fix some typos in plunit.c and plvdate.c.
  * Fix a non-standard function declaration.
  * pg_nextpower2_32 is available for pg13+|
  * fix typo in plvdate.c
  * fix typo in alert.c
  * Improve the place that double the size of a buffer
  * Fix access privileges of utl_file.tmpdir()
  * prepare for 3.17.0
  * This patch reproduce the same behavior of the regexp_* function with null input.
  * Fix version number in install script.
  * Remove duplicate variable declarations
  * Allow even longer runtimes in DBMS_UTILITY.GET_TIME test
  * prepare for 3.16.2
  * fix build for msvc
  * prepare for 3.16.1
  * sql/dbms_utility.sql: Allow longer test runtime
  * fix some shared memory leaks, reduce an possibility to raise an error 'lock requested error' by cleaning locks (these locks are not Postgres's locks) in dbms_alert_removeall and by triggering cleaning shared memory from locks related to closed processes when there are not free locks - per #PR 140 reported by @rbapin
  * prepare for 3.16.0
  * rename pipe type to orafce_pipe due conflict with pipe function from unistd.h
  * ensure public access to public schema
  * add missing sql file for 3.16
  * Add DBMS_UTILITY.GET_TIME function, it returns the current time in 100th's of a second from a point in time in the past. This function is used for determining elapsed time. This function is widely used in some Oracle installation for timing of functions or statements.
  * fix warning on MSVC
  * prepare for 3.15.1
  * Remove reference to pg_enc2name_tbl variable. It is not available on MSVC, and for this functionality it is not necessary
  * prepare for 3.15.0
  * function regexp_match cannot be used because it is available from Postgres 10
  * Add Oracle regexp_replace() function which supports start position and occurrence. It correspond to the Oracle behavior and consist in plpgsql functions based on PG regexp_matches() and regexp_replace(). All details of the implementation is explained in the documentation. Also include in this patch also include regression tests for regexp_replace() including the Oracle queries and results in comment.
  * just reformatting
  * just reformatting
  * Remove wrong and unused code.
  * Apply orafce rule for assignment on remaining call to position() and length.
  * Use better style for assignment instead of pseudo query.
  * - Improve performances by replacing SELECT ... INTO syntax with := - Replace call to regexp_match() by regexp_matches() to support   PostgreSQL 9.5 and 9.6. - Remove obsolete orafce--3.14.sql file - Update regression test to disable CONTEXT trace.
  * Add Oracle regexp_like(), regexp_count(), regexp_instr() and regexp_substr() functions. They correspond to the Oracle behavior and consist in plpgsql functions based on PG regexp_matches(). All details of the implementation is explained in the documentation. This patch also include a regression test regexp_func.sql including the Oracle queries and results in comment.
  * more ilustrative description of msvc project properties
  * Oracle.sysdate uses time zone stored in GUC orafce.timezone. The setting of configuration value was correct - the global variable orafce_timezone has correct content (it can be checked by SELECT oracle.dbtimezone(). But direct output of this GUC (show orafce.timezone) was broken because the handler of system timezone was used and the statement "show orafce.timezone" did same output like "show timezone", and it is surely wrong.
  * pre 3.14 changes
  * When nvarchar2 and varchar2 was introduced, then was not possibility to correctly set protransform column. Orafce used UPDATE of pg_proc table. Unfortunatelly, this new dependency was not coverget by entry in pg_depend. Today this issue breaks binary upgrade. Fix is simple - on new Postgres it uses ALTER FUNCTION SUPPORT, for older releases it tries to fix pg_depend table.
  * implementation of unistr function
  * Added ppc64le architecture
  * Added some transactions behavior differences
  * Catch dbms_random.string() output variation on big-endian
  * Fix the wrong filter in oracle.user_tables view in orafce--3.6--3.7.sql.
  * Update README.asciidoc
  * Update others.c
  * Use correct macros to convert between Datums and pointers.
  * note in readme
  * prepare for 3.13.4
  * forgotten files
  * prepare for 3.13.3
  * enable utf_file on MSWin
  * cleaning build on MSWin
  * reduce stack size
  * minor cleaning
  * prepare for 3.12
  * fix warning for postgres 13
  * fix asciidoc format
  * minor README fix
  * travis status
  * PostgreSQL 9.4 is not supported
  * example to trigger func
  * fix build and tests for older releases
  * trigger functions - ensure so only null or only empty string is used
  * fix: 'if' condition is always true
  * prepare for 3.11.1
  * missing test output file
  * only PostgreSQL 9.4 and higher are supported
  * Run the testsuite on travis-ci.org
  * clean warnings detected by -Wextra
  * forgot. GRANT
  * The previous securing of utl_file package required SECURITY DEFINER flags on functions. Using this flag is security risk. Insted using SECURITY DEFINER we allow READ from utl_file.utl_file_dir to PUBLIC. This design has one advantage - the final user can control usage of these function with granting user rights just only on table utl_file.utl_file_dir.
  * Update README.asciidoc
  * Update README.asciidoc
  * Update README.asciidoc
  * Update README.asciidoc
  * fix long standing bug - function with access to utl_file_dir should to has security definer flag
  * fix compilation against Postgres 13
  * small fixes and rewrite of utl_file paragraph
  * the safe dictionary in utl_file package can be identified by name too
  * Fix doc and comment about months_between returning numeric (not float8).
  * there are some differences between Oracle and Orafce
  * fix compilation on PostgreSQL 13 (by removing useless include), fix to_multi_byte('\')
  * prepare for 3.9.0
  * remove extra clean to allow repeateable build without bison
  * Orafce is licenced under 0-clause BSD licence
  * polishing licence
  * use postgres routines for printing float4, float8 values in to_char function (reduce garbage and trailing zeroes)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273602">- enable pg 13 and 14</changelog>
  <changelog author="mrueckert@suse.de" date="1675166400">- Update to version 4.1.1+git0.519b5b5:
  * prepare for 4.1.1
  * build on master (16) branch
  * use adv lock to synchronize start of pipe and alert tests
  * add connect by level &lt; num in migration docs
  * Hierarchical Query identifys the leaves
  * Update the connect_by_root example, for better semantics
  * fix: CONNECT_BY_ROOT in hierarchical query is converted to WITH RECURSIVE syntax
  * the table [200~utl_file.utl_file_dir is dumpable
  * fix compilation against pg master
  * prepare for 4.0.2
  * fix -wextra warnings
  * fix shadowed variable varning
  * fix msvc build for PostgreSQL 14
  * fix build for pg16
  * fix META file and prepare for 4.0.1
  * to_multi_byte and to_single_byte support euc_cn(gb2312)
  * add  oracle sql migration : CONNECT_BY_ROOT
  * fix oracle connect by
  * prepare for 4.0.0 release
  * remove obsolete ref on orafce_sql
  * rename shadow variable
  * initial merge of dbms_sql from orafce_sql
  * other cleaning after removing support for unsupported pg releases
  * increase version
  * remove support for PostgreSQL 10 and older
  * Fix database creation during installchecks for ICU cluster
  * fix dbms_output.serveroutput(true) clear the buffer.It conforms to the features of oracle.
  * prepare for 3.25.1
  * fix calculation of plvstr.is_prefix for negative numeric values - see issue #198
  * fix for pre 14 releases
  * doc and regress tests
  * remove useless func decl
  * support for older releases
  * initial implementation
  * initial
  * fix build against master (16) branch
  * wrap possible unsupported DDL to dynamic SQL
  * specify schema inside definition function tanh
  * only set editorconfig
  * prepare for 3.24.4
  * remove redundant ALTER FUNCTION #191
  * prepare for 3.24.3
  * PostgreSQL older than 12 doesn't allow ALTER FUNCTION pg_catalog.x SET SCHEMA oracle. Only dirty way by direct modification of system catalogue is possible. see issue #190
  * prepare for 3.24.2
  * fix missing oracle.mod functions in update scripts
  * prepare for 3.24.1
  * fix regress nlssort test for PostgreSQL 9.5 without \if command
  * Fix race condition during initialization in ora_lock_shmem.
  * nlssort: Add a missing call to PG_RE_THROW.
  * Limit nlssort test to Linux/glibc systems with en_US.utf8 installed.
  * NEWS
  * set storage for varchar2 and nvarchar2 to extended strategy
  * prepare for 3.23
  * fix broken calculation in plvdate_isleapyear function #184
  * fix support for pg9.5, fix regress tests for older releases
  * prepare for 3.22.1
  * Fix read past the end of string in to_sigle_byte().
  * Fix dbms_utility.get_time() to use the full range of int32.
  * fix readme
  * prepare for 3.22.0
  * move dbobjects from public and pg_catalog schemas to oracle schema
  * moving objects from public and pg_catalog to oracle schema
  * move RequestAddinShmemSpace to shmem_request_hook for PostgreSQL 15
  * Update sql_migration06.md
  * Restore sqlparse.c and sqlparse.h
  * Undo comment
  * Add comment
  * Add Parallel safe to mod function
  * Bug fix
  * Add mod function for Oracle compatibility
  * Fix typos and spelling in docs and error messages
  * prepare for 3.21.1
  * fix mswin build - regexp functions was not really marked as dllexport due missing include of builtins.h
  * remove empty line
  * fix of some compatibility issues
  * REG_NOSUB is working only on PostgreSQL 15
  * workable release for PostgreSQL 15
  * modification for compotibility with orafce.regexp_instr
  * backport regexp_instr from PostgreSQL 15, use C version instead PLpgSQL for better possibilities of usage regexp API
  * prepare for 3.20.0
  * Fix regexp_instr() function with occurrence when the same value matching a pattern is found at several place in the string.
  * signature of nvl2 function is enhanced to "any", anyelement, anyelement. After this change, the behavior is more close to Oracle. Unfortunatelly - this change can break extension update for some customers that uses nvl2 in views.
  * support negative start argument for function substrb. Originally orafce used buildin bytea substr function. Now it recalculate start argument. see issue #172
  * prepare for 3.19
  * Allow empty string on input of functions to_number and to_date. In this case returns NULL.
  * remove white spaces
  * replace obsolete CSTRING macro by text_to_csring function
  * prepare for 3.18.1
  * fix - badly handled fn_extra in oracle.greatest(least) function
  * prepare for 3.18.0
  * Update README.asciidoc
  * Update README.asciidoc
  * use older API for iteration over an array. Now, oracle.greatest and oracle.least are working on all supported releases
  * remove negative tests related to orafce.greatest because: a) error message is different on supported pg versions, b) the coverage and benefit of these tests is low
  * remove two lines from regress tests of greatest due dependency on used collate
  * Add documentation for greatest and least functions.
  * Update upgrade extension file with the smallint addition.
  * Add greatest/least SQL redefinition for smallint Add regression tests fot the two functions.
  * Oracle functions LEAST and GREATEST return NULL if at least one of the parameters is NULL. This is not the case for the PostgreSQL equivalent functions which only return NULL when all the parameters are NULL. This patch creates the two functions in the oracle schema to have the same behavior than in Oracle.
  * Minor grammatical fix to README.asciidoc
  * fix typo in charpad.c
  * fix typo in orafce--3.17.sql
  * Update Orafce_Documentation_05.md
  * Catch dbms_random.string() output variation on Windows</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675166401">- enable pg 15</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675166402">- remove pg 10 support</changelog>
  <changelog author="Emiliano Langella &lt;emiliano.langella@suse.com&gt;" date="1676030400">- Added "Name:" tag.</changelog>
</package>
<package pkgid="9f1ef2999e9a61925c4998ac854bf6600c0a53f1ad787dba5a7d7848ba3df5d4" name="postgresql12-orafce" arch="s390x">
  <version epoch="0" ver="4.1.1+git0.519b5b5" rel="bp154.3.1"/>
  <changelog author="mrueckert@suse.de" date="1424347200">- update to 3.0.9
  * PostgreSQL 9.4 compilation
  * new datatype and related functions: oracle.date
  * new varchar2, nvarchar2 types and related functions
    (Amit Langote)
  * oracle.substr emulate better Oracle substr function behave
    (Vinayak Pokale)
  * fix few internal issues that breaks a PGXN tests (Pavel Stehule)</changelog>
  <changelog author="mrueckert@suse.de" date="1502366400">- switch to multibuild</changelog>
  <changelog author="mrueckert@suse.de" date="1502366401">- update to 3.4.0
  * new aggregate function wm_concat
  * PostgreSQL 9.6, 10 are supported well
  * remove support for 8.3, 8.4, 9.0, 9.1 (only 9.2 and higher
    are supported)
  * new functions: sysdate, sessiontimezone, dbtimezone
  * remove support for 8.2
  * add support for 9.5
  * change the releasion number system
  * new functions: to_single_byte, to_multi_byte, nanvl, length,
    ltrim, btrim, rtrim, lpad, rpad
  * fix compilation issue in new code for Pg &lt;= 9.1</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1540468800">- Add build for PostgreSQL 11 and drop 9.3.
- BuildRequire server-devel instead of devel.</changelog>
  <changelog author="mrueckert@suse.de" date="1540641600">- Update to version 3.6.1+git24.cf58d28:
  * remove strict flag for nvl functions
  * minor cleaning
  * remove pre 9.4 support
  * fixes for 12
  * fix compile on PostgreSQL 12
  * missing reset fsec in ora_timestamptz_round function
  * #74 - badly joined comment
  * #75 set correct type for trunc and round two params functions - float4
  * allow usage of schema oracle and plunit
  * copy paste correction intarray -&gt; orafce
  * fix broken compilation on non MSC platforms
  * fix output path
  * add postgresql 10.3 target support need ICU header by path c:\icu
  * fix conversion from 'size_t' to 'int'
  * add 9.6 build environments fix C89 compatible compliance
  * fix nensenses related yyllex, using older form of bison option
  * new function  oracle.numtodsinterval
  * disallow functions from utl_file package on MS Windows
  * clean headers used by msvc
  * cleaning complete build on msvc
  * add missing files for windows compilation
  * fix #64
  * dba_segments view, cleaning
  * Fix formatting of examples.
  * Append documentation about how to translate REGEXP_SUBSTR Oracle function to PostgreSQL.
  * fix the position of a half-width space added by rpad().
  * enhancing emulation of Oracle views
  * fix some segfaults reported by Andreas Seltenreich #59
  * new few Oracle system views
  * prepare for 3.6
  * Minor bug in doc
  * Avoid setting unused variable value
  * Fix issue #54 - missing collatable flag for string types varchar2, nvarchar2.
  * Ensure LWLockRegisterTranche call in every session before LWLockAcquire call.
  * Preparation for 3.5 release.
  * add missing V1 signatures
  * Add Orafce Documentation and Oracle to PostgreSQL Migration Guide
- drop patch orafce-orafce_sql_yyparse-bison26.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1571745600">- adding postgresql12 to _multibuild</changelog>
  <changelog author="mrueckert@suse.de" date="1571745601">- Update to version 3.8.0+git4.a65cfb8:
  * return back missing files
  * fresh parser files
  * master is now unreleased 3.9
  * minor enhancing user_constraints view - use conrelid::regclass instead table_name. This will be  consistent with index name, and show schema for tables that are not on search_path
  * prepare for 3.8
  * qualify decode function to be installable on greenplum
  * fix PostgreSQL 12 support
  * missing files
  * typo
  * fix compilation and regress tests for PostgreSQL 11
  * Revert "Merge pull request #83 from kato-sho/fix-build-for-PG12"
  * Fix build for PostgreSQL 12
  * remove extra #include utils/nabstime.h
  * update against change format of FunctionCallInfo in PostgreSQL 12
  * fix compilation for pre PostgreSQL 12
  * fix compile for PostgreSQL 12
  * prepare for 3.7.2
  * bug fix release
  * fix bad filter in oracle.user_tables view
  * update NEWS
  * use older syntax for create operator command
  * add warning about possible compatibility issue
  * fix docs
  * null safe pipe operator for (n)varchar2 should be explicitly enabled (due compatibility)
  * bugfix should to use OR REPLACE clause
  * add bugfixes to update script
  * fix readme
  * more faster (n)varchar2 null safe concat
  * null safe concat operator for varchar2 and nvarchar2
  * fix compilation for PostgreSQL 12
  * target type should be qualified
  * broken formula for add_month
  * fix broken oracle.add_months for last day in month
  * fix comment assigned to wrong object
  * minor doc nvl</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273600">- remove dead PG versions</changelog>
  <changelog author="mrueckert@suse.de" date="1638273601">- Update to version 3.17.0+git12.e9ab8a3:
  * Fix some typos in plunit.c and plvdate.c.
  * Fix a non-standard function declaration.
  * pg_nextpower2_32 is available for pg13+|
  * fix typo in plvdate.c
  * fix typo in alert.c
  * Improve the place that double the size of a buffer
  * Fix access privileges of utl_file.tmpdir()
  * prepare for 3.17.0
  * This patch reproduce the same behavior of the regexp_* function with null input.
  * Fix version number in install script.
  * Remove duplicate variable declarations
  * Allow even longer runtimes in DBMS_UTILITY.GET_TIME test
  * prepare for 3.16.2
  * fix build for msvc
  * prepare for 3.16.1
  * sql/dbms_utility.sql: Allow longer test runtime
  * fix some shared memory leaks, reduce an possibility to raise an error 'lock requested error' by cleaning locks (these locks are not Postgres's locks) in dbms_alert_removeall and by triggering cleaning shared memory from locks related to closed processes when there are not free locks - per #PR 140 reported by @rbapin
  * prepare for 3.16.0
  * rename pipe type to orafce_pipe due conflict with pipe function from unistd.h
  * ensure public access to public schema
  * add missing sql file for 3.16
  * Add DBMS_UTILITY.GET_TIME function, it returns the current time in 100th's of a second from a point in time in the past. This function is used for determining elapsed time. This function is widely used in some Oracle installation for timing of functions or statements.
  * fix warning on MSVC
  * prepare for 3.15.1
  * Remove reference to pg_enc2name_tbl variable. It is not available on MSVC, and for this functionality it is not necessary
  * prepare for 3.15.0
  * function regexp_match cannot be used because it is available from Postgres 10
  * Add Oracle regexp_replace() function which supports start position and occurrence. It correspond to the Oracle behavior and consist in plpgsql functions based on PG regexp_matches() and regexp_replace(). All details of the implementation is explained in the documentation. Also include in this patch also include regression tests for regexp_replace() including the Oracle queries and results in comment.
  * just reformatting
  * just reformatting
  * Remove wrong and unused code.
  * Apply orafce rule for assignment on remaining call to position() and length.
  * Use better style for assignment instead of pseudo query.
  * - Improve performances by replacing SELECT ... INTO syntax with := - Replace call to regexp_match() by regexp_matches() to support   PostgreSQL 9.5 and 9.6. - Remove obsolete orafce--3.14.sql file - Update regression test to disable CONTEXT trace.
  * Add Oracle regexp_like(), regexp_count(), regexp_instr() and regexp_substr() functions. They correspond to the Oracle behavior and consist in plpgsql functions based on PG regexp_matches(). All details of the implementation is explained in the documentation. This patch also include a regression test regexp_func.sql including the Oracle queries and results in comment.
  * more ilustrative description of msvc project properties
  * Oracle.sysdate uses time zone stored in GUC orafce.timezone. The setting of configuration value was correct - the global variable orafce_timezone has correct content (it can be checked by SELECT oracle.dbtimezone(). But direct output of this GUC (show orafce.timezone) was broken because the handler of system timezone was used and the statement "show orafce.timezone" did same output like "show timezone", and it is surely wrong.
  * pre 3.14 changes
  * When nvarchar2 and varchar2 was introduced, then was not possibility to correctly set protransform column. Orafce used UPDATE of pg_proc table. Unfortunatelly, this new dependency was not coverget by entry in pg_depend. Today this issue breaks binary upgrade. Fix is simple - on new Postgres it uses ALTER FUNCTION SUPPORT, for older releases it tries to fix pg_depend table.
  * implementation of unistr function
  * Added ppc64le architecture
  * Added some transactions behavior differences
  * Catch dbms_random.string() output variation on big-endian
  * Fix the wrong filter in oracle.user_tables view in orafce--3.6--3.7.sql.
  * Update README.asciidoc
  * Update others.c
  * Use correct macros to convert between Datums and pointers.
  * note in readme
  * prepare for 3.13.4
  * forgotten files
  * prepare for 3.13.3
  * enable utf_file on MSWin
  * cleaning build on MSWin
  * reduce stack size
  * minor cleaning
  * prepare for 3.12
  * fix warning for postgres 13
  * fix asciidoc format
  * minor README fix
  * travis status
  * PostgreSQL 9.4 is not supported
  * example to trigger func
  * fix build and tests for older releases
  * trigger functions - ensure so only null or only empty string is used
  * fix: 'if' condition is always true
  * prepare for 3.11.1
  * missing test output file
  * only PostgreSQL 9.4 and higher are supported
  * Run the testsuite on travis-ci.org
  * clean warnings detected by -Wextra
  * forgot. GRANT
  * The previous securing of utl_file package required SECURITY DEFINER flags on functions. Using this flag is security risk. Insted using SECURITY DEFINER we allow READ from utl_file.utl_file_dir to PUBLIC. This design has one advantage - the final user can control usage of these function with granting user rights just only on table utl_file.utl_file_dir.
  * Update README.asciidoc
  * Update README.asciidoc
  * Update README.asciidoc
  * Update README.asciidoc
  * fix long standing bug - function with access to utl_file_dir should to has security definer flag
  * fix compilation against Postgres 13
  * small fixes and rewrite of utl_file paragraph
  * the safe dictionary in utl_file package can be identified by name too
  * Fix doc and comment about months_between returning numeric (not float8).
  * there are some differences between Oracle and Orafce
  * fix compilation on PostgreSQL 13 (by removing useless include), fix to_multi_byte('\')
  * prepare for 3.9.0
  * remove extra clean to allow repeateable build without bison
  * Orafce is licenced under 0-clause BSD licence
  * polishing licence
  * use postgres routines for printing float4, float8 values in to_char function (reduce garbage and trailing zeroes)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273602">- enable pg 13 and 14</changelog>
  <changelog author="mrueckert@suse.de" date="1675166400">- Update to version 4.1.1+git0.519b5b5:
  * prepare for 4.1.1
  * build on master (16) branch
  * use adv lock to synchronize start of pipe and alert tests
  * add connect by level &lt; num in migration docs
  * Hierarchical Query identifys the leaves
  * Update the connect_by_root example, for better semantics
  * fix: CONNECT_BY_ROOT in hierarchical query is converted to WITH RECURSIVE syntax
  * the table [200~utl_file.utl_file_dir is dumpable
  * fix compilation against pg master
  * prepare for 4.0.2
  * fix -wextra warnings
  * fix shadowed variable varning
  * fix msvc build for PostgreSQL 14
  * fix build for pg16
  * fix META file and prepare for 4.0.1
  * to_multi_byte and to_single_byte support euc_cn(gb2312)
  * add  oracle sql migration : CONNECT_BY_ROOT
  * fix oracle connect by
  * prepare for 4.0.0 release
  * remove obsolete ref on orafce_sql
  * rename shadow variable
  * initial merge of dbms_sql from orafce_sql
  * other cleaning after removing support for unsupported pg releases
  * increase version
  * remove support for PostgreSQL 10 and older
  * Fix database creation during installchecks for ICU cluster
  * fix dbms_output.serveroutput(true) clear the buffer.It conforms to the features of oracle.
  * prepare for 3.25.1
  * fix calculation of plvstr.is_prefix for negative numeric values - see issue #198
  * fix for pre 14 releases
  * doc and regress tests
  * remove useless func decl
  * support for older releases
  * initial implementation
  * initial
  * fix build against master (16) branch
  * wrap possible unsupported DDL to dynamic SQL
  * specify schema inside definition function tanh
  * only set editorconfig
  * prepare for 3.24.4
  * remove redundant ALTER FUNCTION #191
  * prepare for 3.24.3
  * PostgreSQL older than 12 doesn't allow ALTER FUNCTION pg_catalog.x SET SCHEMA oracle. Only dirty way by direct modification of system catalogue is possible. see issue #190
  * prepare for 3.24.2
  * fix missing oracle.mod functions in update scripts
  * prepare for 3.24.1
  * fix regress nlssort test for PostgreSQL 9.5 without \if command
  * Fix race condition during initialization in ora_lock_shmem.
  * nlssort: Add a missing call to PG_RE_THROW.
  * Limit nlssort test to Linux/glibc systems with en_US.utf8 installed.
  * NEWS
  * set storage for varchar2 and nvarchar2 to extended strategy
  * prepare for 3.23
  * fix broken calculation in plvdate_isleapyear function #184
  * fix support for pg9.5, fix regress tests for older releases
  * prepare for 3.22.1
  * Fix read past the end of string in to_sigle_byte().
  * Fix dbms_utility.get_time() to use the full range of int32.
  * fix readme
  * prepare for 3.22.0
  * move dbobjects from public and pg_catalog schemas to oracle schema
  * moving objects from public and pg_catalog to oracle schema
  * move RequestAddinShmemSpace to shmem_request_hook for PostgreSQL 15
  * Update sql_migration06.md
  * Restore sqlparse.c and sqlparse.h
  * Undo comment
  * Add comment
  * Add Parallel safe to mod function
  * Bug fix
  * Add mod function for Oracle compatibility
  * Fix typos and spelling in docs and error messages
  * prepare for 3.21.1
  * fix mswin build - regexp functions was not really marked as dllexport due missing include of builtins.h
  * remove empty line
  * fix of some compatibility issues
  * REG_NOSUB is working only on PostgreSQL 15
  * workable release for PostgreSQL 15
  * modification for compotibility with orafce.regexp_instr
  * backport regexp_instr from PostgreSQL 15, use C version instead PLpgSQL for better possibilities of usage regexp API
  * prepare for 3.20.0
  * Fix regexp_instr() function with occurrence when the same value matching a pattern is found at several place in the string.
  * signature of nvl2 function is enhanced to "any", anyelement, anyelement. After this change, the behavior is more close to Oracle. Unfortunatelly - this change can break extension update for some customers that uses nvl2 in views.
  * support negative start argument for function substrb. Originally orafce used buildin bytea substr function. Now it recalculate start argument. see issue #172
  * prepare for 3.19
  * Allow empty string on input of functions to_number and to_date. In this case returns NULL.
  * remove white spaces
  * replace obsolete CSTRING macro by text_to_csring function
  * prepare for 3.18.1
  * fix - badly handled fn_extra in oracle.greatest(least) function
  * prepare for 3.18.0
  * Update README.asciidoc
  * Update README.asciidoc
  * use older API for iteration over an array. Now, oracle.greatest and oracle.least are working on all supported releases
  * remove negative tests related to orafce.greatest because: a) error message is different on supported pg versions, b) the coverage and benefit of these tests is low
  * remove two lines from regress tests of greatest due dependency on used collate
  * Add documentation for greatest and least functions.
  * Update upgrade extension file with the smallint addition.
  * Add greatest/least SQL redefinition for smallint Add regression tests fot the two functions.
  * Oracle functions LEAST and GREATEST return NULL if at least one of the parameters is NULL. This is not the case for the PostgreSQL equivalent functions which only return NULL when all the parameters are NULL. This patch creates the two functions in the oracle schema to have the same behavior than in Oracle.
  * Minor grammatical fix to README.asciidoc
  * fix typo in charpad.c
  * fix typo in orafce--3.17.sql
  * Update Orafce_Documentation_05.md
  * Catch dbms_random.string() output variation on Windows</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675166401">- enable pg 15</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675166402">- remove pg 10 support</changelog>
  <changelog author="Emiliano Langella &lt;emiliano.langella@suse.com&gt;" date="1676030400">- Added "Name:" tag.</changelog>
</package>
<package pkgid="adac41248f0c46a30b2c6503dc7522a19a1fff9fd3d758421156e8c4196d22b3" name="postgresql12-orafce" arch="src">
  <version epoch="0" ver="4.1.1+git0.519b5b5" rel="bp154.3.1"/>
  <changelog author="darin@darins.net" date="1351252800">- added pre_checkin.sh to generate .spec and .changes</changelog>
  <changelog author="darin@darins.net" date="1351771200">- updated name in template
- set proper install location</changelog>
  <changelog author="darin@darins.net" date="1355745600">- renamed orafce.spec to orafce.spec.in</changelog>
  <changelog author="darin@darins.net" date="1375963200">- patch for compilation error with Bison &gt;=2.6
  See also http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=710633</changelog>
  <changelog author="darin@darins.net" date="1381320000">- updated to verion 3.0.6
- generate specs for PG 9.3</changelog>
  <changelog author="darin@darins.net" date="1381752000">- rename README.orafunc to README.asciidoc</changelog>
  <changelog author="mrueckert@suse.de" date="1424347200">- update to 3.0.9
  * PostgreSQL 9.4 compilation
  * new datatype and related functions: oracle.date
  * new varchar2, nvarchar2 types and related functions
    (Amit Langote)
  * oracle.substr emulate better Oracle substr function behave
    (Vinayak Pokale)
  * fix few internal issues that breaks a PGXN tests (Pavel Stehule)</changelog>
  <changelog author="mrueckert@suse.de" date="1502366400">- switch to multibuild</changelog>
  <changelog author="mrueckert@suse.de" date="1502366401">- update to 3.4.0
  * new aggregate function wm_concat
  * PostgreSQL 9.6, 10 are supported well
  * remove support for 8.3, 8.4, 9.0, 9.1 (only 9.2 and higher
    are supported)
  * new functions: sysdate, sessiontimezone, dbtimezone
  * remove support for 8.2
  * add support for 9.5
  * change the releasion number system
  * new functions: to_single_byte, to_multi_byte, nanvl, length,
    ltrim, btrim, rtrim, lpad, rpad
  * fix compilation issue in new code for Pg &lt;= 9.1</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1540468800">- Add build for PostgreSQL 11 and drop 9.3.
- BuildRequire server-devel instead of devel.</changelog>
  <changelog author="mrueckert@suse.de" date="1540641600">- Update to version 3.6.1+git24.cf58d28:
  * remove strict flag for nvl functions
  * minor cleaning
  * remove pre 9.4 support
  * fixes for 12
  * fix compile on PostgreSQL 12
  * missing reset fsec in ora_timestamptz_round function
  * #74 - badly joined comment
  * #75 set correct type for trunc and round two params functions - float4
  * allow usage of schema oracle and plunit
  * copy paste correction intarray -&gt; orafce
  * fix broken compilation on non MSC platforms
  * fix output path
  * add postgresql 10.3 target support need ICU header by path c:\icu
  * fix conversion from 'size_t' to 'int'
  * add 9.6 build environments fix C89 compatible compliance
  * fix nensenses related yyllex, using older form of bison option
  * new function  oracle.numtodsinterval
  * disallow functions from utl_file package on MS Windows
  * clean headers used by msvc
  * cleaning complete build on msvc
  * add missing files for windows compilation
  * fix #64
  * dba_segments view, cleaning
  * Fix formatting of examples.
  * Append documentation about how to translate REGEXP_SUBSTR Oracle function to PostgreSQL.
  * fix the position of a half-width space added by rpad().
  * enhancing emulation of Oracle views
  * fix some segfaults reported by Andreas Seltenreich #59
  * new few Oracle system views
  * prepare for 3.6
  * Minor bug in doc
  * Avoid setting unused variable value
  * Fix issue #54 - missing collatable flag for string types varchar2, nvarchar2.
  * Ensure LWLockRegisterTranche call in every session before LWLockAcquire call.
  * Preparation for 3.5 release.
  * add missing V1 signatures
  * Add Orafce Documentation and Oracle to PostgreSQL Migration Guide
- drop patch orafce-orafce_sql_yyparse-bison26.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1571745600">- adding postgresql12 to _multibuild</changelog>
  <changelog author="mrueckert@suse.de" date="1571745601">- Update to version 3.8.0+git4.a65cfb8:
  * return back missing files
  * fresh parser files
  * master is now unreleased 3.9
  * minor enhancing user_constraints view - use conrelid::regclass instead table_name. This will be  consistent with index name, and show schema for tables that are not on search_path
  * prepare for 3.8
  * qualify decode function to be installable on greenplum
  * fix PostgreSQL 12 support
  * missing files
  * typo
  * fix compilation and regress tests for PostgreSQL 11
  * Revert "Merge pull request #83 from kato-sho/fix-build-for-PG12"
  * Fix build for PostgreSQL 12
  * remove extra #include utils/nabstime.h
  * update against change format of FunctionCallInfo in PostgreSQL 12
  * fix compilation for pre PostgreSQL 12
  * fix compile for PostgreSQL 12
  * prepare for 3.7.2
  * bug fix release
  * fix bad filter in oracle.user_tables view
  * update NEWS
  * use older syntax for create operator command
  * add warning about possible compatibility issue
  * fix docs
  * null safe pipe operator for (n)varchar2 should be explicitly enabled (due compatibility)
  * bugfix should to use OR REPLACE clause
  * add bugfixes to update script
  * fix readme
  * more faster (n)varchar2 null safe concat
  * null safe concat operator for varchar2 and nvarchar2
  * fix compilation for PostgreSQL 12
  * target type should be qualified
  * broken formula for add_month
  * fix broken oracle.add_months for last day in month
  * fix comment assigned to wrong object
  * minor doc nvl</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273600">- remove dead PG versions</changelog>
  <changelog author="mrueckert@suse.de" date="1638273601">- Update to version 3.17.0+git12.e9ab8a3:
  * Fix some typos in plunit.c and plvdate.c.
  * Fix a non-standard function declaration.
  * pg_nextpower2_32 is available for pg13+|
  * fix typo in plvdate.c
  * fix typo in alert.c
  * Improve the place that double the size of a buffer
  * Fix access privileges of utl_file.tmpdir()
  * prepare for 3.17.0
  * This patch reproduce the same behavior of the regexp_* function with null input.
  * Fix version number in install script.
  * Remove duplicate variable declarations
  * Allow even longer runtimes in DBMS_UTILITY.GET_TIME test
  * prepare for 3.16.2
  * fix build for msvc
  * prepare for 3.16.1
  * sql/dbms_utility.sql: Allow longer test runtime
  * fix some shared memory leaks, reduce an possibility to raise an error 'lock requested error' by cleaning locks (these locks are not Postgres's locks) in dbms_alert_removeall and by triggering cleaning shared memory from locks related to closed processes when there are not free locks - per #PR 140 reported by @rbapin
  * prepare for 3.16.0
  * rename pipe type to orafce_pipe due conflict with pipe function from unistd.h
  * ensure public access to public schema
  * add missing sql file for 3.16
  * Add DBMS_UTILITY.GET_TIME function, it returns the current time in 100th's of a second from a point in time in the past. This function is used for determining elapsed time. This function is widely used in some Oracle installation for timing of functions or statements.
  * fix warning on MSVC
  * prepare for 3.15.1
  * Remove reference to pg_enc2name_tbl variable. It is not available on MSVC, and for this functionality it is not necessary
  * prepare for 3.15.0
  * function regexp_match cannot be used because it is available from Postgres 10
  * Add Oracle regexp_replace() function which supports start position and occurrence. It correspond to the Oracle behavior and consist in plpgsql functions based on PG regexp_matches() and regexp_replace(). All details of the implementation is explained in the documentation. Also include in this patch also include regression tests for regexp_replace() including the Oracle queries and results in comment.
  * just reformatting
  * just reformatting
  * Remove wrong and unused code.
  * Apply orafce rule for assignment on remaining call to position() and length.
  * Use better style for assignment instead of pseudo query.
  * - Improve performances by replacing SELECT ... INTO syntax with := - Replace call to regexp_match() by regexp_matches() to support   PostgreSQL 9.5 and 9.6. - Remove obsolete orafce--3.14.sql file - Update regression test to disable CONTEXT trace.
  * Add Oracle regexp_like(), regexp_count(), regexp_instr() and regexp_substr() functions. They correspond to the Oracle behavior and consist in plpgsql functions based on PG regexp_matches(). All details of the implementation is explained in the documentation. This patch also include a regression test regexp_func.sql including the Oracle queries and results in comment.
  * more ilustrative description of msvc project properties
  * Oracle.sysdate uses time zone stored in GUC orafce.timezone. The setting of configuration value was correct - the global variable orafce_timezone has correct content (it can be checked by SELECT oracle.dbtimezone(). But direct output of this GUC (show orafce.timezone) was broken because the handler of system timezone was used and the statement "show orafce.timezone" did same output like "show timezone", and it is surely wrong.
  * pre 3.14 changes
  * When nvarchar2 and varchar2 was introduced, then was not possibility to correctly set protransform column. Orafce used UPDATE of pg_proc table. Unfortunatelly, this new dependency was not coverget by entry in pg_depend. Today this issue breaks binary upgrade. Fix is simple - on new Postgres it uses ALTER FUNCTION SUPPORT, for older releases it tries to fix pg_depend table.
  * implementation of unistr function
  * Added ppc64le architecture
  * Added some transactions behavior differences
  * Catch dbms_random.string() output variation on big-endian
  * Fix the wrong filter in oracle.user_tables view in orafce--3.6--3.7.sql.
  * Update README.asciidoc
  * Update others.c
  * Use correct macros to convert between Datums and pointers.
  * note in readme
  * prepare for 3.13.4
  * forgotten files
  * prepare for 3.13.3
  * enable utf_file on MSWin
  * cleaning build on MSWin
  * reduce stack size
  * minor cleaning
  * prepare for 3.12
  * fix warning for postgres 13
  * fix asciidoc format
  * minor README fix
  * travis status
  * PostgreSQL 9.4 is not supported
  * example to trigger func
  * fix build and tests for older releases
  * trigger functions - ensure so only null or only empty string is used
  * fix: 'if' condition is always true
  * prepare for 3.11.1
  * missing test output file
  * only PostgreSQL 9.4 and higher are supported
  * Run the testsuite on travis-ci.org
  * clean warnings detected by -Wextra
  * forgot. GRANT
  * The previous securing of utl_file package required SECURITY DEFINER flags on functions. Using this flag is security risk. Insted using SECURITY DEFINER we allow READ from utl_file.utl_file_dir to PUBLIC. This design has one advantage - the final user can control usage of these function with granting user rights just only on table utl_file.utl_file_dir.
  * Update README.asciidoc
  * Update README.asciidoc
  * Update README.asciidoc
  * Update README.asciidoc
  * fix long standing bug - function with access to utl_file_dir should to has security definer flag
  * fix compilation against Postgres 13
  * small fixes and rewrite of utl_file paragraph
  * the safe dictionary in utl_file package can be identified by name too
  * Fix doc and comment about months_between returning numeric (not float8).
  * there are some differences between Oracle and Orafce
  * fix compilation on PostgreSQL 13 (by removing useless include), fix to_multi_byte('\')
  * prepare for 3.9.0
  * remove extra clean to allow repeateable build without bison
  * Orafce is licenced under 0-clause BSD licence
  * polishing licence
  * use postgres routines for printing float4, float8 values in to_char function (reduce garbage and trailing zeroes)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273602">- enable pg 13 and 14</changelog>
  <changelog author="mrueckert@suse.de" date="1675166400">- Update to version 4.1.1+git0.519b5b5:
  * prepare for 4.1.1
  * build on master (16) branch
  * use adv lock to synchronize start of pipe and alert tests
  * add connect by level &lt; num in migration docs
  * Hierarchical Query identifys the leaves
  * Update the connect_by_root example, for better semantics
  * fix: CONNECT_BY_ROOT in hierarchical query is converted to WITH RECURSIVE syntax
  * the table [200~utl_file.utl_file_dir is dumpable
  * fix compilation against pg master
  * prepare for 4.0.2
  * fix -wextra warnings
  * fix shadowed variable varning
  * fix msvc build for PostgreSQL 14
  * fix build for pg16
  * fix META file and prepare for 4.0.1
  * to_multi_byte and to_single_byte support euc_cn(gb2312)
  * add  oracle sql migration : CONNECT_BY_ROOT
  * fix oracle connect by
  * prepare for 4.0.0 release
  * remove obsolete ref on orafce_sql
  * rename shadow variable
  * initial merge of dbms_sql from orafce_sql
  * other cleaning after removing support for unsupported pg releases
  * increase version
  * remove support for PostgreSQL 10 and older
  * Fix database creation during installchecks for ICU cluster
  * fix dbms_output.serveroutput(true) clear the buffer.It conforms to the features of oracle.
  * prepare for 3.25.1
  * fix calculation of plvstr.is_prefix for negative numeric values - see issue #198
  * fix for pre 14 releases
  * doc and regress tests
  * remove useless func decl
  * support for older releases
  * initial implementation
  * initial
  * fix build against master (16) branch
  * wrap possible unsupported DDL to dynamic SQL
  * specify schema inside definition function tanh
  * only set editorconfig
  * prepare for 3.24.4
  * remove redundant ALTER FUNCTION #191
  * prepare for 3.24.3
  * PostgreSQL older than 12 doesn't allow ALTER FUNCTION pg_catalog.x SET SCHEMA oracle. Only dirty way by direct modification of system catalogue is possible. see issue #190
  * prepare for 3.24.2
  * fix missing oracle.mod functions in update scripts
  * prepare for 3.24.1
  * fix regress nlssort test for PostgreSQL 9.5 without \if command
  * Fix race condition during initialization in ora_lock_shmem.
  * nlssort: Add a missing call to PG_RE_THROW.
  * Limit nlssort test to Linux/glibc systems with en_US.utf8 installed.
  * NEWS
  * set storage for varchar2 and nvarchar2 to extended strategy
  * prepare for 3.23
  * fix broken calculation in plvdate_isleapyear function #184
  * fix support for pg9.5, fix regress tests for older releases
  * prepare for 3.22.1
  * Fix read past the end of string in to_sigle_byte().
  * Fix dbms_utility.get_time() to use the full range of int32.
  * fix readme
  * prepare for 3.22.0
  * move dbobjects from public and pg_catalog schemas to oracle schema
  * moving objects from public and pg_catalog to oracle schema
  * move RequestAddinShmemSpace to shmem_request_hook for PostgreSQL 15
  * Update sql_migration06.md
  * Restore sqlparse.c and sqlparse.h
  * Undo comment
  * Add comment
  * Add Parallel safe to mod function
  * Bug fix
  * Add mod function for Oracle compatibility
  * Fix typos and spelling in docs and error messages
  * prepare for 3.21.1
  * fix mswin build - regexp functions was not really marked as dllexport due missing include of builtins.h
  * remove empty line
  * fix of some compatibility issues
  * REG_NOSUB is working only on PostgreSQL 15
  * workable release for PostgreSQL 15
  * modification for compotibility with orafce.regexp_instr
  * backport regexp_instr from PostgreSQL 15, use C version instead PLpgSQL for better possibilities of usage regexp API
  * prepare for 3.20.0
  * Fix regexp_instr() function with occurrence when the same value matching a pattern is found at several place in the string.
  * signature of nvl2 function is enhanced to "any", anyelement, anyelement. After this change, the behavior is more close to Oracle. Unfortunatelly - this change can break extension update for some customers that uses nvl2 in views.
  * support negative start argument for function substrb. Originally orafce used buildin bytea substr function. Now it recalculate start argument. see issue #172
  * prepare for 3.19
  * Allow empty string on input of functions to_number and to_date. In this case returns NULL.
  * remove white spaces
  * replace obsolete CSTRING macro by text_to_csring function
  * prepare for 3.18.1
  * fix - badly handled fn_extra in oracle.greatest(least) function
  * prepare for 3.18.0
  * Update README.asciidoc
  * Update README.asciidoc
  * use older API for iteration over an array. Now, oracle.greatest and oracle.least are working on all supported releases
  * remove negative tests related to orafce.greatest because: a) error message is different on supported pg versions, b) the coverage and benefit of these tests is low
  * remove two lines from regress tests of greatest due dependency on used collate
  * Add documentation for greatest and least functions.
  * Update upgrade extension file with the smallint addition.
  * Add greatest/least SQL redefinition for smallint Add regression tests fot the two functions.
  * Oracle functions LEAST and GREATEST return NULL if at least one of the parameters is NULL. This is not the case for the PostgreSQL equivalent functions which only return NULL when all the parameters are NULL. This patch creates the two functions in the oracle schema to have the same behavior than in Oracle.
  * Minor grammatical fix to README.asciidoc
  * fix typo in charpad.c
  * fix typo in orafce--3.17.sql
  * Update Orafce_Documentation_05.md
  * Catch dbms_random.string() output variation on Windows</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675166401">- enable pg 15</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675166402">- remove pg 10 support</changelog>
  <changelog author="Emiliano Langella &lt;emiliano.langella@suse.com&gt;" date="1676030400">- Added "Name:" tag.</changelog>
</package>
<package pkgid="f79ff054d6631dfd00c532e06c7297829d0f806f6d78d9606938e787aeef4f59" name="postgresql12-orafce" arch="x86_64">
  <version epoch="0" ver="4.1.1+git0.519b5b5" rel="bp154.3.1"/>
  <changelog author="mrueckert@suse.de" date="1424347200">- update to 3.0.9
  * PostgreSQL 9.4 compilation
  * new datatype and related functions: oracle.date
  * new varchar2, nvarchar2 types and related functions
    (Amit Langote)
  * oracle.substr emulate better Oracle substr function behave
    (Vinayak Pokale)
  * fix few internal issues that breaks a PGXN tests (Pavel Stehule)</changelog>
  <changelog author="mrueckert@suse.de" date="1502366400">- switch to multibuild</changelog>
  <changelog author="mrueckert@suse.de" date="1502366401">- update to 3.4.0
  * new aggregate function wm_concat
  * PostgreSQL 9.6, 10 are supported well
  * remove support for 8.3, 8.4, 9.0, 9.1 (only 9.2 and higher
    are supported)
  * new functions: sysdate, sessiontimezone, dbtimezone
  * remove support for 8.2
  * add support for 9.5
  * change the releasion number system
  * new functions: to_single_byte, to_multi_byte, nanvl, length,
    ltrim, btrim, rtrim, lpad, rpad
  * fix compilation issue in new code for Pg &lt;= 9.1</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1540468800">- Add build for PostgreSQL 11 and drop 9.3.
- BuildRequire server-devel instead of devel.</changelog>
  <changelog author="mrueckert@suse.de" date="1540641600">- Update to version 3.6.1+git24.cf58d28:
  * remove strict flag for nvl functions
  * minor cleaning
  * remove pre 9.4 support
  * fixes for 12
  * fix compile on PostgreSQL 12
  * missing reset fsec in ora_timestamptz_round function
  * #74 - badly joined comment
  * #75 set correct type for trunc and round two params functions - float4
  * allow usage of schema oracle and plunit
  * copy paste correction intarray -&gt; orafce
  * fix broken compilation on non MSC platforms
  * fix output path
  * add postgresql 10.3 target support need ICU header by path c:\icu
  * fix conversion from 'size_t' to 'int'
  * add 9.6 build environments fix C89 compatible compliance
  * fix nensenses related yyllex, using older form of bison option
  * new function  oracle.numtodsinterval
  * disallow functions from utl_file package on MS Windows
  * clean headers used by msvc
  * cleaning complete build on msvc
  * add missing files for windows compilation
  * fix #64
  * dba_segments view, cleaning
  * Fix formatting of examples.
  * Append documentation about how to translate REGEXP_SUBSTR Oracle function to PostgreSQL.
  * fix the position of a half-width space added by rpad().
  * enhancing emulation of Oracle views
  * fix some segfaults reported by Andreas Seltenreich #59
  * new few Oracle system views
  * prepare for 3.6
  * Minor bug in doc
  * Avoid setting unused variable value
  * Fix issue #54 - missing collatable flag for string types varchar2, nvarchar2.
  * Ensure LWLockRegisterTranche call in every session before LWLockAcquire call.
  * Preparation for 3.5 release.
  * add missing V1 signatures
  * Add Orafce Documentation and Oracle to PostgreSQL Migration Guide
- drop patch orafce-orafce_sql_yyparse-bison26.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1571745600">- adding postgresql12 to _multibuild</changelog>
  <changelog author="mrueckert@suse.de" date="1571745601">- Update to version 3.8.0+git4.a65cfb8:
  * return back missing files
  * fresh parser files
  * master is now unreleased 3.9
  * minor enhancing user_constraints view - use conrelid::regclass instead table_name. This will be  consistent with index name, and show schema for tables that are not on search_path
  * prepare for 3.8
  * qualify decode function to be installable on greenplum
  * fix PostgreSQL 12 support
  * missing files
  * typo
  * fix compilation and regress tests for PostgreSQL 11
  * Revert "Merge pull request #83 from kato-sho/fix-build-for-PG12"
  * Fix build for PostgreSQL 12
  * remove extra #include utils/nabstime.h
  * update against change format of FunctionCallInfo in PostgreSQL 12
  * fix compilation for pre PostgreSQL 12
  * fix compile for PostgreSQL 12
  * prepare for 3.7.2
  * bug fix release
  * fix bad filter in oracle.user_tables view
  * update NEWS
  * use older syntax for create operator command
  * add warning about possible compatibility issue
  * fix docs
  * null safe pipe operator for (n)varchar2 should be explicitly enabled (due compatibility)
  * bugfix should to use OR REPLACE clause
  * add bugfixes to update script
  * fix readme
  * more faster (n)varchar2 null safe concat
  * null safe concat operator for varchar2 and nvarchar2
  * fix compilation for PostgreSQL 12
  * target type should be qualified
  * broken formula for add_month
  * fix broken oracle.add_months for last day in month
  * fix comment assigned to wrong object
  * minor doc nvl</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273600">- remove dead PG versions</changelog>
  <changelog author="mrueckert@suse.de" date="1638273601">- Update to version 3.17.0+git12.e9ab8a3:
  * Fix some typos in plunit.c and plvdate.c.
  * Fix a non-standard function declaration.
  * pg_nextpower2_32 is available for pg13+|
  * fix typo in plvdate.c
  * fix typo in alert.c
  * Improve the place that double the size of a buffer
  * Fix access privileges of utl_file.tmpdir()
  * prepare for 3.17.0
  * This patch reproduce the same behavior of the regexp_* function with null input.
  * Fix version number in install script.
  * Remove duplicate variable declarations
  * Allow even longer runtimes in DBMS_UTILITY.GET_TIME test
  * prepare for 3.16.2
  * fix build for msvc
  * prepare for 3.16.1
  * sql/dbms_utility.sql: Allow longer test runtime
  * fix some shared memory leaks, reduce an possibility to raise an error 'lock requested error' by cleaning locks (these locks are not Postgres's locks) in dbms_alert_removeall and by triggering cleaning shared memory from locks related to closed processes when there are not free locks - per #PR 140 reported by @rbapin
  * prepare for 3.16.0
  * rename pipe type to orafce_pipe due conflict with pipe function from unistd.h
  * ensure public access to public schema
  * add missing sql file for 3.16
  * Add DBMS_UTILITY.GET_TIME function, it returns the current time in 100th's of a second from a point in time in the past. This function is used for determining elapsed time. This function is widely used in some Oracle installation for timing of functions or statements.
  * fix warning on MSVC
  * prepare for 3.15.1
  * Remove reference to pg_enc2name_tbl variable. It is not available on MSVC, and for this functionality it is not necessary
  * prepare for 3.15.0
  * function regexp_match cannot be used because it is available from Postgres 10
  * Add Oracle regexp_replace() function which supports start position and occurrence. It correspond to the Oracle behavior and consist in plpgsql functions based on PG regexp_matches() and regexp_replace(). All details of the implementation is explained in the documentation. Also include in this patch also include regression tests for regexp_replace() including the Oracle queries and results in comment.
  * just reformatting
  * just reformatting
  * Remove wrong and unused code.
  * Apply orafce rule for assignment on remaining call to position() and length.
  * Use better style for assignment instead of pseudo query.
  * - Improve performances by replacing SELECT ... INTO syntax with := - Replace call to regexp_match() by regexp_matches() to support   PostgreSQL 9.5 and 9.6. - Remove obsolete orafce--3.14.sql file - Update regression test to disable CONTEXT trace.
  * Add Oracle regexp_like(), regexp_count(), regexp_instr() and regexp_substr() functions. They correspond to the Oracle behavior and consist in plpgsql functions based on PG regexp_matches(). All details of the implementation is explained in the documentation. This patch also include a regression test regexp_func.sql including the Oracle queries and results in comment.
  * more ilustrative description of msvc project properties
  * Oracle.sysdate uses time zone stored in GUC orafce.timezone. The setting of configuration value was correct - the global variable orafce_timezone has correct content (it can be checked by SELECT oracle.dbtimezone(). But direct output of this GUC (show orafce.timezone) was broken because the handler of system timezone was used and the statement "show orafce.timezone" did same output like "show timezone", and it is surely wrong.
  * pre 3.14 changes
  * When nvarchar2 and varchar2 was introduced, then was not possibility to correctly set protransform column. Orafce used UPDATE of pg_proc table. Unfortunatelly, this new dependency was not coverget by entry in pg_depend. Today this issue breaks binary upgrade. Fix is simple - on new Postgres it uses ALTER FUNCTION SUPPORT, for older releases it tries to fix pg_depend table.
  * implementation of unistr function
  * Added ppc64le architecture
  * Added some transactions behavior differences
  * Catch dbms_random.string() output variation on big-endian
  * Fix the wrong filter in oracle.user_tables view in orafce--3.6--3.7.sql.
  * Update README.asciidoc
  * Update others.c
  * Use correct macros to convert between Datums and pointers.
  * note in readme
  * prepare for 3.13.4
  * forgotten files
  * prepare for 3.13.3
  * enable utf_file on MSWin
  * cleaning build on MSWin
  * reduce stack size
  * minor cleaning
  * prepare for 3.12
  * fix warning for postgres 13
  * fix asciidoc format
  * minor README fix
  * travis status
  * PostgreSQL 9.4 is not supported
  * example to trigger func
  * fix build and tests for older releases
  * trigger functions - ensure so only null or only empty string is used
  * fix: 'if' condition is always true
  * prepare for 3.11.1
  * missing test output file
  * only PostgreSQL 9.4 and higher are supported
  * Run the testsuite on travis-ci.org
  * clean warnings detected by -Wextra
  * forgot. GRANT
  * The previous securing of utl_file package required SECURITY DEFINER flags on functions. Using this flag is security risk. Insted using SECURITY DEFINER we allow READ from utl_file.utl_file_dir to PUBLIC. This design has one advantage - the final user can control usage of these function with granting user rights just only on table utl_file.utl_file_dir.
  * Update README.asciidoc
  * Update README.asciidoc
  * Update README.asciidoc
  * Update README.asciidoc
  * fix long standing bug - function with access to utl_file_dir should to has security definer flag
  * fix compilation against Postgres 13
  * small fixes and rewrite of utl_file paragraph
  * the safe dictionary in utl_file package can be identified by name too
  * Fix doc and comment about months_between returning numeric (not float8).
  * there are some differences between Oracle and Orafce
  * fix compilation on PostgreSQL 13 (by removing useless include), fix to_multi_byte('\')
  * prepare for 3.9.0
  * remove extra clean to allow repeateable build without bison
  * Orafce is licenced under 0-clause BSD licence
  * polishing licence
  * use postgres routines for printing float4, float8 values in to_char function (reduce garbage and trailing zeroes)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273602">- enable pg 13 and 14</changelog>
  <changelog author="mrueckert@suse.de" date="1675166400">- Update to version 4.1.1+git0.519b5b5:
  * prepare for 4.1.1
  * build on master (16) branch
  * use adv lock to synchronize start of pipe and alert tests
  * add connect by level &lt; num in migration docs
  * Hierarchical Query identifys the leaves
  * Update the connect_by_root example, for better semantics
  * fix: CONNECT_BY_ROOT in hierarchical query is converted to WITH RECURSIVE syntax
  * the table [200~utl_file.utl_file_dir is dumpable
  * fix compilation against pg master
  * prepare for 4.0.2
  * fix -wextra warnings
  * fix shadowed variable varning
  * fix msvc build for PostgreSQL 14
  * fix build for pg16
  * fix META file and prepare for 4.0.1
  * to_multi_byte and to_single_byte support euc_cn(gb2312)
  * add  oracle sql migration : CONNECT_BY_ROOT
  * fix oracle connect by
  * prepare for 4.0.0 release
  * remove obsolete ref on orafce_sql
  * rename shadow variable
  * initial merge of dbms_sql from orafce_sql
  * other cleaning after removing support for unsupported pg releases
  * increase version
  * remove support for PostgreSQL 10 and older
  * Fix database creation during installchecks for ICU cluster
  * fix dbms_output.serveroutput(true) clear the buffer.It conforms to the features of oracle.
  * prepare for 3.25.1
  * fix calculation of plvstr.is_prefix for negative numeric values - see issue #198
  * fix for pre 14 releases
  * doc and regress tests
  * remove useless func decl
  * support for older releases
  * initial implementation
  * initial
  * fix build against master (16) branch
  * wrap possible unsupported DDL to dynamic SQL
  * specify schema inside definition function tanh
  * only set editorconfig
  * prepare for 3.24.4
  * remove redundant ALTER FUNCTION #191
  * prepare for 3.24.3
  * PostgreSQL older than 12 doesn't allow ALTER FUNCTION pg_catalog.x SET SCHEMA oracle. Only dirty way by direct modification of system catalogue is possible. see issue #190
  * prepare for 3.24.2
  * fix missing oracle.mod functions in update scripts
  * prepare for 3.24.1
  * fix regress nlssort test for PostgreSQL 9.5 without \if command
  * Fix race condition during initialization in ora_lock_shmem.
  * nlssort: Add a missing call to PG_RE_THROW.
  * Limit nlssort test to Linux/glibc systems with en_US.utf8 installed.
  * NEWS
  * set storage for varchar2 and nvarchar2 to extended strategy
  * prepare for 3.23
  * fix broken calculation in plvdate_isleapyear function #184
  * fix support for pg9.5, fix regress tests for older releases
  * prepare for 3.22.1
  * Fix read past the end of string in to_sigle_byte().
  * Fix dbms_utility.get_time() to use the full range of int32.
  * fix readme
  * prepare for 3.22.0
  * move dbobjects from public and pg_catalog schemas to oracle schema
  * moving objects from public and pg_catalog to oracle schema
  * move RequestAddinShmemSpace to shmem_request_hook for PostgreSQL 15
  * Update sql_migration06.md
  * Restore sqlparse.c and sqlparse.h
  * Undo comment
  * Add comment
  * Add Parallel safe to mod function
  * Bug fix
  * Add mod function for Oracle compatibility
  * Fix typos and spelling in docs and error messages
  * prepare for 3.21.1
  * fix mswin build - regexp functions was not really marked as dllexport due missing include of builtins.h
  * remove empty line
  * fix of some compatibility issues
  * REG_NOSUB is working only on PostgreSQL 15
  * workable release for PostgreSQL 15
  * modification for compotibility with orafce.regexp_instr
  * backport regexp_instr from PostgreSQL 15, use C version instead PLpgSQL for better possibilities of usage regexp API
  * prepare for 3.20.0
  * Fix regexp_instr() function with occurrence when the same value matching a pattern is found at several place in the string.
  * signature of nvl2 function is enhanced to "any", anyelement, anyelement. After this change, the behavior is more close to Oracle. Unfortunatelly - this change can break extension update for some customers that uses nvl2 in views.
  * support negative start argument for function substrb. Originally orafce used buildin bytea substr function. Now it recalculate start argument. see issue #172
  * prepare for 3.19
  * Allow empty string on input of functions to_number and to_date. In this case returns NULL.
  * remove white spaces
  * replace obsolete CSTRING macro by text_to_csring function
  * prepare for 3.18.1
  * fix - badly handled fn_extra in oracle.greatest(least) function
  * prepare for 3.18.0
  * Update README.asciidoc
  * Update README.asciidoc
  * use older API for iteration over an array. Now, oracle.greatest and oracle.least are working on all supported releases
  * remove negative tests related to orafce.greatest because: a) error message is different on supported pg versions, b) the coverage and benefit of these tests is low
  * remove two lines from regress tests of greatest due dependency on used collate
  * Add documentation for greatest and least functions.
  * Update upgrade extension file with the smallint addition.
  * Add greatest/least SQL redefinition for smallint Add regression tests fot the two functions.
  * Oracle functions LEAST and GREATEST return NULL if at least one of the parameters is NULL. This is not the case for the PostgreSQL equivalent functions which only return NULL when all the parameters are NULL. This patch creates the two functions in the oracle schema to have the same behavior than in Oracle.
  * Minor grammatical fix to README.asciidoc
  * fix typo in charpad.c
  * fix typo in orafce--3.17.sql
  * Update Orafce_Documentation_05.md
  * Catch dbms_random.string() output variation on Windows</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675166401">- enable pg 15</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675166402">- remove pg 10 support</changelog>
  <changelog author="Emiliano Langella &lt;emiliano.langella@suse.com&gt;" date="1676030400">- Added "Name:" tag.</changelog>
</package>
<package pkgid="d59094d9b5a8496986877bb50670a79d1bc6bd170301d881f6385be509e4f70d" name="postgresql12-timescaledb" arch="aarch64">
  <version epoch="0" ver="2.9.3" rel="bp154.2.3.1"/>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1588680000">- update to 1.7.0
  https://github.com/timescale/timescaledb/releases/tag/1.7.0</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1592395200">- update to version 1.7.1 bugfix
  https://github.com/timescale/timescaledb/releases/tag/1.7.1
  Please note that with the release of 1.7, support for PostgreSQL
  9.6.x and 10.x are deprecated. version 2 will only support 11,12
- Packaging :
  + Activate postgresql12 supported now
  + Modifiy download url to grab a nice named tar.gz</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1601035200">- update to version 1.7.4
  https://github.com/timescale/timescaledb/releases/tag/1.7.2
  https://github.com/timescale/timescaledb/releases/tag/1.7.3
  https://github.com/timescale/timescaledb/releases/tag/1.7.4</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1625054400">- Do not build postgresql96 flavor on Tumbleweed.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273600">- Update to version 2.5.0
  https://github.com/timescale/timescaledb/releases/tag/1.7.5
  https://github.com/timescale/timescaledb/releases/tag/2.0.0
  https://github.com/timescale/timescaledb/releases/tag/2.0.1
  https://github.com/timescale/timescaledb/releases/tag/2.0.2
  https://github.com/timescale/timescaledb/releases/tag/2.1.0
  https://github.com/timescale/timescaledb/releases/tag/2.1.1
  https://github.com/timescale/timescaledb/releases/tag/2.2.0
  https://github.com/timescale/timescaledb/releases/tag/2.2.1
  https://github.com/timescale/timescaledb/releases/tag/2.3.0
  https://github.com/timescale/timescaledb/releases/tag/2.3.1
  https://github.com/timescale/timescaledb/releases/tag/2.4.0
  https://github.com/timescale/timescaledb/releases/tag/2.4.1
  https://github.com/timescale/timescaledb/releases/tag/2.4.2
  https://github.com/timescale/timescaledb/releases/tag/2.5.0
- enable postgresql14
- port to postgresql macros
- refresh clang-format9_support.diff</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273601">- switch to %{pg_name}-server-devel</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1643371200">- Update to version 2.5.1
  https://github.com/timescale/timescaledb/releases/tag/2.5.1</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1644494400">- Update to version 2.5.2
  https://github.com/timescale/timescaledb/releases/tag/2.5.2</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1645617600">- Update to version 2.6.0
  https://github.com/timescale/timescaledb/releases/tag/2.6.0</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1647345600">- Added patch ab6b90caf.patch containing explicit mention of
  CVE-2022-24128 closing boo#1197063</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1649764800">- Update to version 2.6.1
  https://github.com/timescale/timescaledb/releases/tag/2.6.1
- refreshed patches:
  clang-format9_support.diff
  ab6b90caf.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1653393600">- Update to version 2.7.0
  https://github.com/timescale/timescaledb/releases/tag/2.7.0
- drop ab6b90caf.patch: included upstream</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1659268800">- Update to version 2.7.2
  https://github.com/timescale/timescaledb/releases/tag/2.7.1
  https://github.com/timescale/timescaledb/releases/tag/2.7.2</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1661947200">- Update to version 2.8.0
  https://github.com/timescale/timescaledb/releases/tag/2.8.0
- refreshed clang-format9_support.diff</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1665403200">- Update to version 2.8.1
  https://github.com/timescale/timescaledb/releases/tag/2.8.1</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1671537600">- Update to version 2.9.0
  https://github.com/timescale/timescaledb/releases/tag/2.9.0
- dropped clang-format9_support.diff:
  minimum required version is now 14</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1671883200">- Update to version 2.9.1
  https://github.com/timescale/timescaledb/releases/tag/2.9.1</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1674561600">- Update to version 2.9.2
  https://github.com/timescale/timescaledb/releases/tag/2.9.2</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675166400">- enable pg 15 build</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675684800">- Update to version 2.9.3
  https://github.com/timescale/timescaledb/releases/tag/2.9.3</changelog>
</package>
<package pkgid="4761c1beaee25b36de17ff66cbaa19d2b0e6a4749ab2cfa839aadeee084fdc32" name="postgresql12-timescaledb" arch="i586">
  <version epoch="0" ver="2.9.3" rel="bp154.2.3.1"/>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1588680000">- update to 1.7.0
  https://github.com/timescale/timescaledb/releases/tag/1.7.0</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1592395200">- update to version 1.7.1 bugfix
  https://github.com/timescale/timescaledb/releases/tag/1.7.1
  Please note that with the release of 1.7, support for PostgreSQL
  9.6.x and 10.x are deprecated. version 2 will only support 11,12
- Packaging :
  + Activate postgresql12 supported now
  + Modifiy download url to grab a nice named tar.gz</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1601035200">- update to version 1.7.4
  https://github.com/timescale/timescaledb/releases/tag/1.7.2
  https://github.com/timescale/timescaledb/releases/tag/1.7.3
  https://github.com/timescale/timescaledb/releases/tag/1.7.4</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1625054400">- Do not build postgresql96 flavor on Tumbleweed.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273600">- Update to version 2.5.0
  https://github.com/timescale/timescaledb/releases/tag/1.7.5
  https://github.com/timescale/timescaledb/releases/tag/2.0.0
  https://github.com/timescale/timescaledb/releases/tag/2.0.1
  https://github.com/timescale/timescaledb/releases/tag/2.0.2
  https://github.com/timescale/timescaledb/releases/tag/2.1.0
  https://github.com/timescale/timescaledb/releases/tag/2.1.1
  https://github.com/timescale/timescaledb/releases/tag/2.2.0
  https://github.com/timescale/timescaledb/releases/tag/2.2.1
  https://github.com/timescale/timescaledb/releases/tag/2.3.0
  https://github.com/timescale/timescaledb/releases/tag/2.3.1
  https://github.com/timescale/timescaledb/releases/tag/2.4.0
  https://github.com/timescale/timescaledb/releases/tag/2.4.1
  https://github.com/timescale/timescaledb/releases/tag/2.4.2
  https://github.com/timescale/timescaledb/releases/tag/2.5.0
- enable postgresql14
- port to postgresql macros
- refresh clang-format9_support.diff</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273601">- switch to %{pg_name}-server-devel</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1643371200">- Update to version 2.5.1
  https://github.com/timescale/timescaledb/releases/tag/2.5.1</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1644494400">- Update to version 2.5.2
  https://github.com/timescale/timescaledb/releases/tag/2.5.2</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1645617600">- Update to version 2.6.0
  https://github.com/timescale/timescaledb/releases/tag/2.6.0</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1647345600">- Added patch ab6b90caf.patch containing explicit mention of
  CVE-2022-24128 closing boo#1197063</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1649764800">- Update to version 2.6.1
  https://github.com/timescale/timescaledb/releases/tag/2.6.1
- refreshed patches:
  clang-format9_support.diff
  ab6b90caf.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1653393600">- Update to version 2.7.0
  https://github.com/timescale/timescaledb/releases/tag/2.7.0
- drop ab6b90caf.patch: included upstream</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1659268800">- Update to version 2.7.2
  https://github.com/timescale/timescaledb/releases/tag/2.7.1
  https://github.com/timescale/timescaledb/releases/tag/2.7.2</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1661947200">- Update to version 2.8.0
  https://github.com/timescale/timescaledb/releases/tag/2.8.0
- refreshed clang-format9_support.diff</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1665403200">- Update to version 2.8.1
  https://github.com/timescale/timescaledb/releases/tag/2.8.1</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1671537600">- Update to version 2.9.0
  https://github.com/timescale/timescaledb/releases/tag/2.9.0
- dropped clang-format9_support.diff:
  minimum required version is now 14</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1671883200">- Update to version 2.9.1
  https://github.com/timescale/timescaledb/releases/tag/2.9.1</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1674561600">- Update to version 2.9.2
  https://github.com/timescale/timescaledb/releases/tag/2.9.2</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675166400">- enable pg 15 build</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675684800">- Update to version 2.9.3
  https://github.com/timescale/timescaledb/releases/tag/2.9.3</changelog>
</package>
<package pkgid="a0de2d0b9d792d8719fe9aa65a5c1fd80747cd51ddddb5525a36427a036390f8" name="postgresql12-timescaledb" arch="ppc64le">
  <version epoch="0" ver="2.9.3" rel="bp154.2.3.1"/>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1588680000">- update to 1.7.0
  https://github.com/timescale/timescaledb/releases/tag/1.7.0</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1592395200">- update to version 1.7.1 bugfix
  https://github.com/timescale/timescaledb/releases/tag/1.7.1
  Please note that with the release of 1.7, support for PostgreSQL
  9.6.x and 10.x are deprecated. version 2 will only support 11,12
- Packaging :
  + Activate postgresql12 supported now
  + Modifiy download url to grab a nice named tar.gz</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1601035200">- update to version 1.7.4
  https://github.com/timescale/timescaledb/releases/tag/1.7.2
  https://github.com/timescale/timescaledb/releases/tag/1.7.3
  https://github.com/timescale/timescaledb/releases/tag/1.7.4</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1625054400">- Do not build postgresql96 flavor on Tumbleweed.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273600">- Update to version 2.5.0
  https://github.com/timescale/timescaledb/releases/tag/1.7.5
  https://github.com/timescale/timescaledb/releases/tag/2.0.0
  https://github.com/timescale/timescaledb/releases/tag/2.0.1
  https://github.com/timescale/timescaledb/releases/tag/2.0.2
  https://github.com/timescale/timescaledb/releases/tag/2.1.0
  https://github.com/timescale/timescaledb/releases/tag/2.1.1
  https://github.com/timescale/timescaledb/releases/tag/2.2.0
  https://github.com/timescale/timescaledb/releases/tag/2.2.1
  https://github.com/timescale/timescaledb/releases/tag/2.3.0
  https://github.com/timescale/timescaledb/releases/tag/2.3.1
  https://github.com/timescale/timescaledb/releases/tag/2.4.0
  https://github.com/timescale/timescaledb/releases/tag/2.4.1
  https://github.com/timescale/timescaledb/releases/tag/2.4.2
  https://github.com/timescale/timescaledb/releases/tag/2.5.0
- enable postgresql14
- port to postgresql macros
- refresh clang-format9_support.diff</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273601">- switch to %{pg_name}-server-devel</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1643371200">- Update to version 2.5.1
  https://github.com/timescale/timescaledb/releases/tag/2.5.1</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1644494400">- Update to version 2.5.2
  https://github.com/timescale/timescaledb/releases/tag/2.5.2</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1645617600">- Update to version 2.6.0
  https://github.com/timescale/timescaledb/releases/tag/2.6.0</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1647345600">- Added patch ab6b90caf.patch containing explicit mention of
  CVE-2022-24128 closing boo#1197063</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1649764800">- Update to version 2.6.1
  https://github.com/timescale/timescaledb/releases/tag/2.6.1
- refreshed patches:
  clang-format9_support.diff
  ab6b90caf.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1653393600">- Update to version 2.7.0
  https://github.com/timescale/timescaledb/releases/tag/2.7.0
- drop ab6b90caf.patch: included upstream</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1659268800">- Update to version 2.7.2
  https://github.com/timescale/timescaledb/releases/tag/2.7.1
  https://github.com/timescale/timescaledb/releases/tag/2.7.2</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1661947200">- Update to version 2.8.0
  https://github.com/timescale/timescaledb/releases/tag/2.8.0
- refreshed clang-format9_support.diff</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1665403200">- Update to version 2.8.1
  https://github.com/timescale/timescaledb/releases/tag/2.8.1</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1671537600">- Update to version 2.9.0
  https://github.com/timescale/timescaledb/releases/tag/2.9.0
- dropped clang-format9_support.diff:
  minimum required version is now 14</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1671883200">- Update to version 2.9.1
  https://github.com/timescale/timescaledb/releases/tag/2.9.1</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1674561600">- Update to version 2.9.2
  https://github.com/timescale/timescaledb/releases/tag/2.9.2</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675166400">- enable pg 15 build</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675684800">- Update to version 2.9.3
  https://github.com/timescale/timescaledb/releases/tag/2.9.3</changelog>
</package>
<package pkgid="5a45bbd5f24de36024d42bf37c23ef793632356b6197a703077c338cf57f3721" name="postgresql12-timescaledb" arch="s390x">
  <version epoch="0" ver="2.9.3" rel="bp154.2.3.1"/>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1588680000">- update to 1.7.0
  https://github.com/timescale/timescaledb/releases/tag/1.7.0</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1592395200">- update to version 1.7.1 bugfix
  https://github.com/timescale/timescaledb/releases/tag/1.7.1
  Please note that with the release of 1.7, support for PostgreSQL
  9.6.x and 10.x are deprecated. version 2 will only support 11,12
- Packaging :
  + Activate postgresql12 supported now
  + Modifiy download url to grab a nice named tar.gz</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1601035200">- update to version 1.7.4
  https://github.com/timescale/timescaledb/releases/tag/1.7.2
  https://github.com/timescale/timescaledb/releases/tag/1.7.3
  https://github.com/timescale/timescaledb/releases/tag/1.7.4</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1625054400">- Do not build postgresql96 flavor on Tumbleweed.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273600">- Update to version 2.5.0
  https://github.com/timescale/timescaledb/releases/tag/1.7.5
  https://github.com/timescale/timescaledb/releases/tag/2.0.0
  https://github.com/timescale/timescaledb/releases/tag/2.0.1
  https://github.com/timescale/timescaledb/releases/tag/2.0.2
  https://github.com/timescale/timescaledb/releases/tag/2.1.0
  https://github.com/timescale/timescaledb/releases/tag/2.1.1
  https://github.com/timescale/timescaledb/releases/tag/2.2.0
  https://github.com/timescale/timescaledb/releases/tag/2.2.1
  https://github.com/timescale/timescaledb/releases/tag/2.3.0
  https://github.com/timescale/timescaledb/releases/tag/2.3.1
  https://github.com/timescale/timescaledb/releases/tag/2.4.0
  https://github.com/timescale/timescaledb/releases/tag/2.4.1
  https://github.com/timescale/timescaledb/releases/tag/2.4.2
  https://github.com/timescale/timescaledb/releases/tag/2.5.0
- enable postgresql14
- port to postgresql macros
- refresh clang-format9_support.diff</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273601">- switch to %{pg_name}-server-devel</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1643371200">- Update to version 2.5.1
  https://github.com/timescale/timescaledb/releases/tag/2.5.1</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1644494400">- Update to version 2.5.2
  https://github.com/timescale/timescaledb/releases/tag/2.5.2</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1645617600">- Update to version 2.6.0
  https://github.com/timescale/timescaledb/releases/tag/2.6.0</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1647345600">- Added patch ab6b90caf.patch containing explicit mention of
  CVE-2022-24128 closing boo#1197063</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1649764800">- Update to version 2.6.1
  https://github.com/timescale/timescaledb/releases/tag/2.6.1
- refreshed patches:
  clang-format9_support.diff
  ab6b90caf.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1653393600">- Update to version 2.7.0
  https://github.com/timescale/timescaledb/releases/tag/2.7.0
- drop ab6b90caf.patch: included upstream</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1659268800">- Update to version 2.7.2
  https://github.com/timescale/timescaledb/releases/tag/2.7.1
  https://github.com/timescale/timescaledb/releases/tag/2.7.2</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1661947200">- Update to version 2.8.0
  https://github.com/timescale/timescaledb/releases/tag/2.8.0
- refreshed clang-format9_support.diff</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1665403200">- Update to version 2.8.1
  https://github.com/timescale/timescaledb/releases/tag/2.8.1</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1671537600">- Update to version 2.9.0
  https://github.com/timescale/timescaledb/releases/tag/2.9.0
- dropped clang-format9_support.diff:
  minimum required version is now 14</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1671883200">- Update to version 2.9.1
  https://github.com/timescale/timescaledb/releases/tag/2.9.1</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1674561600">- Update to version 2.9.2
  https://github.com/timescale/timescaledb/releases/tag/2.9.2</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675166400">- enable pg 15 build</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675684800">- Update to version 2.9.3
  https://github.com/timescale/timescaledb/releases/tag/2.9.3</changelog>
</package>
<package pkgid="0c232d9e91d3bbef6bce1673ef6b3efc8c40f2469a10453d30d579ebdc44315d" name="postgresql12-timescaledb" arch="src">
  <version epoch="0" ver="2.9.3" rel="bp154.2.3.1"/>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1588680000">- update to 1.7.0
  https://github.com/timescale/timescaledb/releases/tag/1.7.0</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1592395200">- update to version 1.7.1 bugfix
  https://github.com/timescale/timescaledb/releases/tag/1.7.1
  Please note that with the release of 1.7, support for PostgreSQL
  9.6.x and 10.x are deprecated. version 2 will only support 11,12
- Packaging :
  + Activate postgresql12 supported now
  + Modifiy download url to grab a nice named tar.gz</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1601035200">- update to version 1.7.4
  https://github.com/timescale/timescaledb/releases/tag/1.7.2
  https://github.com/timescale/timescaledb/releases/tag/1.7.3
  https://github.com/timescale/timescaledb/releases/tag/1.7.4</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1625054400">- Do not build postgresql96 flavor on Tumbleweed.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273600">- Update to version 2.5.0
  https://github.com/timescale/timescaledb/releases/tag/1.7.5
  https://github.com/timescale/timescaledb/releases/tag/2.0.0
  https://github.com/timescale/timescaledb/releases/tag/2.0.1
  https://github.com/timescale/timescaledb/releases/tag/2.0.2
  https://github.com/timescale/timescaledb/releases/tag/2.1.0
  https://github.com/timescale/timescaledb/releases/tag/2.1.1
  https://github.com/timescale/timescaledb/releases/tag/2.2.0
  https://github.com/timescale/timescaledb/releases/tag/2.2.1
  https://github.com/timescale/timescaledb/releases/tag/2.3.0
  https://github.com/timescale/timescaledb/releases/tag/2.3.1
  https://github.com/timescale/timescaledb/releases/tag/2.4.0
  https://github.com/timescale/timescaledb/releases/tag/2.4.1
  https://github.com/timescale/timescaledb/releases/tag/2.4.2
  https://github.com/timescale/timescaledb/releases/tag/2.5.0
- enable postgresql14
- port to postgresql macros
- refresh clang-format9_support.diff</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273601">- switch to %{pg_name}-server-devel</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1643371200">- Update to version 2.5.1
  https://github.com/timescale/timescaledb/releases/tag/2.5.1</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1644494400">- Update to version 2.5.2
  https://github.com/timescale/timescaledb/releases/tag/2.5.2</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1645617600">- Update to version 2.6.0
  https://github.com/timescale/timescaledb/releases/tag/2.6.0</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1647345600">- Added patch ab6b90caf.patch containing explicit mention of
  CVE-2022-24128 closing boo#1197063</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1649764800">- Update to version 2.6.1
  https://github.com/timescale/timescaledb/releases/tag/2.6.1
- refreshed patches:
  clang-format9_support.diff
  ab6b90caf.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1653393600">- Update to version 2.7.0
  https://github.com/timescale/timescaledb/releases/tag/2.7.0
- drop ab6b90caf.patch: included upstream</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1659268800">- Update to version 2.7.2
  https://github.com/timescale/timescaledb/releases/tag/2.7.1
  https://github.com/timescale/timescaledb/releases/tag/2.7.2</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1661947200">- Update to version 2.8.0
  https://github.com/timescale/timescaledb/releases/tag/2.8.0
- refreshed clang-format9_support.diff</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1665403200">- Update to version 2.8.1
  https://github.com/timescale/timescaledb/releases/tag/2.8.1</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1671537600">- Update to version 2.9.0
  https://github.com/timescale/timescaledb/releases/tag/2.9.0
- dropped clang-format9_support.diff:
  minimum required version is now 14</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1671883200">- Update to version 2.9.1
  https://github.com/timescale/timescaledb/releases/tag/2.9.1</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1674561600">- Update to version 2.9.2
  https://github.com/timescale/timescaledb/releases/tag/2.9.2</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675166400">- enable pg 15 build</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675684800">- Update to version 2.9.3
  https://github.com/timescale/timescaledb/releases/tag/2.9.3</changelog>
</package>
<package pkgid="f421c4371a14214b25db713d7909e18752242afb8e05a8bc3453d05ee0c1fa1d" name="postgresql12-timescaledb" arch="x86_64">
  <version epoch="0" ver="2.9.3" rel="bp154.2.3.1"/>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1588680000">- update to 1.7.0
  https://github.com/timescale/timescaledb/releases/tag/1.7.0</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1592395200">- update to version 1.7.1 bugfix
  https://github.com/timescale/timescaledb/releases/tag/1.7.1
  Please note that with the release of 1.7, support for PostgreSQL
  9.6.x and 10.x are deprecated. version 2 will only support 11,12
- Packaging :
  + Activate postgresql12 supported now
  + Modifiy download url to grab a nice named tar.gz</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1601035200">- update to version 1.7.4
  https://github.com/timescale/timescaledb/releases/tag/1.7.2
  https://github.com/timescale/timescaledb/releases/tag/1.7.3
  https://github.com/timescale/timescaledb/releases/tag/1.7.4</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1625054400">- Do not build postgresql96 flavor on Tumbleweed.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273600">- Update to version 2.5.0
  https://github.com/timescale/timescaledb/releases/tag/1.7.5
  https://github.com/timescale/timescaledb/releases/tag/2.0.0
  https://github.com/timescale/timescaledb/releases/tag/2.0.1
  https://github.com/timescale/timescaledb/releases/tag/2.0.2
  https://github.com/timescale/timescaledb/releases/tag/2.1.0
  https://github.com/timescale/timescaledb/releases/tag/2.1.1
  https://github.com/timescale/timescaledb/releases/tag/2.2.0
  https://github.com/timescale/timescaledb/releases/tag/2.2.1
  https://github.com/timescale/timescaledb/releases/tag/2.3.0
  https://github.com/timescale/timescaledb/releases/tag/2.3.1
  https://github.com/timescale/timescaledb/releases/tag/2.4.0
  https://github.com/timescale/timescaledb/releases/tag/2.4.1
  https://github.com/timescale/timescaledb/releases/tag/2.4.2
  https://github.com/timescale/timescaledb/releases/tag/2.5.0
- enable postgresql14
- port to postgresql macros
- refresh clang-format9_support.diff</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273601">- switch to %{pg_name}-server-devel</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1643371200">- Update to version 2.5.1
  https://github.com/timescale/timescaledb/releases/tag/2.5.1</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1644494400">- Update to version 2.5.2
  https://github.com/timescale/timescaledb/releases/tag/2.5.2</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1645617600">- Update to version 2.6.0
  https://github.com/timescale/timescaledb/releases/tag/2.6.0</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1647345600">- Added patch ab6b90caf.patch containing explicit mention of
  CVE-2022-24128 closing boo#1197063</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1649764800">- Update to version 2.6.1
  https://github.com/timescale/timescaledb/releases/tag/2.6.1
- refreshed patches:
  clang-format9_support.diff
  ab6b90caf.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1653393600">- Update to version 2.7.0
  https://github.com/timescale/timescaledb/releases/tag/2.7.0
- drop ab6b90caf.patch: included upstream</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1659268800">- Update to version 2.7.2
  https://github.com/timescale/timescaledb/releases/tag/2.7.1
  https://github.com/timescale/timescaledb/releases/tag/2.7.2</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1661947200">- Update to version 2.8.0
  https://github.com/timescale/timescaledb/releases/tag/2.8.0
- refreshed clang-format9_support.diff</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1665403200">- Update to version 2.8.1
  https://github.com/timescale/timescaledb/releases/tag/2.8.1</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1671537600">- Update to version 2.9.0
  https://github.com/timescale/timescaledb/releases/tag/2.9.0
- dropped clang-format9_support.diff:
  minimum required version is now 14</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1671883200">- Update to version 2.9.1
  https://github.com/timescale/timescaledb/releases/tag/2.9.1</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1674561600">- Update to version 2.9.2
  https://github.com/timescale/timescaledb/releases/tag/2.9.2</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675166400">- enable pg 15 build</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675684800">- Update to version 2.9.3
  https://github.com/timescale/timescaledb/releases/tag/2.9.3</changelog>
</package>
<package pkgid="15bab4b93e2ce64cd67437171d2d010fcf743507f77e8798547b4629a3e16514" name="postgresql13-orafce" arch="aarch64">
  <version epoch="0" ver="4.1.1+git0.519b5b5" rel="bp154.3.1"/>
  <changelog author="mrueckert@suse.de" date="1424347200">- update to 3.0.9
  * PostgreSQL 9.4 compilation
  * new datatype and related functions: oracle.date
  * new varchar2, nvarchar2 types and related functions
    (Amit Langote)
  * oracle.substr emulate better Oracle substr function behave
    (Vinayak Pokale)
  * fix few internal issues that breaks a PGXN tests (Pavel Stehule)</changelog>
  <changelog author="mrueckert@suse.de" date="1502366400">- switch to multibuild</changelog>
  <changelog author="mrueckert@suse.de" date="1502366401">- update to 3.4.0
  * new aggregate function wm_concat
  * PostgreSQL 9.6, 10 are supported well
  * remove support for 8.3, 8.4, 9.0, 9.1 (only 9.2 and higher
    are supported)
  * new functions: sysdate, sessiontimezone, dbtimezone
  * remove support for 8.2
  * add support for 9.5
  * change the releasion number system
  * new functions: to_single_byte, to_multi_byte, nanvl, length,
    ltrim, btrim, rtrim, lpad, rpad
  * fix compilation issue in new code for Pg &lt;= 9.1</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1540468800">- Add build for PostgreSQL 11 and drop 9.3.
- BuildRequire server-devel instead of devel.</changelog>
  <changelog author="mrueckert@suse.de" date="1540641600">- Update to version 3.6.1+git24.cf58d28:
  * remove strict flag for nvl functions
  * minor cleaning
  * remove pre 9.4 support
  * fixes for 12
  * fix compile on PostgreSQL 12
  * missing reset fsec in ora_timestamptz_round function
  * #74 - badly joined comment
  * #75 set correct type for trunc and round two params functions - float4
  * allow usage of schema oracle and plunit
  * copy paste correction intarray -&gt; orafce
  * fix broken compilation on non MSC platforms
  * fix output path
  * add postgresql 10.3 target support need ICU header by path c:\icu
  * fix conversion from 'size_t' to 'int'
  * add 9.6 build environments fix C89 compatible compliance
  * fix nensenses related yyllex, using older form of bison option
  * new function  oracle.numtodsinterval
  * disallow functions from utl_file package on MS Windows
  * clean headers used by msvc
  * cleaning complete build on msvc
  * add missing files for windows compilation
  * fix #64
  * dba_segments view, cleaning
  * Fix formatting of examples.
  * Append documentation about how to translate REGEXP_SUBSTR Oracle function to PostgreSQL.
  * fix the position of a half-width space added by rpad().
  * enhancing emulation of Oracle views
  * fix some segfaults reported by Andreas Seltenreich #59
  * new few Oracle system views
  * prepare for 3.6
  * Minor bug in doc
  * Avoid setting unused variable value
  * Fix issue #54 - missing collatable flag for string types varchar2, nvarchar2.
  * Ensure LWLockRegisterTranche call in every session before LWLockAcquire call.
  * Preparation for 3.5 release.
  * add missing V1 signatures
  * Add Orafce Documentation and Oracle to PostgreSQL Migration Guide
- drop patch orafce-orafce_sql_yyparse-bison26.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1571745600">- adding postgresql12 to _multibuild</changelog>
  <changelog author="mrueckert@suse.de" date="1571745601">- Update to version 3.8.0+git4.a65cfb8:
  * return back missing files
  * fresh parser files
  * master is now unreleased 3.9
  * minor enhancing user_constraints view - use conrelid::regclass instead table_name. This will be  consistent with index name, and show schema for tables that are not on search_path
  * prepare for 3.8
  * qualify decode function to be installable on greenplum
  * fix PostgreSQL 12 support
  * missing files
  * typo
  * fix compilation and regress tests for PostgreSQL 11
  * Revert "Merge pull request #83 from kato-sho/fix-build-for-PG12"
  * Fix build for PostgreSQL 12
  * remove extra #include utils/nabstime.h
  * update against change format of FunctionCallInfo in PostgreSQL 12
  * fix compilation for pre PostgreSQL 12
  * fix compile for PostgreSQL 12
  * prepare for 3.7.2
  * bug fix release
  * fix bad filter in oracle.user_tables view
  * update NEWS
  * use older syntax for create operator command
  * add warning about possible compatibility issue
  * fix docs
  * null safe pipe operator for (n)varchar2 should be explicitly enabled (due compatibility)
  * bugfix should to use OR REPLACE clause
  * add bugfixes to update script
  * fix readme
  * more faster (n)varchar2 null safe concat
  * null safe concat operator for varchar2 and nvarchar2
  * fix compilation for PostgreSQL 12
  * target type should be qualified
  * broken formula for add_month
  * fix broken oracle.add_months for last day in month
  * fix comment assigned to wrong object
  * minor doc nvl</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273600">- remove dead PG versions</changelog>
  <changelog author="mrueckert@suse.de" date="1638273601">- Update to version 3.17.0+git12.e9ab8a3:
  * Fix some typos in plunit.c and plvdate.c.
  * Fix a non-standard function declaration.
  * pg_nextpower2_32 is available for pg13+|
  * fix typo in plvdate.c
  * fix typo in alert.c
  * Improve the place that double the size of a buffer
  * Fix access privileges of utl_file.tmpdir()
  * prepare for 3.17.0
  * This patch reproduce the same behavior of the regexp_* function with null input.
  * Fix version number in install script.
  * Remove duplicate variable declarations
  * Allow even longer runtimes in DBMS_UTILITY.GET_TIME test
  * prepare for 3.16.2
  * fix build for msvc
  * prepare for 3.16.1
  * sql/dbms_utility.sql: Allow longer test runtime
  * fix some shared memory leaks, reduce an possibility to raise an error 'lock requested error' by cleaning locks (these locks are not Postgres's locks) in dbms_alert_removeall and by triggering cleaning shared memory from locks related to closed processes when there are not free locks - per #PR 140 reported by @rbapin
  * prepare for 3.16.0
  * rename pipe type to orafce_pipe due conflict with pipe function from unistd.h
  * ensure public access to public schema
  * add missing sql file for 3.16
  * Add DBMS_UTILITY.GET_TIME function, it returns the current time in 100th's of a second from a point in time in the past. This function is used for determining elapsed time. This function is widely used in some Oracle installation for timing of functions or statements.
  * fix warning on MSVC
  * prepare for 3.15.1
  * Remove reference to pg_enc2name_tbl variable. It is not available on MSVC, and for this functionality it is not necessary
  * prepare for 3.15.0
  * function regexp_match cannot be used because it is available from Postgres 10
  * Add Oracle regexp_replace() function which supports start position and occurrence. It correspond to the Oracle behavior and consist in plpgsql functions based on PG regexp_matches() and regexp_replace(). All details of the implementation is explained in the documentation. Also include in this patch also include regression tests for regexp_replace() including the Oracle queries and results in comment.
  * just reformatting
  * just reformatting
  * Remove wrong and unused code.
  * Apply orafce rule for assignment on remaining call to position() and length.
  * Use better style for assignment instead of pseudo query.
  * - Improve performances by replacing SELECT ... INTO syntax with := - Replace call to regexp_match() by regexp_matches() to support   PostgreSQL 9.5 and 9.6. - Remove obsolete orafce--3.14.sql file - Update regression test to disable CONTEXT trace.
  * Add Oracle regexp_like(), regexp_count(), regexp_instr() and regexp_substr() functions. They correspond to the Oracle behavior and consist in plpgsql functions based on PG regexp_matches(). All details of the implementation is explained in the documentation. This patch also include a regression test regexp_func.sql including the Oracle queries and results in comment.
  * more ilustrative description of msvc project properties
  * Oracle.sysdate uses time zone stored in GUC orafce.timezone. The setting of configuration value was correct - the global variable orafce_timezone has correct content (it can be checked by SELECT oracle.dbtimezone(). But direct output of this GUC (show orafce.timezone) was broken because the handler of system timezone was used and the statement "show orafce.timezone" did same output like "show timezone", and it is surely wrong.
  * pre 3.14 changes
  * When nvarchar2 and varchar2 was introduced, then was not possibility to correctly set protransform column. Orafce used UPDATE of pg_proc table. Unfortunatelly, this new dependency was not coverget by entry in pg_depend. Today this issue breaks binary upgrade. Fix is simple - on new Postgres it uses ALTER FUNCTION SUPPORT, for older releases it tries to fix pg_depend table.
  * implementation of unistr function
  * Added ppc64le architecture
  * Added some transactions behavior differences
  * Catch dbms_random.string() output variation on big-endian
  * Fix the wrong filter in oracle.user_tables view in orafce--3.6--3.7.sql.
  * Update README.asciidoc
  * Update others.c
  * Use correct macros to convert between Datums and pointers.
  * note in readme
  * prepare for 3.13.4
  * forgotten files
  * prepare for 3.13.3
  * enable utf_file on MSWin
  * cleaning build on MSWin
  * reduce stack size
  * minor cleaning
  * prepare for 3.12
  * fix warning for postgres 13
  * fix asciidoc format
  * minor README fix
  * travis status
  * PostgreSQL 9.4 is not supported
  * example to trigger func
  * fix build and tests for older releases
  * trigger functions - ensure so only null or only empty string is used
  * fix: 'if' condition is always true
  * prepare for 3.11.1
  * missing test output file
  * only PostgreSQL 9.4 and higher are supported
  * Run the testsuite on travis-ci.org
  * clean warnings detected by -Wextra
  * forgot. GRANT
  * The previous securing of utl_file package required SECURITY DEFINER flags on functions. Using this flag is security risk. Insted using SECURITY DEFINER we allow READ from utl_file.utl_file_dir to PUBLIC. This design has one advantage - the final user can control usage of these function with granting user rights just only on table utl_file.utl_file_dir.
  * Update README.asciidoc
  * Update README.asciidoc
  * Update README.asciidoc
  * Update README.asciidoc
  * fix long standing bug - function with access to utl_file_dir should to has security definer flag
  * fix compilation against Postgres 13
  * small fixes and rewrite of utl_file paragraph
  * the safe dictionary in utl_file package can be identified by name too
  * Fix doc and comment about months_between returning numeric (not float8).
  * there are some differences between Oracle and Orafce
  * fix compilation on PostgreSQL 13 (by removing useless include), fix to_multi_byte('\')
  * prepare for 3.9.0
  * remove extra clean to allow repeateable build without bison
  * Orafce is licenced under 0-clause BSD licence
  * polishing licence
  * use postgres routines for printing float4, float8 values in to_char function (reduce garbage and trailing zeroes)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273602">- enable pg 13 and 14</changelog>
  <changelog author="mrueckert@suse.de" date="1675166400">- Update to version 4.1.1+git0.519b5b5:
  * prepare for 4.1.1
  * build on master (16) branch
  * use adv lock to synchronize start of pipe and alert tests
  * add connect by level &lt; num in migration docs
  * Hierarchical Query identifys the leaves
  * Update the connect_by_root example, for better semantics
  * fix: CONNECT_BY_ROOT in hierarchical query is converted to WITH RECURSIVE syntax
  * the table [200~utl_file.utl_file_dir is dumpable
  * fix compilation against pg master
  * prepare for 4.0.2
  * fix -wextra warnings
  * fix shadowed variable varning
  * fix msvc build for PostgreSQL 14
  * fix build for pg16
  * fix META file and prepare for 4.0.1
  * to_multi_byte and to_single_byte support euc_cn(gb2312)
  * add  oracle sql migration : CONNECT_BY_ROOT
  * fix oracle connect by
  * prepare for 4.0.0 release
  * remove obsolete ref on orafce_sql
  * rename shadow variable
  * initial merge of dbms_sql from orafce_sql
  * other cleaning after removing support for unsupported pg releases
  * increase version
  * remove support for PostgreSQL 10 and older
  * Fix database creation during installchecks for ICU cluster
  * fix dbms_output.serveroutput(true) clear the buffer.It conforms to the features of oracle.
  * prepare for 3.25.1
  * fix calculation of plvstr.is_prefix for negative numeric values - see issue #198
  * fix for pre 14 releases
  * doc and regress tests
  * remove useless func decl
  * support for older releases
  * initial implementation
  * initial
  * fix build against master (16) branch
  * wrap possible unsupported DDL to dynamic SQL
  * specify schema inside definition function tanh
  * only set editorconfig
  * prepare for 3.24.4
  * remove redundant ALTER FUNCTION #191
  * prepare for 3.24.3
  * PostgreSQL older than 12 doesn't allow ALTER FUNCTION pg_catalog.x SET SCHEMA oracle. Only dirty way by direct modification of system catalogue is possible. see issue #190
  * prepare for 3.24.2
  * fix missing oracle.mod functions in update scripts
  * prepare for 3.24.1
  * fix regress nlssort test for PostgreSQL 9.5 without \if command
  * Fix race condition during initialization in ora_lock_shmem.
  * nlssort: Add a missing call to PG_RE_THROW.
  * Limit nlssort test to Linux/glibc systems with en_US.utf8 installed.
  * NEWS
  * set storage for varchar2 and nvarchar2 to extended strategy
  * prepare for 3.23
  * fix broken calculation in plvdate_isleapyear function #184
  * fix support for pg9.5, fix regress tests for older releases
  * prepare for 3.22.1
  * Fix read past the end of string in to_sigle_byte().
  * Fix dbms_utility.get_time() to use the full range of int32.
  * fix readme
  * prepare for 3.22.0
  * move dbobjects from public and pg_catalog schemas to oracle schema
  * moving objects from public and pg_catalog to oracle schema
  * move RequestAddinShmemSpace to shmem_request_hook for PostgreSQL 15
  * Update sql_migration06.md
  * Restore sqlparse.c and sqlparse.h
  * Undo comment
  * Add comment
  * Add Parallel safe to mod function
  * Bug fix
  * Add mod function for Oracle compatibility
  * Fix typos and spelling in docs and error messages
  * prepare for 3.21.1
  * fix mswin build - regexp functions was not really marked as dllexport due missing include of builtins.h
  * remove empty line
  * fix of some compatibility issues
  * REG_NOSUB is working only on PostgreSQL 15
  * workable release for PostgreSQL 15
  * modification for compotibility with orafce.regexp_instr
  * backport regexp_instr from PostgreSQL 15, use C version instead PLpgSQL for better possibilities of usage regexp API
  * prepare for 3.20.0
  * Fix regexp_instr() function with occurrence when the same value matching a pattern is found at several place in the string.
  * signature of nvl2 function is enhanced to "any", anyelement, anyelement. After this change, the behavior is more close to Oracle. Unfortunatelly - this change can break extension update for some customers that uses nvl2 in views.
  * support negative start argument for function substrb. Originally orafce used buildin bytea substr function. Now it recalculate start argument. see issue #172
  * prepare for 3.19
  * Allow empty string on input of functions to_number and to_date. In this case returns NULL.
  * remove white spaces
  * replace obsolete CSTRING macro by text_to_csring function
  * prepare for 3.18.1
  * fix - badly handled fn_extra in oracle.greatest(least) function
  * prepare for 3.18.0
  * Update README.asciidoc
  * Update README.asciidoc
  * use older API for iteration over an array. Now, oracle.greatest and oracle.least are working on all supported releases
  * remove negative tests related to orafce.greatest because: a) error message is different on supported pg versions, b) the coverage and benefit of these tests is low
  * remove two lines from regress tests of greatest due dependency on used collate
  * Add documentation for greatest and least functions.
  * Update upgrade extension file with the smallint addition.
  * Add greatest/least SQL redefinition for smallint Add regression tests fot the two functions.
  * Oracle functions LEAST and GREATEST return NULL if at least one of the parameters is NULL. This is not the case for the PostgreSQL equivalent functions which only return NULL when all the parameters are NULL. This patch creates the two functions in the oracle schema to have the same behavior than in Oracle.
  * Minor grammatical fix to README.asciidoc
  * fix typo in charpad.c
  * fix typo in orafce--3.17.sql
  * Update Orafce_Documentation_05.md
  * Catch dbms_random.string() output variation on Windows</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675166401">- enable pg 15</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675166402">- remove pg 10 support</changelog>
  <changelog author="Emiliano Langella &lt;emiliano.langella@suse.com&gt;" date="1676030400">- Added "Name:" tag.</changelog>
</package>
<package pkgid="4fa4afdd9630dbaa6ccfe0ec541fbe7f6d18583cf3a0659f13bf6ca9369ec50e" name="postgresql13-orafce" arch="i586">
  <version epoch="0" ver="4.1.1+git0.519b5b5" rel="bp154.3.1"/>
  <changelog author="mrueckert@suse.de" date="1424347200">- update to 3.0.9
  * PostgreSQL 9.4 compilation
  * new datatype and related functions: oracle.date
  * new varchar2, nvarchar2 types and related functions
    (Amit Langote)
  * oracle.substr emulate better Oracle substr function behave
    (Vinayak Pokale)
  * fix few internal issues that breaks a PGXN tests (Pavel Stehule)</changelog>
  <changelog author="mrueckert@suse.de" date="1502366400">- switch to multibuild</changelog>
  <changelog author="mrueckert@suse.de" date="1502366401">- update to 3.4.0
  * new aggregate function wm_concat
  * PostgreSQL 9.6, 10 are supported well
  * remove support for 8.3, 8.4, 9.0, 9.1 (only 9.2 and higher
    are supported)
  * new functions: sysdate, sessiontimezone, dbtimezone
  * remove support for 8.2
  * add support for 9.5
  * change the releasion number system
  * new functions: to_single_byte, to_multi_byte, nanvl, length,
    ltrim, btrim, rtrim, lpad, rpad
  * fix compilation issue in new code for Pg &lt;= 9.1</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1540468800">- Add build for PostgreSQL 11 and drop 9.3.
- BuildRequire server-devel instead of devel.</changelog>
  <changelog author="mrueckert@suse.de" date="1540641600">- Update to version 3.6.1+git24.cf58d28:
  * remove strict flag for nvl functions
  * minor cleaning
  * remove pre 9.4 support
  * fixes for 12
  * fix compile on PostgreSQL 12
  * missing reset fsec in ora_timestamptz_round function
  * #74 - badly joined comment
  * #75 set correct type for trunc and round two params functions - float4
  * allow usage of schema oracle and plunit
  * copy paste correction intarray -&gt; orafce
  * fix broken compilation on non MSC platforms
  * fix output path
  * add postgresql 10.3 target support need ICU header by path c:\icu
  * fix conversion from 'size_t' to 'int'
  * add 9.6 build environments fix C89 compatible compliance
  * fix nensenses related yyllex, using older form of bison option
  * new function  oracle.numtodsinterval
  * disallow functions from utl_file package on MS Windows
  * clean headers used by msvc
  * cleaning complete build on msvc
  * add missing files for windows compilation
  * fix #64
  * dba_segments view, cleaning
  * Fix formatting of examples.
  * Append documentation about how to translate REGEXP_SUBSTR Oracle function to PostgreSQL.
  * fix the position of a half-width space added by rpad().
  * enhancing emulation of Oracle views
  * fix some segfaults reported by Andreas Seltenreich #59
  * new few Oracle system views
  * prepare for 3.6
  * Minor bug in doc
  * Avoid setting unused variable value
  * Fix issue #54 - missing collatable flag for string types varchar2, nvarchar2.
  * Ensure LWLockRegisterTranche call in every session before LWLockAcquire call.
  * Preparation for 3.5 release.
  * add missing V1 signatures
  * Add Orafce Documentation and Oracle to PostgreSQL Migration Guide
- drop patch orafce-orafce_sql_yyparse-bison26.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1571745600">- adding postgresql12 to _multibuild</changelog>
  <changelog author="mrueckert@suse.de" date="1571745601">- Update to version 3.8.0+git4.a65cfb8:
  * return back missing files
  * fresh parser files
  * master is now unreleased 3.9
  * minor enhancing user_constraints view - use conrelid::regclass instead table_name. This will be  consistent with index name, and show schema for tables that are not on search_path
  * prepare for 3.8
  * qualify decode function to be installable on greenplum
  * fix PostgreSQL 12 support
  * missing files
  * typo
  * fix compilation and regress tests for PostgreSQL 11
  * Revert "Merge pull request #83 from kato-sho/fix-build-for-PG12"
  * Fix build for PostgreSQL 12
  * remove extra #include utils/nabstime.h
  * update against change format of FunctionCallInfo in PostgreSQL 12
  * fix compilation for pre PostgreSQL 12
  * fix compile for PostgreSQL 12
  * prepare for 3.7.2
  * bug fix release
  * fix bad filter in oracle.user_tables view
  * update NEWS
  * use older syntax for create operator command
  * add warning about possible compatibility issue
  * fix docs
  * null safe pipe operator for (n)varchar2 should be explicitly enabled (due compatibility)
  * bugfix should to use OR REPLACE clause
  * add bugfixes to update script
  * fix readme
  * more faster (n)varchar2 null safe concat
  * null safe concat operator for varchar2 and nvarchar2
  * fix compilation for PostgreSQL 12
  * target type should be qualified
  * broken formula for add_month
  * fix broken oracle.add_months for last day in month
  * fix comment assigned to wrong object
  * minor doc nvl</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273600">- remove dead PG versions</changelog>
  <changelog author="mrueckert@suse.de" date="1638273601">- Update to version 3.17.0+git12.e9ab8a3:
  * Fix some typos in plunit.c and plvdate.c.
  * Fix a non-standard function declaration.
  * pg_nextpower2_32 is available for pg13+|
  * fix typo in plvdate.c
  * fix typo in alert.c
  * Improve the place that double the size of a buffer
  * Fix access privileges of utl_file.tmpdir()
  * prepare for 3.17.0
  * This patch reproduce the same behavior of the regexp_* function with null input.
  * Fix version number in install script.
  * Remove duplicate variable declarations
  * Allow even longer runtimes in DBMS_UTILITY.GET_TIME test
  * prepare for 3.16.2
  * fix build for msvc
  * prepare for 3.16.1
  * sql/dbms_utility.sql: Allow longer test runtime
  * fix some shared memory leaks, reduce an possibility to raise an error 'lock requested error' by cleaning locks (these locks are not Postgres's locks) in dbms_alert_removeall and by triggering cleaning shared memory from locks related to closed processes when there are not free locks - per #PR 140 reported by @rbapin
  * prepare for 3.16.0
  * rename pipe type to orafce_pipe due conflict with pipe function from unistd.h
  * ensure public access to public schema
  * add missing sql file for 3.16
  * Add DBMS_UTILITY.GET_TIME function, it returns the current time in 100th's of a second from a point in time in the past. This function is used for determining elapsed time. This function is widely used in some Oracle installation for timing of functions or statements.
  * fix warning on MSVC
  * prepare for 3.15.1
  * Remove reference to pg_enc2name_tbl variable. It is not available on MSVC, and for this functionality it is not necessary
  * prepare for 3.15.0
  * function regexp_match cannot be used because it is available from Postgres 10
  * Add Oracle regexp_replace() function which supports start position and occurrence. It correspond to the Oracle behavior and consist in plpgsql functions based on PG regexp_matches() and regexp_replace(). All details of the implementation is explained in the documentation. Also include in this patch also include regression tests for regexp_replace() including the Oracle queries and results in comment.
  * just reformatting
  * just reformatting
  * Remove wrong and unused code.
  * Apply orafce rule for assignment on remaining call to position() and length.
  * Use better style for assignment instead of pseudo query.
  * - Improve performances by replacing SELECT ... INTO syntax with := - Replace call to regexp_match() by regexp_matches() to support   PostgreSQL 9.5 and 9.6. - Remove obsolete orafce--3.14.sql file - Update regression test to disable CONTEXT trace.
  * Add Oracle regexp_like(), regexp_count(), regexp_instr() and regexp_substr() functions. They correspond to the Oracle behavior and consist in plpgsql functions based on PG regexp_matches(). All details of the implementation is explained in the documentation. This patch also include a regression test regexp_func.sql including the Oracle queries and results in comment.
  * more ilustrative description of msvc project properties
  * Oracle.sysdate uses time zone stored in GUC orafce.timezone. The setting of configuration value was correct - the global variable orafce_timezone has correct content (it can be checked by SELECT oracle.dbtimezone(). But direct output of this GUC (show orafce.timezone) was broken because the handler of system timezone was used and the statement "show orafce.timezone" did same output like "show timezone", and it is surely wrong.
  * pre 3.14 changes
  * When nvarchar2 and varchar2 was introduced, then was not possibility to correctly set protransform column. Orafce used UPDATE of pg_proc table. Unfortunatelly, this new dependency was not coverget by entry in pg_depend. Today this issue breaks binary upgrade. Fix is simple - on new Postgres it uses ALTER FUNCTION SUPPORT, for older releases it tries to fix pg_depend table.
  * implementation of unistr function
  * Added ppc64le architecture
  * Added some transactions behavior differences
  * Catch dbms_random.string() output variation on big-endian
  * Fix the wrong filter in oracle.user_tables view in orafce--3.6--3.7.sql.
  * Update README.asciidoc
  * Update others.c
  * Use correct macros to convert between Datums and pointers.
  * note in readme
  * prepare for 3.13.4
  * forgotten files
  * prepare for 3.13.3
  * enable utf_file on MSWin
  * cleaning build on MSWin
  * reduce stack size
  * minor cleaning
  * prepare for 3.12
  * fix warning for postgres 13
  * fix asciidoc format
  * minor README fix
  * travis status
  * PostgreSQL 9.4 is not supported
  * example to trigger func
  * fix build and tests for older releases
  * trigger functions - ensure so only null or only empty string is used
  * fix: 'if' condition is always true
  * prepare for 3.11.1
  * missing test output file
  * only PostgreSQL 9.4 and higher are supported
  * Run the testsuite on travis-ci.org
  * clean warnings detected by -Wextra
  * forgot. GRANT
  * The previous securing of utl_file package required SECURITY DEFINER flags on functions. Using this flag is security risk. Insted using SECURITY DEFINER we allow READ from utl_file.utl_file_dir to PUBLIC. This design has one advantage - the final user can control usage of these function with granting user rights just only on table utl_file.utl_file_dir.
  * Update README.asciidoc
  * Update README.asciidoc
  * Update README.asciidoc
  * Update README.asciidoc
  * fix long standing bug - function with access to utl_file_dir should to has security definer flag
  * fix compilation against Postgres 13
  * small fixes and rewrite of utl_file paragraph
  * the safe dictionary in utl_file package can be identified by name too
  * Fix doc and comment about months_between returning numeric (not float8).
  * there are some differences between Oracle and Orafce
  * fix compilation on PostgreSQL 13 (by removing useless include), fix to_multi_byte('\')
  * prepare for 3.9.0
  * remove extra clean to allow repeateable build without bison
  * Orafce is licenced under 0-clause BSD licence
  * polishing licence
  * use postgres routines for printing float4, float8 values in to_char function (reduce garbage and trailing zeroes)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273602">- enable pg 13 and 14</changelog>
  <changelog author="mrueckert@suse.de" date="1675166400">- Update to version 4.1.1+git0.519b5b5:
  * prepare for 4.1.1
  * build on master (16) branch
  * use adv lock to synchronize start of pipe and alert tests
  * add connect by level &lt; num in migration docs
  * Hierarchical Query identifys the leaves
  * Update the connect_by_root example, for better semantics
  * fix: CONNECT_BY_ROOT in hierarchical query is converted to WITH RECURSIVE syntax
  * the table [200~utl_file.utl_file_dir is dumpable
  * fix compilation against pg master
  * prepare for 4.0.2
  * fix -wextra warnings
  * fix shadowed variable varning
  * fix msvc build for PostgreSQL 14
  * fix build for pg16
  * fix META file and prepare for 4.0.1
  * to_multi_byte and to_single_byte support euc_cn(gb2312)
  * add  oracle sql migration : CONNECT_BY_ROOT
  * fix oracle connect by
  * prepare for 4.0.0 release
  * remove obsolete ref on orafce_sql
  * rename shadow variable
  * initial merge of dbms_sql from orafce_sql
  * other cleaning after removing support for unsupported pg releases
  * increase version
  * remove support for PostgreSQL 10 and older
  * Fix database creation during installchecks for ICU cluster
  * fix dbms_output.serveroutput(true) clear the buffer.It conforms to the features of oracle.
  * prepare for 3.25.1
  * fix calculation of plvstr.is_prefix for negative numeric values - see issue #198
  * fix for pre 14 releases
  * doc and regress tests
  * remove useless func decl
  * support for older releases
  * initial implementation
  * initial
  * fix build against master (16) branch
  * wrap possible unsupported DDL to dynamic SQL
  * specify schema inside definition function tanh
  * only set editorconfig
  * prepare for 3.24.4
  * remove redundant ALTER FUNCTION #191
  * prepare for 3.24.3
  * PostgreSQL older than 12 doesn't allow ALTER FUNCTION pg_catalog.x SET SCHEMA oracle. Only dirty way by direct modification of system catalogue is possible. see issue #190
  * prepare for 3.24.2
  * fix missing oracle.mod functions in update scripts
  * prepare for 3.24.1
  * fix regress nlssort test for PostgreSQL 9.5 without \if command
  * Fix race condition during initialization in ora_lock_shmem.
  * nlssort: Add a missing call to PG_RE_THROW.
  * Limit nlssort test to Linux/glibc systems with en_US.utf8 installed.
  * NEWS
  * set storage for varchar2 and nvarchar2 to extended strategy
  * prepare for 3.23
  * fix broken calculation in plvdate_isleapyear function #184
  * fix support for pg9.5, fix regress tests for older releases
  * prepare for 3.22.1
  * Fix read past the end of string in to_sigle_byte().
  * Fix dbms_utility.get_time() to use the full range of int32.
  * fix readme
  * prepare for 3.22.0
  * move dbobjects from public and pg_catalog schemas to oracle schema
  * moving objects from public and pg_catalog to oracle schema
  * move RequestAddinShmemSpace to shmem_request_hook for PostgreSQL 15
  * Update sql_migration06.md
  * Restore sqlparse.c and sqlparse.h
  * Undo comment
  * Add comment
  * Add Parallel safe to mod function
  * Bug fix
  * Add mod function for Oracle compatibility
  * Fix typos and spelling in docs and error messages
  * prepare for 3.21.1
  * fix mswin build - regexp functions was not really marked as dllexport due missing include of builtins.h
  * remove empty line
  * fix of some compatibility issues
  * REG_NOSUB is working only on PostgreSQL 15
  * workable release for PostgreSQL 15
  * modification for compotibility with orafce.regexp_instr
  * backport regexp_instr from PostgreSQL 15, use C version instead PLpgSQL for better possibilities of usage regexp API
  * prepare for 3.20.0
  * Fix regexp_instr() function with occurrence when the same value matching a pattern is found at several place in the string.
  * signature of nvl2 function is enhanced to "any", anyelement, anyelement. After this change, the behavior is more close to Oracle. Unfortunatelly - this change can break extension update for some customers that uses nvl2 in views.
  * support negative start argument for function substrb. Originally orafce used buildin bytea substr function. Now it recalculate start argument. see issue #172
  * prepare for 3.19
  * Allow empty string on input of functions to_number and to_date. In this case returns NULL.
  * remove white spaces
  * replace obsolete CSTRING macro by text_to_csring function
  * prepare for 3.18.1
  * fix - badly handled fn_extra in oracle.greatest(least) function
  * prepare for 3.18.0
  * Update README.asciidoc
  * Update README.asciidoc
  * use older API for iteration over an array. Now, oracle.greatest and oracle.least are working on all supported releases
  * remove negative tests related to orafce.greatest because: a) error message is different on supported pg versions, b) the coverage and benefit of these tests is low
  * remove two lines from regress tests of greatest due dependency on used collate
  * Add documentation for greatest and least functions.
  * Update upgrade extension file with the smallint addition.
  * Add greatest/least SQL redefinition for smallint Add regression tests fot the two functions.
  * Oracle functions LEAST and GREATEST return NULL if at least one of the parameters is NULL. This is not the case for the PostgreSQL equivalent functions which only return NULL when all the parameters are NULL. This patch creates the two functions in the oracle schema to have the same behavior than in Oracle.
  * Minor grammatical fix to README.asciidoc
  * fix typo in charpad.c
  * fix typo in orafce--3.17.sql
  * Update Orafce_Documentation_05.md
  * Catch dbms_random.string() output variation on Windows</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675166401">- enable pg 15</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675166402">- remove pg 10 support</changelog>
  <changelog author="Emiliano Langella &lt;emiliano.langella@suse.com&gt;" date="1676030400">- Added "Name:" tag.</changelog>
</package>
<package pkgid="67e75342cfab6ff8779d35698b31974ebc9e6317c62954e23605136a5e8ffb37" name="postgresql13-orafce" arch="ppc64le">
  <version epoch="0" ver="4.1.1+git0.519b5b5" rel="bp154.3.1"/>
  <changelog author="mrueckert@suse.de" date="1424347200">- update to 3.0.9
  * PostgreSQL 9.4 compilation
  * new datatype and related functions: oracle.date
  * new varchar2, nvarchar2 types and related functions
    (Amit Langote)
  * oracle.substr emulate better Oracle substr function behave
    (Vinayak Pokale)
  * fix few internal issues that breaks a PGXN tests (Pavel Stehule)</changelog>
  <changelog author="mrueckert@suse.de" date="1502366400">- switch to multibuild</changelog>
  <changelog author="mrueckert@suse.de" date="1502366401">- update to 3.4.0
  * new aggregate function wm_concat
  * PostgreSQL 9.6, 10 are supported well
  * remove support for 8.3, 8.4, 9.0, 9.1 (only 9.2 and higher
    are supported)
  * new functions: sysdate, sessiontimezone, dbtimezone
  * remove support for 8.2
  * add support for 9.5
  * change the releasion number system
  * new functions: to_single_byte, to_multi_byte, nanvl, length,
    ltrim, btrim, rtrim, lpad, rpad
  * fix compilation issue in new code for Pg &lt;= 9.1</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1540468800">- Add build for PostgreSQL 11 and drop 9.3.
- BuildRequire server-devel instead of devel.</changelog>
  <changelog author="mrueckert@suse.de" date="1540641600">- Update to version 3.6.1+git24.cf58d28:
  * remove strict flag for nvl functions
  * minor cleaning
  * remove pre 9.4 support
  * fixes for 12
  * fix compile on PostgreSQL 12
  * missing reset fsec in ora_timestamptz_round function
  * #74 - badly joined comment
  * #75 set correct type for trunc and round two params functions - float4
  * allow usage of schema oracle and plunit
  * copy paste correction intarray -&gt; orafce
  * fix broken compilation on non MSC platforms
  * fix output path
  * add postgresql 10.3 target support need ICU header by path c:\icu
  * fix conversion from 'size_t' to 'int'
  * add 9.6 build environments fix C89 compatible compliance
  * fix nensenses related yyllex, using older form of bison option
  * new function  oracle.numtodsinterval
  * disallow functions from utl_file package on MS Windows
  * clean headers used by msvc
  * cleaning complete build on msvc
  * add missing files for windows compilation
  * fix #64
  * dba_segments view, cleaning
  * Fix formatting of examples.
  * Append documentation about how to translate REGEXP_SUBSTR Oracle function to PostgreSQL.
  * fix the position of a half-width space added by rpad().
  * enhancing emulation of Oracle views
  * fix some segfaults reported by Andreas Seltenreich #59
  * new few Oracle system views
  * prepare for 3.6
  * Minor bug in doc
  * Avoid setting unused variable value
  * Fix issue #54 - missing collatable flag for string types varchar2, nvarchar2.
  * Ensure LWLockRegisterTranche call in every session before LWLockAcquire call.
  * Preparation for 3.5 release.
  * add missing V1 signatures
  * Add Orafce Documentation and Oracle to PostgreSQL Migration Guide
- drop patch orafce-orafce_sql_yyparse-bison26.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1571745600">- adding postgresql12 to _multibuild</changelog>
  <changelog author="mrueckert@suse.de" date="1571745601">- Update to version 3.8.0+git4.a65cfb8:
  * return back missing files
  * fresh parser files
  * master is now unreleased 3.9
  * minor enhancing user_constraints view - use conrelid::regclass instead table_name. This will be  consistent with index name, and show schema for tables that are not on search_path
  * prepare for 3.8
  * qualify decode function to be installable on greenplum
  * fix PostgreSQL 12 support
  * missing files
  * typo
  * fix compilation and regress tests for PostgreSQL 11
  * Revert "Merge pull request #83 from kato-sho/fix-build-for-PG12"
  * Fix build for PostgreSQL 12
  * remove extra #include utils/nabstime.h
  * update against change format of FunctionCallInfo in PostgreSQL 12
  * fix compilation for pre PostgreSQL 12
  * fix compile for PostgreSQL 12
  * prepare for 3.7.2
  * bug fix release
  * fix bad filter in oracle.user_tables view
  * update NEWS
  * use older syntax for create operator command
  * add warning about possible compatibility issue
  * fix docs
  * null safe pipe operator for (n)varchar2 should be explicitly enabled (due compatibility)
  * bugfix should to use OR REPLACE clause
  * add bugfixes to update script
  * fix readme
  * more faster (n)varchar2 null safe concat
  * null safe concat operator for varchar2 and nvarchar2
  * fix compilation for PostgreSQL 12
  * target type should be qualified
  * broken formula for add_month
  * fix broken oracle.add_months for last day in month
  * fix comment assigned to wrong object
  * minor doc nvl</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273600">- remove dead PG versions</changelog>
  <changelog author="mrueckert@suse.de" date="1638273601">- Update to version 3.17.0+git12.e9ab8a3:
  * Fix some typos in plunit.c and plvdate.c.
  * Fix a non-standard function declaration.
  * pg_nextpower2_32 is available for pg13+|
  * fix typo in plvdate.c
  * fix typo in alert.c
  * Improve the place that double the size of a buffer
  * Fix access privileges of utl_file.tmpdir()
  * prepare for 3.17.0
  * This patch reproduce the same behavior of the regexp_* function with null input.
  * Fix version number in install script.
  * Remove duplicate variable declarations
  * Allow even longer runtimes in DBMS_UTILITY.GET_TIME test
  * prepare for 3.16.2
  * fix build for msvc
  * prepare for 3.16.1
  * sql/dbms_utility.sql: Allow longer test runtime
  * fix some shared memory leaks, reduce an possibility to raise an error 'lock requested error' by cleaning locks (these locks are not Postgres's locks) in dbms_alert_removeall and by triggering cleaning shared memory from locks related to closed processes when there are not free locks - per #PR 140 reported by @rbapin
  * prepare for 3.16.0
  * rename pipe type to orafce_pipe due conflict with pipe function from unistd.h
  * ensure public access to public schema
  * add missing sql file for 3.16
  * Add DBMS_UTILITY.GET_TIME function, it returns the current time in 100th's of a second from a point in time in the past. This function is used for determining elapsed time. This function is widely used in some Oracle installation for timing of functions or statements.
  * fix warning on MSVC
  * prepare for 3.15.1
  * Remove reference to pg_enc2name_tbl variable. It is not available on MSVC, and for this functionality it is not necessary
  * prepare for 3.15.0
  * function regexp_match cannot be used because it is available from Postgres 10
  * Add Oracle regexp_replace() function which supports start position and occurrence. It correspond to the Oracle behavior and consist in plpgsql functions based on PG regexp_matches() and regexp_replace(). All details of the implementation is explained in the documentation. Also include in this patch also include regression tests for regexp_replace() including the Oracle queries and results in comment.
  * just reformatting
  * just reformatting
  * Remove wrong and unused code.
  * Apply orafce rule for assignment on remaining call to position() and length.
  * Use better style for assignment instead of pseudo query.
  * - Improve performances by replacing SELECT ... INTO syntax with := - Replace call to regexp_match() by regexp_matches() to support   PostgreSQL 9.5 and 9.6. - Remove obsolete orafce--3.14.sql file - Update regression test to disable CONTEXT trace.
  * Add Oracle regexp_like(), regexp_count(), regexp_instr() and regexp_substr() functions. They correspond to the Oracle behavior and consist in plpgsql functions based on PG regexp_matches(). All details of the implementation is explained in the documentation. This patch also include a regression test regexp_func.sql including the Oracle queries and results in comment.
  * more ilustrative description of msvc project properties
  * Oracle.sysdate uses time zone stored in GUC orafce.timezone. The setting of configuration value was correct - the global variable orafce_timezone has correct content (it can be checked by SELECT oracle.dbtimezone(). But direct output of this GUC (show orafce.timezone) was broken because the handler of system timezone was used and the statement "show orafce.timezone" did same output like "show timezone", and it is surely wrong.
  * pre 3.14 changes
  * When nvarchar2 and varchar2 was introduced, then was not possibility to correctly set protransform column. Orafce used UPDATE of pg_proc table. Unfortunatelly, this new dependency was not coverget by entry in pg_depend. Today this issue breaks binary upgrade. Fix is simple - on new Postgres it uses ALTER FUNCTION SUPPORT, for older releases it tries to fix pg_depend table.
  * implementation of unistr function
  * Added ppc64le architecture
  * Added some transactions behavior differences
  * Catch dbms_random.string() output variation on big-endian
  * Fix the wrong filter in oracle.user_tables view in orafce--3.6--3.7.sql.
  * Update README.asciidoc
  * Update others.c
  * Use correct macros to convert between Datums and pointers.
  * note in readme
  * prepare for 3.13.4
  * forgotten files
  * prepare for 3.13.3
  * enable utf_file on MSWin
  * cleaning build on MSWin
  * reduce stack size
  * minor cleaning
  * prepare for 3.12
  * fix warning for postgres 13
  * fix asciidoc format
  * minor README fix
  * travis status
  * PostgreSQL 9.4 is not supported
  * example to trigger func
  * fix build and tests for older releases
  * trigger functions - ensure so only null or only empty string is used
  * fix: 'if' condition is always true
  * prepare for 3.11.1
  * missing test output file
  * only PostgreSQL 9.4 and higher are supported
  * Run the testsuite on travis-ci.org
  * clean warnings detected by -Wextra
  * forgot. GRANT
  * The previous securing of utl_file package required SECURITY DEFINER flags on functions. Using this flag is security risk. Insted using SECURITY DEFINER we allow READ from utl_file.utl_file_dir to PUBLIC. This design has one advantage - the final user can control usage of these function with granting user rights just only on table utl_file.utl_file_dir.
  * Update README.asciidoc
  * Update README.asciidoc
  * Update README.asciidoc
  * Update README.asciidoc
  * fix long standing bug - function with access to utl_file_dir should to has security definer flag
  * fix compilation against Postgres 13
  * small fixes and rewrite of utl_file paragraph
  * the safe dictionary in utl_file package can be identified by name too
  * Fix doc and comment about months_between returning numeric (not float8).
  * there are some differences between Oracle and Orafce
  * fix compilation on PostgreSQL 13 (by removing useless include), fix to_multi_byte('\')
  * prepare for 3.9.0
  * remove extra clean to allow repeateable build without bison
  * Orafce is licenced under 0-clause BSD licence
  * polishing licence
  * use postgres routines for printing float4, float8 values in to_char function (reduce garbage and trailing zeroes)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273602">- enable pg 13 and 14</changelog>
  <changelog author="mrueckert@suse.de" date="1675166400">- Update to version 4.1.1+git0.519b5b5:
  * prepare for 4.1.1
  * build on master (16) branch
  * use adv lock to synchronize start of pipe and alert tests
  * add connect by level &lt; num in migration docs
  * Hierarchical Query identifys the leaves
  * Update the connect_by_root example, for better semantics
  * fix: CONNECT_BY_ROOT in hierarchical query is converted to WITH RECURSIVE syntax
  * the table [200~utl_file.utl_file_dir is dumpable
  * fix compilation against pg master
  * prepare for 4.0.2
  * fix -wextra warnings
  * fix shadowed variable varning
  * fix msvc build for PostgreSQL 14
  * fix build for pg16
  * fix META file and prepare for 4.0.1
  * to_multi_byte and to_single_byte support euc_cn(gb2312)
  * add  oracle sql migration : CONNECT_BY_ROOT
  * fix oracle connect by
  * prepare for 4.0.0 release
  * remove obsolete ref on orafce_sql
  * rename shadow variable
  * initial merge of dbms_sql from orafce_sql
  * other cleaning after removing support for unsupported pg releases
  * increase version
  * remove support for PostgreSQL 10 and older
  * Fix database creation during installchecks for ICU cluster
  * fix dbms_output.serveroutput(true) clear the buffer.It conforms to the features of oracle.
  * prepare for 3.25.1
  * fix calculation of plvstr.is_prefix for negative numeric values - see issue #198
  * fix for pre 14 releases
  * doc and regress tests
  * remove useless func decl
  * support for older releases
  * initial implementation
  * initial
  * fix build against master (16) branch
  * wrap possible unsupported DDL to dynamic SQL
  * specify schema inside definition function tanh
  * only set editorconfig
  * prepare for 3.24.4
  * remove redundant ALTER FUNCTION #191
  * prepare for 3.24.3
  * PostgreSQL older than 12 doesn't allow ALTER FUNCTION pg_catalog.x SET SCHEMA oracle. Only dirty way by direct modification of system catalogue is possible. see issue #190
  * prepare for 3.24.2
  * fix missing oracle.mod functions in update scripts
  * prepare for 3.24.1
  * fix regress nlssort test for PostgreSQL 9.5 without \if command
  * Fix race condition during initialization in ora_lock_shmem.
  * nlssort: Add a missing call to PG_RE_THROW.
  * Limit nlssort test to Linux/glibc systems with en_US.utf8 installed.
  * NEWS
  * set storage for varchar2 and nvarchar2 to extended strategy
  * prepare for 3.23
  * fix broken calculation in plvdate_isleapyear function #184
  * fix support for pg9.5, fix regress tests for older releases
  * prepare for 3.22.1
  * Fix read past the end of string in to_sigle_byte().
  * Fix dbms_utility.get_time() to use the full range of int32.
  * fix readme
  * prepare for 3.22.0
  * move dbobjects from public and pg_catalog schemas to oracle schema
  * moving objects from public and pg_catalog to oracle schema
  * move RequestAddinShmemSpace to shmem_request_hook for PostgreSQL 15
  * Update sql_migration06.md
  * Restore sqlparse.c and sqlparse.h
  * Undo comment
  * Add comment
  * Add Parallel safe to mod function
  * Bug fix
  * Add mod function for Oracle compatibility
  * Fix typos and spelling in docs and error messages
  * prepare for 3.21.1
  * fix mswin build - regexp functions was not really marked as dllexport due missing include of builtins.h
  * remove empty line
  * fix of some compatibility issues
  * REG_NOSUB is working only on PostgreSQL 15
  * workable release for PostgreSQL 15
  * modification for compotibility with orafce.regexp_instr
  * backport regexp_instr from PostgreSQL 15, use C version instead PLpgSQL for better possibilities of usage regexp API
  * prepare for 3.20.0
  * Fix regexp_instr() function with occurrence when the same value matching a pattern is found at several place in the string.
  * signature of nvl2 function is enhanced to "any", anyelement, anyelement. After this change, the behavior is more close to Oracle. Unfortunatelly - this change can break extension update for some customers that uses nvl2 in views.
  * support negative start argument for function substrb. Originally orafce used buildin bytea substr function. Now it recalculate start argument. see issue #172
  * prepare for 3.19
  * Allow empty string on input of functions to_number and to_date. In this case returns NULL.
  * remove white spaces
  * replace obsolete CSTRING macro by text_to_csring function
  * prepare for 3.18.1
  * fix - badly handled fn_extra in oracle.greatest(least) function
  * prepare for 3.18.0
  * Update README.asciidoc
  * Update README.asciidoc
  * use older API for iteration over an array. Now, oracle.greatest and oracle.least are working on all supported releases
  * remove negative tests related to orafce.greatest because: a) error message is different on supported pg versions, b) the coverage and benefit of these tests is low
  * remove two lines from regress tests of greatest due dependency on used collate
  * Add documentation for greatest and least functions.
  * Update upgrade extension file with the smallint addition.
  * Add greatest/least SQL redefinition for smallint Add regression tests fot the two functions.
  * Oracle functions LEAST and GREATEST return NULL if at least one of the parameters is NULL. This is not the case for the PostgreSQL equivalent functions which only return NULL when all the parameters are NULL. This patch creates the two functions in the oracle schema to have the same behavior than in Oracle.
  * Minor grammatical fix to README.asciidoc
  * fix typo in charpad.c
  * fix typo in orafce--3.17.sql
  * Update Orafce_Documentation_05.md
  * Catch dbms_random.string() output variation on Windows</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675166401">- enable pg 15</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675166402">- remove pg 10 support</changelog>
  <changelog author="Emiliano Langella &lt;emiliano.langella@suse.com&gt;" date="1676030400">- Added "Name:" tag.</changelog>
</package>
<package pkgid="5f1a4b356023b58d07c062b0db6bd94542a562b5c07becabb31362b70d12d136" name="postgresql13-orafce" arch="s390x">
  <version epoch="0" ver="4.1.1+git0.519b5b5" rel="bp154.3.1"/>
  <changelog author="mrueckert@suse.de" date="1424347200">- update to 3.0.9
  * PostgreSQL 9.4 compilation
  * new datatype and related functions: oracle.date
  * new varchar2, nvarchar2 types and related functions
    (Amit Langote)
  * oracle.substr emulate better Oracle substr function behave
    (Vinayak Pokale)
  * fix few internal issues that breaks a PGXN tests (Pavel Stehule)</changelog>
  <changelog author="mrueckert@suse.de" date="1502366400">- switch to multibuild</changelog>
  <changelog author="mrueckert@suse.de" date="1502366401">- update to 3.4.0
  * new aggregate function wm_concat
  * PostgreSQL 9.6, 10 are supported well
  * remove support for 8.3, 8.4, 9.0, 9.1 (only 9.2 and higher
    are supported)
  * new functions: sysdate, sessiontimezone, dbtimezone
  * remove support for 8.2
  * add support for 9.5
  * change the releasion number system
  * new functions: to_single_byte, to_multi_byte, nanvl, length,
    ltrim, btrim, rtrim, lpad, rpad
  * fix compilation issue in new code for Pg &lt;= 9.1</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1540468800">- Add build for PostgreSQL 11 and drop 9.3.
- BuildRequire server-devel instead of devel.</changelog>
  <changelog author="mrueckert@suse.de" date="1540641600">- Update to version 3.6.1+git24.cf58d28:
  * remove strict flag for nvl functions
  * minor cleaning
  * remove pre 9.4 support
  * fixes for 12
  * fix compile on PostgreSQL 12
  * missing reset fsec in ora_timestamptz_round function
  * #74 - badly joined comment
  * #75 set correct type for trunc and round two params functions - float4
  * allow usage of schema oracle and plunit
  * copy paste correction intarray -&gt; orafce
  * fix broken compilation on non MSC platforms
  * fix output path
  * add postgresql 10.3 target support need ICU header by path c:\icu
  * fix conversion from 'size_t' to 'int'
  * add 9.6 build environments fix C89 compatible compliance
  * fix nensenses related yyllex, using older form of bison option
  * new function  oracle.numtodsinterval
  * disallow functions from utl_file package on MS Windows
  * clean headers used by msvc
  * cleaning complete build on msvc
  * add missing files for windows compilation
  * fix #64
  * dba_segments view, cleaning
  * Fix formatting of examples.
  * Append documentation about how to translate REGEXP_SUBSTR Oracle function to PostgreSQL.
  * fix the position of a half-width space added by rpad().
  * enhancing emulation of Oracle views
  * fix some segfaults reported by Andreas Seltenreich #59
  * new few Oracle system views
  * prepare for 3.6
  * Minor bug in doc
  * Avoid setting unused variable value
  * Fix issue #54 - missing collatable flag for string types varchar2, nvarchar2.
  * Ensure LWLockRegisterTranche call in every session before LWLockAcquire call.
  * Preparation for 3.5 release.
  * add missing V1 signatures
  * Add Orafce Documentation and Oracle to PostgreSQL Migration Guide
- drop patch orafce-orafce_sql_yyparse-bison26.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1571745600">- adding postgresql12 to _multibuild</changelog>
  <changelog author="mrueckert@suse.de" date="1571745601">- Update to version 3.8.0+git4.a65cfb8:
  * return back missing files
  * fresh parser files
  * master is now unreleased 3.9
  * minor enhancing user_constraints view - use conrelid::regclass instead table_name. This will be  consistent with index name, and show schema for tables that are not on search_path
  * prepare for 3.8
  * qualify decode function to be installable on greenplum
  * fix PostgreSQL 12 support
  * missing files
  * typo
  * fix compilation and regress tests for PostgreSQL 11
  * Revert "Merge pull request #83 from kato-sho/fix-build-for-PG12"
  * Fix build for PostgreSQL 12
  * remove extra #include utils/nabstime.h
  * update against change format of FunctionCallInfo in PostgreSQL 12
  * fix compilation for pre PostgreSQL 12
  * fix compile for PostgreSQL 12
  * prepare for 3.7.2
  * bug fix release
  * fix bad filter in oracle.user_tables view
  * update NEWS
  * use older syntax for create operator command
  * add warning about possible compatibility issue
  * fix docs
  * null safe pipe operator for (n)varchar2 should be explicitly enabled (due compatibility)
  * bugfix should to use OR REPLACE clause
  * add bugfixes to update script
  * fix readme
  * more faster (n)varchar2 null safe concat
  * null safe concat operator for varchar2 and nvarchar2
  * fix compilation for PostgreSQL 12
  * target type should be qualified
  * broken formula for add_month
  * fix broken oracle.add_months for last day in month
  * fix comment assigned to wrong object
  * minor doc nvl</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273600">- remove dead PG versions</changelog>
  <changelog author="mrueckert@suse.de" date="1638273601">- Update to version 3.17.0+git12.e9ab8a3:
  * Fix some typos in plunit.c and plvdate.c.
  * Fix a non-standard function declaration.
  * pg_nextpower2_32 is available for pg13+|
  * fix typo in plvdate.c
  * fix typo in alert.c
  * Improve the place that double the size of a buffer
  * Fix access privileges of utl_file.tmpdir()
  * prepare for 3.17.0
  * This patch reproduce the same behavior of the regexp_* function with null input.
  * Fix version number in install script.
  * Remove duplicate variable declarations
  * Allow even longer runtimes in DBMS_UTILITY.GET_TIME test
  * prepare for 3.16.2
  * fix build for msvc
  * prepare for 3.16.1
  * sql/dbms_utility.sql: Allow longer test runtime
  * fix some shared memory leaks, reduce an possibility to raise an error 'lock requested error' by cleaning locks (these locks are not Postgres's locks) in dbms_alert_removeall and by triggering cleaning shared memory from locks related to closed processes when there are not free locks - per #PR 140 reported by @rbapin
  * prepare for 3.16.0
  * rename pipe type to orafce_pipe due conflict with pipe function from unistd.h
  * ensure public access to public schema
  * add missing sql file for 3.16
  * Add DBMS_UTILITY.GET_TIME function, it returns the current time in 100th's of a second from a point in time in the past. This function is used for determining elapsed time. This function is widely used in some Oracle installation for timing of functions or statements.
  * fix warning on MSVC
  * prepare for 3.15.1
  * Remove reference to pg_enc2name_tbl variable. It is not available on MSVC, and for this functionality it is not necessary
  * prepare for 3.15.0
  * function regexp_match cannot be used because it is available from Postgres 10
  * Add Oracle regexp_replace() function which supports start position and occurrence. It correspond to the Oracle behavior and consist in plpgsql functions based on PG regexp_matches() and regexp_replace(). All details of the implementation is explained in the documentation. Also include in this patch also include regression tests for regexp_replace() including the Oracle queries and results in comment.
  * just reformatting
  * just reformatting
  * Remove wrong and unused code.
  * Apply orafce rule for assignment on remaining call to position() and length.
  * Use better style for assignment instead of pseudo query.
  * - Improve performances by replacing SELECT ... INTO syntax with := - Replace call to regexp_match() by regexp_matches() to support   PostgreSQL 9.5 and 9.6. - Remove obsolete orafce--3.14.sql file - Update regression test to disable CONTEXT trace.
  * Add Oracle regexp_like(), regexp_count(), regexp_instr() and regexp_substr() functions. They correspond to the Oracle behavior and consist in plpgsql functions based on PG regexp_matches(). All details of the implementation is explained in the documentation. This patch also include a regression test regexp_func.sql including the Oracle queries and results in comment.
  * more ilustrative description of msvc project properties
  * Oracle.sysdate uses time zone stored in GUC orafce.timezone. The setting of configuration value was correct - the global variable orafce_timezone has correct content (it can be checked by SELECT oracle.dbtimezone(). But direct output of this GUC (show orafce.timezone) was broken because the handler of system timezone was used and the statement "show orafce.timezone" did same output like "show timezone", and it is surely wrong.
  * pre 3.14 changes
  * When nvarchar2 and varchar2 was introduced, then was not possibility to correctly set protransform column. Orafce used UPDATE of pg_proc table. Unfortunatelly, this new dependency was not coverget by entry in pg_depend. Today this issue breaks binary upgrade. Fix is simple - on new Postgres it uses ALTER FUNCTION SUPPORT, for older releases it tries to fix pg_depend table.
  * implementation of unistr function
  * Added ppc64le architecture
  * Added some transactions behavior differences
  * Catch dbms_random.string() output variation on big-endian
  * Fix the wrong filter in oracle.user_tables view in orafce--3.6--3.7.sql.
  * Update README.asciidoc
  * Update others.c
  * Use correct macros to convert between Datums and pointers.
  * note in readme
  * prepare for 3.13.4
  * forgotten files
  * prepare for 3.13.3
  * enable utf_file on MSWin
  * cleaning build on MSWin
  * reduce stack size
  * minor cleaning
  * prepare for 3.12
  * fix warning for postgres 13
  * fix asciidoc format
  * minor README fix
  * travis status
  * PostgreSQL 9.4 is not supported
  * example to trigger func
  * fix build and tests for older releases
  * trigger functions - ensure so only null or only empty string is used
  * fix: 'if' condition is always true
  * prepare for 3.11.1
  * missing test output file
  * only PostgreSQL 9.4 and higher are supported
  * Run the testsuite on travis-ci.org
  * clean warnings detected by -Wextra
  * forgot. GRANT
  * The previous securing of utl_file package required SECURITY DEFINER flags on functions. Using this flag is security risk. Insted using SECURITY DEFINER we allow READ from utl_file.utl_file_dir to PUBLIC. This design has one advantage - the final user can control usage of these function with granting user rights just only on table utl_file.utl_file_dir.
  * Update README.asciidoc
  * Update README.asciidoc
  * Update README.asciidoc
  * Update README.asciidoc
  * fix long standing bug - function with access to utl_file_dir should to has security definer flag
  * fix compilation against Postgres 13
  * small fixes and rewrite of utl_file paragraph
  * the safe dictionary in utl_file package can be identified by name too
  * Fix doc and comment about months_between returning numeric (not float8).
  * there are some differences between Oracle and Orafce
  * fix compilation on PostgreSQL 13 (by removing useless include), fix to_multi_byte('\')
  * prepare for 3.9.0
  * remove extra clean to allow repeateable build without bison
  * Orafce is licenced under 0-clause BSD licence
  * polishing licence
  * use postgres routines for printing float4, float8 values in to_char function (reduce garbage and trailing zeroes)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273602">- enable pg 13 and 14</changelog>
  <changelog author="mrueckert@suse.de" date="1675166400">- Update to version 4.1.1+git0.519b5b5:
  * prepare for 4.1.1
  * build on master (16) branch
  * use adv lock to synchronize start of pipe and alert tests
  * add connect by level &lt; num in migration docs
  * Hierarchical Query identifys the leaves
  * Update the connect_by_root example, for better semantics
  * fix: CONNECT_BY_ROOT in hierarchical query is converted to WITH RECURSIVE syntax
  * the table [200~utl_file.utl_file_dir is dumpable
  * fix compilation against pg master
  * prepare for 4.0.2
  * fix -wextra warnings
  * fix shadowed variable varning
  * fix msvc build for PostgreSQL 14
  * fix build for pg16
  * fix META file and prepare for 4.0.1
  * to_multi_byte and to_single_byte support euc_cn(gb2312)
  * add  oracle sql migration : CONNECT_BY_ROOT
  * fix oracle connect by
  * prepare for 4.0.0 release
  * remove obsolete ref on orafce_sql
  * rename shadow variable
  * initial merge of dbms_sql from orafce_sql
  * other cleaning after removing support for unsupported pg releases
  * increase version
  * remove support for PostgreSQL 10 and older
  * Fix database creation during installchecks for ICU cluster
  * fix dbms_output.serveroutput(true) clear the buffer.It conforms to the features of oracle.
  * prepare for 3.25.1
  * fix calculation of plvstr.is_prefix for negative numeric values - see issue #198
  * fix for pre 14 releases
  * doc and regress tests
  * remove useless func decl
  * support for older releases
  * initial implementation
  * initial
  * fix build against master (16) branch
  * wrap possible unsupported DDL to dynamic SQL
  * specify schema inside definition function tanh
  * only set editorconfig
  * prepare for 3.24.4
  * remove redundant ALTER FUNCTION #191
  * prepare for 3.24.3
  * PostgreSQL older than 12 doesn't allow ALTER FUNCTION pg_catalog.x SET SCHEMA oracle. Only dirty way by direct modification of system catalogue is possible. see issue #190
  * prepare for 3.24.2
  * fix missing oracle.mod functions in update scripts
  * prepare for 3.24.1
  * fix regress nlssort test for PostgreSQL 9.5 without \if command
  * Fix race condition during initialization in ora_lock_shmem.
  * nlssort: Add a missing call to PG_RE_THROW.
  * Limit nlssort test to Linux/glibc systems with en_US.utf8 installed.
  * NEWS
  * set storage for varchar2 and nvarchar2 to extended strategy
  * prepare for 3.23
  * fix broken calculation in plvdate_isleapyear function #184
  * fix support for pg9.5, fix regress tests for older releases
  * prepare for 3.22.1
  * Fix read past the end of string in to_sigle_byte().
  * Fix dbms_utility.get_time() to use the full range of int32.
  * fix readme
  * prepare for 3.22.0
  * move dbobjects from public and pg_catalog schemas to oracle schema
  * moving objects from public and pg_catalog to oracle schema
  * move RequestAddinShmemSpace to shmem_request_hook for PostgreSQL 15
  * Update sql_migration06.md
  * Restore sqlparse.c and sqlparse.h
  * Undo comment
  * Add comment
  * Add Parallel safe to mod function
  * Bug fix
  * Add mod function for Oracle compatibility
  * Fix typos and spelling in docs and error messages
  * prepare for 3.21.1
  * fix mswin build - regexp functions was not really marked as dllexport due missing include of builtins.h
  * remove empty line
  * fix of some compatibility issues
  * REG_NOSUB is working only on PostgreSQL 15
  * workable release for PostgreSQL 15
  * modification for compotibility with orafce.regexp_instr
  * backport regexp_instr from PostgreSQL 15, use C version instead PLpgSQL for better possibilities of usage regexp API
  * prepare for 3.20.0
  * Fix regexp_instr() function with occurrence when the same value matching a pattern is found at several place in the string.
  * signature of nvl2 function is enhanced to "any", anyelement, anyelement. After this change, the behavior is more close to Oracle. Unfortunatelly - this change can break extension update for some customers that uses nvl2 in views.
  * support negative start argument for function substrb. Originally orafce used buildin bytea substr function. Now it recalculate start argument. see issue #172
  * prepare for 3.19
  * Allow empty string on input of functions to_number and to_date. In this case returns NULL.
  * remove white spaces
  * replace obsolete CSTRING macro by text_to_csring function
  * prepare for 3.18.1
  * fix - badly handled fn_extra in oracle.greatest(least) function
  * prepare for 3.18.0
  * Update README.asciidoc
  * Update README.asciidoc
  * use older API for iteration over an array. Now, oracle.greatest and oracle.least are working on all supported releases
  * remove negative tests related to orafce.greatest because: a) error message is different on supported pg versions, b) the coverage and benefit of these tests is low
  * remove two lines from regress tests of greatest due dependency on used collate
  * Add documentation for greatest and least functions.
  * Update upgrade extension file with the smallint addition.
  * Add greatest/least SQL redefinition for smallint Add regression tests fot the two functions.
  * Oracle functions LEAST and GREATEST return NULL if at least one of the parameters is NULL. This is not the case for the PostgreSQL equivalent functions which only return NULL when all the parameters are NULL. This patch creates the two functions in the oracle schema to have the same behavior than in Oracle.
  * Minor grammatical fix to README.asciidoc
  * fix typo in charpad.c
  * fix typo in orafce--3.17.sql
  * Update Orafce_Documentation_05.md
  * Catch dbms_random.string() output variation on Windows</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675166401">- enable pg 15</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675166402">- remove pg 10 support</changelog>
  <changelog author="Emiliano Langella &lt;emiliano.langella@suse.com&gt;" date="1676030400">- Added "Name:" tag.</changelog>
</package>
<package pkgid="bacf93b792fd22e6abafcdc785ccf888feb0f5abf4efc03202e7e041dad23a54" name="postgresql13-orafce" arch="src">
  <version epoch="0" ver="4.1.1+git0.519b5b5" rel="bp154.3.1"/>
  <changelog author="darin@darins.net" date="1351252800">- added pre_checkin.sh to generate .spec and .changes</changelog>
  <changelog author="darin@darins.net" date="1351771200">- updated name in template
- set proper install location</changelog>
  <changelog author="darin@darins.net" date="1355745600">- renamed orafce.spec to orafce.spec.in</changelog>
  <changelog author="darin@darins.net" date="1375963200">- patch for compilation error with Bison &gt;=2.6
  See also http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=710633</changelog>
  <changelog author="darin@darins.net" date="1381320000">- updated to verion 3.0.6
- generate specs for PG 9.3</changelog>
  <changelog author="darin@darins.net" date="1381752000">- rename README.orafunc to README.asciidoc</changelog>
  <changelog author="mrueckert@suse.de" date="1424347200">- update to 3.0.9
  * PostgreSQL 9.4 compilation
  * new datatype and related functions: oracle.date
  * new varchar2, nvarchar2 types and related functions
    (Amit Langote)
  * oracle.substr emulate better Oracle substr function behave
    (Vinayak Pokale)
  * fix few internal issues that breaks a PGXN tests (Pavel Stehule)</changelog>
  <changelog author="mrueckert@suse.de" date="1502366400">- switch to multibuild</changelog>
  <changelog author="mrueckert@suse.de" date="1502366401">- update to 3.4.0
  * new aggregate function wm_concat
  * PostgreSQL 9.6, 10 are supported well
  * remove support for 8.3, 8.4, 9.0, 9.1 (only 9.2 and higher
    are supported)
  * new functions: sysdate, sessiontimezone, dbtimezone
  * remove support for 8.2
  * add support for 9.5
  * change the releasion number system
  * new functions: to_single_byte, to_multi_byte, nanvl, length,
    ltrim, btrim, rtrim, lpad, rpad
  * fix compilation issue in new code for Pg &lt;= 9.1</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1540468800">- Add build for PostgreSQL 11 and drop 9.3.
- BuildRequire server-devel instead of devel.</changelog>
  <changelog author="mrueckert@suse.de" date="1540641600">- Update to version 3.6.1+git24.cf58d28:
  * remove strict flag for nvl functions
  * minor cleaning
  * remove pre 9.4 support
  * fixes for 12
  * fix compile on PostgreSQL 12
  * missing reset fsec in ora_timestamptz_round function
  * #74 - badly joined comment
  * #75 set correct type for trunc and round two params functions - float4
  * allow usage of schema oracle and plunit
  * copy paste correction intarray -&gt; orafce
  * fix broken compilation on non MSC platforms
  * fix output path
  * add postgresql 10.3 target support need ICU header by path c:\icu
  * fix conversion from 'size_t' to 'int'
  * add 9.6 build environments fix C89 compatible compliance
  * fix nensenses related yyllex, using older form of bison option
  * new function  oracle.numtodsinterval
  * disallow functions from utl_file package on MS Windows
  * clean headers used by msvc
  * cleaning complete build on msvc
  * add missing files for windows compilation
  * fix #64
  * dba_segments view, cleaning
  * Fix formatting of examples.
  * Append documentation about how to translate REGEXP_SUBSTR Oracle function to PostgreSQL.
  * fix the position of a half-width space added by rpad().
  * enhancing emulation of Oracle views
  * fix some segfaults reported by Andreas Seltenreich #59
  * new few Oracle system views
  * prepare for 3.6
  * Minor bug in doc
  * Avoid setting unused variable value
  * Fix issue #54 - missing collatable flag for string types varchar2, nvarchar2.
  * Ensure LWLockRegisterTranche call in every session before LWLockAcquire call.
  * Preparation for 3.5 release.
  * add missing V1 signatures
  * Add Orafce Documentation and Oracle to PostgreSQL Migration Guide
- drop patch orafce-orafce_sql_yyparse-bison26.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1571745600">- adding postgresql12 to _multibuild</changelog>
  <changelog author="mrueckert@suse.de" date="1571745601">- Update to version 3.8.0+git4.a65cfb8:
  * return back missing files
  * fresh parser files
  * master is now unreleased 3.9
  * minor enhancing user_constraints view - use conrelid::regclass instead table_name. This will be  consistent with index name, and show schema for tables that are not on search_path
  * prepare for 3.8
  * qualify decode function to be installable on greenplum
  * fix PostgreSQL 12 support
  * missing files
  * typo
  * fix compilation and regress tests for PostgreSQL 11
  * Revert "Merge pull request #83 from kato-sho/fix-build-for-PG12"
  * Fix build for PostgreSQL 12
  * remove extra #include utils/nabstime.h
  * update against change format of FunctionCallInfo in PostgreSQL 12
  * fix compilation for pre PostgreSQL 12
  * fix compile for PostgreSQL 12
  * prepare for 3.7.2
  * bug fix release
  * fix bad filter in oracle.user_tables view
  * update NEWS
  * use older syntax for create operator command
  * add warning about possible compatibility issue
  * fix docs
  * null safe pipe operator for (n)varchar2 should be explicitly enabled (due compatibility)
  * bugfix should to use OR REPLACE clause
  * add bugfixes to update script
  * fix readme
  * more faster (n)varchar2 null safe concat
  * null safe concat operator for varchar2 and nvarchar2
  * fix compilation for PostgreSQL 12
  * target type should be qualified
  * broken formula for add_month
  * fix broken oracle.add_months for last day in month
  * fix comment assigned to wrong object
  * minor doc nvl</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273600">- remove dead PG versions</changelog>
  <changelog author="mrueckert@suse.de" date="1638273601">- Update to version 3.17.0+git12.e9ab8a3:
  * Fix some typos in plunit.c and plvdate.c.
  * Fix a non-standard function declaration.
  * pg_nextpower2_32 is available for pg13+|
  * fix typo in plvdate.c
  * fix typo in alert.c
  * Improve the place that double the size of a buffer
  * Fix access privileges of utl_file.tmpdir()
  * prepare for 3.17.0
  * This patch reproduce the same behavior of the regexp_* function with null input.
  * Fix version number in install script.
  * Remove duplicate variable declarations
  * Allow even longer runtimes in DBMS_UTILITY.GET_TIME test
  * prepare for 3.16.2
  * fix build for msvc
  * prepare for 3.16.1
  * sql/dbms_utility.sql: Allow longer test runtime
  * fix some shared memory leaks, reduce an possibility to raise an error 'lock requested error' by cleaning locks (these locks are not Postgres's locks) in dbms_alert_removeall and by triggering cleaning shared memory from locks related to closed processes when there are not free locks - per #PR 140 reported by @rbapin
  * prepare for 3.16.0
  * rename pipe type to orafce_pipe due conflict with pipe function from unistd.h
  * ensure public access to public schema
  * add missing sql file for 3.16
  * Add DBMS_UTILITY.GET_TIME function, it returns the current time in 100th's of a second from a point in time in the past. This function is used for determining elapsed time. This function is widely used in some Oracle installation for timing of functions or statements.
  * fix warning on MSVC
  * prepare for 3.15.1
  * Remove reference to pg_enc2name_tbl variable. It is not available on MSVC, and for this functionality it is not necessary
  * prepare for 3.15.0
  * function regexp_match cannot be used because it is available from Postgres 10
  * Add Oracle regexp_replace() function which supports start position and occurrence. It correspond to the Oracle behavior and consist in plpgsql functions based on PG regexp_matches() and regexp_replace(). All details of the implementation is explained in the documentation. Also include in this patch also include regression tests for regexp_replace() including the Oracle queries and results in comment.
  * just reformatting
  * just reformatting
  * Remove wrong and unused code.
  * Apply orafce rule for assignment on remaining call to position() and length.
  * Use better style for assignment instead of pseudo query.
  * - Improve performances by replacing SELECT ... INTO syntax with := - Replace call to regexp_match() by regexp_matches() to support   PostgreSQL 9.5 and 9.6. - Remove obsolete orafce--3.14.sql file - Update regression test to disable CONTEXT trace.
  * Add Oracle regexp_like(), regexp_count(), regexp_instr() and regexp_substr() functions. They correspond to the Oracle behavior and consist in plpgsql functions based on PG regexp_matches(). All details of the implementation is explained in the documentation. This patch also include a regression test regexp_func.sql including the Oracle queries and results in comment.
  * more ilustrative description of msvc project properties
  * Oracle.sysdate uses time zone stored in GUC orafce.timezone. The setting of configuration value was correct - the global variable orafce_timezone has correct content (it can be checked by SELECT oracle.dbtimezone(). But direct output of this GUC (show orafce.timezone) was broken because the handler of system timezone was used and the statement "show orafce.timezone" did same output like "show timezone", and it is surely wrong.
  * pre 3.14 changes
  * When nvarchar2 and varchar2 was introduced, then was not possibility to correctly set protransform column. Orafce used UPDATE of pg_proc table. Unfortunatelly, this new dependency was not coverget by entry in pg_depend. Today this issue breaks binary upgrade. Fix is simple - on new Postgres it uses ALTER FUNCTION SUPPORT, for older releases it tries to fix pg_depend table.
  * implementation of unistr function
  * Added ppc64le architecture
  * Added some transactions behavior differences
  * Catch dbms_random.string() output variation on big-endian
  * Fix the wrong filter in oracle.user_tables view in orafce--3.6--3.7.sql.
  * Update README.asciidoc
  * Update others.c
  * Use correct macros to convert between Datums and pointers.
  * note in readme
  * prepare for 3.13.4
  * forgotten files
  * prepare for 3.13.3
  * enable utf_file on MSWin
  * cleaning build on MSWin
  * reduce stack size
  * minor cleaning
  * prepare for 3.12
  * fix warning for postgres 13
  * fix asciidoc format
  * minor README fix
  * travis status
  * PostgreSQL 9.4 is not supported
  * example to trigger func
  * fix build and tests for older releases
  * trigger functions - ensure so only null or only empty string is used
  * fix: 'if' condition is always true
  * prepare for 3.11.1
  * missing test output file
  * only PostgreSQL 9.4 and higher are supported
  * Run the testsuite on travis-ci.org
  * clean warnings detected by -Wextra
  * forgot. GRANT
  * The previous securing of utl_file package required SECURITY DEFINER flags on functions. Using this flag is security risk. Insted using SECURITY DEFINER we allow READ from utl_file.utl_file_dir to PUBLIC. This design has one advantage - the final user can control usage of these function with granting user rights just only on table utl_file.utl_file_dir.
  * Update README.asciidoc
  * Update README.asciidoc
  * Update README.asciidoc
  * Update README.asciidoc
  * fix long standing bug - function with access to utl_file_dir should to has security definer flag
  * fix compilation against Postgres 13
  * small fixes and rewrite of utl_file paragraph
  * the safe dictionary in utl_file package can be identified by name too
  * Fix doc and comment about months_between returning numeric (not float8).
  * there are some differences between Oracle and Orafce
  * fix compilation on PostgreSQL 13 (by removing useless include), fix to_multi_byte('\')
  * prepare for 3.9.0
  * remove extra clean to allow repeateable build without bison
  * Orafce is licenced under 0-clause BSD licence
  * polishing licence
  * use postgres routines for printing float4, float8 values in to_char function (reduce garbage and trailing zeroes)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273602">- enable pg 13 and 14</changelog>
  <changelog author="mrueckert@suse.de" date="1675166400">- Update to version 4.1.1+git0.519b5b5:
  * prepare for 4.1.1
  * build on master (16) branch
  * use adv lock to synchronize start of pipe and alert tests
  * add connect by level &lt; num in migration docs
  * Hierarchical Query identifys the leaves
  * Update the connect_by_root example, for better semantics
  * fix: CONNECT_BY_ROOT in hierarchical query is converted to WITH RECURSIVE syntax
  * the table [200~utl_file.utl_file_dir is dumpable
  * fix compilation against pg master
  * prepare for 4.0.2
  * fix -wextra warnings
  * fix shadowed variable varning
  * fix msvc build for PostgreSQL 14
  * fix build for pg16
  * fix META file and prepare for 4.0.1
  * to_multi_byte and to_single_byte support euc_cn(gb2312)
  * add  oracle sql migration : CONNECT_BY_ROOT
  * fix oracle connect by
  * prepare for 4.0.0 release
  * remove obsolete ref on orafce_sql
  * rename shadow variable
  * initial merge of dbms_sql from orafce_sql
  * other cleaning after removing support for unsupported pg releases
  * increase version
  * remove support for PostgreSQL 10 and older
  * Fix database creation during installchecks for ICU cluster
  * fix dbms_output.serveroutput(true) clear the buffer.It conforms to the features of oracle.
  * prepare for 3.25.1
  * fix calculation of plvstr.is_prefix for negative numeric values - see issue #198
  * fix for pre 14 releases
  * doc and regress tests
  * remove useless func decl
  * support for older releases
  * initial implementation
  * initial
  * fix build against master (16) branch
  * wrap possible unsupported DDL to dynamic SQL
  * specify schema inside definition function tanh
  * only set editorconfig
  * prepare for 3.24.4
  * remove redundant ALTER FUNCTION #191
  * prepare for 3.24.3
  * PostgreSQL older than 12 doesn't allow ALTER FUNCTION pg_catalog.x SET SCHEMA oracle. Only dirty way by direct modification of system catalogue is possible. see issue #190
  * prepare for 3.24.2
  * fix missing oracle.mod functions in update scripts
  * prepare for 3.24.1
  * fix regress nlssort test for PostgreSQL 9.5 without \if command
  * Fix race condition during initialization in ora_lock_shmem.
  * nlssort: Add a missing call to PG_RE_THROW.
  * Limit nlssort test to Linux/glibc systems with en_US.utf8 installed.
  * NEWS
  * set storage for varchar2 and nvarchar2 to extended strategy
  * prepare for 3.23
  * fix broken calculation in plvdate_isleapyear function #184
  * fix support for pg9.5, fix regress tests for older releases
  * prepare for 3.22.1
  * Fix read past the end of string in to_sigle_byte().
  * Fix dbms_utility.get_time() to use the full range of int32.
  * fix readme
  * prepare for 3.22.0
  * move dbobjects from public and pg_catalog schemas to oracle schema
  * moving objects from public and pg_catalog to oracle schema
  * move RequestAddinShmemSpace to shmem_request_hook for PostgreSQL 15
  * Update sql_migration06.md
  * Restore sqlparse.c and sqlparse.h
  * Undo comment
  * Add comment
  * Add Parallel safe to mod function
  * Bug fix
  * Add mod function for Oracle compatibility
  * Fix typos and spelling in docs and error messages
  * prepare for 3.21.1
  * fix mswin build - regexp functions was not really marked as dllexport due missing include of builtins.h
  * remove empty line
  * fix of some compatibility issues
  * REG_NOSUB is working only on PostgreSQL 15
  * workable release for PostgreSQL 15
  * modification for compotibility with orafce.regexp_instr
  * backport regexp_instr from PostgreSQL 15, use C version instead PLpgSQL for better possibilities of usage regexp API
  * prepare for 3.20.0
  * Fix regexp_instr() function with occurrence when the same value matching a pattern is found at several place in the string.
  * signature of nvl2 function is enhanced to "any", anyelement, anyelement. After this change, the behavior is more close to Oracle. Unfortunatelly - this change can break extension update for some customers that uses nvl2 in views.
  * support negative start argument for function substrb. Originally orafce used buildin bytea substr function. Now it recalculate start argument. see issue #172
  * prepare for 3.19
  * Allow empty string on input of functions to_number and to_date. In this case returns NULL.
  * remove white spaces
  * replace obsolete CSTRING macro by text_to_csring function
  * prepare for 3.18.1
  * fix - badly handled fn_extra in oracle.greatest(least) function
  * prepare for 3.18.0
  * Update README.asciidoc
  * Update README.asciidoc
  * use older API for iteration over an array. Now, oracle.greatest and oracle.least are working on all supported releases
  * remove negative tests related to orafce.greatest because: a) error message is different on supported pg versions, b) the coverage and benefit of these tests is low
  * remove two lines from regress tests of greatest due dependency on used collate
  * Add documentation for greatest and least functions.
  * Update upgrade extension file with the smallint addition.
  * Add greatest/least SQL redefinition for smallint Add regression tests fot the two functions.
  * Oracle functions LEAST and GREATEST return NULL if at least one of the parameters is NULL. This is not the case for the PostgreSQL equivalent functions which only return NULL when all the parameters are NULL. This patch creates the two functions in the oracle schema to have the same behavior than in Oracle.
  * Minor grammatical fix to README.asciidoc
  * fix typo in charpad.c
  * fix typo in orafce--3.17.sql
  * Update Orafce_Documentation_05.md
  * Catch dbms_random.string() output variation on Windows</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675166401">- enable pg 15</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675166402">- remove pg 10 support</changelog>
  <changelog author="Emiliano Langella &lt;emiliano.langella@suse.com&gt;" date="1676030400">- Added "Name:" tag.</changelog>
</package>
<package pkgid="43ee360e11db047f4aa9fa0fa13ada78e8b6693d776311e8bbf993ff65c05871" name="postgresql13-orafce" arch="x86_64">
  <version epoch="0" ver="4.1.1+git0.519b5b5" rel="bp154.3.1"/>
  <changelog author="mrueckert@suse.de" date="1424347200">- update to 3.0.9
  * PostgreSQL 9.4 compilation
  * new datatype and related functions: oracle.date
  * new varchar2, nvarchar2 types and related functions
    (Amit Langote)
  * oracle.substr emulate better Oracle substr function behave
    (Vinayak Pokale)
  * fix few internal issues that breaks a PGXN tests (Pavel Stehule)</changelog>
  <changelog author="mrueckert@suse.de" date="1502366400">- switch to multibuild</changelog>
  <changelog author="mrueckert@suse.de" date="1502366401">- update to 3.4.0
  * new aggregate function wm_concat
  * PostgreSQL 9.6, 10 are supported well
  * remove support for 8.3, 8.4, 9.0, 9.1 (only 9.2 and higher
    are supported)
  * new functions: sysdate, sessiontimezone, dbtimezone
  * remove support for 8.2
  * add support for 9.5
  * change the releasion number system
  * new functions: to_single_byte, to_multi_byte, nanvl, length,
    ltrim, btrim, rtrim, lpad, rpad
  * fix compilation issue in new code for Pg &lt;= 9.1</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1540468800">- Add build for PostgreSQL 11 and drop 9.3.
- BuildRequire server-devel instead of devel.</changelog>
  <changelog author="mrueckert@suse.de" date="1540641600">- Update to version 3.6.1+git24.cf58d28:
  * remove strict flag for nvl functions
  * minor cleaning
  * remove pre 9.4 support
  * fixes for 12
  * fix compile on PostgreSQL 12
  * missing reset fsec in ora_timestamptz_round function
  * #74 - badly joined comment
  * #75 set correct type for trunc and round two params functions - float4
  * allow usage of schema oracle and plunit
  * copy paste correction intarray -&gt; orafce
  * fix broken compilation on non MSC platforms
  * fix output path
  * add postgresql 10.3 target support need ICU header by path c:\icu
  * fix conversion from 'size_t' to 'int'
  * add 9.6 build environments fix C89 compatible compliance
  * fix nensenses related yyllex, using older form of bison option
  * new function  oracle.numtodsinterval
  * disallow functions from utl_file package on MS Windows
  * clean headers used by msvc
  * cleaning complete build on msvc
  * add missing files for windows compilation
  * fix #64
  * dba_segments view, cleaning
  * Fix formatting of examples.
  * Append documentation about how to translate REGEXP_SUBSTR Oracle function to PostgreSQL.
  * fix the position of a half-width space added by rpad().
  * enhancing emulation of Oracle views
  * fix some segfaults reported by Andreas Seltenreich #59
  * new few Oracle system views
  * prepare for 3.6
  * Minor bug in doc
  * Avoid setting unused variable value
  * Fix issue #54 - missing collatable flag for string types varchar2, nvarchar2.
  * Ensure LWLockRegisterTranche call in every session before LWLockAcquire call.
  * Preparation for 3.5 release.
  * add missing V1 signatures
  * Add Orafce Documentation and Oracle to PostgreSQL Migration Guide
- drop patch orafce-orafce_sql_yyparse-bison26.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1571745600">- adding postgresql12 to _multibuild</changelog>
  <changelog author="mrueckert@suse.de" date="1571745601">- Update to version 3.8.0+git4.a65cfb8:
  * return back missing files
  * fresh parser files
  * master is now unreleased 3.9
  * minor enhancing user_constraints view - use conrelid::regclass instead table_name. This will be  consistent with index name, and show schema for tables that are not on search_path
  * prepare for 3.8
  * qualify decode function to be installable on greenplum
  * fix PostgreSQL 12 support
  * missing files
  * typo
  * fix compilation and regress tests for PostgreSQL 11
  * Revert "Merge pull request #83 from kato-sho/fix-build-for-PG12"
  * Fix build for PostgreSQL 12
  * remove extra #include utils/nabstime.h
  * update against change format of FunctionCallInfo in PostgreSQL 12
  * fix compilation for pre PostgreSQL 12
  * fix compile for PostgreSQL 12
  * prepare for 3.7.2
  * bug fix release
  * fix bad filter in oracle.user_tables view
  * update NEWS
  * use older syntax for create operator command
  * add warning about possible compatibility issue
  * fix docs
  * null safe pipe operator for (n)varchar2 should be explicitly enabled (due compatibility)
  * bugfix should to use OR REPLACE clause
  * add bugfixes to update script
  * fix readme
  * more faster (n)varchar2 null safe concat
  * null safe concat operator for varchar2 and nvarchar2
  * fix compilation for PostgreSQL 12
  * target type should be qualified
  * broken formula for add_month
  * fix broken oracle.add_months for last day in month
  * fix comment assigned to wrong object
  * minor doc nvl</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273600">- remove dead PG versions</changelog>
  <changelog author="mrueckert@suse.de" date="1638273601">- Update to version 3.17.0+git12.e9ab8a3:
  * Fix some typos in plunit.c and plvdate.c.
  * Fix a non-standard function declaration.
  * pg_nextpower2_32 is available for pg13+|
  * fix typo in plvdate.c
  * fix typo in alert.c
  * Improve the place that double the size of a buffer
  * Fix access privileges of utl_file.tmpdir()
  * prepare for 3.17.0
  * This patch reproduce the same behavior of the regexp_* function with null input.
  * Fix version number in install script.
  * Remove duplicate variable declarations
  * Allow even longer runtimes in DBMS_UTILITY.GET_TIME test
  * prepare for 3.16.2
  * fix build for msvc
  * prepare for 3.16.1
  * sql/dbms_utility.sql: Allow longer test runtime
  * fix some shared memory leaks, reduce an possibility to raise an error 'lock requested error' by cleaning locks (these locks are not Postgres's locks) in dbms_alert_removeall and by triggering cleaning shared memory from locks related to closed processes when there are not free locks - per #PR 140 reported by @rbapin
  * prepare for 3.16.0
  * rename pipe type to orafce_pipe due conflict with pipe function from unistd.h
  * ensure public access to public schema
  * add missing sql file for 3.16
  * Add DBMS_UTILITY.GET_TIME function, it returns the current time in 100th's of a second from a point in time in the past. This function is used for determining elapsed time. This function is widely used in some Oracle installation for timing of functions or statements.
  * fix warning on MSVC
  * prepare for 3.15.1
  * Remove reference to pg_enc2name_tbl variable. It is not available on MSVC, and for this functionality it is not necessary
  * prepare for 3.15.0
  * function regexp_match cannot be used because it is available from Postgres 10
  * Add Oracle regexp_replace() function which supports start position and occurrence. It correspond to the Oracle behavior and consist in plpgsql functions based on PG regexp_matches() and regexp_replace(). All details of the implementation is explained in the documentation. Also include in this patch also include regression tests for regexp_replace() including the Oracle queries and results in comment.
  * just reformatting
  * just reformatting
  * Remove wrong and unused code.
  * Apply orafce rule for assignment on remaining call to position() and length.
  * Use better style for assignment instead of pseudo query.
  * - Improve performances by replacing SELECT ... INTO syntax with := - Replace call to regexp_match() by regexp_matches() to support   PostgreSQL 9.5 and 9.6. - Remove obsolete orafce--3.14.sql file - Update regression test to disable CONTEXT trace.
  * Add Oracle regexp_like(), regexp_count(), regexp_instr() and regexp_substr() functions. They correspond to the Oracle behavior and consist in plpgsql functions based on PG regexp_matches(). All details of the implementation is explained in the documentation. This patch also include a regression test regexp_func.sql including the Oracle queries and results in comment.
  * more ilustrative description of msvc project properties
  * Oracle.sysdate uses time zone stored in GUC orafce.timezone. The setting of configuration value was correct - the global variable orafce_timezone has correct content (it can be checked by SELECT oracle.dbtimezone(). But direct output of this GUC (show orafce.timezone) was broken because the handler of system timezone was used and the statement "show orafce.timezone" did same output like "show timezone", and it is surely wrong.
  * pre 3.14 changes
  * When nvarchar2 and varchar2 was introduced, then was not possibility to correctly set protransform column. Orafce used UPDATE of pg_proc table. Unfortunatelly, this new dependency was not coverget by entry in pg_depend. Today this issue breaks binary upgrade. Fix is simple - on new Postgres it uses ALTER FUNCTION SUPPORT, for older releases it tries to fix pg_depend table.
  * implementation of unistr function
  * Added ppc64le architecture
  * Added some transactions behavior differences
  * Catch dbms_random.string() output variation on big-endian
  * Fix the wrong filter in oracle.user_tables view in orafce--3.6--3.7.sql.
  * Update README.asciidoc
  * Update others.c
  * Use correct macros to convert between Datums and pointers.
  * note in readme
  * prepare for 3.13.4
  * forgotten files
  * prepare for 3.13.3
  * enable utf_file on MSWin
  * cleaning build on MSWin
  * reduce stack size
  * minor cleaning
  * prepare for 3.12
  * fix warning for postgres 13
  * fix asciidoc format
  * minor README fix
  * travis status
  * PostgreSQL 9.4 is not supported
  * example to trigger func
  * fix build and tests for older releases
  * trigger functions - ensure so only null or only empty string is used
  * fix: 'if' condition is always true
  * prepare for 3.11.1
  * missing test output file
  * only PostgreSQL 9.4 and higher are supported
  * Run the testsuite on travis-ci.org
  * clean warnings detected by -Wextra
  * forgot. GRANT
  * The previous securing of utl_file package required SECURITY DEFINER flags on functions. Using this flag is security risk. Insted using SECURITY DEFINER we allow READ from utl_file.utl_file_dir to PUBLIC. This design has one advantage - the final user can control usage of these function with granting user rights just only on table utl_file.utl_file_dir.
  * Update README.asciidoc
  * Update README.asciidoc
  * Update README.asciidoc
  * Update README.asciidoc
  * fix long standing bug - function with access to utl_file_dir should to has security definer flag
  * fix compilation against Postgres 13
  * small fixes and rewrite of utl_file paragraph
  * the safe dictionary in utl_file package can be identified by name too
  * Fix doc and comment about months_between returning numeric (not float8).
  * there are some differences between Oracle and Orafce
  * fix compilation on PostgreSQL 13 (by removing useless include), fix to_multi_byte('\')
  * prepare for 3.9.0
  * remove extra clean to allow repeateable build without bison
  * Orafce is licenced under 0-clause BSD licence
  * polishing licence
  * use postgres routines for printing float4, float8 values in to_char function (reduce garbage and trailing zeroes)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273602">- enable pg 13 and 14</changelog>
  <changelog author="mrueckert@suse.de" date="1675166400">- Update to version 4.1.1+git0.519b5b5:
  * prepare for 4.1.1
  * build on master (16) branch
  * use adv lock to synchronize start of pipe and alert tests
  * add connect by level &lt; num in migration docs
  * Hierarchical Query identifys the leaves
  * Update the connect_by_root example, for better semantics
  * fix: CONNECT_BY_ROOT in hierarchical query is converted to WITH RECURSIVE syntax
  * the table [200~utl_file.utl_file_dir is dumpable
  * fix compilation against pg master
  * prepare for 4.0.2
  * fix -wextra warnings
  * fix shadowed variable varning
  * fix msvc build for PostgreSQL 14
  * fix build for pg16
  * fix META file and prepare for 4.0.1
  * to_multi_byte and to_single_byte support euc_cn(gb2312)
  * add  oracle sql migration : CONNECT_BY_ROOT
  * fix oracle connect by
  * prepare for 4.0.0 release
  * remove obsolete ref on orafce_sql
  * rename shadow variable
  * initial merge of dbms_sql from orafce_sql
  * other cleaning after removing support for unsupported pg releases
  * increase version
  * remove support for PostgreSQL 10 and older
  * Fix database creation during installchecks for ICU cluster
  * fix dbms_output.serveroutput(true) clear the buffer.It conforms to the features of oracle.
  * prepare for 3.25.1
  * fix calculation of plvstr.is_prefix for negative numeric values - see issue #198
  * fix for pre 14 releases
  * doc and regress tests
  * remove useless func decl
  * support for older releases
  * initial implementation
  * initial
  * fix build against master (16) branch
  * wrap possible unsupported DDL to dynamic SQL
  * specify schema inside definition function tanh
  * only set editorconfig
  * prepare for 3.24.4
  * remove redundant ALTER FUNCTION #191
  * prepare for 3.24.3
  * PostgreSQL older than 12 doesn't allow ALTER FUNCTION pg_catalog.x SET SCHEMA oracle. Only dirty way by direct modification of system catalogue is possible. see issue #190
  * prepare for 3.24.2
  * fix missing oracle.mod functions in update scripts
  * prepare for 3.24.1
  * fix regress nlssort test for PostgreSQL 9.5 without \if command
  * Fix race condition during initialization in ora_lock_shmem.
  * nlssort: Add a missing call to PG_RE_THROW.
  * Limit nlssort test to Linux/glibc systems with en_US.utf8 installed.
  * NEWS
  * set storage for varchar2 and nvarchar2 to extended strategy
  * prepare for 3.23
  * fix broken calculation in plvdate_isleapyear function #184
  * fix support for pg9.5, fix regress tests for older releases
  * prepare for 3.22.1
  * Fix read past the end of string in to_sigle_byte().
  * Fix dbms_utility.get_time() to use the full range of int32.
  * fix readme
  * prepare for 3.22.0
  * move dbobjects from public and pg_catalog schemas to oracle schema
  * moving objects from public and pg_catalog to oracle schema
  * move RequestAddinShmemSpace to shmem_request_hook for PostgreSQL 15
  * Update sql_migration06.md
  * Restore sqlparse.c and sqlparse.h
  * Undo comment
  * Add comment
  * Add Parallel safe to mod function
  * Bug fix
  * Add mod function for Oracle compatibility
  * Fix typos and spelling in docs and error messages
  * prepare for 3.21.1
  * fix mswin build - regexp functions was not really marked as dllexport due missing include of builtins.h
  * remove empty line
  * fix of some compatibility issues
  * REG_NOSUB is working only on PostgreSQL 15
  * workable release for PostgreSQL 15
  * modification for compotibility with orafce.regexp_instr
  * backport regexp_instr from PostgreSQL 15, use C version instead PLpgSQL for better possibilities of usage regexp API
  * prepare for 3.20.0
  * Fix regexp_instr() function with occurrence when the same value matching a pattern is found at several place in the string.
  * signature of nvl2 function is enhanced to "any", anyelement, anyelement. After this change, the behavior is more close to Oracle. Unfortunatelly - this change can break extension update for some customers that uses nvl2 in views.
  * support negative start argument for function substrb. Originally orafce used buildin bytea substr function. Now it recalculate start argument. see issue #172
  * prepare for 3.19
  * Allow empty string on input of functions to_number and to_date. In this case returns NULL.
  * remove white spaces
  * replace obsolete CSTRING macro by text_to_csring function
  * prepare for 3.18.1
  * fix - badly handled fn_extra in oracle.greatest(least) function
  * prepare for 3.18.0
  * Update README.asciidoc
  * Update README.asciidoc
  * use older API for iteration over an array. Now, oracle.greatest and oracle.least are working on all supported releases
  * remove negative tests related to orafce.greatest because: a) error message is different on supported pg versions, b) the coverage and benefit of these tests is low
  * remove two lines from regress tests of greatest due dependency on used collate
  * Add documentation for greatest and least functions.
  * Update upgrade extension file with the smallint addition.
  * Add greatest/least SQL redefinition for smallint Add regression tests fot the two functions.
  * Oracle functions LEAST and GREATEST return NULL if at least one of the parameters is NULL. This is not the case for the PostgreSQL equivalent functions which only return NULL when all the parameters are NULL. This patch creates the two functions in the oracle schema to have the same behavior than in Oracle.
  * Minor grammatical fix to README.asciidoc
  * fix typo in charpad.c
  * fix typo in orafce--3.17.sql
  * Update Orafce_Documentation_05.md
  * Catch dbms_random.string() output variation on Windows</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675166401">- enable pg 15</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675166402">- remove pg 10 support</changelog>
  <changelog author="Emiliano Langella &lt;emiliano.langella@suse.com&gt;" date="1676030400">- Added "Name:" tag.</changelog>
</package>
<package pkgid="3453b7087ae95996c7fc740d4fb060e3fdb1288cb7bb9f8f62818d7736275242" name="postgresql13-timescaledb" arch="aarch64">
  <version epoch="0" ver="2.9.3" rel="bp154.2.3.1"/>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1588680000">- update to 1.7.0
  https://github.com/timescale/timescaledb/releases/tag/1.7.0</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1592395200">- update to version 1.7.1 bugfix
  https://github.com/timescale/timescaledb/releases/tag/1.7.1
  Please note that with the release of 1.7, support for PostgreSQL
  9.6.x and 10.x are deprecated. version 2 will only support 11,12
- Packaging :
  + Activate postgresql12 supported now
  + Modifiy download url to grab a nice named tar.gz</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1601035200">- update to version 1.7.4
  https://github.com/timescale/timescaledb/releases/tag/1.7.2
  https://github.com/timescale/timescaledb/releases/tag/1.7.3
  https://github.com/timescale/timescaledb/releases/tag/1.7.4</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1625054400">- Do not build postgresql96 flavor on Tumbleweed.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273600">- Update to version 2.5.0
  https://github.com/timescale/timescaledb/releases/tag/1.7.5
  https://github.com/timescale/timescaledb/releases/tag/2.0.0
  https://github.com/timescale/timescaledb/releases/tag/2.0.1
  https://github.com/timescale/timescaledb/releases/tag/2.0.2
  https://github.com/timescale/timescaledb/releases/tag/2.1.0
  https://github.com/timescale/timescaledb/releases/tag/2.1.1
  https://github.com/timescale/timescaledb/releases/tag/2.2.0
  https://github.com/timescale/timescaledb/releases/tag/2.2.1
  https://github.com/timescale/timescaledb/releases/tag/2.3.0
  https://github.com/timescale/timescaledb/releases/tag/2.3.1
  https://github.com/timescale/timescaledb/releases/tag/2.4.0
  https://github.com/timescale/timescaledb/releases/tag/2.4.1
  https://github.com/timescale/timescaledb/releases/tag/2.4.2
  https://github.com/timescale/timescaledb/releases/tag/2.5.0
- enable postgresql14
- port to postgresql macros
- refresh clang-format9_support.diff</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273601">- switch to %{pg_name}-server-devel</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1643371200">- Update to version 2.5.1
  https://github.com/timescale/timescaledb/releases/tag/2.5.1</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1644494400">- Update to version 2.5.2
  https://github.com/timescale/timescaledb/releases/tag/2.5.2</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1645617600">- Update to version 2.6.0
  https://github.com/timescale/timescaledb/releases/tag/2.6.0</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1647345600">- Added patch ab6b90caf.patch containing explicit mention of
  CVE-2022-24128 closing boo#1197063</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1649764800">- Update to version 2.6.1
  https://github.com/timescale/timescaledb/releases/tag/2.6.1
- refreshed patches:
  clang-format9_support.diff
  ab6b90caf.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1653393600">- Update to version 2.7.0
  https://github.com/timescale/timescaledb/releases/tag/2.7.0
- drop ab6b90caf.patch: included upstream</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1659268800">- Update to version 2.7.2
  https://github.com/timescale/timescaledb/releases/tag/2.7.1
  https://github.com/timescale/timescaledb/releases/tag/2.7.2</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1661947200">- Update to version 2.8.0
  https://github.com/timescale/timescaledb/releases/tag/2.8.0
- refreshed clang-format9_support.diff</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1665403200">- Update to version 2.8.1
  https://github.com/timescale/timescaledb/releases/tag/2.8.1</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1671537600">- Update to version 2.9.0
  https://github.com/timescale/timescaledb/releases/tag/2.9.0
- dropped clang-format9_support.diff:
  minimum required version is now 14</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1671883200">- Update to version 2.9.1
  https://github.com/timescale/timescaledb/releases/tag/2.9.1</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1674561600">- Update to version 2.9.2
  https://github.com/timescale/timescaledb/releases/tag/2.9.2</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675166400">- enable pg 15 build</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675684800">- Update to version 2.9.3
  https://github.com/timescale/timescaledb/releases/tag/2.9.3</changelog>
</package>
<package pkgid="b320b0842addca5ddb51a1ba779562b92e1e2950e960470b15d2a5d60d0dcd79" name="postgresql13-timescaledb" arch="i586">
  <version epoch="0" ver="2.9.3" rel="bp154.2.3.1"/>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1588680000">- update to 1.7.0
  https://github.com/timescale/timescaledb/releases/tag/1.7.0</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1592395200">- update to version 1.7.1 bugfix
  https://github.com/timescale/timescaledb/releases/tag/1.7.1
  Please note that with the release of 1.7, support for PostgreSQL
  9.6.x and 10.x are deprecated. version 2 will only support 11,12
- Packaging :
  + Activate postgresql12 supported now
  + Modifiy download url to grab a nice named tar.gz</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1601035200">- update to version 1.7.4
  https://github.com/timescale/timescaledb/releases/tag/1.7.2
  https://github.com/timescale/timescaledb/releases/tag/1.7.3
  https://github.com/timescale/timescaledb/releases/tag/1.7.4</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1625054400">- Do not build postgresql96 flavor on Tumbleweed.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273600">- Update to version 2.5.0
  https://github.com/timescale/timescaledb/releases/tag/1.7.5
  https://github.com/timescale/timescaledb/releases/tag/2.0.0
  https://github.com/timescale/timescaledb/releases/tag/2.0.1
  https://github.com/timescale/timescaledb/releases/tag/2.0.2
  https://github.com/timescale/timescaledb/releases/tag/2.1.0
  https://github.com/timescale/timescaledb/releases/tag/2.1.1
  https://github.com/timescale/timescaledb/releases/tag/2.2.0
  https://github.com/timescale/timescaledb/releases/tag/2.2.1
  https://github.com/timescale/timescaledb/releases/tag/2.3.0
  https://github.com/timescale/timescaledb/releases/tag/2.3.1
  https://github.com/timescale/timescaledb/releases/tag/2.4.0
  https://github.com/timescale/timescaledb/releases/tag/2.4.1
  https://github.com/timescale/timescaledb/releases/tag/2.4.2
  https://github.com/timescale/timescaledb/releases/tag/2.5.0
- enable postgresql14
- port to postgresql macros
- refresh clang-format9_support.diff</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273601">- switch to %{pg_name}-server-devel</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1643371200">- Update to version 2.5.1
  https://github.com/timescale/timescaledb/releases/tag/2.5.1</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1644494400">- Update to version 2.5.2
  https://github.com/timescale/timescaledb/releases/tag/2.5.2</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1645617600">- Update to version 2.6.0
  https://github.com/timescale/timescaledb/releases/tag/2.6.0</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1647345600">- Added patch ab6b90caf.patch containing explicit mention of
  CVE-2022-24128 closing boo#1197063</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1649764800">- Update to version 2.6.1
  https://github.com/timescale/timescaledb/releases/tag/2.6.1
- refreshed patches:
  clang-format9_support.diff
  ab6b90caf.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1653393600">- Update to version 2.7.0
  https://github.com/timescale/timescaledb/releases/tag/2.7.0
- drop ab6b90caf.patch: included upstream</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1659268800">- Update to version 2.7.2
  https://github.com/timescale/timescaledb/releases/tag/2.7.1
  https://github.com/timescale/timescaledb/releases/tag/2.7.2</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1661947200">- Update to version 2.8.0
  https://github.com/timescale/timescaledb/releases/tag/2.8.0
- refreshed clang-format9_support.diff</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1665403200">- Update to version 2.8.1
  https://github.com/timescale/timescaledb/releases/tag/2.8.1</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1671537600">- Update to version 2.9.0
  https://github.com/timescale/timescaledb/releases/tag/2.9.0
- dropped clang-format9_support.diff:
  minimum required version is now 14</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1671883200">- Update to version 2.9.1
  https://github.com/timescale/timescaledb/releases/tag/2.9.1</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1674561600">- Update to version 2.9.2
  https://github.com/timescale/timescaledb/releases/tag/2.9.2</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675166400">- enable pg 15 build</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675684800">- Update to version 2.9.3
  https://github.com/timescale/timescaledb/releases/tag/2.9.3</changelog>
</package>
<package pkgid="51523e75075ee70c964650e2faadf4363e498ba9ba5d25205972b994f53cfb92" name="postgresql13-timescaledb" arch="ppc64le">
  <version epoch="0" ver="2.9.3" rel="bp154.2.3.1"/>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1588680000">- update to 1.7.0
  https://github.com/timescale/timescaledb/releases/tag/1.7.0</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1592395200">- update to version 1.7.1 bugfix
  https://github.com/timescale/timescaledb/releases/tag/1.7.1
  Please note that with the release of 1.7, support for PostgreSQL
  9.6.x and 10.x are deprecated. version 2 will only support 11,12
- Packaging :
  + Activate postgresql12 supported now
  + Modifiy download url to grab a nice named tar.gz</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1601035200">- update to version 1.7.4
  https://github.com/timescale/timescaledb/releases/tag/1.7.2
  https://github.com/timescale/timescaledb/releases/tag/1.7.3
  https://github.com/timescale/timescaledb/releases/tag/1.7.4</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1625054400">- Do not build postgresql96 flavor on Tumbleweed.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273600">- Update to version 2.5.0
  https://github.com/timescale/timescaledb/releases/tag/1.7.5
  https://github.com/timescale/timescaledb/releases/tag/2.0.0
  https://github.com/timescale/timescaledb/releases/tag/2.0.1
  https://github.com/timescale/timescaledb/releases/tag/2.0.2
  https://github.com/timescale/timescaledb/releases/tag/2.1.0
  https://github.com/timescale/timescaledb/releases/tag/2.1.1
  https://github.com/timescale/timescaledb/releases/tag/2.2.0
  https://github.com/timescale/timescaledb/releases/tag/2.2.1
  https://github.com/timescale/timescaledb/releases/tag/2.3.0
  https://github.com/timescale/timescaledb/releases/tag/2.3.1
  https://github.com/timescale/timescaledb/releases/tag/2.4.0
  https://github.com/timescale/timescaledb/releases/tag/2.4.1
  https://github.com/timescale/timescaledb/releases/tag/2.4.2
  https://github.com/timescale/timescaledb/releases/tag/2.5.0
- enable postgresql14
- port to postgresql macros
- refresh clang-format9_support.diff</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273601">- switch to %{pg_name}-server-devel</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1643371200">- Update to version 2.5.1
  https://github.com/timescale/timescaledb/releases/tag/2.5.1</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1644494400">- Update to version 2.5.2
  https://github.com/timescale/timescaledb/releases/tag/2.5.2</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1645617600">- Update to version 2.6.0
  https://github.com/timescale/timescaledb/releases/tag/2.6.0</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1647345600">- Added patch ab6b90caf.patch containing explicit mention of
  CVE-2022-24128 closing boo#1197063</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1649764800">- Update to version 2.6.1
  https://github.com/timescale/timescaledb/releases/tag/2.6.1
- refreshed patches:
  clang-format9_support.diff
  ab6b90caf.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1653393600">- Update to version 2.7.0
  https://github.com/timescale/timescaledb/releases/tag/2.7.0
- drop ab6b90caf.patch: included upstream</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1659268800">- Update to version 2.7.2
  https://github.com/timescale/timescaledb/releases/tag/2.7.1
  https://github.com/timescale/timescaledb/releases/tag/2.7.2</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1661947200">- Update to version 2.8.0
  https://github.com/timescale/timescaledb/releases/tag/2.8.0
- refreshed clang-format9_support.diff</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1665403200">- Update to version 2.8.1
  https://github.com/timescale/timescaledb/releases/tag/2.8.1</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1671537600">- Update to version 2.9.0
  https://github.com/timescale/timescaledb/releases/tag/2.9.0
- dropped clang-format9_support.diff:
  minimum required version is now 14</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1671883200">- Update to version 2.9.1
  https://github.com/timescale/timescaledb/releases/tag/2.9.1</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1674561600">- Update to version 2.9.2
  https://github.com/timescale/timescaledb/releases/tag/2.9.2</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675166400">- enable pg 15 build</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675684800">- Update to version 2.9.3
  https://github.com/timescale/timescaledb/releases/tag/2.9.3</changelog>
</package>
<package pkgid="ad6048ea62a58a1f0e8c9629093a422785f9698e3081e958bb73558a77726580" name="postgresql13-timescaledb" arch="s390x">
  <version epoch="0" ver="2.9.3" rel="bp154.2.3.1"/>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1588680000">- update to 1.7.0
  https://github.com/timescale/timescaledb/releases/tag/1.7.0</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1592395200">- update to version 1.7.1 bugfix
  https://github.com/timescale/timescaledb/releases/tag/1.7.1
  Please note that with the release of 1.7, support for PostgreSQL
  9.6.x and 10.x are deprecated. version 2 will only support 11,12
- Packaging :
  + Activate postgresql12 supported now
  + Modifiy download url to grab a nice named tar.gz</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1601035200">- update to version 1.7.4
  https://github.com/timescale/timescaledb/releases/tag/1.7.2
  https://github.com/timescale/timescaledb/releases/tag/1.7.3
  https://github.com/timescale/timescaledb/releases/tag/1.7.4</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1625054400">- Do not build postgresql96 flavor on Tumbleweed.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273600">- Update to version 2.5.0
  https://github.com/timescale/timescaledb/releases/tag/1.7.5
  https://github.com/timescale/timescaledb/releases/tag/2.0.0
  https://github.com/timescale/timescaledb/releases/tag/2.0.1
  https://github.com/timescale/timescaledb/releases/tag/2.0.2
  https://github.com/timescale/timescaledb/releases/tag/2.1.0
  https://github.com/timescale/timescaledb/releases/tag/2.1.1
  https://github.com/timescale/timescaledb/releases/tag/2.2.0
  https://github.com/timescale/timescaledb/releases/tag/2.2.1
  https://github.com/timescale/timescaledb/releases/tag/2.3.0
  https://github.com/timescale/timescaledb/releases/tag/2.3.1
  https://github.com/timescale/timescaledb/releases/tag/2.4.0
  https://github.com/timescale/timescaledb/releases/tag/2.4.1
  https://github.com/timescale/timescaledb/releases/tag/2.4.2
  https://github.com/timescale/timescaledb/releases/tag/2.5.0
- enable postgresql14
- port to postgresql macros
- refresh clang-format9_support.diff</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273601">- switch to %{pg_name}-server-devel</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1643371200">- Update to version 2.5.1
  https://github.com/timescale/timescaledb/releases/tag/2.5.1</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1644494400">- Update to version 2.5.2
  https://github.com/timescale/timescaledb/releases/tag/2.5.2</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1645617600">- Update to version 2.6.0
  https://github.com/timescale/timescaledb/releases/tag/2.6.0</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1647345600">- Added patch ab6b90caf.patch containing explicit mention of
  CVE-2022-24128 closing boo#1197063</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1649764800">- Update to version 2.6.1
  https://github.com/timescale/timescaledb/releases/tag/2.6.1
- refreshed patches:
  clang-format9_support.diff
  ab6b90caf.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1653393600">- Update to version 2.7.0
  https://github.com/timescale/timescaledb/releases/tag/2.7.0
- drop ab6b90caf.patch: included upstream</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1659268800">- Update to version 2.7.2
  https://github.com/timescale/timescaledb/releases/tag/2.7.1
  https://github.com/timescale/timescaledb/releases/tag/2.7.2</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1661947200">- Update to version 2.8.0
  https://github.com/timescale/timescaledb/releases/tag/2.8.0
- refreshed clang-format9_support.diff</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1665403200">- Update to version 2.8.1
  https://github.com/timescale/timescaledb/releases/tag/2.8.1</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1671537600">- Update to version 2.9.0
  https://github.com/timescale/timescaledb/releases/tag/2.9.0
- dropped clang-format9_support.diff:
  minimum required version is now 14</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1671883200">- Update to version 2.9.1
  https://github.com/timescale/timescaledb/releases/tag/2.9.1</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1674561600">- Update to version 2.9.2
  https://github.com/timescale/timescaledb/releases/tag/2.9.2</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675166400">- enable pg 15 build</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675684800">- Update to version 2.9.3
  https://github.com/timescale/timescaledb/releases/tag/2.9.3</changelog>
</package>
<package pkgid="bb1b56f551733b2da6f07c58f0aa9772a7b780c42eba34c527afc97a1f89c260" name="postgresql13-timescaledb" arch="src">
  <version epoch="0" ver="2.9.3" rel="bp154.2.3.1"/>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1588680000">- update to 1.7.0
  https://github.com/timescale/timescaledb/releases/tag/1.7.0</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1592395200">- update to version 1.7.1 bugfix
  https://github.com/timescale/timescaledb/releases/tag/1.7.1
  Please note that with the release of 1.7, support for PostgreSQL
  9.6.x and 10.x are deprecated. version 2 will only support 11,12
- Packaging :
  + Activate postgresql12 supported now
  + Modifiy download url to grab a nice named tar.gz</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1601035200">- update to version 1.7.4
  https://github.com/timescale/timescaledb/releases/tag/1.7.2
  https://github.com/timescale/timescaledb/releases/tag/1.7.3
  https://github.com/timescale/timescaledb/releases/tag/1.7.4</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1625054400">- Do not build postgresql96 flavor on Tumbleweed.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273600">- Update to version 2.5.0
  https://github.com/timescale/timescaledb/releases/tag/1.7.5
  https://github.com/timescale/timescaledb/releases/tag/2.0.0
  https://github.com/timescale/timescaledb/releases/tag/2.0.1
  https://github.com/timescale/timescaledb/releases/tag/2.0.2
  https://github.com/timescale/timescaledb/releases/tag/2.1.0
  https://github.com/timescale/timescaledb/releases/tag/2.1.1
  https://github.com/timescale/timescaledb/releases/tag/2.2.0
  https://github.com/timescale/timescaledb/releases/tag/2.2.1
  https://github.com/timescale/timescaledb/releases/tag/2.3.0
  https://github.com/timescale/timescaledb/releases/tag/2.3.1
  https://github.com/timescale/timescaledb/releases/tag/2.4.0
  https://github.com/timescale/timescaledb/releases/tag/2.4.1
  https://github.com/timescale/timescaledb/releases/tag/2.4.2
  https://github.com/timescale/timescaledb/releases/tag/2.5.0
- enable postgresql14
- port to postgresql macros
- refresh clang-format9_support.diff</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273601">- switch to %{pg_name}-server-devel</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1643371200">- Update to version 2.5.1
  https://github.com/timescale/timescaledb/releases/tag/2.5.1</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1644494400">- Update to version 2.5.2
  https://github.com/timescale/timescaledb/releases/tag/2.5.2</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1645617600">- Update to version 2.6.0
  https://github.com/timescale/timescaledb/releases/tag/2.6.0</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1647345600">- Added patch ab6b90caf.patch containing explicit mention of
  CVE-2022-24128 closing boo#1197063</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1649764800">- Update to version 2.6.1
  https://github.com/timescale/timescaledb/releases/tag/2.6.1
- refreshed patches:
  clang-format9_support.diff
  ab6b90caf.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1653393600">- Update to version 2.7.0
  https://github.com/timescale/timescaledb/releases/tag/2.7.0
- drop ab6b90caf.patch: included upstream</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1659268800">- Update to version 2.7.2
  https://github.com/timescale/timescaledb/releases/tag/2.7.1
  https://github.com/timescale/timescaledb/releases/tag/2.7.2</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1661947200">- Update to version 2.8.0
  https://github.com/timescale/timescaledb/releases/tag/2.8.0
- refreshed clang-format9_support.diff</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1665403200">- Update to version 2.8.1
  https://github.com/timescale/timescaledb/releases/tag/2.8.1</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1671537600">- Update to version 2.9.0
  https://github.com/timescale/timescaledb/releases/tag/2.9.0
- dropped clang-format9_support.diff:
  minimum required version is now 14</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1671883200">- Update to version 2.9.1
  https://github.com/timescale/timescaledb/releases/tag/2.9.1</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1674561600">- Update to version 2.9.2
  https://github.com/timescale/timescaledb/releases/tag/2.9.2</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675166400">- enable pg 15 build</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675684800">- Update to version 2.9.3
  https://github.com/timescale/timescaledb/releases/tag/2.9.3</changelog>
</package>
<package pkgid="2d0d1249f16443bc759c568a11c1b18fb7f0341366e857fb0b925a381fbd6512" name="postgresql13-timescaledb" arch="x86_64">
  <version epoch="0" ver="2.9.3" rel="bp154.2.3.1"/>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1588680000">- update to 1.7.0
  https://github.com/timescale/timescaledb/releases/tag/1.7.0</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1592395200">- update to version 1.7.1 bugfix
  https://github.com/timescale/timescaledb/releases/tag/1.7.1
  Please note that with the release of 1.7, support for PostgreSQL
  9.6.x and 10.x are deprecated. version 2 will only support 11,12
- Packaging :
  + Activate postgresql12 supported now
  + Modifiy download url to grab a nice named tar.gz</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1601035200">- update to version 1.7.4
  https://github.com/timescale/timescaledb/releases/tag/1.7.2
  https://github.com/timescale/timescaledb/releases/tag/1.7.3
  https://github.com/timescale/timescaledb/releases/tag/1.7.4</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1625054400">- Do not build postgresql96 flavor on Tumbleweed.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273600">- Update to version 2.5.0
  https://github.com/timescale/timescaledb/releases/tag/1.7.5
  https://github.com/timescale/timescaledb/releases/tag/2.0.0
  https://github.com/timescale/timescaledb/releases/tag/2.0.1
  https://github.com/timescale/timescaledb/releases/tag/2.0.2
  https://github.com/timescale/timescaledb/releases/tag/2.1.0
  https://github.com/timescale/timescaledb/releases/tag/2.1.1
  https://github.com/timescale/timescaledb/releases/tag/2.2.0
  https://github.com/timescale/timescaledb/releases/tag/2.2.1
  https://github.com/timescale/timescaledb/releases/tag/2.3.0
  https://github.com/timescale/timescaledb/releases/tag/2.3.1
  https://github.com/timescale/timescaledb/releases/tag/2.4.0
  https://github.com/timescale/timescaledb/releases/tag/2.4.1
  https://github.com/timescale/timescaledb/releases/tag/2.4.2
  https://github.com/timescale/timescaledb/releases/tag/2.5.0
- enable postgresql14
- port to postgresql macros
- refresh clang-format9_support.diff</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273601">- switch to %{pg_name}-server-devel</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1643371200">- Update to version 2.5.1
  https://github.com/timescale/timescaledb/releases/tag/2.5.1</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1644494400">- Update to version 2.5.2
  https://github.com/timescale/timescaledb/releases/tag/2.5.2</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1645617600">- Update to version 2.6.0
  https://github.com/timescale/timescaledb/releases/tag/2.6.0</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1647345600">- Added patch ab6b90caf.patch containing explicit mention of
  CVE-2022-24128 closing boo#1197063</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1649764800">- Update to version 2.6.1
  https://github.com/timescale/timescaledb/releases/tag/2.6.1
- refreshed patches:
  clang-format9_support.diff
  ab6b90caf.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1653393600">- Update to version 2.7.0
  https://github.com/timescale/timescaledb/releases/tag/2.7.0
- drop ab6b90caf.patch: included upstream</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1659268800">- Update to version 2.7.2
  https://github.com/timescale/timescaledb/releases/tag/2.7.1
  https://github.com/timescale/timescaledb/releases/tag/2.7.2</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1661947200">- Update to version 2.8.0
  https://github.com/timescale/timescaledb/releases/tag/2.8.0
- refreshed clang-format9_support.diff</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1665403200">- Update to version 2.8.1
  https://github.com/timescale/timescaledb/releases/tag/2.8.1</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1671537600">- Update to version 2.9.0
  https://github.com/timescale/timescaledb/releases/tag/2.9.0
- dropped clang-format9_support.diff:
  minimum required version is now 14</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1671883200">- Update to version 2.9.1
  https://github.com/timescale/timescaledb/releases/tag/2.9.1</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1674561600">- Update to version 2.9.2
  https://github.com/timescale/timescaledb/releases/tag/2.9.2</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675166400">- enable pg 15 build</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675684800">- Update to version 2.9.3
  https://github.com/timescale/timescaledb/releases/tag/2.9.3</changelog>
</package>
<package pkgid="59382a1b1e02881daf010747f0f0adcf91e15f5f5581780c197fc091cc3a0161" name="postgresql14-orafce" arch="aarch64">
  <version epoch="0" ver="4.1.1+git0.519b5b5" rel="bp154.3.1"/>
  <changelog author="mrueckert@suse.de" date="1424347200">- update to 3.0.9
  * PostgreSQL 9.4 compilation
  * new datatype and related functions: oracle.date
  * new varchar2, nvarchar2 types and related functions
    (Amit Langote)
  * oracle.substr emulate better Oracle substr function behave
    (Vinayak Pokale)
  * fix few internal issues that breaks a PGXN tests (Pavel Stehule)</changelog>
  <changelog author="mrueckert@suse.de" date="1502366400">- switch to multibuild</changelog>
  <changelog author="mrueckert@suse.de" date="1502366401">- update to 3.4.0
  * new aggregate function wm_concat
  * PostgreSQL 9.6, 10 are supported well
  * remove support for 8.3, 8.4, 9.0, 9.1 (only 9.2 and higher
    are supported)
  * new functions: sysdate, sessiontimezone, dbtimezone
  * remove support for 8.2
  * add support for 9.5
  * change the releasion number system
  * new functions: to_single_byte, to_multi_byte, nanvl, length,
    ltrim, btrim, rtrim, lpad, rpad
  * fix compilation issue in new code for Pg &lt;= 9.1</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1540468800">- Add build for PostgreSQL 11 and drop 9.3.
- BuildRequire server-devel instead of devel.</changelog>
  <changelog author="mrueckert@suse.de" date="1540641600">- Update to version 3.6.1+git24.cf58d28:
  * remove strict flag for nvl functions
  * minor cleaning
  * remove pre 9.4 support
  * fixes for 12
  * fix compile on PostgreSQL 12
  * missing reset fsec in ora_timestamptz_round function
  * #74 - badly joined comment
  * #75 set correct type for trunc and round two params functions - float4
  * allow usage of schema oracle and plunit
  * copy paste correction intarray -&gt; orafce
  * fix broken compilation on non MSC platforms
  * fix output path
  * add postgresql 10.3 target support need ICU header by path c:\icu
  * fix conversion from 'size_t' to 'int'
  * add 9.6 build environments fix C89 compatible compliance
  * fix nensenses related yyllex, using older form of bison option
  * new function  oracle.numtodsinterval
  * disallow functions from utl_file package on MS Windows
  * clean headers used by msvc
  * cleaning complete build on msvc
  * add missing files for windows compilation
  * fix #64
  * dba_segments view, cleaning
  * Fix formatting of examples.
  * Append documentation about how to translate REGEXP_SUBSTR Oracle function to PostgreSQL.
  * fix the position of a half-width space added by rpad().
  * enhancing emulation of Oracle views
  * fix some segfaults reported by Andreas Seltenreich #59
  * new few Oracle system views
  * prepare for 3.6
  * Minor bug in doc
  * Avoid setting unused variable value
  * Fix issue #54 - missing collatable flag for string types varchar2, nvarchar2.
  * Ensure LWLockRegisterTranche call in every session before LWLockAcquire call.
  * Preparation for 3.5 release.
  * add missing V1 signatures
  * Add Orafce Documentation and Oracle to PostgreSQL Migration Guide
- drop patch orafce-orafce_sql_yyparse-bison26.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1571745600">- adding postgresql12 to _multibuild</changelog>
  <changelog author="mrueckert@suse.de" date="1571745601">- Update to version 3.8.0+git4.a65cfb8:
  * return back missing files
  * fresh parser files
  * master is now unreleased 3.9
  * minor enhancing user_constraints view - use conrelid::regclass instead table_name. This will be  consistent with index name, and show schema for tables that are not on search_path
  * prepare for 3.8
  * qualify decode function to be installable on greenplum
  * fix PostgreSQL 12 support
  * missing files
  * typo
  * fix compilation and regress tests for PostgreSQL 11
  * Revert "Merge pull request #83 from kato-sho/fix-build-for-PG12"
  * Fix build for PostgreSQL 12
  * remove extra #include utils/nabstime.h
  * update against change format of FunctionCallInfo in PostgreSQL 12
  * fix compilation for pre PostgreSQL 12
  * fix compile for PostgreSQL 12
  * prepare for 3.7.2
  * bug fix release
  * fix bad filter in oracle.user_tables view
  * update NEWS
  * use older syntax for create operator command
  * add warning about possible compatibility issue
  * fix docs
  * null safe pipe operator for (n)varchar2 should be explicitly enabled (due compatibility)
  * bugfix should to use OR REPLACE clause
  * add bugfixes to update script
  * fix readme
  * more faster (n)varchar2 null safe concat
  * null safe concat operator for varchar2 and nvarchar2
  * fix compilation for PostgreSQL 12
  * target type should be qualified
  * broken formula for add_month
  * fix broken oracle.add_months for last day in month
  * fix comment assigned to wrong object
  * minor doc nvl</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273600">- remove dead PG versions</changelog>
  <changelog author="mrueckert@suse.de" date="1638273601">- Update to version 3.17.0+git12.e9ab8a3:
  * Fix some typos in plunit.c and plvdate.c.
  * Fix a non-standard function declaration.
  * pg_nextpower2_32 is available for pg13+|
  * fix typo in plvdate.c
  * fix typo in alert.c
  * Improve the place that double the size of a buffer
  * Fix access privileges of utl_file.tmpdir()
  * prepare for 3.17.0
  * This patch reproduce the same behavior of the regexp_* function with null input.
  * Fix version number in install script.
  * Remove duplicate variable declarations
  * Allow even longer runtimes in DBMS_UTILITY.GET_TIME test
  * prepare for 3.16.2
  * fix build for msvc
  * prepare for 3.16.1
  * sql/dbms_utility.sql: Allow longer test runtime
  * fix some shared memory leaks, reduce an possibility to raise an error 'lock requested error' by cleaning locks (these locks are not Postgres's locks) in dbms_alert_removeall and by triggering cleaning shared memory from locks related to closed processes when there are not free locks - per #PR 140 reported by @rbapin
  * prepare for 3.16.0
  * rename pipe type to orafce_pipe due conflict with pipe function from unistd.h
  * ensure public access to public schema
  * add missing sql file for 3.16
  * Add DBMS_UTILITY.GET_TIME function, it returns the current time in 100th's of a second from a point in time in the past. This function is used for determining elapsed time. This function is widely used in some Oracle installation for timing of functions or statements.
  * fix warning on MSVC
  * prepare for 3.15.1
  * Remove reference to pg_enc2name_tbl variable. It is not available on MSVC, and for this functionality it is not necessary
  * prepare for 3.15.0
  * function regexp_match cannot be used because it is available from Postgres 10
  * Add Oracle regexp_replace() function which supports start position and occurrence. It correspond to the Oracle behavior and consist in plpgsql functions based on PG regexp_matches() and regexp_replace(). All details of the implementation is explained in the documentation. Also include in this patch also include regression tests for regexp_replace() including the Oracle queries and results in comment.
  * just reformatting
  * just reformatting
  * Remove wrong and unused code.
  * Apply orafce rule for assignment on remaining call to position() and length.
  * Use better style for assignment instead of pseudo query.
  * - Improve performances by replacing SELECT ... INTO syntax with := - Replace call to regexp_match() by regexp_matches() to support   PostgreSQL 9.5 and 9.6. - Remove obsolete orafce--3.14.sql file - Update regression test to disable CONTEXT trace.
  * Add Oracle regexp_like(), regexp_count(), regexp_instr() and regexp_substr() functions. They correspond to the Oracle behavior and consist in plpgsql functions based on PG regexp_matches(). All details of the implementation is explained in the documentation. This patch also include a regression test regexp_func.sql including the Oracle queries and results in comment.
  * more ilustrative description of msvc project properties
  * Oracle.sysdate uses time zone stored in GUC orafce.timezone. The setting of configuration value was correct - the global variable orafce_timezone has correct content (it can be checked by SELECT oracle.dbtimezone(). But direct output of this GUC (show orafce.timezone) was broken because the handler of system timezone was used and the statement "show orafce.timezone" did same output like "show timezone", and it is surely wrong.
  * pre 3.14 changes
  * When nvarchar2 and varchar2 was introduced, then was not possibility to correctly set protransform column. Orafce used UPDATE of pg_proc table. Unfortunatelly, this new dependency was not coverget by entry in pg_depend. Today this issue breaks binary upgrade. Fix is simple - on new Postgres it uses ALTER FUNCTION SUPPORT, for older releases it tries to fix pg_depend table.
  * implementation of unistr function
  * Added ppc64le architecture
  * Added some transactions behavior differences
  * Catch dbms_random.string() output variation on big-endian
  * Fix the wrong filter in oracle.user_tables view in orafce--3.6--3.7.sql.
  * Update README.asciidoc
  * Update others.c
  * Use correct macros to convert between Datums and pointers.
  * note in readme
  * prepare for 3.13.4
  * forgotten files
  * prepare for 3.13.3
  * enable utf_file on MSWin
  * cleaning build on MSWin
  * reduce stack size
  * minor cleaning
  * prepare for 3.12
  * fix warning for postgres 13
  * fix asciidoc format
  * minor README fix
  * travis status
  * PostgreSQL 9.4 is not supported
  * example to trigger func
  * fix build and tests for older releases
  * trigger functions - ensure so only null or only empty string is used
  * fix: 'if' condition is always true
  * prepare for 3.11.1
  * missing test output file
  * only PostgreSQL 9.4 and higher are supported
  * Run the testsuite on travis-ci.org
  * clean warnings detected by -Wextra
  * forgot. GRANT
  * The previous securing of utl_file package required SECURITY DEFINER flags on functions. Using this flag is security risk. Insted using SECURITY DEFINER we allow READ from utl_file.utl_file_dir to PUBLIC. This design has one advantage - the final user can control usage of these function with granting user rights just only on table utl_file.utl_file_dir.
  * Update README.asciidoc
  * Update README.asciidoc
  * Update README.asciidoc
  * Update README.asciidoc
  * fix long standing bug - function with access to utl_file_dir should to has security definer flag
  * fix compilation against Postgres 13
  * small fixes and rewrite of utl_file paragraph
  * the safe dictionary in utl_file package can be identified by name too
  * Fix doc and comment about months_between returning numeric (not float8).
  * there are some differences between Oracle and Orafce
  * fix compilation on PostgreSQL 13 (by removing useless include), fix to_multi_byte('\')
  * prepare for 3.9.0
  * remove extra clean to allow repeateable build without bison
  * Orafce is licenced under 0-clause BSD licence
  * polishing licence
  * use postgres routines for printing float4, float8 values in to_char function (reduce garbage and trailing zeroes)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273602">- enable pg 13 and 14</changelog>
  <changelog author="mrueckert@suse.de" date="1675166400">- Update to version 4.1.1+git0.519b5b5:
  * prepare for 4.1.1
  * build on master (16) branch
  * use adv lock to synchronize start of pipe and alert tests
  * add connect by level &lt; num in migration docs
  * Hierarchical Query identifys the leaves
  * Update the connect_by_root example, for better semantics
  * fix: CONNECT_BY_ROOT in hierarchical query is converted to WITH RECURSIVE syntax
  * the table [200~utl_file.utl_file_dir is dumpable
  * fix compilation against pg master
  * prepare for 4.0.2
  * fix -wextra warnings
  * fix shadowed variable varning
  * fix msvc build for PostgreSQL 14
  * fix build for pg16
  * fix META file and prepare for 4.0.1
  * to_multi_byte and to_single_byte support euc_cn(gb2312)
  * add  oracle sql migration : CONNECT_BY_ROOT
  * fix oracle connect by
  * prepare for 4.0.0 release
  * remove obsolete ref on orafce_sql
  * rename shadow variable
  * initial merge of dbms_sql from orafce_sql
  * other cleaning after removing support for unsupported pg releases
  * increase version
  * remove support for PostgreSQL 10 and older
  * Fix database creation during installchecks for ICU cluster
  * fix dbms_output.serveroutput(true) clear the buffer.It conforms to the features of oracle.
  * prepare for 3.25.1
  * fix calculation of plvstr.is_prefix for negative numeric values - see issue #198
  * fix for pre 14 releases
  * doc and regress tests
  * remove useless func decl
  * support for older releases
  * initial implementation
  * initial
  * fix build against master (16) branch
  * wrap possible unsupported DDL to dynamic SQL
  * specify schema inside definition function tanh
  * only set editorconfig
  * prepare for 3.24.4
  * remove redundant ALTER FUNCTION #191
  * prepare for 3.24.3
  * PostgreSQL older than 12 doesn't allow ALTER FUNCTION pg_catalog.x SET SCHEMA oracle. Only dirty way by direct modification of system catalogue is possible. see issue #190
  * prepare for 3.24.2
  * fix missing oracle.mod functions in update scripts
  * prepare for 3.24.1
  * fix regress nlssort test for PostgreSQL 9.5 without \if command
  * Fix race condition during initialization in ora_lock_shmem.
  * nlssort: Add a missing call to PG_RE_THROW.
  * Limit nlssort test to Linux/glibc systems with en_US.utf8 installed.
  * NEWS
  * set storage for varchar2 and nvarchar2 to extended strategy
  * prepare for 3.23
  * fix broken calculation in plvdate_isleapyear function #184
  * fix support for pg9.5, fix regress tests for older releases
  * prepare for 3.22.1
  * Fix read past the end of string in to_sigle_byte().
  * Fix dbms_utility.get_time() to use the full range of int32.
  * fix readme
  * prepare for 3.22.0
  * move dbobjects from public and pg_catalog schemas to oracle schema
  * moving objects from public and pg_catalog to oracle schema
  * move RequestAddinShmemSpace to shmem_request_hook for PostgreSQL 15
  * Update sql_migration06.md
  * Restore sqlparse.c and sqlparse.h
  * Undo comment
  * Add comment
  * Add Parallel safe to mod function
  * Bug fix
  * Add mod function for Oracle compatibility
  * Fix typos and spelling in docs and error messages
  * prepare for 3.21.1
  * fix mswin build - regexp functions was not really marked as dllexport due missing include of builtins.h
  * remove empty line
  * fix of some compatibility issues
  * REG_NOSUB is working only on PostgreSQL 15
  * workable release for PostgreSQL 15
  * modification for compotibility with orafce.regexp_instr
  * backport regexp_instr from PostgreSQL 15, use C version instead PLpgSQL for better possibilities of usage regexp API
  * prepare for 3.20.0
  * Fix regexp_instr() function with occurrence when the same value matching a pattern is found at several place in the string.
  * signature of nvl2 function is enhanced to "any", anyelement, anyelement. After this change, the behavior is more close to Oracle. Unfortunatelly - this change can break extension update for some customers that uses nvl2 in views.
  * support negative start argument for function substrb. Originally orafce used buildin bytea substr function. Now it recalculate start argument. see issue #172
  * prepare for 3.19
  * Allow empty string on input of functions to_number and to_date. In this case returns NULL.
  * remove white spaces
  * replace obsolete CSTRING macro by text_to_csring function
  * prepare for 3.18.1
  * fix - badly handled fn_extra in oracle.greatest(least) function
  * prepare for 3.18.0
  * Update README.asciidoc
  * Update README.asciidoc
  * use older API for iteration over an array. Now, oracle.greatest and oracle.least are working on all supported releases
  * remove negative tests related to orafce.greatest because: a) error message is different on supported pg versions, b) the coverage and benefit of these tests is low
  * remove two lines from regress tests of greatest due dependency on used collate
  * Add documentation for greatest and least functions.
  * Update upgrade extension file with the smallint addition.
  * Add greatest/least SQL redefinition for smallint Add regression tests fot the two functions.
  * Oracle functions LEAST and GREATEST return NULL if at least one of the parameters is NULL. This is not the case for the PostgreSQL equivalent functions which only return NULL when all the parameters are NULL. This patch creates the two functions in the oracle schema to have the same behavior than in Oracle.
  * Minor grammatical fix to README.asciidoc
  * fix typo in charpad.c
  * fix typo in orafce--3.17.sql
  * Update Orafce_Documentation_05.md
  * Catch dbms_random.string() output variation on Windows</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675166401">- enable pg 15</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675166402">- remove pg 10 support</changelog>
  <changelog author="Emiliano Langella &lt;emiliano.langella@suse.com&gt;" date="1676030400">- Added "Name:" tag.</changelog>
</package>
<package pkgid="ea57cf490a6c3754cd9163fcfe624ad5d093f224bb16b565cc7f5fdf839c7189" name="postgresql14-orafce" arch="i586">
  <version epoch="0" ver="4.1.1+git0.519b5b5" rel="bp154.3.1"/>
  <changelog author="mrueckert@suse.de" date="1424347200">- update to 3.0.9
  * PostgreSQL 9.4 compilation
  * new datatype and related functions: oracle.date
  * new varchar2, nvarchar2 types and related functions
    (Amit Langote)
  * oracle.substr emulate better Oracle substr function behave
    (Vinayak Pokale)
  * fix few internal issues that breaks a PGXN tests (Pavel Stehule)</changelog>
  <changelog author="mrueckert@suse.de" date="1502366400">- switch to multibuild</changelog>
  <changelog author="mrueckert@suse.de" date="1502366401">- update to 3.4.0
  * new aggregate function wm_concat
  * PostgreSQL 9.6, 10 are supported well
  * remove support for 8.3, 8.4, 9.0, 9.1 (only 9.2 and higher
    are supported)
  * new functions: sysdate, sessiontimezone, dbtimezone
  * remove support for 8.2
  * add support for 9.5
  * change the releasion number system
  * new functions: to_single_byte, to_multi_byte, nanvl, length,
    ltrim, btrim, rtrim, lpad, rpad
  * fix compilation issue in new code for Pg &lt;= 9.1</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1540468800">- Add build for PostgreSQL 11 and drop 9.3.
- BuildRequire server-devel instead of devel.</changelog>
  <changelog author="mrueckert@suse.de" date="1540641600">- Update to version 3.6.1+git24.cf58d28:
  * remove strict flag for nvl functions
  * minor cleaning
  * remove pre 9.4 support
  * fixes for 12
  * fix compile on PostgreSQL 12
  * missing reset fsec in ora_timestamptz_round function
  * #74 - badly joined comment
  * #75 set correct type for trunc and round two params functions - float4
  * allow usage of schema oracle and plunit
  * copy paste correction intarray -&gt; orafce
  * fix broken compilation on non MSC platforms
  * fix output path
  * add postgresql 10.3 target support need ICU header by path c:\icu
  * fix conversion from 'size_t' to 'int'
  * add 9.6 build environments fix C89 compatible compliance
  * fix nensenses related yyllex, using older form of bison option
  * new function  oracle.numtodsinterval
  * disallow functions from utl_file package on MS Windows
  * clean headers used by msvc
  * cleaning complete build on msvc
  * add missing files for windows compilation
  * fix #64
  * dba_segments view, cleaning
  * Fix formatting of examples.
  * Append documentation about how to translate REGEXP_SUBSTR Oracle function to PostgreSQL.
  * fix the position of a half-width space added by rpad().
  * enhancing emulation of Oracle views
  * fix some segfaults reported by Andreas Seltenreich #59
  * new few Oracle system views
  * prepare for 3.6
  * Minor bug in doc
  * Avoid setting unused variable value
  * Fix issue #54 - missing collatable flag for string types varchar2, nvarchar2.
  * Ensure LWLockRegisterTranche call in every session before LWLockAcquire call.
  * Preparation for 3.5 release.
  * add missing V1 signatures
  * Add Orafce Documentation and Oracle to PostgreSQL Migration Guide
- drop patch orafce-orafce_sql_yyparse-bison26.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1571745600">- adding postgresql12 to _multibuild</changelog>
  <changelog author="mrueckert@suse.de" date="1571745601">- Update to version 3.8.0+git4.a65cfb8:
  * return back missing files
  * fresh parser files
  * master is now unreleased 3.9
  * minor enhancing user_constraints view - use conrelid::regclass instead table_name. This will be  consistent with index name, and show schema for tables that are not on search_path
  * prepare for 3.8
  * qualify decode function to be installable on greenplum
  * fix PostgreSQL 12 support
  * missing files
  * typo
  * fix compilation and regress tests for PostgreSQL 11
  * Revert "Merge pull request #83 from kato-sho/fix-build-for-PG12"
  * Fix build for PostgreSQL 12
  * remove extra #include utils/nabstime.h
  * update against change format of FunctionCallInfo in PostgreSQL 12
  * fix compilation for pre PostgreSQL 12
  * fix compile for PostgreSQL 12
  * prepare for 3.7.2
  * bug fix release
  * fix bad filter in oracle.user_tables view
  * update NEWS
  * use older syntax for create operator command
  * add warning about possible compatibility issue
  * fix docs
  * null safe pipe operator for (n)varchar2 should be explicitly enabled (due compatibility)
  * bugfix should to use OR REPLACE clause
  * add bugfixes to update script
  * fix readme
  * more faster (n)varchar2 null safe concat
  * null safe concat operator for varchar2 and nvarchar2
  * fix compilation for PostgreSQL 12
  * target type should be qualified
  * broken formula for add_month
  * fix broken oracle.add_months for last day in month
  * fix comment assigned to wrong object
  * minor doc nvl</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273600">- remove dead PG versions</changelog>
  <changelog author="mrueckert@suse.de" date="1638273601">- Update to version 3.17.0+git12.e9ab8a3:
  * Fix some typos in plunit.c and plvdate.c.
  * Fix a non-standard function declaration.
  * pg_nextpower2_32 is available for pg13+|
  * fix typo in plvdate.c
  * fix typo in alert.c
  * Improve the place that double the size of a buffer
  * Fix access privileges of utl_file.tmpdir()
  * prepare for 3.17.0
  * This patch reproduce the same behavior of the regexp_* function with null input.
  * Fix version number in install script.
  * Remove duplicate variable declarations
  * Allow even longer runtimes in DBMS_UTILITY.GET_TIME test
  * prepare for 3.16.2
  * fix build for msvc
  * prepare for 3.16.1
  * sql/dbms_utility.sql: Allow longer test runtime
  * fix some shared memory leaks, reduce an possibility to raise an error 'lock requested error' by cleaning locks (these locks are not Postgres's locks) in dbms_alert_removeall and by triggering cleaning shared memory from locks related to closed processes when there are not free locks - per #PR 140 reported by @rbapin
  * prepare for 3.16.0
  * rename pipe type to orafce_pipe due conflict with pipe function from unistd.h
  * ensure public access to public schema
  * add missing sql file for 3.16
  * Add DBMS_UTILITY.GET_TIME function, it returns the current time in 100th's of a second from a point in time in the past. This function is used for determining elapsed time. This function is widely used in some Oracle installation for timing of functions or statements.
  * fix warning on MSVC
  * prepare for 3.15.1
  * Remove reference to pg_enc2name_tbl variable. It is not available on MSVC, and for this functionality it is not necessary
  * prepare for 3.15.0
  * function regexp_match cannot be used because it is available from Postgres 10
  * Add Oracle regexp_replace() function which supports start position and occurrence. It correspond to the Oracle behavior and consist in plpgsql functions based on PG regexp_matches() and regexp_replace(). All details of the implementation is explained in the documentation. Also include in this patch also include regression tests for regexp_replace() including the Oracle queries and results in comment.
  * just reformatting
  * just reformatting
  * Remove wrong and unused code.
  * Apply orafce rule for assignment on remaining call to position() and length.
  * Use better style for assignment instead of pseudo query.
  * - Improve performances by replacing SELECT ... INTO syntax with := - Replace call to regexp_match() by regexp_matches() to support   PostgreSQL 9.5 and 9.6. - Remove obsolete orafce--3.14.sql file - Update regression test to disable CONTEXT trace.
  * Add Oracle regexp_like(), regexp_count(), regexp_instr() and regexp_substr() functions. They correspond to the Oracle behavior and consist in plpgsql functions based on PG regexp_matches(). All details of the implementation is explained in the documentation. This patch also include a regression test regexp_func.sql including the Oracle queries and results in comment.
  * more ilustrative description of msvc project properties
  * Oracle.sysdate uses time zone stored in GUC orafce.timezone. The setting of configuration value was correct - the global variable orafce_timezone has correct content (it can be checked by SELECT oracle.dbtimezone(). But direct output of this GUC (show orafce.timezone) was broken because the handler of system timezone was used and the statement "show orafce.timezone" did same output like "show timezone", and it is surely wrong.
  * pre 3.14 changes
  * When nvarchar2 and varchar2 was introduced, then was not possibility to correctly set protransform column. Orafce used UPDATE of pg_proc table. Unfortunatelly, this new dependency was not coverget by entry in pg_depend. Today this issue breaks binary upgrade. Fix is simple - on new Postgres it uses ALTER FUNCTION SUPPORT, for older releases it tries to fix pg_depend table.
  * implementation of unistr function
  * Added ppc64le architecture
  * Added some transactions behavior differences
  * Catch dbms_random.string() output variation on big-endian
  * Fix the wrong filter in oracle.user_tables view in orafce--3.6--3.7.sql.
  * Update README.asciidoc
  * Update others.c
  * Use correct macros to convert between Datums and pointers.
  * note in readme
  * prepare for 3.13.4
  * forgotten files
  * prepare for 3.13.3
  * enable utf_file on MSWin
  * cleaning build on MSWin
  * reduce stack size
  * minor cleaning
  * prepare for 3.12
  * fix warning for postgres 13
  * fix asciidoc format
  * minor README fix
  * travis status
  * PostgreSQL 9.4 is not supported
  * example to trigger func
  * fix build and tests for older releases
  * trigger functions - ensure so only null or only empty string is used
  * fix: 'if' condition is always true
  * prepare for 3.11.1
  * missing test output file
  * only PostgreSQL 9.4 and higher are supported
  * Run the testsuite on travis-ci.org
  * clean warnings detected by -Wextra
  * forgot. GRANT
  * The previous securing of utl_file package required SECURITY DEFINER flags on functions. Using this flag is security risk. Insted using SECURITY DEFINER we allow READ from utl_file.utl_file_dir to PUBLIC. This design has one advantage - the final user can control usage of these function with granting user rights just only on table utl_file.utl_file_dir.
  * Update README.asciidoc
  * Update README.asciidoc
  * Update README.asciidoc
  * Update README.asciidoc
  * fix long standing bug - function with access to utl_file_dir should to has security definer flag
  * fix compilation against Postgres 13
  * small fixes and rewrite of utl_file paragraph
  * the safe dictionary in utl_file package can be identified by name too
  * Fix doc and comment about months_between returning numeric (not float8).
  * there are some differences between Oracle and Orafce
  * fix compilation on PostgreSQL 13 (by removing useless include), fix to_multi_byte('\')
  * prepare for 3.9.0
  * remove extra clean to allow repeateable build without bison
  * Orafce is licenced under 0-clause BSD licence
  * polishing licence
  * use postgres routines for printing float4, float8 values in to_char function (reduce garbage and trailing zeroes)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273602">- enable pg 13 and 14</changelog>
  <changelog author="mrueckert@suse.de" date="1675166400">- Update to version 4.1.1+git0.519b5b5:
  * prepare for 4.1.1
  * build on master (16) branch
  * use adv lock to synchronize start of pipe and alert tests
  * add connect by level &lt; num in migration docs
  * Hierarchical Query identifys the leaves
  * Update the connect_by_root example, for better semantics
  * fix: CONNECT_BY_ROOT in hierarchical query is converted to WITH RECURSIVE syntax
  * the table [200~utl_file.utl_file_dir is dumpable
  * fix compilation against pg master
  * prepare for 4.0.2
  * fix -wextra warnings
  * fix shadowed variable varning
  * fix msvc build for PostgreSQL 14
  * fix build for pg16
  * fix META file and prepare for 4.0.1
  * to_multi_byte and to_single_byte support euc_cn(gb2312)
  * add  oracle sql migration : CONNECT_BY_ROOT
  * fix oracle connect by
  * prepare for 4.0.0 release
  * remove obsolete ref on orafce_sql
  * rename shadow variable
  * initial merge of dbms_sql from orafce_sql
  * other cleaning after removing support for unsupported pg releases
  * increase version
  * remove support for PostgreSQL 10 and older
  * Fix database creation during installchecks for ICU cluster
  * fix dbms_output.serveroutput(true) clear the buffer.It conforms to the features of oracle.
  * prepare for 3.25.1
  * fix calculation of plvstr.is_prefix for negative numeric values - see issue #198
  * fix for pre 14 releases
  * doc and regress tests
  * remove useless func decl
  * support for older releases
  * initial implementation
  * initial
  * fix build against master (16) branch
  * wrap possible unsupported DDL to dynamic SQL
  * specify schema inside definition function tanh
  * only set editorconfig
  * prepare for 3.24.4
  * remove redundant ALTER FUNCTION #191
  * prepare for 3.24.3
  * PostgreSQL older than 12 doesn't allow ALTER FUNCTION pg_catalog.x SET SCHEMA oracle. Only dirty way by direct modification of system catalogue is possible. see issue #190
  * prepare for 3.24.2
  * fix missing oracle.mod functions in update scripts
  * prepare for 3.24.1
  * fix regress nlssort test for PostgreSQL 9.5 without \if command
  * Fix race condition during initialization in ora_lock_shmem.
  * nlssort: Add a missing call to PG_RE_THROW.
  * Limit nlssort test to Linux/glibc systems with en_US.utf8 installed.
  * NEWS
  * set storage for varchar2 and nvarchar2 to extended strategy
  * prepare for 3.23
  * fix broken calculation in plvdate_isleapyear function #184
  * fix support for pg9.5, fix regress tests for older releases
  * prepare for 3.22.1
  * Fix read past the end of string in to_sigle_byte().
  * Fix dbms_utility.get_time() to use the full range of int32.
  * fix readme
  * prepare for 3.22.0
  * move dbobjects from public and pg_catalog schemas to oracle schema
  * moving objects from public and pg_catalog to oracle schema
  * move RequestAddinShmemSpace to shmem_request_hook for PostgreSQL 15
  * Update sql_migration06.md
  * Restore sqlparse.c and sqlparse.h
  * Undo comment
  * Add comment
  * Add Parallel safe to mod function
  * Bug fix
  * Add mod function for Oracle compatibility
  * Fix typos and spelling in docs and error messages
  * prepare for 3.21.1
  * fix mswin build - regexp functions was not really marked as dllexport due missing include of builtins.h
  * remove empty line
  * fix of some compatibility issues
  * REG_NOSUB is working only on PostgreSQL 15
  * workable release for PostgreSQL 15
  * modification for compotibility with orafce.regexp_instr
  * backport regexp_instr from PostgreSQL 15, use C version instead PLpgSQL for better possibilities of usage regexp API
  * prepare for 3.20.0
  * Fix regexp_instr() function with occurrence when the same value matching a pattern is found at several place in the string.
  * signature of nvl2 function is enhanced to "any", anyelement, anyelement. After this change, the behavior is more close to Oracle. Unfortunatelly - this change can break extension update for some customers that uses nvl2 in views.
  * support negative start argument for function substrb. Originally orafce used buildin bytea substr function. Now it recalculate start argument. see issue #172
  * prepare for 3.19
  * Allow empty string on input of functions to_number and to_date. In this case returns NULL.
  * remove white spaces
  * replace obsolete CSTRING macro by text_to_csring function
  * prepare for 3.18.1
  * fix - badly handled fn_extra in oracle.greatest(least) function
  * prepare for 3.18.0
  * Update README.asciidoc
  * Update README.asciidoc
  * use older API for iteration over an array. Now, oracle.greatest and oracle.least are working on all supported releases
  * remove negative tests related to orafce.greatest because: a) error message is different on supported pg versions, b) the coverage and benefit of these tests is low
  * remove two lines from regress tests of greatest due dependency on used collate
  * Add documentation for greatest and least functions.
  * Update upgrade extension file with the smallint addition.
  * Add greatest/least SQL redefinition for smallint Add regression tests fot the two functions.
  * Oracle functions LEAST and GREATEST return NULL if at least one of the parameters is NULL. This is not the case for the PostgreSQL equivalent functions which only return NULL when all the parameters are NULL. This patch creates the two functions in the oracle schema to have the same behavior than in Oracle.
  * Minor grammatical fix to README.asciidoc
  * fix typo in charpad.c
  * fix typo in orafce--3.17.sql
  * Update Orafce_Documentation_05.md
  * Catch dbms_random.string() output variation on Windows</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675166401">- enable pg 15</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675166402">- remove pg 10 support</changelog>
  <changelog author="Emiliano Langella &lt;emiliano.langella@suse.com&gt;" date="1676030400">- Added "Name:" tag.</changelog>
</package>
<package pkgid="2b827ae9297f3caeb92c633676c12803f1c67716ca73a26e11d2bfc551af414f" name="postgresql14-orafce" arch="ppc64le">
  <version epoch="0" ver="4.1.1+git0.519b5b5" rel="bp154.3.1"/>
  <changelog author="mrueckert@suse.de" date="1424347200">- update to 3.0.9
  * PostgreSQL 9.4 compilation
  * new datatype and related functions: oracle.date
  * new varchar2, nvarchar2 types and related functions
    (Amit Langote)
  * oracle.substr emulate better Oracle substr function behave
    (Vinayak Pokale)
  * fix few internal issues that breaks a PGXN tests (Pavel Stehule)</changelog>
  <changelog author="mrueckert@suse.de" date="1502366400">- switch to multibuild</changelog>
  <changelog author="mrueckert@suse.de" date="1502366401">- update to 3.4.0
  * new aggregate function wm_concat
  * PostgreSQL 9.6, 10 are supported well
  * remove support for 8.3, 8.4, 9.0, 9.1 (only 9.2 and higher
    are supported)
  * new functions: sysdate, sessiontimezone, dbtimezone
  * remove support for 8.2
  * add support for 9.5
  * change the releasion number system
  * new functions: to_single_byte, to_multi_byte, nanvl, length,
    ltrim, btrim, rtrim, lpad, rpad
  * fix compilation issue in new code for Pg &lt;= 9.1</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1540468800">- Add build for PostgreSQL 11 and drop 9.3.
- BuildRequire server-devel instead of devel.</changelog>
  <changelog author="mrueckert@suse.de" date="1540641600">- Update to version 3.6.1+git24.cf58d28:
  * remove strict flag for nvl functions
  * minor cleaning
  * remove pre 9.4 support
  * fixes for 12
  * fix compile on PostgreSQL 12
  * missing reset fsec in ora_timestamptz_round function
  * #74 - badly joined comment
  * #75 set correct type for trunc and round two params functions - float4
  * allow usage of schema oracle and plunit
  * copy paste correction intarray -&gt; orafce
  * fix broken compilation on non MSC platforms
  * fix output path
  * add postgresql 10.3 target support need ICU header by path c:\icu
  * fix conversion from 'size_t' to 'int'
  * add 9.6 build environments fix C89 compatible compliance
  * fix nensenses related yyllex, using older form of bison option
  * new function  oracle.numtodsinterval
  * disallow functions from utl_file package on MS Windows
  * clean headers used by msvc
  * cleaning complete build on msvc
  * add missing files for windows compilation
  * fix #64
  * dba_segments view, cleaning
  * Fix formatting of examples.
  * Append documentation about how to translate REGEXP_SUBSTR Oracle function to PostgreSQL.
  * fix the position of a half-width space added by rpad().
  * enhancing emulation of Oracle views
  * fix some segfaults reported by Andreas Seltenreich #59
  * new few Oracle system views
  * prepare for 3.6
  * Minor bug in doc
  * Avoid setting unused variable value
  * Fix issue #54 - missing collatable flag for string types varchar2, nvarchar2.
  * Ensure LWLockRegisterTranche call in every session before LWLockAcquire call.
  * Preparation for 3.5 release.
  * add missing V1 signatures
  * Add Orafce Documentation and Oracle to PostgreSQL Migration Guide
- drop patch orafce-orafce_sql_yyparse-bison26.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1571745600">- adding postgresql12 to _multibuild</changelog>
  <changelog author="mrueckert@suse.de" date="1571745601">- Update to version 3.8.0+git4.a65cfb8:
  * return back missing files
  * fresh parser files
  * master is now unreleased 3.9
  * minor enhancing user_constraints view - use conrelid::regclass instead table_name. This will be  consistent with index name, and show schema for tables that are not on search_path
  * prepare for 3.8
  * qualify decode function to be installable on greenplum
  * fix PostgreSQL 12 support
  * missing files
  * typo
  * fix compilation and regress tests for PostgreSQL 11
  * Revert "Merge pull request #83 from kato-sho/fix-build-for-PG12"
  * Fix build for PostgreSQL 12
  * remove extra #include utils/nabstime.h
  * update against change format of FunctionCallInfo in PostgreSQL 12
  * fix compilation for pre PostgreSQL 12
  * fix compile for PostgreSQL 12
  * prepare for 3.7.2
  * bug fix release
  * fix bad filter in oracle.user_tables view
  * update NEWS
  * use older syntax for create operator command
  * add warning about possible compatibility issue
  * fix docs
  * null safe pipe operator for (n)varchar2 should be explicitly enabled (due compatibility)
  * bugfix should to use OR REPLACE clause
  * add bugfixes to update script
  * fix readme
  * more faster (n)varchar2 null safe concat
  * null safe concat operator for varchar2 and nvarchar2
  * fix compilation for PostgreSQL 12
  * target type should be qualified
  * broken formula for add_month
  * fix broken oracle.add_months for last day in month
  * fix comment assigned to wrong object
  * minor doc nvl</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273600">- remove dead PG versions</changelog>
  <changelog author="mrueckert@suse.de" date="1638273601">- Update to version 3.17.0+git12.e9ab8a3:
  * Fix some typos in plunit.c and plvdate.c.
  * Fix a non-standard function declaration.
  * pg_nextpower2_32 is available for pg13+|
  * fix typo in plvdate.c
  * fix typo in alert.c
  * Improve the place that double the size of a buffer
  * Fix access privileges of utl_file.tmpdir()
  * prepare for 3.17.0
  * This patch reproduce the same behavior of the regexp_* function with null input.
  * Fix version number in install script.
  * Remove duplicate variable declarations
  * Allow even longer runtimes in DBMS_UTILITY.GET_TIME test
  * prepare for 3.16.2
  * fix build for msvc
  * prepare for 3.16.1
  * sql/dbms_utility.sql: Allow longer test runtime
  * fix some shared memory leaks, reduce an possibility to raise an error 'lock requested error' by cleaning locks (these locks are not Postgres's locks) in dbms_alert_removeall and by triggering cleaning shared memory from locks related to closed processes when there are not free locks - per #PR 140 reported by @rbapin
  * prepare for 3.16.0
  * rename pipe type to orafce_pipe due conflict with pipe function from unistd.h
  * ensure public access to public schema
  * add missing sql file for 3.16
  * Add DBMS_UTILITY.GET_TIME function, it returns the current time in 100th's of a second from a point in time in the past. This function is used for determining elapsed time. This function is widely used in some Oracle installation for timing of functions or statements.
  * fix warning on MSVC
  * prepare for 3.15.1
  * Remove reference to pg_enc2name_tbl variable. It is not available on MSVC, and for this functionality it is not necessary
  * prepare for 3.15.0
  * function regexp_match cannot be used because it is available from Postgres 10
  * Add Oracle regexp_replace() function which supports start position and occurrence. It correspond to the Oracle behavior and consist in plpgsql functions based on PG regexp_matches() and regexp_replace(). All details of the implementation is explained in the documentation. Also include in this patch also include regression tests for regexp_replace() including the Oracle queries and results in comment.
  * just reformatting
  * just reformatting
  * Remove wrong and unused code.
  * Apply orafce rule for assignment on remaining call to position() and length.
  * Use better style for assignment instead of pseudo query.
  * - Improve performances by replacing SELECT ... INTO syntax with := - Replace call to regexp_match() by regexp_matches() to support   PostgreSQL 9.5 and 9.6. - Remove obsolete orafce--3.14.sql file - Update regression test to disable CONTEXT trace.
  * Add Oracle regexp_like(), regexp_count(), regexp_instr() and regexp_substr() functions. They correspond to the Oracle behavior and consist in plpgsql functions based on PG regexp_matches(). All details of the implementation is explained in the documentation. This patch also include a regression test regexp_func.sql including the Oracle queries and results in comment.
  * more ilustrative description of msvc project properties
  * Oracle.sysdate uses time zone stored in GUC orafce.timezone. The setting of configuration value was correct - the global variable orafce_timezone has correct content (it can be checked by SELECT oracle.dbtimezone(). But direct output of this GUC (show orafce.timezone) was broken because the handler of system timezone was used and the statement "show orafce.timezone" did same output like "show timezone", and it is surely wrong.
  * pre 3.14 changes
  * When nvarchar2 and varchar2 was introduced, then was not possibility to correctly set protransform column. Orafce used UPDATE of pg_proc table. Unfortunatelly, this new dependency was not coverget by entry in pg_depend. Today this issue breaks binary upgrade. Fix is simple - on new Postgres it uses ALTER FUNCTION SUPPORT, for older releases it tries to fix pg_depend table.
  * implementation of unistr function
  * Added ppc64le architecture
  * Added some transactions behavior differences
  * Catch dbms_random.string() output variation on big-endian
  * Fix the wrong filter in oracle.user_tables view in orafce--3.6--3.7.sql.
  * Update README.asciidoc
  * Update others.c
  * Use correct macros to convert between Datums and pointers.
  * note in readme
  * prepare for 3.13.4
  * forgotten files
  * prepare for 3.13.3
  * enable utf_file on MSWin
  * cleaning build on MSWin
  * reduce stack size
  * minor cleaning
  * prepare for 3.12
  * fix warning for postgres 13
  * fix asciidoc format
  * minor README fix
  * travis status
  * PostgreSQL 9.4 is not supported
  * example to trigger func
  * fix build and tests for older releases
  * trigger functions - ensure so only null or only empty string is used
  * fix: 'if' condition is always true
  * prepare for 3.11.1
  * missing test output file
  * only PostgreSQL 9.4 and higher are supported
  * Run the testsuite on travis-ci.org
  * clean warnings detected by -Wextra
  * forgot. GRANT
  * The previous securing of utl_file package required SECURITY DEFINER flags on functions. Using this flag is security risk. Insted using SECURITY DEFINER we allow READ from utl_file.utl_file_dir to PUBLIC. This design has one advantage - the final user can control usage of these function with granting user rights just only on table utl_file.utl_file_dir.
  * Update README.asciidoc
  * Update README.asciidoc
  * Update README.asciidoc
  * Update README.asciidoc
  * fix long standing bug - function with access to utl_file_dir should to has security definer flag
  * fix compilation against Postgres 13
  * small fixes and rewrite of utl_file paragraph
  * the safe dictionary in utl_file package can be identified by name too
  * Fix doc and comment about months_between returning numeric (not float8).
  * there are some differences between Oracle and Orafce
  * fix compilation on PostgreSQL 13 (by removing useless include), fix to_multi_byte('\')
  * prepare for 3.9.0
  * remove extra clean to allow repeateable build without bison
  * Orafce is licenced under 0-clause BSD licence
  * polishing licence
  * use postgres routines for printing float4, float8 values in to_char function (reduce garbage and trailing zeroes)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273602">- enable pg 13 and 14</changelog>
  <changelog author="mrueckert@suse.de" date="1675166400">- Update to version 4.1.1+git0.519b5b5:
  * prepare for 4.1.1
  * build on master (16) branch
  * use adv lock to synchronize start of pipe and alert tests
  * add connect by level &lt; num in migration docs
  * Hierarchical Query identifys the leaves
  * Update the connect_by_root example, for better semantics
  * fix: CONNECT_BY_ROOT in hierarchical query is converted to WITH RECURSIVE syntax
  * the table [200~utl_file.utl_file_dir is dumpable
  * fix compilation against pg master
  * prepare for 4.0.2
  * fix -wextra warnings
  * fix shadowed variable varning
  * fix msvc build for PostgreSQL 14
  * fix build for pg16
  * fix META file and prepare for 4.0.1
  * to_multi_byte and to_single_byte support euc_cn(gb2312)
  * add  oracle sql migration : CONNECT_BY_ROOT
  * fix oracle connect by
  * prepare for 4.0.0 release
  * remove obsolete ref on orafce_sql
  * rename shadow variable
  * initial merge of dbms_sql from orafce_sql
  * other cleaning after removing support for unsupported pg releases
  * increase version
  * remove support for PostgreSQL 10 and older
  * Fix database creation during installchecks for ICU cluster
  * fix dbms_output.serveroutput(true) clear the buffer.It conforms to the features of oracle.
  * prepare for 3.25.1
  * fix calculation of plvstr.is_prefix for negative numeric values - see issue #198
  * fix for pre 14 releases
  * doc and regress tests
  * remove useless func decl
  * support for older releases
  * initial implementation
  * initial
  * fix build against master (16) branch
  * wrap possible unsupported DDL to dynamic SQL
  * specify schema inside definition function tanh
  * only set editorconfig
  * prepare for 3.24.4
  * remove redundant ALTER FUNCTION #191
  * prepare for 3.24.3
  * PostgreSQL older than 12 doesn't allow ALTER FUNCTION pg_catalog.x SET SCHEMA oracle. Only dirty way by direct modification of system catalogue is possible. see issue #190
  * prepare for 3.24.2
  * fix missing oracle.mod functions in update scripts
  * prepare for 3.24.1
  * fix regress nlssort test for PostgreSQL 9.5 without \if command
  * Fix race condition during initialization in ora_lock_shmem.
  * nlssort: Add a missing call to PG_RE_THROW.
  * Limit nlssort test to Linux/glibc systems with en_US.utf8 installed.
  * NEWS
  * set storage for varchar2 and nvarchar2 to extended strategy
  * prepare for 3.23
  * fix broken calculation in plvdate_isleapyear function #184
  * fix support for pg9.5, fix regress tests for older releases
  * prepare for 3.22.1
  * Fix read past the end of string in to_sigle_byte().
  * Fix dbms_utility.get_time() to use the full range of int32.
  * fix readme
  * prepare for 3.22.0
  * move dbobjects from public and pg_catalog schemas to oracle schema
  * moving objects from public and pg_catalog to oracle schema
  * move RequestAddinShmemSpace to shmem_request_hook for PostgreSQL 15
  * Update sql_migration06.md
  * Restore sqlparse.c and sqlparse.h
  * Undo comment
  * Add comment
  * Add Parallel safe to mod function
  * Bug fix
  * Add mod function for Oracle compatibility
  * Fix typos and spelling in docs and error messages
  * prepare for 3.21.1
  * fix mswin build - regexp functions was not really marked as dllexport due missing include of builtins.h
  * remove empty line
  * fix of some compatibility issues
  * REG_NOSUB is working only on PostgreSQL 15
  * workable release for PostgreSQL 15
  * modification for compotibility with orafce.regexp_instr
  * backport regexp_instr from PostgreSQL 15, use C version instead PLpgSQL for better possibilities of usage regexp API
  * prepare for 3.20.0
  * Fix regexp_instr() function with occurrence when the same value matching a pattern is found at several place in the string.
  * signature of nvl2 function is enhanced to "any", anyelement, anyelement. After this change, the behavior is more close to Oracle. Unfortunatelly - this change can break extension update for some customers that uses nvl2 in views.
  * support negative start argument for function substrb. Originally orafce used buildin bytea substr function. Now it recalculate start argument. see issue #172
  * prepare for 3.19
  * Allow empty string on input of functions to_number and to_date. In this case returns NULL.
  * remove white spaces
  * replace obsolete CSTRING macro by text_to_csring function
  * prepare for 3.18.1
  * fix - badly handled fn_extra in oracle.greatest(least) function
  * prepare for 3.18.0
  * Update README.asciidoc
  * Update README.asciidoc
  * use older API for iteration over an array. Now, oracle.greatest and oracle.least are working on all supported releases
  * remove negative tests related to orafce.greatest because: a) error message is different on supported pg versions, b) the coverage and benefit of these tests is low
  * remove two lines from regress tests of greatest due dependency on used collate
  * Add documentation for greatest and least functions.
  * Update upgrade extension file with the smallint addition.
  * Add greatest/least SQL redefinition for smallint Add regression tests fot the two functions.
  * Oracle functions LEAST and GREATEST return NULL if at least one of the parameters is NULL. This is not the case for the PostgreSQL equivalent functions which only return NULL when all the parameters are NULL. This patch creates the two functions in the oracle schema to have the same behavior than in Oracle.
  * Minor grammatical fix to README.asciidoc
  * fix typo in charpad.c
  * fix typo in orafce--3.17.sql
  * Update Orafce_Documentation_05.md
  * Catch dbms_random.string() output variation on Windows</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675166401">- enable pg 15</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675166402">- remove pg 10 support</changelog>
  <changelog author="Emiliano Langella &lt;emiliano.langella@suse.com&gt;" date="1676030400">- Added "Name:" tag.</changelog>
</package>
<package pkgid="f01e298ca2e5335c964e541796a53e870a0c992a3fb80967e950ca2c57a970b0" name="postgresql14-orafce" arch="s390x">
  <version epoch="0" ver="4.1.1+git0.519b5b5" rel="bp154.3.1"/>
  <changelog author="mrueckert@suse.de" date="1424347200">- update to 3.0.9
  * PostgreSQL 9.4 compilation
  * new datatype and related functions: oracle.date
  * new varchar2, nvarchar2 types and related functions
    (Amit Langote)
  * oracle.substr emulate better Oracle substr function behave
    (Vinayak Pokale)
  * fix few internal issues that breaks a PGXN tests (Pavel Stehule)</changelog>
  <changelog author="mrueckert@suse.de" date="1502366400">- switch to multibuild</changelog>
  <changelog author="mrueckert@suse.de" date="1502366401">- update to 3.4.0
  * new aggregate function wm_concat
  * PostgreSQL 9.6, 10 are supported well
  * remove support for 8.3, 8.4, 9.0, 9.1 (only 9.2 and higher
    are supported)
  * new functions: sysdate, sessiontimezone, dbtimezone
  * remove support for 8.2
  * add support for 9.5
  * change the releasion number system
  * new functions: to_single_byte, to_multi_byte, nanvl, length,
    ltrim, btrim, rtrim, lpad, rpad
  * fix compilation issue in new code for Pg &lt;= 9.1</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1540468800">- Add build for PostgreSQL 11 and drop 9.3.
- BuildRequire server-devel instead of devel.</changelog>
  <changelog author="mrueckert@suse.de" date="1540641600">- Update to version 3.6.1+git24.cf58d28:
  * remove strict flag for nvl functions
  * minor cleaning
  * remove pre 9.4 support
  * fixes for 12
  * fix compile on PostgreSQL 12
  * missing reset fsec in ora_timestamptz_round function
  * #74 - badly joined comment
  * #75 set correct type for trunc and round two params functions - float4
  * allow usage of schema oracle and plunit
  * copy paste correction intarray -&gt; orafce
  * fix broken compilation on non MSC platforms
  * fix output path
  * add postgresql 10.3 target support need ICU header by path c:\icu
  * fix conversion from 'size_t' to 'int'
  * add 9.6 build environments fix C89 compatible compliance
  * fix nensenses related yyllex, using older form of bison option
  * new function  oracle.numtodsinterval
  * disallow functions from utl_file package on MS Windows
  * clean headers used by msvc
  * cleaning complete build on msvc
  * add missing files for windows compilation
  * fix #64
  * dba_segments view, cleaning
  * Fix formatting of examples.
  * Append documentation about how to translate REGEXP_SUBSTR Oracle function to PostgreSQL.
  * fix the position of a half-width space added by rpad().
  * enhancing emulation of Oracle views
  * fix some segfaults reported by Andreas Seltenreich #59
  * new few Oracle system views
  * prepare for 3.6
  * Minor bug in doc
  * Avoid setting unused variable value
  * Fix issue #54 - missing collatable flag for string types varchar2, nvarchar2.
  * Ensure LWLockRegisterTranche call in every session before LWLockAcquire call.
  * Preparation for 3.5 release.
  * add missing V1 signatures
  * Add Orafce Documentation and Oracle to PostgreSQL Migration Guide
- drop patch orafce-orafce_sql_yyparse-bison26.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1571745600">- adding postgresql12 to _multibuild</changelog>
  <changelog author="mrueckert@suse.de" date="1571745601">- Update to version 3.8.0+git4.a65cfb8:
  * return back missing files
  * fresh parser files
  * master is now unreleased 3.9
  * minor enhancing user_constraints view - use conrelid::regclass instead table_name. This will be  consistent with index name, and show schema for tables that are not on search_path
  * prepare for 3.8
  * qualify decode function to be installable on greenplum
  * fix PostgreSQL 12 support
  * missing files
  * typo
  * fix compilation and regress tests for PostgreSQL 11
  * Revert "Merge pull request #83 from kato-sho/fix-build-for-PG12"
  * Fix build for PostgreSQL 12
  * remove extra #include utils/nabstime.h
  * update against change format of FunctionCallInfo in PostgreSQL 12
  * fix compilation for pre PostgreSQL 12
  * fix compile for PostgreSQL 12
  * prepare for 3.7.2
  * bug fix release
  * fix bad filter in oracle.user_tables view
  * update NEWS
  * use older syntax for create operator command
  * add warning about possible compatibility issue
  * fix docs
  * null safe pipe operator for (n)varchar2 should be explicitly enabled (due compatibility)
  * bugfix should to use OR REPLACE clause
  * add bugfixes to update script
  * fix readme
  * more faster (n)varchar2 null safe concat
  * null safe concat operator for varchar2 and nvarchar2
  * fix compilation for PostgreSQL 12
  * target type should be qualified
  * broken formula for add_month
  * fix broken oracle.add_months for last day in month
  * fix comment assigned to wrong object
  * minor doc nvl</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273600">- remove dead PG versions</changelog>
  <changelog author="mrueckert@suse.de" date="1638273601">- Update to version 3.17.0+git12.e9ab8a3:
  * Fix some typos in plunit.c and plvdate.c.
  * Fix a non-standard function declaration.
  * pg_nextpower2_32 is available for pg13+|
  * fix typo in plvdate.c
  * fix typo in alert.c
  * Improve the place that double the size of a buffer
  * Fix access privileges of utl_file.tmpdir()
  * prepare for 3.17.0
  * This patch reproduce the same behavior of the regexp_* function with null input.
  * Fix version number in install script.
  * Remove duplicate variable declarations
  * Allow even longer runtimes in DBMS_UTILITY.GET_TIME test
  * prepare for 3.16.2
  * fix build for msvc
  * prepare for 3.16.1
  * sql/dbms_utility.sql: Allow longer test runtime
  * fix some shared memory leaks, reduce an possibility to raise an error 'lock requested error' by cleaning locks (these locks are not Postgres's locks) in dbms_alert_removeall and by triggering cleaning shared memory from locks related to closed processes when there are not free locks - per #PR 140 reported by @rbapin
  * prepare for 3.16.0
  * rename pipe type to orafce_pipe due conflict with pipe function from unistd.h
  * ensure public access to public schema
  * add missing sql file for 3.16
  * Add DBMS_UTILITY.GET_TIME function, it returns the current time in 100th's of a second from a point in time in the past. This function is used for determining elapsed time. This function is widely used in some Oracle installation for timing of functions or statements.
  * fix warning on MSVC
  * prepare for 3.15.1
  * Remove reference to pg_enc2name_tbl variable. It is not available on MSVC, and for this functionality it is not necessary
  * prepare for 3.15.0
  * function regexp_match cannot be used because it is available from Postgres 10
  * Add Oracle regexp_replace() function which supports start position and occurrence. It correspond to the Oracle behavior and consist in plpgsql functions based on PG regexp_matches() and regexp_replace(). All details of the implementation is explained in the documentation. Also include in this patch also include regression tests for regexp_replace() including the Oracle queries and results in comment.
  * just reformatting
  * just reformatting
  * Remove wrong and unused code.
  * Apply orafce rule for assignment on remaining call to position() and length.
  * Use better style for assignment instead of pseudo query.
  * - Improve performances by replacing SELECT ... INTO syntax with := - Replace call to regexp_match() by regexp_matches() to support   PostgreSQL 9.5 and 9.6. - Remove obsolete orafce--3.14.sql file - Update regression test to disable CONTEXT trace.
  * Add Oracle regexp_like(), regexp_count(), regexp_instr() and regexp_substr() functions. They correspond to the Oracle behavior and consist in plpgsql functions based on PG regexp_matches(). All details of the implementation is explained in the documentation. This patch also include a regression test regexp_func.sql including the Oracle queries and results in comment.
  * more ilustrative description of msvc project properties
  * Oracle.sysdate uses time zone stored in GUC orafce.timezone. The setting of configuration value was correct - the global variable orafce_timezone has correct content (it can be checked by SELECT oracle.dbtimezone(). But direct output of this GUC (show orafce.timezone) was broken because the handler of system timezone was used and the statement "show orafce.timezone" did same output like "show timezone", and it is surely wrong.
  * pre 3.14 changes
  * When nvarchar2 and varchar2 was introduced, then was not possibility to correctly set protransform column. Orafce used UPDATE of pg_proc table. Unfortunatelly, this new dependency was not coverget by entry in pg_depend. Today this issue breaks binary upgrade. Fix is simple - on new Postgres it uses ALTER FUNCTION SUPPORT, for older releases it tries to fix pg_depend table.
  * implementation of unistr function
  * Added ppc64le architecture
  * Added some transactions behavior differences
  * Catch dbms_random.string() output variation on big-endian
  * Fix the wrong filter in oracle.user_tables view in orafce--3.6--3.7.sql.
  * Update README.asciidoc
  * Update others.c
  * Use correct macros to convert between Datums and pointers.
  * note in readme
  * prepare for 3.13.4
  * forgotten files
  * prepare for 3.13.3
  * enable utf_file on MSWin
  * cleaning build on MSWin
  * reduce stack size
  * minor cleaning
  * prepare for 3.12
  * fix warning for postgres 13
  * fix asciidoc format
  * minor README fix
  * travis status
  * PostgreSQL 9.4 is not supported
  * example to trigger func
  * fix build and tests for older releases
  * trigger functions - ensure so only null or only empty string is used
  * fix: 'if' condition is always true
  * prepare for 3.11.1
  * missing test output file
  * only PostgreSQL 9.4 and higher are supported
  * Run the testsuite on travis-ci.org
  * clean warnings detected by -Wextra
  * forgot. GRANT
  * The previous securing of utl_file package required SECURITY DEFINER flags on functions. Using this flag is security risk. Insted using SECURITY DEFINER we allow READ from utl_file.utl_file_dir to PUBLIC. This design has one advantage - the final user can control usage of these function with granting user rights just only on table utl_file.utl_file_dir.
  * Update README.asciidoc
  * Update README.asciidoc
  * Update README.asciidoc
  * Update README.asciidoc
  * fix long standing bug - function with access to utl_file_dir should to has security definer flag
  * fix compilation against Postgres 13
  * small fixes and rewrite of utl_file paragraph
  * the safe dictionary in utl_file package can be identified by name too
  * Fix doc and comment about months_between returning numeric (not float8).
  * there are some differences between Oracle and Orafce
  * fix compilation on PostgreSQL 13 (by removing useless include), fix to_multi_byte('\')
  * prepare for 3.9.0
  * remove extra clean to allow repeateable build without bison
  * Orafce is licenced under 0-clause BSD licence
  * polishing licence
  * use postgres routines for printing float4, float8 values in to_char function (reduce garbage and trailing zeroes)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273602">- enable pg 13 and 14</changelog>
  <changelog author="mrueckert@suse.de" date="1675166400">- Update to version 4.1.1+git0.519b5b5:
  * prepare for 4.1.1
  * build on master (16) branch
  * use adv lock to synchronize start of pipe and alert tests
  * add connect by level &lt; num in migration docs
  * Hierarchical Query identifys the leaves
  * Update the connect_by_root example, for better semantics
  * fix: CONNECT_BY_ROOT in hierarchical query is converted to WITH RECURSIVE syntax
  * the table [200~utl_file.utl_file_dir is dumpable
  * fix compilation against pg master
  * prepare for 4.0.2
  * fix -wextra warnings
  * fix shadowed variable varning
  * fix msvc build for PostgreSQL 14
  * fix build for pg16
  * fix META file and prepare for 4.0.1
  * to_multi_byte and to_single_byte support euc_cn(gb2312)
  * add  oracle sql migration : CONNECT_BY_ROOT
  * fix oracle connect by
  * prepare for 4.0.0 release
  * remove obsolete ref on orafce_sql
  * rename shadow variable
  * initial merge of dbms_sql from orafce_sql
  * other cleaning after removing support for unsupported pg releases
  * increase version
  * remove support for PostgreSQL 10 and older
  * Fix database creation during installchecks for ICU cluster
  * fix dbms_output.serveroutput(true) clear the buffer.It conforms to the features of oracle.
  * prepare for 3.25.1
  * fix calculation of plvstr.is_prefix for negative numeric values - see issue #198
  * fix for pre 14 releases
  * doc and regress tests
  * remove useless func decl
  * support for older releases
  * initial implementation
  * initial
  * fix build against master (16) branch
  * wrap possible unsupported DDL to dynamic SQL
  * specify schema inside definition function tanh
  * only set editorconfig
  * prepare for 3.24.4
  * remove redundant ALTER FUNCTION #191
  * prepare for 3.24.3
  * PostgreSQL older than 12 doesn't allow ALTER FUNCTION pg_catalog.x SET SCHEMA oracle. Only dirty way by direct modification of system catalogue is possible. see issue #190
  * prepare for 3.24.2
  * fix missing oracle.mod functions in update scripts
  * prepare for 3.24.1
  * fix regress nlssort test for PostgreSQL 9.5 without \if command
  * Fix race condition during initialization in ora_lock_shmem.
  * nlssort: Add a missing call to PG_RE_THROW.
  * Limit nlssort test to Linux/glibc systems with en_US.utf8 installed.
  * NEWS
  * set storage for varchar2 and nvarchar2 to extended strategy
  * prepare for 3.23
  * fix broken calculation in plvdate_isleapyear function #184
  * fix support for pg9.5, fix regress tests for older releases
  * prepare for 3.22.1
  * Fix read past the end of string in to_sigle_byte().
  * Fix dbms_utility.get_time() to use the full range of int32.
  * fix readme
  * prepare for 3.22.0
  * move dbobjects from public and pg_catalog schemas to oracle schema
  * moving objects from public and pg_catalog to oracle schema
  * move RequestAddinShmemSpace to shmem_request_hook for PostgreSQL 15
  * Update sql_migration06.md
  * Restore sqlparse.c and sqlparse.h
  * Undo comment
  * Add comment
  * Add Parallel safe to mod function
  * Bug fix
  * Add mod function for Oracle compatibility
  * Fix typos and spelling in docs and error messages
  * prepare for 3.21.1
  * fix mswin build - regexp functions was not really marked as dllexport due missing include of builtins.h
  * remove empty line
  * fix of some compatibility issues
  * REG_NOSUB is working only on PostgreSQL 15
  * workable release for PostgreSQL 15
  * modification for compotibility with orafce.regexp_instr
  * backport regexp_instr from PostgreSQL 15, use C version instead PLpgSQL for better possibilities of usage regexp API
  * prepare for 3.20.0
  * Fix regexp_instr() function with occurrence when the same value matching a pattern is found at several place in the string.
  * signature of nvl2 function is enhanced to "any", anyelement, anyelement. After this change, the behavior is more close to Oracle. Unfortunatelly - this change can break extension update for some customers that uses nvl2 in views.
  * support negative start argument for function substrb. Originally orafce used buildin bytea substr function. Now it recalculate start argument. see issue #172
  * prepare for 3.19
  * Allow empty string on input of functions to_number and to_date. In this case returns NULL.
  * remove white spaces
  * replace obsolete CSTRING macro by text_to_csring function
  * prepare for 3.18.1
  * fix - badly handled fn_extra in oracle.greatest(least) function
  * prepare for 3.18.0
  * Update README.asciidoc
  * Update README.asciidoc
  * use older API for iteration over an array. Now, oracle.greatest and oracle.least are working on all supported releases
  * remove negative tests related to orafce.greatest because: a) error message is different on supported pg versions, b) the coverage and benefit of these tests is low
  * remove two lines from regress tests of greatest due dependency on used collate
  * Add documentation for greatest and least functions.
  * Update upgrade extension file with the smallint addition.
  * Add greatest/least SQL redefinition for smallint Add regression tests fot the two functions.
  * Oracle functions LEAST and GREATEST return NULL if at least one of the parameters is NULL. This is not the case for the PostgreSQL equivalent functions which only return NULL when all the parameters are NULL. This patch creates the two functions in the oracle schema to have the same behavior than in Oracle.
  * Minor grammatical fix to README.asciidoc
  * fix typo in charpad.c
  * fix typo in orafce--3.17.sql
  * Update Orafce_Documentation_05.md
  * Catch dbms_random.string() output variation on Windows</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675166401">- enable pg 15</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675166402">- remove pg 10 support</changelog>
  <changelog author="Emiliano Langella &lt;emiliano.langella@suse.com&gt;" date="1676030400">- Added "Name:" tag.</changelog>
</package>
<package pkgid="081ed4b6cb4523a23931ef534bb484ca8dcf91f0f52180556a0891d439881c1d" name="postgresql14-orafce" arch="src">
  <version epoch="0" ver="4.1.1+git0.519b5b5" rel="bp154.3.1"/>
  <changelog author="darin@darins.net" date="1351252800">- added pre_checkin.sh to generate .spec and .changes</changelog>
  <changelog author="darin@darins.net" date="1351771200">- updated name in template
- set proper install location</changelog>
  <changelog author="darin@darins.net" date="1355745600">- renamed orafce.spec to orafce.spec.in</changelog>
  <changelog author="darin@darins.net" date="1375963200">- patch for compilation error with Bison &gt;=2.6
  See also http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=710633</changelog>
  <changelog author="darin@darins.net" date="1381320000">- updated to verion 3.0.6
- generate specs for PG 9.3</changelog>
  <changelog author="darin@darins.net" date="1381752000">- rename README.orafunc to README.asciidoc</changelog>
  <changelog author="mrueckert@suse.de" date="1424347200">- update to 3.0.9
  * PostgreSQL 9.4 compilation
  * new datatype and related functions: oracle.date
  * new varchar2, nvarchar2 types and related functions
    (Amit Langote)
  * oracle.substr emulate better Oracle substr function behave
    (Vinayak Pokale)
  * fix few internal issues that breaks a PGXN tests (Pavel Stehule)</changelog>
  <changelog author="mrueckert@suse.de" date="1502366400">- switch to multibuild</changelog>
  <changelog author="mrueckert@suse.de" date="1502366401">- update to 3.4.0
  * new aggregate function wm_concat
  * PostgreSQL 9.6, 10 are supported well
  * remove support for 8.3, 8.4, 9.0, 9.1 (only 9.2 and higher
    are supported)
  * new functions: sysdate, sessiontimezone, dbtimezone
  * remove support for 8.2
  * add support for 9.5
  * change the releasion number system
  * new functions: to_single_byte, to_multi_byte, nanvl, length,
    ltrim, btrim, rtrim, lpad, rpad
  * fix compilation issue in new code for Pg &lt;= 9.1</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1540468800">- Add build for PostgreSQL 11 and drop 9.3.
- BuildRequire server-devel instead of devel.</changelog>
  <changelog author="mrueckert@suse.de" date="1540641600">- Update to version 3.6.1+git24.cf58d28:
  * remove strict flag for nvl functions
  * minor cleaning
  * remove pre 9.4 support
  * fixes for 12
  * fix compile on PostgreSQL 12
  * missing reset fsec in ora_timestamptz_round function
  * #74 - badly joined comment
  * #75 set correct type for trunc and round two params functions - float4
  * allow usage of schema oracle and plunit
  * copy paste correction intarray -&gt; orafce
  * fix broken compilation on non MSC platforms
  * fix output path
  * add postgresql 10.3 target support need ICU header by path c:\icu
  * fix conversion from 'size_t' to 'int'
  * add 9.6 build environments fix C89 compatible compliance
  * fix nensenses related yyllex, using older form of bison option
  * new function  oracle.numtodsinterval
  * disallow functions from utl_file package on MS Windows
  * clean headers used by msvc
  * cleaning complete build on msvc
  * add missing files for windows compilation
  * fix #64
  * dba_segments view, cleaning
  * Fix formatting of examples.
  * Append documentation about how to translate REGEXP_SUBSTR Oracle function to PostgreSQL.
  * fix the position of a half-width space added by rpad().
  * enhancing emulation of Oracle views
  * fix some segfaults reported by Andreas Seltenreich #59
  * new few Oracle system views
  * prepare for 3.6
  * Minor bug in doc
  * Avoid setting unused variable value
  * Fix issue #54 - missing collatable flag for string types varchar2, nvarchar2.
  * Ensure LWLockRegisterTranche call in every session before LWLockAcquire call.
  * Preparation for 3.5 release.
  * add missing V1 signatures
  * Add Orafce Documentation and Oracle to PostgreSQL Migration Guide
- drop patch orafce-orafce_sql_yyparse-bison26.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1571745600">- adding postgresql12 to _multibuild</changelog>
  <changelog author="mrueckert@suse.de" date="1571745601">- Update to version 3.8.0+git4.a65cfb8:
  * return back missing files
  * fresh parser files
  * master is now unreleased 3.9
  * minor enhancing user_constraints view - use conrelid::regclass instead table_name. This will be  consistent with index name, and show schema for tables that are not on search_path
  * prepare for 3.8
  * qualify decode function to be installable on greenplum
  * fix PostgreSQL 12 support
  * missing files
  * typo
  * fix compilation and regress tests for PostgreSQL 11
  * Revert "Merge pull request #83 from kato-sho/fix-build-for-PG12"
  * Fix build for PostgreSQL 12
  * remove extra #include utils/nabstime.h
  * update against change format of FunctionCallInfo in PostgreSQL 12
  * fix compilation for pre PostgreSQL 12
  * fix compile for PostgreSQL 12
  * prepare for 3.7.2
  * bug fix release
  * fix bad filter in oracle.user_tables view
  * update NEWS
  * use older syntax for create operator command
  * add warning about possible compatibility issue
  * fix docs
  * null safe pipe operator for (n)varchar2 should be explicitly enabled (due compatibility)
  * bugfix should to use OR REPLACE clause
  * add bugfixes to update script
  * fix readme
  * more faster (n)varchar2 null safe concat
  * null safe concat operator for varchar2 and nvarchar2
  * fix compilation for PostgreSQL 12
  * target type should be qualified
  * broken formula for add_month
  * fix broken oracle.add_months for last day in month
  * fix comment assigned to wrong object
  * minor doc nvl</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273600">- remove dead PG versions</changelog>
  <changelog author="mrueckert@suse.de" date="1638273601">- Update to version 3.17.0+git12.e9ab8a3:
  * Fix some typos in plunit.c and plvdate.c.
  * Fix a non-standard function declaration.
  * pg_nextpower2_32 is available for pg13+|
  * fix typo in plvdate.c
  * fix typo in alert.c
  * Improve the place that double the size of a buffer
  * Fix access privileges of utl_file.tmpdir()
  * prepare for 3.17.0
  * This patch reproduce the same behavior of the regexp_* function with null input.
  * Fix version number in install script.
  * Remove duplicate variable declarations
  * Allow even longer runtimes in DBMS_UTILITY.GET_TIME test
  * prepare for 3.16.2
  * fix build for msvc
  * prepare for 3.16.1
  * sql/dbms_utility.sql: Allow longer test runtime
  * fix some shared memory leaks, reduce an possibility to raise an error 'lock requested error' by cleaning locks (these locks are not Postgres's locks) in dbms_alert_removeall and by triggering cleaning shared memory from locks related to closed processes when there are not free locks - per #PR 140 reported by @rbapin
  * prepare for 3.16.0
  * rename pipe type to orafce_pipe due conflict with pipe function from unistd.h
  * ensure public access to public schema
  * add missing sql file for 3.16
  * Add DBMS_UTILITY.GET_TIME function, it returns the current time in 100th's of a second from a point in time in the past. This function is used for determining elapsed time. This function is widely used in some Oracle installation for timing of functions or statements.
  * fix warning on MSVC
  * prepare for 3.15.1
  * Remove reference to pg_enc2name_tbl variable. It is not available on MSVC, and for this functionality it is not necessary
  * prepare for 3.15.0
  * function regexp_match cannot be used because it is available from Postgres 10
  * Add Oracle regexp_replace() function which supports start position and occurrence. It correspond to the Oracle behavior and consist in plpgsql functions based on PG regexp_matches() and regexp_replace(). All details of the implementation is explained in the documentation. Also include in this patch also include regression tests for regexp_replace() including the Oracle queries and results in comment.
  * just reformatting
  * just reformatting
  * Remove wrong and unused code.
  * Apply orafce rule for assignment on remaining call to position() and length.
  * Use better style for assignment instead of pseudo query.
  * - Improve performances by replacing SELECT ... INTO syntax with := - Replace call to regexp_match() by regexp_matches() to support   PostgreSQL 9.5 and 9.6. - Remove obsolete orafce--3.14.sql file - Update regression test to disable CONTEXT trace.
  * Add Oracle regexp_like(), regexp_count(), regexp_instr() and regexp_substr() functions. They correspond to the Oracle behavior and consist in plpgsql functions based on PG regexp_matches(). All details of the implementation is explained in the documentation. This patch also include a regression test regexp_func.sql including the Oracle queries and results in comment.
  * more ilustrative description of msvc project properties
  * Oracle.sysdate uses time zone stored in GUC orafce.timezone. The setting of configuration value was correct - the global variable orafce_timezone has correct content (it can be checked by SELECT oracle.dbtimezone(). But direct output of this GUC (show orafce.timezone) was broken because the handler of system timezone was used and the statement "show orafce.timezone" did same output like "show timezone", and it is surely wrong.
  * pre 3.14 changes
  * When nvarchar2 and varchar2 was introduced, then was not possibility to correctly set protransform column. Orafce used UPDATE of pg_proc table. Unfortunatelly, this new dependency was not coverget by entry in pg_depend. Today this issue breaks binary upgrade. Fix is simple - on new Postgres it uses ALTER FUNCTION SUPPORT, for older releases it tries to fix pg_depend table.
  * implementation of unistr function
  * Added ppc64le architecture
  * Added some transactions behavior differences
  * Catch dbms_random.string() output variation on big-endian
  * Fix the wrong filter in oracle.user_tables view in orafce--3.6--3.7.sql.
  * Update README.asciidoc
  * Update others.c
  * Use correct macros to convert between Datums and pointers.
  * note in readme
  * prepare for 3.13.4
  * forgotten files
  * prepare for 3.13.3
  * enable utf_file on MSWin
  * cleaning build on MSWin
  * reduce stack size
  * minor cleaning
  * prepare for 3.12
  * fix warning for postgres 13
  * fix asciidoc format
  * minor README fix
  * travis status
  * PostgreSQL 9.4 is not supported
  * example to trigger func
  * fix build and tests for older releases
  * trigger functions - ensure so only null or only empty string is used
  * fix: 'if' condition is always true
  * prepare for 3.11.1
  * missing test output file
  * only PostgreSQL 9.4 and higher are supported
  * Run the testsuite on travis-ci.org
  * clean warnings detected by -Wextra
  * forgot. GRANT
  * The previous securing of utl_file package required SECURITY DEFINER flags on functions. Using this flag is security risk. Insted using SECURITY DEFINER we allow READ from utl_file.utl_file_dir to PUBLIC. This design has one advantage - the final user can control usage of these function with granting user rights just only on table utl_file.utl_file_dir.
  * Update README.asciidoc
  * Update README.asciidoc
  * Update README.asciidoc
  * Update README.asciidoc
  * fix long standing bug - function with access to utl_file_dir should to has security definer flag
  * fix compilation against Postgres 13
  * small fixes and rewrite of utl_file paragraph
  * the safe dictionary in utl_file package can be identified by name too
  * Fix doc and comment about months_between returning numeric (not float8).
  * there are some differences between Oracle and Orafce
  * fix compilation on PostgreSQL 13 (by removing useless include), fix to_multi_byte('\')
  * prepare for 3.9.0
  * remove extra clean to allow repeateable build without bison
  * Orafce is licenced under 0-clause BSD licence
  * polishing licence
  * use postgres routines for printing float4, float8 values in to_char function (reduce garbage and trailing zeroes)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273602">- enable pg 13 and 14</changelog>
  <changelog author="mrueckert@suse.de" date="1675166400">- Update to version 4.1.1+git0.519b5b5:
  * prepare for 4.1.1
  * build on master (16) branch
  * use adv lock to synchronize start of pipe and alert tests
  * add connect by level &lt; num in migration docs
  * Hierarchical Query identifys the leaves
  * Update the connect_by_root example, for better semantics
  * fix: CONNECT_BY_ROOT in hierarchical query is converted to WITH RECURSIVE syntax
  * the table [200~utl_file.utl_file_dir is dumpable
  * fix compilation against pg master
  * prepare for 4.0.2
  * fix -wextra warnings
  * fix shadowed variable varning
  * fix msvc build for PostgreSQL 14
  * fix build for pg16
  * fix META file and prepare for 4.0.1
  * to_multi_byte and to_single_byte support euc_cn(gb2312)
  * add  oracle sql migration : CONNECT_BY_ROOT
  * fix oracle connect by
  * prepare for 4.0.0 release
  * remove obsolete ref on orafce_sql
  * rename shadow variable
  * initial merge of dbms_sql from orafce_sql
  * other cleaning after removing support for unsupported pg releases
  * increase version
  * remove support for PostgreSQL 10 and older
  * Fix database creation during installchecks for ICU cluster
  * fix dbms_output.serveroutput(true) clear the buffer.It conforms to the features of oracle.
  * prepare for 3.25.1
  * fix calculation of plvstr.is_prefix for negative numeric values - see issue #198
  * fix for pre 14 releases
  * doc and regress tests
  * remove useless func decl
  * support for older releases
  * initial implementation
  * initial
  * fix build against master (16) branch
  * wrap possible unsupported DDL to dynamic SQL
  * specify schema inside definition function tanh
  * only set editorconfig
  * prepare for 3.24.4
  * remove redundant ALTER FUNCTION #191
  * prepare for 3.24.3
  * PostgreSQL older than 12 doesn't allow ALTER FUNCTION pg_catalog.x SET SCHEMA oracle. Only dirty way by direct modification of system catalogue is possible. see issue #190
  * prepare for 3.24.2
  * fix missing oracle.mod functions in update scripts
  * prepare for 3.24.1
  * fix regress nlssort test for PostgreSQL 9.5 without \if command
  * Fix race condition during initialization in ora_lock_shmem.
  * nlssort: Add a missing call to PG_RE_THROW.
  * Limit nlssort test to Linux/glibc systems with en_US.utf8 installed.
  * NEWS
  * set storage for varchar2 and nvarchar2 to extended strategy
  * prepare for 3.23
  * fix broken calculation in plvdate_isleapyear function #184
  * fix support for pg9.5, fix regress tests for older releases
  * prepare for 3.22.1
  * Fix read past the end of string in to_sigle_byte().
  * Fix dbms_utility.get_time() to use the full range of int32.
  * fix readme
  * prepare for 3.22.0
  * move dbobjects from public and pg_catalog schemas to oracle schema
  * moving objects from public and pg_catalog to oracle schema
  * move RequestAddinShmemSpace to shmem_request_hook for PostgreSQL 15
  * Update sql_migration06.md
  * Restore sqlparse.c and sqlparse.h
  * Undo comment
  * Add comment
  * Add Parallel safe to mod function
  * Bug fix
  * Add mod function for Oracle compatibility
  * Fix typos and spelling in docs and error messages
  * prepare for 3.21.1
  * fix mswin build - regexp functions was not really marked as dllexport due missing include of builtins.h
  * remove empty line
  * fix of some compatibility issues
  * REG_NOSUB is working only on PostgreSQL 15
  * workable release for PostgreSQL 15
  * modification for compotibility with orafce.regexp_instr
  * backport regexp_instr from PostgreSQL 15, use C version instead PLpgSQL for better possibilities of usage regexp API
  * prepare for 3.20.0
  * Fix regexp_instr() function with occurrence when the same value matching a pattern is found at several place in the string.
  * signature of nvl2 function is enhanced to "any", anyelement, anyelement. After this change, the behavior is more close to Oracle. Unfortunatelly - this change can break extension update for some customers that uses nvl2 in views.
  * support negative start argument for function substrb. Originally orafce used buildin bytea substr function. Now it recalculate start argument. see issue #172
  * prepare for 3.19
  * Allow empty string on input of functions to_number and to_date. In this case returns NULL.
  * remove white spaces
  * replace obsolete CSTRING macro by text_to_csring function
  * prepare for 3.18.1
  * fix - badly handled fn_extra in oracle.greatest(least) function
  * prepare for 3.18.0
  * Update README.asciidoc
  * Update README.asciidoc
  * use older API for iteration over an array. Now, oracle.greatest and oracle.least are working on all supported releases
  * remove negative tests related to orafce.greatest because: a) error message is different on supported pg versions, b) the coverage and benefit of these tests is low
  * remove two lines from regress tests of greatest due dependency on used collate
  * Add documentation for greatest and least functions.
  * Update upgrade extension file with the smallint addition.
  * Add greatest/least SQL redefinition for smallint Add regression tests fot the two functions.
  * Oracle functions LEAST and GREATEST return NULL if at least one of the parameters is NULL. This is not the case for the PostgreSQL equivalent functions which only return NULL when all the parameters are NULL. This patch creates the two functions in the oracle schema to have the same behavior than in Oracle.
  * Minor grammatical fix to README.asciidoc
  * fix typo in charpad.c
  * fix typo in orafce--3.17.sql
  * Update Orafce_Documentation_05.md
  * Catch dbms_random.string() output variation on Windows</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675166401">- enable pg 15</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675166402">- remove pg 10 support</changelog>
  <changelog author="Emiliano Langella &lt;emiliano.langella@suse.com&gt;" date="1676030400">- Added "Name:" tag.</changelog>
</package>
<package pkgid="ef7f2fd386c33702dcfae60dad6601422ca619eb4244f61845e4211439a79533" name="postgresql14-orafce" arch="x86_64">
  <version epoch="0" ver="4.1.1+git0.519b5b5" rel="bp154.3.1"/>
  <changelog author="mrueckert@suse.de" date="1424347200">- update to 3.0.9
  * PostgreSQL 9.4 compilation
  * new datatype and related functions: oracle.date
  * new varchar2, nvarchar2 types and related functions
    (Amit Langote)
  * oracle.substr emulate better Oracle substr function behave
    (Vinayak Pokale)
  * fix few internal issues that breaks a PGXN tests (Pavel Stehule)</changelog>
  <changelog author="mrueckert@suse.de" date="1502366400">- switch to multibuild</changelog>
  <changelog author="mrueckert@suse.de" date="1502366401">- update to 3.4.0
  * new aggregate function wm_concat
  * PostgreSQL 9.6, 10 are supported well
  * remove support for 8.3, 8.4, 9.0, 9.1 (only 9.2 and higher
    are supported)
  * new functions: sysdate, sessiontimezone, dbtimezone
  * remove support for 8.2
  * add support for 9.5
  * change the releasion number system
  * new functions: to_single_byte, to_multi_byte, nanvl, length,
    ltrim, btrim, rtrim, lpad, rpad
  * fix compilation issue in new code for Pg &lt;= 9.1</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1540468800">- Add build for PostgreSQL 11 and drop 9.3.
- BuildRequire server-devel instead of devel.</changelog>
  <changelog author="mrueckert@suse.de" date="1540641600">- Update to version 3.6.1+git24.cf58d28:
  * remove strict flag for nvl functions
  * minor cleaning
  * remove pre 9.4 support
  * fixes for 12
  * fix compile on PostgreSQL 12
  * missing reset fsec in ora_timestamptz_round function
  * #74 - badly joined comment
  * #75 set correct type for trunc and round two params functions - float4
  * allow usage of schema oracle and plunit
  * copy paste correction intarray -&gt; orafce
  * fix broken compilation on non MSC platforms
  * fix output path
  * add postgresql 10.3 target support need ICU header by path c:\icu
  * fix conversion from 'size_t' to 'int'
  * add 9.6 build environments fix C89 compatible compliance
  * fix nensenses related yyllex, using older form of bison option
  * new function  oracle.numtodsinterval
  * disallow functions from utl_file package on MS Windows
  * clean headers used by msvc
  * cleaning complete build on msvc
  * add missing files for windows compilation
  * fix #64
  * dba_segments view, cleaning
  * Fix formatting of examples.
  * Append documentation about how to translate REGEXP_SUBSTR Oracle function to PostgreSQL.
  * fix the position of a half-width space added by rpad().
  * enhancing emulation of Oracle views
  * fix some segfaults reported by Andreas Seltenreich #59
  * new few Oracle system views
  * prepare for 3.6
  * Minor bug in doc
  * Avoid setting unused variable value
  * Fix issue #54 - missing collatable flag for string types varchar2, nvarchar2.
  * Ensure LWLockRegisterTranche call in every session before LWLockAcquire call.
  * Preparation for 3.5 release.
  * add missing V1 signatures
  * Add Orafce Documentation and Oracle to PostgreSQL Migration Guide
- drop patch orafce-orafce_sql_yyparse-bison26.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1571745600">- adding postgresql12 to _multibuild</changelog>
  <changelog author="mrueckert@suse.de" date="1571745601">- Update to version 3.8.0+git4.a65cfb8:
  * return back missing files
  * fresh parser files
  * master is now unreleased 3.9
  * minor enhancing user_constraints view - use conrelid::regclass instead table_name. This will be  consistent with index name, and show schema for tables that are not on search_path
  * prepare for 3.8
  * qualify decode function to be installable on greenplum
  * fix PostgreSQL 12 support
  * missing files
  * typo
  * fix compilation and regress tests for PostgreSQL 11
  * Revert "Merge pull request #83 from kato-sho/fix-build-for-PG12"
  * Fix build for PostgreSQL 12
  * remove extra #include utils/nabstime.h
  * update against change format of FunctionCallInfo in PostgreSQL 12
  * fix compilation for pre PostgreSQL 12
  * fix compile for PostgreSQL 12
  * prepare for 3.7.2
  * bug fix release
  * fix bad filter in oracle.user_tables view
  * update NEWS
  * use older syntax for create operator command
  * add warning about possible compatibility issue
  * fix docs
  * null safe pipe operator for (n)varchar2 should be explicitly enabled (due compatibility)
  * bugfix should to use OR REPLACE clause
  * add bugfixes to update script
  * fix readme
  * more faster (n)varchar2 null safe concat
  * null safe concat operator for varchar2 and nvarchar2
  * fix compilation for PostgreSQL 12
  * target type should be qualified
  * broken formula for add_month
  * fix broken oracle.add_months for last day in month
  * fix comment assigned to wrong object
  * minor doc nvl</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273600">- remove dead PG versions</changelog>
  <changelog author="mrueckert@suse.de" date="1638273601">- Update to version 3.17.0+git12.e9ab8a3:
  * Fix some typos in plunit.c and plvdate.c.
  * Fix a non-standard function declaration.
  * pg_nextpower2_32 is available for pg13+|
  * fix typo in plvdate.c
  * fix typo in alert.c
  * Improve the place that double the size of a buffer
  * Fix access privileges of utl_file.tmpdir()
  * prepare for 3.17.0
  * This patch reproduce the same behavior of the regexp_* function with null input.
  * Fix version number in install script.
  * Remove duplicate variable declarations
  * Allow even longer runtimes in DBMS_UTILITY.GET_TIME test
  * prepare for 3.16.2
  * fix build for msvc
  * prepare for 3.16.1
  * sql/dbms_utility.sql: Allow longer test runtime
  * fix some shared memory leaks, reduce an possibility to raise an error 'lock requested error' by cleaning locks (these locks are not Postgres's locks) in dbms_alert_removeall and by triggering cleaning shared memory from locks related to closed processes when there are not free locks - per #PR 140 reported by @rbapin
  * prepare for 3.16.0
  * rename pipe type to orafce_pipe due conflict with pipe function from unistd.h
  * ensure public access to public schema
  * add missing sql file for 3.16
  * Add DBMS_UTILITY.GET_TIME function, it returns the current time in 100th's of a second from a point in time in the past. This function is used for determining elapsed time. This function is widely used in some Oracle installation for timing of functions or statements.
  * fix warning on MSVC
  * prepare for 3.15.1
  * Remove reference to pg_enc2name_tbl variable. It is not available on MSVC, and for this functionality it is not necessary
  * prepare for 3.15.0
  * function regexp_match cannot be used because it is available from Postgres 10
  * Add Oracle regexp_replace() function which supports start position and occurrence. It correspond to the Oracle behavior and consist in plpgsql functions based on PG regexp_matches() and regexp_replace(). All details of the implementation is explained in the documentation. Also include in this patch also include regression tests for regexp_replace() including the Oracle queries and results in comment.
  * just reformatting
  * just reformatting
  * Remove wrong and unused code.
  * Apply orafce rule for assignment on remaining call to position() and length.
  * Use better style for assignment instead of pseudo query.
  * - Improve performances by replacing SELECT ... INTO syntax with := - Replace call to regexp_match() by regexp_matches() to support   PostgreSQL 9.5 and 9.6. - Remove obsolete orafce--3.14.sql file - Update regression test to disable CONTEXT trace.
  * Add Oracle regexp_like(), regexp_count(), regexp_instr() and regexp_substr() functions. They correspond to the Oracle behavior and consist in plpgsql functions based on PG regexp_matches(). All details of the implementation is explained in the documentation. This patch also include a regression test regexp_func.sql including the Oracle queries and results in comment.
  * more ilustrative description of msvc project properties
  * Oracle.sysdate uses time zone stored in GUC orafce.timezone. The setting of configuration value was correct - the global variable orafce_timezone has correct content (it can be checked by SELECT oracle.dbtimezone(). But direct output of this GUC (show orafce.timezone) was broken because the handler of system timezone was used and the statement "show orafce.timezone" did same output like "show timezone", and it is surely wrong.
  * pre 3.14 changes
  * When nvarchar2 and varchar2 was introduced, then was not possibility to correctly set protransform column. Orafce used UPDATE of pg_proc table. Unfortunatelly, this new dependency was not coverget by entry in pg_depend. Today this issue breaks binary upgrade. Fix is simple - on new Postgres it uses ALTER FUNCTION SUPPORT, for older releases it tries to fix pg_depend table.
  * implementation of unistr function
  * Added ppc64le architecture
  * Added some transactions behavior differences
  * Catch dbms_random.string() output variation on big-endian
  * Fix the wrong filter in oracle.user_tables view in orafce--3.6--3.7.sql.
  * Update README.asciidoc
  * Update others.c
  * Use correct macros to convert between Datums and pointers.
  * note in readme
  * prepare for 3.13.4
  * forgotten files
  * prepare for 3.13.3
  * enable utf_file on MSWin
  * cleaning build on MSWin
  * reduce stack size
  * minor cleaning
  * prepare for 3.12
  * fix warning for postgres 13
  * fix asciidoc format
  * minor README fix
  * travis status
  * PostgreSQL 9.4 is not supported
  * example to trigger func
  * fix build and tests for older releases
  * trigger functions - ensure so only null or only empty string is used
  * fix: 'if' condition is always true
  * prepare for 3.11.1
  * missing test output file
  * only PostgreSQL 9.4 and higher are supported
  * Run the testsuite on travis-ci.org
  * clean warnings detected by -Wextra
  * forgot. GRANT
  * The previous securing of utl_file package required SECURITY DEFINER flags on functions. Using this flag is security risk. Insted using SECURITY DEFINER we allow READ from utl_file.utl_file_dir to PUBLIC. This design has one advantage - the final user can control usage of these function with granting user rights just only on table utl_file.utl_file_dir.
  * Update README.asciidoc
  * Update README.asciidoc
  * Update README.asciidoc
  * Update README.asciidoc
  * fix long standing bug - function with access to utl_file_dir should to has security definer flag
  * fix compilation against Postgres 13
  * small fixes and rewrite of utl_file paragraph
  * the safe dictionary in utl_file package can be identified by name too
  * Fix doc and comment about months_between returning numeric (not float8).
  * there are some differences between Oracle and Orafce
  * fix compilation on PostgreSQL 13 (by removing useless include), fix to_multi_byte('\')
  * prepare for 3.9.0
  * remove extra clean to allow repeateable build without bison
  * Orafce is licenced under 0-clause BSD licence
  * polishing licence
  * use postgres routines for printing float4, float8 values in to_char function (reduce garbage and trailing zeroes)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273602">- enable pg 13 and 14</changelog>
  <changelog author="mrueckert@suse.de" date="1675166400">- Update to version 4.1.1+git0.519b5b5:
  * prepare for 4.1.1
  * build on master (16) branch
  * use adv lock to synchronize start of pipe and alert tests
  * add connect by level &lt; num in migration docs
  * Hierarchical Query identifys the leaves
  * Update the connect_by_root example, for better semantics
  * fix: CONNECT_BY_ROOT in hierarchical query is converted to WITH RECURSIVE syntax
  * the table [200~utl_file.utl_file_dir is dumpable
  * fix compilation against pg master
  * prepare for 4.0.2
  * fix -wextra warnings
  * fix shadowed variable varning
  * fix msvc build for PostgreSQL 14
  * fix build for pg16
  * fix META file and prepare for 4.0.1
  * to_multi_byte and to_single_byte support euc_cn(gb2312)
  * add  oracle sql migration : CONNECT_BY_ROOT
  * fix oracle connect by
  * prepare for 4.0.0 release
  * remove obsolete ref on orafce_sql
  * rename shadow variable
  * initial merge of dbms_sql from orafce_sql
  * other cleaning after removing support for unsupported pg releases
  * increase version
  * remove support for PostgreSQL 10 and older
  * Fix database creation during installchecks for ICU cluster
  * fix dbms_output.serveroutput(true) clear the buffer.It conforms to the features of oracle.
  * prepare for 3.25.1
  * fix calculation of plvstr.is_prefix for negative numeric values - see issue #198
  * fix for pre 14 releases
  * doc and regress tests
  * remove useless func decl
  * support for older releases
  * initial implementation
  * initial
  * fix build against master (16) branch
  * wrap possible unsupported DDL to dynamic SQL
  * specify schema inside definition function tanh
  * only set editorconfig
  * prepare for 3.24.4
  * remove redundant ALTER FUNCTION #191
  * prepare for 3.24.3
  * PostgreSQL older than 12 doesn't allow ALTER FUNCTION pg_catalog.x SET SCHEMA oracle. Only dirty way by direct modification of system catalogue is possible. see issue #190
  * prepare for 3.24.2
  * fix missing oracle.mod functions in update scripts
  * prepare for 3.24.1
  * fix regress nlssort test for PostgreSQL 9.5 without \if command
  * Fix race condition during initialization in ora_lock_shmem.
  * nlssort: Add a missing call to PG_RE_THROW.
  * Limit nlssort test to Linux/glibc systems with en_US.utf8 installed.
  * NEWS
  * set storage for varchar2 and nvarchar2 to extended strategy
  * prepare for 3.23
  * fix broken calculation in plvdate_isleapyear function #184
  * fix support for pg9.5, fix regress tests for older releases
  * prepare for 3.22.1
  * Fix read past the end of string in to_sigle_byte().
  * Fix dbms_utility.get_time() to use the full range of int32.
  * fix readme
  * prepare for 3.22.0
  * move dbobjects from public and pg_catalog schemas to oracle schema
  * moving objects from public and pg_catalog to oracle schema
  * move RequestAddinShmemSpace to shmem_request_hook for PostgreSQL 15
  * Update sql_migration06.md
  * Restore sqlparse.c and sqlparse.h
  * Undo comment
  * Add comment
  * Add Parallel safe to mod function
  * Bug fix
  * Add mod function for Oracle compatibility
  * Fix typos and spelling in docs and error messages
  * prepare for 3.21.1
  * fix mswin build - regexp functions was not really marked as dllexport due missing include of builtins.h
  * remove empty line
  * fix of some compatibility issues
  * REG_NOSUB is working only on PostgreSQL 15
  * workable release for PostgreSQL 15
  * modification for compotibility with orafce.regexp_instr
  * backport regexp_instr from PostgreSQL 15, use C version instead PLpgSQL for better possibilities of usage regexp API
  * prepare for 3.20.0
  * Fix regexp_instr() function with occurrence when the same value matching a pattern is found at several place in the string.
  * signature of nvl2 function is enhanced to "any", anyelement, anyelement. After this change, the behavior is more close to Oracle. Unfortunatelly - this change can break extension update for some customers that uses nvl2 in views.
  * support negative start argument for function substrb. Originally orafce used buildin bytea substr function. Now it recalculate start argument. see issue #172
  * prepare for 3.19
  * Allow empty string on input of functions to_number and to_date. In this case returns NULL.
  * remove white spaces
  * replace obsolete CSTRING macro by text_to_csring function
  * prepare for 3.18.1
  * fix - badly handled fn_extra in oracle.greatest(least) function
  * prepare for 3.18.0
  * Update README.asciidoc
  * Update README.asciidoc
  * use older API for iteration over an array. Now, oracle.greatest and oracle.least are working on all supported releases
  * remove negative tests related to orafce.greatest because: a) error message is different on supported pg versions, b) the coverage and benefit of these tests is low
  * remove two lines from regress tests of greatest due dependency on used collate
  * Add documentation for greatest and least functions.
  * Update upgrade extension file with the smallint addition.
  * Add greatest/least SQL redefinition for smallint Add regression tests fot the two functions.
  * Oracle functions LEAST and GREATEST return NULL if at least one of the parameters is NULL. This is not the case for the PostgreSQL equivalent functions which only return NULL when all the parameters are NULL. This patch creates the two functions in the oracle schema to have the same behavior than in Oracle.
  * Minor grammatical fix to README.asciidoc
  * fix typo in charpad.c
  * fix typo in orafce--3.17.sql
  * Update Orafce_Documentation_05.md
  * Catch dbms_random.string() output variation on Windows</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675166401">- enable pg 15</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675166402">- remove pg 10 support</changelog>
  <changelog author="Emiliano Langella &lt;emiliano.langella@suse.com&gt;" date="1676030400">- Added "Name:" tag.</changelog>
</package>
<package pkgid="853157df61abcaf8213b139d9f1b0e8bc62c29a1dffdc3b16170fa0ffae14129" name="postgresql14-timescaledb" arch="aarch64">
  <version epoch="0" ver="2.9.3" rel="bp154.2.3.1"/>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1588680000">- update to 1.7.0
  https://github.com/timescale/timescaledb/releases/tag/1.7.0</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1592395200">- update to version 1.7.1 bugfix
  https://github.com/timescale/timescaledb/releases/tag/1.7.1
  Please note that with the release of 1.7, support for PostgreSQL
  9.6.x and 10.x are deprecated. version 2 will only support 11,12
- Packaging :
  + Activate postgresql12 supported now
  + Modifiy download url to grab a nice named tar.gz</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1601035200">- update to version 1.7.4
  https://github.com/timescale/timescaledb/releases/tag/1.7.2
  https://github.com/timescale/timescaledb/releases/tag/1.7.3
  https://github.com/timescale/timescaledb/releases/tag/1.7.4</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1625054400">- Do not build postgresql96 flavor on Tumbleweed.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273600">- Update to version 2.5.0
  https://github.com/timescale/timescaledb/releases/tag/1.7.5
  https://github.com/timescale/timescaledb/releases/tag/2.0.0
  https://github.com/timescale/timescaledb/releases/tag/2.0.1
  https://github.com/timescale/timescaledb/releases/tag/2.0.2
  https://github.com/timescale/timescaledb/releases/tag/2.1.0
  https://github.com/timescale/timescaledb/releases/tag/2.1.1
  https://github.com/timescale/timescaledb/releases/tag/2.2.0
  https://github.com/timescale/timescaledb/releases/tag/2.2.1
  https://github.com/timescale/timescaledb/releases/tag/2.3.0
  https://github.com/timescale/timescaledb/releases/tag/2.3.1
  https://github.com/timescale/timescaledb/releases/tag/2.4.0
  https://github.com/timescale/timescaledb/releases/tag/2.4.1
  https://github.com/timescale/timescaledb/releases/tag/2.4.2
  https://github.com/timescale/timescaledb/releases/tag/2.5.0
- enable postgresql14
- port to postgresql macros
- refresh clang-format9_support.diff</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273601">- switch to %{pg_name}-server-devel</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1643371200">- Update to version 2.5.1
  https://github.com/timescale/timescaledb/releases/tag/2.5.1</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1644494400">- Update to version 2.5.2
  https://github.com/timescale/timescaledb/releases/tag/2.5.2</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1645617600">- Update to version 2.6.0
  https://github.com/timescale/timescaledb/releases/tag/2.6.0</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1647345600">- Added patch ab6b90caf.patch containing explicit mention of
  CVE-2022-24128 closing boo#1197063</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1649764800">- Update to version 2.6.1
  https://github.com/timescale/timescaledb/releases/tag/2.6.1
- refreshed patches:
  clang-format9_support.diff
  ab6b90caf.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1653393600">- Update to version 2.7.0
  https://github.com/timescale/timescaledb/releases/tag/2.7.0
- drop ab6b90caf.patch: included upstream</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1659268800">- Update to version 2.7.2
  https://github.com/timescale/timescaledb/releases/tag/2.7.1
  https://github.com/timescale/timescaledb/releases/tag/2.7.2</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1661947200">- Update to version 2.8.0
  https://github.com/timescale/timescaledb/releases/tag/2.8.0
- refreshed clang-format9_support.diff</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1665403200">- Update to version 2.8.1
  https://github.com/timescale/timescaledb/releases/tag/2.8.1</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1671537600">- Update to version 2.9.0
  https://github.com/timescale/timescaledb/releases/tag/2.9.0
- dropped clang-format9_support.diff:
  minimum required version is now 14</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1671883200">- Update to version 2.9.1
  https://github.com/timescale/timescaledb/releases/tag/2.9.1</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1674561600">- Update to version 2.9.2
  https://github.com/timescale/timescaledb/releases/tag/2.9.2</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675166400">- enable pg 15 build</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675684800">- Update to version 2.9.3
  https://github.com/timescale/timescaledb/releases/tag/2.9.3</changelog>
</package>
<package pkgid="5f9acf539d3feb9df8be8594d3d0686bb79827dfbb278214d39e8733ca5dbb81" name="postgresql14-timescaledb" arch="i586">
  <version epoch="0" ver="2.9.3" rel="bp154.2.3.1"/>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1588680000">- update to 1.7.0
  https://github.com/timescale/timescaledb/releases/tag/1.7.0</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1592395200">- update to version 1.7.1 bugfix
  https://github.com/timescale/timescaledb/releases/tag/1.7.1
  Please note that with the release of 1.7, support for PostgreSQL
  9.6.x and 10.x are deprecated. version 2 will only support 11,12
- Packaging :
  + Activate postgresql12 supported now
  + Modifiy download url to grab a nice named tar.gz</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1601035200">- update to version 1.7.4
  https://github.com/timescale/timescaledb/releases/tag/1.7.2
  https://github.com/timescale/timescaledb/releases/tag/1.7.3
  https://github.com/timescale/timescaledb/releases/tag/1.7.4</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1625054400">- Do not build postgresql96 flavor on Tumbleweed.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273600">- Update to version 2.5.0
  https://github.com/timescale/timescaledb/releases/tag/1.7.5
  https://github.com/timescale/timescaledb/releases/tag/2.0.0
  https://github.com/timescale/timescaledb/releases/tag/2.0.1
  https://github.com/timescale/timescaledb/releases/tag/2.0.2
  https://github.com/timescale/timescaledb/releases/tag/2.1.0
  https://github.com/timescale/timescaledb/releases/tag/2.1.1
  https://github.com/timescale/timescaledb/releases/tag/2.2.0
  https://github.com/timescale/timescaledb/releases/tag/2.2.1
  https://github.com/timescale/timescaledb/releases/tag/2.3.0
  https://github.com/timescale/timescaledb/releases/tag/2.3.1
  https://github.com/timescale/timescaledb/releases/tag/2.4.0
  https://github.com/timescale/timescaledb/releases/tag/2.4.1
  https://github.com/timescale/timescaledb/releases/tag/2.4.2
  https://github.com/timescale/timescaledb/releases/tag/2.5.0
- enable postgresql14
- port to postgresql macros
- refresh clang-format9_support.diff</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273601">- switch to %{pg_name}-server-devel</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1643371200">- Update to version 2.5.1
  https://github.com/timescale/timescaledb/releases/tag/2.5.1</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1644494400">- Update to version 2.5.2
  https://github.com/timescale/timescaledb/releases/tag/2.5.2</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1645617600">- Update to version 2.6.0
  https://github.com/timescale/timescaledb/releases/tag/2.6.0</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1647345600">- Added patch ab6b90caf.patch containing explicit mention of
  CVE-2022-24128 closing boo#1197063</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1649764800">- Update to version 2.6.1
  https://github.com/timescale/timescaledb/releases/tag/2.6.1
- refreshed patches:
  clang-format9_support.diff
  ab6b90caf.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1653393600">- Update to version 2.7.0
  https://github.com/timescale/timescaledb/releases/tag/2.7.0
- drop ab6b90caf.patch: included upstream</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1659268800">- Update to version 2.7.2
  https://github.com/timescale/timescaledb/releases/tag/2.7.1
  https://github.com/timescale/timescaledb/releases/tag/2.7.2</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1661947200">- Update to version 2.8.0
  https://github.com/timescale/timescaledb/releases/tag/2.8.0
- refreshed clang-format9_support.diff</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1665403200">- Update to version 2.8.1
  https://github.com/timescale/timescaledb/releases/tag/2.8.1</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1671537600">- Update to version 2.9.0
  https://github.com/timescale/timescaledb/releases/tag/2.9.0
- dropped clang-format9_support.diff:
  minimum required version is now 14</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1671883200">- Update to version 2.9.1
  https://github.com/timescale/timescaledb/releases/tag/2.9.1</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1674561600">- Update to version 2.9.2
  https://github.com/timescale/timescaledb/releases/tag/2.9.2</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675166400">- enable pg 15 build</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675684800">- Update to version 2.9.3
  https://github.com/timescale/timescaledb/releases/tag/2.9.3</changelog>
</package>
<package pkgid="7705fba48cb6313a8c800402afe6075da2640507de733291ab7fc2d18f22cd59" name="postgresql14-timescaledb" arch="ppc64le">
  <version epoch="0" ver="2.9.3" rel="bp154.2.3.1"/>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1588680000">- update to 1.7.0
  https://github.com/timescale/timescaledb/releases/tag/1.7.0</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1592395200">- update to version 1.7.1 bugfix
  https://github.com/timescale/timescaledb/releases/tag/1.7.1
  Please note that with the release of 1.7, support for PostgreSQL
  9.6.x and 10.x are deprecated. version 2 will only support 11,12
- Packaging :
  + Activate postgresql12 supported now
  + Modifiy download url to grab a nice named tar.gz</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1601035200">- update to version 1.7.4
  https://github.com/timescale/timescaledb/releases/tag/1.7.2
  https://github.com/timescale/timescaledb/releases/tag/1.7.3
  https://github.com/timescale/timescaledb/releases/tag/1.7.4</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1625054400">- Do not build postgresql96 flavor on Tumbleweed.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273600">- Update to version 2.5.0
  https://github.com/timescale/timescaledb/releases/tag/1.7.5
  https://github.com/timescale/timescaledb/releases/tag/2.0.0
  https://github.com/timescale/timescaledb/releases/tag/2.0.1
  https://github.com/timescale/timescaledb/releases/tag/2.0.2
  https://github.com/timescale/timescaledb/releases/tag/2.1.0
  https://github.com/timescale/timescaledb/releases/tag/2.1.1
  https://github.com/timescale/timescaledb/releases/tag/2.2.0
  https://github.com/timescale/timescaledb/releases/tag/2.2.1
  https://github.com/timescale/timescaledb/releases/tag/2.3.0
  https://github.com/timescale/timescaledb/releases/tag/2.3.1
  https://github.com/timescale/timescaledb/releases/tag/2.4.0
  https://github.com/timescale/timescaledb/releases/tag/2.4.1
  https://github.com/timescale/timescaledb/releases/tag/2.4.2
  https://github.com/timescale/timescaledb/releases/tag/2.5.0
- enable postgresql14
- port to postgresql macros
- refresh clang-format9_support.diff</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273601">- switch to %{pg_name}-server-devel</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1643371200">- Update to version 2.5.1
  https://github.com/timescale/timescaledb/releases/tag/2.5.1</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1644494400">- Update to version 2.5.2
  https://github.com/timescale/timescaledb/releases/tag/2.5.2</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1645617600">- Update to version 2.6.0
  https://github.com/timescale/timescaledb/releases/tag/2.6.0</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1647345600">- Added patch ab6b90caf.patch containing explicit mention of
  CVE-2022-24128 closing boo#1197063</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1649764800">- Update to version 2.6.1
  https://github.com/timescale/timescaledb/releases/tag/2.6.1
- refreshed patches:
  clang-format9_support.diff
  ab6b90caf.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1653393600">- Update to version 2.7.0
  https://github.com/timescale/timescaledb/releases/tag/2.7.0
- drop ab6b90caf.patch: included upstream</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1659268800">- Update to version 2.7.2
  https://github.com/timescale/timescaledb/releases/tag/2.7.1
  https://github.com/timescale/timescaledb/releases/tag/2.7.2</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1661947200">- Update to version 2.8.0
  https://github.com/timescale/timescaledb/releases/tag/2.8.0
- refreshed clang-format9_support.diff</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1665403200">- Update to version 2.8.1
  https://github.com/timescale/timescaledb/releases/tag/2.8.1</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1671537600">- Update to version 2.9.0
  https://github.com/timescale/timescaledb/releases/tag/2.9.0
- dropped clang-format9_support.diff:
  minimum required version is now 14</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1671883200">- Update to version 2.9.1
  https://github.com/timescale/timescaledb/releases/tag/2.9.1</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1674561600">- Update to version 2.9.2
  https://github.com/timescale/timescaledb/releases/tag/2.9.2</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675166400">- enable pg 15 build</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675684800">- Update to version 2.9.3
  https://github.com/timescale/timescaledb/releases/tag/2.9.3</changelog>
</package>
<package pkgid="e202083b242dd37fbc22aa5d22a1e9e46cfb00eeb2d1f19a465b8cffe472ae53" name="postgresql14-timescaledb" arch="s390x">
  <version epoch="0" ver="2.9.3" rel="bp154.2.3.1"/>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1588680000">- update to 1.7.0
  https://github.com/timescale/timescaledb/releases/tag/1.7.0</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1592395200">- update to version 1.7.1 bugfix
  https://github.com/timescale/timescaledb/releases/tag/1.7.1
  Please note that with the release of 1.7, support for PostgreSQL
  9.6.x and 10.x are deprecated. version 2 will only support 11,12
- Packaging :
  + Activate postgresql12 supported now
  + Modifiy download url to grab a nice named tar.gz</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1601035200">- update to version 1.7.4
  https://github.com/timescale/timescaledb/releases/tag/1.7.2
  https://github.com/timescale/timescaledb/releases/tag/1.7.3
  https://github.com/timescale/timescaledb/releases/tag/1.7.4</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1625054400">- Do not build postgresql96 flavor on Tumbleweed.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273600">- Update to version 2.5.0
  https://github.com/timescale/timescaledb/releases/tag/1.7.5
  https://github.com/timescale/timescaledb/releases/tag/2.0.0
  https://github.com/timescale/timescaledb/releases/tag/2.0.1
  https://github.com/timescale/timescaledb/releases/tag/2.0.2
  https://github.com/timescale/timescaledb/releases/tag/2.1.0
  https://github.com/timescale/timescaledb/releases/tag/2.1.1
  https://github.com/timescale/timescaledb/releases/tag/2.2.0
  https://github.com/timescale/timescaledb/releases/tag/2.2.1
  https://github.com/timescale/timescaledb/releases/tag/2.3.0
  https://github.com/timescale/timescaledb/releases/tag/2.3.1
  https://github.com/timescale/timescaledb/releases/tag/2.4.0
  https://github.com/timescale/timescaledb/releases/tag/2.4.1
  https://github.com/timescale/timescaledb/releases/tag/2.4.2
  https://github.com/timescale/timescaledb/releases/tag/2.5.0
- enable postgresql14
- port to postgresql macros
- refresh clang-format9_support.diff</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273601">- switch to %{pg_name}-server-devel</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1643371200">- Update to version 2.5.1
  https://github.com/timescale/timescaledb/releases/tag/2.5.1</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1644494400">- Update to version 2.5.2
  https://github.com/timescale/timescaledb/releases/tag/2.5.2</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1645617600">- Update to version 2.6.0
  https://github.com/timescale/timescaledb/releases/tag/2.6.0</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1647345600">- Added patch ab6b90caf.patch containing explicit mention of
  CVE-2022-24128 closing boo#1197063</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1649764800">- Update to version 2.6.1
  https://github.com/timescale/timescaledb/releases/tag/2.6.1
- refreshed patches:
  clang-format9_support.diff
  ab6b90caf.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1653393600">- Update to version 2.7.0
  https://github.com/timescale/timescaledb/releases/tag/2.7.0
- drop ab6b90caf.patch: included upstream</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1659268800">- Update to version 2.7.2
  https://github.com/timescale/timescaledb/releases/tag/2.7.1
  https://github.com/timescale/timescaledb/releases/tag/2.7.2</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1661947200">- Update to version 2.8.0
  https://github.com/timescale/timescaledb/releases/tag/2.8.0
- refreshed clang-format9_support.diff</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1665403200">- Update to version 2.8.1
  https://github.com/timescale/timescaledb/releases/tag/2.8.1</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1671537600">- Update to version 2.9.0
  https://github.com/timescale/timescaledb/releases/tag/2.9.0
- dropped clang-format9_support.diff:
  minimum required version is now 14</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1671883200">- Update to version 2.9.1
  https://github.com/timescale/timescaledb/releases/tag/2.9.1</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1674561600">- Update to version 2.9.2
  https://github.com/timescale/timescaledb/releases/tag/2.9.2</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675166400">- enable pg 15 build</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675684800">- Update to version 2.9.3
  https://github.com/timescale/timescaledb/releases/tag/2.9.3</changelog>
</package>
<package pkgid="cc55ee7ebc5560d17271c2dafea643e99cd7f081b7c42b2a1ca28514acf475de" name="postgresql14-timescaledb" arch="src">
  <version epoch="0" ver="2.9.3" rel="bp154.2.3.1"/>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1588680000">- update to 1.7.0
  https://github.com/timescale/timescaledb/releases/tag/1.7.0</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1592395200">- update to version 1.7.1 bugfix
  https://github.com/timescale/timescaledb/releases/tag/1.7.1
  Please note that with the release of 1.7, support for PostgreSQL
  9.6.x and 10.x are deprecated. version 2 will only support 11,12
- Packaging :
  + Activate postgresql12 supported now
  + Modifiy download url to grab a nice named tar.gz</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1601035200">- update to version 1.7.4
  https://github.com/timescale/timescaledb/releases/tag/1.7.2
  https://github.com/timescale/timescaledb/releases/tag/1.7.3
  https://github.com/timescale/timescaledb/releases/tag/1.7.4</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1625054400">- Do not build postgresql96 flavor on Tumbleweed.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273600">- Update to version 2.5.0
  https://github.com/timescale/timescaledb/releases/tag/1.7.5
  https://github.com/timescale/timescaledb/releases/tag/2.0.0
  https://github.com/timescale/timescaledb/releases/tag/2.0.1
  https://github.com/timescale/timescaledb/releases/tag/2.0.2
  https://github.com/timescale/timescaledb/releases/tag/2.1.0
  https://github.com/timescale/timescaledb/releases/tag/2.1.1
  https://github.com/timescale/timescaledb/releases/tag/2.2.0
  https://github.com/timescale/timescaledb/releases/tag/2.2.1
  https://github.com/timescale/timescaledb/releases/tag/2.3.0
  https://github.com/timescale/timescaledb/releases/tag/2.3.1
  https://github.com/timescale/timescaledb/releases/tag/2.4.0
  https://github.com/timescale/timescaledb/releases/tag/2.4.1
  https://github.com/timescale/timescaledb/releases/tag/2.4.2
  https://github.com/timescale/timescaledb/releases/tag/2.5.0
- enable postgresql14
- port to postgresql macros
- refresh clang-format9_support.diff</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273601">- switch to %{pg_name}-server-devel</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1643371200">- Update to version 2.5.1
  https://github.com/timescale/timescaledb/releases/tag/2.5.1</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1644494400">- Update to version 2.5.2
  https://github.com/timescale/timescaledb/releases/tag/2.5.2</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1645617600">- Update to version 2.6.0
  https://github.com/timescale/timescaledb/releases/tag/2.6.0</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1647345600">- Added patch ab6b90caf.patch containing explicit mention of
  CVE-2022-24128 closing boo#1197063</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1649764800">- Update to version 2.6.1
  https://github.com/timescale/timescaledb/releases/tag/2.6.1
- refreshed patches:
  clang-format9_support.diff
  ab6b90caf.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1653393600">- Update to version 2.7.0
  https://github.com/timescale/timescaledb/releases/tag/2.7.0
- drop ab6b90caf.patch: included upstream</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1659268800">- Update to version 2.7.2
  https://github.com/timescale/timescaledb/releases/tag/2.7.1
  https://github.com/timescale/timescaledb/releases/tag/2.7.2</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1661947200">- Update to version 2.8.0
  https://github.com/timescale/timescaledb/releases/tag/2.8.0
- refreshed clang-format9_support.diff</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1665403200">- Update to version 2.8.1
  https://github.com/timescale/timescaledb/releases/tag/2.8.1</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1671537600">- Update to version 2.9.0
  https://github.com/timescale/timescaledb/releases/tag/2.9.0
- dropped clang-format9_support.diff:
  minimum required version is now 14</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1671883200">- Update to version 2.9.1
  https://github.com/timescale/timescaledb/releases/tag/2.9.1</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1674561600">- Update to version 2.9.2
  https://github.com/timescale/timescaledb/releases/tag/2.9.2</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675166400">- enable pg 15 build</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675684800">- Update to version 2.9.3
  https://github.com/timescale/timescaledb/releases/tag/2.9.3</changelog>
</package>
<package pkgid="2e1b6d2149dbea9efb43cffcdca918cbff0c76e88384706b9e388a094560f036" name="postgresql14-timescaledb" arch="x86_64">
  <version epoch="0" ver="2.9.3" rel="bp154.2.3.1"/>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1588680000">- update to 1.7.0
  https://github.com/timescale/timescaledb/releases/tag/1.7.0</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1592395200">- update to version 1.7.1 bugfix
  https://github.com/timescale/timescaledb/releases/tag/1.7.1
  Please note that with the release of 1.7, support for PostgreSQL
  9.6.x and 10.x are deprecated. version 2 will only support 11,12
- Packaging :
  + Activate postgresql12 supported now
  + Modifiy download url to grab a nice named tar.gz</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1601035200">- update to version 1.7.4
  https://github.com/timescale/timescaledb/releases/tag/1.7.2
  https://github.com/timescale/timescaledb/releases/tag/1.7.3
  https://github.com/timescale/timescaledb/releases/tag/1.7.4</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1625054400">- Do not build postgresql96 flavor on Tumbleweed.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273600">- Update to version 2.5.0
  https://github.com/timescale/timescaledb/releases/tag/1.7.5
  https://github.com/timescale/timescaledb/releases/tag/2.0.0
  https://github.com/timescale/timescaledb/releases/tag/2.0.1
  https://github.com/timescale/timescaledb/releases/tag/2.0.2
  https://github.com/timescale/timescaledb/releases/tag/2.1.0
  https://github.com/timescale/timescaledb/releases/tag/2.1.1
  https://github.com/timescale/timescaledb/releases/tag/2.2.0
  https://github.com/timescale/timescaledb/releases/tag/2.2.1
  https://github.com/timescale/timescaledb/releases/tag/2.3.0
  https://github.com/timescale/timescaledb/releases/tag/2.3.1
  https://github.com/timescale/timescaledb/releases/tag/2.4.0
  https://github.com/timescale/timescaledb/releases/tag/2.4.1
  https://github.com/timescale/timescaledb/releases/tag/2.4.2
  https://github.com/timescale/timescaledb/releases/tag/2.5.0
- enable postgresql14
- port to postgresql macros
- refresh clang-format9_support.diff</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273601">- switch to %{pg_name}-server-devel</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1643371200">- Update to version 2.5.1
  https://github.com/timescale/timescaledb/releases/tag/2.5.1</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1644494400">- Update to version 2.5.2
  https://github.com/timescale/timescaledb/releases/tag/2.5.2</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1645617600">- Update to version 2.6.0
  https://github.com/timescale/timescaledb/releases/tag/2.6.0</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1647345600">- Added patch ab6b90caf.patch containing explicit mention of
  CVE-2022-24128 closing boo#1197063</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1649764800">- Update to version 2.6.1
  https://github.com/timescale/timescaledb/releases/tag/2.6.1
- refreshed patches:
  clang-format9_support.diff
  ab6b90caf.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1653393600">- Update to version 2.7.0
  https://github.com/timescale/timescaledb/releases/tag/2.7.0
- drop ab6b90caf.patch: included upstream</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1659268800">- Update to version 2.7.2
  https://github.com/timescale/timescaledb/releases/tag/2.7.1
  https://github.com/timescale/timescaledb/releases/tag/2.7.2</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1661947200">- Update to version 2.8.0
  https://github.com/timescale/timescaledb/releases/tag/2.8.0
- refreshed clang-format9_support.diff</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1665403200">- Update to version 2.8.1
  https://github.com/timescale/timescaledb/releases/tag/2.8.1</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1671537600">- Update to version 2.9.0
  https://github.com/timescale/timescaledb/releases/tag/2.9.0
- dropped clang-format9_support.diff:
  minimum required version is now 14</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1671883200">- Update to version 2.9.1
  https://github.com/timescale/timescaledb/releases/tag/2.9.1</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1674561600">- Update to version 2.9.2
  https://github.com/timescale/timescaledb/releases/tag/2.9.2</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675166400">- enable pg 15 build</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675684800">- Update to version 2.9.3
  https://github.com/timescale/timescaledb/releases/tag/2.9.3</changelog>
</package>
<package pkgid="d2a4a5938c3713b61c991867bffdcb3a744f49872dfa4b4f5f28bcf2c171dce3" name="postgresql15-orafce" arch="aarch64">
  <version epoch="0" ver="4.1.1+git0.519b5b5" rel="bp154.3.1"/>
  <changelog author="mrueckert@suse.de" date="1424347200">- update to 3.0.9
  * PostgreSQL 9.4 compilation
  * new datatype and related functions: oracle.date
  * new varchar2, nvarchar2 types and related functions
    (Amit Langote)
  * oracle.substr emulate better Oracle substr function behave
    (Vinayak Pokale)
  * fix few internal issues that breaks a PGXN tests (Pavel Stehule)</changelog>
  <changelog author="mrueckert@suse.de" date="1502366400">- switch to multibuild</changelog>
  <changelog author="mrueckert@suse.de" date="1502366401">- update to 3.4.0
  * new aggregate function wm_concat
  * PostgreSQL 9.6, 10 are supported well
  * remove support for 8.3, 8.4, 9.0, 9.1 (only 9.2 and higher
    are supported)
  * new functions: sysdate, sessiontimezone, dbtimezone
  * remove support for 8.2
  * add support for 9.5
  * change the releasion number system
  * new functions: to_single_byte, to_multi_byte, nanvl, length,
    ltrim, btrim, rtrim, lpad, rpad
  * fix compilation issue in new code for Pg &lt;= 9.1</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1540468800">- Add build for PostgreSQL 11 and drop 9.3.
- BuildRequire server-devel instead of devel.</changelog>
  <changelog author="mrueckert@suse.de" date="1540641600">- Update to version 3.6.1+git24.cf58d28:
  * remove strict flag for nvl functions
  * minor cleaning
  * remove pre 9.4 support
  * fixes for 12
  * fix compile on PostgreSQL 12
  * missing reset fsec in ora_timestamptz_round function
  * #74 - badly joined comment
  * #75 set correct type for trunc and round two params functions - float4
  * allow usage of schema oracle and plunit
  * copy paste correction intarray -&gt; orafce
  * fix broken compilation on non MSC platforms
  * fix output path
  * add postgresql 10.3 target support need ICU header by path c:\icu
  * fix conversion from 'size_t' to 'int'
  * add 9.6 build environments fix C89 compatible compliance
  * fix nensenses related yyllex, using older form of bison option
  * new function  oracle.numtodsinterval
  * disallow functions from utl_file package on MS Windows
  * clean headers used by msvc
  * cleaning complete build on msvc
  * add missing files for windows compilation
  * fix #64
  * dba_segments view, cleaning
  * Fix formatting of examples.
  * Append documentation about how to translate REGEXP_SUBSTR Oracle function to PostgreSQL.
  * fix the position of a half-width space added by rpad().
  * enhancing emulation of Oracle views
  * fix some segfaults reported by Andreas Seltenreich #59
  * new few Oracle system views
  * prepare for 3.6
  * Minor bug in doc
  * Avoid setting unused variable value
  * Fix issue #54 - missing collatable flag for string types varchar2, nvarchar2.
  * Ensure LWLockRegisterTranche call in every session before LWLockAcquire call.
  * Preparation for 3.5 release.
  * add missing V1 signatures
  * Add Orafce Documentation and Oracle to PostgreSQL Migration Guide
- drop patch orafce-orafce_sql_yyparse-bison26.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1571745600">- adding postgresql12 to _multibuild</changelog>
  <changelog author="mrueckert@suse.de" date="1571745601">- Update to version 3.8.0+git4.a65cfb8:
  * return back missing files
  * fresh parser files
  * master is now unreleased 3.9
  * minor enhancing user_constraints view - use conrelid::regclass instead table_name. This will be  consistent with index name, and show schema for tables that are not on search_path
  * prepare for 3.8
  * qualify decode function to be installable on greenplum
  * fix PostgreSQL 12 support
  * missing files
  * typo
  * fix compilation and regress tests for PostgreSQL 11
  * Revert "Merge pull request #83 from kato-sho/fix-build-for-PG12"
  * Fix build for PostgreSQL 12
  * remove extra #include utils/nabstime.h
  * update against change format of FunctionCallInfo in PostgreSQL 12
  * fix compilation for pre PostgreSQL 12
  * fix compile for PostgreSQL 12
  * prepare for 3.7.2
  * bug fix release
  * fix bad filter in oracle.user_tables view
  * update NEWS
  * use older syntax for create operator command
  * add warning about possible compatibility issue
  * fix docs
  * null safe pipe operator for (n)varchar2 should be explicitly enabled (due compatibility)
  * bugfix should to use OR REPLACE clause
  * add bugfixes to update script
  * fix readme
  * more faster (n)varchar2 null safe concat
  * null safe concat operator for varchar2 and nvarchar2
  * fix compilation for PostgreSQL 12
  * target type should be qualified
  * broken formula for add_month
  * fix broken oracle.add_months for last day in month
  * fix comment assigned to wrong object
  * minor doc nvl</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273600">- remove dead PG versions</changelog>
  <changelog author="mrueckert@suse.de" date="1638273601">- Update to version 3.17.0+git12.e9ab8a3:
  * Fix some typos in plunit.c and plvdate.c.
  * Fix a non-standard function declaration.
  * pg_nextpower2_32 is available for pg13+|
  * fix typo in plvdate.c
  * fix typo in alert.c
  * Improve the place that double the size of a buffer
  * Fix access privileges of utl_file.tmpdir()
  * prepare for 3.17.0
  * This patch reproduce the same behavior of the regexp_* function with null input.
  * Fix version number in install script.
  * Remove duplicate variable declarations
  * Allow even longer runtimes in DBMS_UTILITY.GET_TIME test
  * prepare for 3.16.2
  * fix build for msvc
  * prepare for 3.16.1
  * sql/dbms_utility.sql: Allow longer test runtime
  * fix some shared memory leaks, reduce an possibility to raise an error 'lock requested error' by cleaning locks (these locks are not Postgres's locks) in dbms_alert_removeall and by triggering cleaning shared memory from locks related to closed processes when there are not free locks - per #PR 140 reported by @rbapin
  * prepare for 3.16.0
  * rename pipe type to orafce_pipe due conflict with pipe function from unistd.h
  * ensure public access to public schema
  * add missing sql file for 3.16
  * Add DBMS_UTILITY.GET_TIME function, it returns the current time in 100th's of a second from a point in time in the past. This function is used for determining elapsed time. This function is widely used in some Oracle installation for timing of functions or statements.
  * fix warning on MSVC
  * prepare for 3.15.1
  * Remove reference to pg_enc2name_tbl variable. It is not available on MSVC, and for this functionality it is not necessary
  * prepare for 3.15.0
  * function regexp_match cannot be used because it is available from Postgres 10
  * Add Oracle regexp_replace() function which supports start position and occurrence. It correspond to the Oracle behavior and consist in plpgsql functions based on PG regexp_matches() and regexp_replace(). All details of the implementation is explained in the documentation. Also include in this patch also include regression tests for regexp_replace() including the Oracle queries and results in comment.
  * just reformatting
  * just reformatting
  * Remove wrong and unused code.
  * Apply orafce rule for assignment on remaining call to position() and length.
  * Use better style for assignment instead of pseudo query.
  * - Improve performances by replacing SELECT ... INTO syntax with := - Replace call to regexp_match() by regexp_matches() to support   PostgreSQL 9.5 and 9.6. - Remove obsolete orafce--3.14.sql file - Update regression test to disable CONTEXT trace.
  * Add Oracle regexp_like(), regexp_count(), regexp_instr() and regexp_substr() functions. They correspond to the Oracle behavior and consist in plpgsql functions based on PG regexp_matches(). All details of the implementation is explained in the documentation. This patch also include a regression test regexp_func.sql including the Oracle queries and results in comment.
  * more ilustrative description of msvc project properties
  * Oracle.sysdate uses time zone stored in GUC orafce.timezone. The setting of configuration value was correct - the global variable orafce_timezone has correct content (it can be checked by SELECT oracle.dbtimezone(). But direct output of this GUC (show orafce.timezone) was broken because the handler of system timezone was used and the statement "show orafce.timezone" did same output like "show timezone", and it is surely wrong.
  * pre 3.14 changes
  * When nvarchar2 and varchar2 was introduced, then was not possibility to correctly set protransform column. Orafce used UPDATE of pg_proc table. Unfortunatelly, this new dependency was not coverget by entry in pg_depend. Today this issue breaks binary upgrade. Fix is simple - on new Postgres it uses ALTER FUNCTION SUPPORT, for older releases it tries to fix pg_depend table.
  * implementation of unistr function
  * Added ppc64le architecture
  * Added some transactions behavior differences
  * Catch dbms_random.string() output variation on big-endian
  * Fix the wrong filter in oracle.user_tables view in orafce--3.6--3.7.sql.
  * Update README.asciidoc
  * Update others.c
  * Use correct macros to convert between Datums and pointers.
  * note in readme
  * prepare for 3.13.4
  * forgotten files
  * prepare for 3.13.3
  * enable utf_file on MSWin
  * cleaning build on MSWin
  * reduce stack size
  * minor cleaning
  * prepare for 3.12
  * fix warning for postgres 13
  * fix asciidoc format
  * minor README fix
  * travis status
  * PostgreSQL 9.4 is not supported
  * example to trigger func
  * fix build and tests for older releases
  * trigger functions - ensure so only null or only empty string is used
  * fix: 'if' condition is always true
  * prepare for 3.11.1
  * missing test output file
  * only PostgreSQL 9.4 and higher are supported
  * Run the testsuite on travis-ci.org
  * clean warnings detected by -Wextra
  * forgot. GRANT
  * The previous securing of utl_file package required SECURITY DEFINER flags on functions. Using this flag is security risk. Insted using SECURITY DEFINER we allow READ from utl_file.utl_file_dir to PUBLIC. This design has one advantage - the final user can control usage of these function with granting user rights just only on table utl_file.utl_file_dir.
  * Update README.asciidoc
  * Update README.asciidoc
  * Update README.asciidoc
  * Update README.asciidoc
  * fix long standing bug - function with access to utl_file_dir should to has security definer flag
  * fix compilation against Postgres 13
  * small fixes and rewrite of utl_file paragraph
  * the safe dictionary in utl_file package can be identified by name too
  * Fix doc and comment about months_between returning numeric (not float8).
  * there are some differences between Oracle and Orafce
  * fix compilation on PostgreSQL 13 (by removing useless include), fix to_multi_byte('\')
  * prepare for 3.9.0
  * remove extra clean to allow repeateable build without bison
  * Orafce is licenced under 0-clause BSD licence
  * polishing licence
  * use postgres routines for printing float4, float8 values in to_char function (reduce garbage and trailing zeroes)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273602">- enable pg 13 and 14</changelog>
  <changelog author="mrueckert@suse.de" date="1675166400">- Update to version 4.1.1+git0.519b5b5:
  * prepare for 4.1.1
  * build on master (16) branch
  * use adv lock to synchronize start of pipe and alert tests
  * add connect by level &lt; num in migration docs
  * Hierarchical Query identifys the leaves
  * Update the connect_by_root example, for better semantics
  * fix: CONNECT_BY_ROOT in hierarchical query is converted to WITH RECURSIVE syntax
  * the table [200~utl_file.utl_file_dir is dumpable
  * fix compilation against pg master
  * prepare for 4.0.2
  * fix -wextra warnings
  * fix shadowed variable varning
  * fix msvc build for PostgreSQL 14
  * fix build for pg16
  * fix META file and prepare for 4.0.1
  * to_multi_byte and to_single_byte support euc_cn(gb2312)
  * add  oracle sql migration : CONNECT_BY_ROOT
  * fix oracle connect by
  * prepare for 4.0.0 release
  * remove obsolete ref on orafce_sql
  * rename shadow variable
  * initial merge of dbms_sql from orafce_sql
  * other cleaning after removing support for unsupported pg releases
  * increase version
  * remove support for PostgreSQL 10 and older
  * Fix database creation during installchecks for ICU cluster
  * fix dbms_output.serveroutput(true) clear the buffer.It conforms to the features of oracle.
  * prepare for 3.25.1
  * fix calculation of plvstr.is_prefix for negative numeric values - see issue #198
  * fix for pre 14 releases
  * doc and regress tests
  * remove useless func decl
  * support for older releases
  * initial implementation
  * initial
  * fix build against master (16) branch
  * wrap possible unsupported DDL to dynamic SQL
  * specify schema inside definition function tanh
  * only set editorconfig
  * prepare for 3.24.4
  * remove redundant ALTER FUNCTION #191
  * prepare for 3.24.3
  * PostgreSQL older than 12 doesn't allow ALTER FUNCTION pg_catalog.x SET SCHEMA oracle. Only dirty way by direct modification of system catalogue is possible. see issue #190
  * prepare for 3.24.2
  * fix missing oracle.mod functions in update scripts
  * prepare for 3.24.1
  * fix regress nlssort test for PostgreSQL 9.5 without \if command
  * Fix race condition during initialization in ora_lock_shmem.
  * nlssort: Add a missing call to PG_RE_THROW.
  * Limit nlssort test to Linux/glibc systems with en_US.utf8 installed.
  * NEWS
  * set storage for varchar2 and nvarchar2 to extended strategy
  * prepare for 3.23
  * fix broken calculation in plvdate_isleapyear function #184
  * fix support for pg9.5, fix regress tests for older releases
  * prepare for 3.22.1
  * Fix read past the end of string in to_sigle_byte().
  * Fix dbms_utility.get_time() to use the full range of int32.
  * fix readme
  * prepare for 3.22.0
  * move dbobjects from public and pg_catalog schemas to oracle schema
  * moving objects from public and pg_catalog to oracle schema
  * move RequestAddinShmemSpace to shmem_request_hook for PostgreSQL 15
  * Update sql_migration06.md
  * Restore sqlparse.c and sqlparse.h
  * Undo comment
  * Add comment
  * Add Parallel safe to mod function
  * Bug fix
  * Add mod function for Oracle compatibility
  * Fix typos and spelling in docs and error messages
  * prepare for 3.21.1
  * fix mswin build - regexp functions was not really marked as dllexport due missing include of builtins.h
  * remove empty line
  * fix of some compatibility issues
  * REG_NOSUB is working only on PostgreSQL 15
  * workable release for PostgreSQL 15
  * modification for compotibility with orafce.regexp_instr
  * backport regexp_instr from PostgreSQL 15, use C version instead PLpgSQL for better possibilities of usage regexp API
  * prepare for 3.20.0
  * Fix regexp_instr() function with occurrence when the same value matching a pattern is found at several place in the string.
  * signature of nvl2 function is enhanced to "any", anyelement, anyelement. After this change, the behavior is more close to Oracle. Unfortunatelly - this change can break extension update for some customers that uses nvl2 in views.
  * support negative start argument for function substrb. Originally orafce used buildin bytea substr function. Now it recalculate start argument. see issue #172
  * prepare for 3.19
  * Allow empty string on input of functions to_number and to_date. In this case returns NULL.
  * remove white spaces
  * replace obsolete CSTRING macro by text_to_csring function
  * prepare for 3.18.1
  * fix - badly handled fn_extra in oracle.greatest(least) function
  * prepare for 3.18.0
  * Update README.asciidoc
  * Update README.asciidoc
  * use older API for iteration over an array. Now, oracle.greatest and oracle.least are working on all supported releases
  * remove negative tests related to orafce.greatest because: a) error message is different on supported pg versions, b) the coverage and benefit of these tests is low
  * remove two lines from regress tests of greatest due dependency on used collate
  * Add documentation for greatest and least functions.
  * Update upgrade extension file with the smallint addition.
  * Add greatest/least SQL redefinition for smallint Add regression tests fot the two functions.
  * Oracle functions LEAST and GREATEST return NULL if at least one of the parameters is NULL. This is not the case for the PostgreSQL equivalent functions which only return NULL when all the parameters are NULL. This patch creates the two functions in the oracle schema to have the same behavior than in Oracle.
  * Minor grammatical fix to README.asciidoc
  * fix typo in charpad.c
  * fix typo in orafce--3.17.sql
  * Update Orafce_Documentation_05.md
  * Catch dbms_random.string() output variation on Windows</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675166401">- enable pg 15</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675166402">- remove pg 10 support</changelog>
  <changelog author="Emiliano Langella &lt;emiliano.langella@suse.com&gt;" date="1676030400">- Added "Name:" tag.</changelog>
</package>
<package pkgid="a4367447ddee44c7ddf02acb9d3c0e9a259c39fea18c18a4459c2e5517b599ac" name="postgresql15-orafce" arch="i586">
  <version epoch="0" ver="4.1.1+git0.519b5b5" rel="bp154.3.1"/>
  <changelog author="mrueckert@suse.de" date="1424347200">- update to 3.0.9
  * PostgreSQL 9.4 compilation
  * new datatype and related functions: oracle.date
  * new varchar2, nvarchar2 types and related functions
    (Amit Langote)
  * oracle.substr emulate better Oracle substr function behave
    (Vinayak Pokale)
  * fix few internal issues that breaks a PGXN tests (Pavel Stehule)</changelog>
  <changelog author="mrueckert@suse.de" date="1502366400">- switch to multibuild</changelog>
  <changelog author="mrueckert@suse.de" date="1502366401">- update to 3.4.0
  * new aggregate function wm_concat
  * PostgreSQL 9.6, 10 are supported well
  * remove support for 8.3, 8.4, 9.0, 9.1 (only 9.2 and higher
    are supported)
  * new functions: sysdate, sessiontimezone, dbtimezone
  * remove support for 8.2
  * add support for 9.5
  * change the releasion number system
  * new functions: to_single_byte, to_multi_byte, nanvl, length,
    ltrim, btrim, rtrim, lpad, rpad
  * fix compilation issue in new code for Pg &lt;= 9.1</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1540468800">- Add build for PostgreSQL 11 and drop 9.3.
- BuildRequire server-devel instead of devel.</changelog>
  <changelog author="mrueckert@suse.de" date="1540641600">- Update to version 3.6.1+git24.cf58d28:
  * remove strict flag for nvl functions
  * minor cleaning
  * remove pre 9.4 support
  * fixes for 12
  * fix compile on PostgreSQL 12
  * missing reset fsec in ora_timestamptz_round function
  * #74 - badly joined comment
  * #75 set correct type for trunc and round two params functions - float4
  * allow usage of schema oracle and plunit
  * copy paste correction intarray -&gt; orafce
  * fix broken compilation on non MSC platforms
  * fix output path
  * add postgresql 10.3 target support need ICU header by path c:\icu
  * fix conversion from 'size_t' to 'int'
  * add 9.6 build environments fix C89 compatible compliance
  * fix nensenses related yyllex, using older form of bison option
  * new function  oracle.numtodsinterval
  * disallow functions from utl_file package on MS Windows
  * clean headers used by msvc
  * cleaning complete build on msvc
  * add missing files for windows compilation
  * fix #64
  * dba_segments view, cleaning
  * Fix formatting of examples.
  * Append documentation about how to translate REGEXP_SUBSTR Oracle function to PostgreSQL.
  * fix the position of a half-width space added by rpad().
  * enhancing emulation of Oracle views
  * fix some segfaults reported by Andreas Seltenreich #59
  * new few Oracle system views
  * prepare for 3.6
  * Minor bug in doc
  * Avoid setting unused variable value
  * Fix issue #54 - missing collatable flag for string types varchar2, nvarchar2.
  * Ensure LWLockRegisterTranche call in every session before LWLockAcquire call.
  * Preparation for 3.5 release.
  * add missing V1 signatures
  * Add Orafce Documentation and Oracle to PostgreSQL Migration Guide
- drop patch orafce-orafce_sql_yyparse-bison26.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1571745600">- adding postgresql12 to _multibuild</changelog>
  <changelog author="mrueckert@suse.de" date="1571745601">- Update to version 3.8.0+git4.a65cfb8:
  * return back missing files
  * fresh parser files
  * master is now unreleased 3.9
  * minor enhancing user_constraints view - use conrelid::regclass instead table_name. This will be  consistent with index name, and show schema for tables that are not on search_path
  * prepare for 3.8
  * qualify decode function to be installable on greenplum
  * fix PostgreSQL 12 support
  * missing files
  * typo
  * fix compilation and regress tests for PostgreSQL 11
  * Revert "Merge pull request #83 from kato-sho/fix-build-for-PG12"
  * Fix build for PostgreSQL 12
  * remove extra #include utils/nabstime.h
  * update against change format of FunctionCallInfo in PostgreSQL 12
  * fix compilation for pre PostgreSQL 12
  * fix compile for PostgreSQL 12
  * prepare for 3.7.2
  * bug fix release
  * fix bad filter in oracle.user_tables view
  * update NEWS
  * use older syntax for create operator command
  * add warning about possible compatibility issue
  * fix docs
  * null safe pipe operator for (n)varchar2 should be explicitly enabled (due compatibility)
  * bugfix should to use OR REPLACE clause
  * add bugfixes to update script
  * fix readme
  * more faster (n)varchar2 null safe concat
  * null safe concat operator for varchar2 and nvarchar2
  * fix compilation for PostgreSQL 12
  * target type should be qualified
  * broken formula for add_month
  * fix broken oracle.add_months for last day in month
  * fix comment assigned to wrong object
  * minor doc nvl</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273600">- remove dead PG versions</changelog>
  <changelog author="mrueckert@suse.de" date="1638273601">- Update to version 3.17.0+git12.e9ab8a3:
  * Fix some typos in plunit.c and plvdate.c.
  * Fix a non-standard function declaration.
  * pg_nextpower2_32 is available for pg13+|
  * fix typo in plvdate.c
  * fix typo in alert.c
  * Improve the place that double the size of a buffer
  * Fix access privileges of utl_file.tmpdir()
  * prepare for 3.17.0
  * This patch reproduce the same behavior of the regexp_* function with null input.
  * Fix version number in install script.
  * Remove duplicate variable declarations
  * Allow even longer runtimes in DBMS_UTILITY.GET_TIME test
  * prepare for 3.16.2
  * fix build for msvc
  * prepare for 3.16.1
  * sql/dbms_utility.sql: Allow longer test runtime
  * fix some shared memory leaks, reduce an possibility to raise an error 'lock requested error' by cleaning locks (these locks are not Postgres's locks) in dbms_alert_removeall and by triggering cleaning shared memory from locks related to closed processes when there are not free locks - per #PR 140 reported by @rbapin
  * prepare for 3.16.0
  * rename pipe type to orafce_pipe due conflict with pipe function from unistd.h
  * ensure public access to public schema
  * add missing sql file for 3.16
  * Add DBMS_UTILITY.GET_TIME function, it returns the current time in 100th's of a second from a point in time in the past. This function is used for determining elapsed time. This function is widely used in some Oracle installation for timing of functions or statements.
  * fix warning on MSVC
  * prepare for 3.15.1
  * Remove reference to pg_enc2name_tbl variable. It is not available on MSVC, and for this functionality it is not necessary
  * prepare for 3.15.0
  * function regexp_match cannot be used because it is available from Postgres 10
  * Add Oracle regexp_replace() function which supports start position and occurrence. It correspond to the Oracle behavior and consist in plpgsql functions based on PG regexp_matches() and regexp_replace(). All details of the implementation is explained in the documentation. Also include in this patch also include regression tests for regexp_replace() including the Oracle queries and results in comment.
  * just reformatting
  * just reformatting
  * Remove wrong and unused code.
  * Apply orafce rule for assignment on remaining call to position() and length.
  * Use better style for assignment instead of pseudo query.
  * - Improve performances by replacing SELECT ... INTO syntax with := - Replace call to regexp_match() by regexp_matches() to support   PostgreSQL 9.5 and 9.6. - Remove obsolete orafce--3.14.sql file - Update regression test to disable CONTEXT trace.
  * Add Oracle regexp_like(), regexp_count(), regexp_instr() and regexp_substr() functions. They correspond to the Oracle behavior and consist in plpgsql functions based on PG regexp_matches(). All details of the implementation is explained in the documentation. This patch also include a regression test regexp_func.sql including the Oracle queries and results in comment.
  * more ilustrative description of msvc project properties
  * Oracle.sysdate uses time zone stored in GUC orafce.timezone. The setting of configuration value was correct - the global variable orafce_timezone has correct content (it can be checked by SELECT oracle.dbtimezone(). But direct output of this GUC (show orafce.timezone) was broken because the handler of system timezone was used and the statement "show orafce.timezone" did same output like "show timezone", and it is surely wrong.
  * pre 3.14 changes
  * When nvarchar2 and varchar2 was introduced, then was not possibility to correctly set protransform column. Orafce used UPDATE of pg_proc table. Unfortunatelly, this new dependency was not coverget by entry in pg_depend. Today this issue breaks binary upgrade. Fix is simple - on new Postgres it uses ALTER FUNCTION SUPPORT, for older releases it tries to fix pg_depend table.
  * implementation of unistr function
  * Added ppc64le architecture
  * Added some transactions behavior differences
  * Catch dbms_random.string() output variation on big-endian
  * Fix the wrong filter in oracle.user_tables view in orafce--3.6--3.7.sql.
  * Update README.asciidoc
  * Update others.c
  * Use correct macros to convert between Datums and pointers.
  * note in readme
  * prepare for 3.13.4
  * forgotten files
  * prepare for 3.13.3
  * enable utf_file on MSWin
  * cleaning build on MSWin
  * reduce stack size
  * minor cleaning
  * prepare for 3.12
  * fix warning for postgres 13
  * fix asciidoc format
  * minor README fix
  * travis status
  * PostgreSQL 9.4 is not supported
  * example to trigger func
  * fix build and tests for older releases
  * trigger functions - ensure so only null or only empty string is used
  * fix: 'if' condition is always true
  * prepare for 3.11.1
  * missing test output file
  * only PostgreSQL 9.4 and higher are supported
  * Run the testsuite on travis-ci.org
  * clean warnings detected by -Wextra
  * forgot. GRANT
  * The previous securing of utl_file package required SECURITY DEFINER flags on functions. Using this flag is security risk. Insted using SECURITY DEFINER we allow READ from utl_file.utl_file_dir to PUBLIC. This design has one advantage - the final user can control usage of these function with granting user rights just only on table utl_file.utl_file_dir.
  * Update README.asciidoc
  * Update README.asciidoc
  * Update README.asciidoc
  * Update README.asciidoc
  * fix long standing bug - function with access to utl_file_dir should to has security definer flag
  * fix compilation against Postgres 13
  * small fixes and rewrite of utl_file paragraph
  * the safe dictionary in utl_file package can be identified by name too
  * Fix doc and comment about months_between returning numeric (not float8).
  * there are some differences between Oracle and Orafce
  * fix compilation on PostgreSQL 13 (by removing useless include), fix to_multi_byte('\')
  * prepare for 3.9.0
  * remove extra clean to allow repeateable build without bison
  * Orafce is licenced under 0-clause BSD licence
  * polishing licence
  * use postgres routines for printing float4, float8 values in to_char function (reduce garbage and trailing zeroes)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273602">- enable pg 13 and 14</changelog>
  <changelog author="mrueckert@suse.de" date="1675166400">- Update to version 4.1.1+git0.519b5b5:
  * prepare for 4.1.1
  * build on master (16) branch
  * use adv lock to synchronize start of pipe and alert tests
  * add connect by level &lt; num in migration docs
  * Hierarchical Query identifys the leaves
  * Update the connect_by_root example, for better semantics
  * fix: CONNECT_BY_ROOT in hierarchical query is converted to WITH RECURSIVE syntax
  * the table [200~utl_file.utl_file_dir is dumpable
  * fix compilation against pg master
  * prepare for 4.0.2
  * fix -wextra warnings
  * fix shadowed variable varning
  * fix msvc build for PostgreSQL 14
  * fix build for pg16
  * fix META file and prepare for 4.0.1
  * to_multi_byte and to_single_byte support euc_cn(gb2312)
  * add  oracle sql migration : CONNECT_BY_ROOT
  * fix oracle connect by
  * prepare for 4.0.0 release
  * remove obsolete ref on orafce_sql
  * rename shadow variable
  * initial merge of dbms_sql from orafce_sql
  * other cleaning after removing support for unsupported pg releases
  * increase version
  * remove support for PostgreSQL 10 and older
  * Fix database creation during installchecks for ICU cluster
  * fix dbms_output.serveroutput(true) clear the buffer.It conforms to the features of oracle.
  * prepare for 3.25.1
  * fix calculation of plvstr.is_prefix for negative numeric values - see issue #198
  * fix for pre 14 releases
  * doc and regress tests
  * remove useless func decl
  * support for older releases
  * initial implementation
  * initial
  * fix build against master (16) branch
  * wrap possible unsupported DDL to dynamic SQL
  * specify schema inside definition function tanh
  * only set editorconfig
  * prepare for 3.24.4
  * remove redundant ALTER FUNCTION #191
  * prepare for 3.24.3
  * PostgreSQL older than 12 doesn't allow ALTER FUNCTION pg_catalog.x SET SCHEMA oracle. Only dirty way by direct modification of system catalogue is possible. see issue #190
  * prepare for 3.24.2
  * fix missing oracle.mod functions in update scripts
  * prepare for 3.24.1
  * fix regress nlssort test for PostgreSQL 9.5 without \if command
  * Fix race condition during initialization in ora_lock_shmem.
  * nlssort: Add a missing call to PG_RE_THROW.
  * Limit nlssort test to Linux/glibc systems with en_US.utf8 installed.
  * NEWS
  * set storage for varchar2 and nvarchar2 to extended strategy
  * prepare for 3.23
  * fix broken calculation in plvdate_isleapyear function #184
  * fix support for pg9.5, fix regress tests for older releases
  * prepare for 3.22.1
  * Fix read past the end of string in to_sigle_byte().
  * Fix dbms_utility.get_time() to use the full range of int32.
  * fix readme
  * prepare for 3.22.0
  * move dbobjects from public and pg_catalog schemas to oracle schema
  * moving objects from public and pg_catalog to oracle schema
  * move RequestAddinShmemSpace to shmem_request_hook for PostgreSQL 15
  * Update sql_migration06.md
  * Restore sqlparse.c and sqlparse.h
  * Undo comment
  * Add comment
  * Add Parallel safe to mod function
  * Bug fix
  * Add mod function for Oracle compatibility
  * Fix typos and spelling in docs and error messages
  * prepare for 3.21.1
  * fix mswin build - regexp functions was not really marked as dllexport due missing include of builtins.h
  * remove empty line
  * fix of some compatibility issues
  * REG_NOSUB is working only on PostgreSQL 15
  * workable release for PostgreSQL 15
  * modification for compotibility with orafce.regexp_instr
  * backport regexp_instr from PostgreSQL 15, use C version instead PLpgSQL for better possibilities of usage regexp API
  * prepare for 3.20.0
  * Fix regexp_instr() function with occurrence when the same value matching a pattern is found at several place in the string.
  * signature of nvl2 function is enhanced to "any", anyelement, anyelement. After this change, the behavior is more close to Oracle. Unfortunatelly - this change can break extension update for some customers that uses nvl2 in views.
  * support negative start argument for function substrb. Originally orafce used buildin bytea substr function. Now it recalculate start argument. see issue #172
  * prepare for 3.19
  * Allow empty string on input of functions to_number and to_date. In this case returns NULL.
  * remove white spaces
  * replace obsolete CSTRING macro by text_to_csring function
  * prepare for 3.18.1
  * fix - badly handled fn_extra in oracle.greatest(least) function
  * prepare for 3.18.0
  * Update README.asciidoc
  * Update README.asciidoc
  * use older API for iteration over an array. Now, oracle.greatest and oracle.least are working on all supported releases
  * remove negative tests related to orafce.greatest because: a) error message is different on supported pg versions, b) the coverage and benefit of these tests is low
  * remove two lines from regress tests of greatest due dependency on used collate
  * Add documentation for greatest and least functions.
  * Update upgrade extension file with the smallint addition.
  * Add greatest/least SQL redefinition for smallint Add regression tests fot the two functions.
  * Oracle functions LEAST and GREATEST return NULL if at least one of the parameters is NULL. This is not the case for the PostgreSQL equivalent functions which only return NULL when all the parameters are NULL. This patch creates the two functions in the oracle schema to have the same behavior than in Oracle.
  * Minor grammatical fix to README.asciidoc
  * fix typo in charpad.c
  * fix typo in orafce--3.17.sql
  * Update Orafce_Documentation_05.md
  * Catch dbms_random.string() output variation on Windows</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675166401">- enable pg 15</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675166402">- remove pg 10 support</changelog>
  <changelog author="Emiliano Langella &lt;emiliano.langella@suse.com&gt;" date="1676030400">- Added "Name:" tag.</changelog>
</package>
<package pkgid="2abfd25cd8a94dbb3ae02860ffbcb8ef04ea9ec2d027318e8a2e355f4de5244e" name="postgresql15-orafce" arch="ppc64le">
  <version epoch="0" ver="4.1.1+git0.519b5b5" rel="bp154.3.1"/>
  <changelog author="mrueckert@suse.de" date="1424347200">- update to 3.0.9
  * PostgreSQL 9.4 compilation
  * new datatype and related functions: oracle.date
  * new varchar2, nvarchar2 types and related functions
    (Amit Langote)
  * oracle.substr emulate better Oracle substr function behave
    (Vinayak Pokale)
  * fix few internal issues that breaks a PGXN tests (Pavel Stehule)</changelog>
  <changelog author="mrueckert@suse.de" date="1502366400">- switch to multibuild</changelog>
  <changelog author="mrueckert@suse.de" date="1502366401">- update to 3.4.0
  * new aggregate function wm_concat
  * PostgreSQL 9.6, 10 are supported well
  * remove support for 8.3, 8.4, 9.0, 9.1 (only 9.2 and higher
    are supported)
  * new functions: sysdate, sessiontimezone, dbtimezone
  * remove support for 8.2
  * add support for 9.5
  * change the releasion number system
  * new functions: to_single_byte, to_multi_byte, nanvl, length,
    ltrim, btrim, rtrim, lpad, rpad
  * fix compilation issue in new code for Pg &lt;= 9.1</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1540468800">- Add build for PostgreSQL 11 and drop 9.3.
- BuildRequire server-devel instead of devel.</changelog>
  <changelog author="mrueckert@suse.de" date="1540641600">- Update to version 3.6.1+git24.cf58d28:
  * remove strict flag for nvl functions
  * minor cleaning
  * remove pre 9.4 support
  * fixes for 12
  * fix compile on PostgreSQL 12
  * missing reset fsec in ora_timestamptz_round function
  * #74 - badly joined comment
  * #75 set correct type for trunc and round two params functions - float4
  * allow usage of schema oracle and plunit
  * copy paste correction intarray -&gt; orafce
  * fix broken compilation on non MSC platforms
  * fix output path
  * add postgresql 10.3 target support need ICU header by path c:\icu
  * fix conversion from 'size_t' to 'int'
  * add 9.6 build environments fix C89 compatible compliance
  * fix nensenses related yyllex, using older form of bison option
  * new function  oracle.numtodsinterval
  * disallow functions from utl_file package on MS Windows
  * clean headers used by msvc
  * cleaning complete build on msvc
  * add missing files for windows compilation
  * fix #64
  * dba_segments view, cleaning
  * Fix formatting of examples.
  * Append documentation about how to translate REGEXP_SUBSTR Oracle function to PostgreSQL.
  * fix the position of a half-width space added by rpad().
  * enhancing emulation of Oracle views
  * fix some segfaults reported by Andreas Seltenreich #59
  * new few Oracle system views
  * prepare for 3.6
  * Minor bug in doc
  * Avoid setting unused variable value
  * Fix issue #54 - missing collatable flag for string types varchar2, nvarchar2.
  * Ensure LWLockRegisterTranche call in every session before LWLockAcquire call.
  * Preparation for 3.5 release.
  * add missing V1 signatures
  * Add Orafce Documentation and Oracle to PostgreSQL Migration Guide
- drop patch orafce-orafce_sql_yyparse-bison26.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1571745600">- adding postgresql12 to _multibuild</changelog>
  <changelog author="mrueckert@suse.de" date="1571745601">- Update to version 3.8.0+git4.a65cfb8:
  * return back missing files
  * fresh parser files
  * master is now unreleased 3.9
  * minor enhancing user_constraints view - use conrelid::regclass instead table_name. This will be  consistent with index name, and show schema for tables that are not on search_path
  * prepare for 3.8
  * qualify decode function to be installable on greenplum
  * fix PostgreSQL 12 support
  * missing files
  * typo
  * fix compilation and regress tests for PostgreSQL 11
  * Revert "Merge pull request #83 from kato-sho/fix-build-for-PG12"
  * Fix build for PostgreSQL 12
  * remove extra #include utils/nabstime.h
  * update against change format of FunctionCallInfo in PostgreSQL 12
  * fix compilation for pre PostgreSQL 12
  * fix compile for PostgreSQL 12
  * prepare for 3.7.2
  * bug fix release
  * fix bad filter in oracle.user_tables view
  * update NEWS
  * use older syntax for create operator command
  * add warning about possible compatibility issue
  * fix docs
  * null safe pipe operator for (n)varchar2 should be explicitly enabled (due compatibility)
  * bugfix should to use OR REPLACE clause
  * add bugfixes to update script
  * fix readme
  * more faster (n)varchar2 null safe concat
  * null safe concat operator for varchar2 and nvarchar2
  * fix compilation for PostgreSQL 12
  * target type should be qualified
  * broken formula for add_month
  * fix broken oracle.add_months for last day in month
  * fix comment assigned to wrong object
  * minor doc nvl</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273600">- remove dead PG versions</changelog>
  <changelog author="mrueckert@suse.de" date="1638273601">- Update to version 3.17.0+git12.e9ab8a3:
  * Fix some typos in plunit.c and plvdate.c.
  * Fix a non-standard function declaration.
  * pg_nextpower2_32 is available for pg13+|
  * fix typo in plvdate.c
  * fix typo in alert.c
  * Improve the place that double the size of a buffer
  * Fix access privileges of utl_file.tmpdir()
  * prepare for 3.17.0
  * This patch reproduce the same behavior of the regexp_* function with null input.
  * Fix version number in install script.
  * Remove duplicate variable declarations
  * Allow even longer runtimes in DBMS_UTILITY.GET_TIME test
  * prepare for 3.16.2
  * fix build for msvc
  * prepare for 3.16.1
  * sql/dbms_utility.sql: Allow longer test runtime
  * fix some shared memory leaks, reduce an possibility to raise an error 'lock requested error' by cleaning locks (these locks are not Postgres's locks) in dbms_alert_removeall and by triggering cleaning shared memory from locks related to closed processes when there are not free locks - per #PR 140 reported by @rbapin
  * prepare for 3.16.0
  * rename pipe type to orafce_pipe due conflict with pipe function from unistd.h
  * ensure public access to public schema
  * add missing sql file for 3.16
  * Add DBMS_UTILITY.GET_TIME function, it returns the current time in 100th's of a second from a point in time in the past. This function is used for determining elapsed time. This function is widely used in some Oracle installation for timing of functions or statements.
  * fix warning on MSVC
  * prepare for 3.15.1
  * Remove reference to pg_enc2name_tbl variable. It is not available on MSVC, and for this functionality it is not necessary
  * prepare for 3.15.0
  * function regexp_match cannot be used because it is available from Postgres 10
  * Add Oracle regexp_replace() function which supports start position and occurrence. It correspond to the Oracle behavior and consist in plpgsql functions based on PG regexp_matches() and regexp_replace(). All details of the implementation is explained in the documentation. Also include in this patch also include regression tests for regexp_replace() including the Oracle queries and results in comment.
  * just reformatting
  * just reformatting
  * Remove wrong and unused code.
  * Apply orafce rule for assignment on remaining call to position() and length.
  * Use better style for assignment instead of pseudo query.
  * - Improve performances by replacing SELECT ... INTO syntax with := - Replace call to regexp_match() by regexp_matches() to support   PostgreSQL 9.5 and 9.6. - Remove obsolete orafce--3.14.sql file - Update regression test to disable CONTEXT trace.
  * Add Oracle regexp_like(), regexp_count(), regexp_instr() and regexp_substr() functions. They correspond to the Oracle behavior and consist in plpgsql functions based on PG regexp_matches(). All details of the implementation is explained in the documentation. This patch also include a regression test regexp_func.sql including the Oracle queries and results in comment.
  * more ilustrative description of msvc project properties
  * Oracle.sysdate uses time zone stored in GUC orafce.timezone. The setting of configuration value was correct - the global variable orafce_timezone has correct content (it can be checked by SELECT oracle.dbtimezone(). But direct output of this GUC (show orafce.timezone) was broken because the handler of system timezone was used and the statement "show orafce.timezone" did same output like "show timezone", and it is surely wrong.
  * pre 3.14 changes
  * When nvarchar2 and varchar2 was introduced, then was not possibility to correctly set protransform column. Orafce used UPDATE of pg_proc table. Unfortunatelly, this new dependency was not coverget by entry in pg_depend. Today this issue breaks binary upgrade. Fix is simple - on new Postgres it uses ALTER FUNCTION SUPPORT, for older releases it tries to fix pg_depend table.
  * implementation of unistr function
  * Added ppc64le architecture
  * Added some transactions behavior differences
  * Catch dbms_random.string() output variation on big-endian
  * Fix the wrong filter in oracle.user_tables view in orafce--3.6--3.7.sql.
  * Update README.asciidoc
  * Update others.c
  * Use correct macros to convert between Datums and pointers.
  * note in readme
  * prepare for 3.13.4
  * forgotten files
  * prepare for 3.13.3
  * enable utf_file on MSWin
  * cleaning build on MSWin
  * reduce stack size
  * minor cleaning
  * prepare for 3.12
  * fix warning for postgres 13
  * fix asciidoc format
  * minor README fix
  * travis status
  * PostgreSQL 9.4 is not supported
  * example to trigger func
  * fix build and tests for older releases
  * trigger functions - ensure so only null or only empty string is used
  * fix: 'if' condition is always true
  * prepare for 3.11.1
  * missing test output file
  * only PostgreSQL 9.4 and higher are supported
  * Run the testsuite on travis-ci.org
  * clean warnings detected by -Wextra
  * forgot. GRANT
  * The previous securing of utl_file package required SECURITY DEFINER flags on functions. Using this flag is security risk. Insted using SECURITY DEFINER we allow READ from utl_file.utl_file_dir to PUBLIC. This design has one advantage - the final user can control usage of these function with granting user rights just only on table utl_file.utl_file_dir.
  * Update README.asciidoc
  * Update README.asciidoc
  * Update README.asciidoc
  * Update README.asciidoc
  * fix long standing bug - function with access to utl_file_dir should to has security definer flag
  * fix compilation against Postgres 13
  * small fixes and rewrite of utl_file paragraph
  * the safe dictionary in utl_file package can be identified by name too
  * Fix doc and comment about months_between returning numeric (not float8).
  * there are some differences between Oracle and Orafce
  * fix compilation on PostgreSQL 13 (by removing useless include), fix to_multi_byte('\')
  * prepare for 3.9.0
  * remove extra clean to allow repeateable build without bison
  * Orafce is licenced under 0-clause BSD licence
  * polishing licence
  * use postgres routines for printing float4, float8 values in to_char function (reduce garbage and trailing zeroes)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273602">- enable pg 13 and 14</changelog>
  <changelog author="mrueckert@suse.de" date="1675166400">- Update to version 4.1.1+git0.519b5b5:
  * prepare for 4.1.1
  * build on master (16) branch
  * use adv lock to synchronize start of pipe and alert tests
  * add connect by level &lt; num in migration docs
  * Hierarchical Query identifys the leaves
  * Update the connect_by_root example, for better semantics
  * fix: CONNECT_BY_ROOT in hierarchical query is converted to WITH RECURSIVE syntax
  * the table [200~utl_file.utl_file_dir is dumpable
  * fix compilation against pg master
  * prepare for 4.0.2
  * fix -wextra warnings
  * fix shadowed variable varning
  * fix msvc build for PostgreSQL 14
  * fix build for pg16
  * fix META file and prepare for 4.0.1
  * to_multi_byte and to_single_byte support euc_cn(gb2312)
  * add  oracle sql migration : CONNECT_BY_ROOT
  * fix oracle connect by
  * prepare for 4.0.0 release
  * remove obsolete ref on orafce_sql
  * rename shadow variable
  * initial merge of dbms_sql from orafce_sql
  * other cleaning after removing support for unsupported pg releases
  * increase version
  * remove support for PostgreSQL 10 and older
  * Fix database creation during installchecks for ICU cluster
  * fix dbms_output.serveroutput(true) clear the buffer.It conforms to the features of oracle.
  * prepare for 3.25.1
  * fix calculation of plvstr.is_prefix for negative numeric values - see issue #198
  * fix for pre 14 releases
  * doc and regress tests
  * remove useless func decl
  * support for older releases
  * initial implementation
  * initial
  * fix build against master (16) branch
  * wrap possible unsupported DDL to dynamic SQL
  * specify schema inside definition function tanh
  * only set editorconfig
  * prepare for 3.24.4
  * remove redundant ALTER FUNCTION #191
  * prepare for 3.24.3
  * PostgreSQL older than 12 doesn't allow ALTER FUNCTION pg_catalog.x SET SCHEMA oracle. Only dirty way by direct modification of system catalogue is possible. see issue #190
  * prepare for 3.24.2
  * fix missing oracle.mod functions in update scripts
  * prepare for 3.24.1
  * fix regress nlssort test for PostgreSQL 9.5 without \if command
  * Fix race condition during initialization in ora_lock_shmem.
  * nlssort: Add a missing call to PG_RE_THROW.
  * Limit nlssort test to Linux/glibc systems with en_US.utf8 installed.
  * NEWS
  * set storage for varchar2 and nvarchar2 to extended strategy
  * prepare for 3.23
  * fix broken calculation in plvdate_isleapyear function #184
  * fix support for pg9.5, fix regress tests for older releases
  * prepare for 3.22.1
  * Fix read past the end of string in to_sigle_byte().
  * Fix dbms_utility.get_time() to use the full range of int32.
  * fix readme
  * prepare for 3.22.0
  * move dbobjects from public and pg_catalog schemas to oracle schema
  * moving objects from public and pg_catalog to oracle schema
  * move RequestAddinShmemSpace to shmem_request_hook for PostgreSQL 15
  * Update sql_migration06.md
  * Restore sqlparse.c and sqlparse.h
  * Undo comment
  * Add comment
  * Add Parallel safe to mod function
  * Bug fix
  * Add mod function for Oracle compatibility
  * Fix typos and spelling in docs and error messages
  * prepare for 3.21.1
  * fix mswin build - regexp functions was not really marked as dllexport due missing include of builtins.h
  * remove empty line
  * fix of some compatibility issues
  * REG_NOSUB is working only on PostgreSQL 15
  * workable release for PostgreSQL 15
  * modification for compotibility with orafce.regexp_instr
  * backport regexp_instr from PostgreSQL 15, use C version instead PLpgSQL for better possibilities of usage regexp API
  * prepare for 3.20.0
  * Fix regexp_instr() function with occurrence when the same value matching a pattern is found at several place in the string.
  * signature of nvl2 function is enhanced to "any", anyelement, anyelement. After this change, the behavior is more close to Oracle. Unfortunatelly - this change can break extension update for some customers that uses nvl2 in views.
  * support negative start argument for function substrb. Originally orafce used buildin bytea substr function. Now it recalculate start argument. see issue #172
  * prepare for 3.19
  * Allow empty string on input of functions to_number and to_date. In this case returns NULL.
  * remove white spaces
  * replace obsolete CSTRING macro by text_to_csring function
  * prepare for 3.18.1
  * fix - badly handled fn_extra in oracle.greatest(least) function
  * prepare for 3.18.0
  * Update README.asciidoc
  * Update README.asciidoc
  * use older API for iteration over an array. Now, oracle.greatest and oracle.least are working on all supported releases
  * remove negative tests related to orafce.greatest because: a) error message is different on supported pg versions, b) the coverage and benefit of these tests is low
  * remove two lines from regress tests of greatest due dependency on used collate
  * Add documentation for greatest and least functions.
  * Update upgrade extension file with the smallint addition.
  * Add greatest/least SQL redefinition for smallint Add regression tests fot the two functions.
  * Oracle functions LEAST and GREATEST return NULL if at least one of the parameters is NULL. This is not the case for the PostgreSQL equivalent functions which only return NULL when all the parameters are NULL. This patch creates the two functions in the oracle schema to have the same behavior than in Oracle.
  * Minor grammatical fix to README.asciidoc
  * fix typo in charpad.c
  * fix typo in orafce--3.17.sql
  * Update Orafce_Documentation_05.md
  * Catch dbms_random.string() output variation on Windows</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675166401">- enable pg 15</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675166402">- remove pg 10 support</changelog>
  <changelog author="Emiliano Langella &lt;emiliano.langella@suse.com&gt;" date="1676030400">- Added "Name:" tag.</changelog>
</package>
<package pkgid="f870e3746fdf874e72a33cb0873a51c7ff3eb1ea898c6e194449d26dc2199351" name="postgresql15-orafce" arch="s390x">
  <version epoch="0" ver="4.1.1+git0.519b5b5" rel="bp154.3.1"/>
  <changelog author="mrueckert@suse.de" date="1424347200">- update to 3.0.9
  * PostgreSQL 9.4 compilation
  * new datatype and related functions: oracle.date
  * new varchar2, nvarchar2 types and related functions
    (Amit Langote)
  * oracle.substr emulate better Oracle substr function behave
    (Vinayak Pokale)
  * fix few internal issues that breaks a PGXN tests (Pavel Stehule)</changelog>
  <changelog author="mrueckert@suse.de" date="1502366400">- switch to multibuild</changelog>
  <changelog author="mrueckert@suse.de" date="1502366401">- update to 3.4.0
  * new aggregate function wm_concat
  * PostgreSQL 9.6, 10 are supported well
  * remove support for 8.3, 8.4, 9.0, 9.1 (only 9.2 and higher
    are supported)
  * new functions: sysdate, sessiontimezone, dbtimezone
  * remove support for 8.2
  * add support for 9.5
  * change the releasion number system
  * new functions: to_single_byte, to_multi_byte, nanvl, length,
    ltrim, btrim, rtrim, lpad, rpad
  * fix compilation issue in new code for Pg &lt;= 9.1</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1540468800">- Add build for PostgreSQL 11 and drop 9.3.
- BuildRequire server-devel instead of devel.</changelog>
  <changelog author="mrueckert@suse.de" date="1540641600">- Update to version 3.6.1+git24.cf58d28:
  * remove strict flag for nvl functions
  * minor cleaning
  * remove pre 9.4 support
  * fixes for 12
  * fix compile on PostgreSQL 12
  * missing reset fsec in ora_timestamptz_round function
  * #74 - badly joined comment
  * #75 set correct type for trunc and round two params functions - float4
  * allow usage of schema oracle and plunit
  * copy paste correction intarray -&gt; orafce
  * fix broken compilation on non MSC platforms
  * fix output path
  * add postgresql 10.3 target support need ICU header by path c:\icu
  * fix conversion from 'size_t' to 'int'
  * add 9.6 build environments fix C89 compatible compliance
  * fix nensenses related yyllex, using older form of bison option
  * new function  oracle.numtodsinterval
  * disallow functions from utl_file package on MS Windows
  * clean headers used by msvc
  * cleaning complete build on msvc
  * add missing files for windows compilation
  * fix #64
  * dba_segments view, cleaning
  * Fix formatting of examples.
  * Append documentation about how to translate REGEXP_SUBSTR Oracle function to PostgreSQL.
  * fix the position of a half-width space added by rpad().
  * enhancing emulation of Oracle views
  * fix some segfaults reported by Andreas Seltenreich #59
  * new few Oracle system views
  * prepare for 3.6
  * Minor bug in doc
  * Avoid setting unused variable value
  * Fix issue #54 - missing collatable flag for string types varchar2, nvarchar2.
  * Ensure LWLockRegisterTranche call in every session before LWLockAcquire call.
  * Preparation for 3.5 release.
  * add missing V1 signatures
  * Add Orafce Documentation and Oracle to PostgreSQL Migration Guide
- drop patch orafce-orafce_sql_yyparse-bison26.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1571745600">- adding postgresql12 to _multibuild</changelog>
  <changelog author="mrueckert@suse.de" date="1571745601">- Update to version 3.8.0+git4.a65cfb8:
  * return back missing files
  * fresh parser files
  * master is now unreleased 3.9
  * minor enhancing user_constraints view - use conrelid::regclass instead table_name. This will be  consistent with index name, and show schema for tables that are not on search_path
  * prepare for 3.8
  * qualify decode function to be installable on greenplum
  * fix PostgreSQL 12 support
  * missing files
  * typo
  * fix compilation and regress tests for PostgreSQL 11
  * Revert "Merge pull request #83 from kato-sho/fix-build-for-PG12"
  * Fix build for PostgreSQL 12
  * remove extra #include utils/nabstime.h
  * update against change format of FunctionCallInfo in PostgreSQL 12
  * fix compilation for pre PostgreSQL 12
  * fix compile for PostgreSQL 12
  * prepare for 3.7.2
  * bug fix release
  * fix bad filter in oracle.user_tables view
  * update NEWS
  * use older syntax for create operator command
  * add warning about possible compatibility issue
  * fix docs
  * null safe pipe operator for (n)varchar2 should be explicitly enabled (due compatibility)
  * bugfix should to use OR REPLACE clause
  * add bugfixes to update script
  * fix readme
  * more faster (n)varchar2 null safe concat
  * null safe concat operator for varchar2 and nvarchar2
  * fix compilation for PostgreSQL 12
  * target type should be qualified
  * broken formula for add_month
  * fix broken oracle.add_months for last day in month
  * fix comment assigned to wrong object
  * minor doc nvl</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273600">- remove dead PG versions</changelog>
  <changelog author="mrueckert@suse.de" date="1638273601">- Update to version 3.17.0+git12.e9ab8a3:
  * Fix some typos in plunit.c and plvdate.c.
  * Fix a non-standard function declaration.
  * pg_nextpower2_32 is available for pg13+|
  * fix typo in plvdate.c
  * fix typo in alert.c
  * Improve the place that double the size of a buffer
  * Fix access privileges of utl_file.tmpdir()
  * prepare for 3.17.0
  * This patch reproduce the same behavior of the regexp_* function with null input.
  * Fix version number in install script.
  * Remove duplicate variable declarations
  * Allow even longer runtimes in DBMS_UTILITY.GET_TIME test
  * prepare for 3.16.2
  * fix build for msvc
  * prepare for 3.16.1
  * sql/dbms_utility.sql: Allow longer test runtime
  * fix some shared memory leaks, reduce an possibility to raise an error 'lock requested error' by cleaning locks (these locks are not Postgres's locks) in dbms_alert_removeall and by triggering cleaning shared memory from locks related to closed processes when there are not free locks - per #PR 140 reported by @rbapin
  * prepare for 3.16.0
  * rename pipe type to orafce_pipe due conflict with pipe function from unistd.h
  * ensure public access to public schema
  * add missing sql file for 3.16
  * Add DBMS_UTILITY.GET_TIME function, it returns the current time in 100th's of a second from a point in time in the past. This function is used for determining elapsed time. This function is widely used in some Oracle installation for timing of functions or statements.
  * fix warning on MSVC
  * prepare for 3.15.1
  * Remove reference to pg_enc2name_tbl variable. It is not available on MSVC, and for this functionality it is not necessary
  * prepare for 3.15.0
  * function regexp_match cannot be used because it is available from Postgres 10
  * Add Oracle regexp_replace() function which supports start position and occurrence. It correspond to the Oracle behavior and consist in plpgsql functions based on PG regexp_matches() and regexp_replace(). All details of the implementation is explained in the documentation. Also include in this patch also include regression tests for regexp_replace() including the Oracle queries and results in comment.
  * just reformatting
  * just reformatting
  * Remove wrong and unused code.
  * Apply orafce rule for assignment on remaining call to position() and length.
  * Use better style for assignment instead of pseudo query.
  * - Improve performances by replacing SELECT ... INTO syntax with := - Replace call to regexp_match() by regexp_matches() to support   PostgreSQL 9.5 and 9.6. - Remove obsolete orafce--3.14.sql file - Update regression test to disable CONTEXT trace.
  * Add Oracle regexp_like(), regexp_count(), regexp_instr() and regexp_substr() functions. They correspond to the Oracle behavior and consist in plpgsql functions based on PG regexp_matches(). All details of the implementation is explained in the documentation. This patch also include a regression test regexp_func.sql including the Oracle queries and results in comment.
  * more ilustrative description of msvc project properties
  * Oracle.sysdate uses time zone stored in GUC orafce.timezone. The setting of configuration value was correct - the global variable orafce_timezone has correct content (it can be checked by SELECT oracle.dbtimezone(). But direct output of this GUC (show orafce.timezone) was broken because the handler of system timezone was used and the statement "show orafce.timezone" did same output like "show timezone", and it is surely wrong.
  * pre 3.14 changes
  * When nvarchar2 and varchar2 was introduced, then was not possibility to correctly set protransform column. Orafce used UPDATE of pg_proc table. Unfortunatelly, this new dependency was not coverget by entry in pg_depend. Today this issue breaks binary upgrade. Fix is simple - on new Postgres it uses ALTER FUNCTION SUPPORT, for older releases it tries to fix pg_depend table.
  * implementation of unistr function
  * Added ppc64le architecture
  * Added some transactions behavior differences
  * Catch dbms_random.string() output variation on big-endian
  * Fix the wrong filter in oracle.user_tables view in orafce--3.6--3.7.sql.
  * Update README.asciidoc
  * Update others.c
  * Use correct macros to convert between Datums and pointers.
  * note in readme
  * prepare for 3.13.4
  * forgotten files
  * prepare for 3.13.3
  * enable utf_file on MSWin
  * cleaning build on MSWin
  * reduce stack size
  * minor cleaning
  * prepare for 3.12
  * fix warning for postgres 13
  * fix asciidoc format
  * minor README fix
  * travis status
  * PostgreSQL 9.4 is not supported
  * example to trigger func
  * fix build and tests for older releases
  * trigger functions - ensure so only null or only empty string is used
  * fix: 'if' condition is always true
  * prepare for 3.11.1
  * missing test output file
  * only PostgreSQL 9.4 and higher are supported
  * Run the testsuite on travis-ci.org
  * clean warnings detected by -Wextra
  * forgot. GRANT
  * The previous securing of utl_file package required SECURITY DEFINER flags on functions. Using this flag is security risk. Insted using SECURITY DEFINER we allow READ from utl_file.utl_file_dir to PUBLIC. This design has one advantage - the final user can control usage of these function with granting user rights just only on table utl_file.utl_file_dir.
  * Update README.asciidoc
  * Update README.asciidoc
  * Update README.asciidoc
  * Update README.asciidoc
  * fix long standing bug - function with access to utl_file_dir should to has security definer flag
  * fix compilation against Postgres 13
  * small fixes and rewrite of utl_file paragraph
  * the safe dictionary in utl_file package can be identified by name too
  * Fix doc and comment about months_between returning numeric (not float8).
  * there are some differences between Oracle and Orafce
  * fix compilation on PostgreSQL 13 (by removing useless include), fix to_multi_byte('\')
  * prepare for 3.9.0
  * remove extra clean to allow repeateable build without bison
  * Orafce is licenced under 0-clause BSD licence
  * polishing licence
  * use postgres routines for printing float4, float8 values in to_char function (reduce garbage and trailing zeroes)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273602">- enable pg 13 and 14</changelog>
  <changelog author="mrueckert@suse.de" date="1675166400">- Update to version 4.1.1+git0.519b5b5:
  * prepare for 4.1.1
  * build on master (16) branch
  * use adv lock to synchronize start of pipe and alert tests
  * add connect by level &lt; num in migration docs
  * Hierarchical Query identifys the leaves
  * Update the connect_by_root example, for better semantics
  * fix: CONNECT_BY_ROOT in hierarchical query is converted to WITH RECURSIVE syntax
  * the table [200~utl_file.utl_file_dir is dumpable
  * fix compilation against pg master
  * prepare for 4.0.2
  * fix -wextra warnings
  * fix shadowed variable varning
  * fix msvc build for PostgreSQL 14
  * fix build for pg16
  * fix META file and prepare for 4.0.1
  * to_multi_byte and to_single_byte support euc_cn(gb2312)
  * add  oracle sql migration : CONNECT_BY_ROOT
  * fix oracle connect by
  * prepare for 4.0.0 release
  * remove obsolete ref on orafce_sql
  * rename shadow variable
  * initial merge of dbms_sql from orafce_sql
  * other cleaning after removing support for unsupported pg releases
  * increase version
  * remove support for PostgreSQL 10 and older
  * Fix database creation during installchecks for ICU cluster
  * fix dbms_output.serveroutput(true) clear the buffer.It conforms to the features of oracle.
  * prepare for 3.25.1
  * fix calculation of plvstr.is_prefix for negative numeric values - see issue #198
  * fix for pre 14 releases
  * doc and regress tests
  * remove useless func decl
  * support for older releases
  * initial implementation
  * initial
  * fix build against master (16) branch
  * wrap possible unsupported DDL to dynamic SQL
  * specify schema inside definition function tanh
  * only set editorconfig
  * prepare for 3.24.4
  * remove redundant ALTER FUNCTION #191
  * prepare for 3.24.3
  * PostgreSQL older than 12 doesn't allow ALTER FUNCTION pg_catalog.x SET SCHEMA oracle. Only dirty way by direct modification of system catalogue is possible. see issue #190
  * prepare for 3.24.2
  * fix missing oracle.mod functions in update scripts
  * prepare for 3.24.1
  * fix regress nlssort test for PostgreSQL 9.5 without \if command
  * Fix race condition during initialization in ora_lock_shmem.
  * nlssort: Add a missing call to PG_RE_THROW.
  * Limit nlssort test to Linux/glibc systems with en_US.utf8 installed.
  * NEWS
  * set storage for varchar2 and nvarchar2 to extended strategy
  * prepare for 3.23
  * fix broken calculation in plvdate_isleapyear function #184
  * fix support for pg9.5, fix regress tests for older releases
  * prepare for 3.22.1
  * Fix read past the end of string in to_sigle_byte().
  * Fix dbms_utility.get_time() to use the full range of int32.
  * fix readme
  * prepare for 3.22.0
  * move dbobjects from public and pg_catalog schemas to oracle schema
  * moving objects from public and pg_catalog to oracle schema
  * move RequestAddinShmemSpace to shmem_request_hook for PostgreSQL 15
  * Update sql_migration06.md
  * Restore sqlparse.c and sqlparse.h
  * Undo comment
  * Add comment
  * Add Parallel safe to mod function
  * Bug fix
  * Add mod function for Oracle compatibility
  * Fix typos and spelling in docs and error messages
  * prepare for 3.21.1
  * fix mswin build - regexp functions was not really marked as dllexport due missing include of builtins.h
  * remove empty line
  * fix of some compatibility issues
  * REG_NOSUB is working only on PostgreSQL 15
  * workable release for PostgreSQL 15
  * modification for compotibility with orafce.regexp_instr
  * backport regexp_instr from PostgreSQL 15, use C version instead PLpgSQL for better possibilities of usage regexp API
  * prepare for 3.20.0
  * Fix regexp_instr() function with occurrence when the same value matching a pattern is found at several place in the string.
  * signature of nvl2 function is enhanced to "any", anyelement, anyelement. After this change, the behavior is more close to Oracle. Unfortunatelly - this change can break extension update for some customers that uses nvl2 in views.
  * support negative start argument for function substrb. Originally orafce used buildin bytea substr function. Now it recalculate start argument. see issue #172
  * prepare for 3.19
  * Allow empty string on input of functions to_number and to_date. In this case returns NULL.
  * remove white spaces
  * replace obsolete CSTRING macro by text_to_csring function
  * prepare for 3.18.1
  * fix - badly handled fn_extra in oracle.greatest(least) function
  * prepare for 3.18.0
  * Update README.asciidoc
  * Update README.asciidoc
  * use older API for iteration over an array. Now, oracle.greatest and oracle.least are working on all supported releases
  * remove negative tests related to orafce.greatest because: a) error message is different on supported pg versions, b) the coverage and benefit of these tests is low
  * remove two lines from regress tests of greatest due dependency on used collate
  * Add documentation for greatest and least functions.
  * Update upgrade extension file with the smallint addition.
  * Add greatest/least SQL redefinition for smallint Add regression tests fot the two functions.
  * Oracle functions LEAST and GREATEST return NULL if at least one of the parameters is NULL. This is not the case for the PostgreSQL equivalent functions which only return NULL when all the parameters are NULL. This patch creates the two functions in the oracle schema to have the same behavior than in Oracle.
  * Minor grammatical fix to README.asciidoc
  * fix typo in charpad.c
  * fix typo in orafce--3.17.sql
  * Update Orafce_Documentation_05.md
  * Catch dbms_random.string() output variation on Windows</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675166401">- enable pg 15</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675166402">- remove pg 10 support</changelog>
  <changelog author="Emiliano Langella &lt;emiliano.langella@suse.com&gt;" date="1676030400">- Added "Name:" tag.</changelog>
</package>
<package pkgid="daeedbaa769e66e9520b80b33416d4068de19e65a0724ac4adeb03a53eca0ea0" name="postgresql15-orafce" arch="src">
  <version epoch="0" ver="4.1.1+git0.519b5b5" rel="bp154.3.1"/>
  <changelog author="darin@darins.net" date="1351252800">- added pre_checkin.sh to generate .spec and .changes</changelog>
  <changelog author="darin@darins.net" date="1351771200">- updated name in template
- set proper install location</changelog>
  <changelog author="darin@darins.net" date="1355745600">- renamed orafce.spec to orafce.spec.in</changelog>
  <changelog author="darin@darins.net" date="1375963200">- patch for compilation error with Bison &gt;=2.6
  See also http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=710633</changelog>
  <changelog author="darin@darins.net" date="1381320000">- updated to verion 3.0.6
- generate specs for PG 9.3</changelog>
  <changelog author="darin@darins.net" date="1381752000">- rename README.orafunc to README.asciidoc</changelog>
  <changelog author="mrueckert@suse.de" date="1424347200">- update to 3.0.9
  * PostgreSQL 9.4 compilation
  * new datatype and related functions: oracle.date
  * new varchar2, nvarchar2 types and related functions
    (Amit Langote)
  * oracle.substr emulate better Oracle substr function behave
    (Vinayak Pokale)
  * fix few internal issues that breaks a PGXN tests (Pavel Stehule)</changelog>
  <changelog author="mrueckert@suse.de" date="1502366400">- switch to multibuild</changelog>
  <changelog author="mrueckert@suse.de" date="1502366401">- update to 3.4.0
  * new aggregate function wm_concat
  * PostgreSQL 9.6, 10 are supported well
  * remove support for 8.3, 8.4, 9.0, 9.1 (only 9.2 and higher
    are supported)
  * new functions: sysdate, sessiontimezone, dbtimezone
  * remove support for 8.2
  * add support for 9.5
  * change the releasion number system
  * new functions: to_single_byte, to_multi_byte, nanvl, length,
    ltrim, btrim, rtrim, lpad, rpad
  * fix compilation issue in new code for Pg &lt;= 9.1</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1540468800">- Add build for PostgreSQL 11 and drop 9.3.
- BuildRequire server-devel instead of devel.</changelog>
  <changelog author="mrueckert@suse.de" date="1540641600">- Update to version 3.6.1+git24.cf58d28:
  * remove strict flag for nvl functions
  * minor cleaning
  * remove pre 9.4 support
  * fixes for 12
  * fix compile on PostgreSQL 12
  * missing reset fsec in ora_timestamptz_round function
  * #74 - badly joined comment
  * #75 set correct type for trunc and round two params functions - float4
  * allow usage of schema oracle and plunit
  * copy paste correction intarray -&gt; orafce
  * fix broken compilation on non MSC platforms
  * fix output path
  * add postgresql 10.3 target support need ICU header by path c:\icu
  * fix conversion from 'size_t' to 'int'
  * add 9.6 build environments fix C89 compatible compliance
  * fix nensenses related yyllex, using older form of bison option
  * new function  oracle.numtodsinterval
  * disallow functions from utl_file package on MS Windows
  * clean headers used by msvc
  * cleaning complete build on msvc
  * add missing files for windows compilation
  * fix #64
  * dba_segments view, cleaning
  * Fix formatting of examples.
  * Append documentation about how to translate REGEXP_SUBSTR Oracle function to PostgreSQL.
  * fix the position of a half-width space added by rpad().
  * enhancing emulation of Oracle views
  * fix some segfaults reported by Andreas Seltenreich #59
  * new few Oracle system views
  * prepare for 3.6
  * Minor bug in doc
  * Avoid setting unused variable value
  * Fix issue #54 - missing collatable flag for string types varchar2, nvarchar2.
  * Ensure LWLockRegisterTranche call in every session before LWLockAcquire call.
  * Preparation for 3.5 release.
  * add missing V1 signatures
  * Add Orafce Documentation and Oracle to PostgreSQL Migration Guide
- drop patch orafce-orafce_sql_yyparse-bison26.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1571745600">- adding postgresql12 to _multibuild</changelog>
  <changelog author="mrueckert@suse.de" date="1571745601">- Update to version 3.8.0+git4.a65cfb8:
  * return back missing files
  * fresh parser files
  * master is now unreleased 3.9
  * minor enhancing user_constraints view - use conrelid::regclass instead table_name. This will be  consistent with index name, and show schema for tables that are not on search_path
  * prepare for 3.8
  * qualify decode function to be installable on greenplum
  * fix PostgreSQL 12 support
  * missing files
  * typo
  * fix compilation and regress tests for PostgreSQL 11
  * Revert "Merge pull request #83 from kato-sho/fix-build-for-PG12"
  * Fix build for PostgreSQL 12
  * remove extra #include utils/nabstime.h
  * update against change format of FunctionCallInfo in PostgreSQL 12
  * fix compilation for pre PostgreSQL 12
  * fix compile for PostgreSQL 12
  * prepare for 3.7.2
  * bug fix release
  * fix bad filter in oracle.user_tables view
  * update NEWS
  * use older syntax for create operator command
  * add warning about possible compatibility issue
  * fix docs
  * null safe pipe operator for (n)varchar2 should be explicitly enabled (due compatibility)
  * bugfix should to use OR REPLACE clause
  * add bugfixes to update script
  * fix readme
  * more faster (n)varchar2 null safe concat
  * null safe concat operator for varchar2 and nvarchar2
  * fix compilation for PostgreSQL 12
  * target type should be qualified
  * broken formula for add_month
  * fix broken oracle.add_months for last day in month
  * fix comment assigned to wrong object
  * minor doc nvl</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273600">- remove dead PG versions</changelog>
  <changelog author="mrueckert@suse.de" date="1638273601">- Update to version 3.17.0+git12.e9ab8a3:
  * Fix some typos in plunit.c and plvdate.c.
  * Fix a non-standard function declaration.
  * pg_nextpower2_32 is available for pg13+|
  * fix typo in plvdate.c
  * fix typo in alert.c
  * Improve the place that double the size of a buffer
  * Fix access privileges of utl_file.tmpdir()
  * prepare for 3.17.0
  * This patch reproduce the same behavior of the regexp_* function with null input.
  * Fix version number in install script.
  * Remove duplicate variable declarations
  * Allow even longer runtimes in DBMS_UTILITY.GET_TIME test
  * prepare for 3.16.2
  * fix build for msvc
  * prepare for 3.16.1
  * sql/dbms_utility.sql: Allow longer test runtime
  * fix some shared memory leaks, reduce an possibility to raise an error 'lock requested error' by cleaning locks (these locks are not Postgres's locks) in dbms_alert_removeall and by triggering cleaning shared memory from locks related to closed processes when there are not free locks - per #PR 140 reported by @rbapin
  * prepare for 3.16.0
  * rename pipe type to orafce_pipe due conflict with pipe function from unistd.h
  * ensure public access to public schema
  * add missing sql file for 3.16
  * Add DBMS_UTILITY.GET_TIME function, it returns the current time in 100th's of a second from a point in time in the past. This function is used for determining elapsed time. This function is widely used in some Oracle installation for timing of functions or statements.
  * fix warning on MSVC
  * prepare for 3.15.1
  * Remove reference to pg_enc2name_tbl variable. It is not available on MSVC, and for this functionality it is not necessary
  * prepare for 3.15.0
  * function regexp_match cannot be used because it is available from Postgres 10
  * Add Oracle regexp_replace() function which supports start position and occurrence. It correspond to the Oracle behavior and consist in plpgsql functions based on PG regexp_matches() and regexp_replace(). All details of the implementation is explained in the documentation. Also include in this patch also include regression tests for regexp_replace() including the Oracle queries and results in comment.
  * just reformatting
  * just reformatting
  * Remove wrong and unused code.
  * Apply orafce rule for assignment on remaining call to position() and length.
  * Use better style for assignment instead of pseudo query.
  * - Improve performances by replacing SELECT ... INTO syntax with := - Replace call to regexp_match() by regexp_matches() to support   PostgreSQL 9.5 and 9.6. - Remove obsolete orafce--3.14.sql file - Update regression test to disable CONTEXT trace.
  * Add Oracle regexp_like(), regexp_count(), regexp_instr() and regexp_substr() functions. They correspond to the Oracle behavior and consist in plpgsql functions based on PG regexp_matches(). All details of the implementation is explained in the documentation. This patch also include a regression test regexp_func.sql including the Oracle queries and results in comment.
  * more ilustrative description of msvc project properties
  * Oracle.sysdate uses time zone stored in GUC orafce.timezone. The setting of configuration value was correct - the global variable orafce_timezone has correct content (it can be checked by SELECT oracle.dbtimezone(). But direct output of this GUC (show orafce.timezone) was broken because the handler of system timezone was used and the statement "show orafce.timezone" did same output like "show timezone", and it is surely wrong.
  * pre 3.14 changes
  * When nvarchar2 and varchar2 was introduced, then was not possibility to correctly set protransform column. Orafce used UPDATE of pg_proc table. Unfortunatelly, this new dependency was not coverget by entry in pg_depend. Today this issue breaks binary upgrade. Fix is simple - on new Postgres it uses ALTER FUNCTION SUPPORT, for older releases it tries to fix pg_depend table.
  * implementation of unistr function
  * Added ppc64le architecture
  * Added some transactions behavior differences
  * Catch dbms_random.string() output variation on big-endian
  * Fix the wrong filter in oracle.user_tables view in orafce--3.6--3.7.sql.
  * Update README.asciidoc
  * Update others.c
  * Use correct macros to convert between Datums and pointers.
  * note in readme
  * prepare for 3.13.4
  * forgotten files
  * prepare for 3.13.3
  * enable utf_file on MSWin
  * cleaning build on MSWin
  * reduce stack size
  * minor cleaning
  * prepare for 3.12
  * fix warning for postgres 13
  * fix asciidoc format
  * minor README fix
  * travis status
  * PostgreSQL 9.4 is not supported
  * example to trigger func
  * fix build and tests for older releases
  * trigger functions - ensure so only null or only empty string is used
  * fix: 'if' condition is always true
  * prepare for 3.11.1
  * missing test output file
  * only PostgreSQL 9.4 and higher are supported
  * Run the testsuite on travis-ci.org
  * clean warnings detected by -Wextra
  * forgot. GRANT
  * The previous securing of utl_file package required SECURITY DEFINER flags on functions. Using this flag is security risk. Insted using SECURITY DEFINER we allow READ from utl_file.utl_file_dir to PUBLIC. This design has one advantage - the final user can control usage of these function with granting user rights just only on table utl_file.utl_file_dir.
  * Update README.asciidoc
  * Update README.asciidoc
  * Update README.asciidoc
  * Update README.asciidoc
  * fix long standing bug - function with access to utl_file_dir should to has security definer flag
  * fix compilation against Postgres 13
  * small fixes and rewrite of utl_file paragraph
  * the safe dictionary in utl_file package can be identified by name too
  * Fix doc and comment about months_between returning numeric (not float8).
  * there are some differences between Oracle and Orafce
  * fix compilation on PostgreSQL 13 (by removing useless include), fix to_multi_byte('\')
  * prepare for 3.9.0
  * remove extra clean to allow repeateable build without bison
  * Orafce is licenced under 0-clause BSD licence
  * polishing licence
  * use postgres routines for printing float4, float8 values in to_char function (reduce garbage and trailing zeroes)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273602">- enable pg 13 and 14</changelog>
  <changelog author="mrueckert@suse.de" date="1675166400">- Update to version 4.1.1+git0.519b5b5:
  * prepare for 4.1.1
  * build on master (16) branch
  * use adv lock to synchronize start of pipe and alert tests
  * add connect by level &lt; num in migration docs
  * Hierarchical Query identifys the leaves
  * Update the connect_by_root example, for better semantics
  * fix: CONNECT_BY_ROOT in hierarchical query is converted to WITH RECURSIVE syntax
  * the table [200~utl_file.utl_file_dir is dumpable
  * fix compilation against pg master
  * prepare for 4.0.2
  * fix -wextra warnings
  * fix shadowed variable varning
  * fix msvc build for PostgreSQL 14
  * fix build for pg16
  * fix META file and prepare for 4.0.1
  * to_multi_byte and to_single_byte support euc_cn(gb2312)
  * add  oracle sql migration : CONNECT_BY_ROOT
  * fix oracle connect by
  * prepare for 4.0.0 release
  * remove obsolete ref on orafce_sql
  * rename shadow variable
  * initial merge of dbms_sql from orafce_sql
  * other cleaning after removing support for unsupported pg releases
  * increase version
  * remove support for PostgreSQL 10 and older
  * Fix database creation during installchecks for ICU cluster
  * fix dbms_output.serveroutput(true) clear the buffer.It conforms to the features of oracle.
  * prepare for 3.25.1
  * fix calculation of plvstr.is_prefix for negative numeric values - see issue #198
  * fix for pre 14 releases
  * doc and regress tests
  * remove useless func decl
  * support for older releases
  * initial implementation
  * initial
  * fix build against master (16) branch
  * wrap possible unsupported DDL to dynamic SQL
  * specify schema inside definition function tanh
  * only set editorconfig
  * prepare for 3.24.4
  * remove redundant ALTER FUNCTION #191
  * prepare for 3.24.3
  * PostgreSQL older than 12 doesn't allow ALTER FUNCTION pg_catalog.x SET SCHEMA oracle. Only dirty way by direct modification of system catalogue is possible. see issue #190
  * prepare for 3.24.2
  * fix missing oracle.mod functions in update scripts
  * prepare for 3.24.1
  * fix regress nlssort test for PostgreSQL 9.5 without \if command
  * Fix race condition during initialization in ora_lock_shmem.
  * nlssort: Add a missing call to PG_RE_THROW.
  * Limit nlssort test to Linux/glibc systems with en_US.utf8 installed.
  * NEWS
  * set storage for varchar2 and nvarchar2 to extended strategy
  * prepare for 3.23
  * fix broken calculation in plvdate_isleapyear function #184
  * fix support for pg9.5, fix regress tests for older releases
  * prepare for 3.22.1
  * Fix read past the end of string in to_sigle_byte().
  * Fix dbms_utility.get_time() to use the full range of int32.
  * fix readme
  * prepare for 3.22.0
  * move dbobjects from public and pg_catalog schemas to oracle schema
  * moving objects from public and pg_catalog to oracle schema
  * move RequestAddinShmemSpace to shmem_request_hook for PostgreSQL 15
  * Update sql_migration06.md
  * Restore sqlparse.c and sqlparse.h
  * Undo comment
  * Add comment
  * Add Parallel safe to mod function
  * Bug fix
  * Add mod function for Oracle compatibility
  * Fix typos and spelling in docs and error messages
  * prepare for 3.21.1
  * fix mswin build - regexp functions was not really marked as dllexport due missing include of builtins.h
  * remove empty line
  * fix of some compatibility issues
  * REG_NOSUB is working only on PostgreSQL 15
  * workable release for PostgreSQL 15
  * modification for compotibility with orafce.regexp_instr
  * backport regexp_instr from PostgreSQL 15, use C version instead PLpgSQL for better possibilities of usage regexp API
  * prepare for 3.20.0
  * Fix regexp_instr() function with occurrence when the same value matching a pattern is found at several place in the string.
  * signature of nvl2 function is enhanced to "any", anyelement, anyelement. After this change, the behavior is more close to Oracle. Unfortunatelly - this change can break extension update for some customers that uses nvl2 in views.
  * support negative start argument for function substrb. Originally orafce used buildin bytea substr function. Now it recalculate start argument. see issue #172
  * prepare for 3.19
  * Allow empty string on input of functions to_number and to_date. In this case returns NULL.
  * remove white spaces
  * replace obsolete CSTRING macro by text_to_csring function
  * prepare for 3.18.1
  * fix - badly handled fn_extra in oracle.greatest(least) function
  * prepare for 3.18.0
  * Update README.asciidoc
  * Update README.asciidoc
  * use older API for iteration over an array. Now, oracle.greatest and oracle.least are working on all supported releases
  * remove negative tests related to orafce.greatest because: a) error message is different on supported pg versions, b) the coverage and benefit of these tests is low
  * remove two lines from regress tests of greatest due dependency on used collate
  * Add documentation for greatest and least functions.
  * Update upgrade extension file with the smallint addition.
  * Add greatest/least SQL redefinition for smallint Add regression tests fot the two functions.
  * Oracle functions LEAST and GREATEST return NULL if at least one of the parameters is NULL. This is not the case for the PostgreSQL equivalent functions which only return NULL when all the parameters are NULL. This patch creates the two functions in the oracle schema to have the same behavior than in Oracle.
  * Minor grammatical fix to README.asciidoc
  * fix typo in charpad.c
  * fix typo in orafce--3.17.sql
  * Update Orafce_Documentation_05.md
  * Catch dbms_random.string() output variation on Windows</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675166401">- enable pg 15</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675166402">- remove pg 10 support</changelog>
  <changelog author="Emiliano Langella &lt;emiliano.langella@suse.com&gt;" date="1676030400">- Added "Name:" tag.</changelog>
</package>
<package pkgid="88cb5766ee1ed56b307b143ffc9fa096037e50c47d7937e50b40adbe5609d52f" name="postgresql15-orafce" arch="x86_64">
  <version epoch="0" ver="4.1.1+git0.519b5b5" rel="bp154.3.1"/>
  <changelog author="mrueckert@suse.de" date="1424347200">- update to 3.0.9
  * PostgreSQL 9.4 compilation
  * new datatype and related functions: oracle.date
  * new varchar2, nvarchar2 types and related functions
    (Amit Langote)
  * oracle.substr emulate better Oracle substr function behave
    (Vinayak Pokale)
  * fix few internal issues that breaks a PGXN tests (Pavel Stehule)</changelog>
  <changelog author="mrueckert@suse.de" date="1502366400">- switch to multibuild</changelog>
  <changelog author="mrueckert@suse.de" date="1502366401">- update to 3.4.0
  * new aggregate function wm_concat
  * PostgreSQL 9.6, 10 are supported well
  * remove support for 8.3, 8.4, 9.0, 9.1 (only 9.2 and higher
    are supported)
  * new functions: sysdate, sessiontimezone, dbtimezone
  * remove support for 8.2
  * add support for 9.5
  * change the releasion number system
  * new functions: to_single_byte, to_multi_byte, nanvl, length,
    ltrim, btrim, rtrim, lpad, rpad
  * fix compilation issue in new code for Pg &lt;= 9.1</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1540468800">- Add build for PostgreSQL 11 and drop 9.3.
- BuildRequire server-devel instead of devel.</changelog>
  <changelog author="mrueckert@suse.de" date="1540641600">- Update to version 3.6.1+git24.cf58d28:
  * remove strict flag for nvl functions
  * minor cleaning
  * remove pre 9.4 support
  * fixes for 12
  * fix compile on PostgreSQL 12
  * missing reset fsec in ora_timestamptz_round function
  * #74 - badly joined comment
  * #75 set correct type for trunc and round two params functions - float4
  * allow usage of schema oracle and plunit
  * copy paste correction intarray -&gt; orafce
  * fix broken compilation on non MSC platforms
  * fix output path
  * add postgresql 10.3 target support need ICU header by path c:\icu
  * fix conversion from 'size_t' to 'int'
  * add 9.6 build environments fix C89 compatible compliance
  * fix nensenses related yyllex, using older form of bison option
  * new function  oracle.numtodsinterval
  * disallow functions from utl_file package on MS Windows
  * clean headers used by msvc
  * cleaning complete build on msvc
  * add missing files for windows compilation
  * fix #64
  * dba_segments view, cleaning
  * Fix formatting of examples.
  * Append documentation about how to translate REGEXP_SUBSTR Oracle function to PostgreSQL.
  * fix the position of a half-width space added by rpad().
  * enhancing emulation of Oracle views
  * fix some segfaults reported by Andreas Seltenreich #59
  * new few Oracle system views
  * prepare for 3.6
  * Minor bug in doc
  * Avoid setting unused variable value
  * Fix issue #54 - missing collatable flag for string types varchar2, nvarchar2.
  * Ensure LWLockRegisterTranche call in every session before LWLockAcquire call.
  * Preparation for 3.5 release.
  * add missing V1 signatures
  * Add Orafce Documentation and Oracle to PostgreSQL Migration Guide
- drop patch orafce-orafce_sql_yyparse-bison26.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1571745600">- adding postgresql12 to _multibuild</changelog>
  <changelog author="mrueckert@suse.de" date="1571745601">- Update to version 3.8.0+git4.a65cfb8:
  * return back missing files
  * fresh parser files
  * master is now unreleased 3.9
  * minor enhancing user_constraints view - use conrelid::regclass instead table_name. This will be  consistent with index name, and show schema for tables that are not on search_path
  * prepare for 3.8
  * qualify decode function to be installable on greenplum
  * fix PostgreSQL 12 support
  * missing files
  * typo
  * fix compilation and regress tests for PostgreSQL 11
  * Revert "Merge pull request #83 from kato-sho/fix-build-for-PG12"
  * Fix build for PostgreSQL 12
  * remove extra #include utils/nabstime.h
  * update against change format of FunctionCallInfo in PostgreSQL 12
  * fix compilation for pre PostgreSQL 12
  * fix compile for PostgreSQL 12
  * prepare for 3.7.2
  * bug fix release
  * fix bad filter in oracle.user_tables view
  * update NEWS
  * use older syntax for create operator command
  * add warning about possible compatibility issue
  * fix docs
  * null safe pipe operator for (n)varchar2 should be explicitly enabled (due compatibility)
  * bugfix should to use OR REPLACE clause
  * add bugfixes to update script
  * fix readme
  * more faster (n)varchar2 null safe concat
  * null safe concat operator for varchar2 and nvarchar2
  * fix compilation for PostgreSQL 12
  * target type should be qualified
  * broken formula for add_month
  * fix broken oracle.add_months for last day in month
  * fix comment assigned to wrong object
  * minor doc nvl</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273600">- remove dead PG versions</changelog>
  <changelog author="mrueckert@suse.de" date="1638273601">- Update to version 3.17.0+git12.e9ab8a3:
  * Fix some typos in plunit.c and plvdate.c.
  * Fix a non-standard function declaration.
  * pg_nextpower2_32 is available for pg13+|
  * fix typo in plvdate.c
  * fix typo in alert.c
  * Improve the place that double the size of a buffer
  * Fix access privileges of utl_file.tmpdir()
  * prepare for 3.17.0
  * This patch reproduce the same behavior of the regexp_* function with null input.
  * Fix version number in install script.
  * Remove duplicate variable declarations
  * Allow even longer runtimes in DBMS_UTILITY.GET_TIME test
  * prepare for 3.16.2
  * fix build for msvc
  * prepare for 3.16.1
  * sql/dbms_utility.sql: Allow longer test runtime
  * fix some shared memory leaks, reduce an possibility to raise an error 'lock requested error' by cleaning locks (these locks are not Postgres's locks) in dbms_alert_removeall and by triggering cleaning shared memory from locks related to closed processes when there are not free locks - per #PR 140 reported by @rbapin
  * prepare for 3.16.0
  * rename pipe type to orafce_pipe due conflict with pipe function from unistd.h
  * ensure public access to public schema
  * add missing sql file for 3.16
  * Add DBMS_UTILITY.GET_TIME function, it returns the current time in 100th's of a second from a point in time in the past. This function is used for determining elapsed time. This function is widely used in some Oracle installation for timing of functions or statements.
  * fix warning on MSVC
  * prepare for 3.15.1
  * Remove reference to pg_enc2name_tbl variable. It is not available on MSVC, and for this functionality it is not necessary
  * prepare for 3.15.0
  * function regexp_match cannot be used because it is available from Postgres 10
  * Add Oracle regexp_replace() function which supports start position and occurrence. It correspond to the Oracle behavior and consist in plpgsql functions based on PG regexp_matches() and regexp_replace(). All details of the implementation is explained in the documentation. Also include in this patch also include regression tests for regexp_replace() including the Oracle queries and results in comment.
  * just reformatting
  * just reformatting
  * Remove wrong and unused code.
  * Apply orafce rule for assignment on remaining call to position() and length.
  * Use better style for assignment instead of pseudo query.
  * - Improve performances by replacing SELECT ... INTO syntax with := - Replace call to regexp_match() by regexp_matches() to support   PostgreSQL 9.5 and 9.6. - Remove obsolete orafce--3.14.sql file - Update regression test to disable CONTEXT trace.
  * Add Oracle regexp_like(), regexp_count(), regexp_instr() and regexp_substr() functions. They correspond to the Oracle behavior and consist in plpgsql functions based on PG regexp_matches(). All details of the implementation is explained in the documentation. This patch also include a regression test regexp_func.sql including the Oracle queries and results in comment.
  * more ilustrative description of msvc project properties
  * Oracle.sysdate uses time zone stored in GUC orafce.timezone. The setting of configuration value was correct - the global variable orafce_timezone has correct content (it can be checked by SELECT oracle.dbtimezone(). But direct output of this GUC (show orafce.timezone) was broken because the handler of system timezone was used and the statement "show orafce.timezone" did same output like "show timezone", and it is surely wrong.
  * pre 3.14 changes
  * When nvarchar2 and varchar2 was introduced, then was not possibility to correctly set protransform column. Orafce used UPDATE of pg_proc table. Unfortunatelly, this new dependency was not coverget by entry in pg_depend. Today this issue breaks binary upgrade. Fix is simple - on new Postgres it uses ALTER FUNCTION SUPPORT, for older releases it tries to fix pg_depend table.
  * implementation of unistr function
  * Added ppc64le architecture
  * Added some transactions behavior differences
  * Catch dbms_random.string() output variation on big-endian
  * Fix the wrong filter in oracle.user_tables view in orafce--3.6--3.7.sql.
  * Update README.asciidoc
  * Update others.c
  * Use correct macros to convert between Datums and pointers.
  * note in readme
  * prepare for 3.13.4
  * forgotten files
  * prepare for 3.13.3
  * enable utf_file on MSWin
  * cleaning build on MSWin
  * reduce stack size
  * minor cleaning
  * prepare for 3.12
  * fix warning for postgres 13
  * fix asciidoc format
  * minor README fix
  * travis status
  * PostgreSQL 9.4 is not supported
  * example to trigger func
  * fix build and tests for older releases
  * trigger functions - ensure so only null or only empty string is used
  * fix: 'if' condition is always true
  * prepare for 3.11.1
  * missing test output file
  * only PostgreSQL 9.4 and higher are supported
  * Run the testsuite on travis-ci.org
  * clean warnings detected by -Wextra
  * forgot. GRANT
  * The previous securing of utl_file package required SECURITY DEFINER flags on functions. Using this flag is security risk. Insted using SECURITY DEFINER we allow READ from utl_file.utl_file_dir to PUBLIC. This design has one advantage - the final user can control usage of these function with granting user rights just only on table utl_file.utl_file_dir.
  * Update README.asciidoc
  * Update README.asciidoc
  * Update README.asciidoc
  * Update README.asciidoc
  * fix long standing bug - function with access to utl_file_dir should to has security definer flag
  * fix compilation against Postgres 13
  * small fixes and rewrite of utl_file paragraph
  * the safe dictionary in utl_file package can be identified by name too
  * Fix doc and comment about months_between returning numeric (not float8).
  * there are some differences between Oracle and Orafce
  * fix compilation on PostgreSQL 13 (by removing useless include), fix to_multi_byte('\')
  * prepare for 3.9.0
  * remove extra clean to allow repeateable build without bison
  * Orafce is licenced under 0-clause BSD licence
  * polishing licence
  * use postgres routines for printing float4, float8 values in to_char function (reduce garbage and trailing zeroes)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273602">- enable pg 13 and 14</changelog>
  <changelog author="mrueckert@suse.de" date="1675166400">- Update to version 4.1.1+git0.519b5b5:
  * prepare for 4.1.1
  * build on master (16) branch
  * use adv lock to synchronize start of pipe and alert tests
  * add connect by level &lt; num in migration docs
  * Hierarchical Query identifys the leaves
  * Update the connect_by_root example, for better semantics
  * fix: CONNECT_BY_ROOT in hierarchical query is converted to WITH RECURSIVE syntax
  * the table [200~utl_file.utl_file_dir is dumpable
  * fix compilation against pg master
  * prepare for 4.0.2
  * fix -wextra warnings
  * fix shadowed variable varning
  * fix msvc build for PostgreSQL 14
  * fix build for pg16
  * fix META file and prepare for 4.0.1
  * to_multi_byte and to_single_byte support euc_cn(gb2312)
  * add  oracle sql migration : CONNECT_BY_ROOT
  * fix oracle connect by
  * prepare for 4.0.0 release
  * remove obsolete ref on orafce_sql
  * rename shadow variable
  * initial merge of dbms_sql from orafce_sql
  * other cleaning after removing support for unsupported pg releases
  * increase version
  * remove support for PostgreSQL 10 and older
  * Fix database creation during installchecks for ICU cluster
  * fix dbms_output.serveroutput(true) clear the buffer.It conforms to the features of oracle.
  * prepare for 3.25.1
  * fix calculation of plvstr.is_prefix for negative numeric values - see issue #198
  * fix for pre 14 releases
  * doc and regress tests
  * remove useless func decl
  * support for older releases
  * initial implementation
  * initial
  * fix build against master (16) branch
  * wrap possible unsupported DDL to dynamic SQL
  * specify schema inside definition function tanh
  * only set editorconfig
  * prepare for 3.24.4
  * remove redundant ALTER FUNCTION #191
  * prepare for 3.24.3
  * PostgreSQL older than 12 doesn't allow ALTER FUNCTION pg_catalog.x SET SCHEMA oracle. Only dirty way by direct modification of system catalogue is possible. see issue #190
  * prepare for 3.24.2
  * fix missing oracle.mod functions in update scripts
  * prepare for 3.24.1
  * fix regress nlssort test for PostgreSQL 9.5 without \if command
  * Fix race condition during initialization in ora_lock_shmem.
  * nlssort: Add a missing call to PG_RE_THROW.
  * Limit nlssort test to Linux/glibc systems with en_US.utf8 installed.
  * NEWS
  * set storage for varchar2 and nvarchar2 to extended strategy
  * prepare for 3.23
  * fix broken calculation in plvdate_isleapyear function #184
  * fix support for pg9.5, fix regress tests for older releases
  * prepare for 3.22.1
  * Fix read past the end of string in to_sigle_byte().
  * Fix dbms_utility.get_time() to use the full range of int32.
  * fix readme
  * prepare for 3.22.0
  * move dbobjects from public and pg_catalog schemas to oracle schema
  * moving objects from public and pg_catalog to oracle schema
  * move RequestAddinShmemSpace to shmem_request_hook for PostgreSQL 15
  * Update sql_migration06.md
  * Restore sqlparse.c and sqlparse.h
  * Undo comment
  * Add comment
  * Add Parallel safe to mod function
  * Bug fix
  * Add mod function for Oracle compatibility
  * Fix typos and spelling in docs and error messages
  * prepare for 3.21.1
  * fix mswin build - regexp functions was not really marked as dllexport due missing include of builtins.h
  * remove empty line
  * fix of some compatibility issues
  * REG_NOSUB is working only on PostgreSQL 15
  * workable release for PostgreSQL 15
  * modification for compotibility with orafce.regexp_instr
  * backport regexp_instr from PostgreSQL 15, use C version instead PLpgSQL for better possibilities of usage regexp API
  * prepare for 3.20.0
  * Fix regexp_instr() function with occurrence when the same value matching a pattern is found at several place in the string.
  * signature of nvl2 function is enhanced to "any", anyelement, anyelement. After this change, the behavior is more close to Oracle. Unfortunatelly - this change can break extension update for some customers that uses nvl2 in views.
  * support negative start argument for function substrb. Originally orafce used buildin bytea substr function. Now it recalculate start argument. see issue #172
  * prepare for 3.19
  * Allow empty string on input of functions to_number and to_date. In this case returns NULL.
  * remove white spaces
  * replace obsolete CSTRING macro by text_to_csring function
  * prepare for 3.18.1
  * fix - badly handled fn_extra in oracle.greatest(least) function
  * prepare for 3.18.0
  * Update README.asciidoc
  * Update README.asciidoc
  * use older API for iteration over an array. Now, oracle.greatest and oracle.least are working on all supported releases
  * remove negative tests related to orafce.greatest because: a) error message is different on supported pg versions, b) the coverage and benefit of these tests is low
  * remove two lines from regress tests of greatest due dependency on used collate
  * Add documentation for greatest and least functions.
  * Update upgrade extension file with the smallint addition.
  * Add greatest/least SQL redefinition for smallint Add regression tests fot the two functions.
  * Oracle functions LEAST and GREATEST return NULL if at least one of the parameters is NULL. This is not the case for the PostgreSQL equivalent functions which only return NULL when all the parameters are NULL. This patch creates the two functions in the oracle schema to have the same behavior than in Oracle.
  * Minor grammatical fix to README.asciidoc
  * fix typo in charpad.c
  * fix typo in orafce--3.17.sql
  * Update Orafce_Documentation_05.md
  * Catch dbms_random.string() output variation on Windows</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675166401">- enable pg 15</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675166402">- remove pg 10 support</changelog>
  <changelog author="Emiliano Langella &lt;emiliano.langella@suse.com&gt;" date="1676030400">- Added "Name:" tag.</changelog>
</package>
<package pkgid="a12b5549571a2826c07fca5ada1b3f2a1d8f138c126b0de69496af233b92a2c7" name="postgresql15-timescaledb" arch="aarch64">
  <version epoch="0" ver="2.9.3" rel="bp154.2.3.1"/>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1588680000">- update to 1.7.0
  https://github.com/timescale/timescaledb/releases/tag/1.7.0</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1592395200">- update to version 1.7.1 bugfix
  https://github.com/timescale/timescaledb/releases/tag/1.7.1
  Please note that with the release of 1.7, support for PostgreSQL
  9.6.x and 10.x are deprecated. version 2 will only support 11,12
- Packaging :
  + Activate postgresql12 supported now
  + Modifiy download url to grab a nice named tar.gz</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1601035200">- update to version 1.7.4
  https://github.com/timescale/timescaledb/releases/tag/1.7.2
  https://github.com/timescale/timescaledb/releases/tag/1.7.3
  https://github.com/timescale/timescaledb/releases/tag/1.7.4</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1625054400">- Do not build postgresql96 flavor on Tumbleweed.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273600">- Update to version 2.5.0
  https://github.com/timescale/timescaledb/releases/tag/1.7.5
  https://github.com/timescale/timescaledb/releases/tag/2.0.0
  https://github.com/timescale/timescaledb/releases/tag/2.0.1
  https://github.com/timescale/timescaledb/releases/tag/2.0.2
  https://github.com/timescale/timescaledb/releases/tag/2.1.0
  https://github.com/timescale/timescaledb/releases/tag/2.1.1
  https://github.com/timescale/timescaledb/releases/tag/2.2.0
  https://github.com/timescale/timescaledb/releases/tag/2.2.1
  https://github.com/timescale/timescaledb/releases/tag/2.3.0
  https://github.com/timescale/timescaledb/releases/tag/2.3.1
  https://github.com/timescale/timescaledb/releases/tag/2.4.0
  https://github.com/timescale/timescaledb/releases/tag/2.4.1
  https://github.com/timescale/timescaledb/releases/tag/2.4.2
  https://github.com/timescale/timescaledb/releases/tag/2.5.0
- enable postgresql14
- port to postgresql macros
- refresh clang-format9_support.diff</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273601">- switch to %{pg_name}-server-devel</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1643371200">- Update to version 2.5.1
  https://github.com/timescale/timescaledb/releases/tag/2.5.1</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1644494400">- Update to version 2.5.2
  https://github.com/timescale/timescaledb/releases/tag/2.5.2</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1645617600">- Update to version 2.6.0
  https://github.com/timescale/timescaledb/releases/tag/2.6.0</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1647345600">- Added patch ab6b90caf.patch containing explicit mention of
  CVE-2022-24128 closing boo#1197063</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1649764800">- Update to version 2.6.1
  https://github.com/timescale/timescaledb/releases/tag/2.6.1
- refreshed patches:
  clang-format9_support.diff
  ab6b90caf.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1653393600">- Update to version 2.7.0
  https://github.com/timescale/timescaledb/releases/tag/2.7.0
- drop ab6b90caf.patch: included upstream</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1659268800">- Update to version 2.7.2
  https://github.com/timescale/timescaledb/releases/tag/2.7.1
  https://github.com/timescale/timescaledb/releases/tag/2.7.2</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1661947200">- Update to version 2.8.0
  https://github.com/timescale/timescaledb/releases/tag/2.8.0
- refreshed clang-format9_support.diff</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1665403200">- Update to version 2.8.1
  https://github.com/timescale/timescaledb/releases/tag/2.8.1</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1671537600">- Update to version 2.9.0
  https://github.com/timescale/timescaledb/releases/tag/2.9.0
- dropped clang-format9_support.diff:
  minimum required version is now 14</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1671883200">- Update to version 2.9.1
  https://github.com/timescale/timescaledb/releases/tag/2.9.1</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1674561600">- Update to version 2.9.2
  https://github.com/timescale/timescaledb/releases/tag/2.9.2</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675166400">- enable pg 15 build</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675684800">- Update to version 2.9.3
  https://github.com/timescale/timescaledb/releases/tag/2.9.3</changelog>
</package>
<package pkgid="1d46f230d82d2790e49e90d02e4e4e302b9977b7bd88dc37cfce864db01e7b78" name="postgresql15-timescaledb" arch="i586">
  <version epoch="0" ver="2.9.3" rel="bp154.2.3.1"/>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1588680000">- update to 1.7.0
  https://github.com/timescale/timescaledb/releases/tag/1.7.0</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1592395200">- update to version 1.7.1 bugfix
  https://github.com/timescale/timescaledb/releases/tag/1.7.1
  Please note that with the release of 1.7, support for PostgreSQL
  9.6.x and 10.x are deprecated. version 2 will only support 11,12
- Packaging :
  + Activate postgresql12 supported now
  + Modifiy download url to grab a nice named tar.gz</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1601035200">- update to version 1.7.4
  https://github.com/timescale/timescaledb/releases/tag/1.7.2
  https://github.com/timescale/timescaledb/releases/tag/1.7.3
  https://github.com/timescale/timescaledb/releases/tag/1.7.4</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1625054400">- Do not build postgresql96 flavor on Tumbleweed.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273600">- Update to version 2.5.0
  https://github.com/timescale/timescaledb/releases/tag/1.7.5
  https://github.com/timescale/timescaledb/releases/tag/2.0.0
  https://github.com/timescale/timescaledb/releases/tag/2.0.1
  https://github.com/timescale/timescaledb/releases/tag/2.0.2
  https://github.com/timescale/timescaledb/releases/tag/2.1.0
  https://github.com/timescale/timescaledb/releases/tag/2.1.1
  https://github.com/timescale/timescaledb/releases/tag/2.2.0
  https://github.com/timescale/timescaledb/releases/tag/2.2.1
  https://github.com/timescale/timescaledb/releases/tag/2.3.0
  https://github.com/timescale/timescaledb/releases/tag/2.3.1
  https://github.com/timescale/timescaledb/releases/tag/2.4.0
  https://github.com/timescale/timescaledb/releases/tag/2.4.1
  https://github.com/timescale/timescaledb/releases/tag/2.4.2
  https://github.com/timescale/timescaledb/releases/tag/2.5.0
- enable postgresql14
- port to postgresql macros
- refresh clang-format9_support.diff</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273601">- switch to %{pg_name}-server-devel</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1643371200">- Update to version 2.5.1
  https://github.com/timescale/timescaledb/releases/tag/2.5.1</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1644494400">- Update to version 2.5.2
  https://github.com/timescale/timescaledb/releases/tag/2.5.2</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1645617600">- Update to version 2.6.0
  https://github.com/timescale/timescaledb/releases/tag/2.6.0</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1647345600">- Added patch ab6b90caf.patch containing explicit mention of
  CVE-2022-24128 closing boo#1197063</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1649764800">- Update to version 2.6.1
  https://github.com/timescale/timescaledb/releases/tag/2.6.1
- refreshed patches:
  clang-format9_support.diff
  ab6b90caf.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1653393600">- Update to version 2.7.0
  https://github.com/timescale/timescaledb/releases/tag/2.7.0
- drop ab6b90caf.patch: included upstream</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1659268800">- Update to version 2.7.2
  https://github.com/timescale/timescaledb/releases/tag/2.7.1
  https://github.com/timescale/timescaledb/releases/tag/2.7.2</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1661947200">- Update to version 2.8.0
  https://github.com/timescale/timescaledb/releases/tag/2.8.0
- refreshed clang-format9_support.diff</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1665403200">- Update to version 2.8.1
  https://github.com/timescale/timescaledb/releases/tag/2.8.1</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1671537600">- Update to version 2.9.0
  https://github.com/timescale/timescaledb/releases/tag/2.9.0
- dropped clang-format9_support.diff:
  minimum required version is now 14</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1671883200">- Update to version 2.9.1
  https://github.com/timescale/timescaledb/releases/tag/2.9.1</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1674561600">- Update to version 2.9.2
  https://github.com/timescale/timescaledb/releases/tag/2.9.2</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675166400">- enable pg 15 build</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675684800">- Update to version 2.9.3
  https://github.com/timescale/timescaledb/releases/tag/2.9.3</changelog>
</package>
<package pkgid="922f45b4e0bee5d23ebcc5109ed1b83320ea42187136967bfcdbaba7e9f53b11" name="postgresql15-timescaledb" arch="ppc64le">
  <version epoch="0" ver="2.9.3" rel="bp154.2.3.1"/>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1588680000">- update to 1.7.0
  https://github.com/timescale/timescaledb/releases/tag/1.7.0</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1592395200">- update to version 1.7.1 bugfix
  https://github.com/timescale/timescaledb/releases/tag/1.7.1
  Please note that with the release of 1.7, support for PostgreSQL
  9.6.x and 10.x are deprecated. version 2 will only support 11,12
- Packaging :
  + Activate postgresql12 supported now
  + Modifiy download url to grab a nice named tar.gz</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1601035200">- update to version 1.7.4
  https://github.com/timescale/timescaledb/releases/tag/1.7.2
  https://github.com/timescale/timescaledb/releases/tag/1.7.3
  https://github.com/timescale/timescaledb/releases/tag/1.7.4</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1625054400">- Do not build postgresql96 flavor on Tumbleweed.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273600">- Update to version 2.5.0
  https://github.com/timescale/timescaledb/releases/tag/1.7.5
  https://github.com/timescale/timescaledb/releases/tag/2.0.0
  https://github.com/timescale/timescaledb/releases/tag/2.0.1
  https://github.com/timescale/timescaledb/releases/tag/2.0.2
  https://github.com/timescale/timescaledb/releases/tag/2.1.0
  https://github.com/timescale/timescaledb/releases/tag/2.1.1
  https://github.com/timescale/timescaledb/releases/tag/2.2.0
  https://github.com/timescale/timescaledb/releases/tag/2.2.1
  https://github.com/timescale/timescaledb/releases/tag/2.3.0
  https://github.com/timescale/timescaledb/releases/tag/2.3.1
  https://github.com/timescale/timescaledb/releases/tag/2.4.0
  https://github.com/timescale/timescaledb/releases/tag/2.4.1
  https://github.com/timescale/timescaledb/releases/tag/2.4.2
  https://github.com/timescale/timescaledb/releases/tag/2.5.0
- enable postgresql14
- port to postgresql macros
- refresh clang-format9_support.diff</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273601">- switch to %{pg_name}-server-devel</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1643371200">- Update to version 2.5.1
  https://github.com/timescale/timescaledb/releases/tag/2.5.1</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1644494400">- Update to version 2.5.2
  https://github.com/timescale/timescaledb/releases/tag/2.5.2</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1645617600">- Update to version 2.6.0
  https://github.com/timescale/timescaledb/releases/tag/2.6.0</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1647345600">- Added patch ab6b90caf.patch containing explicit mention of
  CVE-2022-24128 closing boo#1197063</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1649764800">- Update to version 2.6.1
  https://github.com/timescale/timescaledb/releases/tag/2.6.1
- refreshed patches:
  clang-format9_support.diff
  ab6b90caf.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1653393600">- Update to version 2.7.0
  https://github.com/timescale/timescaledb/releases/tag/2.7.0
- drop ab6b90caf.patch: included upstream</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1659268800">- Update to version 2.7.2
  https://github.com/timescale/timescaledb/releases/tag/2.7.1
  https://github.com/timescale/timescaledb/releases/tag/2.7.2</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1661947200">- Update to version 2.8.0
  https://github.com/timescale/timescaledb/releases/tag/2.8.0
- refreshed clang-format9_support.diff</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1665403200">- Update to version 2.8.1
  https://github.com/timescale/timescaledb/releases/tag/2.8.1</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1671537600">- Update to version 2.9.0
  https://github.com/timescale/timescaledb/releases/tag/2.9.0
- dropped clang-format9_support.diff:
  minimum required version is now 14</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1671883200">- Update to version 2.9.1
  https://github.com/timescale/timescaledb/releases/tag/2.9.1</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1674561600">- Update to version 2.9.2
  https://github.com/timescale/timescaledb/releases/tag/2.9.2</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675166400">- enable pg 15 build</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675684800">- Update to version 2.9.3
  https://github.com/timescale/timescaledb/releases/tag/2.9.3</changelog>
</package>
<package pkgid="17ccba5b3d1bc614b43bc4c6cf54aeced06156c2c7b62c68773c75a59ee0df1d" name="postgresql15-timescaledb" arch="s390x">
  <version epoch="0" ver="2.9.3" rel="bp154.2.3.1"/>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1588680000">- update to 1.7.0
  https://github.com/timescale/timescaledb/releases/tag/1.7.0</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1592395200">- update to version 1.7.1 bugfix
  https://github.com/timescale/timescaledb/releases/tag/1.7.1
  Please note that with the release of 1.7, support for PostgreSQL
  9.6.x and 10.x are deprecated. version 2 will only support 11,12
- Packaging :
  + Activate postgresql12 supported now
  + Modifiy download url to grab a nice named tar.gz</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1601035200">- update to version 1.7.4
  https://github.com/timescale/timescaledb/releases/tag/1.7.2
  https://github.com/timescale/timescaledb/releases/tag/1.7.3
  https://github.com/timescale/timescaledb/releases/tag/1.7.4</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1625054400">- Do not build postgresql96 flavor on Tumbleweed.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273600">- Update to version 2.5.0
  https://github.com/timescale/timescaledb/releases/tag/1.7.5
  https://github.com/timescale/timescaledb/releases/tag/2.0.0
  https://github.com/timescale/timescaledb/releases/tag/2.0.1
  https://github.com/timescale/timescaledb/releases/tag/2.0.2
  https://github.com/timescale/timescaledb/releases/tag/2.1.0
  https://github.com/timescale/timescaledb/releases/tag/2.1.1
  https://github.com/timescale/timescaledb/releases/tag/2.2.0
  https://github.com/timescale/timescaledb/releases/tag/2.2.1
  https://github.com/timescale/timescaledb/releases/tag/2.3.0
  https://github.com/timescale/timescaledb/releases/tag/2.3.1
  https://github.com/timescale/timescaledb/releases/tag/2.4.0
  https://github.com/timescale/timescaledb/releases/tag/2.4.1
  https://github.com/timescale/timescaledb/releases/tag/2.4.2
  https://github.com/timescale/timescaledb/releases/tag/2.5.0
- enable postgresql14
- port to postgresql macros
- refresh clang-format9_support.diff</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273601">- switch to %{pg_name}-server-devel</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1643371200">- Update to version 2.5.1
  https://github.com/timescale/timescaledb/releases/tag/2.5.1</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1644494400">- Update to version 2.5.2
  https://github.com/timescale/timescaledb/releases/tag/2.5.2</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1645617600">- Update to version 2.6.0
  https://github.com/timescale/timescaledb/releases/tag/2.6.0</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1647345600">- Added patch ab6b90caf.patch containing explicit mention of
  CVE-2022-24128 closing boo#1197063</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1649764800">- Update to version 2.6.1
  https://github.com/timescale/timescaledb/releases/tag/2.6.1
- refreshed patches:
  clang-format9_support.diff
  ab6b90caf.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1653393600">- Update to version 2.7.0
  https://github.com/timescale/timescaledb/releases/tag/2.7.0
- drop ab6b90caf.patch: included upstream</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1659268800">- Update to version 2.7.2
  https://github.com/timescale/timescaledb/releases/tag/2.7.1
  https://github.com/timescale/timescaledb/releases/tag/2.7.2</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1661947200">- Update to version 2.8.0
  https://github.com/timescale/timescaledb/releases/tag/2.8.0
- refreshed clang-format9_support.diff</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1665403200">- Update to version 2.8.1
  https://github.com/timescale/timescaledb/releases/tag/2.8.1</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1671537600">- Update to version 2.9.0
  https://github.com/timescale/timescaledb/releases/tag/2.9.0
- dropped clang-format9_support.diff:
  minimum required version is now 14</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1671883200">- Update to version 2.9.1
  https://github.com/timescale/timescaledb/releases/tag/2.9.1</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1674561600">- Update to version 2.9.2
  https://github.com/timescale/timescaledb/releases/tag/2.9.2</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675166400">- enable pg 15 build</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675684800">- Update to version 2.9.3
  https://github.com/timescale/timescaledb/releases/tag/2.9.3</changelog>
</package>
<package pkgid="94ab6643253a2bd262204873a91e16c3eb4bea607fa6d0c1b6a7892062ec381b" name="postgresql15-timescaledb" arch="src">
  <version epoch="0" ver="2.9.3" rel="bp154.2.3.1"/>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1588680000">- update to 1.7.0
  https://github.com/timescale/timescaledb/releases/tag/1.7.0</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1592395200">- update to version 1.7.1 bugfix
  https://github.com/timescale/timescaledb/releases/tag/1.7.1
  Please note that with the release of 1.7, support for PostgreSQL
  9.6.x and 10.x are deprecated. version 2 will only support 11,12
- Packaging :
  + Activate postgresql12 supported now
  + Modifiy download url to grab a nice named tar.gz</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1601035200">- update to version 1.7.4
  https://github.com/timescale/timescaledb/releases/tag/1.7.2
  https://github.com/timescale/timescaledb/releases/tag/1.7.3
  https://github.com/timescale/timescaledb/releases/tag/1.7.4</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1625054400">- Do not build postgresql96 flavor on Tumbleweed.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273600">- Update to version 2.5.0
  https://github.com/timescale/timescaledb/releases/tag/1.7.5
  https://github.com/timescale/timescaledb/releases/tag/2.0.0
  https://github.com/timescale/timescaledb/releases/tag/2.0.1
  https://github.com/timescale/timescaledb/releases/tag/2.0.2
  https://github.com/timescale/timescaledb/releases/tag/2.1.0
  https://github.com/timescale/timescaledb/releases/tag/2.1.1
  https://github.com/timescale/timescaledb/releases/tag/2.2.0
  https://github.com/timescale/timescaledb/releases/tag/2.2.1
  https://github.com/timescale/timescaledb/releases/tag/2.3.0
  https://github.com/timescale/timescaledb/releases/tag/2.3.1
  https://github.com/timescale/timescaledb/releases/tag/2.4.0
  https://github.com/timescale/timescaledb/releases/tag/2.4.1
  https://github.com/timescale/timescaledb/releases/tag/2.4.2
  https://github.com/timescale/timescaledb/releases/tag/2.5.0
- enable postgresql14
- port to postgresql macros
- refresh clang-format9_support.diff</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273601">- switch to %{pg_name}-server-devel</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1643371200">- Update to version 2.5.1
  https://github.com/timescale/timescaledb/releases/tag/2.5.1</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1644494400">- Update to version 2.5.2
  https://github.com/timescale/timescaledb/releases/tag/2.5.2</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1645617600">- Update to version 2.6.0
  https://github.com/timescale/timescaledb/releases/tag/2.6.0</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1647345600">- Added patch ab6b90caf.patch containing explicit mention of
  CVE-2022-24128 closing boo#1197063</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1649764800">- Update to version 2.6.1
  https://github.com/timescale/timescaledb/releases/tag/2.6.1
- refreshed patches:
  clang-format9_support.diff
  ab6b90caf.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1653393600">- Update to version 2.7.0
  https://github.com/timescale/timescaledb/releases/tag/2.7.0
- drop ab6b90caf.patch: included upstream</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1659268800">- Update to version 2.7.2
  https://github.com/timescale/timescaledb/releases/tag/2.7.1
  https://github.com/timescale/timescaledb/releases/tag/2.7.2</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1661947200">- Update to version 2.8.0
  https://github.com/timescale/timescaledb/releases/tag/2.8.0
- refreshed clang-format9_support.diff</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1665403200">- Update to version 2.8.1
  https://github.com/timescale/timescaledb/releases/tag/2.8.1</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1671537600">- Update to version 2.9.0
  https://github.com/timescale/timescaledb/releases/tag/2.9.0
- dropped clang-format9_support.diff:
  minimum required version is now 14</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1671883200">- Update to version 2.9.1
  https://github.com/timescale/timescaledb/releases/tag/2.9.1</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1674561600">- Update to version 2.9.2
  https://github.com/timescale/timescaledb/releases/tag/2.9.2</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675166400">- enable pg 15 build</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675684800">- Update to version 2.9.3
  https://github.com/timescale/timescaledb/releases/tag/2.9.3</changelog>
</package>
<package pkgid="33f77d9416f9ca6f65bcaa5b299ccf026d8ee031909984c799d8fcc6871149d9" name="postgresql15-timescaledb" arch="x86_64">
  <version epoch="0" ver="2.9.3" rel="bp154.2.3.1"/>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1588680000">- update to 1.7.0
  https://github.com/timescale/timescaledb/releases/tag/1.7.0</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1592395200">- update to version 1.7.1 bugfix
  https://github.com/timescale/timescaledb/releases/tag/1.7.1
  Please note that with the release of 1.7, support for PostgreSQL
  9.6.x and 10.x are deprecated. version 2 will only support 11,12
- Packaging :
  + Activate postgresql12 supported now
  + Modifiy download url to grab a nice named tar.gz</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1601035200">- update to version 1.7.4
  https://github.com/timescale/timescaledb/releases/tag/1.7.2
  https://github.com/timescale/timescaledb/releases/tag/1.7.3
  https://github.com/timescale/timescaledb/releases/tag/1.7.4</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1625054400">- Do not build postgresql96 flavor on Tumbleweed.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273600">- Update to version 2.5.0
  https://github.com/timescale/timescaledb/releases/tag/1.7.5
  https://github.com/timescale/timescaledb/releases/tag/2.0.0
  https://github.com/timescale/timescaledb/releases/tag/2.0.1
  https://github.com/timescale/timescaledb/releases/tag/2.0.2
  https://github.com/timescale/timescaledb/releases/tag/2.1.0
  https://github.com/timescale/timescaledb/releases/tag/2.1.1
  https://github.com/timescale/timescaledb/releases/tag/2.2.0
  https://github.com/timescale/timescaledb/releases/tag/2.2.1
  https://github.com/timescale/timescaledb/releases/tag/2.3.0
  https://github.com/timescale/timescaledb/releases/tag/2.3.1
  https://github.com/timescale/timescaledb/releases/tag/2.4.0
  https://github.com/timescale/timescaledb/releases/tag/2.4.1
  https://github.com/timescale/timescaledb/releases/tag/2.4.2
  https://github.com/timescale/timescaledb/releases/tag/2.5.0
- enable postgresql14
- port to postgresql macros
- refresh clang-format9_support.diff</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273601">- switch to %{pg_name}-server-devel</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1643371200">- Update to version 2.5.1
  https://github.com/timescale/timescaledb/releases/tag/2.5.1</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1644494400">- Update to version 2.5.2
  https://github.com/timescale/timescaledb/releases/tag/2.5.2</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1645617600">- Update to version 2.6.0
  https://github.com/timescale/timescaledb/releases/tag/2.6.0</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1647345600">- Added patch ab6b90caf.patch containing explicit mention of
  CVE-2022-24128 closing boo#1197063</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1649764800">- Update to version 2.6.1
  https://github.com/timescale/timescaledb/releases/tag/2.6.1
- refreshed patches:
  clang-format9_support.diff
  ab6b90caf.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1653393600">- Update to version 2.7.0
  https://github.com/timescale/timescaledb/releases/tag/2.7.0
- drop ab6b90caf.patch: included upstream</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1659268800">- Update to version 2.7.2
  https://github.com/timescale/timescaledb/releases/tag/2.7.1
  https://github.com/timescale/timescaledb/releases/tag/2.7.2</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1661947200">- Update to version 2.8.0
  https://github.com/timescale/timescaledb/releases/tag/2.8.0
- refreshed clang-format9_support.diff</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1665403200">- Update to version 2.8.1
  https://github.com/timescale/timescaledb/releases/tag/2.8.1</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1671537600">- Update to version 2.9.0
  https://github.com/timescale/timescaledb/releases/tag/2.9.0
- dropped clang-format9_support.diff:
  minimum required version is now 14</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1671883200">- Update to version 2.9.1
  https://github.com/timescale/timescaledb/releases/tag/2.9.1</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1674561600">- Update to version 2.9.2
  https://github.com/timescale/timescaledb/releases/tag/2.9.2</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675166400">- enable pg 15 build</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675684800">- Update to version 2.9.3
  https://github.com/timescale/timescaledb/releases/tag/2.9.3</changelog>
</package>
<package pkgid="fa0154356988605cfa1ab4c3b09f8229e735ed430671a93e702b142c63743794" name="privoxy" arch="aarch64">
  <version epoch="0" ver="3.0.33" rel="bp154.3.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashisms in pre script</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1417176000">- Privoxy 3.0.22 [boo#907675]
- Bug fixes:
  - Fixed a memory leak when rejecting client connections
    [CVE-2015-1030 [CVE-2015-1031] [boo#913094]
  - Fixed an immediate-use-after-free bug and two additional
    unconfirmed use-after-free complaints
    [CVE-2015-1201] [boo#914450]
  - Actually show the FORCE_PREFIX value on the show-status page.
  - Properly deal with Keep-Alive headers with timeout= parameters
  - Not using any filter files no longer results in warning messages
    unless an action file is referencing header taggers or filters.
  - Fixed a bug that prevented Privoxy from reusing some reusable
    connections.
- General improvements:
  - Introduced NO-REQUEST-TAG and NO-RESPONSE-TAG.
  - Add support for the 'PATCH' method as defined in RFC5789.
  - Reject requests with unsupported Expect header values.
  - Normalize the HTTP-version in forwarded requests and responses.
  - Server 'Keep-Alive' headers are no longer forwarded.
  - Change declared template file encoding to UTF-8.
  - Do not pass rejected keep-alive timeouts to the server.
  - CGI templates no longer enforce new windows for some links.
  - Documentation improvements
  - Build system improvements
- Action file improvements:
  - The pattern 'promotions.' is no longer being blocked.
  - Various updated filter rules and exceptions.
- Filter file improvements &amp; bug fixes:
  - Decrease the chances that js-annoyances creates invalid JavaScript.
  - Let the msn filter hide 'related' ads again.
  - Prevent img-reorder from messing up img tags with empty src
    attributes.
- add source URL
- fix self-obsoletion
- clean up spec file</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1422273600">- update to version 3.0.23 [boo#914934]
  - Bug fixes:
  - Fixed a DoS issue in case of client requests with incorrect
    chunk-encoded body. When compiled with assertions enabled
    (the default) they could previously cause Privoxy to abort().
    [CVE-2015-1380]
  - Fixed multiple segmentation faults and memory leaks in the
    pcrs code. This fix also increases the chances that an invalid
    pcrs command is rejected as such. Previously some invalid commands
    would be loaded without error. Note that Privoxy's pcrs sources
    (action and filter files) are considered trustworthy input and
    should not be writable by untrusted third-parties.
    [CVE-2015-1381]
  - Fixed an 'invalid read' bug which could at least theoretically
    cause Privoxy to crash. So far, no crashes have been observed.
  - Compiles with --disable-force again. Reported by Kay Raven.
  - Client requests with body that can't be delivered no longer
    cause pipelined requests behind them to be rejected as invalid.
    [CVE-2015-1382]
  - General improvements:
  - If a pcrs command is rejected as invalid, Privoxy now logs
    the cause of the problem as text. Previously the pcrs error
    code was logged.
  - The tests are less likely to cause false positives.
  - Action file improvements:
  - '.sify.com/' is no longer blocked. Apparently it is not actually
    a pure tracking site (anymore?). Reported by Andrew on ijbswa-users@.
  - Unblock banners on .amnesty.de/ which aren't ads.
  - Documentation improvements:
  - The 'Would you like to donate?' section now also contains
    a "Paypal" address.
  - The list of supported operating systems has been updated.
  - The existence of the SF support and feature trackers has been
    deemphasized because they have been broken for months.
    Most of the time the mailing lists still work.
  - The claim that default.action updates are sometimes released
    on their own has been removed. It hasn't happened in years.
  - Explicitly mention that Tor's port may deviate from the default
    when using a bundle. Requested by Andrew on ijbswa-users@.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1422360000">- add CVE and bug IDs to last two changelog entries</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1422446400">- add CVE IDs for [boo#914934]</changelog>
  <changelog author="astieger@suse.com" date="1453550400">- Privoxy 3.0.24
  Includes fixes for two security issues that may be used to
  remotely trigger crashes on platforms that carefully check memory
  accesses.
  * Security fixes (denial of service):
    + Prevent invalid reads in case of corrupt chunk-encoded
    content. CVE-2016-1982 [boo#963151]
    + Remove empty Host headers in client requests. Previously
    they would result in invalid reads. CVE-2016-1983 [boo#963152]
  * General bug fixes and improvements
  * White and blacklist updates</changelog>
  <changelog author="kieltux@gmail.com" date="1475064000">- Update to version 3.0.26
  * Bug fixes:
  - Fixed crashes with "listen-addr :8118" (SF Bug #902).
    The regression was introduced in 3.0.25 beta and reported
    by Marvin Renich in Debian bug #834941.
  * General improvements:
  - Log when privoxy is toggled on or off via cgi interface.
  - Highlight the "Info: Now toggled " on/off log message
    in the Windows log viewer.
  - Highlight the loading actions/filter file log message
    in the Windows log viewer.
  - Mention client-specific tags on the toggle page as a
    potentionally more appropriate alternative.
  * Infrastructure improvements:
  - Add perl script to generate an RSS feed for the packages
    Submitted by "Unknown".
  * Build system improvements:
  - strptime.h: fix a compiler warning about ambiguous else.
  - configure.in: Check for Docbook goo on the BSDs as well.
  - GNUMakefile.in: Let the dok-user target remove
    temporary files.
- BuildArch for docs: noarch</changelog>
  <changelog author="sean@suspend.net" date="1546257600">- Update to version 3.0.28:
  * Bug fixes:
  - Fix misplaced parentheses
  - Changed two regression tests to depend on config directive</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1564056000">- removal of SuSEfirewall2 service, since SuSEfirewall2 has been replaced by
  firewalld, see [1].
  [1]: https://lists.opensuse.org/opensuse-factory/2019-01/msg00490.html</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1580731200">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1597838400">- Stop trying to mangle _unitdir: this is defined in all supported
  distros.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1607256000">- add upstream signing key and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1607256001">- privoxy 3.0.29:
  * Fixed memory leaks when a response is buffered and the buffer
    limit is reached or Privoxy is running out of memory.
    OVE-20201118-0001
  * Fixed a memory leak in the show-status CGI handler when
    no action files are configured
    OVE-20201118-0002
  * Fixed a memory leak in the show-status CGI handler when
    no filter files are configured
    OVE-20201118-0003
  * Fixes a memory leak when client tags are active
    OVE-20201118-0004
  * Fixed a memory leak if multiple filters are executed
    and the last one is skipped due to a pcre error
    OVE-20201118-0005
  * Prevent an unlikely dereference of a NULL-pointer that
    could result in a crash if accept-intercepted-requests
    was enabled, Privoxy failed to get the request destination
    from the Host header and a memory allocation failed.
    OVE-20201118-0006
  * Fixed memory leaks in the client-tags CGI handler when
    client tags are configured and memory allocations fail.
    OVE-20201118-0007
  * Fixed memory leaks in the show-status CGI handler when memory
    allocations fail
    OVE-20201118-0008
  * Add experimental https inspection support
  * Use JIT compilation for static filtering for speedup
  * Add support for Brotli decompression, add
    'no-brotli-accepted' filter which prevents the use of
    Brotli compression
  * Add feature to gather exended statistics
  * Use IP_FREEBIND socket option to help with failover
  * Allow to use extended host patterns and vanilla host patterns
    at the same time by prefixing extended host patterns with
    "PCRE-HOST-PATTERN:"
  * Added "Cross-origin resource sharing" (CORS) support
  * Add SOCKS5 username/password support
  * Bump the maximum number of action and filter files
    to 100 each
  * Fixed handling of filters with "split-large-forms 1"
    when using the CGI editor.
  * Better detect a mismatch of connection details when
    figuring out whether or not a connection can be reused
  * Don't send a "Connection failure" message instead of the
    "DNS failure" message
  * Let LOG_LEVEL_REQUEST log all requests
  * Improvements to default Action file
- license changed to GPLv3
- remove packaging vulnerability boo#1157449
- remove packaging for distributions without systemd
  drops privoxy-3.0.16-networkmanager.patch</changelog>
  <changelog author="Carsten Ziepke &lt;kieltux@gmail.com&gt;" date="1612180800">- Update to version 3.0.31:
  - Security/Reliability (boo#1181650)
  - Prevent an assertion from getting triggered by a crafted
    CGI request.
    Commit 5bba5b89193fa. OVE-20210130-0001. CVE-2021-20217
    Reported by: Joshua Rogers (Opera)
  - Fixed a memory leak when decompression fails "unexpectedly".
    Commit f431d61740cc0. OVE-20210128-0001. CVE-2021-20216
  - Bug fixes:
  - Fixed detection of insufficient data for decompression.
    Previously Privoxy could try to decompress a partly
    uninitialized buffer.
- Update to version 3.0.30:
  - Bug fixes:
  - Check the actual URL for redirects when https inspecting requests.
    Previously Privoxy would only check the path which resulted in
    rewrite results being rejected as invalid URLs.
    Reported by withoutname in #1736.
  - Let the hide-referrer code tolerate Referer headers with https:// URLs.
    Previously they would always be treated like a changed host.
  - Use the https headers if the show-request handler is reached through
    https://. Previously Privoxy would use the http headers which
    may be empty on a reused connection.
  - Make CGI_PREFIX protocol-relative when building with FEATURE_HTTPS_INSPECTION.
    This unbreaks (at least) https://config.privoxy.org/client-tags whose
    buttons would previously use a http:// URL resulting in browser warnings.
  - Support using https-inspection and client-header-order at the same time.
    Previously Privoxy would crash.
    Reported by: Kai Raven
  - Properly reject rewrites from http to https as they currently
    aren't supported. Previously Privoxy would wait for the client
    to establish an encrypted connection which obviously would not happen.
  - When https inspection is enabled and Privoxy has been compiled with
    FEATURE_GRACEFUL_TERMINATION (not recommended for production builds),
    the TLS backend resources are free'd later on and only if no active
    connections are left. Prevents crashes when exiting "gracefully" at the
    wrong time.
  - Let the uninstall target remove the config file even if DESTDIR
    is set and properly announce the deletion of the configuration files.
  - General improvements:
  - Allow to rewrite the request destination for https-inspected
    requests behind the client's back. The documentation already sort
    of claimed that it was supported by not especially mentioning that
    it didn't work for https-inspected requests.
    Fixes SF bug #923 reported by withoutname.
  - Add support for filtering client request bodies by using
    CLIENT-BODY-FILTER filters which can be enabled with the
    client-body-filter action.
    Patch submitted by Maxim Antonov.
    Sponsored by: Robert Klemme
  - Add the new action suppress-tag{} which can be used to prevent
    a tagger from adding a tag. Patch submitted by Maxim Antonov.
    Sponsored by: Robert Klemme
  - Gracefully handle existing website keys without matching certificates.
    This can happen if Privoxy was previously running with an invalid
    TLS configuration that didn't allow it to create a certificate.
  - Recycle debug bit 4 for Tagging-related messages.
  - Improve the message shown when the client-tags CGI page
    is requested with no tags configured.
  - Shorten the 'donate' and 'participate' links used by templates
    using redirects. Currently the redirects lead to the FAQ entries
    but in the future we may want to relocate the content and using
    redirects makes this more convenient.
  - Log an error when a PCRE-HOST-PATTERN is used with
    FEATURE_PCRE_HOST_PATTERNS disabled. Don't treat this a
    fatal error so the regression tests can be used with and
    without FEATURE_PCRE_HOST_PATTERNS.
  - The code compiles with older C compilers again.
  - The chdir() return code is checked to fix a compiler warning.
  - The packages feed has been removed from the source tarball.
    It's usually out of date when the source tarball is generated
    for the release.
  - Fixed harmless compiler warnings from GCC9 with -D_FORTIFY_SOURCE=2.
  - windows: Remove obsolete '$(DEST)/doc/images' target.
  - windows: Install the images referenced in the user manual.
  - Remove obsolete 'gnu_regex.@OBJEXT@' target.
  - When installing from the GNUMAkefile, don't create an 'images'
    directory which is no longer used. The images were relocated to
    the user-manual directory years ago.
  - Add new FEATURES to the show-status page and resort list.
  - Remove unused variable in the OpenSSL-specific code.
  - Update bug tracker URL in cgi_error_unknown().
  - Saved a couple of memory allocations when sorting client headers.
  - Improved a couple of error messages.
  - Saved memory allocations when using OpenSSL and checking if a
    key already exists.
  - The configure script will bail out if OpenSSL and mbedTLS are
    enabled at the same time.
  - Log a message right before exiting gracefully.
  - A couple of structures have been rearranged to require slightly
    less memory.
  - When https inspection is enabled and the certificate is invalid
    the error message is now sent with status code 403 instead of 200.
  - The Slackware rc script template has been renamed to
    slackware/rc.privoxy.in to silence complaints when building
    Debian packages.
  - When building with MbedTLS support, mbedtls_md5_ret() is used
    instead of mbedtls_md5() which is deprecated and causes a warning
    on Debian GNU/Linux.
  - Action file improvements:
  - Block requests to eu-tlp03.kameleoon.com/.
  - Unblock metrics.sr.ht/.
  - Disable fast-redirects for .fsf.org/.
  - Disable fast-redirects for .gravater.com/.
  - Disable fast-redirects for .ksta.de/.
  - Block requests to tag.crsspxl.com/.
  - Block requests to analytics.slashdotmedia.com/.
  - Block requests to ml314.com/.
  - Block requests to .adroll.com/.
  - Block requests to fastlane.rubiconproject.com/.
  - Block requests to api.theadex.com/.
  - Block requests to ih.adscale.de/.
  - Block requests to .s400.meetrics.net/.
  - Block requests for pp.lp4.io/.
  - Block requests for trc-events.taboola.com/.
  - Filter file improvements:
  - A allow-autocompletion filter has been added which changes
    autocomplete="off" to "on" on input fields to allow autocompletion.
    Requested by Jamie Zawinski in #370.
    Filter based on a submission by Aaron Linville.
  - Added an imdb filter.
  - Added a sourceforge filter that reduces the amount of ads
    for proprietary software.
  - Added a github filter that removes the annoying "Sign-Up"
    banner and the Cookie disclaimer.
  - Removed a duplicated pcrs command from the js-annoyances filter.
  - The crude-parental filter now provides a short reason when blocking,
    inserts a link to Privoxy's webinterface and adds a new line at
    the end of the generated page.
  - Privoxy-Log-Parser:
  - Highlight a few more messages.
  - Add a handler for tagging messages.
  - Properly deal with 'Certificate error' crunches
    Previously the error description was highlighted as 'host'.
  - Log truncated LOG_LEVEL_CLF messages more gracefully
    and note that the statistics will be imprecise.
  - Fixed perldoc typo.
  - Bump version to 0.9.2.
  - Privoxy-Regression-Test:
  - Use http://127.0.0.1:8118/ as default Privoxy address
    unless http_proxy is set through the environment.
  - Add a --privoxy-cgi-prefix option that specifies the prefix
    to use when building URLs that are supposed to reach Privoxy's
    CGI interface. If it's not set, http://p.p/ is used, which is
    supposed to work with the default Privoxy configuration.
    If Privoxy has been built with FEATURE_HTTPS_INSPECTION enabled,
    and if https inspection is activated with the +https-inspection
    action, this option can be used with "https://p.p/" provided the
    system running Privoxy-Regression-Test has been configured to
    trust the certificate used by Privoxy.
    Note that there are currently two tests in the official
    regression-tests.action file that are expected to fail
    when using "https://p.p/" as privoxy-cgi-prefix.
  - Skip the connection-established response in get_status_code()
    when looking for the status code with a CGI prefix
    that starts with https://. We care about the status code
    sent by the impersonated web server.
  - Use --proxy-header when using a CGI prefix with https://
    and a "Host:" header.
  - Allow '|' in tokens and values to allow tag patterns like
    "TAG:^(application|text)/(x-)?javascript$".
  - When get_cgi_page_or_else() fails, include the URL of the
    requested page in the log message.
  - Added a --check-bad-ssl option that can be used to verify that
    Privoxy detects certificate problems when accessing the test
    sites from badssl.com.
  - Bumped version to 0.7.2
  - uagen:
  - Update example output.
  - Recommend the use of the https-inspection action in the documentation.
  - Upgrade a couple of URLs to https://.
  - Add ElectroBSD to the list of operating systems.
  - Bumped generated Firefox version to 78 (ESR).
  - Bumped version to 1.2.2.
  - User documentation:
  - Remove reference to 'How to Report Bugs Effectively'.
    It was only rendered as text without URL in the README anyway
    and there's no indication that users read it ...
  - Let the dok-readme target fix the location embedded into the
    README file. This used to be done by CVS but since the git migration
    it has to be done through other means.
  - Remove 'experimental' warning for client-specific-tag-related directives.
    They seem to work reliably and there is no obvious reason
    why we would change the syntax in the near future.
  - Describe how to check if Privoxy has been built with
    FEATURE_HTTPS_INSPECTION.
  - Add a link to the trusted-cas-file documentation
    that explains how the user can create the file herself.
  - Don't explicitly mention the license for the code coming from
    'Anonymous Coders' and Junkbusters. It's obviously licensed under
    the GNU GPL like the rest of Privoxy or we wouldn't be allowed to
    distribute it.
  - Update the +hide-user-agent example with uagen output.
  - Slightly improve the wording of the ca-key-file documentation.
  - Explicitly mention Windows 10 as supported so search engines and
    users looking for it can find it.
  - Import a bunch of contributors from the ChangeLog.
  - Remove obsolete doc/gpl.html.
  - Upgrade a couple of links to https://.
  - Don't prefer the SourceForge patch tracker over the
    privoxy-devel mailing list. While at it, link to the
    SourceForge patch tracker.
  - Mention http-inspection in the 'my browser warns me about
    unauthenticated content' FAQ entry.
  - Simplify the 'Is there is a license or fee?' FAQ entry.
  - Add another +redirect{} example.
  - Explicitly mention that interested sponsors should include
    the link target in their first mail.
  - Clarify that only Privoxy team members can object to new sponsors
    and link to the list of current team members.
  - Note that sponsor URLs may not contain keyword spam.
  - Garbage collect doc/webserver/images which isn't referenced anymore.
  - Update the method to reach the proxy settings in Firefox.
  - Update proxy_setup.jpg description to refer to Firefox.
  - Regenerate proxy_setup.jpg with a more recent Firefox (78.0).
  - Regenerate files-in-use.jpg without obsolete standard.action
    with modern colors and a slightly better quality.
  - Update URL to the actionsfile tracker.
  - Update a support request URL.
  - Rephrase the 'Can Privoxy run as service' FAQ entry and
    remove an obsolete paragraph.
  - Let the 'Where can I get updated Actions Files?' entry link to
    the gitweb version of default.action.master.
  - Update a link to the default.action file.
  - Update URLs for trackers and mailing lists.
  - Replace CVS reference with git.
  - Mention regression-tests.action in the config file.
  - Explicitly mention in the config file that access to the
    CA key should be limited to Privoxy.
  - List more client-specific-tag examples for inspiration.
  - Add additional headers to the client-header-order example.
  - Note that actions aren't updated after rewrites.
  - Explicitly mention that upgrading from http to https with
    a client-header filter is not supported
  - Note that protocol and host have to be added when rewriting
    the destination host for https-inspected requests.
  - Explicitly mention that the CA key is used to sign certificates.
  - Put openssl command in 'command' tags.
  - The man page has been moved from section 1 to man section 8.
  - Developer manual:
  - Flesh out the build instructions for Debian.
  - Remove the packaging instructions for RPM-based systems.
    They don't work and we don't release RPM packages anymore anyway.
  - Remove the packaging instructions for Solaris.
    They don't work and we don't release Solaris packages anymore anyway.
  - Update the suggested subject for the announce mails.
  - Update upload instructions.
    ftp://upload.sourceforge.net is no longer functional.
  - Remove a couple of package-dependent upload instructions
    that don't actually work.
  - Remove 'cd current' that no longer works.
  - Add regression-tests.action to the list of files that should be installed.
  - Stop claiming that there are text versions of the manuals.
    We stopped building them in 2008 (9ed36a3c5e6f12).
  - Note that the 'webserver' target creates the link needed for the user-manual.
  - Suggest to use the master branch as reference when creating
    the ChangeLog so the steps work when the current branch differs
    from master which is likely as the developer manual
    suggests to use a local branch for development.
  - Add the -s flag to the suggested 'git tag' command.  We prefer signed tags.
  - Mention that merges into 'master' should be avoided.
  - Add git commands that should result in a merge-free history.
  - Mention Privoxy-Regression-Test.
  - Add a section id to reduce link churn.
  - Recommend the dok-tidy target when building docs for the webserver.
  - Add another plug for the privoxy-devel mailing list.
  - Let the intro link the copyright section in the user manual instead
    of giving an incomplete summary of the license status.
  - Clarify that the webserver target uploads to the SourceForge webserver.
  - Mark the documentation for the Mac OS X installers as out of date and
    change the SCM name back to CVS.
  - Fix the location of the installer modules for Mac OS X.
    They are not actually available through git (yet).
  - Don't speak of Privoxy version 3 in the past tense.
  - Update the list of programs required for the release process.
  - Update description of the webserver target which uses ssh, not scp.
  - Remove obsolete reference to config.new.
  - Tests:
  - Add another hide-referrer{conditional-block} test.
  - Add another hide-referrer{conditional-forge} test.
  - Fix a hide-referrer{conditional-forge} test
    that expected an acceptable header to be forged.
  - Fix a hide-referrer{conditional-block} test
    that expected an acceptable Referer to be removed.
  - Explain why the "Set Header = Host: whatever.example.org" test is
    expected to fail when using a CGI prefix that starts with "https://".
  - Explain why a connection-sharing test is known to fail
    when using "https://p.p/" as CGI prefix.
  - Add a link to Privoxy-Regression-Test to regression-tests.action
    in case it isn't packaged.
  - Add regression tests for pcre host patterns.
  - Fixed a regression test that is executed when
    FEATURE_GRACEFUL_TERMINATION is enabled.
  - Privoxy infrastructure:
  - Import a Privoxy logo for the website.
  - Update Tor onion service to HiddenServiceVersion 3.
  - Display the "model" photos in a single row and remove placeholder images.
  - Regenerate homepage with updated sponsor list.
  - Use the '/sponsor' redirect for the link to the sponsor page.
  - Git commit messages are sent to the Privoxy-commits mailing list.</changelog>
  <changelog author="Carsten Ziepke &lt;kieltux@gmail.com&gt;" date="1615032000">- Update to version 3.0.32:
  - Security/Reliability (boo#1183129)
  - ssplit(): Remove an assertion that could be triggered with a
    crafted CGI request.
    Commit 2256d7b4d67. OVE-20210203-0001. CVE-2021-20272
    Reported by: Joshua Rogers (Opera)
  - cgi_send_banner(): Overrule invalid image types. Prevents a
    crash with a crafted CGI request if Privoxy is toggled off.
    Commit e711c505c48. OVE-20210206-0001. CVE-2021-20273
    Reported by: Joshua Rogers (Opera)
  - socks5_connect(): Don't try to send credentials when none are
    configured. Fixes a crash due to a NULL-pointer dereference
    when the socks server misbehaves.
    Commit 85817cc55b9. OVE-20210207-0001. CVE-2021-20274
    Reported by: Joshua Rogers (Opera)
  - chunked_body_is_complete(): Prevent an invalid read of size
    two.
    Commit a912ba7bc9c. OVE-20210205-0001. CVE-2021-20275
    Reported by: Joshua Rogers (Opera)
  - Obsolete pcre: Prevent invalid memory accesses with an invalid
    pattern passed to pcre_compile(). Note that the obsolete pcre
    code is scheduled to be removed before the 3.0.33 release.
    There has been a warning since 2008 already.
    Commit 28512e5b624. OVE-20210222-0001. CVE-2021-20276
    Reported by: Joshua Rogers (Opera)
  - Bug fixes:
  - Properly parse the client-tag-lifetime directive. Previously it was
    not accepted as an obsolete hash value was being used.
    Reported by: Joshua Rogers (Opera)
  - decompress_iob(): Prevent reading of uninitialized data.
    Reported by: Joshua Rogers (Opera).
  - decompress_iob(): Don't advance cur past eod when looking
    for the end of the file name and comment.
  - decompress_iob(): Cast value to unsigned char before shifting.
    Prevents a left-shift of a negative value which is undefined behaviour.
    Reported by: Joshua Rogers (Opera)
  - gif_deanimate(): Confirm that that we have enough data before doing
    any work. Fixes a crash when fuzzing with an empty document.
    Reported by: Joshua Rogers (Opera).
  - buf_copy(): Fail if there's no data to write or nothing to do.
    Prevents undefined behaviour "applying zero offset to null pointer".
    Reported by: Joshua Rogers (Opera)
  - log_error(): Treat LOG_LEVEL_FATAL as fatal even when --stfu is
    being used while fuzzing.
    Reported by: Joshua Rogers (Opera).
  - Respect DESTDIR when considering whether or not to install
    config files with ".new" extension.
  - OpenSSL ssl_store_cert(): Fix two error messages.
  - Fix a couple of format specifiers.
  - Silence compiler warnings when compiling with NDEBUG.
  - fuzz_server_header(): Fix compiler warning.
  - fuzz_client_header(): Fix compiler warning.
  - cgi_send_user_manual(): Also reject requests if the user-manual
    directive specifies a https:// URL. Previously Privoxy would try and
    fail to open a local file.
  - General improvements:
  - Log the TLS version and the the cipher when debug 2 is enabled.
  - ssl_send_certificate_error(): Respect HEAD requests by not sending a body.
  - ssl_send_certificate_error(): End the body with a single new line.
  - serve(): Increase the chances that the host is logged when closing
    a server socket.
  - handle_established_connection(): Add parentheses to clarify an expression
    Suggested by: David Binderman
  - continue_https_chat(): Explicitly unset CSP_FLAG_CLIENT_CONNECTION_KEEP_ALIVE
    if process_encrypted_request() fails. This makes it more obvious that the
    connection will not be reused. Previously serve() relied on
    CSP_FLAG_SERVER_CONTENT_LENGTH_SET and CSP_FLAG_CHUNKED being unset.
    Inspired by a patch from Joshua Rogers (Opera).
  - decompress_iob(): Add periods to a couple of log messages
  - Terminate the body of the HTTP snipplets with a single new line
    instead of "\r\n".
  - configure: Add --with-assertions option and only enable assertions
    when it is used
  - windows build: Use --with-brotli and --with-mbedtls by default and
    enable dynamic error checking.
  - gif_deanimate(): Confirm we've got an image before trying to write it
    Saves a pointless buf_copy() call.
  - OpenSSL ssl_store_cert(): Remove a superfluous space before the serial number.
  - Action file improvements:
  - Disable fast-redirects for .golem.de/
  - Unblock requests to adri*.
  - Block requests for trc*.taboola.com/
  - Disable fast-redirects for .linkedin.com/
  - Filter file improvements:
  - Make the second pcrs job of the img-reorder filter greedy again.
    The ungreedy version broke the img tags on:
    https://bulk.fefe.de/scalability/.
  - Privoxy-Log-Parser:
  - Highlight a few more messages.
  - Clarify the --statistics output. The shown "Reused connections"
    are server connections so name them appropriately.
  - Bump version to 0.9.3.
  - Privoxy-Regression-Test:
  - Add the --check-bad-ssl option to the --help output.
  - Bump version to 0.7.3.
  - Documentation:
  - Add pushing the created tag to the release steps in the developer manual.
  - Clarify that 'debug 32768' should be used in addition to the other debug
    directives when reporting problems.
  - Add a 'Third-party licenses and copyrights' section to the user manual.</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1617969600">- Using pcre is good, however using the pcreposix library is not and will
  lead to undefined behaviour as symbol clashes with glibc.
  (privoxy-nopcreposix.patch)</changelog>
  <changelog author="Michael Du &lt;duyizhaozj321@yahoo.com&gt;" date="1634299200">- Revert privoxy-nopcreposix.patch because of bsc#1184945.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * privoxy.service</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1639137600">- privoxy 3.0.33 (boo#1193584):
  * CVE-2021-44543: Encode the template name to prevent XSS
    (cross-side scripting) when Privoxy is configured to servce
    the user-manual itself
  * CVE-2021-44540: Free memory of compiled pattern spec
    before bailing
  * CVE-2021-44541: Free header memory when failing to get the
    request destination.
  * CVE-2021-44542: Prevent memory leaks when handling errors
  * Disable fast-redirects for a number of domains
  * Update default block lists
  * Many bug fixes and minor enhancements</changelog>
</package>
<package pkgid="6c7a21c55998a245adef1385d1b6b9d39bf130269a394b114cdcbbc708889b73" name="privoxy" arch="i586">
  <version epoch="0" ver="3.0.33" rel="bp154.3.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashisms in pre script</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1417176000">- Privoxy 3.0.22 [boo#907675]
- Bug fixes:
  - Fixed a memory leak when rejecting client connections
    [CVE-2015-1030 [CVE-2015-1031] [boo#913094]
  - Fixed an immediate-use-after-free bug and two additional
    unconfirmed use-after-free complaints
    [CVE-2015-1201] [boo#914450]
  - Actually show the FORCE_PREFIX value on the show-status page.
  - Properly deal with Keep-Alive headers with timeout= parameters
  - Not using any filter files no longer results in warning messages
    unless an action file is referencing header taggers or filters.
  - Fixed a bug that prevented Privoxy from reusing some reusable
    connections.
- General improvements:
  - Introduced NO-REQUEST-TAG and NO-RESPONSE-TAG.
  - Add support for the 'PATCH' method as defined in RFC5789.
  - Reject requests with unsupported Expect header values.
  - Normalize the HTTP-version in forwarded requests and responses.
  - Server 'Keep-Alive' headers are no longer forwarded.
  - Change declared template file encoding to UTF-8.
  - Do not pass rejected keep-alive timeouts to the server.
  - CGI templates no longer enforce new windows for some links.
  - Documentation improvements
  - Build system improvements
- Action file improvements:
  - The pattern 'promotions.' is no longer being blocked.
  - Various updated filter rules and exceptions.
- Filter file improvements &amp; bug fixes:
  - Decrease the chances that js-annoyances creates invalid JavaScript.
  - Let the msn filter hide 'related' ads again.
  - Prevent img-reorder from messing up img tags with empty src
    attributes.
- add source URL
- fix self-obsoletion
- clean up spec file</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1422273600">- update to version 3.0.23 [boo#914934]
  - Bug fixes:
  - Fixed a DoS issue in case of client requests with incorrect
    chunk-encoded body. When compiled with assertions enabled
    (the default) they could previously cause Privoxy to abort().
    [CVE-2015-1380]
  - Fixed multiple segmentation faults and memory leaks in the
    pcrs code. This fix also increases the chances that an invalid
    pcrs command is rejected as such. Previously some invalid commands
    would be loaded without error. Note that Privoxy's pcrs sources
    (action and filter files) are considered trustworthy input and
    should not be writable by untrusted third-parties.
    [CVE-2015-1381]
  - Fixed an 'invalid read' bug which could at least theoretically
    cause Privoxy to crash. So far, no crashes have been observed.
  - Compiles with --disable-force again. Reported by Kay Raven.
  - Client requests with body that can't be delivered no longer
    cause pipelined requests behind them to be rejected as invalid.
    [CVE-2015-1382]
  - General improvements:
  - If a pcrs command is rejected as invalid, Privoxy now logs
    the cause of the problem as text. Previously the pcrs error
    code was logged.
  - The tests are less likely to cause false positives.
  - Action file improvements:
  - '.sify.com/' is no longer blocked. Apparently it is not actually
    a pure tracking site (anymore?). Reported by Andrew on ijbswa-users@.
  - Unblock banners on .amnesty.de/ which aren't ads.
  - Documentation improvements:
  - The 'Would you like to donate?' section now also contains
    a "Paypal" address.
  - The list of supported operating systems has been updated.
  - The existence of the SF support and feature trackers has been
    deemphasized because they have been broken for months.
    Most of the time the mailing lists still work.
  - The claim that default.action updates are sometimes released
    on their own has been removed. It hasn't happened in years.
  - Explicitly mention that Tor's port may deviate from the default
    when using a bundle. Requested by Andrew on ijbswa-users@.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1422360000">- add CVE and bug IDs to last two changelog entries</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1422446400">- add CVE IDs for [boo#914934]</changelog>
  <changelog author="astieger@suse.com" date="1453550400">- Privoxy 3.0.24
  Includes fixes for two security issues that may be used to
  remotely trigger crashes on platforms that carefully check memory
  accesses.
  * Security fixes (denial of service):
    + Prevent invalid reads in case of corrupt chunk-encoded
    content. CVE-2016-1982 [boo#963151]
    + Remove empty Host headers in client requests. Previously
    they would result in invalid reads. CVE-2016-1983 [boo#963152]
  * General bug fixes and improvements
  * White and blacklist updates</changelog>
  <changelog author="kieltux@gmail.com" date="1475064000">- Update to version 3.0.26
  * Bug fixes:
  - Fixed crashes with "listen-addr :8118" (SF Bug #902).
    The regression was introduced in 3.0.25 beta and reported
    by Marvin Renich in Debian bug #834941.
  * General improvements:
  - Log when privoxy is toggled on or off via cgi interface.
  - Highlight the "Info: Now toggled " on/off log message
    in the Windows log viewer.
  - Highlight the loading actions/filter file log message
    in the Windows log viewer.
  - Mention client-specific tags on the toggle page as a
    potentionally more appropriate alternative.
  * Infrastructure improvements:
  - Add perl script to generate an RSS feed for the packages
    Submitted by "Unknown".
  * Build system improvements:
  - strptime.h: fix a compiler warning about ambiguous else.
  - configure.in: Check for Docbook goo on the BSDs as well.
  - GNUMakefile.in: Let the dok-user target remove
    temporary files.
- BuildArch for docs: noarch</changelog>
  <changelog author="sean@suspend.net" date="1546257600">- Update to version 3.0.28:
  * Bug fixes:
  - Fix misplaced parentheses
  - Changed two regression tests to depend on config directive</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1564056000">- removal of SuSEfirewall2 service, since SuSEfirewall2 has been replaced by
  firewalld, see [1].
  [1]: https://lists.opensuse.org/opensuse-factory/2019-01/msg00490.html</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1580731200">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1597838400">- Stop trying to mangle _unitdir: this is defined in all supported
  distros.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1607256000">- add upstream signing key and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1607256001">- privoxy 3.0.29:
  * Fixed memory leaks when a response is buffered and the buffer
    limit is reached or Privoxy is running out of memory.
    OVE-20201118-0001
  * Fixed a memory leak in the show-status CGI handler when
    no action files are configured
    OVE-20201118-0002
  * Fixed a memory leak in the show-status CGI handler when
    no filter files are configured
    OVE-20201118-0003
  * Fixes a memory leak when client tags are active
    OVE-20201118-0004
  * Fixed a memory leak if multiple filters are executed
    and the last one is skipped due to a pcre error
    OVE-20201118-0005
  * Prevent an unlikely dereference of a NULL-pointer that
    could result in a crash if accept-intercepted-requests
    was enabled, Privoxy failed to get the request destination
    from the Host header and a memory allocation failed.
    OVE-20201118-0006
  * Fixed memory leaks in the client-tags CGI handler when
    client tags are configured and memory allocations fail.
    OVE-20201118-0007
  * Fixed memory leaks in the show-status CGI handler when memory
    allocations fail
    OVE-20201118-0008
  * Add experimental https inspection support
  * Use JIT compilation for static filtering for speedup
  * Add support for Brotli decompression, add
    'no-brotli-accepted' filter which prevents the use of
    Brotli compression
  * Add feature to gather exended statistics
  * Use IP_FREEBIND socket option to help with failover
  * Allow to use extended host patterns and vanilla host patterns
    at the same time by prefixing extended host patterns with
    "PCRE-HOST-PATTERN:"
  * Added "Cross-origin resource sharing" (CORS) support
  * Add SOCKS5 username/password support
  * Bump the maximum number of action and filter files
    to 100 each
  * Fixed handling of filters with "split-large-forms 1"
    when using the CGI editor.
  * Better detect a mismatch of connection details when
    figuring out whether or not a connection can be reused
  * Don't send a "Connection failure" message instead of the
    "DNS failure" message
  * Let LOG_LEVEL_REQUEST log all requests
  * Improvements to default Action file
- license changed to GPLv3
- remove packaging vulnerability boo#1157449
- remove packaging for distributions without systemd
  drops privoxy-3.0.16-networkmanager.patch</changelog>
  <changelog author="Carsten Ziepke &lt;kieltux@gmail.com&gt;" date="1612180800">- Update to version 3.0.31:
  - Security/Reliability (boo#1181650)
  - Prevent an assertion from getting triggered by a crafted
    CGI request.
    Commit 5bba5b89193fa. OVE-20210130-0001. CVE-2021-20217
    Reported by: Joshua Rogers (Opera)
  - Fixed a memory leak when decompression fails "unexpectedly".
    Commit f431d61740cc0. OVE-20210128-0001. CVE-2021-20216
  - Bug fixes:
  - Fixed detection of insufficient data for decompression.
    Previously Privoxy could try to decompress a partly
    uninitialized buffer.
- Update to version 3.0.30:
  - Bug fixes:
  - Check the actual URL for redirects when https inspecting requests.
    Previously Privoxy would only check the path which resulted in
    rewrite results being rejected as invalid URLs.
    Reported by withoutname in #1736.
  - Let the hide-referrer code tolerate Referer headers with https:// URLs.
    Previously they would always be treated like a changed host.
  - Use the https headers if the show-request handler is reached through
    https://. Previously Privoxy would use the http headers which
    may be empty on a reused connection.
  - Make CGI_PREFIX protocol-relative when building with FEATURE_HTTPS_INSPECTION.
    This unbreaks (at least) https://config.privoxy.org/client-tags whose
    buttons would previously use a http:// URL resulting in browser warnings.
  - Support using https-inspection and client-header-order at the same time.
    Previously Privoxy would crash.
    Reported by: Kai Raven
  - Properly reject rewrites from http to https as they currently
    aren't supported. Previously Privoxy would wait for the client
    to establish an encrypted connection which obviously would not happen.
  - When https inspection is enabled and Privoxy has been compiled with
    FEATURE_GRACEFUL_TERMINATION (not recommended for production builds),
    the TLS backend resources are free'd later on and only if no active
    connections are left. Prevents crashes when exiting "gracefully" at the
    wrong time.
  - Let the uninstall target remove the config file even if DESTDIR
    is set and properly announce the deletion of the configuration files.
  - General improvements:
  - Allow to rewrite the request destination for https-inspected
    requests behind the client's back. The documentation already sort
    of claimed that it was supported by not especially mentioning that
    it didn't work for https-inspected requests.
    Fixes SF bug #923 reported by withoutname.
  - Add support for filtering client request bodies by using
    CLIENT-BODY-FILTER filters which can be enabled with the
    client-body-filter action.
    Patch submitted by Maxim Antonov.
    Sponsored by: Robert Klemme
  - Add the new action suppress-tag{} which can be used to prevent
    a tagger from adding a tag. Patch submitted by Maxim Antonov.
    Sponsored by: Robert Klemme
  - Gracefully handle existing website keys without matching certificates.
    This can happen if Privoxy was previously running with an invalid
    TLS configuration that didn't allow it to create a certificate.
  - Recycle debug bit 4 for Tagging-related messages.
  - Improve the message shown when the client-tags CGI page
    is requested with no tags configured.
  - Shorten the 'donate' and 'participate' links used by templates
    using redirects. Currently the redirects lead to the FAQ entries
    but in the future we may want to relocate the content and using
    redirects makes this more convenient.
  - Log an error when a PCRE-HOST-PATTERN is used with
    FEATURE_PCRE_HOST_PATTERNS disabled. Don't treat this a
    fatal error so the regression tests can be used with and
    without FEATURE_PCRE_HOST_PATTERNS.
  - The code compiles with older C compilers again.
  - The chdir() return code is checked to fix a compiler warning.
  - The packages feed has been removed from the source tarball.
    It's usually out of date when the source tarball is generated
    for the release.
  - Fixed harmless compiler warnings from GCC9 with -D_FORTIFY_SOURCE=2.
  - windows: Remove obsolete '$(DEST)/doc/images' target.
  - windows: Install the images referenced in the user manual.
  - Remove obsolete 'gnu_regex.@OBJEXT@' target.
  - When installing from the GNUMAkefile, don't create an 'images'
    directory which is no longer used. The images were relocated to
    the user-manual directory years ago.
  - Add new FEATURES to the show-status page and resort list.
  - Remove unused variable in the OpenSSL-specific code.
  - Update bug tracker URL in cgi_error_unknown().
  - Saved a couple of memory allocations when sorting client headers.
  - Improved a couple of error messages.
  - Saved memory allocations when using OpenSSL and checking if a
    key already exists.
  - The configure script will bail out if OpenSSL and mbedTLS are
    enabled at the same time.
  - Log a message right before exiting gracefully.
  - A couple of structures have been rearranged to require slightly
    less memory.
  - When https inspection is enabled and the certificate is invalid
    the error message is now sent with status code 403 instead of 200.
  - The Slackware rc script template has been renamed to
    slackware/rc.privoxy.in to silence complaints when building
    Debian packages.
  - When building with MbedTLS support, mbedtls_md5_ret() is used
    instead of mbedtls_md5() which is deprecated and causes a warning
    on Debian GNU/Linux.
  - Action file improvements:
  - Block requests to eu-tlp03.kameleoon.com/.
  - Unblock metrics.sr.ht/.
  - Disable fast-redirects for .fsf.org/.
  - Disable fast-redirects for .gravater.com/.
  - Disable fast-redirects for .ksta.de/.
  - Block requests to tag.crsspxl.com/.
  - Block requests to analytics.slashdotmedia.com/.
  - Block requests to ml314.com/.
  - Block requests to .adroll.com/.
  - Block requests to fastlane.rubiconproject.com/.
  - Block requests to api.theadex.com/.
  - Block requests to ih.adscale.de/.
  - Block requests to .s400.meetrics.net/.
  - Block requests for pp.lp4.io/.
  - Block requests for trc-events.taboola.com/.
  - Filter file improvements:
  - A allow-autocompletion filter has been added which changes
    autocomplete="off" to "on" on input fields to allow autocompletion.
    Requested by Jamie Zawinski in #370.
    Filter based on a submission by Aaron Linville.
  - Added an imdb filter.
  - Added a sourceforge filter that reduces the amount of ads
    for proprietary software.
  - Added a github filter that removes the annoying "Sign-Up"
    banner and the Cookie disclaimer.
  - Removed a duplicated pcrs command from the js-annoyances filter.
  - The crude-parental filter now provides a short reason when blocking,
    inserts a link to Privoxy's webinterface and adds a new line at
    the end of the generated page.
  - Privoxy-Log-Parser:
  - Highlight a few more messages.
  - Add a handler for tagging messages.
  - Properly deal with 'Certificate error' crunches
    Previously the error description was highlighted as 'host'.
  - Log truncated LOG_LEVEL_CLF messages more gracefully
    and note that the statistics will be imprecise.
  - Fixed perldoc typo.
  - Bump version to 0.9.2.
  - Privoxy-Regression-Test:
  - Use http://127.0.0.1:8118/ as default Privoxy address
    unless http_proxy is set through the environment.
  - Add a --privoxy-cgi-prefix option that specifies the prefix
    to use when building URLs that are supposed to reach Privoxy's
    CGI interface. If it's not set, http://p.p/ is used, which is
    supposed to work with the default Privoxy configuration.
    If Privoxy has been built with FEATURE_HTTPS_INSPECTION enabled,
    and if https inspection is activated with the +https-inspection
    action, this option can be used with "https://p.p/" provided the
    system running Privoxy-Regression-Test has been configured to
    trust the certificate used by Privoxy.
    Note that there are currently two tests in the official
    regression-tests.action file that are expected to fail
    when using "https://p.p/" as privoxy-cgi-prefix.
  - Skip the connection-established response in get_status_code()
    when looking for the status code with a CGI prefix
    that starts with https://. We care about the status code
    sent by the impersonated web server.
  - Use --proxy-header when using a CGI prefix with https://
    and a "Host:" header.
  - Allow '|' in tokens and values to allow tag patterns like
    "TAG:^(application|text)/(x-)?javascript$".
  - When get_cgi_page_or_else() fails, include the URL of the
    requested page in the log message.
  - Added a --check-bad-ssl option that can be used to verify that
    Privoxy detects certificate problems when accessing the test
    sites from badssl.com.
  - Bumped version to 0.7.2
  - uagen:
  - Update example output.
  - Recommend the use of the https-inspection action in the documentation.
  - Upgrade a couple of URLs to https://.
  - Add ElectroBSD to the list of operating systems.
  - Bumped generated Firefox version to 78 (ESR).
  - Bumped version to 1.2.2.
  - User documentation:
  - Remove reference to 'How to Report Bugs Effectively'.
    It was only rendered as text without URL in the README anyway
    and there's no indication that users read it ...
  - Let the dok-readme target fix the location embedded into the
    README file. This used to be done by CVS but since the git migration
    it has to be done through other means.
  - Remove 'experimental' warning for client-specific-tag-related directives.
    They seem to work reliably and there is no obvious reason
    why we would change the syntax in the near future.
  - Describe how to check if Privoxy has been built with
    FEATURE_HTTPS_INSPECTION.
  - Add a link to the trusted-cas-file documentation
    that explains how the user can create the file herself.
  - Don't explicitly mention the license for the code coming from
    'Anonymous Coders' and Junkbusters. It's obviously licensed under
    the GNU GPL like the rest of Privoxy or we wouldn't be allowed to
    distribute it.
  - Update the +hide-user-agent example with uagen output.
  - Slightly improve the wording of the ca-key-file documentation.
  - Explicitly mention Windows 10 as supported so search engines and
    users looking for it can find it.
  - Import a bunch of contributors from the ChangeLog.
  - Remove obsolete doc/gpl.html.
  - Upgrade a couple of links to https://.
  - Don't prefer the SourceForge patch tracker over the
    privoxy-devel mailing list. While at it, link to the
    SourceForge patch tracker.
  - Mention http-inspection in the 'my browser warns me about
    unauthenticated content' FAQ entry.
  - Simplify the 'Is there is a license or fee?' FAQ entry.
  - Add another +redirect{} example.
  - Explicitly mention that interested sponsors should include
    the link target in their first mail.
  - Clarify that only Privoxy team members can object to new sponsors
    and link to the list of current team members.
  - Note that sponsor URLs may not contain keyword spam.
  - Garbage collect doc/webserver/images which isn't referenced anymore.
  - Update the method to reach the proxy settings in Firefox.
  - Update proxy_setup.jpg description to refer to Firefox.
  - Regenerate proxy_setup.jpg with a more recent Firefox (78.0).
  - Regenerate files-in-use.jpg without obsolete standard.action
    with modern colors and a slightly better quality.
  - Update URL to the actionsfile tracker.
  - Update a support request URL.
  - Rephrase the 'Can Privoxy run as service' FAQ entry and
    remove an obsolete paragraph.
  - Let the 'Where can I get updated Actions Files?' entry link to
    the gitweb version of default.action.master.
  - Update a link to the default.action file.
  - Update URLs for trackers and mailing lists.
  - Replace CVS reference with git.
  - Mention regression-tests.action in the config file.
  - Explicitly mention in the config file that access to the
    CA key should be limited to Privoxy.
  - List more client-specific-tag examples for inspiration.
  - Add additional headers to the client-header-order example.
  - Note that actions aren't updated after rewrites.
  - Explicitly mention that upgrading from http to https with
    a client-header filter is not supported
  - Note that protocol and host have to be added when rewriting
    the destination host for https-inspected requests.
  - Explicitly mention that the CA key is used to sign certificates.
  - Put openssl command in 'command' tags.
  - The man page has been moved from section 1 to man section 8.
  - Developer manual:
  - Flesh out the build instructions for Debian.
  - Remove the packaging instructions for RPM-based systems.
    They don't work and we don't release RPM packages anymore anyway.
  - Remove the packaging instructions for Solaris.
    They don't work and we don't release Solaris packages anymore anyway.
  - Update the suggested subject for the announce mails.
  - Update upload instructions.
    ftp://upload.sourceforge.net is no longer functional.
  - Remove a couple of package-dependent upload instructions
    that don't actually work.
  - Remove 'cd current' that no longer works.
  - Add regression-tests.action to the list of files that should be installed.
  - Stop claiming that there are text versions of the manuals.
    We stopped building them in 2008 (9ed36a3c5e6f12).
  - Note that the 'webserver' target creates the link needed for the user-manual.
  - Suggest to use the master branch as reference when creating
    the ChangeLog so the steps work when the current branch differs
    from master which is likely as the developer manual
    suggests to use a local branch for development.
  - Add the -s flag to the suggested 'git tag' command.  We prefer signed tags.
  - Mention that merges into 'master' should be avoided.
  - Add git commands that should result in a merge-free history.
  - Mention Privoxy-Regression-Test.
  - Add a section id to reduce link churn.
  - Recommend the dok-tidy target when building docs for the webserver.
  - Add another plug for the privoxy-devel mailing list.
  - Let the intro link the copyright section in the user manual instead
    of giving an incomplete summary of the license status.
  - Clarify that the webserver target uploads to the SourceForge webserver.
  - Mark the documentation for the Mac OS X installers as out of date and
    change the SCM name back to CVS.
  - Fix the location of the installer modules for Mac OS X.
    They are not actually available through git (yet).
  - Don't speak of Privoxy version 3 in the past tense.
  - Update the list of programs required for the release process.
  - Update description of the webserver target which uses ssh, not scp.
  - Remove obsolete reference to config.new.
  - Tests:
  - Add another hide-referrer{conditional-block} test.
  - Add another hide-referrer{conditional-forge} test.
  - Fix a hide-referrer{conditional-forge} test
    that expected an acceptable header to be forged.
  - Fix a hide-referrer{conditional-block} test
    that expected an acceptable Referer to be removed.
  - Explain why the "Set Header = Host: whatever.example.org" test is
    expected to fail when using a CGI prefix that starts with "https://".
  - Explain why a connection-sharing test is known to fail
    when using "https://p.p/" as CGI prefix.
  - Add a link to Privoxy-Regression-Test to regression-tests.action
    in case it isn't packaged.
  - Add regression tests for pcre host patterns.
  - Fixed a regression test that is executed when
    FEATURE_GRACEFUL_TERMINATION is enabled.
  - Privoxy infrastructure:
  - Import a Privoxy logo for the website.
  - Update Tor onion service to HiddenServiceVersion 3.
  - Display the "model" photos in a single row and remove placeholder images.
  - Regenerate homepage with updated sponsor list.
  - Use the '/sponsor' redirect for the link to the sponsor page.
  - Git commit messages are sent to the Privoxy-commits mailing list.</changelog>
  <changelog author="Carsten Ziepke &lt;kieltux@gmail.com&gt;" date="1615032000">- Update to version 3.0.32:
  - Security/Reliability (boo#1183129)
  - ssplit(): Remove an assertion that could be triggered with a
    crafted CGI request.
    Commit 2256d7b4d67. OVE-20210203-0001. CVE-2021-20272
    Reported by: Joshua Rogers (Opera)
  - cgi_send_banner(): Overrule invalid image types. Prevents a
    crash with a crafted CGI request if Privoxy is toggled off.
    Commit e711c505c48. OVE-20210206-0001. CVE-2021-20273
    Reported by: Joshua Rogers (Opera)
  - socks5_connect(): Don't try to send credentials when none are
    configured. Fixes a crash due to a NULL-pointer dereference
    when the socks server misbehaves.
    Commit 85817cc55b9. OVE-20210207-0001. CVE-2021-20274
    Reported by: Joshua Rogers (Opera)
  - chunked_body_is_complete(): Prevent an invalid read of size
    two.
    Commit a912ba7bc9c. OVE-20210205-0001. CVE-2021-20275
    Reported by: Joshua Rogers (Opera)
  - Obsolete pcre: Prevent invalid memory accesses with an invalid
    pattern passed to pcre_compile(). Note that the obsolete pcre
    code is scheduled to be removed before the 3.0.33 release.
    There has been a warning since 2008 already.
    Commit 28512e5b624. OVE-20210222-0001. CVE-2021-20276
    Reported by: Joshua Rogers (Opera)
  - Bug fixes:
  - Properly parse the client-tag-lifetime directive. Previously it was
    not accepted as an obsolete hash value was being used.
    Reported by: Joshua Rogers (Opera)
  - decompress_iob(): Prevent reading of uninitialized data.
    Reported by: Joshua Rogers (Opera).
  - decompress_iob(): Don't advance cur past eod when looking
    for the end of the file name and comment.
  - decompress_iob(): Cast value to unsigned char before shifting.
    Prevents a left-shift of a negative value which is undefined behaviour.
    Reported by: Joshua Rogers (Opera)
  - gif_deanimate(): Confirm that that we have enough data before doing
    any work. Fixes a crash when fuzzing with an empty document.
    Reported by: Joshua Rogers (Opera).
  - buf_copy(): Fail if there's no data to write or nothing to do.
    Prevents undefined behaviour "applying zero offset to null pointer".
    Reported by: Joshua Rogers (Opera)
  - log_error(): Treat LOG_LEVEL_FATAL as fatal even when --stfu is
    being used while fuzzing.
    Reported by: Joshua Rogers (Opera).
  - Respect DESTDIR when considering whether or not to install
    config files with ".new" extension.
  - OpenSSL ssl_store_cert(): Fix two error messages.
  - Fix a couple of format specifiers.
  - Silence compiler warnings when compiling with NDEBUG.
  - fuzz_server_header(): Fix compiler warning.
  - fuzz_client_header(): Fix compiler warning.
  - cgi_send_user_manual(): Also reject requests if the user-manual
    directive specifies a https:// URL. Previously Privoxy would try and
    fail to open a local file.
  - General improvements:
  - Log the TLS version and the the cipher when debug 2 is enabled.
  - ssl_send_certificate_error(): Respect HEAD requests by not sending a body.
  - ssl_send_certificate_error(): End the body with a single new line.
  - serve(): Increase the chances that the host is logged when closing
    a server socket.
  - handle_established_connection(): Add parentheses to clarify an expression
    Suggested by: David Binderman
  - continue_https_chat(): Explicitly unset CSP_FLAG_CLIENT_CONNECTION_KEEP_ALIVE
    if process_encrypted_request() fails. This makes it more obvious that the
    connection will not be reused. Previously serve() relied on
    CSP_FLAG_SERVER_CONTENT_LENGTH_SET and CSP_FLAG_CHUNKED being unset.
    Inspired by a patch from Joshua Rogers (Opera).
  - decompress_iob(): Add periods to a couple of log messages
  - Terminate the body of the HTTP snipplets with a single new line
    instead of "\r\n".
  - configure: Add --with-assertions option and only enable assertions
    when it is used
  - windows build: Use --with-brotli and --with-mbedtls by default and
    enable dynamic error checking.
  - gif_deanimate(): Confirm we've got an image before trying to write it
    Saves a pointless buf_copy() call.
  - OpenSSL ssl_store_cert(): Remove a superfluous space before the serial number.
  - Action file improvements:
  - Disable fast-redirects for .golem.de/
  - Unblock requests to adri*.
  - Block requests for trc*.taboola.com/
  - Disable fast-redirects for .linkedin.com/
  - Filter file improvements:
  - Make the second pcrs job of the img-reorder filter greedy again.
    The ungreedy version broke the img tags on:
    https://bulk.fefe.de/scalability/.
  - Privoxy-Log-Parser:
  - Highlight a few more messages.
  - Clarify the --statistics output. The shown "Reused connections"
    are server connections so name them appropriately.
  - Bump version to 0.9.3.
  - Privoxy-Regression-Test:
  - Add the --check-bad-ssl option to the --help output.
  - Bump version to 0.7.3.
  - Documentation:
  - Add pushing the created tag to the release steps in the developer manual.
  - Clarify that 'debug 32768' should be used in addition to the other debug
    directives when reporting problems.
  - Add a 'Third-party licenses and copyrights' section to the user manual.</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1617969600">- Using pcre is good, however using the pcreposix library is not and will
  lead to undefined behaviour as symbol clashes with glibc.
  (privoxy-nopcreposix.patch)</changelog>
  <changelog author="Michael Du &lt;duyizhaozj321@yahoo.com&gt;" date="1634299200">- Revert privoxy-nopcreposix.patch because of bsc#1184945.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * privoxy.service</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1639137600">- privoxy 3.0.33 (boo#1193584):
  * CVE-2021-44543: Encode the template name to prevent XSS
    (cross-side scripting) when Privoxy is configured to servce
    the user-manual itself
  * CVE-2021-44540: Free memory of compiled pattern spec
    before bailing
  * CVE-2021-44541: Free header memory when failing to get the
    request destination.
  * CVE-2021-44542: Prevent memory leaks when handling errors
  * Disable fast-redirects for a number of domains
  * Update default block lists
  * Many bug fixes and minor enhancements</changelog>
</package>
<package pkgid="05bfbe8aec7d390ed8149bbcbba9d6a2568307b905268961b27f0d3ab337aacb" name="privoxy" arch="ppc64le">
  <version epoch="0" ver="3.0.33" rel="bp154.3.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashisms in pre script</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1417176000">- Privoxy 3.0.22 [boo#907675]
- Bug fixes:
  - Fixed a memory leak when rejecting client connections
    [CVE-2015-1030 [CVE-2015-1031] [boo#913094]
  - Fixed an immediate-use-after-free bug and two additional
    unconfirmed use-after-free complaints
    [CVE-2015-1201] [boo#914450]
  - Actually show the FORCE_PREFIX value on the show-status page.
  - Properly deal with Keep-Alive headers with timeout= parameters
  - Not using any filter files no longer results in warning messages
    unless an action file is referencing header taggers or filters.
  - Fixed a bug that prevented Privoxy from reusing some reusable
    connections.
- General improvements:
  - Introduced NO-REQUEST-TAG and NO-RESPONSE-TAG.
  - Add support for the 'PATCH' method as defined in RFC5789.
  - Reject requests with unsupported Expect header values.
  - Normalize the HTTP-version in forwarded requests and responses.
  - Server 'Keep-Alive' headers are no longer forwarded.
  - Change declared template file encoding to UTF-8.
  - Do not pass rejected keep-alive timeouts to the server.
  - CGI templates no longer enforce new windows for some links.
  - Documentation improvements
  - Build system improvements
- Action file improvements:
  - The pattern 'promotions.' is no longer being blocked.
  - Various updated filter rules and exceptions.
- Filter file improvements &amp; bug fixes:
  - Decrease the chances that js-annoyances creates invalid JavaScript.
  - Let the msn filter hide 'related' ads again.
  - Prevent img-reorder from messing up img tags with empty src
    attributes.
- add source URL
- fix self-obsoletion
- clean up spec file</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1422273600">- update to version 3.0.23 [boo#914934]
  - Bug fixes:
  - Fixed a DoS issue in case of client requests with incorrect
    chunk-encoded body. When compiled with assertions enabled
    (the default) they could previously cause Privoxy to abort().
    [CVE-2015-1380]
  - Fixed multiple segmentation faults and memory leaks in the
    pcrs code. This fix also increases the chances that an invalid
    pcrs command is rejected as such. Previously some invalid commands
    would be loaded without error. Note that Privoxy's pcrs sources
    (action and filter files) are considered trustworthy input and
    should not be writable by untrusted third-parties.
    [CVE-2015-1381]
  - Fixed an 'invalid read' bug which could at least theoretically
    cause Privoxy to crash. So far, no crashes have been observed.
  - Compiles with --disable-force again. Reported by Kay Raven.
  - Client requests with body that can't be delivered no longer
    cause pipelined requests behind them to be rejected as invalid.
    [CVE-2015-1382]
  - General improvements:
  - If a pcrs command is rejected as invalid, Privoxy now logs
    the cause of the problem as text. Previously the pcrs error
    code was logged.
  - The tests are less likely to cause false positives.
  - Action file improvements:
  - '.sify.com/' is no longer blocked. Apparently it is not actually
    a pure tracking site (anymore?). Reported by Andrew on ijbswa-users@.
  - Unblock banners on .amnesty.de/ which aren't ads.
  - Documentation improvements:
  - The 'Would you like to donate?' section now also contains
    a "Paypal" address.
  - The list of supported operating systems has been updated.
  - The existence of the SF support and feature trackers has been
    deemphasized because they have been broken for months.
    Most of the time the mailing lists still work.
  - The claim that default.action updates are sometimes released
    on their own has been removed. It hasn't happened in years.
  - Explicitly mention that Tor's port may deviate from the default
    when using a bundle. Requested by Andrew on ijbswa-users@.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1422360000">- add CVE and bug IDs to last two changelog entries</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1422446400">- add CVE IDs for [boo#914934]</changelog>
  <changelog author="astieger@suse.com" date="1453550400">- Privoxy 3.0.24
  Includes fixes for two security issues that may be used to
  remotely trigger crashes on platforms that carefully check memory
  accesses.
  * Security fixes (denial of service):
    + Prevent invalid reads in case of corrupt chunk-encoded
    content. CVE-2016-1982 [boo#963151]
    + Remove empty Host headers in client requests. Previously
    they would result in invalid reads. CVE-2016-1983 [boo#963152]
  * General bug fixes and improvements
  * White and blacklist updates</changelog>
  <changelog author="kieltux@gmail.com" date="1475064000">- Update to version 3.0.26
  * Bug fixes:
  - Fixed crashes with "listen-addr :8118" (SF Bug #902).
    The regression was introduced in 3.0.25 beta and reported
    by Marvin Renich in Debian bug #834941.
  * General improvements:
  - Log when privoxy is toggled on or off via cgi interface.
  - Highlight the "Info: Now toggled " on/off log message
    in the Windows log viewer.
  - Highlight the loading actions/filter file log message
    in the Windows log viewer.
  - Mention client-specific tags on the toggle page as a
    potentionally more appropriate alternative.
  * Infrastructure improvements:
  - Add perl script to generate an RSS feed for the packages
    Submitted by "Unknown".
  * Build system improvements:
  - strptime.h: fix a compiler warning about ambiguous else.
  - configure.in: Check for Docbook goo on the BSDs as well.
  - GNUMakefile.in: Let the dok-user target remove
    temporary files.
- BuildArch for docs: noarch</changelog>
  <changelog author="sean@suspend.net" date="1546257600">- Update to version 3.0.28:
  * Bug fixes:
  - Fix misplaced parentheses
  - Changed two regression tests to depend on config directive</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1564056000">- removal of SuSEfirewall2 service, since SuSEfirewall2 has been replaced by
  firewalld, see [1].
  [1]: https://lists.opensuse.org/opensuse-factory/2019-01/msg00490.html</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1580731200">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1597838400">- Stop trying to mangle _unitdir: this is defined in all supported
  distros.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1607256000">- add upstream signing key and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1607256001">- privoxy 3.0.29:
  * Fixed memory leaks when a response is buffered and the buffer
    limit is reached or Privoxy is running out of memory.
    OVE-20201118-0001
  * Fixed a memory leak in the show-status CGI handler when
    no action files are configured
    OVE-20201118-0002
  * Fixed a memory leak in the show-status CGI handler when
    no filter files are configured
    OVE-20201118-0003
  * Fixes a memory leak when client tags are active
    OVE-20201118-0004
  * Fixed a memory leak if multiple filters are executed
    and the last one is skipped due to a pcre error
    OVE-20201118-0005
  * Prevent an unlikely dereference of a NULL-pointer that
    could result in a crash if accept-intercepted-requests
    was enabled, Privoxy failed to get the request destination
    from the Host header and a memory allocation failed.
    OVE-20201118-0006
  * Fixed memory leaks in the client-tags CGI handler when
    client tags are configured and memory allocations fail.
    OVE-20201118-0007
  * Fixed memory leaks in the show-status CGI handler when memory
    allocations fail
    OVE-20201118-0008
  * Add experimental https inspection support
  * Use JIT compilation for static filtering for speedup
  * Add support for Brotli decompression, add
    'no-brotli-accepted' filter which prevents the use of
    Brotli compression
  * Add feature to gather exended statistics
  * Use IP_FREEBIND socket option to help with failover
  * Allow to use extended host patterns and vanilla host patterns
    at the same time by prefixing extended host patterns with
    "PCRE-HOST-PATTERN:"
  * Added "Cross-origin resource sharing" (CORS) support
  * Add SOCKS5 username/password support
  * Bump the maximum number of action and filter files
    to 100 each
  * Fixed handling of filters with "split-large-forms 1"
    when using the CGI editor.
  * Better detect a mismatch of connection details when
    figuring out whether or not a connection can be reused
  * Don't send a "Connection failure" message instead of the
    "DNS failure" message
  * Let LOG_LEVEL_REQUEST log all requests
  * Improvements to default Action file
- license changed to GPLv3
- remove packaging vulnerability boo#1157449
- remove packaging for distributions without systemd
  drops privoxy-3.0.16-networkmanager.patch</changelog>
  <changelog author="Carsten Ziepke &lt;kieltux@gmail.com&gt;" date="1612180800">- Update to version 3.0.31:
  - Security/Reliability (boo#1181650)
  - Prevent an assertion from getting triggered by a crafted
    CGI request.
    Commit 5bba5b89193fa. OVE-20210130-0001. CVE-2021-20217
    Reported by: Joshua Rogers (Opera)
  - Fixed a memory leak when decompression fails "unexpectedly".
    Commit f431d61740cc0. OVE-20210128-0001. CVE-2021-20216
  - Bug fixes:
  - Fixed detection of insufficient data for decompression.
    Previously Privoxy could try to decompress a partly
    uninitialized buffer.
- Update to version 3.0.30:
  - Bug fixes:
  - Check the actual URL for redirects when https inspecting requests.
    Previously Privoxy would only check the path which resulted in
    rewrite results being rejected as invalid URLs.
    Reported by withoutname in #1736.
  - Let the hide-referrer code tolerate Referer headers with https:// URLs.
    Previously they would always be treated like a changed host.
  - Use the https headers if the show-request handler is reached through
    https://. Previously Privoxy would use the http headers which
    may be empty on a reused connection.
  - Make CGI_PREFIX protocol-relative when building with FEATURE_HTTPS_INSPECTION.
    This unbreaks (at least) https://config.privoxy.org/client-tags whose
    buttons would previously use a http:// URL resulting in browser warnings.
  - Support using https-inspection and client-header-order at the same time.
    Previously Privoxy would crash.
    Reported by: Kai Raven
  - Properly reject rewrites from http to https as they currently
    aren't supported. Previously Privoxy would wait for the client
    to establish an encrypted connection which obviously would not happen.
  - When https inspection is enabled and Privoxy has been compiled with
    FEATURE_GRACEFUL_TERMINATION (not recommended for production builds),
    the TLS backend resources are free'd later on and only if no active
    connections are left. Prevents crashes when exiting "gracefully" at the
    wrong time.
  - Let the uninstall target remove the config file even if DESTDIR
    is set and properly announce the deletion of the configuration files.
  - General improvements:
  - Allow to rewrite the request destination for https-inspected
    requests behind the client's back. The documentation already sort
    of claimed that it was supported by not especially mentioning that
    it didn't work for https-inspected requests.
    Fixes SF bug #923 reported by withoutname.
  - Add support for filtering client request bodies by using
    CLIENT-BODY-FILTER filters which can be enabled with the
    client-body-filter action.
    Patch submitted by Maxim Antonov.
    Sponsored by: Robert Klemme
  - Add the new action suppress-tag{} which can be used to prevent
    a tagger from adding a tag. Patch submitted by Maxim Antonov.
    Sponsored by: Robert Klemme
  - Gracefully handle existing website keys without matching certificates.
    This can happen if Privoxy was previously running with an invalid
    TLS configuration that didn't allow it to create a certificate.
  - Recycle debug bit 4 for Tagging-related messages.
  - Improve the message shown when the client-tags CGI page
    is requested with no tags configured.
  - Shorten the 'donate' and 'participate' links used by templates
    using redirects. Currently the redirects lead to the FAQ entries
    but in the future we may want to relocate the content and using
    redirects makes this more convenient.
  - Log an error when a PCRE-HOST-PATTERN is used with
    FEATURE_PCRE_HOST_PATTERNS disabled. Don't treat this a
    fatal error so the regression tests can be used with and
    without FEATURE_PCRE_HOST_PATTERNS.
  - The code compiles with older C compilers again.
  - The chdir() return code is checked to fix a compiler warning.
  - The packages feed has been removed from the source tarball.
    It's usually out of date when the source tarball is generated
    for the release.
  - Fixed harmless compiler warnings from GCC9 with -D_FORTIFY_SOURCE=2.
  - windows: Remove obsolete '$(DEST)/doc/images' target.
  - windows: Install the images referenced in the user manual.
  - Remove obsolete 'gnu_regex.@OBJEXT@' target.
  - When installing from the GNUMAkefile, don't create an 'images'
    directory which is no longer used. The images were relocated to
    the user-manual directory years ago.
  - Add new FEATURES to the show-status page and resort list.
  - Remove unused variable in the OpenSSL-specific code.
  - Update bug tracker URL in cgi_error_unknown().
  - Saved a couple of memory allocations when sorting client headers.
  - Improved a couple of error messages.
  - Saved memory allocations when using OpenSSL and checking if a
    key already exists.
  - The configure script will bail out if OpenSSL and mbedTLS are
    enabled at the same time.
  - Log a message right before exiting gracefully.
  - A couple of structures have been rearranged to require slightly
    less memory.
  - When https inspection is enabled and the certificate is invalid
    the error message is now sent with status code 403 instead of 200.
  - The Slackware rc script template has been renamed to
    slackware/rc.privoxy.in to silence complaints when building
    Debian packages.
  - When building with MbedTLS support, mbedtls_md5_ret() is used
    instead of mbedtls_md5() which is deprecated and causes a warning
    on Debian GNU/Linux.
  - Action file improvements:
  - Block requests to eu-tlp03.kameleoon.com/.
  - Unblock metrics.sr.ht/.
  - Disable fast-redirects for .fsf.org/.
  - Disable fast-redirects for .gravater.com/.
  - Disable fast-redirects for .ksta.de/.
  - Block requests to tag.crsspxl.com/.
  - Block requests to analytics.slashdotmedia.com/.
  - Block requests to ml314.com/.
  - Block requests to .adroll.com/.
  - Block requests to fastlane.rubiconproject.com/.
  - Block requests to api.theadex.com/.
  - Block requests to ih.adscale.de/.
  - Block requests to .s400.meetrics.net/.
  - Block requests for pp.lp4.io/.
  - Block requests for trc-events.taboola.com/.
  - Filter file improvements:
  - A allow-autocompletion filter has been added which changes
    autocomplete="off" to "on" on input fields to allow autocompletion.
    Requested by Jamie Zawinski in #370.
    Filter based on a submission by Aaron Linville.
  - Added an imdb filter.
  - Added a sourceforge filter that reduces the amount of ads
    for proprietary software.
  - Added a github filter that removes the annoying "Sign-Up"
    banner and the Cookie disclaimer.
  - Removed a duplicated pcrs command from the js-annoyances filter.
  - The crude-parental filter now provides a short reason when blocking,
    inserts a link to Privoxy's webinterface and adds a new line at
    the end of the generated page.
  - Privoxy-Log-Parser:
  - Highlight a few more messages.
  - Add a handler for tagging messages.
  - Properly deal with 'Certificate error' crunches
    Previously the error description was highlighted as 'host'.
  - Log truncated LOG_LEVEL_CLF messages more gracefully
    and note that the statistics will be imprecise.
  - Fixed perldoc typo.
  - Bump version to 0.9.2.
  - Privoxy-Regression-Test:
  - Use http://127.0.0.1:8118/ as default Privoxy address
    unless http_proxy is set through the environment.
  - Add a --privoxy-cgi-prefix option that specifies the prefix
    to use when building URLs that are supposed to reach Privoxy's
    CGI interface. If it's not set, http://p.p/ is used, which is
    supposed to work with the default Privoxy configuration.
    If Privoxy has been built with FEATURE_HTTPS_INSPECTION enabled,
    and if https inspection is activated with the +https-inspection
    action, this option can be used with "https://p.p/" provided the
    system running Privoxy-Regression-Test has been configured to
    trust the certificate used by Privoxy.
    Note that there are currently two tests in the official
    regression-tests.action file that are expected to fail
    when using "https://p.p/" as privoxy-cgi-prefix.
  - Skip the connection-established response in get_status_code()
    when looking for the status code with a CGI prefix
    that starts with https://. We care about the status code
    sent by the impersonated web server.
  - Use --proxy-header when using a CGI prefix with https://
    and a "Host:" header.
  - Allow '|' in tokens and values to allow tag patterns like
    "TAG:^(application|text)/(x-)?javascript$".
  - When get_cgi_page_or_else() fails, include the URL of the
    requested page in the log message.
  - Added a --check-bad-ssl option that can be used to verify that
    Privoxy detects certificate problems when accessing the test
    sites from badssl.com.
  - Bumped version to 0.7.2
  - uagen:
  - Update example output.
  - Recommend the use of the https-inspection action in the documentation.
  - Upgrade a couple of URLs to https://.
  - Add ElectroBSD to the list of operating systems.
  - Bumped generated Firefox version to 78 (ESR).
  - Bumped version to 1.2.2.
  - User documentation:
  - Remove reference to 'How to Report Bugs Effectively'.
    It was only rendered as text without URL in the README anyway
    and there's no indication that users read it ...
  - Let the dok-readme target fix the location embedded into the
    README file. This used to be done by CVS but since the git migration
    it has to be done through other means.
  - Remove 'experimental' warning for client-specific-tag-related directives.
    They seem to work reliably and there is no obvious reason
    why we would change the syntax in the near future.
  - Describe how to check if Privoxy has been built with
    FEATURE_HTTPS_INSPECTION.
  - Add a link to the trusted-cas-file documentation
    that explains how the user can create the file herself.
  - Don't explicitly mention the license for the code coming from
    'Anonymous Coders' and Junkbusters. It's obviously licensed under
    the GNU GPL like the rest of Privoxy or we wouldn't be allowed to
    distribute it.
  - Update the +hide-user-agent example with uagen output.
  - Slightly improve the wording of the ca-key-file documentation.
  - Explicitly mention Windows 10 as supported so search engines and
    users looking for it can find it.
  - Import a bunch of contributors from the ChangeLog.
  - Remove obsolete doc/gpl.html.
  - Upgrade a couple of links to https://.
  - Don't prefer the SourceForge patch tracker over the
    privoxy-devel mailing list. While at it, link to the
    SourceForge patch tracker.
  - Mention http-inspection in the 'my browser warns me about
    unauthenticated content' FAQ entry.
  - Simplify the 'Is there is a license or fee?' FAQ entry.
  - Add another +redirect{} example.
  - Explicitly mention that interested sponsors should include
    the link target in their first mail.
  - Clarify that only Privoxy team members can object to new sponsors
    and link to the list of current team members.
  - Note that sponsor URLs may not contain keyword spam.
  - Garbage collect doc/webserver/images which isn't referenced anymore.
  - Update the method to reach the proxy settings in Firefox.
  - Update proxy_setup.jpg description to refer to Firefox.
  - Regenerate proxy_setup.jpg with a more recent Firefox (78.0).
  - Regenerate files-in-use.jpg without obsolete standard.action
    with modern colors and a slightly better quality.
  - Update URL to the actionsfile tracker.
  - Update a support request URL.
  - Rephrase the 'Can Privoxy run as service' FAQ entry and
    remove an obsolete paragraph.
  - Let the 'Where can I get updated Actions Files?' entry link to
    the gitweb version of default.action.master.
  - Update a link to the default.action file.
  - Update URLs for trackers and mailing lists.
  - Replace CVS reference with git.
  - Mention regression-tests.action in the config file.
  - Explicitly mention in the config file that access to the
    CA key should be limited to Privoxy.
  - List more client-specific-tag examples for inspiration.
  - Add additional headers to the client-header-order example.
  - Note that actions aren't updated after rewrites.
  - Explicitly mention that upgrading from http to https with
    a client-header filter is not supported
  - Note that protocol and host have to be added when rewriting
    the destination host for https-inspected requests.
  - Explicitly mention that the CA key is used to sign certificates.
  - Put openssl command in 'command' tags.
  - The man page has been moved from section 1 to man section 8.
  - Developer manual:
  - Flesh out the build instructions for Debian.
  - Remove the packaging instructions for RPM-based systems.
    They don't work and we don't release RPM packages anymore anyway.
  - Remove the packaging instructions for Solaris.
    They don't work and we don't release Solaris packages anymore anyway.
  - Update the suggested subject for the announce mails.
  - Update upload instructions.
    ftp://upload.sourceforge.net is no longer functional.
  - Remove a couple of package-dependent upload instructions
    that don't actually work.
  - Remove 'cd current' that no longer works.
  - Add regression-tests.action to the list of files that should be installed.
  - Stop claiming that there are text versions of the manuals.
    We stopped building them in 2008 (9ed36a3c5e6f12).
  - Note that the 'webserver' target creates the link needed for the user-manual.
  - Suggest to use the master branch as reference when creating
    the ChangeLog so the steps work when the current branch differs
    from master which is likely as the developer manual
    suggests to use a local branch for development.
  - Add the -s flag to the suggested 'git tag' command.  We prefer signed tags.
  - Mention that merges into 'master' should be avoided.
  - Add git commands that should result in a merge-free history.
  - Mention Privoxy-Regression-Test.
  - Add a section id to reduce link churn.
  - Recommend the dok-tidy target when building docs for the webserver.
  - Add another plug for the privoxy-devel mailing list.
  - Let the intro link the copyright section in the user manual instead
    of giving an incomplete summary of the license status.
  - Clarify that the webserver target uploads to the SourceForge webserver.
  - Mark the documentation for the Mac OS X installers as out of date and
    change the SCM name back to CVS.
  - Fix the location of the installer modules for Mac OS X.
    They are not actually available through git (yet).
  - Don't speak of Privoxy version 3 in the past tense.
  - Update the list of programs required for the release process.
  - Update description of the webserver target which uses ssh, not scp.
  - Remove obsolete reference to config.new.
  - Tests:
  - Add another hide-referrer{conditional-block} test.
  - Add another hide-referrer{conditional-forge} test.
  - Fix a hide-referrer{conditional-forge} test
    that expected an acceptable header to be forged.
  - Fix a hide-referrer{conditional-block} test
    that expected an acceptable Referer to be removed.
  - Explain why the "Set Header = Host: whatever.example.org" test is
    expected to fail when using a CGI prefix that starts with "https://".
  - Explain why a connection-sharing test is known to fail
    when using "https://p.p/" as CGI prefix.
  - Add a link to Privoxy-Regression-Test to regression-tests.action
    in case it isn't packaged.
  - Add regression tests for pcre host patterns.
  - Fixed a regression test that is executed when
    FEATURE_GRACEFUL_TERMINATION is enabled.
  - Privoxy infrastructure:
  - Import a Privoxy logo for the website.
  - Update Tor onion service to HiddenServiceVersion 3.
  - Display the "model" photos in a single row and remove placeholder images.
  - Regenerate homepage with updated sponsor list.
  - Use the '/sponsor' redirect for the link to the sponsor page.
  - Git commit messages are sent to the Privoxy-commits mailing list.</changelog>
  <changelog author="Carsten Ziepke &lt;kieltux@gmail.com&gt;" date="1615032000">- Update to version 3.0.32:
  - Security/Reliability (boo#1183129)
  - ssplit(): Remove an assertion that could be triggered with a
    crafted CGI request.
    Commit 2256d7b4d67. OVE-20210203-0001. CVE-2021-20272
    Reported by: Joshua Rogers (Opera)
  - cgi_send_banner(): Overrule invalid image types. Prevents a
    crash with a crafted CGI request if Privoxy is toggled off.
    Commit e711c505c48. OVE-20210206-0001. CVE-2021-20273
    Reported by: Joshua Rogers (Opera)
  - socks5_connect(): Don't try to send credentials when none are
    configured. Fixes a crash due to a NULL-pointer dereference
    when the socks server misbehaves.
    Commit 85817cc55b9. OVE-20210207-0001. CVE-2021-20274
    Reported by: Joshua Rogers (Opera)
  - chunked_body_is_complete(): Prevent an invalid read of size
    two.
    Commit a912ba7bc9c. OVE-20210205-0001. CVE-2021-20275
    Reported by: Joshua Rogers (Opera)
  - Obsolete pcre: Prevent invalid memory accesses with an invalid
    pattern passed to pcre_compile(). Note that the obsolete pcre
    code is scheduled to be removed before the 3.0.33 release.
    There has been a warning since 2008 already.
    Commit 28512e5b624. OVE-20210222-0001. CVE-2021-20276
    Reported by: Joshua Rogers (Opera)
  - Bug fixes:
  - Properly parse the client-tag-lifetime directive. Previously it was
    not accepted as an obsolete hash value was being used.
    Reported by: Joshua Rogers (Opera)
  - decompress_iob(): Prevent reading of uninitialized data.
    Reported by: Joshua Rogers (Opera).
  - decompress_iob(): Don't advance cur past eod when looking
    for the end of the file name and comment.
  - decompress_iob(): Cast value to unsigned char before shifting.
    Prevents a left-shift of a negative value which is undefined behaviour.
    Reported by: Joshua Rogers (Opera)
  - gif_deanimate(): Confirm that that we have enough data before doing
    any work. Fixes a crash when fuzzing with an empty document.
    Reported by: Joshua Rogers (Opera).
  - buf_copy(): Fail if there's no data to write or nothing to do.
    Prevents undefined behaviour "applying zero offset to null pointer".
    Reported by: Joshua Rogers (Opera)
  - log_error(): Treat LOG_LEVEL_FATAL as fatal even when --stfu is
    being used while fuzzing.
    Reported by: Joshua Rogers (Opera).
  - Respect DESTDIR when considering whether or not to install
    config files with ".new" extension.
  - OpenSSL ssl_store_cert(): Fix two error messages.
  - Fix a couple of format specifiers.
  - Silence compiler warnings when compiling with NDEBUG.
  - fuzz_server_header(): Fix compiler warning.
  - fuzz_client_header(): Fix compiler warning.
  - cgi_send_user_manual(): Also reject requests if the user-manual
    directive specifies a https:// URL. Previously Privoxy would try and
    fail to open a local file.
  - General improvements:
  - Log the TLS version and the the cipher when debug 2 is enabled.
  - ssl_send_certificate_error(): Respect HEAD requests by not sending a body.
  - ssl_send_certificate_error(): End the body with a single new line.
  - serve(): Increase the chances that the host is logged when closing
    a server socket.
  - handle_established_connection(): Add parentheses to clarify an expression
    Suggested by: David Binderman
  - continue_https_chat(): Explicitly unset CSP_FLAG_CLIENT_CONNECTION_KEEP_ALIVE
    if process_encrypted_request() fails. This makes it more obvious that the
    connection will not be reused. Previously serve() relied on
    CSP_FLAG_SERVER_CONTENT_LENGTH_SET and CSP_FLAG_CHUNKED being unset.
    Inspired by a patch from Joshua Rogers (Opera).
  - decompress_iob(): Add periods to a couple of log messages
  - Terminate the body of the HTTP snipplets with a single new line
    instead of "\r\n".
  - configure: Add --with-assertions option and only enable assertions
    when it is used
  - windows build: Use --with-brotli and --with-mbedtls by default and
    enable dynamic error checking.
  - gif_deanimate(): Confirm we've got an image before trying to write it
    Saves a pointless buf_copy() call.
  - OpenSSL ssl_store_cert(): Remove a superfluous space before the serial number.
  - Action file improvements:
  - Disable fast-redirects for .golem.de/
  - Unblock requests to adri*.
  - Block requests for trc*.taboola.com/
  - Disable fast-redirects for .linkedin.com/
  - Filter file improvements:
  - Make the second pcrs job of the img-reorder filter greedy again.
    The ungreedy version broke the img tags on:
    https://bulk.fefe.de/scalability/.
  - Privoxy-Log-Parser:
  - Highlight a few more messages.
  - Clarify the --statistics output. The shown "Reused connections"
    are server connections so name them appropriately.
  - Bump version to 0.9.3.
  - Privoxy-Regression-Test:
  - Add the --check-bad-ssl option to the --help output.
  - Bump version to 0.7.3.
  - Documentation:
  - Add pushing the created tag to the release steps in the developer manual.
  - Clarify that 'debug 32768' should be used in addition to the other debug
    directives when reporting problems.
  - Add a 'Third-party licenses and copyrights' section to the user manual.</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1617969600">- Using pcre is good, however using the pcreposix library is not and will
  lead to undefined behaviour as symbol clashes with glibc.
  (privoxy-nopcreposix.patch)</changelog>
  <changelog author="Michael Du &lt;duyizhaozj321@yahoo.com&gt;" date="1634299200">- Revert privoxy-nopcreposix.patch because of bsc#1184945.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * privoxy.service</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1639137600">- privoxy 3.0.33 (boo#1193584):
  * CVE-2021-44543: Encode the template name to prevent XSS
    (cross-side scripting) when Privoxy is configured to servce
    the user-manual itself
  * CVE-2021-44540: Free memory of compiled pattern spec
    before bailing
  * CVE-2021-44541: Free header memory when failing to get the
    request destination.
  * CVE-2021-44542: Prevent memory leaks when handling errors
  * Disable fast-redirects for a number of domains
  * Update default block lists
  * Many bug fixes and minor enhancements</changelog>
</package>
<package pkgid="23b1e9f07db862e9dd6465fc24fdae60a5eaa3110962592fd1091ccc75fd7bbe" name="privoxy" arch="s390x">
  <version epoch="0" ver="3.0.33" rel="bp154.3.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashisms in pre script</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1417176000">- Privoxy 3.0.22 [boo#907675]
- Bug fixes:
  - Fixed a memory leak when rejecting client connections
    [CVE-2015-1030 [CVE-2015-1031] [boo#913094]
  - Fixed an immediate-use-after-free bug and two additional
    unconfirmed use-after-free complaints
    [CVE-2015-1201] [boo#914450]
  - Actually show the FORCE_PREFIX value on the show-status page.
  - Properly deal with Keep-Alive headers with timeout= parameters
  - Not using any filter files no longer results in warning messages
    unless an action file is referencing header taggers or filters.
  - Fixed a bug that prevented Privoxy from reusing some reusable
    connections.
- General improvements:
  - Introduced NO-REQUEST-TAG and NO-RESPONSE-TAG.
  - Add support for the 'PATCH' method as defined in RFC5789.
  - Reject requests with unsupported Expect header values.
  - Normalize the HTTP-version in forwarded requests and responses.
  - Server 'Keep-Alive' headers are no longer forwarded.
  - Change declared template file encoding to UTF-8.
  - Do not pass rejected keep-alive timeouts to the server.
  - CGI templates no longer enforce new windows for some links.
  - Documentation improvements
  - Build system improvements
- Action file improvements:
  - The pattern 'promotions.' is no longer being blocked.
  - Various updated filter rules and exceptions.
- Filter file improvements &amp; bug fixes:
  - Decrease the chances that js-annoyances creates invalid JavaScript.
  - Let the msn filter hide 'related' ads again.
  - Prevent img-reorder from messing up img tags with empty src
    attributes.
- add source URL
- fix self-obsoletion
- clean up spec file</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1422273600">- update to version 3.0.23 [boo#914934]
  - Bug fixes:
  - Fixed a DoS issue in case of client requests with incorrect
    chunk-encoded body. When compiled with assertions enabled
    (the default) they could previously cause Privoxy to abort().
    [CVE-2015-1380]
  - Fixed multiple segmentation faults and memory leaks in the
    pcrs code. This fix also increases the chances that an invalid
    pcrs command is rejected as such. Previously some invalid commands
    would be loaded without error. Note that Privoxy's pcrs sources
    (action and filter files) are considered trustworthy input and
    should not be writable by untrusted third-parties.
    [CVE-2015-1381]
  - Fixed an 'invalid read' bug which could at least theoretically
    cause Privoxy to crash. So far, no crashes have been observed.
  - Compiles with --disable-force again. Reported by Kay Raven.
  - Client requests with body that can't be delivered no longer
    cause pipelined requests behind them to be rejected as invalid.
    [CVE-2015-1382]
  - General improvements:
  - If a pcrs command is rejected as invalid, Privoxy now logs
    the cause of the problem as text. Previously the pcrs error
    code was logged.
  - The tests are less likely to cause false positives.
  - Action file improvements:
  - '.sify.com/' is no longer blocked. Apparently it is not actually
    a pure tracking site (anymore?). Reported by Andrew on ijbswa-users@.
  - Unblock banners on .amnesty.de/ which aren't ads.
  - Documentation improvements:
  - The 'Would you like to donate?' section now also contains
    a "Paypal" address.
  - The list of supported operating systems has been updated.
  - The existence of the SF support and feature trackers has been
    deemphasized because they have been broken for months.
    Most of the time the mailing lists still work.
  - The claim that default.action updates are sometimes released
    on their own has been removed. It hasn't happened in years.
  - Explicitly mention that Tor's port may deviate from the default
    when using a bundle. Requested by Andrew on ijbswa-users@.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1422360000">- add CVE and bug IDs to last two changelog entries</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1422446400">- add CVE IDs for [boo#914934]</changelog>
  <changelog author="astieger@suse.com" date="1453550400">- Privoxy 3.0.24
  Includes fixes for two security issues that may be used to
  remotely trigger crashes on platforms that carefully check memory
  accesses.
  * Security fixes (denial of service):
    + Prevent invalid reads in case of corrupt chunk-encoded
    content. CVE-2016-1982 [boo#963151]
    + Remove empty Host headers in client requests. Previously
    they would result in invalid reads. CVE-2016-1983 [boo#963152]
  * General bug fixes and improvements
  * White and blacklist updates</changelog>
  <changelog author="kieltux@gmail.com" date="1475064000">- Update to version 3.0.26
  * Bug fixes:
  - Fixed crashes with "listen-addr :8118" (SF Bug #902).
    The regression was introduced in 3.0.25 beta and reported
    by Marvin Renich in Debian bug #834941.
  * General improvements:
  - Log when privoxy is toggled on or off via cgi interface.
  - Highlight the "Info: Now toggled " on/off log message
    in the Windows log viewer.
  - Highlight the loading actions/filter file log message
    in the Windows log viewer.
  - Mention client-specific tags on the toggle page as a
    potentionally more appropriate alternative.
  * Infrastructure improvements:
  - Add perl script to generate an RSS feed for the packages
    Submitted by "Unknown".
  * Build system improvements:
  - strptime.h: fix a compiler warning about ambiguous else.
  - configure.in: Check for Docbook goo on the BSDs as well.
  - GNUMakefile.in: Let the dok-user target remove
    temporary files.
- BuildArch for docs: noarch</changelog>
  <changelog author="sean@suspend.net" date="1546257600">- Update to version 3.0.28:
  * Bug fixes:
  - Fix misplaced parentheses
  - Changed two regression tests to depend on config directive</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1564056000">- removal of SuSEfirewall2 service, since SuSEfirewall2 has been replaced by
  firewalld, see [1].
  [1]: https://lists.opensuse.org/opensuse-factory/2019-01/msg00490.html</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1580731200">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1597838400">- Stop trying to mangle _unitdir: this is defined in all supported
  distros.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1607256000">- add upstream signing key and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1607256001">- privoxy 3.0.29:
  * Fixed memory leaks when a response is buffered and the buffer
    limit is reached or Privoxy is running out of memory.
    OVE-20201118-0001
  * Fixed a memory leak in the show-status CGI handler when
    no action files are configured
    OVE-20201118-0002
  * Fixed a memory leak in the show-status CGI handler when
    no filter files are configured
    OVE-20201118-0003
  * Fixes a memory leak when client tags are active
    OVE-20201118-0004
  * Fixed a memory leak if multiple filters are executed
    and the last one is skipped due to a pcre error
    OVE-20201118-0005
  * Prevent an unlikely dereference of a NULL-pointer that
    could result in a crash if accept-intercepted-requests
    was enabled, Privoxy failed to get the request destination
    from the Host header and a memory allocation failed.
    OVE-20201118-0006
  * Fixed memory leaks in the client-tags CGI handler when
    client tags are configured and memory allocations fail.
    OVE-20201118-0007
  * Fixed memory leaks in the show-status CGI handler when memory
    allocations fail
    OVE-20201118-0008
  * Add experimental https inspection support
  * Use JIT compilation for static filtering for speedup
  * Add support for Brotli decompression, add
    'no-brotli-accepted' filter which prevents the use of
    Brotli compression
  * Add feature to gather exended statistics
  * Use IP_FREEBIND socket option to help with failover
  * Allow to use extended host patterns and vanilla host patterns
    at the same time by prefixing extended host patterns with
    "PCRE-HOST-PATTERN:"
  * Added "Cross-origin resource sharing" (CORS) support
  * Add SOCKS5 username/password support
  * Bump the maximum number of action and filter files
    to 100 each
  * Fixed handling of filters with "split-large-forms 1"
    when using the CGI editor.
  * Better detect a mismatch of connection details when
    figuring out whether or not a connection can be reused
  * Don't send a "Connection failure" message instead of the
    "DNS failure" message
  * Let LOG_LEVEL_REQUEST log all requests
  * Improvements to default Action file
- license changed to GPLv3
- remove packaging vulnerability boo#1157449
- remove packaging for distributions without systemd
  drops privoxy-3.0.16-networkmanager.patch</changelog>
  <changelog author="Carsten Ziepke &lt;kieltux@gmail.com&gt;" date="1612180800">- Update to version 3.0.31:
  - Security/Reliability (boo#1181650)
  - Prevent an assertion from getting triggered by a crafted
    CGI request.
    Commit 5bba5b89193fa. OVE-20210130-0001. CVE-2021-20217
    Reported by: Joshua Rogers (Opera)
  - Fixed a memory leak when decompression fails "unexpectedly".
    Commit f431d61740cc0. OVE-20210128-0001. CVE-2021-20216
  - Bug fixes:
  - Fixed detection of insufficient data for decompression.
    Previously Privoxy could try to decompress a partly
    uninitialized buffer.
- Update to version 3.0.30:
  - Bug fixes:
  - Check the actual URL for redirects when https inspecting requests.
    Previously Privoxy would only check the path which resulted in
    rewrite results being rejected as invalid URLs.
    Reported by withoutname in #1736.
  - Let the hide-referrer code tolerate Referer headers with https:// URLs.
    Previously they would always be treated like a changed host.
  - Use the https headers if the show-request handler is reached through
    https://. Previously Privoxy would use the http headers which
    may be empty on a reused connection.
  - Make CGI_PREFIX protocol-relative when building with FEATURE_HTTPS_INSPECTION.
    This unbreaks (at least) https://config.privoxy.org/client-tags whose
    buttons would previously use a http:// URL resulting in browser warnings.
  - Support using https-inspection and client-header-order at the same time.
    Previously Privoxy would crash.
    Reported by: Kai Raven
  - Properly reject rewrites from http to https as they currently
    aren't supported. Previously Privoxy would wait for the client
    to establish an encrypted connection which obviously would not happen.
  - When https inspection is enabled and Privoxy has been compiled with
    FEATURE_GRACEFUL_TERMINATION (not recommended for production builds),
    the TLS backend resources are free'd later on and only if no active
    connections are left. Prevents crashes when exiting "gracefully" at the
    wrong time.
  - Let the uninstall target remove the config file even if DESTDIR
    is set and properly announce the deletion of the configuration files.
  - General improvements:
  - Allow to rewrite the request destination for https-inspected
    requests behind the client's back. The documentation already sort
    of claimed that it was supported by not especially mentioning that
    it didn't work for https-inspected requests.
    Fixes SF bug #923 reported by withoutname.
  - Add support for filtering client request bodies by using
    CLIENT-BODY-FILTER filters which can be enabled with the
    client-body-filter action.
    Patch submitted by Maxim Antonov.
    Sponsored by: Robert Klemme
  - Add the new action suppress-tag{} which can be used to prevent
    a tagger from adding a tag. Patch submitted by Maxim Antonov.
    Sponsored by: Robert Klemme
  - Gracefully handle existing website keys without matching certificates.
    This can happen if Privoxy was previously running with an invalid
    TLS configuration that didn't allow it to create a certificate.
  - Recycle debug bit 4 for Tagging-related messages.
  - Improve the message shown when the client-tags CGI page
    is requested with no tags configured.
  - Shorten the 'donate' and 'participate' links used by templates
    using redirects. Currently the redirects lead to the FAQ entries
    but in the future we may want to relocate the content and using
    redirects makes this more convenient.
  - Log an error when a PCRE-HOST-PATTERN is used with
    FEATURE_PCRE_HOST_PATTERNS disabled. Don't treat this a
    fatal error so the regression tests can be used with and
    without FEATURE_PCRE_HOST_PATTERNS.
  - The code compiles with older C compilers again.
  - The chdir() return code is checked to fix a compiler warning.
  - The packages feed has been removed from the source tarball.
    It's usually out of date when the source tarball is generated
    for the release.
  - Fixed harmless compiler warnings from GCC9 with -D_FORTIFY_SOURCE=2.
  - windows: Remove obsolete '$(DEST)/doc/images' target.
  - windows: Install the images referenced in the user manual.
  - Remove obsolete 'gnu_regex.@OBJEXT@' target.
  - When installing from the GNUMAkefile, don't create an 'images'
    directory which is no longer used. The images were relocated to
    the user-manual directory years ago.
  - Add new FEATURES to the show-status page and resort list.
  - Remove unused variable in the OpenSSL-specific code.
  - Update bug tracker URL in cgi_error_unknown().
  - Saved a couple of memory allocations when sorting client headers.
  - Improved a couple of error messages.
  - Saved memory allocations when using OpenSSL and checking if a
    key already exists.
  - The configure script will bail out if OpenSSL and mbedTLS are
    enabled at the same time.
  - Log a message right before exiting gracefully.
  - A couple of structures have been rearranged to require slightly
    less memory.
  - When https inspection is enabled and the certificate is invalid
    the error message is now sent with status code 403 instead of 200.
  - The Slackware rc script template has been renamed to
    slackware/rc.privoxy.in to silence complaints when building
    Debian packages.
  - When building with MbedTLS support, mbedtls_md5_ret() is used
    instead of mbedtls_md5() which is deprecated and causes a warning
    on Debian GNU/Linux.
  - Action file improvements:
  - Block requests to eu-tlp03.kameleoon.com/.
  - Unblock metrics.sr.ht/.
  - Disable fast-redirects for .fsf.org/.
  - Disable fast-redirects for .gravater.com/.
  - Disable fast-redirects for .ksta.de/.
  - Block requests to tag.crsspxl.com/.
  - Block requests to analytics.slashdotmedia.com/.
  - Block requests to ml314.com/.
  - Block requests to .adroll.com/.
  - Block requests to fastlane.rubiconproject.com/.
  - Block requests to api.theadex.com/.
  - Block requests to ih.adscale.de/.
  - Block requests to .s400.meetrics.net/.
  - Block requests for pp.lp4.io/.
  - Block requests for trc-events.taboola.com/.
  - Filter file improvements:
  - A allow-autocompletion filter has been added which changes
    autocomplete="off" to "on" on input fields to allow autocompletion.
    Requested by Jamie Zawinski in #370.
    Filter based on a submission by Aaron Linville.
  - Added an imdb filter.
  - Added a sourceforge filter that reduces the amount of ads
    for proprietary software.
  - Added a github filter that removes the annoying "Sign-Up"
    banner and the Cookie disclaimer.
  - Removed a duplicated pcrs command from the js-annoyances filter.
  - The crude-parental filter now provides a short reason when blocking,
    inserts a link to Privoxy's webinterface and adds a new line at
    the end of the generated page.
  - Privoxy-Log-Parser:
  - Highlight a few more messages.
  - Add a handler for tagging messages.
  - Properly deal with 'Certificate error' crunches
    Previously the error description was highlighted as 'host'.
  - Log truncated LOG_LEVEL_CLF messages more gracefully
    and note that the statistics will be imprecise.
  - Fixed perldoc typo.
  - Bump version to 0.9.2.
  - Privoxy-Regression-Test:
  - Use http://127.0.0.1:8118/ as default Privoxy address
    unless http_proxy is set through the environment.
  - Add a --privoxy-cgi-prefix option that specifies the prefix
    to use when building URLs that are supposed to reach Privoxy's
    CGI interface. If it's not set, http://p.p/ is used, which is
    supposed to work with the default Privoxy configuration.
    If Privoxy has been built with FEATURE_HTTPS_INSPECTION enabled,
    and if https inspection is activated with the +https-inspection
    action, this option can be used with "https://p.p/" provided the
    system running Privoxy-Regression-Test has been configured to
    trust the certificate used by Privoxy.
    Note that there are currently two tests in the official
    regression-tests.action file that are expected to fail
    when using "https://p.p/" as privoxy-cgi-prefix.
  - Skip the connection-established response in get_status_code()
    when looking for the status code with a CGI prefix
    that starts with https://. We care about the status code
    sent by the impersonated web server.
  - Use --proxy-header when using a CGI prefix with https://
    and a "Host:" header.
  - Allow '|' in tokens and values to allow tag patterns like
    "TAG:^(application|text)/(x-)?javascript$".
  - When get_cgi_page_or_else() fails, include the URL of the
    requested page in the log message.
  - Added a --check-bad-ssl option that can be used to verify that
    Privoxy detects certificate problems when accessing the test
    sites from badssl.com.
  - Bumped version to 0.7.2
  - uagen:
  - Update example output.
  - Recommend the use of the https-inspection action in the documentation.
  - Upgrade a couple of URLs to https://.
  - Add ElectroBSD to the list of operating systems.
  - Bumped generated Firefox version to 78 (ESR).
  - Bumped version to 1.2.2.
  - User documentation:
  - Remove reference to 'How to Report Bugs Effectively'.
    It was only rendered as text without URL in the README anyway
    and there's no indication that users read it ...
  - Let the dok-readme target fix the location embedded into the
    README file. This used to be done by CVS but since the git migration
    it has to be done through other means.
  - Remove 'experimental' warning for client-specific-tag-related directives.
    They seem to work reliably and there is no obvious reason
    why we would change the syntax in the near future.
  - Describe how to check if Privoxy has been built with
    FEATURE_HTTPS_INSPECTION.
  - Add a link to the trusted-cas-file documentation
    that explains how the user can create the file herself.
  - Don't explicitly mention the license for the code coming from
    'Anonymous Coders' and Junkbusters. It's obviously licensed under
    the GNU GPL like the rest of Privoxy or we wouldn't be allowed to
    distribute it.
  - Update the +hide-user-agent example with uagen output.
  - Slightly improve the wording of the ca-key-file documentation.
  - Explicitly mention Windows 10 as supported so search engines and
    users looking for it can find it.
  - Import a bunch of contributors from the ChangeLog.
  - Remove obsolete doc/gpl.html.
  - Upgrade a couple of links to https://.
  - Don't prefer the SourceForge patch tracker over the
    privoxy-devel mailing list. While at it, link to the
    SourceForge patch tracker.
  - Mention http-inspection in the 'my browser warns me about
    unauthenticated content' FAQ entry.
  - Simplify the 'Is there is a license or fee?' FAQ entry.
  - Add another +redirect{} example.
  - Explicitly mention that interested sponsors should include
    the link target in their first mail.
  - Clarify that only Privoxy team members can object to new sponsors
    and link to the list of current team members.
  - Note that sponsor URLs may not contain keyword spam.
  - Garbage collect doc/webserver/images which isn't referenced anymore.
  - Update the method to reach the proxy settings in Firefox.
  - Update proxy_setup.jpg description to refer to Firefox.
  - Regenerate proxy_setup.jpg with a more recent Firefox (78.0).
  - Regenerate files-in-use.jpg without obsolete standard.action
    with modern colors and a slightly better quality.
  - Update URL to the actionsfile tracker.
  - Update a support request URL.
  - Rephrase the 'Can Privoxy run as service' FAQ entry and
    remove an obsolete paragraph.
  - Let the 'Where can I get updated Actions Files?' entry link to
    the gitweb version of default.action.master.
  - Update a link to the default.action file.
  - Update URLs for trackers and mailing lists.
  - Replace CVS reference with git.
  - Mention regression-tests.action in the config file.
  - Explicitly mention in the config file that access to the
    CA key should be limited to Privoxy.
  - List more client-specific-tag examples for inspiration.
  - Add additional headers to the client-header-order example.
  - Note that actions aren't updated after rewrites.
  - Explicitly mention that upgrading from http to https with
    a client-header filter is not supported
  - Note that protocol and host have to be added when rewriting
    the destination host for https-inspected requests.
  - Explicitly mention that the CA key is used to sign certificates.
  - Put openssl command in 'command' tags.
  - The man page has been moved from section 1 to man section 8.
  - Developer manual:
  - Flesh out the build instructions for Debian.
  - Remove the packaging instructions for RPM-based systems.
    They don't work and we don't release RPM packages anymore anyway.
  - Remove the packaging instructions for Solaris.
    They don't work and we don't release Solaris packages anymore anyway.
  - Update the suggested subject for the announce mails.
  - Update upload instructions.
    ftp://upload.sourceforge.net is no longer functional.
  - Remove a couple of package-dependent upload instructions
    that don't actually work.
  - Remove 'cd current' that no longer works.
  - Add regression-tests.action to the list of files that should be installed.
  - Stop claiming that there are text versions of the manuals.
    We stopped building them in 2008 (9ed36a3c5e6f12).
  - Note that the 'webserver' target creates the link needed for the user-manual.
  - Suggest to use the master branch as reference when creating
    the ChangeLog so the steps work when the current branch differs
    from master which is likely as the developer manual
    suggests to use a local branch for development.
  - Add the -s flag to the suggested 'git tag' command.  We prefer signed tags.
  - Mention that merges into 'master' should be avoided.
  - Add git commands that should result in a merge-free history.
  - Mention Privoxy-Regression-Test.
  - Add a section id to reduce link churn.
  - Recommend the dok-tidy target when building docs for the webserver.
  - Add another plug for the privoxy-devel mailing list.
  - Let the intro link the copyright section in the user manual instead
    of giving an incomplete summary of the license status.
  - Clarify that the webserver target uploads to the SourceForge webserver.
  - Mark the documentation for the Mac OS X installers as out of date and
    change the SCM name back to CVS.
  - Fix the location of the installer modules for Mac OS X.
    They are not actually available through git (yet).
  - Don't speak of Privoxy version 3 in the past tense.
  - Update the list of programs required for the release process.
  - Update description of the webserver target which uses ssh, not scp.
  - Remove obsolete reference to config.new.
  - Tests:
  - Add another hide-referrer{conditional-block} test.
  - Add another hide-referrer{conditional-forge} test.
  - Fix a hide-referrer{conditional-forge} test
    that expected an acceptable header to be forged.
  - Fix a hide-referrer{conditional-block} test
    that expected an acceptable Referer to be removed.
  - Explain why the "Set Header = Host: whatever.example.org" test is
    expected to fail when using a CGI prefix that starts with "https://".
  - Explain why a connection-sharing test is known to fail
    when using "https://p.p/" as CGI prefix.
  - Add a link to Privoxy-Regression-Test to regression-tests.action
    in case it isn't packaged.
  - Add regression tests for pcre host patterns.
  - Fixed a regression test that is executed when
    FEATURE_GRACEFUL_TERMINATION is enabled.
  - Privoxy infrastructure:
  - Import a Privoxy logo for the website.
  - Update Tor onion service to HiddenServiceVersion 3.
  - Display the "model" photos in a single row and remove placeholder images.
  - Regenerate homepage with updated sponsor list.
  - Use the '/sponsor' redirect for the link to the sponsor page.
  - Git commit messages are sent to the Privoxy-commits mailing list.</changelog>
  <changelog author="Carsten Ziepke &lt;kieltux@gmail.com&gt;" date="1615032000">- Update to version 3.0.32:
  - Security/Reliability (boo#1183129)
  - ssplit(): Remove an assertion that could be triggered with a
    crafted CGI request.
    Commit 2256d7b4d67. OVE-20210203-0001. CVE-2021-20272
    Reported by: Joshua Rogers (Opera)
  - cgi_send_banner(): Overrule invalid image types. Prevents a
    crash with a crafted CGI request if Privoxy is toggled off.
    Commit e711c505c48. OVE-20210206-0001. CVE-2021-20273
    Reported by: Joshua Rogers (Opera)
  - socks5_connect(): Don't try to send credentials when none are
    configured. Fixes a crash due to a NULL-pointer dereference
    when the socks server misbehaves.
    Commit 85817cc55b9. OVE-20210207-0001. CVE-2021-20274
    Reported by: Joshua Rogers (Opera)
  - chunked_body_is_complete(): Prevent an invalid read of size
    two.
    Commit a912ba7bc9c. OVE-20210205-0001. CVE-2021-20275
    Reported by: Joshua Rogers (Opera)
  - Obsolete pcre: Prevent invalid memory accesses with an invalid
    pattern passed to pcre_compile(). Note that the obsolete pcre
    code is scheduled to be removed before the 3.0.33 release.
    There has been a warning since 2008 already.
    Commit 28512e5b624. OVE-20210222-0001. CVE-2021-20276
    Reported by: Joshua Rogers (Opera)
  - Bug fixes:
  - Properly parse the client-tag-lifetime directive. Previously it was
    not accepted as an obsolete hash value was being used.
    Reported by: Joshua Rogers (Opera)
  - decompress_iob(): Prevent reading of uninitialized data.
    Reported by: Joshua Rogers (Opera).
  - decompress_iob(): Don't advance cur past eod when looking
    for the end of the file name and comment.
  - decompress_iob(): Cast value to unsigned char before shifting.
    Prevents a left-shift of a negative value which is undefined behaviour.
    Reported by: Joshua Rogers (Opera)
  - gif_deanimate(): Confirm that that we have enough data before doing
    any work. Fixes a crash when fuzzing with an empty document.
    Reported by: Joshua Rogers (Opera).
  - buf_copy(): Fail if there's no data to write or nothing to do.
    Prevents undefined behaviour "applying zero offset to null pointer".
    Reported by: Joshua Rogers (Opera)
  - log_error(): Treat LOG_LEVEL_FATAL as fatal even when --stfu is
    being used while fuzzing.
    Reported by: Joshua Rogers (Opera).
  - Respect DESTDIR when considering whether or not to install
    config files with ".new" extension.
  - OpenSSL ssl_store_cert(): Fix two error messages.
  - Fix a couple of format specifiers.
  - Silence compiler warnings when compiling with NDEBUG.
  - fuzz_server_header(): Fix compiler warning.
  - fuzz_client_header(): Fix compiler warning.
  - cgi_send_user_manual(): Also reject requests if the user-manual
    directive specifies a https:// URL. Previously Privoxy would try and
    fail to open a local file.
  - General improvements:
  - Log the TLS version and the the cipher when debug 2 is enabled.
  - ssl_send_certificate_error(): Respect HEAD requests by not sending a body.
  - ssl_send_certificate_error(): End the body with a single new line.
  - serve(): Increase the chances that the host is logged when closing
    a server socket.
  - handle_established_connection(): Add parentheses to clarify an expression
    Suggested by: David Binderman
  - continue_https_chat(): Explicitly unset CSP_FLAG_CLIENT_CONNECTION_KEEP_ALIVE
    if process_encrypted_request() fails. This makes it more obvious that the
    connection will not be reused. Previously serve() relied on
    CSP_FLAG_SERVER_CONTENT_LENGTH_SET and CSP_FLAG_CHUNKED being unset.
    Inspired by a patch from Joshua Rogers (Opera).
  - decompress_iob(): Add periods to a couple of log messages
  - Terminate the body of the HTTP snipplets with a single new line
    instead of "\r\n".
  - configure: Add --with-assertions option and only enable assertions
    when it is used
  - windows build: Use --with-brotli and --with-mbedtls by default and
    enable dynamic error checking.
  - gif_deanimate(): Confirm we've got an image before trying to write it
    Saves a pointless buf_copy() call.
  - OpenSSL ssl_store_cert(): Remove a superfluous space before the serial number.
  - Action file improvements:
  - Disable fast-redirects for .golem.de/
  - Unblock requests to adri*.
  - Block requests for trc*.taboola.com/
  - Disable fast-redirects for .linkedin.com/
  - Filter file improvements:
  - Make the second pcrs job of the img-reorder filter greedy again.
    The ungreedy version broke the img tags on:
    https://bulk.fefe.de/scalability/.
  - Privoxy-Log-Parser:
  - Highlight a few more messages.
  - Clarify the --statistics output. The shown "Reused connections"
    are server connections so name them appropriately.
  - Bump version to 0.9.3.
  - Privoxy-Regression-Test:
  - Add the --check-bad-ssl option to the --help output.
  - Bump version to 0.7.3.
  - Documentation:
  - Add pushing the created tag to the release steps in the developer manual.
  - Clarify that 'debug 32768' should be used in addition to the other debug
    directives when reporting problems.
  - Add a 'Third-party licenses and copyrights' section to the user manual.</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1617969600">- Using pcre is good, however using the pcreposix library is not and will
  lead to undefined behaviour as symbol clashes with glibc.
  (privoxy-nopcreposix.patch)</changelog>
  <changelog author="Michael Du &lt;duyizhaozj321@yahoo.com&gt;" date="1634299200">- Revert privoxy-nopcreposix.patch because of bsc#1184945.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * privoxy.service</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1639137600">- privoxy 3.0.33 (boo#1193584):
  * CVE-2021-44543: Encode the template name to prevent XSS
    (cross-side scripting) when Privoxy is configured to servce
    the user-manual itself
  * CVE-2021-44540: Free memory of compiled pattern spec
    before bailing
  * CVE-2021-44541: Free header memory when failing to get the
    request destination.
  * CVE-2021-44542: Prevent memory leaks when handling errors
  * Disable fast-redirects for a number of domains
  * Update default block lists
  * Many bug fixes and minor enhancements</changelog>
</package>
<package pkgid="3070b42f98489a28b5be7c6ef46bd04e3ed17e3a3212b860ea6acbe537a861c5" name="privoxy" arch="src">
  <version epoch="0" ver="3.0.33" rel="bp154.3.3.1"/>
  <changelog author="wagner-thomas@gmx.at" date="1408449600">- added config file for SuSEfirewall2</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashisms in pre script</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1417176000">- Privoxy 3.0.22 [boo#907675]
- Bug fixes:
  - Fixed a memory leak when rejecting client connections
    [CVE-2015-1030 [CVE-2015-1031] [boo#913094]
  - Fixed an immediate-use-after-free bug and two additional
    unconfirmed use-after-free complaints
    [CVE-2015-1201] [boo#914450]
  - Actually show the FORCE_PREFIX value on the show-status page.
  - Properly deal with Keep-Alive headers with timeout= parameters
  - Not using any filter files no longer results in warning messages
    unless an action file is referencing header taggers or filters.
  - Fixed a bug that prevented Privoxy from reusing some reusable
    connections.
- General improvements:
  - Introduced NO-REQUEST-TAG and NO-RESPONSE-TAG.
  - Add support for the 'PATCH' method as defined in RFC5789.
  - Reject requests with unsupported Expect header values.
  - Normalize the HTTP-version in forwarded requests and responses.
  - Server 'Keep-Alive' headers are no longer forwarded.
  - Change declared template file encoding to UTF-8.
  - Do not pass rejected keep-alive timeouts to the server.
  - CGI templates no longer enforce new windows for some links.
  - Documentation improvements
  - Build system improvements
- Action file improvements:
  - The pattern 'promotions.' is no longer being blocked.
  - Various updated filter rules and exceptions.
- Filter file improvements &amp; bug fixes:
  - Decrease the chances that js-annoyances creates invalid JavaScript.
  - Let the msn filter hide 'related' ads again.
  - Prevent img-reorder from messing up img tags with empty src
    attributes.
- add source URL
- fix self-obsoletion
- clean up spec file</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1422273600">- update to version 3.0.23 [boo#914934]
  - Bug fixes:
  - Fixed a DoS issue in case of client requests with incorrect
    chunk-encoded body. When compiled with assertions enabled
    (the default) they could previously cause Privoxy to abort().
    [CVE-2015-1380]
  - Fixed multiple segmentation faults and memory leaks in the
    pcrs code. This fix also increases the chances that an invalid
    pcrs command is rejected as such. Previously some invalid commands
    would be loaded without error. Note that Privoxy's pcrs sources
    (action and filter files) are considered trustworthy input and
    should not be writable by untrusted third-parties.
    [CVE-2015-1381]
  - Fixed an 'invalid read' bug which could at least theoretically
    cause Privoxy to crash. So far, no crashes have been observed.
  - Compiles with --disable-force again. Reported by Kay Raven.
  - Client requests with body that can't be delivered no longer
    cause pipelined requests behind them to be rejected as invalid.
    [CVE-2015-1382]
  - General improvements:
  - If a pcrs command is rejected as invalid, Privoxy now logs
    the cause of the problem as text. Previously the pcrs error
    code was logged.
  - The tests are less likely to cause false positives.
  - Action file improvements:
  - '.sify.com/' is no longer blocked. Apparently it is not actually
    a pure tracking site (anymore?). Reported by Andrew on ijbswa-users@.
  - Unblock banners on .amnesty.de/ which aren't ads.
  - Documentation improvements:
  - The 'Would you like to donate?' section now also contains
    a "Paypal" address.
  - The list of supported operating systems has been updated.
  - The existence of the SF support and feature trackers has been
    deemphasized because they have been broken for months.
    Most of the time the mailing lists still work.
  - The claim that default.action updates are sometimes released
    on their own has been removed. It hasn't happened in years.
  - Explicitly mention that Tor's port may deviate from the default
    when using a bundle. Requested by Andrew on ijbswa-users@.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1422360000">- add CVE and bug IDs to last two changelog entries</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1422446400">- add CVE IDs for [boo#914934]</changelog>
  <changelog author="astieger@suse.com" date="1453550400">- Privoxy 3.0.24
  Includes fixes for two security issues that may be used to
  remotely trigger crashes on platforms that carefully check memory
  accesses.
  * Security fixes (denial of service):
    + Prevent invalid reads in case of corrupt chunk-encoded
    content. CVE-2016-1982 [boo#963151]
    + Remove empty Host headers in client requests. Previously
    they would result in invalid reads. CVE-2016-1983 [boo#963152]
  * General bug fixes and improvements
  * White and blacklist updates</changelog>
  <changelog author="kieltux@gmail.com" date="1475064000">- Update to version 3.0.26
  * Bug fixes:
  - Fixed crashes with "listen-addr :8118" (SF Bug #902).
    The regression was introduced in 3.0.25 beta and reported
    by Marvin Renich in Debian bug #834941.
  * General improvements:
  - Log when privoxy is toggled on or off via cgi interface.
  - Highlight the "Info: Now toggled " on/off log message
    in the Windows log viewer.
  - Highlight the loading actions/filter file log message
    in the Windows log viewer.
  - Mention client-specific tags on the toggle page as a
    potentionally more appropriate alternative.
  * Infrastructure improvements:
  - Add perl script to generate an RSS feed for the packages
    Submitted by "Unknown".
  * Build system improvements:
  - strptime.h: fix a compiler warning about ambiguous else.
  - configure.in: Check for Docbook goo on the BSDs as well.
  - GNUMakefile.in: Let the dok-user target remove
    temporary files.
- BuildArch for docs: noarch</changelog>
  <changelog author="sean@suspend.net" date="1546257600">- Update to version 3.0.28:
  * Bug fixes:
  - Fix misplaced parentheses
  - Changed two regression tests to depend on config directive</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1564056000">- removal of SuSEfirewall2 service, since SuSEfirewall2 has been replaced by
  firewalld, see [1].
  [1]: https://lists.opensuse.org/opensuse-factory/2019-01/msg00490.html</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1580731200">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1597838400">- Stop trying to mangle _unitdir: this is defined in all supported
  distros.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1607256000">- add upstream signing key and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1607256001">- privoxy 3.0.29:
  * Fixed memory leaks when a response is buffered and the buffer
    limit is reached or Privoxy is running out of memory.
    OVE-20201118-0001
  * Fixed a memory leak in the show-status CGI handler when
    no action files are configured
    OVE-20201118-0002
  * Fixed a memory leak in the show-status CGI handler when
    no filter files are configured
    OVE-20201118-0003
  * Fixes a memory leak when client tags are active
    OVE-20201118-0004
  * Fixed a memory leak if multiple filters are executed
    and the last one is skipped due to a pcre error
    OVE-20201118-0005
  * Prevent an unlikely dereference of a NULL-pointer that
    could result in a crash if accept-intercepted-requests
    was enabled, Privoxy failed to get the request destination
    from the Host header and a memory allocation failed.
    OVE-20201118-0006
  * Fixed memory leaks in the client-tags CGI handler when
    client tags are configured and memory allocations fail.
    OVE-20201118-0007
  * Fixed memory leaks in the show-status CGI handler when memory
    allocations fail
    OVE-20201118-0008
  * Add experimental https inspection support
  * Use JIT compilation for static filtering for speedup
  * Add support for Brotli decompression, add
    'no-brotli-accepted' filter which prevents the use of
    Brotli compression
  * Add feature to gather exended statistics
  * Use IP_FREEBIND socket option to help with failover
  * Allow to use extended host patterns and vanilla host patterns
    at the same time by prefixing extended host patterns with
    "PCRE-HOST-PATTERN:"
  * Added "Cross-origin resource sharing" (CORS) support
  * Add SOCKS5 username/password support
  * Bump the maximum number of action and filter files
    to 100 each
  * Fixed handling of filters with "split-large-forms 1"
    when using the CGI editor.
  * Better detect a mismatch of connection details when
    figuring out whether or not a connection can be reused
  * Don't send a "Connection failure" message instead of the
    "DNS failure" message
  * Let LOG_LEVEL_REQUEST log all requests
  * Improvements to default Action file
- license changed to GPLv3
- remove packaging vulnerability boo#1157449
- remove packaging for distributions without systemd
  drops privoxy-3.0.16-networkmanager.patch</changelog>
  <changelog author="Carsten Ziepke &lt;kieltux@gmail.com&gt;" date="1612180800">- Update to version 3.0.31:
  - Security/Reliability (boo#1181650)
  - Prevent an assertion from getting triggered by a crafted
    CGI request.
    Commit 5bba5b89193fa. OVE-20210130-0001. CVE-2021-20217
    Reported by: Joshua Rogers (Opera)
  - Fixed a memory leak when decompression fails "unexpectedly".
    Commit f431d61740cc0. OVE-20210128-0001. CVE-2021-20216
  - Bug fixes:
  - Fixed detection of insufficient data for decompression.
    Previously Privoxy could try to decompress a partly
    uninitialized buffer.
- Update to version 3.0.30:
  - Bug fixes:
  - Check the actual URL for redirects when https inspecting requests.
    Previously Privoxy would only check the path which resulted in
    rewrite results being rejected as invalid URLs.
    Reported by withoutname in #1736.
  - Let the hide-referrer code tolerate Referer headers with https:// URLs.
    Previously they would always be treated like a changed host.
  - Use the https headers if the show-request handler is reached through
    https://. Previously Privoxy would use the http headers which
    may be empty on a reused connection.
  - Make CGI_PREFIX protocol-relative when building with FEATURE_HTTPS_INSPECTION.
    This unbreaks (at least) https://config.privoxy.org/client-tags whose
    buttons would previously use a http:// URL resulting in browser warnings.
  - Support using https-inspection and client-header-order at the same time.
    Previously Privoxy would crash.
    Reported by: Kai Raven
  - Properly reject rewrites from http to https as they currently
    aren't supported. Previously Privoxy would wait for the client
    to establish an encrypted connection which obviously would not happen.
  - When https inspection is enabled and Privoxy has been compiled with
    FEATURE_GRACEFUL_TERMINATION (not recommended for production builds),
    the TLS backend resources are free'd later on and only if no active
    connections are left. Prevents crashes when exiting "gracefully" at the
    wrong time.
  - Let the uninstall target remove the config file even if DESTDIR
    is set and properly announce the deletion of the configuration files.
  - General improvements:
  - Allow to rewrite the request destination for https-inspected
    requests behind the client's back. The documentation already sort
    of claimed that it was supported by not especially mentioning that
    it didn't work for https-inspected requests.
    Fixes SF bug #923 reported by withoutname.
  - Add support for filtering client request bodies by using
    CLIENT-BODY-FILTER filters which can be enabled with the
    client-body-filter action.
    Patch submitted by Maxim Antonov.
    Sponsored by: Robert Klemme
  - Add the new action suppress-tag{} which can be used to prevent
    a tagger from adding a tag. Patch submitted by Maxim Antonov.
    Sponsored by: Robert Klemme
  - Gracefully handle existing website keys without matching certificates.
    This can happen if Privoxy was previously running with an invalid
    TLS configuration that didn't allow it to create a certificate.
  - Recycle debug bit 4 for Tagging-related messages.
  - Improve the message shown when the client-tags CGI page
    is requested with no tags configured.
  - Shorten the 'donate' and 'participate' links used by templates
    using redirects. Currently the redirects lead to the FAQ entries
    but in the future we may want to relocate the content and using
    redirects makes this more convenient.
  - Log an error when a PCRE-HOST-PATTERN is used with
    FEATURE_PCRE_HOST_PATTERNS disabled. Don't treat this a
    fatal error so the regression tests can be used with and
    without FEATURE_PCRE_HOST_PATTERNS.
  - The code compiles with older C compilers again.
  - The chdir() return code is checked to fix a compiler warning.
  - The packages feed has been removed from the source tarball.
    It's usually out of date when the source tarball is generated
    for the release.
  - Fixed harmless compiler warnings from GCC9 with -D_FORTIFY_SOURCE=2.
  - windows: Remove obsolete '$(DEST)/doc/images' target.
  - windows: Install the images referenced in the user manual.
  - Remove obsolete 'gnu_regex.@OBJEXT@' target.
  - When installing from the GNUMAkefile, don't create an 'images'
    directory which is no longer used. The images were relocated to
    the user-manual directory years ago.
  - Add new FEATURES to the show-status page and resort list.
  - Remove unused variable in the OpenSSL-specific code.
  - Update bug tracker URL in cgi_error_unknown().
  - Saved a couple of memory allocations when sorting client headers.
  - Improved a couple of error messages.
  - Saved memory allocations when using OpenSSL and checking if a
    key already exists.
  - The configure script will bail out if OpenSSL and mbedTLS are
    enabled at the same time.
  - Log a message right before exiting gracefully.
  - A couple of structures have been rearranged to require slightly
    less memory.
  - When https inspection is enabled and the certificate is invalid
    the error message is now sent with status code 403 instead of 200.
  - The Slackware rc script template has been renamed to
    slackware/rc.privoxy.in to silence complaints when building
    Debian packages.
  - When building with MbedTLS support, mbedtls_md5_ret() is used
    instead of mbedtls_md5() which is deprecated and causes a warning
    on Debian GNU/Linux.
  - Action file improvements:
  - Block requests to eu-tlp03.kameleoon.com/.
  - Unblock metrics.sr.ht/.
  - Disable fast-redirects for .fsf.org/.
  - Disable fast-redirects for .gravater.com/.
  - Disable fast-redirects for .ksta.de/.
  - Block requests to tag.crsspxl.com/.
  - Block requests to analytics.slashdotmedia.com/.
  - Block requests to ml314.com/.
  - Block requests to .adroll.com/.
  - Block requests to fastlane.rubiconproject.com/.
  - Block requests to api.theadex.com/.
  - Block requests to ih.adscale.de/.
  - Block requests to .s400.meetrics.net/.
  - Block requests for pp.lp4.io/.
  - Block requests for trc-events.taboola.com/.
  - Filter file improvements:
  - A allow-autocompletion filter has been added which changes
    autocomplete="off" to "on" on input fields to allow autocompletion.
    Requested by Jamie Zawinski in #370.
    Filter based on a submission by Aaron Linville.
  - Added an imdb filter.
  - Added a sourceforge filter that reduces the amount of ads
    for proprietary software.
  - Added a github filter that removes the annoying "Sign-Up"
    banner and the Cookie disclaimer.
  - Removed a duplicated pcrs command from the js-annoyances filter.
  - The crude-parental filter now provides a short reason when blocking,
    inserts a link to Privoxy's webinterface and adds a new line at
    the end of the generated page.
  - Privoxy-Log-Parser:
  - Highlight a few more messages.
  - Add a handler for tagging messages.
  - Properly deal with 'Certificate error' crunches
    Previously the error description was highlighted as 'host'.
  - Log truncated LOG_LEVEL_CLF messages more gracefully
    and note that the statistics will be imprecise.
  - Fixed perldoc typo.
  - Bump version to 0.9.2.
  - Privoxy-Regression-Test:
  - Use http://127.0.0.1:8118/ as default Privoxy address
    unless http_proxy is set through the environment.
  - Add a --privoxy-cgi-prefix option that specifies the prefix
    to use when building URLs that are supposed to reach Privoxy's
    CGI interface. If it's not set, http://p.p/ is used, which is
    supposed to work with the default Privoxy configuration.
    If Privoxy has been built with FEATURE_HTTPS_INSPECTION enabled,
    and if https inspection is activated with the +https-inspection
    action, this option can be used with "https://p.p/" provided the
    system running Privoxy-Regression-Test has been configured to
    trust the certificate used by Privoxy.
    Note that there are currently two tests in the official
    regression-tests.action file that are expected to fail
    when using "https://p.p/" as privoxy-cgi-prefix.
  - Skip the connection-established response in get_status_code()
    when looking for the status code with a CGI prefix
    that starts with https://. We care about the status code
    sent by the impersonated web server.
  - Use --proxy-header when using a CGI prefix with https://
    and a "Host:" header.
  - Allow '|' in tokens and values to allow tag patterns like
    "TAG:^(application|text)/(x-)?javascript$".
  - When get_cgi_page_or_else() fails, include the URL of the
    requested page in the log message.
  - Added a --check-bad-ssl option that can be used to verify that
    Privoxy detects certificate problems when accessing the test
    sites from badssl.com.
  - Bumped version to 0.7.2
  - uagen:
  - Update example output.
  - Recommend the use of the https-inspection action in the documentation.
  - Upgrade a couple of URLs to https://.
  - Add ElectroBSD to the list of operating systems.
  - Bumped generated Firefox version to 78 (ESR).
  - Bumped version to 1.2.2.
  - User documentation:
  - Remove reference to 'How to Report Bugs Effectively'.
    It was only rendered as text without URL in the README anyway
    and there's no indication that users read it ...
  - Let the dok-readme target fix the location embedded into the
    README file. This used to be done by CVS but since the git migration
    it has to be done through other means.
  - Remove 'experimental' warning for client-specific-tag-related directives.
    They seem to work reliably and there is no obvious reason
    why we would change the syntax in the near future.
  - Describe how to check if Privoxy has been built with
    FEATURE_HTTPS_INSPECTION.
  - Add a link to the trusted-cas-file documentation
    that explains how the user can create the file herself.
  - Don't explicitly mention the license for the code coming from
    'Anonymous Coders' and Junkbusters. It's obviously licensed under
    the GNU GPL like the rest of Privoxy or we wouldn't be allowed to
    distribute it.
  - Update the +hide-user-agent example with uagen output.
  - Slightly improve the wording of the ca-key-file documentation.
  - Explicitly mention Windows 10 as supported so search engines and
    users looking for it can find it.
  - Import a bunch of contributors from the ChangeLog.
  - Remove obsolete doc/gpl.html.
  - Upgrade a couple of links to https://.
  - Don't prefer the SourceForge patch tracker over the
    privoxy-devel mailing list. While at it, link to the
    SourceForge patch tracker.
  - Mention http-inspection in the 'my browser warns me about
    unauthenticated content' FAQ entry.
  - Simplify the 'Is there is a license or fee?' FAQ entry.
  - Add another +redirect{} example.
  - Explicitly mention that interested sponsors should include
    the link target in their first mail.
  - Clarify that only Privoxy team members can object to new sponsors
    and link to the list of current team members.
  - Note that sponsor URLs may not contain keyword spam.
  - Garbage collect doc/webserver/images which isn't referenced anymore.
  - Update the method to reach the proxy settings in Firefox.
  - Update proxy_setup.jpg description to refer to Firefox.
  - Regenerate proxy_setup.jpg with a more recent Firefox (78.0).
  - Regenerate files-in-use.jpg without obsolete standard.action
    with modern colors and a slightly better quality.
  - Update URL to the actionsfile tracker.
  - Update a support request URL.
  - Rephrase the 'Can Privoxy run as service' FAQ entry and
    remove an obsolete paragraph.
  - Let the 'Where can I get updated Actions Files?' entry link to
    the gitweb version of default.action.master.
  - Update a link to the default.action file.
  - Update URLs for trackers and mailing lists.
  - Replace CVS reference with git.
  - Mention regression-tests.action in the config file.
  - Explicitly mention in the config file that access to the
    CA key should be limited to Privoxy.
  - List more client-specific-tag examples for inspiration.
  - Add additional headers to the client-header-order example.
  - Note that actions aren't updated after rewrites.
  - Explicitly mention that upgrading from http to https with
    a client-header filter is not supported
  - Note that protocol and host have to be added when rewriting
    the destination host for https-inspected requests.
  - Explicitly mention that the CA key is used to sign certificates.
  - Put openssl command in 'command' tags.
  - The man page has been moved from section 1 to man section 8.
  - Developer manual:
  - Flesh out the build instructions for Debian.
  - Remove the packaging instructions for RPM-based systems.
    They don't work and we don't release RPM packages anymore anyway.
  - Remove the packaging instructions for Solaris.
    They don't work and we don't release Solaris packages anymore anyway.
  - Update the suggested subject for the announce mails.
  - Update upload instructions.
    ftp://upload.sourceforge.net is no longer functional.
  - Remove a couple of package-dependent upload instructions
    that don't actually work.
  - Remove 'cd current' that no longer works.
  - Add regression-tests.action to the list of files that should be installed.
  - Stop claiming that there are text versions of the manuals.
    We stopped building them in 2008 (9ed36a3c5e6f12).
  - Note that the 'webserver' target creates the link needed for the user-manual.
  - Suggest to use the master branch as reference when creating
    the ChangeLog so the steps work when the current branch differs
    from master which is likely as the developer manual
    suggests to use a local branch for development.
  - Add the -s flag to the suggested 'git tag' command.  We prefer signed tags.
  - Mention that merges into 'master' should be avoided.
  - Add git commands that should result in a merge-free history.
  - Mention Privoxy-Regression-Test.
  - Add a section id to reduce link churn.
  - Recommend the dok-tidy target when building docs for the webserver.
  - Add another plug for the privoxy-devel mailing list.
  - Let the intro link the copyright section in the user manual instead
    of giving an incomplete summary of the license status.
  - Clarify that the webserver target uploads to the SourceForge webserver.
  - Mark the documentation for the Mac OS X installers as out of date and
    change the SCM name back to CVS.
  - Fix the location of the installer modules for Mac OS X.
    They are not actually available through git (yet).
  - Don't speak of Privoxy version 3 in the past tense.
  - Update the list of programs required for the release process.
  - Update description of the webserver target which uses ssh, not scp.
  - Remove obsolete reference to config.new.
  - Tests:
  - Add another hide-referrer{conditional-block} test.
  - Add another hide-referrer{conditional-forge} test.
  - Fix a hide-referrer{conditional-forge} test
    that expected an acceptable header to be forged.
  - Fix a hide-referrer{conditional-block} test
    that expected an acceptable Referer to be removed.
  - Explain why the "Set Header = Host: whatever.example.org" test is
    expected to fail when using a CGI prefix that starts with "https://".
  - Explain why a connection-sharing test is known to fail
    when using "https://p.p/" as CGI prefix.
  - Add a link to Privoxy-Regression-Test to regression-tests.action
    in case it isn't packaged.
  - Add regression tests for pcre host patterns.
  - Fixed a regression test that is executed when
    FEATURE_GRACEFUL_TERMINATION is enabled.
  - Privoxy infrastructure:
  - Import a Privoxy logo for the website.
  - Update Tor onion service to HiddenServiceVersion 3.
  - Display the "model" photos in a single row and remove placeholder images.
  - Regenerate homepage with updated sponsor list.
  - Use the '/sponsor' redirect for the link to the sponsor page.
  - Git commit messages are sent to the Privoxy-commits mailing list.</changelog>
  <changelog author="Carsten Ziepke &lt;kieltux@gmail.com&gt;" date="1615032000">- Update to version 3.0.32:
  - Security/Reliability (boo#1183129)
  - ssplit(): Remove an assertion that could be triggered with a
    crafted CGI request.
    Commit 2256d7b4d67. OVE-20210203-0001. CVE-2021-20272
    Reported by: Joshua Rogers (Opera)
  - cgi_send_banner(): Overrule invalid image types. Prevents a
    crash with a crafted CGI request if Privoxy is toggled off.
    Commit e711c505c48. OVE-20210206-0001. CVE-2021-20273
    Reported by: Joshua Rogers (Opera)
  - socks5_connect(): Don't try to send credentials when none are
    configured. Fixes a crash due to a NULL-pointer dereference
    when the socks server misbehaves.
    Commit 85817cc55b9. OVE-20210207-0001. CVE-2021-20274
    Reported by: Joshua Rogers (Opera)
  - chunked_body_is_complete(): Prevent an invalid read of size
    two.
    Commit a912ba7bc9c. OVE-20210205-0001. CVE-2021-20275
    Reported by: Joshua Rogers (Opera)
  - Obsolete pcre: Prevent invalid memory accesses with an invalid
    pattern passed to pcre_compile(). Note that the obsolete pcre
    code is scheduled to be removed before the 3.0.33 release.
    There has been a warning since 2008 already.
    Commit 28512e5b624. OVE-20210222-0001. CVE-2021-20276
    Reported by: Joshua Rogers (Opera)
  - Bug fixes:
  - Properly parse the client-tag-lifetime directive. Previously it was
    not accepted as an obsolete hash value was being used.
    Reported by: Joshua Rogers (Opera)
  - decompress_iob(): Prevent reading of uninitialized data.
    Reported by: Joshua Rogers (Opera).
  - decompress_iob(): Don't advance cur past eod when looking
    for the end of the file name and comment.
  - decompress_iob(): Cast value to unsigned char before shifting.
    Prevents a left-shift of a negative value which is undefined behaviour.
    Reported by: Joshua Rogers (Opera)
  - gif_deanimate(): Confirm that that we have enough data before doing
    any work. Fixes a crash when fuzzing with an empty document.
    Reported by: Joshua Rogers (Opera).
  - buf_copy(): Fail if there's no data to write or nothing to do.
    Prevents undefined behaviour "applying zero offset to null pointer".
    Reported by: Joshua Rogers (Opera)
  - log_error(): Treat LOG_LEVEL_FATAL as fatal even when --stfu is
    being used while fuzzing.
    Reported by: Joshua Rogers (Opera).
  - Respect DESTDIR when considering whether or not to install
    config files with ".new" extension.
  - OpenSSL ssl_store_cert(): Fix two error messages.
  - Fix a couple of format specifiers.
  - Silence compiler warnings when compiling with NDEBUG.
  - fuzz_server_header(): Fix compiler warning.
  - fuzz_client_header(): Fix compiler warning.
  - cgi_send_user_manual(): Also reject requests if the user-manual
    directive specifies a https:// URL. Previously Privoxy would try and
    fail to open a local file.
  - General improvements:
  - Log the TLS version and the the cipher when debug 2 is enabled.
  - ssl_send_certificate_error(): Respect HEAD requests by not sending a body.
  - ssl_send_certificate_error(): End the body with a single new line.
  - serve(): Increase the chances that the host is logged when closing
    a server socket.
  - handle_established_connection(): Add parentheses to clarify an expression
    Suggested by: David Binderman
  - continue_https_chat(): Explicitly unset CSP_FLAG_CLIENT_CONNECTION_KEEP_ALIVE
    if process_encrypted_request() fails. This makes it more obvious that the
    connection will not be reused. Previously serve() relied on
    CSP_FLAG_SERVER_CONTENT_LENGTH_SET and CSP_FLAG_CHUNKED being unset.
    Inspired by a patch from Joshua Rogers (Opera).
  - decompress_iob(): Add periods to a couple of log messages
  - Terminate the body of the HTTP snipplets with a single new line
    instead of "\r\n".
  - configure: Add --with-assertions option and only enable assertions
    when it is used
  - windows build: Use --with-brotli and --with-mbedtls by default and
    enable dynamic error checking.
  - gif_deanimate(): Confirm we've got an image before trying to write it
    Saves a pointless buf_copy() call.
  - OpenSSL ssl_store_cert(): Remove a superfluous space before the serial number.
  - Action file improvements:
  - Disable fast-redirects for .golem.de/
  - Unblock requests to adri*.
  - Block requests for trc*.taboola.com/
  - Disable fast-redirects for .linkedin.com/
  - Filter file improvements:
  - Make the second pcrs job of the img-reorder filter greedy again.
    The ungreedy version broke the img tags on:
    https://bulk.fefe.de/scalability/.
  - Privoxy-Log-Parser:
  - Highlight a few more messages.
  - Clarify the --statistics output. The shown "Reused connections"
    are server connections so name them appropriately.
  - Bump version to 0.9.3.
  - Privoxy-Regression-Test:
  - Add the --check-bad-ssl option to the --help output.
  - Bump version to 0.7.3.
  - Documentation:
  - Add pushing the created tag to the release steps in the developer manual.
  - Clarify that 'debug 32768' should be used in addition to the other debug
    directives when reporting problems.
  - Add a 'Third-party licenses and copyrights' section to the user manual.</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1617969600">- Using pcre is good, however using the pcreposix library is not and will
  lead to undefined behaviour as symbol clashes with glibc.
  (privoxy-nopcreposix.patch)</changelog>
  <changelog author="Michael Du &lt;duyizhaozj321@yahoo.com&gt;" date="1634299200">- Revert privoxy-nopcreposix.patch because of bsc#1184945.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * privoxy.service</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1639137600">- privoxy 3.0.33 (boo#1193584):
  * CVE-2021-44543: Encode the template name to prevent XSS
    (cross-side scripting) when Privoxy is configured to servce
    the user-manual itself
  * CVE-2021-44540: Free memory of compiled pattern spec
    before bailing
  * CVE-2021-44541: Free header memory when failing to get the
    request destination.
  * CVE-2021-44542: Prevent memory leaks when handling errors
  * Disable fast-redirects for a number of domains
  * Update default block lists
  * Many bug fixes and minor enhancements</changelog>
</package>
<package pkgid="0408c661f413a21b7dedf30c8040be26565cccad2063867db7b7791ed95fc01f" name="privoxy" arch="x86_64">
  <version epoch="0" ver="3.0.33" rel="bp154.3.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashisms in pre script</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1417176000">- Privoxy 3.0.22 [boo#907675]
- Bug fixes:
  - Fixed a memory leak when rejecting client connections
    [CVE-2015-1030 [CVE-2015-1031] [boo#913094]
  - Fixed an immediate-use-after-free bug and two additional
    unconfirmed use-after-free complaints
    [CVE-2015-1201] [boo#914450]
  - Actually show the FORCE_PREFIX value on the show-status page.
  - Properly deal with Keep-Alive headers with timeout= parameters
  - Not using any filter files no longer results in warning messages
    unless an action file is referencing header taggers or filters.
  - Fixed a bug that prevented Privoxy from reusing some reusable
    connections.
- General improvements:
  - Introduced NO-REQUEST-TAG and NO-RESPONSE-TAG.
  - Add support for the 'PATCH' method as defined in RFC5789.
  - Reject requests with unsupported Expect header values.
  - Normalize the HTTP-version in forwarded requests and responses.
  - Server 'Keep-Alive' headers are no longer forwarded.
  - Change declared template file encoding to UTF-8.
  - Do not pass rejected keep-alive timeouts to the server.
  - CGI templates no longer enforce new windows for some links.
  - Documentation improvements
  - Build system improvements
- Action file improvements:
  - The pattern 'promotions.' is no longer being blocked.
  - Various updated filter rules and exceptions.
- Filter file improvements &amp; bug fixes:
  - Decrease the chances that js-annoyances creates invalid JavaScript.
  - Let the msn filter hide 'related' ads again.
  - Prevent img-reorder from messing up img tags with empty src
    attributes.
- add source URL
- fix self-obsoletion
- clean up spec file</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1422273600">- update to version 3.0.23 [boo#914934]
  - Bug fixes:
  - Fixed a DoS issue in case of client requests with incorrect
    chunk-encoded body. When compiled with assertions enabled
    (the default) they could previously cause Privoxy to abort().
    [CVE-2015-1380]
  - Fixed multiple segmentation faults and memory leaks in the
    pcrs code. This fix also increases the chances that an invalid
    pcrs command is rejected as such. Previously some invalid commands
    would be loaded without error. Note that Privoxy's pcrs sources
    (action and filter files) are considered trustworthy input and
    should not be writable by untrusted third-parties.
    [CVE-2015-1381]
  - Fixed an 'invalid read' bug which could at least theoretically
    cause Privoxy to crash. So far, no crashes have been observed.
  - Compiles with --disable-force again. Reported by Kay Raven.
  - Client requests with body that can't be delivered no longer
    cause pipelined requests behind them to be rejected as invalid.
    [CVE-2015-1382]
  - General improvements:
  - If a pcrs command is rejected as invalid, Privoxy now logs
    the cause of the problem as text. Previously the pcrs error
    code was logged.
  - The tests are less likely to cause false positives.
  - Action file improvements:
  - '.sify.com/' is no longer blocked. Apparently it is not actually
    a pure tracking site (anymore?). Reported by Andrew on ijbswa-users@.
  - Unblock banners on .amnesty.de/ which aren't ads.
  - Documentation improvements:
  - The 'Would you like to donate?' section now also contains
    a "Paypal" address.
  - The list of supported operating systems has been updated.
  - The existence of the SF support and feature trackers has been
    deemphasized because they have been broken for months.
    Most of the time the mailing lists still work.
  - The claim that default.action updates are sometimes released
    on their own has been removed. It hasn't happened in years.
  - Explicitly mention that Tor's port may deviate from the default
    when using a bundle. Requested by Andrew on ijbswa-users@.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1422360000">- add CVE and bug IDs to last two changelog entries</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1422446400">- add CVE IDs for [boo#914934]</changelog>
  <changelog author="astieger@suse.com" date="1453550400">- Privoxy 3.0.24
  Includes fixes for two security issues that may be used to
  remotely trigger crashes on platforms that carefully check memory
  accesses.
  * Security fixes (denial of service):
    + Prevent invalid reads in case of corrupt chunk-encoded
    content. CVE-2016-1982 [boo#963151]
    + Remove empty Host headers in client requests. Previously
    they would result in invalid reads. CVE-2016-1983 [boo#963152]
  * General bug fixes and improvements
  * White and blacklist updates</changelog>
  <changelog author="kieltux@gmail.com" date="1475064000">- Update to version 3.0.26
  * Bug fixes:
  - Fixed crashes with "listen-addr :8118" (SF Bug #902).
    The regression was introduced in 3.0.25 beta and reported
    by Marvin Renich in Debian bug #834941.
  * General improvements:
  - Log when privoxy is toggled on or off via cgi interface.
  - Highlight the "Info: Now toggled " on/off log message
    in the Windows log viewer.
  - Highlight the loading actions/filter file log message
    in the Windows log viewer.
  - Mention client-specific tags on the toggle page as a
    potentionally more appropriate alternative.
  * Infrastructure improvements:
  - Add perl script to generate an RSS feed for the packages
    Submitted by "Unknown".
  * Build system improvements:
  - strptime.h: fix a compiler warning about ambiguous else.
  - configure.in: Check for Docbook goo on the BSDs as well.
  - GNUMakefile.in: Let the dok-user target remove
    temporary files.
- BuildArch for docs: noarch</changelog>
  <changelog author="sean@suspend.net" date="1546257600">- Update to version 3.0.28:
  * Bug fixes:
  - Fix misplaced parentheses
  - Changed two regression tests to depend on config directive</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1564056000">- removal of SuSEfirewall2 service, since SuSEfirewall2 has been replaced by
  firewalld, see [1].
  [1]: https://lists.opensuse.org/opensuse-factory/2019-01/msg00490.html</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1580731200">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1597838400">- Stop trying to mangle _unitdir: this is defined in all supported
  distros.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1607256000">- add upstream signing key and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1607256001">- privoxy 3.0.29:
  * Fixed memory leaks when a response is buffered and the buffer
    limit is reached or Privoxy is running out of memory.
    OVE-20201118-0001
  * Fixed a memory leak in the show-status CGI handler when
    no action files are configured
    OVE-20201118-0002
  * Fixed a memory leak in the show-status CGI handler when
    no filter files are configured
    OVE-20201118-0003
  * Fixes a memory leak when client tags are active
    OVE-20201118-0004
  * Fixed a memory leak if multiple filters are executed
    and the last one is skipped due to a pcre error
    OVE-20201118-0005
  * Prevent an unlikely dereference of a NULL-pointer that
    could result in a crash if accept-intercepted-requests
    was enabled, Privoxy failed to get the request destination
    from the Host header and a memory allocation failed.
    OVE-20201118-0006
  * Fixed memory leaks in the client-tags CGI handler when
    client tags are configured and memory allocations fail.
    OVE-20201118-0007
  * Fixed memory leaks in the show-status CGI handler when memory
    allocations fail
    OVE-20201118-0008
  * Add experimental https inspection support
  * Use JIT compilation for static filtering for speedup
  * Add support for Brotli decompression, add
    'no-brotli-accepted' filter which prevents the use of
    Brotli compression
  * Add feature to gather exended statistics
  * Use IP_FREEBIND socket option to help with failover
  * Allow to use extended host patterns and vanilla host patterns
    at the same time by prefixing extended host patterns with
    "PCRE-HOST-PATTERN:"
  * Added "Cross-origin resource sharing" (CORS) support
  * Add SOCKS5 username/password support
  * Bump the maximum number of action and filter files
    to 100 each
  * Fixed handling of filters with "split-large-forms 1"
    when using the CGI editor.
  * Better detect a mismatch of connection details when
    figuring out whether or not a connection can be reused
  * Don't send a "Connection failure" message instead of the
    "DNS failure" message
  * Let LOG_LEVEL_REQUEST log all requests
  * Improvements to default Action file
- license changed to GPLv3
- remove packaging vulnerability boo#1157449
- remove packaging for distributions without systemd
  drops privoxy-3.0.16-networkmanager.patch</changelog>
  <changelog author="Carsten Ziepke &lt;kieltux@gmail.com&gt;" date="1612180800">- Update to version 3.0.31:
  - Security/Reliability (boo#1181650)
  - Prevent an assertion from getting triggered by a crafted
    CGI request.
    Commit 5bba5b89193fa. OVE-20210130-0001. CVE-2021-20217
    Reported by: Joshua Rogers (Opera)
  - Fixed a memory leak when decompression fails "unexpectedly".
    Commit f431d61740cc0. OVE-20210128-0001. CVE-2021-20216
  - Bug fixes:
  - Fixed detection of insufficient data for decompression.
    Previously Privoxy could try to decompress a partly
    uninitialized buffer.
- Update to version 3.0.30:
  - Bug fixes:
  - Check the actual URL for redirects when https inspecting requests.
    Previously Privoxy would only check the path which resulted in
    rewrite results being rejected as invalid URLs.
    Reported by withoutname in #1736.
  - Let the hide-referrer code tolerate Referer headers with https:// URLs.
    Previously they would always be treated like a changed host.
  - Use the https headers if the show-request handler is reached through
    https://. Previously Privoxy would use the http headers which
    may be empty on a reused connection.
  - Make CGI_PREFIX protocol-relative when building with FEATURE_HTTPS_INSPECTION.
    This unbreaks (at least) https://config.privoxy.org/client-tags whose
    buttons would previously use a http:// URL resulting in browser warnings.
  - Support using https-inspection and client-header-order at the same time.
    Previously Privoxy would crash.
    Reported by: Kai Raven
  - Properly reject rewrites from http to https as they currently
    aren't supported. Previously Privoxy would wait for the client
    to establish an encrypted connection which obviously would not happen.
  - When https inspection is enabled and Privoxy has been compiled with
    FEATURE_GRACEFUL_TERMINATION (not recommended for production builds),
    the TLS backend resources are free'd later on and only if no active
    connections are left. Prevents crashes when exiting "gracefully" at the
    wrong time.
  - Let the uninstall target remove the config file even if DESTDIR
    is set and properly announce the deletion of the configuration files.
  - General improvements:
  - Allow to rewrite the request destination for https-inspected
    requests behind the client's back. The documentation already sort
    of claimed that it was supported by not especially mentioning that
    it didn't work for https-inspected requests.
    Fixes SF bug #923 reported by withoutname.
  - Add support for filtering client request bodies by using
    CLIENT-BODY-FILTER filters which can be enabled with the
    client-body-filter action.
    Patch submitted by Maxim Antonov.
    Sponsored by: Robert Klemme
  - Add the new action suppress-tag{} which can be used to prevent
    a tagger from adding a tag. Patch submitted by Maxim Antonov.
    Sponsored by: Robert Klemme
  - Gracefully handle existing website keys without matching certificates.
    This can happen if Privoxy was previously running with an invalid
    TLS configuration that didn't allow it to create a certificate.
  - Recycle debug bit 4 for Tagging-related messages.
  - Improve the message shown when the client-tags CGI page
    is requested with no tags configured.
  - Shorten the 'donate' and 'participate' links used by templates
    using redirects. Currently the redirects lead to the FAQ entries
    but in the future we may want to relocate the content and using
    redirects makes this more convenient.
  - Log an error when a PCRE-HOST-PATTERN is used with
    FEATURE_PCRE_HOST_PATTERNS disabled. Don't treat this a
    fatal error so the regression tests can be used with and
    without FEATURE_PCRE_HOST_PATTERNS.
  - The code compiles with older C compilers again.
  - The chdir() return code is checked to fix a compiler warning.
  - The packages feed has been removed from the source tarball.
    It's usually out of date when the source tarball is generated
    for the release.
  - Fixed harmless compiler warnings from GCC9 with -D_FORTIFY_SOURCE=2.
  - windows: Remove obsolete '$(DEST)/doc/images' target.
  - windows: Install the images referenced in the user manual.
  - Remove obsolete 'gnu_regex.@OBJEXT@' target.
  - When installing from the GNUMAkefile, don't create an 'images'
    directory which is no longer used. The images were relocated to
    the user-manual directory years ago.
  - Add new FEATURES to the show-status page and resort list.
  - Remove unused variable in the OpenSSL-specific code.
  - Update bug tracker URL in cgi_error_unknown().
  - Saved a couple of memory allocations when sorting client headers.
  - Improved a couple of error messages.
  - Saved memory allocations when using OpenSSL and checking if a
    key already exists.
  - The configure script will bail out if OpenSSL and mbedTLS are
    enabled at the same time.
  - Log a message right before exiting gracefully.
  - A couple of structures have been rearranged to require slightly
    less memory.
  - When https inspection is enabled and the certificate is invalid
    the error message is now sent with status code 403 instead of 200.
  - The Slackware rc script template has been renamed to
    slackware/rc.privoxy.in to silence complaints when building
    Debian packages.
  - When building with MbedTLS support, mbedtls_md5_ret() is used
    instead of mbedtls_md5() which is deprecated and causes a warning
    on Debian GNU/Linux.
  - Action file improvements:
  - Block requests to eu-tlp03.kameleoon.com/.
  - Unblock metrics.sr.ht/.
  - Disable fast-redirects for .fsf.org/.
  - Disable fast-redirects for .gravater.com/.
  - Disable fast-redirects for .ksta.de/.
  - Block requests to tag.crsspxl.com/.
  - Block requests to analytics.slashdotmedia.com/.
  - Block requests to ml314.com/.
  - Block requests to .adroll.com/.
  - Block requests to fastlane.rubiconproject.com/.
  - Block requests to api.theadex.com/.
  - Block requests to ih.adscale.de/.
  - Block requests to .s400.meetrics.net/.
  - Block requests for pp.lp4.io/.
  - Block requests for trc-events.taboola.com/.
  - Filter file improvements:
  - A allow-autocompletion filter has been added which changes
    autocomplete="off" to "on" on input fields to allow autocompletion.
    Requested by Jamie Zawinski in #370.
    Filter based on a submission by Aaron Linville.
  - Added an imdb filter.
  - Added a sourceforge filter that reduces the amount of ads
    for proprietary software.
  - Added a github filter that removes the annoying "Sign-Up"
    banner and the Cookie disclaimer.
  - Removed a duplicated pcrs command from the js-annoyances filter.
  - The crude-parental filter now provides a short reason when blocking,
    inserts a link to Privoxy's webinterface and adds a new line at
    the end of the generated page.
  - Privoxy-Log-Parser:
  - Highlight a few more messages.
  - Add a handler for tagging messages.
  - Properly deal with 'Certificate error' crunches
    Previously the error description was highlighted as 'host'.
  - Log truncated LOG_LEVEL_CLF messages more gracefully
    and note that the statistics will be imprecise.
  - Fixed perldoc typo.
  - Bump version to 0.9.2.
  - Privoxy-Regression-Test:
  - Use http://127.0.0.1:8118/ as default Privoxy address
    unless http_proxy is set through the environment.
  - Add a --privoxy-cgi-prefix option that specifies the prefix
    to use when building URLs that are supposed to reach Privoxy's
    CGI interface. If it's not set, http://p.p/ is used, which is
    supposed to work with the default Privoxy configuration.
    If Privoxy has been built with FEATURE_HTTPS_INSPECTION enabled,
    and if https inspection is activated with the +https-inspection
    action, this option can be used with "https://p.p/" provided the
    system running Privoxy-Regression-Test has been configured to
    trust the certificate used by Privoxy.
    Note that there are currently two tests in the official
    regression-tests.action file that are expected to fail
    when using "https://p.p/" as privoxy-cgi-prefix.
  - Skip the connection-established response in get_status_code()
    when looking for the status code with a CGI prefix
    that starts with https://. We care about the status code
    sent by the impersonated web server.
  - Use --proxy-header when using a CGI prefix with https://
    and a "Host:" header.
  - Allow '|' in tokens and values to allow tag patterns like
    "TAG:^(application|text)/(x-)?javascript$".
  - When get_cgi_page_or_else() fails, include the URL of the
    requested page in the log message.
  - Added a --check-bad-ssl option that can be used to verify that
    Privoxy detects certificate problems when accessing the test
    sites from badssl.com.
  - Bumped version to 0.7.2
  - uagen:
  - Update example output.
  - Recommend the use of the https-inspection action in the documentation.
  - Upgrade a couple of URLs to https://.
  - Add ElectroBSD to the list of operating systems.
  - Bumped generated Firefox version to 78 (ESR).
  - Bumped version to 1.2.2.
  - User documentation:
  - Remove reference to 'How to Report Bugs Effectively'.
    It was only rendered as text without URL in the README anyway
    and there's no indication that users read it ...
  - Let the dok-readme target fix the location embedded into the
    README file. This used to be done by CVS but since the git migration
    it has to be done through other means.
  - Remove 'experimental' warning for client-specific-tag-related directives.
    They seem to work reliably and there is no obvious reason
    why we would change the syntax in the near future.
  - Describe how to check if Privoxy has been built with
    FEATURE_HTTPS_INSPECTION.
  - Add a link to the trusted-cas-file documentation
    that explains how the user can create the file herself.
  - Don't explicitly mention the license for the code coming from
    'Anonymous Coders' and Junkbusters. It's obviously licensed under
    the GNU GPL like the rest of Privoxy or we wouldn't be allowed to
    distribute it.
  - Update the +hide-user-agent example with uagen output.
  - Slightly improve the wording of the ca-key-file documentation.
  - Explicitly mention Windows 10 as supported so search engines and
    users looking for it can find it.
  - Import a bunch of contributors from the ChangeLog.
  - Remove obsolete doc/gpl.html.
  - Upgrade a couple of links to https://.
  - Don't prefer the SourceForge patch tracker over the
    privoxy-devel mailing list. While at it, link to the
    SourceForge patch tracker.
  - Mention http-inspection in the 'my browser warns me about
    unauthenticated content' FAQ entry.
  - Simplify the 'Is there is a license or fee?' FAQ entry.
  - Add another +redirect{} example.
  - Explicitly mention that interested sponsors should include
    the link target in their first mail.
  - Clarify that only Privoxy team members can object to new sponsors
    and link to the list of current team members.
  - Note that sponsor URLs may not contain keyword spam.
  - Garbage collect doc/webserver/images which isn't referenced anymore.
  - Update the method to reach the proxy settings in Firefox.
  - Update proxy_setup.jpg description to refer to Firefox.
  - Regenerate proxy_setup.jpg with a more recent Firefox (78.0).
  - Regenerate files-in-use.jpg without obsolete standard.action
    with modern colors and a slightly better quality.
  - Update URL to the actionsfile tracker.
  - Update a support request URL.
  - Rephrase the 'Can Privoxy run as service' FAQ entry and
    remove an obsolete paragraph.
  - Let the 'Where can I get updated Actions Files?' entry link to
    the gitweb version of default.action.master.
  - Update a link to the default.action file.
  - Update URLs for trackers and mailing lists.
  - Replace CVS reference with git.
  - Mention regression-tests.action in the config file.
  - Explicitly mention in the config file that access to the
    CA key should be limited to Privoxy.
  - List more client-specific-tag examples for inspiration.
  - Add additional headers to the client-header-order example.
  - Note that actions aren't updated after rewrites.
  - Explicitly mention that upgrading from http to https with
    a client-header filter is not supported
  - Note that protocol and host have to be added when rewriting
    the destination host for https-inspected requests.
  - Explicitly mention that the CA key is used to sign certificates.
  - Put openssl command in 'command' tags.
  - The man page has been moved from section 1 to man section 8.
  - Developer manual:
  - Flesh out the build instructions for Debian.
  - Remove the packaging instructions for RPM-based systems.
    They don't work and we don't release RPM packages anymore anyway.
  - Remove the packaging instructions for Solaris.
    They don't work and we don't release Solaris packages anymore anyway.
  - Update the suggested subject for the announce mails.
  - Update upload instructions.
    ftp://upload.sourceforge.net is no longer functional.
  - Remove a couple of package-dependent upload instructions
    that don't actually work.
  - Remove 'cd current' that no longer works.
  - Add regression-tests.action to the list of files that should be installed.
  - Stop claiming that there are text versions of the manuals.
    We stopped building them in 2008 (9ed36a3c5e6f12).
  - Note that the 'webserver' target creates the link needed for the user-manual.
  - Suggest to use the master branch as reference when creating
    the ChangeLog so the steps work when the current branch differs
    from master which is likely as the developer manual
    suggests to use a local branch for development.
  - Add the -s flag to the suggested 'git tag' command.  We prefer signed tags.
  - Mention that merges into 'master' should be avoided.
  - Add git commands that should result in a merge-free history.
  - Mention Privoxy-Regression-Test.
  - Add a section id to reduce link churn.
  - Recommend the dok-tidy target when building docs for the webserver.
  - Add another plug for the privoxy-devel mailing list.
  - Let the intro link the copyright section in the user manual instead
    of giving an incomplete summary of the license status.
  - Clarify that the webserver target uploads to the SourceForge webserver.
  - Mark the documentation for the Mac OS X installers as out of date and
    change the SCM name back to CVS.
  - Fix the location of the installer modules for Mac OS X.
    They are not actually available through git (yet).
  - Don't speak of Privoxy version 3 in the past tense.
  - Update the list of programs required for the release process.
  - Update description of the webserver target which uses ssh, not scp.
  - Remove obsolete reference to config.new.
  - Tests:
  - Add another hide-referrer{conditional-block} test.
  - Add another hide-referrer{conditional-forge} test.
  - Fix a hide-referrer{conditional-forge} test
    that expected an acceptable header to be forged.
  - Fix a hide-referrer{conditional-block} test
    that expected an acceptable Referer to be removed.
  - Explain why the "Set Header = Host: whatever.example.org" test is
    expected to fail when using a CGI prefix that starts with "https://".
  - Explain why a connection-sharing test is known to fail
    when using "https://p.p/" as CGI prefix.
  - Add a link to Privoxy-Regression-Test to regression-tests.action
    in case it isn't packaged.
  - Add regression tests for pcre host patterns.
  - Fixed a regression test that is executed when
    FEATURE_GRACEFUL_TERMINATION is enabled.
  - Privoxy infrastructure:
  - Import a Privoxy logo for the website.
  - Update Tor onion service to HiddenServiceVersion 3.
  - Display the "model" photos in a single row and remove placeholder images.
  - Regenerate homepage with updated sponsor list.
  - Use the '/sponsor' redirect for the link to the sponsor page.
  - Git commit messages are sent to the Privoxy-commits mailing list.</changelog>
  <changelog author="Carsten Ziepke &lt;kieltux@gmail.com&gt;" date="1615032000">- Update to version 3.0.32:
  - Security/Reliability (boo#1183129)
  - ssplit(): Remove an assertion that could be triggered with a
    crafted CGI request.
    Commit 2256d7b4d67. OVE-20210203-0001. CVE-2021-20272
    Reported by: Joshua Rogers (Opera)
  - cgi_send_banner(): Overrule invalid image types. Prevents a
    crash with a crafted CGI request if Privoxy is toggled off.
    Commit e711c505c48. OVE-20210206-0001. CVE-2021-20273
    Reported by: Joshua Rogers (Opera)
  - socks5_connect(): Don't try to send credentials when none are
    configured. Fixes a crash due to a NULL-pointer dereference
    when the socks server misbehaves.
    Commit 85817cc55b9. OVE-20210207-0001. CVE-2021-20274
    Reported by: Joshua Rogers (Opera)
  - chunked_body_is_complete(): Prevent an invalid read of size
    two.
    Commit a912ba7bc9c. OVE-20210205-0001. CVE-2021-20275
    Reported by: Joshua Rogers (Opera)
  - Obsolete pcre: Prevent invalid memory accesses with an invalid
    pattern passed to pcre_compile(). Note that the obsolete pcre
    code is scheduled to be removed before the 3.0.33 release.
    There has been a warning since 2008 already.
    Commit 28512e5b624. OVE-20210222-0001. CVE-2021-20276
    Reported by: Joshua Rogers (Opera)
  - Bug fixes:
  - Properly parse the client-tag-lifetime directive. Previously it was
    not accepted as an obsolete hash value was being used.
    Reported by: Joshua Rogers (Opera)
  - decompress_iob(): Prevent reading of uninitialized data.
    Reported by: Joshua Rogers (Opera).
  - decompress_iob(): Don't advance cur past eod when looking
    for the end of the file name and comment.
  - decompress_iob(): Cast value to unsigned char before shifting.
    Prevents a left-shift of a negative value which is undefined behaviour.
    Reported by: Joshua Rogers (Opera)
  - gif_deanimate(): Confirm that that we have enough data before doing
    any work. Fixes a crash when fuzzing with an empty document.
    Reported by: Joshua Rogers (Opera).
  - buf_copy(): Fail if there's no data to write or nothing to do.
    Prevents undefined behaviour "applying zero offset to null pointer".
    Reported by: Joshua Rogers (Opera)
  - log_error(): Treat LOG_LEVEL_FATAL as fatal even when --stfu is
    being used while fuzzing.
    Reported by: Joshua Rogers (Opera).
  - Respect DESTDIR when considering whether or not to install
    config files with ".new" extension.
  - OpenSSL ssl_store_cert(): Fix two error messages.
  - Fix a couple of format specifiers.
  - Silence compiler warnings when compiling with NDEBUG.
  - fuzz_server_header(): Fix compiler warning.
  - fuzz_client_header(): Fix compiler warning.
  - cgi_send_user_manual(): Also reject requests if the user-manual
    directive specifies a https:// URL. Previously Privoxy would try and
    fail to open a local file.
  - General improvements:
  - Log the TLS version and the the cipher when debug 2 is enabled.
  - ssl_send_certificate_error(): Respect HEAD requests by not sending a body.
  - ssl_send_certificate_error(): End the body with a single new line.
  - serve(): Increase the chances that the host is logged when closing
    a server socket.
  - handle_established_connection(): Add parentheses to clarify an expression
    Suggested by: David Binderman
  - continue_https_chat(): Explicitly unset CSP_FLAG_CLIENT_CONNECTION_KEEP_ALIVE
    if process_encrypted_request() fails. This makes it more obvious that the
    connection will not be reused. Previously serve() relied on
    CSP_FLAG_SERVER_CONTENT_LENGTH_SET and CSP_FLAG_CHUNKED being unset.
    Inspired by a patch from Joshua Rogers (Opera).
  - decompress_iob(): Add periods to a couple of log messages
  - Terminate the body of the HTTP snipplets with a single new line
    instead of "\r\n".
  - configure: Add --with-assertions option and only enable assertions
    when it is used
  - windows build: Use --with-brotli and --with-mbedtls by default and
    enable dynamic error checking.
  - gif_deanimate(): Confirm we've got an image before trying to write it
    Saves a pointless buf_copy() call.
  - OpenSSL ssl_store_cert(): Remove a superfluous space before the serial number.
  - Action file improvements:
  - Disable fast-redirects for .golem.de/
  - Unblock requests to adri*.
  - Block requests for trc*.taboola.com/
  - Disable fast-redirects for .linkedin.com/
  - Filter file improvements:
  - Make the second pcrs job of the img-reorder filter greedy again.
    The ungreedy version broke the img tags on:
    https://bulk.fefe.de/scalability/.
  - Privoxy-Log-Parser:
  - Highlight a few more messages.
  - Clarify the --statistics output. The shown "Reused connections"
    are server connections so name them appropriately.
  - Bump version to 0.9.3.
  - Privoxy-Regression-Test:
  - Add the --check-bad-ssl option to the --help output.
  - Bump version to 0.7.3.
  - Documentation:
  - Add pushing the created tag to the release steps in the developer manual.
  - Clarify that 'debug 32768' should be used in addition to the other debug
    directives when reporting problems.
  - Add a 'Third-party licenses and copyrights' section to the user manual.</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1617969600">- Using pcre is good, however using the pcreposix library is not and will
  lead to undefined behaviour as symbol clashes with glibc.
  (privoxy-nopcreposix.patch)</changelog>
  <changelog author="Michael Du &lt;duyizhaozj321@yahoo.com&gt;" date="1634299200">- Revert privoxy-nopcreposix.patch because of bsc#1184945.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * privoxy.service</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1639137600">- privoxy 3.0.33 (boo#1193584):
  * CVE-2021-44543: Encode the template name to prevent XSS
    (cross-side scripting) when Privoxy is configured to servce
    the user-manual itself
  * CVE-2021-44540: Free memory of compiled pattern spec
    before bailing
  * CVE-2021-44541: Free header memory when failing to get the
    request destination.
  * CVE-2021-44542: Prevent memory leaks when handling errors
  * Disable fast-redirects for a number of domains
  * Update default block lists
  * Many bug fixes and minor enhancements</changelog>
</package>
<package pkgid="28358b3b6cc9cfd12db3f627750b8c7b7450cb2f2d0aa3ae8d1ce0e0123c8282" name="privoxy-doc" arch="noarch">
  <version epoch="0" ver="3.0.33" rel="bp154.3.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashisms in pre script</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1417176000">- Privoxy 3.0.22 [boo#907675]
- Bug fixes:
  - Fixed a memory leak when rejecting client connections
    [CVE-2015-1030 [CVE-2015-1031] [boo#913094]
  - Fixed an immediate-use-after-free bug and two additional
    unconfirmed use-after-free complaints
    [CVE-2015-1201] [boo#914450]
  - Actually show the FORCE_PREFIX value on the show-status page.
  - Properly deal with Keep-Alive headers with timeout= parameters
  - Not using any filter files no longer results in warning messages
    unless an action file is referencing header taggers or filters.
  - Fixed a bug that prevented Privoxy from reusing some reusable
    connections.
- General improvements:
  - Introduced NO-REQUEST-TAG and NO-RESPONSE-TAG.
  - Add support for the 'PATCH' method as defined in RFC5789.
  - Reject requests with unsupported Expect header values.
  - Normalize the HTTP-version in forwarded requests and responses.
  - Server 'Keep-Alive' headers are no longer forwarded.
  - Change declared template file encoding to UTF-8.
  - Do not pass rejected keep-alive timeouts to the server.
  - CGI templates no longer enforce new windows for some links.
  - Documentation improvements
  - Build system improvements
- Action file improvements:
  - The pattern 'promotions.' is no longer being blocked.
  - Various updated filter rules and exceptions.
- Filter file improvements &amp; bug fixes:
  - Decrease the chances that js-annoyances creates invalid JavaScript.
  - Let the msn filter hide 'related' ads again.
  - Prevent img-reorder from messing up img tags with empty src
    attributes.
- add source URL
- fix self-obsoletion
- clean up spec file</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1422273600">- update to version 3.0.23 [boo#914934]
  - Bug fixes:
  - Fixed a DoS issue in case of client requests with incorrect
    chunk-encoded body. When compiled with assertions enabled
    (the default) they could previously cause Privoxy to abort().
    [CVE-2015-1380]
  - Fixed multiple segmentation faults and memory leaks in the
    pcrs code. This fix also increases the chances that an invalid
    pcrs command is rejected as such. Previously some invalid commands
    would be loaded without error. Note that Privoxy's pcrs sources
    (action and filter files) are considered trustworthy input and
    should not be writable by untrusted third-parties.
    [CVE-2015-1381]
  - Fixed an 'invalid read' bug which could at least theoretically
    cause Privoxy to crash. So far, no crashes have been observed.
  - Compiles with --disable-force again. Reported by Kay Raven.
  - Client requests with body that can't be delivered no longer
    cause pipelined requests behind them to be rejected as invalid.
    [CVE-2015-1382]
  - General improvements:
  - If a pcrs command is rejected as invalid, Privoxy now logs
    the cause of the problem as text. Previously the pcrs error
    code was logged.
  - The tests are less likely to cause false positives.
  - Action file improvements:
  - '.sify.com/' is no longer blocked. Apparently it is not actually
    a pure tracking site (anymore?). Reported by Andrew on ijbswa-users@.
  - Unblock banners on .amnesty.de/ which aren't ads.
  - Documentation improvements:
  - The 'Would you like to donate?' section now also contains
    a "Paypal" address.
  - The list of supported operating systems has been updated.
  - The existence of the SF support and feature trackers has been
    deemphasized because they have been broken for months.
    Most of the time the mailing lists still work.
  - The claim that default.action updates are sometimes released
    on their own has been removed. It hasn't happened in years.
  - Explicitly mention that Tor's port may deviate from the default
    when using a bundle. Requested by Andrew on ijbswa-users@.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1422360000">- add CVE and bug IDs to last two changelog entries</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1422446400">- add CVE IDs for [boo#914934]</changelog>
  <changelog author="astieger@suse.com" date="1453550400">- Privoxy 3.0.24
  Includes fixes for two security issues that may be used to
  remotely trigger crashes on platforms that carefully check memory
  accesses.
  * Security fixes (denial of service):
    + Prevent invalid reads in case of corrupt chunk-encoded
    content. CVE-2016-1982 [boo#963151]
    + Remove empty Host headers in client requests. Previously
    they would result in invalid reads. CVE-2016-1983 [boo#963152]
  * General bug fixes and improvements
  * White and blacklist updates</changelog>
  <changelog author="kieltux@gmail.com" date="1475064000">- Update to version 3.0.26
  * Bug fixes:
  - Fixed crashes with "listen-addr :8118" (SF Bug #902).
    The regression was introduced in 3.0.25 beta and reported
    by Marvin Renich in Debian bug #834941.
  * General improvements:
  - Log when privoxy is toggled on or off via cgi interface.
  - Highlight the "Info: Now toggled " on/off log message
    in the Windows log viewer.
  - Highlight the loading actions/filter file log message
    in the Windows log viewer.
  - Mention client-specific tags on the toggle page as a
    potentionally more appropriate alternative.
  * Infrastructure improvements:
  - Add perl script to generate an RSS feed for the packages
    Submitted by "Unknown".
  * Build system improvements:
  - strptime.h: fix a compiler warning about ambiguous else.
  - configure.in: Check for Docbook goo on the BSDs as well.
  - GNUMakefile.in: Let the dok-user target remove
    temporary files.
- BuildArch for docs: noarch</changelog>
  <changelog author="sean@suspend.net" date="1546257600">- Update to version 3.0.28:
  * Bug fixes:
  - Fix misplaced parentheses
  - Changed two regression tests to depend on config directive</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1564056000">- removal of SuSEfirewall2 service, since SuSEfirewall2 has been replaced by
  firewalld, see [1].
  [1]: https://lists.opensuse.org/opensuse-factory/2019-01/msg00490.html</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1580731200">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1597838400">- Stop trying to mangle _unitdir: this is defined in all supported
  distros.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1607256000">- add upstream signing key and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1607256001">- privoxy 3.0.29:
  * Fixed memory leaks when a response is buffered and the buffer
    limit is reached or Privoxy is running out of memory.
    OVE-20201118-0001
  * Fixed a memory leak in the show-status CGI handler when
    no action files are configured
    OVE-20201118-0002
  * Fixed a memory leak in the show-status CGI handler when
    no filter files are configured
    OVE-20201118-0003
  * Fixes a memory leak when client tags are active
    OVE-20201118-0004
  * Fixed a memory leak if multiple filters are executed
    and the last one is skipped due to a pcre error
    OVE-20201118-0005
  * Prevent an unlikely dereference of a NULL-pointer that
    could result in a crash if accept-intercepted-requests
    was enabled, Privoxy failed to get the request destination
    from the Host header and a memory allocation failed.
    OVE-20201118-0006
  * Fixed memory leaks in the client-tags CGI handler when
    client tags are configured and memory allocations fail.
    OVE-20201118-0007
  * Fixed memory leaks in the show-status CGI handler when memory
    allocations fail
    OVE-20201118-0008
  * Add experimental https inspection support
  * Use JIT compilation for static filtering for speedup
  * Add support for Brotli decompression, add
    'no-brotli-accepted' filter which prevents the use of
    Brotli compression
  * Add feature to gather exended statistics
  * Use IP_FREEBIND socket option to help with failover
  * Allow to use extended host patterns and vanilla host patterns
    at the same time by prefixing extended host patterns with
    "PCRE-HOST-PATTERN:"
  * Added "Cross-origin resource sharing" (CORS) support
  * Add SOCKS5 username/password support
  * Bump the maximum number of action and filter files
    to 100 each
  * Fixed handling of filters with "split-large-forms 1"
    when using the CGI editor.
  * Better detect a mismatch of connection details when
    figuring out whether or not a connection can be reused
  * Don't send a "Connection failure" message instead of the
    "DNS failure" message
  * Let LOG_LEVEL_REQUEST log all requests
  * Improvements to default Action file
- license changed to GPLv3
- remove packaging vulnerability boo#1157449
- remove packaging for distributions without systemd
  drops privoxy-3.0.16-networkmanager.patch</changelog>
  <changelog author="Carsten Ziepke &lt;kieltux@gmail.com&gt;" date="1612180800">- Update to version 3.0.31:
  - Security/Reliability (boo#1181650)
  - Prevent an assertion from getting triggered by a crafted
    CGI request.
    Commit 5bba5b89193fa. OVE-20210130-0001. CVE-2021-20217
    Reported by: Joshua Rogers (Opera)
  - Fixed a memory leak when decompression fails "unexpectedly".
    Commit f431d61740cc0. OVE-20210128-0001. CVE-2021-20216
  - Bug fixes:
  - Fixed detection of insufficient data for decompression.
    Previously Privoxy could try to decompress a partly
    uninitialized buffer.
- Update to version 3.0.30:
  - Bug fixes:
  - Check the actual URL for redirects when https inspecting requests.
    Previously Privoxy would only check the path which resulted in
    rewrite results being rejected as invalid URLs.
    Reported by withoutname in #1736.
  - Let the hide-referrer code tolerate Referer headers with https:// URLs.
    Previously they would always be treated like a changed host.
  - Use the https headers if the show-request handler is reached through
    https://. Previously Privoxy would use the http headers which
    may be empty on a reused connection.
  - Make CGI_PREFIX protocol-relative when building with FEATURE_HTTPS_INSPECTION.
    This unbreaks (at least) https://config.privoxy.org/client-tags whose
    buttons would previously use a http:// URL resulting in browser warnings.
  - Support using https-inspection and client-header-order at the same time.
    Previously Privoxy would crash.
    Reported by: Kai Raven
  - Properly reject rewrites from http to https as they currently
    aren't supported. Previously Privoxy would wait for the client
    to establish an encrypted connection which obviously would not happen.
  - When https inspection is enabled and Privoxy has been compiled with
    FEATURE_GRACEFUL_TERMINATION (not recommended for production builds),
    the TLS backend resources are free'd later on and only if no active
    connections are left. Prevents crashes when exiting "gracefully" at the
    wrong time.
  - Let the uninstall target remove the config file even if DESTDIR
    is set and properly announce the deletion of the configuration files.
  - General improvements:
  - Allow to rewrite the request destination for https-inspected
    requests behind the client's back. The documentation already sort
    of claimed that it was supported by not especially mentioning that
    it didn't work for https-inspected requests.
    Fixes SF bug #923 reported by withoutname.
  - Add support for filtering client request bodies by using
    CLIENT-BODY-FILTER filters which can be enabled with the
    client-body-filter action.
    Patch submitted by Maxim Antonov.
    Sponsored by: Robert Klemme
  - Add the new action suppress-tag{} which can be used to prevent
    a tagger from adding a tag. Patch submitted by Maxim Antonov.
    Sponsored by: Robert Klemme
  - Gracefully handle existing website keys without matching certificates.
    This can happen if Privoxy was previously running with an invalid
    TLS configuration that didn't allow it to create a certificate.
  - Recycle debug bit 4 for Tagging-related messages.
  - Improve the message shown when the client-tags CGI page
    is requested with no tags configured.
  - Shorten the 'donate' and 'participate' links used by templates
    using redirects. Currently the redirects lead to the FAQ entries
    but in the future we may want to relocate the content and using
    redirects makes this more convenient.
  - Log an error when a PCRE-HOST-PATTERN is used with
    FEATURE_PCRE_HOST_PATTERNS disabled. Don't treat this a
    fatal error so the regression tests can be used with and
    without FEATURE_PCRE_HOST_PATTERNS.
  - The code compiles with older C compilers again.
  - The chdir() return code is checked to fix a compiler warning.
  - The packages feed has been removed from the source tarball.
    It's usually out of date when the source tarball is generated
    for the release.
  - Fixed harmless compiler warnings from GCC9 with -D_FORTIFY_SOURCE=2.
  - windows: Remove obsolete '$(DEST)/doc/images' target.
  - windows: Install the images referenced in the user manual.
  - Remove obsolete 'gnu_regex.@OBJEXT@' target.
  - When installing from the GNUMAkefile, don't create an 'images'
    directory which is no longer used. The images were relocated to
    the user-manual directory years ago.
  - Add new FEATURES to the show-status page and resort list.
  - Remove unused variable in the OpenSSL-specific code.
  - Update bug tracker URL in cgi_error_unknown().
  - Saved a couple of memory allocations when sorting client headers.
  - Improved a couple of error messages.
  - Saved memory allocations when using OpenSSL and checking if a
    key already exists.
  - The configure script will bail out if OpenSSL and mbedTLS are
    enabled at the same time.
  - Log a message right before exiting gracefully.
  - A couple of structures have been rearranged to require slightly
    less memory.
  - When https inspection is enabled and the certificate is invalid
    the error message is now sent with status code 403 instead of 200.
  - The Slackware rc script template has been renamed to
    slackware/rc.privoxy.in to silence complaints when building
    Debian packages.
  - When building with MbedTLS support, mbedtls_md5_ret() is used
    instead of mbedtls_md5() which is deprecated and causes a warning
    on Debian GNU/Linux.
  - Action file improvements:
  - Block requests to eu-tlp03.kameleoon.com/.
  - Unblock metrics.sr.ht/.
  - Disable fast-redirects for .fsf.org/.
  - Disable fast-redirects for .gravater.com/.
  - Disable fast-redirects for .ksta.de/.
  - Block requests to tag.crsspxl.com/.
  - Block requests to analytics.slashdotmedia.com/.
  - Block requests to ml314.com/.
  - Block requests to .adroll.com/.
  - Block requests to fastlane.rubiconproject.com/.
  - Block requests to api.theadex.com/.
  - Block requests to ih.adscale.de/.
  - Block requests to .s400.meetrics.net/.
  - Block requests for pp.lp4.io/.
  - Block requests for trc-events.taboola.com/.
  - Filter file improvements:
  - A allow-autocompletion filter has been added which changes
    autocomplete="off" to "on" on input fields to allow autocompletion.
    Requested by Jamie Zawinski in #370.
    Filter based on a submission by Aaron Linville.
  - Added an imdb filter.
  - Added a sourceforge filter that reduces the amount of ads
    for proprietary software.
  - Added a github filter that removes the annoying "Sign-Up"
    banner and the Cookie disclaimer.
  - Removed a duplicated pcrs command from the js-annoyances filter.
  - The crude-parental filter now provides a short reason when blocking,
    inserts a link to Privoxy's webinterface and adds a new line at
    the end of the generated page.
  - Privoxy-Log-Parser:
  - Highlight a few more messages.
  - Add a handler for tagging messages.
  - Properly deal with 'Certificate error' crunches
    Previously the error description was highlighted as 'host'.
  - Log truncated LOG_LEVEL_CLF messages more gracefully
    and note that the statistics will be imprecise.
  - Fixed perldoc typo.
  - Bump version to 0.9.2.
  - Privoxy-Regression-Test:
  - Use http://127.0.0.1:8118/ as default Privoxy address
    unless http_proxy is set through the environment.
  - Add a --privoxy-cgi-prefix option that specifies the prefix
    to use when building URLs that are supposed to reach Privoxy's
    CGI interface. If it's not set, http://p.p/ is used, which is
    supposed to work with the default Privoxy configuration.
    If Privoxy has been built with FEATURE_HTTPS_INSPECTION enabled,
    and if https inspection is activated with the +https-inspection
    action, this option can be used with "https://p.p/" provided the
    system running Privoxy-Regression-Test has been configured to
    trust the certificate used by Privoxy.
    Note that there are currently two tests in the official
    regression-tests.action file that are expected to fail
    when using "https://p.p/" as privoxy-cgi-prefix.
  - Skip the connection-established response in get_status_code()
    when looking for the status code with a CGI prefix
    that starts with https://. We care about the status code
    sent by the impersonated web server.
  - Use --proxy-header when using a CGI prefix with https://
    and a "Host:" header.
  - Allow '|' in tokens and values to allow tag patterns like
    "TAG:^(application|text)/(x-)?javascript$".
  - When get_cgi_page_or_else() fails, include the URL of the
    requested page in the log message.
  - Added a --check-bad-ssl option that can be used to verify that
    Privoxy detects certificate problems when accessing the test
    sites from badssl.com.
  - Bumped version to 0.7.2
  - uagen:
  - Update example output.
  - Recommend the use of the https-inspection action in the documentation.
  - Upgrade a couple of URLs to https://.
  - Add ElectroBSD to the list of operating systems.
  - Bumped generated Firefox version to 78 (ESR).
  - Bumped version to 1.2.2.
  - User documentation:
  - Remove reference to 'How to Report Bugs Effectively'.
    It was only rendered as text without URL in the README anyway
    and there's no indication that users read it ...
  - Let the dok-readme target fix the location embedded into the
    README file. This used to be done by CVS but since the git migration
    it has to be done through other means.
  - Remove 'experimental' warning for client-specific-tag-related directives.
    They seem to work reliably and there is no obvious reason
    why we would change the syntax in the near future.
  - Describe how to check if Privoxy has been built with
    FEATURE_HTTPS_INSPECTION.
  - Add a link to the trusted-cas-file documentation
    that explains how the user can create the file herself.
  - Don't explicitly mention the license for the code coming from
    'Anonymous Coders' and Junkbusters. It's obviously licensed under
    the GNU GPL like the rest of Privoxy or we wouldn't be allowed to
    distribute it.
  - Update the +hide-user-agent example with uagen output.
  - Slightly improve the wording of the ca-key-file documentation.
  - Explicitly mention Windows 10 as supported so search engines and
    users looking for it can find it.
  - Import a bunch of contributors from the ChangeLog.
  - Remove obsolete doc/gpl.html.
  - Upgrade a couple of links to https://.
  - Don't prefer the SourceForge patch tracker over the
    privoxy-devel mailing list. While at it, link to the
    SourceForge patch tracker.
  - Mention http-inspection in the 'my browser warns me about
    unauthenticated content' FAQ entry.
  - Simplify the 'Is there is a license or fee?' FAQ entry.
  - Add another +redirect{} example.
  - Explicitly mention that interested sponsors should include
    the link target in their first mail.
  - Clarify that only Privoxy team members can object to new sponsors
    and link to the list of current team members.
  - Note that sponsor URLs may not contain keyword spam.
  - Garbage collect doc/webserver/images which isn't referenced anymore.
  - Update the method to reach the proxy settings in Firefox.
  - Update proxy_setup.jpg description to refer to Firefox.
  - Regenerate proxy_setup.jpg with a more recent Firefox (78.0).
  - Regenerate files-in-use.jpg without obsolete standard.action
    with modern colors and a slightly better quality.
  - Update URL to the actionsfile tracker.
  - Update a support request URL.
  - Rephrase the 'Can Privoxy run as service' FAQ entry and
    remove an obsolete paragraph.
  - Let the 'Where can I get updated Actions Files?' entry link to
    the gitweb version of default.action.master.
  - Update a link to the default.action file.
  - Update URLs for trackers and mailing lists.
  - Replace CVS reference with git.
  - Mention regression-tests.action in the config file.
  - Explicitly mention in the config file that access to the
    CA key should be limited to Privoxy.
  - List more client-specific-tag examples for inspiration.
  - Add additional headers to the client-header-order example.
  - Note that actions aren't updated after rewrites.
  - Explicitly mention that upgrading from http to https with
    a client-header filter is not supported
  - Note that protocol and host have to be added when rewriting
    the destination host for https-inspected requests.
  - Explicitly mention that the CA key is used to sign certificates.
  - Put openssl command in 'command' tags.
  - The man page has been moved from section 1 to man section 8.
  - Developer manual:
  - Flesh out the build instructions for Debian.
  - Remove the packaging instructions for RPM-based systems.
    They don't work and we don't release RPM packages anymore anyway.
  - Remove the packaging instructions for Solaris.
    They don't work and we don't release Solaris packages anymore anyway.
  - Update the suggested subject for the announce mails.
  - Update upload instructions.
    ftp://upload.sourceforge.net is no longer functional.
  - Remove a couple of package-dependent upload instructions
    that don't actually work.
  - Remove 'cd current' that no longer works.
  - Add regression-tests.action to the list of files that should be installed.
  - Stop claiming that there are text versions of the manuals.
    We stopped building them in 2008 (9ed36a3c5e6f12).
  - Note that the 'webserver' target creates the link needed for the user-manual.
  - Suggest to use the master branch as reference when creating
    the ChangeLog so the steps work when the current branch differs
    from master which is likely as the developer manual
    suggests to use a local branch for development.
  - Add the -s flag to the suggested 'git tag' command.  We prefer signed tags.
  - Mention that merges into 'master' should be avoided.
  - Add git commands that should result in a merge-free history.
  - Mention Privoxy-Regression-Test.
  - Add a section id to reduce link churn.
  - Recommend the dok-tidy target when building docs for the webserver.
  - Add another plug for the privoxy-devel mailing list.
  - Let the intro link the copyright section in the user manual instead
    of giving an incomplete summary of the license status.
  - Clarify that the webserver target uploads to the SourceForge webserver.
  - Mark the documentation for the Mac OS X installers as out of date and
    change the SCM name back to CVS.
  - Fix the location of the installer modules for Mac OS X.
    They are not actually available through git (yet).
  - Don't speak of Privoxy version 3 in the past tense.
  - Update the list of programs required for the release process.
  - Update description of the webserver target which uses ssh, not scp.
  - Remove obsolete reference to config.new.
  - Tests:
  - Add another hide-referrer{conditional-block} test.
  - Add another hide-referrer{conditional-forge} test.
  - Fix a hide-referrer{conditional-forge} test
    that expected an acceptable header to be forged.
  - Fix a hide-referrer{conditional-block} test
    that expected an acceptable Referer to be removed.
  - Explain why the "Set Header = Host: whatever.example.org" test is
    expected to fail when using a CGI prefix that starts with "https://".
  - Explain why a connection-sharing test is known to fail
    when using "https://p.p/" as CGI prefix.
  - Add a link to Privoxy-Regression-Test to regression-tests.action
    in case it isn't packaged.
  - Add regression tests for pcre host patterns.
  - Fixed a regression test that is executed when
    FEATURE_GRACEFUL_TERMINATION is enabled.
  - Privoxy infrastructure:
  - Import a Privoxy logo for the website.
  - Update Tor onion service to HiddenServiceVersion 3.
  - Display the "model" photos in a single row and remove placeholder images.
  - Regenerate homepage with updated sponsor list.
  - Use the '/sponsor' redirect for the link to the sponsor page.
  - Git commit messages are sent to the Privoxy-commits mailing list.</changelog>
  <changelog author="Carsten Ziepke &lt;kieltux@gmail.com&gt;" date="1615032000">- Update to version 3.0.32:
  - Security/Reliability (boo#1183129)
  - ssplit(): Remove an assertion that could be triggered with a
    crafted CGI request.
    Commit 2256d7b4d67. OVE-20210203-0001. CVE-2021-20272
    Reported by: Joshua Rogers (Opera)
  - cgi_send_banner(): Overrule invalid image types. Prevents a
    crash with a crafted CGI request if Privoxy is toggled off.
    Commit e711c505c48. OVE-20210206-0001. CVE-2021-20273
    Reported by: Joshua Rogers (Opera)
  - socks5_connect(): Don't try to send credentials when none are
    configured. Fixes a crash due to a NULL-pointer dereference
    when the socks server misbehaves.
    Commit 85817cc55b9. OVE-20210207-0001. CVE-2021-20274
    Reported by: Joshua Rogers (Opera)
  - chunked_body_is_complete(): Prevent an invalid read of size
    two.
    Commit a912ba7bc9c. OVE-20210205-0001. CVE-2021-20275
    Reported by: Joshua Rogers (Opera)
  - Obsolete pcre: Prevent invalid memory accesses with an invalid
    pattern passed to pcre_compile(). Note that the obsolete pcre
    code is scheduled to be removed before the 3.0.33 release.
    There has been a warning since 2008 already.
    Commit 28512e5b624. OVE-20210222-0001. CVE-2021-20276
    Reported by: Joshua Rogers (Opera)
  - Bug fixes:
  - Properly parse the client-tag-lifetime directive. Previously it was
    not accepted as an obsolete hash value was being used.
    Reported by: Joshua Rogers (Opera)
  - decompress_iob(): Prevent reading of uninitialized data.
    Reported by: Joshua Rogers (Opera).
  - decompress_iob(): Don't advance cur past eod when looking
    for the end of the file name and comment.
  - decompress_iob(): Cast value to unsigned char before shifting.
    Prevents a left-shift of a negative value which is undefined behaviour.
    Reported by: Joshua Rogers (Opera)
  - gif_deanimate(): Confirm that that we have enough data before doing
    any work. Fixes a crash when fuzzing with an empty document.
    Reported by: Joshua Rogers (Opera).
  - buf_copy(): Fail if there's no data to write or nothing to do.
    Prevents undefined behaviour "applying zero offset to null pointer".
    Reported by: Joshua Rogers (Opera)
  - log_error(): Treat LOG_LEVEL_FATAL as fatal even when --stfu is
    being used while fuzzing.
    Reported by: Joshua Rogers (Opera).
  - Respect DESTDIR when considering whether or not to install
    config files with ".new" extension.
  - OpenSSL ssl_store_cert(): Fix two error messages.
  - Fix a couple of format specifiers.
  - Silence compiler warnings when compiling with NDEBUG.
  - fuzz_server_header(): Fix compiler warning.
  - fuzz_client_header(): Fix compiler warning.
  - cgi_send_user_manual(): Also reject requests if the user-manual
    directive specifies a https:// URL. Previously Privoxy would try and
    fail to open a local file.
  - General improvements:
  - Log the TLS version and the the cipher when debug 2 is enabled.
  - ssl_send_certificate_error(): Respect HEAD requests by not sending a body.
  - ssl_send_certificate_error(): End the body with a single new line.
  - serve(): Increase the chances that the host is logged when closing
    a server socket.
  - handle_established_connection(): Add parentheses to clarify an expression
    Suggested by: David Binderman
  - continue_https_chat(): Explicitly unset CSP_FLAG_CLIENT_CONNECTION_KEEP_ALIVE
    if process_encrypted_request() fails. This makes it more obvious that the
    connection will not be reused. Previously serve() relied on
    CSP_FLAG_SERVER_CONTENT_LENGTH_SET and CSP_FLAG_CHUNKED being unset.
    Inspired by a patch from Joshua Rogers (Opera).
  - decompress_iob(): Add periods to a couple of log messages
  - Terminate the body of the HTTP snipplets with a single new line
    instead of "\r\n".
  - configure: Add --with-assertions option and only enable assertions
    when it is used
  - windows build: Use --with-brotli and --with-mbedtls by default and
    enable dynamic error checking.
  - gif_deanimate(): Confirm we've got an image before trying to write it
    Saves a pointless buf_copy() call.
  - OpenSSL ssl_store_cert(): Remove a superfluous space before the serial number.
  - Action file improvements:
  - Disable fast-redirects for .golem.de/
  - Unblock requests to adri*.
  - Block requests for trc*.taboola.com/
  - Disable fast-redirects for .linkedin.com/
  - Filter file improvements:
  - Make the second pcrs job of the img-reorder filter greedy again.
    The ungreedy version broke the img tags on:
    https://bulk.fefe.de/scalability/.
  - Privoxy-Log-Parser:
  - Highlight a few more messages.
  - Clarify the --statistics output. The shown "Reused connections"
    are server connections so name them appropriately.
  - Bump version to 0.9.3.
  - Privoxy-Regression-Test:
  - Add the --check-bad-ssl option to the --help output.
  - Bump version to 0.7.3.
  - Documentation:
  - Add pushing the created tag to the release steps in the developer manual.
  - Clarify that 'debug 32768' should be used in addition to the other debug
    directives when reporting problems.
  - Add a 'Third-party licenses and copyrights' section to the user manual.</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1617969600">- Using pcre is good, however using the pcreposix library is not and will
  lead to undefined behaviour as symbol clashes with glibc.
  (privoxy-nopcreposix.patch)</changelog>
  <changelog author="Michael Du &lt;duyizhaozj321@yahoo.com&gt;" date="1634299200">- Revert privoxy-nopcreposix.patch because of bsc#1184945.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * privoxy.service</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1639137600">- privoxy 3.0.33 (boo#1193584):
  * CVE-2021-44543: Encode the template name to prevent XSS
    (cross-side scripting) when Privoxy is configured to servce
    the user-manual itself
  * CVE-2021-44540: Free memory of compiled pattern spec
    before bailing
  * CVE-2021-44541: Free header memory when failing to get the
    request destination.
  * CVE-2021-44542: Prevent memory leaks when handling errors
  * Disable fast-redirects for a number of domains
  * Update default block lists
  * Many bug fixes and minor enhancements</changelog>
</package>
<package pkgid="9d74891dfda298b99834a81c474cc68cd73be825d3388c3b223faa19a01b0169" name="proftpd" arch="aarch64">
  <version epoch="0" ver="1.3.7e" rel="bp154.3.3.1"/>
  <changelog author="bwiedemann@suse.com" date="1500638400">- Sort SHARED_MODS list to fix build compare (boo#1041090)</changelog>
  <changelog author="chris@computersalat.de" date="1531224000">- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1531310400">- update to 1.3.6
  * Support for using Redis for caching, logging; see the doc/howto/Redis.html
    documentation.
  * Fixed mod_sql_postgres SSL support (Issue #415).
  * Support building against LibreSSL instead of OpenSSL (Issue #361).
  * Better support on AIX for login restraictions (Bug #4285).
  * TimeoutLogin (and other timeouts) were not working properly for SFTP
    connections (Bug#4299).
  * Handling of the SIGILL and SIGINT signals, by the daemon process, now causes
    the child processes to be terminated as well (Issue #461).
  * RPM .spec file naming changed to conform to Fedora guidelines.
  * Fix for "AllowChrootSymlinks off" checking each component for symlinks
    (CVE-2017-7418).
  - New Modules:
  * mod_redis, mod_tls_redis, mod_wrap2_redis
    With Redis now supported as a caching mechanism, similar to Memcache,
    there are now Redis-using modules: mod_redis (for configuring the Redis
    connection information), mod_tls_redis (for caching SSL sessions and
    OCSP information using Redis), and mod_wrap2_redis (for using ACLs stored
    in Redis).
  - Changed Modules:
  * mod_ban
    The mod_ban module's BanCache directive can now use Redis-based caching;
    see doc/contrib/mod_ban.html#BanCache.
  - New Configuration Directives
  * SQLPasswordArgon2, SQLPasswordScrypt
    The key lengths for Argon2 and Scrypt-based passwords are now configurable
    via these new directives; previously, the key length had been hardcoded
    to be 32 bytes, which is not interoperable with all other implementations
    (Issue #454).
  - Changed Configuration Directives
  * AllowChrootSymlinks
    When "AllowChrootSymlinks off" was used, only the last portion of the
    DefaultRoot path would be checked to see if it was a symlink.  Now,
    each component of the DefaultRoot path will be checked to see if it is
    a symlink when "AllowChrootSymlinks off" is used.
  * Include
    The Include directive can now be used within a &lt;Limit&gt; section, e.g.:
    &lt;Limit LOGIN&gt;
    Include /path/to/allowed.txt
    DenyAll
    &lt;/Limit&gt;
  - API Changes
  * A new JSON API has been added, for use by third-party modules.
- remove obsolete proftpd_include-in-limit-section.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
</package>
<package pkgid="7fcc7780d7110f24379a2f26b94a0e673e86ac00cd5e7a4a745a6e9da00fcaaa" name="proftpd" arch="i586">
  <version epoch="0" ver="1.3.7e" rel="bp154.3.3.1"/>
  <changelog author="bwiedemann@suse.com" date="1500638400">- Sort SHARED_MODS list to fix build compare (boo#1041090)</changelog>
  <changelog author="chris@computersalat.de" date="1531224000">- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1531310400">- update to 1.3.6
  * Support for using Redis for caching, logging; see the doc/howto/Redis.html
    documentation.
  * Fixed mod_sql_postgres SSL support (Issue #415).
  * Support building against LibreSSL instead of OpenSSL (Issue #361).
  * Better support on AIX for login restraictions (Bug #4285).
  * TimeoutLogin (and other timeouts) were not working properly for SFTP
    connections (Bug#4299).
  * Handling of the SIGILL and SIGINT signals, by the daemon process, now causes
    the child processes to be terminated as well (Issue #461).
  * RPM .spec file naming changed to conform to Fedora guidelines.
  * Fix for "AllowChrootSymlinks off" checking each component for symlinks
    (CVE-2017-7418).
  - New Modules:
  * mod_redis, mod_tls_redis, mod_wrap2_redis
    With Redis now supported as a caching mechanism, similar to Memcache,
    there are now Redis-using modules: mod_redis (for configuring the Redis
    connection information), mod_tls_redis (for caching SSL sessions and
    OCSP information using Redis), and mod_wrap2_redis (for using ACLs stored
    in Redis).
  - Changed Modules:
  * mod_ban
    The mod_ban module's BanCache directive can now use Redis-based caching;
    see doc/contrib/mod_ban.html#BanCache.
  - New Configuration Directives
  * SQLPasswordArgon2, SQLPasswordScrypt
    The key lengths for Argon2 and Scrypt-based passwords are now configurable
    via these new directives; previously, the key length had been hardcoded
    to be 32 bytes, which is not interoperable with all other implementations
    (Issue #454).
  - Changed Configuration Directives
  * AllowChrootSymlinks
    When "AllowChrootSymlinks off" was used, only the last portion of the
    DefaultRoot path would be checked to see if it was a symlink.  Now,
    each component of the DefaultRoot path will be checked to see if it is
    a symlink when "AllowChrootSymlinks off" is used.
  * Include
    The Include directive can now be used within a &lt;Limit&gt; section, e.g.:
    &lt;Limit LOGIN&gt;
    Include /path/to/allowed.txt
    DenyAll
    &lt;/Limit&gt;
  - API Changes
  * A new JSON API has been added, for use by third-party modules.
- remove obsolete proftpd_include-in-limit-section.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
</package>
<package pkgid="63c41049049668c44ae500f57de5601afab8c7100442be2170dd9ccda99517bb" name="proftpd" arch="ppc64le">
  <version epoch="0" ver="1.3.7e" rel="bp154.3.3.1"/>
  <changelog author="bwiedemann@suse.com" date="1500638400">- Sort SHARED_MODS list to fix build compare (boo#1041090)</changelog>
  <changelog author="chris@computersalat.de" date="1531224000">- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1531310400">- update to 1.3.6
  * Support for using Redis for caching, logging; see the doc/howto/Redis.html
    documentation.
  * Fixed mod_sql_postgres SSL support (Issue #415).
  * Support building against LibreSSL instead of OpenSSL (Issue #361).
  * Better support on AIX for login restraictions (Bug #4285).
  * TimeoutLogin (and other timeouts) were not working properly for SFTP
    connections (Bug#4299).
  * Handling of the SIGILL and SIGINT signals, by the daemon process, now causes
    the child processes to be terminated as well (Issue #461).
  * RPM .spec file naming changed to conform to Fedora guidelines.
  * Fix for "AllowChrootSymlinks off" checking each component for symlinks
    (CVE-2017-7418).
  - New Modules:
  * mod_redis, mod_tls_redis, mod_wrap2_redis
    With Redis now supported as a caching mechanism, similar to Memcache,
    there are now Redis-using modules: mod_redis (for configuring the Redis
    connection information), mod_tls_redis (for caching SSL sessions and
    OCSP information using Redis), and mod_wrap2_redis (for using ACLs stored
    in Redis).
  - Changed Modules:
  * mod_ban
    The mod_ban module's BanCache directive can now use Redis-based caching;
    see doc/contrib/mod_ban.html#BanCache.
  - New Configuration Directives
  * SQLPasswordArgon2, SQLPasswordScrypt
    The key lengths for Argon2 and Scrypt-based passwords are now configurable
    via these new directives; previously, the key length had been hardcoded
    to be 32 bytes, which is not interoperable with all other implementations
    (Issue #454).
  - Changed Configuration Directives
  * AllowChrootSymlinks
    When "AllowChrootSymlinks off" was used, only the last portion of the
    DefaultRoot path would be checked to see if it was a symlink.  Now,
    each component of the DefaultRoot path will be checked to see if it is
    a symlink when "AllowChrootSymlinks off" is used.
  * Include
    The Include directive can now be used within a &lt;Limit&gt; section, e.g.:
    &lt;Limit LOGIN&gt;
    Include /path/to/allowed.txt
    DenyAll
    &lt;/Limit&gt;
  - API Changes
  * A new JSON API has been added, for use by third-party modules.
- remove obsolete proftpd_include-in-limit-section.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
</package>
<package pkgid="7284109a477d6161a352c303ac98b44131a2c45d8e9bcca38535fd393805e790" name="proftpd" arch="s390x">
  <version epoch="0" ver="1.3.7e" rel="bp154.3.3.1"/>
  <changelog author="bwiedemann@suse.com" date="1500638400">- Sort SHARED_MODS list to fix build compare (boo#1041090)</changelog>
  <changelog author="chris@computersalat.de" date="1531224000">- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1531310400">- update to 1.3.6
  * Support for using Redis for caching, logging; see the doc/howto/Redis.html
    documentation.
  * Fixed mod_sql_postgres SSL support (Issue #415).
  * Support building against LibreSSL instead of OpenSSL (Issue #361).
  * Better support on AIX for login restraictions (Bug #4285).
  * TimeoutLogin (and other timeouts) were not working properly for SFTP
    connections (Bug#4299).
  * Handling of the SIGILL and SIGINT signals, by the daemon process, now causes
    the child processes to be terminated as well (Issue #461).
  * RPM .spec file naming changed to conform to Fedora guidelines.
  * Fix for "AllowChrootSymlinks off" checking each component for symlinks
    (CVE-2017-7418).
  - New Modules:
  * mod_redis, mod_tls_redis, mod_wrap2_redis
    With Redis now supported as a caching mechanism, similar to Memcache,
    there are now Redis-using modules: mod_redis (for configuring the Redis
    connection information), mod_tls_redis (for caching SSL sessions and
    OCSP information using Redis), and mod_wrap2_redis (for using ACLs stored
    in Redis).
  - Changed Modules:
  * mod_ban
    The mod_ban module's BanCache directive can now use Redis-based caching;
    see doc/contrib/mod_ban.html#BanCache.
  - New Configuration Directives
  * SQLPasswordArgon2, SQLPasswordScrypt
    The key lengths for Argon2 and Scrypt-based passwords are now configurable
    via these new directives; previously, the key length had been hardcoded
    to be 32 bytes, which is not interoperable with all other implementations
    (Issue #454).
  - Changed Configuration Directives
  * AllowChrootSymlinks
    When "AllowChrootSymlinks off" was used, only the last portion of the
    DefaultRoot path would be checked to see if it was a symlink.  Now,
    each component of the DefaultRoot path will be checked to see if it is
    a symlink when "AllowChrootSymlinks off" is used.
  * Include
    The Include directive can now be used within a &lt;Limit&gt; section, e.g.:
    &lt;Limit LOGIN&gt;
    Include /path/to/allowed.txt
    DenyAll
    &lt;/Limit&gt;
  - API Changes
  * A new JSON API has been added, for use by third-party modules.
- remove obsolete proftpd_include-in-limit-section.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
</package>
<package pkgid="8ef554becd9d2dd44fb4c6d1ba855c805e1c12eb98223659e6fbd5ba11a6bf09" name="proftpd" arch="src">
  <version epoch="0" ver="1.3.7e" rel="bp154.3.3.1"/>
  <changelog author="bwiedemann@suse.com" date="1500638400">- Sort SHARED_MODS list to fix build compare (boo#1041090)</changelog>
  <changelog author="chris@computersalat.de" date="1531224000">- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1531310400">- update to 1.3.6
  * Support for using Redis for caching, logging; see the doc/howto/Redis.html
    documentation.
  * Fixed mod_sql_postgres SSL support (Issue #415).
  * Support building against LibreSSL instead of OpenSSL (Issue #361).
  * Better support on AIX for login restraictions (Bug #4285).
  * TimeoutLogin (and other timeouts) were not working properly for SFTP
    connections (Bug#4299).
  * Handling of the SIGILL and SIGINT signals, by the daemon process, now causes
    the child processes to be terminated as well (Issue #461).
  * RPM .spec file naming changed to conform to Fedora guidelines.
  * Fix for "AllowChrootSymlinks off" checking each component for symlinks
    (CVE-2017-7418).
  - New Modules:
  * mod_redis, mod_tls_redis, mod_wrap2_redis
    With Redis now supported as a caching mechanism, similar to Memcache,
    there are now Redis-using modules: mod_redis (for configuring the Redis
    connection information), mod_tls_redis (for caching SSL sessions and
    OCSP information using Redis), and mod_wrap2_redis (for using ACLs stored
    in Redis).
  - Changed Modules:
  * mod_ban
    The mod_ban module's BanCache directive can now use Redis-based caching;
    see doc/contrib/mod_ban.html#BanCache.
  - New Configuration Directives
  * SQLPasswordArgon2, SQLPasswordScrypt
    The key lengths for Argon2 and Scrypt-based passwords are now configurable
    via these new directives; previously, the key length had been hardcoded
    to be 32 bytes, which is not interoperable with all other implementations
    (Issue #454).
  - Changed Configuration Directives
  * AllowChrootSymlinks
    When "AllowChrootSymlinks off" was used, only the last portion of the
    DefaultRoot path would be checked to see if it was a symlink.  Now,
    each component of the DefaultRoot path will be checked to see if it is
    a symlink when "AllowChrootSymlinks off" is used.
  * Include
    The Include directive can now be used within a &lt;Limit&gt; section, e.g.:
    &lt;Limit LOGIN&gt;
    Include /path/to/allowed.txt
    DenyAll
    &lt;/Limit&gt;
  - API Changes
  * A new JSON API has been added, for use by third-party modules.
- remove obsolete proftpd_include-in-limit-section.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
</package>
<package pkgid="6a965d8ef9387879decf1e9d11cc6d0f3ead24c3ce2819dafc9734707eb15e2e" name="proftpd" arch="x86_64">
  <version epoch="0" ver="1.3.7e" rel="bp154.3.3.1"/>
  <changelog author="bwiedemann@suse.com" date="1500638400">- Sort SHARED_MODS list to fix build compare (boo#1041090)</changelog>
  <changelog author="chris@computersalat.de" date="1531224000">- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1531310400">- update to 1.3.6
  * Support for using Redis for caching, logging; see the doc/howto/Redis.html
    documentation.
  * Fixed mod_sql_postgres SSL support (Issue #415).
  * Support building against LibreSSL instead of OpenSSL (Issue #361).
  * Better support on AIX for login restraictions (Bug #4285).
  * TimeoutLogin (and other timeouts) were not working properly for SFTP
    connections (Bug#4299).
  * Handling of the SIGILL and SIGINT signals, by the daemon process, now causes
    the child processes to be terminated as well (Issue #461).
  * RPM .spec file naming changed to conform to Fedora guidelines.
  * Fix for "AllowChrootSymlinks off" checking each component for symlinks
    (CVE-2017-7418).
  - New Modules:
  * mod_redis, mod_tls_redis, mod_wrap2_redis
    With Redis now supported as a caching mechanism, similar to Memcache,
    there are now Redis-using modules: mod_redis (for configuring the Redis
    connection information), mod_tls_redis (for caching SSL sessions and
    OCSP information using Redis), and mod_wrap2_redis (for using ACLs stored
    in Redis).
  - Changed Modules:
  * mod_ban
    The mod_ban module's BanCache directive can now use Redis-based caching;
    see doc/contrib/mod_ban.html#BanCache.
  - New Configuration Directives
  * SQLPasswordArgon2, SQLPasswordScrypt
    The key lengths for Argon2 and Scrypt-based passwords are now configurable
    via these new directives; previously, the key length had been hardcoded
    to be 32 bytes, which is not interoperable with all other implementations
    (Issue #454).
  - Changed Configuration Directives
  * AllowChrootSymlinks
    When "AllowChrootSymlinks off" was used, only the last portion of the
    DefaultRoot path would be checked to see if it was a symlink.  Now,
    each component of the DefaultRoot path will be checked to see if it is
    a symlink when "AllowChrootSymlinks off" is used.
  * Include
    The Include directive can now be used within a &lt;Limit&gt; section, e.g.:
    &lt;Limit LOGIN&gt;
    Include /path/to/allowed.txt
    DenyAll
    &lt;/Limit&gt;
  - API Changes
  * A new JSON API has been added, for use by third-party modules.
- remove obsolete proftpd_include-in-limit-section.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
</package>
<package pkgid="60678a6149c1a7b77f38c8ba51a2ff693a9ef870747c2e6e83fc4c78cd22bab8" name="proftpd" arch="aarch64">
  <version epoch="0" ver="1.3.7e" rel="bp154.3.6.1"/>
  <changelog author="chris@computersalat.de" date="1531224000">- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1531310400">- update to 1.3.6
  * Support for using Redis for caching, logging; see the doc/howto/Redis.html
    documentation.
  * Fixed mod_sql_postgres SSL support (Issue #415).
  * Support building against LibreSSL instead of OpenSSL (Issue #361).
  * Better support on AIX for login restraictions (Bug #4285).
  * TimeoutLogin (and other timeouts) were not working properly for SFTP
    connections (Bug#4299).
  * Handling of the SIGILL and SIGINT signals, by the daemon process, now causes
    the child processes to be terminated as well (Issue #461).
  * RPM .spec file naming changed to conform to Fedora guidelines.
  * Fix for "AllowChrootSymlinks off" checking each component for symlinks
    (CVE-2017-7418).
  - New Modules:
  * mod_redis, mod_tls_redis, mod_wrap2_redis
    With Redis now supported as a caching mechanism, similar to Memcache,
    there are now Redis-using modules: mod_redis (for configuring the Redis
    connection information), mod_tls_redis (for caching SSL sessions and
    OCSP information using Redis), and mod_wrap2_redis (for using ACLs stored
    in Redis).
  - Changed Modules:
  * mod_ban
    The mod_ban module's BanCache directive can now use Redis-based caching;
    see doc/contrib/mod_ban.html#BanCache.
  - New Configuration Directives
  * SQLPasswordArgon2, SQLPasswordScrypt
    The key lengths for Argon2 and Scrypt-based passwords are now configurable
    via these new directives; previously, the key length had been hardcoded
    to be 32 bytes, which is not interoperable with all other implementations
    (Issue #454).
  - Changed Configuration Directives
  * AllowChrootSymlinks
    When "AllowChrootSymlinks off" was used, only the last portion of the
    DefaultRoot path would be checked to see if it was a symlink.  Now,
    each component of the DefaultRoot path will be checked to see if it is
    a symlink when "AllowChrootSymlinks off" is used.
  * Include
    The Include directive can now be used within a &lt;Limit&gt; section, e.g.:
    &lt;Limit LOGIN&gt;
    Include /path/to/allowed.txt
    DenyAll
    &lt;/Limit&gt;
  - API Changes
  * A new JSON API has been added, for use by third-party modules.
- remove obsolete proftpd_include-in-limit-section.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="chris@computersalat.de" date="1662033600">- Update proftpd-basic.conf.patch
  * remove obsolete config option, LoginPasswordPrompt
- rework proftpd-dist.patch</changelog>
</package>
<package pkgid="bb0e63914da761e2e09a94fca101f35b1d2e582e1e87809c7b6bd5dd0c077225" name="proftpd" arch="i586">
  <version epoch="0" ver="1.3.7e" rel="bp154.3.6.1"/>
  <changelog author="chris@computersalat.de" date="1531224000">- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1531310400">- update to 1.3.6
  * Support for using Redis for caching, logging; see the doc/howto/Redis.html
    documentation.
  * Fixed mod_sql_postgres SSL support (Issue #415).
  * Support building against LibreSSL instead of OpenSSL (Issue #361).
  * Better support on AIX for login restraictions (Bug #4285).
  * TimeoutLogin (and other timeouts) were not working properly for SFTP
    connections (Bug#4299).
  * Handling of the SIGILL and SIGINT signals, by the daemon process, now causes
    the child processes to be terminated as well (Issue #461).
  * RPM .spec file naming changed to conform to Fedora guidelines.
  * Fix for "AllowChrootSymlinks off" checking each component for symlinks
    (CVE-2017-7418).
  - New Modules:
  * mod_redis, mod_tls_redis, mod_wrap2_redis
    With Redis now supported as a caching mechanism, similar to Memcache,
    there are now Redis-using modules: mod_redis (for configuring the Redis
    connection information), mod_tls_redis (for caching SSL sessions and
    OCSP information using Redis), and mod_wrap2_redis (for using ACLs stored
    in Redis).
  - Changed Modules:
  * mod_ban
    The mod_ban module's BanCache directive can now use Redis-based caching;
    see doc/contrib/mod_ban.html#BanCache.
  - New Configuration Directives
  * SQLPasswordArgon2, SQLPasswordScrypt
    The key lengths for Argon2 and Scrypt-based passwords are now configurable
    via these new directives; previously, the key length had been hardcoded
    to be 32 bytes, which is not interoperable with all other implementations
    (Issue #454).
  - Changed Configuration Directives
  * AllowChrootSymlinks
    When "AllowChrootSymlinks off" was used, only the last portion of the
    DefaultRoot path would be checked to see if it was a symlink.  Now,
    each component of the DefaultRoot path will be checked to see if it is
    a symlink when "AllowChrootSymlinks off" is used.
  * Include
    The Include directive can now be used within a &lt;Limit&gt; section, e.g.:
    &lt;Limit LOGIN&gt;
    Include /path/to/allowed.txt
    DenyAll
    &lt;/Limit&gt;
  - API Changes
  * A new JSON API has been added, for use by third-party modules.
- remove obsolete proftpd_include-in-limit-section.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="chris@computersalat.de" date="1662033600">- Update proftpd-basic.conf.patch
  * remove obsolete config option, LoginPasswordPrompt
- rework proftpd-dist.patch</changelog>
</package>
<package pkgid="0af3eedcb4c1a33cdab17eb566e267ca3e2e9cc073a8d7433f60e8fd3564dff1" name="proftpd" arch="ppc64le">
  <version epoch="0" ver="1.3.7e" rel="bp154.3.6.1"/>
  <changelog author="chris@computersalat.de" date="1531224000">- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1531310400">- update to 1.3.6
  * Support for using Redis for caching, logging; see the doc/howto/Redis.html
    documentation.
  * Fixed mod_sql_postgres SSL support (Issue #415).
  * Support building against LibreSSL instead of OpenSSL (Issue #361).
  * Better support on AIX for login restraictions (Bug #4285).
  * TimeoutLogin (and other timeouts) were not working properly for SFTP
    connections (Bug#4299).
  * Handling of the SIGILL and SIGINT signals, by the daemon process, now causes
    the child processes to be terminated as well (Issue #461).
  * RPM .spec file naming changed to conform to Fedora guidelines.
  * Fix for "AllowChrootSymlinks off" checking each component for symlinks
    (CVE-2017-7418).
  - New Modules:
  * mod_redis, mod_tls_redis, mod_wrap2_redis
    With Redis now supported as a caching mechanism, similar to Memcache,
    there are now Redis-using modules: mod_redis (for configuring the Redis
    connection information), mod_tls_redis (for caching SSL sessions and
    OCSP information using Redis), and mod_wrap2_redis (for using ACLs stored
    in Redis).
  - Changed Modules:
  * mod_ban
    The mod_ban module's BanCache directive can now use Redis-based caching;
    see doc/contrib/mod_ban.html#BanCache.
  - New Configuration Directives
  * SQLPasswordArgon2, SQLPasswordScrypt
    The key lengths for Argon2 and Scrypt-based passwords are now configurable
    via these new directives; previously, the key length had been hardcoded
    to be 32 bytes, which is not interoperable with all other implementations
    (Issue #454).
  - Changed Configuration Directives
  * AllowChrootSymlinks
    When "AllowChrootSymlinks off" was used, only the last portion of the
    DefaultRoot path would be checked to see if it was a symlink.  Now,
    each component of the DefaultRoot path will be checked to see if it is
    a symlink when "AllowChrootSymlinks off" is used.
  * Include
    The Include directive can now be used within a &lt;Limit&gt; section, e.g.:
    &lt;Limit LOGIN&gt;
    Include /path/to/allowed.txt
    DenyAll
    &lt;/Limit&gt;
  - API Changes
  * A new JSON API has been added, for use by third-party modules.
- remove obsolete proftpd_include-in-limit-section.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="chris@computersalat.de" date="1662033600">- Update proftpd-basic.conf.patch
  * remove obsolete config option, LoginPasswordPrompt
- rework proftpd-dist.patch</changelog>
</package>
<package pkgid="7b8b06708e99de9defbcc5a96c0c70ebae16093911c53fab79928321b587ce1f" name="proftpd" arch="s390x">
  <version epoch="0" ver="1.3.7e" rel="bp154.3.6.1"/>
  <changelog author="chris@computersalat.de" date="1531224000">- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1531310400">- update to 1.3.6
  * Support for using Redis for caching, logging; see the doc/howto/Redis.html
    documentation.
  * Fixed mod_sql_postgres SSL support (Issue #415).
  * Support building against LibreSSL instead of OpenSSL (Issue #361).
  * Better support on AIX for login restraictions (Bug #4285).
  * TimeoutLogin (and other timeouts) were not working properly for SFTP
    connections (Bug#4299).
  * Handling of the SIGILL and SIGINT signals, by the daemon process, now causes
    the child processes to be terminated as well (Issue #461).
  * RPM .spec file naming changed to conform to Fedora guidelines.
  * Fix for "AllowChrootSymlinks off" checking each component for symlinks
    (CVE-2017-7418).
  - New Modules:
  * mod_redis, mod_tls_redis, mod_wrap2_redis
    With Redis now supported as a caching mechanism, similar to Memcache,
    there are now Redis-using modules: mod_redis (for configuring the Redis
    connection information), mod_tls_redis (for caching SSL sessions and
    OCSP information using Redis), and mod_wrap2_redis (for using ACLs stored
    in Redis).
  - Changed Modules:
  * mod_ban
    The mod_ban module's BanCache directive can now use Redis-based caching;
    see doc/contrib/mod_ban.html#BanCache.
  - New Configuration Directives
  * SQLPasswordArgon2, SQLPasswordScrypt
    The key lengths for Argon2 and Scrypt-based passwords are now configurable
    via these new directives; previously, the key length had been hardcoded
    to be 32 bytes, which is not interoperable with all other implementations
    (Issue #454).
  - Changed Configuration Directives
  * AllowChrootSymlinks
    When "AllowChrootSymlinks off" was used, only the last portion of the
    DefaultRoot path would be checked to see if it was a symlink.  Now,
    each component of the DefaultRoot path will be checked to see if it is
    a symlink when "AllowChrootSymlinks off" is used.
  * Include
    The Include directive can now be used within a &lt;Limit&gt; section, e.g.:
    &lt;Limit LOGIN&gt;
    Include /path/to/allowed.txt
    DenyAll
    &lt;/Limit&gt;
  - API Changes
  * A new JSON API has been added, for use by third-party modules.
- remove obsolete proftpd_include-in-limit-section.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="chris@computersalat.de" date="1662033600">- Update proftpd-basic.conf.patch
  * remove obsolete config option, LoginPasswordPrompt
- rework proftpd-dist.patch</changelog>
</package>
<package pkgid="7e8ccca6f4ae217bb1de7eea9584cbe448b16e280ef07b4a37ad080e91dad507" name="proftpd" arch="src">
  <version epoch="0" ver="1.3.7e" rel="bp154.3.6.1"/>
  <changelog author="chris@computersalat.de" date="1531224000">- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1531310400">- update to 1.3.6
  * Support for using Redis for caching, logging; see the doc/howto/Redis.html
    documentation.
  * Fixed mod_sql_postgres SSL support (Issue #415).
  * Support building against LibreSSL instead of OpenSSL (Issue #361).
  * Better support on AIX for login restraictions (Bug #4285).
  * TimeoutLogin (and other timeouts) were not working properly for SFTP
    connections (Bug#4299).
  * Handling of the SIGILL and SIGINT signals, by the daemon process, now causes
    the child processes to be terminated as well (Issue #461).
  * RPM .spec file naming changed to conform to Fedora guidelines.
  * Fix for "AllowChrootSymlinks off" checking each component for symlinks
    (CVE-2017-7418).
  - New Modules:
  * mod_redis, mod_tls_redis, mod_wrap2_redis
    With Redis now supported as a caching mechanism, similar to Memcache,
    there are now Redis-using modules: mod_redis (for configuring the Redis
    connection information), mod_tls_redis (for caching SSL sessions and
    OCSP information using Redis), and mod_wrap2_redis (for using ACLs stored
    in Redis).
  - Changed Modules:
  * mod_ban
    The mod_ban module's BanCache directive can now use Redis-based caching;
    see doc/contrib/mod_ban.html#BanCache.
  - New Configuration Directives
  * SQLPasswordArgon2, SQLPasswordScrypt
    The key lengths for Argon2 and Scrypt-based passwords are now configurable
    via these new directives; previously, the key length had been hardcoded
    to be 32 bytes, which is not interoperable with all other implementations
    (Issue #454).
  - Changed Configuration Directives
  * AllowChrootSymlinks
    When "AllowChrootSymlinks off" was used, only the last portion of the
    DefaultRoot path would be checked to see if it was a symlink.  Now,
    each component of the DefaultRoot path will be checked to see if it is
    a symlink when "AllowChrootSymlinks off" is used.
  * Include
    The Include directive can now be used within a &lt;Limit&gt; section, e.g.:
    &lt;Limit LOGIN&gt;
    Include /path/to/allowed.txt
    DenyAll
    &lt;/Limit&gt;
  - API Changes
  * A new JSON API has been added, for use by third-party modules.
- remove obsolete proftpd_include-in-limit-section.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="chris@computersalat.de" date="1662033600">- Update proftpd-basic.conf.patch
  * remove obsolete config option, LoginPasswordPrompt
- rework proftpd-dist.patch</changelog>
</package>
<package pkgid="f24e802d421b5f32709230e1f11ecf9fe856a7e042730b3ba3f80f320172cfba" name="proftpd" arch="x86_64">
  <version epoch="0" ver="1.3.7e" rel="bp154.3.6.1"/>
  <changelog author="chris@computersalat.de" date="1531224000">- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1531310400">- update to 1.3.6
  * Support for using Redis for caching, logging; see the doc/howto/Redis.html
    documentation.
  * Fixed mod_sql_postgres SSL support (Issue #415).
  * Support building against LibreSSL instead of OpenSSL (Issue #361).
  * Better support on AIX for login restraictions (Bug #4285).
  * TimeoutLogin (and other timeouts) were not working properly for SFTP
    connections (Bug#4299).
  * Handling of the SIGILL and SIGINT signals, by the daemon process, now causes
    the child processes to be terminated as well (Issue #461).
  * RPM .spec file naming changed to conform to Fedora guidelines.
  * Fix for "AllowChrootSymlinks off" checking each component for symlinks
    (CVE-2017-7418).
  - New Modules:
  * mod_redis, mod_tls_redis, mod_wrap2_redis
    With Redis now supported as a caching mechanism, similar to Memcache,
    there are now Redis-using modules: mod_redis (for configuring the Redis
    connection information), mod_tls_redis (for caching SSL sessions and
    OCSP information using Redis), and mod_wrap2_redis (for using ACLs stored
    in Redis).
  - Changed Modules:
  * mod_ban
    The mod_ban module's BanCache directive can now use Redis-based caching;
    see doc/contrib/mod_ban.html#BanCache.
  - New Configuration Directives
  * SQLPasswordArgon2, SQLPasswordScrypt
    The key lengths for Argon2 and Scrypt-based passwords are now configurable
    via these new directives; previously, the key length had been hardcoded
    to be 32 bytes, which is not interoperable with all other implementations
    (Issue #454).
  - Changed Configuration Directives
  * AllowChrootSymlinks
    When "AllowChrootSymlinks off" was used, only the last portion of the
    DefaultRoot path would be checked to see if it was a symlink.  Now,
    each component of the DefaultRoot path will be checked to see if it is
    a symlink when "AllowChrootSymlinks off" is used.
  * Include
    The Include directive can now be used within a &lt;Limit&gt; section, e.g.:
    &lt;Limit LOGIN&gt;
    Include /path/to/allowed.txt
    DenyAll
    &lt;/Limit&gt;
  - API Changes
  * A new JSON API has been added, for use by third-party modules.
- remove obsolete proftpd_include-in-limit-section.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="chris@computersalat.de" date="1662033600">- Update proftpd-basic.conf.patch
  * remove obsolete config option, LoginPasswordPrompt
- rework proftpd-dist.patch</changelog>
</package>
<package pkgid="9f28888266cd9e55ec477f5f4c008f39e3e190d9a234c87aa0bfd4de01d0cad1" name="proftpd" arch="aarch64">
  <version epoch="0" ver="1.3.7f" rel="bp154.3.9.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="chris@computersalat.de" date="1662033600">- Update proftpd-basic.conf.patch
  * remove obsolete config option, LoginPasswordPrompt
- rework proftpd-dist.patch</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1673870400">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="chris@computersalat.de" date="1674648000">- 1.3.7f - Released 04-Dec-2022
  * Issue 1533 - mod_tls module unexpectedly allows TLS handshake after
    authentication in some configurations.
  * Bug 4491 - unable to verify signed data: signature type 'rsa-sha2-512' does
    not match publickey algorithm 'ssh-rsa'.</changelog>
</package>
<package pkgid="4939290065f7540a9a5aa5b8af52bcb5134a3ef4e8b3209ea6e1997b4079ea6e" name="proftpd" arch="i586">
  <version epoch="0" ver="1.3.7f" rel="bp154.3.9.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="chris@computersalat.de" date="1662033600">- Update proftpd-basic.conf.patch
  * remove obsolete config option, LoginPasswordPrompt
- rework proftpd-dist.patch</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1673870400">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="chris@computersalat.de" date="1674648000">- 1.3.7f - Released 04-Dec-2022
  * Issue 1533 - mod_tls module unexpectedly allows TLS handshake after
    authentication in some configurations.
  * Bug 4491 - unable to verify signed data: signature type 'rsa-sha2-512' does
    not match publickey algorithm 'ssh-rsa'.</changelog>
</package>
<package pkgid="b5072b7e87dbdf29c47150b40768b45c61792fbd992726b78feaefde146f912a" name="proftpd" arch="ppc64le">
  <version epoch="0" ver="1.3.7f" rel="bp154.3.9.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="chris@computersalat.de" date="1662033600">- Update proftpd-basic.conf.patch
  * remove obsolete config option, LoginPasswordPrompt
- rework proftpd-dist.patch</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1673870400">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="chris@computersalat.de" date="1674648000">- 1.3.7f - Released 04-Dec-2022
  * Issue 1533 - mod_tls module unexpectedly allows TLS handshake after
    authentication in some configurations.
  * Bug 4491 - unable to verify signed data: signature type 'rsa-sha2-512' does
    not match publickey algorithm 'ssh-rsa'.</changelog>
</package>
<package pkgid="da75ad9ca8d8902621799c31005b381d9fddc56c711233e7df033714a2357eef" name="proftpd" arch="s390x">
  <version epoch="0" ver="1.3.7f" rel="bp154.3.9.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="chris@computersalat.de" date="1662033600">- Update proftpd-basic.conf.patch
  * remove obsolete config option, LoginPasswordPrompt
- rework proftpd-dist.patch</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1673870400">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="chris@computersalat.de" date="1674648000">- 1.3.7f - Released 04-Dec-2022
  * Issue 1533 - mod_tls module unexpectedly allows TLS handshake after
    authentication in some configurations.
  * Bug 4491 - unable to verify signed data: signature type 'rsa-sha2-512' does
    not match publickey algorithm 'ssh-rsa'.</changelog>
</package>
<package pkgid="9efc4c9f2f3a1b543a30ba018b6ce52aa3034625ef7b3574ba1f84063ecbcf29" name="proftpd" arch="src">
  <version epoch="0" ver="1.3.7f" rel="bp154.3.9.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="chris@computersalat.de" date="1662033600">- Update proftpd-basic.conf.patch
  * remove obsolete config option, LoginPasswordPrompt
- rework proftpd-dist.patch</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1673870400">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="chris@computersalat.de" date="1674648000">- 1.3.7f - Released 04-Dec-2022
  * Issue 1533 - mod_tls module unexpectedly allows TLS handshake after
    authentication in some configurations.
  * Bug 4491 - unable to verify signed data: signature type 'rsa-sha2-512' does
    not match publickey algorithm 'ssh-rsa'.</changelog>
</package>
<package pkgid="aa145c5c1cfa2f52bcde99135d04038ad30c778f0ae4c9d35e26303bea25779f" name="proftpd" arch="x86_64">
  <version epoch="0" ver="1.3.7f" rel="bp154.3.9.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="chris@computersalat.de" date="1662033600">- Update proftpd-basic.conf.patch
  * remove obsolete config option, LoginPasswordPrompt
- rework proftpd-dist.patch</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1673870400">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="chris@computersalat.de" date="1674648000">- 1.3.7f - Released 04-Dec-2022
  * Issue 1533 - mod_tls module unexpectedly allows TLS handshake after
    authentication in some configurations.
  * Bug 4491 - unable to verify signed data: signature type 'rsa-sha2-512' does
    not match publickey algorithm 'ssh-rsa'.</changelog>
</package>
<package pkgid="ef22fe530b0b91b687b590c4e8bbb471d2d741a56f6aa3492b0a7fa3a44aec59" name="proftpd-devel" arch="aarch64">
  <version epoch="0" ver="1.3.7e" rel="bp154.3.3.1"/>
  <changelog author="bwiedemann@suse.com" date="1500638400">- Sort SHARED_MODS list to fix build compare (boo#1041090)</changelog>
  <changelog author="chris@computersalat.de" date="1531224000">- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1531310400">- update to 1.3.6
  * Support for using Redis for caching, logging; see the doc/howto/Redis.html
    documentation.
  * Fixed mod_sql_postgres SSL support (Issue #415).
  * Support building against LibreSSL instead of OpenSSL (Issue #361).
  * Better support on AIX for login restraictions (Bug #4285).
  * TimeoutLogin (and other timeouts) were not working properly for SFTP
    connections (Bug#4299).
  * Handling of the SIGILL and SIGINT signals, by the daemon process, now causes
    the child processes to be terminated as well (Issue #461).
  * RPM .spec file naming changed to conform to Fedora guidelines.
  * Fix for "AllowChrootSymlinks off" checking each component for symlinks
    (CVE-2017-7418).
  - New Modules:
  * mod_redis, mod_tls_redis, mod_wrap2_redis
    With Redis now supported as a caching mechanism, similar to Memcache,
    there are now Redis-using modules: mod_redis (for configuring the Redis
    connection information), mod_tls_redis (for caching SSL sessions and
    OCSP information using Redis), and mod_wrap2_redis (for using ACLs stored
    in Redis).
  - Changed Modules:
  * mod_ban
    The mod_ban module's BanCache directive can now use Redis-based caching;
    see doc/contrib/mod_ban.html#BanCache.
  - New Configuration Directives
  * SQLPasswordArgon2, SQLPasswordScrypt
    The key lengths for Argon2 and Scrypt-based passwords are now configurable
    via these new directives; previously, the key length had been hardcoded
    to be 32 bytes, which is not interoperable with all other implementations
    (Issue #454).
  - Changed Configuration Directives
  * AllowChrootSymlinks
    When "AllowChrootSymlinks off" was used, only the last portion of the
    DefaultRoot path would be checked to see if it was a symlink.  Now,
    each component of the DefaultRoot path will be checked to see if it is
    a symlink when "AllowChrootSymlinks off" is used.
  * Include
    The Include directive can now be used within a &lt;Limit&gt; section, e.g.:
    &lt;Limit LOGIN&gt;
    Include /path/to/allowed.txt
    DenyAll
    &lt;/Limit&gt;
  - API Changes
  * A new JSON API has been added, for use by third-party modules.
- remove obsolete proftpd_include-in-limit-section.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
</package>
<package pkgid="97a07911bd19ac0c2826c8a81cf9b1bb3a8463d348310881af609b01c4f33ac0" name="proftpd-devel" arch="i586">
  <version epoch="0" ver="1.3.7e" rel="bp154.3.3.1"/>
  <changelog author="bwiedemann@suse.com" date="1500638400">- Sort SHARED_MODS list to fix build compare (boo#1041090)</changelog>
  <changelog author="chris@computersalat.de" date="1531224000">- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1531310400">- update to 1.3.6
  * Support for using Redis for caching, logging; see the doc/howto/Redis.html
    documentation.
  * Fixed mod_sql_postgres SSL support (Issue #415).
  * Support building against LibreSSL instead of OpenSSL (Issue #361).
  * Better support on AIX for login restraictions (Bug #4285).
  * TimeoutLogin (and other timeouts) were not working properly for SFTP
    connections (Bug#4299).
  * Handling of the SIGILL and SIGINT signals, by the daemon process, now causes
    the child processes to be terminated as well (Issue #461).
  * RPM .spec file naming changed to conform to Fedora guidelines.
  * Fix for "AllowChrootSymlinks off" checking each component for symlinks
    (CVE-2017-7418).
  - New Modules:
  * mod_redis, mod_tls_redis, mod_wrap2_redis
    With Redis now supported as a caching mechanism, similar to Memcache,
    there are now Redis-using modules: mod_redis (for configuring the Redis
    connection information), mod_tls_redis (for caching SSL sessions and
    OCSP information using Redis), and mod_wrap2_redis (for using ACLs stored
    in Redis).
  - Changed Modules:
  * mod_ban
    The mod_ban module's BanCache directive can now use Redis-based caching;
    see doc/contrib/mod_ban.html#BanCache.
  - New Configuration Directives
  * SQLPasswordArgon2, SQLPasswordScrypt
    The key lengths for Argon2 and Scrypt-based passwords are now configurable
    via these new directives; previously, the key length had been hardcoded
    to be 32 bytes, which is not interoperable with all other implementations
    (Issue #454).
  - Changed Configuration Directives
  * AllowChrootSymlinks
    When "AllowChrootSymlinks off" was used, only the last portion of the
    DefaultRoot path would be checked to see if it was a symlink.  Now,
    each component of the DefaultRoot path will be checked to see if it is
    a symlink when "AllowChrootSymlinks off" is used.
  * Include
    The Include directive can now be used within a &lt;Limit&gt; section, e.g.:
    &lt;Limit LOGIN&gt;
    Include /path/to/allowed.txt
    DenyAll
    &lt;/Limit&gt;
  - API Changes
  * A new JSON API has been added, for use by third-party modules.
- remove obsolete proftpd_include-in-limit-section.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
</package>
<package pkgid="64cb772f03bfad28b6f7034efb32ce28a6dc6031680c9afd619d3a896b5d2127" name="proftpd-devel" arch="ppc64le">
  <version epoch="0" ver="1.3.7e" rel="bp154.3.3.1"/>
  <changelog author="bwiedemann@suse.com" date="1500638400">- Sort SHARED_MODS list to fix build compare (boo#1041090)</changelog>
  <changelog author="chris@computersalat.de" date="1531224000">- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1531310400">- update to 1.3.6
  * Support for using Redis for caching, logging; see the doc/howto/Redis.html
    documentation.
  * Fixed mod_sql_postgres SSL support (Issue #415).
  * Support building against LibreSSL instead of OpenSSL (Issue #361).
  * Better support on AIX for login restraictions (Bug #4285).
  * TimeoutLogin (and other timeouts) were not working properly for SFTP
    connections (Bug#4299).
  * Handling of the SIGILL and SIGINT signals, by the daemon process, now causes
    the child processes to be terminated as well (Issue #461).
  * RPM .spec file naming changed to conform to Fedora guidelines.
  * Fix for "AllowChrootSymlinks off" checking each component for symlinks
    (CVE-2017-7418).
  - New Modules:
  * mod_redis, mod_tls_redis, mod_wrap2_redis
    With Redis now supported as a caching mechanism, similar to Memcache,
    there are now Redis-using modules: mod_redis (for configuring the Redis
    connection information), mod_tls_redis (for caching SSL sessions and
    OCSP information using Redis), and mod_wrap2_redis (for using ACLs stored
    in Redis).
  - Changed Modules:
  * mod_ban
    The mod_ban module's BanCache directive can now use Redis-based caching;
    see doc/contrib/mod_ban.html#BanCache.
  - New Configuration Directives
  * SQLPasswordArgon2, SQLPasswordScrypt
    The key lengths for Argon2 and Scrypt-based passwords are now configurable
    via these new directives; previously, the key length had been hardcoded
    to be 32 bytes, which is not interoperable with all other implementations
    (Issue #454).
  - Changed Configuration Directives
  * AllowChrootSymlinks
    When "AllowChrootSymlinks off" was used, only the last portion of the
    DefaultRoot path would be checked to see if it was a symlink.  Now,
    each component of the DefaultRoot path will be checked to see if it is
    a symlink when "AllowChrootSymlinks off" is used.
  * Include
    The Include directive can now be used within a &lt;Limit&gt; section, e.g.:
    &lt;Limit LOGIN&gt;
    Include /path/to/allowed.txt
    DenyAll
    &lt;/Limit&gt;
  - API Changes
  * A new JSON API has been added, for use by third-party modules.
- remove obsolete proftpd_include-in-limit-section.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
</package>
<package pkgid="9bad7f2ac8e675bf9a9e0a8a20586232219938d138562e2a3b85f489757f99c9" name="proftpd-devel" arch="s390x">
  <version epoch="0" ver="1.3.7e" rel="bp154.3.3.1"/>
  <changelog author="bwiedemann@suse.com" date="1500638400">- Sort SHARED_MODS list to fix build compare (boo#1041090)</changelog>
  <changelog author="chris@computersalat.de" date="1531224000">- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1531310400">- update to 1.3.6
  * Support for using Redis for caching, logging; see the doc/howto/Redis.html
    documentation.
  * Fixed mod_sql_postgres SSL support (Issue #415).
  * Support building against LibreSSL instead of OpenSSL (Issue #361).
  * Better support on AIX for login restraictions (Bug #4285).
  * TimeoutLogin (and other timeouts) were not working properly for SFTP
    connections (Bug#4299).
  * Handling of the SIGILL and SIGINT signals, by the daemon process, now causes
    the child processes to be terminated as well (Issue #461).
  * RPM .spec file naming changed to conform to Fedora guidelines.
  * Fix for "AllowChrootSymlinks off" checking each component for symlinks
    (CVE-2017-7418).
  - New Modules:
  * mod_redis, mod_tls_redis, mod_wrap2_redis
    With Redis now supported as a caching mechanism, similar to Memcache,
    there are now Redis-using modules: mod_redis (for configuring the Redis
    connection information), mod_tls_redis (for caching SSL sessions and
    OCSP information using Redis), and mod_wrap2_redis (for using ACLs stored
    in Redis).
  - Changed Modules:
  * mod_ban
    The mod_ban module's BanCache directive can now use Redis-based caching;
    see doc/contrib/mod_ban.html#BanCache.
  - New Configuration Directives
  * SQLPasswordArgon2, SQLPasswordScrypt
    The key lengths for Argon2 and Scrypt-based passwords are now configurable
    via these new directives; previously, the key length had been hardcoded
    to be 32 bytes, which is not interoperable with all other implementations
    (Issue #454).
  - Changed Configuration Directives
  * AllowChrootSymlinks
    When "AllowChrootSymlinks off" was used, only the last portion of the
    DefaultRoot path would be checked to see if it was a symlink.  Now,
    each component of the DefaultRoot path will be checked to see if it is
    a symlink when "AllowChrootSymlinks off" is used.
  * Include
    The Include directive can now be used within a &lt;Limit&gt; section, e.g.:
    &lt;Limit LOGIN&gt;
    Include /path/to/allowed.txt
    DenyAll
    &lt;/Limit&gt;
  - API Changes
  * A new JSON API has been added, for use by third-party modules.
- remove obsolete proftpd_include-in-limit-section.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
</package>
<package pkgid="af77a712720214a509c2773c210c74d9a04c726adf8c055b1e8de598ad2380ac" name="proftpd-devel" arch="x86_64">
  <version epoch="0" ver="1.3.7e" rel="bp154.3.3.1"/>
  <changelog author="bwiedemann@suse.com" date="1500638400">- Sort SHARED_MODS list to fix build compare (boo#1041090)</changelog>
  <changelog author="chris@computersalat.de" date="1531224000">- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1531310400">- update to 1.3.6
  * Support for using Redis for caching, logging; see the doc/howto/Redis.html
    documentation.
  * Fixed mod_sql_postgres SSL support (Issue #415).
  * Support building against LibreSSL instead of OpenSSL (Issue #361).
  * Better support on AIX for login restraictions (Bug #4285).
  * TimeoutLogin (and other timeouts) were not working properly for SFTP
    connections (Bug#4299).
  * Handling of the SIGILL and SIGINT signals, by the daemon process, now causes
    the child processes to be terminated as well (Issue #461).
  * RPM .spec file naming changed to conform to Fedora guidelines.
  * Fix for "AllowChrootSymlinks off" checking each component for symlinks
    (CVE-2017-7418).
  - New Modules:
  * mod_redis, mod_tls_redis, mod_wrap2_redis
    With Redis now supported as a caching mechanism, similar to Memcache,
    there are now Redis-using modules: mod_redis (for configuring the Redis
    connection information), mod_tls_redis (for caching SSL sessions and
    OCSP information using Redis), and mod_wrap2_redis (for using ACLs stored
    in Redis).
  - Changed Modules:
  * mod_ban
    The mod_ban module's BanCache directive can now use Redis-based caching;
    see doc/contrib/mod_ban.html#BanCache.
  - New Configuration Directives
  * SQLPasswordArgon2, SQLPasswordScrypt
    The key lengths for Argon2 and Scrypt-based passwords are now configurable
    via these new directives; previously, the key length had been hardcoded
    to be 32 bytes, which is not interoperable with all other implementations
    (Issue #454).
  - Changed Configuration Directives
  * AllowChrootSymlinks
    When "AllowChrootSymlinks off" was used, only the last portion of the
    DefaultRoot path would be checked to see if it was a symlink.  Now,
    each component of the DefaultRoot path will be checked to see if it is
    a symlink when "AllowChrootSymlinks off" is used.
  * Include
    The Include directive can now be used within a &lt;Limit&gt; section, e.g.:
    &lt;Limit LOGIN&gt;
    Include /path/to/allowed.txt
    DenyAll
    &lt;/Limit&gt;
  - API Changes
  * A new JSON API has been added, for use by third-party modules.
- remove obsolete proftpd_include-in-limit-section.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
</package>
<package pkgid="629b1c0e9b9545f3ee61a6f1f81d2e1312acb1b13733efbe0755492ff20e1ee7" name="proftpd-devel" arch="aarch64">
  <version epoch="0" ver="1.3.7e" rel="bp154.3.6.1"/>
  <changelog author="chris@computersalat.de" date="1531224000">- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1531310400">- update to 1.3.6
  * Support for using Redis for caching, logging; see the doc/howto/Redis.html
    documentation.
  * Fixed mod_sql_postgres SSL support (Issue #415).
  * Support building against LibreSSL instead of OpenSSL (Issue #361).
  * Better support on AIX for login restraictions (Bug #4285).
  * TimeoutLogin (and other timeouts) were not working properly for SFTP
    connections (Bug#4299).
  * Handling of the SIGILL and SIGINT signals, by the daemon process, now causes
    the child processes to be terminated as well (Issue #461).
  * RPM .spec file naming changed to conform to Fedora guidelines.
  * Fix for "AllowChrootSymlinks off" checking each component for symlinks
    (CVE-2017-7418).
  - New Modules:
  * mod_redis, mod_tls_redis, mod_wrap2_redis
    With Redis now supported as a caching mechanism, similar to Memcache,
    there are now Redis-using modules: mod_redis (for configuring the Redis
    connection information), mod_tls_redis (for caching SSL sessions and
    OCSP information using Redis), and mod_wrap2_redis (for using ACLs stored
    in Redis).
  - Changed Modules:
  * mod_ban
    The mod_ban module's BanCache directive can now use Redis-based caching;
    see doc/contrib/mod_ban.html#BanCache.
  - New Configuration Directives
  * SQLPasswordArgon2, SQLPasswordScrypt
    The key lengths for Argon2 and Scrypt-based passwords are now configurable
    via these new directives; previously, the key length had been hardcoded
    to be 32 bytes, which is not interoperable with all other implementations
    (Issue #454).
  - Changed Configuration Directives
  * AllowChrootSymlinks
    When "AllowChrootSymlinks off" was used, only the last portion of the
    DefaultRoot path would be checked to see if it was a symlink.  Now,
    each component of the DefaultRoot path will be checked to see if it is
    a symlink when "AllowChrootSymlinks off" is used.
  * Include
    The Include directive can now be used within a &lt;Limit&gt; section, e.g.:
    &lt;Limit LOGIN&gt;
    Include /path/to/allowed.txt
    DenyAll
    &lt;/Limit&gt;
  - API Changes
  * A new JSON API has been added, for use by third-party modules.
- remove obsolete proftpd_include-in-limit-section.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="chris@computersalat.de" date="1662033600">- Update proftpd-basic.conf.patch
  * remove obsolete config option, LoginPasswordPrompt
- rework proftpd-dist.patch</changelog>
</package>
<package pkgid="5a0750ca393eabbb9c6a3dda196a1b59a50e70f43204e97d0501521245b667b8" name="proftpd-devel" arch="i586">
  <version epoch="0" ver="1.3.7e" rel="bp154.3.6.1"/>
  <changelog author="chris@computersalat.de" date="1531224000">- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1531310400">- update to 1.3.6
  * Support for using Redis for caching, logging; see the doc/howto/Redis.html
    documentation.
  * Fixed mod_sql_postgres SSL support (Issue #415).
  * Support building against LibreSSL instead of OpenSSL (Issue #361).
  * Better support on AIX for login restraictions (Bug #4285).
  * TimeoutLogin (and other timeouts) were not working properly for SFTP
    connections (Bug#4299).
  * Handling of the SIGILL and SIGINT signals, by the daemon process, now causes
    the child processes to be terminated as well (Issue #461).
  * RPM .spec file naming changed to conform to Fedora guidelines.
  * Fix for "AllowChrootSymlinks off" checking each component for symlinks
    (CVE-2017-7418).
  - New Modules:
  * mod_redis, mod_tls_redis, mod_wrap2_redis
    With Redis now supported as a caching mechanism, similar to Memcache,
    there are now Redis-using modules: mod_redis (for configuring the Redis
    connection information), mod_tls_redis (for caching SSL sessions and
    OCSP information using Redis), and mod_wrap2_redis (for using ACLs stored
    in Redis).
  - Changed Modules:
  * mod_ban
    The mod_ban module's BanCache directive can now use Redis-based caching;
    see doc/contrib/mod_ban.html#BanCache.
  - New Configuration Directives
  * SQLPasswordArgon2, SQLPasswordScrypt
    The key lengths for Argon2 and Scrypt-based passwords are now configurable
    via these new directives; previously, the key length had been hardcoded
    to be 32 bytes, which is not interoperable with all other implementations
    (Issue #454).
  - Changed Configuration Directives
  * AllowChrootSymlinks
    When "AllowChrootSymlinks off" was used, only the last portion of the
    DefaultRoot path would be checked to see if it was a symlink.  Now,
    each component of the DefaultRoot path will be checked to see if it is
    a symlink when "AllowChrootSymlinks off" is used.
  * Include
    The Include directive can now be used within a &lt;Limit&gt; section, e.g.:
    &lt;Limit LOGIN&gt;
    Include /path/to/allowed.txt
    DenyAll
    &lt;/Limit&gt;
  - API Changes
  * A new JSON API has been added, for use by third-party modules.
- remove obsolete proftpd_include-in-limit-section.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="chris@computersalat.de" date="1662033600">- Update proftpd-basic.conf.patch
  * remove obsolete config option, LoginPasswordPrompt
- rework proftpd-dist.patch</changelog>
</package>
<package pkgid="14ca8e7dd1af908e40dd4a3192542012a1af2978dc1e98dd52cab0a714b5ca11" name="proftpd-devel" arch="ppc64le">
  <version epoch="0" ver="1.3.7e" rel="bp154.3.6.1"/>
  <changelog author="chris@computersalat.de" date="1531224000">- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1531310400">- update to 1.3.6
  * Support for using Redis for caching, logging; see the doc/howto/Redis.html
    documentation.
  * Fixed mod_sql_postgres SSL support (Issue #415).
  * Support building against LibreSSL instead of OpenSSL (Issue #361).
  * Better support on AIX for login restraictions (Bug #4285).
  * TimeoutLogin (and other timeouts) were not working properly for SFTP
    connections (Bug#4299).
  * Handling of the SIGILL and SIGINT signals, by the daemon process, now causes
    the child processes to be terminated as well (Issue #461).
  * RPM .spec file naming changed to conform to Fedora guidelines.
  * Fix for "AllowChrootSymlinks off" checking each component for symlinks
    (CVE-2017-7418).
  - New Modules:
  * mod_redis, mod_tls_redis, mod_wrap2_redis
    With Redis now supported as a caching mechanism, similar to Memcache,
    there are now Redis-using modules: mod_redis (for configuring the Redis
    connection information), mod_tls_redis (for caching SSL sessions and
    OCSP information using Redis), and mod_wrap2_redis (for using ACLs stored
    in Redis).
  - Changed Modules:
  * mod_ban
    The mod_ban module's BanCache directive can now use Redis-based caching;
    see doc/contrib/mod_ban.html#BanCache.
  - New Configuration Directives
  * SQLPasswordArgon2, SQLPasswordScrypt
    The key lengths for Argon2 and Scrypt-based passwords are now configurable
    via these new directives; previously, the key length had been hardcoded
    to be 32 bytes, which is not interoperable with all other implementations
    (Issue #454).
  - Changed Configuration Directives
  * AllowChrootSymlinks
    When "AllowChrootSymlinks off" was used, only the last portion of the
    DefaultRoot path would be checked to see if it was a symlink.  Now,
    each component of the DefaultRoot path will be checked to see if it is
    a symlink when "AllowChrootSymlinks off" is used.
  * Include
    The Include directive can now be used within a &lt;Limit&gt; section, e.g.:
    &lt;Limit LOGIN&gt;
    Include /path/to/allowed.txt
    DenyAll
    &lt;/Limit&gt;
  - API Changes
  * A new JSON API has been added, for use by third-party modules.
- remove obsolete proftpd_include-in-limit-section.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="chris@computersalat.de" date="1662033600">- Update proftpd-basic.conf.patch
  * remove obsolete config option, LoginPasswordPrompt
- rework proftpd-dist.patch</changelog>
</package>
<package pkgid="571f7b3feb8ea7517ab5e89cc10b6f67948d9ff57bf8bfa8b1b008b13264c048" name="proftpd-devel" arch="s390x">
  <version epoch="0" ver="1.3.7e" rel="bp154.3.6.1"/>
  <changelog author="chris@computersalat.de" date="1531224000">- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1531310400">- update to 1.3.6
  * Support for using Redis for caching, logging; see the doc/howto/Redis.html
    documentation.
  * Fixed mod_sql_postgres SSL support (Issue #415).
  * Support building against LibreSSL instead of OpenSSL (Issue #361).
  * Better support on AIX for login restraictions (Bug #4285).
  * TimeoutLogin (and other timeouts) were not working properly for SFTP
    connections (Bug#4299).
  * Handling of the SIGILL and SIGINT signals, by the daemon process, now causes
    the child processes to be terminated as well (Issue #461).
  * RPM .spec file naming changed to conform to Fedora guidelines.
  * Fix for "AllowChrootSymlinks off" checking each component for symlinks
    (CVE-2017-7418).
  - New Modules:
  * mod_redis, mod_tls_redis, mod_wrap2_redis
    With Redis now supported as a caching mechanism, similar to Memcache,
    there are now Redis-using modules: mod_redis (for configuring the Redis
    connection information), mod_tls_redis (for caching SSL sessions and
    OCSP information using Redis), and mod_wrap2_redis (for using ACLs stored
    in Redis).
  - Changed Modules:
  * mod_ban
    The mod_ban module's BanCache directive can now use Redis-based caching;
    see doc/contrib/mod_ban.html#BanCache.
  - New Configuration Directives
  * SQLPasswordArgon2, SQLPasswordScrypt
    The key lengths for Argon2 and Scrypt-based passwords are now configurable
    via these new directives; previously, the key length had been hardcoded
    to be 32 bytes, which is not interoperable with all other implementations
    (Issue #454).
  - Changed Configuration Directives
  * AllowChrootSymlinks
    When "AllowChrootSymlinks off" was used, only the last portion of the
    DefaultRoot path would be checked to see if it was a symlink.  Now,
    each component of the DefaultRoot path will be checked to see if it is
    a symlink when "AllowChrootSymlinks off" is used.
  * Include
    The Include directive can now be used within a &lt;Limit&gt; section, e.g.:
    &lt;Limit LOGIN&gt;
    Include /path/to/allowed.txt
    DenyAll
    &lt;/Limit&gt;
  - API Changes
  * A new JSON API has been added, for use by third-party modules.
- remove obsolete proftpd_include-in-limit-section.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="chris@computersalat.de" date="1662033600">- Update proftpd-basic.conf.patch
  * remove obsolete config option, LoginPasswordPrompt
- rework proftpd-dist.patch</changelog>
</package>
<package pkgid="70aae28239855c9725bfa4d9bba1995d5a308e3723b9c539f59312c61bc53fcf" name="proftpd-devel" arch="x86_64">
  <version epoch="0" ver="1.3.7e" rel="bp154.3.6.1"/>
  <changelog author="chris@computersalat.de" date="1531224000">- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1531310400">- update to 1.3.6
  * Support for using Redis for caching, logging; see the doc/howto/Redis.html
    documentation.
  * Fixed mod_sql_postgres SSL support (Issue #415).
  * Support building against LibreSSL instead of OpenSSL (Issue #361).
  * Better support on AIX for login restraictions (Bug #4285).
  * TimeoutLogin (and other timeouts) were not working properly for SFTP
    connections (Bug#4299).
  * Handling of the SIGILL and SIGINT signals, by the daemon process, now causes
    the child processes to be terminated as well (Issue #461).
  * RPM .spec file naming changed to conform to Fedora guidelines.
  * Fix for "AllowChrootSymlinks off" checking each component for symlinks
    (CVE-2017-7418).
  - New Modules:
  * mod_redis, mod_tls_redis, mod_wrap2_redis
    With Redis now supported as a caching mechanism, similar to Memcache,
    there are now Redis-using modules: mod_redis (for configuring the Redis
    connection information), mod_tls_redis (for caching SSL sessions and
    OCSP information using Redis), and mod_wrap2_redis (for using ACLs stored
    in Redis).
  - Changed Modules:
  * mod_ban
    The mod_ban module's BanCache directive can now use Redis-based caching;
    see doc/contrib/mod_ban.html#BanCache.
  - New Configuration Directives
  * SQLPasswordArgon2, SQLPasswordScrypt
    The key lengths for Argon2 and Scrypt-based passwords are now configurable
    via these new directives; previously, the key length had been hardcoded
    to be 32 bytes, which is not interoperable with all other implementations
    (Issue #454).
  - Changed Configuration Directives
  * AllowChrootSymlinks
    When "AllowChrootSymlinks off" was used, only the last portion of the
    DefaultRoot path would be checked to see if it was a symlink.  Now,
    each component of the DefaultRoot path will be checked to see if it is
    a symlink when "AllowChrootSymlinks off" is used.
  * Include
    The Include directive can now be used within a &lt;Limit&gt; section, e.g.:
    &lt;Limit LOGIN&gt;
    Include /path/to/allowed.txt
    DenyAll
    &lt;/Limit&gt;
  - API Changes
  * A new JSON API has been added, for use by third-party modules.
- remove obsolete proftpd_include-in-limit-section.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="chris@computersalat.de" date="1662033600">- Update proftpd-basic.conf.patch
  * remove obsolete config option, LoginPasswordPrompt
- rework proftpd-dist.patch</changelog>
</package>
<package pkgid="3fed86a7098528c210e30024215e2661c2728af9e907af86fdc4289936a2ca44" name="proftpd-devel" arch="aarch64">
  <version epoch="0" ver="1.3.7f" rel="bp154.3.9.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="chris@computersalat.de" date="1662033600">- Update proftpd-basic.conf.patch
  * remove obsolete config option, LoginPasswordPrompt
- rework proftpd-dist.patch</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1673870400">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="chris@computersalat.de" date="1674648000">- 1.3.7f - Released 04-Dec-2022
  * Issue 1533 - mod_tls module unexpectedly allows TLS handshake after
    authentication in some configurations.
  * Bug 4491 - unable to verify signed data: signature type 'rsa-sha2-512' does
    not match publickey algorithm 'ssh-rsa'.</changelog>
</package>
<package pkgid="946e6214708f69c770e336a0220153c6c8e36ec7d27c0c676a66a82e5eed699b" name="proftpd-devel" arch="i586">
  <version epoch="0" ver="1.3.7f" rel="bp154.3.9.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="chris@computersalat.de" date="1662033600">- Update proftpd-basic.conf.patch
  * remove obsolete config option, LoginPasswordPrompt
- rework proftpd-dist.patch</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1673870400">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="chris@computersalat.de" date="1674648000">- 1.3.7f - Released 04-Dec-2022
  * Issue 1533 - mod_tls module unexpectedly allows TLS handshake after
    authentication in some configurations.
  * Bug 4491 - unable to verify signed data: signature type 'rsa-sha2-512' does
    not match publickey algorithm 'ssh-rsa'.</changelog>
</package>
<package pkgid="8d62b218f3db315d4c64728c88a8b03eea75f942d4aa378b4a472dbf1660dcfe" name="proftpd-devel" arch="ppc64le">
  <version epoch="0" ver="1.3.7f" rel="bp154.3.9.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="chris@computersalat.de" date="1662033600">- Update proftpd-basic.conf.patch
  * remove obsolete config option, LoginPasswordPrompt
- rework proftpd-dist.patch</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1673870400">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="chris@computersalat.de" date="1674648000">- 1.3.7f - Released 04-Dec-2022
  * Issue 1533 - mod_tls module unexpectedly allows TLS handshake after
    authentication in some configurations.
  * Bug 4491 - unable to verify signed data: signature type 'rsa-sha2-512' does
    not match publickey algorithm 'ssh-rsa'.</changelog>
</package>
<package pkgid="19bd1317ca0d5ebca1b7d334ae67efa22025bef9e09442801cd09ee1cd438c09" name="proftpd-devel" arch="s390x">
  <version epoch="0" ver="1.3.7f" rel="bp154.3.9.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="chris@computersalat.de" date="1662033600">- Update proftpd-basic.conf.patch
  * remove obsolete config option, LoginPasswordPrompt
- rework proftpd-dist.patch</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1673870400">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="chris@computersalat.de" date="1674648000">- 1.3.7f - Released 04-Dec-2022
  * Issue 1533 - mod_tls module unexpectedly allows TLS handshake after
    authentication in some configurations.
  * Bug 4491 - unable to verify signed data: signature type 'rsa-sha2-512' does
    not match publickey algorithm 'ssh-rsa'.</changelog>
</package>
<package pkgid="ecd2b2e68295bb8e17b22b3a95e3e1393a39d9b2845265394d51f91a186bd7d7" name="proftpd-devel" arch="x86_64">
  <version epoch="0" ver="1.3.7f" rel="bp154.3.9.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="chris@computersalat.de" date="1662033600">- Update proftpd-basic.conf.patch
  * remove obsolete config option, LoginPasswordPrompt
- rework proftpd-dist.patch</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1673870400">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="chris@computersalat.de" date="1674648000">- 1.3.7f - Released 04-Dec-2022
  * Issue 1533 - mod_tls module unexpectedly allows TLS handshake after
    authentication in some configurations.
  * Bug 4491 - unable to verify signed data: signature type 'rsa-sha2-512' does
    not match publickey algorithm 'ssh-rsa'.</changelog>
</package>
<package pkgid="a481dfab1cf45bfc8d10419674258235ad4e01d9b1234acaafef1d19a27d0c3c" name="proftpd-doc" arch="aarch64">
  <version epoch="0" ver="1.3.7e" rel="bp154.3.3.1"/>
  <changelog author="bwiedemann@suse.com" date="1500638400">- Sort SHARED_MODS list to fix build compare (boo#1041090)</changelog>
  <changelog author="chris@computersalat.de" date="1531224000">- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1531310400">- update to 1.3.6
  * Support for using Redis for caching, logging; see the doc/howto/Redis.html
    documentation.
  * Fixed mod_sql_postgres SSL support (Issue #415).
  * Support building against LibreSSL instead of OpenSSL (Issue #361).
  * Better support on AIX for login restraictions (Bug #4285).
  * TimeoutLogin (and other timeouts) were not working properly for SFTP
    connections (Bug#4299).
  * Handling of the SIGILL and SIGINT signals, by the daemon process, now causes
    the child processes to be terminated as well (Issue #461).
  * RPM .spec file naming changed to conform to Fedora guidelines.
  * Fix for "AllowChrootSymlinks off" checking each component for symlinks
    (CVE-2017-7418).
  - New Modules:
  * mod_redis, mod_tls_redis, mod_wrap2_redis
    With Redis now supported as a caching mechanism, similar to Memcache,
    there are now Redis-using modules: mod_redis (for configuring the Redis
    connection information), mod_tls_redis (for caching SSL sessions and
    OCSP information using Redis), and mod_wrap2_redis (for using ACLs stored
    in Redis).
  - Changed Modules:
  * mod_ban
    The mod_ban module's BanCache directive can now use Redis-based caching;
    see doc/contrib/mod_ban.html#BanCache.
  - New Configuration Directives
  * SQLPasswordArgon2, SQLPasswordScrypt
    The key lengths for Argon2 and Scrypt-based passwords are now configurable
    via these new directives; previously, the key length had been hardcoded
    to be 32 bytes, which is not interoperable with all other implementations
    (Issue #454).
  - Changed Configuration Directives
  * AllowChrootSymlinks
    When "AllowChrootSymlinks off" was used, only the last portion of the
    DefaultRoot path would be checked to see if it was a symlink.  Now,
    each component of the DefaultRoot path will be checked to see if it is
    a symlink when "AllowChrootSymlinks off" is used.
  * Include
    The Include directive can now be used within a &lt;Limit&gt; section, e.g.:
    &lt;Limit LOGIN&gt;
    Include /path/to/allowed.txt
    DenyAll
    &lt;/Limit&gt;
  - API Changes
  * A new JSON API has been added, for use by third-party modules.
- remove obsolete proftpd_include-in-limit-section.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
</package>
<package pkgid="9ea9c9b49ef540624919f5cf9306bb82e9199c8ba42558067c429447017ecc24" name="proftpd-doc" arch="i586">
  <version epoch="0" ver="1.3.7e" rel="bp154.3.3.1"/>
  <changelog author="bwiedemann@suse.com" date="1500638400">- Sort SHARED_MODS list to fix build compare (boo#1041090)</changelog>
  <changelog author="chris@computersalat.de" date="1531224000">- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1531310400">- update to 1.3.6
  * Support for using Redis for caching, logging; see the doc/howto/Redis.html
    documentation.
  * Fixed mod_sql_postgres SSL support (Issue #415).
  * Support building against LibreSSL instead of OpenSSL (Issue #361).
  * Better support on AIX for login restraictions (Bug #4285).
  * TimeoutLogin (and other timeouts) were not working properly for SFTP
    connections (Bug#4299).
  * Handling of the SIGILL and SIGINT signals, by the daemon process, now causes
    the child processes to be terminated as well (Issue #461).
  * RPM .spec file naming changed to conform to Fedora guidelines.
  * Fix for "AllowChrootSymlinks off" checking each component for symlinks
    (CVE-2017-7418).
  - New Modules:
  * mod_redis, mod_tls_redis, mod_wrap2_redis
    With Redis now supported as a caching mechanism, similar to Memcache,
    there are now Redis-using modules: mod_redis (for configuring the Redis
    connection information), mod_tls_redis (for caching SSL sessions and
    OCSP information using Redis), and mod_wrap2_redis (for using ACLs stored
    in Redis).
  - Changed Modules:
  * mod_ban
    The mod_ban module's BanCache directive can now use Redis-based caching;
    see doc/contrib/mod_ban.html#BanCache.
  - New Configuration Directives
  * SQLPasswordArgon2, SQLPasswordScrypt
    The key lengths for Argon2 and Scrypt-based passwords are now configurable
    via these new directives; previously, the key length had been hardcoded
    to be 32 bytes, which is not interoperable with all other implementations
    (Issue #454).
  - Changed Configuration Directives
  * AllowChrootSymlinks
    When "AllowChrootSymlinks off" was used, only the last portion of the
    DefaultRoot path would be checked to see if it was a symlink.  Now,
    each component of the DefaultRoot path will be checked to see if it is
    a symlink when "AllowChrootSymlinks off" is used.
  * Include
    The Include directive can now be used within a &lt;Limit&gt; section, e.g.:
    &lt;Limit LOGIN&gt;
    Include /path/to/allowed.txt
    DenyAll
    &lt;/Limit&gt;
  - API Changes
  * A new JSON API has been added, for use by third-party modules.
- remove obsolete proftpd_include-in-limit-section.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
</package>
<package pkgid="e3e5ab7ce6b9ab1ebbafea342e98cf53d42b6f4f4f022f7059805ac79858f0aa" name="proftpd-doc" arch="ppc64le">
  <version epoch="0" ver="1.3.7e" rel="bp154.3.3.1"/>
  <changelog author="bwiedemann@suse.com" date="1500638400">- Sort SHARED_MODS list to fix build compare (boo#1041090)</changelog>
  <changelog author="chris@computersalat.de" date="1531224000">- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1531310400">- update to 1.3.6
  * Support for using Redis for caching, logging; see the doc/howto/Redis.html
    documentation.
  * Fixed mod_sql_postgres SSL support (Issue #415).
  * Support building against LibreSSL instead of OpenSSL (Issue #361).
  * Better support on AIX for login restraictions (Bug #4285).
  * TimeoutLogin (and other timeouts) were not working properly for SFTP
    connections (Bug#4299).
  * Handling of the SIGILL and SIGINT signals, by the daemon process, now causes
    the child processes to be terminated as well (Issue #461).
  * RPM .spec file naming changed to conform to Fedora guidelines.
  * Fix for "AllowChrootSymlinks off" checking each component for symlinks
    (CVE-2017-7418).
  - New Modules:
  * mod_redis, mod_tls_redis, mod_wrap2_redis
    With Redis now supported as a caching mechanism, similar to Memcache,
    there are now Redis-using modules: mod_redis (for configuring the Redis
    connection information), mod_tls_redis (for caching SSL sessions and
    OCSP information using Redis), and mod_wrap2_redis (for using ACLs stored
    in Redis).
  - Changed Modules:
  * mod_ban
    The mod_ban module's BanCache directive can now use Redis-based caching;
    see doc/contrib/mod_ban.html#BanCache.
  - New Configuration Directives
  * SQLPasswordArgon2, SQLPasswordScrypt
    The key lengths for Argon2 and Scrypt-based passwords are now configurable
    via these new directives; previously, the key length had been hardcoded
    to be 32 bytes, which is not interoperable with all other implementations
    (Issue #454).
  - Changed Configuration Directives
  * AllowChrootSymlinks
    When "AllowChrootSymlinks off" was used, only the last portion of the
    DefaultRoot path would be checked to see if it was a symlink.  Now,
    each component of the DefaultRoot path will be checked to see if it is
    a symlink when "AllowChrootSymlinks off" is used.
  * Include
    The Include directive can now be used within a &lt;Limit&gt; section, e.g.:
    &lt;Limit LOGIN&gt;
    Include /path/to/allowed.txt
    DenyAll
    &lt;/Limit&gt;
  - API Changes
  * A new JSON API has been added, for use by third-party modules.
- remove obsolete proftpd_include-in-limit-section.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
</package>
<package pkgid="ece2bb1446919afbf65fd05200da8508d09e59a8721c91239d911852718f8668" name="proftpd-doc" arch="s390x">
  <version epoch="0" ver="1.3.7e" rel="bp154.3.3.1"/>
  <changelog author="bwiedemann@suse.com" date="1500638400">- Sort SHARED_MODS list to fix build compare (boo#1041090)</changelog>
  <changelog author="chris@computersalat.de" date="1531224000">- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1531310400">- update to 1.3.6
  * Support for using Redis for caching, logging; see the doc/howto/Redis.html
    documentation.
  * Fixed mod_sql_postgres SSL support (Issue #415).
  * Support building against LibreSSL instead of OpenSSL (Issue #361).
  * Better support on AIX for login restraictions (Bug #4285).
  * TimeoutLogin (and other timeouts) were not working properly for SFTP
    connections (Bug#4299).
  * Handling of the SIGILL and SIGINT signals, by the daemon process, now causes
    the child processes to be terminated as well (Issue #461).
  * RPM .spec file naming changed to conform to Fedora guidelines.
  * Fix for "AllowChrootSymlinks off" checking each component for symlinks
    (CVE-2017-7418).
  - New Modules:
  * mod_redis, mod_tls_redis, mod_wrap2_redis
    With Redis now supported as a caching mechanism, similar to Memcache,
    there are now Redis-using modules: mod_redis (for configuring the Redis
    connection information), mod_tls_redis (for caching SSL sessions and
    OCSP information using Redis), and mod_wrap2_redis (for using ACLs stored
    in Redis).
  - Changed Modules:
  * mod_ban
    The mod_ban module's BanCache directive can now use Redis-based caching;
    see doc/contrib/mod_ban.html#BanCache.
  - New Configuration Directives
  * SQLPasswordArgon2, SQLPasswordScrypt
    The key lengths for Argon2 and Scrypt-based passwords are now configurable
    via these new directives; previously, the key length had been hardcoded
    to be 32 bytes, which is not interoperable with all other implementations
    (Issue #454).
  - Changed Configuration Directives
  * AllowChrootSymlinks
    When "AllowChrootSymlinks off" was used, only the last portion of the
    DefaultRoot path would be checked to see if it was a symlink.  Now,
    each component of the DefaultRoot path will be checked to see if it is
    a symlink when "AllowChrootSymlinks off" is used.
  * Include
    The Include directive can now be used within a &lt;Limit&gt; section, e.g.:
    &lt;Limit LOGIN&gt;
    Include /path/to/allowed.txt
    DenyAll
    &lt;/Limit&gt;
  - API Changes
  * A new JSON API has been added, for use by third-party modules.
- remove obsolete proftpd_include-in-limit-section.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
</package>
<package pkgid="5f636941d32141ae6679d543a83fc762940c88eb7626fcd00419b4bad88ab7c8" name="proftpd-doc" arch="x86_64">
  <version epoch="0" ver="1.3.7e" rel="bp154.3.3.1"/>
  <changelog author="bwiedemann@suse.com" date="1500638400">- Sort SHARED_MODS list to fix build compare (boo#1041090)</changelog>
  <changelog author="chris@computersalat.de" date="1531224000">- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1531310400">- update to 1.3.6
  * Support for using Redis for caching, logging; see the doc/howto/Redis.html
    documentation.
  * Fixed mod_sql_postgres SSL support (Issue #415).
  * Support building against LibreSSL instead of OpenSSL (Issue #361).
  * Better support on AIX for login restraictions (Bug #4285).
  * TimeoutLogin (and other timeouts) were not working properly for SFTP
    connections (Bug#4299).
  * Handling of the SIGILL and SIGINT signals, by the daemon process, now causes
    the child processes to be terminated as well (Issue #461).
  * RPM .spec file naming changed to conform to Fedora guidelines.
  * Fix for "AllowChrootSymlinks off" checking each component for symlinks
    (CVE-2017-7418).
  - New Modules:
  * mod_redis, mod_tls_redis, mod_wrap2_redis
    With Redis now supported as a caching mechanism, similar to Memcache,
    there are now Redis-using modules: mod_redis (for configuring the Redis
    connection information), mod_tls_redis (for caching SSL sessions and
    OCSP information using Redis), and mod_wrap2_redis (for using ACLs stored
    in Redis).
  - Changed Modules:
  * mod_ban
    The mod_ban module's BanCache directive can now use Redis-based caching;
    see doc/contrib/mod_ban.html#BanCache.
  - New Configuration Directives
  * SQLPasswordArgon2, SQLPasswordScrypt
    The key lengths for Argon2 and Scrypt-based passwords are now configurable
    via these new directives; previously, the key length had been hardcoded
    to be 32 bytes, which is not interoperable with all other implementations
    (Issue #454).
  - Changed Configuration Directives
  * AllowChrootSymlinks
    When "AllowChrootSymlinks off" was used, only the last portion of the
    DefaultRoot path would be checked to see if it was a symlink.  Now,
    each component of the DefaultRoot path will be checked to see if it is
    a symlink when "AllowChrootSymlinks off" is used.
  * Include
    The Include directive can now be used within a &lt;Limit&gt; section, e.g.:
    &lt;Limit LOGIN&gt;
    Include /path/to/allowed.txt
    DenyAll
    &lt;/Limit&gt;
  - API Changes
  * A new JSON API has been added, for use by third-party modules.
- remove obsolete proftpd_include-in-limit-section.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
</package>
<package pkgid="612f9c29545e3932256b59a0df6743000129990d1636bdbdf05f092de360dd6a" name="proftpd-doc" arch="aarch64">
  <version epoch="0" ver="1.3.7e" rel="bp154.3.6.1"/>
  <changelog author="chris@computersalat.de" date="1531224000">- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1531310400">- update to 1.3.6
  * Support for using Redis for caching, logging; see the doc/howto/Redis.html
    documentation.
  * Fixed mod_sql_postgres SSL support (Issue #415).
  * Support building against LibreSSL instead of OpenSSL (Issue #361).
  * Better support on AIX for login restraictions (Bug #4285).
  * TimeoutLogin (and other timeouts) were not working properly for SFTP
    connections (Bug#4299).
  * Handling of the SIGILL and SIGINT signals, by the daemon process, now causes
    the child processes to be terminated as well (Issue #461).
  * RPM .spec file naming changed to conform to Fedora guidelines.
  * Fix for "AllowChrootSymlinks off" checking each component for symlinks
    (CVE-2017-7418).
  - New Modules:
  * mod_redis, mod_tls_redis, mod_wrap2_redis
    With Redis now supported as a caching mechanism, similar to Memcache,
    there are now Redis-using modules: mod_redis (for configuring the Redis
    connection information), mod_tls_redis (for caching SSL sessions and
    OCSP information using Redis), and mod_wrap2_redis (for using ACLs stored
    in Redis).
  - Changed Modules:
  * mod_ban
    The mod_ban module's BanCache directive can now use Redis-based caching;
    see doc/contrib/mod_ban.html#BanCache.
  - New Configuration Directives
  * SQLPasswordArgon2, SQLPasswordScrypt
    The key lengths for Argon2 and Scrypt-based passwords are now configurable
    via these new directives; previously, the key length had been hardcoded
    to be 32 bytes, which is not interoperable with all other implementations
    (Issue #454).
  - Changed Configuration Directives
  * AllowChrootSymlinks
    When "AllowChrootSymlinks off" was used, only the last portion of the
    DefaultRoot path would be checked to see if it was a symlink.  Now,
    each component of the DefaultRoot path will be checked to see if it is
    a symlink when "AllowChrootSymlinks off" is used.
  * Include
    The Include directive can now be used within a &lt;Limit&gt; section, e.g.:
    &lt;Limit LOGIN&gt;
    Include /path/to/allowed.txt
    DenyAll
    &lt;/Limit&gt;
  - API Changes
  * A new JSON API has been added, for use by third-party modules.
- remove obsolete proftpd_include-in-limit-section.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="chris@computersalat.de" date="1662033600">- Update proftpd-basic.conf.patch
  * remove obsolete config option, LoginPasswordPrompt
- rework proftpd-dist.patch</changelog>
</package>
<package pkgid="0c61f0793f728900a3caea787895ca3e916fc056c1772a853ac5bdad07616a39" name="proftpd-doc" arch="i586">
  <version epoch="0" ver="1.3.7e" rel="bp154.3.6.1"/>
  <changelog author="chris@computersalat.de" date="1531224000">- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1531310400">- update to 1.3.6
  * Support for using Redis for caching, logging; see the doc/howto/Redis.html
    documentation.
  * Fixed mod_sql_postgres SSL support (Issue #415).
  * Support building against LibreSSL instead of OpenSSL (Issue #361).
  * Better support on AIX for login restraictions (Bug #4285).
  * TimeoutLogin (and other timeouts) were not working properly for SFTP
    connections (Bug#4299).
  * Handling of the SIGILL and SIGINT signals, by the daemon process, now causes
    the child processes to be terminated as well (Issue #461).
  * RPM .spec file naming changed to conform to Fedora guidelines.
  * Fix for "AllowChrootSymlinks off" checking each component for symlinks
    (CVE-2017-7418).
  - New Modules:
  * mod_redis, mod_tls_redis, mod_wrap2_redis
    With Redis now supported as a caching mechanism, similar to Memcache,
    there are now Redis-using modules: mod_redis (for configuring the Redis
    connection information), mod_tls_redis (for caching SSL sessions and
    OCSP information using Redis), and mod_wrap2_redis (for using ACLs stored
    in Redis).
  - Changed Modules:
  * mod_ban
    The mod_ban module's BanCache directive can now use Redis-based caching;
    see doc/contrib/mod_ban.html#BanCache.
  - New Configuration Directives
  * SQLPasswordArgon2, SQLPasswordScrypt
    The key lengths for Argon2 and Scrypt-based passwords are now configurable
    via these new directives; previously, the key length had been hardcoded
    to be 32 bytes, which is not interoperable with all other implementations
    (Issue #454).
  - Changed Configuration Directives
  * AllowChrootSymlinks
    When "AllowChrootSymlinks off" was used, only the last portion of the
    DefaultRoot path would be checked to see if it was a symlink.  Now,
    each component of the DefaultRoot path will be checked to see if it is
    a symlink when "AllowChrootSymlinks off" is used.
  * Include
    The Include directive can now be used within a &lt;Limit&gt; section, e.g.:
    &lt;Limit LOGIN&gt;
    Include /path/to/allowed.txt
    DenyAll
    &lt;/Limit&gt;
  - API Changes
  * A new JSON API has been added, for use by third-party modules.
- remove obsolete proftpd_include-in-limit-section.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="chris@computersalat.de" date="1662033600">- Update proftpd-basic.conf.patch
  * remove obsolete config option, LoginPasswordPrompt
- rework proftpd-dist.patch</changelog>
</package>
<package pkgid="1065546cb0a800b0eebcd91ea01f230ff7e090b58b8dce78f16e5615fad1ae1b" name="proftpd-doc" arch="ppc64le">
  <version epoch="0" ver="1.3.7e" rel="bp154.3.6.1"/>
  <changelog author="chris@computersalat.de" date="1531224000">- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1531310400">- update to 1.3.6
  * Support for using Redis for caching, logging; see the doc/howto/Redis.html
    documentation.
  * Fixed mod_sql_postgres SSL support (Issue #415).
  * Support building against LibreSSL instead of OpenSSL (Issue #361).
  * Better support on AIX for login restraictions (Bug #4285).
  * TimeoutLogin (and other timeouts) were not working properly for SFTP
    connections (Bug#4299).
  * Handling of the SIGILL and SIGINT signals, by the daemon process, now causes
    the child processes to be terminated as well (Issue #461).
  * RPM .spec file naming changed to conform to Fedora guidelines.
  * Fix for "AllowChrootSymlinks off" checking each component for symlinks
    (CVE-2017-7418).
  - New Modules:
  * mod_redis, mod_tls_redis, mod_wrap2_redis
    With Redis now supported as a caching mechanism, similar to Memcache,
    there are now Redis-using modules: mod_redis (for configuring the Redis
    connection information), mod_tls_redis (for caching SSL sessions and
    OCSP information using Redis), and mod_wrap2_redis (for using ACLs stored
    in Redis).
  - Changed Modules:
  * mod_ban
    The mod_ban module's BanCache directive can now use Redis-based caching;
    see doc/contrib/mod_ban.html#BanCache.
  - New Configuration Directives
  * SQLPasswordArgon2, SQLPasswordScrypt
    The key lengths for Argon2 and Scrypt-based passwords are now configurable
    via these new directives; previously, the key length had been hardcoded
    to be 32 bytes, which is not interoperable with all other implementations
    (Issue #454).
  - Changed Configuration Directives
  * AllowChrootSymlinks
    When "AllowChrootSymlinks off" was used, only the last portion of the
    DefaultRoot path would be checked to see if it was a symlink.  Now,
    each component of the DefaultRoot path will be checked to see if it is
    a symlink when "AllowChrootSymlinks off" is used.
  * Include
    The Include directive can now be used within a &lt;Limit&gt; section, e.g.:
    &lt;Limit LOGIN&gt;
    Include /path/to/allowed.txt
    DenyAll
    &lt;/Limit&gt;
  - API Changes
  * A new JSON API has been added, for use by third-party modules.
- remove obsolete proftpd_include-in-limit-section.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="chris@computersalat.de" date="1662033600">- Update proftpd-basic.conf.patch
  * remove obsolete config option, LoginPasswordPrompt
- rework proftpd-dist.patch</changelog>
</package>
<package pkgid="baa5a64317b442813d7eb5499b2662fd836f00126a00b0154a4f37384acc9e67" name="proftpd-doc" arch="s390x">
  <version epoch="0" ver="1.3.7e" rel="bp154.3.6.1"/>
  <changelog author="chris@computersalat.de" date="1531224000">- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1531310400">- update to 1.3.6
  * Support for using Redis for caching, logging; see the doc/howto/Redis.html
    documentation.
  * Fixed mod_sql_postgres SSL support (Issue #415).
  * Support building against LibreSSL instead of OpenSSL (Issue #361).
  * Better support on AIX for login restraictions (Bug #4285).
  * TimeoutLogin (and other timeouts) were not working properly for SFTP
    connections (Bug#4299).
  * Handling of the SIGILL and SIGINT signals, by the daemon process, now causes
    the child processes to be terminated as well (Issue #461).
  * RPM .spec file naming changed to conform to Fedora guidelines.
  * Fix for "AllowChrootSymlinks off" checking each component for symlinks
    (CVE-2017-7418).
  - New Modules:
  * mod_redis, mod_tls_redis, mod_wrap2_redis
    With Redis now supported as a caching mechanism, similar to Memcache,
    there are now Redis-using modules: mod_redis (for configuring the Redis
    connection information), mod_tls_redis (for caching SSL sessions and
    OCSP information using Redis), and mod_wrap2_redis (for using ACLs stored
    in Redis).
  - Changed Modules:
  * mod_ban
    The mod_ban module's BanCache directive can now use Redis-based caching;
    see doc/contrib/mod_ban.html#BanCache.
  - New Configuration Directives
  * SQLPasswordArgon2, SQLPasswordScrypt
    The key lengths for Argon2 and Scrypt-based passwords are now configurable
    via these new directives; previously, the key length had been hardcoded
    to be 32 bytes, which is not interoperable with all other implementations
    (Issue #454).
  - Changed Configuration Directives
  * AllowChrootSymlinks
    When "AllowChrootSymlinks off" was used, only the last portion of the
    DefaultRoot path would be checked to see if it was a symlink.  Now,
    each component of the DefaultRoot path will be checked to see if it is
    a symlink when "AllowChrootSymlinks off" is used.
  * Include
    The Include directive can now be used within a &lt;Limit&gt; section, e.g.:
    &lt;Limit LOGIN&gt;
    Include /path/to/allowed.txt
    DenyAll
    &lt;/Limit&gt;
  - API Changes
  * A new JSON API has been added, for use by third-party modules.
- remove obsolete proftpd_include-in-limit-section.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="chris@computersalat.de" date="1662033600">- Update proftpd-basic.conf.patch
  * remove obsolete config option, LoginPasswordPrompt
- rework proftpd-dist.patch</changelog>
</package>
<package pkgid="2624d3028eae9278c9be23ed2480b6b56afc49cfc0a29855051f9574822358da" name="proftpd-doc" arch="x86_64">
  <version epoch="0" ver="1.3.7e" rel="bp154.3.6.1"/>
  <changelog author="chris@computersalat.de" date="1531224000">- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1531310400">- update to 1.3.6
  * Support for using Redis for caching, logging; see the doc/howto/Redis.html
    documentation.
  * Fixed mod_sql_postgres SSL support (Issue #415).
  * Support building against LibreSSL instead of OpenSSL (Issue #361).
  * Better support on AIX for login restraictions (Bug #4285).
  * TimeoutLogin (and other timeouts) were not working properly for SFTP
    connections (Bug#4299).
  * Handling of the SIGILL and SIGINT signals, by the daemon process, now causes
    the child processes to be terminated as well (Issue #461).
  * RPM .spec file naming changed to conform to Fedora guidelines.
  * Fix for "AllowChrootSymlinks off" checking each component for symlinks
    (CVE-2017-7418).
  - New Modules:
  * mod_redis, mod_tls_redis, mod_wrap2_redis
    With Redis now supported as a caching mechanism, similar to Memcache,
    there are now Redis-using modules: mod_redis (for configuring the Redis
    connection information), mod_tls_redis (for caching SSL sessions and
    OCSP information using Redis), and mod_wrap2_redis (for using ACLs stored
    in Redis).
  - Changed Modules:
  * mod_ban
    The mod_ban module's BanCache directive can now use Redis-based caching;
    see doc/contrib/mod_ban.html#BanCache.
  - New Configuration Directives
  * SQLPasswordArgon2, SQLPasswordScrypt
    The key lengths for Argon2 and Scrypt-based passwords are now configurable
    via these new directives; previously, the key length had been hardcoded
    to be 32 bytes, which is not interoperable with all other implementations
    (Issue #454).
  - Changed Configuration Directives
  * AllowChrootSymlinks
    When "AllowChrootSymlinks off" was used, only the last portion of the
    DefaultRoot path would be checked to see if it was a symlink.  Now,
    each component of the DefaultRoot path will be checked to see if it is
    a symlink when "AllowChrootSymlinks off" is used.
  * Include
    The Include directive can now be used within a &lt;Limit&gt; section, e.g.:
    &lt;Limit LOGIN&gt;
    Include /path/to/allowed.txt
    DenyAll
    &lt;/Limit&gt;
  - API Changes
  * A new JSON API has been added, for use by third-party modules.
- remove obsolete proftpd_include-in-limit-section.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="chris@computersalat.de" date="1662033600">- Update proftpd-basic.conf.patch
  * remove obsolete config option, LoginPasswordPrompt
- rework proftpd-dist.patch</changelog>
</package>
<package pkgid="e2e2bd271b94a73de3edd932fb8b7d4b5cdbdf8f1e5d95c08f117c781c699bd5" name="proftpd-doc" arch="aarch64">
  <version epoch="0" ver="1.3.7f" rel="bp154.3.9.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="chris@computersalat.de" date="1662033600">- Update proftpd-basic.conf.patch
  * remove obsolete config option, LoginPasswordPrompt
- rework proftpd-dist.patch</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1673870400">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="chris@computersalat.de" date="1674648000">- 1.3.7f - Released 04-Dec-2022
  * Issue 1533 - mod_tls module unexpectedly allows TLS handshake after
    authentication in some configurations.
  * Bug 4491 - unable to verify signed data: signature type 'rsa-sha2-512' does
    not match publickey algorithm 'ssh-rsa'.</changelog>
</package>
<package pkgid="b240689b2528f279e00d2a431bac5895d2278efb6d29c86a6e419dc8fa43dc53" name="proftpd-doc" arch="i586">
  <version epoch="0" ver="1.3.7f" rel="bp154.3.9.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="chris@computersalat.de" date="1662033600">- Update proftpd-basic.conf.patch
  * remove obsolete config option, LoginPasswordPrompt
- rework proftpd-dist.patch</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1673870400">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="chris@computersalat.de" date="1674648000">- 1.3.7f - Released 04-Dec-2022
  * Issue 1533 - mod_tls module unexpectedly allows TLS handshake after
    authentication in some configurations.
  * Bug 4491 - unable to verify signed data: signature type 'rsa-sha2-512' does
    not match publickey algorithm 'ssh-rsa'.</changelog>
</package>
<package pkgid="9137f2001c572bd8101d5563cffe4d7d49daa871fa066f49566922963b7ae6e8" name="proftpd-doc" arch="ppc64le">
  <version epoch="0" ver="1.3.7f" rel="bp154.3.9.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="chris@computersalat.de" date="1662033600">- Update proftpd-basic.conf.patch
  * remove obsolete config option, LoginPasswordPrompt
- rework proftpd-dist.patch</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1673870400">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="chris@computersalat.de" date="1674648000">- 1.3.7f - Released 04-Dec-2022
  * Issue 1533 - mod_tls module unexpectedly allows TLS handshake after
    authentication in some configurations.
  * Bug 4491 - unable to verify signed data: signature type 'rsa-sha2-512' does
    not match publickey algorithm 'ssh-rsa'.</changelog>
</package>
<package pkgid="77d9ec93f82ae6b386c83fb081c152c574afd825850e5be43fa734c921d0104b" name="proftpd-doc" arch="s390x">
  <version epoch="0" ver="1.3.7f" rel="bp154.3.9.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="chris@computersalat.de" date="1662033600">- Update proftpd-basic.conf.patch
  * remove obsolete config option, LoginPasswordPrompt
- rework proftpd-dist.patch</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1673870400">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="chris@computersalat.de" date="1674648000">- 1.3.7f - Released 04-Dec-2022
  * Issue 1533 - mod_tls module unexpectedly allows TLS handshake after
    authentication in some configurations.
  * Bug 4491 - unable to verify signed data: signature type 'rsa-sha2-512' does
    not match publickey algorithm 'ssh-rsa'.</changelog>
</package>
<package pkgid="3c39b096deb914161fe5bb4947d67755bf0127c170bbfed689453bf617b32723" name="proftpd-doc" arch="x86_64">
  <version epoch="0" ver="1.3.7f" rel="bp154.3.9.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="chris@computersalat.de" date="1662033600">- Update proftpd-basic.conf.patch
  * remove obsolete config option, LoginPasswordPrompt
- rework proftpd-dist.patch</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1673870400">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="chris@computersalat.de" date="1674648000">- 1.3.7f - Released 04-Dec-2022
  * Issue 1533 - mod_tls module unexpectedly allows TLS handshake after
    authentication in some configurations.
  * Bug 4491 - unable to verify signed data: signature type 'rsa-sha2-512' does
    not match publickey algorithm 'ssh-rsa'.</changelog>
</package>
<package pkgid="266e824b73282262c0dc36aa8a33124eb8eb4e96285560cf178c52488980a8fc" name="proftpd-lang" arch="noarch">
  <version epoch="0" ver="1.3.7e" rel="bp154.3.3.1"/>
  <changelog author="bwiedemann@suse.com" date="1500638400">- Sort SHARED_MODS list to fix build compare (boo#1041090)</changelog>
  <changelog author="chris@computersalat.de" date="1531224000">- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1531310400">- update to 1.3.6
  * Support for using Redis for caching, logging; see the doc/howto/Redis.html
    documentation.
  * Fixed mod_sql_postgres SSL support (Issue #415).
  * Support building against LibreSSL instead of OpenSSL (Issue #361).
  * Better support on AIX for login restraictions (Bug #4285).
  * TimeoutLogin (and other timeouts) were not working properly for SFTP
    connections (Bug#4299).
  * Handling of the SIGILL and SIGINT signals, by the daemon process, now causes
    the child processes to be terminated as well (Issue #461).
  * RPM .spec file naming changed to conform to Fedora guidelines.
  * Fix for "AllowChrootSymlinks off" checking each component for symlinks
    (CVE-2017-7418).
  - New Modules:
  * mod_redis, mod_tls_redis, mod_wrap2_redis
    With Redis now supported as a caching mechanism, similar to Memcache,
    there are now Redis-using modules: mod_redis (for configuring the Redis
    connection information), mod_tls_redis (for caching SSL sessions and
    OCSP information using Redis), and mod_wrap2_redis (for using ACLs stored
    in Redis).
  - Changed Modules:
  * mod_ban
    The mod_ban module's BanCache directive can now use Redis-based caching;
    see doc/contrib/mod_ban.html#BanCache.
  - New Configuration Directives
  * SQLPasswordArgon2, SQLPasswordScrypt
    The key lengths for Argon2 and Scrypt-based passwords are now configurable
    via these new directives; previously, the key length had been hardcoded
    to be 32 bytes, which is not interoperable with all other implementations
    (Issue #454).
  - Changed Configuration Directives
  * AllowChrootSymlinks
    When "AllowChrootSymlinks off" was used, only the last portion of the
    DefaultRoot path would be checked to see if it was a symlink.  Now,
    each component of the DefaultRoot path will be checked to see if it is
    a symlink when "AllowChrootSymlinks off" is used.
  * Include
    The Include directive can now be used within a &lt;Limit&gt; section, e.g.:
    &lt;Limit LOGIN&gt;
    Include /path/to/allowed.txt
    DenyAll
    &lt;/Limit&gt;
  - API Changes
  * A new JSON API has been added, for use by third-party modules.
- remove obsolete proftpd_include-in-limit-section.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
</package>
<package pkgid="bbd1e7f3440fd93637e47d60755e8943a0caf3608590c43d761662bf8025d0e7" name="proftpd-lang" arch="noarch">
  <version epoch="0" ver="1.3.7e" rel="bp154.3.6.1"/>
  <changelog author="chris@computersalat.de" date="1531224000">- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1531310400">- update to 1.3.6
  * Support for using Redis for caching, logging; see the doc/howto/Redis.html
    documentation.
  * Fixed mod_sql_postgres SSL support (Issue #415).
  * Support building against LibreSSL instead of OpenSSL (Issue #361).
  * Better support on AIX for login restraictions (Bug #4285).
  * TimeoutLogin (and other timeouts) were not working properly for SFTP
    connections (Bug#4299).
  * Handling of the SIGILL and SIGINT signals, by the daemon process, now causes
    the child processes to be terminated as well (Issue #461).
  * RPM .spec file naming changed to conform to Fedora guidelines.
  * Fix for "AllowChrootSymlinks off" checking each component for symlinks
    (CVE-2017-7418).
  - New Modules:
  * mod_redis, mod_tls_redis, mod_wrap2_redis
    With Redis now supported as a caching mechanism, similar to Memcache,
    there are now Redis-using modules: mod_redis (for configuring the Redis
    connection information), mod_tls_redis (for caching SSL sessions and
    OCSP information using Redis), and mod_wrap2_redis (for using ACLs stored
    in Redis).
  - Changed Modules:
  * mod_ban
    The mod_ban module's BanCache directive can now use Redis-based caching;
    see doc/contrib/mod_ban.html#BanCache.
  - New Configuration Directives
  * SQLPasswordArgon2, SQLPasswordScrypt
    The key lengths for Argon2 and Scrypt-based passwords are now configurable
    via these new directives; previously, the key length had been hardcoded
    to be 32 bytes, which is not interoperable with all other implementations
    (Issue #454).
  - Changed Configuration Directives
  * AllowChrootSymlinks
    When "AllowChrootSymlinks off" was used, only the last portion of the
    DefaultRoot path would be checked to see if it was a symlink.  Now,
    each component of the DefaultRoot path will be checked to see if it is
    a symlink when "AllowChrootSymlinks off" is used.
  * Include
    The Include directive can now be used within a &lt;Limit&gt; section, e.g.:
    &lt;Limit LOGIN&gt;
    Include /path/to/allowed.txt
    DenyAll
    &lt;/Limit&gt;
  - API Changes
  * A new JSON API has been added, for use by third-party modules.
- remove obsolete proftpd_include-in-limit-section.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="chris@computersalat.de" date="1662033600">- Update proftpd-basic.conf.patch
  * remove obsolete config option, LoginPasswordPrompt
- rework proftpd-dist.patch</changelog>
</package>
<package pkgid="63a20bb251576402eb3d012dac963db96b169cc0d3dd0a89fcaf134b297bc2da" name="proftpd-lang" arch="noarch">
  <version epoch="0" ver="1.3.7f" rel="bp154.3.9.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="chris@computersalat.de" date="1662033600">- Update proftpd-basic.conf.patch
  * remove obsolete config option, LoginPasswordPrompt
- rework proftpd-dist.patch</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1673870400">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="chris@computersalat.de" date="1674648000">- 1.3.7f - Released 04-Dec-2022
  * Issue 1533 - mod_tls module unexpectedly allows TLS handshake after
    authentication in some configurations.
  * Bug 4491 - unable to verify signed data: signature type 'rsa-sha2-512' does
    not match publickey algorithm 'ssh-rsa'.</changelog>
</package>
<package pkgid="2fe3bcd30ec7af15e38b5acf3434f80b7a92f8695acae0e7c7d1ed2c005ef100" name="proftpd-ldap" arch="aarch64">
  <version epoch="0" ver="1.3.7e" rel="bp154.3.3.1"/>
  <changelog author="bwiedemann@suse.com" date="1500638400">- Sort SHARED_MODS list to fix build compare (boo#1041090)</changelog>
  <changelog author="chris@computersalat.de" date="1531224000">- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1531310400">- update to 1.3.6
  * Support for using Redis for caching, logging; see the doc/howto/Redis.html
    documentation.
  * Fixed mod_sql_postgres SSL support (Issue #415).
  * Support building against LibreSSL instead of OpenSSL (Issue #361).
  * Better support on AIX for login restraictions (Bug #4285).
  * TimeoutLogin (and other timeouts) were not working properly for SFTP
    connections (Bug#4299).
  * Handling of the SIGILL and SIGINT signals, by the daemon process, now causes
    the child processes to be terminated as well (Issue #461).
  * RPM .spec file naming changed to conform to Fedora guidelines.
  * Fix for "AllowChrootSymlinks off" checking each component for symlinks
    (CVE-2017-7418).
  - New Modules:
  * mod_redis, mod_tls_redis, mod_wrap2_redis
    With Redis now supported as a caching mechanism, similar to Memcache,
    there are now Redis-using modules: mod_redis (for configuring the Redis
    connection information), mod_tls_redis (for caching SSL sessions and
    OCSP information using Redis), and mod_wrap2_redis (for using ACLs stored
    in Redis).
  - Changed Modules:
  * mod_ban
    The mod_ban module's BanCache directive can now use Redis-based caching;
    see doc/contrib/mod_ban.html#BanCache.
  - New Configuration Directives
  * SQLPasswordArgon2, SQLPasswordScrypt
    The key lengths for Argon2 and Scrypt-based passwords are now configurable
    via these new directives; previously, the key length had been hardcoded
    to be 32 bytes, which is not interoperable with all other implementations
    (Issue #454).
  - Changed Configuration Directives
  * AllowChrootSymlinks
    When "AllowChrootSymlinks off" was used, only the last portion of the
    DefaultRoot path would be checked to see if it was a symlink.  Now,
    each component of the DefaultRoot path will be checked to see if it is
    a symlink when "AllowChrootSymlinks off" is used.
  * Include
    The Include directive can now be used within a &lt;Limit&gt; section, e.g.:
    &lt;Limit LOGIN&gt;
    Include /path/to/allowed.txt
    DenyAll
    &lt;/Limit&gt;
  - API Changes
  * A new JSON API has been added, for use by third-party modules.
- remove obsolete proftpd_include-in-limit-section.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
</package>
<package pkgid="688da11c3e7adf5fb91153e89523cbbe2ca04e0efef847f9f79a9f4d6fa82efe" name="proftpd-ldap" arch="i586">
  <version epoch="0" ver="1.3.7e" rel="bp154.3.3.1"/>
  <changelog author="bwiedemann@suse.com" date="1500638400">- Sort SHARED_MODS list to fix build compare (boo#1041090)</changelog>
  <changelog author="chris@computersalat.de" date="1531224000">- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1531310400">- update to 1.3.6
  * Support for using Redis for caching, logging; see the doc/howto/Redis.html
    documentation.
  * Fixed mod_sql_postgres SSL support (Issue #415).
  * Support building against LibreSSL instead of OpenSSL (Issue #361).
  * Better support on AIX for login restraictions (Bug #4285).
  * TimeoutLogin (and other timeouts) were not working properly for SFTP
    connections (Bug#4299).
  * Handling of the SIGILL and SIGINT signals, by the daemon process, now causes
    the child processes to be terminated as well (Issue #461).
  * RPM .spec file naming changed to conform to Fedora guidelines.
  * Fix for "AllowChrootSymlinks off" checking each component for symlinks
    (CVE-2017-7418).
  - New Modules:
  * mod_redis, mod_tls_redis, mod_wrap2_redis
    With Redis now supported as a caching mechanism, similar to Memcache,
    there are now Redis-using modules: mod_redis (for configuring the Redis
    connection information), mod_tls_redis (for caching SSL sessions and
    OCSP information using Redis), and mod_wrap2_redis (for using ACLs stored
    in Redis).
  - Changed Modules:
  * mod_ban
    The mod_ban module's BanCache directive can now use Redis-based caching;
    see doc/contrib/mod_ban.html#BanCache.
  - New Configuration Directives
  * SQLPasswordArgon2, SQLPasswordScrypt
    The key lengths for Argon2 and Scrypt-based passwords are now configurable
    via these new directives; previously, the key length had been hardcoded
    to be 32 bytes, which is not interoperable with all other implementations
    (Issue #454).
  - Changed Configuration Directives
  * AllowChrootSymlinks
    When "AllowChrootSymlinks off" was used, only the last portion of the
    DefaultRoot path would be checked to see if it was a symlink.  Now,
    each component of the DefaultRoot path will be checked to see if it is
    a symlink when "AllowChrootSymlinks off" is used.
  * Include
    The Include directive can now be used within a &lt;Limit&gt; section, e.g.:
    &lt;Limit LOGIN&gt;
    Include /path/to/allowed.txt
    DenyAll
    &lt;/Limit&gt;
  - API Changes
  * A new JSON API has been added, for use by third-party modules.
- remove obsolete proftpd_include-in-limit-section.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
</package>
<package pkgid="06afb60aa896b5c6068185b40c6987c1fa81416c391d396053325c40685aa044" name="proftpd-ldap" arch="ppc64le">
  <version epoch="0" ver="1.3.7e" rel="bp154.3.3.1"/>
  <changelog author="bwiedemann@suse.com" date="1500638400">- Sort SHARED_MODS list to fix build compare (boo#1041090)</changelog>
  <changelog author="chris@computersalat.de" date="1531224000">- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1531310400">- update to 1.3.6
  * Support for using Redis for caching, logging; see the doc/howto/Redis.html
    documentation.
  * Fixed mod_sql_postgres SSL support (Issue #415).
  * Support building against LibreSSL instead of OpenSSL (Issue #361).
  * Better support on AIX for login restraictions (Bug #4285).
  * TimeoutLogin (and other timeouts) were not working properly for SFTP
    connections (Bug#4299).
  * Handling of the SIGILL and SIGINT signals, by the daemon process, now causes
    the child processes to be terminated as well (Issue #461).
  * RPM .spec file naming changed to conform to Fedora guidelines.
  * Fix for "AllowChrootSymlinks off" checking each component for symlinks
    (CVE-2017-7418).
  - New Modules:
  * mod_redis, mod_tls_redis, mod_wrap2_redis
    With Redis now supported as a caching mechanism, similar to Memcache,
    there are now Redis-using modules: mod_redis (for configuring the Redis
    connection information), mod_tls_redis (for caching SSL sessions and
    OCSP information using Redis), and mod_wrap2_redis (for using ACLs stored
    in Redis).
  - Changed Modules:
  * mod_ban
    The mod_ban module's BanCache directive can now use Redis-based caching;
    see doc/contrib/mod_ban.html#BanCache.
  - New Configuration Directives
  * SQLPasswordArgon2, SQLPasswordScrypt
    The key lengths for Argon2 and Scrypt-based passwords are now configurable
    via these new directives; previously, the key length had been hardcoded
    to be 32 bytes, which is not interoperable with all other implementations
    (Issue #454).
  - Changed Configuration Directives
  * AllowChrootSymlinks
    When "AllowChrootSymlinks off" was used, only the last portion of the
    DefaultRoot path would be checked to see if it was a symlink.  Now,
    each component of the DefaultRoot path will be checked to see if it is
    a symlink when "AllowChrootSymlinks off" is used.
  * Include
    The Include directive can now be used within a &lt;Limit&gt; section, e.g.:
    &lt;Limit LOGIN&gt;
    Include /path/to/allowed.txt
    DenyAll
    &lt;/Limit&gt;
  - API Changes
  * A new JSON API has been added, for use by third-party modules.
- remove obsolete proftpd_include-in-limit-section.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
</package>
<package pkgid="0ab5b1767ade351b7f4afc4df9c3b512cd225bed07364ab93623b6d02cfb536d" name="proftpd-ldap" arch="s390x">
  <version epoch="0" ver="1.3.7e" rel="bp154.3.3.1"/>
  <changelog author="bwiedemann@suse.com" date="1500638400">- Sort SHARED_MODS list to fix build compare (boo#1041090)</changelog>
  <changelog author="chris@computersalat.de" date="1531224000">- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1531310400">- update to 1.3.6
  * Support for using Redis for caching, logging; see the doc/howto/Redis.html
    documentation.
  * Fixed mod_sql_postgres SSL support (Issue #415).
  * Support building against LibreSSL instead of OpenSSL (Issue #361).
  * Better support on AIX for login restraictions (Bug #4285).
  * TimeoutLogin (and other timeouts) were not working properly for SFTP
    connections (Bug#4299).
  * Handling of the SIGILL and SIGINT signals, by the daemon process, now causes
    the child processes to be terminated as well (Issue #461).
  * RPM .spec file naming changed to conform to Fedora guidelines.
  * Fix for "AllowChrootSymlinks off" checking each component for symlinks
    (CVE-2017-7418).
  - New Modules:
  * mod_redis, mod_tls_redis, mod_wrap2_redis
    With Redis now supported as a caching mechanism, similar to Memcache,
    there are now Redis-using modules: mod_redis (for configuring the Redis
    connection information), mod_tls_redis (for caching SSL sessions and
    OCSP information using Redis), and mod_wrap2_redis (for using ACLs stored
    in Redis).
  - Changed Modules:
  * mod_ban
    The mod_ban module's BanCache directive can now use Redis-based caching;
    see doc/contrib/mod_ban.html#BanCache.
  - New Configuration Directives
  * SQLPasswordArgon2, SQLPasswordScrypt
    The key lengths for Argon2 and Scrypt-based passwords are now configurable
    via these new directives; previously, the key length had been hardcoded
    to be 32 bytes, which is not interoperable with all other implementations
    (Issue #454).
  - Changed Configuration Directives
  * AllowChrootSymlinks
    When "AllowChrootSymlinks off" was used, only the last portion of the
    DefaultRoot path would be checked to see if it was a symlink.  Now,
    each component of the DefaultRoot path will be checked to see if it is
    a symlink when "AllowChrootSymlinks off" is used.
  * Include
    The Include directive can now be used within a &lt;Limit&gt; section, e.g.:
    &lt;Limit LOGIN&gt;
    Include /path/to/allowed.txt
    DenyAll
    &lt;/Limit&gt;
  - API Changes
  * A new JSON API has been added, for use by third-party modules.
- remove obsolete proftpd_include-in-limit-section.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
</package>
<package pkgid="66f1eb5248d2a0a0dae93e91cc3b555d2f0e63e8f81dd4b70055437a6cbaced4" name="proftpd-ldap" arch="x86_64">
  <version epoch="0" ver="1.3.7e" rel="bp154.3.3.1"/>
  <changelog author="bwiedemann@suse.com" date="1500638400">- Sort SHARED_MODS list to fix build compare (boo#1041090)</changelog>
  <changelog author="chris@computersalat.de" date="1531224000">- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1531310400">- update to 1.3.6
  * Support for using Redis for caching, logging; see the doc/howto/Redis.html
    documentation.
  * Fixed mod_sql_postgres SSL support (Issue #415).
  * Support building against LibreSSL instead of OpenSSL (Issue #361).
  * Better support on AIX for login restraictions (Bug #4285).
  * TimeoutLogin (and other timeouts) were not working properly for SFTP
    connections (Bug#4299).
  * Handling of the SIGILL and SIGINT signals, by the daemon process, now causes
    the child processes to be terminated as well (Issue #461).
  * RPM .spec file naming changed to conform to Fedora guidelines.
  * Fix for "AllowChrootSymlinks off" checking each component for symlinks
    (CVE-2017-7418).
  - New Modules:
  * mod_redis, mod_tls_redis, mod_wrap2_redis
    With Redis now supported as a caching mechanism, similar to Memcache,
    there are now Redis-using modules: mod_redis (for configuring the Redis
    connection information), mod_tls_redis (for caching SSL sessions and
    OCSP information using Redis), and mod_wrap2_redis (for using ACLs stored
    in Redis).
  - Changed Modules:
  * mod_ban
    The mod_ban module's BanCache directive can now use Redis-based caching;
    see doc/contrib/mod_ban.html#BanCache.
  - New Configuration Directives
  * SQLPasswordArgon2, SQLPasswordScrypt
    The key lengths for Argon2 and Scrypt-based passwords are now configurable
    via these new directives; previously, the key length had been hardcoded
    to be 32 bytes, which is not interoperable with all other implementations
    (Issue #454).
  - Changed Configuration Directives
  * AllowChrootSymlinks
    When "AllowChrootSymlinks off" was used, only the last portion of the
    DefaultRoot path would be checked to see if it was a symlink.  Now,
    each component of the DefaultRoot path will be checked to see if it is
    a symlink when "AllowChrootSymlinks off" is used.
  * Include
    The Include directive can now be used within a &lt;Limit&gt; section, e.g.:
    &lt;Limit LOGIN&gt;
    Include /path/to/allowed.txt
    DenyAll
    &lt;/Limit&gt;
  - API Changes
  * A new JSON API has been added, for use by third-party modules.
- remove obsolete proftpd_include-in-limit-section.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
</package>
<package pkgid="1e676306dad1eb8ffc1891e677398dee30bd4828e8debd3b77c305ed766960d2" name="proftpd-ldap" arch="aarch64">
  <version epoch="0" ver="1.3.7e" rel="bp154.3.6.1"/>
  <changelog author="chris@computersalat.de" date="1531224000">- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1531310400">- update to 1.3.6
  * Support for using Redis for caching, logging; see the doc/howto/Redis.html
    documentation.
  * Fixed mod_sql_postgres SSL support (Issue #415).
  * Support building against LibreSSL instead of OpenSSL (Issue #361).
  * Better support on AIX for login restraictions (Bug #4285).
  * TimeoutLogin (and other timeouts) were not working properly for SFTP
    connections (Bug#4299).
  * Handling of the SIGILL and SIGINT signals, by the daemon process, now causes
    the child processes to be terminated as well (Issue #461).
  * RPM .spec file naming changed to conform to Fedora guidelines.
  * Fix for "AllowChrootSymlinks off" checking each component for symlinks
    (CVE-2017-7418).
  - New Modules:
  * mod_redis, mod_tls_redis, mod_wrap2_redis
    With Redis now supported as a caching mechanism, similar to Memcache,
    there are now Redis-using modules: mod_redis (for configuring the Redis
    connection information), mod_tls_redis (for caching SSL sessions and
    OCSP information using Redis), and mod_wrap2_redis (for using ACLs stored
    in Redis).
  - Changed Modules:
  * mod_ban
    The mod_ban module's BanCache directive can now use Redis-based caching;
    see doc/contrib/mod_ban.html#BanCache.
  - New Configuration Directives
  * SQLPasswordArgon2, SQLPasswordScrypt
    The key lengths for Argon2 and Scrypt-based passwords are now configurable
    via these new directives; previously, the key length had been hardcoded
    to be 32 bytes, which is not interoperable with all other implementations
    (Issue #454).
  - Changed Configuration Directives
  * AllowChrootSymlinks
    When "AllowChrootSymlinks off" was used, only the last portion of the
    DefaultRoot path would be checked to see if it was a symlink.  Now,
    each component of the DefaultRoot path will be checked to see if it is
    a symlink when "AllowChrootSymlinks off" is used.
  * Include
    The Include directive can now be used within a &lt;Limit&gt; section, e.g.:
    &lt;Limit LOGIN&gt;
    Include /path/to/allowed.txt
    DenyAll
    &lt;/Limit&gt;
  - API Changes
  * A new JSON API has been added, for use by third-party modules.
- remove obsolete proftpd_include-in-limit-section.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="chris@computersalat.de" date="1662033600">- Update proftpd-basic.conf.patch
  * remove obsolete config option, LoginPasswordPrompt
- rework proftpd-dist.patch</changelog>
</package>
<package pkgid="aefb454d416ae89e929cd2d29529cc7470865094677b66db96fcfd9a5965a401" name="proftpd-ldap" arch="i586">
  <version epoch="0" ver="1.3.7e" rel="bp154.3.6.1"/>
  <changelog author="chris@computersalat.de" date="1531224000">- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1531310400">- update to 1.3.6
  * Support for using Redis for caching, logging; see the doc/howto/Redis.html
    documentation.
  * Fixed mod_sql_postgres SSL support (Issue #415).
  * Support building against LibreSSL instead of OpenSSL (Issue #361).
  * Better support on AIX for login restraictions (Bug #4285).
  * TimeoutLogin (and other timeouts) were not working properly for SFTP
    connections (Bug#4299).
  * Handling of the SIGILL and SIGINT signals, by the daemon process, now causes
    the child processes to be terminated as well (Issue #461).
  * RPM .spec file naming changed to conform to Fedora guidelines.
  * Fix for "AllowChrootSymlinks off" checking each component for symlinks
    (CVE-2017-7418).
  - New Modules:
  * mod_redis, mod_tls_redis, mod_wrap2_redis
    With Redis now supported as a caching mechanism, similar to Memcache,
    there are now Redis-using modules: mod_redis (for configuring the Redis
    connection information), mod_tls_redis (for caching SSL sessions and
    OCSP information using Redis), and mod_wrap2_redis (for using ACLs stored
    in Redis).
  - Changed Modules:
  * mod_ban
    The mod_ban module's BanCache directive can now use Redis-based caching;
    see doc/contrib/mod_ban.html#BanCache.
  - New Configuration Directives
  * SQLPasswordArgon2, SQLPasswordScrypt
    The key lengths for Argon2 and Scrypt-based passwords are now configurable
    via these new directives; previously, the key length had been hardcoded
    to be 32 bytes, which is not interoperable with all other implementations
    (Issue #454).
  - Changed Configuration Directives
  * AllowChrootSymlinks
    When "AllowChrootSymlinks off" was used, only the last portion of the
    DefaultRoot path would be checked to see if it was a symlink.  Now,
    each component of the DefaultRoot path will be checked to see if it is
    a symlink when "AllowChrootSymlinks off" is used.
  * Include
    The Include directive can now be used within a &lt;Limit&gt; section, e.g.:
    &lt;Limit LOGIN&gt;
    Include /path/to/allowed.txt
    DenyAll
    &lt;/Limit&gt;
  - API Changes
  * A new JSON API has been added, for use by third-party modules.
- remove obsolete proftpd_include-in-limit-section.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="chris@computersalat.de" date="1662033600">- Update proftpd-basic.conf.patch
  * remove obsolete config option, LoginPasswordPrompt
- rework proftpd-dist.patch</changelog>
</package>
<package pkgid="050b22cd28f976626df05915610401459e5c8001b2a85784c0f3e20d7e444424" name="proftpd-ldap" arch="ppc64le">
  <version epoch="0" ver="1.3.7e" rel="bp154.3.6.1"/>
  <changelog author="chris@computersalat.de" date="1531224000">- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1531310400">- update to 1.3.6
  * Support for using Redis for caching, logging; see the doc/howto/Redis.html
    documentation.
  * Fixed mod_sql_postgres SSL support (Issue #415).
  * Support building against LibreSSL instead of OpenSSL (Issue #361).
  * Better support on AIX for login restraictions (Bug #4285).
  * TimeoutLogin (and other timeouts) were not working properly for SFTP
    connections (Bug#4299).
  * Handling of the SIGILL and SIGINT signals, by the daemon process, now causes
    the child processes to be terminated as well (Issue #461).
  * RPM .spec file naming changed to conform to Fedora guidelines.
  * Fix for "AllowChrootSymlinks off" checking each component for symlinks
    (CVE-2017-7418).
  - New Modules:
  * mod_redis, mod_tls_redis, mod_wrap2_redis
    With Redis now supported as a caching mechanism, similar to Memcache,
    there are now Redis-using modules: mod_redis (for configuring the Redis
    connection information), mod_tls_redis (for caching SSL sessions and
    OCSP information using Redis), and mod_wrap2_redis (for using ACLs stored
    in Redis).
  - Changed Modules:
  * mod_ban
    The mod_ban module's BanCache directive can now use Redis-based caching;
    see doc/contrib/mod_ban.html#BanCache.
  - New Configuration Directives
  * SQLPasswordArgon2, SQLPasswordScrypt
    The key lengths for Argon2 and Scrypt-based passwords are now configurable
    via these new directives; previously, the key length had been hardcoded
    to be 32 bytes, which is not interoperable with all other implementations
    (Issue #454).
  - Changed Configuration Directives
  * AllowChrootSymlinks
    When "AllowChrootSymlinks off" was used, only the last portion of the
    DefaultRoot path would be checked to see if it was a symlink.  Now,
    each component of the DefaultRoot path will be checked to see if it is
    a symlink when "AllowChrootSymlinks off" is used.
  * Include
    The Include directive can now be used within a &lt;Limit&gt; section, e.g.:
    &lt;Limit LOGIN&gt;
    Include /path/to/allowed.txt
    DenyAll
    &lt;/Limit&gt;
  - API Changes
  * A new JSON API has been added, for use by third-party modules.
- remove obsolete proftpd_include-in-limit-section.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="chris@computersalat.de" date="1662033600">- Update proftpd-basic.conf.patch
  * remove obsolete config option, LoginPasswordPrompt
- rework proftpd-dist.patch</changelog>
</package>
<package pkgid="fcaa855437c081cf6b5879110a0db881a7aa4e5a6f506d12f44c04b99e44802d" name="proftpd-ldap" arch="s390x">
  <version epoch="0" ver="1.3.7e" rel="bp154.3.6.1"/>
  <changelog author="chris@computersalat.de" date="1531224000">- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1531310400">- update to 1.3.6
  * Support for using Redis for caching, logging; see the doc/howto/Redis.html
    documentation.
  * Fixed mod_sql_postgres SSL support (Issue #415).
  * Support building against LibreSSL instead of OpenSSL (Issue #361).
  * Better support on AIX for login restraictions (Bug #4285).
  * TimeoutLogin (and other timeouts) were not working properly for SFTP
    connections (Bug#4299).
  * Handling of the SIGILL and SIGINT signals, by the daemon process, now causes
    the child processes to be terminated as well (Issue #461).
  * RPM .spec file naming changed to conform to Fedora guidelines.
  * Fix for "AllowChrootSymlinks off" checking each component for symlinks
    (CVE-2017-7418).
  - New Modules:
  * mod_redis, mod_tls_redis, mod_wrap2_redis
    With Redis now supported as a caching mechanism, similar to Memcache,
    there are now Redis-using modules: mod_redis (for configuring the Redis
    connection information), mod_tls_redis (for caching SSL sessions and
    OCSP information using Redis), and mod_wrap2_redis (for using ACLs stored
    in Redis).
  - Changed Modules:
  * mod_ban
    The mod_ban module's BanCache directive can now use Redis-based caching;
    see doc/contrib/mod_ban.html#BanCache.
  - New Configuration Directives
  * SQLPasswordArgon2, SQLPasswordScrypt
    The key lengths for Argon2 and Scrypt-based passwords are now configurable
    via these new directives; previously, the key length had been hardcoded
    to be 32 bytes, which is not interoperable with all other implementations
    (Issue #454).
  - Changed Configuration Directives
  * AllowChrootSymlinks
    When "AllowChrootSymlinks off" was used, only the last portion of the
    DefaultRoot path would be checked to see if it was a symlink.  Now,
    each component of the DefaultRoot path will be checked to see if it is
    a symlink when "AllowChrootSymlinks off" is used.
  * Include
    The Include directive can now be used within a &lt;Limit&gt; section, e.g.:
    &lt;Limit LOGIN&gt;
    Include /path/to/allowed.txt
    DenyAll
    &lt;/Limit&gt;
  - API Changes
  * A new JSON API has been added, for use by third-party modules.
- remove obsolete proftpd_include-in-limit-section.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="chris@computersalat.de" date="1662033600">- Update proftpd-basic.conf.patch
  * remove obsolete config option, LoginPasswordPrompt
- rework proftpd-dist.patch</changelog>
</package>
<package pkgid="23aff2791f35a1d4c4171657588094b62383584dee9b077803cceb531abfaa8a" name="proftpd-ldap" arch="x86_64">
  <version epoch="0" ver="1.3.7e" rel="bp154.3.6.1"/>
  <changelog author="chris@computersalat.de" date="1531224000">- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1531310400">- update to 1.3.6
  * Support for using Redis for caching, logging; see the doc/howto/Redis.html
    documentation.
  * Fixed mod_sql_postgres SSL support (Issue #415).
  * Support building against LibreSSL instead of OpenSSL (Issue #361).
  * Better support on AIX for login restraictions (Bug #4285).
  * TimeoutLogin (and other timeouts) were not working properly for SFTP
    connections (Bug#4299).
  * Handling of the SIGILL and SIGINT signals, by the daemon process, now causes
    the child processes to be terminated as well (Issue #461).
  * RPM .spec file naming changed to conform to Fedora guidelines.
  * Fix for "AllowChrootSymlinks off" checking each component for symlinks
    (CVE-2017-7418).
  - New Modules:
  * mod_redis, mod_tls_redis, mod_wrap2_redis
    With Redis now supported as a caching mechanism, similar to Memcache,
    there are now Redis-using modules: mod_redis (for configuring the Redis
    connection information), mod_tls_redis (for caching SSL sessions and
    OCSP information using Redis), and mod_wrap2_redis (for using ACLs stored
    in Redis).
  - Changed Modules:
  * mod_ban
    The mod_ban module's BanCache directive can now use Redis-based caching;
    see doc/contrib/mod_ban.html#BanCache.
  - New Configuration Directives
  * SQLPasswordArgon2, SQLPasswordScrypt
    The key lengths for Argon2 and Scrypt-based passwords are now configurable
    via these new directives; previously, the key length had been hardcoded
    to be 32 bytes, which is not interoperable with all other implementations
    (Issue #454).
  - Changed Configuration Directives
  * AllowChrootSymlinks
    When "AllowChrootSymlinks off" was used, only the last portion of the
    DefaultRoot path would be checked to see if it was a symlink.  Now,
    each component of the DefaultRoot path will be checked to see if it is
    a symlink when "AllowChrootSymlinks off" is used.
  * Include
    The Include directive can now be used within a &lt;Limit&gt; section, e.g.:
    &lt;Limit LOGIN&gt;
    Include /path/to/allowed.txt
    DenyAll
    &lt;/Limit&gt;
  - API Changes
  * A new JSON API has been added, for use by third-party modules.
- remove obsolete proftpd_include-in-limit-section.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="chris@computersalat.de" date="1662033600">- Update proftpd-basic.conf.patch
  * remove obsolete config option, LoginPasswordPrompt
- rework proftpd-dist.patch</changelog>
</package>
<package pkgid="a3c77532d84c800f2d4b2383ce515c23811d5f516e709cde3abd5b48e2f860dd" name="proftpd-ldap" arch="aarch64">
  <version epoch="0" ver="1.3.7f" rel="bp154.3.9.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="chris@computersalat.de" date="1662033600">- Update proftpd-basic.conf.patch
  * remove obsolete config option, LoginPasswordPrompt
- rework proftpd-dist.patch</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1673870400">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="chris@computersalat.de" date="1674648000">- 1.3.7f - Released 04-Dec-2022
  * Issue 1533 - mod_tls module unexpectedly allows TLS handshake after
    authentication in some configurations.
  * Bug 4491 - unable to verify signed data: signature type 'rsa-sha2-512' does
    not match publickey algorithm 'ssh-rsa'.</changelog>
</package>
<package pkgid="05ce33d44af7aa8bb9748430201fd1b0a0f1a26077b457cd33208e7c213f1ab1" name="proftpd-ldap" arch="i586">
  <version epoch="0" ver="1.3.7f" rel="bp154.3.9.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="chris@computersalat.de" date="1662033600">- Update proftpd-basic.conf.patch
  * remove obsolete config option, LoginPasswordPrompt
- rework proftpd-dist.patch</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1673870400">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="chris@computersalat.de" date="1674648000">- 1.3.7f - Released 04-Dec-2022
  * Issue 1533 - mod_tls module unexpectedly allows TLS handshake after
    authentication in some configurations.
  * Bug 4491 - unable to verify signed data: signature type 'rsa-sha2-512' does
    not match publickey algorithm 'ssh-rsa'.</changelog>
</package>
<package pkgid="98c86b4242b1a27a3561134cf0fd9f70998dd4359c8307db4c25470d6ccd733a" name="proftpd-ldap" arch="ppc64le">
  <version epoch="0" ver="1.3.7f" rel="bp154.3.9.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="chris@computersalat.de" date="1662033600">- Update proftpd-basic.conf.patch
  * remove obsolete config option, LoginPasswordPrompt
- rework proftpd-dist.patch</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1673870400">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="chris@computersalat.de" date="1674648000">- 1.3.7f - Released 04-Dec-2022
  * Issue 1533 - mod_tls module unexpectedly allows TLS handshake after
    authentication in some configurations.
  * Bug 4491 - unable to verify signed data: signature type 'rsa-sha2-512' does
    not match publickey algorithm 'ssh-rsa'.</changelog>
</package>
<package pkgid="7878bf998e25ae2924036299c583021034935ea8ce0731a29e845d483fcff089" name="proftpd-ldap" arch="s390x">
  <version epoch="0" ver="1.3.7f" rel="bp154.3.9.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="chris@computersalat.de" date="1662033600">- Update proftpd-basic.conf.patch
  * remove obsolete config option, LoginPasswordPrompt
- rework proftpd-dist.patch</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1673870400">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="chris@computersalat.de" date="1674648000">- 1.3.7f - Released 04-Dec-2022
  * Issue 1533 - mod_tls module unexpectedly allows TLS handshake after
    authentication in some configurations.
  * Bug 4491 - unable to verify signed data: signature type 'rsa-sha2-512' does
    not match publickey algorithm 'ssh-rsa'.</changelog>
</package>
<package pkgid="5ce34ff3e9dbfb52f29cd484ccaff9fa2b56689cc98097a5069601ab01d0cd19" name="proftpd-ldap" arch="x86_64">
  <version epoch="0" ver="1.3.7f" rel="bp154.3.9.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="chris@computersalat.de" date="1662033600">- Update proftpd-basic.conf.patch
  * remove obsolete config option, LoginPasswordPrompt
- rework proftpd-dist.patch</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1673870400">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="chris@computersalat.de" date="1674648000">- 1.3.7f - Released 04-Dec-2022
  * Issue 1533 - mod_tls module unexpectedly allows TLS handshake after
    authentication in some configurations.
  * Bug 4491 - unable to verify signed data: signature type 'rsa-sha2-512' does
    not match publickey algorithm 'ssh-rsa'.</changelog>
</package>
<package pkgid="1210143fff5a8583ce81593c61485427733322d7f7fa2331f436d1968d02d49d" name="proftpd-mysql" arch="aarch64">
  <version epoch="0" ver="1.3.7e" rel="bp154.3.3.1"/>
  <changelog author="bwiedemann@suse.com" date="1500638400">- Sort SHARED_MODS list to fix build compare (boo#1041090)</changelog>
  <changelog author="chris@computersalat.de" date="1531224000">- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1531310400">- update to 1.3.6
  * Support for using Redis for caching, logging; see the doc/howto/Redis.html
    documentation.
  * Fixed mod_sql_postgres SSL support (Issue #415).
  * Support building against LibreSSL instead of OpenSSL (Issue #361).
  * Better support on AIX for login restraictions (Bug #4285).
  * TimeoutLogin (and other timeouts) were not working properly for SFTP
    connections (Bug#4299).
  * Handling of the SIGILL and SIGINT signals, by the daemon process, now causes
    the child processes to be terminated as well (Issue #461).
  * RPM .spec file naming changed to conform to Fedora guidelines.
  * Fix for "AllowChrootSymlinks off" checking each component for symlinks
    (CVE-2017-7418).
  - New Modules:
  * mod_redis, mod_tls_redis, mod_wrap2_redis
    With Redis now supported as a caching mechanism, similar to Memcache,
    there are now Redis-using modules: mod_redis (for configuring the Redis
    connection information), mod_tls_redis (for caching SSL sessions and
    OCSP information using Redis), and mod_wrap2_redis (for using ACLs stored
    in Redis).
  - Changed Modules:
  * mod_ban
    The mod_ban module's BanCache directive can now use Redis-based caching;
    see doc/contrib/mod_ban.html#BanCache.
  - New Configuration Directives
  * SQLPasswordArgon2, SQLPasswordScrypt
    The key lengths for Argon2 and Scrypt-based passwords are now configurable
    via these new directives; previously, the key length had been hardcoded
    to be 32 bytes, which is not interoperable with all other implementations
    (Issue #454).
  - Changed Configuration Directives
  * AllowChrootSymlinks
    When "AllowChrootSymlinks off" was used, only the last portion of the
    DefaultRoot path would be checked to see if it was a symlink.  Now,
    each component of the DefaultRoot path will be checked to see if it is
    a symlink when "AllowChrootSymlinks off" is used.
  * Include
    The Include directive can now be used within a &lt;Limit&gt; section, e.g.:
    &lt;Limit LOGIN&gt;
    Include /path/to/allowed.txt
    DenyAll
    &lt;/Limit&gt;
  - API Changes
  * A new JSON API has been added, for use by third-party modules.
- remove obsolete proftpd_include-in-limit-section.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
</package>
<package pkgid="b6c27702610c7850fa03723787457acb9aae67ea34b3a4ba8d4e73d965e7a22d" name="proftpd-mysql" arch="i586">
  <version epoch="0" ver="1.3.7e" rel="bp154.3.3.1"/>
  <changelog author="bwiedemann@suse.com" date="1500638400">- Sort SHARED_MODS list to fix build compare (boo#1041090)</changelog>
  <changelog author="chris@computersalat.de" date="1531224000">- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1531310400">- update to 1.3.6
  * Support for using Redis for caching, logging; see the doc/howto/Redis.html
    documentation.
  * Fixed mod_sql_postgres SSL support (Issue #415).
  * Support building against LibreSSL instead of OpenSSL (Issue #361).
  * Better support on AIX for login restraictions (Bug #4285).
  * TimeoutLogin (and other timeouts) were not working properly for SFTP
    connections (Bug#4299).
  * Handling of the SIGILL and SIGINT signals, by the daemon process, now causes
    the child processes to be terminated as well (Issue #461).
  * RPM .spec file naming changed to conform to Fedora guidelines.
  * Fix for "AllowChrootSymlinks off" checking each component for symlinks
    (CVE-2017-7418).
  - New Modules:
  * mod_redis, mod_tls_redis, mod_wrap2_redis
    With Redis now supported as a caching mechanism, similar to Memcache,
    there are now Redis-using modules: mod_redis (for configuring the Redis
    connection information), mod_tls_redis (for caching SSL sessions and
    OCSP information using Redis), and mod_wrap2_redis (for using ACLs stored
    in Redis).
  - Changed Modules:
  * mod_ban
    The mod_ban module's BanCache directive can now use Redis-based caching;
    see doc/contrib/mod_ban.html#BanCache.
  - New Configuration Directives
  * SQLPasswordArgon2, SQLPasswordScrypt
    The key lengths for Argon2 and Scrypt-based passwords are now configurable
    via these new directives; previously, the key length had been hardcoded
    to be 32 bytes, which is not interoperable with all other implementations
    (Issue #454).
  - Changed Configuration Directives
  * AllowChrootSymlinks
    When "AllowChrootSymlinks off" was used, only the last portion of the
    DefaultRoot path would be checked to see if it was a symlink.  Now,
    each component of the DefaultRoot path will be checked to see if it is
    a symlink when "AllowChrootSymlinks off" is used.
  * Include
    The Include directive can now be used within a &lt;Limit&gt; section, e.g.:
    &lt;Limit LOGIN&gt;
    Include /path/to/allowed.txt
    DenyAll
    &lt;/Limit&gt;
  - API Changes
  * A new JSON API has been added, for use by third-party modules.
- remove obsolete proftpd_include-in-limit-section.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
</package>
<package pkgid="e9ccba598ff23d46af6b8bbd1c15f41efae516978702639665fe524ab9e38fa9" name="proftpd-mysql" arch="ppc64le">
  <version epoch="0" ver="1.3.7e" rel="bp154.3.3.1"/>
  <changelog author="bwiedemann@suse.com" date="1500638400">- Sort SHARED_MODS list to fix build compare (boo#1041090)</changelog>
  <changelog author="chris@computersalat.de" date="1531224000">- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1531310400">- update to 1.3.6
  * Support for using Redis for caching, logging; see the doc/howto/Redis.html
    documentation.
  * Fixed mod_sql_postgres SSL support (Issue #415).
  * Support building against LibreSSL instead of OpenSSL (Issue #361).
  * Better support on AIX for login restraictions (Bug #4285).
  * TimeoutLogin (and other timeouts) were not working properly for SFTP
    connections (Bug#4299).
  * Handling of the SIGILL and SIGINT signals, by the daemon process, now causes
    the child processes to be terminated as well (Issue #461).
  * RPM .spec file naming changed to conform to Fedora guidelines.
  * Fix for "AllowChrootSymlinks off" checking each component for symlinks
    (CVE-2017-7418).
  - New Modules:
  * mod_redis, mod_tls_redis, mod_wrap2_redis
    With Redis now supported as a caching mechanism, similar to Memcache,
    there are now Redis-using modules: mod_redis (for configuring the Redis
    connection information), mod_tls_redis (for caching SSL sessions and
    OCSP information using Redis), and mod_wrap2_redis (for using ACLs stored
    in Redis).
  - Changed Modules:
  * mod_ban
    The mod_ban module's BanCache directive can now use Redis-based caching;
    see doc/contrib/mod_ban.html#BanCache.
  - New Configuration Directives
  * SQLPasswordArgon2, SQLPasswordScrypt
    The key lengths for Argon2 and Scrypt-based passwords are now configurable
    via these new directives; previously, the key length had been hardcoded
    to be 32 bytes, which is not interoperable with all other implementations
    (Issue #454).
  - Changed Configuration Directives
  * AllowChrootSymlinks
    When "AllowChrootSymlinks off" was used, only the last portion of the
    DefaultRoot path would be checked to see if it was a symlink.  Now,
    each component of the DefaultRoot path will be checked to see if it is
    a symlink when "AllowChrootSymlinks off" is used.
  * Include
    The Include directive can now be used within a &lt;Limit&gt; section, e.g.:
    &lt;Limit LOGIN&gt;
    Include /path/to/allowed.txt
    DenyAll
    &lt;/Limit&gt;
  - API Changes
  * A new JSON API has been added, for use by third-party modules.
- remove obsolete proftpd_include-in-limit-section.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
</package>
<package pkgid="059bd52481dc41dd9bd2d24b6a4b56c4d70daef788fe603f96785f507e820d18" name="proftpd-mysql" arch="s390x">
  <version epoch="0" ver="1.3.7e" rel="bp154.3.3.1"/>
  <changelog author="bwiedemann@suse.com" date="1500638400">- Sort SHARED_MODS list to fix build compare (boo#1041090)</changelog>
  <changelog author="chris@computersalat.de" date="1531224000">- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1531310400">- update to 1.3.6
  * Support for using Redis for caching, logging; see the doc/howto/Redis.html
    documentation.
  * Fixed mod_sql_postgres SSL support (Issue #415).
  * Support building against LibreSSL instead of OpenSSL (Issue #361).
  * Better support on AIX for login restraictions (Bug #4285).
  * TimeoutLogin (and other timeouts) were not working properly for SFTP
    connections (Bug#4299).
  * Handling of the SIGILL and SIGINT signals, by the daemon process, now causes
    the child processes to be terminated as well (Issue #461).
  * RPM .spec file naming changed to conform to Fedora guidelines.
  * Fix for "AllowChrootSymlinks off" checking each component for symlinks
    (CVE-2017-7418).
  - New Modules:
  * mod_redis, mod_tls_redis, mod_wrap2_redis
    With Redis now supported as a caching mechanism, similar to Memcache,
    there are now Redis-using modules: mod_redis (for configuring the Redis
    connection information), mod_tls_redis (for caching SSL sessions and
    OCSP information using Redis), and mod_wrap2_redis (for using ACLs stored
    in Redis).
  - Changed Modules:
  * mod_ban
    The mod_ban module's BanCache directive can now use Redis-based caching;
    see doc/contrib/mod_ban.html#BanCache.
  - New Configuration Directives
  * SQLPasswordArgon2, SQLPasswordScrypt
    The key lengths for Argon2 and Scrypt-based passwords are now configurable
    via these new directives; previously, the key length had been hardcoded
    to be 32 bytes, which is not interoperable with all other implementations
    (Issue #454).
  - Changed Configuration Directives
  * AllowChrootSymlinks
    When "AllowChrootSymlinks off" was used, only the last portion of the
    DefaultRoot path would be checked to see if it was a symlink.  Now,
    each component of the DefaultRoot path will be checked to see if it is
    a symlink when "AllowChrootSymlinks off" is used.
  * Include
    The Include directive can now be used within a &lt;Limit&gt; section, e.g.:
    &lt;Limit LOGIN&gt;
    Include /path/to/allowed.txt
    DenyAll
    &lt;/Limit&gt;
  - API Changes
  * A new JSON API has been added, for use by third-party modules.
- remove obsolete proftpd_include-in-limit-section.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
</package>
<package pkgid="57c14e535bf30d0343142ee8ddb2e308f76d41e9e1e0204509ecb7eae45fe29b" name="proftpd-mysql" arch="x86_64">
  <version epoch="0" ver="1.3.7e" rel="bp154.3.3.1"/>
  <changelog author="bwiedemann@suse.com" date="1500638400">- Sort SHARED_MODS list to fix build compare (boo#1041090)</changelog>
  <changelog author="chris@computersalat.de" date="1531224000">- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1531310400">- update to 1.3.6
  * Support for using Redis for caching, logging; see the doc/howto/Redis.html
    documentation.
  * Fixed mod_sql_postgres SSL support (Issue #415).
  * Support building against LibreSSL instead of OpenSSL (Issue #361).
  * Better support on AIX for login restraictions (Bug #4285).
  * TimeoutLogin (and other timeouts) were not working properly for SFTP
    connections (Bug#4299).
  * Handling of the SIGILL and SIGINT signals, by the daemon process, now causes
    the child processes to be terminated as well (Issue #461).
  * RPM .spec file naming changed to conform to Fedora guidelines.
  * Fix for "AllowChrootSymlinks off" checking each component for symlinks
    (CVE-2017-7418).
  - New Modules:
  * mod_redis, mod_tls_redis, mod_wrap2_redis
    With Redis now supported as a caching mechanism, similar to Memcache,
    there are now Redis-using modules: mod_redis (for configuring the Redis
    connection information), mod_tls_redis (for caching SSL sessions and
    OCSP information using Redis), and mod_wrap2_redis (for using ACLs stored
    in Redis).
  - Changed Modules:
  * mod_ban
    The mod_ban module's BanCache directive can now use Redis-based caching;
    see doc/contrib/mod_ban.html#BanCache.
  - New Configuration Directives
  * SQLPasswordArgon2, SQLPasswordScrypt
    The key lengths for Argon2 and Scrypt-based passwords are now configurable
    via these new directives; previously, the key length had been hardcoded
    to be 32 bytes, which is not interoperable with all other implementations
    (Issue #454).
  - Changed Configuration Directives
  * AllowChrootSymlinks
    When "AllowChrootSymlinks off" was used, only the last portion of the
    DefaultRoot path would be checked to see if it was a symlink.  Now,
    each component of the DefaultRoot path will be checked to see if it is
    a symlink when "AllowChrootSymlinks off" is used.
  * Include
    The Include directive can now be used within a &lt;Limit&gt; section, e.g.:
    &lt;Limit LOGIN&gt;
    Include /path/to/allowed.txt
    DenyAll
    &lt;/Limit&gt;
  - API Changes
  * A new JSON API has been added, for use by third-party modules.
- remove obsolete proftpd_include-in-limit-section.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
</package>
<package pkgid="a769e35917671d95958962599174d5a60e1d1a26f65b45dc8f667b75609c1af2" name="proftpd-mysql" arch="aarch64">
  <version epoch="0" ver="1.3.7e" rel="bp154.3.6.1"/>
  <changelog author="chris@computersalat.de" date="1531224000">- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1531310400">- update to 1.3.6
  * Support for using Redis for caching, logging; see the doc/howto/Redis.html
    documentation.
  * Fixed mod_sql_postgres SSL support (Issue #415).
  * Support building against LibreSSL instead of OpenSSL (Issue #361).
  * Better support on AIX for login restraictions (Bug #4285).
  * TimeoutLogin (and other timeouts) were not working properly for SFTP
    connections (Bug#4299).
  * Handling of the SIGILL and SIGINT signals, by the daemon process, now causes
    the child processes to be terminated as well (Issue #461).
  * RPM .spec file naming changed to conform to Fedora guidelines.
  * Fix for "AllowChrootSymlinks off" checking each component for symlinks
    (CVE-2017-7418).
  - New Modules:
  * mod_redis, mod_tls_redis, mod_wrap2_redis
    With Redis now supported as a caching mechanism, similar to Memcache,
    there are now Redis-using modules: mod_redis (for configuring the Redis
    connection information), mod_tls_redis (for caching SSL sessions and
    OCSP information using Redis), and mod_wrap2_redis (for using ACLs stored
    in Redis).
  - Changed Modules:
  * mod_ban
    The mod_ban module's BanCache directive can now use Redis-based caching;
    see doc/contrib/mod_ban.html#BanCache.
  - New Configuration Directives
  * SQLPasswordArgon2, SQLPasswordScrypt
    The key lengths for Argon2 and Scrypt-based passwords are now configurable
    via these new directives; previously, the key length had been hardcoded
    to be 32 bytes, which is not interoperable with all other implementations
    (Issue #454).
  - Changed Configuration Directives
  * AllowChrootSymlinks
    When "AllowChrootSymlinks off" was used, only the last portion of the
    DefaultRoot path would be checked to see if it was a symlink.  Now,
    each component of the DefaultRoot path will be checked to see if it is
    a symlink when "AllowChrootSymlinks off" is used.
  * Include
    The Include directive can now be used within a &lt;Limit&gt; section, e.g.:
    &lt;Limit LOGIN&gt;
    Include /path/to/allowed.txt
    DenyAll
    &lt;/Limit&gt;
  - API Changes
  * A new JSON API has been added, for use by third-party modules.
- remove obsolete proftpd_include-in-limit-section.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="chris@computersalat.de" date="1662033600">- Update proftpd-basic.conf.patch
  * remove obsolete config option, LoginPasswordPrompt
- rework proftpd-dist.patch</changelog>
</package>
<package pkgid="2cbec6c974b07f43954830235e01178bafec40020ff5b998d2c0feb241c802a2" name="proftpd-mysql" arch="i586">
  <version epoch="0" ver="1.3.7e" rel="bp154.3.6.1"/>
  <changelog author="chris@computersalat.de" date="1531224000">- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1531310400">- update to 1.3.6
  * Support for using Redis for caching, logging; see the doc/howto/Redis.html
    documentation.
  * Fixed mod_sql_postgres SSL support (Issue #415).
  * Support building against LibreSSL instead of OpenSSL (Issue #361).
  * Better support on AIX for login restraictions (Bug #4285).
  * TimeoutLogin (and other timeouts) were not working properly for SFTP
    connections (Bug#4299).
  * Handling of the SIGILL and SIGINT signals, by the daemon process, now causes
    the child processes to be terminated as well (Issue #461).
  * RPM .spec file naming changed to conform to Fedora guidelines.
  * Fix for "AllowChrootSymlinks off" checking each component for symlinks
    (CVE-2017-7418).
  - New Modules:
  * mod_redis, mod_tls_redis, mod_wrap2_redis
    With Redis now supported as a caching mechanism, similar to Memcache,
    there are now Redis-using modules: mod_redis (for configuring the Redis
    connection information), mod_tls_redis (for caching SSL sessions and
    OCSP information using Redis), and mod_wrap2_redis (for using ACLs stored
    in Redis).
  - Changed Modules:
  * mod_ban
    The mod_ban module's BanCache directive can now use Redis-based caching;
    see doc/contrib/mod_ban.html#BanCache.
  - New Configuration Directives
  * SQLPasswordArgon2, SQLPasswordScrypt
    The key lengths for Argon2 and Scrypt-based passwords are now configurable
    via these new directives; previously, the key length had been hardcoded
    to be 32 bytes, which is not interoperable with all other implementations
    (Issue #454).
  - Changed Configuration Directives
  * AllowChrootSymlinks
    When "AllowChrootSymlinks off" was used, only the last portion of the
    DefaultRoot path would be checked to see if it was a symlink.  Now,
    each component of the DefaultRoot path will be checked to see if it is
    a symlink when "AllowChrootSymlinks off" is used.
  * Include
    The Include directive can now be used within a &lt;Limit&gt; section, e.g.:
    &lt;Limit LOGIN&gt;
    Include /path/to/allowed.txt
    DenyAll
    &lt;/Limit&gt;
  - API Changes
  * A new JSON API has been added, for use by third-party modules.
- remove obsolete proftpd_include-in-limit-section.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="chris@computersalat.de" date="1662033600">- Update proftpd-basic.conf.patch
  * remove obsolete config option, LoginPasswordPrompt
- rework proftpd-dist.patch</changelog>
</package>
<package pkgid="a3b78e1fbdf24eaca4165cea13b9b419bfef72a4cde897fad73897cfb4dd6e04" name="proftpd-mysql" arch="ppc64le">
  <version epoch="0" ver="1.3.7e" rel="bp154.3.6.1"/>
  <changelog author="chris@computersalat.de" date="1531224000">- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1531310400">- update to 1.3.6
  * Support for using Redis for caching, logging; see the doc/howto/Redis.html
    documentation.
  * Fixed mod_sql_postgres SSL support (Issue #415).
  * Support building against LibreSSL instead of OpenSSL (Issue #361).
  * Better support on AIX for login restraictions (Bug #4285).
  * TimeoutLogin (and other timeouts) were not working properly for SFTP
    connections (Bug#4299).
  * Handling of the SIGILL and SIGINT signals, by the daemon process, now causes
    the child processes to be terminated as well (Issue #461).
  * RPM .spec file naming changed to conform to Fedora guidelines.
  * Fix for "AllowChrootSymlinks off" checking each component for symlinks
    (CVE-2017-7418).
  - New Modules:
  * mod_redis, mod_tls_redis, mod_wrap2_redis
    With Redis now supported as a caching mechanism, similar to Memcache,
    there are now Redis-using modules: mod_redis (for configuring the Redis
    connection information), mod_tls_redis (for caching SSL sessions and
    OCSP information using Redis), and mod_wrap2_redis (for using ACLs stored
    in Redis).
  - Changed Modules:
  * mod_ban
    The mod_ban module's BanCache directive can now use Redis-based caching;
    see doc/contrib/mod_ban.html#BanCache.
  - New Configuration Directives
  * SQLPasswordArgon2, SQLPasswordScrypt
    The key lengths for Argon2 and Scrypt-based passwords are now configurable
    via these new directives; previously, the key length had been hardcoded
    to be 32 bytes, which is not interoperable with all other implementations
    (Issue #454).
  - Changed Configuration Directives
  * AllowChrootSymlinks
    When "AllowChrootSymlinks off" was used, only the last portion of the
    DefaultRoot path would be checked to see if it was a symlink.  Now,
    each component of the DefaultRoot path will be checked to see if it is
    a symlink when "AllowChrootSymlinks off" is used.
  * Include
    The Include directive can now be used within a &lt;Limit&gt; section, e.g.:
    &lt;Limit LOGIN&gt;
    Include /path/to/allowed.txt
    DenyAll
    &lt;/Limit&gt;
  - API Changes
  * A new JSON API has been added, for use by third-party modules.
- remove obsolete proftpd_include-in-limit-section.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="chris@computersalat.de" date="1662033600">- Update proftpd-basic.conf.patch
  * remove obsolete config option, LoginPasswordPrompt
- rework proftpd-dist.patch</changelog>
</package>
<package pkgid="a3cfa661cd34b094c636f6671bc99e349383f9ba2fdbfd88efc52824f12536c8" name="proftpd-mysql" arch="s390x">
  <version epoch="0" ver="1.3.7e" rel="bp154.3.6.1"/>
  <changelog author="chris@computersalat.de" date="1531224000">- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1531310400">- update to 1.3.6
  * Support for using Redis for caching, logging; see the doc/howto/Redis.html
    documentation.
  * Fixed mod_sql_postgres SSL support (Issue #415).
  * Support building against LibreSSL instead of OpenSSL (Issue #361).
  * Better support on AIX for login restraictions (Bug #4285).
  * TimeoutLogin (and other timeouts) were not working properly for SFTP
    connections (Bug#4299).
  * Handling of the SIGILL and SIGINT signals, by the daemon process, now causes
    the child processes to be terminated as well (Issue #461).
  * RPM .spec file naming changed to conform to Fedora guidelines.
  * Fix for "AllowChrootSymlinks off" checking each component for symlinks
    (CVE-2017-7418).
  - New Modules:
  * mod_redis, mod_tls_redis, mod_wrap2_redis
    With Redis now supported as a caching mechanism, similar to Memcache,
    there are now Redis-using modules: mod_redis (for configuring the Redis
    connection information), mod_tls_redis (for caching SSL sessions and
    OCSP information using Redis), and mod_wrap2_redis (for using ACLs stored
    in Redis).
  - Changed Modules:
  * mod_ban
    The mod_ban module's BanCache directive can now use Redis-based caching;
    see doc/contrib/mod_ban.html#BanCache.
  - New Configuration Directives
  * SQLPasswordArgon2, SQLPasswordScrypt
    The key lengths for Argon2 and Scrypt-based passwords are now configurable
    via these new directives; previously, the key length had been hardcoded
    to be 32 bytes, which is not interoperable with all other implementations
    (Issue #454).
  - Changed Configuration Directives
  * AllowChrootSymlinks
    When "AllowChrootSymlinks off" was used, only the last portion of the
    DefaultRoot path would be checked to see if it was a symlink.  Now,
    each component of the DefaultRoot path will be checked to see if it is
    a symlink when "AllowChrootSymlinks off" is used.
  * Include
    The Include directive can now be used within a &lt;Limit&gt; section, e.g.:
    &lt;Limit LOGIN&gt;
    Include /path/to/allowed.txt
    DenyAll
    &lt;/Limit&gt;
  - API Changes
  * A new JSON API has been added, for use by third-party modules.
- remove obsolete proftpd_include-in-limit-section.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="chris@computersalat.de" date="1662033600">- Update proftpd-basic.conf.patch
  * remove obsolete config option, LoginPasswordPrompt
- rework proftpd-dist.patch</changelog>
</package>
<package pkgid="d0baf5c8462901345d8ac9a10da9b438e07b9a6004d3ee785794a480acc5dc71" name="proftpd-mysql" arch="x86_64">
  <version epoch="0" ver="1.3.7e" rel="bp154.3.6.1"/>
  <changelog author="chris@computersalat.de" date="1531224000">- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1531310400">- update to 1.3.6
  * Support for using Redis for caching, logging; see the doc/howto/Redis.html
    documentation.
  * Fixed mod_sql_postgres SSL support (Issue #415).
  * Support building against LibreSSL instead of OpenSSL (Issue #361).
  * Better support on AIX for login restraictions (Bug #4285).
  * TimeoutLogin (and other timeouts) were not working properly for SFTP
    connections (Bug#4299).
  * Handling of the SIGILL and SIGINT signals, by the daemon process, now causes
    the child processes to be terminated as well (Issue #461).
  * RPM .spec file naming changed to conform to Fedora guidelines.
  * Fix for "AllowChrootSymlinks off" checking each component for symlinks
    (CVE-2017-7418).
  - New Modules:
  * mod_redis, mod_tls_redis, mod_wrap2_redis
    With Redis now supported as a caching mechanism, similar to Memcache,
    there are now Redis-using modules: mod_redis (for configuring the Redis
    connection information), mod_tls_redis (for caching SSL sessions and
    OCSP information using Redis), and mod_wrap2_redis (for using ACLs stored
    in Redis).
  - Changed Modules:
  * mod_ban
    The mod_ban module's BanCache directive can now use Redis-based caching;
    see doc/contrib/mod_ban.html#BanCache.
  - New Configuration Directives
  * SQLPasswordArgon2, SQLPasswordScrypt
    The key lengths for Argon2 and Scrypt-based passwords are now configurable
    via these new directives; previously, the key length had been hardcoded
    to be 32 bytes, which is not interoperable with all other implementations
    (Issue #454).
  - Changed Configuration Directives
  * AllowChrootSymlinks
    When "AllowChrootSymlinks off" was used, only the last portion of the
    DefaultRoot path would be checked to see if it was a symlink.  Now,
    each component of the DefaultRoot path will be checked to see if it is
    a symlink when "AllowChrootSymlinks off" is used.
  * Include
    The Include directive can now be used within a &lt;Limit&gt; section, e.g.:
    &lt;Limit LOGIN&gt;
    Include /path/to/allowed.txt
    DenyAll
    &lt;/Limit&gt;
  - API Changes
  * A new JSON API has been added, for use by third-party modules.
- remove obsolete proftpd_include-in-limit-section.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="chris@computersalat.de" date="1662033600">- Update proftpd-basic.conf.patch
  * remove obsolete config option, LoginPasswordPrompt
- rework proftpd-dist.patch</changelog>
</package>
<package pkgid="9029c156e8971864449fcb06a8daf2552aaa2d3568c6356307b1c39c7a661b1c" name="proftpd-mysql" arch="aarch64">
  <version epoch="0" ver="1.3.7f" rel="bp154.3.9.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="chris@computersalat.de" date="1662033600">- Update proftpd-basic.conf.patch
  * remove obsolete config option, LoginPasswordPrompt
- rework proftpd-dist.patch</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1673870400">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="chris@computersalat.de" date="1674648000">- 1.3.7f - Released 04-Dec-2022
  * Issue 1533 - mod_tls module unexpectedly allows TLS handshake after
    authentication in some configurations.
  * Bug 4491 - unable to verify signed data: signature type 'rsa-sha2-512' does
    not match publickey algorithm 'ssh-rsa'.</changelog>
</package>
<package pkgid="50dad965fdd7980b0c9eb61d12f2fbc51c515b56491bbc9a6806e5ae2aada3f3" name="proftpd-mysql" arch="i586">
  <version epoch="0" ver="1.3.7f" rel="bp154.3.9.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="chris@computersalat.de" date="1662033600">- Update proftpd-basic.conf.patch
  * remove obsolete config option, LoginPasswordPrompt
- rework proftpd-dist.patch</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1673870400">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="chris@computersalat.de" date="1674648000">- 1.3.7f - Released 04-Dec-2022
  * Issue 1533 - mod_tls module unexpectedly allows TLS handshake after
    authentication in some configurations.
  * Bug 4491 - unable to verify signed data: signature type 'rsa-sha2-512' does
    not match publickey algorithm 'ssh-rsa'.</changelog>
</package>
<package pkgid="d84b7a35170d91a553efc4ad20a3e666d1a3b5240dcd57bb9d3103ab7ed6fe26" name="proftpd-mysql" arch="ppc64le">
  <version epoch="0" ver="1.3.7f" rel="bp154.3.9.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="chris@computersalat.de" date="1662033600">- Update proftpd-basic.conf.patch
  * remove obsolete config option, LoginPasswordPrompt
- rework proftpd-dist.patch</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1673870400">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="chris@computersalat.de" date="1674648000">- 1.3.7f - Released 04-Dec-2022
  * Issue 1533 - mod_tls module unexpectedly allows TLS handshake after
    authentication in some configurations.
  * Bug 4491 - unable to verify signed data: signature type 'rsa-sha2-512' does
    not match publickey algorithm 'ssh-rsa'.</changelog>
</package>
<package pkgid="77807e626dbedebceb4c4ea8c1a847dfe5f2f19bd8d4de88e46137bd35d71dbd" name="proftpd-mysql" arch="s390x">
  <version epoch="0" ver="1.3.7f" rel="bp154.3.9.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="chris@computersalat.de" date="1662033600">- Update proftpd-basic.conf.patch
  * remove obsolete config option, LoginPasswordPrompt
- rework proftpd-dist.patch</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1673870400">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="chris@computersalat.de" date="1674648000">- 1.3.7f - Released 04-Dec-2022
  * Issue 1533 - mod_tls module unexpectedly allows TLS handshake after
    authentication in some configurations.
  * Bug 4491 - unable to verify signed data: signature type 'rsa-sha2-512' does
    not match publickey algorithm 'ssh-rsa'.</changelog>
</package>
<package pkgid="ac09c0825efc10f0f6fd2ef620438886e742de40db0b99448423fd3e3b154c3b" name="proftpd-mysql" arch="x86_64">
  <version epoch="0" ver="1.3.7f" rel="bp154.3.9.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="chris@computersalat.de" date="1662033600">- Update proftpd-basic.conf.patch
  * remove obsolete config option, LoginPasswordPrompt
- rework proftpd-dist.patch</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1673870400">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="chris@computersalat.de" date="1674648000">- 1.3.7f - Released 04-Dec-2022
  * Issue 1533 - mod_tls module unexpectedly allows TLS handshake after
    authentication in some configurations.
  * Bug 4491 - unable to verify signed data: signature type 'rsa-sha2-512' does
    not match publickey algorithm 'ssh-rsa'.</changelog>
</package>
<package pkgid="6ed29eebaae141fd300ddff176898bc9f2c67a0f5ec1252c2c28437594110393" name="proftpd-pgsql" arch="aarch64">
  <version epoch="0" ver="1.3.7e" rel="bp154.3.3.1"/>
  <changelog author="bwiedemann@suse.com" date="1500638400">- Sort SHARED_MODS list to fix build compare (boo#1041090)</changelog>
  <changelog author="chris@computersalat.de" date="1531224000">- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1531310400">- update to 1.3.6
  * Support for using Redis for caching, logging; see the doc/howto/Redis.html
    documentation.
  * Fixed mod_sql_postgres SSL support (Issue #415).
  * Support building against LibreSSL instead of OpenSSL (Issue #361).
  * Better support on AIX for login restraictions (Bug #4285).
  * TimeoutLogin (and other timeouts) were not working properly for SFTP
    connections (Bug#4299).
  * Handling of the SIGILL and SIGINT signals, by the daemon process, now causes
    the child processes to be terminated as well (Issue #461).
  * RPM .spec file naming changed to conform to Fedora guidelines.
  * Fix for "AllowChrootSymlinks off" checking each component for symlinks
    (CVE-2017-7418).
  - New Modules:
  * mod_redis, mod_tls_redis, mod_wrap2_redis
    With Redis now supported as a caching mechanism, similar to Memcache,
    there are now Redis-using modules: mod_redis (for configuring the Redis
    connection information), mod_tls_redis (for caching SSL sessions and
    OCSP information using Redis), and mod_wrap2_redis (for using ACLs stored
    in Redis).
  - Changed Modules:
  * mod_ban
    The mod_ban module's BanCache directive can now use Redis-based caching;
    see doc/contrib/mod_ban.html#BanCache.
  - New Configuration Directives
  * SQLPasswordArgon2, SQLPasswordScrypt
    The key lengths for Argon2 and Scrypt-based passwords are now configurable
    via these new directives; previously, the key length had been hardcoded
    to be 32 bytes, which is not interoperable with all other implementations
    (Issue #454).
  - Changed Configuration Directives
  * AllowChrootSymlinks
    When "AllowChrootSymlinks off" was used, only the last portion of the
    DefaultRoot path would be checked to see if it was a symlink.  Now,
    each component of the DefaultRoot path will be checked to see if it is
    a symlink when "AllowChrootSymlinks off" is used.
  * Include
    The Include directive can now be used within a &lt;Limit&gt; section, e.g.:
    &lt;Limit LOGIN&gt;
    Include /path/to/allowed.txt
    DenyAll
    &lt;/Limit&gt;
  - API Changes
  * A new JSON API has been added, for use by third-party modules.
- remove obsolete proftpd_include-in-limit-section.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
</package>
<package pkgid="b2a16bcff07af9fe32169b00783681cf075dd3f17a3d6dbdc5aafd5b3cfdac46" name="proftpd-pgsql" arch="i586">
  <version epoch="0" ver="1.3.7e" rel="bp154.3.3.1"/>
  <changelog author="bwiedemann@suse.com" date="1500638400">- Sort SHARED_MODS list to fix build compare (boo#1041090)</changelog>
  <changelog author="chris@computersalat.de" date="1531224000">- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1531310400">- update to 1.3.6
  * Support for using Redis for caching, logging; see the doc/howto/Redis.html
    documentation.
  * Fixed mod_sql_postgres SSL support (Issue #415).
  * Support building against LibreSSL instead of OpenSSL (Issue #361).
  * Better support on AIX for login restraictions (Bug #4285).
  * TimeoutLogin (and other timeouts) were not working properly for SFTP
    connections (Bug#4299).
  * Handling of the SIGILL and SIGINT signals, by the daemon process, now causes
    the child processes to be terminated as well (Issue #461).
  * RPM .spec file naming changed to conform to Fedora guidelines.
  * Fix for "AllowChrootSymlinks off" checking each component for symlinks
    (CVE-2017-7418).
  - New Modules:
  * mod_redis, mod_tls_redis, mod_wrap2_redis
    With Redis now supported as a caching mechanism, similar to Memcache,
    there are now Redis-using modules: mod_redis (for configuring the Redis
    connection information), mod_tls_redis (for caching SSL sessions and
    OCSP information using Redis), and mod_wrap2_redis (for using ACLs stored
    in Redis).
  - Changed Modules:
  * mod_ban
    The mod_ban module's BanCache directive can now use Redis-based caching;
    see doc/contrib/mod_ban.html#BanCache.
  - New Configuration Directives
  * SQLPasswordArgon2, SQLPasswordScrypt
    The key lengths for Argon2 and Scrypt-based passwords are now configurable
    via these new directives; previously, the key length had been hardcoded
    to be 32 bytes, which is not interoperable with all other implementations
    (Issue #454).
  - Changed Configuration Directives
  * AllowChrootSymlinks
    When "AllowChrootSymlinks off" was used, only the last portion of the
    DefaultRoot path would be checked to see if it was a symlink.  Now,
    each component of the DefaultRoot path will be checked to see if it is
    a symlink when "AllowChrootSymlinks off" is used.
  * Include
    The Include directive can now be used within a &lt;Limit&gt; section, e.g.:
    &lt;Limit LOGIN&gt;
    Include /path/to/allowed.txt
    DenyAll
    &lt;/Limit&gt;
  - API Changes
  * A new JSON API has been added, for use by third-party modules.
- remove obsolete proftpd_include-in-limit-section.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
</package>
<package pkgid="123158f1e733a7ca6ebb0c3191c11d0b249ec47bdb6452318e63710574dcd2e6" name="proftpd-pgsql" arch="ppc64le">
  <version epoch="0" ver="1.3.7e" rel="bp154.3.3.1"/>
  <changelog author="bwiedemann@suse.com" date="1500638400">- Sort SHARED_MODS list to fix build compare (boo#1041090)</changelog>
  <changelog author="chris@computersalat.de" date="1531224000">- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1531310400">- update to 1.3.6
  * Support for using Redis for caching, logging; see the doc/howto/Redis.html
    documentation.
  * Fixed mod_sql_postgres SSL support (Issue #415).
  * Support building against LibreSSL instead of OpenSSL (Issue #361).
  * Better support on AIX for login restraictions (Bug #4285).
  * TimeoutLogin (and other timeouts) were not working properly for SFTP
    connections (Bug#4299).
  * Handling of the SIGILL and SIGINT signals, by the daemon process, now causes
    the child processes to be terminated as well (Issue #461).
  * RPM .spec file naming changed to conform to Fedora guidelines.
  * Fix for "AllowChrootSymlinks off" checking each component for symlinks
    (CVE-2017-7418).
  - New Modules:
  * mod_redis, mod_tls_redis, mod_wrap2_redis
    With Redis now supported as a caching mechanism, similar to Memcache,
    there are now Redis-using modules: mod_redis (for configuring the Redis
    connection information), mod_tls_redis (for caching SSL sessions and
    OCSP information using Redis), and mod_wrap2_redis (for using ACLs stored
    in Redis).
  - Changed Modules:
  * mod_ban
    The mod_ban module's BanCache directive can now use Redis-based caching;
    see doc/contrib/mod_ban.html#BanCache.
  - New Configuration Directives
  * SQLPasswordArgon2, SQLPasswordScrypt
    The key lengths for Argon2 and Scrypt-based passwords are now configurable
    via these new directives; previously, the key length had been hardcoded
    to be 32 bytes, which is not interoperable with all other implementations
    (Issue #454).
  - Changed Configuration Directives
  * AllowChrootSymlinks
    When "AllowChrootSymlinks off" was used, only the last portion of the
    DefaultRoot path would be checked to see if it was a symlink.  Now,
    each component of the DefaultRoot path will be checked to see if it is
    a symlink when "AllowChrootSymlinks off" is used.
  * Include
    The Include directive can now be used within a &lt;Limit&gt; section, e.g.:
    &lt;Limit LOGIN&gt;
    Include /path/to/allowed.txt
    DenyAll
    &lt;/Limit&gt;
  - API Changes
  * A new JSON API has been added, for use by third-party modules.
- remove obsolete proftpd_include-in-limit-section.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
</package>
<package pkgid="53c88ef99d67540dfb12f7545543c6bf665ee698eea5b5a90c48603e1f8ea9cc" name="proftpd-pgsql" arch="s390x">
  <version epoch="0" ver="1.3.7e" rel="bp154.3.3.1"/>
  <changelog author="bwiedemann@suse.com" date="1500638400">- Sort SHARED_MODS list to fix build compare (boo#1041090)</changelog>
  <changelog author="chris@computersalat.de" date="1531224000">- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1531310400">- update to 1.3.6
  * Support for using Redis for caching, logging; see the doc/howto/Redis.html
    documentation.
  * Fixed mod_sql_postgres SSL support (Issue #415).
  * Support building against LibreSSL instead of OpenSSL (Issue #361).
  * Better support on AIX for login restraictions (Bug #4285).
  * TimeoutLogin (and other timeouts) were not working properly for SFTP
    connections (Bug#4299).
  * Handling of the SIGILL and SIGINT signals, by the daemon process, now causes
    the child processes to be terminated as well (Issue #461).
  * RPM .spec file naming changed to conform to Fedora guidelines.
  * Fix for "AllowChrootSymlinks off" checking each component for symlinks
    (CVE-2017-7418).
  - New Modules:
  * mod_redis, mod_tls_redis, mod_wrap2_redis
    With Redis now supported as a caching mechanism, similar to Memcache,
    there are now Redis-using modules: mod_redis (for configuring the Redis
    connection information), mod_tls_redis (for caching SSL sessions and
    OCSP information using Redis), and mod_wrap2_redis (for using ACLs stored
    in Redis).
  - Changed Modules:
  * mod_ban
    The mod_ban module's BanCache directive can now use Redis-based caching;
    see doc/contrib/mod_ban.html#BanCache.
  - New Configuration Directives
  * SQLPasswordArgon2, SQLPasswordScrypt
    The key lengths for Argon2 and Scrypt-based passwords are now configurable
    via these new directives; previously, the key length had been hardcoded
    to be 32 bytes, which is not interoperable with all other implementations
    (Issue #454).
  - Changed Configuration Directives
  * AllowChrootSymlinks
    When "AllowChrootSymlinks off" was used, only the last portion of the
    DefaultRoot path would be checked to see if it was a symlink.  Now,
    each component of the DefaultRoot path will be checked to see if it is
    a symlink when "AllowChrootSymlinks off" is used.
  * Include
    The Include directive can now be used within a &lt;Limit&gt; section, e.g.:
    &lt;Limit LOGIN&gt;
    Include /path/to/allowed.txt
    DenyAll
    &lt;/Limit&gt;
  - API Changes
  * A new JSON API has been added, for use by third-party modules.
- remove obsolete proftpd_include-in-limit-section.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
</package>
<package pkgid="4a84867eb09e8879542d6e61ba9394d51f83551e7f734588d7c57c7a31d572c5" name="proftpd-pgsql" arch="x86_64">
  <version epoch="0" ver="1.3.7e" rel="bp154.3.3.1"/>
  <changelog author="bwiedemann@suse.com" date="1500638400">- Sort SHARED_MODS list to fix build compare (boo#1041090)</changelog>
  <changelog author="chris@computersalat.de" date="1531224000">- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1531310400">- update to 1.3.6
  * Support for using Redis for caching, logging; see the doc/howto/Redis.html
    documentation.
  * Fixed mod_sql_postgres SSL support (Issue #415).
  * Support building against LibreSSL instead of OpenSSL (Issue #361).
  * Better support on AIX for login restraictions (Bug #4285).
  * TimeoutLogin (and other timeouts) were not working properly for SFTP
    connections (Bug#4299).
  * Handling of the SIGILL and SIGINT signals, by the daemon process, now causes
    the child processes to be terminated as well (Issue #461).
  * RPM .spec file naming changed to conform to Fedora guidelines.
  * Fix for "AllowChrootSymlinks off" checking each component for symlinks
    (CVE-2017-7418).
  - New Modules:
  * mod_redis, mod_tls_redis, mod_wrap2_redis
    With Redis now supported as a caching mechanism, similar to Memcache,
    there are now Redis-using modules: mod_redis (for configuring the Redis
    connection information), mod_tls_redis (for caching SSL sessions and
    OCSP information using Redis), and mod_wrap2_redis (for using ACLs stored
    in Redis).
  - Changed Modules:
  * mod_ban
    The mod_ban module's BanCache directive can now use Redis-based caching;
    see doc/contrib/mod_ban.html#BanCache.
  - New Configuration Directives
  * SQLPasswordArgon2, SQLPasswordScrypt
    The key lengths for Argon2 and Scrypt-based passwords are now configurable
    via these new directives; previously, the key length had been hardcoded
    to be 32 bytes, which is not interoperable with all other implementations
    (Issue #454).
  - Changed Configuration Directives
  * AllowChrootSymlinks
    When "AllowChrootSymlinks off" was used, only the last portion of the
    DefaultRoot path would be checked to see if it was a symlink.  Now,
    each component of the DefaultRoot path will be checked to see if it is
    a symlink when "AllowChrootSymlinks off" is used.
  * Include
    The Include directive can now be used within a &lt;Limit&gt; section, e.g.:
    &lt;Limit LOGIN&gt;
    Include /path/to/allowed.txt
    DenyAll
    &lt;/Limit&gt;
  - API Changes
  * A new JSON API has been added, for use by third-party modules.
- remove obsolete proftpd_include-in-limit-section.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
</package>
<package pkgid="90b3495ee8c3199e4f852adc25203a2c94db90e8a367147467acb07d55e9288c" name="proftpd-pgsql" arch="aarch64">
  <version epoch="0" ver="1.3.7e" rel="bp154.3.6.1"/>
  <changelog author="chris@computersalat.de" date="1531224000">- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1531310400">- update to 1.3.6
  * Support for using Redis for caching, logging; see the doc/howto/Redis.html
    documentation.
  * Fixed mod_sql_postgres SSL support (Issue #415).
  * Support building against LibreSSL instead of OpenSSL (Issue #361).
  * Better support on AIX for login restraictions (Bug #4285).
  * TimeoutLogin (and other timeouts) were not working properly for SFTP
    connections (Bug#4299).
  * Handling of the SIGILL and SIGINT signals, by the daemon process, now causes
    the child processes to be terminated as well (Issue #461).
  * RPM .spec file naming changed to conform to Fedora guidelines.
  * Fix for "AllowChrootSymlinks off" checking each component for symlinks
    (CVE-2017-7418).
  - New Modules:
  * mod_redis, mod_tls_redis, mod_wrap2_redis
    With Redis now supported as a caching mechanism, similar to Memcache,
    there are now Redis-using modules: mod_redis (for configuring the Redis
    connection information), mod_tls_redis (for caching SSL sessions and
    OCSP information using Redis), and mod_wrap2_redis (for using ACLs stored
    in Redis).
  - Changed Modules:
  * mod_ban
    The mod_ban module's BanCache directive can now use Redis-based caching;
    see doc/contrib/mod_ban.html#BanCache.
  - New Configuration Directives
  * SQLPasswordArgon2, SQLPasswordScrypt
    The key lengths for Argon2 and Scrypt-based passwords are now configurable
    via these new directives; previously, the key length had been hardcoded
    to be 32 bytes, which is not interoperable with all other implementations
    (Issue #454).
  - Changed Configuration Directives
  * AllowChrootSymlinks
    When "AllowChrootSymlinks off" was used, only the last portion of the
    DefaultRoot path would be checked to see if it was a symlink.  Now,
    each component of the DefaultRoot path will be checked to see if it is
    a symlink when "AllowChrootSymlinks off" is used.
  * Include
    The Include directive can now be used within a &lt;Limit&gt; section, e.g.:
    &lt;Limit LOGIN&gt;
    Include /path/to/allowed.txt
    DenyAll
    &lt;/Limit&gt;
  - API Changes
  * A new JSON API has been added, for use by third-party modules.
- remove obsolete proftpd_include-in-limit-section.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="chris@computersalat.de" date="1662033600">- Update proftpd-basic.conf.patch
  * remove obsolete config option, LoginPasswordPrompt
- rework proftpd-dist.patch</changelog>
</package>
<package pkgid="2affbf52755b79328160b1c21b65480ce931f8416ca434a414d6553c639b439c" name="proftpd-pgsql" arch="i586">
  <version epoch="0" ver="1.3.7e" rel="bp154.3.6.1"/>
  <changelog author="chris@computersalat.de" date="1531224000">- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1531310400">- update to 1.3.6
  * Support for using Redis for caching, logging; see the doc/howto/Redis.html
    documentation.
  * Fixed mod_sql_postgres SSL support (Issue #415).
  * Support building against LibreSSL instead of OpenSSL (Issue #361).
  * Better support on AIX for login restraictions (Bug #4285).
  * TimeoutLogin (and other timeouts) were not working properly for SFTP
    connections (Bug#4299).
  * Handling of the SIGILL and SIGINT signals, by the daemon process, now causes
    the child processes to be terminated as well (Issue #461).
  * RPM .spec file naming changed to conform to Fedora guidelines.
  * Fix for "AllowChrootSymlinks off" checking each component for symlinks
    (CVE-2017-7418).
  - New Modules:
  * mod_redis, mod_tls_redis, mod_wrap2_redis
    With Redis now supported as a caching mechanism, similar to Memcache,
    there are now Redis-using modules: mod_redis (for configuring the Redis
    connection information), mod_tls_redis (for caching SSL sessions and
    OCSP information using Redis), and mod_wrap2_redis (for using ACLs stored
    in Redis).
  - Changed Modules:
  * mod_ban
    The mod_ban module's BanCache directive can now use Redis-based caching;
    see doc/contrib/mod_ban.html#BanCache.
  - New Configuration Directives
  * SQLPasswordArgon2, SQLPasswordScrypt
    The key lengths for Argon2 and Scrypt-based passwords are now configurable
    via these new directives; previously, the key length had been hardcoded
    to be 32 bytes, which is not interoperable with all other implementations
    (Issue #454).
  - Changed Configuration Directives
  * AllowChrootSymlinks
    When "AllowChrootSymlinks off" was used, only the last portion of the
    DefaultRoot path would be checked to see if it was a symlink.  Now,
    each component of the DefaultRoot path will be checked to see if it is
    a symlink when "AllowChrootSymlinks off" is used.
  * Include
    The Include directive can now be used within a &lt;Limit&gt; section, e.g.:
    &lt;Limit LOGIN&gt;
    Include /path/to/allowed.txt
    DenyAll
    &lt;/Limit&gt;
  - API Changes
  * A new JSON API has been added, for use by third-party modules.
- remove obsolete proftpd_include-in-limit-section.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="chris@computersalat.de" date="1662033600">- Update proftpd-basic.conf.patch
  * remove obsolete config option, LoginPasswordPrompt
- rework proftpd-dist.patch</changelog>
</package>
<package pkgid="407a98603a324c0481e549b17161060d7fbcf7bf92dd9eb691cea89f8bb76ba7" name="proftpd-pgsql" arch="ppc64le">
  <version epoch="0" ver="1.3.7e" rel="bp154.3.6.1"/>
  <changelog author="chris@computersalat.de" date="1531224000">- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1531310400">- update to 1.3.6
  * Support for using Redis for caching, logging; see the doc/howto/Redis.html
    documentation.
  * Fixed mod_sql_postgres SSL support (Issue #415).
  * Support building against LibreSSL instead of OpenSSL (Issue #361).
  * Better support on AIX for login restraictions (Bug #4285).
  * TimeoutLogin (and other timeouts) were not working properly for SFTP
    connections (Bug#4299).
  * Handling of the SIGILL and SIGINT signals, by the daemon process, now causes
    the child processes to be terminated as well (Issue #461).
  * RPM .spec file naming changed to conform to Fedora guidelines.
  * Fix for "AllowChrootSymlinks off" checking each component for symlinks
    (CVE-2017-7418).
  - New Modules:
  * mod_redis, mod_tls_redis, mod_wrap2_redis
    With Redis now supported as a caching mechanism, similar to Memcache,
    there are now Redis-using modules: mod_redis (for configuring the Redis
    connection information), mod_tls_redis (for caching SSL sessions and
    OCSP information using Redis), and mod_wrap2_redis (for using ACLs stored
    in Redis).
  - Changed Modules:
  * mod_ban
    The mod_ban module's BanCache directive can now use Redis-based caching;
    see doc/contrib/mod_ban.html#BanCache.
  - New Configuration Directives
  * SQLPasswordArgon2, SQLPasswordScrypt
    The key lengths for Argon2 and Scrypt-based passwords are now configurable
    via these new directives; previously, the key length had been hardcoded
    to be 32 bytes, which is not interoperable with all other implementations
    (Issue #454).
  - Changed Configuration Directives
  * AllowChrootSymlinks
    When "AllowChrootSymlinks off" was used, only the last portion of the
    DefaultRoot path would be checked to see if it was a symlink.  Now,
    each component of the DefaultRoot path will be checked to see if it is
    a symlink when "AllowChrootSymlinks off" is used.
  * Include
    The Include directive can now be used within a &lt;Limit&gt; section, e.g.:
    &lt;Limit LOGIN&gt;
    Include /path/to/allowed.txt
    DenyAll
    &lt;/Limit&gt;
  - API Changes
  * A new JSON API has been added, for use by third-party modules.
- remove obsolete proftpd_include-in-limit-section.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="chris@computersalat.de" date="1662033600">- Update proftpd-basic.conf.patch
  * remove obsolete config option, LoginPasswordPrompt
- rework proftpd-dist.patch</changelog>
</package>
<package pkgid="634e40c95c26b509eaec924d0eb87649ed4426f3d7062a40ede90ccf705a00d3" name="proftpd-pgsql" arch="s390x">
  <version epoch="0" ver="1.3.7e" rel="bp154.3.6.1"/>
  <changelog author="chris@computersalat.de" date="1531224000">- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1531310400">- update to 1.3.6
  * Support for using Redis for caching, logging; see the doc/howto/Redis.html
    documentation.
  * Fixed mod_sql_postgres SSL support (Issue #415).
  * Support building against LibreSSL instead of OpenSSL (Issue #361).
  * Better support on AIX for login restraictions (Bug #4285).
  * TimeoutLogin (and other timeouts) were not working properly for SFTP
    connections (Bug#4299).
  * Handling of the SIGILL and SIGINT signals, by the daemon process, now causes
    the child processes to be terminated as well (Issue #461).
  * RPM .spec file naming changed to conform to Fedora guidelines.
  * Fix for "AllowChrootSymlinks off" checking each component for symlinks
    (CVE-2017-7418).
  - New Modules:
  * mod_redis, mod_tls_redis, mod_wrap2_redis
    With Redis now supported as a caching mechanism, similar to Memcache,
    there are now Redis-using modules: mod_redis (for configuring the Redis
    connection information), mod_tls_redis (for caching SSL sessions and
    OCSP information using Redis), and mod_wrap2_redis (for using ACLs stored
    in Redis).
  - Changed Modules:
  * mod_ban
    The mod_ban module's BanCache directive can now use Redis-based caching;
    see doc/contrib/mod_ban.html#BanCache.
  - New Configuration Directives
  * SQLPasswordArgon2, SQLPasswordScrypt
    The key lengths for Argon2 and Scrypt-based passwords are now configurable
    via these new directives; previously, the key length had been hardcoded
    to be 32 bytes, which is not interoperable with all other implementations
    (Issue #454).
  - Changed Configuration Directives
  * AllowChrootSymlinks
    When "AllowChrootSymlinks off" was used, only the last portion of the
    DefaultRoot path would be checked to see if it was a symlink.  Now,
    each component of the DefaultRoot path will be checked to see if it is
    a symlink when "AllowChrootSymlinks off" is used.
  * Include
    The Include directive can now be used within a &lt;Limit&gt; section, e.g.:
    &lt;Limit LOGIN&gt;
    Include /path/to/allowed.txt
    DenyAll
    &lt;/Limit&gt;
  - API Changes
  * A new JSON API has been added, for use by third-party modules.
- remove obsolete proftpd_include-in-limit-section.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="chris@computersalat.de" date="1662033600">- Update proftpd-basic.conf.patch
  * remove obsolete config option, LoginPasswordPrompt
- rework proftpd-dist.patch</changelog>
</package>
<package pkgid="55430cca4f071617d9144c1f0d3e89d5348ce2f995936d132c87ba7f5d916531" name="proftpd-pgsql" arch="x86_64">
  <version epoch="0" ver="1.3.7e" rel="bp154.3.6.1"/>
  <changelog author="chris@computersalat.de" date="1531224000">- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1531310400">- update to 1.3.6
  * Support for using Redis for caching, logging; see the doc/howto/Redis.html
    documentation.
  * Fixed mod_sql_postgres SSL support (Issue #415).
  * Support building against LibreSSL instead of OpenSSL (Issue #361).
  * Better support on AIX for login restraictions (Bug #4285).
  * TimeoutLogin (and other timeouts) were not working properly for SFTP
    connections (Bug#4299).
  * Handling of the SIGILL and SIGINT signals, by the daemon process, now causes
    the child processes to be terminated as well (Issue #461).
  * RPM .spec file naming changed to conform to Fedora guidelines.
  * Fix for "AllowChrootSymlinks off" checking each component for symlinks
    (CVE-2017-7418).
  - New Modules:
  * mod_redis, mod_tls_redis, mod_wrap2_redis
    With Redis now supported as a caching mechanism, similar to Memcache,
    there are now Redis-using modules: mod_redis (for configuring the Redis
    connection information), mod_tls_redis (for caching SSL sessions and
    OCSP information using Redis), and mod_wrap2_redis (for using ACLs stored
    in Redis).
  - Changed Modules:
  * mod_ban
    The mod_ban module's BanCache directive can now use Redis-based caching;
    see doc/contrib/mod_ban.html#BanCache.
  - New Configuration Directives
  * SQLPasswordArgon2, SQLPasswordScrypt
    The key lengths for Argon2 and Scrypt-based passwords are now configurable
    via these new directives; previously, the key length had been hardcoded
    to be 32 bytes, which is not interoperable with all other implementations
    (Issue #454).
  - Changed Configuration Directives
  * AllowChrootSymlinks
    When "AllowChrootSymlinks off" was used, only the last portion of the
    DefaultRoot path would be checked to see if it was a symlink.  Now,
    each component of the DefaultRoot path will be checked to see if it is
    a symlink when "AllowChrootSymlinks off" is used.
  * Include
    The Include directive can now be used within a &lt;Limit&gt; section, e.g.:
    &lt;Limit LOGIN&gt;
    Include /path/to/allowed.txt
    DenyAll
    &lt;/Limit&gt;
  - API Changes
  * A new JSON API has been added, for use by third-party modules.
- remove obsolete proftpd_include-in-limit-section.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="chris@computersalat.de" date="1662033600">- Update proftpd-basic.conf.patch
  * remove obsolete config option, LoginPasswordPrompt
- rework proftpd-dist.patch</changelog>
</package>
<package pkgid="e33a50980ffea7f1baa11a42d9f795e789954f283dc5455402801bd41203b4af" name="proftpd-pgsql" arch="aarch64">
  <version epoch="0" ver="1.3.7f" rel="bp154.3.9.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="chris@computersalat.de" date="1662033600">- Update proftpd-basic.conf.patch
  * remove obsolete config option, LoginPasswordPrompt
- rework proftpd-dist.patch</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1673870400">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="chris@computersalat.de" date="1674648000">- 1.3.7f - Released 04-Dec-2022
  * Issue 1533 - mod_tls module unexpectedly allows TLS handshake after
    authentication in some configurations.
  * Bug 4491 - unable to verify signed data: signature type 'rsa-sha2-512' does
    not match publickey algorithm 'ssh-rsa'.</changelog>
</package>
<package pkgid="492945b42fbcaf3f839df75c4bfa7f997cd3fa5daef15af54295ab26c4dfd18e" name="proftpd-pgsql" arch="i586">
  <version epoch="0" ver="1.3.7f" rel="bp154.3.9.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="chris@computersalat.de" date="1662033600">- Update proftpd-basic.conf.patch
  * remove obsolete config option, LoginPasswordPrompt
- rework proftpd-dist.patch</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1673870400">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="chris@computersalat.de" date="1674648000">- 1.3.7f - Released 04-Dec-2022
  * Issue 1533 - mod_tls module unexpectedly allows TLS handshake after
    authentication in some configurations.
  * Bug 4491 - unable to verify signed data: signature type 'rsa-sha2-512' does
    not match publickey algorithm 'ssh-rsa'.</changelog>
</package>
<package pkgid="832ab9dc5e25ad9312b0b7c59f4447617300ec604b7d6fd19d135a418f509f9b" name="proftpd-pgsql" arch="ppc64le">
  <version epoch="0" ver="1.3.7f" rel="bp154.3.9.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="chris@computersalat.de" date="1662033600">- Update proftpd-basic.conf.patch
  * remove obsolete config option, LoginPasswordPrompt
- rework proftpd-dist.patch</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1673870400">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="chris@computersalat.de" date="1674648000">- 1.3.7f - Released 04-Dec-2022
  * Issue 1533 - mod_tls module unexpectedly allows TLS handshake after
    authentication in some configurations.
  * Bug 4491 - unable to verify signed data: signature type 'rsa-sha2-512' does
    not match publickey algorithm 'ssh-rsa'.</changelog>
</package>
<package pkgid="5f4d50692d24d7173bb278dad74d2455d3f7d896548f24262714487ef6df7e30" name="proftpd-pgsql" arch="s390x">
  <version epoch="0" ver="1.3.7f" rel="bp154.3.9.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="chris@computersalat.de" date="1662033600">- Update proftpd-basic.conf.patch
  * remove obsolete config option, LoginPasswordPrompt
- rework proftpd-dist.patch</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1673870400">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="chris@computersalat.de" date="1674648000">- 1.3.7f - Released 04-Dec-2022
  * Issue 1533 - mod_tls module unexpectedly allows TLS handshake after
    authentication in some configurations.
  * Bug 4491 - unable to verify signed data: signature type 'rsa-sha2-512' does
    not match publickey algorithm 'ssh-rsa'.</changelog>
</package>
<package pkgid="752534be02801146ec92a492509200b47ed63ff06012a4a054f012d96fb6823a" name="proftpd-pgsql" arch="x86_64">
  <version epoch="0" ver="1.3.7f" rel="bp154.3.9.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="chris@computersalat.de" date="1662033600">- Update proftpd-basic.conf.patch
  * remove obsolete config option, LoginPasswordPrompt
- rework proftpd-dist.patch</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1673870400">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="chris@computersalat.de" date="1674648000">- 1.3.7f - Released 04-Dec-2022
  * Issue 1533 - mod_tls module unexpectedly allows TLS handshake after
    authentication in some configurations.
  * Bug 4491 - unable to verify signed data: signature type 'rsa-sha2-512' does
    not match publickey algorithm 'ssh-rsa'.</changelog>
</package>
<package pkgid="b10827b25de20903ed37ee2cac0d1a15bb1b30661154fb10478e65e839f551a9" name="proftpd-radius" arch="aarch64">
  <version epoch="0" ver="1.3.7e" rel="bp154.3.3.1"/>
  <changelog author="bwiedemann@suse.com" date="1500638400">- Sort SHARED_MODS list to fix build compare (boo#1041090)</changelog>
  <changelog author="chris@computersalat.de" date="1531224000">- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1531310400">- update to 1.3.6
  * Support for using Redis for caching, logging; see the doc/howto/Redis.html
    documentation.
  * Fixed mod_sql_postgres SSL support (Issue #415).
  * Support building against LibreSSL instead of OpenSSL (Issue #361).
  * Better support on AIX for login restraictions (Bug #4285).
  * TimeoutLogin (and other timeouts) were not working properly for SFTP
    connections (Bug#4299).
  * Handling of the SIGILL and SIGINT signals, by the daemon process, now causes
    the child processes to be terminated as well (Issue #461).
  * RPM .spec file naming changed to conform to Fedora guidelines.
  * Fix for "AllowChrootSymlinks off" checking each component for symlinks
    (CVE-2017-7418).
  - New Modules:
  * mod_redis, mod_tls_redis, mod_wrap2_redis
    With Redis now supported as a caching mechanism, similar to Memcache,
    there are now Redis-using modules: mod_redis (for configuring the Redis
    connection information), mod_tls_redis (for caching SSL sessions and
    OCSP information using Redis), and mod_wrap2_redis (for using ACLs stored
    in Redis).
  - Changed Modules:
  * mod_ban
    The mod_ban module's BanCache directive can now use Redis-based caching;
    see doc/contrib/mod_ban.html#BanCache.
  - New Configuration Directives
  * SQLPasswordArgon2, SQLPasswordScrypt
    The key lengths for Argon2 and Scrypt-based passwords are now configurable
    via these new directives; previously, the key length had been hardcoded
    to be 32 bytes, which is not interoperable with all other implementations
    (Issue #454).
  - Changed Configuration Directives
  * AllowChrootSymlinks
    When "AllowChrootSymlinks off" was used, only the last portion of the
    DefaultRoot path would be checked to see if it was a symlink.  Now,
    each component of the DefaultRoot path will be checked to see if it is
    a symlink when "AllowChrootSymlinks off" is used.
  * Include
    The Include directive can now be used within a &lt;Limit&gt; section, e.g.:
    &lt;Limit LOGIN&gt;
    Include /path/to/allowed.txt
    DenyAll
    &lt;/Limit&gt;
  - API Changes
  * A new JSON API has been added, for use by third-party modules.
- remove obsolete proftpd_include-in-limit-section.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
</package>
<package pkgid="a94c32db3c1f36f290443e2ec143eb973a430414f44bd9a5d72d67719f81b63f" name="proftpd-radius" arch="i586">
  <version epoch="0" ver="1.3.7e" rel="bp154.3.3.1"/>
  <changelog author="bwiedemann@suse.com" date="1500638400">- Sort SHARED_MODS list to fix build compare (boo#1041090)</changelog>
  <changelog author="chris@computersalat.de" date="1531224000">- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1531310400">- update to 1.3.6
  * Support for using Redis for caching, logging; see the doc/howto/Redis.html
    documentation.
  * Fixed mod_sql_postgres SSL support (Issue #415).
  * Support building against LibreSSL instead of OpenSSL (Issue #361).
  * Better support on AIX for login restraictions (Bug #4285).
  * TimeoutLogin (and other timeouts) were not working properly for SFTP
    connections (Bug#4299).
  * Handling of the SIGILL and SIGINT signals, by the daemon process, now causes
    the child processes to be terminated as well (Issue #461).
  * RPM .spec file naming changed to conform to Fedora guidelines.
  * Fix for "AllowChrootSymlinks off" checking each component for symlinks
    (CVE-2017-7418).
  - New Modules:
  * mod_redis, mod_tls_redis, mod_wrap2_redis
    With Redis now supported as a caching mechanism, similar to Memcache,
    there are now Redis-using modules: mod_redis (for configuring the Redis
    connection information), mod_tls_redis (for caching SSL sessions and
    OCSP information using Redis), and mod_wrap2_redis (for using ACLs stored
    in Redis).
  - Changed Modules:
  * mod_ban
    The mod_ban module's BanCache directive can now use Redis-based caching;
    see doc/contrib/mod_ban.html#BanCache.
  - New Configuration Directives
  * SQLPasswordArgon2, SQLPasswordScrypt
    The key lengths for Argon2 and Scrypt-based passwords are now configurable
    via these new directives; previously, the key length had been hardcoded
    to be 32 bytes, which is not interoperable with all other implementations
    (Issue #454).
  - Changed Configuration Directives
  * AllowChrootSymlinks
    When "AllowChrootSymlinks off" was used, only the last portion of the
    DefaultRoot path would be checked to see if it was a symlink.  Now,
    each component of the DefaultRoot path will be checked to see if it is
    a symlink when "AllowChrootSymlinks off" is used.
  * Include
    The Include directive can now be used within a &lt;Limit&gt; section, e.g.:
    &lt;Limit LOGIN&gt;
    Include /path/to/allowed.txt
    DenyAll
    &lt;/Limit&gt;
  - API Changes
  * A new JSON API has been added, for use by third-party modules.
- remove obsolete proftpd_include-in-limit-section.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
</package>
<package pkgid="67d5e89a684ce3167e193831ab52491616cc50e4bd4348b9c6ccece63a546dc0" name="proftpd-radius" arch="ppc64le">
  <version epoch="0" ver="1.3.7e" rel="bp154.3.3.1"/>
  <changelog author="bwiedemann@suse.com" date="1500638400">- Sort SHARED_MODS list to fix build compare (boo#1041090)</changelog>
  <changelog author="chris@computersalat.de" date="1531224000">- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1531310400">- update to 1.3.6
  * Support for using Redis for caching, logging; see the doc/howto/Redis.html
    documentation.
  * Fixed mod_sql_postgres SSL support (Issue #415).
  * Support building against LibreSSL instead of OpenSSL (Issue #361).
  * Better support on AIX for login restraictions (Bug #4285).
  * TimeoutLogin (and other timeouts) were not working properly for SFTP
    connections (Bug#4299).
  * Handling of the SIGILL and SIGINT signals, by the daemon process, now causes
    the child processes to be terminated as well (Issue #461).
  * RPM .spec file naming changed to conform to Fedora guidelines.
  * Fix for "AllowChrootSymlinks off" checking each component for symlinks
    (CVE-2017-7418).
  - New Modules:
  * mod_redis, mod_tls_redis, mod_wrap2_redis
    With Redis now supported as a caching mechanism, similar to Memcache,
    there are now Redis-using modules: mod_redis (for configuring the Redis
    connection information), mod_tls_redis (for caching SSL sessions and
    OCSP information using Redis), and mod_wrap2_redis (for using ACLs stored
    in Redis).
  - Changed Modules:
  * mod_ban
    The mod_ban module's BanCache directive can now use Redis-based caching;
    see doc/contrib/mod_ban.html#BanCache.
  - New Configuration Directives
  * SQLPasswordArgon2, SQLPasswordScrypt
    The key lengths for Argon2 and Scrypt-based passwords are now configurable
    via these new directives; previously, the key length had been hardcoded
    to be 32 bytes, which is not interoperable with all other implementations
    (Issue #454).
  - Changed Configuration Directives
  * AllowChrootSymlinks
    When "AllowChrootSymlinks off" was used, only the last portion of the
    DefaultRoot path would be checked to see if it was a symlink.  Now,
    each component of the DefaultRoot path will be checked to see if it is
    a symlink when "AllowChrootSymlinks off" is used.
  * Include
    The Include directive can now be used within a &lt;Limit&gt; section, e.g.:
    &lt;Limit LOGIN&gt;
    Include /path/to/allowed.txt
    DenyAll
    &lt;/Limit&gt;
  - API Changes
  * A new JSON API has been added, for use by third-party modules.
- remove obsolete proftpd_include-in-limit-section.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
</package>
<package pkgid="ecb12c2c608ba02531bc4a8a9918fe7c3757be5f6194ac8d8ed4ffb33d3284d9" name="proftpd-radius" arch="s390x">
  <version epoch="0" ver="1.3.7e" rel="bp154.3.3.1"/>
  <changelog author="bwiedemann@suse.com" date="1500638400">- Sort SHARED_MODS list to fix build compare (boo#1041090)</changelog>
  <changelog author="chris@computersalat.de" date="1531224000">- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1531310400">- update to 1.3.6
  * Support for using Redis for caching, logging; see the doc/howto/Redis.html
    documentation.
  * Fixed mod_sql_postgres SSL support (Issue #415).
  * Support building against LibreSSL instead of OpenSSL (Issue #361).
  * Better support on AIX for login restraictions (Bug #4285).
  * TimeoutLogin (and other timeouts) were not working properly for SFTP
    connections (Bug#4299).
  * Handling of the SIGILL and SIGINT signals, by the daemon process, now causes
    the child processes to be terminated as well (Issue #461).
  * RPM .spec file naming changed to conform to Fedora guidelines.
  * Fix for "AllowChrootSymlinks off" checking each component for symlinks
    (CVE-2017-7418).
  - New Modules:
  * mod_redis, mod_tls_redis, mod_wrap2_redis
    With Redis now supported as a caching mechanism, similar to Memcache,
    there are now Redis-using modules: mod_redis (for configuring the Redis
    connection information), mod_tls_redis (for caching SSL sessions and
    OCSP information using Redis), and mod_wrap2_redis (for using ACLs stored
    in Redis).
  - Changed Modules:
  * mod_ban
    The mod_ban module's BanCache directive can now use Redis-based caching;
    see doc/contrib/mod_ban.html#BanCache.
  - New Configuration Directives
  * SQLPasswordArgon2, SQLPasswordScrypt
    The key lengths for Argon2 and Scrypt-based passwords are now configurable
    via these new directives; previously, the key length had been hardcoded
    to be 32 bytes, which is not interoperable with all other implementations
    (Issue #454).
  - Changed Configuration Directives
  * AllowChrootSymlinks
    When "AllowChrootSymlinks off" was used, only the last portion of the
    DefaultRoot path would be checked to see if it was a symlink.  Now,
    each component of the DefaultRoot path will be checked to see if it is
    a symlink when "AllowChrootSymlinks off" is used.
  * Include
    The Include directive can now be used within a &lt;Limit&gt; section, e.g.:
    &lt;Limit LOGIN&gt;
    Include /path/to/allowed.txt
    DenyAll
    &lt;/Limit&gt;
  - API Changes
  * A new JSON API has been added, for use by third-party modules.
- remove obsolete proftpd_include-in-limit-section.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
</package>
<package pkgid="8756078829084b109cafb8ec54af2c37f7d179af753c465deda6e71038a854f7" name="proftpd-radius" arch="x86_64">
  <version epoch="0" ver="1.3.7e" rel="bp154.3.3.1"/>
  <changelog author="bwiedemann@suse.com" date="1500638400">- Sort SHARED_MODS list to fix build compare (boo#1041090)</changelog>
  <changelog author="chris@computersalat.de" date="1531224000">- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1531310400">- update to 1.3.6
  * Support for using Redis for caching, logging; see the doc/howto/Redis.html
    documentation.
  * Fixed mod_sql_postgres SSL support (Issue #415).
  * Support building against LibreSSL instead of OpenSSL (Issue #361).
  * Better support on AIX for login restraictions (Bug #4285).
  * TimeoutLogin (and other timeouts) were not working properly for SFTP
    connections (Bug#4299).
  * Handling of the SIGILL and SIGINT signals, by the daemon process, now causes
    the child processes to be terminated as well (Issue #461).
  * RPM .spec file naming changed to conform to Fedora guidelines.
  * Fix for "AllowChrootSymlinks off" checking each component for symlinks
    (CVE-2017-7418).
  - New Modules:
  * mod_redis, mod_tls_redis, mod_wrap2_redis
    With Redis now supported as a caching mechanism, similar to Memcache,
    there are now Redis-using modules: mod_redis (for configuring the Redis
    connection information), mod_tls_redis (for caching SSL sessions and
    OCSP information using Redis), and mod_wrap2_redis (for using ACLs stored
    in Redis).
  - Changed Modules:
  * mod_ban
    The mod_ban module's BanCache directive can now use Redis-based caching;
    see doc/contrib/mod_ban.html#BanCache.
  - New Configuration Directives
  * SQLPasswordArgon2, SQLPasswordScrypt
    The key lengths for Argon2 and Scrypt-based passwords are now configurable
    via these new directives; previously, the key length had been hardcoded
    to be 32 bytes, which is not interoperable with all other implementations
    (Issue #454).
  - Changed Configuration Directives
  * AllowChrootSymlinks
    When "AllowChrootSymlinks off" was used, only the last portion of the
    DefaultRoot path would be checked to see if it was a symlink.  Now,
    each component of the DefaultRoot path will be checked to see if it is
    a symlink when "AllowChrootSymlinks off" is used.
  * Include
    The Include directive can now be used within a &lt;Limit&gt; section, e.g.:
    &lt;Limit LOGIN&gt;
    Include /path/to/allowed.txt
    DenyAll
    &lt;/Limit&gt;
  - API Changes
  * A new JSON API has been added, for use by third-party modules.
- remove obsolete proftpd_include-in-limit-section.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
</package>
<package pkgid="2bc8564e2eab34d513736235bdce6ff82c6fca66f660a3cfaa98f0e13a42282b" name="proftpd-radius" arch="aarch64">
  <version epoch="0" ver="1.3.7e" rel="bp154.3.6.1"/>
  <changelog author="chris@computersalat.de" date="1531224000">- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1531310400">- update to 1.3.6
  * Support for using Redis for caching, logging; see the doc/howto/Redis.html
    documentation.
  * Fixed mod_sql_postgres SSL support (Issue #415).
  * Support building against LibreSSL instead of OpenSSL (Issue #361).
  * Better support on AIX for login restraictions (Bug #4285).
  * TimeoutLogin (and other timeouts) were not working properly for SFTP
    connections (Bug#4299).
  * Handling of the SIGILL and SIGINT signals, by the daemon process, now causes
    the child processes to be terminated as well (Issue #461).
  * RPM .spec file naming changed to conform to Fedora guidelines.
  * Fix for "AllowChrootSymlinks off" checking each component for symlinks
    (CVE-2017-7418).
  - New Modules:
  * mod_redis, mod_tls_redis, mod_wrap2_redis
    With Redis now supported as a caching mechanism, similar to Memcache,
    there are now Redis-using modules: mod_redis (for configuring the Redis
    connection information), mod_tls_redis (for caching SSL sessions and
    OCSP information using Redis), and mod_wrap2_redis (for using ACLs stored
    in Redis).
  - Changed Modules:
  * mod_ban
    The mod_ban module's BanCache directive can now use Redis-based caching;
    see doc/contrib/mod_ban.html#BanCache.
  - New Configuration Directives
  * SQLPasswordArgon2, SQLPasswordScrypt
    The key lengths for Argon2 and Scrypt-based passwords are now configurable
    via these new directives; previously, the key length had been hardcoded
    to be 32 bytes, which is not interoperable with all other implementations
    (Issue #454).
  - Changed Configuration Directives
  * AllowChrootSymlinks
    When "AllowChrootSymlinks off" was used, only the last portion of the
    DefaultRoot path would be checked to see if it was a symlink.  Now,
    each component of the DefaultRoot path will be checked to see if it is
    a symlink when "AllowChrootSymlinks off" is used.
  * Include
    The Include directive can now be used within a &lt;Limit&gt; section, e.g.:
    &lt;Limit LOGIN&gt;
    Include /path/to/allowed.txt
    DenyAll
    &lt;/Limit&gt;
  - API Changes
  * A new JSON API has been added, for use by third-party modules.
- remove obsolete proftpd_include-in-limit-section.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="chris@computersalat.de" date="1662033600">- Update proftpd-basic.conf.patch
  * remove obsolete config option, LoginPasswordPrompt
- rework proftpd-dist.patch</changelog>
</package>
<package pkgid="238bb0db71c683599dc3be729106589993e4f26a9d64cd8e3de316837f578d42" name="proftpd-radius" arch="i586">
  <version epoch="0" ver="1.3.7e" rel="bp154.3.6.1"/>
  <changelog author="chris@computersalat.de" date="1531224000">- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1531310400">- update to 1.3.6
  * Support for using Redis for caching, logging; see the doc/howto/Redis.html
    documentation.
  * Fixed mod_sql_postgres SSL support (Issue #415).
  * Support building against LibreSSL instead of OpenSSL (Issue #361).
  * Better support on AIX for login restraictions (Bug #4285).
  * TimeoutLogin (and other timeouts) were not working properly for SFTP
    connections (Bug#4299).
  * Handling of the SIGILL and SIGINT signals, by the daemon process, now causes
    the child processes to be terminated as well (Issue #461).
  * RPM .spec file naming changed to conform to Fedora guidelines.
  * Fix for "AllowChrootSymlinks off" checking each component for symlinks
    (CVE-2017-7418).
  - New Modules:
  * mod_redis, mod_tls_redis, mod_wrap2_redis
    With Redis now supported as a caching mechanism, similar to Memcache,
    there are now Redis-using modules: mod_redis (for configuring the Redis
    connection information), mod_tls_redis (for caching SSL sessions and
    OCSP information using Redis), and mod_wrap2_redis (for using ACLs stored
    in Redis).
  - Changed Modules:
  * mod_ban
    The mod_ban module's BanCache directive can now use Redis-based caching;
    see doc/contrib/mod_ban.html#BanCache.
  - New Configuration Directives
  * SQLPasswordArgon2, SQLPasswordScrypt
    The key lengths for Argon2 and Scrypt-based passwords are now configurable
    via these new directives; previously, the key length had been hardcoded
    to be 32 bytes, which is not interoperable with all other implementations
    (Issue #454).
  - Changed Configuration Directives
  * AllowChrootSymlinks
    When "AllowChrootSymlinks off" was used, only the last portion of the
    DefaultRoot path would be checked to see if it was a symlink.  Now,
    each component of the DefaultRoot path will be checked to see if it is
    a symlink when "AllowChrootSymlinks off" is used.
  * Include
    The Include directive can now be used within a &lt;Limit&gt; section, e.g.:
    &lt;Limit LOGIN&gt;
    Include /path/to/allowed.txt
    DenyAll
    &lt;/Limit&gt;
  - API Changes
  * A new JSON API has been added, for use by third-party modules.
- remove obsolete proftpd_include-in-limit-section.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="chris@computersalat.de" date="1662033600">- Update proftpd-basic.conf.patch
  * remove obsolete config option, LoginPasswordPrompt
- rework proftpd-dist.patch</changelog>
</package>
<package pkgid="1d25fcd88cc3a9afe49b01a222fb1d1be21248db27b12b1d00ca8cf8b4a05a1b" name="proftpd-radius" arch="ppc64le">
  <version epoch="0" ver="1.3.7e" rel="bp154.3.6.1"/>
  <changelog author="chris@computersalat.de" date="1531224000">- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1531310400">- update to 1.3.6
  * Support for using Redis for caching, logging; see the doc/howto/Redis.html
    documentation.
  * Fixed mod_sql_postgres SSL support (Issue #415).
  * Support building against LibreSSL instead of OpenSSL (Issue #361).
  * Better support on AIX for login restraictions (Bug #4285).
  * TimeoutLogin (and other timeouts) were not working properly for SFTP
    connections (Bug#4299).
  * Handling of the SIGILL and SIGINT signals, by the daemon process, now causes
    the child processes to be terminated as well (Issue #461).
  * RPM .spec file naming changed to conform to Fedora guidelines.
  * Fix for "AllowChrootSymlinks off" checking each component for symlinks
    (CVE-2017-7418).
  - New Modules:
  * mod_redis, mod_tls_redis, mod_wrap2_redis
    With Redis now supported as a caching mechanism, similar to Memcache,
    there are now Redis-using modules: mod_redis (for configuring the Redis
    connection information), mod_tls_redis (for caching SSL sessions and
    OCSP information using Redis), and mod_wrap2_redis (for using ACLs stored
    in Redis).
  - Changed Modules:
  * mod_ban
    The mod_ban module's BanCache directive can now use Redis-based caching;
    see doc/contrib/mod_ban.html#BanCache.
  - New Configuration Directives
  * SQLPasswordArgon2, SQLPasswordScrypt
    The key lengths for Argon2 and Scrypt-based passwords are now configurable
    via these new directives; previously, the key length had been hardcoded
    to be 32 bytes, which is not interoperable with all other implementations
    (Issue #454).
  - Changed Configuration Directives
  * AllowChrootSymlinks
    When "AllowChrootSymlinks off" was used, only the last portion of the
    DefaultRoot path would be checked to see if it was a symlink.  Now,
    each component of the DefaultRoot path will be checked to see if it is
    a symlink when "AllowChrootSymlinks off" is used.
  * Include
    The Include directive can now be used within a &lt;Limit&gt; section, e.g.:
    &lt;Limit LOGIN&gt;
    Include /path/to/allowed.txt
    DenyAll
    &lt;/Limit&gt;
  - API Changes
  * A new JSON API has been added, for use by third-party modules.
- remove obsolete proftpd_include-in-limit-section.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="chris@computersalat.de" date="1662033600">- Update proftpd-basic.conf.patch
  * remove obsolete config option, LoginPasswordPrompt
- rework proftpd-dist.patch</changelog>
</package>
<package pkgid="28324ccbd44418a474c2cda19a797fa15ed565525627a8f71ab0b212b932885f" name="proftpd-radius" arch="s390x">
  <version epoch="0" ver="1.3.7e" rel="bp154.3.6.1"/>
  <changelog author="chris@computersalat.de" date="1531224000">- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1531310400">- update to 1.3.6
  * Support for using Redis for caching, logging; see the doc/howto/Redis.html
    documentation.
  * Fixed mod_sql_postgres SSL support (Issue #415).
  * Support building against LibreSSL instead of OpenSSL (Issue #361).
  * Better support on AIX for login restraictions (Bug #4285).
  * TimeoutLogin (and other timeouts) were not working properly for SFTP
    connections (Bug#4299).
  * Handling of the SIGILL and SIGINT signals, by the daemon process, now causes
    the child processes to be terminated as well (Issue #461).
  * RPM .spec file naming changed to conform to Fedora guidelines.
  * Fix for "AllowChrootSymlinks off" checking each component for symlinks
    (CVE-2017-7418).
  - New Modules:
  * mod_redis, mod_tls_redis, mod_wrap2_redis
    With Redis now supported as a caching mechanism, similar to Memcache,
    there are now Redis-using modules: mod_redis (for configuring the Redis
    connection information), mod_tls_redis (for caching SSL sessions and
    OCSP information using Redis), and mod_wrap2_redis (for using ACLs stored
    in Redis).
  - Changed Modules:
  * mod_ban
    The mod_ban module's BanCache directive can now use Redis-based caching;
    see doc/contrib/mod_ban.html#BanCache.
  - New Configuration Directives
  * SQLPasswordArgon2, SQLPasswordScrypt
    The key lengths for Argon2 and Scrypt-based passwords are now configurable
    via these new directives; previously, the key length had been hardcoded
    to be 32 bytes, which is not interoperable with all other implementations
    (Issue #454).
  - Changed Configuration Directives
  * AllowChrootSymlinks
    When "AllowChrootSymlinks off" was used, only the last portion of the
    DefaultRoot path would be checked to see if it was a symlink.  Now,
    each component of the DefaultRoot path will be checked to see if it is
    a symlink when "AllowChrootSymlinks off" is used.
  * Include
    The Include directive can now be used within a &lt;Limit&gt; section, e.g.:
    &lt;Limit LOGIN&gt;
    Include /path/to/allowed.txt
    DenyAll
    &lt;/Limit&gt;
  - API Changes
  * A new JSON API has been added, for use by third-party modules.
- remove obsolete proftpd_include-in-limit-section.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="chris@computersalat.de" date="1662033600">- Update proftpd-basic.conf.patch
  * remove obsolete config option, LoginPasswordPrompt
- rework proftpd-dist.patch</changelog>
</package>
<package pkgid="c298244fef2549fc27f7ad1107075f2542d60cf78c325902fe264cc35da9a613" name="proftpd-radius" arch="x86_64">
  <version epoch="0" ver="1.3.7e" rel="bp154.3.6.1"/>
  <changelog author="chris@computersalat.de" date="1531224000">- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1531310400">- update to 1.3.6
  * Support for using Redis for caching, logging; see the doc/howto/Redis.html
    documentation.
  * Fixed mod_sql_postgres SSL support (Issue #415).
  * Support building against LibreSSL instead of OpenSSL (Issue #361).
  * Better support on AIX for login restraictions (Bug #4285).
  * TimeoutLogin (and other timeouts) were not working properly for SFTP
    connections (Bug#4299).
  * Handling of the SIGILL and SIGINT signals, by the daemon process, now causes
    the child processes to be terminated as well (Issue #461).
  * RPM .spec file naming changed to conform to Fedora guidelines.
  * Fix for "AllowChrootSymlinks off" checking each component for symlinks
    (CVE-2017-7418).
  - New Modules:
  * mod_redis, mod_tls_redis, mod_wrap2_redis
    With Redis now supported as a caching mechanism, similar to Memcache,
    there are now Redis-using modules: mod_redis (for configuring the Redis
    connection information), mod_tls_redis (for caching SSL sessions and
    OCSP information using Redis), and mod_wrap2_redis (for using ACLs stored
    in Redis).
  - Changed Modules:
  * mod_ban
    The mod_ban module's BanCache directive can now use Redis-based caching;
    see doc/contrib/mod_ban.html#BanCache.
  - New Configuration Directives
  * SQLPasswordArgon2, SQLPasswordScrypt
    The key lengths for Argon2 and Scrypt-based passwords are now configurable
    via these new directives; previously, the key length had been hardcoded
    to be 32 bytes, which is not interoperable with all other implementations
    (Issue #454).
  - Changed Configuration Directives
  * AllowChrootSymlinks
    When "AllowChrootSymlinks off" was used, only the last portion of the
    DefaultRoot path would be checked to see if it was a symlink.  Now,
    each component of the DefaultRoot path will be checked to see if it is
    a symlink when "AllowChrootSymlinks off" is used.
  * Include
    The Include directive can now be used within a &lt;Limit&gt; section, e.g.:
    &lt;Limit LOGIN&gt;
    Include /path/to/allowed.txt
    DenyAll
    &lt;/Limit&gt;
  - API Changes
  * A new JSON API has been added, for use by third-party modules.
- remove obsolete proftpd_include-in-limit-section.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="chris@computersalat.de" date="1662033600">- Update proftpd-basic.conf.patch
  * remove obsolete config option, LoginPasswordPrompt
- rework proftpd-dist.patch</changelog>
</package>
<package pkgid="7bf258fea4a4f3a3237dba5e2a1f1485a5511c7a2b187cb1d3dedf1f6f66ffc8" name="proftpd-radius" arch="aarch64">
  <version epoch="0" ver="1.3.7f" rel="bp154.3.9.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="chris@computersalat.de" date="1662033600">- Update proftpd-basic.conf.patch
  * remove obsolete config option, LoginPasswordPrompt
- rework proftpd-dist.patch</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1673870400">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="chris@computersalat.de" date="1674648000">- 1.3.7f - Released 04-Dec-2022
  * Issue 1533 - mod_tls module unexpectedly allows TLS handshake after
    authentication in some configurations.
  * Bug 4491 - unable to verify signed data: signature type 'rsa-sha2-512' does
    not match publickey algorithm 'ssh-rsa'.</changelog>
</package>
<package pkgid="3356bf9b6afca9e3d39071f4e029b51a128ff6661c86cd83b5657c74f2cae425" name="proftpd-radius" arch="i586">
  <version epoch="0" ver="1.3.7f" rel="bp154.3.9.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="chris@computersalat.de" date="1662033600">- Update proftpd-basic.conf.patch
  * remove obsolete config option, LoginPasswordPrompt
- rework proftpd-dist.patch</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1673870400">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="chris@computersalat.de" date="1674648000">- 1.3.7f - Released 04-Dec-2022
  * Issue 1533 - mod_tls module unexpectedly allows TLS handshake after
    authentication in some configurations.
  * Bug 4491 - unable to verify signed data: signature type 'rsa-sha2-512' does
    not match publickey algorithm 'ssh-rsa'.</changelog>
</package>
<package pkgid="d9a6dc91d93f30db57a1569798e0764d1e8d6b60dbe15f942450d78eaa2cc8b6" name="proftpd-radius" arch="ppc64le">
  <version epoch="0" ver="1.3.7f" rel="bp154.3.9.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="chris@computersalat.de" date="1662033600">- Update proftpd-basic.conf.patch
  * remove obsolete config option, LoginPasswordPrompt
- rework proftpd-dist.patch</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1673870400">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="chris@computersalat.de" date="1674648000">- 1.3.7f - Released 04-Dec-2022
  * Issue 1533 - mod_tls module unexpectedly allows TLS handshake after
    authentication in some configurations.
  * Bug 4491 - unable to verify signed data: signature type 'rsa-sha2-512' does
    not match publickey algorithm 'ssh-rsa'.</changelog>
</package>
<package pkgid="585b693b0fb5a6a3da126d0ba9b66f478a6e1daa7a8739b84fd27dec5b40b4f6" name="proftpd-radius" arch="s390x">
  <version epoch="0" ver="1.3.7f" rel="bp154.3.9.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="chris@computersalat.de" date="1662033600">- Update proftpd-basic.conf.patch
  * remove obsolete config option, LoginPasswordPrompt
- rework proftpd-dist.patch</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1673870400">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="chris@computersalat.de" date="1674648000">- 1.3.7f - Released 04-Dec-2022
  * Issue 1533 - mod_tls module unexpectedly allows TLS handshake after
    authentication in some configurations.
  * Bug 4491 - unable to verify signed data: signature type 'rsa-sha2-512' does
    not match publickey algorithm 'ssh-rsa'.</changelog>
</package>
<package pkgid="aa9c026be98f52fb37991647de4ddc0f1c66aa46e03202d5d11baefb2f880371" name="proftpd-radius" arch="x86_64">
  <version epoch="0" ver="1.3.7f" rel="bp154.3.9.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="chris@computersalat.de" date="1662033600">- Update proftpd-basic.conf.patch
  * remove obsolete config option, LoginPasswordPrompt
- rework proftpd-dist.patch</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1673870400">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="chris@computersalat.de" date="1674648000">- 1.3.7f - Released 04-Dec-2022
  * Issue 1533 - mod_tls module unexpectedly allows TLS handshake after
    authentication in some configurations.
  * Bug 4491 - unable to verify signed data: signature type 'rsa-sha2-512' does
    not match publickey algorithm 'ssh-rsa'.</changelog>
</package>
<package pkgid="81fd9d0b04cbc93ba407a74de8427f3af752be030c6bdbfce9a646a20a804b2b" name="proftpd-sqlite" arch="aarch64">
  <version epoch="0" ver="1.3.7e" rel="bp154.3.3.1"/>
  <changelog author="bwiedemann@suse.com" date="1500638400">- Sort SHARED_MODS list to fix build compare (boo#1041090)</changelog>
  <changelog author="chris@computersalat.de" date="1531224000">- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1531310400">- update to 1.3.6
  * Support for using Redis for caching, logging; see the doc/howto/Redis.html
    documentation.
  * Fixed mod_sql_postgres SSL support (Issue #415).
  * Support building against LibreSSL instead of OpenSSL (Issue #361).
  * Better support on AIX for login restraictions (Bug #4285).
  * TimeoutLogin (and other timeouts) were not working properly for SFTP
    connections (Bug#4299).
  * Handling of the SIGILL and SIGINT signals, by the daemon process, now causes
    the child processes to be terminated as well (Issue #461).
  * RPM .spec file naming changed to conform to Fedora guidelines.
  * Fix for "AllowChrootSymlinks off" checking each component for symlinks
    (CVE-2017-7418).
  - New Modules:
  * mod_redis, mod_tls_redis, mod_wrap2_redis
    With Redis now supported as a caching mechanism, similar to Memcache,
    there are now Redis-using modules: mod_redis (for configuring the Redis
    connection information), mod_tls_redis (for caching SSL sessions and
    OCSP information using Redis), and mod_wrap2_redis (for using ACLs stored
    in Redis).
  - Changed Modules:
  * mod_ban
    The mod_ban module's BanCache directive can now use Redis-based caching;
    see doc/contrib/mod_ban.html#BanCache.
  - New Configuration Directives
  * SQLPasswordArgon2, SQLPasswordScrypt
    The key lengths for Argon2 and Scrypt-based passwords are now configurable
    via these new directives; previously, the key length had been hardcoded
    to be 32 bytes, which is not interoperable with all other implementations
    (Issue #454).
  - Changed Configuration Directives
  * AllowChrootSymlinks
    When "AllowChrootSymlinks off" was used, only the last portion of the
    DefaultRoot path would be checked to see if it was a symlink.  Now,
    each component of the DefaultRoot path will be checked to see if it is
    a symlink when "AllowChrootSymlinks off" is used.
  * Include
    The Include directive can now be used within a &lt;Limit&gt; section, e.g.:
    &lt;Limit LOGIN&gt;
    Include /path/to/allowed.txt
    DenyAll
    &lt;/Limit&gt;
  - API Changes
  * A new JSON API has been added, for use by third-party modules.
- remove obsolete proftpd_include-in-limit-section.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
</package>
<package pkgid="5deb593778d4d4f45a2a51456ddf5fec08cd41ceb053406d6b616f48d43b869e" name="proftpd-sqlite" arch="i586">
  <version epoch="0" ver="1.3.7e" rel="bp154.3.3.1"/>
  <changelog author="bwiedemann@suse.com" date="1500638400">- Sort SHARED_MODS list to fix build compare (boo#1041090)</changelog>
  <changelog author="chris@computersalat.de" date="1531224000">- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1531310400">- update to 1.3.6
  * Support for using Redis for caching, logging; see the doc/howto/Redis.html
    documentation.
  * Fixed mod_sql_postgres SSL support (Issue #415).
  * Support building against LibreSSL instead of OpenSSL (Issue #361).
  * Better support on AIX for login restraictions (Bug #4285).
  * TimeoutLogin (and other timeouts) were not working properly for SFTP
    connections (Bug#4299).
  * Handling of the SIGILL and SIGINT signals, by the daemon process, now causes
    the child processes to be terminated as well (Issue #461).
  * RPM .spec file naming changed to conform to Fedora guidelines.
  * Fix for "AllowChrootSymlinks off" checking each component for symlinks
    (CVE-2017-7418).
  - New Modules:
  * mod_redis, mod_tls_redis, mod_wrap2_redis
    With Redis now supported as a caching mechanism, similar to Memcache,
    there are now Redis-using modules: mod_redis (for configuring the Redis
    connection information), mod_tls_redis (for caching SSL sessions and
    OCSP information using Redis), and mod_wrap2_redis (for using ACLs stored
    in Redis).
  - Changed Modules:
  * mod_ban
    The mod_ban module's BanCache directive can now use Redis-based caching;
    see doc/contrib/mod_ban.html#BanCache.
  - New Configuration Directives
  * SQLPasswordArgon2, SQLPasswordScrypt
    The key lengths for Argon2 and Scrypt-based passwords are now configurable
    via these new directives; previously, the key length had been hardcoded
    to be 32 bytes, which is not interoperable with all other implementations
    (Issue #454).
  - Changed Configuration Directives
  * AllowChrootSymlinks
    When "AllowChrootSymlinks off" was used, only the last portion of the
    DefaultRoot path would be checked to see if it was a symlink.  Now,
    each component of the DefaultRoot path will be checked to see if it is
    a symlink when "AllowChrootSymlinks off" is used.
  * Include
    The Include directive can now be used within a &lt;Limit&gt; section, e.g.:
    &lt;Limit LOGIN&gt;
    Include /path/to/allowed.txt
    DenyAll
    &lt;/Limit&gt;
  - API Changes
  * A new JSON API has been added, for use by third-party modules.
- remove obsolete proftpd_include-in-limit-section.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
</package>
<package pkgid="7add2bf07faea6bd13115a2c15a815351bdd1005aaf4b78dadd8de8aadd44b08" name="proftpd-sqlite" arch="ppc64le">
  <version epoch="0" ver="1.3.7e" rel="bp154.3.3.1"/>
  <changelog author="bwiedemann@suse.com" date="1500638400">- Sort SHARED_MODS list to fix build compare (boo#1041090)</changelog>
  <changelog author="chris@computersalat.de" date="1531224000">- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1531310400">- update to 1.3.6
  * Support for using Redis for caching, logging; see the doc/howto/Redis.html
    documentation.
  * Fixed mod_sql_postgres SSL support (Issue #415).
  * Support building against LibreSSL instead of OpenSSL (Issue #361).
  * Better support on AIX for login restraictions (Bug #4285).
  * TimeoutLogin (and other timeouts) were not working properly for SFTP
    connections (Bug#4299).
  * Handling of the SIGILL and SIGINT signals, by the daemon process, now causes
    the child processes to be terminated as well (Issue #461).
  * RPM .spec file naming changed to conform to Fedora guidelines.
  * Fix for "AllowChrootSymlinks off" checking each component for symlinks
    (CVE-2017-7418).
  - New Modules:
  * mod_redis, mod_tls_redis, mod_wrap2_redis
    With Redis now supported as a caching mechanism, similar to Memcache,
    there are now Redis-using modules: mod_redis (for configuring the Redis
    connection information), mod_tls_redis (for caching SSL sessions and
    OCSP information using Redis), and mod_wrap2_redis (for using ACLs stored
    in Redis).
  - Changed Modules:
  * mod_ban
    The mod_ban module's BanCache directive can now use Redis-based caching;
    see doc/contrib/mod_ban.html#BanCache.
  - New Configuration Directives
  * SQLPasswordArgon2, SQLPasswordScrypt
    The key lengths for Argon2 and Scrypt-based passwords are now configurable
    via these new directives; previously, the key length had been hardcoded
    to be 32 bytes, which is not interoperable with all other implementations
    (Issue #454).
  - Changed Configuration Directives
  * AllowChrootSymlinks
    When "AllowChrootSymlinks off" was used, only the last portion of the
    DefaultRoot path would be checked to see if it was a symlink.  Now,
    each component of the DefaultRoot path will be checked to see if it is
    a symlink when "AllowChrootSymlinks off" is used.
  * Include
    The Include directive can now be used within a &lt;Limit&gt; section, e.g.:
    &lt;Limit LOGIN&gt;
    Include /path/to/allowed.txt
    DenyAll
    &lt;/Limit&gt;
  - API Changes
  * A new JSON API has been added, for use by third-party modules.
- remove obsolete proftpd_include-in-limit-section.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
</package>
<package pkgid="bb3b4b7cd20607dd6455b73194386c522c15fcc6f3d5d0b718d1dd6b49cbeb4e" name="proftpd-sqlite" arch="s390x">
  <version epoch="0" ver="1.3.7e" rel="bp154.3.3.1"/>
  <changelog author="bwiedemann@suse.com" date="1500638400">- Sort SHARED_MODS list to fix build compare (boo#1041090)</changelog>
  <changelog author="chris@computersalat.de" date="1531224000">- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1531310400">- update to 1.3.6
  * Support for using Redis for caching, logging; see the doc/howto/Redis.html
    documentation.
  * Fixed mod_sql_postgres SSL support (Issue #415).
  * Support building against LibreSSL instead of OpenSSL (Issue #361).
  * Better support on AIX for login restraictions (Bug #4285).
  * TimeoutLogin (and other timeouts) were not working properly for SFTP
    connections (Bug#4299).
  * Handling of the SIGILL and SIGINT signals, by the daemon process, now causes
    the child processes to be terminated as well (Issue #461).
  * RPM .spec file naming changed to conform to Fedora guidelines.
  * Fix for "AllowChrootSymlinks off" checking each component for symlinks
    (CVE-2017-7418).
  - New Modules:
  * mod_redis, mod_tls_redis, mod_wrap2_redis
    With Redis now supported as a caching mechanism, similar to Memcache,
    there are now Redis-using modules: mod_redis (for configuring the Redis
    connection information), mod_tls_redis (for caching SSL sessions and
    OCSP information using Redis), and mod_wrap2_redis (for using ACLs stored
    in Redis).
  - Changed Modules:
  * mod_ban
    The mod_ban module's BanCache directive can now use Redis-based caching;
    see doc/contrib/mod_ban.html#BanCache.
  - New Configuration Directives
  * SQLPasswordArgon2, SQLPasswordScrypt
    The key lengths for Argon2 and Scrypt-based passwords are now configurable
    via these new directives; previously, the key length had been hardcoded
    to be 32 bytes, which is not interoperable with all other implementations
    (Issue #454).
  - Changed Configuration Directives
  * AllowChrootSymlinks
    When "AllowChrootSymlinks off" was used, only the last portion of the
    DefaultRoot path would be checked to see if it was a symlink.  Now,
    each component of the DefaultRoot path will be checked to see if it is
    a symlink when "AllowChrootSymlinks off" is used.
  * Include
    The Include directive can now be used within a &lt;Limit&gt; section, e.g.:
    &lt;Limit LOGIN&gt;
    Include /path/to/allowed.txt
    DenyAll
    &lt;/Limit&gt;
  - API Changes
  * A new JSON API has been added, for use by third-party modules.
- remove obsolete proftpd_include-in-limit-section.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
</package>
<package pkgid="48d0ec2a206c5484bc2329edcaa406067eaaff1cc3f6cbb60ab0805a50ba4cbb" name="proftpd-sqlite" arch="x86_64">
  <version epoch="0" ver="1.3.7e" rel="bp154.3.3.1"/>
  <changelog author="bwiedemann@suse.com" date="1500638400">- Sort SHARED_MODS list to fix build compare (boo#1041090)</changelog>
  <changelog author="chris@computersalat.de" date="1531224000">- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1531310400">- update to 1.3.6
  * Support for using Redis for caching, logging; see the doc/howto/Redis.html
    documentation.
  * Fixed mod_sql_postgres SSL support (Issue #415).
  * Support building against LibreSSL instead of OpenSSL (Issue #361).
  * Better support on AIX for login restraictions (Bug #4285).
  * TimeoutLogin (and other timeouts) were not working properly for SFTP
    connections (Bug#4299).
  * Handling of the SIGILL and SIGINT signals, by the daemon process, now causes
    the child processes to be terminated as well (Issue #461).
  * RPM .spec file naming changed to conform to Fedora guidelines.
  * Fix for "AllowChrootSymlinks off" checking each component for symlinks
    (CVE-2017-7418).
  - New Modules:
  * mod_redis, mod_tls_redis, mod_wrap2_redis
    With Redis now supported as a caching mechanism, similar to Memcache,
    there are now Redis-using modules: mod_redis (for configuring the Redis
    connection information), mod_tls_redis (for caching SSL sessions and
    OCSP information using Redis), and mod_wrap2_redis (for using ACLs stored
    in Redis).
  - Changed Modules:
  * mod_ban
    The mod_ban module's BanCache directive can now use Redis-based caching;
    see doc/contrib/mod_ban.html#BanCache.
  - New Configuration Directives
  * SQLPasswordArgon2, SQLPasswordScrypt
    The key lengths for Argon2 and Scrypt-based passwords are now configurable
    via these new directives; previously, the key length had been hardcoded
    to be 32 bytes, which is not interoperable with all other implementations
    (Issue #454).
  - Changed Configuration Directives
  * AllowChrootSymlinks
    When "AllowChrootSymlinks off" was used, only the last portion of the
    DefaultRoot path would be checked to see if it was a symlink.  Now,
    each component of the DefaultRoot path will be checked to see if it is
    a symlink when "AllowChrootSymlinks off" is used.
  * Include
    The Include directive can now be used within a &lt;Limit&gt; section, e.g.:
    &lt;Limit LOGIN&gt;
    Include /path/to/allowed.txt
    DenyAll
    &lt;/Limit&gt;
  - API Changes
  * A new JSON API has been added, for use by third-party modules.
- remove obsolete proftpd_include-in-limit-section.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
</package>
<package pkgid="e5adbcf1e1029866432ef9883ebb0960b35f4ad2ac2540e52b81560379feb10a" name="proftpd-sqlite" arch="aarch64">
  <version epoch="0" ver="1.3.7e" rel="bp154.3.6.1"/>
  <changelog author="chris@computersalat.de" date="1531224000">- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1531310400">- update to 1.3.6
  * Support for using Redis for caching, logging; see the doc/howto/Redis.html
    documentation.
  * Fixed mod_sql_postgres SSL support (Issue #415).
  * Support building against LibreSSL instead of OpenSSL (Issue #361).
  * Better support on AIX for login restraictions (Bug #4285).
  * TimeoutLogin (and other timeouts) were not working properly for SFTP
    connections (Bug#4299).
  * Handling of the SIGILL and SIGINT signals, by the daemon process, now causes
    the child processes to be terminated as well (Issue #461).
  * RPM .spec file naming changed to conform to Fedora guidelines.
  * Fix for "AllowChrootSymlinks off" checking each component for symlinks
    (CVE-2017-7418).
  - New Modules:
  * mod_redis, mod_tls_redis, mod_wrap2_redis
    With Redis now supported as a caching mechanism, similar to Memcache,
    there are now Redis-using modules: mod_redis (for configuring the Redis
    connection information), mod_tls_redis (for caching SSL sessions and
    OCSP information using Redis), and mod_wrap2_redis (for using ACLs stored
    in Redis).
  - Changed Modules:
  * mod_ban
    The mod_ban module's BanCache directive can now use Redis-based caching;
    see doc/contrib/mod_ban.html#BanCache.
  - New Configuration Directives
  * SQLPasswordArgon2, SQLPasswordScrypt
    The key lengths for Argon2 and Scrypt-based passwords are now configurable
    via these new directives; previously, the key length had been hardcoded
    to be 32 bytes, which is not interoperable with all other implementations
    (Issue #454).
  - Changed Configuration Directives
  * AllowChrootSymlinks
    When "AllowChrootSymlinks off" was used, only the last portion of the
    DefaultRoot path would be checked to see if it was a symlink.  Now,
    each component of the DefaultRoot path will be checked to see if it is
    a symlink when "AllowChrootSymlinks off" is used.
  * Include
    The Include directive can now be used within a &lt;Limit&gt; section, e.g.:
    &lt;Limit LOGIN&gt;
    Include /path/to/allowed.txt
    DenyAll
    &lt;/Limit&gt;
  - API Changes
  * A new JSON API has been added, for use by third-party modules.
- remove obsolete proftpd_include-in-limit-section.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="chris@computersalat.de" date="1662033600">- Update proftpd-basic.conf.patch
  * remove obsolete config option, LoginPasswordPrompt
- rework proftpd-dist.patch</changelog>
</package>
<package pkgid="14b967f16986b12be1034b9a690b28834e915fbc055bda20606f2f1d28cc9a51" name="proftpd-sqlite" arch="i586">
  <version epoch="0" ver="1.3.7e" rel="bp154.3.6.1"/>
  <changelog author="chris@computersalat.de" date="1531224000">- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1531310400">- update to 1.3.6
  * Support for using Redis for caching, logging; see the doc/howto/Redis.html
    documentation.
  * Fixed mod_sql_postgres SSL support (Issue #415).
  * Support building against LibreSSL instead of OpenSSL (Issue #361).
  * Better support on AIX for login restraictions (Bug #4285).
  * TimeoutLogin (and other timeouts) were not working properly for SFTP
    connections (Bug#4299).
  * Handling of the SIGILL and SIGINT signals, by the daemon process, now causes
    the child processes to be terminated as well (Issue #461).
  * RPM .spec file naming changed to conform to Fedora guidelines.
  * Fix for "AllowChrootSymlinks off" checking each component for symlinks
    (CVE-2017-7418).
  - New Modules:
  * mod_redis, mod_tls_redis, mod_wrap2_redis
    With Redis now supported as a caching mechanism, similar to Memcache,
    there are now Redis-using modules: mod_redis (for configuring the Redis
    connection information), mod_tls_redis (for caching SSL sessions and
    OCSP information using Redis), and mod_wrap2_redis (for using ACLs stored
    in Redis).
  - Changed Modules:
  * mod_ban
    The mod_ban module's BanCache directive can now use Redis-based caching;
    see doc/contrib/mod_ban.html#BanCache.
  - New Configuration Directives
  * SQLPasswordArgon2, SQLPasswordScrypt
    The key lengths for Argon2 and Scrypt-based passwords are now configurable
    via these new directives; previously, the key length had been hardcoded
    to be 32 bytes, which is not interoperable with all other implementations
    (Issue #454).
  - Changed Configuration Directives
  * AllowChrootSymlinks
    When "AllowChrootSymlinks off" was used, only the last portion of the
    DefaultRoot path would be checked to see if it was a symlink.  Now,
    each component of the DefaultRoot path will be checked to see if it is
    a symlink when "AllowChrootSymlinks off" is used.
  * Include
    The Include directive can now be used within a &lt;Limit&gt; section, e.g.:
    &lt;Limit LOGIN&gt;
    Include /path/to/allowed.txt
    DenyAll
    &lt;/Limit&gt;
  - API Changes
  * A new JSON API has been added, for use by third-party modules.
- remove obsolete proftpd_include-in-limit-section.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="chris@computersalat.de" date="1662033600">- Update proftpd-basic.conf.patch
  * remove obsolete config option, LoginPasswordPrompt
- rework proftpd-dist.patch</changelog>
</package>
<package pkgid="450b3955fdc2f1af78c3cf04c37253100f7d6ff0f336aa13eafc771a0ba23fb7" name="proftpd-sqlite" arch="ppc64le">
  <version epoch="0" ver="1.3.7e" rel="bp154.3.6.1"/>
  <changelog author="chris@computersalat.de" date="1531224000">- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1531310400">- update to 1.3.6
  * Support for using Redis for caching, logging; see the doc/howto/Redis.html
    documentation.
  * Fixed mod_sql_postgres SSL support (Issue #415).
  * Support building against LibreSSL instead of OpenSSL (Issue #361).
  * Better support on AIX for login restraictions (Bug #4285).
  * TimeoutLogin (and other timeouts) were not working properly for SFTP
    connections (Bug#4299).
  * Handling of the SIGILL and SIGINT signals, by the daemon process, now causes
    the child processes to be terminated as well (Issue #461).
  * RPM .spec file naming changed to conform to Fedora guidelines.
  * Fix for "AllowChrootSymlinks off" checking each component for symlinks
    (CVE-2017-7418).
  - New Modules:
  * mod_redis, mod_tls_redis, mod_wrap2_redis
    With Redis now supported as a caching mechanism, similar to Memcache,
    there are now Redis-using modules: mod_redis (for configuring the Redis
    connection information), mod_tls_redis (for caching SSL sessions and
    OCSP information using Redis), and mod_wrap2_redis (for using ACLs stored
    in Redis).
  - Changed Modules:
  * mod_ban
    The mod_ban module's BanCache directive can now use Redis-based caching;
    see doc/contrib/mod_ban.html#BanCache.
  - New Configuration Directives
  * SQLPasswordArgon2, SQLPasswordScrypt
    The key lengths for Argon2 and Scrypt-based passwords are now configurable
    via these new directives; previously, the key length had been hardcoded
    to be 32 bytes, which is not interoperable with all other implementations
    (Issue #454).
  - Changed Configuration Directives
  * AllowChrootSymlinks
    When "AllowChrootSymlinks off" was used, only the last portion of the
    DefaultRoot path would be checked to see if it was a symlink.  Now,
    each component of the DefaultRoot path will be checked to see if it is
    a symlink when "AllowChrootSymlinks off" is used.
  * Include
    The Include directive can now be used within a &lt;Limit&gt; section, e.g.:
    &lt;Limit LOGIN&gt;
    Include /path/to/allowed.txt
    DenyAll
    &lt;/Limit&gt;
  - API Changes
  * A new JSON API has been added, for use by third-party modules.
- remove obsolete proftpd_include-in-limit-section.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="chris@computersalat.de" date="1662033600">- Update proftpd-basic.conf.patch
  * remove obsolete config option, LoginPasswordPrompt
- rework proftpd-dist.patch</changelog>
</package>
<package pkgid="dc6ccfd65766730cc0827413cb888ad461becc469ac3379f7ddd4e6e8cecbcdf" name="proftpd-sqlite" arch="s390x">
  <version epoch="0" ver="1.3.7e" rel="bp154.3.6.1"/>
  <changelog author="chris@computersalat.de" date="1531224000">- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1531310400">- update to 1.3.6
  * Support for using Redis for caching, logging; see the doc/howto/Redis.html
    documentation.
  * Fixed mod_sql_postgres SSL support (Issue #415).
  * Support building against LibreSSL instead of OpenSSL (Issue #361).
  * Better support on AIX for login restraictions (Bug #4285).
  * TimeoutLogin (and other timeouts) were not working properly for SFTP
    connections (Bug#4299).
  * Handling of the SIGILL and SIGINT signals, by the daemon process, now causes
    the child processes to be terminated as well (Issue #461).
  * RPM .spec file naming changed to conform to Fedora guidelines.
  * Fix for "AllowChrootSymlinks off" checking each component for symlinks
    (CVE-2017-7418).
  - New Modules:
  * mod_redis, mod_tls_redis, mod_wrap2_redis
    With Redis now supported as a caching mechanism, similar to Memcache,
    there are now Redis-using modules: mod_redis (for configuring the Redis
    connection information), mod_tls_redis (for caching SSL sessions and
    OCSP information using Redis), and mod_wrap2_redis (for using ACLs stored
    in Redis).
  - Changed Modules:
  * mod_ban
    The mod_ban module's BanCache directive can now use Redis-based caching;
    see doc/contrib/mod_ban.html#BanCache.
  - New Configuration Directives
  * SQLPasswordArgon2, SQLPasswordScrypt
    The key lengths for Argon2 and Scrypt-based passwords are now configurable
    via these new directives; previously, the key length had been hardcoded
    to be 32 bytes, which is not interoperable with all other implementations
    (Issue #454).
  - Changed Configuration Directives
  * AllowChrootSymlinks
    When "AllowChrootSymlinks off" was used, only the last portion of the
    DefaultRoot path would be checked to see if it was a symlink.  Now,
    each component of the DefaultRoot path will be checked to see if it is
    a symlink when "AllowChrootSymlinks off" is used.
  * Include
    The Include directive can now be used within a &lt;Limit&gt; section, e.g.:
    &lt;Limit LOGIN&gt;
    Include /path/to/allowed.txt
    DenyAll
    &lt;/Limit&gt;
  - API Changes
  * A new JSON API has been added, for use by third-party modules.
- remove obsolete proftpd_include-in-limit-section.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="chris@computersalat.de" date="1662033600">- Update proftpd-basic.conf.patch
  * remove obsolete config option, LoginPasswordPrompt
- rework proftpd-dist.patch</changelog>
</package>
<package pkgid="88b227fb455b450bc1d919574b1edd57bbbe9d887130b4f90257423752bd61ea" name="proftpd-sqlite" arch="x86_64">
  <version epoch="0" ver="1.3.7e" rel="bp154.3.6.1"/>
  <changelog author="chris@computersalat.de" date="1531224000">- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1531310400">- update to 1.3.6
  * Support for using Redis for caching, logging; see the doc/howto/Redis.html
    documentation.
  * Fixed mod_sql_postgres SSL support (Issue #415).
  * Support building against LibreSSL instead of OpenSSL (Issue #361).
  * Better support on AIX for login restraictions (Bug #4285).
  * TimeoutLogin (and other timeouts) were not working properly for SFTP
    connections (Bug#4299).
  * Handling of the SIGILL and SIGINT signals, by the daemon process, now causes
    the child processes to be terminated as well (Issue #461).
  * RPM .spec file naming changed to conform to Fedora guidelines.
  * Fix for "AllowChrootSymlinks off" checking each component for symlinks
    (CVE-2017-7418).
  - New Modules:
  * mod_redis, mod_tls_redis, mod_wrap2_redis
    With Redis now supported as a caching mechanism, similar to Memcache,
    there are now Redis-using modules: mod_redis (for configuring the Redis
    connection information), mod_tls_redis (for caching SSL sessions and
    OCSP information using Redis), and mod_wrap2_redis (for using ACLs stored
    in Redis).
  - Changed Modules:
  * mod_ban
    The mod_ban module's BanCache directive can now use Redis-based caching;
    see doc/contrib/mod_ban.html#BanCache.
  - New Configuration Directives
  * SQLPasswordArgon2, SQLPasswordScrypt
    The key lengths for Argon2 and Scrypt-based passwords are now configurable
    via these new directives; previously, the key length had been hardcoded
    to be 32 bytes, which is not interoperable with all other implementations
    (Issue #454).
  - Changed Configuration Directives
  * AllowChrootSymlinks
    When "AllowChrootSymlinks off" was used, only the last portion of the
    DefaultRoot path would be checked to see if it was a symlink.  Now,
    each component of the DefaultRoot path will be checked to see if it is
    a symlink when "AllowChrootSymlinks off" is used.
  * Include
    The Include directive can now be used within a &lt;Limit&gt; section, e.g.:
    &lt;Limit LOGIN&gt;
    Include /path/to/allowed.txt
    DenyAll
    &lt;/Limit&gt;
  - API Changes
  * A new JSON API has been added, for use by third-party modules.
- remove obsolete proftpd_include-in-limit-section.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="chris@computersalat.de" date="1662033600">- Update proftpd-basic.conf.patch
  * remove obsolete config option, LoginPasswordPrompt
- rework proftpd-dist.patch</changelog>
</package>
<package pkgid="870e7ace350aa56f2d12327c63fbaed3b54f0e8cbfa16005b7169a0e63c827e6" name="proftpd-sqlite" arch="aarch64">
  <version epoch="0" ver="1.3.7f" rel="bp154.3.9.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="chris@computersalat.de" date="1662033600">- Update proftpd-basic.conf.patch
  * remove obsolete config option, LoginPasswordPrompt
- rework proftpd-dist.patch</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1673870400">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="chris@computersalat.de" date="1674648000">- 1.3.7f - Released 04-Dec-2022
  * Issue 1533 - mod_tls module unexpectedly allows TLS handshake after
    authentication in some configurations.
  * Bug 4491 - unable to verify signed data: signature type 'rsa-sha2-512' does
    not match publickey algorithm 'ssh-rsa'.</changelog>
</package>
<package pkgid="22566693df4be195da89348537e0e915a04f0a626bd2ba3559c00cf22c0a39e1" name="proftpd-sqlite" arch="i586">
  <version epoch="0" ver="1.3.7f" rel="bp154.3.9.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="chris@computersalat.de" date="1662033600">- Update proftpd-basic.conf.patch
  * remove obsolete config option, LoginPasswordPrompt
- rework proftpd-dist.patch</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1673870400">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="chris@computersalat.de" date="1674648000">- 1.3.7f - Released 04-Dec-2022
  * Issue 1533 - mod_tls module unexpectedly allows TLS handshake after
    authentication in some configurations.
  * Bug 4491 - unable to verify signed data: signature type 'rsa-sha2-512' does
    not match publickey algorithm 'ssh-rsa'.</changelog>
</package>
<package pkgid="0000dbfec3c694d1a48b6e21e73405b877b4dd803f63352f437714756cb9bd99" name="proftpd-sqlite" arch="ppc64le">
  <version epoch="0" ver="1.3.7f" rel="bp154.3.9.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="chris@computersalat.de" date="1662033600">- Update proftpd-basic.conf.patch
  * remove obsolete config option, LoginPasswordPrompt
- rework proftpd-dist.patch</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1673870400">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="chris@computersalat.de" date="1674648000">- 1.3.7f - Released 04-Dec-2022
  * Issue 1533 - mod_tls module unexpectedly allows TLS handshake after
    authentication in some configurations.
  * Bug 4491 - unable to verify signed data: signature type 'rsa-sha2-512' does
    not match publickey algorithm 'ssh-rsa'.</changelog>
</package>
<package pkgid="564896efb4fca0be9b430f5b36913041a31946a97db57dfb6011dd3ed9d562ce" name="proftpd-sqlite" arch="s390x">
  <version epoch="0" ver="1.3.7f" rel="bp154.3.9.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="chris@computersalat.de" date="1662033600">- Update proftpd-basic.conf.patch
  * remove obsolete config option, LoginPasswordPrompt
- rework proftpd-dist.patch</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1673870400">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="chris@computersalat.de" date="1674648000">- 1.3.7f - Released 04-Dec-2022
  * Issue 1533 - mod_tls module unexpectedly allows TLS handshake after
    authentication in some configurations.
  * Bug 4491 - unable to verify signed data: signature type 'rsa-sha2-512' does
    not match publickey algorithm 'ssh-rsa'.</changelog>
</package>
<package pkgid="fcd01453903c35882bd0af9bf5c0ebf5e3bff880365bd513d362810fd4ed19af" name="proftpd-sqlite" arch="x86_64">
  <version epoch="0" ver="1.3.7f" rel="bp154.3.9.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="chris@computersalat.de" date="1662033600">- Update proftpd-basic.conf.patch
  * remove obsolete config option, LoginPasswordPrompt
- rework proftpd-dist.patch</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1673870400">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="chris@computersalat.de" date="1674648000">- 1.3.7f - Released 04-Dec-2022
  * Issue 1533 - mod_tls module unexpectedly allows TLS handshake after
    authentication in some configurations.
  * Bug 4491 - unable to verify signed data: signature type 'rsa-sha2-512' does
    not match publickey algorithm 'ssh-rsa'.</changelog>
</package>
<package pkgid="3959fb8ad55a85f03ff9719ce51c313918a08bd544ad08a885cff40383816c7f" name="proteus" arch="noarch">
  <version epoch="0" ver="6.0.7" rel="bp154.2.3.1"/>
  <changelog author="axel.braun@gmx.de" date="1510228800">- Version 4.2.1 - Bugfix Release</changelog>
  <changelog author="axel.braun@gmx.de" date="1519992000">- Version 4.2.2 - Bugfix Release</changelog>
  <changelog author="axel.braun@gmx.de" date="1526126400">- Version 4.2.3 - Bugfix Release</changelog>
  <changelog author="axel.braun@gmx.de" date="1531310400">- Version 4.2.4 - Bugfix Release (boo#1107771)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1544443200">- Version 4.6.5 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1558094400">- Version 4.6.6 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1568548800">- Version 4.6.7 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1571918400">- Version 4.6.8 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1573473600">- Version 4.6.9 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1574337600">- version 5.0.6 (GNU Health 3.6 series)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1575374400">- Version 5.0.7 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1605096000">- Version 5.0.8 - Bugfix Release</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1614427200">- add upstream signing key and validate source signature</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1625227200">- Version 5.0.9 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1638792000">- Version 5.0.10 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1642507200">- Version 5.0.11 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1644667200">- Version bump to Tryton 6.0 series</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1646222400">- Version 6.0.5 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1650283200">- Version 6.0.6 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1668772800">- Version 6.0.7 - Bugfix Release</changelog>
</package>
<package pkgid="29867ac581dd817d63907a014a1f7954c9f03fd5ed48a0800631ff402a533189" name="proteus" arch="src">
  <version epoch="0" ver="6.0.7" rel="bp154.2.3.1"/>
  <changelog author="axel.braun@gmx.de" date="1510228800">- Version 4.2.1 - Bugfix Release</changelog>
  <changelog author="axel.braun@gmx.de" date="1519992000">- Version 4.2.2 - Bugfix Release</changelog>
  <changelog author="axel.braun@gmx.de" date="1526126400">- Version 4.2.3 - Bugfix Release</changelog>
  <changelog author="axel.braun@gmx.de" date="1531310400">- Version 4.2.4 - Bugfix Release (boo#1107771)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1544443200">- Version 4.6.5 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1558094400">- Version 4.6.6 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1568548800">- Version 4.6.7 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1571918400">- Version 4.6.8 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1573473600">- Version 4.6.9 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1574337600">- version 5.0.6 (GNU Health 3.6 series)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1575374400">- Version 5.0.7 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1605096000">- Version 5.0.8 - Bugfix Release</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1614427200">- add upstream signing key and validate source signature</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1625227200">- Version 5.0.9 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1638792000">- Version 5.0.10 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1642507200">- Version 5.0.11 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1644667200">- Version bump to Tryton 6.0 series</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1646222400">- Version 6.0.5 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1650283200">- Version 6.0.6 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1668772800">- Version 6.0.7 - Bugfix Release</changelog>
</package>
<package pkgid="c01840310cd9df4badfb72e20e0576bbc112bdd362c44abf68f811b14954435e" name="pssh" arch="noarch">
  <version epoch="0" ver="2.3.4+git10.d4909c9" rel="bp154.2.3.1"/>
  <changelog author="tabraham@novell.com" date="1331640000">- Update to 2.3.1
  * fixed a problem where man pages were omitted from the tar file
- Changes from 2.3
  * added a --inline-stdout option (issue #57).  Thanks to
    pablo.barbachano for the patch.
  * Added a PSSH_HOST environment variable (issue #62).
  * Added a --version option (issues #33 and #45)
  * Expanded the pssh man page and added man pages for all other
    commands (issues #10 and #55).
  * Fixed askpass on Mac OS X 10.6.7 (issue #50)
  * Many other small fixes</changelog>
  <changelog author="dmuhamedagic@suse.com" date="1378900800">- Add pssh_status_order.patch: Return statuses of ssh commands in
  the proper order (helps in crmsh resource testing and history)
  (bnc#828897)</changelog>
  <changelog author="dmuhamedagic@suse.com" date="1379073600">- Update pssh_pcmk_nodes.patch: Update interface to crm_node (its
  output changed)</changelog>
  <changelog author="kgronlund@suse.com" date="1389268800">- Changed to .xz compression
- Updated to latest upstream (cs: b6c8d715)
- added support for multiple source paths in prsync (issue #64)
- made a relative import explicit (issue #66)
- Add support for select.poll on systems where it is available (issue #72)
- Remove restriction on remote relative paths (Issue #83)
- Added programmatic API (with tests)
- Fixed teardown handling for tests
  Cleaned up and added patches:
- Rename pssh-remove_shebangs.patch:
  to 0001-Remove-shebangs-from-library-files.patch
  Also updated patch format
- Rename pssh-man_dir.patch:
  to 0006-openSUSE-Adjust-man-pages-destination.patch
  Also updated patch format
- Rename pssh-quiet.patch: to 0002-Add-quiet-option.patch
- Rename pssh_pcmk_nodes.patch:
  to 0008-openSUSE-add-C-pcmk_nodes-option-to-get-list-of-node.patch
- Rename pssh_askpass_dir.patch:
  to 0007-openSUSE-Add-openSUSE-specific-pssh-askpass-location.patch
- Rename pssh_status_order.patch:
  to 0003-Fix-order-of-command-statuses-returned-by-the-Manage.patch
- Add 0005-Add-an-explicit-API-entrypoint.patch:
  Add an explicit API entry point
- Add 0004-test-Teardown-code-was-never-called.patch:
  Fixes test cases so teardown code is called</changelog>
  <changelog author="kgronlund@suse.com" date="1389787200">- Clarify error message when API calls fail
- Detect use of absolute path when slurping</changelog>
  <changelog author="kgronlund@suse.com" date="1419508800">- Add: 0001-Prepend-hostname-on-each-line-when-P-is-set.patch
  - Prepend hostname on each line when -P is set (fate#318220)
- Add: 0002-Fix-quiet-option-after-API-patch.patch
  - Fix quiet option after API patch</changelog>
  <changelog author="tchvatal@suse.com" date="1467288000">- Cleanup slightly with spec-cleaner no factual change</changelog>
  <changelog author="varkoly@suse.com" date="1629547200">- Update to version 2.3.4+git10.d4909c9:
  * add install instruction
  * fix manpages
  * prsync: support downloading
  * bin/*: explicitly run with python3
  * binary files do not support line buffering, fix #118
  * add flag for file append
  * change default file write behaviour to append over recreate
  * remove ancient workaround to workaround a new bug
  * Bump version to 2.3.4
  * support only Python 3.5+
- Use %license for current distribution versions.
- Remove distribution specific special cases as far as possible.
- Adapt source url in spec and switch to _service
- Remove patches applied in the new version:
  * 0004-test-Teardown-code-was-never-called.patch
  * 0005-Add-an-explicit-API-entrypoint.patch
  * 0006-openSUSE-Adjust-man-pages-destination.patch
  * 0002-Fix-quiet-option-after-API-patch.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1629720000">- Fix spec to be able to build on openLeap 15.N</changelog>
  <changelog author="Yan Gao &lt;ygao@suse.com&gt;" date="1648036800">- spec: use python3_sitelib macro rather than python_sitelib
- bin: fix inconsistent use of tabs and spaces in indentation
- psshlib: fix invalid syntax of except
- Update:
  * 0008-openSUSE-add-C-pcmk_nodes-option-to-get-list-of-node.patch</changelog>
</package>
<package pkgid="be980468decbfb944cda4e492a5b880aaa4279dbbe7f98112a01b30f1d8f017f" name="pssh" arch="src">
  <version epoch="0" ver="2.3.4+git10.d4909c9" rel="bp154.2.3.1"/>
  <changelog author="pascal.bleser@opensuse.org" date="1267876800">- initial build (2.1.1)</changelog>
  <changelog author="dmuhamedagic@novell.com" date="1303992000">- add man page pssh(1)
- update to v2.2.2</changelog>
  <changelog author="tserong@suse.com" date="1326110400">- Update license string in spec file</changelog>
  <changelog author="tserong@suse.com" date="1329220800">- exit gracefully when pacemaker is not running (--pcmk_nodes)
- update --quiet option to suppress all status output
- add /usr/bin to the search path for pssh-askpass
- add -C (--pcmk_nodes) option (get host names from cluster: crm_node -l)
- add -q (--quiet) option (suppresses status output)</changelog>
  <changelog author="tabraham@novell.com" date="1331640000">- Update to 2.3.1
  * fixed a problem where man pages were omitted from the tar file
- Changes from 2.3
  * added a --inline-stdout option (issue #57).  Thanks to
    pablo.barbachano for the patch.
  * Added a PSSH_HOST environment variable (issue #62).
  * Added a --version option (issues #33 and #45)
  * Expanded the pssh man page and added man pages for all other
    commands (issues #10 and #55).
  * Fixed askpass on Mac OS X 10.6.7 (issue #50)
  * Many other small fixes</changelog>
  <changelog author="dmuhamedagic@suse.com" date="1378900800">- Add pssh_status_order.patch: Return statuses of ssh commands in
  the proper order (helps in crmsh resource testing and history)
  (bnc#828897)</changelog>
  <changelog author="dmuhamedagic@suse.com" date="1379073600">- Update pssh_pcmk_nodes.patch: Update interface to crm_node (its
  output changed)</changelog>
  <changelog author="kgronlund@suse.com" date="1389268800">- Changed to .xz compression
- Updated to latest upstream (cs: b6c8d715)
- added support for multiple source paths in prsync (issue #64)
- made a relative import explicit (issue #66)
- Add support for select.poll on systems where it is available (issue #72)
- Remove restriction on remote relative paths (Issue #83)
- Added programmatic API (with tests)
- Fixed teardown handling for tests
  Cleaned up and added patches:
- Rename pssh-remove_shebangs.patch:
  to 0001-Remove-shebangs-from-library-files.patch
  Also updated patch format
- Rename pssh-man_dir.patch:
  to 0006-openSUSE-Adjust-man-pages-destination.patch
  Also updated patch format
- Rename pssh-quiet.patch: to 0002-Add-quiet-option.patch
- Rename pssh_pcmk_nodes.patch:
  to 0008-openSUSE-add-C-pcmk_nodes-option-to-get-list-of-node.patch
- Rename pssh_askpass_dir.patch:
  to 0007-openSUSE-Add-openSUSE-specific-pssh-askpass-location.patch
- Rename pssh_status_order.patch:
  to 0003-Fix-order-of-command-statuses-returned-by-the-Manage.patch
- Add 0005-Add-an-explicit-API-entrypoint.patch:
  Add an explicit API entry point
- Add 0004-test-Teardown-code-was-never-called.patch:
  Fixes test cases so teardown code is called</changelog>
  <changelog author="kgronlund@suse.com" date="1389787200">- Clarify error message when API calls fail
- Detect use of absolute path when slurping</changelog>
  <changelog author="kgronlund@suse.com" date="1419508800">- Add: 0001-Prepend-hostname-on-each-line-when-P-is-set.patch
  - Prepend hostname on each line when -P is set (fate#318220)
- Add: 0002-Fix-quiet-option-after-API-patch.patch
  - Fix quiet option after API patch</changelog>
  <changelog author="tchvatal@suse.com" date="1467288000">- Cleanup slightly with spec-cleaner no factual change</changelog>
  <changelog author="varkoly@suse.com" date="1629547200">- Update to version 2.3.4+git10.d4909c9:
  * add install instruction
  * fix manpages
  * prsync: support downloading
  * bin/*: explicitly run with python3
  * binary files do not support line buffering, fix #118
  * add flag for file append
  * change default file write behaviour to append over recreate
  * remove ancient workaround to workaround a new bug
  * Bump version to 2.3.4
  * support only Python 3.5+
- Use %license for current distribution versions.
- Remove distribution specific special cases as far as possible.
- Adapt source url in spec and switch to _service
- Remove patches applied in the new version:
  * 0004-test-Teardown-code-was-never-called.patch
  * 0005-Add-an-explicit-API-entrypoint.patch
  * 0006-openSUSE-Adjust-man-pages-destination.patch
  * 0002-Fix-quiet-option-after-API-patch.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1629720000">- Fix spec to be able to build on openLeap 15.N</changelog>
  <changelog author="Yan Gao &lt;ygao@suse.com&gt;" date="1648036800">- spec: use python3_sitelib macro rather than python_sitelib
- bin: fix inconsistent use of tabs and spaces in indentation
- psshlib: fix invalid syntax of except
- Update:
  * 0008-openSUSE-add-C-pcmk_nodes-option-to-get-list-of-node.patch</changelog>
</package>
<package pkgid="beb2fdfab4bb26b6862bdc88e1a9ec94cea84e6c46f4e24b0c8536441f00475d" name="ptl-devel" arch="aarch64">
  <version epoch="0" ver="2.3.3" rel="bp154.2.1"/>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1613217600">- Initial package.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1613217601">- Ensure neutrality of description; mention base thread library
  used.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1638446400">- Update to version 2.2.0:
  * New/improved support for initialization and finalization
    routines in ThreadPool.
- Changes from version 2.1.0:
  * Fix C++20 warnings from GCC 11.2.0.
  * Removed timemory.
  * Springclean CMake scripts and developer/client build/use
    interfaces.
- Changes from version 2.0.0:
  * Fixed memory leak issues in VUserTaskQueue.
  * removed VTaskGroup.
  * merged TaskGroup and TBBTaskGroup:
  - TBBTaskGroup is just an alias now.
  - TaskGroup will handle determine whether ThreadPool is TBB
    and submit tasks accordingly.
  * use tbb::task_arena in order to enable master/worker paradigm:
    full support for ThreadPool::execute_on_all_threads,
    ThreadPool::execute_on_specific_threads in TBB mode.
  * renamed many functions/fields to "main" instead of "master".
  * VTask no longer holds a pointer to task group: this was
    causing a data-race issue.
  * cmake option PTL_USE_LOCKS to enable mutex locking in
    scheduler instead of lock-free scheme.
  * removed unused numActThreads.
  * wait() member function for tasks.
- Add PTL-incorrect-pthread-requires-in-pkgconfig.patch to drop
  an incorrect Requires on pthread in the pkgconfig file that
  causes pkgconfig to automatically add unresolvable Requires to
  the %{name}-devel rpm package [gh#jrmadsen/PTL#21].
- Update location of packaged cmake and pkgconfig files in keeping
  with upstream fixes.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1638532800">- Update to version 2.2.1:
  * ThreadPool.h: fix typo by @stephanlachnit
    [gh#jrmadsen/PTL#20].
  * pkgconfig: Use Libs.private for "-pthread" flag by @badshah400
    [gh#jrmadsen/PTL#22].
- Drop PTL-incorrect-pthread-requires-in-pkgconfig.patch:
  incorporated upstream.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1638619200">- Update to version 2.3.0:
  * ThreadPool::Config [gh#jrmadsen/PTL#23].
  * Formatting updates [gh#jrmadsen/PTL#24].</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1642334400">- Update to version 2.3.1:
  * Threading: Fix GetNumberOfPhysicalCpus, it should never return
    zero [gh#jrmadsen/PTL#26].</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1652443200">- Update to version 2.3.3:
  * Fixed message which did not honor verbosity level.
- Change from version 2.3.2:
  * Support for BUILD_OBJECT_LIBS.</changelog>
</package>
<package pkgid="31421f345d2772aa32b06ffe207f60c1b873d33f74cb29f59a5a250e80cb1819" name="ptl-devel" arch="i586">
  <version epoch="0" ver="2.3.3" rel="bp154.2.1"/>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1613217600">- Initial package.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1613217601">- Ensure neutrality of description; mention base thread library
  used.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1638446400">- Update to version 2.2.0:
  * New/improved support for initialization and finalization
    routines in ThreadPool.
- Changes from version 2.1.0:
  * Fix C++20 warnings from GCC 11.2.0.
  * Removed timemory.
  * Springclean CMake scripts and developer/client build/use
    interfaces.
- Changes from version 2.0.0:
  * Fixed memory leak issues in VUserTaskQueue.
  * removed VTaskGroup.
  * merged TaskGroup and TBBTaskGroup:
  - TBBTaskGroup is just an alias now.
  - TaskGroup will handle determine whether ThreadPool is TBB
    and submit tasks accordingly.
  * use tbb::task_arena in order to enable master/worker paradigm:
    full support for ThreadPool::execute_on_all_threads,
    ThreadPool::execute_on_specific_threads in TBB mode.
  * renamed many functions/fields to "main" instead of "master".
  * VTask no longer holds a pointer to task group: this was
    causing a data-race issue.
  * cmake option PTL_USE_LOCKS to enable mutex locking in
    scheduler instead of lock-free scheme.
  * removed unused numActThreads.
  * wait() member function for tasks.
- Add PTL-incorrect-pthread-requires-in-pkgconfig.patch to drop
  an incorrect Requires on pthread in the pkgconfig file that
  causes pkgconfig to automatically add unresolvable Requires to
  the %{name}-devel rpm package [gh#jrmadsen/PTL#21].
- Update location of packaged cmake and pkgconfig files in keeping
  with upstream fixes.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1638532800">- Update to version 2.2.1:
  * ThreadPool.h: fix typo by @stephanlachnit
    [gh#jrmadsen/PTL#20].
  * pkgconfig: Use Libs.private for "-pthread" flag by @badshah400
    [gh#jrmadsen/PTL#22].
- Drop PTL-incorrect-pthread-requires-in-pkgconfig.patch:
  incorporated upstream.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1638619200">- Update to version 2.3.0:
  * ThreadPool::Config [gh#jrmadsen/PTL#23].
  * Formatting updates [gh#jrmadsen/PTL#24].</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1642334400">- Update to version 2.3.1:
  * Threading: Fix GetNumberOfPhysicalCpus, it should never return
    zero [gh#jrmadsen/PTL#26].</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1652443200">- Update to version 2.3.3:
  * Fixed message which did not honor verbosity level.
- Change from version 2.3.2:
  * Support for BUILD_OBJECT_LIBS.</changelog>
</package>
<package pkgid="f171e19dcacd8378a0715f9550c6ce050f3544dd2b55e7b345a9d5121fe9300c" name="ptl-devel" arch="ppc64le">
  <version epoch="0" ver="2.3.3" rel="bp154.2.1"/>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1613217600">- Initial package.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1613217601">- Ensure neutrality of description; mention base thread library
  used.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1638446400">- Update to version 2.2.0:
  * New/improved support for initialization and finalization
    routines in ThreadPool.
- Changes from version 2.1.0:
  * Fix C++20 warnings from GCC 11.2.0.
  * Removed timemory.
  * Springclean CMake scripts and developer/client build/use
    interfaces.
- Changes from version 2.0.0:
  * Fixed memory leak issues in VUserTaskQueue.
  * removed VTaskGroup.
  * merged TaskGroup and TBBTaskGroup:
  - TBBTaskGroup is just an alias now.
  - TaskGroup will handle determine whether ThreadPool is TBB
    and submit tasks accordingly.
  * use tbb::task_arena in order to enable master/worker paradigm:
    full support for ThreadPool::execute_on_all_threads,
    ThreadPool::execute_on_specific_threads in TBB mode.
  * renamed many functions/fields to "main" instead of "master".
  * VTask no longer holds a pointer to task group: this was
    causing a data-race issue.
  * cmake option PTL_USE_LOCKS to enable mutex locking in
    scheduler instead of lock-free scheme.
  * removed unused numActThreads.
  * wait() member function for tasks.
- Add PTL-incorrect-pthread-requires-in-pkgconfig.patch to drop
  an incorrect Requires on pthread in the pkgconfig file that
  causes pkgconfig to automatically add unresolvable Requires to
  the %{name}-devel rpm package [gh#jrmadsen/PTL#21].
- Update location of packaged cmake and pkgconfig files in keeping
  with upstream fixes.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1638532800">- Update to version 2.2.1:
  * ThreadPool.h: fix typo by @stephanlachnit
    [gh#jrmadsen/PTL#20].
  * pkgconfig: Use Libs.private for "-pthread" flag by @badshah400
    [gh#jrmadsen/PTL#22].
- Drop PTL-incorrect-pthread-requires-in-pkgconfig.patch:
  incorporated upstream.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1638619200">- Update to version 2.3.0:
  * ThreadPool::Config [gh#jrmadsen/PTL#23].
  * Formatting updates [gh#jrmadsen/PTL#24].</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1642334400">- Update to version 2.3.1:
  * Threading: Fix GetNumberOfPhysicalCpus, it should never return
    zero [gh#jrmadsen/PTL#26].</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1652443200">- Update to version 2.3.3:
  * Fixed message which did not honor verbosity level.
- Change from version 2.3.2:
  * Support for BUILD_OBJECT_LIBS.</changelog>
</package>
<package pkgid="57492cd20146d1bdfb4b8be6cecc3eb81fd3cc80f02416d4b6936f5bcb0df92d" name="ptl-devel" arch="s390x">
  <version epoch="0" ver="2.3.3" rel="bp154.2.1"/>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1613217600">- Initial package.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1613217601">- Ensure neutrality of description; mention base thread library
  used.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1638446400">- Update to version 2.2.0:
  * New/improved support for initialization and finalization
    routines in ThreadPool.
- Changes from version 2.1.0:
  * Fix C++20 warnings from GCC 11.2.0.
  * Removed timemory.
  * Springclean CMake scripts and developer/client build/use
    interfaces.
- Changes from version 2.0.0:
  * Fixed memory leak issues in VUserTaskQueue.
  * removed VTaskGroup.
  * merged TaskGroup and TBBTaskGroup:
  - TBBTaskGroup is just an alias now.
  - TaskGroup will handle determine whether ThreadPool is TBB
    and submit tasks accordingly.
  * use tbb::task_arena in order to enable master/worker paradigm:
    full support for ThreadPool::execute_on_all_threads,
    ThreadPool::execute_on_specific_threads in TBB mode.
  * renamed many functions/fields to "main" instead of "master".
  * VTask no longer holds a pointer to task group: this was
    causing a data-race issue.
  * cmake option PTL_USE_LOCKS to enable mutex locking in
    scheduler instead of lock-free scheme.
  * removed unused numActThreads.
  * wait() member function for tasks.
- Add PTL-incorrect-pthread-requires-in-pkgconfig.patch to drop
  an incorrect Requires on pthread in the pkgconfig file that
  causes pkgconfig to automatically add unresolvable Requires to
  the %{name}-devel rpm package [gh#jrmadsen/PTL#21].
- Update location of packaged cmake and pkgconfig files in keeping
  with upstream fixes.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1638532800">- Update to version 2.2.1:
  * ThreadPool.h: fix typo by @stephanlachnit
    [gh#jrmadsen/PTL#20].
  * pkgconfig: Use Libs.private for "-pthread" flag by @badshah400
    [gh#jrmadsen/PTL#22].
- Drop PTL-incorrect-pthread-requires-in-pkgconfig.patch:
  incorporated upstream.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1638619200">- Update to version 2.3.0:
  * ThreadPool::Config [gh#jrmadsen/PTL#23].
  * Formatting updates [gh#jrmadsen/PTL#24].</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1642334400">- Update to version 2.3.1:
  * Threading: Fix GetNumberOfPhysicalCpus, it should never return
    zero [gh#jrmadsen/PTL#26].</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1652443200">- Update to version 2.3.3:
  * Fixed message which did not honor verbosity level.
- Change from version 2.3.2:
  * Support for BUILD_OBJECT_LIBS.</changelog>
</package>
<package pkgid="a2b0c0c03b1a45fbd9aa3addd9d7986f2fc2ca7a079ae4d4311ae6f421b553ea" name="ptl-devel" arch="x86_64">
  <version epoch="0" ver="2.3.3" rel="bp154.2.1"/>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1613217600">- Initial package.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1613217601">- Ensure neutrality of description; mention base thread library
  used.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1638446400">- Update to version 2.2.0:
  * New/improved support for initialization and finalization
    routines in ThreadPool.
- Changes from version 2.1.0:
  * Fix C++20 warnings from GCC 11.2.0.
  * Removed timemory.
  * Springclean CMake scripts and developer/client build/use
    interfaces.
- Changes from version 2.0.0:
  * Fixed memory leak issues in VUserTaskQueue.
  * removed VTaskGroup.
  * merged TaskGroup and TBBTaskGroup:
  - TBBTaskGroup is just an alias now.
  - TaskGroup will handle determine whether ThreadPool is TBB
    and submit tasks accordingly.
  * use tbb::task_arena in order to enable master/worker paradigm:
    full support for ThreadPool::execute_on_all_threads,
    ThreadPool::execute_on_specific_threads in TBB mode.
  * renamed many functions/fields to "main" instead of "master".
  * VTask no longer holds a pointer to task group: this was
    causing a data-race issue.
  * cmake option PTL_USE_LOCKS to enable mutex locking in
    scheduler instead of lock-free scheme.
  * removed unused numActThreads.
  * wait() member function for tasks.
- Add PTL-incorrect-pthread-requires-in-pkgconfig.patch to drop
  an incorrect Requires on pthread in the pkgconfig file that
  causes pkgconfig to automatically add unresolvable Requires to
  the %{name}-devel rpm package [gh#jrmadsen/PTL#21].
- Update location of packaged cmake and pkgconfig files in keeping
  with upstream fixes.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1638532800">- Update to version 2.2.1:
  * ThreadPool.h: fix typo by @stephanlachnit
    [gh#jrmadsen/PTL#20].
  * pkgconfig: Use Libs.private for "-pthread" flag by @badshah400
    [gh#jrmadsen/PTL#22].
- Drop PTL-incorrect-pthread-requires-in-pkgconfig.patch:
  incorporated upstream.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1638619200">- Update to version 2.3.0:
  * ThreadPool::Config [gh#jrmadsen/PTL#23].
  * Formatting updates [gh#jrmadsen/PTL#24].</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1642334400">- Update to version 2.3.1:
  * Threading: Fix GetNumberOfPhysicalCpus, it should never return
    zero [gh#jrmadsen/PTL#26].</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1652443200">- Update to version 2.3.3:
  * Fixed message which did not honor verbosity level.
- Change from version 2.3.2:
  * Support for BUILD_OBJECT_LIBS.</changelog>
</package>
<package pkgid="d2207a4bdb8d40ff9deb44e9ce0c701a0d25e2dd2feaeff80ae39a19ad3fb9d6" name="pyenv" arch="aarch64">
  <version epoch="0" ver="2.3.5" rel="bp154.2.3.1"/>
  <changelog author="thomas.schraitle@suse.com" date="1548676800">- Install fish completion file to /usr/share/fish/completions/</changelog>
  <changelog author="thomas.schraitle@suse.com" date="1548676801">- Update to 1.2.9:
  * python-build: Add CPython 3.7.2 and CPython 3.6.8 (#1256)
  * python-build: Add anaconda[23]-5.3.1 (#1246)
  * python-build: Add Anaconda 2018.12 (#1259)
  * python-build: Fix ironpython-dev git repo url (#1260)
  * python-build: Add OPENSSL_NO_SSL3 patch for CPython 3.3.7 (#1263)
- Version 1.2.8:
  * python-build: Add CPython 3.7.1
  * python-build: Add CPython 3.6.7
  * python-build: Add anaconda[23]-5.3.0 (#1220)</changelog>
  <changelog author="Chris Coutinho &lt;chrisbcoutinho@gmail.com&gt;" date="1570622400">- Update to 1.2.13
  * python-build: Add CPython 3.7.4
  * python-build: Add CPython 3.6.9
- Update to 1.2.12
  * python-build: Find zlib from Xcode or brew on Mojave (#1353)
  * python-build: Add PyPy 7.1.1 (#1335)
  * python-build: Add CPython 3.8.0b1
- Update to 1.2.11
  * python-build: Fix posix_close name collision in 2.4 builds (#1321)
  * python-build: Add CPython 3.4.10 (#1322)
  * python-build: Add Anaconda 2019.03
  * python-build: Allow overriding the preference of OpenSSL version per definition basis (#1302, #1325, #1326)
  * python-build: Imported changes from rbenv/ruby-build 20190401 (#1327)
  * python-build: Use GNU Readline 8.0 on macOS if brew's package isn't available (#1329)
- Update to 1.2.10
  * python-build: Force y, Y, yes or YES to confirm installation (#1217)
  * python-build: Add PyPy 7.0.0, 7.1.0
  * python-build: Add CPython 2.7.16, 3.5.7 and 3.7.3
  * python-build: Install python-gdb.py (#1190, #1289)
  * python-build: Add micropython 1.10
  * python-build: Prefer Homebrew's OpenSSL 1.1 over 1.0 (#839, #1302)</changelog>
  <changelog author="Thomas Schraitle &lt;thomas.schraitle@suse.com&gt; - 1.2.16" date="1579176000">- Update to 1.2.16
  * python-build: Add CPython 3.8.1 (#1497)
  * python-build: Add CPython 3.7.6 (#1498)
  * python-build: Add CPython 3.6.10 (#1499)
  * python-build: Add CPython 3.5.9 (#1448)
  * python-build: Add PyPy 7.3.0 (1502)
- Update to 1.2.15
  * python-build: Add CPython 3.7.5 (#1423)
  * python-build: Add CPython 2.7.17 (#1433)
  * python-build: Add CPython 3.5.8 (#1441)
  * python-build: Add PyPy 7.2.0 (#1418)
  * python-build: Add anaconda3-2019.10 (#1427)
  * pyenv-help: Show text for all pyenv commands in pyenv-help (#1421)
- Update to 1.2.14
  * python-build: Add CPython 3.8.0 (#1416)
  * python-build: Add Anaconda-2019.07 (#1382)
  * python-build: Add Micropython 1.11 (#1395)
  * python-build: Fix compatibility issues with Homebrew installed Tcl/Tk (#1397)
  * pyenv-exec: Do not use exec -a, do not mangle PATH for system Python (#1169)
- Spec file
  * Apply spec-cleaner
  * Add version in last changelog entry to avoid rpmlint warnings</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1579521600">- Fix the tarball url to match reality</changelog>
  <changelog author="Sergio Fenoll &lt;sergio@fenoll.be&gt;" date="1596715200">- Update to 1.2.20
  * python-build: Add CPython 3.8.5 (#1667)
  * python-build: Add CPython 3.8.4 (#1658)
  * python-build: Add CPython 3.7.8
  * python-build: Add CPython 3.6.11
  * pyenv-install: Make grep detection more robust (#1663)
  * python-build: Fix has_tar_xz_support function on FreeBSD. (#1652)
- Update to 1.2.19
  * python-build: Add CPython 3.8.3 (#1612)
  * python-build: Add CPython 2.7.18 (#1593)
  * python-build: Add CPython 3.10-dev (#1619)
  * python-build: Add anaconda3-2020.02 (#1584)
  * python-build: Add stackless 3.7.5 (#1589)
- Update to 1.2.18
  * python-build: Update download URLs for old OpenSSL releases (#1578)
  * python-build: Prevent brew: command not found messages that are not errors (#1544)
- Update to 1.2.17
  * python-build: Add CPython 3.8.2
  * python-build: Add CPython 3.7.7 (#1553)
  * python-build: Add Miniconda versions newer than 4.3.30 (#1361)
  * python-build: Add Micropython 1.12 (#1542)
  * python-build: Add Add CPython 3.9.0a4
  * pyenv: Fix sed illegal byte sequence error (#1521)</changelog>
  <changelog author="Malte Ohmstede &lt;malte.ohmstede@gmail.com&gt;" date="1620043200">- Update to 1.2.27
  * Add GraalPython 21.1.0 (#1882)
  * Add CPython 3.10.0a7 (#1880)
  * Docs(README): fix info about version-file separator (#1874)
  * List versions starting with a dot (#1350)
  * Feat: support (skip) commented lines in version-file (#1866)
  * pypy3.7-7.3.4 (#1873)
  * Create miniforge3-4.10 (#1868)
  * Add CPython 3.9.4 (#1865)
- Update to 1.2.26
  * Add CPython 3.9.4 (#1865)
- Update to 1.2.25
  * bpo-43631: update to openssl 1.1.1k (#1861)
  * Add CPython 3.9.3 and 3.8.9 (#1859)
  * Add micropython 1.14 (#1858)
  * Shell detect improvements (#1835)
  * Test(init): remove misleading detect from parent shell case arg (#1856)
  * Add GraalPython 21.0.0 (#1855)
- Update to 1.2.24.1
  * Updated CHANGELOG.MD to reflect latest changes at v1.2.24
  * Fixed pyenv --version to display the correct pyenv version
- Update to 1.2.24
  * GitHub Actions: Add $PYENV_ROOT/shims to $PATH (#1838)
  * Add Python 3.10.0a6 (#1839)
  * Remove the "Using script's directory as PYENV_DIR if shim is invoked with a script argument" feature (#1814)
  * Update GET_PIP_URL (#1844)
  * GitHub Action to build Python versions on Ubuntu (#1794)
  * Make work in nounset (-u) mode (#1786)
  * Update miniforge3-4.9.2 (#1834)
  * Added aarch64 for Linux in anaconda_architecture() (#1833)
  * Hook script to add latest suffix for install command (#1831)
  * Fix error link (#1832)
  * Clarify proxy variable names in readme (#1830)
  * Travis CI: Add Xcode 12 on macOS 10.15.5 (#1708)
  * Added --nosystem argument (#1829)
  * Add CPython 3.8.8 (#1825)
  * Add CPython 3.9.2 (#1826)
  * Add manpage (#1790)
- Update to 1.2.23
  * python-build: Add CPython v3.7.10 (#1738)
  * python-build: Add CPython v3.6.13 (#1817)
  * python-build: Add PyPy 3.7-c-jit-latest (#1812)
  * python-build: Add PyPy 3.7 (#1718, #1726, #1780)
  * python-build: Add miniconda3 4.9.2 (#1763)
  * python-build: Add miniconda3 4.8.3 (#1763)
  * python-build: Add miniconda3 4.8.2 (#1763)
  * python-build: Add Miniforge3-4.9.2 (#1782)
  * python-build: Fix download links for some PyPy and Stackless versions (#1692)
  * python-build: Add PYENV_DEBUG option (#1806)
  * python-build: Fix get-pip which dropped support for legacy Python (#1793)
  * pyenv-help: Fix sed: RE error: illegal byte sequence (#1714)
  * pyenv-versions: Fix not printing asterisk for current version in Bash 3 (#1815)
  * pyenv-prefix: "system" python - support cases where python3 is in PATH but not python (#1655)
  * pyenv-which: Added fallback to system executable (#1797)
  * pyenv-rehash: Use associative arrays for better performance on bash &gt;= 4 (#1749)
  * pyenv-rehash: Try to sleep in 0.1 sec steps when acquiring lock (#1798)
  * pyenv: Use a better PS4 as recommended by Bash Hackers Wiki (#1810)
- Update to 1.2.22
  * python-build: Add LDFLAGS for zlib on macOS &gt;= 1100 (#1711)
  * python-build: Add the CPython 3.9.1 (#1752)
  * python-build: Change order of LDFLAGS paths (#1754)
  * python-build: Docker config for testing python-build (#1548)
  * python-build: Put prerequisite for installation before install (#1750)
  * python-build: Add GraalPython 20.3 (#1736)
  * python-build: Add CPython 3.8.7
  * python-build: Added anaconda3-2020.11 (#1774)
  * python-build: Added arm64 architecture support in python-build for macOS (#1775)
- Update to 1.2.21
  * python-build: Add CPython 3.9.0 (#1706)
  * python-build: Add CPython 3.8.6 (#1698)
  * python-build: Add CPython 3.7.9 (#1680)
  * python-build: Add CPython 3.6.12 (#1680)
  * python-build: Add CPython 3.5.10 (#1690)
  * python-build: Add Jython 2.7.2 (#1672)
  * python-build: Add Graalpython 20.1.0 (#1594)
  * python-build: Add Graalpython 20.2.0 (#1594)
  * python-build: Add Anaconda3-2020.07 (#1684)
  * python-build: Add micropython-1.13 (#1704)
  * python-build: Fix PyPy download links (#1682)
  * python-build: Support for PYTHON_BUILD_MIRROR_URL when checksums do not exist (#1673)
  * pyenv: Search for plugins in PYENV_DIR and PYENV_ROOT (#1697)
  * pyenv-help: Fix 'sed: RE error: illegal byte sequence' (#1670)</changelog>
  <changelog author="Chris Coutinho &lt;chrisbcoutinho@gmail.com&gt;" date="1621857600">- Update to 2.0.0
  Primary breaking change: Split startup logic into PATH and everything else
  For details check the CHANGELOG:
  https://github.com/pyenv/pyenv/blob/master/CHANGELOG.md</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1622203200">- Install fish completion to vendor_completions.d (https://github.com/pyenv/pyenv/issues/1944)</changelog>
  <changelog author="Alexander Graul &lt;alexander.graul@suse.com&gt;" date="1637582400">- Update to 2.2.1:
  - Added documentation for commands
  - Added Python versions (inlcuding 3.10.0)
  - Full changelog at https://github.com/pyenv/pyenv/blob/master/CHANGELOG.md</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1637582401">- Remove *rpmlintrc, it is not necessary anymore.
- Remove our own manpage, it is now included in the tarball.</changelog>
  <changelog author="Thomas Schraitle &lt;thomas.schraitle@suse.com&gt; - 2.2.4" date="1645185600">- Install fish completion into directory '/usr/share/fish/completions' (bsc#1196047)
- Apply spec-cleaner
- Update to 2.2.4
  - Added docstrings to several undocumented functions by @fluencydoc (#2197)
  - Fix incorrect pypy 2.7-7.3.6 sha256 hashes by @joestrach in (#2208)
  - Fix a regression in include paths when compiling ctypes in 3.6.15/3.7.12 by @chipx86 (#2209)
  - Revert "Disable coreutils on M1 Apple Silicon with arm64 (#2020)" by @native-api (#2212)
  - CPython 3.11.0a4 by @nedbat in (#2217)
  - CPython 3.9.10 and 3.10.2 by @nedbat in (#2219)
  - miniconda3-latest: added Linux-aarch64 by @verdimrc (#2221)
  - Add GraalPython 22.0.0 by @msimacek in (#2226)
  - Full changelog at https://github.com/pyenv/pyenv/releases/tag/v2.2.4-1
- Update to 2.2.3
  - Add new pypy versions (pypy2.7-7.3.2~7.3.5) to the version list (#2194)
  - Fix Python 3.7.12 compilation on macOS arm64/M1. (#2190)
  - Fix Python 3.6.15 compilation on macOS arm64/M1. (#2189)
  - Add Anaconda3-2021.11 (#2193)
  - CPython 3.11.0a3 (#2187)
  - Fix errant "echo" in README install instructions (#2185)
  - Add Miniforge and Mambaforge 4.10.3-10 (#2184)
  - Add CPython 3.10.1 (#2183)
  - Fix 3.6.15 build on macOS (#2182)
  - Full changelog at https://github.com/pyenv/pyenv/releases/tag/v2.2.3
- Update to 2.2.2
  - Add support for macOS Apple M1 (#2164)</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1645704000">- Fix tarball name and version.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1645790400">- Put fish completions in thr right directory.
  We don't have to worry about conflicting files, because fish
  has a special directory for vendor completions which have
  precedence over the fish native ones.</changelog>
  <changelog author="Thomas Schraitle &lt;thomas.schraitle@suse.com&gt; - 2.2.5" date="1649160000">- Update to 2.2.5
  - fix issue 2236 for CPython 3.6.15 and 3.7.12 by @fofoni in #2237
  - python-build: add URL for get-pip for Python 3.6 by @fofoni in #2238
  - Add pyston-2.3.2 by @dmrlawson in #2240
  - CPython 3.11.0a5 by @saaketp in #2241
  - CPython 3.11.0a6 by @saaketp in #2266
  - Add miniconda 4.11.0 by @aphedges in #2268
  - docs(pyenv-prefix): note support for multiple versions by @scop in #2270
  - pypy 7.3.8 02/20/2022 release by @dand-oss in #2253</changelog>
  <changelog author="Thomas Schraitle &lt;thomas.schraitle@suse.com&gt; - 2.3.0" date="1651665600">- Update to 2.3.0
  - Bump openssl 1.1 to 1.1.1n for CPython 3.7 3.8 3.9 by @tuzi3040 in #2276
  - Doc Fix: Escape a hash character causing unwanted GitHub Issue linking by @edrogers in #2282
  - Add CPython 3.9.12 by @saaketp in #2296
  - Add CPython 3.10.4 by @saaketp in #2295
  - Add patch for 3.6.15 to support Xcode 13.3 by @nshine in #2288
  - Add patch for 3.7.12 to support Xcode 13.3 by @samdoran in #2292
  - Add CONTRIBUTING.md by @native-api in #2287
  - Add PyPy 7.3.9 release 2022-03-30 by @dand-oss in #2308
  - Add Pyston 2.3.3 by @scop in #2316
  - Add CPython 3.11.0a7 by @illia-v in #2315
  - Add "nogil" Python v3.9.10 by @colesbury in #2342
  - Support XCode 13.3 in all releases that officially support MacOS 11 by @native-api in #2344
  - Add GraalPython 22.1.0 by @msimacek in #2346
  - Make PYENV_DEBUG imply -v for pyenv install by @native-api in #2347
  - Simplify init scheme by @native-api in #2310
  - Don't use Homebrew outside of MacOS by @native-api in #2349
  - Add :latest syntax to documentation for the install command by @hay in #2351</changelog>
  <changelog author="Thomas Schraitle &lt;thomas.schraitle@suse.com&gt; - 2.3.2" date="1658145600">- Update to 2.3.2
  - Add CPython 3.11.0b2 by @saaketp in #2380
  - Honor CFLAGS_EXTRA for MicroPython #2006 by @yggdr in #2007
  - Add post-install checks for curses, ctypes, lzma, and tkinter
    by @aphedges in #2353
  - Add CPython 3.11.0b3 by @edgarrmondragon in #2382
  - Add flags for Homebrew into python-config --ldflags by @native-api
    in #2384
  - Add CPython 3.10.5 by @illia-v in #2386
  - Add Anaconda 2019.10, 2021.04, 2022.05; support Anaconda in
    add_miniconda.py by @native-api in #2385
  - Add Pyston-2.3.4 by @dand-oss in #2390
  - Update Anaconda3-2022.05 MacOSX arm64 md5 by @bkbncn in #2391
- Fix bsc#1201582 to fix CVE-2022-35861 (from commit 22fa683, file
  pyenv-CVE-2022-35861.patch)</changelog>
  <changelog author="Thomas Schraitle &lt;thomas.schraitle@suse.com&gt; - 2.3.2" date="1664798400">- Spec file changes
  Don't buildrequire Sphinx. This dependency pulls other dependencies
  which makes it impossible to build for Python 3.6 (and openSUSE Leap 15.4).</changelog>
  <changelog author="Thomas Schraitle &lt;thomas.schraitle@suse.com&gt; - 2.3.4" date="1664798401">- Changes in spec file
  Remove patch pyenv-CVE-2022-35861.patch as this was already
  integrated in 2.3.3
  See PR pyenv/pyenv#2412
- Update to 2.3.4
  - Add CPython 3.11.0rc1 by @edgarrmondragon in #2434
  - Add support for multiple versions in pyenv uninstall
    by @hardikpnsp in #2432
  - Add micropython 1.18 and 1.19.1 by @dmitriy-serdyuk in #2443
  - CI: support Micropython, deleted scripts; build with -v
    by @native-api in #2447
  - Re-allow paths in .python-version while still preventing CVE-2022-35861
    by @comrumino in #2442
  - CI: Bump OS versions by @native-api in #2448
  - Add Cinder 3.8 by @filips123 in #2433
  - Add support for multiple versions in pyenv uninstall in #2432
  - Add micropython 1.18 and 1.19.1 in #2443
  - Add Cinder 3.8 in #2433
- Changes in 2.3.3
  - Use version sort in pyenv versions by @fofoni in #2405
  - Add CPython 3.11.0b4 by @majorgreys in #2411
  - Python-build: Replace deprecated git protocol use with https in docs
    by @ssbarnea in #2413
  - Fix relative path traversal due to using version string in path
    by @comrumino in #2412
  - Allow pypy2 and pypy3 patching by @brogon in #2421, #2419
  - Add CPython 3.11.0b5 by @edgarrmondragon in #2420
  - Add GraalPython 22.2.0 by @msimacek in #2425
  - Add CPython 3.10.6 by @edgarrmondragon in #2428
  - Add CPython 3.11.0b4 by @majorgreys in #2411
  - Replace deprecated git protocol use with https
    by @ssbarnea in docs #2413
  - Fix relative path traversal due to using version string in path
    by @comrumino in #2412
  - Fix patterns for pypy2.*/pypy3.* versions by @brogon in #2419</changelog>
  <changelog author="Thomas Schraitle &lt;thomas.schraitle@suse.com&gt; - 2.3.5" date="1666094400">- Update to 2.3.5
  - Add CPython 3.10.7 by @edgarrmondragon in #2454
  - Docs: update Fish PATH update by @gregorias in #2449
  - Add CPython 3.7.14, 3.8.14 and 3.9.14 by @edgarrmondragon in #2456
  - Update miniconda3-3.9-4.12.0 by @Tsuki in #2460
  - Add CPython 3.11.0rc2 by @ViktorHaag in #2459
  - Add patches for 3.7.14 to support Apple Silicon by @samdoran in #2463
  - Add ability to easily skip all use of Homebrew by @samdoran in #2464
  - Drop Travis integration by @sobolevn in #2468
  - Build CPython 3.12+ with --with-dsymutil in MacOS by @native-api in #2471
  - Add Pyston 2.3.5 by @scop in #2476
  Full Changelog: https://github.com/pyenv/pyenv/compare/v2.3.4...v2.3.5</changelog>
</package>
<package pkgid="64c8c7a742b9485e465a9197b165124df72a13027b76258b95e1ab0f7837403c" name="pyenv" arch="i586">
  <version epoch="0" ver="2.3.5" rel="bp154.2.3.1"/>
  <changelog author="thomas.schraitle@suse.com" date="1548676800">- Install fish completion file to /usr/share/fish/completions/</changelog>
  <changelog author="thomas.schraitle@suse.com" date="1548676801">- Update to 1.2.9:
  * python-build: Add CPython 3.7.2 and CPython 3.6.8 (#1256)
  * python-build: Add anaconda[23]-5.3.1 (#1246)
  * python-build: Add Anaconda 2018.12 (#1259)
  * python-build: Fix ironpython-dev git repo url (#1260)
  * python-build: Add OPENSSL_NO_SSL3 patch for CPython 3.3.7 (#1263)
- Version 1.2.8:
  * python-build: Add CPython 3.7.1
  * python-build: Add CPython 3.6.7
  * python-build: Add anaconda[23]-5.3.0 (#1220)</changelog>
  <changelog author="Chris Coutinho &lt;chrisbcoutinho@gmail.com&gt;" date="1570622400">- Update to 1.2.13
  * python-build: Add CPython 3.7.4
  * python-build: Add CPython 3.6.9
- Update to 1.2.12
  * python-build: Find zlib from Xcode or brew on Mojave (#1353)
  * python-build: Add PyPy 7.1.1 (#1335)
  * python-build: Add CPython 3.8.0b1
- Update to 1.2.11
  * python-build: Fix posix_close name collision in 2.4 builds (#1321)
  * python-build: Add CPython 3.4.10 (#1322)
  * python-build: Add Anaconda 2019.03
  * python-build: Allow overriding the preference of OpenSSL version per definition basis (#1302, #1325, #1326)
  * python-build: Imported changes from rbenv/ruby-build 20190401 (#1327)
  * python-build: Use GNU Readline 8.0 on macOS if brew's package isn't available (#1329)
- Update to 1.2.10
  * python-build: Force y, Y, yes or YES to confirm installation (#1217)
  * python-build: Add PyPy 7.0.0, 7.1.0
  * python-build: Add CPython 2.7.16, 3.5.7 and 3.7.3
  * python-build: Install python-gdb.py (#1190, #1289)
  * python-build: Add micropython 1.10
  * python-build: Prefer Homebrew's OpenSSL 1.1 over 1.0 (#839, #1302)</changelog>
  <changelog author="Thomas Schraitle &lt;thomas.schraitle@suse.com&gt; - 1.2.16" date="1579176000">- Update to 1.2.16
  * python-build: Add CPython 3.8.1 (#1497)
  * python-build: Add CPython 3.7.6 (#1498)
  * python-build: Add CPython 3.6.10 (#1499)
  * python-build: Add CPython 3.5.9 (#1448)
  * python-build: Add PyPy 7.3.0 (1502)
- Update to 1.2.15
  * python-build: Add CPython 3.7.5 (#1423)
  * python-build: Add CPython 2.7.17 (#1433)
  * python-build: Add CPython 3.5.8 (#1441)
  * python-build: Add PyPy 7.2.0 (#1418)
  * python-build: Add anaconda3-2019.10 (#1427)
  * pyenv-help: Show text for all pyenv commands in pyenv-help (#1421)
- Update to 1.2.14
  * python-build: Add CPython 3.8.0 (#1416)
  * python-build: Add Anaconda-2019.07 (#1382)
  * python-build: Add Micropython 1.11 (#1395)
  * python-build: Fix compatibility issues with Homebrew installed Tcl/Tk (#1397)
  * pyenv-exec: Do not use exec -a, do not mangle PATH for system Python (#1169)
- Spec file
  * Apply spec-cleaner
  * Add version in last changelog entry to avoid rpmlint warnings</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1579521600">- Fix the tarball url to match reality</changelog>
  <changelog author="Sergio Fenoll &lt;sergio@fenoll.be&gt;" date="1596715200">- Update to 1.2.20
  * python-build: Add CPython 3.8.5 (#1667)
  * python-build: Add CPython 3.8.4 (#1658)
  * python-build: Add CPython 3.7.8
  * python-build: Add CPython 3.6.11
  * pyenv-install: Make grep detection more robust (#1663)
  * python-build: Fix has_tar_xz_support function on FreeBSD. (#1652)
- Update to 1.2.19
  * python-build: Add CPython 3.8.3 (#1612)
  * python-build: Add CPython 2.7.18 (#1593)
  * python-build: Add CPython 3.10-dev (#1619)
  * python-build: Add anaconda3-2020.02 (#1584)
  * python-build: Add stackless 3.7.5 (#1589)
- Update to 1.2.18
  * python-build: Update download URLs for old OpenSSL releases (#1578)
  * python-build: Prevent brew: command not found messages that are not errors (#1544)
- Update to 1.2.17
  * python-build: Add CPython 3.8.2
  * python-build: Add CPython 3.7.7 (#1553)
  * python-build: Add Miniconda versions newer than 4.3.30 (#1361)
  * python-build: Add Micropython 1.12 (#1542)
  * python-build: Add Add CPython 3.9.0a4
  * pyenv: Fix sed illegal byte sequence error (#1521)</changelog>
  <changelog author="Malte Ohmstede &lt;malte.ohmstede@gmail.com&gt;" date="1620043200">- Update to 1.2.27
  * Add GraalPython 21.1.0 (#1882)
  * Add CPython 3.10.0a7 (#1880)
  * Docs(README): fix info about version-file separator (#1874)
  * List versions starting with a dot (#1350)
  * Feat: support (skip) commented lines in version-file (#1866)
  * pypy3.7-7.3.4 (#1873)
  * Create miniforge3-4.10 (#1868)
  * Add CPython 3.9.4 (#1865)
- Update to 1.2.26
  * Add CPython 3.9.4 (#1865)
- Update to 1.2.25
  * bpo-43631: update to openssl 1.1.1k (#1861)
  * Add CPython 3.9.3 and 3.8.9 (#1859)
  * Add micropython 1.14 (#1858)
  * Shell detect improvements (#1835)
  * Test(init): remove misleading detect from parent shell case arg (#1856)
  * Add GraalPython 21.0.0 (#1855)
- Update to 1.2.24.1
  * Updated CHANGELOG.MD to reflect latest changes at v1.2.24
  * Fixed pyenv --version to display the correct pyenv version
- Update to 1.2.24
  * GitHub Actions: Add $PYENV_ROOT/shims to $PATH (#1838)
  * Add Python 3.10.0a6 (#1839)
  * Remove the "Using script's directory as PYENV_DIR if shim is invoked with a script argument" feature (#1814)
  * Update GET_PIP_URL (#1844)
  * GitHub Action to build Python versions on Ubuntu (#1794)
  * Make work in nounset (-u) mode (#1786)
  * Update miniforge3-4.9.2 (#1834)
  * Added aarch64 for Linux in anaconda_architecture() (#1833)
  * Hook script to add latest suffix for install command (#1831)
  * Fix error link (#1832)
  * Clarify proxy variable names in readme (#1830)
  * Travis CI: Add Xcode 12 on macOS 10.15.5 (#1708)
  * Added --nosystem argument (#1829)
  * Add CPython 3.8.8 (#1825)
  * Add CPython 3.9.2 (#1826)
  * Add manpage (#1790)
- Update to 1.2.23
  * python-build: Add CPython v3.7.10 (#1738)
  * python-build: Add CPython v3.6.13 (#1817)
  * python-build: Add PyPy 3.7-c-jit-latest (#1812)
  * python-build: Add PyPy 3.7 (#1718, #1726, #1780)
  * python-build: Add miniconda3 4.9.2 (#1763)
  * python-build: Add miniconda3 4.8.3 (#1763)
  * python-build: Add miniconda3 4.8.2 (#1763)
  * python-build: Add Miniforge3-4.9.2 (#1782)
  * python-build: Fix download links for some PyPy and Stackless versions (#1692)
  * python-build: Add PYENV_DEBUG option (#1806)
  * python-build: Fix get-pip which dropped support for legacy Python (#1793)
  * pyenv-help: Fix sed: RE error: illegal byte sequence (#1714)
  * pyenv-versions: Fix not printing asterisk for current version in Bash 3 (#1815)
  * pyenv-prefix: "system" python - support cases where python3 is in PATH but not python (#1655)
  * pyenv-which: Added fallback to system executable (#1797)
  * pyenv-rehash: Use associative arrays for better performance on bash &gt;= 4 (#1749)
  * pyenv-rehash: Try to sleep in 0.1 sec steps when acquiring lock (#1798)
  * pyenv: Use a better PS4 as recommended by Bash Hackers Wiki (#1810)
- Update to 1.2.22
  * python-build: Add LDFLAGS for zlib on macOS &gt;= 1100 (#1711)
  * python-build: Add the CPython 3.9.1 (#1752)
  * python-build: Change order of LDFLAGS paths (#1754)
  * python-build: Docker config for testing python-build (#1548)
  * python-build: Put prerequisite for installation before install (#1750)
  * python-build: Add GraalPython 20.3 (#1736)
  * python-build: Add CPython 3.8.7
  * python-build: Added anaconda3-2020.11 (#1774)
  * python-build: Added arm64 architecture support in python-build for macOS (#1775)
- Update to 1.2.21
  * python-build: Add CPython 3.9.0 (#1706)
  * python-build: Add CPython 3.8.6 (#1698)
  * python-build: Add CPython 3.7.9 (#1680)
  * python-build: Add CPython 3.6.12 (#1680)
  * python-build: Add CPython 3.5.10 (#1690)
  * python-build: Add Jython 2.7.2 (#1672)
  * python-build: Add Graalpython 20.1.0 (#1594)
  * python-build: Add Graalpython 20.2.0 (#1594)
  * python-build: Add Anaconda3-2020.07 (#1684)
  * python-build: Add micropython-1.13 (#1704)
  * python-build: Fix PyPy download links (#1682)
  * python-build: Support for PYTHON_BUILD_MIRROR_URL when checksums do not exist (#1673)
  * pyenv: Search for plugins in PYENV_DIR and PYENV_ROOT (#1697)
  * pyenv-help: Fix 'sed: RE error: illegal byte sequence' (#1670)</changelog>
  <changelog author="Chris Coutinho &lt;chrisbcoutinho@gmail.com&gt;" date="1621857600">- Update to 2.0.0
  Primary breaking change: Split startup logic into PATH and everything else
  For details check the CHANGELOG:
  https://github.com/pyenv/pyenv/blob/master/CHANGELOG.md</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1622203200">- Install fish completion to vendor_completions.d (https://github.com/pyenv/pyenv/issues/1944)</changelog>
  <changelog author="Alexander Graul &lt;alexander.graul@suse.com&gt;" date="1637582400">- Update to 2.2.1:
  - Added documentation for commands
  - Added Python versions (inlcuding 3.10.0)
  - Full changelog at https://github.com/pyenv/pyenv/blob/master/CHANGELOG.md</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1637582401">- Remove *rpmlintrc, it is not necessary anymore.
- Remove our own manpage, it is now included in the tarball.</changelog>
  <changelog author="Thomas Schraitle &lt;thomas.schraitle@suse.com&gt; - 2.2.4" date="1645185600">- Install fish completion into directory '/usr/share/fish/completions' (bsc#1196047)
- Apply spec-cleaner
- Update to 2.2.4
  - Added docstrings to several undocumented functions by @fluencydoc (#2197)
  - Fix incorrect pypy 2.7-7.3.6 sha256 hashes by @joestrach in (#2208)
  - Fix a regression in include paths when compiling ctypes in 3.6.15/3.7.12 by @chipx86 (#2209)
  - Revert "Disable coreutils on M1 Apple Silicon with arm64 (#2020)" by @native-api (#2212)
  - CPython 3.11.0a4 by @nedbat in (#2217)
  - CPython 3.9.10 and 3.10.2 by @nedbat in (#2219)
  - miniconda3-latest: added Linux-aarch64 by @verdimrc (#2221)
  - Add GraalPython 22.0.0 by @msimacek in (#2226)
  - Full changelog at https://github.com/pyenv/pyenv/releases/tag/v2.2.4-1
- Update to 2.2.3
  - Add new pypy versions (pypy2.7-7.3.2~7.3.5) to the version list (#2194)
  - Fix Python 3.7.12 compilation on macOS arm64/M1. (#2190)
  - Fix Python 3.6.15 compilation on macOS arm64/M1. (#2189)
  - Add Anaconda3-2021.11 (#2193)
  - CPython 3.11.0a3 (#2187)
  - Fix errant "echo" in README install instructions (#2185)
  - Add Miniforge and Mambaforge 4.10.3-10 (#2184)
  - Add CPython 3.10.1 (#2183)
  - Fix 3.6.15 build on macOS (#2182)
  - Full changelog at https://github.com/pyenv/pyenv/releases/tag/v2.2.3
- Update to 2.2.2
  - Add support for macOS Apple M1 (#2164)</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1645704000">- Fix tarball name and version.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1645790400">- Put fish completions in thr right directory.
  We don't have to worry about conflicting files, because fish
  has a special directory for vendor completions which have
  precedence over the fish native ones.</changelog>
  <changelog author="Thomas Schraitle &lt;thomas.schraitle@suse.com&gt; - 2.2.5" date="1649160000">- Update to 2.2.5
  - fix issue 2236 for CPython 3.6.15 and 3.7.12 by @fofoni in #2237
  - python-build: add URL for get-pip for Python 3.6 by @fofoni in #2238
  - Add pyston-2.3.2 by @dmrlawson in #2240
  - CPython 3.11.0a5 by @saaketp in #2241
  - CPython 3.11.0a6 by @saaketp in #2266
  - Add miniconda 4.11.0 by @aphedges in #2268
  - docs(pyenv-prefix): note support for multiple versions by @scop in #2270
  - pypy 7.3.8 02/20/2022 release by @dand-oss in #2253</changelog>
  <changelog author="Thomas Schraitle &lt;thomas.schraitle@suse.com&gt; - 2.3.0" date="1651665600">- Update to 2.3.0
  - Bump openssl 1.1 to 1.1.1n for CPython 3.7 3.8 3.9 by @tuzi3040 in #2276
  - Doc Fix: Escape a hash character causing unwanted GitHub Issue linking by @edrogers in #2282
  - Add CPython 3.9.12 by @saaketp in #2296
  - Add CPython 3.10.4 by @saaketp in #2295
  - Add patch for 3.6.15 to support Xcode 13.3 by @nshine in #2288
  - Add patch for 3.7.12 to support Xcode 13.3 by @samdoran in #2292
  - Add CONTRIBUTING.md by @native-api in #2287
  - Add PyPy 7.3.9 release 2022-03-30 by @dand-oss in #2308
  - Add Pyston 2.3.3 by @scop in #2316
  - Add CPython 3.11.0a7 by @illia-v in #2315
  - Add "nogil" Python v3.9.10 by @colesbury in #2342
  - Support XCode 13.3 in all releases that officially support MacOS 11 by @native-api in #2344
  - Add GraalPython 22.1.0 by @msimacek in #2346
  - Make PYENV_DEBUG imply -v for pyenv install by @native-api in #2347
  - Simplify init scheme by @native-api in #2310
  - Don't use Homebrew outside of MacOS by @native-api in #2349
  - Add :latest syntax to documentation for the install command by @hay in #2351</changelog>
  <changelog author="Thomas Schraitle &lt;thomas.schraitle@suse.com&gt; - 2.3.2" date="1658145600">- Update to 2.3.2
  - Add CPython 3.11.0b2 by @saaketp in #2380
  - Honor CFLAGS_EXTRA for MicroPython #2006 by @yggdr in #2007
  - Add post-install checks for curses, ctypes, lzma, and tkinter
    by @aphedges in #2353
  - Add CPython 3.11.0b3 by @edgarrmondragon in #2382
  - Add flags for Homebrew into python-config --ldflags by @native-api
    in #2384
  - Add CPython 3.10.5 by @illia-v in #2386
  - Add Anaconda 2019.10, 2021.04, 2022.05; support Anaconda in
    add_miniconda.py by @native-api in #2385
  - Add Pyston-2.3.4 by @dand-oss in #2390
  - Update Anaconda3-2022.05 MacOSX arm64 md5 by @bkbncn in #2391
- Fix bsc#1201582 to fix CVE-2022-35861 (from commit 22fa683, file
  pyenv-CVE-2022-35861.patch)</changelog>
  <changelog author="Thomas Schraitle &lt;thomas.schraitle@suse.com&gt; - 2.3.2" date="1664798400">- Spec file changes
  Don't buildrequire Sphinx. This dependency pulls other dependencies
  which makes it impossible to build for Python 3.6 (and openSUSE Leap 15.4).</changelog>
  <changelog author="Thomas Schraitle &lt;thomas.schraitle@suse.com&gt; - 2.3.4" date="1664798401">- Changes in spec file
  Remove patch pyenv-CVE-2022-35861.patch as this was already
  integrated in 2.3.3
  See PR pyenv/pyenv#2412
- Update to 2.3.4
  - Add CPython 3.11.0rc1 by @edgarrmondragon in #2434
  - Add support for multiple versions in pyenv uninstall
    by @hardikpnsp in #2432
  - Add micropython 1.18 and 1.19.1 by @dmitriy-serdyuk in #2443
  - CI: support Micropython, deleted scripts; build with -v
    by @native-api in #2447
  - Re-allow paths in .python-version while still preventing CVE-2022-35861
    by @comrumino in #2442
  - CI: Bump OS versions by @native-api in #2448
  - Add Cinder 3.8 by @filips123 in #2433
  - Add support for multiple versions in pyenv uninstall in #2432
  - Add micropython 1.18 and 1.19.1 in #2443
  - Add Cinder 3.8 in #2433
- Changes in 2.3.3
  - Use version sort in pyenv versions by @fofoni in #2405
  - Add CPython 3.11.0b4 by @majorgreys in #2411
  - Python-build: Replace deprecated git protocol use with https in docs
    by @ssbarnea in #2413
  - Fix relative path traversal due to using version string in path
    by @comrumino in #2412
  - Allow pypy2 and pypy3 patching by @brogon in #2421, #2419
  - Add CPython 3.11.0b5 by @edgarrmondragon in #2420
  - Add GraalPython 22.2.0 by @msimacek in #2425
  - Add CPython 3.10.6 by @edgarrmondragon in #2428
  - Add CPython 3.11.0b4 by @majorgreys in #2411
  - Replace deprecated git protocol use with https
    by @ssbarnea in docs #2413
  - Fix relative path traversal due to using version string in path
    by @comrumino in #2412
  - Fix patterns for pypy2.*/pypy3.* versions by @brogon in #2419</changelog>
  <changelog author="Thomas Schraitle &lt;thomas.schraitle@suse.com&gt; - 2.3.5" date="1666094400">- Update to 2.3.5
  - Add CPython 3.10.7 by @edgarrmondragon in #2454
  - Docs: update Fish PATH update by @gregorias in #2449
  - Add CPython 3.7.14, 3.8.14 and 3.9.14 by @edgarrmondragon in #2456
  - Update miniconda3-3.9-4.12.0 by @Tsuki in #2460
  - Add CPython 3.11.0rc2 by @ViktorHaag in #2459
  - Add patches for 3.7.14 to support Apple Silicon by @samdoran in #2463
  - Add ability to easily skip all use of Homebrew by @samdoran in #2464
  - Drop Travis integration by @sobolevn in #2468
  - Build CPython 3.12+ with --with-dsymutil in MacOS by @native-api in #2471
  - Add Pyston 2.3.5 by @scop in #2476
  Full Changelog: https://github.com/pyenv/pyenv/compare/v2.3.4...v2.3.5</changelog>
</package>
<package pkgid="c43f6cb912ad0b4833f8e8ed5e911a8bfcee6416428d9206993daed3339e28f4" name="pyenv" arch="ppc64le">
  <version epoch="0" ver="2.3.5" rel="bp154.2.3.1"/>
  <changelog author="thomas.schraitle@suse.com" date="1548676800">- Install fish completion file to /usr/share/fish/completions/</changelog>
  <changelog author="thomas.schraitle@suse.com" date="1548676801">- Update to 1.2.9:
  * python-build: Add CPython 3.7.2 and CPython 3.6.8 (#1256)
  * python-build: Add anaconda[23]-5.3.1 (#1246)
  * python-build: Add Anaconda 2018.12 (#1259)
  * python-build: Fix ironpython-dev git repo url (#1260)
  * python-build: Add OPENSSL_NO_SSL3 patch for CPython 3.3.7 (#1263)
- Version 1.2.8:
  * python-build: Add CPython 3.7.1
  * python-build: Add CPython 3.6.7
  * python-build: Add anaconda[23]-5.3.0 (#1220)</changelog>
  <changelog author="Chris Coutinho &lt;chrisbcoutinho@gmail.com&gt;" date="1570622400">- Update to 1.2.13
  * python-build: Add CPython 3.7.4
  * python-build: Add CPython 3.6.9
- Update to 1.2.12
  * python-build: Find zlib from Xcode or brew on Mojave (#1353)
  * python-build: Add PyPy 7.1.1 (#1335)
  * python-build: Add CPython 3.8.0b1
- Update to 1.2.11
  * python-build: Fix posix_close name collision in 2.4 builds (#1321)
  * python-build: Add CPython 3.4.10 (#1322)
  * python-build: Add Anaconda 2019.03
  * python-build: Allow overriding the preference of OpenSSL version per definition basis (#1302, #1325, #1326)
  * python-build: Imported changes from rbenv/ruby-build 20190401 (#1327)
  * python-build: Use GNU Readline 8.0 on macOS if brew's package isn't available (#1329)
- Update to 1.2.10
  * python-build: Force y, Y, yes or YES to confirm installation (#1217)
  * python-build: Add PyPy 7.0.0, 7.1.0
  * python-build: Add CPython 2.7.16, 3.5.7 and 3.7.3
  * python-build: Install python-gdb.py (#1190, #1289)
  * python-build: Add micropython 1.10
  * python-build: Prefer Homebrew's OpenSSL 1.1 over 1.0 (#839, #1302)</changelog>
  <changelog author="Thomas Schraitle &lt;thomas.schraitle@suse.com&gt; - 1.2.16" date="1579176000">- Update to 1.2.16
  * python-build: Add CPython 3.8.1 (#1497)
  * python-build: Add CPython 3.7.6 (#1498)
  * python-build: Add CPython 3.6.10 (#1499)
  * python-build: Add CPython 3.5.9 (#1448)
  * python-build: Add PyPy 7.3.0 (1502)
- Update to 1.2.15
  * python-build: Add CPython 3.7.5 (#1423)
  * python-build: Add CPython 2.7.17 (#1433)
  * python-build: Add CPython 3.5.8 (#1441)
  * python-build: Add PyPy 7.2.0 (#1418)
  * python-build: Add anaconda3-2019.10 (#1427)
  * pyenv-help: Show text for all pyenv commands in pyenv-help (#1421)
- Update to 1.2.14
  * python-build: Add CPython 3.8.0 (#1416)
  * python-build: Add Anaconda-2019.07 (#1382)
  * python-build: Add Micropython 1.11 (#1395)
  * python-build: Fix compatibility issues with Homebrew installed Tcl/Tk (#1397)
  * pyenv-exec: Do not use exec -a, do not mangle PATH for system Python (#1169)
- Spec file
  * Apply spec-cleaner
  * Add version in last changelog entry to avoid rpmlint warnings</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1579521600">- Fix the tarball url to match reality</changelog>
  <changelog author="Sergio Fenoll &lt;sergio@fenoll.be&gt;" date="1596715200">- Update to 1.2.20
  * python-build: Add CPython 3.8.5 (#1667)
  * python-build: Add CPython 3.8.4 (#1658)
  * python-build: Add CPython 3.7.8
  * python-build: Add CPython 3.6.11
  * pyenv-install: Make grep detection more robust (#1663)
  * python-build: Fix has_tar_xz_support function on FreeBSD. (#1652)
- Update to 1.2.19
  * python-build: Add CPython 3.8.3 (#1612)
  * python-build: Add CPython 2.7.18 (#1593)
  * python-build: Add CPython 3.10-dev (#1619)
  * python-build: Add anaconda3-2020.02 (#1584)
  * python-build: Add stackless 3.7.5 (#1589)
- Update to 1.2.18
  * python-build: Update download URLs for old OpenSSL releases (#1578)
  * python-build: Prevent brew: command not found messages that are not errors (#1544)
- Update to 1.2.17
  * python-build: Add CPython 3.8.2
  * python-build: Add CPython 3.7.7 (#1553)
  * python-build: Add Miniconda versions newer than 4.3.30 (#1361)
  * python-build: Add Micropython 1.12 (#1542)
  * python-build: Add Add CPython 3.9.0a4
  * pyenv: Fix sed illegal byte sequence error (#1521)</changelog>
  <changelog author="Malte Ohmstede &lt;malte.ohmstede@gmail.com&gt;" date="1620043200">- Update to 1.2.27
  * Add GraalPython 21.1.0 (#1882)
  * Add CPython 3.10.0a7 (#1880)
  * Docs(README): fix info about version-file separator (#1874)
  * List versions starting with a dot (#1350)
  * Feat: support (skip) commented lines in version-file (#1866)
  * pypy3.7-7.3.4 (#1873)
  * Create miniforge3-4.10 (#1868)
  * Add CPython 3.9.4 (#1865)
- Update to 1.2.26
  * Add CPython 3.9.4 (#1865)
- Update to 1.2.25
  * bpo-43631: update to openssl 1.1.1k (#1861)
  * Add CPython 3.9.3 and 3.8.9 (#1859)
  * Add micropython 1.14 (#1858)
  * Shell detect improvements (#1835)
  * Test(init): remove misleading detect from parent shell case arg (#1856)
  * Add GraalPython 21.0.0 (#1855)
- Update to 1.2.24.1
  * Updated CHANGELOG.MD to reflect latest changes at v1.2.24
  * Fixed pyenv --version to display the correct pyenv version
- Update to 1.2.24
  * GitHub Actions: Add $PYENV_ROOT/shims to $PATH (#1838)
  * Add Python 3.10.0a6 (#1839)
  * Remove the "Using script's directory as PYENV_DIR if shim is invoked with a script argument" feature (#1814)
  * Update GET_PIP_URL (#1844)
  * GitHub Action to build Python versions on Ubuntu (#1794)
  * Make work in nounset (-u) mode (#1786)
  * Update miniforge3-4.9.2 (#1834)
  * Added aarch64 for Linux in anaconda_architecture() (#1833)
  * Hook script to add latest suffix for install command (#1831)
  * Fix error link (#1832)
  * Clarify proxy variable names in readme (#1830)
  * Travis CI: Add Xcode 12 on macOS 10.15.5 (#1708)
  * Added --nosystem argument (#1829)
  * Add CPython 3.8.8 (#1825)
  * Add CPython 3.9.2 (#1826)
  * Add manpage (#1790)
- Update to 1.2.23
  * python-build: Add CPython v3.7.10 (#1738)
  * python-build: Add CPython v3.6.13 (#1817)
  * python-build: Add PyPy 3.7-c-jit-latest (#1812)
  * python-build: Add PyPy 3.7 (#1718, #1726, #1780)
  * python-build: Add miniconda3 4.9.2 (#1763)
  * python-build: Add miniconda3 4.8.3 (#1763)
  * python-build: Add miniconda3 4.8.2 (#1763)
  * python-build: Add Miniforge3-4.9.2 (#1782)
  * python-build: Fix download links for some PyPy and Stackless versions (#1692)
  * python-build: Add PYENV_DEBUG option (#1806)
  * python-build: Fix get-pip which dropped support for legacy Python (#1793)
  * pyenv-help: Fix sed: RE error: illegal byte sequence (#1714)
  * pyenv-versions: Fix not printing asterisk for current version in Bash 3 (#1815)
  * pyenv-prefix: "system" python - support cases where python3 is in PATH but not python (#1655)
  * pyenv-which: Added fallback to system executable (#1797)
  * pyenv-rehash: Use associative arrays for better performance on bash &gt;= 4 (#1749)
  * pyenv-rehash: Try to sleep in 0.1 sec steps when acquiring lock (#1798)
  * pyenv: Use a better PS4 as recommended by Bash Hackers Wiki (#1810)
- Update to 1.2.22
  * python-build: Add LDFLAGS for zlib on macOS &gt;= 1100 (#1711)
  * python-build: Add the CPython 3.9.1 (#1752)
  * python-build: Change order of LDFLAGS paths (#1754)
  * python-build: Docker config for testing python-build (#1548)
  * python-build: Put prerequisite for installation before install (#1750)
  * python-build: Add GraalPython 20.3 (#1736)
  * python-build: Add CPython 3.8.7
  * python-build: Added anaconda3-2020.11 (#1774)
  * python-build: Added arm64 architecture support in python-build for macOS (#1775)
- Update to 1.2.21
  * python-build: Add CPython 3.9.0 (#1706)
  * python-build: Add CPython 3.8.6 (#1698)
  * python-build: Add CPython 3.7.9 (#1680)
  * python-build: Add CPython 3.6.12 (#1680)
  * python-build: Add CPython 3.5.10 (#1690)
  * python-build: Add Jython 2.7.2 (#1672)
  * python-build: Add Graalpython 20.1.0 (#1594)
  * python-build: Add Graalpython 20.2.0 (#1594)
  * python-build: Add Anaconda3-2020.07 (#1684)
  * python-build: Add micropython-1.13 (#1704)
  * python-build: Fix PyPy download links (#1682)
  * python-build: Support for PYTHON_BUILD_MIRROR_URL when checksums do not exist (#1673)
  * pyenv: Search for plugins in PYENV_DIR and PYENV_ROOT (#1697)
  * pyenv-help: Fix 'sed: RE error: illegal byte sequence' (#1670)</changelog>
  <changelog author="Chris Coutinho &lt;chrisbcoutinho@gmail.com&gt;" date="1621857600">- Update to 2.0.0
  Primary breaking change: Split startup logic into PATH and everything else
  For details check the CHANGELOG:
  https://github.com/pyenv/pyenv/blob/master/CHANGELOG.md</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1622203200">- Install fish completion to vendor_completions.d (https://github.com/pyenv/pyenv/issues/1944)</changelog>
  <changelog author="Alexander Graul &lt;alexander.graul@suse.com&gt;" date="1637582400">- Update to 2.2.1:
  - Added documentation for commands
  - Added Python versions (inlcuding 3.10.0)
  - Full changelog at https://github.com/pyenv/pyenv/blob/master/CHANGELOG.md</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1637582401">- Remove *rpmlintrc, it is not necessary anymore.
- Remove our own manpage, it is now included in the tarball.</changelog>
  <changelog author="Thomas Schraitle &lt;thomas.schraitle@suse.com&gt; - 2.2.4" date="1645185600">- Install fish completion into directory '/usr/share/fish/completions' (bsc#1196047)
- Apply spec-cleaner
- Update to 2.2.4
  - Added docstrings to several undocumented functions by @fluencydoc (#2197)
  - Fix incorrect pypy 2.7-7.3.6 sha256 hashes by @joestrach in (#2208)
  - Fix a regression in include paths when compiling ctypes in 3.6.15/3.7.12 by @chipx86 (#2209)
  - Revert "Disable coreutils on M1 Apple Silicon with arm64 (#2020)" by @native-api (#2212)
  - CPython 3.11.0a4 by @nedbat in (#2217)
  - CPython 3.9.10 and 3.10.2 by @nedbat in (#2219)
  - miniconda3-latest: added Linux-aarch64 by @verdimrc (#2221)
  - Add GraalPython 22.0.0 by @msimacek in (#2226)
  - Full changelog at https://github.com/pyenv/pyenv/releases/tag/v2.2.4-1
- Update to 2.2.3
  - Add new pypy versions (pypy2.7-7.3.2~7.3.5) to the version list (#2194)
  - Fix Python 3.7.12 compilation on macOS arm64/M1. (#2190)
  - Fix Python 3.6.15 compilation on macOS arm64/M1. (#2189)
  - Add Anaconda3-2021.11 (#2193)
  - CPython 3.11.0a3 (#2187)
  - Fix errant "echo" in README install instructions (#2185)
  - Add Miniforge and Mambaforge 4.10.3-10 (#2184)
  - Add CPython 3.10.1 (#2183)
  - Fix 3.6.15 build on macOS (#2182)
  - Full changelog at https://github.com/pyenv/pyenv/releases/tag/v2.2.3
- Update to 2.2.2
  - Add support for macOS Apple M1 (#2164)</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1645704000">- Fix tarball name and version.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1645790400">- Put fish completions in thr right directory.
  We don't have to worry about conflicting files, because fish
  has a special directory for vendor completions which have
  precedence over the fish native ones.</changelog>
  <changelog author="Thomas Schraitle &lt;thomas.schraitle@suse.com&gt; - 2.2.5" date="1649160000">- Update to 2.2.5
  - fix issue 2236 for CPython 3.6.15 and 3.7.12 by @fofoni in #2237
  - python-build: add URL for get-pip for Python 3.6 by @fofoni in #2238
  - Add pyston-2.3.2 by @dmrlawson in #2240
  - CPython 3.11.0a5 by @saaketp in #2241
  - CPython 3.11.0a6 by @saaketp in #2266
  - Add miniconda 4.11.0 by @aphedges in #2268
  - docs(pyenv-prefix): note support for multiple versions by @scop in #2270
  - pypy 7.3.8 02/20/2022 release by @dand-oss in #2253</changelog>
  <changelog author="Thomas Schraitle &lt;thomas.schraitle@suse.com&gt; - 2.3.0" date="1651665600">- Update to 2.3.0
  - Bump openssl 1.1 to 1.1.1n for CPython 3.7 3.8 3.9 by @tuzi3040 in #2276
  - Doc Fix: Escape a hash character causing unwanted GitHub Issue linking by @edrogers in #2282
  - Add CPython 3.9.12 by @saaketp in #2296
  - Add CPython 3.10.4 by @saaketp in #2295
  - Add patch for 3.6.15 to support Xcode 13.3 by @nshine in #2288
  - Add patch for 3.7.12 to support Xcode 13.3 by @samdoran in #2292
  - Add CONTRIBUTING.md by @native-api in #2287
  - Add PyPy 7.3.9 release 2022-03-30 by @dand-oss in #2308
  - Add Pyston 2.3.3 by @scop in #2316
  - Add CPython 3.11.0a7 by @illia-v in #2315
  - Add "nogil" Python v3.9.10 by @colesbury in #2342
  - Support XCode 13.3 in all releases that officially support MacOS 11 by @native-api in #2344
  - Add GraalPython 22.1.0 by @msimacek in #2346
  - Make PYENV_DEBUG imply -v for pyenv install by @native-api in #2347
  - Simplify init scheme by @native-api in #2310
  - Don't use Homebrew outside of MacOS by @native-api in #2349
  - Add :latest syntax to documentation for the install command by @hay in #2351</changelog>
  <changelog author="Thomas Schraitle &lt;thomas.schraitle@suse.com&gt; - 2.3.2" date="1658145600">- Update to 2.3.2
  - Add CPython 3.11.0b2 by @saaketp in #2380
  - Honor CFLAGS_EXTRA for MicroPython #2006 by @yggdr in #2007
  - Add post-install checks for curses, ctypes, lzma, and tkinter
    by @aphedges in #2353
  - Add CPython 3.11.0b3 by @edgarrmondragon in #2382
  - Add flags for Homebrew into python-config --ldflags by @native-api
    in #2384
  - Add CPython 3.10.5 by @illia-v in #2386
  - Add Anaconda 2019.10, 2021.04, 2022.05; support Anaconda in
    add_miniconda.py by @native-api in #2385
  - Add Pyston-2.3.4 by @dand-oss in #2390
  - Update Anaconda3-2022.05 MacOSX arm64 md5 by @bkbncn in #2391
- Fix bsc#1201582 to fix CVE-2022-35861 (from commit 22fa683, file
  pyenv-CVE-2022-35861.patch)</changelog>
  <changelog author="Thomas Schraitle &lt;thomas.schraitle@suse.com&gt; - 2.3.2" date="1664798400">- Spec file changes
  Don't buildrequire Sphinx. This dependency pulls other dependencies
  which makes it impossible to build for Python 3.6 (and openSUSE Leap 15.4).</changelog>
  <changelog author="Thomas Schraitle &lt;thomas.schraitle@suse.com&gt; - 2.3.4" date="1664798401">- Changes in spec file
  Remove patch pyenv-CVE-2022-35861.patch as this was already
  integrated in 2.3.3
  See PR pyenv/pyenv#2412
- Update to 2.3.4
  - Add CPython 3.11.0rc1 by @edgarrmondragon in #2434
  - Add support for multiple versions in pyenv uninstall
    by @hardikpnsp in #2432
  - Add micropython 1.18 and 1.19.1 by @dmitriy-serdyuk in #2443
  - CI: support Micropython, deleted scripts; build with -v
    by @native-api in #2447
  - Re-allow paths in .python-version while still preventing CVE-2022-35861
    by @comrumino in #2442
  - CI: Bump OS versions by @native-api in #2448
  - Add Cinder 3.8 by @filips123 in #2433
  - Add support for multiple versions in pyenv uninstall in #2432
  - Add micropython 1.18 and 1.19.1 in #2443
  - Add Cinder 3.8 in #2433
- Changes in 2.3.3
  - Use version sort in pyenv versions by @fofoni in #2405
  - Add CPython 3.11.0b4 by @majorgreys in #2411
  - Python-build: Replace deprecated git protocol use with https in docs
    by @ssbarnea in #2413
  - Fix relative path traversal due to using version string in path
    by @comrumino in #2412
  - Allow pypy2 and pypy3 patching by @brogon in #2421, #2419
  - Add CPython 3.11.0b5 by @edgarrmondragon in #2420
  - Add GraalPython 22.2.0 by @msimacek in #2425
  - Add CPython 3.10.6 by @edgarrmondragon in #2428
  - Add CPython 3.11.0b4 by @majorgreys in #2411
  - Replace deprecated git protocol use with https
    by @ssbarnea in docs #2413
  - Fix relative path traversal due to using version string in path
    by @comrumino in #2412
  - Fix patterns for pypy2.*/pypy3.* versions by @brogon in #2419</changelog>
  <changelog author="Thomas Schraitle &lt;thomas.schraitle@suse.com&gt; - 2.3.5" date="1666094400">- Update to 2.3.5
  - Add CPython 3.10.7 by @edgarrmondragon in #2454
  - Docs: update Fish PATH update by @gregorias in #2449
  - Add CPython 3.7.14, 3.8.14 and 3.9.14 by @edgarrmondragon in #2456
  - Update miniconda3-3.9-4.12.0 by @Tsuki in #2460
  - Add CPython 3.11.0rc2 by @ViktorHaag in #2459
  - Add patches for 3.7.14 to support Apple Silicon by @samdoran in #2463
  - Add ability to easily skip all use of Homebrew by @samdoran in #2464
  - Drop Travis integration by @sobolevn in #2468
  - Build CPython 3.12+ with --with-dsymutil in MacOS by @native-api in #2471
  - Add Pyston 2.3.5 by @scop in #2476
  Full Changelog: https://github.com/pyenv/pyenv/compare/v2.3.4...v2.3.5</changelog>
</package>
<package pkgid="ddff304daebe63cc3a242593cd5dd3e12e4dcddb1819683e57c6d3051c2b3b99" name="pyenv" arch="s390x">
  <version epoch="0" ver="2.3.5" rel="bp154.2.3.1"/>
  <changelog author="thomas.schraitle@suse.com" date="1548676800">- Install fish completion file to /usr/share/fish/completions/</changelog>
  <changelog author="thomas.schraitle@suse.com" date="1548676801">- Update to 1.2.9:
  * python-build: Add CPython 3.7.2 and CPython 3.6.8 (#1256)
  * python-build: Add anaconda[23]-5.3.1 (#1246)
  * python-build: Add Anaconda 2018.12 (#1259)
  * python-build: Fix ironpython-dev git repo url (#1260)
  * python-build: Add OPENSSL_NO_SSL3 patch for CPython 3.3.7 (#1263)
- Version 1.2.8:
  * python-build: Add CPython 3.7.1
  * python-build: Add CPython 3.6.7
  * python-build: Add anaconda[23]-5.3.0 (#1220)</changelog>
  <changelog author="Chris Coutinho &lt;chrisbcoutinho@gmail.com&gt;" date="1570622400">- Update to 1.2.13
  * python-build: Add CPython 3.7.4
  * python-build: Add CPython 3.6.9
- Update to 1.2.12
  * python-build: Find zlib from Xcode or brew on Mojave (#1353)
  * python-build: Add PyPy 7.1.1 (#1335)
  * python-build: Add CPython 3.8.0b1
- Update to 1.2.11
  * python-build: Fix posix_close name collision in 2.4 builds (#1321)
  * python-build: Add CPython 3.4.10 (#1322)
  * python-build: Add Anaconda 2019.03
  * python-build: Allow overriding the preference of OpenSSL version per definition basis (#1302, #1325, #1326)
  * python-build: Imported changes from rbenv/ruby-build 20190401 (#1327)
  * python-build: Use GNU Readline 8.0 on macOS if brew's package isn't available (#1329)
- Update to 1.2.10
  * python-build: Force y, Y, yes or YES to confirm installation (#1217)
  * python-build: Add PyPy 7.0.0, 7.1.0
  * python-build: Add CPython 2.7.16, 3.5.7 and 3.7.3
  * python-build: Install python-gdb.py (#1190, #1289)
  * python-build: Add micropython 1.10
  * python-build: Prefer Homebrew's OpenSSL 1.1 over 1.0 (#839, #1302)</changelog>
  <changelog author="Thomas Schraitle &lt;thomas.schraitle@suse.com&gt; - 1.2.16" date="1579176000">- Update to 1.2.16
  * python-build: Add CPython 3.8.1 (#1497)
  * python-build: Add CPython 3.7.6 (#1498)
  * python-build: Add CPython 3.6.10 (#1499)
  * python-build: Add CPython 3.5.9 (#1448)
  * python-build: Add PyPy 7.3.0 (1502)
- Update to 1.2.15
  * python-build: Add CPython 3.7.5 (#1423)
  * python-build: Add CPython 2.7.17 (#1433)
  * python-build: Add CPython 3.5.8 (#1441)
  * python-build: Add PyPy 7.2.0 (#1418)
  * python-build: Add anaconda3-2019.10 (#1427)
  * pyenv-help: Show text for all pyenv commands in pyenv-help (#1421)
- Update to 1.2.14
  * python-build: Add CPython 3.8.0 (#1416)
  * python-build: Add Anaconda-2019.07 (#1382)
  * python-build: Add Micropython 1.11 (#1395)
  * python-build: Fix compatibility issues with Homebrew installed Tcl/Tk (#1397)
  * pyenv-exec: Do not use exec -a, do not mangle PATH for system Python (#1169)
- Spec file
  * Apply spec-cleaner
  * Add version in last changelog entry to avoid rpmlint warnings</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1579521600">- Fix the tarball url to match reality</changelog>
  <changelog author="Sergio Fenoll &lt;sergio@fenoll.be&gt;" date="1596715200">- Update to 1.2.20
  * python-build: Add CPython 3.8.5 (#1667)
  * python-build: Add CPython 3.8.4 (#1658)
  * python-build: Add CPython 3.7.8
  * python-build: Add CPython 3.6.11
  * pyenv-install: Make grep detection more robust (#1663)
  * python-build: Fix has_tar_xz_support function on FreeBSD. (#1652)
- Update to 1.2.19
  * python-build: Add CPython 3.8.3 (#1612)
  * python-build: Add CPython 2.7.18 (#1593)
  * python-build: Add CPython 3.10-dev (#1619)
  * python-build: Add anaconda3-2020.02 (#1584)
  * python-build: Add stackless 3.7.5 (#1589)
- Update to 1.2.18
  * python-build: Update download URLs for old OpenSSL releases (#1578)
  * python-build: Prevent brew: command not found messages that are not errors (#1544)
- Update to 1.2.17
  * python-build: Add CPython 3.8.2
  * python-build: Add CPython 3.7.7 (#1553)
  * python-build: Add Miniconda versions newer than 4.3.30 (#1361)
  * python-build: Add Micropython 1.12 (#1542)
  * python-build: Add Add CPython 3.9.0a4
  * pyenv: Fix sed illegal byte sequence error (#1521)</changelog>
  <changelog author="Malte Ohmstede &lt;malte.ohmstede@gmail.com&gt;" date="1620043200">- Update to 1.2.27
  * Add GraalPython 21.1.0 (#1882)
  * Add CPython 3.10.0a7 (#1880)
  * Docs(README): fix info about version-file separator (#1874)
  * List versions starting with a dot (#1350)
  * Feat: support (skip) commented lines in version-file (#1866)
  * pypy3.7-7.3.4 (#1873)
  * Create miniforge3-4.10 (#1868)
  * Add CPython 3.9.4 (#1865)
- Update to 1.2.26
  * Add CPython 3.9.4 (#1865)
- Update to 1.2.25
  * bpo-43631: update to openssl 1.1.1k (#1861)
  * Add CPython 3.9.3 and 3.8.9 (#1859)
  * Add micropython 1.14 (#1858)
  * Shell detect improvements (#1835)
  * Test(init): remove misleading detect from parent shell case arg (#1856)
  * Add GraalPython 21.0.0 (#1855)
- Update to 1.2.24.1
  * Updated CHANGELOG.MD to reflect latest changes at v1.2.24
  * Fixed pyenv --version to display the correct pyenv version
- Update to 1.2.24
  * GitHub Actions: Add $PYENV_ROOT/shims to $PATH (#1838)
  * Add Python 3.10.0a6 (#1839)
  * Remove the "Using script's directory as PYENV_DIR if shim is invoked with a script argument" feature (#1814)
  * Update GET_PIP_URL (#1844)
  * GitHub Action to build Python versions on Ubuntu (#1794)
  * Make work in nounset (-u) mode (#1786)
  * Update miniforge3-4.9.2 (#1834)
  * Added aarch64 for Linux in anaconda_architecture() (#1833)
  * Hook script to add latest suffix for install command (#1831)
  * Fix error link (#1832)
  * Clarify proxy variable names in readme (#1830)
  * Travis CI: Add Xcode 12 on macOS 10.15.5 (#1708)
  * Added --nosystem argument (#1829)
  * Add CPython 3.8.8 (#1825)
  * Add CPython 3.9.2 (#1826)
  * Add manpage (#1790)
- Update to 1.2.23
  * python-build: Add CPython v3.7.10 (#1738)
  * python-build: Add CPython v3.6.13 (#1817)
  * python-build: Add PyPy 3.7-c-jit-latest (#1812)
  * python-build: Add PyPy 3.7 (#1718, #1726, #1780)
  * python-build: Add miniconda3 4.9.2 (#1763)
  * python-build: Add miniconda3 4.8.3 (#1763)
  * python-build: Add miniconda3 4.8.2 (#1763)
  * python-build: Add Miniforge3-4.9.2 (#1782)
  * python-build: Fix download links for some PyPy and Stackless versions (#1692)
  * python-build: Add PYENV_DEBUG option (#1806)
  * python-build: Fix get-pip which dropped support for legacy Python (#1793)
  * pyenv-help: Fix sed: RE error: illegal byte sequence (#1714)
  * pyenv-versions: Fix not printing asterisk for current version in Bash 3 (#1815)
  * pyenv-prefix: "system" python - support cases where python3 is in PATH but not python (#1655)
  * pyenv-which: Added fallback to system executable (#1797)
  * pyenv-rehash: Use associative arrays for better performance on bash &gt;= 4 (#1749)
  * pyenv-rehash: Try to sleep in 0.1 sec steps when acquiring lock (#1798)
  * pyenv: Use a better PS4 as recommended by Bash Hackers Wiki (#1810)
- Update to 1.2.22
  * python-build: Add LDFLAGS for zlib on macOS &gt;= 1100 (#1711)
  * python-build: Add the CPython 3.9.1 (#1752)
  * python-build: Change order of LDFLAGS paths (#1754)
  * python-build: Docker config for testing python-build (#1548)
  * python-build: Put prerequisite for installation before install (#1750)
  * python-build: Add GraalPython 20.3 (#1736)
  * python-build: Add CPython 3.8.7
  * python-build: Added anaconda3-2020.11 (#1774)
  * python-build: Added arm64 architecture support in python-build for macOS (#1775)
- Update to 1.2.21
  * python-build: Add CPython 3.9.0 (#1706)
  * python-build: Add CPython 3.8.6 (#1698)
  * python-build: Add CPython 3.7.9 (#1680)
  * python-build: Add CPython 3.6.12 (#1680)
  * python-build: Add CPython 3.5.10 (#1690)
  * python-build: Add Jython 2.7.2 (#1672)
  * python-build: Add Graalpython 20.1.0 (#1594)
  * python-build: Add Graalpython 20.2.0 (#1594)
  * python-build: Add Anaconda3-2020.07 (#1684)
  * python-build: Add micropython-1.13 (#1704)
  * python-build: Fix PyPy download links (#1682)
  * python-build: Support for PYTHON_BUILD_MIRROR_URL when checksums do not exist (#1673)
  * pyenv: Search for plugins in PYENV_DIR and PYENV_ROOT (#1697)
  * pyenv-help: Fix 'sed: RE error: illegal byte sequence' (#1670)</changelog>
  <changelog author="Chris Coutinho &lt;chrisbcoutinho@gmail.com&gt;" date="1621857600">- Update to 2.0.0
  Primary breaking change: Split startup logic into PATH and everything else
  For details check the CHANGELOG:
  https://github.com/pyenv/pyenv/blob/master/CHANGELOG.md</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1622203200">- Install fish completion to vendor_completions.d (https://github.com/pyenv/pyenv/issues/1944)</changelog>
  <changelog author="Alexander Graul &lt;alexander.graul@suse.com&gt;" date="1637582400">- Update to 2.2.1:
  - Added documentation for commands
  - Added Python versions (inlcuding 3.10.0)
  - Full changelog at https://github.com/pyenv/pyenv/blob/master/CHANGELOG.md</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1637582401">- Remove *rpmlintrc, it is not necessary anymore.
- Remove our own manpage, it is now included in the tarball.</changelog>
  <changelog author="Thomas Schraitle &lt;thomas.schraitle@suse.com&gt; - 2.2.4" date="1645185600">- Install fish completion into directory '/usr/share/fish/completions' (bsc#1196047)
- Apply spec-cleaner
- Update to 2.2.4
  - Added docstrings to several undocumented functions by @fluencydoc (#2197)
  - Fix incorrect pypy 2.7-7.3.6 sha256 hashes by @joestrach in (#2208)
  - Fix a regression in include paths when compiling ctypes in 3.6.15/3.7.12 by @chipx86 (#2209)
  - Revert "Disable coreutils on M1 Apple Silicon with arm64 (#2020)" by @native-api (#2212)
  - CPython 3.11.0a4 by @nedbat in (#2217)
  - CPython 3.9.10 and 3.10.2 by @nedbat in (#2219)
  - miniconda3-latest: added Linux-aarch64 by @verdimrc (#2221)
  - Add GraalPython 22.0.0 by @msimacek in (#2226)
  - Full changelog at https://github.com/pyenv/pyenv/releases/tag/v2.2.4-1
- Update to 2.2.3
  - Add new pypy versions (pypy2.7-7.3.2~7.3.5) to the version list (#2194)
  - Fix Python 3.7.12 compilation on macOS arm64/M1. (#2190)
  - Fix Python 3.6.15 compilation on macOS arm64/M1. (#2189)
  - Add Anaconda3-2021.11 (#2193)
  - CPython 3.11.0a3 (#2187)
  - Fix errant "echo" in README install instructions (#2185)
  - Add Miniforge and Mambaforge 4.10.3-10 (#2184)
  - Add CPython 3.10.1 (#2183)
  - Fix 3.6.15 build on macOS (#2182)
  - Full changelog at https://github.com/pyenv/pyenv/releases/tag/v2.2.3
- Update to 2.2.2
  - Add support for macOS Apple M1 (#2164)</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1645704000">- Fix tarball name and version.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1645790400">- Put fish completions in thr right directory.
  We don't have to worry about conflicting files, because fish
  has a special directory for vendor completions which have
  precedence over the fish native ones.</changelog>
  <changelog author="Thomas Schraitle &lt;thomas.schraitle@suse.com&gt; - 2.2.5" date="1649160000">- Update to 2.2.5
  - fix issue 2236 for CPython 3.6.15 and 3.7.12 by @fofoni in #2237
  - python-build: add URL for get-pip for Python 3.6 by @fofoni in #2238
  - Add pyston-2.3.2 by @dmrlawson in #2240
  - CPython 3.11.0a5 by @saaketp in #2241
  - CPython 3.11.0a6 by @saaketp in #2266
  - Add miniconda 4.11.0 by @aphedges in #2268
  - docs(pyenv-prefix): note support for multiple versions by @scop in #2270
  - pypy 7.3.8 02/20/2022 release by @dand-oss in #2253</changelog>
  <changelog author="Thomas Schraitle &lt;thomas.schraitle@suse.com&gt; - 2.3.0" date="1651665600">- Update to 2.3.0
  - Bump openssl 1.1 to 1.1.1n for CPython 3.7 3.8 3.9 by @tuzi3040 in #2276
  - Doc Fix: Escape a hash character causing unwanted GitHub Issue linking by @edrogers in #2282
  - Add CPython 3.9.12 by @saaketp in #2296
  - Add CPython 3.10.4 by @saaketp in #2295
  - Add patch for 3.6.15 to support Xcode 13.3 by @nshine in #2288
  - Add patch for 3.7.12 to support Xcode 13.3 by @samdoran in #2292
  - Add CONTRIBUTING.md by @native-api in #2287
  - Add PyPy 7.3.9 release 2022-03-30 by @dand-oss in #2308
  - Add Pyston 2.3.3 by @scop in #2316
  - Add CPython 3.11.0a7 by @illia-v in #2315
  - Add "nogil" Python v3.9.10 by @colesbury in #2342
  - Support XCode 13.3 in all releases that officially support MacOS 11 by @native-api in #2344
  - Add GraalPython 22.1.0 by @msimacek in #2346
  - Make PYENV_DEBUG imply -v for pyenv install by @native-api in #2347
  - Simplify init scheme by @native-api in #2310
  - Don't use Homebrew outside of MacOS by @native-api in #2349
  - Add :latest syntax to documentation for the install command by @hay in #2351</changelog>
  <changelog author="Thomas Schraitle &lt;thomas.schraitle@suse.com&gt; - 2.3.2" date="1658145600">- Update to 2.3.2
  - Add CPython 3.11.0b2 by @saaketp in #2380
  - Honor CFLAGS_EXTRA for MicroPython #2006 by @yggdr in #2007
  - Add post-install checks for curses, ctypes, lzma, and tkinter
    by @aphedges in #2353
  - Add CPython 3.11.0b3 by @edgarrmondragon in #2382
  - Add flags for Homebrew into python-config --ldflags by @native-api
    in #2384
  - Add CPython 3.10.5 by @illia-v in #2386
  - Add Anaconda 2019.10, 2021.04, 2022.05; support Anaconda in
    add_miniconda.py by @native-api in #2385
  - Add Pyston-2.3.4 by @dand-oss in #2390
  - Update Anaconda3-2022.05 MacOSX arm64 md5 by @bkbncn in #2391
- Fix bsc#1201582 to fix CVE-2022-35861 (from commit 22fa683, file
  pyenv-CVE-2022-35861.patch)</changelog>
  <changelog author="Thomas Schraitle &lt;thomas.schraitle@suse.com&gt; - 2.3.2" date="1664798400">- Spec file changes
  Don't buildrequire Sphinx. This dependency pulls other dependencies
  which makes it impossible to build for Python 3.6 (and openSUSE Leap 15.4).</changelog>
  <changelog author="Thomas Schraitle &lt;thomas.schraitle@suse.com&gt; - 2.3.4" date="1664798401">- Changes in spec file
  Remove patch pyenv-CVE-2022-35861.patch as this was already
  integrated in 2.3.3
  See PR pyenv/pyenv#2412
- Update to 2.3.4
  - Add CPython 3.11.0rc1 by @edgarrmondragon in #2434
  - Add support for multiple versions in pyenv uninstall
    by @hardikpnsp in #2432
  - Add micropython 1.18 and 1.19.1 by @dmitriy-serdyuk in #2443
  - CI: support Micropython, deleted scripts; build with -v
    by @native-api in #2447
  - Re-allow paths in .python-version while still preventing CVE-2022-35861
    by @comrumino in #2442
  - CI: Bump OS versions by @native-api in #2448
  - Add Cinder 3.8 by @filips123 in #2433
  - Add support for multiple versions in pyenv uninstall in #2432
  - Add micropython 1.18 and 1.19.1 in #2443
  - Add Cinder 3.8 in #2433
- Changes in 2.3.3
  - Use version sort in pyenv versions by @fofoni in #2405
  - Add CPython 3.11.0b4 by @majorgreys in #2411
  - Python-build: Replace deprecated git protocol use with https in docs
    by @ssbarnea in #2413
  - Fix relative path traversal due to using version string in path
    by @comrumino in #2412
  - Allow pypy2 and pypy3 patching by @brogon in #2421, #2419
  - Add CPython 3.11.0b5 by @edgarrmondragon in #2420
  - Add GraalPython 22.2.0 by @msimacek in #2425
  - Add CPython 3.10.6 by @edgarrmondragon in #2428
  - Add CPython 3.11.0b4 by @majorgreys in #2411
  - Replace deprecated git protocol use with https
    by @ssbarnea in docs #2413
  - Fix relative path traversal due to using version string in path
    by @comrumino in #2412
  - Fix patterns for pypy2.*/pypy3.* versions by @brogon in #2419</changelog>
  <changelog author="Thomas Schraitle &lt;thomas.schraitle@suse.com&gt; - 2.3.5" date="1666094400">- Update to 2.3.5
  - Add CPython 3.10.7 by @edgarrmondragon in #2454
  - Docs: update Fish PATH update by @gregorias in #2449
  - Add CPython 3.7.14, 3.8.14 and 3.9.14 by @edgarrmondragon in #2456
  - Update miniconda3-3.9-4.12.0 by @Tsuki in #2460
  - Add CPython 3.11.0rc2 by @ViktorHaag in #2459
  - Add patches for 3.7.14 to support Apple Silicon by @samdoran in #2463
  - Add ability to easily skip all use of Homebrew by @samdoran in #2464
  - Drop Travis integration by @sobolevn in #2468
  - Build CPython 3.12+ with --with-dsymutil in MacOS by @native-api in #2471
  - Add Pyston 2.3.5 by @scop in #2476
  Full Changelog: https://github.com/pyenv/pyenv/compare/v2.3.4...v2.3.5</changelog>
</package>
<package pkgid="1a42707dc7fb12d1e53d623d7d705fb7c4f58857c501919a063240c5b3a06dcb" name="pyenv" arch="src">
  <version epoch="0" ver="2.3.5" rel="bp154.2.3.1"/>
  <changelog author="thomas.schraitle@suse.com" date="1548676800">- Install fish completion file to /usr/share/fish/completions/</changelog>
  <changelog author="thomas.schraitle@suse.com" date="1548676801">- Update to 1.2.9:
  * python-build: Add CPython 3.7.2 and CPython 3.6.8 (#1256)
  * python-build: Add anaconda[23]-5.3.1 (#1246)
  * python-build: Add Anaconda 2018.12 (#1259)
  * python-build: Fix ironpython-dev git repo url (#1260)
  * python-build: Add OPENSSL_NO_SSL3 patch for CPython 3.3.7 (#1263)
- Version 1.2.8:
  * python-build: Add CPython 3.7.1
  * python-build: Add CPython 3.6.7
  * python-build: Add anaconda[23]-5.3.0 (#1220)</changelog>
  <changelog author="Chris Coutinho &lt;chrisbcoutinho@gmail.com&gt;" date="1570622400">- Update to 1.2.13
  * python-build: Add CPython 3.7.4
  * python-build: Add CPython 3.6.9
- Update to 1.2.12
  * python-build: Find zlib from Xcode or brew on Mojave (#1353)
  * python-build: Add PyPy 7.1.1 (#1335)
  * python-build: Add CPython 3.8.0b1
- Update to 1.2.11
  * python-build: Fix posix_close name collision in 2.4 builds (#1321)
  * python-build: Add CPython 3.4.10 (#1322)
  * python-build: Add Anaconda 2019.03
  * python-build: Allow overriding the preference of OpenSSL version per definition basis (#1302, #1325, #1326)
  * python-build: Imported changes from rbenv/ruby-build 20190401 (#1327)
  * python-build: Use GNU Readline 8.0 on macOS if brew's package isn't available (#1329)
- Update to 1.2.10
  * python-build: Force y, Y, yes or YES to confirm installation (#1217)
  * python-build: Add PyPy 7.0.0, 7.1.0
  * python-build: Add CPython 2.7.16, 3.5.7 and 3.7.3
  * python-build: Install python-gdb.py (#1190, #1289)
  * python-build: Add micropython 1.10
  * python-build: Prefer Homebrew's OpenSSL 1.1 over 1.0 (#839, #1302)</changelog>
  <changelog author="Thomas Schraitle &lt;thomas.schraitle@suse.com&gt; - 1.2.16" date="1579176000">- Update to 1.2.16
  * python-build: Add CPython 3.8.1 (#1497)
  * python-build: Add CPython 3.7.6 (#1498)
  * python-build: Add CPython 3.6.10 (#1499)
  * python-build: Add CPython 3.5.9 (#1448)
  * python-build: Add PyPy 7.3.0 (1502)
- Update to 1.2.15
  * python-build: Add CPython 3.7.5 (#1423)
  * python-build: Add CPython 2.7.17 (#1433)
  * python-build: Add CPython 3.5.8 (#1441)
  * python-build: Add PyPy 7.2.0 (#1418)
  * python-build: Add anaconda3-2019.10 (#1427)
  * pyenv-help: Show text for all pyenv commands in pyenv-help (#1421)
- Update to 1.2.14
  * python-build: Add CPython 3.8.0 (#1416)
  * python-build: Add Anaconda-2019.07 (#1382)
  * python-build: Add Micropython 1.11 (#1395)
  * python-build: Fix compatibility issues with Homebrew installed Tcl/Tk (#1397)
  * pyenv-exec: Do not use exec -a, do not mangle PATH for system Python (#1169)
- Spec file
  * Apply spec-cleaner
  * Add version in last changelog entry to avoid rpmlint warnings</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1579521600">- Fix the tarball url to match reality</changelog>
  <changelog author="Sergio Fenoll &lt;sergio@fenoll.be&gt;" date="1596715200">- Update to 1.2.20
  * python-build: Add CPython 3.8.5 (#1667)
  * python-build: Add CPython 3.8.4 (#1658)
  * python-build: Add CPython 3.7.8
  * python-build: Add CPython 3.6.11
  * pyenv-install: Make grep detection more robust (#1663)
  * python-build: Fix has_tar_xz_support function on FreeBSD. (#1652)
- Update to 1.2.19
  * python-build: Add CPython 3.8.3 (#1612)
  * python-build: Add CPython 2.7.18 (#1593)
  * python-build: Add CPython 3.10-dev (#1619)
  * python-build: Add anaconda3-2020.02 (#1584)
  * python-build: Add stackless 3.7.5 (#1589)
- Update to 1.2.18
  * python-build: Update download URLs for old OpenSSL releases (#1578)
  * python-build: Prevent brew: command not found messages that are not errors (#1544)
- Update to 1.2.17
  * python-build: Add CPython 3.8.2
  * python-build: Add CPython 3.7.7 (#1553)
  * python-build: Add Miniconda versions newer than 4.3.30 (#1361)
  * python-build: Add Micropython 1.12 (#1542)
  * python-build: Add Add CPython 3.9.0a4
  * pyenv: Fix sed illegal byte sequence error (#1521)</changelog>
  <changelog author="Malte Ohmstede &lt;malte.ohmstede@gmail.com&gt;" date="1620043200">- Update to 1.2.27
  * Add GraalPython 21.1.0 (#1882)
  * Add CPython 3.10.0a7 (#1880)
  * Docs(README): fix info about version-file separator (#1874)
  * List versions starting with a dot (#1350)
  * Feat: support (skip) commented lines in version-file (#1866)
  * pypy3.7-7.3.4 (#1873)
  * Create miniforge3-4.10 (#1868)
  * Add CPython 3.9.4 (#1865)
- Update to 1.2.26
  * Add CPython 3.9.4 (#1865)
- Update to 1.2.25
  * bpo-43631: update to openssl 1.1.1k (#1861)
  * Add CPython 3.9.3 and 3.8.9 (#1859)
  * Add micropython 1.14 (#1858)
  * Shell detect improvements (#1835)
  * Test(init): remove misleading detect from parent shell case arg (#1856)
  * Add GraalPython 21.0.0 (#1855)
- Update to 1.2.24.1
  * Updated CHANGELOG.MD to reflect latest changes at v1.2.24
  * Fixed pyenv --version to display the correct pyenv version
- Update to 1.2.24
  * GitHub Actions: Add $PYENV_ROOT/shims to $PATH (#1838)
  * Add Python 3.10.0a6 (#1839)
  * Remove the "Using script's directory as PYENV_DIR if shim is invoked with a script argument" feature (#1814)
  * Update GET_PIP_URL (#1844)
  * GitHub Action to build Python versions on Ubuntu (#1794)
  * Make work in nounset (-u) mode (#1786)
  * Update miniforge3-4.9.2 (#1834)
  * Added aarch64 for Linux in anaconda_architecture() (#1833)
  * Hook script to add latest suffix for install command (#1831)
  * Fix error link (#1832)
  * Clarify proxy variable names in readme (#1830)
  * Travis CI: Add Xcode 12 on macOS 10.15.5 (#1708)
  * Added --nosystem argument (#1829)
  * Add CPython 3.8.8 (#1825)
  * Add CPython 3.9.2 (#1826)
  * Add manpage (#1790)
- Update to 1.2.23
  * python-build: Add CPython v3.7.10 (#1738)
  * python-build: Add CPython v3.6.13 (#1817)
  * python-build: Add PyPy 3.7-c-jit-latest (#1812)
  * python-build: Add PyPy 3.7 (#1718, #1726, #1780)
  * python-build: Add miniconda3 4.9.2 (#1763)
  * python-build: Add miniconda3 4.8.3 (#1763)
  * python-build: Add miniconda3 4.8.2 (#1763)
  * python-build: Add Miniforge3-4.9.2 (#1782)
  * python-build: Fix download links for some PyPy and Stackless versions (#1692)
  * python-build: Add PYENV_DEBUG option (#1806)
  * python-build: Fix get-pip which dropped support for legacy Python (#1793)
  * pyenv-help: Fix sed: RE error: illegal byte sequence (#1714)
  * pyenv-versions: Fix not printing asterisk for current version in Bash 3 (#1815)
  * pyenv-prefix: "system" python - support cases where python3 is in PATH but not python (#1655)
  * pyenv-which: Added fallback to system executable (#1797)
  * pyenv-rehash: Use associative arrays for better performance on bash &gt;= 4 (#1749)
  * pyenv-rehash: Try to sleep in 0.1 sec steps when acquiring lock (#1798)
  * pyenv: Use a better PS4 as recommended by Bash Hackers Wiki (#1810)
- Update to 1.2.22
  * python-build: Add LDFLAGS for zlib on macOS &gt;= 1100 (#1711)
  * python-build: Add the CPython 3.9.1 (#1752)
  * python-build: Change order of LDFLAGS paths (#1754)
  * python-build: Docker config for testing python-build (#1548)
  * python-build: Put prerequisite for installation before install (#1750)
  * python-build: Add GraalPython 20.3 (#1736)
  * python-build: Add CPython 3.8.7
  * python-build: Added anaconda3-2020.11 (#1774)
  * python-build: Added arm64 architecture support in python-build for macOS (#1775)
- Update to 1.2.21
  * python-build: Add CPython 3.9.0 (#1706)
  * python-build: Add CPython 3.8.6 (#1698)
  * python-build: Add CPython 3.7.9 (#1680)
  * python-build: Add CPython 3.6.12 (#1680)
  * python-build: Add CPython 3.5.10 (#1690)
  * python-build: Add Jython 2.7.2 (#1672)
  * python-build: Add Graalpython 20.1.0 (#1594)
  * python-build: Add Graalpython 20.2.0 (#1594)
  * python-build: Add Anaconda3-2020.07 (#1684)
  * python-build: Add micropython-1.13 (#1704)
  * python-build: Fix PyPy download links (#1682)
  * python-build: Support for PYTHON_BUILD_MIRROR_URL when checksums do not exist (#1673)
  * pyenv: Search for plugins in PYENV_DIR and PYENV_ROOT (#1697)
  * pyenv-help: Fix 'sed: RE error: illegal byte sequence' (#1670)</changelog>
  <changelog author="Chris Coutinho &lt;chrisbcoutinho@gmail.com&gt;" date="1621857600">- Update to 2.0.0
  Primary breaking change: Split startup logic into PATH and everything else
  For details check the CHANGELOG:
  https://github.com/pyenv/pyenv/blob/master/CHANGELOG.md</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1622203200">- Install fish completion to vendor_completions.d (https://github.com/pyenv/pyenv/issues/1944)</changelog>
  <changelog author="Alexander Graul &lt;alexander.graul@suse.com&gt;" date="1637582400">- Update to 2.2.1:
  - Added documentation for commands
  - Added Python versions (inlcuding 3.10.0)
  - Full changelog at https://github.com/pyenv/pyenv/blob/master/CHANGELOG.md</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1637582401">- Remove *rpmlintrc, it is not necessary anymore.
- Remove our own manpage, it is now included in the tarball.</changelog>
  <changelog author="Thomas Schraitle &lt;thomas.schraitle@suse.com&gt; - 2.2.4" date="1645185600">- Install fish completion into directory '/usr/share/fish/completions' (bsc#1196047)
- Apply spec-cleaner
- Update to 2.2.4
  - Added docstrings to several undocumented functions by @fluencydoc (#2197)
  - Fix incorrect pypy 2.7-7.3.6 sha256 hashes by @joestrach in (#2208)
  - Fix a regression in include paths when compiling ctypes in 3.6.15/3.7.12 by @chipx86 (#2209)
  - Revert "Disable coreutils on M1 Apple Silicon with arm64 (#2020)" by @native-api (#2212)
  - CPython 3.11.0a4 by @nedbat in (#2217)
  - CPython 3.9.10 and 3.10.2 by @nedbat in (#2219)
  - miniconda3-latest: added Linux-aarch64 by @verdimrc (#2221)
  - Add GraalPython 22.0.0 by @msimacek in (#2226)
  - Full changelog at https://github.com/pyenv/pyenv/releases/tag/v2.2.4-1
- Update to 2.2.3
  - Add new pypy versions (pypy2.7-7.3.2~7.3.5) to the version list (#2194)
  - Fix Python 3.7.12 compilation on macOS arm64/M1. (#2190)
  - Fix Python 3.6.15 compilation on macOS arm64/M1. (#2189)
  - Add Anaconda3-2021.11 (#2193)
  - CPython 3.11.0a3 (#2187)
  - Fix errant "echo" in README install instructions (#2185)
  - Add Miniforge and Mambaforge 4.10.3-10 (#2184)
  - Add CPython 3.10.1 (#2183)
  - Fix 3.6.15 build on macOS (#2182)
  - Full changelog at https://github.com/pyenv/pyenv/releases/tag/v2.2.3
- Update to 2.2.2
  - Add support for macOS Apple M1 (#2164)</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1645704000">- Fix tarball name and version.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1645790400">- Put fish completions in thr right directory.
  We don't have to worry about conflicting files, because fish
  has a special directory for vendor completions which have
  precedence over the fish native ones.</changelog>
  <changelog author="Thomas Schraitle &lt;thomas.schraitle@suse.com&gt; - 2.2.5" date="1649160000">- Update to 2.2.5
  - fix issue 2236 for CPython 3.6.15 and 3.7.12 by @fofoni in #2237
  - python-build: add URL for get-pip for Python 3.6 by @fofoni in #2238
  - Add pyston-2.3.2 by @dmrlawson in #2240
  - CPython 3.11.0a5 by @saaketp in #2241
  - CPython 3.11.0a6 by @saaketp in #2266
  - Add miniconda 4.11.0 by @aphedges in #2268
  - docs(pyenv-prefix): note support for multiple versions by @scop in #2270
  - pypy 7.3.8 02/20/2022 release by @dand-oss in #2253</changelog>
  <changelog author="Thomas Schraitle &lt;thomas.schraitle@suse.com&gt; - 2.3.0" date="1651665600">- Update to 2.3.0
  - Bump openssl 1.1 to 1.1.1n for CPython 3.7 3.8 3.9 by @tuzi3040 in #2276
  - Doc Fix: Escape a hash character causing unwanted GitHub Issue linking by @edrogers in #2282
  - Add CPython 3.9.12 by @saaketp in #2296
  - Add CPython 3.10.4 by @saaketp in #2295
  - Add patch for 3.6.15 to support Xcode 13.3 by @nshine in #2288
  - Add patch for 3.7.12 to support Xcode 13.3 by @samdoran in #2292
  - Add CONTRIBUTING.md by @native-api in #2287
  - Add PyPy 7.3.9 release 2022-03-30 by @dand-oss in #2308
  - Add Pyston 2.3.3 by @scop in #2316
  - Add CPython 3.11.0a7 by @illia-v in #2315
  - Add "nogil" Python v3.9.10 by @colesbury in #2342
  - Support XCode 13.3 in all releases that officially support MacOS 11 by @native-api in #2344
  - Add GraalPython 22.1.0 by @msimacek in #2346
  - Make PYENV_DEBUG imply -v for pyenv install by @native-api in #2347
  - Simplify init scheme by @native-api in #2310
  - Don't use Homebrew outside of MacOS by @native-api in #2349
  - Add :latest syntax to documentation for the install command by @hay in #2351</changelog>
  <changelog author="Thomas Schraitle &lt;thomas.schraitle@suse.com&gt; - 2.3.2" date="1658145600">- Update to 2.3.2
  - Add CPython 3.11.0b2 by @saaketp in #2380
  - Honor CFLAGS_EXTRA for MicroPython #2006 by @yggdr in #2007
  - Add post-install checks for curses, ctypes, lzma, and tkinter
    by @aphedges in #2353
  - Add CPython 3.11.0b3 by @edgarrmondragon in #2382
  - Add flags for Homebrew into python-config --ldflags by @native-api
    in #2384
  - Add CPython 3.10.5 by @illia-v in #2386
  - Add Anaconda 2019.10, 2021.04, 2022.05; support Anaconda in
    add_miniconda.py by @native-api in #2385
  - Add Pyston-2.3.4 by @dand-oss in #2390
  - Update Anaconda3-2022.05 MacOSX arm64 md5 by @bkbncn in #2391
- Fix bsc#1201582 to fix CVE-2022-35861 (from commit 22fa683, file
  pyenv-CVE-2022-35861.patch)</changelog>
  <changelog author="Thomas Schraitle &lt;thomas.schraitle@suse.com&gt; - 2.3.2" date="1664798400">- Spec file changes
  Don't buildrequire Sphinx. This dependency pulls other dependencies
  which makes it impossible to build for Python 3.6 (and openSUSE Leap 15.4).</changelog>
  <changelog author="Thomas Schraitle &lt;thomas.schraitle@suse.com&gt; - 2.3.4" date="1664798401">- Changes in spec file
  Remove patch pyenv-CVE-2022-35861.patch as this was already
  integrated in 2.3.3
  See PR pyenv/pyenv#2412
- Update to 2.3.4
  - Add CPython 3.11.0rc1 by @edgarrmondragon in #2434
  - Add support for multiple versions in pyenv uninstall
    by @hardikpnsp in #2432
  - Add micropython 1.18 and 1.19.1 by @dmitriy-serdyuk in #2443
  - CI: support Micropython, deleted scripts; build with -v
    by @native-api in #2447
  - Re-allow paths in .python-version while still preventing CVE-2022-35861
    by @comrumino in #2442
  - CI: Bump OS versions by @native-api in #2448
  - Add Cinder 3.8 by @filips123 in #2433
  - Add support for multiple versions in pyenv uninstall in #2432
  - Add micropython 1.18 and 1.19.1 in #2443
  - Add Cinder 3.8 in #2433
- Changes in 2.3.3
  - Use version sort in pyenv versions by @fofoni in #2405
  - Add CPython 3.11.0b4 by @majorgreys in #2411
  - Python-build: Replace deprecated git protocol use with https in docs
    by @ssbarnea in #2413
  - Fix relative path traversal due to using version string in path
    by @comrumino in #2412
  - Allow pypy2 and pypy3 patching by @brogon in #2421, #2419
  - Add CPython 3.11.0b5 by @edgarrmondragon in #2420
  - Add GraalPython 22.2.0 by @msimacek in #2425
  - Add CPython 3.10.6 by @edgarrmondragon in #2428
  - Add CPython 3.11.0b4 by @majorgreys in #2411
  - Replace deprecated git protocol use with https
    by @ssbarnea in docs #2413
  - Fix relative path traversal due to using version string in path
    by @comrumino in #2412
  - Fix patterns for pypy2.*/pypy3.* versions by @brogon in #2419</changelog>
  <changelog author="Thomas Schraitle &lt;thomas.schraitle@suse.com&gt; - 2.3.5" date="1666094400">- Update to 2.3.5
  - Add CPython 3.10.7 by @edgarrmondragon in #2454
  - Docs: update Fish PATH update by @gregorias in #2449
  - Add CPython 3.7.14, 3.8.14 and 3.9.14 by @edgarrmondragon in #2456
  - Update miniconda3-3.9-4.12.0 by @Tsuki in #2460
  - Add CPython 3.11.0rc2 by @ViktorHaag in #2459
  - Add patches for 3.7.14 to support Apple Silicon by @samdoran in #2463
  - Add ability to easily skip all use of Homebrew by @samdoran in #2464
  - Drop Travis integration by @sobolevn in #2468
  - Build CPython 3.12+ with --with-dsymutil in MacOS by @native-api in #2471
  - Add Pyston 2.3.5 by @scop in #2476
  Full Changelog: https://github.com/pyenv/pyenv/compare/v2.3.4...v2.3.5</changelog>
</package>
<package pkgid="3e03050f8dedc32721507b44bb3c5cfeed82838dedacc10b7a194ec91c3f02c2" name="pyenv" arch="x86_64">
  <version epoch="0" ver="2.3.5" rel="bp154.2.3.1"/>
  <changelog author="thomas.schraitle@suse.com" date="1548676800">- Install fish completion file to /usr/share/fish/completions/</changelog>
  <changelog author="thomas.schraitle@suse.com" date="1548676801">- Update to 1.2.9:
  * python-build: Add CPython 3.7.2 and CPython 3.6.8 (#1256)
  * python-build: Add anaconda[23]-5.3.1 (#1246)
  * python-build: Add Anaconda 2018.12 (#1259)
  * python-build: Fix ironpython-dev git repo url (#1260)
  * python-build: Add OPENSSL_NO_SSL3 patch for CPython 3.3.7 (#1263)
- Version 1.2.8:
  * python-build: Add CPython 3.7.1
  * python-build: Add CPython 3.6.7
  * python-build: Add anaconda[23]-5.3.0 (#1220)</changelog>
  <changelog author="Chris Coutinho &lt;chrisbcoutinho@gmail.com&gt;" date="1570622400">- Update to 1.2.13
  * python-build: Add CPython 3.7.4
  * python-build: Add CPython 3.6.9
- Update to 1.2.12
  * python-build: Find zlib from Xcode or brew on Mojave (#1353)
  * python-build: Add PyPy 7.1.1 (#1335)
  * python-build: Add CPython 3.8.0b1
- Update to 1.2.11
  * python-build: Fix posix_close name collision in 2.4 builds (#1321)
  * python-build: Add CPython 3.4.10 (#1322)
  * python-build: Add Anaconda 2019.03
  * python-build: Allow overriding the preference of OpenSSL version per definition basis (#1302, #1325, #1326)
  * python-build: Imported changes from rbenv/ruby-build 20190401 (#1327)
  * python-build: Use GNU Readline 8.0 on macOS if brew's package isn't available (#1329)
- Update to 1.2.10
  * python-build: Force y, Y, yes or YES to confirm installation (#1217)
  * python-build: Add PyPy 7.0.0, 7.1.0
  * python-build: Add CPython 2.7.16, 3.5.7 and 3.7.3
  * python-build: Install python-gdb.py (#1190, #1289)
  * python-build: Add micropython 1.10
  * python-build: Prefer Homebrew's OpenSSL 1.1 over 1.0 (#839, #1302)</changelog>
  <changelog author="Thomas Schraitle &lt;thomas.schraitle@suse.com&gt; - 1.2.16" date="1579176000">- Update to 1.2.16
  * python-build: Add CPython 3.8.1 (#1497)
  * python-build: Add CPython 3.7.6 (#1498)
  * python-build: Add CPython 3.6.10 (#1499)
  * python-build: Add CPython 3.5.9 (#1448)
  * python-build: Add PyPy 7.3.0 (1502)
- Update to 1.2.15
  * python-build: Add CPython 3.7.5 (#1423)
  * python-build: Add CPython 2.7.17 (#1433)
  * python-build: Add CPython 3.5.8 (#1441)
  * python-build: Add PyPy 7.2.0 (#1418)
  * python-build: Add anaconda3-2019.10 (#1427)
  * pyenv-help: Show text for all pyenv commands in pyenv-help (#1421)
- Update to 1.2.14
  * python-build: Add CPython 3.8.0 (#1416)
  * python-build: Add Anaconda-2019.07 (#1382)
  * python-build: Add Micropython 1.11 (#1395)
  * python-build: Fix compatibility issues with Homebrew installed Tcl/Tk (#1397)
  * pyenv-exec: Do not use exec -a, do not mangle PATH for system Python (#1169)
- Spec file
  * Apply spec-cleaner
  * Add version in last changelog entry to avoid rpmlint warnings</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1579521600">- Fix the tarball url to match reality</changelog>
  <changelog author="Sergio Fenoll &lt;sergio@fenoll.be&gt;" date="1596715200">- Update to 1.2.20
  * python-build: Add CPython 3.8.5 (#1667)
  * python-build: Add CPython 3.8.4 (#1658)
  * python-build: Add CPython 3.7.8
  * python-build: Add CPython 3.6.11
  * pyenv-install: Make grep detection more robust (#1663)
  * python-build: Fix has_tar_xz_support function on FreeBSD. (#1652)
- Update to 1.2.19
  * python-build: Add CPython 3.8.3 (#1612)
  * python-build: Add CPython 2.7.18 (#1593)
  * python-build: Add CPython 3.10-dev (#1619)
  * python-build: Add anaconda3-2020.02 (#1584)
  * python-build: Add stackless 3.7.5 (#1589)
- Update to 1.2.18
  * python-build: Update download URLs for old OpenSSL releases (#1578)
  * python-build: Prevent brew: command not found messages that are not errors (#1544)
- Update to 1.2.17
  * python-build: Add CPython 3.8.2
  * python-build: Add CPython 3.7.7 (#1553)
  * python-build: Add Miniconda versions newer than 4.3.30 (#1361)
  * python-build: Add Micropython 1.12 (#1542)
  * python-build: Add Add CPython 3.9.0a4
  * pyenv: Fix sed illegal byte sequence error (#1521)</changelog>
  <changelog author="Malte Ohmstede &lt;malte.ohmstede@gmail.com&gt;" date="1620043200">- Update to 1.2.27
  * Add GraalPython 21.1.0 (#1882)
  * Add CPython 3.10.0a7 (#1880)
  * Docs(README): fix info about version-file separator (#1874)
  * List versions starting with a dot (#1350)
  * Feat: support (skip) commented lines in version-file (#1866)
  * pypy3.7-7.3.4 (#1873)
  * Create miniforge3-4.10 (#1868)
  * Add CPython 3.9.4 (#1865)
- Update to 1.2.26
  * Add CPython 3.9.4 (#1865)
- Update to 1.2.25
  * bpo-43631: update to openssl 1.1.1k (#1861)
  * Add CPython 3.9.3 and 3.8.9 (#1859)
  * Add micropython 1.14 (#1858)
  * Shell detect improvements (#1835)
  * Test(init): remove misleading detect from parent shell case arg (#1856)
  * Add GraalPython 21.0.0 (#1855)
- Update to 1.2.24.1
  * Updated CHANGELOG.MD to reflect latest changes at v1.2.24
  * Fixed pyenv --version to display the correct pyenv version
- Update to 1.2.24
  * GitHub Actions: Add $PYENV_ROOT/shims to $PATH (#1838)
  * Add Python 3.10.0a6 (#1839)
  * Remove the "Using script's directory as PYENV_DIR if shim is invoked with a script argument" feature (#1814)
  * Update GET_PIP_URL (#1844)
  * GitHub Action to build Python versions on Ubuntu (#1794)
  * Make work in nounset (-u) mode (#1786)
  * Update miniforge3-4.9.2 (#1834)
  * Added aarch64 for Linux in anaconda_architecture() (#1833)
  * Hook script to add latest suffix for install command (#1831)
  * Fix error link (#1832)
  * Clarify proxy variable names in readme (#1830)
  * Travis CI: Add Xcode 12 on macOS 10.15.5 (#1708)
  * Added --nosystem argument (#1829)
  * Add CPython 3.8.8 (#1825)
  * Add CPython 3.9.2 (#1826)
  * Add manpage (#1790)
- Update to 1.2.23
  * python-build: Add CPython v3.7.10 (#1738)
  * python-build: Add CPython v3.6.13 (#1817)
  * python-build: Add PyPy 3.7-c-jit-latest (#1812)
  * python-build: Add PyPy 3.7 (#1718, #1726, #1780)
  * python-build: Add miniconda3 4.9.2 (#1763)
  * python-build: Add miniconda3 4.8.3 (#1763)
  * python-build: Add miniconda3 4.8.2 (#1763)
  * python-build: Add Miniforge3-4.9.2 (#1782)
  * python-build: Fix download links for some PyPy and Stackless versions (#1692)
  * python-build: Add PYENV_DEBUG option (#1806)
  * python-build: Fix get-pip which dropped support for legacy Python (#1793)
  * pyenv-help: Fix sed: RE error: illegal byte sequence (#1714)
  * pyenv-versions: Fix not printing asterisk for current version in Bash 3 (#1815)
  * pyenv-prefix: "system" python - support cases where python3 is in PATH but not python (#1655)
  * pyenv-which: Added fallback to system executable (#1797)
  * pyenv-rehash: Use associative arrays for better performance on bash &gt;= 4 (#1749)
  * pyenv-rehash: Try to sleep in 0.1 sec steps when acquiring lock (#1798)
  * pyenv: Use a better PS4 as recommended by Bash Hackers Wiki (#1810)
- Update to 1.2.22
  * python-build: Add LDFLAGS for zlib on macOS &gt;= 1100 (#1711)
  * python-build: Add the CPython 3.9.1 (#1752)
  * python-build: Change order of LDFLAGS paths (#1754)
  * python-build: Docker config for testing python-build (#1548)
  * python-build: Put prerequisite for installation before install (#1750)
  * python-build: Add GraalPython 20.3 (#1736)
  * python-build: Add CPython 3.8.7
  * python-build: Added anaconda3-2020.11 (#1774)
  * python-build: Added arm64 architecture support in python-build for macOS (#1775)
- Update to 1.2.21
  * python-build: Add CPython 3.9.0 (#1706)
  * python-build: Add CPython 3.8.6 (#1698)
  * python-build: Add CPython 3.7.9 (#1680)
  * python-build: Add CPython 3.6.12 (#1680)
  * python-build: Add CPython 3.5.10 (#1690)
  * python-build: Add Jython 2.7.2 (#1672)
  * python-build: Add Graalpython 20.1.0 (#1594)
  * python-build: Add Graalpython 20.2.0 (#1594)
  * python-build: Add Anaconda3-2020.07 (#1684)
  * python-build: Add micropython-1.13 (#1704)
  * python-build: Fix PyPy download links (#1682)
  * python-build: Support for PYTHON_BUILD_MIRROR_URL when checksums do not exist (#1673)
  * pyenv: Search for plugins in PYENV_DIR and PYENV_ROOT (#1697)
  * pyenv-help: Fix 'sed: RE error: illegal byte sequence' (#1670)</changelog>
  <changelog author="Chris Coutinho &lt;chrisbcoutinho@gmail.com&gt;" date="1621857600">- Update to 2.0.0
  Primary breaking change: Split startup logic into PATH and everything else
  For details check the CHANGELOG:
  https://github.com/pyenv/pyenv/blob/master/CHANGELOG.md</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1622203200">- Install fish completion to vendor_completions.d (https://github.com/pyenv/pyenv/issues/1944)</changelog>
  <changelog author="Alexander Graul &lt;alexander.graul@suse.com&gt;" date="1637582400">- Update to 2.2.1:
  - Added documentation for commands
  - Added Python versions (inlcuding 3.10.0)
  - Full changelog at https://github.com/pyenv/pyenv/blob/master/CHANGELOG.md</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1637582401">- Remove *rpmlintrc, it is not necessary anymore.
- Remove our own manpage, it is now included in the tarball.</changelog>
  <changelog author="Thomas Schraitle &lt;thomas.schraitle@suse.com&gt; - 2.2.4" date="1645185600">- Install fish completion into directory '/usr/share/fish/completions' (bsc#1196047)
- Apply spec-cleaner
- Update to 2.2.4
  - Added docstrings to several undocumented functions by @fluencydoc (#2197)
  - Fix incorrect pypy 2.7-7.3.6 sha256 hashes by @joestrach in (#2208)
  - Fix a regression in include paths when compiling ctypes in 3.6.15/3.7.12 by @chipx86 (#2209)
  - Revert "Disable coreutils on M1 Apple Silicon with arm64 (#2020)" by @native-api (#2212)
  - CPython 3.11.0a4 by @nedbat in (#2217)
  - CPython 3.9.10 and 3.10.2 by @nedbat in (#2219)
  - miniconda3-latest: added Linux-aarch64 by @verdimrc (#2221)
  - Add GraalPython 22.0.0 by @msimacek in (#2226)
  - Full changelog at https://github.com/pyenv/pyenv/releases/tag/v2.2.4-1
- Update to 2.2.3
  - Add new pypy versions (pypy2.7-7.3.2~7.3.5) to the version list (#2194)
  - Fix Python 3.7.12 compilation on macOS arm64/M1. (#2190)
  - Fix Python 3.6.15 compilation on macOS arm64/M1. (#2189)
  - Add Anaconda3-2021.11 (#2193)
  - CPython 3.11.0a3 (#2187)
  - Fix errant "echo" in README install instructions (#2185)
  - Add Miniforge and Mambaforge 4.10.3-10 (#2184)
  - Add CPython 3.10.1 (#2183)
  - Fix 3.6.15 build on macOS (#2182)
  - Full changelog at https://github.com/pyenv/pyenv/releases/tag/v2.2.3
- Update to 2.2.2
  - Add support for macOS Apple M1 (#2164)</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1645704000">- Fix tarball name and version.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1645790400">- Put fish completions in thr right directory.
  We don't have to worry about conflicting files, because fish
  has a special directory for vendor completions which have
  precedence over the fish native ones.</changelog>
  <changelog author="Thomas Schraitle &lt;thomas.schraitle@suse.com&gt; - 2.2.5" date="1649160000">- Update to 2.2.5
  - fix issue 2236 for CPython 3.6.15 and 3.7.12 by @fofoni in #2237
  - python-build: add URL for get-pip for Python 3.6 by @fofoni in #2238
  - Add pyston-2.3.2 by @dmrlawson in #2240
  - CPython 3.11.0a5 by @saaketp in #2241
  - CPython 3.11.0a6 by @saaketp in #2266
  - Add miniconda 4.11.0 by @aphedges in #2268
  - docs(pyenv-prefix): note support for multiple versions by @scop in #2270
  - pypy 7.3.8 02/20/2022 release by @dand-oss in #2253</changelog>
  <changelog author="Thomas Schraitle &lt;thomas.schraitle@suse.com&gt; - 2.3.0" date="1651665600">- Update to 2.3.0
  - Bump openssl 1.1 to 1.1.1n for CPython 3.7 3.8 3.9 by @tuzi3040 in #2276
  - Doc Fix: Escape a hash character causing unwanted GitHub Issue linking by @edrogers in #2282
  - Add CPython 3.9.12 by @saaketp in #2296
  - Add CPython 3.10.4 by @saaketp in #2295
  - Add patch for 3.6.15 to support Xcode 13.3 by @nshine in #2288
  - Add patch for 3.7.12 to support Xcode 13.3 by @samdoran in #2292
  - Add CONTRIBUTING.md by @native-api in #2287
  - Add PyPy 7.3.9 release 2022-03-30 by @dand-oss in #2308
  - Add Pyston 2.3.3 by @scop in #2316
  - Add CPython 3.11.0a7 by @illia-v in #2315
  - Add "nogil" Python v3.9.10 by @colesbury in #2342
  - Support XCode 13.3 in all releases that officially support MacOS 11 by @native-api in #2344
  - Add GraalPython 22.1.0 by @msimacek in #2346
  - Make PYENV_DEBUG imply -v for pyenv install by @native-api in #2347
  - Simplify init scheme by @native-api in #2310
  - Don't use Homebrew outside of MacOS by @native-api in #2349
  - Add :latest syntax to documentation for the install command by @hay in #2351</changelog>
  <changelog author="Thomas Schraitle &lt;thomas.schraitle@suse.com&gt; - 2.3.2" date="1658145600">- Update to 2.3.2
  - Add CPython 3.11.0b2 by @saaketp in #2380
  - Honor CFLAGS_EXTRA for MicroPython #2006 by @yggdr in #2007
  - Add post-install checks for curses, ctypes, lzma, and tkinter
    by @aphedges in #2353
  - Add CPython 3.11.0b3 by @edgarrmondragon in #2382
  - Add flags for Homebrew into python-config --ldflags by @native-api
    in #2384
  - Add CPython 3.10.5 by @illia-v in #2386
  - Add Anaconda 2019.10, 2021.04, 2022.05; support Anaconda in
    add_miniconda.py by @native-api in #2385
  - Add Pyston-2.3.4 by @dand-oss in #2390
  - Update Anaconda3-2022.05 MacOSX arm64 md5 by @bkbncn in #2391
- Fix bsc#1201582 to fix CVE-2022-35861 (from commit 22fa683, file
  pyenv-CVE-2022-35861.patch)</changelog>
  <changelog author="Thomas Schraitle &lt;thomas.schraitle@suse.com&gt; - 2.3.2" date="1664798400">- Spec file changes
  Don't buildrequire Sphinx. This dependency pulls other dependencies
  which makes it impossible to build for Python 3.6 (and openSUSE Leap 15.4).</changelog>
  <changelog author="Thomas Schraitle &lt;thomas.schraitle@suse.com&gt; - 2.3.4" date="1664798401">- Changes in spec file
  Remove patch pyenv-CVE-2022-35861.patch as this was already
  integrated in 2.3.3
  See PR pyenv/pyenv#2412
- Update to 2.3.4
  - Add CPython 3.11.0rc1 by @edgarrmondragon in #2434
  - Add support for multiple versions in pyenv uninstall
    by @hardikpnsp in #2432
  - Add micropython 1.18 and 1.19.1 by @dmitriy-serdyuk in #2443
  - CI: support Micropython, deleted scripts; build with -v
    by @native-api in #2447
  - Re-allow paths in .python-version while still preventing CVE-2022-35861
    by @comrumino in #2442
  - CI: Bump OS versions by @native-api in #2448
  - Add Cinder 3.8 by @filips123 in #2433
  - Add support for multiple versions in pyenv uninstall in #2432
  - Add micropython 1.18 and 1.19.1 in #2443
  - Add Cinder 3.8 in #2433
- Changes in 2.3.3
  - Use version sort in pyenv versions by @fofoni in #2405
  - Add CPython 3.11.0b4 by @majorgreys in #2411
  - Python-build: Replace deprecated git protocol use with https in docs
    by @ssbarnea in #2413
  - Fix relative path traversal due to using version string in path
    by @comrumino in #2412
  - Allow pypy2 and pypy3 patching by @brogon in #2421, #2419
  - Add CPython 3.11.0b5 by @edgarrmondragon in #2420
  - Add GraalPython 22.2.0 by @msimacek in #2425
  - Add CPython 3.10.6 by @edgarrmondragon in #2428
  - Add CPython 3.11.0b4 by @majorgreys in #2411
  - Replace deprecated git protocol use with https
    by @ssbarnea in docs #2413
  - Fix relative path traversal due to using version string in path
    by @comrumino in #2412
  - Fix patterns for pypy2.*/pypy3.* versions by @brogon in #2419</changelog>
  <changelog author="Thomas Schraitle &lt;thomas.schraitle@suse.com&gt; - 2.3.5" date="1666094400">- Update to 2.3.5
  - Add CPython 3.10.7 by @edgarrmondragon in #2454
  - Docs: update Fish PATH update by @gregorias in #2449
  - Add CPython 3.7.14, 3.8.14 and 3.9.14 by @edgarrmondragon in #2456
  - Update miniconda3-3.9-4.12.0 by @Tsuki in #2460
  - Add CPython 3.11.0rc2 by @ViktorHaag in #2459
  - Add patches for 3.7.14 to support Apple Silicon by @samdoran in #2463
  - Add ability to easily skip all use of Homebrew by @samdoran in #2464
  - Drop Travis integration by @sobolevn in #2468
  - Build CPython 3.12+ with --with-dsymutil in MacOS by @native-api in #2471
  - Add Pyston 2.3.5 by @scop in #2476
  Full Changelog: https://github.com/pyenv/pyenv/compare/v2.3.4...v2.3.5</changelog>
</package>
<package pkgid="ac444786d91f3c35fadb69db56b9d7870cb02b81ace89c18a036dd0935bbe4a3" name="pyenv-bash-completion" arch="noarch">
  <version epoch="0" ver="2.3.5" rel="bp154.2.3.1"/>
  <changelog author="thomas.schraitle@suse.com" date="1548676800">- Install fish completion file to /usr/share/fish/completions/</changelog>
  <changelog author="thomas.schraitle@suse.com" date="1548676801">- Update to 1.2.9:
  * python-build: Add CPython 3.7.2 and CPython 3.6.8 (#1256)
  * python-build: Add anaconda[23]-5.3.1 (#1246)
  * python-build: Add Anaconda 2018.12 (#1259)
  * python-build: Fix ironpython-dev git repo url (#1260)
  * python-build: Add OPENSSL_NO_SSL3 patch for CPython 3.3.7 (#1263)
- Version 1.2.8:
  * python-build: Add CPython 3.7.1
  * python-build: Add CPython 3.6.7
  * python-build: Add anaconda[23]-5.3.0 (#1220)</changelog>
  <changelog author="Chris Coutinho &lt;chrisbcoutinho@gmail.com&gt;" date="1570622400">- Update to 1.2.13
  * python-build: Add CPython 3.7.4
  * python-build: Add CPython 3.6.9
- Update to 1.2.12
  * python-build: Find zlib from Xcode or brew on Mojave (#1353)
  * python-build: Add PyPy 7.1.1 (#1335)
  * python-build: Add CPython 3.8.0b1
- Update to 1.2.11
  * python-build: Fix posix_close name collision in 2.4 builds (#1321)
  * python-build: Add CPython 3.4.10 (#1322)
  * python-build: Add Anaconda 2019.03
  * python-build: Allow overriding the preference of OpenSSL version per definition basis (#1302, #1325, #1326)
  * python-build: Imported changes from rbenv/ruby-build 20190401 (#1327)
  * python-build: Use GNU Readline 8.0 on macOS if brew's package isn't available (#1329)
- Update to 1.2.10
  * python-build: Force y, Y, yes or YES to confirm installation (#1217)
  * python-build: Add PyPy 7.0.0, 7.1.0
  * python-build: Add CPython 2.7.16, 3.5.7 and 3.7.3
  * python-build: Install python-gdb.py (#1190, #1289)
  * python-build: Add micropython 1.10
  * python-build: Prefer Homebrew's OpenSSL 1.1 over 1.0 (#839, #1302)</changelog>
  <changelog author="Thomas Schraitle &lt;thomas.schraitle@suse.com&gt; - 1.2.16" date="1579176000">- Update to 1.2.16
  * python-build: Add CPython 3.8.1 (#1497)
  * python-build: Add CPython 3.7.6 (#1498)
  * python-build: Add CPython 3.6.10 (#1499)
  * python-build: Add CPython 3.5.9 (#1448)
  * python-build: Add PyPy 7.3.0 (1502)
- Update to 1.2.15
  * python-build: Add CPython 3.7.5 (#1423)
  * python-build: Add CPython 2.7.17 (#1433)
  * python-build: Add CPython 3.5.8 (#1441)
  * python-build: Add PyPy 7.2.0 (#1418)
  * python-build: Add anaconda3-2019.10 (#1427)
  * pyenv-help: Show text for all pyenv commands in pyenv-help (#1421)
- Update to 1.2.14
  * python-build: Add CPython 3.8.0 (#1416)
  * python-build: Add Anaconda-2019.07 (#1382)
  * python-build: Add Micropython 1.11 (#1395)
  * python-build: Fix compatibility issues with Homebrew installed Tcl/Tk (#1397)
  * pyenv-exec: Do not use exec -a, do not mangle PATH for system Python (#1169)
- Spec file
  * Apply spec-cleaner
  * Add version in last changelog entry to avoid rpmlint warnings</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1579521600">- Fix the tarball url to match reality</changelog>
  <changelog author="Sergio Fenoll &lt;sergio@fenoll.be&gt;" date="1596715200">- Update to 1.2.20
  * python-build: Add CPython 3.8.5 (#1667)
  * python-build: Add CPython 3.8.4 (#1658)
  * python-build: Add CPython 3.7.8
  * python-build: Add CPython 3.6.11
  * pyenv-install: Make grep detection more robust (#1663)
  * python-build: Fix has_tar_xz_support function on FreeBSD. (#1652)
- Update to 1.2.19
  * python-build: Add CPython 3.8.3 (#1612)
  * python-build: Add CPython 2.7.18 (#1593)
  * python-build: Add CPython 3.10-dev (#1619)
  * python-build: Add anaconda3-2020.02 (#1584)
  * python-build: Add stackless 3.7.5 (#1589)
- Update to 1.2.18
  * python-build: Update download URLs for old OpenSSL releases (#1578)
  * python-build: Prevent brew: command not found messages that are not errors (#1544)
- Update to 1.2.17
  * python-build: Add CPython 3.8.2
  * python-build: Add CPython 3.7.7 (#1553)
  * python-build: Add Miniconda versions newer than 4.3.30 (#1361)
  * python-build: Add Micropython 1.12 (#1542)
  * python-build: Add Add CPython 3.9.0a4
  * pyenv: Fix sed illegal byte sequence error (#1521)</changelog>
  <changelog author="Malte Ohmstede &lt;malte.ohmstede@gmail.com&gt;" date="1620043200">- Update to 1.2.27
  * Add GraalPython 21.1.0 (#1882)
  * Add CPython 3.10.0a7 (#1880)
  * Docs(README): fix info about version-file separator (#1874)
  * List versions starting with a dot (#1350)
  * Feat: support (skip) commented lines in version-file (#1866)
  * pypy3.7-7.3.4 (#1873)
  * Create miniforge3-4.10 (#1868)
  * Add CPython 3.9.4 (#1865)
- Update to 1.2.26
  * Add CPython 3.9.4 (#1865)
- Update to 1.2.25
  * bpo-43631: update to openssl 1.1.1k (#1861)
  * Add CPython 3.9.3 and 3.8.9 (#1859)
  * Add micropython 1.14 (#1858)
  * Shell detect improvements (#1835)
  * Test(init): remove misleading detect from parent shell case arg (#1856)
  * Add GraalPython 21.0.0 (#1855)
- Update to 1.2.24.1
  * Updated CHANGELOG.MD to reflect latest changes at v1.2.24
  * Fixed pyenv --version to display the correct pyenv version
- Update to 1.2.24
  * GitHub Actions: Add $PYENV_ROOT/shims to $PATH (#1838)
  * Add Python 3.10.0a6 (#1839)
  * Remove the "Using script's directory as PYENV_DIR if shim is invoked with a script argument" feature (#1814)
  * Update GET_PIP_URL (#1844)
  * GitHub Action to build Python versions on Ubuntu (#1794)
  * Make work in nounset (-u) mode (#1786)
  * Update miniforge3-4.9.2 (#1834)
  * Added aarch64 for Linux in anaconda_architecture() (#1833)
  * Hook script to add latest suffix for install command (#1831)
  * Fix error link (#1832)
  * Clarify proxy variable names in readme (#1830)
  * Travis CI: Add Xcode 12 on macOS 10.15.5 (#1708)
  * Added --nosystem argument (#1829)
  * Add CPython 3.8.8 (#1825)
  * Add CPython 3.9.2 (#1826)
  * Add manpage (#1790)
- Update to 1.2.23
  * python-build: Add CPython v3.7.10 (#1738)
  * python-build: Add CPython v3.6.13 (#1817)
  * python-build: Add PyPy 3.7-c-jit-latest (#1812)
  * python-build: Add PyPy 3.7 (#1718, #1726, #1780)
  * python-build: Add miniconda3 4.9.2 (#1763)
  * python-build: Add miniconda3 4.8.3 (#1763)
  * python-build: Add miniconda3 4.8.2 (#1763)
  * python-build: Add Miniforge3-4.9.2 (#1782)
  * python-build: Fix download links for some PyPy and Stackless versions (#1692)
  * python-build: Add PYENV_DEBUG option (#1806)
  * python-build: Fix get-pip which dropped support for legacy Python (#1793)
  * pyenv-help: Fix sed: RE error: illegal byte sequence (#1714)
  * pyenv-versions: Fix not printing asterisk for current version in Bash 3 (#1815)
  * pyenv-prefix: "system" python - support cases where python3 is in PATH but not python (#1655)
  * pyenv-which: Added fallback to system executable (#1797)
  * pyenv-rehash: Use associative arrays for better performance on bash &gt;= 4 (#1749)
  * pyenv-rehash: Try to sleep in 0.1 sec steps when acquiring lock (#1798)
  * pyenv: Use a better PS4 as recommended by Bash Hackers Wiki (#1810)
- Update to 1.2.22
  * python-build: Add LDFLAGS for zlib on macOS &gt;= 1100 (#1711)
  * python-build: Add the CPython 3.9.1 (#1752)
  * python-build: Change order of LDFLAGS paths (#1754)
  * python-build: Docker config for testing python-build (#1548)
  * python-build: Put prerequisite for installation before install (#1750)
  * python-build: Add GraalPython 20.3 (#1736)
  * python-build: Add CPython 3.8.7
  * python-build: Added anaconda3-2020.11 (#1774)
  * python-build: Added arm64 architecture support in python-build for macOS (#1775)
- Update to 1.2.21
  * python-build: Add CPython 3.9.0 (#1706)
  * python-build: Add CPython 3.8.6 (#1698)
  * python-build: Add CPython 3.7.9 (#1680)
  * python-build: Add CPython 3.6.12 (#1680)
  * python-build: Add CPython 3.5.10 (#1690)
  * python-build: Add Jython 2.7.2 (#1672)
  * python-build: Add Graalpython 20.1.0 (#1594)
  * python-build: Add Graalpython 20.2.0 (#1594)
  * python-build: Add Anaconda3-2020.07 (#1684)
  * python-build: Add micropython-1.13 (#1704)
  * python-build: Fix PyPy download links (#1682)
  * python-build: Support for PYTHON_BUILD_MIRROR_URL when checksums do not exist (#1673)
  * pyenv: Search for plugins in PYENV_DIR and PYENV_ROOT (#1697)
  * pyenv-help: Fix 'sed: RE error: illegal byte sequence' (#1670)</changelog>
  <changelog author="Chris Coutinho &lt;chrisbcoutinho@gmail.com&gt;" date="1621857600">- Update to 2.0.0
  Primary breaking change: Split startup logic into PATH and everything else
  For details check the CHANGELOG:
  https://github.com/pyenv/pyenv/blob/master/CHANGELOG.md</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1622203200">- Install fish completion to vendor_completions.d (https://github.com/pyenv/pyenv/issues/1944)</changelog>
  <changelog author="Alexander Graul &lt;alexander.graul@suse.com&gt;" date="1637582400">- Update to 2.2.1:
  - Added documentation for commands
  - Added Python versions (inlcuding 3.10.0)
  - Full changelog at https://github.com/pyenv/pyenv/blob/master/CHANGELOG.md</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1637582401">- Remove *rpmlintrc, it is not necessary anymore.
- Remove our own manpage, it is now included in the tarball.</changelog>
  <changelog author="Thomas Schraitle &lt;thomas.schraitle@suse.com&gt; - 2.2.4" date="1645185600">- Install fish completion into directory '/usr/share/fish/completions' (bsc#1196047)
- Apply spec-cleaner
- Update to 2.2.4
  - Added docstrings to several undocumented functions by @fluencydoc (#2197)
  - Fix incorrect pypy 2.7-7.3.6 sha256 hashes by @joestrach in (#2208)
  - Fix a regression in include paths when compiling ctypes in 3.6.15/3.7.12 by @chipx86 (#2209)
  - Revert "Disable coreutils on M1 Apple Silicon with arm64 (#2020)" by @native-api (#2212)
  - CPython 3.11.0a4 by @nedbat in (#2217)
  - CPython 3.9.10 and 3.10.2 by @nedbat in (#2219)
  - miniconda3-latest: added Linux-aarch64 by @verdimrc (#2221)
  - Add GraalPython 22.0.0 by @msimacek in (#2226)
  - Full changelog at https://github.com/pyenv/pyenv/releases/tag/v2.2.4-1
- Update to 2.2.3
  - Add new pypy versions (pypy2.7-7.3.2~7.3.5) to the version list (#2194)
  - Fix Python 3.7.12 compilation on macOS arm64/M1. (#2190)
  - Fix Python 3.6.15 compilation on macOS arm64/M1. (#2189)
  - Add Anaconda3-2021.11 (#2193)
  - CPython 3.11.0a3 (#2187)
  - Fix errant "echo" in README install instructions (#2185)
  - Add Miniforge and Mambaforge 4.10.3-10 (#2184)
  - Add CPython 3.10.1 (#2183)
  - Fix 3.6.15 build on macOS (#2182)
  - Full changelog at https://github.com/pyenv/pyenv/releases/tag/v2.2.3
- Update to 2.2.2
  - Add support for macOS Apple M1 (#2164)</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1645704000">- Fix tarball name and version.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1645790400">- Put fish completions in thr right directory.
  We don't have to worry about conflicting files, because fish
  has a special directory for vendor completions which have
  precedence over the fish native ones.</changelog>
  <changelog author="Thomas Schraitle &lt;thomas.schraitle@suse.com&gt; - 2.2.5" date="1649160000">- Update to 2.2.5
  - fix issue 2236 for CPython 3.6.15 and 3.7.12 by @fofoni in #2237
  - python-build: add URL for get-pip for Python 3.6 by @fofoni in #2238
  - Add pyston-2.3.2 by @dmrlawson in #2240
  - CPython 3.11.0a5 by @saaketp in #2241
  - CPython 3.11.0a6 by @saaketp in #2266
  - Add miniconda 4.11.0 by @aphedges in #2268
  - docs(pyenv-prefix): note support for multiple versions by @scop in #2270
  - pypy 7.3.8 02/20/2022 release by @dand-oss in #2253</changelog>
  <changelog author="Thomas Schraitle &lt;thomas.schraitle@suse.com&gt; - 2.3.0" date="1651665600">- Update to 2.3.0
  - Bump openssl 1.1 to 1.1.1n for CPython 3.7 3.8 3.9 by @tuzi3040 in #2276
  - Doc Fix: Escape a hash character causing unwanted GitHub Issue linking by @edrogers in #2282
  - Add CPython 3.9.12 by @saaketp in #2296
  - Add CPython 3.10.4 by @saaketp in #2295
  - Add patch for 3.6.15 to support Xcode 13.3 by @nshine in #2288
  - Add patch for 3.7.12 to support Xcode 13.3 by @samdoran in #2292
  - Add CONTRIBUTING.md by @native-api in #2287
  - Add PyPy 7.3.9 release 2022-03-30 by @dand-oss in #2308
  - Add Pyston 2.3.3 by @scop in #2316
  - Add CPython 3.11.0a7 by @illia-v in #2315
  - Add "nogil" Python v3.9.10 by @colesbury in #2342
  - Support XCode 13.3 in all releases that officially support MacOS 11 by @native-api in #2344
  - Add GraalPython 22.1.0 by @msimacek in #2346
  - Make PYENV_DEBUG imply -v for pyenv install by @native-api in #2347
  - Simplify init scheme by @native-api in #2310
  - Don't use Homebrew outside of MacOS by @native-api in #2349
  - Add :latest syntax to documentation for the install command by @hay in #2351</changelog>
  <changelog author="Thomas Schraitle &lt;thomas.schraitle@suse.com&gt; - 2.3.2" date="1658145600">- Update to 2.3.2
  - Add CPython 3.11.0b2 by @saaketp in #2380
  - Honor CFLAGS_EXTRA for MicroPython #2006 by @yggdr in #2007
  - Add post-install checks for curses, ctypes, lzma, and tkinter
    by @aphedges in #2353
  - Add CPython 3.11.0b3 by @edgarrmondragon in #2382
  - Add flags for Homebrew into python-config --ldflags by @native-api
    in #2384
  - Add CPython 3.10.5 by @illia-v in #2386
  - Add Anaconda 2019.10, 2021.04, 2022.05; support Anaconda in
    add_miniconda.py by @native-api in #2385
  - Add Pyston-2.3.4 by @dand-oss in #2390
  - Update Anaconda3-2022.05 MacOSX arm64 md5 by @bkbncn in #2391
- Fix bsc#1201582 to fix CVE-2022-35861 (from commit 22fa683, file
  pyenv-CVE-2022-35861.patch)</changelog>
  <changelog author="Thomas Schraitle &lt;thomas.schraitle@suse.com&gt; - 2.3.2" date="1664798400">- Spec file changes
  Don't buildrequire Sphinx. This dependency pulls other dependencies
  which makes it impossible to build for Python 3.6 (and openSUSE Leap 15.4).</changelog>
  <changelog author="Thomas Schraitle &lt;thomas.schraitle@suse.com&gt; - 2.3.4" date="1664798401">- Changes in spec file
  Remove patch pyenv-CVE-2022-35861.patch as this was already
  integrated in 2.3.3
  See PR pyenv/pyenv#2412
- Update to 2.3.4
  - Add CPython 3.11.0rc1 by @edgarrmondragon in #2434
  - Add support for multiple versions in pyenv uninstall
    by @hardikpnsp in #2432
  - Add micropython 1.18 and 1.19.1 by @dmitriy-serdyuk in #2443
  - CI: support Micropython, deleted scripts; build with -v
    by @native-api in #2447
  - Re-allow paths in .python-version while still preventing CVE-2022-35861
    by @comrumino in #2442
  - CI: Bump OS versions by @native-api in #2448
  - Add Cinder 3.8 by @filips123 in #2433
  - Add support for multiple versions in pyenv uninstall in #2432
  - Add micropython 1.18 and 1.19.1 in #2443
  - Add Cinder 3.8 in #2433
- Changes in 2.3.3
  - Use version sort in pyenv versions by @fofoni in #2405
  - Add CPython 3.11.0b4 by @majorgreys in #2411
  - Python-build: Replace deprecated git protocol use with https in docs
    by @ssbarnea in #2413
  - Fix relative path traversal due to using version string in path
    by @comrumino in #2412
  - Allow pypy2 and pypy3 patching by @brogon in #2421, #2419
  - Add CPython 3.11.0b5 by @edgarrmondragon in #2420
  - Add GraalPython 22.2.0 by @msimacek in #2425
  - Add CPython 3.10.6 by @edgarrmondragon in #2428
  - Add CPython 3.11.0b4 by @majorgreys in #2411
  - Replace deprecated git protocol use with https
    by @ssbarnea in docs #2413
  - Fix relative path traversal due to using version string in path
    by @comrumino in #2412
  - Fix patterns for pypy2.*/pypy3.* versions by @brogon in #2419</changelog>
  <changelog author="Thomas Schraitle &lt;thomas.schraitle@suse.com&gt; - 2.3.5" date="1666094400">- Update to 2.3.5
  - Add CPython 3.10.7 by @edgarrmondragon in #2454
  - Docs: update Fish PATH update by @gregorias in #2449
  - Add CPython 3.7.14, 3.8.14 and 3.9.14 by @edgarrmondragon in #2456
  - Update miniconda3-3.9-4.12.0 by @Tsuki in #2460
  - Add CPython 3.11.0rc2 by @ViktorHaag in #2459
  - Add patches for 3.7.14 to support Apple Silicon by @samdoran in #2463
  - Add ability to easily skip all use of Homebrew by @samdoran in #2464
  - Drop Travis integration by @sobolevn in #2468
  - Build CPython 3.12+ with --with-dsymutil in MacOS by @native-api in #2471
  - Add Pyston 2.3.5 by @scop in #2476
  Full Changelog: https://github.com/pyenv/pyenv/compare/v2.3.4...v2.3.5</changelog>
</package>
<package pkgid="8cc8ec53de47e94faed6fadbba509afd420eda9eebbe6b500ba91da1dde24c3d" name="pyenv-fish-completion" arch="noarch">
  <version epoch="0" ver="2.3.5" rel="bp154.2.3.1"/>
  <changelog author="thomas.schraitle@suse.com" date="1548676800">- Install fish completion file to /usr/share/fish/completions/</changelog>
  <changelog author="thomas.schraitle@suse.com" date="1548676801">- Update to 1.2.9:
  * python-build: Add CPython 3.7.2 and CPython 3.6.8 (#1256)
  * python-build: Add anaconda[23]-5.3.1 (#1246)
  * python-build: Add Anaconda 2018.12 (#1259)
  * python-build: Fix ironpython-dev git repo url (#1260)
  * python-build: Add OPENSSL_NO_SSL3 patch for CPython 3.3.7 (#1263)
- Version 1.2.8:
  * python-build: Add CPython 3.7.1
  * python-build: Add CPython 3.6.7
  * python-build: Add anaconda[23]-5.3.0 (#1220)</changelog>
  <changelog author="Chris Coutinho &lt;chrisbcoutinho@gmail.com&gt;" date="1570622400">- Update to 1.2.13
  * python-build: Add CPython 3.7.4
  * python-build: Add CPython 3.6.9
- Update to 1.2.12
  * python-build: Find zlib from Xcode or brew on Mojave (#1353)
  * python-build: Add PyPy 7.1.1 (#1335)
  * python-build: Add CPython 3.8.0b1
- Update to 1.2.11
  * python-build: Fix posix_close name collision in 2.4 builds (#1321)
  * python-build: Add CPython 3.4.10 (#1322)
  * python-build: Add Anaconda 2019.03
  * python-build: Allow overriding the preference of OpenSSL version per definition basis (#1302, #1325, #1326)
  * python-build: Imported changes from rbenv/ruby-build 20190401 (#1327)
  * python-build: Use GNU Readline 8.0 on macOS if brew's package isn't available (#1329)
- Update to 1.2.10
  * python-build: Force y, Y, yes or YES to confirm installation (#1217)
  * python-build: Add PyPy 7.0.0, 7.1.0
  * python-build: Add CPython 2.7.16, 3.5.7 and 3.7.3
  * python-build: Install python-gdb.py (#1190, #1289)
  * python-build: Add micropython 1.10
  * python-build: Prefer Homebrew's OpenSSL 1.1 over 1.0 (#839, #1302)</changelog>
  <changelog author="Thomas Schraitle &lt;thomas.schraitle@suse.com&gt; - 1.2.16" date="1579176000">- Update to 1.2.16
  * python-build: Add CPython 3.8.1 (#1497)
  * python-build: Add CPython 3.7.6 (#1498)
  * python-build: Add CPython 3.6.10 (#1499)
  * python-build: Add CPython 3.5.9 (#1448)
  * python-build: Add PyPy 7.3.0 (1502)
- Update to 1.2.15
  * python-build: Add CPython 3.7.5 (#1423)
  * python-build: Add CPython 2.7.17 (#1433)
  * python-build: Add CPython 3.5.8 (#1441)
  * python-build: Add PyPy 7.2.0 (#1418)
  * python-build: Add anaconda3-2019.10 (#1427)
  * pyenv-help: Show text for all pyenv commands in pyenv-help (#1421)
- Update to 1.2.14
  * python-build: Add CPython 3.8.0 (#1416)
  * python-build: Add Anaconda-2019.07 (#1382)
  * python-build: Add Micropython 1.11 (#1395)
  * python-build: Fix compatibility issues with Homebrew installed Tcl/Tk (#1397)
  * pyenv-exec: Do not use exec -a, do not mangle PATH for system Python (#1169)
- Spec file
  * Apply spec-cleaner
  * Add version in last changelog entry to avoid rpmlint warnings</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1579521600">- Fix the tarball url to match reality</changelog>
  <changelog author="Sergio Fenoll &lt;sergio@fenoll.be&gt;" date="1596715200">- Update to 1.2.20
  * python-build: Add CPython 3.8.5 (#1667)
  * python-build: Add CPython 3.8.4 (#1658)
  * python-build: Add CPython 3.7.8
  * python-build: Add CPython 3.6.11
  * pyenv-install: Make grep detection more robust (#1663)
  * python-build: Fix has_tar_xz_support function on FreeBSD. (#1652)
- Update to 1.2.19
  * python-build: Add CPython 3.8.3 (#1612)
  * python-build: Add CPython 2.7.18 (#1593)
  * python-build: Add CPython 3.10-dev (#1619)
  * python-build: Add anaconda3-2020.02 (#1584)
  * python-build: Add stackless 3.7.5 (#1589)
- Update to 1.2.18
  * python-build: Update download URLs for old OpenSSL releases (#1578)
  * python-build: Prevent brew: command not found messages that are not errors (#1544)
- Update to 1.2.17
  * python-build: Add CPython 3.8.2
  * python-build: Add CPython 3.7.7 (#1553)
  * python-build: Add Miniconda versions newer than 4.3.30 (#1361)
  * python-build: Add Micropython 1.12 (#1542)
  * python-build: Add Add CPython 3.9.0a4
  * pyenv: Fix sed illegal byte sequence error (#1521)</changelog>
  <changelog author="Malte Ohmstede &lt;malte.ohmstede@gmail.com&gt;" date="1620043200">- Update to 1.2.27
  * Add GraalPython 21.1.0 (#1882)
  * Add CPython 3.10.0a7 (#1880)
  * Docs(README): fix info about version-file separator (#1874)
  * List versions starting with a dot (#1350)
  * Feat: support (skip) commented lines in version-file (#1866)
  * pypy3.7-7.3.4 (#1873)
  * Create miniforge3-4.10 (#1868)
  * Add CPython 3.9.4 (#1865)
- Update to 1.2.26
  * Add CPython 3.9.4 (#1865)
- Update to 1.2.25
  * bpo-43631: update to openssl 1.1.1k (#1861)
  * Add CPython 3.9.3 and 3.8.9 (#1859)
  * Add micropython 1.14 (#1858)
  * Shell detect improvements (#1835)
  * Test(init): remove misleading detect from parent shell case arg (#1856)
  * Add GraalPython 21.0.0 (#1855)
- Update to 1.2.24.1
  * Updated CHANGELOG.MD to reflect latest changes at v1.2.24
  * Fixed pyenv --version to display the correct pyenv version
- Update to 1.2.24
  * GitHub Actions: Add $PYENV_ROOT/shims to $PATH (#1838)
  * Add Python 3.10.0a6 (#1839)
  * Remove the "Using script's directory as PYENV_DIR if shim is invoked with a script argument" feature (#1814)
  * Update GET_PIP_URL (#1844)
  * GitHub Action to build Python versions on Ubuntu (#1794)
  * Make work in nounset (-u) mode (#1786)
  * Update miniforge3-4.9.2 (#1834)
  * Added aarch64 for Linux in anaconda_architecture() (#1833)
  * Hook script to add latest suffix for install command (#1831)
  * Fix error link (#1832)
  * Clarify proxy variable names in readme (#1830)
  * Travis CI: Add Xcode 12 on macOS 10.15.5 (#1708)
  * Added --nosystem argument (#1829)
  * Add CPython 3.8.8 (#1825)
  * Add CPython 3.9.2 (#1826)
  * Add manpage (#1790)
- Update to 1.2.23
  * python-build: Add CPython v3.7.10 (#1738)
  * python-build: Add CPython v3.6.13 (#1817)
  * python-build: Add PyPy 3.7-c-jit-latest (#1812)
  * python-build: Add PyPy 3.7 (#1718, #1726, #1780)
  * python-build: Add miniconda3 4.9.2 (#1763)
  * python-build: Add miniconda3 4.8.3 (#1763)
  * python-build: Add miniconda3 4.8.2 (#1763)
  * python-build: Add Miniforge3-4.9.2 (#1782)
  * python-build: Fix download links for some PyPy and Stackless versions (#1692)
  * python-build: Add PYENV_DEBUG option (#1806)
  * python-build: Fix get-pip which dropped support for legacy Python (#1793)
  * pyenv-help: Fix sed: RE error: illegal byte sequence (#1714)
  * pyenv-versions: Fix not printing asterisk for current version in Bash 3 (#1815)
  * pyenv-prefix: "system" python - support cases where python3 is in PATH but not python (#1655)
  * pyenv-which: Added fallback to system executable (#1797)
  * pyenv-rehash: Use associative arrays for better performance on bash &gt;= 4 (#1749)
  * pyenv-rehash: Try to sleep in 0.1 sec steps when acquiring lock (#1798)
  * pyenv: Use a better PS4 as recommended by Bash Hackers Wiki (#1810)
- Update to 1.2.22
  * python-build: Add LDFLAGS for zlib on macOS &gt;= 1100 (#1711)
  * python-build: Add the CPython 3.9.1 (#1752)
  * python-build: Change order of LDFLAGS paths (#1754)
  * python-build: Docker config for testing python-build (#1548)
  * python-build: Put prerequisite for installation before install (#1750)
  * python-build: Add GraalPython 20.3 (#1736)
  * python-build: Add CPython 3.8.7
  * python-build: Added anaconda3-2020.11 (#1774)
  * python-build: Added arm64 architecture support in python-build for macOS (#1775)
- Update to 1.2.21
  * python-build: Add CPython 3.9.0 (#1706)
  * python-build: Add CPython 3.8.6 (#1698)
  * python-build: Add CPython 3.7.9 (#1680)
  * python-build: Add CPython 3.6.12 (#1680)
  * python-build: Add CPython 3.5.10 (#1690)
  * python-build: Add Jython 2.7.2 (#1672)
  * python-build: Add Graalpython 20.1.0 (#1594)
  * python-build: Add Graalpython 20.2.0 (#1594)
  * python-build: Add Anaconda3-2020.07 (#1684)
  * python-build: Add micropython-1.13 (#1704)
  * python-build: Fix PyPy download links (#1682)
  * python-build: Support for PYTHON_BUILD_MIRROR_URL when checksums do not exist (#1673)
  * pyenv: Search for plugins in PYENV_DIR and PYENV_ROOT (#1697)
  * pyenv-help: Fix 'sed: RE error: illegal byte sequence' (#1670)</changelog>
  <changelog author="Chris Coutinho &lt;chrisbcoutinho@gmail.com&gt;" date="1621857600">- Update to 2.0.0
  Primary breaking change: Split startup logic into PATH and everything else
  For details check the CHANGELOG:
  https://github.com/pyenv/pyenv/blob/master/CHANGELOG.md</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1622203200">- Install fish completion to vendor_completions.d (https://github.com/pyenv/pyenv/issues/1944)</changelog>
  <changelog author="Alexander Graul &lt;alexander.graul@suse.com&gt;" date="1637582400">- Update to 2.2.1:
  - Added documentation for commands
  - Added Python versions (inlcuding 3.10.0)
  - Full changelog at https://github.com/pyenv/pyenv/blob/master/CHANGELOG.md</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1637582401">- Remove *rpmlintrc, it is not necessary anymore.
- Remove our own manpage, it is now included in the tarball.</changelog>
  <changelog author="Thomas Schraitle &lt;thomas.schraitle@suse.com&gt; - 2.2.4" date="1645185600">- Install fish completion into directory '/usr/share/fish/completions' (bsc#1196047)
- Apply spec-cleaner
- Update to 2.2.4
  - Added docstrings to several undocumented functions by @fluencydoc (#2197)
  - Fix incorrect pypy 2.7-7.3.6 sha256 hashes by @joestrach in (#2208)
  - Fix a regression in include paths when compiling ctypes in 3.6.15/3.7.12 by @chipx86 (#2209)
  - Revert "Disable coreutils on M1 Apple Silicon with arm64 (#2020)" by @native-api (#2212)
  - CPython 3.11.0a4 by @nedbat in (#2217)
  - CPython 3.9.10 and 3.10.2 by @nedbat in (#2219)
  - miniconda3-latest: added Linux-aarch64 by @verdimrc (#2221)
  - Add GraalPython 22.0.0 by @msimacek in (#2226)
  - Full changelog at https://github.com/pyenv/pyenv/releases/tag/v2.2.4-1
- Update to 2.2.3
  - Add new pypy versions (pypy2.7-7.3.2~7.3.5) to the version list (#2194)
  - Fix Python 3.7.12 compilation on macOS arm64/M1. (#2190)
  - Fix Python 3.6.15 compilation on macOS arm64/M1. (#2189)
  - Add Anaconda3-2021.11 (#2193)
  - CPython 3.11.0a3 (#2187)
  - Fix errant "echo" in README install instructions (#2185)
  - Add Miniforge and Mambaforge 4.10.3-10 (#2184)
  - Add CPython 3.10.1 (#2183)
  - Fix 3.6.15 build on macOS (#2182)
  - Full changelog at https://github.com/pyenv/pyenv/releases/tag/v2.2.3
- Update to 2.2.2
  - Add support for macOS Apple M1 (#2164)</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1645704000">- Fix tarball name and version.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1645790400">- Put fish completions in thr right directory.
  We don't have to worry about conflicting files, because fish
  has a special directory for vendor completions which have
  precedence over the fish native ones.</changelog>
  <changelog author="Thomas Schraitle &lt;thomas.schraitle@suse.com&gt; - 2.2.5" date="1649160000">- Update to 2.2.5
  - fix issue 2236 for CPython 3.6.15 and 3.7.12 by @fofoni in #2237
  - python-build: add URL for get-pip for Python 3.6 by @fofoni in #2238
  - Add pyston-2.3.2 by @dmrlawson in #2240
  - CPython 3.11.0a5 by @saaketp in #2241
  - CPython 3.11.0a6 by @saaketp in #2266
  - Add miniconda 4.11.0 by @aphedges in #2268
  - docs(pyenv-prefix): note support for multiple versions by @scop in #2270
  - pypy 7.3.8 02/20/2022 release by @dand-oss in #2253</changelog>
  <changelog author="Thomas Schraitle &lt;thomas.schraitle@suse.com&gt; - 2.3.0" date="1651665600">- Update to 2.3.0
  - Bump openssl 1.1 to 1.1.1n for CPython 3.7 3.8 3.9 by @tuzi3040 in #2276
  - Doc Fix: Escape a hash character causing unwanted GitHub Issue linking by @edrogers in #2282
  - Add CPython 3.9.12 by @saaketp in #2296
  - Add CPython 3.10.4 by @saaketp in #2295
  - Add patch for 3.6.15 to support Xcode 13.3 by @nshine in #2288
  - Add patch for 3.7.12 to support Xcode 13.3 by @samdoran in #2292
  - Add CONTRIBUTING.md by @native-api in #2287
  - Add PyPy 7.3.9 release 2022-03-30 by @dand-oss in #2308
  - Add Pyston 2.3.3 by @scop in #2316
  - Add CPython 3.11.0a7 by @illia-v in #2315
  - Add "nogil" Python v3.9.10 by @colesbury in #2342
  - Support XCode 13.3 in all releases that officially support MacOS 11 by @native-api in #2344
  - Add GraalPython 22.1.0 by @msimacek in #2346
  - Make PYENV_DEBUG imply -v for pyenv install by @native-api in #2347
  - Simplify init scheme by @native-api in #2310
  - Don't use Homebrew outside of MacOS by @native-api in #2349
  - Add :latest syntax to documentation for the install command by @hay in #2351</changelog>
  <changelog author="Thomas Schraitle &lt;thomas.schraitle@suse.com&gt; - 2.3.2" date="1658145600">- Update to 2.3.2
  - Add CPython 3.11.0b2 by @saaketp in #2380
  - Honor CFLAGS_EXTRA for MicroPython #2006 by @yggdr in #2007
  - Add post-install checks for curses, ctypes, lzma, and tkinter
    by @aphedges in #2353
  - Add CPython 3.11.0b3 by @edgarrmondragon in #2382
  - Add flags for Homebrew into python-config --ldflags by @native-api
    in #2384
  - Add CPython 3.10.5 by @illia-v in #2386
  - Add Anaconda 2019.10, 2021.04, 2022.05; support Anaconda in
    add_miniconda.py by @native-api in #2385
  - Add Pyston-2.3.4 by @dand-oss in #2390
  - Update Anaconda3-2022.05 MacOSX arm64 md5 by @bkbncn in #2391
- Fix bsc#1201582 to fix CVE-2022-35861 (from commit 22fa683, file
  pyenv-CVE-2022-35861.patch)</changelog>
  <changelog author="Thomas Schraitle &lt;thomas.schraitle@suse.com&gt; - 2.3.2" date="1664798400">- Spec file changes
  Don't buildrequire Sphinx. This dependency pulls other dependencies
  which makes it impossible to build for Python 3.6 (and openSUSE Leap 15.4).</changelog>
  <changelog author="Thomas Schraitle &lt;thomas.schraitle@suse.com&gt; - 2.3.4" date="1664798401">- Changes in spec file
  Remove patch pyenv-CVE-2022-35861.patch as this was already
  integrated in 2.3.3
  See PR pyenv/pyenv#2412
- Update to 2.3.4
  - Add CPython 3.11.0rc1 by @edgarrmondragon in #2434
  - Add support for multiple versions in pyenv uninstall
    by @hardikpnsp in #2432
  - Add micropython 1.18 and 1.19.1 by @dmitriy-serdyuk in #2443
  - CI: support Micropython, deleted scripts; build with -v
    by @native-api in #2447
  - Re-allow paths in .python-version while still preventing CVE-2022-35861
    by @comrumino in #2442
  - CI: Bump OS versions by @native-api in #2448
  - Add Cinder 3.8 by @filips123 in #2433
  - Add support for multiple versions in pyenv uninstall in #2432
  - Add micropython 1.18 and 1.19.1 in #2443
  - Add Cinder 3.8 in #2433
- Changes in 2.3.3
  - Use version sort in pyenv versions by @fofoni in #2405
  - Add CPython 3.11.0b4 by @majorgreys in #2411
  - Python-build: Replace deprecated git protocol use with https in docs
    by @ssbarnea in #2413
  - Fix relative path traversal due to using version string in path
    by @comrumino in #2412
  - Allow pypy2 and pypy3 patching by @brogon in #2421, #2419
  - Add CPython 3.11.0b5 by @edgarrmondragon in #2420
  - Add GraalPython 22.2.0 by @msimacek in #2425
  - Add CPython 3.10.6 by @edgarrmondragon in #2428
  - Add CPython 3.11.0b4 by @majorgreys in #2411
  - Replace deprecated git protocol use with https
    by @ssbarnea in docs #2413
  - Fix relative path traversal due to using version string in path
    by @comrumino in #2412
  - Fix patterns for pypy2.*/pypy3.* versions by @brogon in #2419</changelog>
  <changelog author="Thomas Schraitle &lt;thomas.schraitle@suse.com&gt; - 2.3.5" date="1666094400">- Update to 2.3.5
  - Add CPython 3.10.7 by @edgarrmondragon in #2454
  - Docs: update Fish PATH update by @gregorias in #2449
  - Add CPython 3.7.14, 3.8.14 and 3.9.14 by @edgarrmondragon in #2456
  - Update miniconda3-3.9-4.12.0 by @Tsuki in #2460
  - Add CPython 3.11.0rc2 by @ViktorHaag in #2459
  - Add patches for 3.7.14 to support Apple Silicon by @samdoran in #2463
  - Add ability to easily skip all use of Homebrew by @samdoran in #2464
  - Drop Travis integration by @sobolevn in #2468
  - Build CPython 3.12+ with --with-dsymutil in MacOS by @native-api in #2471
  - Add Pyston 2.3.5 by @scop in #2476
  Full Changelog: https://github.com/pyenv/pyenv/compare/v2.3.4...v2.3.5</changelog>
</package>
<package pkgid="7a22f1fb0066b7eadd9391da933689e9a0a12e901ea5571218e92ff3a1d2d257" name="pyenv-zsh-completion" arch="noarch">
  <version epoch="0" ver="2.3.5" rel="bp154.2.3.1"/>
  <changelog author="thomas.schraitle@suse.com" date="1548676800">- Install fish completion file to /usr/share/fish/completions/</changelog>
  <changelog author="thomas.schraitle@suse.com" date="1548676801">- Update to 1.2.9:
  * python-build: Add CPython 3.7.2 and CPython 3.6.8 (#1256)
  * python-build: Add anaconda[23]-5.3.1 (#1246)
  * python-build: Add Anaconda 2018.12 (#1259)
  * python-build: Fix ironpython-dev git repo url (#1260)
  * python-build: Add OPENSSL_NO_SSL3 patch for CPython 3.3.7 (#1263)
- Version 1.2.8:
  * python-build: Add CPython 3.7.1
  * python-build: Add CPython 3.6.7
  * python-build: Add anaconda[23]-5.3.0 (#1220)</changelog>
  <changelog author="Chris Coutinho &lt;chrisbcoutinho@gmail.com&gt;" date="1570622400">- Update to 1.2.13
  * python-build: Add CPython 3.7.4
  * python-build: Add CPython 3.6.9
- Update to 1.2.12
  * python-build: Find zlib from Xcode or brew on Mojave (#1353)
  * python-build: Add PyPy 7.1.1 (#1335)
  * python-build: Add CPython 3.8.0b1
- Update to 1.2.11
  * python-build: Fix posix_close name collision in 2.4 builds (#1321)
  * python-build: Add CPython 3.4.10 (#1322)
  * python-build: Add Anaconda 2019.03
  * python-build: Allow overriding the preference of OpenSSL version per definition basis (#1302, #1325, #1326)
  * python-build: Imported changes from rbenv/ruby-build 20190401 (#1327)
  * python-build: Use GNU Readline 8.0 on macOS if brew's package isn't available (#1329)
- Update to 1.2.10
  * python-build: Force y, Y, yes or YES to confirm installation (#1217)
  * python-build: Add PyPy 7.0.0, 7.1.0
  * python-build: Add CPython 2.7.16, 3.5.7 and 3.7.3
  * python-build: Install python-gdb.py (#1190, #1289)
  * python-build: Add micropython 1.10
  * python-build: Prefer Homebrew's OpenSSL 1.1 over 1.0 (#839, #1302)</changelog>
  <changelog author="Thomas Schraitle &lt;thomas.schraitle@suse.com&gt; - 1.2.16" date="1579176000">- Update to 1.2.16
  * python-build: Add CPython 3.8.1 (#1497)
  * python-build: Add CPython 3.7.6 (#1498)
  * python-build: Add CPython 3.6.10 (#1499)
  * python-build: Add CPython 3.5.9 (#1448)
  * python-build: Add PyPy 7.3.0 (1502)
- Update to 1.2.15
  * python-build: Add CPython 3.7.5 (#1423)
  * python-build: Add CPython 2.7.17 (#1433)
  * python-build: Add CPython 3.5.8 (#1441)
  * python-build: Add PyPy 7.2.0 (#1418)
  * python-build: Add anaconda3-2019.10 (#1427)
  * pyenv-help: Show text for all pyenv commands in pyenv-help (#1421)
- Update to 1.2.14
  * python-build: Add CPython 3.8.0 (#1416)
  * python-build: Add Anaconda-2019.07 (#1382)
  * python-build: Add Micropython 1.11 (#1395)
  * python-build: Fix compatibility issues with Homebrew installed Tcl/Tk (#1397)
  * pyenv-exec: Do not use exec -a, do not mangle PATH for system Python (#1169)
- Spec file
  * Apply spec-cleaner
  * Add version in last changelog entry to avoid rpmlint warnings</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1579521600">- Fix the tarball url to match reality</changelog>
  <changelog author="Sergio Fenoll &lt;sergio@fenoll.be&gt;" date="1596715200">- Update to 1.2.20
  * python-build: Add CPython 3.8.5 (#1667)
  * python-build: Add CPython 3.8.4 (#1658)
  * python-build: Add CPython 3.7.8
  * python-build: Add CPython 3.6.11
  * pyenv-install: Make grep detection more robust (#1663)
  * python-build: Fix has_tar_xz_support function on FreeBSD. (#1652)
- Update to 1.2.19
  * python-build: Add CPython 3.8.3 (#1612)
  * python-build: Add CPython 2.7.18 (#1593)
  * python-build: Add CPython 3.10-dev (#1619)
  * python-build: Add anaconda3-2020.02 (#1584)
  * python-build: Add stackless 3.7.5 (#1589)
- Update to 1.2.18
  * python-build: Update download URLs for old OpenSSL releases (#1578)
  * python-build: Prevent brew: command not found messages that are not errors (#1544)
- Update to 1.2.17
  * python-build: Add CPython 3.8.2
  * python-build: Add CPython 3.7.7 (#1553)
  * python-build: Add Miniconda versions newer than 4.3.30 (#1361)
  * python-build: Add Micropython 1.12 (#1542)
  * python-build: Add Add CPython 3.9.0a4
  * pyenv: Fix sed illegal byte sequence error (#1521)</changelog>
  <changelog author="Malte Ohmstede &lt;malte.ohmstede@gmail.com&gt;" date="1620043200">- Update to 1.2.27
  * Add GraalPython 21.1.0 (#1882)
  * Add CPython 3.10.0a7 (#1880)
  * Docs(README): fix info about version-file separator (#1874)
  * List versions starting with a dot (#1350)
  * Feat: support (skip) commented lines in version-file (#1866)
  * pypy3.7-7.3.4 (#1873)
  * Create miniforge3-4.10 (#1868)
  * Add CPython 3.9.4 (#1865)
- Update to 1.2.26
  * Add CPython 3.9.4 (#1865)
- Update to 1.2.25
  * bpo-43631: update to openssl 1.1.1k (#1861)
  * Add CPython 3.9.3 and 3.8.9 (#1859)
  * Add micropython 1.14 (#1858)
  * Shell detect improvements (#1835)
  * Test(init): remove misleading detect from parent shell case arg (#1856)
  * Add GraalPython 21.0.0 (#1855)
- Update to 1.2.24.1
  * Updated CHANGELOG.MD to reflect latest changes at v1.2.24
  * Fixed pyenv --version to display the correct pyenv version
- Update to 1.2.24
  * GitHub Actions: Add $PYENV_ROOT/shims to $PATH (#1838)
  * Add Python 3.10.0a6 (#1839)
  * Remove the "Using script's directory as PYENV_DIR if shim is invoked with a script argument" feature (#1814)
  * Update GET_PIP_URL (#1844)
  * GitHub Action to build Python versions on Ubuntu (#1794)
  * Make work in nounset (-u) mode (#1786)
  * Update miniforge3-4.9.2 (#1834)
  * Added aarch64 for Linux in anaconda_architecture() (#1833)
  * Hook script to add latest suffix for install command (#1831)
  * Fix error link (#1832)
  * Clarify proxy variable names in readme (#1830)
  * Travis CI: Add Xcode 12 on macOS 10.15.5 (#1708)
  * Added --nosystem argument (#1829)
  * Add CPython 3.8.8 (#1825)
  * Add CPython 3.9.2 (#1826)
  * Add manpage (#1790)
- Update to 1.2.23
  * python-build: Add CPython v3.7.10 (#1738)
  * python-build: Add CPython v3.6.13 (#1817)
  * python-build: Add PyPy 3.7-c-jit-latest (#1812)
  * python-build: Add PyPy 3.7 (#1718, #1726, #1780)
  * python-build: Add miniconda3 4.9.2 (#1763)
  * python-build: Add miniconda3 4.8.3 (#1763)
  * python-build: Add miniconda3 4.8.2 (#1763)
  * python-build: Add Miniforge3-4.9.2 (#1782)
  * python-build: Fix download links for some PyPy and Stackless versions (#1692)
  * python-build: Add PYENV_DEBUG option (#1806)
  * python-build: Fix get-pip which dropped support for legacy Python (#1793)
  * pyenv-help: Fix sed: RE error: illegal byte sequence (#1714)
  * pyenv-versions: Fix not printing asterisk for current version in Bash 3 (#1815)
  * pyenv-prefix: "system" python - support cases where python3 is in PATH but not python (#1655)
  * pyenv-which: Added fallback to system executable (#1797)
  * pyenv-rehash: Use associative arrays for better performance on bash &gt;= 4 (#1749)
  * pyenv-rehash: Try to sleep in 0.1 sec steps when acquiring lock (#1798)
  * pyenv: Use a better PS4 as recommended by Bash Hackers Wiki (#1810)
- Update to 1.2.22
  * python-build: Add LDFLAGS for zlib on macOS &gt;= 1100 (#1711)
  * python-build: Add the CPython 3.9.1 (#1752)
  * python-build: Change order of LDFLAGS paths (#1754)
  * python-build: Docker config for testing python-build (#1548)
  * python-build: Put prerequisite for installation before install (#1750)
  * python-build: Add GraalPython 20.3 (#1736)
  * python-build: Add CPython 3.8.7
  * python-build: Added anaconda3-2020.11 (#1774)
  * python-build: Added arm64 architecture support in python-build for macOS (#1775)
- Update to 1.2.21
  * python-build: Add CPython 3.9.0 (#1706)
  * python-build: Add CPython 3.8.6 (#1698)
  * python-build: Add CPython 3.7.9 (#1680)
  * python-build: Add CPython 3.6.12 (#1680)
  * python-build: Add CPython 3.5.10 (#1690)
  * python-build: Add Jython 2.7.2 (#1672)
  * python-build: Add Graalpython 20.1.0 (#1594)
  * python-build: Add Graalpython 20.2.0 (#1594)
  * python-build: Add Anaconda3-2020.07 (#1684)
  * python-build: Add micropython-1.13 (#1704)
  * python-build: Fix PyPy download links (#1682)
  * python-build: Support for PYTHON_BUILD_MIRROR_URL when checksums do not exist (#1673)
  * pyenv: Search for plugins in PYENV_DIR and PYENV_ROOT (#1697)
  * pyenv-help: Fix 'sed: RE error: illegal byte sequence' (#1670)</changelog>
  <changelog author="Chris Coutinho &lt;chrisbcoutinho@gmail.com&gt;" date="1621857600">- Update to 2.0.0
  Primary breaking change: Split startup logic into PATH and everything else
  For details check the CHANGELOG:
  https://github.com/pyenv/pyenv/blob/master/CHANGELOG.md</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1622203200">- Install fish completion to vendor_completions.d (https://github.com/pyenv/pyenv/issues/1944)</changelog>
  <changelog author="Alexander Graul &lt;alexander.graul@suse.com&gt;" date="1637582400">- Update to 2.2.1:
  - Added documentation for commands
  - Added Python versions (inlcuding 3.10.0)
  - Full changelog at https://github.com/pyenv/pyenv/blob/master/CHANGELOG.md</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1637582401">- Remove *rpmlintrc, it is not necessary anymore.
- Remove our own manpage, it is now included in the tarball.</changelog>
  <changelog author="Thomas Schraitle &lt;thomas.schraitle@suse.com&gt; - 2.2.4" date="1645185600">- Install fish completion into directory '/usr/share/fish/completions' (bsc#1196047)
- Apply spec-cleaner
- Update to 2.2.4
  - Added docstrings to several undocumented functions by @fluencydoc (#2197)
  - Fix incorrect pypy 2.7-7.3.6 sha256 hashes by @joestrach in (#2208)
  - Fix a regression in include paths when compiling ctypes in 3.6.15/3.7.12 by @chipx86 (#2209)
  - Revert "Disable coreutils on M1 Apple Silicon with arm64 (#2020)" by @native-api (#2212)
  - CPython 3.11.0a4 by @nedbat in (#2217)
  - CPython 3.9.10 and 3.10.2 by @nedbat in (#2219)
  - miniconda3-latest: added Linux-aarch64 by @verdimrc (#2221)
  - Add GraalPython 22.0.0 by @msimacek in (#2226)
  - Full changelog at https://github.com/pyenv/pyenv/releases/tag/v2.2.4-1
- Update to 2.2.3
  - Add new pypy versions (pypy2.7-7.3.2~7.3.5) to the version list (#2194)
  - Fix Python 3.7.12 compilation on macOS arm64/M1. (#2190)
  - Fix Python 3.6.15 compilation on macOS arm64/M1. (#2189)
  - Add Anaconda3-2021.11 (#2193)
  - CPython 3.11.0a3 (#2187)
  - Fix errant "echo" in README install instructions (#2185)
  - Add Miniforge and Mambaforge 4.10.3-10 (#2184)
  - Add CPython 3.10.1 (#2183)
  - Fix 3.6.15 build on macOS (#2182)
  - Full changelog at https://github.com/pyenv/pyenv/releases/tag/v2.2.3
- Update to 2.2.2
  - Add support for macOS Apple M1 (#2164)</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1645704000">- Fix tarball name and version.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1645790400">- Put fish completions in thr right directory.
  We don't have to worry about conflicting files, because fish
  has a special directory for vendor completions which have
  precedence over the fish native ones.</changelog>
  <changelog author="Thomas Schraitle &lt;thomas.schraitle@suse.com&gt; - 2.2.5" date="1649160000">- Update to 2.2.5
  - fix issue 2236 for CPython 3.6.15 and 3.7.12 by @fofoni in #2237
  - python-build: add URL for get-pip for Python 3.6 by @fofoni in #2238
  - Add pyston-2.3.2 by @dmrlawson in #2240
  - CPython 3.11.0a5 by @saaketp in #2241
  - CPython 3.11.0a6 by @saaketp in #2266
  - Add miniconda 4.11.0 by @aphedges in #2268
  - docs(pyenv-prefix): note support for multiple versions by @scop in #2270
  - pypy 7.3.8 02/20/2022 release by @dand-oss in #2253</changelog>
  <changelog author="Thomas Schraitle &lt;thomas.schraitle@suse.com&gt; - 2.3.0" date="1651665600">- Update to 2.3.0
  - Bump openssl 1.1 to 1.1.1n for CPython 3.7 3.8 3.9 by @tuzi3040 in #2276
  - Doc Fix: Escape a hash character causing unwanted GitHub Issue linking by @edrogers in #2282
  - Add CPython 3.9.12 by @saaketp in #2296
  - Add CPython 3.10.4 by @saaketp in #2295
  - Add patch for 3.6.15 to support Xcode 13.3 by @nshine in #2288
  - Add patch for 3.7.12 to support Xcode 13.3 by @samdoran in #2292
  - Add CONTRIBUTING.md by @native-api in #2287
  - Add PyPy 7.3.9 release 2022-03-30 by @dand-oss in #2308
  - Add Pyston 2.3.3 by @scop in #2316
  - Add CPython 3.11.0a7 by @illia-v in #2315
  - Add "nogil" Python v3.9.10 by @colesbury in #2342
  - Support XCode 13.3 in all releases that officially support MacOS 11 by @native-api in #2344
  - Add GraalPython 22.1.0 by @msimacek in #2346
  - Make PYENV_DEBUG imply -v for pyenv install by @native-api in #2347
  - Simplify init scheme by @native-api in #2310
  - Don't use Homebrew outside of MacOS by @native-api in #2349
  - Add :latest syntax to documentation for the install command by @hay in #2351</changelog>
  <changelog author="Thomas Schraitle &lt;thomas.schraitle@suse.com&gt; - 2.3.2" date="1658145600">- Update to 2.3.2
  - Add CPython 3.11.0b2 by @saaketp in #2380
  - Honor CFLAGS_EXTRA for MicroPython #2006 by @yggdr in #2007
  - Add post-install checks for curses, ctypes, lzma, and tkinter
    by @aphedges in #2353
  - Add CPython 3.11.0b3 by @edgarrmondragon in #2382
  - Add flags for Homebrew into python-config --ldflags by @native-api
    in #2384
  - Add CPython 3.10.5 by @illia-v in #2386
  - Add Anaconda 2019.10, 2021.04, 2022.05; support Anaconda in
    add_miniconda.py by @native-api in #2385
  - Add Pyston-2.3.4 by @dand-oss in #2390
  - Update Anaconda3-2022.05 MacOSX arm64 md5 by @bkbncn in #2391
- Fix bsc#1201582 to fix CVE-2022-35861 (from commit 22fa683, file
  pyenv-CVE-2022-35861.patch)</changelog>
  <changelog author="Thomas Schraitle &lt;thomas.schraitle@suse.com&gt; - 2.3.2" date="1664798400">- Spec file changes
  Don't buildrequire Sphinx. This dependency pulls other dependencies
  which makes it impossible to build for Python 3.6 (and openSUSE Leap 15.4).</changelog>
  <changelog author="Thomas Schraitle &lt;thomas.schraitle@suse.com&gt; - 2.3.4" date="1664798401">- Changes in spec file
  Remove patch pyenv-CVE-2022-35861.patch as this was already
  integrated in 2.3.3
  See PR pyenv/pyenv#2412
- Update to 2.3.4
  - Add CPython 3.11.0rc1 by @edgarrmondragon in #2434
  - Add support for multiple versions in pyenv uninstall
    by @hardikpnsp in #2432
  - Add micropython 1.18 and 1.19.1 by @dmitriy-serdyuk in #2443
  - CI: support Micropython, deleted scripts; build with -v
    by @native-api in #2447
  - Re-allow paths in .python-version while still preventing CVE-2022-35861
    by @comrumino in #2442
  - CI: Bump OS versions by @native-api in #2448
  - Add Cinder 3.8 by @filips123 in #2433
  - Add support for multiple versions in pyenv uninstall in #2432
  - Add micropython 1.18 and 1.19.1 in #2443
  - Add Cinder 3.8 in #2433
- Changes in 2.3.3
  - Use version sort in pyenv versions by @fofoni in #2405
  - Add CPython 3.11.0b4 by @majorgreys in #2411
  - Python-build: Replace deprecated git protocol use with https in docs
    by @ssbarnea in #2413
  - Fix relative path traversal due to using version string in path
    by @comrumino in #2412
  - Allow pypy2 and pypy3 patching by @brogon in #2421, #2419
  - Add CPython 3.11.0b5 by @edgarrmondragon in #2420
  - Add GraalPython 22.2.0 by @msimacek in #2425
  - Add CPython 3.10.6 by @edgarrmondragon in #2428
  - Add CPython 3.11.0b4 by @majorgreys in #2411
  - Replace deprecated git protocol use with https
    by @ssbarnea in docs #2413
  - Fix relative path traversal due to using version string in path
    by @comrumino in #2412
  - Fix patterns for pypy2.*/pypy3.* versions by @brogon in #2419</changelog>
  <changelog author="Thomas Schraitle &lt;thomas.schraitle@suse.com&gt; - 2.3.5" date="1666094400">- Update to 2.3.5
  - Add CPython 3.10.7 by @edgarrmondragon in #2454
  - Docs: update Fish PATH update by @gregorias in #2449
  - Add CPython 3.7.14, 3.8.14 and 3.9.14 by @edgarrmondragon in #2456
  - Update miniconda3-3.9-4.12.0 by @Tsuki in #2460
  - Add CPython 3.11.0rc2 by @ViktorHaag in #2459
  - Add patches for 3.7.14 to support Apple Silicon by @samdoran in #2463
  - Add ability to easily skip all use of Homebrew by @samdoran in #2464
  - Drop Travis integration by @sobolevn in #2468
  - Build CPython 3.12+ with --with-dsymutil in MacOS by @native-api in #2471
  - Add Pyston 2.3.5 by @scop in #2476
  Full Changelog: https://github.com/pyenv/pyenv/compare/v2.3.4...v2.3.5</changelog>
</package>
<package pkgid="f68ba951b6f3a8564f9fcff17fde130995a0d74de24bd5b993d07459ecdb6b97" name="python-Django" arch="src">
  <version epoch="0" ver="2.2.28" rel="bp154.2.3.3"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553342400">- Add patch to build with PyYAML &gt;5:
  * pyyaml5.patch</changelog>
  <changelog author="Ond?ej S&#xFA;kup &lt;mimi.vx@gmail.com&gt;" date="1554292800">- update to 2.2
- drop pyyaml5.patch
- add i18n_test.patch
  * HttpRequest.headers to allow simple access to a request?s headers.
  * Database-level constraints on models.
  * Watchman compatibility for runserver to improve the performance</changelog>
  <changelog author="John Vandenberg &lt;jayvdb@gmail.com&gt;" date="1554897600">- Add test_clear_site_cache-sort.patch to workaround flaky test
- Add bcond_with for selenium and memcached, as those tests are inactive,
  and add missing dependencies and setup for selenium testing
- Move removal of executable bit from a JavaScript file to %prep
- Fix fdupes</changelog>
  <changelog author="Alberto Planas Dominguez &lt;aplanas@suse.com&gt;" date="1557144000">- Update to 2.2.1
  * Fixed a regression in Django 2.1 that caused the incorrect quoting
    of database user password when using dbshell on Oracle (#30307).
  * Added compatibility for psycopg2 2.8 (#30331).
  * Fixed a regression in Django 2.2 that caused a crash when loading
    the template for the technical 500 debug page (#30324).
  * Fixed crash of ordering argument in ArrayAgg and StringAgg when it
    contains an expression with params (#30332).
  * Fixed a regression in Django 2.2 that caused a single instance
    fast-delete to not set the primary key to None (#30330).
  * Prevented makemigrations from generating infinite migrations for
    check constraints and partial indexes when condition contains a
    range object (#30350).  Reverted an optimization in Django 2.2
    (#29725) that caused the inconsistent behavior of count() and
    exists() on a reverse many-to-many relationship with a custom
    manager (#30325).
  * Fixed a regression in Django 2.2 where Paginator crashes if
    object_list is a queryset ordered or aggregated over a nested
    JSONField key transform (#30335).
  * Fixed a regression in Django 2.2 where IntegerField validation of
    database limits crashes if limit_value attribute in a custom
    validator is callable (#30328).
  * Fixed a regression in Django 2.2 where SearchVector generates SQL
    that is not indexable (#30385).
  * Fixed a regression in Django 2.2 that caused an exception to be
    raised when a custom error handler could not be imported (#30318).
  * Relaxed the system check added in Django 2.2 for the admin app?s
    dependencies to reallow use of SessionMiddleware subclasses,
    rather than requiring django.contrib.sessions to be in
    INSTALLED_APPS (#30312).
  * Increased the default timeout when using Watchman to 5 seconds to
    prevent falling back to StatReloader on larger projects and made
    it customizable via the DJANGO_WATCHMAN_TIMEOUT environment
    variable (#30361).
  * Fixed a regression in Django 2.2 that caused a crash when
    migrating permissions for proxy models if the target permissions
    already existed. For example, when a permission had been created
    manually or a model had been migrated from concrete to proxy
    (#30351).
  * Fixed a regression in Django 2.2 that caused a crash of runserver
    when URLConf modules raised exceptions (#30323).
  * Fixed a regression in Django 2.2 where changes were not reliably
    detected by auto-reloader when using StatReloader (#30323).
  * Fixed a migration crash on Oracle and PostgreSQL when adding a
    check constraint with a contains, startswith, or endswith lookup
    (or their case-insensitive variant) (#30408).
  * Fixed a migration crash on Oracle and SQLite when adding a check
    constraint with condition contains | (OR) operator (#30412).</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557230400">- Update keyring file</changelog>
  <changelog author="Ond?ej S&#xFA;kup &lt;mimi.vx@gmail.com&gt;" date="1559563200">- update to 2.2.2
  * Fixes CVE-2019-12308: AdminURLFieldWidget XSS (bsc#1136468)
  * Fixes CVE-2019-11358: Prototype pollution</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1563451200">- Update to 2.2.3:
  * CVE-2019-12781 (bsc#1139945): Incorrect HTTP detection with reverse-proxy connecting via HTTPS</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564660800">- Update to 2.2.4:
  * CVE-2019-14232 CVE-2019-14233 CVE-2019-14234 CVE-2019-14235
    bsc#1142883 bsc#1142885 bsc#1142882 bsc#1142880
  * Fixed a regression in Django 2.2 when ordering a QuerySet.union(), intersection(), or difference() by a field type present more than once results in the wrong ordering being used (#30628).
  * Fixed a migration crash on PostgreSQL when adding a check constraint with a contains lookup on DateRangeField or DateTimeRangeField, if the right hand side of an expression is the same type (#30621).
  * Fixed a regression in Django 2.2 where auto-reloader crashes if a file path contains nulls characters ('\x00') (#30506).
  * Fixed a regression in Django 2.2 where auto-reloader crashes if a translation directory cannot be resolved (#30647).</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568635200">- Update to 2.2.5:
  * Relaxed the system check added in Django 2.2 for models to reallow use of the same db_table by multiple models when database routers are installed (#30673).
  * Fixed crash of KeyTransform() for JSONField and HStoreField when using on expressions with params (#30672).
  * Fixed a regression in Django 2.2 where ModelAdmin.list_filter choices to foreign objects don?t respect a model?s Meta.ordering (#30449).
  * Fixed a race condition in loading URLconf module that could cause a crash of auto-reloader on Python 3.5 and below (#30500).</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1570449600">- Update to 2.2.6:
  * Fixed migrations crash on SQLite when altering a model
    containing partial indexes (#30754).
  * Fixed a regression in Django 2.2.4 that caused a crash when
    filtering with a Subquery() annotation of a queryset containing
    JSONField or HStoreField (#30769).</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1573819200">- Require full python interpreter on build and runtime</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1573819201">- Update to 2.2.7:
  * Fixed a crash when using a contains, contained_by, has_key, has_keys, or has_any_keys lookup on JSONField, if the right or left hand side of an expression is a key transform (#30826).
  * Prevented migrate --plan from showing that RunPython operations are irreversible when reverse_code callables don?t have docstrings or when showing a forward migration plan (#30870).
  * Fixed migrations crash on PostgreSQL when adding an Index with fields ordering and opclasses (#30903).
  * Restored the ability to override get_FOO_display() (#30931).</changelog>
  <changelog author="Alberto Planas Dominguez &lt;aplanas@suse.com&gt;" date="1575288000">- Update to 2.2.8
  * CVE-2019-19118: Privilege escalation in the Django admin (boo#1157705)
  * Fixed a data loss possibility in the admin changelist view when a
    custom formset?s prefix contains regular expression special
    characters, e.g. '$'
  * Fixed a regression in Django 2.2.1 that caused a crash when
    migrating permissions for proxy models with a multiple database
    setup if the default entry was empty
  * Fixed a data loss possibility in the select_for_update(). When
    using 'self' in the of argument with multi-table inheritance, a
    parent model was locked instead of the queryset?s model
- Add patch fix-selenium-test.patch to fix a test when selenium is
  missing</changelog>
  <changelog author="Ond?ej S&#xFA;kup &lt;mimi.vx@gmail.com&gt;" date="1577620800">- Update to 2.2.9
  * CVE-2019-19844: Potential account hijack via password reset form (bsc#1159447)
  * Fixed a data loss possibility in SplitArrayField.</changelog>
  <changelog author="Ond?ej S&#xFA;kup &lt;mimi.vx@gmail.com&gt;" date="1579089600">- add pyyaml53.patch - fix tests with PyYAML 5.3</changelog>
  <changelog author="Ond?ej S&#xFA;kup &lt;mimi.vx@gmail.com&gt;" date="1580817600">- update to 2.2.10
- drop pyyaml53.patch
  * fix boo#1161919 (CVE-2020-7471) Potential SQL injection via ``StringAgg(delimiter)``</changelog>
  <changelog author="Ond?ej S&#xFA;kup &lt;mimi.vx@gmail.com&gt;" date="1584532800">- update to 2.2.11
  * fix boo#1165022 (CVE-2020-9402) Potential SQL injection via tolerance
  parameter in GIS functions and aggregates on Oracle</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1585915200">- Update to 2.2.12:
  * Added the ability to handle .po files containing different plural
    equations for the same language (#30439).</changelog>
  <changelog author="Alberto Planas Dominguez &lt;aplanas@suse.com&gt;" date="1649678400">- Update to 2.2.28 (bsc#1198297)
  * Many CVEs fixes (check https://github.com/django/django/blob/main/docs/releases/)</changelog>
  <changelog author="Alberto Planas Dominguez &lt;aplanas@suse.com&gt;" date="1659960000">- Add fix-cve-2022-36359.patch (CVE-2022-36359, bsc#1201923)
  * Backport fix and tests from uptream branch 3.2.X
- Rename Django-2.2.28.tar.gz.asc to Django-2.2.28.checksum.txt
  * The source validator try to validate the signature agains
    Django-2.2.28.tar.gz, instead of the checksum message itself</changelog>
</package>
<package pkgid="6f27e09b1d5161097c98cd13e42d454f57f112c0dc50d4e08b72e6317acd96f5" name="python-Django" arch="src">
  <version epoch="0" ver="2.2.28" rel="bp154.2.6.1"/>
  <changelog author="John Vandenberg &lt;jayvdb@gmail.com&gt;" date="1554897600">- Add test_clear_site_cache-sort.patch to workaround flaky test
- Add bcond_with for selenium and memcached, as those tests are inactive,
  and add missing dependencies and setup for selenium testing
- Move removal of executable bit from a JavaScript file to %prep
- Fix fdupes</changelog>
  <changelog author="Alberto Planas Dominguez &lt;aplanas@suse.com&gt;" date="1557144000">- Update to 2.2.1
  * Fixed a regression in Django 2.1 that caused the incorrect quoting
    of database user password when using dbshell on Oracle (#30307).
  * Added compatibility for psycopg2 2.8 (#30331).
  * Fixed a regression in Django 2.2 that caused a crash when loading
    the template for the technical 500 debug page (#30324).
  * Fixed crash of ordering argument in ArrayAgg and StringAgg when it
    contains an expression with params (#30332).
  * Fixed a regression in Django 2.2 that caused a single instance
    fast-delete to not set the primary key to None (#30330).
  * Prevented makemigrations from generating infinite migrations for
    check constraints and partial indexes when condition contains a
    range object (#30350).  Reverted an optimization in Django 2.2
    (#29725) that caused the inconsistent behavior of count() and
    exists() on a reverse many-to-many relationship with a custom
    manager (#30325).
  * Fixed a regression in Django 2.2 where Paginator crashes if
    object_list is a queryset ordered or aggregated over a nested
    JSONField key transform (#30335).
  * Fixed a regression in Django 2.2 where IntegerField validation of
    database limits crashes if limit_value attribute in a custom
    validator is callable (#30328).
  * Fixed a regression in Django 2.2 where SearchVector generates SQL
    that is not indexable (#30385).
  * Fixed a regression in Django 2.2 that caused an exception to be
    raised when a custom error handler could not be imported (#30318).
  * Relaxed the system check added in Django 2.2 for the admin app?s
    dependencies to reallow use of SessionMiddleware subclasses,
    rather than requiring django.contrib.sessions to be in
    INSTALLED_APPS (#30312).
  * Increased the default timeout when using Watchman to 5 seconds to
    prevent falling back to StatReloader on larger projects and made
    it customizable via the DJANGO_WATCHMAN_TIMEOUT environment
    variable (#30361).
  * Fixed a regression in Django 2.2 that caused a crash when
    migrating permissions for proxy models if the target permissions
    already existed. For example, when a permission had been created
    manually or a model had been migrated from concrete to proxy
    (#30351).
  * Fixed a regression in Django 2.2 that caused a crash of runserver
    when URLConf modules raised exceptions (#30323).
  * Fixed a regression in Django 2.2 where changes were not reliably
    detected by auto-reloader when using StatReloader (#30323).
  * Fixed a migration crash on Oracle and PostgreSQL when adding a
    check constraint with a contains, startswith, or endswith lookup
    (or their case-insensitive variant) (#30408).
  * Fixed a migration crash on Oracle and SQLite when adding a check
    constraint with condition contains | (OR) operator (#30412).</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557230400">- Update keyring file</changelog>
  <changelog author="Ond?ej S&#xFA;kup &lt;mimi.vx@gmail.com&gt;" date="1559563200">- update to 2.2.2
  * Fixes CVE-2019-12308: AdminURLFieldWidget XSS (bsc#1136468)
  * Fixes CVE-2019-11358: Prototype pollution</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1563451200">- Update to 2.2.3:
  * CVE-2019-12781 (bsc#1139945): Incorrect HTTP detection with reverse-proxy connecting via HTTPS</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564660800">- Update to 2.2.4:
  * CVE-2019-14232 CVE-2019-14233 CVE-2019-14234 CVE-2019-14235
    bsc#1142883 bsc#1142885 bsc#1142882 bsc#1142880
  * Fixed a regression in Django 2.2 when ordering a QuerySet.union(), intersection(), or difference() by a field type present more than once results in the wrong ordering being used (#30628).
  * Fixed a migration crash on PostgreSQL when adding a check constraint with a contains lookup on DateRangeField or DateTimeRangeField, if the right hand side of an expression is the same type (#30621).
  * Fixed a regression in Django 2.2 where auto-reloader crashes if a file path contains nulls characters ('\x00') (#30506).
  * Fixed a regression in Django 2.2 where auto-reloader crashes if a translation directory cannot be resolved (#30647).</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568635200">- Update to 2.2.5:
  * Relaxed the system check added in Django 2.2 for models to reallow use of the same db_table by multiple models when database routers are installed (#30673).
  * Fixed crash of KeyTransform() for JSONField and HStoreField when using on expressions with params (#30672).
  * Fixed a regression in Django 2.2 where ModelAdmin.list_filter choices to foreign objects don?t respect a model?s Meta.ordering (#30449).
  * Fixed a race condition in loading URLconf module that could cause a crash of auto-reloader on Python 3.5 and below (#30500).</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1570449600">- Update to 2.2.6:
  * Fixed migrations crash on SQLite when altering a model
    containing partial indexes (#30754).
  * Fixed a regression in Django 2.2.4 that caused a crash when
    filtering with a Subquery() annotation of a queryset containing
    JSONField or HStoreField (#30769).</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1573819200">- Require full python interpreter on build and runtime</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1573819201">- Update to 2.2.7:
  * Fixed a crash when using a contains, contained_by, has_key, has_keys, or has_any_keys lookup on JSONField, if the right or left hand side of an expression is a key transform (#30826).
  * Prevented migrate --plan from showing that RunPython operations are irreversible when reverse_code callables don?t have docstrings or when showing a forward migration plan (#30870).
  * Fixed migrations crash on PostgreSQL when adding an Index with fields ordering and opclasses (#30903).
  * Restored the ability to override get_FOO_display() (#30931).</changelog>
  <changelog author="Alberto Planas Dominguez &lt;aplanas@suse.com&gt;" date="1575288000">- Update to 2.2.8
  * CVE-2019-19118: Privilege escalation in the Django admin (boo#1157705)
  * Fixed a data loss possibility in the admin changelist view when a
    custom formset?s prefix contains regular expression special
    characters, e.g. '$'
  * Fixed a regression in Django 2.2.1 that caused a crash when
    migrating permissions for proxy models with a multiple database
    setup if the default entry was empty
  * Fixed a data loss possibility in the select_for_update(). When
    using 'self' in the of argument with multi-table inheritance, a
    parent model was locked instead of the queryset?s model
- Add patch fix-selenium-test.patch to fix a test when selenium is
  missing</changelog>
  <changelog author="Ond?ej S&#xFA;kup &lt;mimi.vx@gmail.com&gt;" date="1577620800">- Update to 2.2.9
  * CVE-2019-19844: Potential account hijack via password reset form (bsc#1159447)
  * Fixed a data loss possibility in SplitArrayField.</changelog>
  <changelog author="Ond?ej S&#xFA;kup &lt;mimi.vx@gmail.com&gt;" date="1579089600">- add pyyaml53.patch - fix tests with PyYAML 5.3</changelog>
  <changelog author="Ond?ej S&#xFA;kup &lt;mimi.vx@gmail.com&gt;" date="1580817600">- update to 2.2.10
- drop pyyaml53.patch
  * fix boo#1161919 (CVE-2020-7471) Potential SQL injection via ``StringAgg(delimiter)``</changelog>
  <changelog author="Ond?ej S&#xFA;kup &lt;mimi.vx@gmail.com&gt;" date="1584532800">- update to 2.2.11
  * fix boo#1165022 (CVE-2020-9402) Potential SQL injection via tolerance
  parameter in GIS functions and aggregates on Oracle</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1585915200">- Update to 2.2.12:
  * Added the ability to handle .po files containing different plural
    equations for the same language (#30439).</changelog>
  <changelog author="Alberto Planas Dominguez &lt;aplanas@suse.com&gt;" date="1649678400">- Update to 2.2.28 (bsc#1198297)
  * Many CVEs fixes (check https://github.com/django/django/blob/main/docs/releases/)</changelog>
  <changelog author="Alberto Planas Dominguez &lt;aplanas@suse.com&gt;" date="1659960000">- Add fix-cve-2022-36359.patch (CVE-2022-36359, bsc#1201923)
  * Backport fix and tests from uptream branch 3.2.X
- Rename Django-2.2.28.tar.gz.asc to Django-2.2.28.checksum.txt
  * The source validator try to validate the signature agains
    Django-2.2.28.tar.gz, instead of the checksum message itself</changelog>
  <changelog author="Alberto Planas Dominguez &lt;aplanas@suse.com&gt;" date="1664884800">- Add fix-cve-2022-41323.patch (bsc#1203793, CVE-2022-41323)
  * Backport fix and tests from uptream branch 3.2.X
- Add test_custom_fields.patch
  * Required to fix an inspectdb test</changelog>
  <changelog author="Alberto Planas Dominguez &lt;aplanas@suse.com&gt;" date="1675339200">- Add fix-cve-2023-23969.patch (bsc#1207565, CVE-2023-23969)</changelog>
</package>
<package pkgid="ff3f5082c1c36fe4664e4b445491ae0b52347af46b2554d62cc156882c2de71a" name="python-acme" arch="src">
  <version epoch="0" ver="1.22.0" rel="bp154.2.3.3"/>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1573732800">- update to version 0.40.1
  * acme.standalone.BaseRequestHandlerWithLogging and acme.standalone.simple_tls_sni_01_server
    have been deprecated and will be removed in a future release of the library.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1578052800">- update to version 1.0.0 (bsc#1160066)
  * Deprecated attributes related to the TLS-SNI-01 challenge in
    acme.challenges and acme.standalone have been removed.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1579608000">- update to version 1.1.0
  * Removed the fallback introduced with 0.34.0 in acme to retry a POST-as-GET
    request as a GET request when the targeted ACME CA server seems to not support
    POST-as-GET requests.
  * Support for Python 3.4 in Certbot and its ACME library is deprecated and will be
    removed in the next release of Certbot.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1582286400">- update to version 1.2.0
  * Support for Python 3.4 has been removed.
  * Fix collections.abc imports for Python 3.9.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1583928000">- update to version 1.3.0
  * Don't verify the existing certificate in HTTP01Response.simple_verify, for
    compatibility with the real-world ACME challenge checks.
  * Fix acme module warnings when response Content-Type includes params (e.g. charset).</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1589457600">- update to version 1.4.0
  * Added TLS-ALPN-01 challenge support in the acme library. Support of this
    challenge in the Certbot client is planned to be added in a future release.
  * mock dependency is now conditional on Python 2 in all of our packages.
  * When using an RFC 8555 compliant endpoint, the acme library no longer sends the
    resource field in any requests or the type field when responding to challenges.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1591876800">- update to version 1.5.0
  * Fix TLS-ALPN test that fails when run with newer versions of OpenSSL.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1594641600">- update to version 1.6.0
  * Support for alternative certificate chains in the acme module.
  * Added --preferred-chain &lt;issuer CN&gt;. If a CA offers multiple
    certificate chains, it may be used to indicate to Certbot which
    chain should be preferred.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1598011200">- update to version 1.7.0
  * We deprecated support for Python 3.5 in Certbot and its ACME library.
    Support for Python 3.5 will be removed in the next major release of Certbot.</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1601294400">- update to version 1.8.0
  * Support for Python 3.5 has been removed.
  * The acme library can now tell the ACME server to clear contact information by passing an empty
    tuple to the contact field of a Registration message.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1602072000">- update to version 1.9.0
  * sync with the main certbot package</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1610107200">- update to version 1.11.0
  * We deprecated support for Python 2 in Certbot and its ACME
    library. Support for Python 2 will be removed in the next
    planned release of Certbot.
- update to version 1.10.1
  * sync with the main certbot package
- update to version 1.10.0
  * Support for Python 3.9 was added to Certbot and all of its
    components.</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1615204800">- update to version 1.13.0
  * Support for Python 2 has been removed.
  * The acme library no longer depends on the security extras from
    requests which was needed to support SNI in TLS requests when
    using old versions of Python 2.
  * When revoking a certificate by --cert-name, it is no longer
    necessary to specify the --server if the certificate was
    obtained from a non-default ACME server.</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1618401600">- update to version 1.14.0
  * The module acme.magic_typing is deprecated and will be removed in
    a future release. Please use the built-in module typing instead.</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1620820800">- update to version 1.15.0
  * sync with main certbot package</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1624536000">- update to version 1.16.0
  * sync with main certbot package</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1627646400">- update to version 1.17.0
  * sync with main certbot package</changelog>
  <changelog author="Danilo Spinella &lt;danilo.spinella@suse.com&gt;" date="1628596800">- update to version 1.18.0
  * sync with main certbot package
  * the .client.Client and .client.BackwardsCompatibleClientV2 classes
    are now deprecated in favor of .client.ClientV2</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1639396800">- Update to version 1.20.0
  * The acme library now supports requesting certificates for
    IP addresses.
  * Removed the dependency on chardet from the library.
    Except for when downloading a certificate in an alternate format,
    the acme library now assumes all server responses are UTF-8
    encoded which is required by RFC 8555.</changelog>
  <changelog author="Danilo Spinella &lt;danilo.spinella@suse.com&gt;" date="1640088000">- Update to version 1.22.0
  * sync with main certbot package
- Refresh python-acme.keyring</changelog>
</package>
<package pkgid="fd077016dbae3bab41d5fd3a07143299c63f82d746c90b337e02afb9809e1fd0" name="python-bugzilla" arch="src">
  <version epoch="0" ver="3.2.0" rel="bp154.3.3.1"/>
  <changelog author="werner@suse.de" date="1368705600">- Fix UL sections that is check also for URL without final slash
  this may fix bnc#807901</changelog>
  <changelog author="speilicke@suse.com" date="1369224000">- Apply python-bugzilla-0.6.2-section.patch
- Cleanup spec file
- Package README</changelog>
  <changelog author="jmatejek@suse.com" date="1369396800">- update to 0.8.0
  * support for Bugzilla 4 and above
  * streamlined internals
- update to suse2 from gitorious
  * include all suse patches
  * use osc's methods to parse .oscrc</changelog>
  <changelog author="jmatejek@suse.com" date="1372334400">- update to 0.9.0
  * CVE-2013-2191: Switch to pycurl to get SSL host and cert validation
    (fixes bnc#825876)
  * bugzilla: modify: add --dependson (Don Zickus)
  * bugzilla: new: add --groups option (Paul Frields)
  * bugzilla: modify: Allow setting nearly every bug parameter
- update to suse3 from gitorious
  * remerged NovellBugzilla functionality
    (upstream inclusion pending bnc#822053)</changelog>
  <changelog author="bwiedemann@suse.com" date="1411473600">- update nvlbugzilla.py to reflect that server now has ver 4.4</changelog>
  <changelog author="jsegitz@novell.com" date="1468497600">- Update to version 1.2.2
- Added NovellBugzilla.patch to ensure it works with SUSE internal
  bugzilla.</changelog>
  <changelog author="tbechtold@suse.com" date="1524657600">- update to 2.1.0:
  - Support for bugzilla 5 API Keys (Dustin J. Mitchell)
  - bugzillarc can be used to set default URL for the cli tool
  - Revive update_flags wrapper
  - Bug fixes and minor improvements
  - Several fixes for use with bugzilla 5
  - Bugzilla.bug_autorefresh now defaults to False
  - Credentials are now cached in ~/.cache/python-bugzilla/
  - bin/bugzilla was converted to argparse
  - bugzilla query --boolean_chart option is removed
  - Unify command line flags across sub commands
- drop NovellBugzilla.patch (no longer needed)</changelog>
  <changelog author="tbechtold@suse.com" date="1524657601">- convert to singlespec
- use pypi as source
- update url</changelog>
  <changelog author="jengelh@inai.de" date="1525089600">- Trim history lesson and rhetoric wording from %description.</changelog>
  <changelog author="tbechtold@suse.com" date="1525262400">- Add Conflicts for python-bugzillatools</changelog>
  <changelog author="dimstar@opensuse.org" date="1525694400">- Fix conflict for python-bugzillatools: we have to take extra care
  for the single-spec rewritter not to conflict with
  python2-bugzillatools in the end (which does not exist).</changelog>
  <changelog author="mcepl@suse.com" date="1534420800">- Update to 2.2.0:
  - Port tests to pytest
  - cli: --cert Client side certificate support (Tobias Wolter)
  - cli: add ability to post comment while sending attachment (Jeff Mahoney)
  - cli: Add --comment-tag option
  - cli: Add info --active-components
  - Add a raw Product.get wrapper API</changelog>
  <changelog author="John Vandenberg &lt;jayvdb@gmail.com&gt;" date="1568548800">- Update to v2.3.0
  * restrict-login support
  * cli: Add support for private attachments
  * Fix python3 deprecation warnings
  * Drop python 3.3 support, minimum python3 is python 3.4 now</changelog>
  <changelog author="Julio Gonz&#xE1;lez Gil &lt;jgonzalez@suse.com&gt;" date="1571227200">- Backport from upstream: HTTP Basic authentication feature (as used
  by SUSE and openSUSE) (bsc#1098219)
- Add:
  * 106-basic-auth.diff</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1609329600">- Update to 3.0.2:
  - Fix API key leaking into requests exceptions
  - Skip man page generation to fix build on Windows (Alexander Todorov)
  - Drop python2 support
  - New option bugzilla modify --minor-update option
  - requests: use PYTHONBUGZILLA_REQUESTS_TIMEOUT env variable
  - xmlrpc: Don't add api key to passed in user dictionary
  - cli: Add query --extrafield, --includefield, --excludefield
  - Revive bugzilla.rhbugzilla.RHBugzilla import path
  - Bugzilla REST API support
  - Add --json command line output option
  - Add APIs for Bugzilla Groups (Pierre-Yves Chibon)
  - Add Bugzilla.get_requests_session() API to access raw requests
    Session
  - Add Bugzilla.get_xmlrpc_proxy() API to access raw ServerProxy
  - Add Bugzilla requests_session= init parameter to pass in auth, etc.
  - Add bugzilla attach --ignore-obsolete (?estmír Kalina)
  - Add bugzilla login --api-key for API key prompting (Danilo C. L. de
    Paula)
  - Add bugzilla new --private
- Remove 106-basic-auth.diff, which is not necessary anymore.</changelog>
  <changelog author="Marina Latini &lt;marina.latini@suse.com&gt;" date="1634817600">- Disable python2 building, as the support was dropped with 3.0.0</changelog>
  <changelog author="Marina Latini &lt;marina.latini@suse.com&gt;" date="1634817601">- Obsolete python2-bugzilla</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1635249600">- Revert removing of 106-basic-auth.diff</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1635249601">- Fix problem with basic-auth patch for version higher than 3.0.0 (bsc#1098219)
- Modified:
  * 106-basic-auth.diff</changelog>
  <changelog author="Julio Gonz&#xE1;lez Gil &lt;jgonzalez@suse.com&gt;" date="1671624000">- Update to 3.2.0:
  * Use soon-to-be-required Authorization header for RH bugzilla
  * Remove cookie auth support
  * Detect bugzilla.stage.redhat.com as RHBugzilla
  * Add limit as option to build_query
- Modified:
  * 106-basic-auth.diff</changelog>
</package>
<package pkgid="9d9bb98d01c1704fe03d57359f7d2cce8897509a221cb1b547993eac960d0d72" name="python-certbot" arch="src">
  <version epoch="0" ver="1.22.0" rel="bp154.2.1"/>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1578052800">- update to version 1.0.0 (boo#1160066)
  * certbot-auto has deprecated support for systems using OpenSSL 1.0.1
    that are not running on x86-64.
  * Certbot's config_changes subcommand has been removed
  * certbot.plugins.common.TLSSNI01 has been removed.
  * The functions certbot.client.view_config_changes,
    certbot.main.config_changes,
    certbot.plugins.common.Installer.view_config_changes,
    certbot.reverter.Reverter.view_config_changes, and
    certbot.util.get_systemd_os_info have been removed
  * Certbot's register --update-registration subcommand has been removed
  * When possible, default to automatically configuring the webserver so all requests
    redirect to secure HTTPS access. This is mostly relevant when running Certbot
    in non-interactive mode. Previously, the default was to not redirect all requests.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1579608000">- update to version 1.1.0
  * Support for Python 3.4 in Certbot and its ACME library is deprecated and will be
    removed in the next release of Certbot.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1582286400">- update to version 1.2.0
  * Add directory field to error message when field is missing.
  * If MD5 hasher is not available, try it in non-security mode (fix for FIPS systems)
  * Support for Python 3.4 has been removed.
  * Fix collections.abc imports for Python 3.9.</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1583841600">- update to version 1.3.0
  * Added
  - Added certbot.ocsp Certbot's API. The certbot.ocsp module can be used to
  - determine the OCSP status of certificates.
  - Don't verify the existing certificate in HTTP01Response.simple_verify, for
  - compatibility with the real-world ACME challenge checks.
  * Changed
  - Certbot will now renew certificates early if they have been revoked according
  - to OCSP.
  - Fix acme module warnings when response Content-Type includes params (e.g. charset).
  - Fixed issue where webroot plugin would incorrectly raise Read-only file system
  - error when creating challenge directories (issue #7165).</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1587470400">- Fix build without python2</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1589457600">- Update to version 1.4.0
  * Added serial number of certificate to the output of certbot certificates
  * Expose two new environment variables in the authenticator and cleanup scripts used by
    the manual plugin: CERTBOT_REMAINING_CHALLENGES is equal to the number of challenges
    remaining after the current challenge, CERTBOT_ALL_DOMAINS is a comma-separated list
    of all domains challenged for the current certificate.
  * Added minimal proxy support for OCSP verification.
  * mock dependency is now conditional on Python 2 in all of our packages.
  * Fix hanging OCSP queries during revocation checking - added a 10 second timeout.
  * Standalone servers now have a default socket timeout of 30 seconds, fixing
    cases where an idle connection can cause the standalone plugin to hang.
  * Parsing of the RFC 8555 application/pem-certificate-chain now tolerates CRLF line
    endings. This should fix interoperability with Buypass' services.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1591876800">- Update to version 1.5.0
  * Require explicit confirmation of snap plugin permissions before connecting.
  * Add support for OCSP responses which use a public key hash ResponderID,
    fixing interoperability with Sectigo CAs.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1594641600">- Update to version 1.6.0
  * Certbot snaps are now available for the arm64 and armhf architectures.
  * Make Certbot snap find externally snapped plugins
  * Function certbot.compat.filesystem.umask is a drop-in replacement for
    os.umask implementing umask for both UNIX and Windows systems.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1598011200">- Update to version 1.7.0
  * Third-party plugins can be used without prefix (plugin_name instead of dist_name:plugin_name):
    this concerns the plugin name, CLI flags, and keys in credential files.
    The prefixed form is still supported but is deprecated, and will be removed in a future release.
  * We deprecated support for Python 3.5 in Certbot and its ACME library.
    Support for Python 3.5 will be removed in the next major release of Certbot.</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1601294400">- Update to version 1.8.0
  + Added
  * Added the ability to remove email and phone contact
    information from an account
  * using update_account --register-unsafely-without-email
  + Changed
  * Support for Python 3.5 has been removed.
  + Fixed
  * The problem causing the Apache plugin in the Certbot snap on
    ARM systems to
  * fail to load the Augeas library it depends on has been fixed.
  * The acme library can now tell the ACME server to clear
    contact information by passing an empty
  * tuple to the contact field of a Registration message.
  * Fixed the *** stack smashing detected *** error in the
    Certbot snap on some systems.
  * More details about these changes can be found on our GitHub
    repo.
- Add certbot keyring and hash file</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1602072000">- Update to version 1.9.0
  * certbot-auto was deprecated on all systems except for those based on Debian or RHEL.
  * Update the packaging instructions to promote usage of python -m pytest to test Certbot
    instead of the deprecated python setup.py test setuptools approach.
  * Reduced CLI logging when handling some kinds of errors.
  * The minimum version of the acme library required by Certbot was corrected.
    In the previous release, Certbot said it required acme&gt;=1.6.0 when it
    actually required acme&gt;=1.8.0 to properly support removing contact
    information from an ACME account.</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1610107200">- update to version 1.11.0
  + Added
  * We deprecated support for Python 2 in Certbot and its ACME
    library. Support for Python 2 will be removed in the next
    planned release of Certbot.
  * certbot-auto was deprecated on all systems. For more
    information about this change, see
    https://community.letsencrypt.org/t/certbot-auto-no-longer-works-on-debian-based-systems/139702/7.
  * We deprecated support for Apache 2.2 in the certbot-apache
    plugin and it will be removed in a future release of Certbot.
  + Fixed
  * The Certbot snap no longer loads packages installed via pip
    install --user. This was unintended and DNS plugins should be
    installed via snap instead.
  * certbot-dns-google would sometimes crash with HTTP 409/412
    errors when used with very large zones. See #6036.
  * certbot-dns-google would sometimes crash with an HTTP 412
    error if preexisting records had an unexpected TTL, i.e.:
    different than Certbot's default TTL for this plugin.
    See #8551.
- update to version 1.10.1
  + Fixed
  * Fixed a bug in certbot.util.add_deprecated_argument that
    caused the deprecated --manual-public-ip-logging-ok flag to
    crash Certbot in some scenarios.
- update to version 1.10.0
  + Added
  * Added timeout to DNS query function calls for dns-rfc2136
    plugin.
  * Confirmation when deleting certificates
  * CLI flag --key-type has been added to specify 'rsa' or
    'ecdsa' (default 'rsa').
  * CLI flag --elliptic-curve has been added which takes an
    NIST/SECG elliptic curve. Any of secp256r1, secp284r1 and
    secp521r1 are accepted values.
  * The command certbot certficates lists the which type of the
    private key that was used for the private key.
  * Support for Python 3.9 was added to Certbot and all of its
    components.
  + Changed
  * certbot-auto was deprecated on Debian based systems.
  * CLI flag --manual-public-ip-logging-ok is now a no-op,
    generates a deprecation warning, and will be removed in a
    future release.
  + Fixed
  * Fixed a Unicode-related crash in the nginx plugin when
    running under Python 2.</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1615204800">- update to version 1.13.0
  * The `--preferred-chain` flag now only checks the Issuer Common Name of the
    topmost (closest to the root) certificate in the chain, instead of checking
    every certificate in the chain.
    See [#8577](https://github.com/certbot/certbot/issues/8577).
  * Support for Python 2 has been removed.
  * CLI flags `--os-packages-only`, `--no-self-upgrade`, `--no-bootstrap` and `--no-permissions-check`,
    which are related to certbot-auto, are deprecated and will be removed in a future release.
  * Certbot no longer conditionally depends on an external mock module. Certbot's
    test API will continue to use it if it is available for backwards
    compatibility, however, this behavior has been deprecated and will be removed
    in a future release.
  * Certbot and all of its components no longer depend on the library `six`.
  * The update of certbot-auto itself is now disabled on all RHEL-like systems.</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1618401600">- update to version 1.14.0
  * certbot-auto no longer checks for updates on any operating system.
  * Don't output an empty line for a hidden certificate when certbot certificates
    is being used in combination with --cert-name or -d.0</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1620820800">- update to version 1.15.0
  * Remove further references to certbot-auto in the repo</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1624536000">- update to version 1.16.0
  * Use UTF-8 encoding for renewal configuration files
  * This release contains a substantial command-line UX overhaul,
    based on previous user research. The main goal was to streamline
    and clarify output. If you would like to see more verbose output, use
    the -v or -vv flags. UX improvements are an iterative process and
    the Certbot team welcomes constructive feedback.
  * Functions certbot.crypto_util.init_save_key and certbot.crypto_util.init_save_csr,
    whose behaviors rely on the global Certbot config singleton, are deprecated and will
    be removed in a future release. Please use certbot.crypto_util.generate_key and
    certbot.crypto_util.generate_csr instead.
  * Installers (e.g. nginx, Apache) were being restarted unnecessarily after dry-run renewals.</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1627646400">- update to version 1.17.0
  * We changed how dependencies are specified between Certbot packages. For this
    and future releases, higher level Certbot components will require that lower
    level components are the same version or newer. More specifically, version X
    of the Certbot package will now always require acme&gt;=X and version Y of a
    plugin package will always require acme&gt;=Y and certbot=&gt;Y. Specifying
    dependencies in this way simplifies testing and development.</changelog>
  <changelog author="Danilo Spinella &lt;danilo.spinella@suse.com&gt;" date="1628596800">- Update to version 1.18.0
  * New functions that Certbot plugins can use to interact with the user have
    been added to certbot.display.util. We plan to deprecate using IDisplay
    with zope in favor of these new functions in the future.
  * The Plugin, Authenticator and Installer classes are added to
    certbot.interfaces module as alternatives to Certbot's current zope based
    plugin interfaces. The API of these interfaces is identical, but they are
    based on Python's abc module instead of zope. Certbot will continue to
    detect plugins that implement either interface, but we plan to drop support
    for zope based interfaces in a future version of Certbot.
  * The class certbot.configuration.NamespaceConfig is added to the Certbot's
    public API
  * When self-validating HTTP-01 challenges using
    acme.challenges.HTTP01Response.simple_verify, we now assume that the response
    is composed of only ASCII characters. Previously we were relying on the
    default behavior of the requests library which tries to guess the encoding of
    the response which was error prone
  * In order to simplify the transition to Certbot's new plugin interfaces, the
    classes Plugin and Installer in certbot.plugins.common module and
    certbot.plugins.dns_common.DNSAuthenticator now implement Certbot's new
    plugin interfaces. The Certbot plugins based on these classes are now
    automatically detected as implementing these interfaces.
  * The Apache authenticator no longer crashes with "Unable to insert label"
    when encountering a completely empty vhost. This issue affected Certbot 1.17.0.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1639396800">- Update to version 1.20.0
  * Added --no-reuse-key. This remains the default behavior, but
    the flag may be useful to unset the --reuse-key option on
    existing certificates.
- Update to version 1.19.0
  * Several attributes in certbot.display.util and zope based
    interfaces in certbot.interfaces module are deprecated and
    will be removed in a future release of Certbot.
  * Fixed a relatively harmless crash when issuing a certificate
    with --quiet/-q.</changelog>
  <changelog author="Danilo Spinella &lt;danilo.spinella@suse.com&gt;" date="1640088000">- Update to version 1.22.0
  * Support for Python 3.10 was added to Certbot and all of its components.
  * The function certbot.util.parse_loose_version was added to parse version
    strings in the same way as the now deprecated distutils.version.LooseVersion
    class from the Python standard library.
  * Added --issuance-timeout. This option specifies how long (in seconds) Certbot will wait
    for the server to issue a certificate.
  * The function certbot.util.get_strict_version was deprecated and will be
    removed in a future release.
- Refreshed python-certbot.keyring</changelog>
</package>
<package pkgid="c2166bca4b0ca57e32381897ccd131082daba1ab34c00ae2f976e6308a1b9ba0" name="python-certbot-apache" arch="src">
  <version epoch="0" ver="1.22.0" rel="bp154.2.2"/>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1573732800">- update to version 0.40.1
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1578052800">- update to version 1.0.0 (boo#1160066)
  * The docs extras for the certbot-apache and certbot-nginx packages
    have been removed.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1579608000">- update to version 1.1.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1582286400">- update to version 1.2.0
  * Disable old SSL versions and ciphersuites and remove SSLCompression off
    setting to follow Mozilla recommendations in Apache.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1583928000">- update to version 1.3.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1589457600">- update to version 1.4.0
  * Turn off session tickets for apache plugin by default when appropriate.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1591876800">- update to version 1.5.0
  * Improved error message in apache installer when mod_ssl is not available.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1594641600">- update to version 1.6.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1598011200">- update to version 1.7.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1602072000">- update to version 1.9.0
  * The problem causing the Apache plugin in the Certbot snap on ARM systems to
    fail to load the Augeas library it depends on has been fixed.</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1610107200">- update to version 1.11.0
  * We deprecated support for Apache 2.2 in the certbot-apache
    plugin and it will be removed in a future release of Certbot.
- update to version 1.10.1
  * sync with the main certbot package
- update to version 1.10.0
  * Support for Python 3.9 was added to Certbot and all of its
    components.</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1610107201">- Add patch to fix the apache2 package not providing apache2ctl
  any longer (gh#certbot/certbot#8592)
  * 0001-Change-the-SUSE-override-to-use-apachectl.patch</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1615204800">- update to version 1.13.0
  * Support for Python 2 has been removed.
  * Drop merged patch 0001-Change-the-SUSE-override-to-use-apachectl.patch</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1618401600">- update to version 1.14.0
  * sync with the main certbot package</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1620820800">- update to version 1.15.0
  * sync with the main certbot package</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1624536000">- update to version 1.16.0
  * Require the latest certbot and acme plugins for simplicity</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1627646400">- update to version 1.17.0
  * Add Void Linux overrides for certbot-apache.
  * The Apache authenticator now always configures virtual hosts which do not have
    an explicit ServerName. This should make it work more reliably with the
    default Apache configuration in Debian-based environments.</changelog>
  <changelog author="Danilo Spinella &lt;danilo.spinella@suse.com&gt;" date="1628596800">- update to version 1.18.0
  * sync with the main certbot package</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1639396800">- Update to version 1.19.0
  * Fixed parsing of Defined values in the Apache plugin to allow
    for = in the value.</changelog>
  <changelog author="Danilo Spinella &lt;danilo.spinella@suse.com&gt;" date="1640088000">- Update to version 1.22.0
  * sync with the main certbot package</changelog>
</package>
<package pkgid="9f80b3227374914d03e76d4f0bc9b1e8455e710d486eb8bd65d2b62de3584e17" name="python-certbot-dns-cloudflare" arch="src">
  <version epoch="0" ver="1.22.0" rel="bp154.2.1"/>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1570017600">- update to version 0.39.0
  * Support for Python 3.8 was added to Certbot and all of its components.</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1573732800">- update to version 0.40.1
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1578052800">- update to version 1.0.0
  * sync with main certbot package</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1579608000">- update to version 1.1.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1582286400">- update to version 1.2.0
  * Added support for Cloudflare's limited-scope API Tokens</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1583928000">- update to version 1.3.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1589457600">- update to version 1.4.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1591876800">- update to version 1.5.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1594641600">- update to version 1.6.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1598011200">- update to version 1.7.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1602072000">- update to version 1.9.0
  * Sync with main certbot package.</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1610107200">- update to version 1.11.0
  * sync with the main certbot package
- update to version 1.10.1
  * sync with the main certbot package
- update to version 1.10.0
  * Support for Python 3.9 was added to Certbot and all of its
    components.</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1615204800">- update to version 1.13.0
  * Support for Python 2 has been removed.</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1618401600">- update to version 1.14.0
  * sync with the main certbot package</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1620820800">- update to version 1.15.0
  * sync with the main certbot package</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1624536000">- update to version 1.16.0
  * Require the latest certbot and acme plugins for simplicity</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1627646400">- update to version 1.17.0
  * sync with the main certbot package</changelog>
  <changelog author="Danilo Spinella &lt;danilo.spinella@suse.com&gt;" date="1628596800">- update to version 1.18.0
  * sync with the main certbot package</changelog>
  <changelog author="Danilo Spinella &lt;danilo.spinella@suse.com&gt;" date="1640088000">- Update to version 1.22.0
  * sync with the main certbot package</changelog>
</package>
<package pkgid="bd13b84d197b280c9fdcefd77f6adb3f30ce612405365fb74a3f698e6e7a4e57" name="python-certbot-dns-cloudxns" arch="src">
  <version epoch="0" ver="1.22.0" rel="bp154.2.1"/>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1573732800">- update to version 0.40.1
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1578052800">- update to version 1.0.0
  * sync with main certbot package</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1579608000">- update to version 1.1.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1582286400">- update to version 1.2.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1583928000">- update to version 1.3.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1589457600">- update to version 1.4.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1591876800">- update to version 1.5.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1594641600">- update to version 1.6.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1598011200">- update to version 1.7.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1602072000">- update to version 1.9.0
  * Sync with main certbot package.</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1610107200">- update to version 1.11.0
  * sync with the main certbot package
- update to version 1.10.1
  * sync with the main certbot package
- update to version 1.10.0
  * Support for Python 3.9 was added to Certbot and all of its
    components.</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1615204800">- update to version 1.13.0
  * Support for Python 2 has been removed.</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1618401600">- update to version 1.14.0
  * sync with the main certbot package</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1620820800">- update to version 1.15.0
  * sync with the main certbot package</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1624536000">- update to version 1.16.0
  * DNS plugins based on lexicon now require dns-lexicon &gt;= v3.1.0
  * Require the latest certbot and acme plugins for simplicity</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1626350400">- Skip building for python 3.6: not all deps are available anymore
  (e.g dns-lexicon)</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1627646400">- update to version 1.17.0
  * sync with the main certbot package</changelog>
  <changelog author="Danilo Spinella &lt;danilo.spinella@suse.com&gt;" date="1628596800">- update to version 1.18.0
  * sync with the main certbot package</changelog>
  <changelog author="Danilo Spinella &lt;danilo.spinella@suse.com&gt;" date="1640088000">- Update to version 1.22.0
  * sync with the main certbot package</changelog>
</package>
<package pkgid="6cf68202eba4d82440b91b5f2e0d03a2aa0415bdb6ab0befc8b87774eefcc53a" name="python-certbot-dns-digitalocean" arch="src">
  <version epoch="0" ver="1.22.0" rel="bp154.2.1"/>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1570017600">- update to version 0.39.0
  * Support for Python 3.8 was added to Certbot and all of its components.</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1573732800">- update to version 0.40.1
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1578052800">- update to version 1.0.0
  * sync with main certbot package</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1579608000">- update to version 1.1.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1582286400">- update to version 1.2.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1583928000">- update to version 1.3.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1589457600">- update to version 1.4.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1591876800">- update to version 1.5.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1594641600">- update to version 1.6.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1598011200">- update to version 1.7.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1602072000">- update to version 1.9.0
  * Sync with main certbot package.</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1610107200">- update to version 1.11.0
  * sync with the main certbot package
- update to version 1.10.1
  * sync with the main certbot package
- update to version 1.10.0
  * Support for Python 3.9 was added to Certbot and all of its
    components.</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1615204800">- update to version 1.13.0
  * Support for Python 2 has been removed.</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1618401600">- update to version 1.14.0
  * The DigitalOcean plugin now creates TXT records for the DNS-01
    challenge with a lower 30s TTL.</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1620820800">- update to version 1.15.0
  * sync with the main certbot package</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1624536000">- update to version 1.16.0
  * Require the latest certbot and acme plugins for simplicity</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1627646400">- update to version 1.17.0
  * sync with the main certbot package</changelog>
  <changelog author="Danilo Spinella &lt;danilo.spinella@suse.com&gt;" date="1628596800">- update to version 1.18.0
  * sync with the main certbot package</changelog>
  <changelog author="Danilo Spinella &lt;danilo.spinella@suse.com&gt;" date="1640088000">- update to version 1.22.0
  * sync with the main certbot package</changelog>
</package>
<package pkgid="49f7d7a83eeb81eb4ecdfa1b0962deded0379f570e6566d7ef9da3e579d1762a" name="python-certbot-dns-dnsimple" arch="src">
  <version epoch="0" ver="1.22.0" rel="bp154.2.1"/>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1573732800">- update to version 0.40.1
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1578052800">- update to version 1.0.0
  * sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1579608000">- update to version 1.1.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1582286400">- update to version 1.2.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1583928000">- update to version 1.3.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1589457600">- update to version 1.4.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1591876800">- update to version 1.5.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1594641600">- update to version 1.6.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1598011200">- update to version 1.7.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1602072000">- update to version 1.9.0
  * Sync with main certbot package.</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1610107200">- update to version 1.11.0
  * sync with the main certbot package
- update to version 1.10.1
  * sync with the main certbot package
- update to version 1.10.0
  * Support for Python 3.9 was added to Certbot and all of its
    components.</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1615204800">- update to version 1.13.0
  * Support for Python 2 has been removed.</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1618401600">- update to version 1.14.0
  * sync with the main certbot package</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1620820800">- update to version 1.15.0
  * sync with the main certbot package</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1624536000">- update to version 1.16.0
  * Require the latest certbot and acme plugins for simplicity</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1626350400">- Skip building for python 3.6: not all deps are available anymore
  (e.g dns-lexicon).</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1627646400">- update to version 1.17.0
  * sync with the main certbot package</changelog>
  <changelog author="Danilo Spinella &lt;danilo.spinella@suse.com&gt;" date="1628596800">- update to version 1.18.0
  * sync with the main certbot package</changelog>
  <changelog author="Danilo Spinella &lt;danilo.spinella@suse.com&gt;" date="1640088000">- update to version 1.22.0
  * sync with the main certbot package</changelog>
</package>
<package pkgid="1220e0ce2351f80b79910d537a13038e8ae78fc0bf42b0874ed1e4248fea991d" name="python-certbot-dns-dnsmadeeasy" arch="src">
  <version epoch="0" ver="1.22.0" rel="bp154.2.1"/>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1573732800">- update to version 0.40.1
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1578052800">- update to version 1.0.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1579608000">- update to version 1.1.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1582286400">- update to version 1.2.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1583928000">- update to version 1.3.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1589457600">- update to version 1.4.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1591876800">- update to version 1.5.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1594641600">- update to version 1.6.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1598011200">- update to version 1.7.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1602072000">- update to version 1.9.0
  * Sync with main certbot package.</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1610107200">- update to version 1.11.0
  * sync with the main certbot package
- update to version 1.10.1
  * sync with the main certbot package
- update to version 1.10.0
  * Support for Python 3.9 was added to Certbot and all of its
    components.</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1615204800">- update to version 1.13.0
  * Support for Python 2 has been removed.</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1618401600">- update to version 1.14.0
  * sync with the main certbot package</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1620820800">- update to version 1.15.0
  * sync with the main certbot package</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1624536000">- update to version 1.16.0
  * DNS plugins based on lexicon now require dns-lexicon &gt;= v3.1.0
  * Require the latest certbot and acme plugins for simplicity</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1626350400">- Skip building for python 3.6: not all deps are available anymore
  (e.g dns-lexicon).</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1627646400">- update to version 1.17.0
  * sync with the main certbot package</changelog>
  <changelog author="Danilo Spinella &lt;danilo.spinella@suse.com&gt;" date="1628596800">- update to version 1.18.0
  * sync with the main certbot package</changelog>
  <changelog author="Danilo Spinella &lt;danilo.spinella@suse.com&gt;" date="1640088000">- update to version 1.22.0
  * sync with the main certbot package</changelog>
</package>
<package pkgid="be5f8f65d55cce99410bd6e6d0444d948dfdf267fc6be62164a2aec0bdbab037" name="python-certbot-dns-google" arch="src">
  <version epoch="0" ver="1.22.0" rel="bp154.2.1"/>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1573732800">- update to version 0.40.1
  * Updated certbot-dns-google to depend on newer versions of
    google-api-python-client and oauth2client.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1578052800">- update to version 1.0.0
  * sync with main certbot package</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1579608000">- update to version 1.1.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1582286400">- update to version 1.2.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1583928000">- update to version 1.3.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1589457600">- update to version 1.4.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1591876800">- update to version 1.5.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1594641600">- update to version 1.6.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1598011200">- update to version 1.7.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1602072000">- update to version 1.9.0
  * Sync with main certbot package.</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1610107200">- update to version 1.11.0
  + Fixed
  * certbot-dns-google would sometimes crash with HTTP 409/412
    errors when used with very large zones. See #6036.
  * certbot-dns-google would sometimes crash with an HTTP 412
    error if preexisting records had an unexpected TTL, i.e.:
    different than Certbot's default TTL for this plugin.
    See #8551.
- update to version 1.10.1
  * sync with the main certbot package
- update to version 1.10.0
  * Support for Python 3.9 was added to Certbot and all of its
    components.</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1615204800">- update to version 1.13.0
  * Support for Python 2 has been removed.</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1618401600">- update to version 1.14.0
  * sync with the main certbot package</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1620820800">- update to version 1.15.0
  * sync with the main certbot package</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1624536000">- update to version 1.16.0
  * Require the latest certbot and acme plugins for simplicity</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1627646400">- update to version 1.17.0
  * sync with the main certbot package</changelog>
  <changelog author="Danilo Spinella &lt;danilo.spinella@suse.com&gt;" date="1628596800">- update to version 1.18.0
  * sync with the main certbot package</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1639396800">- Drop python 3.6 support since python-google-api-python-client
  dropped it</changelog>
  <changelog author="Danilo Spinella &lt;danilo.spinella@suse.com&gt;" date="1640088000">- update to version 1.22.0
  * sync with the main certbot package</changelog>
</package>
<package pkgid="f1e0a8d9417fc8a16f4917631ec0e760ab7dfd68654a5b1a649b5c88885653cd" name="python-certbot-dns-linode" arch="src">
  <version epoch="0" ver="1.22.0" rel="bp154.2.1"/>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1573732800">- update to version 0.40.1
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1578052800">- update to version 1.0.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1579608000">- update to version 1.1.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1582286400">- update to version 1.2.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1583928000">- update to version 1.3.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1589457600">- update to version 1.4.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1591876800">- update to version 1.5.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1594641600">- update to version 1.6.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1598011200">- update to version 1.7.0
  * The Linode DNS plugin now waits 120 seconds for DNS propagation, instead of 1200.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1602072000">- update to version 1.9.0
  * Sync with main certbot package.</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1610107200">- update to version 1.11.0
  * sync with the main certbot package
- update to version 1.10.1
  * sync with the main certbot package
- update to version 1.10.0
  * Support for Python 3.9 was added to Certbot and all of its
    components.</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1615204800">- update to version 1.13.0
  * Support for Python 2 has been removed.</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1618401600">- update to version 1.14.0
  * sync with the main certbot package</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1620820800">- update to version 1.15.0
  * sync with the main certbot package</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1624536000">- update to version 1.16.0
  * DNS plugins based on lexicon now require dns-lexicon &gt;= v3.1.0
  * Require the latest certbot and acme plugins for simplicity</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1626350400">- Skip building for python 3.6: not all deps are available anymore
  (e.g dns-lexicon).</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1627646400">- update to version 1.17.0
  * sync with the main certbot package</changelog>
  <changelog author="Danilo Spinella &lt;danilo.spinella@suse.com&gt;" date="1628596800">- update to version 1.18.0
  * sync with the main certbot package</changelog>
  <changelog author="Danilo Spinella &lt;danilo.spinella@suse.com&gt;" date="1640088000">- update to version 1.22.0
  * sync with the main certbot package</changelog>
</package>
<package pkgid="741b9be8a63fbb1e05b1b49c5c3597b9bca488884d3f5211b541ae8b72ee8bdd" name="python-certbot-dns-luadns" arch="src">
  <version epoch="0" ver="1.22.0" rel="bp154.2.1"/>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1573732800">- update to version 0.40.1
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1578052800">- update to version 1.0.0
  * sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1579608000">- update to version 1.1.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1582286400">- update to version 1.2.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1583928000">- update to version 1.3.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1589457600">- update to version 1.4.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1591876800">- update to version 1.5.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1594641600">- update to version 1.6.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1598011200">- update to version 1.7.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1602072000">- update to version 1.9.0
  * Sync with main certbot package.</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1610107200">- update to version 1.11.0
  * sync with the main certbot package
- update to version 1.10.1
  * sync with the main certbot package
- update to version 1.10.0
  * Support for Python 3.9 was added to Certbot and all of its
    components.</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1615204800">- update to version 1.13.0
  * Support for Python 2 has been removed.</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1618401600">- update to version 1.14.0
  * sync with the main certbot package</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1620820800">- update to version 1.15.0
  * sync with the main certbot package</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1624536000">- update to version 1.16.0
  * DNS plugins based on lexicon now require dns-lexicon &gt;= v3.1.0
  * Require the latest certbot and acme plugins for simplicity</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1626350400">- Skip building for python 3.6: not all deps are available anymore
  (e.g dns-lexicon).</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1627646400">- update to version 1.17.0
  * sync with the main certbot package</changelog>
  <changelog author="Danilo Spinella &lt;danilo.spinella@suse.com&gt;" date="1628596800">- update to version 1.18.0
  * sync with the main certbot package</changelog>
  <changelog author="Danilo Spinella &lt;danilo.spinella@suse.com&gt;" date="1640088000">- update to version 1.22.0
  * sync with the main certbot package</changelog>
</package>
<package pkgid="6c5e17df43764403091e5f4da0f97c27e210fb70631d8a03ef5e882c69754056" name="python-certbot-dns-nsone" arch="src">
  <version epoch="0" ver="1.22.0" rel="bp154.2.1"/>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1573732800">- update to version 0.40.1
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1578052800">- update to version 1.0.0
  * sync with main certbot package</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1579608000">- update to version 1.1.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1582286400">- update to version 1.2.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1583928000">- update to version 1.3.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1589457600">- update to version 1.4.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1591876800">- update to version 1.5.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1594641600">- update to version 1.6.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1598011200">- update to version 1.7.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1602072000">- update to version 1.9.0
  * Sync with main certbot package.</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1610107200">- update to version 1.11.0
  * sync with the main certbot package
- update to version 1.10.1
  * sync with the main certbot package
- update to version 1.10.0
  * Support for Python 3.9 was added to Certbot and all of its
    components.</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1615204800">- update to version 1.13.0
  * Support for Python 2 has been removed.</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1618401600">- update to version 1.14.0
  * sync with the main certbot package</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1620820800">- update to version 1.15.0
  * sync with the main certbot package</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1624536000">- update to version 1.16.0
  * DNS plugins based on lexicon now require dns-lexicon &gt;= v3.1.0
  * Require the latest certbot and acme plugins for simplicity</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1626350400">- Skip building for python 3.6: not all deps are available anymore
  (e.g dns-lexicon).</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1627646400">- update to version 1.17.0
  * sync with the main certbot package</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1639396800">- update to version 1.20.0
  * sync with the main certbot package</changelog>
  <changelog author="Danilo Spinella &lt;danilo.spinella@suse.com&gt;" date="1640088000">- update to version 1.22.0
  * sync with the main certbot package</changelog>
</package>
<package pkgid="2756a0fba02243dd168b48bb298fa14bc1f5d7d4d78af470c673b00716c9e4b2" name="python-certbot-dns-rfc2136" arch="src">
  <version epoch="0" ver="1.22.0" rel="bp154.2.1"/>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1573732800">- update to version 0.40.1
  * certbot-dns-rfc2136 now uses TCP to query SOA records.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1578052800">- update to version 1.0.0
  * sync with main certbot package</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1579608000">- update to version 1.1.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1582286400">- update to version 1.2.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1583928000">- update to version 1.3.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1589457600">- update to version 1.4.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1591876800">- update to version 1.5.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1594641600">- update to version 1.6.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1598011200">- update to version 1.7.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1602072000">- update to version 1.9.0
  * Sync with main certbot package.</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1610107200">- update to version 1.11.0
  * sync with the main certbot package
- update to version 1.10.1
  * sync with the main certbot package
- update to version 1.10.0
  * Added timeout to DNS query function calls for dns-rfc2136
    plugin.
  * Support for Python 3.9 was added to Certbot and all of its
    components.</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1615204800">- update to version 1.13.0
  * Support for Python 2 has been removed.</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1618401600">- update to version 1.14.0
  * sync with the main certbot package</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1620820800">- update to version 1.15.0
  * sync with the main certbot package</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1624536000">- update to version 1.16.0
  * Require the latest certbot and acme plugins for simplicity</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1627646400">- update to version 1.17.0
  * sync with the main certbot package</changelog>
  <changelog author="Danilo Spinella &lt;danilo.spinella@suse.com&gt;" date="1628596800">- update to version 1.18.0
  * sync with the main certbot package</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1639396800">- Update to version 1.20.0
  * The certbot-dns-rfc2136 plugin now ensures the use of an
    IP address as the target server.</changelog>
  <changelog author="Danilo Spinella &lt;danilo.spinella@suse.com&gt;" date="1640088000">- update to version 1.22.0
  * sync with the main certbot package</changelog>
</package>
<package pkgid="73f717d0919212fa0387cefb1a2229a09e01fb92344f6bbb2e25a1df085cae93" name="python-certbot-dns-route53" arch="src">
  <version epoch="0" ver="1.22.0" rel="bp154.2.1"/>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1570017600">- update to version 0.39.0
  * Support for Python 3.8 was added to Certbot and all of its components.</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1573732800">- update to version 0.40.1
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1578052800">- update to version 1.0.0
  * sync with main certbot package</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1579608000">- update to version 1.1.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1582286400">- update to version 1.2.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1583928000">- update to version 1.3.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1589457600">- update to version 1.4.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1591876800">- update to version 1.5.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1594641600">- update to version 1.6.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1598011200">- update to version 1.7.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1602072000">- update to version 1.9.0
  * Sync with main certbot package.</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1610107200">- update to version 1.11.0
  * sync with the main certbot package
- update to version 1.10.1
  * sync with the main certbot package
- update to version 1.10.0
  * Support for Python 3.9 was added to Certbot and all of its
    components.</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1615204800">- update to version 1.13.0
  * Support for Python 2 has been removed.</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1618401600">- update to version 1.14.0
  * sync with the main certbot package</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1620820800">- update to version 1.15.0
  * sync with the main certbot package</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1624536000">- update to version 1.16.0
  * Require the latest certbot and acme plugins for simplicity</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1627646400">- update to version 1.17.0
  * sync with the main certbot package</changelog>
  <changelog author="Danilo Spinella &lt;danilo.spinella@suse.com&gt;" date="1628596800">- update to version 1.18.0
  * sync with the main certbot package</changelog>
  <changelog author="Danilo Spinella &lt;danilo.spinella@suse.com&gt;" date="1640088000">- update to version 1.22.0
  * sync with the main certbot package</changelog>
</package>
<package pkgid="9ee195965152a1949cfd1871ccc73836f23d9b5abeb38741f9925996d0f86a3c" name="python-certbot-nginx" arch="src">
  <version epoch="0" ver="1.22.0" rel="bp154.2.2"/>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1573732800">- update to version 0.40.1
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1578052800">- update to version 1.0.0 (boo#1160066)
  * The docs extras for the certbot-apache and certbot-nginx
    packages have been removed.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1579608000">- update to version 1.1.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1582286400">- update to version 1.2.0
  * Added support for $hostname in nginx server_name directive
  * Remove ECDHE-RSA-AES128-SHA from NGINX ciphers list</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1583928000">- update to version 1.3.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1589457600">- update to version 1.4.0
  * Fix nginx plugin crash when non-ASCII configuration file is being read (instead,
    the user will be warned that UTF-8 must be used).</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1591876800">- update to version 1.5.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1594641600">- update to version 1.6.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1598011200">- update to version 1.7.0
  * Added --nginx-sleep-seconds (default 1) for environments where nginx takes a long time to reload.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1602072000">- update to version 1.9.0
  * Reduced CLI logging when reloading nginx, if it is not running.
  * Fixed server_name case-sensitivity in the nginx plugin.</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1610107200">- update to version 1.11.0
  * sync with the main certbot package
- update to version 1.10.1
  * sync with the main certbot package
- update to version 1.10.0
  * Support for Python 3.9 was added to Certbot and all of its
    components.
  * Fixed a Unicode-related crash in the nginx plugin when running
    under Python 2.</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1615204800">- update to version 1.13.0
  * Support for Python 2 has been removed.
  * The nginx authenticator now configures all matching HTTP and HTTPS vhosts for the HTTP-01
    challenge. It is now compatible with external HTTPS redirection by a CDN or load balancer.</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1618401600">- update to version 1.14.0
  * sync with the main certbot package</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1620820800">- update to version 1.15.0
  * sync with the main certbot package</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1624536000">- update to version 1.16.0
  * Require the latest certbot and acme plugins for simplicity</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1627646400">- update to version 1.17.0
  * When we increased the logging level on our nginx "Could not parse file" message,
    it caused a previously-existing inability to parse empty files to become more
    visible. We have now added the ability to correctly parse empty files, so that
    message should only show for more significant errors.</changelog>
  <changelog author="Danilo Spinella &lt;danilo.spinella@suse.com&gt;" date="1628596800">- update to version 1.18.0
  * sync with the main certbot package</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1639396800">- update to version 1.20.0
  * sync with the main certbot package</changelog>
  <changelog author="Danilo Spinella &lt;danilo.spinella@suse.com&gt;" date="1640088000">- update to version 1.22.0
  * sync with the main certbot package</changelog>
</package>
<package pkgid="141908925453525874173b7a20a56949037c326e8c6d65ec52e3d00bd92de276" name="python-ipython" arch="src">
  <version epoch="0" ver="7.16.1" rel="bp154.2.3.3"/>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1545480000">- Update to version 7.2.0
  * Fix a bug preventing PySide2 GUI integration from working :ghpull:`11464`
  * Run CI on Mac OS ! :ghpull:`11471`
  * Fix IPython "Demo" mode. :ghpull:`11498`
  * Fix ``%run`` magic  with path in name :ghpull:`11499`
  * Fix: add CWD to sys.path *after* stdlib :ghpull:`11502`
  * Better rendering of signatures, especially long ones. :ghpull:`11505`
  * Re-enable jedi by default if it's installed :ghpull:`11506`
  * Add New ``minimal`` exception reporting mode (useful for educational purpose). See :ghpull:`11509`
- Update to version 7.1.0
  + Notable Changes
  * Major update of "latex to unicode" tab completion map (see below)
  + Notable New Features:
  * Restore functionality and documentation of the **sphinx directive**, which
    is now stricter (fail on error by daefault), has new configuration options,
    has a brand new documentation page :ref:`ipython_directive` (which needs
    some cleanup). It is also now *tested* so we hope to have less regressions.
    :ghpull:`11402`
  * ``IPython.display.Video`` now supports ``width`` and ``height`` arguments,
    allowing a custom width and height to be set instead of using the video's
    width and height. :ghpull:`11353`
  * Warn when using ``HTML('&lt;iframe&gt;')`` instead of ``IFrame`` :ghpull:`11350`
  * Allow Dynamic switching of editing mode between vi/emacs and show
    normal/input mode in prompt when using vi. :ghpull:`11390`. Use ``%config
    TerminalInteractiveShell.editing_mode = 'vi'`` or ``%config
    TerminalInteractiveShell.editing_mode = 'emacs'`` to dynamically switch
    between modes.
  + Notable Fixes:
  * Fix entering of **multi-line blocks in terminal** IPython, and various
    crashes in the new input transformation machinery :ghpull:`11354`,
    :ghpull:`11356`, :ghpull:`11358`. These also fix a **Compatibility bug
    with Python 3.7.1**.
  * Fix moving through generator stack in ipdb :ghpull:`11266`
  * %Magic command arguments now support quoting. :ghpull:`11330`
  * Re-add ``rprint`` and ``rprinte`` aliases. :ghpull:`11331`
  * Remove implicit dependency on ``ipython_genutils`` :ghpull:`11317`
  * Make ``nonlocal`` raise ``SyntaxError`` instead of silently failing in async
    mode. :ghpull:`11382`
  * Fix mishandling of magics and ``= !`` assignment just after a dedent in
    nested code blocks :ghpull:`11418`
  * Fix instructions for custom shortcuts :ghpull:`11426`
  + Notable Internals improvements:
  * Use of ``os.scandir`` (Python 3 only) to speed up some file system operations.
    :ghpull:`11365`
  * use ``perf_counter`` instead of ``clock`` for more precise
    timing results with ``%time`` :ghpull:`11376`
- Remove upstream-included fix_test_history.patch</changelog>
  <changelog author="Arun Persaud &lt;arun@gmx.de&gt;" date="1551441600">- specfile:
  * update copyright year
- update to version 7.3.0:
  * The biggest change to this release is the implementation of the
    "%conda" and "%pip" magics, that will attempt to install packages
    in the **current environment**. You may still need to restart your
    interpreter or kernel for the change to be taken into account, but
    it should simplify installation of packages into remote
    environment. Installing using pip/conda from the command line is
    still the prefer method.
  * The "%pip" magic was already present, but was only printing a
    warning; now it will actually forward commands to pip.
  * Misc bug fixes and improvements:
    + Compatibility with Python 3.8.
    + Do not expand shell variable in execution magics, and added the
    "no_var_expand" decorator for magic requiring a similar
    functionality :ghpull:`11516`
    + Add "%pip" and "%conda" magic :ghpull:`11524`
    + Re-initialize posix aliases after a "%reset" :ghpull:`11528`
    + Allow the IPython command line to run "*.ipynb" files
    :ghpull:`11529`</changelog>
  <changelog author="Arun Persaud &lt;arun@gmx.de&gt;" date="1553428800">- update to version 7.4.0:
  * Previously, we provided completion for a unicode name with its
    relative symbol.With this, now IPython provides complete
    suggestions to unicode name symbols.
  * Make audio normalization optional
  * Miscelanious
    + Fix improper acceptation of "return" outside of
    functions. :ghpull:`11641`.
    + Fixed PyQt 5.11 backwards incompatibility causing sip import
    failure.  :ghpull:`11613`.
    + Fix Bug where "type?" woudl crash IPython. :ghpull:`1608`.
    + Allow to apply "@needs_local_scope" to cell magics for
    convenience.  :ghpull:`11542`.</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1556193600">- Rename package to follow python package guidelines.</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1556193601">- Update to 7.5.0
  * IPython 7.5.0 consist mostly of bug-fixes, and documentation updates,
    with one minor new feature. The Audio display element can now be
    assigned an element id when displayed in browser.
  * The major outstanding bug fix correct a change of behavior that was
    introduce in 7.4.0 where some cell magics would not be able to access
    or modify global scope when using the @needs_local_scope decorator.
    This was typically encountered with the %%time and %%timeit magics.</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1562155200">- Update to 7.6.0
  IPython 7.6.0 contains a couple of bug fixes and number of small features
  additions as well as some compatibility with the current development version of
  Python 3.8.
  * Add a ``-l`` option to :magic:`psearch` to list the available search
    types.
  * Support ``PathLike`` for ``DisplayObject`` and ``Image``.
  * Configurability of timeout in the test suite for slow platforms.
  * Accept any casing for matplotlib backend.
  * Properly skip test that requires numpy to be installed
  * More support for Python 3.8 and positional only arguments (pep570)
  * Unicode names for the completion are loaded lazily on first use which
    should decrease startup time.
  * Autoreload now update the types of reloaded objects; this for example allow
    pickling of reloaded objects.
  * Fix a big where ``%%time`` magic would suppress cell output.</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1564228800">- Update to 7.7.0
  * Fix a bug introduced in 7.6 where the ``%matplotlib`` magic would fail on
    previously acceptable arguments
  * Fix the manage location on freebsd
  * Fix error message about aliases after ``%reset`` call in ipykernel
  * Fix Duplication completions in emacs</changelog>
  <changelog author="Arun Persaud &lt;arun@gmx.de&gt;" date="1568462400">- update to version 7.8.0:
  * Enable changing the font color for LaTeX rendering
  * and Re-Expose some PDB API</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1573560000">- update to version 7.9.0:
  * Update trio and curio dependencies eagerly.
  * restore terminal title on exit (xterm)
  * Easier empty, updatable display
  * %env: hide likely secrets by default
  * Prevent caching outputs in _, __, ___ when cache_size isn't positive
  * switching update_instance() to gc.get_referrers()
  * Fix for Python 4
  * Autoreload slow</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1579089600">- Update to 7.11.1
  * A couple of deprecated functions (no-op) have been reintroduces in py3compat as
  Cython was still relying on them, and will be removed in a couple of versions.
- Update to 7.11.0
  * A number of function in the ``py3compat`` have been removed; a number of types
    in the IPython code base are now non-ambiguous and now always ``unicode``
    instead of ``Union[Unicode,bytes]``; many of the relevant code path have thus
    been simplified/cleaned and types annotation added.
  * IPython support several verbosity level from exceptions. ``xmode plain`` now
    support chained exceptions.
  * We are starting to remove ``shell=True`` in some usages of subprocess. While not directly
    a security issue (as IPython is made to run arbitrary code anyway) it is not good
    practice and we'd like to show the example.
  * Work around some bugs in Python 3.9 tokenizer
  * IPython will now print its version after a crash.
- Update to 7.10.2
  * IPython 7.10.2 fix a couple of extra incompatibility between IPython, ipdb,
    asyncio and Prompt Toolkit 3.
- Update to IPython 7.10.1
  * IPython 7.10.1 fix a couple of incompatibilities with Prompt toolkit 3 (please
    update Prompt toolkit to 3.0.2 at least), and fixes some interaction with
    headless IPython.
- Update to IPython 7.10.0
  * Stop Support for Python 3.5 ? Adopt NEP 29
  * Support for Prompt Toolkit 3.0
  * Prompt Rendering Performance improvements
  * Code autoformatting
  * Arbitrary Mimetypes Handing in Terminal (Aka inline images in terminal)
  * Completions can define their own ordering
  * Enable Plotting in the same cell than the one that import matplotlib
  * Allow to store and restore multiple variables at once</changelog>
  <changelog author="Arun Persaud &lt;arun@gmx.de&gt;" date="1581163200">- update to version 7.12.0:
  * Exit non-zero when ipython is given a file path to run that
    doesn't exist :ghpull:`12074`
  * Test PR on ARM64 with Travis-CI :ghpull:`12073`
  * Update CI to work with latest Pytest :ghpull:`12086`
  * Add infrastructure to run ipykernel eventloop via trio
    :ghpull:`12097`
  * Support git blame ignore revs :ghpull:`12091`
  * Start multi-line __repr__ s on their own line :ghpull:`12099`</changelog>
  <changelog author="Arun Persaud &lt;arun@gmx.de&gt;" date="1583064000">- update to version 7.13.0:
  * Fix inability to run PDB when inside an event loop :ghpull:`12141`
  * Fix ability to interrupt some processes on windows :ghpull:`12137`
  * Fix debugger shortcuts :ghpull:`12132`
  * improve tab completion when inside a string by removing irrelevant
    elements :ghpull:`12128`
  * Fix display of filename tab completion when the path is long
    :ghpull:`12122`
  * Many removal of Python 2 specific code path :ghpull:`12110`
  * displaying wav files do not require NumPy anymore, and is 5x to
    30x faster :ghpull:`12113`</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1583236800">- Run tests using multibuild instead of running them in a separate
  subpackage.  This greatly simplifies the spec file and makes
  updating the package much easier.
- Drop doc subpackage due to rapid changes in readthedocs download
  urls.  This was only around to let the tests be run in a
  separate subpackage to avoid dependency loops.</changelog>
  <changelog author="Benjamin Greiner &lt;code@bnavigator.de&gt;" date="1584619200">- update dep version of python-prompt_toolkit</changelog>
  <changelog author="Benjamin Greiner &lt;code@bnavigator.de&gt;" date="1588420800">- Update to version 7.14.0
  IPython  7.14 is a minor release that fix a couple of bugs and prepare
  compatibility with new or future versions of some libraries.
  * Fix compatibility with Sphinx 3+
    gh#ipython/ipython#12235
  * Remove deprecated matplotlib parameter usage, compatibility with
    matplotlib3.3+
    gh#ipython/ipython#12250
  * set ``.py`` extension when editing current buffer in vi/emacs.
    gh#ipython/ipython#12167
  * support for unicode identifiers in ``?``/``??``
    gh#ipython/ipython#12208
  * add extra options to the ``Video`` Rich objects
    gh#ipython/ipython#12212
  * add pretty-printing to ``SimpleNamespace``
    gh#ipython/ipython#12230
- add opensuse-disable-net-test.patch to disable network access
  during new test_embed_svg_url</changelog>
  <changelog author="Arun Persaud &lt;arun@gmx.de&gt;" date="1590840000">- specfile:
  * removed opensuse-disable-net-test.patch, wikipedia file is not accessed anymore
- update to version 7.15.0:
  * Misc Noticeable changes:
    + Long completion name have better elision in terminal
    :ghpull:`12284`
    + I've started to test on Python 3.9 :ghpull:`12307` and fix some
    errors.
    + Hi DPI scaling of figures when using qt eventloop
    :ghpull:`12314`
    + Document the ability to have systemwide configuration for
    IPython. :ghpull:`12328`
    + Fix issues with input autoformatting :ghpull:`12336`
    + IPython.core.debugger.Pdb is now interruptible (:ghpull:`12168`,
    in 7.14 but forgotten in release notes)
    + Video HTML attributes (:ghpull:`12212`, in 7.14 but forgotten in
    release notes)
  * Reproducible Build
  * NEP29: Last version to support Python 3.6
  * Highlighted features
    + Increase Tab Completion Menu Height
    + Autoformat Code in the terminal</changelog>
  <changelog author="Arun Persaud &lt;arun@gmx.de&gt;" date="1593345600">- update to version 7.16.1:
  * Noticeable changes:
    + Exceptions are now (re)raised when running notebooks via the
    :magic:`%run`, helping to catch issues in workflows and
    pipelines. :ghpull:`12301`
    + Fix inputhook for qt 5.15.0 :ghpull:`12355`
    + Fix wx inputhook :ghpull:`12375`
    + Add handling for malformed pathext env var (Windows)
    :ghpull:`12367`
    + use $SHELL in system_piped :ghpull:`12360` for uniform behavior
    with ipykernel.
  * Reproducible Build</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1646222400">- Add ipython-jedi018.patch to make ipython compatible with the
  jedi version 0.18 (bsc#1195830).</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1646395200">- Add CVE-2022-21699-unnecessary-privs.patch confining
  executed process to have limited privileges. (CVE-2022-21699
  bsc#1194936).</changelog>
  <changelog author="Steve Kowalik &lt;steven.kowalik@suse.com&gt;" date="1657627200">- Update ipython-jedi018.patch to more completely support
  jedi 0.18 (bsc#1200228)</changelog>
</package>
<package pkgid="df6b767d0ff51b09a999fc7742398366d569b55549786ab6366bae7687584cca" name="python-ipython-test" arch="src">
  <version epoch="0" ver="7.16.1" rel="bp154.2.3.3"/>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1545480000">- Update to version 7.2.0
  * Fix a bug preventing PySide2 GUI integration from working :ghpull:`11464`
  * Run CI on Mac OS ! :ghpull:`11471`
  * Fix IPython "Demo" mode. :ghpull:`11498`
  * Fix ``%run`` magic  with path in name :ghpull:`11499`
  * Fix: add CWD to sys.path *after* stdlib :ghpull:`11502`
  * Better rendering of signatures, especially long ones. :ghpull:`11505`
  * Re-enable jedi by default if it's installed :ghpull:`11506`
  * Add New ``minimal`` exception reporting mode (useful for educational purpose). See :ghpull:`11509`
- Update to version 7.1.0
  + Notable Changes
  * Major update of "latex to unicode" tab completion map (see below)
  + Notable New Features:
  * Restore functionality and documentation of the **sphinx directive**, which
    is now stricter (fail on error by daefault), has new configuration options,
    has a brand new documentation page :ref:`ipython_directive` (which needs
    some cleanup). It is also now *tested* so we hope to have less regressions.
    :ghpull:`11402`
  * ``IPython.display.Video`` now supports ``width`` and ``height`` arguments,
    allowing a custom width and height to be set instead of using the video's
    width and height. :ghpull:`11353`
  * Warn when using ``HTML('&lt;iframe&gt;')`` instead of ``IFrame`` :ghpull:`11350`
  * Allow Dynamic switching of editing mode between vi/emacs and show
    normal/input mode in prompt when using vi. :ghpull:`11390`. Use ``%config
    TerminalInteractiveShell.editing_mode = 'vi'`` or ``%config
    TerminalInteractiveShell.editing_mode = 'emacs'`` to dynamically switch
    between modes.
  + Notable Fixes:
  * Fix entering of **multi-line blocks in terminal** IPython, and various
    crashes in the new input transformation machinery :ghpull:`11354`,
    :ghpull:`11356`, :ghpull:`11358`. These also fix a **Compatibility bug
    with Python 3.7.1**.
  * Fix moving through generator stack in ipdb :ghpull:`11266`
  * %Magic command arguments now support quoting. :ghpull:`11330`
  * Re-add ``rprint`` and ``rprinte`` aliases. :ghpull:`11331`
  * Remove implicit dependency on ``ipython_genutils`` :ghpull:`11317`
  * Make ``nonlocal`` raise ``SyntaxError`` instead of silently failing in async
    mode. :ghpull:`11382`
  * Fix mishandling of magics and ``= !`` assignment just after a dedent in
    nested code blocks :ghpull:`11418`
  * Fix instructions for custom shortcuts :ghpull:`11426`
  + Notable Internals improvements:
  * Use of ``os.scandir`` (Python 3 only) to speed up some file system operations.
    :ghpull:`11365`
  * use ``perf_counter`` instead of ``clock`` for more precise
    timing results with ``%time`` :ghpull:`11376`
- Remove upstream-included fix_test_history.patch</changelog>
  <changelog author="Arun Persaud &lt;arun@gmx.de&gt;" date="1551441600">- specfile:
  * update copyright year
- update to version 7.3.0:
  * The biggest change to this release is the implementation of the
    "%conda" and "%pip" magics, that will attempt to install packages
    in the **current environment**. You may still need to restart your
    interpreter or kernel for the change to be taken into account, but
    it should simplify installation of packages into remote
    environment. Installing using pip/conda from the command line is
    still the prefer method.
  * The "%pip" magic was already present, but was only printing a
    warning; now it will actually forward commands to pip.
  * Misc bug fixes and improvements:
    + Compatibility with Python 3.8.
    + Do not expand shell variable in execution magics, and added the
    "no_var_expand" decorator for magic requiring a similar
    functionality :ghpull:`11516`
    + Add "%pip" and "%conda" magic :ghpull:`11524`
    + Re-initialize posix aliases after a "%reset" :ghpull:`11528`
    + Allow the IPython command line to run "*.ipynb" files
    :ghpull:`11529`</changelog>
  <changelog author="Arun Persaud &lt;arun@gmx.de&gt;" date="1553428800">- update to version 7.4.0:
  * Previously, we provided completion for a unicode name with its
    relative symbol.With this, now IPython provides complete
    suggestions to unicode name symbols.
  * Make audio normalization optional
  * Miscelanious
    + Fix improper acceptation of "return" outside of
    functions. :ghpull:`11641`.
    + Fixed PyQt 5.11 backwards incompatibility causing sip import
    failure.  :ghpull:`11613`.
    + Fix Bug where "type?" woudl crash IPython. :ghpull:`1608`.
    + Allow to apply "@needs_local_scope" to cell magics for
    convenience.  :ghpull:`11542`.</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1556193600">- Rename package to follow python package guidelines.</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1556193601">- Update to 7.5.0
  * IPython 7.5.0 consist mostly of bug-fixes, and documentation updates,
    with one minor new feature. The Audio display element can now be
    assigned an element id when displayed in browser.
  * The major outstanding bug fix correct a change of behavior that was
    introduce in 7.4.0 where some cell magics would not be able to access
    or modify global scope when using the @needs_local_scope decorator.
    This was typically encountered with the %%time and %%timeit magics.</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1562155200">- Update to 7.6.0
  IPython 7.6.0 contains a couple of bug fixes and number of small features
  additions as well as some compatibility with the current development version of
  Python 3.8.
  * Add a ``-l`` option to :magic:`psearch` to list the available search
    types.
  * Support ``PathLike`` for ``DisplayObject`` and ``Image``.
  * Configurability of timeout in the test suite for slow platforms.
  * Accept any casing for matplotlib backend.
  * Properly skip test that requires numpy to be installed
  * More support for Python 3.8 and positional only arguments (pep570)
  * Unicode names for the completion are loaded lazily on first use which
    should decrease startup time.
  * Autoreload now update the types of reloaded objects; this for example allow
    pickling of reloaded objects.
  * Fix a big where ``%%time`` magic would suppress cell output.</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1564228800">- Update to 7.7.0
  * Fix a bug introduced in 7.6 where the ``%matplotlib`` magic would fail on
    previously acceptable arguments
  * Fix the manage location on freebsd
  * Fix error message about aliases after ``%reset`` call in ipykernel
  * Fix Duplication completions in emacs</changelog>
  <changelog author="Arun Persaud &lt;arun@gmx.de&gt;" date="1568462400">- update to version 7.8.0:
  * Enable changing the font color for LaTeX rendering
  * and Re-Expose some PDB API</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1573560000">- update to version 7.9.0:
  * Update trio and curio dependencies eagerly.
  * restore terminal title on exit (xterm)
  * Easier empty, updatable display
  * %env: hide likely secrets by default
  * Prevent caching outputs in _, __, ___ when cache_size isn't positive
  * switching update_instance() to gc.get_referrers()
  * Fix for Python 4
  * Autoreload slow</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1579089600">- Update to 7.11.1
  * A couple of deprecated functions (no-op) have been reintroduces in py3compat as
  Cython was still relying on them, and will be removed in a couple of versions.
- Update to 7.11.0
  * A number of function in the ``py3compat`` have been removed; a number of types
    in the IPython code base are now non-ambiguous and now always ``unicode``
    instead of ``Union[Unicode,bytes]``; many of the relevant code path have thus
    been simplified/cleaned and types annotation added.
  * IPython support several verbosity level from exceptions. ``xmode plain`` now
    support chained exceptions.
  * We are starting to remove ``shell=True`` in some usages of subprocess. While not directly
    a security issue (as IPython is made to run arbitrary code anyway) it is not good
    practice and we'd like to show the example.
  * Work around some bugs in Python 3.9 tokenizer
  * IPython will now print its version after a crash.
- Update to 7.10.2
  * IPython 7.10.2 fix a couple of extra incompatibility between IPython, ipdb,
    asyncio and Prompt Toolkit 3.
- Update to IPython 7.10.1
  * IPython 7.10.1 fix a couple of incompatibilities with Prompt toolkit 3 (please
    update Prompt toolkit to 3.0.2 at least), and fixes some interaction with
    headless IPython.
- Update to IPython 7.10.0
  * Stop Support for Python 3.5 ? Adopt NEP 29
  * Support for Prompt Toolkit 3.0
  * Prompt Rendering Performance improvements
  * Code autoformatting
  * Arbitrary Mimetypes Handing in Terminal (Aka inline images in terminal)
  * Completions can define their own ordering
  * Enable Plotting in the same cell than the one that import matplotlib
  * Allow to store and restore multiple variables at once</changelog>
  <changelog author="Arun Persaud &lt;arun@gmx.de&gt;" date="1581163200">- update to version 7.12.0:
  * Exit non-zero when ipython is given a file path to run that
    doesn't exist :ghpull:`12074`
  * Test PR on ARM64 with Travis-CI :ghpull:`12073`
  * Update CI to work with latest Pytest :ghpull:`12086`
  * Add infrastructure to run ipykernel eventloop via trio
    :ghpull:`12097`
  * Support git blame ignore revs :ghpull:`12091`
  * Start multi-line __repr__ s on their own line :ghpull:`12099`</changelog>
  <changelog author="Arun Persaud &lt;arun@gmx.de&gt;" date="1583064000">- update to version 7.13.0:
  * Fix inability to run PDB when inside an event loop :ghpull:`12141`
  * Fix ability to interrupt some processes on windows :ghpull:`12137`
  * Fix debugger shortcuts :ghpull:`12132`
  * improve tab completion when inside a string by removing irrelevant
    elements :ghpull:`12128`
  * Fix display of filename tab completion when the path is long
    :ghpull:`12122`
  * Many removal of Python 2 specific code path :ghpull:`12110`
  * displaying wav files do not require NumPy anymore, and is 5x to
    30x faster :ghpull:`12113`</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1583236800">- Run tests using multibuild instead of running them in a separate
  subpackage.  This greatly simplifies the spec file and makes
  updating the package much easier.
- Drop doc subpackage due to rapid changes in readthedocs download
  urls.  This was only around to let the tests be run in a
  separate subpackage to avoid dependency loops.</changelog>
  <changelog author="Benjamin Greiner &lt;code@bnavigator.de&gt;" date="1584619200">- update dep version of python-prompt_toolkit</changelog>
  <changelog author="Benjamin Greiner &lt;code@bnavigator.de&gt;" date="1588420800">- Update to version 7.14.0
  IPython  7.14 is a minor release that fix a couple of bugs and prepare
  compatibility with new or future versions of some libraries.
  * Fix compatibility with Sphinx 3+
    gh#ipython/ipython#12235
  * Remove deprecated matplotlib parameter usage, compatibility with
    matplotlib3.3+
    gh#ipython/ipython#12250
  * set ``.py`` extension when editing current buffer in vi/emacs.
    gh#ipython/ipython#12167
  * support for unicode identifiers in ``?``/``??``
    gh#ipython/ipython#12208
  * add extra options to the ``Video`` Rich objects
    gh#ipython/ipython#12212
  * add pretty-printing to ``SimpleNamespace``
    gh#ipython/ipython#12230
- add opensuse-disable-net-test.patch to disable network access
  during new test_embed_svg_url</changelog>
  <changelog author="Arun Persaud &lt;arun@gmx.de&gt;" date="1590840000">- specfile:
  * removed opensuse-disable-net-test.patch, wikipedia file is not accessed anymore
- update to version 7.15.0:
  * Misc Noticeable changes:
    + Long completion name have better elision in terminal
    :ghpull:`12284`
    + I've started to test on Python 3.9 :ghpull:`12307` and fix some
    errors.
    + Hi DPI scaling of figures when using qt eventloop
    :ghpull:`12314`
    + Document the ability to have systemwide configuration for
    IPython. :ghpull:`12328`
    + Fix issues with input autoformatting :ghpull:`12336`
    + IPython.core.debugger.Pdb is now interruptible (:ghpull:`12168`,
    in 7.14 but forgotten in release notes)
    + Video HTML attributes (:ghpull:`12212`, in 7.14 but forgotten in
    release notes)
  * Reproducible Build
  * NEP29: Last version to support Python 3.6
  * Highlighted features
    + Increase Tab Completion Menu Height
    + Autoformat Code in the terminal</changelog>
  <changelog author="Arun Persaud &lt;arun@gmx.de&gt;" date="1593345600">- update to version 7.16.1:
  * Noticeable changes:
    + Exceptions are now (re)raised when running notebooks via the
    :magic:`%run`, helping to catch issues in workflows and
    pipelines. :ghpull:`12301`
    + Fix inputhook for qt 5.15.0 :ghpull:`12355`
    + Fix wx inputhook :ghpull:`12375`
    + Add handling for malformed pathext env var (Windows)
    :ghpull:`12367`
    + use $SHELL in system_piped :ghpull:`12360` for uniform behavior
    with ipykernel.
  * Reproducible Build</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1646222400">- Add ipython-jedi018.patch to make ipython compatible with the
  jedi version 0.18 (bsc#1195830).</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1646395200">- Add CVE-2022-21699-unnecessary-privs.patch confining
  executed process to have limited privileges. (CVE-2022-21699
  bsc#1194936).</changelog>
  <changelog author="Steve Kowalik &lt;steven.kowalik@suse.com&gt;" date="1657627200">- Update ipython-jedi018.patch to more completely support
  jedi 0.18 (bsc#1200228)</changelog>
</package>
<package pkgid="91850add7b4464b13e967f2f8dd050724053ef38021a1429becc8f5b5a4902fd" name="python-josepy" arch="src">
  <version epoch="0" ver="1.10.0" rel="bp154.2.3.4"/>
  <changelog author="ecsos@opensuse.org" date="1517054400">- initial version 1.0.1</changelog>
  <changelog author="jengelh@inai.de" date="1517313600">- Use Documentation/* as RPM group for -doc.</changelog>
  <changelog author="ecsos@opensuse.org" date="1525348800">- update to 1.1.0
  - Deprecated support for Python 2.6 and 3.3.
  - Use the sign and verify methods when they are available in
    cryptography instead of the deprecated methods signer and
    verifier.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1548763200">- Really run tests
- Disable docs building it is distributed by upstream and does not
  work on older openSUSE releases</changelog>
  <changelog author="pgajdos@suse.com" date="1563969600">- version update to 1.2.0
  * Support for Python 2.6 and 3.3 has been removed.
  * Known incompatibilities with Python 3.8 have been resolved.</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Steve Kowalik &lt;steven.kowalik@suse.com&gt;" date="1585656000">- Update to version 1.3.0:
  * Deprecated support for Python 3.4.
  * Officially add support for Python 3.8.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1609934400">- update to 1.5.0:
  * Added support for Python 3.9.
  * Dropped support for Python 3.5.
  * Stopped supporting running tests with ``python setup.py test`` which is
    deprecated in favor of ``python -m pytest``.
  * Deprecated support for Python 3.5.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1615204800">- update to 1.7.0:
  * Dropped support for Python 2.7.
  * Added support for EC keys.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1620561600">- update to 1.8.0:
  * Removed external mock dependency.
  * Removed dependency on six.
  * Deprecated the module josepy.magic_typing.
  * Fix JWS/JWK generation with EC keys when keys or signatures have leading zeros.</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1633435200">- Update to 1.10.0
  * josepy is now compliant with PEP-561: type checkers will fetch
    types from the inline types annotations when josepy is
    installed as a dependency in a Python project.
  * Added a field function to assist in adding type annotations for
    Fields in classes. If the field function is used to define a
    Field in a JSONObjectWithFields based class without a type
    annotation, an error will be raised.
  * josepy's tests can no longer be imported under the name josepy,
    however, they are still included in the package and you can run
    them by installing josepy with "tests" extras and running
    python -m pytest.
- Changes from 1.9.0
  * Removed pytest-cache testing dependency.
  * Fixed a bug that sometimes caused incorrect padding to be used
    when serializing Elliptic Curve keys as JSON Web Keys.</changelog>
</package>
<package pkgid="256d18b8c60185699151ea4cdacb67873a97ede42562f091db518636167630c8" name="python-jupyterlab" arch="src">
  <version epoch="0" ver="2.2.10" rel="bp154.2.3.1"/>
  <changelog author="toddrme2178@gmail.com" date="1524139200">- Update to version 0.32.0
  * Better handling of a corrupted or invalid state database ([#3619](https://github.com/jupyterlab/jupyterlab/issues/3619), [#3622](https://github.com/jupyterlab/jupyterlab/issues/3622), [#3687](https://github.com/jupyterlab/jupyterlab/issues/3687), [#4114](https://github.com/jupyterlab/jupyterlab/issues/4114)).
  * Fixing file dirty status indicator ([#3652](https://github.com/jupyterlab/jupyterlab/issues/3652)).
  * New option for whether to autosave documents ([#3734](https://github.com/jupyterlab/jupyterlab/issues/3734)).
  * More commands in the notebook context menu ([#3770](https://github.com/jupyterlab/jupyterlab/issues/3770), [#3909](https://github.com/jupyterlab/jupyterlab/issues/3909))
  * Defensively checking for completion metadata from kernels ([#3888](https://github.com/jupyterlab/jupyterlab/issues/3888))
  * New "Shutdown all" button  in the Running panel ([#3764](https://github.com/jupyterlab/jupyterlab/issues/3764))
  * Performance improvements wherein non-focused documents poll the server less ([#3931](https://github.com/jupyterlab/jupyterlab/issues/3931))
  * Changing the keyboard shortcut for singled-document-mode to something less easy to trigger ([#3889](https://github.com/jupyterlab/jupyterlab/issues/3889))
  * Performance improvements for rendering text streams, especially around progress bars ([#4045](https://github.com/jupyterlab/jupyterlab/issues/4045)).
  * Canceling a "Restart Kernel" now functions correctly ([#3703](https://github.com/jupyterlab/jupyterlab/issues/3703)).
  * Defer loading file contents until after the application has been restored ([#4087](https://github.com/jupyterlab/jupyterlab/issues/4087)).
  * Ability to rotate, flip, and invert images in the image viewer ([#4000](https://github.com/jupyterlab/jupyterlab/issues/4000))
  * Major performance improvements for large CSV viewing ([#3997](https://github.com/jupyterlab/jupyterlab/issues/3997)).
  * Always show the context menu in the file browser, even for an empty directory ([#4264](https://github.com/jupyterlab/jupyterlab/issues/4264)).
  * Handle asynchronous comm messages in the services library more correctly (Note: this means `@jupyterlab/services` is now at version 2.0!) ([[#4115](https://github.com/jupyterlab/jupyterlab/issues/4115)](https://github.com/jupyterlab/jupyterlab/pull/4115)).
  * Display the kernel banner in the console when a kernel is restarted to mark the restart ([[#3663](https://github.com/jupyterlab/jupyterlab/issues/3663)](https://github.com/jupyterlab/jupyterlab/pull/3663)).
  * Many tweaks to the UI, as well as better error handling.</changelog>
  <changelog author="jengelh@inai.de" date="1525262400">- Trim filler wording from description.
- Replace bashisms in %install.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1533211200">- Update to 0.33.4
  + Key Features:
  * No longer in beta
  * Workspaces
  * Menu items
  * Keyboard shortcuts
  * Command palette items
  * Settings
  * Larger file uploads
  * Extension management and installation
  * Interface changes
  * Renderers
  * Changes for developers
  * Other fixes</changelog>
  <changelog author="toddrme2178@gmail.com" date="1536321600">- Update to 0.34.7
  * Notebooks, consoles, and text files now have access to completions for local
    tokens.
  * Python 3.5+ is now required to use JupyterLab. Python 2 kernels can still be
    run within JupyterLab.
  * Added the pipe (``|``) character as a CSV delimiter option.
  * Added "Open From Path..."" to top level ``File`` menu.
  * Added "Copy Download Link" to context menu for files.</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1538136000">- Update to 0.34.12
  * add sidebar min-width css variable
  * use encodeURI instead of encodeURIComponent for shareable links
  * expand JupyterLab.IOptions to allow for custom DocumentRegistry
  * Rename package.json to package.json.orig when copying it to build folder
  * fix python versions of build wheels by removing the universal flag
  * Hide quit entry for older notebook versions
  * Notebook 4.3 Shim</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1546603200">- Update to 0.35.4
  + Features
  * A notebook cell can now be readonly, reflecting its ``enabled`` metadata. (`#5401 &lt;https://github.com/jupyterlab/jupyterlab/pull/5401&gt;`__, `#1312 &lt;https://github.com/jupyterlab/jupyterlab/issues/1312&gt;`__)
  * Add "Go To Line" in the Edit menu for text editors. (`#5377 &lt;https://github.com/jupyterlab/jupyterlab/pull/5377&gt;`__)
  * Sidebar panels can now be switched between left and right sidebars. Right-click on a sidebar tab to move it to the other sidebar. (`#5347 &lt;https://github.com/jupyterlab/jupyterlab/pull/5347&gt;`__, `#5054 &lt;https://github.com/jupyterlab/jupyterlab/  issues/5054&gt;`__, `#3707 &lt;https://github.com/jupyterlab/jupyterlab/issues/3707&gt;`__)
  * Make the sidebar a bit narrower, and make the minimum width adjustable from a theme. (`#5245 &lt;https://github.com/jupyterlab/jupyterlab/pull/5245&gt;`__)
  * Populate the File, Export Notebook As... submenu from the server nbconvert capabilities. (`#5217 &lt;https://github.com/jupyterlab/jupyterlab/pull/5217&gt;`__)
  * Server contents managers can now tell JupyterLab to open files as notebooks. For example, several custom contents managers save and open notebooks as Markdown files. (`#5247 &lt;https://github.com/jupyterlab/jupyterlab/pull/5247&gt;`__, `#4924 &lt;https://github.com/jupyterlab/jupyterlab/issues/4924&gt;`__)
  * Add a command-line interface for managing workspaces. (`#5166 &lt;https://github.com/jupyterlab/jupyterlab/pull/5166&gt;`__)
  * Allow safe inline CSS styles in Markdown. (`#5012 &lt;https://github.com/jupyterlab/jupyterlab/pull/5012&gt;`__, `#1812 &lt;https://github.com/jupyterlab/jupyterlab/issues/1812&gt;`__)
  * Add Quit to File menu when appropriate. (`#5226 &lt;https://github.com/jupyterlab/jupyterlab/pull/5226&gt;`__, `#5252 &lt;https://github.com/jupyterlab/jupyterlab/pull/5252&gt;`__, `#5246 &lt;https://github.com/jupyterlab/jupyterlab/issues/5246&gt;`__, `#5280 &lt;https://github.com/jupyterlab/jupyterlab/pull/5280&gt;`__)
  * Rework extension manager user experience. (`#5147 &lt;https://github.com/jupyterlab/jupyterlab/pull/5147&gt;`__, `#5042 &lt;https://github.com/jupyterlab/jupyterlab/issues/5042&gt;`__)
  + Dark theme
  * Show a dark splash screen when using a dark theme. (`#5339 &lt;https://github.com/jupyterlab/jupyterlab/pull/5339&gt;`__, `#5338 &lt;https://github.com/jupyterlab/jupyterlab/issues/5338&gt;`__, `#5403 &lt;https://github.com/jupyterlab/jupyterlab/pull/5403&gt;`__)
  * Fix code completion menu for a dark theme. (`#5364 &lt;https://github.com/jupyterlab/jupyterlab/pull/5364&gt;`__, `#5349 &lt;https://github.com/jupyterlab/jupyterlab/issues/5349&gt;`__)
  * Style CSV viewer for a dark theme. (`#5304 &lt;https://github.com/jupyterlab/jupyterlab/pull/5304&gt;`__, `#3456 &lt;https://github.com/jupyterlab/jupyterlab/issues/3456&gt;`__)
  * Make Matplotlib figures legible in a dark theme. (`#5232 &lt;https://github.com/jupyterlab/jupyterlab/pull/5232&gt;`__)
  * Fix notebook cell dropdown legibility in a dark theme. (`#5168 &lt;https://github.com/jupyterlab/jupyterlab/issues/5168&gt;`__)
  + Bug fixes
  * Various save options in the file menu and toolbar are now disabled when a file is not writable. (`#5376 &lt;https://github.com/jupyterlab/jupyterlab/pull/5376&gt;`__, `#5391 &lt;https://github.com/jupyterlab/jupyterlab/pull/5391&gt;`__)
  * Kernel selector dialog no longer cuts off kernel names. (`#5260 &lt;https://github.com/jupyterlab/jupyterlab/pull/5260&gt;`__, `#5181 &lt;https://github.com/jupyterlab/jupyterlab/issues/5181&gt;`__)
  * Fix focus issues with the toolbar. (`#5344 &lt;https://github.com/jupyterlab/jupyterlab/pull/5344&gt;`__, `#5324 &lt;https://github.com/jupyterlab/jupyterlab/pull/5324&gt;`__, `#2995 &lt;https://github.com/jupyterlab/jupyterlab/issues/2995&gt;`__, `#5328 &lt;https://github.com/jupyterlab/jupyterlab/pull/5328&gt;`__)
  * Fix toolbar button enabled/disabled status. (`#5278 &lt;https://github.com/jupyterlab/jupyterlab/pull/5278&gt;`__)
  * Table alignment is now respected in Markdown. (`#5301 &lt;https://github.com/jupyterlab/jupyterlab/pull/5301&gt;`__, `#3180 &lt;https://github.com/jupyterlab/jupyterlab/issues/3180&gt;`__)
  * Fix syntax highlighting for Markdown lists. (`#5297 &lt;https://github.com/jupyterlab/jupyterlab/pull/5297&gt;`__, `#2741 &lt;https://github.com/jupyterlab/jupyterlab/issues/2741&gt;`__)
  * Use the current filebrowser instead of the default one for various commands. (`#5390 &lt;https://github.com/jupyterlab/jupyterlab/pull/5390&gt;`__)
  * Fix escaping in link handling to conform to Markdown syntax. This means that spaces in link references now need to be encoded as ``%20``. (`#5383 &lt;https://github.com/jupyterlab/jupyterlab/pull/5383&gt;`__, `#5340 &lt;https://github.com/jupyterlab/jupyterlab/pull/5340&gt;`__, `#5153 &lt;https://github.com/jupyterlab/jupyterlab/issues/5153&gt;`__)
  + Build system
  * Use Typescript 3.1. (`#5360 &lt;https://github.com/jupyterlab/jupyterlab/pull/5360&gt;`__)
  * Use Lerna 3.2.1. (`#5262 &lt;https://github.com/jupyterlab/jupyterlab/pull/5262&gt;`__)
  * Node &gt;=6.11.5 is now required. (`#5227 &lt;https://github.com/jupyterlab/jupyterlab/pull/5227&gt;`__)
  * Pin vega-embed version to 3.18.2. (`#5342 &lt;https://github.com/jupyterlab/jupyterlab/pull/5342&gt;`__)
  * Use Jest for services tests. (`#5251 &lt;https://github.com/jupyterlab/jupyterlab/pull/5251&gt;`__, `#5282 &lt;https://github.com/jupyterlab/jupyterlab/pull/5282&gt;`__)
  * Make it easier for third party extensions to use the JupyterLab test app and testing utilities. (`#5415 &lt;https://github.com/jupyterlab/jupyterlab/pull/5415&gt;`__)
  * Fix ``jupyter lab clean`` on Windows. (`#5400 &lt;https://github.com/jupyterlab/jupyterlab/pull/5400&gt;`__, `#5397 &lt;https://github.com/jupyterlab/jupyterlab/issues/5397&gt;`__)
  * Fix ``jupyter lab build`` on NFS. (`#5237 &lt;https://github.com/jupyterlab/jupyterlab/pull/5237&gt;`__, `#5233 &lt;https://github.com/jupyterlab/jupyterlab/issues/5233&gt;`__)
  * Build wheels for Python 3 only. (`#5287 &lt;https://github.com/jupyterlab/jupyterlab/pull/5287&gt;`__)
  * Migrate to using ``jupyterlab_server`` instead of ``jupyterlab_launcher`` and fix the app example. (`#5316 &lt;https://github.com/jupyterlab/jupyterlab/pull/5316&gt;`__)
  * Move Mathjax 2 typesetter to a library package. (`#5259 &lt;https://github.com/jupyterlab/jupyterlab/pull/5259&gt;`__, `#5257 &lt;https://github.com/jupyterlab/jupyterlab/issues/5257&gt;`__)
  + For Developers
  * Default toolbar buttons can be overridden, and mime renderers can now specify toolbar buttons. (`#5398 &lt;https://github.com/jupyterlab/jupyterlab/pull/5398&gt;`__, `#5370 &lt;https://github.com/jupyterlab/jupyterlab/pull/5370&gt;`__, `#5363 &lt;https://github.com/jupyterlab/jupyterlab/issues/5363&gt;`__)
  * A JupyterLab application instance can now be given a document registry, service manager, and command linker. (`#5291 &lt;https://github.com/jupyterlab/jupyterlab/pull/5291&gt;`__)</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1556193600">- Update to 0.35.5
  * use target=_blank for download links
  * Release filebrowser@0.19.4
- Rename to to match jupyter package naming guidelines.
- Add rpm macros</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1557835200">- Update to 0.35.6
  * Publish outputarea 0.19.2
  * Make sure the cached value of `_lastStream` reflects the removed
    characters so we don't have to remove them over and over again.
- Split directories and macros into separate package.</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1566302400">- Update to 1.0.6
  + User Facing Changes
  * We have added first class support for find and replace across JupyterLab. It is currently supported in notebooks and text files and is extensible for other widgets who wish to support it.
  * We have integrated the JupyterLab Status Bar package into the core distribution. Extensions can add their own status to it as well.
  * We now include the JupyterHub extension in core JupyterLab, so you no longer need to install ``@jupyterlab/hub-extension``.
  * JupyterLab now has a File &gt; Logout menu entry when running with JupyterHub
  * now have a printing system that allows extensions to customize how documents and activities are printed.
  * The launcher displays longer kernel names and supports keyboard navigation
  * Notebook outputs without any valid MimeType renderers will not be displayed, instead of displaying an error
  * Add tooltip to file browser root breadcrumb icon showing the server root, if it is available
  * Downloading a file will no longer open a new browser window
  * Rename the help "Inspector" to "Contextual Help" and move it to the "Help" menu
  * Update many of the icons to make them more consistent
  * Update the settings UI to remove the table view
  * Replace FAQ Extension with link to JupyterLab documentation
  * Change the default keyboard shortcut for closing a tab to be ``Alt+w`` instead of ``Cmd/Ctrl+w`` to avoid conflicts with operating systems.
  * Show help text in Inspector window to describe you should select a function
  * Fixes SVG rendering
  * Add support for dropping a tab in the tab bar area.
  * Switch some default shortcuts to use ``Accel`` instead of ``Ctrl`` so they are more natural for Mac users
  * Add ability to tell between hover and selected command palette items
  * Hide the "Last Modified" column when the file browser is narrow
  * Support copy/paste in terminal and Mac OS using ``Ctrl+C`` and ``Ctrl+V``
  * Support scrolling in running kernels panel
  * Adds ability to "Merge Selected Cells" in the context menu in the notebook
  * Turn On Accessibility In Xterm.js to make it more compatible for screen readers
  * When selecting cells using the keyboard shortcuts, we now skip collapsed cells
  * Supporting opening ``.geojson`` files in JSON viewer
  * Performance fixes for text-based progress bars
  * Add support for rendering Vega 5 and Vega Lite 3 while keeping the existing Vega 4 and Vega Lite 2 renderers
  * Drag and drop console cells into a notebook or text editor
  * Drag and drop notebook cells into a console or text editor
  * The extension manager search now sorts extensions by the score assigned to them by NPM instead of alphabetically
  * Notify the user when a kernel is automatically restarted, for example, if crashes from an out of memory error
  * Expose the extension manager in a command and menu item
  * Add command to render all Markdown cells
  * Supports using shift to select text in output area
  * Output areas that opened in new views are restored properly now on reload
  * Add support for managing notebook metadata under a new "Advanced Tools" section in the cell tools area. The cell and notebook metadata now always reflect the current state of the notebook
  * Inherit terminal theme from core theme
  * Adds a built-in HTML viewer so that you can view HTML files
  * New workspaces are now automatically generated when you create a new window with the same workspace name.
  * We now add a hint to the context menu to describe how you can access the native browser menu
  * The tabs on the left panel have changed to make them more understandable
  * Start a new terminal when the page is refreshed and the old terminal has died
  * Add a command to open the main menus, which can be assigned to a keyboard shortcut to open and navigate menus without a mouse
  * The contextual help now updates based on changes in the cursor from the mouse instead of just from the keyboard
  * The launcher now updates when the kernels change on the server
  * Retain cell auto scroll behavior even when a cell output is cleared
  * If you link to a relative path that is not a file in a markdown cell, this will now be preserved instead of changing it to a file URL
  * Adds the ability to link to a certain row in a CSV file and have the viewer open to that row
  * We have improved the performance of switching to a large notebook
  * The vdom extension now supports event handling, so that you can have kernel code run in response to user interaction with the UI
  * Adds the ability to run "Run All Code" and "Restart Kernel and Run All Code" in code and markdown files
  * We now remember what line ending a text file has when loading it, so that files with ``CRLF`` line endings will properly be saved with the same endings
  * Fixes rendering of SVG elements in HTML MimeType output
  * Allow copying files by holding down ``Ctrl`` when dragging them in the file browser
  * Switch the hover modified time in the file browser to use the local format
  * We have added a default keyboard shortcut of ``Ctrl Shift Q`` for closing and cleaning up a file
  * Adds the ability to find and go to a certain line in the CSV viewer
  * Add the ability to create new text and markdown files from the launcher and command palette
  * A "New Folder" option has been added to the file browser context menu
  * The ANSI colors are now the same as those in the classic notebook
  * Send complete statements instead of current lines when stepping through code in a cell
  * Description list styles (``dl``, ``dt``, ``dd``) are improved to be consistent with the nteract project
  + Settings
  * The settings system has been rewritten and now uses json5 as the syntax, which supports comments and other features for better human readability.
  * The keyboard shortcut system has been rewritten and now displays a list of system commands in the settings comments.
  * There are new settings for many following items, including:
    &gt; Adds an option to shut down terminals and notebook kernels when they are closed
    &gt; Scrolling past the end of a notebooks and text editor document
    &gt; Text editor code folding, rulers, and active line highlighting
    &gt; Markdown viewer options
    &gt; Terminal scrollback and other settings
    &gt; The autosave interval
    &gt; The file browser showing the current active file
    &gt; Custom scrollbar styling for dark themes
  + Command Line Changes
  * Installing extensions will be quieter and adds a ``--debug`` to extension installing
  * We now support running JupyterLab when its application directory is a symlink
  * Add ``--all`` flag to ``labextension uninstall`` to remove all extensions
  * Adds the ability to override the base URLs from the config
  * Updates to workspaces CLI command
  + Extension Development Changes
  * We have rewritten how extensions provide keyboard shortcuts and interact with the settings system. If you previously defined keyboard shortcuts or used the settings mechanism, you will need to update your extension
  * We have renamed the plugin type from ``JupyterLabPlugin`` to ``JupyterFrontEndPlugin``. The application arg is also renamed from ``JupyterLab`` to  ``JupyterFrontEnd`` and some its functionality has been moved to a separate ``ILabShell`` plugin
  * The lab shell ``addToMainArea``, ``addToLeftArea``, ``addToTopArea``, ``addToRightArea``, and ``addToBottomArea`` functions have been replaced with a single ``add()`` function that takes the area as an argument. Replace ``addToMainArea(widget, options)`` with ``add(widget, 'main', options)``, etc.
  * Rename ``pageUrl`` to ``appUrl`` in the server connection
  * ``MainAreaWidget`` instances now forward update requests to their ``content``
  * The theme data attributes are renamed and moved to the document body element. If you are relying on these attributes in CSS to conditionally style based on the theme, you should update their names. For example ``data-theme-light`` is now ``data-jp-theme-light``.
  * Extensions which require CSS should no longer import their CSS files into their Javascript files. Instead, they should specify a root CSS file in the ``style`` attribute in their ``package.json``, and JupyterLab will automatically import that CSS file.
  * ``Dialog.prompt`` has been replaced by a number of type-specific dialogs such as ``InputDialog.getString``, ``InputDialog.getBoolean``, etc.
  * When a ``RenderMime`` widget is re-rendered, the default behavior is to remove any existing content in the DOM. This can be overridden if needed.
  * We have updated our internal TypeScript version to 3.5.1 and our compile target to ``ES2017``. Extensions may need to upgrade their TypeScript version and target as well.
  * We have updated the typings for some of the Kernel messages so that they better match the spec.
  * A ``connectionFailure`` signal has been added to some of the manager classes, which can be used to detect when a connection to the server is lost
  * Add rate limiting and polling utilities to ``coreutils``  to use for throttling and debouncing of API requests
  * Require session when instantiating terminal widget
  * Provides a signal to see what items are opened in a directory listing
  * Ads the ability to add widget above the main work area to a top header area
  * Renames ``contextMenuFirst`` to  ``contextMenuHitTest`` in the ``JupyterFrontEnd``
  * Removes the ``initialCommand`` arg from the terminal creation command.
  * Adds ``--jp-code-cursor-width0``, ``--jp-code-cursor-width1``, and ``--jp-code-cursor-width2`` variables to the themes to support changing the cursor width if you change the font size
  * Adds the ability to insert a new item to the toolbar before or after another item
  * Adds the ability for extensions to register new CodeMirror modes
  * We have removed the ``JUPYTERLAB_xxx_LOADER`` Webpack loaders, instead you should use the loader directly in the URL as Webpack supports it
  * Adds the ability to handle fragments for document widgets
  * We have added a  ``@jupyterlab/ui-components`` package that contains reusable React components to be used internally and in extensions. Feel free to use this to create extension UIs with consistent styles
  * The ``showErrorMessage`` function now lets you customize the buttons it uses
  * We now provide helpers for using React components within JupyterLab. If you were previously using ``ReactElementWidget`` you should switch to using ``ReactWidget``.
  * The share link command has been moved to its own extension so that it can be overridden
  * Creating a new services session now requires passing a kernel model instead of a kernel instance
  * We upgraded the Webpack raw file loader. The new version of the raw loader exports ES2015 modules, so this may require changes in extensions that import files using the raw loader. For example, if you did ``require('myfile.md')`` to get the content of `myfile.md` as a string, you now should import it using ES2015 `import` syntax, or use `require('myfile.md').default`.
  * Widget factories now can support custom cloning behavior from an optional source widget
  * We have renamed the type ``InstanceTracker`` to ``WidgetTracker``.
  * In order to add widgets to the main area (e.g. as in the old XKCD extension tutorial), the correct syntax is now ``app.shell.add(widget)`` or ``app.shell.add(widget, 'main')``,</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1566561600">- Update to 1.0.9
  * integrity
  * update packages
  * fix package name
  * enforce jinja2 requirement
- jupyterlab-discovery has been merged into jupyterlab</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1566820800">- Use better way to handle tornado version compatibility.</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1573560000">- Update to version 1.2.2
  + User-facing changes
  * Select cells from the current cell to the top of the notebook with ``Shift Home``, to the bottom of the notebook with ``Shift End``
  * Add a log console extension to display unhandled messages and other activity
  * Allow the npm ``max-old-space`` option to be specified outside of JupyterLab
  * Only display node structure in a JSON tree view for arrays and empty objects
  * Make much smaller distribution packages by not building JavaScript source maps for releases.
  * Add support for pasting cell attachments and dragging attachments from the file browser
  * Add a new ``registry`` configuration parameter to override the default yarn repository when building
  + For developers
  * Update the Markdown renderer (``marked``) to 0.7.0
  * Remove datagrid as a singleton, allowing extensions to use newer versions
  * Add metadata to the kernelspec information
  * Allow different mimetypes for the clipboard data
  * Add inline svg icon support to toolbar buttons
  * Add PageConfig functions to query if a plugin is deferred or disabled
  * Allow for renderers for nbformat.ierror to be created
  * Refactor ``fileeditor-extension`` for modularization
  * Add execution timing to cells
  + Bugfixes
  * Fix the ``file-browser-path`` query parameter
  * Skip custom click behavior on links when the download attribute is set
  * Fix opening multiple browser tabs in Safari
  * Fix context menus on SVG icons
  * Fix overwriting of target attribute of anchors rendered by ``IPython.display``
  * Fix multi-cursor backspacing
  * Fix mult-cursor cell splitting</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1575892800">- Update to version 1.2.3
  * Update status bar index.css to be hand-curated
  * fix dropdown option style issue in Windows
  * Update the ui-components css to reflect the correct dependencies.
- Rename spec file to python-jupyterlab to work better
  with OSC python tooling.</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1575979200">- Use pyproject_install macro (boo#1094323)</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1579089600">- Update to 1.2.4
  * update yarn.lock
  * update terser dep</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1580212800">- Update to 1.2.6
  * Update dependencies</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1583236800">- Update to 2.0.0
  + User-facing changes
  * New user interface for notebook cell tags
  * File info display when hovering on a file in the file browser
  * Support for searching outputs in notebooks
  * ``Ctrl Shift .`` and ``Ctrl Shift ,`` shortcuts move focus to the next and previous tab bar in the main area, respectively
  * ``Shift Home`` and ``Shift End`` shortcuts in a notebook select all cells from the current cell to the top or bottom of a notebook, respectively
  * Explicit "No Kernel" button in the kernel selection dialog for new notebooks
  * Notebook ``recordTiming`` advanced setting to control whether execution timing information is stored in notebook files
  * "Select current running or last run cell" command added (requires notebook ``recordTiming`` advanced setting to be set to true)
  * Codemirror ``lineWiseCopyCut`` advanced setting to control the behavior of the copy/cut keyboard shortcuts when there is no selection
  * Refreshed the command palette and property inspector sidebar icons and user interfaces
  * "New File" and "New Markdown File" items in file browser context menu
  * "Download" item in File menu
  * "Restart Kernel and Run up to Selected Cell" item in notebook Kernel menu
  * In extension manager, the "enable" button is now only shown for installed extensions
  * Dialogs can now be closed by clicking outside of them
  * ``documentsearch:startWithReplace`` command to open the document find overlay with replace. There is not currently a default keyboard shortcut for this, but one can be assigned as a custom keyboard shortcut in Advanced Settings.
  * ``#`` added to the CSV Viewer delimiter options
  * The JSON viewer now only displays structure hints for arrays and empty objects for a more streamlined feel
  * Optional platform-aware keyboard shortcut fields ``linuxKeys``, ``macKeys``, and ``winKeys`` in keyboard shortcut definitions
  * Added options for ``jupyter lab clean`` to clean specific parts of the build, such as ``--extensions``, ``--settings``, ``--static``, and ``--all``
  * Removed the vega 4 and vega-lite 2 renderers (vega 5 and vega-lite 4 is included in JupyterLab by default). These legacy renderers may be available via custom extensions
  * JupyterHub users should use the ``c.Spawner.default_url = '/lab'`` setting instead of the deprecated and now removed ``labhubapp``
  + Backward incompatible changes
  * Switch from ``@phosphor`` to ``@lumino`` dependencies.
  * Factor out the ``settingsregistry`` and ``statedb`` packages from coreutils
  * Rework services architecture (sessions, kernels, terminals) and rename ``ClientSession`` to ``SessionContext``
  * Upgrade to TypeScript 3.7
  * Remove ``polling`` from coreutils in favor for ``@lumino/polling``
  * TypeScript strict null checking in core packages
  * Update state database list method to query based on namespace match.
  * Address code todo items and deprecations for 2.0
  * Update Console panel tracker widgets
  * Update contribution guide to require node v12+
  * New API for the ``Running`` sidebar extension
  * Clean up handling of icons under unified LabIcon
  + Other changes
  * New property inspector used to display the properties of the currently selected main area widget
  * Allow metadata for launcher items
  * Allow default file browser to restore manually.
  * Upgrade bundled yarn to 1.21.1
  * Make session dialogs configurable
  * Support transient editor configs
  * Optionally force new browser tab
  * Update core dependencies (e.g., ``codemirror``, ``xterm.js``, ``markdown``, ``fontawesome``, etc.)
  * Add storybook to ``ui-components``
  * Add explicit documentation encouraging people to re-use lab components
  * Enable TypeScript sourcemaps for debugging locally installed labextensions
  * Add ``UseSignal`` example to the docs
  * Add ``env`` prop to kernel options
  * Add kernelspec metadata
  * Allow different mimetypes for the clipboard data
  * Add password dialog to apputils
  * Alias phosphor packages to lumino to allow a deprecation period for phosphor
  * Match react version in ui-components peerdependencies
  * Fix lint-staged for both win and mac
  * Update websocket workaround for node environments
  * Fix handling of linked extensions
  * Fix extension compatibility checks for prereleases and extensions supporting multiple major versions of JupyterLab
  * Teach update-dependency about more range specifiers and make it adopt the current range for any tag
  * Add support for giving a rank to items in the top area
  * Apply all options to the initial JupyterLab application instance
  + Bugfixes
  * "Copy Shareable Link" in the file browser context menu now properly works in JupyterHub
  * Update Mathjax CDN in the cell and console examples
  * Revert ensure-max-old-space now that Node 12+ has better default memory ceilings
  * Resolve race condition between default file browser and tree urls.
  * Fix handling of code editor refresh
  * Start new notebooks in edit mode
  * Use consistent versions of React
  * Add scrollbar styles to nbconvert-css
  * Close output views when corresponding notebooks are closed
  * Fixed incorrect white background for new command palette icon
  * Block fetching the settings for a plugin that is disabled
  * When timing metadata changes, ensure signal fires
  * Prevent memory leaks in Vega renderer
  * Handle cell execution cancellation when cell is disposed
  * Fix dropdown option style issue on Windows
  * Make sure label is linked to a control when checking for element type
  * Refine log console message UX
  * Fix multicursor backspacing
  * Reset log display and count when non-notebook tab gets activated
  * Fix Safari multiple tabs by working around a Safari bug.
  * Skip custom click behavior on links when the download attribute is set
  * Fix context menu hit test to deal with SVG nodes.
  * Fix overwriting of target attribute of anchors rendered by ``IPython.display``
  * Fix file browser location in tree view
  * Stop too many fetch calls in docmanager-extension
  * Ensures that ``Shift Tab`` dedent shortcut works correctly in the file editor
  * Fix unexpected jump to last search result when using documentsearch
  * Fixed refresh issue for html viewer
  * Fix for center-aligned images with IPython.display.image
  * Changes to setting editor should trigger application dirty state
  * Move vega from "devdependencies" to "dependencies"
  * Restore default file browser manually.
  * Use default ``app_dir`` when ``app_dir`` is ``''``</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1583496000">- Requires nodejs/npm &gt;= 10</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1585742400">- We should work with tornado 4, 5 and 6.
- The bugs were found in tornado 6.0.1 and 6.0.2 were fixed
  by upstream developers</changelog>
  <changelog author="Steve Kowalik &lt;steven.kowalik@suse.com&gt;" date="1659009600">- Update to 2.2.10:
  * Remove `form` tags' `action` attribute during sanitizing, to prevent an
    XSS (CVE-2021-32797) (bsc#1196663)
  * Header ?Content-Type? should not be overwritten
  * Do not use token parameters in websocket urls
  * Properly handle errors in async browser_check
  * Cells can no longer be executed while kernels are terminating or
    restarting. There is a new status for these events on the Kernel Indicator
  * Add styling for high memory usage warning in status bar with nbresuse
  * Adds support for Python version 3.10
  * Support live editing of SVG with updating rendering
  * Lazy load codemirror theme stylesheets
  * Add feature request template + slight reorg in readme
  * Add link to react example in extension-examples repo
  * Close correct tab with close tab
  * Remove unused css rules
  * Simplified multicursor backspace code
  * Fix recent breaking changes to normalizepath in filebrowser
  * Handle quit_button when launched as an extension
  * Add worker-loader
  * Fix icon sidebar height for third party extensions
  * Scrolls cells into view after deletion
  * Support Node.js 10+
  * Select search text when focusing the search overlay
  * Throttle fetch requests in the setting registry?s data connector
  * Avoid redundant checkpoint calls on loading a notebook</changelog>
</package>
<package pkgid="defd4ab501e50b2da95752fa0d26dace38084256d4de11ccf1c5424fa1a0c27c" name="python-mechanize" arch="src">
  <version epoch="0" ver="0.4.8" rel="bp154.2.3.1"/>
  <changelog author="saschpe@suse.de" date="1316606400">- Set license to "(BSD-3-Clause or ZPL-2.1) and BSD-3-Clause", bnc#719310</changelog>
  <changelog author="saschpe@gmx.de" date="1331553600">- Simplified macro usage</changelog>
  <changelog author="speilicke@suse.com" date="1382616000">- Require python-setuptools instead of distribute (upstreams merged)</changelog>
  <changelog author="saigkill@opensuse.org" date="1383998400">- changed BR python-clientform to python-ClientForm (now it matches)</changelog>
  <changelog author="p.drouand@gmail.com" date="1383998401">- Fix changes file by removing name of committer
- Fix Group : Development/Libraries/Python &gt; Development/Languages/Python</changelog>
  <changelog author="jmatejek@suse.com" date="1503576000">- singlespec auto-conversion</changelog>
  <changelog author="mcepl@suse.com" date="1528977600">- Clean SPEC file (only py2k, but tests are enabled and run)</changelog>
  <changelog author="toddrme2178@gmail.com" date="1533556800">- Remove unneeded dependencies.</changelog>
  <changelog author="tchvatal@suse.com" date="1535544000">- Require full python2 as it needs SSL module</changelog>
  <changelog author="mcepl@suse.com" date="1547812800">- Upgrade to 0.4.0:
  * Python 3 compatibility
  * Add a finalize_request_headers callback to Browser to allow
    users full control of what headers are sent with every
    request
  * Preserve header ordering when making HTTP requests
  * Fix processing of http-equiv meta tags incorrectly lower casing
    the content
  * Fix error when a textbox contained within a form contains
    unicode characters
- Add missing BR for testing (Twisted and zope.interface)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554465600">- Update to 0.4.1:
  * A couple of python 3 specific fixes for servers with misisng robots.txt
    files and also errors when using basic/digest auth</changelog>
  <changelog author="Meera Belur &lt;mbelur@suse.com&gt;" date="1558094400">- Update to v0.4.2
  * A couple of python 3 specific fixes for proxy authorization and
    adding controls to forms</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568203200">- Update to 0.4.3:
  * When filling forms with unicode strings automatically encode them into
    the correct encoding fr the HTML page being viewed
  * Guess content type when uploading files if not specified
  * py3 compat - Have the version of simple cookies be 0 rather than None</changelog>
  <changelog author="Bogdano Arendartchuk &lt;BArendartchuk@suse.com&gt;" date="1573560000">- added missing dependencies: Twisted, zope.interface and html5lib</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1579694400">- Update to 0.4.5:
  * Add a set_html() method to the browser object
- Update to 0.4.4:
  * URLs passed into mechanize now automatically have URL unsafe
    characters percent encoded. This is necessary because newer
    versions of python disallow processing of URLs with unsafe
    characters. Note that this means values return by
    get_full_url(), get_selector() etc will be percent encoded.</changelog>
  <changelog author="Steve Kowalik &lt;steven.kowalik@suse.com&gt;" date="1643025600">- Update to 0.4.7 (bsc#1207242, CVE-2021-32837):
  * Fix the ~ character being percent escaped when sending URLs to servers.
  * Python 3.10 compatibility
  * Fix a bug in the regex used to parse www-authenticate headers that could
    lead to Denial-of-Service</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1658664000">- update to 0.4.8:
  * Handle mal-encoded robots.txt files more gracefully
  * Support HTTP 308 redirects</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1659268800">- Add python-mechanize-setup.cfg.patch to fix mechanize not
  found during build. (boo#1202003)</changelog>
  <changelog author="Ben Greiner &lt;code@bnavigator.de&gt;" date="1659355200">- Reference upstream patch in specfile for future updates
- Remove catchall in files section that would have found the
  mistake
- Update shebang fix commands
- Fix requirements
- Update description</changelog>
  <changelog author="Steve Kowalik &lt;steven.kowalik@suse.com&gt;" date="1665489600">- Remove unneeded BuildRequires on python.</changelog>
</package>
<package pkgid="35e4a1044d7a0fb792e7b17f0f2c4b7ebd289ce9af18b2cb2e8cfc27417545a6" name="python-pivy" arch="src">
  <version epoch="0" ver="0.6.7" rel="bp154.2.3.1"/>
  <changelog author="asterios.dramis@gmail.com" date="1336219200">- Initial release (version 0.5.0hg.609).</changelog>
  <changelog author="kkaempf@suse.com" date="1505390400">- update to 0.6.2
  * builds for python3 (linux: 3.4, 3.5, 3.6; win: 3.5, 3.6)
    or python2 (2.7)
  * uses pyside instead of pyqt for soqt4 bindings
  * has many fixes (especially for FreeCAD)
- switch to github.com/FreeCAD/pivy, coin3d.org is dead</changelog>
  <changelog author="badshah400@gmail.com" date="1513425600">- Convert specfile to python-singlespec: fixes build failures in
  Factory. Doesn't build against python2 for unknown reasons, so
  turn off python2 modules until this is fixed.
- Use fdupes (added to BuildRequires) to link duplicate files.</changelog>
  <changelog author="dev@stellardeath.org" date="1514980800">- Fix build failure when using more than one python version:
  swig wrapper files were only generated the first time and
  and then kept for subsequent builds.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1539086400">- Update to 0.6.3
  * qt5-support (qt4 not supported anymore)
- Update to 0.6.4
  * bool(coin.SoGroup) -&gt; True (also if group is empty) [same behaviour as py2]
  * add graphics arrow object
  * making it possible to compile with older coin version (without cmake) -&gt; setup_old.py
  * adding back qt4 compatibility (but tests are still qt5 depenent)
  * added pivy.version
  * some fixes
- %python_expand call to fdupes</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1549281600">- Add Fix-issue-39-PyUnicode_AsUTF8-returns-const-char.patch to fix
  build in Factory</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1557748800">- Add 0001-Allow-using-SoQt-snapshots-with-stable-Coin-version.patch
  This will allow using SoQt snapshots with stable Coin releases.
- Add 0002-Fix-the-qmake-executable-name.patch. The qmake executable
  is called qmake-qt5 for openSUSE.
- Run spec-cleaner</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1584187200">- Update to 0.6.5
  - Unifying release for merge of FreeCAD/pivy and
    bitbucket.org/coin3d/pivy repos
  - change pivy.graphics API to follow pep8 naming scheme
    suggestion.
  - workaround for beveled text
  - swig4.0 fix
  - update to latest coin (additional fakeheaders)
  - example Complex3dText: add license and shebang
    this was unintentional removed at some point
- Remove Fix-issue-39-PyUnicode_AsUTF8-returns-const-char.patch
  applied upstream
- 0001-Allow-using-SoQt-snapshots-with-stable-Coin-version.patch
  adjusted</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1588852800">- Use correct macro %{python_version} instead of %{py_ver} to
  pack egg-info file.
- Drop macro definitions needed for obsolete openSUSE versions.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1645617600">- Update to 0.6.6:
  * finalizing cmake support
  * adding bindings to SoGeo*
- Drop 0001-Allow-using-SoQt-snapshots-with-stable-Coin-version.patch
- Use arch specific directory, add fix_python_installdir.patch
- Use cmake for building, drop
  0002-Fix-the-qmake-executable-name.patch.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1647000000">- Fix name of python interpreter executables (python3.8 instead of
  python38).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1647259200">- Fix one more case where sed env python was replaced with
  python38 instead of python3.8.</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1651492800">- Update to 0.6.7:
  * aiming at python3.10 support
- Remove upstreamed fix_python_installdir.patch</changelog>
</package>
<package pkgid="bffc8af4949c39662012ee6d1c001b569e5d75d33565ea170c798ce72bceb2f4" name="python-pssh" arch="noarch">
  <version epoch="0" ver="2.3.4+git10.d4909c9" rel="bp154.2.3.1"/>
  <changelog author="tabraham@novell.com" date="1331640000">- Update to 2.3.1
  * fixed a problem where man pages were omitted from the tar file
- Changes from 2.3
  * added a --inline-stdout option (issue #57).  Thanks to
    pablo.barbachano for the patch.
  * Added a PSSH_HOST environment variable (issue #62).
  * Added a --version option (issues #33 and #45)
  * Expanded the pssh man page and added man pages for all other
    commands (issues #10 and #55).
  * Fixed askpass on Mac OS X 10.6.7 (issue #50)
  * Many other small fixes</changelog>
  <changelog author="dmuhamedagic@suse.com" date="1378900800">- Add pssh_status_order.patch: Return statuses of ssh commands in
  the proper order (helps in crmsh resource testing and history)
  (bnc#828897)</changelog>
  <changelog author="dmuhamedagic@suse.com" date="1379073600">- Update pssh_pcmk_nodes.patch: Update interface to crm_node (its
  output changed)</changelog>
  <changelog author="kgronlund@suse.com" date="1389268800">- Changed to .xz compression
- Updated to latest upstream (cs: b6c8d715)
- added support for multiple source paths in prsync (issue #64)
- made a relative import explicit (issue #66)
- Add support for select.poll on systems where it is available (issue #72)
- Remove restriction on remote relative paths (Issue #83)
- Added programmatic API (with tests)
- Fixed teardown handling for tests
  Cleaned up and added patches:
- Rename pssh-remove_shebangs.patch:
  to 0001-Remove-shebangs-from-library-files.patch
  Also updated patch format
- Rename pssh-man_dir.patch:
  to 0006-openSUSE-Adjust-man-pages-destination.patch
  Also updated patch format
- Rename pssh-quiet.patch: to 0002-Add-quiet-option.patch
- Rename pssh_pcmk_nodes.patch:
  to 0008-openSUSE-add-C-pcmk_nodes-option-to-get-list-of-node.patch
- Rename pssh_askpass_dir.patch:
  to 0007-openSUSE-Add-openSUSE-specific-pssh-askpass-location.patch
- Rename pssh_status_order.patch:
  to 0003-Fix-order-of-command-statuses-returned-by-the-Manage.patch
- Add 0005-Add-an-explicit-API-entrypoint.patch:
  Add an explicit API entry point
- Add 0004-test-Teardown-code-was-never-called.patch:
  Fixes test cases so teardown code is called</changelog>
  <changelog author="kgronlund@suse.com" date="1389787200">- Clarify error message when API calls fail
- Detect use of absolute path when slurping</changelog>
  <changelog author="kgronlund@suse.com" date="1419508800">- Add: 0001-Prepend-hostname-on-each-line-when-P-is-set.patch
  - Prepend hostname on each line when -P is set (fate#318220)
- Add: 0002-Fix-quiet-option-after-API-patch.patch
  - Fix quiet option after API patch</changelog>
  <changelog author="tchvatal@suse.com" date="1467288000">- Cleanup slightly with spec-cleaner no factual change</changelog>
  <changelog author="varkoly@suse.com" date="1629547200">- Update to version 2.3.4+git10.d4909c9:
  * add install instruction
  * fix manpages
  * prsync: support downloading
  * bin/*: explicitly run with python3
  * binary files do not support line buffering, fix #118
  * add flag for file append
  * change default file write behaviour to append over recreate
  * remove ancient workaround to workaround a new bug
  * Bump version to 2.3.4
  * support only Python 3.5+
- Use %license for current distribution versions.
- Remove distribution specific special cases as far as possible.
- Adapt source url in spec and switch to _service
- Remove patches applied in the new version:
  * 0004-test-Teardown-code-was-never-called.patch
  * 0005-Add-an-explicit-API-entrypoint.patch
  * 0006-openSUSE-Adjust-man-pages-destination.patch
  * 0002-Fix-quiet-option-after-API-patch.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1629720000">- Fix spec to be able to build on openLeap 15.N</changelog>
  <changelog author="Yan Gao &lt;ygao@suse.com&gt;" date="1648036800">- spec: use python3_sitelib macro rather than python_sitelib
- bin: fix inconsistent use of tabs and spaces in indentation
- psshlib: fix invalid syntax of except
- Update:
  * 0008-openSUSE-add-C-pcmk_nodes-option-to-get-list-of-node.patch</changelog>
</package>
<package pkgid="b904a8b1f235e2e92c05b919a8a2be876b33c91ee118ca889976ff4ceba31b77" name="python-slixmpp" arch="src">
  <version epoch="0" ver="1.4.2" rel="bp154.2.3.1"/>
  <changelog author="sor.alexei@meowr.ru" date="1481371200">- Initial package.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1486814400">- Update to version 1.2.4:
  * Test more things before trying to build our stringprep module.
  * XMLStream: Break a long line to make it more readable.
  * Check for XML parsing errors and disconnect in that case.
  * Add missing asyncio.coroutine decorators.
  * Fix a partially-merged Google plugin from the commit acc52fd.
  * Fix an issue with carbons (CVE-2017-5589, bsc#1024690).</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1516449600">- Update to version 1.3.0:
  * Implement XEP-0300: Use of Cryptographic Hash Functions in XMPP.
  * Return a Future on clientxmpp.get_roster().
  * Fix custom stanza examples.
  * Fix the HTTP over XMPP and GTalk examples.
  * xmlstream: Warn when the parser is None when data is received.
  * Add an XMPP classifier to setup.py.
  * sasl: Merge two bytes instead of concatenating them at runtime.
  * Fix the port being set to 0 when connecting via hostname.
  * Pass SSL context to plain TLS connections.
  * xmlstream: Remove pygments dumping.
  * XEP-0319: Use the correct timezone.
  * Update RSM for asyncio.
  * Update the MAM plugin for asyncio and the new namespace.
    And add an example.
  * XEP-0054: Fix parsing the BINVAL element.
  * Record the current connection attempt in a future and allow
    cancellation.
  * Add a Markup plugin.
- Add the missing requirement of GnuPG.
- Enable tests.</changelog>
  <changelog author="jengelh@inai.de" date="1518350400">- Trim future goals from description, say what it does now.</changelog>
  <changelog author="mcepl@suse.com" date="1532001600">- Clean SPEC file</changelog>
  <changelog author="mcepl@suse.com" date="1532088000">- Use python3 -munittest discover -v -s tests instead of run_tests.py</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1534248000">- Update to version 1.4.0:
  * No changelog available.
- Use python-rpm-macros.</changelog>
  <changelog author="mvetter@suse.com" date="1547208000">- Update 1.4.1:
  * jid: Make property aliases proper aliases.
  * stanzabase: Remove python2 legacy.
  * fixing uncaught async exceptions due to missing await
  * XEP-0363: Add a domain argument to discover an upload service
  * XEP-0363: Also check for disco#info?s feature
  * XEP-0030: Don?t call the timeout_callback on each domain
  * Decode bytes in GSSAPI handling, as expected by the kerberos module API
- Update source URL
- Add requires python3-aiohttp: was needed for XEP-0363 since 1.4.0</changelog>
  <changelog author="mvetter@suse.com" date="1547208001">- Change source URL from GH to https://lab.louiz.org as requested</changelog>
  <changelog author="mvetter@suse.com" date="1549368000">- Update to 1.4.2:
  * Do not do channel binding without TLS
  * Add default timeout of 120s for IQs (prevent slowdowns)
  * Fix CVE-2019-1000021 (bsc#1124322)
  * Do not query vcard avatars unconditionnally
  * Fix GSSAPI (Jelmer Vernoo?)</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1571054400">- Replace %fdupes -s with plain %fdupes; hardlinks are better.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1670328000">- bsc#1205433 (CVE-2022-45197) Fix certificate hostname validation
  * Add slixmpp-CVE-2022-45197.patch</changelog>
</package>
<package pkgid="d03851d04bc2569543deac93fc3e1adea8ed518d180f1a0b2e6d6655d5d1510f" name="python3-Django" arch="noarch">
  <version epoch="0" ver="2.2.28" rel="bp154.2.3.3"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553342400">- Add patch to build with PyYAML &gt;5:
  * pyyaml5.patch</changelog>
  <changelog author="Ond?ej S&#xFA;kup &lt;mimi.vx@gmail.com&gt;" date="1554292800">- update to 2.2
- drop pyyaml5.patch
- add i18n_test.patch
  * HttpRequest.headers to allow simple access to a request?s headers.
  * Database-level constraints on models.
  * Watchman compatibility for runserver to improve the performance</changelog>
  <changelog author="John Vandenberg &lt;jayvdb@gmail.com&gt;" date="1554897600">- Add test_clear_site_cache-sort.patch to workaround flaky test
- Add bcond_with for selenium and memcached, as those tests are inactive,
  and add missing dependencies and setup for selenium testing
- Move removal of executable bit from a JavaScript file to %prep
- Fix fdupes</changelog>
  <changelog author="Alberto Planas Dominguez &lt;aplanas@suse.com&gt;" date="1557144000">- Update to 2.2.1
  * Fixed a regression in Django 2.1 that caused the incorrect quoting
    of database user password when using dbshell on Oracle (#30307).
  * Added compatibility for psycopg2 2.8 (#30331).
  * Fixed a regression in Django 2.2 that caused a crash when loading
    the template for the technical 500 debug page (#30324).
  * Fixed crash of ordering argument in ArrayAgg and StringAgg when it
    contains an expression with params (#30332).
  * Fixed a regression in Django 2.2 that caused a single instance
    fast-delete to not set the primary key to None (#30330).
  * Prevented makemigrations from generating infinite migrations for
    check constraints and partial indexes when condition contains a
    range object (#30350).  Reverted an optimization in Django 2.2
    (#29725) that caused the inconsistent behavior of count() and
    exists() on a reverse many-to-many relationship with a custom
    manager (#30325).
  * Fixed a regression in Django 2.2 where Paginator crashes if
    object_list is a queryset ordered or aggregated over a nested
    JSONField key transform (#30335).
  * Fixed a regression in Django 2.2 where IntegerField validation of
    database limits crashes if limit_value attribute in a custom
    validator is callable (#30328).
  * Fixed a regression in Django 2.2 where SearchVector generates SQL
    that is not indexable (#30385).
  * Fixed a regression in Django 2.2 that caused an exception to be
    raised when a custom error handler could not be imported (#30318).
  * Relaxed the system check added in Django 2.2 for the admin app?s
    dependencies to reallow use of SessionMiddleware subclasses,
    rather than requiring django.contrib.sessions to be in
    INSTALLED_APPS (#30312).
  * Increased the default timeout when using Watchman to 5 seconds to
    prevent falling back to StatReloader on larger projects and made
    it customizable via the DJANGO_WATCHMAN_TIMEOUT environment
    variable (#30361).
  * Fixed a regression in Django 2.2 that caused a crash when
    migrating permissions for proxy models if the target permissions
    already existed. For example, when a permission had been created
    manually or a model had been migrated from concrete to proxy
    (#30351).
  * Fixed a regression in Django 2.2 that caused a crash of runserver
    when URLConf modules raised exceptions (#30323).
  * Fixed a regression in Django 2.2 where changes were not reliably
    detected by auto-reloader when using StatReloader (#30323).
  * Fixed a migration crash on Oracle and PostgreSQL when adding a
    check constraint with a contains, startswith, or endswith lookup
    (or their case-insensitive variant) (#30408).
  * Fixed a migration crash on Oracle and SQLite when adding a check
    constraint with condition contains | (OR) operator (#30412).</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557230400">- Update keyring file</changelog>
  <changelog author="Ond?ej S&#xFA;kup &lt;mimi.vx@gmail.com&gt;" date="1559563200">- update to 2.2.2
  * Fixes CVE-2019-12308: AdminURLFieldWidget XSS (bsc#1136468)
  * Fixes CVE-2019-11358: Prototype pollution</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1563451200">- Update to 2.2.3:
  * CVE-2019-12781 (bsc#1139945): Incorrect HTTP detection with reverse-proxy connecting via HTTPS</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564660800">- Update to 2.2.4:
  * CVE-2019-14232 CVE-2019-14233 CVE-2019-14234 CVE-2019-14235
    bsc#1142883 bsc#1142885 bsc#1142882 bsc#1142880
  * Fixed a regression in Django 2.2 when ordering a QuerySet.union(), intersection(), or difference() by a field type present more than once results in the wrong ordering being used (#30628).
  * Fixed a migration crash on PostgreSQL when adding a check constraint with a contains lookup on DateRangeField or DateTimeRangeField, if the right hand side of an expression is the same type (#30621).
  * Fixed a regression in Django 2.2 where auto-reloader crashes if a file path contains nulls characters ('\x00') (#30506).
  * Fixed a regression in Django 2.2 where auto-reloader crashes if a translation directory cannot be resolved (#30647).</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568635200">- Update to 2.2.5:
  * Relaxed the system check added in Django 2.2 for models to reallow use of the same db_table by multiple models when database routers are installed (#30673).
  * Fixed crash of KeyTransform() for JSONField and HStoreField when using on expressions with params (#30672).
  * Fixed a regression in Django 2.2 where ModelAdmin.list_filter choices to foreign objects don?t respect a model?s Meta.ordering (#30449).
  * Fixed a race condition in loading URLconf module that could cause a crash of auto-reloader on Python 3.5 and below (#30500).</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1570449600">- Update to 2.2.6:
  * Fixed migrations crash on SQLite when altering a model
    containing partial indexes (#30754).
  * Fixed a regression in Django 2.2.4 that caused a crash when
    filtering with a Subquery() annotation of a queryset containing
    JSONField or HStoreField (#30769).</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1573819200">- Require full python interpreter on build and runtime</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1573819201">- Update to 2.2.7:
  * Fixed a crash when using a contains, contained_by, has_key, has_keys, or has_any_keys lookup on JSONField, if the right or left hand side of an expression is a key transform (#30826).
  * Prevented migrate --plan from showing that RunPython operations are irreversible when reverse_code callables don?t have docstrings or when showing a forward migration plan (#30870).
  * Fixed migrations crash on PostgreSQL when adding an Index with fields ordering and opclasses (#30903).
  * Restored the ability to override get_FOO_display() (#30931).</changelog>
  <changelog author="Alberto Planas Dominguez &lt;aplanas@suse.com&gt;" date="1575288000">- Update to 2.2.8
  * CVE-2019-19118: Privilege escalation in the Django admin (boo#1157705)
  * Fixed a data loss possibility in the admin changelist view when a
    custom formset?s prefix contains regular expression special
    characters, e.g. '$'
  * Fixed a regression in Django 2.2.1 that caused a crash when
    migrating permissions for proxy models with a multiple database
    setup if the default entry was empty
  * Fixed a data loss possibility in the select_for_update(). When
    using 'self' in the of argument with multi-table inheritance, a
    parent model was locked instead of the queryset?s model
- Add patch fix-selenium-test.patch to fix a test when selenium is
  missing</changelog>
  <changelog author="Ond?ej S&#xFA;kup &lt;mimi.vx@gmail.com&gt;" date="1577620800">- Update to 2.2.9
  * CVE-2019-19844: Potential account hijack via password reset form (bsc#1159447)
  * Fixed a data loss possibility in SplitArrayField.</changelog>
  <changelog author="Ond?ej S&#xFA;kup &lt;mimi.vx@gmail.com&gt;" date="1579089600">- add pyyaml53.patch - fix tests with PyYAML 5.3</changelog>
  <changelog author="Ond?ej S&#xFA;kup &lt;mimi.vx@gmail.com&gt;" date="1580817600">- update to 2.2.10
- drop pyyaml53.patch
  * fix boo#1161919 (CVE-2020-7471) Potential SQL injection via ``StringAgg(delimiter)``</changelog>
  <changelog author="Ond?ej S&#xFA;kup &lt;mimi.vx@gmail.com&gt;" date="1584532800">- update to 2.2.11
  * fix boo#1165022 (CVE-2020-9402) Potential SQL injection via tolerance
  parameter in GIS functions and aggregates on Oracle</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1585915200">- Update to 2.2.12:
  * Added the ability to handle .po files containing different plural
    equations for the same language (#30439).</changelog>
  <changelog author="Alberto Planas Dominguez &lt;aplanas@suse.com&gt;" date="1649678400">- Update to 2.2.28 (bsc#1198297)
  * Many CVEs fixes (check https://github.com/django/django/blob/main/docs/releases/)</changelog>
  <changelog author="Alberto Planas Dominguez &lt;aplanas@suse.com&gt;" date="1659960000">- Add fix-cve-2022-36359.patch (CVE-2022-36359, bsc#1201923)
  * Backport fix and tests from uptream branch 3.2.X
- Rename Django-2.2.28.tar.gz.asc to Django-2.2.28.checksum.txt
  * The source validator try to validate the signature agains
    Django-2.2.28.tar.gz, instead of the checksum message itself</changelog>
</package>
<package pkgid="bec16d91e921ef0e454f7b5b5b74175a8774708e9a6705181094a67b88578265" name="python3-Django" arch="noarch">
  <version epoch="0" ver="2.2.28" rel="bp154.2.6.1"/>
  <changelog author="John Vandenberg &lt;jayvdb@gmail.com&gt;" date="1554897600">- Add test_clear_site_cache-sort.patch to workaround flaky test
- Add bcond_with for selenium and memcached, as those tests are inactive,
  and add missing dependencies and setup for selenium testing
- Move removal of executable bit from a JavaScript file to %prep
- Fix fdupes</changelog>
  <changelog author="Alberto Planas Dominguez &lt;aplanas@suse.com&gt;" date="1557144000">- Update to 2.2.1
  * Fixed a regression in Django 2.1 that caused the incorrect quoting
    of database user password when using dbshell on Oracle (#30307).
  * Added compatibility for psycopg2 2.8 (#30331).
  * Fixed a regression in Django 2.2 that caused a crash when loading
    the template for the technical 500 debug page (#30324).
  * Fixed crash of ordering argument in ArrayAgg and StringAgg when it
    contains an expression with params (#30332).
  * Fixed a regression in Django 2.2 that caused a single instance
    fast-delete to not set the primary key to None (#30330).
  * Prevented makemigrations from generating infinite migrations for
    check constraints and partial indexes when condition contains a
    range object (#30350).  Reverted an optimization in Django 2.2
    (#29725) that caused the inconsistent behavior of count() and
    exists() on a reverse many-to-many relationship with a custom
    manager (#30325).
  * Fixed a regression in Django 2.2 where Paginator crashes if
    object_list is a queryset ordered or aggregated over a nested
    JSONField key transform (#30335).
  * Fixed a regression in Django 2.2 where IntegerField validation of
    database limits crashes if limit_value attribute in a custom
    validator is callable (#30328).
  * Fixed a regression in Django 2.2 where SearchVector generates SQL
    that is not indexable (#30385).
  * Fixed a regression in Django 2.2 that caused an exception to be
    raised when a custom error handler could not be imported (#30318).
  * Relaxed the system check added in Django 2.2 for the admin app?s
    dependencies to reallow use of SessionMiddleware subclasses,
    rather than requiring django.contrib.sessions to be in
    INSTALLED_APPS (#30312).
  * Increased the default timeout when using Watchman to 5 seconds to
    prevent falling back to StatReloader on larger projects and made
    it customizable via the DJANGO_WATCHMAN_TIMEOUT environment
    variable (#30361).
  * Fixed a regression in Django 2.2 that caused a crash when
    migrating permissions for proxy models if the target permissions
    already existed. For example, when a permission had been created
    manually or a model had been migrated from concrete to proxy
    (#30351).
  * Fixed a regression in Django 2.2 that caused a crash of runserver
    when URLConf modules raised exceptions (#30323).
  * Fixed a regression in Django 2.2 where changes were not reliably
    detected by auto-reloader when using StatReloader (#30323).
  * Fixed a migration crash on Oracle and PostgreSQL when adding a
    check constraint with a contains, startswith, or endswith lookup
    (or their case-insensitive variant) (#30408).
  * Fixed a migration crash on Oracle and SQLite when adding a check
    constraint with condition contains | (OR) operator (#30412).</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557230400">- Update keyring file</changelog>
  <changelog author="Ond?ej S&#xFA;kup &lt;mimi.vx@gmail.com&gt;" date="1559563200">- update to 2.2.2
  * Fixes CVE-2019-12308: AdminURLFieldWidget XSS (bsc#1136468)
  * Fixes CVE-2019-11358: Prototype pollution</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1563451200">- Update to 2.2.3:
  * CVE-2019-12781 (bsc#1139945): Incorrect HTTP detection with reverse-proxy connecting via HTTPS</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564660800">- Update to 2.2.4:
  * CVE-2019-14232 CVE-2019-14233 CVE-2019-14234 CVE-2019-14235
    bsc#1142883 bsc#1142885 bsc#1142882 bsc#1142880
  * Fixed a regression in Django 2.2 when ordering a QuerySet.union(), intersection(), or difference() by a field type present more than once results in the wrong ordering being used (#30628).
  * Fixed a migration crash on PostgreSQL when adding a check constraint with a contains lookup on DateRangeField or DateTimeRangeField, if the right hand side of an expression is the same type (#30621).
  * Fixed a regression in Django 2.2 where auto-reloader crashes if a file path contains nulls characters ('\x00') (#30506).
  * Fixed a regression in Django 2.2 where auto-reloader crashes if a translation directory cannot be resolved (#30647).</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568635200">- Update to 2.2.5:
  * Relaxed the system check added in Django 2.2 for models to reallow use of the same db_table by multiple models when database routers are installed (#30673).
  * Fixed crash of KeyTransform() for JSONField and HStoreField when using on expressions with params (#30672).
  * Fixed a regression in Django 2.2 where ModelAdmin.list_filter choices to foreign objects don?t respect a model?s Meta.ordering (#30449).
  * Fixed a race condition in loading URLconf module that could cause a crash of auto-reloader on Python 3.5 and below (#30500).</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1570449600">- Update to 2.2.6:
  * Fixed migrations crash on SQLite when altering a model
    containing partial indexes (#30754).
  * Fixed a regression in Django 2.2.4 that caused a crash when
    filtering with a Subquery() annotation of a queryset containing
    JSONField or HStoreField (#30769).</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1573819200">- Require full python interpreter on build and runtime</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1573819201">- Update to 2.2.7:
  * Fixed a crash when using a contains, contained_by, has_key, has_keys, or has_any_keys lookup on JSONField, if the right or left hand side of an expression is a key transform (#30826).
  * Prevented migrate --plan from showing that RunPython operations are irreversible when reverse_code callables don?t have docstrings or when showing a forward migration plan (#30870).
  * Fixed migrations crash on PostgreSQL when adding an Index with fields ordering and opclasses (#30903).
  * Restored the ability to override get_FOO_display() (#30931).</changelog>
  <changelog author="Alberto Planas Dominguez &lt;aplanas@suse.com&gt;" date="1575288000">- Update to 2.2.8
  * CVE-2019-19118: Privilege escalation in the Django admin (boo#1157705)
  * Fixed a data loss possibility in the admin changelist view when a
    custom formset?s prefix contains regular expression special
    characters, e.g. '$'
  * Fixed a regression in Django 2.2.1 that caused a crash when
    migrating permissions for proxy models with a multiple database
    setup if the default entry was empty
  * Fixed a data loss possibility in the select_for_update(). When
    using 'self' in the of argument with multi-table inheritance, a
    parent model was locked instead of the queryset?s model
- Add patch fix-selenium-test.patch to fix a test when selenium is
  missing</changelog>
  <changelog author="Ond?ej S&#xFA;kup &lt;mimi.vx@gmail.com&gt;" date="1577620800">- Update to 2.2.9
  * CVE-2019-19844: Potential account hijack via password reset form (bsc#1159447)
  * Fixed a data loss possibility in SplitArrayField.</changelog>
  <changelog author="Ond?ej S&#xFA;kup &lt;mimi.vx@gmail.com&gt;" date="1579089600">- add pyyaml53.patch - fix tests with PyYAML 5.3</changelog>
  <changelog author="Ond?ej S&#xFA;kup &lt;mimi.vx@gmail.com&gt;" date="1580817600">- update to 2.2.10
- drop pyyaml53.patch
  * fix boo#1161919 (CVE-2020-7471) Potential SQL injection via ``StringAgg(delimiter)``</changelog>
  <changelog author="Ond?ej S&#xFA;kup &lt;mimi.vx@gmail.com&gt;" date="1584532800">- update to 2.2.11
  * fix boo#1165022 (CVE-2020-9402) Potential SQL injection via tolerance
  parameter in GIS functions and aggregates on Oracle</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1585915200">- Update to 2.2.12:
  * Added the ability to handle .po files containing different plural
    equations for the same language (#30439).</changelog>
  <changelog author="Alberto Planas Dominguez &lt;aplanas@suse.com&gt;" date="1649678400">- Update to 2.2.28 (bsc#1198297)
  * Many CVEs fixes (check https://github.com/django/django/blob/main/docs/releases/)</changelog>
  <changelog author="Alberto Planas Dominguez &lt;aplanas@suse.com&gt;" date="1659960000">- Add fix-cve-2022-36359.patch (CVE-2022-36359, bsc#1201923)
  * Backport fix and tests from uptream branch 3.2.X
- Rename Django-2.2.28.tar.gz.asc to Django-2.2.28.checksum.txt
  * The source validator try to validate the signature agains
    Django-2.2.28.tar.gz, instead of the checksum message itself</changelog>
  <changelog author="Alberto Planas Dominguez &lt;aplanas@suse.com&gt;" date="1664884800">- Add fix-cve-2022-41323.patch (bsc#1203793, CVE-2022-41323)
  * Backport fix and tests from uptream branch 3.2.X
- Add test_custom_fields.patch
  * Required to fix an inspectdb test</changelog>
  <changelog author="Alberto Planas Dominguez &lt;aplanas@suse.com&gt;" date="1675339200">- Add fix-cve-2023-23969.patch (bsc#1207565, CVE-2023-23969)</changelog>
</package>
<package pkgid="339765a5de56ccf6e7c0590a851c5b0582f8d9b77cebf35884e44b3e385b70e4" name="python3-GDAL" arch="aarch64">
  <version epoch="0" ver="3.4.1" rel="bp154.2.2.1"/>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1593518400">- Update to 3.1.1 version with full changelog
  https://github.com/OSGeo/gdal/blob/v3.1.1/gdal/NEWS
- Packaging:
  + drop merged upstream gdal-fix-docs.patch
  + Rework our way to deliver the package:
  - Remove building doc as we don't deliver it
  - Use upstream man page already present in tar
  - Simplify all %if doc related stuff
  + Lower again a bit _constraints: 2.5G RAM 4.0G HDD</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1594123200">- Update to 3.1.2 version bug fix release see changelog
  https://github.com/OSGeo/gdal/blob/v3.1.1/gdal/NEWS</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595160000">- Work-around occasional build failures due to incomplete ordering
  in Makefile. (https://github.com/OSGeo/gdal/issues/2777)
- Avoid double gdal prefix for /usr/share/gdal/gdal/*</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1599566400">- Update to 3.1.3 version bug fix release see changelog
  https://github.com/OSGeo/gdal/blob/v3.1.3/gdal/NEWS</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1603540800">- Update to 3.1.4 version bug fix release see changelog
  https://github.com/OSGeo/gdal/blob/v3.1.4/gdal/NEWS</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1604491200">- Update to 3.2.0:
  * Full changelog
    https://github.com/OSGeo/gdal/blob/v3.2.0/gdal/NEWS
- Packaging:
  + Add python3-GDAL as require in gdal package
  + Remove shebang where it's not allowed in python's scripts</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1609761600">- Update to 3.2.1:
  * Full changelog
    https://github.com/OSGeo/gdal/blob/v3.2.1/gdal/NEWS
- Packaging:
  + Update copyright year</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1615550400">- Update to 3.2.2 (bug fix release):
  * Full changelog
    https://github.com/OSGeo/gdal/blob/v3.2.2/gdal/NEWS</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1620129600">- Update to 3.2.3 (bug fix release)
  * Full changelog
    https://github.com/OSGeo/gdal/blob/v3.2.3/gdal/NEWS
- Be warned about ahead changes with future 3.3.x version
    https://github.com/OSGeo/gdal/blob/v3.3.0/gdal/NEWS</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1621252800">- remove bundled libraries, use system provided ones</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1621857600">- Update to 3.3.0 version
  * Full changelog
    https://github.com/OSGeo/gdal/blob/v3.3.0/gdal/NEWS
  * Main changes python2 is now gone
- Packaging
  + bump libso version to 2.9
  + Remove python2 related stuff
  + Add support for heif,pcre,kml,sfcgal
    make conditionnal support of libkml, sfcgal, heif
  + Prepare tests also conditionnal
  + Several small cleanup (merged, no more)
  + Remove autoreconf upstream is using last available</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1626004800">- Update to version 3.3.1 bugfix release
  + Full changelog
    https://github.com/OSGeo/gdal/blob/v3.3.1/gdal/NEWS</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1631016000">- Update to version 3.3.2 bugfix release
  + Full changelog
    https://github.com/OSGeo/gdal/blob/v3.3.2/gdal/NEWS</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1634731200">- Fix build with poppler 2.10:
  * gdal-poppler-2.10-a.patch
  * gdal-poppler-2.10-b.patch</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1635768000">- Update to version 3.3.3 bugfix release
  + Full changelog https://github.com/OSGeo/gdal/blob/v3.3.3/gdal/NEWS
- Removed upstream patches
  + gdal-poppler-2.10-a.patch
  + gdal-poppler-2.10-b.patch</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1638187200">- Fix xerces detection by adding --with-xerces-inc parameter</changelog>
  <changelog author="D. Berge &lt;opensuse@navlost.eu&gt;" date="1640952000">- Fix build on Leap 15.3</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1641297600">- Upgrade to version 3.4.1 bugfix release
  + Full changelog https://github.com/OSGeo/gdal/blob/v3.4.0/gdal/NEWS
  + Explicitly add a call to autogen.sh
  + Upstream PCIDSK: fix write heap-buffer-overflow boo#1194263
- Removed GDALmake.opt.in.patch due to cc1plus: warning:
  - I gcore: No such file or directory [-Wmissing-include-dirs]
- Add conditionnal support for hdf4 boo#1192614 on Leap
  build -with hdf4_support can be enabled
- Update copyright year</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1646654400">- Add gdal-fix-build-poppler.patch: Fix build with poppler 22.03.0
  and newer.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1646740800">- Add gdal-fix-poppler-leap.patch: Fix build on Leap 15.4 and
  poppler.
- Add fdups macro, BuildRequires already in place, remove
  duplicate files.</changelog>
</package>
<package pkgid="c613862f1902d583472bed513b09989b98c86e52cc1b78c4ebe10d0abc89d5c9" name="python3-GDAL" arch="ppc64le">
  <version epoch="0" ver="3.4.1" rel="bp154.2.2.1"/>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1593518400">- Update to 3.1.1 version with full changelog
  https://github.com/OSGeo/gdal/blob/v3.1.1/gdal/NEWS
- Packaging:
  + drop merged upstream gdal-fix-docs.patch
  + Rework our way to deliver the package:
  - Remove building doc as we don't deliver it
  - Use upstream man page already present in tar
  - Simplify all %if doc related stuff
  + Lower again a bit _constraints: 2.5G RAM 4.0G HDD</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1594123200">- Update to 3.1.2 version bug fix release see changelog
  https://github.com/OSGeo/gdal/blob/v3.1.1/gdal/NEWS</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595160000">- Work-around occasional build failures due to incomplete ordering
  in Makefile. (https://github.com/OSGeo/gdal/issues/2777)
- Avoid double gdal prefix for /usr/share/gdal/gdal/*</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1599566400">- Update to 3.1.3 version bug fix release see changelog
  https://github.com/OSGeo/gdal/blob/v3.1.3/gdal/NEWS</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1603540800">- Update to 3.1.4 version bug fix release see changelog
  https://github.com/OSGeo/gdal/blob/v3.1.4/gdal/NEWS</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1604491200">- Update to 3.2.0:
  * Full changelog
    https://github.com/OSGeo/gdal/blob/v3.2.0/gdal/NEWS
- Packaging:
  + Add python3-GDAL as require in gdal package
  + Remove shebang where it's not allowed in python's scripts</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1609761600">- Update to 3.2.1:
  * Full changelog
    https://github.com/OSGeo/gdal/blob/v3.2.1/gdal/NEWS
- Packaging:
  + Update copyright year</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1615550400">- Update to 3.2.2 (bug fix release):
  * Full changelog
    https://github.com/OSGeo/gdal/blob/v3.2.2/gdal/NEWS</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1620129600">- Update to 3.2.3 (bug fix release)
  * Full changelog
    https://github.com/OSGeo/gdal/blob/v3.2.3/gdal/NEWS
- Be warned about ahead changes with future 3.3.x version
    https://github.com/OSGeo/gdal/blob/v3.3.0/gdal/NEWS</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1621252800">- remove bundled libraries, use system provided ones</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1621857600">- Update to 3.3.0 version
  * Full changelog
    https://github.com/OSGeo/gdal/blob/v3.3.0/gdal/NEWS
  * Main changes python2 is now gone
- Packaging
  + bump libso version to 2.9
  + Remove python2 related stuff
  + Add support for heif,pcre,kml,sfcgal
    make conditionnal support of libkml, sfcgal, heif
  + Prepare tests also conditionnal
  + Several small cleanup (merged, no more)
  + Remove autoreconf upstream is using last available</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1626004800">- Update to version 3.3.1 bugfix release
  + Full changelog
    https://github.com/OSGeo/gdal/blob/v3.3.1/gdal/NEWS</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1631016000">- Update to version 3.3.2 bugfix release
  + Full changelog
    https://github.com/OSGeo/gdal/blob/v3.3.2/gdal/NEWS</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1634731200">- Fix build with poppler 2.10:
  * gdal-poppler-2.10-a.patch
  * gdal-poppler-2.10-b.patch</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1635768000">- Update to version 3.3.3 bugfix release
  + Full changelog https://github.com/OSGeo/gdal/blob/v3.3.3/gdal/NEWS
- Removed upstream patches
  + gdal-poppler-2.10-a.patch
  + gdal-poppler-2.10-b.patch</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1638187200">- Fix xerces detection by adding --with-xerces-inc parameter</changelog>
  <changelog author="D. Berge &lt;opensuse@navlost.eu&gt;" date="1640952000">- Fix build on Leap 15.3</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1641297600">- Upgrade to version 3.4.1 bugfix release
  + Full changelog https://github.com/OSGeo/gdal/blob/v3.4.0/gdal/NEWS
  + Explicitly add a call to autogen.sh
  + Upstream PCIDSK: fix write heap-buffer-overflow boo#1194263
- Removed GDALmake.opt.in.patch due to cc1plus: warning:
  - I gcore: No such file or directory [-Wmissing-include-dirs]
- Add conditionnal support for hdf4 boo#1192614 on Leap
  build -with hdf4_support can be enabled
- Update copyright year</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1646654400">- Add gdal-fix-build-poppler.patch: Fix build with poppler 22.03.0
  and newer.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1646740800">- Add gdal-fix-poppler-leap.patch: Fix build on Leap 15.4 and
  poppler.
- Add fdups macro, BuildRequires already in place, remove
  duplicate files.</changelog>
</package>
<package pkgid="be332e4bf27aaf29fb39a56498f0a063b859e16b66f215485f18fb29bd6f969f" name="python3-GDAL" arch="s390x">
  <version epoch="0" ver="3.4.1" rel="bp154.2.2.1"/>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1593518400">- Update to 3.1.1 version with full changelog
  https://github.com/OSGeo/gdal/blob/v3.1.1/gdal/NEWS
- Packaging:
  + drop merged upstream gdal-fix-docs.patch
  + Rework our way to deliver the package:
  - Remove building doc as we don't deliver it
  - Use upstream man page already present in tar
  - Simplify all %if doc related stuff
  + Lower again a bit _constraints: 2.5G RAM 4.0G HDD</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1594123200">- Update to 3.1.2 version bug fix release see changelog
  https://github.com/OSGeo/gdal/blob/v3.1.1/gdal/NEWS</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595160000">- Work-around occasional build failures due to incomplete ordering
  in Makefile. (https://github.com/OSGeo/gdal/issues/2777)
- Avoid double gdal prefix for /usr/share/gdal/gdal/*</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1599566400">- Update to 3.1.3 version bug fix release see changelog
  https://github.com/OSGeo/gdal/blob/v3.1.3/gdal/NEWS</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1603540800">- Update to 3.1.4 version bug fix release see changelog
  https://github.com/OSGeo/gdal/blob/v3.1.4/gdal/NEWS</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1604491200">- Update to 3.2.0:
  * Full changelog
    https://github.com/OSGeo/gdal/blob/v3.2.0/gdal/NEWS
- Packaging:
  + Add python3-GDAL as require in gdal package
  + Remove shebang where it's not allowed in python's scripts</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1609761600">- Update to 3.2.1:
  * Full changelog
    https://github.com/OSGeo/gdal/blob/v3.2.1/gdal/NEWS
- Packaging:
  + Update copyright year</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1615550400">- Update to 3.2.2 (bug fix release):
  * Full changelog
    https://github.com/OSGeo/gdal/blob/v3.2.2/gdal/NEWS</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1620129600">- Update to 3.2.3 (bug fix release)
  * Full changelog
    https://github.com/OSGeo/gdal/blob/v3.2.3/gdal/NEWS
- Be warned about ahead changes with future 3.3.x version
    https://github.com/OSGeo/gdal/blob/v3.3.0/gdal/NEWS</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1621252800">- remove bundled libraries, use system provided ones</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1621857600">- Update to 3.3.0 version
  * Full changelog
    https://github.com/OSGeo/gdal/blob/v3.3.0/gdal/NEWS
  * Main changes python2 is now gone
- Packaging
  + bump libso version to 2.9
  + Remove python2 related stuff
  + Add support for heif,pcre,kml,sfcgal
    make conditionnal support of libkml, sfcgal, heif
  + Prepare tests also conditionnal
  + Several small cleanup (merged, no more)
  + Remove autoreconf upstream is using last available</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1626004800">- Update to version 3.3.1 bugfix release
  + Full changelog
    https://github.com/OSGeo/gdal/blob/v3.3.1/gdal/NEWS</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1631016000">- Update to version 3.3.2 bugfix release
  + Full changelog
    https://github.com/OSGeo/gdal/blob/v3.3.2/gdal/NEWS</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1634731200">- Fix build with poppler 2.10:
  * gdal-poppler-2.10-a.patch
  * gdal-poppler-2.10-b.patch</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1635768000">- Update to version 3.3.3 bugfix release
  + Full changelog https://github.com/OSGeo/gdal/blob/v3.3.3/gdal/NEWS
- Removed upstream patches
  + gdal-poppler-2.10-a.patch
  + gdal-poppler-2.10-b.patch</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1638187200">- Fix xerces detection by adding --with-xerces-inc parameter</changelog>
  <changelog author="D. Berge &lt;opensuse@navlost.eu&gt;" date="1640952000">- Fix build on Leap 15.3</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1641297600">- Upgrade to version 3.4.1 bugfix release
  + Full changelog https://github.com/OSGeo/gdal/blob/v3.4.0/gdal/NEWS
  + Explicitly add a call to autogen.sh
  + Upstream PCIDSK: fix write heap-buffer-overflow boo#1194263
- Removed GDALmake.opt.in.patch due to cc1plus: warning:
  - I gcore: No such file or directory [-Wmissing-include-dirs]
- Add conditionnal support for hdf4 boo#1192614 on Leap
  build -with hdf4_support can be enabled
- Update copyright year</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1646654400">- Add gdal-fix-build-poppler.patch: Fix build with poppler 22.03.0
  and newer.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1646740800">- Add gdal-fix-poppler-leap.patch: Fix build on Leap 15.4 and
  poppler.
- Add fdups macro, BuildRequires already in place, remove
  duplicate files.</changelog>
</package>
<package pkgid="70cb53d8c4d57cc25e1358606b322ce4ac9bc38529fefd3073df0357872f594f" name="python3-GDAL" arch="x86_64">
  <version epoch="0" ver="3.4.1" rel="bp154.2.2.1"/>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1593518400">- Update to 3.1.1 version with full changelog
  https://github.com/OSGeo/gdal/blob/v3.1.1/gdal/NEWS
- Packaging:
  + drop merged upstream gdal-fix-docs.patch
  + Rework our way to deliver the package:
  - Remove building doc as we don't deliver it
  - Use upstream man page already present in tar
  - Simplify all %if doc related stuff
  + Lower again a bit _constraints: 2.5G RAM 4.0G HDD</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1594123200">- Update to 3.1.2 version bug fix release see changelog
  https://github.com/OSGeo/gdal/blob/v3.1.1/gdal/NEWS</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595160000">- Work-around occasional build failures due to incomplete ordering
  in Makefile. (https://github.com/OSGeo/gdal/issues/2777)
- Avoid double gdal prefix for /usr/share/gdal/gdal/*</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1599566400">- Update to 3.1.3 version bug fix release see changelog
  https://github.com/OSGeo/gdal/blob/v3.1.3/gdal/NEWS</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1603540800">- Update to 3.1.4 version bug fix release see changelog
  https://github.com/OSGeo/gdal/blob/v3.1.4/gdal/NEWS</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1604491200">- Update to 3.2.0:
  * Full changelog
    https://github.com/OSGeo/gdal/blob/v3.2.0/gdal/NEWS
- Packaging:
  + Add python3-GDAL as require in gdal package
  + Remove shebang where it's not allowed in python's scripts</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1609761600">- Update to 3.2.1:
  * Full changelog
    https://github.com/OSGeo/gdal/blob/v3.2.1/gdal/NEWS
- Packaging:
  + Update copyright year</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1615550400">- Update to 3.2.2 (bug fix release):
  * Full changelog
    https://github.com/OSGeo/gdal/blob/v3.2.2/gdal/NEWS</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1620129600">- Update to 3.2.3 (bug fix release)
  * Full changelog
    https://github.com/OSGeo/gdal/blob/v3.2.3/gdal/NEWS
- Be warned about ahead changes with future 3.3.x version
    https://github.com/OSGeo/gdal/blob/v3.3.0/gdal/NEWS</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1621252800">- remove bundled libraries, use system provided ones</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1621857600">- Update to 3.3.0 version
  * Full changelog
    https://github.com/OSGeo/gdal/blob/v3.3.0/gdal/NEWS
  * Main changes python2 is now gone
- Packaging
  + bump libso version to 2.9
  + Remove python2 related stuff
  + Add support for heif,pcre,kml,sfcgal
    make conditionnal support of libkml, sfcgal, heif
  + Prepare tests also conditionnal
  + Several small cleanup (merged, no more)
  + Remove autoreconf upstream is using last available</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1626004800">- Update to version 3.3.1 bugfix release
  + Full changelog
    https://github.com/OSGeo/gdal/blob/v3.3.1/gdal/NEWS</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1631016000">- Update to version 3.3.2 bugfix release
  + Full changelog
    https://github.com/OSGeo/gdal/blob/v3.3.2/gdal/NEWS</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1634731200">- Fix build with poppler 2.10:
  * gdal-poppler-2.10-a.patch
  * gdal-poppler-2.10-b.patch</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1635768000">- Update to version 3.3.3 bugfix release
  + Full changelog https://github.com/OSGeo/gdal/blob/v3.3.3/gdal/NEWS
- Removed upstream patches
  + gdal-poppler-2.10-a.patch
  + gdal-poppler-2.10-b.patch</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1638187200">- Fix xerces detection by adding --with-xerces-inc parameter</changelog>
  <changelog author="D. Berge &lt;opensuse@navlost.eu&gt;" date="1640952000">- Fix build on Leap 15.3</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1641297600">- Upgrade to version 3.4.1 bugfix release
  + Full changelog https://github.com/OSGeo/gdal/blob/v3.4.0/gdal/NEWS
  + Explicitly add a call to autogen.sh
  + Upstream PCIDSK: fix write heap-buffer-overflow boo#1194263
- Removed GDALmake.opt.in.patch due to cc1plus: warning:
  - I gcore: No such file or directory [-Wmissing-include-dirs]
- Add conditionnal support for hdf4 boo#1192614 on Leap
  build -with hdf4_support can be enabled
- Update copyright year</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1646654400">- Add gdal-fix-build-poppler.patch: Fix build with poppler 22.03.0
  and newer.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1646740800">- Add gdal-fix-poppler-leap.patch: Fix build on Leap 15.4 and
  poppler.
- Add fdups macro, BuildRequires already in place, remove
  duplicate files.</changelog>
</package>
<package pkgid="bbaa2d7bae072d1f414dbb5e545560ba088bd2969c8ce25881ba1ccb9d00a56a" name="python3-acme" arch="noarch">
  <version epoch="0" ver="1.22.0" rel="bp154.2.3.3"/>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1573732800">- update to version 0.40.1
  * acme.standalone.BaseRequestHandlerWithLogging and acme.standalone.simple_tls_sni_01_server
    have been deprecated and will be removed in a future release of the library.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1578052800">- update to version 1.0.0 (bsc#1160066)
  * Deprecated attributes related to the TLS-SNI-01 challenge in
    acme.challenges and acme.standalone have been removed.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1579608000">- update to version 1.1.0
  * Removed the fallback introduced with 0.34.0 in acme to retry a POST-as-GET
    request as a GET request when the targeted ACME CA server seems to not support
    POST-as-GET requests.
  * Support for Python 3.4 in Certbot and its ACME library is deprecated and will be
    removed in the next release of Certbot.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1582286400">- update to version 1.2.0
  * Support for Python 3.4 has been removed.
  * Fix collections.abc imports for Python 3.9.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1583928000">- update to version 1.3.0
  * Don't verify the existing certificate in HTTP01Response.simple_verify, for
    compatibility with the real-world ACME challenge checks.
  * Fix acme module warnings when response Content-Type includes params (e.g. charset).</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1589457600">- update to version 1.4.0
  * Added TLS-ALPN-01 challenge support in the acme library. Support of this
    challenge in the Certbot client is planned to be added in a future release.
  * mock dependency is now conditional on Python 2 in all of our packages.
  * When using an RFC 8555 compliant endpoint, the acme library no longer sends the
    resource field in any requests or the type field when responding to challenges.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1591876800">- update to version 1.5.0
  * Fix TLS-ALPN test that fails when run with newer versions of OpenSSL.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1594641600">- update to version 1.6.0
  * Support for alternative certificate chains in the acme module.
  * Added --preferred-chain &lt;issuer CN&gt;. If a CA offers multiple
    certificate chains, it may be used to indicate to Certbot which
    chain should be preferred.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1598011200">- update to version 1.7.0
  * We deprecated support for Python 3.5 in Certbot and its ACME library.
    Support for Python 3.5 will be removed in the next major release of Certbot.</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1601294400">- update to version 1.8.0
  * Support for Python 3.5 has been removed.
  * The acme library can now tell the ACME server to clear contact information by passing an empty
    tuple to the contact field of a Registration message.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1602072000">- update to version 1.9.0
  * sync with the main certbot package</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1610107200">- update to version 1.11.0
  * We deprecated support for Python 2 in Certbot and its ACME
    library. Support for Python 2 will be removed in the next
    planned release of Certbot.
- update to version 1.10.1
  * sync with the main certbot package
- update to version 1.10.0
  * Support for Python 3.9 was added to Certbot and all of its
    components.</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1615204800">- update to version 1.13.0
  * Support for Python 2 has been removed.
  * The acme library no longer depends on the security extras from
    requests which was needed to support SNI in TLS requests when
    using old versions of Python 2.
  * When revoking a certificate by --cert-name, it is no longer
    necessary to specify the --server if the certificate was
    obtained from a non-default ACME server.</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1618401600">- update to version 1.14.0
  * The module acme.magic_typing is deprecated and will be removed in
    a future release. Please use the built-in module typing instead.</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1620820800">- update to version 1.15.0
  * sync with main certbot package</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1624536000">- update to version 1.16.0
  * sync with main certbot package</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1627646400">- update to version 1.17.0
  * sync with main certbot package</changelog>
  <changelog author="Danilo Spinella &lt;danilo.spinella@suse.com&gt;" date="1628596800">- update to version 1.18.0
  * sync with main certbot package
  * the .client.Client and .client.BackwardsCompatibleClientV2 classes
    are now deprecated in favor of .client.ClientV2</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1639396800">- Update to version 1.20.0
  * The acme library now supports requesting certificates for
    IP addresses.
  * Removed the dependency on chardet from the library.
    Except for when downloading a certificate in an alternate format,
    the acme library now assumes all server responses are UTF-8
    encoded which is required by RFC 8555.</changelog>
  <changelog author="Danilo Spinella &lt;danilo.spinella@suse.com&gt;" date="1640088000">- Update to version 1.22.0
  * sync with main certbot package
- Refresh python-acme.keyring</changelog>
</package>
<package pkgid="0af164611b1c2a9ed0ef358e19dc04866cf3d90f20b5e9193a9f44cb8bebaf71" name="python3-botan" arch="aarch64">
  <version epoch="0" ver="2.18.2" rel="bp154.2.3.1"/>
  <changelog author="adam.majer@suse.de" date="1518436800">- Don't drop -fstack-clash-protection for openSUSE 42.3 - we just
  need the Update repository present.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1518609600">- change group of libbotan-%{version_suffix} to 'System/Libraries' as
  requested on review</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1518782400">- drop explicit package requirements
- split binary package and documentation from dynamic library package
  and make documentation package noarch
- merge back Botan2 package to Botan with changelog history
- drop Botan patches
    aarch64-support.patch - doesn't seem to be required anymore
    Botan-fix_install_paths.patch - doesn't seem to be required
    no-cpuid-header.patch - SLE11 not target anymore
    Botan-fix_pkgconfig.patch - this seem to be wrong
    Botan-no-buildtime.patch - not needed anymore
    dont-set-mach-value.diff - doesn't apply, unclear and undocumented why it is there
    Botan-inttypes.patch - not required
    Botan-ull_constants.patch.bz2 - no reason anymore</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1522756800">- Update to Botan 2.5
  * Fix error in certificate wildcard matching (CVE-2018-9127), where a
    wildcard cert for b*.example.com would be accepted as a match for any host
    with name *b*.example.com (GH #1519)
  * Add support for RSA-PSS signatures in TLS (GH #1285)
  * Ed25519 certificates are now supported (GH #1501)
  * Many optimizations in ECC operations. ECDSA signatures are 8-10 times
    faster. ECDSA verification is about twice as fast. ECDH key agreement is
    3-4 times faster. (GH #1457 #1478)
  * Implement product scanning Montgomery reduction, which improves
    Diffie-Hellman and RSA performance by 10 to 20% on most platforms. (GH
    [#1472])
  * DSA signing and verification performance has improved by 30-50%.
  * Add a new Credentials_Manager callback that specifies which CAs the server
    has indicated it trusts (GH #1395 fixing #1261)
  * Add new TLS::Callbacks methods that allow creating or removing extensions,
    as well as examining extensions sent by the peer (GH #1394 #1186)
  * Add new TLS::Callbacks methods that allow an application to negotiate use
    of custom elliptic curves. (GH #1448)
  * Add ability to create custom elliptic curves (GH #1441 #1444)
  * Add support for POWER8 AES instructions (GH #1459 #1393 #1206)
  * Fix DSA/ECDSA handling of hashes longer than the group order (GH #1502
    [#986])
  * The default encoding of ECC public keys has changed from compressed to
    uncompressed point representation. This improves compatability with some
    common software packages including Golang?s standard library. (GH #1480
    [#1483])
  * It is now possible to create DNs with custom components. (GH #1490 #1492)
  * It is now possible to specify the serial number of created certificates,
    instead of using the default 128-bit random integer. (GH #1489 #1491)
  * Change DL_Group and EC_Group to store their data as shared_ptr for fast
    copying. Also both classes precompute additional useful values (eg for
    modular reductions). (GH #1435 #1454)
  * Make it possible for PKCS10 requests to include custom extensions. This
    also makes it possible to use muliple SubjectAlternativeNames of a single
    type in a request, which was previously not possible. (GH #1429 #1428)
  * Add new optimized interface for FE1 format preserving encryption. By
    caching a number of values computed in the course of the FPE calculation,
    it provides a 6-7x speedup versus the old API. (GH #1469)
  * Add DSA and ElGamal keygen functions to FFI (#1426)
  * Add Pipe::prepend_filter to replace Pipe::prepend (GH #1402)
  * Fix a memory leak in the OpenSSL block cipher integration, introduced in
  * 2.2.0
  * Use an improved algorithm for generating safe primes which is several tens
    of times faster. Also, fix a bug in the prime sieving algorithm which
    caused standard prime generation (like for RSA keys) to be slower than
    necessary. (GH #1413 #1411)
  * Correct the return value of PK_Encryptor::maximum_input_size which reported
    a much too small value (GH #1410)
  * Remove use of CPU specific optimization flags, instead the user should set
    these via CXXFLAGS if desired. (GH #1392)
  * Resolve an issue that would cause a crash in the tests if they were run on
    a machine without SSE2/NEON/VMX instructions. (GH #1495)
  * The Python module now tries to load DLLs from a list of names and uses the
    first one which successfully loads and indicates it supports the desired
    API level. (GH #1497)
  * Various minor optimizations for SHA-3 (GH #1433 #1434)
  * The output of botan --help has been improved (GH #1387)
  * Add --der-format flag to command line utils, making it possible verify
    DSA/ECDSA signatures generated by OpenSSL command line (GH #1409)
  * Add support for --library-suffix option to configure.py (GH #1405 #1404)
  * Use feature flags to enable/disable system specific code (GH #1378)
  * Add --msvc-runtime option to allow using static runtime (GH #1499 #210)
  * Add ?enable-sanitizers= option to allow specifying which sanitizers to
    enable. The existing --with-sanitizers option just enables some default set
    which is known to work with the minimum required compiler versions.
  * Use either rst2man or rst2man.py for generating man page as distributions
    differ on where this program is installed (GH #1516)
  * The threefish module has been renamed threefish_512 since that is the
    algorithm it provides. (GH #1477)
  * The Perl XS based wrapper has been removed, as it was unmaintained and
    broken. (GH #1412)
  * The sqlite3 encryption patch under contrib has been removed. It is still
    maintained by the original author at
    https://github.com/OlivierJG/botansqlite3</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1523361600">- Update to Botan 2.6
  * CVE-2018-9860 Fix a bug decrypting TLS CBC ciphertexts which could for a
    malformed ciphertext cause the decryptor to read and HMAC an additional 64K
    bytes of data which is not part of the record. This could cause a crash if
    the read went into unmapped memory. No information leak or out of bounds
    write occurs.
  * Add support for OAEP labels (GH #1508)
  * RSA signing is about 15% faster (GH #1523) and RSA verification is about 50% faster.
  * Add exponent blinding to RSA (GH #1523)
  * Add Cipher_Mode::create and AEAD_Mode::create (GH #1527)
  * Fix bug in TLS server introduced in 2.5 which caused connection to fail if
    the client offered any signature algorithm not known to the server (for
    example RSA/SHA-224).
  * Fix a bug in inline asm that would with GCC 7.3 cause incorrect
    computations and an infinite loop during the tests. (GH #1524 #1529)</changelog>
  <changelog author="kasimir_@outlook.de" date="1523534400">- fixed to build on armv6 and armv7</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1531224000">- Update to Botan 2.7
  * CVE-2018-12435 Avoid a side channel in ECDSA signature generation (GH
    [#1604])
  * Avoid a side channel in RSA key generation due to use of a non-constant
    time gcd algorithm. (GH #1542 #1556)
  * Optimize prime generation, especially improving RSA key generation. (GH
    [#1542])
  * Make Karatsuba multiplication, Montgomery field operations, Barrett
    reduction and Montgomery exponentiation const time (GH #1540 #1606 #1609
    [#1610])
  * Optimizations for elliptic curve operations especially improving reductions
    and inversions modulo NIST primes (GH #1534 #1538 #1545 #1546 #1547 #1550)
  * Add 24 word wide Comba multiplication, improving 3072-bit RSA and DH by
    ~25%. (GH #1564)
  * Unroll Montgomery reduction for specific sizes (GH #1603)
  * Improved performance of signature verification in ECGDSA, ECKCDSA, SM2 and
    GOST by 10-15%.
  * XMSS optimizations (GH #1583 #1585)
  * Fix an error that meant XMSS would only sign half as many signatures as is
    allowed (GH #1582)
  * Add support for base32 encoding/decoding (GH #1541)
  * Add BMI2 optimized version of SHA-256, 40% faster on Skylake (GH #1584)
  * Allow the year to be up to 2200 in ASN.1 time objects. Previously this was
    limited to 2100. (GH #1536)
  * Add support for Scrypt password hashing (GH #1570)
  * Add support for using Scrypt for private key encryption (GH #1574)
  * Optimizations for DES/3DES, approx 50% faster when used in certain modes
    such as CBC decrypt or CTR.
  * XMSS signature verification did not check that the signature was of the
    expected length which could lead to a crash. (GH #1537)
  * The bcrypt variants 2b and 2y are now supported.
  * Support for 192-bit Suite B TLS profile is now implemented, as the 128-bit
    Suite B is since 2015 not allowed anymore.
  * Previously botan allowed GCM to be used with an empty nonce, which is not
    allowed by the specification. Now such nonces are rejected.
  * Avoid problems on Windows when compiling in Unicode mode (GH #1615 #1616)
  * Previously for ASN.1 encoded signatures (eg ECDSA) Botan would accept any
    valid BER encoding. Now only the single valid DER encoding is accepted.
  * Correct an error that could in rare cases cause an internal error exception
    when doing computations with the P-224 curve.
  * Optimizations to reduce allocations/copies during DER encoding and BER
    decoding (GH #1571 #1572 #1600)
  * Botan generates X.509 subject key IDs by hashing the public key with
    whatever hash function is being used to sign the certificate. However
    especially for SHA-512 this caused SKIDs that were far longer than
    necessary. Now all SKIDs are truncated to 192 bits.
  * In the test suite use mkstemp to create temporary files instead of creating
    them in the current working directory. (GH #1533 #1530)
  * It is now possible to safely override CXX when invoking make in addition to
    when configure.py is run. (GH #1579)
  * OIDs for Camellia and SM4 in CBC and GCM mode are now defined, making it
    possible to use this algorithms for private key encryption.
  * Avoid creating symlinks to the shared object on OpenBSD (#1535)
  * The factor command runs much faster on larger inputs now.
  * Support for Windows Phone/UWP was deprecated starting in 2.5. This
    deprecation has been reversed as it seems UWP is still actively used. (GH
    [#1586] #1587)
  * Support for Visual C++ 2013 is deprecated, and will be removed in Jan 2019.
  * Added support for GCC?s ?sysroot option to configure.py for
    cross-compiling.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1533038400">- Fix version in baselibs.conf</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1547121600">- Update to Botan 2.9
  * Bump SONAME
  * CVE-2018-20187 Address a side channel during ECC key generation, which used an
    unblinded Montgomery ladder. As a result, a timing attack can reveal
    information about the high bits of the secret key.
  * Fix bugs in TLS which caused negotiation failures when the client used an
    unknown signature algorithm or version (GH #1711 #1709 #1708)
  * Fix bug affecting GCM, EAX and ChaCha20Poly1305 where if the associated data
    was set after starting a message, the new AD was not reflected in the produced
    tag. Now with these modes setting an AD after beginning a message throws an
    exception.
  * Use a smaller sieve which improves performance of prime generation.
  * Fixed a bug that caused ChaCha to produce incorrect output after encrypting 256
    GB. (GH #1728)
  * Add NEON and AltiVec implementations of ChaCha (GH #1719 #1728 #1729)
  * Optimize AVX2 ChaCha (GH #1730)
  * Many more operations in BigInt, ECC and RSA code paths are either fully const
    time or avoid problematic branches that could potentially be exploited in a
    side channel attack. (GH #1738 #1750 #1754 #1755 #1757 #1758 #1759 #1762 #1765
    [#1770] #1773 #1774 #1779 #1780 #1794 #1795 #1796 #1797)
  * Several optimizations for BigInt and ECC, improving ECDSA performance by as
    much as 30%. (GH #1734 #1737 #1777 #1750 #1737 #1788)
  * Support recovering an ECDSA public key from a message/signature pair (GH #664
    [#1784])
  * Add base58 encoding/decoding functions (GH #1783)
  * In the command line interface, add support for reading passphrases from the
    terminal with echo disabled (GH #1756)
  * Add CT::Mask type to simplify const-time programming (GH #1751)
  * Add new configure options --disable-bmi2, --disable-rdrand, and
  - -disable-rdseed to prevent use of those instruction sets.
  * Add error_type and error_code functions to Exception type (GH #1744)
  * Now on POSIX systems posix_memalign is used instead of mmap for allocating the
    page-locked memory pool. This avoids issues with fork. (GH #602 #1798)
  * When available, use RDRAND to generate the additional data in
    Stateful_RNG::randomize_with_ts_input
  * Use vzeroall/vzeroupper intrinsics to avoid AVX2/SSE transition penalties.
  * Support for Visual C++ 2013 has been removed (GH #1557 #1697)
  * Resolve a memory leak when verifying ECDSA signatures with versions of OpenSSL
    before 1.1.0 (GH #1698)
  * Resolve a memory leak using ECDH via OpenSSL (GH #1767)
  * Fix an error in XTS which prohibited encrypting values which were exactly the
    same length as the underlying block size. Messages of this size are allowed by
    the standard and other XTS implementations. (GH #1706)
  * Resolve a bug in TSS which resulted in it using an incorrect length field in
    the shares. Now the correct length is encoded, but either correct or buggy
    lengths are accepted when decoding. (GH #1722)
  * Correct a bug when reducing a negative BigInt modulo a small power of 2. (GH
    [#1755])
  * Add CLI utils for threshold secret splitting. (GH #1722)
  * Fix a bug introduced in 2.8.0 that caused compilation failure if using a single
    amalgamation file with AVX2 enabled. (GH #1700)
  * Add an explicit OS target for Emscripten and improve support for it. (GH #1702)
  * Fix small issues when building for QNX
  * Switch the Travis CI build to using Ubuntu 16.04 (GH #1767)
  * Add options to configure.py to disable generation of pkg-config file, and (for
    systems where pkg-config support defaults to off, like Windows), to enable
    generating it. (GH #1268)
  * Modify configure.py to accept empty lists or trailing/extra commas. (GH #1705)
- Update to Botan 2.8
  * Add support for using Apple CommonCrypto library for hashing (GH #1667),
    cipher modes (GH #1674) and block ciphers (GH #1673).
  * Support for negotiating TLS versions 1.0 and 1.1 is disabled in the default
    TLS policy. In addition, support for negotiating TLS ciphersuites using CBC
    or CCM mode is disabled by default. Applications which need to interop with
    old peers must enable these in their TLS policy object. (GH #1651)
  * During primality testing, use a Lucas test in addition to Miller-Rabin. It
    is possible to construct a composite integer which passes n Miller-Rabin
    tests with probability (1/4)^n. So for a incautious verifier using a small
    number of tests (under 16 or so) it is possible if unlikely they would
    accept such a composite as prime. Adding a Lucas test precludes such an
    attack. (GH #1636)
  * Add XChaCha and XChaCha20Poly1305 (GH #1640)
  * Add AVX2 implementations of ChaCha (GH #1662) and Serpent (GH #1660)
  * Add a new password hashing interface in pwdhash.h (GH #1670)
  * C binding improvements. Added functions to get name and supported
    keylengths of cipher, hash and MAC objects, support for FE1 format
    preserving encryption (GH #1625 #1646), functions to load and save RSA keys
    in PKCS #1 format (GH #1621), HOTP and TOTP algorithms, scrypt, certificate
    verification (GH #1647), functions to get the output length of public key
    operations (GH #1642), and functions for loading and serializing X25519
    keys (GH #1681)
  * Support for building with BOTAN_MP_WORD_BITS set to 8 or 16 has been removed.
  * Previously SM2 had two distinct key types, one for signatures and another
    for encryption. They have now been merged into a single key type since in
    practice it seems the same key is at times used for both operations. (GH
    [#1637])
  * The Cipher_Mode class now derives from SymmetricAlgorithm (GH #1639)
  * Add support for using the ARMv8 instructions for SM4 encryption (GH #1622)
  * The entropy source using SecRandomCopyBytes has been removed as it was
    redundant with other entropy sources (GH #1668)
  * The Python module has much better error checking and reporting, and offers
    new functionality such as scrypt, MPI and FPE. (GH #1643 #1646)
  * Fixed a bug that caused CCM to fail with an exception when used with L=8 (GH #1631 #1632)
  * The default bcrypt work factor has been increased from 10 to 12.
  * The default algorithm used in passhash9 has changed from SHA-256 to
    SHA-512, and the default work factor increased from 10 to 15.
  * In ECC private keys, include the public key data for compatibility with GnuTLS (GH #1634 #1635)
  * Add support for using Linux getrandom syscall to access the system PRNG.
    This is disabled by default, use --with-os-feature=getrandom to enable.
  * It is now possible to encrypt private keys using SIV mode.
  * The FFI function botan_privkey_load now ignores its rng argument.
  * Resolve a problem when building under Visual C++ 15.8 (GH #1624)
  * Fix a bug in XSalsa20 (192-bit Salsa nonces) where if set_iv was called
    twice without calling set_key, the resulting encryption was incorrect. (GH
    [#1640])
  * Handle an error seen when verifying invalid ECDSA signatures using LibreSSL
    on non x86-64 platforms (GH #1627 #1628)
  * Fix bugs in PKCS7 and X9.23 CBC padding schemes, which would ignore the
    first byte in the event the padding took up the entire block. (GH #1690)
  * Correct bugs which would cause CFB, OCB, and GCM modes to crash when they
    were used in an unkeyed state. (GH #1639)
  * Optimizations for SM4 and Poly1305
  * Avoid a cache side channel in the AES key schedule
  * Add pk_encrypt and pk_decrypt CLI operations
  * Now asn1print CLI defaults to printing context-specific fields.
  * Use codec_base for Base64, which matches how Base32 is implemented (GH #1597)
  * The cast module has been split up into cast128 and cast256 (GH #1685)
  * When building under Visual C++ 2013, the user must acknowledge the upcoming
    removal of support using the configure.py flag --ack-vc2013-deprecated (GH
    [#1557])</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1554206400">- Update to Botan 2.10
  * Bump SONAME
  * Warning: XMSS currently implements draft-06 which is not compatible with
    the final RFC 8391 specification. A PR is open to fix this, however it will
    break all current uses of XMSS. If you are currently using XMSS please
    comment at https://github.com/randombit/botan/pull/1858. Otherwise the PR
    will be merged and support for draft-06 will be removed starting in 2.11.
  * Added a new certificate store implementation that can access the MacOS
    keychain certificate store. (GH #1830)
  * Redesigned Memory_Pool class, which services allocations out of a set of
    pages locked into memory (using mlock/VirtualLock). It is now faster and
    with improved exploit mitigations. (GH #1800)
  * Add BMI2 implementations of SHA-512 and SHA-3 which improve performance by
    25-35% on common CPUs. (GH #1815)
  * Unroll SHA-3 computation improving performance by 10-12% (GH #1838)
  * Add a Thread_Pool class. It is now possible to run the tests in multiple
    threads with --test-threads=N flag to select the number of threads to use.
    Use --test-threads=0 to run with as many CPU cores as are available on the
    current system. The default remains single threaded. (GH #1819)
  * XMSS signatures now uses a global thread pool instead of spawning new
    threads for each usage. This improves signature generation performance by
    between 10% and 60% depending on architecture and core count. (GH #1864)
  * Some functions related to encoding and decoding BigInts have been
    deprecated. (GH #1817)
  * Binary encoding and decoding of BigInts has been optimized by performing
    word-size operations when possible. (GH #1817)
  * Rename the exception Integrity_Failure to Invalid_Authentication_Tag to
    make its meaning and usage more clear. The old name remains as a typedef.
    (GH #1816)
  * Support for using Boost filesystem and MSVC?s std::filesystem have been
    removed, since already POSIX and Win32 versions had to be maintained for
    portability. (GH #1814)
  * Newly generated McEliece and XMSS keys now default to being encrypted using
    SIV mode, support for which was added in 2.8.0. Previously GCM was used by
    default for these algorithms.
  * Use arc4random on Android systems (GH #1851)
  * Fix the encoding of PGP-S2K iteration counts (GH #1853 #1854)
  * Add a facility for sandboxing the command line util. Currently FreeBSD
    (Capsicum) and OpenBSD (pledge) sandboxes are supported. (GH #1808)
  * Use if constexpr when available.
  * Disable building shared libs on iOS as it was broken and it is not clear
    shared libraries are ever useful on iOS (GH #1865)
  * Renamed the darwin build target to macos. This should not cause any
    user-visible change. (GH #1866)
  * Add support for using sccache to cache the Windows CI build (GH #1807)
  * Add --extra-cxxflags option which allows adding compilation flags without
    overriding the default set. (GH #1826)
  * Add --format= option to the hash cli which allows formatting the output as
    base64 or base58, default output remains hex.
  * Add base58_enc and base58_dec cli utils for base58 encoding/decoding. (GH #1848)
  * Enable getentropy by default on macOS (GH #1862)
  * Avoid using -momit-leaf-frame-pointer flags, since -fomit-frame-pointer is
    already the default with recent versions of GCC.
  * Fix XLC sanitizer flags.
  * Rename Blake2b class to BLAKE2b to match the official name. There is a typedef for compat.
  * Fix a bug where loading a raw Ed25519_PublicKey of incorrect length would
    lead to a crash. (GH #1850)
  * Fix a bug that caused compilation problems using CryptoNG PRNG. (GH #1832)
  * Extended SHAKE-128 cipher to support any key between 1 and 160 bytes,
    instead of only multiples of 8 bytes.
  * Minor HMAC optimizations.
  * Build fixes for GNU/Hurd.
  * Fix a bug that prevented generating or verifying Ed25519 signatures in the
    CLI (GH #1828 #1829)
  * Fix a compilation error when building the amalgamation outside of the
    original source directory when AVX2 was enabled. (GH #1812)
  * Fix a crash when creating the amalgamation if a header file was edited on
    Windows but then the amalgamation was built on Linux (GH #1763)</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1586347200">- Update to Botan 2.14:
  * Add support for using POWER8+ VPSUMD instruction to accelerate GCM (GH #2247)
  * Optimize the vector permute AES implementation, especially improving
    performance on ARMv7, Aarch64, and POWER. (GH #2243)
  * Use a new algorithm for modular inversions which is both faster
    and more resistant to side channel attacks. (GH #2287 #2296 #2301)
  * Address an issue in CBC padding which would leak the length of the plaintext
    which was being padded. Unpadding during decryption was not affected.
  * Optimize NIST prime field reductions, improving ECDSA by 3-9% (GH #2295)
  * Increase the size of the ECC blinding mask and scale it based on the
    size of the group order. (GH #880 #893 #2308)
  * Add server side support for the TLS asio wrapper. (GH #2229)
  * Add support for using Windows certificate store on MinGW (GH #2280)
  * Add a CLI utility cpu_clock which estimates the speed of the processor cycle counter.
  * Add Roughtime client (GH #2143 #1842)
  * Add support for XMSS X.509 certificates (GH #2172)
  * Add support for X.509 CRLs in FFI layer and Python wrapper (GH #2213)
  * Add AVX2 implementation of SHACAL2 (GH #2196)
  * Support more functionality for X.509 in the Python API (GH #2165)
  * Add generic CPU target useful when building for some new or unusual platform.
  * Disable MD5 in BSI or NIST modes (GH #2188)
  * Many currently public headers are being deprecated. If any such header is included by
    an application, a warning is issued at compile time.
    Headers issuing this warning will be made internal in a future major release.
  * RSA signature performance improvements (GH #2068 #2070)
  * Performance improvements for GCM (GH #2024 #2099 #2119), OCB (#2122), XTS (#2123) and
    ChaCha20Poly1305 (GH #2117), especially for small messages.
  * Add support for constant time AES using NEON and AltiVec (GH #2093 #2095 #2100)
  * Improve performance of POWER8 AES instructions (GH #2096)
  * Add support for the POWER9 hardware random number generator (GH #2026)
  * Add support for 64-bit version of RDRAND, doubling performance on x86-64 (GH #934 #2022)
  * In DTLS server, support a client crashing and then reconnecting from the same
    source port, as described in RFC 6347 sec 4.2.8 (GH #2029)
  * Optimize DTLS MTU splitting to split precisely to the set MTU (GH #2042)
  * Add support for the TLS v1.3 downgrade indicator. (GH #2027)
  * Add Argon2 PBKDF and password hash (GH #459 #1981 #1987)
  * Add Bcrypt-PBKDF (GH #1990)
  * Add server side support for issuing DTLS HelloVerifyRequest messages (GH #1999)
  * Add support for the TLS v1.3 supported_versions extension. (GH #1976)
  * Add Ed25519ph compatible with RFC 8032 (GH #1699 #2000)
  * Add support for OCSP stapling on server side. (GH #1703 #1967)
  * Add a boost::asio TLS stream compatible with boost::asio::ssl. (GH #1839 #1927 #1992)
  * Add a certificate store for Linux/Unix systems. (GH #1885 #1936)
  * Various Fixes</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597579200">- update to 2.15:
  Fix a bug where the name constraint extension did not constrain the alternative
  DN field which can be included in a subject alternative name. This would allow
  a corrupted sub-CA which was otherwise constrained by a name constraint to
  issue a certificate with a prohibited DN.
  Fix a bug in the TLS server during client authentication where where if a
  (disabled by default) static RSA ciphersuite was selected, then no certificate
  request would be sent. This would have an equivalent effect to a client which
  simply replied with an empty Certificate message. (GH #2367)
  Replace the T-Tables implementation of AES with a 32-bit bitsliced version. As
  a result AES is now constant time on all processors. (GH #2346 #2348 #2353
  [#2329] #2355)
  In TLS, enforce that the key usage given in the server certificate allows the
  operation being performed in the ciphersuite. (GH #2367)
  In X.509 certificates, verify that the algorithm parameters are the expected
  NULL or empty. (GH #2367)
  Change the HMAC key schedule to attempt to reduce the information leaked from
  the key schedule with regards to the length of the key, as this is at times (as
  for example in PBKDF2) sensitive information. (GH #2362)
  Add Processor_RNG which wraps RDRAND or the POWER DARN RNG instructions. The
  previous RDRAND_RNG interface is deprecated. (GH #2352)
  The documentation claimed that mlocked pages were created with a guard page
  both before and after. However only a trailing guard page was used. Add a
  leading guard page. (GH #2334)
  Add support for generating and verifying DER-encoded ECDSA signatures in the C
  and Python interfaces. (GH #2357 #2356)
  Workaround a bug in GCC?s UbSan which triggered on a code sequence in XMSS (GH
  [#2322])
  When building documentation using Sphinx avoid parallel builds with version 3.0
  due to a bug in that version (GH #2326 #2324)
  Fix a memory leak in the CommonCrypto block cipher calls (GH #2371)
  Fix a flaky test that would occasionally fail when running the tests with a
  large number of threads. (GH #2325 #2197)
  Additional algorithms are now deprecated: XTEA, GOST, and Tiger. They will be
  removed in a future major release.</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1603800000">- Update to 2.16.0:
  * Now userspace PRNG objects (such as AutoSeeded_RNG and HMAC_DRBG)
    use an internal lock, which allows safe concurrent use. This
    however is purely a precaution in case of accidental sharing of
    such RNG objects; for performance reasons it is always preferable
    to use a RNG per thread if a userspace RNG is needed.
  * DL_Group and EC_Group objects now track if they were created
    from a known trusted group (such as P-256 or an IPsec DH
    parameter). If so, then verification tests can be relaxed, as
    compared to parameters which may have been maliciously
    constructed in order to pass primality checks.
  * RandomNumberGenerator::add_entropy_T assumed its input was a POD
    type but did not verify this.
  * Support OCSP responders that live on a non-standard port.
  * Add support for Solaris sandbox.
  * Support suffixes on release numbers for alpha/beta releases.
  * Fix a bug in EAX which allowed requesting a 0 length tag, which
    had the effect of using a full length tag. Instead omit the
    length field, or request the full tag length explicitly.
  * Fix a memory leak in GCM where if passed an unsuitable block
    cipher (eg not 128 bit) it would throw an exception and leak
    the cipher object.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1604750400">- Botan 2.17.1:
  * Fix bugs in ECDSA signature generation and verifications under
    specific circumstances
  * developer visible changes, including deprecation with warnings
  * optimization in the non-hardware assisted AES key generation
  * Add more detection logic for AVX-512 features
  * Fix a bug parsing deeply nested cipher names
  * Prevent requesting DER encoding of signatures when the
    algorithm did not support it</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1605268800">- Botan 2.17.2:
  * Fix build problem on ppc64
  * Resolve an issue in the modular square root algorithm</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1608724800">- Botan 2.17.3:
  * Harden against side-channels from decoding secret values by
    changing the base64, base58, base32, and hex encoding and
    decoding opearations to run in constant time</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1618574400">- Botan 2.18.0
  * Add support for implementing custom RNG objects through the FFI
    interface
  * Improve safegcd bounds, improving runtime performance
  * Reject non-TLS messages as quickly as possible without waiting
    for a full record.
  * Fixes for TLS::Stream::async_shutdown
- Removed unneeded GNU MP build requirement, support was dropped
  with version 1.11.10
- Enabled check target, verify integrity of build library</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1620648000">- Botan 2.18.1:
  * Fix a build regression in 2.18.0 which caused linker flags
    which contain -l within them (such as -fuse-linker-plugin)
    to be misinterpreted
  * Fix a bug which caused decoding a certificate which contained
    more than one name in a single RDN
  * Fix a bug which caused OID lookup failures when run in a locale
    which uses thousands separators (pt_BR was reported as having
    this issue)
  * DNS names in name constraints were compared with case
    sensitivity, which could cause valid certificates to be
    rejected
  * X.509 name constraint extensions were rejected if non-critical.
    RFC 5280 requires conforming CAs issue such extensions as
    critical, but not all certificates are compliant, and all other
    known implementations do not require this
  * X.509 name constraints were incorrectly applied to the
    certificate which included the constraint
- build with lzma compression support
- build with SQLite support
- build with TPM support
- fix SLE 12 build</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1637755200">- update to 2.18.2:
  * Avoid using short exponents when encrypting in ElGamal, as some PGP
    implementations generate keys with parameters that are weak when
    short exponents are used CVE-2021-40529 boo#1190244
  * Fix a low risk OAEP decryption side channel
  * Work around a miscompilation of SHA-3 caused by a bug in Clang 12
    and XCode 13
  * Remove support in OpenSSL provider for algorithms which are
    disabled by default in OpenSSL 3.0
  * Add CI based on GitHub actions to replace Travis CI
  * Fix the online OCSP test, as the certificate involved had expired.
  * Fix some test failures induced by the expiration of the trust root
    "DST Root CA X3"</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1668686400">- Fixed [CVE-2022-43705,bsc#1205509]
  * Added Botan-CVE-2022-43705.patch
  * Added Botan-CVE-2022-43705-certs.tgz
  * validate that an embedded certificate was issued by the end-entity
    issuing certificate authority when checking OCSP responses.</changelog>
</package>
<package pkgid="6daf3a864f532777ef00ddb5ed10ff99ec061748febb4b069b388c0491bb845c" name="python3-botan" arch="i586">
  <version epoch="0" ver="2.18.2" rel="bp154.2.3.1"/>
  <changelog author="adam.majer@suse.de" date="1518436800">- Don't drop -fstack-clash-protection for openSUSE 42.3 - we just
  need the Update repository present.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1518609600">- change group of libbotan-%{version_suffix} to 'System/Libraries' as
  requested on review</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1518782400">- drop explicit package requirements
- split binary package and documentation from dynamic library package
  and make documentation package noarch
- merge back Botan2 package to Botan with changelog history
- drop Botan patches
    aarch64-support.patch - doesn't seem to be required anymore
    Botan-fix_install_paths.patch - doesn't seem to be required
    no-cpuid-header.patch - SLE11 not target anymore
    Botan-fix_pkgconfig.patch - this seem to be wrong
    Botan-no-buildtime.patch - not needed anymore
    dont-set-mach-value.diff - doesn't apply, unclear and undocumented why it is there
    Botan-inttypes.patch - not required
    Botan-ull_constants.patch.bz2 - no reason anymore</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1522756800">- Update to Botan 2.5
  * Fix error in certificate wildcard matching (CVE-2018-9127), where a
    wildcard cert for b*.example.com would be accepted as a match for any host
    with name *b*.example.com (GH #1519)
  * Add support for RSA-PSS signatures in TLS (GH #1285)
  * Ed25519 certificates are now supported (GH #1501)
  * Many optimizations in ECC operations. ECDSA signatures are 8-10 times
    faster. ECDSA verification is about twice as fast. ECDH key agreement is
    3-4 times faster. (GH #1457 #1478)
  * Implement product scanning Montgomery reduction, which improves
    Diffie-Hellman and RSA performance by 10 to 20% on most platforms. (GH
    [#1472])
  * DSA signing and verification performance has improved by 30-50%.
  * Add a new Credentials_Manager callback that specifies which CAs the server
    has indicated it trusts (GH #1395 fixing #1261)
  * Add new TLS::Callbacks methods that allow creating or removing extensions,
    as well as examining extensions sent by the peer (GH #1394 #1186)
  * Add new TLS::Callbacks methods that allow an application to negotiate use
    of custom elliptic curves. (GH #1448)
  * Add ability to create custom elliptic curves (GH #1441 #1444)
  * Add support for POWER8 AES instructions (GH #1459 #1393 #1206)
  * Fix DSA/ECDSA handling of hashes longer than the group order (GH #1502
    [#986])
  * The default encoding of ECC public keys has changed from compressed to
    uncompressed point representation. This improves compatability with some
    common software packages including Golang?s standard library. (GH #1480
    [#1483])
  * It is now possible to create DNs with custom components. (GH #1490 #1492)
  * It is now possible to specify the serial number of created certificates,
    instead of using the default 128-bit random integer. (GH #1489 #1491)
  * Change DL_Group and EC_Group to store their data as shared_ptr for fast
    copying. Also both classes precompute additional useful values (eg for
    modular reductions). (GH #1435 #1454)
  * Make it possible for PKCS10 requests to include custom extensions. This
    also makes it possible to use muliple SubjectAlternativeNames of a single
    type in a request, which was previously not possible. (GH #1429 #1428)
  * Add new optimized interface for FE1 format preserving encryption. By
    caching a number of values computed in the course of the FPE calculation,
    it provides a 6-7x speedup versus the old API. (GH #1469)
  * Add DSA and ElGamal keygen functions to FFI (#1426)
  * Add Pipe::prepend_filter to replace Pipe::prepend (GH #1402)
  * Fix a memory leak in the OpenSSL block cipher integration, introduced in
  * 2.2.0
  * Use an improved algorithm for generating safe primes which is several tens
    of times faster. Also, fix a bug in the prime sieving algorithm which
    caused standard prime generation (like for RSA keys) to be slower than
    necessary. (GH #1413 #1411)
  * Correct the return value of PK_Encryptor::maximum_input_size which reported
    a much too small value (GH #1410)
  * Remove use of CPU specific optimization flags, instead the user should set
    these via CXXFLAGS if desired. (GH #1392)
  * Resolve an issue that would cause a crash in the tests if they were run on
    a machine without SSE2/NEON/VMX instructions. (GH #1495)
  * The Python module now tries to load DLLs from a list of names and uses the
    first one which successfully loads and indicates it supports the desired
    API level. (GH #1497)
  * Various minor optimizations for SHA-3 (GH #1433 #1434)
  * The output of botan --help has been improved (GH #1387)
  * Add --der-format flag to command line utils, making it possible verify
    DSA/ECDSA signatures generated by OpenSSL command line (GH #1409)
  * Add support for --library-suffix option to configure.py (GH #1405 #1404)
  * Use feature flags to enable/disable system specific code (GH #1378)
  * Add --msvc-runtime option to allow using static runtime (GH #1499 #210)
  * Add ?enable-sanitizers= option to allow specifying which sanitizers to
    enable. The existing --with-sanitizers option just enables some default set
    which is known to work with the minimum required compiler versions.
  * Use either rst2man or rst2man.py for generating man page as distributions
    differ on where this program is installed (GH #1516)
  * The threefish module has been renamed threefish_512 since that is the
    algorithm it provides. (GH #1477)
  * The Perl XS based wrapper has been removed, as it was unmaintained and
    broken. (GH #1412)
  * The sqlite3 encryption patch under contrib has been removed. It is still
    maintained by the original author at
    https://github.com/OlivierJG/botansqlite3</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1523361600">- Update to Botan 2.6
  * CVE-2018-9860 Fix a bug decrypting TLS CBC ciphertexts which could for a
    malformed ciphertext cause the decryptor to read and HMAC an additional 64K
    bytes of data which is not part of the record. This could cause a crash if
    the read went into unmapped memory. No information leak or out of bounds
    write occurs.
  * Add support for OAEP labels (GH #1508)
  * RSA signing is about 15% faster (GH #1523) and RSA verification is about 50% faster.
  * Add exponent blinding to RSA (GH #1523)
  * Add Cipher_Mode::create and AEAD_Mode::create (GH #1527)
  * Fix bug in TLS server introduced in 2.5 which caused connection to fail if
    the client offered any signature algorithm not known to the server (for
    example RSA/SHA-224).
  * Fix a bug in inline asm that would with GCC 7.3 cause incorrect
    computations and an infinite loop during the tests. (GH #1524 #1529)</changelog>
  <changelog author="kasimir_@outlook.de" date="1523534400">- fixed to build on armv6 and armv7</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1531224000">- Update to Botan 2.7
  * CVE-2018-12435 Avoid a side channel in ECDSA signature generation (GH
    [#1604])
  * Avoid a side channel in RSA key generation due to use of a non-constant
    time gcd algorithm. (GH #1542 #1556)
  * Optimize prime generation, especially improving RSA key generation. (GH
    [#1542])
  * Make Karatsuba multiplication, Montgomery field operations, Barrett
    reduction and Montgomery exponentiation const time (GH #1540 #1606 #1609
    [#1610])
  * Optimizations for elliptic curve operations especially improving reductions
    and inversions modulo NIST primes (GH #1534 #1538 #1545 #1546 #1547 #1550)
  * Add 24 word wide Comba multiplication, improving 3072-bit RSA and DH by
    ~25%. (GH #1564)
  * Unroll Montgomery reduction for specific sizes (GH #1603)
  * Improved performance of signature verification in ECGDSA, ECKCDSA, SM2 and
    GOST by 10-15%.
  * XMSS optimizations (GH #1583 #1585)
  * Fix an error that meant XMSS would only sign half as many signatures as is
    allowed (GH #1582)
  * Add support for base32 encoding/decoding (GH #1541)
  * Add BMI2 optimized version of SHA-256, 40% faster on Skylake (GH #1584)
  * Allow the year to be up to 2200 in ASN.1 time objects. Previously this was
    limited to 2100. (GH #1536)
  * Add support for Scrypt password hashing (GH #1570)
  * Add support for using Scrypt for private key encryption (GH #1574)
  * Optimizations for DES/3DES, approx 50% faster when used in certain modes
    such as CBC decrypt or CTR.
  * XMSS signature verification did not check that the signature was of the
    expected length which could lead to a crash. (GH #1537)
  * The bcrypt variants 2b and 2y are now supported.
  * Support for 192-bit Suite B TLS profile is now implemented, as the 128-bit
    Suite B is since 2015 not allowed anymore.
  * Previously botan allowed GCM to be used with an empty nonce, which is not
    allowed by the specification. Now such nonces are rejected.
  * Avoid problems on Windows when compiling in Unicode mode (GH #1615 #1616)
  * Previously for ASN.1 encoded signatures (eg ECDSA) Botan would accept any
    valid BER encoding. Now only the single valid DER encoding is accepted.
  * Correct an error that could in rare cases cause an internal error exception
    when doing computations with the P-224 curve.
  * Optimizations to reduce allocations/copies during DER encoding and BER
    decoding (GH #1571 #1572 #1600)
  * Botan generates X.509 subject key IDs by hashing the public key with
    whatever hash function is being used to sign the certificate. However
    especially for SHA-512 this caused SKIDs that were far longer than
    necessary. Now all SKIDs are truncated to 192 bits.
  * In the test suite use mkstemp to create temporary files instead of creating
    them in the current working directory. (GH #1533 #1530)
  * It is now possible to safely override CXX when invoking make in addition to
    when configure.py is run. (GH #1579)
  * OIDs for Camellia and SM4 in CBC and GCM mode are now defined, making it
    possible to use this algorithms for private key encryption.
  * Avoid creating symlinks to the shared object on OpenBSD (#1535)
  * The factor command runs much faster on larger inputs now.
  * Support for Windows Phone/UWP was deprecated starting in 2.5. This
    deprecation has been reversed as it seems UWP is still actively used. (GH
    [#1586] #1587)
  * Support for Visual C++ 2013 is deprecated, and will be removed in Jan 2019.
  * Added support for GCC?s ?sysroot option to configure.py for
    cross-compiling.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1533038400">- Fix version in baselibs.conf</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1547121600">- Update to Botan 2.9
  * Bump SONAME
  * CVE-2018-20187 Address a side channel during ECC key generation, which used an
    unblinded Montgomery ladder. As a result, a timing attack can reveal
    information about the high bits of the secret key.
  * Fix bugs in TLS which caused negotiation failures when the client used an
    unknown signature algorithm or version (GH #1711 #1709 #1708)
  * Fix bug affecting GCM, EAX and ChaCha20Poly1305 where if the associated data
    was set after starting a message, the new AD was not reflected in the produced
    tag. Now with these modes setting an AD after beginning a message throws an
    exception.
  * Use a smaller sieve which improves performance of prime generation.
  * Fixed a bug that caused ChaCha to produce incorrect output after encrypting 256
    GB. (GH #1728)
  * Add NEON and AltiVec implementations of ChaCha (GH #1719 #1728 #1729)
  * Optimize AVX2 ChaCha (GH #1730)
  * Many more operations in BigInt, ECC and RSA code paths are either fully const
    time or avoid problematic branches that could potentially be exploited in a
    side channel attack. (GH #1738 #1750 #1754 #1755 #1757 #1758 #1759 #1762 #1765
    [#1770] #1773 #1774 #1779 #1780 #1794 #1795 #1796 #1797)
  * Several optimizations for BigInt and ECC, improving ECDSA performance by as
    much as 30%. (GH #1734 #1737 #1777 #1750 #1737 #1788)
  * Support recovering an ECDSA public key from a message/signature pair (GH #664
    [#1784])
  * Add base58 encoding/decoding functions (GH #1783)
  * In the command line interface, add support for reading passphrases from the
    terminal with echo disabled (GH #1756)
  * Add CT::Mask type to simplify const-time programming (GH #1751)
  * Add new configure options --disable-bmi2, --disable-rdrand, and
  - -disable-rdseed to prevent use of those instruction sets.
  * Add error_type and error_code functions to Exception type (GH #1744)
  * Now on POSIX systems posix_memalign is used instead of mmap for allocating the
    page-locked memory pool. This avoids issues with fork. (GH #602 #1798)
  * When available, use RDRAND to generate the additional data in
    Stateful_RNG::randomize_with_ts_input
  * Use vzeroall/vzeroupper intrinsics to avoid AVX2/SSE transition penalties.
  * Support for Visual C++ 2013 has been removed (GH #1557 #1697)
  * Resolve a memory leak when verifying ECDSA signatures with versions of OpenSSL
    before 1.1.0 (GH #1698)
  * Resolve a memory leak using ECDH via OpenSSL (GH #1767)
  * Fix an error in XTS which prohibited encrypting values which were exactly the
    same length as the underlying block size. Messages of this size are allowed by
    the standard and other XTS implementations. (GH #1706)
  * Resolve a bug in TSS which resulted in it using an incorrect length field in
    the shares. Now the correct length is encoded, but either correct or buggy
    lengths are accepted when decoding. (GH #1722)
  * Correct a bug when reducing a negative BigInt modulo a small power of 2. (GH
    [#1755])
  * Add CLI utils for threshold secret splitting. (GH #1722)
  * Fix a bug introduced in 2.8.0 that caused compilation failure if using a single
    amalgamation file with AVX2 enabled. (GH #1700)
  * Add an explicit OS target for Emscripten and improve support for it. (GH #1702)
  * Fix small issues when building for QNX
  * Switch the Travis CI build to using Ubuntu 16.04 (GH #1767)
  * Add options to configure.py to disable generation of pkg-config file, and (for
    systems where pkg-config support defaults to off, like Windows), to enable
    generating it. (GH #1268)
  * Modify configure.py to accept empty lists or trailing/extra commas. (GH #1705)
- Update to Botan 2.8
  * Add support for using Apple CommonCrypto library for hashing (GH #1667),
    cipher modes (GH #1674) and block ciphers (GH #1673).
  * Support for negotiating TLS versions 1.0 and 1.1 is disabled in the default
    TLS policy. In addition, support for negotiating TLS ciphersuites using CBC
    or CCM mode is disabled by default. Applications which need to interop with
    old peers must enable these in their TLS policy object. (GH #1651)
  * During primality testing, use a Lucas test in addition to Miller-Rabin. It
    is possible to construct a composite integer which passes n Miller-Rabin
    tests with probability (1/4)^n. So for a incautious verifier using a small
    number of tests (under 16 or so) it is possible if unlikely they would
    accept such a composite as prime. Adding a Lucas test precludes such an
    attack. (GH #1636)
  * Add XChaCha and XChaCha20Poly1305 (GH #1640)
  * Add AVX2 implementations of ChaCha (GH #1662) and Serpent (GH #1660)
  * Add a new password hashing interface in pwdhash.h (GH #1670)
  * C binding improvements. Added functions to get name and supported
    keylengths of cipher, hash and MAC objects, support for FE1 format
    preserving encryption (GH #1625 #1646), functions to load and save RSA keys
    in PKCS #1 format (GH #1621), HOTP and TOTP algorithms, scrypt, certificate
    verification (GH #1647), functions to get the output length of public key
    operations (GH #1642), and functions for loading and serializing X25519
    keys (GH #1681)
  * Support for building with BOTAN_MP_WORD_BITS set to 8 or 16 has been removed.
  * Previously SM2 had two distinct key types, one for signatures and another
    for encryption. They have now been merged into a single key type since in
    practice it seems the same key is at times used for both operations. (GH
    [#1637])
  * The Cipher_Mode class now derives from SymmetricAlgorithm (GH #1639)
  * Add support for using the ARMv8 instructions for SM4 encryption (GH #1622)
  * The entropy source using SecRandomCopyBytes has been removed as it was
    redundant with other entropy sources (GH #1668)
  * The Python module has much better error checking and reporting, and offers
    new functionality such as scrypt, MPI and FPE. (GH #1643 #1646)
  * Fixed a bug that caused CCM to fail with an exception when used with L=8 (GH #1631 #1632)
  * The default bcrypt work factor has been increased from 10 to 12.
  * The default algorithm used in passhash9 has changed from SHA-256 to
    SHA-512, and the default work factor increased from 10 to 15.
  * In ECC private keys, include the public key data for compatibility with GnuTLS (GH #1634 #1635)
  * Add support for using Linux getrandom syscall to access the system PRNG.
    This is disabled by default, use --with-os-feature=getrandom to enable.
  * It is now possible to encrypt private keys using SIV mode.
  * The FFI function botan_privkey_load now ignores its rng argument.
  * Resolve a problem when building under Visual C++ 15.8 (GH #1624)
  * Fix a bug in XSalsa20 (192-bit Salsa nonces) where if set_iv was called
    twice without calling set_key, the resulting encryption was incorrect. (GH
    [#1640])
  * Handle an error seen when verifying invalid ECDSA signatures using LibreSSL
    on non x86-64 platforms (GH #1627 #1628)
  * Fix bugs in PKCS7 and X9.23 CBC padding schemes, which would ignore the
    first byte in the event the padding took up the entire block. (GH #1690)
  * Correct bugs which would cause CFB, OCB, and GCM modes to crash when they
    were used in an unkeyed state. (GH #1639)
  * Optimizations for SM4 and Poly1305
  * Avoid a cache side channel in the AES key schedule
  * Add pk_encrypt and pk_decrypt CLI operations
  * Now asn1print CLI defaults to printing context-specific fields.
  * Use codec_base for Base64, which matches how Base32 is implemented (GH #1597)
  * The cast module has been split up into cast128 and cast256 (GH #1685)
  * When building under Visual C++ 2013, the user must acknowledge the upcoming
    removal of support using the configure.py flag --ack-vc2013-deprecated (GH
    [#1557])</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1554206400">- Update to Botan 2.10
  * Bump SONAME
  * Warning: XMSS currently implements draft-06 which is not compatible with
    the final RFC 8391 specification. A PR is open to fix this, however it will
    break all current uses of XMSS. If you are currently using XMSS please
    comment at https://github.com/randombit/botan/pull/1858. Otherwise the PR
    will be merged and support for draft-06 will be removed starting in 2.11.
  * Added a new certificate store implementation that can access the MacOS
    keychain certificate store. (GH #1830)
  * Redesigned Memory_Pool class, which services allocations out of a set of
    pages locked into memory (using mlock/VirtualLock). It is now faster and
    with improved exploit mitigations. (GH #1800)
  * Add BMI2 implementations of SHA-512 and SHA-3 which improve performance by
    25-35% on common CPUs. (GH #1815)
  * Unroll SHA-3 computation improving performance by 10-12% (GH #1838)
  * Add a Thread_Pool class. It is now possible to run the tests in multiple
    threads with --test-threads=N flag to select the number of threads to use.
    Use --test-threads=0 to run with as many CPU cores as are available on the
    current system. The default remains single threaded. (GH #1819)
  * XMSS signatures now uses a global thread pool instead of spawning new
    threads for each usage. This improves signature generation performance by
    between 10% and 60% depending on architecture and core count. (GH #1864)
  * Some functions related to encoding and decoding BigInts have been
    deprecated. (GH #1817)
  * Binary encoding and decoding of BigInts has been optimized by performing
    word-size operations when possible. (GH #1817)
  * Rename the exception Integrity_Failure to Invalid_Authentication_Tag to
    make its meaning and usage more clear. The old name remains as a typedef.
    (GH #1816)
  * Support for using Boost filesystem and MSVC?s std::filesystem have been
    removed, since already POSIX and Win32 versions had to be maintained for
    portability. (GH #1814)
  * Newly generated McEliece and XMSS keys now default to being encrypted using
    SIV mode, support for which was added in 2.8.0. Previously GCM was used by
    default for these algorithms.
  * Use arc4random on Android systems (GH #1851)
  * Fix the encoding of PGP-S2K iteration counts (GH #1853 #1854)
  * Add a facility for sandboxing the command line util. Currently FreeBSD
    (Capsicum) and OpenBSD (pledge) sandboxes are supported. (GH #1808)
  * Use if constexpr when available.
  * Disable building shared libs on iOS as it was broken and it is not clear
    shared libraries are ever useful on iOS (GH #1865)
  * Renamed the darwin build target to macos. This should not cause any
    user-visible change. (GH #1866)
  * Add support for using sccache to cache the Windows CI build (GH #1807)
  * Add --extra-cxxflags option which allows adding compilation flags without
    overriding the default set. (GH #1826)
  * Add --format= option to the hash cli which allows formatting the output as
    base64 or base58, default output remains hex.
  * Add base58_enc and base58_dec cli utils for base58 encoding/decoding. (GH #1848)
  * Enable getentropy by default on macOS (GH #1862)
  * Avoid using -momit-leaf-frame-pointer flags, since -fomit-frame-pointer is
    already the default with recent versions of GCC.
  * Fix XLC sanitizer flags.
  * Rename Blake2b class to BLAKE2b to match the official name. There is a typedef for compat.
  * Fix a bug where loading a raw Ed25519_PublicKey of incorrect length would
    lead to a crash. (GH #1850)
  * Fix a bug that caused compilation problems using CryptoNG PRNG. (GH #1832)
  * Extended SHAKE-128 cipher to support any key between 1 and 160 bytes,
    instead of only multiples of 8 bytes.
  * Minor HMAC optimizations.
  * Build fixes for GNU/Hurd.
  * Fix a bug that prevented generating or verifying Ed25519 signatures in the
    CLI (GH #1828 #1829)
  * Fix a compilation error when building the amalgamation outside of the
    original source directory when AVX2 was enabled. (GH #1812)
  * Fix a crash when creating the amalgamation if a header file was edited on
    Windows but then the amalgamation was built on Linux (GH #1763)</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1586347200">- Update to Botan 2.14:
  * Add support for using POWER8+ VPSUMD instruction to accelerate GCM (GH #2247)
  * Optimize the vector permute AES implementation, especially improving
    performance on ARMv7, Aarch64, and POWER. (GH #2243)
  * Use a new algorithm for modular inversions which is both faster
    and more resistant to side channel attacks. (GH #2287 #2296 #2301)
  * Address an issue in CBC padding which would leak the length of the plaintext
    which was being padded. Unpadding during decryption was not affected.
  * Optimize NIST prime field reductions, improving ECDSA by 3-9% (GH #2295)
  * Increase the size of the ECC blinding mask and scale it based on the
    size of the group order. (GH #880 #893 #2308)
  * Add server side support for the TLS asio wrapper. (GH #2229)
  * Add support for using Windows certificate store on MinGW (GH #2280)
  * Add a CLI utility cpu_clock which estimates the speed of the processor cycle counter.
  * Add Roughtime client (GH #2143 #1842)
  * Add support for XMSS X.509 certificates (GH #2172)
  * Add support for X.509 CRLs in FFI layer and Python wrapper (GH #2213)
  * Add AVX2 implementation of SHACAL2 (GH #2196)
  * Support more functionality for X.509 in the Python API (GH #2165)
  * Add generic CPU target useful when building for some new or unusual platform.
  * Disable MD5 in BSI or NIST modes (GH #2188)
  * Many currently public headers are being deprecated. If any such header is included by
    an application, a warning is issued at compile time.
    Headers issuing this warning will be made internal in a future major release.
  * RSA signature performance improvements (GH #2068 #2070)
  * Performance improvements for GCM (GH #2024 #2099 #2119), OCB (#2122), XTS (#2123) and
    ChaCha20Poly1305 (GH #2117), especially for small messages.
  * Add support for constant time AES using NEON and AltiVec (GH #2093 #2095 #2100)
  * Improve performance of POWER8 AES instructions (GH #2096)
  * Add support for the POWER9 hardware random number generator (GH #2026)
  * Add support for 64-bit version of RDRAND, doubling performance on x86-64 (GH #934 #2022)
  * In DTLS server, support a client crashing and then reconnecting from the same
    source port, as described in RFC 6347 sec 4.2.8 (GH #2029)
  * Optimize DTLS MTU splitting to split precisely to the set MTU (GH #2042)
  * Add support for the TLS v1.3 downgrade indicator. (GH #2027)
  * Add Argon2 PBKDF and password hash (GH #459 #1981 #1987)
  * Add Bcrypt-PBKDF (GH #1990)
  * Add server side support for issuing DTLS HelloVerifyRequest messages (GH #1999)
  * Add support for the TLS v1.3 supported_versions extension. (GH #1976)
  * Add Ed25519ph compatible with RFC 8032 (GH #1699 #2000)
  * Add support for OCSP stapling on server side. (GH #1703 #1967)
  * Add a boost::asio TLS stream compatible with boost::asio::ssl. (GH #1839 #1927 #1992)
  * Add a certificate store for Linux/Unix systems. (GH #1885 #1936)
  * Various Fixes</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597579200">- update to 2.15:
  Fix a bug where the name constraint extension did not constrain the alternative
  DN field which can be included in a subject alternative name. This would allow
  a corrupted sub-CA which was otherwise constrained by a name constraint to
  issue a certificate with a prohibited DN.
  Fix a bug in the TLS server during client authentication where where if a
  (disabled by default) static RSA ciphersuite was selected, then no certificate
  request would be sent. This would have an equivalent effect to a client which
  simply replied with an empty Certificate message. (GH #2367)
  Replace the T-Tables implementation of AES with a 32-bit bitsliced version. As
  a result AES is now constant time on all processors. (GH #2346 #2348 #2353
  [#2329] #2355)
  In TLS, enforce that the key usage given in the server certificate allows the
  operation being performed in the ciphersuite. (GH #2367)
  In X.509 certificates, verify that the algorithm parameters are the expected
  NULL or empty. (GH #2367)
  Change the HMAC key schedule to attempt to reduce the information leaked from
  the key schedule with regards to the length of the key, as this is at times (as
  for example in PBKDF2) sensitive information. (GH #2362)
  Add Processor_RNG which wraps RDRAND or the POWER DARN RNG instructions. The
  previous RDRAND_RNG interface is deprecated. (GH #2352)
  The documentation claimed that mlocked pages were created with a guard page
  both before and after. However only a trailing guard page was used. Add a
  leading guard page. (GH #2334)
  Add support for generating and verifying DER-encoded ECDSA signatures in the C
  and Python interfaces. (GH #2357 #2356)
  Workaround a bug in GCC?s UbSan which triggered on a code sequence in XMSS (GH
  [#2322])
  When building documentation using Sphinx avoid parallel builds with version 3.0
  due to a bug in that version (GH #2326 #2324)
  Fix a memory leak in the CommonCrypto block cipher calls (GH #2371)
  Fix a flaky test that would occasionally fail when running the tests with a
  large number of threads. (GH #2325 #2197)
  Additional algorithms are now deprecated: XTEA, GOST, and Tiger. They will be
  removed in a future major release.</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1603800000">- Update to 2.16.0:
  * Now userspace PRNG objects (such as AutoSeeded_RNG and HMAC_DRBG)
    use an internal lock, which allows safe concurrent use. This
    however is purely a precaution in case of accidental sharing of
    such RNG objects; for performance reasons it is always preferable
    to use a RNG per thread if a userspace RNG is needed.
  * DL_Group and EC_Group objects now track if they were created
    from a known trusted group (such as P-256 or an IPsec DH
    parameter). If so, then verification tests can be relaxed, as
    compared to parameters which may have been maliciously
    constructed in order to pass primality checks.
  * RandomNumberGenerator::add_entropy_T assumed its input was a POD
    type but did not verify this.
  * Support OCSP responders that live on a non-standard port.
  * Add support for Solaris sandbox.
  * Support suffixes on release numbers for alpha/beta releases.
  * Fix a bug in EAX which allowed requesting a 0 length tag, which
    had the effect of using a full length tag. Instead omit the
    length field, or request the full tag length explicitly.
  * Fix a memory leak in GCM where if passed an unsuitable block
    cipher (eg not 128 bit) it would throw an exception and leak
    the cipher object.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1604750400">- Botan 2.17.1:
  * Fix bugs in ECDSA signature generation and verifications under
    specific circumstances
  * developer visible changes, including deprecation with warnings
  * optimization in the non-hardware assisted AES key generation
  * Add more detection logic for AVX-512 features
  * Fix a bug parsing deeply nested cipher names
  * Prevent requesting DER encoding of signatures when the
    algorithm did not support it</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1605268800">- Botan 2.17.2:
  * Fix build problem on ppc64
  * Resolve an issue in the modular square root algorithm</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1608724800">- Botan 2.17.3:
  * Harden against side-channels from decoding secret values by
    changing the base64, base58, base32, and hex encoding and
    decoding opearations to run in constant time</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1618574400">- Botan 2.18.0
  * Add support for implementing custom RNG objects through the FFI
    interface
  * Improve safegcd bounds, improving runtime performance
  * Reject non-TLS messages as quickly as possible without waiting
    for a full record.
  * Fixes for TLS::Stream::async_shutdown
- Removed unneeded GNU MP build requirement, support was dropped
  with version 1.11.10
- Enabled check target, verify integrity of build library</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1620648000">- Botan 2.18.1:
  * Fix a build regression in 2.18.0 which caused linker flags
    which contain -l within them (such as -fuse-linker-plugin)
    to be misinterpreted
  * Fix a bug which caused decoding a certificate which contained
    more than one name in a single RDN
  * Fix a bug which caused OID lookup failures when run in a locale
    which uses thousands separators (pt_BR was reported as having
    this issue)
  * DNS names in name constraints were compared with case
    sensitivity, which could cause valid certificates to be
    rejected
  * X.509 name constraint extensions were rejected if non-critical.
    RFC 5280 requires conforming CAs issue such extensions as
    critical, but not all certificates are compliant, and all other
    known implementations do not require this
  * X.509 name constraints were incorrectly applied to the
    certificate which included the constraint
- build with lzma compression support
- build with SQLite support
- build with TPM support
- fix SLE 12 build</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1637755200">- update to 2.18.2:
  * Avoid using short exponents when encrypting in ElGamal, as some PGP
    implementations generate keys with parameters that are weak when
    short exponents are used CVE-2021-40529 boo#1190244
  * Fix a low risk OAEP decryption side channel
  * Work around a miscompilation of SHA-3 caused by a bug in Clang 12
    and XCode 13
  * Remove support in OpenSSL provider for algorithms which are
    disabled by default in OpenSSL 3.0
  * Add CI based on GitHub actions to replace Travis CI
  * Fix the online OCSP test, as the certificate involved had expired.
  * Fix some test failures induced by the expiration of the trust root
    "DST Root CA X3"</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1668686400">- Fixed [CVE-2022-43705,bsc#1205509]
  * Added Botan-CVE-2022-43705.patch
  * Added Botan-CVE-2022-43705-certs.tgz
  * validate that an embedded certificate was issued by the end-entity
    issuing certificate authority when checking OCSP responses.</changelog>
</package>
<package pkgid="42fafe3d6fbbec8f258f5cd93f7d8e6eea49a020576c2440873547b0dd00d737" name="python3-botan" arch="s390x">
  <version epoch="0" ver="2.18.2" rel="bp154.2.3.1"/>
  <changelog author="adam.majer@suse.de" date="1518436800">- Don't drop -fstack-clash-protection for openSUSE 42.3 - we just
  need the Update repository present.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1518609600">- change group of libbotan-%{version_suffix} to 'System/Libraries' as
  requested on review</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1518782400">- drop explicit package requirements
- split binary package and documentation from dynamic library package
  and make documentation package noarch
- merge back Botan2 package to Botan with changelog history
- drop Botan patches
    aarch64-support.patch - doesn't seem to be required anymore
    Botan-fix_install_paths.patch - doesn't seem to be required
    no-cpuid-header.patch - SLE11 not target anymore
    Botan-fix_pkgconfig.patch - this seem to be wrong
    Botan-no-buildtime.patch - not needed anymore
    dont-set-mach-value.diff - doesn't apply, unclear and undocumented why it is there
    Botan-inttypes.patch - not required
    Botan-ull_constants.patch.bz2 - no reason anymore</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1522756800">- Update to Botan 2.5
  * Fix error in certificate wildcard matching (CVE-2018-9127), where a
    wildcard cert for b*.example.com would be accepted as a match for any host
    with name *b*.example.com (GH #1519)
  * Add support for RSA-PSS signatures in TLS (GH #1285)
  * Ed25519 certificates are now supported (GH #1501)
  * Many optimizations in ECC operations. ECDSA signatures are 8-10 times
    faster. ECDSA verification is about twice as fast. ECDH key agreement is
    3-4 times faster. (GH #1457 #1478)
  * Implement product scanning Montgomery reduction, which improves
    Diffie-Hellman and RSA performance by 10 to 20% on most platforms. (GH
    [#1472])
  * DSA signing and verification performance has improved by 30-50%.
  * Add a new Credentials_Manager callback that specifies which CAs the server
    has indicated it trusts (GH #1395 fixing #1261)
  * Add new TLS::Callbacks methods that allow creating or removing extensions,
    as well as examining extensions sent by the peer (GH #1394 #1186)
  * Add new TLS::Callbacks methods that allow an application to negotiate use
    of custom elliptic curves. (GH #1448)
  * Add ability to create custom elliptic curves (GH #1441 #1444)
  * Add support for POWER8 AES instructions (GH #1459 #1393 #1206)
  * Fix DSA/ECDSA handling of hashes longer than the group order (GH #1502
    [#986])
  * The default encoding of ECC public keys has changed from compressed to
    uncompressed point representation. This improves compatability with some
    common software packages including Golang?s standard library. (GH #1480
    [#1483])
  * It is now possible to create DNs with custom components. (GH #1490 #1492)
  * It is now possible to specify the serial number of created certificates,
    instead of using the default 128-bit random integer. (GH #1489 #1491)
  * Change DL_Group and EC_Group to store their data as shared_ptr for fast
    copying. Also both classes precompute additional useful values (eg for
    modular reductions). (GH #1435 #1454)
  * Make it possible for PKCS10 requests to include custom extensions. This
    also makes it possible to use muliple SubjectAlternativeNames of a single
    type in a request, which was previously not possible. (GH #1429 #1428)
  * Add new optimized interface for FE1 format preserving encryption. By
    caching a number of values computed in the course of the FPE calculation,
    it provides a 6-7x speedup versus the old API. (GH #1469)
  * Add DSA and ElGamal keygen functions to FFI (#1426)
  * Add Pipe::prepend_filter to replace Pipe::prepend (GH #1402)
  * Fix a memory leak in the OpenSSL block cipher integration, introduced in
  * 2.2.0
  * Use an improved algorithm for generating safe primes which is several tens
    of times faster. Also, fix a bug in the prime sieving algorithm which
    caused standard prime generation (like for RSA keys) to be slower than
    necessary. (GH #1413 #1411)
  * Correct the return value of PK_Encryptor::maximum_input_size which reported
    a much too small value (GH #1410)
  * Remove use of CPU specific optimization flags, instead the user should set
    these via CXXFLAGS if desired. (GH #1392)
  * Resolve an issue that would cause a crash in the tests if they were run on
    a machine without SSE2/NEON/VMX instructions. (GH #1495)
  * The Python module now tries to load DLLs from a list of names and uses the
    first one which successfully loads and indicates it supports the desired
    API level. (GH #1497)
  * Various minor optimizations for SHA-3 (GH #1433 #1434)
  * The output of botan --help has been improved (GH #1387)
  * Add --der-format flag to command line utils, making it possible verify
    DSA/ECDSA signatures generated by OpenSSL command line (GH #1409)
  * Add support for --library-suffix option to configure.py (GH #1405 #1404)
  * Use feature flags to enable/disable system specific code (GH #1378)
  * Add --msvc-runtime option to allow using static runtime (GH #1499 #210)
  * Add ?enable-sanitizers= option to allow specifying which sanitizers to
    enable. The existing --with-sanitizers option just enables some default set
    which is known to work with the minimum required compiler versions.
  * Use either rst2man or rst2man.py for generating man page as distributions
    differ on where this program is installed (GH #1516)
  * The threefish module has been renamed threefish_512 since that is the
    algorithm it provides. (GH #1477)
  * The Perl XS based wrapper has been removed, as it was unmaintained and
    broken. (GH #1412)
  * The sqlite3 encryption patch under contrib has been removed. It is still
    maintained by the original author at
    https://github.com/OlivierJG/botansqlite3</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1523361600">- Update to Botan 2.6
  * CVE-2018-9860 Fix a bug decrypting TLS CBC ciphertexts which could for a
    malformed ciphertext cause the decryptor to read and HMAC an additional 64K
    bytes of data which is not part of the record. This could cause a crash if
    the read went into unmapped memory. No information leak or out of bounds
    write occurs.
  * Add support for OAEP labels (GH #1508)
  * RSA signing is about 15% faster (GH #1523) and RSA verification is about 50% faster.
  * Add exponent blinding to RSA (GH #1523)
  * Add Cipher_Mode::create and AEAD_Mode::create (GH #1527)
  * Fix bug in TLS server introduced in 2.5 which caused connection to fail if
    the client offered any signature algorithm not known to the server (for
    example RSA/SHA-224).
  * Fix a bug in inline asm that would with GCC 7.3 cause incorrect
    computations and an infinite loop during the tests. (GH #1524 #1529)</changelog>
  <changelog author="kasimir_@outlook.de" date="1523534400">- fixed to build on armv6 and armv7</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1531224000">- Update to Botan 2.7
  * CVE-2018-12435 Avoid a side channel in ECDSA signature generation (GH
    [#1604])
  * Avoid a side channel in RSA key generation due to use of a non-constant
    time gcd algorithm. (GH #1542 #1556)
  * Optimize prime generation, especially improving RSA key generation. (GH
    [#1542])
  * Make Karatsuba multiplication, Montgomery field operations, Barrett
    reduction and Montgomery exponentiation const time (GH #1540 #1606 #1609
    [#1610])
  * Optimizations for elliptic curve operations especially improving reductions
    and inversions modulo NIST primes (GH #1534 #1538 #1545 #1546 #1547 #1550)
  * Add 24 word wide Comba multiplication, improving 3072-bit RSA and DH by
    ~25%. (GH #1564)
  * Unroll Montgomery reduction for specific sizes (GH #1603)
  * Improved performance of signature verification in ECGDSA, ECKCDSA, SM2 and
    GOST by 10-15%.
  * XMSS optimizations (GH #1583 #1585)
  * Fix an error that meant XMSS would only sign half as many signatures as is
    allowed (GH #1582)
  * Add support for base32 encoding/decoding (GH #1541)
  * Add BMI2 optimized version of SHA-256, 40% faster on Skylake (GH #1584)
  * Allow the year to be up to 2200 in ASN.1 time objects. Previously this was
    limited to 2100. (GH #1536)
  * Add support for Scrypt password hashing (GH #1570)
  * Add support for using Scrypt for private key encryption (GH #1574)
  * Optimizations for DES/3DES, approx 50% faster when used in certain modes
    such as CBC decrypt or CTR.
  * XMSS signature verification did not check that the signature was of the
    expected length which could lead to a crash. (GH #1537)
  * The bcrypt variants 2b and 2y are now supported.
  * Support for 192-bit Suite B TLS profile is now implemented, as the 128-bit
    Suite B is since 2015 not allowed anymore.
  * Previously botan allowed GCM to be used with an empty nonce, which is not
    allowed by the specification. Now such nonces are rejected.
  * Avoid problems on Windows when compiling in Unicode mode (GH #1615 #1616)
  * Previously for ASN.1 encoded signatures (eg ECDSA) Botan would accept any
    valid BER encoding. Now only the single valid DER encoding is accepted.
  * Correct an error that could in rare cases cause an internal error exception
    when doing computations with the P-224 curve.
  * Optimizations to reduce allocations/copies during DER encoding and BER
    decoding (GH #1571 #1572 #1600)
  * Botan generates X.509 subject key IDs by hashing the public key with
    whatever hash function is being used to sign the certificate. However
    especially for SHA-512 this caused SKIDs that were far longer than
    necessary. Now all SKIDs are truncated to 192 bits.
  * In the test suite use mkstemp to create temporary files instead of creating
    them in the current working directory. (GH #1533 #1530)
  * It is now possible to safely override CXX when invoking make in addition to
    when configure.py is run. (GH #1579)
  * OIDs for Camellia and SM4 in CBC and GCM mode are now defined, making it
    possible to use this algorithms for private key encryption.
  * Avoid creating symlinks to the shared object on OpenBSD (#1535)
  * The factor command runs much faster on larger inputs now.
  * Support for Windows Phone/UWP was deprecated starting in 2.5. This
    deprecation has been reversed as it seems UWP is still actively used. (GH
    [#1586] #1587)
  * Support for Visual C++ 2013 is deprecated, and will be removed in Jan 2019.
  * Added support for GCC?s ?sysroot option to configure.py for
    cross-compiling.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1533038400">- Fix version in baselibs.conf</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1547121600">- Update to Botan 2.9
  * Bump SONAME
  * CVE-2018-20187 Address a side channel during ECC key generation, which used an
    unblinded Montgomery ladder. As a result, a timing attack can reveal
    information about the high bits of the secret key.
  * Fix bugs in TLS which caused negotiation failures when the client used an
    unknown signature algorithm or version (GH #1711 #1709 #1708)
  * Fix bug affecting GCM, EAX and ChaCha20Poly1305 where if the associated data
    was set after starting a message, the new AD was not reflected in the produced
    tag. Now with these modes setting an AD after beginning a message throws an
    exception.
  * Use a smaller sieve which improves performance of prime generation.
  * Fixed a bug that caused ChaCha to produce incorrect output after encrypting 256
    GB. (GH #1728)
  * Add NEON and AltiVec implementations of ChaCha (GH #1719 #1728 #1729)
  * Optimize AVX2 ChaCha (GH #1730)
  * Many more operations in BigInt, ECC and RSA code paths are either fully const
    time or avoid problematic branches that could potentially be exploited in a
    side channel attack. (GH #1738 #1750 #1754 #1755 #1757 #1758 #1759 #1762 #1765
    [#1770] #1773 #1774 #1779 #1780 #1794 #1795 #1796 #1797)
  * Several optimizations for BigInt and ECC, improving ECDSA performance by as
    much as 30%. (GH #1734 #1737 #1777 #1750 #1737 #1788)
  * Support recovering an ECDSA public key from a message/signature pair (GH #664
    [#1784])
  * Add base58 encoding/decoding functions (GH #1783)
  * In the command line interface, add support for reading passphrases from the
    terminal with echo disabled (GH #1756)
  * Add CT::Mask type to simplify const-time programming (GH #1751)
  * Add new configure options --disable-bmi2, --disable-rdrand, and
  - -disable-rdseed to prevent use of those instruction sets.
  * Add error_type and error_code functions to Exception type (GH #1744)
  * Now on POSIX systems posix_memalign is used instead of mmap for allocating the
    page-locked memory pool. This avoids issues with fork. (GH #602 #1798)
  * When available, use RDRAND to generate the additional data in
    Stateful_RNG::randomize_with_ts_input
  * Use vzeroall/vzeroupper intrinsics to avoid AVX2/SSE transition penalties.
  * Support for Visual C++ 2013 has been removed (GH #1557 #1697)
  * Resolve a memory leak when verifying ECDSA signatures with versions of OpenSSL
    before 1.1.0 (GH #1698)
  * Resolve a memory leak using ECDH via OpenSSL (GH #1767)
  * Fix an error in XTS which prohibited encrypting values which were exactly the
    same length as the underlying block size. Messages of this size are allowed by
    the standard and other XTS implementations. (GH #1706)
  * Resolve a bug in TSS which resulted in it using an incorrect length field in
    the shares. Now the correct length is encoded, but either correct or buggy
    lengths are accepted when decoding. (GH #1722)
  * Correct a bug when reducing a negative BigInt modulo a small power of 2. (GH
    [#1755])
  * Add CLI utils for threshold secret splitting. (GH #1722)
  * Fix a bug introduced in 2.8.0 that caused compilation failure if using a single
    amalgamation file with AVX2 enabled. (GH #1700)
  * Add an explicit OS target for Emscripten and improve support for it. (GH #1702)
  * Fix small issues when building for QNX
  * Switch the Travis CI build to using Ubuntu 16.04 (GH #1767)
  * Add options to configure.py to disable generation of pkg-config file, and (for
    systems where pkg-config support defaults to off, like Windows), to enable
    generating it. (GH #1268)
  * Modify configure.py to accept empty lists or trailing/extra commas. (GH #1705)
- Update to Botan 2.8
  * Add support for using Apple CommonCrypto library for hashing (GH #1667),
    cipher modes (GH #1674) and block ciphers (GH #1673).
  * Support for negotiating TLS versions 1.0 and 1.1 is disabled in the default
    TLS policy. In addition, support for negotiating TLS ciphersuites using CBC
    or CCM mode is disabled by default. Applications which need to interop with
    old peers must enable these in their TLS policy object. (GH #1651)
  * During primality testing, use a Lucas test in addition to Miller-Rabin. It
    is possible to construct a composite integer which passes n Miller-Rabin
    tests with probability (1/4)^n. So for a incautious verifier using a small
    number of tests (under 16 or so) it is possible if unlikely they would
    accept such a composite as prime. Adding a Lucas test precludes such an
    attack. (GH #1636)
  * Add XChaCha and XChaCha20Poly1305 (GH #1640)
  * Add AVX2 implementations of ChaCha (GH #1662) and Serpent (GH #1660)
  * Add a new password hashing interface in pwdhash.h (GH #1670)
  * C binding improvements. Added functions to get name and supported
    keylengths of cipher, hash and MAC objects, support for FE1 format
    preserving encryption (GH #1625 #1646), functions to load and save RSA keys
    in PKCS #1 format (GH #1621), HOTP and TOTP algorithms, scrypt, certificate
    verification (GH #1647), functions to get the output length of public key
    operations (GH #1642), and functions for loading and serializing X25519
    keys (GH #1681)
  * Support for building with BOTAN_MP_WORD_BITS set to 8 or 16 has been removed.
  * Previously SM2 had two distinct key types, one for signatures and another
    for encryption. They have now been merged into a single key type since in
    practice it seems the same key is at times used for both operations. (GH
    [#1637])
  * The Cipher_Mode class now derives from SymmetricAlgorithm (GH #1639)
  * Add support for using the ARMv8 instructions for SM4 encryption (GH #1622)
  * The entropy source using SecRandomCopyBytes has been removed as it was
    redundant with other entropy sources (GH #1668)
  * The Python module has much better error checking and reporting, and offers
    new functionality such as scrypt, MPI and FPE. (GH #1643 #1646)
  * Fixed a bug that caused CCM to fail with an exception when used with L=8 (GH #1631 #1632)
  * The default bcrypt work factor has been increased from 10 to 12.
  * The default algorithm used in passhash9 has changed from SHA-256 to
    SHA-512, and the default work factor increased from 10 to 15.
  * In ECC private keys, include the public key data for compatibility with GnuTLS (GH #1634 #1635)
  * Add support for using Linux getrandom syscall to access the system PRNG.
    This is disabled by default, use --with-os-feature=getrandom to enable.
  * It is now possible to encrypt private keys using SIV mode.
  * The FFI function botan_privkey_load now ignores its rng argument.
  * Resolve a problem when building under Visual C++ 15.8 (GH #1624)
  * Fix a bug in XSalsa20 (192-bit Salsa nonces) where if set_iv was called
    twice without calling set_key, the resulting encryption was incorrect. (GH
    [#1640])
  * Handle an error seen when verifying invalid ECDSA signatures using LibreSSL
    on non x86-64 platforms (GH #1627 #1628)
  * Fix bugs in PKCS7 and X9.23 CBC padding schemes, which would ignore the
    first byte in the event the padding took up the entire block. (GH #1690)
  * Correct bugs which would cause CFB, OCB, and GCM modes to crash when they
    were used in an unkeyed state. (GH #1639)
  * Optimizations for SM4 and Poly1305
  * Avoid a cache side channel in the AES key schedule
  * Add pk_encrypt and pk_decrypt CLI operations
  * Now asn1print CLI defaults to printing context-specific fields.
  * Use codec_base for Base64, which matches how Base32 is implemented (GH #1597)
  * The cast module has been split up into cast128 and cast256 (GH #1685)
  * When building under Visual C++ 2013, the user must acknowledge the upcoming
    removal of support using the configure.py flag --ack-vc2013-deprecated (GH
    [#1557])</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1554206400">- Update to Botan 2.10
  * Bump SONAME
  * Warning: XMSS currently implements draft-06 which is not compatible with
    the final RFC 8391 specification. A PR is open to fix this, however it will
    break all current uses of XMSS. If you are currently using XMSS please
    comment at https://github.com/randombit/botan/pull/1858. Otherwise the PR
    will be merged and support for draft-06 will be removed starting in 2.11.
  * Added a new certificate store implementation that can access the MacOS
    keychain certificate store. (GH #1830)
  * Redesigned Memory_Pool class, which services allocations out of a set of
    pages locked into memory (using mlock/VirtualLock). It is now faster and
    with improved exploit mitigations. (GH #1800)
  * Add BMI2 implementations of SHA-512 and SHA-3 which improve performance by
    25-35% on common CPUs. (GH #1815)
  * Unroll SHA-3 computation improving performance by 10-12% (GH #1838)
  * Add a Thread_Pool class. It is now possible to run the tests in multiple
    threads with --test-threads=N flag to select the number of threads to use.
    Use --test-threads=0 to run with as many CPU cores as are available on the
    current system. The default remains single threaded. (GH #1819)
  * XMSS signatures now uses a global thread pool instead of spawning new
    threads for each usage. This improves signature generation performance by
    between 10% and 60% depending on architecture and core count. (GH #1864)
  * Some functions related to encoding and decoding BigInts have been
    deprecated. (GH #1817)
  * Binary encoding and decoding of BigInts has been optimized by performing
    word-size operations when possible. (GH #1817)
  * Rename the exception Integrity_Failure to Invalid_Authentication_Tag to
    make its meaning and usage more clear. The old name remains as a typedef.
    (GH #1816)
  * Support for using Boost filesystem and MSVC?s std::filesystem have been
    removed, since already POSIX and Win32 versions had to be maintained for
    portability. (GH #1814)
  * Newly generated McEliece and XMSS keys now default to being encrypted using
    SIV mode, support for which was added in 2.8.0. Previously GCM was used by
    default for these algorithms.
  * Use arc4random on Android systems (GH #1851)
  * Fix the encoding of PGP-S2K iteration counts (GH #1853 #1854)
  * Add a facility for sandboxing the command line util. Currently FreeBSD
    (Capsicum) and OpenBSD (pledge) sandboxes are supported. (GH #1808)
  * Use if constexpr when available.
  * Disable building shared libs on iOS as it was broken and it is not clear
    shared libraries are ever useful on iOS (GH #1865)
  * Renamed the darwin build target to macos. This should not cause any
    user-visible change. (GH #1866)
  * Add support for using sccache to cache the Windows CI build (GH #1807)
  * Add --extra-cxxflags option which allows adding compilation flags without
    overriding the default set. (GH #1826)
  * Add --format= option to the hash cli which allows formatting the output as
    base64 or base58, default output remains hex.
  * Add base58_enc and base58_dec cli utils for base58 encoding/decoding. (GH #1848)
  * Enable getentropy by default on macOS (GH #1862)
  * Avoid using -momit-leaf-frame-pointer flags, since -fomit-frame-pointer is
    already the default with recent versions of GCC.
  * Fix XLC sanitizer flags.
  * Rename Blake2b class to BLAKE2b to match the official name. There is a typedef for compat.
  * Fix a bug where loading a raw Ed25519_PublicKey of incorrect length would
    lead to a crash. (GH #1850)
  * Fix a bug that caused compilation problems using CryptoNG PRNG. (GH #1832)
  * Extended SHAKE-128 cipher to support any key between 1 and 160 bytes,
    instead of only multiples of 8 bytes.
  * Minor HMAC optimizations.
  * Build fixes for GNU/Hurd.
  * Fix a bug that prevented generating or verifying Ed25519 signatures in the
    CLI (GH #1828 #1829)
  * Fix a compilation error when building the amalgamation outside of the
    original source directory when AVX2 was enabled. (GH #1812)
  * Fix a crash when creating the amalgamation if a header file was edited on
    Windows but then the amalgamation was built on Linux (GH #1763)</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1586347200">- Update to Botan 2.14:
  * Add support for using POWER8+ VPSUMD instruction to accelerate GCM (GH #2247)
  * Optimize the vector permute AES implementation, especially improving
    performance on ARMv7, Aarch64, and POWER. (GH #2243)
  * Use a new algorithm for modular inversions which is both faster
    and more resistant to side channel attacks. (GH #2287 #2296 #2301)
  * Address an issue in CBC padding which would leak the length of the plaintext
    which was being padded. Unpadding during decryption was not affected.
  * Optimize NIST prime field reductions, improving ECDSA by 3-9% (GH #2295)
  * Increase the size of the ECC blinding mask and scale it based on the
    size of the group order. (GH #880 #893 #2308)
  * Add server side support for the TLS asio wrapper. (GH #2229)
  * Add support for using Windows certificate store on MinGW (GH #2280)
  * Add a CLI utility cpu_clock which estimates the speed of the processor cycle counter.
  * Add Roughtime client (GH #2143 #1842)
  * Add support for XMSS X.509 certificates (GH #2172)
  * Add support for X.509 CRLs in FFI layer and Python wrapper (GH #2213)
  * Add AVX2 implementation of SHACAL2 (GH #2196)
  * Support more functionality for X.509 in the Python API (GH #2165)
  * Add generic CPU target useful when building for some new or unusual platform.
  * Disable MD5 in BSI or NIST modes (GH #2188)
  * Many currently public headers are being deprecated. If any such header is included by
    an application, a warning is issued at compile time.
    Headers issuing this warning will be made internal in a future major release.
  * RSA signature performance improvements (GH #2068 #2070)
  * Performance improvements for GCM (GH #2024 #2099 #2119), OCB (#2122), XTS (#2123) and
    ChaCha20Poly1305 (GH #2117), especially for small messages.
  * Add support for constant time AES using NEON and AltiVec (GH #2093 #2095 #2100)
  * Improve performance of POWER8 AES instructions (GH #2096)
  * Add support for the POWER9 hardware random number generator (GH #2026)
  * Add support for 64-bit version of RDRAND, doubling performance on x86-64 (GH #934 #2022)
  * In DTLS server, support a client crashing and then reconnecting from the same
    source port, as described in RFC 6347 sec 4.2.8 (GH #2029)
  * Optimize DTLS MTU splitting to split precisely to the set MTU (GH #2042)
  * Add support for the TLS v1.3 downgrade indicator. (GH #2027)
  * Add Argon2 PBKDF and password hash (GH #459 #1981 #1987)
  * Add Bcrypt-PBKDF (GH #1990)
  * Add server side support for issuing DTLS HelloVerifyRequest messages (GH #1999)
  * Add support for the TLS v1.3 supported_versions extension. (GH #1976)
  * Add Ed25519ph compatible with RFC 8032 (GH #1699 #2000)
  * Add support for OCSP stapling on server side. (GH #1703 #1967)
  * Add a boost::asio TLS stream compatible with boost::asio::ssl. (GH #1839 #1927 #1992)
  * Add a certificate store for Linux/Unix systems. (GH #1885 #1936)
  * Various Fixes</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597579200">- update to 2.15:
  Fix a bug where the name constraint extension did not constrain the alternative
  DN field which can be included in a subject alternative name. This would allow
  a corrupted sub-CA which was otherwise constrained by a name constraint to
  issue a certificate with a prohibited DN.
  Fix a bug in the TLS server during client authentication where where if a
  (disabled by default) static RSA ciphersuite was selected, then no certificate
  request would be sent. This would have an equivalent effect to a client which
  simply replied with an empty Certificate message. (GH #2367)
  Replace the T-Tables implementation of AES with a 32-bit bitsliced version. As
  a result AES is now constant time on all processors. (GH #2346 #2348 #2353
  [#2329] #2355)
  In TLS, enforce that the key usage given in the server certificate allows the
  operation being performed in the ciphersuite. (GH #2367)
  In X.509 certificates, verify that the algorithm parameters are the expected
  NULL or empty. (GH #2367)
  Change the HMAC key schedule to attempt to reduce the information leaked from
  the key schedule with regards to the length of the key, as this is at times (as
  for example in PBKDF2) sensitive information. (GH #2362)
  Add Processor_RNG which wraps RDRAND or the POWER DARN RNG instructions. The
  previous RDRAND_RNG interface is deprecated. (GH #2352)
  The documentation claimed that mlocked pages were created with a guard page
  both before and after. However only a trailing guard page was used. Add a
  leading guard page. (GH #2334)
  Add support for generating and verifying DER-encoded ECDSA signatures in the C
  and Python interfaces. (GH #2357 #2356)
  Workaround a bug in GCC?s UbSan which triggered on a code sequence in XMSS (GH
  [#2322])
  When building documentation using Sphinx avoid parallel builds with version 3.0
  due to a bug in that version (GH #2326 #2324)
  Fix a memory leak in the CommonCrypto block cipher calls (GH #2371)
  Fix a flaky test that would occasionally fail when running the tests with a
  large number of threads. (GH #2325 #2197)
  Additional algorithms are now deprecated: XTEA, GOST, and Tiger. They will be
  removed in a future major release.</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1603800000">- Update to 2.16.0:
  * Now userspace PRNG objects (such as AutoSeeded_RNG and HMAC_DRBG)
    use an internal lock, which allows safe concurrent use. This
    however is purely a precaution in case of accidental sharing of
    such RNG objects; for performance reasons it is always preferable
    to use a RNG per thread if a userspace RNG is needed.
  * DL_Group and EC_Group objects now track if they were created
    from a known trusted group (such as P-256 or an IPsec DH
    parameter). If so, then verification tests can be relaxed, as
    compared to parameters which may have been maliciously
    constructed in order to pass primality checks.
  * RandomNumberGenerator::add_entropy_T assumed its input was a POD
    type but did not verify this.
  * Support OCSP responders that live on a non-standard port.
  * Add support for Solaris sandbox.
  * Support suffixes on release numbers for alpha/beta releases.
  * Fix a bug in EAX which allowed requesting a 0 length tag, which
    had the effect of using a full length tag. Instead omit the
    length field, or request the full tag length explicitly.
  * Fix a memory leak in GCM where if passed an unsuitable block
    cipher (eg not 128 bit) it would throw an exception and leak
    the cipher object.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1604750400">- Botan 2.17.1:
  * Fix bugs in ECDSA signature generation and verifications under
    specific circumstances
  * developer visible changes, including deprecation with warnings
  * optimization in the non-hardware assisted AES key generation
  * Add more detection logic for AVX-512 features
  * Fix a bug parsing deeply nested cipher names
  * Prevent requesting DER encoding of signatures when the
    algorithm did not support it</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1605268800">- Botan 2.17.2:
  * Fix build problem on ppc64
  * Resolve an issue in the modular square root algorithm</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1608724800">- Botan 2.17.3:
  * Harden against side-channels from decoding secret values by
    changing the base64, base58, base32, and hex encoding and
    decoding opearations to run in constant time</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1618574400">- Botan 2.18.0
  * Add support for implementing custom RNG objects through the FFI
    interface
  * Improve safegcd bounds, improving runtime performance
  * Reject non-TLS messages as quickly as possible without waiting
    for a full record.
  * Fixes for TLS::Stream::async_shutdown
- Removed unneeded GNU MP build requirement, support was dropped
  with version 1.11.10
- Enabled check target, verify integrity of build library</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1620648000">- Botan 2.18.1:
  * Fix a build regression in 2.18.0 which caused linker flags
    which contain -l within them (such as -fuse-linker-plugin)
    to be misinterpreted
  * Fix a bug which caused decoding a certificate which contained
    more than one name in a single RDN
  * Fix a bug which caused OID lookup failures when run in a locale
    which uses thousands separators (pt_BR was reported as having
    this issue)
  * DNS names in name constraints were compared with case
    sensitivity, which could cause valid certificates to be
    rejected
  * X.509 name constraint extensions were rejected if non-critical.
    RFC 5280 requires conforming CAs issue such extensions as
    critical, but not all certificates are compliant, and all other
    known implementations do not require this
  * X.509 name constraints were incorrectly applied to the
    certificate which included the constraint
- build with lzma compression support
- build with SQLite support
- build with TPM support
- fix SLE 12 build</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1637755200">- update to 2.18.2:
  * Avoid using short exponents when encrypting in ElGamal, as some PGP
    implementations generate keys with parameters that are weak when
    short exponents are used CVE-2021-40529 boo#1190244
  * Fix a low risk OAEP decryption side channel
  * Work around a miscompilation of SHA-3 caused by a bug in Clang 12
    and XCode 13
  * Remove support in OpenSSL provider for algorithms which are
    disabled by default in OpenSSL 3.0
  * Add CI based on GitHub actions to replace Travis CI
  * Fix the online OCSP test, as the certificate involved had expired.
  * Fix some test failures induced by the expiration of the trust root
    "DST Root CA X3"</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1668686400">- Fixed [CVE-2022-43705,bsc#1205509]
  * Added Botan-CVE-2022-43705.patch
  * Added Botan-CVE-2022-43705-certs.tgz
  * validate that an embedded certificate was issued by the end-entity
    issuing certificate authority when checking OCSP responses.</changelog>
</package>
<package pkgid="782365b057057baa25a76caa7503738e5ee298950a7e275840b81cd7ff00c5d8" name="python3-botan" arch="x86_64">
  <version epoch="0" ver="2.18.2" rel="bp154.2.3.1"/>
  <changelog author="adam.majer@suse.de" date="1518436800">- Don't drop -fstack-clash-protection for openSUSE 42.3 - we just
  need the Update repository present.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1518609600">- change group of libbotan-%{version_suffix} to 'System/Libraries' as
  requested on review</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1518782400">- drop explicit package requirements
- split binary package and documentation from dynamic library package
  and make documentation package noarch
- merge back Botan2 package to Botan with changelog history
- drop Botan patches
    aarch64-support.patch - doesn't seem to be required anymore
    Botan-fix_install_paths.patch - doesn't seem to be required
    no-cpuid-header.patch - SLE11 not target anymore
    Botan-fix_pkgconfig.patch - this seem to be wrong
    Botan-no-buildtime.patch - not needed anymore
    dont-set-mach-value.diff - doesn't apply, unclear and undocumented why it is there
    Botan-inttypes.patch - not required
    Botan-ull_constants.patch.bz2 - no reason anymore</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1522756800">- Update to Botan 2.5
  * Fix error in certificate wildcard matching (CVE-2018-9127), where a
    wildcard cert for b*.example.com would be accepted as a match for any host
    with name *b*.example.com (GH #1519)
  * Add support for RSA-PSS signatures in TLS (GH #1285)
  * Ed25519 certificates are now supported (GH #1501)
  * Many optimizations in ECC operations. ECDSA signatures are 8-10 times
    faster. ECDSA verification is about twice as fast. ECDH key agreement is
    3-4 times faster. (GH #1457 #1478)
  * Implement product scanning Montgomery reduction, which improves
    Diffie-Hellman and RSA performance by 10 to 20% on most platforms. (GH
    [#1472])
  * DSA signing and verification performance has improved by 30-50%.
  * Add a new Credentials_Manager callback that specifies which CAs the server
    has indicated it trusts (GH #1395 fixing #1261)
  * Add new TLS::Callbacks methods that allow creating or removing extensions,
    as well as examining extensions sent by the peer (GH #1394 #1186)
  * Add new TLS::Callbacks methods that allow an application to negotiate use
    of custom elliptic curves. (GH #1448)
  * Add ability to create custom elliptic curves (GH #1441 #1444)
  * Add support for POWER8 AES instructions (GH #1459 #1393 #1206)
  * Fix DSA/ECDSA handling of hashes longer than the group order (GH #1502
    [#986])
  * The default encoding of ECC public keys has changed from compressed to
    uncompressed point representation. This improves compatability with some
    common software packages including Golang?s standard library. (GH #1480
    [#1483])
  * It is now possible to create DNs with custom components. (GH #1490 #1492)
  * It is now possible to specify the serial number of created certificates,
    instead of using the default 128-bit random integer. (GH #1489 #1491)
  * Change DL_Group and EC_Group to store their data as shared_ptr for fast
    copying. Also both classes precompute additional useful values (eg for
    modular reductions). (GH #1435 #1454)
  * Make it possible for PKCS10 requests to include custom extensions. This
    also makes it possible to use muliple SubjectAlternativeNames of a single
    type in a request, which was previously not possible. (GH #1429 #1428)
  * Add new optimized interface for FE1 format preserving encryption. By
    caching a number of values computed in the course of the FPE calculation,
    it provides a 6-7x speedup versus the old API. (GH #1469)
  * Add DSA and ElGamal keygen functions to FFI (#1426)
  * Add Pipe::prepend_filter to replace Pipe::prepend (GH #1402)
  * Fix a memory leak in the OpenSSL block cipher integration, introduced in
  * 2.2.0
  * Use an improved algorithm for generating safe primes which is several tens
    of times faster. Also, fix a bug in the prime sieving algorithm which
    caused standard prime generation (like for RSA keys) to be slower than
    necessary. (GH #1413 #1411)
  * Correct the return value of PK_Encryptor::maximum_input_size which reported
    a much too small value (GH #1410)
  * Remove use of CPU specific optimization flags, instead the user should set
    these via CXXFLAGS if desired. (GH #1392)
  * Resolve an issue that would cause a crash in the tests if they were run on
    a machine without SSE2/NEON/VMX instructions. (GH #1495)
  * The Python module now tries to load DLLs from a list of names and uses the
    first one which successfully loads and indicates it supports the desired
    API level. (GH #1497)
  * Various minor optimizations for SHA-3 (GH #1433 #1434)
  * The output of botan --help has been improved (GH #1387)
  * Add --der-format flag to command line utils, making it possible verify
    DSA/ECDSA signatures generated by OpenSSL command line (GH #1409)
  * Add support for --library-suffix option to configure.py (GH #1405 #1404)
  * Use feature flags to enable/disable system specific code (GH #1378)
  * Add --msvc-runtime option to allow using static runtime (GH #1499 #210)
  * Add ?enable-sanitizers= option to allow specifying which sanitizers to
    enable. The existing --with-sanitizers option just enables some default set
    which is known to work with the minimum required compiler versions.
  * Use either rst2man or rst2man.py for generating man page as distributions
    differ on where this program is installed (GH #1516)
  * The threefish module has been renamed threefish_512 since that is the
    algorithm it provides. (GH #1477)
  * The Perl XS based wrapper has been removed, as it was unmaintained and
    broken. (GH #1412)
  * The sqlite3 encryption patch under contrib has been removed. It is still
    maintained by the original author at
    https://github.com/OlivierJG/botansqlite3</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1523361600">- Update to Botan 2.6
  * CVE-2018-9860 Fix a bug decrypting TLS CBC ciphertexts which could for a
    malformed ciphertext cause the decryptor to read and HMAC an additional 64K
    bytes of data which is not part of the record. This could cause a crash if
    the read went into unmapped memory. No information leak or out of bounds
    write occurs.
  * Add support for OAEP labels (GH #1508)
  * RSA signing is about 15% faster (GH #1523) and RSA verification is about 50% faster.
  * Add exponent blinding to RSA (GH #1523)
  * Add Cipher_Mode::create and AEAD_Mode::create (GH #1527)
  * Fix bug in TLS server introduced in 2.5 which caused connection to fail if
    the client offered any signature algorithm not known to the server (for
    example RSA/SHA-224).
  * Fix a bug in inline asm that would with GCC 7.3 cause incorrect
    computations and an infinite loop during the tests. (GH #1524 #1529)</changelog>
  <changelog author="kasimir_@outlook.de" date="1523534400">- fixed to build on armv6 and armv7</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1531224000">- Update to Botan 2.7
  * CVE-2018-12435 Avoid a side channel in ECDSA signature generation (GH
    [#1604])
  * Avoid a side channel in RSA key generation due to use of a non-constant
    time gcd algorithm. (GH #1542 #1556)
  * Optimize prime generation, especially improving RSA key generation. (GH
    [#1542])
  * Make Karatsuba multiplication, Montgomery field operations, Barrett
    reduction and Montgomery exponentiation const time (GH #1540 #1606 #1609
    [#1610])
  * Optimizations for elliptic curve operations especially improving reductions
    and inversions modulo NIST primes (GH #1534 #1538 #1545 #1546 #1547 #1550)
  * Add 24 word wide Comba multiplication, improving 3072-bit RSA and DH by
    ~25%. (GH #1564)
  * Unroll Montgomery reduction for specific sizes (GH #1603)
  * Improved performance of signature verification in ECGDSA, ECKCDSA, SM2 and
    GOST by 10-15%.
  * XMSS optimizations (GH #1583 #1585)
  * Fix an error that meant XMSS would only sign half as many signatures as is
    allowed (GH #1582)
  * Add support for base32 encoding/decoding (GH #1541)
  * Add BMI2 optimized version of SHA-256, 40% faster on Skylake (GH #1584)
  * Allow the year to be up to 2200 in ASN.1 time objects. Previously this was
    limited to 2100. (GH #1536)
  * Add support for Scrypt password hashing (GH #1570)
  * Add support for using Scrypt for private key encryption (GH #1574)
  * Optimizations for DES/3DES, approx 50% faster when used in certain modes
    such as CBC decrypt or CTR.
  * XMSS signature verification did not check that the signature was of the
    expected length which could lead to a crash. (GH #1537)
  * The bcrypt variants 2b and 2y are now supported.
  * Support for 192-bit Suite B TLS profile is now implemented, as the 128-bit
    Suite B is since 2015 not allowed anymore.
  * Previously botan allowed GCM to be used with an empty nonce, which is not
    allowed by the specification. Now such nonces are rejected.
  * Avoid problems on Windows when compiling in Unicode mode (GH #1615 #1616)
  * Previously for ASN.1 encoded signatures (eg ECDSA) Botan would accept any
    valid BER encoding. Now only the single valid DER encoding is accepted.
  * Correct an error that could in rare cases cause an internal error exception
    when doing computations with the P-224 curve.
  * Optimizations to reduce allocations/copies during DER encoding and BER
    decoding (GH #1571 #1572 #1600)
  * Botan generates X.509 subject key IDs by hashing the public key with
    whatever hash function is being used to sign the certificate. However
    especially for SHA-512 this caused SKIDs that were far longer than
    necessary. Now all SKIDs are truncated to 192 bits.
  * In the test suite use mkstemp to create temporary files instead of creating
    them in the current working directory. (GH #1533 #1530)
  * It is now possible to safely override CXX when invoking make in addition to
    when configure.py is run. (GH #1579)
  * OIDs for Camellia and SM4 in CBC and GCM mode are now defined, making it
    possible to use this algorithms for private key encryption.
  * Avoid creating symlinks to the shared object on OpenBSD (#1535)
  * The factor command runs much faster on larger inputs now.
  * Support for Windows Phone/UWP was deprecated starting in 2.5. This
    deprecation has been reversed as it seems UWP is still actively used. (GH
    [#1586] #1587)
  * Support for Visual C++ 2013 is deprecated, and will be removed in Jan 2019.
  * Added support for GCC?s ?sysroot option to configure.py for
    cross-compiling.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1533038400">- Fix version in baselibs.conf</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1547121600">- Update to Botan 2.9
  * Bump SONAME
  * CVE-2018-20187 Address a side channel during ECC key generation, which used an
    unblinded Montgomery ladder. As a result, a timing attack can reveal
    information about the high bits of the secret key.
  * Fix bugs in TLS which caused negotiation failures when the client used an
    unknown signature algorithm or version (GH #1711 #1709 #1708)
  * Fix bug affecting GCM, EAX and ChaCha20Poly1305 where if the associated data
    was set after starting a message, the new AD was not reflected in the produced
    tag. Now with these modes setting an AD after beginning a message throws an
    exception.
  * Use a smaller sieve which improves performance of prime generation.
  * Fixed a bug that caused ChaCha to produce incorrect output after encrypting 256
    GB. (GH #1728)
  * Add NEON and AltiVec implementations of ChaCha (GH #1719 #1728 #1729)
  * Optimize AVX2 ChaCha (GH #1730)
  * Many more operations in BigInt, ECC and RSA code paths are either fully const
    time or avoid problematic branches that could potentially be exploited in a
    side channel attack. (GH #1738 #1750 #1754 #1755 #1757 #1758 #1759 #1762 #1765
    [#1770] #1773 #1774 #1779 #1780 #1794 #1795 #1796 #1797)
  * Several optimizations for BigInt and ECC, improving ECDSA performance by as
    much as 30%. (GH #1734 #1737 #1777 #1750 #1737 #1788)
  * Support recovering an ECDSA public key from a message/signature pair (GH #664
    [#1784])
  * Add base58 encoding/decoding functions (GH #1783)
  * In the command line interface, add support for reading passphrases from the
    terminal with echo disabled (GH #1756)
  * Add CT::Mask type to simplify const-time programming (GH #1751)
  * Add new configure options --disable-bmi2, --disable-rdrand, and
  - -disable-rdseed to prevent use of those instruction sets.
  * Add error_type and error_code functions to Exception type (GH #1744)
  * Now on POSIX systems posix_memalign is used instead of mmap for allocating the
    page-locked memory pool. This avoids issues with fork. (GH #602 #1798)
  * When available, use RDRAND to generate the additional data in
    Stateful_RNG::randomize_with_ts_input
  * Use vzeroall/vzeroupper intrinsics to avoid AVX2/SSE transition penalties.
  * Support for Visual C++ 2013 has been removed (GH #1557 #1697)
  * Resolve a memory leak when verifying ECDSA signatures with versions of OpenSSL
    before 1.1.0 (GH #1698)
  * Resolve a memory leak using ECDH via OpenSSL (GH #1767)
  * Fix an error in XTS which prohibited encrypting values which were exactly the
    same length as the underlying block size. Messages of this size are allowed by
    the standard and other XTS implementations. (GH #1706)
  * Resolve a bug in TSS which resulted in it using an incorrect length field in
    the shares. Now the correct length is encoded, but either correct or buggy
    lengths are accepted when decoding. (GH #1722)
  * Correct a bug when reducing a negative BigInt modulo a small power of 2. (GH
    [#1755])
  * Add CLI utils for threshold secret splitting. (GH #1722)
  * Fix a bug introduced in 2.8.0 that caused compilation failure if using a single
    amalgamation file with AVX2 enabled. (GH #1700)
  * Add an explicit OS target for Emscripten and improve support for it. (GH #1702)
  * Fix small issues when building for QNX
  * Switch the Travis CI build to using Ubuntu 16.04 (GH #1767)
  * Add options to configure.py to disable generation of pkg-config file, and (for
    systems where pkg-config support defaults to off, like Windows), to enable
    generating it. (GH #1268)
  * Modify configure.py to accept empty lists or trailing/extra commas. (GH #1705)
- Update to Botan 2.8
  * Add support for using Apple CommonCrypto library for hashing (GH #1667),
    cipher modes (GH #1674) and block ciphers (GH #1673).
  * Support for negotiating TLS versions 1.0 and 1.1 is disabled in the default
    TLS policy. In addition, support for negotiating TLS ciphersuites using CBC
    or CCM mode is disabled by default. Applications which need to interop with
    old peers must enable these in their TLS policy object. (GH #1651)
  * During primality testing, use a Lucas test in addition to Miller-Rabin. It
    is possible to construct a composite integer which passes n Miller-Rabin
    tests with probability (1/4)^n. So for a incautious verifier using a small
    number of tests (under 16 or so) it is possible if unlikely they would
    accept such a composite as prime. Adding a Lucas test precludes such an
    attack. (GH #1636)
  * Add XChaCha and XChaCha20Poly1305 (GH #1640)
  * Add AVX2 implementations of ChaCha (GH #1662) and Serpent (GH #1660)
  * Add a new password hashing interface in pwdhash.h (GH #1670)
  * C binding improvements. Added functions to get name and supported
    keylengths of cipher, hash and MAC objects, support for FE1 format
    preserving encryption (GH #1625 #1646), functions to load and save RSA keys
    in PKCS #1 format (GH #1621), HOTP and TOTP algorithms, scrypt, certificate
    verification (GH #1647), functions to get the output length of public key
    operations (GH #1642), and functions for loading and serializing X25519
    keys (GH #1681)
  * Support for building with BOTAN_MP_WORD_BITS set to 8 or 16 has been removed.
  * Previously SM2 had two distinct key types, one for signatures and another
    for encryption. They have now been merged into a single key type since in
    practice it seems the same key is at times used for both operations. (GH
    [#1637])
  * The Cipher_Mode class now derives from SymmetricAlgorithm (GH #1639)
  * Add support for using the ARMv8 instructions for SM4 encryption (GH #1622)
  * The entropy source using SecRandomCopyBytes has been removed as it was
    redundant with other entropy sources (GH #1668)
  * The Python module has much better error checking and reporting, and offers
    new functionality such as scrypt, MPI and FPE. (GH #1643 #1646)
  * Fixed a bug that caused CCM to fail with an exception when used with L=8 (GH #1631 #1632)
  * The default bcrypt work factor has been increased from 10 to 12.
  * The default algorithm used in passhash9 has changed from SHA-256 to
    SHA-512, and the default work factor increased from 10 to 15.
  * In ECC private keys, include the public key data for compatibility with GnuTLS (GH #1634 #1635)
  * Add support for using Linux getrandom syscall to access the system PRNG.
    This is disabled by default, use --with-os-feature=getrandom to enable.
  * It is now possible to encrypt private keys using SIV mode.
  * The FFI function botan_privkey_load now ignores its rng argument.
  * Resolve a problem when building under Visual C++ 15.8 (GH #1624)
  * Fix a bug in XSalsa20 (192-bit Salsa nonces) where if set_iv was called
    twice without calling set_key, the resulting encryption was incorrect. (GH
    [#1640])
  * Handle an error seen when verifying invalid ECDSA signatures using LibreSSL
    on non x86-64 platforms (GH #1627 #1628)
  * Fix bugs in PKCS7 and X9.23 CBC padding schemes, which would ignore the
    first byte in the event the padding took up the entire block. (GH #1690)
  * Correct bugs which would cause CFB, OCB, and GCM modes to crash when they
    were used in an unkeyed state. (GH #1639)
  * Optimizations for SM4 and Poly1305
  * Avoid a cache side channel in the AES key schedule
  * Add pk_encrypt and pk_decrypt CLI operations
  * Now asn1print CLI defaults to printing context-specific fields.
  * Use codec_base for Base64, which matches how Base32 is implemented (GH #1597)
  * The cast module has been split up into cast128 and cast256 (GH #1685)
  * When building under Visual C++ 2013, the user must acknowledge the upcoming
    removal of support using the configure.py flag --ack-vc2013-deprecated (GH
    [#1557])</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1554206400">- Update to Botan 2.10
  * Bump SONAME
  * Warning: XMSS currently implements draft-06 which is not compatible with
    the final RFC 8391 specification. A PR is open to fix this, however it will
    break all current uses of XMSS. If you are currently using XMSS please
    comment at https://github.com/randombit/botan/pull/1858. Otherwise the PR
    will be merged and support for draft-06 will be removed starting in 2.11.
  * Added a new certificate store implementation that can access the MacOS
    keychain certificate store. (GH #1830)
  * Redesigned Memory_Pool class, which services allocations out of a set of
    pages locked into memory (using mlock/VirtualLock). It is now faster and
    with improved exploit mitigations. (GH #1800)
  * Add BMI2 implementations of SHA-512 and SHA-3 which improve performance by
    25-35% on common CPUs. (GH #1815)
  * Unroll SHA-3 computation improving performance by 10-12% (GH #1838)
  * Add a Thread_Pool class. It is now possible to run the tests in multiple
    threads with --test-threads=N flag to select the number of threads to use.
    Use --test-threads=0 to run with as many CPU cores as are available on the
    current system. The default remains single threaded. (GH #1819)
  * XMSS signatures now uses a global thread pool instead of spawning new
    threads for each usage. This improves signature generation performance by
    between 10% and 60% depending on architecture and core count. (GH #1864)
  * Some functions related to encoding and decoding BigInts have been
    deprecated. (GH #1817)
  * Binary encoding and decoding of BigInts has been optimized by performing
    word-size operations when possible. (GH #1817)
  * Rename the exception Integrity_Failure to Invalid_Authentication_Tag to
    make its meaning and usage more clear. The old name remains as a typedef.
    (GH #1816)
  * Support for using Boost filesystem and MSVC?s std::filesystem have been
    removed, since already POSIX and Win32 versions had to be maintained for
    portability. (GH #1814)
  * Newly generated McEliece and XMSS keys now default to being encrypted using
    SIV mode, support for which was added in 2.8.0. Previously GCM was used by
    default for these algorithms.
  * Use arc4random on Android systems (GH #1851)
  * Fix the encoding of PGP-S2K iteration counts (GH #1853 #1854)
  * Add a facility for sandboxing the command line util. Currently FreeBSD
    (Capsicum) and OpenBSD (pledge) sandboxes are supported. (GH #1808)
  * Use if constexpr when available.
  * Disable building shared libs on iOS as it was broken and it is not clear
    shared libraries are ever useful on iOS (GH #1865)
  * Renamed the darwin build target to macos. This should not cause any
    user-visible change. (GH #1866)
  * Add support for using sccache to cache the Windows CI build (GH #1807)
  * Add --extra-cxxflags option which allows adding compilation flags without
    overriding the default set. (GH #1826)
  * Add --format= option to the hash cli which allows formatting the output as
    base64 or base58, default output remains hex.
  * Add base58_enc and base58_dec cli utils for base58 encoding/decoding. (GH #1848)
  * Enable getentropy by default on macOS (GH #1862)
  * Avoid using -momit-leaf-frame-pointer flags, since -fomit-frame-pointer is
    already the default with recent versions of GCC.
  * Fix XLC sanitizer flags.
  * Rename Blake2b class to BLAKE2b to match the official name. There is a typedef for compat.
  * Fix a bug where loading a raw Ed25519_PublicKey of incorrect length would
    lead to a crash. (GH #1850)
  * Fix a bug that caused compilation problems using CryptoNG PRNG. (GH #1832)
  * Extended SHAKE-128 cipher to support any key between 1 and 160 bytes,
    instead of only multiples of 8 bytes.
  * Minor HMAC optimizations.
  * Build fixes for GNU/Hurd.
  * Fix a bug that prevented generating or verifying Ed25519 signatures in the
    CLI (GH #1828 #1829)
  * Fix a compilation error when building the amalgamation outside of the
    original source directory when AVX2 was enabled. (GH #1812)
  * Fix a crash when creating the amalgamation if a header file was edited on
    Windows but then the amalgamation was built on Linux (GH #1763)</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1586347200">- Update to Botan 2.14:
  * Add support for using POWER8+ VPSUMD instruction to accelerate GCM (GH #2247)
  * Optimize the vector permute AES implementation, especially improving
    performance on ARMv7, Aarch64, and POWER. (GH #2243)
  * Use a new algorithm for modular inversions which is both faster
    and more resistant to side channel attacks. (GH #2287 #2296 #2301)
  * Address an issue in CBC padding which would leak the length of the plaintext
    which was being padded. Unpadding during decryption was not affected.
  * Optimize NIST prime field reductions, improving ECDSA by 3-9% (GH #2295)
  * Increase the size of the ECC blinding mask and scale it based on the
    size of the group order. (GH #880 #893 #2308)
  * Add server side support for the TLS asio wrapper. (GH #2229)
  * Add support for using Windows certificate store on MinGW (GH #2280)
  * Add a CLI utility cpu_clock which estimates the speed of the processor cycle counter.
  * Add Roughtime client (GH #2143 #1842)
  * Add support for XMSS X.509 certificates (GH #2172)
  * Add support for X.509 CRLs in FFI layer and Python wrapper (GH #2213)
  * Add AVX2 implementation of SHACAL2 (GH #2196)
  * Support more functionality for X.509 in the Python API (GH #2165)
  * Add generic CPU target useful when building for some new or unusual platform.
  * Disable MD5 in BSI or NIST modes (GH #2188)
  * Many currently public headers are being deprecated. If any such header is included by
    an application, a warning is issued at compile time.
    Headers issuing this warning will be made internal in a future major release.
  * RSA signature performance improvements (GH #2068 #2070)
  * Performance improvements for GCM (GH #2024 #2099 #2119), OCB (#2122), XTS (#2123) and
    ChaCha20Poly1305 (GH #2117), especially for small messages.
  * Add support for constant time AES using NEON and AltiVec (GH #2093 #2095 #2100)
  * Improve performance of POWER8 AES instructions (GH #2096)
  * Add support for the POWER9 hardware random number generator (GH #2026)
  * Add support for 64-bit version of RDRAND, doubling performance on x86-64 (GH #934 #2022)
  * In DTLS server, support a client crashing and then reconnecting from the same
    source port, as described in RFC 6347 sec 4.2.8 (GH #2029)
  * Optimize DTLS MTU splitting to split precisely to the set MTU (GH #2042)
  * Add support for the TLS v1.3 downgrade indicator. (GH #2027)
  * Add Argon2 PBKDF and password hash (GH #459 #1981 #1987)
  * Add Bcrypt-PBKDF (GH #1990)
  * Add server side support for issuing DTLS HelloVerifyRequest messages (GH #1999)
  * Add support for the TLS v1.3 supported_versions extension. (GH #1976)
  * Add Ed25519ph compatible with RFC 8032 (GH #1699 #2000)
  * Add support for OCSP stapling on server side. (GH #1703 #1967)
  * Add a boost::asio TLS stream compatible with boost::asio::ssl. (GH #1839 #1927 #1992)
  * Add a certificate store for Linux/Unix systems. (GH #1885 #1936)
  * Various Fixes</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597579200">- update to 2.15:
  Fix a bug where the name constraint extension did not constrain the alternative
  DN field which can be included in a subject alternative name. This would allow
  a corrupted sub-CA which was otherwise constrained by a name constraint to
  issue a certificate with a prohibited DN.
  Fix a bug in the TLS server during client authentication where where if a
  (disabled by default) static RSA ciphersuite was selected, then no certificate
  request would be sent. This would have an equivalent effect to a client which
  simply replied with an empty Certificate message. (GH #2367)
  Replace the T-Tables implementation of AES with a 32-bit bitsliced version. As
  a result AES is now constant time on all processors. (GH #2346 #2348 #2353
  [#2329] #2355)
  In TLS, enforce that the key usage given in the server certificate allows the
  operation being performed in the ciphersuite. (GH #2367)
  In X.509 certificates, verify that the algorithm parameters are the expected
  NULL or empty. (GH #2367)
  Change the HMAC key schedule to attempt to reduce the information leaked from
  the key schedule with regards to the length of the key, as this is at times (as
  for example in PBKDF2) sensitive information. (GH #2362)
  Add Processor_RNG which wraps RDRAND or the POWER DARN RNG instructions. The
  previous RDRAND_RNG interface is deprecated. (GH #2352)
  The documentation claimed that mlocked pages were created with a guard page
  both before and after. However only a trailing guard page was used. Add a
  leading guard page. (GH #2334)
  Add support for generating and verifying DER-encoded ECDSA signatures in the C
  and Python interfaces. (GH #2357 #2356)
  Workaround a bug in GCC?s UbSan which triggered on a code sequence in XMSS (GH
  [#2322])
  When building documentation using Sphinx avoid parallel builds with version 3.0
  due to a bug in that version (GH #2326 #2324)
  Fix a memory leak in the CommonCrypto block cipher calls (GH #2371)
  Fix a flaky test that would occasionally fail when running the tests with a
  large number of threads. (GH #2325 #2197)
  Additional algorithms are now deprecated: XTEA, GOST, and Tiger. They will be
  removed in a future major release.</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1603800000">- Update to 2.16.0:
  * Now userspace PRNG objects (such as AutoSeeded_RNG and HMAC_DRBG)
    use an internal lock, which allows safe concurrent use. This
    however is purely a precaution in case of accidental sharing of
    such RNG objects; for performance reasons it is always preferable
    to use a RNG per thread if a userspace RNG is needed.
  * DL_Group and EC_Group objects now track if they were created
    from a known trusted group (such as P-256 or an IPsec DH
    parameter). If so, then verification tests can be relaxed, as
    compared to parameters which may have been maliciously
    constructed in order to pass primality checks.
  * RandomNumberGenerator::add_entropy_T assumed its input was a POD
    type but did not verify this.
  * Support OCSP responders that live on a non-standard port.
  * Add support for Solaris sandbox.
  * Support suffixes on release numbers for alpha/beta releases.
  * Fix a bug in EAX which allowed requesting a 0 length tag, which
    had the effect of using a full length tag. Instead omit the
    length field, or request the full tag length explicitly.
  * Fix a memory leak in GCM where if passed an unsuitable block
    cipher (eg not 128 bit) it would throw an exception and leak
    the cipher object.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1604750400">- Botan 2.17.1:
  * Fix bugs in ECDSA signature generation and verifications under
    specific circumstances
  * developer visible changes, including deprecation with warnings
  * optimization in the non-hardware assisted AES key generation
  * Add more detection logic for AVX-512 features
  * Fix a bug parsing deeply nested cipher names
  * Prevent requesting DER encoding of signatures when the
    algorithm did not support it</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1605268800">- Botan 2.17.2:
  * Fix build problem on ppc64
  * Resolve an issue in the modular square root algorithm</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1608724800">- Botan 2.17.3:
  * Harden against side-channels from decoding secret values by
    changing the base64, base58, base32, and hex encoding and
    decoding opearations to run in constant time</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1618574400">- Botan 2.18.0
  * Add support for implementing custom RNG objects through the FFI
    interface
  * Improve safegcd bounds, improving runtime performance
  * Reject non-TLS messages as quickly as possible without waiting
    for a full record.
  * Fixes for TLS::Stream::async_shutdown
- Removed unneeded GNU MP build requirement, support was dropped
  with version 1.11.10
- Enabled check target, verify integrity of build library</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1620648000">- Botan 2.18.1:
  * Fix a build regression in 2.18.0 which caused linker flags
    which contain -l within them (such as -fuse-linker-plugin)
    to be misinterpreted
  * Fix a bug which caused decoding a certificate which contained
    more than one name in a single RDN
  * Fix a bug which caused OID lookup failures when run in a locale
    which uses thousands separators (pt_BR was reported as having
    this issue)
  * DNS names in name constraints were compared with case
    sensitivity, which could cause valid certificates to be
    rejected
  * X.509 name constraint extensions were rejected if non-critical.
    RFC 5280 requires conforming CAs issue such extensions as
    critical, but not all certificates are compliant, and all other
    known implementations do not require this
  * X.509 name constraints were incorrectly applied to the
    certificate which included the constraint
- build with lzma compression support
- build with SQLite support
- build with TPM support
- fix SLE 12 build</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1637755200">- update to 2.18.2:
  * Avoid using short exponents when encrypting in ElGamal, as some PGP
    implementations generate keys with parameters that are weak when
    short exponents are used CVE-2021-40529 boo#1190244
  * Fix a low risk OAEP decryption side channel
  * Work around a miscompilation of SHA-3 caused by a bug in Clang 12
    and XCode 13
  * Remove support in OpenSSL provider for algorithms which are
    disabled by default in OpenSSL 3.0
  * Add CI based on GitHub actions to replace Travis CI
  * Fix the online OCSP test, as the certificate involved had expired.
  * Fix some test failures induced by the expiration of the trust root
    "DST Root CA X3"</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1668686400">- Fixed [CVE-2022-43705,bsc#1205509]
  * Added Botan-CVE-2022-43705.patch
  * Added Botan-CVE-2022-43705-certs.tgz
  * validate that an embedded certificate was issued by the end-entity
    issuing certificate authority when checking OCSP responses.</changelog>
</package>
<package pkgid="655954aebf17452447f7578483051c465a40c683634bd1f8aa7acc36c4d102f0" name="python3-bugzilla" arch="noarch">
  <version epoch="0" ver="3.2.0" rel="bp154.3.3.1"/>
  <changelog author="jsegitz@novell.com" date="1468497600">- Update to version 1.2.2
- Added NovellBugzilla.patch to ensure it works with SUSE internal
  bugzilla.</changelog>
  <changelog author="tbechtold@suse.com" date="1524657600">- update to 2.1.0:
  - Support for bugzilla 5 API Keys (Dustin J. Mitchell)
  - bugzillarc can be used to set default URL for the cli tool
  - Revive update_flags wrapper
  - Bug fixes and minor improvements
  - Several fixes for use with bugzilla 5
  - Bugzilla.bug_autorefresh now defaults to False
  - Credentials are now cached in ~/.cache/python-bugzilla/
  - bin/bugzilla was converted to argparse
  - bugzilla query --boolean_chart option is removed
  - Unify command line flags across sub commands
- drop NovellBugzilla.patch (no longer needed)</changelog>
  <changelog author="tbechtold@suse.com" date="1524657601">- convert to singlespec
- use pypi as source
- update url</changelog>
  <changelog author="jengelh@inai.de" date="1525089600">- Trim history lesson and rhetoric wording from %description.</changelog>
  <changelog author="tbechtold@suse.com" date="1525262400">- Add Conflicts for python-bugzillatools</changelog>
  <changelog author="dimstar@opensuse.org" date="1525694400">- Fix conflict for python-bugzillatools: we have to take extra care
  for the single-spec rewritter not to conflict with
  python2-bugzillatools in the end (which does not exist).</changelog>
  <changelog author="mcepl@suse.com" date="1534420800">- Update to 2.2.0:
  - Port tests to pytest
  - cli: --cert Client side certificate support (Tobias Wolter)
  - cli: add ability to post comment while sending attachment (Jeff Mahoney)
  - cli: Add --comment-tag option
  - cli: Add info --active-components
  - Add a raw Product.get wrapper API</changelog>
  <changelog author="John Vandenberg &lt;jayvdb@gmail.com&gt;" date="1568548800">- Update to v2.3.0
  * restrict-login support
  * cli: Add support for private attachments
  * Fix python3 deprecation warnings
  * Drop python 3.3 support, minimum python3 is python 3.4 now</changelog>
  <changelog author="Julio Gonz&#xE1;lez Gil &lt;jgonzalez@suse.com&gt;" date="1571227200">- Backport from upstream: HTTP Basic authentication feature (as used
  by SUSE and openSUSE) (bsc#1098219)
- Add:
  * 106-basic-auth.diff</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1609329600">- Update to 3.0.2:
  - Fix API key leaking into requests exceptions
  - Skip man page generation to fix build on Windows (Alexander Todorov)
  - Drop python2 support
  - New option bugzilla modify --minor-update option
  - requests: use PYTHONBUGZILLA_REQUESTS_TIMEOUT env variable
  - xmlrpc: Don't add api key to passed in user dictionary
  - cli: Add query --extrafield, --includefield, --excludefield
  - Revive bugzilla.rhbugzilla.RHBugzilla import path
  - Bugzilla REST API support
  - Add --json command line output option
  - Add APIs for Bugzilla Groups (Pierre-Yves Chibon)
  - Add Bugzilla.get_requests_session() API to access raw requests
    Session
  - Add Bugzilla.get_xmlrpc_proxy() API to access raw ServerProxy
  - Add Bugzilla requests_session= init parameter to pass in auth, etc.
  - Add bugzilla attach --ignore-obsolete (?estmír Kalina)
  - Add bugzilla login --api-key for API key prompting (Danilo C. L. de
    Paula)
  - Add bugzilla new --private
- Remove 106-basic-auth.diff, which is not necessary anymore.</changelog>
  <changelog author="Marina Latini &lt;marina.latini@suse.com&gt;" date="1634817600">- Disable python2 building, as the support was dropped with 3.0.0</changelog>
  <changelog author="Marina Latini &lt;marina.latini@suse.com&gt;" date="1634817601">- Obsolete python2-bugzilla</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1635249600">- Revert removing of 106-basic-auth.diff</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1635249601">- Fix problem with basic-auth patch for version higher than 3.0.0 (bsc#1098219)
- Modified:
  * 106-basic-auth.diff</changelog>
  <changelog author="Julio Gonz&#xE1;lez Gil &lt;jgonzalez@suse.com&gt;" date="1671624000">- Update to 3.2.0:
  * Use soon-to-be-required Authorization header for RH bugzilla
  * Remove cookie auth support
  * Detect bugzilla.stage.redhat.com as RHBugzilla
  * Add limit as option to build_query
- Modified:
  * 106-basic-auth.diff</changelog>
</package>
<package pkgid="d059e2cd5957a0c17bcc7ca9a5dc559b371db45f8e2af612b07c8f9670ef2533" name="python3-certbot" arch="noarch">
  <version epoch="0" ver="1.22.0" rel="bp154.2.1"/>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1578052800">- update to version 1.0.0 (boo#1160066)
  * certbot-auto has deprecated support for systems using OpenSSL 1.0.1
    that are not running on x86-64.
  * Certbot's config_changes subcommand has been removed
  * certbot.plugins.common.TLSSNI01 has been removed.
  * The functions certbot.client.view_config_changes,
    certbot.main.config_changes,
    certbot.plugins.common.Installer.view_config_changes,
    certbot.reverter.Reverter.view_config_changes, and
    certbot.util.get_systemd_os_info have been removed
  * Certbot's register --update-registration subcommand has been removed
  * When possible, default to automatically configuring the webserver so all requests
    redirect to secure HTTPS access. This is mostly relevant when running Certbot
    in non-interactive mode. Previously, the default was to not redirect all requests.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1579608000">- update to version 1.1.0
  * Support for Python 3.4 in Certbot and its ACME library is deprecated and will be
    removed in the next release of Certbot.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1582286400">- update to version 1.2.0
  * Add directory field to error message when field is missing.
  * If MD5 hasher is not available, try it in non-security mode (fix for FIPS systems)
  * Support for Python 3.4 has been removed.
  * Fix collections.abc imports for Python 3.9.</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1583841600">- update to version 1.3.0
  * Added
  - Added certbot.ocsp Certbot's API. The certbot.ocsp module can be used to
  - determine the OCSP status of certificates.
  - Don't verify the existing certificate in HTTP01Response.simple_verify, for
  - compatibility with the real-world ACME challenge checks.
  * Changed
  - Certbot will now renew certificates early if they have been revoked according
  - to OCSP.
  - Fix acme module warnings when response Content-Type includes params (e.g. charset).
  - Fixed issue where webroot plugin would incorrectly raise Read-only file system
  - error when creating challenge directories (issue #7165).</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1587470400">- Fix build without python2</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1589457600">- Update to version 1.4.0
  * Added serial number of certificate to the output of certbot certificates
  * Expose two new environment variables in the authenticator and cleanup scripts used by
    the manual plugin: CERTBOT_REMAINING_CHALLENGES is equal to the number of challenges
    remaining after the current challenge, CERTBOT_ALL_DOMAINS is a comma-separated list
    of all domains challenged for the current certificate.
  * Added minimal proxy support for OCSP verification.
  * mock dependency is now conditional on Python 2 in all of our packages.
  * Fix hanging OCSP queries during revocation checking - added a 10 second timeout.
  * Standalone servers now have a default socket timeout of 30 seconds, fixing
    cases where an idle connection can cause the standalone plugin to hang.
  * Parsing of the RFC 8555 application/pem-certificate-chain now tolerates CRLF line
    endings. This should fix interoperability with Buypass' services.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1591876800">- Update to version 1.5.0
  * Require explicit confirmation of snap plugin permissions before connecting.
  * Add support for OCSP responses which use a public key hash ResponderID,
    fixing interoperability with Sectigo CAs.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1594641600">- Update to version 1.6.0
  * Certbot snaps are now available for the arm64 and armhf architectures.
  * Make Certbot snap find externally snapped plugins
  * Function certbot.compat.filesystem.umask is a drop-in replacement for
    os.umask implementing umask for both UNIX and Windows systems.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1598011200">- Update to version 1.7.0
  * Third-party plugins can be used without prefix (plugin_name instead of dist_name:plugin_name):
    this concerns the plugin name, CLI flags, and keys in credential files.
    The prefixed form is still supported but is deprecated, and will be removed in a future release.
  * We deprecated support for Python 3.5 in Certbot and its ACME library.
    Support for Python 3.5 will be removed in the next major release of Certbot.</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1601294400">- Update to version 1.8.0
  + Added
  * Added the ability to remove email and phone contact
    information from an account
  * using update_account --register-unsafely-without-email
  + Changed
  * Support for Python 3.5 has been removed.
  + Fixed
  * The problem causing the Apache plugin in the Certbot snap on
    ARM systems to
  * fail to load the Augeas library it depends on has been fixed.
  * The acme library can now tell the ACME server to clear
    contact information by passing an empty
  * tuple to the contact field of a Registration message.
  * Fixed the *** stack smashing detected *** error in the
    Certbot snap on some systems.
  * More details about these changes can be found on our GitHub
    repo.
- Add certbot keyring and hash file</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1602072000">- Update to version 1.9.0
  * certbot-auto was deprecated on all systems except for those based on Debian or RHEL.
  * Update the packaging instructions to promote usage of python -m pytest to test Certbot
    instead of the deprecated python setup.py test setuptools approach.
  * Reduced CLI logging when handling some kinds of errors.
  * The minimum version of the acme library required by Certbot was corrected.
    In the previous release, Certbot said it required acme&gt;=1.6.0 when it
    actually required acme&gt;=1.8.0 to properly support removing contact
    information from an ACME account.</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1610107200">- update to version 1.11.0
  + Added
  * We deprecated support for Python 2 in Certbot and its ACME
    library. Support for Python 2 will be removed in the next
    planned release of Certbot.
  * certbot-auto was deprecated on all systems. For more
    information about this change, see
    https://community.letsencrypt.org/t/certbot-auto-no-longer-works-on-debian-based-systems/139702/7.
  * We deprecated support for Apache 2.2 in the certbot-apache
    plugin and it will be removed in a future release of Certbot.
  + Fixed
  * The Certbot snap no longer loads packages installed via pip
    install --user. This was unintended and DNS plugins should be
    installed via snap instead.
  * certbot-dns-google would sometimes crash with HTTP 409/412
    errors when used with very large zones. See #6036.
  * certbot-dns-google would sometimes crash with an HTTP 412
    error if preexisting records had an unexpected TTL, i.e.:
    different than Certbot's default TTL for this plugin.
    See #8551.
- update to version 1.10.1
  + Fixed
  * Fixed a bug in certbot.util.add_deprecated_argument that
    caused the deprecated --manual-public-ip-logging-ok flag to
    crash Certbot in some scenarios.
- update to version 1.10.0
  + Added
  * Added timeout to DNS query function calls for dns-rfc2136
    plugin.
  * Confirmation when deleting certificates
  * CLI flag --key-type has been added to specify 'rsa' or
    'ecdsa' (default 'rsa').
  * CLI flag --elliptic-curve has been added which takes an
    NIST/SECG elliptic curve. Any of secp256r1, secp284r1 and
    secp521r1 are accepted values.
  * The command certbot certficates lists the which type of the
    private key that was used for the private key.
  * Support for Python 3.9 was added to Certbot and all of its
    components.
  + Changed
  * certbot-auto was deprecated on Debian based systems.
  * CLI flag --manual-public-ip-logging-ok is now a no-op,
    generates a deprecation warning, and will be removed in a
    future release.
  + Fixed
  * Fixed a Unicode-related crash in the nginx plugin when
    running under Python 2.</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1615204800">- update to version 1.13.0
  * The `--preferred-chain` flag now only checks the Issuer Common Name of the
    topmost (closest to the root) certificate in the chain, instead of checking
    every certificate in the chain.
    See [#8577](https://github.com/certbot/certbot/issues/8577).
  * Support for Python 2 has been removed.
  * CLI flags `--os-packages-only`, `--no-self-upgrade`, `--no-bootstrap` and `--no-permissions-check`,
    which are related to certbot-auto, are deprecated and will be removed in a future release.
  * Certbot no longer conditionally depends on an external mock module. Certbot's
    test API will continue to use it if it is available for backwards
    compatibility, however, this behavior has been deprecated and will be removed
    in a future release.
  * Certbot and all of its components no longer depend on the library `six`.
  * The update of certbot-auto itself is now disabled on all RHEL-like systems.</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1618401600">- update to version 1.14.0
  * certbot-auto no longer checks for updates on any operating system.
  * Don't output an empty line for a hidden certificate when certbot certificates
    is being used in combination with --cert-name or -d.0</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1620820800">- update to version 1.15.0
  * Remove further references to certbot-auto in the repo</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1624536000">- update to version 1.16.0
  * Use UTF-8 encoding for renewal configuration files
  * This release contains a substantial command-line UX overhaul,
    based on previous user research. The main goal was to streamline
    and clarify output. If you would like to see more verbose output, use
    the -v or -vv flags. UX improvements are an iterative process and
    the Certbot team welcomes constructive feedback.
  * Functions certbot.crypto_util.init_save_key and certbot.crypto_util.init_save_csr,
    whose behaviors rely on the global Certbot config singleton, are deprecated and will
    be removed in a future release. Please use certbot.crypto_util.generate_key and
    certbot.crypto_util.generate_csr instead.
  * Installers (e.g. nginx, Apache) were being restarted unnecessarily after dry-run renewals.</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1627646400">- update to version 1.17.0
  * We changed how dependencies are specified between Certbot packages. For this
    and future releases, higher level Certbot components will require that lower
    level components are the same version or newer. More specifically, version X
    of the Certbot package will now always require acme&gt;=X and version Y of a
    plugin package will always require acme&gt;=Y and certbot=&gt;Y. Specifying
    dependencies in this way simplifies testing and development.</changelog>
  <changelog author="Danilo Spinella &lt;danilo.spinella@suse.com&gt;" date="1628596800">- Update to version 1.18.0
  * New functions that Certbot plugins can use to interact with the user have
    been added to certbot.display.util. We plan to deprecate using IDisplay
    with zope in favor of these new functions in the future.
  * The Plugin, Authenticator and Installer classes are added to
    certbot.interfaces module as alternatives to Certbot's current zope based
    plugin interfaces. The API of these interfaces is identical, but they are
    based on Python's abc module instead of zope. Certbot will continue to
    detect plugins that implement either interface, but we plan to drop support
    for zope based interfaces in a future version of Certbot.
  * The class certbot.configuration.NamespaceConfig is added to the Certbot's
    public API
  * When self-validating HTTP-01 challenges using
    acme.challenges.HTTP01Response.simple_verify, we now assume that the response
    is composed of only ASCII characters. Previously we were relying on the
    default behavior of the requests library which tries to guess the encoding of
    the response which was error prone
  * In order to simplify the transition to Certbot's new plugin interfaces, the
    classes Plugin and Installer in certbot.plugins.common module and
    certbot.plugins.dns_common.DNSAuthenticator now implement Certbot's new
    plugin interfaces. The Certbot plugins based on these classes are now
    automatically detected as implementing these interfaces.
  * The Apache authenticator no longer crashes with "Unable to insert label"
    when encountering a completely empty vhost. This issue affected Certbot 1.17.0.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1639396800">- Update to version 1.20.0
  * Added --no-reuse-key. This remains the default behavior, but
    the flag may be useful to unset the --reuse-key option on
    existing certificates.
- Update to version 1.19.0
  * Several attributes in certbot.display.util and zope based
    interfaces in certbot.interfaces module are deprecated and
    will be removed in a future release of Certbot.
  * Fixed a relatively harmless crash when issuing a certificate
    with --quiet/-q.</changelog>
  <changelog author="Danilo Spinella &lt;danilo.spinella@suse.com&gt;" date="1640088000">- Update to version 1.22.0
  * Support for Python 3.10 was added to Certbot and all of its components.
  * The function certbot.util.parse_loose_version was added to parse version
    strings in the same way as the now deprecated distutils.version.LooseVersion
    class from the Python standard library.
  * Added --issuance-timeout. This option specifies how long (in seconds) Certbot will wait
    for the server to issue a certificate.
  * The function certbot.util.get_strict_version was deprecated and will be
    removed in a future release.
- Refreshed python-certbot.keyring</changelog>
</package>
<package pkgid="7c5dc1c630f852b696f0b8b830d6e231a9a79a23fa2f263839dedac262d48738" name="python3-certbot-apache" arch="noarch">
  <version epoch="0" ver="1.22.0" rel="bp154.2.2"/>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1573732800">- update to version 0.40.1
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1578052800">- update to version 1.0.0 (boo#1160066)
  * The docs extras for the certbot-apache and certbot-nginx packages
    have been removed.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1579608000">- update to version 1.1.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1582286400">- update to version 1.2.0
  * Disable old SSL versions and ciphersuites and remove SSLCompression off
    setting to follow Mozilla recommendations in Apache.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1583928000">- update to version 1.3.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1589457600">- update to version 1.4.0
  * Turn off session tickets for apache plugin by default when appropriate.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1591876800">- update to version 1.5.0
  * Improved error message in apache installer when mod_ssl is not available.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1594641600">- update to version 1.6.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1598011200">- update to version 1.7.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1602072000">- update to version 1.9.0
  * The problem causing the Apache plugin in the Certbot snap on ARM systems to
    fail to load the Augeas library it depends on has been fixed.</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1610107200">- update to version 1.11.0
  * We deprecated support for Apache 2.2 in the certbot-apache
    plugin and it will be removed in a future release of Certbot.
- update to version 1.10.1
  * sync with the main certbot package
- update to version 1.10.0
  * Support for Python 3.9 was added to Certbot and all of its
    components.</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1610107201">- Add patch to fix the apache2 package not providing apache2ctl
  any longer (gh#certbot/certbot#8592)
  * 0001-Change-the-SUSE-override-to-use-apachectl.patch</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1615204800">- update to version 1.13.0
  * Support for Python 2 has been removed.
  * Drop merged patch 0001-Change-the-SUSE-override-to-use-apachectl.patch</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1618401600">- update to version 1.14.0
  * sync with the main certbot package</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1620820800">- update to version 1.15.0
  * sync with the main certbot package</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1624536000">- update to version 1.16.0
  * Require the latest certbot and acme plugins for simplicity</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1627646400">- update to version 1.17.0
  * Add Void Linux overrides for certbot-apache.
  * The Apache authenticator now always configures virtual hosts which do not have
    an explicit ServerName. This should make it work more reliably with the
    default Apache configuration in Debian-based environments.</changelog>
  <changelog author="Danilo Spinella &lt;danilo.spinella@suse.com&gt;" date="1628596800">- update to version 1.18.0
  * sync with the main certbot package</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1639396800">- Update to version 1.19.0
  * Fixed parsing of Defined values in the Apache plugin to allow
    for = in the value.</changelog>
  <changelog author="Danilo Spinella &lt;danilo.spinella@suse.com&gt;" date="1640088000">- Update to version 1.22.0
  * sync with the main certbot package</changelog>
</package>
<package pkgid="1a6a4e904c2eb28724cc4814fcd1ffbc5bd7d9ef155d87197bd5caabc12b311a" name="python3-certbot-dns-cloudflare" arch="noarch">
  <version epoch="0" ver="1.22.0" rel="bp154.2.1"/>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1570017600">- update to version 0.39.0
  * Support for Python 3.8 was added to Certbot and all of its components.</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1573732800">- update to version 0.40.1
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1578052800">- update to version 1.0.0
  * sync with main certbot package</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1579608000">- update to version 1.1.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1582286400">- update to version 1.2.0
  * Added support for Cloudflare's limited-scope API Tokens</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1583928000">- update to version 1.3.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1589457600">- update to version 1.4.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1591876800">- update to version 1.5.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1594641600">- update to version 1.6.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1598011200">- update to version 1.7.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1602072000">- update to version 1.9.0
  * Sync with main certbot package.</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1610107200">- update to version 1.11.0
  * sync with the main certbot package
- update to version 1.10.1
  * sync with the main certbot package
- update to version 1.10.0
  * Support for Python 3.9 was added to Certbot and all of its
    components.</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1615204800">- update to version 1.13.0
  * Support for Python 2 has been removed.</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1618401600">- update to version 1.14.0
  * sync with the main certbot package</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1620820800">- update to version 1.15.0
  * sync with the main certbot package</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1624536000">- update to version 1.16.0
  * Require the latest certbot and acme plugins for simplicity</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1627646400">- update to version 1.17.0
  * sync with the main certbot package</changelog>
  <changelog author="Danilo Spinella &lt;danilo.spinella@suse.com&gt;" date="1628596800">- update to version 1.18.0
  * sync with the main certbot package</changelog>
  <changelog author="Danilo Spinella &lt;danilo.spinella@suse.com&gt;" date="1640088000">- Update to version 1.22.0
  * sync with the main certbot package</changelog>
</package>
<package pkgid="b5d21860db30312f9f48e5f11594c3c960ea8d3e87ab1c97ee0770ac8f35dd2e" name="python3-certbot-dns-cloudxns" arch="noarch">
  <version epoch="0" ver="1.22.0" rel="bp154.2.1"/>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1573732800">- update to version 0.40.1
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1578052800">- update to version 1.0.0
  * sync with main certbot package</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1579608000">- update to version 1.1.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1582286400">- update to version 1.2.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1583928000">- update to version 1.3.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1589457600">- update to version 1.4.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1591876800">- update to version 1.5.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1594641600">- update to version 1.6.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1598011200">- update to version 1.7.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1602072000">- update to version 1.9.0
  * Sync with main certbot package.</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1610107200">- update to version 1.11.0
  * sync with the main certbot package
- update to version 1.10.1
  * sync with the main certbot package
- update to version 1.10.0
  * Support for Python 3.9 was added to Certbot and all of its
    components.</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1615204800">- update to version 1.13.0
  * Support for Python 2 has been removed.</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1618401600">- update to version 1.14.0
  * sync with the main certbot package</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1620820800">- update to version 1.15.0
  * sync with the main certbot package</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1624536000">- update to version 1.16.0
  * DNS plugins based on lexicon now require dns-lexicon &gt;= v3.1.0
  * Require the latest certbot and acme plugins for simplicity</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1626350400">- Skip building for python 3.6: not all deps are available anymore
  (e.g dns-lexicon)</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1627646400">- update to version 1.17.0
  * sync with the main certbot package</changelog>
  <changelog author="Danilo Spinella &lt;danilo.spinella@suse.com&gt;" date="1628596800">- update to version 1.18.0
  * sync with the main certbot package</changelog>
  <changelog author="Danilo Spinella &lt;danilo.spinella@suse.com&gt;" date="1640088000">- Update to version 1.22.0
  * sync with the main certbot package</changelog>
</package>
<package pkgid="adbecea9e41fcb9c28c53b8df8a34e4ef8e540a85790c2e0d93c97e3ce97f798" name="python3-certbot-dns-digitalocean" arch="noarch">
  <version epoch="0" ver="1.22.0" rel="bp154.2.1"/>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1570017600">- update to version 0.39.0
  * Support for Python 3.8 was added to Certbot and all of its components.</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1573732800">- update to version 0.40.1
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1578052800">- update to version 1.0.0
  * sync with main certbot package</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1579608000">- update to version 1.1.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1582286400">- update to version 1.2.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1583928000">- update to version 1.3.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1589457600">- update to version 1.4.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1591876800">- update to version 1.5.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1594641600">- update to version 1.6.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1598011200">- update to version 1.7.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1602072000">- update to version 1.9.0
  * Sync with main certbot package.</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1610107200">- update to version 1.11.0
  * sync with the main certbot package
- update to version 1.10.1
  * sync with the main certbot package
- update to version 1.10.0
  * Support for Python 3.9 was added to Certbot and all of its
    components.</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1615204800">- update to version 1.13.0
  * Support for Python 2 has been removed.</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1618401600">- update to version 1.14.0
  * The DigitalOcean plugin now creates TXT records for the DNS-01
    challenge with a lower 30s TTL.</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1620820800">- update to version 1.15.0
  * sync with the main certbot package</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1624536000">- update to version 1.16.0
  * Require the latest certbot and acme plugins for simplicity</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1627646400">- update to version 1.17.0
  * sync with the main certbot package</changelog>
  <changelog author="Danilo Spinella &lt;danilo.spinella@suse.com&gt;" date="1628596800">- update to version 1.18.0
  * sync with the main certbot package</changelog>
  <changelog author="Danilo Spinella &lt;danilo.spinella@suse.com&gt;" date="1640088000">- update to version 1.22.0
  * sync with the main certbot package</changelog>
</package>
<package pkgid="e88f367f2aa43f2217d0395c7af39344d1091cca97a873343e7d87f0c5afdf0a" name="python3-certbot-dns-dnsimple" arch="noarch">
  <version epoch="0" ver="1.22.0" rel="bp154.2.1"/>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1573732800">- update to version 0.40.1
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1578052800">- update to version 1.0.0
  * sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1579608000">- update to version 1.1.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1582286400">- update to version 1.2.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1583928000">- update to version 1.3.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1589457600">- update to version 1.4.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1591876800">- update to version 1.5.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1594641600">- update to version 1.6.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1598011200">- update to version 1.7.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1602072000">- update to version 1.9.0
  * Sync with main certbot package.</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1610107200">- update to version 1.11.0
  * sync with the main certbot package
- update to version 1.10.1
  * sync with the main certbot package
- update to version 1.10.0
  * Support for Python 3.9 was added to Certbot and all of its
    components.</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1615204800">- update to version 1.13.0
  * Support for Python 2 has been removed.</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1618401600">- update to version 1.14.0
  * sync with the main certbot package</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1620820800">- update to version 1.15.0
  * sync with the main certbot package</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1624536000">- update to version 1.16.0
  * Require the latest certbot and acme plugins for simplicity</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1626350400">- Skip building for python 3.6: not all deps are available anymore
  (e.g dns-lexicon).</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1627646400">- update to version 1.17.0
  * sync with the main certbot package</changelog>
  <changelog author="Danilo Spinella &lt;danilo.spinella@suse.com&gt;" date="1628596800">- update to version 1.18.0
  * sync with the main certbot package</changelog>
  <changelog author="Danilo Spinella &lt;danilo.spinella@suse.com&gt;" date="1640088000">- update to version 1.22.0
  * sync with the main certbot package</changelog>
</package>
<package pkgid="9ebcd431776d33812569e7fc4babfd5c49a84e8acd5fd7835c49f50f7cec47e7" name="python3-certbot-dns-dnsmadeeasy" arch="noarch">
  <version epoch="0" ver="1.22.0" rel="bp154.2.1"/>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1573732800">- update to version 0.40.1
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1578052800">- update to version 1.0.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1579608000">- update to version 1.1.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1582286400">- update to version 1.2.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1583928000">- update to version 1.3.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1589457600">- update to version 1.4.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1591876800">- update to version 1.5.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1594641600">- update to version 1.6.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1598011200">- update to version 1.7.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1602072000">- update to version 1.9.0
  * Sync with main certbot package.</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1610107200">- update to version 1.11.0
  * sync with the main certbot package
- update to version 1.10.1
  * sync with the main certbot package
- update to version 1.10.0
  * Support for Python 3.9 was added to Certbot and all of its
    components.</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1615204800">- update to version 1.13.0
  * Support for Python 2 has been removed.</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1618401600">- update to version 1.14.0
  * sync with the main certbot package</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1620820800">- update to version 1.15.0
  * sync with the main certbot package</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1624536000">- update to version 1.16.0
  * DNS plugins based on lexicon now require dns-lexicon &gt;= v3.1.0
  * Require the latest certbot and acme plugins for simplicity</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1626350400">- Skip building for python 3.6: not all deps are available anymore
  (e.g dns-lexicon).</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1627646400">- update to version 1.17.0
  * sync with the main certbot package</changelog>
  <changelog author="Danilo Spinella &lt;danilo.spinella@suse.com&gt;" date="1628596800">- update to version 1.18.0
  * sync with the main certbot package</changelog>
  <changelog author="Danilo Spinella &lt;danilo.spinella@suse.com&gt;" date="1640088000">- update to version 1.22.0
  * sync with the main certbot package</changelog>
</package>
<package pkgid="b5a886441d3a7b5f04ee848323d8946b5a6d4a02a6d7cf39d010657bbdfbd9d1" name="python3-certbot-dns-google" arch="noarch">
  <version epoch="0" ver="1.22.0" rel="bp154.2.1"/>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1573732800">- update to version 0.40.1
  * Updated certbot-dns-google to depend on newer versions of
    google-api-python-client and oauth2client.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1578052800">- update to version 1.0.0
  * sync with main certbot package</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1579608000">- update to version 1.1.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1582286400">- update to version 1.2.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1583928000">- update to version 1.3.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1589457600">- update to version 1.4.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1591876800">- update to version 1.5.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1594641600">- update to version 1.6.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1598011200">- update to version 1.7.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1602072000">- update to version 1.9.0
  * Sync with main certbot package.</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1610107200">- update to version 1.11.0
  + Fixed
  * certbot-dns-google would sometimes crash with HTTP 409/412
    errors when used with very large zones. See #6036.
  * certbot-dns-google would sometimes crash with an HTTP 412
    error if preexisting records had an unexpected TTL, i.e.:
    different than Certbot's default TTL for this plugin.
    See #8551.
- update to version 1.10.1
  * sync with the main certbot package
- update to version 1.10.0
  * Support for Python 3.9 was added to Certbot and all of its
    components.</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1615204800">- update to version 1.13.0
  * Support for Python 2 has been removed.</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1618401600">- update to version 1.14.0
  * sync with the main certbot package</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1620820800">- update to version 1.15.0
  * sync with the main certbot package</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1624536000">- update to version 1.16.0
  * Require the latest certbot and acme plugins for simplicity</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1627646400">- update to version 1.17.0
  * sync with the main certbot package</changelog>
  <changelog author="Danilo Spinella &lt;danilo.spinella@suse.com&gt;" date="1628596800">- update to version 1.18.0
  * sync with the main certbot package</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1639396800">- Drop python 3.6 support since python-google-api-python-client
  dropped it</changelog>
  <changelog author="Danilo Spinella &lt;danilo.spinella@suse.com&gt;" date="1640088000">- update to version 1.22.0
  * sync with the main certbot package</changelog>
</package>
<package pkgid="c2d19a14aba39f9f62abec45d0e092fbad8f6c47d305a9cf550943dacd97aacf" name="python3-certbot-dns-linode" arch="noarch">
  <version epoch="0" ver="1.22.0" rel="bp154.2.1"/>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1573732800">- update to version 0.40.1
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1578052800">- update to version 1.0.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1579608000">- update to version 1.1.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1582286400">- update to version 1.2.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1583928000">- update to version 1.3.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1589457600">- update to version 1.4.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1591876800">- update to version 1.5.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1594641600">- update to version 1.6.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1598011200">- update to version 1.7.0
  * The Linode DNS plugin now waits 120 seconds for DNS propagation, instead of 1200.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1602072000">- update to version 1.9.0
  * Sync with main certbot package.</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1610107200">- update to version 1.11.0
  * sync with the main certbot package
- update to version 1.10.1
  * sync with the main certbot package
- update to version 1.10.0
  * Support for Python 3.9 was added to Certbot and all of its
    components.</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1615204800">- update to version 1.13.0
  * Support for Python 2 has been removed.</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1618401600">- update to version 1.14.0
  * sync with the main certbot package</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1620820800">- update to version 1.15.0
  * sync with the main certbot package</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1624536000">- update to version 1.16.0
  * DNS plugins based on lexicon now require dns-lexicon &gt;= v3.1.0
  * Require the latest certbot and acme plugins for simplicity</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1626350400">- Skip building for python 3.6: not all deps are available anymore
  (e.g dns-lexicon).</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1627646400">- update to version 1.17.0
  * sync with the main certbot package</changelog>
  <changelog author="Danilo Spinella &lt;danilo.spinella@suse.com&gt;" date="1628596800">- update to version 1.18.0
  * sync with the main certbot package</changelog>
  <changelog author="Danilo Spinella &lt;danilo.spinella@suse.com&gt;" date="1640088000">- update to version 1.22.0
  * sync with the main certbot package</changelog>
</package>
<package pkgid="7dd1efc725bfc82255699538d03d697f82eff8db756b85f80eaa63bc22bff6a1" name="python3-certbot-dns-luadns" arch="noarch">
  <version epoch="0" ver="1.22.0" rel="bp154.2.1"/>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1573732800">- update to version 0.40.1
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1578052800">- update to version 1.0.0
  * sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1579608000">- update to version 1.1.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1582286400">- update to version 1.2.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1583928000">- update to version 1.3.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1589457600">- update to version 1.4.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1591876800">- update to version 1.5.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1594641600">- update to version 1.6.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1598011200">- update to version 1.7.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1602072000">- update to version 1.9.0
  * Sync with main certbot package.</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1610107200">- update to version 1.11.0
  * sync with the main certbot package
- update to version 1.10.1
  * sync with the main certbot package
- update to version 1.10.0
  * Support for Python 3.9 was added to Certbot and all of its
    components.</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1615204800">- update to version 1.13.0
  * Support for Python 2 has been removed.</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1618401600">- update to version 1.14.0
  * sync with the main certbot package</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1620820800">- update to version 1.15.0
  * sync with the main certbot package</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1624536000">- update to version 1.16.0
  * DNS plugins based on lexicon now require dns-lexicon &gt;= v3.1.0
  * Require the latest certbot and acme plugins for simplicity</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1626350400">- Skip building for python 3.6: not all deps are available anymore
  (e.g dns-lexicon).</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1627646400">- update to version 1.17.0
  * sync with the main certbot package</changelog>
  <changelog author="Danilo Spinella &lt;danilo.spinella@suse.com&gt;" date="1628596800">- update to version 1.18.0
  * sync with the main certbot package</changelog>
  <changelog author="Danilo Spinella &lt;danilo.spinella@suse.com&gt;" date="1640088000">- update to version 1.22.0
  * sync with the main certbot package</changelog>
</package>
<package pkgid="5b53453ff0ae322f9d42d0c5c3fce419e2e9bd3b5db89142fc9dac47adbb11cd" name="python3-certbot-dns-nsone" arch="noarch">
  <version epoch="0" ver="1.22.0" rel="bp154.2.1"/>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1573732800">- update to version 0.40.1
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1578052800">- update to version 1.0.0
  * sync with main certbot package</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1579608000">- update to version 1.1.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1582286400">- update to version 1.2.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1583928000">- update to version 1.3.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1589457600">- update to version 1.4.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1591876800">- update to version 1.5.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1594641600">- update to version 1.6.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1598011200">- update to version 1.7.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1602072000">- update to version 1.9.0
  * Sync with main certbot package.</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1610107200">- update to version 1.11.0
  * sync with the main certbot package
- update to version 1.10.1
  * sync with the main certbot package
- update to version 1.10.0
  * Support for Python 3.9 was added to Certbot and all of its
    components.</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1615204800">- update to version 1.13.0
  * Support for Python 2 has been removed.</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1618401600">- update to version 1.14.0
  * sync with the main certbot package</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1620820800">- update to version 1.15.0
  * sync with the main certbot package</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1624536000">- update to version 1.16.0
  * DNS plugins based on lexicon now require dns-lexicon &gt;= v3.1.0
  * Require the latest certbot and acme plugins for simplicity</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1626350400">- Skip building for python 3.6: not all deps are available anymore
  (e.g dns-lexicon).</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1627646400">- update to version 1.17.0
  * sync with the main certbot package</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1639396800">- update to version 1.20.0
  * sync with the main certbot package</changelog>
  <changelog author="Danilo Spinella &lt;danilo.spinella@suse.com&gt;" date="1640088000">- update to version 1.22.0
  * sync with the main certbot package</changelog>
</package>
<package pkgid="58e0b9143197b07a700ac9b0fb0c142f46afad80439862c0a67a0f54f7c624b7" name="python3-certbot-dns-rfc2136" arch="noarch">
  <version epoch="0" ver="1.22.0" rel="bp154.2.1"/>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1573732800">- update to version 0.40.1
  * certbot-dns-rfc2136 now uses TCP to query SOA records.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1578052800">- update to version 1.0.0
  * sync with main certbot package</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1579608000">- update to version 1.1.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1582286400">- update to version 1.2.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1583928000">- update to version 1.3.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1589457600">- update to version 1.4.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1591876800">- update to version 1.5.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1594641600">- update to version 1.6.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1598011200">- update to version 1.7.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1602072000">- update to version 1.9.0
  * Sync with main certbot package.</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1610107200">- update to version 1.11.0
  * sync with the main certbot package
- update to version 1.10.1
  * sync with the main certbot package
- update to version 1.10.0
  * Added timeout to DNS query function calls for dns-rfc2136
    plugin.
  * Support for Python 3.9 was added to Certbot and all of its
    components.</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1615204800">- update to version 1.13.0
  * Support for Python 2 has been removed.</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1618401600">- update to version 1.14.0
  * sync with the main certbot package</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1620820800">- update to version 1.15.0
  * sync with the main certbot package</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1624536000">- update to version 1.16.0
  * Require the latest certbot and acme plugins for simplicity</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1627646400">- update to version 1.17.0
  * sync with the main certbot package</changelog>
  <changelog author="Danilo Spinella &lt;danilo.spinella@suse.com&gt;" date="1628596800">- update to version 1.18.0
  * sync with the main certbot package</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1639396800">- Update to version 1.20.0
  * The certbot-dns-rfc2136 plugin now ensures the use of an
    IP address as the target server.</changelog>
  <changelog author="Danilo Spinella &lt;danilo.spinella@suse.com&gt;" date="1640088000">- update to version 1.22.0
  * sync with the main certbot package</changelog>
</package>
<package pkgid="27d8b7b5842fc864e60d00c9e723d81ba9504efee273b4f4efd90ce163341471" name="python3-certbot-dns-route53" arch="noarch">
  <version epoch="0" ver="1.22.0" rel="bp154.2.1"/>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1570017600">- update to version 0.39.0
  * Support for Python 3.8 was added to Certbot and all of its components.</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1573732800">- update to version 0.40.1
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1578052800">- update to version 1.0.0
  * sync with main certbot package</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1579608000">- update to version 1.1.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1582286400">- update to version 1.2.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1583928000">- update to version 1.3.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1589457600">- update to version 1.4.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1591876800">- update to version 1.5.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1594641600">- update to version 1.6.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1598011200">- update to version 1.7.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1602072000">- update to version 1.9.0
  * Sync with main certbot package.</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1610107200">- update to version 1.11.0
  * sync with the main certbot package
- update to version 1.10.1
  * sync with the main certbot package
- update to version 1.10.0
  * Support for Python 3.9 was added to Certbot and all of its
    components.</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1615204800">- update to version 1.13.0
  * Support for Python 2 has been removed.</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1618401600">- update to version 1.14.0
  * sync with the main certbot package</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1620820800">- update to version 1.15.0
  * sync with the main certbot package</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1624536000">- update to version 1.16.0
  * Require the latest certbot and acme plugins for simplicity</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1627646400">- update to version 1.17.0
  * sync with the main certbot package</changelog>
  <changelog author="Danilo Spinella &lt;danilo.spinella@suse.com&gt;" date="1628596800">- update to version 1.18.0
  * sync with the main certbot package</changelog>
  <changelog author="Danilo Spinella &lt;danilo.spinella@suse.com&gt;" date="1640088000">- update to version 1.22.0
  * sync with the main certbot package</changelog>
</package>
<package pkgid="1ea4a2887c3e27ee1ea3a7d6c801f05155de469a606e8e6bfc76db7a7d89bf73" name="python3-certbot-nginx" arch="noarch">
  <version epoch="0" ver="1.22.0" rel="bp154.2.2"/>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1573732800">- update to version 0.40.1
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1578052800">- update to version 1.0.0 (boo#1160066)
  * The docs extras for the certbot-apache and certbot-nginx
    packages have been removed.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1579608000">- update to version 1.1.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1582286400">- update to version 1.2.0
  * Added support for $hostname in nginx server_name directive
  * Remove ECDHE-RSA-AES128-SHA from NGINX ciphers list</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1583928000">- update to version 1.3.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1589457600">- update to version 1.4.0
  * Fix nginx plugin crash when non-ASCII configuration file is being read (instead,
    the user will be warned that UTF-8 must be used).</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1591876800">- update to version 1.5.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1594641600">- update to version 1.6.0
  * Sync with main certbot package.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1598011200">- update to version 1.7.0
  * Added --nginx-sleep-seconds (default 1) for environments where nginx takes a long time to reload.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1602072000">- update to version 1.9.0
  * Reduced CLI logging when reloading nginx, if it is not running.
  * Fixed server_name case-sensitivity in the nginx plugin.</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1610107200">- update to version 1.11.0
  * sync with the main certbot package
- update to version 1.10.1
  * sync with the main certbot package
- update to version 1.10.0
  * Support for Python 3.9 was added to Certbot and all of its
    components.
  * Fixed a Unicode-related crash in the nginx plugin when running
    under Python 2.</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1615204800">- update to version 1.13.0
  * Support for Python 2 has been removed.
  * The nginx authenticator now configures all matching HTTP and HTTPS vhosts for the HTTP-01
    challenge. It is now compatible with external HTTPS redirection by a CDN or load balancer.</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1618401600">- update to version 1.14.0
  * sync with the main certbot package</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1620820800">- update to version 1.15.0
  * sync with the main certbot package</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1624536000">- update to version 1.16.0
  * Require the latest certbot and acme plugins for simplicity</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1627646400">- update to version 1.17.0
  * When we increased the logging level on our nginx "Could not parse file" message,
    it caused a previously-existing inability to parse empty files to become more
    visible. We have now added the ability to correctly parse empty files, so that
    message should only show for more significant errors.</changelog>
  <changelog author="Danilo Spinella &lt;danilo.spinella@suse.com&gt;" date="1628596800">- update to version 1.18.0
  * sync with the main certbot package</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1639396800">- update to version 1.20.0
  * sync with the main certbot package</changelog>
  <changelog author="Danilo Spinella &lt;danilo.spinella@suse.com&gt;" date="1640088000">- update to version 1.22.0
  * sync with the main certbot package</changelog>
</package>
<package pkgid="894c2b80f3d3896e40ba69c07b3f482c57503438847541d4059f2fa61589461a" name="python3-gdcm" arch="aarch64">
  <version epoch="0" ver="3.0.19" rel="bp154.2.5.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1582027200">- version 3.0.5
  * fix for API change in poppler</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1585483200">- poppler_api.patch added to fix API changes in poppler in TW</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1586865600">- Update poppler_api.patch to make UnicodeMap* const.
- Compile with -fpermissive so that this works on Leap 15.2 too</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1591617600">- Add patch to fix build on aarch64:
  * gdcm-2.8.8-dont_use_EOF.patch</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1591704000">- version 3.0.6
  * no changelog available
  * poppler_api.patch removed (included in source)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1593518400">- version 3.0.7
  * no changelog available
  * gdcm-2.8.8-dont_use_EOF.patch removed (included in 3.0.7)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1602936000">- version 3.0.8
  * Fix TestScanner1 test</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1604404800">- fixed build system
  fix_charls2_patch removed
  0001-Fix-build-with-CharLS-2.1.0.patch added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1604577600">- typo corrected: fix_charls_2.patch removed</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1622808000">- 0002-gcc11-changes.diff added to fix TW build failure</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1627387200">- version 3.0.9 (no changelog)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1628510400">- Trim filler wording from some descriptions. Change the other
  descriptions to describe the package, rather than give
  instructions to the user.</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1639396800">- version 3.0.10 (no changelog)
  * 0002-gcc11-changes.diff removed (included in source)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1646740800">- use compiler gcc11-c++ to fix Leap 15.4 build</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648209600">- version 3.0.11
  * Fix for a significant issue with JPEG-LS and RGB color space
  * tons of small bug fixes</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648814400">- version 3.0.12
  * support for poppler 22.03 added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1663588800">- version 3.0.18
  no changelog</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1663934400">- rename of gdcm-libgdcm3_0 to libgdcm3_0 (proposal S. Brüns)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664798400">- Provides/obsoletes moved to lbgdcm-package (Thx DimStar)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664971200">- version 3.0.19 - no changelog
  'Provides' Tag removed from ligdcm</changelog>
</package>
<package pkgid="9b17b8272d038099d634a8db399472a46e579ab8390f29e7b6dda5eba0fd4d08" name="python3-gdcm" arch="ppc64le">
  <version epoch="0" ver="3.0.19" rel="bp154.2.5.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1582027200">- version 3.0.5
  * fix for API change in poppler</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1585483200">- poppler_api.patch added to fix API changes in poppler in TW</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1586865600">- Update poppler_api.patch to make UnicodeMap* const.
- Compile with -fpermissive so that this works on Leap 15.2 too</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1591617600">- Add patch to fix build on aarch64:
  * gdcm-2.8.8-dont_use_EOF.patch</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1591704000">- version 3.0.6
  * no changelog available
  * poppler_api.patch removed (included in source)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1593518400">- version 3.0.7
  * no changelog available
  * gdcm-2.8.8-dont_use_EOF.patch removed (included in 3.0.7)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1602936000">- version 3.0.8
  * Fix TestScanner1 test</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1604404800">- fixed build system
  fix_charls2_patch removed
  0001-Fix-build-with-CharLS-2.1.0.patch added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1604577600">- typo corrected: fix_charls_2.patch removed</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1622808000">- 0002-gcc11-changes.diff added to fix TW build failure</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1627387200">- version 3.0.9 (no changelog)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1628510400">- Trim filler wording from some descriptions. Change the other
  descriptions to describe the package, rather than give
  instructions to the user.</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1639396800">- version 3.0.10 (no changelog)
  * 0002-gcc11-changes.diff removed (included in source)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1646740800">- use compiler gcc11-c++ to fix Leap 15.4 build</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648209600">- version 3.0.11
  * Fix for a significant issue with JPEG-LS and RGB color space
  * tons of small bug fixes</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648814400">- version 3.0.12
  * support for poppler 22.03 added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1663588800">- version 3.0.18
  no changelog</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1663934400">- rename of gdcm-libgdcm3_0 to libgdcm3_0 (proposal S. Brüns)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664798400">- Provides/obsoletes moved to lbgdcm-package (Thx DimStar)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664971200">- version 3.0.19 - no changelog
  'Provides' Tag removed from ligdcm</changelog>
</package>
<package pkgid="989dfc4f144e9002e8899642e941d738f6f73caaf73be379eaa2014d0e4bf9e9" name="python3-gdcm" arch="s390x">
  <version epoch="0" ver="3.0.19" rel="bp154.2.5.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1582027200">- version 3.0.5
  * fix for API change in poppler</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1585483200">- poppler_api.patch added to fix API changes in poppler in TW</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1586865600">- Update poppler_api.patch to make UnicodeMap* const.
- Compile with -fpermissive so that this works on Leap 15.2 too</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1591617600">- Add patch to fix build on aarch64:
  * gdcm-2.8.8-dont_use_EOF.patch</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1591704000">- version 3.0.6
  * no changelog available
  * poppler_api.patch removed (included in source)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1593518400">- version 3.0.7
  * no changelog available
  * gdcm-2.8.8-dont_use_EOF.patch removed (included in 3.0.7)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1602936000">- version 3.0.8
  * Fix TestScanner1 test</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1604404800">- fixed build system
  fix_charls2_patch removed
  0001-Fix-build-with-CharLS-2.1.0.patch added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1604577600">- typo corrected: fix_charls_2.patch removed</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1622808000">- 0002-gcc11-changes.diff added to fix TW build failure</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1627387200">- version 3.0.9 (no changelog)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1628510400">- Trim filler wording from some descriptions. Change the other
  descriptions to describe the package, rather than give
  instructions to the user.</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1639396800">- version 3.0.10 (no changelog)
  * 0002-gcc11-changes.diff removed (included in source)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1646740800">- use compiler gcc11-c++ to fix Leap 15.4 build</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648209600">- version 3.0.11
  * Fix for a significant issue with JPEG-LS and RGB color space
  * tons of small bug fixes</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648814400">- version 3.0.12
  * support for poppler 22.03 added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1663588800">- version 3.0.18
  no changelog</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1663934400">- rename of gdcm-libgdcm3_0 to libgdcm3_0 (proposal S. Brüns)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664798400">- Provides/obsoletes moved to lbgdcm-package (Thx DimStar)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664971200">- version 3.0.19 - no changelog
  'Provides' Tag removed from ligdcm</changelog>
</package>
<package pkgid="7d10e7834f5e93b61fa67f91a00912b772d92afb74674537e7d8c66e937735c7" name="python3-gdcm" arch="x86_64">
  <version epoch="0" ver="3.0.19" rel="bp154.2.5.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1582027200">- version 3.0.5
  * fix for API change in poppler</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1585483200">- poppler_api.patch added to fix API changes in poppler in TW</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1586865600">- Update poppler_api.patch to make UnicodeMap* const.
- Compile with -fpermissive so that this works on Leap 15.2 too</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1591617600">- Add patch to fix build on aarch64:
  * gdcm-2.8.8-dont_use_EOF.patch</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1591704000">- version 3.0.6
  * no changelog available
  * poppler_api.patch removed (included in source)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1593518400">- version 3.0.7
  * no changelog available
  * gdcm-2.8.8-dont_use_EOF.patch removed (included in 3.0.7)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1602936000">- version 3.0.8
  * Fix TestScanner1 test</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1604404800">- fixed build system
  fix_charls2_patch removed
  0001-Fix-build-with-CharLS-2.1.0.patch added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1604577600">- typo corrected: fix_charls_2.patch removed</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1622808000">- 0002-gcc11-changes.diff added to fix TW build failure</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1627387200">- version 3.0.9 (no changelog)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1628510400">- Trim filler wording from some descriptions. Change the other
  descriptions to describe the package, rather than give
  instructions to the user.</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1639396800">- version 3.0.10 (no changelog)
  * 0002-gcc11-changes.diff removed (included in source)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1646740800">- use compiler gcc11-c++ to fix Leap 15.4 build</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648209600">- version 3.0.11
  * Fix for a significant issue with JPEG-LS and RGB color space
  * tons of small bug fixes</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648814400">- version 3.0.12
  * support for poppler 22.03 added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1663588800">- version 3.0.18
  no changelog</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1663934400">- rename of gdcm-libgdcm3_0 to libgdcm3_0 (proposal S. Brüns)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664798400">- Provides/obsoletes moved to lbgdcm-package (Thx DimStar)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664971200">- version 3.0.19 - no changelog
  'Provides' Tag removed from ligdcm</changelog>
</package>
<package pkgid="2c2c143ca1c237578d509f61b50de914359b131d5bf5f9289d0eac7f335478ad" name="python3-gluster" arch="noarch">
  <version epoch="0" ver="9.3" rel="bp154.2.3.1"/>
  <changelog author="scorot@free.fr" date="1445947200">- Update to version 3.6.6
  * No ChangeLog available</changelog>
  <changelog author="vcizek@suse.com" date="1503489600">- Update to version 3.8.15
  * fixes build with OpenSSL 1.1 (bsc#1055466)
  * Mandatory lock support for Multiprotocol environment
  * Gluster/NFS disabled by default
  * Geo-replication for Sharded Volumes
  * Tiering aware Geo-replication
  * Enhance Quota enable/disable in glusterd
  * Automagic unsplit-brain by [ctime|mtime|size|majority] for AFR
  * Granular Entry self-heal for AFR
  * Tons of bugfixes
  * for more details see the NEWS file
- spec cleanup
- Install License files/docu</changelog>
  <changelog author="vcizek@suse.com" date="1508328000">- Add missing Requires: libacl-devel to the devel subpackage
  * glfs.h #includes &lt;sys/acl.h&gt;</changelog>
  <changelog author="mpluskal@suse.com" date="1509710400">- Explicitly require python2 as python3 is not yet supported</changelog>
  <changelog author="kukuk@suse.de" date="1510574400">- glusterfs-tirpc.diff: fallback to libtirpc if there is no sunrpc
  support in glibc</changelog>
  <changelog author="jengelh@inai.de" date="1512388800">- Update to new release 3.12.3
  * -- Features introduced in 3.10
  * Brick multiplexing
  * Support to display op-version information from clients
  * Support for rebalance time to completion estimation
  * Separation of tier as its own service
  * Statedump support for gfapi based applications
  * Disabled creation of trash directory by default
  * Implemented parallel readdirp with distribute xlator
  * -- Features introduced in 3.12:
  * Ability to mount sub-directories using the Gluster
    FUSE protocol
  * GFID to path conversion is enabled by default
  * Provided an option to set a limit on number of bricks
    multiplexed in a processes
  * Enhanced the option to export statfs data for bricks
    sharing the same backend filesystem
  * Provided a means to resolve GFID split-brain using
    the gluster CLI
  * Introduction of new api glfs_fd_set_lkowner() to set lock owner
- Remove glusterfs-date.diff (no longer applies)</changelog>
  <changelog author="jengelh@inai.de" date="1513252800">- Add 0001-build-restore-ability-to-control-verbosity-settings.patch
- Replace xdr_sizeof.c with an empty file</changelog>
  <changelog author="jengelh@inai.de" date="1525348800">- Update to new upstream release 4.0.2
  * GlusterD2 (GD2) is a new management daemon for Gluster-4.0,
    glustercli is the command-line interface for it.
    It is a preview release. GD2 is not backwards compatible with
    the older GlusterD. Heterogeneous clusters running both GD2
    and GlusterD are not possible.
  * Not all commands from GlusterD have been implemented for GD2.
  * GD2 does not (yet) work well in 2-node clusters.
  * Self Heal feature integrated for the new Volumes created
    using Glusterd2.</changelog>
  <changelog author="seanlew@opensuse.org" date="1547899200">- Update to new upstream version 5.3 (4.0 is EOL)
  * 5.3 brings hundreds of improvements, see complete relnote at
  https://docs.gluster.org/en/latest/release-notes/5.0/
  * Fixed a number of bugs:
    CVE-2018-1088, CVE-2018-1112 [boo#1090084],
    CVE-2018-10904 [boo#1107018], CVE-2018-10907 [boo#1107019],
    CVE-2018-10911 [boo#1107020], CVE-2018-10913 [boo#1107021],
    CVE-2018-10914 [boo#1107022], CVE-2018-10923 [boo#1107023],
    CVE-2018-10924 [boo#1107024], CVE-2018-10926 [boo#1107025],
    CVE-2018-10927 [boo#1107026], CVE-2018-10928 [boo#1107027],
    CVE-2018-10928 [boo#1107027], CVE-2018-10929 [boo#1107028],
    CVE-2018-10930 [boo#1107029], boo#1105776 .
- Remove patches no longer needed in 5.x:
  * 0001-build-restore-ability-to-control-verbosity-settings.patch
  * glusterfs-tirpc.diff</changelog>
  <changelog author="seanlew@opensuse.org" date="1551528000">- Update to new upstream version 5.4
  * FUSE Client memory leak fixed (#1623107)
  * fail to sync non-ascii utf8 file and dir names (#1648642)
  * Tracker bug for all leases related issues (#1651323)
  * gluster-blockd segfaults because of a null-deref (#1659563)
  * Memory leak: dict_t leak in rda_opendir (#1659676)
  * dht_revalidate may not heal attrs on the brick root (#1660736)
  * Fix tests/bugs/shard/zero-flag.t (#1660932)
  * NL cache: fix typos (#1662200)</changelog>
  <changelog author="seanlew@opensuse.org" date="1552824000">- Update to new upstream version 5.5
  * No changelog yet available in release notes</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Disable LTO (boo#1133088).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Move definition of _lto_cflags into %build.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1576238400">- Update to release 7.0
  * Latency based read child to improve read workload latency in
    a cluster, especially in a cloud setup. Also provides a load
    balancing with the outstanding pending request.
  * Thin-arbiter integration with GD1.
  * If a client older than glusterfs-4.x (i.e. 3.x clients)
    accesses a volume which has the `fips-mode-rchecksum` volume
    option enabled, it can cause erroneous checksum computation/
    unwanted behaviour during afr self-heal.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1577361600">- Fix the name of the Python bindings subpackage
- Properly mark Python bindings subpackage as noarch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1578571200">- Update to release 7.1
  * Fix rebalance causing IO Error - File descriptor in bad state
  * Fix geo-replication sessions going faulty
  * Fix memory leak in glusterfsd process
  * Fix GlusterFS brick process crash
- Add nocommon.patch [boo#1160392]</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1591272000">- Fixes for %_libexecdir changing to /usr/libexec</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1619697600">- Update to release 9.1
  * Implemented seek file operation for open-behind
  * Added io_uring support for Gluster
  * Added Support for 5K volumes
  * Enabled granular-entry-heal by default
  * Added support for monitoring the epoll/rpc layer
  * Improve rebalance of sparse files
- Drop nocommon.patch (merged)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632830400">- Update to release 9.3
  * New reset-brick command
  * Ability to get node level status of a cluster
  * Multi-threaded self-heal for Disperse volumes
  * Lock revocation feature
  * On-demand scrubbing for bitrot detection
  * Real time Cluster notifications using Events APIs
- Move mount helper to /usr/sbin [boo#1191062]</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1657800000">- add explicit Requires for the dependencies, so we make sure
  the dependencies are installed in the same version</changelog>
</package>
<package pkgid="2c8fdf708ca64b911cbae486d3bce6ff80da7efdb9d207ee92dc8e78710ee4ea" name="python3-hawkey" arch="aarch64">
  <version epoch="0" ver="0.65.0" rel="bp154.2.1"/>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1594123200">- Update to version 0.48.0
  + Add prereq_ignoreinst &amp; regular_requires properties for pkg (rh#1543449)
  + Reset active modules when no module enabled or default (rh#1767351)
  + Add comment option to transaction (rh#1773679)
  + Failing to get module defauls is a recoverable error
  + Baseurl is not exclusive with mirrorlist/metalink (rh#1775184)
  + Add new function to reset all modules in C API (dnf_context_reset_all_modules)
  + [context] Fix to preserve additionalMetadata content (rh#1808677)
  + Fix filtering of DepSolvables with source rpms (rh#1812596)
  + Add setter for running kernel protection setting
  + Handle situation when an unprivileged user cannot create history database (rh#1634385)
  + Add query filter: latest by priority
  + Add DNF_NO_PROTECTED flag to allow empty list of protected packages
  + Remove 'dim' option from terminal colors to make them more readable (rh#1807774, rh#1814563)
  + [context] Error when main config file can't be opened (rh#1794864)
  + [context] Add function function dnf_context_is_set_config_file_path
  + swdb: Catch only SQLite3 exceptions and simplify the messages
  + MergedTransaction list multiple comments (rh#1773679)
  + Modify CMake to pull *.po files from weblate
  + Optimize DependencyContainer creation from an existing queue
  + fix a memory leak in dnf_package_get_requires()
  + Fix memory leaks on g_build_filename()
  + Fix memory leak in dnf_context_setup()
  + Add `hy_goal_favor` and `hy_goal_disfavor`
  + Define a cleanup function for `DnfPackageSet`
  + dnf-repo: fix dnf_repo_get_public_keys double-free
  + Do not cache RPMDB
  + Use single-quotes around string literals used in SQL statements
  + SQLite3: Do not close the database if it wasn't opened (rh#1761976)
  + Don't create a new history DB connection for in-memory DB
  + transaction/Swdb: Use a single logger variable in constructor
  + utils: Add a safe version of pathExists()
  + swdb: Handle the case when pathExists() fails on e.g. permission
  + Repo: prepend "file://" if a local path is used as baseurl
  + Move urlEncode() to utils
  + utils: Add 'exclude' argument to urlEncode()
  + Encode package URL for downloading through librepo (rh#1817130)
  + Replace std::runtime_error with libdnf::RepoError
  + Fixes and error handling improvements of the File class
  + [context] Use ConfigRepo for gpgkey and baseurl (rh#1807864)
  + [context] support "priority" option in .repo config file (rh#1797265)
- Drop obsolete patch: libdnf-0.45.0-handle-all-rpmdb-variants.patch
- Refresh patch for static linking libsolvext
  + Remove patch: libdnf-0.39.1-with-static-libsolvext.patch
  + Add patch: libdnf-0.48.0-with-static-libsolvext.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1598011200">- Backport fix from upstream to fix building against check &gt;= 0.15
  + Patch: 0001-tests-Fix-incorrect-usage-of-the-fail_unless-macro.patch
- Clean up spec comments about patches</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1603540800">- Update to version 0.54.2
  + history: Fix dnf history rollback when a package was removed (rh#1683134)
  + Add support for HY_GT, HY_LT in query nevra_strict
  + Fix parsing empty lines in config files
  + Accept '==' as an operator in reldeps (rh#1847946)
  + Add log file level main config option (rh#1802074)
  + Add protect_running_kernel configuration option (rh#1698145)
  + Context part of libdnf cannot assume zchunk is on (rh#1851841, rh#1779104)
  + Fix memory leak of resultingModuleIndex and handle g_object refs
  + Redirect librepo logs to libdnf logs with different source
  + Add hy_goal_lock
  + Enum/String conversions for Transaction Store/Replay
  + utils: Add a method to decode URLs
  + Unify hawkey.log line format with the rest of the logs
- Drop patches included in this release
  + Patch: 0001-tests-Fix-incorrect-usage-of-the-fail_unless-macro.patch
- Refresh patch for reposdir paths
  + Remove patch: libdnf-0.39.1-Switch-default-reposdir-to-etc-dnf-repos.d.patch
  + Add patch: libdnf-0.54.2-Switch-default-reposdir-to-etc-dnf-repos.d.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1606651200">- Update to version 0.55.0
  + Add vendor to dnf API (rh#1876561)
  + Add formatting function for solver error
  + Add error types in ModulePackageContainer
  + Implement module enable for context part
  + Improve string formatting for translation
  + Remove redundant printf and change logging info to notice (rh#1827424)
  + Add allow_vendor_change option (rh#1788371) (rh#1788371)
- Backport patches from upstream
  + Patch: 0001-Support-allow_vendor_change-setting-in-dnf-context-A.patch
  + Patch: 0001-context-dnf_keyring_add_public_keys-not-generate-err.patch
- Add patch to turn off changing vendors by default
  + Patch: libdnf-0.55.0-Switch-allow_vendor_change-off.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1607256000">- Update to version 0.55.2
  + Improve performance of query installed() and available()
  + Swdb: Add a method to get the current transaction
  + [modules] Add special handling for src artifacts (rh#1809314)
  + Better msgs if "basecachedir" or "proxy_password" isn't set (rh#1888946)
  + Add new options module_stream_switch
  + Support allow_vendor_change setting in dnf context API
- Drop patches incorporated into this release
  + Patch: 0001-Support-allow_vendor_change-setting-in-dnf-context-A.patch
  + Patch: 0001-context-dnf_keyring_add_public_keys-not-generate-err.patch
- Use cmake_build and cmake_install macros</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1609761600">- Add patch to support armv6hl and RISC-V architectures
  + Patch: 0001-context-Sync-missing-arches-from-DNF.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1612267200">- Update to version 0.58.0
  + Option: Add reset() method
  + Add OptionBinds::getOption() method
  + [context] Add dnf_repo_conf_from_gkeyfile() and dnf_repo_conf_reset()
  + [context] Add support for options: minrate, throttle, bandwidth, timeout
  + [context] Remove g_key_file_get_string() from dnf_repo_set_keyfile_data()
  + Allow loading ext metadata even if only cache (solv) is present
  + Add ASAN_OPTIONS for test_libdnf_main
  + [context,API] Functions for accessing main/global configuration options
  + [context,API] Function for adding setopt
  + Add getter for modular obsoletes from ModuleMetadata
  + Add ModulePackage.getStaticContext() and getRequires()
  + Add compatible layer for MdDocuments v2
  + Fix modular queries with the new solver
  + Improve formatting of error string for modules
  + Change mechanism of module conflicts
  + Fix load/update FailSafe
- Drop patch included in this release
  + Patch: 0001-context-Sync-missing-arches-from-DNF.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1613131200">- Backport fixes to add controls for installonlypkgs and protected_packages
  + Patch: 0001-context-Support-config-file-option-installonlypkgs.patch
  + Patch: 0002-context-Support-config-file-option-protected_package.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1613217600">- Add patch to move directory for dnf state data to /usr/lib/sysimage
  + Patch: libdnf-0.58.0-Use-usr-lib-sysimage-for-the-persistent-state-dir.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1613217601">- Backport another fix for adding controls to installonlypkgs
  + Patch: 0001-context-Fix-dnf_package_is_installonly-RhBug-1928056.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1614081600">- Backport support for using certificates for repository authorization
  + Patch: 0001-Fix-librepo-version-required-in-CMakeList.txt-1.12.0.patch
  + Patch: 0002-Fix-Fully-set-ssl-in-newHandle-function.patch
  + Patch: 0003-conf-Add-options-for-working-with-certificates-used-.patch
  + Patch: 0004-Apply-proxy-certificate-options.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1614254400">- Add repo-config-zypp subpackage to allow easily using Zypper
  repository configuration</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1614340800">- Backport more fixes for using certs for repo authorization
  + Patch: 0001-Deduplicate-code-create-Repo-Impl-stringToProxyAuthM.patch
  + Patch: 0002-context-Support-config-file-option-proxy_auth_method.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1614686400">- Update to 0.60.0
  + Fix repo.fresh() implementation
  + Fix: Fully set ssl in newHandle function
  + [conf] Add options for working with certificates used with proxy
  + Apply proxy certificate options
  + lock: Switch return-if-fail to assert to quiet gcc -fanalyzer
  + build-sys: Clean up message about Python bindings
  + Modify module NSVCA parsing - context definition (rh#1926771)
  + [context] Fix: dnf_package_is_installonly (rh#1928056)
  + Fix problematic language
  + Add getApplicablePackages to advisory and isApplicable to advisorymodule
  + Keep isAdvisoryApplicable to preserve API
  + Run ModulePackageContainerTest tests in tmpdir, merge interdependent
  + [context] Support config file option "proxy_auth_method", defaults "any"
  + Properly handle multiple collections in updateinfo.xml (rh#1804234)
  + Support main config file option "installonlypkgs"
  + Support main config file option "protected_packages"
- Drop patches now part of this release
  + Patch: 0001-context-Support-config-file-option-installonlypkgs.patch
  + Patch: 0002-context-Support-config-file-option-protected_package.patch
  + Patch: 0001-context-Fix-dnf_package_is_installonly-RhBug-1928056.patch
  + Patch: 0001-Fix-librepo-version-required-in-CMakeList.txt-1.12.0.patch
  + Patch: 0002-Fix-Fully-set-ssl-in-newHandle-function.patch
  + Patch: 0003-conf-Add-options-for-working-with-certificates-used-.patch
  + Patch: 0004-Apply-proxy-certificate-options.patch
  + Patch: 0001-Deduplicate-code-create-Repo-Impl-stringToProxyAuthM.patch
  + Patch: 0002-context-Support-config-file-option-proxy_auth_method.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1614686401">- Fix dependency for repo-config-zypp subpackage to work with SLE</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1618315200">- Update to 0.62.0
  + Change order of TransactionItemReason (rh#1921063)
  + Add two new comperators for security filters (rh#1918475)
  + Apply security filters for candidates with lower priority
  + Fix: Goal - translation of messages in global maps
  + Enhance description of modular solvables
  + Improve performance for module query
  + Change mechanism of modular errata applicability (rh#1804234)
  + dnf_transaction_commit(): Remove second call to rpmtsSetVSFlags
  + Fix a couple of memory leaks
  + Fix: Setting of librepo handle in newHandle function
  + Remove failsafe data when module is not enabled (rh#1847035)
  + Expose librepo's checksum functions via SWIG
  + Fix: Mising check of "hy_split_nevra()" return code
  + Do not allow 1 as installonly_limit value (rh#1926261)
  + Fix check whether the subkey can be used for signing
  + Hardening: add signature check with rpmcliVerifySignatures
    (CVE-2021-3445, CVE-2021-3421, CVE-2021-20271, rh#1932079, rh#1932089, rh#1932090, boo#1183779)
  + Add a config option sslverifystatus, defaults to false (rh#1814383)
  + [context] Add API for distro-sync</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1618488000">- Add patch to fix crash when loading DVD repositories
  + Patch: 0001-Fix-a-crash-when-repoId-not-found-in-loaded-conf-gke.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1630065600">- Update to 0.63.1
  + ModuleProfile: add isDefault()
  + ModulePackage: add getDefaultProfile()
  + Add new dnf_context_module_install() C API
  + Fix a crash when [media] section in .treeinfo is missing for bootable media (rh#1946024)
  + Add hy_query_get_advisory_pkgs to C API (rh#1960561)
  + Add dnf_advisorypkg_get_advisory()
  + DNF does not fail on non UTF-8 file names in a package (rh#1893176)
  + Improve error-reporting for modular functions
- Drop patch included in this release
  + Patch: 0001-Fix-a-crash-when-repoId-not-found-in-loaded-conf-gke.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1635940800">- Update to 0.65.0
  + Add support for excluding packages to be installed as weak dependencies
  + Add support for autodetecting packages to be excluded from being installed as weak dependencies
  + Turn off strict validation of modulemd documents (rh#2004853, rh#2007166, rh#2007167)
  + Implement logic for demodularization of modular rpms (rh#1805260)
  + DnfContext: fix handling of default module profiles
  + ModuleMetadata: gracefully handle modules with no defaults
  + Remove failovermethod config option (rh#1961083)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1647259200">- Skip rich deps for autodetection of unmet dependencies (rh#2033130)
  + Patch: 0001-Skip-rich-deps-for-autodetection-of-unmet-dependencies.patch</changelog>
</package>
<package pkgid="528e98e14c5f6abeba0ef10c4d46e3f29d81a68b96e5002bd39761119c89bcfb" name="python3-hawkey" arch="i586">
  <version epoch="0" ver="0.65.0" rel="bp154.2.1"/>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1594123200">- Update to version 0.48.0
  + Add prereq_ignoreinst &amp; regular_requires properties for pkg (rh#1543449)
  + Reset active modules when no module enabled or default (rh#1767351)
  + Add comment option to transaction (rh#1773679)
  + Failing to get module defauls is a recoverable error
  + Baseurl is not exclusive with mirrorlist/metalink (rh#1775184)
  + Add new function to reset all modules in C API (dnf_context_reset_all_modules)
  + [context] Fix to preserve additionalMetadata content (rh#1808677)
  + Fix filtering of DepSolvables with source rpms (rh#1812596)
  + Add setter for running kernel protection setting
  + Handle situation when an unprivileged user cannot create history database (rh#1634385)
  + Add query filter: latest by priority
  + Add DNF_NO_PROTECTED flag to allow empty list of protected packages
  + Remove 'dim' option from terminal colors to make them more readable (rh#1807774, rh#1814563)
  + [context] Error when main config file can't be opened (rh#1794864)
  + [context] Add function function dnf_context_is_set_config_file_path
  + swdb: Catch only SQLite3 exceptions and simplify the messages
  + MergedTransaction list multiple comments (rh#1773679)
  + Modify CMake to pull *.po files from weblate
  + Optimize DependencyContainer creation from an existing queue
  + fix a memory leak in dnf_package_get_requires()
  + Fix memory leaks on g_build_filename()
  + Fix memory leak in dnf_context_setup()
  + Add `hy_goal_favor` and `hy_goal_disfavor`
  + Define a cleanup function for `DnfPackageSet`
  + dnf-repo: fix dnf_repo_get_public_keys double-free
  + Do not cache RPMDB
  + Use single-quotes around string literals used in SQL statements
  + SQLite3: Do not close the database if it wasn't opened (rh#1761976)
  + Don't create a new history DB connection for in-memory DB
  + transaction/Swdb: Use a single logger variable in constructor
  + utils: Add a safe version of pathExists()
  + swdb: Handle the case when pathExists() fails on e.g. permission
  + Repo: prepend "file://" if a local path is used as baseurl
  + Move urlEncode() to utils
  + utils: Add 'exclude' argument to urlEncode()
  + Encode package URL for downloading through librepo (rh#1817130)
  + Replace std::runtime_error with libdnf::RepoError
  + Fixes and error handling improvements of the File class
  + [context] Use ConfigRepo for gpgkey and baseurl (rh#1807864)
  + [context] support "priority" option in .repo config file (rh#1797265)
- Drop obsolete patch: libdnf-0.45.0-handle-all-rpmdb-variants.patch
- Refresh patch for static linking libsolvext
  + Remove patch: libdnf-0.39.1-with-static-libsolvext.patch
  + Add patch: libdnf-0.48.0-with-static-libsolvext.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1598011200">- Backport fix from upstream to fix building against check &gt;= 0.15
  + Patch: 0001-tests-Fix-incorrect-usage-of-the-fail_unless-macro.patch
- Clean up spec comments about patches</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1603540800">- Update to version 0.54.2
  + history: Fix dnf history rollback when a package was removed (rh#1683134)
  + Add support for HY_GT, HY_LT in query nevra_strict
  + Fix parsing empty lines in config files
  + Accept '==' as an operator in reldeps (rh#1847946)
  + Add log file level main config option (rh#1802074)
  + Add protect_running_kernel configuration option (rh#1698145)
  + Context part of libdnf cannot assume zchunk is on (rh#1851841, rh#1779104)
  + Fix memory leak of resultingModuleIndex and handle g_object refs
  + Redirect librepo logs to libdnf logs with different source
  + Add hy_goal_lock
  + Enum/String conversions for Transaction Store/Replay
  + utils: Add a method to decode URLs
  + Unify hawkey.log line format with the rest of the logs
- Drop patches included in this release
  + Patch: 0001-tests-Fix-incorrect-usage-of-the-fail_unless-macro.patch
- Refresh patch for reposdir paths
  + Remove patch: libdnf-0.39.1-Switch-default-reposdir-to-etc-dnf-repos.d.patch
  + Add patch: libdnf-0.54.2-Switch-default-reposdir-to-etc-dnf-repos.d.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1606651200">- Update to version 0.55.0
  + Add vendor to dnf API (rh#1876561)
  + Add formatting function for solver error
  + Add error types in ModulePackageContainer
  + Implement module enable for context part
  + Improve string formatting for translation
  + Remove redundant printf and change logging info to notice (rh#1827424)
  + Add allow_vendor_change option (rh#1788371) (rh#1788371)
- Backport patches from upstream
  + Patch: 0001-Support-allow_vendor_change-setting-in-dnf-context-A.patch
  + Patch: 0001-context-dnf_keyring_add_public_keys-not-generate-err.patch
- Add patch to turn off changing vendors by default
  + Patch: libdnf-0.55.0-Switch-allow_vendor_change-off.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1607256000">- Update to version 0.55.2
  + Improve performance of query installed() and available()
  + Swdb: Add a method to get the current transaction
  + [modules] Add special handling for src artifacts (rh#1809314)
  + Better msgs if "basecachedir" or "proxy_password" isn't set (rh#1888946)
  + Add new options module_stream_switch
  + Support allow_vendor_change setting in dnf context API
- Drop patches incorporated into this release
  + Patch: 0001-Support-allow_vendor_change-setting-in-dnf-context-A.patch
  + Patch: 0001-context-dnf_keyring_add_public_keys-not-generate-err.patch
- Use cmake_build and cmake_install macros</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1609761600">- Add patch to support armv6hl and RISC-V architectures
  + Patch: 0001-context-Sync-missing-arches-from-DNF.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1612267200">- Update to version 0.58.0
  + Option: Add reset() method
  + Add OptionBinds::getOption() method
  + [context] Add dnf_repo_conf_from_gkeyfile() and dnf_repo_conf_reset()
  + [context] Add support for options: minrate, throttle, bandwidth, timeout
  + [context] Remove g_key_file_get_string() from dnf_repo_set_keyfile_data()
  + Allow loading ext metadata even if only cache (solv) is present
  + Add ASAN_OPTIONS for test_libdnf_main
  + [context,API] Functions for accessing main/global configuration options
  + [context,API] Function for adding setopt
  + Add getter for modular obsoletes from ModuleMetadata
  + Add ModulePackage.getStaticContext() and getRequires()
  + Add compatible layer for MdDocuments v2
  + Fix modular queries with the new solver
  + Improve formatting of error string for modules
  + Change mechanism of module conflicts
  + Fix load/update FailSafe
- Drop patch included in this release
  + Patch: 0001-context-Sync-missing-arches-from-DNF.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1613131200">- Backport fixes to add controls for installonlypkgs and protected_packages
  + Patch: 0001-context-Support-config-file-option-installonlypkgs.patch
  + Patch: 0002-context-Support-config-file-option-protected_package.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1613217600">- Add patch to move directory for dnf state data to /usr/lib/sysimage
  + Patch: libdnf-0.58.0-Use-usr-lib-sysimage-for-the-persistent-state-dir.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1613217601">- Backport another fix for adding controls to installonlypkgs
  + Patch: 0001-context-Fix-dnf_package_is_installonly-RhBug-1928056.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1614081600">- Backport support for using certificates for repository authorization
  + Patch: 0001-Fix-librepo-version-required-in-CMakeList.txt-1.12.0.patch
  + Patch: 0002-Fix-Fully-set-ssl-in-newHandle-function.patch
  + Patch: 0003-conf-Add-options-for-working-with-certificates-used-.patch
  + Patch: 0004-Apply-proxy-certificate-options.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1614254400">- Add repo-config-zypp subpackage to allow easily using Zypper
  repository configuration</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1614340800">- Backport more fixes for using certs for repo authorization
  + Patch: 0001-Deduplicate-code-create-Repo-Impl-stringToProxyAuthM.patch
  + Patch: 0002-context-Support-config-file-option-proxy_auth_method.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1614686400">- Update to 0.60.0
  + Fix repo.fresh() implementation
  + Fix: Fully set ssl in newHandle function
  + [conf] Add options for working with certificates used with proxy
  + Apply proxy certificate options
  + lock: Switch return-if-fail to assert to quiet gcc -fanalyzer
  + build-sys: Clean up message about Python bindings
  + Modify module NSVCA parsing - context definition (rh#1926771)
  + [context] Fix: dnf_package_is_installonly (rh#1928056)
  + Fix problematic language
  + Add getApplicablePackages to advisory and isApplicable to advisorymodule
  + Keep isAdvisoryApplicable to preserve API
  + Run ModulePackageContainerTest tests in tmpdir, merge interdependent
  + [context] Support config file option "proxy_auth_method", defaults "any"
  + Properly handle multiple collections in updateinfo.xml (rh#1804234)
  + Support main config file option "installonlypkgs"
  + Support main config file option "protected_packages"
- Drop patches now part of this release
  + Patch: 0001-context-Support-config-file-option-installonlypkgs.patch
  + Patch: 0002-context-Support-config-file-option-protected_package.patch
  + Patch: 0001-context-Fix-dnf_package_is_installonly-RhBug-1928056.patch
  + Patch: 0001-Fix-librepo-version-required-in-CMakeList.txt-1.12.0.patch
  + Patch: 0002-Fix-Fully-set-ssl-in-newHandle-function.patch
  + Patch: 0003-conf-Add-options-for-working-with-certificates-used-.patch
  + Patch: 0004-Apply-proxy-certificate-options.patch
  + Patch: 0001-Deduplicate-code-create-Repo-Impl-stringToProxyAuthM.patch
  + Patch: 0002-context-Support-config-file-option-proxy_auth_method.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1614686401">- Fix dependency for repo-config-zypp subpackage to work with SLE</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1618315200">- Update to 0.62.0
  + Change order of TransactionItemReason (rh#1921063)
  + Add two new comperators for security filters (rh#1918475)
  + Apply security filters for candidates with lower priority
  + Fix: Goal - translation of messages in global maps
  + Enhance description of modular solvables
  + Improve performance for module query
  + Change mechanism of modular errata applicability (rh#1804234)
  + dnf_transaction_commit(): Remove second call to rpmtsSetVSFlags
  + Fix a couple of memory leaks
  + Fix: Setting of librepo handle in newHandle function
  + Remove failsafe data when module is not enabled (rh#1847035)
  + Expose librepo's checksum functions via SWIG
  + Fix: Mising check of "hy_split_nevra()" return code
  + Do not allow 1 as installonly_limit value (rh#1926261)
  + Fix check whether the subkey can be used for signing
  + Hardening: add signature check with rpmcliVerifySignatures
    (CVE-2021-3445, CVE-2021-3421, CVE-2021-20271, rh#1932079, rh#1932089, rh#1932090, boo#1183779)
  + Add a config option sslverifystatus, defaults to false (rh#1814383)
  + [context] Add API for distro-sync</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1618488000">- Add patch to fix crash when loading DVD repositories
  + Patch: 0001-Fix-a-crash-when-repoId-not-found-in-loaded-conf-gke.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1630065600">- Update to 0.63.1
  + ModuleProfile: add isDefault()
  + ModulePackage: add getDefaultProfile()
  + Add new dnf_context_module_install() C API
  + Fix a crash when [media] section in .treeinfo is missing for bootable media (rh#1946024)
  + Add hy_query_get_advisory_pkgs to C API (rh#1960561)
  + Add dnf_advisorypkg_get_advisory()
  + DNF does not fail on non UTF-8 file names in a package (rh#1893176)
  + Improve error-reporting for modular functions
- Drop patch included in this release
  + Patch: 0001-Fix-a-crash-when-repoId-not-found-in-loaded-conf-gke.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1635940800">- Update to 0.65.0
  + Add support for excluding packages to be installed as weak dependencies
  + Add support for autodetecting packages to be excluded from being installed as weak dependencies
  + Turn off strict validation of modulemd documents (rh#2004853, rh#2007166, rh#2007167)
  + Implement logic for demodularization of modular rpms (rh#1805260)
  + DnfContext: fix handling of default module profiles
  + ModuleMetadata: gracefully handle modules with no defaults
  + Remove failovermethod config option (rh#1961083)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1647259200">- Skip rich deps for autodetection of unmet dependencies (rh#2033130)
  + Patch: 0001-Skip-rich-deps-for-autodetection-of-unmet-dependencies.patch</changelog>
</package>
<package pkgid="9eae7709e9ae6031a14e0905798ef7f07662ea8ed97571c676fc33753fc8ba1c" name="python3-hawkey" arch="ppc64le">
  <version epoch="0" ver="0.65.0" rel="bp154.2.1"/>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1594123200">- Update to version 0.48.0
  + Add prereq_ignoreinst &amp; regular_requires properties for pkg (rh#1543449)
  + Reset active modules when no module enabled or default (rh#1767351)
  + Add comment option to transaction (rh#1773679)
  + Failing to get module defauls is a recoverable error
  + Baseurl is not exclusive with mirrorlist/metalink (rh#1775184)
  + Add new function to reset all modules in C API (dnf_context_reset_all_modules)
  + [context] Fix to preserve additionalMetadata content (rh#1808677)
  + Fix filtering of DepSolvables with source rpms (rh#1812596)
  + Add setter for running kernel protection setting
  + Handle situation when an unprivileged user cannot create history database (rh#1634385)
  + Add query filter: latest by priority
  + Add DNF_NO_PROTECTED flag to allow empty list of protected packages
  + Remove 'dim' option from terminal colors to make them more readable (rh#1807774, rh#1814563)
  + [context] Error when main config file can't be opened (rh#1794864)
  + [context] Add function function dnf_context_is_set_config_file_path
  + swdb: Catch only SQLite3 exceptions and simplify the messages
  + MergedTransaction list multiple comments (rh#1773679)
  + Modify CMake to pull *.po files from weblate
  + Optimize DependencyContainer creation from an existing queue
  + fix a memory leak in dnf_package_get_requires()
  + Fix memory leaks on g_build_filename()
  + Fix memory leak in dnf_context_setup()
  + Add `hy_goal_favor` and `hy_goal_disfavor`
  + Define a cleanup function for `DnfPackageSet`
  + dnf-repo: fix dnf_repo_get_public_keys double-free
  + Do not cache RPMDB
  + Use single-quotes around string literals used in SQL statements
  + SQLite3: Do not close the database if it wasn't opened (rh#1761976)
  + Don't create a new history DB connection for in-memory DB
  + transaction/Swdb: Use a single logger variable in constructor
  + utils: Add a safe version of pathExists()
  + swdb: Handle the case when pathExists() fails on e.g. permission
  + Repo: prepend "file://" if a local path is used as baseurl
  + Move urlEncode() to utils
  + utils: Add 'exclude' argument to urlEncode()
  + Encode package URL for downloading through librepo (rh#1817130)
  + Replace std::runtime_error with libdnf::RepoError
  + Fixes and error handling improvements of the File class
  + [context] Use ConfigRepo for gpgkey and baseurl (rh#1807864)
  + [context] support "priority" option in .repo config file (rh#1797265)
- Drop obsolete patch: libdnf-0.45.0-handle-all-rpmdb-variants.patch
- Refresh patch for static linking libsolvext
  + Remove patch: libdnf-0.39.1-with-static-libsolvext.patch
  + Add patch: libdnf-0.48.0-with-static-libsolvext.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1598011200">- Backport fix from upstream to fix building against check &gt;= 0.15
  + Patch: 0001-tests-Fix-incorrect-usage-of-the-fail_unless-macro.patch
- Clean up spec comments about patches</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1603540800">- Update to version 0.54.2
  + history: Fix dnf history rollback when a package was removed (rh#1683134)
  + Add support for HY_GT, HY_LT in query nevra_strict
  + Fix parsing empty lines in config files
  + Accept '==' as an operator in reldeps (rh#1847946)
  + Add log file level main config option (rh#1802074)
  + Add protect_running_kernel configuration option (rh#1698145)
  + Context part of libdnf cannot assume zchunk is on (rh#1851841, rh#1779104)
  + Fix memory leak of resultingModuleIndex and handle g_object refs
  + Redirect librepo logs to libdnf logs with different source
  + Add hy_goal_lock
  + Enum/String conversions for Transaction Store/Replay
  + utils: Add a method to decode URLs
  + Unify hawkey.log line format with the rest of the logs
- Drop patches included in this release
  + Patch: 0001-tests-Fix-incorrect-usage-of-the-fail_unless-macro.patch
- Refresh patch for reposdir paths
  + Remove patch: libdnf-0.39.1-Switch-default-reposdir-to-etc-dnf-repos.d.patch
  + Add patch: libdnf-0.54.2-Switch-default-reposdir-to-etc-dnf-repos.d.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1606651200">- Update to version 0.55.0
  + Add vendor to dnf API (rh#1876561)
  + Add formatting function for solver error
  + Add error types in ModulePackageContainer
  + Implement module enable for context part
  + Improve string formatting for translation
  + Remove redundant printf and change logging info to notice (rh#1827424)
  + Add allow_vendor_change option (rh#1788371) (rh#1788371)
- Backport patches from upstream
  + Patch: 0001-Support-allow_vendor_change-setting-in-dnf-context-A.patch
  + Patch: 0001-context-dnf_keyring_add_public_keys-not-generate-err.patch
- Add patch to turn off changing vendors by default
  + Patch: libdnf-0.55.0-Switch-allow_vendor_change-off.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1607256000">- Update to version 0.55.2
  + Improve performance of query installed() and available()
  + Swdb: Add a method to get the current transaction
  + [modules] Add special handling for src artifacts (rh#1809314)
  + Better msgs if "basecachedir" or "proxy_password" isn't set (rh#1888946)
  + Add new options module_stream_switch
  + Support allow_vendor_change setting in dnf context API
- Drop patches incorporated into this release
  + Patch: 0001-Support-allow_vendor_change-setting-in-dnf-context-A.patch
  + Patch: 0001-context-dnf_keyring_add_public_keys-not-generate-err.patch
- Use cmake_build and cmake_install macros</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1609761600">- Add patch to support armv6hl and RISC-V architectures
  + Patch: 0001-context-Sync-missing-arches-from-DNF.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1612267200">- Update to version 0.58.0
  + Option: Add reset() method
  + Add OptionBinds::getOption() method
  + [context] Add dnf_repo_conf_from_gkeyfile() and dnf_repo_conf_reset()
  + [context] Add support for options: minrate, throttle, bandwidth, timeout
  + [context] Remove g_key_file_get_string() from dnf_repo_set_keyfile_data()
  + Allow loading ext metadata even if only cache (solv) is present
  + Add ASAN_OPTIONS for test_libdnf_main
  + [context,API] Functions for accessing main/global configuration options
  + [context,API] Function for adding setopt
  + Add getter for modular obsoletes from ModuleMetadata
  + Add ModulePackage.getStaticContext() and getRequires()
  + Add compatible layer for MdDocuments v2
  + Fix modular queries with the new solver
  + Improve formatting of error string for modules
  + Change mechanism of module conflicts
  + Fix load/update FailSafe
- Drop patch included in this release
  + Patch: 0001-context-Sync-missing-arches-from-DNF.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1613131200">- Backport fixes to add controls for installonlypkgs and protected_packages
  + Patch: 0001-context-Support-config-file-option-installonlypkgs.patch
  + Patch: 0002-context-Support-config-file-option-protected_package.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1613217600">- Add patch to move directory for dnf state data to /usr/lib/sysimage
  + Patch: libdnf-0.58.0-Use-usr-lib-sysimage-for-the-persistent-state-dir.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1613217601">- Backport another fix for adding controls to installonlypkgs
  + Patch: 0001-context-Fix-dnf_package_is_installonly-RhBug-1928056.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1614081600">- Backport support for using certificates for repository authorization
  + Patch: 0001-Fix-librepo-version-required-in-CMakeList.txt-1.12.0.patch
  + Patch: 0002-Fix-Fully-set-ssl-in-newHandle-function.patch
  + Patch: 0003-conf-Add-options-for-working-with-certificates-used-.patch
  + Patch: 0004-Apply-proxy-certificate-options.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1614254400">- Add repo-config-zypp subpackage to allow easily using Zypper
  repository configuration</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1614340800">- Backport more fixes for using certs for repo authorization
  + Patch: 0001-Deduplicate-code-create-Repo-Impl-stringToProxyAuthM.patch
  + Patch: 0002-context-Support-config-file-option-proxy_auth_method.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1614686400">- Update to 0.60.0
  + Fix repo.fresh() implementation
  + Fix: Fully set ssl in newHandle function
  + [conf] Add options for working with certificates used with proxy
  + Apply proxy certificate options
  + lock: Switch return-if-fail to assert to quiet gcc -fanalyzer
  + build-sys: Clean up message about Python bindings
  + Modify module NSVCA parsing - context definition (rh#1926771)
  + [context] Fix: dnf_package_is_installonly (rh#1928056)
  + Fix problematic language
  + Add getApplicablePackages to advisory and isApplicable to advisorymodule
  + Keep isAdvisoryApplicable to preserve API
  + Run ModulePackageContainerTest tests in tmpdir, merge interdependent
  + [context] Support config file option "proxy_auth_method", defaults "any"
  + Properly handle multiple collections in updateinfo.xml (rh#1804234)
  + Support main config file option "installonlypkgs"
  + Support main config file option "protected_packages"
- Drop patches now part of this release
  + Patch: 0001-context-Support-config-file-option-installonlypkgs.patch
  + Patch: 0002-context-Support-config-file-option-protected_package.patch
  + Patch: 0001-context-Fix-dnf_package_is_installonly-RhBug-1928056.patch
  + Patch: 0001-Fix-librepo-version-required-in-CMakeList.txt-1.12.0.patch
  + Patch: 0002-Fix-Fully-set-ssl-in-newHandle-function.patch
  + Patch: 0003-conf-Add-options-for-working-with-certificates-used-.patch
  + Patch: 0004-Apply-proxy-certificate-options.patch
  + Patch: 0001-Deduplicate-code-create-Repo-Impl-stringToProxyAuthM.patch
  + Patch: 0002-context-Support-config-file-option-proxy_auth_method.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1614686401">- Fix dependency for repo-config-zypp subpackage to work with SLE</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1618315200">- Update to 0.62.0
  + Change order of TransactionItemReason (rh#1921063)
  + Add two new comperators for security filters (rh#1918475)
  + Apply security filters for candidates with lower priority
  + Fix: Goal - translation of messages in global maps
  + Enhance description of modular solvables
  + Improve performance for module query
  + Change mechanism of modular errata applicability (rh#1804234)
  + dnf_transaction_commit(): Remove second call to rpmtsSetVSFlags
  + Fix a couple of memory leaks
  + Fix: Setting of librepo handle in newHandle function
  + Remove failsafe data when module is not enabled (rh#1847035)
  + Expose librepo's checksum functions via SWIG
  + Fix: Mising check of "hy_split_nevra()" return code
  + Do not allow 1 as installonly_limit value (rh#1926261)
  + Fix check whether the subkey can be used for signing
  + Hardening: add signature check with rpmcliVerifySignatures
    (CVE-2021-3445, CVE-2021-3421, CVE-2021-20271, rh#1932079, rh#1932089, rh#1932090, boo#1183779)
  + Add a config option sslverifystatus, defaults to false (rh#1814383)
  + [context] Add API for distro-sync</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1618488000">- Add patch to fix crash when loading DVD repositories
  + Patch: 0001-Fix-a-crash-when-repoId-not-found-in-loaded-conf-gke.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1630065600">- Update to 0.63.1
  + ModuleProfile: add isDefault()
  + ModulePackage: add getDefaultProfile()
  + Add new dnf_context_module_install() C API
  + Fix a crash when [media] section in .treeinfo is missing for bootable media (rh#1946024)
  + Add hy_query_get_advisory_pkgs to C API (rh#1960561)
  + Add dnf_advisorypkg_get_advisory()
  + DNF does not fail on non UTF-8 file names in a package (rh#1893176)
  + Improve error-reporting for modular functions
- Drop patch included in this release
  + Patch: 0001-Fix-a-crash-when-repoId-not-found-in-loaded-conf-gke.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1635940800">- Update to 0.65.0
  + Add support for excluding packages to be installed as weak dependencies
  + Add support for autodetecting packages to be excluded from being installed as weak dependencies
  + Turn off strict validation of modulemd documents (rh#2004853, rh#2007166, rh#2007167)
  + Implement logic for demodularization of modular rpms (rh#1805260)
  + DnfContext: fix handling of default module profiles
  + ModuleMetadata: gracefully handle modules with no defaults
  + Remove failovermethod config option (rh#1961083)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1647259200">- Skip rich deps for autodetection of unmet dependencies (rh#2033130)
  + Patch: 0001-Skip-rich-deps-for-autodetection-of-unmet-dependencies.patch</changelog>
</package>
<package pkgid="b68a55625782b7764b96da1d696fc7cb18b711e09651cfd0c7e14765bd28dc9a" name="python3-hawkey" arch="s390x">
  <version epoch="0" ver="0.65.0" rel="bp154.2.1"/>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1594123200">- Update to version 0.48.0
  + Add prereq_ignoreinst &amp; regular_requires properties for pkg (rh#1543449)
  + Reset active modules when no module enabled or default (rh#1767351)
  + Add comment option to transaction (rh#1773679)
  + Failing to get module defauls is a recoverable error
  + Baseurl is not exclusive with mirrorlist/metalink (rh#1775184)
  + Add new function to reset all modules in C API (dnf_context_reset_all_modules)
  + [context] Fix to preserve additionalMetadata content (rh#1808677)
  + Fix filtering of DepSolvables with source rpms (rh#1812596)
  + Add setter for running kernel protection setting
  + Handle situation when an unprivileged user cannot create history database (rh#1634385)
  + Add query filter: latest by priority
  + Add DNF_NO_PROTECTED flag to allow empty list of protected packages
  + Remove 'dim' option from terminal colors to make them more readable (rh#1807774, rh#1814563)
  + [context] Error when main config file can't be opened (rh#1794864)
  + [context] Add function function dnf_context_is_set_config_file_path
  + swdb: Catch only SQLite3 exceptions and simplify the messages
  + MergedTransaction list multiple comments (rh#1773679)
  + Modify CMake to pull *.po files from weblate
  + Optimize DependencyContainer creation from an existing queue
  + fix a memory leak in dnf_package_get_requires()
  + Fix memory leaks on g_build_filename()
  + Fix memory leak in dnf_context_setup()
  + Add `hy_goal_favor` and `hy_goal_disfavor`
  + Define a cleanup function for `DnfPackageSet`
  + dnf-repo: fix dnf_repo_get_public_keys double-free
  + Do not cache RPMDB
  + Use single-quotes around string literals used in SQL statements
  + SQLite3: Do not close the database if it wasn't opened (rh#1761976)
  + Don't create a new history DB connection for in-memory DB
  + transaction/Swdb: Use a single logger variable in constructor
  + utils: Add a safe version of pathExists()
  + swdb: Handle the case when pathExists() fails on e.g. permission
  + Repo: prepend "file://" if a local path is used as baseurl
  + Move urlEncode() to utils
  + utils: Add 'exclude' argument to urlEncode()
  + Encode package URL for downloading through librepo (rh#1817130)
  + Replace std::runtime_error with libdnf::RepoError
  + Fixes and error handling improvements of the File class
  + [context] Use ConfigRepo for gpgkey and baseurl (rh#1807864)
  + [context] support "priority" option in .repo config file (rh#1797265)
- Drop obsolete patch: libdnf-0.45.0-handle-all-rpmdb-variants.patch
- Refresh patch for static linking libsolvext
  + Remove patch: libdnf-0.39.1-with-static-libsolvext.patch
  + Add patch: libdnf-0.48.0-with-static-libsolvext.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1598011200">- Backport fix from upstream to fix building against check &gt;= 0.15
  + Patch: 0001-tests-Fix-incorrect-usage-of-the-fail_unless-macro.patch
- Clean up spec comments about patches</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1603540800">- Update to version 0.54.2
  + history: Fix dnf history rollback when a package was removed (rh#1683134)
  + Add support for HY_GT, HY_LT in query nevra_strict
  + Fix parsing empty lines in config files
  + Accept '==' as an operator in reldeps (rh#1847946)
  + Add log file level main config option (rh#1802074)
  + Add protect_running_kernel configuration option (rh#1698145)
  + Context part of libdnf cannot assume zchunk is on (rh#1851841, rh#1779104)
  + Fix memory leak of resultingModuleIndex and handle g_object refs
  + Redirect librepo logs to libdnf logs with different source
  + Add hy_goal_lock
  + Enum/String conversions for Transaction Store/Replay
  + utils: Add a method to decode URLs
  + Unify hawkey.log line format with the rest of the logs
- Drop patches included in this release
  + Patch: 0001-tests-Fix-incorrect-usage-of-the-fail_unless-macro.patch
- Refresh patch for reposdir paths
  + Remove patch: libdnf-0.39.1-Switch-default-reposdir-to-etc-dnf-repos.d.patch
  + Add patch: libdnf-0.54.2-Switch-default-reposdir-to-etc-dnf-repos.d.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1606651200">- Update to version 0.55.0
  + Add vendor to dnf API (rh#1876561)
  + Add formatting function for solver error
  + Add error types in ModulePackageContainer
  + Implement module enable for context part
  + Improve string formatting for translation
  + Remove redundant printf and change logging info to notice (rh#1827424)
  + Add allow_vendor_change option (rh#1788371) (rh#1788371)
- Backport patches from upstream
  + Patch: 0001-Support-allow_vendor_change-setting-in-dnf-context-A.patch
  + Patch: 0001-context-dnf_keyring_add_public_keys-not-generate-err.patch
- Add patch to turn off changing vendors by default
  + Patch: libdnf-0.55.0-Switch-allow_vendor_change-off.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1607256000">- Update to version 0.55.2
  + Improve performance of query installed() and available()
  + Swdb: Add a method to get the current transaction
  + [modules] Add special handling for src artifacts (rh#1809314)
  + Better msgs if "basecachedir" or "proxy_password" isn't set (rh#1888946)
  + Add new options module_stream_switch
  + Support allow_vendor_change setting in dnf context API
- Drop patches incorporated into this release
  + Patch: 0001-Support-allow_vendor_change-setting-in-dnf-context-A.patch
  + Patch: 0001-context-dnf_keyring_add_public_keys-not-generate-err.patch
- Use cmake_build and cmake_install macros</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1609761600">- Add patch to support armv6hl and RISC-V architectures
  + Patch: 0001-context-Sync-missing-arches-from-DNF.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1612267200">- Update to version 0.58.0
  + Option: Add reset() method
  + Add OptionBinds::getOption() method
  + [context] Add dnf_repo_conf_from_gkeyfile() and dnf_repo_conf_reset()
  + [context] Add support for options: minrate, throttle, bandwidth, timeout
  + [context] Remove g_key_file_get_string() from dnf_repo_set_keyfile_data()
  + Allow loading ext metadata even if only cache (solv) is present
  + Add ASAN_OPTIONS for test_libdnf_main
  + [context,API] Functions for accessing main/global configuration options
  + [context,API] Function for adding setopt
  + Add getter for modular obsoletes from ModuleMetadata
  + Add ModulePackage.getStaticContext() and getRequires()
  + Add compatible layer for MdDocuments v2
  + Fix modular queries with the new solver
  + Improve formatting of error string for modules
  + Change mechanism of module conflicts
  + Fix load/update FailSafe
- Drop patch included in this release
  + Patch: 0001-context-Sync-missing-arches-from-DNF.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1613131200">- Backport fixes to add controls for installonlypkgs and protected_packages
  + Patch: 0001-context-Support-config-file-option-installonlypkgs.patch
  + Patch: 0002-context-Support-config-file-option-protected_package.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1613217600">- Add patch to move directory for dnf state data to /usr/lib/sysimage
  + Patch: libdnf-0.58.0-Use-usr-lib-sysimage-for-the-persistent-state-dir.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1613217601">- Backport another fix for adding controls to installonlypkgs
  + Patch: 0001-context-Fix-dnf_package_is_installonly-RhBug-1928056.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1614081600">- Backport support for using certificates for repository authorization
  + Patch: 0001-Fix-librepo-version-required-in-CMakeList.txt-1.12.0.patch
  + Patch: 0002-Fix-Fully-set-ssl-in-newHandle-function.patch
  + Patch: 0003-conf-Add-options-for-working-with-certificates-used-.patch
  + Patch: 0004-Apply-proxy-certificate-options.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1614254400">- Add repo-config-zypp subpackage to allow easily using Zypper
  repository configuration</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1614340800">- Backport more fixes for using certs for repo authorization
  + Patch: 0001-Deduplicate-code-create-Repo-Impl-stringToProxyAuthM.patch
  + Patch: 0002-context-Support-config-file-option-proxy_auth_method.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1614686400">- Update to 0.60.0
  + Fix repo.fresh() implementation
  + Fix: Fully set ssl in newHandle function
  + [conf] Add options for working with certificates used with proxy
  + Apply proxy certificate options
  + lock: Switch return-if-fail to assert to quiet gcc -fanalyzer
  + build-sys: Clean up message about Python bindings
  + Modify module NSVCA parsing - context definition (rh#1926771)
  + [context] Fix: dnf_package_is_installonly (rh#1928056)
  + Fix problematic language
  + Add getApplicablePackages to advisory and isApplicable to advisorymodule
  + Keep isAdvisoryApplicable to preserve API
  + Run ModulePackageContainerTest tests in tmpdir, merge interdependent
  + [context] Support config file option "proxy_auth_method", defaults "any"
  + Properly handle multiple collections in updateinfo.xml (rh#1804234)
  + Support main config file option "installonlypkgs"
  + Support main config file option "protected_packages"
- Drop patches now part of this release
  + Patch: 0001-context-Support-config-file-option-installonlypkgs.patch
  + Patch: 0002-context-Support-config-file-option-protected_package.patch
  + Patch: 0001-context-Fix-dnf_package_is_installonly-RhBug-1928056.patch
  + Patch: 0001-Fix-librepo-version-required-in-CMakeList.txt-1.12.0.patch
  + Patch: 0002-Fix-Fully-set-ssl-in-newHandle-function.patch
  + Patch: 0003-conf-Add-options-for-working-with-certificates-used-.patch
  + Patch: 0004-Apply-proxy-certificate-options.patch
  + Patch: 0001-Deduplicate-code-create-Repo-Impl-stringToProxyAuthM.patch
  + Patch: 0002-context-Support-config-file-option-proxy_auth_method.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1614686401">- Fix dependency for repo-config-zypp subpackage to work with SLE</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1618315200">- Update to 0.62.0
  + Change order of TransactionItemReason (rh#1921063)
  + Add two new comperators for security filters (rh#1918475)
  + Apply security filters for candidates with lower priority
  + Fix: Goal - translation of messages in global maps
  + Enhance description of modular solvables
  + Improve performance for module query
  + Change mechanism of modular errata applicability (rh#1804234)
  + dnf_transaction_commit(): Remove second call to rpmtsSetVSFlags
  + Fix a couple of memory leaks
  + Fix: Setting of librepo handle in newHandle function
  + Remove failsafe data when module is not enabled (rh#1847035)
  + Expose librepo's checksum functions via SWIG
  + Fix: Mising check of "hy_split_nevra()" return code
  + Do not allow 1 as installonly_limit value (rh#1926261)
  + Fix check whether the subkey can be used for signing
  + Hardening: add signature check with rpmcliVerifySignatures
    (CVE-2021-3445, CVE-2021-3421, CVE-2021-20271, rh#1932079, rh#1932089, rh#1932090, boo#1183779)
  + Add a config option sslverifystatus, defaults to false (rh#1814383)
  + [context] Add API for distro-sync</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1618488000">- Add patch to fix crash when loading DVD repositories
  + Patch: 0001-Fix-a-crash-when-repoId-not-found-in-loaded-conf-gke.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1630065600">- Update to 0.63.1
  + ModuleProfile: add isDefault()
  + ModulePackage: add getDefaultProfile()
  + Add new dnf_context_module_install() C API
  + Fix a crash when [media] section in .treeinfo is missing for bootable media (rh#1946024)
  + Add hy_query_get_advisory_pkgs to C API (rh#1960561)
  + Add dnf_advisorypkg_get_advisory()
  + DNF does not fail on non UTF-8 file names in a package (rh#1893176)
  + Improve error-reporting for modular functions
- Drop patch included in this release
  + Patch: 0001-Fix-a-crash-when-repoId-not-found-in-loaded-conf-gke.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1635940800">- Update to 0.65.0
  + Add support for excluding packages to be installed as weak dependencies
  + Add support for autodetecting packages to be excluded from being installed as weak dependencies
  + Turn off strict validation of modulemd documents (rh#2004853, rh#2007166, rh#2007167)
  + Implement logic for demodularization of modular rpms (rh#1805260)
  + DnfContext: fix handling of default module profiles
  + ModuleMetadata: gracefully handle modules with no defaults
  + Remove failovermethod config option (rh#1961083)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1647259200">- Skip rich deps for autodetection of unmet dependencies (rh#2033130)
  + Patch: 0001-Skip-rich-deps-for-autodetection-of-unmet-dependencies.patch</changelog>
</package>
<package pkgid="dbd51e5ba17f93c6b7fca3ca8f5d4df74028d689424e58326ac991cb7034ccb1" name="python3-hawkey" arch="x86_64">
  <version epoch="0" ver="0.65.0" rel="bp154.2.1"/>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1594123200">- Update to version 0.48.0
  + Add prereq_ignoreinst &amp; regular_requires properties for pkg (rh#1543449)
  + Reset active modules when no module enabled or default (rh#1767351)
  + Add comment option to transaction (rh#1773679)
  + Failing to get module defauls is a recoverable error
  + Baseurl is not exclusive with mirrorlist/metalink (rh#1775184)
  + Add new function to reset all modules in C API (dnf_context_reset_all_modules)
  + [context] Fix to preserve additionalMetadata content (rh#1808677)
  + Fix filtering of DepSolvables with source rpms (rh#1812596)
  + Add setter for running kernel protection setting
  + Handle situation when an unprivileged user cannot create history database (rh#1634385)
  + Add query filter: latest by priority
  + Add DNF_NO_PROTECTED flag to allow empty list of protected packages
  + Remove 'dim' option from terminal colors to make them more readable (rh#1807774, rh#1814563)
  + [context] Error when main config file can't be opened (rh#1794864)
  + [context] Add function function dnf_context_is_set_config_file_path
  + swdb: Catch only SQLite3 exceptions and simplify the messages
  + MergedTransaction list multiple comments (rh#1773679)
  + Modify CMake to pull *.po files from weblate
  + Optimize DependencyContainer creation from an existing queue
  + fix a memory leak in dnf_package_get_requires()
  + Fix memory leaks on g_build_filename()
  + Fix memory leak in dnf_context_setup()
  + Add `hy_goal_favor` and `hy_goal_disfavor`
  + Define a cleanup function for `DnfPackageSet`
  + dnf-repo: fix dnf_repo_get_public_keys double-free
  + Do not cache RPMDB
  + Use single-quotes around string literals used in SQL statements
  + SQLite3: Do not close the database if it wasn't opened (rh#1761976)
  + Don't create a new history DB connection for in-memory DB
  + transaction/Swdb: Use a single logger variable in constructor
  + utils: Add a safe version of pathExists()
  + swdb: Handle the case when pathExists() fails on e.g. permission
  + Repo: prepend "file://" if a local path is used as baseurl
  + Move urlEncode() to utils
  + utils: Add 'exclude' argument to urlEncode()
  + Encode package URL for downloading through librepo (rh#1817130)
  + Replace std::runtime_error with libdnf::RepoError
  + Fixes and error handling improvements of the File class
  + [context] Use ConfigRepo for gpgkey and baseurl (rh#1807864)
  + [context] support "priority" option in .repo config file (rh#1797265)
- Drop obsolete patch: libdnf-0.45.0-handle-all-rpmdb-variants.patch
- Refresh patch for static linking libsolvext
  + Remove patch: libdnf-0.39.1-with-static-libsolvext.patch
  + Add patch: libdnf-0.48.0-with-static-libsolvext.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1598011200">- Backport fix from upstream to fix building against check &gt;= 0.15
  + Patch: 0001-tests-Fix-incorrect-usage-of-the-fail_unless-macro.patch
- Clean up spec comments about patches</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1603540800">- Update to version 0.54.2
  + history: Fix dnf history rollback when a package was removed (rh#1683134)
  + Add support for HY_GT, HY_LT in query nevra_strict
  + Fix parsing empty lines in config files
  + Accept '==' as an operator in reldeps (rh#1847946)
  + Add log file level main config option (rh#1802074)
  + Add protect_running_kernel configuration option (rh#1698145)
  + Context part of libdnf cannot assume zchunk is on (rh#1851841, rh#1779104)
  + Fix memory leak of resultingModuleIndex and handle g_object refs
  + Redirect librepo logs to libdnf logs with different source
  + Add hy_goal_lock
  + Enum/String conversions for Transaction Store/Replay
  + utils: Add a method to decode URLs
  + Unify hawkey.log line format with the rest of the logs
- Drop patches included in this release
  + Patch: 0001-tests-Fix-incorrect-usage-of-the-fail_unless-macro.patch
- Refresh patch for reposdir paths
  + Remove patch: libdnf-0.39.1-Switch-default-reposdir-to-etc-dnf-repos.d.patch
  + Add patch: libdnf-0.54.2-Switch-default-reposdir-to-etc-dnf-repos.d.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1606651200">- Update to version 0.55.0
  + Add vendor to dnf API (rh#1876561)
  + Add formatting function for solver error
  + Add error types in ModulePackageContainer
  + Implement module enable for context part
  + Improve string formatting for translation
  + Remove redundant printf and change logging info to notice (rh#1827424)
  + Add allow_vendor_change option (rh#1788371) (rh#1788371)
- Backport patches from upstream
  + Patch: 0001-Support-allow_vendor_change-setting-in-dnf-context-A.patch
  + Patch: 0001-context-dnf_keyring_add_public_keys-not-generate-err.patch
- Add patch to turn off changing vendors by default
  + Patch: libdnf-0.55.0-Switch-allow_vendor_change-off.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1607256000">- Update to version 0.55.2
  + Improve performance of query installed() and available()
  + Swdb: Add a method to get the current transaction
  + [modules] Add special handling for src artifacts (rh#1809314)
  + Better msgs if "basecachedir" or "proxy_password" isn't set (rh#1888946)
  + Add new options module_stream_switch
  + Support allow_vendor_change setting in dnf context API
- Drop patches incorporated into this release
  + Patch: 0001-Support-allow_vendor_change-setting-in-dnf-context-A.patch
  + Patch: 0001-context-dnf_keyring_add_public_keys-not-generate-err.patch
- Use cmake_build and cmake_install macros</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1609761600">- Add patch to support armv6hl and RISC-V architectures
  + Patch: 0001-context-Sync-missing-arches-from-DNF.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1612267200">- Update to version 0.58.0
  + Option: Add reset() method
  + Add OptionBinds::getOption() method
  + [context] Add dnf_repo_conf_from_gkeyfile() and dnf_repo_conf_reset()
  + [context] Add support for options: minrate, throttle, bandwidth, timeout
  + [context] Remove g_key_file_get_string() from dnf_repo_set_keyfile_data()
  + Allow loading ext metadata even if only cache (solv) is present
  + Add ASAN_OPTIONS for test_libdnf_main
  + [context,API] Functions for accessing main/global configuration options
  + [context,API] Function for adding setopt
  + Add getter for modular obsoletes from ModuleMetadata
  + Add ModulePackage.getStaticContext() and getRequires()
  + Add compatible layer for MdDocuments v2
  + Fix modular queries with the new solver
  + Improve formatting of error string for modules
  + Change mechanism of module conflicts
  + Fix load/update FailSafe
- Drop patch included in this release
  + Patch: 0001-context-Sync-missing-arches-from-DNF.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1613131200">- Backport fixes to add controls for installonlypkgs and protected_packages
  + Patch: 0001-context-Support-config-file-option-installonlypkgs.patch
  + Patch: 0002-context-Support-config-file-option-protected_package.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1613217600">- Add patch to move directory for dnf state data to /usr/lib/sysimage
  + Patch: libdnf-0.58.0-Use-usr-lib-sysimage-for-the-persistent-state-dir.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1613217601">- Backport another fix for adding controls to installonlypkgs
  + Patch: 0001-context-Fix-dnf_package_is_installonly-RhBug-1928056.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1614081600">- Backport support for using certificates for repository authorization
  + Patch: 0001-Fix-librepo-version-required-in-CMakeList.txt-1.12.0.patch
  + Patch: 0002-Fix-Fully-set-ssl-in-newHandle-function.patch
  + Patch: 0003-conf-Add-options-for-working-with-certificates-used-.patch
  + Patch: 0004-Apply-proxy-certificate-options.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1614254400">- Add repo-config-zypp subpackage to allow easily using Zypper
  repository configuration</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1614340800">- Backport more fixes for using certs for repo authorization
  + Patch: 0001-Deduplicate-code-create-Repo-Impl-stringToProxyAuthM.patch
  + Patch: 0002-context-Support-config-file-option-proxy_auth_method.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1614686400">- Update to 0.60.0
  + Fix repo.fresh() implementation
  + Fix: Fully set ssl in newHandle function
  + [conf] Add options for working with certificates used with proxy
  + Apply proxy certificate options
  + lock: Switch return-if-fail to assert to quiet gcc -fanalyzer
  + build-sys: Clean up message about Python bindings
  + Modify module NSVCA parsing - context definition (rh#1926771)
  + [context] Fix: dnf_package_is_installonly (rh#1928056)
  + Fix problematic language
  + Add getApplicablePackages to advisory and isApplicable to advisorymodule
  + Keep isAdvisoryApplicable to preserve API
  + Run ModulePackageContainerTest tests in tmpdir, merge interdependent
  + [context] Support config file option "proxy_auth_method", defaults "any"
  + Properly handle multiple collections in updateinfo.xml (rh#1804234)
  + Support main config file option "installonlypkgs"
  + Support main config file option "protected_packages"
- Drop patches now part of this release
  + Patch: 0001-context-Support-config-file-option-installonlypkgs.patch
  + Patch: 0002-context-Support-config-file-option-protected_package.patch
  + Patch: 0001-context-Fix-dnf_package_is_installonly-RhBug-1928056.patch
  + Patch: 0001-Fix-librepo-version-required-in-CMakeList.txt-1.12.0.patch
  + Patch: 0002-Fix-Fully-set-ssl-in-newHandle-function.patch
  + Patch: 0003-conf-Add-options-for-working-with-certificates-used-.patch
  + Patch: 0004-Apply-proxy-certificate-options.patch
  + Patch: 0001-Deduplicate-code-create-Repo-Impl-stringToProxyAuthM.patch
  + Patch: 0002-context-Support-config-file-option-proxy_auth_method.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1614686401">- Fix dependency for repo-config-zypp subpackage to work with SLE</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1618315200">- Update to 0.62.0
  + Change order of TransactionItemReason (rh#1921063)
  + Add two new comperators for security filters (rh#1918475)
  + Apply security filters for candidates with lower priority
  + Fix: Goal - translation of messages in global maps
  + Enhance description of modular solvables
  + Improve performance for module query
  + Change mechanism of modular errata applicability (rh#1804234)
  + dnf_transaction_commit(): Remove second call to rpmtsSetVSFlags
  + Fix a couple of memory leaks
  + Fix: Setting of librepo handle in newHandle function
  + Remove failsafe data when module is not enabled (rh#1847035)
  + Expose librepo's checksum functions via SWIG
  + Fix: Mising check of "hy_split_nevra()" return code
  + Do not allow 1 as installonly_limit value (rh#1926261)
  + Fix check whether the subkey can be used for signing
  + Hardening: add signature check with rpmcliVerifySignatures
    (CVE-2021-3445, CVE-2021-3421, CVE-2021-20271, rh#1932079, rh#1932089, rh#1932090, boo#1183779)
  + Add a config option sslverifystatus, defaults to false (rh#1814383)
  + [context] Add API for distro-sync</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1618488000">- Add patch to fix crash when loading DVD repositories
  + Patch: 0001-Fix-a-crash-when-repoId-not-found-in-loaded-conf-gke.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1630065600">- Update to 0.63.1
  + ModuleProfile: add isDefault()
  + ModulePackage: add getDefaultProfile()
  + Add new dnf_context_module_install() C API
  + Fix a crash when [media] section in .treeinfo is missing for bootable media (rh#1946024)
  + Add hy_query_get_advisory_pkgs to C API (rh#1960561)
  + Add dnf_advisorypkg_get_advisory()
  + DNF does not fail on non UTF-8 file names in a package (rh#1893176)
  + Improve error-reporting for modular functions
- Drop patch included in this release
  + Patch: 0001-Fix-a-crash-when-repoId-not-found-in-loaded-conf-gke.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1635940800">- Update to 0.65.0
  + Add support for excluding packages to be installed as weak dependencies
  + Add support for autodetecting packages to be excluded from being installed as weak dependencies
  + Turn off strict validation of modulemd documents (rh#2004853, rh#2007166, rh#2007167)
  + Implement logic for demodularization of modular rpms (rh#1805260)
  + DnfContext: fix handling of default module profiles
  + ModuleMetadata: gracefully handle modules with no defaults
  + Remove failovermethod config option (rh#1961083)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1647259200">- Skip rich deps for autodetection of unmet dependencies (rh#2033130)
  + Patch: 0001-Skip-rich-deps-for-autodetection-of-unmet-dependencies.patch</changelog>
</package>
<package pkgid="ef7deb668659cabbf55d473f74e203b7adf883c72495c7beac3647d8db8a43f7" name="python3-ipython" arch="noarch">
  <version epoch="0" ver="7.16.1" rel="bp154.2.3.3"/>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1545480000">- Update to version 7.2.0
  * Fix a bug preventing PySide2 GUI integration from working :ghpull:`11464`
  * Run CI on Mac OS ! :ghpull:`11471`
  * Fix IPython "Demo" mode. :ghpull:`11498`
  * Fix ``%run`` magic  with path in name :ghpull:`11499`
  * Fix: add CWD to sys.path *after* stdlib :ghpull:`11502`
  * Better rendering of signatures, especially long ones. :ghpull:`11505`
  * Re-enable jedi by default if it's installed :ghpull:`11506`
  * Add New ``minimal`` exception reporting mode (useful for educational purpose). See :ghpull:`11509`
- Update to version 7.1.0
  + Notable Changes
  * Major update of "latex to unicode" tab completion map (see below)
  + Notable New Features:
  * Restore functionality and documentation of the **sphinx directive**, which
    is now stricter (fail on error by daefault), has new configuration options,
    has a brand new documentation page :ref:`ipython_directive` (which needs
    some cleanup). It is also now *tested* so we hope to have less regressions.
    :ghpull:`11402`
  * ``IPython.display.Video`` now supports ``width`` and ``height`` arguments,
    allowing a custom width and height to be set instead of using the video's
    width and height. :ghpull:`11353`
  * Warn when using ``HTML('&lt;iframe&gt;')`` instead of ``IFrame`` :ghpull:`11350`
  * Allow Dynamic switching of editing mode between vi/emacs and show
    normal/input mode in prompt when using vi. :ghpull:`11390`. Use ``%config
    TerminalInteractiveShell.editing_mode = 'vi'`` or ``%config
    TerminalInteractiveShell.editing_mode = 'emacs'`` to dynamically switch
    between modes.
  + Notable Fixes:
  * Fix entering of **multi-line blocks in terminal** IPython, and various
    crashes in the new input transformation machinery :ghpull:`11354`,
    :ghpull:`11356`, :ghpull:`11358`. These also fix a **Compatibility bug
    with Python 3.7.1**.
  * Fix moving through generator stack in ipdb :ghpull:`11266`
  * %Magic command arguments now support quoting. :ghpull:`11330`
  * Re-add ``rprint`` and ``rprinte`` aliases. :ghpull:`11331`
  * Remove implicit dependency on ``ipython_genutils`` :ghpull:`11317`
  * Make ``nonlocal`` raise ``SyntaxError`` instead of silently failing in async
    mode. :ghpull:`11382`
  * Fix mishandling of magics and ``= !`` assignment just after a dedent in
    nested code blocks :ghpull:`11418`
  * Fix instructions for custom shortcuts :ghpull:`11426`
  + Notable Internals improvements:
  * Use of ``os.scandir`` (Python 3 only) to speed up some file system operations.
    :ghpull:`11365`
  * use ``perf_counter`` instead of ``clock`` for more precise
    timing results with ``%time`` :ghpull:`11376`
- Remove upstream-included fix_test_history.patch</changelog>
  <changelog author="Arun Persaud &lt;arun@gmx.de&gt;" date="1551441600">- specfile:
  * update copyright year
- update to version 7.3.0:
  * The biggest change to this release is the implementation of the
    "%conda" and "%pip" magics, that will attempt to install packages
    in the **current environment**. You may still need to restart your
    interpreter or kernel for the change to be taken into account, but
    it should simplify installation of packages into remote
    environment. Installing using pip/conda from the command line is
    still the prefer method.
  * The "%pip" magic was already present, but was only printing a
    warning; now it will actually forward commands to pip.
  * Misc bug fixes and improvements:
    + Compatibility with Python 3.8.
    + Do not expand shell variable in execution magics, and added the
    "no_var_expand" decorator for magic requiring a similar
    functionality :ghpull:`11516`
    + Add "%pip" and "%conda" magic :ghpull:`11524`
    + Re-initialize posix aliases after a "%reset" :ghpull:`11528`
    + Allow the IPython command line to run "*.ipynb" files
    :ghpull:`11529`</changelog>
  <changelog author="Arun Persaud &lt;arun@gmx.de&gt;" date="1553428800">- update to version 7.4.0:
  * Previously, we provided completion for a unicode name with its
    relative symbol.With this, now IPython provides complete
    suggestions to unicode name symbols.
  * Make audio normalization optional
  * Miscelanious
    + Fix improper acceptation of "return" outside of
    functions. :ghpull:`11641`.
    + Fixed PyQt 5.11 backwards incompatibility causing sip import
    failure.  :ghpull:`11613`.
    + Fix Bug where "type?" woudl crash IPython. :ghpull:`1608`.
    + Allow to apply "@needs_local_scope" to cell magics for
    convenience.  :ghpull:`11542`.</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1556193600">- Rename package to follow python package guidelines.</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1556193601">- Update to 7.5.0
  * IPython 7.5.0 consist mostly of bug-fixes, and documentation updates,
    with one minor new feature. The Audio display element can now be
    assigned an element id when displayed in browser.
  * The major outstanding bug fix correct a change of behavior that was
    introduce in 7.4.0 where some cell magics would not be able to access
    or modify global scope when using the @needs_local_scope decorator.
    This was typically encountered with the %%time and %%timeit magics.</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1562155200">- Update to 7.6.0
  IPython 7.6.0 contains a couple of bug fixes and number of small features
  additions as well as some compatibility with the current development version of
  Python 3.8.
  * Add a ``-l`` option to :magic:`psearch` to list the available search
    types.
  * Support ``PathLike`` for ``DisplayObject`` and ``Image``.
  * Configurability of timeout in the test suite for slow platforms.
  * Accept any casing for matplotlib backend.
  * Properly skip test that requires numpy to be installed
  * More support for Python 3.8 and positional only arguments (pep570)
  * Unicode names for the completion are loaded lazily on first use which
    should decrease startup time.
  * Autoreload now update the types of reloaded objects; this for example allow
    pickling of reloaded objects.
  * Fix a big where ``%%time`` magic would suppress cell output.</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1564228800">- Update to 7.7.0
  * Fix a bug introduced in 7.6 where the ``%matplotlib`` magic would fail on
    previously acceptable arguments
  * Fix the manage location on freebsd
  * Fix error message about aliases after ``%reset`` call in ipykernel
  * Fix Duplication completions in emacs</changelog>
  <changelog author="Arun Persaud &lt;arun@gmx.de&gt;" date="1568462400">- update to version 7.8.0:
  * Enable changing the font color for LaTeX rendering
  * and Re-Expose some PDB API</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1573560000">- update to version 7.9.0:
  * Update trio and curio dependencies eagerly.
  * restore terminal title on exit (xterm)
  * Easier empty, updatable display
  * %env: hide likely secrets by default
  * Prevent caching outputs in _, __, ___ when cache_size isn't positive
  * switching update_instance() to gc.get_referrers()
  * Fix for Python 4
  * Autoreload slow</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1579089600">- Update to 7.11.1
  * A couple of deprecated functions (no-op) have been reintroduces in py3compat as
  Cython was still relying on them, and will be removed in a couple of versions.
- Update to 7.11.0
  * A number of function in the ``py3compat`` have been removed; a number of types
    in the IPython code base are now non-ambiguous and now always ``unicode``
    instead of ``Union[Unicode,bytes]``; many of the relevant code path have thus
    been simplified/cleaned and types annotation added.
  * IPython support several verbosity level from exceptions. ``xmode plain`` now
    support chained exceptions.
  * We are starting to remove ``shell=True`` in some usages of subprocess. While not directly
    a security issue (as IPython is made to run arbitrary code anyway) it is not good
    practice and we'd like to show the example.
  * Work around some bugs in Python 3.9 tokenizer
  * IPython will now print its version after a crash.
- Update to 7.10.2
  * IPython 7.10.2 fix a couple of extra incompatibility between IPython, ipdb,
    asyncio and Prompt Toolkit 3.
- Update to IPython 7.10.1
  * IPython 7.10.1 fix a couple of incompatibilities with Prompt toolkit 3 (please
    update Prompt toolkit to 3.0.2 at least), and fixes some interaction with
    headless IPython.
- Update to IPython 7.10.0
  * Stop Support for Python 3.5 ? Adopt NEP 29
  * Support for Prompt Toolkit 3.0
  * Prompt Rendering Performance improvements
  * Code autoformatting
  * Arbitrary Mimetypes Handing in Terminal (Aka inline images in terminal)
  * Completions can define their own ordering
  * Enable Plotting in the same cell than the one that import matplotlib
  * Allow to store and restore multiple variables at once</changelog>
  <changelog author="Arun Persaud &lt;arun@gmx.de&gt;" date="1581163200">- update to version 7.12.0:
  * Exit non-zero when ipython is given a file path to run that
    doesn't exist :ghpull:`12074`
  * Test PR on ARM64 with Travis-CI :ghpull:`12073`
  * Update CI to work with latest Pytest :ghpull:`12086`
  * Add infrastructure to run ipykernel eventloop via trio
    :ghpull:`12097`
  * Support git blame ignore revs :ghpull:`12091`
  * Start multi-line __repr__ s on their own line :ghpull:`12099`</changelog>
  <changelog author="Arun Persaud &lt;arun@gmx.de&gt;" date="1583064000">- update to version 7.13.0:
  * Fix inability to run PDB when inside an event loop :ghpull:`12141`
  * Fix ability to interrupt some processes on windows :ghpull:`12137`
  * Fix debugger shortcuts :ghpull:`12132`
  * improve tab completion when inside a string by removing irrelevant
    elements :ghpull:`12128`
  * Fix display of filename tab completion when the path is long
    :ghpull:`12122`
  * Many removal of Python 2 specific code path :ghpull:`12110`
  * displaying wav files do not require NumPy anymore, and is 5x to
    30x faster :ghpull:`12113`</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1583236800">- Run tests using multibuild instead of running them in a separate
  subpackage.  This greatly simplifies the spec file and makes
  updating the package much easier.
- Drop doc subpackage due to rapid changes in readthedocs download
  urls.  This was only around to let the tests be run in a
  separate subpackage to avoid dependency loops.</changelog>
  <changelog author="Benjamin Greiner &lt;code@bnavigator.de&gt;" date="1584619200">- update dep version of python-prompt_toolkit</changelog>
  <changelog author="Benjamin Greiner &lt;code@bnavigator.de&gt;" date="1588420800">- Update to version 7.14.0
  IPython  7.14 is a minor release that fix a couple of bugs and prepare
  compatibility with new or future versions of some libraries.
  * Fix compatibility with Sphinx 3+
    gh#ipython/ipython#12235
  * Remove deprecated matplotlib parameter usage, compatibility with
    matplotlib3.3+
    gh#ipython/ipython#12250
  * set ``.py`` extension when editing current buffer in vi/emacs.
    gh#ipython/ipython#12167
  * support for unicode identifiers in ``?``/``??``
    gh#ipython/ipython#12208
  * add extra options to the ``Video`` Rich objects
    gh#ipython/ipython#12212
  * add pretty-printing to ``SimpleNamespace``
    gh#ipython/ipython#12230
- add opensuse-disable-net-test.patch to disable network access
  during new test_embed_svg_url</changelog>
  <changelog author="Arun Persaud &lt;arun@gmx.de&gt;" date="1590840000">- specfile:
  * removed opensuse-disable-net-test.patch, wikipedia file is not accessed anymore
- update to version 7.15.0:
  * Misc Noticeable changes:
    + Long completion name have better elision in terminal
    :ghpull:`12284`
    + I've started to test on Python 3.9 :ghpull:`12307` and fix some
    errors.
    + Hi DPI scaling of figures when using qt eventloop
    :ghpull:`12314`
    + Document the ability to have systemwide configuration for
    IPython. :ghpull:`12328`
    + Fix issues with input autoformatting :ghpull:`12336`
    + IPython.core.debugger.Pdb is now interruptible (:ghpull:`12168`,
    in 7.14 but forgotten in release notes)
    + Video HTML attributes (:ghpull:`12212`, in 7.14 but forgotten in
    release notes)
  * Reproducible Build
  * NEP29: Last version to support Python 3.6
  * Highlighted features
    + Increase Tab Completion Menu Height
    + Autoformat Code in the terminal</changelog>
  <changelog author="Arun Persaud &lt;arun@gmx.de&gt;" date="1593345600">- update to version 7.16.1:
  * Noticeable changes:
    + Exceptions are now (re)raised when running notebooks via the
    :magic:`%run`, helping to catch issues in workflows and
    pipelines. :ghpull:`12301`
    + Fix inputhook for qt 5.15.0 :ghpull:`12355`
    + Fix wx inputhook :ghpull:`12375`
    + Add handling for malformed pathext env var (Windows)
    :ghpull:`12367`
    + use $SHELL in system_piped :ghpull:`12360` for uniform behavior
    with ipykernel.
  * Reproducible Build</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1646222400">- Add ipython-jedi018.patch to make ipython compatible with the
  jedi version 0.18 (bsc#1195830).</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1646395200">- Add CVE-2022-21699-unnecessary-privs.patch confining
  executed process to have limited privileges. (CVE-2022-21699
  bsc#1194936).</changelog>
  <changelog author="Steve Kowalik &lt;steven.kowalik@suse.com&gt;" date="1657627200">- Update ipython-jedi018.patch to more completely support
  jedi 0.18 (bsc#1200228)</changelog>
</package>
<package pkgid="9d8172346838b68058756aa2c210cb9e58e0273f3e677f0f808c1bbe94a26a04" name="python3-ipython-iptest" arch="noarch">
  <version epoch="0" ver="7.16.1" rel="bp154.2.3.3"/>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1545480000">- Update to version 7.2.0
  * Fix a bug preventing PySide2 GUI integration from working :ghpull:`11464`
  * Run CI on Mac OS ! :ghpull:`11471`
  * Fix IPython "Demo" mode. :ghpull:`11498`
  * Fix ``%run`` magic  with path in name :ghpull:`11499`
  * Fix: add CWD to sys.path *after* stdlib :ghpull:`11502`
  * Better rendering of signatures, especially long ones. :ghpull:`11505`
  * Re-enable jedi by default if it's installed :ghpull:`11506`
  * Add New ``minimal`` exception reporting mode (useful for educational purpose). See :ghpull:`11509`
- Update to version 7.1.0
  + Notable Changes
  * Major update of "latex to unicode" tab completion map (see below)
  + Notable New Features:
  * Restore functionality and documentation of the **sphinx directive**, which
    is now stricter (fail on error by daefault), has new configuration options,
    has a brand new documentation page :ref:`ipython_directive` (which needs
    some cleanup). It is also now *tested* so we hope to have less regressions.
    :ghpull:`11402`
  * ``IPython.display.Video`` now supports ``width`` and ``height`` arguments,
    allowing a custom width and height to be set instead of using the video's
    width and height. :ghpull:`11353`
  * Warn when using ``HTML('&lt;iframe&gt;')`` instead of ``IFrame`` :ghpull:`11350`
  * Allow Dynamic switching of editing mode between vi/emacs and show
    normal/input mode in prompt when using vi. :ghpull:`11390`. Use ``%config
    TerminalInteractiveShell.editing_mode = 'vi'`` or ``%config
    TerminalInteractiveShell.editing_mode = 'emacs'`` to dynamically switch
    between modes.
  + Notable Fixes:
  * Fix entering of **multi-line blocks in terminal** IPython, and various
    crashes in the new input transformation machinery :ghpull:`11354`,
    :ghpull:`11356`, :ghpull:`11358`. These also fix a **Compatibility bug
    with Python 3.7.1**.
  * Fix moving through generator stack in ipdb :ghpull:`11266`
  * %Magic command arguments now support quoting. :ghpull:`11330`
  * Re-add ``rprint`` and ``rprinte`` aliases. :ghpull:`11331`
  * Remove implicit dependency on ``ipython_genutils`` :ghpull:`11317`
  * Make ``nonlocal`` raise ``SyntaxError`` instead of silently failing in async
    mode. :ghpull:`11382`
  * Fix mishandling of magics and ``= !`` assignment just after a dedent in
    nested code blocks :ghpull:`11418`
  * Fix instructions for custom shortcuts :ghpull:`11426`
  + Notable Internals improvements:
  * Use of ``os.scandir`` (Python 3 only) to speed up some file system operations.
    :ghpull:`11365`
  * use ``perf_counter`` instead of ``clock`` for more precise
    timing results with ``%time`` :ghpull:`11376`
- Remove upstream-included fix_test_history.patch</changelog>
  <changelog author="Arun Persaud &lt;arun@gmx.de&gt;" date="1551441600">- specfile:
  * update copyright year
- update to version 7.3.0:
  * The biggest change to this release is the implementation of the
    "%conda" and "%pip" magics, that will attempt to install packages
    in the **current environment**. You may still need to restart your
    interpreter or kernel for the change to be taken into account, but
    it should simplify installation of packages into remote
    environment. Installing using pip/conda from the command line is
    still the prefer method.
  * The "%pip" magic was already present, but was only printing a
    warning; now it will actually forward commands to pip.
  * Misc bug fixes and improvements:
    + Compatibility with Python 3.8.
    + Do not expand shell variable in execution magics, and added the
    "no_var_expand" decorator for magic requiring a similar
    functionality :ghpull:`11516`
    + Add "%pip" and "%conda" magic :ghpull:`11524`
    + Re-initialize posix aliases after a "%reset" :ghpull:`11528`
    + Allow the IPython command line to run "*.ipynb" files
    :ghpull:`11529`</changelog>
  <changelog author="Arun Persaud &lt;arun@gmx.de&gt;" date="1553428800">- update to version 7.4.0:
  * Previously, we provided completion for a unicode name with its
    relative symbol.With this, now IPython provides complete
    suggestions to unicode name symbols.
  * Make audio normalization optional
  * Miscelanious
    + Fix improper acceptation of "return" outside of
    functions. :ghpull:`11641`.
    + Fixed PyQt 5.11 backwards incompatibility causing sip import
    failure.  :ghpull:`11613`.
    + Fix Bug where "type?" woudl crash IPython. :ghpull:`1608`.
    + Allow to apply "@needs_local_scope" to cell magics for
    convenience.  :ghpull:`11542`.</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1556193600">- Rename package to follow python package guidelines.</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1556193601">- Update to 7.5.0
  * IPython 7.5.0 consist mostly of bug-fixes, and documentation updates,
    with one minor new feature. The Audio display element can now be
    assigned an element id when displayed in browser.
  * The major outstanding bug fix correct a change of behavior that was
    introduce in 7.4.0 where some cell magics would not be able to access
    or modify global scope when using the @needs_local_scope decorator.
    This was typically encountered with the %%time and %%timeit magics.</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1562155200">- Update to 7.6.0
  IPython 7.6.0 contains a couple of bug fixes and number of small features
  additions as well as some compatibility with the current development version of
  Python 3.8.
  * Add a ``-l`` option to :magic:`psearch` to list the available search
    types.
  * Support ``PathLike`` for ``DisplayObject`` and ``Image``.
  * Configurability of timeout in the test suite for slow platforms.
  * Accept any casing for matplotlib backend.
  * Properly skip test that requires numpy to be installed
  * More support for Python 3.8 and positional only arguments (pep570)
  * Unicode names for the completion are loaded lazily on first use which
    should decrease startup time.
  * Autoreload now update the types of reloaded objects; this for example allow
    pickling of reloaded objects.
  * Fix a big where ``%%time`` magic would suppress cell output.</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1564228800">- Update to 7.7.0
  * Fix a bug introduced in 7.6 where the ``%matplotlib`` magic would fail on
    previously acceptable arguments
  * Fix the manage location on freebsd
  * Fix error message about aliases after ``%reset`` call in ipykernel
  * Fix Duplication completions in emacs</changelog>
  <changelog author="Arun Persaud &lt;arun@gmx.de&gt;" date="1568462400">- update to version 7.8.0:
  * Enable changing the font color for LaTeX rendering
  * and Re-Expose some PDB API</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1573560000">- update to version 7.9.0:
  * Update trio and curio dependencies eagerly.
  * restore terminal title on exit (xterm)
  * Easier empty, updatable display
  * %env: hide likely secrets by default
  * Prevent caching outputs in _, __, ___ when cache_size isn't positive
  * switching update_instance() to gc.get_referrers()
  * Fix for Python 4
  * Autoreload slow</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1579089600">- Update to 7.11.1
  * A couple of deprecated functions (no-op) have been reintroduces in py3compat as
  Cython was still relying on them, and will be removed in a couple of versions.
- Update to 7.11.0
  * A number of function in the ``py3compat`` have been removed; a number of types
    in the IPython code base are now non-ambiguous and now always ``unicode``
    instead of ``Union[Unicode,bytes]``; many of the relevant code path have thus
    been simplified/cleaned and types annotation added.
  * IPython support several verbosity level from exceptions. ``xmode plain`` now
    support chained exceptions.
  * We are starting to remove ``shell=True`` in some usages of subprocess. While not directly
    a security issue (as IPython is made to run arbitrary code anyway) it is not good
    practice and we'd like to show the example.
  * Work around some bugs in Python 3.9 tokenizer
  * IPython will now print its version after a crash.
- Update to 7.10.2
  * IPython 7.10.2 fix a couple of extra incompatibility between IPython, ipdb,
    asyncio and Prompt Toolkit 3.
- Update to IPython 7.10.1
  * IPython 7.10.1 fix a couple of incompatibilities with Prompt toolkit 3 (please
    update Prompt toolkit to 3.0.2 at least), and fixes some interaction with
    headless IPython.
- Update to IPython 7.10.0
  * Stop Support for Python 3.5 ? Adopt NEP 29
  * Support for Prompt Toolkit 3.0
  * Prompt Rendering Performance improvements
  * Code autoformatting
  * Arbitrary Mimetypes Handing in Terminal (Aka inline images in terminal)
  * Completions can define their own ordering
  * Enable Plotting in the same cell than the one that import matplotlib
  * Allow to store and restore multiple variables at once</changelog>
  <changelog author="Arun Persaud &lt;arun@gmx.de&gt;" date="1581163200">- update to version 7.12.0:
  * Exit non-zero when ipython is given a file path to run that
    doesn't exist :ghpull:`12074`
  * Test PR on ARM64 with Travis-CI :ghpull:`12073`
  * Update CI to work with latest Pytest :ghpull:`12086`
  * Add infrastructure to run ipykernel eventloop via trio
    :ghpull:`12097`
  * Support git blame ignore revs :ghpull:`12091`
  * Start multi-line __repr__ s on their own line :ghpull:`12099`</changelog>
  <changelog author="Arun Persaud &lt;arun@gmx.de&gt;" date="1583064000">- update to version 7.13.0:
  * Fix inability to run PDB when inside an event loop :ghpull:`12141`
  * Fix ability to interrupt some processes on windows :ghpull:`12137`
  * Fix debugger shortcuts :ghpull:`12132`
  * improve tab completion when inside a string by removing irrelevant
    elements :ghpull:`12128`
  * Fix display of filename tab completion when the path is long
    :ghpull:`12122`
  * Many removal of Python 2 specific code path :ghpull:`12110`
  * displaying wav files do not require NumPy anymore, and is 5x to
    30x faster :ghpull:`12113`</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1583236800">- Run tests using multibuild instead of running them in a separate
  subpackage.  This greatly simplifies the spec file and makes
  updating the package much easier.
- Drop doc subpackage due to rapid changes in readthedocs download
  urls.  This was only around to let the tests be run in a
  separate subpackage to avoid dependency loops.</changelog>
  <changelog author="Benjamin Greiner &lt;code@bnavigator.de&gt;" date="1584619200">- update dep version of python-prompt_toolkit</changelog>
  <changelog author="Benjamin Greiner &lt;code@bnavigator.de&gt;" date="1588420800">- Update to version 7.14.0
  IPython  7.14 is a minor release that fix a couple of bugs and prepare
  compatibility with new or future versions of some libraries.
  * Fix compatibility with Sphinx 3+
    gh#ipython/ipython#12235
  * Remove deprecated matplotlib parameter usage, compatibility with
    matplotlib3.3+
    gh#ipython/ipython#12250
  * set ``.py`` extension when editing current buffer in vi/emacs.
    gh#ipython/ipython#12167
  * support for unicode identifiers in ``?``/``??``
    gh#ipython/ipython#12208
  * add extra options to the ``Video`` Rich objects
    gh#ipython/ipython#12212
  * add pretty-printing to ``SimpleNamespace``
    gh#ipython/ipython#12230
- add opensuse-disable-net-test.patch to disable network access
  during new test_embed_svg_url</changelog>
  <changelog author="Arun Persaud &lt;arun@gmx.de&gt;" date="1590840000">- specfile:
  * removed opensuse-disable-net-test.patch, wikipedia file is not accessed anymore
- update to version 7.15.0:
  * Misc Noticeable changes:
    + Long completion name have better elision in terminal
    :ghpull:`12284`
    + I've started to test on Python 3.9 :ghpull:`12307` and fix some
    errors.
    + Hi DPI scaling of figures when using qt eventloop
    :ghpull:`12314`
    + Document the ability to have systemwide configuration for
    IPython. :ghpull:`12328`
    + Fix issues with input autoformatting :ghpull:`12336`
    + IPython.core.debugger.Pdb is now interruptible (:ghpull:`12168`,
    in 7.14 but forgotten in release notes)
    + Video HTML attributes (:ghpull:`12212`, in 7.14 but forgotten in
    release notes)
  * Reproducible Build
  * NEP29: Last version to support Python 3.6
  * Highlighted features
    + Increase Tab Completion Menu Height
    + Autoformat Code in the terminal</changelog>
  <changelog author="Arun Persaud &lt;arun@gmx.de&gt;" date="1593345600">- update to version 7.16.1:
  * Noticeable changes:
    + Exceptions are now (re)raised when running notebooks via the
    :magic:`%run`, helping to catch issues in workflows and
    pipelines. :ghpull:`12301`
    + Fix inputhook for qt 5.15.0 :ghpull:`12355`
    + Fix wx inputhook :ghpull:`12375`
    + Add handling for malformed pathext env var (Windows)
    :ghpull:`12367`
    + use $SHELL in system_piped :ghpull:`12360` for uniform behavior
    with ipykernel.
  * Reproducible Build</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1646222400">- Add ipython-jedi018.patch to make ipython compatible with the
  jedi version 0.18 (bsc#1195830).</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1646395200">- Add CVE-2022-21699-unnecessary-privs.patch confining
  executed process to have limited privileges. (CVE-2022-21699
  bsc#1194936).</changelog>
  <changelog author="Steve Kowalik &lt;steven.kowalik@suse.com&gt;" date="1657627200">- Update ipython-jedi018.patch to more completely support
  jedi 0.18 (bsc#1200228)</changelog>
</package>
<package pkgid="862bcbda62fed0406db53b96a9169172ad3562106f179a8494a2c0b63c8e5d05" name="python3-josepy" arch="noarch">
  <version epoch="0" ver="1.10.0" rel="bp154.2.3.4"/>
  <changelog author="ecsos@opensuse.org" date="1517054400">- initial version 1.0.1</changelog>
  <changelog author="jengelh@inai.de" date="1517313600">- Use Documentation/* as RPM group for -doc.</changelog>
  <changelog author="ecsos@opensuse.org" date="1525348800">- update to 1.1.0
  - Deprecated support for Python 2.6 and 3.3.
  - Use the sign and verify methods when they are available in
    cryptography instead of the deprecated methods signer and
    verifier.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1548763200">- Really run tests
- Disable docs building it is distributed by upstream and does not
  work on older openSUSE releases</changelog>
  <changelog author="pgajdos@suse.com" date="1563969600">- version update to 1.2.0
  * Support for Python 2.6 and 3.3 has been removed.
  * Known incompatibilities with Python 3.8 have been resolved.</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Steve Kowalik &lt;steven.kowalik@suse.com&gt;" date="1585656000">- Update to version 1.3.0:
  * Deprecated support for Python 3.4.
  * Officially add support for Python 3.8.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1609934400">- update to 1.5.0:
  * Added support for Python 3.9.
  * Dropped support for Python 3.5.
  * Stopped supporting running tests with ``python setup.py test`` which is
    deprecated in favor of ``python -m pytest``.
  * Deprecated support for Python 3.5.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1615204800">- update to 1.7.0:
  * Dropped support for Python 2.7.
  * Added support for EC keys.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1620561600">- update to 1.8.0:
  * Removed external mock dependency.
  * Removed dependency on six.
  * Deprecated the module josepy.magic_typing.
  * Fix JWS/JWK generation with EC keys when keys or signatures have leading zeros.</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1633435200">- Update to 1.10.0
  * josepy is now compliant with PEP-561: type checkers will fetch
    types from the inline types annotations when josepy is
    installed as a dependency in a Python project.
  * Added a field function to assist in adding type annotations for
    Fields in classes. If the field function is used to define a
    Field in a JSONObjectWithFields based class without a type
    annotation, an error will be raised.
  * josepy's tests can no longer be imported under the name josepy,
    however, they are still included in the package and you can run
    them by installing josepy with "tests" extras and running
    python -m pytest.
- Changes from 1.9.0
  * Removed pytest-cache testing dependency.
  * Fixed a bug that sometimes caused incorrect padding to be used
    when serializing Elliptic Curve keys as JSON Web Keys.</changelog>
</package>
<package pkgid="4b6e3b62716ceacf9d1c33cf97b9d318cf23bf36820599179f9bff2074ea04f9" name="python3-jupyterlab" arch="noarch">
  <version epoch="0" ver="2.2.10" rel="bp154.2.3.1"/>
  <changelog author="toddrme2178@gmail.com" date="1524139200">- Update to version 0.32.0
  * Better handling of a corrupted or invalid state database ([#3619](https://github.com/jupyterlab/jupyterlab/issues/3619), [#3622](https://github.com/jupyterlab/jupyterlab/issues/3622), [#3687](https://github.com/jupyterlab/jupyterlab/issues/3687), [#4114](https://github.com/jupyterlab/jupyterlab/issues/4114)).
  * Fixing file dirty status indicator ([#3652](https://github.com/jupyterlab/jupyterlab/issues/3652)).
  * New option for whether to autosave documents ([#3734](https://github.com/jupyterlab/jupyterlab/issues/3734)).
  * More commands in the notebook context menu ([#3770](https://github.com/jupyterlab/jupyterlab/issues/3770), [#3909](https://github.com/jupyterlab/jupyterlab/issues/3909))
  * Defensively checking for completion metadata from kernels ([#3888](https://github.com/jupyterlab/jupyterlab/issues/3888))
  * New "Shutdown all" button  in the Running panel ([#3764](https://github.com/jupyterlab/jupyterlab/issues/3764))
  * Performance improvements wherein non-focused documents poll the server less ([#3931](https://github.com/jupyterlab/jupyterlab/issues/3931))
  * Changing the keyboard shortcut for singled-document-mode to something less easy to trigger ([#3889](https://github.com/jupyterlab/jupyterlab/issues/3889))
  * Performance improvements for rendering text streams, especially around progress bars ([#4045](https://github.com/jupyterlab/jupyterlab/issues/4045)).
  * Canceling a "Restart Kernel" now functions correctly ([#3703](https://github.com/jupyterlab/jupyterlab/issues/3703)).
  * Defer loading file contents until after the application has been restored ([#4087](https://github.com/jupyterlab/jupyterlab/issues/4087)).
  * Ability to rotate, flip, and invert images in the image viewer ([#4000](https://github.com/jupyterlab/jupyterlab/issues/4000))
  * Major performance improvements for large CSV viewing ([#3997](https://github.com/jupyterlab/jupyterlab/issues/3997)).
  * Always show the context menu in the file browser, even for an empty directory ([#4264](https://github.com/jupyterlab/jupyterlab/issues/4264)).
  * Handle asynchronous comm messages in the services library more correctly (Note: this means `@jupyterlab/services` is now at version 2.0!) ([[#4115](https://github.com/jupyterlab/jupyterlab/issues/4115)](https://github.com/jupyterlab/jupyterlab/pull/4115)).
  * Display the kernel banner in the console when a kernel is restarted to mark the restart ([[#3663](https://github.com/jupyterlab/jupyterlab/issues/3663)](https://github.com/jupyterlab/jupyterlab/pull/3663)).
  * Many tweaks to the UI, as well as better error handling.</changelog>
  <changelog author="jengelh@inai.de" date="1525262400">- Trim filler wording from description.
- Replace bashisms in %install.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1533211200">- Update to 0.33.4
  + Key Features:
  * No longer in beta
  * Workspaces
  * Menu items
  * Keyboard shortcuts
  * Command palette items
  * Settings
  * Larger file uploads
  * Extension management and installation
  * Interface changes
  * Renderers
  * Changes for developers
  * Other fixes</changelog>
  <changelog author="toddrme2178@gmail.com" date="1536321600">- Update to 0.34.7
  * Notebooks, consoles, and text files now have access to completions for local
    tokens.
  * Python 3.5+ is now required to use JupyterLab. Python 2 kernels can still be
    run within JupyterLab.
  * Added the pipe (``|``) character as a CSV delimiter option.
  * Added "Open From Path..."" to top level ``File`` menu.
  * Added "Copy Download Link" to context menu for files.</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1538136000">- Update to 0.34.12
  * add sidebar min-width css variable
  * use encodeURI instead of encodeURIComponent for shareable links
  * expand JupyterLab.IOptions to allow for custom DocumentRegistry
  * Rename package.json to package.json.orig when copying it to build folder
  * fix python versions of build wheels by removing the universal flag
  * Hide quit entry for older notebook versions
  * Notebook 4.3 Shim</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1546603200">- Update to 0.35.4
  + Features
  * A notebook cell can now be readonly, reflecting its ``enabled`` metadata. (`#5401 &lt;https://github.com/jupyterlab/jupyterlab/pull/5401&gt;`__, `#1312 &lt;https://github.com/jupyterlab/jupyterlab/issues/1312&gt;`__)
  * Add "Go To Line" in the Edit menu for text editors. (`#5377 &lt;https://github.com/jupyterlab/jupyterlab/pull/5377&gt;`__)
  * Sidebar panels can now be switched between left and right sidebars. Right-click on a sidebar tab to move it to the other sidebar. (`#5347 &lt;https://github.com/jupyterlab/jupyterlab/pull/5347&gt;`__, `#5054 &lt;https://github.com/jupyterlab/jupyterlab/  issues/5054&gt;`__, `#3707 &lt;https://github.com/jupyterlab/jupyterlab/issues/3707&gt;`__)
  * Make the sidebar a bit narrower, and make the minimum width adjustable from a theme. (`#5245 &lt;https://github.com/jupyterlab/jupyterlab/pull/5245&gt;`__)
  * Populate the File, Export Notebook As... submenu from the server nbconvert capabilities. (`#5217 &lt;https://github.com/jupyterlab/jupyterlab/pull/5217&gt;`__)
  * Server contents managers can now tell JupyterLab to open files as notebooks. For example, several custom contents managers save and open notebooks as Markdown files. (`#5247 &lt;https://github.com/jupyterlab/jupyterlab/pull/5247&gt;`__, `#4924 &lt;https://github.com/jupyterlab/jupyterlab/issues/4924&gt;`__)
  * Add a command-line interface for managing workspaces. (`#5166 &lt;https://github.com/jupyterlab/jupyterlab/pull/5166&gt;`__)
  * Allow safe inline CSS styles in Markdown. (`#5012 &lt;https://github.com/jupyterlab/jupyterlab/pull/5012&gt;`__, `#1812 &lt;https://github.com/jupyterlab/jupyterlab/issues/1812&gt;`__)
  * Add Quit to File menu when appropriate. (`#5226 &lt;https://github.com/jupyterlab/jupyterlab/pull/5226&gt;`__, `#5252 &lt;https://github.com/jupyterlab/jupyterlab/pull/5252&gt;`__, `#5246 &lt;https://github.com/jupyterlab/jupyterlab/issues/5246&gt;`__, `#5280 &lt;https://github.com/jupyterlab/jupyterlab/pull/5280&gt;`__)
  * Rework extension manager user experience. (`#5147 &lt;https://github.com/jupyterlab/jupyterlab/pull/5147&gt;`__, `#5042 &lt;https://github.com/jupyterlab/jupyterlab/issues/5042&gt;`__)
  + Dark theme
  * Show a dark splash screen when using a dark theme. (`#5339 &lt;https://github.com/jupyterlab/jupyterlab/pull/5339&gt;`__, `#5338 &lt;https://github.com/jupyterlab/jupyterlab/issues/5338&gt;`__, `#5403 &lt;https://github.com/jupyterlab/jupyterlab/pull/5403&gt;`__)
  * Fix code completion menu for a dark theme. (`#5364 &lt;https://github.com/jupyterlab/jupyterlab/pull/5364&gt;`__, `#5349 &lt;https://github.com/jupyterlab/jupyterlab/issues/5349&gt;`__)
  * Style CSV viewer for a dark theme. (`#5304 &lt;https://github.com/jupyterlab/jupyterlab/pull/5304&gt;`__, `#3456 &lt;https://github.com/jupyterlab/jupyterlab/issues/3456&gt;`__)
  * Make Matplotlib figures legible in a dark theme. (`#5232 &lt;https://github.com/jupyterlab/jupyterlab/pull/5232&gt;`__)
  * Fix notebook cell dropdown legibility in a dark theme. (`#5168 &lt;https://github.com/jupyterlab/jupyterlab/issues/5168&gt;`__)
  + Bug fixes
  * Various save options in the file menu and toolbar are now disabled when a file is not writable. (`#5376 &lt;https://github.com/jupyterlab/jupyterlab/pull/5376&gt;`__, `#5391 &lt;https://github.com/jupyterlab/jupyterlab/pull/5391&gt;`__)
  * Kernel selector dialog no longer cuts off kernel names. (`#5260 &lt;https://github.com/jupyterlab/jupyterlab/pull/5260&gt;`__, `#5181 &lt;https://github.com/jupyterlab/jupyterlab/issues/5181&gt;`__)
  * Fix focus issues with the toolbar. (`#5344 &lt;https://github.com/jupyterlab/jupyterlab/pull/5344&gt;`__, `#5324 &lt;https://github.com/jupyterlab/jupyterlab/pull/5324&gt;`__, `#2995 &lt;https://github.com/jupyterlab/jupyterlab/issues/2995&gt;`__, `#5328 &lt;https://github.com/jupyterlab/jupyterlab/pull/5328&gt;`__)
  * Fix toolbar button enabled/disabled status. (`#5278 &lt;https://github.com/jupyterlab/jupyterlab/pull/5278&gt;`__)
  * Table alignment is now respected in Markdown. (`#5301 &lt;https://github.com/jupyterlab/jupyterlab/pull/5301&gt;`__, `#3180 &lt;https://github.com/jupyterlab/jupyterlab/issues/3180&gt;`__)
  * Fix syntax highlighting for Markdown lists. (`#5297 &lt;https://github.com/jupyterlab/jupyterlab/pull/5297&gt;`__, `#2741 &lt;https://github.com/jupyterlab/jupyterlab/issues/2741&gt;`__)
  * Use the current filebrowser instead of the default one for various commands. (`#5390 &lt;https://github.com/jupyterlab/jupyterlab/pull/5390&gt;`__)
  * Fix escaping in link handling to conform to Markdown syntax. This means that spaces in link references now need to be encoded as ``%20``. (`#5383 &lt;https://github.com/jupyterlab/jupyterlab/pull/5383&gt;`__, `#5340 &lt;https://github.com/jupyterlab/jupyterlab/pull/5340&gt;`__, `#5153 &lt;https://github.com/jupyterlab/jupyterlab/issues/5153&gt;`__)
  + Build system
  * Use Typescript 3.1. (`#5360 &lt;https://github.com/jupyterlab/jupyterlab/pull/5360&gt;`__)
  * Use Lerna 3.2.1. (`#5262 &lt;https://github.com/jupyterlab/jupyterlab/pull/5262&gt;`__)
  * Node &gt;=6.11.5 is now required. (`#5227 &lt;https://github.com/jupyterlab/jupyterlab/pull/5227&gt;`__)
  * Pin vega-embed version to 3.18.2. (`#5342 &lt;https://github.com/jupyterlab/jupyterlab/pull/5342&gt;`__)
  * Use Jest for services tests. (`#5251 &lt;https://github.com/jupyterlab/jupyterlab/pull/5251&gt;`__, `#5282 &lt;https://github.com/jupyterlab/jupyterlab/pull/5282&gt;`__)
  * Make it easier for third party extensions to use the JupyterLab test app and testing utilities. (`#5415 &lt;https://github.com/jupyterlab/jupyterlab/pull/5415&gt;`__)
  * Fix ``jupyter lab clean`` on Windows. (`#5400 &lt;https://github.com/jupyterlab/jupyterlab/pull/5400&gt;`__, `#5397 &lt;https://github.com/jupyterlab/jupyterlab/issues/5397&gt;`__)
  * Fix ``jupyter lab build`` on NFS. (`#5237 &lt;https://github.com/jupyterlab/jupyterlab/pull/5237&gt;`__, `#5233 &lt;https://github.com/jupyterlab/jupyterlab/issues/5233&gt;`__)
  * Build wheels for Python 3 only. (`#5287 &lt;https://github.com/jupyterlab/jupyterlab/pull/5287&gt;`__)
  * Migrate to using ``jupyterlab_server`` instead of ``jupyterlab_launcher`` and fix the app example. (`#5316 &lt;https://github.com/jupyterlab/jupyterlab/pull/5316&gt;`__)
  * Move Mathjax 2 typesetter to a library package. (`#5259 &lt;https://github.com/jupyterlab/jupyterlab/pull/5259&gt;`__, `#5257 &lt;https://github.com/jupyterlab/jupyterlab/issues/5257&gt;`__)
  + For Developers
  * Default toolbar buttons can be overridden, and mime renderers can now specify toolbar buttons. (`#5398 &lt;https://github.com/jupyterlab/jupyterlab/pull/5398&gt;`__, `#5370 &lt;https://github.com/jupyterlab/jupyterlab/pull/5370&gt;`__, `#5363 &lt;https://github.com/jupyterlab/jupyterlab/issues/5363&gt;`__)
  * A JupyterLab application instance can now be given a document registry, service manager, and command linker. (`#5291 &lt;https://github.com/jupyterlab/jupyterlab/pull/5291&gt;`__)</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1556193600">- Update to 0.35.5
  * use target=_blank for download links
  * Release filebrowser@0.19.4
- Rename to to match jupyter package naming guidelines.
- Add rpm macros</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1557835200">- Update to 0.35.6
  * Publish outputarea 0.19.2
  * Make sure the cached value of `_lastStream` reflects the removed
    characters so we don't have to remove them over and over again.
- Split directories and macros into separate package.</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1566302400">- Update to 1.0.6
  + User Facing Changes
  * We have added first class support for find and replace across JupyterLab. It is currently supported in notebooks and text files and is extensible for other widgets who wish to support it.
  * We have integrated the JupyterLab Status Bar package into the core distribution. Extensions can add their own status to it as well.
  * We now include the JupyterHub extension in core JupyterLab, so you no longer need to install ``@jupyterlab/hub-extension``.
  * JupyterLab now has a File &gt; Logout menu entry when running with JupyterHub
  * now have a printing system that allows extensions to customize how documents and activities are printed.
  * The launcher displays longer kernel names and supports keyboard navigation
  * Notebook outputs without any valid MimeType renderers will not be displayed, instead of displaying an error
  * Add tooltip to file browser root breadcrumb icon showing the server root, if it is available
  * Downloading a file will no longer open a new browser window
  * Rename the help "Inspector" to "Contextual Help" and move it to the "Help" menu
  * Update many of the icons to make them more consistent
  * Update the settings UI to remove the table view
  * Replace FAQ Extension with link to JupyterLab documentation
  * Change the default keyboard shortcut for closing a tab to be ``Alt+w`` instead of ``Cmd/Ctrl+w`` to avoid conflicts with operating systems.
  * Show help text in Inspector window to describe you should select a function
  * Fixes SVG rendering
  * Add support for dropping a tab in the tab bar area.
  * Switch some default shortcuts to use ``Accel`` instead of ``Ctrl`` so they are more natural for Mac users
  * Add ability to tell between hover and selected command palette items
  * Hide the "Last Modified" column when the file browser is narrow
  * Support copy/paste in terminal and Mac OS using ``Ctrl+C`` and ``Ctrl+V``
  * Support scrolling in running kernels panel
  * Adds ability to "Merge Selected Cells" in the context menu in the notebook
  * Turn On Accessibility In Xterm.js to make it more compatible for screen readers
  * When selecting cells using the keyboard shortcuts, we now skip collapsed cells
  * Supporting opening ``.geojson`` files in JSON viewer
  * Performance fixes for text-based progress bars
  * Add support for rendering Vega 5 and Vega Lite 3 while keeping the existing Vega 4 and Vega Lite 2 renderers
  * Drag and drop console cells into a notebook or text editor
  * Drag and drop notebook cells into a console or text editor
  * The extension manager search now sorts extensions by the score assigned to them by NPM instead of alphabetically
  * Notify the user when a kernel is automatically restarted, for example, if crashes from an out of memory error
  * Expose the extension manager in a command and menu item
  * Add command to render all Markdown cells
  * Supports using shift to select text in output area
  * Output areas that opened in new views are restored properly now on reload
  * Add support for managing notebook metadata under a new "Advanced Tools" section in the cell tools area. The cell and notebook metadata now always reflect the current state of the notebook
  * Inherit terminal theme from core theme
  * Adds a built-in HTML viewer so that you can view HTML files
  * New workspaces are now automatically generated when you create a new window with the same workspace name.
  * We now add a hint to the context menu to describe how you can access the native browser menu
  * The tabs on the left panel have changed to make them more understandable
  * Start a new terminal when the page is refreshed and the old terminal has died
  * Add a command to open the main menus, which can be assigned to a keyboard shortcut to open and navigate menus without a mouse
  * The contextual help now updates based on changes in the cursor from the mouse instead of just from the keyboard
  * The launcher now updates when the kernels change on the server
  * Retain cell auto scroll behavior even when a cell output is cleared
  * If you link to a relative path that is not a file in a markdown cell, this will now be preserved instead of changing it to a file URL
  * Adds the ability to link to a certain row in a CSV file and have the viewer open to that row
  * We have improved the performance of switching to a large notebook
  * The vdom extension now supports event handling, so that you can have kernel code run in response to user interaction with the UI
  * Adds the ability to run "Run All Code" and "Restart Kernel and Run All Code" in code and markdown files
  * We now remember what line ending a text file has when loading it, so that files with ``CRLF`` line endings will properly be saved with the same endings
  * Fixes rendering of SVG elements in HTML MimeType output
  * Allow copying files by holding down ``Ctrl`` when dragging them in the file browser
  * Switch the hover modified time in the file browser to use the local format
  * We have added a default keyboard shortcut of ``Ctrl Shift Q`` for closing and cleaning up a file
  * Adds the ability to find and go to a certain line in the CSV viewer
  * Add the ability to create new text and markdown files from the launcher and command palette
  * A "New Folder" option has been added to the file browser context menu
  * The ANSI colors are now the same as those in the classic notebook
  * Send complete statements instead of current lines when stepping through code in a cell
  * Description list styles (``dl``, ``dt``, ``dd``) are improved to be consistent with the nteract project
  + Settings
  * The settings system has been rewritten and now uses json5 as the syntax, which supports comments and other features for better human readability.
  * The keyboard shortcut system has been rewritten and now displays a list of system commands in the settings comments.
  * There are new settings for many following items, including:
    &gt; Adds an option to shut down terminals and notebook kernels when they are closed
    &gt; Scrolling past the end of a notebooks and text editor document
    &gt; Text editor code folding, rulers, and active line highlighting
    &gt; Markdown viewer options
    &gt; Terminal scrollback and other settings
    &gt; The autosave interval
    &gt; The file browser showing the current active file
    &gt; Custom scrollbar styling for dark themes
  + Command Line Changes
  * Installing extensions will be quieter and adds a ``--debug`` to extension installing
  * We now support running JupyterLab when its application directory is a symlink
  * Add ``--all`` flag to ``labextension uninstall`` to remove all extensions
  * Adds the ability to override the base URLs from the config
  * Updates to workspaces CLI command
  + Extension Development Changes
  * We have rewritten how extensions provide keyboard shortcuts and interact with the settings system. If you previously defined keyboard shortcuts or used the settings mechanism, you will need to update your extension
  * We have renamed the plugin type from ``JupyterLabPlugin`` to ``JupyterFrontEndPlugin``. The application arg is also renamed from ``JupyterLab`` to  ``JupyterFrontEnd`` and some its functionality has been moved to a separate ``ILabShell`` plugin
  * The lab shell ``addToMainArea``, ``addToLeftArea``, ``addToTopArea``, ``addToRightArea``, and ``addToBottomArea`` functions have been replaced with a single ``add()`` function that takes the area as an argument. Replace ``addToMainArea(widget, options)`` with ``add(widget, 'main', options)``, etc.
  * Rename ``pageUrl`` to ``appUrl`` in the server connection
  * ``MainAreaWidget`` instances now forward update requests to their ``content``
  * The theme data attributes are renamed and moved to the document body element. If you are relying on these attributes in CSS to conditionally style based on the theme, you should update their names. For example ``data-theme-light`` is now ``data-jp-theme-light``.
  * Extensions which require CSS should no longer import their CSS files into their Javascript files. Instead, they should specify a root CSS file in the ``style`` attribute in their ``package.json``, and JupyterLab will automatically import that CSS file.
  * ``Dialog.prompt`` has been replaced by a number of type-specific dialogs such as ``InputDialog.getString``, ``InputDialog.getBoolean``, etc.
  * When a ``RenderMime`` widget is re-rendered, the default behavior is to remove any existing content in the DOM. This can be overridden if needed.
  * We have updated our internal TypeScript version to 3.5.1 and our compile target to ``ES2017``. Extensions may need to upgrade their TypeScript version and target as well.
  * We have updated the typings for some of the Kernel messages so that they better match the spec.
  * A ``connectionFailure`` signal has been added to some of the manager classes, which can be used to detect when a connection to the server is lost
  * Add rate limiting and polling utilities to ``coreutils``  to use for throttling and debouncing of API requests
  * Require session when instantiating terminal widget
  * Provides a signal to see what items are opened in a directory listing
  * Ads the ability to add widget above the main work area to a top header area
  * Renames ``contextMenuFirst`` to  ``contextMenuHitTest`` in the ``JupyterFrontEnd``
  * Removes the ``initialCommand`` arg from the terminal creation command.
  * Adds ``--jp-code-cursor-width0``, ``--jp-code-cursor-width1``, and ``--jp-code-cursor-width2`` variables to the themes to support changing the cursor width if you change the font size
  * Adds the ability to insert a new item to the toolbar before or after another item
  * Adds the ability for extensions to register new CodeMirror modes
  * We have removed the ``JUPYTERLAB_xxx_LOADER`` Webpack loaders, instead you should use the loader directly in the URL as Webpack supports it
  * Adds the ability to handle fragments for document widgets
  * We have added a  ``@jupyterlab/ui-components`` package that contains reusable React components to be used internally and in extensions. Feel free to use this to create extension UIs with consistent styles
  * The ``showErrorMessage`` function now lets you customize the buttons it uses
  * We now provide helpers for using React components within JupyterLab. If you were previously using ``ReactElementWidget`` you should switch to using ``ReactWidget``.
  * The share link command has been moved to its own extension so that it can be overridden
  * Creating a new services session now requires passing a kernel model instead of a kernel instance
  * We upgraded the Webpack raw file loader. The new version of the raw loader exports ES2015 modules, so this may require changes in extensions that import files using the raw loader. For example, if you did ``require('myfile.md')`` to get the content of `myfile.md` as a string, you now should import it using ES2015 `import` syntax, or use `require('myfile.md').default`.
  * Widget factories now can support custom cloning behavior from an optional source widget
  * We have renamed the type ``InstanceTracker`` to ``WidgetTracker``.
  * In order to add widgets to the main area (e.g. as in the old XKCD extension tutorial), the correct syntax is now ``app.shell.add(widget)`` or ``app.shell.add(widget, 'main')``,</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1566561600">- Update to 1.0.9
  * integrity
  * update packages
  * fix package name
  * enforce jinja2 requirement
- jupyterlab-discovery has been merged into jupyterlab</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1566820800">- Use better way to handle tornado version compatibility.</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1573560000">- Update to version 1.2.2
  + User-facing changes
  * Select cells from the current cell to the top of the notebook with ``Shift Home``, to the bottom of the notebook with ``Shift End``
  * Add a log console extension to display unhandled messages and other activity
  * Allow the npm ``max-old-space`` option to be specified outside of JupyterLab
  * Only display node structure in a JSON tree view for arrays and empty objects
  * Make much smaller distribution packages by not building JavaScript source maps for releases.
  * Add support for pasting cell attachments and dragging attachments from the file browser
  * Add a new ``registry`` configuration parameter to override the default yarn repository when building
  + For developers
  * Update the Markdown renderer (``marked``) to 0.7.0
  * Remove datagrid as a singleton, allowing extensions to use newer versions
  * Add metadata to the kernelspec information
  * Allow different mimetypes for the clipboard data
  * Add inline svg icon support to toolbar buttons
  * Add PageConfig functions to query if a plugin is deferred or disabled
  * Allow for renderers for nbformat.ierror to be created
  * Refactor ``fileeditor-extension`` for modularization
  * Add execution timing to cells
  + Bugfixes
  * Fix the ``file-browser-path`` query parameter
  * Skip custom click behavior on links when the download attribute is set
  * Fix opening multiple browser tabs in Safari
  * Fix context menus on SVG icons
  * Fix overwriting of target attribute of anchors rendered by ``IPython.display``
  * Fix multi-cursor backspacing
  * Fix mult-cursor cell splitting</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1575892800">- Update to version 1.2.3
  * Update status bar index.css to be hand-curated
  * fix dropdown option style issue in Windows
  * Update the ui-components css to reflect the correct dependencies.
- Rename spec file to python-jupyterlab to work better
  with OSC python tooling.</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1575979200">- Use pyproject_install macro (boo#1094323)</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1579089600">- Update to 1.2.4
  * update yarn.lock
  * update terser dep</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1580212800">- Update to 1.2.6
  * Update dependencies</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1583236800">- Update to 2.0.0
  + User-facing changes
  * New user interface for notebook cell tags
  * File info display when hovering on a file in the file browser
  * Support for searching outputs in notebooks
  * ``Ctrl Shift .`` and ``Ctrl Shift ,`` shortcuts move focus to the next and previous tab bar in the main area, respectively
  * ``Shift Home`` and ``Shift End`` shortcuts in a notebook select all cells from the current cell to the top or bottom of a notebook, respectively
  * Explicit "No Kernel" button in the kernel selection dialog for new notebooks
  * Notebook ``recordTiming`` advanced setting to control whether execution timing information is stored in notebook files
  * "Select current running or last run cell" command added (requires notebook ``recordTiming`` advanced setting to be set to true)
  * Codemirror ``lineWiseCopyCut`` advanced setting to control the behavior of the copy/cut keyboard shortcuts when there is no selection
  * Refreshed the command palette and property inspector sidebar icons and user interfaces
  * "New File" and "New Markdown File" items in file browser context menu
  * "Download" item in File menu
  * "Restart Kernel and Run up to Selected Cell" item in notebook Kernel menu
  * In extension manager, the "enable" button is now only shown for installed extensions
  * Dialogs can now be closed by clicking outside of them
  * ``documentsearch:startWithReplace`` command to open the document find overlay with replace. There is not currently a default keyboard shortcut for this, but one can be assigned as a custom keyboard shortcut in Advanced Settings.
  * ``#`` added to the CSV Viewer delimiter options
  * The JSON viewer now only displays structure hints for arrays and empty objects for a more streamlined feel
  * Optional platform-aware keyboard shortcut fields ``linuxKeys``, ``macKeys``, and ``winKeys`` in keyboard shortcut definitions
  * Added options for ``jupyter lab clean`` to clean specific parts of the build, such as ``--extensions``, ``--settings``, ``--static``, and ``--all``
  * Removed the vega 4 and vega-lite 2 renderers (vega 5 and vega-lite 4 is included in JupyterLab by default). These legacy renderers may be available via custom extensions
  * JupyterHub users should use the ``c.Spawner.default_url = '/lab'`` setting instead of the deprecated and now removed ``labhubapp``
  + Backward incompatible changes
  * Switch from ``@phosphor`` to ``@lumino`` dependencies.
  * Factor out the ``settingsregistry`` and ``statedb`` packages from coreutils
  * Rework services architecture (sessions, kernels, terminals) and rename ``ClientSession`` to ``SessionContext``
  * Upgrade to TypeScript 3.7
  * Remove ``polling`` from coreutils in favor for ``@lumino/polling``
  * TypeScript strict null checking in core packages
  * Update state database list method to query based on namespace match.
  * Address code todo items and deprecations for 2.0
  * Update Console panel tracker widgets
  * Update contribution guide to require node v12+
  * New API for the ``Running`` sidebar extension
  * Clean up handling of icons under unified LabIcon
  + Other changes
  * New property inspector used to display the properties of the currently selected main area widget
  * Allow metadata for launcher items
  * Allow default file browser to restore manually.
  * Upgrade bundled yarn to 1.21.1
  * Make session dialogs configurable
  * Support transient editor configs
  * Optionally force new browser tab
  * Update core dependencies (e.g., ``codemirror``, ``xterm.js``, ``markdown``, ``fontawesome``, etc.)
  * Add storybook to ``ui-components``
  * Add explicit documentation encouraging people to re-use lab components
  * Enable TypeScript sourcemaps for debugging locally installed labextensions
  * Add ``UseSignal`` example to the docs
  * Add ``env`` prop to kernel options
  * Add kernelspec metadata
  * Allow different mimetypes for the clipboard data
  * Add password dialog to apputils
  * Alias phosphor packages to lumino to allow a deprecation period for phosphor
  * Match react version in ui-components peerdependencies
  * Fix lint-staged for both win and mac
  * Update websocket workaround for node environments
  * Fix handling of linked extensions
  * Fix extension compatibility checks for prereleases and extensions supporting multiple major versions of JupyterLab
  * Teach update-dependency about more range specifiers and make it adopt the current range for any tag
  * Add support for giving a rank to items in the top area
  * Apply all options to the initial JupyterLab application instance
  + Bugfixes
  * "Copy Shareable Link" in the file browser context menu now properly works in JupyterHub
  * Update Mathjax CDN in the cell and console examples
  * Revert ensure-max-old-space now that Node 12+ has better default memory ceilings
  * Resolve race condition between default file browser and tree urls.
  * Fix handling of code editor refresh
  * Start new notebooks in edit mode
  * Use consistent versions of React
  * Add scrollbar styles to nbconvert-css
  * Close output views when corresponding notebooks are closed
  * Fixed incorrect white background for new command palette icon
  * Block fetching the settings for a plugin that is disabled
  * When timing metadata changes, ensure signal fires
  * Prevent memory leaks in Vega renderer
  * Handle cell execution cancellation when cell is disposed
  * Fix dropdown option style issue on Windows
  * Make sure label is linked to a control when checking for element type
  * Refine log console message UX
  * Fix multicursor backspacing
  * Reset log display and count when non-notebook tab gets activated
  * Fix Safari multiple tabs by working around a Safari bug.
  * Skip custom click behavior on links when the download attribute is set
  * Fix context menu hit test to deal with SVG nodes.
  * Fix overwriting of target attribute of anchors rendered by ``IPython.display``
  * Fix file browser location in tree view
  * Stop too many fetch calls in docmanager-extension
  * Ensures that ``Shift Tab`` dedent shortcut works correctly in the file editor
  * Fix unexpected jump to last search result when using documentsearch
  * Fixed refresh issue for html viewer
  * Fix for center-aligned images with IPython.display.image
  * Changes to setting editor should trigger application dirty state
  * Move vega from "devdependencies" to "dependencies"
  * Restore default file browser manually.
  * Use default ``app_dir`` when ``app_dir`` is ``''``</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1583496000">- Requires nodejs/npm &gt;= 10</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1585742400">- We should work with tornado 4, 5 and 6.
- The bugs were found in tornado 6.0.1 and 6.0.2 were fixed
  by upstream developers</changelog>
  <changelog author="Steve Kowalik &lt;steven.kowalik@suse.com&gt;" date="1659009600">- Update to 2.2.10:
  * Remove `form` tags' `action` attribute during sanitizing, to prevent an
    XSS (CVE-2021-32797) (bsc#1196663)
  * Header ?Content-Type? should not be overwritten
  * Do not use token parameters in websocket urls
  * Properly handle errors in async browser_check
  * Cells can no longer be executed while kernels are terminating or
    restarting. There is a new status for these events on the Kernel Indicator
  * Add styling for high memory usage warning in status bar with nbresuse
  * Adds support for Python version 3.10
  * Support live editing of SVG with updating rendering
  * Lazy load codemirror theme stylesheets
  * Add feature request template + slight reorg in readme
  * Add link to react example in extension-examples repo
  * Close correct tab with close tab
  * Remove unused css rules
  * Simplified multicursor backspace code
  * Fix recent breaking changes to normalizepath in filebrowser
  * Handle quit_button when launched as an extension
  * Add worker-loader
  * Fix icon sidebar height for third party extensions
  * Scrolls cells into view after deletion
  * Support Node.js 10+
  * Select search text when focusing the search overlay
  * Throttle fetch requests in the setting registry?s data connector
  * Avoid redundant checkpoint calls on loading a notebook</changelog>
</package>
<package pkgid="48b5436d58d56509ab21b7329999e5a04eff9bf5132b2687879a3192a6669fd7" name="python3-libdnf" arch="aarch64">
  <version epoch="0" ver="0.65.0" rel="bp154.2.1"/>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1594123200">- Update to version 0.48.0
  + Add prereq_ignoreinst &amp; regular_requires properties for pkg (rh#1543449)
  + Reset active modules when no module enabled or default (rh#1767351)
  + Add comment option to transaction (rh#1773679)
  + Failing to get module defauls is a recoverable error
  + Baseurl is not exclusive with mirrorlist/metalink (rh#1775184)
  + Add new function to reset all modules in C API (dnf_context_reset_all_modules)
  + [context] Fix to preserve additionalMetadata content (rh#1808677)
  + Fix filtering of DepSolvables with source rpms (rh#1812596)
  + Add setter for running kernel protection setting
  + Handle situation when an unprivileged user cannot create history database (rh#1634385)
  + Add query filter: latest by priority
  + Add DNF_NO_PROTECTED flag to allow empty list of protected packages
  + Remove 'dim' option from terminal colors to make them more readable (rh#1807774, rh#1814563)
  + [context] Error when main config file can't be opened (rh#1794864)
  + [context] Add function function dnf_context_is_set_config_file_path
  + swdb: Catch only SQLite3 exceptions and simplify the messages
  + MergedTransaction list multiple comments (rh#1773679)
  + Modify CMake to pull *.po files from weblate
  + Optimize DependencyContainer creation from an existing queue
  + fix a memory leak in dnf_package_get_requires()
  + Fix memory leaks on g_build_filename()
  + Fix memory leak in dnf_context_setup()
  + Add `hy_goal_favor` and `hy_goal_disfavor`
  + Define a cleanup function for `DnfPackageSet`
  + dnf-repo: fix dnf_repo_get_public_keys double-free
  + Do not cache RPMDB
  + Use single-quotes around string literals used in SQL statements
  + SQLite3: Do not close the database if it wasn't opened (rh#1761976)
  + Don't create a new history DB connection for in-memory DB
  + transaction/Swdb: Use a single logger variable in constructor
  + utils: Add a safe version of pathExists()
  + swdb: Handle the case when pathExists() fails on e.g. permission
  + Repo: prepend "file://" if a local path is used as baseurl
  + Move urlEncode() to utils
  + utils: Add 'exclude' argument to urlEncode()
  + Encode package URL for downloading through librepo (rh#1817130)
  + Replace std::runtime_error with libdnf::RepoError
  + Fixes and error handling improvements of the File class
  + [context] Use ConfigRepo for gpgkey and baseurl (rh#1807864)
  + [context] support "priority" option in .repo config file (rh#1797265)
- Drop obsolete patch: libdnf-0.45.0-handle-all-rpmdb-variants.patch
- Refresh patch for static linking libsolvext
  + Remove patch: libdnf-0.39.1-with-static-libsolvext.patch
  + Add patch: libdnf-0.48.0-with-static-libsolvext.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1598011200">- Backport fix from upstream to fix building against check &gt;= 0.15
  + Patch: 0001-tests-Fix-incorrect-usage-of-the-fail_unless-macro.patch
- Clean up spec comments about patches</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1603540800">- Update to version 0.54.2
  + history: Fix dnf history rollback when a package was removed (rh#1683134)
  + Add support for HY_GT, HY_LT in query nevra_strict
  + Fix parsing empty lines in config files
  + Accept '==' as an operator in reldeps (rh#1847946)
  + Add log file level main config option (rh#1802074)
  + Add protect_running_kernel configuration option (rh#1698145)
  + Context part of libdnf cannot assume zchunk is on (rh#1851841, rh#1779104)
  + Fix memory leak of resultingModuleIndex and handle g_object refs
  + Redirect librepo logs to libdnf logs with different source
  + Add hy_goal_lock
  + Enum/String conversions for Transaction Store/Replay
  + utils: Add a method to decode URLs
  + Unify hawkey.log line format with the rest of the logs
- Drop patches included in this release
  + Patch: 0001-tests-Fix-incorrect-usage-of-the-fail_unless-macro.patch
- Refresh patch for reposdir paths
  + Remove patch: libdnf-0.39.1-Switch-default-reposdir-to-etc-dnf-repos.d.patch
  + Add patch: libdnf-0.54.2-Switch-default-reposdir-to-etc-dnf-repos.d.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1606651200">- Update to version 0.55.0
  + Add vendor to dnf API (rh#1876561)
  + Add formatting function for solver error
  + Add error types in ModulePackageContainer
  + Implement module enable for context part
  + Improve string formatting for translation
  + Remove redundant printf and change logging info to notice (rh#1827424)
  + Add allow_vendor_change option (rh#1788371) (rh#1788371)
- Backport patches from upstream
  + Patch: 0001-Support-allow_vendor_change-setting-in-dnf-context-A.patch
  + Patch: 0001-context-dnf_keyring_add_public_keys-not-generate-err.patch
- Add patch to turn off changing vendors by default
  + Patch: libdnf-0.55.0-Switch-allow_vendor_change-off.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1607256000">- Update to version 0.55.2
  + Improve performance of query installed() and available()
  + Swdb: Add a method to get the current transaction
  + [modules] Add special handling for src artifacts (rh#1809314)
  + Better msgs if "basecachedir" or "proxy_password" isn't set (rh#1888946)
  + Add new options module_stream_switch
  + Support allow_vendor_change setting in dnf context API
- Drop patches incorporated into this release
  + Patch: 0001-Support-allow_vendor_change-setting-in-dnf-context-A.patch
  + Patch: 0001-context-dnf_keyring_add_public_keys-not-generate-err.patch
- Use cmake_build and cmake_install macros</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1609761600">- Add patch to support armv6hl and RISC-V architectures
  + Patch: 0001-context-Sync-missing-arches-from-DNF.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1612267200">- Update to version 0.58.0
  + Option: Add reset() method
  + Add OptionBinds::getOption() method
  + [context] Add dnf_repo_conf_from_gkeyfile() and dnf_repo_conf_reset()
  + [context] Add support for options: minrate, throttle, bandwidth, timeout
  + [context] Remove g_key_file_get_string() from dnf_repo_set_keyfile_data()
  + Allow loading ext metadata even if only cache (solv) is present
  + Add ASAN_OPTIONS for test_libdnf_main
  + [context,API] Functions for accessing main/global configuration options
  + [context,API] Function for adding setopt
  + Add getter for modular obsoletes from ModuleMetadata
  + Add ModulePackage.getStaticContext() and getRequires()
  + Add compatible layer for MdDocuments v2
  + Fix modular queries with the new solver
  + Improve formatting of error string for modules
  + Change mechanism of module conflicts
  + Fix load/update FailSafe
- Drop patch included in this release
  + Patch: 0001-context-Sync-missing-arches-from-DNF.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1613131200">- Backport fixes to add controls for installonlypkgs and protected_packages
  + Patch: 0001-context-Support-config-file-option-installonlypkgs.patch
  + Patch: 0002-context-Support-config-file-option-protected_package.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1613217600">- Add patch to move directory for dnf state data to /usr/lib/sysimage
  + Patch: libdnf-0.58.0-Use-usr-lib-sysimage-for-the-persistent-state-dir.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1613217601">- Backport another fix for adding controls to installonlypkgs
  + Patch: 0001-context-Fix-dnf_package_is_installonly-RhBug-1928056.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1614081600">- Backport support for using certificates for repository authorization
  + Patch: 0001-Fix-librepo-version-required-in-CMakeList.txt-1.12.0.patch
  + Patch: 0002-Fix-Fully-set-ssl-in-newHandle-function.patch
  + Patch: 0003-conf-Add-options-for-working-with-certificates-used-.patch
  + Patch: 0004-Apply-proxy-certificate-options.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1614254400">- Add repo-config-zypp subpackage to allow easily using Zypper
  repository configuration</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1614340800">- Backport more fixes for using certs for repo authorization
  + Patch: 0001-Deduplicate-code-create-Repo-Impl-stringToProxyAuthM.patch
  + Patch: 0002-context-Support-config-file-option-proxy_auth_method.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1614686400">- Update to 0.60.0
  + Fix repo.fresh() implementation
  + Fix: Fully set ssl in newHandle function
  + [conf] Add options for working with certificates used with proxy
  + Apply proxy certificate options
  + lock: Switch return-if-fail to assert to quiet gcc -fanalyzer
  + build-sys: Clean up message about Python bindings
  + Modify module NSVCA parsing - context definition (rh#1926771)
  + [context] Fix: dnf_package_is_installonly (rh#1928056)
  + Fix problematic language
  + Add getApplicablePackages to advisory and isApplicable to advisorymodule
  + Keep isAdvisoryApplicable to preserve API
  + Run ModulePackageContainerTest tests in tmpdir, merge interdependent
  + [context] Support config file option "proxy_auth_method", defaults "any"
  + Properly handle multiple collections in updateinfo.xml (rh#1804234)
  + Support main config file option "installonlypkgs"
  + Support main config file option "protected_packages"
- Drop patches now part of this release
  + Patch: 0001-context-Support-config-file-option-installonlypkgs.patch
  + Patch: 0002-context-Support-config-file-option-protected_package.patch
  + Patch: 0001-context-Fix-dnf_package_is_installonly-RhBug-1928056.patch
  + Patch: 0001-Fix-librepo-version-required-in-CMakeList.txt-1.12.0.patch
  + Patch: 0002-Fix-Fully-set-ssl-in-newHandle-function.patch
  + Patch: 0003-conf-Add-options-for-working-with-certificates-used-.patch
  + Patch: 0004-Apply-proxy-certificate-options.patch
  + Patch: 0001-Deduplicate-code-create-Repo-Impl-stringToProxyAuthM.patch
  + Patch: 0002-context-Support-config-file-option-proxy_auth_method.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1614686401">- Fix dependency for repo-config-zypp subpackage to work with SLE</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1618315200">- Update to 0.62.0
  + Change order of TransactionItemReason (rh#1921063)
  + Add two new comperators for security filters (rh#1918475)
  + Apply security filters for candidates with lower priority
  + Fix: Goal - translation of messages in global maps
  + Enhance description of modular solvables
  + Improve performance for module query
  + Change mechanism of modular errata applicability (rh#1804234)
  + dnf_transaction_commit(): Remove second call to rpmtsSetVSFlags
  + Fix a couple of memory leaks
  + Fix: Setting of librepo handle in newHandle function
  + Remove failsafe data when module is not enabled (rh#1847035)
  + Expose librepo's checksum functions via SWIG
  + Fix: Mising check of "hy_split_nevra()" return code
  + Do not allow 1 as installonly_limit value (rh#1926261)
  + Fix check whether the subkey can be used for signing
  + Hardening: add signature check with rpmcliVerifySignatures
    (CVE-2021-3445, CVE-2021-3421, CVE-2021-20271, rh#1932079, rh#1932089, rh#1932090, boo#1183779)
  + Add a config option sslverifystatus, defaults to false (rh#1814383)
  + [context] Add API for distro-sync</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1618488000">- Add patch to fix crash when loading DVD repositories
  + Patch: 0001-Fix-a-crash-when-repoId-not-found-in-loaded-conf-gke.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1630065600">- Update to 0.63.1
  + ModuleProfile: add isDefault()
  + ModulePackage: add getDefaultProfile()
  + Add new dnf_context_module_install() C API
  + Fix a crash when [media] section in .treeinfo is missing for bootable media (rh#1946024)
  + Add hy_query_get_advisory_pkgs to C API (rh#1960561)
  + Add dnf_advisorypkg_get_advisory()
  + DNF does not fail on non UTF-8 file names in a package (rh#1893176)
  + Improve error-reporting for modular functions
- Drop patch included in this release
  + Patch: 0001-Fix-a-crash-when-repoId-not-found-in-loaded-conf-gke.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1635940800">- Update to 0.65.0
  + Add support for excluding packages to be installed as weak dependencies
  + Add support for autodetecting packages to be excluded from being installed as weak dependencies
  + Turn off strict validation of modulemd documents (rh#2004853, rh#2007166, rh#2007167)
  + Implement logic for demodularization of modular rpms (rh#1805260)
  + DnfContext: fix handling of default module profiles
  + ModuleMetadata: gracefully handle modules with no defaults
  + Remove failovermethod config option (rh#1961083)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1647259200">- Skip rich deps for autodetection of unmet dependencies (rh#2033130)
  + Patch: 0001-Skip-rich-deps-for-autodetection-of-unmet-dependencies.patch</changelog>
</package>
<package pkgid="daea8639b7e1fbfa029201e01f20390d2b169ce368c0704772f9f62feefd77e7" name="python3-libdnf" arch="i586">
  <version epoch="0" ver="0.65.0" rel="bp154.2.1"/>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1594123200">- Update to version 0.48.0
  + Add prereq_ignoreinst &amp; regular_requires properties for pkg (rh#1543449)
  + Reset active modules when no module enabled or default (rh#1767351)
  + Add comment option to transaction (rh#1773679)
  + Failing to get module defauls is a recoverable error
  + Baseurl is not exclusive with mirrorlist/metalink (rh#1775184)
  + Add new function to reset all modules in C API (dnf_context_reset_all_modules)
  + [context] Fix to preserve additionalMetadata content (rh#1808677)
  + Fix filtering of DepSolvables with source rpms (rh#1812596)
  + Add setter for running kernel protection setting
  + Handle situation when an unprivileged user cannot create history database (rh#1634385)
  + Add query filter: latest by priority
  + Add DNF_NO_PROTECTED flag to allow empty list of protected packages
  + Remove 'dim' option from terminal colors to make them more readable (rh#1807774, rh#1814563)
  + [context] Error when main config file can't be opened (rh#1794864)
  + [context] Add function function dnf_context_is_set_config_file_path
  + swdb: Catch only SQLite3 exceptions and simplify the messages
  + MergedTransaction list multiple comments (rh#1773679)
  + Modify CMake to pull *.po files from weblate
  + Optimize DependencyContainer creation from an existing queue
  + fix a memory leak in dnf_package_get_requires()
  + Fix memory leaks on g_build_filename()
  + Fix memory leak in dnf_context_setup()
  + Add `hy_goal_favor` and `hy_goal_disfavor`
  + Define a cleanup function for `DnfPackageSet`
  + dnf-repo: fix dnf_repo_get_public_keys double-free
  + Do not cache RPMDB
  + Use single-quotes around string literals used in SQL statements
  + SQLite3: Do not close the database if it wasn't opened (rh#1761976)
  + Don't create a new history DB connection for in-memory DB
  + transaction/Swdb: Use a single logger variable in constructor
  + utils: Add a safe version of pathExists()
  + swdb: Handle the case when pathExists() fails on e.g. permission
  + Repo: prepend "file://" if a local path is used as baseurl
  + Move urlEncode() to utils
  + utils: Add 'exclude' argument to urlEncode()
  + Encode package URL for downloading through librepo (rh#1817130)
  + Replace std::runtime_error with libdnf::RepoError
  + Fixes and error handling improvements of the File class
  + [context] Use ConfigRepo for gpgkey and baseurl (rh#1807864)
  + [context] support "priority" option in .repo config file (rh#1797265)
- Drop obsolete patch: libdnf-0.45.0-handle-all-rpmdb-variants.patch
- Refresh patch for static linking libsolvext
  + Remove patch: libdnf-0.39.1-with-static-libsolvext.patch
  + Add patch: libdnf-0.48.0-with-static-libsolvext.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1598011200">- Backport fix from upstream to fix building against check &gt;= 0.15
  + Patch: 0001-tests-Fix-incorrect-usage-of-the-fail_unless-macro.patch
- Clean up spec comments about patches</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1603540800">- Update to version 0.54.2
  + history: Fix dnf history rollback when a package was removed (rh#1683134)
  + Add support for HY_GT, HY_LT in query nevra_strict
  + Fix parsing empty lines in config files
  + Accept '==' as an operator in reldeps (rh#1847946)
  + Add log file level main config option (rh#1802074)
  + Add protect_running_kernel configuration option (rh#1698145)
  + Context part of libdnf cannot assume zchunk is on (rh#1851841, rh#1779104)
  + Fix memory leak of resultingModuleIndex and handle g_object refs
  + Redirect librepo logs to libdnf logs with different source
  + Add hy_goal_lock
  + Enum/String conversions for Transaction Store/Replay
  + utils: Add a method to decode URLs
  + Unify hawkey.log line format with the rest of the logs
- Drop patches included in this release
  + Patch: 0001-tests-Fix-incorrect-usage-of-the-fail_unless-macro.patch
- Refresh patch for reposdir paths
  + Remove patch: libdnf-0.39.1-Switch-default-reposdir-to-etc-dnf-repos.d.patch
  + Add patch: libdnf-0.54.2-Switch-default-reposdir-to-etc-dnf-repos.d.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1606651200">- Update to version 0.55.0
  + Add vendor to dnf API (rh#1876561)
  + Add formatting function for solver error
  + Add error types in ModulePackageContainer
  + Implement module enable for context part
  + Improve string formatting for translation
  + Remove redundant printf and change logging info to notice (rh#1827424)
  + Add allow_vendor_change option (rh#1788371) (rh#1788371)
- Backport patches from upstream
  + Patch: 0001-Support-allow_vendor_change-setting-in-dnf-context-A.patch
  + Patch: 0001-context-dnf_keyring_add_public_keys-not-generate-err.patch
- Add patch to turn off changing vendors by default
  + Patch: libdnf-0.55.0-Switch-allow_vendor_change-off.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1607256000">- Update to version 0.55.2
  + Improve performance of query installed() and available()
  + Swdb: Add a method to get the current transaction
  + [modules] Add special handling for src artifacts (rh#1809314)
  + Better msgs if "basecachedir" or "proxy_password" isn't set (rh#1888946)
  + Add new options module_stream_switch
  + Support allow_vendor_change setting in dnf context API
- Drop patches incorporated into this release
  + Patch: 0001-Support-allow_vendor_change-setting-in-dnf-context-A.patch
  + Patch: 0001-context-dnf_keyring_add_public_keys-not-generate-err.patch
- Use cmake_build and cmake_install macros</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1609761600">- Add patch to support armv6hl and RISC-V architectures
  + Patch: 0001-context-Sync-missing-arches-from-DNF.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1612267200">- Update to version 0.58.0
  + Option: Add reset() method
  + Add OptionBinds::getOption() method
  + [context] Add dnf_repo_conf_from_gkeyfile() and dnf_repo_conf_reset()
  + [context] Add support for options: minrate, throttle, bandwidth, timeout
  + [context] Remove g_key_file_get_string() from dnf_repo_set_keyfile_data()
  + Allow loading ext metadata even if only cache (solv) is present
  + Add ASAN_OPTIONS for test_libdnf_main
  + [context,API] Functions for accessing main/global configuration options
  + [context,API] Function for adding setopt
  + Add getter for modular obsoletes from ModuleMetadata
  + Add ModulePackage.getStaticContext() and getRequires()
  + Add compatible layer for MdDocuments v2
  + Fix modular queries with the new solver
  + Improve formatting of error string for modules
  + Change mechanism of module conflicts
  + Fix load/update FailSafe
- Drop patch included in this release
  + Patch: 0001-context-Sync-missing-arches-from-DNF.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1613131200">- Backport fixes to add controls for installonlypkgs and protected_packages
  + Patch: 0001-context-Support-config-file-option-installonlypkgs.patch
  + Patch: 0002-context-Support-config-file-option-protected_package.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1613217600">- Add patch to move directory for dnf state data to /usr/lib/sysimage
  + Patch: libdnf-0.58.0-Use-usr-lib-sysimage-for-the-persistent-state-dir.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1613217601">- Backport another fix for adding controls to installonlypkgs
  + Patch: 0001-context-Fix-dnf_package_is_installonly-RhBug-1928056.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1614081600">- Backport support for using certificates for repository authorization
  + Patch: 0001-Fix-librepo-version-required-in-CMakeList.txt-1.12.0.patch
  + Patch: 0002-Fix-Fully-set-ssl-in-newHandle-function.patch
  + Patch: 0003-conf-Add-options-for-working-with-certificates-used-.patch
  + Patch: 0004-Apply-proxy-certificate-options.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1614254400">- Add repo-config-zypp subpackage to allow easily using Zypper
  repository configuration</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1614340800">- Backport more fixes for using certs for repo authorization
  + Patch: 0001-Deduplicate-code-create-Repo-Impl-stringToProxyAuthM.patch
  + Patch: 0002-context-Support-config-file-option-proxy_auth_method.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1614686400">- Update to 0.60.0
  + Fix repo.fresh() implementation
  + Fix: Fully set ssl in newHandle function
  + [conf] Add options for working with certificates used with proxy
  + Apply proxy certificate options
  + lock: Switch return-if-fail to assert to quiet gcc -fanalyzer
  + build-sys: Clean up message about Python bindings
  + Modify module NSVCA parsing - context definition (rh#1926771)
  + [context] Fix: dnf_package_is_installonly (rh#1928056)
  + Fix problematic language
  + Add getApplicablePackages to advisory and isApplicable to advisorymodule
  + Keep isAdvisoryApplicable to preserve API
  + Run ModulePackageContainerTest tests in tmpdir, merge interdependent
  + [context] Support config file option "proxy_auth_method", defaults "any"
  + Properly handle multiple collections in updateinfo.xml (rh#1804234)
  + Support main config file option "installonlypkgs"
  + Support main config file option "protected_packages"
- Drop patches now part of this release
  + Patch: 0001-context-Support-config-file-option-installonlypkgs.patch
  + Patch: 0002-context-Support-config-file-option-protected_package.patch
  + Patch: 0001-context-Fix-dnf_package_is_installonly-RhBug-1928056.patch
  + Patch: 0001-Fix-librepo-version-required-in-CMakeList.txt-1.12.0.patch
  + Patch: 0002-Fix-Fully-set-ssl-in-newHandle-function.patch
  + Patch: 0003-conf-Add-options-for-working-with-certificates-used-.patch
  + Patch: 0004-Apply-proxy-certificate-options.patch
  + Patch: 0001-Deduplicate-code-create-Repo-Impl-stringToProxyAuthM.patch
  + Patch: 0002-context-Support-config-file-option-proxy_auth_method.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1614686401">- Fix dependency for repo-config-zypp subpackage to work with SLE</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1618315200">- Update to 0.62.0
  + Change order of TransactionItemReason (rh#1921063)
  + Add two new comperators for security filters (rh#1918475)
  + Apply security filters for candidates with lower priority
  + Fix: Goal - translation of messages in global maps
  + Enhance description of modular solvables
  + Improve performance for module query
  + Change mechanism of modular errata applicability (rh#1804234)
  + dnf_transaction_commit(): Remove second call to rpmtsSetVSFlags
  + Fix a couple of memory leaks
  + Fix: Setting of librepo handle in newHandle function
  + Remove failsafe data when module is not enabled (rh#1847035)
  + Expose librepo's checksum functions via SWIG
  + Fix: Mising check of "hy_split_nevra()" return code
  + Do not allow 1 as installonly_limit value (rh#1926261)
  + Fix check whether the subkey can be used for signing
  + Hardening: add signature check with rpmcliVerifySignatures
    (CVE-2021-3445, CVE-2021-3421, CVE-2021-20271, rh#1932079, rh#1932089, rh#1932090, boo#1183779)
  + Add a config option sslverifystatus, defaults to false (rh#1814383)
  + [context] Add API for distro-sync</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1618488000">- Add patch to fix crash when loading DVD repositories
  + Patch: 0001-Fix-a-crash-when-repoId-not-found-in-loaded-conf-gke.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1630065600">- Update to 0.63.1
  + ModuleProfile: add isDefault()
  + ModulePackage: add getDefaultProfile()
  + Add new dnf_context_module_install() C API
  + Fix a crash when [media] section in .treeinfo is missing for bootable media (rh#1946024)
  + Add hy_query_get_advisory_pkgs to C API (rh#1960561)
  + Add dnf_advisorypkg_get_advisory()
  + DNF does not fail on non UTF-8 file names in a package (rh#1893176)
  + Improve error-reporting for modular functions
- Drop patch included in this release
  + Patch: 0001-Fix-a-crash-when-repoId-not-found-in-loaded-conf-gke.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1635940800">- Update to 0.65.0
  + Add support for excluding packages to be installed as weak dependencies
  + Add support for autodetecting packages to be excluded from being installed as weak dependencies
  + Turn off strict validation of modulemd documents (rh#2004853, rh#2007166, rh#2007167)
  + Implement logic for demodularization of modular rpms (rh#1805260)
  + DnfContext: fix handling of default module profiles
  + ModuleMetadata: gracefully handle modules with no defaults
  + Remove failovermethod config option (rh#1961083)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1647259200">- Skip rich deps for autodetection of unmet dependencies (rh#2033130)
  + Patch: 0001-Skip-rich-deps-for-autodetection-of-unmet-dependencies.patch</changelog>
</package>
<package pkgid="f6e26d2d65e801e499c30a31cff7519f748e8fa6489e779260895e3b166b9b24" name="python3-libdnf" arch="ppc64le">
  <version epoch="0" ver="0.65.0" rel="bp154.2.1"/>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1594123200">- Update to version 0.48.0
  + Add prereq_ignoreinst &amp; regular_requires properties for pkg (rh#1543449)
  + Reset active modules when no module enabled or default (rh#1767351)
  + Add comment option to transaction (rh#1773679)
  + Failing to get module defauls is a recoverable error
  + Baseurl is not exclusive with mirrorlist/metalink (rh#1775184)
  + Add new function to reset all modules in C API (dnf_context_reset_all_modules)
  + [context] Fix to preserve additionalMetadata content (rh#1808677)
  + Fix filtering of DepSolvables with source rpms (rh#1812596)
  + Add setter for running kernel protection setting
  + Handle situation when an unprivileged user cannot create history database (rh#1634385)
  + Add query filter: latest by priority
  + Add DNF_NO_PROTECTED flag to allow empty list of protected packages
  + Remove 'dim' option from terminal colors to make them more readable (rh#1807774, rh#1814563)
  + [context] Error when main config file can't be opened (rh#1794864)
  + [context] Add function function dnf_context_is_set_config_file_path
  + swdb: Catch only SQLite3 exceptions and simplify the messages
  + MergedTransaction list multiple comments (rh#1773679)
  + Modify CMake to pull *.po files from weblate
  + Optimize DependencyContainer creation from an existing queue
  + fix a memory leak in dnf_package_get_requires()
  + Fix memory leaks on g_build_filename()
  + Fix memory leak in dnf_context_setup()
  + Add `hy_goal_favor` and `hy_goal_disfavor`
  + Define a cleanup function for `DnfPackageSet`
  + dnf-repo: fix dnf_repo_get_public_keys double-free
  + Do not cache RPMDB
  + Use single-quotes around string literals used in SQL statements
  + SQLite3: Do not close the database if it wasn't opened (rh#1761976)
  + Don't create a new history DB connection for in-memory DB
  + transaction/Swdb: Use a single logger variable in constructor
  + utils: Add a safe version of pathExists()
  + swdb: Handle the case when pathExists() fails on e.g. permission
  + Repo: prepend "file://" if a local path is used as baseurl
  + Move urlEncode() to utils
  + utils: Add 'exclude' argument to urlEncode()
  + Encode package URL for downloading through librepo (rh#1817130)
  + Replace std::runtime_error with libdnf::RepoError
  + Fixes and error handling improvements of the File class
  + [context] Use ConfigRepo for gpgkey and baseurl (rh#1807864)
  + [context] support "priority" option in .repo config file (rh#1797265)
- Drop obsolete patch: libdnf-0.45.0-handle-all-rpmdb-variants.patch
- Refresh patch for static linking libsolvext
  + Remove patch: libdnf-0.39.1-with-static-libsolvext.patch
  + Add patch: libdnf-0.48.0-with-static-libsolvext.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1598011200">- Backport fix from upstream to fix building against check &gt;= 0.15
  + Patch: 0001-tests-Fix-incorrect-usage-of-the-fail_unless-macro.patch
- Clean up spec comments about patches</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1603540800">- Update to version 0.54.2
  + history: Fix dnf history rollback when a package was removed (rh#1683134)
  + Add support for HY_GT, HY_LT in query nevra_strict
  + Fix parsing empty lines in config files
  + Accept '==' as an operator in reldeps (rh#1847946)
  + Add log file level main config option (rh#1802074)
  + Add protect_running_kernel configuration option (rh#1698145)
  + Context part of libdnf cannot assume zchunk is on (rh#1851841, rh#1779104)
  + Fix memory leak of resultingModuleIndex and handle g_object refs
  + Redirect librepo logs to libdnf logs with different source
  + Add hy_goal_lock
  + Enum/String conversions for Transaction Store/Replay
  + utils: Add a method to decode URLs
  + Unify hawkey.log line format with the rest of the logs
- Drop patches included in this release
  + Patch: 0001-tests-Fix-incorrect-usage-of-the-fail_unless-macro.patch
- Refresh patch for reposdir paths
  + Remove patch: libdnf-0.39.1-Switch-default-reposdir-to-etc-dnf-repos.d.patch
  + Add patch: libdnf-0.54.2-Switch-default-reposdir-to-etc-dnf-repos.d.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1606651200">- Update to version 0.55.0
  + Add vendor to dnf API (rh#1876561)
  + Add formatting function for solver error
  + Add error types in ModulePackageContainer
  + Implement module enable for context part
  + Improve string formatting for translation
  + Remove redundant printf and change logging info to notice (rh#1827424)
  + Add allow_vendor_change option (rh#1788371) (rh#1788371)
- Backport patches from upstream
  + Patch: 0001-Support-allow_vendor_change-setting-in-dnf-context-A.patch
  + Patch: 0001-context-dnf_keyring_add_public_keys-not-generate-err.patch
- Add patch to turn off changing vendors by default
  + Patch: libdnf-0.55.0-Switch-allow_vendor_change-off.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1607256000">- Update to version 0.55.2
  + Improve performance of query installed() and available()
  + Swdb: Add a method to get the current transaction
  + [modules] Add special handling for src artifacts (rh#1809314)
  + Better msgs if "basecachedir" or "proxy_password" isn't set (rh#1888946)
  + Add new options module_stream_switch
  + Support allow_vendor_change setting in dnf context API
- Drop patches incorporated into this release
  + Patch: 0001-Support-allow_vendor_change-setting-in-dnf-context-A.patch
  + Patch: 0001-context-dnf_keyring_add_public_keys-not-generate-err.patch
- Use cmake_build and cmake_install macros</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1609761600">- Add patch to support armv6hl and RISC-V architectures
  + Patch: 0001-context-Sync-missing-arches-from-DNF.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1612267200">- Update to version 0.58.0
  + Option: Add reset() method
  + Add OptionBinds::getOption() method
  + [context] Add dnf_repo_conf_from_gkeyfile() and dnf_repo_conf_reset()
  + [context] Add support for options: minrate, throttle, bandwidth, timeout
  + [context] Remove g_key_file_get_string() from dnf_repo_set_keyfile_data()
  + Allow loading ext metadata even if only cache (solv) is present
  + Add ASAN_OPTIONS for test_libdnf_main
  + [context,API] Functions for accessing main/global configuration options
  + [context,API] Function for adding setopt
  + Add getter for modular obsoletes from ModuleMetadata
  + Add ModulePackage.getStaticContext() and getRequires()
  + Add compatible layer for MdDocuments v2
  + Fix modular queries with the new solver
  + Improve formatting of error string for modules
  + Change mechanism of module conflicts
  + Fix load/update FailSafe
- Drop patch included in this release
  + Patch: 0001-context-Sync-missing-arches-from-DNF.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1613131200">- Backport fixes to add controls for installonlypkgs and protected_packages
  + Patch: 0001-context-Support-config-file-option-installonlypkgs.patch
  + Patch: 0002-context-Support-config-file-option-protected_package.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1613217600">- Add patch to move directory for dnf state data to /usr/lib/sysimage
  + Patch: libdnf-0.58.0-Use-usr-lib-sysimage-for-the-persistent-state-dir.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1613217601">- Backport another fix for adding controls to installonlypkgs
  + Patch: 0001-context-Fix-dnf_package_is_installonly-RhBug-1928056.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1614081600">- Backport support for using certificates for repository authorization
  + Patch: 0001-Fix-librepo-version-required-in-CMakeList.txt-1.12.0.patch
  + Patch: 0002-Fix-Fully-set-ssl-in-newHandle-function.patch
  + Patch: 0003-conf-Add-options-for-working-with-certificates-used-.patch
  + Patch: 0004-Apply-proxy-certificate-options.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1614254400">- Add repo-config-zypp subpackage to allow easily using Zypper
  repository configuration</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1614340800">- Backport more fixes for using certs for repo authorization
  + Patch: 0001-Deduplicate-code-create-Repo-Impl-stringToProxyAuthM.patch
  + Patch: 0002-context-Support-config-file-option-proxy_auth_method.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1614686400">- Update to 0.60.0
  + Fix repo.fresh() implementation
  + Fix: Fully set ssl in newHandle function
  + [conf] Add options for working with certificates used with proxy
  + Apply proxy certificate options
  + lock: Switch return-if-fail to assert to quiet gcc -fanalyzer
  + build-sys: Clean up message about Python bindings
  + Modify module NSVCA parsing - context definition (rh#1926771)
  + [context] Fix: dnf_package_is_installonly (rh#1928056)
  + Fix problematic language
  + Add getApplicablePackages to advisory and isApplicable to advisorymodule
  + Keep isAdvisoryApplicable to preserve API
  + Run ModulePackageContainerTest tests in tmpdir, merge interdependent
  + [context] Support config file option "proxy_auth_method", defaults "any"
  + Properly handle multiple collections in updateinfo.xml (rh#1804234)
  + Support main config file option "installonlypkgs"
  + Support main config file option "protected_packages"
- Drop patches now part of this release
  + Patch: 0001-context-Support-config-file-option-installonlypkgs.patch
  + Patch: 0002-context-Support-config-file-option-protected_package.patch
  + Patch: 0001-context-Fix-dnf_package_is_installonly-RhBug-1928056.patch
  + Patch: 0001-Fix-librepo-version-required-in-CMakeList.txt-1.12.0.patch
  + Patch: 0002-Fix-Fully-set-ssl-in-newHandle-function.patch
  + Patch: 0003-conf-Add-options-for-working-with-certificates-used-.patch
  + Patch: 0004-Apply-proxy-certificate-options.patch
  + Patch: 0001-Deduplicate-code-create-Repo-Impl-stringToProxyAuthM.patch
  + Patch: 0002-context-Support-config-file-option-proxy_auth_method.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1614686401">- Fix dependency for repo-config-zypp subpackage to work with SLE</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1618315200">- Update to 0.62.0
  + Change order of TransactionItemReason (rh#1921063)
  + Add two new comperators for security filters (rh#1918475)
  + Apply security filters for candidates with lower priority
  + Fix: Goal - translation of messages in global maps
  + Enhance description of modular solvables
  + Improve performance for module query
  + Change mechanism of modular errata applicability (rh#1804234)
  + dnf_transaction_commit(): Remove second call to rpmtsSetVSFlags
  + Fix a couple of memory leaks
  + Fix: Setting of librepo handle in newHandle function
  + Remove failsafe data when module is not enabled (rh#1847035)
  + Expose librepo's checksum functions via SWIG
  + Fix: Mising check of "hy_split_nevra()" return code
  + Do not allow 1 as installonly_limit value (rh#1926261)
  + Fix check whether the subkey can be used for signing
  + Hardening: add signature check with rpmcliVerifySignatures
    (CVE-2021-3445, CVE-2021-3421, CVE-2021-20271, rh#1932079, rh#1932089, rh#1932090, boo#1183779)
  + Add a config option sslverifystatus, defaults to false (rh#1814383)
  + [context] Add API for distro-sync</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1618488000">- Add patch to fix crash when loading DVD repositories
  + Patch: 0001-Fix-a-crash-when-repoId-not-found-in-loaded-conf-gke.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1630065600">- Update to 0.63.1
  + ModuleProfile: add isDefault()
  + ModulePackage: add getDefaultProfile()
  + Add new dnf_context_module_install() C API
  + Fix a crash when [media] section in .treeinfo is missing for bootable media (rh#1946024)
  + Add hy_query_get_advisory_pkgs to C API (rh#1960561)
  + Add dnf_advisorypkg_get_advisory()
  + DNF does not fail on non UTF-8 file names in a package (rh#1893176)
  + Improve error-reporting for modular functions
- Drop patch included in this release
  + Patch: 0001-Fix-a-crash-when-repoId-not-found-in-loaded-conf-gke.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1635940800">- Update to 0.65.0
  + Add support for excluding packages to be installed as weak dependencies
  + Add support for autodetecting packages to be excluded from being installed as weak dependencies
  + Turn off strict validation of modulemd documents (rh#2004853, rh#2007166, rh#2007167)
  + Implement logic for demodularization of modular rpms (rh#1805260)
  + DnfContext: fix handling of default module profiles
  + ModuleMetadata: gracefully handle modules with no defaults
  + Remove failovermethod config option (rh#1961083)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1647259200">- Skip rich deps for autodetection of unmet dependencies (rh#2033130)
  + Patch: 0001-Skip-rich-deps-for-autodetection-of-unmet-dependencies.patch</changelog>
</package>
<package pkgid="a3a41ee6c1c30b1f273bf2c5f27aae92fb4b53ca129e14839b9b37eb71abc6fc" name="python3-libdnf" arch="s390x">
  <version epoch="0" ver="0.65.0" rel="bp154.2.1"/>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1594123200">- Update to version 0.48.0
  + Add prereq_ignoreinst &amp; regular_requires properties for pkg (rh#1543449)
  + Reset active modules when no module enabled or default (rh#1767351)
  + Add comment option to transaction (rh#1773679)
  + Failing to get module defauls is a recoverable error
  + Baseurl is not exclusive with mirrorlist/metalink (rh#1775184)
  + Add new function to reset all modules in C API (dnf_context_reset_all_modules)
  + [context] Fix to preserve additionalMetadata content (rh#1808677)
  + Fix filtering of DepSolvables with source rpms (rh#1812596)
  + Add setter for running kernel protection setting
  + Handle situation when an unprivileged user cannot create history database (rh#1634385)
  + Add query filter: latest by priority
  + Add DNF_NO_PROTECTED flag to allow empty list of protected packages
  + Remove 'dim' option from terminal colors to make them more readable (rh#1807774, rh#1814563)
  + [context] Error when main config file can't be opened (rh#1794864)
  + [context] Add function function dnf_context_is_set_config_file_path
  + swdb: Catch only SQLite3 exceptions and simplify the messages
  + MergedTransaction list multiple comments (rh#1773679)
  + Modify CMake to pull *.po files from weblate
  + Optimize DependencyContainer creation from an existing queue
  + fix a memory leak in dnf_package_get_requires()
  + Fix memory leaks on g_build_filename()
  + Fix memory leak in dnf_context_setup()
  + Add `hy_goal_favor` and `hy_goal_disfavor`
  + Define a cleanup function for `DnfPackageSet`
  + dnf-repo: fix dnf_repo_get_public_keys double-free
  + Do not cache RPMDB
  + Use single-quotes around string literals used in SQL statements
  + SQLite3: Do not close the database if it wasn't opened (rh#1761976)
  + Don't create a new history DB connection for in-memory DB
  + transaction/Swdb: Use a single logger variable in constructor
  + utils: Add a safe version of pathExists()
  + swdb: Handle the case when pathExists() fails on e.g. permission
  + Repo: prepend "file://" if a local path is used as baseurl
  + Move urlEncode() to utils
  + utils: Add 'exclude' argument to urlEncode()
  + Encode package URL for downloading through librepo (rh#1817130)
  + Replace std::runtime_error with libdnf::RepoError
  + Fixes and error handling improvements of the File class
  + [context] Use ConfigRepo for gpgkey and baseurl (rh#1807864)
  + [context] support "priority" option in .repo config file (rh#1797265)
- Drop obsolete patch: libdnf-0.45.0-handle-all-rpmdb-variants.patch
- Refresh patch for static linking libsolvext
  + Remove patch: libdnf-0.39.1-with-static-libsolvext.patch
  + Add patch: libdnf-0.48.0-with-static-libsolvext.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1598011200">- Backport fix from upstream to fix building against check &gt;= 0.15
  + Patch: 0001-tests-Fix-incorrect-usage-of-the-fail_unless-macro.patch
- Clean up spec comments about patches</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1603540800">- Update to version 0.54.2
  + history: Fix dnf history rollback when a package was removed (rh#1683134)
  + Add support for HY_GT, HY_LT in query nevra_strict
  + Fix parsing empty lines in config files
  + Accept '==' as an operator in reldeps (rh#1847946)
  + Add log file level main config option (rh#1802074)
  + Add protect_running_kernel configuration option (rh#1698145)
  + Context part of libdnf cannot assume zchunk is on (rh#1851841, rh#1779104)
  + Fix memory leak of resultingModuleIndex and handle g_object refs
  + Redirect librepo logs to libdnf logs with different source
  + Add hy_goal_lock
  + Enum/String conversions for Transaction Store/Replay
  + utils: Add a method to decode URLs
  + Unify hawkey.log line format with the rest of the logs
- Drop patches included in this release
  + Patch: 0001-tests-Fix-incorrect-usage-of-the-fail_unless-macro.patch
- Refresh patch for reposdir paths
  + Remove patch: libdnf-0.39.1-Switch-default-reposdir-to-etc-dnf-repos.d.patch
  + Add patch: libdnf-0.54.2-Switch-default-reposdir-to-etc-dnf-repos.d.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1606651200">- Update to version 0.55.0
  + Add vendor to dnf API (rh#1876561)
  + Add formatting function for solver error
  + Add error types in ModulePackageContainer
  + Implement module enable for context part
  + Improve string formatting for translation
  + Remove redundant printf and change logging info to notice (rh#1827424)
  + Add allow_vendor_change option (rh#1788371) (rh#1788371)
- Backport patches from upstream
  + Patch: 0001-Support-allow_vendor_change-setting-in-dnf-context-A.patch
  + Patch: 0001-context-dnf_keyring_add_public_keys-not-generate-err.patch
- Add patch to turn off changing vendors by default
  + Patch: libdnf-0.55.0-Switch-allow_vendor_change-off.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1607256000">- Update to version 0.55.2
  + Improve performance of query installed() and available()
  + Swdb: Add a method to get the current transaction
  + [modules] Add special handling for src artifacts (rh#1809314)
  + Better msgs if "basecachedir" or "proxy_password" isn't set (rh#1888946)
  + Add new options module_stream_switch
  + Support allow_vendor_change setting in dnf context API
- Drop patches incorporated into this release
  + Patch: 0001-Support-allow_vendor_change-setting-in-dnf-context-A.patch
  + Patch: 0001-context-dnf_keyring_add_public_keys-not-generate-err.patch
- Use cmake_build and cmake_install macros</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1609761600">- Add patch to support armv6hl and RISC-V architectures
  + Patch: 0001-context-Sync-missing-arches-from-DNF.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1612267200">- Update to version 0.58.0
  + Option: Add reset() method
  + Add OptionBinds::getOption() method
  + [context] Add dnf_repo_conf_from_gkeyfile() and dnf_repo_conf_reset()
  + [context] Add support for options: minrate, throttle, bandwidth, timeout
  + [context] Remove g_key_file_get_string() from dnf_repo_set_keyfile_data()
  + Allow loading ext metadata even if only cache (solv) is present
  + Add ASAN_OPTIONS for test_libdnf_main
  + [context,API] Functions for accessing main/global configuration options
  + [context,API] Function for adding setopt
  + Add getter for modular obsoletes from ModuleMetadata
  + Add ModulePackage.getStaticContext() and getRequires()
  + Add compatible layer for MdDocuments v2
  + Fix modular queries with the new solver
  + Improve formatting of error string for modules
  + Change mechanism of module conflicts
  + Fix load/update FailSafe
- Drop patch included in this release
  + Patch: 0001-context-Sync-missing-arches-from-DNF.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1613131200">- Backport fixes to add controls for installonlypkgs and protected_packages
  + Patch: 0001-context-Support-config-file-option-installonlypkgs.patch
  + Patch: 0002-context-Support-config-file-option-protected_package.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1613217600">- Add patch to move directory for dnf state data to /usr/lib/sysimage
  + Patch: libdnf-0.58.0-Use-usr-lib-sysimage-for-the-persistent-state-dir.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1613217601">- Backport another fix for adding controls to installonlypkgs
  + Patch: 0001-context-Fix-dnf_package_is_installonly-RhBug-1928056.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1614081600">- Backport support for using certificates for repository authorization
  + Patch: 0001-Fix-librepo-version-required-in-CMakeList.txt-1.12.0.patch
  + Patch: 0002-Fix-Fully-set-ssl-in-newHandle-function.patch
  + Patch: 0003-conf-Add-options-for-working-with-certificates-used-.patch
  + Patch: 0004-Apply-proxy-certificate-options.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1614254400">- Add repo-config-zypp subpackage to allow easily using Zypper
  repository configuration</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1614340800">- Backport more fixes for using certs for repo authorization
  + Patch: 0001-Deduplicate-code-create-Repo-Impl-stringToProxyAuthM.patch
  + Patch: 0002-context-Support-config-file-option-proxy_auth_method.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1614686400">- Update to 0.60.0
  + Fix repo.fresh() implementation
  + Fix: Fully set ssl in newHandle function
  + [conf] Add options for working with certificates used with proxy
  + Apply proxy certificate options
  + lock: Switch return-if-fail to assert to quiet gcc -fanalyzer
  + build-sys: Clean up message about Python bindings
  + Modify module NSVCA parsing - context definition (rh#1926771)
  + [context] Fix: dnf_package_is_installonly (rh#1928056)
  + Fix problematic language
  + Add getApplicablePackages to advisory and isApplicable to advisorymodule
  + Keep isAdvisoryApplicable to preserve API
  + Run ModulePackageContainerTest tests in tmpdir, merge interdependent
  + [context] Support config file option "proxy_auth_method", defaults "any"
  + Properly handle multiple collections in updateinfo.xml (rh#1804234)
  + Support main config file option "installonlypkgs"
  + Support main config file option "protected_packages"
- Drop patches now part of this release
  + Patch: 0001-context-Support-config-file-option-installonlypkgs.patch
  + Patch: 0002-context-Support-config-file-option-protected_package.patch
  + Patch: 0001-context-Fix-dnf_package_is_installonly-RhBug-1928056.patch
  + Patch: 0001-Fix-librepo-version-required-in-CMakeList.txt-1.12.0.patch
  + Patch: 0002-Fix-Fully-set-ssl-in-newHandle-function.patch
  + Patch: 0003-conf-Add-options-for-working-with-certificates-used-.patch
  + Patch: 0004-Apply-proxy-certificate-options.patch
  + Patch: 0001-Deduplicate-code-create-Repo-Impl-stringToProxyAuthM.patch
  + Patch: 0002-context-Support-config-file-option-proxy_auth_method.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1614686401">- Fix dependency for repo-config-zypp subpackage to work with SLE</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1618315200">- Update to 0.62.0
  + Change order of TransactionItemReason (rh#1921063)
  + Add two new comperators for security filters (rh#1918475)
  + Apply security filters for candidates with lower priority
  + Fix: Goal - translation of messages in global maps
  + Enhance description of modular solvables
  + Improve performance for module query
  + Change mechanism of modular errata applicability (rh#1804234)
  + dnf_transaction_commit(): Remove second call to rpmtsSetVSFlags
  + Fix a couple of memory leaks
  + Fix: Setting of librepo handle in newHandle function
  + Remove failsafe data when module is not enabled (rh#1847035)
  + Expose librepo's checksum functions via SWIG
  + Fix: Mising check of "hy_split_nevra()" return code
  + Do not allow 1 as installonly_limit value (rh#1926261)
  + Fix check whether the subkey can be used for signing
  + Hardening: add signature check with rpmcliVerifySignatures
    (CVE-2021-3445, CVE-2021-3421, CVE-2021-20271, rh#1932079, rh#1932089, rh#1932090, boo#1183779)
  + Add a config option sslverifystatus, defaults to false (rh#1814383)
  + [context] Add API for distro-sync</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1618488000">- Add patch to fix crash when loading DVD repositories
  + Patch: 0001-Fix-a-crash-when-repoId-not-found-in-loaded-conf-gke.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1630065600">- Update to 0.63.1
  + ModuleProfile: add isDefault()
  + ModulePackage: add getDefaultProfile()
  + Add new dnf_context_module_install() C API
  + Fix a crash when [media] section in .treeinfo is missing for bootable media (rh#1946024)
  + Add hy_query_get_advisory_pkgs to C API (rh#1960561)
  + Add dnf_advisorypkg_get_advisory()
  + DNF does not fail on non UTF-8 file names in a package (rh#1893176)
  + Improve error-reporting for modular functions
- Drop patch included in this release
  + Patch: 0001-Fix-a-crash-when-repoId-not-found-in-loaded-conf-gke.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1635940800">- Update to 0.65.0
  + Add support for excluding packages to be installed as weak dependencies
  + Add support for autodetecting packages to be excluded from being installed as weak dependencies
  + Turn off strict validation of modulemd documents (rh#2004853, rh#2007166, rh#2007167)
  + Implement logic for demodularization of modular rpms (rh#1805260)
  + DnfContext: fix handling of default module profiles
  + ModuleMetadata: gracefully handle modules with no defaults
  + Remove failovermethod config option (rh#1961083)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1647259200">- Skip rich deps for autodetection of unmet dependencies (rh#2033130)
  + Patch: 0001-Skip-rich-deps-for-autodetection-of-unmet-dependencies.patch</changelog>
</package>
<package pkgid="e3e1aee34c86e4d46008c43180949fcb326106c1b06d99b316d96f296b4480b5" name="python3-libdnf" arch="x86_64">
  <version epoch="0" ver="0.65.0" rel="bp154.2.1"/>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1594123200">- Update to version 0.48.0
  + Add prereq_ignoreinst &amp; regular_requires properties for pkg (rh#1543449)
  + Reset active modules when no module enabled or default (rh#1767351)
  + Add comment option to transaction (rh#1773679)
  + Failing to get module defauls is a recoverable error
  + Baseurl is not exclusive with mirrorlist/metalink (rh#1775184)
  + Add new function to reset all modules in C API (dnf_context_reset_all_modules)
  + [context] Fix to preserve additionalMetadata content (rh#1808677)
  + Fix filtering of DepSolvables with source rpms (rh#1812596)
  + Add setter for running kernel protection setting
  + Handle situation when an unprivileged user cannot create history database (rh#1634385)
  + Add query filter: latest by priority
  + Add DNF_NO_PROTECTED flag to allow empty list of protected packages
  + Remove 'dim' option from terminal colors to make them more readable (rh#1807774, rh#1814563)
  + [context] Error when main config file can't be opened (rh#1794864)
  + [context] Add function function dnf_context_is_set_config_file_path
  + swdb: Catch only SQLite3 exceptions and simplify the messages
  + MergedTransaction list multiple comments (rh#1773679)
  + Modify CMake to pull *.po files from weblate
  + Optimize DependencyContainer creation from an existing queue
  + fix a memory leak in dnf_package_get_requires()
  + Fix memory leaks on g_build_filename()
  + Fix memory leak in dnf_context_setup()
  + Add `hy_goal_favor` and `hy_goal_disfavor`
  + Define a cleanup function for `DnfPackageSet`
  + dnf-repo: fix dnf_repo_get_public_keys double-free
  + Do not cache RPMDB
  + Use single-quotes around string literals used in SQL statements
  + SQLite3: Do not close the database if it wasn't opened (rh#1761976)
  + Don't create a new history DB connection for in-memory DB
  + transaction/Swdb: Use a single logger variable in constructor
  + utils: Add a safe version of pathExists()
  + swdb: Handle the case when pathExists() fails on e.g. permission
  + Repo: prepend "file://" if a local path is used as baseurl
  + Move urlEncode() to utils
  + utils: Add 'exclude' argument to urlEncode()
  + Encode package URL for downloading through librepo (rh#1817130)
  + Replace std::runtime_error with libdnf::RepoError
  + Fixes and error handling improvements of the File class
  + [context] Use ConfigRepo for gpgkey and baseurl (rh#1807864)
  + [context] support "priority" option in .repo config file (rh#1797265)
- Drop obsolete patch: libdnf-0.45.0-handle-all-rpmdb-variants.patch
- Refresh patch for static linking libsolvext
  + Remove patch: libdnf-0.39.1-with-static-libsolvext.patch
  + Add patch: libdnf-0.48.0-with-static-libsolvext.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1598011200">- Backport fix from upstream to fix building against check &gt;= 0.15
  + Patch: 0001-tests-Fix-incorrect-usage-of-the-fail_unless-macro.patch
- Clean up spec comments about patches</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1603540800">- Update to version 0.54.2
  + history: Fix dnf history rollback when a package was removed (rh#1683134)
  + Add support for HY_GT, HY_LT in query nevra_strict
  + Fix parsing empty lines in config files
  + Accept '==' as an operator in reldeps (rh#1847946)
  + Add log file level main config option (rh#1802074)
  + Add protect_running_kernel configuration option (rh#1698145)
  + Context part of libdnf cannot assume zchunk is on (rh#1851841, rh#1779104)
  + Fix memory leak of resultingModuleIndex and handle g_object refs
  + Redirect librepo logs to libdnf logs with different source
  + Add hy_goal_lock
  + Enum/String conversions for Transaction Store/Replay
  + utils: Add a method to decode URLs
  + Unify hawkey.log line format with the rest of the logs
- Drop patches included in this release
  + Patch: 0001-tests-Fix-incorrect-usage-of-the-fail_unless-macro.patch
- Refresh patch for reposdir paths
  + Remove patch: libdnf-0.39.1-Switch-default-reposdir-to-etc-dnf-repos.d.patch
  + Add patch: libdnf-0.54.2-Switch-default-reposdir-to-etc-dnf-repos.d.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1606651200">- Update to version 0.55.0
  + Add vendor to dnf API (rh#1876561)
  + Add formatting function for solver error
  + Add error types in ModulePackageContainer
  + Implement module enable for context part
  + Improve string formatting for translation
  + Remove redundant printf and change logging info to notice (rh#1827424)
  + Add allow_vendor_change option (rh#1788371) (rh#1788371)
- Backport patches from upstream
  + Patch: 0001-Support-allow_vendor_change-setting-in-dnf-context-A.patch
  + Patch: 0001-context-dnf_keyring_add_public_keys-not-generate-err.patch
- Add patch to turn off changing vendors by default
  + Patch: libdnf-0.55.0-Switch-allow_vendor_change-off.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1607256000">- Update to version 0.55.2
  + Improve performance of query installed() and available()
  + Swdb: Add a method to get the current transaction
  + [modules] Add special handling for src artifacts (rh#1809314)
  + Better msgs if "basecachedir" or "proxy_password" isn't set (rh#1888946)
  + Add new options module_stream_switch
  + Support allow_vendor_change setting in dnf context API
- Drop patches incorporated into this release
  + Patch: 0001-Support-allow_vendor_change-setting-in-dnf-context-A.patch
  + Patch: 0001-context-dnf_keyring_add_public_keys-not-generate-err.patch
- Use cmake_build and cmake_install macros</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1609761600">- Add patch to support armv6hl and RISC-V architectures
  + Patch: 0001-context-Sync-missing-arches-from-DNF.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1612267200">- Update to version 0.58.0
  + Option: Add reset() method
  + Add OptionBinds::getOption() method
  + [context] Add dnf_repo_conf_from_gkeyfile() and dnf_repo_conf_reset()
  + [context] Add support for options: minrate, throttle, bandwidth, timeout
  + [context] Remove g_key_file_get_string() from dnf_repo_set_keyfile_data()
  + Allow loading ext metadata even if only cache (solv) is present
  + Add ASAN_OPTIONS for test_libdnf_main
  + [context,API] Functions for accessing main/global configuration options
  + [context,API] Function for adding setopt
  + Add getter for modular obsoletes from ModuleMetadata
  + Add ModulePackage.getStaticContext() and getRequires()
  + Add compatible layer for MdDocuments v2
  + Fix modular queries with the new solver
  + Improve formatting of error string for modules
  + Change mechanism of module conflicts
  + Fix load/update FailSafe
- Drop patch included in this release
  + Patch: 0001-context-Sync-missing-arches-from-DNF.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1613131200">- Backport fixes to add controls for installonlypkgs and protected_packages
  + Patch: 0001-context-Support-config-file-option-installonlypkgs.patch
  + Patch: 0002-context-Support-config-file-option-protected_package.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1613217600">- Add patch to move directory for dnf state data to /usr/lib/sysimage
  + Patch: libdnf-0.58.0-Use-usr-lib-sysimage-for-the-persistent-state-dir.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1613217601">- Backport another fix for adding controls to installonlypkgs
  + Patch: 0001-context-Fix-dnf_package_is_installonly-RhBug-1928056.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1614081600">- Backport support for using certificates for repository authorization
  + Patch: 0001-Fix-librepo-version-required-in-CMakeList.txt-1.12.0.patch
  + Patch: 0002-Fix-Fully-set-ssl-in-newHandle-function.patch
  + Patch: 0003-conf-Add-options-for-working-with-certificates-used-.patch
  + Patch: 0004-Apply-proxy-certificate-options.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1614254400">- Add repo-config-zypp subpackage to allow easily using Zypper
  repository configuration</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1614340800">- Backport more fixes for using certs for repo authorization
  + Patch: 0001-Deduplicate-code-create-Repo-Impl-stringToProxyAuthM.patch
  + Patch: 0002-context-Support-config-file-option-proxy_auth_method.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1614686400">- Update to 0.60.0
  + Fix repo.fresh() implementation
  + Fix: Fully set ssl in newHandle function
  + [conf] Add options for working with certificates used with proxy
  + Apply proxy certificate options
  + lock: Switch return-if-fail to assert to quiet gcc -fanalyzer
  + build-sys: Clean up message about Python bindings
  + Modify module NSVCA parsing - context definition (rh#1926771)
  + [context] Fix: dnf_package_is_installonly (rh#1928056)
  + Fix problematic language
  + Add getApplicablePackages to advisory and isApplicable to advisorymodule
  + Keep isAdvisoryApplicable to preserve API
  + Run ModulePackageContainerTest tests in tmpdir, merge interdependent
  + [context] Support config file option "proxy_auth_method", defaults "any"
  + Properly handle multiple collections in updateinfo.xml (rh#1804234)
  + Support main config file option "installonlypkgs"
  + Support main config file option "protected_packages"
- Drop patches now part of this release
  + Patch: 0001-context-Support-config-file-option-installonlypkgs.patch
  + Patch: 0002-context-Support-config-file-option-protected_package.patch
  + Patch: 0001-context-Fix-dnf_package_is_installonly-RhBug-1928056.patch
  + Patch: 0001-Fix-librepo-version-required-in-CMakeList.txt-1.12.0.patch
  + Patch: 0002-Fix-Fully-set-ssl-in-newHandle-function.patch
  + Patch: 0003-conf-Add-options-for-working-with-certificates-used-.patch
  + Patch: 0004-Apply-proxy-certificate-options.patch
  + Patch: 0001-Deduplicate-code-create-Repo-Impl-stringToProxyAuthM.patch
  + Patch: 0002-context-Support-config-file-option-proxy_auth_method.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1614686401">- Fix dependency for repo-config-zypp subpackage to work with SLE</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1618315200">- Update to 0.62.0
  + Change order of TransactionItemReason (rh#1921063)
  + Add two new comperators for security filters (rh#1918475)
  + Apply security filters for candidates with lower priority
  + Fix: Goal - translation of messages in global maps
  + Enhance description of modular solvables
  + Improve performance for module query
  + Change mechanism of modular errata applicability (rh#1804234)
  + dnf_transaction_commit(): Remove second call to rpmtsSetVSFlags
  + Fix a couple of memory leaks
  + Fix: Setting of librepo handle in newHandle function
  + Remove failsafe data when module is not enabled (rh#1847035)
  + Expose librepo's checksum functions via SWIG
  + Fix: Mising check of "hy_split_nevra()" return code
  + Do not allow 1 as installonly_limit value (rh#1926261)
  + Fix check whether the subkey can be used for signing
  + Hardening: add signature check with rpmcliVerifySignatures
    (CVE-2021-3445, CVE-2021-3421, CVE-2021-20271, rh#1932079, rh#1932089, rh#1932090, boo#1183779)
  + Add a config option sslverifystatus, defaults to false (rh#1814383)
  + [context] Add API for distro-sync</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1618488000">- Add patch to fix crash when loading DVD repositories
  + Patch: 0001-Fix-a-crash-when-repoId-not-found-in-loaded-conf-gke.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1630065600">- Update to 0.63.1
  + ModuleProfile: add isDefault()
  + ModulePackage: add getDefaultProfile()
  + Add new dnf_context_module_install() C API
  + Fix a crash when [media] section in .treeinfo is missing for bootable media (rh#1946024)
  + Add hy_query_get_advisory_pkgs to C API (rh#1960561)
  + Add dnf_advisorypkg_get_advisory()
  + DNF does not fail on non UTF-8 file names in a package (rh#1893176)
  + Improve error-reporting for modular functions
- Drop patch included in this release
  + Patch: 0001-Fix-a-crash-when-repoId-not-found-in-loaded-conf-gke.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1635940800">- Update to 0.65.0
  + Add support for excluding packages to be installed as weak dependencies
  + Add support for autodetecting packages to be excluded from being installed as weak dependencies
  + Turn off strict validation of modulemd documents (rh#2004853, rh#2007166, rh#2007167)
  + Implement logic for demodularization of modular rpms (rh#1805260)
  + DnfContext: fix handling of default module profiles
  + ModuleMetadata: gracefully handle modules with no defaults
  + Remove failovermethod config option (rh#1961083)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1647259200">- Skip rich deps for autodetection of unmet dependencies (rh#2033130)
  + Patch: 0001-Skip-rich-deps-for-autodetection-of-unmet-dependencies.patch</changelog>
</package>
<package pkgid="08d89822be1ad37ae70d4a567d3c6d2af8a095fc4fd33c41922d2108dc02a72f" name="python3-librepo" arch="aarch64">
  <version epoch="0" ver="1.14.2" rel="bp154.2.1"/>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1487592000">- Update to 1.7.20</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1502625600">- Disable running unit tests by default because of random pygpgme failures</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1515067200">- Upgrade to 1.8.1
  + Fix memory leaks in Python bindings (gh#rpm-software-management/librepo#83)
  + Fix HTTP header checking to work with proxies (gh#rpm-software-management/librepo#86)
  + Change connection and low-speed default timeouts to sync with DNF/Yum
  + Fix max download speed from repo (rh#1227921)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1536840000">- Backport fix from upstream to use glibc's xattr instead of libattr
  * Add patch: 0001-stop-requiring-attr-xattr.patch
- Use full author identities in changelog entries</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1536840001">- Fix RPM groups. Update descriptions so that librepo0
  (which is going to be installed most of the time) has something
  halfway useful.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1549195200">- Upgrade to 1.9.3
  + Replace expat with libxml2
  + Support using python-gpg instead of pygpgme
  + Fix major performance regression with libcurl-7.61.1
  + Add zchunk support
- Drop patch for backported fix that is part of this release
  * Patch: 0001-stop-requiring-attr-xattr.patch
- Add patch proposed upstream to fix progress reporting for zck
  * Patch: PR138-Fix-progress-reporting-with-zchunk-files.patch
- Fix RPM group and description for Python 3 subpackage
- Drop Python 2 subpackage</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1554033600">- Upgrade to 1.9.6
  + Fix progress reporting with zchunk files
  + Reduce download delays by using still_running correctly
  + Improve error handling, cleanup
  + Simplified lr_perform()'s loop to prevent busy wait
  + Require libcurl &gt;= 7.28.0
- Drop patch included in this release
  * Patch: PR138-Fix-progress-reporting-with-zchunk-files.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1554033601">- Add patch to fix fetching zck-compressed repos (rh#1694411)
  * Patch: librepo-PR148-clean-up-curl-target_handle.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1557489600">- Upgrade to 1.10.1
  + Clean up target-&gt;curl_handle rather than target-&gt;handle (rh#1694411)
  + Add an option to preserve timestamps of the downloaded files (rh#1688537)
  + Fix fetching repositories supplied by SUSE Customer Center
  + [tests] Wait for server to start instead of doing arbitrary sleep
- Drop patch included in this release
  * Patch: librepo-PR148-clean-up-curl-target_handle.patch
- Disable executing test suite on ARM and RISC-V due to performance issues with builders</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1557662400">- Upgrade to 1.10.2
  + Fix librepo isn't able to load zchunk files from next server on failure (rh#1706321)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1558699200">- Upgrade to 1.10.3
  + Exit gpg-agent after repokey import (rh#1650266)
  + Make sure to check next transfer if current zck transfer already exists (rh#1706627)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1575201600">- Upgrade to 1.11.0
  + Define LRO_SUPPORTS_CACHEDIR only with zchunk (rh#1726141)
  + Allow to use mirrors multiple times for a target (rh#1678588)
  + Allow to try baseurl multiple times (rh#1678588)
  + Remove librepo xattr when no file descriptor (rh#1690894)
  + Fix verification of checksum from file attr (rh#1700341)
  + Rephrase repository GPG check error message (rh#1741442)
  + Add sleep when all mirrors were tried (rh#1741931)
  + Raise logging level of error messages (rh#1737709)
  + retry mirrorlist/metalink downloads
  + Fix lr_url_substitute() and add ${variable} support
  + Add support for one-time URL flags
  + Fix API - LrHandleOption enum - LRO_ONETIMEFLAG (rh#1761779)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1576324800">- Upgrade to 1.11.1
  + Create a directory for gpg sockets in /run/user/ (rh#1769831, rh#1771012)
- Fix bcond declaration for zchunk so defaults are always declared</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Upgrade to 1.11.2
  + Fix calling Python API without holding GIL (rh#1788918)
  + Do not unref LrErr_Exception on exit (rh#1778854)
  + Cleanup zchunk-related error messages (rh#1790625)
- Fix typo in changes entry about version update to 1.11.1</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1594123200">- Upgrade to 1.12.0
  + Prefer mirrorlist/metalink over baseurl (rh#1775184)
  + Decode package URL when using for local filename (rh#1817130)
  + Fix memory leak in lr_download_metadata() and lr_yum_download_remote()
  + Download sources work when at least one of specified is working (rh#1775184)</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1597924800">- Add validate_path.patch to prevent directory traversal attacks
  (boo#1175475, CVE-2020-14352)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1598097600">- Upgrade to 1.12.1
  + Validate path read from repomd.xml (rh#1868639, CVE-2020-14352)
- Dropped validate_path.patch to prevent directory traversal attacks
  (boo#1175475, CVE-2020-14352) since it is upstream with version 1.12.1</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1612353600">- Update to 1.13.0
  + Fix the key string parsing in url_substitution
  + Fix memory leak in 'fastestmirror'
  + Download whole file when server doesn't support ranges (rh#1886706)
  + Various fixes for mirrors without ranges support and zchunk
  + Add support for pkcs11 certificate and key for repository authorization (rh#1859495)
  + Fix lr_perform() - Avoid 100% CPU usage
  + Drop Python 2 support
  + Add support for working with certificates used with proxy (rh#1920991)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1618315200">- Update to 1.14.0
  + Fix LRO_PRESERVETIME behavior
  + Support multiple checksums in xattr (rh#1931904)
  + Return "calculated" checksum if requested w/caching
  + Fix lr_yum_download_url in case lr_handle is NULL</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1629892800">- Update to 1.14.2
  + Recover from fsync fail on read-only filesystem (rh#1956361)
  + Reduce time to load metadata
  + Fix resource leaks
  + Fix memory leaks</changelog>
</package>
<package pkgid="4e9ba7e81134d18f7d86996bf3278c346abad20f99be81f1d2f451cef95ad146" name="python3-librepo" arch="i586">
  <version epoch="0" ver="1.14.2" rel="bp154.2.1"/>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1487592000">- Update to 1.7.20</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1502625600">- Disable running unit tests by default because of random pygpgme failures</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1515067200">- Upgrade to 1.8.1
  + Fix memory leaks in Python bindings (gh#rpm-software-management/librepo#83)
  + Fix HTTP header checking to work with proxies (gh#rpm-software-management/librepo#86)
  + Change connection and low-speed default timeouts to sync with DNF/Yum
  + Fix max download speed from repo (rh#1227921)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1536840000">- Backport fix from upstream to use glibc's xattr instead of libattr
  * Add patch: 0001-stop-requiring-attr-xattr.patch
- Use full author identities in changelog entries</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1536840001">- Fix RPM groups. Update descriptions so that librepo0
  (which is going to be installed most of the time) has something
  halfway useful.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1549195200">- Upgrade to 1.9.3
  + Replace expat with libxml2
  + Support using python-gpg instead of pygpgme
  + Fix major performance regression with libcurl-7.61.1
  + Add zchunk support
- Drop patch for backported fix that is part of this release
  * Patch: 0001-stop-requiring-attr-xattr.patch
- Add patch proposed upstream to fix progress reporting for zck
  * Patch: PR138-Fix-progress-reporting-with-zchunk-files.patch
- Fix RPM group and description for Python 3 subpackage
- Drop Python 2 subpackage</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1554033600">- Upgrade to 1.9.6
  + Fix progress reporting with zchunk files
  + Reduce download delays by using still_running correctly
  + Improve error handling, cleanup
  + Simplified lr_perform()'s loop to prevent busy wait
  + Require libcurl &gt;= 7.28.0
- Drop patch included in this release
  * Patch: PR138-Fix-progress-reporting-with-zchunk-files.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1554033601">- Add patch to fix fetching zck-compressed repos (rh#1694411)
  * Patch: librepo-PR148-clean-up-curl-target_handle.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1557489600">- Upgrade to 1.10.1
  + Clean up target-&gt;curl_handle rather than target-&gt;handle (rh#1694411)
  + Add an option to preserve timestamps of the downloaded files (rh#1688537)
  + Fix fetching repositories supplied by SUSE Customer Center
  + [tests] Wait for server to start instead of doing arbitrary sleep
- Drop patch included in this release
  * Patch: librepo-PR148-clean-up-curl-target_handle.patch
- Disable executing test suite on ARM and RISC-V due to performance issues with builders</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1557662400">- Upgrade to 1.10.2
  + Fix librepo isn't able to load zchunk files from next server on failure (rh#1706321)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1558699200">- Upgrade to 1.10.3
  + Exit gpg-agent after repokey import (rh#1650266)
  + Make sure to check next transfer if current zck transfer already exists (rh#1706627)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1575201600">- Upgrade to 1.11.0
  + Define LRO_SUPPORTS_CACHEDIR only with zchunk (rh#1726141)
  + Allow to use mirrors multiple times for a target (rh#1678588)
  + Allow to try baseurl multiple times (rh#1678588)
  + Remove librepo xattr when no file descriptor (rh#1690894)
  + Fix verification of checksum from file attr (rh#1700341)
  + Rephrase repository GPG check error message (rh#1741442)
  + Add sleep when all mirrors were tried (rh#1741931)
  + Raise logging level of error messages (rh#1737709)
  + retry mirrorlist/metalink downloads
  + Fix lr_url_substitute() and add ${variable} support
  + Add support for one-time URL flags
  + Fix API - LrHandleOption enum - LRO_ONETIMEFLAG (rh#1761779)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1576324800">- Upgrade to 1.11.1
  + Create a directory for gpg sockets in /run/user/ (rh#1769831, rh#1771012)
- Fix bcond declaration for zchunk so defaults are always declared</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Upgrade to 1.11.2
  + Fix calling Python API without holding GIL (rh#1788918)
  + Do not unref LrErr_Exception on exit (rh#1778854)
  + Cleanup zchunk-related error messages (rh#1790625)
- Fix typo in changes entry about version update to 1.11.1</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1594123200">- Upgrade to 1.12.0
  + Prefer mirrorlist/metalink over baseurl (rh#1775184)
  + Decode package URL when using for local filename (rh#1817130)
  + Fix memory leak in lr_download_metadata() and lr_yum_download_remote()
  + Download sources work when at least one of specified is working (rh#1775184)</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1597924800">- Add validate_path.patch to prevent directory traversal attacks
  (boo#1175475, CVE-2020-14352)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1598097600">- Upgrade to 1.12.1
  + Validate path read from repomd.xml (rh#1868639, CVE-2020-14352)
- Dropped validate_path.patch to prevent directory traversal attacks
  (boo#1175475, CVE-2020-14352) since it is upstream with version 1.12.1</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1612353600">- Update to 1.13.0
  + Fix the key string parsing in url_substitution
  + Fix memory leak in 'fastestmirror'
  + Download whole file when server doesn't support ranges (rh#1886706)
  + Various fixes for mirrors without ranges support and zchunk
  + Add support for pkcs11 certificate and key for repository authorization (rh#1859495)
  + Fix lr_perform() - Avoid 100% CPU usage
  + Drop Python 2 support
  + Add support for working with certificates used with proxy (rh#1920991)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1618315200">- Update to 1.14.0
  + Fix LRO_PRESERVETIME behavior
  + Support multiple checksums in xattr (rh#1931904)
  + Return "calculated" checksum if requested w/caching
  + Fix lr_yum_download_url in case lr_handle is NULL</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1629892800">- Update to 1.14.2
  + Recover from fsync fail on read-only filesystem (rh#1956361)
  + Reduce time to load metadata
  + Fix resource leaks
  + Fix memory leaks</changelog>
</package>
<package pkgid="e5ef43c798a816bd851503ced8b083ff67923d6b30fc27180771a2d533737a34" name="python3-librepo" arch="ppc64le">
  <version epoch="0" ver="1.14.2" rel="bp154.2.1"/>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1487592000">- Update to 1.7.20</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1502625600">- Disable running unit tests by default because of random pygpgme failures</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1515067200">- Upgrade to 1.8.1
  + Fix memory leaks in Python bindings (gh#rpm-software-management/librepo#83)
  + Fix HTTP header checking to work with proxies (gh#rpm-software-management/librepo#86)
  + Change connection and low-speed default timeouts to sync with DNF/Yum
  + Fix max download speed from repo (rh#1227921)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1536840000">- Backport fix from upstream to use glibc's xattr instead of libattr
  * Add patch: 0001-stop-requiring-attr-xattr.patch
- Use full author identities in changelog entries</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1536840001">- Fix RPM groups. Update descriptions so that librepo0
  (which is going to be installed most of the time) has something
  halfway useful.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1549195200">- Upgrade to 1.9.3
  + Replace expat with libxml2
  + Support using python-gpg instead of pygpgme
  + Fix major performance regression with libcurl-7.61.1
  + Add zchunk support
- Drop patch for backported fix that is part of this release
  * Patch: 0001-stop-requiring-attr-xattr.patch
- Add patch proposed upstream to fix progress reporting for zck
  * Patch: PR138-Fix-progress-reporting-with-zchunk-files.patch
- Fix RPM group and description for Python 3 subpackage
- Drop Python 2 subpackage</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1554033600">- Upgrade to 1.9.6
  + Fix progress reporting with zchunk files
  + Reduce download delays by using still_running correctly
  + Improve error handling, cleanup
  + Simplified lr_perform()'s loop to prevent busy wait
  + Require libcurl &gt;= 7.28.0
- Drop patch included in this release
  * Patch: PR138-Fix-progress-reporting-with-zchunk-files.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1554033601">- Add patch to fix fetching zck-compressed repos (rh#1694411)
  * Patch: librepo-PR148-clean-up-curl-target_handle.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1557489600">- Upgrade to 1.10.1
  + Clean up target-&gt;curl_handle rather than target-&gt;handle (rh#1694411)
  + Add an option to preserve timestamps of the downloaded files (rh#1688537)
  + Fix fetching repositories supplied by SUSE Customer Center
  + [tests] Wait for server to start instead of doing arbitrary sleep
- Drop patch included in this release
  * Patch: librepo-PR148-clean-up-curl-target_handle.patch
- Disable executing test suite on ARM and RISC-V due to performance issues with builders</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1557662400">- Upgrade to 1.10.2
  + Fix librepo isn't able to load zchunk files from next server on failure (rh#1706321)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1558699200">- Upgrade to 1.10.3
  + Exit gpg-agent after repokey import (rh#1650266)
  + Make sure to check next transfer if current zck transfer already exists (rh#1706627)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1575201600">- Upgrade to 1.11.0
  + Define LRO_SUPPORTS_CACHEDIR only with zchunk (rh#1726141)
  + Allow to use mirrors multiple times for a target (rh#1678588)
  + Allow to try baseurl multiple times (rh#1678588)
  + Remove librepo xattr when no file descriptor (rh#1690894)
  + Fix verification of checksum from file attr (rh#1700341)
  + Rephrase repository GPG check error message (rh#1741442)
  + Add sleep when all mirrors were tried (rh#1741931)
  + Raise logging level of error messages (rh#1737709)
  + retry mirrorlist/metalink downloads
  + Fix lr_url_substitute() and add ${variable} support
  + Add support for one-time URL flags
  + Fix API - LrHandleOption enum - LRO_ONETIMEFLAG (rh#1761779)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1576324800">- Upgrade to 1.11.1
  + Create a directory for gpg sockets in /run/user/ (rh#1769831, rh#1771012)
- Fix bcond declaration for zchunk so defaults are always declared</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Upgrade to 1.11.2
  + Fix calling Python API without holding GIL (rh#1788918)
  + Do not unref LrErr_Exception on exit (rh#1778854)
  + Cleanup zchunk-related error messages (rh#1790625)
- Fix typo in changes entry about version update to 1.11.1</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1594123200">- Upgrade to 1.12.0
  + Prefer mirrorlist/metalink over baseurl (rh#1775184)
  + Decode package URL when using for local filename (rh#1817130)
  + Fix memory leak in lr_download_metadata() and lr_yum_download_remote()
  + Download sources work when at least one of specified is working (rh#1775184)</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1597924800">- Add validate_path.patch to prevent directory traversal attacks
  (boo#1175475, CVE-2020-14352)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1598097600">- Upgrade to 1.12.1
  + Validate path read from repomd.xml (rh#1868639, CVE-2020-14352)
- Dropped validate_path.patch to prevent directory traversal attacks
  (boo#1175475, CVE-2020-14352) since it is upstream with version 1.12.1</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1612353600">- Update to 1.13.0
  + Fix the key string parsing in url_substitution
  + Fix memory leak in 'fastestmirror'
  + Download whole file when server doesn't support ranges (rh#1886706)
  + Various fixes for mirrors without ranges support and zchunk
  + Add support for pkcs11 certificate and key for repository authorization (rh#1859495)
  + Fix lr_perform() - Avoid 100% CPU usage
  + Drop Python 2 support
  + Add support for working with certificates used with proxy (rh#1920991)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1618315200">- Update to 1.14.0
  + Fix LRO_PRESERVETIME behavior
  + Support multiple checksums in xattr (rh#1931904)
  + Return "calculated" checksum if requested w/caching
  + Fix lr_yum_download_url in case lr_handle is NULL</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1629892800">- Update to 1.14.2
  + Recover from fsync fail on read-only filesystem (rh#1956361)
  + Reduce time to load metadata
  + Fix resource leaks
  + Fix memory leaks</changelog>
</package>
<package pkgid="5601f3e34bc463b06f0bbc65bec2a53de7455742f210d76ed43884e679db8136" name="python3-librepo" arch="s390x">
  <version epoch="0" ver="1.14.2" rel="bp154.2.1"/>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1487592000">- Update to 1.7.20</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1502625600">- Disable running unit tests by default because of random pygpgme failures</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1515067200">- Upgrade to 1.8.1
  + Fix memory leaks in Python bindings (gh#rpm-software-management/librepo#83)
  + Fix HTTP header checking to work with proxies (gh#rpm-software-management/librepo#86)
  + Change connection and low-speed default timeouts to sync with DNF/Yum
  + Fix max download speed from repo (rh#1227921)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1536840000">- Backport fix from upstream to use glibc's xattr instead of libattr
  * Add patch: 0001-stop-requiring-attr-xattr.patch
- Use full author identities in changelog entries</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1536840001">- Fix RPM groups. Update descriptions so that librepo0
  (which is going to be installed most of the time) has something
  halfway useful.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1549195200">- Upgrade to 1.9.3
  + Replace expat with libxml2
  + Support using python-gpg instead of pygpgme
  + Fix major performance regression with libcurl-7.61.1
  + Add zchunk support
- Drop patch for backported fix that is part of this release
  * Patch: 0001-stop-requiring-attr-xattr.patch
- Add patch proposed upstream to fix progress reporting for zck
  * Patch: PR138-Fix-progress-reporting-with-zchunk-files.patch
- Fix RPM group and description for Python 3 subpackage
- Drop Python 2 subpackage</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1554033600">- Upgrade to 1.9.6
  + Fix progress reporting with zchunk files
  + Reduce download delays by using still_running correctly
  + Improve error handling, cleanup
  + Simplified lr_perform()'s loop to prevent busy wait
  + Require libcurl &gt;= 7.28.0
- Drop patch included in this release
  * Patch: PR138-Fix-progress-reporting-with-zchunk-files.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1554033601">- Add patch to fix fetching zck-compressed repos (rh#1694411)
  * Patch: librepo-PR148-clean-up-curl-target_handle.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1557489600">- Upgrade to 1.10.1
  + Clean up target-&gt;curl_handle rather than target-&gt;handle (rh#1694411)
  + Add an option to preserve timestamps of the downloaded files (rh#1688537)
  + Fix fetching repositories supplied by SUSE Customer Center
  + [tests] Wait for server to start instead of doing arbitrary sleep
- Drop patch included in this release
  * Patch: librepo-PR148-clean-up-curl-target_handle.patch
- Disable executing test suite on ARM and RISC-V due to performance issues with builders</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1557662400">- Upgrade to 1.10.2
  + Fix librepo isn't able to load zchunk files from next server on failure (rh#1706321)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1558699200">- Upgrade to 1.10.3
  + Exit gpg-agent after repokey import (rh#1650266)
  + Make sure to check next transfer if current zck transfer already exists (rh#1706627)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1575201600">- Upgrade to 1.11.0
  + Define LRO_SUPPORTS_CACHEDIR only with zchunk (rh#1726141)
  + Allow to use mirrors multiple times for a target (rh#1678588)
  + Allow to try baseurl multiple times (rh#1678588)
  + Remove librepo xattr when no file descriptor (rh#1690894)
  + Fix verification of checksum from file attr (rh#1700341)
  + Rephrase repository GPG check error message (rh#1741442)
  + Add sleep when all mirrors were tried (rh#1741931)
  + Raise logging level of error messages (rh#1737709)
  + retry mirrorlist/metalink downloads
  + Fix lr_url_substitute() and add ${variable} support
  + Add support for one-time URL flags
  + Fix API - LrHandleOption enum - LRO_ONETIMEFLAG (rh#1761779)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1576324800">- Upgrade to 1.11.1
  + Create a directory for gpg sockets in /run/user/ (rh#1769831, rh#1771012)
- Fix bcond declaration for zchunk so defaults are always declared</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Upgrade to 1.11.2
  + Fix calling Python API without holding GIL (rh#1788918)
  + Do not unref LrErr_Exception on exit (rh#1778854)
  + Cleanup zchunk-related error messages (rh#1790625)
- Fix typo in changes entry about version update to 1.11.1</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1594123200">- Upgrade to 1.12.0
  + Prefer mirrorlist/metalink over baseurl (rh#1775184)
  + Decode package URL when using for local filename (rh#1817130)
  + Fix memory leak in lr_download_metadata() and lr_yum_download_remote()
  + Download sources work when at least one of specified is working (rh#1775184)</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1597924800">- Add validate_path.patch to prevent directory traversal attacks
  (boo#1175475, CVE-2020-14352)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1598097600">- Upgrade to 1.12.1
  + Validate path read from repomd.xml (rh#1868639, CVE-2020-14352)
- Dropped validate_path.patch to prevent directory traversal attacks
  (boo#1175475, CVE-2020-14352) since it is upstream with version 1.12.1</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1612353600">- Update to 1.13.0
  + Fix the key string parsing in url_substitution
  + Fix memory leak in 'fastestmirror'
  + Download whole file when server doesn't support ranges (rh#1886706)
  + Various fixes for mirrors without ranges support and zchunk
  + Add support for pkcs11 certificate and key for repository authorization (rh#1859495)
  + Fix lr_perform() - Avoid 100% CPU usage
  + Drop Python 2 support
  + Add support for working with certificates used with proxy (rh#1920991)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1618315200">- Update to 1.14.0
  + Fix LRO_PRESERVETIME behavior
  + Support multiple checksums in xattr (rh#1931904)
  + Return "calculated" checksum if requested w/caching
  + Fix lr_yum_download_url in case lr_handle is NULL</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1629892800">- Update to 1.14.2
  + Recover from fsync fail on read-only filesystem (rh#1956361)
  + Reduce time to load metadata
  + Fix resource leaks
  + Fix memory leaks</changelog>
</package>
<package pkgid="24837b49b5224cc1b6b11bae2b1de7b00638b62b17393bbb27d6e4ff05cd4c48" name="python3-librepo" arch="x86_64">
  <version epoch="0" ver="1.14.2" rel="bp154.2.1"/>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1487592000">- Update to 1.7.20</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1502625600">- Disable running unit tests by default because of random pygpgme failures</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1515067200">- Upgrade to 1.8.1
  + Fix memory leaks in Python bindings (gh#rpm-software-management/librepo#83)
  + Fix HTTP header checking to work with proxies (gh#rpm-software-management/librepo#86)
  + Change connection and low-speed default timeouts to sync with DNF/Yum
  + Fix max download speed from repo (rh#1227921)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1536840000">- Backport fix from upstream to use glibc's xattr instead of libattr
  * Add patch: 0001-stop-requiring-attr-xattr.patch
- Use full author identities in changelog entries</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1536840001">- Fix RPM groups. Update descriptions so that librepo0
  (which is going to be installed most of the time) has something
  halfway useful.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1549195200">- Upgrade to 1.9.3
  + Replace expat with libxml2
  + Support using python-gpg instead of pygpgme
  + Fix major performance regression with libcurl-7.61.1
  + Add zchunk support
- Drop patch for backported fix that is part of this release
  * Patch: 0001-stop-requiring-attr-xattr.patch
- Add patch proposed upstream to fix progress reporting for zck
  * Patch: PR138-Fix-progress-reporting-with-zchunk-files.patch
- Fix RPM group and description for Python 3 subpackage
- Drop Python 2 subpackage</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1554033600">- Upgrade to 1.9.6
  + Fix progress reporting with zchunk files
  + Reduce download delays by using still_running correctly
  + Improve error handling, cleanup
  + Simplified lr_perform()'s loop to prevent busy wait
  + Require libcurl &gt;= 7.28.0
- Drop patch included in this release
  * Patch: PR138-Fix-progress-reporting-with-zchunk-files.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1554033601">- Add patch to fix fetching zck-compressed repos (rh#1694411)
  * Patch: librepo-PR148-clean-up-curl-target_handle.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1557489600">- Upgrade to 1.10.1
  + Clean up target-&gt;curl_handle rather than target-&gt;handle (rh#1694411)
  + Add an option to preserve timestamps of the downloaded files (rh#1688537)
  + Fix fetching repositories supplied by SUSE Customer Center
  + [tests] Wait for server to start instead of doing arbitrary sleep
- Drop patch included in this release
  * Patch: librepo-PR148-clean-up-curl-target_handle.patch
- Disable executing test suite on ARM and RISC-V due to performance issues with builders</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1557662400">- Upgrade to 1.10.2
  + Fix librepo isn't able to load zchunk files from next server on failure (rh#1706321)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1558699200">- Upgrade to 1.10.3
  + Exit gpg-agent after repokey import (rh#1650266)
  + Make sure to check next transfer if current zck transfer already exists (rh#1706627)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1575201600">- Upgrade to 1.11.0
  + Define LRO_SUPPORTS_CACHEDIR only with zchunk (rh#1726141)
  + Allow to use mirrors multiple times for a target (rh#1678588)
  + Allow to try baseurl multiple times (rh#1678588)
  + Remove librepo xattr when no file descriptor (rh#1690894)
  + Fix verification of checksum from file attr (rh#1700341)
  + Rephrase repository GPG check error message (rh#1741442)
  + Add sleep when all mirrors were tried (rh#1741931)
  + Raise logging level of error messages (rh#1737709)
  + retry mirrorlist/metalink downloads
  + Fix lr_url_substitute() and add ${variable} support
  + Add support for one-time URL flags
  + Fix API - LrHandleOption enum - LRO_ONETIMEFLAG (rh#1761779)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1576324800">- Upgrade to 1.11.1
  + Create a directory for gpg sockets in /run/user/ (rh#1769831, rh#1771012)
- Fix bcond declaration for zchunk so defaults are always declared</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Upgrade to 1.11.2
  + Fix calling Python API without holding GIL (rh#1788918)
  + Do not unref LrErr_Exception on exit (rh#1778854)
  + Cleanup zchunk-related error messages (rh#1790625)
- Fix typo in changes entry about version update to 1.11.1</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1594123200">- Upgrade to 1.12.0
  + Prefer mirrorlist/metalink over baseurl (rh#1775184)
  + Decode package URL when using for local filename (rh#1817130)
  + Fix memory leak in lr_download_metadata() and lr_yum_download_remote()
  + Download sources work when at least one of specified is working (rh#1775184)</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1597924800">- Add validate_path.patch to prevent directory traversal attacks
  (boo#1175475, CVE-2020-14352)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1598097600">- Upgrade to 1.12.1
  + Validate path read from repomd.xml (rh#1868639, CVE-2020-14352)
- Dropped validate_path.patch to prevent directory traversal attacks
  (boo#1175475, CVE-2020-14352) since it is upstream with version 1.12.1</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1612353600">- Update to 1.13.0
  + Fix the key string parsing in url_substitution
  + Fix memory leak in 'fastestmirror'
  + Download whole file when server doesn't support ranges (rh#1886706)
  + Various fixes for mirrors without ranges support and zchunk
  + Add support for pkcs11 certificate and key for repository authorization (rh#1859495)
  + Fix lr_perform() - Avoid 100% CPU usage
  + Drop Python 2 support
  + Add support for working with certificates used with proxy (rh#1920991)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1618315200">- Update to 1.14.0
  + Fix LRO_PRESERVETIME behavior
  + Support multiple checksums in xattr (rh#1931904)
  + Return "calculated" checksum if requested w/caching
  + Fix lr_yum_download_url in case lr_handle is NULL</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1629892800">- Update to 1.14.2
  + Recover from fsync fail on read-only filesystem (rh#1956361)
  + Reduce time to load metadata
  + Fix resource leaks
  + Fix memory leaks</changelog>
</package>
<package pkgid="aa609f0a751b340b6294582d331f053bd928c2e1139d5707c9edb4e0d41f55c4" name="python3-mechanize" arch="noarch">
  <version epoch="0" ver="0.4.8" rel="bp154.2.3.1"/>
  <changelog author="jmatejek@suse.com" date="1503576000">- singlespec auto-conversion</changelog>
  <changelog author="mcepl@suse.com" date="1528977600">- Clean SPEC file (only py2k, but tests are enabled and run)</changelog>
  <changelog author="toddrme2178@gmail.com" date="1533556800">- Remove unneeded dependencies.</changelog>
  <changelog author="tchvatal@suse.com" date="1535544000">- Require full python2 as it needs SSL module</changelog>
  <changelog author="mcepl@suse.com" date="1547812800">- Upgrade to 0.4.0:
  * Python 3 compatibility
  * Add a finalize_request_headers callback to Browser to allow
    users full control of what headers are sent with every
    request
  * Preserve header ordering when making HTTP requests
  * Fix processing of http-equiv meta tags incorrectly lower casing
    the content
  * Fix error when a textbox contained within a form contains
    unicode characters
- Add missing BR for testing (Twisted and zope.interface)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554465600">- Update to 0.4.1:
  * A couple of python 3 specific fixes for servers with misisng robots.txt
    files and also errors when using basic/digest auth</changelog>
  <changelog author="Meera Belur &lt;mbelur@suse.com&gt;" date="1558094400">- Update to v0.4.2
  * A couple of python 3 specific fixes for proxy authorization and
    adding controls to forms</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568203200">- Update to 0.4.3:
  * When filling forms with unicode strings automatically encode them into
    the correct encoding fr the HTML page being viewed
  * Guess content type when uploading files if not specified
  * py3 compat - Have the version of simple cookies be 0 rather than None</changelog>
  <changelog author="Bogdano Arendartchuk &lt;BArendartchuk@suse.com&gt;" date="1573560000">- added missing dependencies: Twisted, zope.interface and html5lib</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1579694400">- Update to 0.4.5:
  * Add a set_html() method to the browser object
- Update to 0.4.4:
  * URLs passed into mechanize now automatically have URL unsafe
    characters percent encoded. This is necessary because newer
    versions of python disallow processing of URLs with unsafe
    characters. Note that this means values return by
    get_full_url(), get_selector() etc will be percent encoded.</changelog>
  <changelog author="Steve Kowalik &lt;steven.kowalik@suse.com&gt;" date="1643025600">- Update to 0.4.7 (bsc#1207242, CVE-2021-32837):
  * Fix the ~ character being percent escaped when sending URLs to servers.
  * Python 3.10 compatibility
  * Fix a bug in the regex used to parse www-authenticate headers that could
    lead to Denial-of-Service</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1658664000">- update to 0.4.8:
  * Handle mal-encoded robots.txt files more gracefully
  * Support HTTP 308 redirects</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1659268800">- Add python-mechanize-setup.cfg.patch to fix mechanize not
  found during build. (boo#1202003)</changelog>
  <changelog author="Ben Greiner &lt;code@bnavigator.de&gt;" date="1659355200">- Reference upstream patch in specfile for future updates
- Remove catchall in files section that would have found the
  mistake
- Update shebang fix commands
- Fix requirements
- Update description</changelog>
  <changelog author="Steve Kowalik &lt;steven.kowalik@suse.com&gt;" date="1665489600">- Remove unneeded BuildRequires on python.</changelog>
</package>
<package pkgid="445db44e66defbc8c32bc54d8d695c8fa7915fba95392a153a1dcc09b724b58c" name="python3-netgen" arch="aarch64">
  <version epoch="0" ver="6.2.2105" rel="bp154.2.3.1"/>
  <changelog author="adrian@suse.de" date="1465819200">- Using source service to follow git master (pre-6.1)
- use new oce instead of OpenCASCADE
- enable openmpi
- use fixes for rpath from Johannes Obermayer
  Sun Jan 23 2014 Torben Hansen &lt;build at sciomnis dot com&gt;
- Changed to upstream version</changelog>
  <changelog author="adrian@suse.de" date="1485864000">- enable python for openSUSE Tumbleweed</changelog>
  <changelog author="adrian@suse.de" date="1501243200">- switch to OpenCASCADE 7.1.0 and newer boost</changelog>
  <changelog author="adrian@suse.de" date="1510056000">- switch to OpenCASCADE 7.2.0</changelog>
  <changelog author="adrian@suse.de" date="1512734400">- move include files into /usr/include/netgen/
- use -fno-strict-aliasing
- add some extra header wrapper files missed by FreeCAD</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1552910400">- update to version 6.2.1810
  obsoletes:
    allow_fine_curves.patch
    occ-pi-constant.patch
    do_stl_init.patch
- switch to cmake, obsoletes AM_PROG_AR.patch
- use obs_scm, obsoletes svnfetch.sh and netgen.sh</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1552910401">- Remove ldconfig calls since there are only dlopened plugins,
  no standard libraries.
- Wrap description.
- Use convenient %make_install, and run fdupes.</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1552910402">- switch to gcc7</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1552910403">- Correct License:, netgen has always been LGPL-2.1-only.
- Package License file.
- Remove boost BuildRequires:, it is not used at all.
- Guard Requires: occt-devel in devel package with bcond, so it
  does not get pulled in if netgen is built without OpenCascade.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1553169600">- Fix build on ARM and PPC, only include immintrin.h when SSE is available</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1614600000">- update to version 6.2.2101
  * no changelog provided
- Properly split package: libraries (as required by e.g FreeCAD),
  python-bindings, examples and standalone GUI.
- Drop upstream fix_build.patch
- Replace 0001-Allow-compilation-on-archs-beyond-x86.patch
  with -DUSE_NATIVE_ARCH=OFF
- Fix build:
  * Add 0001-Disable-backtrace-generation.patch, do not call "nm"
    or "addr2line" from library.
  * Add 0001-Set-explicit-OBJECT-library-type-for-internal-togl.patch
  * Add 0001-Throw-in-case-enum-value-is-unhandled.patch
  * Disable -Wl,--no-undefined, libs have circular dependencies
  * Add 0001-Fix-GetTimeCounter-for-Aarch64-variants.patch
- Enable Catch2 unittests, add
  0001-Optionally-use-system-provided-Catch2.patch</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1620648000">- Exclude all 32bit archs, no longer supported upstream (fails to
  build).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1643284800">- update to version 6.2.2105
  * no changelog provided
- Drop upstream 0001-Fix-GetTimeCounter-for-Aarch64-variants.patch
- Add patches:
  * 0001-Optionally-prefer-system-wide-pybind11.patch
  * 0001-Throw-Exception-when-shape-has-invalid-type.patch
  * 0001-Fix-signedness-for-ARM-Neon-mask-type.patch</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1644235200">- Fix RUNPATH on Leap 15.x</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1646395200">- Fix RUNPATH also for Leap/SLE 15.4, which now uses
  CMAKE_SKIP_INSTALL_RPATH=ON by default.</changelog>
</package>
<package pkgid="3dc486e726010f17a27990a3e6277696122c011ca2c56184a2fc066fbf03b92a" name="python3-netgen" arch="ppc64le">
  <version epoch="0" ver="6.2.2105" rel="bp154.2.3.1"/>
  <changelog author="adrian@suse.de" date="1465819200">- Using source service to follow git master (pre-6.1)
- use new oce instead of OpenCASCADE
- enable openmpi
- use fixes for rpath from Johannes Obermayer
  Sun Jan 23 2014 Torben Hansen &lt;build at sciomnis dot com&gt;
- Changed to upstream version</changelog>
  <changelog author="adrian@suse.de" date="1485864000">- enable python for openSUSE Tumbleweed</changelog>
  <changelog author="adrian@suse.de" date="1501243200">- switch to OpenCASCADE 7.1.0 and newer boost</changelog>
  <changelog author="adrian@suse.de" date="1510056000">- switch to OpenCASCADE 7.2.0</changelog>
  <changelog author="adrian@suse.de" date="1512734400">- move include files into /usr/include/netgen/
- use -fno-strict-aliasing
- add some extra header wrapper files missed by FreeCAD</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1552910400">- update to version 6.2.1810
  obsoletes:
    allow_fine_curves.patch
    occ-pi-constant.patch
    do_stl_init.patch
- switch to cmake, obsoletes AM_PROG_AR.patch
- use obs_scm, obsoletes svnfetch.sh and netgen.sh</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1552910401">- Remove ldconfig calls since there are only dlopened plugins,
  no standard libraries.
- Wrap description.
- Use convenient %make_install, and run fdupes.</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1552910402">- switch to gcc7</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1552910403">- Correct License:, netgen has always been LGPL-2.1-only.
- Package License file.
- Remove boost BuildRequires:, it is not used at all.
- Guard Requires: occt-devel in devel package with bcond, so it
  does not get pulled in if netgen is built without OpenCascade.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1553169600">- Fix build on ARM and PPC, only include immintrin.h when SSE is available</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1614600000">- update to version 6.2.2101
  * no changelog provided
- Properly split package: libraries (as required by e.g FreeCAD),
  python-bindings, examples and standalone GUI.
- Drop upstream fix_build.patch
- Replace 0001-Allow-compilation-on-archs-beyond-x86.patch
  with -DUSE_NATIVE_ARCH=OFF
- Fix build:
  * Add 0001-Disable-backtrace-generation.patch, do not call "nm"
    or "addr2line" from library.
  * Add 0001-Set-explicit-OBJECT-library-type-for-internal-togl.patch
  * Add 0001-Throw-in-case-enum-value-is-unhandled.patch
  * Disable -Wl,--no-undefined, libs have circular dependencies
  * Add 0001-Fix-GetTimeCounter-for-Aarch64-variants.patch
- Enable Catch2 unittests, add
  0001-Optionally-use-system-provided-Catch2.patch</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1620648000">- Exclude all 32bit archs, no longer supported upstream (fails to
  build).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1643284800">- update to version 6.2.2105
  * no changelog provided
- Drop upstream 0001-Fix-GetTimeCounter-for-Aarch64-variants.patch
- Add patches:
  * 0001-Optionally-prefer-system-wide-pybind11.patch
  * 0001-Throw-Exception-when-shape-has-invalid-type.patch
  * 0001-Fix-signedness-for-ARM-Neon-mask-type.patch</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1644235200">- Fix RUNPATH on Leap 15.x</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1646395200">- Fix RUNPATH also for Leap/SLE 15.4, which now uses
  CMAKE_SKIP_INSTALL_RPATH=ON by default.</changelog>
</package>
<package pkgid="a5354243c765fd89896ff80e86ec8d658b90a02b7535150b33889e4052874aa7" name="python3-netgen" arch="s390x">
  <version epoch="0" ver="6.2.2105" rel="bp154.2.3.1"/>
  <changelog author="adrian@suse.de" date="1465819200">- Using source service to follow git master (pre-6.1)
- use new oce instead of OpenCASCADE
- enable openmpi
- use fixes for rpath from Johannes Obermayer
  Sun Jan 23 2014 Torben Hansen &lt;build at sciomnis dot com&gt;
- Changed to upstream version</changelog>
  <changelog author="adrian@suse.de" date="1485864000">- enable python for openSUSE Tumbleweed</changelog>
  <changelog author="adrian@suse.de" date="1501243200">- switch to OpenCASCADE 7.1.0 and newer boost</changelog>
  <changelog author="adrian@suse.de" date="1510056000">- switch to OpenCASCADE 7.2.0</changelog>
  <changelog author="adrian@suse.de" date="1512734400">- move include files into /usr/include/netgen/
- use -fno-strict-aliasing
- add some extra header wrapper files missed by FreeCAD</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1552910400">- update to version 6.2.1810
  obsoletes:
    allow_fine_curves.patch
    occ-pi-constant.patch
    do_stl_init.patch
- switch to cmake, obsoletes AM_PROG_AR.patch
- use obs_scm, obsoletes svnfetch.sh and netgen.sh</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1552910401">- Remove ldconfig calls since there are only dlopened plugins,
  no standard libraries.
- Wrap description.
- Use convenient %make_install, and run fdupes.</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1552910402">- switch to gcc7</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1552910403">- Correct License:, netgen has always been LGPL-2.1-only.
- Package License file.
- Remove boost BuildRequires:, it is not used at all.
- Guard Requires: occt-devel in devel package with bcond, so it
  does not get pulled in if netgen is built without OpenCascade.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1553169600">- Fix build on ARM and PPC, only include immintrin.h when SSE is available</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1614600000">- update to version 6.2.2101
  * no changelog provided
- Properly split package: libraries (as required by e.g FreeCAD),
  python-bindings, examples and standalone GUI.
- Drop upstream fix_build.patch
- Replace 0001-Allow-compilation-on-archs-beyond-x86.patch
  with -DUSE_NATIVE_ARCH=OFF
- Fix build:
  * Add 0001-Disable-backtrace-generation.patch, do not call "nm"
    or "addr2line" from library.
  * Add 0001-Set-explicit-OBJECT-library-type-for-internal-togl.patch
  * Add 0001-Throw-in-case-enum-value-is-unhandled.patch
  * Disable -Wl,--no-undefined, libs have circular dependencies
  * Add 0001-Fix-GetTimeCounter-for-Aarch64-variants.patch
- Enable Catch2 unittests, add
  0001-Optionally-use-system-provided-Catch2.patch</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1620648000">- Exclude all 32bit archs, no longer supported upstream (fails to
  build).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1643284800">- update to version 6.2.2105
  * no changelog provided
- Drop upstream 0001-Fix-GetTimeCounter-for-Aarch64-variants.patch
- Add patches:
  * 0001-Optionally-prefer-system-wide-pybind11.patch
  * 0001-Throw-Exception-when-shape-has-invalid-type.patch
  * 0001-Fix-signedness-for-ARM-Neon-mask-type.patch</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1644235200">- Fix RUNPATH on Leap 15.x</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1646395200">- Fix RUNPATH also for Leap/SLE 15.4, which now uses
  CMAKE_SKIP_INSTALL_RPATH=ON by default.</changelog>
</package>
<package pkgid="3e8a647557f13357475298cb19710d00097456992b27a7d1d67c36b5d49b2c46" name="python3-netgen" arch="x86_64">
  <version epoch="0" ver="6.2.2105" rel="bp154.2.3.1"/>
  <changelog author="adrian@suse.de" date="1465819200">- Using source service to follow git master (pre-6.1)
- use new oce instead of OpenCASCADE
- enable openmpi
- use fixes for rpath from Johannes Obermayer
  Sun Jan 23 2014 Torben Hansen &lt;build at sciomnis dot com&gt;
- Changed to upstream version</changelog>
  <changelog author="adrian@suse.de" date="1485864000">- enable python for openSUSE Tumbleweed</changelog>
  <changelog author="adrian@suse.de" date="1501243200">- switch to OpenCASCADE 7.1.0 and newer boost</changelog>
  <changelog author="adrian@suse.de" date="1510056000">- switch to OpenCASCADE 7.2.0</changelog>
  <changelog author="adrian@suse.de" date="1512734400">- move include files into /usr/include/netgen/
- use -fno-strict-aliasing
- add some extra header wrapper files missed by FreeCAD</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1552910400">- update to version 6.2.1810
  obsoletes:
    allow_fine_curves.patch
    occ-pi-constant.patch
    do_stl_init.patch
- switch to cmake, obsoletes AM_PROG_AR.patch
- use obs_scm, obsoletes svnfetch.sh and netgen.sh</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1552910401">- Remove ldconfig calls since there are only dlopened plugins,
  no standard libraries.
- Wrap description.
- Use convenient %make_install, and run fdupes.</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1552910402">- switch to gcc7</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1552910403">- Correct License:, netgen has always been LGPL-2.1-only.
- Package License file.
- Remove boost BuildRequires:, it is not used at all.
- Guard Requires: occt-devel in devel package with bcond, so it
  does not get pulled in if netgen is built without OpenCascade.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1553169600">- Fix build on ARM and PPC, only include immintrin.h when SSE is available</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1614600000">- update to version 6.2.2101
  * no changelog provided
- Properly split package: libraries (as required by e.g FreeCAD),
  python-bindings, examples and standalone GUI.
- Drop upstream fix_build.patch
- Replace 0001-Allow-compilation-on-archs-beyond-x86.patch
  with -DUSE_NATIVE_ARCH=OFF
- Fix build:
  * Add 0001-Disable-backtrace-generation.patch, do not call "nm"
    or "addr2line" from library.
  * Add 0001-Set-explicit-OBJECT-library-type-for-internal-togl.patch
  * Add 0001-Throw-in-case-enum-value-is-unhandled.patch
  * Disable -Wl,--no-undefined, libs have circular dependencies
  * Add 0001-Fix-GetTimeCounter-for-Aarch64-variants.patch
- Enable Catch2 unittests, add
  0001-Optionally-use-system-provided-Catch2.patch</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1620648000">- Exclude all 32bit archs, no longer supported upstream (fails to
  build).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1643284800">- update to version 6.2.2105
  * no changelog provided
- Drop upstream 0001-Fix-GetTimeCounter-for-Aarch64-variants.patch
- Add patches:
  * 0001-Optionally-prefer-system-wide-pybind11.patch
  * 0001-Throw-Exception-when-shape-has-invalid-type.patch
  * 0001-Fix-signedness-for-ARM-Neon-mask-type.patch</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1644235200">- Fix RUNPATH on Leap 15.x</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1646395200">- Fix RUNPATH also for Leap/SLE 15.4, which now uses
  CMAKE_SKIP_INSTALL_RPATH=ON by default.</changelog>
</package>
<package pkgid="cfea961b1538739a0981a587475301bd5ff1f400cf278c36cf923e51e233de48" name="python3-pivy" arch="aarch64">
  <version epoch="0" ver="0.6.7" rel="bp154.2.3.1"/>
  <changelog author="kkaempf@suse.com" date="1505390400">- update to 0.6.2
  * builds for python3 (linux: 3.4, 3.5, 3.6; win: 3.5, 3.6)
    or python2 (2.7)
  * uses pyside instead of pyqt for soqt4 bindings
  * has many fixes (especially for FreeCAD)
- switch to github.com/FreeCAD/pivy, coin3d.org is dead</changelog>
  <changelog author="badshah400@gmail.com" date="1513425600">- Convert specfile to python-singlespec: fixes build failures in
  Factory. Doesn't build against python2 for unknown reasons, so
  turn off python2 modules until this is fixed.
- Use fdupes (added to BuildRequires) to link duplicate files.</changelog>
  <changelog author="dev@stellardeath.org" date="1514980800">- Fix build failure when using more than one python version:
  swig wrapper files were only generated the first time and
  and then kept for subsequent builds.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1539086400">- Update to 0.6.3
  * qt5-support (qt4 not supported anymore)
- Update to 0.6.4
  * bool(coin.SoGroup) -&gt; True (also if group is empty) [same behaviour as py2]
  * add graphics arrow object
  * making it possible to compile with older coin version (without cmake) -&gt; setup_old.py
  * adding back qt4 compatibility (but tests are still qt5 depenent)
  * added pivy.version
  * some fixes
- %python_expand call to fdupes</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1549281600">- Add Fix-issue-39-PyUnicode_AsUTF8-returns-const-char.patch to fix
  build in Factory</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1557748800">- Add 0001-Allow-using-SoQt-snapshots-with-stable-Coin-version.patch
  This will allow using SoQt snapshots with stable Coin releases.
- Add 0002-Fix-the-qmake-executable-name.patch. The qmake executable
  is called qmake-qt5 for openSUSE.
- Run spec-cleaner</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1584187200">- Update to 0.6.5
  - Unifying release for merge of FreeCAD/pivy and
    bitbucket.org/coin3d/pivy repos
  - change pivy.graphics API to follow pep8 naming scheme
    suggestion.
  - workaround for beveled text
  - swig4.0 fix
  - update to latest coin (additional fakeheaders)
  - example Complex3dText: add license and shebang
    this was unintentional removed at some point
- Remove Fix-issue-39-PyUnicode_AsUTF8-returns-const-char.patch
  applied upstream
- 0001-Allow-using-SoQt-snapshots-with-stable-Coin-version.patch
  adjusted</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1588852800">- Use correct macro %{python_version} instead of %{py_ver} to
  pack egg-info file.
- Drop macro definitions needed for obsolete openSUSE versions.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1645617600">- Update to 0.6.6:
  * finalizing cmake support
  * adding bindings to SoGeo*
- Drop 0001-Allow-using-SoQt-snapshots-with-stable-Coin-version.patch
- Use arch specific directory, add fix_python_installdir.patch
- Use cmake for building, drop
  0002-Fix-the-qmake-executable-name.patch.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1647000000">- Fix name of python interpreter executables (python3.8 instead of
  python38).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1647259200">- Fix one more case where sed env python was replaced with
  python38 instead of python3.8.</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1651492800">- Update to 0.6.7:
  * aiming at python3.10 support
- Remove upstreamed fix_python_installdir.patch</changelog>
</package>
<package pkgid="eba381c263b987ca937975659140adb05d007bd2de16ebfc5e527133d0964cb4" name="python3-pivy" arch="ppc64le">
  <version epoch="0" ver="0.6.7" rel="bp154.2.3.1"/>
  <changelog author="kkaempf@suse.com" date="1505390400">- update to 0.6.2
  * builds for python3 (linux: 3.4, 3.5, 3.6; win: 3.5, 3.6)
    or python2 (2.7)
  * uses pyside instead of pyqt for soqt4 bindings
  * has many fixes (especially for FreeCAD)
- switch to github.com/FreeCAD/pivy, coin3d.org is dead</changelog>
  <changelog author="badshah400@gmail.com" date="1513425600">- Convert specfile to python-singlespec: fixes build failures in
  Factory. Doesn't build against python2 for unknown reasons, so
  turn off python2 modules until this is fixed.
- Use fdupes (added to BuildRequires) to link duplicate files.</changelog>
  <changelog author="dev@stellardeath.org" date="1514980800">- Fix build failure when using more than one python version:
  swig wrapper files were only generated the first time and
  and then kept for subsequent builds.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1539086400">- Update to 0.6.3
  * qt5-support (qt4 not supported anymore)
- Update to 0.6.4
  * bool(coin.SoGroup) -&gt; True (also if group is empty) [same behaviour as py2]
  * add graphics arrow object
  * making it possible to compile with older coin version (without cmake) -&gt; setup_old.py
  * adding back qt4 compatibility (but tests are still qt5 depenent)
  * added pivy.version
  * some fixes
- %python_expand call to fdupes</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1549281600">- Add Fix-issue-39-PyUnicode_AsUTF8-returns-const-char.patch to fix
  build in Factory</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1557748800">- Add 0001-Allow-using-SoQt-snapshots-with-stable-Coin-version.patch
  This will allow using SoQt snapshots with stable Coin releases.
- Add 0002-Fix-the-qmake-executable-name.patch. The qmake executable
  is called qmake-qt5 for openSUSE.
- Run spec-cleaner</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1584187200">- Update to 0.6.5
  - Unifying release for merge of FreeCAD/pivy and
    bitbucket.org/coin3d/pivy repos
  - change pivy.graphics API to follow pep8 naming scheme
    suggestion.
  - workaround for beveled text
  - swig4.0 fix
  - update to latest coin (additional fakeheaders)
  - example Complex3dText: add license and shebang
    this was unintentional removed at some point
- Remove Fix-issue-39-PyUnicode_AsUTF8-returns-const-char.patch
  applied upstream
- 0001-Allow-using-SoQt-snapshots-with-stable-Coin-version.patch
  adjusted</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1588852800">- Use correct macro %{python_version} instead of %{py_ver} to
  pack egg-info file.
- Drop macro definitions needed for obsolete openSUSE versions.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1645617600">- Update to 0.6.6:
  * finalizing cmake support
  * adding bindings to SoGeo*
- Drop 0001-Allow-using-SoQt-snapshots-with-stable-Coin-version.patch
- Use arch specific directory, add fix_python_installdir.patch
- Use cmake for building, drop
  0002-Fix-the-qmake-executable-name.patch.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1647000000">- Fix name of python interpreter executables (python3.8 instead of
  python38).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1647259200">- Fix one more case where sed env python was replaced with
  python38 instead of python3.8.</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1651492800">- Update to 0.6.7:
  * aiming at python3.10 support
- Remove upstreamed fix_python_installdir.patch</changelog>
</package>
<package pkgid="94f8dc31b4f6d65f5bad302297c31b359135c87596d3c7d7a237dd3dec3d05f1" name="python3-pivy" arch="s390x">
  <version epoch="0" ver="0.6.7" rel="bp154.2.3.1"/>
  <changelog author="kkaempf@suse.com" date="1505390400">- update to 0.6.2
  * builds for python3 (linux: 3.4, 3.5, 3.6; win: 3.5, 3.6)
    or python2 (2.7)
  * uses pyside instead of pyqt for soqt4 bindings
  * has many fixes (especially for FreeCAD)
- switch to github.com/FreeCAD/pivy, coin3d.org is dead</changelog>
  <changelog author="badshah400@gmail.com" date="1513425600">- Convert specfile to python-singlespec: fixes build failures in
  Factory. Doesn't build against python2 for unknown reasons, so
  turn off python2 modules until this is fixed.
- Use fdupes (added to BuildRequires) to link duplicate files.</changelog>
  <changelog author="dev@stellardeath.org" date="1514980800">- Fix build failure when using more than one python version:
  swig wrapper files were only generated the first time and
  and then kept for subsequent builds.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1539086400">- Update to 0.6.3
  * qt5-support (qt4 not supported anymore)
- Update to 0.6.4
  * bool(coin.SoGroup) -&gt; True (also if group is empty) [same behaviour as py2]
  * add graphics arrow object
  * making it possible to compile with older coin version (without cmake) -&gt; setup_old.py
  * adding back qt4 compatibility (but tests are still qt5 depenent)
  * added pivy.version
  * some fixes
- %python_expand call to fdupes</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1549281600">- Add Fix-issue-39-PyUnicode_AsUTF8-returns-const-char.patch to fix
  build in Factory</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1557748800">- Add 0001-Allow-using-SoQt-snapshots-with-stable-Coin-version.patch
  This will allow using SoQt snapshots with stable Coin releases.
- Add 0002-Fix-the-qmake-executable-name.patch. The qmake executable
  is called qmake-qt5 for openSUSE.
- Run spec-cleaner</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1584187200">- Update to 0.6.5
  - Unifying release for merge of FreeCAD/pivy and
    bitbucket.org/coin3d/pivy repos
  - change pivy.graphics API to follow pep8 naming scheme
    suggestion.
  - workaround for beveled text
  - swig4.0 fix
  - update to latest coin (additional fakeheaders)
  - example Complex3dText: add license and shebang
    this was unintentional removed at some point
- Remove Fix-issue-39-PyUnicode_AsUTF8-returns-const-char.patch
  applied upstream
- 0001-Allow-using-SoQt-snapshots-with-stable-Coin-version.patch
  adjusted</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1588852800">- Use correct macro %{python_version} instead of %{py_ver} to
  pack egg-info file.
- Drop macro definitions needed for obsolete openSUSE versions.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1645617600">- Update to 0.6.6:
  * finalizing cmake support
  * adding bindings to SoGeo*
- Drop 0001-Allow-using-SoQt-snapshots-with-stable-Coin-version.patch
- Use arch specific directory, add fix_python_installdir.patch
- Use cmake for building, drop
  0002-Fix-the-qmake-executable-name.patch.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1647000000">- Fix name of python interpreter executables (python3.8 instead of
  python38).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1647259200">- Fix one more case where sed env python was replaced with
  python38 instead of python3.8.</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1651492800">- Update to 0.6.7:
  * aiming at python3.10 support
- Remove upstreamed fix_python_installdir.patch</changelog>
</package>
<package pkgid="f92349149ed17f91d790b9954b9dbfc5b520780bae080dcf590fd1890f813d52" name="python3-pivy" arch="x86_64">
  <version epoch="0" ver="0.6.7" rel="bp154.2.3.1"/>
  <changelog author="kkaempf@suse.com" date="1505390400">- update to 0.6.2
  * builds for python3 (linux: 3.4, 3.5, 3.6; win: 3.5, 3.6)
    or python2 (2.7)
  * uses pyside instead of pyqt for soqt4 bindings
  * has many fixes (especially for FreeCAD)
- switch to github.com/FreeCAD/pivy, coin3d.org is dead</changelog>
  <changelog author="badshah400@gmail.com" date="1513425600">- Convert specfile to python-singlespec: fixes build failures in
  Factory. Doesn't build against python2 for unknown reasons, so
  turn off python2 modules until this is fixed.
- Use fdupes (added to BuildRequires) to link duplicate files.</changelog>
  <changelog author="dev@stellardeath.org" date="1514980800">- Fix build failure when using more than one python version:
  swig wrapper files were only generated the first time and
  and then kept for subsequent builds.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1539086400">- Update to 0.6.3
  * qt5-support (qt4 not supported anymore)
- Update to 0.6.4
  * bool(coin.SoGroup) -&gt; True (also if group is empty) [same behaviour as py2]
  * add graphics arrow object
  * making it possible to compile with older coin version (without cmake) -&gt; setup_old.py
  * adding back qt4 compatibility (but tests are still qt5 depenent)
  * added pivy.version
  * some fixes
- %python_expand call to fdupes</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1549281600">- Add Fix-issue-39-PyUnicode_AsUTF8-returns-const-char.patch to fix
  build in Factory</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1557748800">- Add 0001-Allow-using-SoQt-snapshots-with-stable-Coin-version.patch
  This will allow using SoQt snapshots with stable Coin releases.
- Add 0002-Fix-the-qmake-executable-name.patch. The qmake executable
  is called qmake-qt5 for openSUSE.
- Run spec-cleaner</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1584187200">- Update to 0.6.5
  - Unifying release for merge of FreeCAD/pivy and
    bitbucket.org/coin3d/pivy repos
  - change pivy.graphics API to follow pep8 naming scheme
    suggestion.
  - workaround for beveled text
  - swig4.0 fix
  - update to latest coin (additional fakeheaders)
  - example Complex3dText: add license and shebang
    this was unintentional removed at some point
- Remove Fix-issue-39-PyUnicode_AsUTF8-returns-const-char.patch
  applied upstream
- 0001-Allow-using-SoQt-snapshots-with-stable-Coin-version.patch
  adjusted</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1588852800">- Use correct macro %{python_version} instead of %{py_ver} to
  pack egg-info file.
- Drop macro definitions needed for obsolete openSUSE versions.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1645617600">- Update to 0.6.6:
  * finalizing cmake support
  * adding bindings to SoGeo*
- Drop 0001-Allow-using-SoQt-snapshots-with-stable-Coin-version.patch
- Use arch specific directory, add fix_python_installdir.patch
- Use cmake for building, drop
  0002-Fix-the-qmake-executable-name.patch.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1647000000">- Fix name of python interpreter executables (python3.8 instead of
  python38).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1647259200">- Fix one more case where sed env python was replaced with
  python38 instead of python3.8.</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1651492800">- Update to 0.6.7:
  * aiming at python3.10 support
- Remove upstreamed fix_python_installdir.patch</changelog>
</package>
<package pkgid="fbaf0bd197cce365d2249f144022335605c2594db9138072d06514aff71cd5b4" name="python3-slixmpp" arch="aarch64">
  <version epoch="0" ver="1.4.2" rel="bp154.2.3.1"/>
  <changelog author="sor.alexei@meowr.ru" date="1481371200">- Initial package.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1486814400">- Update to version 1.2.4:
  * Test more things before trying to build our stringprep module.
  * XMLStream: Break a long line to make it more readable.
  * Check for XML parsing errors and disconnect in that case.
  * Add missing asyncio.coroutine decorators.
  * Fix a partially-merged Google plugin from the commit acc52fd.
  * Fix an issue with carbons (CVE-2017-5589, bsc#1024690).</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1516449600">- Update to version 1.3.0:
  * Implement XEP-0300: Use of Cryptographic Hash Functions in XMPP.
  * Return a Future on clientxmpp.get_roster().
  * Fix custom stanza examples.
  * Fix the HTTP over XMPP and GTalk examples.
  * xmlstream: Warn when the parser is None when data is received.
  * Add an XMPP classifier to setup.py.
  * sasl: Merge two bytes instead of concatenating them at runtime.
  * Fix the port being set to 0 when connecting via hostname.
  * Pass SSL context to plain TLS connections.
  * xmlstream: Remove pygments dumping.
  * XEP-0319: Use the correct timezone.
  * Update RSM for asyncio.
  * Update the MAM plugin for asyncio and the new namespace.
    And add an example.
  * XEP-0054: Fix parsing the BINVAL element.
  * Record the current connection attempt in a future and allow
    cancellation.
  * Add a Markup plugin.
- Add the missing requirement of GnuPG.
- Enable tests.</changelog>
  <changelog author="jengelh@inai.de" date="1518350400">- Trim future goals from description, say what it does now.</changelog>
  <changelog author="mcepl@suse.com" date="1532001600">- Clean SPEC file</changelog>
  <changelog author="mcepl@suse.com" date="1532088000">- Use python3 -munittest discover -v -s tests instead of run_tests.py</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1534248000">- Update to version 1.4.0:
  * No changelog available.
- Use python-rpm-macros.</changelog>
  <changelog author="mvetter@suse.com" date="1547208000">- Update 1.4.1:
  * jid: Make property aliases proper aliases.
  * stanzabase: Remove python2 legacy.
  * fixing uncaught async exceptions due to missing await
  * XEP-0363: Add a domain argument to discover an upload service
  * XEP-0363: Also check for disco#info?s feature
  * XEP-0030: Don?t call the timeout_callback on each domain
  * Decode bytes in GSSAPI handling, as expected by the kerberos module API
- Update source URL
- Add requires python3-aiohttp: was needed for XEP-0363 since 1.4.0</changelog>
  <changelog author="mvetter@suse.com" date="1547208001">- Change source URL from GH to https://lab.louiz.org as requested</changelog>
  <changelog author="mvetter@suse.com" date="1549368000">- Update to 1.4.2:
  * Do not do channel binding without TLS
  * Add default timeout of 120s for IQs (prevent slowdowns)
  * Fix CVE-2019-1000021 (bsc#1124322)
  * Do not query vcard avatars unconditionnally
  * Fix GSSAPI (Jelmer Vernoo?)</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1571054400">- Replace %fdupes -s with plain %fdupes; hardlinks are better.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1670328000">- bsc#1205433 (CVE-2022-45197) Fix certificate hostname validation
  * Add slixmpp-CVE-2022-45197.patch</changelog>
</package>
<package pkgid="41ae31bd9b0638a4c293cc3aef13e12c1bb84185e122db6c98b3af7a5ccc4306" name="python3-slixmpp" arch="i586">
  <version epoch="0" ver="1.4.2" rel="bp154.2.3.1"/>
  <changelog author="sor.alexei@meowr.ru" date="1481371200">- Initial package.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1486814400">- Update to version 1.2.4:
  * Test more things before trying to build our stringprep module.
  * XMLStream: Break a long line to make it more readable.
  * Check for XML parsing errors and disconnect in that case.
  * Add missing asyncio.coroutine decorators.
  * Fix a partially-merged Google plugin from the commit acc52fd.
  * Fix an issue with carbons (CVE-2017-5589, bsc#1024690).</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1516449600">- Update to version 1.3.0:
  * Implement XEP-0300: Use of Cryptographic Hash Functions in XMPP.
  * Return a Future on clientxmpp.get_roster().
  * Fix custom stanza examples.
  * Fix the HTTP over XMPP and GTalk examples.
  * xmlstream: Warn when the parser is None when data is received.
  * Add an XMPP classifier to setup.py.
  * sasl: Merge two bytes instead of concatenating them at runtime.
  * Fix the port being set to 0 when connecting via hostname.
  * Pass SSL context to plain TLS connections.
  * xmlstream: Remove pygments dumping.
  * XEP-0319: Use the correct timezone.
  * Update RSM for asyncio.
  * Update the MAM plugin for asyncio and the new namespace.
    And add an example.
  * XEP-0054: Fix parsing the BINVAL element.
  * Record the current connection attempt in a future and allow
    cancellation.
  * Add a Markup plugin.
- Add the missing requirement of GnuPG.
- Enable tests.</changelog>
  <changelog author="jengelh@inai.de" date="1518350400">- Trim future goals from description, say what it does now.</changelog>
  <changelog author="mcepl@suse.com" date="1532001600">- Clean SPEC file</changelog>
  <changelog author="mcepl@suse.com" date="1532088000">- Use python3 -munittest discover -v -s tests instead of run_tests.py</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1534248000">- Update to version 1.4.0:
  * No changelog available.
- Use python-rpm-macros.</changelog>
  <changelog author="mvetter@suse.com" date="1547208000">- Update 1.4.1:
  * jid: Make property aliases proper aliases.
  * stanzabase: Remove python2 legacy.
  * fixing uncaught async exceptions due to missing await
  * XEP-0363: Add a domain argument to discover an upload service
  * XEP-0363: Also check for disco#info?s feature
  * XEP-0030: Don?t call the timeout_callback on each domain
  * Decode bytes in GSSAPI handling, as expected by the kerberos module API
- Update source URL
- Add requires python3-aiohttp: was needed for XEP-0363 since 1.4.0</changelog>
  <changelog author="mvetter@suse.com" date="1547208001">- Change source URL from GH to https://lab.louiz.org as requested</changelog>
  <changelog author="mvetter@suse.com" date="1549368000">- Update to 1.4.2:
  * Do not do channel binding without TLS
  * Add default timeout of 120s for IQs (prevent slowdowns)
  * Fix CVE-2019-1000021 (bsc#1124322)
  * Do not query vcard avatars unconditionnally
  * Fix GSSAPI (Jelmer Vernoo?)</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1571054400">- Replace %fdupes -s with plain %fdupes; hardlinks are better.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1670328000">- bsc#1205433 (CVE-2022-45197) Fix certificate hostname validation
  * Add slixmpp-CVE-2022-45197.patch</changelog>
</package>
<package pkgid="cd4289e4b0eb4ba61403e6510ee1769793f7eb757554382326c1226a4261230b" name="python3-slixmpp" arch="ppc64le">
  <version epoch="0" ver="1.4.2" rel="bp154.2.3.1"/>
  <changelog author="sor.alexei@meowr.ru" date="1481371200">- Initial package.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1486814400">- Update to version 1.2.4:
  * Test more things before trying to build our stringprep module.
  * XMLStream: Break a long line to make it more readable.
  * Check for XML parsing errors and disconnect in that case.
  * Add missing asyncio.coroutine decorators.
  * Fix a partially-merged Google plugin from the commit acc52fd.
  * Fix an issue with carbons (CVE-2017-5589, bsc#1024690).</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1516449600">- Update to version 1.3.0:
  * Implement XEP-0300: Use of Cryptographic Hash Functions in XMPP.
  * Return a Future on clientxmpp.get_roster().
  * Fix custom stanza examples.
  * Fix the HTTP over XMPP and GTalk examples.
  * xmlstream: Warn when the parser is None when data is received.
  * Add an XMPP classifier to setup.py.
  * sasl: Merge two bytes instead of concatenating them at runtime.
  * Fix the port being set to 0 when connecting via hostname.
  * Pass SSL context to plain TLS connections.
  * xmlstream: Remove pygments dumping.
  * XEP-0319: Use the correct timezone.
  * Update RSM for asyncio.
  * Update the MAM plugin for asyncio and the new namespace.
    And add an example.
  * XEP-0054: Fix parsing the BINVAL element.
  * Record the current connection attempt in a future and allow
    cancellation.
  * Add a Markup plugin.
- Add the missing requirement of GnuPG.
- Enable tests.</changelog>
  <changelog author="jengelh@inai.de" date="1518350400">- Trim future goals from description, say what it does now.</changelog>
  <changelog author="mcepl@suse.com" date="1532001600">- Clean SPEC file</changelog>
  <changelog author="mcepl@suse.com" date="1532088000">- Use python3 -munittest discover -v -s tests instead of run_tests.py</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1534248000">- Update to version 1.4.0:
  * No changelog available.
- Use python-rpm-macros.</changelog>
  <changelog author="mvetter@suse.com" date="1547208000">- Update 1.4.1:
  * jid: Make property aliases proper aliases.
  * stanzabase: Remove python2 legacy.
  * fixing uncaught async exceptions due to missing await
  * XEP-0363: Add a domain argument to discover an upload service
  * XEP-0363: Also check for disco#info?s feature
  * XEP-0030: Don?t call the timeout_callback on each domain
  * Decode bytes in GSSAPI handling, as expected by the kerberos module API
- Update source URL
- Add requires python3-aiohttp: was needed for XEP-0363 since 1.4.0</changelog>
  <changelog author="mvetter@suse.com" date="1547208001">- Change source URL from GH to https://lab.louiz.org as requested</changelog>
  <changelog author="mvetter@suse.com" date="1549368000">- Update to 1.4.2:
  * Do not do channel binding without TLS
  * Add default timeout of 120s for IQs (prevent slowdowns)
  * Fix CVE-2019-1000021 (bsc#1124322)
  * Do not query vcard avatars unconditionnally
  * Fix GSSAPI (Jelmer Vernoo?)</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1571054400">- Replace %fdupes -s with plain %fdupes; hardlinks are better.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1670328000">- bsc#1205433 (CVE-2022-45197) Fix certificate hostname validation
  * Add slixmpp-CVE-2022-45197.patch</changelog>
</package>
<package pkgid="106a636a12f8cfaaa9b6e0d00f12fed20e0d457f5e8ce6e09b71c39fcd37a8e7" name="python3-slixmpp" arch="s390x">
  <version epoch="0" ver="1.4.2" rel="bp154.2.3.1"/>
  <changelog author="sor.alexei@meowr.ru" date="1481371200">- Initial package.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1486814400">- Update to version 1.2.4:
  * Test more things before trying to build our stringprep module.
  * XMLStream: Break a long line to make it more readable.
  * Check for XML parsing errors and disconnect in that case.
  * Add missing asyncio.coroutine decorators.
  * Fix a partially-merged Google plugin from the commit acc52fd.
  * Fix an issue with carbons (CVE-2017-5589, bsc#1024690).</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1516449600">- Update to version 1.3.0:
  * Implement XEP-0300: Use of Cryptographic Hash Functions in XMPP.
  * Return a Future on clientxmpp.get_roster().
  * Fix custom stanza examples.
  * Fix the HTTP over XMPP and GTalk examples.
  * xmlstream: Warn when the parser is None when data is received.
  * Add an XMPP classifier to setup.py.
  * sasl: Merge two bytes instead of concatenating them at runtime.
  * Fix the port being set to 0 when connecting via hostname.
  * Pass SSL context to plain TLS connections.
  * xmlstream: Remove pygments dumping.
  * XEP-0319: Use the correct timezone.
  * Update RSM for asyncio.
  * Update the MAM plugin for asyncio and the new namespace.
    And add an example.
  * XEP-0054: Fix parsing the BINVAL element.
  * Record the current connection attempt in a future and allow
    cancellation.
  * Add a Markup plugin.
- Add the missing requirement of GnuPG.
- Enable tests.</changelog>
  <changelog author="jengelh@inai.de" date="1518350400">- Trim future goals from description, say what it does now.</changelog>
  <changelog author="mcepl@suse.com" date="1532001600">- Clean SPEC file</changelog>
  <changelog author="mcepl@suse.com" date="1532088000">- Use python3 -munittest discover -v -s tests instead of run_tests.py</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1534248000">- Update to version 1.4.0:
  * No changelog available.
- Use python-rpm-macros.</changelog>
  <changelog author="mvetter@suse.com" date="1547208000">- Update 1.4.1:
  * jid: Make property aliases proper aliases.
  * stanzabase: Remove python2 legacy.
  * fixing uncaught async exceptions due to missing await
  * XEP-0363: Add a domain argument to discover an upload service
  * XEP-0363: Also check for disco#info?s feature
  * XEP-0030: Don?t call the timeout_callback on each domain
  * Decode bytes in GSSAPI handling, as expected by the kerberos module API
- Update source URL
- Add requires python3-aiohttp: was needed for XEP-0363 since 1.4.0</changelog>
  <changelog author="mvetter@suse.com" date="1547208001">- Change source URL from GH to https://lab.louiz.org as requested</changelog>
  <changelog author="mvetter@suse.com" date="1549368000">- Update to 1.4.2:
  * Do not do channel binding without TLS
  * Add default timeout of 120s for IQs (prevent slowdowns)
  * Fix CVE-2019-1000021 (bsc#1124322)
  * Do not query vcard avatars unconditionnally
  * Fix GSSAPI (Jelmer Vernoo?)</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1571054400">- Replace %fdupes -s with plain %fdupes; hardlinks are better.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1670328000">- bsc#1205433 (CVE-2022-45197) Fix certificate hostname validation
  * Add slixmpp-CVE-2022-45197.patch</changelog>
</package>
<package pkgid="46428eb02d9c0aaf2d90bcf10a98abf6b763990b6207a5bf5f1e1e47f8081ee9" name="python3-slixmpp" arch="x86_64">
  <version epoch="0" ver="1.4.2" rel="bp154.2.3.1"/>
  <changelog author="sor.alexei@meowr.ru" date="1481371200">- Initial package.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1486814400">- Update to version 1.2.4:
  * Test more things before trying to build our stringprep module.
  * XMLStream: Break a long line to make it more readable.
  * Check for XML parsing errors and disconnect in that case.
  * Add missing asyncio.coroutine decorators.
  * Fix a partially-merged Google plugin from the commit acc52fd.
  * Fix an issue with carbons (CVE-2017-5589, bsc#1024690).</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1516449600">- Update to version 1.3.0:
  * Implement XEP-0300: Use of Cryptographic Hash Functions in XMPP.
  * Return a Future on clientxmpp.get_roster().
  * Fix custom stanza examples.
  * Fix the HTTP over XMPP and GTalk examples.
  * xmlstream: Warn when the parser is None when data is received.
  * Add an XMPP classifier to setup.py.
  * sasl: Merge two bytes instead of concatenating them at runtime.
  * Fix the port being set to 0 when connecting via hostname.
  * Pass SSL context to plain TLS connections.
  * xmlstream: Remove pygments dumping.
  * XEP-0319: Use the correct timezone.
  * Update RSM for asyncio.
  * Update the MAM plugin for asyncio and the new namespace.
    And add an example.
  * XEP-0054: Fix parsing the BINVAL element.
  * Record the current connection attempt in a future and allow
    cancellation.
  * Add a Markup plugin.
- Add the missing requirement of GnuPG.
- Enable tests.</changelog>
  <changelog author="jengelh@inai.de" date="1518350400">- Trim future goals from description, say what it does now.</changelog>
  <changelog author="mcepl@suse.com" date="1532001600">- Clean SPEC file</changelog>
  <changelog author="mcepl@suse.com" date="1532088000">- Use python3 -munittest discover -v -s tests instead of run_tests.py</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1534248000">- Update to version 1.4.0:
  * No changelog available.
- Use python-rpm-macros.</changelog>
  <changelog author="mvetter@suse.com" date="1547208000">- Update 1.4.1:
  * jid: Make property aliases proper aliases.
  * stanzabase: Remove python2 legacy.
  * fixing uncaught async exceptions due to missing await
  * XEP-0363: Add a domain argument to discover an upload service
  * XEP-0363: Also check for disco#info?s feature
  * XEP-0030: Don?t call the timeout_callback on each domain
  * Decode bytes in GSSAPI handling, as expected by the kerberos module API
- Update source URL
- Add requires python3-aiohttp: was needed for XEP-0363 since 1.4.0</changelog>
  <changelog author="mvetter@suse.com" date="1547208001">- Change source URL from GH to https://lab.louiz.org as requested</changelog>
  <changelog author="mvetter@suse.com" date="1549368000">- Update to 1.4.2:
  * Do not do channel binding without TLS
  * Add default timeout of 120s for IQs (prevent slowdowns)
  * Fix CVE-2019-1000021 (bsc#1124322)
  * Do not query vcard avatars unconditionnally
  * Fix GSSAPI (Jelmer Vernoo?)</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1571054400">- Replace %fdupes -s with plain %fdupes; hardlinks are better.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1670328000">- bsc#1205433 (CVE-2022-45197) Fix certificate hostname validation
  * Add slixmpp-CVE-2022-45197.patch</changelog>
</package>
<package pkgid="8013450550bc8b1b4b60b3104c83d1fa953ed97bcb01668c7b2453c4706f72c0" name="python3-translate-toolkit" arch="noarch">
  <version epoch="0" ver="2.5.0" rel="bp154.2.3.1"/>
  <changelog author="elchevive@opensuse.org" date="1497614400">- add python-pycountry as Requires
- Update do 2.2.0
  * Avoid resolving external entities while parsing XML.
  * Improvements for Android, ts and resx formats.
  * Added support for PHP nested arrays.
  * Added Kabyle language</changelog>
  <changelog author="elchevive@opensuse.org" date="1498478400">- Update do 2.2.3
  * Added MinimalChecker and ReducedChecker checkers.
  * Fixed resolving of country names translations.
  * Refactored functions for resolving language/country names translation to be memory efficient.
  * Improvements for ts and subtitles formats.
  * Added ?preserveplaceholders argument to podebug.
  * Fixed Montenegrin language name.</changelog>
  <changelog author="elchevive@opensuse.org" date="1503921600">- Update do 2.2.4
  * Added support for nested and WebExtension JSON dialects.
  * po2txt no longer converts non-translatable strings.
  * Improvement for puncspace check.
  * Support for .xliff extension.</changelog>
  <changelog author="jmatejek@suse.com" date="1510660800">- drop unneeded requirement for python-utidy
- drop unneeded requirements for diff_match_patch
- switch to python3</changelog>
  <changelog author="astieger@suse.com" date="1514289600">- update to 2.2.5:
  * Fixed bug when adding new units to XLIFF store.
  * Added support for i18next JSON dialect.
  * Improved WebExtension JSON dialect support.</changelog>
  <changelog author="elchevive@opensuse.org" date="1521633600">- update to 2.3.0
  * Full rewrite of the PHP format greatly extending the support.
  * Added YAML format converters.
  * Major refactor of converters code.
- drop patch translate-toolkit-2.0.0-python-six.diff not needed
  on Leap 15.0</changelog>
  <changelog author="sbrabec@suse.com" date="1545134400">- Update to 2.3.1:
  * But fixes.
  * INI: Enabled support for Python3 provided.
  * Use backports.csv module on Python 2 to align the behavior
    with Python 3 and drop many hacks.
  * Removed deprecated getoutput, add new depreceations.
  * Code cleanup; many converterters refactored.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1547121600">- Make sure the documentation is generated properly
- Enable testsuite
- Add patches from debian for tests to pass:
  * sphinx-intersphinx.patch
  * test-pytest310.patch
  * xliff-xsd-no-network.patch</changelog>
  <changelog author="Luiz Fernando Ranghetti &lt;elchevive68@gmail.com&gt;" date="1548676800">- Correct the Source URL</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548676801">- Avoid mixing historic and modern option syntax for tar.
- Replace find -exec rm by just find -delete.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551873600">- Drop not needed lxml-doc dependency</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553860800">- Add patch to build with current pycountry:
  * pycountry.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Do not depend on strace, it is not really needed</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1562846400">- Update to 2.4.0:
  * Added new Flat XML format and converters.
  * Fixes for multiple formats.
- Remove merged patches:
  * pycountry.patch
  * test-pytest310.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1579694400">- Update to 2.5.0:
  * Fixes to work with new weblate</changelog>
  <changelog author="Ond?ej S&#xFA;kup &lt;mimi.vx@gmail.com&gt;" date="1583236800">- temporary disable TestYAMLResourceStore.test_empty_key because
  ruamel.yaml has different behaviour on empty keys from version
    0.16.6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@linux-m68k.org&gt;" date="1584532800">- test-mo-endian.patch: tell msgfmt to use correct endianness</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1588334400">- Swtich to multibuild to separate tests</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1589371200">- Clean up, rewrite to single-spec style, and use %pytest macro.
- We have to install, but remove afterwards, when in the test phase.
- Add versioned_executables.patch to use partially installed
  versioned executables.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591790400">- We need full python interpreter bsc#1172650, boo#1195269</changelog>
</package>
<package pkgid="c2c4ed4501f03a915496b1e8bea555a0abefd94dea54c83a4cabc8a7b295d99e" name="qt5-creator" arch="aarch64">
  <version epoch="0" ver="7.0.2" rel="bp154.2.3.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1620907200">- Update to 4.15.0:
  https://code.qt.io/cgit/qt-creator/qt-creator.git/tree/dist/changes-4.15.0.md
- Update 0001-Disable-some-plugins.patch
- Rebase fix-application-output.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1623326400">- Update to 4.15.1:
  * https://code.qt.io/cgit/qt-creator/qt-creator.git/tree/dist/changes-4.15.1.md</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1626696000">- Update to 4.15.2
  * https://code.qt.io/cgit/qt-creator/qt-creator.git/tree/dist/changes-4.15.2.md</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1628769600">- Update to 5.0.0-rc1
- Rebase 0001-Disable-some-plugins.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1629979200">- Update to 5.0.0
  * https://www.qt.io/blog/qt-creator-5.0-released</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1631707200">- Update to 5.0.1
  * https://www.qt.io/blog/qt-creator-5.0.1-released</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1633089600">- Update to 5.0.2
  * Fixed that Qt 5 context help was shown even if Qt 6
    documentation is available
  * Fixed canceling of builds
  * Changed the `File System` special node to be shown only on
    parsing failure
  * Fixed loading of projects without targets
  * Fixed that no targets where shown in added build step
  * Fixed that `ninja` could not be found after changing Qt
    installation location
  * Fixed debugging of terminal applications with GDB &lt; 10</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1633953600">- Unset SUSE_IGNORED_RPATHS to avoid a build failure caused by one
  of the binutils patches (boo#1191473)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1634212800">- Update to 6.0.0~beta1:
  * https://www.qt.io/blog/qt-creator-6-beta-released
- Rename libqt5-creator to qt5-creator
- Add a qt6 flavor
- Rebase fix-application-output.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1635508800">- Update to 6.0.0-beta2
  https://www.qt.io/blog/qt-creator-6-beta2-released</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638446400">- Update to 6.0.0
  https://www.qt.io/blog/qt-creator-6-released
- Drop the SUSE_IGNORED_RPATHS workaround now that the binutils
  bug is fixed.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1640174400">- Update to 6.0.1
  https://code.qt.io/cgit/qt-creator/qt-creator.git/tree/dist/changes-6.0.1.md</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1642680000">- Update to 6.0.2
  https://code.qt.io/cgit/qt-creator/qt-creator.git/plain/dist/changes-6.0.2.md
  * Fixed crash in process launcher
  * Fixed that `Select All` scrolled to bottom
  * Fixed copying with block selection
  * Fixed working directory for `REPL`
  * Fixed missing options in property editor
  * Fixed that closing application in `Application Output` pane
    killed process even if `Keep Running` was selected
  * Fixed filtering in target setup page
  * Fixed crash when switching screen configuration
- Add patch to fix the 32bit builds:
  * c7deacf.diff</changelog>
  <changelog author="Matthias Fehring &lt;buschmann23@opensuse.org&gt;" date="1643976000">- Explicitly require SQLite plugin for QtSql that is needed by the
  help system.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1647000000">- Update to 7.0.0~rc1:
  * https://www.qt.io/blog/qt-creator-7-rc-released
- Drop c7deacf.diff. Merged upstream
- Rebase fix-application-output.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1648123200">- Update to 7.0.0
  * https://www.qt.io/blog/qt-creator-7-released</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1649678400">- Fix the plugin-devel package (boo#1197978)
  To create qt-creator plugins, some files not installed by default
  are required.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1651060800">- Update to 7.0.1. Bugfix release:
  * https://www.qt.io/blog/qt-creator-7.0.1-released
- Remove obsolete version check</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1651406400">- Don't let the %cmake macro ignore the install rpath (boo#1198281)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1653912000">- Update to 7.0.2. Bugfix release:
  * https://www.qt.io/blog/qt-creator-7.0.2-released
- Add patch to fix build with recent KSyntaxHighlighting releases:
  * 0001-Correctly-include-KSyntaxHighlighting-headers.patch</changelog>
</package>
<package pkgid="e26d38be81448b42c4efa780f6453e09b060c62f2134776a834248278ddcf8b4" name="qt5-creator" arch="ppc64le">
  <version epoch="0" ver="7.0.2" rel="bp154.2.3.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1620907200">- Update to 4.15.0:
  https://code.qt.io/cgit/qt-creator/qt-creator.git/tree/dist/changes-4.15.0.md
- Update 0001-Disable-some-plugins.patch
- Rebase fix-application-output.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1623326400">- Update to 4.15.1:
  * https://code.qt.io/cgit/qt-creator/qt-creator.git/tree/dist/changes-4.15.1.md</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1626696000">- Update to 4.15.2
  * https://code.qt.io/cgit/qt-creator/qt-creator.git/tree/dist/changes-4.15.2.md</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1628769600">- Update to 5.0.0-rc1
- Rebase 0001-Disable-some-plugins.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1629979200">- Update to 5.0.0
  * https://www.qt.io/blog/qt-creator-5.0-released</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1631707200">- Update to 5.0.1
  * https://www.qt.io/blog/qt-creator-5.0.1-released</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1633089600">- Update to 5.0.2
  * Fixed that Qt 5 context help was shown even if Qt 6
    documentation is available
  * Fixed canceling of builds
  * Changed the `File System` special node to be shown only on
    parsing failure
  * Fixed loading of projects without targets
  * Fixed that no targets where shown in added build step
  * Fixed that `ninja` could not be found after changing Qt
    installation location
  * Fixed debugging of terminal applications with GDB &lt; 10</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1633953600">- Unset SUSE_IGNORED_RPATHS to avoid a build failure caused by one
  of the binutils patches (boo#1191473)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1634212800">- Update to 6.0.0~beta1:
  * https://www.qt.io/blog/qt-creator-6-beta-released
- Rename libqt5-creator to qt5-creator
- Add a qt6 flavor
- Rebase fix-application-output.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1635508800">- Update to 6.0.0-beta2
  https://www.qt.io/blog/qt-creator-6-beta2-released</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638446400">- Update to 6.0.0
  https://www.qt.io/blog/qt-creator-6-released
- Drop the SUSE_IGNORED_RPATHS workaround now that the binutils
  bug is fixed.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1640174400">- Update to 6.0.1
  https://code.qt.io/cgit/qt-creator/qt-creator.git/tree/dist/changes-6.0.1.md</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1642680000">- Update to 6.0.2
  https://code.qt.io/cgit/qt-creator/qt-creator.git/plain/dist/changes-6.0.2.md
  * Fixed crash in process launcher
  * Fixed that `Select All` scrolled to bottom
  * Fixed copying with block selection
  * Fixed working directory for `REPL`
  * Fixed missing options in property editor
  * Fixed that closing application in `Application Output` pane
    killed process even if `Keep Running` was selected
  * Fixed filtering in target setup page
  * Fixed crash when switching screen configuration
- Add patch to fix the 32bit builds:
  * c7deacf.diff</changelog>
  <changelog author="Matthias Fehring &lt;buschmann23@opensuse.org&gt;" date="1643976000">- Explicitly require SQLite plugin for QtSql that is needed by the
  help system.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1647000000">- Update to 7.0.0~rc1:
  * https://www.qt.io/blog/qt-creator-7-rc-released
- Drop c7deacf.diff. Merged upstream
- Rebase fix-application-output.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1648123200">- Update to 7.0.0
  * https://www.qt.io/blog/qt-creator-7-released</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1649678400">- Fix the plugin-devel package (boo#1197978)
  To create qt-creator plugins, some files not installed by default
  are required.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1651060800">- Update to 7.0.1. Bugfix release:
  * https://www.qt.io/blog/qt-creator-7.0.1-released
- Remove obsolete version check</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1651406400">- Don't let the %cmake macro ignore the install rpath (boo#1198281)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1653912000">- Update to 7.0.2. Bugfix release:
  * https://www.qt.io/blog/qt-creator-7.0.2-released
- Add patch to fix build with recent KSyntaxHighlighting releases:
  * 0001-Correctly-include-KSyntaxHighlighting-headers.patch</changelog>
</package>
<package pkgid="c0532fba70f087417e4529733f17bf7094197babc5d5f4ab1d7e967aaf245cf2" name="qt5-creator" arch="s390x">
  <version epoch="0" ver="7.0.2" rel="bp154.2.3.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1620907200">- Update to 4.15.0:
  https://code.qt.io/cgit/qt-creator/qt-creator.git/tree/dist/changes-4.15.0.md
- Update 0001-Disable-some-plugins.patch
- Rebase fix-application-output.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1623326400">- Update to 4.15.1:
  * https://code.qt.io/cgit/qt-creator/qt-creator.git/tree/dist/changes-4.15.1.md</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1626696000">- Update to 4.15.2
  * https://code.qt.io/cgit/qt-creator/qt-creator.git/tree/dist/changes-4.15.2.md</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1628769600">- Update to 5.0.0-rc1
- Rebase 0001-Disable-some-plugins.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1629979200">- Update to 5.0.0
  * https://www.qt.io/blog/qt-creator-5.0-released</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1631707200">- Update to 5.0.1
  * https://www.qt.io/blog/qt-creator-5.0.1-released</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1633089600">- Update to 5.0.2
  * Fixed that Qt 5 context help was shown even if Qt 6
    documentation is available
  * Fixed canceling of builds
  * Changed the `File System` special node to be shown only on
    parsing failure
  * Fixed loading of projects without targets
  * Fixed that no targets where shown in added build step
  * Fixed that `ninja` could not be found after changing Qt
    installation location
  * Fixed debugging of terminal applications with GDB &lt; 10</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1633953600">- Unset SUSE_IGNORED_RPATHS to avoid a build failure caused by one
  of the binutils patches (boo#1191473)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1634212800">- Update to 6.0.0~beta1:
  * https://www.qt.io/blog/qt-creator-6-beta-released
- Rename libqt5-creator to qt5-creator
- Add a qt6 flavor
- Rebase fix-application-output.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1635508800">- Update to 6.0.0-beta2
  https://www.qt.io/blog/qt-creator-6-beta2-released</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638446400">- Update to 6.0.0
  https://www.qt.io/blog/qt-creator-6-released
- Drop the SUSE_IGNORED_RPATHS workaround now that the binutils
  bug is fixed.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1640174400">- Update to 6.0.1
  https://code.qt.io/cgit/qt-creator/qt-creator.git/tree/dist/changes-6.0.1.md</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1642680000">- Update to 6.0.2
  https://code.qt.io/cgit/qt-creator/qt-creator.git/plain/dist/changes-6.0.2.md
  * Fixed crash in process launcher
  * Fixed that `Select All` scrolled to bottom
  * Fixed copying with block selection
  * Fixed working directory for `REPL`
  * Fixed missing options in property editor
  * Fixed that closing application in `Application Output` pane
    killed process even if `Keep Running` was selected
  * Fixed filtering in target setup page
  * Fixed crash when switching screen configuration
- Add patch to fix the 32bit builds:
  * c7deacf.diff</changelog>
  <changelog author="Matthias Fehring &lt;buschmann23@opensuse.org&gt;" date="1643976000">- Explicitly require SQLite plugin for QtSql that is needed by the
  help system.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1647000000">- Update to 7.0.0~rc1:
  * https://www.qt.io/blog/qt-creator-7-rc-released
- Drop c7deacf.diff. Merged upstream
- Rebase fix-application-output.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1648123200">- Update to 7.0.0
  * https://www.qt.io/blog/qt-creator-7-released</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1649678400">- Fix the plugin-devel package (boo#1197978)
  To create qt-creator plugins, some files not installed by default
  are required.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1651060800">- Update to 7.0.1. Bugfix release:
  * https://www.qt.io/blog/qt-creator-7.0.1-released
- Remove obsolete version check</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1651406400">- Don't let the %cmake macro ignore the install rpath (boo#1198281)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1653912000">- Update to 7.0.2. Bugfix release:
  * https://www.qt.io/blog/qt-creator-7.0.2-released
- Add patch to fix build with recent KSyntaxHighlighting releases:
  * 0001-Correctly-include-KSyntaxHighlighting-headers.patch</changelog>
</package>
<package pkgid="f1aaa22fb140e5aae86d715a5b30964018b22d5244c6e4711e0e6322bcf97354" name="qt5-creator" arch="src">
  <version epoch="0" ver="7.0.2" rel="bp154.2.3.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1620907200">- Update to 4.15.0:
  https://code.qt.io/cgit/qt-creator/qt-creator.git/tree/dist/changes-4.15.0.md
- Update 0001-Disable-some-plugins.patch
- Rebase fix-application-output.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1623326400">- Update to 4.15.1:
  * https://code.qt.io/cgit/qt-creator/qt-creator.git/tree/dist/changes-4.15.1.md</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1626696000">- Update to 4.15.2
  * https://code.qt.io/cgit/qt-creator/qt-creator.git/tree/dist/changes-4.15.2.md</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1628769600">- Update to 5.0.0-rc1
- Rebase 0001-Disable-some-plugins.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1629979200">- Update to 5.0.0
  * https://www.qt.io/blog/qt-creator-5.0-released</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1631707200">- Update to 5.0.1
  * https://www.qt.io/blog/qt-creator-5.0.1-released</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1633089600">- Update to 5.0.2
  * Fixed that Qt 5 context help was shown even if Qt 6
    documentation is available
  * Fixed canceling of builds
  * Changed the `File System` special node to be shown only on
    parsing failure
  * Fixed loading of projects without targets
  * Fixed that no targets where shown in added build step
  * Fixed that `ninja` could not be found after changing Qt
    installation location
  * Fixed debugging of terminal applications with GDB &lt; 10</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1633953600">- Unset SUSE_IGNORED_RPATHS to avoid a build failure caused by one
  of the binutils patches (boo#1191473)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1634212800">- Update to 6.0.0~beta1:
  * https://www.qt.io/blog/qt-creator-6-beta-released
- Rename libqt5-creator to qt5-creator
- Add a qt6 flavor
- Rebase fix-application-output.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1635508800">- Update to 6.0.0-beta2
  https://www.qt.io/blog/qt-creator-6-beta2-released</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638446400">- Update to 6.0.0
  https://www.qt.io/blog/qt-creator-6-released
- Drop the SUSE_IGNORED_RPATHS workaround now that the binutils
  bug is fixed.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1640174400">- Update to 6.0.1
  https://code.qt.io/cgit/qt-creator/qt-creator.git/tree/dist/changes-6.0.1.md</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1642680000">- Update to 6.0.2
  https://code.qt.io/cgit/qt-creator/qt-creator.git/plain/dist/changes-6.0.2.md
  * Fixed crash in process launcher
  * Fixed that `Select All` scrolled to bottom
  * Fixed copying with block selection
  * Fixed working directory for `REPL`
  * Fixed missing options in property editor
  * Fixed that closing application in `Application Output` pane
    killed process even if `Keep Running` was selected
  * Fixed filtering in target setup page
  * Fixed crash when switching screen configuration
- Add patch to fix the 32bit builds:
  * c7deacf.diff</changelog>
  <changelog author="Matthias Fehring &lt;buschmann23@opensuse.org&gt;" date="1643976000">- Explicitly require SQLite plugin for QtSql that is needed by the
  help system.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1647000000">- Update to 7.0.0~rc1:
  * https://www.qt.io/blog/qt-creator-7-rc-released
- Drop c7deacf.diff. Merged upstream
- Rebase fix-application-output.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1648123200">- Update to 7.0.0
  * https://www.qt.io/blog/qt-creator-7-released</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1649678400">- Fix the plugin-devel package (boo#1197978)
  To create qt-creator plugins, some files not installed by default
  are required.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1651060800">- Update to 7.0.1. Bugfix release:
  * https://www.qt.io/blog/qt-creator-7.0.1-released
- Remove obsolete version check</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1651406400">- Don't let the %cmake macro ignore the install rpath (boo#1198281)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1653912000">- Update to 7.0.2. Bugfix release:
  * https://www.qt.io/blog/qt-creator-7.0.2-released
- Add patch to fix build with recent KSyntaxHighlighting releases:
  * 0001-Correctly-include-KSyntaxHighlighting-headers.patch</changelog>
</package>
<package pkgid="5e0fd2f2c296e399e7fcf3ceac376b73867d9150c53ff78da27bd1215720795a" name="qt5-creator" arch="x86_64">
  <version epoch="0" ver="7.0.2" rel="bp154.2.3.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1620907200">- Update to 4.15.0:
  https://code.qt.io/cgit/qt-creator/qt-creator.git/tree/dist/changes-4.15.0.md
- Update 0001-Disable-some-plugins.patch
- Rebase fix-application-output.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1623326400">- Update to 4.15.1:
  * https://code.qt.io/cgit/qt-creator/qt-creator.git/tree/dist/changes-4.15.1.md</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1626696000">- Update to 4.15.2
  * https://code.qt.io/cgit/qt-creator/qt-creator.git/tree/dist/changes-4.15.2.md</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1628769600">- Update to 5.0.0-rc1
- Rebase 0001-Disable-some-plugins.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1629979200">- Update to 5.0.0
  * https://www.qt.io/blog/qt-creator-5.0-released</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1631707200">- Update to 5.0.1
  * https://www.qt.io/blog/qt-creator-5.0.1-released</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1633089600">- Update to 5.0.2
  * Fixed that Qt 5 context help was shown even if Qt 6
    documentation is available
  * Fixed canceling of builds
  * Changed the `File System` special node to be shown only on
    parsing failure
  * Fixed loading of projects without targets
  * Fixed that no targets where shown in added build step
  * Fixed that `ninja` could not be found after changing Qt
    installation location
  * Fixed debugging of terminal applications with GDB &lt; 10</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1633953600">- Unset SUSE_IGNORED_RPATHS to avoid a build failure caused by one
  of the binutils patches (boo#1191473)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1634212800">- Update to 6.0.0~beta1:
  * https://www.qt.io/blog/qt-creator-6-beta-released
- Rename libqt5-creator to qt5-creator
- Add a qt6 flavor
- Rebase fix-application-output.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1635508800">- Update to 6.0.0-beta2
  https://www.qt.io/blog/qt-creator-6-beta2-released</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638446400">- Update to 6.0.0
  https://www.qt.io/blog/qt-creator-6-released
- Drop the SUSE_IGNORED_RPATHS workaround now that the binutils
  bug is fixed.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1640174400">- Update to 6.0.1
  https://code.qt.io/cgit/qt-creator/qt-creator.git/tree/dist/changes-6.0.1.md</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1642680000">- Update to 6.0.2
  https://code.qt.io/cgit/qt-creator/qt-creator.git/plain/dist/changes-6.0.2.md
  * Fixed crash in process launcher
  * Fixed that `Select All` scrolled to bottom
  * Fixed copying with block selection
  * Fixed working directory for `REPL`
  * Fixed missing options in property editor
  * Fixed that closing application in `Application Output` pane
    killed process even if `Keep Running` was selected
  * Fixed filtering in target setup page
  * Fixed crash when switching screen configuration
- Add patch to fix the 32bit builds:
  * c7deacf.diff</changelog>
  <changelog author="Matthias Fehring &lt;buschmann23@opensuse.org&gt;" date="1643976000">- Explicitly require SQLite plugin for QtSql that is needed by the
  help system.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1647000000">- Update to 7.0.0~rc1:
  * https://www.qt.io/blog/qt-creator-7-rc-released
- Drop c7deacf.diff. Merged upstream
- Rebase fix-application-output.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1648123200">- Update to 7.0.0
  * https://www.qt.io/blog/qt-creator-7-released</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1649678400">- Fix the plugin-devel package (boo#1197978)
  To create qt-creator plugins, some files not installed by default
  are required.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1651060800">- Update to 7.0.1. Bugfix release:
  * https://www.qt.io/blog/qt-creator-7.0.1-released
- Remove obsolete version check</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1651406400">- Don't let the %cmake macro ignore the install rpath (boo#1198281)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1653912000">- Update to 7.0.2. Bugfix release:
  * https://www.qt.io/blog/qt-creator-7.0.2-released
- Add patch to fix build with recent KSyntaxHighlighting releases:
  * 0001-Correctly-include-KSyntaxHighlighting-headers.patch</changelog>
</package>
<package pkgid="a4771d0fee16645146f3e38e45f4f128c9953536d0ed39ed4fcfc71ec5287ee2" name="qt5-creator-plugin-devel" arch="aarch64">
  <version epoch="0" ver="7.0.2" rel="bp154.2.3.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1620907200">- Update to 4.15.0:
  https://code.qt.io/cgit/qt-creator/qt-creator.git/tree/dist/changes-4.15.0.md
- Update 0001-Disable-some-plugins.patch
- Rebase fix-application-output.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1623326400">- Update to 4.15.1:
  * https://code.qt.io/cgit/qt-creator/qt-creator.git/tree/dist/changes-4.15.1.md</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1626696000">- Update to 4.15.2
  * https://code.qt.io/cgit/qt-creator/qt-creator.git/tree/dist/changes-4.15.2.md</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1628769600">- Update to 5.0.0-rc1
- Rebase 0001-Disable-some-plugins.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1629979200">- Update to 5.0.0
  * https://www.qt.io/blog/qt-creator-5.0-released</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1631707200">- Update to 5.0.1
  * https://www.qt.io/blog/qt-creator-5.0.1-released</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1633089600">- Update to 5.0.2
  * Fixed that Qt 5 context help was shown even if Qt 6
    documentation is available
  * Fixed canceling of builds
  * Changed the `File System` special node to be shown only on
    parsing failure
  * Fixed loading of projects without targets
  * Fixed that no targets where shown in added build step
  * Fixed that `ninja` could not be found after changing Qt
    installation location
  * Fixed debugging of terminal applications with GDB &lt; 10</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1633953600">- Unset SUSE_IGNORED_RPATHS to avoid a build failure caused by one
  of the binutils patches (boo#1191473)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1634212800">- Update to 6.0.0~beta1:
  * https://www.qt.io/blog/qt-creator-6-beta-released
- Rename libqt5-creator to qt5-creator
- Add a qt6 flavor
- Rebase fix-application-output.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1635508800">- Update to 6.0.0-beta2
  https://www.qt.io/blog/qt-creator-6-beta2-released</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638446400">- Update to 6.0.0
  https://www.qt.io/blog/qt-creator-6-released
- Drop the SUSE_IGNORED_RPATHS workaround now that the binutils
  bug is fixed.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1640174400">- Update to 6.0.1
  https://code.qt.io/cgit/qt-creator/qt-creator.git/tree/dist/changes-6.0.1.md</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1642680000">- Update to 6.0.2
  https://code.qt.io/cgit/qt-creator/qt-creator.git/plain/dist/changes-6.0.2.md
  * Fixed crash in process launcher
  * Fixed that `Select All` scrolled to bottom
  * Fixed copying with block selection
  * Fixed working directory for `REPL`
  * Fixed missing options in property editor
  * Fixed that closing application in `Application Output` pane
    killed process even if `Keep Running` was selected
  * Fixed filtering in target setup page
  * Fixed crash when switching screen configuration
- Add patch to fix the 32bit builds:
  * c7deacf.diff</changelog>
  <changelog author="Matthias Fehring &lt;buschmann23@opensuse.org&gt;" date="1643976000">- Explicitly require SQLite plugin for QtSql that is needed by the
  help system.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1647000000">- Update to 7.0.0~rc1:
  * https://www.qt.io/blog/qt-creator-7-rc-released
- Drop c7deacf.diff. Merged upstream
- Rebase fix-application-output.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1648123200">- Update to 7.0.0
  * https://www.qt.io/blog/qt-creator-7-released</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1649678400">- Fix the plugin-devel package (boo#1197978)
  To create qt-creator plugins, some files not installed by default
  are required.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1651060800">- Update to 7.0.1. Bugfix release:
  * https://www.qt.io/blog/qt-creator-7.0.1-released
- Remove obsolete version check</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1651406400">- Don't let the %cmake macro ignore the install rpath (boo#1198281)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1653912000">- Update to 7.0.2. Bugfix release:
  * https://www.qt.io/blog/qt-creator-7.0.2-released
- Add patch to fix build with recent KSyntaxHighlighting releases:
  * 0001-Correctly-include-KSyntaxHighlighting-headers.patch</changelog>
</package>
<package pkgid="5033d204e3d6ed244aa5b48a29940118f8ddea7c050c0b4a0a6cfe1daddba86e" name="qt5-creator-plugin-devel" arch="ppc64le">
  <version epoch="0" ver="7.0.2" rel="bp154.2.3.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1620907200">- Update to 4.15.0:
  https://code.qt.io/cgit/qt-creator/qt-creator.git/tree/dist/changes-4.15.0.md
- Update 0001-Disable-some-plugins.patch
- Rebase fix-application-output.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1623326400">- Update to 4.15.1:
  * https://code.qt.io/cgit/qt-creator/qt-creator.git/tree/dist/changes-4.15.1.md</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1626696000">- Update to 4.15.2
  * https://code.qt.io/cgit/qt-creator/qt-creator.git/tree/dist/changes-4.15.2.md</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1628769600">- Update to 5.0.0-rc1
- Rebase 0001-Disable-some-plugins.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1629979200">- Update to 5.0.0
  * https://www.qt.io/blog/qt-creator-5.0-released</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1631707200">- Update to 5.0.1
  * https://www.qt.io/blog/qt-creator-5.0.1-released</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1633089600">- Update to 5.0.2
  * Fixed that Qt 5 context help was shown even if Qt 6
    documentation is available
  * Fixed canceling of builds
  * Changed the `File System` special node to be shown only on
    parsing failure
  * Fixed loading of projects without targets
  * Fixed that no targets where shown in added build step
  * Fixed that `ninja` could not be found after changing Qt
    installation location
  * Fixed debugging of terminal applications with GDB &lt; 10</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1633953600">- Unset SUSE_IGNORED_RPATHS to avoid a build failure caused by one
  of the binutils patches (boo#1191473)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1634212800">- Update to 6.0.0~beta1:
  * https://www.qt.io/blog/qt-creator-6-beta-released
- Rename libqt5-creator to qt5-creator
- Add a qt6 flavor
- Rebase fix-application-output.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1635508800">- Update to 6.0.0-beta2
  https://www.qt.io/blog/qt-creator-6-beta2-released</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638446400">- Update to 6.0.0
  https://www.qt.io/blog/qt-creator-6-released
- Drop the SUSE_IGNORED_RPATHS workaround now that the binutils
  bug is fixed.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1640174400">- Update to 6.0.1
  https://code.qt.io/cgit/qt-creator/qt-creator.git/tree/dist/changes-6.0.1.md</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1642680000">- Update to 6.0.2
  https://code.qt.io/cgit/qt-creator/qt-creator.git/plain/dist/changes-6.0.2.md
  * Fixed crash in process launcher
  * Fixed that `Select All` scrolled to bottom
  * Fixed copying with block selection
  * Fixed working directory for `REPL`
  * Fixed missing options in property editor
  * Fixed that closing application in `Application Output` pane
    killed process even if `Keep Running` was selected
  * Fixed filtering in target setup page
  * Fixed crash when switching screen configuration
- Add patch to fix the 32bit builds:
  * c7deacf.diff</changelog>
  <changelog author="Matthias Fehring &lt;buschmann23@opensuse.org&gt;" date="1643976000">- Explicitly require SQLite plugin for QtSql that is needed by the
  help system.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1647000000">- Update to 7.0.0~rc1:
  * https://www.qt.io/blog/qt-creator-7-rc-released
- Drop c7deacf.diff. Merged upstream
- Rebase fix-application-output.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1648123200">- Update to 7.0.0
  * https://www.qt.io/blog/qt-creator-7-released</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1649678400">- Fix the plugin-devel package (boo#1197978)
  To create qt-creator plugins, some files not installed by default
  are required.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1651060800">- Update to 7.0.1. Bugfix release:
  * https://www.qt.io/blog/qt-creator-7.0.1-released
- Remove obsolete version check</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1651406400">- Don't let the %cmake macro ignore the install rpath (boo#1198281)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1653912000">- Update to 7.0.2. Bugfix release:
  * https://www.qt.io/blog/qt-creator-7.0.2-released
- Add patch to fix build with recent KSyntaxHighlighting releases:
  * 0001-Correctly-include-KSyntaxHighlighting-headers.patch</changelog>
</package>
<package pkgid="15213d8ff48c88a3d59ac8cd34c1f315592a12deb4bc69761407f8e86902c6f4" name="qt5-creator-plugin-devel" arch="s390x">
  <version epoch="0" ver="7.0.2" rel="bp154.2.3.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1620907200">- Update to 4.15.0:
  https://code.qt.io/cgit/qt-creator/qt-creator.git/tree/dist/changes-4.15.0.md
- Update 0001-Disable-some-plugins.patch
- Rebase fix-application-output.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1623326400">- Update to 4.15.1:
  * https://code.qt.io/cgit/qt-creator/qt-creator.git/tree/dist/changes-4.15.1.md</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1626696000">- Update to 4.15.2
  * https://code.qt.io/cgit/qt-creator/qt-creator.git/tree/dist/changes-4.15.2.md</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1628769600">- Update to 5.0.0-rc1
- Rebase 0001-Disable-some-plugins.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1629979200">- Update to 5.0.0
  * https://www.qt.io/blog/qt-creator-5.0-released</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1631707200">- Update to 5.0.1
  * https://www.qt.io/blog/qt-creator-5.0.1-released</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1633089600">- Update to 5.0.2
  * Fixed that Qt 5 context help was shown even if Qt 6
    documentation is available
  * Fixed canceling of builds
  * Changed the `File System` special node to be shown only on
    parsing failure
  * Fixed loading of projects without targets
  * Fixed that no targets where shown in added build step
  * Fixed that `ninja` could not be found after changing Qt
    installation location
  * Fixed debugging of terminal applications with GDB &lt; 10</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1633953600">- Unset SUSE_IGNORED_RPATHS to avoid a build failure caused by one
  of the binutils patches (boo#1191473)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1634212800">- Update to 6.0.0~beta1:
  * https://www.qt.io/blog/qt-creator-6-beta-released
- Rename libqt5-creator to qt5-creator
- Add a qt6 flavor
- Rebase fix-application-output.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1635508800">- Update to 6.0.0-beta2
  https://www.qt.io/blog/qt-creator-6-beta2-released</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638446400">- Update to 6.0.0
  https://www.qt.io/blog/qt-creator-6-released
- Drop the SUSE_IGNORED_RPATHS workaround now that the binutils
  bug is fixed.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1640174400">- Update to 6.0.1
  https://code.qt.io/cgit/qt-creator/qt-creator.git/tree/dist/changes-6.0.1.md</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1642680000">- Update to 6.0.2
  https://code.qt.io/cgit/qt-creator/qt-creator.git/plain/dist/changes-6.0.2.md
  * Fixed crash in process launcher
  * Fixed that `Select All` scrolled to bottom
  * Fixed copying with block selection
  * Fixed working directory for `REPL`
  * Fixed missing options in property editor
  * Fixed that closing application in `Application Output` pane
    killed process even if `Keep Running` was selected
  * Fixed filtering in target setup page
  * Fixed crash when switching screen configuration
- Add patch to fix the 32bit builds:
  * c7deacf.diff</changelog>
  <changelog author="Matthias Fehring &lt;buschmann23@opensuse.org&gt;" date="1643976000">- Explicitly require SQLite plugin for QtSql that is needed by the
  help system.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1647000000">- Update to 7.0.0~rc1:
  * https://www.qt.io/blog/qt-creator-7-rc-released
- Drop c7deacf.diff. Merged upstream
- Rebase fix-application-output.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1648123200">- Update to 7.0.0
  * https://www.qt.io/blog/qt-creator-7-released</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1649678400">- Fix the plugin-devel package (boo#1197978)
  To create qt-creator plugins, some files not installed by default
  are required.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1651060800">- Update to 7.0.1. Bugfix release:
  * https://www.qt.io/blog/qt-creator-7.0.1-released
- Remove obsolete version check</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1651406400">- Don't let the %cmake macro ignore the install rpath (boo#1198281)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1653912000">- Update to 7.0.2. Bugfix release:
  * https://www.qt.io/blog/qt-creator-7.0.2-released
- Add patch to fix build with recent KSyntaxHighlighting releases:
  * 0001-Correctly-include-KSyntaxHighlighting-headers.patch</changelog>
</package>
<package pkgid="7b535de756146a83bca0f0e79ba1b7bca368d7f6ba3b57b7576d0e2ad5d1b8b1" name="qt5-creator-plugin-devel" arch="x86_64">
  <version epoch="0" ver="7.0.2" rel="bp154.2.3.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1620907200">- Update to 4.15.0:
  https://code.qt.io/cgit/qt-creator/qt-creator.git/tree/dist/changes-4.15.0.md
- Update 0001-Disable-some-plugins.patch
- Rebase fix-application-output.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1623326400">- Update to 4.15.1:
  * https://code.qt.io/cgit/qt-creator/qt-creator.git/tree/dist/changes-4.15.1.md</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1626696000">- Update to 4.15.2
  * https://code.qt.io/cgit/qt-creator/qt-creator.git/tree/dist/changes-4.15.2.md</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1628769600">- Update to 5.0.0-rc1
- Rebase 0001-Disable-some-plugins.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1629979200">- Update to 5.0.0
  * https://www.qt.io/blog/qt-creator-5.0-released</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1631707200">- Update to 5.0.1
  * https://www.qt.io/blog/qt-creator-5.0.1-released</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1633089600">- Update to 5.0.2
  * Fixed that Qt 5 context help was shown even if Qt 6
    documentation is available
  * Fixed canceling of builds
  * Changed the `File System` special node to be shown only on
    parsing failure
  * Fixed loading of projects without targets
  * Fixed that no targets where shown in added build step
  * Fixed that `ninja` could not be found after changing Qt
    installation location
  * Fixed debugging of terminal applications with GDB &lt; 10</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1633953600">- Unset SUSE_IGNORED_RPATHS to avoid a build failure caused by one
  of the binutils patches (boo#1191473)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1634212800">- Update to 6.0.0~beta1:
  * https://www.qt.io/blog/qt-creator-6-beta-released
- Rename libqt5-creator to qt5-creator
- Add a qt6 flavor
- Rebase fix-application-output.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1635508800">- Update to 6.0.0-beta2
  https://www.qt.io/blog/qt-creator-6-beta2-released</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638446400">- Update to 6.0.0
  https://www.qt.io/blog/qt-creator-6-released
- Drop the SUSE_IGNORED_RPATHS workaround now that the binutils
  bug is fixed.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1640174400">- Update to 6.0.1
  https://code.qt.io/cgit/qt-creator/qt-creator.git/tree/dist/changes-6.0.1.md</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1642680000">- Update to 6.0.2
  https://code.qt.io/cgit/qt-creator/qt-creator.git/plain/dist/changes-6.0.2.md
  * Fixed crash in process launcher
  * Fixed that `Select All` scrolled to bottom
  * Fixed copying with block selection
  * Fixed working directory for `REPL`
  * Fixed missing options in property editor
  * Fixed that closing application in `Application Output` pane
    killed process even if `Keep Running` was selected
  * Fixed filtering in target setup page
  * Fixed crash when switching screen configuration
- Add patch to fix the 32bit builds:
  * c7deacf.diff</changelog>
  <changelog author="Matthias Fehring &lt;buschmann23@opensuse.org&gt;" date="1643976000">- Explicitly require SQLite plugin for QtSql that is needed by the
  help system.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1647000000">- Update to 7.0.0~rc1:
  * https://www.qt.io/blog/qt-creator-7-rc-released
- Drop c7deacf.diff. Merged upstream
- Rebase fix-application-output.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1648123200">- Update to 7.0.0
  * https://www.qt.io/blog/qt-creator-7-released</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1649678400">- Fix the plugin-devel package (boo#1197978)
  To create qt-creator plugins, some files not installed by default
  are required.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1651060800">- Update to 7.0.1. Bugfix release:
  * https://www.qt.io/blog/qt-creator-7.0.1-released
- Remove obsolete version check</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1651406400">- Don't let the %cmake macro ignore the install rpath (boo#1198281)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1653912000">- Update to 7.0.2. Bugfix release:
  * https://www.qt.io/blog/qt-creator-7.0.2-released
- Add patch to fix build with recent KSyntaxHighlighting releases:
  * 0001-Correctly-include-KSyntaxHighlighting-headers.patch</changelog>
</package>
<package pkgid="7cefc4e93ed81622033a0a34448ea0307e7f2f21ec980b0c20f442c54b81542b" name="qt6-creator" arch="aarch64">
  <version epoch="0" ver="7.0.2" rel="bp154.2.3.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1620907200">- Update to 4.15.0:
  https://code.qt.io/cgit/qt-creator/qt-creator.git/tree/dist/changes-4.15.0.md
- Update 0001-Disable-some-plugins.patch
- Rebase fix-application-output.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1623326400">- Update to 4.15.1:
  * https://code.qt.io/cgit/qt-creator/qt-creator.git/tree/dist/changes-4.15.1.md</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1626696000">- Update to 4.15.2
  * https://code.qt.io/cgit/qt-creator/qt-creator.git/tree/dist/changes-4.15.2.md</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1628769600">- Update to 5.0.0-rc1
- Rebase 0001-Disable-some-plugins.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1629979200">- Update to 5.0.0
  * https://www.qt.io/blog/qt-creator-5.0-released</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1631707200">- Update to 5.0.1
  * https://www.qt.io/blog/qt-creator-5.0.1-released</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1633089600">- Update to 5.0.2
  * Fixed that Qt 5 context help was shown even if Qt 6
    documentation is available
  * Fixed canceling of builds
  * Changed the `File System` special node to be shown only on
    parsing failure
  * Fixed loading of projects without targets
  * Fixed that no targets where shown in added build step
  * Fixed that `ninja` could not be found after changing Qt
    installation location
  * Fixed debugging of terminal applications with GDB &lt; 10</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1633953600">- Unset SUSE_IGNORED_RPATHS to avoid a build failure caused by one
  of the binutils patches (boo#1191473)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1634212800">- Update to 6.0.0~beta1:
  * https://www.qt.io/blog/qt-creator-6-beta-released
- Rename libqt5-creator to qt5-creator
- Add a qt6 flavor
- Rebase fix-application-output.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1635508800">- Update to 6.0.0-beta2
  https://www.qt.io/blog/qt-creator-6-beta2-released</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638446400">- Update to 6.0.0
  https://www.qt.io/blog/qt-creator-6-released
- Drop the SUSE_IGNORED_RPATHS workaround now that the binutils
  bug is fixed.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1640174400">- Update to 6.0.1
  https://code.qt.io/cgit/qt-creator/qt-creator.git/tree/dist/changes-6.0.1.md</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1642680000">- Update to 6.0.2
  https://code.qt.io/cgit/qt-creator/qt-creator.git/plain/dist/changes-6.0.2.md
  * Fixed crash in process launcher
  * Fixed that `Select All` scrolled to bottom
  * Fixed copying with block selection
  * Fixed working directory for `REPL`
  * Fixed missing options in property editor
  * Fixed that closing application in `Application Output` pane
    killed process even if `Keep Running` was selected
  * Fixed filtering in target setup page
  * Fixed crash when switching screen configuration
- Add patch to fix the 32bit builds:
  * c7deacf.diff</changelog>
  <changelog author="Matthias Fehring &lt;buschmann23@opensuse.org&gt;" date="1643976000">- Explicitly require SQLite plugin for QtSql that is needed by the
  help system.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1647000000">- Update to 7.0.0~rc1:
  * https://www.qt.io/blog/qt-creator-7-rc-released
- Drop c7deacf.diff. Merged upstream
- Rebase fix-application-output.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1648123200">- Update to 7.0.0
  * https://www.qt.io/blog/qt-creator-7-released</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1649678400">- Fix the plugin-devel package (boo#1197978)
  To create qt-creator plugins, some files not installed by default
  are required.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1651060800">- Update to 7.0.1. Bugfix release:
  * https://www.qt.io/blog/qt-creator-7.0.1-released
- Remove obsolete version check</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1651406400">- Don't let the %cmake macro ignore the install rpath (boo#1198281)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1653912000">- Update to 7.0.2. Bugfix release:
  * https://www.qt.io/blog/qt-creator-7.0.2-released
- Add patch to fix build with recent KSyntaxHighlighting releases:
  * 0001-Correctly-include-KSyntaxHighlighting-headers.patch</changelog>
</package>
<package pkgid="2af99a6b4c605b107ff1ebb813b7ff0a2fe4362bd46ea1eac316c26e9f6bb498" name="qt6-creator" arch="ppc64le">
  <version epoch="0" ver="7.0.2" rel="bp154.2.3.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1620907200">- Update to 4.15.0:
  https://code.qt.io/cgit/qt-creator/qt-creator.git/tree/dist/changes-4.15.0.md
- Update 0001-Disable-some-plugins.patch
- Rebase fix-application-output.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1623326400">- Update to 4.15.1:
  * https://code.qt.io/cgit/qt-creator/qt-creator.git/tree/dist/changes-4.15.1.md</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1626696000">- Update to 4.15.2
  * https://code.qt.io/cgit/qt-creator/qt-creator.git/tree/dist/changes-4.15.2.md</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1628769600">- Update to 5.0.0-rc1
- Rebase 0001-Disable-some-plugins.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1629979200">- Update to 5.0.0
  * https://www.qt.io/blog/qt-creator-5.0-released</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1631707200">- Update to 5.0.1
  * https://www.qt.io/blog/qt-creator-5.0.1-released</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1633089600">- Update to 5.0.2
  * Fixed that Qt 5 context help was shown even if Qt 6
    documentation is available
  * Fixed canceling of builds
  * Changed the `File System` special node to be shown only on
    parsing failure
  * Fixed loading of projects without targets
  * Fixed that no targets where shown in added build step
  * Fixed that `ninja` could not be found after changing Qt
    installation location
  * Fixed debugging of terminal applications with GDB &lt; 10</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1633953600">- Unset SUSE_IGNORED_RPATHS to avoid a build failure caused by one
  of the binutils patches (boo#1191473)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1634212800">- Update to 6.0.0~beta1:
  * https://www.qt.io/blog/qt-creator-6-beta-released
- Rename libqt5-creator to qt5-creator
- Add a qt6 flavor
- Rebase fix-application-output.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1635508800">- Update to 6.0.0-beta2
  https://www.qt.io/blog/qt-creator-6-beta2-released</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638446400">- Update to 6.0.0
  https://www.qt.io/blog/qt-creator-6-released
- Drop the SUSE_IGNORED_RPATHS workaround now that the binutils
  bug is fixed.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1640174400">- Update to 6.0.1
  https://code.qt.io/cgit/qt-creator/qt-creator.git/tree/dist/changes-6.0.1.md</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1642680000">- Update to 6.0.2
  https://code.qt.io/cgit/qt-creator/qt-creator.git/plain/dist/changes-6.0.2.md
  * Fixed crash in process launcher
  * Fixed that `Select All` scrolled to bottom
  * Fixed copying with block selection
  * Fixed working directory for `REPL`
  * Fixed missing options in property editor
  * Fixed that closing application in `Application Output` pane
    killed process even if `Keep Running` was selected
  * Fixed filtering in target setup page
  * Fixed crash when switching screen configuration
- Add patch to fix the 32bit builds:
  * c7deacf.diff</changelog>
  <changelog author="Matthias Fehring &lt;buschmann23@opensuse.org&gt;" date="1643976000">- Explicitly require SQLite plugin for QtSql that is needed by the
  help system.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1647000000">- Update to 7.0.0~rc1:
  * https://www.qt.io/blog/qt-creator-7-rc-released
- Drop c7deacf.diff. Merged upstream
- Rebase fix-application-output.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1648123200">- Update to 7.0.0
  * https://www.qt.io/blog/qt-creator-7-released</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1649678400">- Fix the plugin-devel package (boo#1197978)
  To create qt-creator plugins, some files not installed by default
  are required.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1651060800">- Update to 7.0.1. Bugfix release:
  * https://www.qt.io/blog/qt-creator-7.0.1-released
- Remove obsolete version check</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1651406400">- Don't let the %cmake macro ignore the install rpath (boo#1198281)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1653912000">- Update to 7.0.2. Bugfix release:
  * https://www.qt.io/blog/qt-creator-7.0.2-released
- Add patch to fix build with recent KSyntaxHighlighting releases:
  * 0001-Correctly-include-KSyntaxHighlighting-headers.patch</changelog>
</package>
<package pkgid="ec81e44e4c03e6afaa1c99cf4b3793ad6f0d396ffabde455be3e70788084d82f" name="qt6-creator" arch="s390x">
  <version epoch="0" ver="7.0.2" rel="bp154.2.3.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1620907200">- Update to 4.15.0:
  https://code.qt.io/cgit/qt-creator/qt-creator.git/tree/dist/changes-4.15.0.md
- Update 0001-Disable-some-plugins.patch
- Rebase fix-application-output.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1623326400">- Update to 4.15.1:
  * https://code.qt.io/cgit/qt-creator/qt-creator.git/tree/dist/changes-4.15.1.md</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1626696000">- Update to 4.15.2
  * https://code.qt.io/cgit/qt-creator/qt-creator.git/tree/dist/changes-4.15.2.md</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1628769600">- Update to 5.0.0-rc1
- Rebase 0001-Disable-some-plugins.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1629979200">- Update to 5.0.0
  * https://www.qt.io/blog/qt-creator-5.0-released</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1631707200">- Update to 5.0.1
  * https://www.qt.io/blog/qt-creator-5.0.1-released</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1633089600">- Update to 5.0.2
  * Fixed that Qt 5 context help was shown even if Qt 6
    documentation is available
  * Fixed canceling of builds
  * Changed the `File System` special node to be shown only on
    parsing failure
  * Fixed loading of projects without targets
  * Fixed that no targets where shown in added build step
  * Fixed that `ninja` could not be found after changing Qt
    installation location
  * Fixed debugging of terminal applications with GDB &lt; 10</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1633953600">- Unset SUSE_IGNORED_RPATHS to avoid a build failure caused by one
  of the binutils patches (boo#1191473)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1634212800">- Update to 6.0.0~beta1:
  * https://www.qt.io/blog/qt-creator-6-beta-released
- Rename libqt5-creator to qt5-creator
- Add a qt6 flavor
- Rebase fix-application-output.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1635508800">- Update to 6.0.0-beta2
  https://www.qt.io/blog/qt-creator-6-beta2-released</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638446400">- Update to 6.0.0
  https://www.qt.io/blog/qt-creator-6-released
- Drop the SUSE_IGNORED_RPATHS workaround now that the binutils
  bug is fixed.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1640174400">- Update to 6.0.1
  https://code.qt.io/cgit/qt-creator/qt-creator.git/tree/dist/changes-6.0.1.md</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1642680000">- Update to 6.0.2
  https://code.qt.io/cgit/qt-creator/qt-creator.git/plain/dist/changes-6.0.2.md
  * Fixed crash in process launcher
  * Fixed that `Select All` scrolled to bottom
  * Fixed copying with block selection
  * Fixed working directory for `REPL`
  * Fixed missing options in property editor
  * Fixed that closing application in `Application Output` pane
    killed process even if `Keep Running` was selected
  * Fixed filtering in target setup page
  * Fixed crash when switching screen configuration
- Add patch to fix the 32bit builds:
  * c7deacf.diff</changelog>
  <changelog author="Matthias Fehring &lt;buschmann23@opensuse.org&gt;" date="1643976000">- Explicitly require SQLite plugin for QtSql that is needed by the
  help system.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1647000000">- Update to 7.0.0~rc1:
  * https://www.qt.io/blog/qt-creator-7-rc-released
- Drop c7deacf.diff. Merged upstream
- Rebase fix-application-output.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1648123200">- Update to 7.0.0
  * https://www.qt.io/blog/qt-creator-7-released</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1649678400">- Fix the plugin-devel package (boo#1197978)
  To create qt-creator plugins, some files not installed by default
  are required.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1651060800">- Update to 7.0.1. Bugfix release:
  * https://www.qt.io/blog/qt-creator-7.0.1-released
- Remove obsolete version check</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1651406400">- Don't let the %cmake macro ignore the install rpath (boo#1198281)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1653912000">- Update to 7.0.2. Bugfix release:
  * https://www.qt.io/blog/qt-creator-7.0.2-released
- Add patch to fix build with recent KSyntaxHighlighting releases:
  * 0001-Correctly-include-KSyntaxHighlighting-headers.patch</changelog>
</package>
<package pkgid="cf461697b0ad5b19e4e1b169974109ab6fb97efd596da2af61cbf6841e85cac4" name="qt6-creator" arch="src">
  <version epoch="0" ver="7.0.2" rel="bp154.2.3.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1620907200">- Update to 4.15.0:
  https://code.qt.io/cgit/qt-creator/qt-creator.git/tree/dist/changes-4.15.0.md
- Update 0001-Disable-some-plugins.patch
- Rebase fix-application-output.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1623326400">- Update to 4.15.1:
  * https://code.qt.io/cgit/qt-creator/qt-creator.git/tree/dist/changes-4.15.1.md</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1626696000">- Update to 4.15.2
  * https://code.qt.io/cgit/qt-creator/qt-creator.git/tree/dist/changes-4.15.2.md</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1628769600">- Update to 5.0.0-rc1
- Rebase 0001-Disable-some-plugins.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1629979200">- Update to 5.0.0
  * https://www.qt.io/blog/qt-creator-5.0-released</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1631707200">- Update to 5.0.1
  * https://www.qt.io/blog/qt-creator-5.0.1-released</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1633089600">- Update to 5.0.2
  * Fixed that Qt 5 context help was shown even if Qt 6
    documentation is available
  * Fixed canceling of builds
  * Changed the `File System` special node to be shown only on
    parsing failure
  * Fixed loading of projects without targets
  * Fixed that no targets where shown in added build step
  * Fixed that `ninja` could not be found after changing Qt
    installation location
  * Fixed debugging of terminal applications with GDB &lt; 10</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1633953600">- Unset SUSE_IGNORED_RPATHS to avoid a build failure caused by one
  of the binutils patches (boo#1191473)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1634212800">- Update to 6.0.0~beta1:
  * https://www.qt.io/blog/qt-creator-6-beta-released
- Rename libqt5-creator to qt5-creator
- Add a qt6 flavor
- Rebase fix-application-output.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1635508800">- Update to 6.0.0-beta2
  https://www.qt.io/blog/qt-creator-6-beta2-released</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638446400">- Update to 6.0.0
  https://www.qt.io/blog/qt-creator-6-released
- Drop the SUSE_IGNORED_RPATHS workaround now that the binutils
  bug is fixed.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1640174400">- Update to 6.0.1
  https://code.qt.io/cgit/qt-creator/qt-creator.git/tree/dist/changes-6.0.1.md</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1642680000">- Update to 6.0.2
  https://code.qt.io/cgit/qt-creator/qt-creator.git/plain/dist/changes-6.0.2.md
  * Fixed crash in process launcher
  * Fixed that `Select All` scrolled to bottom
  * Fixed copying with block selection
  * Fixed working directory for `REPL`
  * Fixed missing options in property editor
  * Fixed that closing application in `Application Output` pane
    killed process even if `Keep Running` was selected
  * Fixed filtering in target setup page
  * Fixed crash when switching screen configuration
- Add patch to fix the 32bit builds:
  * c7deacf.diff</changelog>
  <changelog author="Matthias Fehring &lt;buschmann23@opensuse.org&gt;" date="1643976000">- Explicitly require SQLite plugin for QtSql that is needed by the
  help system.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1647000000">- Update to 7.0.0~rc1:
  * https://www.qt.io/blog/qt-creator-7-rc-released
- Drop c7deacf.diff. Merged upstream
- Rebase fix-application-output.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1648123200">- Update to 7.0.0
  * https://www.qt.io/blog/qt-creator-7-released</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1649678400">- Fix the plugin-devel package (boo#1197978)
  To create qt-creator plugins, some files not installed by default
  are required.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1651060800">- Update to 7.0.1. Bugfix release:
  * https://www.qt.io/blog/qt-creator-7.0.1-released
- Remove obsolete version check</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1651406400">- Don't let the %cmake macro ignore the install rpath (boo#1198281)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1653912000">- Update to 7.0.2. Bugfix release:
  * https://www.qt.io/blog/qt-creator-7.0.2-released
- Add patch to fix build with recent KSyntaxHighlighting releases:
  * 0001-Correctly-include-KSyntaxHighlighting-headers.patch</changelog>
</package>
<package pkgid="2a31ff38dc4d8e1dca88e256eac20daaca2bc13a6759bf2b3d4bc8a32398ef40" name="qt6-creator" arch="x86_64">
  <version epoch="0" ver="7.0.2" rel="bp154.2.3.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1620907200">- Update to 4.15.0:
  https://code.qt.io/cgit/qt-creator/qt-creator.git/tree/dist/changes-4.15.0.md
- Update 0001-Disable-some-plugins.patch
- Rebase fix-application-output.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1623326400">- Update to 4.15.1:
  * https://code.qt.io/cgit/qt-creator/qt-creator.git/tree/dist/changes-4.15.1.md</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1626696000">- Update to 4.15.2
  * https://code.qt.io/cgit/qt-creator/qt-creator.git/tree/dist/changes-4.15.2.md</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1628769600">- Update to 5.0.0-rc1
- Rebase 0001-Disable-some-plugins.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1629979200">- Update to 5.0.0
  * https://www.qt.io/blog/qt-creator-5.0-released</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1631707200">- Update to 5.0.1
  * https://www.qt.io/blog/qt-creator-5.0.1-released</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1633089600">- Update to 5.0.2
  * Fixed that Qt 5 context help was shown even if Qt 6
    documentation is available
  * Fixed canceling of builds
  * Changed the `File System` special node to be shown only on
    parsing failure
  * Fixed loading of projects without targets
  * Fixed that no targets where shown in added build step
  * Fixed that `ninja` could not be found after changing Qt
    installation location
  * Fixed debugging of terminal applications with GDB &lt; 10</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1633953600">- Unset SUSE_IGNORED_RPATHS to avoid a build failure caused by one
  of the binutils patches (boo#1191473)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1634212800">- Update to 6.0.0~beta1:
  * https://www.qt.io/blog/qt-creator-6-beta-released
- Rename libqt5-creator to qt5-creator
- Add a qt6 flavor
- Rebase fix-application-output.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1635508800">- Update to 6.0.0-beta2
  https://www.qt.io/blog/qt-creator-6-beta2-released</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638446400">- Update to 6.0.0
  https://www.qt.io/blog/qt-creator-6-released
- Drop the SUSE_IGNORED_RPATHS workaround now that the binutils
  bug is fixed.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1640174400">- Update to 6.0.1
  https://code.qt.io/cgit/qt-creator/qt-creator.git/tree/dist/changes-6.0.1.md</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1642680000">- Update to 6.0.2
  https://code.qt.io/cgit/qt-creator/qt-creator.git/plain/dist/changes-6.0.2.md
  * Fixed crash in process launcher
  * Fixed that `Select All` scrolled to bottom
  * Fixed copying with block selection
  * Fixed working directory for `REPL`
  * Fixed missing options in property editor
  * Fixed that closing application in `Application Output` pane
    killed process even if `Keep Running` was selected
  * Fixed filtering in target setup page
  * Fixed crash when switching screen configuration
- Add patch to fix the 32bit builds:
  * c7deacf.diff</changelog>
  <changelog author="Matthias Fehring &lt;buschmann23@opensuse.org&gt;" date="1643976000">- Explicitly require SQLite plugin for QtSql that is needed by the
  help system.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1647000000">- Update to 7.0.0~rc1:
  * https://www.qt.io/blog/qt-creator-7-rc-released
- Drop c7deacf.diff. Merged upstream
- Rebase fix-application-output.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1648123200">- Update to 7.0.0
  * https://www.qt.io/blog/qt-creator-7-released</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1649678400">- Fix the plugin-devel package (boo#1197978)
  To create qt-creator plugins, some files not installed by default
  are required.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1651060800">- Update to 7.0.1. Bugfix release:
  * https://www.qt.io/blog/qt-creator-7.0.1-released
- Remove obsolete version check</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1651406400">- Don't let the %cmake macro ignore the install rpath (boo#1198281)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1653912000">- Update to 7.0.2. Bugfix release:
  * https://www.qt.io/blog/qt-creator-7.0.2-released
- Add patch to fix build with recent KSyntaxHighlighting releases:
  * 0001-Correctly-include-KSyntaxHighlighting-headers.patch</changelog>
</package>
<package pkgid="17b6cb1f301d2d449c902f6248309a38b5961559e80dd3b7ba8e24797c0439db" name="qt6-creator-plugin-devel" arch="aarch64">
  <version epoch="0" ver="7.0.2" rel="bp154.2.3.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1620907200">- Update to 4.15.0:
  https://code.qt.io/cgit/qt-creator/qt-creator.git/tree/dist/changes-4.15.0.md
- Update 0001-Disable-some-plugins.patch
- Rebase fix-application-output.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1623326400">- Update to 4.15.1:
  * https://code.qt.io/cgit/qt-creator/qt-creator.git/tree/dist/changes-4.15.1.md</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1626696000">- Update to 4.15.2
  * https://code.qt.io/cgit/qt-creator/qt-creator.git/tree/dist/changes-4.15.2.md</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1628769600">- Update to 5.0.0-rc1
- Rebase 0001-Disable-some-plugins.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1629979200">- Update to 5.0.0
  * https://www.qt.io/blog/qt-creator-5.0-released</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1631707200">- Update to 5.0.1
  * https://www.qt.io/blog/qt-creator-5.0.1-released</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1633089600">- Update to 5.0.2
  * Fixed that Qt 5 context help was shown even if Qt 6
    documentation is available
  * Fixed canceling of builds
  * Changed the `File System` special node to be shown only on
    parsing failure
  * Fixed loading of projects without targets
  * Fixed that no targets where shown in added build step
  * Fixed that `ninja` could not be found after changing Qt
    installation location
  * Fixed debugging of terminal applications with GDB &lt; 10</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1633953600">- Unset SUSE_IGNORED_RPATHS to avoid a build failure caused by one
  of the binutils patches (boo#1191473)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1634212800">- Update to 6.0.0~beta1:
  * https://www.qt.io/blog/qt-creator-6-beta-released
- Rename libqt5-creator to qt5-creator
- Add a qt6 flavor
- Rebase fix-application-output.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1635508800">- Update to 6.0.0-beta2
  https://www.qt.io/blog/qt-creator-6-beta2-released</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638446400">- Update to 6.0.0
  https://www.qt.io/blog/qt-creator-6-released
- Drop the SUSE_IGNORED_RPATHS workaround now that the binutils
  bug is fixed.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1640174400">- Update to 6.0.1
  https://code.qt.io/cgit/qt-creator/qt-creator.git/tree/dist/changes-6.0.1.md</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1642680000">- Update to 6.0.2
  https://code.qt.io/cgit/qt-creator/qt-creator.git/plain/dist/changes-6.0.2.md
  * Fixed crash in process launcher
  * Fixed that `Select All` scrolled to bottom
  * Fixed copying with block selection
  * Fixed working directory for `REPL`
  * Fixed missing options in property editor
  * Fixed that closing application in `Application Output` pane
    killed process even if `Keep Running` was selected
  * Fixed filtering in target setup page
  * Fixed crash when switching screen configuration
- Add patch to fix the 32bit builds:
  * c7deacf.diff</changelog>
  <changelog author="Matthias Fehring &lt;buschmann23@opensuse.org&gt;" date="1643976000">- Explicitly require SQLite plugin for QtSql that is needed by the
  help system.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1647000000">- Update to 7.0.0~rc1:
  * https://www.qt.io/blog/qt-creator-7-rc-released
- Drop c7deacf.diff. Merged upstream
- Rebase fix-application-output.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1648123200">- Update to 7.0.0
  * https://www.qt.io/blog/qt-creator-7-released</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1649678400">- Fix the plugin-devel package (boo#1197978)
  To create qt-creator plugins, some files not installed by default
  are required.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1651060800">- Update to 7.0.1. Bugfix release:
  * https://www.qt.io/blog/qt-creator-7.0.1-released
- Remove obsolete version check</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1651406400">- Don't let the %cmake macro ignore the install rpath (boo#1198281)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1653912000">- Update to 7.0.2. Bugfix release:
  * https://www.qt.io/blog/qt-creator-7.0.2-released
- Add patch to fix build with recent KSyntaxHighlighting releases:
  * 0001-Correctly-include-KSyntaxHighlighting-headers.patch</changelog>
</package>
<package pkgid="ac8112ba1d9d8eeb02c6352c841f63591735d6c6dd244a090faf7f5e384239b2" name="qt6-creator-plugin-devel" arch="ppc64le">
  <version epoch="0" ver="7.0.2" rel="bp154.2.3.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1620907200">- Update to 4.15.0:
  https://code.qt.io/cgit/qt-creator/qt-creator.git/tree/dist/changes-4.15.0.md
- Update 0001-Disable-some-plugins.patch
- Rebase fix-application-output.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1623326400">- Update to 4.15.1:
  * https://code.qt.io/cgit/qt-creator/qt-creator.git/tree/dist/changes-4.15.1.md</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1626696000">- Update to 4.15.2
  * https://code.qt.io/cgit/qt-creator/qt-creator.git/tree/dist/changes-4.15.2.md</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1628769600">- Update to 5.0.0-rc1
- Rebase 0001-Disable-some-plugins.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1629979200">- Update to 5.0.0
  * https://www.qt.io/blog/qt-creator-5.0-released</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1631707200">- Update to 5.0.1
  * https://www.qt.io/blog/qt-creator-5.0.1-released</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1633089600">- Update to 5.0.2
  * Fixed that Qt 5 context help was shown even if Qt 6
    documentation is available
  * Fixed canceling of builds
  * Changed the `File System` special node to be shown only on
    parsing failure
  * Fixed loading of projects without targets
  * Fixed that no targets where shown in added build step
  * Fixed that `ninja` could not be found after changing Qt
    installation location
  * Fixed debugging of terminal applications with GDB &lt; 10</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1633953600">- Unset SUSE_IGNORED_RPATHS to avoid a build failure caused by one
  of the binutils patches (boo#1191473)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1634212800">- Update to 6.0.0~beta1:
  * https://www.qt.io/blog/qt-creator-6-beta-released
- Rename libqt5-creator to qt5-creator
- Add a qt6 flavor
- Rebase fix-application-output.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1635508800">- Update to 6.0.0-beta2
  https://www.qt.io/blog/qt-creator-6-beta2-released</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638446400">- Update to 6.0.0
  https://www.qt.io/blog/qt-creator-6-released
- Drop the SUSE_IGNORED_RPATHS workaround now that the binutils
  bug is fixed.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1640174400">- Update to 6.0.1
  https://code.qt.io/cgit/qt-creator/qt-creator.git/tree/dist/changes-6.0.1.md</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1642680000">- Update to 6.0.2
  https://code.qt.io/cgit/qt-creator/qt-creator.git/plain/dist/changes-6.0.2.md
  * Fixed crash in process launcher
  * Fixed that `Select All` scrolled to bottom
  * Fixed copying with block selection
  * Fixed working directory for `REPL`
  * Fixed missing options in property editor
  * Fixed that closing application in `Application Output` pane
    killed process even if `Keep Running` was selected
  * Fixed filtering in target setup page
  * Fixed crash when switching screen configuration
- Add patch to fix the 32bit builds:
  * c7deacf.diff</changelog>
  <changelog author="Matthias Fehring &lt;buschmann23@opensuse.org&gt;" date="1643976000">- Explicitly require SQLite plugin for QtSql that is needed by the
  help system.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1647000000">- Update to 7.0.0~rc1:
  * https://www.qt.io/blog/qt-creator-7-rc-released
- Drop c7deacf.diff. Merged upstream
- Rebase fix-application-output.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1648123200">- Update to 7.0.0
  * https://www.qt.io/blog/qt-creator-7-released</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1649678400">- Fix the plugin-devel package (boo#1197978)
  To create qt-creator plugins, some files not installed by default
  are required.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1651060800">- Update to 7.0.1. Bugfix release:
  * https://www.qt.io/blog/qt-creator-7.0.1-released
- Remove obsolete version check</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1651406400">- Don't let the %cmake macro ignore the install rpath (boo#1198281)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1653912000">- Update to 7.0.2. Bugfix release:
  * https://www.qt.io/blog/qt-creator-7.0.2-released
- Add patch to fix build with recent KSyntaxHighlighting releases:
  * 0001-Correctly-include-KSyntaxHighlighting-headers.patch</changelog>
</package>
<package pkgid="ea2729232e27deae746c0bcb944405acdb2bcc09c3c3fac279e025c27af4a09c" name="qt6-creator-plugin-devel" arch="s390x">
  <version epoch="0" ver="7.0.2" rel="bp154.2.3.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1620907200">- Update to 4.15.0:
  https://code.qt.io/cgit/qt-creator/qt-creator.git/tree/dist/changes-4.15.0.md
- Update 0001-Disable-some-plugins.patch
- Rebase fix-application-output.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1623326400">- Update to 4.15.1:
  * https://code.qt.io/cgit/qt-creator/qt-creator.git/tree/dist/changes-4.15.1.md</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1626696000">- Update to 4.15.2
  * https://code.qt.io/cgit/qt-creator/qt-creator.git/tree/dist/changes-4.15.2.md</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1628769600">- Update to 5.0.0-rc1
- Rebase 0001-Disable-some-plugins.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1629979200">- Update to 5.0.0
  * https://www.qt.io/blog/qt-creator-5.0-released</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1631707200">- Update to 5.0.1
  * https://www.qt.io/blog/qt-creator-5.0.1-released</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1633089600">- Update to 5.0.2
  * Fixed that Qt 5 context help was shown even if Qt 6
    documentation is available
  * Fixed canceling of builds
  * Changed the `File System` special node to be shown only on
    parsing failure
  * Fixed loading of projects without targets
  * Fixed that no targets where shown in added build step
  * Fixed that `ninja` could not be found after changing Qt
    installation location
  * Fixed debugging of terminal applications with GDB &lt; 10</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1633953600">- Unset SUSE_IGNORED_RPATHS to avoid a build failure caused by one
  of the binutils patches (boo#1191473)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1634212800">- Update to 6.0.0~beta1:
  * https://www.qt.io/blog/qt-creator-6-beta-released
- Rename libqt5-creator to qt5-creator
- Add a qt6 flavor
- Rebase fix-application-output.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1635508800">- Update to 6.0.0-beta2
  https://www.qt.io/blog/qt-creator-6-beta2-released</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638446400">- Update to 6.0.0
  https://www.qt.io/blog/qt-creator-6-released
- Drop the SUSE_IGNORED_RPATHS workaround now that the binutils
  bug is fixed.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1640174400">- Update to 6.0.1
  https://code.qt.io/cgit/qt-creator/qt-creator.git/tree/dist/changes-6.0.1.md</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1642680000">- Update to 6.0.2
  https://code.qt.io/cgit/qt-creator/qt-creator.git/plain/dist/changes-6.0.2.md
  * Fixed crash in process launcher
  * Fixed that `Select All` scrolled to bottom
  * Fixed copying with block selection
  * Fixed working directory for `REPL`
  * Fixed missing options in property editor
  * Fixed that closing application in `Application Output` pane
    killed process even if `Keep Running` was selected
  * Fixed filtering in target setup page
  * Fixed crash when switching screen configuration
- Add patch to fix the 32bit builds:
  * c7deacf.diff</changelog>
  <changelog author="Matthias Fehring &lt;buschmann23@opensuse.org&gt;" date="1643976000">- Explicitly require SQLite plugin for QtSql that is needed by the
  help system.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1647000000">- Update to 7.0.0~rc1:
  * https://www.qt.io/blog/qt-creator-7-rc-released
- Drop c7deacf.diff. Merged upstream
- Rebase fix-application-output.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1648123200">- Update to 7.0.0
  * https://www.qt.io/blog/qt-creator-7-released</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1649678400">- Fix the plugin-devel package (boo#1197978)
  To create qt-creator plugins, some files not installed by default
  are required.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1651060800">- Update to 7.0.1. Bugfix release:
  * https://www.qt.io/blog/qt-creator-7.0.1-released
- Remove obsolete version check</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1651406400">- Don't let the %cmake macro ignore the install rpath (boo#1198281)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1653912000">- Update to 7.0.2. Bugfix release:
  * https://www.qt.io/blog/qt-creator-7.0.2-released
- Add patch to fix build with recent KSyntaxHighlighting releases:
  * 0001-Correctly-include-KSyntaxHighlighting-headers.patch</changelog>
</package>
<package pkgid="cc0ffbbcdc07bb373eeb0eaa8f04bc6ab37725c665bd1ef3c399ab0727964a60" name="qt6-creator-plugin-devel" arch="x86_64">
  <version epoch="0" ver="7.0.2" rel="bp154.2.3.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1620907200">- Update to 4.15.0:
  https://code.qt.io/cgit/qt-creator/qt-creator.git/tree/dist/changes-4.15.0.md
- Update 0001-Disable-some-plugins.patch
- Rebase fix-application-output.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1623326400">- Update to 4.15.1:
  * https://code.qt.io/cgit/qt-creator/qt-creator.git/tree/dist/changes-4.15.1.md</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1626696000">- Update to 4.15.2
  * https://code.qt.io/cgit/qt-creator/qt-creator.git/tree/dist/changes-4.15.2.md</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1628769600">- Update to 5.0.0-rc1
- Rebase 0001-Disable-some-plugins.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1629979200">- Update to 5.0.0
  * https://www.qt.io/blog/qt-creator-5.0-released</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1631707200">- Update to 5.0.1
  * https://www.qt.io/blog/qt-creator-5.0.1-released</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1633089600">- Update to 5.0.2
  * Fixed that Qt 5 context help was shown even if Qt 6
    documentation is available
  * Fixed canceling of builds
  * Changed the `File System` special node to be shown only on
    parsing failure
  * Fixed loading of projects without targets
  * Fixed that no targets where shown in added build step
  * Fixed that `ninja` could not be found after changing Qt
    installation location
  * Fixed debugging of terminal applications with GDB &lt; 10</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1633953600">- Unset SUSE_IGNORED_RPATHS to avoid a build failure caused by one
  of the binutils patches (boo#1191473)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1634212800">- Update to 6.0.0~beta1:
  * https://www.qt.io/blog/qt-creator-6-beta-released
- Rename libqt5-creator to qt5-creator
- Add a qt6 flavor
- Rebase fix-application-output.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1635508800">- Update to 6.0.0-beta2
  https://www.qt.io/blog/qt-creator-6-beta2-released</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638446400">- Update to 6.0.0
  https://www.qt.io/blog/qt-creator-6-released
- Drop the SUSE_IGNORED_RPATHS workaround now that the binutils
  bug is fixed.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1640174400">- Update to 6.0.1
  https://code.qt.io/cgit/qt-creator/qt-creator.git/tree/dist/changes-6.0.1.md</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1642680000">- Update to 6.0.2
  https://code.qt.io/cgit/qt-creator/qt-creator.git/plain/dist/changes-6.0.2.md
  * Fixed crash in process launcher
  * Fixed that `Select All` scrolled to bottom
  * Fixed copying with block selection
  * Fixed working directory for `REPL`
  * Fixed missing options in property editor
  * Fixed that closing application in `Application Output` pane
    killed process even if `Keep Running` was selected
  * Fixed filtering in target setup page
  * Fixed crash when switching screen configuration
- Add patch to fix the 32bit builds:
  * c7deacf.diff</changelog>
  <changelog author="Matthias Fehring &lt;buschmann23@opensuse.org&gt;" date="1643976000">- Explicitly require SQLite plugin for QtSql that is needed by the
  help system.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1647000000">- Update to 7.0.0~rc1:
  * https://www.qt.io/blog/qt-creator-7-rc-released
- Drop c7deacf.diff. Merged upstream
- Rebase fix-application-output.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1648123200">- Update to 7.0.0
  * https://www.qt.io/blog/qt-creator-7-released</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1649678400">- Fix the plugin-devel package (boo#1197978)
  To create qt-creator plugins, some files not installed by default
  are required.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1651060800">- Update to 7.0.1. Bugfix release:
  * https://www.qt.io/blog/qt-creator-7.0.1-released
- Remove obsolete version check</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1651406400">- Don't let the %cmake macro ignore the install rpath (boo#1198281)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1653912000">- Update to 7.0.2. Bugfix release:
  * https://www.qt.io/blog/qt-creator-7.0.2-released
- Add patch to fix build with recent KSyntaxHighlighting releases:
  * 0001-Correctly-include-KSyntaxHighlighting-headers.patch</changelog>
</package>
<package pkgid="4cce9480a22e8d632a3eec70adfb8f24498056ef4fdf03c7295983e164a62208" name="roundcubemail" arch="noarch">
  <version epoch="0" ver="1.5.3" rel="bp154.2.3.1"/>
  <changelog author="Lars Vogdt &lt;lars@linux-schulserver.de&gt;" date="1577966400">- update to 1.4.2:
  * Plugin API: Make actionbefore, before, actionafter and after
    events working with plugin actions (#7106)
  * Managesieve: Replace "Filter disabled" with "Filter enabled" (#7028)
  * Managesieve: Fix so modifier type select wasn't hidden after hiding
    modifier select on header change
  * Managesieve: Fix filter selection after removing a first filter (#7079)
  * Markasjunk: Fix marking more than one message as spam/ham with
    email_learn driver (#7121)
  * Password: Fix kpasswd and smb drivers' double-escaping bug (#7092)
  * Enigma: Add script to import keys from filesystem to the db
    storage (for multihost)
  * Installer: Fix DB Write test on SQLite database
    ("database is locked" error) (#7064)
  * Installer: Fix so SQLite DSN with a relative path to the database
    file works in Installer
  * Elastic: Fix contrast of warning toasts (#7058)
  * Elastic: Simple search in pretty selects (#7072)
  * Elastic: Fix hidden list widget on mobile/tablet when selecting
    folder while search menu is open (#7120)
  * Fix so type attribute on script tags is not used on HTML5 pages (#6975)
  * Fix unread count after purge on a folder that is not currently selected (#7051)
  * Fix bug where Enter key didn't work on messages list in "List" layout (#7052)
  * Fix bug where deleting a saved search in addressbook caused
    display issue on sources/groups list (#7061)
  * Fix bug where a new saved search added after removing all searches
    wasn't added to the list (#7061)
  * Fix bug where a new contact group added after removing all groups
    from addressbook wasn't added to the list
  * Fix so install-jsdeps.sh removes Bootstrap's sourceMappingURL (#7035)
  * Fix so use of Ctrl+A does not scroll the list (#7020)
  * Fix/remove useless keyup event handler on username input in logon form (#6970)
  * Fix bug where cancelling switching from HTML to plain text didn't
    set the flag properly (#7077)
  * Fix bug where HTML reply could add an empty line with extra indentation
    above the original message (#7088)
  * Fix matching multiple X-Forwarded-For addresses with 'proxy_whitelist' (#7107)
  * Fix so displayed maximum attachment size depends also on 'max_message_size' (#7105)
  * Fix bug where 'skins_allowed' option didn't enforce user skin
    preference (#7080)
  * Fix so contact's organization field accepts up to 128 characters
    (it was 50)
  * Fix bug where listing tables in PostgreSQL database with db_prefix
    didn't work (#7093)
  * Fix bug where 'text' attribute on body tag was ignored when
    displaying HTML message (#7109)
  * Fix bug where next message wasn't displayed after delete in List mode (#7096)
  * Fix so number of contacts in a group is not limited to 200 when
    redirecting to mail composer from Contacts (#6972)
  * Fix malformed characters in HTML message with charset meta tag
  not in head (#7116)
- renamed patches:
  - roundcubemail-1.1-beta-config_dir.patch
  + roundcubemail-1.4.2-config_dir.patch</changelog>
  <changelog author="Lars Vogdt &lt;lars@linux-schulserver.de&gt;" date="1582027200">- prefer brotli over gzip if brotli is available:
  + enable mod_brotli in roundcubemail-httpd.conf (after deflate)
  + enable brotli via a2enmod for new installations</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1582200000">- update to 1.4.3
  * Enigma: Fix so key list selection is reset when opening key creation form (#7154)
  * Enigma: Fix so using list checkbox selection does not load the key preview frame
  * Enigma: Fix generation of key pairs for identities with IDN domains (#7181)
  * Enigma: Display IDN domains of key users and identities in UTF8
  * Enigma: Fix bug where "Send unencrypted" button didn't work in Elastic skin (#7205)
  * Managesieve: Fix bug where it wasn't possible to save flag actions (#7188)
  * Markasjunk: Fix bug where marking as spam/ham didn't work on moving messages with drag-and-drop (#7137)
  * Password: Make chpass-wrapper.py Python 3 compatible (#7135)
  * Elastic: Fix disappearing sidebar in mail compose after clicking Mail button
  * Elastic: Fix incorrect aria-disabled attribute on Mail taskmenu button in mail compose
  * Elastic: Fix bug where it was possible to switch editor mode when 'htmleditor' was in 'dont_override' (#7143)
  * Elastic: Fix text selection in recipient inputs (#7129)
  * Elastic: Fix missing Close button in "more recipients" dialog
  * Elastic: Fix non-working folder subscription checkbox for newly added folders (#7174)
  * Fix regression where "Open in new window" action didn't work (#7155)
  * Fix PHP Warning: array_filter() expects parameter 1 to be array, null given in subscriptions_option plugin (#7165)
  * Fix unexpected error message when mail refresh involves folder auto-unsubscribe (#6923)
  * Fix recipient duplicates in print-view when the recipient list has been expanded (#7169)
  * Fix bug where files in skins/ directory were listed on skins list (#7180)
  * Fix bug where message parts with no Content-Disposition header and no name were not listed on attachments list (#7117)
  * Fix display issues with mail subject that contains line-breaks (#7191)
  * Fix invalid Content-Transfer-Encoding on multipart messages - Mail_Mime fix (#7170)
  * Fix regression where using an absolute path to SQLite database file on Windows didn't work (#7196)
  * Fix using unix:///path/to/socket.file in memcached driver (#7210)
- adjusted/renamed roundcubemail-1.4.2-config_dir.patch to
  roundcubemail-1.4.3-config_dir.patch</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1588161600">- update to 1.4.4
  * Fix bug where attachments with Content-Id were attached to the message on reply (#7122)
  * Fix identity selection on reply when both sender and recipient addresses are included in identities (#7211)
  * Elastic: Fix text selection with Shift+PageUp and Shift+PageDown in plain text editor when using Chrome (#7230)
  * Elastic: Fix recipient input bug when using click to select a contact from autocomplete list (#7231)
  * Elastic: Fix color of a folder with recent messages (#7281)
  * Elastic: Restrict logo size in print view (#7275)
  * Fix invalid Content-Type for messages with only html part and inline images   * Mail_Mime-1.10.7 (#7261)
  * Fix missing contact display name in QR Code data (#7257)
  * Fix so button label in Select image/media dialogs is "Close" not "Cancel" (#7246)
  * Fix regression in testing database schema on MSSQL (#7227)
  * Fix cursor position after inserting a group to a recipient input using autocompletion (#7267)
  * Fix string literals handling in IMAP STATUS (and various other) responses (#7290)
  * Fix bug where multiple images in a message were replaced by the first one on forward/reply/edit (#7293)
  * Fix handling keyservers configured with protocol prefix (#7295)
  * Markasjunk: Fix marking as spam/ham on moving messages with Move menu (#7189)
  * Markasjunk: Fix bug where moving to Junk was failing on messages selected with Select &gt; All (#7206)
  * Fix so imap error message is displayed to the user on folder create/update (#7245)
  * Fix bug where a special folder couldn't be created if a special-use flag is not supported (#7147)
  * Mailvelope: Fix bug where recipients with name were not handled properly in mail compose (#7312)
  * Fix characters encoding in group rename input after group creation/rename (#7330)
  * Fix bug where some message/rfc822 parts could not be attached on forward (#7323)
  * Make install-jsdeps.sh script working without the 'file' program installed (#7325)
  * Fix performance issue of parsing big HTML messages by disabling HTML5 parser for these (#7331)
  * Fix so Print button for PDF attachments works on Firefox &gt;= 75 (#5125)
  * Security: Fix XSS issue in handling of CDATA in HTML messages
  * Security: Fix remote code execution via crafted 'im_convert_path' or 'im_identify_path' settings
  * Security: Fix local file inclusion (and code execution) via crafted 'plugins' option
  * Security: Fix CSRF bypass that could be used to log out an authenticated user (#7302)
- adjusted/renamed roundcubemail-1.4.3-config_dir.patch to
  roundcubemail-1.4.4-config_dir.patch</changelog>
  <changelog author="Lars Vogdt &lt;lars@linux-schulserver.de&gt;" date="1591185600">- update to 1.4.5
  Security fixes
  * Fix XSS issue in template object 'username' (#7406)
  * Fix cross-site scripting (XSS) via malicious XML attachment
  * Fix a couple of XSS issues in Installer (#7406)
  * Better fix for CVE-2020-12641
  Other changes
  * Fix bug in extracting required plugins from composer.json that led
    to spurious error in log (#7364)
  * Fix so the database setup description is compatible with MySQL 8 (#7340)
  * Markasjunk: Fix regression in jsevent driver (#7361)
  * Fix missing flag indication on collapsed thread in Larry and Elastic (#7366)
  * Fix default keyservers (use keys.openpgp.org), add note about CORS (#7373, #7367)
  * Password: Fix issue with Modoboa driver (#7372)
  * Mailvelope: Use sender's address to find pubkeys to check signatures (#7348)
  * Mailvelope: Fix Encrypt button hidden in Elastic (#7353)
  * Fix PHP warning: count(): Parameter must be an array or an object...
    in ID command handler (#7392)
  * Fix error when user-configured skin does not exist anymore (#7271)
  * Elastic: Fix aspect ratio of a contact photo in mail preview (#7339)
  * Fix bug where PDF attachments marked as inline could have not been
    attached on mail forward (#7382)
  * Security: Fix a couple of XSS issues in Installer (#7406)
  * Security: Fix XSS issue in template object 'username' (#7406)
  * Security: Fix cross-site scripting (XSS) via malicious XML attachment
  * Security: Better fix for CVE-2020-12641
- renamed roundcubemail-1.4.4-config_dir.patch to
  roundcubemail-1.4.5-config_dir.patch</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1591531200">- update to 1.4.6
  * Installer: Fix regression in SMTP test section (#7417)
- renamed roundcubemail-1.4.5-config_dir.patch to
  roundcubemail-1.4.6-config_dir.patch</changelog>
  <changelog author="chris@computersalat.de" date="1593777600">- add http.inc file
  * include one file for php5/php7 admin flags/values</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1594036800">- update to 1.4.7 with security fix:
  * Security: Fix cross-site scripting (XSS) via HTML messages with malicious svg/namespace
  * Fix bug where subfolders of special folders could have been duplicated on folder list
  * Increase maximum size of contact jobtitle and department fields to 128 characters
  * Fix missing newline after the logged line when writing to stdout (#7418)
  * Elastic: Fix context menu (paste) on the recipient input (#7431)
  * Fix problem with forwarding inline images attached to messages with no HTML part (#7414)
  * Fix problem with handling attached images with same name when using
    database_attachments/redundant_attachments (#7455)
- renamed roundcubemail-1.4.6-config_dir.patch to
  roundcubemail-1.4.7-config_dir.patch</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1597147200">- update to 1.4.8 with security fixes:
  * Fix cross-site scripting (XSS) via HTML messages with malicious svg content (CVE-2020-16145)
  * Fix cross-site scripting (XSS) via HTML messages with malicious math content</changelog>
  <changelog author="Lars Vogdt &lt;lars@linux-schulserver.de&gt;" date="1597320000">- finally renamed roundcubemail-1.4.8-config_dir.patch to
  roundcubemail-config_dir.patch to avoid additional roundtrip
  times with each submission:
  + removed roundcubemail-1.4.7-config_dir.patch
  + added  roundcubemail-config_dir.patch</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1601294400">- update to 1.4.9:
  * Fix HTML editor in latest Chrome 85.0.4183.102, update to TinyMCE 4.9.11 (#7615)
  * Add missing localization for some label/legend elements in userinfo plugin (#7478)
  * Fix importing birthday dates from Gmail vCards (BDAY:YYYYMMDD)
  * Fix restoring Cc/Bcc fields from local storage (#7554)
  * Fix jstz.min.js installation, bump version to 1.0.7
  * Fix incorrect PDO::lastInsertId() use in sqlsrv driver (#7564)
  * Fix link to closure compiler in bin/jsshrink.sh script (#7567)
  * Fix bug where some parts of a message could have been missing in a reply/forward body (#7568)
  * Fix empty space on mail printouts in Chrome (#7604)
  * Fix empty output from HTML5 parser when content contains XML tag (#7624)
  * Fix scroll jump on key press in plain text mode of the HTML editor (#7622)
  * Fix so autocompletion list does not hide on scroll inside it (#7592)</changelog>
  <changelog author="pgajdos@suse.com" date="1606824000">- use system apache rpm macros</changelog>
  <changelog author="Lars Vogdt &lt;lars@linux-schulserver.de&gt;" date="1609156800">- update to 1.4.10:
  * Stored cross-site scripting (XSS) via HTML or plain text messages
    with malicious content ( CVE-2020-35730 boo#1180399 )
  * Fix extra angle brackets in In-Reply-To header derived from mailto: params (#7655)
  * Fix folder list issue when special folder is a subfolder (#7647)
  * Fix Elastic's folder subscription toggle in search result (#7653)
  * Fix state of subscription toggle on folders list after changing
    folder state from the search result (#7653)
  * Security: Fix cross-site scripting (XSS) via HTML or plain text
    messages with malicious content</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1611316800">- add PHP version to Requires: and Recommends: to make sure the same
  version is installed as used during packaging
- drop Requires: http_daemon (fixes boo#1180132) and Suggests: apache2
  (which is already required though mod_php_any)</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1612785600">- update to 1.4.11 with security fix:
  Fix cross-site scripting (XSS) via HTML messages with malicious CSS content</changelog>
  <changelog author="lars@linux-schulserver.de - 1.5.0" date="1634644800">- update to 1.5.0
  + full PHP8 support
  + Dark mode for Elastic skin
  + OAuth2/XOauth support (with plugin hooks)
  + Collected recipients and trusted senders
  + Moving recipients between inputs with drag &amp; drop
  + Full unicode support with MySQL database
  + Support of IMAP LITERAL- extension RFC 7888
    &lt;https://datatracker.ietf.org/doc/html/rfc7888&gt;
  + Support of RFC 2231 &lt;https://datatracker.ietf.org/doc/html/rfc2231&gt;
    encoded names
  + Cache refactoring
  More at https://github.com/roundcube/roundcubemail/releases/tag/1.5.0
- adjusted some file names to new release
  (_styles.less -&gt; styles.less; _variables.less -&gt; variables.less;
  CHANGELOG -&gt; CHANGELOG.md)
- vendor/roundcube/plugin-installer/src/bin/rcubeinitdb.sh does not exist
  any longer
- added SECURITY.md to documentation
- mark the whole documentation directory as documentation instead of
  listing some files and others not (avoid duplicate entries in RPM-DB)
- adjust requirements: php-intl is now required</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1638100800">- update to 1.5.1
  * Fix importing contacts with no email address (#8227)
  * Fix so session's search scope is not used if search is not active (#8199)
  * Fix some PHP8 warnings (#8239)
  * Fix so dark mode state is retained after closing the browser (#8237)
  * Fix bug where new messages were not added to the list on refresh if skip_deleted=true (#8234)
  * Fix colors on "Show source" page in dark mode (#8246)
  * Fix handling of dark_mode_support:false setting in skins meta.json - also when devel_mode=false (#8249)
  * Fix database initialization if db_prefix is a schema prefix (#8221)
  * Fix undefined constant error in Installer on Windows (#8258)
  * Fix installation/upgrade on MySQL 5.5 - Index column size too large (#8231)
  * Fix regression in setting of contact listing name (#8260)
  * Fix bug in Larry skin where headers toggle state was reset on full page preview (#8203)
  * Fix bug where \u200b characters were added into the recipient input preventing mail delivery (#8269)
  * Fix charset conversion errors on PHP &lt; 8 for charsets not supported by mbstring (#8252)
  * Fix bug where adding a contact to trusted senders via "Always allow from..." button didn't work (#8264, #8268)
  * Fix bug with show_images setting where option 1 and 3 were swapped (#8268)
  * Fix PHP fatal error on an undefined constant in contacts import action (#8277)
  * Fix fetching headers of multiple message parts at once in rcube_imap_generic::fetchMIMEHeaders() (#8282)
  * Fix bug where attachment download could sometimes fail with a CSRF check error (#8283)
  * Fix an infinite loop when parsing environment variables with float/integer values (#8293)
  * Fix so 'small-dark' logo has more priority than the 'small' logo (#8298)</changelog>
  <changelog author="Lars Vogdt &lt;lars@linux-schulserver.de&gt;" date="1640692800">- use the virtual provides from each PHP module, to allow the installation
  of roundcubemail with various PHP versions.
  The only problem, we are currently facing is the automatic
  enablement of the PHP apache module during post-installation:
  Trying to evaluate the correct PHP module now during post as well,
  which should eleminate the pre-definition of the required
  PHP-Version during build completely.
  See https://build.opensuse.org/request/show/940859 for the initial
  discussion.</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1640952000">- update to 1.5.2
  * OAuth: pass 'id_token' to 'oauth_login' plugin hook (#8214)
  * OAuth: fix expiration of short-lived oauth tokens (#8147)
  * OAuth: fix relative path to assets if /index.php/foo/bar url is used (#8144)
  * OAuth: no auto-redirect on imap login failures (#8370)
  * OAuth: refresh access token in 'refresh' plugin hook (#8224)
  * Fix so folder search parameters are honored by subscriptions_option plugin (#8312)
  * Fix password change with Directadmin driver (#8322, #8329)
  * Fix so css files in plugins/jqueryui/themes will be minified too (#8337)
  * Fix handling of unicode/special characters in custom From input (#8357)
  * Fix some PHP8 compatibility issues (#8363)
  * Fix chpass-wrapper.py helper compatibility with Python 3 (#8324)
  * Fix scrolling and missing Close button in the Select image dialog in Elastic/mobile (#8367)
  * Security: fix cross-site scripting (XSS) via HTML messages with malicious CSS content
- added Suggests: php-sqlite</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1656244800">- update to 1.5.3
  * Enigma: Fix initial synchronization of private keys
  * Enigma: Fix double quoted-printable encoding of pgp-signed messages with no attachments (#8413)
  * Fix various PHP8 warnings (#8392)
  * Fix mail headers injection via the subject field on mail compose (#8404)
  * Fix bug where small message/rfc822 parts could not be decoded (#8408)
  * Fix setting HTML mode on reply/forward of a signed message (#8405)
  * Fix handling of RFC2231-encoded attachment names inside of a message/rfc822 part (#8418)
  * Fix bug where some mail parts (images) could have not be listed as attachments (#8425)
  * Fix bug where attachment icons were stuck at the top of the messages list in Safari (#8433)
  * Fix handling of message/rfc822 parts that are small and are multipart structures with a single part (#8458)
  * Fix bug where session could time out if DB and PHP timezone were different (#8303)
  * Fix bug where DSN flag state wasn't stored with a draft (#8371)
  * Fix broken encoding of HTML content encapsulated in a RTF attachment (#8444)
  * Fix problem with aria-hidden=true on toolbar menus in the Elastic skin (#8517)
  * Fix bug where title tag content was displayed in the body if it contained HTML tags (#8540)
  * Fix support for DSN specification without host e.g. pgsql:///dbname (#8558)</changelog>
</package>
<package pkgid="d05832fd0bf4c6431cfe73b5f830602cf16434304a8aaa4cb0100ea50efe2c08" name="roundcubemail" arch="src">
  <version epoch="0" ver="1.5.3" rel="bp154.2.3.1"/>
  <changelog author="Lars Vogdt &lt;lars@linux-schulserver.de&gt;" date="1577966400">- update to 1.4.2:
  * Plugin API: Make actionbefore, before, actionafter and after
    events working with plugin actions (#7106)
  * Managesieve: Replace "Filter disabled" with "Filter enabled" (#7028)
  * Managesieve: Fix so modifier type select wasn't hidden after hiding
    modifier select on header change
  * Managesieve: Fix filter selection after removing a first filter (#7079)
  * Markasjunk: Fix marking more than one message as spam/ham with
    email_learn driver (#7121)
  * Password: Fix kpasswd and smb drivers' double-escaping bug (#7092)
  * Enigma: Add script to import keys from filesystem to the db
    storage (for multihost)
  * Installer: Fix DB Write test on SQLite database
    ("database is locked" error) (#7064)
  * Installer: Fix so SQLite DSN with a relative path to the database
    file works in Installer
  * Elastic: Fix contrast of warning toasts (#7058)
  * Elastic: Simple search in pretty selects (#7072)
  * Elastic: Fix hidden list widget on mobile/tablet when selecting
    folder while search menu is open (#7120)
  * Fix so type attribute on script tags is not used on HTML5 pages (#6975)
  * Fix unread count after purge on a folder that is not currently selected (#7051)
  * Fix bug where Enter key didn't work on messages list in "List" layout (#7052)
  * Fix bug where deleting a saved search in addressbook caused
    display issue on sources/groups list (#7061)
  * Fix bug where a new saved search added after removing all searches
    wasn't added to the list (#7061)
  * Fix bug where a new contact group added after removing all groups
    from addressbook wasn't added to the list
  * Fix so install-jsdeps.sh removes Bootstrap's sourceMappingURL (#7035)
  * Fix so use of Ctrl+A does not scroll the list (#7020)
  * Fix/remove useless keyup event handler on username input in logon form (#6970)
  * Fix bug where cancelling switching from HTML to plain text didn't
    set the flag properly (#7077)
  * Fix bug where HTML reply could add an empty line with extra indentation
    above the original message (#7088)
  * Fix matching multiple X-Forwarded-For addresses with 'proxy_whitelist' (#7107)
  * Fix so displayed maximum attachment size depends also on 'max_message_size' (#7105)
  * Fix bug where 'skins_allowed' option didn't enforce user skin
    preference (#7080)
  * Fix so contact's organization field accepts up to 128 characters
    (it was 50)
  * Fix bug where listing tables in PostgreSQL database with db_prefix
    didn't work (#7093)
  * Fix bug where 'text' attribute on body tag was ignored when
    displaying HTML message (#7109)
  * Fix bug where next message wasn't displayed after delete in List mode (#7096)
  * Fix so number of contacts in a group is not limited to 200 when
    redirecting to mail composer from Contacts (#6972)
  * Fix malformed characters in HTML message with charset meta tag
  not in head (#7116)
- renamed patches:
  - roundcubemail-1.1-beta-config_dir.patch
  + roundcubemail-1.4.2-config_dir.patch</changelog>
  <changelog author="Lars Vogdt &lt;lars@linux-schulserver.de&gt;" date="1582027200">- prefer brotli over gzip if brotli is available:
  + enable mod_brotli in roundcubemail-httpd.conf (after deflate)
  + enable brotli via a2enmod for new installations</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1582200000">- update to 1.4.3
  * Enigma: Fix so key list selection is reset when opening key creation form (#7154)
  * Enigma: Fix so using list checkbox selection does not load the key preview frame
  * Enigma: Fix generation of key pairs for identities with IDN domains (#7181)
  * Enigma: Display IDN domains of key users and identities in UTF8
  * Enigma: Fix bug where "Send unencrypted" button didn't work in Elastic skin (#7205)
  * Managesieve: Fix bug where it wasn't possible to save flag actions (#7188)
  * Markasjunk: Fix bug where marking as spam/ham didn't work on moving messages with drag-and-drop (#7137)
  * Password: Make chpass-wrapper.py Python 3 compatible (#7135)
  * Elastic: Fix disappearing sidebar in mail compose after clicking Mail button
  * Elastic: Fix incorrect aria-disabled attribute on Mail taskmenu button in mail compose
  * Elastic: Fix bug where it was possible to switch editor mode when 'htmleditor' was in 'dont_override' (#7143)
  * Elastic: Fix text selection in recipient inputs (#7129)
  * Elastic: Fix missing Close button in "more recipients" dialog
  * Elastic: Fix non-working folder subscription checkbox for newly added folders (#7174)
  * Fix regression where "Open in new window" action didn't work (#7155)
  * Fix PHP Warning: array_filter() expects parameter 1 to be array, null given in subscriptions_option plugin (#7165)
  * Fix unexpected error message when mail refresh involves folder auto-unsubscribe (#6923)
  * Fix recipient duplicates in print-view when the recipient list has been expanded (#7169)
  * Fix bug where files in skins/ directory were listed on skins list (#7180)
  * Fix bug where message parts with no Content-Disposition header and no name were not listed on attachments list (#7117)
  * Fix display issues with mail subject that contains line-breaks (#7191)
  * Fix invalid Content-Transfer-Encoding on multipart messages - Mail_Mime fix (#7170)
  * Fix regression where using an absolute path to SQLite database file on Windows didn't work (#7196)
  * Fix using unix:///path/to/socket.file in memcached driver (#7210)
- adjusted/renamed roundcubemail-1.4.2-config_dir.patch to
  roundcubemail-1.4.3-config_dir.patch</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1588161600">- update to 1.4.4
  * Fix bug where attachments with Content-Id were attached to the message on reply (#7122)
  * Fix identity selection on reply when both sender and recipient addresses are included in identities (#7211)
  * Elastic: Fix text selection with Shift+PageUp and Shift+PageDown in plain text editor when using Chrome (#7230)
  * Elastic: Fix recipient input bug when using click to select a contact from autocomplete list (#7231)
  * Elastic: Fix color of a folder with recent messages (#7281)
  * Elastic: Restrict logo size in print view (#7275)
  * Fix invalid Content-Type for messages with only html part and inline images   * Mail_Mime-1.10.7 (#7261)
  * Fix missing contact display name in QR Code data (#7257)
  * Fix so button label in Select image/media dialogs is "Close" not "Cancel" (#7246)
  * Fix regression in testing database schema on MSSQL (#7227)
  * Fix cursor position after inserting a group to a recipient input using autocompletion (#7267)
  * Fix string literals handling in IMAP STATUS (and various other) responses (#7290)
  * Fix bug where multiple images in a message were replaced by the first one on forward/reply/edit (#7293)
  * Fix handling keyservers configured with protocol prefix (#7295)
  * Markasjunk: Fix marking as spam/ham on moving messages with Move menu (#7189)
  * Markasjunk: Fix bug where moving to Junk was failing on messages selected with Select &gt; All (#7206)
  * Fix so imap error message is displayed to the user on folder create/update (#7245)
  * Fix bug where a special folder couldn't be created if a special-use flag is not supported (#7147)
  * Mailvelope: Fix bug where recipients with name were not handled properly in mail compose (#7312)
  * Fix characters encoding in group rename input after group creation/rename (#7330)
  * Fix bug where some message/rfc822 parts could not be attached on forward (#7323)
  * Make install-jsdeps.sh script working without the 'file' program installed (#7325)
  * Fix performance issue of parsing big HTML messages by disabling HTML5 parser for these (#7331)
  * Fix so Print button for PDF attachments works on Firefox &gt;= 75 (#5125)
  * Security: Fix XSS issue in handling of CDATA in HTML messages
  * Security: Fix remote code execution via crafted 'im_convert_path' or 'im_identify_path' settings
  * Security: Fix local file inclusion (and code execution) via crafted 'plugins' option
  * Security: Fix CSRF bypass that could be used to log out an authenticated user (#7302)
- adjusted/renamed roundcubemail-1.4.3-config_dir.patch to
  roundcubemail-1.4.4-config_dir.patch</changelog>
  <changelog author="Lars Vogdt &lt;lars@linux-schulserver.de&gt;" date="1591185600">- update to 1.4.5
  Security fixes
  * Fix XSS issue in template object 'username' (#7406)
  * Fix cross-site scripting (XSS) via malicious XML attachment
  * Fix a couple of XSS issues in Installer (#7406)
  * Better fix for CVE-2020-12641
  Other changes
  * Fix bug in extracting required plugins from composer.json that led
    to spurious error in log (#7364)
  * Fix so the database setup description is compatible with MySQL 8 (#7340)
  * Markasjunk: Fix regression in jsevent driver (#7361)
  * Fix missing flag indication on collapsed thread in Larry and Elastic (#7366)
  * Fix default keyservers (use keys.openpgp.org), add note about CORS (#7373, #7367)
  * Password: Fix issue with Modoboa driver (#7372)
  * Mailvelope: Use sender's address to find pubkeys to check signatures (#7348)
  * Mailvelope: Fix Encrypt button hidden in Elastic (#7353)
  * Fix PHP warning: count(): Parameter must be an array or an object...
    in ID command handler (#7392)
  * Fix error when user-configured skin does not exist anymore (#7271)
  * Elastic: Fix aspect ratio of a contact photo in mail preview (#7339)
  * Fix bug where PDF attachments marked as inline could have not been
    attached on mail forward (#7382)
  * Security: Fix a couple of XSS issues in Installer (#7406)
  * Security: Fix XSS issue in template object 'username' (#7406)
  * Security: Fix cross-site scripting (XSS) via malicious XML attachment
  * Security: Better fix for CVE-2020-12641
- renamed roundcubemail-1.4.4-config_dir.patch to
  roundcubemail-1.4.5-config_dir.patch</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1591531200">- update to 1.4.6
  * Installer: Fix regression in SMTP test section (#7417)
- renamed roundcubemail-1.4.5-config_dir.patch to
  roundcubemail-1.4.6-config_dir.patch</changelog>
  <changelog author="chris@computersalat.de" date="1593777600">- add http.inc file
  * include one file for php5/php7 admin flags/values</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1594036800">- update to 1.4.7 with security fix:
  * Security: Fix cross-site scripting (XSS) via HTML messages with malicious svg/namespace
  * Fix bug where subfolders of special folders could have been duplicated on folder list
  * Increase maximum size of contact jobtitle and department fields to 128 characters
  * Fix missing newline after the logged line when writing to stdout (#7418)
  * Elastic: Fix context menu (paste) on the recipient input (#7431)
  * Fix problem with forwarding inline images attached to messages with no HTML part (#7414)
  * Fix problem with handling attached images with same name when using
    database_attachments/redundant_attachments (#7455)
- renamed roundcubemail-1.4.6-config_dir.patch to
  roundcubemail-1.4.7-config_dir.patch</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1597147200">- update to 1.4.8 with security fixes:
  * Fix cross-site scripting (XSS) via HTML messages with malicious svg content (CVE-2020-16145)
  * Fix cross-site scripting (XSS) via HTML messages with malicious math content</changelog>
  <changelog author="Lars Vogdt &lt;lars@linux-schulserver.de&gt;" date="1597320000">- finally renamed roundcubemail-1.4.8-config_dir.patch to
  roundcubemail-config_dir.patch to avoid additional roundtrip
  times with each submission:
  + removed roundcubemail-1.4.7-config_dir.patch
  + added  roundcubemail-config_dir.patch</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1601294400">- update to 1.4.9:
  * Fix HTML editor in latest Chrome 85.0.4183.102, update to TinyMCE 4.9.11 (#7615)
  * Add missing localization for some label/legend elements in userinfo plugin (#7478)
  * Fix importing birthday dates from Gmail vCards (BDAY:YYYYMMDD)
  * Fix restoring Cc/Bcc fields from local storage (#7554)
  * Fix jstz.min.js installation, bump version to 1.0.7
  * Fix incorrect PDO::lastInsertId() use in sqlsrv driver (#7564)
  * Fix link to closure compiler in bin/jsshrink.sh script (#7567)
  * Fix bug where some parts of a message could have been missing in a reply/forward body (#7568)
  * Fix empty space on mail printouts in Chrome (#7604)
  * Fix empty output from HTML5 parser when content contains XML tag (#7624)
  * Fix scroll jump on key press in plain text mode of the HTML editor (#7622)
  * Fix so autocompletion list does not hide on scroll inside it (#7592)</changelog>
  <changelog author="pgajdos@suse.com" date="1606824000">- use system apache rpm macros</changelog>
  <changelog author="Lars Vogdt &lt;lars@linux-schulserver.de&gt;" date="1609156800">- update to 1.4.10:
  * Stored cross-site scripting (XSS) via HTML or plain text messages
    with malicious content ( CVE-2020-35730 boo#1180399 )
  * Fix extra angle brackets in In-Reply-To header derived from mailto: params (#7655)
  * Fix folder list issue when special folder is a subfolder (#7647)
  * Fix Elastic's folder subscription toggle in search result (#7653)
  * Fix state of subscription toggle on folders list after changing
    folder state from the search result (#7653)
  * Security: Fix cross-site scripting (XSS) via HTML or plain text
    messages with malicious content</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1611316800">- add PHP version to Requires: and Recommends: to make sure the same
  version is installed as used during packaging
- drop Requires: http_daemon (fixes boo#1180132) and Suggests: apache2
  (which is already required though mod_php_any)</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1612785600">- update to 1.4.11 with security fix:
  Fix cross-site scripting (XSS) via HTML messages with malicious CSS content</changelog>
  <changelog author="lars@linux-schulserver.de - 1.5.0" date="1634644800">- update to 1.5.0
  + full PHP8 support
  + Dark mode for Elastic skin
  + OAuth2/XOauth support (with plugin hooks)
  + Collected recipients and trusted senders
  + Moving recipients between inputs with drag &amp; drop
  + Full unicode support with MySQL database
  + Support of IMAP LITERAL- extension RFC 7888
    &lt;https://datatracker.ietf.org/doc/html/rfc7888&gt;
  + Support of RFC 2231 &lt;https://datatracker.ietf.org/doc/html/rfc2231&gt;
    encoded names
  + Cache refactoring
  More at https://github.com/roundcube/roundcubemail/releases/tag/1.5.0
- adjusted some file names to new release
  (_styles.less -&gt; styles.less; _variables.less -&gt; variables.less;
  CHANGELOG -&gt; CHANGELOG.md)
- vendor/roundcube/plugin-installer/src/bin/rcubeinitdb.sh does not exist
  any longer
- added SECURITY.md to documentation
- mark the whole documentation directory as documentation instead of
  listing some files and others not (avoid duplicate entries in RPM-DB)
- adjust requirements: php-intl is now required</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1638100800">- update to 1.5.1
  * Fix importing contacts with no email address (#8227)
  * Fix so session's search scope is not used if search is not active (#8199)
  * Fix some PHP8 warnings (#8239)
  * Fix so dark mode state is retained after closing the browser (#8237)
  * Fix bug where new messages were not added to the list on refresh if skip_deleted=true (#8234)
  * Fix colors on "Show source" page in dark mode (#8246)
  * Fix handling of dark_mode_support:false setting in skins meta.json - also when devel_mode=false (#8249)
  * Fix database initialization if db_prefix is a schema prefix (#8221)
  * Fix undefined constant error in Installer on Windows (#8258)
  * Fix installation/upgrade on MySQL 5.5 - Index column size too large (#8231)
  * Fix regression in setting of contact listing name (#8260)
  * Fix bug in Larry skin where headers toggle state was reset on full page preview (#8203)
  * Fix bug where \u200b characters were added into the recipient input preventing mail delivery (#8269)
  * Fix charset conversion errors on PHP &lt; 8 for charsets not supported by mbstring (#8252)
  * Fix bug where adding a contact to trusted senders via "Always allow from..." button didn't work (#8264, #8268)
  * Fix bug with show_images setting where option 1 and 3 were swapped (#8268)
  * Fix PHP fatal error on an undefined constant in contacts import action (#8277)
  * Fix fetching headers of multiple message parts at once in rcube_imap_generic::fetchMIMEHeaders() (#8282)
  * Fix bug where attachment download could sometimes fail with a CSRF check error (#8283)
  * Fix an infinite loop when parsing environment variables with float/integer values (#8293)
  * Fix so 'small-dark' logo has more priority than the 'small' logo (#8298)</changelog>
  <changelog author="Lars Vogdt &lt;lars@linux-schulserver.de&gt;" date="1640692800">- use the virtual provides from each PHP module, to allow the installation
  of roundcubemail with various PHP versions.
  The only problem, we are currently facing is the automatic
  enablement of the PHP apache module during post-installation:
  Trying to evaluate the correct PHP module now during post as well,
  which should eleminate the pre-definition of the required
  PHP-Version during build completely.
  See https://build.opensuse.org/request/show/940859 for the initial
  discussion.</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1640952000">- update to 1.5.2
  * OAuth: pass 'id_token' to 'oauth_login' plugin hook (#8214)
  * OAuth: fix expiration of short-lived oauth tokens (#8147)
  * OAuth: fix relative path to assets if /index.php/foo/bar url is used (#8144)
  * OAuth: no auto-redirect on imap login failures (#8370)
  * OAuth: refresh access token in 'refresh' plugin hook (#8224)
  * Fix so folder search parameters are honored by subscriptions_option plugin (#8312)
  * Fix password change with Directadmin driver (#8322, #8329)
  * Fix so css files in plugins/jqueryui/themes will be minified too (#8337)
  * Fix handling of unicode/special characters in custom From input (#8357)
  * Fix some PHP8 compatibility issues (#8363)
  * Fix chpass-wrapper.py helper compatibility with Python 3 (#8324)
  * Fix scrolling and missing Close button in the Select image dialog in Elastic/mobile (#8367)
  * Security: fix cross-site scripting (XSS) via HTML messages with malicious CSS content
- added Suggests: php-sqlite</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1656244800">- update to 1.5.3
  * Enigma: Fix initial synchronization of private keys
  * Enigma: Fix double quoted-printable encoding of pgp-signed messages with no attachments (#8413)
  * Fix various PHP8 warnings (#8392)
  * Fix mail headers injection via the subject field on mail compose (#8404)
  * Fix bug where small message/rfc822 parts could not be decoded (#8408)
  * Fix setting HTML mode on reply/forward of a signed message (#8405)
  * Fix handling of RFC2231-encoded attachment names inside of a message/rfc822 part (#8418)
  * Fix bug where some mail parts (images) could have not be listed as attachments (#8425)
  * Fix bug where attachment icons were stuck at the top of the messages list in Safari (#8433)
  * Fix handling of message/rfc822 parts that are small and are multipart structures with a single part (#8458)
  * Fix bug where session could time out if DB and PHP timezone were different (#8303)
  * Fix bug where DSN flag state wasn't stored with a draft (#8371)
  * Fix broken encoding of HTML content encapsulated in a RTF attachment (#8444)
  * Fix problem with aria-hidden=true on toolbar menus in the Elastic skin (#8517)
  * Fix bug where title tag content was displayed in the body if it contained HTML tags (#8540)
  * Fix support for DSN specification without host e.g. pgsql:///dbname (#8558)</changelog>
</package>
<package pkgid="afe69f58e9370c6e1220a8b1f7f899bd4521a3c7aacf2944125fc5e32ad06af9" name="ruby2.5-rubygem-activerecord-5.2" arch="aarch64">
  <version epoch="0" ver="5.2.3" rel="bp154.2.3.1"/>
  <changelog author="mschnitzer@suse.com" date="1523880000">- initialize package
  see changelog: https://github.com/rails/rails/blob/v5.2.0/activerecord/CHANGELOG.md</changelog>
  <changelog author="mschnitzer@suse.com" date="1533729600">- updated to version 5.2.1 (boo#1104209)
  * PostgreSQL: Support new relkind for partitioned tables.
    Fixes #33008.
    (Yannick Schutz)
  * Rollback parent transaction when children fails to update.
    (Guillaume Malette)
  * Fix default value for MySQL time types with specified precision.
    (Nikolay Kondratyev)
  * Fix `touch` option to behave consistently with `Persistence#touch` method.
    (Ryuta Kamizono)
  * Fix `save` in `after_create_commit` won't invoke extra `after_create_commit`.
    Fixes #32831.
    (Ryuta Kamizono)
  * Fix logic on disabling commit callbacks so they are not called unexpectedly when errors occur.
    (Brian Durand)
  * Fix parent record should not get saved with duplicate children records.
    Fixes #32940.
    (Santosh Wadghule)
  * Fix that association's after_touch is not called with counter cache.
    Fixes #31559.
    (Ryuta Kamizono)
  * `becomes` should clear the mutation tracker which is created in `after_initialize`.
    Fixes #32867.
    (Ryuta Kamizono)
  * Allow a belonging to parent object to be created from a new record.
    (Jolyon Pawlyn)
  * Fix that building record with assigning multiple has_one associations
    wrongly persists through record. (Fixes #32511)
    (Sam DeCesare)
  * Fix relation merging when one of the relations is going to skip the
    query cache.
    (James Williams)</changelog>
  <changelog author="mschnitzer@suse.com" date="1543838400">- updated to version 5.2.1.1 (boo#1118076)
  * No changes / Just a version bump to match with Rails 5.2.1.1</changelog>
  <changelog author="Stephan Kulow &lt;coolo@suse.com&gt;" date="1544270400">- updated to version 5.2.2
  see installed CHANGELOG.md
  [#]# Rails 5.2.2 (December 04, 2018) ##
  * Do not ignore the scoping with query methods in the scope block.
  * Ryuta Kamizono*
  * Allow aliased attributes to be used in `#update_columns` and `#update`.
  * Gannon McGibbon*
  * Allow spaces in postgres table names.
    Fixes issue where "user post" is misinterpreted as "\"user\".\"post\"" when quoting table names with the postgres
    adapter.
  * Gannon McGibbon*
  * Cached columns_hash fields should be excluded from ResultSet#column_types
    PR #34528 addresses the inconsistent behaviour when attribute is defined for an ignored column. The following test
    was passing for SQLite and MySQL, but failed for PostgreSQL:
    ```ruby
    class DeveloperName &lt; ActiveRecord::Type::String
    def deserialize(value)
    "Developer: #{value}"
    end
    end
    class AttributedDeveloper &lt; ActiveRecord::Base
    self.table_name = "developers"
    attribute :name, DeveloperName.new
    self.ignored_columns += ["name"]
    end
    developer = AttributedDeveloper.create
    developer.update_column :name, "name"
    loaded_developer = AttributedDeveloper.where(id: developer.id).select("*").first
    puts loaded_developer.name # should be "Developer: name" but it's just "name"
    ```
  * Dmitry Tsepelev*
  * Values of enum are frozen, raising an error when attempting to modify them.
  * Emmanuel Byrd*
  * `update_columns` now correctly raises `ActiveModel::MissingAttributeError`
    if the attribute does not exist.
  * Sean Griffin*
  * Do not use prepared statement in queries that have a large number of binds.
  * Ryuta Kamizono*
  * Fix query cache to load before first request.
  * Eileen M. Uchitelle*
  * Fix collection cache key with limit and custom select to avoid ambiguous timestamp column error.
    Fixes #33056.
  * Federico Martinez*
  * Fix duplicated record creation when using nested attributes with `create_with`.
  * Darwin Wu*
  * Fix regression setting children record in parent `before_save` callback.
  * Guo Xiang Tan*
  * Prevent leaking of user's DB credentials on `rails db:create` failure.
  * bogdanvlviv*
  * Clear mutation tracker before continuing the around callbacks.
  * Yuya Tanaka*
  * Prevent deadlocks when waiting for connection from pool.
  * Brent Wheeldon*
  * Avoid extra scoping when using `Relation#update` that was causing this method to change the current scope.
  * Ryuta Kamizono*
  * Fix numericality validator not to be affected by custom getter.
  * Ryuta Kamizono*
  * Fix bulk change table ignores comment option on PostgreSQL.
  * Yoshiyuki Kinjo*</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1547812800">- limit to ruby 2.5 and above for 42.3/sle12</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1547899200">- rb_build_ruby_abi needs to be rb_build_ruby_abis</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1552564800">- update to version 5.2.2.1:
  https://weblog.rubyonrails.org/2019/3/13/Rails-4-2-5-1-5-1-6-2-have-been-released/
  CVE-2019-5418 CVE-2019-5419 CVE-2019-5420</changelog>
  <changelog author="Stephan Kulow &lt;coolo@suse.com&gt;" date="1553860800">- updated to version 5.2.3
  see installed CHANGELOG.md
  [#]# Rails 5.2.3 (March 27, 2019) ##
  * Fix different `count` calculation when using `size` with manual `select` with DISTINCT.
    Fixes #35214.
  * Juani Villarejo*
  * Fix prepared statements caching to be enabled even when query caching is enabled.
  * Ryuta Kamizono*
  * Don't allow `where` with invalid value matches to nil values.
    Fixes #33624.
  * Ryuta Kamizono*
  * Restore an ability that class level `update` without giving ids.
    Fixes #34743.
  * Ryuta Kamizono*
  * Fix join table column quoting with SQLite.
  * Gannon McGibbon*
  * Ensure that `delete_all` on collection proxy returns affected count.
  * Ryuta Kamizono*
  * Reset scope after delete on collection association to clear stale offsets of removed records.
  * Gannon McGibbon*</changelog>
  <changelog author="Luciano Santos &lt;luc14n0@opensuse.org&gt;" date="1673352000">- Add CVE-2022-32224.patch to address a possible escalation to RCE
  when using YAML serialized columns in Active Record
  (CVE-2022-32224, bsc#1201465).</changelog>
</package>
<package pkgid="8e9a67ddd213bc45e9806d2c5404fd92b2c9fbde169fab132c9005f3baaa058c" name="ruby2.5-rubygem-activerecord-5.2" arch="i586">
  <version epoch="0" ver="5.2.3" rel="bp154.2.3.1"/>
  <changelog author="mschnitzer@suse.com" date="1523880000">- initialize package
  see changelog: https://github.com/rails/rails/blob/v5.2.0/activerecord/CHANGELOG.md</changelog>
  <changelog author="mschnitzer@suse.com" date="1533729600">- updated to version 5.2.1 (boo#1104209)
  * PostgreSQL: Support new relkind for partitioned tables.
    Fixes #33008.
    (Yannick Schutz)
  * Rollback parent transaction when children fails to update.
    (Guillaume Malette)
  * Fix default value for MySQL time types with specified precision.
    (Nikolay Kondratyev)
  * Fix `touch` option to behave consistently with `Persistence#touch` method.
    (Ryuta Kamizono)
  * Fix `save` in `after_create_commit` won't invoke extra `after_create_commit`.
    Fixes #32831.
    (Ryuta Kamizono)
  * Fix logic on disabling commit callbacks so they are not called unexpectedly when errors occur.
    (Brian Durand)
  * Fix parent record should not get saved with duplicate children records.
    Fixes #32940.
    (Santosh Wadghule)
  * Fix that association's after_touch is not called with counter cache.
    Fixes #31559.
    (Ryuta Kamizono)
  * `becomes` should clear the mutation tracker which is created in `after_initialize`.
    Fixes #32867.
    (Ryuta Kamizono)
  * Allow a belonging to parent object to be created from a new record.
    (Jolyon Pawlyn)
  * Fix that building record with assigning multiple has_one associations
    wrongly persists through record. (Fixes #32511)
    (Sam DeCesare)
  * Fix relation merging when one of the relations is going to skip the
    query cache.
    (James Williams)</changelog>
  <changelog author="mschnitzer@suse.com" date="1543838400">- updated to version 5.2.1.1 (boo#1118076)
  * No changes / Just a version bump to match with Rails 5.2.1.1</changelog>
  <changelog author="Stephan Kulow &lt;coolo@suse.com&gt;" date="1544270400">- updated to version 5.2.2
  see installed CHANGELOG.md
  [#]# Rails 5.2.2 (December 04, 2018) ##
  * Do not ignore the scoping with query methods in the scope block.
  * Ryuta Kamizono*
  * Allow aliased attributes to be used in `#update_columns` and `#update`.
  * Gannon McGibbon*
  * Allow spaces in postgres table names.
    Fixes issue where "user post" is misinterpreted as "\"user\".\"post\"" when quoting table names with the postgres
    adapter.
  * Gannon McGibbon*
  * Cached columns_hash fields should be excluded from ResultSet#column_types
    PR #34528 addresses the inconsistent behaviour when attribute is defined for an ignored column. The following test
    was passing for SQLite and MySQL, but failed for PostgreSQL:
    ```ruby
    class DeveloperName &lt; ActiveRecord::Type::String
    def deserialize(value)
    "Developer: #{value}"
    end
    end
    class AttributedDeveloper &lt; ActiveRecord::Base
    self.table_name = "developers"
    attribute :name, DeveloperName.new
    self.ignored_columns += ["name"]
    end
    developer = AttributedDeveloper.create
    developer.update_column :name, "name"
    loaded_developer = AttributedDeveloper.where(id: developer.id).select("*").first
    puts loaded_developer.name # should be "Developer: name" but it's just "name"
    ```
  * Dmitry Tsepelev*
  * Values of enum are frozen, raising an error when attempting to modify them.
  * Emmanuel Byrd*
  * `update_columns` now correctly raises `ActiveModel::MissingAttributeError`
    if the attribute does not exist.
  * Sean Griffin*
  * Do not use prepared statement in queries that have a large number of binds.
  * Ryuta Kamizono*
  * Fix query cache to load before first request.
  * Eileen M. Uchitelle*
  * Fix collection cache key with limit and custom select to avoid ambiguous timestamp column error.
    Fixes #33056.
  * Federico Martinez*
  * Fix duplicated record creation when using nested attributes with `create_with`.
  * Darwin Wu*
  * Fix regression setting children record in parent `before_save` callback.
  * Guo Xiang Tan*
  * Prevent leaking of user's DB credentials on `rails db:create` failure.
  * bogdanvlviv*
  * Clear mutation tracker before continuing the around callbacks.
  * Yuya Tanaka*
  * Prevent deadlocks when waiting for connection from pool.
  * Brent Wheeldon*
  * Avoid extra scoping when using `Relation#update` that was causing this method to change the current scope.
  * Ryuta Kamizono*
  * Fix numericality validator not to be affected by custom getter.
  * Ryuta Kamizono*
  * Fix bulk change table ignores comment option on PostgreSQL.
  * Yoshiyuki Kinjo*</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1547812800">- limit to ruby 2.5 and above for 42.3/sle12</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1547899200">- rb_build_ruby_abi needs to be rb_build_ruby_abis</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1552564800">- update to version 5.2.2.1:
  https://weblog.rubyonrails.org/2019/3/13/Rails-4-2-5-1-5-1-6-2-have-been-released/
  CVE-2019-5418 CVE-2019-5419 CVE-2019-5420</changelog>
  <changelog author="Stephan Kulow &lt;coolo@suse.com&gt;" date="1553860800">- updated to version 5.2.3
  see installed CHANGELOG.md
  [#]# Rails 5.2.3 (March 27, 2019) ##
  * Fix different `count` calculation when using `size` with manual `select` with DISTINCT.
    Fixes #35214.
  * Juani Villarejo*
  * Fix prepared statements caching to be enabled even when query caching is enabled.
  * Ryuta Kamizono*
  * Don't allow `where` with invalid value matches to nil values.
    Fixes #33624.
  * Ryuta Kamizono*
  * Restore an ability that class level `update` without giving ids.
    Fixes #34743.
  * Ryuta Kamizono*
  * Fix join table column quoting with SQLite.
  * Gannon McGibbon*
  * Ensure that `delete_all` on collection proxy returns affected count.
  * Ryuta Kamizono*
  * Reset scope after delete on collection association to clear stale offsets of removed records.
  * Gannon McGibbon*</changelog>
  <changelog author="Luciano Santos &lt;luc14n0@opensuse.org&gt;" date="1673352000">- Add CVE-2022-32224.patch to address a possible escalation to RCE
  when using YAML serialized columns in Active Record
  (CVE-2022-32224, bsc#1201465).</changelog>
</package>
<package pkgid="a836f2bfabd1b5c2bacfdc2a408e440b268d935871be870194251b3e4324b955" name="ruby2.5-rubygem-activerecord-5.2" arch="ppc64le">
  <version epoch="0" ver="5.2.3" rel="bp154.2.3.1"/>
  <changelog author="mschnitzer@suse.com" date="1523880000">- initialize package
  see changelog: https://github.com/rails/rails/blob/v5.2.0/activerecord/CHANGELOG.md</changelog>
  <changelog author="mschnitzer@suse.com" date="1533729600">- updated to version 5.2.1 (boo#1104209)
  * PostgreSQL: Support new relkind for partitioned tables.
    Fixes #33008.
    (Yannick Schutz)
  * Rollback parent transaction when children fails to update.
    (Guillaume Malette)
  * Fix default value for MySQL time types with specified precision.
    (Nikolay Kondratyev)
  * Fix `touch` option to behave consistently with `Persistence#touch` method.
    (Ryuta Kamizono)
  * Fix `save` in `after_create_commit` won't invoke extra `after_create_commit`.
    Fixes #32831.
    (Ryuta Kamizono)
  * Fix logic on disabling commit callbacks so they are not called unexpectedly when errors occur.
    (Brian Durand)
  * Fix parent record should not get saved with duplicate children records.
    Fixes #32940.
    (Santosh Wadghule)
  * Fix that association's after_touch is not called with counter cache.
    Fixes #31559.
    (Ryuta Kamizono)
  * `becomes` should clear the mutation tracker which is created in `after_initialize`.
    Fixes #32867.
    (Ryuta Kamizono)
  * Allow a belonging to parent object to be created from a new record.
    (Jolyon Pawlyn)
  * Fix that building record with assigning multiple has_one associations
    wrongly persists through record. (Fixes #32511)
    (Sam DeCesare)
  * Fix relation merging when one of the relations is going to skip the
    query cache.
    (James Williams)</changelog>
  <changelog author="mschnitzer@suse.com" date="1543838400">- updated to version 5.2.1.1 (boo#1118076)
  * No changes / Just a version bump to match with Rails 5.2.1.1</changelog>
  <changelog author="Stephan Kulow &lt;coolo@suse.com&gt;" date="1544270400">- updated to version 5.2.2
  see installed CHANGELOG.md
  [#]# Rails 5.2.2 (December 04, 2018) ##
  * Do not ignore the scoping with query methods in the scope block.
  * Ryuta Kamizono*
  * Allow aliased attributes to be used in `#update_columns` and `#update`.
  * Gannon McGibbon*
  * Allow spaces in postgres table names.
    Fixes issue where "user post" is misinterpreted as "\"user\".\"post\"" when quoting table names with the postgres
    adapter.
  * Gannon McGibbon*
  * Cached columns_hash fields should be excluded from ResultSet#column_types
    PR #34528 addresses the inconsistent behaviour when attribute is defined for an ignored column. The following test
    was passing for SQLite and MySQL, but failed for PostgreSQL:
    ```ruby
    class DeveloperName &lt; ActiveRecord::Type::String
    def deserialize(value)
    "Developer: #{value}"
    end
    end
    class AttributedDeveloper &lt; ActiveRecord::Base
    self.table_name = "developers"
    attribute :name, DeveloperName.new
    self.ignored_columns += ["name"]
    end
    developer = AttributedDeveloper.create
    developer.update_column :name, "name"
    loaded_developer = AttributedDeveloper.where(id: developer.id).select("*").first
    puts loaded_developer.name # should be "Developer: name" but it's just "name"
    ```
  * Dmitry Tsepelev*
  * Values of enum are frozen, raising an error when attempting to modify them.
  * Emmanuel Byrd*
  * `update_columns` now correctly raises `ActiveModel::MissingAttributeError`
    if the attribute does not exist.
  * Sean Griffin*
  * Do not use prepared statement in queries that have a large number of binds.
  * Ryuta Kamizono*
  * Fix query cache to load before first request.
  * Eileen M. Uchitelle*
  * Fix collection cache key with limit and custom select to avoid ambiguous timestamp column error.
    Fixes #33056.
  * Federico Martinez*
  * Fix duplicated record creation when using nested attributes with `create_with`.
  * Darwin Wu*
  * Fix regression setting children record in parent `before_save` callback.
  * Guo Xiang Tan*
  * Prevent leaking of user's DB credentials on `rails db:create` failure.
  * bogdanvlviv*
  * Clear mutation tracker before continuing the around callbacks.
  * Yuya Tanaka*
  * Prevent deadlocks when waiting for connection from pool.
  * Brent Wheeldon*
  * Avoid extra scoping when using `Relation#update` that was causing this method to change the current scope.
  * Ryuta Kamizono*
  * Fix numericality validator not to be affected by custom getter.
  * Ryuta Kamizono*
  * Fix bulk change table ignores comment option on PostgreSQL.
  * Yoshiyuki Kinjo*</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1547812800">- limit to ruby 2.5 and above for 42.3/sle12</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1547899200">- rb_build_ruby_abi needs to be rb_build_ruby_abis</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1552564800">- update to version 5.2.2.1:
  https://weblog.rubyonrails.org/2019/3/13/Rails-4-2-5-1-5-1-6-2-have-been-released/
  CVE-2019-5418 CVE-2019-5419 CVE-2019-5420</changelog>
  <changelog author="Stephan Kulow &lt;coolo@suse.com&gt;" date="1553860800">- updated to version 5.2.3
  see installed CHANGELOG.md
  [#]# Rails 5.2.3 (March 27, 2019) ##
  * Fix different `count` calculation when using `size` with manual `select` with DISTINCT.
    Fixes #35214.
  * Juani Villarejo*
  * Fix prepared statements caching to be enabled even when query caching is enabled.
  * Ryuta Kamizono*
  * Don't allow `where` with invalid value matches to nil values.
    Fixes #33624.
  * Ryuta Kamizono*
  * Restore an ability that class level `update` without giving ids.
    Fixes #34743.
  * Ryuta Kamizono*
  * Fix join table column quoting with SQLite.
  * Gannon McGibbon*
  * Ensure that `delete_all` on collection proxy returns affected count.
  * Ryuta Kamizono*
  * Reset scope after delete on collection association to clear stale offsets of removed records.
  * Gannon McGibbon*</changelog>
  <changelog author="Luciano Santos &lt;luc14n0@opensuse.org&gt;" date="1673352000">- Add CVE-2022-32224.patch to address a possible escalation to RCE
  when using YAML serialized columns in Active Record
  (CVE-2022-32224, bsc#1201465).</changelog>
</package>
<package pkgid="fcb9a60063253608ef2a0204376d41905ed7ffd4a21e1a5a1ed26ff4a6414e6e" name="ruby2.5-rubygem-activerecord-5.2" arch="s390x">
  <version epoch="0" ver="5.2.3" rel="bp154.2.3.1"/>
  <changelog author="mschnitzer@suse.com" date="1523880000">- initialize package
  see changelog: https://github.com/rails/rails/blob/v5.2.0/activerecord/CHANGELOG.md</changelog>
  <changelog author="mschnitzer@suse.com" date="1533729600">- updated to version 5.2.1 (boo#1104209)
  * PostgreSQL: Support new relkind for partitioned tables.
    Fixes #33008.
    (Yannick Schutz)
  * Rollback parent transaction when children fails to update.
    (Guillaume Malette)
  * Fix default value for MySQL time types with specified precision.
    (Nikolay Kondratyev)
  * Fix `touch` option to behave consistently with `Persistence#touch` method.
    (Ryuta Kamizono)
  * Fix `save` in `after_create_commit` won't invoke extra `after_create_commit`.
    Fixes #32831.
    (Ryuta Kamizono)
  * Fix logic on disabling commit callbacks so they are not called unexpectedly when errors occur.
    (Brian Durand)
  * Fix parent record should not get saved with duplicate children records.
    Fixes #32940.
    (Santosh Wadghule)
  * Fix that association's after_touch is not called with counter cache.
    Fixes #31559.
    (Ryuta Kamizono)
  * `becomes` should clear the mutation tracker which is created in `after_initialize`.
    Fixes #32867.
    (Ryuta Kamizono)
  * Allow a belonging to parent object to be created from a new record.
    (Jolyon Pawlyn)
  * Fix that building record with assigning multiple has_one associations
    wrongly persists through record. (Fixes #32511)
    (Sam DeCesare)
  * Fix relation merging when one of the relations is going to skip the
    query cache.
    (James Williams)</changelog>
  <changelog author="mschnitzer@suse.com" date="1543838400">- updated to version 5.2.1.1 (boo#1118076)
  * No changes / Just a version bump to match with Rails 5.2.1.1</changelog>
  <changelog author="Stephan Kulow &lt;coolo@suse.com&gt;" date="1544270400">- updated to version 5.2.2
  see installed CHANGELOG.md
  [#]# Rails 5.2.2 (December 04, 2018) ##
  * Do not ignore the scoping with query methods in the scope block.
  * Ryuta Kamizono*
  * Allow aliased attributes to be used in `#update_columns` and `#update`.
  * Gannon McGibbon*
  * Allow spaces in postgres table names.
    Fixes issue where "user post" is misinterpreted as "\"user\".\"post\"" when quoting table names with the postgres
    adapter.
  * Gannon McGibbon*
  * Cached columns_hash fields should be excluded from ResultSet#column_types
    PR #34528 addresses the inconsistent behaviour when attribute is defined for an ignored column. The following test
    was passing for SQLite and MySQL, but failed for PostgreSQL:
    ```ruby
    class DeveloperName &lt; ActiveRecord::Type::String
    def deserialize(value)
    "Developer: #{value}"
    end
    end
    class AttributedDeveloper &lt; ActiveRecord::Base
    self.table_name = "developers"
    attribute :name, DeveloperName.new
    self.ignored_columns += ["name"]
    end
    developer = AttributedDeveloper.create
    developer.update_column :name, "name"
    loaded_developer = AttributedDeveloper.where(id: developer.id).select("*").first
    puts loaded_developer.name # should be "Developer: name" but it's just "name"
    ```
  * Dmitry Tsepelev*
  * Values of enum are frozen, raising an error when attempting to modify them.
  * Emmanuel Byrd*
  * `update_columns` now correctly raises `ActiveModel::MissingAttributeError`
    if the attribute does not exist.
  * Sean Griffin*
  * Do not use prepared statement in queries that have a large number of binds.
  * Ryuta Kamizono*
  * Fix query cache to load before first request.
  * Eileen M. Uchitelle*
  * Fix collection cache key with limit and custom select to avoid ambiguous timestamp column error.
    Fixes #33056.
  * Federico Martinez*
  * Fix duplicated record creation when using nested attributes with `create_with`.
  * Darwin Wu*
  * Fix regression setting children record in parent `before_save` callback.
  * Guo Xiang Tan*
  * Prevent leaking of user's DB credentials on `rails db:create` failure.
  * bogdanvlviv*
  * Clear mutation tracker before continuing the around callbacks.
  * Yuya Tanaka*
  * Prevent deadlocks when waiting for connection from pool.
  * Brent Wheeldon*
  * Avoid extra scoping when using `Relation#update` that was causing this method to change the current scope.
  * Ryuta Kamizono*
  * Fix numericality validator not to be affected by custom getter.
  * Ryuta Kamizono*
  * Fix bulk change table ignores comment option on PostgreSQL.
  * Yoshiyuki Kinjo*</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1547812800">- limit to ruby 2.5 and above for 42.3/sle12</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1547899200">- rb_build_ruby_abi needs to be rb_build_ruby_abis</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1552564800">- update to version 5.2.2.1:
  https://weblog.rubyonrails.org/2019/3/13/Rails-4-2-5-1-5-1-6-2-have-been-released/
  CVE-2019-5418 CVE-2019-5419 CVE-2019-5420</changelog>
  <changelog author="Stephan Kulow &lt;coolo@suse.com&gt;" date="1553860800">- updated to version 5.2.3
  see installed CHANGELOG.md
  [#]# Rails 5.2.3 (March 27, 2019) ##
  * Fix different `count` calculation when using `size` with manual `select` with DISTINCT.
    Fixes #35214.
  * Juani Villarejo*
  * Fix prepared statements caching to be enabled even when query caching is enabled.
  * Ryuta Kamizono*
  * Don't allow `where` with invalid value matches to nil values.
    Fixes #33624.
  * Ryuta Kamizono*
  * Restore an ability that class level `update` without giving ids.
    Fixes #34743.
  * Ryuta Kamizono*
  * Fix join table column quoting with SQLite.
  * Gannon McGibbon*
  * Ensure that `delete_all` on collection proxy returns affected count.
  * Ryuta Kamizono*
  * Reset scope after delete on collection association to clear stale offsets of removed records.
  * Gannon McGibbon*</changelog>
  <changelog author="Luciano Santos &lt;luc14n0@opensuse.org&gt;" date="1673352000">- Add CVE-2022-32224.patch to address a possible escalation to RCE
  when using YAML serialized columns in Active Record
  (CVE-2022-32224, bsc#1201465).</changelog>
</package>
<package pkgid="31193837bc29472ef77ce76b767a069423302b740424f2af19d23286a995d735" name="ruby2.5-rubygem-activerecord-5.2" arch="x86_64">
  <version epoch="0" ver="5.2.3" rel="bp154.2.3.1"/>
  <changelog author="mschnitzer@suse.com" date="1523880000">- initialize package
  see changelog: https://github.com/rails/rails/blob/v5.2.0/activerecord/CHANGELOG.md</changelog>
  <changelog author="mschnitzer@suse.com" date="1533729600">- updated to version 5.2.1 (boo#1104209)
  * PostgreSQL: Support new relkind for partitioned tables.
    Fixes #33008.
    (Yannick Schutz)
  * Rollback parent transaction when children fails to update.
    (Guillaume Malette)
  * Fix default value for MySQL time types with specified precision.
    (Nikolay Kondratyev)
  * Fix `touch` option to behave consistently with `Persistence#touch` method.
    (Ryuta Kamizono)
  * Fix `save` in `after_create_commit` won't invoke extra `after_create_commit`.
    Fixes #32831.
    (Ryuta Kamizono)
  * Fix logic on disabling commit callbacks so they are not called unexpectedly when errors occur.
    (Brian Durand)
  * Fix parent record should not get saved with duplicate children records.
    Fixes #32940.
    (Santosh Wadghule)
  * Fix that association's after_touch is not called with counter cache.
    Fixes #31559.
    (Ryuta Kamizono)
  * `becomes` should clear the mutation tracker which is created in `after_initialize`.
    Fixes #32867.
    (Ryuta Kamizono)
  * Allow a belonging to parent object to be created from a new record.
    (Jolyon Pawlyn)
  * Fix that building record with assigning multiple has_one associations
    wrongly persists through record. (Fixes #32511)
    (Sam DeCesare)
  * Fix relation merging when one of the relations is going to skip the
    query cache.
    (James Williams)</changelog>
  <changelog author="mschnitzer@suse.com" date="1543838400">- updated to version 5.2.1.1 (boo#1118076)
  * No changes / Just a version bump to match with Rails 5.2.1.1</changelog>
  <changelog author="Stephan Kulow &lt;coolo@suse.com&gt;" date="1544270400">- updated to version 5.2.2
  see installed CHANGELOG.md
  [#]# Rails 5.2.2 (December 04, 2018) ##
  * Do not ignore the scoping with query methods in the scope block.
  * Ryuta Kamizono*
  * Allow aliased attributes to be used in `#update_columns` and `#update`.
  * Gannon McGibbon*
  * Allow spaces in postgres table names.
    Fixes issue where "user post" is misinterpreted as "\"user\".\"post\"" when quoting table names with the postgres
    adapter.
  * Gannon McGibbon*
  * Cached columns_hash fields should be excluded from ResultSet#column_types
    PR #34528 addresses the inconsistent behaviour when attribute is defined for an ignored column. The following test
    was passing for SQLite and MySQL, but failed for PostgreSQL:
    ```ruby
    class DeveloperName &lt; ActiveRecord::Type::String
    def deserialize(value)
    "Developer: #{value}"
    end
    end
    class AttributedDeveloper &lt; ActiveRecord::Base
    self.table_name = "developers"
    attribute :name, DeveloperName.new
    self.ignored_columns += ["name"]
    end
    developer = AttributedDeveloper.create
    developer.update_column :name, "name"
    loaded_developer = AttributedDeveloper.where(id: developer.id).select("*").first
    puts loaded_developer.name # should be "Developer: name" but it's just "name"
    ```
  * Dmitry Tsepelev*
  * Values of enum are frozen, raising an error when attempting to modify them.
  * Emmanuel Byrd*
  * `update_columns` now correctly raises `ActiveModel::MissingAttributeError`
    if the attribute does not exist.
  * Sean Griffin*
  * Do not use prepared statement in queries that have a large number of binds.
  * Ryuta Kamizono*
  * Fix query cache to load before first request.
  * Eileen M. Uchitelle*
  * Fix collection cache key with limit and custom select to avoid ambiguous timestamp column error.
    Fixes #33056.
  * Federico Martinez*
  * Fix duplicated record creation when using nested attributes with `create_with`.
  * Darwin Wu*
  * Fix regression setting children record in parent `before_save` callback.
  * Guo Xiang Tan*
  * Prevent leaking of user's DB credentials on `rails db:create` failure.
  * bogdanvlviv*
  * Clear mutation tracker before continuing the around callbacks.
  * Yuya Tanaka*
  * Prevent deadlocks when waiting for connection from pool.
  * Brent Wheeldon*
  * Avoid extra scoping when using `Relation#update` that was causing this method to change the current scope.
  * Ryuta Kamizono*
  * Fix numericality validator not to be affected by custom getter.
  * Ryuta Kamizono*
  * Fix bulk change table ignores comment option on PostgreSQL.
  * Yoshiyuki Kinjo*</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1547812800">- limit to ruby 2.5 and above for 42.3/sle12</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1547899200">- rb_build_ruby_abi needs to be rb_build_ruby_abis</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1552564800">- update to version 5.2.2.1:
  https://weblog.rubyonrails.org/2019/3/13/Rails-4-2-5-1-5-1-6-2-have-been-released/
  CVE-2019-5418 CVE-2019-5419 CVE-2019-5420</changelog>
  <changelog author="Stephan Kulow &lt;coolo@suse.com&gt;" date="1553860800">- updated to version 5.2.3
  see installed CHANGELOG.md
  [#]# Rails 5.2.3 (March 27, 2019) ##
  * Fix different `count` calculation when using `size` with manual `select` with DISTINCT.
    Fixes #35214.
  * Juani Villarejo*
  * Fix prepared statements caching to be enabled even when query caching is enabled.
  * Ryuta Kamizono*
  * Don't allow `where` with invalid value matches to nil values.
    Fixes #33624.
  * Ryuta Kamizono*
  * Restore an ability that class level `update` without giving ids.
    Fixes #34743.
  * Ryuta Kamizono*
  * Fix join table column quoting with SQLite.
  * Gannon McGibbon*
  * Ensure that `delete_all` on collection proxy returns affected count.
  * Ryuta Kamizono*
  * Reset scope after delete on collection association to clear stale offsets of removed records.
  * Gannon McGibbon*</changelog>
  <changelog author="Luciano Santos &lt;luc14n0@opensuse.org&gt;" date="1673352000">- Add CVE-2022-32224.patch to address a possible escalation to RCE
  when using YAML serialized columns in Active Record
  (CVE-2022-32224, bsc#1201465).</changelog>
</package>
<package pkgid="435a326dcc9f2b52a868a51876fd8850337c6c7584268c09b92f1cab41445f88" name="ruby2.5-rubygem-activerecord-doc-5.2" arch="aarch64">
  <version epoch="0" ver="5.2.3" rel="bp154.2.3.1"/>
  <changelog author="mschnitzer@suse.com" date="1523880000">- initialize package
  see changelog: https://github.com/rails/rails/blob/v5.2.0/activerecord/CHANGELOG.md</changelog>
  <changelog author="mschnitzer@suse.com" date="1533729600">- updated to version 5.2.1 (boo#1104209)
  * PostgreSQL: Support new relkind for partitioned tables.
    Fixes #33008.
    (Yannick Schutz)
  * Rollback parent transaction when children fails to update.
    (Guillaume Malette)
  * Fix default value for MySQL time types with specified precision.
    (Nikolay Kondratyev)
  * Fix `touch` option to behave consistently with `Persistence#touch` method.
    (Ryuta Kamizono)
  * Fix `save` in `after_create_commit` won't invoke extra `after_create_commit`.
    Fixes #32831.
    (Ryuta Kamizono)
  * Fix logic on disabling commit callbacks so they are not called unexpectedly when errors occur.
    (Brian Durand)
  * Fix parent record should not get saved with duplicate children records.
    Fixes #32940.
    (Santosh Wadghule)
  * Fix that association's after_touch is not called with counter cache.
    Fixes #31559.
    (Ryuta Kamizono)
  * `becomes` should clear the mutation tracker which is created in `after_initialize`.
    Fixes #32867.
    (Ryuta Kamizono)
  * Allow a belonging to parent object to be created from a new record.
    (Jolyon Pawlyn)
  * Fix that building record with assigning multiple has_one associations
    wrongly persists through record. (Fixes #32511)
    (Sam DeCesare)
  * Fix relation merging when one of the relations is going to skip the
    query cache.
    (James Williams)</changelog>
  <changelog author="mschnitzer@suse.com" date="1543838400">- updated to version 5.2.1.1 (boo#1118076)
  * No changes / Just a version bump to match with Rails 5.2.1.1</changelog>
  <changelog author="Stephan Kulow &lt;coolo@suse.com&gt;" date="1544270400">- updated to version 5.2.2
  see installed CHANGELOG.md
  [#]# Rails 5.2.2 (December 04, 2018) ##
  * Do not ignore the scoping with query methods in the scope block.
  * Ryuta Kamizono*
  * Allow aliased attributes to be used in `#update_columns` and `#update`.
  * Gannon McGibbon*
  * Allow spaces in postgres table names.
    Fixes issue where "user post" is misinterpreted as "\"user\".\"post\"" when quoting table names with the postgres
    adapter.
  * Gannon McGibbon*
  * Cached columns_hash fields should be excluded from ResultSet#column_types
    PR #34528 addresses the inconsistent behaviour when attribute is defined for an ignored column. The following test
    was passing for SQLite and MySQL, but failed for PostgreSQL:
    ```ruby
    class DeveloperName &lt; ActiveRecord::Type::String
    def deserialize(value)
    "Developer: #{value}"
    end
    end
    class AttributedDeveloper &lt; ActiveRecord::Base
    self.table_name = "developers"
    attribute :name, DeveloperName.new
    self.ignored_columns += ["name"]
    end
    developer = AttributedDeveloper.create
    developer.update_column :name, "name"
    loaded_developer = AttributedDeveloper.where(id: developer.id).select("*").first
    puts loaded_developer.name # should be "Developer: name" but it's just "name"
    ```
  * Dmitry Tsepelev*
  * Values of enum are frozen, raising an error when attempting to modify them.
  * Emmanuel Byrd*
  * `update_columns` now correctly raises `ActiveModel::MissingAttributeError`
    if the attribute does not exist.
  * Sean Griffin*
  * Do not use prepared statement in queries that have a large number of binds.
  * Ryuta Kamizono*
  * Fix query cache to load before first request.
  * Eileen M. Uchitelle*
  * Fix collection cache key with limit and custom select to avoid ambiguous timestamp column error.
    Fixes #33056.
  * Federico Martinez*
  * Fix duplicated record creation when using nested attributes with `create_with`.
  * Darwin Wu*
  * Fix regression setting children record in parent `before_save` callback.
  * Guo Xiang Tan*
  * Prevent leaking of user's DB credentials on `rails db:create` failure.
  * bogdanvlviv*
  * Clear mutation tracker before continuing the around callbacks.
  * Yuya Tanaka*
  * Prevent deadlocks when waiting for connection from pool.
  * Brent Wheeldon*
  * Avoid extra scoping when using `Relation#update` that was causing this method to change the current scope.
  * Ryuta Kamizono*
  * Fix numericality validator not to be affected by custom getter.
  * Ryuta Kamizono*
  * Fix bulk change table ignores comment option on PostgreSQL.
  * Yoshiyuki Kinjo*</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1547812800">- limit to ruby 2.5 and above for 42.3/sle12</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1547899200">- rb_build_ruby_abi needs to be rb_build_ruby_abis</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1552564800">- update to version 5.2.2.1:
  https://weblog.rubyonrails.org/2019/3/13/Rails-4-2-5-1-5-1-6-2-have-been-released/
  CVE-2019-5418 CVE-2019-5419 CVE-2019-5420</changelog>
  <changelog author="Stephan Kulow &lt;coolo@suse.com&gt;" date="1553860800">- updated to version 5.2.3
  see installed CHANGELOG.md
  [#]# Rails 5.2.3 (March 27, 2019) ##
  * Fix different `count` calculation when using `size` with manual `select` with DISTINCT.
    Fixes #35214.
  * Juani Villarejo*
  * Fix prepared statements caching to be enabled even when query caching is enabled.
  * Ryuta Kamizono*
  * Don't allow `where` with invalid value matches to nil values.
    Fixes #33624.
  * Ryuta Kamizono*
  * Restore an ability that class level `update` without giving ids.
    Fixes #34743.
  * Ryuta Kamizono*
  * Fix join table column quoting with SQLite.
  * Gannon McGibbon*
  * Ensure that `delete_all` on collection proxy returns affected count.
  * Ryuta Kamizono*
  * Reset scope after delete on collection association to clear stale offsets of removed records.
  * Gannon McGibbon*</changelog>
  <changelog author="Luciano Santos &lt;luc14n0@opensuse.org&gt;" date="1673352000">- Add CVE-2022-32224.patch to address a possible escalation to RCE
  when using YAML serialized columns in Active Record
  (CVE-2022-32224, bsc#1201465).</changelog>
</package>
<package pkgid="8207d96ae133509b489dc09367e95f33b25084d2eb3cc171b22f729d5ecdfbf6" name="ruby2.5-rubygem-activerecord-doc-5.2" arch="i586">
  <version epoch="0" ver="5.2.3" rel="bp154.2.3.1"/>
  <changelog author="mschnitzer@suse.com" date="1523880000">- initialize package
  see changelog: https://github.com/rails/rails/blob/v5.2.0/activerecord/CHANGELOG.md</changelog>
  <changelog author="mschnitzer@suse.com" date="1533729600">- updated to version 5.2.1 (boo#1104209)
  * PostgreSQL: Support new relkind for partitioned tables.
    Fixes #33008.
    (Yannick Schutz)
  * Rollback parent transaction when children fails to update.
    (Guillaume Malette)
  * Fix default value for MySQL time types with specified precision.
    (Nikolay Kondratyev)
  * Fix `touch` option to behave consistently with `Persistence#touch` method.
    (Ryuta Kamizono)
  * Fix `save` in `after_create_commit` won't invoke extra `after_create_commit`.
    Fixes #32831.
    (Ryuta Kamizono)
  * Fix logic on disabling commit callbacks so they are not called unexpectedly when errors occur.
    (Brian Durand)
  * Fix parent record should not get saved with duplicate children records.
    Fixes #32940.
    (Santosh Wadghule)
  * Fix that association's after_touch is not called with counter cache.
    Fixes #31559.
    (Ryuta Kamizono)
  * `becomes` should clear the mutation tracker which is created in `after_initialize`.
    Fixes #32867.
    (Ryuta Kamizono)
  * Allow a belonging to parent object to be created from a new record.
    (Jolyon Pawlyn)
  * Fix that building record with assigning multiple has_one associations
    wrongly persists through record. (Fixes #32511)
    (Sam DeCesare)
  * Fix relation merging when one of the relations is going to skip the
    query cache.
    (James Williams)</changelog>
  <changelog author="mschnitzer@suse.com" date="1543838400">- updated to version 5.2.1.1 (boo#1118076)
  * No changes / Just a version bump to match with Rails 5.2.1.1</changelog>
  <changelog author="Stephan Kulow &lt;coolo@suse.com&gt;" date="1544270400">- updated to version 5.2.2
  see installed CHANGELOG.md
  [#]# Rails 5.2.2 (December 04, 2018) ##
  * Do not ignore the scoping with query methods in the scope block.
  * Ryuta Kamizono*
  * Allow aliased attributes to be used in `#update_columns` and `#update`.
  * Gannon McGibbon*
  * Allow spaces in postgres table names.
    Fixes issue where "user post" is misinterpreted as "\"user\".\"post\"" when quoting table names with the postgres
    adapter.
  * Gannon McGibbon*
  * Cached columns_hash fields should be excluded from ResultSet#column_types
    PR #34528 addresses the inconsistent behaviour when attribute is defined for an ignored column. The following test
    was passing for SQLite and MySQL, but failed for PostgreSQL:
    ```ruby
    class DeveloperName &lt; ActiveRecord::Type::String
    def deserialize(value)
    "Developer: #{value}"
    end
    end
    class AttributedDeveloper &lt; ActiveRecord::Base
    self.table_name = "developers"
    attribute :name, DeveloperName.new
    self.ignored_columns += ["name"]
    end
    developer = AttributedDeveloper.create
    developer.update_column :name, "name"
    loaded_developer = AttributedDeveloper.where(id: developer.id).select("*").first
    puts loaded_developer.name # should be "Developer: name" but it's just "name"
    ```
  * Dmitry Tsepelev*
  * Values of enum are frozen, raising an error when attempting to modify them.
  * Emmanuel Byrd*
  * `update_columns` now correctly raises `ActiveModel::MissingAttributeError`
    if the attribute does not exist.
  * Sean Griffin*
  * Do not use prepared statement in queries that have a large number of binds.
  * Ryuta Kamizono*
  * Fix query cache to load before first request.
  * Eileen M. Uchitelle*
  * Fix collection cache key with limit and custom select to avoid ambiguous timestamp column error.
    Fixes #33056.
  * Federico Martinez*
  * Fix duplicated record creation when using nested attributes with `create_with`.
  * Darwin Wu*
  * Fix regression setting children record in parent `before_save` callback.
  * Guo Xiang Tan*
  * Prevent leaking of user's DB credentials on `rails db:create` failure.
  * bogdanvlviv*
  * Clear mutation tracker before continuing the around callbacks.
  * Yuya Tanaka*
  * Prevent deadlocks when waiting for connection from pool.
  * Brent Wheeldon*
  * Avoid extra scoping when using `Relation#update` that was causing this method to change the current scope.
  * Ryuta Kamizono*
  * Fix numericality validator not to be affected by custom getter.
  * Ryuta Kamizono*
  * Fix bulk change table ignores comment option on PostgreSQL.
  * Yoshiyuki Kinjo*</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1547812800">- limit to ruby 2.5 and above for 42.3/sle12</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1547899200">- rb_build_ruby_abi needs to be rb_build_ruby_abis</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1552564800">- update to version 5.2.2.1:
  https://weblog.rubyonrails.org/2019/3/13/Rails-4-2-5-1-5-1-6-2-have-been-released/
  CVE-2019-5418 CVE-2019-5419 CVE-2019-5420</changelog>
  <changelog author="Stephan Kulow &lt;coolo@suse.com&gt;" date="1553860800">- updated to version 5.2.3
  see installed CHANGELOG.md
  [#]# Rails 5.2.3 (March 27, 2019) ##
  * Fix different `count` calculation when using `size` with manual `select` with DISTINCT.
    Fixes #35214.
  * Juani Villarejo*
  * Fix prepared statements caching to be enabled even when query caching is enabled.
  * Ryuta Kamizono*
  * Don't allow `where` with invalid value matches to nil values.
    Fixes #33624.
  * Ryuta Kamizono*
  * Restore an ability that class level `update` without giving ids.
    Fixes #34743.
  * Ryuta Kamizono*
  * Fix join table column quoting with SQLite.
  * Gannon McGibbon*
  * Ensure that `delete_all` on collection proxy returns affected count.
  * Ryuta Kamizono*
  * Reset scope after delete on collection association to clear stale offsets of removed records.
  * Gannon McGibbon*</changelog>
  <changelog author="Luciano Santos &lt;luc14n0@opensuse.org&gt;" date="1673352000">- Add CVE-2022-32224.patch to address a possible escalation to RCE
  when using YAML serialized columns in Active Record
  (CVE-2022-32224, bsc#1201465).</changelog>
</package>
<package pkgid="f807877a89eede1a5a7e4d836cc870803c0de097cf1e64823ffaa1f322c1404e" name="ruby2.5-rubygem-activerecord-doc-5.2" arch="ppc64le">
  <version epoch="0" ver="5.2.3" rel="bp154.2.3.1"/>
  <changelog author="mschnitzer@suse.com" date="1523880000">- initialize package
  see changelog: https://github.com/rails/rails/blob/v5.2.0/activerecord/CHANGELOG.md</changelog>
  <changelog author="mschnitzer@suse.com" date="1533729600">- updated to version 5.2.1 (boo#1104209)
  * PostgreSQL: Support new relkind for partitioned tables.
    Fixes #33008.
    (Yannick Schutz)
  * Rollback parent transaction when children fails to update.
    (Guillaume Malette)
  * Fix default value for MySQL time types with specified precision.
    (Nikolay Kondratyev)
  * Fix `touch` option to behave consistently with `Persistence#touch` method.
    (Ryuta Kamizono)
  * Fix `save` in `after_create_commit` won't invoke extra `after_create_commit`.
    Fixes #32831.
    (Ryuta Kamizono)
  * Fix logic on disabling commit callbacks so they are not called unexpectedly when errors occur.
    (Brian Durand)
  * Fix parent record should not get saved with duplicate children records.
    Fixes #32940.
    (Santosh Wadghule)
  * Fix that association's after_touch is not called with counter cache.
    Fixes #31559.
    (Ryuta Kamizono)
  * `becomes` should clear the mutation tracker which is created in `after_initialize`.
    Fixes #32867.
    (Ryuta Kamizono)
  * Allow a belonging to parent object to be created from a new record.
    (Jolyon Pawlyn)
  * Fix that building record with assigning multiple has_one associations
    wrongly persists through record. (Fixes #32511)
    (Sam DeCesare)
  * Fix relation merging when one of the relations is going to skip the
    query cache.
    (James Williams)</changelog>
  <changelog author="mschnitzer@suse.com" date="1543838400">- updated to version 5.2.1.1 (boo#1118076)
  * No changes / Just a version bump to match with Rails 5.2.1.1</changelog>
  <changelog author="Stephan Kulow &lt;coolo@suse.com&gt;" date="1544270400">- updated to version 5.2.2
  see installed CHANGELOG.md
  [#]# Rails 5.2.2 (December 04, 2018) ##
  * Do not ignore the scoping with query methods in the scope block.
  * Ryuta Kamizono*
  * Allow aliased attributes to be used in `#update_columns` and `#update`.
  * Gannon McGibbon*
  * Allow spaces in postgres table names.
    Fixes issue where "user post" is misinterpreted as "\"user\".\"post\"" when quoting table names with the postgres
    adapter.
  * Gannon McGibbon*
  * Cached columns_hash fields should be excluded from ResultSet#column_types
    PR #34528 addresses the inconsistent behaviour when attribute is defined for an ignored column. The following test
    was passing for SQLite and MySQL, but failed for PostgreSQL:
    ```ruby
    class DeveloperName &lt; ActiveRecord::Type::String
    def deserialize(value)
    "Developer: #{value}"
    end
    end
    class AttributedDeveloper &lt; ActiveRecord::Base
    self.table_name = "developers"
    attribute :name, DeveloperName.new
    self.ignored_columns += ["name"]
    end
    developer = AttributedDeveloper.create
    developer.update_column :name, "name"
    loaded_developer = AttributedDeveloper.where(id: developer.id).select("*").first
    puts loaded_developer.name # should be "Developer: name" but it's just "name"
    ```
  * Dmitry Tsepelev*
  * Values of enum are frozen, raising an error when attempting to modify them.
  * Emmanuel Byrd*
  * `update_columns` now correctly raises `ActiveModel::MissingAttributeError`
    if the attribute does not exist.
  * Sean Griffin*
  * Do not use prepared statement in queries that have a large number of binds.
  * Ryuta Kamizono*
  * Fix query cache to load before first request.
  * Eileen M. Uchitelle*
  * Fix collection cache key with limit and custom select to avoid ambiguous timestamp column error.
    Fixes #33056.
  * Federico Martinez*
  * Fix duplicated record creation when using nested attributes with `create_with`.
  * Darwin Wu*
  * Fix regression setting children record in parent `before_save` callback.
  * Guo Xiang Tan*
  * Prevent leaking of user's DB credentials on `rails db:create` failure.
  * bogdanvlviv*
  * Clear mutation tracker before continuing the around callbacks.
  * Yuya Tanaka*
  * Prevent deadlocks when waiting for connection from pool.
  * Brent Wheeldon*
  * Avoid extra scoping when using `Relation#update` that was causing this method to change the current scope.
  * Ryuta Kamizono*
  * Fix numericality validator not to be affected by custom getter.
  * Ryuta Kamizono*
  * Fix bulk change table ignores comment option on PostgreSQL.
  * Yoshiyuki Kinjo*</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1547812800">- limit to ruby 2.5 and above for 42.3/sle12</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1547899200">- rb_build_ruby_abi needs to be rb_build_ruby_abis</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1552564800">- update to version 5.2.2.1:
  https://weblog.rubyonrails.org/2019/3/13/Rails-4-2-5-1-5-1-6-2-have-been-released/
  CVE-2019-5418 CVE-2019-5419 CVE-2019-5420</changelog>
  <changelog author="Stephan Kulow &lt;coolo@suse.com&gt;" date="1553860800">- updated to version 5.2.3
  see installed CHANGELOG.md
  [#]# Rails 5.2.3 (March 27, 2019) ##
  * Fix different `count` calculation when using `size` with manual `select` with DISTINCT.
    Fixes #35214.
  * Juani Villarejo*
  * Fix prepared statements caching to be enabled even when query caching is enabled.
  * Ryuta Kamizono*
  * Don't allow `where` with invalid value matches to nil values.
    Fixes #33624.
  * Ryuta Kamizono*
  * Restore an ability that class level `update` without giving ids.
    Fixes #34743.
  * Ryuta Kamizono*
  * Fix join table column quoting with SQLite.
  * Gannon McGibbon*
  * Ensure that `delete_all` on collection proxy returns affected count.
  * Ryuta Kamizono*
  * Reset scope after delete on collection association to clear stale offsets of removed records.
  * Gannon McGibbon*</changelog>
  <changelog author="Luciano Santos &lt;luc14n0@opensuse.org&gt;" date="1673352000">- Add CVE-2022-32224.patch to address a possible escalation to RCE
  when using YAML serialized columns in Active Record
  (CVE-2022-32224, bsc#1201465).</changelog>
</package>
<package pkgid="cd181add4dd082fd1e467802fe8b692996756aaa70590d6c3ffc9c2d1e085e7f" name="ruby2.5-rubygem-activerecord-doc-5.2" arch="s390x">
  <version epoch="0" ver="5.2.3" rel="bp154.2.3.1"/>
  <changelog author="mschnitzer@suse.com" date="1523880000">- initialize package
  see changelog: https://github.com/rails/rails/blob/v5.2.0/activerecord/CHANGELOG.md</changelog>
  <changelog author="mschnitzer@suse.com" date="1533729600">- updated to version 5.2.1 (boo#1104209)
  * PostgreSQL: Support new relkind for partitioned tables.
    Fixes #33008.
    (Yannick Schutz)
  * Rollback parent transaction when children fails to update.
    (Guillaume Malette)
  * Fix default value for MySQL time types with specified precision.
    (Nikolay Kondratyev)
  * Fix `touch` option to behave consistently with `Persistence#touch` method.
    (Ryuta Kamizono)
  * Fix `save` in `after_create_commit` won't invoke extra `after_create_commit`.
    Fixes #32831.
    (Ryuta Kamizono)
  * Fix logic on disabling commit callbacks so they are not called unexpectedly when errors occur.
    (Brian Durand)
  * Fix parent record should not get saved with duplicate children records.
    Fixes #32940.
    (Santosh Wadghule)
  * Fix that association's after_touch is not called with counter cache.
    Fixes #31559.
    (Ryuta Kamizono)
  * `becomes` should clear the mutation tracker which is created in `after_initialize`.
    Fixes #32867.
    (Ryuta Kamizono)
  * Allow a belonging to parent object to be created from a new record.
    (Jolyon Pawlyn)
  * Fix that building record with assigning multiple has_one associations
    wrongly persists through record. (Fixes #32511)
    (Sam DeCesare)
  * Fix relation merging when one of the relations is going to skip the
    query cache.
    (James Williams)</changelog>
  <changelog author="mschnitzer@suse.com" date="1543838400">- updated to version 5.2.1.1 (boo#1118076)
  * No changes / Just a version bump to match with Rails 5.2.1.1</changelog>
  <changelog author="Stephan Kulow &lt;coolo@suse.com&gt;" date="1544270400">- updated to version 5.2.2
  see installed CHANGELOG.md
  [#]# Rails 5.2.2 (December 04, 2018) ##
  * Do not ignore the scoping with query methods in the scope block.
  * Ryuta Kamizono*
  * Allow aliased attributes to be used in `#update_columns` and `#update`.
  * Gannon McGibbon*
  * Allow spaces in postgres table names.
    Fixes issue where "user post" is misinterpreted as "\"user\".\"post\"" when quoting table names with the postgres
    adapter.
  * Gannon McGibbon*
  * Cached columns_hash fields should be excluded from ResultSet#column_types
    PR #34528 addresses the inconsistent behaviour when attribute is defined for an ignored column. The following test
    was passing for SQLite and MySQL, but failed for PostgreSQL:
    ```ruby
    class DeveloperName &lt; ActiveRecord::Type::String
    def deserialize(value)
    "Developer: #{value}"
    end
    end
    class AttributedDeveloper &lt; ActiveRecord::Base
    self.table_name = "developers"
    attribute :name, DeveloperName.new
    self.ignored_columns += ["name"]
    end
    developer = AttributedDeveloper.create
    developer.update_column :name, "name"
    loaded_developer = AttributedDeveloper.where(id: developer.id).select("*").first
    puts loaded_developer.name # should be "Developer: name" but it's just "name"
    ```
  * Dmitry Tsepelev*
  * Values of enum are frozen, raising an error when attempting to modify them.
  * Emmanuel Byrd*
  * `update_columns` now correctly raises `ActiveModel::MissingAttributeError`
    if the attribute does not exist.
  * Sean Griffin*
  * Do not use prepared statement in queries that have a large number of binds.
  * Ryuta Kamizono*
  * Fix query cache to load before first request.
  * Eileen M. Uchitelle*
  * Fix collection cache key with limit and custom select to avoid ambiguous timestamp column error.
    Fixes #33056.
  * Federico Martinez*
  * Fix duplicated record creation when using nested attributes with `create_with`.
  * Darwin Wu*
  * Fix regression setting children record in parent `before_save` callback.
  * Guo Xiang Tan*
  * Prevent leaking of user's DB credentials on `rails db:create` failure.
  * bogdanvlviv*
  * Clear mutation tracker before continuing the around callbacks.
  * Yuya Tanaka*
  * Prevent deadlocks when waiting for connection from pool.
  * Brent Wheeldon*
  * Avoid extra scoping when using `Relation#update` that was causing this method to change the current scope.
  * Ryuta Kamizono*
  * Fix numericality validator not to be affected by custom getter.
  * Ryuta Kamizono*
  * Fix bulk change table ignores comment option on PostgreSQL.
  * Yoshiyuki Kinjo*</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1547812800">- limit to ruby 2.5 and above for 42.3/sle12</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1547899200">- rb_build_ruby_abi needs to be rb_build_ruby_abis</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1552564800">- update to version 5.2.2.1:
  https://weblog.rubyonrails.org/2019/3/13/Rails-4-2-5-1-5-1-6-2-have-been-released/
  CVE-2019-5418 CVE-2019-5419 CVE-2019-5420</changelog>
  <changelog author="Stephan Kulow &lt;coolo@suse.com&gt;" date="1553860800">- updated to version 5.2.3
  see installed CHANGELOG.md
  [#]# Rails 5.2.3 (March 27, 2019) ##
  * Fix different `count` calculation when using `size` with manual `select` with DISTINCT.
    Fixes #35214.
  * Juani Villarejo*
  * Fix prepared statements caching to be enabled even when query caching is enabled.
  * Ryuta Kamizono*
  * Don't allow `where` with invalid value matches to nil values.
    Fixes #33624.
  * Ryuta Kamizono*
  * Restore an ability that class level `update` without giving ids.
    Fixes #34743.
  * Ryuta Kamizono*
  * Fix join table column quoting with SQLite.
  * Gannon McGibbon*
  * Ensure that `delete_all` on collection proxy returns affected count.
  * Ryuta Kamizono*
  * Reset scope after delete on collection association to clear stale offsets of removed records.
  * Gannon McGibbon*</changelog>
  <changelog author="Luciano Santos &lt;luc14n0@opensuse.org&gt;" date="1673352000">- Add CVE-2022-32224.patch to address a possible escalation to RCE
  when using YAML serialized columns in Active Record
  (CVE-2022-32224, bsc#1201465).</changelog>
</package>
<package pkgid="dfd2e8a48a8ce46728896a807078afc33b4d01e7b0c9d3417ba33f0327bdf494" name="ruby2.5-rubygem-activerecord-doc-5.2" arch="x86_64">
  <version epoch="0" ver="5.2.3" rel="bp154.2.3.1"/>
  <changelog author="mschnitzer@suse.com" date="1523880000">- initialize package
  see changelog: https://github.com/rails/rails/blob/v5.2.0/activerecord/CHANGELOG.md</changelog>
  <changelog author="mschnitzer@suse.com" date="1533729600">- updated to version 5.2.1 (boo#1104209)
  * PostgreSQL: Support new relkind for partitioned tables.
    Fixes #33008.
    (Yannick Schutz)
  * Rollback parent transaction when children fails to update.
    (Guillaume Malette)
  * Fix default value for MySQL time types with specified precision.
    (Nikolay Kondratyev)
  * Fix `touch` option to behave consistently with `Persistence#touch` method.
    (Ryuta Kamizono)
  * Fix `save` in `after_create_commit` won't invoke extra `after_create_commit`.
    Fixes #32831.
    (Ryuta Kamizono)
  * Fix logic on disabling commit callbacks so they are not called unexpectedly when errors occur.
    (Brian Durand)
  * Fix parent record should not get saved with duplicate children records.
    Fixes #32940.
    (Santosh Wadghule)
  * Fix that association's after_touch is not called with counter cache.
    Fixes #31559.
    (Ryuta Kamizono)
  * `becomes` should clear the mutation tracker which is created in `after_initialize`.
    Fixes #32867.
    (Ryuta Kamizono)
  * Allow a belonging to parent object to be created from a new record.
    (Jolyon Pawlyn)
  * Fix that building record with assigning multiple has_one associations
    wrongly persists through record. (Fixes #32511)
    (Sam DeCesare)
  * Fix relation merging when one of the relations is going to skip the
    query cache.
    (James Williams)</changelog>
  <changelog author="mschnitzer@suse.com" date="1543838400">- updated to version 5.2.1.1 (boo#1118076)
  * No changes / Just a version bump to match with Rails 5.2.1.1</changelog>
  <changelog author="Stephan Kulow &lt;coolo@suse.com&gt;" date="1544270400">- updated to version 5.2.2
  see installed CHANGELOG.md
  [#]# Rails 5.2.2 (December 04, 2018) ##
  * Do not ignore the scoping with query methods in the scope block.
  * Ryuta Kamizono*
  * Allow aliased attributes to be used in `#update_columns` and `#update`.
  * Gannon McGibbon*
  * Allow spaces in postgres table names.
    Fixes issue where "user post" is misinterpreted as "\"user\".\"post\"" when quoting table names with the postgres
    adapter.
  * Gannon McGibbon*
  * Cached columns_hash fields should be excluded from ResultSet#column_types
    PR #34528 addresses the inconsistent behaviour when attribute is defined for an ignored column. The following test
    was passing for SQLite and MySQL, but failed for PostgreSQL:
    ```ruby
    class DeveloperName &lt; ActiveRecord::Type::String
    def deserialize(value)
    "Developer: #{value}"
    end
    end
    class AttributedDeveloper &lt; ActiveRecord::Base
    self.table_name = "developers"
    attribute :name, DeveloperName.new
    self.ignored_columns += ["name"]
    end
    developer = AttributedDeveloper.create
    developer.update_column :name, "name"
    loaded_developer = AttributedDeveloper.where(id: developer.id).select("*").first
    puts loaded_developer.name # should be "Developer: name" but it's just "name"
    ```
  * Dmitry Tsepelev*
  * Values of enum are frozen, raising an error when attempting to modify them.
  * Emmanuel Byrd*
  * `update_columns` now correctly raises `ActiveModel::MissingAttributeError`
    if the attribute does not exist.
  * Sean Griffin*
  * Do not use prepared statement in queries that have a large number of binds.
  * Ryuta Kamizono*
  * Fix query cache to load before first request.
  * Eileen M. Uchitelle*
  * Fix collection cache key with limit and custom select to avoid ambiguous timestamp column error.
    Fixes #33056.
  * Federico Martinez*
  * Fix duplicated record creation when using nested attributes with `create_with`.
  * Darwin Wu*
  * Fix regression setting children record in parent `before_save` callback.
  * Guo Xiang Tan*
  * Prevent leaking of user's DB credentials on `rails db:create` failure.
  * bogdanvlviv*
  * Clear mutation tracker before continuing the around callbacks.
  * Yuya Tanaka*
  * Prevent deadlocks when waiting for connection from pool.
  * Brent Wheeldon*
  * Avoid extra scoping when using `Relation#update` that was causing this method to change the current scope.
  * Ryuta Kamizono*
  * Fix numericality validator not to be affected by custom getter.
  * Ryuta Kamizono*
  * Fix bulk change table ignores comment option on PostgreSQL.
  * Yoshiyuki Kinjo*</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1547812800">- limit to ruby 2.5 and above for 42.3/sle12</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1547899200">- rb_build_ruby_abi needs to be rb_build_ruby_abis</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1552564800">- update to version 5.2.2.1:
  https://weblog.rubyonrails.org/2019/3/13/Rails-4-2-5-1-5-1-6-2-have-been-released/
  CVE-2019-5418 CVE-2019-5419 CVE-2019-5420</changelog>
  <changelog author="Stephan Kulow &lt;coolo@suse.com&gt;" date="1553860800">- updated to version 5.2.3
  see installed CHANGELOG.md
  [#]# Rails 5.2.3 (March 27, 2019) ##
  * Fix different `count` calculation when using `size` with manual `select` with DISTINCT.
    Fixes #35214.
  * Juani Villarejo*
  * Fix prepared statements caching to be enabled even when query caching is enabled.
  * Ryuta Kamizono*
  * Don't allow `where` with invalid value matches to nil values.
    Fixes #33624.
  * Ryuta Kamizono*
  * Restore an ability that class level `update` without giving ids.
    Fixes #34743.
  * Ryuta Kamizono*
  * Fix join table column quoting with SQLite.
  * Gannon McGibbon*
  * Ensure that `delete_all` on collection proxy returns affected count.
  * Ryuta Kamizono*
  * Reset scope after delete on collection association to clear stale offsets of removed records.
  * Gannon McGibbon*</changelog>
  <changelog author="Luciano Santos &lt;luc14n0@opensuse.org&gt;" date="1673352000">- Add CVE-2022-32224.patch to address a possible escalation to RCE
  when using YAML serialized columns in Active Record
  (CVE-2022-32224, bsc#1201465).</changelog>
</package>
<package pkgid="a9728eae1f8724d1cefa0d14d36d6333b0becb889f48dff9957f9a464e226b50" name="rubygem-activerecord-5.2" arch="src">
  <version epoch="0" ver="5.2.3" rel="bp154.2.3.1"/>
  <changelog author="mschnitzer@suse.com" date="1523880000">- initialize package
  see changelog: https://github.com/rails/rails/blob/v5.2.0/activerecord/CHANGELOG.md</changelog>
  <changelog author="mschnitzer@suse.com" date="1533729600">- updated to version 5.2.1 (boo#1104209)
  * PostgreSQL: Support new relkind for partitioned tables.
    Fixes #33008.
    (Yannick Schutz)
  * Rollback parent transaction when children fails to update.
    (Guillaume Malette)
  * Fix default value for MySQL time types with specified precision.
    (Nikolay Kondratyev)
  * Fix `touch` option to behave consistently with `Persistence#touch` method.
    (Ryuta Kamizono)
  * Fix `save` in `after_create_commit` won't invoke extra `after_create_commit`.
    Fixes #32831.
    (Ryuta Kamizono)
  * Fix logic on disabling commit callbacks so they are not called unexpectedly when errors occur.
    (Brian Durand)
  * Fix parent record should not get saved with duplicate children records.
    Fixes #32940.
    (Santosh Wadghule)
  * Fix that association's after_touch is not called with counter cache.
    Fixes #31559.
    (Ryuta Kamizono)
  * `becomes` should clear the mutation tracker which is created in `after_initialize`.
    Fixes #32867.
    (Ryuta Kamizono)
  * Allow a belonging to parent object to be created from a new record.
    (Jolyon Pawlyn)
  * Fix that building record with assigning multiple has_one associations
    wrongly persists through record. (Fixes #32511)
    (Sam DeCesare)
  * Fix relation merging when one of the relations is going to skip the
    query cache.
    (James Williams)</changelog>
  <changelog author="mschnitzer@suse.com" date="1543838400">- updated to version 5.2.1.1 (boo#1118076)
  * No changes / Just a version bump to match with Rails 5.2.1.1</changelog>
  <changelog author="Stephan Kulow &lt;coolo@suse.com&gt;" date="1544270400">- updated to version 5.2.2
  see installed CHANGELOG.md
  [#]# Rails 5.2.2 (December 04, 2018) ##
  * Do not ignore the scoping with query methods in the scope block.
  * Ryuta Kamizono*
  * Allow aliased attributes to be used in `#update_columns` and `#update`.
  * Gannon McGibbon*
  * Allow spaces in postgres table names.
    Fixes issue where "user post" is misinterpreted as "\"user\".\"post\"" when quoting table names with the postgres
    adapter.
  * Gannon McGibbon*
  * Cached columns_hash fields should be excluded from ResultSet#column_types
    PR #34528 addresses the inconsistent behaviour when attribute is defined for an ignored column. The following test
    was passing for SQLite and MySQL, but failed for PostgreSQL:
    ```ruby
    class DeveloperName &lt; ActiveRecord::Type::String
    def deserialize(value)
    "Developer: #{value}"
    end
    end
    class AttributedDeveloper &lt; ActiveRecord::Base
    self.table_name = "developers"
    attribute :name, DeveloperName.new
    self.ignored_columns += ["name"]
    end
    developer = AttributedDeveloper.create
    developer.update_column :name, "name"
    loaded_developer = AttributedDeveloper.where(id: developer.id).select("*").first
    puts loaded_developer.name # should be "Developer: name" but it's just "name"
    ```
  * Dmitry Tsepelev*
  * Values of enum are frozen, raising an error when attempting to modify them.
  * Emmanuel Byrd*
  * `update_columns` now correctly raises `ActiveModel::MissingAttributeError`
    if the attribute does not exist.
  * Sean Griffin*
  * Do not use prepared statement in queries that have a large number of binds.
  * Ryuta Kamizono*
  * Fix query cache to load before first request.
  * Eileen M. Uchitelle*
  * Fix collection cache key with limit and custom select to avoid ambiguous timestamp column error.
    Fixes #33056.
  * Federico Martinez*
  * Fix duplicated record creation when using nested attributes with `create_with`.
  * Darwin Wu*
  * Fix regression setting children record in parent `before_save` callback.
  * Guo Xiang Tan*
  * Prevent leaking of user's DB credentials on `rails db:create` failure.
  * bogdanvlviv*
  * Clear mutation tracker before continuing the around callbacks.
  * Yuya Tanaka*
  * Prevent deadlocks when waiting for connection from pool.
  * Brent Wheeldon*
  * Avoid extra scoping when using `Relation#update` that was causing this method to change the current scope.
  * Ryuta Kamizono*
  * Fix numericality validator not to be affected by custom getter.
  * Ryuta Kamizono*
  * Fix bulk change table ignores comment option on PostgreSQL.
  * Yoshiyuki Kinjo*</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1547812800">- limit to ruby 2.5 and above for 42.3/sle12</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1547899200">- rb_build_ruby_abi needs to be rb_build_ruby_abis</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1552564800">- update to version 5.2.2.1:
  https://weblog.rubyonrails.org/2019/3/13/Rails-4-2-5-1-5-1-6-2-have-been-released/
  CVE-2019-5418 CVE-2019-5419 CVE-2019-5420</changelog>
  <changelog author="Stephan Kulow &lt;coolo@suse.com&gt;" date="1553860800">- updated to version 5.2.3
  see installed CHANGELOG.md
  [#]# Rails 5.2.3 (March 27, 2019) ##
  * Fix different `count` calculation when using `size` with manual `select` with DISTINCT.
    Fixes #35214.
  * Juani Villarejo*
  * Fix prepared statements caching to be enabled even when query caching is enabled.
  * Ryuta Kamizono*
  * Don't allow `where` with invalid value matches to nil values.
    Fixes #33624.
  * Ryuta Kamizono*
  * Restore an ability that class level `update` without giving ids.
    Fixes #34743.
  * Ryuta Kamizono*
  * Fix join table column quoting with SQLite.
  * Gannon McGibbon*
  * Ensure that `delete_all` on collection proxy returns affected count.
  * Ryuta Kamizono*
  * Reset scope after delete on collection association to clear stale offsets of removed records.
  * Gannon McGibbon*</changelog>
  <changelog author="Luciano Santos &lt;luc14n0@opensuse.org&gt;" date="1673352000">- Add CVE-2022-32224.patch to address a possible escalation to RCE
  when using YAML serialized columns in Active Record
  (CVE-2022-32224, bsc#1201465).</changelog>
</package>
<package pkgid="278b90dda626c0bd4e296735fe9beb11f81ba3a487a57493178d561be28c6c6c" name="rxvt-unicode" arch="aarch64">
  <version epoch="0" ver="9.26" rel="bp154.2.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1414929600">- Switch to individual pkgconfig() build requires
  instead of using metapackage xorg-x11-devel</changelog>
  <changelog author="mrueckert@suse.de" date="1434369600">- sync categories in desktop files with xterm</changelog>
  <changelog author="mimi.vx@gmail.com" date="1434628800">- update to 9.21
  - fix pixel droppings on overdraw when a secondary core font has the
    same height but different ascent.
  - implement cvvis in terminfo as blinking cursor, to distinguish it
    from cnorm (emacs uses cvvis which is commonly a blinking cursor).
  - when xft support was compiled in, colour queries erroneously returned
    premultiplied values, this also affected internal queries, for example
    when calculating faded colour. alpha is now divided out when possible,
    which is more correct but loses colour resolution.
  - add DECSCUSR xterm extension to set the cursor to a vertical bar.
  - add 'extension:string' action, and associated on_action perl
    hook, for keysym resources that invokes actions provided by
    perl extensions. The 'perl:string' action and
    on_user_command hook are deprecated but still supported.
  - add 'builtin-string' action for keysym resources that restores string
    mappings for keys that have predefined actions in urxvt.
  - add -k option to urxvtc for killing the daemon process.
  - document urxvtd's -e/--eval option that was implemented in 9.16,
    but not documented.
  - add -dockapp option to make the wm treat urxvt as a dockapp.
  - add -mc option and multiClickTime resource to set the maximum time
    between multi-click select events (patch by Joe Peterson).
  - new 'eval' extension to evaluate arbitrary perl code with keysym
    bindings. The extension also provides methods that implement basic
    actions, such as pasting selections and scrolling.
  - the macosx-clipboard and macosx-clipboard-native extensions have been removed.
  - kuake extension now uses the kuake.hotkey resource to specify the hotkey.
  - new 'matcher:select' mode of matcher to iterate over the matches with the keyboard.
  - the 'matcher:list' feature of matcher now honours the launcher
    associated to a matched pattern.
  - speed-up matcher underlining on very long lines (reported by Edward Z. Yang).
  - fix up/down commands of searchable-scrollback so that they always move
    to the previous/next logical line with a match, if any.
  - searchable-scrollback resource has been deprecated (use keysym instead).
  - extension parameter passing is deprecated (use resource mechanism instead).
  - upgrade to GPLv3 (see COPYING).
  - compile out of the box on Solaris 10, again.
  - fix height and position of the stippled area in next scrollbar (patch
    by Thomas Otto).
  - fix off-by-one bug causing the iso14755 window not to jump out of the
    way properly.
  - fix crash that may happen if a lib to which urxvt is linked to calls setenv.
  - fix memory leak in special_{encode,decode} perl methods.
  - fix refresh bug that occurs when reverse video is set on a cell
    containing a space and with the same bg and fg colour, red hat bug
    [#830236].
  - fix crash that may happen if an x error is received after a terminal
    window/popup has been destroyed already.
  - removed superfluous 0 digit from sgr terminfo sequence.
  - greatly improve colour allocation on colour-starved pseudocolour
    displays to avoid read-write cells instead of simply failing
    (this is only relevant for antique 8bpp frame buffers).
  - do not free fade colours when not doing fading (this is likely
    only relevant for antique 8bpp frame buffers).
  - do not specialcase 2 or 4 colour visuals, leading to
    simpler and actually more correct code.
  - hopefully no longer leak colours on !truecolour visuals.
  - use consistent method names (scr_recolour =&gt; scr_recolor).
  - use simpler (but slightly less bogus) formula for nearest
    colour choice (this is likely only relevant for antique 8bpp
    frame buffers).
  - remove fallback behaviour when initialising colours - the
    behaviour was inconsistent between startup vs. later and
    was only effective when valid colours couldn't be allocated.
  * add rxvt-unicode-9.21-xsubpp.patch to correct wrong harcoded patch in makefile
  * add rxvt-unicode-0001-Prefer-XDG_RUNTIME_DIR-over-the-HOME.patch
  * removed unused rxvt-unicode-remove_unused_attribute.patch</changelog>
  <changelog author="meissner@suse.com" date="1435060800">- %clean section removed, moved makeinstall to %install</changelog>
  <changelog author="mimi.vx@gmail.com" date="1435060801">- remove %{_terminfo}/r/rxvt-unicode</changelog>
  <changelog author="meissner@suse.com" date="1435147200">- install COPYING</changelog>
  <changelog author="mrueckert@suse.de" date="1437134400">- move requires for the terminfo files from terminfo to
  terminfo-base (boo #936332)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1478520000">- update to 9.22
  - NOTICE: this release updates terminfo.
  - add terminfo capabilities for various ctrl and shift-ctrl key variants
  - fix longstanding core font encoding bug where some character
    ranges could not be mapped from unicode to the font: affected
    encodings are big5, gb2312, iso8859-8 (hebrew), jis0201 and
    ksc5601 .
  - fix crash when the number of columns is 1 and a 0 width character is inserted
  - fix a crash when parsing an invalid color specification
  - fix a buffer overflow in font name parser
  - do not start blinking cursor if the window is unfocused
  - change the width of underline and i-beam cursor to 2 pixels (based on
  a patch by Omar Sandoval).
  - add pointerShape resource to change the mouse pointer shape
  - a keysym resource for a key which is already bound to an
  action now properly rebinds the key.
  - do not report mouse motion events if Shift is active
  - put the alpha component last in responses to OSC color queries
  - the key_press hook is now invoked before processing the
  event, as documented. This change was done in 9.21 but not
  announced and fixes debian bugs #511377, #531751 and red hat
  bug #1105069. Note that this change breaks a few scripts,
  such as mark-yank-urls, which rely on the previous buggy
  behaviour that urxvt processes the event (in particular
  keysym bindings) before invoking the hook.
  - the tabbed extension now properly refreshes the active tab
  on a key press when the mouse pointer is outside the terminal
  window.
  - add 'lookup_keysym' perl method to lookup the action bound
  to a key combination.
  - a key combination bound to 'matcher:select' can now be used
  to cycle through the matches in matcher.
  - change perl integer accessors (-&gt;width et al.) into mutators.</changelog>
  <changelog author="mrueckert@suse.de" date="1496232000">- added rxvt-unicode-hardening.patch: (boo# 1036456)
  While urxvt is not directly affected by CVE-2017-7483. We add a
  patch to harden urxvt to avoid similar bugs in the future.</changelog>
  <changelog author="glin@suse.com" date="1522843200">- added rxvt-unicode-secondarywheel.patch from to add the new
  option: secondaryWheel to enable mouse scrolling for the pagers,
  e.g. less, man, vim, etc.</changelog>
  <changelog author="Marcus H&#xFC;we &lt;suse-tux@gmx.de&gt;" date="1606392000">- add rxvt-unicode-9.22-perl_environ_segfault.patch to avoid a
  segfault when closing urxvt</changelog>
  <changelog author="Avindra Goolcharan &lt;avindra@opensuse.org&gt;" date="1610452800">- fix build error (pass -D to "install")
- fix one  W: rpm-buildroot-usage
- ran spec-cleaner and tidy
- format rxvt-unicode-9.20-CVE-2008-1142-DISPLAY.patch for autosetup
- format rxvt-unicode-9.22-perl_environ_segfault.patch for autosetup</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1612872000">- restore the -256color binaries</changelog>
  <changelog author="Petr Vorel &lt;pvorel@suse.cz&gt;" date="1621252800">- Update to 9.26
  - ev_iouring.c was wrongly required during compilation, and wrongly
    not packaged.
- Update to 9.25 (boo#1186174 CVE-2021-33477)
  - for the 17.5th anniversary, and because many distributions seem to
    remove rxvt in favour of urxvt, this release resurrects rclock as
    urclock.
  - add support for systemd socket-based activation - debian bug #917105,
  freebsd bug #234276.
  - do not destruct perl on exit anymore: this might fail for a variety of
    reasons, and takes unneccessary time.
  - remove any macros from urxvtperl manpage(s), should fix debian
    bug 858385.
  - the old bg image resources are now provided by the background
  extension, and perl is thus required for bg image support. No
  configuration change is needed: urxvt autoloads the background
  ext if any bg image resource/option is present (for OSC sequences to
    work you need to enable it explicity). The old bg image
  resources are also now deprecated; users are encouraged to
  switch to the new bg image interface (see man urxvt-background).
  - confirm-paste now checks for any ctlchars, not just newlines.
  - searchable scrollback will now ignore bracketed paste mode sequences
    (prompted by Daniel Gröber's patch).
  - drop ISO 2022 locale support. ISO 2022 encodings are not supported in
    POSIX locales and clash with vt100 charset emulation (the luit
    program can be used as a substitute).
  - perl didn't parse rgba colours specified as an array correctly,
    only allowing 0 and 100% intensity for each component (this affected
    fill and tint).
  - when iterating over resources, urxvt will now try to properly handle
    multipart resources (such as "*background.expr"), for the benefit
    of autoloading perl extensions.
  - ESC G (query rxvt graphics mode) has been disabled due to security
    implications. The rxvt graphics mode was removed in rxvt-unicode 1.5,
    and no programs relying on being able to query the mode are known.
  - work around API change breakage in perl 5.28, based on a patch by
    Roman Bogorodskiy.
  - improved security: rob nation's (obsolete) graphics mode queries
    no longer reply with linefeed in secure/default mode.
  - ISO 8613-3 direct colour SGR sequences (patch by Fengguang Wu).
  - xterm focus reporting mode (patch by Daniel Hahler).
  - xterm SGR mouse mode.
  - implement DECRQM. Patch by P?emysl Eric Janouch.
  - add missing color index parameter to OSC 4 response. Patch
  by P?emysl Eric Janouch.
  - in some window managers, if smart resize was enabled, urxvt
  erroneously moved the window on font change - awesome bug
  [#532], arch linux bug ##34807 (patch by Uli Schlachter).
  - fix urxvtd crash when using a background expression.
  - properly restore colors when using fading and reverse video
  is enabled while urxvt is focused and then disabled while it
  is not focused, or vice versa (patch by Daniel Hahler).
  - fix high memory usage when an extension repeatedly hides and
  shows an overlay (reported by Marcel Lautenbach).
  - expose priv_modes member and constants to perl extensions
    (patch by Rastislav Barlik).
  - fix a whole slew of const sillyness, unfortunately forced upon
    us by ISO C++.
  - update to libecb 0x00010006.
  - disable all thread support in ecb.h as we presumably don't need it.
  - slightly improve Makefile source dependencies.
  - work around bugs in newer Pod::Xhtml versions (flags incorrect formatting codes
    in xhtml/html sections but does not interpret correct ones).
- New file: /usr/bin/urclock
- Add BuildRequires: pkgconfig(xt)
- Remove rxvt-unicode-9.22-perl_environ_segfault.patch (accepted upstream)
- Refresh patches:
  - rxvt-unicode-hardening.patch,
  - rxvt-unicode-9.21-xsubpp.patch
  - rxvt-unicode-9.20-CVE-2008-1142-DISPLAY.patch</changelog>
  <changelog author="Petr Vorel &lt;pvorel@suse.cz&gt;" date="1621944000">- Backport patch from upstream: perl-avoiding-recursive-loading.patch</changelog>
</package>
<package pkgid="3f2e578e54c41701ef3ddf3982ebc012d7f462a2c9a96001d2d64e51fe6292c6" name="rxvt-unicode" arch="i586">
  <version epoch="0" ver="9.26" rel="bp154.2.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1414929600">- Switch to individual pkgconfig() build requires
  instead of using metapackage xorg-x11-devel</changelog>
  <changelog author="mrueckert@suse.de" date="1434369600">- sync categories in desktop files with xterm</changelog>
  <changelog author="mimi.vx@gmail.com" date="1434628800">- update to 9.21
  - fix pixel droppings on overdraw when a secondary core font has the
    same height but different ascent.
  - implement cvvis in terminfo as blinking cursor, to distinguish it
    from cnorm (emacs uses cvvis which is commonly a blinking cursor).
  - when xft support was compiled in, colour queries erroneously returned
    premultiplied values, this also affected internal queries, for example
    when calculating faded colour. alpha is now divided out when possible,
    which is more correct but loses colour resolution.
  - add DECSCUSR xterm extension to set the cursor to a vertical bar.
  - add 'extension:string' action, and associated on_action perl
    hook, for keysym resources that invokes actions provided by
    perl extensions. The 'perl:string' action and
    on_user_command hook are deprecated but still supported.
  - add 'builtin-string' action for keysym resources that restores string
    mappings for keys that have predefined actions in urxvt.
  - add -k option to urxvtc for killing the daemon process.
  - document urxvtd's -e/--eval option that was implemented in 9.16,
    but not documented.
  - add -dockapp option to make the wm treat urxvt as a dockapp.
  - add -mc option and multiClickTime resource to set the maximum time
    between multi-click select events (patch by Joe Peterson).
  - new 'eval' extension to evaluate arbitrary perl code with keysym
    bindings. The extension also provides methods that implement basic
    actions, such as pasting selections and scrolling.
  - the macosx-clipboard and macosx-clipboard-native extensions have been removed.
  - kuake extension now uses the kuake.hotkey resource to specify the hotkey.
  - new 'matcher:select' mode of matcher to iterate over the matches with the keyboard.
  - the 'matcher:list' feature of matcher now honours the launcher
    associated to a matched pattern.
  - speed-up matcher underlining on very long lines (reported by Edward Z. Yang).
  - fix up/down commands of searchable-scrollback so that they always move
    to the previous/next logical line with a match, if any.
  - searchable-scrollback resource has been deprecated (use keysym instead).
  - extension parameter passing is deprecated (use resource mechanism instead).
  - upgrade to GPLv3 (see COPYING).
  - compile out of the box on Solaris 10, again.
  - fix height and position of the stippled area in next scrollbar (patch
    by Thomas Otto).
  - fix off-by-one bug causing the iso14755 window not to jump out of the
    way properly.
  - fix crash that may happen if a lib to which urxvt is linked to calls setenv.
  - fix memory leak in special_{encode,decode} perl methods.
  - fix refresh bug that occurs when reverse video is set on a cell
    containing a space and with the same bg and fg colour, red hat bug
    [#830236].
  - fix crash that may happen if an x error is received after a terminal
    window/popup has been destroyed already.
  - removed superfluous 0 digit from sgr terminfo sequence.
  - greatly improve colour allocation on colour-starved pseudocolour
    displays to avoid read-write cells instead of simply failing
    (this is only relevant for antique 8bpp frame buffers).
  - do not free fade colours when not doing fading (this is likely
    only relevant for antique 8bpp frame buffers).
  - do not specialcase 2 or 4 colour visuals, leading to
    simpler and actually more correct code.
  - hopefully no longer leak colours on !truecolour visuals.
  - use consistent method names (scr_recolour =&gt; scr_recolor).
  - use simpler (but slightly less bogus) formula for nearest
    colour choice (this is likely only relevant for antique 8bpp
    frame buffers).
  - remove fallback behaviour when initialising colours - the
    behaviour was inconsistent between startup vs. later and
    was only effective when valid colours couldn't be allocated.
  * add rxvt-unicode-9.21-xsubpp.patch to correct wrong harcoded patch in makefile
  * add rxvt-unicode-0001-Prefer-XDG_RUNTIME_DIR-over-the-HOME.patch
  * removed unused rxvt-unicode-remove_unused_attribute.patch</changelog>
  <changelog author="meissner@suse.com" date="1435060800">- %clean section removed, moved makeinstall to %install</changelog>
  <changelog author="mimi.vx@gmail.com" date="1435060801">- remove %{_terminfo}/r/rxvt-unicode</changelog>
  <changelog author="meissner@suse.com" date="1435147200">- install COPYING</changelog>
  <changelog author="mrueckert@suse.de" date="1437134400">- move requires for the terminfo files from terminfo to
  terminfo-base (boo #936332)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1478520000">- update to 9.22
  - NOTICE: this release updates terminfo.
  - add terminfo capabilities for various ctrl and shift-ctrl key variants
  - fix longstanding core font encoding bug where some character
    ranges could not be mapped from unicode to the font: affected
    encodings are big5, gb2312, iso8859-8 (hebrew), jis0201 and
    ksc5601 .
  - fix crash when the number of columns is 1 and a 0 width character is inserted
  - fix a crash when parsing an invalid color specification
  - fix a buffer overflow in font name parser
  - do not start blinking cursor if the window is unfocused
  - change the width of underline and i-beam cursor to 2 pixels (based on
  a patch by Omar Sandoval).
  - add pointerShape resource to change the mouse pointer shape
  - a keysym resource for a key which is already bound to an
  action now properly rebinds the key.
  - do not report mouse motion events if Shift is active
  - put the alpha component last in responses to OSC color queries
  - the key_press hook is now invoked before processing the
  event, as documented. This change was done in 9.21 but not
  announced and fixes debian bugs #511377, #531751 and red hat
  bug #1105069. Note that this change breaks a few scripts,
  such as mark-yank-urls, which rely on the previous buggy
  behaviour that urxvt processes the event (in particular
  keysym bindings) before invoking the hook.
  - the tabbed extension now properly refreshes the active tab
  on a key press when the mouse pointer is outside the terminal
  window.
  - add 'lookup_keysym' perl method to lookup the action bound
  to a key combination.
  - a key combination bound to 'matcher:select' can now be used
  to cycle through the matches in matcher.
  - change perl integer accessors (-&gt;width et al.) into mutators.</changelog>
  <changelog author="mrueckert@suse.de" date="1496232000">- added rxvt-unicode-hardening.patch: (boo# 1036456)
  While urxvt is not directly affected by CVE-2017-7483. We add a
  patch to harden urxvt to avoid similar bugs in the future.</changelog>
  <changelog author="glin@suse.com" date="1522843200">- added rxvt-unicode-secondarywheel.patch from to add the new
  option: secondaryWheel to enable mouse scrolling for the pagers,
  e.g. less, man, vim, etc.</changelog>
  <changelog author="Marcus H&#xFC;we &lt;suse-tux@gmx.de&gt;" date="1606392000">- add rxvt-unicode-9.22-perl_environ_segfault.patch to avoid a
  segfault when closing urxvt</changelog>
  <changelog author="Avindra Goolcharan &lt;avindra@opensuse.org&gt;" date="1610452800">- fix build error (pass -D to "install")
- fix one  W: rpm-buildroot-usage
- ran spec-cleaner and tidy
- format rxvt-unicode-9.20-CVE-2008-1142-DISPLAY.patch for autosetup
- format rxvt-unicode-9.22-perl_environ_segfault.patch for autosetup</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1612872000">- restore the -256color binaries</changelog>
  <changelog author="Petr Vorel &lt;pvorel@suse.cz&gt;" date="1621252800">- Update to 9.26
  - ev_iouring.c was wrongly required during compilation, and wrongly
    not packaged.
- Update to 9.25 (boo#1186174 CVE-2021-33477)
  - for the 17.5th anniversary, and because many distributions seem to
    remove rxvt in favour of urxvt, this release resurrects rclock as
    urclock.
  - add support for systemd socket-based activation - debian bug #917105,
  freebsd bug #234276.
  - do not destruct perl on exit anymore: this might fail for a variety of
    reasons, and takes unneccessary time.
  - remove any macros from urxvtperl manpage(s), should fix debian
    bug 858385.
  - the old bg image resources are now provided by the background
  extension, and perl is thus required for bg image support. No
  configuration change is needed: urxvt autoloads the background
  ext if any bg image resource/option is present (for OSC sequences to
    work you need to enable it explicity). The old bg image
  resources are also now deprecated; users are encouraged to
  switch to the new bg image interface (see man urxvt-background).
  - confirm-paste now checks for any ctlchars, not just newlines.
  - searchable scrollback will now ignore bracketed paste mode sequences
    (prompted by Daniel Gröber's patch).
  - drop ISO 2022 locale support. ISO 2022 encodings are not supported in
    POSIX locales and clash with vt100 charset emulation (the luit
    program can be used as a substitute).
  - perl didn't parse rgba colours specified as an array correctly,
    only allowing 0 and 100% intensity for each component (this affected
    fill and tint).
  - when iterating over resources, urxvt will now try to properly handle
    multipart resources (such as "*background.expr"), for the benefit
    of autoloading perl extensions.
  - ESC G (query rxvt graphics mode) has been disabled due to security
    implications. The rxvt graphics mode was removed in rxvt-unicode 1.5,
    and no programs relying on being able to query the mode are known.
  - work around API change breakage in perl 5.28, based on a patch by
    Roman Bogorodskiy.
  - improved security: rob nation's (obsolete) graphics mode queries
    no longer reply with linefeed in secure/default mode.
  - ISO 8613-3 direct colour SGR sequences (patch by Fengguang Wu).
  - xterm focus reporting mode (patch by Daniel Hahler).
  - xterm SGR mouse mode.
  - implement DECRQM. Patch by P?emysl Eric Janouch.
  - add missing color index parameter to OSC 4 response. Patch
  by P?emysl Eric Janouch.
  - in some window managers, if smart resize was enabled, urxvt
  erroneously moved the window on font change - awesome bug
  [#532], arch linux bug ##34807 (patch by Uli Schlachter).
  - fix urxvtd crash when using a background expression.
  - properly restore colors when using fading and reverse video
  is enabled while urxvt is focused and then disabled while it
  is not focused, or vice versa (patch by Daniel Hahler).
  - fix high memory usage when an extension repeatedly hides and
  shows an overlay (reported by Marcel Lautenbach).
  - expose priv_modes member and constants to perl extensions
    (patch by Rastislav Barlik).
  - fix a whole slew of const sillyness, unfortunately forced upon
    us by ISO C++.
  - update to libecb 0x00010006.
  - disable all thread support in ecb.h as we presumably don't need it.
  - slightly improve Makefile source dependencies.
  - work around bugs in newer Pod::Xhtml versions (flags incorrect formatting codes
    in xhtml/html sections but does not interpret correct ones).
- New file: /usr/bin/urclock
- Add BuildRequires: pkgconfig(xt)
- Remove rxvt-unicode-9.22-perl_environ_segfault.patch (accepted upstream)
- Refresh patches:
  - rxvt-unicode-hardening.patch,
  - rxvt-unicode-9.21-xsubpp.patch
  - rxvt-unicode-9.20-CVE-2008-1142-DISPLAY.patch</changelog>
  <changelog author="Petr Vorel &lt;pvorel@suse.cz&gt;" date="1621944000">- Backport patch from upstream: perl-avoiding-recursive-loading.patch</changelog>
</package>
<package pkgid="63a0e629d24aa72c6ff812d9633e7c24ce1bb5751afb7901d180f9c3de11fb85" name="rxvt-unicode" arch="ppc64le">
  <version epoch="0" ver="9.26" rel="bp154.2.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1414929600">- Switch to individual pkgconfig() build requires
  instead of using metapackage xorg-x11-devel</changelog>
  <changelog author="mrueckert@suse.de" date="1434369600">- sync categories in desktop files with xterm</changelog>
  <changelog author="mimi.vx@gmail.com" date="1434628800">- update to 9.21
  - fix pixel droppings on overdraw when a secondary core font has the
    same height but different ascent.
  - implement cvvis in terminfo as blinking cursor, to distinguish it
    from cnorm (emacs uses cvvis which is commonly a blinking cursor).
  - when xft support was compiled in, colour queries erroneously returned
    premultiplied values, this also affected internal queries, for example
    when calculating faded colour. alpha is now divided out when possible,
    which is more correct but loses colour resolution.
  - add DECSCUSR xterm extension to set the cursor to a vertical bar.
  - add 'extension:string' action, and associated on_action perl
    hook, for keysym resources that invokes actions provided by
    perl extensions. The 'perl:string' action and
    on_user_command hook are deprecated but still supported.
  - add 'builtin-string' action for keysym resources that restores string
    mappings for keys that have predefined actions in urxvt.
  - add -k option to urxvtc for killing the daemon process.
  - document urxvtd's -e/--eval option that was implemented in 9.16,
    but not documented.
  - add -dockapp option to make the wm treat urxvt as a dockapp.
  - add -mc option and multiClickTime resource to set the maximum time
    between multi-click select events (patch by Joe Peterson).
  - new 'eval' extension to evaluate arbitrary perl code with keysym
    bindings. The extension also provides methods that implement basic
    actions, such as pasting selections and scrolling.
  - the macosx-clipboard and macosx-clipboard-native extensions have been removed.
  - kuake extension now uses the kuake.hotkey resource to specify the hotkey.
  - new 'matcher:select' mode of matcher to iterate over the matches with the keyboard.
  - the 'matcher:list' feature of matcher now honours the launcher
    associated to a matched pattern.
  - speed-up matcher underlining on very long lines (reported by Edward Z. Yang).
  - fix up/down commands of searchable-scrollback so that they always move
    to the previous/next logical line with a match, if any.
  - searchable-scrollback resource has been deprecated (use keysym instead).
  - extension parameter passing is deprecated (use resource mechanism instead).
  - upgrade to GPLv3 (see COPYING).
  - compile out of the box on Solaris 10, again.
  - fix height and position of the stippled area in next scrollbar (patch
    by Thomas Otto).
  - fix off-by-one bug causing the iso14755 window not to jump out of the
    way properly.
  - fix crash that may happen if a lib to which urxvt is linked to calls setenv.
  - fix memory leak in special_{encode,decode} perl methods.
  - fix refresh bug that occurs when reverse video is set on a cell
    containing a space and with the same bg and fg colour, red hat bug
    [#830236].
  - fix crash that may happen if an x error is received after a terminal
    window/popup has been destroyed already.
  - removed superfluous 0 digit from sgr terminfo sequence.
  - greatly improve colour allocation on colour-starved pseudocolour
    displays to avoid read-write cells instead of simply failing
    (this is only relevant for antique 8bpp frame buffers).
  - do not free fade colours when not doing fading (this is likely
    only relevant for antique 8bpp frame buffers).
  - do not specialcase 2 or 4 colour visuals, leading to
    simpler and actually more correct code.
  - hopefully no longer leak colours on !truecolour visuals.
  - use consistent method names (scr_recolour =&gt; scr_recolor).
  - use simpler (but slightly less bogus) formula for nearest
    colour choice (this is likely only relevant for antique 8bpp
    frame buffers).
  - remove fallback behaviour when initialising colours - the
    behaviour was inconsistent between startup vs. later and
    was only effective when valid colours couldn't be allocated.
  * add rxvt-unicode-9.21-xsubpp.patch to correct wrong harcoded patch in makefile
  * add rxvt-unicode-0001-Prefer-XDG_RUNTIME_DIR-over-the-HOME.patch
  * removed unused rxvt-unicode-remove_unused_attribute.patch</changelog>
  <changelog author="meissner@suse.com" date="1435060800">- %clean section removed, moved makeinstall to %install</changelog>
  <changelog author="mimi.vx@gmail.com" date="1435060801">- remove %{_terminfo}/r/rxvt-unicode</changelog>
  <changelog author="meissner@suse.com" date="1435147200">- install COPYING</changelog>
  <changelog author="mrueckert@suse.de" date="1437134400">- move requires for the terminfo files from terminfo to
  terminfo-base (boo #936332)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1478520000">- update to 9.22
  - NOTICE: this release updates terminfo.
  - add terminfo capabilities for various ctrl and shift-ctrl key variants
  - fix longstanding core font encoding bug where some character
    ranges could not be mapped from unicode to the font: affected
    encodings are big5, gb2312, iso8859-8 (hebrew), jis0201 and
    ksc5601 .
  - fix crash when the number of columns is 1 and a 0 width character is inserted
  - fix a crash when parsing an invalid color specification
  - fix a buffer overflow in font name parser
  - do not start blinking cursor if the window is unfocused
  - change the width of underline and i-beam cursor to 2 pixels (based on
  a patch by Omar Sandoval).
  - add pointerShape resource to change the mouse pointer shape
  - a keysym resource for a key which is already bound to an
  action now properly rebinds the key.
  - do not report mouse motion events if Shift is active
  - put the alpha component last in responses to OSC color queries
  - the key_press hook is now invoked before processing the
  event, as documented. This change was done in 9.21 but not
  announced and fixes debian bugs #511377, #531751 and red hat
  bug #1105069. Note that this change breaks a few scripts,
  such as mark-yank-urls, which rely on the previous buggy
  behaviour that urxvt processes the event (in particular
  keysym bindings) before invoking the hook.
  - the tabbed extension now properly refreshes the active tab
  on a key press when the mouse pointer is outside the terminal
  window.
  - add 'lookup_keysym' perl method to lookup the action bound
  to a key combination.
  - a key combination bound to 'matcher:select' can now be used
  to cycle through the matches in matcher.
  - change perl integer accessors (-&gt;width et al.) into mutators.</changelog>
  <changelog author="mrueckert@suse.de" date="1496232000">- added rxvt-unicode-hardening.patch: (boo# 1036456)
  While urxvt is not directly affected by CVE-2017-7483. We add a
  patch to harden urxvt to avoid similar bugs in the future.</changelog>
  <changelog author="glin@suse.com" date="1522843200">- added rxvt-unicode-secondarywheel.patch from to add the new
  option: secondaryWheel to enable mouse scrolling for the pagers,
  e.g. less, man, vim, etc.</changelog>
  <changelog author="Marcus H&#xFC;we &lt;suse-tux@gmx.de&gt;" date="1606392000">- add rxvt-unicode-9.22-perl_environ_segfault.patch to avoid a
  segfault when closing urxvt</changelog>
  <changelog author="Avindra Goolcharan &lt;avindra@opensuse.org&gt;" date="1610452800">- fix build error (pass -D to "install")
- fix one  W: rpm-buildroot-usage
- ran spec-cleaner and tidy
- format rxvt-unicode-9.20-CVE-2008-1142-DISPLAY.patch for autosetup
- format rxvt-unicode-9.22-perl_environ_segfault.patch for autosetup</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1612872000">- restore the -256color binaries</changelog>
  <changelog author="Petr Vorel &lt;pvorel@suse.cz&gt;" date="1621252800">- Update to 9.26
  - ev_iouring.c was wrongly required during compilation, and wrongly
    not packaged.
- Update to 9.25 (boo#1186174 CVE-2021-33477)
  - for the 17.5th anniversary, and because many distributions seem to
    remove rxvt in favour of urxvt, this release resurrects rclock as
    urclock.
  - add support for systemd socket-based activation - debian bug #917105,
  freebsd bug #234276.
  - do not destruct perl on exit anymore: this might fail for a variety of
    reasons, and takes unneccessary time.
  - remove any macros from urxvtperl manpage(s), should fix debian
    bug 858385.
  - the old bg image resources are now provided by the background
  extension, and perl is thus required for bg image support. No
  configuration change is needed: urxvt autoloads the background
  ext if any bg image resource/option is present (for OSC sequences to
    work you need to enable it explicity). The old bg image
  resources are also now deprecated; users are encouraged to
  switch to the new bg image interface (see man urxvt-background).
  - confirm-paste now checks for any ctlchars, not just newlines.
  - searchable scrollback will now ignore bracketed paste mode sequences
    (prompted by Daniel Gröber's patch).
  - drop ISO 2022 locale support. ISO 2022 encodings are not supported in
    POSIX locales and clash with vt100 charset emulation (the luit
    program can be used as a substitute).
  - perl didn't parse rgba colours specified as an array correctly,
    only allowing 0 and 100% intensity for each component (this affected
    fill and tint).
  - when iterating over resources, urxvt will now try to properly handle
    multipart resources (such as "*background.expr"), for the benefit
    of autoloading perl extensions.
  - ESC G (query rxvt graphics mode) has been disabled due to security
    implications. The rxvt graphics mode was removed in rxvt-unicode 1.5,
    and no programs relying on being able to query the mode are known.
  - work around API change breakage in perl 5.28, based on a patch by
    Roman Bogorodskiy.
  - improved security: rob nation's (obsolete) graphics mode queries
    no longer reply with linefeed in secure/default mode.
  - ISO 8613-3 direct colour SGR sequences (patch by Fengguang Wu).
  - xterm focus reporting mode (patch by Daniel Hahler).
  - xterm SGR mouse mode.
  - implement DECRQM. Patch by P?emysl Eric Janouch.
  - add missing color index parameter to OSC 4 response. Patch
  by P?emysl Eric Janouch.
  - in some window managers, if smart resize was enabled, urxvt
  erroneously moved the window on font change - awesome bug
  [#532], arch linux bug ##34807 (patch by Uli Schlachter).
  - fix urxvtd crash when using a background expression.
  - properly restore colors when using fading and reverse video
  is enabled while urxvt is focused and then disabled while it
  is not focused, or vice versa (patch by Daniel Hahler).
  - fix high memory usage when an extension repeatedly hides and
  shows an overlay (reported by Marcel Lautenbach).
  - expose priv_modes member and constants to perl extensions
    (patch by Rastislav Barlik).
  - fix a whole slew of const sillyness, unfortunately forced upon
    us by ISO C++.
  - update to libecb 0x00010006.
  - disable all thread support in ecb.h as we presumably don't need it.
  - slightly improve Makefile source dependencies.
  - work around bugs in newer Pod::Xhtml versions (flags incorrect formatting codes
    in xhtml/html sections but does not interpret correct ones).
- New file: /usr/bin/urclock
- Add BuildRequires: pkgconfig(xt)
- Remove rxvt-unicode-9.22-perl_environ_segfault.patch (accepted upstream)
- Refresh patches:
  - rxvt-unicode-hardening.patch,
  - rxvt-unicode-9.21-xsubpp.patch
  - rxvt-unicode-9.20-CVE-2008-1142-DISPLAY.patch</changelog>
  <changelog author="Petr Vorel &lt;pvorel@suse.cz&gt;" date="1621944000">- Backport patch from upstream: perl-avoiding-recursive-loading.patch</changelog>
</package>
<package pkgid="e35fad5aa574fdf8f0ed2634e16b258326a32333674ece758bf68974cd1fde72" name="rxvt-unicode" arch="s390x">
  <version epoch="0" ver="9.26" rel="bp154.2.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1414929600">- Switch to individual pkgconfig() build requires
  instead of using metapackage xorg-x11-devel</changelog>
  <changelog author="mrueckert@suse.de" date="1434369600">- sync categories in desktop files with xterm</changelog>
  <changelog author="mimi.vx@gmail.com" date="1434628800">- update to 9.21
  - fix pixel droppings on overdraw when a secondary core font has the
    same height but different ascent.
  - implement cvvis in terminfo as blinking cursor, to distinguish it
    from cnorm (emacs uses cvvis which is commonly a blinking cursor).
  - when xft support was compiled in, colour queries erroneously returned
    premultiplied values, this also affected internal queries, for example
    when calculating faded colour. alpha is now divided out when possible,
    which is more correct but loses colour resolution.
  - add DECSCUSR xterm extension to set the cursor to a vertical bar.
  - add 'extension:string' action, and associated on_action perl
    hook, for keysym resources that invokes actions provided by
    perl extensions. The 'perl:string' action and
    on_user_command hook are deprecated but still supported.
  - add 'builtin-string' action for keysym resources that restores string
    mappings for keys that have predefined actions in urxvt.
  - add -k option to urxvtc for killing the daemon process.
  - document urxvtd's -e/--eval option that was implemented in 9.16,
    but not documented.
  - add -dockapp option to make the wm treat urxvt as a dockapp.
  - add -mc option and multiClickTime resource to set the maximum time
    between multi-click select events (patch by Joe Peterson).
  - new 'eval' extension to evaluate arbitrary perl code with keysym
    bindings. The extension also provides methods that implement basic
    actions, such as pasting selections and scrolling.
  - the macosx-clipboard and macosx-clipboard-native extensions have been removed.
  - kuake extension now uses the kuake.hotkey resource to specify the hotkey.
  - new 'matcher:select' mode of matcher to iterate over the matches with the keyboard.
  - the 'matcher:list' feature of matcher now honours the launcher
    associated to a matched pattern.
  - speed-up matcher underlining on very long lines (reported by Edward Z. Yang).
  - fix up/down commands of searchable-scrollback so that they always move
    to the previous/next logical line with a match, if any.
  - searchable-scrollback resource has been deprecated (use keysym instead).
  - extension parameter passing is deprecated (use resource mechanism instead).
  - upgrade to GPLv3 (see COPYING).
  - compile out of the box on Solaris 10, again.
  - fix height and position of the stippled area in next scrollbar (patch
    by Thomas Otto).
  - fix off-by-one bug causing the iso14755 window not to jump out of the
    way properly.
  - fix crash that may happen if a lib to which urxvt is linked to calls setenv.
  - fix memory leak in special_{encode,decode} perl methods.
  - fix refresh bug that occurs when reverse video is set on a cell
    containing a space and with the same bg and fg colour, red hat bug
    [#830236].
  - fix crash that may happen if an x error is received after a terminal
    window/popup has been destroyed already.
  - removed superfluous 0 digit from sgr terminfo sequence.
  - greatly improve colour allocation on colour-starved pseudocolour
    displays to avoid read-write cells instead of simply failing
    (this is only relevant for antique 8bpp frame buffers).
  - do not free fade colours when not doing fading (this is likely
    only relevant for antique 8bpp frame buffers).
  - do not specialcase 2 or 4 colour visuals, leading to
    simpler and actually more correct code.
  - hopefully no longer leak colours on !truecolour visuals.
  - use consistent method names (scr_recolour =&gt; scr_recolor).
  - use simpler (but slightly less bogus) formula for nearest
    colour choice (this is likely only relevant for antique 8bpp
    frame buffers).
  - remove fallback behaviour when initialising colours - the
    behaviour was inconsistent between startup vs. later and
    was only effective when valid colours couldn't be allocated.
  * add rxvt-unicode-9.21-xsubpp.patch to correct wrong harcoded patch in makefile
  * add rxvt-unicode-0001-Prefer-XDG_RUNTIME_DIR-over-the-HOME.patch
  * removed unused rxvt-unicode-remove_unused_attribute.patch</changelog>
  <changelog author="meissner@suse.com" date="1435060800">- %clean section removed, moved makeinstall to %install</changelog>
  <changelog author="mimi.vx@gmail.com" date="1435060801">- remove %{_terminfo}/r/rxvt-unicode</changelog>
  <changelog author="meissner@suse.com" date="1435147200">- install COPYING</changelog>
  <changelog author="mrueckert@suse.de" date="1437134400">- move requires for the terminfo files from terminfo to
  terminfo-base (boo #936332)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1478520000">- update to 9.22
  - NOTICE: this release updates terminfo.
  - add terminfo capabilities for various ctrl and shift-ctrl key variants
  - fix longstanding core font encoding bug where some character
    ranges could not be mapped from unicode to the font: affected
    encodings are big5, gb2312, iso8859-8 (hebrew), jis0201 and
    ksc5601 .
  - fix crash when the number of columns is 1 and a 0 width character is inserted
  - fix a crash when parsing an invalid color specification
  - fix a buffer overflow in font name parser
  - do not start blinking cursor if the window is unfocused
  - change the width of underline and i-beam cursor to 2 pixels (based on
  a patch by Omar Sandoval).
  - add pointerShape resource to change the mouse pointer shape
  - a keysym resource for a key which is already bound to an
  action now properly rebinds the key.
  - do not report mouse motion events if Shift is active
  - put the alpha component last in responses to OSC color queries
  - the key_press hook is now invoked before processing the
  event, as documented. This change was done in 9.21 but not
  announced and fixes debian bugs #511377, #531751 and red hat
  bug #1105069. Note that this change breaks a few scripts,
  such as mark-yank-urls, which rely on the previous buggy
  behaviour that urxvt processes the event (in particular
  keysym bindings) before invoking the hook.
  - the tabbed extension now properly refreshes the active tab
  on a key press when the mouse pointer is outside the terminal
  window.
  - add 'lookup_keysym' perl method to lookup the action bound
  to a key combination.
  - a key combination bound to 'matcher:select' can now be used
  to cycle through the matches in matcher.
  - change perl integer accessors (-&gt;width et al.) into mutators.</changelog>
  <changelog author="mrueckert@suse.de" date="1496232000">- added rxvt-unicode-hardening.patch: (boo# 1036456)
  While urxvt is not directly affected by CVE-2017-7483. We add a
  patch to harden urxvt to avoid similar bugs in the future.</changelog>
  <changelog author="glin@suse.com" date="1522843200">- added rxvt-unicode-secondarywheel.patch from to add the new
  option: secondaryWheel to enable mouse scrolling for the pagers,
  e.g. less, man, vim, etc.</changelog>
  <changelog author="Marcus H&#xFC;we &lt;suse-tux@gmx.de&gt;" date="1606392000">- add rxvt-unicode-9.22-perl_environ_segfault.patch to avoid a
  segfault when closing urxvt</changelog>
  <changelog author="Avindra Goolcharan &lt;avindra@opensuse.org&gt;" date="1610452800">- fix build error (pass -D to "install")
- fix one  W: rpm-buildroot-usage
- ran spec-cleaner and tidy
- format rxvt-unicode-9.20-CVE-2008-1142-DISPLAY.patch for autosetup
- format rxvt-unicode-9.22-perl_environ_segfault.patch for autosetup</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1612872000">- restore the -256color binaries</changelog>
  <changelog author="Petr Vorel &lt;pvorel@suse.cz&gt;" date="1621252800">- Update to 9.26
  - ev_iouring.c was wrongly required during compilation, and wrongly
    not packaged.
- Update to 9.25 (boo#1186174 CVE-2021-33477)
  - for the 17.5th anniversary, and because many distributions seem to
    remove rxvt in favour of urxvt, this release resurrects rclock as
    urclock.
  - add support for systemd socket-based activation - debian bug #917105,
  freebsd bug #234276.
  - do not destruct perl on exit anymore: this might fail for a variety of
    reasons, and takes unneccessary time.
  - remove any macros from urxvtperl manpage(s), should fix debian
    bug 858385.
  - the old bg image resources are now provided by the background
  extension, and perl is thus required for bg image support. No
  configuration change is needed: urxvt autoloads the background
  ext if any bg image resource/option is present (for OSC sequences to
    work you need to enable it explicity). The old bg image
  resources are also now deprecated; users are encouraged to
  switch to the new bg image interface (see man urxvt-background).
  - confirm-paste now checks for any ctlchars, not just newlines.
  - searchable scrollback will now ignore bracketed paste mode sequences
    (prompted by Daniel Gröber's patch).
  - drop ISO 2022 locale support. ISO 2022 encodings are not supported in
    POSIX locales and clash with vt100 charset emulation (the luit
    program can be used as a substitute).
  - perl didn't parse rgba colours specified as an array correctly,
    only allowing 0 and 100% intensity for each component (this affected
    fill and tint).
  - when iterating over resources, urxvt will now try to properly handle
    multipart resources (such as "*background.expr"), for the benefit
    of autoloading perl extensions.
  - ESC G (query rxvt graphics mode) has been disabled due to security
    implications. The rxvt graphics mode was removed in rxvt-unicode 1.5,
    and no programs relying on being able to query the mode are known.
  - work around API change breakage in perl 5.28, based on a patch by
    Roman Bogorodskiy.
  - improved security: rob nation's (obsolete) graphics mode queries
    no longer reply with linefeed in secure/default mode.
  - ISO 8613-3 direct colour SGR sequences (patch by Fengguang Wu).
  - xterm focus reporting mode (patch by Daniel Hahler).
  - xterm SGR mouse mode.
  - implement DECRQM. Patch by P?emysl Eric Janouch.
  - add missing color index parameter to OSC 4 response. Patch
  by P?emysl Eric Janouch.
  - in some window managers, if smart resize was enabled, urxvt
  erroneously moved the window on font change - awesome bug
  [#532], arch linux bug ##34807 (patch by Uli Schlachter).
  - fix urxvtd crash when using a background expression.
  - properly restore colors when using fading and reverse video
  is enabled while urxvt is focused and then disabled while it
  is not focused, or vice versa (patch by Daniel Hahler).
  - fix high memory usage when an extension repeatedly hides and
  shows an overlay (reported by Marcel Lautenbach).
  - expose priv_modes member and constants to perl extensions
    (patch by Rastislav Barlik).
  - fix a whole slew of const sillyness, unfortunately forced upon
    us by ISO C++.
  - update to libecb 0x00010006.
  - disable all thread support in ecb.h as we presumably don't need it.
  - slightly improve Makefile source dependencies.
  - work around bugs in newer Pod::Xhtml versions (flags incorrect formatting codes
    in xhtml/html sections but does not interpret correct ones).
- New file: /usr/bin/urclock
- Add BuildRequires: pkgconfig(xt)
- Remove rxvt-unicode-9.22-perl_environ_segfault.patch (accepted upstream)
- Refresh patches:
  - rxvt-unicode-hardening.patch,
  - rxvt-unicode-9.21-xsubpp.patch
  - rxvt-unicode-9.20-CVE-2008-1142-DISPLAY.patch</changelog>
  <changelog author="Petr Vorel &lt;pvorel@suse.cz&gt;" date="1621944000">- Backport patch from upstream: perl-avoiding-recursive-loading.patch</changelog>
</package>
<package pkgid="db1a9b3eabf90edf0ad3534844d2b8c979e76623c4f3c351525a605606f755db" name="rxvt-unicode" arch="src">
  <version epoch="0" ver="9.26" rel="bp154.2.3.1"/>
  <changelog author="pascal.bleser@opensuse.org" date="1327233600">- enable support for libstartup-notification
- update to 9.15:
  * finding a matching font (e.g. bold version of the base font) was broken
  * fix parsing of bg image styles: they really work now
  * fix blurring of bg image borders when using xrender
  * fix xrender blur on common xrender implementations that do not behave
    correctly when the same pixmap is used as source and destination in
    composite operations
  * fix regression that caused tabbed to compute the wrong size for tabs
  * allow again an empty suffix in a keysym list spec</changelog>
  <changelog author="dhall@wustl.edu" date="1386331200">- update to 9.19
  * work around perl 5.18.0 breakage in tabbed extension
    (reported by Karol Blazewicz) and in pod (Dominic Hargreaves).
  * fix regression that caused the double-click word selection to
  * erroneously include a tab on the left of the selected word.
  * implement FOCUS variable and focus_fade function in background
    expression, to allow focus-sensitive background images.
  * add support for the set cursor style (DECSCUSR) control
    function.
  * honour cursorColor also when the cursor style is underline.
  * export some Color_xxx constants to Perl.
  - 9.18
  * fix regression that caused artifacts on resize.
  - 9.17
  * add shade operator in background perl extension.
  * avoid starting or ending the selection in the middle of wide
    characters to avoid artifacts (reported by Tiago Resende).
  * fix artifacts that may occur if the character in the cursor
    cell has width &gt; 1 (reported by Tiago Resende).
  * fix regression that causes artifacts on scrolling if
    saveLines is 0 and the window is resized (reported by Bert
    Münnich).
  * fix build when perl is enabled and pixbuf and transparency
    are disabled.
  - 9.16
  * the "so much new stuff your eyes will pop out" release.
  * INCOMPATIBLE CHANGE: renamed urlLauncher resource to url-launcher.
  * fix processing of DEC private mode save sequences (patch by Patrick
    Hemmer).
  * perl extensions now have their own manpages, installed as urxvt-NAME(1),
    e.g. urxvt-background(1) - see urxvt-extensions(1) for a list.
  * fix disabling of cursor blink with the option-popup menu (based on a
    patch by Jan Larres).
  * the font height is not augmented anymore when lineSpace is non zero.
  * fix "new pagemap" vs. "delete pagemap" mismatch ([] vs. non-[]),
    as diagnosed by clang.
  * fix height mismatch between active and inactive cursor when
    lineSpace is non zero (patch by Stanislav Seletskiy).
  * make it compile with LOCAL_X_IS_UNIX again (reported by
    nickfailure@gmail.com).
  * completely redone background pixmap support - users can now
    specify arbitrary expressions (And programs) that calculate
    new terminal backgrounds. see the urxvt-background manpage
    for details.
  * xrender is now required for background pixmap support.
  * perl extensions can now provide commandline switches and resources
    which show up in -help etc.
  * iso14755 51 mode window now displays row and column.
  * implement a -visual switch and move that and -depth to frills, also
    warn when we can't get the requested visual.
  * new env variable: RXVT_PERL_LIB.
  * allocate all screen memory in one go and let the virtual memory
    subsystem sort it out. this simplifies code, improves access
    locality, saves a bit of ram and makes things a bit faster, too.
  * remove support for libafterimage.
  * update to CVS version of libev, for a whopping 11kb size decrease.
  * do not ship yet another copy of ecb.h, use the one in libev or
    libptytty instead.
  * selectively mark some methods as cache-hot/cache cold, which
    might speed up execution but definitely decreases codesize.
  * Fix regression that prevented the scrollbar trough color
    from being applied (reported by Derek B. Noonburg).
  * Fix the scrollbar size for rxvt style (patch by Mark Robinson).</changelog>
  <changelog author="dhall@wustl.edu" date="1386331201">- added background perl module to files packaged</changelog>
  <changelog author="dhall@wustl.edu" date="1386331202">- Add rxvt-return-in-nonvoid-function.patch: removes build failure
  from not returning from nonvoid function
- rename README.SuSE to README.SUSE for rpmlint</changelog>
  <changelog author="mrueckert@suse.de" date="1402401600">- update to 9.20 (bnc#876101 CVE-2014-3121)
  - (libptytty) fix bug that prevented urxvtd from writing utmp
    entries when using --fork (reported by Ryan Kavanagh).
  - security bugfix: window property values could be queried even
    in secure mode (reported by Phillip Hallam-Baker).
  - fix build when perl is enabled and fading is disabled.
  - fix regression that broke continuous scrolling when pressing
    and holding the scrollbar up or down button, gentoo bug
    [#493992].
  - increase the maximum length of a command sequence to 32k bytes,
    to allow longer OSC sequences (previous limit was 2k).
  - new Ctrl-Meta-c and Ctrl-Meta-v bindings to interact with the
    CLIPBOARD selection.
  - new extension: selection-to-clipboard.
  - the extensions macosx-clipboard and macosx-clipboard-native are
    deprecated and will be removed in the next release.  Support
    for the clipboard on OS X can be more generally enabled by
    setting the XQuartz preference to sync the OS X pasteboard
    and the X11 clipboard.
- dropped rxvt-return-in-nonvoid-function.patch included upstream
- refreshed patches:
  old name: rxvt-unicode-9.14-CVE-2008-1142-DISPLAY.patch
  new name: rxvt-unicode-9.20-CVE-2008-1142-DISPLAY.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1414929600">- Switch to individual pkgconfig() build requires
  instead of using metapackage xorg-x11-devel</changelog>
  <changelog author="mrueckert@suse.de" date="1434369600">- sync categories in desktop files with xterm</changelog>
  <changelog author="mimi.vx@gmail.com" date="1434628800">- update to 9.21
  - fix pixel droppings on overdraw when a secondary core font has the
    same height but different ascent.
  - implement cvvis in terminfo as blinking cursor, to distinguish it
    from cnorm (emacs uses cvvis which is commonly a blinking cursor).
  - when xft support was compiled in, colour queries erroneously returned
    premultiplied values, this also affected internal queries, for example
    when calculating faded colour. alpha is now divided out when possible,
    which is more correct but loses colour resolution.
  - add DECSCUSR xterm extension to set the cursor to a vertical bar.
  - add 'extension:string' action, and associated on_action perl
    hook, for keysym resources that invokes actions provided by
    perl extensions. The 'perl:string' action and
    on_user_command hook are deprecated but still supported.
  - add 'builtin-string' action for keysym resources that restores string
    mappings for keys that have predefined actions in urxvt.
  - add -k option to urxvtc for killing the daemon process.
  - document urxvtd's -e/--eval option that was implemented in 9.16,
    but not documented.
  - add -dockapp option to make the wm treat urxvt as a dockapp.
  - add -mc option and multiClickTime resource to set the maximum time
    between multi-click select events (patch by Joe Peterson).
  - new 'eval' extension to evaluate arbitrary perl code with keysym
    bindings. The extension also provides methods that implement basic
    actions, such as pasting selections and scrolling.
  - the macosx-clipboard and macosx-clipboard-native extensions have been removed.
  - kuake extension now uses the kuake.hotkey resource to specify the hotkey.
  - new 'matcher:select' mode of matcher to iterate over the matches with the keyboard.
  - the 'matcher:list' feature of matcher now honours the launcher
    associated to a matched pattern.
  - speed-up matcher underlining on very long lines (reported by Edward Z. Yang).
  - fix up/down commands of searchable-scrollback so that they always move
    to the previous/next logical line with a match, if any.
  - searchable-scrollback resource has been deprecated (use keysym instead).
  - extension parameter passing is deprecated (use resource mechanism instead).
  - upgrade to GPLv3 (see COPYING).
  - compile out of the box on Solaris 10, again.
  - fix height and position of the stippled area in next scrollbar (patch
    by Thomas Otto).
  - fix off-by-one bug causing the iso14755 window not to jump out of the
    way properly.
  - fix crash that may happen if a lib to which urxvt is linked to calls setenv.
  - fix memory leak in special_{encode,decode} perl methods.
  - fix refresh bug that occurs when reverse video is set on a cell
    containing a space and with the same bg and fg colour, red hat bug
    [#830236].
  - fix crash that may happen if an x error is received after a terminal
    window/popup has been destroyed already.
  - removed superfluous 0 digit from sgr terminfo sequence.
  - greatly improve colour allocation on colour-starved pseudocolour
    displays to avoid read-write cells instead of simply failing
    (this is only relevant for antique 8bpp frame buffers).
  - do not free fade colours when not doing fading (this is likely
    only relevant for antique 8bpp frame buffers).
  - do not specialcase 2 or 4 colour visuals, leading to
    simpler and actually more correct code.
  - hopefully no longer leak colours on !truecolour visuals.
  - use consistent method names (scr_recolour =&gt; scr_recolor).
  - use simpler (but slightly less bogus) formula for nearest
    colour choice (this is likely only relevant for antique 8bpp
    frame buffers).
  - remove fallback behaviour when initialising colours - the
    behaviour was inconsistent between startup vs. later and
    was only effective when valid colours couldn't be allocated.
  * add rxvt-unicode-9.21-xsubpp.patch to correct wrong harcoded patch in makefile
  * add rxvt-unicode-0001-Prefer-XDG_RUNTIME_DIR-over-the-HOME.patch
  * removed unused rxvt-unicode-remove_unused_attribute.patch</changelog>
  <changelog author="meissner@suse.com" date="1435060800">- %clean section removed, moved makeinstall to %install</changelog>
  <changelog author="mimi.vx@gmail.com" date="1435060801">- remove %{_terminfo}/r/rxvt-unicode</changelog>
  <changelog author="meissner@suse.com" date="1435147200">- install COPYING</changelog>
  <changelog author="mrueckert@suse.de" date="1437134400">- move requires for the terminfo files from terminfo to
  terminfo-base (boo #936332)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1478520000">- update to 9.22
  - NOTICE: this release updates terminfo.
  - add terminfo capabilities for various ctrl and shift-ctrl key variants
  - fix longstanding core font encoding bug where some character
    ranges could not be mapped from unicode to the font: affected
    encodings are big5, gb2312, iso8859-8 (hebrew), jis0201 and
    ksc5601 .
  - fix crash when the number of columns is 1 and a 0 width character is inserted
  - fix a crash when parsing an invalid color specification
  - fix a buffer overflow in font name parser
  - do not start blinking cursor if the window is unfocused
  - change the width of underline and i-beam cursor to 2 pixels (based on
  a patch by Omar Sandoval).
  - add pointerShape resource to change the mouse pointer shape
  - a keysym resource for a key which is already bound to an
  action now properly rebinds the key.
  - do not report mouse motion events if Shift is active
  - put the alpha component last in responses to OSC color queries
  - the key_press hook is now invoked before processing the
  event, as documented. This change was done in 9.21 but not
  announced and fixes debian bugs #511377, #531751 and red hat
  bug #1105069. Note that this change breaks a few scripts,
  such as mark-yank-urls, which rely on the previous buggy
  behaviour that urxvt processes the event (in particular
  keysym bindings) before invoking the hook.
  - the tabbed extension now properly refreshes the active tab
  on a key press when the mouse pointer is outside the terminal
  window.
  - add 'lookup_keysym' perl method to lookup the action bound
  to a key combination.
  - a key combination bound to 'matcher:select' can now be used
  to cycle through the matches in matcher.
  - change perl integer accessors (-&gt;width et al.) into mutators.</changelog>
  <changelog author="mrueckert@suse.de" date="1496232000">- added rxvt-unicode-hardening.patch: (boo# 1036456)
  While urxvt is not directly affected by CVE-2017-7483. We add a
  patch to harden urxvt to avoid similar bugs in the future.</changelog>
  <changelog author="glin@suse.com" date="1522843200">- added rxvt-unicode-secondarywheel.patch from to add the new
  option: secondaryWheel to enable mouse scrolling for the pagers,
  e.g. less, man, vim, etc.</changelog>
  <changelog author="Marcus H&#xFC;we &lt;suse-tux@gmx.de&gt;" date="1606392000">- add rxvt-unicode-9.22-perl_environ_segfault.patch to avoid a
  segfault when closing urxvt</changelog>
  <changelog author="Avindra Goolcharan &lt;avindra@opensuse.org&gt;" date="1610452800">- fix build error (pass -D to "install")
- fix one  W: rpm-buildroot-usage
- ran spec-cleaner and tidy
- format rxvt-unicode-9.20-CVE-2008-1142-DISPLAY.patch for autosetup
- format rxvt-unicode-9.22-perl_environ_segfault.patch for autosetup</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1612872000">- restore the -256color binaries</changelog>
  <changelog author="Petr Vorel &lt;pvorel@suse.cz&gt;" date="1621252800">- Update to 9.26
  - ev_iouring.c was wrongly required during compilation, and wrongly
    not packaged.
- Update to 9.25 (boo#1186174 CVE-2021-33477)
  - for the 17.5th anniversary, and because many distributions seem to
    remove rxvt in favour of urxvt, this release resurrects rclock as
    urclock.
  - add support for systemd socket-based activation - debian bug #917105,
  freebsd bug #234276.
  - do not destruct perl on exit anymore: this might fail for a variety of
    reasons, and takes unneccessary time.
  - remove any macros from urxvtperl manpage(s), should fix debian
    bug 858385.
  - the old bg image resources are now provided by the background
  extension, and perl is thus required for bg image support. No
  configuration change is needed: urxvt autoloads the background
  ext if any bg image resource/option is present (for OSC sequences to
    work you need to enable it explicity). The old bg image
  resources are also now deprecated; users are encouraged to
  switch to the new bg image interface (see man urxvt-background).
  - confirm-paste now checks for any ctlchars, not just newlines.
  - searchable scrollback will now ignore bracketed paste mode sequences
    (prompted by Daniel Gröber's patch).
  - drop ISO 2022 locale support. ISO 2022 encodings are not supported in
    POSIX locales and clash with vt100 charset emulation (the luit
    program can be used as a substitute).
  - perl didn't parse rgba colours specified as an array correctly,
    only allowing 0 and 100% intensity for each component (this affected
    fill and tint).
  - when iterating over resources, urxvt will now try to properly handle
    multipart resources (such as "*background.expr"), for the benefit
    of autoloading perl extensions.
  - ESC G (query rxvt graphics mode) has been disabled due to security
    implications. The rxvt graphics mode was removed in rxvt-unicode 1.5,
    and no programs relying on being able to query the mode are known.
  - work around API change breakage in perl 5.28, based on a patch by
    Roman Bogorodskiy.
  - improved security: rob nation's (obsolete) graphics mode queries
    no longer reply with linefeed in secure/default mode.
  - ISO 8613-3 direct colour SGR sequences (patch by Fengguang Wu).
  - xterm focus reporting mode (patch by Daniel Hahler).
  - xterm SGR mouse mode.
  - implement DECRQM. Patch by P?emysl Eric Janouch.
  - add missing color index parameter to OSC 4 response. Patch
  by P?emysl Eric Janouch.
  - in some window managers, if smart resize was enabled, urxvt
  erroneously moved the window on font change - awesome bug
  [#532], arch linux bug ##34807 (patch by Uli Schlachter).
  - fix urxvtd crash when using a background expression.
  - properly restore colors when using fading and reverse video
  is enabled while urxvt is focused and then disabled while it
  is not focused, or vice versa (patch by Daniel Hahler).
  - fix high memory usage when an extension repeatedly hides and
  shows an overlay (reported by Marcel Lautenbach).
  - expose priv_modes member and constants to perl extensions
    (patch by Rastislav Barlik).
  - fix a whole slew of const sillyness, unfortunately forced upon
    us by ISO C++.
  - update to libecb 0x00010006.
  - disable all thread support in ecb.h as we presumably don't need it.
  - slightly improve Makefile source dependencies.
  - work around bugs in newer Pod::Xhtml versions (flags incorrect formatting codes
    in xhtml/html sections but does not interpret correct ones).
- New file: /usr/bin/urclock
- Add BuildRequires: pkgconfig(xt)
- Remove rxvt-unicode-9.22-perl_environ_segfault.patch (accepted upstream)
- Refresh patches:
  - rxvt-unicode-hardening.patch,
  - rxvt-unicode-9.21-xsubpp.patch
  - rxvt-unicode-9.20-CVE-2008-1142-DISPLAY.patch</changelog>
  <changelog author="Petr Vorel &lt;pvorel@suse.cz&gt;" date="1621944000">- Backport patch from upstream: perl-avoiding-recursive-loading.patch</changelog>
</package>
<package pkgid="d03873cb135877dc5ca1a4a636c132af33a0bda48af03e5bb5750f34e8e4f716" name="rxvt-unicode" arch="x86_64">
  <version epoch="0" ver="9.26" rel="bp154.2.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1414929600">- Switch to individual pkgconfig() build requires
  instead of using metapackage xorg-x11-devel</changelog>
  <changelog author="mrueckert@suse.de" date="1434369600">- sync categories in desktop files with xterm</changelog>
  <changelog author="mimi.vx@gmail.com" date="1434628800">- update to 9.21
  - fix pixel droppings on overdraw when a secondary core font has the
    same height but different ascent.
  - implement cvvis in terminfo as blinking cursor, to distinguish it
    from cnorm (emacs uses cvvis which is commonly a blinking cursor).
  - when xft support was compiled in, colour queries erroneously returned
    premultiplied values, this also affected internal queries, for example
    when calculating faded colour. alpha is now divided out when possible,
    which is more correct but loses colour resolution.
  - add DECSCUSR xterm extension to set the cursor to a vertical bar.
  - add 'extension:string' action, and associated on_action perl
    hook, for keysym resources that invokes actions provided by
    perl extensions. The 'perl:string' action and
    on_user_command hook are deprecated but still supported.
  - add 'builtin-string' action for keysym resources that restores string
    mappings for keys that have predefined actions in urxvt.
  - add -k option to urxvtc for killing the daemon process.
  - document urxvtd's -e/--eval option that was implemented in 9.16,
    but not documented.
  - add -dockapp option to make the wm treat urxvt as a dockapp.
  - add -mc option and multiClickTime resource to set the maximum time
    between multi-click select events (patch by Joe Peterson).
  - new 'eval' extension to evaluate arbitrary perl code with keysym
    bindings. The extension also provides methods that implement basic
    actions, such as pasting selections and scrolling.
  - the macosx-clipboard and macosx-clipboard-native extensions have been removed.
  - kuake extension now uses the kuake.hotkey resource to specify the hotkey.
  - new 'matcher:select' mode of matcher to iterate over the matches with the keyboard.
  - the 'matcher:list' feature of matcher now honours the launcher
    associated to a matched pattern.
  - speed-up matcher underlining on very long lines (reported by Edward Z. Yang).
  - fix up/down commands of searchable-scrollback so that they always move
    to the previous/next logical line with a match, if any.
  - searchable-scrollback resource has been deprecated (use keysym instead).
  - extension parameter passing is deprecated (use resource mechanism instead).
  - upgrade to GPLv3 (see COPYING).
  - compile out of the box on Solaris 10, again.
  - fix height and position of the stippled area in next scrollbar (patch
    by Thomas Otto).
  - fix off-by-one bug causing the iso14755 window not to jump out of the
    way properly.
  - fix crash that may happen if a lib to which urxvt is linked to calls setenv.
  - fix memory leak in special_{encode,decode} perl methods.
  - fix refresh bug that occurs when reverse video is set on a cell
    containing a space and with the same bg and fg colour, red hat bug
    [#830236].
  - fix crash that may happen if an x error is received after a terminal
    window/popup has been destroyed already.
  - removed superfluous 0 digit from sgr terminfo sequence.
  - greatly improve colour allocation on colour-starved pseudocolour
    displays to avoid read-write cells instead of simply failing
    (this is only relevant for antique 8bpp frame buffers).
  - do not free fade colours when not doing fading (this is likely
    only relevant for antique 8bpp frame buffers).
  - do not specialcase 2 or 4 colour visuals, leading to
    simpler and actually more correct code.
  - hopefully no longer leak colours on !truecolour visuals.
  - use consistent method names (scr_recolour =&gt; scr_recolor).
  - use simpler (but slightly less bogus) formula for nearest
    colour choice (this is likely only relevant for antique 8bpp
    frame buffers).
  - remove fallback behaviour when initialising colours - the
    behaviour was inconsistent between startup vs. later and
    was only effective when valid colours couldn't be allocated.
  * add rxvt-unicode-9.21-xsubpp.patch to correct wrong harcoded patch in makefile
  * add rxvt-unicode-0001-Prefer-XDG_RUNTIME_DIR-over-the-HOME.patch
  * removed unused rxvt-unicode-remove_unused_attribute.patch</changelog>
  <changelog author="meissner@suse.com" date="1435060800">- %clean section removed, moved makeinstall to %install</changelog>
  <changelog author="mimi.vx@gmail.com" date="1435060801">- remove %{_terminfo}/r/rxvt-unicode</changelog>
  <changelog author="meissner@suse.com" date="1435147200">- install COPYING</changelog>
  <changelog author="mrueckert@suse.de" date="1437134400">- move requires for the terminfo files from terminfo to
  terminfo-base (boo #936332)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1478520000">- update to 9.22
  - NOTICE: this release updates terminfo.
  - add terminfo capabilities for various ctrl and shift-ctrl key variants
  - fix longstanding core font encoding bug where some character
    ranges could not be mapped from unicode to the font: affected
    encodings are big5, gb2312, iso8859-8 (hebrew), jis0201 and
    ksc5601 .
  - fix crash when the number of columns is 1 and a 0 width character is inserted
  - fix a crash when parsing an invalid color specification
  - fix a buffer overflow in font name parser
  - do not start blinking cursor if the window is unfocused
  - change the width of underline and i-beam cursor to 2 pixels (based on
  a patch by Omar Sandoval).
  - add pointerShape resource to change the mouse pointer shape
  - a keysym resource for a key which is already bound to an
  action now properly rebinds the key.
  - do not report mouse motion events if Shift is active
  - put the alpha component last in responses to OSC color queries
  - the key_press hook is now invoked before processing the
  event, as documented. This change was done in 9.21 but not
  announced and fixes debian bugs #511377, #531751 and red hat
  bug #1105069. Note that this change breaks a few scripts,
  such as mark-yank-urls, which rely on the previous buggy
  behaviour that urxvt processes the event (in particular
  keysym bindings) before invoking the hook.
  - the tabbed extension now properly refreshes the active tab
  on a key press when the mouse pointer is outside the terminal
  window.
  - add 'lookup_keysym' perl method to lookup the action bound
  to a key combination.
  - a key combination bound to 'matcher:select' can now be used
  to cycle through the matches in matcher.
  - change perl integer accessors (-&gt;width et al.) into mutators.</changelog>
  <changelog author="mrueckert@suse.de" date="1496232000">- added rxvt-unicode-hardening.patch: (boo# 1036456)
  While urxvt is not directly affected by CVE-2017-7483. We add a
  patch to harden urxvt to avoid similar bugs in the future.</changelog>
  <changelog author="glin@suse.com" date="1522843200">- added rxvt-unicode-secondarywheel.patch from to add the new
  option: secondaryWheel to enable mouse scrolling for the pagers,
  e.g. less, man, vim, etc.</changelog>
  <changelog author="Marcus H&#xFC;we &lt;suse-tux@gmx.de&gt;" date="1606392000">- add rxvt-unicode-9.22-perl_environ_segfault.patch to avoid a
  segfault when closing urxvt</changelog>
  <changelog author="Avindra Goolcharan &lt;avindra@opensuse.org&gt;" date="1610452800">- fix build error (pass -D to "install")
- fix one  W: rpm-buildroot-usage
- ran spec-cleaner and tidy
- format rxvt-unicode-9.20-CVE-2008-1142-DISPLAY.patch for autosetup
- format rxvt-unicode-9.22-perl_environ_segfault.patch for autosetup</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1612872000">- restore the -256color binaries</changelog>
  <changelog author="Petr Vorel &lt;pvorel@suse.cz&gt;" date="1621252800">- Update to 9.26
  - ev_iouring.c was wrongly required during compilation, and wrongly
    not packaged.
- Update to 9.25 (boo#1186174 CVE-2021-33477)
  - for the 17.5th anniversary, and because many distributions seem to
    remove rxvt in favour of urxvt, this release resurrects rclock as
    urclock.
  - add support for systemd socket-based activation - debian bug #917105,
  freebsd bug #234276.
  - do not destruct perl on exit anymore: this might fail for a variety of
    reasons, and takes unneccessary time.
  - remove any macros from urxvtperl manpage(s), should fix debian
    bug 858385.
  - the old bg image resources are now provided by the background
  extension, and perl is thus required for bg image support. No
  configuration change is needed: urxvt autoloads the background
  ext if any bg image resource/option is present (for OSC sequences to
    work you need to enable it explicity). The old bg image
  resources are also now deprecated; users are encouraged to
  switch to the new bg image interface (see man urxvt-background).
  - confirm-paste now checks for any ctlchars, not just newlines.
  - searchable scrollback will now ignore bracketed paste mode sequences
    (prompted by Daniel Gröber's patch).
  - drop ISO 2022 locale support. ISO 2022 encodings are not supported in
    POSIX locales and clash with vt100 charset emulation (the luit
    program can be used as a substitute).
  - perl didn't parse rgba colours specified as an array correctly,
    only allowing 0 and 100% intensity for each component (this affected
    fill and tint).
  - when iterating over resources, urxvt will now try to properly handle
    multipart resources (such as "*background.expr"), for the benefit
    of autoloading perl extensions.
  - ESC G (query rxvt graphics mode) has been disabled due to security
    implications. The rxvt graphics mode was removed in rxvt-unicode 1.5,
    and no programs relying on being able to query the mode are known.
  - work around API change breakage in perl 5.28, based on a patch by
    Roman Bogorodskiy.
  - improved security: rob nation's (obsolete) graphics mode queries
    no longer reply with linefeed in secure/default mode.
  - ISO 8613-3 direct colour SGR sequences (patch by Fengguang Wu).
  - xterm focus reporting mode (patch by Daniel Hahler).
  - xterm SGR mouse mode.
  - implement DECRQM. Patch by P?emysl Eric Janouch.
  - add missing color index parameter to OSC 4 response. Patch
  by P?emysl Eric Janouch.
  - in some window managers, if smart resize was enabled, urxvt
  erroneously moved the window on font change - awesome bug
  [#532], arch linux bug ##34807 (patch by Uli Schlachter).
  - fix urxvtd crash when using a background expression.
  - properly restore colors when using fading and reverse video
  is enabled while urxvt is focused and then disabled while it
  is not focused, or vice versa (patch by Daniel Hahler).
  - fix high memory usage when an extension repeatedly hides and
  shows an overlay (reported by Marcel Lautenbach).
  - expose priv_modes member and constants to perl extensions
    (patch by Rastislav Barlik).
  - fix a whole slew of const sillyness, unfortunately forced upon
    us by ISO C++.
  - update to libecb 0x00010006.
  - disable all thread support in ecb.h as we presumably don't need it.
  - slightly improve Makefile source dependencies.
  - work around bugs in newer Pod::Xhtml versions (flags incorrect formatting codes
    in xhtml/html sections but does not interpret correct ones).
- New file: /usr/bin/urclock
- Add BuildRequires: pkgconfig(xt)
- Remove rxvt-unicode-9.22-perl_environ_segfault.patch (accepted upstream)
- Refresh patches:
  - rxvt-unicode-hardening.patch,
  - rxvt-unicode-9.21-xsubpp.patch
  - rxvt-unicode-9.20-CVE-2008-1142-DISPLAY.patch</changelog>
  <changelog author="Petr Vorel &lt;pvorel@suse.cz&gt;" date="1621944000">- Backport patch from upstream: perl-avoiding-recursive-loading.patch</changelog>
</package>
<package pkgid="8e92c894707cd386724e5c9e4743bea25243bf5a4f604d355b45c5f7e76dec89" name="rxvt-unicode" arch="aarch64">
  <version epoch="0" ver="9.30" rel="bp154.2.6.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1414929600">- Switch to individual pkgconfig() build requires
  instead of using metapackage xorg-x11-devel</changelog>
  <changelog author="mrueckert@suse.de" date="1434369600">- sync categories in desktop files with xterm</changelog>
  <changelog author="mimi.vx@gmail.com" date="1434628800">- update to 9.21
  - fix pixel droppings on overdraw when a secondary core font has the
    same height but different ascent.
  - implement cvvis in terminfo as blinking cursor, to distinguish it
    from cnorm (emacs uses cvvis which is commonly a blinking cursor).
  - when xft support was compiled in, colour queries erroneously returned
    premultiplied values, this also affected internal queries, for example
    when calculating faded colour. alpha is now divided out when possible,
    which is more correct but loses colour resolution.
  - add DECSCUSR xterm extension to set the cursor to a vertical bar.
  - add 'extension:string' action, and associated on_action perl
    hook, for keysym resources that invokes actions provided by
    perl extensions. The 'perl:string' action and
    on_user_command hook are deprecated but still supported.
  - add 'builtin-string' action for keysym resources that restores string
    mappings for keys that have predefined actions in urxvt.
  - add -k option to urxvtc for killing the daemon process.
  - document urxvtd's -e/--eval option that was implemented in 9.16,
    but not documented.
  - add -dockapp option to make the wm treat urxvt as a dockapp.
  - add -mc option and multiClickTime resource to set the maximum time
    between multi-click select events (patch by Joe Peterson).
  - new 'eval' extension to evaluate arbitrary perl code with keysym
    bindings. The extension also provides methods that implement basic
    actions, such as pasting selections and scrolling.
  - the macosx-clipboard and macosx-clipboard-native extensions have been removed.
  - kuake extension now uses the kuake.hotkey resource to specify the hotkey.
  - new 'matcher:select' mode of matcher to iterate over the matches with the keyboard.
  - the 'matcher:list' feature of matcher now honours the launcher
    associated to a matched pattern.
  - speed-up matcher underlining on very long lines (reported by Edward Z. Yang).
  - fix up/down commands of searchable-scrollback so that they always move
    to the previous/next logical line with a match, if any.
  - searchable-scrollback resource has been deprecated (use keysym instead).
  - extension parameter passing is deprecated (use resource mechanism instead).
  - upgrade to GPLv3 (see COPYING).
  - compile out of the box on Solaris 10, again.
  - fix height and position of the stippled area in next scrollbar (patch
    by Thomas Otto).
  - fix off-by-one bug causing the iso14755 window not to jump out of the
    way properly.
  - fix crash that may happen if a lib to which urxvt is linked to calls setenv.
  - fix memory leak in special_{encode,decode} perl methods.
  - fix refresh bug that occurs when reverse video is set on a cell
    containing a space and with the same bg and fg colour, red hat bug
    [#830236].
  - fix crash that may happen if an x error is received after a terminal
    window/popup has been destroyed already.
  - removed superfluous 0 digit from sgr terminfo sequence.
  - greatly improve colour allocation on colour-starved pseudocolour
    displays to avoid read-write cells instead of simply failing
    (this is only relevant for antique 8bpp frame buffers).
  - do not free fade colours when not doing fading (this is likely
    only relevant for antique 8bpp frame buffers).
  - do not specialcase 2 or 4 colour visuals, leading to
    simpler and actually more correct code.
  - hopefully no longer leak colours on !truecolour visuals.
  - use consistent method names (scr_recolour =&gt; scr_recolor).
  - use simpler (but slightly less bogus) formula for nearest
    colour choice (this is likely only relevant for antique 8bpp
    frame buffers).
  - remove fallback behaviour when initialising colours - the
    behaviour was inconsistent between startup vs. later and
    was only effective when valid colours couldn't be allocated.
  * add rxvt-unicode-9.21-xsubpp.patch to correct wrong harcoded patch in makefile
  * add rxvt-unicode-0001-Prefer-XDG_RUNTIME_DIR-over-the-HOME.patch
  * removed unused rxvt-unicode-remove_unused_attribute.patch</changelog>
  <changelog author="meissner@suse.com" date="1435060800">- %clean section removed, moved makeinstall to %install</changelog>
  <changelog author="mimi.vx@gmail.com" date="1435060801">- remove %{_terminfo}/r/rxvt-unicode</changelog>
  <changelog author="meissner@suse.com" date="1435147200">- install COPYING</changelog>
  <changelog author="mrueckert@suse.de" date="1437134400">- move requires for the terminfo files from terminfo to
  terminfo-base (boo #936332)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1478520000">- update to 9.22
  - NOTICE: this release updates terminfo.
  - add terminfo capabilities for various ctrl and shift-ctrl key variants
  - fix longstanding core font encoding bug where some character
    ranges could not be mapped from unicode to the font: affected
    encodings are big5, gb2312, iso8859-8 (hebrew), jis0201 and
    ksc5601 .
  - fix crash when the number of columns is 1 and a 0 width character is inserted
  - fix a crash when parsing an invalid color specification
  - fix a buffer overflow in font name parser
  - do not start blinking cursor if the window is unfocused
  - change the width of underline and i-beam cursor to 2 pixels (based on
  a patch by Omar Sandoval).
  - add pointerShape resource to change the mouse pointer shape
  - a keysym resource for a key which is already bound to an
  action now properly rebinds the key.
  - do not report mouse motion events if Shift is active
  - put the alpha component last in responses to OSC color queries
  - the key_press hook is now invoked before processing the
  event, as documented. This change was done in 9.21 but not
  announced and fixes debian bugs #511377, #531751 and red hat
  bug #1105069. Note that this change breaks a few scripts,
  such as mark-yank-urls, which rely on the previous buggy
  behaviour that urxvt processes the event (in particular
  keysym bindings) before invoking the hook.
  - the tabbed extension now properly refreshes the active tab
  on a key press when the mouse pointer is outside the terminal
  window.
  - add 'lookup_keysym' perl method to lookup the action bound
  to a key combination.
  - a key combination bound to 'matcher:select' can now be used
  to cycle through the matches in matcher.
  - change perl integer accessors (-&gt;width et al.) into mutators.</changelog>
  <changelog author="mrueckert@suse.de" date="1496232000">- added rxvt-unicode-hardening.patch: (boo# 1036456)
  While urxvt is not directly affected by CVE-2017-7483. We add a
  patch to harden urxvt to avoid similar bugs in the future.</changelog>
  <changelog author="glin@suse.com" date="1522843200">- added rxvt-unicode-secondarywheel.patch from to add the new
  option: secondaryWheel to enable mouse scrolling for the pagers,
  e.g. less, man, vim, etc.</changelog>
  <changelog author="Marcus H&#xFC;we &lt;suse-tux@gmx.de&gt;" date="1606392000">- add rxvt-unicode-9.22-perl_environ_segfault.patch to avoid a
  segfault when closing urxvt</changelog>
  <changelog author="Avindra Goolcharan &lt;avindra@opensuse.org&gt;" date="1610452800">- fix build error (pass -D to "install")
- fix one  W: rpm-buildroot-usage
- ran spec-cleaner and tidy
- format rxvt-unicode-9.20-CVE-2008-1142-DISPLAY.patch for autosetup
- format rxvt-unicode-9.22-perl_environ_segfault.patch for autosetup</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1612872000">- restore the -256color binaries</changelog>
  <changelog author="Petr Vorel &lt;pvorel@suse.cz&gt;" date="1621252800">- Update to 9.26
  - ev_iouring.c was wrongly required during compilation, and wrongly
    not packaged.
- Update to 9.25 (boo#1186174 CVE-2021-33477)
  - for the 17.5th anniversary, and because many distributions seem to
    remove rxvt in favour of urxvt, this release resurrects rclock as
    urclock.
  - add support for systemd socket-based activation - debian bug #917105,
  freebsd bug #234276.
  - do not destruct perl on exit anymore: this might fail for a variety of
    reasons, and takes unneccessary time.
  - remove any macros from urxvtperl manpage(s), should fix debian
    bug 858385.
  - the old bg image resources are now provided by the background
  extension, and perl is thus required for bg image support. No
  configuration change is needed: urxvt autoloads the background
  ext if any bg image resource/option is present (for OSC sequences to
    work you need to enable it explicity). The old bg image
  resources are also now deprecated; users are encouraged to
  switch to the new bg image interface (see man urxvt-background).
  - confirm-paste now checks for any ctlchars, not just newlines.
  - searchable scrollback will now ignore bracketed paste mode sequences
    (prompted by Daniel Gröber's patch).
  - drop ISO 2022 locale support. ISO 2022 encodings are not supported in
    POSIX locales and clash with vt100 charset emulation (the luit
    program can be used as a substitute).
  - perl didn't parse rgba colours specified as an array correctly,
    only allowing 0 and 100% intensity for each component (this affected
    fill and tint).
  - when iterating over resources, urxvt will now try to properly handle
    multipart resources (such as "*background.expr"), for the benefit
    of autoloading perl extensions.
  - ESC G (query rxvt graphics mode) has been disabled due to security
    implications. The rxvt graphics mode was removed in rxvt-unicode 1.5,
    and no programs relying on being able to query the mode are known.
  - work around API change breakage in perl 5.28, based on a patch by
    Roman Bogorodskiy.
  - improved security: rob nation's (obsolete) graphics mode queries
    no longer reply with linefeed in secure/default mode.
  - ISO 8613-3 direct colour SGR sequences (patch by Fengguang Wu).
  - xterm focus reporting mode (patch by Daniel Hahler).
  - xterm SGR mouse mode.
  - implement DECRQM. Patch by P?emysl Eric Janouch.
  - add missing color index parameter to OSC 4 response. Patch
  by P?emysl Eric Janouch.
  - in some window managers, if smart resize was enabled, urxvt
  erroneously moved the window on font change - awesome bug
  [#532], arch linux bug ##34807 (patch by Uli Schlachter).
  - fix urxvtd crash when using a background expression.
  - properly restore colors when using fading and reverse video
  is enabled while urxvt is focused and then disabled while it
  is not focused, or vice versa (patch by Daniel Hahler).
  - fix high memory usage when an extension repeatedly hides and
  shows an overlay (reported by Marcel Lautenbach).
  - expose priv_modes member and constants to perl extensions
    (patch by Rastislav Barlik).
  - fix a whole slew of const sillyness, unfortunately forced upon
    us by ISO C++.
  - update to libecb 0x00010006.
  - disable all thread support in ecb.h as we presumably don't need it.
  - slightly improve Makefile source dependencies.
  - work around bugs in newer Pod::Xhtml versions (flags incorrect formatting codes
    in xhtml/html sections but does not interpret correct ones).
- New file: /usr/bin/urclock
- Add BuildRequires: pkgconfig(xt)
- Remove rxvt-unicode-9.22-perl_environ_segfault.patch (accepted upstream)
- Refresh patches:
  - rxvt-unicode-hardening.patch,
  - rxvt-unicode-9.21-xsubpp.patch
  - rxvt-unicode-9.20-CVE-2008-1142-DISPLAY.patch</changelog>
  <changelog author="Petr Vorel &lt;pvorel@suse.cz&gt;" date="1621944000">- Backport patch from upstream: perl-avoiding-recursive-loading.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1626868800">- added handle-new-tic-and-dont-install-terminfo.patch:
  This fixes the build failure on TW. We actually do not care about
  the generated terminfo file it comes from a different package
  anyway</changelog>
  <changelog author="tiwai@suse.de" date="1643371200">- Update to version 9.30:
  * the background extension did not initialise properly when automatically
    loaded via the OSC.
  * new "on_attach" hook type implemented, to initialise late-loading
    extensions.
- Update to version 9.29:
  * libptytty (http://dist.schmorp.de/libptytty/) is now a required
    external dependency.
  * enable confirm-paste extension by default, can be disabled by e.g.
    URxvt.perl-ext: -confirm-paste
  * Key bindings specified with the -keysym option or with resources of
    the form URxvt*keysym work again. Such resources, as opposed to
  * resources of the form URxvt.keysym, were not officially allowed but
    accepted, so ignoring them is considered a regression.
  * new option/resource -rm/rewrapMode, which sets the line rewrap
    mode to auto, never or always.
  * new option/resource -dpb/disablePasteBrackets, which can be used to
    disable bracketed paste mode sequences, as more and more programs
  * abuse these sequences (typically in the name of security, but these
    sequences are not improving security). Also, bracketed paste mode
    is now under frills.
  * add manpage for urclock.
  * confirm-paste wrongly considered brackets as ctrlchars (patch by
    Jakub Wilk, debian bug #995244).
  * if urxvt cannot detect a good estimate for font width (because a font does
    not contain latin characters at all for example), it will now fall
    back to xft's max_advance_width, which works well with some fonts. It
    currently will warn about this.
  * do not render variation selectors in the default font as boxes, treat
    them as zero-width characters.
  * change combining character architecture to allow fonts to handle
    combining sequences on their own. This could allow future renderers
    to be more intelligent about these sequences.
  * use the previous enhancement to allow unicode characters outside of the
    BMP to be rendered even without --enable-unicode3, as long as an
    xft with the character is configured.
  * It's recommended to stay with disabled unicode3 even more now.
  * freetype/xft have been verified to return nonsensical offsets for
    combining characters. urxvt tries to compensate to some extent,
    but diacritics will be slightly off in many cases, and far off in
    some cases (e.g. input mono).
  * when checking for overlap/careful handling, take non-basefont
    character shifts into account.
  * extensions can now request autoloading on OSC and Perl OSC sequences,
    implement this for the background, clipboard-osc and overlay-osc
    extensions.
  * the background extension will now be autoloaded when the OSC 20 or 705
    sequence is received.
  * added OSC 776 sequence to return character cell width, height and font
    ascent, which is useful when using urxvt as slave to calculate window
    size form or to row/column count.
  * matcher extension documentation now points out some requirements for
    regular expressions. the default url matching regex will now try
    to match IRLs in addition to URLs.
  * The view_start perl method now scrolls to the bottom also when the
    argument is greater than 0.
  * eval scroll actions now scroll to the bottom when scrolling down and
    there are less lines to scroll than the ones requested (reported by
    Stephen Talley).
  * allow perl-ext and perl-ext-common to override autoloaded extensions.
    this allows tabbed to disable itself in subtabs, avoiding recursive
    loading.
  * update precompose table to unicode 13.0.
  * update charset conversion tables to perl 5.32 (this only affected
    cs_koi8_u_from_unicode).
  * unicode characters &gt; 0x100000 were not handled correctly w.r.t.
    font rendering.
  * replace bitstream vera by dejavu sans, as it has replaced the former
    almost everywhere.
  * urxvt will now try tic -x first and only fall back to tic without -x
    when tic -x fails.
  * fix urclock not erasing the old date on the clock face, causing
    overdraw, plus a host of other small fixes and improvements.
  * shave off over 1K of code size from urclock by replacing the sine table
    with a slightly less accurate fixed point approximation.
  * do not specify indentation with =over in pod, this is no longer
    needed with semi-modern pod tools and gives the formatter more
    stylistic freedom.
  * background extension did not set the "size-sensitive" flag
    when repeat mode wasn't normal.
  * extensions are now subjected to "use strict 'subs'".
  * avoid crashing when xft successfully opens a font but then somehow
    can't lock the face.
  * locale_decode/encode api methods now pass through undef unchanged.
  * fix undefined behaviour in the perl hook function, as diagnosed by clang.
- Drop obsoleted patch:
  perl-avoiding-recursive-loading.patch
- Refreshed patches:
  rxvt-unicode-secondarywheel.patch
  handle-new-tic-and-dont-install-terminfo.patch</changelog>
</package>
<package pkgid="7681d4b891d35ab7cb08d822b52088fa48d057327d50887e63cd1ef6cc3913a1" name="rxvt-unicode" arch="i586">
  <version epoch="0" ver="9.30" rel="bp154.2.6.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1414929600">- Switch to individual pkgconfig() build requires
  instead of using metapackage xorg-x11-devel</changelog>
  <changelog author="mrueckert@suse.de" date="1434369600">- sync categories in desktop files with xterm</changelog>
  <changelog author="mimi.vx@gmail.com" date="1434628800">- update to 9.21
  - fix pixel droppings on overdraw when a secondary core font has the
    same height but different ascent.
  - implement cvvis in terminfo as blinking cursor, to distinguish it
    from cnorm (emacs uses cvvis which is commonly a blinking cursor).
  - when xft support was compiled in, colour queries erroneously returned
    premultiplied values, this also affected internal queries, for example
    when calculating faded colour. alpha is now divided out when possible,
    which is more correct but loses colour resolution.
  - add DECSCUSR xterm extension to set the cursor to a vertical bar.
  - add 'extension:string' action, and associated on_action perl
    hook, for keysym resources that invokes actions provided by
    perl extensions. The 'perl:string' action and
    on_user_command hook are deprecated but still supported.
  - add 'builtin-string' action for keysym resources that restores string
    mappings for keys that have predefined actions in urxvt.
  - add -k option to urxvtc for killing the daemon process.
  - document urxvtd's -e/--eval option that was implemented in 9.16,
    but not documented.
  - add -dockapp option to make the wm treat urxvt as a dockapp.
  - add -mc option and multiClickTime resource to set the maximum time
    between multi-click select events (patch by Joe Peterson).
  - new 'eval' extension to evaluate arbitrary perl code with keysym
    bindings. The extension also provides methods that implement basic
    actions, such as pasting selections and scrolling.
  - the macosx-clipboard and macosx-clipboard-native extensions have been removed.
  - kuake extension now uses the kuake.hotkey resource to specify the hotkey.
  - new 'matcher:select' mode of matcher to iterate over the matches with the keyboard.
  - the 'matcher:list' feature of matcher now honours the launcher
    associated to a matched pattern.
  - speed-up matcher underlining on very long lines (reported by Edward Z. Yang).
  - fix up/down commands of searchable-scrollback so that they always move
    to the previous/next logical line with a match, if any.
  - searchable-scrollback resource has been deprecated (use keysym instead).
  - extension parameter passing is deprecated (use resource mechanism instead).
  - upgrade to GPLv3 (see COPYING).
  - compile out of the box on Solaris 10, again.
  - fix height and position of the stippled area in next scrollbar (patch
    by Thomas Otto).
  - fix off-by-one bug causing the iso14755 window not to jump out of the
    way properly.
  - fix crash that may happen if a lib to which urxvt is linked to calls setenv.
  - fix memory leak in special_{encode,decode} perl methods.
  - fix refresh bug that occurs when reverse video is set on a cell
    containing a space and with the same bg and fg colour, red hat bug
    [#830236].
  - fix crash that may happen if an x error is received after a terminal
    window/popup has been destroyed already.
  - removed superfluous 0 digit from sgr terminfo sequence.
  - greatly improve colour allocation on colour-starved pseudocolour
    displays to avoid read-write cells instead of simply failing
    (this is only relevant for antique 8bpp frame buffers).
  - do not free fade colours when not doing fading (this is likely
    only relevant for antique 8bpp frame buffers).
  - do not specialcase 2 or 4 colour visuals, leading to
    simpler and actually more correct code.
  - hopefully no longer leak colours on !truecolour visuals.
  - use consistent method names (scr_recolour =&gt; scr_recolor).
  - use simpler (but slightly less bogus) formula for nearest
    colour choice (this is likely only relevant for antique 8bpp
    frame buffers).
  - remove fallback behaviour when initialising colours - the
    behaviour was inconsistent between startup vs. later and
    was only effective when valid colours couldn't be allocated.
  * add rxvt-unicode-9.21-xsubpp.patch to correct wrong harcoded patch in makefile
  * add rxvt-unicode-0001-Prefer-XDG_RUNTIME_DIR-over-the-HOME.patch
  * removed unused rxvt-unicode-remove_unused_attribute.patch</changelog>
  <changelog author="meissner@suse.com" date="1435060800">- %clean section removed, moved makeinstall to %install</changelog>
  <changelog author="mimi.vx@gmail.com" date="1435060801">- remove %{_terminfo}/r/rxvt-unicode</changelog>
  <changelog author="meissner@suse.com" date="1435147200">- install COPYING</changelog>
  <changelog author="mrueckert@suse.de" date="1437134400">- move requires for the terminfo files from terminfo to
  terminfo-base (boo #936332)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1478520000">- update to 9.22
  - NOTICE: this release updates terminfo.
  - add terminfo capabilities for various ctrl and shift-ctrl key variants
  - fix longstanding core font encoding bug where some character
    ranges could not be mapped from unicode to the font: affected
    encodings are big5, gb2312, iso8859-8 (hebrew), jis0201 and
    ksc5601 .
  - fix crash when the number of columns is 1 and a 0 width character is inserted
  - fix a crash when parsing an invalid color specification
  - fix a buffer overflow in font name parser
  - do not start blinking cursor if the window is unfocused
  - change the width of underline and i-beam cursor to 2 pixels (based on
  a patch by Omar Sandoval).
  - add pointerShape resource to change the mouse pointer shape
  - a keysym resource for a key which is already bound to an
  action now properly rebinds the key.
  - do not report mouse motion events if Shift is active
  - put the alpha component last in responses to OSC color queries
  - the key_press hook is now invoked before processing the
  event, as documented. This change was done in 9.21 but not
  announced and fixes debian bugs #511377, #531751 and red hat
  bug #1105069. Note that this change breaks a few scripts,
  such as mark-yank-urls, which rely on the previous buggy
  behaviour that urxvt processes the event (in particular
  keysym bindings) before invoking the hook.
  - the tabbed extension now properly refreshes the active tab
  on a key press when the mouse pointer is outside the terminal
  window.
  - add 'lookup_keysym' perl method to lookup the action bound
  to a key combination.
  - a key combination bound to 'matcher:select' can now be used
  to cycle through the matches in matcher.
  - change perl integer accessors (-&gt;width et al.) into mutators.</changelog>
  <changelog author="mrueckert@suse.de" date="1496232000">- added rxvt-unicode-hardening.patch: (boo# 1036456)
  While urxvt is not directly affected by CVE-2017-7483. We add a
  patch to harden urxvt to avoid similar bugs in the future.</changelog>
  <changelog author="glin@suse.com" date="1522843200">- added rxvt-unicode-secondarywheel.patch from to add the new
  option: secondaryWheel to enable mouse scrolling for the pagers,
  e.g. less, man, vim, etc.</changelog>
  <changelog author="Marcus H&#xFC;we &lt;suse-tux@gmx.de&gt;" date="1606392000">- add rxvt-unicode-9.22-perl_environ_segfault.patch to avoid a
  segfault when closing urxvt</changelog>
  <changelog author="Avindra Goolcharan &lt;avindra@opensuse.org&gt;" date="1610452800">- fix build error (pass -D to "install")
- fix one  W: rpm-buildroot-usage
- ran spec-cleaner and tidy
- format rxvt-unicode-9.20-CVE-2008-1142-DISPLAY.patch for autosetup
- format rxvt-unicode-9.22-perl_environ_segfault.patch for autosetup</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1612872000">- restore the -256color binaries</changelog>
  <changelog author="Petr Vorel &lt;pvorel@suse.cz&gt;" date="1621252800">- Update to 9.26
  - ev_iouring.c was wrongly required during compilation, and wrongly
    not packaged.
- Update to 9.25 (boo#1186174 CVE-2021-33477)
  - for the 17.5th anniversary, and because many distributions seem to
    remove rxvt in favour of urxvt, this release resurrects rclock as
    urclock.
  - add support for systemd socket-based activation - debian bug #917105,
  freebsd bug #234276.
  - do not destruct perl on exit anymore: this might fail for a variety of
    reasons, and takes unneccessary time.
  - remove any macros from urxvtperl manpage(s), should fix debian
    bug 858385.
  - the old bg image resources are now provided by the background
  extension, and perl is thus required for bg image support. No
  configuration change is needed: urxvt autoloads the background
  ext if any bg image resource/option is present (for OSC sequences to
    work you need to enable it explicity). The old bg image
  resources are also now deprecated; users are encouraged to
  switch to the new bg image interface (see man urxvt-background).
  - confirm-paste now checks for any ctlchars, not just newlines.
  - searchable scrollback will now ignore bracketed paste mode sequences
    (prompted by Daniel Gröber's patch).
  - drop ISO 2022 locale support. ISO 2022 encodings are not supported in
    POSIX locales and clash with vt100 charset emulation (the luit
    program can be used as a substitute).
  - perl didn't parse rgba colours specified as an array correctly,
    only allowing 0 and 100% intensity for each component (this affected
    fill and tint).
  - when iterating over resources, urxvt will now try to properly handle
    multipart resources (such as "*background.expr"), for the benefit
    of autoloading perl extensions.
  - ESC G (query rxvt graphics mode) has been disabled due to security
    implications. The rxvt graphics mode was removed in rxvt-unicode 1.5,
    and no programs relying on being able to query the mode are known.
  - work around API change breakage in perl 5.28, based on a patch by
    Roman Bogorodskiy.
  - improved security: rob nation's (obsolete) graphics mode queries
    no longer reply with linefeed in secure/default mode.
  - ISO 8613-3 direct colour SGR sequences (patch by Fengguang Wu).
  - xterm focus reporting mode (patch by Daniel Hahler).
  - xterm SGR mouse mode.
  - implement DECRQM. Patch by P?emysl Eric Janouch.
  - add missing color index parameter to OSC 4 response. Patch
  by P?emysl Eric Janouch.
  - in some window managers, if smart resize was enabled, urxvt
  erroneously moved the window on font change - awesome bug
  [#532], arch linux bug ##34807 (patch by Uli Schlachter).
  - fix urxvtd crash when using a background expression.
  - properly restore colors when using fading and reverse video
  is enabled while urxvt is focused and then disabled while it
  is not focused, or vice versa (patch by Daniel Hahler).
  - fix high memory usage when an extension repeatedly hides and
  shows an overlay (reported by Marcel Lautenbach).
  - expose priv_modes member and constants to perl extensions
    (patch by Rastislav Barlik).
  - fix a whole slew of const sillyness, unfortunately forced upon
    us by ISO C++.
  - update to libecb 0x00010006.
  - disable all thread support in ecb.h as we presumably don't need it.
  - slightly improve Makefile source dependencies.
  - work around bugs in newer Pod::Xhtml versions (flags incorrect formatting codes
    in xhtml/html sections but does not interpret correct ones).
- New file: /usr/bin/urclock
- Add BuildRequires: pkgconfig(xt)
- Remove rxvt-unicode-9.22-perl_environ_segfault.patch (accepted upstream)
- Refresh patches:
  - rxvt-unicode-hardening.patch,
  - rxvt-unicode-9.21-xsubpp.patch
  - rxvt-unicode-9.20-CVE-2008-1142-DISPLAY.patch</changelog>
  <changelog author="Petr Vorel &lt;pvorel@suse.cz&gt;" date="1621944000">- Backport patch from upstream: perl-avoiding-recursive-loading.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1626868800">- added handle-new-tic-and-dont-install-terminfo.patch:
  This fixes the build failure on TW. We actually do not care about
  the generated terminfo file it comes from a different package
  anyway</changelog>
  <changelog author="tiwai@suse.de" date="1643371200">- Update to version 9.30:
  * the background extension did not initialise properly when automatically
    loaded via the OSC.
  * new "on_attach" hook type implemented, to initialise late-loading
    extensions.
- Update to version 9.29:
  * libptytty (http://dist.schmorp.de/libptytty/) is now a required
    external dependency.
  * enable confirm-paste extension by default, can be disabled by e.g.
    URxvt.perl-ext: -confirm-paste
  * Key bindings specified with the -keysym option or with resources of
    the form URxvt*keysym work again. Such resources, as opposed to
  * resources of the form URxvt.keysym, were not officially allowed but
    accepted, so ignoring them is considered a regression.
  * new option/resource -rm/rewrapMode, which sets the line rewrap
    mode to auto, never or always.
  * new option/resource -dpb/disablePasteBrackets, which can be used to
    disable bracketed paste mode sequences, as more and more programs
  * abuse these sequences (typically in the name of security, but these
    sequences are not improving security). Also, bracketed paste mode
    is now under frills.
  * add manpage for urclock.
  * confirm-paste wrongly considered brackets as ctrlchars (patch by
    Jakub Wilk, debian bug #995244).
  * if urxvt cannot detect a good estimate for font width (because a font does
    not contain latin characters at all for example), it will now fall
    back to xft's max_advance_width, which works well with some fonts. It
    currently will warn about this.
  * do not render variation selectors in the default font as boxes, treat
    them as zero-width characters.
  * change combining character architecture to allow fonts to handle
    combining sequences on their own. This could allow future renderers
    to be more intelligent about these sequences.
  * use the previous enhancement to allow unicode characters outside of the
    BMP to be rendered even without --enable-unicode3, as long as an
    xft with the character is configured.
  * It's recommended to stay with disabled unicode3 even more now.
  * freetype/xft have been verified to return nonsensical offsets for
    combining characters. urxvt tries to compensate to some extent,
    but diacritics will be slightly off in many cases, and far off in
    some cases (e.g. input mono).
  * when checking for overlap/careful handling, take non-basefont
    character shifts into account.
  * extensions can now request autoloading on OSC and Perl OSC sequences,
    implement this for the background, clipboard-osc and overlay-osc
    extensions.
  * the background extension will now be autoloaded when the OSC 20 or 705
    sequence is received.
  * added OSC 776 sequence to return character cell width, height and font
    ascent, which is useful when using urxvt as slave to calculate window
    size form or to row/column count.
  * matcher extension documentation now points out some requirements for
    regular expressions. the default url matching regex will now try
    to match IRLs in addition to URLs.
  * The view_start perl method now scrolls to the bottom also when the
    argument is greater than 0.
  * eval scroll actions now scroll to the bottom when scrolling down and
    there are less lines to scroll than the ones requested (reported by
    Stephen Talley).
  * allow perl-ext and perl-ext-common to override autoloaded extensions.
    this allows tabbed to disable itself in subtabs, avoiding recursive
    loading.
  * update precompose table to unicode 13.0.
  * update charset conversion tables to perl 5.32 (this only affected
    cs_koi8_u_from_unicode).
  * unicode characters &gt; 0x100000 were not handled correctly w.r.t.
    font rendering.
  * replace bitstream vera by dejavu sans, as it has replaced the former
    almost everywhere.
  * urxvt will now try tic -x first and only fall back to tic without -x
    when tic -x fails.
  * fix urclock not erasing the old date on the clock face, causing
    overdraw, plus a host of other small fixes and improvements.
  * shave off over 1K of code size from urclock by replacing the sine table
    with a slightly less accurate fixed point approximation.
  * do not specify indentation with =over in pod, this is no longer
    needed with semi-modern pod tools and gives the formatter more
    stylistic freedom.
  * background extension did not set the "size-sensitive" flag
    when repeat mode wasn't normal.
  * extensions are now subjected to "use strict 'subs'".
  * avoid crashing when xft successfully opens a font but then somehow
    can't lock the face.
  * locale_decode/encode api methods now pass through undef unchanged.
  * fix undefined behaviour in the perl hook function, as diagnosed by clang.
- Drop obsoleted patch:
  perl-avoiding-recursive-loading.patch
- Refreshed patches:
  rxvt-unicode-secondarywheel.patch
  handle-new-tic-and-dont-install-terminfo.patch</changelog>
</package>
<package pkgid="abc8f3d1a40e2737e3090c2cd031ceff0e908754b3e4c56dd048f0d6989e99f9" name="rxvt-unicode" arch="ppc64le">
  <version epoch="0" ver="9.30" rel="bp154.2.6.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1414929600">- Switch to individual pkgconfig() build requires
  instead of using metapackage xorg-x11-devel</changelog>
  <changelog author="mrueckert@suse.de" date="1434369600">- sync categories in desktop files with xterm</changelog>
  <changelog author="mimi.vx@gmail.com" date="1434628800">- update to 9.21
  - fix pixel droppings on overdraw when a secondary core font has the
    same height but different ascent.
  - implement cvvis in terminfo as blinking cursor, to distinguish it
    from cnorm (emacs uses cvvis which is commonly a blinking cursor).
  - when xft support was compiled in, colour queries erroneously returned
    premultiplied values, this also affected internal queries, for example
    when calculating faded colour. alpha is now divided out when possible,
    which is more correct but loses colour resolution.
  - add DECSCUSR xterm extension to set the cursor to a vertical bar.
  - add 'extension:string' action, and associated on_action perl
    hook, for keysym resources that invokes actions provided by
    perl extensions. The 'perl:string' action and
    on_user_command hook are deprecated but still supported.
  - add 'builtin-string' action for keysym resources that restores string
    mappings for keys that have predefined actions in urxvt.
  - add -k option to urxvtc for killing the daemon process.
  - document urxvtd's -e/--eval option that was implemented in 9.16,
    but not documented.
  - add -dockapp option to make the wm treat urxvt as a dockapp.
  - add -mc option and multiClickTime resource to set the maximum time
    between multi-click select events (patch by Joe Peterson).
  - new 'eval' extension to evaluate arbitrary perl code with keysym
    bindings. The extension also provides methods that implement basic
    actions, such as pasting selections and scrolling.
  - the macosx-clipboard and macosx-clipboard-native extensions have been removed.
  - kuake extension now uses the kuake.hotkey resource to specify the hotkey.
  - new 'matcher:select' mode of matcher to iterate over the matches with the keyboard.
  - the 'matcher:list' feature of matcher now honours the launcher
    associated to a matched pattern.
  - speed-up matcher underlining on very long lines (reported by Edward Z. Yang).
  - fix up/down commands of searchable-scrollback so that they always move
    to the previous/next logical line with a match, if any.
  - searchable-scrollback resource has been deprecated (use keysym instead).
  - extension parameter passing is deprecated (use resource mechanism instead).
  - upgrade to GPLv3 (see COPYING).
  - compile out of the box on Solaris 10, again.
  - fix height and position of the stippled area in next scrollbar (patch
    by Thomas Otto).
  - fix off-by-one bug causing the iso14755 window not to jump out of the
    way properly.
  - fix crash that may happen if a lib to which urxvt is linked to calls setenv.
  - fix memory leak in special_{encode,decode} perl methods.
  - fix refresh bug that occurs when reverse video is set on a cell
    containing a space and with the same bg and fg colour, red hat bug
    [#830236].
  - fix crash that may happen if an x error is received after a terminal
    window/popup has been destroyed already.
  - removed superfluous 0 digit from sgr terminfo sequence.
  - greatly improve colour allocation on colour-starved pseudocolour
    displays to avoid read-write cells instead of simply failing
    (this is only relevant for antique 8bpp frame buffers).
  - do not free fade colours when not doing fading (this is likely
    only relevant for antique 8bpp frame buffers).
  - do not specialcase 2 or 4 colour visuals, leading to
    simpler and actually more correct code.
  - hopefully no longer leak colours on !truecolour visuals.
  - use consistent method names (scr_recolour =&gt; scr_recolor).
  - use simpler (but slightly less bogus) formula for nearest
    colour choice (this is likely only relevant for antique 8bpp
    frame buffers).
  - remove fallback behaviour when initialising colours - the
    behaviour was inconsistent between startup vs. later and
    was only effective when valid colours couldn't be allocated.
  * add rxvt-unicode-9.21-xsubpp.patch to correct wrong harcoded patch in makefile
  * add rxvt-unicode-0001-Prefer-XDG_RUNTIME_DIR-over-the-HOME.patch
  * removed unused rxvt-unicode-remove_unused_attribute.patch</changelog>
  <changelog author="meissner@suse.com" date="1435060800">- %clean section removed, moved makeinstall to %install</changelog>
  <changelog author="mimi.vx@gmail.com" date="1435060801">- remove %{_terminfo}/r/rxvt-unicode</changelog>
  <changelog author="meissner@suse.com" date="1435147200">- install COPYING</changelog>
  <changelog author="mrueckert@suse.de" date="1437134400">- move requires for the terminfo files from terminfo to
  terminfo-base (boo #936332)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1478520000">- update to 9.22
  - NOTICE: this release updates terminfo.
  - add terminfo capabilities for various ctrl and shift-ctrl key variants
  - fix longstanding core font encoding bug where some character
    ranges could not be mapped from unicode to the font: affected
    encodings are big5, gb2312, iso8859-8 (hebrew), jis0201 and
    ksc5601 .
  - fix crash when the number of columns is 1 and a 0 width character is inserted
  - fix a crash when parsing an invalid color specification
  - fix a buffer overflow in font name parser
  - do not start blinking cursor if the window is unfocused
  - change the width of underline and i-beam cursor to 2 pixels (based on
  a patch by Omar Sandoval).
  - add pointerShape resource to change the mouse pointer shape
  - a keysym resource for a key which is already bound to an
  action now properly rebinds the key.
  - do not report mouse motion events if Shift is active
  - put the alpha component last in responses to OSC color queries
  - the key_press hook is now invoked before processing the
  event, as documented. This change was done in 9.21 but not
  announced and fixes debian bugs #511377, #531751 and red hat
  bug #1105069. Note that this change breaks a few scripts,
  such as mark-yank-urls, which rely on the previous buggy
  behaviour that urxvt processes the event (in particular
  keysym bindings) before invoking the hook.
  - the tabbed extension now properly refreshes the active tab
  on a key press when the mouse pointer is outside the terminal
  window.
  - add 'lookup_keysym' perl method to lookup the action bound
  to a key combination.
  - a key combination bound to 'matcher:select' can now be used
  to cycle through the matches in matcher.
  - change perl integer accessors (-&gt;width et al.) into mutators.</changelog>
  <changelog author="mrueckert@suse.de" date="1496232000">- added rxvt-unicode-hardening.patch: (boo# 1036456)
  While urxvt is not directly affected by CVE-2017-7483. We add a
  patch to harden urxvt to avoid similar bugs in the future.</changelog>
  <changelog author="glin@suse.com" date="1522843200">- added rxvt-unicode-secondarywheel.patch from to add the new
  option: secondaryWheel to enable mouse scrolling for the pagers,
  e.g. less, man, vim, etc.</changelog>
  <changelog author="Marcus H&#xFC;we &lt;suse-tux@gmx.de&gt;" date="1606392000">- add rxvt-unicode-9.22-perl_environ_segfault.patch to avoid a
  segfault when closing urxvt</changelog>
  <changelog author="Avindra Goolcharan &lt;avindra@opensuse.org&gt;" date="1610452800">- fix build error (pass -D to "install")
- fix one  W: rpm-buildroot-usage
- ran spec-cleaner and tidy
- format rxvt-unicode-9.20-CVE-2008-1142-DISPLAY.patch for autosetup
- format rxvt-unicode-9.22-perl_environ_segfault.patch for autosetup</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1612872000">- restore the -256color binaries</changelog>
  <changelog author="Petr Vorel &lt;pvorel@suse.cz&gt;" date="1621252800">- Update to 9.26
  - ev_iouring.c was wrongly required during compilation, and wrongly
    not packaged.
- Update to 9.25 (boo#1186174 CVE-2021-33477)
  - for the 17.5th anniversary, and because many distributions seem to
    remove rxvt in favour of urxvt, this release resurrects rclock as
    urclock.
  - add support for systemd socket-based activation - debian bug #917105,
  freebsd bug #234276.
  - do not destruct perl on exit anymore: this might fail for a variety of
    reasons, and takes unneccessary time.
  - remove any macros from urxvtperl manpage(s), should fix debian
    bug 858385.
  - the old bg image resources are now provided by the background
  extension, and perl is thus required for bg image support. No
  configuration change is needed: urxvt autoloads the background
  ext if any bg image resource/option is present (for OSC sequences to
    work you need to enable it explicity). The old bg image
  resources are also now deprecated; users are encouraged to
  switch to the new bg image interface (see man urxvt-background).
  - confirm-paste now checks for any ctlchars, not just newlines.
  - searchable scrollback will now ignore bracketed paste mode sequences
    (prompted by Daniel Gröber's patch).
  - drop ISO 2022 locale support. ISO 2022 encodings are not supported in
    POSIX locales and clash with vt100 charset emulation (the luit
    program can be used as a substitute).
  - perl didn't parse rgba colours specified as an array correctly,
    only allowing 0 and 100% intensity for each component (this affected
    fill and tint).
  - when iterating over resources, urxvt will now try to properly handle
    multipart resources (such as "*background.expr"), for the benefit
    of autoloading perl extensions.
  - ESC G (query rxvt graphics mode) has been disabled due to security
    implications. The rxvt graphics mode was removed in rxvt-unicode 1.5,
    and no programs relying on being able to query the mode are known.
  - work around API change breakage in perl 5.28, based on a patch by
    Roman Bogorodskiy.
  - improved security: rob nation's (obsolete) graphics mode queries
    no longer reply with linefeed in secure/default mode.
  - ISO 8613-3 direct colour SGR sequences (patch by Fengguang Wu).
  - xterm focus reporting mode (patch by Daniel Hahler).
  - xterm SGR mouse mode.
  - implement DECRQM. Patch by P?emysl Eric Janouch.
  - add missing color index parameter to OSC 4 response. Patch
  by P?emysl Eric Janouch.
  - in some window managers, if smart resize was enabled, urxvt
  erroneously moved the window on font change - awesome bug
  [#532], arch linux bug ##34807 (patch by Uli Schlachter).
  - fix urxvtd crash when using a background expression.
  - properly restore colors when using fading and reverse video
  is enabled while urxvt is focused and then disabled while it
  is not focused, or vice versa (patch by Daniel Hahler).
  - fix high memory usage when an extension repeatedly hides and
  shows an overlay (reported by Marcel Lautenbach).
  - expose priv_modes member and constants to perl extensions
    (patch by Rastislav Barlik).
  - fix a whole slew of const sillyness, unfortunately forced upon
    us by ISO C++.
  - update to libecb 0x00010006.
  - disable all thread support in ecb.h as we presumably don't need it.
  - slightly improve Makefile source dependencies.
  - work around bugs in newer Pod::Xhtml versions (flags incorrect formatting codes
    in xhtml/html sections but does not interpret correct ones).
- New file: /usr/bin/urclock
- Add BuildRequires: pkgconfig(xt)
- Remove rxvt-unicode-9.22-perl_environ_segfault.patch (accepted upstream)
- Refresh patches:
  - rxvt-unicode-hardening.patch,
  - rxvt-unicode-9.21-xsubpp.patch
  - rxvt-unicode-9.20-CVE-2008-1142-DISPLAY.patch</changelog>
  <changelog author="Petr Vorel &lt;pvorel@suse.cz&gt;" date="1621944000">- Backport patch from upstream: perl-avoiding-recursive-loading.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1626868800">- added handle-new-tic-and-dont-install-terminfo.patch:
  This fixes the build failure on TW. We actually do not care about
  the generated terminfo file it comes from a different package
  anyway</changelog>
  <changelog author="tiwai@suse.de" date="1643371200">- Update to version 9.30:
  * the background extension did not initialise properly when automatically
    loaded via the OSC.
  * new "on_attach" hook type implemented, to initialise late-loading
    extensions.
- Update to version 9.29:
  * libptytty (http://dist.schmorp.de/libptytty/) is now a required
    external dependency.
  * enable confirm-paste extension by default, can be disabled by e.g.
    URxvt.perl-ext: -confirm-paste
  * Key bindings specified with the -keysym option or with resources of
    the form URxvt*keysym work again. Such resources, as opposed to
  * resources of the form URxvt.keysym, were not officially allowed but
    accepted, so ignoring them is considered a regression.
  * new option/resource -rm/rewrapMode, which sets the line rewrap
    mode to auto, never or always.
  * new option/resource -dpb/disablePasteBrackets, which can be used to
    disable bracketed paste mode sequences, as more and more programs
  * abuse these sequences (typically in the name of security, but these
    sequences are not improving security). Also, bracketed paste mode
    is now under frills.
  * add manpage for urclock.
  * confirm-paste wrongly considered brackets as ctrlchars (patch by
    Jakub Wilk, debian bug #995244).
  * if urxvt cannot detect a good estimate for font width (because a font does
    not contain latin characters at all for example), it will now fall
    back to xft's max_advance_width, which works well with some fonts. It
    currently will warn about this.
  * do not render variation selectors in the default font as boxes, treat
    them as zero-width characters.
  * change combining character architecture to allow fonts to handle
    combining sequences on their own. This could allow future renderers
    to be more intelligent about these sequences.
  * use the previous enhancement to allow unicode characters outside of the
    BMP to be rendered even without --enable-unicode3, as long as an
    xft with the character is configured.
  * It's recommended to stay with disabled unicode3 even more now.
  * freetype/xft have been verified to return nonsensical offsets for
    combining characters. urxvt tries to compensate to some extent,
    but diacritics will be slightly off in many cases, and far off in
    some cases (e.g. input mono).
  * when checking for overlap/careful handling, take non-basefont
    character shifts into account.
  * extensions can now request autoloading on OSC and Perl OSC sequences,
    implement this for the background, clipboard-osc and overlay-osc
    extensions.
  * the background extension will now be autoloaded when the OSC 20 or 705
    sequence is received.
  * added OSC 776 sequence to return character cell width, height and font
    ascent, which is useful when using urxvt as slave to calculate window
    size form or to row/column count.
  * matcher extension documentation now points out some requirements for
    regular expressions. the default url matching regex will now try
    to match IRLs in addition to URLs.
  * The view_start perl method now scrolls to the bottom also when the
    argument is greater than 0.
  * eval scroll actions now scroll to the bottom when scrolling down and
    there are less lines to scroll than the ones requested (reported by
    Stephen Talley).
  * allow perl-ext and perl-ext-common to override autoloaded extensions.
    this allows tabbed to disable itself in subtabs, avoiding recursive
    loading.
  * update precompose table to unicode 13.0.
  * update charset conversion tables to perl 5.32 (this only affected
    cs_koi8_u_from_unicode).
  * unicode characters &gt; 0x100000 were not handled correctly w.r.t.
    font rendering.
  * replace bitstream vera by dejavu sans, as it has replaced the former
    almost everywhere.
  * urxvt will now try tic -x first and only fall back to tic without -x
    when tic -x fails.
  * fix urclock not erasing the old date on the clock face, causing
    overdraw, plus a host of other small fixes and improvements.
  * shave off over 1K of code size from urclock by replacing the sine table
    with a slightly less accurate fixed point approximation.
  * do not specify indentation with =over in pod, this is no longer
    needed with semi-modern pod tools and gives the formatter more
    stylistic freedom.
  * background extension did not set the "size-sensitive" flag
    when repeat mode wasn't normal.
  * extensions are now subjected to "use strict 'subs'".
  * avoid crashing when xft successfully opens a font but then somehow
    can't lock the face.
  * locale_decode/encode api methods now pass through undef unchanged.
  * fix undefined behaviour in the perl hook function, as diagnosed by clang.
- Drop obsoleted patch:
  perl-avoiding-recursive-loading.patch
- Refreshed patches:
  rxvt-unicode-secondarywheel.patch
  handle-new-tic-and-dont-install-terminfo.patch</changelog>
</package>
<package pkgid="9120a52d31ea9fb342a8727398d453b59ed324b8c962974faa4c0e8197b5dd70" name="rxvt-unicode" arch="s390x">
  <version epoch="0" ver="9.30" rel="bp154.2.6.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1414929600">- Switch to individual pkgconfig() build requires
  instead of using metapackage xorg-x11-devel</changelog>
  <changelog author="mrueckert@suse.de" date="1434369600">- sync categories in desktop files with xterm</changelog>
  <changelog author="mimi.vx@gmail.com" date="1434628800">- update to 9.21
  - fix pixel droppings on overdraw when a secondary core font has the
    same height but different ascent.
  - implement cvvis in terminfo as blinking cursor, to distinguish it
    from cnorm (emacs uses cvvis which is commonly a blinking cursor).
  - when xft support was compiled in, colour queries erroneously returned
    premultiplied values, this also affected internal queries, for example
    when calculating faded colour. alpha is now divided out when possible,
    which is more correct but loses colour resolution.
  - add DECSCUSR xterm extension to set the cursor to a vertical bar.
  - add 'extension:string' action, and associated on_action perl
    hook, for keysym resources that invokes actions provided by
    perl extensions. The 'perl:string' action and
    on_user_command hook are deprecated but still supported.
  - add 'builtin-string' action for keysym resources that restores string
    mappings for keys that have predefined actions in urxvt.
  - add -k option to urxvtc for killing the daemon process.
  - document urxvtd's -e/--eval option that was implemented in 9.16,
    but not documented.
  - add -dockapp option to make the wm treat urxvt as a dockapp.
  - add -mc option and multiClickTime resource to set the maximum time
    between multi-click select events (patch by Joe Peterson).
  - new 'eval' extension to evaluate arbitrary perl code with keysym
    bindings. The extension also provides methods that implement basic
    actions, such as pasting selections and scrolling.
  - the macosx-clipboard and macosx-clipboard-native extensions have been removed.
  - kuake extension now uses the kuake.hotkey resource to specify the hotkey.
  - new 'matcher:select' mode of matcher to iterate over the matches with the keyboard.
  - the 'matcher:list' feature of matcher now honours the launcher
    associated to a matched pattern.
  - speed-up matcher underlining on very long lines (reported by Edward Z. Yang).
  - fix up/down commands of searchable-scrollback so that they always move
    to the previous/next logical line with a match, if any.
  - searchable-scrollback resource has been deprecated (use keysym instead).
  - extension parameter passing is deprecated (use resource mechanism instead).
  - upgrade to GPLv3 (see COPYING).
  - compile out of the box on Solaris 10, again.
  - fix height and position of the stippled area in next scrollbar (patch
    by Thomas Otto).
  - fix off-by-one bug causing the iso14755 window not to jump out of the
    way properly.
  - fix crash that may happen if a lib to which urxvt is linked to calls setenv.
  - fix memory leak in special_{encode,decode} perl methods.
  - fix refresh bug that occurs when reverse video is set on a cell
    containing a space and with the same bg and fg colour, red hat bug
    [#830236].
  - fix crash that may happen if an x error is received after a terminal
    window/popup has been destroyed already.
  - removed superfluous 0 digit from sgr terminfo sequence.
  - greatly improve colour allocation on colour-starved pseudocolour
    displays to avoid read-write cells instead of simply failing
    (this is only relevant for antique 8bpp frame buffers).
  - do not free fade colours when not doing fading (this is likely
    only relevant for antique 8bpp frame buffers).
  - do not specialcase 2 or 4 colour visuals, leading to
    simpler and actually more correct code.
  - hopefully no longer leak colours on !truecolour visuals.
  - use consistent method names (scr_recolour =&gt; scr_recolor).
  - use simpler (but slightly less bogus) formula for nearest
    colour choice (this is likely only relevant for antique 8bpp
    frame buffers).
  - remove fallback behaviour when initialising colours - the
    behaviour was inconsistent between startup vs. later and
    was only effective when valid colours couldn't be allocated.
  * add rxvt-unicode-9.21-xsubpp.patch to correct wrong harcoded patch in makefile
  * add rxvt-unicode-0001-Prefer-XDG_RUNTIME_DIR-over-the-HOME.patch
  * removed unused rxvt-unicode-remove_unused_attribute.patch</changelog>
  <changelog author="meissner@suse.com" date="1435060800">- %clean section removed, moved makeinstall to %install</changelog>
  <changelog author="mimi.vx@gmail.com" date="1435060801">- remove %{_terminfo}/r/rxvt-unicode</changelog>
  <changelog author="meissner@suse.com" date="1435147200">- install COPYING</changelog>
  <changelog author="mrueckert@suse.de" date="1437134400">- move requires for the terminfo files from terminfo to
  terminfo-base (boo #936332)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1478520000">- update to 9.22
  - NOTICE: this release updates terminfo.
  - add terminfo capabilities for various ctrl and shift-ctrl key variants
  - fix longstanding core font encoding bug where some character
    ranges could not be mapped from unicode to the font: affected
    encodings are big5, gb2312, iso8859-8 (hebrew), jis0201 and
    ksc5601 .
  - fix crash when the number of columns is 1 and a 0 width character is inserted
  - fix a crash when parsing an invalid color specification
  - fix a buffer overflow in font name parser
  - do not start blinking cursor if the window is unfocused
  - change the width of underline and i-beam cursor to 2 pixels (based on
  a patch by Omar Sandoval).
  - add pointerShape resource to change the mouse pointer shape
  - a keysym resource for a key which is already bound to an
  action now properly rebinds the key.
  - do not report mouse motion events if Shift is active
  - put the alpha component last in responses to OSC color queries
  - the key_press hook is now invoked before processing the
  event, as documented. This change was done in 9.21 but not
  announced and fixes debian bugs #511377, #531751 and red hat
  bug #1105069. Note that this change breaks a few scripts,
  such as mark-yank-urls, which rely on the previous buggy
  behaviour that urxvt processes the event (in particular
  keysym bindings) before invoking the hook.
  - the tabbed extension now properly refreshes the active tab
  on a key press when the mouse pointer is outside the terminal
  window.
  - add 'lookup_keysym' perl method to lookup the action bound
  to a key combination.
  - a key combination bound to 'matcher:select' can now be used
  to cycle through the matches in matcher.
  - change perl integer accessors (-&gt;width et al.) into mutators.</changelog>
  <changelog author="mrueckert@suse.de" date="1496232000">- added rxvt-unicode-hardening.patch: (boo# 1036456)
  While urxvt is not directly affected by CVE-2017-7483. We add a
  patch to harden urxvt to avoid similar bugs in the future.</changelog>
  <changelog author="glin@suse.com" date="1522843200">- added rxvt-unicode-secondarywheel.patch from to add the new
  option: secondaryWheel to enable mouse scrolling for the pagers,
  e.g. less, man, vim, etc.</changelog>
  <changelog author="Marcus H&#xFC;we &lt;suse-tux@gmx.de&gt;" date="1606392000">- add rxvt-unicode-9.22-perl_environ_segfault.patch to avoid a
  segfault when closing urxvt</changelog>
  <changelog author="Avindra Goolcharan &lt;avindra@opensuse.org&gt;" date="1610452800">- fix build error (pass -D to "install")
- fix one  W: rpm-buildroot-usage
- ran spec-cleaner and tidy
- format rxvt-unicode-9.20-CVE-2008-1142-DISPLAY.patch for autosetup
- format rxvt-unicode-9.22-perl_environ_segfault.patch for autosetup</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1612872000">- restore the -256color binaries</changelog>
  <changelog author="Petr Vorel &lt;pvorel@suse.cz&gt;" date="1621252800">- Update to 9.26
  - ev_iouring.c was wrongly required during compilation, and wrongly
    not packaged.
- Update to 9.25 (boo#1186174 CVE-2021-33477)
  - for the 17.5th anniversary, and because many distributions seem to
    remove rxvt in favour of urxvt, this release resurrects rclock as
    urclock.
  - add support for systemd socket-based activation - debian bug #917105,
  freebsd bug #234276.
  - do not destruct perl on exit anymore: this might fail for a variety of
    reasons, and takes unneccessary time.
  - remove any macros from urxvtperl manpage(s), should fix debian
    bug 858385.
  - the old bg image resources are now provided by the background
  extension, and perl is thus required for bg image support. No
  configuration change is needed: urxvt autoloads the background
  ext if any bg image resource/option is present (for OSC sequences to
    work you need to enable it explicity). The old bg image
  resources are also now deprecated; users are encouraged to
  switch to the new bg image interface (see man urxvt-background).
  - confirm-paste now checks for any ctlchars, not just newlines.
  - searchable scrollback will now ignore bracketed paste mode sequences
    (prompted by Daniel Gröber's patch).
  - drop ISO 2022 locale support. ISO 2022 encodings are not supported in
    POSIX locales and clash with vt100 charset emulation (the luit
    program can be used as a substitute).
  - perl didn't parse rgba colours specified as an array correctly,
    only allowing 0 and 100% intensity for each component (this affected
    fill and tint).
  - when iterating over resources, urxvt will now try to properly handle
    multipart resources (such as "*background.expr"), for the benefit
    of autoloading perl extensions.
  - ESC G (query rxvt graphics mode) has been disabled due to security
    implications. The rxvt graphics mode was removed in rxvt-unicode 1.5,
    and no programs relying on being able to query the mode are known.
  - work around API change breakage in perl 5.28, based on a patch by
    Roman Bogorodskiy.
  - improved security: rob nation's (obsolete) graphics mode queries
    no longer reply with linefeed in secure/default mode.
  - ISO 8613-3 direct colour SGR sequences (patch by Fengguang Wu).
  - xterm focus reporting mode (patch by Daniel Hahler).
  - xterm SGR mouse mode.
  - implement DECRQM. Patch by P?emysl Eric Janouch.
  - add missing color index parameter to OSC 4 response. Patch
  by P?emysl Eric Janouch.
  - in some window managers, if smart resize was enabled, urxvt
  erroneously moved the window on font change - awesome bug
  [#532], arch linux bug ##34807 (patch by Uli Schlachter).
  - fix urxvtd crash when using a background expression.
  - properly restore colors when using fading and reverse video
  is enabled while urxvt is focused and then disabled while it
  is not focused, or vice versa (patch by Daniel Hahler).
  - fix high memory usage when an extension repeatedly hides and
  shows an overlay (reported by Marcel Lautenbach).
  - expose priv_modes member and constants to perl extensions
    (patch by Rastislav Barlik).
  - fix a whole slew of const sillyness, unfortunately forced upon
    us by ISO C++.
  - update to libecb 0x00010006.
  - disable all thread support in ecb.h as we presumably don't need it.
  - slightly improve Makefile source dependencies.
  - work around bugs in newer Pod::Xhtml versions (flags incorrect formatting codes
    in xhtml/html sections but does not interpret correct ones).
- New file: /usr/bin/urclock
- Add BuildRequires: pkgconfig(xt)
- Remove rxvt-unicode-9.22-perl_environ_segfault.patch (accepted upstream)
- Refresh patches:
  - rxvt-unicode-hardening.patch,
  - rxvt-unicode-9.21-xsubpp.patch
  - rxvt-unicode-9.20-CVE-2008-1142-DISPLAY.patch</changelog>
  <changelog author="Petr Vorel &lt;pvorel@suse.cz&gt;" date="1621944000">- Backport patch from upstream: perl-avoiding-recursive-loading.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1626868800">- added handle-new-tic-and-dont-install-terminfo.patch:
  This fixes the build failure on TW. We actually do not care about
  the generated terminfo file it comes from a different package
  anyway</changelog>
  <changelog author="tiwai@suse.de" date="1643371200">- Update to version 9.30:
  * the background extension did not initialise properly when automatically
    loaded via the OSC.
  * new "on_attach" hook type implemented, to initialise late-loading
    extensions.
- Update to version 9.29:
  * libptytty (http://dist.schmorp.de/libptytty/) is now a required
    external dependency.
  * enable confirm-paste extension by default, can be disabled by e.g.
    URxvt.perl-ext: -confirm-paste
  * Key bindings specified with the -keysym option or with resources of
    the form URxvt*keysym work again. Such resources, as opposed to
  * resources of the form URxvt.keysym, were not officially allowed but
    accepted, so ignoring them is considered a regression.
  * new option/resource -rm/rewrapMode, which sets the line rewrap
    mode to auto, never or always.
  * new option/resource -dpb/disablePasteBrackets, which can be used to
    disable bracketed paste mode sequences, as more and more programs
  * abuse these sequences (typically in the name of security, but these
    sequences are not improving security). Also, bracketed paste mode
    is now under frills.
  * add manpage for urclock.
  * confirm-paste wrongly considered brackets as ctrlchars (patch by
    Jakub Wilk, debian bug #995244).
  * if urxvt cannot detect a good estimate for font width (because a font does
    not contain latin characters at all for example), it will now fall
    back to xft's max_advance_width, which works well with some fonts. It
    currently will warn about this.
  * do not render variation selectors in the default font as boxes, treat
    them as zero-width characters.
  * change combining character architecture to allow fonts to handle
    combining sequences on their own. This could allow future renderers
    to be more intelligent about these sequences.
  * use the previous enhancement to allow unicode characters outside of the
    BMP to be rendered even without --enable-unicode3, as long as an
    xft with the character is configured.
  * It's recommended to stay with disabled unicode3 even more now.
  * freetype/xft have been verified to return nonsensical offsets for
    combining characters. urxvt tries to compensate to some extent,
    but diacritics will be slightly off in many cases, and far off in
    some cases (e.g. input mono).
  * when checking for overlap/careful handling, take non-basefont
    character shifts into account.
  * extensions can now request autoloading on OSC and Perl OSC sequences,
    implement this for the background, clipboard-osc and overlay-osc
    extensions.
  * the background extension will now be autoloaded when the OSC 20 or 705
    sequence is received.
  * added OSC 776 sequence to return character cell width, height and font
    ascent, which is useful when using urxvt as slave to calculate window
    size form or to row/column count.
  * matcher extension documentation now points out some requirements for
    regular expressions. the default url matching regex will now try
    to match IRLs in addition to URLs.
  * The view_start perl method now scrolls to the bottom also when the
    argument is greater than 0.
  * eval scroll actions now scroll to the bottom when scrolling down and
    there are less lines to scroll than the ones requested (reported by
    Stephen Talley).
  * allow perl-ext and perl-ext-common to override autoloaded extensions.
    this allows tabbed to disable itself in subtabs, avoiding recursive
    loading.
  * update precompose table to unicode 13.0.
  * update charset conversion tables to perl 5.32 (this only affected
    cs_koi8_u_from_unicode).
  * unicode characters &gt; 0x100000 were not handled correctly w.r.t.
    font rendering.
  * replace bitstream vera by dejavu sans, as it has replaced the former
    almost everywhere.
  * urxvt will now try tic -x first and only fall back to tic without -x
    when tic -x fails.
  * fix urclock not erasing the old date on the clock face, causing
    overdraw, plus a host of other small fixes and improvements.
  * shave off over 1K of code size from urclock by replacing the sine table
    with a slightly less accurate fixed point approximation.
  * do not specify indentation with =over in pod, this is no longer
    needed with semi-modern pod tools and gives the formatter more
    stylistic freedom.
  * background extension did not set the "size-sensitive" flag
    when repeat mode wasn't normal.
  * extensions are now subjected to "use strict 'subs'".
  * avoid crashing when xft successfully opens a font but then somehow
    can't lock the face.
  * locale_decode/encode api methods now pass through undef unchanged.
  * fix undefined behaviour in the perl hook function, as diagnosed by clang.
- Drop obsoleted patch:
  perl-avoiding-recursive-loading.patch
- Refreshed patches:
  rxvt-unicode-secondarywheel.patch
  handle-new-tic-and-dont-install-terminfo.patch</changelog>
</package>
<package pkgid="5e70d2d16e033be121408319cb079b9f389f1db79ad6daadb8b5c60adf6186c6" name="rxvt-unicode" arch="src">
  <version epoch="0" ver="9.30" rel="bp154.2.6.1"/>
  <changelog author="dhall@wustl.edu" date="1386331200">- added background perl module to files packaged</changelog>
  <changelog author="dhall@wustl.edu" date="1386331201">- Add rxvt-return-in-nonvoid-function.patch: removes build failure
  from not returning from nonvoid function
- rename README.SuSE to README.SUSE for rpmlint</changelog>
  <changelog author="mrueckert@suse.de" date="1402401600">- update to 9.20 (bnc#876101 CVE-2014-3121)
  - (libptytty) fix bug that prevented urxvtd from writing utmp
    entries when using --fork (reported by Ryan Kavanagh).
  - security bugfix: window property values could be queried even
    in secure mode (reported by Phillip Hallam-Baker).
  - fix build when perl is enabled and fading is disabled.
  - fix regression that broke continuous scrolling when pressing
    and holding the scrollbar up or down button, gentoo bug
    [#493992].
  - increase the maximum length of a command sequence to 32k bytes,
    to allow longer OSC sequences (previous limit was 2k).
  - new Ctrl-Meta-c and Ctrl-Meta-v bindings to interact with the
    CLIPBOARD selection.
  - new extension: selection-to-clipboard.
  - the extensions macosx-clipboard and macosx-clipboard-native are
    deprecated and will be removed in the next release.  Support
    for the clipboard on OS X can be more generally enabled by
    setting the XQuartz preference to sync the OS X pasteboard
    and the X11 clipboard.
- dropped rxvt-return-in-nonvoid-function.patch included upstream
- refreshed patches:
  old name: rxvt-unicode-9.14-CVE-2008-1142-DISPLAY.patch
  new name: rxvt-unicode-9.20-CVE-2008-1142-DISPLAY.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1414929600">- Switch to individual pkgconfig() build requires
  instead of using metapackage xorg-x11-devel</changelog>
  <changelog author="mrueckert@suse.de" date="1434369600">- sync categories in desktop files with xterm</changelog>
  <changelog author="mimi.vx@gmail.com" date="1434628800">- update to 9.21
  - fix pixel droppings on overdraw when a secondary core font has the
    same height but different ascent.
  - implement cvvis in terminfo as blinking cursor, to distinguish it
    from cnorm (emacs uses cvvis which is commonly a blinking cursor).
  - when xft support was compiled in, colour queries erroneously returned
    premultiplied values, this also affected internal queries, for example
    when calculating faded colour. alpha is now divided out when possible,
    which is more correct but loses colour resolution.
  - add DECSCUSR xterm extension to set the cursor to a vertical bar.
  - add 'extension:string' action, and associated on_action perl
    hook, for keysym resources that invokes actions provided by
    perl extensions. The 'perl:string' action and
    on_user_command hook are deprecated but still supported.
  - add 'builtin-string' action for keysym resources that restores string
    mappings for keys that have predefined actions in urxvt.
  - add -k option to urxvtc for killing the daemon process.
  - document urxvtd's -e/--eval option that was implemented in 9.16,
    but not documented.
  - add -dockapp option to make the wm treat urxvt as a dockapp.
  - add -mc option and multiClickTime resource to set the maximum time
    between multi-click select events (patch by Joe Peterson).
  - new 'eval' extension to evaluate arbitrary perl code with keysym
    bindings. The extension also provides methods that implement basic
    actions, such as pasting selections and scrolling.
  - the macosx-clipboard and macosx-clipboard-native extensions have been removed.
  - kuake extension now uses the kuake.hotkey resource to specify the hotkey.
  - new 'matcher:select' mode of matcher to iterate over the matches with the keyboard.
  - the 'matcher:list' feature of matcher now honours the launcher
    associated to a matched pattern.
  - speed-up matcher underlining on very long lines (reported by Edward Z. Yang).
  - fix up/down commands of searchable-scrollback so that they always move
    to the previous/next logical line with a match, if any.
  - searchable-scrollback resource has been deprecated (use keysym instead).
  - extension parameter passing is deprecated (use resource mechanism instead).
  - upgrade to GPLv3 (see COPYING).
  - compile out of the box on Solaris 10, again.
  - fix height and position of the stippled area in next scrollbar (patch
    by Thomas Otto).
  - fix off-by-one bug causing the iso14755 window not to jump out of the
    way properly.
  - fix crash that may happen if a lib to which urxvt is linked to calls setenv.
  - fix memory leak in special_{encode,decode} perl methods.
  - fix refresh bug that occurs when reverse video is set on a cell
    containing a space and with the same bg and fg colour, red hat bug
    [#830236].
  - fix crash that may happen if an x error is received after a terminal
    window/popup has been destroyed already.
  - removed superfluous 0 digit from sgr terminfo sequence.
  - greatly improve colour allocation on colour-starved pseudocolour
    displays to avoid read-write cells instead of simply failing
    (this is only relevant for antique 8bpp frame buffers).
  - do not free fade colours when not doing fading (this is likely
    only relevant for antique 8bpp frame buffers).
  - do not specialcase 2 or 4 colour visuals, leading to
    simpler and actually more correct code.
  - hopefully no longer leak colours on !truecolour visuals.
  - use consistent method names (scr_recolour =&gt; scr_recolor).
  - use simpler (but slightly less bogus) formula for nearest
    colour choice (this is likely only relevant for antique 8bpp
    frame buffers).
  - remove fallback behaviour when initialising colours - the
    behaviour was inconsistent between startup vs. later and
    was only effective when valid colours couldn't be allocated.
  * add rxvt-unicode-9.21-xsubpp.patch to correct wrong harcoded patch in makefile
  * add rxvt-unicode-0001-Prefer-XDG_RUNTIME_DIR-over-the-HOME.patch
  * removed unused rxvt-unicode-remove_unused_attribute.patch</changelog>
  <changelog author="meissner@suse.com" date="1435060800">- %clean section removed, moved makeinstall to %install</changelog>
  <changelog author="mimi.vx@gmail.com" date="1435060801">- remove %{_terminfo}/r/rxvt-unicode</changelog>
  <changelog author="meissner@suse.com" date="1435147200">- install COPYING</changelog>
  <changelog author="mrueckert@suse.de" date="1437134400">- move requires for the terminfo files from terminfo to
  terminfo-base (boo #936332)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1478520000">- update to 9.22
  - NOTICE: this release updates terminfo.
  - add terminfo capabilities for various ctrl and shift-ctrl key variants
  - fix longstanding core font encoding bug where some character
    ranges could not be mapped from unicode to the font: affected
    encodings are big5, gb2312, iso8859-8 (hebrew), jis0201 and
    ksc5601 .
  - fix crash when the number of columns is 1 and a 0 width character is inserted
  - fix a crash when parsing an invalid color specification
  - fix a buffer overflow in font name parser
  - do not start blinking cursor if the window is unfocused
  - change the width of underline and i-beam cursor to 2 pixels (based on
  a patch by Omar Sandoval).
  - add pointerShape resource to change the mouse pointer shape
  - a keysym resource for a key which is already bound to an
  action now properly rebinds the key.
  - do not report mouse motion events if Shift is active
  - put the alpha component last in responses to OSC color queries
  - the key_press hook is now invoked before processing the
  event, as documented. This change was done in 9.21 but not
  announced and fixes debian bugs #511377, #531751 and red hat
  bug #1105069. Note that this change breaks a few scripts,
  such as mark-yank-urls, which rely on the previous buggy
  behaviour that urxvt processes the event (in particular
  keysym bindings) before invoking the hook.
  - the tabbed extension now properly refreshes the active tab
  on a key press when the mouse pointer is outside the terminal
  window.
  - add 'lookup_keysym' perl method to lookup the action bound
  to a key combination.
  - a key combination bound to 'matcher:select' can now be used
  to cycle through the matches in matcher.
  - change perl integer accessors (-&gt;width et al.) into mutators.</changelog>
  <changelog author="mrueckert@suse.de" date="1496232000">- added rxvt-unicode-hardening.patch: (boo# 1036456)
  While urxvt is not directly affected by CVE-2017-7483. We add a
  patch to harden urxvt to avoid similar bugs in the future.</changelog>
  <changelog author="glin@suse.com" date="1522843200">- added rxvt-unicode-secondarywheel.patch from to add the new
  option: secondaryWheel to enable mouse scrolling for the pagers,
  e.g. less, man, vim, etc.</changelog>
  <changelog author="Marcus H&#xFC;we &lt;suse-tux@gmx.de&gt;" date="1606392000">- add rxvt-unicode-9.22-perl_environ_segfault.patch to avoid a
  segfault when closing urxvt</changelog>
  <changelog author="Avindra Goolcharan &lt;avindra@opensuse.org&gt;" date="1610452800">- fix build error (pass -D to "install")
- fix one  W: rpm-buildroot-usage
- ran spec-cleaner and tidy
- format rxvt-unicode-9.20-CVE-2008-1142-DISPLAY.patch for autosetup
- format rxvt-unicode-9.22-perl_environ_segfault.patch for autosetup</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1612872000">- restore the -256color binaries</changelog>
  <changelog author="Petr Vorel &lt;pvorel@suse.cz&gt;" date="1621252800">- Update to 9.26
  - ev_iouring.c was wrongly required during compilation, and wrongly
    not packaged.
- Update to 9.25 (boo#1186174 CVE-2021-33477)
  - for the 17.5th anniversary, and because many distributions seem to
    remove rxvt in favour of urxvt, this release resurrects rclock as
    urclock.
  - add support for systemd socket-based activation - debian bug #917105,
  freebsd bug #234276.
  - do not destruct perl on exit anymore: this might fail for a variety of
    reasons, and takes unneccessary time.
  - remove any macros from urxvtperl manpage(s), should fix debian
    bug 858385.
  - the old bg image resources are now provided by the background
  extension, and perl is thus required for bg image support. No
  configuration change is needed: urxvt autoloads the background
  ext if any bg image resource/option is present (for OSC sequences to
    work you need to enable it explicity). The old bg image
  resources are also now deprecated; users are encouraged to
  switch to the new bg image interface (see man urxvt-background).
  - confirm-paste now checks for any ctlchars, not just newlines.
  - searchable scrollback will now ignore bracketed paste mode sequences
    (prompted by Daniel Gröber's patch).
  - drop ISO 2022 locale support. ISO 2022 encodings are not supported in
    POSIX locales and clash with vt100 charset emulation (the luit
    program can be used as a substitute).
  - perl didn't parse rgba colours specified as an array correctly,
    only allowing 0 and 100% intensity for each component (this affected
    fill and tint).
  - when iterating over resources, urxvt will now try to properly handle
    multipart resources (such as "*background.expr"), for the benefit
    of autoloading perl extensions.
  - ESC G (query rxvt graphics mode) has been disabled due to security
    implications. The rxvt graphics mode was removed in rxvt-unicode 1.5,
    and no programs relying on being able to query the mode are known.
  - work around API change breakage in perl 5.28, based on a patch by
    Roman Bogorodskiy.
  - improved security: rob nation's (obsolete) graphics mode queries
    no longer reply with linefeed in secure/default mode.
  - ISO 8613-3 direct colour SGR sequences (patch by Fengguang Wu).
  - xterm focus reporting mode (patch by Daniel Hahler).
  - xterm SGR mouse mode.
  - implement DECRQM. Patch by P?emysl Eric Janouch.
  - add missing color index parameter to OSC 4 response. Patch
  by P?emysl Eric Janouch.
  - in some window managers, if smart resize was enabled, urxvt
  erroneously moved the window on font change - awesome bug
  [#532], arch linux bug ##34807 (patch by Uli Schlachter).
  - fix urxvtd crash when using a background expression.
  - properly restore colors when using fading and reverse video
  is enabled while urxvt is focused and then disabled while it
  is not focused, or vice versa (patch by Daniel Hahler).
  - fix high memory usage when an extension repeatedly hides and
  shows an overlay (reported by Marcel Lautenbach).
  - expose priv_modes member and constants to perl extensions
    (patch by Rastislav Barlik).
  - fix a whole slew of const sillyness, unfortunately forced upon
    us by ISO C++.
  - update to libecb 0x00010006.
  - disable all thread support in ecb.h as we presumably don't need it.
  - slightly improve Makefile source dependencies.
  - work around bugs in newer Pod::Xhtml versions (flags incorrect formatting codes
    in xhtml/html sections but does not interpret correct ones).
- New file: /usr/bin/urclock
- Add BuildRequires: pkgconfig(xt)
- Remove rxvt-unicode-9.22-perl_environ_segfault.patch (accepted upstream)
- Refresh patches:
  - rxvt-unicode-hardening.patch,
  - rxvt-unicode-9.21-xsubpp.patch
  - rxvt-unicode-9.20-CVE-2008-1142-DISPLAY.patch</changelog>
  <changelog author="Petr Vorel &lt;pvorel@suse.cz&gt;" date="1621944000">- Backport patch from upstream: perl-avoiding-recursive-loading.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1626868800">- added handle-new-tic-and-dont-install-terminfo.patch:
  This fixes the build failure on TW. We actually do not care about
  the generated terminfo file it comes from a different package
  anyway</changelog>
  <changelog author="tiwai@suse.de" date="1643371200">- Update to version 9.30:
  * the background extension did not initialise properly when automatically
    loaded via the OSC.
  * new "on_attach" hook type implemented, to initialise late-loading
    extensions.
- Update to version 9.29:
  * libptytty (http://dist.schmorp.de/libptytty/) is now a required
    external dependency.
  * enable confirm-paste extension by default, can be disabled by e.g.
    URxvt.perl-ext: -confirm-paste
  * Key bindings specified with the -keysym option or with resources of
    the form URxvt*keysym work again. Such resources, as opposed to
  * resources of the form URxvt.keysym, were not officially allowed but
    accepted, so ignoring them is considered a regression.
  * new option/resource -rm/rewrapMode, which sets the line rewrap
    mode to auto, never or always.
  * new option/resource -dpb/disablePasteBrackets, which can be used to
    disable bracketed paste mode sequences, as more and more programs
  * abuse these sequences (typically in the name of security, but these
    sequences are not improving security). Also, bracketed paste mode
    is now under frills.
  * add manpage for urclock.
  * confirm-paste wrongly considered brackets as ctrlchars (patch by
    Jakub Wilk, debian bug #995244).
  * if urxvt cannot detect a good estimate for font width (because a font does
    not contain latin characters at all for example), it will now fall
    back to xft's max_advance_width, which works well with some fonts. It
    currently will warn about this.
  * do not render variation selectors in the default font as boxes, treat
    them as zero-width characters.
  * change combining character architecture to allow fonts to handle
    combining sequences on their own. This could allow future renderers
    to be more intelligent about these sequences.
  * use the previous enhancement to allow unicode characters outside of the
    BMP to be rendered even without --enable-unicode3, as long as an
    xft with the character is configured.
  * It's recommended to stay with disabled unicode3 even more now.
  * freetype/xft have been verified to return nonsensical offsets for
    combining characters. urxvt tries to compensate to some extent,
    but diacritics will be slightly off in many cases, and far off in
    some cases (e.g. input mono).
  * when checking for overlap/careful handling, take non-basefont
    character shifts into account.
  * extensions can now request autoloading on OSC and Perl OSC sequences,
    implement this for the background, clipboard-osc and overlay-osc
    extensions.
  * the background extension will now be autoloaded when the OSC 20 or 705
    sequence is received.
  * added OSC 776 sequence to return character cell width, height and font
    ascent, which is useful when using urxvt as slave to calculate window
    size form or to row/column count.
  * matcher extension documentation now points out some requirements for
    regular expressions. the default url matching regex will now try
    to match IRLs in addition to URLs.
  * The view_start perl method now scrolls to the bottom also when the
    argument is greater than 0.
  * eval scroll actions now scroll to the bottom when scrolling down and
    there are less lines to scroll than the ones requested (reported by
    Stephen Talley).
  * allow perl-ext and perl-ext-common to override autoloaded extensions.
    this allows tabbed to disable itself in subtabs, avoiding recursive
    loading.
  * update precompose table to unicode 13.0.
  * update charset conversion tables to perl 5.32 (this only affected
    cs_koi8_u_from_unicode).
  * unicode characters &gt; 0x100000 were not handled correctly w.r.t.
    font rendering.
  * replace bitstream vera by dejavu sans, as it has replaced the former
    almost everywhere.
  * urxvt will now try tic -x first and only fall back to tic without -x
    when tic -x fails.
  * fix urclock not erasing the old date on the clock face, causing
    overdraw, plus a host of other small fixes and improvements.
  * shave off over 1K of code size from urclock by replacing the sine table
    with a slightly less accurate fixed point approximation.
  * do not specify indentation with =over in pod, this is no longer
    needed with semi-modern pod tools and gives the formatter more
    stylistic freedom.
  * background extension did not set the "size-sensitive" flag
    when repeat mode wasn't normal.
  * extensions are now subjected to "use strict 'subs'".
  * avoid crashing when xft successfully opens a font but then somehow
    can't lock the face.
  * locale_decode/encode api methods now pass through undef unchanged.
  * fix undefined behaviour in the perl hook function, as diagnosed by clang.
- Drop obsoleted patch:
  perl-avoiding-recursive-loading.patch
- Refreshed patches:
  rxvt-unicode-secondarywheel.patch
  handle-new-tic-and-dont-install-terminfo.patch</changelog>
</package>
<package pkgid="b70d991999697be48b0e74a9ff05eb99c19cdcc5fdcc78b61b54c1ab52a6bcbf" name="rxvt-unicode" arch="x86_64">
  <version epoch="0" ver="9.30" rel="bp154.2.6.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1414929600">- Switch to individual pkgconfig() build requires
  instead of using metapackage xorg-x11-devel</changelog>
  <changelog author="mrueckert@suse.de" date="1434369600">- sync categories in desktop files with xterm</changelog>
  <changelog author="mimi.vx@gmail.com" date="1434628800">- update to 9.21
  - fix pixel droppings on overdraw when a secondary core font has the
    same height but different ascent.
  - implement cvvis in terminfo as blinking cursor, to distinguish it
    from cnorm (emacs uses cvvis which is commonly a blinking cursor).
  - when xft support was compiled in, colour queries erroneously returned
    premultiplied values, this also affected internal queries, for example
    when calculating faded colour. alpha is now divided out when possible,
    which is more correct but loses colour resolution.
  - add DECSCUSR xterm extension to set the cursor to a vertical bar.
  - add 'extension:string' action, and associated on_action perl
    hook, for keysym resources that invokes actions provided by
    perl extensions. The 'perl:string' action and
    on_user_command hook are deprecated but still supported.
  - add 'builtin-string' action for keysym resources that restores string
    mappings for keys that have predefined actions in urxvt.
  - add -k option to urxvtc for killing the daemon process.
  - document urxvtd's -e/--eval option that was implemented in 9.16,
    but not documented.
  - add -dockapp option to make the wm treat urxvt as a dockapp.
  - add -mc option and multiClickTime resource to set the maximum time
    between multi-click select events (patch by Joe Peterson).
  - new 'eval' extension to evaluate arbitrary perl code with keysym
    bindings. The extension also provides methods that implement basic
    actions, such as pasting selections and scrolling.
  - the macosx-clipboard and macosx-clipboard-native extensions have been removed.
  - kuake extension now uses the kuake.hotkey resource to specify the hotkey.
  - new 'matcher:select' mode of matcher to iterate over the matches with the keyboard.
  - the 'matcher:list' feature of matcher now honours the launcher
    associated to a matched pattern.
  - speed-up matcher underlining on very long lines (reported by Edward Z. Yang).
  - fix up/down commands of searchable-scrollback so that they always move
    to the previous/next logical line with a match, if any.
  - searchable-scrollback resource has been deprecated (use keysym instead).
  - extension parameter passing is deprecated (use resource mechanism instead).
  - upgrade to GPLv3 (see COPYING).
  - compile out of the box on Solaris 10, again.
  - fix height and position of the stippled area in next scrollbar (patch
    by Thomas Otto).
  - fix off-by-one bug causing the iso14755 window not to jump out of the
    way properly.
  - fix crash that may happen if a lib to which urxvt is linked to calls setenv.
  - fix memory leak in special_{encode,decode} perl methods.
  - fix refresh bug that occurs when reverse video is set on a cell
    containing a space and with the same bg and fg colour, red hat bug
    [#830236].
  - fix crash that may happen if an x error is received after a terminal
    window/popup has been destroyed already.
  - removed superfluous 0 digit from sgr terminfo sequence.
  - greatly improve colour allocation on colour-starved pseudocolour
    displays to avoid read-write cells instead of simply failing
    (this is only relevant for antique 8bpp frame buffers).
  - do not free fade colours when not doing fading (this is likely
    only relevant for antique 8bpp frame buffers).
  - do not specialcase 2 or 4 colour visuals, leading to
    simpler and actually more correct code.
  - hopefully no longer leak colours on !truecolour visuals.
  - use consistent method names (scr_recolour =&gt; scr_recolor).
  - use simpler (but slightly less bogus) formula for nearest
    colour choice (this is likely only relevant for antique 8bpp
    frame buffers).
  - remove fallback behaviour when initialising colours - the
    behaviour was inconsistent between startup vs. later and
    was only effective when valid colours couldn't be allocated.
  * add rxvt-unicode-9.21-xsubpp.patch to correct wrong harcoded patch in makefile
  * add rxvt-unicode-0001-Prefer-XDG_RUNTIME_DIR-over-the-HOME.patch
  * removed unused rxvt-unicode-remove_unused_attribute.patch</changelog>
  <changelog author="meissner@suse.com" date="1435060800">- %clean section removed, moved makeinstall to %install</changelog>
  <changelog author="mimi.vx@gmail.com" date="1435060801">- remove %{_terminfo}/r/rxvt-unicode</changelog>
  <changelog author="meissner@suse.com" date="1435147200">- install COPYING</changelog>
  <changelog author="mrueckert@suse.de" date="1437134400">- move requires for the terminfo files from terminfo to
  terminfo-base (boo #936332)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1478520000">- update to 9.22
  - NOTICE: this release updates terminfo.
  - add terminfo capabilities for various ctrl and shift-ctrl key variants
  - fix longstanding core font encoding bug where some character
    ranges could not be mapped from unicode to the font: affected
    encodings are big5, gb2312, iso8859-8 (hebrew), jis0201 and
    ksc5601 .
  - fix crash when the number of columns is 1 and a 0 width character is inserted
  - fix a crash when parsing an invalid color specification
  - fix a buffer overflow in font name parser
  - do not start blinking cursor if the window is unfocused
  - change the width of underline and i-beam cursor to 2 pixels (based on
  a patch by Omar Sandoval).
  - add pointerShape resource to change the mouse pointer shape
  - a keysym resource for a key which is already bound to an
  action now properly rebinds the key.
  - do not report mouse motion events if Shift is active
  - put the alpha component last in responses to OSC color queries
  - the key_press hook is now invoked before processing the
  event, as documented. This change was done in 9.21 but not
  announced and fixes debian bugs #511377, #531751 and red hat
  bug #1105069. Note that this change breaks a few scripts,
  such as mark-yank-urls, which rely on the previous buggy
  behaviour that urxvt processes the event (in particular
  keysym bindings) before invoking the hook.
  - the tabbed extension now properly refreshes the active tab
  on a key press when the mouse pointer is outside the terminal
  window.
  - add 'lookup_keysym' perl method to lookup the action bound
  to a key combination.
  - a key combination bound to 'matcher:select' can now be used
  to cycle through the matches in matcher.
  - change perl integer accessors (-&gt;width et al.) into mutators.</changelog>
  <changelog author="mrueckert@suse.de" date="1496232000">- added rxvt-unicode-hardening.patch: (boo# 1036456)
  While urxvt is not directly affected by CVE-2017-7483. We add a
  patch to harden urxvt to avoid similar bugs in the future.</changelog>
  <changelog author="glin@suse.com" date="1522843200">- added rxvt-unicode-secondarywheel.patch from to add the new
  option: secondaryWheel to enable mouse scrolling for the pagers,
  e.g. less, man, vim, etc.</changelog>
  <changelog author="Marcus H&#xFC;we &lt;suse-tux@gmx.de&gt;" date="1606392000">- add rxvt-unicode-9.22-perl_environ_segfault.patch to avoid a
  segfault when closing urxvt</changelog>
  <changelog author="Avindra Goolcharan &lt;avindra@opensuse.org&gt;" date="1610452800">- fix build error (pass -D to "install")
- fix one  W: rpm-buildroot-usage
- ran spec-cleaner and tidy
- format rxvt-unicode-9.20-CVE-2008-1142-DISPLAY.patch for autosetup
- format rxvt-unicode-9.22-perl_environ_segfault.patch for autosetup</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1612872000">- restore the -256color binaries</changelog>
  <changelog author="Petr Vorel &lt;pvorel@suse.cz&gt;" date="1621252800">- Update to 9.26
  - ev_iouring.c was wrongly required during compilation, and wrongly
    not packaged.
- Update to 9.25 (boo#1186174 CVE-2021-33477)
  - for the 17.5th anniversary, and because many distributions seem to
    remove rxvt in favour of urxvt, this release resurrects rclock as
    urclock.
  - add support for systemd socket-based activation - debian bug #917105,
  freebsd bug #234276.
  - do not destruct perl on exit anymore: this might fail for a variety of
    reasons, and takes unneccessary time.
  - remove any macros from urxvtperl manpage(s), should fix debian
    bug 858385.
  - the old bg image resources are now provided by the background
  extension, and perl is thus required for bg image support. No
  configuration change is needed: urxvt autoloads the background
  ext if any bg image resource/option is present (for OSC sequences to
    work you need to enable it explicity). The old bg image
  resources are also now deprecated; users are encouraged to
  switch to the new bg image interface (see man urxvt-background).
  - confirm-paste now checks for any ctlchars, not just newlines.
  - searchable scrollback will now ignore bracketed paste mode sequences
    (prompted by Daniel Gröber's patch).
  - drop ISO 2022 locale support. ISO 2022 encodings are not supported in
    POSIX locales and clash with vt100 charset emulation (the luit
    program can be used as a substitute).
  - perl didn't parse rgba colours specified as an array correctly,
    only allowing 0 and 100% intensity for each component (this affected
    fill and tint).
  - when iterating over resources, urxvt will now try to properly handle
    multipart resources (such as "*background.expr"), for the benefit
    of autoloading perl extensions.
  - ESC G (query rxvt graphics mode) has been disabled due to security
    implications. The rxvt graphics mode was removed in rxvt-unicode 1.5,
    and no programs relying on being able to query the mode are known.
  - work around API change breakage in perl 5.28, based on a patch by
    Roman Bogorodskiy.
  - improved security: rob nation's (obsolete) graphics mode queries
    no longer reply with linefeed in secure/default mode.
  - ISO 8613-3 direct colour SGR sequences (patch by Fengguang Wu).
  - xterm focus reporting mode (patch by Daniel Hahler).
  - xterm SGR mouse mode.
  - implement DECRQM. Patch by P?emysl Eric Janouch.
  - add missing color index parameter to OSC 4 response. Patch
  by P?emysl Eric Janouch.
  - in some window managers, if smart resize was enabled, urxvt
  erroneously moved the window on font change - awesome bug
  [#532], arch linux bug ##34807 (patch by Uli Schlachter).
  - fix urxvtd crash when using a background expression.
  - properly restore colors when using fading and reverse video
  is enabled while urxvt is focused and then disabled while it
  is not focused, or vice versa (patch by Daniel Hahler).
  - fix high memory usage when an extension repeatedly hides and
  shows an overlay (reported by Marcel Lautenbach).
  - expose priv_modes member and constants to perl extensions
    (patch by Rastislav Barlik).
  - fix a whole slew of const sillyness, unfortunately forced upon
    us by ISO C++.
  - update to libecb 0x00010006.
  - disable all thread support in ecb.h as we presumably don't need it.
  - slightly improve Makefile source dependencies.
  - work around bugs in newer Pod::Xhtml versions (flags incorrect formatting codes
    in xhtml/html sections but does not interpret correct ones).
- New file: /usr/bin/urclock
- Add BuildRequires: pkgconfig(xt)
- Remove rxvt-unicode-9.22-perl_environ_segfault.patch (accepted upstream)
- Refresh patches:
  - rxvt-unicode-hardening.patch,
  - rxvt-unicode-9.21-xsubpp.patch
  - rxvt-unicode-9.20-CVE-2008-1142-DISPLAY.patch</changelog>
  <changelog author="Petr Vorel &lt;pvorel@suse.cz&gt;" date="1621944000">- Backport patch from upstream: perl-avoiding-recursive-loading.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1626868800">- added handle-new-tic-and-dont-install-terminfo.patch:
  This fixes the build failure on TW. We actually do not care about
  the generated terminfo file it comes from a different package
  anyway</changelog>
  <changelog author="tiwai@suse.de" date="1643371200">- Update to version 9.30:
  * the background extension did not initialise properly when automatically
    loaded via the OSC.
  * new "on_attach" hook type implemented, to initialise late-loading
    extensions.
- Update to version 9.29:
  * libptytty (http://dist.schmorp.de/libptytty/) is now a required
    external dependency.
  * enable confirm-paste extension by default, can be disabled by e.g.
    URxvt.perl-ext: -confirm-paste
  * Key bindings specified with the -keysym option or with resources of
    the form URxvt*keysym work again. Such resources, as opposed to
  * resources of the form URxvt.keysym, were not officially allowed but
    accepted, so ignoring them is considered a regression.
  * new option/resource -rm/rewrapMode, which sets the line rewrap
    mode to auto, never or always.
  * new option/resource -dpb/disablePasteBrackets, which can be used to
    disable bracketed paste mode sequences, as more and more programs
  * abuse these sequences (typically in the name of security, but these
    sequences are not improving security). Also, bracketed paste mode
    is now under frills.
  * add manpage for urclock.
  * confirm-paste wrongly considered brackets as ctrlchars (patch by
    Jakub Wilk, debian bug #995244).
  * if urxvt cannot detect a good estimate for font width (because a font does
    not contain latin characters at all for example), it will now fall
    back to xft's max_advance_width, which works well with some fonts. It
    currently will warn about this.
  * do not render variation selectors in the default font as boxes, treat
    them as zero-width characters.
  * change combining character architecture to allow fonts to handle
    combining sequences on their own. This could allow future renderers
    to be more intelligent about these sequences.
  * use the previous enhancement to allow unicode characters outside of the
    BMP to be rendered even without --enable-unicode3, as long as an
    xft with the character is configured.
  * It's recommended to stay with disabled unicode3 even more now.
  * freetype/xft have been verified to return nonsensical offsets for
    combining characters. urxvt tries to compensate to some extent,
    but diacritics will be slightly off in many cases, and far off in
    some cases (e.g. input mono).
  * when checking for overlap/careful handling, take non-basefont
    character shifts into account.
  * extensions can now request autoloading on OSC and Perl OSC sequences,
    implement this for the background, clipboard-osc and overlay-osc
    extensions.
  * the background extension will now be autoloaded when the OSC 20 or 705
    sequence is received.
  * added OSC 776 sequence to return character cell width, height and font
    ascent, which is useful when using urxvt as slave to calculate window
    size form or to row/column count.
  * matcher extension documentation now points out some requirements for
    regular expressions. the default url matching regex will now try
    to match IRLs in addition to URLs.
  * The view_start perl method now scrolls to the bottom also when the
    argument is greater than 0.
  * eval scroll actions now scroll to the bottom when scrolling down and
    there are less lines to scroll than the ones requested (reported by
    Stephen Talley).
  * allow perl-ext and perl-ext-common to override autoloaded extensions.
    this allows tabbed to disable itself in subtabs, avoiding recursive
    loading.
  * update precompose table to unicode 13.0.
  * update charset conversion tables to perl 5.32 (this only affected
    cs_koi8_u_from_unicode).
  * unicode characters &gt; 0x100000 were not handled correctly w.r.t.
    font rendering.
  * replace bitstream vera by dejavu sans, as it has replaced the former
    almost everywhere.
  * urxvt will now try tic -x first and only fall back to tic without -x
    when tic -x fails.
  * fix urclock not erasing the old date on the clock face, causing
    overdraw, plus a host of other small fixes and improvements.
  * shave off over 1K of code size from urclock by replacing the sine table
    with a slightly less accurate fixed point approximation.
  * do not specify indentation with =over in pod, this is no longer
    needed with semi-modern pod tools and gives the formatter more
    stylistic freedom.
  * background extension did not set the "size-sensitive" flag
    when repeat mode wasn't normal.
  * extensions are now subjected to "use strict 'subs'".
  * avoid crashing when xft successfully opens a font but then somehow
    can't lock the face.
  * locale_decode/encode api methods now pass through undef unchanged.
  * fix undefined behaviour in the perl hook function, as diagnosed by clang.
- Drop obsoleted patch:
  perl-avoiding-recursive-loading.patch
- Refreshed patches:
  rxvt-unicode-secondarywheel.patch
  handle-new-tic-and-dont-install-terminfo.patch</changelog>
</package>
<package pkgid="3fad344d0dc24a6ec749c3be45265693f6a263acf1cdddef8405a93082153d9e" name="seamonkey" arch="aarch64">
  <version epoch="0" ver="2.53.13" rel="bp154.2.3.1"/>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1619611200">- add upstream patch seamonkey-websocketloop.patch from
  https://bugzilla.mozilla.org/attachment.cgi?id=9218795&amp;action=diff
  to solve critical performance issue
  https://bugzilla.mozilla.org/show_bug.cgi?id=1633339</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1620129600">- use system libraries for bz2, webp, and icu to reduce package size
  and because this is probably more secure (since our own libraries
  are probably updated more often than the ones bundled with
  SeaMonkey)</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1620216000">- update GNU Makefile from upstream
  https://bugzilla.mozilla.org/show_bug.cgi?id=1692516#c8 -- besides
  some general improvements, this Makefile now allows the language
  packs for the bundled extensions to be split off again if desired
  (though our spec file does not yet take advantage of this)</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1621339200">- add patch seamonkey-rustc-bootstrap.patch adapted from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1710154 to enable
  compilation with rust &gt;= 1.50.0</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1625659200">- update to SeaMonkey 2.53.8
  * Serious performance improvements and bug fixes tracked in bug
    1633339 and bug 1711050.
  * Language attributes with country codes not recognized when
    building the Website Navigation Bar link toolbar bug 134436 and
    bug 1709443.
  * Optimize SeaMonkey icons for speed and optional higher quality for
    branding bug 1362210 and bug 1699322.
  * Support from= option when opening email compose window from the
    command line bug 1628671.
  * Update subject handling and GenericSendMessage function in compose
    window bug 1693994.
  * All message windows should update when view preferences are
    changed bug 1694765.
  * Improve marking of multiple messages as read / unread bug 1700530.
  * Show version numbers again in the add-on manager by the partial
    backout of bug 1161183.
  * Update available networks in chatZilla (including adding
    libera.chat)bug 1704392 and bug 1712505.
  * Change default port for IRC via TLS/SSL to 6697 bug 1704280.
  * Remove chatZilla and Lightning extension language packs and
    incorpate localisations within the main language pack bug 1604663.
  * Fix address drag and drop handling in compose window bug 1712002
    and bug 1712227.
  * Further fixes for legacy generators and the deprecated for each
    statement in add-ons and the Add-on SDK bug 1702903.
  * For developers, fork DOMi repo into main SeaMonkey one which means
    no need to separately checkout the extension bug 1700003.
  * SeaMonkey 2.53.8 uses the same backend as Firefox and contains the
    relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.8 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.0 release notes for
    specific changes and security fixes in this release.
  * Additional important security fixes up to Current Firefox 78.11
    ESR and a few enhancements have been backported. We will continue
    to enhance SeaMonkey security in subsequent 2.53.x beta and
    release versions as fast as we are able to.
- removed obsolete seamonkey-websocketloop.patch and
  seamonkey-rustc-bootstrap.patch (now integrated upstream)</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1625745600">- requested inclusion in Leap 15.3 and Leap 15.2:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1188100</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1626955200">- update to SeaMonkey 2.53.8.1
  * Archive message action does not work bug 1718839.
  * Do not preserve offlineMsgSize parameter when moving/copying
    emails between folders bug 1720202 and bug 1430480.
  * Move thread code to threadPane.js and remove messengerdnd.js bug
    515675.
  * SeaMonkey 2.53.8.1 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.8.1 shares most parts of the mail and news code
    with Thunderbird. Please read the Thunderbird 60.0 release notes
    for specific changes and security fixes in this release.
  * Additional important security fixes up to Current Firefox 78.12
    ESR and a few enhancements have been backported. We will continue
    to enhance SeaMonkey security in subsequent 2.53.x beta and
    release versions as fast as we are able to.
- requested inclusion in Leap 15.3 and Leap 15.2:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1188614</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1627387200">- Remove --disable-elf-hack when not available: aarch64 and ppc64*</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1629374400">- add upstream patch seamonkey-packed_simd.patch which allows
  packed_simd to compile with Rust 1.54</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1629979200">- update to SeaMonkey 2.53.9
  * There is now an option to clear browser history during shutdown
    bug 1621445.
  * Uninstall plugin command for ChatZilla bug 541719.
  * Update icons used in ChatZilla status bar bug 1710238 and bug
    1710249.
  * Make ChatZilla understand mIRC color code 99 bug 1710298.
  * Implement IRCv3 basic CAP negotiation bug 1717539 and CAP LIST and
    update CAP ACK and CAP LS bug 1710313.
  * Use Unicode instead of images for emojis in ChatZilla bug 1711375
    and add some extra emojis bug 1711376.
  * Use SeaMonkey's configured web search rather than a separate one
    in ChatZilla bug 1712498.
  * Add a networks editor to ChatZilla bug 1716232.
  * Implement IRCv3 away-notify bug 1717543, chghost and
    userhost-in-names bug 1717544, self-messaging bug 1722212 and WHOX
    bug 1722214.
  * Link to SeaMonkey website in debugQA for verification sites and
    development section bug 1685606.
  * Send button should be disable until we have a recipient bug
    104973.
  * Remove need to use a modifier for marking messages as unread bug
    1719216.
  * SeaMonkey 2.53.9 uses the same backend as Firefox and contains the
    relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.9 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.0 release notes for
    specific changes and security fixes in this release.
  * Additional important security fixes up to Current Firefox 78.13
    ESR and a few enhancements have been backported. We will continue
    to enhance SeaMonkey security in subsequent 2.53.x beta and
    release versions as fast as we are able to.
- removed obsolete patch seamonkey-packed_simd.patch (integrated
  upstream)
- update seamonkey-lto.patch to work with 2.53.9
- requested inclusion in Leap 15.3 and Leap 15.2:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1189845</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1632830400">- update to SeaMonkey 2.53.9.1
  * Fix the lazy loading of images from some websites bug 1727967.
  * Move certain font family defaults from serif to sans serif bug
    1727982.
  * SeaMonkey 2.53.9.1 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.9.1 shares most parts of the mail and news code
    with Thunderbird. Please read the Thunderbird 60.0 release notes
    for specific changes and security fixes in this release.
  * Additional important security fixes up to Current Firefox 78.14
    ESR and a few enhancements have been backported. We will continue
    to enhance SeaMonkey security in subsequent 2.53.x beta and
    release versions as fast as we are able to.
- requested inclusion in Leap 15.3 and Leap 15.2:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1191022</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1637064000">- update to SeaMonkey 2.53.10
  * Minor fixes for testdisplay command in ChatZilla bug 1727976.
  * Show CTCP requests (excluding ACTION and DCC) bug 1722156.
  * IRCv3: Add support for server-time bug 1724586.
  * Add localization note for network editor dialog width in ChatZilla
    bug 1727977.
  * IRCv3: Add support for extended-join and account-notify bug
    1722159.
  * Add ability to collapse message groups in ChatZilla bug 1724588.
  * Fix JS strict warnings in unescapeTagValue in ChatZilla bug
    1727989.
  * IRCv3: Add support for invite-notify bug 1722161.
  * IRCv3: Add support for batch bug 1724589.
  * Fix JS strict warning in addHistory in cZ static.js bug 1727992.
  * IRCv3: Add support for cap-notify bug 1722162.
  * Stop using canonical name as collection keys in ChatZilla bug
    1728025.
  * IRCv3: Add support for TLS and STS bug 1722166.
  * Helper function for renaming irc server properties in ChatZilla
    bug 1728027.
  * IRCv3: Add support for MONITOR bug 1722174.
  * Remove use of msg.commasp in ChatZilla bug 1726965.
  * Allow shiftKey to modify behaviour of link clicking in cZ bug
    1713458.
  * IRCv3: Add support for echo-message bug 1722211.
  * In ChatZilla make /commands return all matches starting with
    pattern bug 1726966.
  * Use SeaMonkey prefs to determine how links behave in cZ bug
    1713467.
  * Allow parameters to be localised in ChatZilla bug 1724105.
  * Add identify command to cZ and hook into password management bug
    1713470.
  * IRCv3.1: Implement SASL with PLAIN mechanism bug 1717545.
  * IRCv3: Add support for message tags bug 1724584.
  * Add last read message divider to ChatZilla bug 1729159.
  * IRCv3: Add support for account-tag bug 1724585.
  * Missing option "text encoding Unicode/UTF-8" in preferences -
    Mailnews bug 1679260.
  * Detect Crashreporter using AppConstants in SeaMonkey bug 1735236.
  * Link about LEGACY extensions in Add-ons Manager is broken bug
    1656797.
  * Update help for clear private data preferences and dialog bug
    1728911.
  * Fix typo in cs_nav_prefs_appearance bug 1737473.
  * Drop leftover "Edit Menu" comment from messageWindow.xul and
    addressbook.xul bug 1725121.
  * Add dummy tab routines to SeaMonkey mailnews tab browser bug
    1735243.
  * Folder pane and tab/window title not updated correctly when
    opening in new tab bug 1726940.
  * Allow mail tab bar to be controlled separately to browser tab bar
    bug 1724515.
  * Copy any user set values for new mail.tabs prefs bug 1729165.
  * Merge Master Passwords and Passwords pref panes into a single pref
    pane bug 1728099.
  * Move warning about redirection pref from Content to Privacy &amp;
    Security pane bug 1728185.
  * Move website icons prefs from content pref pane to browser pref
    pane bug 1727425.
  * Move browser / mailnews system integration prefs into advanced
    pane bug 1727659.
  * Have separate opentabfor.middleclick for mailnews bug 1727948.
  * Add removeBrowser helper for tabbrowser bug 1730391.
  * Put &lt;browser&gt; in a &lt;stack&gt; so it's easy to overlay bug 1730392.
  * Allow browser focus to be avoided bug 1720003.
  * SeaMonkey 32x32 default icon has light stripe at the bottom bug
    1729153.
  * Support &lt;input type=time&gt; and &lt;input type=date&gt; in SeaMonkey bug
    1730408.
  * Middleclick on browser tab handled twice (closes tab and loads URL
    from primary or clipboard) bug 1734407.
  * Unable to create a new "Saved Search Folder" using "Save View as a
    Folder..." bug 1738669.
  * Enable compression for standard http connections bug 1728996.
  * Support VS2022 for compiling under Windows bug 1728988.
  * SeaMonkey 2.53.10 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.10 shares most parts of the mail and news code
    with Thunderbird. Please read the Thunderbird 60.0 release notes
    for specific changes and security fixes in this release.
  * Additional important security fixes up to Current Firefox 78.15
    ESR and a few enhancements have been backported. We will continue
    to enhance SeaMonkey security in subsequent 2.53.x beta and
    release versions as fast as we are able to.
- requested inclusion in Leap 15.3 and Leap 15.2:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1192742</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1639396800">- update to SeaMonkey 2.53.10.1
  * Security fix for NSS code bug 1737470.
  * Only use networks and servers in lower case in ChatZilla bug
    1742502.
  * Change classic form icon in SeaMonkey composer bug 1710915.
  * Addition fixes for SeaMonkey 32x32 default icons on Windows and
    macOS bug 1729153.
  * SeaMonkey 2.53.10.1 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.10.1 shares most parts of the mail and news code
    with Thunderbird. Please read the Thunderbird 60.0 release notes
    for specific changes and security fixes in this release.
  * Additional important security fixes up to Current Firefox 91.4 ESR
    and a few enhancements have been backported. We will continue to
    enhance SeaMonkey security in subsequent 2.53.x beta and release
    versions as fast as we are able to.
- Remove unused build dependency on libidl-devel.
- requested inclusion in Leap 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1193668</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1640692800">- update to SeaMonkey 2.53.10.2
  * Obtain Windows code-signing certificate for SeaMonkey binary and
    update signing bug 1438084.
  * Support SHA-2 hashes in CertIDs in OCSP responses - port of bug
    1746221.
  * Fix rust 1.57 Windows linking for SeaMonkey 2.53 bug 1746785.
  * SeaMonkey 2.53.10.2 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * Additional important security fixes up to Current Firefox 91.4.1
    ESR and a few enhancements have been backported. We will continue
    to enhance SeaMonkey security in subsequent 2.53.x beta and
    release versions as fast as we are able to.
  * SeaMonkey 2.53.10.2 shares most parts of the mail and news code
    with Thunderbird. Please read the Thunderbird 60.0 release notes
    for specific changes and security fixes in this release.
- requested inclusion in Leap 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1194114</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1644926400">- Drop pkgconfig(gconf-2) BuildRequires and pass ac_add_options
  - -disable-gconf to mozconfig. As we already are using cairo-gtk3,
  gconf support serves no purpose (gio/gsettings takes care).</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1646308800">- update to SeaMonkey 2.53.11
  * Remove obsolete MOZ_EXTENSIONS check in suite bug 1749146.
  * Add connect button to cZ Networks Editor bug 1736443.
  * Remove freenode remnants from ChatZilla in SeaMonkey bug 1741082.
  * Prefer secure over insecure protocol in network list in ChatZilla
    bug 1744440.
  * Composer - Change tag textbox is not removed after use bug
    1755369.
  * Clean up repo links in debugQA bug 1746790.
  * Fix misspelled references to macOS in suite bug 1749144.
  * Remove obsolete references to Java and Flash bug 1749141.
  * Help button not working in delete cert dialog bug 1750386.
  * Rearrange Message Filter Dialog to make room for new features bug
    1735053.
  * Use Insert key as shortcut to create new message filters bug 1735055.
  * Rename some variables used in SeaMonkey's FilterListDialog to
    match Thunderbird's bug 1735056.
  * Implement Copy to New message filter functionality bug 1735057.
  * Add move to top / bottom buttons to message filters bug 1735059.
  * Add preference to not prompt for message filter deletion bug
    1735061.
  * Clean up folder handling in FilterListDialog bug 1736425.
  * Add refresh function to Filter list dialog so that it can be
    updated when already open and new filters are added externally bug
    1737450.
  * Use listbox rather than tree in FilterListDialog bug 1746081.
  * MsgFilterList(args) should take targetFilter and pass it to
    FilterListDialog bug 1753891.
  * Mail&amp;News' start.xhtml: "We" link broken bug 1748178.
  * Add search functionality to filter dialog bug 1749207.
  * Move the taskbar refresh timer in SeaMonkey to idle dispatch bug
    1746788.
  * Prevent subresource loads from showing the progress indicator on
    the tab in SeaMonkey bug 1746787.
  * SeaMonkey 2.53.11 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * Additional important security fixes up to Current Firefox 91.6 ESR
    and a few enhancements have been backported. We will continue to
    enhance SeaMonkey security in subsequent 2.53.x beta and release
    versions as fast as we are able to.
  * SeaMonkey 2.53.11 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.0 release notes for
    specific changes and security fixes in this release.
- adapt seamonkey-man-page.patch for SeaMonkey 2.53.11
- requested inclusion in Leap 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1196703</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1648209600">- update to SeaMonkey 2.53.11.1
  * Fix edge case when setting IntersectionObserver threshold bug
    1758291.
  * OAuth2 prefs should use realuserName instead of username bug
    1518126.
  * SeaMonkey 2.53.11.1 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.11.1 shares most parts of the mail and news code
    with Thunderbird. Please read the Thunderbird 60.8.0 release notes
    for specific security fixes in this release.
  * Additional important security fixes up to Current Firefox 91.7 and
    Thunderbird 91.7 ESR plus many enhancements have been
    backported. We will continue to enhance SeaMonkey security in
    subsequent 2.53.x beta and release versions as fast as we are able
    to.
- requested inclusion in Leap 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1197518</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1651665600">- update to SeaMonkey 2.53.12
  * Format Toolbar forgets its hidden status when switching to other
    view modes bug 1719020.
  * Remove obsolete plugin code from SeaMonkey bug 1762733.
  * Fix a few strict warnings in SeaMonkey bug 1755553.
  * Remove Run Flash from Site permissions and page info bug 1758289.
  * Use fixIterator and replace use of removeItemAt in
    FilterListDialog bug 1756359.
  * Remove RDF usage in tabmail.js bug 1758282.
  * Implement 'Edit Template' and 'New Message From Template' commands
    and UI bug 1759376.
  * [SM] Implement 'Edit Draft' command and hide it when not in a
    draft folder (port Thunderbird bug 1106412) bug 1256716.
  * Messages in Template folder need "Edit Template" button in header
    (like for Drafts) bug 80280.
  * Refactor and simplify the feed Subscribe dialog options updates
    bug 1420473.
  * Add system memory and disk size and placeDB page limit to
    about:support bug 1753729.
  * Remove warning about missing plugins in SeaMonkey 2.53 and 2.57
    bug 1755558.
  * SeaMonkey 2.53.12 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.12 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.8.0 release notes for
    specific security fixes in this release.
  * Additional important security fixes up to Current Firefox 91.9 and
    Thunderbird 91.9 ESR plus many enhancements have been
    backported. We will continue to enhance SeaMonkey security in
    subsequent 2.53.x beta and release versions as fast as we are able
    to.
- remove/update references to obsolete gtk2 directory
- requested inclusion in Leap 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1199197</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1655208000">- Add --disable-elf-hack for aarch64 to fix build</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1657540800">- update to SeaMonkey 2.53.13
  * Updates to devtools.
  * Updates to build configuration.
  * Starting the switch from Python 2 to Python 3 in the build system.
  * Removal of array comprehensions, legacy iterators and generators
    bug 1414340 and bug 1098412.
  * Adding initial optional chaining and Promise.allSettled() support.
  * SeaMonkey 2.53.13 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.13 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.8.0 release notes for
    specific security fixes in this release.
  * Additional important security fixes up to Current Firefox 91.11
    and Thunderbird 91.11 ESR plus many enhancements have been
    backported. We will continue to enhance SeaMonkey security in
    subsequent 2.53.x beta and release versions as fast as we are able
    to.
- adapt seamonkey-man-page.patch for SeaMonkey 2.53.13
- disable LTO for Tumbleweed builds due to linker errors
- requested inclusion in Leap 15.4 and 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1201406</changelog>
</package>
<package pkgid="acaa14c2330a2e1f8da19c4ac6dcb590311850ea6e6d0788ff16fbe081f76075" name="seamonkey" arch="i586">
  <version epoch="0" ver="2.53.13" rel="bp154.2.3.1"/>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1619611200">- add upstream patch seamonkey-websocketloop.patch from
  https://bugzilla.mozilla.org/attachment.cgi?id=9218795&amp;action=diff
  to solve critical performance issue
  https://bugzilla.mozilla.org/show_bug.cgi?id=1633339</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1620129600">- use system libraries for bz2, webp, and icu to reduce package size
  and because this is probably more secure (since our own libraries
  are probably updated more often than the ones bundled with
  SeaMonkey)</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1620216000">- update GNU Makefile from upstream
  https://bugzilla.mozilla.org/show_bug.cgi?id=1692516#c8 -- besides
  some general improvements, this Makefile now allows the language
  packs for the bundled extensions to be split off again if desired
  (though our spec file does not yet take advantage of this)</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1621339200">- add patch seamonkey-rustc-bootstrap.patch adapted from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1710154 to enable
  compilation with rust &gt;= 1.50.0</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1625659200">- update to SeaMonkey 2.53.8
  * Serious performance improvements and bug fixes tracked in bug
    1633339 and bug 1711050.
  * Language attributes with country codes not recognized when
    building the Website Navigation Bar link toolbar bug 134436 and
    bug 1709443.
  * Optimize SeaMonkey icons for speed and optional higher quality for
    branding bug 1362210 and bug 1699322.
  * Support from= option when opening email compose window from the
    command line bug 1628671.
  * Update subject handling and GenericSendMessage function in compose
    window bug 1693994.
  * All message windows should update when view preferences are
    changed bug 1694765.
  * Improve marking of multiple messages as read / unread bug 1700530.
  * Show version numbers again in the add-on manager by the partial
    backout of bug 1161183.
  * Update available networks in chatZilla (including adding
    libera.chat)bug 1704392 and bug 1712505.
  * Change default port for IRC via TLS/SSL to 6697 bug 1704280.
  * Remove chatZilla and Lightning extension language packs and
    incorpate localisations within the main language pack bug 1604663.
  * Fix address drag and drop handling in compose window bug 1712002
    and bug 1712227.
  * Further fixes for legacy generators and the deprecated for each
    statement in add-ons and the Add-on SDK bug 1702903.
  * For developers, fork DOMi repo into main SeaMonkey one which means
    no need to separately checkout the extension bug 1700003.
  * SeaMonkey 2.53.8 uses the same backend as Firefox and contains the
    relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.8 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.0 release notes for
    specific changes and security fixes in this release.
  * Additional important security fixes up to Current Firefox 78.11
    ESR and a few enhancements have been backported. We will continue
    to enhance SeaMonkey security in subsequent 2.53.x beta and
    release versions as fast as we are able to.
- removed obsolete seamonkey-websocketloop.patch and
  seamonkey-rustc-bootstrap.patch (now integrated upstream)</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1625745600">- requested inclusion in Leap 15.3 and Leap 15.2:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1188100</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1626955200">- update to SeaMonkey 2.53.8.1
  * Archive message action does not work bug 1718839.
  * Do not preserve offlineMsgSize parameter when moving/copying
    emails between folders bug 1720202 and bug 1430480.
  * Move thread code to threadPane.js and remove messengerdnd.js bug
    515675.
  * SeaMonkey 2.53.8.1 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.8.1 shares most parts of the mail and news code
    with Thunderbird. Please read the Thunderbird 60.0 release notes
    for specific changes and security fixes in this release.
  * Additional important security fixes up to Current Firefox 78.12
    ESR and a few enhancements have been backported. We will continue
    to enhance SeaMonkey security in subsequent 2.53.x beta and
    release versions as fast as we are able to.
- requested inclusion in Leap 15.3 and Leap 15.2:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1188614</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1627387200">- Remove --disable-elf-hack when not available: aarch64 and ppc64*</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1629374400">- add upstream patch seamonkey-packed_simd.patch which allows
  packed_simd to compile with Rust 1.54</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1629979200">- update to SeaMonkey 2.53.9
  * There is now an option to clear browser history during shutdown
    bug 1621445.
  * Uninstall plugin command for ChatZilla bug 541719.
  * Update icons used in ChatZilla status bar bug 1710238 and bug
    1710249.
  * Make ChatZilla understand mIRC color code 99 bug 1710298.
  * Implement IRCv3 basic CAP negotiation bug 1717539 and CAP LIST and
    update CAP ACK and CAP LS bug 1710313.
  * Use Unicode instead of images for emojis in ChatZilla bug 1711375
    and add some extra emojis bug 1711376.
  * Use SeaMonkey's configured web search rather than a separate one
    in ChatZilla bug 1712498.
  * Add a networks editor to ChatZilla bug 1716232.
  * Implement IRCv3 away-notify bug 1717543, chghost and
    userhost-in-names bug 1717544, self-messaging bug 1722212 and WHOX
    bug 1722214.
  * Link to SeaMonkey website in debugQA for verification sites and
    development section bug 1685606.
  * Send button should be disable until we have a recipient bug
    104973.
  * Remove need to use a modifier for marking messages as unread bug
    1719216.
  * SeaMonkey 2.53.9 uses the same backend as Firefox and contains the
    relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.9 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.0 release notes for
    specific changes and security fixes in this release.
  * Additional important security fixes up to Current Firefox 78.13
    ESR and a few enhancements have been backported. We will continue
    to enhance SeaMonkey security in subsequent 2.53.x beta and
    release versions as fast as we are able to.
- removed obsolete patch seamonkey-packed_simd.patch (integrated
  upstream)
- update seamonkey-lto.patch to work with 2.53.9
- requested inclusion in Leap 15.3 and Leap 15.2:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1189845</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1632830400">- update to SeaMonkey 2.53.9.1
  * Fix the lazy loading of images from some websites bug 1727967.
  * Move certain font family defaults from serif to sans serif bug
    1727982.
  * SeaMonkey 2.53.9.1 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.9.1 shares most parts of the mail and news code
    with Thunderbird. Please read the Thunderbird 60.0 release notes
    for specific changes and security fixes in this release.
  * Additional important security fixes up to Current Firefox 78.14
    ESR and a few enhancements have been backported. We will continue
    to enhance SeaMonkey security in subsequent 2.53.x beta and
    release versions as fast as we are able to.
- requested inclusion in Leap 15.3 and Leap 15.2:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1191022</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1637064000">- update to SeaMonkey 2.53.10
  * Minor fixes for testdisplay command in ChatZilla bug 1727976.
  * Show CTCP requests (excluding ACTION and DCC) bug 1722156.
  * IRCv3: Add support for server-time bug 1724586.
  * Add localization note for network editor dialog width in ChatZilla
    bug 1727977.
  * IRCv3: Add support for extended-join and account-notify bug
    1722159.
  * Add ability to collapse message groups in ChatZilla bug 1724588.
  * Fix JS strict warnings in unescapeTagValue in ChatZilla bug
    1727989.
  * IRCv3: Add support for invite-notify bug 1722161.
  * IRCv3: Add support for batch bug 1724589.
  * Fix JS strict warning in addHistory in cZ static.js bug 1727992.
  * IRCv3: Add support for cap-notify bug 1722162.
  * Stop using canonical name as collection keys in ChatZilla bug
    1728025.
  * IRCv3: Add support for TLS and STS bug 1722166.
  * Helper function for renaming irc server properties in ChatZilla
    bug 1728027.
  * IRCv3: Add support for MONITOR bug 1722174.
  * Remove use of msg.commasp in ChatZilla bug 1726965.
  * Allow shiftKey to modify behaviour of link clicking in cZ bug
    1713458.
  * IRCv3: Add support for echo-message bug 1722211.
  * In ChatZilla make /commands return all matches starting with
    pattern bug 1726966.
  * Use SeaMonkey prefs to determine how links behave in cZ bug
    1713467.
  * Allow parameters to be localised in ChatZilla bug 1724105.
  * Add identify command to cZ and hook into password management bug
    1713470.
  * IRCv3.1: Implement SASL with PLAIN mechanism bug 1717545.
  * IRCv3: Add support for message tags bug 1724584.
  * Add last read message divider to ChatZilla bug 1729159.
  * IRCv3: Add support for account-tag bug 1724585.
  * Missing option "text encoding Unicode/UTF-8" in preferences -
    Mailnews bug 1679260.
  * Detect Crashreporter using AppConstants in SeaMonkey bug 1735236.
  * Link about LEGACY extensions in Add-ons Manager is broken bug
    1656797.
  * Update help for clear private data preferences and dialog bug
    1728911.
  * Fix typo in cs_nav_prefs_appearance bug 1737473.
  * Drop leftover "Edit Menu" comment from messageWindow.xul and
    addressbook.xul bug 1725121.
  * Add dummy tab routines to SeaMonkey mailnews tab browser bug
    1735243.
  * Folder pane and tab/window title not updated correctly when
    opening in new tab bug 1726940.
  * Allow mail tab bar to be controlled separately to browser tab bar
    bug 1724515.
  * Copy any user set values for new mail.tabs prefs bug 1729165.
  * Merge Master Passwords and Passwords pref panes into a single pref
    pane bug 1728099.
  * Move warning about redirection pref from Content to Privacy &amp;
    Security pane bug 1728185.
  * Move website icons prefs from content pref pane to browser pref
    pane bug 1727425.
  * Move browser / mailnews system integration prefs into advanced
    pane bug 1727659.
  * Have separate opentabfor.middleclick for mailnews bug 1727948.
  * Add removeBrowser helper for tabbrowser bug 1730391.
  * Put &lt;browser&gt; in a &lt;stack&gt; so it's easy to overlay bug 1730392.
  * Allow browser focus to be avoided bug 1720003.
  * SeaMonkey 32x32 default icon has light stripe at the bottom bug
    1729153.
  * Support &lt;input type=time&gt; and &lt;input type=date&gt; in SeaMonkey bug
    1730408.
  * Middleclick on browser tab handled twice (closes tab and loads URL
    from primary or clipboard) bug 1734407.
  * Unable to create a new "Saved Search Folder" using "Save View as a
    Folder..." bug 1738669.
  * Enable compression for standard http connections bug 1728996.
  * Support VS2022 for compiling under Windows bug 1728988.
  * SeaMonkey 2.53.10 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.10 shares most parts of the mail and news code
    with Thunderbird. Please read the Thunderbird 60.0 release notes
    for specific changes and security fixes in this release.
  * Additional important security fixes up to Current Firefox 78.15
    ESR and a few enhancements have been backported. We will continue
    to enhance SeaMonkey security in subsequent 2.53.x beta and
    release versions as fast as we are able to.
- requested inclusion in Leap 15.3 and Leap 15.2:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1192742</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1639396800">- update to SeaMonkey 2.53.10.1
  * Security fix for NSS code bug 1737470.
  * Only use networks and servers in lower case in ChatZilla bug
    1742502.
  * Change classic form icon in SeaMonkey composer bug 1710915.
  * Addition fixes for SeaMonkey 32x32 default icons on Windows and
    macOS bug 1729153.
  * SeaMonkey 2.53.10.1 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.10.1 shares most parts of the mail and news code
    with Thunderbird. Please read the Thunderbird 60.0 release notes
    for specific changes and security fixes in this release.
  * Additional important security fixes up to Current Firefox 91.4 ESR
    and a few enhancements have been backported. We will continue to
    enhance SeaMonkey security in subsequent 2.53.x beta and release
    versions as fast as we are able to.
- Remove unused build dependency on libidl-devel.
- requested inclusion in Leap 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1193668</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1640692800">- update to SeaMonkey 2.53.10.2
  * Obtain Windows code-signing certificate for SeaMonkey binary and
    update signing bug 1438084.
  * Support SHA-2 hashes in CertIDs in OCSP responses - port of bug
    1746221.
  * Fix rust 1.57 Windows linking for SeaMonkey 2.53 bug 1746785.
  * SeaMonkey 2.53.10.2 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * Additional important security fixes up to Current Firefox 91.4.1
    ESR and a few enhancements have been backported. We will continue
    to enhance SeaMonkey security in subsequent 2.53.x beta and
    release versions as fast as we are able to.
  * SeaMonkey 2.53.10.2 shares most parts of the mail and news code
    with Thunderbird. Please read the Thunderbird 60.0 release notes
    for specific changes and security fixes in this release.
- requested inclusion in Leap 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1194114</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1644926400">- Drop pkgconfig(gconf-2) BuildRequires and pass ac_add_options
  - -disable-gconf to mozconfig. As we already are using cairo-gtk3,
  gconf support serves no purpose (gio/gsettings takes care).</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1646308800">- update to SeaMonkey 2.53.11
  * Remove obsolete MOZ_EXTENSIONS check in suite bug 1749146.
  * Add connect button to cZ Networks Editor bug 1736443.
  * Remove freenode remnants from ChatZilla in SeaMonkey bug 1741082.
  * Prefer secure over insecure protocol in network list in ChatZilla
    bug 1744440.
  * Composer - Change tag textbox is not removed after use bug
    1755369.
  * Clean up repo links in debugQA bug 1746790.
  * Fix misspelled references to macOS in suite bug 1749144.
  * Remove obsolete references to Java and Flash bug 1749141.
  * Help button not working in delete cert dialog bug 1750386.
  * Rearrange Message Filter Dialog to make room for new features bug
    1735053.
  * Use Insert key as shortcut to create new message filters bug 1735055.
  * Rename some variables used in SeaMonkey's FilterListDialog to
    match Thunderbird's bug 1735056.
  * Implement Copy to New message filter functionality bug 1735057.
  * Add move to top / bottom buttons to message filters bug 1735059.
  * Add preference to not prompt for message filter deletion bug
    1735061.
  * Clean up folder handling in FilterListDialog bug 1736425.
  * Add refresh function to Filter list dialog so that it can be
    updated when already open and new filters are added externally bug
    1737450.
  * Use listbox rather than tree in FilterListDialog bug 1746081.
  * MsgFilterList(args) should take targetFilter and pass it to
    FilterListDialog bug 1753891.
  * Mail&amp;News' start.xhtml: "We" link broken bug 1748178.
  * Add search functionality to filter dialog bug 1749207.
  * Move the taskbar refresh timer in SeaMonkey to idle dispatch bug
    1746788.
  * Prevent subresource loads from showing the progress indicator on
    the tab in SeaMonkey bug 1746787.
  * SeaMonkey 2.53.11 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * Additional important security fixes up to Current Firefox 91.6 ESR
    and a few enhancements have been backported. We will continue to
    enhance SeaMonkey security in subsequent 2.53.x beta and release
    versions as fast as we are able to.
  * SeaMonkey 2.53.11 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.0 release notes for
    specific changes and security fixes in this release.
- adapt seamonkey-man-page.patch for SeaMonkey 2.53.11
- requested inclusion in Leap 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1196703</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1648209600">- update to SeaMonkey 2.53.11.1
  * Fix edge case when setting IntersectionObserver threshold bug
    1758291.
  * OAuth2 prefs should use realuserName instead of username bug
    1518126.
  * SeaMonkey 2.53.11.1 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.11.1 shares most parts of the mail and news code
    with Thunderbird. Please read the Thunderbird 60.8.0 release notes
    for specific security fixes in this release.
  * Additional important security fixes up to Current Firefox 91.7 and
    Thunderbird 91.7 ESR plus many enhancements have been
    backported. We will continue to enhance SeaMonkey security in
    subsequent 2.53.x beta and release versions as fast as we are able
    to.
- requested inclusion in Leap 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1197518</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1651665600">- update to SeaMonkey 2.53.12
  * Format Toolbar forgets its hidden status when switching to other
    view modes bug 1719020.
  * Remove obsolete plugin code from SeaMonkey bug 1762733.
  * Fix a few strict warnings in SeaMonkey bug 1755553.
  * Remove Run Flash from Site permissions and page info bug 1758289.
  * Use fixIterator and replace use of removeItemAt in
    FilterListDialog bug 1756359.
  * Remove RDF usage in tabmail.js bug 1758282.
  * Implement 'Edit Template' and 'New Message From Template' commands
    and UI bug 1759376.
  * [SM] Implement 'Edit Draft' command and hide it when not in a
    draft folder (port Thunderbird bug 1106412) bug 1256716.
  * Messages in Template folder need "Edit Template" button in header
    (like for Drafts) bug 80280.
  * Refactor and simplify the feed Subscribe dialog options updates
    bug 1420473.
  * Add system memory and disk size and placeDB page limit to
    about:support bug 1753729.
  * Remove warning about missing plugins in SeaMonkey 2.53 and 2.57
    bug 1755558.
  * SeaMonkey 2.53.12 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.12 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.8.0 release notes for
    specific security fixes in this release.
  * Additional important security fixes up to Current Firefox 91.9 and
    Thunderbird 91.9 ESR plus many enhancements have been
    backported. We will continue to enhance SeaMonkey security in
    subsequent 2.53.x beta and release versions as fast as we are able
    to.
- remove/update references to obsolete gtk2 directory
- requested inclusion in Leap 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1199197</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1655208000">- Add --disable-elf-hack for aarch64 to fix build</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1657540800">- update to SeaMonkey 2.53.13
  * Updates to devtools.
  * Updates to build configuration.
  * Starting the switch from Python 2 to Python 3 in the build system.
  * Removal of array comprehensions, legacy iterators and generators
    bug 1414340 and bug 1098412.
  * Adding initial optional chaining and Promise.allSettled() support.
  * SeaMonkey 2.53.13 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.13 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.8.0 release notes for
    specific security fixes in this release.
  * Additional important security fixes up to Current Firefox 91.11
    and Thunderbird 91.11 ESR plus many enhancements have been
    backported. We will continue to enhance SeaMonkey security in
    subsequent 2.53.x beta and release versions as fast as we are able
    to.
- adapt seamonkey-man-page.patch for SeaMonkey 2.53.13
- disable LTO for Tumbleweed builds due to linker errors
- requested inclusion in Leap 15.4 and 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1201406</changelog>
</package>
<package pkgid="cdd2b6dc05eaaa2de6bfc9f9f5cebc9460c398c6802a500f5898e87b5c81973b" name="seamonkey" arch="src">
  <version epoch="0" ver="2.53.13" rel="bp154.2.3.1"/>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1619611200">- add upstream patch seamonkey-websocketloop.patch from
  https://bugzilla.mozilla.org/attachment.cgi?id=9218795&amp;action=diff
  to solve critical performance issue
  https://bugzilla.mozilla.org/show_bug.cgi?id=1633339</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1620129600">- use system libraries for bz2, webp, and icu to reduce package size
  and because this is probably more secure (since our own libraries
  are probably updated more often than the ones bundled with
  SeaMonkey)</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1620216000">- update GNU Makefile from upstream
  https://bugzilla.mozilla.org/show_bug.cgi?id=1692516#c8 -- besides
  some general improvements, this Makefile now allows the language
  packs for the bundled extensions to be split off again if desired
  (though our spec file does not yet take advantage of this)</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1621339200">- add patch seamonkey-rustc-bootstrap.patch adapted from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1710154 to enable
  compilation with rust &gt;= 1.50.0</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1625659200">- update to SeaMonkey 2.53.8
  * Serious performance improvements and bug fixes tracked in bug
    1633339 and bug 1711050.
  * Language attributes with country codes not recognized when
    building the Website Navigation Bar link toolbar bug 134436 and
    bug 1709443.
  * Optimize SeaMonkey icons for speed and optional higher quality for
    branding bug 1362210 and bug 1699322.
  * Support from= option when opening email compose window from the
    command line bug 1628671.
  * Update subject handling and GenericSendMessage function in compose
    window bug 1693994.
  * All message windows should update when view preferences are
    changed bug 1694765.
  * Improve marking of multiple messages as read / unread bug 1700530.
  * Show version numbers again in the add-on manager by the partial
    backout of bug 1161183.
  * Update available networks in chatZilla (including adding
    libera.chat)bug 1704392 and bug 1712505.
  * Change default port for IRC via TLS/SSL to 6697 bug 1704280.
  * Remove chatZilla and Lightning extension language packs and
    incorpate localisations within the main language pack bug 1604663.
  * Fix address drag and drop handling in compose window bug 1712002
    and bug 1712227.
  * Further fixes for legacy generators and the deprecated for each
    statement in add-ons and the Add-on SDK bug 1702903.
  * For developers, fork DOMi repo into main SeaMonkey one which means
    no need to separately checkout the extension bug 1700003.
  * SeaMonkey 2.53.8 uses the same backend as Firefox and contains the
    relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.8 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.0 release notes for
    specific changes and security fixes in this release.
  * Additional important security fixes up to Current Firefox 78.11
    ESR and a few enhancements have been backported. We will continue
    to enhance SeaMonkey security in subsequent 2.53.x beta and
    release versions as fast as we are able to.
- removed obsolete seamonkey-websocketloop.patch and
  seamonkey-rustc-bootstrap.patch (now integrated upstream)</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1625745600">- requested inclusion in Leap 15.3 and Leap 15.2:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1188100</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1626955200">- update to SeaMonkey 2.53.8.1
  * Archive message action does not work bug 1718839.
  * Do not preserve offlineMsgSize parameter when moving/copying
    emails between folders bug 1720202 and bug 1430480.
  * Move thread code to threadPane.js and remove messengerdnd.js bug
    515675.
  * SeaMonkey 2.53.8.1 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.8.1 shares most parts of the mail and news code
    with Thunderbird. Please read the Thunderbird 60.0 release notes
    for specific changes and security fixes in this release.
  * Additional important security fixes up to Current Firefox 78.12
    ESR and a few enhancements have been backported. We will continue
    to enhance SeaMonkey security in subsequent 2.53.x beta and
    release versions as fast as we are able to.
- requested inclusion in Leap 15.3 and Leap 15.2:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1188614</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1627387200">- Remove --disable-elf-hack when not available: aarch64 and ppc64*</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1629374400">- add upstream patch seamonkey-packed_simd.patch which allows
  packed_simd to compile with Rust 1.54</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1629979200">- update to SeaMonkey 2.53.9
  * There is now an option to clear browser history during shutdown
    bug 1621445.
  * Uninstall plugin command for ChatZilla bug 541719.
  * Update icons used in ChatZilla status bar bug 1710238 and bug
    1710249.
  * Make ChatZilla understand mIRC color code 99 bug 1710298.
  * Implement IRCv3 basic CAP negotiation bug 1717539 and CAP LIST and
    update CAP ACK and CAP LS bug 1710313.
  * Use Unicode instead of images for emojis in ChatZilla bug 1711375
    and add some extra emojis bug 1711376.
  * Use SeaMonkey's configured web search rather than a separate one
    in ChatZilla bug 1712498.
  * Add a networks editor to ChatZilla bug 1716232.
  * Implement IRCv3 away-notify bug 1717543, chghost and
    userhost-in-names bug 1717544, self-messaging bug 1722212 and WHOX
    bug 1722214.
  * Link to SeaMonkey website in debugQA for verification sites and
    development section bug 1685606.
  * Send button should be disable until we have a recipient bug
    104973.
  * Remove need to use a modifier for marking messages as unread bug
    1719216.
  * SeaMonkey 2.53.9 uses the same backend as Firefox and contains the
    relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.9 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.0 release notes for
    specific changes and security fixes in this release.
  * Additional important security fixes up to Current Firefox 78.13
    ESR and a few enhancements have been backported. We will continue
    to enhance SeaMonkey security in subsequent 2.53.x beta and
    release versions as fast as we are able to.
- removed obsolete patch seamonkey-packed_simd.patch (integrated
  upstream)
- update seamonkey-lto.patch to work with 2.53.9
- requested inclusion in Leap 15.3 and Leap 15.2:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1189845</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1632830400">- update to SeaMonkey 2.53.9.1
  * Fix the lazy loading of images from some websites bug 1727967.
  * Move certain font family defaults from serif to sans serif bug
    1727982.
  * SeaMonkey 2.53.9.1 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.9.1 shares most parts of the mail and news code
    with Thunderbird. Please read the Thunderbird 60.0 release notes
    for specific changes and security fixes in this release.
  * Additional important security fixes up to Current Firefox 78.14
    ESR and a few enhancements have been backported. We will continue
    to enhance SeaMonkey security in subsequent 2.53.x beta and
    release versions as fast as we are able to.
- requested inclusion in Leap 15.3 and Leap 15.2:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1191022</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1637064000">- update to SeaMonkey 2.53.10
  * Minor fixes for testdisplay command in ChatZilla bug 1727976.
  * Show CTCP requests (excluding ACTION and DCC) bug 1722156.
  * IRCv3: Add support for server-time bug 1724586.
  * Add localization note for network editor dialog width in ChatZilla
    bug 1727977.
  * IRCv3: Add support for extended-join and account-notify bug
    1722159.
  * Add ability to collapse message groups in ChatZilla bug 1724588.
  * Fix JS strict warnings in unescapeTagValue in ChatZilla bug
    1727989.
  * IRCv3: Add support for invite-notify bug 1722161.
  * IRCv3: Add support for batch bug 1724589.
  * Fix JS strict warning in addHistory in cZ static.js bug 1727992.
  * IRCv3: Add support for cap-notify bug 1722162.
  * Stop using canonical name as collection keys in ChatZilla bug
    1728025.
  * IRCv3: Add support for TLS and STS bug 1722166.
  * Helper function for renaming irc server properties in ChatZilla
    bug 1728027.
  * IRCv3: Add support for MONITOR bug 1722174.
  * Remove use of msg.commasp in ChatZilla bug 1726965.
  * Allow shiftKey to modify behaviour of link clicking in cZ bug
    1713458.
  * IRCv3: Add support for echo-message bug 1722211.
  * In ChatZilla make /commands return all matches starting with
    pattern bug 1726966.
  * Use SeaMonkey prefs to determine how links behave in cZ bug
    1713467.
  * Allow parameters to be localised in ChatZilla bug 1724105.
  * Add identify command to cZ and hook into password management bug
    1713470.
  * IRCv3.1: Implement SASL with PLAIN mechanism bug 1717545.
  * IRCv3: Add support for message tags bug 1724584.
  * Add last read message divider to ChatZilla bug 1729159.
  * IRCv3: Add support for account-tag bug 1724585.
  * Missing option "text encoding Unicode/UTF-8" in preferences -
    Mailnews bug 1679260.
  * Detect Crashreporter using AppConstants in SeaMonkey bug 1735236.
  * Link about LEGACY extensions in Add-ons Manager is broken bug
    1656797.
  * Update help for clear private data preferences and dialog bug
    1728911.
  * Fix typo in cs_nav_prefs_appearance bug 1737473.
  * Drop leftover "Edit Menu" comment from messageWindow.xul and
    addressbook.xul bug 1725121.
  * Add dummy tab routines to SeaMonkey mailnews tab browser bug
    1735243.
  * Folder pane and tab/window title not updated correctly when
    opening in new tab bug 1726940.
  * Allow mail tab bar to be controlled separately to browser tab bar
    bug 1724515.
  * Copy any user set values for new mail.tabs prefs bug 1729165.
  * Merge Master Passwords and Passwords pref panes into a single pref
    pane bug 1728099.
  * Move warning about redirection pref from Content to Privacy &amp;
    Security pane bug 1728185.
  * Move website icons prefs from content pref pane to browser pref
    pane bug 1727425.
  * Move browser / mailnews system integration prefs into advanced
    pane bug 1727659.
  * Have separate opentabfor.middleclick for mailnews bug 1727948.
  * Add removeBrowser helper for tabbrowser bug 1730391.
  * Put &lt;browser&gt; in a &lt;stack&gt; so it's easy to overlay bug 1730392.
  * Allow browser focus to be avoided bug 1720003.
  * SeaMonkey 32x32 default icon has light stripe at the bottom bug
    1729153.
  * Support &lt;input type=time&gt; and &lt;input type=date&gt; in SeaMonkey bug
    1730408.
  * Middleclick on browser tab handled twice (closes tab and loads URL
    from primary or clipboard) bug 1734407.
  * Unable to create a new "Saved Search Folder" using "Save View as a
    Folder..." bug 1738669.
  * Enable compression for standard http connections bug 1728996.
  * Support VS2022 for compiling under Windows bug 1728988.
  * SeaMonkey 2.53.10 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.10 shares most parts of the mail and news code
    with Thunderbird. Please read the Thunderbird 60.0 release notes
    for specific changes and security fixes in this release.
  * Additional important security fixes up to Current Firefox 78.15
    ESR and a few enhancements have been backported. We will continue
    to enhance SeaMonkey security in subsequent 2.53.x beta and
    release versions as fast as we are able to.
- requested inclusion in Leap 15.3 and Leap 15.2:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1192742</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1639396800">- update to SeaMonkey 2.53.10.1
  * Security fix for NSS code bug 1737470.
  * Only use networks and servers in lower case in ChatZilla bug
    1742502.
  * Change classic form icon in SeaMonkey composer bug 1710915.
  * Addition fixes for SeaMonkey 32x32 default icons on Windows and
    macOS bug 1729153.
  * SeaMonkey 2.53.10.1 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.10.1 shares most parts of the mail and news code
    with Thunderbird. Please read the Thunderbird 60.0 release notes
    for specific changes and security fixes in this release.
  * Additional important security fixes up to Current Firefox 91.4 ESR
    and a few enhancements have been backported. We will continue to
    enhance SeaMonkey security in subsequent 2.53.x beta and release
    versions as fast as we are able to.
- Remove unused build dependency on libidl-devel.
- requested inclusion in Leap 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1193668</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1640692800">- update to SeaMonkey 2.53.10.2
  * Obtain Windows code-signing certificate for SeaMonkey binary and
    update signing bug 1438084.
  * Support SHA-2 hashes in CertIDs in OCSP responses - port of bug
    1746221.
  * Fix rust 1.57 Windows linking for SeaMonkey 2.53 bug 1746785.
  * SeaMonkey 2.53.10.2 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * Additional important security fixes up to Current Firefox 91.4.1
    ESR and a few enhancements have been backported. We will continue
    to enhance SeaMonkey security in subsequent 2.53.x beta and
    release versions as fast as we are able to.
  * SeaMonkey 2.53.10.2 shares most parts of the mail and news code
    with Thunderbird. Please read the Thunderbird 60.0 release notes
    for specific changes and security fixes in this release.
- requested inclusion in Leap 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1194114</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1644926400">- Drop pkgconfig(gconf-2) BuildRequires and pass ac_add_options
  - -disable-gconf to mozconfig. As we already are using cairo-gtk3,
  gconf support serves no purpose (gio/gsettings takes care).</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1646308800">- update to SeaMonkey 2.53.11
  * Remove obsolete MOZ_EXTENSIONS check in suite bug 1749146.
  * Add connect button to cZ Networks Editor bug 1736443.
  * Remove freenode remnants from ChatZilla in SeaMonkey bug 1741082.
  * Prefer secure over insecure protocol in network list in ChatZilla
    bug 1744440.
  * Composer - Change tag textbox is not removed after use bug
    1755369.
  * Clean up repo links in debugQA bug 1746790.
  * Fix misspelled references to macOS in suite bug 1749144.
  * Remove obsolete references to Java and Flash bug 1749141.
  * Help button not working in delete cert dialog bug 1750386.
  * Rearrange Message Filter Dialog to make room for new features bug
    1735053.
  * Use Insert key as shortcut to create new message filters bug 1735055.
  * Rename some variables used in SeaMonkey's FilterListDialog to
    match Thunderbird's bug 1735056.
  * Implement Copy to New message filter functionality bug 1735057.
  * Add move to top / bottom buttons to message filters bug 1735059.
  * Add preference to not prompt for message filter deletion bug
    1735061.
  * Clean up folder handling in FilterListDialog bug 1736425.
  * Add refresh function to Filter list dialog so that it can be
    updated when already open and new filters are added externally bug
    1737450.
  * Use listbox rather than tree in FilterListDialog bug 1746081.
  * MsgFilterList(args) should take targetFilter and pass it to
    FilterListDialog bug 1753891.
  * Mail&amp;News' start.xhtml: "We" link broken bug 1748178.
  * Add search functionality to filter dialog bug 1749207.
  * Move the taskbar refresh timer in SeaMonkey to idle dispatch bug
    1746788.
  * Prevent subresource loads from showing the progress indicator on
    the tab in SeaMonkey bug 1746787.
  * SeaMonkey 2.53.11 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * Additional important security fixes up to Current Firefox 91.6 ESR
    and a few enhancements have been backported. We will continue to
    enhance SeaMonkey security in subsequent 2.53.x beta and release
    versions as fast as we are able to.
  * SeaMonkey 2.53.11 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.0 release notes for
    specific changes and security fixes in this release.
- adapt seamonkey-man-page.patch for SeaMonkey 2.53.11
- requested inclusion in Leap 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1196703</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1648209600">- update to SeaMonkey 2.53.11.1
  * Fix edge case when setting IntersectionObserver threshold bug
    1758291.
  * OAuth2 prefs should use realuserName instead of username bug
    1518126.
  * SeaMonkey 2.53.11.1 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.11.1 shares most parts of the mail and news code
    with Thunderbird. Please read the Thunderbird 60.8.0 release notes
    for specific security fixes in this release.
  * Additional important security fixes up to Current Firefox 91.7 and
    Thunderbird 91.7 ESR plus many enhancements have been
    backported. We will continue to enhance SeaMonkey security in
    subsequent 2.53.x beta and release versions as fast as we are able
    to.
- requested inclusion in Leap 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1197518</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1651665600">- update to SeaMonkey 2.53.12
  * Format Toolbar forgets its hidden status when switching to other
    view modes bug 1719020.
  * Remove obsolete plugin code from SeaMonkey bug 1762733.
  * Fix a few strict warnings in SeaMonkey bug 1755553.
  * Remove Run Flash from Site permissions and page info bug 1758289.
  * Use fixIterator and replace use of removeItemAt in
    FilterListDialog bug 1756359.
  * Remove RDF usage in tabmail.js bug 1758282.
  * Implement 'Edit Template' and 'New Message From Template' commands
    and UI bug 1759376.
  * [SM] Implement 'Edit Draft' command and hide it when not in a
    draft folder (port Thunderbird bug 1106412) bug 1256716.
  * Messages in Template folder need "Edit Template" button in header
    (like for Drafts) bug 80280.
  * Refactor and simplify the feed Subscribe dialog options updates
    bug 1420473.
  * Add system memory and disk size and placeDB page limit to
    about:support bug 1753729.
  * Remove warning about missing plugins in SeaMonkey 2.53 and 2.57
    bug 1755558.
  * SeaMonkey 2.53.12 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.12 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.8.0 release notes for
    specific security fixes in this release.
  * Additional important security fixes up to Current Firefox 91.9 and
    Thunderbird 91.9 ESR plus many enhancements have been
    backported. We will continue to enhance SeaMonkey security in
    subsequent 2.53.x beta and release versions as fast as we are able
    to.
- remove/update references to obsolete gtk2 directory
- requested inclusion in Leap 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1199197</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1655208000">- Add --disable-elf-hack for aarch64 to fix build</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1657540800">- update to SeaMonkey 2.53.13
  * Updates to devtools.
  * Updates to build configuration.
  * Starting the switch from Python 2 to Python 3 in the build system.
  * Removal of array comprehensions, legacy iterators and generators
    bug 1414340 and bug 1098412.
  * Adding initial optional chaining and Promise.allSettled() support.
  * SeaMonkey 2.53.13 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.13 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.8.0 release notes for
    specific security fixes in this release.
  * Additional important security fixes up to Current Firefox 91.11
    and Thunderbird 91.11 ESR plus many enhancements have been
    backported. We will continue to enhance SeaMonkey security in
    subsequent 2.53.x beta and release versions as fast as we are able
    to.
- adapt seamonkey-man-page.patch for SeaMonkey 2.53.13
- disable LTO for Tumbleweed builds due to linker errors
- requested inclusion in Leap 15.4 and 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1201406</changelog>
</package>
<package pkgid="f440176318f0ed9758d3719a61558d4ea0d5b299ff5e6ed9116db26d1f5db1c8" name="seamonkey" arch="x86_64">
  <version epoch="0" ver="2.53.13" rel="bp154.2.3.1"/>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1619611200">- add upstream patch seamonkey-websocketloop.patch from
  https://bugzilla.mozilla.org/attachment.cgi?id=9218795&amp;action=diff
  to solve critical performance issue
  https://bugzilla.mozilla.org/show_bug.cgi?id=1633339</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1620129600">- use system libraries for bz2, webp, and icu to reduce package size
  and because this is probably more secure (since our own libraries
  are probably updated more often than the ones bundled with
  SeaMonkey)</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1620216000">- update GNU Makefile from upstream
  https://bugzilla.mozilla.org/show_bug.cgi?id=1692516#c8 -- besides
  some general improvements, this Makefile now allows the language
  packs for the bundled extensions to be split off again if desired
  (though our spec file does not yet take advantage of this)</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1621339200">- add patch seamonkey-rustc-bootstrap.patch adapted from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1710154 to enable
  compilation with rust &gt;= 1.50.0</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1625659200">- update to SeaMonkey 2.53.8
  * Serious performance improvements and bug fixes tracked in bug
    1633339 and bug 1711050.
  * Language attributes with country codes not recognized when
    building the Website Navigation Bar link toolbar bug 134436 and
    bug 1709443.
  * Optimize SeaMonkey icons for speed and optional higher quality for
    branding bug 1362210 and bug 1699322.
  * Support from= option when opening email compose window from the
    command line bug 1628671.
  * Update subject handling and GenericSendMessage function in compose
    window bug 1693994.
  * All message windows should update when view preferences are
    changed bug 1694765.
  * Improve marking of multiple messages as read / unread bug 1700530.
  * Show version numbers again in the add-on manager by the partial
    backout of bug 1161183.
  * Update available networks in chatZilla (including adding
    libera.chat)bug 1704392 and bug 1712505.
  * Change default port for IRC via TLS/SSL to 6697 bug 1704280.
  * Remove chatZilla and Lightning extension language packs and
    incorpate localisations within the main language pack bug 1604663.
  * Fix address drag and drop handling in compose window bug 1712002
    and bug 1712227.
  * Further fixes for legacy generators and the deprecated for each
    statement in add-ons and the Add-on SDK bug 1702903.
  * For developers, fork DOMi repo into main SeaMonkey one which means
    no need to separately checkout the extension bug 1700003.
  * SeaMonkey 2.53.8 uses the same backend as Firefox and contains the
    relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.8 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.0 release notes for
    specific changes and security fixes in this release.
  * Additional important security fixes up to Current Firefox 78.11
    ESR and a few enhancements have been backported. We will continue
    to enhance SeaMonkey security in subsequent 2.53.x beta and
    release versions as fast as we are able to.
- removed obsolete seamonkey-websocketloop.patch and
  seamonkey-rustc-bootstrap.patch (now integrated upstream)</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1625745600">- requested inclusion in Leap 15.3 and Leap 15.2:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1188100</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1626955200">- update to SeaMonkey 2.53.8.1
  * Archive message action does not work bug 1718839.
  * Do not preserve offlineMsgSize parameter when moving/copying
    emails between folders bug 1720202 and bug 1430480.
  * Move thread code to threadPane.js and remove messengerdnd.js bug
    515675.
  * SeaMonkey 2.53.8.1 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.8.1 shares most parts of the mail and news code
    with Thunderbird. Please read the Thunderbird 60.0 release notes
    for specific changes and security fixes in this release.
  * Additional important security fixes up to Current Firefox 78.12
    ESR and a few enhancements have been backported. We will continue
    to enhance SeaMonkey security in subsequent 2.53.x beta and
    release versions as fast as we are able to.
- requested inclusion in Leap 15.3 and Leap 15.2:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1188614</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1627387200">- Remove --disable-elf-hack when not available: aarch64 and ppc64*</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1629374400">- add upstream patch seamonkey-packed_simd.patch which allows
  packed_simd to compile with Rust 1.54</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1629979200">- update to SeaMonkey 2.53.9
  * There is now an option to clear browser history during shutdown
    bug 1621445.
  * Uninstall plugin command for ChatZilla bug 541719.
  * Update icons used in ChatZilla status bar bug 1710238 and bug
    1710249.
  * Make ChatZilla understand mIRC color code 99 bug 1710298.
  * Implement IRCv3 basic CAP negotiation bug 1717539 and CAP LIST and
    update CAP ACK and CAP LS bug 1710313.
  * Use Unicode instead of images for emojis in ChatZilla bug 1711375
    and add some extra emojis bug 1711376.
  * Use SeaMonkey's configured web search rather than a separate one
    in ChatZilla bug 1712498.
  * Add a networks editor to ChatZilla bug 1716232.
  * Implement IRCv3 away-notify bug 1717543, chghost and
    userhost-in-names bug 1717544, self-messaging bug 1722212 and WHOX
    bug 1722214.
  * Link to SeaMonkey website in debugQA for verification sites and
    development section bug 1685606.
  * Send button should be disable until we have a recipient bug
    104973.
  * Remove need to use a modifier for marking messages as unread bug
    1719216.
  * SeaMonkey 2.53.9 uses the same backend as Firefox and contains the
    relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.9 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.0 release notes for
    specific changes and security fixes in this release.
  * Additional important security fixes up to Current Firefox 78.13
    ESR and a few enhancements have been backported. We will continue
    to enhance SeaMonkey security in subsequent 2.53.x beta and
    release versions as fast as we are able to.
- removed obsolete patch seamonkey-packed_simd.patch (integrated
  upstream)
- update seamonkey-lto.patch to work with 2.53.9
- requested inclusion in Leap 15.3 and Leap 15.2:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1189845</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1632830400">- update to SeaMonkey 2.53.9.1
  * Fix the lazy loading of images from some websites bug 1727967.
  * Move certain font family defaults from serif to sans serif bug
    1727982.
  * SeaMonkey 2.53.9.1 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.9.1 shares most parts of the mail and news code
    with Thunderbird. Please read the Thunderbird 60.0 release notes
    for specific changes and security fixes in this release.
  * Additional important security fixes up to Current Firefox 78.14
    ESR and a few enhancements have been backported. We will continue
    to enhance SeaMonkey security in subsequent 2.53.x beta and
    release versions as fast as we are able to.
- requested inclusion in Leap 15.3 and Leap 15.2:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1191022</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1637064000">- update to SeaMonkey 2.53.10
  * Minor fixes for testdisplay command in ChatZilla bug 1727976.
  * Show CTCP requests (excluding ACTION and DCC) bug 1722156.
  * IRCv3: Add support for server-time bug 1724586.
  * Add localization note for network editor dialog width in ChatZilla
    bug 1727977.
  * IRCv3: Add support for extended-join and account-notify bug
    1722159.
  * Add ability to collapse message groups in ChatZilla bug 1724588.
  * Fix JS strict warnings in unescapeTagValue in ChatZilla bug
    1727989.
  * IRCv3: Add support for invite-notify bug 1722161.
  * IRCv3: Add support for batch bug 1724589.
  * Fix JS strict warning in addHistory in cZ static.js bug 1727992.
  * IRCv3: Add support for cap-notify bug 1722162.
  * Stop using canonical name as collection keys in ChatZilla bug
    1728025.
  * IRCv3: Add support for TLS and STS bug 1722166.
  * Helper function for renaming irc server properties in ChatZilla
    bug 1728027.
  * IRCv3: Add support for MONITOR bug 1722174.
  * Remove use of msg.commasp in ChatZilla bug 1726965.
  * Allow shiftKey to modify behaviour of link clicking in cZ bug
    1713458.
  * IRCv3: Add support for echo-message bug 1722211.
  * In ChatZilla make /commands return all matches starting with
    pattern bug 1726966.
  * Use SeaMonkey prefs to determine how links behave in cZ bug
    1713467.
  * Allow parameters to be localised in ChatZilla bug 1724105.
  * Add identify command to cZ and hook into password management bug
    1713470.
  * IRCv3.1: Implement SASL with PLAIN mechanism bug 1717545.
  * IRCv3: Add support for message tags bug 1724584.
  * Add last read message divider to ChatZilla bug 1729159.
  * IRCv3: Add support for account-tag bug 1724585.
  * Missing option "text encoding Unicode/UTF-8" in preferences -
    Mailnews bug 1679260.
  * Detect Crashreporter using AppConstants in SeaMonkey bug 1735236.
  * Link about LEGACY extensions in Add-ons Manager is broken bug
    1656797.
  * Update help for clear private data preferences and dialog bug
    1728911.
  * Fix typo in cs_nav_prefs_appearance bug 1737473.
  * Drop leftover "Edit Menu" comment from messageWindow.xul and
    addressbook.xul bug 1725121.
  * Add dummy tab routines to SeaMonkey mailnews tab browser bug
    1735243.
  * Folder pane and tab/window title not updated correctly when
    opening in new tab bug 1726940.
  * Allow mail tab bar to be controlled separately to browser tab bar
    bug 1724515.
  * Copy any user set values for new mail.tabs prefs bug 1729165.
  * Merge Master Passwords and Passwords pref panes into a single pref
    pane bug 1728099.
  * Move warning about redirection pref from Content to Privacy &amp;
    Security pane bug 1728185.
  * Move website icons prefs from content pref pane to browser pref
    pane bug 1727425.
  * Move browser / mailnews system integration prefs into advanced
    pane bug 1727659.
  * Have separate opentabfor.middleclick for mailnews bug 1727948.
  * Add removeBrowser helper for tabbrowser bug 1730391.
  * Put &lt;browser&gt; in a &lt;stack&gt; so it's easy to overlay bug 1730392.
  * Allow browser focus to be avoided bug 1720003.
  * SeaMonkey 32x32 default icon has light stripe at the bottom bug
    1729153.
  * Support &lt;input type=time&gt; and &lt;input type=date&gt; in SeaMonkey bug
    1730408.
  * Middleclick on browser tab handled twice (closes tab and loads URL
    from primary or clipboard) bug 1734407.
  * Unable to create a new "Saved Search Folder" using "Save View as a
    Folder..." bug 1738669.
  * Enable compression for standard http connections bug 1728996.
  * Support VS2022 for compiling under Windows bug 1728988.
  * SeaMonkey 2.53.10 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.10 shares most parts of the mail and news code
    with Thunderbird. Please read the Thunderbird 60.0 release notes
    for specific changes and security fixes in this release.
  * Additional important security fixes up to Current Firefox 78.15
    ESR and a few enhancements have been backported. We will continue
    to enhance SeaMonkey security in subsequent 2.53.x beta and
    release versions as fast as we are able to.
- requested inclusion in Leap 15.3 and Leap 15.2:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1192742</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1639396800">- update to SeaMonkey 2.53.10.1
  * Security fix for NSS code bug 1737470.
  * Only use networks and servers in lower case in ChatZilla bug
    1742502.
  * Change classic form icon in SeaMonkey composer bug 1710915.
  * Addition fixes for SeaMonkey 32x32 default icons on Windows and
    macOS bug 1729153.
  * SeaMonkey 2.53.10.1 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.10.1 shares most parts of the mail and news code
    with Thunderbird. Please read the Thunderbird 60.0 release notes
    for specific changes and security fixes in this release.
  * Additional important security fixes up to Current Firefox 91.4 ESR
    and a few enhancements have been backported. We will continue to
    enhance SeaMonkey security in subsequent 2.53.x beta and release
    versions as fast as we are able to.
- Remove unused build dependency on libidl-devel.
- requested inclusion in Leap 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1193668</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1640692800">- update to SeaMonkey 2.53.10.2
  * Obtain Windows code-signing certificate for SeaMonkey binary and
    update signing bug 1438084.
  * Support SHA-2 hashes in CertIDs in OCSP responses - port of bug
    1746221.
  * Fix rust 1.57 Windows linking for SeaMonkey 2.53 bug 1746785.
  * SeaMonkey 2.53.10.2 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * Additional important security fixes up to Current Firefox 91.4.1
    ESR and a few enhancements have been backported. We will continue
    to enhance SeaMonkey security in subsequent 2.53.x beta and
    release versions as fast as we are able to.
  * SeaMonkey 2.53.10.2 shares most parts of the mail and news code
    with Thunderbird. Please read the Thunderbird 60.0 release notes
    for specific changes and security fixes in this release.
- requested inclusion in Leap 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1194114</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1644926400">- Drop pkgconfig(gconf-2) BuildRequires and pass ac_add_options
  - -disable-gconf to mozconfig. As we already are using cairo-gtk3,
  gconf support serves no purpose (gio/gsettings takes care).</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1646308800">- update to SeaMonkey 2.53.11
  * Remove obsolete MOZ_EXTENSIONS check in suite bug 1749146.
  * Add connect button to cZ Networks Editor bug 1736443.
  * Remove freenode remnants from ChatZilla in SeaMonkey bug 1741082.
  * Prefer secure over insecure protocol in network list in ChatZilla
    bug 1744440.
  * Composer - Change tag textbox is not removed after use bug
    1755369.
  * Clean up repo links in debugQA bug 1746790.
  * Fix misspelled references to macOS in suite bug 1749144.
  * Remove obsolete references to Java and Flash bug 1749141.
  * Help button not working in delete cert dialog bug 1750386.
  * Rearrange Message Filter Dialog to make room for new features bug
    1735053.
  * Use Insert key as shortcut to create new message filters bug 1735055.
  * Rename some variables used in SeaMonkey's FilterListDialog to
    match Thunderbird's bug 1735056.
  * Implement Copy to New message filter functionality bug 1735057.
  * Add move to top / bottom buttons to message filters bug 1735059.
  * Add preference to not prompt for message filter deletion bug
    1735061.
  * Clean up folder handling in FilterListDialog bug 1736425.
  * Add refresh function to Filter list dialog so that it can be
    updated when already open and new filters are added externally bug
    1737450.
  * Use listbox rather than tree in FilterListDialog bug 1746081.
  * MsgFilterList(args) should take targetFilter and pass it to
    FilterListDialog bug 1753891.
  * Mail&amp;News' start.xhtml: "We" link broken bug 1748178.
  * Add search functionality to filter dialog bug 1749207.
  * Move the taskbar refresh timer in SeaMonkey to idle dispatch bug
    1746788.
  * Prevent subresource loads from showing the progress indicator on
    the tab in SeaMonkey bug 1746787.
  * SeaMonkey 2.53.11 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * Additional important security fixes up to Current Firefox 91.6 ESR
    and a few enhancements have been backported. We will continue to
    enhance SeaMonkey security in subsequent 2.53.x beta and release
    versions as fast as we are able to.
  * SeaMonkey 2.53.11 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.0 release notes for
    specific changes and security fixes in this release.
- adapt seamonkey-man-page.patch for SeaMonkey 2.53.11
- requested inclusion in Leap 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1196703</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1648209600">- update to SeaMonkey 2.53.11.1
  * Fix edge case when setting IntersectionObserver threshold bug
    1758291.
  * OAuth2 prefs should use realuserName instead of username bug
    1518126.
  * SeaMonkey 2.53.11.1 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.11.1 shares most parts of the mail and news code
    with Thunderbird. Please read the Thunderbird 60.8.0 release notes
    for specific security fixes in this release.
  * Additional important security fixes up to Current Firefox 91.7 and
    Thunderbird 91.7 ESR plus many enhancements have been
    backported. We will continue to enhance SeaMonkey security in
    subsequent 2.53.x beta and release versions as fast as we are able
    to.
- requested inclusion in Leap 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1197518</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1651665600">- update to SeaMonkey 2.53.12
  * Format Toolbar forgets its hidden status when switching to other
    view modes bug 1719020.
  * Remove obsolete plugin code from SeaMonkey bug 1762733.
  * Fix a few strict warnings in SeaMonkey bug 1755553.
  * Remove Run Flash from Site permissions and page info bug 1758289.
  * Use fixIterator and replace use of removeItemAt in
    FilterListDialog bug 1756359.
  * Remove RDF usage in tabmail.js bug 1758282.
  * Implement 'Edit Template' and 'New Message From Template' commands
    and UI bug 1759376.
  * [SM] Implement 'Edit Draft' command and hide it when not in a
    draft folder (port Thunderbird bug 1106412) bug 1256716.
  * Messages in Template folder need "Edit Template" button in header
    (like for Drafts) bug 80280.
  * Refactor and simplify the feed Subscribe dialog options updates
    bug 1420473.
  * Add system memory and disk size and placeDB page limit to
    about:support bug 1753729.
  * Remove warning about missing plugins in SeaMonkey 2.53 and 2.57
    bug 1755558.
  * SeaMonkey 2.53.12 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.12 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.8.0 release notes for
    specific security fixes in this release.
  * Additional important security fixes up to Current Firefox 91.9 and
    Thunderbird 91.9 ESR plus many enhancements have been
    backported. We will continue to enhance SeaMonkey security in
    subsequent 2.53.x beta and release versions as fast as we are able
    to.
- remove/update references to obsolete gtk2 directory
- requested inclusion in Leap 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1199197</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1655208000">- Add --disable-elf-hack for aarch64 to fix build</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1657540800">- update to SeaMonkey 2.53.13
  * Updates to devtools.
  * Updates to build configuration.
  * Starting the switch from Python 2 to Python 3 in the build system.
  * Removal of array comprehensions, legacy iterators and generators
    bug 1414340 and bug 1098412.
  * Adding initial optional chaining and Promise.allSettled() support.
  * SeaMonkey 2.53.13 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.13 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.8.0 release notes for
    specific security fixes in this release.
  * Additional important security fixes up to Current Firefox 91.11
    and Thunderbird 91.11 ESR plus many enhancements have been
    backported. We will continue to enhance SeaMonkey security in
    subsequent 2.53.x beta and release versions as fast as we are able
    to.
- adapt seamonkey-man-page.patch for SeaMonkey 2.53.13
- disable LTO for Tumbleweed builds due to linker errors
- requested inclusion in Leap 15.4 and 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1201406</changelog>
</package>
<package pkgid="ecb7640cf5613335a924a09c5ed58b973187a7edbb37e71b837c70a9b1fd3681" name="seamonkey-dom-inspector" arch="aarch64">
  <version epoch="0" ver="2.53.13" rel="bp154.2.3.1"/>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1619611200">- add upstream patch seamonkey-websocketloop.patch from
  https://bugzilla.mozilla.org/attachment.cgi?id=9218795&amp;action=diff
  to solve critical performance issue
  https://bugzilla.mozilla.org/show_bug.cgi?id=1633339</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1620129600">- use system libraries for bz2, webp, and icu to reduce package size
  and because this is probably more secure (since our own libraries
  are probably updated more often than the ones bundled with
  SeaMonkey)</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1620216000">- update GNU Makefile from upstream
  https://bugzilla.mozilla.org/show_bug.cgi?id=1692516#c8 -- besides
  some general improvements, this Makefile now allows the language
  packs for the bundled extensions to be split off again if desired
  (though our spec file does not yet take advantage of this)</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1621339200">- add patch seamonkey-rustc-bootstrap.patch adapted from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1710154 to enable
  compilation with rust &gt;= 1.50.0</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1625659200">- update to SeaMonkey 2.53.8
  * Serious performance improvements and bug fixes tracked in bug
    1633339 and bug 1711050.
  * Language attributes with country codes not recognized when
    building the Website Navigation Bar link toolbar bug 134436 and
    bug 1709443.
  * Optimize SeaMonkey icons for speed and optional higher quality for
    branding bug 1362210 and bug 1699322.
  * Support from= option when opening email compose window from the
    command line bug 1628671.
  * Update subject handling and GenericSendMessage function in compose
    window bug 1693994.
  * All message windows should update when view preferences are
    changed bug 1694765.
  * Improve marking of multiple messages as read / unread bug 1700530.
  * Show version numbers again in the add-on manager by the partial
    backout of bug 1161183.
  * Update available networks in chatZilla (including adding
    libera.chat)bug 1704392 and bug 1712505.
  * Change default port for IRC via TLS/SSL to 6697 bug 1704280.
  * Remove chatZilla and Lightning extension language packs and
    incorpate localisations within the main language pack bug 1604663.
  * Fix address drag and drop handling in compose window bug 1712002
    and bug 1712227.
  * Further fixes for legacy generators and the deprecated for each
    statement in add-ons and the Add-on SDK bug 1702903.
  * For developers, fork DOMi repo into main SeaMonkey one which means
    no need to separately checkout the extension bug 1700003.
  * SeaMonkey 2.53.8 uses the same backend as Firefox and contains the
    relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.8 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.0 release notes for
    specific changes and security fixes in this release.
  * Additional important security fixes up to Current Firefox 78.11
    ESR and a few enhancements have been backported. We will continue
    to enhance SeaMonkey security in subsequent 2.53.x beta and
    release versions as fast as we are able to.
- removed obsolete seamonkey-websocketloop.patch and
  seamonkey-rustc-bootstrap.patch (now integrated upstream)</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1625745600">- requested inclusion in Leap 15.3 and Leap 15.2:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1188100</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1626955200">- update to SeaMonkey 2.53.8.1
  * Archive message action does not work bug 1718839.
  * Do not preserve offlineMsgSize parameter when moving/copying
    emails between folders bug 1720202 and bug 1430480.
  * Move thread code to threadPane.js and remove messengerdnd.js bug
    515675.
  * SeaMonkey 2.53.8.1 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.8.1 shares most parts of the mail and news code
    with Thunderbird. Please read the Thunderbird 60.0 release notes
    for specific changes and security fixes in this release.
  * Additional important security fixes up to Current Firefox 78.12
    ESR and a few enhancements have been backported. We will continue
    to enhance SeaMonkey security in subsequent 2.53.x beta and
    release versions as fast as we are able to.
- requested inclusion in Leap 15.3 and Leap 15.2:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1188614</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1627387200">- Remove --disable-elf-hack when not available: aarch64 and ppc64*</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1629374400">- add upstream patch seamonkey-packed_simd.patch which allows
  packed_simd to compile with Rust 1.54</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1629979200">- update to SeaMonkey 2.53.9
  * There is now an option to clear browser history during shutdown
    bug 1621445.
  * Uninstall plugin command for ChatZilla bug 541719.
  * Update icons used in ChatZilla status bar bug 1710238 and bug
    1710249.
  * Make ChatZilla understand mIRC color code 99 bug 1710298.
  * Implement IRCv3 basic CAP negotiation bug 1717539 and CAP LIST and
    update CAP ACK and CAP LS bug 1710313.
  * Use Unicode instead of images for emojis in ChatZilla bug 1711375
    and add some extra emojis bug 1711376.
  * Use SeaMonkey's configured web search rather than a separate one
    in ChatZilla bug 1712498.
  * Add a networks editor to ChatZilla bug 1716232.
  * Implement IRCv3 away-notify bug 1717543, chghost and
    userhost-in-names bug 1717544, self-messaging bug 1722212 and WHOX
    bug 1722214.
  * Link to SeaMonkey website in debugQA for verification sites and
    development section bug 1685606.
  * Send button should be disable until we have a recipient bug
    104973.
  * Remove need to use a modifier for marking messages as unread bug
    1719216.
  * SeaMonkey 2.53.9 uses the same backend as Firefox and contains the
    relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.9 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.0 release notes for
    specific changes and security fixes in this release.
  * Additional important security fixes up to Current Firefox 78.13
    ESR and a few enhancements have been backported. We will continue
    to enhance SeaMonkey security in subsequent 2.53.x beta and
    release versions as fast as we are able to.
- removed obsolete patch seamonkey-packed_simd.patch (integrated
  upstream)
- update seamonkey-lto.patch to work with 2.53.9
- requested inclusion in Leap 15.3 and Leap 15.2:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1189845</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1632830400">- update to SeaMonkey 2.53.9.1
  * Fix the lazy loading of images from some websites bug 1727967.
  * Move certain font family defaults from serif to sans serif bug
    1727982.
  * SeaMonkey 2.53.9.1 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.9.1 shares most parts of the mail and news code
    with Thunderbird. Please read the Thunderbird 60.0 release notes
    for specific changes and security fixes in this release.
  * Additional important security fixes up to Current Firefox 78.14
    ESR and a few enhancements have been backported. We will continue
    to enhance SeaMonkey security in subsequent 2.53.x beta and
    release versions as fast as we are able to.
- requested inclusion in Leap 15.3 and Leap 15.2:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1191022</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1637064000">- update to SeaMonkey 2.53.10
  * Minor fixes for testdisplay command in ChatZilla bug 1727976.
  * Show CTCP requests (excluding ACTION and DCC) bug 1722156.
  * IRCv3: Add support for server-time bug 1724586.
  * Add localization note for network editor dialog width in ChatZilla
    bug 1727977.
  * IRCv3: Add support for extended-join and account-notify bug
    1722159.
  * Add ability to collapse message groups in ChatZilla bug 1724588.
  * Fix JS strict warnings in unescapeTagValue in ChatZilla bug
    1727989.
  * IRCv3: Add support for invite-notify bug 1722161.
  * IRCv3: Add support for batch bug 1724589.
  * Fix JS strict warning in addHistory in cZ static.js bug 1727992.
  * IRCv3: Add support for cap-notify bug 1722162.
  * Stop using canonical name as collection keys in ChatZilla bug
    1728025.
  * IRCv3: Add support for TLS and STS bug 1722166.
  * Helper function for renaming irc server properties in ChatZilla
    bug 1728027.
  * IRCv3: Add support for MONITOR bug 1722174.
  * Remove use of msg.commasp in ChatZilla bug 1726965.
  * Allow shiftKey to modify behaviour of link clicking in cZ bug
    1713458.
  * IRCv3: Add support for echo-message bug 1722211.
  * In ChatZilla make /commands return all matches starting with
    pattern bug 1726966.
  * Use SeaMonkey prefs to determine how links behave in cZ bug
    1713467.
  * Allow parameters to be localised in ChatZilla bug 1724105.
  * Add identify command to cZ and hook into password management bug
    1713470.
  * IRCv3.1: Implement SASL with PLAIN mechanism bug 1717545.
  * IRCv3: Add support for message tags bug 1724584.
  * Add last read message divider to ChatZilla bug 1729159.
  * IRCv3: Add support for account-tag bug 1724585.
  * Missing option "text encoding Unicode/UTF-8" in preferences -
    Mailnews bug 1679260.
  * Detect Crashreporter using AppConstants in SeaMonkey bug 1735236.
  * Link about LEGACY extensions in Add-ons Manager is broken bug
    1656797.
  * Update help for clear private data preferences and dialog bug
    1728911.
  * Fix typo in cs_nav_prefs_appearance bug 1737473.
  * Drop leftover "Edit Menu" comment from messageWindow.xul and
    addressbook.xul bug 1725121.
  * Add dummy tab routines to SeaMonkey mailnews tab browser bug
    1735243.
  * Folder pane and tab/window title not updated correctly when
    opening in new tab bug 1726940.
  * Allow mail tab bar to be controlled separately to browser tab bar
    bug 1724515.
  * Copy any user set values for new mail.tabs prefs bug 1729165.
  * Merge Master Passwords and Passwords pref panes into a single pref
    pane bug 1728099.
  * Move warning about redirection pref from Content to Privacy &amp;
    Security pane bug 1728185.
  * Move website icons prefs from content pref pane to browser pref
    pane bug 1727425.
  * Move browser / mailnews system integration prefs into advanced
    pane bug 1727659.
  * Have separate opentabfor.middleclick for mailnews bug 1727948.
  * Add removeBrowser helper for tabbrowser bug 1730391.
  * Put &lt;browser&gt; in a &lt;stack&gt; so it's easy to overlay bug 1730392.
  * Allow browser focus to be avoided bug 1720003.
  * SeaMonkey 32x32 default icon has light stripe at the bottom bug
    1729153.
  * Support &lt;input type=time&gt; and &lt;input type=date&gt; in SeaMonkey bug
    1730408.
  * Middleclick on browser tab handled twice (closes tab and loads URL
    from primary or clipboard) bug 1734407.
  * Unable to create a new "Saved Search Folder" using "Save View as a
    Folder..." bug 1738669.
  * Enable compression for standard http connections bug 1728996.
  * Support VS2022 for compiling under Windows bug 1728988.
  * SeaMonkey 2.53.10 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.10 shares most parts of the mail and news code
    with Thunderbird. Please read the Thunderbird 60.0 release notes
    for specific changes and security fixes in this release.
  * Additional important security fixes up to Current Firefox 78.15
    ESR and a few enhancements have been backported. We will continue
    to enhance SeaMonkey security in subsequent 2.53.x beta and
    release versions as fast as we are able to.
- requested inclusion in Leap 15.3 and Leap 15.2:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1192742</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1639396800">- update to SeaMonkey 2.53.10.1
  * Security fix for NSS code bug 1737470.
  * Only use networks and servers in lower case in ChatZilla bug
    1742502.
  * Change classic form icon in SeaMonkey composer bug 1710915.
  * Addition fixes for SeaMonkey 32x32 default icons on Windows and
    macOS bug 1729153.
  * SeaMonkey 2.53.10.1 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.10.1 shares most parts of the mail and news code
    with Thunderbird. Please read the Thunderbird 60.0 release notes
    for specific changes and security fixes in this release.
  * Additional important security fixes up to Current Firefox 91.4 ESR
    and a few enhancements have been backported. We will continue to
    enhance SeaMonkey security in subsequent 2.53.x beta and release
    versions as fast as we are able to.
- Remove unused build dependency on libidl-devel.
- requested inclusion in Leap 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1193668</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1640692800">- update to SeaMonkey 2.53.10.2
  * Obtain Windows code-signing certificate for SeaMonkey binary and
    update signing bug 1438084.
  * Support SHA-2 hashes in CertIDs in OCSP responses - port of bug
    1746221.
  * Fix rust 1.57 Windows linking for SeaMonkey 2.53 bug 1746785.
  * SeaMonkey 2.53.10.2 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * Additional important security fixes up to Current Firefox 91.4.1
    ESR and a few enhancements have been backported. We will continue
    to enhance SeaMonkey security in subsequent 2.53.x beta and
    release versions as fast as we are able to.
  * SeaMonkey 2.53.10.2 shares most parts of the mail and news code
    with Thunderbird. Please read the Thunderbird 60.0 release notes
    for specific changes and security fixes in this release.
- requested inclusion in Leap 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1194114</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1644926400">- Drop pkgconfig(gconf-2) BuildRequires and pass ac_add_options
  - -disable-gconf to mozconfig. As we already are using cairo-gtk3,
  gconf support serves no purpose (gio/gsettings takes care).</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1646308800">- update to SeaMonkey 2.53.11
  * Remove obsolete MOZ_EXTENSIONS check in suite bug 1749146.
  * Add connect button to cZ Networks Editor bug 1736443.
  * Remove freenode remnants from ChatZilla in SeaMonkey bug 1741082.
  * Prefer secure over insecure protocol in network list in ChatZilla
    bug 1744440.
  * Composer - Change tag textbox is not removed after use bug
    1755369.
  * Clean up repo links in debugQA bug 1746790.
  * Fix misspelled references to macOS in suite bug 1749144.
  * Remove obsolete references to Java and Flash bug 1749141.
  * Help button not working in delete cert dialog bug 1750386.
  * Rearrange Message Filter Dialog to make room for new features bug
    1735053.
  * Use Insert key as shortcut to create new message filters bug 1735055.
  * Rename some variables used in SeaMonkey's FilterListDialog to
    match Thunderbird's bug 1735056.
  * Implement Copy to New message filter functionality bug 1735057.
  * Add move to top / bottom buttons to message filters bug 1735059.
  * Add preference to not prompt for message filter deletion bug
    1735061.
  * Clean up folder handling in FilterListDialog bug 1736425.
  * Add refresh function to Filter list dialog so that it can be
    updated when already open and new filters are added externally bug
    1737450.
  * Use listbox rather than tree in FilterListDialog bug 1746081.
  * MsgFilterList(args) should take targetFilter and pass it to
    FilterListDialog bug 1753891.
  * Mail&amp;News' start.xhtml: "We" link broken bug 1748178.
  * Add search functionality to filter dialog bug 1749207.
  * Move the taskbar refresh timer in SeaMonkey to idle dispatch bug
    1746788.
  * Prevent subresource loads from showing the progress indicator on
    the tab in SeaMonkey bug 1746787.
  * SeaMonkey 2.53.11 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * Additional important security fixes up to Current Firefox 91.6 ESR
    and a few enhancements have been backported. We will continue to
    enhance SeaMonkey security in subsequent 2.53.x beta and release
    versions as fast as we are able to.
  * SeaMonkey 2.53.11 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.0 release notes for
    specific changes and security fixes in this release.
- adapt seamonkey-man-page.patch for SeaMonkey 2.53.11
- requested inclusion in Leap 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1196703</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1648209600">- update to SeaMonkey 2.53.11.1
  * Fix edge case when setting IntersectionObserver threshold bug
    1758291.
  * OAuth2 prefs should use realuserName instead of username bug
    1518126.
  * SeaMonkey 2.53.11.1 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.11.1 shares most parts of the mail and news code
    with Thunderbird. Please read the Thunderbird 60.8.0 release notes
    for specific security fixes in this release.
  * Additional important security fixes up to Current Firefox 91.7 and
    Thunderbird 91.7 ESR plus many enhancements have been
    backported. We will continue to enhance SeaMonkey security in
    subsequent 2.53.x beta and release versions as fast as we are able
    to.
- requested inclusion in Leap 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1197518</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1651665600">- update to SeaMonkey 2.53.12
  * Format Toolbar forgets its hidden status when switching to other
    view modes bug 1719020.
  * Remove obsolete plugin code from SeaMonkey bug 1762733.
  * Fix a few strict warnings in SeaMonkey bug 1755553.
  * Remove Run Flash from Site permissions and page info bug 1758289.
  * Use fixIterator and replace use of removeItemAt in
    FilterListDialog bug 1756359.
  * Remove RDF usage in tabmail.js bug 1758282.
  * Implement 'Edit Template' and 'New Message From Template' commands
    and UI bug 1759376.
  * [SM] Implement 'Edit Draft' command and hide it when not in a
    draft folder (port Thunderbird bug 1106412) bug 1256716.
  * Messages in Template folder need "Edit Template" button in header
    (like for Drafts) bug 80280.
  * Refactor and simplify the feed Subscribe dialog options updates
    bug 1420473.
  * Add system memory and disk size and placeDB page limit to
    about:support bug 1753729.
  * Remove warning about missing plugins in SeaMonkey 2.53 and 2.57
    bug 1755558.
  * SeaMonkey 2.53.12 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.12 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.8.0 release notes for
    specific security fixes in this release.
  * Additional important security fixes up to Current Firefox 91.9 and
    Thunderbird 91.9 ESR plus many enhancements have been
    backported. We will continue to enhance SeaMonkey security in
    subsequent 2.53.x beta and release versions as fast as we are able
    to.
- remove/update references to obsolete gtk2 directory
- requested inclusion in Leap 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1199197</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1655208000">- Add --disable-elf-hack for aarch64 to fix build</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1657540800">- update to SeaMonkey 2.53.13
  * Updates to devtools.
  * Updates to build configuration.
  * Starting the switch from Python 2 to Python 3 in the build system.
  * Removal of array comprehensions, legacy iterators and generators
    bug 1414340 and bug 1098412.
  * Adding initial optional chaining and Promise.allSettled() support.
  * SeaMonkey 2.53.13 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.13 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.8.0 release notes for
    specific security fixes in this release.
  * Additional important security fixes up to Current Firefox 91.11
    and Thunderbird 91.11 ESR plus many enhancements have been
    backported. We will continue to enhance SeaMonkey security in
    subsequent 2.53.x beta and release versions as fast as we are able
    to.
- adapt seamonkey-man-page.patch for SeaMonkey 2.53.13
- disable LTO for Tumbleweed builds due to linker errors
- requested inclusion in Leap 15.4 and 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1201406</changelog>
</package>
<package pkgid="905857ba7f2f1f730c77bde8ca4984cab96028afe305ee390cd14181e8e0bf47" name="seamonkey-dom-inspector" arch="i586">
  <version epoch="0" ver="2.53.13" rel="bp154.2.3.1"/>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1619611200">- add upstream patch seamonkey-websocketloop.patch from
  https://bugzilla.mozilla.org/attachment.cgi?id=9218795&amp;action=diff
  to solve critical performance issue
  https://bugzilla.mozilla.org/show_bug.cgi?id=1633339</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1620129600">- use system libraries for bz2, webp, and icu to reduce package size
  and because this is probably more secure (since our own libraries
  are probably updated more often than the ones bundled with
  SeaMonkey)</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1620216000">- update GNU Makefile from upstream
  https://bugzilla.mozilla.org/show_bug.cgi?id=1692516#c8 -- besides
  some general improvements, this Makefile now allows the language
  packs for the bundled extensions to be split off again if desired
  (though our spec file does not yet take advantage of this)</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1621339200">- add patch seamonkey-rustc-bootstrap.patch adapted from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1710154 to enable
  compilation with rust &gt;= 1.50.0</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1625659200">- update to SeaMonkey 2.53.8
  * Serious performance improvements and bug fixes tracked in bug
    1633339 and bug 1711050.
  * Language attributes with country codes not recognized when
    building the Website Navigation Bar link toolbar bug 134436 and
    bug 1709443.
  * Optimize SeaMonkey icons for speed and optional higher quality for
    branding bug 1362210 and bug 1699322.
  * Support from= option when opening email compose window from the
    command line bug 1628671.
  * Update subject handling and GenericSendMessage function in compose
    window bug 1693994.
  * All message windows should update when view preferences are
    changed bug 1694765.
  * Improve marking of multiple messages as read / unread bug 1700530.
  * Show version numbers again in the add-on manager by the partial
    backout of bug 1161183.
  * Update available networks in chatZilla (including adding
    libera.chat)bug 1704392 and bug 1712505.
  * Change default port for IRC via TLS/SSL to 6697 bug 1704280.
  * Remove chatZilla and Lightning extension language packs and
    incorpate localisations within the main language pack bug 1604663.
  * Fix address drag and drop handling in compose window bug 1712002
    and bug 1712227.
  * Further fixes for legacy generators and the deprecated for each
    statement in add-ons and the Add-on SDK bug 1702903.
  * For developers, fork DOMi repo into main SeaMonkey one which means
    no need to separately checkout the extension bug 1700003.
  * SeaMonkey 2.53.8 uses the same backend as Firefox and contains the
    relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.8 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.0 release notes for
    specific changes and security fixes in this release.
  * Additional important security fixes up to Current Firefox 78.11
    ESR and a few enhancements have been backported. We will continue
    to enhance SeaMonkey security in subsequent 2.53.x beta and
    release versions as fast as we are able to.
- removed obsolete seamonkey-websocketloop.patch and
  seamonkey-rustc-bootstrap.patch (now integrated upstream)</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1625745600">- requested inclusion in Leap 15.3 and Leap 15.2:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1188100</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1626955200">- update to SeaMonkey 2.53.8.1
  * Archive message action does not work bug 1718839.
  * Do not preserve offlineMsgSize parameter when moving/copying
    emails between folders bug 1720202 and bug 1430480.
  * Move thread code to threadPane.js and remove messengerdnd.js bug
    515675.
  * SeaMonkey 2.53.8.1 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.8.1 shares most parts of the mail and news code
    with Thunderbird. Please read the Thunderbird 60.0 release notes
    for specific changes and security fixes in this release.
  * Additional important security fixes up to Current Firefox 78.12
    ESR and a few enhancements have been backported. We will continue
    to enhance SeaMonkey security in subsequent 2.53.x beta and
    release versions as fast as we are able to.
- requested inclusion in Leap 15.3 and Leap 15.2:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1188614</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1627387200">- Remove --disable-elf-hack when not available: aarch64 and ppc64*</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1629374400">- add upstream patch seamonkey-packed_simd.patch which allows
  packed_simd to compile with Rust 1.54</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1629979200">- update to SeaMonkey 2.53.9
  * There is now an option to clear browser history during shutdown
    bug 1621445.
  * Uninstall plugin command for ChatZilla bug 541719.
  * Update icons used in ChatZilla status bar bug 1710238 and bug
    1710249.
  * Make ChatZilla understand mIRC color code 99 bug 1710298.
  * Implement IRCv3 basic CAP negotiation bug 1717539 and CAP LIST and
    update CAP ACK and CAP LS bug 1710313.
  * Use Unicode instead of images for emojis in ChatZilla bug 1711375
    and add some extra emojis bug 1711376.
  * Use SeaMonkey's configured web search rather than a separate one
    in ChatZilla bug 1712498.
  * Add a networks editor to ChatZilla bug 1716232.
  * Implement IRCv3 away-notify bug 1717543, chghost and
    userhost-in-names bug 1717544, self-messaging bug 1722212 and WHOX
    bug 1722214.
  * Link to SeaMonkey website in debugQA for verification sites and
    development section bug 1685606.
  * Send button should be disable until we have a recipient bug
    104973.
  * Remove need to use a modifier for marking messages as unread bug
    1719216.
  * SeaMonkey 2.53.9 uses the same backend as Firefox and contains the
    relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.9 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.0 release notes for
    specific changes and security fixes in this release.
  * Additional important security fixes up to Current Firefox 78.13
    ESR and a few enhancements have been backported. We will continue
    to enhance SeaMonkey security in subsequent 2.53.x beta and
    release versions as fast as we are able to.
- removed obsolete patch seamonkey-packed_simd.patch (integrated
  upstream)
- update seamonkey-lto.patch to work with 2.53.9
- requested inclusion in Leap 15.3 and Leap 15.2:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1189845</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1632830400">- update to SeaMonkey 2.53.9.1
  * Fix the lazy loading of images from some websites bug 1727967.
  * Move certain font family defaults from serif to sans serif bug
    1727982.
  * SeaMonkey 2.53.9.1 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.9.1 shares most parts of the mail and news code
    with Thunderbird. Please read the Thunderbird 60.0 release notes
    for specific changes and security fixes in this release.
  * Additional important security fixes up to Current Firefox 78.14
    ESR and a few enhancements have been backported. We will continue
    to enhance SeaMonkey security in subsequent 2.53.x beta and
    release versions as fast as we are able to.
- requested inclusion in Leap 15.3 and Leap 15.2:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1191022</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1637064000">- update to SeaMonkey 2.53.10
  * Minor fixes for testdisplay command in ChatZilla bug 1727976.
  * Show CTCP requests (excluding ACTION and DCC) bug 1722156.
  * IRCv3: Add support for server-time bug 1724586.
  * Add localization note for network editor dialog width in ChatZilla
    bug 1727977.
  * IRCv3: Add support for extended-join and account-notify bug
    1722159.
  * Add ability to collapse message groups in ChatZilla bug 1724588.
  * Fix JS strict warnings in unescapeTagValue in ChatZilla bug
    1727989.
  * IRCv3: Add support for invite-notify bug 1722161.
  * IRCv3: Add support for batch bug 1724589.
  * Fix JS strict warning in addHistory in cZ static.js bug 1727992.
  * IRCv3: Add support for cap-notify bug 1722162.
  * Stop using canonical name as collection keys in ChatZilla bug
    1728025.
  * IRCv3: Add support for TLS and STS bug 1722166.
  * Helper function for renaming irc server properties in ChatZilla
    bug 1728027.
  * IRCv3: Add support for MONITOR bug 1722174.
  * Remove use of msg.commasp in ChatZilla bug 1726965.
  * Allow shiftKey to modify behaviour of link clicking in cZ bug
    1713458.
  * IRCv3: Add support for echo-message bug 1722211.
  * In ChatZilla make /commands return all matches starting with
    pattern bug 1726966.
  * Use SeaMonkey prefs to determine how links behave in cZ bug
    1713467.
  * Allow parameters to be localised in ChatZilla bug 1724105.
  * Add identify command to cZ and hook into password management bug
    1713470.
  * IRCv3.1: Implement SASL with PLAIN mechanism bug 1717545.
  * IRCv3: Add support for message tags bug 1724584.
  * Add last read message divider to ChatZilla bug 1729159.
  * IRCv3: Add support for account-tag bug 1724585.
  * Missing option "text encoding Unicode/UTF-8" in preferences -
    Mailnews bug 1679260.
  * Detect Crashreporter using AppConstants in SeaMonkey bug 1735236.
  * Link about LEGACY extensions in Add-ons Manager is broken bug
    1656797.
  * Update help for clear private data preferences and dialog bug
    1728911.
  * Fix typo in cs_nav_prefs_appearance bug 1737473.
  * Drop leftover "Edit Menu" comment from messageWindow.xul and
    addressbook.xul bug 1725121.
  * Add dummy tab routines to SeaMonkey mailnews tab browser bug
    1735243.
  * Folder pane and tab/window title not updated correctly when
    opening in new tab bug 1726940.
  * Allow mail tab bar to be controlled separately to browser tab bar
    bug 1724515.
  * Copy any user set values for new mail.tabs prefs bug 1729165.
  * Merge Master Passwords and Passwords pref panes into a single pref
    pane bug 1728099.
  * Move warning about redirection pref from Content to Privacy &amp;
    Security pane bug 1728185.
  * Move website icons prefs from content pref pane to browser pref
    pane bug 1727425.
  * Move browser / mailnews system integration prefs into advanced
    pane bug 1727659.
  * Have separate opentabfor.middleclick for mailnews bug 1727948.
  * Add removeBrowser helper for tabbrowser bug 1730391.
  * Put &lt;browser&gt; in a &lt;stack&gt; so it's easy to overlay bug 1730392.
  * Allow browser focus to be avoided bug 1720003.
  * SeaMonkey 32x32 default icon has light stripe at the bottom bug
    1729153.
  * Support &lt;input type=time&gt; and &lt;input type=date&gt; in SeaMonkey bug
    1730408.
  * Middleclick on browser tab handled twice (closes tab and loads URL
    from primary or clipboard) bug 1734407.
  * Unable to create a new "Saved Search Folder" using "Save View as a
    Folder..." bug 1738669.
  * Enable compression for standard http connections bug 1728996.
  * Support VS2022 for compiling under Windows bug 1728988.
  * SeaMonkey 2.53.10 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.10 shares most parts of the mail and news code
    with Thunderbird. Please read the Thunderbird 60.0 release notes
    for specific changes and security fixes in this release.
  * Additional important security fixes up to Current Firefox 78.15
    ESR and a few enhancements have been backported. We will continue
    to enhance SeaMonkey security in subsequent 2.53.x beta and
    release versions as fast as we are able to.
- requested inclusion in Leap 15.3 and Leap 15.2:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1192742</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1639396800">- update to SeaMonkey 2.53.10.1
  * Security fix for NSS code bug 1737470.
  * Only use networks and servers in lower case in ChatZilla bug
    1742502.
  * Change classic form icon in SeaMonkey composer bug 1710915.
  * Addition fixes for SeaMonkey 32x32 default icons on Windows and
    macOS bug 1729153.
  * SeaMonkey 2.53.10.1 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.10.1 shares most parts of the mail and news code
    with Thunderbird. Please read the Thunderbird 60.0 release notes
    for specific changes and security fixes in this release.
  * Additional important security fixes up to Current Firefox 91.4 ESR
    and a few enhancements have been backported. We will continue to
    enhance SeaMonkey security in subsequent 2.53.x beta and release
    versions as fast as we are able to.
- Remove unused build dependency on libidl-devel.
- requested inclusion in Leap 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1193668</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1640692800">- update to SeaMonkey 2.53.10.2
  * Obtain Windows code-signing certificate for SeaMonkey binary and
    update signing bug 1438084.
  * Support SHA-2 hashes in CertIDs in OCSP responses - port of bug
    1746221.
  * Fix rust 1.57 Windows linking for SeaMonkey 2.53 bug 1746785.
  * SeaMonkey 2.53.10.2 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * Additional important security fixes up to Current Firefox 91.4.1
    ESR and a few enhancements have been backported. We will continue
    to enhance SeaMonkey security in subsequent 2.53.x beta and
    release versions as fast as we are able to.
  * SeaMonkey 2.53.10.2 shares most parts of the mail and news code
    with Thunderbird. Please read the Thunderbird 60.0 release notes
    for specific changes and security fixes in this release.
- requested inclusion in Leap 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1194114</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1644926400">- Drop pkgconfig(gconf-2) BuildRequires and pass ac_add_options
  - -disable-gconf to mozconfig. As we already are using cairo-gtk3,
  gconf support serves no purpose (gio/gsettings takes care).</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1646308800">- update to SeaMonkey 2.53.11
  * Remove obsolete MOZ_EXTENSIONS check in suite bug 1749146.
  * Add connect button to cZ Networks Editor bug 1736443.
  * Remove freenode remnants from ChatZilla in SeaMonkey bug 1741082.
  * Prefer secure over insecure protocol in network list in ChatZilla
    bug 1744440.
  * Composer - Change tag textbox is not removed after use bug
    1755369.
  * Clean up repo links in debugQA bug 1746790.
  * Fix misspelled references to macOS in suite bug 1749144.
  * Remove obsolete references to Java and Flash bug 1749141.
  * Help button not working in delete cert dialog bug 1750386.
  * Rearrange Message Filter Dialog to make room for new features bug
    1735053.
  * Use Insert key as shortcut to create new message filters bug 1735055.
  * Rename some variables used in SeaMonkey's FilterListDialog to
    match Thunderbird's bug 1735056.
  * Implement Copy to New message filter functionality bug 1735057.
  * Add move to top / bottom buttons to message filters bug 1735059.
  * Add preference to not prompt for message filter deletion bug
    1735061.
  * Clean up folder handling in FilterListDialog bug 1736425.
  * Add refresh function to Filter list dialog so that it can be
    updated when already open and new filters are added externally bug
    1737450.
  * Use listbox rather than tree in FilterListDialog bug 1746081.
  * MsgFilterList(args) should take targetFilter and pass it to
    FilterListDialog bug 1753891.
  * Mail&amp;News' start.xhtml: "We" link broken bug 1748178.
  * Add search functionality to filter dialog bug 1749207.
  * Move the taskbar refresh timer in SeaMonkey to idle dispatch bug
    1746788.
  * Prevent subresource loads from showing the progress indicator on
    the tab in SeaMonkey bug 1746787.
  * SeaMonkey 2.53.11 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * Additional important security fixes up to Current Firefox 91.6 ESR
    and a few enhancements have been backported. We will continue to
    enhance SeaMonkey security in subsequent 2.53.x beta and release
    versions as fast as we are able to.
  * SeaMonkey 2.53.11 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.0 release notes for
    specific changes and security fixes in this release.
- adapt seamonkey-man-page.patch for SeaMonkey 2.53.11
- requested inclusion in Leap 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1196703</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1648209600">- update to SeaMonkey 2.53.11.1
  * Fix edge case when setting IntersectionObserver threshold bug
    1758291.
  * OAuth2 prefs should use realuserName instead of username bug
    1518126.
  * SeaMonkey 2.53.11.1 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.11.1 shares most parts of the mail and news code
    with Thunderbird. Please read the Thunderbird 60.8.0 release notes
    for specific security fixes in this release.
  * Additional important security fixes up to Current Firefox 91.7 and
    Thunderbird 91.7 ESR plus many enhancements have been
    backported. We will continue to enhance SeaMonkey security in
    subsequent 2.53.x beta and release versions as fast as we are able
    to.
- requested inclusion in Leap 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1197518</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1651665600">- update to SeaMonkey 2.53.12
  * Format Toolbar forgets its hidden status when switching to other
    view modes bug 1719020.
  * Remove obsolete plugin code from SeaMonkey bug 1762733.
  * Fix a few strict warnings in SeaMonkey bug 1755553.
  * Remove Run Flash from Site permissions and page info bug 1758289.
  * Use fixIterator and replace use of removeItemAt in
    FilterListDialog bug 1756359.
  * Remove RDF usage in tabmail.js bug 1758282.
  * Implement 'Edit Template' and 'New Message From Template' commands
    and UI bug 1759376.
  * [SM] Implement 'Edit Draft' command and hide it when not in a
    draft folder (port Thunderbird bug 1106412) bug 1256716.
  * Messages in Template folder need "Edit Template" button in header
    (like for Drafts) bug 80280.
  * Refactor and simplify the feed Subscribe dialog options updates
    bug 1420473.
  * Add system memory and disk size and placeDB page limit to
    about:support bug 1753729.
  * Remove warning about missing plugins in SeaMonkey 2.53 and 2.57
    bug 1755558.
  * SeaMonkey 2.53.12 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.12 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.8.0 release notes for
    specific security fixes in this release.
  * Additional important security fixes up to Current Firefox 91.9 and
    Thunderbird 91.9 ESR plus many enhancements have been
    backported. We will continue to enhance SeaMonkey security in
    subsequent 2.53.x beta and release versions as fast as we are able
    to.
- remove/update references to obsolete gtk2 directory
- requested inclusion in Leap 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1199197</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1655208000">- Add --disable-elf-hack for aarch64 to fix build</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1657540800">- update to SeaMonkey 2.53.13
  * Updates to devtools.
  * Updates to build configuration.
  * Starting the switch from Python 2 to Python 3 in the build system.
  * Removal of array comprehensions, legacy iterators and generators
    bug 1414340 and bug 1098412.
  * Adding initial optional chaining and Promise.allSettled() support.
  * SeaMonkey 2.53.13 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.13 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.8.0 release notes for
    specific security fixes in this release.
  * Additional important security fixes up to Current Firefox 91.11
    and Thunderbird 91.11 ESR plus many enhancements have been
    backported. We will continue to enhance SeaMonkey security in
    subsequent 2.53.x beta and release versions as fast as we are able
    to.
- adapt seamonkey-man-page.patch for SeaMonkey 2.53.13
- disable LTO for Tumbleweed builds due to linker errors
- requested inclusion in Leap 15.4 and 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1201406</changelog>
</package>
<package pkgid="616dcc243d7fa995f643bd15fe3880b75d583a27e2d94e892751371efdb0dc7c" name="seamonkey-dom-inspector" arch="x86_64">
  <version epoch="0" ver="2.53.13" rel="bp154.2.3.1"/>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1619611200">- add upstream patch seamonkey-websocketloop.patch from
  https://bugzilla.mozilla.org/attachment.cgi?id=9218795&amp;action=diff
  to solve critical performance issue
  https://bugzilla.mozilla.org/show_bug.cgi?id=1633339</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1620129600">- use system libraries for bz2, webp, and icu to reduce package size
  and because this is probably more secure (since our own libraries
  are probably updated more often than the ones bundled with
  SeaMonkey)</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1620216000">- update GNU Makefile from upstream
  https://bugzilla.mozilla.org/show_bug.cgi?id=1692516#c8 -- besides
  some general improvements, this Makefile now allows the language
  packs for the bundled extensions to be split off again if desired
  (though our spec file does not yet take advantage of this)</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1621339200">- add patch seamonkey-rustc-bootstrap.patch adapted from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1710154 to enable
  compilation with rust &gt;= 1.50.0</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1625659200">- update to SeaMonkey 2.53.8
  * Serious performance improvements and bug fixes tracked in bug
    1633339 and bug 1711050.
  * Language attributes with country codes not recognized when
    building the Website Navigation Bar link toolbar bug 134436 and
    bug 1709443.
  * Optimize SeaMonkey icons for speed and optional higher quality for
    branding bug 1362210 and bug 1699322.
  * Support from= option when opening email compose window from the
    command line bug 1628671.
  * Update subject handling and GenericSendMessage function in compose
    window bug 1693994.
  * All message windows should update when view preferences are
    changed bug 1694765.
  * Improve marking of multiple messages as read / unread bug 1700530.
  * Show version numbers again in the add-on manager by the partial
    backout of bug 1161183.
  * Update available networks in chatZilla (including adding
    libera.chat)bug 1704392 and bug 1712505.
  * Change default port for IRC via TLS/SSL to 6697 bug 1704280.
  * Remove chatZilla and Lightning extension language packs and
    incorpate localisations within the main language pack bug 1604663.
  * Fix address drag and drop handling in compose window bug 1712002
    and bug 1712227.
  * Further fixes for legacy generators and the deprecated for each
    statement in add-ons and the Add-on SDK bug 1702903.
  * For developers, fork DOMi repo into main SeaMonkey one which means
    no need to separately checkout the extension bug 1700003.
  * SeaMonkey 2.53.8 uses the same backend as Firefox and contains the
    relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.8 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.0 release notes for
    specific changes and security fixes in this release.
  * Additional important security fixes up to Current Firefox 78.11
    ESR and a few enhancements have been backported. We will continue
    to enhance SeaMonkey security in subsequent 2.53.x beta and
    release versions as fast as we are able to.
- removed obsolete seamonkey-websocketloop.patch and
  seamonkey-rustc-bootstrap.patch (now integrated upstream)</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1625745600">- requested inclusion in Leap 15.3 and Leap 15.2:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1188100</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1626955200">- update to SeaMonkey 2.53.8.1
  * Archive message action does not work bug 1718839.
  * Do not preserve offlineMsgSize parameter when moving/copying
    emails between folders bug 1720202 and bug 1430480.
  * Move thread code to threadPane.js and remove messengerdnd.js bug
    515675.
  * SeaMonkey 2.53.8.1 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.8.1 shares most parts of the mail and news code
    with Thunderbird. Please read the Thunderbird 60.0 release notes
    for specific changes and security fixes in this release.
  * Additional important security fixes up to Current Firefox 78.12
    ESR and a few enhancements have been backported. We will continue
    to enhance SeaMonkey security in subsequent 2.53.x beta and
    release versions as fast as we are able to.
- requested inclusion in Leap 15.3 and Leap 15.2:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1188614</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1627387200">- Remove --disable-elf-hack when not available: aarch64 and ppc64*</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1629374400">- add upstream patch seamonkey-packed_simd.patch which allows
  packed_simd to compile with Rust 1.54</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1629979200">- update to SeaMonkey 2.53.9
  * There is now an option to clear browser history during shutdown
    bug 1621445.
  * Uninstall plugin command for ChatZilla bug 541719.
  * Update icons used in ChatZilla status bar bug 1710238 and bug
    1710249.
  * Make ChatZilla understand mIRC color code 99 bug 1710298.
  * Implement IRCv3 basic CAP negotiation bug 1717539 and CAP LIST and
    update CAP ACK and CAP LS bug 1710313.
  * Use Unicode instead of images for emojis in ChatZilla bug 1711375
    and add some extra emojis bug 1711376.
  * Use SeaMonkey's configured web search rather than a separate one
    in ChatZilla bug 1712498.
  * Add a networks editor to ChatZilla bug 1716232.
  * Implement IRCv3 away-notify bug 1717543, chghost and
    userhost-in-names bug 1717544, self-messaging bug 1722212 and WHOX
    bug 1722214.
  * Link to SeaMonkey website in debugQA for verification sites and
    development section bug 1685606.
  * Send button should be disable until we have a recipient bug
    104973.
  * Remove need to use a modifier for marking messages as unread bug
    1719216.
  * SeaMonkey 2.53.9 uses the same backend as Firefox and contains the
    relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.9 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.0 release notes for
    specific changes and security fixes in this release.
  * Additional important security fixes up to Current Firefox 78.13
    ESR and a few enhancements have been backported. We will continue
    to enhance SeaMonkey security in subsequent 2.53.x beta and
    release versions as fast as we are able to.
- removed obsolete patch seamonkey-packed_simd.patch (integrated
  upstream)
- update seamonkey-lto.patch to work with 2.53.9
- requested inclusion in Leap 15.3 and Leap 15.2:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1189845</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1632830400">- update to SeaMonkey 2.53.9.1
  * Fix the lazy loading of images from some websites bug 1727967.
  * Move certain font family defaults from serif to sans serif bug
    1727982.
  * SeaMonkey 2.53.9.1 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.9.1 shares most parts of the mail and news code
    with Thunderbird. Please read the Thunderbird 60.0 release notes
    for specific changes and security fixes in this release.
  * Additional important security fixes up to Current Firefox 78.14
    ESR and a few enhancements have been backported. We will continue
    to enhance SeaMonkey security in subsequent 2.53.x beta and
    release versions as fast as we are able to.
- requested inclusion in Leap 15.3 and Leap 15.2:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1191022</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1637064000">- update to SeaMonkey 2.53.10
  * Minor fixes for testdisplay command in ChatZilla bug 1727976.
  * Show CTCP requests (excluding ACTION and DCC) bug 1722156.
  * IRCv3: Add support for server-time bug 1724586.
  * Add localization note for network editor dialog width in ChatZilla
    bug 1727977.
  * IRCv3: Add support for extended-join and account-notify bug
    1722159.
  * Add ability to collapse message groups in ChatZilla bug 1724588.
  * Fix JS strict warnings in unescapeTagValue in ChatZilla bug
    1727989.
  * IRCv3: Add support for invite-notify bug 1722161.
  * IRCv3: Add support for batch bug 1724589.
  * Fix JS strict warning in addHistory in cZ static.js bug 1727992.
  * IRCv3: Add support for cap-notify bug 1722162.
  * Stop using canonical name as collection keys in ChatZilla bug
    1728025.
  * IRCv3: Add support for TLS and STS bug 1722166.
  * Helper function for renaming irc server properties in ChatZilla
    bug 1728027.
  * IRCv3: Add support for MONITOR bug 1722174.
  * Remove use of msg.commasp in ChatZilla bug 1726965.
  * Allow shiftKey to modify behaviour of link clicking in cZ bug
    1713458.
  * IRCv3: Add support for echo-message bug 1722211.
  * In ChatZilla make /commands return all matches starting with
    pattern bug 1726966.
  * Use SeaMonkey prefs to determine how links behave in cZ bug
    1713467.
  * Allow parameters to be localised in ChatZilla bug 1724105.
  * Add identify command to cZ and hook into password management bug
    1713470.
  * IRCv3.1: Implement SASL with PLAIN mechanism bug 1717545.
  * IRCv3: Add support for message tags bug 1724584.
  * Add last read message divider to ChatZilla bug 1729159.
  * IRCv3: Add support for account-tag bug 1724585.
  * Missing option "text encoding Unicode/UTF-8" in preferences -
    Mailnews bug 1679260.
  * Detect Crashreporter using AppConstants in SeaMonkey bug 1735236.
  * Link about LEGACY extensions in Add-ons Manager is broken bug
    1656797.
  * Update help for clear private data preferences and dialog bug
    1728911.
  * Fix typo in cs_nav_prefs_appearance bug 1737473.
  * Drop leftover "Edit Menu" comment from messageWindow.xul and
    addressbook.xul bug 1725121.
  * Add dummy tab routines to SeaMonkey mailnews tab browser bug
    1735243.
  * Folder pane and tab/window title not updated correctly when
    opening in new tab bug 1726940.
  * Allow mail tab bar to be controlled separately to browser tab bar
    bug 1724515.
  * Copy any user set values for new mail.tabs prefs bug 1729165.
  * Merge Master Passwords and Passwords pref panes into a single pref
    pane bug 1728099.
  * Move warning about redirection pref from Content to Privacy &amp;
    Security pane bug 1728185.
  * Move website icons prefs from content pref pane to browser pref
    pane bug 1727425.
  * Move browser / mailnews system integration prefs into advanced
    pane bug 1727659.
  * Have separate opentabfor.middleclick for mailnews bug 1727948.
  * Add removeBrowser helper for tabbrowser bug 1730391.
  * Put &lt;browser&gt; in a &lt;stack&gt; so it's easy to overlay bug 1730392.
  * Allow browser focus to be avoided bug 1720003.
  * SeaMonkey 32x32 default icon has light stripe at the bottom bug
    1729153.
  * Support &lt;input type=time&gt; and &lt;input type=date&gt; in SeaMonkey bug
    1730408.
  * Middleclick on browser tab handled twice (closes tab and loads URL
    from primary or clipboard) bug 1734407.
  * Unable to create a new "Saved Search Folder" using "Save View as a
    Folder..." bug 1738669.
  * Enable compression for standard http connections bug 1728996.
  * Support VS2022 for compiling under Windows bug 1728988.
  * SeaMonkey 2.53.10 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.10 shares most parts of the mail and news code
    with Thunderbird. Please read the Thunderbird 60.0 release notes
    for specific changes and security fixes in this release.
  * Additional important security fixes up to Current Firefox 78.15
    ESR and a few enhancements have been backported. We will continue
    to enhance SeaMonkey security in subsequent 2.53.x beta and
    release versions as fast as we are able to.
- requested inclusion in Leap 15.3 and Leap 15.2:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1192742</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1639396800">- update to SeaMonkey 2.53.10.1
  * Security fix for NSS code bug 1737470.
  * Only use networks and servers in lower case in ChatZilla bug
    1742502.
  * Change classic form icon in SeaMonkey composer bug 1710915.
  * Addition fixes for SeaMonkey 32x32 default icons on Windows and
    macOS bug 1729153.
  * SeaMonkey 2.53.10.1 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.10.1 shares most parts of the mail and news code
    with Thunderbird. Please read the Thunderbird 60.0 release notes
    for specific changes and security fixes in this release.
  * Additional important security fixes up to Current Firefox 91.4 ESR
    and a few enhancements have been backported. We will continue to
    enhance SeaMonkey security in subsequent 2.53.x beta and release
    versions as fast as we are able to.
- Remove unused build dependency on libidl-devel.
- requested inclusion in Leap 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1193668</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1640692800">- update to SeaMonkey 2.53.10.2
  * Obtain Windows code-signing certificate for SeaMonkey binary and
    update signing bug 1438084.
  * Support SHA-2 hashes in CertIDs in OCSP responses - port of bug
    1746221.
  * Fix rust 1.57 Windows linking for SeaMonkey 2.53 bug 1746785.
  * SeaMonkey 2.53.10.2 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * Additional important security fixes up to Current Firefox 91.4.1
    ESR and a few enhancements have been backported. We will continue
    to enhance SeaMonkey security in subsequent 2.53.x beta and
    release versions as fast as we are able to.
  * SeaMonkey 2.53.10.2 shares most parts of the mail and news code
    with Thunderbird. Please read the Thunderbird 60.0 release notes
    for specific changes and security fixes in this release.
- requested inclusion in Leap 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1194114</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1644926400">- Drop pkgconfig(gconf-2) BuildRequires and pass ac_add_options
  - -disable-gconf to mozconfig. As we already are using cairo-gtk3,
  gconf support serves no purpose (gio/gsettings takes care).</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1646308800">- update to SeaMonkey 2.53.11
  * Remove obsolete MOZ_EXTENSIONS check in suite bug 1749146.
  * Add connect button to cZ Networks Editor bug 1736443.
  * Remove freenode remnants from ChatZilla in SeaMonkey bug 1741082.
  * Prefer secure over insecure protocol in network list in ChatZilla
    bug 1744440.
  * Composer - Change tag textbox is not removed after use bug
    1755369.
  * Clean up repo links in debugQA bug 1746790.
  * Fix misspelled references to macOS in suite bug 1749144.
  * Remove obsolete references to Java and Flash bug 1749141.
  * Help button not working in delete cert dialog bug 1750386.
  * Rearrange Message Filter Dialog to make room for new features bug
    1735053.
  * Use Insert key as shortcut to create new message filters bug 1735055.
  * Rename some variables used in SeaMonkey's FilterListDialog to
    match Thunderbird's bug 1735056.
  * Implement Copy to New message filter functionality bug 1735057.
  * Add move to top / bottom buttons to message filters bug 1735059.
  * Add preference to not prompt for message filter deletion bug
    1735061.
  * Clean up folder handling in FilterListDialog bug 1736425.
  * Add refresh function to Filter list dialog so that it can be
    updated when already open and new filters are added externally bug
    1737450.
  * Use listbox rather than tree in FilterListDialog bug 1746081.
  * MsgFilterList(args) should take targetFilter and pass it to
    FilterListDialog bug 1753891.
  * Mail&amp;News' start.xhtml: "We" link broken bug 1748178.
  * Add search functionality to filter dialog bug 1749207.
  * Move the taskbar refresh timer in SeaMonkey to idle dispatch bug
    1746788.
  * Prevent subresource loads from showing the progress indicator on
    the tab in SeaMonkey bug 1746787.
  * SeaMonkey 2.53.11 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * Additional important security fixes up to Current Firefox 91.6 ESR
    and a few enhancements have been backported. We will continue to
    enhance SeaMonkey security in subsequent 2.53.x beta and release
    versions as fast as we are able to.
  * SeaMonkey 2.53.11 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.0 release notes for
    specific changes and security fixes in this release.
- adapt seamonkey-man-page.patch for SeaMonkey 2.53.11
- requested inclusion in Leap 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1196703</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1648209600">- update to SeaMonkey 2.53.11.1
  * Fix edge case when setting IntersectionObserver threshold bug
    1758291.
  * OAuth2 prefs should use realuserName instead of username bug
    1518126.
  * SeaMonkey 2.53.11.1 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.11.1 shares most parts of the mail and news code
    with Thunderbird. Please read the Thunderbird 60.8.0 release notes
    for specific security fixes in this release.
  * Additional important security fixes up to Current Firefox 91.7 and
    Thunderbird 91.7 ESR plus many enhancements have been
    backported. We will continue to enhance SeaMonkey security in
    subsequent 2.53.x beta and release versions as fast as we are able
    to.
- requested inclusion in Leap 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1197518</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1651665600">- update to SeaMonkey 2.53.12
  * Format Toolbar forgets its hidden status when switching to other
    view modes bug 1719020.
  * Remove obsolete plugin code from SeaMonkey bug 1762733.
  * Fix a few strict warnings in SeaMonkey bug 1755553.
  * Remove Run Flash from Site permissions and page info bug 1758289.
  * Use fixIterator and replace use of removeItemAt in
    FilterListDialog bug 1756359.
  * Remove RDF usage in tabmail.js bug 1758282.
  * Implement 'Edit Template' and 'New Message From Template' commands
    and UI bug 1759376.
  * [SM] Implement 'Edit Draft' command and hide it when not in a
    draft folder (port Thunderbird bug 1106412) bug 1256716.
  * Messages in Template folder need "Edit Template" button in header
    (like for Drafts) bug 80280.
  * Refactor and simplify the feed Subscribe dialog options updates
    bug 1420473.
  * Add system memory and disk size and placeDB page limit to
    about:support bug 1753729.
  * Remove warning about missing plugins in SeaMonkey 2.53 and 2.57
    bug 1755558.
  * SeaMonkey 2.53.12 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.12 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.8.0 release notes for
    specific security fixes in this release.
  * Additional important security fixes up to Current Firefox 91.9 and
    Thunderbird 91.9 ESR plus many enhancements have been
    backported. We will continue to enhance SeaMonkey security in
    subsequent 2.53.x beta and release versions as fast as we are able
    to.
- remove/update references to obsolete gtk2 directory
- requested inclusion in Leap 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1199197</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1655208000">- Add --disable-elf-hack for aarch64 to fix build</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1657540800">- update to SeaMonkey 2.53.13
  * Updates to devtools.
  * Updates to build configuration.
  * Starting the switch from Python 2 to Python 3 in the build system.
  * Removal of array comprehensions, legacy iterators and generators
    bug 1414340 and bug 1098412.
  * Adding initial optional chaining and Promise.allSettled() support.
  * SeaMonkey 2.53.13 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.13 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.8.0 release notes for
    specific security fixes in this release.
  * Additional important security fixes up to Current Firefox 91.11
    and Thunderbird 91.11 ESR plus many enhancements have been
    backported. We will continue to enhance SeaMonkey security in
    subsequent 2.53.x beta and release versions as fast as we are able
    to.
- adapt seamonkey-man-page.patch for SeaMonkey 2.53.13
- disable LTO for Tumbleweed builds due to linker errors
- requested inclusion in Leap 15.4 and 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1201406</changelog>
</package>
<package pkgid="5b2d711e7f30ab5e47f99a57659cfbb675c4607dfe1c4bda72ba2ca531766b26" name="seamonkey-irc" arch="aarch64">
  <version epoch="0" ver="2.53.13" rel="bp154.2.3.1"/>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1619611200">- add upstream patch seamonkey-websocketloop.patch from
  https://bugzilla.mozilla.org/attachment.cgi?id=9218795&amp;action=diff
  to solve critical performance issue
  https://bugzilla.mozilla.org/show_bug.cgi?id=1633339</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1620129600">- use system libraries for bz2, webp, and icu to reduce package size
  and because this is probably more secure (since our own libraries
  are probably updated more often than the ones bundled with
  SeaMonkey)</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1620216000">- update GNU Makefile from upstream
  https://bugzilla.mozilla.org/show_bug.cgi?id=1692516#c8 -- besides
  some general improvements, this Makefile now allows the language
  packs for the bundled extensions to be split off again if desired
  (though our spec file does not yet take advantage of this)</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1621339200">- add patch seamonkey-rustc-bootstrap.patch adapted from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1710154 to enable
  compilation with rust &gt;= 1.50.0</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1625659200">- update to SeaMonkey 2.53.8
  * Serious performance improvements and bug fixes tracked in bug
    1633339 and bug 1711050.
  * Language attributes with country codes not recognized when
    building the Website Navigation Bar link toolbar bug 134436 and
    bug 1709443.
  * Optimize SeaMonkey icons for speed and optional higher quality for
    branding bug 1362210 and bug 1699322.
  * Support from= option when opening email compose window from the
    command line bug 1628671.
  * Update subject handling and GenericSendMessage function in compose
    window bug 1693994.
  * All message windows should update when view preferences are
    changed bug 1694765.
  * Improve marking of multiple messages as read / unread bug 1700530.
  * Show version numbers again in the add-on manager by the partial
    backout of bug 1161183.
  * Update available networks in chatZilla (including adding
    libera.chat)bug 1704392 and bug 1712505.
  * Change default port for IRC via TLS/SSL to 6697 bug 1704280.
  * Remove chatZilla and Lightning extension language packs and
    incorpate localisations within the main language pack bug 1604663.
  * Fix address drag and drop handling in compose window bug 1712002
    and bug 1712227.
  * Further fixes for legacy generators and the deprecated for each
    statement in add-ons and the Add-on SDK bug 1702903.
  * For developers, fork DOMi repo into main SeaMonkey one which means
    no need to separately checkout the extension bug 1700003.
  * SeaMonkey 2.53.8 uses the same backend as Firefox and contains the
    relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.8 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.0 release notes for
    specific changes and security fixes in this release.
  * Additional important security fixes up to Current Firefox 78.11
    ESR and a few enhancements have been backported. We will continue
    to enhance SeaMonkey security in subsequent 2.53.x beta and
    release versions as fast as we are able to.
- removed obsolete seamonkey-websocketloop.patch and
  seamonkey-rustc-bootstrap.patch (now integrated upstream)</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1625745600">- requested inclusion in Leap 15.3 and Leap 15.2:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1188100</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1626955200">- update to SeaMonkey 2.53.8.1
  * Archive message action does not work bug 1718839.
  * Do not preserve offlineMsgSize parameter when moving/copying
    emails between folders bug 1720202 and bug 1430480.
  * Move thread code to threadPane.js and remove messengerdnd.js bug
    515675.
  * SeaMonkey 2.53.8.1 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.8.1 shares most parts of the mail and news code
    with Thunderbird. Please read the Thunderbird 60.0 release notes
    for specific changes and security fixes in this release.
  * Additional important security fixes up to Current Firefox 78.12
    ESR and a few enhancements have been backported. We will continue
    to enhance SeaMonkey security in subsequent 2.53.x beta and
    release versions as fast as we are able to.
- requested inclusion in Leap 15.3 and Leap 15.2:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1188614</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1627387200">- Remove --disable-elf-hack when not available: aarch64 and ppc64*</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1629374400">- add upstream patch seamonkey-packed_simd.patch which allows
  packed_simd to compile with Rust 1.54</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1629979200">- update to SeaMonkey 2.53.9
  * There is now an option to clear browser history during shutdown
    bug 1621445.
  * Uninstall plugin command for ChatZilla bug 541719.
  * Update icons used in ChatZilla status bar bug 1710238 and bug
    1710249.
  * Make ChatZilla understand mIRC color code 99 bug 1710298.
  * Implement IRCv3 basic CAP negotiation bug 1717539 and CAP LIST and
    update CAP ACK and CAP LS bug 1710313.
  * Use Unicode instead of images for emojis in ChatZilla bug 1711375
    and add some extra emojis bug 1711376.
  * Use SeaMonkey's configured web search rather than a separate one
    in ChatZilla bug 1712498.
  * Add a networks editor to ChatZilla bug 1716232.
  * Implement IRCv3 away-notify bug 1717543, chghost and
    userhost-in-names bug 1717544, self-messaging bug 1722212 and WHOX
    bug 1722214.
  * Link to SeaMonkey website in debugQA for verification sites and
    development section bug 1685606.
  * Send button should be disable until we have a recipient bug
    104973.
  * Remove need to use a modifier for marking messages as unread bug
    1719216.
  * SeaMonkey 2.53.9 uses the same backend as Firefox and contains the
    relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.9 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.0 release notes for
    specific changes and security fixes in this release.
  * Additional important security fixes up to Current Firefox 78.13
    ESR and a few enhancements have been backported. We will continue
    to enhance SeaMonkey security in subsequent 2.53.x beta and
    release versions as fast as we are able to.
- removed obsolete patch seamonkey-packed_simd.patch (integrated
  upstream)
- update seamonkey-lto.patch to work with 2.53.9
- requested inclusion in Leap 15.3 and Leap 15.2:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1189845</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1632830400">- update to SeaMonkey 2.53.9.1
  * Fix the lazy loading of images from some websites bug 1727967.
  * Move certain font family defaults from serif to sans serif bug
    1727982.
  * SeaMonkey 2.53.9.1 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.9.1 shares most parts of the mail and news code
    with Thunderbird. Please read the Thunderbird 60.0 release notes
    for specific changes and security fixes in this release.
  * Additional important security fixes up to Current Firefox 78.14
    ESR and a few enhancements have been backported. We will continue
    to enhance SeaMonkey security in subsequent 2.53.x beta and
    release versions as fast as we are able to.
- requested inclusion in Leap 15.3 and Leap 15.2:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1191022</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1637064000">- update to SeaMonkey 2.53.10
  * Minor fixes for testdisplay command in ChatZilla bug 1727976.
  * Show CTCP requests (excluding ACTION and DCC) bug 1722156.
  * IRCv3: Add support for server-time bug 1724586.
  * Add localization note for network editor dialog width in ChatZilla
    bug 1727977.
  * IRCv3: Add support for extended-join and account-notify bug
    1722159.
  * Add ability to collapse message groups in ChatZilla bug 1724588.
  * Fix JS strict warnings in unescapeTagValue in ChatZilla bug
    1727989.
  * IRCv3: Add support for invite-notify bug 1722161.
  * IRCv3: Add support for batch bug 1724589.
  * Fix JS strict warning in addHistory in cZ static.js bug 1727992.
  * IRCv3: Add support for cap-notify bug 1722162.
  * Stop using canonical name as collection keys in ChatZilla bug
    1728025.
  * IRCv3: Add support for TLS and STS bug 1722166.
  * Helper function for renaming irc server properties in ChatZilla
    bug 1728027.
  * IRCv3: Add support for MONITOR bug 1722174.
  * Remove use of msg.commasp in ChatZilla bug 1726965.
  * Allow shiftKey to modify behaviour of link clicking in cZ bug
    1713458.
  * IRCv3: Add support for echo-message bug 1722211.
  * In ChatZilla make /commands return all matches starting with
    pattern bug 1726966.
  * Use SeaMonkey prefs to determine how links behave in cZ bug
    1713467.
  * Allow parameters to be localised in ChatZilla bug 1724105.
  * Add identify command to cZ and hook into password management bug
    1713470.
  * IRCv3.1: Implement SASL with PLAIN mechanism bug 1717545.
  * IRCv3: Add support for message tags bug 1724584.
  * Add last read message divider to ChatZilla bug 1729159.
  * IRCv3: Add support for account-tag bug 1724585.
  * Missing option "text encoding Unicode/UTF-8" in preferences -
    Mailnews bug 1679260.
  * Detect Crashreporter using AppConstants in SeaMonkey bug 1735236.
  * Link about LEGACY extensions in Add-ons Manager is broken bug
    1656797.
  * Update help for clear private data preferences and dialog bug
    1728911.
  * Fix typo in cs_nav_prefs_appearance bug 1737473.
  * Drop leftover "Edit Menu" comment from messageWindow.xul and
    addressbook.xul bug 1725121.
  * Add dummy tab routines to SeaMonkey mailnews tab browser bug
    1735243.
  * Folder pane and tab/window title not updated correctly when
    opening in new tab bug 1726940.
  * Allow mail tab bar to be controlled separately to browser tab bar
    bug 1724515.
  * Copy any user set values for new mail.tabs prefs bug 1729165.
  * Merge Master Passwords and Passwords pref panes into a single pref
    pane bug 1728099.
  * Move warning about redirection pref from Content to Privacy &amp;
    Security pane bug 1728185.
  * Move website icons prefs from content pref pane to browser pref
    pane bug 1727425.
  * Move browser / mailnews system integration prefs into advanced
    pane bug 1727659.
  * Have separate opentabfor.middleclick for mailnews bug 1727948.
  * Add removeBrowser helper for tabbrowser bug 1730391.
  * Put &lt;browser&gt; in a &lt;stack&gt; so it's easy to overlay bug 1730392.
  * Allow browser focus to be avoided bug 1720003.
  * SeaMonkey 32x32 default icon has light stripe at the bottom bug
    1729153.
  * Support &lt;input type=time&gt; and &lt;input type=date&gt; in SeaMonkey bug
    1730408.
  * Middleclick on browser tab handled twice (closes tab and loads URL
    from primary or clipboard) bug 1734407.
  * Unable to create a new "Saved Search Folder" using "Save View as a
    Folder..." bug 1738669.
  * Enable compression for standard http connections bug 1728996.
  * Support VS2022 for compiling under Windows bug 1728988.
  * SeaMonkey 2.53.10 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.10 shares most parts of the mail and news code
    with Thunderbird. Please read the Thunderbird 60.0 release notes
    for specific changes and security fixes in this release.
  * Additional important security fixes up to Current Firefox 78.15
    ESR and a few enhancements have been backported. We will continue
    to enhance SeaMonkey security in subsequent 2.53.x beta and
    release versions as fast as we are able to.
- requested inclusion in Leap 15.3 and Leap 15.2:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1192742</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1639396800">- update to SeaMonkey 2.53.10.1
  * Security fix for NSS code bug 1737470.
  * Only use networks and servers in lower case in ChatZilla bug
    1742502.
  * Change classic form icon in SeaMonkey composer bug 1710915.
  * Addition fixes for SeaMonkey 32x32 default icons on Windows and
    macOS bug 1729153.
  * SeaMonkey 2.53.10.1 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.10.1 shares most parts of the mail and news code
    with Thunderbird. Please read the Thunderbird 60.0 release notes
    for specific changes and security fixes in this release.
  * Additional important security fixes up to Current Firefox 91.4 ESR
    and a few enhancements have been backported. We will continue to
    enhance SeaMonkey security in subsequent 2.53.x beta and release
    versions as fast as we are able to.
- Remove unused build dependency on libidl-devel.
- requested inclusion in Leap 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1193668</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1640692800">- update to SeaMonkey 2.53.10.2
  * Obtain Windows code-signing certificate for SeaMonkey binary and
    update signing bug 1438084.
  * Support SHA-2 hashes in CertIDs in OCSP responses - port of bug
    1746221.
  * Fix rust 1.57 Windows linking for SeaMonkey 2.53 bug 1746785.
  * SeaMonkey 2.53.10.2 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * Additional important security fixes up to Current Firefox 91.4.1
    ESR and a few enhancements have been backported. We will continue
    to enhance SeaMonkey security in subsequent 2.53.x beta and
    release versions as fast as we are able to.
  * SeaMonkey 2.53.10.2 shares most parts of the mail and news code
    with Thunderbird. Please read the Thunderbird 60.0 release notes
    for specific changes and security fixes in this release.
- requested inclusion in Leap 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1194114</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1644926400">- Drop pkgconfig(gconf-2) BuildRequires and pass ac_add_options
  - -disable-gconf to mozconfig. As we already are using cairo-gtk3,
  gconf support serves no purpose (gio/gsettings takes care).</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1646308800">- update to SeaMonkey 2.53.11
  * Remove obsolete MOZ_EXTENSIONS check in suite bug 1749146.
  * Add connect button to cZ Networks Editor bug 1736443.
  * Remove freenode remnants from ChatZilla in SeaMonkey bug 1741082.
  * Prefer secure over insecure protocol in network list in ChatZilla
    bug 1744440.
  * Composer - Change tag textbox is not removed after use bug
    1755369.
  * Clean up repo links in debugQA bug 1746790.
  * Fix misspelled references to macOS in suite bug 1749144.
  * Remove obsolete references to Java and Flash bug 1749141.
  * Help button not working in delete cert dialog bug 1750386.
  * Rearrange Message Filter Dialog to make room for new features bug
    1735053.
  * Use Insert key as shortcut to create new message filters bug 1735055.
  * Rename some variables used in SeaMonkey's FilterListDialog to
    match Thunderbird's bug 1735056.
  * Implement Copy to New message filter functionality bug 1735057.
  * Add move to top / bottom buttons to message filters bug 1735059.
  * Add preference to not prompt for message filter deletion bug
    1735061.
  * Clean up folder handling in FilterListDialog bug 1736425.
  * Add refresh function to Filter list dialog so that it can be
    updated when already open and new filters are added externally bug
    1737450.
  * Use listbox rather than tree in FilterListDialog bug 1746081.
  * MsgFilterList(args) should take targetFilter and pass it to
    FilterListDialog bug 1753891.
  * Mail&amp;News' start.xhtml: "We" link broken bug 1748178.
  * Add search functionality to filter dialog bug 1749207.
  * Move the taskbar refresh timer in SeaMonkey to idle dispatch bug
    1746788.
  * Prevent subresource loads from showing the progress indicator on
    the tab in SeaMonkey bug 1746787.
  * SeaMonkey 2.53.11 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * Additional important security fixes up to Current Firefox 91.6 ESR
    and a few enhancements have been backported. We will continue to
    enhance SeaMonkey security in subsequent 2.53.x beta and release
    versions as fast as we are able to.
  * SeaMonkey 2.53.11 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.0 release notes for
    specific changes and security fixes in this release.
- adapt seamonkey-man-page.patch for SeaMonkey 2.53.11
- requested inclusion in Leap 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1196703</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1648209600">- update to SeaMonkey 2.53.11.1
  * Fix edge case when setting IntersectionObserver threshold bug
    1758291.
  * OAuth2 prefs should use realuserName instead of username bug
    1518126.
  * SeaMonkey 2.53.11.1 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.11.1 shares most parts of the mail and news code
    with Thunderbird. Please read the Thunderbird 60.8.0 release notes
    for specific security fixes in this release.
  * Additional important security fixes up to Current Firefox 91.7 and
    Thunderbird 91.7 ESR plus many enhancements have been
    backported. We will continue to enhance SeaMonkey security in
    subsequent 2.53.x beta and release versions as fast as we are able
    to.
- requested inclusion in Leap 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1197518</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1651665600">- update to SeaMonkey 2.53.12
  * Format Toolbar forgets its hidden status when switching to other
    view modes bug 1719020.
  * Remove obsolete plugin code from SeaMonkey bug 1762733.
  * Fix a few strict warnings in SeaMonkey bug 1755553.
  * Remove Run Flash from Site permissions and page info bug 1758289.
  * Use fixIterator and replace use of removeItemAt in
    FilterListDialog bug 1756359.
  * Remove RDF usage in tabmail.js bug 1758282.
  * Implement 'Edit Template' and 'New Message From Template' commands
    and UI bug 1759376.
  * [SM] Implement 'Edit Draft' command and hide it when not in a
    draft folder (port Thunderbird bug 1106412) bug 1256716.
  * Messages in Template folder need "Edit Template" button in header
    (like for Drafts) bug 80280.
  * Refactor and simplify the feed Subscribe dialog options updates
    bug 1420473.
  * Add system memory and disk size and placeDB page limit to
    about:support bug 1753729.
  * Remove warning about missing plugins in SeaMonkey 2.53 and 2.57
    bug 1755558.
  * SeaMonkey 2.53.12 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.12 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.8.0 release notes for
    specific security fixes in this release.
  * Additional important security fixes up to Current Firefox 91.9 and
    Thunderbird 91.9 ESR plus many enhancements have been
    backported. We will continue to enhance SeaMonkey security in
    subsequent 2.53.x beta and release versions as fast as we are able
    to.
- remove/update references to obsolete gtk2 directory
- requested inclusion in Leap 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1199197</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1655208000">- Add --disable-elf-hack for aarch64 to fix build</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1657540800">- update to SeaMonkey 2.53.13
  * Updates to devtools.
  * Updates to build configuration.
  * Starting the switch from Python 2 to Python 3 in the build system.
  * Removal of array comprehensions, legacy iterators and generators
    bug 1414340 and bug 1098412.
  * Adding initial optional chaining and Promise.allSettled() support.
  * SeaMonkey 2.53.13 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.13 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.8.0 release notes for
    specific security fixes in this release.
  * Additional important security fixes up to Current Firefox 91.11
    and Thunderbird 91.11 ESR plus many enhancements have been
    backported. We will continue to enhance SeaMonkey security in
    subsequent 2.53.x beta and release versions as fast as we are able
    to.
- adapt seamonkey-man-page.patch for SeaMonkey 2.53.13
- disable LTO for Tumbleweed builds due to linker errors
- requested inclusion in Leap 15.4 and 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1201406</changelog>
</package>
<package pkgid="b939cbe7272e14162f17e7a5ac42b2e65c52205e9e373b9e83e05045bcb814c9" name="seamonkey-irc" arch="i586">
  <version epoch="0" ver="2.53.13" rel="bp154.2.3.1"/>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1619611200">- add upstream patch seamonkey-websocketloop.patch from
  https://bugzilla.mozilla.org/attachment.cgi?id=9218795&amp;action=diff
  to solve critical performance issue
  https://bugzilla.mozilla.org/show_bug.cgi?id=1633339</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1620129600">- use system libraries for bz2, webp, and icu to reduce package size
  and because this is probably more secure (since our own libraries
  are probably updated more often than the ones bundled with
  SeaMonkey)</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1620216000">- update GNU Makefile from upstream
  https://bugzilla.mozilla.org/show_bug.cgi?id=1692516#c8 -- besides
  some general improvements, this Makefile now allows the language
  packs for the bundled extensions to be split off again if desired
  (though our spec file does not yet take advantage of this)</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1621339200">- add patch seamonkey-rustc-bootstrap.patch adapted from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1710154 to enable
  compilation with rust &gt;= 1.50.0</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1625659200">- update to SeaMonkey 2.53.8
  * Serious performance improvements and bug fixes tracked in bug
    1633339 and bug 1711050.
  * Language attributes with country codes not recognized when
    building the Website Navigation Bar link toolbar bug 134436 and
    bug 1709443.
  * Optimize SeaMonkey icons for speed and optional higher quality for
    branding bug 1362210 and bug 1699322.
  * Support from= option when opening email compose window from the
    command line bug 1628671.
  * Update subject handling and GenericSendMessage function in compose
    window bug 1693994.
  * All message windows should update when view preferences are
    changed bug 1694765.
  * Improve marking of multiple messages as read / unread bug 1700530.
  * Show version numbers again in the add-on manager by the partial
    backout of bug 1161183.
  * Update available networks in chatZilla (including adding
    libera.chat)bug 1704392 and bug 1712505.
  * Change default port for IRC via TLS/SSL to 6697 bug 1704280.
  * Remove chatZilla and Lightning extension language packs and
    incorpate localisations within the main language pack bug 1604663.
  * Fix address drag and drop handling in compose window bug 1712002
    and bug 1712227.
  * Further fixes for legacy generators and the deprecated for each
    statement in add-ons and the Add-on SDK bug 1702903.
  * For developers, fork DOMi repo into main SeaMonkey one which means
    no need to separately checkout the extension bug 1700003.
  * SeaMonkey 2.53.8 uses the same backend as Firefox and contains the
    relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.8 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.0 release notes for
    specific changes and security fixes in this release.
  * Additional important security fixes up to Current Firefox 78.11
    ESR and a few enhancements have been backported. We will continue
    to enhance SeaMonkey security in subsequent 2.53.x beta and
    release versions as fast as we are able to.
- removed obsolete seamonkey-websocketloop.patch and
  seamonkey-rustc-bootstrap.patch (now integrated upstream)</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1625745600">- requested inclusion in Leap 15.3 and Leap 15.2:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1188100</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1626955200">- update to SeaMonkey 2.53.8.1
  * Archive message action does not work bug 1718839.
  * Do not preserve offlineMsgSize parameter when moving/copying
    emails between folders bug 1720202 and bug 1430480.
  * Move thread code to threadPane.js and remove messengerdnd.js bug
    515675.
  * SeaMonkey 2.53.8.1 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.8.1 shares most parts of the mail and news code
    with Thunderbird. Please read the Thunderbird 60.0 release notes
    for specific changes and security fixes in this release.
  * Additional important security fixes up to Current Firefox 78.12
    ESR and a few enhancements have been backported. We will continue
    to enhance SeaMonkey security in subsequent 2.53.x beta and
    release versions as fast as we are able to.
- requested inclusion in Leap 15.3 and Leap 15.2:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1188614</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1627387200">- Remove --disable-elf-hack when not available: aarch64 and ppc64*</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1629374400">- add upstream patch seamonkey-packed_simd.patch which allows
  packed_simd to compile with Rust 1.54</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1629979200">- update to SeaMonkey 2.53.9
  * There is now an option to clear browser history during shutdown
    bug 1621445.
  * Uninstall plugin command for ChatZilla bug 541719.
  * Update icons used in ChatZilla status bar bug 1710238 and bug
    1710249.
  * Make ChatZilla understand mIRC color code 99 bug 1710298.
  * Implement IRCv3 basic CAP negotiation bug 1717539 and CAP LIST and
    update CAP ACK and CAP LS bug 1710313.
  * Use Unicode instead of images for emojis in ChatZilla bug 1711375
    and add some extra emojis bug 1711376.
  * Use SeaMonkey's configured web search rather than a separate one
    in ChatZilla bug 1712498.
  * Add a networks editor to ChatZilla bug 1716232.
  * Implement IRCv3 away-notify bug 1717543, chghost and
    userhost-in-names bug 1717544, self-messaging bug 1722212 and WHOX
    bug 1722214.
  * Link to SeaMonkey website in debugQA for verification sites and
    development section bug 1685606.
  * Send button should be disable until we have a recipient bug
    104973.
  * Remove need to use a modifier for marking messages as unread bug
    1719216.
  * SeaMonkey 2.53.9 uses the same backend as Firefox and contains the
    relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.9 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.0 release notes for
    specific changes and security fixes in this release.
  * Additional important security fixes up to Current Firefox 78.13
    ESR and a few enhancements have been backported. We will continue
    to enhance SeaMonkey security in subsequent 2.53.x beta and
    release versions as fast as we are able to.
- removed obsolete patch seamonkey-packed_simd.patch (integrated
  upstream)
- update seamonkey-lto.patch to work with 2.53.9
- requested inclusion in Leap 15.3 and Leap 15.2:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1189845</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1632830400">- update to SeaMonkey 2.53.9.1
  * Fix the lazy loading of images from some websites bug 1727967.
  * Move certain font family defaults from serif to sans serif bug
    1727982.
  * SeaMonkey 2.53.9.1 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.9.1 shares most parts of the mail and news code
    with Thunderbird. Please read the Thunderbird 60.0 release notes
    for specific changes and security fixes in this release.
  * Additional important security fixes up to Current Firefox 78.14
    ESR and a few enhancements have been backported. We will continue
    to enhance SeaMonkey security in subsequent 2.53.x beta and
    release versions as fast as we are able to.
- requested inclusion in Leap 15.3 and Leap 15.2:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1191022</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1637064000">- update to SeaMonkey 2.53.10
  * Minor fixes for testdisplay command in ChatZilla bug 1727976.
  * Show CTCP requests (excluding ACTION and DCC) bug 1722156.
  * IRCv3: Add support for server-time bug 1724586.
  * Add localization note for network editor dialog width in ChatZilla
    bug 1727977.
  * IRCv3: Add support for extended-join and account-notify bug
    1722159.
  * Add ability to collapse message groups in ChatZilla bug 1724588.
  * Fix JS strict warnings in unescapeTagValue in ChatZilla bug
    1727989.
  * IRCv3: Add support for invite-notify bug 1722161.
  * IRCv3: Add support for batch bug 1724589.
  * Fix JS strict warning in addHistory in cZ static.js bug 1727992.
  * IRCv3: Add support for cap-notify bug 1722162.
  * Stop using canonical name as collection keys in ChatZilla bug
    1728025.
  * IRCv3: Add support for TLS and STS bug 1722166.
  * Helper function for renaming irc server properties in ChatZilla
    bug 1728027.
  * IRCv3: Add support for MONITOR bug 1722174.
  * Remove use of msg.commasp in ChatZilla bug 1726965.
  * Allow shiftKey to modify behaviour of link clicking in cZ bug
    1713458.
  * IRCv3: Add support for echo-message bug 1722211.
  * In ChatZilla make /commands return all matches starting with
    pattern bug 1726966.
  * Use SeaMonkey prefs to determine how links behave in cZ bug
    1713467.
  * Allow parameters to be localised in ChatZilla bug 1724105.
  * Add identify command to cZ and hook into password management bug
    1713470.
  * IRCv3.1: Implement SASL with PLAIN mechanism bug 1717545.
  * IRCv3: Add support for message tags bug 1724584.
  * Add last read message divider to ChatZilla bug 1729159.
  * IRCv3: Add support for account-tag bug 1724585.
  * Missing option "text encoding Unicode/UTF-8" in preferences -
    Mailnews bug 1679260.
  * Detect Crashreporter using AppConstants in SeaMonkey bug 1735236.
  * Link about LEGACY extensions in Add-ons Manager is broken bug
    1656797.
  * Update help for clear private data preferences and dialog bug
    1728911.
  * Fix typo in cs_nav_prefs_appearance bug 1737473.
  * Drop leftover "Edit Menu" comment from messageWindow.xul and
    addressbook.xul bug 1725121.
  * Add dummy tab routines to SeaMonkey mailnews tab browser bug
    1735243.
  * Folder pane and tab/window title not updated correctly when
    opening in new tab bug 1726940.
  * Allow mail tab bar to be controlled separately to browser tab bar
    bug 1724515.
  * Copy any user set values for new mail.tabs prefs bug 1729165.
  * Merge Master Passwords and Passwords pref panes into a single pref
    pane bug 1728099.
  * Move warning about redirection pref from Content to Privacy &amp;
    Security pane bug 1728185.
  * Move website icons prefs from content pref pane to browser pref
    pane bug 1727425.
  * Move browser / mailnews system integration prefs into advanced
    pane bug 1727659.
  * Have separate opentabfor.middleclick for mailnews bug 1727948.
  * Add removeBrowser helper for tabbrowser bug 1730391.
  * Put &lt;browser&gt; in a &lt;stack&gt; so it's easy to overlay bug 1730392.
  * Allow browser focus to be avoided bug 1720003.
  * SeaMonkey 32x32 default icon has light stripe at the bottom bug
    1729153.
  * Support &lt;input type=time&gt; and &lt;input type=date&gt; in SeaMonkey bug
    1730408.
  * Middleclick on browser tab handled twice (closes tab and loads URL
    from primary or clipboard) bug 1734407.
  * Unable to create a new "Saved Search Folder" using "Save View as a
    Folder..." bug 1738669.
  * Enable compression for standard http connections bug 1728996.
  * Support VS2022 for compiling under Windows bug 1728988.
  * SeaMonkey 2.53.10 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.10 shares most parts of the mail and news code
    with Thunderbird. Please read the Thunderbird 60.0 release notes
    for specific changes and security fixes in this release.
  * Additional important security fixes up to Current Firefox 78.15
    ESR and a few enhancements have been backported. We will continue
    to enhance SeaMonkey security in subsequent 2.53.x beta and
    release versions as fast as we are able to.
- requested inclusion in Leap 15.3 and Leap 15.2:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1192742</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1639396800">- update to SeaMonkey 2.53.10.1
  * Security fix for NSS code bug 1737470.
  * Only use networks and servers in lower case in ChatZilla bug
    1742502.
  * Change classic form icon in SeaMonkey composer bug 1710915.
  * Addition fixes for SeaMonkey 32x32 default icons on Windows and
    macOS bug 1729153.
  * SeaMonkey 2.53.10.1 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.10.1 shares most parts of the mail and news code
    with Thunderbird. Please read the Thunderbird 60.0 release notes
    for specific changes and security fixes in this release.
  * Additional important security fixes up to Current Firefox 91.4 ESR
    and a few enhancements have been backported. We will continue to
    enhance SeaMonkey security in subsequent 2.53.x beta and release
    versions as fast as we are able to.
- Remove unused build dependency on libidl-devel.
- requested inclusion in Leap 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1193668</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1640692800">- update to SeaMonkey 2.53.10.2
  * Obtain Windows code-signing certificate for SeaMonkey binary and
    update signing bug 1438084.
  * Support SHA-2 hashes in CertIDs in OCSP responses - port of bug
    1746221.
  * Fix rust 1.57 Windows linking for SeaMonkey 2.53 bug 1746785.
  * SeaMonkey 2.53.10.2 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * Additional important security fixes up to Current Firefox 91.4.1
    ESR and a few enhancements have been backported. We will continue
    to enhance SeaMonkey security in subsequent 2.53.x beta and
    release versions as fast as we are able to.
  * SeaMonkey 2.53.10.2 shares most parts of the mail and news code
    with Thunderbird. Please read the Thunderbird 60.0 release notes
    for specific changes and security fixes in this release.
- requested inclusion in Leap 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1194114</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1644926400">- Drop pkgconfig(gconf-2) BuildRequires and pass ac_add_options
  - -disable-gconf to mozconfig. As we already are using cairo-gtk3,
  gconf support serves no purpose (gio/gsettings takes care).</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1646308800">- update to SeaMonkey 2.53.11
  * Remove obsolete MOZ_EXTENSIONS check in suite bug 1749146.
  * Add connect button to cZ Networks Editor bug 1736443.
  * Remove freenode remnants from ChatZilla in SeaMonkey bug 1741082.
  * Prefer secure over insecure protocol in network list in ChatZilla
    bug 1744440.
  * Composer - Change tag textbox is not removed after use bug
    1755369.
  * Clean up repo links in debugQA bug 1746790.
  * Fix misspelled references to macOS in suite bug 1749144.
  * Remove obsolete references to Java and Flash bug 1749141.
  * Help button not working in delete cert dialog bug 1750386.
  * Rearrange Message Filter Dialog to make room for new features bug
    1735053.
  * Use Insert key as shortcut to create new message filters bug 1735055.
  * Rename some variables used in SeaMonkey's FilterListDialog to
    match Thunderbird's bug 1735056.
  * Implement Copy to New message filter functionality bug 1735057.
  * Add move to top / bottom buttons to message filters bug 1735059.
  * Add preference to not prompt for message filter deletion bug
    1735061.
  * Clean up folder handling in FilterListDialog bug 1736425.
  * Add refresh function to Filter list dialog so that it can be
    updated when already open and new filters are added externally bug
    1737450.
  * Use listbox rather than tree in FilterListDialog bug 1746081.
  * MsgFilterList(args) should take targetFilter and pass it to
    FilterListDialog bug 1753891.
  * Mail&amp;News' start.xhtml: "We" link broken bug 1748178.
  * Add search functionality to filter dialog bug 1749207.
  * Move the taskbar refresh timer in SeaMonkey to idle dispatch bug
    1746788.
  * Prevent subresource loads from showing the progress indicator on
    the tab in SeaMonkey bug 1746787.
  * SeaMonkey 2.53.11 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * Additional important security fixes up to Current Firefox 91.6 ESR
    and a few enhancements have been backported. We will continue to
    enhance SeaMonkey security in subsequent 2.53.x beta and release
    versions as fast as we are able to.
  * SeaMonkey 2.53.11 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.0 release notes for
    specific changes and security fixes in this release.
- adapt seamonkey-man-page.patch for SeaMonkey 2.53.11
- requested inclusion in Leap 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1196703</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1648209600">- update to SeaMonkey 2.53.11.1
  * Fix edge case when setting IntersectionObserver threshold bug
    1758291.
  * OAuth2 prefs should use realuserName instead of username bug
    1518126.
  * SeaMonkey 2.53.11.1 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.11.1 shares most parts of the mail and news code
    with Thunderbird. Please read the Thunderbird 60.8.0 release notes
    for specific security fixes in this release.
  * Additional important security fixes up to Current Firefox 91.7 and
    Thunderbird 91.7 ESR plus many enhancements have been
    backported. We will continue to enhance SeaMonkey security in
    subsequent 2.53.x beta and release versions as fast as we are able
    to.
- requested inclusion in Leap 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1197518</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1651665600">- update to SeaMonkey 2.53.12
  * Format Toolbar forgets its hidden status when switching to other
    view modes bug 1719020.
  * Remove obsolete plugin code from SeaMonkey bug 1762733.
  * Fix a few strict warnings in SeaMonkey bug 1755553.
  * Remove Run Flash from Site permissions and page info bug 1758289.
  * Use fixIterator and replace use of removeItemAt in
    FilterListDialog bug 1756359.
  * Remove RDF usage in tabmail.js bug 1758282.
  * Implement 'Edit Template' and 'New Message From Template' commands
    and UI bug 1759376.
  * [SM] Implement 'Edit Draft' command and hide it when not in a
    draft folder (port Thunderbird bug 1106412) bug 1256716.
  * Messages in Template folder need "Edit Template" button in header
    (like for Drafts) bug 80280.
  * Refactor and simplify the feed Subscribe dialog options updates
    bug 1420473.
  * Add system memory and disk size and placeDB page limit to
    about:support bug 1753729.
  * Remove warning about missing plugins in SeaMonkey 2.53 and 2.57
    bug 1755558.
  * SeaMonkey 2.53.12 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.12 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.8.0 release notes for
    specific security fixes in this release.
  * Additional important security fixes up to Current Firefox 91.9 and
    Thunderbird 91.9 ESR plus many enhancements have been
    backported. We will continue to enhance SeaMonkey security in
    subsequent 2.53.x beta and release versions as fast as we are able
    to.
- remove/update references to obsolete gtk2 directory
- requested inclusion in Leap 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1199197</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1655208000">- Add --disable-elf-hack for aarch64 to fix build</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1657540800">- update to SeaMonkey 2.53.13
  * Updates to devtools.
  * Updates to build configuration.
  * Starting the switch from Python 2 to Python 3 in the build system.
  * Removal of array comprehensions, legacy iterators and generators
    bug 1414340 and bug 1098412.
  * Adding initial optional chaining and Promise.allSettled() support.
  * SeaMonkey 2.53.13 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.13 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.8.0 release notes for
    specific security fixes in this release.
  * Additional important security fixes up to Current Firefox 91.11
    and Thunderbird 91.11 ESR plus many enhancements have been
    backported. We will continue to enhance SeaMonkey security in
    subsequent 2.53.x beta and release versions as fast as we are able
    to.
- adapt seamonkey-man-page.patch for SeaMonkey 2.53.13
- disable LTO for Tumbleweed builds due to linker errors
- requested inclusion in Leap 15.4 and 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1201406</changelog>
</package>
<package pkgid="50f1b4c50ee21bbb3a01a1aa97e1ecacdf4c023b3acaa09d3a2bf3d08823c090" name="seamonkey-irc" arch="x86_64">
  <version epoch="0" ver="2.53.13" rel="bp154.2.3.1"/>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1619611200">- add upstream patch seamonkey-websocketloop.patch from
  https://bugzilla.mozilla.org/attachment.cgi?id=9218795&amp;action=diff
  to solve critical performance issue
  https://bugzilla.mozilla.org/show_bug.cgi?id=1633339</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1620129600">- use system libraries for bz2, webp, and icu to reduce package size
  and because this is probably more secure (since our own libraries
  are probably updated more often than the ones bundled with
  SeaMonkey)</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1620216000">- update GNU Makefile from upstream
  https://bugzilla.mozilla.org/show_bug.cgi?id=1692516#c8 -- besides
  some general improvements, this Makefile now allows the language
  packs for the bundled extensions to be split off again if desired
  (though our spec file does not yet take advantage of this)</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1621339200">- add patch seamonkey-rustc-bootstrap.patch adapted from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1710154 to enable
  compilation with rust &gt;= 1.50.0</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1625659200">- update to SeaMonkey 2.53.8
  * Serious performance improvements and bug fixes tracked in bug
    1633339 and bug 1711050.
  * Language attributes with country codes not recognized when
    building the Website Navigation Bar link toolbar bug 134436 and
    bug 1709443.
  * Optimize SeaMonkey icons for speed and optional higher quality for
    branding bug 1362210 and bug 1699322.
  * Support from= option when opening email compose window from the
    command line bug 1628671.
  * Update subject handling and GenericSendMessage function in compose
    window bug 1693994.
  * All message windows should update when view preferences are
    changed bug 1694765.
  * Improve marking of multiple messages as read / unread bug 1700530.
  * Show version numbers again in the add-on manager by the partial
    backout of bug 1161183.
  * Update available networks in chatZilla (including adding
    libera.chat)bug 1704392 and bug 1712505.
  * Change default port for IRC via TLS/SSL to 6697 bug 1704280.
  * Remove chatZilla and Lightning extension language packs and
    incorpate localisations within the main language pack bug 1604663.
  * Fix address drag and drop handling in compose window bug 1712002
    and bug 1712227.
  * Further fixes for legacy generators and the deprecated for each
    statement in add-ons and the Add-on SDK bug 1702903.
  * For developers, fork DOMi repo into main SeaMonkey one which means
    no need to separately checkout the extension bug 1700003.
  * SeaMonkey 2.53.8 uses the same backend as Firefox and contains the
    relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.8 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.0 release notes for
    specific changes and security fixes in this release.
  * Additional important security fixes up to Current Firefox 78.11
    ESR and a few enhancements have been backported. We will continue
    to enhance SeaMonkey security in subsequent 2.53.x beta and
    release versions as fast as we are able to.
- removed obsolete seamonkey-websocketloop.patch and
  seamonkey-rustc-bootstrap.patch (now integrated upstream)</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1625745600">- requested inclusion in Leap 15.3 and Leap 15.2:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1188100</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1626955200">- update to SeaMonkey 2.53.8.1
  * Archive message action does not work bug 1718839.
  * Do not preserve offlineMsgSize parameter when moving/copying
    emails between folders bug 1720202 and bug 1430480.
  * Move thread code to threadPane.js and remove messengerdnd.js bug
    515675.
  * SeaMonkey 2.53.8.1 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.8.1 shares most parts of the mail and news code
    with Thunderbird. Please read the Thunderbird 60.0 release notes
    for specific changes and security fixes in this release.
  * Additional important security fixes up to Current Firefox 78.12
    ESR and a few enhancements have been backported. We will continue
    to enhance SeaMonkey security in subsequent 2.53.x beta and
    release versions as fast as we are able to.
- requested inclusion in Leap 15.3 and Leap 15.2:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1188614</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1627387200">- Remove --disable-elf-hack when not available: aarch64 and ppc64*</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1629374400">- add upstream patch seamonkey-packed_simd.patch which allows
  packed_simd to compile with Rust 1.54</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1629979200">- update to SeaMonkey 2.53.9
  * There is now an option to clear browser history during shutdown
    bug 1621445.
  * Uninstall plugin command for ChatZilla bug 541719.
  * Update icons used in ChatZilla status bar bug 1710238 and bug
    1710249.
  * Make ChatZilla understand mIRC color code 99 bug 1710298.
  * Implement IRCv3 basic CAP negotiation bug 1717539 and CAP LIST and
    update CAP ACK and CAP LS bug 1710313.
  * Use Unicode instead of images for emojis in ChatZilla bug 1711375
    and add some extra emojis bug 1711376.
  * Use SeaMonkey's configured web search rather than a separate one
    in ChatZilla bug 1712498.
  * Add a networks editor to ChatZilla bug 1716232.
  * Implement IRCv3 away-notify bug 1717543, chghost and
    userhost-in-names bug 1717544, self-messaging bug 1722212 and WHOX
    bug 1722214.
  * Link to SeaMonkey website in debugQA for verification sites and
    development section bug 1685606.
  * Send button should be disable until we have a recipient bug
    104973.
  * Remove need to use a modifier for marking messages as unread bug
    1719216.
  * SeaMonkey 2.53.9 uses the same backend as Firefox and contains the
    relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.9 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.0 release notes for
    specific changes and security fixes in this release.
  * Additional important security fixes up to Current Firefox 78.13
    ESR and a few enhancements have been backported. We will continue
    to enhance SeaMonkey security in subsequent 2.53.x beta and
    release versions as fast as we are able to.
- removed obsolete patch seamonkey-packed_simd.patch (integrated
  upstream)
- update seamonkey-lto.patch to work with 2.53.9
- requested inclusion in Leap 15.3 and Leap 15.2:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1189845</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1632830400">- update to SeaMonkey 2.53.9.1
  * Fix the lazy loading of images from some websites bug 1727967.
  * Move certain font family defaults from serif to sans serif bug
    1727982.
  * SeaMonkey 2.53.9.1 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.9.1 shares most parts of the mail and news code
    with Thunderbird. Please read the Thunderbird 60.0 release notes
    for specific changes and security fixes in this release.
  * Additional important security fixes up to Current Firefox 78.14
    ESR and a few enhancements have been backported. We will continue
    to enhance SeaMonkey security in subsequent 2.53.x beta and
    release versions as fast as we are able to.
- requested inclusion in Leap 15.3 and Leap 15.2:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1191022</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1637064000">- update to SeaMonkey 2.53.10
  * Minor fixes for testdisplay command in ChatZilla bug 1727976.
  * Show CTCP requests (excluding ACTION and DCC) bug 1722156.
  * IRCv3: Add support for server-time bug 1724586.
  * Add localization note for network editor dialog width in ChatZilla
    bug 1727977.
  * IRCv3: Add support for extended-join and account-notify bug
    1722159.
  * Add ability to collapse message groups in ChatZilla bug 1724588.
  * Fix JS strict warnings in unescapeTagValue in ChatZilla bug
    1727989.
  * IRCv3: Add support for invite-notify bug 1722161.
  * IRCv3: Add support for batch bug 1724589.
  * Fix JS strict warning in addHistory in cZ static.js bug 1727992.
  * IRCv3: Add support for cap-notify bug 1722162.
  * Stop using canonical name as collection keys in ChatZilla bug
    1728025.
  * IRCv3: Add support for TLS and STS bug 1722166.
  * Helper function for renaming irc server properties in ChatZilla
    bug 1728027.
  * IRCv3: Add support for MONITOR bug 1722174.
  * Remove use of msg.commasp in ChatZilla bug 1726965.
  * Allow shiftKey to modify behaviour of link clicking in cZ bug
    1713458.
  * IRCv3: Add support for echo-message bug 1722211.
  * In ChatZilla make /commands return all matches starting with
    pattern bug 1726966.
  * Use SeaMonkey prefs to determine how links behave in cZ bug
    1713467.
  * Allow parameters to be localised in ChatZilla bug 1724105.
  * Add identify command to cZ and hook into password management bug
    1713470.
  * IRCv3.1: Implement SASL with PLAIN mechanism bug 1717545.
  * IRCv3: Add support for message tags bug 1724584.
  * Add last read message divider to ChatZilla bug 1729159.
  * IRCv3: Add support for account-tag bug 1724585.
  * Missing option "text encoding Unicode/UTF-8" in preferences -
    Mailnews bug 1679260.
  * Detect Crashreporter using AppConstants in SeaMonkey bug 1735236.
  * Link about LEGACY extensions in Add-ons Manager is broken bug
    1656797.
  * Update help for clear private data preferences and dialog bug
    1728911.
  * Fix typo in cs_nav_prefs_appearance bug 1737473.
  * Drop leftover "Edit Menu" comment from messageWindow.xul and
    addressbook.xul bug 1725121.
  * Add dummy tab routines to SeaMonkey mailnews tab browser bug
    1735243.
  * Folder pane and tab/window title not updated correctly when
    opening in new tab bug 1726940.
  * Allow mail tab bar to be controlled separately to browser tab bar
    bug 1724515.
  * Copy any user set values for new mail.tabs prefs bug 1729165.
  * Merge Master Passwords and Passwords pref panes into a single pref
    pane bug 1728099.
  * Move warning about redirection pref from Content to Privacy &amp;
    Security pane bug 1728185.
  * Move website icons prefs from content pref pane to browser pref
    pane bug 1727425.
  * Move browser / mailnews system integration prefs into advanced
    pane bug 1727659.
  * Have separate opentabfor.middleclick for mailnews bug 1727948.
  * Add removeBrowser helper for tabbrowser bug 1730391.
  * Put &lt;browser&gt; in a &lt;stack&gt; so it's easy to overlay bug 1730392.
  * Allow browser focus to be avoided bug 1720003.
  * SeaMonkey 32x32 default icon has light stripe at the bottom bug
    1729153.
  * Support &lt;input type=time&gt; and &lt;input type=date&gt; in SeaMonkey bug
    1730408.
  * Middleclick on browser tab handled twice (closes tab and loads URL
    from primary or clipboard) bug 1734407.
  * Unable to create a new "Saved Search Folder" using "Save View as a
    Folder..." bug 1738669.
  * Enable compression for standard http connections bug 1728996.
  * Support VS2022 for compiling under Windows bug 1728988.
  * SeaMonkey 2.53.10 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.10 shares most parts of the mail and news code
    with Thunderbird. Please read the Thunderbird 60.0 release notes
    for specific changes and security fixes in this release.
  * Additional important security fixes up to Current Firefox 78.15
    ESR and a few enhancements have been backported. We will continue
    to enhance SeaMonkey security in subsequent 2.53.x beta and
    release versions as fast as we are able to.
- requested inclusion in Leap 15.3 and Leap 15.2:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1192742</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1639396800">- update to SeaMonkey 2.53.10.1
  * Security fix for NSS code bug 1737470.
  * Only use networks and servers in lower case in ChatZilla bug
    1742502.
  * Change classic form icon in SeaMonkey composer bug 1710915.
  * Addition fixes for SeaMonkey 32x32 default icons on Windows and
    macOS bug 1729153.
  * SeaMonkey 2.53.10.1 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.10.1 shares most parts of the mail and news code
    with Thunderbird. Please read the Thunderbird 60.0 release notes
    for specific changes and security fixes in this release.
  * Additional important security fixes up to Current Firefox 91.4 ESR
    and a few enhancements have been backported. We will continue to
    enhance SeaMonkey security in subsequent 2.53.x beta and release
    versions as fast as we are able to.
- Remove unused build dependency on libidl-devel.
- requested inclusion in Leap 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1193668</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1640692800">- update to SeaMonkey 2.53.10.2
  * Obtain Windows code-signing certificate for SeaMonkey binary and
    update signing bug 1438084.
  * Support SHA-2 hashes in CertIDs in OCSP responses - port of bug
    1746221.
  * Fix rust 1.57 Windows linking for SeaMonkey 2.53 bug 1746785.
  * SeaMonkey 2.53.10.2 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * Additional important security fixes up to Current Firefox 91.4.1
    ESR and a few enhancements have been backported. We will continue
    to enhance SeaMonkey security in subsequent 2.53.x beta and
    release versions as fast as we are able to.
  * SeaMonkey 2.53.10.2 shares most parts of the mail and news code
    with Thunderbird. Please read the Thunderbird 60.0 release notes
    for specific changes and security fixes in this release.
- requested inclusion in Leap 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1194114</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1644926400">- Drop pkgconfig(gconf-2) BuildRequires and pass ac_add_options
  - -disable-gconf to mozconfig. As we already are using cairo-gtk3,
  gconf support serves no purpose (gio/gsettings takes care).</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1646308800">- update to SeaMonkey 2.53.11
  * Remove obsolete MOZ_EXTENSIONS check in suite bug 1749146.
  * Add connect button to cZ Networks Editor bug 1736443.
  * Remove freenode remnants from ChatZilla in SeaMonkey bug 1741082.
  * Prefer secure over insecure protocol in network list in ChatZilla
    bug 1744440.
  * Composer - Change tag textbox is not removed after use bug
    1755369.
  * Clean up repo links in debugQA bug 1746790.
  * Fix misspelled references to macOS in suite bug 1749144.
  * Remove obsolete references to Java and Flash bug 1749141.
  * Help button not working in delete cert dialog bug 1750386.
  * Rearrange Message Filter Dialog to make room for new features bug
    1735053.
  * Use Insert key as shortcut to create new message filters bug 1735055.
  * Rename some variables used in SeaMonkey's FilterListDialog to
    match Thunderbird's bug 1735056.
  * Implement Copy to New message filter functionality bug 1735057.
  * Add move to top / bottom buttons to message filters bug 1735059.
  * Add preference to not prompt for message filter deletion bug
    1735061.
  * Clean up folder handling in FilterListDialog bug 1736425.
  * Add refresh function to Filter list dialog so that it can be
    updated when already open and new filters are added externally bug
    1737450.
  * Use listbox rather than tree in FilterListDialog bug 1746081.
  * MsgFilterList(args) should take targetFilter and pass it to
    FilterListDialog bug 1753891.
  * Mail&amp;News' start.xhtml: "We" link broken bug 1748178.
  * Add search functionality to filter dialog bug 1749207.
  * Move the taskbar refresh timer in SeaMonkey to idle dispatch bug
    1746788.
  * Prevent subresource loads from showing the progress indicator on
    the tab in SeaMonkey bug 1746787.
  * SeaMonkey 2.53.11 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * Additional important security fixes up to Current Firefox 91.6 ESR
    and a few enhancements have been backported. We will continue to
    enhance SeaMonkey security in subsequent 2.53.x beta and release
    versions as fast as we are able to.
  * SeaMonkey 2.53.11 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.0 release notes for
    specific changes and security fixes in this release.
- adapt seamonkey-man-page.patch for SeaMonkey 2.53.11
- requested inclusion in Leap 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1196703</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1648209600">- update to SeaMonkey 2.53.11.1
  * Fix edge case when setting IntersectionObserver threshold bug
    1758291.
  * OAuth2 prefs should use realuserName instead of username bug
    1518126.
  * SeaMonkey 2.53.11.1 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.11.1 shares most parts of the mail and news code
    with Thunderbird. Please read the Thunderbird 60.8.0 release notes
    for specific security fixes in this release.
  * Additional important security fixes up to Current Firefox 91.7 and
    Thunderbird 91.7 ESR plus many enhancements have been
    backported. We will continue to enhance SeaMonkey security in
    subsequent 2.53.x beta and release versions as fast as we are able
    to.
- requested inclusion in Leap 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1197518</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1651665600">- update to SeaMonkey 2.53.12
  * Format Toolbar forgets its hidden status when switching to other
    view modes bug 1719020.
  * Remove obsolete plugin code from SeaMonkey bug 1762733.
  * Fix a few strict warnings in SeaMonkey bug 1755553.
  * Remove Run Flash from Site permissions and page info bug 1758289.
  * Use fixIterator and replace use of removeItemAt in
    FilterListDialog bug 1756359.
  * Remove RDF usage in tabmail.js bug 1758282.
  * Implement 'Edit Template' and 'New Message From Template' commands
    and UI bug 1759376.
  * [SM] Implement 'Edit Draft' command and hide it when not in a
    draft folder (port Thunderbird bug 1106412) bug 1256716.
  * Messages in Template folder need "Edit Template" button in header
    (like for Drafts) bug 80280.
  * Refactor and simplify the feed Subscribe dialog options updates
    bug 1420473.
  * Add system memory and disk size and placeDB page limit to
    about:support bug 1753729.
  * Remove warning about missing plugins in SeaMonkey 2.53 and 2.57
    bug 1755558.
  * SeaMonkey 2.53.12 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.12 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.8.0 release notes for
    specific security fixes in this release.
  * Additional important security fixes up to Current Firefox 91.9 and
    Thunderbird 91.9 ESR plus many enhancements have been
    backported. We will continue to enhance SeaMonkey security in
    subsequent 2.53.x beta and release versions as fast as we are able
    to.
- remove/update references to obsolete gtk2 directory
- requested inclusion in Leap 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1199197</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1655208000">- Add --disable-elf-hack for aarch64 to fix build</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1657540800">- update to SeaMonkey 2.53.13
  * Updates to devtools.
  * Updates to build configuration.
  * Starting the switch from Python 2 to Python 3 in the build system.
  * Removal of array comprehensions, legacy iterators and generators
    bug 1414340 and bug 1098412.
  * Adding initial optional chaining and Promise.allSettled() support.
  * SeaMonkey 2.53.13 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.13 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.8.0 release notes for
    specific security fixes in this release.
  * Additional important security fixes up to Current Firefox 91.11
    and Thunderbird 91.11 ESR plus many enhancements have been
    backported. We will continue to enhance SeaMonkey security in
    subsequent 2.53.x beta and release versions as fast as we are able
    to.
- adapt seamonkey-man-page.patch for SeaMonkey 2.53.13
- disable LTO for Tumbleweed builds due to linker errors
- requested inclusion in Leap 15.4 and 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1201406</changelog>
</package>
<package pkgid="37f9d65e134af78668a0ed379e96c9df81a3c21fb89a6335bcaa4546ead33d3b" name="sendxmpp" arch="noarch">
  <version epoch="0" ver="1.24" rel="bp154.3.3.1"/>
  <changelog author="vcizek@novell.com" date="1302523200">- Initial package from CVS</changelog>
  <changelog author="chris@computersalat.de" date="1305547200">- fix build/deps
  o added BuildReq perl/-macros</changelog>
  <changelog author="p.drouand@gmail.com" date="1427112000">- Update to version 1.24
  * new config format supported - key: value
- Changes from version 1.23
  * added options --no-tls-verify and --tls-ca-path
- Use download Url as source
- Remove redundant %clean section</changelog>
  <changelog author="Dirk Stoecker &lt;opensuse@dstoecker.de&gt;" date="1603368000">- fix broken url</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1665921600">- require Perl IO::Socket::SSL (boo#1204339)</changelog>
</package>
<package pkgid="6c8c35272a686d22269490bf1a9c88149be0af2c5613eb6577a2810b604c28c9" name="sendxmpp" arch="src">
  <version epoch="0" ver="1.24" rel="bp154.3.3.1"/>
  <changelog author="vcizek@novell.com" date="1302523200">- Initial package from CVS</changelog>
  <changelog author="chris@computersalat.de" date="1305547200">- fix build/deps
  o added BuildReq perl/-macros</changelog>
  <changelog author="p.drouand@gmail.com" date="1427112000">- Update to version 1.24
  * new config format supported - key: value
- Changes from version 1.23
  * added options --no-tls-verify and --tls-ca-path
- Use download Url as source
- Remove redundant %clean section</changelog>
  <changelog author="Dirk Stoecker &lt;opensuse@dstoecker.de&gt;" date="1603368000">- fix broken url</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1665921600">- require Perl IO::Socket::SSL (boo#1204339)</changelog>
</package>
<package pkgid="6fc7d59ffba7ba57350137b346f4381cc4f550ec1d32247b137d6e3fedf2f709" name="strawberry" arch="aarch64">
  <version epoch="0" ver="1.0.5" rel="bp154.2.3.6"/>
  <changelog author="Jonas Kvinge &lt;jonas@jkvinge.net&gt;" date="1594641600">- Update to version 0.6.13:
  * Bugfixes:
  + Fixed cut-off text in about dialog.
  + Fixed increasing play count when stop after track is enabled.
  + Fixed showing/hiding playing widget when playback is started while window is hidden.
  + Fixed "Show in file browser" to also work on local songs that are not in the collection.
  + Fixed "Show in file browser" to work with PCManFM file manager.
  + Fixed audio analyzer to work with S24LE and F32LE audio formats.
  + Fixed playlist background image not loading.
  + Fixed a memory leak when switching between playlists.
  + Removed use of HTML in systemtray tooltip on KDE, since KDE no longer renders HTML in the systemtray.
  * Enhancements:
  + Replaced use of C style casts.
  + Adapted use of C++11 override.
  + Improved CMake build files.
  + Added new on startup options to show maximized or minimized.
  + Builtin TagLib code is updated and improved.
  + Made most icon sizes configurable in the settings, and increased default sizes for icons.
  + Improved fancy tabbar to use font sizes from the theme instead of fixed sizes.
  + Moving the currently playing song to the top when the playlist is manually shuffled.
  + Added "a taste of Strawbs" background image.
  + Fixed unit test for testing playlist model.
  + Added new unit tests for tagreader.</changelog>
  <changelog author="Michel Normand &lt;normand@linux.vnet.ibm.com&gt;" date="1595246400">- Add _constraints for ppc64le avoid "no space left on device" build error</changelog>
  <changelog author="Jonas Kvinge &lt;jonas@jkvinge.net&gt;" date="1597406400">- Update to version 0.7.1:
  * Bugfixes:
  + Fixed incorrectly mapped global shortcuts keys "2" and "3".
  + Fixed Last.fm scrobbling to correctly start array notation for parameters at 0 and not 1.
  + Fixed sending trackNumber correctly for Last.fm and Libre.fm scrobbling.
  + Fixed collection search when using special characters in the search query.
  + Fixed reading and saving MP4 lyrics tag.
  + Fixed reading ASF comment tag.
  + Fixed adding playlist songs outside the collection when there are multiple files with the same URL.
  + Fixed the rescan songs option to work with local songs outside of the collection.
  + Fixed problems with editing song metadata in the playlists.
  * Enhancements:
  + Simplified and improved startup behaviour code.
  + Adapted all source code to be compatible with Qt 6, and increased required Qt version to 5.8.
  + Added option to compile with Qt 6 (-DWITH_QT6=ON).
  + Base warning for show in file browser on unique directories to avoid unneeded warning about opening many files.
  + Use album artist instead of artist for album repeat mode when available.
  + Added extra safety for overwriting files for filesystem storages when organizing files.
  + Remove diacritics in FTS search.
  + Improved playlist context menu.
  + Added fatal CMake error for missing protobuf compiler.
  + Added support for parsing radio streams metadata with tilde in title.
  + Added CMake option to install translation files.
  + (Unix) Added playback actions to desktop file.
  * Removed features:
  + Removed Xine engine support.
  + Removed broken imobiledevice (iPhone) support.</changelog>
  <changelog author="Jonas Kvinge &lt;jonas@jkvinge.net&gt;" date="1597492800">- Update to version 0.7.2:
  * Bugfixes:
  + Fixed installation directory for translations.
  + Fixed collection sorting for non-ASCII characters.
  + Fixed closing connected devices on exit.</changelog>
  <changelog author="Jonas Kvinge &lt;jonas@jkvinge.net&gt;" date="1602244800">- Update to version 0.8.1:
  * Bugfixes:
  + Fixed engine selection in backend settings with Qt 6.
  + Fixed pixelated playlist source icon for currently playing song.
  + Fixed crash when deleting queued songs from playlist.
  + Fixed situations where songs could disappear or be shown multiple times with certain collection groupings.
  + Fixed initial sizes of playlist header columns.
  + Fixed Strawberry preventing logout.
  + Fixed incorrectly splitting of basename for moodbar and transcoding for filenames with several dots.
  + Fixed certain cases where "playing now" for scrobbler were sent twice.
  + Fixed album cover loaded twice for certain songs causing slugglish playing widget.
  + Fixed playing widget to draw text after album cover is fully shown.
  + Fixed crash when trying to copy a closed playlist to a device.
  + Fixed incorrect song source for CUE songs when added through the collection watcher.
  + Disable use of HTML in system tray tooltip on Cinnamon too.
  + Remove problematic '&amp;' character from OSD messages.
  * Enhancements:
  + Improved playlist autoscrolling.
  + Only allow playlist right click tag editing for editable songs.
  + Read song creation time from subsonic API.
  + Remember manually set compilation status for albums when songs are rescanned.
  + Added icons for edit tag playlist right click menu actions.
  + Maximize dialogs if they are already open when clicked again in the menu.
  + Added support for compilation tag to edit tag dialog.
  + Show song info and album cover in OSD on stop and pause.
  + Reshow OSD on song restart.
  + Always save initial settings.
  + Removed use of deprecated gstreamer "low-percent" (Minimum buffer fill setting).
  + Added buffer low and high watermark settings to backend settings.
  + Make use of newer version of the desktop notifications service when available.
  * New features:
  + Added setting for enabling scrobbling based on song source.
  + Added optional delete from disk in collection and playlist.
  + Added Last.fm import data wizard.
  + Added smart and dynamic playlists.
  + Added song ratings.
  + Added Qobuz streaming support.
  + Added Subsonic server side scrobbling support.
  + Load thumbnails from iPods to show under device collection.</changelog>
  <changelog author="Jonas Kvinge &lt;jonas@jkvinge.net&gt;" date="1602590400">- Update to version 0.8.2:
  * Bugfixes:
  + Fixed broken transition to next song for CUE files with certain audio formats (regression since version 0.6.13).
  + Fixed all collection divider keys showing on top with some language collate settings (regression in version 0.8.1).
  + Fixed SQL querying songs by song ID when song ID is a string.
  + Fixed saving album covers for LMS Subsonic servers.
  + Fixed reading song creation dates with LMS Subsonic servers.
  + Fixed saving initial settings.
  + Removed use of HTML in system tray icon tooltip for all desktop environments instead of just KDE and Cinnamon.</changelog>
  <changelog author="Jonas Kvinge &lt;jonas@jkvinge.net&gt;" date="1603454400">- Update to version 0.8.3:
  + Fixed updating playing widget song details in small cover mode.
  + Fixed file extension when transcoding songs.
  + Fixed updating album cover to collection in edit tag dialog when pressing save.
  + Fixed songs with empty artist in collection.
  + Fixed possible crashes with stream discovery.
  + Fixed setting engine state to null.
  + Fixed tagreader crash with empty APE tags.
  + Fixed a gstreamer memory leak.</changelog>
  <changelog author="Jonas Kvinge &lt;jonas@jkvinge.net&gt;" date="1605355200">- Update to version 0.8.4:
  * Bugfixes:
  + Fix preventing session logout when window is maxmimized.
  + Fix empty space in organize window when copying songs/playlists to devices.
  + Fix crash when opening about dialog in a wayland session.
  + Fix stretched fancy/side tabbar style issue with adwaita style (Fedora/Gnome).
  + Fix centering star icon on playlist tabbar.
  + Fix network proxy settings for streaming.
  + Fix copy URL to clipboard to handle non-ASCII characters.
  + Fix HiDPI scaling for glow animation and drag over playlist.
  + Fix smart playlist search by filename.
  + Fix single letter collection nodes showing before dividers.
  * Enhancements:
  + Add support for native global shortcuts on KDE.
  + Add track progress in system tray icon as an option.
  + Only strip problematic characters in suggested filename when saving a playlist to file.
  + Change star/unstar playlist to doubleclick instead of singleclick.
  + Don't edit playlist name on doubleclick in playlists view.
  + Make context view top label text selectable.
  + Add setting to change Qt style.
  + Clear ID3v3 tags that are empty, and clear ID3v1 tags when setting ID3v3 tags.
  + Remove remaining uses of QTextCodec.
  + Remove Core5Compat dependency.</changelog>
  <changelog author="Jonas Kvinge &lt;jonas@jkvinge.net&gt;" date="1608379200">- Update to version 0.8.5:
  * Bugfixes:
  + Fix return type of SmartPlaylistQueryWizardPlugin::type().
  + Fix comparison between QChar and integer to use QChar::unicode().
  + Fix return type of qHash with Qt 6 to use size_t instead of uint.
  + Fix tag edit dialog save process sometimes stuck.
  + Fix repeat and shuffle buttons greyed out when a dynamic playlist is open.
  + Fix CUE parser handling of values with empty quotes.
  + Fix broken year and disc collection groupings with CUE songs.
  + Fix HTML escaping showing up in OSD notifications when using custom text.
  * Enhancements:
  + Add Swedish translation.
  + Made Qt X11Extras and WinExtras modules optional.
  + Save and restore geometry in edit tag dialog.
  + Add command line option to play a playlist based on name.
  + Change double-click behaviour in cover manager to open fullsize cover.</changelog>
  <changelog author="Jonas Kvinge &lt;jonaski@opensuse.org&gt;" date="1608724800">- Use cmake_build macro
- Use Qt 6 on tumbleweed</changelog>
  <changelog author="Jonas Kvinge &lt;jonaski@opensuse.org&gt;" date="1615636800">- Update to version 0.9.1:
  + Bugfixes:
  + Fix duplicating songs in the DB when organizing songs between 2 different collection directories.
  + Fix overwriting existing newer last played when importing last played from last.fm.
  + Fix memory leak on song change when moodbar is disabled.
  + Fix playlist filter search for text with spaces with Qt 6.
  + Fix 'Except between tracks on the same album' backend fade option always greyed out.
  + Fix read and save vorbis comment grouping tag.
  + Fix QAtomicInteger compile error on armv.
  + Fix compile error with protobuf 3.15.0 and newer.
  + Fix possible tagreader (messagereply) crashes.
  + Fix save album cover when album directory and no overwrite is used for saving covers.
  + Fix right click save cover action when album has embedded cover.
  + Fix temporary art saved to /tmp.
  + Fix playlist bitrate sometimes stuck when changing track to previous.
  + Enhancements:
  + Improve Musixmatch cover and lyrics search.
  + Decode any HTML entities in some rare cases they appear in the retrieved lyrics from the API's.
  + Use mimetype instead of description from stream metadata by default when updating song filetype.
  + Set limits for collection pixmap cache based on size units.
  + Convert all signal/slot connections to new Qt 5/6 syntax.
  + Improve album cover management.
  + Add right click actions to clear set cover, and option delete covers.
  + Show artist and album underneath the albums in the cover manager when all Artists is selected.
  + Disable unavailable right click cover actions.
  + Remove 3rdparty TagLib now that TagLib 1.12 is available.
  + New features:
  + Add option and support for saving embedded covers for FLAC, Ogg Vorbis, MP3 and MP4/AAC.
- Remove use of deprecated USE_SYSTEM_TAGLIB CMake option.</changelog>
  <changelog author="Jonas Kvinge &lt;jonaski@opensuse.org&gt;" date="1616673600">- Update to version 0.9.2:
  +  Fix marking songs available.
  +  Fix crash when transcoding music, or copying music to devices with transcoding.
  +  Fix copying album covers to iPod.
  +  Fix playlist tabbar close and save right click actions.
  +  Fix slow opening of cover manager.</changelog>
  <changelog author="Jonas Kvinge &lt;jonaski@opensuse.org&gt;" date="1618747200">-Update to version 0.9.3:
  + Bugfixes:
  + Fix "Show in file browser" to work with thunar.
  + Check that the clicked rating position is to the right or left of the rectangle.
  + Fix rescan when collection directory is removed and readded.
  + Enhancements:
  + Allow editing playlist metadata for radio streams.
  + Make CollectionQuery subclass QSqlQuery, avoid copying QSqlQuery.
  + Only enable FTS3 when schema needs upgrading, since FTS5 is used for search.
  + Add setting for configuring the color for the currently playing song.
  + Add setting to turn on OSD Pretty fading.
  + Add commandline option to resize window.</changelog>
  <changelog author="Jonas Kvinge &lt;jonaski@opensuse.org&gt;" date="1634212800">- Update to version 1.0.0
  + Bugfixes:
  + Fix updating temporary metadata when reloading songs outside of the collection.
  + Don't strip off "Live" from song title when sending scrobbles.
  + Fix incorrect use of QFutureWatcher.
  + Fix compile of Utilities::Hmac with Qt 6.2.
  + Fix a memory leak when using right click context menu in internet search.
  + Fix a gstreamer bus leak when adding streams and remote playlists.
  + Fix "Source ID x was not found when attempting to remove it" error.
  + Escape ampersands in playlist tabs.
  + Fix analyzer with S24_32LE audio format.
  + Enhancements:
  + Add replaygain fallback gain setting.
  + Add option to turn off playlist alternating row colors.
  + Make the default tabbbar background color lighter.
  + Remove use of deprecated WinExtras Qt module.
  + Add CMake test for Qt sqlite support.
  + Automatically detect Qt version if BUILD_WITH_QT5 or BUILD_WITH_QT6 is not specified.
  + Correct playlist tabbar favorite tooltip from "click" to "double-click".
  + Remove scroll over icon to change track option since it does not work reliable.
  + Improve resume playback on startup.
  + Re-request stream URL for Tidal and QObuz when resuming playback after pausing for more than 30 seconds.
  + Add Finnish, Ukrainian, Dutch, Japanese, Chinese, Catalan and Portuguese (Brazil).
  + Add support for TagParser (https://github.com/Martchus/tagparser) as an alternative to TagLib.
  + Add Subsonic option to turn off HTTP/2.
  + Fix minor Clang-Tidy and Clazy warnings.
  + Use higher resolution images from last.fm API.
  + Add MD5 token authentication for Subsonic.
  + Use 500 albums per request when receiving albums from Subsonic.
  + Use QX11Application with Qt &gt;= 6.2 for X11 global shortcuts.
  + Allow fading when a ALSA PCM device is selected.
  + Store Tidal MPEG-DASH file in data uri.
  + Use XSPF image elements as manually set artwork.
  + Make error dialog larger.
  + Show error dialog for failed SQL queries.
  + Show error dialog when failing to read or write album covers.
  + Add module music formats (mod, s3m, xm, it) to detected filetypes.
  + Disable gapless playback for module music formats to workaround gstreamer bug.
  + Update directory ID and song path immediately when organizing collection songs.
  + Add right click option to star a playlist in playlist tabs.
  + Use seconds instead of minutes for scrobble submit delay.
  + New features:
  + Add ALSA PCM devices.
  + Add song fingerprinting and tracking.
  + Add support for native global shortcuts on MATE.
  + Add radios view with channels from Radio Paradise and SomaFM.</changelog>
  <changelog author="Jonas Kvinge &lt;jonaski@opensuse.org&gt;" date="1641643200">- Update to version 1.0.1
  + Bugfixes:
  + Fixed collection and internet search filter tool button menu arrow overlap (#796).
  + Fixed stop after this track button with Qt 6 (#795).
  + Fixed not updating the URL when songs were moved on disk when the fingerprinting feature is enabled.
  + Fixed SQL query error for songs with an invalid modification time (#815).
  + Fixed blocky rendering of the currently playing track with high resolution screens (#794).
  + Fixed incorrect playlist column filesize for radio streams.
  + Fixed deleting embedded album cover from Ogg songs.
  + Fixed parsing of Cue tracks with 1-digit minutes (#836).
  + Fixed updating of playlist summary after reloading items when adding songs from files outside of the collection (#848).
  + Fixed always saving metadata when saving playlists for Tidal, Qobuz and Subsonic songs independent of playlist setting (#851).
  + Fixed setting media shortcuts when using kglobalaccel (#849).
  + Fixed parsing of Genius lyrics when they are sometimes received in a different HTML format.
  + Fixed saving MP4 specific tags as UTF-8 (#830).
  + Fixed clearing "manually set" cover when saving album covers embedded from outside of the tag editor (#858).
  + Fixed aborting collection scan when Strawberry exists to avoid hang on exit.
  + Fixed resuming collection scan when adding a new directory after collection scan was aborted.
  + Fixed excluding hidden songs from the collection.
  + Disabled moodbar for CUE songs since they can not be supported properly (#865).
  + Enhancements:
  + Made playlist header column text elided (#801).
  + Added support for reading and writing playcounts and ratings from/to tags.
  + Added support for setting rating using the edit tag dialog.
  + Added setting to enable/disable playlist toolbar (#809).
  + Added component type, content_rating type and releases to AppStream data file (#806).
  + Removed unused "mark as listened" option in organize dialog.
  + Fixed some clazy warnings and narrowing conversions in the source code.
  + Replaced uses of macros in the source code.
  + Added a more user-friendly error message when receiving encrypted streams from Tidal (#824).
  + Added support for port-pattern entered in the device textbox when using Jack as output (#828).
  + Added Spanish (Spain) translation.
  + Added support for more CUE filenames (#835).</changelog>
  <changelog author="Jonas Kvinge &lt;jonaski@opensuse.org&gt;" date="1645358400">- Update to version 1.0.2
  + Bugfixes:
  + Fixed showing menu when clicking icon for collection and internet search tool buttons
  + Fixed ignoring devices with system mounts as defined by GIO (#410).
  + Fixed updating database when deleting songs from filesystem devices.
  + Fixed unregistered metatype when listing songs from MTP devices with Qt 6.
  + Fixed using entered password when testing Subsonic settings before pressing save (#879).
  + Fixed downloading Subsonic album covers.
  + Fixed subsonic album covers downloaded several times for each album when MD5 authentication was enabled (#885).
  + Fixed volume going to 100% when pressing volume down with MRPIS2 and global shortcuts (#884).
  + Fixed incorrect rounding when setting volume through MPRIS2 (#894).
  + Fixed delete from disk not showing up in the menu when one or more CUE songs were selected.
  + Fixed possible crashes when switching songs when fading is enabled (#890).
  + Fixed X11 global shortcuts not working unless window was in focus with Qt 6.2 and higher (#893).
  + Fixed scrobbler re-sending scrobbles to fast on error (#898).
  + Enhancements
  + Log Qt version on startup.
  + Added button for deleting existing Subsonic songs (#883).
  + Make collection watcher ignore files with "qt_temp" filename and tmp extension.
  + Require Qt 5.9 or higher.
  + Added scrollbars to edit tag dialog (#888).
  + Added advanced settings for configuring collection watcher.
  + Disable open audio CD menu when compiled without audio CD support.
  + Replaced use of deprecated QMouseEvent constructor as of Qt 6.4.
  + Replaced use of deprecated QCryptographicHash::addData overload as of Qt 6.4.
  + Removed features:
  + Removed broken "nomedia" / "nomusic" file handling.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1646654400">- Increase the disk size needed to build strawberry on PowerPC.
- Remove the unneeded qt6-network-tls requirement.
  libQt6Network6 already requires the plugin.</changelog>
  <changelog author="Jonas Kvinge &lt;jonaski@opensuse.org&gt;" date="1648123200">- Update to version 1.0.3
  + Bugfixes:
  + Remove slash and backslash from filenames when saving album covers using album directory cover filenames (#903).
  + Remove playlist file-extensions from accepted audio file extensions (#909).
  + Fixed Qobuz requests only receiving the first 50 albums (#922).
  + New features
  + Added support for bs2b (Improved headphone listening of stereo audio records using Bauer stereophonic-to-binaural DSP) (#249).</changelog>
  <changelog author="Jonas Kvinge &lt;jonaski@opensuse.org&gt;" date="1649592000">- Update to version 1.0.4
  + Bugfixes:
  + Fixed use-after-free memory in ALSA PCM device finder.
  + Translate global shortcuts.
  + Enhancement:
  + Added save all playlists action.
  + Other:
  + Removed use of custom font in context.</changelog>
  <changelog author="Jonas Kvinge &lt;jonaski@opensuse.org&gt;" date="1654862400">- Update to version 1.0.5
  + Bugfixes:
  + Fixed smart playlist filetype search.
  + Fixed Radio Paradise URLs to use HTTPS instead of HTTP.
  + Fixed horizontal scrolling not affecting currently playing track (#952).
  + Fixed keep running in the background when window is closed with Wayland (#964).
  + Fixed percent-encoding of URLs when loading and saving XSPF playlists (#821).
  + Fixed fancy tabbar context menu showing on right clicks outside of tabbar when a song is playing.
  + Fixed possible duplicating songs in the database when moving songs to the collection using the organize feature.
  + Enhancements:
  + Show more details in error dialog on GStreamer errors (#958).
  + Allow setting blur amount of playlist background image up to 100px (#939).
  + Include 128x128 icon sizes (#954).
  + Show right click copy context menu in context view on top text and lyrics (#965).
  + Improve fading between album covers in context view.
  + Added option for overwriting database playcounts in collection settings (#962).
  + Added option for disabling bar on currently playing track (#972).</changelog>
</package>
<package pkgid="0c29bf9c3d0777251c757c960d8f8078e92d51ce7107f8f6d3948066effdc9fe" name="strawberry" arch="ppc64le">
  <version epoch="0" ver="1.0.5" rel="bp154.2.3.6"/>
  <changelog author="Jonas Kvinge &lt;jonas@jkvinge.net&gt;" date="1594641600">- Update to version 0.6.13:
  * Bugfixes:
  + Fixed cut-off text in about dialog.
  + Fixed increasing play count when stop after track is enabled.
  + Fixed showing/hiding playing widget when playback is started while window is hidden.
  + Fixed "Show in file browser" to also work on local songs that are not in the collection.
  + Fixed "Show in file browser" to work with PCManFM file manager.
  + Fixed audio analyzer to work with S24LE and F32LE audio formats.
  + Fixed playlist background image not loading.
  + Fixed a memory leak when switching between playlists.
  + Removed use of HTML in systemtray tooltip on KDE, since KDE no longer renders HTML in the systemtray.
  * Enhancements:
  + Replaced use of C style casts.
  + Adapted use of C++11 override.
  + Improved CMake build files.
  + Added new on startup options to show maximized or minimized.
  + Builtin TagLib code is updated and improved.
  + Made most icon sizes configurable in the settings, and increased default sizes for icons.
  + Improved fancy tabbar to use font sizes from the theme instead of fixed sizes.
  + Moving the currently playing song to the top when the playlist is manually shuffled.
  + Added "a taste of Strawbs" background image.
  + Fixed unit test for testing playlist model.
  + Added new unit tests for tagreader.</changelog>
  <changelog author="Michel Normand &lt;normand@linux.vnet.ibm.com&gt;" date="1595246400">- Add _constraints for ppc64le avoid "no space left on device" build error</changelog>
  <changelog author="Jonas Kvinge &lt;jonas@jkvinge.net&gt;" date="1597406400">- Update to version 0.7.1:
  * Bugfixes:
  + Fixed incorrectly mapped global shortcuts keys "2" and "3".
  + Fixed Last.fm scrobbling to correctly start array notation for parameters at 0 and not 1.
  + Fixed sending trackNumber correctly for Last.fm and Libre.fm scrobbling.
  + Fixed collection search when using special characters in the search query.
  + Fixed reading and saving MP4 lyrics tag.
  + Fixed reading ASF comment tag.
  + Fixed adding playlist songs outside the collection when there are multiple files with the same URL.
  + Fixed the rescan songs option to work with local songs outside of the collection.
  + Fixed problems with editing song metadata in the playlists.
  * Enhancements:
  + Simplified and improved startup behaviour code.
  + Adapted all source code to be compatible with Qt 6, and increased required Qt version to 5.8.
  + Added option to compile with Qt 6 (-DWITH_QT6=ON).
  + Base warning for show in file browser on unique directories to avoid unneeded warning about opening many files.
  + Use album artist instead of artist for album repeat mode when available.
  + Added extra safety for overwriting files for filesystem storages when organizing files.
  + Remove diacritics in FTS search.
  + Improved playlist context menu.
  + Added fatal CMake error for missing protobuf compiler.
  + Added support for parsing radio streams metadata with tilde in title.
  + Added CMake option to install translation files.
  + (Unix) Added playback actions to desktop file.
  * Removed features:
  + Removed Xine engine support.
  + Removed broken imobiledevice (iPhone) support.</changelog>
  <changelog author="Jonas Kvinge &lt;jonas@jkvinge.net&gt;" date="1597492800">- Update to version 0.7.2:
  * Bugfixes:
  + Fixed installation directory for translations.
  + Fixed collection sorting for non-ASCII characters.
  + Fixed closing connected devices on exit.</changelog>
  <changelog author="Jonas Kvinge &lt;jonas@jkvinge.net&gt;" date="1602244800">- Update to version 0.8.1:
  * Bugfixes:
  + Fixed engine selection in backend settings with Qt 6.
  + Fixed pixelated playlist source icon for currently playing song.
  + Fixed crash when deleting queued songs from playlist.
  + Fixed situations where songs could disappear or be shown multiple times with certain collection groupings.
  + Fixed initial sizes of playlist header columns.
  + Fixed Strawberry preventing logout.
  + Fixed incorrectly splitting of basename for moodbar and transcoding for filenames with several dots.
  + Fixed certain cases where "playing now" for scrobbler were sent twice.
  + Fixed album cover loaded twice for certain songs causing slugglish playing widget.
  + Fixed playing widget to draw text after album cover is fully shown.
  + Fixed crash when trying to copy a closed playlist to a device.
  + Fixed incorrect song source for CUE songs when added through the collection watcher.
  + Disable use of HTML in system tray tooltip on Cinnamon too.
  + Remove problematic '&amp;' character from OSD messages.
  * Enhancements:
  + Improved playlist autoscrolling.
  + Only allow playlist right click tag editing for editable songs.
  + Read song creation time from subsonic API.
  + Remember manually set compilation status for albums when songs are rescanned.
  + Added icons for edit tag playlist right click menu actions.
  + Maximize dialogs if they are already open when clicked again in the menu.
  + Added support for compilation tag to edit tag dialog.
  + Show song info and album cover in OSD on stop and pause.
  + Reshow OSD on song restart.
  + Always save initial settings.
  + Removed use of deprecated gstreamer "low-percent" (Minimum buffer fill setting).
  + Added buffer low and high watermark settings to backend settings.
  + Make use of newer version of the desktop notifications service when available.
  * New features:
  + Added setting for enabling scrobbling based on song source.
  + Added optional delete from disk in collection and playlist.
  + Added Last.fm import data wizard.
  + Added smart and dynamic playlists.
  + Added song ratings.
  + Added Qobuz streaming support.
  + Added Subsonic server side scrobbling support.
  + Load thumbnails from iPods to show under device collection.</changelog>
  <changelog author="Jonas Kvinge &lt;jonas@jkvinge.net&gt;" date="1602590400">- Update to version 0.8.2:
  * Bugfixes:
  + Fixed broken transition to next song for CUE files with certain audio formats (regression since version 0.6.13).
  + Fixed all collection divider keys showing on top with some language collate settings (regression in version 0.8.1).
  + Fixed SQL querying songs by song ID when song ID is a string.
  + Fixed saving album covers for LMS Subsonic servers.
  + Fixed reading song creation dates with LMS Subsonic servers.
  + Fixed saving initial settings.
  + Removed use of HTML in system tray icon tooltip for all desktop environments instead of just KDE and Cinnamon.</changelog>
  <changelog author="Jonas Kvinge &lt;jonas@jkvinge.net&gt;" date="1603454400">- Update to version 0.8.3:
  + Fixed updating playing widget song details in small cover mode.
  + Fixed file extension when transcoding songs.
  + Fixed updating album cover to collection in edit tag dialog when pressing save.
  + Fixed songs with empty artist in collection.
  + Fixed possible crashes with stream discovery.
  + Fixed setting engine state to null.
  + Fixed tagreader crash with empty APE tags.
  + Fixed a gstreamer memory leak.</changelog>
  <changelog author="Jonas Kvinge &lt;jonas@jkvinge.net&gt;" date="1605355200">- Update to version 0.8.4:
  * Bugfixes:
  + Fix preventing session logout when window is maxmimized.
  + Fix empty space in organize window when copying songs/playlists to devices.
  + Fix crash when opening about dialog in a wayland session.
  + Fix stretched fancy/side tabbar style issue with adwaita style (Fedora/Gnome).
  + Fix centering star icon on playlist tabbar.
  + Fix network proxy settings for streaming.
  + Fix copy URL to clipboard to handle non-ASCII characters.
  + Fix HiDPI scaling for glow animation and drag over playlist.
  + Fix smart playlist search by filename.
  + Fix single letter collection nodes showing before dividers.
  * Enhancements:
  + Add support for native global shortcuts on KDE.
  + Add track progress in system tray icon as an option.
  + Only strip problematic characters in suggested filename when saving a playlist to file.
  + Change star/unstar playlist to doubleclick instead of singleclick.
  + Don't edit playlist name on doubleclick in playlists view.
  + Make context view top label text selectable.
  + Add setting to change Qt style.
  + Clear ID3v3 tags that are empty, and clear ID3v1 tags when setting ID3v3 tags.
  + Remove remaining uses of QTextCodec.
  + Remove Core5Compat dependency.</changelog>
  <changelog author="Jonas Kvinge &lt;jonas@jkvinge.net&gt;" date="1608379200">- Update to version 0.8.5:
  * Bugfixes:
  + Fix return type of SmartPlaylistQueryWizardPlugin::type().
  + Fix comparison between QChar and integer to use QChar::unicode().
  + Fix return type of qHash with Qt 6 to use size_t instead of uint.
  + Fix tag edit dialog save process sometimes stuck.
  + Fix repeat and shuffle buttons greyed out when a dynamic playlist is open.
  + Fix CUE parser handling of values with empty quotes.
  + Fix broken year and disc collection groupings with CUE songs.
  + Fix HTML escaping showing up in OSD notifications when using custom text.
  * Enhancements:
  + Add Swedish translation.
  + Made Qt X11Extras and WinExtras modules optional.
  + Save and restore geometry in edit tag dialog.
  + Add command line option to play a playlist based on name.
  + Change double-click behaviour in cover manager to open fullsize cover.</changelog>
  <changelog author="Jonas Kvinge &lt;jonaski@opensuse.org&gt;" date="1608724800">- Use cmake_build macro
- Use Qt 6 on tumbleweed</changelog>
  <changelog author="Jonas Kvinge &lt;jonaski@opensuse.org&gt;" date="1615636800">- Update to version 0.9.1:
  + Bugfixes:
  + Fix duplicating songs in the DB when organizing songs between 2 different collection directories.
  + Fix overwriting existing newer last played when importing last played from last.fm.
  + Fix memory leak on song change when moodbar is disabled.
  + Fix playlist filter search for text with spaces with Qt 6.
  + Fix 'Except between tracks on the same album' backend fade option always greyed out.
  + Fix read and save vorbis comment grouping tag.
  + Fix QAtomicInteger compile error on armv.
  + Fix compile error with protobuf 3.15.0 and newer.
  + Fix possible tagreader (messagereply) crashes.
  + Fix save album cover when album directory and no overwrite is used for saving covers.
  + Fix right click save cover action when album has embedded cover.
  + Fix temporary art saved to /tmp.
  + Fix playlist bitrate sometimes stuck when changing track to previous.
  + Enhancements:
  + Improve Musixmatch cover and lyrics search.
  + Decode any HTML entities in some rare cases they appear in the retrieved lyrics from the API's.
  + Use mimetype instead of description from stream metadata by default when updating song filetype.
  + Set limits for collection pixmap cache based on size units.
  + Convert all signal/slot connections to new Qt 5/6 syntax.
  + Improve album cover management.
  + Add right click actions to clear set cover, and option delete covers.
  + Show artist and album underneath the albums in the cover manager when all Artists is selected.
  + Disable unavailable right click cover actions.
  + Remove 3rdparty TagLib now that TagLib 1.12 is available.
  + New features:
  + Add option and support for saving embedded covers for FLAC, Ogg Vorbis, MP3 and MP4/AAC.
- Remove use of deprecated USE_SYSTEM_TAGLIB CMake option.</changelog>
  <changelog author="Jonas Kvinge &lt;jonaski@opensuse.org&gt;" date="1616673600">- Update to version 0.9.2:
  +  Fix marking songs available.
  +  Fix crash when transcoding music, or copying music to devices with transcoding.
  +  Fix copying album covers to iPod.
  +  Fix playlist tabbar close and save right click actions.
  +  Fix slow opening of cover manager.</changelog>
  <changelog author="Jonas Kvinge &lt;jonaski@opensuse.org&gt;" date="1618747200">-Update to version 0.9.3:
  + Bugfixes:
  + Fix "Show in file browser" to work with thunar.
  + Check that the clicked rating position is to the right or left of the rectangle.
  + Fix rescan when collection directory is removed and readded.
  + Enhancements:
  + Allow editing playlist metadata for radio streams.
  + Make CollectionQuery subclass QSqlQuery, avoid copying QSqlQuery.
  + Only enable FTS3 when schema needs upgrading, since FTS5 is used for search.
  + Add setting for configuring the color for the currently playing song.
  + Add setting to turn on OSD Pretty fading.
  + Add commandline option to resize window.</changelog>
  <changelog author="Jonas Kvinge &lt;jonaski@opensuse.org&gt;" date="1634212800">- Update to version 1.0.0
  + Bugfixes:
  + Fix updating temporary metadata when reloading songs outside of the collection.
  + Don't strip off "Live" from song title when sending scrobbles.
  + Fix incorrect use of QFutureWatcher.
  + Fix compile of Utilities::Hmac with Qt 6.2.
  + Fix a memory leak when using right click context menu in internet search.
  + Fix a gstreamer bus leak when adding streams and remote playlists.
  + Fix "Source ID x was not found when attempting to remove it" error.
  + Escape ampersands in playlist tabs.
  + Fix analyzer with S24_32LE audio format.
  + Enhancements:
  + Add replaygain fallback gain setting.
  + Add option to turn off playlist alternating row colors.
  + Make the default tabbbar background color lighter.
  + Remove use of deprecated WinExtras Qt module.
  + Add CMake test for Qt sqlite support.
  + Automatically detect Qt version if BUILD_WITH_QT5 or BUILD_WITH_QT6 is not specified.
  + Correct playlist tabbar favorite tooltip from "click" to "double-click".
  + Remove scroll over icon to change track option since it does not work reliable.
  + Improve resume playback on startup.
  + Re-request stream URL for Tidal and QObuz when resuming playback after pausing for more than 30 seconds.
  + Add Finnish, Ukrainian, Dutch, Japanese, Chinese, Catalan and Portuguese (Brazil).
  + Add support for TagParser (https://github.com/Martchus/tagparser) as an alternative to TagLib.
  + Add Subsonic option to turn off HTTP/2.
  + Fix minor Clang-Tidy and Clazy warnings.
  + Use higher resolution images from last.fm API.
  + Add MD5 token authentication for Subsonic.
  + Use 500 albums per request when receiving albums from Subsonic.
  + Use QX11Application with Qt &gt;= 6.2 for X11 global shortcuts.
  + Allow fading when a ALSA PCM device is selected.
  + Store Tidal MPEG-DASH file in data uri.
  + Use XSPF image elements as manually set artwork.
  + Make error dialog larger.
  + Show error dialog for failed SQL queries.
  + Show error dialog when failing to read or write album covers.
  + Add module music formats (mod, s3m, xm, it) to detected filetypes.
  + Disable gapless playback for module music formats to workaround gstreamer bug.
  + Update directory ID and song path immediately when organizing collection songs.
  + Add right click option to star a playlist in playlist tabs.
  + Use seconds instead of minutes for scrobble submit delay.
  + New features:
  + Add ALSA PCM devices.
  + Add song fingerprinting and tracking.
  + Add support for native global shortcuts on MATE.
  + Add radios view with channels from Radio Paradise and SomaFM.</changelog>
  <changelog author="Jonas Kvinge &lt;jonaski@opensuse.org&gt;" date="1641643200">- Update to version 1.0.1
  + Bugfixes:
  + Fixed collection and internet search filter tool button menu arrow overlap (#796).
  + Fixed stop after this track button with Qt 6 (#795).
  + Fixed not updating the URL when songs were moved on disk when the fingerprinting feature is enabled.
  + Fixed SQL query error for songs with an invalid modification time (#815).
  + Fixed blocky rendering of the currently playing track with high resolution screens (#794).
  + Fixed incorrect playlist column filesize for radio streams.
  + Fixed deleting embedded album cover from Ogg songs.
  + Fixed parsing of Cue tracks with 1-digit minutes (#836).
  + Fixed updating of playlist summary after reloading items when adding songs from files outside of the collection (#848).
  + Fixed always saving metadata when saving playlists for Tidal, Qobuz and Subsonic songs independent of playlist setting (#851).
  + Fixed setting media shortcuts when using kglobalaccel (#849).
  + Fixed parsing of Genius lyrics when they are sometimes received in a different HTML format.
  + Fixed saving MP4 specific tags as UTF-8 (#830).
  + Fixed clearing "manually set" cover when saving album covers embedded from outside of the tag editor (#858).
  + Fixed aborting collection scan when Strawberry exists to avoid hang on exit.
  + Fixed resuming collection scan when adding a new directory after collection scan was aborted.
  + Fixed excluding hidden songs from the collection.
  + Disabled moodbar for CUE songs since they can not be supported properly (#865).
  + Enhancements:
  + Made playlist header column text elided (#801).
  + Added support for reading and writing playcounts and ratings from/to tags.
  + Added support for setting rating using the edit tag dialog.
  + Added setting to enable/disable playlist toolbar (#809).
  + Added component type, content_rating type and releases to AppStream data file (#806).
  + Removed unused "mark as listened" option in organize dialog.
  + Fixed some clazy warnings and narrowing conversions in the source code.
  + Replaced uses of macros in the source code.
  + Added a more user-friendly error message when receiving encrypted streams from Tidal (#824).
  + Added support for port-pattern entered in the device textbox when using Jack as output (#828).
  + Added Spanish (Spain) translation.
  + Added support for more CUE filenames (#835).</changelog>
  <changelog author="Jonas Kvinge &lt;jonaski@opensuse.org&gt;" date="1645358400">- Update to version 1.0.2
  + Bugfixes:
  + Fixed showing menu when clicking icon for collection and internet search tool buttons
  + Fixed ignoring devices with system mounts as defined by GIO (#410).
  + Fixed updating database when deleting songs from filesystem devices.
  + Fixed unregistered metatype when listing songs from MTP devices with Qt 6.
  + Fixed using entered password when testing Subsonic settings before pressing save (#879).
  + Fixed downloading Subsonic album covers.
  + Fixed subsonic album covers downloaded several times for each album when MD5 authentication was enabled (#885).
  + Fixed volume going to 100% when pressing volume down with MRPIS2 and global shortcuts (#884).
  + Fixed incorrect rounding when setting volume through MPRIS2 (#894).
  + Fixed delete from disk not showing up in the menu when one or more CUE songs were selected.
  + Fixed possible crashes when switching songs when fading is enabled (#890).
  + Fixed X11 global shortcuts not working unless window was in focus with Qt 6.2 and higher (#893).
  + Fixed scrobbler re-sending scrobbles to fast on error (#898).
  + Enhancements
  + Log Qt version on startup.
  + Added button for deleting existing Subsonic songs (#883).
  + Make collection watcher ignore files with "qt_temp" filename and tmp extension.
  + Require Qt 5.9 or higher.
  + Added scrollbars to edit tag dialog (#888).
  + Added advanced settings for configuring collection watcher.
  + Disable open audio CD menu when compiled without audio CD support.
  + Replaced use of deprecated QMouseEvent constructor as of Qt 6.4.
  + Replaced use of deprecated QCryptographicHash::addData overload as of Qt 6.4.
  + Removed features:
  + Removed broken "nomedia" / "nomusic" file handling.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1646654400">- Increase the disk size needed to build strawberry on PowerPC.
- Remove the unneeded qt6-network-tls requirement.
  libQt6Network6 already requires the plugin.</changelog>
  <changelog author="Jonas Kvinge &lt;jonaski@opensuse.org&gt;" date="1648123200">- Update to version 1.0.3
  + Bugfixes:
  + Remove slash and backslash from filenames when saving album covers using album directory cover filenames (#903).
  + Remove playlist file-extensions from accepted audio file extensions (#909).
  + Fixed Qobuz requests only receiving the first 50 albums (#922).
  + New features
  + Added support for bs2b (Improved headphone listening of stereo audio records using Bauer stereophonic-to-binaural DSP) (#249).</changelog>
  <changelog author="Jonas Kvinge &lt;jonaski@opensuse.org&gt;" date="1649592000">- Update to version 1.0.4
  + Bugfixes:
  + Fixed use-after-free memory in ALSA PCM device finder.
  + Translate global shortcuts.
  + Enhancement:
  + Added save all playlists action.
  + Other:
  + Removed use of custom font in context.</changelog>
  <changelog author="Jonas Kvinge &lt;jonaski@opensuse.org&gt;" date="1654862400">- Update to version 1.0.5
  + Bugfixes:
  + Fixed smart playlist filetype search.
  + Fixed Radio Paradise URLs to use HTTPS instead of HTTP.
  + Fixed horizontal scrolling not affecting currently playing track (#952).
  + Fixed keep running in the background when window is closed with Wayland (#964).
  + Fixed percent-encoding of URLs when loading and saving XSPF playlists (#821).
  + Fixed fancy tabbar context menu showing on right clicks outside of tabbar when a song is playing.
  + Fixed possible duplicating songs in the database when moving songs to the collection using the organize feature.
  + Enhancements:
  + Show more details in error dialog on GStreamer errors (#958).
  + Allow setting blur amount of playlist background image up to 100px (#939).
  + Include 128x128 icon sizes (#954).
  + Show right click copy context menu in context view on top text and lyrics (#965).
  + Improve fading between album covers in context view.
  + Added option for overwriting database playcounts in collection settings (#962).
  + Added option for disabling bar on currently playing track (#972).</changelog>
</package>
<package pkgid="57c436aea3cc672e98ad420bcc38ebed9e346092c639e27fe7f0b9edac2bb022" name="strawberry" arch="src">
  <version epoch="0" ver="1.0.5" rel="bp154.2.3.6"/>
  <changelog author="Jonas Kvinge &lt;jonas@jkvinge.net&gt;" date="1594641600">- Update to version 0.6.13:
  * Bugfixes:
  + Fixed cut-off text in about dialog.
  + Fixed increasing play count when stop after track is enabled.
  + Fixed showing/hiding playing widget when playback is started while window is hidden.
  + Fixed "Show in file browser" to also work on local songs that are not in the collection.
  + Fixed "Show in file browser" to work with PCManFM file manager.
  + Fixed audio analyzer to work with S24LE and F32LE audio formats.
  + Fixed playlist background image not loading.
  + Fixed a memory leak when switching between playlists.
  + Removed use of HTML in systemtray tooltip on KDE, since KDE no longer renders HTML in the systemtray.
  * Enhancements:
  + Replaced use of C style casts.
  + Adapted use of C++11 override.
  + Improved CMake build files.
  + Added new on startup options to show maximized or minimized.
  + Builtin TagLib code is updated and improved.
  + Made most icon sizes configurable in the settings, and increased default sizes for icons.
  + Improved fancy tabbar to use font sizes from the theme instead of fixed sizes.
  + Moving the currently playing song to the top when the playlist is manually shuffled.
  + Added "a taste of Strawbs" background image.
  + Fixed unit test for testing playlist model.
  + Added new unit tests for tagreader.</changelog>
  <changelog author="Michel Normand &lt;normand@linux.vnet.ibm.com&gt;" date="1595246400">- Add _constraints for ppc64le avoid "no space left on device" build error</changelog>
  <changelog author="Jonas Kvinge &lt;jonas@jkvinge.net&gt;" date="1597406400">- Update to version 0.7.1:
  * Bugfixes:
  + Fixed incorrectly mapped global shortcuts keys "2" and "3".
  + Fixed Last.fm scrobbling to correctly start array notation for parameters at 0 and not 1.
  + Fixed sending trackNumber correctly for Last.fm and Libre.fm scrobbling.
  + Fixed collection search when using special characters in the search query.
  + Fixed reading and saving MP4 lyrics tag.
  + Fixed reading ASF comment tag.
  + Fixed adding playlist songs outside the collection when there are multiple files with the same URL.
  + Fixed the rescan songs option to work with local songs outside of the collection.
  + Fixed problems with editing song metadata in the playlists.
  * Enhancements:
  + Simplified and improved startup behaviour code.
  + Adapted all source code to be compatible with Qt 6, and increased required Qt version to 5.8.
  + Added option to compile with Qt 6 (-DWITH_QT6=ON).
  + Base warning for show in file browser on unique directories to avoid unneeded warning about opening many files.
  + Use album artist instead of artist for album repeat mode when available.
  + Added extra safety for overwriting files for filesystem storages when organizing files.
  + Remove diacritics in FTS search.
  + Improved playlist context menu.
  + Added fatal CMake error for missing protobuf compiler.
  + Added support for parsing radio streams metadata with tilde in title.
  + Added CMake option to install translation files.
  + (Unix) Added playback actions to desktop file.
  * Removed features:
  + Removed Xine engine support.
  + Removed broken imobiledevice (iPhone) support.</changelog>
  <changelog author="Jonas Kvinge &lt;jonas@jkvinge.net&gt;" date="1597492800">- Update to version 0.7.2:
  * Bugfixes:
  + Fixed installation directory for translations.
  + Fixed collection sorting for non-ASCII characters.
  + Fixed closing connected devices on exit.</changelog>
  <changelog author="Jonas Kvinge &lt;jonas@jkvinge.net&gt;" date="1602244800">- Update to version 0.8.1:
  * Bugfixes:
  + Fixed engine selection in backend settings with Qt 6.
  + Fixed pixelated playlist source icon for currently playing song.
  + Fixed crash when deleting queued songs from playlist.
  + Fixed situations where songs could disappear or be shown multiple times with certain collection groupings.
  + Fixed initial sizes of playlist header columns.
  + Fixed Strawberry preventing logout.
  + Fixed incorrectly splitting of basename for moodbar and transcoding for filenames with several dots.
  + Fixed certain cases where "playing now" for scrobbler were sent twice.
  + Fixed album cover loaded twice for certain songs causing slugglish playing widget.
  + Fixed playing widget to draw text after album cover is fully shown.
  + Fixed crash when trying to copy a closed playlist to a device.
  + Fixed incorrect song source for CUE songs when added through the collection watcher.
  + Disable use of HTML in system tray tooltip on Cinnamon too.
  + Remove problematic '&amp;' character from OSD messages.
  * Enhancements:
  + Improved playlist autoscrolling.
  + Only allow playlist right click tag editing for editable songs.
  + Read song creation time from subsonic API.
  + Remember manually set compilation status for albums when songs are rescanned.
  + Added icons for edit tag playlist right click menu actions.
  + Maximize dialogs if they are already open when clicked again in the menu.
  + Added support for compilation tag to edit tag dialog.
  + Show song info and album cover in OSD on stop and pause.
  + Reshow OSD on song restart.
  + Always save initial settings.
  + Removed use of deprecated gstreamer "low-percent" (Minimum buffer fill setting).
  + Added buffer low and high watermark settings to backend settings.
  + Make use of newer version of the desktop notifications service when available.
  * New features:
  + Added setting for enabling scrobbling based on song source.
  + Added optional delete from disk in collection and playlist.
  + Added Last.fm import data wizard.
  + Added smart and dynamic playlists.
  + Added song ratings.
  + Added Qobuz streaming support.
  + Added Subsonic server side scrobbling support.
  + Load thumbnails from iPods to show under device collection.</changelog>
  <changelog author="Jonas Kvinge &lt;jonas@jkvinge.net&gt;" date="1602590400">- Update to version 0.8.2:
  * Bugfixes:
  + Fixed broken transition to next song for CUE files with certain audio formats (regression since version 0.6.13).
  + Fixed all collection divider keys showing on top with some language collate settings (regression in version 0.8.1).
  + Fixed SQL querying songs by song ID when song ID is a string.
  + Fixed saving album covers for LMS Subsonic servers.
  + Fixed reading song creation dates with LMS Subsonic servers.
  + Fixed saving initial settings.
  + Removed use of HTML in system tray icon tooltip for all desktop environments instead of just KDE and Cinnamon.</changelog>
  <changelog author="Jonas Kvinge &lt;jonas@jkvinge.net&gt;" date="1603454400">- Update to version 0.8.3:
  + Fixed updating playing widget song details in small cover mode.
  + Fixed file extension when transcoding songs.
  + Fixed updating album cover to collection in edit tag dialog when pressing save.
  + Fixed songs with empty artist in collection.
  + Fixed possible crashes with stream discovery.
  + Fixed setting engine state to null.
  + Fixed tagreader crash with empty APE tags.
  + Fixed a gstreamer memory leak.</changelog>
  <changelog author="Jonas Kvinge &lt;jonas@jkvinge.net&gt;" date="1605355200">- Update to version 0.8.4:
  * Bugfixes:
  + Fix preventing session logout when window is maxmimized.
  + Fix empty space in organize window when copying songs/playlists to devices.
  + Fix crash when opening about dialog in a wayland session.
  + Fix stretched fancy/side tabbar style issue with adwaita style (Fedora/Gnome).
  + Fix centering star icon on playlist tabbar.
  + Fix network proxy settings for streaming.
  + Fix copy URL to clipboard to handle non-ASCII characters.
  + Fix HiDPI scaling for glow animation and drag over playlist.
  + Fix smart playlist search by filename.
  + Fix single letter collection nodes showing before dividers.
  * Enhancements:
  + Add support for native global shortcuts on KDE.
  + Add track progress in system tray icon as an option.
  + Only strip problematic characters in suggested filename when saving a playlist to file.
  + Change star/unstar playlist to doubleclick instead of singleclick.
  + Don't edit playlist name on doubleclick in playlists view.
  + Make context view top label text selectable.
  + Add setting to change Qt style.
  + Clear ID3v3 tags that are empty, and clear ID3v1 tags when setting ID3v3 tags.
  + Remove remaining uses of QTextCodec.
  + Remove Core5Compat dependency.</changelog>
  <changelog author="Jonas Kvinge &lt;jonas@jkvinge.net&gt;" date="1608379200">- Update to version 0.8.5:
  * Bugfixes:
  + Fix return type of SmartPlaylistQueryWizardPlugin::type().
  + Fix comparison between QChar and integer to use QChar::unicode().
  + Fix return type of qHash with Qt 6 to use size_t instead of uint.
  + Fix tag edit dialog save process sometimes stuck.
  + Fix repeat and shuffle buttons greyed out when a dynamic playlist is open.
  + Fix CUE parser handling of values with empty quotes.
  + Fix broken year and disc collection groupings with CUE songs.
  + Fix HTML escaping showing up in OSD notifications when using custom text.
  * Enhancements:
  + Add Swedish translation.
  + Made Qt X11Extras and WinExtras modules optional.
  + Save and restore geometry in edit tag dialog.
  + Add command line option to play a playlist based on name.
  + Change double-click behaviour in cover manager to open fullsize cover.</changelog>
  <changelog author="Jonas Kvinge &lt;jonaski@opensuse.org&gt;" date="1608724800">- Use cmake_build macro
- Use Qt 6 on tumbleweed</changelog>
  <changelog author="Jonas Kvinge &lt;jonaski@opensuse.org&gt;" date="1615636800">- Update to version 0.9.1:
  + Bugfixes:
  + Fix duplicating songs in the DB when organizing songs between 2 different collection directories.
  + Fix overwriting existing newer last played when importing last played from last.fm.
  + Fix memory leak on song change when moodbar is disabled.
  + Fix playlist filter search for text with spaces with Qt 6.
  + Fix 'Except between tracks on the same album' backend fade option always greyed out.
  + Fix read and save vorbis comment grouping tag.
  + Fix QAtomicInteger compile error on armv.
  + Fix compile error with protobuf 3.15.0 and newer.
  + Fix possible tagreader (messagereply) crashes.
  + Fix save album cover when album directory and no overwrite is used for saving covers.
  + Fix right click save cover action when album has embedded cover.
  + Fix temporary art saved to /tmp.
  + Fix playlist bitrate sometimes stuck when changing track to previous.
  + Enhancements:
  + Improve Musixmatch cover and lyrics search.
  + Decode any HTML entities in some rare cases they appear in the retrieved lyrics from the API's.
  + Use mimetype instead of description from stream metadata by default when updating song filetype.
  + Set limits for collection pixmap cache based on size units.
  + Convert all signal/slot connections to new Qt 5/6 syntax.
  + Improve album cover management.
  + Add right click actions to clear set cover, and option delete covers.
  + Show artist and album underneath the albums in the cover manager when all Artists is selected.
  + Disable unavailable right click cover actions.
  + Remove 3rdparty TagLib now that TagLib 1.12 is available.
  + New features:
  + Add option and support for saving embedded covers for FLAC, Ogg Vorbis, MP3 and MP4/AAC.
- Remove use of deprecated USE_SYSTEM_TAGLIB CMake option.</changelog>
  <changelog author="Jonas Kvinge &lt;jonaski@opensuse.org&gt;" date="1616673600">- Update to version 0.9.2:
  +  Fix marking songs available.
  +  Fix crash when transcoding music, or copying music to devices with transcoding.
  +  Fix copying album covers to iPod.
  +  Fix playlist tabbar close and save right click actions.
  +  Fix slow opening of cover manager.</changelog>
  <changelog author="Jonas Kvinge &lt;jonaski@opensuse.org&gt;" date="1618747200">-Update to version 0.9.3:
  + Bugfixes:
  + Fix "Show in file browser" to work with thunar.
  + Check that the clicked rating position is to the right or left of the rectangle.
  + Fix rescan when collection directory is removed and readded.
  + Enhancements:
  + Allow editing playlist metadata for radio streams.
  + Make CollectionQuery subclass QSqlQuery, avoid copying QSqlQuery.
  + Only enable FTS3 when schema needs upgrading, since FTS5 is used for search.
  + Add setting for configuring the color for the currently playing song.
  + Add setting to turn on OSD Pretty fading.
  + Add commandline option to resize window.</changelog>
  <changelog author="Jonas Kvinge &lt;jonaski@opensuse.org&gt;" date="1634212800">- Update to version 1.0.0
  + Bugfixes:
  + Fix updating temporary metadata when reloading songs outside of the collection.
  + Don't strip off "Live" from song title when sending scrobbles.
  + Fix incorrect use of QFutureWatcher.
  + Fix compile of Utilities::Hmac with Qt 6.2.
  + Fix a memory leak when using right click context menu in internet search.
  + Fix a gstreamer bus leak when adding streams and remote playlists.
  + Fix "Source ID x was not found when attempting to remove it" error.
  + Escape ampersands in playlist tabs.
  + Fix analyzer with S24_32LE audio format.
  + Enhancements:
  + Add replaygain fallback gain setting.
  + Add option to turn off playlist alternating row colors.
  + Make the default tabbbar background color lighter.
  + Remove use of deprecated WinExtras Qt module.
  + Add CMake test for Qt sqlite support.
  + Automatically detect Qt version if BUILD_WITH_QT5 or BUILD_WITH_QT6 is not specified.
  + Correct playlist tabbar favorite tooltip from "click" to "double-click".
  + Remove scroll over icon to change track option since it does not work reliable.
  + Improve resume playback on startup.
  + Re-request stream URL for Tidal and QObuz when resuming playback after pausing for more than 30 seconds.
  + Add Finnish, Ukrainian, Dutch, Japanese, Chinese, Catalan and Portuguese (Brazil).
  + Add support for TagParser (https://github.com/Martchus/tagparser) as an alternative to TagLib.
  + Add Subsonic option to turn off HTTP/2.
  + Fix minor Clang-Tidy and Clazy warnings.
  + Use higher resolution images from last.fm API.
  + Add MD5 token authentication for Subsonic.
  + Use 500 albums per request when receiving albums from Subsonic.
  + Use QX11Application with Qt &gt;= 6.2 for X11 global shortcuts.
  + Allow fading when a ALSA PCM device is selected.
  + Store Tidal MPEG-DASH file in data uri.
  + Use XSPF image elements as manually set artwork.
  + Make error dialog larger.
  + Show error dialog for failed SQL queries.
  + Show error dialog when failing to read or write album covers.
  + Add module music formats (mod, s3m, xm, it) to detected filetypes.
  + Disable gapless playback for module music formats to workaround gstreamer bug.
  + Update directory ID and song path immediately when organizing collection songs.
  + Add right click option to star a playlist in playlist tabs.
  + Use seconds instead of minutes for scrobble submit delay.
  + New features:
  + Add ALSA PCM devices.
  + Add song fingerprinting and tracking.
  + Add support for native global shortcuts on MATE.
  + Add radios view with channels from Radio Paradise and SomaFM.</changelog>
  <changelog author="Jonas Kvinge &lt;jonaski@opensuse.org&gt;" date="1641643200">- Update to version 1.0.1
  + Bugfixes:
  + Fixed collection and internet search filter tool button menu arrow overlap (#796).
  + Fixed stop after this track button with Qt 6 (#795).
  + Fixed not updating the URL when songs were moved on disk when the fingerprinting feature is enabled.
  + Fixed SQL query error for songs with an invalid modification time (#815).
  + Fixed blocky rendering of the currently playing track with high resolution screens (#794).
  + Fixed incorrect playlist column filesize for radio streams.
  + Fixed deleting embedded album cover from Ogg songs.
  + Fixed parsing of Cue tracks with 1-digit minutes (#836).
  + Fixed updating of playlist summary after reloading items when adding songs from files outside of the collection (#848).
  + Fixed always saving metadata when saving playlists for Tidal, Qobuz and Subsonic songs independent of playlist setting (#851).
  + Fixed setting media shortcuts when using kglobalaccel (#849).
  + Fixed parsing of Genius lyrics when they are sometimes received in a different HTML format.
  + Fixed saving MP4 specific tags as UTF-8 (#830).
  + Fixed clearing "manually set" cover when saving album covers embedded from outside of the tag editor (#858).
  + Fixed aborting collection scan when Strawberry exists to avoid hang on exit.
  + Fixed resuming collection scan when adding a new directory after collection scan was aborted.
  + Fixed excluding hidden songs from the collection.
  + Disabled moodbar for CUE songs since they can not be supported properly (#865).
  + Enhancements:
  + Made playlist header column text elided (#801).
  + Added support for reading and writing playcounts and ratings from/to tags.
  + Added support for setting rating using the edit tag dialog.
  + Added setting to enable/disable playlist toolbar (#809).
  + Added component type, content_rating type and releases to AppStream data file (#806).
  + Removed unused "mark as listened" option in organize dialog.
  + Fixed some clazy warnings and narrowing conversions in the source code.
  + Replaced uses of macros in the source code.
  + Added a more user-friendly error message when receiving encrypted streams from Tidal (#824).
  + Added support for port-pattern entered in the device textbox when using Jack as output (#828).
  + Added Spanish (Spain) translation.
  + Added support for more CUE filenames (#835).</changelog>
  <changelog author="Jonas Kvinge &lt;jonaski@opensuse.org&gt;" date="1645358400">- Update to version 1.0.2
  + Bugfixes:
  + Fixed showing menu when clicking icon for collection and internet search tool buttons
  + Fixed ignoring devices with system mounts as defined by GIO (#410).
  + Fixed updating database when deleting songs from filesystem devices.
  + Fixed unregistered metatype when listing songs from MTP devices with Qt 6.
  + Fixed using entered password when testing Subsonic settings before pressing save (#879).
  + Fixed downloading Subsonic album covers.
  + Fixed subsonic album covers downloaded several times for each album when MD5 authentication was enabled (#885).
  + Fixed volume going to 100% when pressing volume down with MRPIS2 and global shortcuts (#884).
  + Fixed incorrect rounding when setting volume through MPRIS2 (#894).
  + Fixed delete from disk not showing up in the menu when one or more CUE songs were selected.
  + Fixed possible crashes when switching songs when fading is enabled (#890).
  + Fixed X11 global shortcuts not working unless window was in focus with Qt 6.2 and higher (#893).
  + Fixed scrobbler re-sending scrobbles to fast on error (#898).
  + Enhancements
  + Log Qt version on startup.
  + Added button for deleting existing Subsonic songs (#883).
  + Make collection watcher ignore files with "qt_temp" filename and tmp extension.
  + Require Qt 5.9 or higher.
  + Added scrollbars to edit tag dialog (#888).
  + Added advanced settings for configuring collection watcher.
  + Disable open audio CD menu when compiled without audio CD support.
  + Replaced use of deprecated QMouseEvent constructor as of Qt 6.4.
  + Replaced use of deprecated QCryptographicHash::addData overload as of Qt 6.4.
  + Removed features:
  + Removed broken "nomedia" / "nomusic" file handling.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1646654400">- Increase the disk size needed to build strawberry on PowerPC.
- Remove the unneeded qt6-network-tls requirement.
  libQt6Network6 already requires the plugin.</changelog>
  <changelog author="Jonas Kvinge &lt;jonaski@opensuse.org&gt;" date="1648123200">- Update to version 1.0.3
  + Bugfixes:
  + Remove slash and backslash from filenames when saving album covers using album directory cover filenames (#903).
  + Remove playlist file-extensions from accepted audio file extensions (#909).
  + Fixed Qobuz requests only receiving the first 50 albums (#922).
  + New features
  + Added support for bs2b (Improved headphone listening of stereo audio records using Bauer stereophonic-to-binaural DSP) (#249).</changelog>
  <changelog author="Jonas Kvinge &lt;jonaski@opensuse.org&gt;" date="1649592000">- Update to version 1.0.4
  + Bugfixes:
  + Fixed use-after-free memory in ALSA PCM device finder.
  + Translate global shortcuts.
  + Enhancement:
  + Added save all playlists action.
  + Other:
  + Removed use of custom font in context.</changelog>
  <changelog author="Jonas Kvinge &lt;jonaski@opensuse.org&gt;" date="1654862400">- Update to version 1.0.5
  + Bugfixes:
  + Fixed smart playlist filetype search.
  + Fixed Radio Paradise URLs to use HTTPS instead of HTTP.
  + Fixed horizontal scrolling not affecting currently playing track (#952).
  + Fixed keep running in the background when window is closed with Wayland (#964).
  + Fixed percent-encoding of URLs when loading and saving XSPF playlists (#821).
  + Fixed fancy tabbar context menu showing on right clicks outside of tabbar when a song is playing.
  + Fixed possible duplicating songs in the database when moving songs to the collection using the organize feature.
  + Enhancements:
  + Show more details in error dialog on GStreamer errors (#958).
  + Allow setting blur amount of playlist background image up to 100px (#939).
  + Include 128x128 icon sizes (#954).
  + Show right click copy context menu in context view on top text and lyrics (#965).
  + Improve fading between album covers in context view.
  + Added option for overwriting database playcounts in collection settings (#962).
  + Added option for disabling bar on currently playing track (#972).</changelog>
</package>
<package pkgid="34d9ef15b1d4bbed70f797c2570d5bfa31ca3638ab3708d072dd1317346c21f0" name="strawberry" arch="x86_64">
  <version epoch="0" ver="1.0.5" rel="bp154.2.3.6"/>
  <changelog author="Jonas Kvinge &lt;jonas@jkvinge.net&gt;" date="1594641600">- Update to version 0.6.13:
  * Bugfixes:
  + Fixed cut-off text in about dialog.
  + Fixed increasing play count when stop after track is enabled.
  + Fixed showing/hiding playing widget when playback is started while window is hidden.
  + Fixed "Show in file browser" to also work on local songs that are not in the collection.
  + Fixed "Show in file browser" to work with PCManFM file manager.
  + Fixed audio analyzer to work with S24LE and F32LE audio formats.
  + Fixed playlist background image not loading.
  + Fixed a memory leak when switching between playlists.
  + Removed use of HTML in systemtray tooltip on KDE, since KDE no longer renders HTML in the systemtray.
  * Enhancements:
  + Replaced use of C style casts.
  + Adapted use of C++11 override.
  + Improved CMake build files.
  + Added new on startup options to show maximized or minimized.
  + Builtin TagLib code is updated and improved.
  + Made most icon sizes configurable in the settings, and increased default sizes for icons.
  + Improved fancy tabbar to use font sizes from the theme instead of fixed sizes.
  + Moving the currently playing song to the top when the playlist is manually shuffled.
  + Added "a taste of Strawbs" background image.
  + Fixed unit test for testing playlist model.
  + Added new unit tests for tagreader.</changelog>
  <changelog author="Michel Normand &lt;normand@linux.vnet.ibm.com&gt;" date="1595246400">- Add _constraints for ppc64le avoid "no space left on device" build error</changelog>
  <changelog author="Jonas Kvinge &lt;jonas@jkvinge.net&gt;" date="1597406400">- Update to version 0.7.1:
  * Bugfixes:
  + Fixed incorrectly mapped global shortcuts keys "2" and "3".
  + Fixed Last.fm scrobbling to correctly start array notation for parameters at 0 and not 1.
  + Fixed sending trackNumber correctly for Last.fm and Libre.fm scrobbling.
  + Fixed collection search when using special characters in the search query.
  + Fixed reading and saving MP4 lyrics tag.
  + Fixed reading ASF comment tag.
  + Fixed adding playlist songs outside the collection when there are multiple files with the same URL.
  + Fixed the rescan songs option to work with local songs outside of the collection.
  + Fixed problems with editing song metadata in the playlists.
  * Enhancements:
  + Simplified and improved startup behaviour code.
  + Adapted all source code to be compatible with Qt 6, and increased required Qt version to 5.8.
  + Added option to compile with Qt 6 (-DWITH_QT6=ON).
  + Base warning for show in file browser on unique directories to avoid unneeded warning about opening many files.
  + Use album artist instead of artist for album repeat mode when available.
  + Added extra safety for overwriting files for filesystem storages when organizing files.
  + Remove diacritics in FTS search.
  + Improved playlist context menu.
  + Added fatal CMake error for missing protobuf compiler.
  + Added support for parsing radio streams metadata with tilde in title.
  + Added CMake option to install translation files.
  + (Unix) Added playback actions to desktop file.
  * Removed features:
  + Removed Xine engine support.
  + Removed broken imobiledevice (iPhone) support.</changelog>
  <changelog author="Jonas Kvinge &lt;jonas@jkvinge.net&gt;" date="1597492800">- Update to version 0.7.2:
  * Bugfixes:
  + Fixed installation directory for translations.
  + Fixed collection sorting for non-ASCII characters.
  + Fixed closing connected devices on exit.</changelog>
  <changelog author="Jonas Kvinge &lt;jonas@jkvinge.net&gt;" date="1602244800">- Update to version 0.8.1:
  * Bugfixes:
  + Fixed engine selection in backend settings with Qt 6.
  + Fixed pixelated playlist source icon for currently playing song.
  + Fixed crash when deleting queued songs from playlist.
  + Fixed situations where songs could disappear or be shown multiple times with certain collection groupings.
  + Fixed initial sizes of playlist header columns.
  + Fixed Strawberry preventing logout.
  + Fixed incorrectly splitting of basename for moodbar and transcoding for filenames with several dots.
  + Fixed certain cases where "playing now" for scrobbler were sent twice.
  + Fixed album cover loaded twice for certain songs causing slugglish playing widget.
  + Fixed playing widget to draw text after album cover is fully shown.
  + Fixed crash when trying to copy a closed playlist to a device.
  + Fixed incorrect song source for CUE songs when added through the collection watcher.
  + Disable use of HTML in system tray tooltip on Cinnamon too.
  + Remove problematic '&amp;' character from OSD messages.
  * Enhancements:
  + Improved playlist autoscrolling.
  + Only allow playlist right click tag editing for editable songs.
  + Read song creation time from subsonic API.
  + Remember manually set compilation status for albums when songs are rescanned.
  + Added icons for edit tag playlist right click menu actions.
  + Maximize dialogs if they are already open when clicked again in the menu.
  + Added support for compilation tag to edit tag dialog.
  + Show song info and album cover in OSD on stop and pause.
  + Reshow OSD on song restart.
  + Always save initial settings.
  + Removed use of deprecated gstreamer "low-percent" (Minimum buffer fill setting).
  + Added buffer low and high watermark settings to backend settings.
  + Make use of newer version of the desktop notifications service when available.
  * New features:
  + Added setting for enabling scrobbling based on song source.
  + Added optional delete from disk in collection and playlist.
  + Added Last.fm import data wizard.
  + Added smart and dynamic playlists.
  + Added song ratings.
  + Added Qobuz streaming support.
  + Added Subsonic server side scrobbling support.
  + Load thumbnails from iPods to show under device collection.</changelog>
  <changelog author="Jonas Kvinge &lt;jonas@jkvinge.net&gt;" date="1602590400">- Update to version 0.8.2:
  * Bugfixes:
  + Fixed broken transition to next song for CUE files with certain audio formats (regression since version 0.6.13).
  + Fixed all collection divider keys showing on top with some language collate settings (regression in version 0.8.1).
  + Fixed SQL querying songs by song ID when song ID is a string.
  + Fixed saving album covers for LMS Subsonic servers.
  + Fixed reading song creation dates with LMS Subsonic servers.
  + Fixed saving initial settings.
  + Removed use of HTML in system tray icon tooltip for all desktop environments instead of just KDE and Cinnamon.</changelog>
  <changelog author="Jonas Kvinge &lt;jonas@jkvinge.net&gt;" date="1603454400">- Update to version 0.8.3:
  + Fixed updating playing widget song details in small cover mode.
  + Fixed file extension when transcoding songs.
  + Fixed updating album cover to collection in edit tag dialog when pressing save.
  + Fixed songs with empty artist in collection.
  + Fixed possible crashes with stream discovery.
  + Fixed setting engine state to null.
  + Fixed tagreader crash with empty APE tags.
  + Fixed a gstreamer memory leak.</changelog>
  <changelog author="Jonas Kvinge &lt;jonas@jkvinge.net&gt;" date="1605355200">- Update to version 0.8.4:
  * Bugfixes:
  + Fix preventing session logout when window is maxmimized.
  + Fix empty space in organize window when copying songs/playlists to devices.
  + Fix crash when opening about dialog in a wayland session.
  + Fix stretched fancy/side tabbar style issue with adwaita style (Fedora/Gnome).
  + Fix centering star icon on playlist tabbar.
  + Fix network proxy settings for streaming.
  + Fix copy URL to clipboard to handle non-ASCII characters.
  + Fix HiDPI scaling for glow animation and drag over playlist.
  + Fix smart playlist search by filename.
  + Fix single letter collection nodes showing before dividers.
  * Enhancements:
  + Add support for native global shortcuts on KDE.
  + Add track progress in system tray icon as an option.
  + Only strip problematic characters in suggested filename when saving a playlist to file.
  + Change star/unstar playlist to doubleclick instead of singleclick.
  + Don't edit playlist name on doubleclick in playlists view.
  + Make context view top label text selectable.
  + Add setting to change Qt style.
  + Clear ID3v3 tags that are empty, and clear ID3v1 tags when setting ID3v3 tags.
  + Remove remaining uses of QTextCodec.
  + Remove Core5Compat dependency.</changelog>
  <changelog author="Jonas Kvinge &lt;jonas@jkvinge.net&gt;" date="1608379200">- Update to version 0.8.5:
  * Bugfixes:
  + Fix return type of SmartPlaylistQueryWizardPlugin::type().
  + Fix comparison between QChar and integer to use QChar::unicode().
  + Fix return type of qHash with Qt 6 to use size_t instead of uint.
  + Fix tag edit dialog save process sometimes stuck.
  + Fix repeat and shuffle buttons greyed out when a dynamic playlist is open.
  + Fix CUE parser handling of values with empty quotes.
  + Fix broken year and disc collection groupings with CUE songs.
  + Fix HTML escaping showing up in OSD notifications when using custom text.
  * Enhancements:
  + Add Swedish translation.
  + Made Qt X11Extras and WinExtras modules optional.
  + Save and restore geometry in edit tag dialog.
  + Add command line option to play a playlist based on name.
  + Change double-click behaviour in cover manager to open fullsize cover.</changelog>
  <changelog author="Jonas Kvinge &lt;jonaski@opensuse.org&gt;" date="1608724800">- Use cmake_build macro
- Use Qt 6 on tumbleweed</changelog>
  <changelog author="Jonas Kvinge &lt;jonaski@opensuse.org&gt;" date="1615636800">- Update to version 0.9.1:
  + Bugfixes:
  + Fix duplicating songs in the DB when organizing songs between 2 different collection directories.
  + Fix overwriting existing newer last played when importing last played from last.fm.
  + Fix memory leak on song change when moodbar is disabled.
  + Fix playlist filter search for text with spaces with Qt 6.
  + Fix 'Except between tracks on the same album' backend fade option always greyed out.
  + Fix read and save vorbis comment grouping tag.
  + Fix QAtomicInteger compile error on armv.
  + Fix compile error with protobuf 3.15.0 and newer.
  + Fix possible tagreader (messagereply) crashes.
  + Fix save album cover when album directory and no overwrite is used for saving covers.
  + Fix right click save cover action when album has embedded cover.
  + Fix temporary art saved to /tmp.
  + Fix playlist bitrate sometimes stuck when changing track to previous.
  + Enhancements:
  + Improve Musixmatch cover and lyrics search.
  + Decode any HTML entities in some rare cases they appear in the retrieved lyrics from the API's.
  + Use mimetype instead of description from stream metadata by default when updating song filetype.
  + Set limits for collection pixmap cache based on size units.
  + Convert all signal/slot connections to new Qt 5/6 syntax.
  + Improve album cover management.
  + Add right click actions to clear set cover, and option delete covers.
  + Show artist and album underneath the albums in the cover manager when all Artists is selected.
  + Disable unavailable right click cover actions.
  + Remove 3rdparty TagLib now that TagLib 1.12 is available.
  + New features:
  + Add option and support for saving embedded covers for FLAC, Ogg Vorbis, MP3 and MP4/AAC.
- Remove use of deprecated USE_SYSTEM_TAGLIB CMake option.</changelog>
  <changelog author="Jonas Kvinge &lt;jonaski@opensuse.org&gt;" date="1616673600">- Update to version 0.9.2:
  +  Fix marking songs available.
  +  Fix crash when transcoding music, or copying music to devices with transcoding.
  +  Fix copying album covers to iPod.
  +  Fix playlist tabbar close and save right click actions.
  +  Fix slow opening of cover manager.</changelog>
  <changelog author="Jonas Kvinge &lt;jonaski@opensuse.org&gt;" date="1618747200">-Update to version 0.9.3:
  + Bugfixes:
  + Fix "Show in file browser" to work with thunar.
  + Check that the clicked rating position is to the right or left of the rectangle.
  + Fix rescan when collection directory is removed and readded.
  + Enhancements:
  + Allow editing playlist metadata for radio streams.
  + Make CollectionQuery subclass QSqlQuery, avoid copying QSqlQuery.
  + Only enable FTS3 when schema needs upgrading, since FTS5 is used for search.
  + Add setting for configuring the color for the currently playing song.
  + Add setting to turn on OSD Pretty fading.
  + Add commandline option to resize window.</changelog>
  <changelog author="Jonas Kvinge &lt;jonaski@opensuse.org&gt;" date="1634212800">- Update to version 1.0.0
  + Bugfixes:
  + Fix updating temporary metadata when reloading songs outside of the collection.
  + Don't strip off "Live" from song title when sending scrobbles.
  + Fix incorrect use of QFutureWatcher.
  + Fix compile of Utilities::Hmac with Qt 6.2.
  + Fix a memory leak when using right click context menu in internet search.
  + Fix a gstreamer bus leak when adding streams and remote playlists.
  + Fix "Source ID x was not found when attempting to remove it" error.
  + Escape ampersands in playlist tabs.
  + Fix analyzer with S24_32LE audio format.
  + Enhancements:
  + Add replaygain fallback gain setting.
  + Add option to turn off playlist alternating row colors.
  + Make the default tabbbar background color lighter.
  + Remove use of deprecated WinExtras Qt module.
  + Add CMake test for Qt sqlite support.
  + Automatically detect Qt version if BUILD_WITH_QT5 or BUILD_WITH_QT6 is not specified.
  + Correct playlist tabbar favorite tooltip from "click" to "double-click".
  + Remove scroll over icon to change track option since it does not work reliable.
  + Improve resume playback on startup.
  + Re-request stream URL for Tidal and QObuz when resuming playback after pausing for more than 30 seconds.
  + Add Finnish, Ukrainian, Dutch, Japanese, Chinese, Catalan and Portuguese (Brazil).
  + Add support for TagParser (https://github.com/Martchus/tagparser) as an alternative to TagLib.
  + Add Subsonic option to turn off HTTP/2.
  + Fix minor Clang-Tidy and Clazy warnings.
  + Use higher resolution images from last.fm API.
  + Add MD5 token authentication for Subsonic.
  + Use 500 albums per request when receiving albums from Subsonic.
  + Use QX11Application with Qt &gt;= 6.2 for X11 global shortcuts.
  + Allow fading when a ALSA PCM device is selected.
  + Store Tidal MPEG-DASH file in data uri.
  + Use XSPF image elements as manually set artwork.
  + Make error dialog larger.
  + Show error dialog for failed SQL queries.
  + Show error dialog when failing to read or write album covers.
  + Add module music formats (mod, s3m, xm, it) to detected filetypes.
  + Disable gapless playback for module music formats to workaround gstreamer bug.
  + Update directory ID and song path immediately when organizing collection songs.
  + Add right click option to star a playlist in playlist tabs.
  + Use seconds instead of minutes for scrobble submit delay.
  + New features:
  + Add ALSA PCM devices.
  + Add song fingerprinting and tracking.
  + Add support for native global shortcuts on MATE.
  + Add radios view with channels from Radio Paradise and SomaFM.</changelog>
  <changelog author="Jonas Kvinge &lt;jonaski@opensuse.org&gt;" date="1641643200">- Update to version 1.0.1
  + Bugfixes:
  + Fixed collection and internet search filter tool button menu arrow overlap (#796).
  + Fixed stop after this track button with Qt 6 (#795).
  + Fixed not updating the URL when songs were moved on disk when the fingerprinting feature is enabled.
  + Fixed SQL query error for songs with an invalid modification time (#815).
  + Fixed blocky rendering of the currently playing track with high resolution screens (#794).
  + Fixed incorrect playlist column filesize for radio streams.
  + Fixed deleting embedded album cover from Ogg songs.
  + Fixed parsing of Cue tracks with 1-digit minutes (#836).
  + Fixed updating of playlist summary after reloading items when adding songs from files outside of the collection (#848).
  + Fixed always saving metadata when saving playlists for Tidal, Qobuz and Subsonic songs independent of playlist setting (#851).
  + Fixed setting media shortcuts when using kglobalaccel (#849).
  + Fixed parsing of Genius lyrics when they are sometimes received in a different HTML format.
  + Fixed saving MP4 specific tags as UTF-8 (#830).
  + Fixed clearing "manually set" cover when saving album covers embedded from outside of the tag editor (#858).
  + Fixed aborting collection scan when Strawberry exists to avoid hang on exit.
  + Fixed resuming collection scan when adding a new directory after collection scan was aborted.
  + Fixed excluding hidden songs from the collection.
  + Disabled moodbar for CUE songs since they can not be supported properly (#865).
  + Enhancements:
  + Made playlist header column text elided (#801).
  + Added support for reading and writing playcounts and ratings from/to tags.
  + Added support for setting rating using the edit tag dialog.
  + Added setting to enable/disable playlist toolbar (#809).
  + Added component type, content_rating type and releases to AppStream data file (#806).
  + Removed unused "mark as listened" option in organize dialog.
  + Fixed some clazy warnings and narrowing conversions in the source code.
  + Replaced uses of macros in the source code.
  + Added a more user-friendly error message when receiving encrypted streams from Tidal (#824).
  + Added support for port-pattern entered in the device textbox when using Jack as output (#828).
  + Added Spanish (Spain) translation.
  + Added support for more CUE filenames (#835).</changelog>
  <changelog author="Jonas Kvinge &lt;jonaski@opensuse.org&gt;" date="1645358400">- Update to version 1.0.2
  + Bugfixes:
  + Fixed showing menu when clicking icon for collection and internet search tool buttons
  + Fixed ignoring devices with system mounts as defined by GIO (#410).
  + Fixed updating database when deleting songs from filesystem devices.
  + Fixed unregistered metatype when listing songs from MTP devices with Qt 6.
  + Fixed using entered password when testing Subsonic settings before pressing save (#879).
  + Fixed downloading Subsonic album covers.
  + Fixed subsonic album covers downloaded several times for each album when MD5 authentication was enabled (#885).
  + Fixed volume going to 100% when pressing volume down with MRPIS2 and global shortcuts (#884).
  + Fixed incorrect rounding when setting volume through MPRIS2 (#894).
  + Fixed delete from disk not showing up in the menu when one or more CUE songs were selected.
  + Fixed possible crashes when switching songs when fading is enabled (#890).
  + Fixed X11 global shortcuts not working unless window was in focus with Qt 6.2 and higher (#893).
  + Fixed scrobbler re-sending scrobbles to fast on error (#898).
  + Enhancements
  + Log Qt version on startup.
  + Added button for deleting existing Subsonic songs (#883).
  + Make collection watcher ignore files with "qt_temp" filename and tmp extension.
  + Require Qt 5.9 or higher.
  + Added scrollbars to edit tag dialog (#888).
  + Added advanced settings for configuring collection watcher.
  + Disable open audio CD menu when compiled without audio CD support.
  + Replaced use of deprecated QMouseEvent constructor as of Qt 6.4.
  + Replaced use of deprecated QCryptographicHash::addData overload as of Qt 6.4.
  + Removed features:
  + Removed broken "nomedia" / "nomusic" file handling.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1646654400">- Increase the disk size needed to build strawberry on PowerPC.
- Remove the unneeded qt6-network-tls requirement.
  libQt6Network6 already requires the plugin.</changelog>
  <changelog author="Jonas Kvinge &lt;jonaski@opensuse.org&gt;" date="1648123200">- Update to version 1.0.3
  + Bugfixes:
  + Remove slash and backslash from filenames when saving album covers using album directory cover filenames (#903).
  + Remove playlist file-extensions from accepted audio file extensions (#909).
  + Fixed Qobuz requests only receiving the first 50 albums (#922).
  + New features
  + Added support for bs2b (Improved headphone listening of stereo audio records using Bauer stereophonic-to-binaural DSP) (#249).</changelog>
  <changelog author="Jonas Kvinge &lt;jonaski@opensuse.org&gt;" date="1649592000">- Update to version 1.0.4
  + Bugfixes:
  + Fixed use-after-free memory in ALSA PCM device finder.
  + Translate global shortcuts.
  + Enhancement:
  + Added save all playlists action.
  + Other:
  + Removed use of custom font in context.</changelog>
  <changelog author="Jonas Kvinge &lt;jonaski@opensuse.org&gt;" date="1654862400">- Update to version 1.0.5
  + Bugfixes:
  + Fixed smart playlist filetype search.
  + Fixed Radio Paradise URLs to use HTTPS instead of HTTP.
  + Fixed horizontal scrolling not affecting currently playing track (#952).
  + Fixed keep running in the background when window is closed with Wayland (#964).
  + Fixed percent-encoding of URLs when loading and saving XSPF playlists (#821).
  + Fixed fancy tabbar context menu showing on right clicks outside of tabbar when a song is playing.
  + Fixed possible duplicating songs in the database when moving songs to the collection using the organize feature.
  + Enhancements:
  + Show more details in error dialog on GStreamer errors (#958).
  + Allow setting blur amount of playlist background image up to 100px (#939).
  + Include 128x128 icon sizes (#954).
  + Show right click copy context menu in context view on top text and lyrics (#965).
  + Improve fading between album covers in context view.
  + Added option for overwriting database playcounts in collection settings (#962).
  + Added option for disabling bar on currently playing track (#972).</changelog>
</package>
<package pkgid="8ad92793c139b7e184867f9b204b866266900a694f62b00e8e7568077c7d2d57" name="strawberry" arch="aarch64">
  <version epoch="0" ver="1.0.7" rel="bp154.2.6.4"/>
  <changelog author="Jonas Kvinge &lt;jonas@jkvinge.net&gt;" date="1597492800">- Update to version 0.7.2:
  * Bugfixes:
  + Fixed installation directory for translations.
  + Fixed collection sorting for non-ASCII characters.
  + Fixed closing connected devices on exit.</changelog>
  <changelog author="Jonas Kvinge &lt;jonas@jkvinge.net&gt;" date="1602244800">- Update to version 0.8.1:
  * Bugfixes:
  + Fixed engine selection in backend settings with Qt 6.
  + Fixed pixelated playlist source icon for currently playing song.
  + Fixed crash when deleting queued songs from playlist.
  + Fixed situations where songs could disappear or be shown multiple times with certain collection groupings.
  + Fixed initial sizes of playlist header columns.
  + Fixed Strawberry preventing logout.
  + Fixed incorrectly splitting of basename for moodbar and transcoding for filenames with several dots.
  + Fixed certain cases where "playing now" for scrobbler were sent twice.
  + Fixed album cover loaded twice for certain songs causing slugglish playing widget.
  + Fixed playing widget to draw text after album cover is fully shown.
  + Fixed crash when trying to copy a closed playlist to a device.
  + Fixed incorrect song source for CUE songs when added through the collection watcher.
  + Disable use of HTML in system tray tooltip on Cinnamon too.
  + Remove problematic '&amp;' character from OSD messages.
  * Enhancements:
  + Improved playlist autoscrolling.
  + Only allow playlist right click tag editing for editable songs.
  + Read song creation time from subsonic API.
  + Remember manually set compilation status for albums when songs are rescanned.
  + Added icons for edit tag playlist right click menu actions.
  + Maximize dialogs if they are already open when clicked again in the menu.
  + Added support for compilation tag to edit tag dialog.
  + Show song info and album cover in OSD on stop and pause.
  + Reshow OSD on song restart.
  + Always save initial settings.
  + Removed use of deprecated gstreamer "low-percent" (Minimum buffer fill setting).
  + Added buffer low and high watermark settings to backend settings.
  + Make use of newer version of the desktop notifications service when available.
  * New features:
  + Added setting for enabling scrobbling based on song source.
  + Added optional delete from disk in collection and playlist.
  + Added Last.fm import data wizard.
  + Added smart and dynamic playlists.
  + Added song ratings.
  + Added Qobuz streaming support.
  + Added Subsonic server side scrobbling support.
  + Load thumbnails from iPods to show under device collection.</changelog>
  <changelog author="Jonas Kvinge &lt;jonas@jkvinge.net&gt;" date="1602590400">- Update to version 0.8.2:
  * Bugfixes:
  + Fixed broken transition to next song for CUE files with certain audio formats (regression since version 0.6.13).
  + Fixed all collection divider keys showing on top with some language collate settings (regression in version 0.8.1).
  + Fixed SQL querying songs by song ID when song ID is a string.
  + Fixed saving album covers for LMS Subsonic servers.
  + Fixed reading song creation dates with LMS Subsonic servers.
  + Fixed saving initial settings.
  + Removed use of HTML in system tray icon tooltip for all desktop environments instead of just KDE and Cinnamon.</changelog>
  <changelog author="Jonas Kvinge &lt;jonas@jkvinge.net&gt;" date="1603454400">- Update to version 0.8.3:
  + Fixed updating playing widget song details in small cover mode.
  + Fixed file extension when transcoding songs.
  + Fixed updating album cover to collection in edit tag dialog when pressing save.
  + Fixed songs with empty artist in collection.
  + Fixed possible crashes with stream discovery.
  + Fixed setting engine state to null.
  + Fixed tagreader crash with empty APE tags.
  + Fixed a gstreamer memory leak.</changelog>
  <changelog author="Jonas Kvinge &lt;jonas@jkvinge.net&gt;" date="1605355200">- Update to version 0.8.4:
  * Bugfixes:
  + Fix preventing session logout when window is maxmimized.
  + Fix empty space in organize window when copying songs/playlists to devices.
  + Fix crash when opening about dialog in a wayland session.
  + Fix stretched fancy/side tabbar style issue with adwaita style (Fedora/Gnome).
  + Fix centering star icon on playlist tabbar.
  + Fix network proxy settings for streaming.
  + Fix copy URL to clipboard to handle non-ASCII characters.
  + Fix HiDPI scaling for glow animation and drag over playlist.
  + Fix smart playlist search by filename.
  + Fix single letter collection nodes showing before dividers.
  * Enhancements:
  + Add support for native global shortcuts on KDE.
  + Add track progress in system tray icon as an option.
  + Only strip problematic characters in suggested filename when saving a playlist to file.
  + Change star/unstar playlist to doubleclick instead of singleclick.
  + Don't edit playlist name on doubleclick in playlists view.
  + Make context view top label text selectable.
  + Add setting to change Qt style.
  + Clear ID3v3 tags that are empty, and clear ID3v1 tags when setting ID3v3 tags.
  + Remove remaining uses of QTextCodec.
  + Remove Core5Compat dependency.</changelog>
  <changelog author="Jonas Kvinge &lt;jonas@jkvinge.net&gt;" date="1608379200">- Update to version 0.8.5:
  * Bugfixes:
  + Fix return type of SmartPlaylistQueryWizardPlugin::type().
  + Fix comparison between QChar and integer to use QChar::unicode().
  + Fix return type of qHash with Qt 6 to use size_t instead of uint.
  + Fix tag edit dialog save process sometimes stuck.
  + Fix repeat and shuffle buttons greyed out when a dynamic playlist is open.
  + Fix CUE parser handling of values with empty quotes.
  + Fix broken year and disc collection groupings with CUE songs.
  + Fix HTML escaping showing up in OSD notifications when using custom text.
  * Enhancements:
  + Add Swedish translation.
  + Made Qt X11Extras and WinExtras modules optional.
  + Save and restore geometry in edit tag dialog.
  + Add command line option to play a playlist based on name.
  + Change double-click behaviour in cover manager to open fullsize cover.</changelog>
  <changelog author="Jonas Kvinge &lt;jonaski@opensuse.org&gt;" date="1608724800">- Use cmake_build macro
- Use Qt 6 on tumbleweed</changelog>
  <changelog author="Jonas Kvinge &lt;jonaski@opensuse.org&gt;" date="1615636800">- Update to version 0.9.1:
  + Bugfixes:
  + Fix duplicating songs in the DB when organizing songs between 2 different collection directories.
  + Fix overwriting existing newer last played when importing last played from last.fm.
  + Fix memory leak on song change when moodbar is disabled.
  + Fix playlist filter search for text with spaces with Qt 6.
  + Fix 'Except between tracks on the same album' backend fade option always greyed out.
  + Fix read and save vorbis comment grouping tag.
  + Fix QAtomicInteger compile error on armv.
  + Fix compile error with protobuf 3.15.0 and newer.
  + Fix possible tagreader (messagereply) crashes.
  + Fix save album cover when album directory and no overwrite is used for saving covers.
  + Fix right click save cover action when album has embedded cover.
  + Fix temporary art saved to /tmp.
  + Fix playlist bitrate sometimes stuck when changing track to previous.
  + Enhancements:
  + Improve Musixmatch cover and lyrics search.
  + Decode any HTML entities in some rare cases they appear in the retrieved lyrics from the API's.
  + Use mimetype instead of description from stream metadata by default when updating song filetype.
  + Set limits for collection pixmap cache based on size units.
  + Convert all signal/slot connections to new Qt 5/6 syntax.
  + Improve album cover management.
  + Add right click actions to clear set cover, and option delete covers.
  + Show artist and album underneath the albums in the cover manager when all Artists is selected.
  + Disable unavailable right click cover actions.
  + Remove 3rdparty TagLib now that TagLib 1.12 is available.
  + New features:
  + Add option and support for saving embedded covers for FLAC, Ogg Vorbis, MP3 and MP4/AAC.
- Remove use of deprecated USE_SYSTEM_TAGLIB CMake option.</changelog>
  <changelog author="Jonas Kvinge &lt;jonaski@opensuse.org&gt;" date="1616673600">- Update to version 0.9.2:
  +  Fix marking songs available.
  +  Fix crash when transcoding music, or copying music to devices with transcoding.
  +  Fix copying album covers to iPod.
  +  Fix playlist tabbar close and save right click actions.
  +  Fix slow opening of cover manager.</changelog>
  <changelog author="Jonas Kvinge &lt;jonaski@opensuse.org&gt;" date="1618747200">-Update to version 0.9.3:
  + Bugfixes:
  + Fix "Show in file browser" to work with thunar.
  + Check that the clicked rating position is to the right or left of the rectangle.
  + Fix rescan when collection directory is removed and readded.
  + Enhancements:
  + Allow editing playlist metadata for radio streams.
  + Make CollectionQuery subclass QSqlQuery, avoid copying QSqlQuery.
  + Only enable FTS3 when schema needs upgrading, since FTS5 is used for search.
  + Add setting for configuring the color for the currently playing song.
  + Add setting to turn on OSD Pretty fading.
  + Add commandline option to resize window.</changelog>
  <changelog author="Jonas Kvinge &lt;jonaski@opensuse.org&gt;" date="1634212800">- Update to version 1.0.0
  + Bugfixes:
  + Fix updating temporary metadata when reloading songs outside of the collection.
  + Don't strip off "Live" from song title when sending scrobbles.
  + Fix incorrect use of QFutureWatcher.
  + Fix compile of Utilities::Hmac with Qt 6.2.
  + Fix a memory leak when using right click context menu in internet search.
  + Fix a gstreamer bus leak when adding streams and remote playlists.
  + Fix "Source ID x was not found when attempting to remove it" error.
  + Escape ampersands in playlist tabs.
  + Fix analyzer with S24_32LE audio format.
  + Enhancements:
  + Add replaygain fallback gain setting.
  + Add option to turn off playlist alternating row colors.
  + Make the default tabbbar background color lighter.
  + Remove use of deprecated WinExtras Qt module.
  + Add CMake test for Qt sqlite support.
  + Automatically detect Qt version if BUILD_WITH_QT5 or BUILD_WITH_QT6 is not specified.
  + Correct playlist tabbar favorite tooltip from "click" to "double-click".
  + Remove scroll over icon to change track option since it does not work reliable.
  + Improve resume playback on startup.
  + Re-request stream URL for Tidal and QObuz when resuming playback after pausing for more than 30 seconds.
  + Add Finnish, Ukrainian, Dutch, Japanese, Chinese, Catalan and Portuguese (Brazil).
  + Add support for TagParser (https://github.com/Martchus/tagparser) as an alternative to TagLib.
  + Add Subsonic option to turn off HTTP/2.
  + Fix minor Clang-Tidy and Clazy warnings.
  + Use higher resolution images from last.fm API.
  + Add MD5 token authentication for Subsonic.
  + Use 500 albums per request when receiving albums from Subsonic.
  + Use QX11Application with Qt &gt;= 6.2 for X11 global shortcuts.
  + Allow fading when a ALSA PCM device is selected.
  + Store Tidal MPEG-DASH file in data uri.
  + Use XSPF image elements as manually set artwork.
  + Make error dialog larger.
  + Show error dialog for failed SQL queries.
  + Show error dialog when failing to read or write album covers.
  + Add module music formats (mod, s3m, xm, it) to detected filetypes.
  + Disable gapless playback for module music formats to workaround gstreamer bug.
  + Update directory ID and song path immediately when organizing collection songs.
  + Add right click option to star a playlist in playlist tabs.
  + Use seconds instead of minutes for scrobble submit delay.
  + New features:
  + Add ALSA PCM devices.
  + Add song fingerprinting and tracking.
  + Add support for native global shortcuts on MATE.
  + Add radios view with channels from Radio Paradise and SomaFM.</changelog>
  <changelog author="Jonas Kvinge &lt;jonaski@opensuse.org&gt;" date="1641643200">- Update to version 1.0.1
  + Bugfixes:
  + Fixed collection and internet search filter tool button menu arrow overlap (#796).
  + Fixed stop after this track button with Qt 6 (#795).
  + Fixed not updating the URL when songs were moved on disk when the fingerprinting feature is enabled.
  + Fixed SQL query error for songs with an invalid modification time (#815).
  + Fixed blocky rendering of the currently playing track with high resolution screens (#794).
  + Fixed incorrect playlist column filesize for radio streams.
  + Fixed deleting embedded album cover from Ogg songs.
  + Fixed parsing of Cue tracks with 1-digit minutes (#836).
  + Fixed updating of playlist summary after reloading items when adding songs from files outside of the collection (#848).
  + Fixed always saving metadata when saving playlists for Tidal, Qobuz and Subsonic songs independent of playlist setting (#851).
  + Fixed setting media shortcuts when using kglobalaccel (#849).
  + Fixed parsing of Genius lyrics when they are sometimes received in a different HTML format.
  + Fixed saving MP4 specific tags as UTF-8 (#830).
  + Fixed clearing "manually set" cover when saving album covers embedded from outside of the tag editor (#858).
  + Fixed aborting collection scan when Strawberry exists to avoid hang on exit.
  + Fixed resuming collection scan when adding a new directory after collection scan was aborted.
  + Fixed excluding hidden songs from the collection.
  + Disabled moodbar for CUE songs since they can not be supported properly (#865).
  + Enhancements:
  + Made playlist header column text elided (#801).
  + Added support for reading and writing playcounts and ratings from/to tags.
  + Added support for setting rating using the edit tag dialog.
  + Added setting to enable/disable playlist toolbar (#809).
  + Added component type, content_rating type and releases to AppStream data file (#806).
  + Removed unused "mark as listened" option in organize dialog.
  + Fixed some clazy warnings and narrowing conversions in the source code.
  + Replaced uses of macros in the source code.
  + Added a more user-friendly error message when receiving encrypted streams from Tidal (#824).
  + Added support for port-pattern entered in the device textbox when using Jack as output (#828).
  + Added Spanish (Spain) translation.
  + Added support for more CUE filenames (#835).</changelog>
  <changelog author="Jonas Kvinge &lt;jonaski@opensuse.org&gt;" date="1645358400">- Update to version 1.0.2
  + Bugfixes:
  + Fixed showing menu when clicking icon for collection and internet search tool buttons
  + Fixed ignoring devices with system mounts as defined by GIO (#410).
  + Fixed updating database when deleting songs from filesystem devices.
  + Fixed unregistered metatype when listing songs from MTP devices with Qt 6.
  + Fixed using entered password when testing Subsonic settings before pressing save (#879).
  + Fixed downloading Subsonic album covers.
  + Fixed subsonic album covers downloaded several times for each album when MD5 authentication was enabled (#885).
  + Fixed volume going to 100% when pressing volume down with MRPIS2 and global shortcuts (#884).
  + Fixed incorrect rounding when setting volume through MPRIS2 (#894).
  + Fixed delete from disk not showing up in the menu when one or more CUE songs were selected.
  + Fixed possible crashes when switching songs when fading is enabled (#890).
  + Fixed X11 global shortcuts not working unless window was in focus with Qt 6.2 and higher (#893).
  + Fixed scrobbler re-sending scrobbles to fast on error (#898).
  + Enhancements
  + Log Qt version on startup.
  + Added button for deleting existing Subsonic songs (#883).
  + Make collection watcher ignore files with "qt_temp" filename and tmp extension.
  + Require Qt 5.9 or higher.
  + Added scrollbars to edit tag dialog (#888).
  + Added advanced settings for configuring collection watcher.
  + Disable open audio CD menu when compiled without audio CD support.
  + Replaced use of deprecated QMouseEvent constructor as of Qt 6.4.
  + Replaced use of deprecated QCryptographicHash::addData overload as of Qt 6.4.
  + Removed features:
  + Removed broken "nomedia" / "nomusic" file handling.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1646654400">- Increase the disk size needed to build strawberry on PowerPC.
- Remove the unneeded qt6-network-tls requirement.
  libQt6Network6 already requires the plugin.</changelog>
  <changelog author="Jonas Kvinge &lt;jonaski@opensuse.org&gt;" date="1648123200">- Update to version 1.0.3
  + Bugfixes:
  + Remove slash and backslash from filenames when saving album covers using album directory cover filenames (#903).
  + Remove playlist file-extensions from accepted audio file extensions (#909).
  + Fixed Qobuz requests only receiving the first 50 albums (#922).
  + New features
  + Added support for bs2b (Improved headphone listening of stereo audio records using Bauer stereophonic-to-binaural DSP) (#249).</changelog>
  <changelog author="Jonas Kvinge &lt;jonaski@opensuse.org&gt;" date="1649592000">- Update to version 1.0.4
  + Bugfixes:
  + Fixed use-after-free memory in ALSA PCM device finder.
  + Translate global shortcuts.
  + Enhancement:
  + Added save all playlists action.
  + Other:
  + Removed use of custom font in context.</changelog>
  <changelog author="Jonas Kvinge &lt;jonaski@opensuse.org&gt;" date="1654862400">- Update to version 1.0.5
  + Bugfixes:
  + Fixed smart playlist filetype search.
  + Fixed Radio Paradise URLs to use HTTPS instead of HTTP.
  + Fixed horizontal scrolling not affecting currently playing track (#952).
  + Fixed keep running in the background when window is closed with Wayland (#964).
  + Fixed percent-encoding of URLs when loading and saving XSPF playlists (#821).
  + Fixed fancy tabbar context menu showing on right clicks outside of tabbar when a song is playing.
  + Fixed possible duplicating songs in the database when moving songs to the collection using the organize feature.
  + Enhancements:
  + Show more details in error dialog on GStreamer errors (#958).
  + Allow setting blur amount of playlist background image up to 100px (#939).
  + Include 128x128 icon sizes (#954).
  + Show right click copy context menu in context view on top text and lyrics (#965).
  + Improve fading between album covers in context view.
  + Added option for overwriting database playcounts in collection settings (#962).
  + Added option for disabling bar on currently playing track (#972).</changelog>
  <changelog author="Jonas Kvinge &lt;jonaski@opensuse.org&gt;" date="1658059200">- Update to version 1.0.6
  + Bugfixes:
  + Fixed certain albums not added to playlist in correct track order from search for Tidal and QObuz.
  + Fixed songs not added to playlist in numeric order when added from file view with right click (#977).
  + Fixed "Stop after this track" graying out next track in dynamic mode (#912).
  + Fixed a gstreamer caps leak when transcoding songs.
  + Fixed errors in translation files (#994).
  + Enhancements
  + Add songs to the collection even when they have invalid ctime or mtime.
  + Made ListenBrainz scrobbler respect "Prefer album artist" option (#989).
  + Send track duration, number, player name and version when scrobbling to ListenBrainz (#995).</changelog>
  <changelog author="Jonas Kvinge &lt;jonaski@opensuse.org&gt;" date="1658059201">- Build with Qt 6 on openSUSE Leap 15.4 and higher</changelog>
  <changelog author="Jonas Kvinge &lt;jonaski@opensuse.org&gt;" date="1658750400">- Update to version 1.0.7
  + Fixed checking file extension case-insensitive when loading and saving playlists.
  + Fixed reading and saving rating with TagParser.
  + Added option for selecting file extension when saving all playlists.</changelog>
</package>
<package pkgid="8ace829ce18703c59a00fdc03243aceacfdf726eadc70ad268d3b1720033a989" name="strawberry" arch="ppc64le">
  <version epoch="0" ver="1.0.7" rel="bp154.2.6.4"/>
  <changelog author="Jonas Kvinge &lt;jonas@jkvinge.net&gt;" date="1597492800">- Update to version 0.7.2:
  * Bugfixes:
  + Fixed installation directory for translations.
  + Fixed collection sorting for non-ASCII characters.
  + Fixed closing connected devices on exit.</changelog>
  <changelog author="Jonas Kvinge &lt;jonas@jkvinge.net&gt;" date="1602244800">- Update to version 0.8.1:
  * Bugfixes:
  + Fixed engine selection in backend settings with Qt 6.
  + Fixed pixelated playlist source icon for currently playing song.
  + Fixed crash when deleting queued songs from playlist.
  + Fixed situations where songs could disappear or be shown multiple times with certain collection groupings.
  + Fixed initial sizes of playlist header columns.
  + Fixed Strawberry preventing logout.
  + Fixed incorrectly splitting of basename for moodbar and transcoding for filenames with several dots.
  + Fixed certain cases where "playing now" for scrobbler were sent twice.
  + Fixed album cover loaded twice for certain songs causing slugglish playing widget.
  + Fixed playing widget to draw text after album cover is fully shown.
  + Fixed crash when trying to copy a closed playlist to a device.
  + Fixed incorrect song source for CUE songs when added through the collection watcher.
  + Disable use of HTML in system tray tooltip on Cinnamon too.
  + Remove problematic '&amp;' character from OSD messages.
  * Enhancements:
  + Improved playlist autoscrolling.
  + Only allow playlist right click tag editing for editable songs.
  + Read song creation time from subsonic API.
  + Remember manually set compilation status for albums when songs are rescanned.
  + Added icons for edit tag playlist right click menu actions.
  + Maximize dialogs if they are already open when clicked again in the menu.
  + Added support for compilation tag to edit tag dialog.
  + Show song info and album cover in OSD on stop and pause.
  + Reshow OSD on song restart.
  + Always save initial settings.
  + Removed use of deprecated gstreamer "low-percent" (Minimum buffer fill setting).
  + Added buffer low and high watermark settings to backend settings.
  + Make use of newer version of the desktop notifications service when available.
  * New features:
  + Added setting for enabling scrobbling based on song source.
  + Added optional delete from disk in collection and playlist.
  + Added Last.fm import data wizard.
  + Added smart and dynamic playlists.
  + Added song ratings.
  + Added Qobuz streaming support.
  + Added Subsonic server side scrobbling support.
  + Load thumbnails from iPods to show under device collection.</changelog>
  <changelog author="Jonas Kvinge &lt;jonas@jkvinge.net&gt;" date="1602590400">- Update to version 0.8.2:
  * Bugfixes:
  + Fixed broken transition to next song for CUE files with certain audio formats (regression since version 0.6.13).
  + Fixed all collection divider keys showing on top with some language collate settings (regression in version 0.8.1).
  + Fixed SQL querying songs by song ID when song ID is a string.
  + Fixed saving album covers for LMS Subsonic servers.
  + Fixed reading song creation dates with LMS Subsonic servers.
  + Fixed saving initial settings.
  + Removed use of HTML in system tray icon tooltip for all desktop environments instead of just KDE and Cinnamon.</changelog>
  <changelog author="Jonas Kvinge &lt;jonas@jkvinge.net&gt;" date="1603454400">- Update to version 0.8.3:
  + Fixed updating playing widget song details in small cover mode.
  + Fixed file extension when transcoding songs.
  + Fixed updating album cover to collection in edit tag dialog when pressing save.
  + Fixed songs with empty artist in collection.
  + Fixed possible crashes with stream discovery.
  + Fixed setting engine state to null.
  + Fixed tagreader crash with empty APE tags.
  + Fixed a gstreamer memory leak.</changelog>
  <changelog author="Jonas Kvinge &lt;jonas@jkvinge.net&gt;" date="1605355200">- Update to version 0.8.4:
  * Bugfixes:
  + Fix preventing session logout when window is maxmimized.
  + Fix empty space in organize window when copying songs/playlists to devices.
  + Fix crash when opening about dialog in a wayland session.
  + Fix stretched fancy/side tabbar style issue with adwaita style (Fedora/Gnome).
  + Fix centering star icon on playlist tabbar.
  + Fix network proxy settings for streaming.
  + Fix copy URL to clipboard to handle non-ASCII characters.
  + Fix HiDPI scaling for glow animation and drag over playlist.
  + Fix smart playlist search by filename.
  + Fix single letter collection nodes showing before dividers.
  * Enhancements:
  + Add support for native global shortcuts on KDE.
  + Add track progress in system tray icon as an option.
  + Only strip problematic characters in suggested filename when saving a playlist to file.
  + Change star/unstar playlist to doubleclick instead of singleclick.
  + Don't edit playlist name on doubleclick in playlists view.
  + Make context view top label text selectable.
  + Add setting to change Qt style.
  + Clear ID3v3 tags that are empty, and clear ID3v1 tags when setting ID3v3 tags.
  + Remove remaining uses of QTextCodec.
  + Remove Core5Compat dependency.</changelog>
  <changelog author="Jonas Kvinge &lt;jonas@jkvinge.net&gt;" date="1608379200">- Update to version 0.8.5:
  * Bugfixes:
  + Fix return type of SmartPlaylistQueryWizardPlugin::type().
  + Fix comparison between QChar and integer to use QChar::unicode().
  + Fix return type of qHash with Qt 6 to use size_t instead of uint.
  + Fix tag edit dialog save process sometimes stuck.
  + Fix repeat and shuffle buttons greyed out when a dynamic playlist is open.
  + Fix CUE parser handling of values with empty quotes.
  + Fix broken year and disc collection groupings with CUE songs.
  + Fix HTML escaping showing up in OSD notifications when using custom text.
  * Enhancements:
  + Add Swedish translation.
  + Made Qt X11Extras and WinExtras modules optional.
  + Save and restore geometry in edit tag dialog.
  + Add command line option to play a playlist based on name.
  + Change double-click behaviour in cover manager to open fullsize cover.</changelog>
  <changelog author="Jonas Kvinge &lt;jonaski@opensuse.org&gt;" date="1608724800">- Use cmake_build macro
- Use Qt 6 on tumbleweed</changelog>
  <changelog author="Jonas Kvinge &lt;jonaski@opensuse.org&gt;" date="1615636800">- Update to version 0.9.1:
  + Bugfixes:
  + Fix duplicating songs in the DB when organizing songs between 2 different collection directories.
  + Fix overwriting existing newer last played when importing last played from last.fm.
  + Fix memory leak on song change when moodbar is disabled.
  + Fix playlist filter search for text with spaces with Qt 6.
  + Fix 'Except between tracks on the same album' backend fade option always greyed out.
  + Fix read and save vorbis comment grouping tag.
  + Fix QAtomicInteger compile error on armv.
  + Fix compile error with protobuf 3.15.0 and newer.
  + Fix possible tagreader (messagereply) crashes.
  + Fix save album cover when album directory and no overwrite is used for saving covers.
  + Fix right click save cover action when album has embedded cover.
  + Fix temporary art saved to /tmp.
  + Fix playlist bitrate sometimes stuck when changing track to previous.
  + Enhancements:
  + Improve Musixmatch cover and lyrics search.
  + Decode any HTML entities in some rare cases they appear in the retrieved lyrics from the API's.
  + Use mimetype instead of description from stream metadata by default when updating song filetype.
  + Set limits for collection pixmap cache based on size units.
  + Convert all signal/slot connections to new Qt 5/6 syntax.
  + Improve album cover management.
  + Add right click actions to clear set cover, and option delete covers.
  + Show artist and album underneath the albums in the cover manager when all Artists is selected.
  + Disable unavailable right click cover actions.
  + Remove 3rdparty TagLib now that TagLib 1.12 is available.
  + New features:
  + Add option and support for saving embedded covers for FLAC, Ogg Vorbis, MP3 and MP4/AAC.
- Remove use of deprecated USE_SYSTEM_TAGLIB CMake option.</changelog>
  <changelog author="Jonas Kvinge &lt;jonaski@opensuse.org&gt;" date="1616673600">- Update to version 0.9.2:
  +  Fix marking songs available.
  +  Fix crash when transcoding music, or copying music to devices with transcoding.
  +  Fix copying album covers to iPod.
  +  Fix playlist tabbar close and save right click actions.
  +  Fix slow opening of cover manager.</changelog>
  <changelog author="Jonas Kvinge &lt;jonaski@opensuse.org&gt;" date="1618747200">-Update to version 0.9.3:
  + Bugfixes:
  + Fix "Show in file browser" to work with thunar.
  + Check that the clicked rating position is to the right or left of the rectangle.
  + Fix rescan when collection directory is removed and readded.
  + Enhancements:
  + Allow editing playlist metadata for radio streams.
  + Make CollectionQuery subclass QSqlQuery, avoid copying QSqlQuery.
  + Only enable FTS3 when schema needs upgrading, since FTS5 is used for search.
  + Add setting for configuring the color for the currently playing song.
  + Add setting to turn on OSD Pretty fading.
  + Add commandline option to resize window.</changelog>
  <changelog author="Jonas Kvinge &lt;jonaski@opensuse.org&gt;" date="1634212800">- Update to version 1.0.0
  + Bugfixes:
  + Fix updating temporary metadata when reloading songs outside of the collection.
  + Don't strip off "Live" from song title when sending scrobbles.
  + Fix incorrect use of QFutureWatcher.
  + Fix compile of Utilities::Hmac with Qt 6.2.
  + Fix a memory leak when using right click context menu in internet search.
  + Fix a gstreamer bus leak when adding streams and remote playlists.
  + Fix "Source ID x was not found when attempting to remove it" error.
  + Escape ampersands in playlist tabs.
  + Fix analyzer with S24_32LE audio format.
  + Enhancements:
  + Add replaygain fallback gain setting.
  + Add option to turn off playlist alternating row colors.
  + Make the default tabbbar background color lighter.
  + Remove use of deprecated WinExtras Qt module.
  + Add CMake test for Qt sqlite support.
  + Automatically detect Qt version if BUILD_WITH_QT5 or BUILD_WITH_QT6 is not specified.
  + Correct playlist tabbar favorite tooltip from "click" to "double-click".
  + Remove scroll over icon to change track option since it does not work reliable.
  + Improve resume playback on startup.
  + Re-request stream URL for Tidal and QObuz when resuming playback after pausing for more than 30 seconds.
  + Add Finnish, Ukrainian, Dutch, Japanese, Chinese, Catalan and Portuguese (Brazil).
  + Add support for TagParser (https://github.com/Martchus/tagparser) as an alternative to TagLib.
  + Add Subsonic option to turn off HTTP/2.
  + Fix minor Clang-Tidy and Clazy warnings.
  + Use higher resolution images from last.fm API.
  + Add MD5 token authentication for Subsonic.
  + Use 500 albums per request when receiving albums from Subsonic.
  + Use QX11Application with Qt &gt;= 6.2 for X11 global shortcuts.
  + Allow fading when a ALSA PCM device is selected.
  + Store Tidal MPEG-DASH file in data uri.
  + Use XSPF image elements as manually set artwork.
  + Make error dialog larger.
  + Show error dialog for failed SQL queries.
  + Show error dialog when failing to read or write album covers.
  + Add module music formats (mod, s3m, xm, it) to detected filetypes.
  + Disable gapless playback for module music formats to workaround gstreamer bug.
  + Update directory ID and song path immediately when organizing collection songs.
  + Add right click option to star a playlist in playlist tabs.
  + Use seconds instead of minutes for scrobble submit delay.
  + New features:
  + Add ALSA PCM devices.
  + Add song fingerprinting and tracking.
  + Add support for native global shortcuts on MATE.
  + Add radios view with channels from Radio Paradise and SomaFM.</changelog>
  <changelog author="Jonas Kvinge &lt;jonaski@opensuse.org&gt;" date="1641643200">- Update to version 1.0.1
  + Bugfixes:
  + Fixed collection and internet search filter tool button menu arrow overlap (#796).
  + Fixed stop after this track button with Qt 6 (#795).
  + Fixed not updating the URL when songs were moved on disk when the fingerprinting feature is enabled.
  + Fixed SQL query error for songs with an invalid modification time (#815).
  + Fixed blocky rendering of the currently playing track with high resolution screens (#794).
  + Fixed incorrect playlist column filesize for radio streams.
  + Fixed deleting embedded album cover from Ogg songs.
  + Fixed parsing of Cue tracks with 1-digit minutes (#836).
  + Fixed updating of playlist summary after reloading items when adding songs from files outside of the collection (#848).
  + Fixed always saving metadata when saving playlists for Tidal, Qobuz and Subsonic songs independent of playlist setting (#851).
  + Fixed setting media shortcuts when using kglobalaccel (#849).
  + Fixed parsing of Genius lyrics when they are sometimes received in a different HTML format.
  + Fixed saving MP4 specific tags as UTF-8 (#830).
  + Fixed clearing "manually set" cover when saving album covers embedded from outside of the tag editor (#858).
  + Fixed aborting collection scan when Strawberry exists to avoid hang on exit.
  + Fixed resuming collection scan when adding a new directory after collection scan was aborted.
  + Fixed excluding hidden songs from the collection.
  + Disabled moodbar for CUE songs since they can not be supported properly (#865).
  + Enhancements:
  + Made playlist header column text elided (#801).
  + Added support for reading and writing playcounts and ratings from/to tags.
  + Added support for setting rating using the edit tag dialog.
  + Added setting to enable/disable playlist toolbar (#809).
  + Added component type, content_rating type and releases to AppStream data file (#806).
  + Removed unused "mark as listened" option in organize dialog.
  + Fixed some clazy warnings and narrowing conversions in the source code.
  + Replaced uses of macros in the source code.
  + Added a more user-friendly error message when receiving encrypted streams from Tidal (#824).
  + Added support for port-pattern entered in the device textbox when using Jack as output (#828).
  + Added Spanish (Spain) translation.
  + Added support for more CUE filenames (#835).</changelog>
  <changelog author="Jonas Kvinge &lt;jonaski@opensuse.org&gt;" date="1645358400">- Update to version 1.0.2
  + Bugfixes:
  + Fixed showing menu when clicking icon for collection and internet search tool buttons
  + Fixed ignoring devices with system mounts as defined by GIO (#410).
  + Fixed updating database when deleting songs from filesystem devices.
  + Fixed unregistered metatype when listing songs from MTP devices with Qt 6.
  + Fixed using entered password when testing Subsonic settings before pressing save (#879).
  + Fixed downloading Subsonic album covers.
  + Fixed subsonic album covers downloaded several times for each album when MD5 authentication was enabled (#885).
  + Fixed volume going to 100% when pressing volume down with MRPIS2 and global shortcuts (#884).
  + Fixed incorrect rounding when setting volume through MPRIS2 (#894).
  + Fixed delete from disk not showing up in the menu when one or more CUE songs were selected.
  + Fixed possible crashes when switching songs when fading is enabled (#890).
  + Fixed X11 global shortcuts not working unless window was in focus with Qt 6.2 and higher (#893).
  + Fixed scrobbler re-sending scrobbles to fast on error (#898).
  + Enhancements
  + Log Qt version on startup.
  + Added button for deleting existing Subsonic songs (#883).
  + Make collection watcher ignore files with "qt_temp" filename and tmp extension.
  + Require Qt 5.9 or higher.
  + Added scrollbars to edit tag dialog (#888).
  + Added advanced settings for configuring collection watcher.
  + Disable open audio CD menu when compiled without audio CD support.
  + Replaced use of deprecated QMouseEvent constructor as of Qt 6.4.
  + Replaced use of deprecated QCryptographicHash::addData overload as of Qt 6.4.
  + Removed features:
  + Removed broken "nomedia" / "nomusic" file handling.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1646654400">- Increase the disk size needed to build strawberry on PowerPC.
- Remove the unneeded qt6-network-tls requirement.
  libQt6Network6 already requires the plugin.</changelog>
  <changelog author="Jonas Kvinge &lt;jonaski@opensuse.org&gt;" date="1648123200">- Update to version 1.0.3
  + Bugfixes:
  + Remove slash and backslash from filenames when saving album covers using album directory cover filenames (#903).
  + Remove playlist file-extensions from accepted audio file extensions (#909).
  + Fixed Qobuz requests only receiving the first 50 albums (#922).
  + New features
  + Added support for bs2b (Improved headphone listening of stereo audio records using Bauer stereophonic-to-binaural DSP) (#249).</changelog>
  <changelog author="Jonas Kvinge &lt;jonaski@opensuse.org&gt;" date="1649592000">- Update to version 1.0.4
  + Bugfixes:
  + Fixed use-after-free memory in ALSA PCM device finder.
  + Translate global shortcuts.
  + Enhancement:
  + Added save all playlists action.
  + Other:
  + Removed use of custom font in context.</changelog>
  <changelog author="Jonas Kvinge &lt;jonaski@opensuse.org&gt;" date="1654862400">- Update to version 1.0.5
  + Bugfixes:
  + Fixed smart playlist filetype search.
  + Fixed Radio Paradise URLs to use HTTPS instead of HTTP.
  + Fixed horizontal scrolling not affecting currently playing track (#952).
  + Fixed keep running in the background when window is closed with Wayland (#964).
  + Fixed percent-encoding of URLs when loading and saving XSPF playlists (#821).
  + Fixed fancy tabbar context menu showing on right clicks outside of tabbar when a song is playing.
  + Fixed possible duplicating songs in the database when moving songs to the collection using the organize feature.
  + Enhancements:
  + Show more details in error dialog on GStreamer errors (#958).
  + Allow setting blur amount of playlist background image up to 100px (#939).
  + Include 128x128 icon sizes (#954).
  + Show right click copy context menu in context view on top text and lyrics (#965).
  + Improve fading between album covers in context view.
  + Added option for overwriting database playcounts in collection settings (#962).
  + Added option for disabling bar on currently playing track (#972).</changelog>
  <changelog author="Jonas Kvinge &lt;jonaski@opensuse.org&gt;" date="1658059200">- Update to version 1.0.6
  + Bugfixes:
  + Fixed certain albums not added to playlist in correct track order from search for Tidal and QObuz.
  + Fixed songs not added to playlist in numeric order when added from file view with right click (#977).
  + Fixed "Stop after this track" graying out next track in dynamic mode (#912).
  + Fixed a gstreamer caps leak when transcoding songs.
  + Fixed errors in translation files (#994).
  + Enhancements
  + Add songs to the collection even when they have invalid ctime or mtime.
  + Made ListenBrainz scrobbler respect "Prefer album artist" option (#989).
  + Send track duration, number, player name and version when scrobbling to ListenBrainz (#995).</changelog>
  <changelog author="Jonas Kvinge &lt;jonaski@opensuse.org&gt;" date="1658059201">- Build with Qt 6 on openSUSE Leap 15.4 and higher</changelog>
  <changelog author="Jonas Kvinge &lt;jonaski@opensuse.org&gt;" date="1658750400">- Update to version 1.0.7
  + Fixed checking file extension case-insensitive when loading and saving playlists.
  + Fixed reading and saving rating with TagParser.
  + Added option for selecting file extension when saving all playlists.</changelog>
</package>
<package pkgid="6c0af413ec8cfe323ccace24b99e6768bf2ca3771199fae6bbdbfd569a0c2b91" name="strawberry" arch="src">
  <version epoch="0" ver="1.0.7" rel="bp154.2.6.4"/>
  <changelog author="Jonas Kvinge &lt;jonas@jkvinge.net&gt;" date="1597492800">- Update to version 0.7.2:
  * Bugfixes:
  + Fixed installation directory for translations.
  + Fixed collection sorting for non-ASCII characters.
  + Fixed closing connected devices on exit.</changelog>
  <changelog author="Jonas Kvinge &lt;jonas@jkvinge.net&gt;" date="1602244800">- Update to version 0.8.1:
  * Bugfixes:
  + Fixed engine selection in backend settings with Qt 6.
  + Fixed pixelated playlist source icon for currently playing song.
  + Fixed crash when deleting queued songs from playlist.
  + Fixed situations where songs could disappear or be shown multiple times with certain collection groupings.
  + Fixed initial sizes of playlist header columns.
  + Fixed Strawberry preventing logout.
  + Fixed incorrectly splitting of basename for moodbar and transcoding for filenames with several dots.
  + Fixed certain cases where "playing now" for scrobbler were sent twice.
  + Fixed album cover loaded twice for certain songs causing slugglish playing widget.
  + Fixed playing widget to draw text after album cover is fully shown.
  + Fixed crash when trying to copy a closed playlist to a device.
  + Fixed incorrect song source for CUE songs when added through the collection watcher.
  + Disable use of HTML in system tray tooltip on Cinnamon too.
  + Remove problematic '&amp;' character from OSD messages.
  * Enhancements:
  + Improved playlist autoscrolling.
  + Only allow playlist right click tag editing for editable songs.
  + Read song creation time from subsonic API.
  + Remember manually set compilation status for albums when songs are rescanned.
  + Added icons for edit tag playlist right click menu actions.
  + Maximize dialogs if they are already open when clicked again in the menu.
  + Added support for compilation tag to edit tag dialog.
  + Show song info and album cover in OSD on stop and pause.
  + Reshow OSD on song restart.
  + Always save initial settings.
  + Removed use of deprecated gstreamer "low-percent" (Minimum buffer fill setting).
  + Added buffer low and high watermark settings to backend settings.
  + Make use of newer version of the desktop notifications service when available.
  * New features:
  + Added setting for enabling scrobbling based on song source.
  + Added optional delete from disk in collection and playlist.
  + Added Last.fm import data wizard.
  + Added smart and dynamic playlists.
  + Added song ratings.
  + Added Qobuz streaming support.
  + Added Subsonic server side scrobbling support.
  + Load thumbnails from iPods to show under device collection.</changelog>
  <changelog author="Jonas Kvinge &lt;jonas@jkvinge.net&gt;" date="1602590400">- Update to version 0.8.2:
  * Bugfixes:
  + Fixed broken transition to next song for CUE files with certain audio formats (regression since version 0.6.13).
  + Fixed all collection divider keys showing on top with some language collate settings (regression in version 0.8.1).
  + Fixed SQL querying songs by song ID when song ID is a string.
  + Fixed saving album covers for LMS Subsonic servers.
  + Fixed reading song creation dates with LMS Subsonic servers.
  + Fixed saving initial settings.
  + Removed use of HTML in system tray icon tooltip for all desktop environments instead of just KDE and Cinnamon.</changelog>
  <changelog author="Jonas Kvinge &lt;jonas@jkvinge.net&gt;" date="1603454400">- Update to version 0.8.3:
  + Fixed updating playing widget song details in small cover mode.
  + Fixed file extension when transcoding songs.
  + Fixed updating album cover to collection in edit tag dialog when pressing save.
  + Fixed songs with empty artist in collection.
  + Fixed possible crashes with stream discovery.
  + Fixed setting engine state to null.
  + Fixed tagreader crash with empty APE tags.
  + Fixed a gstreamer memory leak.</changelog>
  <changelog author="Jonas Kvinge &lt;jonas@jkvinge.net&gt;" date="1605355200">- Update to version 0.8.4:
  * Bugfixes:
  + Fix preventing session logout when window is maxmimized.
  + Fix empty space in organize window when copying songs/playlists to devices.
  + Fix crash when opening about dialog in a wayland session.
  + Fix stretched fancy/side tabbar style issue with adwaita style (Fedora/Gnome).
  + Fix centering star icon on playlist tabbar.
  + Fix network proxy settings for streaming.
  + Fix copy URL to clipboard to handle non-ASCII characters.
  + Fix HiDPI scaling for glow animation and drag over playlist.
  + Fix smart playlist search by filename.
  + Fix single letter collection nodes showing before dividers.
  * Enhancements:
  + Add support for native global shortcuts on KDE.
  + Add track progress in system tray icon as an option.
  + Only strip problematic characters in suggested filename when saving a playlist to file.
  + Change star/unstar playlist to doubleclick instead of singleclick.
  + Don't edit playlist name on doubleclick in playlists view.
  + Make context view top label text selectable.
  + Add setting to change Qt style.
  + Clear ID3v3 tags that are empty, and clear ID3v1 tags when setting ID3v3 tags.
  + Remove remaining uses of QTextCodec.
  + Remove Core5Compat dependency.</changelog>
  <changelog author="Jonas Kvinge &lt;jonas@jkvinge.net&gt;" date="1608379200">- Update to version 0.8.5:
  * Bugfixes:
  + Fix return type of SmartPlaylistQueryWizardPlugin::type().
  + Fix comparison between QChar and integer to use QChar::unicode().
  + Fix return type of qHash with Qt 6 to use size_t instead of uint.
  + Fix tag edit dialog save process sometimes stuck.
  + Fix repeat and shuffle buttons greyed out when a dynamic playlist is open.
  + Fix CUE parser handling of values with empty quotes.
  + Fix broken year and disc collection groupings with CUE songs.
  + Fix HTML escaping showing up in OSD notifications when using custom text.
  * Enhancements:
  + Add Swedish translation.
  + Made Qt X11Extras and WinExtras modules optional.
  + Save and restore geometry in edit tag dialog.
  + Add command line option to play a playlist based on name.
  + Change double-click behaviour in cover manager to open fullsize cover.</changelog>
  <changelog author="Jonas Kvinge &lt;jonaski@opensuse.org&gt;" date="1608724800">- Use cmake_build macro
- Use Qt 6 on tumbleweed</changelog>
  <changelog author="Jonas Kvinge &lt;jonaski@opensuse.org&gt;" date="1615636800">- Update to version 0.9.1:
  + Bugfixes:
  + Fix duplicating songs in the DB when organizing songs between 2 different collection directories.
  + Fix overwriting existing newer last played when importing last played from last.fm.
  + Fix memory leak on song change when moodbar is disabled.
  + Fix playlist filter search for text with spaces with Qt 6.
  + Fix 'Except between tracks on the same album' backend fade option always greyed out.
  + Fix read and save vorbis comment grouping tag.
  + Fix QAtomicInteger compile error on armv.
  + Fix compile error with protobuf 3.15.0 and newer.
  + Fix possible tagreader (messagereply) crashes.
  + Fix save album cover when album directory and no overwrite is used for saving covers.
  + Fix right click save cover action when album has embedded cover.
  + Fix temporary art saved to /tmp.
  + Fix playlist bitrate sometimes stuck when changing track to previous.
  + Enhancements:
  + Improve Musixmatch cover and lyrics search.
  + Decode any HTML entities in some rare cases they appear in the retrieved lyrics from the API's.
  + Use mimetype instead of description from stream metadata by default when updating song filetype.
  + Set limits for collection pixmap cache based on size units.
  + Convert all signal/slot connections to new Qt 5/6 syntax.
  + Improve album cover management.
  + Add right click actions to clear set cover, and option delete covers.
  + Show artist and album underneath the albums in the cover manager when all Artists is selected.
  + Disable unavailable right click cover actions.
  + Remove 3rdparty TagLib now that TagLib 1.12 is available.
  + New features:
  + Add option and support for saving embedded covers for FLAC, Ogg Vorbis, MP3 and MP4/AAC.
- Remove use of deprecated USE_SYSTEM_TAGLIB CMake option.</changelog>
  <changelog author="Jonas Kvinge &lt;jonaski@opensuse.org&gt;" date="1616673600">- Update to version 0.9.2:
  +  Fix marking songs available.
  +  Fix crash when transcoding music, or copying music to devices with transcoding.
  +  Fix copying album covers to iPod.
  +  Fix playlist tabbar close and save right click actions.
  +  Fix slow opening of cover manager.</changelog>
  <changelog author="Jonas Kvinge &lt;jonaski@opensuse.org&gt;" date="1618747200">-Update to version 0.9.3:
  + Bugfixes:
  + Fix "Show in file browser" to work with thunar.
  + Check that the clicked rating position is to the right or left of the rectangle.
  + Fix rescan when collection directory is removed and readded.
  + Enhancements:
  + Allow editing playlist metadata for radio streams.
  + Make CollectionQuery subclass QSqlQuery, avoid copying QSqlQuery.
  + Only enable FTS3 when schema needs upgrading, since FTS5 is used for search.
  + Add setting for configuring the color for the currently playing song.
  + Add setting to turn on OSD Pretty fading.
  + Add commandline option to resize window.</changelog>
  <changelog author="Jonas Kvinge &lt;jonaski@opensuse.org&gt;" date="1634212800">- Update to version 1.0.0
  + Bugfixes:
  + Fix updating temporary metadata when reloading songs outside of the collection.
  + Don't strip off "Live" from song title when sending scrobbles.
  + Fix incorrect use of QFutureWatcher.
  + Fix compile of Utilities::Hmac with Qt 6.2.
  + Fix a memory leak when using right click context menu in internet search.
  + Fix a gstreamer bus leak when adding streams and remote playlists.
  + Fix "Source ID x was not found when attempting to remove it" error.
  + Escape ampersands in playlist tabs.
  + Fix analyzer with S24_32LE audio format.
  + Enhancements:
  + Add replaygain fallback gain setting.
  + Add option to turn off playlist alternating row colors.
  + Make the default tabbbar background color lighter.
  + Remove use of deprecated WinExtras Qt module.
  + Add CMake test for Qt sqlite support.
  + Automatically detect Qt version if BUILD_WITH_QT5 or BUILD_WITH_QT6 is not specified.
  + Correct playlist tabbar favorite tooltip from "click" to "double-click".
  + Remove scroll over icon to change track option since it does not work reliable.
  + Improve resume playback on startup.
  + Re-request stream URL for Tidal and QObuz when resuming playback after pausing for more than 30 seconds.
  + Add Finnish, Ukrainian, Dutch, Japanese, Chinese, Catalan and Portuguese (Brazil).
  + Add support for TagParser (https://github.com/Martchus/tagparser) as an alternative to TagLib.
  + Add Subsonic option to turn off HTTP/2.
  + Fix minor Clang-Tidy and Clazy warnings.
  + Use higher resolution images from last.fm API.
  + Add MD5 token authentication for Subsonic.
  + Use 500 albums per request when receiving albums from Subsonic.
  + Use QX11Application with Qt &gt;= 6.2 for X11 global shortcuts.
  + Allow fading when a ALSA PCM device is selected.
  + Store Tidal MPEG-DASH file in data uri.
  + Use XSPF image elements as manually set artwork.
  + Make error dialog larger.
  + Show error dialog for failed SQL queries.
  + Show error dialog when failing to read or write album covers.
  + Add module music formats (mod, s3m, xm, it) to detected filetypes.
  + Disable gapless playback for module music formats to workaround gstreamer bug.
  + Update directory ID and song path immediately when organizing collection songs.
  + Add right click option to star a playlist in playlist tabs.
  + Use seconds instead of minutes for scrobble submit delay.
  + New features:
  + Add ALSA PCM devices.
  + Add song fingerprinting and tracking.
  + Add support for native global shortcuts on MATE.
  + Add radios view with channels from Radio Paradise and SomaFM.</changelog>
  <changelog author="Jonas Kvinge &lt;jonaski@opensuse.org&gt;" date="1641643200">- Update to version 1.0.1
  + Bugfixes:
  + Fixed collection and internet search filter tool button menu arrow overlap (#796).
  + Fixed stop after this track button with Qt 6 (#795).
  + Fixed not updating the URL when songs were moved on disk when the fingerprinting feature is enabled.
  + Fixed SQL query error for songs with an invalid modification time (#815).
  + Fixed blocky rendering of the currently playing track with high resolution screens (#794).
  + Fixed incorrect playlist column filesize for radio streams.
  + Fixed deleting embedded album cover from Ogg songs.
  + Fixed parsing of Cue tracks with 1-digit minutes (#836).
  + Fixed updating of playlist summary after reloading items when adding songs from files outside of the collection (#848).
  + Fixed always saving metadata when saving playlists for Tidal, Qobuz and Subsonic songs independent of playlist setting (#851).
  + Fixed setting media shortcuts when using kglobalaccel (#849).
  + Fixed parsing of Genius lyrics when they are sometimes received in a different HTML format.
  + Fixed saving MP4 specific tags as UTF-8 (#830).
  + Fixed clearing "manually set" cover when saving album covers embedded from outside of the tag editor (#858).
  + Fixed aborting collection scan when Strawberry exists to avoid hang on exit.
  + Fixed resuming collection scan when adding a new directory after collection scan was aborted.
  + Fixed excluding hidden songs from the collection.
  + Disabled moodbar for CUE songs since they can not be supported properly (#865).
  + Enhancements:
  + Made playlist header column text elided (#801).
  + Added support for reading and writing playcounts and ratings from/to tags.
  + Added support for setting rating using the edit tag dialog.
  + Added setting to enable/disable playlist toolbar (#809).
  + Added component type, content_rating type and releases to AppStream data file (#806).
  + Removed unused "mark as listened" option in organize dialog.
  + Fixed some clazy warnings and narrowing conversions in the source code.
  + Replaced uses of macros in the source code.
  + Added a more user-friendly error message when receiving encrypted streams from Tidal (#824).
  + Added support for port-pattern entered in the device textbox when using Jack as output (#828).
  + Added Spanish (Spain) translation.
  + Added support for more CUE filenames (#835).</changelog>
  <changelog author="Jonas Kvinge &lt;jonaski@opensuse.org&gt;" date="1645358400">- Update to version 1.0.2
  + Bugfixes:
  + Fixed showing menu when clicking icon for collection and internet search tool buttons
  + Fixed ignoring devices with system mounts as defined by GIO (#410).
  + Fixed updating database when deleting songs from filesystem devices.
  + Fixed unregistered metatype when listing songs from MTP devices with Qt 6.
  + Fixed using entered password when testing Subsonic settings before pressing save (#879).
  + Fixed downloading Subsonic album covers.
  + Fixed subsonic album covers downloaded several times for each album when MD5 authentication was enabled (#885).
  + Fixed volume going to 100% when pressing volume down with MRPIS2 and global shortcuts (#884).
  + Fixed incorrect rounding when setting volume through MPRIS2 (#894).
  + Fixed delete from disk not showing up in the menu when one or more CUE songs were selected.
  + Fixed possible crashes when switching songs when fading is enabled (#890).
  + Fixed X11 global shortcuts not working unless window was in focus with Qt 6.2 and higher (#893).
  + Fixed scrobbler re-sending scrobbles to fast on error (#898).
  + Enhancements
  + Log Qt version on startup.
  + Added button for deleting existing Subsonic songs (#883).
  + Make collection watcher ignore files with "qt_temp" filename and tmp extension.
  + Require Qt 5.9 or higher.
  + Added scrollbars to edit tag dialog (#888).
  + Added advanced settings for configuring collection watcher.
  + Disable open audio CD menu when compiled without audio CD support.
  + Replaced use of deprecated QMouseEvent constructor as of Qt 6.4.
  + Replaced use of deprecated QCryptographicHash::addData overload as of Qt 6.4.
  + Removed features:
  + Removed broken "nomedia" / "nomusic" file handling.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1646654400">- Increase the disk size needed to build strawberry on PowerPC.
- Remove the unneeded qt6-network-tls requirement.
  libQt6Network6 already requires the plugin.</changelog>
  <changelog author="Jonas Kvinge &lt;jonaski@opensuse.org&gt;" date="1648123200">- Update to version 1.0.3
  + Bugfixes:
  + Remove slash and backslash from filenames when saving album covers using album directory cover filenames (#903).
  + Remove playlist file-extensions from accepted audio file extensions (#909).
  + Fixed Qobuz requests only receiving the first 50 albums (#922).
  + New features
  + Added support for bs2b (Improved headphone listening of stereo audio records using Bauer stereophonic-to-binaural DSP) (#249).</changelog>
  <changelog author="Jonas Kvinge &lt;jonaski@opensuse.org&gt;" date="1649592000">- Update to version 1.0.4
  + Bugfixes:
  + Fixed use-after-free memory in ALSA PCM device finder.
  + Translate global shortcuts.
  + Enhancement:
  + Added save all playlists action.
  + Other:
  + Removed use of custom font in context.</changelog>
  <changelog author="Jonas Kvinge &lt;jonaski@opensuse.org&gt;" date="1654862400">- Update to version 1.0.5
  + Bugfixes:
  + Fixed smart playlist filetype search.
  + Fixed Radio Paradise URLs to use HTTPS instead of HTTP.
  + Fixed horizontal scrolling not affecting currently playing track (#952).
  + Fixed keep running in the background when window is closed with Wayland (#964).
  + Fixed percent-encoding of URLs when loading and saving XSPF playlists (#821).
  + Fixed fancy tabbar context menu showing on right clicks outside of tabbar when a song is playing.
  + Fixed possible duplicating songs in the database when moving songs to the collection using the organize feature.
  + Enhancements:
  + Show more details in error dialog on GStreamer errors (#958).
  + Allow setting blur amount of playlist background image up to 100px (#939).
  + Include 128x128 icon sizes (#954).
  + Show right click copy context menu in context view on top text and lyrics (#965).
  + Improve fading between album covers in context view.
  + Added option for overwriting database playcounts in collection settings (#962).
  + Added option for disabling bar on currently playing track (#972).</changelog>
  <changelog author="Jonas Kvinge &lt;jonaski@opensuse.org&gt;" date="1658059200">- Update to version 1.0.6
  + Bugfixes:
  + Fixed certain albums not added to playlist in correct track order from search for Tidal and QObuz.
  + Fixed songs not added to playlist in numeric order when added from file view with right click (#977).
  + Fixed "Stop after this track" graying out next track in dynamic mode (#912).
  + Fixed a gstreamer caps leak when transcoding songs.
  + Fixed errors in translation files (#994).
  + Enhancements
  + Add songs to the collection even when they have invalid ctime or mtime.
  + Made ListenBrainz scrobbler respect "Prefer album artist" option (#989).
  + Send track duration, number, player name and version when scrobbling to ListenBrainz (#995).</changelog>
  <changelog author="Jonas Kvinge &lt;jonaski@opensuse.org&gt;" date="1658059201">- Build with Qt 6 on openSUSE Leap 15.4 and higher</changelog>
  <changelog author="Jonas Kvinge &lt;jonaski@opensuse.org&gt;" date="1658750400">- Update to version 1.0.7
  + Fixed checking file extension case-insensitive when loading and saving playlists.
  + Fixed reading and saving rating with TagParser.
  + Added option for selecting file extension when saving all playlists.</changelog>
</package>
<package pkgid="8150b195098fead712dbc7dfb288c9e04a8388acb205acabf856e0eb42a12f9d" name="strawberry" arch="x86_64">
  <version epoch="0" ver="1.0.7" rel="bp154.2.6.4"/>
  <changelog author="Jonas Kvinge &lt;jonas@jkvinge.net&gt;" date="1597492800">- Update to version 0.7.2:
  * Bugfixes:
  + Fixed installation directory for translations.
  + Fixed collection sorting for non-ASCII characters.
  + Fixed closing connected devices on exit.</changelog>
  <changelog author="Jonas Kvinge &lt;jonas@jkvinge.net&gt;" date="1602244800">- Update to version 0.8.1:
  * Bugfixes:
  + Fixed engine selection in backend settings with Qt 6.
  + Fixed pixelated playlist source icon for currently playing song.
  + Fixed crash when deleting queued songs from playlist.
  + Fixed situations where songs could disappear or be shown multiple times with certain collection groupings.
  + Fixed initial sizes of playlist header columns.
  + Fixed Strawberry preventing logout.
  + Fixed incorrectly splitting of basename for moodbar and transcoding for filenames with several dots.
  + Fixed certain cases where "playing now" for scrobbler were sent twice.
  + Fixed album cover loaded twice for certain songs causing slugglish playing widget.
  + Fixed playing widget to draw text after album cover is fully shown.
  + Fixed crash when trying to copy a closed playlist to a device.
  + Fixed incorrect song source for CUE songs when added through the collection watcher.
  + Disable use of HTML in system tray tooltip on Cinnamon too.
  + Remove problematic '&amp;' character from OSD messages.
  * Enhancements:
  + Improved playlist autoscrolling.
  + Only allow playlist right click tag editing for editable songs.
  + Read song creation time from subsonic API.
  + Remember manually set compilation status for albums when songs are rescanned.
  + Added icons for edit tag playlist right click menu actions.
  + Maximize dialogs if they are already open when clicked again in the menu.
  + Added support for compilation tag to edit tag dialog.
  + Show song info and album cover in OSD on stop and pause.
  + Reshow OSD on song restart.
  + Always save initial settings.
  + Removed use of deprecated gstreamer "low-percent" (Minimum buffer fill setting).
  + Added buffer low and high watermark settings to backend settings.
  + Make use of newer version of the desktop notifications service when available.
  * New features:
  + Added setting for enabling scrobbling based on song source.
  + Added optional delete from disk in collection and playlist.
  + Added Last.fm import data wizard.
  + Added smart and dynamic playlists.
  + Added song ratings.
  + Added Qobuz streaming support.
  + Added Subsonic server side scrobbling support.
  + Load thumbnails from iPods to show under device collection.</changelog>
  <changelog author="Jonas Kvinge &lt;jonas@jkvinge.net&gt;" date="1602590400">- Update to version 0.8.2:
  * Bugfixes:
  + Fixed broken transition to next song for CUE files with certain audio formats (regression since version 0.6.13).
  + Fixed all collection divider keys showing on top with some language collate settings (regression in version 0.8.1).
  + Fixed SQL querying songs by song ID when song ID is a string.
  + Fixed saving album covers for LMS Subsonic servers.
  + Fixed reading song creation dates with LMS Subsonic servers.
  + Fixed saving initial settings.
  + Removed use of HTML in system tray icon tooltip for all desktop environments instead of just KDE and Cinnamon.</changelog>
  <changelog author="Jonas Kvinge &lt;jonas@jkvinge.net&gt;" date="1603454400">- Update to version 0.8.3:
  + Fixed updating playing widget song details in small cover mode.
  + Fixed file extension when transcoding songs.
  + Fixed updating album cover to collection in edit tag dialog when pressing save.
  + Fixed songs with empty artist in collection.
  + Fixed possible crashes with stream discovery.
  + Fixed setting engine state to null.
  + Fixed tagreader crash with empty APE tags.
  + Fixed a gstreamer memory leak.</changelog>
  <changelog author="Jonas Kvinge &lt;jonas@jkvinge.net&gt;" date="1605355200">- Update to version 0.8.4:
  * Bugfixes:
  + Fix preventing session logout when window is maxmimized.
  + Fix empty space in organize window when copying songs/playlists to devices.
  + Fix crash when opening about dialog in a wayland session.
  + Fix stretched fancy/side tabbar style issue with adwaita style (Fedora/Gnome).
  + Fix centering star icon on playlist tabbar.
  + Fix network proxy settings for streaming.
  + Fix copy URL to clipboard to handle non-ASCII characters.
  + Fix HiDPI scaling for glow animation and drag over playlist.
  + Fix smart playlist search by filename.
  + Fix single letter collection nodes showing before dividers.
  * Enhancements:
  + Add support for native global shortcuts on KDE.
  + Add track progress in system tray icon as an option.
  + Only strip problematic characters in suggested filename when saving a playlist to file.
  + Change star/unstar playlist to doubleclick instead of singleclick.
  + Don't edit playlist name on doubleclick in playlists view.
  + Make context view top label text selectable.
  + Add setting to change Qt style.
  + Clear ID3v3 tags that are empty, and clear ID3v1 tags when setting ID3v3 tags.
  + Remove remaining uses of QTextCodec.
  + Remove Core5Compat dependency.</changelog>
  <changelog author="Jonas Kvinge &lt;jonas@jkvinge.net&gt;" date="1608379200">- Update to version 0.8.5:
  * Bugfixes:
  + Fix return type of SmartPlaylistQueryWizardPlugin::type().
  + Fix comparison between QChar and integer to use QChar::unicode().
  + Fix return type of qHash with Qt 6 to use size_t instead of uint.
  + Fix tag edit dialog save process sometimes stuck.
  + Fix repeat and shuffle buttons greyed out when a dynamic playlist is open.
  + Fix CUE parser handling of values with empty quotes.
  + Fix broken year and disc collection groupings with CUE songs.
  + Fix HTML escaping showing up in OSD notifications when using custom text.
  * Enhancements:
  + Add Swedish translation.
  + Made Qt X11Extras and WinExtras modules optional.
  + Save and restore geometry in edit tag dialog.
  + Add command line option to play a playlist based on name.
  + Change double-click behaviour in cover manager to open fullsize cover.</changelog>
  <changelog author="Jonas Kvinge &lt;jonaski@opensuse.org&gt;" date="1608724800">- Use cmake_build macro
- Use Qt 6 on tumbleweed</changelog>
  <changelog author="Jonas Kvinge &lt;jonaski@opensuse.org&gt;" date="1615636800">- Update to version 0.9.1:
  + Bugfixes:
  + Fix duplicating songs in the DB when organizing songs between 2 different collection directories.
  + Fix overwriting existing newer last played when importing last played from last.fm.
  + Fix memory leak on song change when moodbar is disabled.
  + Fix playlist filter search for text with spaces with Qt 6.
  + Fix 'Except between tracks on the same album' backend fade option always greyed out.
  + Fix read and save vorbis comment grouping tag.
  + Fix QAtomicInteger compile error on armv.
  + Fix compile error with protobuf 3.15.0 and newer.
  + Fix possible tagreader (messagereply) crashes.
  + Fix save album cover when album directory and no overwrite is used for saving covers.
  + Fix right click save cover action when album has embedded cover.
  + Fix temporary art saved to /tmp.
  + Fix playlist bitrate sometimes stuck when changing track to previous.
  + Enhancements:
  + Improve Musixmatch cover and lyrics search.
  + Decode any HTML entities in some rare cases they appear in the retrieved lyrics from the API's.
  + Use mimetype instead of description from stream metadata by default when updating song filetype.
  + Set limits for collection pixmap cache based on size units.
  + Convert all signal/slot connections to new Qt 5/6 syntax.
  + Improve album cover management.
  + Add right click actions to clear set cover, and option delete covers.
  + Show artist and album underneath the albums in the cover manager when all Artists is selected.
  + Disable unavailable right click cover actions.
  + Remove 3rdparty TagLib now that TagLib 1.12 is available.
  + New features:
  + Add option and support for saving embedded covers for FLAC, Ogg Vorbis, MP3 and MP4/AAC.
- Remove use of deprecated USE_SYSTEM_TAGLIB CMake option.</changelog>
  <changelog author="Jonas Kvinge &lt;jonaski@opensuse.org&gt;" date="1616673600">- Update to version 0.9.2:
  +  Fix marking songs available.
  +  Fix crash when transcoding music, or copying music to devices with transcoding.
  +  Fix copying album covers to iPod.
  +  Fix playlist tabbar close and save right click actions.
  +  Fix slow opening of cover manager.</changelog>
  <changelog author="Jonas Kvinge &lt;jonaski@opensuse.org&gt;" date="1618747200">-Update to version 0.9.3:
  + Bugfixes:
  + Fix "Show in file browser" to work with thunar.
  + Check that the clicked rating position is to the right or left of the rectangle.
  + Fix rescan when collection directory is removed and readded.
  + Enhancements:
  + Allow editing playlist metadata for radio streams.
  + Make CollectionQuery subclass QSqlQuery, avoid copying QSqlQuery.
  + Only enable FTS3 when schema needs upgrading, since FTS5 is used for search.
  + Add setting for configuring the color for the currently playing song.
  + Add setting to turn on OSD Pretty fading.
  + Add commandline option to resize window.</changelog>
  <changelog author="Jonas Kvinge &lt;jonaski@opensuse.org&gt;" date="1634212800">- Update to version 1.0.0
  + Bugfixes:
  + Fix updating temporary metadata when reloading songs outside of the collection.
  + Don't strip off "Live" from song title when sending scrobbles.
  + Fix incorrect use of QFutureWatcher.
  + Fix compile of Utilities::Hmac with Qt 6.2.
  + Fix a memory leak when using right click context menu in internet search.
  + Fix a gstreamer bus leak when adding streams and remote playlists.
  + Fix "Source ID x was not found when attempting to remove it" error.
  + Escape ampersands in playlist tabs.
  + Fix analyzer with S24_32LE audio format.
  + Enhancements:
  + Add replaygain fallback gain setting.
  + Add option to turn off playlist alternating row colors.
  + Make the default tabbbar background color lighter.
  + Remove use of deprecated WinExtras Qt module.
  + Add CMake test for Qt sqlite support.
  + Automatically detect Qt version if BUILD_WITH_QT5 or BUILD_WITH_QT6 is not specified.
  + Correct playlist tabbar favorite tooltip from "click" to "double-click".
  + Remove scroll over icon to change track option since it does not work reliable.
  + Improve resume playback on startup.
  + Re-request stream URL for Tidal and QObuz when resuming playback after pausing for more than 30 seconds.
  + Add Finnish, Ukrainian, Dutch, Japanese, Chinese, Catalan and Portuguese (Brazil).
  + Add support for TagParser (https://github.com/Martchus/tagparser) as an alternative to TagLib.
  + Add Subsonic option to turn off HTTP/2.
  + Fix minor Clang-Tidy and Clazy warnings.
  + Use higher resolution images from last.fm API.
  + Add MD5 token authentication for Subsonic.
  + Use 500 albums per request when receiving albums from Subsonic.
  + Use QX11Application with Qt &gt;= 6.2 for X11 global shortcuts.
  + Allow fading when a ALSA PCM device is selected.
  + Store Tidal MPEG-DASH file in data uri.
  + Use XSPF image elements as manually set artwork.
  + Make error dialog larger.
  + Show error dialog for failed SQL queries.
  + Show error dialog when failing to read or write album covers.
  + Add module music formats (mod, s3m, xm, it) to detected filetypes.
  + Disable gapless playback for module music formats to workaround gstreamer bug.
  + Update directory ID and song path immediately when organizing collection songs.
  + Add right click option to star a playlist in playlist tabs.
  + Use seconds instead of minutes for scrobble submit delay.
  + New features:
  + Add ALSA PCM devices.
  + Add song fingerprinting and tracking.
  + Add support for native global shortcuts on MATE.
  + Add radios view with channels from Radio Paradise and SomaFM.</changelog>
  <changelog author="Jonas Kvinge &lt;jonaski@opensuse.org&gt;" date="1641643200">- Update to version 1.0.1
  + Bugfixes:
  + Fixed collection and internet search filter tool button menu arrow overlap (#796).
  + Fixed stop after this track button with Qt 6 (#795).
  + Fixed not updating the URL when songs were moved on disk when the fingerprinting feature is enabled.
  + Fixed SQL query error for songs with an invalid modification time (#815).
  + Fixed blocky rendering of the currently playing track with high resolution screens (#794).
  + Fixed incorrect playlist column filesize for radio streams.
  + Fixed deleting embedded album cover from Ogg songs.
  + Fixed parsing of Cue tracks with 1-digit minutes (#836).
  + Fixed updating of playlist summary after reloading items when adding songs from files outside of the collection (#848).
  + Fixed always saving metadata when saving playlists for Tidal, Qobuz and Subsonic songs independent of playlist setting (#851).
  + Fixed setting media shortcuts when using kglobalaccel (#849).
  + Fixed parsing of Genius lyrics when they are sometimes received in a different HTML format.
  + Fixed saving MP4 specific tags as UTF-8 (#830).
  + Fixed clearing "manually set" cover when saving album covers embedded from outside of the tag editor (#858).
  + Fixed aborting collection scan when Strawberry exists to avoid hang on exit.
  + Fixed resuming collection scan when adding a new directory after collection scan was aborted.
  + Fixed excluding hidden songs from the collection.
  + Disabled moodbar for CUE songs since they can not be supported properly (#865).
  + Enhancements:
  + Made playlist header column text elided (#801).
  + Added support for reading and writing playcounts and ratings from/to tags.
  + Added support for setting rating using the edit tag dialog.
  + Added setting to enable/disable playlist toolbar (#809).
  + Added component type, content_rating type and releases to AppStream data file (#806).
  + Removed unused "mark as listened" option in organize dialog.
  + Fixed some clazy warnings and narrowing conversions in the source code.
  + Replaced uses of macros in the source code.
  + Added a more user-friendly error message when receiving encrypted streams from Tidal (#824).
  + Added support for port-pattern entered in the device textbox when using Jack as output (#828).
  + Added Spanish (Spain) translation.
  + Added support for more CUE filenames (#835).</changelog>
  <changelog author="Jonas Kvinge &lt;jonaski@opensuse.org&gt;" date="1645358400">- Update to version 1.0.2
  + Bugfixes:
  + Fixed showing menu when clicking icon for collection and internet search tool buttons
  + Fixed ignoring devices with system mounts as defined by GIO (#410).
  + Fixed updating database when deleting songs from filesystem devices.
  + Fixed unregistered metatype when listing songs from MTP devices with Qt 6.
  + Fixed using entered password when testing Subsonic settings before pressing save (#879).
  + Fixed downloading Subsonic album covers.
  + Fixed subsonic album covers downloaded several times for each album when MD5 authentication was enabled (#885).
  + Fixed volume going to 100% when pressing volume down with MRPIS2 and global shortcuts (#884).
  + Fixed incorrect rounding when setting volume through MPRIS2 (#894).
  + Fixed delete from disk not showing up in the menu when one or more CUE songs were selected.
  + Fixed possible crashes when switching songs when fading is enabled (#890).
  + Fixed X11 global shortcuts not working unless window was in focus with Qt 6.2 and higher (#893).
  + Fixed scrobbler re-sending scrobbles to fast on error (#898).
  + Enhancements
  + Log Qt version on startup.
  + Added button for deleting existing Subsonic songs (#883).
  + Make collection watcher ignore files with "qt_temp" filename and tmp extension.
  + Require Qt 5.9 or higher.
  + Added scrollbars to edit tag dialog (#888).
  + Added advanced settings for configuring collection watcher.
  + Disable open audio CD menu when compiled without audio CD support.
  + Replaced use of deprecated QMouseEvent constructor as of Qt 6.4.
  + Replaced use of deprecated QCryptographicHash::addData overload as of Qt 6.4.
  + Removed features:
  + Removed broken "nomedia" / "nomusic" file handling.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1646654400">- Increase the disk size needed to build strawberry on PowerPC.
- Remove the unneeded qt6-network-tls requirement.
  libQt6Network6 already requires the plugin.</changelog>
  <changelog author="Jonas Kvinge &lt;jonaski@opensuse.org&gt;" date="1648123200">- Update to version 1.0.3
  + Bugfixes:
  + Remove slash and backslash from filenames when saving album covers using album directory cover filenames (#903).
  + Remove playlist file-extensions from accepted audio file extensions (#909).
  + Fixed Qobuz requests only receiving the first 50 albums (#922).
  + New features
  + Added support for bs2b (Improved headphone listening of stereo audio records using Bauer stereophonic-to-binaural DSP) (#249).</changelog>
  <changelog author="Jonas Kvinge &lt;jonaski@opensuse.org&gt;" date="1649592000">- Update to version 1.0.4
  + Bugfixes:
  + Fixed use-after-free memory in ALSA PCM device finder.
  + Translate global shortcuts.
  + Enhancement:
  + Added save all playlists action.
  + Other:
  + Removed use of custom font in context.</changelog>
  <changelog author="Jonas Kvinge &lt;jonaski@opensuse.org&gt;" date="1654862400">- Update to version 1.0.5
  + Bugfixes:
  + Fixed smart playlist filetype search.
  + Fixed Radio Paradise URLs to use HTTPS instead of HTTP.
  + Fixed horizontal scrolling not affecting currently playing track (#952).
  + Fixed keep running in the background when window is closed with Wayland (#964).
  + Fixed percent-encoding of URLs when loading and saving XSPF playlists (#821).
  + Fixed fancy tabbar context menu showing on right clicks outside of tabbar when a song is playing.
  + Fixed possible duplicating songs in the database when moving songs to the collection using the organize feature.
  + Enhancements:
  + Show more details in error dialog on GStreamer errors (#958).
  + Allow setting blur amount of playlist background image up to 100px (#939).
  + Include 128x128 icon sizes (#954).
  + Show right click copy context menu in context view on top text and lyrics (#965).
  + Improve fading between album covers in context view.
  + Added option for overwriting database playcounts in collection settings (#962).
  + Added option for disabling bar on currently playing track (#972).</changelog>
  <changelog author="Jonas Kvinge &lt;jonaski@opensuse.org&gt;" date="1658059200">- Update to version 1.0.6
  + Bugfixes:
  + Fixed certain albums not added to playlist in correct track order from search for Tidal and QObuz.
  + Fixed songs not added to playlist in numeric order when added from file view with right click (#977).
  + Fixed "Stop after this track" graying out next track in dynamic mode (#912).
  + Fixed a gstreamer caps leak when transcoding songs.
  + Fixed errors in translation files (#994).
  + Enhancements
  + Add songs to the collection even when they have invalid ctime or mtime.
  + Made ListenBrainz scrobbler respect "Prefer album artist" option (#989).
  + Send track duration, number, player name and version when scrobbling to ListenBrainz (#995).</changelog>
  <changelog author="Jonas Kvinge &lt;jonaski@opensuse.org&gt;" date="1658059201">- Build with Qt 6 on openSUSE Leap 15.4 and higher</changelog>
  <changelog author="Jonas Kvinge &lt;jonaski@opensuse.org&gt;" date="1658750400">- Update to version 1.0.7
  + Fixed checking file extension case-insensitive when loading and saving playlists.
  + Fixed reading and saving rating with TagParser.
  + Added option for selecting file extension when saving all playlists.</changelog>
</package>
<package pkgid="be51ef368b617fe8babf24ed800d91df16d9dc4b7a476a8b6794d562ec73cb75" name="susepaste" arch="noarch">
  <version epoch="0" ver="0.6" rel="bp154.3.3.1"/>
  <changelog author="mhrusecky@suse.cz" date="1293883200">- updated to version 0.4
  - adding screenshot pasting script</changelog>
  <changelog author="mhrusecky@suse.cz" date="1293969600">- updated to version 0.4.1
  - fixed screenshot pasting script to cleanup temporaly files</changelog>
  <changelog author="mhrusecky@suse.cz" date="1303387200">- updated to version 0.5
  - support for pasting with key
  - fixed infinite loop on syntax error</changelog>
  <changelog author="mhrusecky@suse.cz" date="1324036800">- minor spec file beautifications</changelog>
  <changelog author="mpluskal@suse.com" date="1511697600">- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1565524800">- updated to version 0.6
  - error out when pasting unreadable file
  - fix one bashism
  - allow to specify protocol</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566907200">- Trim duplicated wording from descriptions.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1585656000">- Add 0001-susepaste-Fix-parsing-of-returned-Location-header.patch:
  fix parsing of location header returned by susepaste.org
  (boo#1166669).</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1638619200">- Add 0002-susepaste-add-image-paste-info.patch: Add info on
  posting an image to susepaste in the man page, (boo#1193400).</changelog>
  <changelog author="Jacob Michalskie &lt;hellcp@opensuse.org&gt;" date="1670846400">- Add 0003-susepaste-use-paste-opensuse.org.patch: Replace
  susepaste.org submission address with paste.opensuse.org</changelog>
</package>
<package pkgid="a8f7f2427ed7b2b5e27d9cccdbaf102fead55e57a06dbd793af268a407a60d70" name="susepaste" arch="src">
  <version epoch="0" ver="0.6" rel="bp154.3.3.1"/>
  <changelog author="mhrusecky@suse.cz" date="1280491200">- packaged first version of the script</changelog>
  <changelog author="mhrusecky@suse.cz" date="1283169600">- adding http://paste.opensuse.org as another output
- adding man page</changelog>
  <changelog author="mhrusecky@suse.cz" date="1291636800">- updated to version 0.3
  - support for commandline option
  - support for pasting images
  - automatic recognition of several file types</changelog>
  <changelog author="mhrusecky@suse.cz" date="1293883200">- updated to version 0.4
  - adding screenshot pasting script</changelog>
  <changelog author="mhrusecky@suse.cz" date="1293969600">- updated to version 0.4.1
  - fixed screenshot pasting script to cleanup temporaly files</changelog>
  <changelog author="mhrusecky@suse.cz" date="1303387200">- updated to version 0.5
  - support for pasting with key
  - fixed infinite loop on syntax error</changelog>
  <changelog author="mhrusecky@suse.cz" date="1324036800">- minor spec file beautifications</changelog>
  <changelog author="mpluskal@suse.com" date="1511697600">- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1565524800">- updated to version 0.6
  - error out when pasting unreadable file
  - fix one bashism
  - allow to specify protocol</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566907200">- Trim duplicated wording from descriptions.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1585656000">- Add 0001-susepaste-Fix-parsing-of-returned-Location-header.patch:
  fix parsing of location header returned by susepaste.org
  (boo#1166669).</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1638619200">- Add 0002-susepaste-add-image-paste-info.patch: Add info on
  posting an image to susepaste in the man page, (boo#1193400).</changelog>
  <changelog author="Jacob Michalskie &lt;hellcp@opensuse.org&gt;" date="1670846400">- Add 0003-susepaste-use-paste-opensuse.org.patch: Replace
  susepaste.org submission address with paste.opensuse.org</changelog>
</package>
<package pkgid="b5da62603d5af0844097076cb4e0c5a455f93c2ec871337ebaf44a60da966751" name="susepaste-screenshot" arch="noarch">
  <version epoch="0" ver="0.6" rel="bp154.3.3.1"/>
  <changelog author="mhrusecky@suse.cz" date="1293883200">- updated to version 0.4
  - adding screenshot pasting script</changelog>
  <changelog author="mhrusecky@suse.cz" date="1293969600">- updated to version 0.4.1
  - fixed screenshot pasting script to cleanup temporaly files</changelog>
  <changelog author="mhrusecky@suse.cz" date="1303387200">- updated to version 0.5
  - support for pasting with key
  - fixed infinite loop on syntax error</changelog>
  <changelog author="mhrusecky@suse.cz" date="1324036800">- minor spec file beautifications</changelog>
  <changelog author="mpluskal@suse.com" date="1511697600">- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1565524800">- updated to version 0.6
  - error out when pasting unreadable file
  - fix one bashism
  - allow to specify protocol</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566907200">- Trim duplicated wording from descriptions.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1585656000">- Add 0001-susepaste-Fix-parsing-of-returned-Location-header.patch:
  fix parsing of location header returned by susepaste.org
  (boo#1166669).</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1638619200">- Add 0002-susepaste-add-image-paste-info.patch: Add info on
  posting an image to susepaste in the man page, (boo#1193400).</changelog>
  <changelog author="Jacob Michalskie &lt;hellcp@opensuse.org&gt;" date="1670846400">- Add 0003-susepaste-use-paste-opensuse.org.patch: Replace
  susepaste.org submission address with paste.opensuse.org</changelog>
</package>
<package pkgid="c32101d733ecb4cb550fd14bf5abcf0a39fdd6d8896d7adecf2770db070793c9" name="sushi" arch="aarch64">
  <version epoch="0" ver="41.2" rel="bp154.2.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1472644800">- Update to version 3.21.91:
  + Make sushi work under Wayland.
  + Fix builddir != srcdir builds.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1488456000">- Update to version 3.23.91:
  + Use correct icon when fullscreen.
  + Use upstream format.js code.
  + Specify GdkX11 import version.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1494072000">- Update to version 3.24.0:
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1524225600">- Update to version 3.28.2:
  + Fix another LibreOffice to PDF conversion regression.
- Changes from version 3.28.1:
  + Fix LibreOffice to PDF conversion regression.
  + Add support for docx/pptx/xlsx MIME types.
- Changes from version 3.28.0:
  + Add support for GIF animations.
  + Use LibreOffice directly instead of unoconv.
  + Prefer LibreOffice from flatpak when installed.
- Drop unoconv BuildRequires and Recommends, following upstream
  changes.
- Replace gobject-introspection-devel with
  pkgconfig(gobject-introspection-1.0) BuildRequires.
- Drop no longer needed post(un) handling of
  glib2_gsettings_schema_post(un) and
  glib2_gsettings_schema_requires macro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1524571200">- Update to version 3.28.3:
  + Fix another LibreOffice to PDF conversion regression (hopefully
    for good this time).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 3.30.0:
  + Fix miscellaneous warnings.
  + Rename service file to match owned bus name.
- Use autosetup and make_build macros.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1546430400">- Update to version 3.31.2:
  + Port to meson build system.
  + Replace some deprecated API.
- Switch to meson build system, add meson BuildRequires and macros.
- Drop intltool BuildRequires, no longer used nor needed.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1552219200">- Update to version 3.32.0:
  + Update DOAP file for GitLab move.
  + Explicitly hide minimize and maximize.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1560859200">- Add sushi-port-to-gtksourceview4.patch: Port to gtksourceview4.
  Following this patch, replace pkgconfig(gtksourceview-3.0) with
  pkgconfig(gtksourceview-4) BuildRequires.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1560945600">- Update to version 3.32.1:
  + Specify GtkSourceView 3.0 import version.
- Rebase sushi-port-to-gtksourceview4.patch, drop part now included
  in tarball.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1568030400">- Update to version 3.33.90:
  + Add a command line launcher.
  + Fix viewer mimetype matching.
  + Load viewers from home directory.
  + Updated translations.
- Changes from version 3.33.4:
  + Add a native LibreofficeKit renderer.
  + Fix translation infrastructure regression.
  + Fix loading album cover art from Amazon.
  + Fix several glitches on HiDpi and fractional scaling displays.
  + Respect placement of close button preference.
  + Fix audio metadata tags retrieval.
  + Only load a single GstTagList copy.
  + Fix displaying audio tag content with markup characters.
  + Add an appdata file.
  + Properly letterbox album cover art.
  + Add a way to report loading errors in the main view.
  + Scale window size with display resolution.
- Changes from version 3.33.3:
  + Rewrite to use GTK directly, drop Clutter dependency.
  + Use GtkSourceView 4.
- Drop sushi-port-to-gtksourceview4.patch: Fixed upstream.
- Add meson BuildRequires and macros.
- Drop pkgconfig(clutter-1.0), pkgconfig(clutter-gst-3.0),
  pkgconfig(clutter-gtk-1.0), pkgconfig(clutter-x11-1.0) and
  pkgconfig(gstreamer-pbutils-1.0) BuildRequires following upstream
  changes.
- Add pkgconfig(epoxy), pkgconfig(gdk-pixbuf-2.0),
  pkgconfig(gio-unix-2.0), pkgconfig(gstreamer-audio-1.0),
  pkgconfig(gstreamer-video-1.0), pkgconfig(gtk+-wayland-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires following upstream
  changes.
- Add sushi-rpmlintrc, filter out needless warning about gir file.
- Drop libsushi-1_0-0 and typelib-1_0-Sushi-1_0 Obsoletes: No
  currently supported version of openSUSE should have these
  installed.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1568116800">- Update to version 3.34.0:
  + Add support for moving Nautilus selection with arrow keys.
  + Add support for parenting the window on Wayland.
  + Use builder-dark style for text/source viewer.
  + Add localization for appdata file.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1603368000">- Update to version 3.38.0:
  + Fix build when Wayland is disabled.
  + Make X11 and Wayland configurable at build time.
  + Sync font-widget with gnome-font-viewer.
  + Fix various meson build issues.
  + Sandbox webkitgtk.
  + Fix crash caused by the lack of getters for viewers'
    properties.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1622808000">- Update to version 3.38.1:
  + Account for scaling factor while estimating window size</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1632225600">- Update to version 41.0:
  + Drop libmusicbrainz dependency (use libsoup directly).
  + Account for scale-factor when estimating window size.
  + Build against webkit2gtk-4.1
  + Disable webkit sandboxing.
  + Updated translations.
- Drop pkgconfig(libmusicbrainz5) BuildRequires: No longer needed.
- Replace pkgconfig(webkit2gtk-4.0) with pkgconfig(webkit2gtk-4.1)
  BuildRequires following upstream changes.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1644753600">- Add typelib\\(LOKDocView\\) global requires exclude: We do not
  want to mandate libreoffice install just for the file preview
  funtion. If libreoffice is installed, the preview in will
  function as expected.
- Following the above, add (typelib(LOKDocView) if libreoffice)
  Requires: Pull in the needed libreoffice glue if libreoffice is
  installed.
- Pass explicit wayland=enabled and X11=enabled to meson, ensure we
  build support for both (we already have dependencies in place).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1648814400">- Update to version 41.1:
  + Enable web process (webkitgtk) sandbox.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1649160000">- Update to version 41.2:
  + Enable web process sandbox (webkitgtk).</changelog>
</package>
<package pkgid="001f4f63de192dd077423260059580020f9a30e70b0523545c1f1edf6587c7a5" name="sushi" arch="i586">
  <version epoch="0" ver="41.2" rel="bp154.2.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1472644800">- Update to version 3.21.91:
  + Make sushi work under Wayland.
  + Fix builddir != srcdir builds.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1488456000">- Update to version 3.23.91:
  + Use correct icon when fullscreen.
  + Use upstream format.js code.
  + Specify GdkX11 import version.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1494072000">- Update to version 3.24.0:
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1524225600">- Update to version 3.28.2:
  + Fix another LibreOffice to PDF conversion regression.
- Changes from version 3.28.1:
  + Fix LibreOffice to PDF conversion regression.
  + Add support for docx/pptx/xlsx MIME types.
- Changes from version 3.28.0:
  + Add support for GIF animations.
  + Use LibreOffice directly instead of unoconv.
  + Prefer LibreOffice from flatpak when installed.
- Drop unoconv BuildRequires and Recommends, following upstream
  changes.
- Replace gobject-introspection-devel with
  pkgconfig(gobject-introspection-1.0) BuildRequires.
- Drop no longer needed post(un) handling of
  glib2_gsettings_schema_post(un) and
  glib2_gsettings_schema_requires macro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1524571200">- Update to version 3.28.3:
  + Fix another LibreOffice to PDF conversion regression (hopefully
    for good this time).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 3.30.0:
  + Fix miscellaneous warnings.
  + Rename service file to match owned bus name.
- Use autosetup and make_build macros.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1546430400">- Update to version 3.31.2:
  + Port to meson build system.
  + Replace some deprecated API.
- Switch to meson build system, add meson BuildRequires and macros.
- Drop intltool BuildRequires, no longer used nor needed.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1552219200">- Update to version 3.32.0:
  + Update DOAP file for GitLab move.
  + Explicitly hide minimize and maximize.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1560859200">- Add sushi-port-to-gtksourceview4.patch: Port to gtksourceview4.
  Following this patch, replace pkgconfig(gtksourceview-3.0) with
  pkgconfig(gtksourceview-4) BuildRequires.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1560945600">- Update to version 3.32.1:
  + Specify GtkSourceView 3.0 import version.
- Rebase sushi-port-to-gtksourceview4.patch, drop part now included
  in tarball.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1568030400">- Update to version 3.33.90:
  + Add a command line launcher.
  + Fix viewer mimetype matching.
  + Load viewers from home directory.
  + Updated translations.
- Changes from version 3.33.4:
  + Add a native LibreofficeKit renderer.
  + Fix translation infrastructure regression.
  + Fix loading album cover art from Amazon.
  + Fix several glitches on HiDpi and fractional scaling displays.
  + Respect placement of close button preference.
  + Fix audio metadata tags retrieval.
  + Only load a single GstTagList copy.
  + Fix displaying audio tag content with markup characters.
  + Add an appdata file.
  + Properly letterbox album cover art.
  + Add a way to report loading errors in the main view.
  + Scale window size with display resolution.
- Changes from version 3.33.3:
  + Rewrite to use GTK directly, drop Clutter dependency.
  + Use GtkSourceView 4.
- Drop sushi-port-to-gtksourceview4.patch: Fixed upstream.
- Add meson BuildRequires and macros.
- Drop pkgconfig(clutter-1.0), pkgconfig(clutter-gst-3.0),
  pkgconfig(clutter-gtk-1.0), pkgconfig(clutter-x11-1.0) and
  pkgconfig(gstreamer-pbutils-1.0) BuildRequires following upstream
  changes.
- Add pkgconfig(epoxy), pkgconfig(gdk-pixbuf-2.0),
  pkgconfig(gio-unix-2.0), pkgconfig(gstreamer-audio-1.0),
  pkgconfig(gstreamer-video-1.0), pkgconfig(gtk+-wayland-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires following upstream
  changes.
- Add sushi-rpmlintrc, filter out needless warning about gir file.
- Drop libsushi-1_0-0 and typelib-1_0-Sushi-1_0 Obsoletes: No
  currently supported version of openSUSE should have these
  installed.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1568116800">- Update to version 3.34.0:
  + Add support for moving Nautilus selection with arrow keys.
  + Add support for parenting the window on Wayland.
  + Use builder-dark style for text/source viewer.
  + Add localization for appdata file.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1603368000">- Update to version 3.38.0:
  + Fix build when Wayland is disabled.
  + Make X11 and Wayland configurable at build time.
  + Sync font-widget with gnome-font-viewer.
  + Fix various meson build issues.
  + Sandbox webkitgtk.
  + Fix crash caused by the lack of getters for viewers'
    properties.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1622808000">- Update to version 3.38.1:
  + Account for scaling factor while estimating window size</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1632225600">- Update to version 41.0:
  + Drop libmusicbrainz dependency (use libsoup directly).
  + Account for scale-factor when estimating window size.
  + Build against webkit2gtk-4.1
  + Disable webkit sandboxing.
  + Updated translations.
- Drop pkgconfig(libmusicbrainz5) BuildRequires: No longer needed.
- Replace pkgconfig(webkit2gtk-4.0) with pkgconfig(webkit2gtk-4.1)
  BuildRequires following upstream changes.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1644753600">- Add typelib\\(LOKDocView\\) global requires exclude: We do not
  want to mandate libreoffice install just for the file preview
  funtion. If libreoffice is installed, the preview in will
  function as expected.
- Following the above, add (typelib(LOKDocView) if libreoffice)
  Requires: Pull in the needed libreoffice glue if libreoffice is
  installed.
- Pass explicit wayland=enabled and X11=enabled to meson, ensure we
  build support for both (we already have dependencies in place).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1648814400">- Update to version 41.1:
  + Enable web process (webkitgtk) sandbox.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1649160000">- Update to version 41.2:
  + Enable web process sandbox (webkitgtk).</changelog>
</package>
<package pkgid="b92a0bb9807dc797a1d77229d09a39594d677db87459cec1ab3f1e63241c2391" name="sushi" arch="ppc64le">
  <version epoch="0" ver="41.2" rel="bp154.2.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1472644800">- Update to version 3.21.91:
  + Make sushi work under Wayland.
  + Fix builddir != srcdir builds.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1488456000">- Update to version 3.23.91:
  + Use correct icon when fullscreen.
  + Use upstream format.js code.
  + Specify GdkX11 import version.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1494072000">- Update to version 3.24.0:
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1524225600">- Update to version 3.28.2:
  + Fix another LibreOffice to PDF conversion regression.
- Changes from version 3.28.1:
  + Fix LibreOffice to PDF conversion regression.
  + Add support for docx/pptx/xlsx MIME types.
- Changes from version 3.28.0:
  + Add support for GIF animations.
  + Use LibreOffice directly instead of unoconv.
  + Prefer LibreOffice from flatpak when installed.
- Drop unoconv BuildRequires and Recommends, following upstream
  changes.
- Replace gobject-introspection-devel with
  pkgconfig(gobject-introspection-1.0) BuildRequires.
- Drop no longer needed post(un) handling of
  glib2_gsettings_schema_post(un) and
  glib2_gsettings_schema_requires macro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1524571200">- Update to version 3.28.3:
  + Fix another LibreOffice to PDF conversion regression (hopefully
    for good this time).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 3.30.0:
  + Fix miscellaneous warnings.
  + Rename service file to match owned bus name.
- Use autosetup and make_build macros.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1546430400">- Update to version 3.31.2:
  + Port to meson build system.
  + Replace some deprecated API.
- Switch to meson build system, add meson BuildRequires and macros.
- Drop intltool BuildRequires, no longer used nor needed.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1552219200">- Update to version 3.32.0:
  + Update DOAP file for GitLab move.
  + Explicitly hide minimize and maximize.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1560859200">- Add sushi-port-to-gtksourceview4.patch: Port to gtksourceview4.
  Following this patch, replace pkgconfig(gtksourceview-3.0) with
  pkgconfig(gtksourceview-4) BuildRequires.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1560945600">- Update to version 3.32.1:
  + Specify GtkSourceView 3.0 import version.
- Rebase sushi-port-to-gtksourceview4.patch, drop part now included
  in tarball.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1568030400">- Update to version 3.33.90:
  + Add a command line launcher.
  + Fix viewer mimetype matching.
  + Load viewers from home directory.
  + Updated translations.
- Changes from version 3.33.4:
  + Add a native LibreofficeKit renderer.
  + Fix translation infrastructure regression.
  + Fix loading album cover art from Amazon.
  + Fix several glitches on HiDpi and fractional scaling displays.
  + Respect placement of close button preference.
  + Fix audio metadata tags retrieval.
  + Only load a single GstTagList copy.
  + Fix displaying audio tag content with markup characters.
  + Add an appdata file.
  + Properly letterbox album cover art.
  + Add a way to report loading errors in the main view.
  + Scale window size with display resolution.
- Changes from version 3.33.3:
  + Rewrite to use GTK directly, drop Clutter dependency.
  + Use GtkSourceView 4.
- Drop sushi-port-to-gtksourceview4.patch: Fixed upstream.
- Add meson BuildRequires and macros.
- Drop pkgconfig(clutter-1.0), pkgconfig(clutter-gst-3.0),
  pkgconfig(clutter-gtk-1.0), pkgconfig(clutter-x11-1.0) and
  pkgconfig(gstreamer-pbutils-1.0) BuildRequires following upstream
  changes.
- Add pkgconfig(epoxy), pkgconfig(gdk-pixbuf-2.0),
  pkgconfig(gio-unix-2.0), pkgconfig(gstreamer-audio-1.0),
  pkgconfig(gstreamer-video-1.0), pkgconfig(gtk+-wayland-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires following upstream
  changes.
- Add sushi-rpmlintrc, filter out needless warning about gir file.
- Drop libsushi-1_0-0 and typelib-1_0-Sushi-1_0 Obsoletes: No
  currently supported version of openSUSE should have these
  installed.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1568116800">- Update to version 3.34.0:
  + Add support for moving Nautilus selection with arrow keys.
  + Add support for parenting the window on Wayland.
  + Use builder-dark style for text/source viewer.
  + Add localization for appdata file.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1603368000">- Update to version 3.38.0:
  + Fix build when Wayland is disabled.
  + Make X11 and Wayland configurable at build time.
  + Sync font-widget with gnome-font-viewer.
  + Fix various meson build issues.
  + Sandbox webkitgtk.
  + Fix crash caused by the lack of getters for viewers'
    properties.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1622808000">- Update to version 3.38.1:
  + Account for scaling factor while estimating window size</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1632225600">- Update to version 41.0:
  + Drop libmusicbrainz dependency (use libsoup directly).
  + Account for scale-factor when estimating window size.
  + Build against webkit2gtk-4.1
  + Disable webkit sandboxing.
  + Updated translations.
- Drop pkgconfig(libmusicbrainz5) BuildRequires: No longer needed.
- Replace pkgconfig(webkit2gtk-4.0) with pkgconfig(webkit2gtk-4.1)
  BuildRequires following upstream changes.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1644753600">- Add typelib\\(LOKDocView\\) global requires exclude: We do not
  want to mandate libreoffice install just for the file preview
  funtion. If libreoffice is installed, the preview in will
  function as expected.
- Following the above, add (typelib(LOKDocView) if libreoffice)
  Requires: Pull in the needed libreoffice glue if libreoffice is
  installed.
- Pass explicit wayland=enabled and X11=enabled to meson, ensure we
  build support for both (we already have dependencies in place).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1648814400">- Update to version 41.1:
  + Enable web process (webkitgtk) sandbox.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1649160000">- Update to version 41.2:
  + Enable web process sandbox (webkitgtk).</changelog>
</package>
<package pkgid="300a1c111a686ab8754032eddb89d01442bccb30c0cb5a06d5cba604a6295d68" name="sushi" arch="s390x">
  <version epoch="0" ver="41.2" rel="bp154.2.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1472644800">- Update to version 3.21.91:
  + Make sushi work under Wayland.
  + Fix builddir != srcdir builds.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1488456000">- Update to version 3.23.91:
  + Use correct icon when fullscreen.
  + Use upstream format.js code.
  + Specify GdkX11 import version.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1494072000">- Update to version 3.24.0:
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1524225600">- Update to version 3.28.2:
  + Fix another LibreOffice to PDF conversion regression.
- Changes from version 3.28.1:
  + Fix LibreOffice to PDF conversion regression.
  + Add support for docx/pptx/xlsx MIME types.
- Changes from version 3.28.0:
  + Add support for GIF animations.
  + Use LibreOffice directly instead of unoconv.
  + Prefer LibreOffice from flatpak when installed.
- Drop unoconv BuildRequires and Recommends, following upstream
  changes.
- Replace gobject-introspection-devel with
  pkgconfig(gobject-introspection-1.0) BuildRequires.
- Drop no longer needed post(un) handling of
  glib2_gsettings_schema_post(un) and
  glib2_gsettings_schema_requires macro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1524571200">- Update to version 3.28.3:
  + Fix another LibreOffice to PDF conversion regression (hopefully
    for good this time).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 3.30.0:
  + Fix miscellaneous warnings.
  + Rename service file to match owned bus name.
- Use autosetup and make_build macros.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1546430400">- Update to version 3.31.2:
  + Port to meson build system.
  + Replace some deprecated API.
- Switch to meson build system, add meson BuildRequires and macros.
- Drop intltool BuildRequires, no longer used nor needed.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1552219200">- Update to version 3.32.0:
  + Update DOAP file for GitLab move.
  + Explicitly hide minimize and maximize.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1560859200">- Add sushi-port-to-gtksourceview4.patch: Port to gtksourceview4.
  Following this patch, replace pkgconfig(gtksourceview-3.0) with
  pkgconfig(gtksourceview-4) BuildRequires.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1560945600">- Update to version 3.32.1:
  + Specify GtkSourceView 3.0 import version.
- Rebase sushi-port-to-gtksourceview4.patch, drop part now included
  in tarball.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1568030400">- Update to version 3.33.90:
  + Add a command line launcher.
  + Fix viewer mimetype matching.
  + Load viewers from home directory.
  + Updated translations.
- Changes from version 3.33.4:
  + Add a native LibreofficeKit renderer.
  + Fix translation infrastructure regression.
  + Fix loading album cover art from Amazon.
  + Fix several glitches on HiDpi and fractional scaling displays.
  + Respect placement of close button preference.
  + Fix audio metadata tags retrieval.
  + Only load a single GstTagList copy.
  + Fix displaying audio tag content with markup characters.
  + Add an appdata file.
  + Properly letterbox album cover art.
  + Add a way to report loading errors in the main view.
  + Scale window size with display resolution.
- Changes from version 3.33.3:
  + Rewrite to use GTK directly, drop Clutter dependency.
  + Use GtkSourceView 4.
- Drop sushi-port-to-gtksourceview4.patch: Fixed upstream.
- Add meson BuildRequires and macros.
- Drop pkgconfig(clutter-1.0), pkgconfig(clutter-gst-3.0),
  pkgconfig(clutter-gtk-1.0), pkgconfig(clutter-x11-1.0) and
  pkgconfig(gstreamer-pbutils-1.0) BuildRequires following upstream
  changes.
- Add pkgconfig(epoxy), pkgconfig(gdk-pixbuf-2.0),
  pkgconfig(gio-unix-2.0), pkgconfig(gstreamer-audio-1.0),
  pkgconfig(gstreamer-video-1.0), pkgconfig(gtk+-wayland-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires following upstream
  changes.
- Add sushi-rpmlintrc, filter out needless warning about gir file.
- Drop libsushi-1_0-0 and typelib-1_0-Sushi-1_0 Obsoletes: No
  currently supported version of openSUSE should have these
  installed.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1568116800">- Update to version 3.34.0:
  + Add support for moving Nautilus selection with arrow keys.
  + Add support for parenting the window on Wayland.
  + Use builder-dark style for text/source viewer.
  + Add localization for appdata file.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1603368000">- Update to version 3.38.0:
  + Fix build when Wayland is disabled.
  + Make X11 and Wayland configurable at build time.
  + Sync font-widget with gnome-font-viewer.
  + Fix various meson build issues.
  + Sandbox webkitgtk.
  + Fix crash caused by the lack of getters for viewers'
    properties.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1622808000">- Update to version 3.38.1:
  + Account for scaling factor while estimating window size</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1632225600">- Update to version 41.0:
  + Drop libmusicbrainz dependency (use libsoup directly).
  + Account for scale-factor when estimating window size.
  + Build against webkit2gtk-4.1
  + Disable webkit sandboxing.
  + Updated translations.
- Drop pkgconfig(libmusicbrainz5) BuildRequires: No longer needed.
- Replace pkgconfig(webkit2gtk-4.0) with pkgconfig(webkit2gtk-4.1)
  BuildRequires following upstream changes.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1644753600">- Add typelib\\(LOKDocView\\) global requires exclude: We do not
  want to mandate libreoffice install just for the file preview
  funtion. If libreoffice is installed, the preview in will
  function as expected.
- Following the above, add (typelib(LOKDocView) if libreoffice)
  Requires: Pull in the needed libreoffice glue if libreoffice is
  installed.
- Pass explicit wayland=enabled and X11=enabled to meson, ensure we
  build support for both (we already have dependencies in place).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1648814400">- Update to version 41.1:
  + Enable web process (webkitgtk) sandbox.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1649160000">- Update to version 41.2:
  + Enable web process sandbox (webkitgtk).</changelog>
</package>
<package pkgid="603cb3033109a033b1ad349f9d9b1ee332061d90a126e80af147d64ca89132c7" name="sushi" arch="src">
  <version epoch="0" ver="41.2" rel="bp154.2.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1472644800">- Update to version 3.21.91:
  + Make sushi work under Wayland.
  + Fix builddir != srcdir builds.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1488456000">- Update to version 3.23.91:
  + Use correct icon when fullscreen.
  + Use upstream format.js code.
  + Specify GdkX11 import version.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1494072000">- Update to version 3.24.0:
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1524225600">- Update to version 3.28.2:
  + Fix another LibreOffice to PDF conversion regression.
- Changes from version 3.28.1:
  + Fix LibreOffice to PDF conversion regression.
  + Add support for docx/pptx/xlsx MIME types.
- Changes from version 3.28.0:
  + Add support for GIF animations.
  + Use LibreOffice directly instead of unoconv.
  + Prefer LibreOffice from flatpak when installed.
- Drop unoconv BuildRequires and Recommends, following upstream
  changes.
- Replace gobject-introspection-devel with
  pkgconfig(gobject-introspection-1.0) BuildRequires.
- Drop no longer needed post(un) handling of
  glib2_gsettings_schema_post(un) and
  glib2_gsettings_schema_requires macro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1524571200">- Update to version 3.28.3:
  + Fix another LibreOffice to PDF conversion regression (hopefully
    for good this time).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 3.30.0:
  + Fix miscellaneous warnings.
  + Rename service file to match owned bus name.
- Use autosetup and make_build macros.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1546430400">- Update to version 3.31.2:
  + Port to meson build system.
  + Replace some deprecated API.
- Switch to meson build system, add meson BuildRequires and macros.
- Drop intltool BuildRequires, no longer used nor needed.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1552219200">- Update to version 3.32.0:
  + Update DOAP file for GitLab move.
  + Explicitly hide minimize and maximize.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1560859200">- Add sushi-port-to-gtksourceview4.patch: Port to gtksourceview4.
  Following this patch, replace pkgconfig(gtksourceview-3.0) with
  pkgconfig(gtksourceview-4) BuildRequires.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1560945600">- Update to version 3.32.1:
  + Specify GtkSourceView 3.0 import version.
- Rebase sushi-port-to-gtksourceview4.patch, drop part now included
  in tarball.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1568030400">- Update to version 3.33.90:
  + Add a command line launcher.
  + Fix viewer mimetype matching.
  + Load viewers from home directory.
  + Updated translations.
- Changes from version 3.33.4:
  + Add a native LibreofficeKit renderer.
  + Fix translation infrastructure regression.
  + Fix loading album cover art from Amazon.
  + Fix several glitches on HiDpi and fractional scaling displays.
  + Respect placement of close button preference.
  + Fix audio metadata tags retrieval.
  + Only load a single GstTagList copy.
  + Fix displaying audio tag content with markup characters.
  + Add an appdata file.
  + Properly letterbox album cover art.
  + Add a way to report loading errors in the main view.
  + Scale window size with display resolution.
- Changes from version 3.33.3:
  + Rewrite to use GTK directly, drop Clutter dependency.
  + Use GtkSourceView 4.
- Drop sushi-port-to-gtksourceview4.patch: Fixed upstream.
- Add meson BuildRequires and macros.
- Drop pkgconfig(clutter-1.0), pkgconfig(clutter-gst-3.0),
  pkgconfig(clutter-gtk-1.0), pkgconfig(clutter-x11-1.0) and
  pkgconfig(gstreamer-pbutils-1.0) BuildRequires following upstream
  changes.
- Add pkgconfig(epoxy), pkgconfig(gdk-pixbuf-2.0),
  pkgconfig(gio-unix-2.0), pkgconfig(gstreamer-audio-1.0),
  pkgconfig(gstreamer-video-1.0), pkgconfig(gtk+-wayland-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires following upstream
  changes.
- Add sushi-rpmlintrc, filter out needless warning about gir file.
- Drop libsushi-1_0-0 and typelib-1_0-Sushi-1_0 Obsoletes: No
  currently supported version of openSUSE should have these
  installed.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1568116800">- Update to version 3.34.0:
  + Add support for moving Nautilus selection with arrow keys.
  + Add support for parenting the window on Wayland.
  + Use builder-dark style for text/source viewer.
  + Add localization for appdata file.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1603368000">- Update to version 3.38.0:
  + Fix build when Wayland is disabled.
  + Make X11 and Wayland configurable at build time.
  + Sync font-widget with gnome-font-viewer.
  + Fix various meson build issues.
  + Sandbox webkitgtk.
  + Fix crash caused by the lack of getters for viewers'
    properties.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1622808000">- Update to version 3.38.1:
  + Account for scaling factor while estimating window size</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1632225600">- Update to version 41.0:
  + Drop libmusicbrainz dependency (use libsoup directly).
  + Account for scale-factor when estimating window size.
  + Build against webkit2gtk-4.1
  + Disable webkit sandboxing.
  + Updated translations.
- Drop pkgconfig(libmusicbrainz5) BuildRequires: No longer needed.
- Replace pkgconfig(webkit2gtk-4.0) with pkgconfig(webkit2gtk-4.1)
  BuildRequires following upstream changes.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1644753600">- Add typelib\\(LOKDocView\\) global requires exclude: We do not
  want to mandate libreoffice install just for the file preview
  funtion. If libreoffice is installed, the preview in will
  function as expected.
- Following the above, add (typelib(LOKDocView) if libreoffice)
  Requires: Pull in the needed libreoffice glue if libreoffice is
  installed.
- Pass explicit wayland=enabled and X11=enabled to meson, ensure we
  build support for both (we already have dependencies in place).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1648814400">- Update to version 41.1:
  + Enable web process (webkitgtk) sandbox.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1649160000">- Update to version 41.2:
  + Enable web process sandbox (webkitgtk).</changelog>
</package>
<package pkgid="02e85c58b3d3948d0da13e3dc6567d8cb08c0d201c8da9f8d772a2e76b3a3927" name="sushi" arch="x86_64">
  <version epoch="0" ver="41.2" rel="bp154.2.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1472644800">- Update to version 3.21.91:
  + Make sushi work under Wayland.
  + Fix builddir != srcdir builds.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1488456000">- Update to version 3.23.91:
  + Use correct icon when fullscreen.
  + Use upstream format.js code.
  + Specify GdkX11 import version.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1494072000">- Update to version 3.24.0:
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1524225600">- Update to version 3.28.2:
  + Fix another LibreOffice to PDF conversion regression.
- Changes from version 3.28.1:
  + Fix LibreOffice to PDF conversion regression.
  + Add support for docx/pptx/xlsx MIME types.
- Changes from version 3.28.0:
  + Add support for GIF animations.
  + Use LibreOffice directly instead of unoconv.
  + Prefer LibreOffice from flatpak when installed.
- Drop unoconv BuildRequires and Recommends, following upstream
  changes.
- Replace gobject-introspection-devel with
  pkgconfig(gobject-introspection-1.0) BuildRequires.
- Drop no longer needed post(un) handling of
  glib2_gsettings_schema_post(un) and
  glib2_gsettings_schema_requires macro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1524571200">- Update to version 3.28.3:
  + Fix another LibreOffice to PDF conversion regression (hopefully
    for good this time).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 3.30.0:
  + Fix miscellaneous warnings.
  + Rename service file to match owned bus name.
- Use autosetup and make_build macros.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1546430400">- Update to version 3.31.2:
  + Port to meson build system.
  + Replace some deprecated API.
- Switch to meson build system, add meson BuildRequires and macros.
- Drop intltool BuildRequires, no longer used nor needed.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1552219200">- Update to version 3.32.0:
  + Update DOAP file for GitLab move.
  + Explicitly hide minimize and maximize.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1560859200">- Add sushi-port-to-gtksourceview4.patch: Port to gtksourceview4.
  Following this patch, replace pkgconfig(gtksourceview-3.0) with
  pkgconfig(gtksourceview-4) BuildRequires.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1560945600">- Update to version 3.32.1:
  + Specify GtkSourceView 3.0 import version.
- Rebase sushi-port-to-gtksourceview4.patch, drop part now included
  in tarball.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1568030400">- Update to version 3.33.90:
  + Add a command line launcher.
  + Fix viewer mimetype matching.
  + Load viewers from home directory.
  + Updated translations.
- Changes from version 3.33.4:
  + Add a native LibreofficeKit renderer.
  + Fix translation infrastructure regression.
  + Fix loading album cover art from Amazon.
  + Fix several glitches on HiDpi and fractional scaling displays.
  + Respect placement of close button preference.
  + Fix audio metadata tags retrieval.
  + Only load a single GstTagList copy.
  + Fix displaying audio tag content with markup characters.
  + Add an appdata file.
  + Properly letterbox album cover art.
  + Add a way to report loading errors in the main view.
  + Scale window size with display resolution.
- Changes from version 3.33.3:
  + Rewrite to use GTK directly, drop Clutter dependency.
  + Use GtkSourceView 4.
- Drop sushi-port-to-gtksourceview4.patch: Fixed upstream.
- Add meson BuildRequires and macros.
- Drop pkgconfig(clutter-1.0), pkgconfig(clutter-gst-3.0),
  pkgconfig(clutter-gtk-1.0), pkgconfig(clutter-x11-1.0) and
  pkgconfig(gstreamer-pbutils-1.0) BuildRequires following upstream
  changes.
- Add pkgconfig(epoxy), pkgconfig(gdk-pixbuf-2.0),
  pkgconfig(gio-unix-2.0), pkgconfig(gstreamer-audio-1.0),
  pkgconfig(gstreamer-video-1.0), pkgconfig(gtk+-wayland-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires following upstream
  changes.
- Add sushi-rpmlintrc, filter out needless warning about gir file.
- Drop libsushi-1_0-0 and typelib-1_0-Sushi-1_0 Obsoletes: No
  currently supported version of openSUSE should have these
  installed.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1568116800">- Update to version 3.34.0:
  + Add support for moving Nautilus selection with arrow keys.
  + Add support for parenting the window on Wayland.
  + Use builder-dark style for text/source viewer.
  + Add localization for appdata file.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1603368000">- Update to version 3.38.0:
  + Fix build when Wayland is disabled.
  + Make X11 and Wayland configurable at build time.
  + Sync font-widget with gnome-font-viewer.
  + Fix various meson build issues.
  + Sandbox webkitgtk.
  + Fix crash caused by the lack of getters for viewers'
    properties.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1622808000">- Update to version 3.38.1:
  + Account for scaling factor while estimating window size</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1632225600">- Update to version 41.0:
  + Drop libmusicbrainz dependency (use libsoup directly).
  + Account for scale-factor when estimating window size.
  + Build against webkit2gtk-4.1
  + Disable webkit sandboxing.
  + Updated translations.
- Drop pkgconfig(libmusicbrainz5) BuildRequires: No longer needed.
- Replace pkgconfig(webkit2gtk-4.0) with pkgconfig(webkit2gtk-4.1)
  BuildRequires following upstream changes.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1644753600">- Add typelib\\(LOKDocView\\) global requires exclude: We do not
  want to mandate libreoffice install just for the file preview
  funtion. If libreoffice is installed, the preview in will
  function as expected.
- Following the above, add (typelib(LOKDocView) if libreoffice)
  Requires: Pull in the needed libreoffice glue if libreoffice is
  installed.
- Pass explicit wayland=enabled and X11=enabled to meson, ensure we
  build support for both (we already have dependencies in place).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1648814400">- Update to version 41.1:
  + Enable web process (webkitgtk) sandbox.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1649160000">- Update to version 41.2:
  + Enable web process sandbox (webkitgtk).</changelog>
</package>
<package pkgid="67d2f38a7ab067be025200eb17c695f916b086359be534836ce9d1f8476e3cd7" name="sushi-lang" arch="noarch">
  <version epoch="0" ver="41.2" rel="bp154.2.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1472644800">- Update to version 3.21.91:
  + Make sushi work under Wayland.
  + Fix builddir != srcdir builds.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1488456000">- Update to version 3.23.91:
  + Use correct icon when fullscreen.
  + Use upstream format.js code.
  + Specify GdkX11 import version.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1494072000">- Update to version 3.24.0:
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1524225600">- Update to version 3.28.2:
  + Fix another LibreOffice to PDF conversion regression.
- Changes from version 3.28.1:
  + Fix LibreOffice to PDF conversion regression.
  + Add support for docx/pptx/xlsx MIME types.
- Changes from version 3.28.0:
  + Add support for GIF animations.
  + Use LibreOffice directly instead of unoconv.
  + Prefer LibreOffice from flatpak when installed.
- Drop unoconv BuildRequires and Recommends, following upstream
  changes.
- Replace gobject-introspection-devel with
  pkgconfig(gobject-introspection-1.0) BuildRequires.
- Drop no longer needed post(un) handling of
  glib2_gsettings_schema_post(un) and
  glib2_gsettings_schema_requires macro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1524571200">- Update to version 3.28.3:
  + Fix another LibreOffice to PDF conversion regression (hopefully
    for good this time).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 3.30.0:
  + Fix miscellaneous warnings.
  + Rename service file to match owned bus name.
- Use autosetup and make_build macros.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1546430400">- Update to version 3.31.2:
  + Port to meson build system.
  + Replace some deprecated API.
- Switch to meson build system, add meson BuildRequires and macros.
- Drop intltool BuildRequires, no longer used nor needed.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1552219200">- Update to version 3.32.0:
  + Update DOAP file for GitLab move.
  + Explicitly hide minimize and maximize.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1560859200">- Add sushi-port-to-gtksourceview4.patch: Port to gtksourceview4.
  Following this patch, replace pkgconfig(gtksourceview-3.0) with
  pkgconfig(gtksourceview-4) BuildRequires.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1560945600">- Update to version 3.32.1:
  + Specify GtkSourceView 3.0 import version.
- Rebase sushi-port-to-gtksourceview4.patch, drop part now included
  in tarball.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1568030400">- Update to version 3.33.90:
  + Add a command line launcher.
  + Fix viewer mimetype matching.
  + Load viewers from home directory.
  + Updated translations.
- Changes from version 3.33.4:
  + Add a native LibreofficeKit renderer.
  + Fix translation infrastructure regression.
  + Fix loading album cover art from Amazon.
  + Fix several glitches on HiDpi and fractional scaling displays.
  + Respect placement of close button preference.
  + Fix audio metadata tags retrieval.
  + Only load a single GstTagList copy.
  + Fix displaying audio tag content with markup characters.
  + Add an appdata file.
  + Properly letterbox album cover art.
  + Add a way to report loading errors in the main view.
  + Scale window size with display resolution.
- Changes from version 3.33.3:
  + Rewrite to use GTK directly, drop Clutter dependency.
  + Use GtkSourceView 4.
- Drop sushi-port-to-gtksourceview4.patch: Fixed upstream.
- Add meson BuildRequires and macros.
- Drop pkgconfig(clutter-1.0), pkgconfig(clutter-gst-3.0),
  pkgconfig(clutter-gtk-1.0), pkgconfig(clutter-x11-1.0) and
  pkgconfig(gstreamer-pbutils-1.0) BuildRequires following upstream
  changes.
- Add pkgconfig(epoxy), pkgconfig(gdk-pixbuf-2.0),
  pkgconfig(gio-unix-2.0), pkgconfig(gstreamer-audio-1.0),
  pkgconfig(gstreamer-video-1.0), pkgconfig(gtk+-wayland-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires following upstream
  changes.
- Add sushi-rpmlintrc, filter out needless warning about gir file.
- Drop libsushi-1_0-0 and typelib-1_0-Sushi-1_0 Obsoletes: No
  currently supported version of openSUSE should have these
  installed.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1568116800">- Update to version 3.34.0:
  + Add support for moving Nautilus selection with arrow keys.
  + Add support for parenting the window on Wayland.
  + Use builder-dark style for text/source viewer.
  + Add localization for appdata file.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1603368000">- Update to version 3.38.0:
  + Fix build when Wayland is disabled.
  + Make X11 and Wayland configurable at build time.
  + Sync font-widget with gnome-font-viewer.
  + Fix various meson build issues.
  + Sandbox webkitgtk.
  + Fix crash caused by the lack of getters for viewers'
    properties.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1622808000">- Update to version 3.38.1:
  + Account for scaling factor while estimating window size</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1632225600">- Update to version 41.0:
  + Drop libmusicbrainz dependency (use libsoup directly).
  + Account for scale-factor when estimating window size.
  + Build against webkit2gtk-4.1
  + Disable webkit sandboxing.
  + Updated translations.
- Drop pkgconfig(libmusicbrainz5) BuildRequires: No longer needed.
- Replace pkgconfig(webkit2gtk-4.0) with pkgconfig(webkit2gtk-4.1)
  BuildRequires following upstream changes.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1644753600">- Add typelib\\(LOKDocView\\) global requires exclude: We do not
  want to mandate libreoffice install just for the file preview
  funtion. If libreoffice is installed, the preview in will
  function as expected.
- Following the above, add (typelib(LOKDocView) if libreoffice)
  Requires: Pull in the needed libreoffice glue if libreoffice is
  installed.
- Pass explicit wayland=enabled and X11=enabled to meson, ensure we
  build support for both (we already have dependencies in place).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1648814400">- Update to version 41.1:
  + Enable web process (webkitgtk) sandbox.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1649160000">- Update to version 41.2:
  + Enable web process sandbox (webkitgtk).</changelog>
</package>
<package pkgid="0dfb54d742b416e666a984334ffdfe22d1cf62eed340d8f064e57d913505be86" name="syslog-ng" arch="aarch64">
  <version epoch="0" ver="3.35.1" rel="bp154.3.3.1"/>
  <changelog author="peter@czanik.hu" date="1545048000">- updated to 3.19.1
- changed summary again</changelog>
  <changelog author="schwab@suse.de" date="1545393600">- Allow building with java 1.8.0.
- Use %license</changelog>
  <changelog author="peter@czanik.hu" date="1546948800">- added 2482.patch to resolve GPL-2.0 vs. BSD-4-Clause
  compatibility problem.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1548849600">- Dynamically detect used python3 version.</changelog>
  <changelog author="root &lt;peter@czanik.hu&gt;" date="1555070400">- oops, forgot to update version in syslog-ng.conf again...
- moved slack SCL to curl sub-package to silence warning
  on startup</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1567512000">- updated to 3.23.1 to resolve bnc#1143190
- removed 2482.patch as it was merged upstream
- add wensense &amp; netskope parsers
- add collectd support
- update syslog-ng.conf due to an undocumented include
  syntax used in the config was removed by uspstream
- add SCL to support Elasticsearch destination using
  the http() destination driver
- add SCL to parse junos and checkpoint logs
- changed the location of debuggercli files
- disabled native connector (Rust support)
- "ExcludeArch: i586 s390x" as workaround until bison is fixed</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1574856000">- remove ExcludeArch as bison workaround no more needed
- remove dependency on libgeoip to fix bnc#1156203
  (of course libmaxminddb is still supported)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1576152000">- update to 3.25.1
- many bug fixes, improved Redis destination performance</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1580731200">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  allow OBS to shortcut through -mini flavors.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1582891200">- Fix fixing Python shebang</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1583841600">- Update to 3.26.1
  * added a new option to multi-line file sources
  * python-http-header: added this new plugin, which makes it possible
    for users to implement HTTP header plugins in Python language
  * azure-auth-header: Added this new plugin, which generates
    authorization header for applications connecting to Azure
  * set-severity(): Added this new rewrite rule for changing message severity.
  * $(list-search): Added a new template function, which returns
    the first index of a pattern in a list.
  * other minor improvements
  * many bug fixes</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1586952000">- fix libevtlog package name</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1589198400">- fix bnc#1169385 by removing creating news log files from post,
  adding syslog-ng.conf options to create files/directories
  automatically, and commenting the relevant part out.</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1606392000">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt; 3.30.1-0" date="1607428800">- update to 3.30.1
- follow up snmp support changes
- add secure logging
- add PAN-OS parser
- add SumoLogic destination</changelog>
  <changelog author="Steve Kowalik &lt;steven.kowalik@suse.com&gt;" date="1626436800">- Set shebang for merge-grammar.py to be /usr/bin/python3.</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1627473600">- update to 3.33.2
- added support for parsing CEE and Fortigate logs
- added Discord destination
- added MQTT destination support
- python3 workdaround removed (commented out for now, fixed upstream)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1638792000">- update to 3.35.1
- remove "news" user creation, as it is no more referenced
  from the configuration file
- packaging fixes to remove a few warnings</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1645185600">- disable Java support for ARMv7 (compilation crashes)</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1674734400">- CVE-2022-38725: fix integer overflow in parsers (bsc#1207460)
  add 0001-Fix-buffer-handling-of-syslog-and-timestamp-parsers.patch</changelog>
</package>
<package pkgid="4bfec4d5d81e949e2d2ae1886b01d3fce87b1a1bc41ab330792ca0eb9d1809dd" name="syslog-ng" arch="ppc64le">
  <version epoch="0" ver="3.35.1" rel="bp154.3.3.1"/>
  <changelog author="peter@czanik.hu" date="1545048000">- updated to 3.19.1
- changed summary again</changelog>
  <changelog author="schwab@suse.de" date="1545393600">- Allow building with java 1.8.0.
- Use %license</changelog>
  <changelog author="peter@czanik.hu" date="1546948800">- added 2482.patch to resolve GPL-2.0 vs. BSD-4-Clause
  compatibility problem.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1548849600">- Dynamically detect used python3 version.</changelog>
  <changelog author="root &lt;peter@czanik.hu&gt;" date="1555070400">- oops, forgot to update version in syslog-ng.conf again...
- moved slack SCL to curl sub-package to silence warning
  on startup</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1567512000">- updated to 3.23.1 to resolve bnc#1143190
- removed 2482.patch as it was merged upstream
- add wensense &amp; netskope parsers
- add collectd support
- update syslog-ng.conf due to an undocumented include
  syntax used in the config was removed by uspstream
- add SCL to support Elasticsearch destination using
  the http() destination driver
- add SCL to parse junos and checkpoint logs
- changed the location of debuggercli files
- disabled native connector (Rust support)
- "ExcludeArch: i586 s390x" as workaround until bison is fixed</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1574856000">- remove ExcludeArch as bison workaround no more needed
- remove dependency on libgeoip to fix bnc#1156203
  (of course libmaxminddb is still supported)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1576152000">- update to 3.25.1
- many bug fixes, improved Redis destination performance</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1580731200">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  allow OBS to shortcut through -mini flavors.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1582891200">- Fix fixing Python shebang</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1583841600">- Update to 3.26.1
  * added a new option to multi-line file sources
  * python-http-header: added this new plugin, which makes it possible
    for users to implement HTTP header plugins in Python language
  * azure-auth-header: Added this new plugin, which generates
    authorization header for applications connecting to Azure
  * set-severity(): Added this new rewrite rule for changing message severity.
  * $(list-search): Added a new template function, which returns
    the first index of a pattern in a list.
  * other minor improvements
  * many bug fixes</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1586952000">- fix libevtlog package name</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1589198400">- fix bnc#1169385 by removing creating news log files from post,
  adding syslog-ng.conf options to create files/directories
  automatically, and commenting the relevant part out.</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1606392000">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt; 3.30.1-0" date="1607428800">- update to 3.30.1
- follow up snmp support changes
- add secure logging
- add PAN-OS parser
- add SumoLogic destination</changelog>
  <changelog author="Steve Kowalik &lt;steven.kowalik@suse.com&gt;" date="1626436800">- Set shebang for merge-grammar.py to be /usr/bin/python3.</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1627473600">- update to 3.33.2
- added support for parsing CEE and Fortigate logs
- added Discord destination
- added MQTT destination support
- python3 workdaround removed (commented out for now, fixed upstream)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1638792000">- update to 3.35.1
- remove "news" user creation, as it is no more referenced
  from the configuration file
- packaging fixes to remove a few warnings</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1645185600">- disable Java support for ARMv7 (compilation crashes)</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1674734400">- CVE-2022-38725: fix integer overflow in parsers (bsc#1207460)
  add 0001-Fix-buffer-handling-of-syslog-and-timestamp-parsers.patch</changelog>
</package>
<package pkgid="b513cc2696a132c40aa8585ae0c59fbfc3d5061a2fc2dfe2fa40d2ae145cc4d8" name="syslog-ng" arch="s390x">
  <version epoch="0" ver="3.35.1" rel="bp154.3.3.1"/>
  <changelog author="peter@czanik.hu" date="1545048000">- updated to 3.19.1
- changed summary again</changelog>
  <changelog author="schwab@suse.de" date="1545393600">- Allow building with java 1.8.0.
- Use %license</changelog>
  <changelog author="peter@czanik.hu" date="1546948800">- added 2482.patch to resolve GPL-2.0 vs. BSD-4-Clause
  compatibility problem.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1548849600">- Dynamically detect used python3 version.</changelog>
  <changelog author="root &lt;peter@czanik.hu&gt;" date="1555070400">- oops, forgot to update version in syslog-ng.conf again...
- moved slack SCL to curl sub-package to silence warning
  on startup</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1567512000">- updated to 3.23.1 to resolve bnc#1143190
- removed 2482.patch as it was merged upstream
- add wensense &amp; netskope parsers
- add collectd support
- update syslog-ng.conf due to an undocumented include
  syntax used in the config was removed by uspstream
- add SCL to support Elasticsearch destination using
  the http() destination driver
- add SCL to parse junos and checkpoint logs
- changed the location of debuggercli files
- disabled native connector (Rust support)
- "ExcludeArch: i586 s390x" as workaround until bison is fixed</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1574856000">- remove ExcludeArch as bison workaround no more needed
- remove dependency on libgeoip to fix bnc#1156203
  (of course libmaxminddb is still supported)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1576152000">- update to 3.25.1
- many bug fixes, improved Redis destination performance</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1580731200">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  allow OBS to shortcut through -mini flavors.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1582891200">- Fix fixing Python shebang</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1583841600">- Update to 3.26.1
  * added a new option to multi-line file sources
  * python-http-header: added this new plugin, which makes it possible
    for users to implement HTTP header plugins in Python language
  * azure-auth-header: Added this new plugin, which generates
    authorization header for applications connecting to Azure
  * set-severity(): Added this new rewrite rule for changing message severity.
  * $(list-search): Added a new template function, which returns
    the first index of a pattern in a list.
  * other minor improvements
  * many bug fixes</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1586952000">- fix libevtlog package name</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1589198400">- fix bnc#1169385 by removing creating news log files from post,
  adding syslog-ng.conf options to create files/directories
  automatically, and commenting the relevant part out.</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1606392000">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt; 3.30.1-0" date="1607428800">- update to 3.30.1
- follow up snmp support changes
- add secure logging
- add PAN-OS parser
- add SumoLogic destination</changelog>
  <changelog author="Steve Kowalik &lt;steven.kowalik@suse.com&gt;" date="1626436800">- Set shebang for merge-grammar.py to be /usr/bin/python3.</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1627473600">- update to 3.33.2
- added support for parsing CEE and Fortigate logs
- added Discord destination
- added MQTT destination support
- python3 workdaround removed (commented out for now, fixed upstream)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1638792000">- update to 3.35.1
- remove "news" user creation, as it is no more referenced
  from the configuration file
- packaging fixes to remove a few warnings</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1645185600">- disable Java support for ARMv7 (compilation crashes)</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1674734400">- CVE-2022-38725: fix integer overflow in parsers (bsc#1207460)
  add 0001-Fix-buffer-handling-of-syslog-and-timestamp-parsers.patch</changelog>
</package>
<package pkgid="53bd45bc97d7dae16c529d9779ff5ded06313aded2f91fb11e68cc026dbdaa14" name="syslog-ng" arch="src">
  <version epoch="0" ver="3.35.1" rel="bp154.3.3.1"/>
  <changelog author="peter@czanik.hu" date="1545048000">- updated to 3.19.1
- changed summary again</changelog>
  <changelog author="schwab@suse.de" date="1545393600">- Allow building with java 1.8.0.
- Use %license</changelog>
  <changelog author="peter@czanik.hu" date="1546948800">- added 2482.patch to resolve GPL-2.0 vs. BSD-4-Clause
  compatibility problem.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1548849600">- Dynamically detect used python3 version.</changelog>
  <changelog author="root &lt;peter@czanik.hu&gt;" date="1555070400">- oops, forgot to update version in syslog-ng.conf again...
- moved slack SCL to curl sub-package to silence warning
  on startup</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1567512000">- updated to 3.23.1 to resolve bnc#1143190
- removed 2482.patch as it was merged upstream
- add wensense &amp; netskope parsers
- add collectd support
- update syslog-ng.conf due to an undocumented include
  syntax used in the config was removed by uspstream
- add SCL to support Elasticsearch destination using
  the http() destination driver
- add SCL to parse junos and checkpoint logs
- changed the location of debuggercli files
- disabled native connector (Rust support)
- "ExcludeArch: i586 s390x" as workaround until bison is fixed</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1574856000">- remove ExcludeArch as bison workaround no more needed
- remove dependency on libgeoip to fix bnc#1156203
  (of course libmaxminddb is still supported)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1576152000">- update to 3.25.1
- many bug fixes, improved Redis destination performance</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1580731200">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  allow OBS to shortcut through -mini flavors.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1582891200">- Fix fixing Python shebang</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1583841600">- Update to 3.26.1
  * added a new option to multi-line file sources
  * python-http-header: added this new plugin, which makes it possible
    for users to implement HTTP header plugins in Python language
  * azure-auth-header: Added this new plugin, which generates
    authorization header for applications connecting to Azure
  * set-severity(): Added this new rewrite rule for changing message severity.
  * $(list-search): Added a new template function, which returns
    the first index of a pattern in a list.
  * other minor improvements
  * many bug fixes</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1586952000">- fix libevtlog package name</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1589198400">- fix bnc#1169385 by removing creating news log files from post,
  adding syslog-ng.conf options to create files/directories
  automatically, and commenting the relevant part out.</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1606392000">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt; 3.30.1-0" date="1607428800">- update to 3.30.1
- follow up snmp support changes
- add secure logging
- add PAN-OS parser
- add SumoLogic destination</changelog>
  <changelog author="Steve Kowalik &lt;steven.kowalik@suse.com&gt;" date="1626436800">- Set shebang for merge-grammar.py to be /usr/bin/python3.</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1627473600">- update to 3.33.2
- added support for parsing CEE and Fortigate logs
- added Discord destination
- added MQTT destination support
- python3 workdaround removed (commented out for now, fixed upstream)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1638792000">- update to 3.35.1
- remove "news" user creation, as it is no more referenced
  from the configuration file
- packaging fixes to remove a few warnings</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1645185600">- disable Java support for ARMv7 (compilation crashes)</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1674734400">- CVE-2022-38725: fix integer overflow in parsers (bsc#1207460)
  add 0001-Fix-buffer-handling-of-syslog-and-timestamp-parsers.patch</changelog>
</package>
<package pkgid="dc1c9932192183a6bee72fc5fca15249fb956add96a0552df5b8de9d481d2963" name="syslog-ng" arch="x86_64">
  <version epoch="0" ver="3.35.1" rel="bp154.3.3.1"/>
  <changelog author="peter@czanik.hu" date="1545048000">- updated to 3.19.1
- changed summary again</changelog>
  <changelog author="schwab@suse.de" date="1545393600">- Allow building with java 1.8.0.
- Use %license</changelog>
  <changelog author="peter@czanik.hu" date="1546948800">- added 2482.patch to resolve GPL-2.0 vs. BSD-4-Clause
  compatibility problem.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1548849600">- Dynamically detect used python3 version.</changelog>
  <changelog author="root &lt;peter@czanik.hu&gt;" date="1555070400">- oops, forgot to update version in syslog-ng.conf again...
- moved slack SCL to curl sub-package to silence warning
  on startup</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1567512000">- updated to 3.23.1 to resolve bnc#1143190
- removed 2482.patch as it was merged upstream
- add wensense &amp; netskope parsers
- add collectd support
- update syslog-ng.conf due to an undocumented include
  syntax used in the config was removed by uspstream
- add SCL to support Elasticsearch destination using
  the http() destination driver
- add SCL to parse junos and checkpoint logs
- changed the location of debuggercli files
- disabled native connector (Rust support)
- "ExcludeArch: i586 s390x" as workaround until bison is fixed</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1574856000">- remove ExcludeArch as bison workaround no more needed
- remove dependency on libgeoip to fix bnc#1156203
  (of course libmaxminddb is still supported)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1576152000">- update to 3.25.1
- many bug fixes, improved Redis destination performance</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1580731200">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  allow OBS to shortcut through -mini flavors.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1582891200">- Fix fixing Python shebang</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1583841600">- Update to 3.26.1
  * added a new option to multi-line file sources
  * python-http-header: added this new plugin, which makes it possible
    for users to implement HTTP header plugins in Python language
  * azure-auth-header: Added this new plugin, which generates
    authorization header for applications connecting to Azure
  * set-severity(): Added this new rewrite rule for changing message severity.
  * $(list-search): Added a new template function, which returns
    the first index of a pattern in a list.
  * other minor improvements
  * many bug fixes</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1586952000">- fix libevtlog package name</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1589198400">- fix bnc#1169385 by removing creating news log files from post,
  adding syslog-ng.conf options to create files/directories
  automatically, and commenting the relevant part out.</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1606392000">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt; 3.30.1-0" date="1607428800">- update to 3.30.1
- follow up snmp support changes
- add secure logging
- add PAN-OS parser
- add SumoLogic destination</changelog>
  <changelog author="Steve Kowalik &lt;steven.kowalik@suse.com&gt;" date="1626436800">- Set shebang for merge-grammar.py to be /usr/bin/python3.</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1627473600">- update to 3.33.2
- added support for parsing CEE and Fortigate logs
- added Discord destination
- added MQTT destination support
- python3 workdaround removed (commented out for now, fixed upstream)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1638792000">- update to 3.35.1
- remove "news" user creation, as it is no more referenced
  from the configuration file
- packaging fixes to remove a few warnings</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1645185600">- disable Java support for ARMv7 (compilation crashes)</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1674734400">- CVE-2022-38725: fix integer overflow in parsers (bsc#1207460)
  add 0001-Fix-buffer-handling-of-syslog-and-timestamp-parsers.patch</changelog>
</package>
<package pkgid="f2691fa32d057a173df5075ee8cced4ab9477414c93f251ee6d362b1a9f8fd13" name="syslog-ng-curl" arch="aarch64">
  <version epoch="0" ver="3.35.1" rel="bp154.3.3.1"/>
  <changelog author="peter@czanik.hu" date="1545048000">- updated to 3.19.1
- changed summary again</changelog>
  <changelog author="schwab@suse.de" date="1545393600">- Allow building with java 1.8.0.
- Use %license</changelog>
  <changelog author="peter@czanik.hu" date="1546948800">- added 2482.patch to resolve GPL-2.0 vs. BSD-4-Clause
  compatibility problem.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1548849600">- Dynamically detect used python3 version.</changelog>
  <changelog author="root &lt;peter@czanik.hu&gt;" date="1555070400">- oops, forgot to update version in syslog-ng.conf again...
- moved slack SCL to curl sub-package to silence warning
  on startup</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1567512000">- updated to 3.23.1 to resolve bnc#1143190
- removed 2482.patch as it was merged upstream
- add wensense &amp; netskope parsers
- add collectd support
- update syslog-ng.conf due to an undocumented include
  syntax used in the config was removed by uspstream
- add SCL to support Elasticsearch destination using
  the http() destination driver
- add SCL to parse junos and checkpoint logs
- changed the location of debuggercli files
- disabled native connector (Rust support)
- "ExcludeArch: i586 s390x" as workaround until bison is fixed</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1574856000">- remove ExcludeArch as bison workaround no more needed
- remove dependency on libgeoip to fix bnc#1156203
  (of course libmaxminddb is still supported)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1576152000">- update to 3.25.1
- many bug fixes, improved Redis destination performance</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1580731200">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  allow OBS to shortcut through -mini flavors.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1582891200">- Fix fixing Python shebang</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1583841600">- Update to 3.26.1
  * added a new option to multi-line file sources
  * python-http-header: added this new plugin, which makes it possible
    for users to implement HTTP header plugins in Python language
  * azure-auth-header: Added this new plugin, which generates
    authorization header for applications connecting to Azure
  * set-severity(): Added this new rewrite rule for changing message severity.
  * $(list-search): Added a new template function, which returns
    the first index of a pattern in a list.
  * other minor improvements
  * many bug fixes</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1586952000">- fix libevtlog package name</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1589198400">- fix bnc#1169385 by removing creating news log files from post,
  adding syslog-ng.conf options to create files/directories
  automatically, and commenting the relevant part out.</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1606392000">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt; 3.30.1-0" date="1607428800">- update to 3.30.1
- follow up snmp support changes
- add secure logging
- add PAN-OS parser
- add SumoLogic destination</changelog>
  <changelog author="Steve Kowalik &lt;steven.kowalik@suse.com&gt;" date="1626436800">- Set shebang for merge-grammar.py to be /usr/bin/python3.</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1627473600">- update to 3.33.2
- added support for parsing CEE and Fortigate logs
- added Discord destination
- added MQTT destination support
- python3 workdaround removed (commented out for now, fixed upstream)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1638792000">- update to 3.35.1
- remove "news" user creation, as it is no more referenced
  from the configuration file
- packaging fixes to remove a few warnings</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1645185600">- disable Java support for ARMv7 (compilation crashes)</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1674734400">- CVE-2022-38725: fix integer overflow in parsers (bsc#1207460)
  add 0001-Fix-buffer-handling-of-syslog-and-timestamp-parsers.patch</changelog>
</package>
<package pkgid="e799aa272efeca6847add2d66d53445f3dd5e5bf6558680f5457351aeb76b731" name="syslog-ng-curl" arch="ppc64le">
  <version epoch="0" ver="3.35.1" rel="bp154.3.3.1"/>
  <changelog author="peter@czanik.hu" date="1545048000">- updated to 3.19.1
- changed summary again</changelog>
  <changelog author="schwab@suse.de" date="1545393600">- Allow building with java 1.8.0.
- Use %license</changelog>
  <changelog author="peter@czanik.hu" date="1546948800">- added 2482.patch to resolve GPL-2.0 vs. BSD-4-Clause
  compatibility problem.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1548849600">- Dynamically detect used python3 version.</changelog>
  <changelog author="root &lt;peter@czanik.hu&gt;" date="1555070400">- oops, forgot to update version in syslog-ng.conf again...
- moved slack SCL to curl sub-package to silence warning
  on startup</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1567512000">- updated to 3.23.1 to resolve bnc#1143190
- removed 2482.patch as it was merged upstream
- add wensense &amp; netskope parsers
- add collectd support
- update syslog-ng.conf due to an undocumented include
  syntax used in the config was removed by uspstream
- add SCL to support Elasticsearch destination using
  the http() destination driver
- add SCL to parse junos and checkpoint logs
- changed the location of debuggercli files
- disabled native connector (Rust support)
- "ExcludeArch: i586 s390x" as workaround until bison is fixed</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1574856000">- remove ExcludeArch as bison workaround no more needed
- remove dependency on libgeoip to fix bnc#1156203
  (of course libmaxminddb is still supported)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1576152000">- update to 3.25.1
- many bug fixes, improved Redis destination performance</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1580731200">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  allow OBS to shortcut through -mini flavors.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1582891200">- Fix fixing Python shebang</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1583841600">- Update to 3.26.1
  * added a new option to multi-line file sources
  * python-http-header: added this new plugin, which makes it possible
    for users to implement HTTP header plugins in Python language
  * azure-auth-header: Added this new plugin, which generates
    authorization header for applications connecting to Azure
  * set-severity(): Added this new rewrite rule for changing message severity.
  * $(list-search): Added a new template function, which returns
    the first index of a pattern in a list.
  * other minor improvements
  * many bug fixes</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1586952000">- fix libevtlog package name</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1589198400">- fix bnc#1169385 by removing creating news log files from post,
  adding syslog-ng.conf options to create files/directories
  automatically, and commenting the relevant part out.</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1606392000">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt; 3.30.1-0" date="1607428800">- update to 3.30.1
- follow up snmp support changes
- add secure logging
- add PAN-OS parser
- add SumoLogic destination</changelog>
  <changelog author="Steve Kowalik &lt;steven.kowalik@suse.com&gt;" date="1626436800">- Set shebang for merge-grammar.py to be /usr/bin/python3.</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1627473600">- update to 3.33.2
- added support for parsing CEE and Fortigate logs
- added Discord destination
- added MQTT destination support
- python3 workdaround removed (commented out for now, fixed upstream)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1638792000">- update to 3.35.1
- remove "news" user creation, as it is no more referenced
  from the configuration file
- packaging fixes to remove a few warnings</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1645185600">- disable Java support for ARMv7 (compilation crashes)</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1674734400">- CVE-2022-38725: fix integer overflow in parsers (bsc#1207460)
  add 0001-Fix-buffer-handling-of-syslog-and-timestamp-parsers.patch</changelog>
</package>
<package pkgid="51f67e9d4953302c010e27589751c3f73cdeff0ce3749d88baba2c5af7ced417" name="syslog-ng-curl" arch="s390x">
  <version epoch="0" ver="3.35.1" rel="bp154.3.3.1"/>
  <changelog author="peter@czanik.hu" date="1545048000">- updated to 3.19.1
- changed summary again</changelog>
  <changelog author="schwab@suse.de" date="1545393600">- Allow building with java 1.8.0.
- Use %license</changelog>
  <changelog author="peter@czanik.hu" date="1546948800">- added 2482.patch to resolve GPL-2.0 vs. BSD-4-Clause
  compatibility problem.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1548849600">- Dynamically detect used python3 version.</changelog>
  <changelog author="root &lt;peter@czanik.hu&gt;" date="1555070400">- oops, forgot to update version in syslog-ng.conf again...
- moved slack SCL to curl sub-package to silence warning
  on startup</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1567512000">- updated to 3.23.1 to resolve bnc#1143190
- removed 2482.patch as it was merged upstream
- add wensense &amp; netskope parsers
- add collectd support
- update syslog-ng.conf due to an undocumented include
  syntax used in the config was removed by uspstream
- add SCL to support Elasticsearch destination using
  the http() destination driver
- add SCL to parse junos and checkpoint logs
- changed the location of debuggercli files
- disabled native connector (Rust support)
- "ExcludeArch: i586 s390x" as workaround until bison is fixed</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1574856000">- remove ExcludeArch as bison workaround no more needed
- remove dependency on libgeoip to fix bnc#1156203
  (of course libmaxminddb is still supported)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1576152000">- update to 3.25.1
- many bug fixes, improved Redis destination performance</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1580731200">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  allow OBS to shortcut through -mini flavors.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1582891200">- Fix fixing Python shebang</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1583841600">- Update to 3.26.1
  * added a new option to multi-line file sources
  * python-http-header: added this new plugin, which makes it possible
    for users to implement HTTP header plugins in Python language
  * azure-auth-header: Added this new plugin, which generates
    authorization header for applications connecting to Azure
  * set-severity(): Added this new rewrite rule for changing message severity.
  * $(list-search): Added a new template function, which returns
    the first index of a pattern in a list.
  * other minor improvements
  * many bug fixes</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1586952000">- fix libevtlog package name</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1589198400">- fix bnc#1169385 by removing creating news log files from post,
  adding syslog-ng.conf options to create files/directories
  automatically, and commenting the relevant part out.</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1606392000">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt; 3.30.1-0" date="1607428800">- update to 3.30.1
- follow up snmp support changes
- add secure logging
- add PAN-OS parser
- add SumoLogic destination</changelog>
  <changelog author="Steve Kowalik &lt;steven.kowalik@suse.com&gt;" date="1626436800">- Set shebang for merge-grammar.py to be /usr/bin/python3.</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1627473600">- update to 3.33.2
- added support for parsing CEE and Fortigate logs
- added Discord destination
- added MQTT destination support
- python3 workdaround removed (commented out for now, fixed upstream)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1638792000">- update to 3.35.1
- remove "news" user creation, as it is no more referenced
  from the configuration file
- packaging fixes to remove a few warnings</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1645185600">- disable Java support for ARMv7 (compilation crashes)</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1674734400">- CVE-2022-38725: fix integer overflow in parsers (bsc#1207460)
  add 0001-Fix-buffer-handling-of-syslog-and-timestamp-parsers.patch</changelog>
</package>
<package pkgid="ba8669b735d2a5e3eb6ec757cb6305dfe00745fef2bfcfc8b294302cbf5ce2ea" name="syslog-ng-curl" arch="x86_64">
  <version epoch="0" ver="3.35.1" rel="bp154.3.3.1"/>
  <changelog author="peter@czanik.hu" date="1545048000">- updated to 3.19.1
- changed summary again</changelog>
  <changelog author="schwab@suse.de" date="1545393600">- Allow building with java 1.8.0.
- Use %license</changelog>
  <changelog author="peter@czanik.hu" date="1546948800">- added 2482.patch to resolve GPL-2.0 vs. BSD-4-Clause
  compatibility problem.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1548849600">- Dynamically detect used python3 version.</changelog>
  <changelog author="root &lt;peter@czanik.hu&gt;" date="1555070400">- oops, forgot to update version in syslog-ng.conf again...
- moved slack SCL to curl sub-package to silence warning
  on startup</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1567512000">- updated to 3.23.1 to resolve bnc#1143190
- removed 2482.patch as it was merged upstream
- add wensense &amp; netskope parsers
- add collectd support
- update syslog-ng.conf due to an undocumented include
  syntax used in the config was removed by uspstream
- add SCL to support Elasticsearch destination using
  the http() destination driver
- add SCL to parse junos and checkpoint logs
- changed the location of debuggercli files
- disabled native connector (Rust support)
- "ExcludeArch: i586 s390x" as workaround until bison is fixed</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1574856000">- remove ExcludeArch as bison workaround no more needed
- remove dependency on libgeoip to fix bnc#1156203
  (of course libmaxminddb is still supported)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1576152000">- update to 3.25.1
- many bug fixes, improved Redis destination performance</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1580731200">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  allow OBS to shortcut through -mini flavors.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1582891200">- Fix fixing Python shebang</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1583841600">- Update to 3.26.1
  * added a new option to multi-line file sources
  * python-http-header: added this new plugin, which makes it possible
    for users to implement HTTP header plugins in Python language
  * azure-auth-header: Added this new plugin, which generates
    authorization header for applications connecting to Azure
  * set-severity(): Added this new rewrite rule for changing message severity.
  * $(list-search): Added a new template function, which returns
    the first index of a pattern in a list.
  * other minor improvements
  * many bug fixes</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1586952000">- fix libevtlog package name</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1589198400">- fix bnc#1169385 by removing creating news log files from post,
  adding syslog-ng.conf options to create files/directories
  automatically, and commenting the relevant part out.</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1606392000">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt; 3.30.1-0" date="1607428800">- update to 3.30.1
- follow up snmp support changes
- add secure logging
- add PAN-OS parser
- add SumoLogic destination</changelog>
  <changelog author="Steve Kowalik &lt;steven.kowalik@suse.com&gt;" date="1626436800">- Set shebang for merge-grammar.py to be /usr/bin/python3.</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1627473600">- update to 3.33.2
- added support for parsing CEE and Fortigate logs
- added Discord destination
- added MQTT destination support
- python3 workdaround removed (commented out for now, fixed upstream)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1638792000">- update to 3.35.1
- remove "news" user creation, as it is no more referenced
  from the configuration file
- packaging fixes to remove a few warnings</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1645185600">- disable Java support for ARMv7 (compilation crashes)</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1674734400">- CVE-2022-38725: fix integer overflow in parsers (bsc#1207460)
  add 0001-Fix-buffer-handling-of-syslog-and-timestamp-parsers.patch</changelog>
</package>
<package pkgid="f69066c227c1afbe764df144d3893358d79a65c4c5f5ccce8f486beb0ee29057" name="syslog-ng-devel" arch="aarch64">
  <version epoch="0" ver="3.35.1" rel="bp154.3.3.1"/>
  <changelog author="peter@czanik.hu" date="1545048000">- updated to 3.19.1
- changed summary again</changelog>
  <changelog author="schwab@suse.de" date="1545393600">- Allow building with java 1.8.0.
- Use %license</changelog>
  <changelog author="peter@czanik.hu" date="1546948800">- added 2482.patch to resolve GPL-2.0 vs. BSD-4-Clause
  compatibility problem.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1548849600">- Dynamically detect used python3 version.</changelog>
  <changelog author="root &lt;peter@czanik.hu&gt;" date="1555070400">- oops, forgot to update version in syslog-ng.conf again...
- moved slack SCL to curl sub-package to silence warning
  on startup</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1567512000">- updated to 3.23.1 to resolve bnc#1143190
- removed 2482.patch as it was merged upstream
- add wensense &amp; netskope parsers
- add collectd support
- update syslog-ng.conf due to an undocumented include
  syntax used in the config was removed by uspstream
- add SCL to support Elasticsearch destination using
  the http() destination driver
- add SCL to parse junos and checkpoint logs
- changed the location of debuggercli files
- disabled native connector (Rust support)
- "ExcludeArch: i586 s390x" as workaround until bison is fixed</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1574856000">- remove ExcludeArch as bison workaround no more needed
- remove dependency on libgeoip to fix bnc#1156203
  (of course libmaxminddb is still supported)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1576152000">- update to 3.25.1
- many bug fixes, improved Redis destination performance</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1580731200">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  allow OBS to shortcut through -mini flavors.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1582891200">- Fix fixing Python shebang</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1583841600">- Update to 3.26.1
  * added a new option to multi-line file sources
  * python-http-header: added this new plugin, which makes it possible
    for users to implement HTTP header plugins in Python language
  * azure-auth-header: Added this new plugin, which generates
    authorization header for applications connecting to Azure
  * set-severity(): Added this new rewrite rule for changing message severity.
  * $(list-search): Added a new template function, which returns
    the first index of a pattern in a list.
  * other minor improvements
  * many bug fixes</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1586952000">- fix libevtlog package name</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1589198400">- fix bnc#1169385 by removing creating news log files from post,
  adding syslog-ng.conf options to create files/directories
  automatically, and commenting the relevant part out.</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1606392000">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt; 3.30.1-0" date="1607428800">- update to 3.30.1
- follow up snmp support changes
- add secure logging
- add PAN-OS parser
- add SumoLogic destination</changelog>
  <changelog author="Steve Kowalik &lt;steven.kowalik@suse.com&gt;" date="1626436800">- Set shebang for merge-grammar.py to be /usr/bin/python3.</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1627473600">- update to 3.33.2
- added support for parsing CEE and Fortigate logs
- added Discord destination
- added MQTT destination support
- python3 workdaround removed (commented out for now, fixed upstream)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1638792000">- update to 3.35.1
- remove "news" user creation, as it is no more referenced
  from the configuration file
- packaging fixes to remove a few warnings</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1645185600">- disable Java support for ARMv7 (compilation crashes)</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1674734400">- CVE-2022-38725: fix integer overflow in parsers (bsc#1207460)
  add 0001-Fix-buffer-handling-of-syslog-and-timestamp-parsers.patch</changelog>
</package>
<package pkgid="7d0b5c7200d1e82c47d274aaf5059fcbfa2237d5c49ed38778449cb5c381611a" name="syslog-ng-devel" arch="ppc64le">
  <version epoch="0" ver="3.35.1" rel="bp154.3.3.1"/>
  <changelog author="peter@czanik.hu" date="1545048000">- updated to 3.19.1
- changed summary again</changelog>
  <changelog author="schwab@suse.de" date="1545393600">- Allow building with java 1.8.0.
- Use %license</changelog>
  <changelog author="peter@czanik.hu" date="1546948800">- added 2482.patch to resolve GPL-2.0 vs. BSD-4-Clause
  compatibility problem.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1548849600">- Dynamically detect used python3 version.</changelog>
  <changelog author="root &lt;peter@czanik.hu&gt;" date="1555070400">- oops, forgot to update version in syslog-ng.conf again...
- moved slack SCL to curl sub-package to silence warning
  on startup</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1567512000">- updated to 3.23.1 to resolve bnc#1143190
- removed 2482.patch as it was merged upstream
- add wensense &amp; netskope parsers
- add collectd support
- update syslog-ng.conf due to an undocumented include
  syntax used in the config was removed by uspstream
- add SCL to support Elasticsearch destination using
  the http() destination driver
- add SCL to parse junos and checkpoint logs
- changed the location of debuggercli files
- disabled native connector (Rust support)
- "ExcludeArch: i586 s390x" as workaround until bison is fixed</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1574856000">- remove ExcludeArch as bison workaround no more needed
- remove dependency on libgeoip to fix bnc#1156203
  (of course libmaxminddb is still supported)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1576152000">- update to 3.25.1
- many bug fixes, improved Redis destination performance</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1580731200">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  allow OBS to shortcut through -mini flavors.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1582891200">- Fix fixing Python shebang</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1583841600">- Update to 3.26.1
  * added a new option to multi-line file sources
  * python-http-header: added this new plugin, which makes it possible
    for users to implement HTTP header plugins in Python language
  * azure-auth-header: Added this new plugin, which generates
    authorization header for applications connecting to Azure
  * set-severity(): Added this new rewrite rule for changing message severity.
  * $(list-search): Added a new template function, which returns
    the first index of a pattern in a list.
  * other minor improvements
  * many bug fixes</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1586952000">- fix libevtlog package name</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1589198400">- fix bnc#1169385 by removing creating news log files from post,
  adding syslog-ng.conf options to create files/directories
  automatically, and commenting the relevant part out.</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1606392000">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt; 3.30.1-0" date="1607428800">- update to 3.30.1
- follow up snmp support changes
- add secure logging
- add PAN-OS parser
- add SumoLogic destination</changelog>
  <changelog author="Steve Kowalik &lt;steven.kowalik@suse.com&gt;" date="1626436800">- Set shebang for merge-grammar.py to be /usr/bin/python3.</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1627473600">- update to 3.33.2
- added support for parsing CEE and Fortigate logs
- added Discord destination
- added MQTT destination support
- python3 workdaround removed (commented out for now, fixed upstream)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1638792000">- update to 3.35.1
- remove "news" user creation, as it is no more referenced
  from the configuration file
- packaging fixes to remove a few warnings</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1645185600">- disable Java support for ARMv7 (compilation crashes)</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1674734400">- CVE-2022-38725: fix integer overflow in parsers (bsc#1207460)
  add 0001-Fix-buffer-handling-of-syslog-and-timestamp-parsers.patch</changelog>
</package>
<package pkgid="d847003683261dd8cfe5056c4fc6b0cf54cfd9bf5aaeac6887b1dbcdf7b84e40" name="syslog-ng-devel" arch="s390x">
  <version epoch="0" ver="3.35.1" rel="bp154.3.3.1"/>
  <changelog author="peter@czanik.hu" date="1545048000">- updated to 3.19.1
- changed summary again</changelog>
  <changelog author="schwab@suse.de" date="1545393600">- Allow building with java 1.8.0.
- Use %license</changelog>
  <changelog author="peter@czanik.hu" date="1546948800">- added 2482.patch to resolve GPL-2.0 vs. BSD-4-Clause
  compatibility problem.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1548849600">- Dynamically detect used python3 version.</changelog>
  <changelog author="root &lt;peter@czanik.hu&gt;" date="1555070400">- oops, forgot to update version in syslog-ng.conf again...
- moved slack SCL to curl sub-package to silence warning
  on startup</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1567512000">- updated to 3.23.1 to resolve bnc#1143190
- removed 2482.patch as it was merged upstream
- add wensense &amp; netskope parsers
- add collectd support
- update syslog-ng.conf due to an undocumented include
  syntax used in the config was removed by uspstream
- add SCL to support Elasticsearch destination using
  the http() destination driver
- add SCL to parse junos and checkpoint logs
- changed the location of debuggercli files
- disabled native connector (Rust support)
- "ExcludeArch: i586 s390x" as workaround until bison is fixed</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1574856000">- remove ExcludeArch as bison workaround no more needed
- remove dependency on libgeoip to fix bnc#1156203
  (of course libmaxminddb is still supported)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1576152000">- update to 3.25.1
- many bug fixes, improved Redis destination performance</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1580731200">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  allow OBS to shortcut through -mini flavors.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1582891200">- Fix fixing Python shebang</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1583841600">- Update to 3.26.1
  * added a new option to multi-line file sources
  * python-http-header: added this new plugin, which makes it possible
    for users to implement HTTP header plugins in Python language
  * azure-auth-header: Added this new plugin, which generates
    authorization header for applications connecting to Azure
  * set-severity(): Added this new rewrite rule for changing message severity.
  * $(list-search): Added a new template function, which returns
    the first index of a pattern in a list.
  * other minor improvements
  * many bug fixes</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1586952000">- fix libevtlog package name</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1589198400">- fix bnc#1169385 by removing creating news log files from post,
  adding syslog-ng.conf options to create files/directories
  automatically, and commenting the relevant part out.</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1606392000">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt; 3.30.1-0" date="1607428800">- update to 3.30.1
- follow up snmp support changes
- add secure logging
- add PAN-OS parser
- add SumoLogic destination</changelog>
  <changelog author="Steve Kowalik &lt;steven.kowalik@suse.com&gt;" date="1626436800">- Set shebang for merge-grammar.py to be /usr/bin/python3.</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1627473600">- update to 3.33.2
- added support for parsing CEE and Fortigate logs
- added Discord destination
- added MQTT destination support
- python3 workdaround removed (commented out for now, fixed upstream)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1638792000">- update to 3.35.1
- remove "news" user creation, as it is no more referenced
  from the configuration file
- packaging fixes to remove a few warnings</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1645185600">- disable Java support for ARMv7 (compilation crashes)</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1674734400">- CVE-2022-38725: fix integer overflow in parsers (bsc#1207460)
  add 0001-Fix-buffer-handling-of-syslog-and-timestamp-parsers.patch</changelog>
</package>
<package pkgid="8db61aa71088a9139e0bf683af25d7760ec2a6df300a3270f8433b5db56846a2" name="syslog-ng-devel" arch="x86_64">
  <version epoch="0" ver="3.35.1" rel="bp154.3.3.1"/>
  <changelog author="peter@czanik.hu" date="1545048000">- updated to 3.19.1
- changed summary again</changelog>
  <changelog author="schwab@suse.de" date="1545393600">- Allow building with java 1.8.0.
- Use %license</changelog>
  <changelog author="peter@czanik.hu" date="1546948800">- added 2482.patch to resolve GPL-2.0 vs. BSD-4-Clause
  compatibility problem.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1548849600">- Dynamically detect used python3 version.</changelog>
  <changelog author="root &lt;peter@czanik.hu&gt;" date="1555070400">- oops, forgot to update version in syslog-ng.conf again...
- moved slack SCL to curl sub-package to silence warning
  on startup</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1567512000">- updated to 3.23.1 to resolve bnc#1143190
- removed 2482.patch as it was merged upstream
- add wensense &amp; netskope parsers
- add collectd support
- update syslog-ng.conf due to an undocumented include
  syntax used in the config was removed by uspstream
- add SCL to support Elasticsearch destination using
  the http() destination driver
- add SCL to parse junos and checkpoint logs
- changed the location of debuggercli files
- disabled native connector (Rust support)
- "ExcludeArch: i586 s390x" as workaround until bison is fixed</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1574856000">- remove ExcludeArch as bison workaround no more needed
- remove dependency on libgeoip to fix bnc#1156203
  (of course libmaxminddb is still supported)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1576152000">- update to 3.25.1
- many bug fixes, improved Redis destination performance</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1580731200">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  allow OBS to shortcut through -mini flavors.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1582891200">- Fix fixing Python shebang</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1583841600">- Update to 3.26.1
  * added a new option to multi-line file sources
  * python-http-header: added this new plugin, which makes it possible
    for users to implement HTTP header plugins in Python language
  * azure-auth-header: Added this new plugin, which generates
    authorization header for applications connecting to Azure
  * set-severity(): Added this new rewrite rule for changing message severity.
  * $(list-search): Added a new template function, which returns
    the first index of a pattern in a list.
  * other minor improvements
  * many bug fixes</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1586952000">- fix libevtlog package name</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1589198400">- fix bnc#1169385 by removing creating news log files from post,
  adding syslog-ng.conf options to create files/directories
  automatically, and commenting the relevant part out.</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1606392000">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt; 3.30.1-0" date="1607428800">- update to 3.30.1
- follow up snmp support changes
- add secure logging
- add PAN-OS parser
- add SumoLogic destination</changelog>
  <changelog author="Steve Kowalik &lt;steven.kowalik@suse.com&gt;" date="1626436800">- Set shebang for merge-grammar.py to be /usr/bin/python3.</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1627473600">- update to 3.33.2
- added support for parsing CEE and Fortigate logs
- added Discord destination
- added MQTT destination support
- python3 workdaround removed (commented out for now, fixed upstream)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1638792000">- update to 3.35.1
- remove "news" user creation, as it is no more referenced
  from the configuration file
- packaging fixes to remove a few warnings</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1645185600">- disable Java support for ARMv7 (compilation crashes)</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1674734400">- CVE-2022-38725: fix integer overflow in parsers (bsc#1207460)
  add 0001-Fix-buffer-handling-of-syslog-and-timestamp-parsers.patch</changelog>
</package>
<package pkgid="c7f001e3df90cc62c5111c35f3189c62c723dd3ce9a541f1fdf3358196a1a858" name="syslog-ng-geoip" arch="aarch64">
  <version epoch="0" ver="3.35.1" rel="bp154.3.3.1"/>
  <changelog author="peter@czanik.hu" date="1545048000">- updated to 3.19.1
- changed summary again</changelog>
  <changelog author="schwab@suse.de" date="1545393600">- Allow building with java 1.8.0.
- Use %license</changelog>
  <changelog author="peter@czanik.hu" date="1546948800">- added 2482.patch to resolve GPL-2.0 vs. BSD-4-Clause
  compatibility problem.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1548849600">- Dynamically detect used python3 version.</changelog>
  <changelog author="root &lt;peter@czanik.hu&gt;" date="1555070400">- oops, forgot to update version in syslog-ng.conf again...
- moved slack SCL to curl sub-package to silence warning
  on startup</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1567512000">- updated to 3.23.1 to resolve bnc#1143190
- removed 2482.patch as it was merged upstream
- add wensense &amp; netskope parsers
- add collectd support
- update syslog-ng.conf due to an undocumented include
  syntax used in the config was removed by uspstream
- add SCL to support Elasticsearch destination using
  the http() destination driver
- add SCL to parse junos and checkpoint logs
- changed the location of debuggercli files
- disabled native connector (Rust support)
- "ExcludeArch: i586 s390x" as workaround until bison is fixed</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1574856000">- remove ExcludeArch as bison workaround no more needed
- remove dependency on libgeoip to fix bnc#1156203
  (of course libmaxminddb is still supported)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1576152000">- update to 3.25.1
- many bug fixes, improved Redis destination performance</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1580731200">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  allow OBS to shortcut through -mini flavors.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1582891200">- Fix fixing Python shebang</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1583841600">- Update to 3.26.1
  * added a new option to multi-line file sources
  * python-http-header: added this new plugin, which makes it possible
    for users to implement HTTP header plugins in Python language
  * azure-auth-header: Added this new plugin, which generates
    authorization header for applications connecting to Azure
  * set-severity(): Added this new rewrite rule for changing message severity.
  * $(list-search): Added a new template function, which returns
    the first index of a pattern in a list.
  * other minor improvements
  * many bug fixes</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1586952000">- fix libevtlog package name</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1589198400">- fix bnc#1169385 by removing creating news log files from post,
  adding syslog-ng.conf options to create files/directories
  automatically, and commenting the relevant part out.</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1606392000">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt; 3.30.1-0" date="1607428800">- update to 3.30.1
- follow up snmp support changes
- add secure logging
- add PAN-OS parser
- add SumoLogic destination</changelog>
  <changelog author="Steve Kowalik &lt;steven.kowalik@suse.com&gt;" date="1626436800">- Set shebang for merge-grammar.py to be /usr/bin/python3.</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1627473600">- update to 3.33.2
- added support for parsing CEE and Fortigate logs
- added Discord destination
- added MQTT destination support
- python3 workdaround removed (commented out for now, fixed upstream)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1638792000">- update to 3.35.1
- remove "news" user creation, as it is no more referenced
  from the configuration file
- packaging fixes to remove a few warnings</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1645185600">- disable Java support for ARMv7 (compilation crashes)</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1674734400">- CVE-2022-38725: fix integer overflow in parsers (bsc#1207460)
  add 0001-Fix-buffer-handling-of-syslog-and-timestamp-parsers.patch</changelog>
</package>
<package pkgid="52890ef774baaaf25a2f0aab04ac80aea009211137008f99f5ab4c6a72c41cda" name="syslog-ng-geoip" arch="ppc64le">
  <version epoch="0" ver="3.35.1" rel="bp154.3.3.1"/>
  <changelog author="peter@czanik.hu" date="1545048000">- updated to 3.19.1
- changed summary again</changelog>
  <changelog author="schwab@suse.de" date="1545393600">- Allow building with java 1.8.0.
- Use %license</changelog>
  <changelog author="peter@czanik.hu" date="1546948800">- added 2482.patch to resolve GPL-2.0 vs. BSD-4-Clause
  compatibility problem.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1548849600">- Dynamically detect used python3 version.</changelog>
  <changelog author="root &lt;peter@czanik.hu&gt;" date="1555070400">- oops, forgot to update version in syslog-ng.conf again...
- moved slack SCL to curl sub-package to silence warning
  on startup</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1567512000">- updated to 3.23.1 to resolve bnc#1143190
- removed 2482.patch as it was merged upstream
- add wensense &amp; netskope parsers
- add collectd support
- update syslog-ng.conf due to an undocumented include
  syntax used in the config was removed by uspstream
- add SCL to support Elasticsearch destination using
  the http() destination driver
- add SCL to parse junos and checkpoint logs
- changed the location of debuggercli files
- disabled native connector (Rust support)
- "ExcludeArch: i586 s390x" as workaround until bison is fixed</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1574856000">- remove ExcludeArch as bison workaround no more needed
- remove dependency on libgeoip to fix bnc#1156203
  (of course libmaxminddb is still supported)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1576152000">- update to 3.25.1
- many bug fixes, improved Redis destination performance</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1580731200">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  allow OBS to shortcut through -mini flavors.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1582891200">- Fix fixing Python shebang</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1583841600">- Update to 3.26.1
  * added a new option to multi-line file sources
  * python-http-header: added this new plugin, which makes it possible
    for users to implement HTTP header plugins in Python language
  * azure-auth-header: Added this new plugin, which generates
    authorization header for applications connecting to Azure
  * set-severity(): Added this new rewrite rule for changing message severity.
  * $(list-search): Added a new template function, which returns
    the first index of a pattern in a list.
  * other minor improvements
  * many bug fixes</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1586952000">- fix libevtlog package name</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1589198400">- fix bnc#1169385 by removing creating news log files from post,
  adding syslog-ng.conf options to create files/directories
  automatically, and commenting the relevant part out.</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1606392000">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt; 3.30.1-0" date="1607428800">- update to 3.30.1
- follow up snmp support changes
- add secure logging
- add PAN-OS parser
- add SumoLogic destination</changelog>
  <changelog author="Steve Kowalik &lt;steven.kowalik@suse.com&gt;" date="1626436800">- Set shebang for merge-grammar.py to be /usr/bin/python3.</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1627473600">- update to 3.33.2
- added support for parsing CEE and Fortigate logs
- added Discord destination
- added MQTT destination support
- python3 workdaround removed (commented out for now, fixed upstream)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1638792000">- update to 3.35.1
- remove "news" user creation, as it is no more referenced
  from the configuration file
- packaging fixes to remove a few warnings</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1645185600">- disable Java support for ARMv7 (compilation crashes)</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1674734400">- CVE-2022-38725: fix integer overflow in parsers (bsc#1207460)
  add 0001-Fix-buffer-handling-of-syslog-and-timestamp-parsers.patch</changelog>
</package>
<package pkgid="acbc94b25a61a73597a82e9f9f847008cdcfaa2f61035bb187f49d2915e207fd" name="syslog-ng-geoip" arch="s390x">
  <version epoch="0" ver="3.35.1" rel="bp154.3.3.1"/>
  <changelog author="peter@czanik.hu" date="1545048000">- updated to 3.19.1
- changed summary again</changelog>
  <changelog author="schwab@suse.de" date="1545393600">- Allow building with java 1.8.0.
- Use %license</changelog>
  <changelog author="peter@czanik.hu" date="1546948800">- added 2482.patch to resolve GPL-2.0 vs. BSD-4-Clause
  compatibility problem.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1548849600">- Dynamically detect used python3 version.</changelog>
  <changelog author="root &lt;peter@czanik.hu&gt;" date="1555070400">- oops, forgot to update version in syslog-ng.conf again...
- moved slack SCL to curl sub-package to silence warning
  on startup</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1567512000">- updated to 3.23.1 to resolve bnc#1143190
- removed 2482.patch as it was merged upstream
- add wensense &amp; netskope parsers
- add collectd support
- update syslog-ng.conf due to an undocumented include
  syntax used in the config was removed by uspstream
- add SCL to support Elasticsearch destination using
  the http() destination driver
- add SCL to parse junos and checkpoint logs
- changed the location of debuggercli files
- disabled native connector (Rust support)
- "ExcludeArch: i586 s390x" as workaround until bison is fixed</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1574856000">- remove ExcludeArch as bison workaround no more needed
- remove dependency on libgeoip to fix bnc#1156203
  (of course libmaxminddb is still supported)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1576152000">- update to 3.25.1
- many bug fixes, improved Redis destination performance</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1580731200">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  allow OBS to shortcut through -mini flavors.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1582891200">- Fix fixing Python shebang</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1583841600">- Update to 3.26.1
  * added a new option to multi-line file sources
  * python-http-header: added this new plugin, which makes it possible
    for users to implement HTTP header plugins in Python language
  * azure-auth-header: Added this new plugin, which generates
    authorization header for applications connecting to Azure
  * set-severity(): Added this new rewrite rule for changing message severity.
  * $(list-search): Added a new template function, which returns
    the first index of a pattern in a list.
  * other minor improvements
  * many bug fixes</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1586952000">- fix libevtlog package name</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1589198400">- fix bnc#1169385 by removing creating news log files from post,
  adding syslog-ng.conf options to create files/directories
  automatically, and commenting the relevant part out.</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1606392000">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt; 3.30.1-0" date="1607428800">- update to 3.30.1
- follow up snmp support changes
- add secure logging
- add PAN-OS parser
- add SumoLogic destination</changelog>
  <changelog author="Steve Kowalik &lt;steven.kowalik@suse.com&gt;" date="1626436800">- Set shebang for merge-grammar.py to be /usr/bin/python3.</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1627473600">- update to 3.33.2
- added support for parsing CEE and Fortigate logs
- added Discord destination
- added MQTT destination support
- python3 workdaround removed (commented out for now, fixed upstream)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1638792000">- update to 3.35.1
- remove "news" user creation, as it is no more referenced
  from the configuration file
- packaging fixes to remove a few warnings</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1645185600">- disable Java support for ARMv7 (compilation crashes)</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1674734400">- CVE-2022-38725: fix integer overflow in parsers (bsc#1207460)
  add 0001-Fix-buffer-handling-of-syslog-and-timestamp-parsers.patch</changelog>
</package>
<package pkgid="6b6195e5ea4aaa72d8f63d4fe5ec4f6171443e33ba15faed5ed08b34c4fb4e3a" name="syslog-ng-geoip" arch="x86_64">
  <version epoch="0" ver="3.35.1" rel="bp154.3.3.1"/>
  <changelog author="peter@czanik.hu" date="1545048000">- updated to 3.19.1
- changed summary again</changelog>
  <changelog author="schwab@suse.de" date="1545393600">- Allow building with java 1.8.0.
- Use %license</changelog>
  <changelog author="peter@czanik.hu" date="1546948800">- added 2482.patch to resolve GPL-2.0 vs. BSD-4-Clause
  compatibility problem.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1548849600">- Dynamically detect used python3 version.</changelog>
  <changelog author="root &lt;peter@czanik.hu&gt;" date="1555070400">- oops, forgot to update version in syslog-ng.conf again...
- moved slack SCL to curl sub-package to silence warning
  on startup</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1567512000">- updated to 3.23.1 to resolve bnc#1143190
- removed 2482.patch as it was merged upstream
- add wensense &amp; netskope parsers
- add collectd support
- update syslog-ng.conf due to an undocumented include
  syntax used in the config was removed by uspstream
- add SCL to support Elasticsearch destination using
  the http() destination driver
- add SCL to parse junos and checkpoint logs
- changed the location of debuggercli files
- disabled native connector (Rust support)
- "ExcludeArch: i586 s390x" as workaround until bison is fixed</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1574856000">- remove ExcludeArch as bison workaround no more needed
- remove dependency on libgeoip to fix bnc#1156203
  (of course libmaxminddb is still supported)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1576152000">- update to 3.25.1
- many bug fixes, improved Redis destination performance</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1580731200">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  allow OBS to shortcut through -mini flavors.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1582891200">- Fix fixing Python shebang</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1583841600">- Update to 3.26.1
  * added a new option to multi-line file sources
  * python-http-header: added this new plugin, which makes it possible
    for users to implement HTTP header plugins in Python language
  * azure-auth-header: Added this new plugin, which generates
    authorization header for applications connecting to Azure
  * set-severity(): Added this new rewrite rule for changing message severity.
  * $(list-search): Added a new template function, which returns
    the first index of a pattern in a list.
  * other minor improvements
  * many bug fixes</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1586952000">- fix libevtlog package name</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1589198400">- fix bnc#1169385 by removing creating news log files from post,
  adding syslog-ng.conf options to create files/directories
  automatically, and commenting the relevant part out.</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1606392000">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt; 3.30.1-0" date="1607428800">- update to 3.30.1
- follow up snmp support changes
- add secure logging
- add PAN-OS parser
- add SumoLogic destination</changelog>
  <changelog author="Steve Kowalik &lt;steven.kowalik@suse.com&gt;" date="1626436800">- Set shebang for merge-grammar.py to be /usr/bin/python3.</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1627473600">- update to 3.33.2
- added support for parsing CEE and Fortigate logs
- added Discord destination
- added MQTT destination support
- python3 workdaround removed (commented out for now, fixed upstream)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1638792000">- update to 3.35.1
- remove "news" user creation, as it is no more referenced
  from the configuration file
- packaging fixes to remove a few warnings</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1645185600">- disable Java support for ARMv7 (compilation crashes)</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1674734400">- CVE-2022-38725: fix integer overflow in parsers (bsc#1207460)
  add 0001-Fix-buffer-handling-of-syslog-and-timestamp-parsers.patch</changelog>
</package>
<package pkgid="72b08c13248532bb516f5cfed5ada6835946d1c4a24344ab0d8760ce258c1359" name="syslog-ng-java" arch="aarch64">
  <version epoch="0" ver="3.35.1" rel="bp154.3.3.1"/>
  <changelog author="peter@czanik.hu" date="1545048000">- updated to 3.19.1
- changed summary again</changelog>
  <changelog author="schwab@suse.de" date="1545393600">- Allow building with java 1.8.0.
- Use %license</changelog>
  <changelog author="peter@czanik.hu" date="1546948800">- added 2482.patch to resolve GPL-2.0 vs. BSD-4-Clause
  compatibility problem.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1548849600">- Dynamically detect used python3 version.</changelog>
  <changelog author="root &lt;peter@czanik.hu&gt;" date="1555070400">- oops, forgot to update version in syslog-ng.conf again...
- moved slack SCL to curl sub-package to silence warning
  on startup</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1567512000">- updated to 3.23.1 to resolve bnc#1143190
- removed 2482.patch as it was merged upstream
- add wensense &amp; netskope parsers
- add collectd support
- update syslog-ng.conf due to an undocumented include
  syntax used in the config was removed by uspstream
- add SCL to support Elasticsearch destination using
  the http() destination driver
- add SCL to parse junos and checkpoint logs
- changed the location of debuggercli files
- disabled native connector (Rust support)
- "ExcludeArch: i586 s390x" as workaround until bison is fixed</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1574856000">- remove ExcludeArch as bison workaround no more needed
- remove dependency on libgeoip to fix bnc#1156203
  (of course libmaxminddb is still supported)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1576152000">- update to 3.25.1
- many bug fixes, improved Redis destination performance</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1580731200">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  allow OBS to shortcut through -mini flavors.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1582891200">- Fix fixing Python shebang</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1583841600">- Update to 3.26.1
  * added a new option to multi-line file sources
  * python-http-header: added this new plugin, which makes it possible
    for users to implement HTTP header plugins in Python language
  * azure-auth-header: Added this new plugin, which generates
    authorization header for applications connecting to Azure
  * set-severity(): Added this new rewrite rule for changing message severity.
  * $(list-search): Added a new template function, which returns
    the first index of a pattern in a list.
  * other minor improvements
  * many bug fixes</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1586952000">- fix libevtlog package name</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1589198400">- fix bnc#1169385 by removing creating news log files from post,
  adding syslog-ng.conf options to create files/directories
  automatically, and commenting the relevant part out.</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1606392000">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt; 3.30.1-0" date="1607428800">- update to 3.30.1
- follow up snmp support changes
- add secure logging
- add PAN-OS parser
- add SumoLogic destination</changelog>
  <changelog author="Steve Kowalik &lt;steven.kowalik@suse.com&gt;" date="1626436800">- Set shebang for merge-grammar.py to be /usr/bin/python3.</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1627473600">- update to 3.33.2
- added support for parsing CEE and Fortigate logs
- added Discord destination
- added MQTT destination support
- python3 workdaround removed (commented out for now, fixed upstream)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1638792000">- update to 3.35.1
- remove "news" user creation, as it is no more referenced
  from the configuration file
- packaging fixes to remove a few warnings</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1645185600">- disable Java support for ARMv7 (compilation crashes)</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1674734400">- CVE-2022-38725: fix integer overflow in parsers (bsc#1207460)
  add 0001-Fix-buffer-handling-of-syslog-and-timestamp-parsers.patch</changelog>
</package>
<package pkgid="7d4f830f1c4bb4c2aa7151714e46ebc1361dade2a2219915528cbf960e9af556" name="syslog-ng-java" arch="ppc64le">
  <version epoch="0" ver="3.35.1" rel="bp154.3.3.1"/>
  <changelog author="peter@czanik.hu" date="1545048000">- updated to 3.19.1
- changed summary again</changelog>
  <changelog author="schwab@suse.de" date="1545393600">- Allow building with java 1.8.0.
- Use %license</changelog>
  <changelog author="peter@czanik.hu" date="1546948800">- added 2482.patch to resolve GPL-2.0 vs. BSD-4-Clause
  compatibility problem.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1548849600">- Dynamically detect used python3 version.</changelog>
  <changelog author="root &lt;peter@czanik.hu&gt;" date="1555070400">- oops, forgot to update version in syslog-ng.conf again...
- moved slack SCL to curl sub-package to silence warning
  on startup</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1567512000">- updated to 3.23.1 to resolve bnc#1143190
- removed 2482.patch as it was merged upstream
- add wensense &amp; netskope parsers
- add collectd support
- update syslog-ng.conf due to an undocumented include
  syntax used in the config was removed by uspstream
- add SCL to support Elasticsearch destination using
  the http() destination driver
- add SCL to parse junos and checkpoint logs
- changed the location of debuggercli files
- disabled native connector (Rust support)
- "ExcludeArch: i586 s390x" as workaround until bison is fixed</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1574856000">- remove ExcludeArch as bison workaround no more needed
- remove dependency on libgeoip to fix bnc#1156203
  (of course libmaxminddb is still supported)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1576152000">- update to 3.25.1
- many bug fixes, improved Redis destination performance</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1580731200">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  allow OBS to shortcut through -mini flavors.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1582891200">- Fix fixing Python shebang</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1583841600">- Update to 3.26.1
  * added a new option to multi-line file sources
  * python-http-header: added this new plugin, which makes it possible
    for users to implement HTTP header plugins in Python language
  * azure-auth-header: Added this new plugin, which generates
    authorization header for applications connecting to Azure
  * set-severity(): Added this new rewrite rule for changing message severity.
  * $(list-search): Added a new template function, which returns
    the first index of a pattern in a list.
  * other minor improvements
  * many bug fixes</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1586952000">- fix libevtlog package name</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1589198400">- fix bnc#1169385 by removing creating news log files from post,
  adding syslog-ng.conf options to create files/directories
  automatically, and commenting the relevant part out.</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1606392000">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt; 3.30.1-0" date="1607428800">- update to 3.30.1
- follow up snmp support changes
- add secure logging
- add PAN-OS parser
- add SumoLogic destination</changelog>
  <changelog author="Steve Kowalik &lt;steven.kowalik@suse.com&gt;" date="1626436800">- Set shebang for merge-grammar.py to be /usr/bin/python3.</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1627473600">- update to 3.33.2
- added support for parsing CEE and Fortigate logs
- added Discord destination
- added MQTT destination support
- python3 workdaround removed (commented out for now, fixed upstream)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1638792000">- update to 3.35.1
- remove "news" user creation, as it is no more referenced
  from the configuration file
- packaging fixes to remove a few warnings</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1645185600">- disable Java support for ARMv7 (compilation crashes)</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1674734400">- CVE-2022-38725: fix integer overflow in parsers (bsc#1207460)
  add 0001-Fix-buffer-handling-of-syslog-and-timestamp-parsers.patch</changelog>
</package>
<package pkgid="ee6beba28026cd9cf8c236527216bac116c712af54d25698f43535284e93000a" name="syslog-ng-java" arch="s390x">
  <version epoch="0" ver="3.35.1" rel="bp154.3.3.1"/>
  <changelog author="peter@czanik.hu" date="1545048000">- updated to 3.19.1
- changed summary again</changelog>
  <changelog author="schwab@suse.de" date="1545393600">- Allow building with java 1.8.0.
- Use %license</changelog>
  <changelog author="peter@czanik.hu" date="1546948800">- added 2482.patch to resolve GPL-2.0 vs. BSD-4-Clause
  compatibility problem.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1548849600">- Dynamically detect used python3 version.</changelog>
  <changelog author="root &lt;peter@czanik.hu&gt;" date="1555070400">- oops, forgot to update version in syslog-ng.conf again...
- moved slack SCL to curl sub-package to silence warning
  on startup</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1567512000">- updated to 3.23.1 to resolve bnc#1143190
- removed 2482.patch as it was merged upstream
- add wensense &amp; netskope parsers
- add collectd support
- update syslog-ng.conf due to an undocumented include
  syntax used in the config was removed by uspstream
- add SCL to support Elasticsearch destination using
  the http() destination driver
- add SCL to parse junos and checkpoint logs
- changed the location of debuggercli files
- disabled native connector (Rust support)
- "ExcludeArch: i586 s390x" as workaround until bison is fixed</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1574856000">- remove ExcludeArch as bison workaround no more needed
- remove dependency on libgeoip to fix bnc#1156203
  (of course libmaxminddb is still supported)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1576152000">- update to 3.25.1
- many bug fixes, improved Redis destination performance</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1580731200">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  allow OBS to shortcut through -mini flavors.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1582891200">- Fix fixing Python shebang</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1583841600">- Update to 3.26.1
  * added a new option to multi-line file sources
  * python-http-header: added this new plugin, which makes it possible
    for users to implement HTTP header plugins in Python language
  * azure-auth-header: Added this new plugin, which generates
    authorization header for applications connecting to Azure
  * set-severity(): Added this new rewrite rule for changing message severity.
  * $(list-search): Added a new template function, which returns
    the first index of a pattern in a list.
  * other minor improvements
  * many bug fixes</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1586952000">- fix libevtlog package name</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1589198400">- fix bnc#1169385 by removing creating news log files from post,
  adding syslog-ng.conf options to create files/directories
  automatically, and commenting the relevant part out.</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1606392000">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt; 3.30.1-0" date="1607428800">- update to 3.30.1
- follow up snmp support changes
- add secure logging
- add PAN-OS parser
- add SumoLogic destination</changelog>
  <changelog author="Steve Kowalik &lt;steven.kowalik@suse.com&gt;" date="1626436800">- Set shebang for merge-grammar.py to be /usr/bin/python3.</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1627473600">- update to 3.33.2
- added support for parsing CEE and Fortigate logs
- added Discord destination
- added MQTT destination support
- python3 workdaround removed (commented out for now, fixed upstream)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1638792000">- update to 3.35.1
- remove "news" user creation, as it is no more referenced
  from the configuration file
- packaging fixes to remove a few warnings</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1645185600">- disable Java support for ARMv7 (compilation crashes)</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1674734400">- CVE-2022-38725: fix integer overflow in parsers (bsc#1207460)
  add 0001-Fix-buffer-handling-of-syslog-and-timestamp-parsers.patch</changelog>
</package>
<package pkgid="08368a335444cfd9f2e650ba16c0f748890bbf86814c31203942fbd48243d003" name="syslog-ng-java" arch="x86_64">
  <version epoch="0" ver="3.35.1" rel="bp154.3.3.1"/>
  <changelog author="peter@czanik.hu" date="1545048000">- updated to 3.19.1
- changed summary again</changelog>
  <changelog author="schwab@suse.de" date="1545393600">- Allow building with java 1.8.0.
- Use %license</changelog>
  <changelog author="peter@czanik.hu" date="1546948800">- added 2482.patch to resolve GPL-2.0 vs. BSD-4-Clause
  compatibility problem.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1548849600">- Dynamically detect used python3 version.</changelog>
  <changelog author="root &lt;peter@czanik.hu&gt;" date="1555070400">- oops, forgot to update version in syslog-ng.conf again...
- moved slack SCL to curl sub-package to silence warning
  on startup</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1567512000">- updated to 3.23.1 to resolve bnc#1143190
- removed 2482.patch as it was merged upstream
- add wensense &amp; netskope parsers
- add collectd support
- update syslog-ng.conf due to an undocumented include
  syntax used in the config was removed by uspstream
- add SCL to support Elasticsearch destination using
  the http() destination driver
- add SCL to parse junos and checkpoint logs
- changed the location of debuggercli files
- disabled native connector (Rust support)
- "ExcludeArch: i586 s390x" as workaround until bison is fixed</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1574856000">- remove ExcludeArch as bison workaround no more needed
- remove dependency on libgeoip to fix bnc#1156203
  (of course libmaxminddb is still supported)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1576152000">- update to 3.25.1
- many bug fixes, improved Redis destination performance</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1580731200">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  allow OBS to shortcut through -mini flavors.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1582891200">- Fix fixing Python shebang</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1583841600">- Update to 3.26.1
  * added a new option to multi-line file sources
  * python-http-header: added this new plugin, which makes it possible
    for users to implement HTTP header plugins in Python language
  * azure-auth-header: Added this new plugin, which generates
    authorization header for applications connecting to Azure
  * set-severity(): Added this new rewrite rule for changing message severity.
  * $(list-search): Added a new template function, which returns
    the first index of a pattern in a list.
  * other minor improvements
  * many bug fixes</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1586952000">- fix libevtlog package name</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1589198400">- fix bnc#1169385 by removing creating news log files from post,
  adding syslog-ng.conf options to create files/directories
  automatically, and commenting the relevant part out.</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1606392000">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt; 3.30.1-0" date="1607428800">- update to 3.30.1
- follow up snmp support changes
- add secure logging
- add PAN-OS parser
- add SumoLogic destination</changelog>
  <changelog author="Steve Kowalik &lt;steven.kowalik@suse.com&gt;" date="1626436800">- Set shebang for merge-grammar.py to be /usr/bin/python3.</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1627473600">- update to 3.33.2
- added support for parsing CEE and Fortigate logs
- added Discord destination
- added MQTT destination support
- python3 workdaround removed (commented out for now, fixed upstream)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1638792000">- update to 3.35.1
- remove "news" user creation, as it is no more referenced
  from the configuration file
- packaging fixes to remove a few warnings</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1645185600">- disable Java support for ARMv7 (compilation crashes)</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1674734400">- CVE-2022-38725: fix integer overflow in parsers (bsc#1207460)
  add 0001-Fix-buffer-handling-of-syslog-and-timestamp-parsers.patch</changelog>
</package>
<package pkgid="73f3d4313b66c917366dffa025869f10ff03bdabbdb60bb579f9ad140a09a0d5" name="syslog-ng-mqtt" arch="aarch64">
  <version epoch="0" ver="3.35.1" rel="bp154.3.3.1"/>
  <changelog author="peter@czanik.hu" date="1545048000">- updated to 3.19.1
- changed summary again</changelog>
  <changelog author="schwab@suse.de" date="1545393600">- Allow building with java 1.8.0.
- Use %license</changelog>
  <changelog author="peter@czanik.hu" date="1546948800">- added 2482.patch to resolve GPL-2.0 vs. BSD-4-Clause
  compatibility problem.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1548849600">- Dynamically detect used python3 version.</changelog>
  <changelog author="root &lt;peter@czanik.hu&gt;" date="1555070400">- oops, forgot to update version in syslog-ng.conf again...
- moved slack SCL to curl sub-package to silence warning
  on startup</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1567512000">- updated to 3.23.1 to resolve bnc#1143190
- removed 2482.patch as it was merged upstream
- add wensense &amp; netskope parsers
- add collectd support
- update syslog-ng.conf due to an undocumented include
  syntax used in the config was removed by uspstream
- add SCL to support Elasticsearch destination using
  the http() destination driver
- add SCL to parse junos and checkpoint logs
- changed the location of debuggercli files
- disabled native connector (Rust support)
- "ExcludeArch: i586 s390x" as workaround until bison is fixed</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1574856000">- remove ExcludeArch as bison workaround no more needed
- remove dependency on libgeoip to fix bnc#1156203
  (of course libmaxminddb is still supported)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1576152000">- update to 3.25.1
- many bug fixes, improved Redis destination performance</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1580731200">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  allow OBS to shortcut through -mini flavors.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1582891200">- Fix fixing Python shebang</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1583841600">- Update to 3.26.1
  * added a new option to multi-line file sources
  * python-http-header: added this new plugin, which makes it possible
    for users to implement HTTP header plugins in Python language
  * azure-auth-header: Added this new plugin, which generates
    authorization header for applications connecting to Azure
  * set-severity(): Added this new rewrite rule for changing message severity.
  * $(list-search): Added a new template function, which returns
    the first index of a pattern in a list.
  * other minor improvements
  * many bug fixes</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1586952000">- fix libevtlog package name</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1589198400">- fix bnc#1169385 by removing creating news log files from post,
  adding syslog-ng.conf options to create files/directories
  automatically, and commenting the relevant part out.</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1606392000">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt; 3.30.1-0" date="1607428800">- update to 3.30.1
- follow up snmp support changes
- add secure logging
- add PAN-OS parser
- add SumoLogic destination</changelog>
  <changelog author="Steve Kowalik &lt;steven.kowalik@suse.com&gt;" date="1626436800">- Set shebang for merge-grammar.py to be /usr/bin/python3.</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1627473600">- update to 3.33.2
- added support for parsing CEE and Fortigate logs
- added Discord destination
- added MQTT destination support
- python3 workdaround removed (commented out for now, fixed upstream)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1638792000">- update to 3.35.1
- remove "news" user creation, as it is no more referenced
  from the configuration file
- packaging fixes to remove a few warnings</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1645185600">- disable Java support for ARMv7 (compilation crashes)</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1674734400">- CVE-2022-38725: fix integer overflow in parsers (bsc#1207460)
  add 0001-Fix-buffer-handling-of-syslog-and-timestamp-parsers.patch</changelog>
</package>
<package pkgid="d70b0f2238592916206126dab3fa21ac33f04383376e16b7ff1baa41832d7a35" name="syslog-ng-mqtt" arch="ppc64le">
  <version epoch="0" ver="3.35.1" rel="bp154.3.3.1"/>
  <changelog author="peter@czanik.hu" date="1545048000">- updated to 3.19.1
- changed summary again</changelog>
  <changelog author="schwab@suse.de" date="1545393600">- Allow building with java 1.8.0.
- Use %license</changelog>
  <changelog author="peter@czanik.hu" date="1546948800">- added 2482.patch to resolve GPL-2.0 vs. BSD-4-Clause
  compatibility problem.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1548849600">- Dynamically detect used python3 version.</changelog>
  <changelog author="root &lt;peter@czanik.hu&gt;" date="1555070400">- oops, forgot to update version in syslog-ng.conf again...
- moved slack SCL to curl sub-package to silence warning
  on startup</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1567512000">- updated to 3.23.1 to resolve bnc#1143190
- removed 2482.patch as it was merged upstream
- add wensense &amp; netskope parsers
- add collectd support
- update syslog-ng.conf due to an undocumented include
  syntax used in the config was removed by uspstream
- add SCL to support Elasticsearch destination using
  the http() destination driver
- add SCL to parse junos and checkpoint logs
- changed the location of debuggercli files
- disabled native connector (Rust support)
- "ExcludeArch: i586 s390x" as workaround until bison is fixed</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1574856000">- remove ExcludeArch as bison workaround no more needed
- remove dependency on libgeoip to fix bnc#1156203
  (of course libmaxminddb is still supported)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1576152000">- update to 3.25.1
- many bug fixes, improved Redis destination performance</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1580731200">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  allow OBS to shortcut through -mini flavors.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1582891200">- Fix fixing Python shebang</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1583841600">- Update to 3.26.1
  * added a new option to multi-line file sources
  * python-http-header: added this new plugin, which makes it possible
    for users to implement HTTP header plugins in Python language
  * azure-auth-header: Added this new plugin, which generates
    authorization header for applications connecting to Azure
  * set-severity(): Added this new rewrite rule for changing message severity.
  * $(list-search): Added a new template function, which returns
    the first index of a pattern in a list.
  * other minor improvements
  * many bug fixes</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1586952000">- fix libevtlog package name</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1589198400">- fix bnc#1169385 by removing creating news log files from post,
  adding syslog-ng.conf options to create files/directories
  automatically, and commenting the relevant part out.</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1606392000">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt; 3.30.1-0" date="1607428800">- update to 3.30.1
- follow up snmp support changes
- add secure logging
- add PAN-OS parser
- add SumoLogic destination</changelog>
  <changelog author="Steve Kowalik &lt;steven.kowalik@suse.com&gt;" date="1626436800">- Set shebang for merge-grammar.py to be /usr/bin/python3.</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1627473600">- update to 3.33.2
- added support for parsing CEE and Fortigate logs
- added Discord destination
- added MQTT destination support
- python3 workdaround removed (commented out for now, fixed upstream)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1638792000">- update to 3.35.1
- remove "news" user creation, as it is no more referenced
  from the configuration file
- packaging fixes to remove a few warnings</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1645185600">- disable Java support for ARMv7 (compilation crashes)</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1674734400">- CVE-2022-38725: fix integer overflow in parsers (bsc#1207460)
  add 0001-Fix-buffer-handling-of-syslog-and-timestamp-parsers.patch</changelog>
</package>
<package pkgid="1adfbc9de2ab8a59cccf02e9df28d19a624a1171a3579e8a5109440c5fa4da34" name="syslog-ng-mqtt" arch="s390x">
  <version epoch="0" ver="3.35.1" rel="bp154.3.3.1"/>
  <changelog author="peter@czanik.hu" date="1545048000">- updated to 3.19.1
- changed summary again</changelog>
  <changelog author="schwab@suse.de" date="1545393600">- Allow building with java 1.8.0.
- Use %license</changelog>
  <changelog author="peter@czanik.hu" date="1546948800">- added 2482.patch to resolve GPL-2.0 vs. BSD-4-Clause
  compatibility problem.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1548849600">- Dynamically detect used python3 version.</changelog>
  <changelog author="root &lt;peter@czanik.hu&gt;" date="1555070400">- oops, forgot to update version in syslog-ng.conf again...
- moved slack SCL to curl sub-package to silence warning
  on startup</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1567512000">- updated to 3.23.1 to resolve bnc#1143190
- removed 2482.patch as it was merged upstream
- add wensense &amp; netskope parsers
- add collectd support
- update syslog-ng.conf due to an undocumented include
  syntax used in the config was removed by uspstream
- add SCL to support Elasticsearch destination using
  the http() destination driver
- add SCL to parse junos and checkpoint logs
- changed the location of debuggercli files
- disabled native connector (Rust support)
- "ExcludeArch: i586 s390x" as workaround until bison is fixed</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1574856000">- remove ExcludeArch as bison workaround no more needed
- remove dependency on libgeoip to fix bnc#1156203
  (of course libmaxminddb is still supported)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1576152000">- update to 3.25.1
- many bug fixes, improved Redis destination performance</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1580731200">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  allow OBS to shortcut through -mini flavors.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1582891200">- Fix fixing Python shebang</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1583841600">- Update to 3.26.1
  * added a new option to multi-line file sources
  * python-http-header: added this new plugin, which makes it possible
    for users to implement HTTP header plugins in Python language
  * azure-auth-header: Added this new plugin, which generates
    authorization header for applications connecting to Azure
  * set-severity(): Added this new rewrite rule for changing message severity.
  * $(list-search): Added a new template function, which returns
    the first index of a pattern in a list.
  * other minor improvements
  * many bug fixes</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1586952000">- fix libevtlog package name</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1589198400">- fix bnc#1169385 by removing creating news log files from post,
  adding syslog-ng.conf options to create files/directories
  automatically, and commenting the relevant part out.</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1606392000">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt; 3.30.1-0" date="1607428800">- update to 3.30.1
- follow up snmp support changes
- add secure logging
- add PAN-OS parser
- add SumoLogic destination</changelog>
  <changelog author="Steve Kowalik &lt;steven.kowalik@suse.com&gt;" date="1626436800">- Set shebang for merge-grammar.py to be /usr/bin/python3.</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1627473600">- update to 3.33.2
- added support for parsing CEE and Fortigate logs
- added Discord destination
- added MQTT destination support
- python3 workdaround removed (commented out for now, fixed upstream)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1638792000">- update to 3.35.1
- remove "news" user creation, as it is no more referenced
  from the configuration file
- packaging fixes to remove a few warnings</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1645185600">- disable Java support for ARMv7 (compilation crashes)</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1674734400">- CVE-2022-38725: fix integer overflow in parsers (bsc#1207460)
  add 0001-Fix-buffer-handling-of-syslog-and-timestamp-parsers.patch</changelog>
</package>
<package pkgid="5488ebb3bf0c141f697f00c9cbf2b6c92001770457e632cdc1c0b172cb323715" name="syslog-ng-mqtt" arch="x86_64">
  <version epoch="0" ver="3.35.1" rel="bp154.3.3.1"/>
  <changelog author="peter@czanik.hu" date="1545048000">- updated to 3.19.1
- changed summary again</changelog>
  <changelog author="schwab@suse.de" date="1545393600">- Allow building with java 1.8.0.
- Use %license</changelog>
  <changelog author="peter@czanik.hu" date="1546948800">- added 2482.patch to resolve GPL-2.0 vs. BSD-4-Clause
  compatibility problem.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1548849600">- Dynamically detect used python3 version.</changelog>
  <changelog author="root &lt;peter@czanik.hu&gt;" date="1555070400">- oops, forgot to update version in syslog-ng.conf again...
- moved slack SCL to curl sub-package to silence warning
  on startup</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1567512000">- updated to 3.23.1 to resolve bnc#1143190
- removed 2482.patch as it was merged upstream
- add wensense &amp; netskope parsers
- add collectd support
- update syslog-ng.conf due to an undocumented include
  syntax used in the config was removed by uspstream
- add SCL to support Elasticsearch destination using
  the http() destination driver
- add SCL to parse junos and checkpoint logs
- changed the location of debuggercli files
- disabled native connector (Rust support)
- "ExcludeArch: i586 s390x" as workaround until bison is fixed</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1574856000">- remove ExcludeArch as bison workaround no more needed
- remove dependency on libgeoip to fix bnc#1156203
  (of course libmaxminddb is still supported)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1576152000">- update to 3.25.1
- many bug fixes, improved Redis destination performance</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1580731200">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  allow OBS to shortcut through -mini flavors.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1582891200">- Fix fixing Python shebang</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1583841600">- Update to 3.26.1
  * added a new option to multi-line file sources
  * python-http-header: added this new plugin, which makes it possible
    for users to implement HTTP header plugins in Python language
  * azure-auth-header: Added this new plugin, which generates
    authorization header for applications connecting to Azure
  * set-severity(): Added this new rewrite rule for changing message severity.
  * $(list-search): Added a new template function, which returns
    the first index of a pattern in a list.
  * other minor improvements
  * many bug fixes</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1586952000">- fix libevtlog package name</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1589198400">- fix bnc#1169385 by removing creating news log files from post,
  adding syslog-ng.conf options to create files/directories
  automatically, and commenting the relevant part out.</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1606392000">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt; 3.30.1-0" date="1607428800">- update to 3.30.1
- follow up snmp support changes
- add secure logging
- add PAN-OS parser
- add SumoLogic destination</changelog>
  <changelog author="Steve Kowalik &lt;steven.kowalik@suse.com&gt;" date="1626436800">- Set shebang for merge-grammar.py to be /usr/bin/python3.</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1627473600">- update to 3.33.2
- added support for parsing CEE and Fortigate logs
- added Discord destination
- added MQTT destination support
- python3 workdaround removed (commented out for now, fixed upstream)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1638792000">- update to 3.35.1
- remove "news" user creation, as it is no more referenced
  from the configuration file
- packaging fixes to remove a few warnings</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1645185600">- disable Java support for ARMv7 (compilation crashes)</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1674734400">- CVE-2022-38725: fix integer overflow in parsers (bsc#1207460)
  add 0001-Fix-buffer-handling-of-syslog-and-timestamp-parsers.patch</changelog>
</package>
<package pkgid="946526a4cc9d75f0652f5cce8c95bf6aa3c6c96a675070b0657ab3893fd499ce" name="syslog-ng-python" arch="aarch64">
  <version epoch="0" ver="3.35.1" rel="bp154.3.3.1"/>
  <changelog author="peter@czanik.hu" date="1545048000">- updated to 3.19.1
- changed summary again</changelog>
  <changelog author="schwab@suse.de" date="1545393600">- Allow building with java 1.8.0.
- Use %license</changelog>
  <changelog author="peter@czanik.hu" date="1546948800">- added 2482.patch to resolve GPL-2.0 vs. BSD-4-Clause
  compatibility problem.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1548849600">- Dynamically detect used python3 version.</changelog>
  <changelog author="root &lt;peter@czanik.hu&gt;" date="1555070400">- oops, forgot to update version in syslog-ng.conf again...
- moved slack SCL to curl sub-package to silence warning
  on startup</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1567512000">- updated to 3.23.1 to resolve bnc#1143190
- removed 2482.patch as it was merged upstream
- add wensense &amp; netskope parsers
- add collectd support
- update syslog-ng.conf due to an undocumented include
  syntax used in the config was removed by uspstream
- add SCL to support Elasticsearch destination using
  the http() destination driver
- add SCL to parse junos and checkpoint logs
- changed the location of debuggercli files
- disabled native connector (Rust support)
- "ExcludeArch: i586 s390x" as workaround until bison is fixed</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1574856000">- remove ExcludeArch as bison workaround no more needed
- remove dependency on libgeoip to fix bnc#1156203
  (of course libmaxminddb is still supported)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1576152000">- update to 3.25.1
- many bug fixes, improved Redis destination performance</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1580731200">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  allow OBS to shortcut through -mini flavors.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1582891200">- Fix fixing Python shebang</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1583841600">- Update to 3.26.1
  * added a new option to multi-line file sources
  * python-http-header: added this new plugin, which makes it possible
    for users to implement HTTP header plugins in Python language
  * azure-auth-header: Added this new plugin, which generates
    authorization header for applications connecting to Azure
  * set-severity(): Added this new rewrite rule for changing message severity.
  * $(list-search): Added a new template function, which returns
    the first index of a pattern in a list.
  * other minor improvements
  * many bug fixes</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1586952000">- fix libevtlog package name</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1589198400">- fix bnc#1169385 by removing creating news log files from post,
  adding syslog-ng.conf options to create files/directories
  automatically, and commenting the relevant part out.</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1606392000">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt; 3.30.1-0" date="1607428800">- update to 3.30.1
- follow up snmp support changes
- add secure logging
- add PAN-OS parser
- add SumoLogic destination</changelog>
  <changelog author="Steve Kowalik &lt;steven.kowalik@suse.com&gt;" date="1626436800">- Set shebang for merge-grammar.py to be /usr/bin/python3.</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1627473600">- update to 3.33.2
- added support for parsing CEE and Fortigate logs
- added Discord destination
- added MQTT destination support
- python3 workdaround removed (commented out for now, fixed upstream)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1638792000">- update to 3.35.1
- remove "news" user creation, as it is no more referenced
  from the configuration file
- packaging fixes to remove a few warnings</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1645185600">- disable Java support for ARMv7 (compilation crashes)</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1674734400">- CVE-2022-38725: fix integer overflow in parsers (bsc#1207460)
  add 0001-Fix-buffer-handling-of-syslog-and-timestamp-parsers.patch</changelog>
</package>
<package pkgid="9851fd3ed9b4dc48d26bc9de98c10406905851e8b6d4ef32758f7ca75df14425" name="syslog-ng-python" arch="ppc64le">
  <version epoch="0" ver="3.35.1" rel="bp154.3.3.1"/>
  <changelog author="peter@czanik.hu" date="1545048000">- updated to 3.19.1
- changed summary again</changelog>
  <changelog author="schwab@suse.de" date="1545393600">- Allow building with java 1.8.0.
- Use %license</changelog>
  <changelog author="peter@czanik.hu" date="1546948800">- added 2482.patch to resolve GPL-2.0 vs. BSD-4-Clause
  compatibility problem.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1548849600">- Dynamically detect used python3 version.</changelog>
  <changelog author="root &lt;peter@czanik.hu&gt;" date="1555070400">- oops, forgot to update version in syslog-ng.conf again...
- moved slack SCL to curl sub-package to silence warning
  on startup</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1567512000">- updated to 3.23.1 to resolve bnc#1143190
- removed 2482.patch as it was merged upstream
- add wensense &amp; netskope parsers
- add collectd support
- update syslog-ng.conf due to an undocumented include
  syntax used in the config was removed by uspstream
- add SCL to support Elasticsearch destination using
  the http() destination driver
- add SCL to parse junos and checkpoint logs
- changed the location of debuggercli files
- disabled native connector (Rust support)
- "ExcludeArch: i586 s390x" as workaround until bison is fixed</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1574856000">- remove ExcludeArch as bison workaround no more needed
- remove dependency on libgeoip to fix bnc#1156203
  (of course libmaxminddb is still supported)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1576152000">- update to 3.25.1
- many bug fixes, improved Redis destination performance</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1580731200">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  allow OBS to shortcut through -mini flavors.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1582891200">- Fix fixing Python shebang</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1583841600">- Update to 3.26.1
  * added a new option to multi-line file sources
  * python-http-header: added this new plugin, which makes it possible
    for users to implement HTTP header plugins in Python language
  * azure-auth-header: Added this new plugin, which generates
    authorization header for applications connecting to Azure
  * set-severity(): Added this new rewrite rule for changing message severity.
  * $(list-search): Added a new template function, which returns
    the first index of a pattern in a list.
  * other minor improvements
  * many bug fixes</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1586952000">- fix libevtlog package name</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1589198400">- fix bnc#1169385 by removing creating news log files from post,
  adding syslog-ng.conf options to create files/directories
  automatically, and commenting the relevant part out.</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1606392000">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt; 3.30.1-0" date="1607428800">- update to 3.30.1
- follow up snmp support changes
- add secure logging
- add PAN-OS parser
- add SumoLogic destination</changelog>
  <changelog author="Steve Kowalik &lt;steven.kowalik@suse.com&gt;" date="1626436800">- Set shebang for merge-grammar.py to be /usr/bin/python3.</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1627473600">- update to 3.33.2
- added support for parsing CEE and Fortigate logs
- added Discord destination
- added MQTT destination support
- python3 workdaround removed (commented out for now, fixed upstream)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1638792000">- update to 3.35.1
- remove "news" user creation, as it is no more referenced
  from the configuration file
- packaging fixes to remove a few warnings</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1645185600">- disable Java support for ARMv7 (compilation crashes)</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1674734400">- CVE-2022-38725: fix integer overflow in parsers (bsc#1207460)
  add 0001-Fix-buffer-handling-of-syslog-and-timestamp-parsers.patch</changelog>
</package>
<package pkgid="8b83945f64779f7971c37ae882e0841129d3041d8e57a0a0d363ad0b2e52a8e7" name="syslog-ng-python" arch="s390x">
  <version epoch="0" ver="3.35.1" rel="bp154.3.3.1"/>
  <changelog author="peter@czanik.hu" date="1545048000">- updated to 3.19.1
- changed summary again</changelog>
  <changelog author="schwab@suse.de" date="1545393600">- Allow building with java 1.8.0.
- Use %license</changelog>
  <changelog author="peter@czanik.hu" date="1546948800">- added 2482.patch to resolve GPL-2.0 vs. BSD-4-Clause
  compatibility problem.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1548849600">- Dynamically detect used python3 version.</changelog>
  <changelog author="root &lt;peter@czanik.hu&gt;" date="1555070400">- oops, forgot to update version in syslog-ng.conf again...
- moved slack SCL to curl sub-package to silence warning
  on startup</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1567512000">- updated to 3.23.1 to resolve bnc#1143190
- removed 2482.patch as it was merged upstream
- add wensense &amp; netskope parsers
- add collectd support
- update syslog-ng.conf due to an undocumented include
  syntax used in the config was removed by uspstream
- add SCL to support Elasticsearch destination using
  the http() destination driver
- add SCL to parse junos and checkpoint logs
- changed the location of debuggercli files
- disabled native connector (Rust support)
- "ExcludeArch: i586 s390x" as workaround until bison is fixed</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1574856000">- remove ExcludeArch as bison workaround no more needed
- remove dependency on libgeoip to fix bnc#1156203
  (of course libmaxminddb is still supported)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1576152000">- update to 3.25.1
- many bug fixes, improved Redis destination performance</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1580731200">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  allow OBS to shortcut through -mini flavors.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1582891200">- Fix fixing Python shebang</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1583841600">- Update to 3.26.1
  * added a new option to multi-line file sources
  * python-http-header: added this new plugin, which makes it possible
    for users to implement HTTP header plugins in Python language
  * azure-auth-header: Added this new plugin, which generates
    authorization header for applications connecting to Azure
  * set-severity(): Added this new rewrite rule for changing message severity.
  * $(list-search): Added a new template function, which returns
    the first index of a pattern in a list.
  * other minor improvements
  * many bug fixes</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1586952000">- fix libevtlog package name</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1589198400">- fix bnc#1169385 by removing creating news log files from post,
  adding syslog-ng.conf options to create files/directories
  automatically, and commenting the relevant part out.</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1606392000">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt; 3.30.1-0" date="1607428800">- update to 3.30.1
- follow up snmp support changes
- add secure logging
- add PAN-OS parser
- add SumoLogic destination</changelog>
  <changelog author="Steve Kowalik &lt;steven.kowalik@suse.com&gt;" date="1626436800">- Set shebang for merge-grammar.py to be /usr/bin/python3.</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1627473600">- update to 3.33.2
- added support for parsing CEE and Fortigate logs
- added Discord destination
- added MQTT destination support
- python3 workdaround removed (commented out for now, fixed upstream)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1638792000">- update to 3.35.1
- remove "news" user creation, as it is no more referenced
  from the configuration file
- packaging fixes to remove a few warnings</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1645185600">- disable Java support for ARMv7 (compilation crashes)</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1674734400">- CVE-2022-38725: fix integer overflow in parsers (bsc#1207460)
  add 0001-Fix-buffer-handling-of-syslog-and-timestamp-parsers.patch</changelog>
</package>
<package pkgid="419f6eb3d9c86e6c0a99b78cfebeaa112479bfc50fef52bad2b2eb80cd853619" name="syslog-ng-python" arch="x86_64">
  <version epoch="0" ver="3.35.1" rel="bp154.3.3.1"/>
  <changelog author="peter@czanik.hu" date="1545048000">- updated to 3.19.1
- changed summary again</changelog>
  <changelog author="schwab@suse.de" date="1545393600">- Allow building with java 1.8.0.
- Use %license</changelog>
  <changelog author="peter@czanik.hu" date="1546948800">- added 2482.patch to resolve GPL-2.0 vs. BSD-4-Clause
  compatibility problem.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1548849600">- Dynamically detect used python3 version.</changelog>
  <changelog author="root &lt;peter@czanik.hu&gt;" date="1555070400">- oops, forgot to update version in syslog-ng.conf again...
- moved slack SCL to curl sub-package to silence warning
  on startup</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1567512000">- updated to 3.23.1 to resolve bnc#1143190
- removed 2482.patch as it was merged upstream
- add wensense &amp; netskope parsers
- add collectd support
- update syslog-ng.conf due to an undocumented include
  syntax used in the config was removed by uspstream
- add SCL to support Elasticsearch destination using
  the http() destination driver
- add SCL to parse junos and checkpoint logs
- changed the location of debuggercli files
- disabled native connector (Rust support)
- "ExcludeArch: i586 s390x" as workaround until bison is fixed</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1574856000">- remove ExcludeArch as bison workaround no more needed
- remove dependency on libgeoip to fix bnc#1156203
  (of course libmaxminddb is still supported)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1576152000">- update to 3.25.1
- many bug fixes, improved Redis destination performance</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1580731200">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  allow OBS to shortcut through -mini flavors.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1582891200">- Fix fixing Python shebang</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1583841600">- Update to 3.26.1
  * added a new option to multi-line file sources
  * python-http-header: added this new plugin, which makes it possible
    for users to implement HTTP header plugins in Python language
  * azure-auth-header: Added this new plugin, which generates
    authorization header for applications connecting to Azure
  * set-severity(): Added this new rewrite rule for changing message severity.
  * $(list-search): Added a new template function, which returns
    the first index of a pattern in a list.
  * other minor improvements
  * many bug fixes</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1586952000">- fix libevtlog package name</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1589198400">- fix bnc#1169385 by removing creating news log files from post,
  adding syslog-ng.conf options to create files/directories
  automatically, and commenting the relevant part out.</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1606392000">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt; 3.30.1-0" date="1607428800">- update to 3.30.1
- follow up snmp support changes
- add secure logging
- add PAN-OS parser
- add SumoLogic destination</changelog>
  <changelog author="Steve Kowalik &lt;steven.kowalik@suse.com&gt;" date="1626436800">- Set shebang for merge-grammar.py to be /usr/bin/python3.</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1627473600">- update to 3.33.2
- added support for parsing CEE and Fortigate logs
- added Discord destination
- added MQTT destination support
- python3 workdaround removed (commented out for now, fixed upstream)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1638792000">- update to 3.35.1
- remove "news" user creation, as it is no more referenced
  from the configuration file
- packaging fixes to remove a few warnings</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1645185600">- disable Java support for ARMv7 (compilation crashes)</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1674734400">- CVE-2022-38725: fix integer overflow in parsers (bsc#1207460)
  add 0001-Fix-buffer-handling-of-syslog-and-timestamp-parsers.patch</changelog>
</package>
<package pkgid="efa69a9920181dc2eacafd4bdb44c50a023e92e7a3e8146b6ab14f5e946b59bd" name="syslog-ng-redis" arch="aarch64">
  <version epoch="0" ver="3.35.1" rel="bp154.3.3.1"/>
  <changelog author="peter@czanik.hu" date="1545048000">- updated to 3.19.1
- changed summary again</changelog>
  <changelog author="schwab@suse.de" date="1545393600">- Allow building with java 1.8.0.
- Use %license</changelog>
  <changelog author="peter@czanik.hu" date="1546948800">- added 2482.patch to resolve GPL-2.0 vs. BSD-4-Clause
  compatibility problem.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1548849600">- Dynamically detect used python3 version.</changelog>
  <changelog author="root &lt;peter@czanik.hu&gt;" date="1555070400">- oops, forgot to update version in syslog-ng.conf again...
- moved slack SCL to curl sub-package to silence warning
  on startup</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1567512000">- updated to 3.23.1 to resolve bnc#1143190
- removed 2482.patch as it was merged upstream
- add wensense &amp; netskope parsers
- add collectd support
- update syslog-ng.conf due to an undocumented include
  syntax used in the config was removed by uspstream
- add SCL to support Elasticsearch destination using
  the http() destination driver
- add SCL to parse junos and checkpoint logs
- changed the location of debuggercli files
- disabled native connector (Rust support)
- "ExcludeArch: i586 s390x" as workaround until bison is fixed</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1574856000">- remove ExcludeArch as bison workaround no more needed
- remove dependency on libgeoip to fix bnc#1156203
  (of course libmaxminddb is still supported)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1576152000">- update to 3.25.1
- many bug fixes, improved Redis destination performance</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1580731200">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  allow OBS to shortcut through -mini flavors.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1582891200">- Fix fixing Python shebang</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1583841600">- Update to 3.26.1
  * added a new option to multi-line file sources
  * python-http-header: added this new plugin, which makes it possible
    for users to implement HTTP header plugins in Python language
  * azure-auth-header: Added this new plugin, which generates
    authorization header for applications connecting to Azure
  * set-severity(): Added this new rewrite rule for changing message severity.
  * $(list-search): Added a new template function, which returns
    the first index of a pattern in a list.
  * other minor improvements
  * many bug fixes</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1586952000">- fix libevtlog package name</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1589198400">- fix bnc#1169385 by removing creating news log files from post,
  adding syslog-ng.conf options to create files/directories
  automatically, and commenting the relevant part out.</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1606392000">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt; 3.30.1-0" date="1607428800">- update to 3.30.1
- follow up snmp support changes
- add secure logging
- add PAN-OS parser
- add SumoLogic destination</changelog>
  <changelog author="Steve Kowalik &lt;steven.kowalik@suse.com&gt;" date="1626436800">- Set shebang for merge-grammar.py to be /usr/bin/python3.</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1627473600">- update to 3.33.2
- added support for parsing CEE and Fortigate logs
- added Discord destination
- added MQTT destination support
- python3 workdaround removed (commented out for now, fixed upstream)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1638792000">- update to 3.35.1
- remove "news" user creation, as it is no more referenced
  from the configuration file
- packaging fixes to remove a few warnings</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1645185600">- disable Java support for ARMv7 (compilation crashes)</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1674734400">- CVE-2022-38725: fix integer overflow in parsers (bsc#1207460)
  add 0001-Fix-buffer-handling-of-syslog-and-timestamp-parsers.patch</changelog>
</package>
<package pkgid="86cc2086053215238dc70d1f1c13b4b32c9272a0d08aa75b52d49bebdfad5a10" name="syslog-ng-redis" arch="ppc64le">
  <version epoch="0" ver="3.35.1" rel="bp154.3.3.1"/>
  <changelog author="peter@czanik.hu" date="1545048000">- updated to 3.19.1
- changed summary again</changelog>
  <changelog author="schwab@suse.de" date="1545393600">- Allow building with java 1.8.0.
- Use %license</changelog>
  <changelog author="peter@czanik.hu" date="1546948800">- added 2482.patch to resolve GPL-2.0 vs. BSD-4-Clause
  compatibility problem.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1548849600">- Dynamically detect used python3 version.</changelog>
  <changelog author="root &lt;peter@czanik.hu&gt;" date="1555070400">- oops, forgot to update version in syslog-ng.conf again...
- moved slack SCL to curl sub-package to silence warning
  on startup</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1567512000">- updated to 3.23.1 to resolve bnc#1143190
- removed 2482.patch as it was merged upstream
- add wensense &amp; netskope parsers
- add collectd support
- update syslog-ng.conf due to an undocumented include
  syntax used in the config was removed by uspstream
- add SCL to support Elasticsearch destination using
  the http() destination driver
- add SCL to parse junos and checkpoint logs
- changed the location of debuggercli files
- disabled native connector (Rust support)
- "ExcludeArch: i586 s390x" as workaround until bison is fixed</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1574856000">- remove ExcludeArch as bison workaround no more needed
- remove dependency on libgeoip to fix bnc#1156203
  (of course libmaxminddb is still supported)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1576152000">- update to 3.25.1
- many bug fixes, improved Redis destination performance</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1580731200">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  allow OBS to shortcut through -mini flavors.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1582891200">- Fix fixing Python shebang</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1583841600">- Update to 3.26.1
  * added a new option to multi-line file sources
  * python-http-header: added this new plugin, which makes it possible
    for users to implement HTTP header plugins in Python language
  * azure-auth-header: Added this new plugin, which generates
    authorization header for applications connecting to Azure
  * set-severity(): Added this new rewrite rule for changing message severity.
  * $(list-search): Added a new template function, which returns
    the first index of a pattern in a list.
  * other minor improvements
  * many bug fixes</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1586952000">- fix libevtlog package name</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1589198400">- fix bnc#1169385 by removing creating news log files from post,
  adding syslog-ng.conf options to create files/directories
  automatically, and commenting the relevant part out.</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1606392000">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt; 3.30.1-0" date="1607428800">- update to 3.30.1
- follow up snmp support changes
- add secure logging
- add PAN-OS parser
- add SumoLogic destination</changelog>
  <changelog author="Steve Kowalik &lt;steven.kowalik@suse.com&gt;" date="1626436800">- Set shebang for merge-grammar.py to be /usr/bin/python3.</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1627473600">- update to 3.33.2
- added support for parsing CEE and Fortigate logs
- added Discord destination
- added MQTT destination support
- python3 workdaround removed (commented out for now, fixed upstream)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1638792000">- update to 3.35.1
- remove "news" user creation, as it is no more referenced
  from the configuration file
- packaging fixes to remove a few warnings</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1645185600">- disable Java support for ARMv7 (compilation crashes)</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1674734400">- CVE-2022-38725: fix integer overflow in parsers (bsc#1207460)
  add 0001-Fix-buffer-handling-of-syslog-and-timestamp-parsers.patch</changelog>
</package>
<package pkgid="57df702fe0be3ffd5fb44a524862e8c7a35d9dd04a94577f023ba023cdc7e774" name="syslog-ng-redis" arch="s390x">
  <version epoch="0" ver="3.35.1" rel="bp154.3.3.1"/>
  <changelog author="peter@czanik.hu" date="1545048000">- updated to 3.19.1
- changed summary again</changelog>
  <changelog author="schwab@suse.de" date="1545393600">- Allow building with java 1.8.0.
- Use %license</changelog>
  <changelog author="peter@czanik.hu" date="1546948800">- added 2482.patch to resolve GPL-2.0 vs. BSD-4-Clause
  compatibility problem.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1548849600">- Dynamically detect used python3 version.</changelog>
  <changelog author="root &lt;peter@czanik.hu&gt;" date="1555070400">- oops, forgot to update version in syslog-ng.conf again...
- moved slack SCL to curl sub-package to silence warning
  on startup</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1567512000">- updated to 3.23.1 to resolve bnc#1143190
- removed 2482.patch as it was merged upstream
- add wensense &amp; netskope parsers
- add collectd support
- update syslog-ng.conf due to an undocumented include
  syntax used in the config was removed by uspstream
- add SCL to support Elasticsearch destination using
  the http() destination driver
- add SCL to parse junos and checkpoint logs
- changed the location of debuggercli files
- disabled native connector (Rust support)
- "ExcludeArch: i586 s390x" as workaround until bison is fixed</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1574856000">- remove ExcludeArch as bison workaround no more needed
- remove dependency on libgeoip to fix bnc#1156203
  (of course libmaxminddb is still supported)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1576152000">- update to 3.25.1
- many bug fixes, improved Redis destination performance</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1580731200">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  allow OBS to shortcut through -mini flavors.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1582891200">- Fix fixing Python shebang</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1583841600">- Update to 3.26.1
  * added a new option to multi-line file sources
  * python-http-header: added this new plugin, which makes it possible
    for users to implement HTTP header plugins in Python language
  * azure-auth-header: Added this new plugin, which generates
    authorization header for applications connecting to Azure
  * set-severity(): Added this new rewrite rule for changing message severity.
  * $(list-search): Added a new template function, which returns
    the first index of a pattern in a list.
  * other minor improvements
  * many bug fixes</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1586952000">- fix libevtlog package name</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1589198400">- fix bnc#1169385 by removing creating news log files from post,
  adding syslog-ng.conf options to create files/directories
  automatically, and commenting the relevant part out.</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1606392000">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt; 3.30.1-0" date="1607428800">- update to 3.30.1
- follow up snmp support changes
- add secure logging
- add PAN-OS parser
- add SumoLogic destination</changelog>
  <changelog author="Steve Kowalik &lt;steven.kowalik@suse.com&gt;" date="1626436800">- Set shebang for merge-grammar.py to be /usr/bin/python3.</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1627473600">- update to 3.33.2
- added support for parsing CEE and Fortigate logs
- added Discord destination
- added MQTT destination support
- python3 workdaround removed (commented out for now, fixed upstream)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1638792000">- update to 3.35.1
- remove "news" user creation, as it is no more referenced
  from the configuration file
- packaging fixes to remove a few warnings</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1645185600">- disable Java support for ARMv7 (compilation crashes)</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1674734400">- CVE-2022-38725: fix integer overflow in parsers (bsc#1207460)
  add 0001-Fix-buffer-handling-of-syslog-and-timestamp-parsers.patch</changelog>
</package>
<package pkgid="0037791e189272f7898f6ba47b0311a977429f8c6a97ab6d244f0ae41decebe7" name="syslog-ng-redis" arch="x86_64">
  <version epoch="0" ver="3.35.1" rel="bp154.3.3.1"/>
  <changelog author="peter@czanik.hu" date="1545048000">- updated to 3.19.1
- changed summary again</changelog>
  <changelog author="schwab@suse.de" date="1545393600">- Allow building with java 1.8.0.
- Use %license</changelog>
  <changelog author="peter@czanik.hu" date="1546948800">- added 2482.patch to resolve GPL-2.0 vs. BSD-4-Clause
  compatibility problem.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1548849600">- Dynamically detect used python3 version.</changelog>
  <changelog author="root &lt;peter@czanik.hu&gt;" date="1555070400">- oops, forgot to update version in syslog-ng.conf again...
- moved slack SCL to curl sub-package to silence warning
  on startup</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1567512000">- updated to 3.23.1 to resolve bnc#1143190
- removed 2482.patch as it was merged upstream
- add wensense &amp; netskope parsers
- add collectd support
- update syslog-ng.conf due to an undocumented include
  syntax used in the config was removed by uspstream
- add SCL to support Elasticsearch destination using
  the http() destination driver
- add SCL to parse junos and checkpoint logs
- changed the location of debuggercli files
- disabled native connector (Rust support)
- "ExcludeArch: i586 s390x" as workaround until bison is fixed</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1574856000">- remove ExcludeArch as bison workaround no more needed
- remove dependency on libgeoip to fix bnc#1156203
  (of course libmaxminddb is still supported)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1576152000">- update to 3.25.1
- many bug fixes, improved Redis destination performance</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1580731200">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  allow OBS to shortcut through -mini flavors.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1582891200">- Fix fixing Python shebang</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1583841600">- Update to 3.26.1
  * added a new option to multi-line file sources
  * python-http-header: added this new plugin, which makes it possible
    for users to implement HTTP header plugins in Python language
  * azure-auth-header: Added this new plugin, which generates
    authorization header for applications connecting to Azure
  * set-severity(): Added this new rewrite rule for changing message severity.
  * $(list-search): Added a new template function, which returns
    the first index of a pattern in a list.
  * other minor improvements
  * many bug fixes</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1586952000">- fix libevtlog package name</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1589198400">- fix bnc#1169385 by removing creating news log files from post,
  adding syslog-ng.conf options to create files/directories
  automatically, and commenting the relevant part out.</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1606392000">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt; 3.30.1-0" date="1607428800">- update to 3.30.1
- follow up snmp support changes
- add secure logging
- add PAN-OS parser
- add SumoLogic destination</changelog>
  <changelog author="Steve Kowalik &lt;steven.kowalik@suse.com&gt;" date="1626436800">- Set shebang for merge-grammar.py to be /usr/bin/python3.</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1627473600">- update to 3.33.2
- added support for parsing CEE and Fortigate logs
- added Discord destination
- added MQTT destination support
- python3 workdaround removed (commented out for now, fixed upstream)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1638792000">- update to 3.35.1
- remove "news" user creation, as it is no more referenced
  from the configuration file
- packaging fixes to remove a few warnings</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1645185600">- disable Java support for ARMv7 (compilation crashes)</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1674734400">- CVE-2022-38725: fix integer overflow in parsers (bsc#1207460)
  add 0001-Fix-buffer-handling-of-syslog-and-timestamp-parsers.patch</changelog>
</package>
<package pkgid="79bcd8c0c8bffcce8fb570df4c8bc8b2d4823297f731fcb59069b3c057a64519" name="syslog-ng-smtp" arch="aarch64">
  <version epoch="0" ver="3.35.1" rel="bp154.3.3.1"/>
  <changelog author="peter@czanik.hu" date="1545048000">- updated to 3.19.1
- changed summary again</changelog>
  <changelog author="schwab@suse.de" date="1545393600">- Allow building with java 1.8.0.
- Use %license</changelog>
  <changelog author="peter@czanik.hu" date="1546948800">- added 2482.patch to resolve GPL-2.0 vs. BSD-4-Clause
  compatibility problem.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1548849600">- Dynamically detect used python3 version.</changelog>
  <changelog author="root &lt;peter@czanik.hu&gt;" date="1555070400">- oops, forgot to update version in syslog-ng.conf again...
- moved slack SCL to curl sub-package to silence warning
  on startup</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1567512000">- updated to 3.23.1 to resolve bnc#1143190
- removed 2482.patch as it was merged upstream
- add wensense &amp; netskope parsers
- add collectd support
- update syslog-ng.conf due to an undocumented include
  syntax used in the config was removed by uspstream
- add SCL to support Elasticsearch destination using
  the http() destination driver
- add SCL to parse junos and checkpoint logs
- changed the location of debuggercli files
- disabled native connector (Rust support)
- "ExcludeArch: i586 s390x" as workaround until bison is fixed</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1574856000">- remove ExcludeArch as bison workaround no more needed
- remove dependency on libgeoip to fix bnc#1156203
  (of course libmaxminddb is still supported)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1576152000">- update to 3.25.1
- many bug fixes, improved Redis destination performance</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1580731200">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  allow OBS to shortcut through -mini flavors.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1582891200">- Fix fixing Python shebang</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1583841600">- Update to 3.26.1
  * added a new option to multi-line file sources
  * python-http-header: added this new plugin, which makes it possible
    for users to implement HTTP header plugins in Python language
  * azure-auth-header: Added this new plugin, which generates
    authorization header for applications connecting to Azure
  * set-severity(): Added this new rewrite rule for changing message severity.
  * $(list-search): Added a new template function, which returns
    the first index of a pattern in a list.
  * other minor improvements
  * many bug fixes</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1586952000">- fix libevtlog package name</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1589198400">- fix bnc#1169385 by removing creating news log files from post,
  adding syslog-ng.conf options to create files/directories
  automatically, and commenting the relevant part out.</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1606392000">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt; 3.30.1-0" date="1607428800">- update to 3.30.1
- follow up snmp support changes
- add secure logging
- add PAN-OS parser
- add SumoLogic destination</changelog>
  <changelog author="Steve Kowalik &lt;steven.kowalik@suse.com&gt;" date="1626436800">- Set shebang for merge-grammar.py to be /usr/bin/python3.</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1627473600">- update to 3.33.2
- added support for parsing CEE and Fortigate logs
- added Discord destination
- added MQTT destination support
- python3 workdaround removed (commented out for now, fixed upstream)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1638792000">- update to 3.35.1
- remove "news" user creation, as it is no more referenced
  from the configuration file
- packaging fixes to remove a few warnings</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1645185600">- disable Java support for ARMv7 (compilation crashes)</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1674734400">- CVE-2022-38725: fix integer overflow in parsers (bsc#1207460)
  add 0001-Fix-buffer-handling-of-syslog-and-timestamp-parsers.patch</changelog>
</package>
<package pkgid="06e016f1c9c7fdbea8d69a2e12b768c9109f6e7ad1f6575b27e97786f97ac534" name="syslog-ng-smtp" arch="ppc64le">
  <version epoch="0" ver="3.35.1" rel="bp154.3.3.1"/>
  <changelog author="peter@czanik.hu" date="1545048000">- updated to 3.19.1
- changed summary again</changelog>
  <changelog author="schwab@suse.de" date="1545393600">- Allow building with java 1.8.0.
- Use %license</changelog>
  <changelog author="peter@czanik.hu" date="1546948800">- added 2482.patch to resolve GPL-2.0 vs. BSD-4-Clause
  compatibility problem.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1548849600">- Dynamically detect used python3 version.</changelog>
  <changelog author="root &lt;peter@czanik.hu&gt;" date="1555070400">- oops, forgot to update version in syslog-ng.conf again...
- moved slack SCL to curl sub-package to silence warning
  on startup</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1567512000">- updated to 3.23.1 to resolve bnc#1143190
- removed 2482.patch as it was merged upstream
- add wensense &amp; netskope parsers
- add collectd support
- update syslog-ng.conf due to an undocumented include
  syntax used in the config was removed by uspstream
- add SCL to support Elasticsearch destination using
  the http() destination driver
- add SCL to parse junos and checkpoint logs
- changed the location of debuggercli files
- disabled native connector (Rust support)
- "ExcludeArch: i586 s390x" as workaround until bison is fixed</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1574856000">- remove ExcludeArch as bison workaround no more needed
- remove dependency on libgeoip to fix bnc#1156203
  (of course libmaxminddb is still supported)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1576152000">- update to 3.25.1
- many bug fixes, improved Redis destination performance</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1580731200">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  allow OBS to shortcut through -mini flavors.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1582891200">- Fix fixing Python shebang</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1583841600">- Update to 3.26.1
  * added a new option to multi-line file sources
  * python-http-header: added this new plugin, which makes it possible
    for users to implement HTTP header plugins in Python language
  * azure-auth-header: Added this new plugin, which generates
    authorization header for applications connecting to Azure
  * set-severity(): Added this new rewrite rule for changing message severity.
  * $(list-search): Added a new template function, which returns
    the first index of a pattern in a list.
  * other minor improvements
  * many bug fixes</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1586952000">- fix libevtlog package name</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1589198400">- fix bnc#1169385 by removing creating news log files from post,
  adding syslog-ng.conf options to create files/directories
  automatically, and commenting the relevant part out.</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1606392000">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt; 3.30.1-0" date="1607428800">- update to 3.30.1
- follow up snmp support changes
- add secure logging
- add PAN-OS parser
- add SumoLogic destination</changelog>
  <changelog author="Steve Kowalik &lt;steven.kowalik@suse.com&gt;" date="1626436800">- Set shebang for merge-grammar.py to be /usr/bin/python3.</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1627473600">- update to 3.33.2
- added support for parsing CEE and Fortigate logs
- added Discord destination
- added MQTT destination support
- python3 workdaround removed (commented out for now, fixed upstream)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1638792000">- update to 3.35.1
- remove "news" user creation, as it is no more referenced
  from the configuration file
- packaging fixes to remove a few warnings</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1645185600">- disable Java support for ARMv7 (compilation crashes)</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1674734400">- CVE-2022-38725: fix integer overflow in parsers (bsc#1207460)
  add 0001-Fix-buffer-handling-of-syslog-and-timestamp-parsers.patch</changelog>
</package>
<package pkgid="a30dea364df23bde00c3ddc14bcf0b2dd4ca3731fd6ac66996a48f045b893754" name="syslog-ng-smtp" arch="s390x">
  <version epoch="0" ver="3.35.1" rel="bp154.3.3.1"/>
  <changelog author="peter@czanik.hu" date="1545048000">- updated to 3.19.1
- changed summary again</changelog>
  <changelog author="schwab@suse.de" date="1545393600">- Allow building with java 1.8.0.
- Use %license</changelog>
  <changelog author="peter@czanik.hu" date="1546948800">- added 2482.patch to resolve GPL-2.0 vs. BSD-4-Clause
  compatibility problem.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1548849600">- Dynamically detect used python3 version.</changelog>
  <changelog author="root &lt;peter@czanik.hu&gt;" date="1555070400">- oops, forgot to update version in syslog-ng.conf again...
- moved slack SCL to curl sub-package to silence warning
  on startup</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1567512000">- updated to 3.23.1 to resolve bnc#1143190
- removed 2482.patch as it was merged upstream
- add wensense &amp; netskope parsers
- add collectd support
- update syslog-ng.conf due to an undocumented include
  syntax used in the config was removed by uspstream
- add SCL to support Elasticsearch destination using
  the http() destination driver
- add SCL to parse junos and checkpoint logs
- changed the location of debuggercli files
- disabled native connector (Rust support)
- "ExcludeArch: i586 s390x" as workaround until bison is fixed</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1574856000">- remove ExcludeArch as bison workaround no more needed
- remove dependency on libgeoip to fix bnc#1156203
  (of course libmaxminddb is still supported)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1576152000">- update to 3.25.1
- many bug fixes, improved Redis destination performance</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1580731200">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  allow OBS to shortcut through -mini flavors.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1582891200">- Fix fixing Python shebang</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1583841600">- Update to 3.26.1
  * added a new option to multi-line file sources
  * python-http-header: added this new plugin, which makes it possible
    for users to implement HTTP header plugins in Python language
  * azure-auth-header: Added this new plugin, which generates
    authorization header for applications connecting to Azure
  * set-severity(): Added this new rewrite rule for changing message severity.
  * $(list-search): Added a new template function, which returns
    the first index of a pattern in a list.
  * other minor improvements
  * many bug fixes</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1586952000">- fix libevtlog package name</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1589198400">- fix bnc#1169385 by removing creating news log files from post,
  adding syslog-ng.conf options to create files/directories
  automatically, and commenting the relevant part out.</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1606392000">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt; 3.30.1-0" date="1607428800">- update to 3.30.1
- follow up snmp support changes
- add secure logging
- add PAN-OS parser
- add SumoLogic destination</changelog>
  <changelog author="Steve Kowalik &lt;steven.kowalik@suse.com&gt;" date="1626436800">- Set shebang for merge-grammar.py to be /usr/bin/python3.</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1627473600">- update to 3.33.2
- added support for parsing CEE and Fortigate logs
- added Discord destination
- added MQTT destination support
- python3 workdaround removed (commented out for now, fixed upstream)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1638792000">- update to 3.35.1
- remove "news" user creation, as it is no more referenced
  from the configuration file
- packaging fixes to remove a few warnings</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1645185600">- disable Java support for ARMv7 (compilation crashes)</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1674734400">- CVE-2022-38725: fix integer overflow in parsers (bsc#1207460)
  add 0001-Fix-buffer-handling-of-syslog-and-timestamp-parsers.patch</changelog>
</package>
<package pkgid="7d025babee109dd544deab20d7709688356740d02435f44a1804a61f3b4e5398" name="syslog-ng-smtp" arch="x86_64">
  <version epoch="0" ver="3.35.1" rel="bp154.3.3.1"/>
  <changelog author="peter@czanik.hu" date="1545048000">- updated to 3.19.1
- changed summary again</changelog>
  <changelog author="schwab@suse.de" date="1545393600">- Allow building with java 1.8.0.
- Use %license</changelog>
  <changelog author="peter@czanik.hu" date="1546948800">- added 2482.patch to resolve GPL-2.0 vs. BSD-4-Clause
  compatibility problem.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1548849600">- Dynamically detect used python3 version.</changelog>
  <changelog author="root &lt;peter@czanik.hu&gt;" date="1555070400">- oops, forgot to update version in syslog-ng.conf again...
- moved slack SCL to curl sub-package to silence warning
  on startup</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1567512000">- updated to 3.23.1 to resolve bnc#1143190
- removed 2482.patch as it was merged upstream
- add wensense &amp; netskope parsers
- add collectd support
- update syslog-ng.conf due to an undocumented include
  syntax used in the config was removed by uspstream
- add SCL to support Elasticsearch destination using
  the http() destination driver
- add SCL to parse junos and checkpoint logs
- changed the location of debuggercli files
- disabled native connector (Rust support)
- "ExcludeArch: i586 s390x" as workaround until bison is fixed</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1574856000">- remove ExcludeArch as bison workaround no more needed
- remove dependency on libgeoip to fix bnc#1156203
  (of course libmaxminddb is still supported)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1576152000">- update to 3.25.1
- many bug fixes, improved Redis destination performance</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1580731200">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  allow OBS to shortcut through -mini flavors.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1582891200">- Fix fixing Python shebang</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1583841600">- Update to 3.26.1
  * added a new option to multi-line file sources
  * python-http-header: added this new plugin, which makes it possible
    for users to implement HTTP header plugins in Python language
  * azure-auth-header: Added this new plugin, which generates
    authorization header for applications connecting to Azure
  * set-severity(): Added this new rewrite rule for changing message severity.
  * $(list-search): Added a new template function, which returns
    the first index of a pattern in a list.
  * other minor improvements
  * many bug fixes</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1586952000">- fix libevtlog package name</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1589198400">- fix bnc#1169385 by removing creating news log files from post,
  adding syslog-ng.conf options to create files/directories
  automatically, and commenting the relevant part out.</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1606392000">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt; 3.30.1-0" date="1607428800">- update to 3.30.1
- follow up snmp support changes
- add secure logging
- add PAN-OS parser
- add SumoLogic destination</changelog>
  <changelog author="Steve Kowalik &lt;steven.kowalik@suse.com&gt;" date="1626436800">- Set shebang for merge-grammar.py to be /usr/bin/python3.</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1627473600">- update to 3.33.2
- added support for parsing CEE and Fortigate logs
- added Discord destination
- added MQTT destination support
- python3 workdaround removed (commented out for now, fixed upstream)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1638792000">- update to 3.35.1
- remove "news" user creation, as it is no more referenced
  from the configuration file
- packaging fixes to remove a few warnings</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1645185600">- disable Java support for ARMv7 (compilation crashes)</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1674734400">- CVE-2022-38725: fix integer overflow in parsers (bsc#1207460)
  add 0001-Fix-buffer-handling-of-syslog-and-timestamp-parsers.patch</changelog>
</package>
<package pkgid="7c8781d302b26fd8ae99562388aade01d03011ef67fb5825e48f23f671d13227" name="syslog-ng-snmp" arch="aarch64">
  <version epoch="0" ver="3.35.1" rel="bp154.3.3.1"/>
  <changelog author="peter@czanik.hu" date="1545048000">- updated to 3.19.1
- changed summary again</changelog>
  <changelog author="schwab@suse.de" date="1545393600">- Allow building with java 1.8.0.
- Use %license</changelog>
  <changelog author="peter@czanik.hu" date="1546948800">- added 2482.patch to resolve GPL-2.0 vs. BSD-4-Clause
  compatibility problem.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1548849600">- Dynamically detect used python3 version.</changelog>
  <changelog author="root &lt;peter@czanik.hu&gt;" date="1555070400">- oops, forgot to update version in syslog-ng.conf again...
- moved slack SCL to curl sub-package to silence warning
  on startup</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1567512000">- updated to 3.23.1 to resolve bnc#1143190
- removed 2482.patch as it was merged upstream
- add wensense &amp; netskope parsers
- add collectd support
- update syslog-ng.conf due to an undocumented include
  syntax used in the config was removed by uspstream
- add SCL to support Elasticsearch destination using
  the http() destination driver
- add SCL to parse junos and checkpoint logs
- changed the location of debuggercli files
- disabled native connector (Rust support)
- "ExcludeArch: i586 s390x" as workaround until bison is fixed</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1574856000">- remove ExcludeArch as bison workaround no more needed
- remove dependency on libgeoip to fix bnc#1156203
  (of course libmaxminddb is still supported)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1576152000">- update to 3.25.1
- many bug fixes, improved Redis destination performance</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1580731200">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  allow OBS to shortcut through -mini flavors.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1582891200">- Fix fixing Python shebang</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1583841600">- Update to 3.26.1
  * added a new option to multi-line file sources
  * python-http-header: added this new plugin, which makes it possible
    for users to implement HTTP header plugins in Python language
  * azure-auth-header: Added this new plugin, which generates
    authorization header for applications connecting to Azure
  * set-severity(): Added this new rewrite rule for changing message severity.
  * $(list-search): Added a new template function, which returns
    the first index of a pattern in a list.
  * other minor improvements
  * many bug fixes</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1586952000">- fix libevtlog package name</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1589198400">- fix bnc#1169385 by removing creating news log files from post,
  adding syslog-ng.conf options to create files/directories
  automatically, and commenting the relevant part out.</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1606392000">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt; 3.30.1-0" date="1607428800">- update to 3.30.1
- follow up snmp support changes
- add secure logging
- add PAN-OS parser
- add SumoLogic destination</changelog>
  <changelog author="Steve Kowalik &lt;steven.kowalik@suse.com&gt;" date="1626436800">- Set shebang for merge-grammar.py to be /usr/bin/python3.</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1627473600">- update to 3.33.2
- added support for parsing CEE and Fortigate logs
- added Discord destination
- added MQTT destination support
- python3 workdaround removed (commented out for now, fixed upstream)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1638792000">- update to 3.35.1
- remove "news" user creation, as it is no more referenced
  from the configuration file
- packaging fixes to remove a few warnings</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1645185600">- disable Java support for ARMv7 (compilation crashes)</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1674734400">- CVE-2022-38725: fix integer overflow in parsers (bsc#1207460)
  add 0001-Fix-buffer-handling-of-syslog-and-timestamp-parsers.patch</changelog>
</package>
<package pkgid="5534666614ca61e13da36d000586cd57896cb28e4db469b10460966bd3aebef4" name="syslog-ng-snmp" arch="ppc64le">
  <version epoch="0" ver="3.35.1" rel="bp154.3.3.1"/>
  <changelog author="peter@czanik.hu" date="1545048000">- updated to 3.19.1
- changed summary again</changelog>
  <changelog author="schwab@suse.de" date="1545393600">- Allow building with java 1.8.0.
- Use %license</changelog>
  <changelog author="peter@czanik.hu" date="1546948800">- added 2482.patch to resolve GPL-2.0 vs. BSD-4-Clause
  compatibility problem.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1548849600">- Dynamically detect used python3 version.</changelog>
  <changelog author="root &lt;peter@czanik.hu&gt;" date="1555070400">- oops, forgot to update version in syslog-ng.conf again...
- moved slack SCL to curl sub-package to silence warning
  on startup</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1567512000">- updated to 3.23.1 to resolve bnc#1143190
- removed 2482.patch as it was merged upstream
- add wensense &amp; netskope parsers
- add collectd support
- update syslog-ng.conf due to an undocumented include
  syntax used in the config was removed by uspstream
- add SCL to support Elasticsearch destination using
  the http() destination driver
- add SCL to parse junos and checkpoint logs
- changed the location of debuggercli files
- disabled native connector (Rust support)
- "ExcludeArch: i586 s390x" as workaround until bison is fixed</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1574856000">- remove ExcludeArch as bison workaround no more needed
- remove dependency on libgeoip to fix bnc#1156203
  (of course libmaxminddb is still supported)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1576152000">- update to 3.25.1
- many bug fixes, improved Redis destination performance</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1580731200">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  allow OBS to shortcut through -mini flavors.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1582891200">- Fix fixing Python shebang</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1583841600">- Update to 3.26.1
  * added a new option to multi-line file sources
  * python-http-header: added this new plugin, which makes it possible
    for users to implement HTTP header plugins in Python language
  * azure-auth-header: Added this new plugin, which generates
    authorization header for applications connecting to Azure
  * set-severity(): Added this new rewrite rule for changing message severity.
  * $(list-search): Added a new template function, which returns
    the first index of a pattern in a list.
  * other minor improvements
  * many bug fixes</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1586952000">- fix libevtlog package name</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1589198400">- fix bnc#1169385 by removing creating news log files from post,
  adding syslog-ng.conf options to create files/directories
  automatically, and commenting the relevant part out.</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1606392000">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt; 3.30.1-0" date="1607428800">- update to 3.30.1
- follow up snmp support changes
- add secure logging
- add PAN-OS parser
- add SumoLogic destination</changelog>
  <changelog author="Steve Kowalik &lt;steven.kowalik@suse.com&gt;" date="1626436800">- Set shebang for merge-grammar.py to be /usr/bin/python3.</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1627473600">- update to 3.33.2
- added support for parsing CEE and Fortigate logs
- added Discord destination
- added MQTT destination support
- python3 workdaround removed (commented out for now, fixed upstream)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1638792000">- update to 3.35.1
- remove "news" user creation, as it is no more referenced
  from the configuration file
- packaging fixes to remove a few warnings</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1645185600">- disable Java support for ARMv7 (compilation crashes)</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1674734400">- CVE-2022-38725: fix integer overflow in parsers (bsc#1207460)
  add 0001-Fix-buffer-handling-of-syslog-and-timestamp-parsers.patch</changelog>
</package>
<package pkgid="9572922f49e74a20dc9b573725620d7af3d362e9420bbf994d36d8d1fe3a1494" name="syslog-ng-snmp" arch="s390x">
  <version epoch="0" ver="3.35.1" rel="bp154.3.3.1"/>
  <changelog author="peter@czanik.hu" date="1545048000">- updated to 3.19.1
- changed summary again</changelog>
  <changelog author="schwab@suse.de" date="1545393600">- Allow building with java 1.8.0.
- Use %license</changelog>
  <changelog author="peter@czanik.hu" date="1546948800">- added 2482.patch to resolve GPL-2.0 vs. BSD-4-Clause
  compatibility problem.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1548849600">- Dynamically detect used python3 version.</changelog>
  <changelog author="root &lt;peter@czanik.hu&gt;" date="1555070400">- oops, forgot to update version in syslog-ng.conf again...
- moved slack SCL to curl sub-package to silence warning
  on startup</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1567512000">- updated to 3.23.1 to resolve bnc#1143190
- removed 2482.patch as it was merged upstream
- add wensense &amp; netskope parsers
- add collectd support
- update syslog-ng.conf due to an undocumented include
  syntax used in the config was removed by uspstream
- add SCL to support Elasticsearch destination using
  the http() destination driver
- add SCL to parse junos and checkpoint logs
- changed the location of debuggercli files
- disabled native connector (Rust support)
- "ExcludeArch: i586 s390x" as workaround until bison is fixed</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1574856000">- remove ExcludeArch as bison workaround no more needed
- remove dependency on libgeoip to fix bnc#1156203
  (of course libmaxminddb is still supported)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1576152000">- update to 3.25.1
- many bug fixes, improved Redis destination performance</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1580731200">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  allow OBS to shortcut through -mini flavors.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1582891200">- Fix fixing Python shebang</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1583841600">- Update to 3.26.1
  * added a new option to multi-line file sources
  * python-http-header: added this new plugin, which makes it possible
    for users to implement HTTP header plugins in Python language
  * azure-auth-header: Added this new plugin, which generates
    authorization header for applications connecting to Azure
  * set-severity(): Added this new rewrite rule for changing message severity.
  * $(list-search): Added a new template function, which returns
    the first index of a pattern in a list.
  * other minor improvements
  * many bug fixes</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1586952000">- fix libevtlog package name</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1589198400">- fix bnc#1169385 by removing creating news log files from post,
  adding syslog-ng.conf options to create files/directories
  automatically, and commenting the relevant part out.</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1606392000">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt; 3.30.1-0" date="1607428800">- update to 3.30.1
- follow up snmp support changes
- add secure logging
- add PAN-OS parser
- add SumoLogic destination</changelog>
  <changelog author="Steve Kowalik &lt;steven.kowalik@suse.com&gt;" date="1626436800">- Set shebang for merge-grammar.py to be /usr/bin/python3.</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1627473600">- update to 3.33.2
- added support for parsing CEE and Fortigate logs
- added Discord destination
- added MQTT destination support
- python3 workdaround removed (commented out for now, fixed upstream)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1638792000">- update to 3.35.1
- remove "news" user creation, as it is no more referenced
  from the configuration file
- packaging fixes to remove a few warnings</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1645185600">- disable Java support for ARMv7 (compilation crashes)</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1674734400">- CVE-2022-38725: fix integer overflow in parsers (bsc#1207460)
  add 0001-Fix-buffer-handling-of-syslog-and-timestamp-parsers.patch</changelog>
</package>
<package pkgid="3dd9e83e30f97c8f2e547e373e27773072b66678f72509abc1512f55d7ba879d" name="syslog-ng-snmp" arch="x86_64">
  <version epoch="0" ver="3.35.1" rel="bp154.3.3.1"/>
  <changelog author="peter@czanik.hu" date="1545048000">- updated to 3.19.1
- changed summary again</changelog>
  <changelog author="schwab@suse.de" date="1545393600">- Allow building with java 1.8.0.
- Use %license</changelog>
  <changelog author="peter@czanik.hu" date="1546948800">- added 2482.patch to resolve GPL-2.0 vs. BSD-4-Clause
  compatibility problem.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1548849600">- Dynamically detect used python3 version.</changelog>
  <changelog author="root &lt;peter@czanik.hu&gt;" date="1555070400">- oops, forgot to update version in syslog-ng.conf again...
- moved slack SCL to curl sub-package to silence warning
  on startup</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1567512000">- updated to 3.23.1 to resolve bnc#1143190
- removed 2482.patch as it was merged upstream
- add wensense &amp; netskope parsers
- add collectd support
- update syslog-ng.conf due to an undocumented include
  syntax used in the config was removed by uspstream
- add SCL to support Elasticsearch destination using
  the http() destination driver
- add SCL to parse junos and checkpoint logs
- changed the location of debuggercli files
- disabled native connector (Rust support)
- "ExcludeArch: i586 s390x" as workaround until bison is fixed</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1574856000">- remove ExcludeArch as bison workaround no more needed
- remove dependency on libgeoip to fix bnc#1156203
  (of course libmaxminddb is still supported)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1576152000">- update to 3.25.1
- many bug fixes, improved Redis destination performance</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1580731200">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  allow OBS to shortcut through -mini flavors.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1582891200">- Fix fixing Python shebang</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1583841600">- Update to 3.26.1
  * added a new option to multi-line file sources
  * python-http-header: added this new plugin, which makes it possible
    for users to implement HTTP header plugins in Python language
  * azure-auth-header: Added this new plugin, which generates
    authorization header for applications connecting to Azure
  * set-severity(): Added this new rewrite rule for changing message severity.
  * $(list-search): Added a new template function, which returns
    the first index of a pattern in a list.
  * other minor improvements
  * many bug fixes</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1586952000">- fix libevtlog package name</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1589198400">- fix bnc#1169385 by removing creating news log files from post,
  adding syslog-ng.conf options to create files/directories
  automatically, and commenting the relevant part out.</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1606392000">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt; 3.30.1-0" date="1607428800">- update to 3.30.1
- follow up snmp support changes
- add secure logging
- add PAN-OS parser
- add SumoLogic destination</changelog>
  <changelog author="Steve Kowalik &lt;steven.kowalik@suse.com&gt;" date="1626436800">- Set shebang for merge-grammar.py to be /usr/bin/python3.</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1627473600">- update to 3.33.2
- added support for parsing CEE and Fortigate logs
- added Discord destination
- added MQTT destination support
- python3 workdaround removed (commented out for now, fixed upstream)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1638792000">- update to 3.35.1
- remove "news" user creation, as it is no more referenced
  from the configuration file
- packaging fixes to remove a few warnings</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1645185600">- disable Java support for ARMv7 (compilation crashes)</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1674734400">- CVE-2022-38725: fix integer overflow in parsers (bsc#1207460)
  add 0001-Fix-buffer-handling-of-syslog-and-timestamp-parsers.patch</changelog>
</package>
<package pkgid="16ad98b5c8d60a6b93a3abee174ab925830e4ae5f70156dd7b5591d011bb9a3e" name="syslog-ng-sql" arch="aarch64">
  <version epoch="0" ver="3.35.1" rel="bp154.3.3.1"/>
  <changelog author="peter@czanik.hu" date="1545048000">- updated to 3.19.1
- changed summary again</changelog>
  <changelog author="schwab@suse.de" date="1545393600">- Allow building with java 1.8.0.
- Use %license</changelog>
  <changelog author="peter@czanik.hu" date="1546948800">- added 2482.patch to resolve GPL-2.0 vs. BSD-4-Clause
  compatibility problem.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1548849600">- Dynamically detect used python3 version.</changelog>
  <changelog author="root &lt;peter@czanik.hu&gt;" date="1555070400">- oops, forgot to update version in syslog-ng.conf again...
- moved slack SCL to curl sub-package to silence warning
  on startup</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1567512000">- updated to 3.23.1 to resolve bnc#1143190
- removed 2482.patch as it was merged upstream
- add wensense &amp; netskope parsers
- add collectd support
- update syslog-ng.conf due to an undocumented include
  syntax used in the config was removed by uspstream
- add SCL to support Elasticsearch destination using
  the http() destination driver
- add SCL to parse junos and checkpoint logs
- changed the location of debuggercli files
- disabled native connector (Rust support)
- "ExcludeArch: i586 s390x" as workaround until bison is fixed</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1574856000">- remove ExcludeArch as bison workaround no more needed
- remove dependency on libgeoip to fix bnc#1156203
  (of course libmaxminddb is still supported)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1576152000">- update to 3.25.1
- many bug fixes, improved Redis destination performance</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1580731200">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  allow OBS to shortcut through -mini flavors.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1582891200">- Fix fixing Python shebang</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1583841600">- Update to 3.26.1
  * added a new option to multi-line file sources
  * python-http-header: added this new plugin, which makes it possible
    for users to implement HTTP header plugins in Python language
  * azure-auth-header: Added this new plugin, which generates
    authorization header for applications connecting to Azure
  * set-severity(): Added this new rewrite rule for changing message severity.
  * $(list-search): Added a new template function, which returns
    the first index of a pattern in a list.
  * other minor improvements
  * many bug fixes</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1586952000">- fix libevtlog package name</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1589198400">- fix bnc#1169385 by removing creating news log files from post,
  adding syslog-ng.conf options to create files/directories
  automatically, and commenting the relevant part out.</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1606392000">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt; 3.30.1-0" date="1607428800">- update to 3.30.1
- follow up snmp support changes
- add secure logging
- add PAN-OS parser
- add SumoLogic destination</changelog>
  <changelog author="Steve Kowalik &lt;steven.kowalik@suse.com&gt;" date="1626436800">- Set shebang for merge-grammar.py to be /usr/bin/python3.</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1627473600">- update to 3.33.2
- added support for parsing CEE and Fortigate logs
- added Discord destination
- added MQTT destination support
- python3 workdaround removed (commented out for now, fixed upstream)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1638792000">- update to 3.35.1
- remove "news" user creation, as it is no more referenced
  from the configuration file
- packaging fixes to remove a few warnings</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1645185600">- disable Java support for ARMv7 (compilation crashes)</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1674734400">- CVE-2022-38725: fix integer overflow in parsers (bsc#1207460)
  add 0001-Fix-buffer-handling-of-syslog-and-timestamp-parsers.patch</changelog>
</package>
<package pkgid="d16ce4d2fea4ab87dacaf2f5c7419033dfe3967240e80792e0bd5bfc624de75f" name="syslog-ng-sql" arch="ppc64le">
  <version epoch="0" ver="3.35.1" rel="bp154.3.3.1"/>
  <changelog author="peter@czanik.hu" date="1545048000">- updated to 3.19.1
- changed summary again</changelog>
  <changelog author="schwab@suse.de" date="1545393600">- Allow building with java 1.8.0.
- Use %license</changelog>
  <changelog author="peter@czanik.hu" date="1546948800">- added 2482.patch to resolve GPL-2.0 vs. BSD-4-Clause
  compatibility problem.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1548849600">- Dynamically detect used python3 version.</changelog>
  <changelog author="root &lt;peter@czanik.hu&gt;" date="1555070400">- oops, forgot to update version in syslog-ng.conf again...
- moved slack SCL to curl sub-package to silence warning
  on startup</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1567512000">- updated to 3.23.1 to resolve bnc#1143190
- removed 2482.patch as it was merged upstream
- add wensense &amp; netskope parsers
- add collectd support
- update syslog-ng.conf due to an undocumented include
  syntax used in the config was removed by uspstream
- add SCL to support Elasticsearch destination using
  the http() destination driver
- add SCL to parse junos and checkpoint logs
- changed the location of debuggercli files
- disabled native connector (Rust support)
- "ExcludeArch: i586 s390x" as workaround until bison is fixed</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1574856000">- remove ExcludeArch as bison workaround no more needed
- remove dependency on libgeoip to fix bnc#1156203
  (of course libmaxminddb is still supported)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1576152000">- update to 3.25.1
- many bug fixes, improved Redis destination performance</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1580731200">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  allow OBS to shortcut through -mini flavors.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1582891200">- Fix fixing Python shebang</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1583841600">- Update to 3.26.1
  * added a new option to multi-line file sources
  * python-http-header: added this new plugin, which makes it possible
    for users to implement HTTP header plugins in Python language
  * azure-auth-header: Added this new plugin, which generates
    authorization header for applications connecting to Azure
  * set-severity(): Added this new rewrite rule for changing message severity.
  * $(list-search): Added a new template function, which returns
    the first index of a pattern in a list.
  * other minor improvements
  * many bug fixes</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1586952000">- fix libevtlog package name</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1589198400">- fix bnc#1169385 by removing creating news log files from post,
  adding syslog-ng.conf options to create files/directories
  automatically, and commenting the relevant part out.</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1606392000">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt; 3.30.1-0" date="1607428800">- update to 3.30.1
- follow up snmp support changes
- add secure logging
- add PAN-OS parser
- add SumoLogic destination</changelog>
  <changelog author="Steve Kowalik &lt;steven.kowalik@suse.com&gt;" date="1626436800">- Set shebang for merge-grammar.py to be /usr/bin/python3.</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1627473600">- update to 3.33.2
- added support for parsing CEE and Fortigate logs
- added Discord destination
- added MQTT destination support
- python3 workdaround removed (commented out for now, fixed upstream)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1638792000">- update to 3.35.1
- remove "news" user creation, as it is no more referenced
  from the configuration file
- packaging fixes to remove a few warnings</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1645185600">- disable Java support for ARMv7 (compilation crashes)</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1674734400">- CVE-2022-38725: fix integer overflow in parsers (bsc#1207460)
  add 0001-Fix-buffer-handling-of-syslog-and-timestamp-parsers.patch</changelog>
</package>
<package pkgid="3047edc9a842291bace78dbeaca3db570b2778c7872742c20da8d239dcbafd51" name="syslog-ng-sql" arch="s390x">
  <version epoch="0" ver="3.35.1" rel="bp154.3.3.1"/>
  <changelog author="peter@czanik.hu" date="1545048000">- updated to 3.19.1
- changed summary again</changelog>
  <changelog author="schwab@suse.de" date="1545393600">- Allow building with java 1.8.0.
- Use %license</changelog>
  <changelog author="peter@czanik.hu" date="1546948800">- added 2482.patch to resolve GPL-2.0 vs. BSD-4-Clause
  compatibility problem.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1548849600">- Dynamically detect used python3 version.</changelog>
  <changelog author="root &lt;peter@czanik.hu&gt;" date="1555070400">- oops, forgot to update version in syslog-ng.conf again...
- moved slack SCL to curl sub-package to silence warning
  on startup</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1567512000">- updated to 3.23.1 to resolve bnc#1143190
- removed 2482.patch as it was merged upstream
- add wensense &amp; netskope parsers
- add collectd support
- update syslog-ng.conf due to an undocumented include
  syntax used in the config was removed by uspstream
- add SCL to support Elasticsearch destination using
  the http() destination driver
- add SCL to parse junos and checkpoint logs
- changed the location of debuggercli files
- disabled native connector (Rust support)
- "ExcludeArch: i586 s390x" as workaround until bison is fixed</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1574856000">- remove ExcludeArch as bison workaround no more needed
- remove dependency on libgeoip to fix bnc#1156203
  (of course libmaxminddb is still supported)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1576152000">- update to 3.25.1
- many bug fixes, improved Redis destination performance</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1580731200">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  allow OBS to shortcut through -mini flavors.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1582891200">- Fix fixing Python shebang</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1583841600">- Update to 3.26.1
  * added a new option to multi-line file sources
  * python-http-header: added this new plugin, which makes it possible
    for users to implement HTTP header plugins in Python language
  * azure-auth-header: Added this new plugin, which generates
    authorization header for applications connecting to Azure
  * set-severity(): Added this new rewrite rule for changing message severity.
  * $(list-search): Added a new template function, which returns
    the first index of a pattern in a list.
  * other minor improvements
  * many bug fixes</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1586952000">- fix libevtlog package name</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1589198400">- fix bnc#1169385 by removing creating news log files from post,
  adding syslog-ng.conf options to create files/directories
  automatically, and commenting the relevant part out.</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1606392000">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt; 3.30.1-0" date="1607428800">- update to 3.30.1
- follow up snmp support changes
- add secure logging
- add PAN-OS parser
- add SumoLogic destination</changelog>
  <changelog author="Steve Kowalik &lt;steven.kowalik@suse.com&gt;" date="1626436800">- Set shebang for merge-grammar.py to be /usr/bin/python3.</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1627473600">- update to 3.33.2
- added support for parsing CEE and Fortigate logs
- added Discord destination
- added MQTT destination support
- python3 workdaround removed (commented out for now, fixed upstream)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1638792000">- update to 3.35.1
- remove "news" user creation, as it is no more referenced
  from the configuration file
- packaging fixes to remove a few warnings</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1645185600">- disable Java support for ARMv7 (compilation crashes)</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1674734400">- CVE-2022-38725: fix integer overflow in parsers (bsc#1207460)
  add 0001-Fix-buffer-handling-of-syslog-and-timestamp-parsers.patch</changelog>
</package>
<package pkgid="84bb39a9dcdb4861db288f438ed8af137aaf140056e54e391dbb265791c5c777" name="syslog-ng-sql" arch="x86_64">
  <version epoch="0" ver="3.35.1" rel="bp154.3.3.1"/>
  <changelog author="peter@czanik.hu" date="1545048000">- updated to 3.19.1
- changed summary again</changelog>
  <changelog author="schwab@suse.de" date="1545393600">- Allow building with java 1.8.0.
- Use %license</changelog>
  <changelog author="peter@czanik.hu" date="1546948800">- added 2482.patch to resolve GPL-2.0 vs. BSD-4-Clause
  compatibility problem.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1548849600">- Dynamically detect used python3 version.</changelog>
  <changelog author="root &lt;peter@czanik.hu&gt;" date="1555070400">- oops, forgot to update version in syslog-ng.conf again...
- moved slack SCL to curl sub-package to silence warning
  on startup</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1567512000">- updated to 3.23.1 to resolve bnc#1143190
- removed 2482.patch as it was merged upstream
- add wensense &amp; netskope parsers
- add collectd support
- update syslog-ng.conf due to an undocumented include
  syntax used in the config was removed by uspstream
- add SCL to support Elasticsearch destination using
  the http() destination driver
- add SCL to parse junos and checkpoint logs
- changed the location of debuggercli files
- disabled native connector (Rust support)
- "ExcludeArch: i586 s390x" as workaround until bison is fixed</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1574856000">- remove ExcludeArch as bison workaround no more needed
- remove dependency on libgeoip to fix bnc#1156203
  (of course libmaxminddb is still supported)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1576152000">- update to 3.25.1
- many bug fixes, improved Redis destination performance</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1580731200">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  allow OBS to shortcut through -mini flavors.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1582891200">- Fix fixing Python shebang</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1583841600">- Update to 3.26.1
  * added a new option to multi-line file sources
  * python-http-header: added this new plugin, which makes it possible
    for users to implement HTTP header plugins in Python language
  * azure-auth-header: Added this new plugin, which generates
    authorization header for applications connecting to Azure
  * set-severity(): Added this new rewrite rule for changing message severity.
  * $(list-search): Added a new template function, which returns
    the first index of a pattern in a list.
  * other minor improvements
  * many bug fixes</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1586952000">- fix libevtlog package name</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1589198400">- fix bnc#1169385 by removing creating news log files from post,
  adding syslog-ng.conf options to create files/directories
  automatically, and commenting the relevant part out.</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1606392000">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt; 3.30.1-0" date="1607428800">- update to 3.30.1
- follow up snmp support changes
- add secure logging
- add PAN-OS parser
- add SumoLogic destination</changelog>
  <changelog author="Steve Kowalik &lt;steven.kowalik@suse.com&gt;" date="1626436800">- Set shebang for merge-grammar.py to be /usr/bin/python3.</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1627473600">- update to 3.33.2
- added support for parsing CEE and Fortigate logs
- added Discord destination
- added MQTT destination support
- python3 workdaround removed (commented out for now, fixed upstream)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1638792000">- update to 3.35.1
- remove "news" user creation, as it is no more referenced
  from the configuration file
- packaging fixes to remove a few warnings</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1645185600">- disable Java support for ARMv7 (compilation crashes)</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1674734400">- CVE-2022-38725: fix integer overflow in parsers (bsc#1207460)
  add 0001-Fix-buffer-handling-of-syslog-and-timestamp-parsers.patch</changelog>
</package>
<package pkgid="f5e462718dfaa187209488b09742ff08e44ef44847ef0e1686d0af26c9b454c8" name="systemd-zram-service" arch="noarch">
  <version epoch="0" ver="0.2.1" rel="bp154.3.3.1"/>
  <changelog author="malcolmlewis@opensuse.org" date="1328616000">- Initial build.</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1542628800">- Cleanup spec file for submission, (boo#1116056).</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1545048000">- Improve package description.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1637755200">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * zramswap.service</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1657886400">- Drop hardenings again. The current set causes issues (bsc#1193402)</changelog>
</package>
<package pkgid="a1bdbfe3978cf9c661a3fffaddd4b6622734bb14d936170f0b48188cafa8cd07" name="systemd-zram-service" arch="src">
  <version epoch="0" ver="0.2.1" rel="bp154.3.3.1"/>
  <changelog author="malcolmlewis@opensuse.org" date="1328616000">- Initial build.</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1542628800">- Cleanup spec file for submission, (boo#1116056).</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1545048000">- Improve package description.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1637755200">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * zramswap.service</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1657886400">- Drop hardenings again. The current set causes issues (bsc#1193402)</changelog>
</package>
<package pkgid="0054fa001fd60c81fac943d299348c1261f15f57d42b22ddad2c0496d48a7eea" name="tclx" arch="aarch64">
  <version epoch="0" ver="8.4.4" rel="bp154.2.3.1"/>
  <changelog author="ro@suse.de" date="1100174400">- fixed file list</changelog>
  <changelog author="max@suse.de" date="1122379200">- New CVS snapshot: tclx8.4-20050712
- Moved script library to /usr/share/tcl .</changelog>
  <changelog author="ro@suse.de" date="1134561600">- fix typo in tcl configure script</changelog>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="coolo@suse.com" date="1324468800">- remove call to suse_update_config (very old work around)</changelog>
  <changelog author="coolo@suse.com" date="1324468801">- add autoconf as buildrequire to avoid implicit dependency</changelog>
  <changelog author="coolo@suse.com" date="1362139200">- update license to new format</changelog>
  <changelog author="max@suse.com" date="1371729600">- Update to 8.4.1 to fix build with Tcl 8.6.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1621339200">- Update to version 8.4.4
  * Maintained by FlightAware
  * Remove CONST84 use for upcoming Tcl 8.7 release.
  * Adds coalesce command.
  * Don't iterate over tail calls, since tailcall can only be
    called in a proc context.
  * Ordered traversal of directories in for_recursive_glob to
    fix tests.
- Drop unused tclx.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1666699200">- Version 8.4.4 presents itself as being 8.6 internally. Adjust
  installation path, so that it can still be loaded.</changelog>
</package>
<package pkgid="035279a3a379dcd2090d1aecc4f908f6003b49018d5a605a6128d41174a914ce" name="tclx" arch="i586">
  <version epoch="0" ver="8.4.4" rel="bp154.2.3.1"/>
  <changelog author="ro@suse.de" date="1100174400">- fixed file list</changelog>
  <changelog author="max@suse.de" date="1122379200">- New CVS snapshot: tclx8.4-20050712
- Moved script library to /usr/share/tcl .</changelog>
  <changelog author="ro@suse.de" date="1134561600">- fix typo in tcl configure script</changelog>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="coolo@suse.com" date="1324468800">- remove call to suse_update_config (very old work around)</changelog>
  <changelog author="coolo@suse.com" date="1324468801">- add autoconf as buildrequire to avoid implicit dependency</changelog>
  <changelog author="coolo@suse.com" date="1362139200">- update license to new format</changelog>
  <changelog author="max@suse.com" date="1371729600">- Update to 8.4.1 to fix build with Tcl 8.6.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1621339200">- Update to version 8.4.4
  * Maintained by FlightAware
  * Remove CONST84 use for upcoming Tcl 8.7 release.
  * Adds coalesce command.
  * Don't iterate over tail calls, since tailcall can only be
    called in a proc context.
  * Ordered traversal of directories in for_recursive_glob to
    fix tests.
- Drop unused tclx.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1666699200">- Version 8.4.4 presents itself as being 8.6 internally. Adjust
  installation path, so that it can still be loaded.</changelog>
</package>
<package pkgid="cf1078104181db4d5ddada93e175ca40fb0c12a84b0dea22e0535fb5c03d6f9b" name="tclx" arch="ppc64le">
  <version epoch="0" ver="8.4.4" rel="bp154.2.3.1"/>
  <changelog author="ro@suse.de" date="1100174400">- fixed file list</changelog>
  <changelog author="max@suse.de" date="1122379200">- New CVS snapshot: tclx8.4-20050712
- Moved script library to /usr/share/tcl .</changelog>
  <changelog author="ro@suse.de" date="1134561600">- fix typo in tcl configure script</changelog>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="coolo@suse.com" date="1324468800">- remove call to suse_update_config (very old work around)</changelog>
  <changelog author="coolo@suse.com" date="1324468801">- add autoconf as buildrequire to avoid implicit dependency</changelog>
  <changelog author="coolo@suse.com" date="1362139200">- update license to new format</changelog>
  <changelog author="max@suse.com" date="1371729600">- Update to 8.4.1 to fix build with Tcl 8.6.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1621339200">- Update to version 8.4.4
  * Maintained by FlightAware
  * Remove CONST84 use for upcoming Tcl 8.7 release.
  * Adds coalesce command.
  * Don't iterate over tail calls, since tailcall can only be
    called in a proc context.
  * Ordered traversal of directories in for_recursive_glob to
    fix tests.
- Drop unused tclx.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1666699200">- Version 8.4.4 presents itself as being 8.6 internally. Adjust
  installation path, so that it can still be loaded.</changelog>
</package>
<package pkgid="ae70f582f29e7ca773ec72982a13037eaaad8e124b1e6c41fd3523d9b042a0bc" name="tclx" arch="s390x">
  <version epoch="0" ver="8.4.4" rel="bp154.2.3.1"/>
  <changelog author="ro@suse.de" date="1100174400">- fixed file list</changelog>
  <changelog author="max@suse.de" date="1122379200">- New CVS snapshot: tclx8.4-20050712
- Moved script library to /usr/share/tcl .</changelog>
  <changelog author="ro@suse.de" date="1134561600">- fix typo in tcl configure script</changelog>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="coolo@suse.com" date="1324468800">- remove call to suse_update_config (very old work around)</changelog>
  <changelog author="coolo@suse.com" date="1324468801">- add autoconf as buildrequire to avoid implicit dependency</changelog>
  <changelog author="coolo@suse.com" date="1362139200">- update license to new format</changelog>
  <changelog author="max@suse.com" date="1371729600">- Update to 8.4.1 to fix build with Tcl 8.6.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1621339200">- Update to version 8.4.4
  * Maintained by FlightAware
  * Remove CONST84 use for upcoming Tcl 8.7 release.
  * Adds coalesce command.
  * Don't iterate over tail calls, since tailcall can only be
    called in a proc context.
  * Ordered traversal of directories in for_recursive_glob to
    fix tests.
- Drop unused tclx.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1666699200">- Version 8.4.4 presents itself as being 8.6 internally. Adjust
  installation path, so that it can still be loaded.</changelog>
</package>
<package pkgid="7ca1cd6af7798ab050d3ef761810a026775b6c370934bd8d5490534d195c0357" name="tclx" arch="src">
  <version epoch="0" ver="8.4.4" rel="bp154.2.3.1"/>
  <changelog author="max@suse.de" date="1038312000">- New CVS snapshot: tclx8.4-20021126
- Separated the TclX sources from the tcl package. For the older
  history of this package see the change log of the tcl package.</changelog>
  <changelog author="adrian@suse.de" date="1073736000">- add %run_ldconfig</changelog>
  <changelog author="ro@suse.de" date="1083240000">- added -fno-strict-aliasing</changelog>
  <changelog author="ro@suse.de" date="1100174400">- fixed file list</changelog>
  <changelog author="max@suse.de" date="1122379200">- New CVS snapshot: tclx8.4-20050712
- Moved script library to /usr/share/tcl .</changelog>
  <changelog author="ro@suse.de" date="1134561600">- fix typo in tcl configure script</changelog>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="coolo@suse.com" date="1324468800">- remove call to suse_update_config (very old work around)</changelog>
  <changelog author="coolo@suse.com" date="1324468801">- add autoconf as buildrequire to avoid implicit dependency</changelog>
  <changelog author="coolo@suse.com" date="1362139200">- update license to new format</changelog>
  <changelog author="max@suse.com" date="1371729600">- Update to 8.4.1 to fix build with Tcl 8.6.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1621339200">- Update to version 8.4.4
  * Maintained by FlightAware
  * Remove CONST84 use for upcoming Tcl 8.7 release.
  * Adds coalesce command.
  * Don't iterate over tail calls, since tailcall can only be
    called in a proc context.
  * Ordered traversal of directories in for_recursive_glob to
    fix tests.
- Drop unused tclx.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1666699200">- Version 8.4.4 presents itself as being 8.6 internally. Adjust
  installation path, so that it can still be loaded.</changelog>
</package>
<package pkgid="8dbf903b8d6b0ba90a2ec929aeb4622fb75c170c57981782097dc40e97f11f9d" name="tclx" arch="x86_64">
  <version epoch="0" ver="8.4.4" rel="bp154.2.3.1"/>
  <changelog author="ro@suse.de" date="1100174400">- fixed file list</changelog>
  <changelog author="max@suse.de" date="1122379200">- New CVS snapshot: tclx8.4-20050712
- Moved script library to /usr/share/tcl .</changelog>
  <changelog author="ro@suse.de" date="1134561600">- fix typo in tcl configure script</changelog>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="coolo@suse.com" date="1324468800">- remove call to suse_update_config (very old work around)</changelog>
  <changelog author="coolo@suse.com" date="1324468801">- add autoconf as buildrequire to avoid implicit dependency</changelog>
  <changelog author="coolo@suse.com" date="1362139200">- update license to new format</changelog>
  <changelog author="max@suse.com" date="1371729600">- Update to 8.4.1 to fix build with Tcl 8.6.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1621339200">- Update to version 8.4.4
  * Maintained by FlightAware
  * Remove CONST84 use for upcoming Tcl 8.7 release.
  * Adds coalesce command.
  * Don't iterate over tail calls, since tailcall can only be
    called in a proc context.
  * Ordered traversal of directories in for_recursive_glob to
    fix tests.
- Drop unused tclx.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1666699200">- Version 8.4.4 presents itself as being 8.6 internally. Adjust
  installation path, so that it can still be loaded.</changelog>
</package>
<package pkgid="23453923740edc8bcae0ebca6621fc1859d32405fddde431100e74e86d342b8a" name="telegraf" arch="aarch64">
  <version epoch="0" ver="1.24.3" rel="bp154.2.3.1"/>
  <changelog author="Felix Niederwanger &lt;felix.niederwanger@suse.com&gt;" date="1642766400">- Build-requirement increased to go &gt; 1.17</changelog>
  <changelog author="jkowalczyk@suse.com" date="1650888000">- Update to version 1.21.3:
  * Update license of dependencies file
  * fix: collapsed fields by calling more indepth function (#10430)
  * docs: Update deprecation readme (#10529)
  * chore: update grpc to v1.44.0 (#10525)
  * fix: bump google.golang.org/api from 0.54.0 to 0.65.0 (#10434)
  * fix: typo in docs (#10441)
  * fix: bump github.com/antchfx/xmlquery from 1.3.6 to 1.3.9 (#10507)
  * fix: bump github.com/nsqio/go-nsq from 1.0.8 to 1.1.0 (#10521)
  * fix: bump github.com/prometheus/common from 0.31.1 to 0.32.1 (#10506)
  * fix: ipset crash when command not found (#10474)
  * fix: bump cloud.google.com/go/pubsub from 1.17.0 to 1.17.1 (#10504)
  * fix: bump github.com/influxdata/influxdb-observability/influx2otel from 0.2.8 to 0.2.10 (#10432)
  * fix: Update modbus readme (#10501)
  * Fix: Update README.md (#10500)
  * docs: Fixes for input/sql readme (#10498)
  * fix: graylog readme to use graylog 3 URLs (#10481)
  * fix: add RFC3164 to RFC5424 translation to docs (#10480)
  * fix: add comment to logparser (#10479)
  * chore: Add `openConnections` to enterprise cluster metrics Readme (#10483)
  * fix: remove duplicate addition of fields (#10478)
  * fix(parsers.nagios): nagios parser now uses real error for logging #10472 (#10473)
  * fix: add newline in execd for prometheus parsing (#10463)
  * fix: bump github.com/shirou/gopsutil/v3 from 3.21.10 to 3.21.12 (#10451)
  * fix: do not save cache on i386 builds (#10464)
  * chore: readme escape rpm variables
  * fix: address flaky tests in cookie_test.go and graylog_test.go (#10326)
  * fix: ensure CI tests runs against i386 (#10457)
  * fix: bump github.com/jackc/pgx/v4 from 4.6.0 to 4.14.1 (#10453)
  * fix: bump github.com/Azure/azure-event-hubs-go/v3 from 3.3.13 to 3.3.17 (#10449)
  * fix: bump github.com/gosnmp/gosnmp from 1.33.0 to 1.34.0 (#10450)
  * fix: wavefront_disable_prefix_conversion case missing from missingTomlField func (#10442)
  * fix: bump github.com/hashicorp/consul/api from 1.9.1 to 1.12.0 (#10435)
  * fix: bump github.com/antchfx/jsonquery from 1.1.4 to 1.1.5 (#10433)
  * fix: bump github.com/prometheus/procfs from 0.6.0 to 0.7.3 (#10414)
  * fix: snmp input plugin errors if mibs folder doesn't exist (#10346) (#10354)
  * fix: correctly set ASCII trailer for syslog output (#10393)
  * chore: go mod tidy (#10423)
  * fix: bump github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs from 1.5.2 to 1.12.0 (#10415)
  * fix: bump github.com/kardianos/service from 1.0.0 to 1.2.1 (#10416)
  * fix: ensure http body is empty (#10396)
  * fix: bump github.com/couchbase/go-couchbase from 0.1.0 to 0.1.1 (#10417)
  * fix(json_v2): use raw values for timestamps (#10413)
  * fix: bump github.com/pion/dtls/v2 from 2.0.9 to 2.0.13 (#10418)
  * chore: update mqtt documentation (#10394)
  * fix: update containerd to 1.5.9 (#10402)
  * fix: Fix batching logic with write records, introduce concurrent requests (#8947)
  * fix(outputs/amqp): Close the last connection when writing error to avoid connection leaks (#10360)
  * fix: cumulative interval start times for stackdriver output (#10097)
  * fix: Make telegraf compile on Windows with golang 1.16.2 (#10246)</changelog>
  <changelog author="jkowalczyk@suse.com" date="1650888001">- Update to version 1.21.4:
  * fix: ensure folders do not get loaded more than once (#10551)
  * docs: update VMWare doc links (#10663)
  * fix: prometheusremotewrite wrong timestamp unit (#10547)
  * docs: override reported OpenSearch version (#10586)
  * fix: bump all go.opentelemetry.io dependencies (#10647)
  * chore: update go to 1.17.7 (#10658)
  * fix: check for nil client before closing in amqp (#10635)
  * fix: timestamp change during execution of json_v2 parser. (#10657)
  * fix: bump github.com/signalfx/golib/v3 from 3.3.38 to 3.3.43 (#10652)
  * fix: bump github.com/aliyun/alibaba-cloud-sdk-go (#10653)
  * fix: incorrect handling of json_v2 timestamp_path (#10618)
  * fix: Revert deprecation of http_listener_v2 (#10648)
  * fix: bump github.com/denisenkom/go-mssqldb from 0.10.0 to 0.12.0 (#10503)
  * fix: bump github.com/gopcua/opcua from 0.2.3 to 0.3.1 (#10626)
  * fix: update go.mod
  * fix: use current time as ecs timestamp (#10636)
  * fix(outputs/azure_data_explorer): Added azureBlob controls to lower RAM usage (#10179)
  * fix: bump github.com/nats-io/nats-server/v2 from 2.6.5 to 2.7.2 (#10638)
  * chore: add -race flag to go tests (#10629)
  * fix: license doc outdated causing CI failure (#10630)
  * fix: bump k8s.io/client-go from 0.22.2 to 0.23.3 (#10589)
  * docs: update quay docs for auth (#10612)
  * chore: allow downgrade of go version in windows script (#10614)
  * chore: update CI go to 1.17.6 (#10611)
  * fix: bump github.com/aws/aws-sdk-go-v2/service/kinesis from 1.6.0 to 1.13.0 (#10601)
  * refactor: use early return pattern (#10591)
  * fix: bump github.com/benbjohnson/clock from 1.1.0 to 1.3.0 (#10588)
  * fix: bump github.com/Azure/azure-kusto-go from 0.5.0 to 0.5.2 (#10598)
  * fix(parsers.json_v2): allow optional paths and handle wrong paths correctly (#10468)
  * fix[elasticsearch output]: add scheme to fix error in sniffing option (#10513)
  * chore: fix typo in bug report template (#10582)
  * style: Add deprecated warning and version to win_perf_counters option (#10579)
  * fix: bump github.com/vmware/govmomi from 0.27.2 to 0.27.3 (#10571)
  * fix: bump github.com/prometheus/client_golang from 1.11.0 to 1.12.1 (#10572)
  * fix: remove signed macOS dotfile artifacts (#10560)
  * fix: bump go.mongodb.org/mongo-driver from 1.7.3 to 1.8.3 (#10564)
  * fix: bump github.com/google/go-cmp from 0.5.6 to 0.5.7 (#10563)
  * fix: bump go.opentelemetry.io/collector/model from 0.39.0 to 0.43.2 (#10562)
  * fix: bump github.com/multiplay/go-ts3 from 1.0.0 to 1.0.1 (#10538)
  * fix: bump cloud.google.com/go/monitoring from 0.2.0 to 1.2.0 (#10454)
  * fix: bump github.com/vmware/govmomi from 0.26.0 to 0.27.2 (#10536)
  * docs: add apt and knot to EXTERNAL_PLUGINS.md (#10552)
  * fix: update docker memory usage calculation (#10491)</changelog>
  <changelog author="jkowalczyk@suse.com" date="1650888002">- Update to version 1.22.0:
  * feat: update etc/telegraf.conf and etc/telegraf_windows.conf (#10843)
  * fix: fix handling of imports in protocol-buffer definitions (#10798)
  * fix: change name of snmp translator setting (#10872)
  * fix: rename consul_metrics -&gt; consul_agent (#10876)
  * fix: consul_metrics input plugin docs (#10873)
  * tests: remove redundant newlines that go 1.18 treats as errors (#10847)
  * fix: Add option to select translator (#10802)
  * feat: new input Hugepages plugin (#10763)
  * fix: update the precision parameter default value (#10814)
  * fix: bump github.com/nats-io/nats-server/v2 from 2.7.3 to 2.7.4 (#10807)
  * feat: add new rtt per op field to nfsclient (#10787)
  * fix(parsers.json_v2): Check if gpath exists and support optional in fields/tags (#10799)
  * fix(inputs.snmp):  use the correct path when evaluating symlink (#10748)
  * fix: bump github.com/Shopify/sarama from 1.29.1 to 1.32.0 (#10772)
  * fix: update parsing logic of config.Duration (#10803)
  * feat: update etc/telegraf.conf and etc/telegraf_windows.conf (#10805)
  * feat(parsers.influx): New influx line protocol via feature flag (#10749)
  * feat: update etc/telegraf.conf and etc/telegraf_windows.conf (#10804)
  * docs: Improve language related to the New Relic license key. (#10796)
  * fix: correctly read ntpq long poll output (#10790)
  * fix(inputs.docker): keep field type of tasks_desired the same (#10711)
  * fix(json_v2): allow multiple optional objects (#10777)
  * feat: update etc/telegraf.conf and etc/telegraf_windows.conf (#10789)
  * docs: update wavefront docs for clearer proxy server use (#10774)
  * feat: update etc/telegraf.conf and etc/telegraf_windows.conf (#10779)
  * feat: HTTP basic auth for webhooks (#9332)
  * docs: update uri scheme for default RavenDB configuration (#10764)
  * feat: update etc/telegraf.conf and etc/telegraf_windows.conf (#10769)
  * fix: sql unsigned settings (#10673)
  * docs: better specify agent precision is integer + unit (#10746)
  * fix: bump github.com/shirou/gopsutil/v3 from 3.21.12 to 3.22.2 (#10758)
  * feat: update etc/telegraf.conf and etc/telegraf_windows.conf (#10760)
  * style: Add deprecation notices to plugin options (#10616)
  * fix: sanitize stasd names (#10466)
  * fix: bump github.com/aws/aws-sdk-go-v2/feature/ec2/imds (#10759)
  * fix: bump github.com/miekg/dns from 1.1.43 to 1.1.46 (#10757)
  * fix: bump github.com/aws/aws-sdk-go-v2/service/dynamodb (#10751)
  * fix: bump github.com/nats-io/nats-server/v2 from 2.7.2 to 2.7.3 (#10752)
  * docs: add value_field_name to value processor (#10740)
  * fix: log err when loading mibs (#10735)
  * docs: add info on Graylog GELF spec (#10745)
  * fix: typo metadata support in csv parser (#10742)
  * feat: update etc/telegraf.conf and etc/telegraf_windows.conf (#10737)
  * feat: Add tag batch-processing to XPath parser (#10585)
  * fix: add push only updated values flag to histogram aggregator (#10515)
  * feat(parsers/csv): Add metadata support to CSV parser plugin (#10083)
  * fix: Revert "fix: error msg for missing env variables in config (#10681)" (#10727)
  * fix: bump github.com/aws/aws-sdk-go-v2/config from 1.8.3 to 1.13.1 (#10720)
  * fix: bump github.com/testcontainers/testcontainers-go (#10728)
  * fix: bump github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs (#10719)
  * fix: bump github.com/aws/aws-sdk-go-v2/feature/ec2/imds (#10721)
  * fix: bump github.com/wavefronthq/wavefront-sdk-go from 0.9.9 to 0.9.10 (#10718)
  * fix: bump github.com/ClickHouse/clickhouse-go from 1.5.1 to 1.5.4 (#10717)
  * fix: Linter fixes for config/config.go (#10710)
  * fix: bump k8s.io/api from 0.23.3 to 0.23.4 (#10713)
  * fix: bump cloud.google.com/go/pubsub from 1.17.1 to 1.18.0 (#10714)
  * fix: bump github.com/newrelic/newrelic-telemetry-sdk-go (#10715)
  * fix: mdstat when sync is less than 10% (#10701)
  * feat: update etc/telegraf.conf and etc/telegraf_windows.conf (#10708)
  * fix: Remove verbose logging from disk input plugin (#10527)
  * feat: Bump github.com/aerospike/aerospike-client-go from 1.27.0 to 5.7.0 (#10604)
  * feat(inputs/memcached): Support client TLS origination to memcached (#10642)
  * feat: socks5 proxy support for websocket (#10672)
  * fix: error msg for missing env variables in config (#10681)
  * fix: include influxdb bucket name in error messages (#10706)
  * fix: openweathermap add feels_like field (#10705)
  * fix: Set NextCheckTime to LastCheckTime to avoid GroundWork to invent a value (#10623)
  * fix: bump github.com/aws/aws-sdk-go-v2/service/dynamodb from 1.5.0 to 1.13.0 (#10692)
  * fix: bump github.com/sensu/sensu-go/api/core/v2 from 2.12.0 to 2.13.0 (#10704)
  * fix: bump github.com/gophercloud/gophercloud from 0.16.0 to 0.24.0 (#10693)
  * fix: bump github.com/jackc/pgx/v4 from 4.14.1 to 4.15.0 (#10702)
  * fix(dedup): Modifying slice while iterating is dangerous (#10684)
  * fix: linter fixes for "import-shadowing: The name '...' shadows an import name" (#10689)
  * fix: bump github.com/aws/aws-sdk-go-v2/service/sts from 1.7.2 to 1.14.0 (#10602)
  * fix: update gosmi from v0.4.3 to v0.4.4 (#10686)
  * feat: update configs (#10676)
  * feat[elastic output]: add elastic pipeline flags (#10505)
  * fix: ensure folders do not get loaded more than once (#10551)
  * docs: update VMWare doc links (#10663)
  * fix: prometheusremotewrite wrong timestamp unit (#10547)
  * feat: update configs (#10662)
  * fix: add graylog toml tags (#10660)
  * feat: add socks5 proxy support for kafka output plugin (#8192)
  * docs: override reported OpenSearch version (#10586)
  * feat: update etc/telegraf.conf and etc/telegraf_windows.conf (#10659)
  * fix: bump all go.opentelemetry.io dependencies (#10647)
  * feat: collection offset implementation (#10545)
  * chore: update go to 1.17.7 (#10658)
  * fix: check for nil client before closing in amqp (#10635)
  * fix: timestamp change during execution of json_v2 parser. (#10657)
  * fix: bump github.com/signalfx/golib/v3 from 3.3.38 to 3.3.43 (#10652)
  * fix: bump github.com/aliyun/alibaba-cloud-sdk-go (#10653)
  * fix: incorrect handling of json_v2 timestamp_path (#10618)
  * feat: gather additional stats from memcached (#10641)
  * feat: update etc/telegraf.conf and etc/telegraf_windows.conf (#10649)
  * fix: Revert deprecation of http_listener_v2 (#10648)
  * fix: bump github.com/denisenkom/go-mssqldb from 0.10.0 to 0.12.0 (#10503)
  * fix: bump github.com/gopcua/opcua from 0.2.3 to 0.3.1 (#10626)
  * fix: use current time as ecs timestamp (#10636)
  * fix: bump github.com/nats-io/nats-server/v2 from 2.6.5 to 2.7.2 (#10638)
  * chore: add -race flag to go tests (#10629)
  * feat: update etc/telegraf.conf and etc/telegraf_windows.conf (#10631)
  * fix: license doc outdated causing CI failure (#10630)
  * fix: bump k8s.io/client-go from 0.22.2 to 0.23.3 (#10589)
  * feat: Implemented support for reading raw values, added tests and doc (#6501)
  * fix: Improve parser tests by using go-cmp/cmp (#10497)
  * feat(mongodb): add FsTotalSize and FsUsedSize informations (#10625)
  * docs: update quay docs for auth (#10612)
  * chore: allow downgrade of go version in windows script (#10614)
  * chore: update CI go to 1.17.6 (#10611)
  * feat: update etc/telegraf.conf and etc/telegraf_windows.conf (#10600)
  * fix(inputs.opcua): add more data to error log (#10465)
  * fix: bump github.com/aws/aws-sdk-go-v2/service/kinesis from 1.6.0 to 1.13.0 (#10601)
  * refactor: use early return pattern (#10591)
  * fix: bump github.com/benbjohnson/clock from 1.1.0 to 1.3.0 (#10588)
  * feat: add dynamic tagging to gnmi plugin (#7484)
  * fix: bump github.com/Azure/azure-kusto-go from 0.5.0 to 0.5.2 (#10598)
  * feat: update etc/telegraf.conf and etc/telegraf_windows.conf (#10584)
  * fix(parsers.json_v2): allow optional paths and handle wrong paths correctly (#10468)
  * docs: add expriation_interval to readme (#10583)
  * feat: aggregator histogram add expiration (#10520)
  * fix[elasticsearch output]: add scheme to fix error in sniffing option (#10513)
  * chore: fix typo in bug report template (#10582)
  * style: Add deprecated warning and version to win_perf_counters option (#10579)
  * feat: Add autorestart and restartdelay flags to Windows service (#10559)
  * fix: Statefull parser handling (#10575)
  * fix: bump github.com/vmware/govmomi from 0.27.2 to 0.27.3 (#10571)
  * fix: bump github.com/prometheus/client_golang from 1.11.0 to 1.12.1 (#10572)
  * fix: remove signed macOS dotfile artifacts (#10560)
  * fix: bump go.mongodb.org/mongo-driver from 1.7.3 to 1.8.3 (#10564)
  * fix: bump github.com/google/go-cmp from 0.5.6 to 0.5.7 (#10563)
  * fix: bump go.opentelemetry.io/collector/model from 0.39.0 to 0.43.2 (#10562)
  * fix: bump github.com/multiplay/go-ts3 from 1.0.0 to 1.0.1 (#10538)
  * fix: bump cloud.google.com/go/monitoring from 0.2.0 to 1.2.0 (#10454)
  * feat: update etc/telegraf.conf and etc/telegraf_windows.conf (#10561)
  * docs: updates readme to add service SID auth and cleans up AAD auth dupe info (#10541)
  * feat: Add caching to internet_speed (#10530)
  * feat: Xtremio input (#9697)
  * feat(inputs.win_perf_counter): allow errors to be ignored (#10535)
  * fix(outputs/azure_data_explorer): Added azureBlob controls to lower RAM usage (#10179)
  * fix: bump github.com/vmware/govmomi from 0.26.0 to 0.27.2 (#10536)
  * docs: add apt and knot to EXTERNAL_PLUGINS.md (#10552)
  * feat: update etc/telegraf.conf and etc/telegraf_windows.conf (#10546)
  * fix: move "Starting Telegraf" log (#10528)
  * fix: update docker memory usage calculation (#10491)
  * feat: Add ClickHouse driver to sql inputs/outputs plugins (#9671)
  * fix: collapsed fields by calling more indepth function (#10430)
  * feat: update etc/telegraf.conf and etc/telegraf_windows.conf (#10533)
  * feat: process group tag for groundwork output plugin (#10499)
  * feat: update etc/telegraf.conf and etc/telegraf_windows.conf (#10532)
  * docs: Update deprecation readme (#10529)
  * feat: add FileVersion and icon to Win exe (#10487)
  * chore: update grpc to v1.44.0 (#10525)
  * fix: bump google.golang.org/api from 0.54.0 to 0.65.0 (#10434)
  * fix: typo in docs (#10441)
  * fix: bump github.com/antchfx/xmlquery from 1.3.6 to 1.3.9 (#10507)
  * fix: bump github.com/nsqio/go-nsq from 1.0.8 to 1.1.0 (#10521)
  * fix: bump github.com/prometheus/common from 0.31.1 to 0.32.1 (#10506)
  * fix: ipset crash when command not found (#10474)
  * fix: bump cloud.google.com/go/pubsub from 1.17.0 to 1.17.1 (#10504)
  * fix: bump github.com/influxdata/influxdb-observability/influx2otel from 0.2.8 to 0.2.10 (#10432)
  * fix: Update modbus readme (#10501)
  * Fix: Update README.md (#10500)
  * docs: Fixes for input/sql readme (#10498)
  * feat: update configs (#10490)
  * fix: graylog readme to use graylog 3 URLs (#10481)
  * fix: add RFC3164 to RFC5424 translation to docs (#10480)
  * fix: add comment to logparser (#10479)
  * chore: Add `openConnections` to enterprise cluster metrics Readme (#10483)
  * fix: remove duplicate addition of fields (#10478)
  * fix(parsers.nagios): nagios parser now uses real error for logging #10472 (#10473)
  * fix: add newline in execd for prometheus parsing (#10463)
  * fix: bump github.com/shirou/gopsutil/v3 from 3.21.10 to 3.21.12 (#10451)
  * fix: do not save cache on i386 builds (#10464)
  * chore: readme escape rpm variables
  * fix: address flaky tests in cookie_test.go and graylog_test.go (#10326)
  * feat: check TLSConfig early to catch missing certificates (#10341)
  * fix: ensure CI tests runs against i386 (#10457)
  * fix: bump github.com/jackc/pgx/v4 from 4.6.0 to 4.14.1 (#10453)
  * fix: bump github.com/Azure/azure-event-hubs-go/v3 from 3.3.13 to 3.3.17 (#10449)
  * fix: bump github.com/gosnmp/gosnmp from 1.33.0 to 1.34.0 (#10450)
  * fix: wavefront_disable_prefix_conversion case missing from missingTomlField func (#10442)
  * fix: bump github.com/hashicorp/consul/api from 1.9.1 to 1.12.0 (#10435)
  * feat: Parser plugin restructuring (#8791)
  * fix: bump github.com/antchfx/jsonquery from 1.1.4 to 1.1.5 (#10433)
  * fix: bump github.com/prometheus/procfs from 0.6.0 to 0.7.3 (#10414)
  * feat: update etc/telegraf.conf and etc/telegraf_windows.conf (#10429)
  * feat: Add noise plugin (#10057)
  * feat: update configs (#10425)
  * fix: Accept non-standard OPC UA OK status by implementing a configurable workaround (#10384)
  * feat: support headers for http plugin with cookie auth (#10404)
  * fix: snmp input plugin errors if mibs folder doesn't exist (#10346) (#10354)
  * fix: correctly set ASCII trailer for syslog output (#10393)
  * feat: update configs (#10424)
  * chore: go mod tidy (#10423)
  * fix: bump github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs from 1.5.2 to 1.12.0 (#10415)
  * fix: bump github.com/kardianos/service from 1.0.0 to 1.2.1 (#10416)
  * fix: ensure http body is empty (#10396)
  * feat: add bearer token support to elasticsearch output (#10399)
  * fix: bump github.com/couchbase/go-couchbase from 0.1.0 to 0.1.1 (#10417)
  * feat: update etc/telegraf.conf and etc/telegraf_windows.conf (#10411)
  * fix(json_v2): use raw values for timestamps (#10413)
  * fix: bump github.com/pion/dtls/v2 from 2.0.9 to 2.0.13 (#10418)
  * chore: update mqtt documentation (#10394)
  * feat: deprecate unused snmp_trap timeout configuration option (#10339)
  * fix: update containerd to 1.5.9 (#10402)
  * feat: update configs (#10400)
  * feat:  add compression to Datadog Output (#9963)
  * feat: update etc/telegraf.conf and etc/telegraf_windows.conf (#10395)
  * fix: re-enable OpenBSD modbus support (#10385)
  * fix: Fix batching logic with write records, introduce concurrent requests (#8947)
  * feat: Add additional stats to bond collector (#10137)
  * fix(outputs/amqp): Close the last connection when writing error to avoid connection leaks (#10360)
  * feat: update docker client API version (#10382)
  * feat: update etc/telegraf.conf and etc/telegraf_windows.conf (#10381)
  * fix: fix missing storage in container with disk plugin (#10318)
  * feat: add systemd notify support (#10340)
  * chore: typos across source code comments (#10361)
  * chore: sql readme with more details on data types (#10378)
  * fix: empty import tzdata for Windows binaries (#10377)
  * feat: update configs (#10374)
  * chore: document deprecation of timeout (#10373)
  * feat: update configs (#10345)
  * feat: add mock input plugin (#9782)
  * chore: use 4 cores on linux systems (#10342)
  * fix: update go-ldap to v3.4.1 (#10343)
  * chore: remove "i386" test job (#10344)
  * fix: update GroundWork SDK and improve logging (#10255)
  * feat: add more functionality to template processor (#10316)
  * chore: run release signing jobs at the same time (#10333)
  * feat: update configs (#10336)
  * feat: update etc/telegraf.conf and etc/telegraf_windows.conf (#10335)
  * feat: add builds for riscv64 (#10262)
  * feat: add consul metrics input plugin (#10258)
  * fix: snmp marshal error (#10322)
  * feat: add exclude_root_certs option to x509_cert plugin (#9822)
  * feat: add option to disable prepared statements for PostgreSQL (#9710)
  * fix: cumulative interval start times for stackdriver output (#10097)
  * feat: add option to skip errors during CSV parsing (#10267)
  * feat: update configs (#10334)
  * feat: socketstat input plugin (#3649)
  * fix: update djherbis/times and fix dependabot (#10332)
  * fix: warning output when running with --test (#10329)
  * feat: update configs (#10325)
  * docs: add note about dpdk and socket availability (#10324)
  * feat: reworked varnish_cache plugin (#9432)
  * chore:  release packaging run in parallel (#10314)
  * fix: update bug template
  * chore: add logs section for bug reports (#10323)
  * fix: do not require networking during tests (#10321)
  * chore: update mac signing job to use latest xcode (#10311)
  * chore: update Go version to 1.17.5 (#10310)
  * feat: update configs (#10319)
  * chore: cleanup go.mod (#10313)
  * feat: add timeout-setting to Graylog-plugin (#10220)
  * feat: Improve error logging on plugin initialization (#10307)
  * fix: Fix panic in logparser due to missing Log. (#10296)
  * fix: panic due to no module (#10303)
  * fix: grab table columns more accurately (#10295)
  * fix: check index before assignment (#10299)
  * feat: adds optional list of non retryable http statuscodes to http output plugin (#10186)
  * fix: panic is no mibs folder is found (#10301)
  * fix: mac signing issue with arm64 (#10293)
  * fix: Update go-sensu to v2.12.0 (#10247)
  * fix: typo in openstack neutron input plugin (newtron) (#10284)
  * fix: Fix panic in parsers due to missing Log for all plugins using SetParserFunc. (#10288)
  * fix: mark TestGatherUDPCert as an integration test (#10279)
  * feat: support darwin arm64 (#10239)
  * feat: update configs (#10275)
  * fix: run gofmt (#10274)
  * fix: run go mod tidy (#10273)
  * fix: inputs.snmp to respect number of retries configured (#10268)
  * feat: add Redis Sentinel input plugin (#10042)
  * fix: flush wavefront output sender on error to clean up broken connections (#10225)
  * feat: Add option to disable Wavefront prefix conversion (#10252)
  * feat: add heap_size_limit field for input.kibana (#10243)
  * fix: use sha256 for RPM digest (#10272)
  * feat: Update underlying KNX library to support new types. (#10263)
  * chore: restart service if it is already running and upgraded via RPM (#9970)
  * feat: update etc/telegraf.conf and etc/telegraf_windows.conf (#10237)
  * fix: Handle duplicate registration of protocol-buffer files gracefully. (#10188)
  * fix(http_listener_v2): fix panic on close (#10132)
  * feat: add Vault input plugin (#10198)
  * feat: support aws managed service for prometheus (#10202)
  * fix: Make telegraf compile on Windows with golang 1.16.2 (#10246)
  * feat: Modbus add per-request tags (#10231)
  * fix: Implement NaN and inf handling for elasticsearch output (#10196)
  * feat: add nomad input plugin (#10106)
  * fix: Print loaded plugins and deprecations for once and test (#10205)
  * fix: eliminate MIB dependency for ifname processor (#10214)
  * feat: Optimize locking for SNMP MIBs loading. (#10206)
  * feat: Add SMART plugin concurrency configuration option, nvme-cli v1.14+ support and lint fixes. (#10150)
  * feat: update configs (#10236)
  * fix(inputs/kube_inventory): set TLS server name config properly (#9975)
  * fix: Sudden close of Telegraf caused by OPC UA input plugin (#10230)
  * fix: bump github.com/eclipse/paho.mqtt.golang from 1.3.0 to 1.3.5 (#9913)
  * fix: json_v2 parser timestamp setting (#10221)
  * fix: ensure graylog spec fields not prefixed with '_' (#10209)
  * docs: remove duplicate links in CONTRIBUTING.md (#10218)
  * fix: pool detection and metrics gathering for ZFS &gt;= 2.1.x (#10099)
  * fix: parallelism fix for ifname processor (#10007)
  * chore: Forbids "log" package only for aggregators, inputs, outputs, parsers and processors (#10191)
  * docs: address documentation gap when running telegraf in k8s (#10215)
  * feat: update etc/telegraf.conf and etc/telegraf_windows.conf (#10211)
  * fix: mqtt topic extracting no longer requires all three fields (#10208)
  * fix: windows service - graceful shutdown of telegraf (#9616)
  * feat: update etc/telegraf.conf and etc/telegraf_windows.conf (#10201)
  * feat: Modbus support multiple slaves (gateway feature) (#9279)
  * fix: Revert unintented corruption of the Makefile from #10200. (#10203)
  * chore: remove triggering update-config bot in CI (#10195)</changelog>
  <changelog author="jkowalczyk@suse.com" date="1650888003">- Update to version 1.22.1:
  * fix: bump gonum.org/v1/gonum from 0.9.3 to 0.11.0 (#10937)
  * fix: bump github.com/golang-jwt/jwt/v4 from 4.2.0 to 4.4.1 (#10906)
  * chore: add actions/setup-go@v2 to linter config (#10935)
  * docs(external.psi): add psi plugin (#10462)
  * fix: Update gopsutil and associated dependencies for improved OpenBSD supp? (#10931)
  * docs: update rpm/deb instructions with stable URLs (#10905)
  * fix: inconsistencies in sql*Requests queries (#10553)
  * fix: default value for logfile rotation interval (#10883)
  * fix: redundant zfs pool tag (#10871)
  * docs: update license of dependencies (#10914)
  * fix: update vsphere info message to debug (#10903)
  * docs: fix contribute button link (#10904)
  * docs: improve documentation around contribution (#10825)
  * chore: set telegraf log as text block in bug reports (#10895)
  * fix: include body in error message (#10866)
  * docs: clarify the k and fields topk params (#10830)
  * chore: remove slow process test (#10856)
  * chore: update slow file rotation tests (#10857)
  * chore: switch HTTP 100 test case values (#10858)
  * chore: fix slow running intel-pmu test (#10859)
  * chore: skip longer/integration tests on -short mode (#10860)
  * chore: remove CircleCI parallelism (#10862)
  * chore: reduce timeouts and sleeps (#10861)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1650888004">- Refresh harden_telegraf.service.patch</changelog>
  <changelog author="jkowalczyk@suse.com" date="1650974400">- Update to version 1.22.2:
  * Update changelog
  * update build version
  * update build version
  * fix: bump github.com/aws/aws-sdk-go-v2/config from 1.13.1 to 1.15.3 (#10998)
  * fix: add mutex to gnmi lookup map (#11008)
  * fix(cmd): Also allow 0 outputs when using test-wait parameter (#11013)
  * fix: allow Makefile to work on Windows (#11015)
  * fix: use sprint to cast to strings in gnmi (#11010)
  * fix: use correct auth token with consul_agent (#11001)
  * fix: add mariadb_dialect to address the MariaDB differences in INNODB_METRICS (#10486)
  * fix: correctly parse various numeric forms (#10923)
  * fix: update go.opentelemetry.io/collector/pdata from v0.48.0 to v0.49.0 (#10984)
  * fix: bump github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs (#10997)
  * fix: bump github.com/aws/aws-sdk-go-v2/credentials from 1.8.0 to 1.11.2 (#10975)
  * fix: update github.com/containerd/containerd from v1.5.9 to v1.5.11 (#10981)
  * fix: bump github.com/miekg/dns from 1.1.46 to 1.1.48 (#10973)
  * fix: ensure aliyuncms metrics accept array, fix discovery (#10850)
  * fix(inputs/aerospike): Statistics query bug (#10930)
  * fix: update github.com/Azure/azure-kusto-go from 0.5.0 to 0.60 (#10966)
  * fix: update github.com/gopcua/opcua from v0.3.1 to v0.3.3 (#10974)
  * fix: bump github.com/aws/aws-sdk-go-v2/service/dynamodb (#10972)
  * fix: bump github.com/xdg/scram from 1.0.3 to 1.0.5 (#10773)
  * fix: bump go.mongodb.org/mongo-driver from 1.8.3 to 1.9.0 (#10971)
  * fix: align the default value for msg size (#10947)
  * fix: update opentelemetry from v0.2.10 to v0.2.17 (#10963)
  * fix: remove overly verbose info message from cisco mdt (#10959)
  * fix: update starlark 7a1108eaa012-&gt;d1966c6b9fcd (#10940)
  * fix: update influxdb_v2 error message (#10958)
  * fix(inputs.prometheus): moved from watcher to informer (#10932)</changelog>
  <changelog author="jkowalczyk@suse.com" date="1651147200">- Update to version 1.22.3:
  * go mod tidy
  * Update changelog
  * update build version
  * chore: increase timeout for darwin packaging (#11041)
  * fix: reduce log level in disk plugin (#10925)
  * fix: use external xpath parser for gnmi (#11024)
  * fix: remove duplicate influxdb listener writes (#10976)
  * chore: go mod tidy (#10983)
  * chore: Update Go to 1.18.1 (#10961)</changelog>
  <changelog author="jkowalczyk@suse.com" date="1652702400">- Update to version 1.22.4:
  * Update changelog
  * update build version
  * fix: bump github.com/showwin/speedtest-go from 1.1.4 to 1.1.5 (#10722)
  * fix(outputs.Wavefront): If no "host" tag is provided, do not add "telegraf.host" tag (#11078)
  * chore: update opentelemetry plugins (#11085)
  * fix(inputs.couchbase): Don't assume metrics will all be of the same length (#11045)
  * fix: do not error when closing statsd network connection (#11043)
  * fix: re-init azure monitor http client on context deadline error (#11030)
  * fix: have telegraf service wait for network up (#11042)</changelog>
  <changelog author="jkowalczyk@suse.com" date="1655121600">- Update to version 1.23.0:
  * fix: Remove all rebase logic from CI (#11293)
  * fix: Don't rebase on master when building packages (#11291)
  * Update changelog for v1.23.0
  * test: add install go for linux, use in integration tests (#11281)
  * fix(inputs/directory_monitor): Add support for multiline file parsing (#11234)
  * chore: Fix readme linter errors for input plugins M-Z (#11274)
  * fix: Always build README-embedder for host-architecture (#11253)
  * feat: Migrate xpath parser to new style (#11218)
  * fix: add missing build constraints for sqlite (#11272)
  * fix: remove full access permissions (#11261)
  * chore: Fix readme linter errors for input plugins E-L (#11214)
  * chore: Fix readme linter errors for input plugins A-D (#10964)
  * fix: update github.com/containerd/containerd from v1.5.11 to v1.5.13 (#11266)
  * fix: bump github.com/tidwall/gjson from 1.10.2 to 1.14.1 (#11264)
  * chore: Fix readme linter errors for processor, aggregator, and parser plugins (#10960)
  * fix: update modernc.org/sqlite from v1.10.8 to v1.17.3 (#11260)
  * docs: add missing word &lt;3 (#11262)
  * feat(intel_powerstat): add uncore frequency metrics (#11254)
  * test: remove restore integration test cache (#11255)
  * test: add circle ci integration testing on PRs (#11246)
  * test: harden running of testcontainer integration tests (#11245)
  * chore: update go from v1.18.1 to v1.18.3 (#11248)
  * chore: rename circleci executor (#11247)
  * chore: upgrade windows circleci size (#11249)
  * fix: re-add event to splunk serializer (#11237)
  * docs: update test-container docs (#11244)
  * test: remove docker-compose.yml test file (#11243)
  * fix: update moby/ipvs dependency from v1.0.1 to v1.0.2 (#11242)
  * feat(inputs.sqlserver): Update query store and latch performance counters (#11216)
  * test: migrate elasticsearch to testcontainers (#11207)
  * chore: Bump apcupds and remove the replacement as issue is fixed upstream. (#11239)
  * test: migrate postgres to testcontainers (#11209)
  * test: migrate mcrouter to test-containers (#11208)
  * test: migrate kafka to testcontainers (#11206)
  * docs: Initial update of integration test docs (#11210)
  * chore: Bump riemann-go-client and remove replacement (#11236)
  * fix: Upgrade xpath and fix code (#11241)
  * feat(inputs.nginx_plus_api): Gather slab metrics (#10448)
  * fix(inputs/modbus): #11105 fix requests starting with an omitted field (#11202)
  * fix: (outputs/sql) table existence cache (#10812)
  * fix: Update sample.conf for prometheus (#11217)
  * fix: bump github.com/nats-io/nats-server/v2 from 2.7.4 to 2.8.4 (#11221)
  * test: enable logging with testcontainers (#11211)
  * chore: update github.com/opencontainers/runc from v1.0.2 to v1.1.2 (#11212)
  * chore: update gopkg.in/yaml.v3 from v3.0.0 to v3.0.1 (#11213)
  * fix(inputs/snmp): switch new Reconnect method to be a value receiver (#11197)
  * test: refactor testcontainer port lookup (#11198)
  * test: actually skip flaky snmp test (#11199)
  * chore: correctly spell embed (#11200)
  * fix: bump go.opentelemetry.io/otel/metric from 0.28.0 to 0.30.0 (#11088)
  * chore: update OpenTelmetry plugins (#11194)
  * docs: remove recommendation for prometheus metric_version=2 (#11158)
  * fix: bump github.com/sensu/sensu-go/api/core/v2 from 2.13.0 to 2.14.0 (#11021)
  * test: migrate zookeeper to test-containers (#11185)
  * fix(plugins/amqp): move from `streadway/amqp` to `rabbitmq/amqp091-go` (#11192)
  * feat: Add constant 'algorithm' to the mock plugin (#11188)
  * fix: redis plugin goroutine leak triggered by auto reload config mechanism (#11143)
  * fix: update golangci-lint from v1.45.2 to v1.46.2 (#11191)
  * fix(inputs/snmp): Reconnect TCP agents if needed (#11163)
  * test: migrate pgbouncer to test-containers (#11186)
  * test: remove rabbitmq container not used (#11175)
  * chore: Embed sample configurations into README for aggregators (#11190)
  * chore: Embed sample configurations into README for processors (#11189)
  * chore: embed sample configurations into README for outputs (#11182)
  * feat: Google API Auth (#11084)
  * test: migrate openldap tests to test-containers (#11169)
  * test: migrate nsq to test containers (#11173)
  * test: migrate opcua to test-containers (#11171)
  * feat: add field key option to set event partition key (#11076)
  * test: migrate aerospike to test-containers (#11177)
  * fix: Convert slab plugin to new sample.conf. (#11181)
  * test: migrate memcached to test-containers (#11176)
  * test: migrate redis to test-containers (#11174)
  * test: migrate mqtt to test containers (#11172)
  * test: migrate nats to test-containers (#11170)
  * test: migrate crate to test-containers code (#11165)
  * chore: Embed sample configurations into README for inputs (#11136)
  * fix: search services file in /etc/services and fall back to /usr/etc/services (#11179)
  * fix: Remove any content type from prometheus accept header (#11082)
  * feat(inputs.cpu): Add tags with core id or physical id to cpus (#11141)
  * chore: add readme linter to CI (#11020)
  * feat(intel_powerstat): add Max Turbo Frequency and introduce improvements (#11035)
  * test: avoid data race in tcp-listener test (#11144)
  * fix: bump github.com/aws/aws-sdk-go-v2/config from 1.15.3 to 1.15.7 (#11166)
  * test: add generic test-container code for re-use, migrate mysql (#11157)
  * feat: add external huebridge input plugin (#11159)
  * fix: Improve slab testing without sudo. (#11151)
  * docs: update review docs (#11147)
  * test: force elasticsearch to index batch data (#11153)
  * test: update mongodb output to use test containers (#11137)
  * test: switch internet speed to enable file download (#11146)
  * fix: doc interval setting for internet speed plugin (#11150)
  * fix(inputs.burrow): Move Dialer to variable and run `make fmt` (#11149)
  * fix: avoid calling sadc with invalid 0 interval (#11140)
  * feat: [inputs/burrow] fill more http transport parameters (#6948)
  * feat: do not error if no nodes found for current config with xpath parser (#11102)
  * feat: add slab metrics input plugin (#11075)
  * fix: use readers over closers in http input (#11083) Refs boo#1203914
  * chore(inputs_a-l): migrate sample configs into separate files (#11132)
  * chore(inputs_m-z): migrate sample configs into separate files (#11133)
  * chore(outputs): migrate sample configs into separate files (#11131)
  * chore(aggregators): migrate sample configs into separate files (#11130)
  * chore(processors): migrate sample configs into separate files (#11125)
  * test: use supported version of elasticsearch (#11111)
  * test: remove unecessary flag in sql input (#11115)
  * fix: elasticsearch output float handling test (#11120)
  * test: remove unused riemann from docker-compose (#11118)
  * fix(parsers/nagios): metrics will always return a supported status co? (#11062)
  * feat: allow other fluentd metrics apart from retry_count, buffer_queu? (#11056)
  * feat(parsers/logfmt): Add tag support (#11060)
  * fix: log instance name in skip warnings (#10995)
  * fix: bump github.com/wavefronthq/wavefront-sdk-go from 0.9.10 to 0.9.11 (#10970)
  * fix: Update gopsutil from v3.22.3 to v3.22.4 to allow for HOST_PROC_MOUNTINFO. (#11107)
  * chore(inputs/file): More clear error messages (#11104)
  * test: add test for mysql gatherGlobalVariables using sql-mock (#10987)
  * feat: Artifactory Webhook Receiver (#10918)
  * docs: fix socket_writer output format link (#11101)
  * fix: check net.Listen() error in tests (#11093)
  * fix: Output erroneous namespace and continue instead of error out (#11069)
  * Update changelog
  * feat: add mount option filtering to disk plugin (#11039)
  * feat(inputs.vsphere): Collect resource pools metrics and add resource pool tag in VM metrics (#10574)
  * docs: note about listsnapshots cause zfs parse failures (#11091)
  * fix: bump github.com/showwin/speedtest-go from 1.1.4 to 1.1.5 (#10722)
  * fix(outputs.Wavefront): If no "host" tag is provided, do not add "telegraf.host" tag (#11078)
  * chore: update opentelemetry plugins (#11085)
  * docs: correct copy-and-paste of udp to tcp (#11080)
  * refactor: replace strings.Replace with strings.ReplaceAll (#11079)
  * feat(exec, execd): add an option to pass a custom environment to their child process (#11049)
  * fix(inputs.couchbase): Don't assume metrics will all be of the same length (#11045)
  * fix: deprecate useless database config option (#11044)
  * fix: do not error when closing statsd network connection (#11043)
  * fix: re-init azure monitor http client on context deadline error (#11030)
  * feat: add influx semantic commits checker, checks only last commit. (#11037)
  * fix: have telegraf service wait for network up (#11042)
  * chore(inputs/disk): add deprecation notice to legacy mountpoints setting (#10948)
  * style: align plugin renaming (#10868)
  * Update changelog
  * fix: datadog count metrics (#10979)
  * feat(outputs.http): Support configuration of `MaxIdleConns` and `MaxIdleConnsPerHost` (#10954)
  * chore: enable linting of shell scripts (#11031)
  * chore: increase timeout for darwin packaging (#11041)
  * fix: reduce log level in disk plugin (#10925)
  * feat: create and push nightly docker images to quay.io (#11000)
  * chore: remove influxdata/validate-semantic-github-messages github workflow (#11036)
  * chore: Adding influx's semantic commit and PR message checker, so we ? (#11009)
  * fix: use external xpath parser for gnmi (#11024)
  * fix: remove duplicate influxdb listener writes (#10976)
  * Update changelog
  * fix: bump github.com/aws/aws-sdk-go-v2/config from 1.13.1 to 1.15.3 (#10998)
  * fix: add mutex to gnmi lookup map (#11008)
  * fix(cmd): Also allow 0 outputs when using test-wait parameter (#11013)
  * fix: allow Makefile to work on Windows (#11015)
  * chore: Fix readme linter errors for output plugins (#10951)
  * fix: use sprint to cast to strings in gnmi (#11010)
  * docs: add openstack metadata external plugin (#10999)
  * fix: use correct auth token with consul_agent (#11001)
  * docs: correct influx parser type setting in README (#11004)
  * fix: add mariadb_dialect to address the MariaDB differences in INNODB_METRICS (#10486)
  * fix: correctly parse various numeric forms (#10923)
  * chore: add readme linter (#10916)
  * chore: update pull request with master when running CI (#10993)
  * docs: add missing slash in mongodb readme (#10994)
  * fix: update go.opentelemetry.io/collector/pdata from v0.48.0 to v0.49.0 (#10984)
  * docs: regex processor only works on strings (#10982)
  * fix: bump github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs (#10997)
  * fix: bump github.com/aws/aws-sdk-go-v2/credentials from 1.8.0 to 1.11.2 (#10975)
  * test: use `T.TempDir` to create temporary test directory (#10988)
  * feat(processor/regex): Add ability to check every tag for regex replace (#10927)
  * chore: go mod tidy (#10983)
  * chore: Update Go to 1.18.1 (#10961)
  * feat(inputs/teamspeak): allow to configure nickname (#10934)
  * fix: update github.com/containerd/containerd from v1.5.9 to v1.5.11 (#10981)
  * feat(inputs/sqlserver): add RecentBackups query (#10567)
  * fix: bump github.com/miekg/dns from 1.1.46 to 1.1.48 (#10973)
  * fix: ensure aliyuncms metrics accept array, fix discovery (#10850)
  * fix(inputs/aerospike): Statistics query bug (#10930)
  * fix: update github.com/Azure/azure-kusto-go from 0.5.0 to 0.60 (#10966)
  * chore: add logging to graylog tests (#10896)
  * chore: remove go generate from CI tests (#10977)
  * fix: update github.com/gopcua/opcua from v0.3.1 to v0.3.3 (#10974)
  * fix: bump github.com/aws/aws-sdk-go-v2/service/dynamodb (#10972)
  * fix: bump github.com/xdg/scram from 1.0.3 to 1.0.5 (#10773)
  * fix: bump go.mongodb.org/mongo-driver from 1.8.3 to 1.9.0 (#10971)
  * fix: align the default value for msg size (#10947)
  * fix: update opentelemetry from v0.2.10 to v0.2.17 (#10963)
  * docs: update sql readme for creating login in windows (#10967)
  * fix: remove overly verbose info message from cisco mdt (#10959)
  * fix: update starlark 7a1108eaa012-&gt;d1966c6b9fcd (#10940)
  * docs: update csv parser metadata descriptions (#10750)
  * style: Add deprecation notice to renamed plugins (#10867)
  * chore(inputs): add descriptions to config in README.md (#10962)
  * feat: migrate input plugins to new sample config format (M-Z) (#10926)
  * fix: update influxdb_v2 error message (#10958)
  * fix(inputs.prometheus): moved from watcher to informer (#10932)
  * feat: migrate input plugins to new sample config format (A-L) (#10924)
  * feat: migrate output plugins to new sample config format (#10910)
  * feat: migrate processor plugins to new sample config format (#10913)
  * feat: migrate aggregator plugins to new sample config format (#10912)
  * Update changelog
  * feat: generate the plugins sample config (#10886)
  * feat(inputs.mongodb): Add metrics about files currently open and currently active data handles (#7896)
  * fix: bump gonum.org/v1/gonum from 0.9.3 to 0.11.0 (#10937)
  * fix: bump github.com/golang-jwt/jwt/v4 from 4.2.0 to 4.4.1 (#10906)
  * chore: add actions/setup-go@v2 to linter config (#10935)
  * docs(external.psi): add psi plugin (#10462)
  * fix: Update gopsutil and associated dependencies for improved OpenBSD supp? (#10931)
  * docs: update rpm/deb instructions with stable URLs (#10905)
  * fix: inconsistencies in sql*Requests queries (#10553)
  * feat: add ANSI color filter for tail input plugin (#10880)
  * feat: (outputs.elasticsearch) Add healthcheck timeout (#10853)
  * feat: In Lustre input plugin, support collecting per-client stats. (#10607)
  * fix: default value for logfile rotation interval (#10883)
  * fix: redundant zfs pool tag (#10871)
  * docs: update license of dependencies (#10914)
  * fix: update vsphere info message to debug (#10903)
  * docs: fix contribute button link (#10904)
  * feat: add fritzbox as external plugin (#10818)
  * docs: improve documentation around contribution (#10825)
  * chore: set telegraf log as text block in bug reports (#10895)
  * fix: include body in error message (#10866)
  * feat: update etc/telegraf.conf and etc/telegraf_windows.conf (#10885)
  * docs: clarify the k and fields topk params (#10830)
  * chore: remove slow process test (#10856)
  * chore: update slow file rotation tests (#10857)
  * chore: switch HTTP 100 test case values (#10858)
  * chore: fix slow running intel-pmu test (#10859)
  * chore: skip longer/integration tests on -short mode (#10860)
  * chore: remove CircleCI parallelism (#10862)
  * chore: reduce timeouts and sleeps (#10861)
  * Update CHANGELOG.md
  * Update build version to 1.23.0
  * Update changelog
  * Update CHANGELOG.md</changelog>
  <changelog author="jkowalczyk@suse.com" date="1657108800">- Update to version 1.23.1:
  * Update changelog for v1.23.1
  * Update build_version.txt for v1.23.1
  * Sync sample.conf into READMEs.
  * Fix xpath config location.
  * docs(inputs.mqtt_consumer): add pivot example to readme (#11195)
  * test: Update wait statement for postgresql_extensible (#11447)
  * docs: add firehose to EXTERNAL_PLUGINS.md (#11450)
  * chore(deps): Bump github.com/prometheus/client_golang (#11437)
  * chore(deps): Bump k8s.io/api from 0.24.1 to 0.24.2 (#11434)
  * chore(deps): Bump github.com/influxdata/influxdb-observability/otel2influx from 0.2.21 to 0.2.22 (#11416)
  * chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs from 1.15.4 to 1.15.8 (#11415)
  * test: exchange confused parameters (expected vs actual) (#11422)
  * fix: Bring back old xpath section names (#11335)
  * chore(deps): Bump github.com/vmware/govmomi from 0.27.3 to 0.28.0 (#11396)
  * chore(deps): Bump github.com/golang-jwt/jwt/v4 from 4.4.1 to 4.4.2 (#11395)
  * fix: Sync back sample.confs for inputs.couchbase and outputs.groundwork. (#11413)
  * fix: resolve jolokia2 panic on null response (#11397)
  * chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/ec2 from 1.1.0 to 1.46.0 (#11382)
  * chore: Remove 'github.com/cisco-ie/nx-telemetry-proto' replacement (#11401)
  * chore: Remove 'github.com/satori/go.uuid' replacement (#11240)
  * chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/kinesis (#11380)
  * chore(deps): Bump cloud.google.com/go/pubsub from 1.22.2 to 1.23.0 (#11394)
  * chore(deps): Bump github.com/Azure/azure-kusto-go from 0.6.0 to 0.7.0 (#11378)
  * chore(deps): Bump cloud.google.com/go/bigquery from 1.8.0 to 1.33.0 (#11379)
  * chore(deps): Bump github.com/jackc/pgx/v4 from 4.15.0 to 4.16.1 (#11346)
  * chore(deps): Bump go.opentelemetry.io/collector/pdata from 0.52.0 to 0.54.0 (#11369)
  * docs: swap bytes sent/recv descriptions in nfsclient (#11376)
  * chore(deps): Bump cloud.google.com/go/pubsub from 1.18.0 to 1.22.2 (#11349)
  * chore(deps): Bump github.com/nats-io/nats.go from 1.15.0 to 1.16.0 (#11339)
  * chore(deps): Bump github.com/dynatrace-oss/dynatrace-metric-utils-go from 0.3.0 to 0.5.0 (#11342)
  * fix: Restore sample configurations broken during initial migration (#11276)
  * fix: don't require listeners to be present in overview (#9315)
  * chore: move agent config into seperate file (#11337)
  * docs: Sync sample.conf for recent features (#11348)
  * chore(deps): Bump github.com/Shopify/sarama from 1.32.0 to 1.34.1 (#11319)
  * chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/timestreamwrite from 1.3.2 to 1.13.6 (#11322)
  * fix: filter out views in mongodb lookup (#11280)
  * chore(deps): Bump github.com/fatih/color from 1.10.0 to 1.13.0 (#11340)
  * chore: fix typo (recieve -&gt; receive) (#11341)
  * chore(deps): Bump google.golang.org/api from 0.74.0 to 0.84.0 (#11338)
  * chore(deps): Bump github.com/gophercloud/gophercloud from 0.24.0 to 0.25.0 (#11321)
  * chore(deps): Bump go.mongodb.org/mongo-driver from 1.9.0 to 1.9.1 (#11320)
  * chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/dynamodb (#11328)
  * test: add coveralls coverage to master (#11256)
  * chore: make apt-get instructions consistent and add GPG fingerprint (#11326)
  * chore(deps): Bump github.com/go-logfmt/logfmt from 0.5.0 to 0.5.1 (#11299)
  * chore(deps): Bump k8s.io/client-go from 0.23.3 to 0.24.1 (#11223)
  * chore(deps): Bump google.golang.org/grpc from 1.46.2 to 1.47.0 (#11318)
  * chore(deps): Bump github.com/aws/aws-sdk-go-v2/credentials from 1.12.2 to 1.12.5 (#11297)
  * test: mark integration tests correctly (#11317)
  * test: update wait for statement for postgres (#11309)
  * docs: explain directly connecting to mongo node (#11314)
  * fix: Prevent concurrent map writes to c.UnusedFields (#11311)
  * fix: bump cloud.google.com/go/monitoring from 1.2.0 to 1.5.0 (#11295)</changelog>
  <changelog author="jkowalczyk@suse.com" date="1657627200">- Update to version 1.23.2:
  * Update changelog for v1.23.2
  * Update build_version.txt for v1.23.2
  * Sync sample.conf and README.md files.
  * docs: Update etc/telegraf.conf and etc/telegraf_windows.conf (#11483)
  * fix: allow 201 for cookies, update header docs (#11472)
  * fix(inputs.snmp): snmp UseUnconnectedUDPSocket when using udp (#10331)
  * docs: Update etc/telegraf.conf and etc/telegraf_windows.conf (#11480)
  * chore(gnmi): Add Metrics heading to README.md (#11476)
  * fix(gnmi): refactor tag-only subs for complex keys (#11011)
  * fix: use bigint for backupsize in sqlserver (#11448)
  * docs: Update etc/telegraf.conf and etc/telegraf_windows.conf (#11463)
  * chore(inputs.socket_listener): Remove parser from init (#11462)
  * fix: Deprecation warnings for non-deprecated packages (#11460)
  * chore(deps): Bump github.com/docker/docker (#11438)
  * docs: Update etc/telegraf.conf and etc/telegraf_windows.conf (#11431)
  * docs: Update etc/telegraf.conf and etc/telegraf_windows.conf (#11419)
  * docs: Update etc/telegraf.conf and etc/telegraf_windows.conf (#11414)
  * docs: Update etc/telegraf.conf and etc/telegraf_windows.conf (#11365)
  * docs: Update etc/telegraf.conf and etc/telegraf_windows.conf (#11351)
  * docs: Update etc/telegraf.conf and etc/telegraf_windows.conf (#11344)
  * chore: Remove prefix to use the default `chore(deps)` (#11315)</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658750400">- Update to version 1.23.3:
  * Update changelog for v1.23.3
  * Update build_version.txt for v1.23.3
  * fix(inputs.snmp_trap): nil map panic when use snmp_trap with netsnmp translator (#11534)
  * fix: add version number to MacOS packages
  * chore: update to go1.18.4 (#11526)
  * fix(inputs.mqtt_consumer):  topic parsing error  when topic having prefix(/) (#11527)
  * fix(inputs.sqlserver): set lower deadlock priority (#11522)
  * fix: use reader over readcloser, regen cookie-jar (#11482)
  * fix: correct init volume gatherer in openstack (#11481)
  * fix: add version number to Mac packages (#11506)
  * fix(parsers.prometheus): histogram infinity bucket must be allways present (#11490) (#11486)
  * docs: Add example output section to HTTP plugin (#11497)
  * docs: explain proxmox user/token and node_name (#11487)
  * chore(deps): Bump github.com/antchfx/jsonquery from 1.1.5 to 1.2.0 (#11461)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1658750401">- Refresh harden_telegraf.service.patch</changelog>
  <changelog author="jkowalczyk@suse.com" date="1660651200">- Update to version 1.23.4:
  * fix: remove bare url in changelog that failed lint
  * fix: update license of dependencies
  * fix: update github.com/mdlayher/netlink to 1.6.0 to fix the build
  * fix: Sync sql output and input build constraints to handle loong64 in go1.19. (#11664)
  * docs: explain PowerShell 5 encoding (#11662)
  * chore: update circle-ci orbs (#11618)
  * docs(inputs.zookeeper): document use of prometheus plugin (#11658)
  * chore(deps): bump github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs (#11653)
  * chore(deps): bump github.com/aws/aws-sdk-go-v2/feature/ec2/imds (#11652)
  * chore(deps): bump github.com/aws/aws-sdk-go-v2/service/ec2 (#11651)
  * chore(deps): bump github.com/antchfx/xmlquery from 1.3.9 to 1.3.12 (#11644)
  * fix: Bump github.com/lxc/lxd to latest git to fix https://github.com/lxc/lxd/issues/10738. (#11647)
  * chore(deps): bump google.golang.org/api from 0.85.0 to 0.91.0 (#11643)
  * chore(deps): Bump github.com/prometheus/client_golang from 1.12.2 to 1.13.0 (#11640)
  * chore(deps): bump github.com/hashicorp/consul/api from 1.12.0 to 1.13.1 (#11641)
  * chore(deps): Bump github.com/emicklei/go-restful from v2.9.5+incompatible to v3.8.0 (#11636)
  * fix(inputs.mongodb): update version check for newer versions (#11635)
  * feat: add coralogix dialect to opentelemetry (#11622)
  * fix(parsers): Linter issues (#11607)
  * chore: workaround for failing "go list -m all" (#11624)
  * chore(deps): bump github.com/sirupsen/logrus from 1.8.1 to 1.9.0 (#11616)
  * chore: Update to go1.18.5 (#11621)
  * docs: Add source tag best practices to the metric schema docs (#11620)
  * chore: Fix support issue template (#11617)
  * fix(inputs.kubernetes): refresh token from file at each read (#11578)
  * chore(deps): Update github.com/Shopify/sarama from 1.34.1 to 1.35.0 (#11603)
  * chore(deps): update k8s.io/apimachinery from 0.24.2 to 0.24.3 (#11602)
  * chore(deps): Update cloud.google.com/go/pubsub from 1.23.0 to 1.24.0 (#11604)
  * chore(deps): Update github.com/BurntSushi/toml from 0.4.1 to 1.2.0 (#11605)
  * chore: Migrate all issue templates to yaml (#11612)
  * docs(inputs.exec): clarify parsing for ints (#11597)
  * fix(outputs): Linter issues (#11595)
  * fix(inputs.kube_inventory): send file location to enable token auto-refresh (#11577)
  * chore: update github.com/harlow/kinesis-consumer (#11599)
  * chore(deps): Bump github.com/signalfx/golib/v3 from 3.3.43 to 3.3.45 (#11598)
  * chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/dynamodb (#11584)
  * chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/kinesis (#11585)
  * chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/cloudwatch (#11586)
  * chore(deps): Bump github.com/Azure/azure-event-hubs-go/v3 (#11590)
  * test: fix openetelemtry test (#11573)
  * fix(inputs): Linter issues (#11576)
  * chore(deps): Bump github.com/pion/dtls/v2 from 2.0.13 to 2.1.5 (#11581)
  * chore(deps): Bump github.com/Azure/go-autorest/autorest/adal (#11583)
  * chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs (#11582)
  * chore(deps): Bump github.com/shirou/gopsutil/v3 from 3.22.4 to 3.22.7 (#11580)
  * fix(inputs.cloudwatch): customizable batch size when querying (#10851)
  * chore(deps): Bump github.com/eclipse/paho.mqtt.golang from 1.3.5 to 1.4.1 (#11347)
  * chore(deps): Bump github.com/vmware/govmomi from 0.28.0 to 0.29.0 (#11568)
  * chore(deps): Bump github.com/karrick/godirwalk from 1.16.1 to 1.17.0 (#11574)
  * chore(deps): Bump github.com/go-ldap/ldap/v3 from 3.4.1 to 3.4.4 (#11569)
  * chore(deps): Update all go.opentelemetry.io dependencies (#11494)
  * chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/ec2 from 1.46.0 to 1.51.0 (#11567)
  * chore(deps): Bump github.com/apache/thrift from 0.15.0 to 0.16.0 (#11565)
  * chore(deps): Bump github.com/testcontainers/testcontainers-go from 0.12.0 to 0.13.0 (#11412)
  * fix: Updating credentials file to not use endpoint_url parameter (#10841)
  * fix(inputs.opcua): return an error with mismatched types (#11539)
  * fix(inputs.stackdriver): Handle when no buckets available (#11556)
  * docs(inputs.mysql): Add link to docs on how to enable mysql's performance schema (#11555)
  * chore: add missing section to kafka_consumer's sample.conf (#11553)
  * docs: add timeout section (#11550)
  * fix(inputs.sqlserver): set lower deadlock priority (#11548)
  * docs(inputs.modbus): README changes regarding request.tags (#11541)
  * docs: run make-docs (#11514)
  * test: do not have leadership election during kafka test (#11404)
  * chore: Update CRLF line endings in agent.conf to LF (#11501)</changelog>
  <changelog author="jkowalczyk@suse.com" date="1664884800">- Update to version 1.24.0:
  * feat(inputs.directory_monitor): Support paths for files_to_ignore and files_to_monitor (#11784)
  * chore(inputs.jolokia2): Move agent and proxy one level up (#11637)
  * fix(outputs.execd): Fixing the execd behavior to not throw error when partially unserializable metrics are written. (#11767)
  * fix: add missing entry json_transformation to missingTomlField (#11779)
  * fix: Do not error out for parsing errors in datadog mode. (#11777)
  * chore: update to go1.19.1 (#11776)
  * fix(inputs.mongodb): add an option to bypass connection errors on start (#11629)
  * feat(inputs.directory_monitor): Traverse sub-directories (#11773)
  * fix(inputs.jolokia2): add optional origin header (#11692)
  * chore(deps): Bump google.golang.org/grpc from 1.48.0 to 1.49.0 (#11746)
  * docs: Add go report badge (#11774)
  * feat(inputs.sqlserver): Improved filtering for active requests (#11709)
  * chore(deps): Bump github.com/Azure/azure-kusto-go from 0.7.0 to 0.8.0 (#11770)
  * docs(external): add hwinfo external plugin (#11757)
  * chore(deps): Bump gonum.org/v1/gonum from 0.11.0 to 0.12.0 (#11764)
  * chore(deps): Bump github.com/urfave/cli/v2 from 2.11.2 to 2.14.1 (#11763)
  * fix: sort labels in prometheusremotewrite serializer (#11755)
  * fix(inputs.opcua): Assign node id correctly (#11723)
  * chore(deps): Bump github.com/aws/aws-sdk-go-v2/feature/ec2/imds (#11747)
  * chore: Rename Telegraf receiver argument from a to t (#11742)
  * chore(deps): Bump k8s.io/client-go from 0.24.3 to 0.25.0 (#11745)
  * chore(deps): Bump github.com/gophercloud/gophercloud (#11744)
  * chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/dynamodb (#11743)
  * chore: update github.com/Shopify/sarama from v1.35 to v1.36 (#11713)
  * chore(deps): Bump github.com/rabbitmq/amqp091-go from 1.3.4 to 1.4.0 (#11699)
  * feat(outputs.postgresql): add Postgresql output (#11672)
  * chore(deps): Bump github.com/tidwall/gjson from 1.14.1 to 1.14.3 (#11721)
  * feat: Migrate to urfave/cli (#11700)
  * chore(deps): Bump github.com/hashicorp/consul/api from 1.13.1 to 1.14.0 (#11717)
  * feat(inputs.linux_cpu): Add plugin to collect CPU metrics on Linux (#8988)
  * chore(deps): Bump github.com/aerospike/aerospike-client-go/v5 (#11716)
  * chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/sts (#11711)
  * chore(deps): Bump github.com/wavefronthq/wavefront-sdk-go (#11710)
  * fix(inputs.sqlserver): fixing wrong filtering for sqlAzureMIRequests and sqlAzureDBRequests (#11701)
  * fix: use os-agnositc systemd detection, remove sysv in RPM packaging (#10570)
  * feat(inputs.mqtt_consumer): Add incoming mqtt message size calculation (#11426)
  * feat: tool to build custom Telegraf builds (#11524)
  * chore: Update golangci-lint (#11705)
  * docs: update ms sql dsn example (#11704)
  * feat(serializers.prometheus): Provide option to reduce payload size by removing HELP from payload (#11690)
  * feat(inputs.sqlserver): Add db name to io stats for MI (#11688)
  * fix: refactor telegraf version (#11656)
  * fix(agent): add flushBatch method (#11615)
  * chore(deps): Bump go.mongodb.org/mongo-driver from 1.9.1 to 1.10.1 (#11676)
  * chore(deps): Bump github.com/aliyun/alibaba-cloud-sdk-go from 1.61.1695 to 1.61.1727 (#11695)
  * fix(inputs.prometheus): plugin run outside k8s cluster error (#11673)
  * chore: only lint changed READMEs (#11677)
  * chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/timestreamwrite (#11679)
  * fix: remove bare url in changelog that failed lint
  * chore: Move aws credentials to plugins/common. (#11681)
  * chore: Use build tags to select plugins (#11654)
  * chore(deps): Bump github.com/urfave/cli/v2 from 2.3.0 to 2.11.2 (#11675)
  * chore(deps): bump github.com/aws/aws-sdk-go-v2/service/ec2 (#11670)
  * chore(deps): Bump github.com/Azure/go-autorest/autorest (#11669)
  * chore(deps): Bump github.com/jackc/pgx/v4 from 4.16.1 to 4.17.0 (#11671)
  * fix: Sync sql output and input build constraints to handle loong64 in go1.19. (#11664)
  * docs: explain PowerShell 5 encoding (#11662)
  * chore: update circle-ci orbs (#11618)
  * docs(inputs.zookeeper): document use of prometheus plugin (#11658)
  * feat(outputs.iotdb): Add new output plugin to support Apache IoTDB (#11557)
  * chore(deps): bump github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs (#11653)
  * chore(deps): bump github.com/aws/aws-sdk-go-v2/feature/ec2/imds (#11652)
  * feat(outputs.amqp): Add proxy support (#11649)
  * chore(deps): bump github.com/aws/aws-sdk-go-v2/service/ec2 (#11651)
  * chore: Markdown fixes for inputs/[a-m]* (#11606)
  * chore(deps): bump github.com/antchfx/xmlquery from 1.3.9 to 1.3.12 (#11644)
  * fix: Bump github.com/lxc/lxd to latest git to fix https://github.com/lxc/lxd/issues/10738. (#11647)
  * chore(deps): bump google.golang.org/api from 0.85.0 to 0.91.0 (#11643)
  * chore(deps): Bump github.com/prometheus/client_golang from 1.12.2 to 1.13.0 (#11640)
  * feat(common.tls): Implement minimum TLS version for clients (#11493)
  * chore(deps): bump github.com/hashicorp/consul/api from 1.12.0 to 1.13.1 (#11641)
  * chore(deps): Bump github.com/emicklei/go-restful from v2.9.5+incompatible to v3.8.0 (#11636)
  * feat: Supervisord input plugin (#9015)
  * chore(parsers.json_v2): Cleanup test by reusing testutil function (#11627)
  * fix(inputs.mongodb): update version check for newer versions (#11635)
  * feat: add coralogix dialect to opentelemetry (#11622)
  * fix(inputs.x509): Multiple sources with non-overlapping DNS entries. (#11613)
  * fix(parsers): Linter issues (#11607)
  * feat (inputs/prometheus): add setting to set custom namespace label name to avoid conflicts (#11538)
  * chore: workaround for failing "go list -m all" (#11624)
  * feat(processors.starlark): Add starlark benchmark for tag-concatenation (#11306)
  * chore(deps): bump github.com/sirupsen/logrus from 1.8.1 to 1.9.0 (#11616)
  * chore: Update to go1.18.5 (#11621)
  * chore: Using Windows, add exe extension to tools (#11608)
  * docs: Add source tag best practices to the metric schema docs (#11620)
  * feat(external): Add nsdp external plugin (#11619)
  * chore: Fix support issue template (#11617)
  * fix(inputs.kubernetes): refresh token from file at each read (#11578)
  * feat(inputs.ntpq): Allow to specify `reach` output format (#11594)
  * chore(deps): Update github.com/Shopify/sarama from 1.34.1 to 1.35.0 (#11603)
  * chore(deps): update k8s.io/apimachinery from 0.24.2 to 0.24.3 (#11602)
  * chore(deps): Update cloud.google.com/go/pubsub from 1.23.0 to 1.24.0 (#11604)
  * chore(deps): Update github.com/BurntSushi/toml from 0.4.1 to 1.2.0 (#11605)
  * chore: Migrate all issue templates to yaml (#11612)
  * docs(inputs.exec): clarify parsing for ints (#11597)
  * fix(outputs): Linter issues (#11595)
  * fix(inputs.kube_inventory): send file location to enable token auto-refresh (#11577)
  * feat(inputs.ntpq): Add possibility to query remote servers (#11592)
  * feat(inputs.openstack): Add "allow_reauth" config option for openstack client (#11572)
  * feat(inputs.ntpq): Add option to specify command flags (#11593)
  * chore: update github.com/harlow/kinesis-consumer (#11599)
  * chore(deps): Bump github.com/signalfx/golib/v3 from 3.3.43 to 3.3.45 (#11598)
  * chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/dynamodb (#11584)
  * chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/kinesis (#11585)
  * chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/cloudwatch (#11586)
  * chore(deps): Bump github.com/Azure/azure-event-hubs-go/v3 (#11590)
  * test: fix openetelemtry test (#11573)
  * fix(inputs): Linter issues (#11576)
  * chore(deps): Bump github.com/pion/dtls/v2 from 2.0.13 to 2.1.5 (#11581)
  * chore(deps): Bump github.com/Azure/go-autorest/autorest/adal (#11583)
  * chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs (#11582)
  * chore(deps): Bump github.com/shirou/gopsutil/v3 from 3.22.4 to 3.22.7 (#11580)
  * fix(outputs.wavefront): update wavefront sdk and use non-deprecated APIs (#11560)
  * chore(inputs.ntpq): Cleanup existing plugin (#11575)
  * fix(inputs.cloudwatch): customizable batch size when querying (#10851)
  * chore(deps): Bump github.com/eclipse/paho.mqtt.golang from 1.3.5 to 1.4.1 (#11347)
  * chore(deps): Bump github.com/vmware/govmomi from 0.28.0 to 0.29.0 (#11568)
  * chore(deps): Bump github.com/karrick/godirwalk from 1.16.1 to 1.17.0 (#11574)
  * chore(deps): Bump github.com/go-ldap/ldap/v3 from 3.4.1 to 3.4.4 (#11569)
  * chore(deps): Update all go.opentelemetry.io dependencies (#11494)
  * chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/ec2 from 1.46.0 to 1.51.0 (#11567)
  * chore(deps): Bump github.com/apache/thrift from 0.15.0 to 0.16.0 (#11565)
  * chore(deps): Bump github.com/testcontainers/testcontainers-go from 0.12.0 to 0.13.0 (#11412)
  * feat(outputs.sql): Add settings for go sql.DB settings (#11551)
  * fix: Updating credentials file to not use endpoint_url parameter (#10841)
  * fix: Remove shell execution for license-checker. (#11563)
  * chore: More parser cleanup (#11532)
  * feat: Add license checking tool (#11398)
  * feat(parsers.xpath): Add support for returning underlying data-types (#11558)
  * fix(inputs.opcua): return an error with mismatched types (#11539)
  * feat(output.mqtt): Add support for MQTT protocol version 5 (#11284)
  * fix(inputs.stackdriver): Handle when no buckets available (#11556)
  * docs(inputs.mysql): Add link to docs on how to enable mysql's performance schema (#11555)
  * chore: add missing section to kafka_consumer's sample.conf (#11553)
  * docs: add timeout section (#11550)
  * fix(inputs.sqlserver): set lower deadlock priority (#11548)
  * feat(inputs.kafka_consumer): Option to set default fetch message bytes (#11220)
  * docs(inputs.modbus): README changes regarding request.tags (#11541)
  * feat(outputs.graphite): Retry connecting to servers with failed send attempts (#11439)
  * feat(inputs.statsd): add median timing calculation to statsd input plugin (#11518)
  * fix(inputs.snmp_trap): nil map panic when use snmp_trap with netsnmp translator (#11534)
  * feat(parsers.json): Allow JSONata based transformations in JSON serializer (#11251)
  * fix: Add version number to MacOS packages (#11512)
  * feat(inputs.syslog): log remote host as source tag (#9440)
  * feat(outputs.groundwork): Improve metric parsing to extend output (#11443)
  * feat: added metrics for member and replica-set avg health of MongoDB  (#11516)
  * feat(outputs.redistimeseries): Add integration test (#11529)
  * chore: update to go1.18.4 (#11526)
  * fix(inputs.mqtt_consumer):  topic parsing error  when topic having prefix(/) (#11527)
  * fix(inputs.sqlserver): set lower deadlock priority (#11522)
  * fix: make docs + go.mod cleanup post-redis merge (#11521)
  * feat: Add RedisTimeSeries plugin (#11054)
  * docs: run make-docs (#11514)
  * feat(inputs.cisco_telemetry_mdt): Add GRPC Keepalive/timeout config options (#11458)
  * fix: use reader over readcloser, regen cookie-jar (#11482)
  * fix: correct init volume gatherer in openstack (#11481)
  * feat: Nats Jetstream consumer add simple support for jetstream subjects (#11373)
  * Revert "fix: add version number to Mac packages (#11506)" (#11510)
  * fix: add version number to Mac packages (#11506)
  * fix(parsers.prometheus): histogram infinity bucket must be allways present (#11490) (#11486)
  * feat(inputs.modbus): Error out on requests with no fields defined. (#11469)
  * test: do not have leadership election during kafka test (#11404)
  * docs: Add example output section to HTTP plugin (#11497)
  * chore: cleanup go.mod and dependency licences (#11503)
  * feat: add Stomp (Active MQ) output plugin (#7995)
  * chore: Update CRLF line endings in agent.conf to LF (#11501)
  * feat: add proxy support for outputs/cloudwatch (#11399)
  * docs: explain proxmox user/token and node_name (#11487)
  * chore: Check for readme changes in each PR (#11495)
  * chore: Skip building artifacts on master branch (#11465)
  * docs: Update etc/telegraf.conf and etc/telegraf_windows.conf (#11496)
  * fix: Backport sync sample.conf and README.md files (#11489)
  * feat(inputs.smart): Collect SSD endurance information where available in smartctl (#11391)
  * chore(deps): Bump github.com/antchfx/jsonquery from 1.1.5 to 1.2.0 (#11461)
  * feat(inputs.logstash): Record number of failures (#9185)
  * docs: Update etc/telegraf.conf and etc/telegraf_windows.conf (#11483)
  * fix: allow 201 for cookies, update header docs (#11472)
  * fix(inputs.snmp): snmp UseUnconnectedUDPSocket when using udp (#10331)
  * docs: Update etc/telegraf.conf and etc/telegraf_windows.conf (#11480)
  * fix(inputs.upsd): Move to new sample.conf style (#11471)
  * feat(rabbitmq): add support for head_message_timestamp metric (#11475)
  * fix: Update prometheusremotewrite parser to be a new style parser plugin (#11456)
  * chore(gnmi): Add Metrics heading to README.md (#11476)
  * fix(gnmi): refactor tag-only subs for complex keys (#11011)
  * chore: sign nightly artifacts to detect issues before release (#11464)
  * feat(inputs.nginx_plus_api): Gather limit_reqs metrics (#10874)
  * test: ignore return code on check-update (#11445)
  * fix: use bigint for backupsize in sqlserver (#11448)
  * feat: Migrate influx and influx_upstream parsers to new style (#11432)
  * docs: Update etc/telegraf.conf and etc/telegraf_windows.conf (#11463)
  * chore(inputs.socket_listener): Remove parser from init (#11462)
  * feat(input): add upsd implementation (#9890)
  * fix: Deprecation warnings for non-deprecated packages (#11460)
  * chore(deps): Bump github.com/docker/docker (#11438)
  * fix: Update prometheus parser to be a new style parser plugin (#11440)
  * docs(inputs.mqtt_consumer): add pivot example to readme (#11195)
  * test: Update wait statement for postgresql_extensible (#11447)
  * docs: add firehose to EXTERNAL_PLUGINS.md (#11450)
  * chore(deps): Bump github.com/prometheus/client_golang (#11437)
  * chore(deps): Bump k8s.io/api from 0.24.1 to 0.24.2 (#11434)
  * feat: Migrate nagios parser to new style (#11402)
  * fix: add reset-mode flag for CSV parser (#11288)
  * docs: Update etc/telegraf.conf and etc/telegraf_windows.conf (#11431)
  * feat: adding aws metric streams input plugin (#11233)
  * test: run check-update on dnf/yum (#11430)
  * chore(deps): Bump github.com/influxdata/influxdb-observability/otel2influx from 0.2.21 to 0.2.22 (#11416)
  * feat: migrate grok to new parser style (#11408)
  * feat: Migrate dropwizard parser to new style (#11371)
  * chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs from 1.15.4 to 1.15.8 (#11415)
  * test: exchange confused parameters (expected vs actual) (#11422)
  * feat: Migrate logfmt parser to new style (#11366)
  * fix: Bring back old xpath section names (#11335)
  * feat: Migrate graphite parser to new style (#11405)
  * feat: migrate value parser to new style (#11407)
  * docs: Update etc/telegraf.conf and etc/telegraf_windows.conf (#11419)
  * feat(outputs/wavefront): make maximum http batch size configurable (#11201)
  * feat: migrate form_urlencoded parser to new style (#11381)
  * chore: move printing of sample config file out of config.go (#11409)
  * chore(deps): Bump github.com/vmware/govmomi from 0.27.3 to 0.28.0 (#11396)
  * chore(deps): Bump github.com/golang-jwt/jwt/v4 from 4.4.1 to 4.4.2 (#11395)
  * docs: Update etc/telegraf.conf and etc/telegraf_windows.conf (#11414)
  * fix: Sync back sample.confs for inputs.couchbase and outputs.groundwork. (#11413)
  * fix: resolve jolokia2 panic on null response (#11397)
  * test: add nightly package testing to amd64/linux (#11377)
  * chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/ec2 from 1.1.0 to 1.46.0 (#11382)
  * chore: Remove 'github.com/cisco-ie/nx-telemetry-proto' replacement (#11401)
  * chore: Remove 'github.com/satori/go.uuid' replacement (#11240)
  * chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/kinesis (#11380)
  * chore(deps): Bump cloud.google.com/go/pubsub from 1.22.2 to 1.23.0 (#11394)
  * feat: Migrate collectd parser to new style (#11367)
  * feat: allow collecting node-level metrics for Couchbase buckets (#9717)
  * feat: migrate wavefront parser to new style (#11374)
  * chore(deps): Bump github.com/Azure/azure-kusto-go from 0.6.0 to 0.7.0 (#11378)
  * chore(deps): Bump cloud.google.com/go/bigquery from 1.8.0 to 1.33.0 (#11379)
  * chore(deps): Bump github.com/jackc/pgx/v4 from 4.15.0 to 4.16.1 (#11346)
  * chore(deps): Bump go.opentelemetry.io/collector/pdata from 0.52.0 to 0.54.0 (#11369)
  * docs: swap bytes sent/recv descriptions in nfsclient (#11376)
  * chore(deps): Bump cloud.google.com/go/pubsub from 1.18.0 to 1.22.2 (#11349)
  * chore(deps): Bump github.com/nats-io/nats.go from 1.15.0 to 1.16.0 (#11339)
  * chore(deps): Bump github.com/dynatrace-oss/dynatrace-metric-utils-go from 0.3.0 to 0.5.0 (#11342)
  * docs: Update etc/telegraf.conf and etc/telegraf_windows.conf (#11365)
  * feat: Migrate json_v2 parser to new style (#11343)
  * fix: Restore sample configurations broken during initial migration (#11276)
  * feat: Add CSV serializer (#11307)
  * fix: don't require listeners to be present in overview (#9315)
  * docs: Update etc/telegraf.conf and etc/telegraf_windows.conf (#11351)
  * feat: Migrate json parser to new style (#11226)
  * chore: move agent config into seperate file (#11337)
  * docs: Sync sample.conf for recent features (#11348)
  * chore(deps): Bump github.com/Shopify/sarama from 1.32.0 to 1.34.1 (#11319)
  * feat(x509_cert): add proxy support (#9319)
  * feat(redis): add Redis 6 ACL auth support (#9333)
  * docs: Update etc/telegraf.conf and etc/telegraf_windows.conf (#11344)
  * chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/timestreamwrite from 1.3.2 to 1.13.6 (#11322)
  * fix: filter out views in mongodb lookup (#11280)
  * chore(deps): Bump github.com/fatih/color from 1.10.0 to 1.13.0 (#11340)
  * chore: fix typo (recieve -&gt; receive) (#11341)
  * chore(deps): Bump google.golang.org/api from 0.74.0 to 0.84.0 (#11338)
  * chore(deps): Bump github.com/gophercloud/gophercloud from 0.24.0 to 0.25.0 (#11321)
  * chore(deps): Bump go.mongodb.org/mongo-driver from 1.9.0 to 1.9.1 (#11320)
  * chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/dynamodb (#11328)
  * test: add coveralls coverage to master (#11256)
  * chore: make apt-get instructions consistent and add GPG fingerprint (#11326)
  * chore(deps): Bump github.com/go-logfmt/logfmt from 0.5.0 to 0.5.1 (#11299)
  * chore(deps): Bump k8s.io/client-go from 0.23.3 to 0.24.1 (#11223)
  * chore(deps): Bump google.golang.org/grpc from 1.46.2 to 1.47.0 (#11318)
  * chore(deps): Bump github.com/aws/aws-sdk-go-v2/credentials from 1.12.2 to 1.12.5 (#11297)
  * test: mark integration tests correctly (#11317)
  * test: update wait for statement for postgres (#11309)
  * chore: Remove prefix to use the default `chore(deps)` (#11315)
  * docs: explain directly connecting to mongo node (#11314)
  * fix: Prevent concurrent map writes to c.UnusedFields (#11311)
  * feat: Make the command "config" a subcommand (#11282)
  * feat: add default appType as config option to groundwork output (#11300)
  * fix(parsers/xpath): Reduce debug messages when empty selection is allowed (#11302)
  * feat(inputs.x509_cert): add smtp protocol (#11271)
  * fix: bump cloud.google.com/go/monitoring from 1.2.0 to 1.5.0 (#11295)
  * fix: Remove all rebase logic from CI (#11293)
  * fix: Don't rebase on master when building packages (#11291)</changelog>
  <changelog author="jkowalczyk@suse.com" date="1664884801">- Update to version 1.24.1:
  * fix(parsers.csv): Remove direct checks for the parser type (#11825)
  * fix(inputs.ntpq): Handle pools with "-" when (#11827)
  * docs: update customization docs (#11822)
  * fix(parsers): Unwrap parser and remove some special handling (#11826)
  * fix: Enable global confirmation for installing mingw (#11835)
  * fix(parsers): Memory leak for plugins using ParserFunc. (#11815)
  * fix(inputs.modbus): Do not fail if a single slave reports errors (#11785)
  * fix(parsers.xpath): Add array index when expanding names. (#11781)
  * fix(inputs.ceph): Modernize Ceph input plugin metrics (#10797)
  * docs: Update etc/telegraf.conf and etc/telegraf_windows.conf (#11800)
  * chore(deps): Bump cloud.google.com/go/bigquery from 1.33.0 to 1.40.0 (#11796)
  * chore(deps): Bump github.com/wavefronthq/wavefront-sdk-go (#11799)
  * docs: Update etc/telegraf.conf and etc/telegraf_windows.conf (#11798)
  * chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/ec2 (#11789)
  * docs: Remove warning not to remove go:embed (#11797)
  * fix: Clear error message when provided config is not a text file (#11787)
  * chore(deps): Bump github.com/urfave/cli/v2 from 2.14.1 to 2.16.3 (#11794)
  * chore(deps): Bump cloud.google.com/go/pubsub from 1.24.0 to 1.25.1 (#11788)
  * docs: Update etc/telegraf.conf and etc/telegraf_windows.conf (#11792)
  * chore: Run amd64 package on master so config is generated (#11790)
  * feat(processors.parser): Add option to parse tags (#11228)</changelog>
  <changelog author="jkowalczyk@suse.com" date="1664884802">- Update to version 1.24.2:
  * fix(parser.xpath): Handle floating-point times correctly (#11875)
  * fix(cli): Support old style of filtering sample configs (#11896)
  * chore: update github.com/shirou/gopsutil from v3.22.8 to v3.22.9 (#11923)
  * fix(inputs.influxdb_listener): error on invalid precision (#11866)
  * docs: Ran `make docs` (#11914)
  * docs(inputs.opcua): fix typo (#11897)
  * chore(lint): Removed deprecated varcheck linter (#11910)
  * docs: Update etc/telegraf.conf and etc/telegraf_windows.conf (#11885)
  * chore(deps): github.com/docker/distribution from v2.7.1 ti v2.8.1 (#11893)
  * chore(deps): Bump github.com/rabbitmq/amqp091-go from 1.4.0 to 1.5.0 (#11891)
  * chore(deps): Bump github.com/aws/smithy-go from 1.13.2 to 1.13.3 (#11890)
  * chore(deps): Bump go.mongodb.org/mongo-driver from 1.10.1 to 1.10.2 (#11887)
  * chore(processors): Convert processors to `ParserPlugin`s (#11600)
  * chore(deps): Replace go-ping by pro-bing (#11836)
  * chore(deps): Bump github.com/nats-io/nats.go from 1.16.0 to 1.17.0 (#11839)
  * fix(common.kafka): Enable TLS in Kafka plugins without custom config (#11519)
  * docs(inputs.cpu): explain macos cpu support requires cgo (#11883)
  * fix(inputs.mqtt_consumer): rework connection and message tracking (#10696)
  * docs: Update etc/telegraf.conf and etc/telegraf_windows.conf (#11881)
  * fix(inputs.internet_speed): rename enable_file_download to match upstream intent (#11877)
  * build: github Workflows security hardening (#11843)
  * docs: Update etc/telegraf.conf and etc/telegraf_windows.conf (#11859)
  * fix: Update dependencies for OpenBSD support (#11861)
  * chore: Remove deprecated build tags (#11867)
  * fix(inputs.mongodb): actually start plugin correctly (#11849)
  * fix: re-allow specifying the influx parser type (#11806)
  * chore: update github.com/jackc/pgx/v4 from v4.17.0 to v4.17.1 (#11858)
  * chore: update github.com/lxc/lxd to latest (#11848)
  * chore(deps): Bump github.com/aerospike/aerospike-client-go/v5 from 5.9.0 to 5.10.0 (#11844)
  * chore: remove deprecated io/ioutils (#11678)
  * fix(internal.ethtool): avoid internal name conflict with aws (#11696)
  * docs(inputs.nvidia_smi): Example of how to enable nvidia-smi via docker compose (#11833)
  * chore(deps): Bump k8s.io/apimachinery from 0.25.0 to 0.25.1 (#11840)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1664884803">- Add _constraints minimum disk 4G to avoid build failures</changelog>
  <changelog author="jkowalczyk@suse.com" date="1667476800">- Update to version 1.24.3:
  * Revert "feat: run govulncheck nightly on master branch (#11977)" (#12054)
  * Update build_version.txt for v1.24.3
  * Resolve conflict caused by earlier cherry pick error
  * chore: update to go v1.19.3 (#12142)
  * fix(inputs.directory_monitor): allow cross filesystem directories (#12124)
  * fix(serializers.splunkmetric): provide option to remove event metric tag (#12024)
  * chore(inputs.socket_listener): Reorganize plugin code (#12031)
  * chore: Fix linter findings introduced in last PRs (#12131)
  * chore(deps): bump github.com/nats-io/nats-server/v2 from 2.8.4 to 2.9.4 (#12134)
  * chore(deps): bump cloud.google.com/go/monitoring from 1.5.0 to 1.7.0 (#12135)
  * chore(parsers.xpath): Add correct deprecation tags (#11986)
  * chore: update OpenTelemetry v0.2.30 / v0.63.0 (#12119)
  * docs: ran make docs (#12120)
  * docs(aggregators.derivative): Remove incorrect comment (#12026)
  * docs(serializers.json): specify version of jsonata used (#12117)
  * fix(processors.parser): Keep name of original metric if parser doesn't return one (#12116)
  * docs: add global configuration header (#12107)
  * fix(inputs.modbus): Handle field-measurement definitions correctly on duplicate field check (#12109)
  * test(outputs.graylog): skip tcp/udp tests on windows &amp; darwin (#12110)
  * chore(common.shim): check err of s.writeProcessedMetrics for the linter (#12103)
  * chore: Increase golangci-lint timeout (#12106)
  * chore: shut down plugins gracefully to prevent race (#12102)
  * chore: skip integration test with race (#12100)
  * chore: add kafka round trip integration test using inputs.kafka_consumer and outputs.kafka (#12058)
  * chore(deps): bump github.com/prometheus/client_model from 0.2.0 to 0.3.0 (#12097)
  * chore(deps): bump github.com/gopcua/opcua from 0.3.3 to 0.3.7 (#12095)
  * chore(deps): bump google.golang.org/api from 0.95.0 to 0.100.0 (#12096)
  * chore(deps): bump github.com/aws/aws-sdk-go-v2/service/dynamodb (#12098)
  * feat(tools): Allow to markdown includes for sections (#12075)
  * fix(config): set default parser (#12076)
  * fix(processors): Correctly setup processors (#12081)
  * fix: update systemd unit description (#12093)
  * chore(deps): update modernc.org/libc from v1.20.3 to v1.21.2 (#12090)
  * test(outputs.sql): further wait for clickhouse writes (#12086)
  * test: update integration test occurrences (#12085)
  * fix(agent): panic as tickers slice was off-by-one in size (#12077)
  * test(inputs.mcrouter): add eventually to pause for metrics (#12074)
  * fix: Restore warning on unused config option(s) (#12063)
  * fix(inputs.kafka): switch to sarama's new consumer group rebalance strategy setting (#12064)
  * docs(inputs.http): add use system proxy config option (#12069)
  * fix(inputs.modbus): add slave id to failing connection (#12038)
  * docs(aggregators.starlark): corrected typo mentioning wrong func name (#12066)
  * chore: Resolve deprecated linter issues (#12051)
  * fix(inputs.zookeeper): add the ability to parse floats as floats (#12023)
  * test: add additional checks, waits in integration tests (#12056)
  * chore: Update golangci-lint Go version (#12055)
  * docs(inputs.mongodb): update supported versions (#12048)
  * chore(deps): bump testcontainers-go from 0.13.0 to 0.14.0 and address breaking change (#12039)
  * chore(deps): bump github.com/Shopify/sarama from 1.36.0 to 1.37.2 (#11980)
  * chore(deps): bump github.com/aliyun/alibaba-cloud-sdk-go (#12036)
  * chore(deps): bump github.com/aws/aws-sdk-go-v2/service/kinesis (#12037)
  * chore(deps): Bump cloud.google.com/go/bigquery from 1.40.0 to 1.42.0 (#11937)
  * chore(deps): bump github.com/yuin/goldmark from 1.4.13 to 1.5.2 (#12035)
  * chore(deps): bump github.com/signalfx/golib/v3 from 3.3.45 to 3.3.46 (#12034)
  * feat: run govulncheck nightly on master branch (#11977)
  * chore(deps): bump modernc.org/sqlite from 1.17.3 to 1.19.2 (#12030)
  * chore(deps): bump k8s.io/api from 0.25.2 to 0.25.3 (#12029)
  * chore(deps): bump k8s.io/api from 0.25.0 to 0.25.2 (#12001)
  * docs(inputs.tomcat): clean up fields (#12018)
  * fix(regression): Fixes problem with metrics not exposed by plugins. (#12016)
  * refactor: Prevent import from going the wrong way (#12004)
  * test: add dovecot integration test (#11996)
  * chore: Fix installgo_mac.sh using correct hash (#12002)
  * chore(deps): bump k8s.io/apimachinery from 0.25.1 to 0.25.2 (#11938)
  * chore: resolve linter issues for unhandled-error (#11969)
  * chore: Tool to update Telegraf to use new Go version (#11968)
  * test: add integration test for recovering after invalid data (#11994)
  * fix(inputs.syslog): print error when no error or message given (#11997)
  * chore: resolve linter issues for confusing-naming and confusing-results (#11956)
  * fix(parsers.json_v2): Remove BOM before parsing (#11926)
  * chore: Resolve linter issues for ineffassign, nilerr, gosimple... (#11966)
  * fix(inputs.opcua): Add metric tags to node (#11993)
  * chore(inputs.powerdns): Don't run  flaky test on Windows (#11982)
  * chore(inputs.cloud_pubsub_push): Don't run flaky test on Windows (#11984)
  * chore(ci): Migrate to scheduled pipeline (#11981)
  * chore: Resolve linter issues for plugins/common package (#11964)
  * chore(deps): bump github.com/aws/aws-sdk-go-v2/config (#11979)
  * chore(inputs.socket_listener): Reorganize test to be table-based. (#11970)
  * chore(deps): bump github.com/aws/aws-sdk-go-v2/service/cloudwatch (#11972)
  * docs: Update etc/telegraf.conf and etc/telegraf_windows.conf (#11965)
  * chore: Bump golangci-lint to 1.50.0 (#11957)
  * chore: update OpenTelemetry plugins to latest release (#11943)
  * fix: Setting `enable_tls` has incorrect default value (#11941)
  * chore: update to go1.19.2 (#11940)
  * chore(deps): bump github.com/aws/aws-sdk-go-v2/credentials from 1.12.5 to 1.12.21 (#11936)
  * chore(deps): Update github.com/hashicorp/consul/api from 1.14.0 to 1.15.2 (#11894)
  * chore(deps): update github.com/gofrs/uuid from 4.2.0+incompatible to 4.3.0+incompatible (#11935)
  * fix(inputs.modbus): Improve duplicate field checks (#11912)
  * chore(deps): update github.com/sensu/sensu-go/api/core/v2 from 2.14.0 to 2.15.0 (#11928)
  * chore: Resolve linter issues in config.go and config_test.go (#11929)
  * docs: add libvirt plugin to external input plugins list (#11828)
  * build(rpm): Allow building RPMs cross-OS (#11904)
  * chore(deps): Bump github.com/snowflakedb/gosnowflake from 1.6.2 to 1.6.13 (#11886)</changelog>
</package>
<package pkgid="7bcdf906016881f6aa045f952ea87fca541fe06254c88b7a44074a802108d859" name="telegraf" arch="i586">
  <version epoch="0" ver="1.24.3" rel="bp154.2.3.1"/>
  <changelog author="Felix Niederwanger &lt;felix.niederwanger@suse.com&gt;" date="1642766400">- Build-requirement increased to go &gt; 1.17</changelog>
  <changelog author="jkowalczyk@suse.com" date="1650888000">- Update to version 1.21.3:
  * Update license of dependencies file
  * fix: collapsed fields by calling more indepth function (#10430)
  * docs: Update deprecation readme (#10529)
  * chore: update grpc to v1.44.0 (#10525)
  * fix: bump google.golang.org/api from 0.54.0 to 0.65.0 (#10434)
  * fix: typo in docs (#10441)
  * fix: bump github.com/antchfx/xmlquery from 1.3.6 to 1.3.9 (#10507)
  * fix: bump github.com/nsqio/go-nsq from 1.0.8 to 1.1.0 (#10521)
  * fix: bump github.com/prometheus/common from 0.31.1 to 0.32.1 (#10506)
  * fix: ipset crash when command not found (#10474)
  * fix: bump cloud.google.com/go/pubsub from 1.17.0 to 1.17.1 (#10504)
  * fix: bump github.com/influxdata/influxdb-observability/influx2otel from 0.2.8 to 0.2.10 (#10432)
  * fix: Update modbus readme (#10501)
  * Fix: Update README.md (#10500)
  * docs: Fixes for input/sql readme (#10498)
  * fix: graylog readme to use graylog 3 URLs (#10481)
  * fix: add RFC3164 to RFC5424 translation to docs (#10480)
  * fix: add comment to logparser (#10479)
  * chore: Add `openConnections` to enterprise cluster metrics Readme (#10483)
  * fix: remove duplicate addition of fields (#10478)
  * fix(parsers.nagios): nagios parser now uses real error for logging #10472 (#10473)
  * fix: add newline in execd for prometheus parsing (#10463)
  * fix: bump github.com/shirou/gopsutil/v3 from 3.21.10 to 3.21.12 (#10451)
  * fix: do not save cache on i386 builds (#10464)
  * chore: readme escape rpm variables
  * fix: address flaky tests in cookie_test.go and graylog_test.go (#10326)
  * fix: ensure CI tests runs against i386 (#10457)
  * fix: bump github.com/jackc/pgx/v4 from 4.6.0 to 4.14.1 (#10453)
  * fix: bump github.com/Azure/azure-event-hubs-go/v3 from 3.3.13 to 3.3.17 (#10449)
  * fix: bump github.com/gosnmp/gosnmp from 1.33.0 to 1.34.0 (#10450)
  * fix: wavefront_disable_prefix_conversion case missing from missingTomlField func (#10442)
  * fix: bump github.com/hashicorp/consul/api from 1.9.1 to 1.12.0 (#10435)
  * fix: bump github.com/antchfx/jsonquery from 1.1.4 to 1.1.5 (#10433)
  * fix: bump github.com/prometheus/procfs from 0.6.0 to 0.7.3 (#10414)
  * fix: snmp input plugin errors if mibs folder doesn't exist (#10346) (#10354)
  * fix: correctly set ASCII trailer for syslog output (#10393)
  * chore: go mod tidy (#10423)
  * fix: bump github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs from 1.5.2 to 1.12.0 (#10415)
  * fix: bump github.com/kardianos/service from 1.0.0 to 1.2.1 (#10416)
  * fix: ensure http body is empty (#10396)
  * fix: bump github.com/couchbase/go-couchbase from 0.1.0 to 0.1.1 (#10417)
  * fix(json_v2): use raw values for timestamps (#10413)
  * fix: bump github.com/pion/dtls/v2 from 2.0.9 to 2.0.13 (#10418)
  * chore: update mqtt documentation (#10394)
  * fix: update containerd to 1.5.9 (#10402)
  * fix: Fix batching logic with write records, introduce concurrent requests (#8947)
  * fix(outputs/amqp): Close the last connection when writing error to avoid connection leaks (#10360)
  * fix: cumulative interval start times for stackdriver output (#10097)
  * fix: Make telegraf compile on Windows with golang 1.16.2 (#10246)</changelog>
  <changelog author="jkowalczyk@suse.com" date="1650888001">- Update to version 1.21.4:
  * fix: ensure folders do not get loaded more than once (#10551)
  * docs: update VMWare doc links (#10663)
  * fix: prometheusremotewrite wrong timestamp unit (#10547)
  * docs: override reported OpenSearch version (#10586)
  * fix: bump all go.opentelemetry.io dependencies (#10647)
  * chore: update go to 1.17.7 (#10658)
  * fix: check for nil client before closing in amqp (#10635)
  * fix: timestamp change during execution of json_v2 parser. (#10657)
  * fix: bump github.com/signalfx/golib/v3 from 3.3.38 to 3.3.43 (#10652)
  * fix: bump github.com/aliyun/alibaba-cloud-sdk-go (#10653)
  * fix: incorrect handling of json_v2 timestamp_path (#10618)
  * fix: Revert deprecation of http_listener_v2 (#10648)
  * fix: bump github.com/denisenkom/go-mssqldb from 0.10.0 to 0.12.0 (#10503)
  * fix: bump github.com/gopcua/opcua from 0.2.3 to 0.3.1 (#10626)
  * fix: update go.mod
  * fix: use current time as ecs timestamp (#10636)
  * fix(outputs/azure_data_explorer): Added azureBlob controls to lower RAM usage (#10179)
  * fix: bump github.com/nats-io/nats-server/v2 from 2.6.5 to 2.7.2 (#10638)
  * chore: add -race flag to go tests (#10629)
  * fix: license doc outdated causing CI failure (#10630)
  * fix: bump k8s.io/client-go from 0.22.2 to 0.23.3 (#10589)
  * docs: update quay docs for auth (#10612)
  * chore: allow downgrade of go version in windows script (#10614)
  * chore: update CI go to 1.17.6 (#10611)
  * fix: bump github.com/aws/aws-sdk-go-v2/service/kinesis from 1.6.0 to 1.13.0 (#10601)
  * refactor: use early return pattern (#10591)
  * fix: bump github.com/benbjohnson/clock from 1.1.0 to 1.3.0 (#10588)
  * fix: bump github.com/Azure/azure-kusto-go from 0.5.0 to 0.5.2 (#10598)
  * fix(parsers.json_v2): allow optional paths and handle wrong paths correctly (#10468)
  * fix[elasticsearch output]: add scheme to fix error in sniffing option (#10513)
  * chore: fix typo in bug report template (#10582)
  * style: Add deprecated warning and version to win_perf_counters option (#10579)
  * fix: bump github.com/vmware/govmomi from 0.27.2 to 0.27.3 (#10571)
  * fix: bump github.com/prometheus/client_golang from 1.11.0 to 1.12.1 (#10572)
  * fix: remove signed macOS dotfile artifacts (#10560)
  * fix: bump go.mongodb.org/mongo-driver from 1.7.3 to 1.8.3 (#10564)
  * fix: bump github.com/google/go-cmp from 0.5.6 to 0.5.7 (#10563)
  * fix: bump go.opentelemetry.io/collector/model from 0.39.0 to 0.43.2 (#10562)
  * fix: bump github.com/multiplay/go-ts3 from 1.0.0 to 1.0.1 (#10538)
  * fix: bump cloud.google.com/go/monitoring from 0.2.0 to 1.2.0 (#10454)
  * fix: bump github.com/vmware/govmomi from 0.26.0 to 0.27.2 (#10536)
  * docs: add apt and knot to EXTERNAL_PLUGINS.md (#10552)
  * fix: update docker memory usage calculation (#10491)</changelog>
  <changelog author="jkowalczyk@suse.com" date="1650888002">- Update to version 1.22.0:
  * feat: update etc/telegraf.conf and etc/telegraf_windows.conf (#10843)
  * fix: fix handling of imports in protocol-buffer definitions (#10798)
  * fix: change name of snmp translator setting (#10872)
  * fix: rename consul_metrics -&gt; consul_agent (#10876)
  * fix: consul_metrics input plugin docs (#10873)
  * tests: remove redundant newlines that go 1.18 treats as errors (#10847)
  * fix: Add option to select translator (#10802)
  * feat: new input Hugepages plugin (#10763)
  * fix: update the precision parameter default value (#10814)
  * fix: bump github.com/nats-io/nats-server/v2 from 2.7.3 to 2.7.4 (#10807)
  * feat: add new rtt per op field to nfsclient (#10787)
  * fix(parsers.json_v2): Check if gpath exists and support optional in fields/tags (#10799)
  * fix(inputs.snmp):  use the correct path when evaluating symlink (#10748)
  * fix: bump github.com/Shopify/sarama from 1.29.1 to 1.32.0 (#10772)
  * fix: update parsing logic of config.Duration (#10803)
  * feat: update etc/telegraf.conf and etc/telegraf_windows.conf (#10805)
  * feat(parsers.influx): New influx line protocol via feature flag (#10749)
  * feat: update etc/telegraf.conf and etc/telegraf_windows.conf (#10804)
  * docs: Improve language related to the New Relic license key. (#10796)
  * fix: correctly read ntpq long poll output (#10790)
  * fix(inputs.docker): keep field type of tasks_desired the same (#10711)
  * fix(json_v2): allow multiple optional objects (#10777)
  * feat: update etc/telegraf.conf and etc/telegraf_windows.conf (#10789)
  * docs: update wavefront docs for clearer proxy server use (#10774)
  * feat: update etc/telegraf.conf and etc/telegraf_windows.conf (#10779)
  * feat: HTTP basic auth for webhooks (#9332)
  * docs: update uri scheme for default RavenDB configuration (#10764)
  * feat: update etc/telegraf.conf and etc/telegraf_windows.conf (#10769)
  * fix: sql unsigned settings (#10673)
  * docs: better specify agent precision is integer + unit (#10746)
  * fix: bump github.com/shirou/gopsutil/v3 from 3.21.12 to 3.22.2 (#10758)
  * feat: update etc/telegraf.conf and etc/telegraf_windows.conf (#10760)
  * style: Add deprecation notices to plugin options (#10616)
  * fix: sanitize stasd names (#10466)
  * fix: bump github.com/aws/aws-sdk-go-v2/feature/ec2/imds (#10759)
  * fix: bump github.com/miekg/dns from 1.1.43 to 1.1.46 (#10757)
  * fix: bump github.com/aws/aws-sdk-go-v2/service/dynamodb (#10751)
  * fix: bump github.com/nats-io/nats-server/v2 from 2.7.2 to 2.7.3 (#10752)
  * docs: add value_field_name to value processor (#10740)
  * fix: log err when loading mibs (#10735)
  * docs: add info on Graylog GELF spec (#10745)
  * fix: typo metadata support in csv parser (#10742)
  * feat: update etc/telegraf.conf and etc/telegraf_windows.conf (#10737)
  * feat: Add tag batch-processing to XPath parser (#10585)
  * fix: add push only updated values flag to histogram aggregator (#10515)
  * feat(parsers/csv): Add metadata support to CSV parser plugin (#10083)
  * fix: Revert "fix: error msg for missing env variables in config (#10681)" (#10727)
  * fix: bump github.com/aws/aws-sdk-go-v2/config from 1.8.3 to 1.13.1 (#10720)
  * fix: bump github.com/testcontainers/testcontainers-go (#10728)
  * fix: bump github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs (#10719)
  * fix: bump github.com/aws/aws-sdk-go-v2/feature/ec2/imds (#10721)
  * fix: bump github.com/wavefronthq/wavefront-sdk-go from 0.9.9 to 0.9.10 (#10718)
  * fix: bump github.com/ClickHouse/clickhouse-go from 1.5.1 to 1.5.4 (#10717)
  * fix: Linter fixes for config/config.go (#10710)
  * fix: bump k8s.io/api from 0.23.3 to 0.23.4 (#10713)
  * fix: bump cloud.google.com/go/pubsub from 1.17.1 to 1.18.0 (#10714)
  * fix: bump github.com/newrelic/newrelic-telemetry-sdk-go (#10715)
  * fix: mdstat when sync is less than 10% (#10701)
  * feat: update etc/telegraf.conf and etc/telegraf_windows.conf (#10708)
  * fix: Remove verbose logging from disk input plugin (#10527)
  * feat: Bump github.com/aerospike/aerospike-client-go from 1.27.0 to 5.7.0 (#10604)
  * feat(inputs/memcached): Support client TLS origination to memcached (#10642)
  * feat: socks5 proxy support for websocket (#10672)
  * fix: error msg for missing env variables in config (#10681)
  * fix: include influxdb bucket name in error messages (#10706)
  * fix: openweathermap add feels_like field (#10705)
  * fix: Set NextCheckTime to LastCheckTime to avoid GroundWork to invent a value (#10623)
  * fix: bump github.com/aws/aws-sdk-go-v2/service/dynamodb from 1.5.0 to 1.13.0 (#10692)
  * fix: bump github.com/sensu/sensu-go/api/core/v2 from 2.12.0 to 2.13.0 (#10704)
  * fix: bump github.com/gophercloud/gophercloud from 0.16.0 to 0.24.0 (#10693)
  * fix: bump github.com/jackc/pgx/v4 from 4.14.1 to 4.15.0 (#10702)
  * fix(dedup): Modifying slice while iterating is dangerous (#10684)
  * fix: linter fixes for "import-shadowing: The name '...' shadows an import name" (#10689)
  * fix: bump github.com/aws/aws-sdk-go-v2/service/sts from 1.7.2 to 1.14.0 (#10602)
  * fix: update gosmi from v0.4.3 to v0.4.4 (#10686)
  * feat: update configs (#10676)
  * feat[elastic output]: add elastic pipeline flags (#10505)
  * fix: ensure folders do not get loaded more than once (#10551)
  * docs: update VMWare doc links (#10663)
  * fix: prometheusremotewrite wrong timestamp unit (#10547)
  * feat: update configs (#10662)
  * fix: add graylog toml tags (#10660)
  * feat: add socks5 proxy support for kafka output plugin (#8192)
  * docs: override reported OpenSearch version (#10586)
  * feat: update etc/telegraf.conf and etc/telegraf_windows.conf (#10659)
  * fix: bump all go.opentelemetry.io dependencies (#10647)
  * feat: collection offset implementation (#10545)
  * chore: update go to 1.17.7 (#10658)
  * fix: check for nil client before closing in amqp (#10635)
  * fix: timestamp change during execution of json_v2 parser. (#10657)
  * fix: bump github.com/signalfx/golib/v3 from 3.3.38 to 3.3.43 (#10652)
  * fix: bump github.com/aliyun/alibaba-cloud-sdk-go (#10653)
  * fix: incorrect handling of json_v2 timestamp_path (#10618)
  * feat: gather additional stats from memcached (#10641)
  * feat: update etc/telegraf.conf and etc/telegraf_windows.conf (#10649)
  * fix: Revert deprecation of http_listener_v2 (#10648)
  * fix: bump github.com/denisenkom/go-mssqldb from 0.10.0 to 0.12.0 (#10503)
  * fix: bump github.com/gopcua/opcua from 0.2.3 to 0.3.1 (#10626)
  * fix: use current time as ecs timestamp (#10636)
  * fix: bump github.com/nats-io/nats-server/v2 from 2.6.5 to 2.7.2 (#10638)
  * chore: add -race flag to go tests (#10629)
  * feat: update etc/telegraf.conf and etc/telegraf_windows.conf (#10631)
  * fix: license doc outdated causing CI failure (#10630)
  * fix: bump k8s.io/client-go from 0.22.2 to 0.23.3 (#10589)
  * feat: Implemented support for reading raw values, added tests and doc (#6501)
  * fix: Improve parser tests by using go-cmp/cmp (#10497)
  * feat(mongodb): add FsTotalSize and FsUsedSize informations (#10625)
  * docs: update quay docs for auth (#10612)
  * chore: allow downgrade of go version in windows script (#10614)
  * chore: update CI go to 1.17.6 (#10611)
  * feat: update etc/telegraf.conf and etc/telegraf_windows.conf (#10600)
  * fix(inputs.opcua): add more data to error log (#10465)
  * fix: bump github.com/aws/aws-sdk-go-v2/service/kinesis from 1.6.0 to 1.13.0 (#10601)
  * refactor: use early return pattern (#10591)
  * fix: bump github.com/benbjohnson/clock from 1.1.0 to 1.3.0 (#10588)
  * feat: add dynamic tagging to gnmi plugin (#7484)
  * fix: bump github.com/Azure/azure-kusto-go from 0.5.0 to 0.5.2 (#10598)
  * feat: update etc/telegraf.conf and etc/telegraf_windows.conf (#10584)
  * fix(parsers.json_v2): allow optional paths and handle wrong paths correctly (#10468)
  * docs: add expriation_interval to readme (#10583)
  * feat: aggregator histogram add expiration (#10520)
  * fix[elasticsearch output]: add scheme to fix error in sniffing option (#10513)
  * chore: fix typo in bug report template (#10582)
  * style: Add deprecated warning and version to win_perf_counters option (#10579)
  * feat: Add autorestart and restartdelay flags to Windows service (#10559)
  * fix: Statefull parser handling (#10575)
  * fix: bump github.com/vmware/govmomi from 0.27.2 to 0.27.3 (#10571)
  * fix: bump github.com/prometheus/client_golang from 1.11.0 to 1.12.1 (#10572)
  * fix: remove signed macOS dotfile artifacts (#10560)
  * fix: bump go.mongodb.org/mongo-driver from 1.7.3 to 1.8.3 (#10564)
  * fix: bump github.com/google/go-cmp from 0.5.6 to 0.5.7 (#10563)
  * fix: bump go.opentelemetry.io/collector/model from 0.39.0 to 0.43.2 (#10562)
  * fix: bump github.com/multiplay/go-ts3 from 1.0.0 to 1.0.1 (#10538)
  * fix: bump cloud.google.com/go/monitoring from 0.2.0 to 1.2.0 (#10454)
  * feat: update etc/telegraf.conf and etc/telegraf_windows.conf (#10561)
  * docs: updates readme to add service SID auth and cleans up AAD auth dupe info (#10541)
  * feat: Add caching to internet_speed (#10530)
  * feat: Xtremio input (#9697)
  * feat(inputs.win_perf_counter): allow errors to be ignored (#10535)
  * fix(outputs/azure_data_explorer): Added azureBlob controls to lower RAM usage (#10179)
  * fix: bump github.com/vmware/govmomi from 0.26.0 to 0.27.2 (#10536)
  * docs: add apt and knot to EXTERNAL_PLUGINS.md (#10552)
  * feat: update etc/telegraf.conf and etc/telegraf_windows.conf (#10546)
  * fix: move "Starting Telegraf" log (#10528)
  * fix: update docker memory usage calculation (#10491)
  * feat: Add ClickHouse driver to sql inputs/outputs plugins (#9671)
  * fix: collapsed fields by calling more indepth function (#10430)
  * feat: update etc/telegraf.conf and etc/telegraf_windows.conf (#10533)
  * feat: process group tag for groundwork output plugin (#10499)
  * feat: update etc/telegraf.conf and etc/telegraf_windows.conf (#10532)
  * docs: Update deprecation readme (#10529)
  * feat: add FileVersion and icon to Win exe (#10487)
  * chore: update grpc to v1.44.0 (#10525)
  * fix: bump google.golang.org/api from 0.54.0 to 0.65.0 (#10434)
  * fix: typo in docs (#10441)
  * fix: bump github.com/antchfx/xmlquery from 1.3.6 to 1.3.9 (#10507)
  * fix: bump github.com/nsqio/go-nsq from 1.0.8 to 1.1.0 (#10521)
  * fix: bump github.com/prometheus/common from 0.31.1 to 0.32.1 (#10506)
  * fix: ipset crash when command not found (#10474)
  * fix: bump cloud.google.com/go/pubsub from 1.17.0 to 1.17.1 (#10504)
  * fix: bump github.com/influxdata/influxdb-observability/influx2otel from 0.2.8 to 0.2.10 (#10432)
  * fix: Update modbus readme (#10501)
  * Fix: Update README.md (#10500)
  * docs: Fixes for input/sql readme (#10498)
  * feat: update configs (#10490)
  * fix: graylog readme to use graylog 3 URLs (#10481)
  * fix: add RFC3164 to RFC5424 translation to docs (#10480)
  * fix: add comment to logparser (#10479)
  * chore: Add `openConnections` to enterprise cluster metrics Readme (#10483)
  * fix: remove duplicate addition of fields (#10478)
  * fix(parsers.nagios): nagios parser now uses real error for logging #10472 (#10473)
  * fix: add newline in execd for prometheus parsing (#10463)
  * fix: bump github.com/shirou/gopsutil/v3 from 3.21.10 to 3.21.12 (#10451)
  * fix: do not save cache on i386 builds (#10464)
  * chore: readme escape rpm variables
  * fix: address flaky tests in cookie_test.go and graylog_test.go (#10326)
  * feat: check TLSConfig early to catch missing certificates (#10341)
  * fix: ensure CI tests runs against i386 (#10457)
  * fix: bump github.com/jackc/pgx/v4 from 4.6.0 to 4.14.1 (#10453)
  * fix: bump github.com/Azure/azure-event-hubs-go/v3 from 3.3.13 to 3.3.17 (#10449)
  * fix: bump github.com/gosnmp/gosnmp from 1.33.0 to 1.34.0 (#10450)
  * fix: wavefront_disable_prefix_conversion case missing from missingTomlField func (#10442)
  * fix: bump github.com/hashicorp/consul/api from 1.9.1 to 1.12.0 (#10435)
  * feat: Parser plugin restructuring (#8791)
  * fix: bump github.com/antchfx/jsonquery from 1.1.4 to 1.1.5 (#10433)
  * fix: bump github.com/prometheus/procfs from 0.6.0 to 0.7.3 (#10414)
  * feat: update etc/telegraf.conf and etc/telegraf_windows.conf (#10429)
  * feat: Add noise plugin (#10057)
  * feat: update configs (#10425)
  * fix: Accept non-standard OPC UA OK status by implementing a configurable workaround (#10384)
  * feat: support headers for http plugin with cookie auth (#10404)
  * fix: snmp input plugin errors if mibs folder doesn't exist (#10346) (#10354)
  * fix: correctly set ASCII trailer for syslog output (#10393)
  * feat: update configs (#10424)
  * chore: go mod tidy (#10423)
  * fix: bump github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs from 1.5.2 to 1.12.0 (#10415)
  * fix: bump github.com/kardianos/service from 1.0.0 to 1.2.1 (#10416)
  * fix: ensure http body is empty (#10396)
  * feat: add bearer token support to elasticsearch output (#10399)
  * fix: bump github.com/couchbase/go-couchbase from 0.1.0 to 0.1.1 (#10417)
  * feat: update etc/telegraf.conf and etc/telegraf_windows.conf (#10411)
  * fix(json_v2): use raw values for timestamps (#10413)
  * fix: bump github.com/pion/dtls/v2 from 2.0.9 to 2.0.13 (#10418)
  * chore: update mqtt documentation (#10394)
  * feat: deprecate unused snmp_trap timeout configuration option (#10339)
  * fix: update containerd to 1.5.9 (#10402)
  * feat: update configs (#10400)
  * feat:  add compression to Datadog Output (#9963)
  * feat: update etc/telegraf.conf and etc/telegraf_windows.conf (#10395)
  * fix: re-enable OpenBSD modbus support (#10385)
  * fix: Fix batching logic with write records, introduce concurrent requests (#8947)
  * feat: Add additional stats to bond collector (#10137)
  * fix(outputs/amqp): Close the last connection when writing error to avoid connection leaks (#10360)
  * feat: update docker client API version (#10382)
  * feat: update etc/telegraf.conf and etc/telegraf_windows.conf (#10381)
  * fix: fix missing storage in container with disk plugin (#10318)
  * feat: add systemd notify support (#10340)
  * chore: typos across source code comments (#10361)
  * chore: sql readme with more details on data types (#10378)
  * fix: empty import tzdata for Windows binaries (#10377)
  * feat: update configs (#10374)
  * chore: document deprecation of timeout (#10373)
  * feat: update configs (#10345)
  * feat: add mock input plugin (#9782)
  * chore: use 4 cores on linux systems (#10342)
  * fix: update go-ldap to v3.4.1 (#10343)
  * chore: remove "i386" test job (#10344)
  * fix: update GroundWork SDK and improve logging (#10255)
  * feat: add more functionality to template processor (#10316)
  * chore: run release signing jobs at the same time (#10333)
  * feat: update configs (#10336)
  * feat: update etc/telegraf.conf and etc/telegraf_windows.conf (#10335)
  * feat: add builds for riscv64 (#10262)
  * feat: add consul metrics input plugin (#10258)
  * fix: snmp marshal error (#10322)
  * feat: add exclude_root_certs option to x509_cert plugin (#9822)
  * feat: add option to disable prepared statements for PostgreSQL (#9710)
  * fix: cumulative interval start times for stackdriver output (#10097)
  * feat: add option to skip errors during CSV parsing (#10267)
  * feat: update configs (#10334)
  * feat: socketstat input plugin (#3649)
  * fix: update djherbis/times and fix dependabot (#10332)
  * fix: warning output when running with --test (#10329)
  * feat: update configs (#10325)
  * docs: add note about dpdk and socket availability (#10324)
  * feat: reworked varnish_cache plugin (#9432)
  * chore:  release packaging run in parallel (#10314)
  * fix: update bug template
  * chore: add logs section for bug reports (#10323)
  * fix: do not require networking during tests (#10321)
  * chore: update mac signing job to use latest xcode (#10311)
  * chore: update Go version to 1.17.5 (#10310)
  * feat: update configs (#10319)
  * chore: cleanup go.mod (#10313)
  * feat: add timeout-setting to Graylog-plugin (#10220)
  * feat: Improve error logging on plugin initialization (#10307)
  * fix: Fix panic in logparser due to missing Log. (#10296)
  * fix: panic due to no module (#10303)
  * fix: grab table columns more accurately (#10295)
  * fix: check index before assignment (#10299)
  * feat: adds optional list of non retryable http statuscodes to http output plugin (#10186)
  * fix: panic is no mibs folder is found (#10301)
  * fix: mac signing issue with arm64 (#10293)
  * fix: Update go-sensu to v2.12.0 (#10247)
  * fix: typo in openstack neutron input plugin (newtron) (#10284)
  * fix: Fix panic in parsers due to missing Log for all plugins using SetParserFunc. (#10288)
  * fix: mark TestGatherUDPCert as an integration test (#10279)
  * feat: support darwin arm64 (#10239)
  * feat: update configs (#10275)
  * fix: run gofmt (#10274)
  * fix: run go mod tidy (#10273)
  * fix: inputs.snmp to respect number of retries configured (#10268)
  * feat: add Redis Sentinel input plugin (#10042)
  * fix: flush wavefront output sender on error to clean up broken connections (#10225)
  * feat: Add option to disable Wavefront prefix conversion (#10252)
  * feat: add heap_size_limit field for input.kibana (#10243)
  * fix: use sha256 for RPM digest (#10272)
  * feat: Update underlying KNX library to support new types. (#10263)
  * chore: restart service if it is already running and upgraded via RPM (#9970)
  * feat: update etc/telegraf.conf and etc/telegraf_windows.conf (#10237)
  * fix: Handle duplicate registration of protocol-buffer files gracefully. (#10188)
  * fix(http_listener_v2): fix panic on close (#10132)
  * feat: add Vault input plugin (#10198)
  * feat: support aws managed service for prometheus (#10202)
  * fix: Make telegraf compile on Windows with golang 1.16.2 (#10246)
  * feat: Modbus add per-request tags (#10231)
  * fix: Implement NaN and inf handling for elasticsearch output (#10196)
  * feat: add nomad input plugin (#10106)
  * fix: Print loaded plugins and deprecations for once and test (#10205)
  * fix: eliminate MIB dependency for ifname processor (#10214)
  * feat: Optimize locking for SNMP MIBs loading. (#10206)
  * feat: Add SMART plugin concurrency configuration option, nvme-cli v1.14+ support and lint fixes. (#10150)
  * feat: update configs (#10236)
  * fix(inputs/kube_inventory): set TLS server name config properly (#9975)
  * fix: Sudden close of Telegraf caused by OPC UA input plugin (#10230)
  * fix: bump github.com/eclipse/paho.mqtt.golang from 1.3.0 to 1.3.5 (#9913)
  * fix: json_v2 parser timestamp setting (#10221)
  * fix: ensure graylog spec fields not prefixed with '_' (#10209)
  * docs: remove duplicate links in CONTRIBUTING.md (#10218)
  * fix: pool detection and metrics gathering for ZFS &gt;= 2.1.x (#10099)
  * fix: parallelism fix for ifname processor (#10007)
  * chore: Forbids "log" package only for aggregators, inputs, outputs, parsers and processors (#10191)
  * docs: address documentation gap when running telegraf in k8s (#10215)
  * feat: update etc/telegraf.conf and etc/telegraf_windows.conf (#10211)
  * fix: mqtt topic extracting no longer requires all three fields (#10208)
  * fix: windows service - graceful shutdown of telegraf (#9616)
  * feat: update etc/telegraf.conf and etc/telegraf_windows.conf (#10201)
  * feat: Modbus support multiple slaves (gateway feature) (#9279)
  * fix: Revert unintented corruption of the Makefile from #10200. (#10203)
  * chore: remove triggering update-config bot in CI (#10195)</changelog>
  <changelog author="jkowalczyk@suse.com" date="1650888003">- Update to version 1.22.1:
  * fix: bump gonum.org/v1/gonum from 0.9.3 to 0.11.0 (#10937)
  * fix: bump github.com/golang-jwt/jwt/v4 from 4.2.0 to 4.4.1 (#10906)
  * chore: add actions/setup-go@v2 to linter config (#10935)
  * docs(external.psi): add psi plugin (#10462)
  * fix: Update gopsutil and associated dependencies for improved OpenBSD supp? (#10931)
  * docs: update rpm/deb instructions with stable URLs (#10905)
  * fix: inconsistencies in sql*Requests queries (#10553)
  * fix: default value for logfile rotation interval (#10883)
  * fix: redundant zfs pool tag (#10871)
  * docs: update license of dependencies (#10914)
  * fix: update vsphere info message to debug (#10903)
  * docs: fix contribute button link (#10904)
  * docs: improve documentation around contribution (#10825)
  * chore: set telegraf log as text block in bug reports (#10895)
  * fix: include body in error message (#10866)
  * docs: clarify the k and fields topk params (#10830)
  * chore: remove slow process test (#10856)
  * chore: update slow file rotation tests (#10857)
  * chore: switch HTTP 100 test case values (#10858)
  * chore: fix slow running intel-pmu test (#10859)
  * chore: skip longer/integration tests on -short mode (#10860)
  * chore: remove CircleCI parallelism (#10862)
  * chore: reduce timeouts and sleeps (#10861)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1650888004">- Refresh harden_telegraf.service.patch</changelog>
  <changelog author="jkowalczyk@suse.com" date="1650974400">- Update to version 1.22.2:
  * Update changelog
  * update build version
  * update build version
  * fix: bump github.com/aws/aws-sdk-go-v2/config from 1.13.1 to 1.15.3 (#10998)
  * fix: add mutex to gnmi lookup map (#11008)
  * fix(cmd): Also allow 0 outputs when using test-wait parameter (#11013)
  * fix: allow Makefile to work on Windows (#11015)
  * fix: use sprint to cast to strings in gnmi (#11010)
  * fix: use correct auth token with consul_agent (#11001)
  * fix: add mariadb_dialect to address the MariaDB differences in INNODB_METRICS (#10486)
  * fix: correctly parse various numeric forms (#10923)
  * fix: update go.opentelemetry.io/collector/pdata from v0.48.0 to v0.49.0 (#10984)
  * fix: bump github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs (#10997)
  * fix: bump github.com/aws/aws-sdk-go-v2/credentials from 1.8.0 to 1.11.2 (#10975)
  * fix: update github.com/containerd/containerd from v1.5.9 to v1.5.11 (#10981)
  * fix: bump github.com/miekg/dns from 1.1.46 to 1.1.48 (#10973)
  * fix: ensure aliyuncms metrics accept array, fix discovery (#10850)
  * fix(inputs/aerospike): Statistics query bug (#10930)
  * fix: update github.com/Azure/azure-kusto-go from 0.5.0 to 0.60 (#10966)
  * fix: update github.com/gopcua/opcua from v0.3.1 to v0.3.3 (#10974)
  * fix: bump github.com/aws/aws-sdk-go-v2/service/dynamodb (#10972)
  * fix: bump github.com/xdg/scram from 1.0.3 to 1.0.5 (#10773)
  * fix: bump go.mongodb.org/mongo-driver from 1.8.3 to 1.9.0 (#10971)
  * fix: align the default value for msg size (#10947)
  * fix: update opentelemetry from v0.2.10 to v0.2.17 (#10963)
  * fix: remove overly verbose info message from cisco mdt (#10959)
  * fix: update starlark 7a1108eaa012-&gt;d1966c6b9fcd (#10940)
  * fix: update influxdb_v2 error message (#10958)
  * fix(inputs.prometheus): moved from watcher to informer (#10932)</changelog>
  <changelog author="jkowalczyk@suse.com" date="1651147200">- Update to version 1.22.3:
  * go mod tidy
  * Update changelog
  * update build version
  * chore: increase timeout for darwin packaging (#11041)
  * fix: reduce log level in disk plugin (#10925)
  * fix: use external xpath parser for gnmi (#11024)
  * fix: remove duplicate influxdb listener writes (#10976)
  * chore: go mod tidy (#10983)
  * chore: Update Go to 1.18.1 (#10961)</changelog>
  <changelog author="jkowalczyk@suse.com" date="1652702400">- Update to version 1.22.4:
  * Update changelog
  * update build version
  * fix: bump github.com/showwin/speedtest-go from 1.1.4 to 1.1.5 (#10722)
  * fix(outputs.Wavefront): If no "host" tag is provided, do not add "telegraf.host" tag (#11078)
  * chore: update opentelemetry plugins (#11085)
  * fix(inputs.couchbase): Don't assume metrics will all be of the same length (#11045)
  * fix: do not error when closing statsd network connection (#11043)
  * fix: re-init azure monitor http client on context deadline error (#11030)
  * fix: have telegraf service wait for network up (#11042)</changelog>
  <changelog author="jkowalczyk@suse.com" date="1655121600">- Update to version 1.23.0:
  * fix: Remove all rebase logic from CI (#11293)
  * fix: Don't rebase on master when building packages (#11291)
  * Update changelog for v1.23.0
  * test: add install go for linux, use in integration tests (#11281)
  * fix(inputs/directory_monitor): Add support for multiline file parsing (#11234)
  * chore: Fix readme linter errors for input plugins M-Z (#11274)
  * fix: Always build README-embedder for host-architecture (#11253)
  * feat: Migrate xpath parser to new style (#11218)
  * fix: add missing build constraints for sqlite (#11272)
  * fix: remove full access permissions (#11261)
  * chore: Fix readme linter errors for input plugins E-L (#11214)
  * chore: Fix readme linter errors for input plugins A-D (#10964)
  * fix: update github.com/containerd/containerd from v1.5.11 to v1.5.13 (#11266)
  * fix: bump github.com/tidwall/gjson from 1.10.2 to 1.14.1 (#11264)
  * chore: Fix readme linter errors for processor, aggregator, and parser plugins (#10960)
  * fix: update modernc.org/sqlite from v1.10.8 to v1.17.3 (#11260)
  * docs: add missing word &lt;3 (#11262)
  * feat(intel_powerstat): add uncore frequency metrics (#11254)
  * test: remove restore integration test cache (#11255)
  * test: add circle ci integration testing on PRs (#11246)
  * test: harden running of testcontainer integration tests (#11245)
  * chore: update go from v1.18.1 to v1.18.3 (#11248)
  * chore: rename circleci executor (#11247)
  * chore: upgrade windows circleci size (#11249)
  * fix: re-add event to splunk serializer (#11237)
  * docs: update test-container docs (#11244)
  * test: remove docker-compose.yml test file (#11243)
  * fix: update moby/ipvs dependency from v1.0.1 to v1.0.2 (#11242)
  * feat(inputs.sqlserver): Update query store and latch performance counters (#11216)
  * test: migrate elasticsearch to testcontainers (#11207)
  * chore: Bump apcupds and remove the replacement as issue is fixed upstream. (#11239)
  * test: migrate postgres to testcontainers (#11209)
  * test: migrate mcrouter to test-containers (#11208)
  * test: migrate kafka to testcontainers (#11206)
  * docs: Initial update of integration test docs (#11210)
  * chore: Bump riemann-go-client and remove replacement (#11236)
  * fix: Upgrade xpath and fix code (#11241)
  * feat(inputs.nginx_plus_api): Gather slab metrics (#10448)
  * fix(inputs/modbus): #11105 fix requests starting with an omitted field (#11202)
  * fix: (outputs/sql) table existence cache (#10812)
  * fix: Update sample.conf for prometheus (#11217)
  * fix: bump github.com/nats-io/nats-server/v2 from 2.7.4 to 2.8.4 (#11221)
  * test: enable logging with testcontainers (#11211)
  * chore: update github.com/opencontainers/runc from v1.0.2 to v1.1.2 (#11212)
  * chore: update gopkg.in/yaml.v3 from v3.0.0 to v3.0.1 (#11213)
  * fix(inputs/snmp): switch new Reconnect method to be a value receiver (#11197)
  * test: refactor testcontainer port lookup (#11198)
  * test: actually skip flaky snmp test (#11199)
  * chore: correctly spell embed (#11200)
  * fix: bump go.opentelemetry.io/otel/metric from 0.28.0 to 0.30.0 (#11088)
  * chore: update OpenTelmetry plugins (#11194)
  * docs: remove recommendation for prometheus metric_version=2 (#11158)
  * fix: bump github.com/sensu/sensu-go/api/core/v2 from 2.13.0 to 2.14.0 (#11021)
  * test: migrate zookeeper to test-containers (#11185)
  * fix(plugins/amqp): move from `streadway/amqp` to `rabbitmq/amqp091-go` (#11192)
  * feat: Add constant 'algorithm' to the mock plugin (#11188)
  * fix: redis plugin goroutine leak triggered by auto reload config mechanism (#11143)
  * fix: update golangci-lint from v1.45.2 to v1.46.2 (#11191)
  * fix(inputs/snmp): Reconnect TCP agents if needed (#11163)
  * test: migrate pgbouncer to test-containers (#11186)
  * test: remove rabbitmq container not used (#11175)
  * chore: Embed sample configurations into README for aggregators (#11190)
  * chore: Embed sample configurations into README for processors (#11189)
  * chore: embed sample configurations into README for outputs (#11182)
  * feat: Google API Auth (#11084)
  * test: migrate openldap tests to test-containers (#11169)
  * test: migrate nsq to test containers (#11173)
  * test: migrate opcua to test-containers (#11171)
  * feat: add field key option to set event partition key (#11076)
  * test: migrate aerospike to test-containers (#11177)
  * fix: Convert slab plugin to new sample.conf. (#11181)
  * test: migrate memcached to test-containers (#11176)
  * test: migrate redis to test-containers (#11174)
  * test: migrate mqtt to test containers (#11172)
  * test: migrate nats to test-containers (#11170)
  * test: migrate crate to test-containers code (#11165)
  * chore: Embed sample configurations into README for inputs (#11136)
  * fix: search services file in /etc/services and fall back to /usr/etc/services (#11179)
  * fix: Remove any content type from prometheus accept header (#11082)
  * feat(inputs.cpu): Add tags with core id or physical id to cpus (#11141)
  * chore: add readme linter to CI (#11020)
  * feat(intel_powerstat): add Max Turbo Frequency and introduce improvements (#11035)
  * test: avoid data race in tcp-listener test (#11144)
  * fix: bump github.com/aws/aws-sdk-go-v2/config from 1.15.3 to 1.15.7 (#11166)
  * test: add generic test-container code for re-use, migrate mysql (#11157)
  * feat: add external huebridge input plugin (#11159)
  * fix: Improve slab testing without sudo. (#11151)
  * docs: update review docs (#11147)
  * test: force elasticsearch to index batch data (#11153)
  * test: update mongodb output to use test containers (#11137)
  * test: switch internet speed to enable file download (#11146)
  * fix: doc interval setting for internet speed plugin (#11150)
  * fix(inputs.burrow): Move Dialer to variable and run `make fmt` (#11149)
  * fix: avoid calling sadc with invalid 0 interval (#11140)
  * feat: [inputs/burrow] fill more http transport parameters (#6948)
  * feat: do not error if no nodes found for current config with xpath parser (#11102)
  * feat: add slab metrics input plugin (#11075)
  * fix: use readers over closers in http input (#11083) Refs boo#1203914
  * chore(inputs_a-l): migrate sample configs into separate files (#11132)
  * chore(inputs_m-z): migrate sample configs into separate files (#11133)
  * chore(outputs): migrate sample configs into separate files (#11131)
  * chore(aggregators): migrate sample configs into separate files (#11130)
  * chore(processors): migrate sample configs into separate files (#11125)
  * test: use supported version of elasticsearch (#11111)
  * test: remove unecessary flag in sql input (#11115)
  * fix: elasticsearch output float handling test (#11120)
  * test: remove unused riemann from docker-compose (#11118)
  * fix(parsers/nagios): metrics will always return a supported status co? (#11062)
  * feat: allow other fluentd metrics apart from retry_count, buffer_queu? (#11056)
  * feat(parsers/logfmt): Add tag support (#11060)
  * fix: log instance name in skip warnings (#10995)
  * fix: bump github.com/wavefronthq/wavefront-sdk-go from 0.9.10 to 0.9.11 (#10970)
  * fix: Update gopsutil from v3.22.3 to v3.22.4 to allow for HOST_PROC_MOUNTINFO. (#11107)
  * chore(inputs/file): More clear error messages (#11104)
  * test: add test for mysql gatherGlobalVariables using sql-mock (#10987)
  * feat: Artifactory Webhook Receiver (#10918)
  * docs: fix socket_writer output format link (#11101)
  * fix: check net.Listen() error in tests (#11093)
  * fix: Output erroneous namespace and continue instead of error out (#11069)
  * Update changelog
  * feat: add mount option filtering to disk plugin (#11039)
  * feat(inputs.vsphere): Collect resource pools metrics and add resource pool tag in VM metrics (#10574)
  * docs: note about listsnapshots cause zfs parse failures (#11091)
  * fix: bump github.com/showwin/speedtest-go from 1.1.4 to 1.1.5 (#10722)
  * fix(outputs.Wavefront): If no "host" tag is provided, do not add "telegraf.host" tag (#11078)
  * chore: update opentelemetry plugins (#11085)
  * docs: correct copy-and-paste of udp to tcp (#11080)
  * refactor: replace strings.Replace with strings.ReplaceAll (#11079)
  * feat(exec, execd): add an option to pass a custom environment to their child process (#11049)
  * fix(inputs.couchbase): Don't assume metrics will all be of the same length (#11045)
  * fix: deprecate useless database config option (#11044)
  * fix: do not error when closing statsd network connection (#11043)
  * fix: re-init azure monitor http client on context deadline error (#11030)
  * feat: add influx semantic commits checker, checks only last commit. (#11037)
  * fix: have telegraf service wait for network up (#11042)
  * chore(inputs/disk): add deprecation notice to legacy mountpoints setting (#10948)
  * style: align plugin renaming (#10868)
  * Update changelog
  * fix: datadog count metrics (#10979)
  * feat(outputs.http): Support configuration of `MaxIdleConns` and `MaxIdleConnsPerHost` (#10954)
  * chore: enable linting of shell scripts (#11031)
  * chore: increase timeout for darwin packaging (#11041)
  * fix: reduce log level in disk plugin (#10925)
  * feat: create and push nightly docker images to quay.io (#11000)
  * chore: remove influxdata/validate-semantic-github-messages github workflow (#11036)
  * chore: Adding influx's semantic commit and PR message checker, so we ? (#11009)
  * fix: use external xpath parser for gnmi (#11024)
  * fix: remove duplicate influxdb listener writes (#10976)
  * Update changelog
  * fix: bump github.com/aws/aws-sdk-go-v2/config from 1.13.1 to 1.15.3 (#10998)
  * fix: add mutex to gnmi lookup map (#11008)
  * fix(cmd): Also allow 0 outputs when using test-wait parameter (#11013)
  * fix: allow Makefile to work on Windows (#11015)
  * chore: Fix readme linter errors for output plugins (#10951)
  * fix: use sprint to cast to strings in gnmi (#11010)
  * docs: add openstack metadata external plugin (#10999)
  * fix: use correct auth token with consul_agent (#11001)
  * docs: correct influx parser type setting in README (#11004)
  * fix: add mariadb_dialect to address the MariaDB differences in INNODB_METRICS (#10486)
  * fix: correctly parse various numeric forms (#10923)
  * chore: add readme linter (#10916)
  * chore: update pull request with master when running CI (#10993)
  * docs: add missing slash in mongodb readme (#10994)
  * fix: update go.opentelemetry.io/collector/pdata from v0.48.0 to v0.49.0 (#10984)
  * docs: regex processor only works on strings (#10982)
  * fix: bump github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs (#10997)
  * fix: bump github.com/aws/aws-sdk-go-v2/credentials from 1.8.0 to 1.11.2 (#10975)
  * test: use `T.TempDir` to create temporary test directory (#10988)
  * feat(processor/regex): Add ability to check every tag for regex replace (#10927)
  * chore: go mod tidy (#10983)
  * chore: Update Go to 1.18.1 (#10961)
  * feat(inputs/teamspeak): allow to configure nickname (#10934)
  * fix: update github.com/containerd/containerd from v1.5.9 to v1.5.11 (#10981)
  * feat(inputs/sqlserver): add RecentBackups query (#10567)
  * fix: bump github.com/miekg/dns from 1.1.46 to 1.1.48 (#10973)
  * fix: ensure aliyuncms metrics accept array, fix discovery (#10850)
  * fix(inputs/aerospike): Statistics query bug (#10930)
  * fix: update github.com/Azure/azure-kusto-go from 0.5.0 to 0.60 (#10966)
  * chore: add logging to graylog tests (#10896)
  * chore: remove go generate from CI tests (#10977)
  * fix: update github.com/gopcua/opcua from v0.3.1 to v0.3.3 (#10974)
  * fix: bump github.com/aws/aws-sdk-go-v2/service/dynamodb (#10972)
  * fix: bump github.com/xdg/scram from 1.0.3 to 1.0.5 (#10773)
  * fix: bump go.mongodb.org/mongo-driver from 1.8.3 to 1.9.0 (#10971)
  * fix: align the default value for msg size (#10947)
  * fix: update opentelemetry from v0.2.10 to v0.2.17 (#10963)
  * docs: update sql readme for creating login in windows (#10967)
  * fix: remove overly verbose info message from cisco mdt (#10959)
  * fix: update starlark 7a1108eaa012-&gt;d1966c6b9fcd (#10940)
  * docs: update csv parser metadata descriptions (#10750)
  * style: Add deprecation notice to renamed plugins (#10867)
  * chore(inputs): add descriptions to config in README.md (#10962)
  * feat: migrate input plugins to new sample config format (M-Z) (#10926)
  * fix: update influxdb_v2 error message (#10958)
  * fix(inputs.prometheus): moved from watcher to informer (#10932)
  * feat: migrate input plugins to new sample config format (A-L) (#10924)
  * feat: migrate output plugins to new sample config format (#10910)
  * feat: migrate processor plugins to new sample config format (#10913)
  * feat: migrate aggregator plugins to new sample config format (#10912)
  * Update changelog
  * feat: generate the plugins sample config (#10886)
  * feat(inputs.mongodb): Add metrics about files currently open and currently active data handles (#7896)
  * fix: bump gonum.org/v1/gonum from 0.9.3 to 0.11.0 (#10937)
  * fix: bump github.com/golang-jwt/jwt/v4 from 4.2.0 to 4.4.1 (#10906)
  * chore: add actions/setup-go@v2 to linter config (#10935)
  * docs(external.psi): add psi plugin (#10462)
  * fix: Update gopsutil and associated dependencies for improved OpenBSD supp? (#10931)
  * docs: update rpm/deb instructions with stable URLs (#10905)
  * fix: inconsistencies in sql*Requests queries (#10553)
  * feat: add ANSI color filter for tail input plugin (#10880)
  * feat: (outputs.elasticsearch) Add healthcheck timeout (#10853)
  * feat: In Lustre input plugin, support collecting per-client stats. (#10607)
  * fix: default value for logfile rotation interval (#10883)
  * fix: redundant zfs pool tag (#10871)
  * docs: update license of dependencies (#10914)
  * fix: update vsphere info message to debug (#10903)
  * docs: fix contribute button link (#10904)
  * feat: add fritzbox as external plugin (#10818)
  * docs: improve documentation around contribution (#10825)
  * chore: set telegraf log as text block in bug reports (#10895)
  * fix: include body in error message (#10866)
  * feat: update etc/telegraf.conf and etc/telegraf_windows.conf (#10885)
  * docs: clarify the k and fields topk params (#10830)
  * chore: remove slow process test (#10856)
  * chore: update slow file rotation tests (#10857)
  * chore: switch HTTP 100 test case values (#10858)
  * chore: fix slow running intel-pmu test (#10859)
  * chore: skip longer/integration tests on -short mode (#10860)
  * chore: remove CircleCI parallelism (#10862)
  * chore: reduce timeouts and sleeps (#10861)
  * Update CHANGELOG.md
  * Update build version to 1.23.0
  * Update changelog
  * Update CHANGELOG.md</changelog>
  <changelog author="jkowalczyk@suse.com" date="1657108800">- Update to version 1.23.1:
  * Update changelog for v1.23.1
  * Update build_version.txt for v1.23.1
  * Sync sample.conf into READMEs.
  * Fix xpath config location.
  * docs(inputs.mqtt_consumer): add pivot example to readme (#11195)
  * test: Update wait statement for postgresql_extensible (#11447)
  * docs: add firehose to EXTERNAL_PLUGINS.md (#11450)
  * chore(deps): Bump github.com/prometheus/client_golang (#11437)
  * chore(deps): Bump k8s.io/api from 0.24.1 to 0.24.2 (#11434)
  * chore(deps): Bump github.com/influxdata/influxdb-observability/otel2influx from 0.2.21 to 0.2.22 (#11416)
  * chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs from 1.15.4 to 1.15.8 (#11415)
  * test: exchange confused parameters (expected vs actual) (#11422)
  * fix: Bring back old xpath section names (#11335)
  * chore(deps): Bump github.com/vmware/govmomi from 0.27.3 to 0.28.0 (#11396)
  * chore(deps): Bump github.com/golang-jwt/jwt/v4 from 4.4.1 to 4.4.2 (#11395)
  * fix: Sync back sample.confs for inputs.couchbase and outputs.groundwork. (#11413)
  * fix: resolve jolokia2 panic on null response (#11397)
  * chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/ec2 from 1.1.0 to 1.46.0 (#11382)
  * chore: Remove 'github.com/cisco-ie/nx-telemetry-proto' replacement (#11401)
  * chore: Remove 'github.com/satori/go.uuid' replacement (#11240)
  * chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/kinesis (#11380)
  * chore(deps): Bump cloud.google.com/go/pubsub from 1.22.2 to 1.23.0 (#11394)
  * chore(deps): Bump github.com/Azure/azure-kusto-go from 0.6.0 to 0.7.0 (#11378)
  * chore(deps): Bump cloud.google.com/go/bigquery from 1.8.0 to 1.33.0 (#11379)
  * chore(deps): Bump github.com/jackc/pgx/v4 from 4.15.0 to 4.16.1 (#11346)
  * chore(deps): Bump go.opentelemetry.io/collector/pdata from 0.52.0 to 0.54.0 (#11369)
  * docs: swap bytes sent/recv descriptions in nfsclient (#11376)
  * chore(deps): Bump cloud.google.com/go/pubsub from 1.18.0 to 1.22.2 (#11349)
  * chore(deps): Bump github.com/nats-io/nats.go from 1.15.0 to 1.16.0 (#11339)
  * chore(deps): Bump github.com/dynatrace-oss/dynatrace-metric-utils-go from 0.3.0 to 0.5.0 (#11342)
  * fix: Restore sample configurations broken during initial migration (#11276)
  * fix: don't require listeners to be present in overview (#9315)
  * chore: move agent config into seperate file (#11337)
  * docs: Sync sample.conf for recent features (#11348)
  * chore(deps): Bump github.com/Shopify/sarama from 1.32.0 to 1.34.1 (#11319)
  * chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/timestreamwrite from 1.3.2 to 1.13.6 (#11322)
  * fix: filter out views in mongodb lookup (#11280)
  * chore(deps): Bump github.com/fatih/color from 1.10.0 to 1.13.0 (#11340)
  * chore: fix typo (recieve -&gt; receive) (#11341)
  * chore(deps): Bump google.golang.org/api from 0.74.0 to 0.84.0 (#11338)
  * chore(deps): Bump github.com/gophercloud/gophercloud from 0.24.0 to 0.25.0 (#11321)
  * chore(deps): Bump go.mongodb.org/mongo-driver from 1.9.0 to 1.9.1 (#11320)
  * chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/dynamodb (#11328)
  * test: add coveralls coverage to master (#11256)
  * chore: make apt-get instructions consistent and add GPG fingerprint (#11326)
  * chore(deps): Bump github.com/go-logfmt/logfmt from 0.5.0 to 0.5.1 (#11299)
  * chore(deps): Bump k8s.io/client-go from 0.23.3 to 0.24.1 (#11223)
  * chore(deps): Bump google.golang.org/grpc from 1.46.2 to 1.47.0 (#11318)
  * chore(deps): Bump github.com/aws/aws-sdk-go-v2/credentials from 1.12.2 to 1.12.5 (#11297)
  * test: mark integration tests correctly (#11317)
  * test: update wait for statement for postgres (#11309)
  * docs: explain directly connecting to mongo node (#11314)
  * fix: Prevent concurrent map writes to c.UnusedFields (#11311)
  * fix: bump cloud.google.com/go/monitoring from 1.2.0 to 1.5.0 (#11295)</changelog>
  <changelog author="jkowalczyk@suse.com" date="1657627200">- Update to version 1.23.2:
  * Update changelog for v1.23.2
  * Update build_version.txt for v1.23.2
  * Sync sample.conf and README.md files.
  * docs: Update etc/telegraf.conf and etc/telegraf_windows.conf (#11483)
  * fix: allow 201 for cookies, update header docs (#11472)
  * fix(inputs.snmp): snmp UseUnconnectedUDPSocket when using udp (#10331)
  * docs: Update etc/telegraf.conf and etc/telegraf_windows.conf (#11480)
  * chore(gnmi): Add Metrics heading to README.md (#11476)
  * fix(gnmi): refactor tag-only subs for complex keys (#11011)
  * fix: use bigint for backupsize in sqlserver (#11448)
  * docs: Update etc/telegraf.conf and etc/telegraf_windows.conf (#11463)
  * chore(inputs.socket_listener): Remove parser from init (#11462)
  * fix: Deprecation warnings for non-deprecated packages (#11460)
  * chore(deps): Bump github.com/docker/docker (#11438)
  * docs: Update etc/telegraf.conf and etc/telegraf_windows.conf (#11431)
  * docs: Update etc/telegraf.conf and etc/telegraf_windows.conf (#11419)
  * docs: Update etc/telegraf.conf and etc/telegraf_windows.conf (#11414)
  * docs: Update etc/telegraf.conf and etc/telegraf_windows.conf (#11365)
  * docs: Update etc/telegraf.conf and etc/telegraf_windows.conf (#11351)
  * docs: Update etc/telegraf.conf and etc/telegraf_windows.conf (#11344)
  * chore: Remove prefix to use the default `chore(deps)` (#11315)</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658750400">- Update to version 1.23.3:
  * Update changelog for v1.23.3
  * Update build_version.txt for v1.23.3
  * fix(inputs.snmp_trap): nil map panic when use snmp_trap with netsnmp translator (#11534)
  * fix: add version number to MacOS packages
  * chore: update to go1.18.4 (#11526)
  * fix(inputs.mqtt_consumer):  topic parsing error  when topic having prefix(/) (#11527)
  * fix(inputs.sqlserver): set lower deadlock priority (#11522)
  * fix: use reader over readcloser, regen cookie-jar (#11482)
  * fix: correct init volume gatherer in openstack (#11481)
  * fix: add version number to Mac packages (#11506)
  * fix(parsers.prometheus): histogram infinity bucket must be allways present (#11490) (#11486)
  * docs: Add example output section to HTTP plugin (#11497)
  * docs: explain proxmox user/token and node_name (#11487)
  * chore(deps): Bump github.com/antchfx/jsonquery from 1.1.5 to 1.2.0 (#11461)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1658750401">- Refresh harden_telegraf.service.patch</changelog>
  <changelog author="jkowalczyk@suse.com" date="1660651200">- Update to version 1.23.4:
  * fix: remove bare url in changelog that failed lint
  * fix: update license of dependencies
  * fix: update github.com/mdlayher/netlink to 1.6.0 to fix the build
  * fix: Sync sql output and input build constraints to handle loong64 in go1.19. (#11664)
  * docs: explain PowerShell 5 encoding (#11662)
  * chore: update circle-ci orbs (#11618)
  * docs(inputs.zookeeper): document use of prometheus plugin (#11658)
  * chore(deps): bump github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs (#11653)
  * chore(deps): bump github.com/aws/aws-sdk-go-v2/feature/ec2/imds (#11652)
  * chore(deps): bump github.com/aws/aws-sdk-go-v2/service/ec2 (#11651)
  * chore(deps): bump github.com/antchfx/xmlquery from 1.3.9 to 1.3.12 (#11644)
  * fix: Bump github.com/lxc/lxd to latest git to fix https://github.com/lxc/lxd/issues/10738. (#11647)
  * chore(deps): bump google.golang.org/api from 0.85.0 to 0.91.0 (#11643)
  * chore(deps): Bump github.com/prometheus/client_golang from 1.12.2 to 1.13.0 (#11640)
  * chore(deps): bump github.com/hashicorp/consul/api from 1.12.0 to 1.13.1 (#11641)
  * chore(deps): Bump github.com/emicklei/go-restful from v2.9.5+incompatible to v3.8.0 (#11636)
  * fix(inputs.mongodb): update version check for newer versions (#11635)
  * feat: add coralogix dialect to opentelemetry (#11622)
  * fix(parsers): Linter issues (#11607)
  * chore: workaround for failing "go list -m all" (#11624)
  * chore(deps): bump github.com/sirupsen/logrus from 1.8.1 to 1.9.0 (#11616)
  * chore: Update to go1.18.5 (#11621)
  * docs: Add source tag best practices to the metric schema docs (#11620)
  * chore: Fix support issue template (#11617)
  * fix(inputs.kubernetes): refresh token from file at each read (#11578)
  * chore(deps): Update github.com/Shopify/sarama from 1.34.1 to 1.35.0 (#11603)
  * chore(deps): update k8s.io/apimachinery from 0.24.2 to 0.24.3 (#11602)
  * chore(deps): Update cloud.google.com/go/pubsub from 1.23.0 to 1.24.0 (#11604)
  * chore(deps): Update github.com/BurntSushi/toml from 0.4.1 to 1.2.0 (#11605)
  * chore: Migrate all issue templates to yaml (#11612)
  * docs(inputs.exec): clarify parsing for ints (#11597)
  * fix(outputs): Linter issues (#11595)
  * fix(inputs.kube_inventory): send file location to enable token auto-refresh (#11577)
  * chore: update github.com/harlow/kinesis-consumer (#11599)
  * chore(deps): Bump github.com/signalfx/golib/v3 from 3.3.43 to 3.3.45 (#11598)
  * chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/dynamodb (#11584)
  * chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/kinesis (#11585)
  * chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/cloudwatch (#11586)
  * chore(deps): Bump github.com/Azure/azure-event-hubs-go/v3 (#11590)
  * test: fix openetelemtry test (#11573)
  * fix(inputs): Linter issues (#11576)
  * chore(deps): Bump github.com/pion/dtls/v2 from 2.0.13 to 2.1.5 (#11581)
  * chore(deps): Bump github.com/Azure/go-autorest/autorest/adal (#11583)
  * chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs (#11582)
  * chore(deps): Bump github.com/shirou/gopsutil/v3 from 3.22.4 to 3.22.7 (#11580)
  * fix(inputs.cloudwatch): customizable batch size when querying (#10851)
  * chore(deps): Bump github.com/eclipse/paho.mqtt.golang from 1.3.5 to 1.4.1 (#11347)
  * chore(deps): Bump github.com/vmware/govmomi from 0.28.0 to 0.29.0 (#11568)
  * chore(deps): Bump github.com/karrick/godirwalk from 1.16.1 to 1.17.0 (#11574)
  * chore(deps): Bump github.com/go-ldap/ldap/v3 from 3.4.1 to 3.4.4 (#11569)
  * chore(deps): Update all go.opentelemetry.io dependencies (#11494)
  * chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/ec2 from 1.46.0 to 1.51.0 (#11567)
  * chore(deps): Bump github.com/apache/thrift from 0.15.0 to 0.16.0 (#11565)
  * chore(deps): Bump github.com/testcontainers/testcontainers-go from 0.12.0 to 0.13.0 (#11412)
  * fix: Updating credentials file to not use endpoint_url parameter (#10841)
  * fix(inputs.opcua): return an error with mismatched types (#11539)
  * fix(inputs.stackdriver): Handle when no buckets available (#11556)
  * docs(inputs.mysql): Add link to docs on how to enable mysql's performance schema (#11555)
  * chore: add missing section to kafka_consumer's sample.conf (#11553)
  * docs: add timeout section (#11550)
  * fix(inputs.sqlserver): set lower deadlock priority (#11548)
  * docs(inputs.modbus): README changes regarding request.tags (#11541)
  * docs: run make-docs (#11514)
  * test: do not have leadership election during kafka test (#11404)
  * chore: Update CRLF line endings in agent.conf to LF (#11501)</changelog>
  <changelog author="jkowalczyk@suse.com" date="1664884800">- Update to version 1.24.0:
  * feat(inputs.directory_monitor): Support paths for files_to_ignore and files_to_monitor (#11784)
  * chore(inputs.jolokia2): Move agent and proxy one level up (#11637)
  * fix(outputs.execd): Fixing the execd behavior to not throw error when partially unserializable metrics are written. (#11767)
  * fix: add missing entry json_transformation to missingTomlField (#11779)
  * fix: Do not error out for parsing errors in datadog mode. (#11777)
  * chore: update to go1.19.1 (#11776)
  * fix(inputs.mongodb): add an option to bypass connection errors on start (#11629)
  * feat(inputs.directory_monitor): Traverse sub-directories (#11773)
  * fix(inputs.jolokia2): add optional origin header (#11692)
  * chore(deps): Bump google.golang.org/grpc from 1.48.0 to 1.49.0 (#11746)
  * docs: Add go report badge (#11774)
  * feat(inputs.sqlserver): Improved filtering for active requests (#11709)
  * chore(deps): Bump github.com/Azure/azure-kusto-go from 0.7.0 to 0.8.0 (#11770)
  * docs(external): add hwinfo external plugin (#11757)
  * chore(deps): Bump gonum.org/v1/gonum from 0.11.0 to 0.12.0 (#11764)
  * chore(deps): Bump github.com/urfave/cli/v2 from 2.11.2 to 2.14.1 (#11763)
  * fix: sort labels in prometheusremotewrite serializer (#11755)
  * fix(inputs.opcua): Assign node id correctly (#11723)
  * chore(deps): Bump github.com/aws/aws-sdk-go-v2/feature/ec2/imds (#11747)
  * chore: Rename Telegraf receiver argument from a to t (#11742)
  * chore(deps): Bump k8s.io/client-go from 0.24.3 to 0.25.0 (#11745)
  * chore(deps): Bump github.com/gophercloud/gophercloud (#11744)
  * chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/dynamodb (#11743)
  * chore: update github.com/Shopify/sarama from v1.35 to v1.36 (#11713)
  * chore(deps): Bump github.com/rabbitmq/amqp091-go from 1.3.4 to 1.4.0 (#11699)
  * feat(outputs.postgresql): add Postgresql output (#11672)
  * chore(deps): Bump github.com/tidwall/gjson from 1.14.1 to 1.14.3 (#11721)
  * feat: Migrate to urfave/cli (#11700)
  * chore(deps): Bump github.com/hashicorp/consul/api from 1.13.1 to 1.14.0 (#11717)
  * feat(inputs.linux_cpu): Add plugin to collect CPU metrics on Linux (#8988)
  * chore(deps): Bump github.com/aerospike/aerospike-client-go/v5 (#11716)
  * chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/sts (#11711)
  * chore(deps): Bump github.com/wavefronthq/wavefront-sdk-go (#11710)
  * fix(inputs.sqlserver): fixing wrong filtering for sqlAzureMIRequests and sqlAzureDBRequests (#11701)
  * fix: use os-agnositc systemd detection, remove sysv in RPM packaging (#10570)
  * feat(inputs.mqtt_consumer): Add incoming mqtt message size calculation (#11426)
  * feat: tool to build custom Telegraf builds (#11524)
  * chore: Update golangci-lint (#11705)
  * docs: update ms sql dsn example (#11704)
  * feat(serializers.prometheus): Provide option to reduce payload size by removing HELP from payload (#11690)
  * feat(inputs.sqlserver): Add db name to io stats for MI (#11688)
  * fix: refactor telegraf version (#11656)
  * fix(agent): add flushBatch method (#11615)
  * chore(deps): Bump go.mongodb.org/mongo-driver from 1.9.1 to 1.10.1 (#11676)
  * chore(deps): Bump github.com/aliyun/alibaba-cloud-sdk-go from 1.61.1695 to 1.61.1727 (#11695)
  * fix(inputs.prometheus): plugin run outside k8s cluster error (#11673)
  * chore: only lint changed READMEs (#11677)
  * chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/timestreamwrite (#11679)
  * fix: remove bare url in changelog that failed lint
  * chore: Move aws credentials to plugins/common. (#11681)
  * chore: Use build tags to select plugins (#11654)
  * chore(deps): Bump github.com/urfave/cli/v2 from 2.3.0 to 2.11.2 (#11675)
  * chore(deps): bump github.com/aws/aws-sdk-go-v2/service/ec2 (#11670)
  * chore(deps): Bump github.com/Azure/go-autorest/autorest (#11669)
  * chore(deps): Bump github.com/jackc/pgx/v4 from 4.16.1 to 4.17.0 (#11671)
  * fix: Sync sql output and input build constraints to handle loong64 in go1.19. (#11664)
  * docs: explain PowerShell 5 encoding (#11662)
  * chore: update circle-ci orbs (#11618)
  * docs(inputs.zookeeper): document use of prometheus plugin (#11658)
  * feat(outputs.iotdb): Add new output plugin to support Apache IoTDB (#11557)
  * chore(deps): bump github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs (#11653)
  * chore(deps): bump github.com/aws/aws-sdk-go-v2/feature/ec2/imds (#11652)
  * feat(outputs.amqp): Add proxy support (#11649)
  * chore(deps): bump github.com/aws/aws-sdk-go-v2/service/ec2 (#11651)
  * chore: Markdown fixes for inputs/[a-m]* (#11606)
  * chore(deps): bump github.com/antchfx/xmlquery from 1.3.9 to 1.3.12 (#11644)
  * fix: Bump github.com/lxc/lxd to latest git to fix https://github.com/lxc/lxd/issues/10738. (#11647)
  * chore(deps): bump google.golang.org/api from 0.85.0 to 0.91.0 (#11643)
  * chore(deps): Bump github.com/prometheus/client_golang from 1.12.2 to 1.13.0 (#11640)
  * feat(common.tls): Implement minimum TLS version for clients (#11493)
  * chore(deps): bump github.com/hashicorp/consul/api from 1.12.0 to 1.13.1 (#11641)
  * chore(deps): Bump github.com/emicklei/go-restful from v2.9.5+incompatible to v3.8.0 (#11636)
  * feat: Supervisord input plugin (#9015)
  * chore(parsers.json_v2): Cleanup test by reusing testutil function (#11627)
  * fix(inputs.mongodb): update version check for newer versions (#11635)
  * feat: add coralogix dialect to opentelemetry (#11622)
  * fix(inputs.x509): Multiple sources with non-overlapping DNS entries. (#11613)
  * fix(parsers): Linter issues (#11607)
  * feat (inputs/prometheus): add setting to set custom namespace label name to avoid conflicts (#11538)
  * chore: workaround for failing "go list -m all" (#11624)
  * feat(processors.starlark): Add starlark benchmark for tag-concatenation (#11306)
  * chore(deps): bump github.com/sirupsen/logrus from 1.8.1 to 1.9.0 (#11616)
  * chore: Update to go1.18.5 (#11621)
  * chore: Using Windows, add exe extension to tools (#11608)
  * docs: Add source tag best practices to the metric schema docs (#11620)
  * feat(external): Add nsdp external plugin (#11619)
  * chore: Fix support issue template (#11617)
  * fix(inputs.kubernetes): refresh token from file at each read (#11578)
  * feat(inputs.ntpq): Allow to specify `reach` output format (#11594)
  * chore(deps): Update github.com/Shopify/sarama from 1.34.1 to 1.35.0 (#11603)
  * chore(deps): update k8s.io/apimachinery from 0.24.2 to 0.24.3 (#11602)
  * chore(deps): Update cloud.google.com/go/pubsub from 1.23.0 to 1.24.0 (#11604)
  * chore(deps): Update github.com/BurntSushi/toml from 0.4.1 to 1.2.0 (#11605)
  * chore: Migrate all issue templates to yaml (#11612)
  * docs(inputs.exec): clarify parsing for ints (#11597)
  * fix(outputs): Linter issues (#11595)
  * fix(inputs.kube_inventory): send file location to enable token auto-refresh (#11577)
  * feat(inputs.ntpq): Add possibility to query remote servers (#11592)
  * feat(inputs.openstack): Add "allow_reauth" config option for openstack client (#11572)
  * feat(inputs.ntpq): Add option to specify command flags (#11593)
  * chore: update github.com/harlow/kinesis-consumer (#11599)
  * chore(deps): Bump github.com/signalfx/golib/v3 from 3.3.43 to 3.3.45 (#11598)
  * chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/dynamodb (#11584)
  * chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/kinesis (#11585)
  * chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/cloudwatch (#11586)
  * chore(deps): Bump github.com/Azure/azure-event-hubs-go/v3 (#11590)
  * test: fix openetelemtry test (#11573)
  * fix(inputs): Linter issues (#11576)
  * chore(deps): Bump github.com/pion/dtls/v2 from 2.0.13 to 2.1.5 (#11581)
  * chore(deps): Bump github.com/Azure/go-autorest/autorest/adal (#11583)
  * chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs (#11582)
  * chore(deps): Bump github.com/shirou/gopsutil/v3 from 3.22.4 to 3.22.7 (#11580)
  * fix(outputs.wavefront): update wavefront sdk and use non-deprecated APIs (#11560)
  * chore(inputs.ntpq): Cleanup existing plugin (#11575)
  * fix(inputs.cloudwatch): customizable batch size when querying (#10851)
  * chore(deps): Bump github.com/eclipse/paho.mqtt.golang from 1.3.5 to 1.4.1 (#11347)
  * chore(deps): Bump github.com/vmware/govmomi from 0.28.0 to 0.29.0 (#11568)
  * chore(deps): Bump github.com/karrick/godirwalk from 1.16.1 to 1.17.0 (#11574)
  * chore(deps): Bump github.com/go-ldap/ldap/v3 from 3.4.1 to 3.4.4 (#11569)
  * chore(deps): Update all go.opentelemetry.io dependencies (#11494)
  * chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/ec2 from 1.46.0 to 1.51.0 (#11567)
  * chore(deps): Bump github.com/apache/thrift from 0.15.0 to 0.16.0 (#11565)
  * chore(deps): Bump github.com/testcontainers/testcontainers-go from 0.12.0 to 0.13.0 (#11412)
  * feat(outputs.sql): Add settings for go sql.DB settings (#11551)
  * fix: Updating credentials file to not use endpoint_url parameter (#10841)
  * fix: Remove shell execution for license-checker. (#11563)
  * chore: More parser cleanup (#11532)
  * feat: Add license checking tool (#11398)
  * feat(parsers.xpath): Add support for returning underlying data-types (#11558)
  * fix(inputs.opcua): return an error with mismatched types (#11539)
  * feat(output.mqtt): Add support for MQTT protocol version 5 (#11284)
  * fix(inputs.stackdriver): Handle when no buckets available (#11556)
  * docs(inputs.mysql): Add link to docs on how to enable mysql's performance schema (#11555)
  * chore: add missing section to kafka_consumer's sample.conf (#11553)
  * docs: add timeout section (#11550)
  * fix(inputs.sqlserver): set lower deadlock priority (#11548)
  * feat(inputs.kafka_consumer): Option to set default fetch message bytes (#11220)
  * docs(inputs.modbus): README changes regarding request.tags (#11541)
  * feat(outputs.graphite): Retry connecting to servers with failed send attempts (#11439)
  * feat(inputs.statsd): add median timing calculation to statsd input plugin (#11518)
  * fix(inputs.snmp_trap): nil map panic when use snmp_trap with netsnmp translator (#11534)
  * feat(parsers.json): Allow JSONata based transformations in JSON serializer (#11251)
  * fix: Add version number to MacOS packages (#11512)
  * feat(inputs.syslog): log remote host as source tag (#9440)
  * feat(outputs.groundwork): Improve metric parsing to extend output (#11443)
  * feat: added metrics for member and replica-set avg health of MongoDB  (#11516)
  * feat(outputs.redistimeseries): Add integration test (#11529)
  * chore: update to go1.18.4 (#11526)
  * fix(inputs.mqtt_consumer):  topic parsing error  when topic having prefix(/) (#11527)
  * fix(inputs.sqlserver): set lower deadlock priority (#11522)
  * fix: make docs + go.mod cleanup post-redis merge (#11521)
  * feat: Add RedisTimeSeries plugin (#11054)
  * docs: run make-docs (#11514)
  * feat(inputs.cisco_telemetry_mdt): Add GRPC Keepalive/timeout config options (#11458)
  * fix: use reader over readcloser, regen cookie-jar (#11482)
  * fix: correct init volume gatherer in openstack (#11481)
  * feat: Nats Jetstream consumer add simple support for jetstream subjects (#11373)
  * Revert "fix: add version number to Mac packages (#11506)" (#11510)
  * fix: add version number to Mac packages (#11506)
  * fix(parsers.prometheus): histogram infinity bucket must be allways present (#11490) (#11486)
  * feat(inputs.modbus): Error out on requests with no fields defined. (#11469)
  * test: do not have leadership election during kafka test (#11404)
  * docs: Add example output section to HTTP plugin (#11497)
  * chore: cleanup go.mod and dependency licences (#11503)
  * feat: add Stomp (Active MQ) output plugin (#7995)
  * chore: Update CRLF line endings in agent.conf to LF (#11501)
  * feat: add proxy support for outputs/cloudwatch (#11399)
  * docs: explain proxmox user/token and node_name (#11487)
  * chore: Check for readme changes in each PR (#11495)
  * chore: Skip building artifacts on master branch (#11465)
  * docs: Update etc/telegraf.conf and etc/telegraf_windows.conf (#11496)
  * fix: Backport sync sample.conf and README.md files (#11489)
  * feat(inputs.smart): Collect SSD endurance information where available in smartctl (#11391)
  * chore(deps): Bump github.com/antchfx/jsonquery from 1.1.5 to 1.2.0 (#11461)
  * feat(inputs.logstash): Record number of failures (#9185)
  * docs: Update etc/telegraf.conf and etc/telegraf_windows.conf (#11483)
  * fix: allow 201 for cookies, update header docs (#11472)
  * fix(inputs.snmp): snmp UseUnconnectedUDPSocket when using udp (#10331)
  * docs: Update etc/telegraf.conf and etc/telegraf_windows.conf (#11480)
  * fix(inputs.upsd): Move to new sample.conf style (#11471)
  * feat(rabbitmq): add support for head_message_timestamp metric (#11475)
  * fix: Update prometheusremotewrite parser to be a new style parser plugin (#11456)
  * chore(gnmi): Add Metrics heading to README.md (#11476)
  * fix(gnmi): refactor tag-only subs for complex keys (#11011)
  * chore: sign nightly artifacts to detect issues before release (#11464)
  * feat(inputs.nginx_plus_api): Gather limit_reqs metrics (#10874)
  * test: ignore return code on check-update (#11445)
  * fix: use bigint for backupsize in sqlserver (#11448)
  * feat: Migrate influx and influx_upstream parsers to new style (#11432)
  * docs: Update etc/telegraf.conf and etc/telegraf_windows.conf (#11463)
  * chore(inputs.socket_listener): Remove parser from init (#11462)
  * feat(input): add upsd implementation (#9890)
  * fix: Deprecation warnings for non-deprecated packages (#11460)
  * chore(deps): Bump github.com/docker/docker (#11438)
  * fix: Update prometheus parser to be a new style parser plugin (#11440)
  * docs(inputs.mqtt_consumer): add pivot example to readme (#11195)
  * test: Update wait statement for postgresql_extensible (#11447)
  * docs: add firehose to EXTERNAL_PLUGINS.md (#11450)
  * chore(deps): Bump github.com/prometheus/client_golang (#11437)
  * chore(deps): Bump k8s.io/api from 0.24.1 to 0.24.2 (#11434)
  * feat: Migrate nagios parser to new style (#11402)
  * fix: add reset-mode flag for CSV parser (#11288)
  * docs: Update etc/telegraf.conf and etc/telegraf_windows.conf (#11431)
  * feat: adding aws metric streams input plugin (#11233)
  * test: run check-update on dnf/yum (#11430)
  * chore(deps): Bump github.com/influxdata/influxdb-observability/otel2influx from 0.2.21 to 0.2.22 (#11416)
  * feat: migrate grok to new parser style (#11408)
  * feat: Migrate dropwizard parser to new style (#11371)
  * chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs from 1.15.4 to 1.15.8 (#11415)
  * test: exchange confused parameters (expected vs actual) (#11422)
  * feat: Migrate logfmt parser to new style (#11366)
  * fix: Bring back old xpath section names (#11335)
  * feat: Migrate graphite parser to new style (#11405)
  * feat: migrate value parser to new style (#11407)
  * docs: Update etc/telegraf.conf and etc/telegraf_windows.conf (#11419)
  * feat(outputs/wavefront): make maximum http batch size configurable (#11201)
  * feat: migrate form_urlencoded parser to new style (#11381)
  * chore: move printing of sample config file out of config.go (#11409)
  * chore(deps): Bump github.com/vmware/govmomi from 0.27.3 to 0.28.0 (#11396)
  * chore(deps): Bump github.com/golang-jwt/jwt/v4 from 4.4.1 to 4.4.2 (#11395)
  * docs: Update etc/telegraf.conf and etc/telegraf_windows.conf (#11414)
  * fix: Sync back sample.confs for inputs.couchbase and outputs.groundwork. (#11413)
  * fix: resolve jolokia2 panic on null response (#11397)
  * test: add nightly package testing to amd64/linux (#11377)
  * chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/ec2 from 1.1.0 to 1.46.0 (#11382)
  * chore: Remove 'github.com/cisco-ie/nx-telemetry-proto' replacement (#11401)
  * chore: Remove 'github.com/satori/go.uuid' replacement (#11240)
  * chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/kinesis (#11380)
  * chore(deps): Bump cloud.google.com/go/pubsub from 1.22.2 to 1.23.0 (#11394)
  * feat: Migrate collectd parser to new style (#11367)
  * feat: allow collecting node-level metrics for Couchbase buckets (#9717)
  * feat: migrate wavefront parser to new style (#11374)
  * chore(deps): Bump github.com/Azure/azure-kusto-go from 0.6.0 to 0.7.0 (#11378)
  * chore(deps): Bump cloud.google.com/go/bigquery from 1.8.0 to 1.33.0 (#11379)
  * chore(deps): Bump github.com/jackc/pgx/v4 from 4.15.0 to 4.16.1 (#11346)
  * chore(deps): Bump go.opentelemetry.io/collector/pdata from 0.52.0 to 0.54.0 (#11369)
  * docs: swap bytes sent/recv descriptions in nfsclient (#11376)
  * chore(deps): Bump cloud.google.com/go/pubsub from 1.18.0 to 1.22.2 (#11349)
  * chore(deps): Bump github.com/nats-io/nats.go from 1.15.0 to 1.16.0 (#11339)
  * chore(deps): Bump github.com/dynatrace-oss/dynatrace-metric-utils-go from 0.3.0 to 0.5.0 (#11342)
  * docs: Update etc/telegraf.conf and etc/telegraf_windows.conf (#11365)
  * feat: Migrate json_v2 parser to new style (#11343)
  * fix: Restore sample configurations broken during initial migration (#11276)
  * feat: Add CSV serializer (#11307)
  * fix: don't require listeners to be present in overview (#9315)
  * docs: Update etc/telegraf.conf and etc/telegraf_windows.conf (#11351)
  * feat: Migrate json parser to new style (#11226)
  * chore: move agent config into seperate file (#11337)
  * docs: Sync sample.conf for recent features (#11348)
  * chore(deps): Bump github.com/Shopify/sarama from 1.32.0 to 1.34.1 (#11319)
  * feat(x509_cert): add proxy support (#9319)
  * feat(redis): add Redis 6 ACL auth support (#9333)
  * docs: Update etc/telegraf.conf and etc/telegraf_windows.conf (#11344)
  * chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/timestreamwrite from 1.3.2 to 1.13.6 (#11322)
  * fix: filter out views in mongodb lookup (#11280)
  * chore(deps): Bump github.com/fatih/color from 1.10.0 to 1.13.0 (#11340)
  * chore: fix typo (recieve -&gt; receive) (#11341)
  * chore(deps): Bump google.golang.org/api from 0.74.0 to 0.84.0 (#11338)
  * chore(deps): Bump github.com/gophercloud/gophercloud from 0.24.0 to 0.25.0 (#11321)
  * chore(deps): Bump go.mongodb.org/mongo-driver from 1.9.0 to 1.9.1 (#11320)
  * chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/dynamodb (#11328)
  * test: add coveralls coverage to master (#11256)
  * chore: make apt-get instructions consistent and add GPG fingerprint (#11326)
  * chore(deps): Bump github.com/go-logfmt/logfmt from 0.5.0 to 0.5.1 (#11299)
  * chore(deps): Bump k8s.io/client-go from 0.23.3 to 0.24.1 (#11223)
  * chore(deps): Bump google.golang.org/grpc from 1.46.2 to 1.47.0 (#11318)
  * chore(deps): Bump github.com/aws/aws-sdk-go-v2/credentials from 1.12.2 to 1.12.5 (#11297)
  * test: mark integration tests correctly (#11317)
  * test: update wait for statement for postgres (#11309)
  * chore: Remove prefix to use the default `chore(deps)` (#11315)
  * docs: explain directly connecting to mongo node (#11314)
  * fix: Prevent concurrent map writes to c.UnusedFields (#11311)
  * feat: Make the command "config" a subcommand (#11282)
  * feat: add default appType as config option to groundwork output (#11300)
  * fix(parsers/xpath): Reduce debug messages when empty selection is allowed (#11302)
  * feat(inputs.x509_cert): add smtp protocol (#11271)
  * fix: bump cloud.google.com/go/monitoring from 1.2.0 to 1.5.0 (#11295)
  * fix: Remove all rebase logic from CI (#11293)
  * fix: Don't rebase on master when building packages (#11291)</changelog>
  <changelog author="jkowalczyk@suse.com" date="1664884801">- Update to version 1.24.1:
  * fix(parsers.csv): Remove direct checks for the parser type (#11825)
  * fix(inputs.ntpq): Handle pools with "-" when (#11827)
  * docs: update customization docs (#11822)
  * fix(parsers): Unwrap parser and remove some special handling (#11826)
  * fix: Enable global confirmation for installing mingw (#11835)
  * fix(parsers): Memory leak for plugins using ParserFunc. (#11815)
  * fix(inputs.modbus): Do not fail if a single slave reports errors (#11785)
  * fix(parsers.xpath): Add array index when expanding names. (#11781)
  * fix(inputs.ceph): Modernize Ceph input plugin metrics (#10797)
  * docs: Update etc/telegraf.conf and etc/telegraf_windows.conf (#11800)
  * chore(deps): Bump cloud.google.com/go/bigquery from 1.33.0 to 1.40.0 (#11796)
  * chore(deps): Bump github.com/wavefronthq/wavefront-sdk-go (#11799)
  * docs: Update etc/telegraf.conf and etc/telegraf_windows.conf (#11798)
  * chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/ec2 (#11789)
  * docs: Remove warning not to remove go:embed (#11797)
  * fix: Clear error message when provided config is not a text file (#11787)
  * chore(deps): Bump github.com/urfave/cli/v2 from 2.14.1 to 2.16.3 (#11794)
  * chore(deps): Bump cloud.google.com/go/pubsub from 1.24.0 to 1.25.1 (#11788)
  * docs: Update etc/telegraf.conf and etc/telegraf_windows.conf (#11792)
  * chore: Run amd64 package on master so config is generated (#11790)
  * feat(processors.parser): Add option to parse tags (#11228)</changelog>
  <changelog author="jkowalczyk@suse.com" date="1664884802">- Update to version 1.24.2:
  * fix(parser.xpath): Handle floating-point times correctly (#11875)
  * fix(cli): Support old style of filtering sample configs (#11896)
  * chore: update github.com/shirou/gopsutil from v3.22.8 to v3.22.9 (#11923)
  * fix(inputs.influxdb_listener): error on invalid precision (#11866)
  * docs: Ran `make docs` (#11914)
  * docs(inputs.opcua): fix typo (#11897)
  * chore(lint): Removed deprecated varcheck linter (#11910)
  * docs: Update etc/telegraf.conf and etc/telegraf_windows.conf (#11885)
  * chore(deps): github.com/docker/distribution from v2.7.1 ti v2.8.1 (#11893)
  * chore(deps): Bump github.com/rabbitmq/amqp091-go from 1.4.0 to 1.5.0 (#11891)
  * chore(deps): Bump github.com/aws/smithy-go from 1.13.2 to 1.13.3 (#11890)
  * chore(deps): Bump go.mongodb.org/mongo-driver from 1.10.1 to 1.10.2 (#11887)
  * chore(processors): Convert processors to `ParserPlugin`s (#11600)
  * chore(deps): Replace go-ping by pro-bing (#11836)
  * chore(deps): Bump github.com/nats-io/nats.go from 1.16.0 to 1.17.0 (#11839)
  * fix(common.kafka): Enable TLS in Kafka plugins without custom config (#11519)
  * docs(inputs.cpu): explain macos cpu support requires cgo (#11883)
  * fix(inputs.mqtt_consumer): rework connection and message tracking (#10696)
  * docs: Update etc/telegraf.conf and etc/telegraf_windows.conf (#11881)
  * fix(inputs.internet_speed): rename enable_file_download to match upstream intent (#11877)
  * build: github Workflows security hardening (#11843)
  * docs: Update etc/telegraf.conf and etc/telegraf_windows.conf (#11859)
  * fix: Update dependencies for OpenBSD support (#11861)
  * chore: Remove deprecated build tags (#11867)
  * fix(inputs.mongodb): actually start plugin correctly (#11849)
  * fix: re-allow specifying the influx parser type (#11806)
  * chore: update github.com/jackc/pgx/v4 from v4.17.0 to v4.17.1 (#11858)
  * chore: update github.com/lxc/lxd to latest (#11848)
  * chore(deps): Bump github.com/aerospike/aerospike-client-go/v5 from 5.9.0 to 5.10.0 (#11844)
  * chore: remove deprecated io/ioutils (#11678)
  * fix(internal.ethtool): avoid internal name conflict with aws (#11696)
  * docs(inputs.nvidia_smi): Example of how to enable nvidia-smi via docker compose (#11833)
  * chore(deps): Bump k8s.io/apimachinery from 0.25.0 to 0.25.1 (#11840)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1664884803">- Add _constraints minimum disk 4G to avoid build failures</changelog>
  <changelog author="jkowalczyk@suse.com" date="1667476800">- Update to version 1.24.3:
  * Revert "feat: run govulncheck nightly on master branch (#11977)" (#12054)
  * Update build_version.txt for v1.24.3
  * Resolve conflict caused by earlier cherry pick error
  * chore: update to go v1.19.3 (#12142)
  * fix(inputs.directory_monitor): allow cross filesystem directories (#12124)
  * fix(serializers.splunkmetric): provide option to remove event metric tag (#12024)
  * chore(inputs.socket_listener): Reorganize plugin code (#12031)
  * chore: Fix linter findings introduced in last PRs (#12131)
  * chore(deps): bump github.com/nats-io/nats-server/v2 from 2.8.4 to 2.9.4 (#12134)
  * chore(deps): bump cloud.google.com/go/monitoring from 1.5.0 to 1.7.0 (#12135)
  * chore(parsers.xpath): Add correct deprecation tags (#11986)
  * chore: update OpenTelemetry v0.2.30 / v0.63.0 (#12119)
  * docs: ran make docs (#12120)
  * docs(aggregators.derivative): Remove incorrect comment (#12026)
  * docs(serializers.json): specify version of jsonata used (#12117)
  * fix(processors.parser): Keep name of original metric if parser doesn't return one (#12116)
  * docs: add global configuration header (#12107)
  * fix(inputs.modbus): Handle field-measurement definitions correctly on duplicate field check (#12109)
  * test(outputs.graylog): skip tcp/udp tests on windows &amp; darwin (#12110)
  * chore(common.shim): check err of s.writeProcessedMetrics for the linter (#12103)
  * chore: Increase golangci-lint timeout (#12106)
  * chore: shut down plugins gracefully to prevent race (#12102)
  * chore: skip integration test with race (#12100)
  * chore: add kafka round trip integration test using inputs.kafka_consumer and outputs.kafka (#12058)
  * chore(deps): bump github.com/prometheus/client_model from 0.2.0 to 0.3.0 (#12097)
  * chore(deps): bump github.com/gopcua/opcua from 0.3.3 to 0.3.7 (#12095)
  * chore(deps): bump google.golang.org/api from 0.95.0 to 0.100.0 (#12096)
  * chore(deps): bump github.com/aws/aws-sdk-go-v2/service/dynamodb (#12098)
  * feat(tools): Allow to markdown includes for sections (#12075)
  * fix(config): set default parser (#12076)
  * fix(processors): Correctly setup processors (#12081)
  * fix: update systemd unit description (#12093)
  * chore(deps): update modernc.org/libc from v1.20.3 to v1.21.2 (#12090)
  * test(outputs.sql): further wait for clickhouse writes (#12086)
  * test: update integration test occurrences (#12085)
  * fix(agent): panic as tickers slice was off-by-one in size (#12077)
  * test(inputs.mcrouter): add eventually to pause for metrics (#12074)
  * fix: Restore warning on unused config option(s) (#12063)
  * fix(inputs.kafka): switch to sarama's new consumer group rebalance strategy setting (#12064)
  * docs(inputs.http): add use system proxy config option (#12069)
  * fix(inputs.modbus): add slave id to failing connection (#12038)
  * docs(aggregators.starlark): corrected typo mentioning wrong func name (#12066)
  * chore: Resolve deprecated linter issues (#12051)
  * fix(inputs.zookeeper): add the ability to parse floats as floats (#12023)
  * test: add additional checks, waits in integration tests (#12056)
  * chore: Update golangci-lint Go version (#12055)
  * docs(inputs.mongodb): update supported versions (#12048)
  * chore(deps): bump testcontainers-go from 0.13.0 to 0.14.0 and address breaking change (#12039)
  * chore(deps): bump github.com/Shopify/sarama from 1.36.0 to 1.37.2 (#11980)
  * chore(deps): bump github.com/aliyun/alibaba-cloud-sdk-go (#12036)
  * chore(deps): bump github.com/aws/aws-sdk-go-v2/service/kinesis (#12037)
  * chore(deps): Bump cloud.google.com/go/bigquery from 1.40.0 to 1.42.0 (#11937)
  * chore(deps): bump github.com/yuin/goldmark from 1.4.13 to 1.5.2 (#12035)
  * chore(deps): bump github.com/signalfx/golib/v3 from 3.3.45 to 3.3.46 (#12034)
  * feat: run govulncheck nightly on master branch (#11977)
  * chore(deps): bump modernc.org/sqlite from 1.17.3 to 1.19.2 (#12030)
  * chore(deps): bump k8s.io/api from 0.25.2 to 0.25.3 (#12029)
  * chore(deps): bump k8s.io/api from 0.25.0 to 0.25.2 (#12001)
  * docs(inputs.tomcat): clean up fields (#12018)
  * fix(regression): Fixes problem with metrics not exposed by plugins. (#12016)
  * refactor: Prevent import from going the wrong way (#12004)
  * test: add dovecot integration test (#11996)
  * chore: Fix installgo_mac.sh using correct hash (#12002)
  * chore(deps): bump k8s.io/apimachinery from 0.25.1 to 0.25.2 (#11938)
  * chore: resolve linter issues for unhandled-error (#11969)
  * chore: Tool to update Telegraf to use new Go version (#11968)
  * test: add integration test for recovering after invalid data (#11994)
  * fix(inputs.syslog): print error when no error or message given (#11997)
  * chore: resolve linter issues for confusing-naming and confusing-results (#11956)
  * fix(parsers.json_v2): Remove BOM before parsing (#11926)
  * chore: Resolve linter issues for ineffassign, nilerr, gosimple... (#11966)
  * fix(inputs.opcua): Add metric tags to node (#11993)
  * chore(inputs.powerdns): Don't run  flaky test on Windows (#11982)
  * chore(inputs.cloud_pubsub_push): Don't run flaky test on Windows (#11984)
  * chore(ci): Migrate to scheduled pipeline (#11981)
  * chore: Resolve linter issues for plugins/common package (#11964)
  * chore(deps): bump github.com/aws/aws-sdk-go-v2/config (#11979)
  * chore(inputs.socket_listener): Reorganize test to be table-based. (#11970)
  * chore(deps): bump github.com/aws/aws-sdk-go-v2/service/cloudwatch (#11972)
  * docs: Update etc/telegraf.conf and etc/telegraf_windows.conf (#11965)
  * chore: Bump golangci-lint to 1.50.0 (#11957)
  * chore: update OpenTelemetry plugins to latest release (#11943)
  * fix: Setting `enable_tls` has incorrect default value (#11941)
  * chore: update to go1.19.2 (#11940)
  * chore(deps): bump github.com/aws/aws-sdk-go-v2/credentials from 1.12.5 to 1.12.21 (#11936)
  * chore(deps): Update github.com/hashicorp/consul/api from 1.14.0 to 1.15.2 (#11894)
  * chore(deps): update github.com/gofrs/uuid from 4.2.0+incompatible to 4.3.0+incompatible (#11935)
  * fix(inputs.modbus): Improve duplicate field checks (#11912)
  * chore(deps): update github.com/sensu/sensu-go/api/core/v2 from 2.14.0 to 2.15.0 (#11928)
  * chore: Resolve linter issues in config.go and config_test.go (#11929)
  * docs: add libvirt plugin to external input plugins list (#11828)
  * build(rpm): Allow building RPMs cross-OS (#11904)
  * chore(deps): Bump github.com/snowflakedb/gosnowflake from 1.6.2 to 1.6.13 (#11886)</changelog>
</package>
<package pkgid="0d7bf920d25f55fefbb210257c8ca2c1a82d550f8ba73503ab0a21b104bb2b49" name="telegraf" arch="ppc64le">
  <version epoch="0" ver="1.24.3" rel="bp154.2.3.1"/>
  <changelog author="Felix Niederwanger &lt;felix.niederwanger@suse.com&gt;" date="1642766400">- Build-requirement increased to go &gt; 1.17</changelog>
  <changelog author="jkowalczyk@suse.com" date="1650888000">- Update to version 1.21.3:
  * Update license of dependencies file
  * fix: collapsed fields by calling more indepth function (#10430)
  * docs: Update deprecation readme (#10529)
  * chore: update grpc to v1.44.0 (#10525)
  * fix: bump google.golang.org/api from 0.54.0 to 0.65.0 (#10434)
  * fix: typo in docs (#10441)
  * fix: bump github.com/antchfx/xmlquery from 1.3.6 to 1.3.9 (#10507)
  * fix: bump github.com/nsqio/go-nsq from 1.0.8 to 1.1.0 (#10521)
  * fix: bump github.com/prometheus/common from 0.31.1 to 0.32.1 (#10506)
  * fix: ipset crash when command not found (#10474)
  * fix: bump cloud.google.com/go/pubsub from 1.17.0 to 1.17.1 (#10504)
  * fix: bump github.com/influxdata/influxdb-observability/influx2otel from 0.2.8 to 0.2.10 (#10432)
  * fix: Update modbus readme (#10501)
  * Fix: Update README.md (#10500)
  * docs: Fixes for input/sql readme (#10498)
  * fix: graylog readme to use graylog 3 URLs (#10481)
  * fix: add RFC3164 to RFC5424 translation to docs (#10480)
  * fix: add comment to logparser (#10479)
  * chore: Add `openConnections` to enterprise cluster metrics Readme (#10483)
  * fix: remove duplicate addition of fields (#10478)
  * fix(parsers.nagios): nagios parser now uses real error for logging #10472 (#10473)
  * fix: add newline in execd for prometheus parsing (#10463)
  * fix: bump github.com/shirou/gopsutil/v3 from 3.21.10 to 3.21.12 (#10451)
  * fix: do not save cache on i386 builds (#10464)
  * chore: readme escape rpm variables
  * fix: address flaky tests in cookie_test.go and graylog_test.go (#10326)
  * fix: ensure CI tests runs against i386 (#10457)
  * fix: bump github.com/jackc/pgx/v4 from 4.6.0 to 4.14.1 (#10453)
  * fix: bump github.com/Azure/azure-event-hubs-go/v3 from 3.3.13 to 3.3.17 (#10449)
  * fix: bump github.com/gosnmp/gosnmp from 1.33.0 to 1.34.0 (#10450)
  * fix: wavefront_disable_prefix_conversion case missing from missingTomlField func (#10442)
  * fix: bump github.com/hashicorp/consul/api from 1.9.1 to 1.12.0 (#10435)
  * fix: bump github.com/antchfx/jsonquery from 1.1.4 to 1.1.5 (#10433)
  * fix: bump github.com/prometheus/procfs from 0.6.0 to 0.7.3 (#10414)
  * fix: snmp input plugin errors if mibs folder doesn't exist (#10346) (#10354)
  * fix: correctly set ASCII trailer for syslog output (#10393)
  * chore: go mod tidy (#10423)
  * fix: bump github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs from 1.5.2 to 1.12.0 (#10415)
  * fix: bump github.com/kardianos/service from 1.0.0 to 1.2.1 (#10416)
  * fix: ensure http body is empty (#10396)
  * fix: bump github.com/couchbase/go-couchbase from 0.1.0 to 0.1.1 (#10417)
  * fix(json_v2): use raw values for timestamps (#10413)
  * fix: bump github.com/pion/dtls/v2 from 2.0.9 to 2.0.13 (#10418)
  * chore: update mqtt documentation (#10394)
  * fix: update containerd to 1.5.9 (#10402)
  * fix: Fix batching logic with write records, introduce concurrent requests (#8947)
  * fix(outputs/amqp): Close the last connection when writing error to avoid connection leaks (#10360)
  * fix: cumulative interval start times for stackdriver output (#10097)
  * fix: Make telegraf compile on Windows with golang 1.16.2 (#10246)</changelog>
  <changelog author="jkowalczyk@suse.com" date="1650888001">- Update to version 1.21.4:
  * fix: ensure folders do not get loaded more than once (#10551)
  * docs: update VMWare doc links (#10663)
  * fix: prometheusremotewrite wrong timestamp unit (#10547)
  * docs: override reported OpenSearch version (#10586)
  * fix: bump all go.opentelemetry.io dependencies (#10647)
  * chore: update go to 1.17.7 (#10658)
  * fix: check for nil client before closing in amqp (#10635)
  * fix: timestamp change during execution of json_v2 parser. (#10657)
  * fix: bump github.com/signalfx/golib/v3 from 3.3.38 to 3.3.43 (#10652)
  * fix: bump github.com/aliyun/alibaba-cloud-sdk-go (#10653)
  * fix: incorrect handling of json_v2 timestamp_path (#10618)
  * fix: Revert deprecation of http_listener_v2 (#10648)
  * fix: bump github.com/denisenkom/go-mssqldb from 0.10.0 to 0.12.0 (#10503)
  * fix: bump github.com/gopcua/opcua from 0.2.3 to 0.3.1 (#10626)
  * fix: update go.mod
  * fix: use current time as ecs timestamp (#10636)
  * fix(outputs/azure_data_explorer): Added azureBlob controls to lower RAM usage (#10179)
  * fix: bump github.com/nats-io/nats-server/v2 from 2.6.5 to 2.7.2 (#10638)
  * chore: add -race flag to go tests (#10629)
  * fix: license doc outdated causing CI failure (#10630)
  * fix: bump k8s.io/client-go from 0.22.2 to 0.23.3 (#10589)
  * docs: update quay docs for auth (#10612)
  * chore: allow downgrade of go version in windows script (#10614)
  * chore: update CI go to 1.17.6 (#10611)
  * fix: bump github.com/aws/aws-sdk-go-v2/service/kinesis from 1.6.0 to 1.13.0 (#10601)
  * refactor: use early return pattern (#10591)
  * fix: bump github.com/benbjohnson/clock from 1.1.0 to 1.3.0 (#10588)
  * fix: bump github.com/Azure/azure-kusto-go from 0.5.0 to 0.5.2 (#10598)
  * fix(parsers.json_v2): allow optional paths and handle wrong paths correctly (#10468)
  * fix[elasticsearch output]: add scheme to fix error in sniffing option (#10513)
  * chore: fix typo in bug report template (#10582)
  * style: Add deprecated warning and version to win_perf_counters option (#10579)
  * fix: bump github.com/vmware/govmomi from 0.27.2 to 0.27.3 (#10571)
  * fix: bump github.com/prometheus/client_golang from 1.11.0 to 1.12.1 (#10572)
  * fix: remove signed macOS dotfile artifacts (#10560)
  * fix: bump go.mongodb.org/mongo-driver from 1.7.3 to 1.8.3 (#10564)
  * fix: bump github.com/google/go-cmp from 0.5.6 to 0.5.7 (#10563)
  * fix: bump go.opentelemetry.io/collector/model from 0.39.0 to 0.43.2 (#10562)
  * fix: bump github.com/multiplay/go-ts3 from 1.0.0 to 1.0.1 (#10538)
  * fix: bump cloud.google.com/go/monitoring from 0.2.0 to 1.2.0 (#10454)
  * fix: bump github.com/vmware/govmomi from 0.26.0 to 0.27.2 (#10536)
  * docs: add apt and knot to EXTERNAL_PLUGINS.md (#10552)
  * fix: update docker memory usage calculation (#10491)</changelog>
  <changelog author="jkowalczyk@suse.com" date="1650888002">- Update to version 1.22.0:
  * feat: update etc/telegraf.conf and etc/telegraf_windows.conf (#10843)
  * fix: fix handling of imports in protocol-buffer definitions (#10798)
  * fix: change name of snmp translator setting (#10872)
  * fix: rename consul_metrics -&gt; consul_agent (#10876)
  * fix: consul_metrics input plugin docs (#10873)
  * tests: remove redundant newlines that go 1.18 treats as errors (#10847)
  * fix: Add option to select translator (#10802)
  * feat: new input Hugepages plugin (#10763)
  * fix: update the precision parameter default value (#10814)
  * fix: bump github.com/nats-io/nats-server/v2 from 2.7.3 to 2.7.4 (#10807)
  * feat: add new rtt per op field to nfsclient (#10787)
  * fix(parsers.json_v2): Check if gpath exists and support optional in fields/tags (#10799)
  * fix(inputs.snmp):  use the correct path when evaluating symlink (#10748)
  * fix: bump github.com/Shopify/sarama from 1.29.1 to 1.32.0 (#10772)
  * fix: update parsing logic of config.Duration (#10803)
  * feat: update etc/telegraf.conf and etc/telegraf_windows.conf (#10805)
  * feat(parsers.influx): New influx line protocol via feature flag (#10749)
  * feat: update etc/telegraf.conf and etc/telegraf_windows.conf (#10804)
  * docs: Improve language related to the New Relic license key. (#10796)
  * fix: correctly read ntpq long poll output (#10790)
  * fix(inputs.docker): keep field type of tasks_desired the same (#10711)
  * fix(json_v2): allow multiple optional objects (#10777)
  * feat: update etc/telegraf.conf and etc/telegraf_windows.conf (#10789)
  * docs: update wavefront docs for clearer proxy server use (#10774)
  * feat: update etc/telegraf.conf and etc/telegraf_windows.conf (#10779)
  * feat: HTTP basic auth for webhooks (#9332)
  * docs: update uri scheme for default RavenDB configuration (#10764)
  * feat: update etc/telegraf.conf and etc/telegraf_windows.conf (#10769)
  * fix: sql unsigned settings (#10673)
  * docs: better specify agent precision is integer + unit (#10746)
  * fix: bump github.com/shirou/gopsutil/v3 from 3.21.12 to 3.22.2 (#10758)
  * feat: update etc/telegraf.conf and etc/telegraf_windows.conf (#10760)
  * style: Add deprecation notices to plugin options (#10616)
  * fix: sanitize stasd names (#10466)
  * fix: bump github.com/aws/aws-sdk-go-v2/feature/ec2/imds (#10759)
  * fix: bump github.com/miekg/dns from 1.1.43 to 1.1.46 (#10757)
  * fix: bump github.com/aws/aws-sdk-go-v2/service/dynamodb (#10751)
  * fix: bump github.com/nats-io/nats-server/v2 from 2.7.2 to 2.7.3 (#10752)
  * docs: add value_field_name to value processor (#10740)
  * fix: log err when loading mibs (#10735)
  * docs: add info on Graylog GELF spec (#10745)
  * fix: typo metadata support in csv parser (#10742)
  * feat: update etc/telegraf.conf and etc/telegraf_windows.conf (#10737)
  * feat: Add tag batch-processing to XPath parser (#10585)
  * fix: add push only updated values flag to histogram aggregator (#10515)
  * feat(parsers/csv): Add metadata support to CSV parser plugin (#10083)
  * fix: Revert "fix: error msg for missing env variables in config (#10681)" (#10727)
  * fix: bump github.com/aws/aws-sdk-go-v2/config from 1.8.3 to 1.13.1 (#10720)
  * fix: bump github.com/testcontainers/testcontainers-go (#10728)
  * fix: bump github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs (#10719)
  * fix: bump github.com/aws/aws-sdk-go-v2/feature/ec2/imds (#10721)
  * fix: bump github.com/wavefronthq/wavefront-sdk-go from 0.9.9 to 0.9.10 (#10718)
  * fix: bump github.com/ClickHouse/clickhouse-go from 1.5.1 to 1.5.4 (#10717)
  * fix: Linter fixes for config/config.go (#10710)
  * fix: bump k8s.io/api from 0.23.3 to 0.23.4 (#10713)
  * fix: bump cloud.google.com/go/pubsub from 1.17.1 to 1.18.0 (#10714)
  * fix: bump github.com/newrelic/newrelic-telemetry-sdk-go (#10715)
  * fix: mdstat when sync is less than 10% (#10701)
  * feat: update etc/telegraf.conf and etc/telegraf_windows.conf (#10708)
  * fix: Remove verbose logging from disk input plugin (#10527)
  * feat: Bump github.com/aerospike/aerospike-client-go from 1.27.0 to 5.7.0 (#10604)
  * feat(inputs/memcached): Support client TLS origination to memcached (#10642)
  * feat: socks5 proxy support for websocket (#10672)
  * fix: error msg for missing env variables in config (#10681)
  * fix: include influxdb bucket name in error messages (#10706)
  * fix: openweathermap add feels_like field (#10705)
  * fix: Set NextCheckTime to LastCheckTime to avoid GroundWork to invent a value (#10623)
  * fix: bump github.com/aws/aws-sdk-go-v2/service/dynamodb from 1.5.0 to 1.13.0 (#10692)
  * fix: bump github.com/sensu/sensu-go/api/core/v2 from 2.12.0 to 2.13.0 (#10704)
  * fix: bump github.com/gophercloud/gophercloud from 0.16.0 to 0.24.0 (#10693)
  * fix: bump github.com/jackc/pgx/v4 from 4.14.1 to 4.15.0 (#10702)
  * fix(dedup): Modifying slice while iterating is dangerous (#10684)
  * fix: linter fixes for "import-shadowing: The name '...' shadows an import name" (#10689)
  * fix: bump github.com/aws/aws-sdk-go-v2/service/sts from 1.7.2 to 1.14.0 (#10602)
  * fix: update gosmi from v0.4.3 to v0.4.4 (#10686)
  * feat: update configs (#10676)
  * feat[elastic output]: add elastic pipeline flags (#10505)
  * fix: ensure folders do not get loaded more than once (#10551)
  * docs: update VMWare doc links (#10663)
  * fix: prometheusremotewrite wrong timestamp unit (#10547)
  * feat: update configs (#10662)
  * fix: add graylog toml tags (#10660)
  * feat: add socks5 proxy support for kafka output plugin (#8192)
  * docs: override reported OpenSearch version (#10586)
  * feat: update etc/telegraf.conf and etc/telegraf_windows.conf (#10659)
  * fix: bump all go.opentelemetry.io dependencies (#10647)
  * feat: collection offset implementation (#10545)
  * chore: update go to 1.17.7 (#10658)
  * fix: check for nil client before closing in amqp (#10635)
  * fix: timestamp change during execution of json_v2 parser. (#10657)
  * fix: bump github.com/signalfx/golib/v3 from 3.3.38 to 3.3.43 (#10652)
  * fix: bump github.com/aliyun/alibaba-cloud-sdk-go (#10653)
  * fix: incorrect handling of json_v2 timestamp_path (#10618)
  * feat: gather additional stats from memcached (#10641)
  * feat: update etc/telegraf.conf and etc/telegraf_windows.conf (#10649)
  * fix: Revert deprecation of http_listener_v2 (#10648)
  * fix: bump github.com/denisenkom/go-mssqldb from 0.10.0 to 0.12.0 (#10503)
  * fix: bump github.com/gopcua/opcua from 0.2.3 to 0.3.1 (#10626)
  * fix: use current time as ecs timestamp (#10636)
  * fix: bump github.com/nats-io/nats-server/v2 from 2.6.5 to 2.7.2 (#10638)
  * chore: add -race flag to go tests (#10629)
  * feat: update etc/telegraf.conf and etc/telegraf_windows.conf (#10631)
  * fix: license doc outdated causing CI failure (#10630)
  * fix: bump k8s.io/client-go from 0.22.2 to 0.23.3 (#10589)
  * feat: Implemented support for reading raw values, added tests and doc (#6501)
  * fix: Improve parser tests by using go-cmp/cmp (#10497)
  * feat(mongodb): add FsTotalSize and FsUsedSize informations (#10625)
  * docs: update quay docs for auth (#10612)
  * chore: allow downgrade of go version in windows script (#10614)
  * chore: update CI go to 1.17.6 (#10611)
  * feat: update etc/telegraf.conf and etc/telegraf_windows.conf (#10600)
  * fix(inputs.opcua): add more data to error log (#10465)
  * fix: bump github.com/aws/aws-sdk-go-v2/service/kinesis from 1.6.0 to 1.13.0 (#10601)
  * refactor: use early return pattern (#10591)
  * fix: bump github.com/benbjohnson/clock from 1.1.0 to 1.3.0 (#10588)
  * feat: add dynamic tagging to gnmi plugin (#7484)
  * fix: bump github.com/Azure/azure-kusto-go from 0.5.0 to 0.5.2 (#10598)
  * feat: update etc/telegraf.conf and etc/telegraf_windows.conf (#10584)
  * fix(parsers.json_v2): allow optional paths and handle wrong paths correctly (#10468)
  * docs: add expriation_interval to readme (#10583)
  * feat: aggregator histogram add expiration (#10520)
  * fix[elasticsearch output]: add scheme to fix error in sniffing option (#10513)
  * chore: fix typo in bug report template (#10582)
  * style: Add deprecated warning and version to win_perf_counters option (#10579)
  * feat: Add autorestart and restartdelay flags to Windows service (#10559)
  * fix: Statefull parser handling (#10575)
  * fix: bump github.com/vmware/govmomi from 0.27.2 to 0.27.3 (#10571)
  * fix: bump github.com/prometheus/client_golang from 1.11.0 to 1.12.1 (#10572)
  * fix: remove signed macOS dotfile artifacts (#10560)
  * fix: bump go.mongodb.org/mongo-driver from 1.7.3 to 1.8.3 (#10564)
  * fix: bump github.com/google/go-cmp from 0.5.6 to 0.5.7 (#10563)
  * fix: bump go.opentelemetry.io/collector/model from 0.39.0 to 0.43.2 (#10562)
  * fix: bump github.com/multiplay/go-ts3 from 1.0.0 to 1.0.1 (#10538)
  * fix: bump cloud.google.com/go/monitoring from 0.2.0 to 1.2.0 (#10454)
  * feat: update etc/telegraf.conf and etc/telegraf_windows.conf (#10561)
  * docs: updates readme to add service SID auth and cleans up AAD auth dupe info (#10541)
  * feat: Add caching to internet_speed (#10530)
  * feat: Xtremio input (#9697)
  * feat(inputs.win_perf_counter): allow errors to be ignored (#10535)
  * fix(outputs/azure_data_explorer): Added azureBlob controls to lower RAM usage (#10179)
  * fix: bump github.com/vmware/govmomi from 0.26.0 to 0.27.2 (#10536)
  * docs: add apt and knot to EXTERNAL_PLUGINS.md (#10552)
  * feat: update etc/telegraf.conf and etc/telegraf_windows.conf (#10546)
  * fix: move "Starting Telegraf" log (#10528)
  * fix: update docker memory usage calculation (#10491)
  * feat: Add ClickHouse driver to sql inputs/outputs plugins (#9671)
  * fix: collapsed fields by calling more indepth function (#10430)
  * feat: update etc/telegraf.conf and etc/telegraf_windows.conf (#10533)
  * feat: process group tag for groundwork output plugin (#10499)
  * feat: update etc/telegraf.conf and etc/telegraf_windows.conf (#10532)
  * docs: Update deprecation readme (#10529)
  * feat: add FileVersion and icon to Win exe (#10487)
  * chore: update grpc to v1.44.0 (#10525)
  * fix: bump google.golang.org/api from 0.54.0 to 0.65.0 (#10434)
  * fix: typo in docs (#10441)
  * fix: bump github.com/antchfx/xmlquery from 1.3.6 to 1.3.9 (#10507)
  * fix: bump github.com/nsqio/go-nsq from 1.0.8 to 1.1.0 (#10521)
  * fix: bump github.com/prometheus/common from 0.31.1 to 0.32.1 (#10506)
  * fix: ipset crash when command not found (#10474)
  * fix: bump cloud.google.com/go/pubsub from 1.17.0 to 1.17.1 (#10504)
  * fix: bump github.com/influxdata/influxdb-observability/influx2otel from 0.2.8 to 0.2.10 (#10432)
  * fix: Update modbus readme (#10501)
  * Fix: Update README.md (#10500)
  * docs: Fixes for input/sql readme (#10498)
  * feat: update configs (#10490)
  * fix: graylog readme to use graylog 3 URLs (#10481)
  * fix: add RFC3164 to RFC5424 translation to docs (#10480)
  * fix: add comment to logparser (#10479)
  * chore: Add `openConnections` to enterprise cluster metrics Readme (#10483)
  * fix: remove duplicate addition of fields (#10478)
  * fix(parsers.nagios): nagios parser now uses real error for logging #10472 (#10473)
  * fix: add newline in execd for prometheus parsing (#10463)
  * fix: bump github.com/shirou/gopsutil/v3 from 3.21.10 to 3.21.12 (#10451)
  * fix: do not save cache on i386 builds (#10464)
  * chore: readme escape rpm variables
  * fix: address flaky tests in cookie_test.go and graylog_test.go (#10326)
  * feat: check TLSConfig early to catch missing certificates (#10341)
  * fix: ensure CI tests runs against i386 (#10457)
  * fix: bump github.com/jackc/pgx/v4 from 4.6.0 to 4.14.1 (#10453)
  * fix: bump github.com/Azure/azure-event-hubs-go/v3 from 3.3.13 to 3.3.17 (#10449)
  * fix: bump github.com/gosnmp/gosnmp from 1.33.0 to 1.34.0 (#10450)
  * fix: wavefront_disable_prefix_conversion case missing from missingTomlField func (#10442)
  * fix: bump github.com/hashicorp/consul/api from 1.9.1 to 1.12.0 (#10435)
  * feat: Parser plugin restructuring (#8791)
  * fix: bump github.com/antchfx/jsonquery from 1.1.4 to 1.1.5 (#10433)
  * fix: bump github.com/prometheus/procfs from 0.6.0 to 0.7.3 (#10414)
  * feat: update etc/telegraf.conf and etc/telegraf_windows.conf (#10429)
  * feat: Add noise plugin (#10057)
  * feat: update configs (#10425)
  * fix: Accept non-standard OPC UA OK status by implementing a configurable workaround (#10384)
  * feat: support headers for http plugin with cookie auth (#10404)
  * fix: snmp input plugin errors if mibs folder doesn't exist (#10346) (#10354)
  * fix: correctly set ASCII trailer for syslog output (#10393)
  * feat: update configs (#10424)
  * chore: go mod tidy (#10423)
  * fix: bump github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs from 1.5.2 to 1.12.0 (#10415)
  * fix: bump github.com/kardianos/service from 1.0.0 to 1.2.1 (#10416)
  * fix: ensure http body is empty (#10396)
  * feat: add bearer token support to elasticsearch output (#10399)
  * fix: bump github.com/couchbase/go-couchbase from 0.1.0 to 0.1.1 (#10417)
  * feat: update etc/telegraf.conf and etc/telegraf_windows.conf (#10411)
  * fix(json_v2): use raw values for timestamps (#10413)
  * fix: bump github.com/pion/dtls/v2 from 2.0.9 to 2.0.13 (#10418)
  * chore: update mqtt documentation (#10394)
  * feat: deprecate unused snmp_trap timeout configuration option (#10339)
  * fix: update containerd to 1.5.9 (#10402)
  * feat: update configs (#10400)
  * feat:  add compression to Datadog Output (#9963)
  * feat: update etc/telegraf.conf and etc/telegraf_windows.conf (#10395)
  * fix: re-enable OpenBSD modbus support (#10385)
  * fix: Fix batching logic with write records, introduce concurrent requests (#8947)
  * feat: Add additional stats to bond collector (#10137)
  * fix(outputs/amqp): Close the last connection when writing error to avoid connection leaks (#10360)
  * feat: update docker client API version (#10382)
  * feat: update etc/telegraf.conf and etc/telegraf_windows.conf (#10381)
  * fix: fix missing storage in container with disk plugin (#10318)
  * feat: add systemd notify support (#10340)
  * chore: typos across source code comments (#10361)
  * chore: sql readme with more details on data types (#10378)
  * fix: empty import tzdata for Windows binaries (#10377)
  * feat: update configs (#10374)
  * chore: document deprecation of timeout (#10373)
  * feat: update configs (#10345)
  * feat: add mock input plugin (#9782)
  * chore: use 4 cores on linux systems (#10342)
  * fix: update go-ldap to v3.4.1 (#10343)
  * chore: remove "i386" test job (#10344)
  * fix: update GroundWork SDK and improve logging (#10255)
  * feat: add more functionality to template processor (#10316)
  * chore: run release signing jobs at the same time (#10333)
  * feat: update configs (#10336)
  * feat: update etc/telegraf.conf and etc/telegraf_windows.conf (#10335)
  * feat: add builds for riscv64 (#10262)
  * feat: add consul metrics input plugin (#10258)
  * fix: snmp marshal error (#10322)
  * feat: add exclude_root_certs option to x509_cert plugin (#9822)
  * feat: add option to disable prepared statements for PostgreSQL (#9710)
  * fix: cumulative interval start times for stackdriver output (#10097)
  * feat: add option to skip errors during CSV parsing (#10267)
  * feat: update configs (#10334)
  * feat: socketstat input plugin (#3649)
  * fix: update djherbis/times and fix dependabot (#10332)
  * fix: warning output when running with --test (#10329)
  * feat: update configs (#10325)
  * docs: add note about dpdk and socket availability (#10324)
  * feat: reworked varnish_cache plugin (#9432)
  * chore:  release packaging run in parallel (#10314)
  * fix: update bug template
  * chore: add logs section for bug reports (#10323)
  * fix: do not require networking during tests (#10321)
  * chore: update mac signing job to use latest xcode (#10311)
  * chore: update Go version to 1.17.5 (#10310)
  * feat: update configs (#10319)
  * chore: cleanup go.mod (#10313)
  * feat: add timeout-setting to Graylog-plugin (#10220)
  * feat: Improve error logging on plugin initialization (#10307)
  * fix: Fix panic in logparser due to missing Log. (#10296)
  * fix: panic due to no module (#10303)
  * fix: grab table columns more accurately (#10295)
  * fix: check index before assignment (#10299)
  * feat: adds optional list of non retryable http statuscodes to http output plugin (#10186)
  * fix: panic is no mibs folder is found (#10301)
  * fix: mac signing issue with arm64 (#10293)
  * fix: Update go-sensu to v2.12.0 (#10247)
  * fix: typo in openstack neutron input plugin (newtron) (#10284)
  * fix: Fix panic in parsers due to missing Log for all plugins using SetParserFunc. (#10288)
  * fix: mark TestGatherUDPCert as an integration test (#10279)
  * feat: support darwin arm64 (#10239)
  * feat: update configs (#10275)
  * fix: run gofmt (#10274)
  * fix: run go mod tidy (#10273)
  * fix: inputs.snmp to respect number of retries configured (#10268)
  * feat: add Redis Sentinel input plugin (#10042)
  * fix: flush wavefront output sender on error to clean up broken connections (#10225)
  * feat: Add option to disable Wavefront prefix conversion (#10252)
  * feat: add heap_size_limit field for input.kibana (#10243)
  * fix: use sha256 for RPM digest (#10272)
  * feat: Update underlying KNX library to support new types. (#10263)
  * chore: restart service if it is already running and upgraded via RPM (#9970)
  * feat: update etc/telegraf.conf and etc/telegraf_windows.conf (#10237)
  * fix: Handle duplicate registration of protocol-buffer files gracefully. (#10188)
  * fix(http_listener_v2): fix panic on close (#10132)
  * feat: add Vault input plugin (#10198)
  * feat: support aws managed service for prometheus (#10202)
  * fix: Make telegraf compile on Windows with golang 1.16.2 (#10246)
  * feat: Modbus add per-request tags (#10231)
  * fix: Implement NaN and inf handling for elasticsearch output (#10196)
  * feat: add nomad input plugin (#10106)
  * fix: Print loaded plugins and deprecations for once and test (#10205)
  * fix: eliminate MIB dependency for ifname processor (#10214)
  * feat: Optimize locking for SNMP MIBs loading. (#10206)
  * feat: Add SMART plugin concurrency configuration option, nvme-cli v1.14+ support and lint fixes. (#10150)
  * feat: update configs (#10236)
  * fix(inputs/kube_inventory): set TLS server name config properly (#9975)
  * fix: Sudden close of Telegraf caused by OPC UA input plugin (#10230)
  * fix: bump github.com/eclipse/paho.mqtt.golang from 1.3.0 to 1.3.5 (#9913)
  * fix: json_v2 parser timestamp setting (#10221)
  * fix: ensure graylog spec fields not prefixed with '_' (#10209)
  * docs: remove duplicate links in CONTRIBUTING.md (#10218)
  * fix: pool detection and metrics gathering for ZFS &gt;= 2.1.x (#10099)
  * fix: parallelism fix for ifname processor (#10007)
  * chore: Forbids "log" package only for aggregators, inputs, outputs, parsers and processors (#10191)
  * docs: address documentation gap when running telegraf in k8s (#10215)
  * feat: update etc/telegraf.conf and etc/telegraf_windows.conf (#10211)
  * fix: mqtt topic extracting no longer requires all three fields (#10208)
  * fix: windows service - graceful shutdown of telegraf (#9616)
  * feat: update etc/telegraf.conf and etc/telegraf_windows.conf (#10201)
  * feat: Modbus support multiple slaves (gateway feature) (#9279)
  * fix: Revert unintented corruption of the Makefile from #10200. (#10203)
  * chore: remove triggering update-config bot in CI (#10195)</changelog>
  <changelog author="jkowalczyk@suse.com" date="1650888003">- Update to version 1.22.1:
  * fix: bump gonum.org/v1/gonum from 0.9.3 to 0.11.0 (#10937)
  * fix: bump github.com/golang-jwt/jwt/v4 from 4.2.0 to 4.4.1 (#10906)
  * chore: add actions/setup-go@v2 to linter config (#10935)
  * docs(external.psi): add psi plugin (#10462)
  * fix: Update gopsutil and associated dependencies for improved OpenBSD supp? (#10931)
  * docs: update rpm/deb instructions with stable URLs (#10905)
  * fix: inconsistencies in sql*Requests queries (#10553)
  * fix: default value for logfile rotation interval (#10883)
  * fix: redundant zfs pool tag (#10871)
  * docs: update license of dependencies (#10914)
  * fix: update vsphere info message to debug (#10903)
  * docs: fix contribute button link (#10904)
  * docs: improve documentation around contribution (#10825)
  * chore: set telegraf log as text block in bug reports (#10895)
  * fix: include body in error message (#10866)
  * docs: clarify the k and fields topk params (#10830)
  * chore: remove slow process test (#10856)
  * chore: update slow file rotation tests (#10857)
  * chore: switch HTTP 100 test case values (#10858)
  * chore: fix slow running intel-pmu test (#10859)
  * chore: skip longer/integration tests on -short mode (#10860)
  * chore: remove CircleCI parallelism (#10862)
  * chore: reduce timeouts and sleeps (#10861)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1650888004">- Refresh harden_telegraf.service.patch</changelog>
  <changelog author="jkowalczyk@suse.com" date="1650974400">- Update to version 1.22.2:
  * Update changelog
  * update build version
  * update build version
  * fix: bump github.com/aws/aws-sdk-go-v2/config from 1.13.1 to 1.15.3 (#10998)
  * fix: add mutex to gnmi lookup map (#11008)
  * fix(cmd): Also allow 0 outputs when using test-wait parameter (#11013)
  * fix: allow Makefile to work on Windows (#11015)
  * fix: use sprint to cast to strings in gnmi (#11010)
  * fix: use correct auth token with consul_agent (#11001)
  * fix: add mariadb_dialect to address the MariaDB differences in INNODB_METRICS (#10486)
  * fix: correctly parse various numeric forms (#10923)
  * fix: update go.opentelemetry.io/collector/pdata from v0.48.0 to v0.49.0 (#10984)
  * fix: bump github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs (#10997)
  * fix: bump github.com/aws/aws-sdk-go-v2/credentials from 1.8.0 to 1.11.2 (#10975)
  * fix: update github.com/containerd/containerd from v1.5.9 to v1.5.11 (#10981)
  * fix: bump github.com/miekg/dns from 1.1.46 to 1.1.48 (#10973)
  * fix: ensure aliyuncms metrics accept array, fix discovery (#10850)
  * fix(inputs/aerospike): Statistics query bug (#10930)
  * fix: update github.com/Azure/azure-kusto-go from 0.5.0 to 0.60 (#10966)
  * fix: update github.com/gopcua/opcua from v0.3.1 to v0.3.3 (#10974)
  * fix: bump github.com/aws/aws-sdk-go-v2/service/dynamodb (#10972)
  * fix: bump github.com/xdg/scram from 1.0.3 to 1.0.5 (#10773)
  * fix: bump go.mongodb.org/mongo-driver from 1.8.3 to 1.9.0 (#10971)
  * fix: align the default value for msg size (#10947)
  * fix: update opentelemetry from v0.2.10 to v0.2.17 (#10963)
  * fix: remove overly verbose info message from cisco mdt (#10959)
  * fix: update starlark 7a1108eaa012-&gt;d1966c6b9fcd (#10940)
  * fix: update influxdb_v2 error message (#10958)
  * fix(inputs.prometheus): moved from watcher to informer (#10932)</changelog>
  <changelog author="jkowalczyk@suse.com" date="1651147200">- Update to version 1.22.3:
  * go mod tidy
  * Update changelog
  * update build version
  * chore: increase timeout for darwin packaging (#11041)
  * fix: reduce log level in disk plugin (#10925)
  * fix: use external xpath parser for gnmi (#11024)
  * fix: remove duplicate influxdb listener writes (#10976)
  * chore: go mod tidy (#10983)
  * chore: Update Go to 1.18.1 (#10961)</changelog>
  <changelog author="jkowalczyk@suse.com" date="1652702400">- Update to version 1.22.4:
  * Update changelog
  * update build version
  * fix: bump github.com/showwin/speedtest-go from 1.1.4 to 1.1.5 (#10722)
  * fix(outputs.Wavefront): If no "host" tag is provided, do not add "telegraf.host" tag (#11078)
  * chore: update opentelemetry plugins (#11085)
  * fix(inputs.couchbase): Don't assume metrics will all be of the same length (#11045)
  * fix: do not error when closing statsd network connection (#11043)
  * fix: re-init azure monitor http client on context deadline error (#11030)
  * fix: have telegraf service wait for network up (#11042)</changelog>
  <changelog author="jkowalczyk@suse.com" date="1655121600">- Update to version 1.23.0:
  * fix: Remove all rebase logic from CI (#11293)
  * fix: Don't rebase on master when building packages (#11291)
  * Update changelog for v1.23.0
  * test: add install go for linux, use in integration tests (#11281)
  * fix(inputs/directory_monitor): Add support for multiline file parsing (#11234)
  * chore: Fix readme linter errors for input plugins M-Z (#11274)
  * fix: Always build README-embedder for host-architecture (#11253)
  * feat: Migrate xpath parser to new style (#11218)
  * fix: add missing build constraints for sqlite (#11272)
  * fix: remove full access permissions (#11261)
  * chore: Fix readme linter errors for input plugins E-L (#11214)
  * chore: Fix readme linter errors for input plugins A-D (#10964)
  * fix: update github.com/containerd/containerd from v1.5.11 to v1.5.13 (#11266)
  * fix: bump github.com/tidwall/gjson from 1.10.2 to 1.14.1 (#11264)
  * chore: Fix readme linter errors for processor, aggregator, and parser plugins (#10960)
  * fix: update modernc.org/sqlite from v1.10.8 to v1.17.3 (#11260)
  * docs: add missing word &lt;3 (#11262)
  * feat(intel_powerstat): add uncore frequency metrics (#11254)
  * test: remove restore integration test cache (#11255)
  * test: add circle ci integration testing on PRs (#11246)
  * test: harden running of testcontainer integration tests (#11245)
  * chore: update go from v1.18.1 to v1.18.3 (#11248)
  * chore: rename circleci executor (#11247)
  * chore: upgrade windows circleci size (#11249)
  * fix: re-add event to splunk serializer (#11237)
  * docs: update test-container docs (#11244)
  * test: remove docker-compose.yml test file (#11243)
  * fix: update moby/ipvs dependency from v1.0.1 to v1.0.2 (#11242)
  * feat(inputs.sqlserver): Update query store and latch performance counters (#11216)
  * test: migrate elasticsearch to testcontainers (#11207)
  * chore: Bump apcupds and remove the replacement as issue is fixed upstream. (#11239)
  * test: migrate postgres to testcontainers (#11209)
  * test: migrate mcrouter to test-containers (#11208)
  * test: migrate kafka to testcontainers (#11206)
  * docs: Initial update of integration test docs (#11210)
  * chore: Bump riemann-go-client and remove replacement (#11236)
  * fix: Upgrade xpath and fix code (#11241)
  * feat(inputs.nginx_plus_api): Gather slab metrics (#10448)
  * fix(inputs/modbus): #11105 fix requests starting with an omitted field (#11202)
  * fix: (outputs/sql) table existence cache (#10812)
  * fix: Update sample.conf for prometheus (#11217)
  * fix: bump github.com/nats-io/nats-server/v2 from 2.7.4 to 2.8.4 (#11221)
  * test: enable logging with testcontainers (#11211)
  * chore: update github.com/opencontainers/runc from v1.0.2 to v1.1.2 (#11212)
  * chore: update gopkg.in/yaml.v3 from v3.0.0 to v3.0.1 (#11213)
  * fix(inputs/snmp): switch new Reconnect method to be a value receiver (#11197)
  * test: refactor testcontainer port lookup (#11198)
  * test: actually skip flaky snmp test (#11199)
  * chore: correctly spell embed (#11200)
  * fix: bump go.opentelemetry.io/otel/metric from 0.28.0 to 0.30.0 (#11088)
  * chore: update OpenTelmetry plugins (#11194)
  * docs: remove recommendation for prometheus metric_version=2 (#11158)
  * fix: bump github.com/sensu/sensu-go/api/core/v2 from 2.13.0 to 2.14.0 (#11021)
  * test: migrate zookeeper to test-containers (#11185)
  * fix(plugins/amqp): move from `streadway/amqp` to `rabbitmq/amqp091-go` (#11192)
  * feat: Add constant 'algorithm' to the mock plugin (#11188)
  * fix: redis plugin goroutine leak triggered by auto reload config mechanism (#11143)
  * fix: update golangci-lint from v1.45.2 to v1.46.2 (#11191)
  * fix(inputs/snmp): Reconnect TCP agents if needed (#11163)
  * test: migrate pgbouncer to test-containers (#11186)
  * test: remove rabbitmq container not used (#11175)
  * chore: Embed sample configurations into README for aggregators (#11190)
  * chore: Embed sample configurations into README for processors (#11189)
  * chore: embed sample configurations into README for outputs (#11182)
  * feat: Google API Auth (#11084)
  * test: migrate openldap tests to test-containers (#11169)
  * test: migrate nsq to test containers (#11173)
  * test: migrate opcua to test-containers (#11171)
  * feat: add field key option to set event partition key (#11076)
  * test: migrate aerospike to test-containers (#11177)
  * fix: Convert slab plugin to new sample.conf. (#11181)
  * test: migrate memcached to test-containers (#11176)
  * test: migrate redis to test-containers (#11174)
  * test: migrate mqtt to test containers (#11172)
  * test: migrate nats to test-containers (#11170)
  * test: migrate crate to test-containers code (#11165)
  * chore: Embed sample configurations into README for inputs (#11136)
  * fix: search services file in /etc/services and fall back to /usr/etc/services (#11179)
  * fix: Remove any content type from prometheus accept header (#11082)
  * feat(inputs.cpu): Add tags with core id or physical id to cpus (#11141)
  * chore: add readme linter to CI (#11020)
  * feat(intel_powerstat): add Max Turbo Frequency and introduce improvements (#11035)
  * test: avoid data race in tcp-listener test (#11144)
  * fix: bump github.com/aws/aws-sdk-go-v2/config from 1.15.3 to 1.15.7 (#11166)
  * test: add generic test-container code for re-use, migrate mysql (#11157)
  * feat: add external huebridge input plugin (#11159)
  * fix: Improve slab testing without sudo. (#11151)
  * docs: update review docs (#11147)
  * test: force elasticsearch to index batch data (#11153)
  * test: update mongodb output to use test containers (#11137)
  * test: switch internet speed to enable file download (#11146)
  * fix: doc interval setting for internet speed plugin (#11150)
  * fix(inputs.burrow): Move Dialer to variable and run `make fmt` (#11149)
  * fix: avoid calling sadc with invalid 0 interval (#11140)
  * feat: [inputs/burrow] fill more http transport parameters (#6948)
  * feat: do not error if no nodes found for current config with xpath parser (#11102)
  * feat: add slab metrics input plugin (#11075)
  * fix: use readers over closers in http input (#11083) Refs boo#1203914
  * chore(inputs_a-l): migrate sample configs into separate files (#11132)
  * chore(inputs_m-z): migrate sample configs into separate files (#11133)
  * chore(outputs): migrate sample configs into separate files (#11131)
  * chore(aggregators): migrate sample configs into separate files (#11130)
  * chore(processors): migrate sample configs into separate files (#11125)
  * test: use supported version of elasticsearch (#11111)
  * test: remove unecessary flag in sql input (#11115)
  * fix: elasticsearch output float handling test (#11120)
  * test: remove unused riemann from docker-compose (#11118)
  * fix(parsers/nagios): metrics will always return a supported status co? (#11062)
  * feat: allow other fluentd metrics apart from retry_count, buffer_queu? (#11056)
  * feat(parsers/logfmt): Add tag support (#11060)
  * fix: log instance name in skip warnings (#10995)
  * fix: bump github.com/wavefronthq/wavefront-sdk-go from 0.9.10 to 0.9.11 (#10970)
  * fix: Update gopsutil from v3.22.3 to v3.22.4 to allow for HOST_PROC_MOUNTINFO. (#11107)
  * chore(inputs/file): More clear error messages (#11104)
  * test: add test for mysql gatherGlobalVariables using sql-mock (#10987)
  * feat: Artifactory Webhook Receiver (#10918)
  * docs: fix socket_writer output format link (#11101)
  * fix: check net.Listen() error in tests (#11093)
  * fix: Output erroneous namespace and continue instead of error out (#11069)
  * Update changelog
  * feat: add mount option filtering to disk plugin (#11039)
  * feat(inputs.vsphere): Collect resource pools metrics and add resource pool tag in VM metrics (#10574)
  * docs: note about listsnapshots cause zfs parse failures (#11091)
  * fix: bump github.com/showwin/speedtest-go from 1.1.4 to 1.1.5 (#10722)
  * fix(outputs.Wavefront): If no "host" tag is provided, do not add "telegraf.host" tag (#11078)
  * chore: update opentelemetry plugins (#11085)
  * docs: correct copy-and-paste of udp to tcp (#11080)
  * refactor: replace strings.Replace with strings.ReplaceAll (#11079)
  * feat(exec, execd): add an option to pass a custom environment to their child process (#11049)
  * fix(inputs.couchbase): Don't assume metrics will all be of the same length (#11045)
  * fix: deprecate useless database config option (#11044)
  * fix: do not error when closing statsd network connection (#11043)
  * fix: re-init azure monitor http client on context deadline error (#11030)
  * feat: add influx semantic commits checker, checks only last commit. (#11037)
  * fix: have telegraf service wait for network up (#11042)
  * chore(inputs/disk): add deprecation notice to legacy mountpoints setting (#10948)
  * style: align plugin renaming (#10868)
  * Update changelog
  * fix: datadog count metrics (#10979)
  * feat(outputs.http): Support configuration of `MaxIdleConns` and `MaxIdleConnsPerHost` (#10954)
  * chore: enable linting of shell scripts (#11031)
  * chore: increase timeout for darwin packaging (#11041)
  * fix: reduce log level in disk plugin (#10925)
  * feat: create and push nightly docker images to quay.io (#11000)
  * chore: remove influxdata/validate-semantic-github-messages github workflow (#11036)
  * chore: Adding influx's semantic commit and PR message checker, so we ? (#11009)
  * fix: use external xpath parser for gnmi (#11024)
  * fix: remove duplicate influxdb listener writes (#10976)
  * Update changelog
  * fix: bump github.com/aws/aws-sdk-go-v2/config from 1.13.1 to 1.15.3 (#10998)
  * fix: add mutex to gnmi lookup map (#11008)
  * fix(cmd): Also allow 0 outputs when using test-wait parameter (#11013)
  * fix: allow Makefile to work on Windows (#11015)
  * chore: Fix readme linter errors for output plugins (#10951)
  * fix: use sprint to cast to strings in gnmi (#11010)
  * docs: add openstack metadata external plugin (#10999)
  * fix: use correct auth token with consul_agent (#11001)
  * docs: correct influx parser type setting in README (#11004)
  * fix: add mariadb_dialect to address the MariaDB differences in INNODB_METRICS (#10486)
  * fix: correctly parse various numeric forms (#10923)
  * chore: add readme linter (#10916)
  * chore: update pull request with master when running CI (#10993)
  * docs: add missing slash in mongodb readme (#10994)
  * fix: update go.opentelemetry.io/collector/pdata from v0.48.0 to v0.49.0 (#10984)
  * docs: regex processor only works on strings (#10982)
  * fix: bump github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs (#10997)
  * fix: bump github.com/aws/aws-sdk-go-v2/credentials from 1.8.0 to 1.11.2 (#10975)
  * test: use `T.TempDir` to create temporary test directory (#10988)
  * feat(processor/regex): Add ability to check every tag for regex replace (#10927)
  * chore: go mod tidy (#10983)
  * chore: Update Go to 1.18.1 (#10961)
  * feat(inputs/teamspeak): allow to configure nickname (#10934)
  * fix: update github.com/containerd/containerd from v1.5.9 to v1.5.11 (#10981)
  * feat(inputs/sqlserver): add RecentBackups query (#10567)
  * fix: bump github.com/miekg/dns from 1.1.46 to 1.1.48 (#10973)
  * fix: ensure aliyuncms metrics accept array, fix discovery (#10850)
  * fix(inputs/aerospike): Statistics query bug (#10930)
  * fix: update github.com/Azure/azure-kusto-go from 0.5.0 to 0.60 (#10966)
  * chore: add logging to graylog tests (#10896)
  * chore: remove go generate from CI tests (#10977)
  * fix: update github.com/gopcua/opcua from v0.3.1 to v0.3.3 (#10974)
  * fix: bump github.com/aws/aws-sdk-go-v2/service/dynamodb (#10972)
  * fix: bump github.com/xdg/scram from 1.0.3 to 1.0.5 (#10773)
  * fix: bump go.mongodb.org/mongo-driver from 1.8.3 to 1.9.0 (#10971)
  * fix: align the default value for msg size (#10947)
  * fix: update opentelemetry from v0.2.10 to v0.2.17 (#10963)
  * docs: update sql readme for creating login in windows (#10967)
  * fix: remove overly verbose info message from cisco mdt (#10959)
  * fix: update starlark 7a1108eaa012-&gt;d1966c6b9fcd (#10940)
  * docs: update csv parser metadata descriptions (#10750)
  * style: Add deprecation notice to renamed plugins (#10867)
  * chore(inputs): add descriptions to config in README.md (#10962)
  * feat: migrate input plugins to new sample config format (M-Z) (#10926)
  * fix: update influxdb_v2 error message (#10958)
  * fix(inputs.prometheus): moved from watcher to informer (#10932)
  * feat: migrate input plugins to new sample config format (A-L) (#10924)
  * feat: migrate output plugins to new sample config format (#10910)
  * feat: migrate processor plugins to new sample config format (#10913)
  * feat: migrate aggregator plugins to new sample config format (#10912)
  * Update changelog
  * feat: generate the plugins sample config (#10886)
  * feat(inputs.mongodb): Add metrics about files currently open and currently active data handles (#7896)
  * fix: bump gonum.org/v1/gonum from 0.9.3 to 0.11.0 (#10937)
  * fix: bump github.com/golang-jwt/jwt/v4 from 4.2.0 to 4.4.1 (#10906)
  * chore: add actions/setup-go@v2 to linter config (#10935)
  * docs(external.psi): add psi plugin (#10462)
  * fix: Update gopsutil and associated dependencies for improved OpenBSD supp? (#10931)
  * docs: update rpm/deb instructions with stable URLs (#10905)
  * fix: inconsistencies in sql*Requests queries (#10553)
  * feat: add ANSI color filter for tail input plugin (#10880)
  * feat: (outputs.elasticsearch) Add healthcheck timeout (#10853)
  * feat: In Lustre input plugin, support collecting per-client stats. (#10607)
  * fix: default value for logfile rotation interval (#10883)
  * fix: redundant zfs pool tag (#10871)
  * docs: update license of dependencies (#10914)
  * fix: update vsphere info message to debug (#10903)
  * docs: fix contribute button link (#10904)
  * feat: add fritzbox as external plugin (#10818)
  * docs: improve documentation around contribution (#10825)
  * chore: set telegraf log as text block in bug reports (#10895)
  * fix: include body in error message (#10866)
  * feat: update etc/telegraf.conf and etc/telegraf_windows.conf (#10885)
  * docs: clarify the k and fields topk params (#10830)
  * chore: remove slow process test (#10856)
  * chore: update slow file rotation tests (#10857)
  * chore: switch HTTP 100 test case values (#10858)
  * chore: fix slow running intel-pmu test (#10859)
  * chore: skip longer/integration tests on -short mode (#10860)
  * chore: remove CircleCI parallelism (#10862)
  * chore: reduce timeouts and sleeps (#10861)
  * Update CHANGELOG.md
  * Update build version to 1.23.0
  * Update changelog
  * Update CHANGELOG.md</changelog>
  <changelog author="jkowalczyk@suse.com" date="1657108800">- Update to version 1.23.1:
  * Update changelog for v1.23.1
  * Update build_version.txt for v1.23.1
  * Sync sample.conf into READMEs.
  * Fix xpath config location.
  * docs(inputs.mqtt_consumer): add pivot example to readme (#11195)
  * test: Update wait statement for postgresql_extensible (#11447)
  * docs: add firehose to EXTERNAL_PLUGINS.md (#11450)
  * chore(deps): Bump github.com/prometheus/client_golang (#11437)
  * chore(deps): Bump k8s.io/api from 0.24.1 to 0.24.2 (#11434)
  * chore(deps): Bump github.com/influxdata/influxdb-observability/otel2influx from 0.2.21 to 0.2.22 (#11416)
  * chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs from 1.15.4 to 1.15.8 (#11415)
  * test: exchange confused parameters (expected vs actual) (#11422)
  * fix: Bring back old xpath section names (#11335)
  * chore(deps): Bump github.com/vmware/govmomi from 0.27.3 to 0.28.0 (#11396)
  * chore(deps): Bump github.com/golang-jwt/jwt/v4 from 4.4.1 to 4.4.2 (#11395)
  * fix: Sync back sample.confs for inputs.couchbase and outputs.groundwork. (#11413)
  * fix: resolve jolokia2 panic on null response (#11397)
  * chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/ec2 from 1.1.0 to 1.46.0 (#11382)
  * chore: Remove 'github.com/cisco-ie/nx-telemetry-proto' replacement (#11401)
  * chore: Remove 'github.com/satori/go.uuid' replacement (#11240)
  * chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/kinesis (#11380)
  * chore(deps): Bump cloud.google.com/go/pubsub from 1.22.2 to 1.23.0 (#11394)
  * chore(deps): Bump github.com/Azure/azure-kusto-go from 0.6.0 to 0.7.0 (#11378)
  * chore(deps): Bump cloud.google.com/go/bigquery from 1.8.0 to 1.33.0 (#11379)
  * chore(deps): Bump github.com/jackc/pgx/v4 from 4.15.0 to 4.16.1 (#11346)
  * chore(deps): Bump go.opentelemetry.io/collector/pdata from 0.52.0 to 0.54.0 (#11369)
  * docs: swap bytes sent/recv descriptions in nfsclient (#11376)
  * chore(deps): Bump cloud.google.com/go/pubsub from 1.18.0 to 1.22.2 (#11349)
  * chore(deps): Bump github.com/nats-io/nats.go from 1.15.0 to 1.16.0 (#11339)
  * chore(deps): Bump github.com/dynatrace-oss/dynatrace-metric-utils-go from 0.3.0 to 0.5.0 (#11342)
  * fix: Restore sample configurations broken during initial migration (#11276)
  * fix: don't require listeners to be present in overview (#9315)
  * chore: move agent config into seperate file (#11337)
  * docs: Sync sample.conf for recent features (#11348)
  * chore(deps): Bump github.com/Shopify/sarama from 1.32.0 to 1.34.1 (#11319)
  * chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/timestreamwrite from 1.3.2 to 1.13.6 (#11322)
  * fix: filter out views in mongodb lookup (#11280)
  * chore(deps): Bump github.com/fatih/color from 1.10.0 to 1.13.0 (#11340)
  * chore: fix typo (recieve -&gt; receive) (#11341)
  * chore(deps): Bump google.golang.org/api from 0.74.0 to 0.84.0 (#11338)
  * chore(deps): Bump github.com/gophercloud/gophercloud from 0.24.0 to 0.25.0 (#11321)
  * chore(deps): Bump go.mongodb.org/mongo-driver from 1.9.0 to 1.9.1 (#11320)
  * chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/dynamodb (#11328)
  * test: add coveralls coverage to master (#11256)
  * chore: make apt-get instructions consistent and add GPG fingerprint (#11326)
  * chore(deps): Bump github.com/go-logfmt/logfmt from 0.5.0 to 0.5.1 (#11299)
  * chore(deps): Bump k8s.io/client-go from 0.23.3 to 0.24.1 (#11223)
  * chore(deps): Bump google.golang.org/grpc from 1.46.2 to 1.47.0 (#11318)
  * chore(deps): Bump github.com/aws/aws-sdk-go-v2/credentials from 1.12.2 to 1.12.5 (#11297)
  * test: mark integration tests correctly (#11317)
  * test: update wait for statement for postgres (#11309)
  * docs: explain directly connecting to mongo node (#11314)
  * fix: Prevent concurrent map writes to c.UnusedFields (#11311)
  * fix: bump cloud.google.com/go/monitoring from 1.2.0 to 1.5.0 (#11295)</changelog>
  <changelog author="jkowalczyk@suse.com" date="1657627200">- Update to version 1.23.2:
  * Update changelog for v1.23.2
  * Update build_version.txt for v1.23.2
  * Sync sample.conf and README.md files.
  * docs: Update etc/telegraf.conf and etc/telegraf_windows.conf (#11483)
  * fix: allow 201 for cookies, update header docs (#11472)
  * fix(inputs.snmp): snmp UseUnconnectedUDPSocket when using udp (#10331)
  * docs: Update etc/telegraf.conf and etc/telegraf_windows.conf (#11480)
  * chore(gnmi): Add Metrics heading to README.md (#11476)
  * fix(gnmi): refactor tag-only subs for complex keys (#11011)
  * fix: use bigint for backupsize in sqlserver (#11448)
  * docs: Update etc/telegraf.conf and etc/telegraf_windows.conf (#11463)
  * chore(inputs.socket_listener): Remove parser from init (#11462)
  * fix: Deprecation warnings for non-deprecated packages (#11460)
  * chore(deps): Bump github.com/docker/docker (#11438)
  * docs: Update etc/telegraf.conf and etc/telegraf_windows.conf (#11431)
  * docs: Update etc/telegraf.conf and etc/telegraf_windows.conf (#11419)
  * docs: Update etc/telegraf.conf and etc/telegraf_windows.conf (#11414)
  * docs: Update etc/telegraf.conf and etc/telegraf_windows.conf (#11365)
  * docs: Update etc/telegraf.conf and etc/telegraf_windows.conf (#11351)
  * docs: Update etc/telegraf.conf and etc/telegraf_windows.conf (#11344)
  * chore: Remove prefix to use the default `chore(deps)` (#11315)</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658750400">- Update to version 1.23.3:
  * Update changelog for v1.23.3
  * Update build_version.txt for v1.23.3
  * fix(inputs.snmp_trap): nil map panic when use snmp_trap with netsnmp translator (#11534)
  * fix: add version number to MacOS packages
  * chore: update to go1.18.4 (#11526)
  * fix(inputs.mqtt_consumer):  topic parsing error  when topic having prefix(/) (#11527)
  * fix(inputs.sqlserver): set lower deadlock priority (#11522)
  * fix: use reader over readcloser, regen cookie-jar (#11482)
  * fix: correct init volume gatherer in openstack (#11481)
  * fix: add version number to Mac packages (#11506)
  * fix(parsers.prometheus): histogram infinity bucket must be allways present (#11490) (#11486)
  * docs: Add example output section to HTTP plugin (#11497)
  * docs: explain proxmox user/token and node_name (#11487)
  * chore(deps): Bump github.com/antchfx/jsonquery from 1.1.5 to 1.2.0 (#11461)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1658750401">- Refresh harden_telegraf.service.patch</changelog>
  <changelog author="jkowalczyk@suse.com" date="1660651200">- Update to version 1.23.4:
  * fix: remove bare url in changelog that failed lint
  * fix: update license of dependencies
  * fix: update github.com/mdlayher/netlink to 1.6.0 to fix the build
  * fix: Sync sql output and input build constraints to handle loong64 in go1.19. (#11664)
  * docs: explain PowerShell 5 encoding (#11662)
  * chore: update circle-ci orbs (#11618)
  * docs(inputs.zookeeper): document use of prometheus plugin (#11658)
  * chore(deps): bump github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs (#11653)
  * chore(deps): bump github.com/aws/aws-sdk-go-v2/feature/ec2/imds (#11652)
  * chore(deps): bump github.com/aws/aws-sdk-go-v2/service/ec2 (#11651)
  * chore(deps): bump github.com/antchfx/xmlquery from 1.3.9 to 1.3.12 (#11644)
  * fix: Bump github.com/lxc/lxd to latest git to fix https://github.com/lxc/lxd/issues/10738. (#11647)
  * chore(deps): bump google.golang.org/api from 0.85.0 to 0.91.0 (#11643)
  * chore(deps): Bump github.com/prometheus/client_golang from 1.12.2 to 1.13.0 (#11640)
  * chore(deps): bump github.com/hashicorp/consul/api from 1.12.0 to 1.13.1 (#11641)
  * chore(deps): Bump github.com/emicklei/go-restful from v2.9.5+incompatible to v3.8.0 (#11636)
  * fix(inputs.mongodb): update version check for newer versions (#11635)
  * feat: add coralogix dialect to opentelemetry (#11622)
  * fix(parsers): Linter issues (#11607)
  * chore: workaround for failing "go list -m all" (#11624)
  * chore(deps): bump github.com/sirupsen/logrus from 1.8.1 to 1.9.0 (#11616)
  * chore: Update to go1.18.5 (#11621)
  * docs: Add source tag best practices to the metric schema docs (#11620)
  * chore: Fix support issue template (#11617)
  * fix(inputs.kubernetes): refresh token from file at each read (#11578)
  * chore(deps): Update github.com/Shopify/sarama from 1.34.1 to 1.35.0 (#11603)
  * chore(deps): update k8s.io/apimachinery from 0.24.2 to 0.24.3 (#11602)
  * chore(deps): Update cloud.google.com/go/pubsub from 1.23.0 to 1.24.0 (#11604)
  * chore(deps): Update github.com/BurntSushi/toml from 0.4.1 to 1.2.0 (#11605)
  * chore: Migrate all issue templates to yaml (#11612)
  * docs(inputs.exec): clarify parsing for ints (#11597)
  * fix(outputs): Linter issues (#11595)
  * fix(inputs.kube_inventory): send file location to enable token auto-refresh (#11577)
  * chore: update github.com/harlow/kinesis-consumer (#11599)
  * chore(deps): Bump github.com/signalfx/golib/v3 from 3.3.43 to 3.3.45 (#11598)
  * chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/dynamodb (#11584)
  * chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/kinesis (#11585)
  * chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/cloudwatch (#11586)
  * chore(deps): Bump github.com/Azure/azure-event-hubs-go/v3 (#11590)
  * test: fix openetelemtry test (#11573)
  * fix(inputs): Linter issues (#11576)
  * chore(deps): Bump github.com/pion/dtls/v2 from 2.0.13 to 2.1.5 (#11581)
  * chore(deps): Bump github.com/Azure/go-autorest/autorest/adal (#11583)
  * chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs (#11582)
  * chore(deps): Bump github.com/shirou/gopsutil/v3 from 3.22.4 to 3.22.7 (#11580)
  * fix(inputs.cloudwatch): customizable batch size when querying (#10851)
  * chore(deps): Bump github.com/eclipse/paho.mqtt.golang from 1.3.5 to 1.4.1 (#11347)
  * chore(deps): Bump github.com/vmware/govmomi from 0.28.0 to 0.29.0 (#11568)
  * chore(deps): Bump github.com/karrick/godirwalk from 1.16.1 to 1.17.0 (#11574)
  * chore(deps): Bump github.com/go-ldap/ldap/v3 from 3.4.1 to 3.4.4 (#11569)
  * chore(deps): Update all go.opentelemetry.io dependencies (#11494)
  * chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/ec2 from 1.46.0 to 1.51.0 (#11567)
  * chore(deps): Bump github.com/apache/thrift from 0.15.0 to 0.16.0 (#11565)
  * chore(deps): Bump github.com/testcontainers/testcontainers-go from 0.12.0 to 0.13.0 (#11412)
  * fix: Updating credentials file to not use endpoint_url parameter (#10841)
  * fix(inputs.opcua): return an error with mismatched types (#11539)
  * fix(inputs.stackdriver): Handle when no buckets available (#11556)
  * docs(inputs.mysql): Add link to docs on how to enable mysql's performance schema (#11555)
  * chore: add missing section to kafka_consumer's sample.conf (#11553)
  * docs: add timeout section (#11550)
  * fix(inputs.sqlserver): set lower deadlock priority (#11548)
  * docs(inputs.modbus): README changes regarding request.tags (#11541)
  * docs: run make-docs (#11514)
  * test: do not have leadership election during kafka test (#11404)
  * chore: Update CRLF line endings in agent.conf to LF (#11501)</changelog>
  <changelog author="jkowalczyk@suse.com" date="1664884800">- Update to version 1.24.0:
  * feat(inputs.directory_monitor): Support paths for files_to_ignore and files_to_monitor (#11784)
  * chore(inputs.jolokia2): Move agent and proxy one level up (#11637)
  * fix(outputs.execd): Fixing the execd behavior to not throw error when partially unserializable metrics are written. (#11767)
  * fix: add missing entry json_transformation to missingTomlField (#11779)
  * fix: Do not error out for parsing errors in datadog mode. (#11777)
  * chore: update to go1.19.1 (#11776)
  * fix(inputs.mongodb): add an option to bypass connection errors on start (#11629)
  * feat(inputs.directory_monitor): Traverse sub-directories (#11773)
  * fix(inputs.jolokia2): add optional origin header (#11692)
  * chore(deps): Bump google.golang.org/grpc from 1.48.0 to 1.49.0 (#11746)
  * docs: Add go report badge (#11774)
  * feat(inputs.sqlserver): Improved filtering for active requests (#11709)
  * chore(deps): Bump github.com/Azure/azure-kusto-go from 0.7.0 to 0.8.0 (#11770)
  * docs(external): add hwinfo external plugin (#11757)
  * chore(deps): Bump gonum.org/v1/gonum from 0.11.0 to 0.12.0 (#11764)
  * chore(deps): Bump github.com/urfave/cli/v2 from 2.11.2 to 2.14.1 (#11763)
  * fix: sort labels in prometheusremotewrite serializer (#11755)
  * fix(inputs.opcua): Assign node id correctly (#11723)
  * chore(deps): Bump github.com/aws/aws-sdk-go-v2/feature/ec2/imds (#11747)
  * chore: Rename Telegraf receiver argument from a to t (#11742)
  * chore(deps): Bump k8s.io/client-go from 0.24.3 to 0.25.0 (#11745)
  * chore(deps): Bump github.com/gophercloud/gophercloud (#11744)
  * chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/dynamodb (#11743)
  * chore: update github.com/Shopify/sarama from v1.35 to v1.36 (#11713)
  * chore(deps): Bump github.com/rabbitmq/amqp091-go from 1.3.4 to 1.4.0 (#11699)
  * feat(outputs.postgresql): add Postgresql output (#11672)
  * chore(deps): Bump github.com/tidwall/gjson from 1.14.1 to 1.14.3 (#11721)
  * feat: Migrate to urfave/cli (#11700)
  * chore(deps): Bump github.com/hashicorp/consul/api from 1.13.1 to 1.14.0 (#11717)
  * feat(inputs.linux_cpu): Add plugin to collect CPU metrics on Linux (#8988)
  * chore(deps): Bump github.com/aerospike/aerospike-client-go/v5 (#11716)
  * chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/sts (#11711)
  * chore(deps): Bump github.com/wavefronthq/wavefront-sdk-go (#11710)
  * fix(inputs.sqlserver): fixing wrong filtering for sqlAzureMIRequests and sqlAzureDBRequests (#11701)
  * fix: use os-agnositc systemd detection, remove sysv in RPM packaging (#10570)
  * feat(inputs.mqtt_consumer): Add incoming mqtt message size calculation (#11426)
  * feat: tool to build custom Telegraf builds (#11524)
  * chore: Update golangci-lint (#11705)
  * docs: update ms sql dsn example (#11704)
  * feat(serializers.prometheus): Provide option to reduce payload size by removing HELP from payload (#11690)
  * feat(inputs.sqlserver): Add db name to io stats for MI (#11688)
  * fix: refactor telegraf version (#11656)
  * fix(agent): add flushBatch method (#11615)
  * chore(deps): Bump go.mongodb.org/mongo-driver from 1.9.1 to 1.10.1 (#11676)
  * chore(deps): Bump github.com/aliyun/alibaba-cloud-sdk-go from 1.61.1695 to 1.61.1727 (#11695)
  * fix(inputs.prometheus): plugin run outside k8s cluster error (#11673)
  * chore: only lint changed READMEs (#11677)
  * chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/timestreamwrite (#11679)
  * fix: remove bare url in changelog that failed lint
  * chore: Move aws credentials to plugins/common. (#11681)
  * chore: Use build tags to select plugins (#11654)
  * chore(deps): Bump github.com/urfave/cli/v2 from 2.3.0 to 2.11.2 (#11675)
  * chore(deps): bump github.com/aws/aws-sdk-go-v2/service/ec2 (#11670)
  * chore(deps): Bump github.com/Azure/go-autorest/autorest (#11669)
  * chore(deps): Bump github.com/jackc/pgx/v4 from 4.16.1 to 4.17.0 (#11671)
  * fix: Sync sql output and input build constraints to handle loong64 in go1.19. (#11664)
  * docs: explain PowerShell 5 encoding (#11662)
  * chore: update circle-ci orbs (#11618)
  * docs(inputs.zookeeper): document use of prometheus plugin (#11658)
  * feat(outputs.iotdb): Add new output plugin to support Apache IoTDB (#11557)
  * chore(deps): bump github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs (#11653)
  * chore(deps): bump github.com/aws/aws-sdk-go-v2/feature/ec2/imds (#11652)
  * feat(outputs.amqp): Add proxy support (#11649)
  * chore(deps): bump github.com/aws/aws-sdk-go-v2/service/ec2 (#11651)
  * chore: Markdown fixes for inputs/[a-m]* (#11606)
  * chore(deps): bump github.com/antchfx/xmlquery from 1.3.9 to 1.3.12 (#11644)
  * fix: Bump github.com/lxc/lxd to latest git to fix https://github.com/lxc/lxd/issues/10738. (#11647)
  * chore(deps): bump google.golang.org/api from 0.85.0 to 0.91.0 (#11643)
  * chore(deps): Bump github.com/prometheus/client_golang from 1.12.2 to 1.13.0 (#11640)
  * feat(common.tls): Implement minimum TLS version for clients (#11493)
  * chore(deps): bump github.com/hashicorp/consul/api from 1.12.0 to 1.13.1 (#11641)
  * chore(deps): Bump github.com/emicklei/go-restful from v2.9.5+incompatible to v3.8.0 (#11636)
  * feat: Supervisord input plugin (#9015)
  * chore(parsers.json_v2): Cleanup test by reusing testutil function (#11627)
  * fix(inputs.mongodb): update version check for newer versions (#11635)
  * feat: add coralogix dialect to opentelemetry (#11622)
  * fix(inputs.x509): Multiple sources with non-overlapping DNS entries. (#11613)
  * fix(parsers): Linter issues (#11607)
  * feat (inputs/prometheus): add setting to set custom namespace label name to avoid conflicts (#11538)
  * chore: workaround for failing "go list -m all" (#11624)
  * feat(processors.starlark): Add starlark benchmark for tag-concatenation (#11306)
  * chore(deps): bump github.com/sirupsen/logrus from 1.8.1 to 1.9.0 (#11616)
  * chore: Update to go1.18.5 (#11621)
  * chore: Using Windows, add exe extension to tools (#11608)
  * docs: Add source tag best practices to the metric schema docs (#11620)
  * feat(external): Add nsdp external plugin (#11619)
  * chore: Fix support issue template (#11617)
  * fix(inputs.kubernetes): refresh token from file at each read (#11578)
  * feat(inputs.ntpq): Allow to specify `reach` output format (#11594)
  * chore(deps): Update github.com/Shopify/sarama from 1.34.1 to 1.35.0 (#11603)
  * chore(deps): update k8s.io/apimachinery from 0.24.2 to 0.24.3 (#11602)
  * chore(deps): Update cloud.google.com/go/pubsub from 1.23.0 to 1.24.0 (#11604)
  * chore(deps): Update github.com/BurntSushi/toml from 0.4.1 to 1.2.0 (#11605)
  * chore: Migrate all issue templates to yaml (#11612)
  * docs(inputs.exec): clarify parsing for ints (#11597)
  * fix(outputs): Linter issues (#11595)
  * fix(inputs.kube_inventory): send file location to enable token auto-refresh (#11577)
  * feat(inputs.ntpq): Add possibility to query remote servers (#11592)
  * feat(inputs.openstack): Add "allow_reauth" config option for openstack client (#11572)
  * feat(inputs.ntpq): Add option to specify command flags (#11593)
  * chore: update github.com/harlow/kinesis-consumer (#11599)
  * chore(deps): Bump github.com/signalfx/golib/v3 from 3.3.43 to 3.3.45 (#11598)
  * chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/dynamodb (#11584)
  * chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/kinesis (#11585)
  * chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/cloudwatch (#11586)
  * chore(deps): Bump github.com/Azure/azure-event-hubs-go/v3 (#11590)
  * test: fix openetelemtry test (#11573)
  * fix(inputs): Linter issues (#11576)
  * chore(deps): Bump github.com/pion/dtls/v2 from 2.0.13 to 2.1.5 (#11581)
  * chore(deps): Bump github.com/Azure/go-autorest/autorest/adal (#11583)
  * chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs (#11582)
  * chore(deps): Bump github.com/shirou/gopsutil/v3 from 3.22.4 to 3.22.7 (#11580)
  * fix(outputs.wavefront): update wavefront sdk and use non-deprecated APIs (#11560)
  * chore(inputs.ntpq): Cleanup existing plugin (#11575)
  * fix(inputs.cloudwatch): customizable batch size when querying (#10851)
  * chore(deps): Bump github.com/eclipse/paho.mqtt.golang from 1.3.5 to 1.4.1 (#11347)
  * chore(deps): Bump github.com/vmware/govmomi from 0.28.0 to 0.29.0 (#11568)
  * chore(deps): Bump github.com/karrick/godirwalk from 1.16.1 to 1.17.0 (#11574)
  * chore(deps): Bump github.com/go-ldap/ldap/v3 from 3.4.1 to 3.4.4 (#11569)
  * chore(deps): Update all go.opentelemetry.io dependencies (#11494)
  * chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/ec2 from 1.46.0 to 1.51.0 (#11567)
  * chore(deps): Bump github.com/apache/thrift from 0.15.0 to 0.16.0 (#11565)
  * chore(deps): Bump github.com/testcontainers/testcontainers-go from 0.12.0 to 0.13.0 (#11412)
  * feat(outputs.sql): Add settings for go sql.DB settings (#11551)
  * fix: Updating credentials file to not use endpoint_url parameter (#10841)
  * fix: Remove shell execution for license-checker. (#11563)
  * chore: More parser cleanup (#11532)
  * feat: Add license checking tool (#11398)
  * feat(parsers.xpath): Add support for returning underlying data-types (#11558)
  * fix(inputs.opcua): return an error with mismatched types (#11539)
  * feat(output.mqtt): Add support for MQTT protocol version 5 (#11284)
  * fix(inputs.stackdriver): Handle when no buckets available (#11556)
  * docs(inputs.mysql): Add link to docs on how to enable mysql's performance schema (#11555)
  * chore: add missing section to kafka_consumer's sample.conf (#11553)
  * docs: add timeout section (#11550)
  * fix(inputs.sqlserver): set lower deadlock priority (#11548)
  * feat(inputs.kafka_consumer): Option to set default fetch message bytes (#11220)
  * docs(inputs.modbus): README changes regarding request.tags (#11541)
  * feat(outputs.graphite): Retry connecting to servers with failed send attempts (#11439)
  * feat(inputs.statsd): add median timing calculation to statsd input plugin (#11518)
  * fix(inputs.snmp_trap): nil map panic when use snmp_trap with netsnmp translator (#11534)
  * feat(parsers.json): Allow JSONata based transformations in JSON serializer (#11251)
  * fix: Add version number to MacOS packages (#11512)
  * feat(inputs.syslog): log remote host as source tag (#9440)
  * feat(outputs.groundwork): Improve metric parsing to extend output (#11443)
  * feat: added metrics for member and replica-set avg health of MongoDB  (#11516)
  * feat(outputs.redistimeseries): Add integration test (#11529)
  * chore: update to go1.18.4 (#11526)
  * fix(inputs.mqtt_consumer):  topic parsing error  when topic having prefix(/) (#11527)
  * fix(inputs.sqlserver): set lower deadlock priority (#11522)
  * fix: make docs + go.mod cleanup post-redis merge (#11521)
  * feat: Add RedisTimeSeries plugin (#11054)
  * docs: run make-docs (#11514)
  * feat(inputs.cisco_telemetry_mdt): Add GRPC Keepalive/timeout config options (#11458)
  * fix: use reader over readcloser, regen cookie-jar (#11482)
  * fix: correct init volume gatherer in openstack (#11481)
  * feat: Nats Jetstream consumer add simple support for jetstream subjects (#11373)
  * Revert "fix: add version number to Mac packages (#11506)" (#11510)
  * fix: add version number to Mac packages (#11506)
  * fix(parsers.prometheus): histogram infinity bucket must be allways present (#11490) (#11486)
  * feat(inputs.modbus): Error out on requests with no fields defined. (#11469)
  * test: do not have leadership election during kafka test (#11404)
  * docs: Add example output section to HTTP plugin (#11497)
  * chore: cleanup go.mod and dependency licences (#11503)
  * feat: add Stomp (Active MQ) output plugin (#7995)
  * chore: Update CRLF line endings in agent.conf to LF (#11501)
  * feat: add proxy support for outputs/cloudwatch (#11399)
  * docs: explain proxmox user/token and node_name (#11487)
  * chore: Check for readme changes in each PR (#11495)
  * chore: Skip building artifacts on master branch (#11465)
  * docs: Update etc/telegraf.conf and etc/telegraf_windows.conf (#11496)
  * fix: Backport sync sample.conf and README.md files (#11489)
  * feat(inputs.smart): Collect SSD endurance information where available in smartctl (#11391)
  * chore(deps): Bump github.com/antchfx/jsonquery from 1.1.5 to 1.2.0 (#11461)
  * feat(inputs.logstash): Record number of failures (#9185)
  * docs: Update etc/telegraf.conf and etc/telegraf_windows.conf (#11483)
  * fix: allow 201 for cookies, update header docs (#11472)
  * fix(inputs.snmp): snmp UseUnconnectedUDPSocket when using udp (#10331)
  * docs: Update etc/telegraf.conf and etc/telegraf_windows.conf (#11480)
  * fix(inputs.upsd): Move to new sample.conf style (#11471)
  * feat(rabbitmq): add support for head_message_timestamp metric (#11475)
  * fix: Update prometheusremotewrite parser to be a new style parser plugin (#11456)
  * chore(gnmi): Add Metrics heading to README.md (#11476)
  * fix(gnmi): refactor tag-only subs for complex keys (#11011)
  * chore: sign nightly artifacts to detect issues before release (#11464)
  * feat(inputs.nginx_plus_api): Gather limit_reqs metrics (#10874)
  * test: ignore return code on check-update (#11445)
  * fix: use bigint for backupsize in sqlserver (#11448)
  * feat: Migrate influx and influx_upstream parsers to new style (#11432)
  * docs: Update etc/telegraf.conf and etc/telegraf_windows.conf (#11463)
  * chore(inputs.socket_listener): Remove parser from init (#11462)
  * feat(input): add upsd implementation (#9890)
  * fix: Deprecation warnings for non-deprecated packages (#11460)
  * chore(deps): Bump github.com/docker/docker (#11438)
  * fix: Update prometheus parser to be a new style parser plugin (#11440)
  * docs(inputs.mqtt_consumer): add pivot example to readme (#11195)
  * test: Update wait statement for postgresql_extensible (#11447)
  * docs: add firehose to EXTERNAL_PLUGINS.md (#11450)
  * chore(deps): Bump github.com/prometheus/client_golang (#11437)
  * chore(deps): Bump k8s.io/api from 0.24.1 to 0.24.2 (#11434)
  * feat: Migrate nagios parser to new style (#11402)
  * fix: add reset-mode flag for CSV parser (#11288)
  * docs: Update etc/telegraf.conf and etc/telegraf_windows.conf (#11431)
  * feat: adding aws metric streams input plugin (#11233)
  * test: run check-update on dnf/yum (#11430)
  * chore(deps): Bump github.com/influxdata/influxdb-observability/otel2influx from 0.2.21 to 0.2.22 (#11416)
  * feat: migrate grok to new parser style (#11408)
  * feat: Migrate dropwizard parser to new style (#11371)
  * chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs from 1.15.4 to 1.15.8 (#11415)
  * test: exchange confused parameters (expected vs actual) (#11422)
  * feat: Migrate logfmt parser to new style (#11366)
  * fix: Bring back old xpath section names (#11335)
  * feat: Migrate graphite parser to new style (#11405)
  * feat: migrate value parser to new style (#11407)
  * docs: Update etc/telegraf.conf and etc/telegraf_windows.conf (#11419)
  * feat(outputs/wavefront): make maximum http batch size configurable (#11201)
  * feat: migrate form_urlencoded parser to new style (#11381)
  * chore: move printing of sample config file out of config.go (#11409)
  * chore(deps): Bump github.com/vmware/govmomi from 0.27.3 to 0.28.0 (#11396)
  * chore(deps): Bump github.com/golang-jwt/jwt/v4 from 4.4.1 to 4.4.2 (#11395)
  * docs: Update etc/telegraf.conf and etc/telegraf_windows.conf (#11414)
  * fix: Sync back sample.confs for inputs.couchbase and outputs.groundwork. (#11413)
  * fix: resolve jolokia2 panic on null response (#11397)
  * test: add nightly package testing to amd64/linux (#11377)
  * chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/ec2 from 1.1.0 to 1.46.0 (#11382)
  * chore: Remove 'github.com/cisco-ie/nx-telemetry-proto' replacement (#11401)
  * chore: Remove 'github.com/satori/go.uuid' replacement (#11240)
  * chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/kinesis (#11380)
  * chore(deps): Bump cloud.google.com/go/pubsub from 1.22.2 to 1.23.0 (#11394)
  * feat: Migrate collectd parser to new style (#11367)
  * feat: allow collecting node-level metrics for Couchbase buckets (#9717)
  * feat: migrate wavefront parser to new style (#11374)
  * chore(deps): Bump github.com/Azure/azure-kusto-go from 0.6.0 to 0.7.0 (#11378)
  * chore(deps): Bump cloud.google.com/go/bigquery from 1.8.0 to 1.33.0 (#11379)
  * chore(deps): Bump github.com/jackc/pgx/v4 from 4.15.0 to 4.16.1 (#11346)
  * chore(deps): Bump go.opentelemetry.io/collector/pdata from 0.52.0 to 0.54.0 (#11369)
  * docs: swap bytes sent/recv descriptions in nfsclient (#11376)
  * chore(deps): Bump cloud.google.com/go/pubsub from 1.18.0 to 1.22.2 (#11349)
  * chore(deps): Bump github.com/nats-io/nats.go from 1.15.0 to 1.16.0 (#11339)
  * chore(deps): Bump github.com/dynatrace-oss/dynatrace-metric-utils-go from 0.3.0 to 0.5.0 (#11342)
  * docs: Update etc/telegraf.conf and etc/telegraf_windows.conf (#11365)
  * feat: Migrate json_v2 parser to new style (#11343)
  * fix: Restore sample configurations broken during initial migration (#11276)
  * feat: Add CSV serializer (#11307)
  * fix: don't require listeners to be present in overview (#9315)
  * docs: Update etc/telegraf.conf and etc/telegraf_windows.conf (#11351)
  * feat: Migrate json parser to new style (#11226)
  * chore: move agent config into seperate file (#11337)
  * docs: Sync sample.conf for recent features (#11348)
  * chore(deps): Bump github.com/Shopify/sarama from 1.32.0 to 1.34.1 (#11319)
  * feat(x509_cert): add proxy support (#9319)
  * feat(redis): add Redis 6 ACL auth support (#9333)
  * docs: Update etc/telegraf.conf and etc/telegraf_windows.conf (#11344)
  * chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/timestreamwrite from 1.3.2 to 1.13.6 (#11322)
  * fix: filter out views in mongodb lookup (#11280)
  * chore(deps): Bump github.com/fatih/color from 1.10.0 to 1.13.0 (#11340)
  * chore: fix typo (recieve -&gt; receive) (#11341)
  * chore(deps): Bump google.golang.org/api from 0.74.0 to 0.84.0 (#11338)
  * chore(deps): Bump github.com/gophercloud/gophercloud from 0.24.0 to 0.25.0 (#11321)
  * chore(deps): Bump go.mongodb.org/mongo-driver from 1.9.0 to 1.9.1 (#11320)
  * chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/dynamodb (#11328)
  * test: add coveralls coverage to master (#11256)
  * chore: make apt-get instructions consistent and add GPG fingerprint (#11326)
  * chore(deps): Bump github.com/go-logfmt/logfmt from 0.5.0 to 0.5.1 (#11299)
  * chore(deps): Bump k8s.io/client-go from 0.23.3 to 0.24.1 (#11223)
  * chore(deps): Bump google.golang.org/grpc from 1.46.2 to 1.47.0 (#11318)
  * chore(deps): Bump github.com/aws/aws-sdk-go-v2/credentials from 1.12.2 to 1.12.5 (#11297)
  * test: mark integration tests correctly (#11317)
  * test: update wait for statement for postgres (#11309)
  * chore: Remove prefix to use the default `chore(deps)` (#11315)
  * docs: explain directly connecting to mongo node (#11314)
  * fix: Prevent concurrent map writes to c.UnusedFields (#11311)
  * feat: Make the command "config" a subcommand (#11282)
  * feat: add default appType as config option to groundwork output (#11300)
  * fix(parsers/xpath): Reduce debug messages when empty selection is allowed (#11302)
  * feat(inputs.x509_cert): add smtp protocol (#11271)
  * fix: bump cloud.google.com/go/monitoring from 1.2.0 to 1.5.0 (#11295)
  * fix: Remove all rebase logic from CI (#11293)
  * fix: Don't rebase on master when building packages (#11291)</changelog>
  <changelog author="jkowalczyk@suse.com" date="1664884801">- Update to version 1.24.1:
  * fix(parsers.csv): Remove direct checks for the parser type (#11825)
  * fix(inputs.ntpq): Handle pools with "-" when (#11827)
  * docs: update customization docs (#11822)
  * fix(parsers): Unwrap parser and remove some special handling (#11826)
  * fix: Enable global confirmation for installing mingw (#11835)
  * fix(parsers): Memory leak for plugins using ParserFunc. (#11815)
  * fix(inputs.modbus): Do not fail if a single slave reports errors (#11785)
  * fix(parsers.xpath): Add array index when expanding names. (#11781)
  * fix(inputs.ceph): Modernize Ceph input plugin metrics (#10797)
  * docs: Update etc/telegraf.conf and etc/telegraf_windows.conf (#11800)
  * chore(deps): Bump cloud.google.com/go/bigquery from 1.33.0 to 1.40.0 (#11796)
  * chore(deps): Bump github.com/wavefronthq/wavefront-sdk-go (#11799)
  * docs: Update etc/telegraf.conf and etc/telegraf_windows.conf (#11798)
  * chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/ec2 (#11789)
  * docs: Remove warning not to remove go:embed (#11797)
  * fix: Clear error message when provided config is not a text file (#11787)
  * chore(deps): Bump github.com/urfave/cli/v2 from 2.14.1 to 2.16.3 (#11794)
  * chore(deps): Bump cloud.google.com/go/pubsub from 1.24.0 to 1.25.1 (#11788)
  * docs: Update etc/telegraf.conf and etc/telegraf_windows.conf (#11792)
  * chore: Run amd64 package on master so config is generated (#11790)
  * feat(processors.parser): Add option to parse tags (#11228)</changelog>
  <changelog author="jkowalczyk@suse.com" date="1664884802">- Update to version 1.24.2:
  * fix(parser.xpath): Handle floating-point times correctly (#11875)
  * fix(cli): Support old style of filtering sample configs (#11896)
  * chore: update github.com/shirou/gopsutil from v3.22.8 to v3.22.9 (#11923)
  * fix(inputs.influxdb_listener): error on invalid precision (#11866)
  * docs: Ran `make docs` (#11914)
  * docs(inputs.opcua): fix typo (#11897)
  * chore(lint): Removed deprecated varcheck linter (#11910)
  * docs: Update etc/telegraf.conf and etc/telegraf_windows.conf (#11885)
  * chore(deps): github.com/docker/distribution from v2.7.1 ti v2.8.1 (#11893)
  * chore(deps): Bump github.com/rabbitmq/amqp091-go from 1.4.0 to 1.5.0 (#11891)
  * chore(deps): Bump github.com/aws/smithy-go from 1.13.2 to 1.13.3 (#11890)
  * chore(deps): Bump go.mongodb.org/mongo-driver from 1.10.1 to 1.10.2 (#11887)
  * chore(processors): Convert processors to `ParserPlugin`s (#11600)
  * chore(deps): Replace go-ping by pro-bing (#11836)
  * chore(deps): Bump github.com/nats-io/nats.go from 1.16.0 to 1.17.0 (#11839)
  * fix(common.kafka): Enable TLS in Kafka plugins without custom config (#11519)
  * docs(inputs.cpu): explain macos cpu support requires cgo (#11883)
  * fix(inputs.mqtt_consumer): rework connection and message tracking (#10696)
  * docs: Update etc/telegraf.conf and etc/telegraf_windows.conf (#11881)
  * fix(inputs.internet_speed): rename enable_file_download to match upstream intent (#11877)
  * build: github Workflows security hardening (#11843)
  * docs: Update etc/telegraf.conf and etc/telegraf_windows.conf (#11859)
  * fix: Update dependencies for OpenBSD support (#11861)
  * chore: Remove deprecated build tags (#11867)
  * fix(inputs.mongodb): actually start plugin correctly (#11849)
  * fix: re-allow specifying the influx parser type (#11806)
  * chore: update github.com/jackc/pgx/v4 from v4.17.0 to v4.17.1 (#11858)
  * chore: update github.com/lxc/lxd to latest (#11848)
  * chore(deps): Bump github.com/aerospike/aerospike-client-go/v5 from 5.9.0 to 5.10.0 (#11844)
  * chore: remove deprecated io/ioutils (#11678)
  * fix(internal.ethtool): avoid internal name conflict with aws (#11696)
  * docs(inputs.nvidia_smi): Example of how to enable nvidia-smi via docker compose (#11833)
  * chore(deps): Bump k8s.io/apimachinery from 0.25.0 to 0.25.1 (#11840)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1664884803">- Add _constraints minimum disk 4G to avoid build failures</changelog>
  <changelog author="jkowalczyk@suse.com" date="1667476800">- Update to version 1.24.3:
  * Revert "feat: run govulncheck nightly on master branch (#11977)" (#12054)
  * Update build_version.txt for v1.24.3
  * Resolve conflict caused by earlier cherry pick error
  * chore: update to go v1.19.3 (#12142)
  * fix(inputs.directory_monitor): allow cross filesystem directories (#12124)
  * fix(serializers.splunkmetric): provide option to remove event metric tag (#12024)
  * chore(inputs.socket_listener): Reorganize plugin code (#12031)
  * chore: Fix linter findings introduced in last PRs (#12131)
  * chore(deps): bump github.com/nats-io/nats-server/v2 from 2.8.4 to 2.9.4 (#12134)
  * chore(deps): bump cloud.google.com/go/monitoring from 1.5.0 to 1.7.0 (#12135)
  * chore(parsers.xpath): Add correct deprecation tags (#11986)
  * chore: update OpenTelemetry v0.2.30 / v0.63.0 (#12119)
  * docs: ran make docs (#12120)
  * docs(aggregators.derivative): Remove incorrect comment (#12026)
  * docs(serializers.json): specify version of jsonata used (#12117)
  * fix(processors.parser): Keep name of original metric if parser doesn't return one (#12116)
  * docs: add global configuration header (#12107)
  * fix(inputs.modbus): Handle field-measurement definitions correctly on duplicate field check (#12109)
  * test(outputs.graylog): skip tcp/udp tests on windows &amp; darwin (#12110)
  * chore(common.shim): check err of s.writeProcessedMetrics for the linter (#12103)
  * chore: Increase golangci-lint timeout (#12106)
  * chore: shut down plugins gracefully to prevent race (#12102)
  * chore: skip integration test with race (#12100)
  * chore: add kafka round trip integration test using inputs.kafka_consumer and outputs.kafka (#12058)
  * chore(deps): bump github.com/prometheus/client_model from 0.2.0 to 0.3.0 (#12097)
  * chore(deps): bump github.com/gopcua/opcua from 0.3.3 to 0.3.7 (#12095)
  * chore(deps): bump google.golang.org/api from 0.95.0 to 0.100.0 (#12096)
  * chore(deps): bump github.com/aws/aws-sdk-go-v2/service/dynamodb (#12098)
  * feat(tools): Allow to markdown includes for sections (#12075)
  * fix(config): set default parser (#12076)
  * fix(processors): Correctly setup processors (#12081)
  * fix: update systemd unit description (#12093)
  * chore(deps): update modernc.org/libc from v1.20.3 to v1.21.2 (#12090)
  * test(outputs.sql): further wait for clickhouse writes (#12086)
  * test: update integration test occurrences (#12085)
  * fix(agent): panic as tickers slice was off-by-one in size (#12077)
  * test(inputs.mcrouter): add eventually to pause for metrics (#12074)
  * fix: Restore warning on unused config option(s) (#12063)
  * fix(inputs.kafka): switch to sarama's new consumer group rebalance strategy setting (#12064)
  * docs(inputs.http): add use system proxy config option (#12069)
  * fix(inputs.modbus): add slave id to failing connection (#12038)
  * docs(aggregators.starlark): corrected typo mentioning wrong func name (#12066)
  * chore: Resolve deprecated linter issues (#12051)
  * fix(inputs.zookeeper): add the ability to parse floats as floats (#12023)
  * test: add additional checks, waits in integration tests (#12056)
  * chore: Update golangci-lint Go version (#12055)
  * docs(inputs.mongodb): update supported versions (#12048)
  * chore(deps): bump testcontainers-go from 0.13.0 to 0.14.0 and address breaking change (#12039)
  * chore(deps): bump github.com/Shopify/sarama from 1.36.0 to 1.37.2 (#11980)
  * chore(deps): bump github.com/aliyun/alibaba-cloud-sdk-go (#12036)
  * chore(deps): bump github.com/aws/aws-sdk-go-v2/service/kinesis (#12037)
  * chore(deps): Bump cloud.google.com/go/bigquery from 1.40.0 to 1.42.0 (#11937)
  * chore(deps): bump github.com/yuin/goldmark from 1.4.13 to 1.5.2 (#12035)
  * chore(deps): bump github.com/signalfx/golib/v3 from 3.3.45 to 3.3.46 (#12034)
  * feat: run govulncheck nightly on master branch (#11977)
  * chore(deps): bump modernc.org/sqlite from 1.17.3 to 1.19.2 (#12030)
  * chore(deps): bump k8s.io/api from 0.25.2 to 0.25.3 (#12029)
  * chore(deps): bump k8s.io/api from 0.25.0 to 0.25.2 (#12001)
  * docs(inputs.tomcat): clean up fields (#12018)
  * fix(regression): Fixes problem with metrics not exposed by plugins. (#12016)
  * refactor: Prevent import from going the wrong way (#12004)
  * test: add dovecot integration test (#11996)
  * chore: Fix installgo_mac.sh using correct hash (#12002)
  * chore(deps): bump k8s.io/apimachinery from 0.25.1 to 0.25.2 (#11938)
  * chore: resolve linter issues for unhandled-error (#11969)
  * chore: Tool to update Telegraf to use new Go version (#11968)
  * test: add integration test for recovering after invalid data (#11994)
  * fix(inputs.syslog): print error when no error or message given (#11997)
  * chore: resolve linter issues for confusing-naming and confusing-results (#11956)
  * fix(parsers.json_v2): Remove BOM before parsing (#11926)
  * chore: Resolve linter issues for ineffassign, nilerr, gosimple... (#11966)
  * fix(inputs.opcua): Add metric tags to node (#11993)
  * chore(inputs.powerdns): Don't run  flaky test on Windows (#11982)
  * chore(inputs.cloud_pubsub_push): Don't run flaky test on Windows (#11984)
  * chore(ci): Migrate to scheduled pipeline (#11981)
  * chore: Resolve linter issues for plugins/common package (#11964)
  * chore(deps): bump github.com/aws/aws-sdk-go-v2/config (#11979)
  * chore(inputs.socket_listener): Reorganize test to be table-based. (#11970)
  * chore(deps): bump github.com/aws/aws-sdk-go-v2/service/cloudwatch (#11972)
  * docs: Update etc/telegraf.conf and etc/telegraf_windows.conf (#11965)
  * chore: Bump golangci-lint to 1.50.0 (#11957)
  * chore: update OpenTelemetry plugins to latest release (#11943)
  * fix: Setting `enable_tls` has incorrect default value (#11941)
  * chore: update to go1.19.2 (#11940)
  * chore(deps): bump github.com/aws/aws-sdk-go-v2/credentials from 1.12.5 to 1.12.21 (#11936)
  * chore(deps): Update github.com/hashicorp/consul/api from 1.14.0 to 1.15.2 (#11894)
  * chore(deps): update github.com/gofrs/uuid from 4.2.0+incompatible to 4.3.0+incompatible (#11935)
  * fix(inputs.modbus): Improve duplicate field checks (#11912)
  * chore(deps): update github.com/sensu/sensu-go/api/core/v2 from 2.14.0 to 2.15.0 (#11928)
  * chore: Resolve linter issues in config.go and config_test.go (#11929)
  * docs: add libvirt plugin to external input plugins list (#11828)
  * build(rpm): Allow building RPMs cross-OS (#11904)
  * chore(deps): Bump github.com/snowflakedb/gosnowflake from 1.6.2 to 1.6.13 (#11886)</changelog>
</package>
<package pkgid="ee14b2fde99a83ccba7125b0cca0c4667233877d1f0514c44ba98aafee0f3588" name="telegraf" arch="s390x">
  <version epoch="0" ver="1.24.3" rel="bp154.2.3.1"/>
  <changelog author="Felix Niederwanger &lt;felix.niederwanger@suse.com&gt;" date="1642766400">- Build-requirement increased to go &gt; 1.17</changelog>
  <changelog author="jkowalczyk@suse.com" date="1650888000">- Update to version 1.21.3:
  * Update license of dependencies file
  * fix: collapsed fields by calling more indepth function (#10430)
  * docs: Update deprecation readme (#10529)
  * chore: update grpc to v1.44.0 (#10525)
  * fix: bump google.golang.org/api from 0.54.0 to 0.65.0 (#10434)
  * fix: typo in docs (#10441)
  * fix: bump github.com/antchfx/xmlquery from 1.3.6 to 1.3.9 (#10507)
  * fix: bump github.com/nsqio/go-nsq from 1.0.8 to 1.1.0 (#10521)
  * fix: bump github.com/prometheus/common from 0.31.1 to 0.32.1 (#10506)
  * fix: ipset crash when command not found (#10474)
  * fix: bump cloud.google.com/go/pubsub from 1.17.0 to 1.17.1 (#10504)
  * fix: bump github.com/influxdata/influxdb-observability/influx2otel from 0.2.8 to 0.2.10 (#10432)
  * fix: Update modbus readme (#10501)
  * Fix: Update README.md (#10500)
  * docs: Fixes for input/sql readme (#10498)
  * fix: graylog readme to use graylog 3 URLs (#10481)
  * fix: add RFC3164 to RFC5424 translation to docs (#10480)
  * fix: add comment to logparser (#10479)
  * chore: Add `openConnections` to enterprise cluster metrics Readme (#10483)
  * fix: remove duplicate addition of fields (#10478)
  * fix(parsers.nagios): nagios parser now uses real error for logging #10472 (#10473)
  * fix: add newline in execd for prometheus parsing (#10463)
  * fix: bump github.com/shirou/gopsutil/v3 from 3.21.10 to 3.21.12 (#10451)
  * fix: do not save cache on i386 builds (#10464)
  * chore: readme escape rpm variables
  * fix: address flaky tests in cookie_test.go and graylog_test.go (#10326)
  * fix: ensure CI tests runs against i386 (#10457)
  * fix: bump github.com/jackc/pgx/v4 from 4.6.0 to 4.14.1 (#10453)
  * fix: bump github.com/Azure/azure-event-hubs-go/v3 from 3.3.13 to 3.3.17 (#10449)
  * fix: bump github.com/gosnmp/gosnmp from 1.33.0 to 1.34.0 (#10450)
  * fix: wavefront_disable_prefix_conversion case missing from missingTomlField func (#10442)
  * fix: bump github.com/hashicorp/consul/api from 1.9.1 to 1.12.0 (#10435)
  * fix: bump github.com/antchfx/jsonquery from 1.1.4 to 1.1.5 (#10433)
  * fix: bump github.com/prometheus/procfs from 0.6.0 to 0.7.3 (#10414)
  * fix: snmp input plugin errors if mibs folder doesn't exist (#10346) (#10354)
  * fix: correctly set ASCII trailer for syslog output (#10393)
  * chore: go mod tidy (#10423)
  * fix: bump github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs from 1.5.2 to 1.12.0 (#10415)
  * fix: bump github.com/kardianos/service from 1.0.0 to 1.2.1 (#10416)
  * fix: ensure http body is empty (#10396)
  * fix: bump github.com/couchbase/go-couchbase from 0.1.0 to 0.1.1 (#10417)
  * fix(json_v2): use raw values for timestamps (#10413)
  * fix: bump github.com/pion/dtls/v2 from 2.0.9 to 2.0.13 (#10418)
  * chore: update mqtt documentation (#10394)
  * fix: update containerd to 1.5.9 (#10402)
  * fix: Fix batching logic with write records, introduce concurrent requests (#8947)
  * fix(outputs/amqp): Close the last connection when writing error to avoid connection leaks (#10360)
  * fix: cumulative interval start times for stackdriver output (#10097)
  * fix: Make telegraf compile on Windows with golang 1.16.2 (#10246)</changelog>
  <changelog author="jkowalczyk@suse.com" date="1650888001">- Update to version 1.21.4:
  * fix: ensure folders do not get loaded more than once (#10551)
  * docs: update VMWare doc links (#10663)
  * fix: prometheusremotewrite wrong timestamp unit (#10547)
  * docs: override reported OpenSearch version (#10586)
  * fix: bump all go.opentelemetry.io dependencies (#10647)
  * chore: update go to 1.17.7 (#10658)
  * fix: check for nil client before closing in amqp (#10635)
  * fix: timestamp change during execution of json_v2 parser. (#10657)
  * fix: bump github.com/signalfx/golib/v3 from 3.3.38 to 3.3.43 (#10652)
  * fix: bump github.com/aliyun/alibaba-cloud-sdk-go (#10653)
  * fix: incorrect handling of json_v2 timestamp_path (#10618)
  * fix: Revert deprecation of http_listener_v2 (#10648)
  * fix: bump github.com/denisenkom/go-mssqldb from 0.10.0 to 0.12.0 (#10503)
  * fix: bump github.com/gopcua/opcua from 0.2.3 to 0.3.1 (#10626)
  * fix: update go.mod
  * fix: use current time as ecs timestamp (#10636)
  * fix(outputs/azure_data_explorer): Added azureBlob controls to lower RAM usage (#10179)
  * fix: bump github.com/nats-io/nats-server/v2 from 2.6.5 to 2.7.2 (#10638)
  * chore: add -race flag to go tests (#10629)
  * fix: license doc outdated causing CI failure (#10630)
  * fix: bump k8s.io/client-go from 0.22.2 to 0.23.3 (#10589)
  * docs: update quay docs for auth (#10612)
  * chore: allow downgrade of go version in windows script (#10614)
  * chore: update CI go to 1.17.6 (#10611)
  * fix: bump github.com/aws/aws-sdk-go-v2/service/kinesis from 1.6.0 to 1.13.0 (#10601)
  * refactor: use early return pattern (#10591)
  * fix: bump github.com/benbjohnson/clock from 1.1.0 to 1.3.0 (#10588)
  * fix: bump github.com/Azure/azure-kusto-go from 0.5.0 to 0.5.2 (#10598)
  * fix(parsers.json_v2): allow optional paths and handle wrong paths correctly (#10468)
  * fix[elasticsearch output]: add scheme to fix error in sniffing option (#10513)
  * chore: fix typo in bug report template (#10582)
  * style: Add deprecated warning and version to win_perf_counters option (#10579)
  * fix: bump github.com/vmware/govmomi from 0.27.2 to 0.27.3 (#10571)
  * fix: bump github.com/prometheus/client_golang from 1.11.0 to 1.12.1 (#10572)
  * fix: remove signed macOS dotfile artifacts (#10560)
  * fix: bump go.mongodb.org/mongo-driver from 1.7.3 to 1.8.3 (#10564)
  * fix: bump github.com/google/go-cmp from 0.5.6 to 0.5.7 (#10563)
  * fix: bump go.opentelemetry.io/collector/model from 0.39.0 to 0.43.2 (#10562)
  * fix: bump github.com/multiplay/go-ts3 from 1.0.0 to 1.0.1 (#10538)
  * fix: bump cloud.google.com/go/monitoring from 0.2.0 to 1.2.0 (#10454)
  * fix: bump github.com/vmware/govmomi from 0.26.0 to 0.27.2 (#10536)
  * docs: add apt and knot to EXTERNAL_PLUGINS.md (#10552)
  * fix: update docker memory usage calculation (#10491)</changelog>
  <changelog author="jkowalczyk@suse.com" date="1650888002">- Update to version 1.22.0:
  * feat: update etc/telegraf.conf and etc/telegraf_windows.conf (#10843)
  * fix: fix handling of imports in protocol-buffer definitions (#10798)
  * fix: change name of snmp translator setting (#10872)
  * fix: rename consul_metrics -&gt; consul_agent (#10876)
  * fix: consul_metrics input plugin docs (#10873)
  * tests: remove redundant newlines that go 1.18 treats as errors (#10847)
  * fix: Add option to select translator (#10802)
  * feat: new input Hugepages plugin (#10763)
  * fix: update the precision parameter default value (#10814)
  * fix: bump github.com/nats-io/nats-server/v2 from 2.7.3 to 2.7.4 (#10807)
  * feat: add new rtt per op field to nfsclient (#10787)
  * fix(parsers.json_v2): Check if gpath exists and support optional in fields/tags (#10799)
  * fix(inputs.snmp):  use the correct path when evaluating symlink (#10748)
  * fix: bump github.com/Shopify/sarama from 1.29.1 to 1.32.0 (#10772)
  * fix: update parsing logic of config.Duration (#10803)
  * feat: update etc/telegraf.conf and etc/telegraf_windows.conf (#10805)
  * feat(parsers.influx): New influx line protocol via feature flag (#10749)
  * feat: update etc/telegraf.conf and etc/telegraf_windows.conf (#10804)
  * docs: Improve language related to the New Relic license key. (#10796)
  * fix: correctly read ntpq long poll output (#10790)
  * fix(inputs.docker): keep field type of tasks_desired the same (#10711)
  * fix(json_v2): allow multiple optional objects (#10777)
  * feat: update etc/telegraf.conf and etc/telegraf_windows.conf (#10789)
  * docs: update wavefront docs for clearer proxy server use (#10774)
  * feat: update etc/telegraf.conf and etc/telegraf_windows.conf (#10779)
  * feat: HTTP basic auth for webhooks (#9332)
  * docs: update uri scheme for default RavenDB configuration (#10764)
  * feat: update etc/telegraf.conf and etc/telegraf_windows.conf (#10769)
  * fix: sql unsigned settings (#10673)
  * docs: better specify agent precision is integer + unit (#10746)
  * fix: bump github.com/shirou/gopsutil/v3 from 3.21.12 to 3.22.2 (#10758)
  * feat: update etc/telegraf.conf and etc/telegraf_windows.conf (#10760)
  * style: Add deprecation notices to plugin options (#10616)
  * fix: sanitize stasd names (#10466)
  * fix: bump github.com/aws/aws-sdk-go-v2/feature/ec2/imds (#10759)
  * fix: bump github.com/miekg/dns from 1.1.43 to 1.1.46 (#10757)
  * fix: bump github.com/aws/aws-sdk-go-v2/service/dynamodb (#10751)
  * fix: bump github.com/nats-io/nats-server/v2 from 2.7.2 to 2.7.3 (#10752)
  * docs: add value_field_name to value processor (#10740)
  * fix: log err when loading mibs (#10735)
  * docs: add info on Graylog GELF spec (#10745)
  * fix: typo metadata support in csv parser (#10742)
  * feat: update etc/telegraf.conf and etc/telegraf_windows.conf (#10737)
  * feat: Add tag batch-processing to XPath parser (#10585)
  * fix: add push only updated values flag to histogram aggregator (#10515)
  * feat(parsers/csv): Add metadata support to CSV parser plugin (#10083)
  * fix: Revert "fix: error msg for missing env variables in config (#10681)" (#10727)
  * fix: bump github.com/aws/aws-sdk-go-v2/config from 1.8.3 to 1.13.1 (#10720)
  * fix: bump github.com/testcontainers/testcontainers-go (#10728)
  * fix: bump github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs (#10719)
  * fix: bump github.com/aws/aws-sdk-go-v2/feature/ec2/imds (#10721)
  * fix: bump github.com/wavefronthq/wavefront-sdk-go from 0.9.9 to 0.9.10 (#10718)
  * fix: bump github.com/ClickHouse/clickhouse-go from 1.5.1 to 1.5.4 (#10717)
  * fix: Linter fixes for config/config.go (#10710)
  * fix: bump k8s.io/api from 0.23.3 to 0.23.4 (#10713)
  * fix: bump cloud.google.com/go/pubsub from 1.17.1 to 1.18.0 (#10714)
  * fix: bump github.com/newrelic/newrelic-telemetry-sdk-go (#10715)
  * fix: mdstat when sync is less than 10% (#10701)
  * feat: update etc/telegraf.conf and etc/telegraf_windows.conf (#10708)
  * fix: Remove verbose logging from disk input plugin (#10527)
  * feat: Bump github.com/aerospike/aerospike-client-go from 1.27.0 to 5.7.0 (#10604)
  * feat(inputs/memcached): Support client TLS origination to memcached (#10642)
  * feat: socks5 proxy support for websocket (#10672)
  * fix: error msg for missing env variables in config (#10681)
  * fix: include influxdb bucket name in error messages (#10706)
  * fix: openweathermap add feels_like field (#10705)
  * fix: Set NextCheckTime to LastCheckTime to avoid GroundWork to invent a value (#10623)
  * fix: bump github.com/aws/aws-sdk-go-v2/service/dynamodb from 1.5.0 to 1.13.0 (#10692)
  * fix: bump github.com/sensu/sensu-go/api/core/v2 from 2.12.0 to 2.13.0 (#10704)
  * fix: bump github.com/gophercloud/gophercloud from 0.16.0 to 0.24.0 (#10693)
  * fix: bump github.com/jackc/pgx/v4 from 4.14.1 to 4.15.0 (#10702)
  * fix(dedup): Modifying slice while iterating is dangerous (#10684)
  * fix: linter fixes for "import-shadowing: The name '...' shadows an import name" (#10689)
  * fix: bump github.com/aws/aws-sdk-go-v2/service/sts from 1.7.2 to 1.14.0 (#10602)
  * fix: update gosmi from v0.4.3 to v0.4.4 (#10686)
  * feat: update configs (#10676)
  * feat[elastic output]: add elastic pipeline flags (#10505)
  * fix: ensure folders do not get loaded more than once (#10551)
  * docs: update VMWare doc links (#10663)
  * fix: prometheusremotewrite wrong timestamp unit (#10547)
  * feat: update configs (#10662)
  * fix: add graylog toml tags (#10660)
  * feat: add socks5 proxy support for kafka output plugin (#8192)
  * docs: override reported OpenSearch version (#10586)
  * feat: update etc/telegraf.conf and etc/telegraf_windows.conf (#10659)
  * fix: bump all go.opentelemetry.io dependencies (#10647)
  * feat: collection offset implementation (#10545)
  * chore: update go to 1.17.7 (#10658)
  * fix: check for nil client before closing in amqp (#10635)
  * fix: timestamp change during execution of json_v2 parser. (#10657)
  * fix: bump github.com/signalfx/golib/v3 from 3.3.38 to 3.3.43 (#10652)
  * fix: bump github.com/aliyun/alibaba-cloud-sdk-go (#10653)
  * fix: incorrect handling of json_v2 timestamp_path (#10618)
  * feat: gather additional stats from memcached (#10641)
  * feat: update etc/telegraf.conf and etc/telegraf_windows.conf (#10649)
  * fix: Revert deprecation of http_listener_v2 (#10648)
  * fix: bump github.com/denisenkom/go-mssqldb from 0.10.0 to 0.12.0 (#10503)
  * fix: bump github.com/gopcua/opcua from 0.2.3 to 0.3.1 (#10626)
  * fix: use current time as ecs timestamp (#10636)
  * fix: bump github.com/nats-io/nats-server/v2 from 2.6.5 to 2.7.2 (#10638)
  * chore: add -race flag to go tests (#10629)
  * feat: update etc/telegraf.conf and etc/telegraf_windows.conf (#10631)
  * fix: license doc outdated causing CI failure (#10630)
  * fix: bump k8s.io/client-go from 0.22.2 to 0.23.3 (#10589)
  * feat: Implemented support for reading raw values, added tests and doc (#6501)
  * fix: Improve parser tests by using go-cmp/cmp (#10497)
  * feat(mongodb): add FsTotalSize and FsUsedSize informations (#10625)
  * docs: update quay docs for auth (#10612)
  * chore: allow downgrade of go version in windows script (#10614)
  * chore: update CI go to 1.17.6 (#10611)
  * feat: update etc/telegraf.conf and etc/telegraf_windows.conf (#10600)
  * fix(inputs.opcua): add more data to error log (#10465)
  * fix: bump github.com/aws/aws-sdk-go-v2/service/kinesis from 1.6.0 to 1.13.0 (#10601)
  * refactor: use early return pattern (#10591)
  * fix: bump github.com/benbjohnson/clock from 1.1.0 to 1.3.0 (#10588)
  * feat: add dynamic tagging to gnmi plugin (#7484)
  * fix: bump github.com/Azure/azure-kusto-go from 0.5.0 to 0.5.2 (#10598)
  * feat: update etc/telegraf.conf and etc/telegraf_windows.conf (#10584)
  * fix(parsers.json_v2): allow optional paths and handle wrong paths correctly (#10468)
  * docs: add expriation_interval to readme (#10583)
  * feat: aggregator histogram add expiration (#10520)
  * fix[elasticsearch output]: add scheme to fix error in sniffing option (#10513)
  * chore: fix typo in bug report template (#10582)
  * style: Add deprecated warning and version to win_perf_counters option (#10579)
  * feat: Add autorestart and restartdelay flags to Windows service (#10559)
  * fix: Statefull parser handling (#10575)
  * fix: bump github.com/vmware/govmomi from 0.27.2 to 0.27.3 (#10571)
  * fix: bump github.com/prometheus/client_golang from 1.11.0 to 1.12.1 (#10572)
  * fix: remove signed macOS dotfile artifacts (#10560)
  * fix: bump go.mongodb.org/mongo-driver from 1.7.3 to 1.8.3 (#10564)
  * fix: bump github.com/google/go-cmp from 0.5.6 to 0.5.7 (#10563)
  * fix: bump go.opentelemetry.io/collector/model from 0.39.0 to 0.43.2 (#10562)
  * fix: bump github.com/multiplay/go-ts3 from 1.0.0 to 1.0.1 (#10538)
  * fix: bump cloud.google.com/go/monitoring from 0.2.0 to 1.2.0 (#10454)
  * feat: update etc/telegraf.conf and etc/telegraf_windows.conf (#10561)
  * docs: updates readme to add service SID auth and cleans up AAD auth dupe info (#10541)
  * feat: Add caching to internet_speed (#10530)
  * feat: Xtremio input (#9697)
  * feat(inputs.win_perf_counter): allow errors to be ignored (#10535)
  * fix(outputs/azure_data_explorer): Added azureBlob controls to lower RAM usage (#10179)
  * fix: bump github.com/vmware/govmomi from 0.26.0 to 0.27.2 (#10536)
  * docs: add apt and knot to EXTERNAL_PLUGINS.md (#10552)
  * feat: update etc/telegraf.conf and etc/telegraf_windows.conf (#10546)
  * fix: move "Starting Telegraf" log (#10528)
  * fix: update docker memory usage calculation (#10491)
  * feat: Add ClickHouse driver to sql inputs/outputs plugins (#9671)
  * fix: collapsed fields by calling more indepth function (#10430)
  * feat: update etc/telegraf.conf and etc/telegraf_windows.conf (#10533)
  * feat: process group tag for groundwork output plugin (#10499)
  * feat: update etc/telegraf.conf and etc/telegraf_windows.conf (#10532)
  * docs: Update deprecation readme (#10529)
  * feat: add FileVersion and icon to Win exe (#10487)
  * chore: update grpc to v1.44.0 (#10525)
  * fix: bump google.golang.org/api from 0.54.0 to 0.65.0 (#10434)
  * fix: typo in docs (#10441)
  * fix: bump github.com/antchfx/xmlquery from 1.3.6 to 1.3.9 (#10507)
  * fix: bump github.com/nsqio/go-nsq from 1.0.8 to 1.1.0 (#10521)
  * fix: bump github.com/prometheus/common from 0.31.1 to 0.32.1 (#10506)
  * fix: ipset crash when command not found (#10474)
  * fix: bump cloud.google.com/go/pubsub from 1.17.0 to 1.17.1 (#10504)
  * fix: bump github.com/influxdata/influxdb-observability/influx2otel from 0.2.8 to 0.2.10 (#10432)
  * fix: Update modbus readme (#10501)
  * Fix: Update README.md (#10500)
  * docs: Fixes for input/sql readme (#10498)
  * feat: update configs (#10490)
  * fix: graylog readme to use graylog 3 URLs (#10481)
  * fix: add RFC3164 to RFC5424 translation to docs (#10480)
  * fix: add comment to logparser (#10479)
  * chore: Add `openConnections` to enterprise cluster metrics Readme (#10483)
  * fix: remove duplicate addition of fields (#10478)
  * fix(parsers.nagios): nagios parser now uses real error for logging #10472 (#10473)
  * fix: add newline in execd for prometheus parsing (#10463)
  * fix: bump github.com/shirou/gopsutil/v3 from 3.21.10 to 3.21.12 (#10451)
  * fix: do not save cache on i386 builds (#10464)
  * chore: readme escape rpm variables
  * fix: address flaky tests in cookie_test.go and graylog_test.go (#10326)
  * feat: check TLSConfig early to catch missing certificates (#10341)
  * fix: ensure CI tests runs against i386 (#10457)
  * fix: bump github.com/jackc/pgx/v4 from 4.6.0 to 4.14.1 (#10453)
  * fix: bump github.com/Azure/azure-event-hubs-go/v3 from 3.3.13 to 3.3.17 (#10449)
  * fix: bump github.com/gosnmp/gosnmp from 1.33.0 to 1.34.0 (#10450)
  * fix: wavefront_disable_prefix_conversion case missing from missingTomlField func (#10442)
  * fix: bump github.com/hashicorp/consul/api from 1.9.1 to 1.12.0 (#10435)
  * feat: Parser plugin restructuring (#8791)
  * fix: bump github.com/antchfx/jsonquery from 1.1.4 to 1.1.5 (#10433)
  * fix: bump github.com/prometheus/procfs from 0.6.0 to 0.7.3 (#10414)
  * feat: update etc/telegraf.conf and etc/telegraf_windows.conf (#10429)
  * feat: Add noise plugin (#10057)
  * feat: update configs (#10425)
  * fix: Accept non-standard OPC UA OK status by implementing a configurable workaround (#10384)
  * feat: support headers for http plugin with cookie auth (#10404)
  * fix: snmp input plugin errors if mibs folder doesn't exist (#10346) (#10354)
  * fix: correctly set ASCII trailer for syslog output (#10393)
  * feat: update configs (#10424)
  * chore: go mod tidy (#10423)
  * fix: bump github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs from 1.5.2 to 1.12.0 (#10415)
  * fix: bump github.com/kardianos/service from 1.0.0 to 1.2.1 (#10416)
  * fix: ensure http body is empty (#10396)
  * feat: add bearer token support to elasticsearch output (#10399)
  * fix: bump github.com/couchbase/go-couchbase from 0.1.0 to 0.1.1 (#10417)
  * feat: update etc/telegraf.conf and etc/telegraf_windows.conf (#10411)
  * fix(json_v2): use raw values for timestamps (#10413)
  * fix: bump github.com/pion/dtls/v2 from 2.0.9 to 2.0.13 (#10418)
  * chore: update mqtt documentation (#10394)
  * feat: deprecate unused snmp_trap timeout configuration option (#10339)
  * fix: update containerd to 1.5.9 (#10402)
  * feat: update configs (#10400)
  * feat:  add compression to Datadog Output (#9963)
  * feat: update etc/telegraf.conf and etc/telegraf_windows.conf (#10395)
  * fix: re-enable OpenBSD modbus support (#10385)
  * fix: Fix batching logic with write records, introduce concurrent requests (#8947)
  * feat: Add additional stats to bond collector (#10137)
  * fix(outputs/amqp): Close the last connection when writing error to avoid connection leaks (#10360)
  * feat: update docker client API version (#10382)
  * feat: update etc/telegraf.conf and etc/telegraf_windows.conf (#10381)
  * fix: fix missing storage in container with disk plugin (#10318)
  * feat: add systemd notify support (#10340)
  * chore: typos across source code comments (#10361)
  * chore: sql readme with more details on data types (#10378)
  * fix: empty import tzdata for Windows binaries (#10377)
  * feat: update configs (#10374)
  * chore: document deprecation of timeout (#10373)
  * feat: update configs (#10345)
  * feat: add mock input plugin (#9782)
  * chore: use 4 cores on linux systems (#10342)
  * fix: update go-ldap to v3.4.1 (#10343)
  * chore: remove "i386" test job (#10344)
  * fix: update GroundWork SDK and improve logging (#10255)
  * feat: add more functionality to template processor (#10316)
  * chore: run release signing jobs at the same time (#10333)
  * feat: update configs (#10336)
  * feat: update etc/telegraf.conf and etc/telegraf_windows.conf (#10335)
  * feat: add builds for riscv64 (#10262)
  * feat: add consul metrics input plugin (#10258)
  * fix: snmp marshal error (#10322)
  * feat: add exclude_root_certs option to x509_cert plugin (#9822)
  * feat: add option to disable prepared statements for PostgreSQL (#9710)
  * fix: cumulative interval start times for stackdriver output (#10097)
  * feat: add option to skip errors during CSV parsing (#10267)
  * feat: update configs (#10334)
  * feat: socketstat input plugin (#3649)
  * fix: update djherbis/times and fix dependabot (#10332)
  * fix: warning output when running with --test (#10329)
  * feat: update configs (#10325)
  * docs: add note about dpdk and socket availability (#10324)
  * feat: reworked varnish_cache plugin (#9432)
  * chore:  release packaging run in parallel (#10314)
  * fix: update bug template
  * chore: add logs section for bug reports (#10323)
  * fix: do not require networking during tests (#10321)
  * chore: update mac signing job to use latest xcode (#10311)
  * chore: update Go version to 1.17.5 (#10310)
  * feat: update configs (#10319)
  * chore: cleanup go.mod (#10313)
  * feat: add timeout-setting to Graylog-plugin (#10220)
  * feat: Improve error logging on plugin initialization (#10307)
  * fix: Fix panic in logparser due to missing Log. (#10296)
  * fix: panic due to no module (#10303)
  * fix: grab table columns more accurately (#10295)
  * fix: check index before assignment (#10299)
  * feat: adds optional list of non retryable http statuscodes to http output plugin (#10186)
  * fix: panic is no mibs folder is found (#10301)
  * fix: mac signing issue with arm64 (#10293)
  * fix: Update go-sensu to v2.12.0 (#10247)
  * fix: typo in openstack neutron input plugin (newtron) (#10284)
  * fix: Fix panic in parsers due to missing Log for all plugins using SetParserFunc. (#10288)
  * fix: mark TestGatherUDPCert as an integration test (#10279)
  * feat: support darwin arm64 (#10239)
  * feat: update configs (#10275)
  * fix: run gofmt (#10274)
  * fix: run go mod tidy (#10273)
  * fix: inputs.snmp to respect number of retries configured (#10268)
  * feat: add Redis Sentinel input plugin (#10042)
  * fix: flush wavefront output sender on error to clean up broken connections (#10225)
  * feat: Add option to disable Wavefront prefix conversion (#10252)
  * feat: add heap_size_limit field for input.kibana (#10243)
  * fix: use sha256 for RPM digest (#10272)
  * feat: Update underlying KNX library to support new types. (#10263)
  * chore: restart service if it is already running and upgraded via RPM (#9970)
  * feat: update etc/telegraf.conf and etc/telegraf_windows.conf (#10237)
  * fix: Handle duplicate registration of protocol-buffer files gracefully. (#10188)
  * fix(http_listener_v2): fix panic on close (#10132)
  * feat: add Vault input plugin (#10198)
  * feat: support aws managed service for prometheus (#10202)
  * fix: Make telegraf compile on Windows with golang 1.16.2 (#10246)
  * feat: Modbus add per-request tags (#10231)
  * fix: Implement NaN and inf handling for elasticsearch output (#10196)
  * feat: add nomad input plugin (#10106)
  * fix: Print loaded plugins and deprecations for once and test (#10205)
  * fix: eliminate MIB dependency for ifname processor (#10214)
  * feat: Optimize locking for SNMP MIBs loading. (#10206)
  * feat: Add SMART plugin concurrency configuration option, nvme-cli v1.14+ support and lint fixes. (#10150)
  * feat: update configs (#10236)
  * fix(inputs/kube_inventory): set TLS server name config properly (#9975)
  * fix: Sudden close of Telegraf caused by OPC UA input plugin (#10230)
  * fix: bump github.com/eclipse/paho.mqtt.golang from 1.3.0 to 1.3.5 (#9913)
  * fix: json_v2 parser timestamp setting (#10221)
  * fix: ensure graylog spec fields not prefixed with '_' (#10209)
  * docs: remove duplicate links in CONTRIBUTING.md (#10218)
  * fix: pool detection and metrics gathering for ZFS &gt;= 2.1.x (#10099)
  * fix: parallelism fix for ifname processor (#10007)
  * chore: Forbids "log" package only for aggregators, inputs, outputs, parsers and processors (#10191)
  * docs: address documentation gap when running telegraf in k8s (#10215)
  * feat: update etc/telegraf.conf and etc/telegraf_windows.conf (#10211)
  * fix: mqtt topic extracting no longer requires all three fields (#10208)
  * fix: windows service - graceful shutdown of telegraf (#9616)
  * feat: update etc/telegraf.conf and etc/telegraf_windows.conf (#10201)
  * feat: Modbus support multiple slaves (gateway feature) (#9279)
  * fix: Revert unintented corruption of the Makefile from #10200. (#10203)
  * chore: remove triggering update-config bot in CI (#10195)</changelog>
  <changelog author="jkowalczyk@suse.com" date="1650888003">- Update to version 1.22.1:
  * fix: bump gonum.org/v1/gonum from 0.9.3 to 0.11.0 (#10937)
  * fix: bump github.com/golang-jwt/jwt/v4 from 4.2.0 to 4.4.1 (#10906)
  * chore: add actions/setup-go@v2 to linter config (#10935)
  * docs(external.psi): add psi plugin (#10462)
  * fix: Update gopsutil and associated dependencies for improved OpenBSD supp? (#10931)
  * docs: update rpm/deb instructions with stable URLs (#10905)
  * fix: inconsistencies in sql*Requests queries (#10553)
  * fix: default value for logfile rotation interval (#10883)
  * fix: redundant zfs pool tag (#10871)
  * docs: update license of dependencies (#10914)
  * fix: update vsphere info message to debug (#10903)
  * docs: fix contribute button link (#10904)
  * docs: improve documentation around contribution (#10825)
  * chore: set telegraf log as text block in bug reports (#10895)
  * fix: include body in error message (#10866)
  * docs: clarify the k and fields topk params (#10830)
  * chore: remove slow process test (#10856)
  * chore: update slow file rotation tests (#10857)
  * chore: switch HTTP 100 test case values (#10858)
  * chore: fix slow running intel-pmu test (#10859)
  * chore: skip longer/integration tests on -short mode (#10860)
  * chore: remove CircleCI parallelism (#10862)
  * chore: reduce timeouts and sleeps (#10861)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1650888004">- Refresh harden_telegraf.service.patch</changelog>
  <changelog author="jkowalczyk@suse.com" date="1650974400">- Update to version 1.22.2:
  * Update changelog
  * update build version
  * update build version
  * fix: bump github.com/aws/aws-sdk-go-v2/config from 1.13.1 to 1.15.3 (#10998)
  * fix: add mutex to gnmi lookup map (#11008)
  * fix(cmd): Also allow 0 outputs when using test-wait parameter (#11013)
  * fix: allow Makefile to work on Windows (#11015)
  * fix: use sprint to cast to strings in gnmi (#11010)
  * fix: use correct auth token with consul_agent (#11001)
  * fix: add mariadb_dialect to address the MariaDB differences in INNODB_METRICS (#10486)
  * fix: correctly parse various numeric forms (#10923)
  * fix: update go.opentelemetry.io/collector/pdata from v0.48.0 to v0.49.0 (#10984)
  * fix: bump github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs (#10997)
  * fix: bump github.com/aws/aws-sdk-go-v2/credentials from 1.8.0 to 1.11.2 (#10975)
  * fix: update github.com/containerd/containerd from v1.5.9 to v1.5.11 (#10981)
  * fix: bump github.com/miekg/dns from 1.1.46 to 1.1.48 (#10973)
  * fix: ensure aliyuncms metrics accept array, fix discovery (#10850)
  * fix(inputs/aerospike): Statistics query bug (#10930)
  * fix: update github.com/Azure/azure-kusto-go from 0.5.0 to 0.60 (#10966)
  * fix: update github.com/gopcua/opcua from v0.3.1 to v0.3.3 (#10974)
  * fix: bump github.com/aws/aws-sdk-go-v2/service/dynamodb (#10972)
  * fix: bump github.com/xdg/scram from 1.0.3 to 1.0.5 (#10773)
  * fix: bump go.mongodb.org/mongo-driver from 1.8.3 to 1.9.0 (#10971)
  * fix: align the default value for msg size (#10947)
  * fix: update opentelemetry from v0.2.10 to v0.2.17 (#10963)
  * fix: remove overly verbose info message from cisco mdt (#10959)
  * fix: update starlark 7a1108eaa012-&gt;d1966c6b9fcd (#10940)
  * fix: update influxdb_v2 error message (#10958)
  * fix(inputs.prometheus): moved from watcher to informer (#10932)</changelog>
  <changelog author="jkowalczyk@suse.com" date="1651147200">- Update to version 1.22.3:
  * go mod tidy
  * Update changelog
  * update build version
  * chore: increase timeout for darwin packaging (#11041)
  * fix: reduce log level in disk plugin (#10925)
  * fix: use external xpath parser for gnmi (#11024)
  * fix: remove duplicate influxdb listener writes (#10976)
  * chore: go mod tidy (#10983)
  * chore: Update Go to 1.18.1 (#10961)</changelog>
  <changelog author="jkowalczyk@suse.com" date="1652702400">- Update to version 1.22.4:
  * Update changelog
  * update build version
  * fix: bump github.com/showwin/speedtest-go from 1.1.4 to 1.1.5 (#10722)
  * fix(outputs.Wavefront): If no "host" tag is provided, do not add "telegraf.host" tag (#11078)
  * chore: update opentelemetry plugins (#11085)
  * fix(inputs.couchbase): Don't assume metrics will all be of the same length (#11045)
  * fix: do not error when closing statsd network connection (#11043)
  * fix: re-init azure monitor http client on context deadline error (#11030)
  * fix: have telegraf service wait for network up (#11042)</changelog>
  <changelog author="jkowalczyk@suse.com" date="1655121600">- Update to version 1.23.0:
  * fix: Remove all rebase logic from CI (#11293)
  * fix: Don't rebase on master when building packages (#11291)
  * Update changelog for v1.23.0
  * test: add install go for linux, use in integration tests (#11281)
  * fix(inputs/directory_monitor): Add support for multiline file parsing (#11234)
  * chore: Fix readme linter errors for input plugins M-Z (#11274)
  * fix: Always build README-embedder for host-architecture (#11253)
  * feat: Migrate xpath parser to new style (#11218)
  * fix: add missing build constraints for sqlite (#11272)
  * fix: remove full access permissions (#11261)
  * chore: Fix readme linter errors for input plugins E-L (#11214)
  * chore: Fix readme linter errors for input plugins A-D (#10964)
  * fix: update github.com/containerd/containerd from v1.5.11 to v1.5.13 (#11266)
  * fix: bump github.com/tidwall/gjson from 1.10.2 to 1.14.1 (#11264)
  * chore: Fix readme linter errors for processor, aggregator, and parser plugins (#10960)
  * fix: update modernc.org/sqlite from v1.10.8 to v1.17.3 (#11260)
  * docs: add missing word &lt;3 (#11262)
  * feat(intel_powerstat): add uncore frequency metrics (#11254)
  * test: remove restore integration test cache (#11255)
  * test: add circle ci integration testing on PRs (#11246)
  * test: harden running of testcontainer integration tests (#11245)
  * chore: update go from v1.18.1 to v1.18.3 (#11248)
  * chore: rename circleci executor (#11247)
  * chore: upgrade windows circleci size (#11249)
  * fix: re-add event to splunk serializer (#11237)
  * docs: update test-container docs (#11244)
  * test: remove docker-compose.yml test file (#11243)
  * fix: update moby/ipvs dependency from v1.0.1 to v1.0.2 (#11242)
  * feat(inputs.sqlserver): Update query store and latch performance counters (#11216)
  * test: migrate elasticsearch to testcontainers (#11207)
  * chore: Bump apcupds and remove the replacement as issue is fixed upstream. (#11239)
  * test: migrate postgres to testcontainers (#11209)
  * test: migrate mcrouter to test-containers (#11208)
  * test: migrate kafka to testcontainers (#11206)
  * docs: Initial update of integration test docs (#11210)
  * chore: Bump riemann-go-client and remove replacement (#11236)
  * fix: Upgrade xpath and fix code (#11241)
  * feat(inputs.nginx_plus_api): Gather slab metrics (#10448)
  * fix(inputs/modbus): #11105 fix requests starting with an omitted field (#11202)
  * fix: (outputs/sql) table existence cache (#10812)
  * fix: Update sample.conf for prometheus (#11217)
  * fix: bump github.com/nats-io/nats-server/v2 from 2.7.4 to 2.8.4 (#11221)
  * test: enable logging with testcontainers (#11211)
  * chore: update github.com/opencontainers/runc from v1.0.2 to v1.1.2 (#11212)
  * chore: update gopkg.in/yaml.v3 from v3.0.0 to v3.0.1 (#11213)
  * fix(inputs/snmp): switch new Reconnect method to be a value receiver (#11197)
  * test: refactor testcontainer port lookup (#11198)
  * test: actually skip flaky snmp test (#11199)
  * chore: correctly spell embed (#11200)
  * fix: bump go.opentelemetry.io/otel/metric from 0.28.0 to 0.30.0 (#11088)
  * chore: update OpenTelmetry plugins (#11194)
  * docs: remove recommendation for prometheus metric_version=2 (#11158)
  * fix: bump github.com/sensu/sensu-go/api/core/v2 from 2.13.0 to 2.14.0 (#11021)
  * test: migrate zookeeper to test-containers (#11185)
  * fix(plugins/amqp): move from `streadway/amqp` to `rabbitmq/amqp091-go` (#11192)
  * feat: Add constant 'algorithm' to the mock plugin (#11188)
  * fix: redis plugin goroutine leak triggered by auto reload config mechanism (#11143)
  * fix: update golangci-lint from v1.45.2 to v1.46.2 (#11191)
  * fix(inputs/snmp): Reconnect TCP agents if needed (#11163)
  * test: migrate pgbouncer to test-containers (#11186)
  * test: remove rabbitmq container not used (#11175)
  * chore: Embed sample configurations into README for aggregators (#11190)
  * chore: Embed sample configurations into README for processors (#11189)
  * chore: embed sample configurations into README for outputs (#11182)
  * feat: Google API Auth (#11084)
  * test: migrate openldap tests to test-containers (#11169)
  * test: migrate nsq to test containers (#11173)
  * test: migrate opcua to test-containers (#11171)
  * feat: add field key option to set event partition key (#11076)
  * test: migrate aerospike to test-containers (#11177)
  * fix: Convert slab plugin to new sample.conf. (#11181)
  * test: migrate memcached to test-containers (#11176)
  * test: migrate redis to test-containers (#11174)
  * test: migrate mqtt to test containers (#11172)
  * test: migrate nats to test-containers (#11170)
  * test: migrate crate to test-containers code (#11165)
  * chore: Embed sample configurations into README for inputs (#11136)
  * fix: search services file in /etc/services and fall back to /usr/etc/services (#11179)
  * fix: Remove any content type from prometheus accept header (#11082)
  * feat(inputs.cpu): Add tags with core id or physical id to cpus (#11141)
  * chore: add readme linter to CI (#11020)
  * feat(intel_powerstat): add Max Turbo Frequency and introduce improvements (#11035)
  * test: avoid data race in tcp-listener test (#11144)
  * fix: bump github.com/aws/aws-sdk-go-v2/config from 1.15.3 to 1.15.7 (#11166)
  * test: add generic test-container code for re-use, migrate mysql (#11157)
  * feat: add external huebridge input plugin (#11159)
  * fix: Improve slab testing without sudo. (#11151)
  * docs: update review docs (#11147)
  * test: force elasticsearch to index batch data (#11153)
  * test: update mongodb output to use test containers (#11137)
  * test: switch internet speed to enable file download (#11146)
  * fix: doc interval setting for internet speed plugin (#11150)
  * fix(inputs.burrow): Move Dialer to variable and run `make fmt` (#11149)
  * fix: avoid calling sadc with invalid 0 interval (#11140)
  * feat: [inputs/burrow] fill more http transport parameters (#6948)
  * feat: do not error if no nodes found for current config with xpath parser (#11102)
  * feat: add slab metrics input plugin (#11075)
  * fix: use readers over closers in http input (#11083) Refs boo#1203914
  * chore(inputs_a-l): migrate sample configs into separate files (#11132)
  * chore(inputs_m-z): migrate sample configs into separate files (#11133)
  * chore(outputs): migrate sample configs into separate files (#11131)
  * chore(aggregators): migrate sample configs into separate files (#11130)
  * chore(processors): migrate sample configs into separate files (#11125)
  * test: use supported version of elasticsearch (#11111)
  * test: remove unecessary flag in sql input (#11115)
  * fix: elasticsearch output float handling test (#11120)
  * test: remove unused riemann from docker-compose (#11118)
  * fix(parsers/nagios): metrics will always return a supported status co? (#11062)
  * feat: allow other fluentd metrics apart from retry_count, buffer_queu? (#11056)
  * feat(parsers/logfmt): Add tag support (#11060)
  * fix: log instance name in skip warnings (#10995)
  * fix: bump github.com/wavefronthq/wavefront-sdk-go from 0.9.10 to 0.9.11 (#10970)
  * fix: Update gopsutil from v3.22.3 to v3.22.4 to allow for HOST_PROC_MOUNTINFO. (#11107)
  * chore(inputs/file): More clear error messages (#11104)
  * test: add test for mysql gatherGlobalVariables using sql-mock (#10987)
  * feat: Artifactory Webhook Receiver (#10918)
  * docs: fix socket_writer output format link (#11101)
  * fix: check net.Listen() error in tests (#11093)
  * fix: Output erroneous namespace and continue instead of error out (#11069)
  * Update changelog
  * feat: add mount option filtering to disk plugin (#11039)
  * feat(inputs.vsphere): Collect resource pools metrics and add resource pool tag in VM metrics (#10574)
  * docs: note about listsnapshots cause zfs parse failures (#11091)
  * fix: bump github.com/showwin/speedtest-go from 1.1.4 to 1.1.5 (#10722)
  * fix(outputs.Wavefront): If no "host" tag is provided, do not add "telegraf.host" tag (#11078)
  * chore: update opentelemetry plugins (#11085)
  * docs: correct copy-and-paste of udp to tcp (#11080)
  * refactor: replace strings.Replace with strings.ReplaceAll (#11079)
  * feat(exec, execd): add an option to pass a custom environment to their child process (#11049)
  * fix(inputs.couchbase): Don't assume metrics will all be of the same length (#11045)
  * fix: deprecate useless database config option (#11044)
  * fix: do not error when closing statsd network connection (#11043)
  * fix: re-init azure monitor http client on context deadline error (#11030)
  * feat: add influx semantic commits checker, checks only last commit. (#11037)
  * fix: have telegraf service wait for network up (#11042)
  * chore(inputs/disk): add deprecation notice to legacy mountpoints setting (#10948)
  * style: align plugin renaming (#10868)
  * Update changelog
  * fix: datadog count metrics (#10979)
  * feat(outputs.http): Support configuration of `MaxIdleConns` and `MaxIdleConnsPerHost` (#10954)
  * chore: enable linting of shell scripts (#11031)
  * chore: increase timeout for darwin packaging (#11041)
  * fix: reduce log level in disk plugin (#10925)
  * feat: create and push nightly docker images to quay.io (#11000)
  * chore: remove influxdata/validate-semantic-github-messages github workflow (#11036)
  * chore: Adding influx's semantic commit and PR message checker, so we ? (#11009)
  * fix: use external xpath parser for gnmi (#11024)
  * fix: remove duplicate influxdb listener writes (#10976)
  * Update changelog
  * fix: bump github.com/aws/aws-sdk-go-v2/config from 1.13.1 to 1.15.3 (#10998)
  * fix: add mutex to gnmi lookup map (#11008)
  * fix(cmd): Also allow 0 outputs when using test-wait parameter (#11013)
  * fix: allow Makefile to work on Windows (#11015)
  * chore: Fix readme linter errors for output plugins (#10951)
  * fix: use sprint to cast to strings in gnmi (#11010)
  * docs: add openstack metadata external plugin (#10999)
  * fix: use correct auth token with consul_agent (#11001)
  * docs: correct influx parser type setting in README (#11004)
  * fix: add mariadb_dialect to address the MariaDB differences in INNODB_METRICS (#10486)
  * fix: correctly parse various numeric forms (#10923)
  * chore: add readme linter (#10916)
  * chore: update pull request with master when running CI (#10993)
  * docs: add missing slash in mongodb readme (#10994)
  * fix: update go.opentelemetry.io/collector/pdata from v0.48.0 to v0.49.0 (#10984)
  * docs: regex processor only works on strings (#10982)
  * fix: bump github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs (#10997)
  * fix: bump github.com/aws/aws-sdk-go-v2/credentials from 1.8.0 to 1.11.2 (#10975)
  * test: use `T.TempDir` to create temporary test directory (#10988)
  * feat(processor/regex): Add ability to check every tag for regex replace (#10927)
  * chore: go mod tidy (#10983)
  * chore: Update Go to 1.18.1 (#10961)
  * feat(inputs/teamspeak): allow to configure nickname (#10934)
  * fix: update github.com/containerd/containerd from v1.5.9 to v1.5.11 (#10981)
  * feat(inputs/sqlserver): add RecentBackups query (#10567)
  * fix: bump github.com/miekg/dns from 1.1.46 to 1.1.48 (#10973)
  * fix: ensure aliyuncms metrics accept array, fix discovery (#10850)
  * fix(inputs/aerospike): Statistics query bug (#10930)
  * fix: update github.com/Azure/azure-kusto-go from 0.5.0 to 0.60 (#10966)
  * chore: add logging to graylog tests (#10896)
  * chore: remove go generate from CI tests (#10977)
  * fix: update github.com/gopcua/opcua from v0.3.1 to v0.3.3 (#10974)
  * fix: bump github.com/aws/aws-sdk-go-v2/service/dynamodb (#10972)
  * fix: bump github.com/xdg/scram from 1.0.3 to 1.0.5 (#10773)
  * fix: bump go.mongodb.org/mongo-driver from 1.8.3 to 1.9.0 (#10971)
  * fix: align the default value for msg size (#10947)
  * fix: update opentelemetry from v0.2.10 to v0.2.17 (#10963)
  * docs: update sql readme for creating login in windows (#10967)
  * fix: remove overly verbose info message from cisco mdt (#10959)
  * fix: update starlark 7a1108eaa012-&gt;d1966c6b9fcd (#10940)
  * docs: update csv parser metadata descriptions (#10750)
  * style: Add deprecation notice to renamed plugins (#10867)
  * chore(inputs): add descriptions to config in README.md (#10962)
  * feat: migrate input plugins to new sample config format (M-Z) (#10926)
  * fix: update influxdb_v2 error message (#10958)
  * fix(inputs.prometheus): moved from watcher to informer (#10932)
  * feat: migrate input plugins to new sample config format (A-L) (#10924)
  * feat: migrate output plugins to new sample config format (#10910)
  * feat: migrate processor plugins to new sample config format (#10913)
  * feat: migrate aggregator plugins to new sample config format (#10912)
  * Update changelog
  * feat: generate the plugins sample config (#10886)
  * feat(inputs.mongodb): Add metrics about files currently open and currently active data handles (#7896)
  * fix: bump gonum.org/v1/gonum from 0.9.3 to 0.11.0 (#10937)
  * fix: bump github.com/golang-jwt/jwt/v4 from 4.2.0 to 4.4.1 (#10906)
  * chore: add actions/setup-go@v2 to linter config (#10935)
  * docs(external.psi): add psi plugin (#10462)
  * fix: Update gopsutil and associated dependencies for improved OpenBSD supp? (#10931)
  * docs: update rpm/deb instructions with stable URLs (#10905)
  * fix: inconsistencies in sql*Requests queries (#10553)
  * feat: add ANSI color filter for tail input plugin (#10880)
  * feat: (outputs.elasticsearch) Add healthcheck timeout (#10853)
  * feat: In Lustre input plugin, support collecting per-client stats. (#10607)
  * fix: default value for logfile rotation interval (#10883)
  * fix: redundant zfs pool tag (#10871)
  * docs: update license of dependencies (#10914)
  * fix: update vsphere info message to debug (#10903)
  * docs: fix contribute button link (#10904)
  * feat: add fritzbox as external plugin (#10818)
  * docs: improve documentation around contribution (#10825)
  * chore: set telegraf log as text block in bug reports (#10895)
  * fix: include body in error message (#10866)
  * feat: update etc/telegraf.conf and etc/telegraf_windows.conf (#10885)
  * docs: clarify the k and fields topk params (#10830)
  * chore: remove slow process test (#10856)
  * chore: update slow file rotation tests (#10857)
  * chore: switch HTTP 100 test case values (#10858)
  * chore: fix slow running intel-pmu test (#10859)
  * chore: skip longer/integration tests on -short mode (#10860)
  * chore: remove CircleCI parallelism (#10862)
  * chore: reduce timeouts and sleeps (#10861)
  * Update CHANGELOG.md
  * Update build version to 1.23.0
  * Update changelog
  * Update CHANGELOG.md</changelog>
  <changelog author="jkowalczyk@suse.com" date="1657108800">- Update to version 1.23.1:
  * Update changelog for v1.23.1
  * Update build_version.txt for v1.23.1
  * Sync sample.conf into READMEs.
  * Fix xpath config location.
  * docs(inputs.mqtt_consumer): add pivot example to readme (#11195)
  * test: Update wait statement for postgresql_extensible (#11447)
  * docs: add firehose to EXTERNAL_PLUGINS.md (#11450)
  * chore(deps): Bump github.com/prometheus/client_golang (#11437)
  * chore(deps): Bump k8s.io/api from 0.24.1 to 0.24.2 (#11434)
  * chore(deps): Bump github.com/influxdata/influxdb-observability/otel2influx from 0.2.21 to 0.2.22 (#11416)
  * chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs from 1.15.4 to 1.15.8 (#11415)
  * test: exchange confused parameters (expected vs actual) (#11422)
  * fix: Bring back old xpath section names (#11335)
  * chore(deps): Bump github.com/vmware/govmomi from 0.27.3 to 0.28.0 (#11396)
  * chore(deps): Bump github.com/golang-jwt/jwt/v4 from 4.4.1 to 4.4.2 (#11395)
  * fix: Sync back sample.confs for inputs.couchbase and outputs.groundwork. (#11413)
  * fix: resolve jolokia2 panic on null response (#11397)
  * chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/ec2 from 1.1.0 to 1.46.0 (#11382)
  * chore: Remove 'github.com/cisco-ie/nx-telemetry-proto' replacement (#11401)
  * chore: Remove 'github.com/satori/go.uuid' replacement (#11240)
  * chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/kinesis (#11380)
  * chore(deps): Bump cloud.google.com/go/pubsub from 1.22.2 to 1.23.0 (#11394)
  * chore(deps): Bump github.com/Azure/azure-kusto-go from 0.6.0 to 0.7.0 (#11378)
  * chore(deps): Bump cloud.google.com/go/bigquery from 1.8.0 to 1.33.0 (#11379)
  * chore(deps): Bump github.com/jackc/pgx/v4 from 4.15.0 to 4.16.1 (#11346)
  * chore(deps): Bump go.opentelemetry.io/collector/pdata from 0.52.0 to 0.54.0 (#11369)
  * docs: swap bytes sent/recv descriptions in nfsclient (#11376)
  * chore(deps): Bump cloud.google.com/go/pubsub from 1.18.0 to 1.22.2 (#11349)
  * chore(deps): Bump github.com/nats-io/nats.go from 1.15.0 to 1.16.0 (#11339)
  * chore(deps): Bump github.com/dynatrace-oss/dynatrace-metric-utils-go from 0.3.0 to 0.5.0 (#11342)
  * fix: Restore sample configurations broken during initial migration (#11276)
  * fix: don't require listeners to be present in overview (#9315)
  * chore: move agent config into seperate file (#11337)
  * docs: Sync sample.conf for recent features (#11348)
  * chore(deps): Bump github.com/Shopify/sarama from 1.32.0 to 1.34.1 (#11319)
  * chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/timestreamwrite from 1.3.2 to 1.13.6 (#11322)
  * fix: filter out views in mongodb lookup (#11280)
  * chore(deps): Bump github.com/fatih/color from 1.10.0 to 1.13.0 (#11340)
  * chore: fix typo (recieve -&gt; receive) (#11341)
  * chore(deps): Bump google.golang.org/api from 0.74.0 to 0.84.0 (#11338)
  * chore(deps): Bump github.com/gophercloud/gophercloud from 0.24.0 to 0.25.0 (#11321)
  * chore(deps): Bump go.mongodb.org/mongo-driver from 1.9.0 to 1.9.1 (#11320)
  * chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/dynamodb (#11328)
  * test: add coveralls coverage to master (#11256)
  * chore: make apt-get instructions consistent and add GPG fingerprint (#11326)
  * chore(deps): Bump github.com/go-logfmt/logfmt from 0.5.0 to 0.5.1 (#11299)
  * chore(deps): Bump k8s.io/client-go from 0.23.3 to 0.24.1 (#11223)
  * chore(deps): Bump google.golang.org/grpc from 1.46.2 to 1.47.0 (#11318)
  * chore(deps): Bump github.com/aws/aws-sdk-go-v2/credentials from 1.12.2 to 1.12.5 (#11297)
  * test: mark integration tests correctly (#11317)
  * test: update wait for statement for postgres (#11309)
  * docs: explain directly connecting to mongo node (#11314)
  * fix: Prevent concurrent map writes to c.UnusedFields (#11311)
  * fix: bump cloud.google.com/go/monitoring from 1.2.0 to 1.5.0 (#11295)</changelog>
  <changelog author="jkowalczyk@suse.com" date="1657627200">- Update to version 1.23.2:
  * Update changelog for v1.23.2
  * Update build_version.txt for v1.23.2
  * Sync sample.conf and README.md files.
  * docs: Update etc/telegraf.conf and etc/telegraf_windows.conf (#11483)
  * fix: allow 201 for cookies, update header docs (#11472)
  * fix(inputs.snmp): snmp UseUnconnectedUDPSocket when using udp (#10331)
  * docs: Update etc/telegraf.conf and etc/telegraf_windows.conf (#11480)
  * chore(gnmi): Add Metrics heading to README.md (#11476)
  * fix(gnmi): refactor tag-only subs for complex keys (#11011)
  * fix: use bigint for backupsize in sqlserver (#11448)
  * docs: Update etc/telegraf.conf and etc/telegraf_windows.conf (#11463)
  * chore(inputs.socket_listener): Remove parser from init (#11462)
  * fix: Deprecation warnings for non-deprecated packages (#11460)
  * chore(deps): Bump github.com/docker/docker (#11438)
  * docs: Update etc/telegraf.conf and etc/telegraf_windows.conf (#11431)
  * docs: Update etc/telegraf.conf and etc/telegraf_windows.conf (#11419)
  * docs: Update etc/telegraf.conf and etc/telegraf_windows.conf (#11414)
  * docs: Update etc/telegraf.conf and etc/telegraf_windows.conf (#11365)
  * docs: Update etc/telegraf.conf and etc/telegraf_windows.conf (#11351)
  * docs: Update etc/telegraf.conf and etc/telegraf_windows.conf (#11344)
  * chore: Remove prefix to use the default `chore(deps)` (#11315)</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658750400">- Update to version 1.23.3:
  * Update changelog for v1.23.3
  * Update build_version.txt for v1.23.3
  * fix(inputs.snmp_trap): nil map panic when use snmp_trap with netsnmp translator (#11534)
  * fix: add version number to MacOS packages
  * chore: update to go1.18.4 (#11526)
  * fix(inputs.mqtt_consumer):  topic parsing error  when topic having prefix(/) (#11527)
  * fix(inputs.sqlserver): set lower deadlock priority (#11522)
  * fix: use reader over readcloser, regen cookie-jar (#11482)
  * fix: correct init volume gatherer in openstack (#11481)
  * fix: add version number to Mac packages (#11506)
  * fix(parsers.prometheus): histogram infinity bucket must be allways present (#11490) (#11486)
  * docs: Add example output section to HTTP plugin (#11497)
  * docs: explain proxmox user/token and node_name (#11487)
  * chore(deps): Bump github.com/antchfx/jsonquery from 1.1.5 to 1.2.0 (#11461)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1658750401">- Refresh harden_telegraf.service.patch</changelog>
  <changelog author="jkowalczyk@suse.com" date="1660651200">- Update to version 1.23.4:
  * fix: remove bare url in changelog that failed lint
  * fix: update license of dependencies
  * fix: update github.com/mdlayher/netlink to 1.6.0 to fix the build
  * fix: Sync sql output and input build constraints to handle loong64 in go1.19. (#11664)
  * docs: explain PowerShell 5 encoding (#11662)
  * chore: update circle-ci orbs (#11618)
  * docs(inputs.zookeeper): document use of prometheus plugin (#11658)
  * chore(deps): bump github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs (#11653)
  * chore(deps): bump github.com/aws/aws-sdk-go-v2/feature/ec2/imds (#11652)
  * chore(deps): bump github.com/aws/aws-sdk-go-v2/service/ec2 (#11651)
  * chore(deps): bump github.com/antchfx/xmlquery from 1.3.9 to 1.3.12 (#11644)
  * fix: Bump github.com/lxc/lxd to latest git to fix https://github.com/lxc/lxd/issues/10738. (#11647)
  * chore(deps): bump google.golang.org/api from 0.85.0 to 0.91.0 (#11643)
  * chore(deps): Bump github.com/prometheus/client_golang from 1.12.2 to 1.13.0 (#11640)
  * chore(deps): bump github.com/hashicorp/consul/api from 1.12.0 to 1.13.1 (#11641)
  * chore(deps): Bump github.com/emicklei/go-restful from v2.9.5+incompatible to v3.8.0 (#11636)
  * fix(inputs.mongodb): update version check for newer versions (#11635)
  * feat: add coralogix dialect to opentelemetry (#11622)
  * fix(parsers): Linter issues (#11607)
  * chore: workaround for failing "go list -m all" (#11624)
  * chore(deps): bump github.com/sirupsen/logrus from 1.8.1 to 1.9.0 (#11616)
  * chore: Update to go1.18.5 (#11621)
  * docs: Add source tag best practices to the metric schema docs (#11620)
  * chore: Fix support issue template (#11617)
  * fix(inputs.kubernetes): refresh token from file at each read (#11578)
  * chore(deps): Update github.com/Shopify/sarama from 1.34.1 to 1.35.0 (#11603)
  * chore(deps): update k8s.io/apimachinery from 0.24.2 to 0.24.3 (#11602)
  * chore(deps): Update cloud.google.com/go/pubsub from 1.23.0 to 1.24.0 (#11604)
  * chore(deps): Update github.com/BurntSushi/toml from 0.4.1 to 1.2.0 (#11605)
  * chore: Migrate all issue templates to yaml (#11612)
  * docs(inputs.exec): clarify parsing for ints (#11597)
  * fix(outputs): Linter issues (#11595)
  * fix(inputs.kube_inventory): send file location to enable token auto-refresh (#11577)
  * chore: update github.com/harlow/kinesis-consumer (#11599)
  * chore(deps): Bump github.com/signalfx/golib/v3 from 3.3.43 to 3.3.45 (#11598)
  * chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/dynamodb (#11584)
  * chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/kinesis (#11585)
  * chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/cloudwatch (#11586)
  * chore(deps): Bump github.com/Azure/azure-event-hubs-go/v3 (#11590)
  * test: fix openetelemtry test (#11573)
  * fix(inputs): Linter issues (#11576)
  * chore(deps): Bump github.com/pion/dtls/v2 from 2.0.13 to 2.1.5 (#11581)
  * chore(deps): Bump github.com/Azure/go-autorest/autorest/adal (#11583)
  * chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs (#11582)
  * chore(deps): Bump github.com/shirou/gopsutil/v3 from 3.22.4 to 3.22.7 (#11580)
  * fix(inputs.cloudwatch): customizable batch size when querying (#10851)
  * chore(deps): Bump github.com/eclipse/paho.mqtt.golang from 1.3.5 to 1.4.1 (#11347)
  * chore(deps): Bump github.com/vmware/govmomi from 0.28.0 to 0.29.0 (#11568)
  * chore(deps): Bump github.com/karrick/godirwalk from 1.16.1 to 1.17.0 (#11574)
  * chore(deps): Bump github.com/go-ldap/ldap/v3 from 3.4.1 to 3.4.4 (#11569)
  * chore(deps): Update all go.opentelemetry.io dependencies (#11494)
  * chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/ec2 from 1.46.0 to 1.51.0 (#11567)
  * chore(deps): Bump github.com/apache/thrift from 0.15.0 to 0.16.0 (#11565)
  * chore(deps): Bump github.com/testcontainers/testcontainers-go from 0.12.0 to 0.13.0 (#11412)
  * fix: Updating credentials file to not use endpoint_url parameter (#10841)
  * fix(inputs.opcua): return an error with mismatched types (#11539)
  * fix(inputs.stackdriver): Handle when no buckets available (#11556)
  * docs(inputs.mysql): Add link to docs on how to enable mysql's performance schema (#11555)
  * chore: add missing section to kafka_consumer's sample.conf (#11553)
  * docs: add timeout section (#11550)
  * fix(inputs.sqlserver): set lower deadlock priority (#11548)
  * docs(inputs.modbus): README changes regarding request.tags (#11541)
  * docs: run make-docs (#11514)
  * test: do not have leadership election during kafka test (#11404)
  * chore: Update CRLF line endings in agent.conf to LF (#11501)</changelog>
  <changelog author="jkowalczyk@suse.com" date="1664884800">- Update to version 1.24.0:
  * feat(inputs.directory_monitor): Support paths for files_to_ignore and files_to_monitor (#11784)
  * chore(inputs.jolokia2): Move agent and proxy one level up (#11637)
  * fix(outputs.execd): Fixing the execd behavior to not throw error when partially unserializable metrics are written. (#11767)
  * fix: add missing entry json_transformation to missingTomlField (#11779)
  * fix: Do not error out for parsing errors in datadog mode. (#11777)
  * chore: update to go1.19.1 (#11776)
  * fix(inputs.mongodb): add an option to bypass connection errors on start (#11629)
  * feat(inputs.directory_monitor): Traverse sub-directories (#11773)
  * fix(inputs.jolokia2): add optional origin header (#11692)
  * chore(deps): Bump google.golang.org/grpc from 1.48.0 to 1.49.0 (#11746)
  * docs: Add go report badge (#11774)
  * feat(inputs.sqlserver): Improved filtering for active requests (#11709)
  * chore(deps): Bump github.com/Azure/azure-kusto-go from 0.7.0 to 0.8.0 (#11770)
  * docs(external): add hwinfo external plugin (#11757)
  * chore(deps): Bump gonum.org/v1/gonum from 0.11.0 to 0.12.0 (#11764)
  * chore(deps): Bump github.com/urfave/cli/v2 from 2.11.2 to 2.14.1 (#11763)
  * fix: sort labels in prometheusremotewrite serializer (#11755)
  * fix(inputs.opcua): Assign node id correctly (#11723)
  * chore(deps): Bump github.com/aws/aws-sdk-go-v2/feature/ec2/imds (#11747)
  * chore: Rename Telegraf receiver argument from a to t (#11742)
  * chore(deps): Bump k8s.io/client-go from 0.24.3 to 0.25.0 (#11745)
  * chore(deps): Bump github.com/gophercloud/gophercloud (#11744)
  * chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/dynamodb (#11743)
  * chore: update github.com/Shopify/sarama from v1.35 to v1.36 (#11713)
  * chore(deps): Bump github.com/rabbitmq/amqp091-go from 1.3.4 to 1.4.0 (#11699)
  * feat(outputs.postgresql): add Postgresql output (#11672)
  * chore(deps): Bump github.com/tidwall/gjson from 1.14.1 to 1.14.3 (#11721)
  * feat: Migrate to urfave/cli (#11700)
  * chore(deps): Bump github.com/hashicorp/consul/api from 1.13.1 to 1.14.0 (#11717)
  * feat(inputs.linux_cpu): Add plugin to collect CPU metrics on Linux (#8988)
  * chore(deps): Bump github.com/aerospike/aerospike-client-go/v5 (#11716)
  * chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/sts (#11711)
  * chore(deps): Bump github.com/wavefronthq/wavefront-sdk-go (#11710)
  * fix(inputs.sqlserver): fixing wrong filtering for sqlAzureMIRequests and sqlAzureDBRequests (#11701)
  * fix: use os-agnositc systemd detection, remove sysv in RPM packaging (#10570)
  * feat(inputs.mqtt_consumer): Add incoming mqtt message size calculation (#11426)
  * feat: tool to build custom Telegraf builds (#11524)
  * chore: Update golangci-lint (#11705)
  * docs: update ms sql dsn example (#11704)
  * feat(serializers.prometheus): Provide option to reduce payload size by removing HELP from payload (#11690)
  * feat(inputs.sqlserver): Add db name to io stats for MI (#11688)
  * fix: refactor telegraf version (#11656)
  * fix(agent): add flushBatch method (#11615)
  * chore(deps): Bump go.mongodb.org/mongo-driver from 1.9.1 to 1.10.1 (#11676)
  * chore(deps): Bump github.com/aliyun/alibaba-cloud-sdk-go from 1.61.1695 to 1.61.1727 (#11695)
  * fix(inputs.prometheus): plugin run outside k8s cluster error (#11673)
  * chore: only lint changed READMEs (#11677)
  * chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/timestreamwrite (#11679)
  * fix: remove bare url in changelog that failed lint
  * chore: Move aws credentials to plugins/common. (#11681)
  * chore: Use build tags to select plugins (#11654)
  * chore(deps): Bump github.com/urfave/cli/v2 from 2.3.0 to 2.11.2 (#11675)
  * chore(deps): bump github.com/aws/aws-sdk-go-v2/service/ec2 (#11670)
  * chore(deps): Bump github.com/Azure/go-autorest/autorest (#11669)
  * chore(deps): Bump github.com/jackc/pgx/v4 from 4.16.1 to 4.17.0 (#11671)
  * fix: Sync sql output and input build constraints to handle loong64 in go1.19. (#11664)
  * docs: explain PowerShell 5 encoding (#11662)
  * chore: update circle-ci orbs (#11618)
  * docs(inputs.zookeeper): document use of prometheus plugin (#11658)
  * feat(outputs.iotdb): Add new output plugin to support Apache IoTDB (#11557)
  * chore(deps): bump github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs (#11653)
  * chore(deps): bump github.com/aws/aws-sdk-go-v2/feature/ec2/imds (#11652)
  * feat(outputs.amqp): Add proxy support (#11649)
  * chore(deps): bump github.com/aws/aws-sdk-go-v2/service/ec2 (#11651)
  * chore: Markdown fixes for inputs/[a-m]* (#11606)
  * chore(deps): bump github.com/antchfx/xmlquery from 1.3.9 to 1.3.12 (#11644)
  * fix: Bump github.com/lxc/lxd to latest git to fix https://github.com/lxc/lxd/issues/10738. (#11647)
  * chore(deps): bump google.golang.org/api from 0.85.0 to 0.91.0 (#11643)
  * chore(deps): Bump github.com/prometheus/client_golang from 1.12.2 to 1.13.0 (#11640)
  * feat(common.tls): Implement minimum TLS version for clients (#11493)
  * chore(deps): bump github.com/hashicorp/consul/api from 1.12.0 to 1.13.1 (#11641)
  * chore(deps): Bump github.com/emicklei/go-restful from v2.9.5+incompatible to v3.8.0 (#11636)
  * feat: Supervisord input plugin (#9015)
  * chore(parsers.json_v2): Cleanup test by reusing testutil function (#11627)
  * fix(inputs.mongodb): update version check for newer versions (#11635)
  * feat: add coralogix dialect to opentelemetry (#11622)
  * fix(inputs.x509): Multiple sources with non-overlapping DNS entries. (#11613)
  * fix(parsers): Linter issues (#11607)
  * feat (inputs/prometheus): add setting to set custom namespace label name to avoid conflicts (#11538)
  * chore: workaround for failing "go list -m all" (#11624)
  * feat(processors.starlark): Add starlark benchmark for tag-concatenation (#11306)
  * chore(deps): bump github.com/sirupsen/logrus from 1.8.1 to 1.9.0 (#11616)
  * chore: Update to go1.18.5 (#11621)
  * chore: Using Windows, add exe extension to tools (#11608)
  * docs: Add source tag best practices to the metric schema docs (#11620)
  * feat(external): Add nsdp external plugin (#11619)
  * chore: Fix support issue template (#11617)
  * fix(inputs.kubernetes): refresh token from file at each read (#11578)
  * feat(inputs.ntpq): Allow to specify `reach` output format (#11594)
  * chore(deps): Update github.com/Shopify/sarama from 1.34.1 to 1.35.0 (#11603)
  * chore(deps): update k8s.io/apimachinery from 0.24.2 to 0.24.3 (#11602)
  * chore(deps): Update cloud.google.com/go/pubsub from 1.23.0 to 1.24.0 (#11604)
  * chore(deps): Update github.com/BurntSushi/toml from 0.4.1 to 1.2.0 (#11605)
  * chore: Migrate all issue templates to yaml (#11612)
  * docs(inputs.exec): clarify parsing for ints (#11597)
  * fix(outputs): Linter issues (#11595)
  * fix(inputs.kube_inventory): send file location to enable token auto-refresh (#11577)
  * feat(inputs.ntpq): Add possibility to query remote servers (#11592)
  * feat(inputs.openstack): Add "allow_reauth" config option for openstack client (#11572)
  * feat(inputs.ntpq): Add option to specify command flags (#11593)
  * chore: update github.com/harlow/kinesis-consumer (#11599)
  * chore(deps): Bump github.com/signalfx/golib/v3 from 3.3.43 to 3.3.45 (#11598)
  * chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/dynamodb (#11584)
  * chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/kinesis (#11585)
  * chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/cloudwatch (#11586)
  * chore(deps): Bump github.com/Azure/azure-event-hubs-go/v3 (#11590)
  * test: fix openetelemtry test (#11573)
  * fix(inputs): Linter issues (#11576)
  * chore(deps): Bump github.com/pion/dtls/v2 from 2.0.13 to 2.1.5 (#11581)
  * chore(deps): Bump github.com/Azure/go-autorest/autorest/adal (#11583)
  * chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs (#11582)
  * chore(deps): Bump github.com/shirou/gopsutil/v3 from 3.22.4 to 3.22.7 (#11580)
  * fix(outputs.wavefront): update wavefront sdk and use non-deprecated APIs (#11560)
  * chore(inputs.ntpq): Cleanup existing plugin (#11575)
  * fix(inputs.cloudwatch): customizable batch size when querying (#10851)
  * chore(deps): Bump github.com/eclipse/paho.mqtt.golang from 1.3.5 to 1.4.1 (#11347)
  * chore(deps): Bump github.com/vmware/govmomi from 0.28.0 to 0.29.0 (#11568)
  * chore(deps): Bump github.com/karrick/godirwalk from 1.16.1 to 1.17.0 (#11574)
  * chore(deps): Bump github.com/go-ldap/ldap/v3 from 3.4.1 to 3.4.4 (#11569)
  * chore(deps): Update all go.opentelemetry.io dependencies (#11494)
  * chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/ec2 from 1.46.0 to 1.51.0 (#11567)
  * chore(deps): Bump github.com/apache/thrift from 0.15.0 to 0.16.0 (#11565)
  * chore(deps): Bump github.com/testcontainers/testcontainers-go from 0.12.0 to 0.13.0 (#11412)
  * feat(outputs.sql): Add settings for go sql.DB settings (#11551)
  * fix: Updating credentials file to not use endpoint_url parameter (#10841)
  * fix: Remove shell execution for license-checker. (#11563)
  * chore: More parser cleanup (#11532)
  * feat: Add license checking tool (#11398)
  * feat(parsers.xpath): Add support for returning underlying data-types (#11558)
  * fix(inputs.opcua): return an error with mismatched types (#11539)
  * feat(output.mqtt): Add support for MQTT protocol version 5 (#11284)
  * fix(inputs.stackdriver): Handle when no buckets available (#11556)
  * docs(inputs.mysql): Add link to docs on how to enable mysql's performance schema (#11555)
  * chore: add missing section to kafka_consumer's sample.conf (#11553)
  * docs: add timeout section (#11550)
  * fix(inputs.sqlserver): set lower deadlock priority (#11548)
  * feat(inputs.kafka_consumer): Option to set default fetch message bytes (#11220)
  * docs(inputs.modbus): README changes regarding request.tags (#11541)
  * feat(outputs.graphite): Retry connecting to servers with failed send attempts (#11439)
  * feat(inputs.statsd): add median timing calculation to statsd input plugin (#11518)
  * fix(inputs.snmp_trap): nil map panic when use snmp_trap with netsnmp translator (#11534)
  * feat(parsers.json): Allow JSONata based transformations in JSON serializer (#11251)
  * fix: Add version number to MacOS packages (#11512)
  * feat(inputs.syslog): log remote host as source tag (#9440)
  * feat(outputs.groundwork): Improve metric parsing to extend output (#11443)
  * feat: added metrics for member and replica-set avg health of MongoDB  (#11516)
  * feat(outputs.redistimeseries): Add integration test (#11529)
  * chore: update to go1.18.4 (#11526)
  * fix(inputs.mqtt_consumer):  topic parsing error  when topic having prefix(/) (#11527)
  * fix(inputs.sqlserver): set lower deadlock priority (#11522)
  * fix: make docs + go.mod cleanup post-redis merge (#11521)
  * feat: Add RedisTimeSeries plugin (#11054)
  * docs: run make-docs (#11514)
  * feat(inputs.cisco_telemetry_mdt): Add GRPC Keepalive/timeout config options (#11458)
  * fix: use reader over readcloser, regen cookie-jar (#11482)
  * fix: correct init volume gatherer in openstack (#11481)
  * feat: Nats Jetstream consumer add simple support for jetstream subjects (#11373)
  * Revert "fix: add version number to Mac packages (#11506)" (#11510)
  * fix: add version number to Mac packages (#11506)
  * fix(parsers.prometheus): histogram infinity bucket must be allways present (#11490) (#11486)
  * feat(inputs.modbus): Error out on requests with no fields defined. (#11469)
  * test: do not have leadership election during kafka test (#11404)
  * docs: Add example output section to HTTP plugin (#11497)
  * chore: cleanup go.mod and dependency licences (#11503)
  * feat: add Stomp (Active MQ) output plugin (#7995)
  * chore: Update CRLF line endings in agent.conf to LF (#11501)
  * feat: add proxy support for outputs/cloudwatch (#11399)
  * docs: explain proxmox user/token and node_name (#11487)
  * chore: Check for readme changes in each PR (#11495)
  * chore: Skip building artifacts on master branch (#11465)
  * docs: Update etc/telegraf.conf and etc/telegraf_windows.conf (#11496)
  * fix: Backport sync sample.conf and README.md files (#11489)
  * feat(inputs.smart): Collect SSD endurance information where available in smartctl (#11391)
  * chore(deps): Bump github.com/antchfx/jsonquery from 1.1.5 to 1.2.0 (#11461)
  * feat(inputs.logstash): Record number of failures (#9185)
  * docs: Update etc/telegraf.conf and etc/telegraf_windows.conf (#11483)
  * fix: allow 201 for cookies, update header docs (#11472)
  * fix(inputs.snmp): snmp UseUnconnectedUDPSocket when using udp (#10331)
  * docs: Update etc/telegraf.conf and etc/telegraf_windows.conf (#11480)
  * fix(inputs.upsd): Move to new sample.conf style (#11471)
  * feat(rabbitmq): add support for head_message_timestamp metric (#11475)
  * fix: Update prometheusremotewrite parser to be a new style parser plugin (#11456)
  * chore(gnmi): Add Metrics heading to README.md (#11476)
  * fix(gnmi): refactor tag-only subs for complex keys (#11011)
  * chore: sign nightly artifacts to detect issues before release (#11464)
  * feat(inputs.nginx_plus_api): Gather limit_reqs metrics (#10874)
  * test: ignore return code on check-update (#11445)
  * fix: use bigint for backupsize in sqlserver (#11448)
  * feat: Migrate influx and influx_upstream parsers to new style (#11432)
  * docs: Update etc/telegraf.conf and etc/telegraf_windows.conf (#11463)
  * chore(inputs.socket_listener): Remove parser from init (#11462)
  * feat(input): add upsd implementation (#9890)
  * fix: Deprecation warnings for non-deprecated packages (#11460)
  * chore(deps): Bump github.com/docker/docker (#11438)
  * fix: Update prometheus parser to be a new style parser plugin (#11440)
  * docs(inputs.mqtt_consumer): add pivot example to readme (#11195)
  * test: Update wait statement for postgresql_extensible (#11447)
  * docs: add firehose to EXTERNAL_PLUGINS.md (#11450)
  * chore(deps): Bump github.com/prometheus/client_golang (#11437)
  * chore(deps): Bump k8s.io/api from 0.24.1 to 0.24.2 (#11434)
  * feat: Migrate nagios parser to new style (#11402)
  * fix: add reset-mode flag for CSV parser (#11288)
  * docs: Update etc/telegraf.conf and etc/telegraf_windows.conf (#11431)
  * feat: adding aws metric streams input plugin (#11233)
  * test: run check-update on dnf/yum (#11430)
  * chore(deps): Bump github.com/influxdata/influxdb-observability/otel2influx from 0.2.21 to 0.2.22 (#11416)
  * feat: migrate grok to new parser style (#11408)
  * feat: Migrate dropwizard parser to new style (#11371)
  * chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs from 1.15.4 to 1.15.8 (#11415)
  * test: exchange confused parameters (expected vs actual) (#11422)
  * feat: Migrate logfmt parser to new style (#11366)
  * fix: Bring back old xpath section names (#11335)
  * feat: Migrate graphite parser to new style (#11405)
  * feat: migrate value parser to new style (#11407)
  * docs: Update etc/telegraf.conf and etc/telegraf_windows.conf (#11419)
  * feat(outputs/wavefront): make maximum http batch size configurable (#11201)
  * feat: migrate form_urlencoded parser to new style (#11381)
  * chore: move printing of sample config file out of config.go (#11409)
  * chore(deps): Bump github.com/vmware/govmomi from 0.27.3 to 0.28.0 (#11396)
  * chore(deps): Bump github.com/golang-jwt/jwt/v4 from 4.4.1 to 4.4.2 (#11395)
  * docs: Update etc/telegraf.conf and etc/telegraf_windows.conf (#11414)
  * fix: Sync back sample.confs for inputs.couchbase and outputs.groundwork. (#11413)
  * fix: resolve jolokia2 panic on null response (#11397)
  * test: add nightly package testing to amd64/linux (#11377)
  * chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/ec2 from 1.1.0 to 1.46.0 (#11382)
  * chore: Remove 'github.com/cisco-ie/nx-telemetry-proto' replacement (#11401)
  * chore: Remove 'github.com/satori/go.uuid' replacement (#11240)
  * chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/kinesis (#11380)
  * chore(deps): Bump cloud.google.com/go/pubsub from 1.22.2 to 1.23.0 (#11394)
  * feat: Migrate collectd parser to new style (#11367)
  * feat: allow collecting node-level metrics for Couchbase buckets (#9717)
  * feat: migrate wavefront parser to new style (#11374)
  * chore(deps): Bump github.com/Azure/azure-kusto-go from 0.6.0 to 0.7.0 (#11378)
  * chore(deps): Bump cloud.google.com/go/bigquery from 1.8.0 to 1.33.0 (#11379)
  * chore(deps): Bump github.com/jackc/pgx/v4 from 4.15.0 to 4.16.1 (#11346)
  * chore(deps): Bump go.opentelemetry.io/collector/pdata from 0.52.0 to 0.54.0 (#11369)
  * docs: swap bytes sent/recv descriptions in nfsclient (#11376)
  * chore(deps): Bump cloud.google.com/go/pubsub from 1.18.0 to 1.22.2 (#11349)
  * chore(deps): Bump github.com/nats-io/nats.go from 1.15.0 to 1.16.0 (#11339)
  * chore(deps): Bump github.com/dynatrace-oss/dynatrace-metric-utils-go from 0.3.0 to 0.5.0 (#11342)
  * docs: Update etc/telegraf.conf and etc/telegraf_windows.conf (#11365)
  * feat: Migrate json_v2 parser to new style (#11343)
  * fix: Restore sample configurations broken during initial migration (#11276)
  * feat: Add CSV serializer (#11307)
  * fix: don't require listeners to be present in overview (#9315)
  * docs: Update etc/telegraf.conf and etc/telegraf_windows.conf (#11351)
  * feat: Migrate json parser to new style (#11226)
  * chore: move agent config into seperate file (#11337)
  * docs: Sync sample.conf for recent features (#11348)
  * chore(deps): Bump github.com/Shopify/sarama from 1.32.0 to 1.34.1 (#11319)
  * feat(x509_cert): add proxy support (#9319)
  * feat(redis): add Redis 6 ACL auth support (#9333)
  * docs: Update etc/telegraf.conf and etc/telegraf_windows.conf (#11344)
  * chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/timestreamwrite from 1.3.2 to 1.13.6 (#11322)
  * fix: filter out views in mongodb lookup (#11280)
  * chore(deps): Bump github.com/fatih/color from 1.10.0 to 1.13.0 (#11340)
  * chore: fix typo (recieve -&gt; receive) (#11341)
  * chore(deps): Bump google.golang.org/api from 0.74.0 to 0.84.0 (#11338)
  * chore(deps): Bump github.com/gophercloud/gophercloud from 0.24.0 to 0.25.0 (#11321)
  * chore(deps): Bump go.mongodb.org/mongo-driver from 1.9.0 to 1.9.1 (#11320)
  * chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/dynamodb (#11328)
  * test: add coveralls coverage to master (#11256)
  * chore: make apt-get instructions consistent and add GPG fingerprint (#11326)
  * chore(deps): Bump github.com/go-logfmt/logfmt from 0.5.0 to 0.5.1 (#11299)
  * chore(deps): Bump k8s.io/client-go from 0.23.3 to 0.24.1 (#11223)
  * chore(deps): Bump google.golang.org/grpc from 1.46.2 to 1.47.0 (#11318)
  * chore(deps): Bump github.com/aws/aws-sdk-go-v2/credentials from 1.12.2 to 1.12.5 (#11297)
  * test: mark integration tests correctly (#11317)
  * test: update wait for statement for postgres (#11309)
  * chore: Remove prefix to use the default `chore(deps)` (#11315)
  * docs: explain directly connecting to mongo node (#11314)
  * fix: Prevent concurrent map writes to c.UnusedFields (#11311)
  * feat: Make the command "config" a subcommand (#11282)
  * feat: add default appType as config option to groundwork output (#11300)
  * fix(parsers/xpath): Reduce debug messages when empty selection is allowed (#11302)
  * feat(inputs.x509_cert): add smtp protocol (#11271)
  * fix: bump cloud.google.com/go/monitoring from 1.2.0 to 1.5.0 (#11295)
  * fix: Remove all rebase logic from CI (#11293)
  * fix: Don't rebase on master when building packages (#11291)</changelog>
  <changelog author="jkowalczyk@suse.com" date="1664884801">- Update to version 1.24.1:
  * fix(parsers.csv): Remove direct checks for the parser type (#11825)
  * fix(inputs.ntpq): Handle pools with "-" when (#11827)
  * docs: update customization docs (#11822)
  * fix(parsers): Unwrap parser and remove some special handling (#11826)
  * fix: Enable global confirmation for installing mingw (#11835)
  * fix(parsers): Memory leak for plugins using ParserFunc. (#11815)
  * fix(inputs.modbus): Do not fail if a single slave reports errors (#11785)
  * fix(parsers.xpath): Add array index when expanding names. (#11781)
  * fix(inputs.ceph): Modernize Ceph input plugin metrics (#10797)
  * docs: Update etc/telegraf.conf and etc/telegraf_windows.conf (#11800)
  * chore(deps): Bump cloud.google.com/go/bigquery from 1.33.0 to 1.40.0 (#11796)
  * chore(deps): Bump github.com/wavefronthq/wavefront-sdk-go (#11799)
  * docs: Update etc/telegraf.conf and etc/telegraf_windows.conf (#11798)
  * chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/ec2 (#11789)
  * docs: Remove warning not to remove go:embed (#11797)
  * fix: Clear error message when provided config is not a text file (#11787)
  * chore(deps): Bump github.com/urfave/cli/v2 from 2.14.1 to 2.16.3 (#11794)
  * chore(deps): Bump cloud.google.com/go/pubsub from 1.24.0 to 1.25.1 (#11788)
  * docs: Update etc/telegraf.conf and etc/telegraf_windows.conf (#11792)
  * chore: Run amd64 package on master so config is generated (#11790)
  * feat(processors.parser): Add option to parse tags (#11228)</changelog>
  <changelog author="jkowalczyk@suse.com" date="1664884802">- Update to version 1.24.2:
  * fix(parser.xpath): Handle floating-point times correctly (#11875)
  * fix(cli): Support old style of filtering sample configs (#11896)
  * chore: update github.com/shirou/gopsutil from v3.22.8 to v3.22.9 (#11923)
  * fix(inputs.influxdb_listener): error on invalid precision (#11866)
  * docs: Ran `make docs` (#11914)
  * docs(inputs.opcua): fix typo (#11897)
  * chore(lint): Removed deprecated varcheck linter (#11910)
  * docs: Update etc/telegraf.conf and etc/telegraf_windows.conf (#11885)
  * chore(deps): github.com/docker/distribution from v2.7.1 ti v2.8.1 (#11893)
  * chore(deps): Bump github.com/rabbitmq/amqp091-go from 1.4.0 to 1.5.0 (#11891)
  * chore(deps): Bump github.com/aws/smithy-go from 1.13.2 to 1.13.3 (#11890)
  * chore(deps): Bump go.mongodb.org/mongo-driver from 1.10.1 to 1.10.2 (#11887)
  * chore(processors): Convert processors to `ParserPlugin`s (#11600)
  * chore(deps): Replace go-ping by pro-bing (#11836)
  * chore(deps): Bump github.com/nats-io/nats.go from 1.16.0 to 1.17.0 (#11839)
  * fix(common.kafka): Enable TLS in Kafka plugins without custom config (#11519)
  * docs(inputs.cpu): explain macos cpu support requires cgo (#11883)
  * fix(inputs.mqtt_consumer): rework connection and message tracking (#10696)
  * docs: Update etc/telegraf.conf and etc/telegraf_windows.conf (#11881)
  * fix(inputs.internet_speed): rename enable_file_download to match upstream intent (#11877)
  * build: github Workflows security hardening (#11843)
  * docs: Update etc/telegraf.conf and etc/telegraf_windows.conf (#11859)
  * fix: Update dependencies for OpenBSD support (#11861)
  * chore: Remove deprecated build tags (#11867)
  * fix(inputs.mongodb): actually start plugin correctly (#11849)
  * fix: re-allow specifying the influx parser type (#11806)
  * chore: update github.com/jackc/pgx/v4 from v4.17.0 to v4.17.1 (#11858)
  * chore: update github.com/lxc/lxd to latest (#11848)
  * chore(deps): Bump github.com/aerospike/aerospike-client-go/v5 from 5.9.0 to 5.10.0 (#11844)
  * chore: remove deprecated io/ioutils (#11678)
  * fix(internal.ethtool): avoid internal name conflict with aws (#11696)
  * docs(inputs.nvidia_smi): Example of how to enable nvidia-smi via docker compose (#11833)
  * chore(deps): Bump k8s.io/apimachinery from 0.25.0 to 0.25.1 (#11840)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1664884803">- Add _constraints minimum disk 4G to avoid build failures</changelog>
  <changelog author="jkowalczyk@suse.com" date="1667476800">- Update to version 1.24.3:
  * Revert "feat: run govulncheck nightly on master branch (#11977)" (#12054)
  * Update build_version.txt for v1.24.3
  * Resolve conflict caused by earlier cherry pick error
  * chore: update to go v1.19.3 (#12142)
  * fix(inputs.directory_monitor): allow cross filesystem directories (#12124)
  * fix(serializers.splunkmetric): provide option to remove event metric tag (#12024)
  * chore(inputs.socket_listener): Reorganize plugin code (#12031)
  * chore: Fix linter findings introduced in last PRs (#12131)
  * chore(deps): bump github.com/nats-io/nats-server/v2 from 2.8.4 to 2.9.4 (#12134)
  * chore(deps): bump cloud.google.com/go/monitoring from 1.5.0 to 1.7.0 (#12135)
  * chore(parsers.xpath): Add correct deprecation tags (#11986)
  * chore: update OpenTelemetry v0.2.30 / v0.63.0 (#12119)
  * docs: ran make docs (#12120)
  * docs(aggregators.derivative): Remove incorrect comment (#12026)
  * docs(serializers.json): specify version of jsonata used (#12117)
  * fix(processors.parser): Keep name of original metric if parser doesn't return one (#12116)
  * docs: add global configuration header (#12107)
  * fix(inputs.modbus): Handle field-measurement definitions correctly on duplicate field check (#12109)
  * test(outputs.graylog): skip tcp/udp tests on windows &amp; darwin (#12110)
  * chore(common.shim): check err of s.writeProcessedMetrics for the linter (#12103)
  * chore: Increase golangci-lint timeout (#12106)
  * chore: shut down plugins gracefully to prevent race (#12102)
  * chore: skip integration test with race (#12100)
  * chore: add kafka round trip integration test using inputs.kafka_consumer and outputs.kafka (#12058)
  * chore(deps): bump github.com/prometheus/client_model from 0.2.0 to 0.3.0 (#12097)
  * chore(deps): bump github.com/gopcua/opcua from 0.3.3 to 0.3.7 (#12095)
  * chore(deps): bump google.golang.org/api from 0.95.0 to 0.100.0 (#12096)
  * chore(deps): bump github.com/aws/aws-sdk-go-v2/service/dynamodb (#12098)
  * feat(tools): Allow to markdown includes for sections (#12075)
  * fix(config): set default parser (#12076)
  * fix(processors): Correctly setup processors (#12081)
  * fix: update systemd unit description (#12093)
  * chore(deps): update modernc.org/libc from v1.20.3 to v1.21.2 (#12090)
  * test(outputs.sql): further wait for clickhouse writes (#12086)
  * test: update integration test occurrences (#12085)
  * fix(agent): panic as tickers slice was off-by-one in size (#12077)
  * test(inputs.mcrouter): add eventually to pause for metrics (#12074)
  * fix: Restore warning on unused config option(s) (#12063)
  * fix(inputs.kafka): switch to sarama's new consumer group rebalance strategy setting (#12064)
  * docs(inputs.http): add use system proxy config option (#12069)
  * fix(inputs.modbus): add slave id to failing connection (#12038)
  * docs(aggregators.starlark): corrected typo mentioning wrong func name (#12066)
  * chore: Resolve deprecated linter issues (#12051)
  * fix(inputs.zookeeper): add the ability to parse floats as floats (#12023)
  * test: add additional checks, waits in integration tests (#12056)
  * chore: Update golangci-lint Go version (#12055)
  * docs(inputs.mongodb): update supported versions (#12048)
  * chore(deps): bump testcontainers-go from 0.13.0 to 0.14.0 and address breaking change (#12039)
  * chore(deps): bump github.com/Shopify/sarama from 1.36.0 to 1.37.2 (#11980)
  * chore(deps): bump github.com/aliyun/alibaba-cloud-sdk-go (#12036)
  * chore(deps): bump github.com/aws/aws-sdk-go-v2/service/kinesis (#12037)
  * chore(deps): Bump cloud.google.com/go/bigquery from 1.40.0 to 1.42.0 (#11937)
  * chore(deps): bump github.com/yuin/goldmark from 1.4.13 to 1.5.2 (#12035)
  * chore(deps): bump github.com/signalfx/golib/v3 from 3.3.45 to 3.3.46 (#12034)
  * feat: run govulncheck nightly on master branch (#11977)
  * chore(deps): bump modernc.org/sqlite from 1.17.3 to 1.19.2 (#12030)
  * chore(deps): bump k8s.io/api from 0.25.2 to 0.25.3 (#12029)
  * chore(deps): bump k8s.io/api from 0.25.0 to 0.25.2 (#12001)
  * docs(inputs.tomcat): clean up fields (#12018)
  * fix(regression): Fixes problem with metrics not exposed by plugins. (#12016)
  * refactor: Prevent import from going the wrong way (#12004)
  * test: add dovecot integration test (#11996)
  * chore: Fix installgo_mac.sh using correct hash (#12002)
  * chore(deps): bump k8s.io/apimachinery from 0.25.1 to 0.25.2 (#11938)
  * chore: resolve linter issues for unhandled-error (#11969)
  * chore: Tool to update Telegraf to use new Go version (#11968)
  * test: add integration test for recovering after invalid data (#11994)
  * fix(inputs.syslog): print error when no error or message given (#11997)
  * chore: resolve linter issues for confusing-naming and confusing-results (#11956)
  * fix(parsers.json_v2): Remove BOM before parsing (#11926)
  * chore: Resolve linter issues for ineffassign, nilerr, gosimple... (#11966)
  * fix(inputs.opcua): Add metric tags to node (#11993)
  * chore(inputs.powerdns): Don't run  flaky test on Windows (#11982)
  * chore(inputs.cloud_pubsub_push): Don't run flaky test on Windows (#11984)
  * chore(ci): Migrate to scheduled pipeline (#11981)
  * chore: Resolve linter issues for plugins/common package (#11964)
  * chore(deps): bump github.com/aws/aws-sdk-go-v2/config (#11979)
  * chore(inputs.socket_listener): Reorganize test to be table-based. (#11970)
  * chore(deps): bump github.com/aws/aws-sdk-go-v2/service/cloudwatch (#11972)
  * docs: Update etc/telegraf.conf and etc/telegraf_windows.conf (#11965)
  * chore: Bump golangci-lint to 1.50.0 (#11957)
  * chore: update OpenTelemetry plugins to latest release (#11943)
  * fix: Setting `enable_tls` has incorrect default value (#11941)
  * chore: update to go1.19.2 (#11940)
  * chore(deps): bump github.com/aws/aws-sdk-go-v2/credentials from 1.12.5 to 1.12.21 (#11936)
  * chore(deps): Update github.com/hashicorp/consul/api from 1.14.0 to 1.15.2 (#11894)
  * chore(deps): update github.com/gofrs/uuid from 4.2.0+incompatible to 4.3.0+incompatible (#11935)
  * fix(inputs.modbus): Improve duplicate field checks (#11912)
  * chore(deps): update github.com/sensu/sensu-go/api/core/v2 from 2.14.0 to 2.15.0 (#11928)
  * chore: Resolve linter issues in config.go and config_test.go (#11929)
  * docs: add libvirt plugin to external input plugins list (#11828)
  * build(rpm): Allow building RPMs cross-OS (#11904)
  * chore(deps): Bump github.com/snowflakedb/gosnowflake from 1.6.2 to 1.6.13 (#11886)</changelog>
</package>
<package pkgid="d3adca69e388d8b7500475361815947f78cb1094772c91914ac13f07a4717c3f" name="telegraf" arch="src">
  <version epoch="0" ver="1.24.3" rel="bp154.2.3.1"/>
  <changelog author="Felix Niederwanger &lt;felix.niederwanger@suse.com&gt;" date="1642766400">- Build-requirement increased to go &gt; 1.17</changelog>
  <changelog author="jkowalczyk@suse.com" date="1650888000">- Update to version 1.21.3:
  * Update license of dependencies file
  * fix: collapsed fields by calling more indepth function (#10430)
  * docs: Update deprecation readme (#10529)
  * chore: update grpc to v1.44.0 (#10525)
  * fix: bump google.golang.org/api from 0.54.0 to 0.65.0 (#10434)
  * fix: typo in docs (#10441)
  * fix: bump github.com/antchfx/xmlquery from 1.3.6 to 1.3.9 (#10507)
  * fix: bump github.com/nsqio/go-nsq from 1.0.8 to 1.1.0 (#10521)
  * fix: bump github.com/prometheus/common from 0.31.1 to 0.32.1 (#10506)
  * fix: ipset crash when command not found (#10474)
  * fix: bump cloud.google.com/go/pubsub from 1.17.0 to 1.17.1 (#10504)
  * fix: bump github.com/influxdata/influxdb-observability/influx2otel from 0.2.8 to 0.2.10 (#10432)
  * fix: Update modbus readme (#10501)
  * Fix: Update README.md (#10500)
  * docs: Fixes for input/sql readme (#10498)
  * fix: graylog readme to use graylog 3 URLs (#10481)
  * fix: add RFC3164 to RFC5424 translation to docs (#10480)
  * fix: add comment to logparser (#10479)
  * chore: Add `openConnections` to enterprise cluster metrics Readme (#10483)
  * fix: remove duplicate addition of fields (#10478)
  * fix(parsers.nagios): nagios parser now uses real error for logging #10472 (#10473)
  * fix: add newline in execd for prometheus parsing (#10463)
  * fix: bump github.com/shirou/gopsutil/v3 from 3.21.10 to 3.21.12 (#10451)
  * fix: do not save cache on i386 builds (#10464)
  * chore: readme escape rpm variables
  * fix: address flaky tests in cookie_test.go and graylog_test.go (#10326)
  * fix: ensure CI tests runs against i386 (#10457)
  * fix: bump github.com/jackc/pgx/v4 from 4.6.0 to 4.14.1 (#10453)
  * fix: bump github.com/Azure/azure-event-hubs-go/v3 from 3.3.13 to 3.3.17 (#10449)
  * fix: bump github.com/gosnmp/gosnmp from 1.33.0 to 1.34.0 (#10450)
  * fix: wavefront_disable_prefix_conversion case missing from missingTomlField func (#10442)
  * fix: bump github.com/hashicorp/consul/api from 1.9.1 to 1.12.0 (#10435)
  * fix: bump github.com/antchfx/jsonquery from 1.1.4 to 1.1.5 (#10433)
  * fix: bump github.com/prometheus/procfs from 0.6.0 to 0.7.3 (#10414)
  * fix: snmp input plugin errors if mibs folder doesn't exist (#10346) (#10354)
  * fix: correctly set ASCII trailer for syslog output (#10393)
  * chore: go mod tidy (#10423)
  * fix: bump github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs from 1.5.2 to 1.12.0 (#10415)
  * fix: bump github.com/kardianos/service from 1.0.0 to 1.2.1 (#10416)
  * fix: ensure http body is empty (#10396)
  * fix: bump github.com/couchbase/go-couchbase from 0.1.0 to 0.1.1 (#10417)
  * fix(json_v2): use raw values for timestamps (#10413)
  * fix: bump github.com/pion/dtls/v2 from 2.0.9 to 2.0.13 (#10418)
  * chore: update mqtt documentation (#10394)
  * fix: update containerd to 1.5.9 (#10402)
  * fix: Fix batching logic with write records, introduce concurrent requests (#8947)
  * fix(outputs/amqp): Close the last connection when writing error to avoid connection leaks (#10360)
  * fix: cumulative interval start times for stackdriver output (#10097)
  * fix: Make telegraf compile on Windows with golang 1.16.2 (#10246)</changelog>
  <changelog author="jkowalczyk@suse.com" date="1650888001">- Update to version 1.21.4:
  * fix: ensure folders do not get loaded more than once (#10551)
  * docs: update VMWare doc links (#10663)
  * fix: prometheusremotewrite wrong timestamp unit (#10547)
  * docs: override reported OpenSearch version (#10586)
  * fix: bump all go.opentelemetry.io dependencies (#10647)
  * chore: update go to 1.17.7 (#10658)
  * fix: check for nil client before closing in amqp (#10635)
  * fix: timestamp change during execution of json_v2 parser. (#10657)
  * fix: bump github.com/signalfx/golib/v3 from 3.3.38 to 3.3.43 (#10652)
  * fix: bump github.com/aliyun/alibaba-cloud-sdk-go (#10653)
  * fix: incorrect handling of json_v2 timestamp_path (#10618)
  * fix: Revert deprecation of http_listener_v2 (#10648)
  * fix: bump github.com/denisenkom/go-mssqldb from 0.10.0 to 0.12.0 (#10503)
  * fix: bump github.com/gopcua/opcua from 0.2.3 to 0.3.1 (#10626)
  * fix: update go.mod
  * fix: use current time as ecs timestamp (#10636)
  * fix(outputs/azure_data_explorer): Added azureBlob controls to lower RAM usage (#10179)
  * fix: bump github.com/nats-io/nats-server/v2 from 2.6.5 to 2.7.2 (#10638)
  * chore: add -race flag to go tests (#10629)
  * fix: license doc outdated causing CI failure (#10630)
  * fix: bump k8s.io/client-go from 0.22.2 to 0.23.3 (#10589)
  * docs: update quay docs for auth (#10612)
  * chore: allow downgrade of go version in windows script (#10614)
  * chore: update CI go to 1.17.6 (#10611)
  * fix: bump github.com/aws/aws-sdk-go-v2/service/kinesis from 1.6.0 to 1.13.0 (#10601)
  * refactor: use early return pattern (#10591)
  * fix: bump github.com/benbjohnson/clock from 1.1.0 to 1.3.0 (#10588)
  * fix: bump github.com/Azure/azure-kusto-go from 0.5.0 to 0.5.2 (#10598)
  * fix(parsers.json_v2): allow optional paths and handle wrong paths correctly (#10468)
  * fix[elasticsearch output]: add scheme to fix error in sniffing option (#10513)
  * chore: fix typo in bug report template (#10582)
  * style: Add deprecated warning and version to win_perf_counters option (#10579)
  * fix: bump github.com/vmware/govmomi from 0.27.2 to 0.27.3 (#10571)
  * fix: bump github.com/prometheus/client_golang from 1.11.0 to 1.12.1 (#10572)
  * fix: remove signed macOS dotfile artifacts (#10560)
  * fix: bump go.mongodb.org/mongo-driver from 1.7.3 to 1.8.3 (#10564)
  * fix: bump github.com/google/go-cmp from 0.5.6 to 0.5.7 (#10563)
  * fix: bump go.opentelemetry.io/collector/model from 0.39.0 to 0.43.2 (#10562)
  * fix: bump github.com/multiplay/go-ts3 from 1.0.0 to 1.0.1 (#10538)
  * fix: bump cloud.google.com/go/monitoring from 0.2.0 to 1.2.0 (#10454)
  * fix: bump github.com/vmware/govmomi from 0.26.0 to 0.27.2 (#10536)
  * docs: add apt and knot to EXTERNAL_PLUGINS.md (#10552)
  * fix: update docker memory usage calculation (#10491)</changelog>
  <changelog author="jkowalczyk@suse.com" date="1650888002">- Update to version 1.22.0:
  * feat: update etc/telegraf.conf and etc/telegraf_windows.conf (#10843)
  * fix: fix handling of imports in protocol-buffer definitions (#10798)
  * fix: change name of snmp translator setting (#10872)
  * fix: rename consul_metrics -&gt; consul_agent (#10876)
  * fix: consul_metrics input plugin docs (#10873)
  * tests: remove redundant newlines that go 1.18 treats as errors (#10847)
  * fix: Add option to select translator (#10802)
  * feat: new input Hugepages plugin (#10763)
  * fix: update the precision parameter default value (#10814)
  * fix: bump github.com/nats-io/nats-server/v2 from 2.7.3 to 2.7.4 (#10807)
  * feat: add new rtt per op field to nfsclient (#10787)
  * fix(parsers.json_v2): Check if gpath exists and support optional in fields/tags (#10799)
  * fix(inputs.snmp):  use the correct path when evaluating symlink (#10748)
  * fix: bump github.com/Shopify/sarama from 1.29.1 to 1.32.0 (#10772)
  * fix: update parsing logic of config.Duration (#10803)
  * feat: update etc/telegraf.conf and etc/telegraf_windows.conf (#10805)
  * feat(parsers.influx): New influx line protocol via feature flag (#10749)
  * feat: update etc/telegraf.conf and etc/telegraf_windows.conf (#10804)
  * docs: Improve language related to the New Relic license key. (#10796)
  * fix: correctly read ntpq long poll output (#10790)
  * fix(inputs.docker): keep field type of tasks_desired the same (#10711)
  * fix(json_v2): allow multiple optional objects (#10777)
  * feat: update etc/telegraf.conf and etc/telegraf_windows.conf (#10789)
  * docs: update wavefront docs for clearer proxy server use (#10774)
  * feat: update etc/telegraf.conf and etc/telegraf_windows.conf (#10779)
  * feat: HTTP basic auth for webhooks (#9332)
  * docs: update uri scheme for default RavenDB configuration (#10764)
  * feat: update etc/telegraf.conf and etc/telegraf_windows.conf (#10769)
  * fix: sql unsigned settings (#10673)
  * docs: better specify agent precision is integer + unit (#10746)
  * fix: bump github.com/shirou/gopsutil/v3 from 3.21.12 to 3.22.2 (#10758)
  * feat: update etc/telegraf.conf and etc/telegraf_windows.conf (#10760)
  * style: Add deprecation notices to plugin options (#10616)
  * fix: sanitize stasd names (#10466)
  * fix: bump github.com/aws/aws-sdk-go-v2/feature/ec2/imds (#10759)
  * fix: bump github.com/miekg/dns from 1.1.43 to 1.1.46 (#10757)
  * fix: bump github.com/aws/aws-sdk-go-v2/service/dynamodb (#10751)
  * fix: bump github.com/nats-io/nats-server/v2 from 2.7.2 to 2.7.3 (#10752)
  * docs: add value_field_name to value processor (#10740)
  * fix: log err when loading mibs (#10735)
  * docs: add info on Graylog GELF spec (#10745)
  * fix: typo metadata support in csv parser (#10742)
  * feat: update etc/telegraf.conf and etc/telegraf_windows.conf (#10737)
  * feat: Add tag batch-processing to XPath parser (#10585)
  * fix: add push only updated values flag to histogram aggregator (#10515)
  * feat(parsers/csv): Add metadata support to CSV parser plugin (#10083)
  * fix: Revert "fix: error msg for missing env variables in config (#10681)" (#10727)
  * fix: bump github.com/aws/aws-sdk-go-v2/config from 1.8.3 to 1.13.1 (#10720)
  * fix: bump github.com/testcontainers/testcontainers-go (#10728)
  * fix: bump github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs (#10719)
  * fix: bump github.com/aws/aws-sdk-go-v2/feature/ec2/imds (#10721)
  * fix: bump github.com/wavefronthq/wavefront-sdk-go from 0.9.9 to 0.9.10 (#10718)
  * fix: bump github.com/ClickHouse/clickhouse-go from 1.5.1 to 1.5.4 (#10717)
  * fix: Linter fixes for config/config.go (#10710)
  * fix: bump k8s.io/api from 0.23.3 to 0.23.4 (#10713)
  * fix: bump cloud.google.com/go/pubsub from 1.17.1 to 1.18.0 (#10714)
  * fix: bump github.com/newrelic/newrelic-telemetry-sdk-go (#10715)
  * fix: mdstat when sync is less than 10% (#10701)
  * feat: update etc/telegraf.conf and etc/telegraf_windows.conf (#10708)
  * fix: Remove verbose logging from disk input plugin (#10527)
  * feat: Bump github.com/aerospike/aerospike-client-go from 1.27.0 to 5.7.0 (#10604)
  * feat(inputs/memcached): Support client TLS origination to memcached (#10642)
  * feat: socks5 proxy support for websocket (#10672)
  * fix: error msg for missing env variables in config (#10681)
  * fix: include influxdb bucket name in error messages (#10706)
  * fix: openweathermap add feels_like field (#10705)
  * fix: Set NextCheckTime to LastCheckTime to avoid GroundWork to invent a value (#10623)
  * fix: bump github.com/aws/aws-sdk-go-v2/service/dynamodb from 1.5.0 to 1.13.0 (#10692)
  * fix: bump github.com/sensu/sensu-go/api/core/v2 from 2.12.0 to 2.13.0 (#10704)
  * fix: bump github.com/gophercloud/gophercloud from 0.16.0 to 0.24.0 (#10693)
  * fix: bump github.com/jackc/pgx/v4 from 4.14.1 to 4.15.0 (#10702)
  * fix(dedup): Modifying slice while iterating is dangerous (#10684)
  * fix: linter fixes for "import-shadowing: The name '...' shadows an import name" (#10689)
  * fix: bump github.com/aws/aws-sdk-go-v2/service/sts from 1.7.2 to 1.14.0 (#10602)
  * fix: update gosmi from v0.4.3 to v0.4.4 (#10686)
  * feat: update configs (#10676)
  * feat[elastic output]: add elastic pipeline flags (#10505)
  * fix: ensure folders do not get loaded more than once (#10551)
  * docs: update VMWare doc links (#10663)
  * fix: prometheusremotewrite wrong timestamp unit (#10547)
  * feat: update configs (#10662)
  * fix: add graylog toml tags (#10660)
  * feat: add socks5 proxy support for kafka output plugin (#8192)
  * docs: override reported OpenSearch version (#10586)
  * feat: update etc/telegraf.conf and etc/telegraf_windows.conf (#10659)
  * fix: bump all go.opentelemetry.io dependencies (#10647)
  * feat: collection offset implementation (#10545)
  * chore: update go to 1.17.7 (#10658)
  * fix: check for nil client before closing in amqp (#10635)
  * fix: timestamp change during execution of json_v2 parser. (#10657)
  * fix: bump github.com/signalfx/golib/v3 from 3.3.38 to 3.3.43 (#10652)
  * fix: bump github.com/aliyun/alibaba-cloud-sdk-go (#10653)
  * fix: incorrect handling of json_v2 timestamp_path (#10618)
  * feat: gather additional stats from memcached (#10641)
  * feat: update etc/telegraf.conf and etc/telegraf_windows.conf (#10649)
  * fix: Revert deprecation of http_listener_v2 (#10648)
  * fix: bump github.com/denisenkom/go-mssqldb from 0.10.0 to 0.12.0 (#10503)
  * fix: bump github.com/gopcua/opcua from 0.2.3 to 0.3.1 (#10626)
  * fix: use current time as ecs timestamp (#10636)
  * fix: bump github.com/nats-io/nats-server/v2 from 2.6.5 to 2.7.2 (#10638)
  * chore: add -race flag to go tests (#10629)
  * feat: update etc/telegraf.conf and etc/telegraf_windows.conf (#10631)
  * fix: license doc outdated causing CI failure (#10630)
  * fix: bump k8s.io/client-go from 0.22.2 to 0.23.3 (#10589)
  * feat: Implemented support for reading raw values, added tests and doc (#6501)
  * fix: Improve parser tests by using go-cmp/cmp (#10497)
  * feat(mongodb): add FsTotalSize and FsUsedSize informations (#10625)
  * docs: update quay docs for auth (#10612)
  * chore: allow downgrade of go version in windows script (#10614)
  * chore: update CI go to 1.17.6 (#10611)
  * feat: update etc/telegraf.conf and etc/telegraf_windows.conf (#10600)
  * fix(inputs.opcua): add more data to error log (#10465)
  * fix: bump github.com/aws/aws-sdk-go-v2/service/kinesis from 1.6.0 to 1.13.0 (#10601)
  * refactor: use early return pattern (#10591)
  * fix: bump github.com/benbjohnson/clock from 1.1.0 to 1.3.0 (#10588)
  * feat: add dynamic tagging to gnmi plugin (#7484)
  * fix: bump github.com/Azure/azure-kusto-go from 0.5.0 to 0.5.2 (#10598)
  * feat: update etc/telegraf.conf and etc/telegraf_windows.conf (#10584)
  * fix(parsers.json_v2): allow optional paths and handle wrong paths correctly (#10468)
  * docs: add expriation_interval to readme (#10583)
  * feat: aggregator histogram add expiration (#10520)
  * fix[elasticsearch output]: add scheme to fix error in sniffing option (#10513)
  * chore: fix typo in bug report template (#10582)
  * style: Add deprecated warning and version to win_perf_counters option (#10579)
  * feat: Add autorestart and restartdelay flags to Windows service (#10559)
  * fix: Statefull parser handling (#10575)
  * fix: bump github.com/vmware/govmomi from 0.27.2 to 0.27.3 (#10571)
  * fix: bump github.com/prometheus/client_golang from 1.11.0 to 1.12.1 (#10572)
  * fix: remove signed macOS dotfile artifacts (#10560)
  * fix: bump go.mongodb.org/mongo-driver from 1.7.3 to 1.8.3 (#10564)
  * fix: bump github.com/google/go-cmp from 0.5.6 to 0.5.7 (#10563)
  * fix: bump go.opentelemetry.io/collector/model from 0.39.0 to 0.43.2 (#10562)
  * fix: bump github.com/multiplay/go-ts3 from 1.0.0 to 1.0.1 (#10538)
  * fix: bump cloud.google.com/go/monitoring from 0.2.0 to 1.2.0 (#10454)
  * feat: update etc/telegraf.conf and etc/telegraf_windows.conf (#10561)
  * docs: updates readme to add service SID auth and cleans up AAD auth dupe info (#10541)
  * feat: Add caching to internet_speed (#10530)
  * feat: Xtremio input (#9697)
  * feat(inputs.win_perf_counter): allow errors to be ignored (#10535)
  * fix(outputs/azure_data_explorer): Added azureBlob controls to lower RAM usage (#10179)
  * fix: bump github.com/vmware/govmomi from 0.26.0 to 0.27.2 (#10536)
  * docs: add apt and knot to EXTERNAL_PLUGINS.md (#10552)
  * feat: update etc/telegraf.conf and etc/telegraf_windows.conf (#10546)
  * fix: move "Starting Telegraf" log (#10528)
  * fix: update docker memory usage calculation (#10491)
  * feat: Add ClickHouse driver to sql inputs/outputs plugins (#9671)
  * fix: collapsed fields by calling more indepth function (#10430)
  * feat: update etc/telegraf.conf and etc/telegraf_windows.conf (#10533)
  * feat: process group tag for groundwork output plugin (#10499)
  * feat: update etc/telegraf.conf and etc/telegraf_windows.conf (#10532)
  * docs: Update deprecation readme (#10529)
  * feat: add FileVersion and icon to Win exe (#10487)
  * chore: update grpc to v1.44.0 (#10525)
  * fix: bump google.golang.org/api from 0.54.0 to 0.65.0 (#10434)
  * fix: typo in docs (#10441)
  * fix: bump github.com/antchfx/xmlquery from 1.3.6 to 1.3.9 (#10507)
  * fix: bump github.com/nsqio/go-nsq from 1.0.8 to 1.1.0 (#10521)
  * fix: bump github.com/prometheus/common from 0.31.1 to 0.32.1 (#10506)
  * fix: ipset crash when command not found (#10474)
  * fix: bump cloud.google.com/go/pubsub from 1.17.0 to 1.17.1 (#10504)
  * fix: bump github.com/influxdata/influxdb-observability/influx2otel from 0.2.8 to 0.2.10 (#10432)
  * fix: Update modbus readme (#10501)
  * Fix: Update README.md (#10500)
  * docs: Fixes for input/sql readme (#10498)
  * feat: update configs (#10490)
  * fix: graylog readme to use graylog 3 URLs (#10481)
  * fix: add RFC3164 to RFC5424 translation to docs (#10480)
  * fix: add comment to logparser (#10479)
  * chore: Add `openConnections` to enterprise cluster metrics Readme (#10483)
  * fix: remove duplicate addition of fields (#10478)
  * fix(parsers.nagios): nagios parser now uses real error for logging #10472 (#10473)
  * fix: add newline in execd for prometheus parsing (#10463)
  * fix: bump github.com/shirou/gopsutil/v3 from 3.21.10 to 3.21.12 (#10451)
  * fix: do not save cache on i386 builds (#10464)
  * chore: readme escape rpm variables
  * fix: address flaky tests in cookie_test.go and graylog_test.go (#10326)
  * feat: check TLSConfig early to catch missing certificates (#10341)
  * fix: ensure CI tests runs against i386 (#10457)
  * fix: bump github.com/jackc/pgx/v4 from 4.6.0 to 4.14.1 (#10453)
  * fix: bump github.com/Azure/azure-event-hubs-go/v3 from 3.3.13 to 3.3.17 (#10449)
  * fix: bump github.com/gosnmp/gosnmp from 1.33.0 to 1.34.0 (#10450)
  * fix: wavefront_disable_prefix_conversion case missing from missingTomlField func (#10442)
  * fix: bump github.com/hashicorp/consul/api from 1.9.1 to 1.12.0 (#10435)
  * feat: Parser plugin restructuring (#8791)
  * fix: bump github.com/antchfx/jsonquery from 1.1.4 to 1.1.5 (#10433)
  * fix: bump github.com/prometheus/procfs from 0.6.0 to 0.7.3 (#10414)
  * feat: update etc/telegraf.conf and etc/telegraf_windows.conf (#10429)
  * feat: Add noise plugin (#10057)
  * feat: update configs (#10425)
  * fix: Accept non-standard OPC UA OK status by implementing a configurable workaround (#10384)
  * feat: support headers for http plugin with cookie auth (#10404)
  * fix: snmp input plugin errors if mibs folder doesn't exist (#10346) (#10354)
  * fix: correctly set ASCII trailer for syslog output (#10393)
  * feat: update configs (#10424)
  * chore: go mod tidy (#10423)
  * fix: bump github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs from 1.5.2 to 1.12.0 (#10415)
  * fix: bump github.com/kardianos/service from 1.0.0 to 1.2.1 (#10416)
  * fix: ensure http body is empty (#10396)
  * feat: add bearer token support to elasticsearch output (#10399)
  * fix: bump github.com/couchbase/go-couchbase from 0.1.0 to 0.1.1 (#10417)
  * feat: update etc/telegraf.conf and etc/telegraf_windows.conf (#10411)
  * fix(json_v2): use raw values for timestamps (#10413)
  * fix: bump github.com/pion/dtls/v2 from 2.0.9 to 2.0.13 (#10418)
  * chore: update mqtt documentation (#10394)
  * feat: deprecate unused snmp_trap timeout configuration option (#10339)
  * fix: update containerd to 1.5.9 (#10402)
  * feat: update configs (#10400)
  * feat:  add compression to Datadog Output (#9963)
  * feat: update etc/telegraf.conf and etc/telegraf_windows.conf (#10395)
  * fix: re-enable OpenBSD modbus support (#10385)
  * fix: Fix batching logic with write records, introduce concurrent requests (#8947)
  * feat: Add additional stats to bond collector (#10137)
  * fix(outputs/amqp): Close the last connection when writing error to avoid connection leaks (#10360)
  * feat: update docker client API version (#10382)
  * feat: update etc/telegraf.conf and etc/telegraf_windows.conf (#10381)
  * fix: fix missing storage in container with disk plugin (#10318)
  * feat: add systemd notify support (#10340)
  * chore: typos across source code comments (#10361)
  * chore: sql readme with more details on data types (#10378)
  * fix: empty import tzdata for Windows binaries (#10377)
  * feat: update configs (#10374)
  * chore: document deprecation of timeout (#10373)
  * feat: update configs (#10345)
  * feat: add mock input plugin (#9782)
  * chore: use 4 cores on linux systems (#10342)
  * fix: update go-ldap to v3.4.1 (#10343)
  * chore: remove "i386" test job (#10344)
  * fix: update GroundWork SDK and improve logging (#10255)
  * feat: add more functionality to template processor (#10316)
  * chore: run release signing jobs at the same time (#10333)
  * feat: update configs (#10336)
  * feat: update etc/telegraf.conf and etc/telegraf_windows.conf (#10335)
  * feat: add builds for riscv64 (#10262)
  * feat: add consul metrics input plugin (#10258)
  * fix: snmp marshal error (#10322)
  * feat: add exclude_root_certs option to x509_cert plugin (#9822)
  * feat: add option to disable prepared statements for PostgreSQL (#9710)
  * fix: cumulative interval start times for stackdriver output (#10097)
  * feat: add option to skip errors during CSV parsing (#10267)
  * feat: update configs (#10334)
  * feat: socketstat input plugin (#3649)
  * fix: update djherbis/times and fix dependabot (#10332)
  * fix: warning output when running with --test (#10329)
  * feat: update configs (#10325)
  * docs: add note about dpdk and socket availability (#10324)
  * feat: reworked varnish_cache plugin (#9432)
  * chore:  release packaging run in parallel (#10314)
  * fix: update bug template
  * chore: add logs section for bug reports (#10323)
  * fix: do not require networking during tests (#10321)
  * chore: update mac signing job to use latest xcode (#10311)
  * chore: update Go version to 1.17.5 (#10310)
  * feat: update configs (#10319)
  * chore: cleanup go.mod (#10313)
  * feat: add timeout-setting to Graylog-plugin (#10220)
  * feat: Improve error logging on plugin initialization (#10307)
  * fix: Fix panic in logparser due to missing Log. (#10296)
  * fix: panic due to no module (#10303)
  * fix: grab table columns more accurately (#10295)
  * fix: check index before assignment (#10299)
  * feat: adds optional list of non retryable http statuscodes to http output plugin (#10186)
  * fix: panic is no mibs folder is found (#10301)
  * fix: mac signing issue with arm64 (#10293)
  * fix: Update go-sensu to v2.12.0 (#10247)
  * fix: typo in openstack neutron input plugin (newtron) (#10284)
  * fix: Fix panic in parsers due to missing Log for all plugins using SetParserFunc. (#10288)
  * fix: mark TestGatherUDPCert as an integration test (#10279)
  * feat: support darwin arm64 (#10239)
  * feat: update configs (#10275)
  * fix: run gofmt (#10274)
  * fix: run go mod tidy (#10273)
  * fix: inputs.snmp to respect number of retries configured (#10268)
  * feat: add Redis Sentinel input plugin (#10042)
  * fix: flush wavefront output sender on error to clean up broken connections (#10225)
  * feat: Add option to disable Wavefront prefix conversion (#10252)
  * feat: add heap_size_limit field for input.kibana (#10243)
  * fix: use sha256 for RPM digest (#10272)
  * feat: Update underlying KNX library to support new types. (#10263)
  * chore: restart service if it is already running and upgraded via RPM (#9970)
  * feat: update etc/telegraf.conf and etc/telegraf_windows.conf (#10237)
  * fix: Handle duplicate registration of protocol-buffer files gracefully. (#10188)
  * fix(http_listener_v2): fix panic on close (#10132)
  * feat: add Vault input plugin (#10198)
  * feat: support aws managed service for prometheus (#10202)
  * fix: Make telegraf compile on Windows with golang 1.16.2 (#10246)
  * feat: Modbus add per-request tags (#10231)
  * fix: Implement NaN and inf handling for elasticsearch output (#10196)
  * feat: add nomad input plugin (#10106)
  * fix: Print loaded plugins and deprecations for once and test (#10205)
  * fix: eliminate MIB dependency for ifname processor (#10214)
  * feat: Optimize locking for SNMP MIBs loading. (#10206)
  * feat: Add SMART plugin concurrency configuration option, nvme-cli v1.14+ support and lint fixes. (#10150)
  * feat: update configs (#10236)
  * fix(inputs/kube_inventory): set TLS server name config properly (#9975)
  * fix: Sudden close of Telegraf caused by OPC UA input plugin (#10230)
  * fix: bump github.com/eclipse/paho.mqtt.golang from 1.3.0 to 1.3.5 (#9913)
  * fix: json_v2 parser timestamp setting (#10221)
  * fix: ensure graylog spec fields not prefixed with '_' (#10209)
  * docs: remove duplicate links in CONTRIBUTING.md (#10218)
  * fix: pool detection and metrics gathering for ZFS &gt;= 2.1.x (#10099)
  * fix: parallelism fix for ifname processor (#10007)
  * chore: Forbids "log" package only for aggregators, inputs, outputs, parsers and processors (#10191)
  * docs: address documentation gap when running telegraf in k8s (#10215)
  * feat: update etc/telegraf.conf and etc/telegraf_windows.conf (#10211)
  * fix: mqtt topic extracting no longer requires all three fields (#10208)
  * fix: windows service - graceful shutdown of telegraf (#9616)
  * feat: update etc/telegraf.conf and etc/telegraf_windows.conf (#10201)
  * feat: Modbus support multiple slaves (gateway feature) (#9279)
  * fix: Revert unintented corruption of the Makefile from #10200. (#10203)
  * chore: remove triggering update-config bot in CI (#10195)</changelog>
  <changelog author="jkowalczyk@suse.com" date="1650888003">- Update to version 1.22.1:
  * fix: bump gonum.org/v1/gonum from 0.9.3 to 0.11.0 (#10937)
  * fix: bump github.com/golang-jwt/jwt/v4 from 4.2.0 to 4.4.1 (#10906)
  * chore: add actions/setup-go@v2 to linter config (#10935)
  * docs(external.psi): add psi plugin (#10462)
  * fix: Update gopsutil and associated dependencies for improved OpenBSD supp? (#10931)
  * docs: update rpm/deb instructions with stable URLs (#10905)
  * fix: inconsistencies in sql*Requests queries (#10553)
  * fix: default value for logfile rotation interval (#10883)
  * fix: redundant zfs pool tag (#10871)
  * docs: update license of dependencies (#10914)
  * fix: update vsphere info message to debug (#10903)
  * docs: fix contribute button link (#10904)
  * docs: improve documentation around contribution (#10825)
  * chore: set telegraf log as text block in bug reports (#10895)
  * fix: include body in error message (#10866)
  * docs: clarify the k and fields topk params (#10830)
  * chore: remove slow process test (#10856)
  * chore: update slow file rotation tests (#10857)
  * chore: switch HTTP 100 test case values (#10858)
  * chore: fix slow running intel-pmu test (#10859)
  * chore: skip longer/integration tests on -short mode (#10860)
  * chore: remove CircleCI parallelism (#10862)
  * chore: reduce timeouts and sleeps (#10861)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1650888004">- Refresh harden_telegraf.service.patch</changelog>
  <changelog author="jkowalczyk@suse.com" date="1650974400">- Update to version 1.22.2:
  * Update changelog
  * update build version
  * update build version
  * fix: bump github.com/aws/aws-sdk-go-v2/config from 1.13.1 to 1.15.3 (#10998)
  * fix: add mutex to gnmi lookup map (#11008)
  * fix(cmd): Also allow 0 outputs when using test-wait parameter (#11013)
  * fix: allow Makefile to work on Windows (#11015)
  * fix: use sprint to cast to strings in gnmi (#11010)
  * fix: use correct auth token with consul_agent (#11001)
  * fix: add mariadb_dialect to address the MariaDB differences in INNODB_METRICS (#10486)
  * fix: correctly parse various numeric forms (#10923)
  * fix: update go.opentelemetry.io/collector/pdata from v0.48.0 to v0.49.0 (#10984)
  * fix: bump github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs (#10997)
  * fix: bump github.com/aws/aws-sdk-go-v2/credentials from 1.8.0 to 1.11.2 (#10975)
  * fix: update github.com/containerd/containerd from v1.5.9 to v1.5.11 (#10981)
  * fix: bump github.com/miekg/dns from 1.1.46 to 1.1.48 (#10973)
  * fix: ensure aliyuncms metrics accept array, fix discovery (#10850)
  * fix(inputs/aerospike): Statistics query bug (#10930)
  * fix: update github.com/Azure/azure-kusto-go from 0.5.0 to 0.60 (#10966)
  * fix: update github.com/gopcua/opcua from v0.3.1 to v0.3.3 (#10974)
  * fix: bump github.com/aws/aws-sdk-go-v2/service/dynamodb (#10972)
  * fix: bump github.com/xdg/scram from 1.0.3 to 1.0.5 (#10773)
  * fix: bump go.mongodb.org/mongo-driver from 1.8.3 to 1.9.0 (#10971)
  * fix: align the default value for msg size (#10947)
  * fix: update opentelemetry from v0.2.10 to v0.2.17 (#10963)
  * fix: remove overly verbose info message from cisco mdt (#10959)
  * fix: update starlark 7a1108eaa012-&gt;d1966c6b9fcd (#10940)
  * fix: update influxdb_v2 error message (#10958)
  * fix(inputs.prometheus): moved from watcher to informer (#10932)</changelog>
  <changelog author="jkowalczyk@suse.com" date="1651147200">- Update to version 1.22.3:
  * go mod tidy
  * Update changelog
  * update build version
  * chore: increase timeout for darwin packaging (#11041)
  * fix: reduce log level in disk plugin (#10925)
  * fix: use external xpath parser for gnmi (#11024)
  * fix: remove duplicate influxdb listener writes (#10976)
  * chore: go mod tidy (#10983)
  * chore: Update Go to 1.18.1 (#10961)</changelog>
  <changelog author="jkowalczyk@suse.com" date="1652702400">- Update to version 1.22.4:
  * Update changelog
  * update build version
  * fix: bump github.com/showwin/speedtest-go from 1.1.4 to 1.1.5 (#10722)
  * fix(outputs.Wavefront): If no "host" tag is provided, do not add "telegraf.host" tag (#11078)
  * chore: update opentelemetry plugins (#11085)
  * fix(inputs.couchbase): Don't assume metrics will all be of the same length (#11045)
  * fix: do not error when closing statsd network connection (#11043)
  * fix: re-init azure monitor http client on context deadline error (#11030)
  * fix: have telegraf service wait for network up (#11042)</changelog>
  <changelog author="jkowalczyk@suse.com" date="1655121600">- Update to version 1.23.0:
  * fix: Remove all rebase logic from CI (#11293)
  * fix: Don't rebase on master when building packages (#11291)
  * Update changelog for v1.23.0
  * test: add install go for linux, use in integration tests (#11281)
  * fix(inputs/directory_monitor): Add support for multiline file parsing (#11234)
  * chore: Fix readme linter errors for input plugins M-Z (#11274)
  * fix: Always build README-embedder for host-architecture (#11253)
  * feat: Migrate xpath parser to new style (#11218)
  * fix: add missing build constraints for sqlite (#11272)
  * fix: remove full access permissions (#11261)
  * chore: Fix readme linter errors for input plugins E-L (#11214)
  * chore: Fix readme linter errors for input plugins A-D (#10964)
  * fix: update github.com/containerd/containerd from v1.5.11 to v1.5.13 (#11266)
  * fix: bump github.com/tidwall/gjson from 1.10.2 to 1.14.1 (#11264)
  * chore: Fix readme linter errors for processor, aggregator, and parser plugins (#10960)
  * fix: update modernc.org/sqlite from v1.10.8 to v1.17.3 (#11260)
  * docs: add missing word &lt;3 (#11262)
  * feat(intel_powerstat): add uncore frequency metrics (#11254)
  * test: remove restore integration test cache (#11255)
  * test: add circle ci integration testing on PRs (#11246)
  * test: harden running of testcontainer integration tests (#11245)
  * chore: update go from v1.18.1 to v1.18.3 (#11248)
  * chore: rename circleci executor (#11247)
  * chore: upgrade windows circleci size (#11249)
  * fix: re-add event to splunk serializer (#11237)
  * docs: update test-container docs (#11244)
  * test: remove docker-compose.yml test file (#11243)
  * fix: update moby/ipvs dependency from v1.0.1 to v1.0.2 (#11242)
  * feat(inputs.sqlserver): Update query store and latch performance counters (#11216)
  * test: migrate elasticsearch to testcontainers (#11207)
  * chore: Bump apcupds and remove the replacement as issue is fixed upstream. (#11239)
  * test: migrate postgres to testcontainers (#11209)
  * test: migrate mcrouter to test-containers (#11208)
  * test: migrate kafka to testcontainers (#11206)
  * docs: Initial update of integration test docs (#11210)
  * chore: Bump riemann-go-client and remove replacement (#11236)
  * fix: Upgrade xpath and fix code (#11241)
  * feat(inputs.nginx_plus_api): Gather slab metrics (#10448)
  * fix(inputs/modbus): #11105 fix requests starting with an omitted field (#11202)
  * fix: (outputs/sql) table existence cache (#10812)
  * fix: Update sample.conf for prometheus (#11217)
  * fix: bump github.com/nats-io/nats-server/v2 from 2.7.4 to 2.8.4 (#11221)
  * test: enable logging with testcontainers (#11211)
  * chore: update github.com/opencontainers/runc from v1.0.2 to v1.1.2 (#11212)
  * chore: update gopkg.in/yaml.v3 from v3.0.0 to v3.0.1 (#11213)
  * fix(inputs/snmp): switch new Reconnect method to be a value receiver (#11197)
  * test: refactor testcontainer port lookup (#11198)
  * test: actually skip flaky snmp test (#11199)
  * chore: correctly spell embed (#11200)
  * fix: bump go.opentelemetry.io/otel/metric from 0.28.0 to 0.30.0 (#11088)
  * chore: update OpenTelmetry plugins (#11194)
  * docs: remove recommendation for prometheus metric_version=2 (#11158)
  * fix: bump github.com/sensu/sensu-go/api/core/v2 from 2.13.0 to 2.14.0 (#11021)
  * test: migrate zookeeper to test-containers (#11185)
  * fix(plugins/amqp): move from `streadway/amqp` to `rabbitmq/amqp091-go` (#11192)
  * feat: Add constant 'algorithm' to the mock plugin (#11188)
  * fix: redis plugin goroutine leak triggered by auto reload config mechanism (#11143)
  * fix: update golangci-lint from v1.45.2 to v1.46.2 (#11191)
  * fix(inputs/snmp): Reconnect TCP agents if needed (#11163)
  * test: migrate pgbouncer to test-containers (#11186)
  * test: remove rabbitmq container not used (#11175)
  * chore: Embed sample configurations into README for aggregators (#11190)
  * chore: Embed sample configurations into README for processors (#11189)
  * chore: embed sample configurations into README for outputs (#11182)
  * feat: Google API Auth (#11084)
  * test: migrate openldap tests to test-containers (#11169)
  * test: migrate nsq to test containers (#11173)
  * test: migrate opcua to test-containers (#11171)
  * feat: add field key option to set event partition key (#11076)
  * test: migrate aerospike to test-containers (#11177)
  * fix: Convert slab plugin to new sample.conf. (#11181)
  * test: migrate memcached to test-containers (#11176)
  * test: migrate redis to test-containers (#11174)
  * test: migrate mqtt to test containers (#11172)
  * test: migrate nats to test-containers (#11170)
  * test: migrate crate to test-containers code (#11165)
  * chore: Embed sample configurations into README for inputs (#11136)
  * fix: search services file in /etc/services and fall back to /usr/etc/services (#11179)
  * fix: Remove any content type from prometheus accept header (#11082)
  * feat(inputs.cpu): Add tags with core id or physical id to cpus (#11141)
  * chore: add readme linter to CI (#11020)
  * feat(intel_powerstat): add Max Turbo Frequency and introduce improvements (#11035)
  * test: avoid data race in tcp-listener test (#11144)
  * fix: bump github.com/aws/aws-sdk-go-v2/config from 1.15.3 to 1.15.7 (#11166)
  * test: add generic test-container code for re-use, migrate mysql (#11157)
  * feat: add external huebridge input plugin (#11159)
  * fix: Improve slab testing without sudo. (#11151)
  * docs: update review docs (#11147)
  * test: force elasticsearch to index batch data (#11153)
  * test: update mongodb output to use test containers (#11137)
  * test: switch internet speed to enable file download (#11146)
  * fix: doc interval setting for internet speed plugin (#11150)
  * fix(inputs.burrow): Move Dialer to variable and run `make fmt` (#11149)
  * fix: avoid calling sadc with invalid 0 interval (#11140)
  * feat: [inputs/burrow] fill more http transport parameters (#6948)
  * feat: do not error if no nodes found for current config with xpath parser (#11102)
  * feat: add slab metrics input plugin (#11075)
  * fix: use readers over closers in http input (#11083) Refs boo#1203914
  * chore(inputs_a-l): migrate sample configs into separate files (#11132)
  * chore(inputs_m-z): migrate sample configs into separate files (#11133)
  * chore(outputs): migrate sample configs into separate files (#11131)
  * chore(aggregators): migrate sample configs into separate files (#11130)
  * chore(processors): migrate sample configs into separate files (#11125)
  * test: use supported version of elasticsearch (#11111)
  * test: remove unecessary flag in sql input (#11115)
  * fix: elasticsearch output float handling test (#11120)
  * test: remove unused riemann from docker-compose (#11118)
  * fix(parsers/nagios): metrics will always return a supported status co? (#11062)
  * feat: allow other fluentd metrics apart from retry_count, buffer_queu? (#11056)
  * feat(parsers/logfmt): Add tag support (#11060)
  * fix: log instance name in skip warnings (#10995)
  * fix: bump github.com/wavefronthq/wavefront-sdk-go from 0.9.10 to 0.9.11 (#10970)
  * fix: Update gopsutil from v3.22.3 to v3.22.4 to allow for HOST_PROC_MOUNTINFO. (#11107)
  * chore(inputs/file): More clear error messages (#11104)
  * test: add test for mysql gatherGlobalVariables using sql-mock (#10987)
  * feat: Artifactory Webhook Receiver (#10918)
  * docs: fix socket_writer output format link (#11101)
  * fix: check net.Listen() error in tests (#11093)
  * fix: Output erroneous namespace and continue instead of error out (#11069)
  * Update changelog
  * feat: add mount option filtering to disk plugin (#11039)
  * feat(inputs.vsphere): Collect resource pools metrics and add resource pool tag in VM metrics (#10574)
  * docs: note about listsnapshots cause zfs parse failures (#11091)
  * fix: bump github.com/showwin/speedtest-go from 1.1.4 to 1.1.5 (#10722)
  * fix(outputs.Wavefront): If no "host" tag is provided, do not add "telegraf.host" tag (#11078)
  * chore: update opentelemetry plugins (#11085)
  * docs: correct copy-and-paste of udp to tcp (#11080)
  * refactor: replace strings.Replace with strings.ReplaceAll (#11079)
  * feat(exec, execd): add an option to pass a custom environment to their child process (#11049)
  * fix(inputs.couchbase): Don't assume metrics will all be of the same length (#11045)
  * fix: deprecate useless database config option (#11044)
  * fix: do not error when closing statsd network connection (#11043)
  * fix: re-init azure monitor http client on context deadline error (#11030)
  * feat: add influx semantic commits checker, checks only last commit. (#11037)
  * fix: have telegraf service wait for network up (#11042)
  * chore(inputs/disk): add deprecation notice to legacy mountpoints setting (#10948)
  * style: align plugin renaming (#10868)
  * Update changelog
  * fix: datadog count metrics (#10979)
  * feat(outputs.http): Support configuration of `MaxIdleConns` and `MaxIdleConnsPerHost` (#10954)
  * chore: enable linting of shell scripts (#11031)
  * chore: increase timeout for darwin packaging (#11041)
  * fix: reduce log level in disk plugin (#10925)
  * feat: create and push nightly docker images to quay.io (#11000)
  * chore: remove influxdata/validate-semantic-github-messages github workflow (#11036)
  * chore: Adding influx's semantic commit and PR message checker, so we ? (#11009)
  * fix: use external xpath parser for gnmi (#11024)
  * fix: remove duplicate influxdb listener writes (#10976)
  * Update changelog
  * fix: bump github.com/aws/aws-sdk-go-v2/config from 1.13.1 to 1.15.3 (#10998)
  * fix: add mutex to gnmi lookup map (#11008)
  * fix(cmd): Also allow 0 outputs when using test-wait parameter (#11013)
  * fix: allow Makefile to work on Windows (#11015)
  * chore: Fix readme linter errors for output plugins (#10951)
  * fix: use sprint to cast to strings in gnmi (#11010)
  * docs: add openstack metadata external plugin (#10999)
  * fix: use correct auth token with consul_agent (#11001)
  * docs: correct influx parser type setting in README (#11004)
  * fix: add mariadb_dialect to address the MariaDB differences in INNODB_METRICS (#10486)
  * fix: correctly parse various numeric forms (#10923)
  * chore: add readme linter (#10916)
  * chore: update pull request with master when running CI (#10993)
  * docs: add missing slash in mongodb readme (#10994)
  * fix: update go.opentelemetry.io/collector/pdata from v0.48.0 to v0.49.0 (#10984)
  * docs: regex processor only works on strings (#10982)
  * fix: bump github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs (#10997)
  * fix: bump github.com/aws/aws-sdk-go-v2/credentials from 1.8.0 to 1.11.2 (#10975)
  * test: use `T.TempDir` to create temporary test directory (#10988)
  * feat(processor/regex): Add ability to check every tag for regex replace (#10927)
  * chore: go mod tidy (#10983)
  * chore: Update Go to 1.18.1 (#10961)
  * feat(inputs/teamspeak): allow to configure nickname (#10934)
  * fix: update github.com/containerd/containerd from v1.5.9 to v1.5.11 (#10981)
  * feat(inputs/sqlserver): add RecentBackups query (#10567)
  * fix: bump github.com/miekg/dns from 1.1.46 to 1.1.48 (#10973)
  * fix: ensure aliyuncms metrics accept array, fix discovery (#10850)
  * fix(inputs/aerospike): Statistics query bug (#10930)
  * fix: update github.com/Azure/azure-kusto-go from 0.5.0 to 0.60 (#10966)
  * chore: add logging to graylog tests (#10896)
  * chore: remove go generate from CI tests (#10977)
  * fix: update github.com/gopcua/opcua from v0.3.1 to v0.3.3 (#10974)
  * fix: bump github.com/aws/aws-sdk-go-v2/service/dynamodb (#10972)
  * fix: bump github.com/xdg/scram from 1.0.3 to 1.0.5 (#10773)
  * fix: bump go.mongodb.org/mongo-driver from 1.8.3 to 1.9.0 (#10971)
  * fix: align the default value for msg size (#10947)
  * fix: update opentelemetry from v0.2.10 to v0.2.17 (#10963)
  * docs: update sql readme for creating login in windows (#10967)
  * fix: remove overly verbose info message from cisco mdt (#10959)
  * fix: update starlark 7a1108eaa012-&gt;d1966c6b9fcd (#10940)
  * docs: update csv parser metadata descriptions (#10750)
  * style: Add deprecation notice to renamed plugins (#10867)
  * chore(inputs): add descriptions to config in README.md (#10962)
  * feat: migrate input plugins to new sample config format (M-Z) (#10926)
  * fix: update influxdb_v2 error message (#10958)
  * fix(inputs.prometheus): moved from watcher to informer (#10932)
  * feat: migrate input plugins to new sample config format (A-L) (#10924)
  * feat: migrate output plugins to new sample config format (#10910)
  * feat: migrate processor plugins to new sample config format (#10913)
  * feat: migrate aggregator plugins to new sample config format (#10912)
  * Update changelog
  * feat: generate the plugins sample config (#10886)
  * feat(inputs.mongodb): Add metrics about files currently open and currently active data handles (#7896)
  * fix: bump gonum.org/v1/gonum from 0.9.3 to 0.11.0 (#10937)
  * fix: bump github.com/golang-jwt/jwt/v4 from 4.2.0 to 4.4.1 (#10906)
  * chore: add actions/setup-go@v2 to linter config (#10935)
  * docs(external.psi): add psi plugin (#10462)
  * fix: Update gopsutil and associated dependencies for improved OpenBSD supp? (#10931)
  * docs: update rpm/deb instructions with stable URLs (#10905)
  * fix: inconsistencies in sql*Requests queries (#10553)
  * feat: add ANSI color filter for tail input plugin (#10880)
  * feat: (outputs.elasticsearch) Add healthcheck timeout (#10853)
  * feat: In Lustre input plugin, support collecting per-client stats. (#10607)
  * fix: default value for logfile rotation interval (#10883)
  * fix: redundant zfs pool tag (#10871)
  * docs: update license of dependencies (#10914)
  * fix: update vsphere info message to debug (#10903)
  * docs: fix contribute button link (#10904)
  * feat: add fritzbox as external plugin (#10818)
  * docs: improve documentation around contribution (#10825)
  * chore: set telegraf log as text block in bug reports (#10895)
  * fix: include body in error message (#10866)
  * feat: update etc/telegraf.conf and etc/telegraf_windows.conf (#10885)
  * docs: clarify the k and fields topk params (#10830)
  * chore: remove slow process test (#10856)
  * chore: update slow file rotation tests (#10857)
  * chore: switch HTTP 100 test case values (#10858)
  * chore: fix slow running intel-pmu test (#10859)
  * chore: skip longer/integration tests on -short mode (#10860)
  * chore: remove CircleCI parallelism (#10862)
  * chore: reduce timeouts and sleeps (#10861)
  * Update CHANGELOG.md
  * Update build version to 1.23.0
  * Update changelog
  * Update CHANGELOG.md</changelog>
  <changelog author="jkowalczyk@suse.com" date="1657108800">- Update to version 1.23.1:
  * Update changelog for v1.23.1
  * Update build_version.txt for v1.23.1
  * Sync sample.conf into READMEs.
  * Fix xpath config location.
  * docs(inputs.mqtt_consumer): add pivot example to readme (#11195)
  * test: Update wait statement for postgresql_extensible (#11447)
  * docs: add firehose to EXTERNAL_PLUGINS.md (#11450)
  * chore(deps): Bump github.com/prometheus/client_golang (#11437)
  * chore(deps): Bump k8s.io/api from 0.24.1 to 0.24.2 (#11434)
  * chore(deps): Bump github.com/influxdata/influxdb-observability/otel2influx from 0.2.21 to 0.2.22 (#11416)
  * chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs from 1.15.4 to 1.15.8 (#11415)
  * test: exchange confused parameters (expected vs actual) (#11422)
  * fix: Bring back old xpath section names (#11335)
  * chore(deps): Bump github.com/vmware/govmomi from 0.27.3 to 0.28.0 (#11396)
  * chore(deps): Bump github.com/golang-jwt/jwt/v4 from 4.4.1 to 4.4.2 (#11395)
  * fix: Sync back sample.confs for inputs.couchbase and outputs.groundwork. (#11413)
  * fix: resolve jolokia2 panic on null response (#11397)
  * chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/ec2 from 1.1.0 to 1.46.0 (#11382)
  * chore: Remove 'github.com/cisco-ie/nx-telemetry-proto' replacement (#11401)
  * chore: Remove 'github.com/satori/go.uuid' replacement (#11240)
  * chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/kinesis (#11380)
  * chore(deps): Bump cloud.google.com/go/pubsub from 1.22.2 to 1.23.0 (#11394)
  * chore(deps): Bump github.com/Azure/azure-kusto-go from 0.6.0 to 0.7.0 (#11378)
  * chore(deps): Bump cloud.google.com/go/bigquery from 1.8.0 to 1.33.0 (#11379)
  * chore(deps): Bump github.com/jackc/pgx/v4 from 4.15.0 to 4.16.1 (#11346)
  * chore(deps): Bump go.opentelemetry.io/collector/pdata from 0.52.0 to 0.54.0 (#11369)
  * docs: swap bytes sent/recv descriptions in nfsclient (#11376)
  * chore(deps): Bump cloud.google.com/go/pubsub from 1.18.0 to 1.22.2 (#11349)
  * chore(deps): Bump github.com/nats-io/nats.go from 1.15.0 to 1.16.0 (#11339)
  * chore(deps): Bump github.com/dynatrace-oss/dynatrace-metric-utils-go from 0.3.0 to 0.5.0 (#11342)
  * fix: Restore sample configurations broken during initial migration (#11276)
  * fix: don't require listeners to be present in overview (#9315)
  * chore: move agent config into seperate file (#11337)
  * docs: Sync sample.conf for recent features (#11348)
  * chore(deps): Bump github.com/Shopify/sarama from 1.32.0 to 1.34.1 (#11319)
  * chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/timestreamwrite from 1.3.2 to 1.13.6 (#11322)
  * fix: filter out views in mongodb lookup (#11280)
  * chore(deps): Bump github.com/fatih/color from 1.10.0 to 1.13.0 (#11340)
  * chore: fix typo (recieve -&gt; receive) (#11341)
  * chore(deps): Bump google.golang.org/api from 0.74.0 to 0.84.0 (#11338)
  * chore(deps): Bump github.com/gophercloud/gophercloud from 0.24.0 to 0.25.0 (#11321)
  * chore(deps): Bump go.mongodb.org/mongo-driver from 1.9.0 to 1.9.1 (#11320)
  * chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/dynamodb (#11328)
  * test: add coveralls coverage to master (#11256)
  * chore: make apt-get instructions consistent and add GPG fingerprint (#11326)
  * chore(deps): Bump github.com/go-logfmt/logfmt from 0.5.0 to 0.5.1 (#11299)
  * chore(deps): Bump k8s.io/client-go from 0.23.3 to 0.24.1 (#11223)
  * chore(deps): Bump google.golang.org/grpc from 1.46.2 to 1.47.0 (#11318)
  * chore(deps): Bump github.com/aws/aws-sdk-go-v2/credentials from 1.12.2 to 1.12.5 (#11297)
  * test: mark integration tests correctly (#11317)
  * test: update wait for statement for postgres (#11309)
  * docs: explain directly connecting to mongo node (#11314)
  * fix: Prevent concurrent map writes to c.UnusedFields (#11311)
  * fix: bump cloud.google.com/go/monitoring from 1.2.0 to 1.5.0 (#11295)</changelog>
  <changelog author="jkowalczyk@suse.com" date="1657627200">- Update to version 1.23.2:
  * Update changelog for v1.23.2
  * Update build_version.txt for v1.23.2
  * Sync sample.conf and README.md files.
  * docs: Update etc/telegraf.conf and etc/telegraf_windows.conf (#11483)
  * fix: allow 201 for cookies, update header docs (#11472)
  * fix(inputs.snmp): snmp UseUnconnectedUDPSocket when using udp (#10331)
  * docs: Update etc/telegraf.conf and etc/telegraf_windows.conf (#11480)
  * chore(gnmi): Add Metrics heading to README.md (#11476)
  * fix(gnmi): refactor tag-only subs for complex keys (#11011)
  * fix: use bigint for backupsize in sqlserver (#11448)
  * docs: Update etc/telegraf.conf and etc/telegraf_windows.conf (#11463)
  * chore(inputs.socket_listener): Remove parser from init (#11462)
  * fix: Deprecation warnings for non-deprecated packages (#11460)
  * chore(deps): Bump github.com/docker/docker (#11438)
  * docs: Update etc/telegraf.conf and etc/telegraf_windows.conf (#11431)
  * docs: Update etc/telegraf.conf and etc/telegraf_windows.conf (#11419)
  * docs: Update etc/telegraf.conf and etc/telegraf_windows.conf (#11414)
  * docs: Update etc/telegraf.conf and etc/telegraf_windows.conf (#11365)
  * docs: Update etc/telegraf.conf and etc/telegraf_windows.conf (#11351)
  * docs: Update etc/telegraf.conf and etc/telegraf_windows.conf (#11344)
  * chore: Remove prefix to use the default `chore(deps)` (#11315)</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658750400">- Update to version 1.23.3:
  * Update changelog for v1.23.3
  * Update build_version.txt for v1.23.3
  * fix(inputs.snmp_trap): nil map panic when use snmp_trap with netsnmp translator (#11534)
  * fix: add version number to MacOS packages
  * chore: update to go1.18.4 (#11526)
  * fix(inputs.mqtt_consumer):  topic parsing error  when topic having prefix(/) (#11527)
  * fix(inputs.sqlserver): set lower deadlock priority (#11522)
  * fix: use reader over readcloser, regen cookie-jar (#11482)
  * fix: correct init volume gatherer in openstack (#11481)
  * fix: add version number to Mac packages (#11506)
  * fix(parsers.prometheus): histogram infinity bucket must be allways present (#11490) (#11486)
  * docs: Add example output section to HTTP plugin (#11497)
  * docs: explain proxmox user/token and node_name (#11487)
  * chore(deps): Bump github.com/antchfx/jsonquery from 1.1.5 to 1.2.0 (#11461)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1658750401">- Refresh harden_telegraf.service.patch</changelog>
  <changelog author="jkowalczyk@suse.com" date="1660651200">- Update to version 1.23.4:
  * fix: remove bare url in changelog that failed lint
  * fix: update license of dependencies
  * fix: update github.com/mdlayher/netlink to 1.6.0 to fix the build
  * fix: Sync sql output and input build constraints to handle loong64 in go1.19. (#11664)
  * docs: explain PowerShell 5 encoding (#11662)
  * chore: update circle-ci orbs (#11618)
  * docs(inputs.zookeeper): document use of prometheus plugin (#11658)
  * chore(deps): bump github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs (#11653)
  * chore(deps): bump github.com/aws/aws-sdk-go-v2/feature/ec2/imds (#11652)
  * chore(deps): bump github.com/aws/aws-sdk-go-v2/service/ec2 (#11651)
  * chore(deps): bump github.com/antchfx/xmlquery from 1.3.9 to 1.3.12 (#11644)
  * fix: Bump github.com/lxc/lxd to latest git to fix https://github.com/lxc/lxd/issues/10738. (#11647)
  * chore(deps): bump google.golang.org/api from 0.85.0 to 0.91.0 (#11643)
  * chore(deps): Bump github.com/prometheus/client_golang from 1.12.2 to 1.13.0 (#11640)
  * chore(deps): bump github.com/hashicorp/consul/api from 1.12.0 to 1.13.1 (#11641)
  * chore(deps): Bump github.com/emicklei/go-restful from v2.9.5+incompatible to v3.8.0 (#11636)
  * fix(inputs.mongodb): update version check for newer versions (#11635)
  * feat: add coralogix dialect to opentelemetry (#11622)
  * fix(parsers): Linter issues (#11607)
  * chore: workaround for failing "go list -m all" (#11624)
  * chore(deps): bump github.com/sirupsen/logrus from 1.8.1 to 1.9.0 (#11616)
  * chore: Update to go1.18.5 (#11621)
  * docs: Add source tag best practices to the metric schema docs (#11620)
  * chore: Fix support issue template (#11617)
  * fix(inputs.kubernetes): refresh token from file at each read (#11578)
  * chore(deps): Update github.com/Shopify/sarama from 1.34.1 to 1.35.0 (#11603)
  * chore(deps): update k8s.io/apimachinery from 0.24.2 to 0.24.3 (#11602)
  * chore(deps): Update cloud.google.com/go/pubsub from 1.23.0 to 1.24.0 (#11604)
  * chore(deps): Update github.com/BurntSushi/toml from 0.4.1 to 1.2.0 (#11605)
  * chore: Migrate all issue templates to yaml (#11612)
  * docs(inputs.exec): clarify parsing for ints (#11597)
  * fix(outputs): Linter issues (#11595)
  * fix(inputs.kube_inventory): send file location to enable token auto-refresh (#11577)
  * chore: update github.com/harlow/kinesis-consumer (#11599)
  * chore(deps): Bump github.com/signalfx/golib/v3 from 3.3.43 to 3.3.45 (#11598)
  * chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/dynamodb (#11584)
  * chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/kinesis (#11585)
  * chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/cloudwatch (#11586)
  * chore(deps): Bump github.com/Azure/azure-event-hubs-go/v3 (#11590)
  * test: fix openetelemtry test (#11573)
  * fix(inputs): Linter issues (#11576)
  * chore(deps): Bump github.com/pion/dtls/v2 from 2.0.13 to 2.1.5 (#11581)
  * chore(deps): Bump github.com/Azure/go-autorest/autorest/adal (#11583)
  * chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs (#11582)
  * chore(deps): Bump github.com/shirou/gopsutil/v3 from 3.22.4 to 3.22.7 (#11580)
  * fix(inputs.cloudwatch): customizable batch size when querying (#10851)
  * chore(deps): Bump github.com/eclipse/paho.mqtt.golang from 1.3.5 to 1.4.1 (#11347)
  * chore(deps): Bump github.com/vmware/govmomi from 0.28.0 to 0.29.0 (#11568)
  * chore(deps): Bump github.com/karrick/godirwalk from 1.16.1 to 1.17.0 (#11574)
  * chore(deps): Bump github.com/go-ldap/ldap/v3 from 3.4.1 to 3.4.4 (#11569)
  * chore(deps): Update all go.opentelemetry.io dependencies (#11494)
  * chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/ec2 from 1.46.0 to 1.51.0 (#11567)
  * chore(deps): Bump github.com/apache/thrift from 0.15.0 to 0.16.0 (#11565)
  * chore(deps): Bump github.com/testcontainers/testcontainers-go from 0.12.0 to 0.13.0 (#11412)
  * fix: Updating credentials file to not use endpoint_url parameter (#10841)
  * fix(inputs.opcua): return an error with mismatched types (#11539)
  * fix(inputs.stackdriver): Handle when no buckets available (#11556)
  * docs(inputs.mysql): Add link to docs on how to enable mysql's performance schema (#11555)
  * chore: add missing section to kafka_consumer's sample.conf (#11553)
  * docs: add timeout section (#11550)
  * fix(inputs.sqlserver): set lower deadlock priority (#11548)
  * docs(inputs.modbus): README changes regarding request.tags (#11541)
  * docs: run make-docs (#11514)
  * test: do not have leadership election during kafka test (#11404)
  * chore: Update CRLF line endings in agent.conf to LF (#11501)</changelog>
  <changelog author="jkowalczyk@suse.com" date="1664884800">- Update to version 1.24.0:
  * feat(inputs.directory_monitor): Support paths for files_to_ignore and files_to_monitor (#11784)
  * chore(inputs.jolokia2): Move agent and proxy one level up (#11637)
  * fix(outputs.execd): Fixing the execd behavior to not throw error when partially unserializable metrics are written. (#11767)
  * fix: add missing entry json_transformation to missingTomlField (#11779)
  * fix: Do not error out for parsing errors in datadog mode. (#11777)
  * chore: update to go1.19.1 (#11776)
  * fix(inputs.mongodb): add an option to bypass connection errors on start (#11629)
  * feat(inputs.directory_monitor): Traverse sub-directories (#11773)
  * fix(inputs.jolokia2): add optional origin header (#11692)
  * chore(deps): Bump google.golang.org/grpc from 1.48.0 to 1.49.0 (#11746)
  * docs: Add go report badge (#11774)
  * feat(inputs.sqlserver): Improved filtering for active requests (#11709)
  * chore(deps): Bump github.com/Azure/azure-kusto-go from 0.7.0 to 0.8.0 (#11770)
  * docs(external): add hwinfo external plugin (#11757)
  * chore(deps): Bump gonum.org/v1/gonum from 0.11.0 to 0.12.0 (#11764)
  * chore(deps): Bump github.com/urfave/cli/v2 from 2.11.2 to 2.14.1 (#11763)
  * fix: sort labels in prometheusremotewrite serializer (#11755)
  * fix(inputs.opcua): Assign node id correctly (#11723)
  * chore(deps): Bump github.com/aws/aws-sdk-go-v2/feature/ec2/imds (#11747)
  * chore: Rename Telegraf receiver argument from a to t (#11742)
  * chore(deps): Bump k8s.io/client-go from 0.24.3 to 0.25.0 (#11745)
  * chore(deps): Bump github.com/gophercloud/gophercloud (#11744)
  * chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/dynamodb (#11743)
  * chore: update github.com/Shopify/sarama from v1.35 to v1.36 (#11713)
  * chore(deps): Bump github.com/rabbitmq/amqp091-go from 1.3.4 to 1.4.0 (#11699)
  * feat(outputs.postgresql): add Postgresql output (#11672)
  * chore(deps): Bump github.com/tidwall/gjson from 1.14.1 to 1.14.3 (#11721)
  * feat: Migrate to urfave/cli (#11700)
  * chore(deps): Bump github.com/hashicorp/consul/api from 1.13.1 to 1.14.0 (#11717)
  * feat(inputs.linux_cpu): Add plugin to collect CPU metrics on Linux (#8988)
  * chore(deps): Bump github.com/aerospike/aerospike-client-go/v5 (#11716)
  * chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/sts (#11711)
  * chore(deps): Bump github.com/wavefronthq/wavefront-sdk-go (#11710)
  * fix(inputs.sqlserver): fixing wrong filtering for sqlAzureMIRequests and sqlAzureDBRequests (#11701)
  * fix: use os-agnositc systemd detection, remove sysv in RPM packaging (#10570)
  * feat(inputs.mqtt_consumer): Add incoming mqtt message size calculation (#11426)
  * feat: tool to build custom Telegraf builds (#11524)
  * chore: Update golangci-lint (#11705)
  * docs: update ms sql dsn example (#11704)
  * feat(serializers.prometheus): Provide option to reduce payload size by removing HELP from payload (#11690)
  * feat(inputs.sqlserver): Add db name to io stats for MI (#11688)
  * fix: refactor telegraf version (#11656)
  * fix(agent): add flushBatch method (#11615)
  * chore(deps): Bump go.mongodb.org/mongo-driver from 1.9.1 to 1.10.1 (#11676)
  * chore(deps): Bump github.com/aliyun/alibaba-cloud-sdk-go from 1.61.1695 to 1.61.1727 (#11695)
  * fix(inputs.prometheus): plugin run outside k8s cluster error (#11673)
  * chore: only lint changed READMEs (#11677)
  * chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/timestreamwrite (#11679)
  * fix: remove bare url in changelog that failed lint
  * chore: Move aws credentials to plugins/common. (#11681)
  * chore: Use build tags to select plugins (#11654)
  * chore(deps): Bump github.com/urfave/cli/v2 from 2.3.0 to 2.11.2 (#11675)
  * chore(deps): bump github.com/aws/aws-sdk-go-v2/service/ec2 (#11670)
  * chore(deps): Bump github.com/Azure/go-autorest/autorest (#11669)
  * chore(deps): Bump github.com/jackc/pgx/v4 from 4.16.1 to 4.17.0 (#11671)
  * fix: Sync sql output and input build constraints to handle loong64 in go1.19. (#11664)
  * docs: explain PowerShell 5 encoding (#11662)
  * chore: update circle-ci orbs (#11618)
  * docs(inputs.zookeeper): document use of prometheus plugin (#11658)
  * feat(outputs.iotdb): Add new output plugin to support Apache IoTDB (#11557)
  * chore(deps): bump github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs (#11653)
  * chore(deps): bump github.com/aws/aws-sdk-go-v2/feature/ec2/imds (#11652)
  * feat(outputs.amqp): Add proxy support (#11649)
  * chore(deps): bump github.com/aws/aws-sdk-go-v2/service/ec2 (#11651)
  * chore: Markdown fixes for inputs/[a-m]* (#11606)
  * chore(deps): bump github.com/antchfx/xmlquery from 1.3.9 to 1.3.12 (#11644)
  * fix: Bump github.com/lxc/lxd to latest git to fix https://github.com/lxc/lxd/issues/10738. (#11647)
  * chore(deps): bump google.golang.org/api from 0.85.0 to 0.91.0 (#11643)
  * chore(deps): Bump github.com/prometheus/client_golang from 1.12.2 to 1.13.0 (#11640)
  * feat(common.tls): Implement minimum TLS version for clients (#11493)
  * chore(deps): bump github.com/hashicorp/consul/api from 1.12.0 to 1.13.1 (#11641)
  * chore(deps): Bump github.com/emicklei/go-restful from v2.9.5+incompatible to v3.8.0 (#11636)
  * feat: Supervisord input plugin (#9015)
  * chore(parsers.json_v2): Cleanup test by reusing testutil function (#11627)
  * fix(inputs.mongodb): update version check for newer versions (#11635)
  * feat: add coralogix dialect to opentelemetry (#11622)
  * fix(inputs.x509): Multiple sources with non-overlapping DNS entries. (#11613)
  * fix(parsers): Linter issues (#11607)
  * feat (inputs/prometheus): add setting to set custom namespace label name to avoid conflicts (#11538)
  * chore: workaround for failing "go list -m all" (#11624)
  * feat(processors.starlark): Add starlark benchmark for tag-concatenation (#11306)
  * chore(deps): bump github.com/sirupsen/logrus from 1.8.1 to 1.9.0 (#11616)
  * chore: Update to go1.18.5 (#11621)
  * chore: Using Windows, add exe extension to tools (#11608)
  * docs: Add source tag best practices to the metric schema docs (#11620)
  * feat(external): Add nsdp external plugin (#11619)
  * chore: Fix support issue template (#11617)
  * fix(inputs.kubernetes): refresh token from file at each read (#11578)
  * feat(inputs.ntpq): Allow to specify `reach` output format (#11594)
  * chore(deps): Update github.com/Shopify/sarama from 1.34.1 to 1.35.0 (#11603)
  * chore(deps): update k8s.io/apimachinery from 0.24.2 to 0.24.3 (#11602)
  * chore(deps): Update cloud.google.com/go/pubsub from 1.23.0 to 1.24.0 (#11604)
  * chore(deps): Update github.com/BurntSushi/toml from 0.4.1 to 1.2.0 (#11605)
  * chore: Migrate all issue templates to yaml (#11612)
  * docs(inputs.exec): clarify parsing for ints (#11597)
  * fix(outputs): Linter issues (#11595)
  * fix(inputs.kube_inventory): send file location to enable token auto-refresh (#11577)
  * feat(inputs.ntpq): Add possibility to query remote servers (#11592)
  * feat(inputs.openstack): Add "allow_reauth" config option for openstack client (#11572)
  * feat(inputs.ntpq): Add option to specify command flags (#11593)
  * chore: update github.com/harlow/kinesis-consumer (#11599)
  * chore(deps): Bump github.com/signalfx/golib/v3 from 3.3.43 to 3.3.45 (#11598)
  * chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/dynamodb (#11584)
  * chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/kinesis (#11585)
  * chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/cloudwatch (#11586)
  * chore(deps): Bump github.com/Azure/azure-event-hubs-go/v3 (#11590)
  * test: fix openetelemtry test (#11573)
  * fix(inputs): Linter issues (#11576)
  * chore(deps): Bump github.com/pion/dtls/v2 from 2.0.13 to 2.1.5 (#11581)
  * chore(deps): Bump github.com/Azure/go-autorest/autorest/adal (#11583)
  * chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs (#11582)
  * chore(deps): Bump github.com/shirou/gopsutil/v3 from 3.22.4 to 3.22.7 (#11580)
  * fix(outputs.wavefront): update wavefront sdk and use non-deprecated APIs (#11560)
  * chore(inputs.ntpq): Cleanup existing plugin (#11575)
  * fix(inputs.cloudwatch): customizable batch size when querying (#10851)
  * chore(deps): Bump github.com/eclipse/paho.mqtt.golang from 1.3.5 to 1.4.1 (#11347)
  * chore(deps): Bump github.com/vmware/govmomi from 0.28.0 to 0.29.0 (#11568)
  * chore(deps): Bump github.com/karrick/godirwalk from 1.16.1 to 1.17.0 (#11574)
  * chore(deps): Bump github.com/go-ldap/ldap/v3 from 3.4.1 to 3.4.4 (#11569)
  * chore(deps): Update all go.opentelemetry.io dependencies (#11494)
  * chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/ec2 from 1.46.0 to 1.51.0 (#11567)
  * chore(deps): Bump github.com/apache/thrift from 0.15.0 to 0.16.0 (#11565)
  * chore(deps): Bump github.com/testcontainers/testcontainers-go from 0.12.0 to 0.13.0 (#11412)
  * feat(outputs.sql): Add settings for go sql.DB settings (#11551)
  * fix: Updating credentials file to not use endpoint_url parameter (#10841)
  * fix: Remove shell execution for license-checker. (#11563)
  * chore: More parser cleanup (#11532)
  * feat: Add license checking tool (#11398)
  * feat(parsers.xpath): Add support for returning underlying data-types (#11558)
  * fix(inputs.opcua): return an error with mismatched types (#11539)
  * feat(output.mqtt): Add support for MQTT protocol version 5 (#11284)
  * fix(inputs.stackdriver): Handle when no buckets available (#11556)
  * docs(inputs.mysql): Add link to docs on how to enable mysql's performance schema (#11555)
  * chore: add missing section to kafka_consumer's sample.conf (#11553)
  * docs: add timeout section (#11550)
  * fix(inputs.sqlserver): set lower deadlock priority (#11548)
  * feat(inputs.kafka_consumer): Option to set default fetch message bytes (#11220)
  * docs(inputs.modbus): README changes regarding request.tags (#11541)
  * feat(outputs.graphite): Retry connecting to servers with failed send attempts (#11439)
  * feat(inputs.statsd): add median timing calculation to statsd input plugin (#11518)
  * fix(inputs.snmp_trap): nil map panic when use snmp_trap with netsnmp translator (#11534)
  * feat(parsers.json): Allow JSONata based transformations in JSON serializer (#11251)
  * fix: Add version number to MacOS packages (#11512)
  * feat(inputs.syslog): log remote host as source tag (#9440)
  * feat(outputs.groundwork): Improve metric parsing to extend output (#11443)
  * feat: added metrics for member and replica-set avg health of MongoDB  (#11516)
  * feat(outputs.redistimeseries): Add integration test (#11529)
  * chore: update to go1.18.4 (#11526)
  * fix(inputs.mqtt_consumer):  topic parsing error  when topic having prefix(/) (#11527)
  * fix(inputs.sqlserver): set lower deadlock priority (#11522)
  * fix: make docs + go.mod cleanup post-redis merge (#11521)
  * feat: Add RedisTimeSeries plugin (#11054)
  * docs: run make-docs (#11514)
  * feat(inputs.cisco_telemetry_mdt): Add GRPC Keepalive/timeout config options (#11458)
  * fix: use reader over readcloser, regen cookie-jar (#11482)
  * fix: correct init volume gatherer in openstack (#11481)
  * feat: Nats Jetstream consumer add simple support for jetstream subjects (#11373)
  * Revert "fix: add version number to Mac packages (#11506)" (#11510)
  * fix: add version number to Mac packages (#11506)
  * fix(parsers.prometheus): histogram infinity bucket must be allways present (#11490) (#11486)
  * feat(inputs.modbus): Error out on requests with no fields defined. (#11469)
  * test: do not have leadership election during kafka test (#11404)
  * docs: Add example output section to HTTP plugin (#11497)
  * chore: cleanup go.mod and dependency licences (#11503)
  * feat: add Stomp (Active MQ) output plugin (#7995)
  * chore: Update CRLF line endings in agent.conf to LF (#11501)
  * feat: add proxy support for outputs/cloudwatch (#11399)
  * docs: explain proxmox user/token and node_name (#11487)
  * chore: Check for readme changes in each PR (#11495)
  * chore: Skip building artifacts on master branch (#11465)
  * docs: Update etc/telegraf.conf and etc/telegraf_windows.conf (#11496)
  * fix: Backport sync sample.conf and README.md files (#11489)
  * feat(inputs.smart): Collect SSD endurance information where available in smartctl (#11391)
  * chore(deps): Bump github.com/antchfx/jsonquery from 1.1.5 to 1.2.0 (#11461)
  * feat(inputs.logstash): Record number of failures (#9185)
  * docs: Update etc/telegraf.conf and etc/telegraf_windows.conf (#11483)
  * fix: allow 201 for cookies, update header docs (#11472)
  * fix(inputs.snmp): snmp UseUnconnectedUDPSocket when using udp (#10331)
  * docs: Update etc/telegraf.conf and etc/telegraf_windows.conf (#11480)
  * fix(inputs.upsd): Move to new sample.conf style (#11471)
  * feat(rabbitmq): add support for head_message_timestamp metric (#11475)
  * fix: Update prometheusremotewrite parser to be a new style parser plugin (#11456)
  * chore(gnmi): Add Metrics heading to README.md (#11476)
  * fix(gnmi): refactor tag-only subs for complex keys (#11011)
  * chore: sign nightly artifacts to detect issues before release (#11464)
  * feat(inputs.nginx_plus_api): Gather limit_reqs metrics (#10874)
  * test: ignore return code on check-update (#11445)
  * fix: use bigint for backupsize in sqlserver (#11448)
  * feat: Migrate influx and influx_upstream parsers to new style (#11432)
  * docs: Update etc/telegraf.conf and etc/telegraf_windows.conf (#11463)
  * chore(inputs.socket_listener): Remove parser from init (#11462)
  * feat(input): add upsd implementation (#9890)
  * fix: Deprecation warnings for non-deprecated packages (#11460)
  * chore(deps): Bump github.com/docker/docker (#11438)
  * fix: Update prometheus parser to be a new style parser plugin (#11440)
  * docs(inputs.mqtt_consumer): add pivot example to readme (#11195)
  * test: Update wait statement for postgresql_extensible (#11447)
  * docs: add firehose to EXTERNAL_PLUGINS.md (#11450)
  * chore(deps): Bump github.com/prometheus/client_golang (#11437)
  * chore(deps): Bump k8s.io/api from 0.24.1 to 0.24.2 (#11434)
  * feat: Migrate nagios parser to new style (#11402)
  * fix: add reset-mode flag for CSV parser (#11288)
  * docs: Update etc/telegraf.conf and etc/telegraf_windows.conf (#11431)
  * feat: adding aws metric streams input plugin (#11233)
  * test: run check-update on dnf/yum (#11430)
  * chore(deps): Bump github.com/influxdata/influxdb-observability/otel2influx from 0.2.21 to 0.2.22 (#11416)
  * feat: migrate grok to new parser style (#11408)
  * feat: Migrate dropwizard parser to new style (#11371)
  * chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs from 1.15.4 to 1.15.8 (#11415)
  * test: exchange confused parameters (expected vs actual) (#11422)
  * feat: Migrate logfmt parser to new style (#11366)
  * fix: Bring back old xpath section names (#11335)
  * feat: Migrate graphite parser to new style (#11405)
  * feat: migrate value parser to new style (#11407)
  * docs: Update etc/telegraf.conf and etc/telegraf_windows.conf (#11419)
  * feat(outputs/wavefront): make maximum http batch size configurable (#11201)
  * feat: migrate form_urlencoded parser to new style (#11381)
  * chore: move printing of sample config file out of config.go (#11409)
  * chore(deps): Bump github.com/vmware/govmomi from 0.27.3 to 0.28.0 (#11396)
  * chore(deps): Bump github.com/golang-jwt/jwt/v4 from 4.4.1 to 4.4.2 (#11395)
  * docs: Update etc/telegraf.conf and etc/telegraf_windows.conf (#11414)
  * fix: Sync back sample.confs for inputs.couchbase and outputs.groundwork. (#11413)
  * fix: resolve jolokia2 panic on null response (#11397)
  * test: add nightly package testing to amd64/linux (#11377)
  * chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/ec2 from 1.1.0 to 1.46.0 (#11382)
  * chore: Remove 'github.com/cisco-ie/nx-telemetry-proto' replacement (#11401)
  * chore: Remove 'github.com/satori/go.uuid' replacement (#11240)
  * chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/kinesis (#11380)
  * chore(deps): Bump cloud.google.com/go/pubsub from 1.22.2 to 1.23.0 (#11394)
  * feat: Migrate collectd parser to new style (#11367)
  * feat: allow collecting node-level metrics for Couchbase buckets (#9717)
  * feat: migrate wavefront parser to new style (#11374)
  * chore(deps): Bump github.com/Azure/azure-kusto-go from 0.6.0 to 0.7.0 (#11378)
  * chore(deps): Bump cloud.google.com/go/bigquery from 1.8.0 to 1.33.0 (#11379)
  * chore(deps): Bump github.com/jackc/pgx/v4 from 4.15.0 to 4.16.1 (#11346)
  * chore(deps): Bump go.opentelemetry.io/collector/pdata from 0.52.0 to 0.54.0 (#11369)
  * docs: swap bytes sent/recv descriptions in nfsclient (#11376)
  * chore(deps): Bump cloud.google.com/go/pubsub from 1.18.0 to 1.22.2 (#11349)
  * chore(deps): Bump github.com/nats-io/nats.go from 1.15.0 to 1.16.0 (#11339)
  * chore(deps): Bump github.com/dynatrace-oss/dynatrace-metric-utils-go from 0.3.0 to 0.5.0 (#11342)
  * docs: Update etc/telegraf.conf and etc/telegraf_windows.conf (#11365)
  * feat: Migrate json_v2 parser to new style (#11343)
  * fix: Restore sample configurations broken during initial migration (#11276)
  * feat: Add CSV serializer (#11307)
  * fix: don't require listeners to be present in overview (#9315)
  * docs: Update etc/telegraf.conf and etc/telegraf_windows.conf (#11351)
  * feat: Migrate json parser to new style (#11226)
  * chore: move agent config into seperate file (#11337)
  * docs: Sync sample.conf for recent features (#11348)
  * chore(deps): Bump github.com/Shopify/sarama from 1.32.0 to 1.34.1 (#11319)
  * feat(x509_cert): add proxy support (#9319)
  * feat(redis): add Redis 6 ACL auth support (#9333)
  * docs: Update etc/telegraf.conf and etc/telegraf_windows.conf (#11344)
  * chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/timestreamwrite from 1.3.2 to 1.13.6 (#11322)
  * fix: filter out views in mongodb lookup (#11280)
  * chore(deps): Bump github.com/fatih/color from 1.10.0 to 1.13.0 (#11340)
  * chore: fix typo (recieve -&gt; receive) (#11341)
  * chore(deps): Bump google.golang.org/api from 0.74.0 to 0.84.0 (#11338)
  * chore(deps): Bump github.com/gophercloud/gophercloud from 0.24.0 to 0.25.0 (#11321)
  * chore(deps): Bump go.mongodb.org/mongo-driver from 1.9.0 to 1.9.1 (#11320)
  * chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/dynamodb (#11328)
  * test: add coveralls coverage to master (#11256)
  * chore: make apt-get instructions consistent and add GPG fingerprint (#11326)
  * chore(deps): Bump github.com/go-logfmt/logfmt from 0.5.0 to 0.5.1 (#11299)
  * chore(deps): Bump k8s.io/client-go from 0.23.3 to 0.24.1 (#11223)
  * chore(deps): Bump google.golang.org/grpc from 1.46.2 to 1.47.0 (#11318)
  * chore(deps): Bump github.com/aws/aws-sdk-go-v2/credentials from 1.12.2 to 1.12.5 (#11297)
  * test: mark integration tests correctly (#11317)
  * test: update wait for statement for postgres (#11309)
  * chore: Remove prefix to use the default `chore(deps)` (#11315)
  * docs: explain directly connecting to mongo node (#11314)
  * fix: Prevent concurrent map writes to c.UnusedFields (#11311)
  * feat: Make the command "config" a subcommand (#11282)
  * feat: add default appType as config option to groundwork output (#11300)
  * fix(parsers/xpath): Reduce debug messages when empty selection is allowed (#11302)
  * feat(inputs.x509_cert): add smtp protocol (#11271)
  * fix: bump cloud.google.com/go/monitoring from 1.2.0 to 1.5.0 (#11295)
  * fix: Remove all rebase logic from CI (#11293)
  * fix: Don't rebase on master when building packages (#11291)</changelog>
  <changelog author="jkowalczyk@suse.com" date="1664884801">- Update to version 1.24.1:
  * fix(parsers.csv): Remove direct checks for the parser type (#11825)
  * fix(inputs.ntpq): Handle pools with "-" when (#11827)
  * docs: update customization docs (#11822)
  * fix(parsers): Unwrap parser and remove some special handling (#11826)
  * fix: Enable global confirmation for installing mingw (#11835)
  * fix(parsers): Memory leak for plugins using ParserFunc. (#11815)
  * fix(inputs.modbus): Do not fail if a single slave reports errors (#11785)
  * fix(parsers.xpath): Add array index when expanding names. (#11781)
  * fix(inputs.ceph): Modernize Ceph input plugin metrics (#10797)
  * docs: Update etc/telegraf.conf and etc/telegraf_windows.conf (#11800)
  * chore(deps): Bump cloud.google.com/go/bigquery from 1.33.0 to 1.40.0 (#11796)
  * chore(deps): Bump github.com/wavefronthq/wavefront-sdk-go (#11799)
  * docs: Update etc/telegraf.conf and etc/telegraf_windows.conf (#11798)
  * chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/ec2 (#11789)
  * docs: Remove warning not to remove go:embed (#11797)
  * fix: Clear error message when provided config is not a text file (#11787)
  * chore(deps): Bump github.com/urfave/cli/v2 from 2.14.1 to 2.16.3 (#11794)
  * chore(deps): Bump cloud.google.com/go/pubsub from 1.24.0 to 1.25.1 (#11788)
  * docs: Update etc/telegraf.conf and etc/telegraf_windows.conf (#11792)
  * chore: Run amd64 package on master so config is generated (#11790)
  * feat(processors.parser): Add option to parse tags (#11228)</changelog>
  <changelog author="jkowalczyk@suse.com" date="1664884802">- Update to version 1.24.2:
  * fix(parser.xpath): Handle floating-point times correctly (#11875)
  * fix(cli): Support old style of filtering sample configs (#11896)
  * chore: update github.com/shirou/gopsutil from v3.22.8 to v3.22.9 (#11923)
  * fix(inputs.influxdb_listener): error on invalid precision (#11866)
  * docs: Ran `make docs` (#11914)
  * docs(inputs.opcua): fix typo (#11897)
  * chore(lint): Removed deprecated varcheck linter (#11910)
  * docs: Update etc/telegraf.conf and etc/telegraf_windows.conf (#11885)
  * chore(deps): github.com/docker/distribution from v2.7.1 ti v2.8.1 (#11893)
  * chore(deps): Bump github.com/rabbitmq/amqp091-go from 1.4.0 to 1.5.0 (#11891)
  * chore(deps): Bump github.com/aws/smithy-go from 1.13.2 to 1.13.3 (#11890)
  * chore(deps): Bump go.mongodb.org/mongo-driver from 1.10.1 to 1.10.2 (#11887)
  * chore(processors): Convert processors to `ParserPlugin`s (#11600)
  * chore(deps): Replace go-ping by pro-bing (#11836)
  * chore(deps): Bump github.com/nats-io/nats.go from 1.16.0 to 1.17.0 (#11839)
  * fix(common.kafka): Enable TLS in Kafka plugins without custom config (#11519)
  * docs(inputs.cpu): explain macos cpu support requires cgo (#11883)
  * fix(inputs.mqtt_consumer): rework connection and message tracking (#10696)
  * docs: Update etc/telegraf.conf and etc/telegraf_windows.conf (#11881)
  * fix(inputs.internet_speed): rename enable_file_download to match upstream intent (#11877)
  * build: github Workflows security hardening (#11843)
  * docs: Update etc/telegraf.conf and etc/telegraf_windows.conf (#11859)
  * fix: Update dependencies for OpenBSD support (#11861)
  * chore: Remove deprecated build tags (#11867)
  * fix(inputs.mongodb): actually start plugin correctly (#11849)
  * fix: re-allow specifying the influx parser type (#11806)
  * chore: update github.com/jackc/pgx/v4 from v4.17.0 to v4.17.1 (#11858)
  * chore: update github.com/lxc/lxd to latest (#11848)
  * chore(deps): Bump github.com/aerospike/aerospike-client-go/v5 from 5.9.0 to 5.10.0 (#11844)
  * chore: remove deprecated io/ioutils (#11678)
  * fix(internal.ethtool): avoid internal name conflict with aws (#11696)
  * docs(inputs.nvidia_smi): Example of how to enable nvidia-smi via docker compose (#11833)
  * chore(deps): Bump k8s.io/apimachinery from 0.25.0 to 0.25.1 (#11840)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1664884803">- Add _constraints minimum disk 4G to avoid build failures</changelog>
  <changelog author="jkowalczyk@suse.com" date="1667476800">- Update to version 1.24.3:
  * Revert "feat: run govulncheck nightly on master branch (#11977)" (#12054)
  * Update build_version.txt for v1.24.3
  * Resolve conflict caused by earlier cherry pick error
  * chore: update to go v1.19.3 (#12142)
  * fix(inputs.directory_monitor): allow cross filesystem directories (#12124)
  * fix(serializers.splunkmetric): provide option to remove event metric tag (#12024)
  * chore(inputs.socket_listener): Reorganize plugin code (#12031)
  * chore: Fix linter findings introduced in last PRs (#12131)
  * chore(deps): bump github.com/nats-io/nats-server/v2 from 2.8.4 to 2.9.4 (#12134)
  * chore(deps): bump cloud.google.com/go/monitoring from 1.5.0 to 1.7.0 (#12135)
  * chore(parsers.xpath): Add correct deprecation tags (#11986)
  * chore: update OpenTelemetry v0.2.30 / v0.63.0 (#12119)
  * docs: ran make docs (#12120)
  * docs(aggregators.derivative): Remove incorrect comment (#12026)
  * docs(serializers.json): specify version of jsonata used (#12117)
  * fix(processors.parser): Keep name of original metric if parser doesn't return one (#12116)
  * docs: add global configuration header (#12107)
  * fix(inputs.modbus): Handle field-measurement definitions correctly on duplicate field check (#12109)
  * test(outputs.graylog): skip tcp/udp tests on windows &amp; darwin (#12110)
  * chore(common.shim): check err of s.writeProcessedMetrics for the linter (#12103)
  * chore: Increase golangci-lint timeout (#12106)
  * chore: shut down plugins gracefully to prevent race (#12102)
  * chore: skip integration test with race (#12100)
  * chore: add kafka round trip integration test using inputs.kafka_consumer and outputs.kafka (#12058)
  * chore(deps): bump github.com/prometheus/client_model from 0.2.0 to 0.3.0 (#12097)
  * chore(deps): bump github.com/gopcua/opcua from 0.3.3 to 0.3.7 (#12095)
  * chore(deps): bump google.golang.org/api from 0.95.0 to 0.100.0 (#12096)
  * chore(deps): bump github.com/aws/aws-sdk-go-v2/service/dynamodb (#12098)
  * feat(tools): Allow to markdown includes for sections (#12075)
  * fix(config): set default parser (#12076)
  * fix(processors): Correctly setup processors (#12081)
  * fix: update systemd unit description (#12093)
  * chore(deps): update modernc.org/libc from v1.20.3 to v1.21.2 (#12090)
  * test(outputs.sql): further wait for clickhouse writes (#12086)
  * test: update integration test occurrences (#12085)
  * fix(agent): panic as tickers slice was off-by-one in size (#12077)
  * test(inputs.mcrouter): add eventually to pause for metrics (#12074)
  * fix: Restore warning on unused config option(s) (#12063)
  * fix(inputs.kafka): switch to sarama's new consumer group rebalance strategy setting (#12064)
  * docs(inputs.http): add use system proxy config option (#12069)
  * fix(inputs.modbus): add slave id to failing connection (#12038)
  * docs(aggregators.starlark): corrected typo mentioning wrong func name (#12066)
  * chore: Resolve deprecated linter issues (#12051)
  * fix(inputs.zookeeper): add the ability to parse floats as floats (#12023)
  * test: add additional checks, waits in integration tests (#12056)
  * chore: Update golangci-lint Go version (#12055)
  * docs(inputs.mongodb): update supported versions (#12048)
  * chore(deps): bump testcontainers-go from 0.13.0 to 0.14.0 and address breaking change (#12039)
  * chore(deps): bump github.com/Shopify/sarama from 1.36.0 to 1.37.2 (#11980)
  * chore(deps): bump github.com/aliyun/alibaba-cloud-sdk-go (#12036)
  * chore(deps): bump github.com/aws/aws-sdk-go-v2/service/kinesis (#12037)
  * chore(deps): Bump cloud.google.com/go/bigquery from 1.40.0 to 1.42.0 (#11937)
  * chore(deps): bump github.com/yuin/goldmark from 1.4.13 to 1.5.2 (#12035)
  * chore(deps): bump github.com/signalfx/golib/v3 from 3.3.45 to 3.3.46 (#12034)
  * feat: run govulncheck nightly on master branch (#11977)
  * chore(deps): bump modernc.org/sqlite from 1.17.3 to 1.19.2 (#12030)
  * chore(deps): bump k8s.io/api from 0.25.2 to 0.25.3 (#12029)
  * chore(deps): bump k8s.io/api from 0.25.0 to 0.25.2 (#12001)
  * docs(inputs.tomcat): clean up fields (#12018)
  * fix(regression): Fixes problem with metrics not exposed by plugins. (#12016)
  * refactor: Prevent import from going the wrong way (#12004)
  * test: add dovecot integration test (#11996)
  * chore: Fix installgo_mac.sh using correct hash (#12002)
  * chore(deps): bump k8s.io/apimachinery from 0.25.1 to 0.25.2 (#11938)
  * chore: resolve linter issues for unhandled-error (#11969)
  * chore: Tool to update Telegraf to use new Go version (#11968)
  * test: add integration test for recovering after invalid data (#11994)
  * fix(inputs.syslog): print error when no error or message given (#11997)
  * chore: resolve linter issues for confusing-naming and confusing-results (#11956)
  * fix(parsers.json_v2): Remove BOM before parsing (#11926)
  * chore: Resolve linter issues for ineffassign, nilerr, gosimple... (#11966)
  * fix(inputs.opcua): Add metric tags to node (#11993)
  * chore(inputs.powerdns): Don't run  flaky test on Windows (#11982)
  * chore(inputs.cloud_pubsub_push): Don't run flaky test on Windows (#11984)
  * chore(ci): Migrate to scheduled pipeline (#11981)
  * chore: Resolve linter issues for plugins/common package (#11964)
  * chore(deps): bump github.com/aws/aws-sdk-go-v2/config (#11979)
  * chore(inputs.socket_listener): Reorganize test to be table-based. (#11970)
  * chore(deps): bump github.com/aws/aws-sdk-go-v2/service/cloudwatch (#11972)
  * docs: Update etc/telegraf.conf and etc/telegraf_windows.conf (#11965)
  * chore: Bump golangci-lint to 1.50.0 (#11957)
  * chore: update OpenTelemetry plugins to latest release (#11943)
  * fix: Setting `enable_tls` has incorrect default value (#11941)
  * chore: update to go1.19.2 (#11940)
  * chore(deps): bump github.com/aws/aws-sdk-go-v2/credentials from 1.12.5 to 1.12.21 (#11936)
  * chore(deps): Update github.com/hashicorp/consul/api from 1.14.0 to 1.15.2 (#11894)
  * chore(deps): update github.com/gofrs/uuid from 4.2.0+incompatible to 4.3.0+incompatible (#11935)
  * fix(inputs.modbus): Improve duplicate field checks (#11912)
  * chore(deps): update github.com/sensu/sensu-go/api/core/v2 from 2.14.0 to 2.15.0 (#11928)
  * chore: Resolve linter issues in config.go and config_test.go (#11929)
  * docs: add libvirt plugin to external input plugins list (#11828)
  * build(rpm): Allow building RPMs cross-OS (#11904)
  * chore(deps): Bump github.com/snowflakedb/gosnowflake from 1.6.2 to 1.6.13 (#11886)</changelog>
</package>
<package pkgid="04b8cb5086203a3b37501f27f7037e2e813106f73d7d2b4a8e1063f95d3c97b2" name="telegraf" arch="x86_64">
  <version epoch="0" ver="1.24.3" rel="bp154.2.3.1"/>
  <changelog author="Felix Niederwanger &lt;felix.niederwanger@suse.com&gt;" date="1642766400">- Build-requirement increased to go &gt; 1.17</changelog>
  <changelog author="jkowalczyk@suse.com" date="1650888000">- Update to version 1.21.3:
  * Update license of dependencies file
  * fix: collapsed fields by calling more indepth function (#10430)
  * docs: Update deprecation readme (#10529)
  * chore: update grpc to v1.44.0 (#10525)
  * fix: bump google.golang.org/api from 0.54.0 to 0.65.0 (#10434)
  * fix: typo in docs (#10441)
  * fix: bump github.com/antchfx/xmlquery from 1.3.6 to 1.3.9 (#10507)
  * fix: bump github.com/nsqio/go-nsq from 1.0.8 to 1.1.0 (#10521)
  * fix: bump github.com/prometheus/common from 0.31.1 to 0.32.1 (#10506)
  * fix: ipset crash when command not found (#10474)
  * fix: bump cloud.google.com/go/pubsub from 1.17.0 to 1.17.1 (#10504)
  * fix: bump github.com/influxdata/influxdb-observability/influx2otel from 0.2.8 to 0.2.10 (#10432)
  * fix: Update modbus readme (#10501)
  * Fix: Update README.md (#10500)
  * docs: Fixes for input/sql readme (#10498)
  * fix: graylog readme to use graylog 3 URLs (#10481)
  * fix: add RFC3164 to RFC5424 translation to docs (#10480)
  * fix: add comment to logparser (#10479)
  * chore: Add `openConnections` to enterprise cluster metrics Readme (#10483)
  * fix: remove duplicate addition of fields (#10478)
  * fix(parsers.nagios): nagios parser now uses real error for logging #10472 (#10473)
  * fix: add newline in execd for prometheus parsing (#10463)
  * fix: bump github.com/shirou/gopsutil/v3 from 3.21.10 to 3.21.12 (#10451)
  * fix: do not save cache on i386 builds (#10464)
  * chore: readme escape rpm variables
  * fix: address flaky tests in cookie_test.go and graylog_test.go (#10326)
  * fix: ensure CI tests runs against i386 (#10457)
  * fix: bump github.com/jackc/pgx/v4 from 4.6.0 to 4.14.1 (#10453)
  * fix: bump github.com/Azure/azure-event-hubs-go/v3 from 3.3.13 to 3.3.17 (#10449)
  * fix: bump github.com/gosnmp/gosnmp from 1.33.0 to 1.34.0 (#10450)
  * fix: wavefront_disable_prefix_conversion case missing from missingTomlField func (#10442)
  * fix: bump github.com/hashicorp/consul/api from 1.9.1 to 1.12.0 (#10435)
  * fix: bump github.com/antchfx/jsonquery from 1.1.4 to 1.1.5 (#10433)
  * fix: bump github.com/prometheus/procfs from 0.6.0 to 0.7.3 (#10414)
  * fix: snmp input plugin errors if mibs folder doesn't exist (#10346) (#10354)
  * fix: correctly set ASCII trailer for syslog output (#10393)
  * chore: go mod tidy (#10423)
  * fix: bump github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs from 1.5.2 to 1.12.0 (#10415)
  * fix: bump github.com/kardianos/service from 1.0.0 to 1.2.1 (#10416)
  * fix: ensure http body is empty (#10396)
  * fix: bump github.com/couchbase/go-couchbase from 0.1.0 to 0.1.1 (#10417)
  * fix(json_v2): use raw values for timestamps (#10413)
  * fix: bump github.com/pion/dtls/v2 from 2.0.9 to 2.0.13 (#10418)
  * chore: update mqtt documentation (#10394)
  * fix: update containerd to 1.5.9 (#10402)
  * fix: Fix batching logic with write records, introduce concurrent requests (#8947)
  * fix(outputs/amqp): Close the last connection when writing error to avoid connection leaks (#10360)
  * fix: cumulative interval start times for stackdriver output (#10097)
  * fix: Make telegraf compile on Windows with golang 1.16.2 (#10246)</changelog>
  <changelog author="jkowalczyk@suse.com" date="1650888001">- Update to version 1.21.4:
  * fix: ensure folders do not get loaded more than once (#10551)
  * docs: update VMWare doc links (#10663)
  * fix: prometheusremotewrite wrong timestamp unit (#10547)
  * docs: override reported OpenSearch version (#10586)
  * fix: bump all go.opentelemetry.io dependencies (#10647)
  * chore: update go to 1.17.7 (#10658)
  * fix: check for nil client before closing in amqp (#10635)
  * fix: timestamp change during execution of json_v2 parser. (#10657)
  * fix: bump github.com/signalfx/golib/v3 from 3.3.38 to 3.3.43 (#10652)
  * fix: bump github.com/aliyun/alibaba-cloud-sdk-go (#10653)
  * fix: incorrect handling of json_v2 timestamp_path (#10618)
  * fix: Revert deprecation of http_listener_v2 (#10648)
  * fix: bump github.com/denisenkom/go-mssqldb from 0.10.0 to 0.12.0 (#10503)
  * fix: bump github.com/gopcua/opcua from 0.2.3 to 0.3.1 (#10626)
  * fix: update go.mod
  * fix: use current time as ecs timestamp (#10636)
  * fix(outputs/azure_data_explorer): Added azureBlob controls to lower RAM usage (#10179)
  * fix: bump github.com/nats-io/nats-server/v2 from 2.6.5 to 2.7.2 (#10638)
  * chore: add -race flag to go tests (#10629)
  * fix: license doc outdated causing CI failure (#10630)
  * fix: bump k8s.io/client-go from 0.22.2 to 0.23.3 (#10589)
  * docs: update quay docs for auth (#10612)
  * chore: allow downgrade of go version in windows script (#10614)
  * chore: update CI go to 1.17.6 (#10611)
  * fix: bump github.com/aws/aws-sdk-go-v2/service/kinesis from 1.6.0 to 1.13.0 (#10601)
  * refactor: use early return pattern (#10591)
  * fix: bump github.com/benbjohnson/clock from 1.1.0 to 1.3.0 (#10588)
  * fix: bump github.com/Azure/azure-kusto-go from 0.5.0 to 0.5.2 (#10598)
  * fix(parsers.json_v2): allow optional paths and handle wrong paths correctly (#10468)
  * fix[elasticsearch output]: add scheme to fix error in sniffing option (#10513)
  * chore: fix typo in bug report template (#10582)
  * style: Add deprecated warning and version to win_perf_counters option (#10579)
  * fix: bump github.com/vmware/govmomi from 0.27.2 to 0.27.3 (#10571)
  * fix: bump github.com/prometheus/client_golang from 1.11.0 to 1.12.1 (#10572)
  * fix: remove signed macOS dotfile artifacts (#10560)
  * fix: bump go.mongodb.org/mongo-driver from 1.7.3 to 1.8.3 (#10564)
  * fix: bump github.com/google/go-cmp from 0.5.6 to 0.5.7 (#10563)
  * fix: bump go.opentelemetry.io/collector/model from 0.39.0 to 0.43.2 (#10562)
  * fix: bump github.com/multiplay/go-ts3 from 1.0.0 to 1.0.1 (#10538)
  * fix: bump cloud.google.com/go/monitoring from 0.2.0 to 1.2.0 (#10454)
  * fix: bump github.com/vmware/govmomi from 0.26.0 to 0.27.2 (#10536)
  * docs: add apt and knot to EXTERNAL_PLUGINS.md (#10552)
  * fix: update docker memory usage calculation (#10491)</changelog>
  <changelog author="jkowalczyk@suse.com" date="1650888002">- Update to version 1.22.0:
  * feat: update etc/telegraf.conf and etc/telegraf_windows.conf (#10843)
  * fix: fix handling of imports in protocol-buffer definitions (#10798)
  * fix: change name of snmp translator setting (#10872)
  * fix: rename consul_metrics -&gt; consul_agent (#10876)
  * fix: consul_metrics input plugin docs (#10873)
  * tests: remove redundant newlines that go 1.18 treats as errors (#10847)
  * fix: Add option to select translator (#10802)
  * feat: new input Hugepages plugin (#10763)
  * fix: update the precision parameter default value (#10814)
  * fix: bump github.com/nats-io/nats-server/v2 from 2.7.3 to 2.7.4 (#10807)
  * feat: add new rtt per op field to nfsclient (#10787)
  * fix(parsers.json_v2): Check if gpath exists and support optional in fields/tags (#10799)
  * fix(inputs.snmp):  use the correct path when evaluating symlink (#10748)
  * fix: bump github.com/Shopify/sarama from 1.29.1 to 1.32.0 (#10772)
  * fix: update parsing logic of config.Duration (#10803)
  * feat: update etc/telegraf.conf and etc/telegraf_windows.conf (#10805)
  * feat(parsers.influx): New influx line protocol via feature flag (#10749)
  * feat: update etc/telegraf.conf and etc/telegraf_windows.conf (#10804)
  * docs: Improve language related to the New Relic license key. (#10796)
  * fix: correctly read ntpq long poll output (#10790)
  * fix(inputs.docker): keep field type of tasks_desired the same (#10711)
  * fix(json_v2): allow multiple optional objects (#10777)
  * feat: update etc/telegraf.conf and etc/telegraf_windows.conf (#10789)
  * docs: update wavefront docs for clearer proxy server use (#10774)
  * feat: update etc/telegraf.conf and etc/telegraf_windows.conf (#10779)
  * feat: HTTP basic auth for webhooks (#9332)
  * docs: update uri scheme for default RavenDB configuration (#10764)
  * feat: update etc/telegraf.conf and etc/telegraf_windows.conf (#10769)
  * fix: sql unsigned settings (#10673)
  * docs: better specify agent precision is integer + unit (#10746)
  * fix: bump github.com/shirou/gopsutil/v3 from 3.21.12 to 3.22.2 (#10758)
  * feat: update etc/telegraf.conf and etc/telegraf_windows.conf (#10760)
  * style: Add deprecation notices to plugin options (#10616)
  * fix: sanitize stasd names (#10466)
  * fix: bump github.com/aws/aws-sdk-go-v2/feature/ec2/imds (#10759)
  * fix: bump github.com/miekg/dns from 1.1.43 to 1.1.46 (#10757)
  * fix: bump github.com/aws/aws-sdk-go-v2/service/dynamodb (#10751)
  * fix: bump github.com/nats-io/nats-server/v2 from 2.7.2 to 2.7.3 (#10752)
  * docs: add value_field_name to value processor (#10740)
  * fix: log err when loading mibs (#10735)
  * docs: add info on Graylog GELF spec (#10745)
  * fix: typo metadata support in csv parser (#10742)
  * feat: update etc/telegraf.conf and etc/telegraf_windows.conf (#10737)
  * feat: Add tag batch-processing to XPath parser (#10585)
  * fix: add push only updated values flag to histogram aggregator (#10515)
  * feat(parsers/csv): Add metadata support to CSV parser plugin (#10083)
  * fix: Revert "fix: error msg for missing env variables in config (#10681)" (#10727)
  * fix: bump github.com/aws/aws-sdk-go-v2/config from 1.8.3 to 1.13.1 (#10720)
  * fix: bump github.com/testcontainers/testcontainers-go (#10728)
  * fix: bump github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs (#10719)
  * fix: bump github.com/aws/aws-sdk-go-v2/feature/ec2/imds (#10721)
  * fix: bump github.com/wavefronthq/wavefront-sdk-go from 0.9.9 to 0.9.10 (#10718)
  * fix: bump github.com/ClickHouse/clickhouse-go from 1.5.1 to 1.5.4 (#10717)
  * fix: Linter fixes for config/config.go (#10710)
  * fix: bump k8s.io/api from 0.23.3 to 0.23.4 (#10713)
  * fix: bump cloud.google.com/go/pubsub from 1.17.1 to 1.18.0 (#10714)
  * fix: bump github.com/newrelic/newrelic-telemetry-sdk-go (#10715)
  * fix: mdstat when sync is less than 10% (#10701)
  * feat: update etc/telegraf.conf and etc/telegraf_windows.conf (#10708)
  * fix: Remove verbose logging from disk input plugin (#10527)
  * feat: Bump github.com/aerospike/aerospike-client-go from 1.27.0 to 5.7.0 (#10604)
  * feat(inputs/memcached): Support client TLS origination to memcached (#10642)
  * feat: socks5 proxy support for websocket (#10672)
  * fix: error msg for missing env variables in config (#10681)
  * fix: include influxdb bucket name in error messages (#10706)
  * fix: openweathermap add feels_like field (#10705)
  * fix: Set NextCheckTime to LastCheckTime to avoid GroundWork to invent a value (#10623)
  * fix: bump github.com/aws/aws-sdk-go-v2/service/dynamodb from 1.5.0 to 1.13.0 (#10692)
  * fix: bump github.com/sensu/sensu-go/api/core/v2 from 2.12.0 to 2.13.0 (#10704)
  * fix: bump github.com/gophercloud/gophercloud from 0.16.0 to 0.24.0 (#10693)
  * fix: bump github.com/jackc/pgx/v4 from 4.14.1 to 4.15.0 (#10702)
  * fix(dedup): Modifying slice while iterating is dangerous (#10684)
  * fix: linter fixes for "import-shadowing: The name '...' shadows an import name" (#10689)
  * fix: bump github.com/aws/aws-sdk-go-v2/service/sts from 1.7.2 to 1.14.0 (#10602)
  * fix: update gosmi from v0.4.3 to v0.4.4 (#10686)
  * feat: update configs (#10676)
  * feat[elastic output]: add elastic pipeline flags (#10505)
  * fix: ensure folders do not get loaded more than once (#10551)
  * docs: update VMWare doc links (#10663)
  * fix: prometheusremotewrite wrong timestamp unit (#10547)
  * feat: update configs (#10662)
  * fix: add graylog toml tags (#10660)
  * feat: add socks5 proxy support for kafka output plugin (#8192)
  * docs: override reported OpenSearch version (#10586)
  * feat: update etc/telegraf.conf and etc/telegraf_windows.conf (#10659)
  * fix: bump all go.opentelemetry.io dependencies (#10647)
  * feat: collection offset implementation (#10545)
  * chore: update go to 1.17.7 (#10658)
  * fix: check for nil client before closing in amqp (#10635)
  * fix: timestamp change during execution of json_v2 parser. (#10657)
  * fix: bump github.com/signalfx/golib/v3 from 3.3.38 to 3.3.43 (#10652)
  * fix: bump github.com/aliyun/alibaba-cloud-sdk-go (#10653)
  * fix: incorrect handling of json_v2 timestamp_path (#10618)
  * feat: gather additional stats from memcached (#10641)
  * feat: update etc/telegraf.conf and etc/telegraf_windows.conf (#10649)
  * fix: Revert deprecation of http_listener_v2 (#10648)
  * fix: bump github.com/denisenkom/go-mssqldb from 0.10.0 to 0.12.0 (#10503)
  * fix: bump github.com/gopcua/opcua from 0.2.3 to 0.3.1 (#10626)
  * fix: use current time as ecs timestamp (#10636)
  * fix: bump github.com/nats-io/nats-server/v2 from 2.6.5 to 2.7.2 (#10638)
  * chore: add -race flag to go tests (#10629)
  * feat: update etc/telegraf.conf and etc/telegraf_windows.conf (#10631)
  * fix: license doc outdated causing CI failure (#10630)
  * fix: bump k8s.io/client-go from 0.22.2 to 0.23.3 (#10589)
  * feat: Implemented support for reading raw values, added tests and doc (#6501)
  * fix: Improve parser tests by using go-cmp/cmp (#10497)
  * feat(mongodb): add FsTotalSize and FsUsedSize informations (#10625)
  * docs: update quay docs for auth (#10612)
  * chore: allow downgrade of go version in windows script (#10614)
  * chore: update CI go to 1.17.6 (#10611)
  * feat: update etc/telegraf.conf and etc/telegraf_windows.conf (#10600)
  * fix(inputs.opcua): add more data to error log (#10465)
  * fix: bump github.com/aws/aws-sdk-go-v2/service/kinesis from 1.6.0 to 1.13.0 (#10601)
  * refactor: use early return pattern (#10591)
  * fix: bump github.com/benbjohnson/clock from 1.1.0 to 1.3.0 (#10588)
  * feat: add dynamic tagging to gnmi plugin (#7484)
  * fix: bump github.com/Azure/azure-kusto-go from 0.5.0 to 0.5.2 (#10598)
  * feat: update etc/telegraf.conf and etc/telegraf_windows.conf (#10584)
  * fix(parsers.json_v2): allow optional paths and handle wrong paths correctly (#10468)
  * docs: add expriation_interval to readme (#10583)
  * feat: aggregator histogram add expiration (#10520)
  * fix[elasticsearch output]: add scheme to fix error in sniffing option (#10513)
  * chore: fix typo in bug report template (#10582)
  * style: Add deprecated warning and version to win_perf_counters option (#10579)
  * feat: Add autorestart and restartdelay flags to Windows service (#10559)
  * fix: Statefull parser handling (#10575)
  * fix: bump github.com/vmware/govmomi from 0.27.2 to 0.27.3 (#10571)
  * fix: bump github.com/prometheus/client_golang from 1.11.0 to 1.12.1 (#10572)
  * fix: remove signed macOS dotfile artifacts (#10560)
  * fix: bump go.mongodb.org/mongo-driver from 1.7.3 to 1.8.3 (#10564)
  * fix: bump github.com/google/go-cmp from 0.5.6 to 0.5.7 (#10563)
  * fix: bump go.opentelemetry.io/collector/model from 0.39.0 to 0.43.2 (#10562)
  * fix: bump github.com/multiplay/go-ts3 from 1.0.0 to 1.0.1 (#10538)
  * fix: bump cloud.google.com/go/monitoring from 0.2.0 to 1.2.0 (#10454)
  * feat: update etc/telegraf.conf and etc/telegraf_windows.conf (#10561)
  * docs: updates readme to add service SID auth and cleans up AAD auth dupe info (#10541)
  * feat: Add caching to internet_speed (#10530)
  * feat: Xtremio input (#9697)
  * feat(inputs.win_perf_counter): allow errors to be ignored (#10535)
  * fix(outputs/azure_data_explorer): Added azureBlob controls to lower RAM usage (#10179)
  * fix: bump github.com/vmware/govmomi from 0.26.0 to 0.27.2 (#10536)
  * docs: add apt and knot to EXTERNAL_PLUGINS.md (#10552)
  * feat: update etc/telegraf.conf and etc/telegraf_windows.conf (#10546)
  * fix: move "Starting Telegraf" log (#10528)
  * fix: update docker memory usage calculation (#10491)
  * feat: Add ClickHouse driver to sql inputs/outputs plugins (#9671)
  * fix: collapsed fields by calling more indepth function (#10430)
  * feat: update etc/telegraf.conf and etc/telegraf_windows.conf (#10533)
  * feat: process group tag for groundwork output plugin (#10499)
  * feat: update etc/telegraf.conf and etc/telegraf_windows.conf (#10532)
  * docs: Update deprecation readme (#10529)
  * feat: add FileVersion and icon to Win exe (#10487)
  * chore: update grpc to v1.44.0 (#10525)
  * fix: bump google.golang.org/api from 0.54.0 to 0.65.0 (#10434)
  * fix: typo in docs (#10441)
  * fix: bump github.com/antchfx/xmlquery from 1.3.6 to 1.3.9 (#10507)
  * fix: bump github.com/nsqio/go-nsq from 1.0.8 to 1.1.0 (#10521)
  * fix: bump github.com/prometheus/common from 0.31.1 to 0.32.1 (#10506)
  * fix: ipset crash when command not found (#10474)
  * fix: bump cloud.google.com/go/pubsub from 1.17.0 to 1.17.1 (#10504)
  * fix: bump github.com/influxdata/influxdb-observability/influx2otel from 0.2.8 to 0.2.10 (#10432)
  * fix: Update modbus readme (#10501)
  * Fix: Update README.md (#10500)
  * docs: Fixes for input/sql readme (#10498)
  * feat: update configs (#10490)
  * fix: graylog readme to use graylog 3 URLs (#10481)
  * fix: add RFC3164 to RFC5424 translation to docs (#10480)
  * fix: add comment to logparser (#10479)
  * chore: Add `openConnections` to enterprise cluster metrics Readme (#10483)
  * fix: remove duplicate addition of fields (#10478)
  * fix(parsers.nagios): nagios parser now uses real error for logging #10472 (#10473)
  * fix: add newline in execd for prometheus parsing (#10463)
  * fix: bump github.com/shirou/gopsutil/v3 from 3.21.10 to 3.21.12 (#10451)
  * fix: do not save cache on i386 builds (#10464)
  * chore: readme escape rpm variables
  * fix: address flaky tests in cookie_test.go and graylog_test.go (#10326)
  * feat: check TLSConfig early to catch missing certificates (#10341)
  * fix: ensure CI tests runs against i386 (#10457)
  * fix: bump github.com/jackc/pgx/v4 from 4.6.0 to 4.14.1 (#10453)
  * fix: bump github.com/Azure/azure-event-hubs-go/v3 from 3.3.13 to 3.3.17 (#10449)
  * fix: bump github.com/gosnmp/gosnmp from 1.33.0 to 1.34.0 (#10450)
  * fix: wavefront_disable_prefix_conversion case missing from missingTomlField func (#10442)
  * fix: bump github.com/hashicorp/consul/api from 1.9.1 to 1.12.0 (#10435)
  * feat: Parser plugin restructuring (#8791)
  * fix: bump github.com/antchfx/jsonquery from 1.1.4 to 1.1.5 (#10433)
  * fix: bump github.com/prometheus/procfs from 0.6.0 to 0.7.3 (#10414)
  * feat: update etc/telegraf.conf and etc/telegraf_windows.conf (#10429)
  * feat: Add noise plugin (#10057)
  * feat: update configs (#10425)
  * fix: Accept non-standard OPC UA OK status by implementing a configurable workaround (#10384)
  * feat: support headers for http plugin with cookie auth (#10404)
  * fix: snmp input plugin errors if mibs folder doesn't exist (#10346) (#10354)
  * fix: correctly set ASCII trailer for syslog output (#10393)
  * feat: update configs (#10424)
  * chore: go mod tidy (#10423)
  * fix: bump github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs from 1.5.2 to 1.12.0 (#10415)
  * fix: bump github.com/kardianos/service from 1.0.0 to 1.2.1 (#10416)
  * fix: ensure http body is empty (#10396)
  * feat: add bearer token support to elasticsearch output (#10399)
  * fix: bump github.com/couchbase/go-couchbase from 0.1.0 to 0.1.1 (#10417)
  * feat: update etc/telegraf.conf and etc/telegraf_windows.conf (#10411)
  * fix(json_v2): use raw values for timestamps (#10413)
  * fix: bump github.com/pion/dtls/v2 from 2.0.9 to 2.0.13 (#10418)
  * chore: update mqtt documentation (#10394)
  * feat: deprecate unused snmp_trap timeout configuration option (#10339)
  * fix: update containerd to 1.5.9 (#10402)
  * feat: update configs (#10400)
  * feat:  add compression to Datadog Output (#9963)
  * feat: update etc/telegraf.conf and etc/telegraf_windows.conf (#10395)
  * fix: re-enable OpenBSD modbus support (#10385)
  * fix: Fix batching logic with write records, introduce concurrent requests (#8947)
  * feat: Add additional stats to bond collector (#10137)
  * fix(outputs/amqp): Close the last connection when writing error to avoid connection leaks (#10360)
  * feat: update docker client API version (#10382)
  * feat: update etc/telegraf.conf and etc/telegraf_windows.conf (#10381)
  * fix: fix missing storage in container with disk plugin (#10318)
  * feat: add systemd notify support (#10340)
  * chore: typos across source code comments (#10361)
  * chore: sql readme with more details on data types (#10378)
  * fix: empty import tzdata for Windows binaries (#10377)
  * feat: update configs (#10374)
  * chore: document deprecation of timeout (#10373)
  * feat: update configs (#10345)
  * feat: add mock input plugin (#9782)
  * chore: use 4 cores on linux systems (#10342)
  * fix: update go-ldap to v3.4.1 (#10343)
  * chore: remove "i386" test job (#10344)
  * fix: update GroundWork SDK and improve logging (#10255)
  * feat: add more functionality to template processor (#10316)
  * chore: run release signing jobs at the same time (#10333)
  * feat: update configs (#10336)
  * feat: update etc/telegraf.conf and etc/telegraf_windows.conf (#10335)
  * feat: add builds for riscv64 (#10262)
  * feat: add consul metrics input plugin (#10258)
  * fix: snmp marshal error (#10322)
  * feat: add exclude_root_certs option to x509_cert plugin (#9822)
  * feat: add option to disable prepared statements for PostgreSQL (#9710)
  * fix: cumulative interval start times for stackdriver output (#10097)
  * feat: add option to skip errors during CSV parsing (#10267)
  * feat: update configs (#10334)
  * feat: socketstat input plugin (#3649)
  * fix: update djherbis/times and fix dependabot (#10332)
  * fix: warning output when running with --test (#10329)
  * feat: update configs (#10325)
  * docs: add note about dpdk and socket availability (#10324)
  * feat: reworked varnish_cache plugin (#9432)
  * chore:  release packaging run in parallel (#10314)
  * fix: update bug template
  * chore: add logs section for bug reports (#10323)
  * fix: do not require networking during tests (#10321)
  * chore: update mac signing job to use latest xcode (#10311)
  * chore: update Go version to 1.17.5 (#10310)
  * feat: update configs (#10319)
  * chore: cleanup go.mod (#10313)
  * feat: add timeout-setting to Graylog-plugin (#10220)
  * feat: Improve error logging on plugin initialization (#10307)
  * fix: Fix panic in logparser due to missing Log. (#10296)
  * fix: panic due to no module (#10303)
  * fix: grab table columns more accurately (#10295)
  * fix: check index before assignment (#10299)
  * feat: adds optional list of non retryable http statuscodes to http output plugin (#10186)
  * fix: panic is no mibs folder is found (#10301)
  * fix: mac signing issue with arm64 (#10293)
  * fix: Update go-sensu to v2.12.0 (#10247)
  * fix: typo in openstack neutron input plugin (newtron) (#10284)
  * fix: Fix panic in parsers due to missing Log for all plugins using SetParserFunc. (#10288)
  * fix: mark TestGatherUDPCert as an integration test (#10279)
  * feat: support darwin arm64 (#10239)
  * feat: update configs (#10275)
  * fix: run gofmt (#10274)
  * fix: run go mod tidy (#10273)
  * fix: inputs.snmp to respect number of retries configured (#10268)
  * feat: add Redis Sentinel input plugin (#10042)
  * fix: flush wavefront output sender on error to clean up broken connections (#10225)
  * feat: Add option to disable Wavefront prefix conversion (#10252)
  * feat: add heap_size_limit field for input.kibana (#10243)
  * fix: use sha256 for RPM digest (#10272)
  * feat: Update underlying KNX library to support new types. (#10263)
  * chore: restart service if it is already running and upgraded via RPM (#9970)
  * feat: update etc/telegraf.conf and etc/telegraf_windows.conf (#10237)
  * fix: Handle duplicate registration of protocol-buffer files gracefully. (#10188)
  * fix(http_listener_v2): fix panic on close (#10132)
  * feat: add Vault input plugin (#10198)
  * feat: support aws managed service for prometheus (#10202)
  * fix: Make telegraf compile on Windows with golang 1.16.2 (#10246)
  * feat: Modbus add per-request tags (#10231)
  * fix: Implement NaN and inf handling for elasticsearch output (#10196)
  * feat: add nomad input plugin (#10106)
  * fix: Print loaded plugins and deprecations for once and test (#10205)
  * fix: eliminate MIB dependency for ifname processor (#10214)
  * feat: Optimize locking for SNMP MIBs loading. (#10206)
  * feat: Add SMART plugin concurrency configuration option, nvme-cli v1.14+ support and lint fixes. (#10150)
  * feat: update configs (#10236)
  * fix(inputs/kube_inventory): set TLS server name config properly (#9975)
  * fix: Sudden close of Telegraf caused by OPC UA input plugin (#10230)
  * fix: bump github.com/eclipse/paho.mqtt.golang from 1.3.0 to 1.3.5 (#9913)
  * fix: json_v2 parser timestamp setting (#10221)
  * fix: ensure graylog spec fields not prefixed with '_' (#10209)
  * docs: remove duplicate links in CONTRIBUTING.md (#10218)
  * fix: pool detection and metrics gathering for ZFS &gt;= 2.1.x (#10099)
  * fix: parallelism fix for ifname processor (#10007)
  * chore: Forbids "log" package only for aggregators, inputs, outputs, parsers and processors (#10191)
  * docs: address documentation gap when running telegraf in k8s (#10215)
  * feat: update etc/telegraf.conf and etc/telegraf_windows.conf (#10211)
  * fix: mqtt topic extracting no longer requires all three fields (#10208)
  * fix: windows service - graceful shutdown of telegraf (#9616)
  * feat: update etc/telegraf.conf and etc/telegraf_windows.conf (#10201)
  * feat: Modbus support multiple slaves (gateway feature) (#9279)
  * fix: Revert unintented corruption of the Makefile from #10200. (#10203)
  * chore: remove triggering update-config bot in CI (#10195)</changelog>
  <changelog author="jkowalczyk@suse.com" date="1650888003">- Update to version 1.22.1:
  * fix: bump gonum.org/v1/gonum from 0.9.3 to 0.11.0 (#10937)
  * fix: bump github.com/golang-jwt/jwt/v4 from 4.2.0 to 4.4.1 (#10906)
  * chore: add actions/setup-go@v2 to linter config (#10935)
  * docs(external.psi): add psi plugin (#10462)
  * fix: Update gopsutil and associated dependencies for improved OpenBSD supp? (#10931)
  * docs: update rpm/deb instructions with stable URLs (#10905)
  * fix: inconsistencies in sql*Requests queries (#10553)
  * fix: default value for logfile rotation interval (#10883)
  * fix: redundant zfs pool tag (#10871)
  * docs: update license of dependencies (#10914)
  * fix: update vsphere info message to debug (#10903)
  * docs: fix contribute button link (#10904)
  * docs: improve documentation around contribution (#10825)
  * chore: set telegraf log as text block in bug reports (#10895)
  * fix: include body in error message (#10866)
  * docs: clarify the k and fields topk params (#10830)
  * chore: remove slow process test (#10856)
  * chore: update slow file rotation tests (#10857)
  * chore: switch HTTP 100 test case values (#10858)
  * chore: fix slow running intel-pmu test (#10859)
  * chore: skip longer/integration tests on -short mode (#10860)
  * chore: remove CircleCI parallelism (#10862)
  * chore: reduce timeouts and sleeps (#10861)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1650888004">- Refresh harden_telegraf.service.patch</changelog>
  <changelog author="jkowalczyk@suse.com" date="1650974400">- Update to version 1.22.2:
  * Update changelog
  * update build version
  * update build version
  * fix: bump github.com/aws/aws-sdk-go-v2/config from 1.13.1 to 1.15.3 (#10998)
  * fix: add mutex to gnmi lookup map (#11008)
  * fix(cmd): Also allow 0 outputs when using test-wait parameter (#11013)
  * fix: allow Makefile to work on Windows (#11015)
  * fix: use sprint to cast to strings in gnmi (#11010)
  * fix: use correct auth token with consul_agent (#11001)
  * fix: add mariadb_dialect to address the MariaDB differences in INNODB_METRICS (#10486)
  * fix: correctly parse various numeric forms (#10923)
  * fix: update go.opentelemetry.io/collector/pdata from v0.48.0 to v0.49.0 (#10984)
  * fix: bump github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs (#10997)
  * fix: bump github.com/aws/aws-sdk-go-v2/credentials from 1.8.0 to 1.11.2 (#10975)
  * fix: update github.com/containerd/containerd from v1.5.9 to v1.5.11 (#10981)
  * fix: bump github.com/miekg/dns from 1.1.46 to 1.1.48 (#10973)
  * fix: ensure aliyuncms metrics accept array, fix discovery (#10850)
  * fix(inputs/aerospike): Statistics query bug (#10930)
  * fix: update github.com/Azure/azure-kusto-go from 0.5.0 to 0.60 (#10966)
  * fix: update github.com/gopcua/opcua from v0.3.1 to v0.3.3 (#10974)
  * fix: bump github.com/aws/aws-sdk-go-v2/service/dynamodb (#10972)
  * fix: bump github.com/xdg/scram from 1.0.3 to 1.0.5 (#10773)
  * fix: bump go.mongodb.org/mongo-driver from 1.8.3 to 1.9.0 (#10971)
  * fix: align the default value for msg size (#10947)
  * fix: update opentelemetry from v0.2.10 to v0.2.17 (#10963)
  * fix: remove overly verbose info message from cisco mdt (#10959)
  * fix: update starlark 7a1108eaa012-&gt;d1966c6b9fcd (#10940)
  * fix: update influxdb_v2 error message (#10958)
  * fix(inputs.prometheus): moved from watcher to informer (#10932)</changelog>
  <changelog author="jkowalczyk@suse.com" date="1651147200">- Update to version 1.22.3:
  * go mod tidy
  * Update changelog
  * update build version
  * chore: increase timeout for darwin packaging (#11041)
  * fix: reduce log level in disk plugin (#10925)
  * fix: use external xpath parser for gnmi (#11024)
  * fix: remove duplicate influxdb listener writes (#10976)
  * chore: go mod tidy (#10983)
  * chore: Update Go to 1.18.1 (#10961)</changelog>
  <changelog author="jkowalczyk@suse.com" date="1652702400">- Update to version 1.22.4:
  * Update changelog
  * update build version
  * fix: bump github.com/showwin/speedtest-go from 1.1.4 to 1.1.5 (#10722)
  * fix(outputs.Wavefront): If no "host" tag is provided, do not add "telegraf.host" tag (#11078)
  * chore: update opentelemetry plugins (#11085)
  * fix(inputs.couchbase): Don't assume metrics will all be of the same length (#11045)
  * fix: do not error when closing statsd network connection (#11043)
  * fix: re-init azure monitor http client on context deadline error (#11030)
  * fix: have telegraf service wait for network up (#11042)</changelog>
  <changelog author="jkowalczyk@suse.com" date="1655121600">- Update to version 1.23.0:
  * fix: Remove all rebase logic from CI (#11293)
  * fix: Don't rebase on master when building packages (#11291)
  * Update changelog for v1.23.0
  * test: add install go for linux, use in integration tests (#11281)
  * fix(inputs/directory_monitor): Add support for multiline file parsing (#11234)
  * chore: Fix readme linter errors for input plugins M-Z (#11274)
  * fix: Always build README-embedder for host-architecture (#11253)
  * feat: Migrate xpath parser to new style (#11218)
  * fix: add missing build constraints for sqlite (#11272)
  * fix: remove full access permissions (#11261)
  * chore: Fix readme linter errors for input plugins E-L (#11214)
  * chore: Fix readme linter errors for input plugins A-D (#10964)
  * fix: update github.com/containerd/containerd from v1.5.11 to v1.5.13 (#11266)
  * fix: bump github.com/tidwall/gjson from 1.10.2 to 1.14.1 (#11264)
  * chore: Fix readme linter errors for processor, aggregator, and parser plugins (#10960)
  * fix: update modernc.org/sqlite from v1.10.8 to v1.17.3 (#11260)
  * docs: add missing word &lt;3 (#11262)
  * feat(intel_powerstat): add uncore frequency metrics (#11254)
  * test: remove restore integration test cache (#11255)
  * test: add circle ci integration testing on PRs (#11246)
  * test: harden running of testcontainer integration tests (#11245)
  * chore: update go from v1.18.1 to v1.18.3 (#11248)
  * chore: rename circleci executor (#11247)
  * chore: upgrade windows circleci size (#11249)
  * fix: re-add event to splunk serializer (#11237)
  * docs: update test-container docs (#11244)
  * test: remove docker-compose.yml test file (#11243)
  * fix: update moby/ipvs dependency from v1.0.1 to v1.0.2 (#11242)
  * feat(inputs.sqlserver): Update query store and latch performance counters (#11216)
  * test: migrate elasticsearch to testcontainers (#11207)
  * chore: Bump apcupds and remove the replacement as issue is fixed upstream. (#11239)
  * test: migrate postgres to testcontainers (#11209)
  * test: migrate mcrouter to test-containers (#11208)
  * test: migrate kafka to testcontainers (#11206)
  * docs: Initial update of integration test docs (#11210)
  * chore: Bump riemann-go-client and remove replacement (#11236)
  * fix: Upgrade xpath and fix code (#11241)
  * feat(inputs.nginx_plus_api): Gather slab metrics (#10448)
  * fix(inputs/modbus): #11105 fix requests starting with an omitted field (#11202)
  * fix: (outputs/sql) table existence cache (#10812)
  * fix: Update sample.conf for prometheus (#11217)
  * fix: bump github.com/nats-io/nats-server/v2 from 2.7.4 to 2.8.4 (#11221)
  * test: enable logging with testcontainers (#11211)
  * chore: update github.com/opencontainers/runc from v1.0.2 to v1.1.2 (#11212)
  * chore: update gopkg.in/yaml.v3 from v3.0.0 to v3.0.1 (#11213)
  * fix(inputs/snmp): switch new Reconnect method to be a value receiver (#11197)
  * test: refactor testcontainer port lookup (#11198)
  * test: actually skip flaky snmp test (#11199)
  * chore: correctly spell embed (#11200)
  * fix: bump go.opentelemetry.io/otel/metric from 0.28.0 to 0.30.0 (#11088)
  * chore: update OpenTelmetry plugins (#11194)
  * docs: remove recommendation for prometheus metric_version=2 (#11158)
  * fix: bump github.com/sensu/sensu-go/api/core/v2 from 2.13.0 to 2.14.0 (#11021)
  * test: migrate zookeeper to test-containers (#11185)
  * fix(plugins/amqp): move from `streadway/amqp` to `rabbitmq/amqp091-go` (#11192)
  * feat: Add constant 'algorithm' to the mock plugin (#11188)
  * fix: redis plugin goroutine leak triggered by auto reload config mechanism (#11143)
  * fix: update golangci-lint from v1.45.2 to v1.46.2 (#11191)
  * fix(inputs/snmp): Reconnect TCP agents if needed (#11163)
  * test: migrate pgbouncer to test-containers (#11186)
  * test: remove rabbitmq container not used (#11175)
  * chore: Embed sample configurations into README for aggregators (#11190)
  * chore: Embed sample configurations into README for processors (#11189)
  * chore: embed sample configurations into README for outputs (#11182)
  * feat: Google API Auth (#11084)
  * test: migrate openldap tests to test-containers (#11169)
  * test: migrate nsq to test containers (#11173)
  * test: migrate opcua to test-containers (#11171)
  * feat: add field key option to set event partition key (#11076)
  * test: migrate aerospike to test-containers (#11177)
  * fix: Convert slab plugin to new sample.conf. (#11181)
  * test: migrate memcached to test-containers (#11176)
  * test: migrate redis to test-containers (#11174)
  * test: migrate mqtt to test containers (#11172)
  * test: migrate nats to test-containers (#11170)
  * test: migrate crate to test-containers code (#11165)
  * chore: Embed sample configurations into README for inputs (#11136)
  * fix: search services file in /etc/services and fall back to /usr/etc/services (#11179)
  * fix: Remove any content type from prometheus accept header (#11082)
  * feat(inputs.cpu): Add tags with core id or physical id to cpus (#11141)
  * chore: add readme linter to CI (#11020)
  * feat(intel_powerstat): add Max Turbo Frequency and introduce improvements (#11035)
  * test: avoid data race in tcp-listener test (#11144)
  * fix: bump github.com/aws/aws-sdk-go-v2/config from 1.15.3 to 1.15.7 (#11166)
  * test: add generic test-container code for re-use, migrate mysql (#11157)
  * feat: add external huebridge input plugin (#11159)
  * fix: Improve slab testing without sudo. (#11151)
  * docs: update review docs (#11147)
  * test: force elasticsearch to index batch data (#11153)
  * test: update mongodb output to use test containers (#11137)
  * test: switch internet speed to enable file download (#11146)
  * fix: doc interval setting for internet speed plugin (#11150)
  * fix(inputs.burrow): Move Dialer to variable and run `make fmt` (#11149)
  * fix: avoid calling sadc with invalid 0 interval (#11140)
  * feat: [inputs/burrow] fill more http transport parameters (#6948)
  * feat: do not error if no nodes found for current config with xpath parser (#11102)
  * feat: add slab metrics input plugin (#11075)
  * fix: use readers over closers in http input (#11083) Refs boo#1203914
  * chore(inputs_a-l): migrate sample configs into separate files (#11132)
  * chore(inputs_m-z): migrate sample configs into separate files (#11133)
  * chore(outputs): migrate sample configs into separate files (#11131)
  * chore(aggregators): migrate sample configs into separate files (#11130)
  * chore(processors): migrate sample configs into separate files (#11125)
  * test: use supported version of elasticsearch (#11111)
  * test: remove unecessary flag in sql input (#11115)
  * fix: elasticsearch output float handling test (#11120)
  * test: remove unused riemann from docker-compose (#11118)
  * fix(parsers/nagios): metrics will always return a supported status co? (#11062)
  * feat: allow other fluentd metrics apart from retry_count, buffer_queu? (#11056)
  * feat(parsers/logfmt): Add tag support (#11060)
  * fix: log instance name in skip warnings (#10995)
  * fix: bump github.com/wavefronthq/wavefront-sdk-go from 0.9.10 to 0.9.11 (#10970)
  * fix: Update gopsutil from v3.22.3 to v3.22.4 to allow for HOST_PROC_MOUNTINFO. (#11107)
  * chore(inputs/file): More clear error messages (#11104)
  * test: add test for mysql gatherGlobalVariables using sql-mock (#10987)
  * feat: Artifactory Webhook Receiver (#10918)
  * docs: fix socket_writer output format link (#11101)
  * fix: check net.Listen() error in tests (#11093)
  * fix: Output erroneous namespace and continue instead of error out (#11069)
  * Update changelog
  * feat: add mount option filtering to disk plugin (#11039)
  * feat(inputs.vsphere): Collect resource pools metrics and add resource pool tag in VM metrics (#10574)
  * docs: note about listsnapshots cause zfs parse failures (#11091)
  * fix: bump github.com/showwin/speedtest-go from 1.1.4 to 1.1.5 (#10722)
  * fix(outputs.Wavefront): If no "host" tag is provided, do not add "telegraf.host" tag (#11078)
  * chore: update opentelemetry plugins (#11085)
  * docs: correct copy-and-paste of udp to tcp (#11080)
  * refactor: replace strings.Replace with strings.ReplaceAll (#11079)
  * feat(exec, execd): add an option to pass a custom environment to their child process (#11049)
  * fix(inputs.couchbase): Don't assume metrics will all be of the same length (#11045)
  * fix: deprecate useless database config option (#11044)
  * fix: do not error when closing statsd network connection (#11043)
  * fix: re-init azure monitor http client on context deadline error (#11030)
  * feat: add influx semantic commits checker, checks only last commit. (#11037)
  * fix: have telegraf service wait for network up (#11042)
  * chore(inputs/disk): add deprecation notice to legacy mountpoints setting (#10948)
  * style: align plugin renaming (#10868)
  * Update changelog
  * fix: datadog count metrics (#10979)
  * feat(outputs.http): Support configuration of `MaxIdleConns` and `MaxIdleConnsPerHost` (#10954)
  * chore: enable linting of shell scripts (#11031)
  * chore: increase timeout for darwin packaging (#11041)
  * fix: reduce log level in disk plugin (#10925)
  * feat: create and push nightly docker images to quay.io (#11000)
  * chore: remove influxdata/validate-semantic-github-messages github workflow (#11036)
  * chore: Adding influx's semantic commit and PR message checker, so we ? (#11009)
  * fix: use external xpath parser for gnmi (#11024)
  * fix: remove duplicate influxdb listener writes (#10976)
  * Update changelog
  * fix: bump github.com/aws/aws-sdk-go-v2/config from 1.13.1 to 1.15.3 (#10998)
  * fix: add mutex to gnmi lookup map (#11008)
  * fix(cmd): Also allow 0 outputs when using test-wait parameter (#11013)
  * fix: allow Makefile to work on Windows (#11015)
  * chore: Fix readme linter errors for output plugins (#10951)
  * fix: use sprint to cast to strings in gnmi (#11010)
  * docs: add openstack metadata external plugin (#10999)
  * fix: use correct auth token with consul_agent (#11001)
  * docs: correct influx parser type setting in README (#11004)
  * fix: add mariadb_dialect to address the MariaDB differences in INNODB_METRICS (#10486)
  * fix: correctly parse various numeric forms (#10923)
  * chore: add readme linter (#10916)
  * chore: update pull request with master when running CI (#10993)
  * docs: add missing slash in mongodb readme (#10994)
  * fix: update go.opentelemetry.io/collector/pdata from v0.48.0 to v0.49.0 (#10984)
  * docs: regex processor only works on strings (#10982)
  * fix: bump github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs (#10997)
  * fix: bump github.com/aws/aws-sdk-go-v2/credentials from 1.8.0 to 1.11.2 (#10975)
  * test: use `T.TempDir` to create temporary test directory (#10988)
  * feat(processor/regex): Add ability to check every tag for regex replace (#10927)
  * chore: go mod tidy (#10983)
  * chore: Update Go to 1.18.1 (#10961)
  * feat(inputs/teamspeak): allow to configure nickname (#10934)
  * fix: update github.com/containerd/containerd from v1.5.9 to v1.5.11 (#10981)
  * feat(inputs/sqlserver): add RecentBackups query (#10567)
  * fix: bump github.com/miekg/dns from 1.1.46 to 1.1.48 (#10973)
  * fix: ensure aliyuncms metrics accept array, fix discovery (#10850)
  * fix(inputs/aerospike): Statistics query bug (#10930)
  * fix: update github.com/Azure/azure-kusto-go from 0.5.0 to 0.60 (#10966)
  * chore: add logging to graylog tests (#10896)
  * chore: remove go generate from CI tests (#10977)
  * fix: update github.com/gopcua/opcua from v0.3.1 to v0.3.3 (#10974)
  * fix: bump github.com/aws/aws-sdk-go-v2/service/dynamodb (#10972)
  * fix: bump github.com/xdg/scram from 1.0.3 to 1.0.5 (#10773)
  * fix: bump go.mongodb.org/mongo-driver from 1.8.3 to 1.9.0 (#10971)
  * fix: align the default value for msg size (#10947)
  * fix: update opentelemetry from v0.2.10 to v0.2.17 (#10963)
  * docs: update sql readme for creating login in windows (#10967)
  * fix: remove overly verbose info message from cisco mdt (#10959)
  * fix: update starlark 7a1108eaa012-&gt;d1966c6b9fcd (#10940)
  * docs: update csv parser metadata descriptions (#10750)
  * style: Add deprecation notice to renamed plugins (#10867)
  * chore(inputs): add descriptions to config in README.md (#10962)
  * feat: migrate input plugins to new sample config format (M-Z) (#10926)
  * fix: update influxdb_v2 error message (#10958)
  * fix(inputs.prometheus): moved from watcher to informer (#10932)
  * feat: migrate input plugins to new sample config format (A-L) (#10924)
  * feat: migrate output plugins to new sample config format (#10910)
  * feat: migrate processor plugins to new sample config format (#10913)
  * feat: migrate aggregator plugins to new sample config format (#10912)
  * Update changelog
  * feat: generate the plugins sample config (#10886)
  * feat(inputs.mongodb): Add metrics about files currently open and currently active data handles (#7896)
  * fix: bump gonum.org/v1/gonum from 0.9.3 to 0.11.0 (#10937)
  * fix: bump github.com/golang-jwt/jwt/v4 from 4.2.0 to 4.4.1 (#10906)
  * chore: add actions/setup-go@v2 to linter config (#10935)
  * docs(external.psi): add psi plugin (#10462)
  * fix: Update gopsutil and associated dependencies for improved OpenBSD supp? (#10931)
  * docs: update rpm/deb instructions with stable URLs (#10905)
  * fix: inconsistencies in sql*Requests queries (#10553)
  * feat: add ANSI color filter for tail input plugin (#10880)
  * feat: (outputs.elasticsearch) Add healthcheck timeout (#10853)
  * feat: In Lustre input plugin, support collecting per-client stats. (#10607)
  * fix: default value for logfile rotation interval (#10883)
  * fix: redundant zfs pool tag (#10871)
  * docs: update license of dependencies (#10914)
  * fix: update vsphere info message to debug (#10903)
  * docs: fix contribute button link (#10904)
  * feat: add fritzbox as external plugin (#10818)
  * docs: improve documentation around contribution (#10825)
  * chore: set telegraf log as text block in bug reports (#10895)
  * fix: include body in error message (#10866)
  * feat: update etc/telegraf.conf and etc/telegraf_windows.conf (#10885)
  * docs: clarify the k and fields topk params (#10830)
  * chore: remove slow process test (#10856)
  * chore: update slow file rotation tests (#10857)
  * chore: switch HTTP 100 test case values (#10858)
  * chore: fix slow running intel-pmu test (#10859)
  * chore: skip longer/integration tests on -short mode (#10860)
  * chore: remove CircleCI parallelism (#10862)
  * chore: reduce timeouts and sleeps (#10861)
  * Update CHANGELOG.md
  * Update build version to 1.23.0
  * Update changelog
  * Update CHANGELOG.md</changelog>
  <changelog author="jkowalczyk@suse.com" date="1657108800">- Update to version 1.23.1:
  * Update changelog for v1.23.1
  * Update build_version.txt for v1.23.1
  * Sync sample.conf into READMEs.
  * Fix xpath config location.
  * docs(inputs.mqtt_consumer): add pivot example to readme (#11195)
  * test: Update wait statement for postgresql_extensible (#11447)
  * docs: add firehose to EXTERNAL_PLUGINS.md (#11450)
  * chore(deps): Bump github.com/prometheus/client_golang (#11437)
  * chore(deps): Bump k8s.io/api from 0.24.1 to 0.24.2 (#11434)
  * chore(deps): Bump github.com/influxdata/influxdb-observability/otel2influx from 0.2.21 to 0.2.22 (#11416)
  * chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs from 1.15.4 to 1.15.8 (#11415)
  * test: exchange confused parameters (expected vs actual) (#11422)
  * fix: Bring back old xpath section names (#11335)
  * chore(deps): Bump github.com/vmware/govmomi from 0.27.3 to 0.28.0 (#11396)
  * chore(deps): Bump github.com/golang-jwt/jwt/v4 from 4.4.1 to 4.4.2 (#11395)
  * fix: Sync back sample.confs for inputs.couchbase and outputs.groundwork. (#11413)
  * fix: resolve jolokia2 panic on null response (#11397)
  * chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/ec2 from 1.1.0 to 1.46.0 (#11382)
  * chore: Remove 'github.com/cisco-ie/nx-telemetry-proto' replacement (#11401)
  * chore: Remove 'github.com/satori/go.uuid' replacement (#11240)
  * chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/kinesis (#11380)
  * chore(deps): Bump cloud.google.com/go/pubsub from 1.22.2 to 1.23.0 (#11394)
  * chore(deps): Bump github.com/Azure/azure-kusto-go from 0.6.0 to 0.7.0 (#11378)
  * chore(deps): Bump cloud.google.com/go/bigquery from 1.8.0 to 1.33.0 (#11379)
  * chore(deps): Bump github.com/jackc/pgx/v4 from 4.15.0 to 4.16.1 (#11346)
  * chore(deps): Bump go.opentelemetry.io/collector/pdata from 0.52.0 to 0.54.0 (#11369)
  * docs: swap bytes sent/recv descriptions in nfsclient (#11376)
  * chore(deps): Bump cloud.google.com/go/pubsub from 1.18.0 to 1.22.2 (#11349)
  * chore(deps): Bump github.com/nats-io/nats.go from 1.15.0 to 1.16.0 (#11339)
  * chore(deps): Bump github.com/dynatrace-oss/dynatrace-metric-utils-go from 0.3.0 to 0.5.0 (#11342)
  * fix: Restore sample configurations broken during initial migration (#11276)
  * fix: don't require listeners to be present in overview (#9315)
  * chore: move agent config into seperate file (#11337)
  * docs: Sync sample.conf for recent features (#11348)
  * chore(deps): Bump github.com/Shopify/sarama from 1.32.0 to 1.34.1 (#11319)
  * chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/timestreamwrite from 1.3.2 to 1.13.6 (#11322)
  * fix: filter out views in mongodb lookup (#11280)
  * chore(deps): Bump github.com/fatih/color from 1.10.0 to 1.13.0 (#11340)
  * chore: fix typo (recieve -&gt; receive) (#11341)
  * chore(deps): Bump google.golang.org/api from 0.74.0 to 0.84.0 (#11338)
  * chore(deps): Bump github.com/gophercloud/gophercloud from 0.24.0 to 0.25.0 (#11321)
  * chore(deps): Bump go.mongodb.org/mongo-driver from 1.9.0 to 1.9.1 (#11320)
  * chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/dynamodb (#11328)
  * test: add coveralls coverage to master (#11256)
  * chore: make apt-get instructions consistent and add GPG fingerprint (#11326)
  * chore(deps): Bump github.com/go-logfmt/logfmt from 0.5.0 to 0.5.1 (#11299)
  * chore(deps): Bump k8s.io/client-go from 0.23.3 to 0.24.1 (#11223)
  * chore(deps): Bump google.golang.org/grpc from 1.46.2 to 1.47.0 (#11318)
  * chore(deps): Bump github.com/aws/aws-sdk-go-v2/credentials from 1.12.2 to 1.12.5 (#11297)
  * test: mark integration tests correctly (#11317)
  * test: update wait for statement for postgres (#11309)
  * docs: explain directly connecting to mongo node (#11314)
  * fix: Prevent concurrent map writes to c.UnusedFields (#11311)
  * fix: bump cloud.google.com/go/monitoring from 1.2.0 to 1.5.0 (#11295)</changelog>
  <changelog author="jkowalczyk@suse.com" date="1657627200">- Update to version 1.23.2:
  * Update changelog for v1.23.2
  * Update build_version.txt for v1.23.2
  * Sync sample.conf and README.md files.
  * docs: Update etc/telegraf.conf and etc/telegraf_windows.conf (#11483)
  * fix: allow 201 for cookies, update header docs (#11472)
  * fix(inputs.snmp): snmp UseUnconnectedUDPSocket when using udp (#10331)
  * docs: Update etc/telegraf.conf and etc/telegraf_windows.conf (#11480)
  * chore(gnmi): Add Metrics heading to README.md (#11476)
  * fix(gnmi): refactor tag-only subs for complex keys (#11011)
  * fix: use bigint for backupsize in sqlserver (#11448)
  * docs: Update etc/telegraf.conf and etc/telegraf_windows.conf (#11463)
  * chore(inputs.socket_listener): Remove parser from init (#11462)
  * fix: Deprecation warnings for non-deprecated packages (#11460)
  * chore(deps): Bump github.com/docker/docker (#11438)
  * docs: Update etc/telegraf.conf and etc/telegraf_windows.conf (#11431)
  * docs: Update etc/telegraf.conf and etc/telegraf_windows.conf (#11419)
  * docs: Update etc/telegraf.conf and etc/telegraf_windows.conf (#11414)
  * docs: Update etc/telegraf.conf and etc/telegraf_windows.conf (#11365)
  * docs: Update etc/telegraf.conf and etc/telegraf_windows.conf (#11351)
  * docs: Update etc/telegraf.conf and etc/telegraf_windows.conf (#11344)
  * chore: Remove prefix to use the default `chore(deps)` (#11315)</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658750400">- Update to version 1.23.3:
  * Update changelog for v1.23.3
  * Update build_version.txt for v1.23.3
  * fix(inputs.snmp_trap): nil map panic when use snmp_trap with netsnmp translator (#11534)
  * fix: add version number to MacOS packages
  * chore: update to go1.18.4 (#11526)
  * fix(inputs.mqtt_consumer):  topic parsing error  when topic having prefix(/) (#11527)
  * fix(inputs.sqlserver): set lower deadlock priority (#11522)
  * fix: use reader over readcloser, regen cookie-jar (#11482)
  * fix: correct init volume gatherer in openstack (#11481)
  * fix: add version number to Mac packages (#11506)
  * fix(parsers.prometheus): histogram infinity bucket must be allways present (#11490) (#11486)
  * docs: Add example output section to HTTP plugin (#11497)
  * docs: explain proxmox user/token and node_name (#11487)
  * chore(deps): Bump github.com/antchfx/jsonquery from 1.1.5 to 1.2.0 (#11461)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1658750401">- Refresh harden_telegraf.service.patch</changelog>
  <changelog author="jkowalczyk@suse.com" date="1660651200">- Update to version 1.23.4:
  * fix: remove bare url in changelog that failed lint
  * fix: update license of dependencies
  * fix: update github.com/mdlayher/netlink to 1.6.0 to fix the build
  * fix: Sync sql output and input build constraints to handle loong64 in go1.19. (#11664)
  * docs: explain PowerShell 5 encoding (#11662)
  * chore: update circle-ci orbs (#11618)
  * docs(inputs.zookeeper): document use of prometheus plugin (#11658)
  * chore(deps): bump github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs (#11653)
  * chore(deps): bump github.com/aws/aws-sdk-go-v2/feature/ec2/imds (#11652)
  * chore(deps): bump github.com/aws/aws-sdk-go-v2/service/ec2 (#11651)
  * chore(deps): bump github.com/antchfx/xmlquery from 1.3.9 to 1.3.12 (#11644)
  * fix: Bump github.com/lxc/lxd to latest git to fix https://github.com/lxc/lxd/issues/10738. (#11647)
  * chore(deps): bump google.golang.org/api from 0.85.0 to 0.91.0 (#11643)
  * chore(deps): Bump github.com/prometheus/client_golang from 1.12.2 to 1.13.0 (#11640)
  * chore(deps): bump github.com/hashicorp/consul/api from 1.12.0 to 1.13.1 (#11641)
  * chore(deps): Bump github.com/emicklei/go-restful from v2.9.5+incompatible to v3.8.0 (#11636)
  * fix(inputs.mongodb): update version check for newer versions (#11635)
  * feat: add coralogix dialect to opentelemetry (#11622)
  * fix(parsers): Linter issues (#11607)
  * chore: workaround for failing "go list -m all" (#11624)
  * chore(deps): bump github.com/sirupsen/logrus from 1.8.1 to 1.9.0 (#11616)
  * chore: Update to go1.18.5 (#11621)
  * docs: Add source tag best practices to the metric schema docs (#11620)
  * chore: Fix support issue template (#11617)
  * fix(inputs.kubernetes): refresh token from file at each read (#11578)
  * chore(deps): Update github.com/Shopify/sarama from 1.34.1 to 1.35.0 (#11603)
  * chore(deps): update k8s.io/apimachinery from 0.24.2 to 0.24.3 (#11602)
  * chore(deps): Update cloud.google.com/go/pubsub from 1.23.0 to 1.24.0 (#11604)
  * chore(deps): Update github.com/BurntSushi/toml from 0.4.1 to 1.2.0 (#11605)
  * chore: Migrate all issue templates to yaml (#11612)
  * docs(inputs.exec): clarify parsing for ints (#11597)
  * fix(outputs): Linter issues (#11595)
  * fix(inputs.kube_inventory): send file location to enable token auto-refresh (#11577)
  * chore: update github.com/harlow/kinesis-consumer (#11599)
  * chore(deps): Bump github.com/signalfx/golib/v3 from 3.3.43 to 3.3.45 (#11598)
  * chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/dynamodb (#11584)
  * chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/kinesis (#11585)
  * chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/cloudwatch (#11586)
  * chore(deps): Bump github.com/Azure/azure-event-hubs-go/v3 (#11590)
  * test: fix openetelemtry test (#11573)
  * fix(inputs): Linter issues (#11576)
  * chore(deps): Bump github.com/pion/dtls/v2 from 2.0.13 to 2.1.5 (#11581)
  * chore(deps): Bump github.com/Azure/go-autorest/autorest/adal (#11583)
  * chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs (#11582)
  * chore(deps): Bump github.com/shirou/gopsutil/v3 from 3.22.4 to 3.22.7 (#11580)
  * fix(inputs.cloudwatch): customizable batch size when querying (#10851)
  * chore(deps): Bump github.com/eclipse/paho.mqtt.golang from 1.3.5 to 1.4.1 (#11347)
  * chore(deps): Bump github.com/vmware/govmomi from 0.28.0 to 0.29.0 (#11568)
  * chore(deps): Bump github.com/karrick/godirwalk from 1.16.1 to 1.17.0 (#11574)
  * chore(deps): Bump github.com/go-ldap/ldap/v3 from 3.4.1 to 3.4.4 (#11569)
  * chore(deps): Update all go.opentelemetry.io dependencies (#11494)
  * chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/ec2 from 1.46.0 to 1.51.0 (#11567)
  * chore(deps): Bump github.com/apache/thrift from 0.15.0 to 0.16.0 (#11565)
  * chore(deps): Bump github.com/testcontainers/testcontainers-go from 0.12.0 to 0.13.0 (#11412)
  * fix: Updating credentials file to not use endpoint_url parameter (#10841)
  * fix(inputs.opcua): return an error with mismatched types (#11539)
  * fix(inputs.stackdriver): Handle when no buckets available (#11556)
  * docs(inputs.mysql): Add link to docs on how to enable mysql's performance schema (#11555)
  * chore: add missing section to kafka_consumer's sample.conf (#11553)
  * docs: add timeout section (#11550)
  * fix(inputs.sqlserver): set lower deadlock priority (#11548)
  * docs(inputs.modbus): README changes regarding request.tags (#11541)
  * docs: run make-docs (#11514)
  * test: do not have leadership election during kafka test (#11404)
  * chore: Update CRLF line endings in agent.conf to LF (#11501)</changelog>
  <changelog author="jkowalczyk@suse.com" date="1664884800">- Update to version 1.24.0:
  * feat(inputs.directory_monitor): Support paths for files_to_ignore and files_to_monitor (#11784)
  * chore(inputs.jolokia2): Move agent and proxy one level up (#11637)
  * fix(outputs.execd): Fixing the execd behavior to not throw error when partially unserializable metrics are written. (#11767)
  * fix: add missing entry json_transformation to missingTomlField (#11779)
  * fix: Do not error out for parsing errors in datadog mode. (#11777)
  * chore: update to go1.19.1 (#11776)
  * fix(inputs.mongodb): add an option to bypass connection errors on start (#11629)
  * feat(inputs.directory_monitor): Traverse sub-directories (#11773)
  * fix(inputs.jolokia2): add optional origin header (#11692)
  * chore(deps): Bump google.golang.org/grpc from 1.48.0 to 1.49.0 (#11746)
  * docs: Add go report badge (#11774)
  * feat(inputs.sqlserver): Improved filtering for active requests (#11709)
  * chore(deps): Bump github.com/Azure/azure-kusto-go from 0.7.0 to 0.8.0 (#11770)
  * docs(external): add hwinfo external plugin (#11757)
  * chore(deps): Bump gonum.org/v1/gonum from 0.11.0 to 0.12.0 (#11764)
  * chore(deps): Bump github.com/urfave/cli/v2 from 2.11.2 to 2.14.1 (#11763)
  * fix: sort labels in prometheusremotewrite serializer (#11755)
  * fix(inputs.opcua): Assign node id correctly (#11723)
  * chore(deps): Bump github.com/aws/aws-sdk-go-v2/feature/ec2/imds (#11747)
  * chore: Rename Telegraf receiver argument from a to t (#11742)
  * chore(deps): Bump k8s.io/client-go from 0.24.3 to 0.25.0 (#11745)
  * chore(deps): Bump github.com/gophercloud/gophercloud (#11744)
  * chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/dynamodb (#11743)
  * chore: update github.com/Shopify/sarama from v1.35 to v1.36 (#11713)
  * chore(deps): Bump github.com/rabbitmq/amqp091-go from 1.3.4 to 1.4.0 (#11699)
  * feat(outputs.postgresql): add Postgresql output (#11672)
  * chore(deps): Bump github.com/tidwall/gjson from 1.14.1 to 1.14.3 (#11721)
  * feat: Migrate to urfave/cli (#11700)
  * chore(deps): Bump github.com/hashicorp/consul/api from 1.13.1 to 1.14.0 (#11717)
  * feat(inputs.linux_cpu): Add plugin to collect CPU metrics on Linux (#8988)
  * chore(deps): Bump github.com/aerospike/aerospike-client-go/v5 (#11716)
  * chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/sts (#11711)
  * chore(deps): Bump github.com/wavefronthq/wavefront-sdk-go (#11710)
  * fix(inputs.sqlserver): fixing wrong filtering for sqlAzureMIRequests and sqlAzureDBRequests (#11701)
  * fix: use os-agnositc systemd detection, remove sysv in RPM packaging (#10570)
  * feat(inputs.mqtt_consumer): Add incoming mqtt message size calculation (#11426)
  * feat: tool to build custom Telegraf builds (#11524)
  * chore: Update golangci-lint (#11705)
  * docs: update ms sql dsn example (#11704)
  * feat(serializers.prometheus): Provide option to reduce payload size by removing HELP from payload (#11690)
  * feat(inputs.sqlserver): Add db name to io stats for MI (#11688)
  * fix: refactor telegraf version (#11656)
  * fix(agent): add flushBatch method (#11615)
  * chore(deps): Bump go.mongodb.org/mongo-driver from 1.9.1 to 1.10.1 (#11676)
  * chore(deps): Bump github.com/aliyun/alibaba-cloud-sdk-go from 1.61.1695 to 1.61.1727 (#11695)
  * fix(inputs.prometheus): plugin run outside k8s cluster error (#11673)
  * chore: only lint changed READMEs (#11677)
  * chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/timestreamwrite (#11679)
  * fix: remove bare url in changelog that failed lint
  * chore: Move aws credentials to plugins/common. (#11681)
  * chore: Use build tags to select plugins (#11654)
  * chore(deps): Bump github.com/urfave/cli/v2 from 2.3.0 to 2.11.2 (#11675)
  * chore(deps): bump github.com/aws/aws-sdk-go-v2/service/ec2 (#11670)
  * chore(deps): Bump github.com/Azure/go-autorest/autorest (#11669)
  * chore(deps): Bump github.com/jackc/pgx/v4 from 4.16.1 to 4.17.0 (#11671)
  * fix: Sync sql output and input build constraints to handle loong64 in go1.19. (#11664)
  * docs: explain PowerShell 5 encoding (#11662)
  * chore: update circle-ci orbs (#11618)
  * docs(inputs.zookeeper): document use of prometheus plugin (#11658)
  * feat(outputs.iotdb): Add new output plugin to support Apache IoTDB (#11557)
  * chore(deps): bump github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs (#11653)
  * chore(deps): bump github.com/aws/aws-sdk-go-v2/feature/ec2/imds (#11652)
  * feat(outputs.amqp): Add proxy support (#11649)
  * chore(deps): bump github.com/aws/aws-sdk-go-v2/service/ec2 (#11651)
  * chore: Markdown fixes for inputs/[a-m]* (#11606)
  * chore(deps): bump github.com/antchfx/xmlquery from 1.3.9 to 1.3.12 (#11644)
  * fix: Bump github.com/lxc/lxd to latest git to fix https://github.com/lxc/lxd/issues/10738. (#11647)
  * chore(deps): bump google.golang.org/api from 0.85.0 to 0.91.0 (#11643)
  * chore(deps): Bump github.com/prometheus/client_golang from 1.12.2 to 1.13.0 (#11640)
  * feat(common.tls): Implement minimum TLS version for clients (#11493)
  * chore(deps): bump github.com/hashicorp/consul/api from 1.12.0 to 1.13.1 (#11641)
  * chore(deps): Bump github.com/emicklei/go-restful from v2.9.5+incompatible to v3.8.0 (#11636)
  * feat: Supervisord input plugin (#9015)
  * chore(parsers.json_v2): Cleanup test by reusing testutil function (#11627)
  * fix(inputs.mongodb): update version check for newer versions (#11635)
  * feat: add coralogix dialect to opentelemetry (#11622)
  * fix(inputs.x509): Multiple sources with non-overlapping DNS entries. (#11613)
  * fix(parsers): Linter issues (#11607)
  * feat (inputs/prometheus): add setting to set custom namespace label name to avoid conflicts (#11538)
  * chore: workaround for failing "go list -m all" (#11624)
  * feat(processors.starlark): Add starlark benchmark for tag-concatenation (#11306)
  * chore(deps): bump github.com/sirupsen/logrus from 1.8.1 to 1.9.0 (#11616)
  * chore: Update to go1.18.5 (#11621)
  * chore: Using Windows, add exe extension to tools (#11608)
  * docs: Add source tag best practices to the metric schema docs (#11620)
  * feat(external): Add nsdp external plugin (#11619)
  * chore: Fix support issue template (#11617)
  * fix(inputs.kubernetes): refresh token from file at each read (#11578)
  * feat(inputs.ntpq): Allow to specify `reach` output format (#11594)
  * chore(deps): Update github.com/Shopify/sarama from 1.34.1 to 1.35.0 (#11603)
  * chore(deps): update k8s.io/apimachinery from 0.24.2 to 0.24.3 (#11602)
  * chore(deps): Update cloud.google.com/go/pubsub from 1.23.0 to 1.24.0 (#11604)
  * chore(deps): Update github.com/BurntSushi/toml from 0.4.1 to 1.2.0 (#11605)
  * chore: Migrate all issue templates to yaml (#11612)
  * docs(inputs.exec): clarify parsing for ints (#11597)
  * fix(outputs): Linter issues (#11595)
  * fix(inputs.kube_inventory): send file location to enable token auto-refresh (#11577)
  * feat(inputs.ntpq): Add possibility to query remote servers (#11592)
  * feat(inputs.openstack): Add "allow_reauth" config option for openstack client (#11572)
  * feat(inputs.ntpq): Add option to specify command flags (#11593)
  * chore: update github.com/harlow/kinesis-consumer (#11599)
  * chore(deps): Bump github.com/signalfx/golib/v3 from 3.3.43 to 3.3.45 (#11598)
  * chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/dynamodb (#11584)
  * chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/kinesis (#11585)
  * chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/cloudwatch (#11586)
  * chore(deps): Bump github.com/Azure/azure-event-hubs-go/v3 (#11590)
  * test: fix openetelemtry test (#11573)
  * fix(inputs): Linter issues (#11576)
  * chore(deps): Bump github.com/pion/dtls/v2 from 2.0.13 to 2.1.5 (#11581)
  * chore(deps): Bump github.com/Azure/go-autorest/autorest/adal (#11583)
  * chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs (#11582)
  * chore(deps): Bump github.com/shirou/gopsutil/v3 from 3.22.4 to 3.22.7 (#11580)
  * fix(outputs.wavefront): update wavefront sdk and use non-deprecated APIs (#11560)
  * chore(inputs.ntpq): Cleanup existing plugin (#11575)
  * fix(inputs.cloudwatch): customizable batch size when querying (#10851)
  * chore(deps): Bump github.com/eclipse/paho.mqtt.golang from 1.3.5 to 1.4.1 (#11347)
  * chore(deps): Bump github.com/vmware/govmomi from 0.28.0 to 0.29.0 (#11568)
  * chore(deps): Bump github.com/karrick/godirwalk from 1.16.1 to 1.17.0 (#11574)
  * chore(deps): Bump github.com/go-ldap/ldap/v3 from 3.4.1 to 3.4.4 (#11569)
  * chore(deps): Update all go.opentelemetry.io dependencies (#11494)
  * chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/ec2 from 1.46.0 to 1.51.0 (#11567)
  * chore(deps): Bump github.com/apache/thrift from 0.15.0 to 0.16.0 (#11565)
  * chore(deps): Bump github.com/testcontainers/testcontainers-go from 0.12.0 to 0.13.0 (#11412)
  * feat(outputs.sql): Add settings for go sql.DB settings (#11551)
  * fix: Updating credentials file to not use endpoint_url parameter (#10841)
  * fix: Remove shell execution for license-checker. (#11563)
  * chore: More parser cleanup (#11532)
  * feat: Add license checking tool (#11398)
  * feat(parsers.xpath): Add support for returning underlying data-types (#11558)
  * fix(inputs.opcua): return an error with mismatched types (#11539)
  * feat(output.mqtt): Add support for MQTT protocol version 5 (#11284)
  * fix(inputs.stackdriver): Handle when no buckets available (#11556)
  * docs(inputs.mysql): Add link to docs on how to enable mysql's performance schema (#11555)
  * chore: add missing section to kafka_consumer's sample.conf (#11553)
  * docs: add timeout section (#11550)
  * fix(inputs.sqlserver): set lower deadlock priority (#11548)
  * feat(inputs.kafka_consumer): Option to set default fetch message bytes (#11220)
  * docs(inputs.modbus): README changes regarding request.tags (#11541)
  * feat(outputs.graphite): Retry connecting to servers with failed send attempts (#11439)
  * feat(inputs.statsd): add median timing calculation to statsd input plugin (#11518)
  * fix(inputs.snmp_trap): nil map panic when use snmp_trap with netsnmp translator (#11534)
  * feat(parsers.json): Allow JSONata based transformations in JSON serializer (#11251)
  * fix: Add version number to MacOS packages (#11512)
  * feat(inputs.syslog): log remote host as source tag (#9440)
  * feat(outputs.groundwork): Improve metric parsing to extend output (#11443)
  * feat: added metrics for member and replica-set avg health of MongoDB  (#11516)
  * feat(outputs.redistimeseries): Add integration test (#11529)
  * chore: update to go1.18.4 (#11526)
  * fix(inputs.mqtt_consumer):  topic parsing error  when topic having prefix(/) (#11527)
  * fix(inputs.sqlserver): set lower deadlock priority (#11522)
  * fix: make docs + go.mod cleanup post-redis merge (#11521)
  * feat: Add RedisTimeSeries plugin (#11054)
  * docs: run make-docs (#11514)
  * feat(inputs.cisco_telemetry_mdt): Add GRPC Keepalive/timeout config options (#11458)
  * fix: use reader over readcloser, regen cookie-jar (#11482)
  * fix: correct init volume gatherer in openstack (#11481)
  * feat: Nats Jetstream consumer add simple support for jetstream subjects (#11373)
  * Revert "fix: add version number to Mac packages (#11506)" (#11510)
  * fix: add version number to Mac packages (#11506)
  * fix(parsers.prometheus): histogram infinity bucket must be allways present (#11490) (#11486)
  * feat(inputs.modbus): Error out on requests with no fields defined. (#11469)
  * test: do not have leadership election during kafka test (#11404)
  * docs: Add example output section to HTTP plugin (#11497)
  * chore: cleanup go.mod and dependency licences (#11503)
  * feat: add Stomp (Active MQ) output plugin (#7995)
  * chore: Update CRLF line endings in agent.conf to LF (#11501)
  * feat: add proxy support for outputs/cloudwatch (#11399)
  * docs: explain proxmox user/token and node_name (#11487)
  * chore: Check for readme changes in each PR (#11495)
  * chore: Skip building artifacts on master branch (#11465)
  * docs: Update etc/telegraf.conf and etc/telegraf_windows.conf (#11496)
  * fix: Backport sync sample.conf and README.md files (#11489)
  * feat(inputs.smart): Collect SSD endurance information where available in smartctl (#11391)
  * chore(deps): Bump github.com/antchfx/jsonquery from 1.1.5 to 1.2.0 (#11461)
  * feat(inputs.logstash): Record number of failures (#9185)
  * docs: Update etc/telegraf.conf and etc/telegraf_windows.conf (#11483)
  * fix: allow 201 for cookies, update header docs (#11472)
  * fix(inputs.snmp): snmp UseUnconnectedUDPSocket when using udp (#10331)
  * docs: Update etc/telegraf.conf and etc/telegraf_windows.conf (#11480)
  * fix(inputs.upsd): Move to new sample.conf style (#11471)
  * feat(rabbitmq): add support for head_message_timestamp metric (#11475)
  * fix: Update prometheusremotewrite parser to be a new style parser plugin (#11456)
  * chore(gnmi): Add Metrics heading to README.md (#11476)
  * fix(gnmi): refactor tag-only subs for complex keys (#11011)
  * chore: sign nightly artifacts to detect issues before release (#11464)
  * feat(inputs.nginx_plus_api): Gather limit_reqs metrics (#10874)
  * test: ignore return code on check-update (#11445)
  * fix: use bigint for backupsize in sqlserver (#11448)
  * feat: Migrate influx and influx_upstream parsers to new style (#11432)
  * docs: Update etc/telegraf.conf and etc/telegraf_windows.conf (#11463)
  * chore(inputs.socket_listener): Remove parser from init (#11462)
  * feat(input): add upsd implementation (#9890)
  * fix: Deprecation warnings for non-deprecated packages (#11460)
  * chore(deps): Bump github.com/docker/docker (#11438)
  * fix: Update prometheus parser to be a new style parser plugin (#11440)
  * docs(inputs.mqtt_consumer): add pivot example to readme (#11195)
  * test: Update wait statement for postgresql_extensible (#11447)
  * docs: add firehose to EXTERNAL_PLUGINS.md (#11450)
  * chore(deps): Bump github.com/prometheus/client_golang (#11437)
  * chore(deps): Bump k8s.io/api from 0.24.1 to 0.24.2 (#11434)
  * feat: Migrate nagios parser to new style (#11402)
  * fix: add reset-mode flag for CSV parser (#11288)
  * docs: Update etc/telegraf.conf and etc/telegraf_windows.conf (#11431)
  * feat: adding aws metric streams input plugin (#11233)
  * test: run check-update on dnf/yum (#11430)
  * chore(deps): Bump github.com/influxdata/influxdb-observability/otel2influx from 0.2.21 to 0.2.22 (#11416)
  * feat: migrate grok to new parser style (#11408)
  * feat: Migrate dropwizard parser to new style (#11371)
  * chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs from 1.15.4 to 1.15.8 (#11415)
  * test: exchange confused parameters (expected vs actual) (#11422)
  * feat: Migrate logfmt parser to new style (#11366)
  * fix: Bring back old xpath section names (#11335)
  * feat: Migrate graphite parser to new style (#11405)
  * feat: migrate value parser to new style (#11407)
  * docs: Update etc/telegraf.conf and etc/telegraf_windows.conf (#11419)
  * feat(outputs/wavefront): make maximum http batch size configurable (#11201)
  * feat: migrate form_urlencoded parser to new style (#11381)
  * chore: move printing of sample config file out of config.go (#11409)
  * chore(deps): Bump github.com/vmware/govmomi from 0.27.3 to 0.28.0 (#11396)
  * chore(deps): Bump github.com/golang-jwt/jwt/v4 from 4.4.1 to 4.4.2 (#11395)
  * docs: Update etc/telegraf.conf and etc/telegraf_windows.conf (#11414)
  * fix: Sync back sample.confs for inputs.couchbase and outputs.groundwork. (#11413)
  * fix: resolve jolokia2 panic on null response (#11397)
  * test: add nightly package testing to amd64/linux (#11377)
  * chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/ec2 from 1.1.0 to 1.46.0 (#11382)
  * chore: Remove 'github.com/cisco-ie/nx-telemetry-proto' replacement (#11401)
  * chore: Remove 'github.com/satori/go.uuid' replacement (#11240)
  * chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/kinesis (#11380)
  * chore(deps): Bump cloud.google.com/go/pubsub from 1.22.2 to 1.23.0 (#11394)
  * feat: Migrate collectd parser to new style (#11367)
  * feat: allow collecting node-level metrics for Couchbase buckets (#9717)
  * feat: migrate wavefront parser to new style (#11374)
  * chore(deps): Bump github.com/Azure/azure-kusto-go from 0.6.0 to 0.7.0 (#11378)
  * chore(deps): Bump cloud.google.com/go/bigquery from 1.8.0 to 1.33.0 (#11379)
  * chore(deps): Bump github.com/jackc/pgx/v4 from 4.15.0 to 4.16.1 (#11346)
  * chore(deps): Bump go.opentelemetry.io/collector/pdata from 0.52.0 to 0.54.0 (#11369)
  * docs: swap bytes sent/recv descriptions in nfsclient (#11376)
  * chore(deps): Bump cloud.google.com/go/pubsub from 1.18.0 to 1.22.2 (#11349)
  * chore(deps): Bump github.com/nats-io/nats.go from 1.15.0 to 1.16.0 (#11339)
  * chore(deps): Bump github.com/dynatrace-oss/dynatrace-metric-utils-go from 0.3.0 to 0.5.0 (#11342)
  * docs: Update etc/telegraf.conf and etc/telegraf_windows.conf (#11365)
  * feat: Migrate json_v2 parser to new style (#11343)
  * fix: Restore sample configurations broken during initial migration (#11276)
  * feat: Add CSV serializer (#11307)
  * fix: don't require listeners to be present in overview (#9315)
  * docs: Update etc/telegraf.conf and etc/telegraf_windows.conf (#11351)
  * feat: Migrate json parser to new style (#11226)
  * chore: move agent config into seperate file (#11337)
  * docs: Sync sample.conf for recent features (#11348)
  * chore(deps): Bump github.com/Shopify/sarama from 1.32.0 to 1.34.1 (#11319)
  * feat(x509_cert): add proxy support (#9319)
  * feat(redis): add Redis 6 ACL auth support (#9333)
  * docs: Update etc/telegraf.conf and etc/telegraf_windows.conf (#11344)
  * chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/timestreamwrite from 1.3.2 to 1.13.6 (#11322)
  * fix: filter out views in mongodb lookup (#11280)
  * chore(deps): Bump github.com/fatih/color from 1.10.0 to 1.13.0 (#11340)
  * chore: fix typo (recieve -&gt; receive) (#11341)
  * chore(deps): Bump google.golang.org/api from 0.74.0 to 0.84.0 (#11338)
  * chore(deps): Bump github.com/gophercloud/gophercloud from 0.24.0 to 0.25.0 (#11321)
  * chore(deps): Bump go.mongodb.org/mongo-driver from 1.9.0 to 1.9.1 (#11320)
  * chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/dynamodb (#11328)
  * test: add coveralls coverage to master (#11256)
  * chore: make apt-get instructions consistent and add GPG fingerprint (#11326)
  * chore(deps): Bump github.com/go-logfmt/logfmt from 0.5.0 to 0.5.1 (#11299)
  * chore(deps): Bump k8s.io/client-go from 0.23.3 to 0.24.1 (#11223)
  * chore(deps): Bump google.golang.org/grpc from 1.46.2 to 1.47.0 (#11318)
  * chore(deps): Bump github.com/aws/aws-sdk-go-v2/credentials from 1.12.2 to 1.12.5 (#11297)
  * test: mark integration tests correctly (#11317)
  * test: update wait for statement for postgres (#11309)
  * chore: Remove prefix to use the default `chore(deps)` (#11315)
  * docs: explain directly connecting to mongo node (#11314)
  * fix: Prevent concurrent map writes to c.UnusedFields (#11311)
  * feat: Make the command "config" a subcommand (#11282)
  * feat: add default appType as config option to groundwork output (#11300)
  * fix(parsers/xpath): Reduce debug messages when empty selection is allowed (#11302)
  * feat(inputs.x509_cert): add smtp protocol (#11271)
  * fix: bump cloud.google.com/go/monitoring from 1.2.0 to 1.5.0 (#11295)
  * fix: Remove all rebase logic from CI (#11293)
  * fix: Don't rebase on master when building packages (#11291)</changelog>
  <changelog author="jkowalczyk@suse.com" date="1664884801">- Update to version 1.24.1:
  * fix(parsers.csv): Remove direct checks for the parser type (#11825)
  * fix(inputs.ntpq): Handle pools with "-" when (#11827)
  * docs: update customization docs (#11822)
  * fix(parsers): Unwrap parser and remove some special handling (#11826)
  * fix: Enable global confirmation for installing mingw (#11835)
  * fix(parsers): Memory leak for plugins using ParserFunc. (#11815)
  * fix(inputs.modbus): Do not fail if a single slave reports errors (#11785)
  * fix(parsers.xpath): Add array index when expanding names. (#11781)
  * fix(inputs.ceph): Modernize Ceph input plugin metrics (#10797)
  * docs: Update etc/telegraf.conf and etc/telegraf_windows.conf (#11800)
  * chore(deps): Bump cloud.google.com/go/bigquery from 1.33.0 to 1.40.0 (#11796)
  * chore(deps): Bump github.com/wavefronthq/wavefront-sdk-go (#11799)
  * docs: Update etc/telegraf.conf and etc/telegraf_windows.conf (#11798)
  * chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/ec2 (#11789)
  * docs: Remove warning not to remove go:embed (#11797)
  * fix: Clear error message when provided config is not a text file (#11787)
  * chore(deps): Bump github.com/urfave/cli/v2 from 2.14.1 to 2.16.3 (#11794)
  * chore(deps): Bump cloud.google.com/go/pubsub from 1.24.0 to 1.25.1 (#11788)
  * docs: Update etc/telegraf.conf and etc/telegraf_windows.conf (#11792)
  * chore: Run amd64 package on master so config is generated (#11790)
  * feat(processors.parser): Add option to parse tags (#11228)</changelog>
  <changelog author="jkowalczyk@suse.com" date="1664884802">- Update to version 1.24.2:
  * fix(parser.xpath): Handle floating-point times correctly (#11875)
  * fix(cli): Support old style of filtering sample configs (#11896)
  * chore: update github.com/shirou/gopsutil from v3.22.8 to v3.22.9 (#11923)
  * fix(inputs.influxdb_listener): error on invalid precision (#11866)
  * docs: Ran `make docs` (#11914)
  * docs(inputs.opcua): fix typo (#11897)
  * chore(lint): Removed deprecated varcheck linter (#11910)
  * docs: Update etc/telegraf.conf and etc/telegraf_windows.conf (#11885)
  * chore(deps): github.com/docker/distribution from v2.7.1 ti v2.8.1 (#11893)
  * chore(deps): Bump github.com/rabbitmq/amqp091-go from 1.4.0 to 1.5.0 (#11891)
  * chore(deps): Bump github.com/aws/smithy-go from 1.13.2 to 1.13.3 (#11890)
  * chore(deps): Bump go.mongodb.org/mongo-driver from 1.10.1 to 1.10.2 (#11887)
  * chore(processors): Convert processors to `ParserPlugin`s (#11600)
  * chore(deps): Replace go-ping by pro-bing (#11836)
  * chore(deps): Bump github.com/nats-io/nats.go from 1.16.0 to 1.17.0 (#11839)
  * fix(common.kafka): Enable TLS in Kafka plugins without custom config (#11519)
  * docs(inputs.cpu): explain macos cpu support requires cgo (#11883)
  * fix(inputs.mqtt_consumer): rework connection and message tracking (#10696)
  * docs: Update etc/telegraf.conf and etc/telegraf_windows.conf (#11881)
  * fix(inputs.internet_speed): rename enable_file_download to match upstream intent (#11877)
  * build: github Workflows security hardening (#11843)
  * docs: Update etc/telegraf.conf and etc/telegraf_windows.conf (#11859)
  * fix: Update dependencies for OpenBSD support (#11861)
  * chore: Remove deprecated build tags (#11867)
  * fix(inputs.mongodb): actually start plugin correctly (#11849)
  * fix: re-allow specifying the influx parser type (#11806)
  * chore: update github.com/jackc/pgx/v4 from v4.17.0 to v4.17.1 (#11858)
  * chore: update github.com/lxc/lxd to latest (#11848)
  * chore(deps): Bump github.com/aerospike/aerospike-client-go/v5 from 5.9.0 to 5.10.0 (#11844)
  * chore: remove deprecated io/ioutils (#11678)
  * fix(internal.ethtool): avoid internal name conflict with aws (#11696)
  * docs(inputs.nvidia_smi): Example of how to enable nvidia-smi via docker compose (#11833)
  * chore(deps): Bump k8s.io/apimachinery from 0.25.0 to 0.25.1 (#11840)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1664884803">- Add _constraints minimum disk 4G to avoid build failures</changelog>
  <changelog author="jkowalczyk@suse.com" date="1667476800">- Update to version 1.24.3:
  * Revert "feat: run govulncheck nightly on master branch (#11977)" (#12054)
  * Update build_version.txt for v1.24.3
  * Resolve conflict caused by earlier cherry pick error
  * chore: update to go v1.19.3 (#12142)
  * fix(inputs.directory_monitor): allow cross filesystem directories (#12124)
  * fix(serializers.splunkmetric): provide option to remove event metric tag (#12024)
  * chore(inputs.socket_listener): Reorganize plugin code (#12031)
  * chore: Fix linter findings introduced in last PRs (#12131)
  * chore(deps): bump github.com/nats-io/nats-server/v2 from 2.8.4 to 2.9.4 (#12134)
  * chore(deps): bump cloud.google.com/go/monitoring from 1.5.0 to 1.7.0 (#12135)
  * chore(parsers.xpath): Add correct deprecation tags (#11986)
  * chore: update OpenTelemetry v0.2.30 / v0.63.0 (#12119)
  * docs: ran make docs (#12120)
  * docs(aggregators.derivative): Remove incorrect comment (#12026)
  * docs(serializers.json): specify version of jsonata used (#12117)
  * fix(processors.parser): Keep name of original metric if parser doesn't return one (#12116)
  * docs: add global configuration header (#12107)
  * fix(inputs.modbus): Handle field-measurement definitions correctly on duplicate field check (#12109)
  * test(outputs.graylog): skip tcp/udp tests on windows &amp; darwin (#12110)
  * chore(common.shim): check err of s.writeProcessedMetrics for the linter (#12103)
  * chore: Increase golangci-lint timeout (#12106)
  * chore: shut down plugins gracefully to prevent race (#12102)
  * chore: skip integration test with race (#12100)
  * chore: add kafka round trip integration test using inputs.kafka_consumer and outputs.kafka (#12058)
  * chore(deps): bump github.com/prometheus/client_model from 0.2.0 to 0.3.0 (#12097)
  * chore(deps): bump github.com/gopcua/opcua from 0.3.3 to 0.3.7 (#12095)
  * chore(deps): bump google.golang.org/api from 0.95.0 to 0.100.0 (#12096)
  * chore(deps): bump github.com/aws/aws-sdk-go-v2/service/dynamodb (#12098)
  * feat(tools): Allow to markdown includes for sections (#12075)
  * fix(config): set default parser (#12076)
  * fix(processors): Correctly setup processors (#12081)
  * fix: update systemd unit description (#12093)
  * chore(deps): update modernc.org/libc from v1.20.3 to v1.21.2 (#12090)
  * test(outputs.sql): further wait for clickhouse writes (#12086)
  * test: update integration test occurrences (#12085)
  * fix(agent): panic as tickers slice was off-by-one in size (#12077)
  * test(inputs.mcrouter): add eventually to pause for metrics (#12074)
  * fix: Restore warning on unused config option(s) (#12063)
  * fix(inputs.kafka): switch to sarama's new consumer group rebalance strategy setting (#12064)
  * docs(inputs.http): add use system proxy config option (#12069)
  * fix(inputs.modbus): add slave id to failing connection (#12038)
  * docs(aggregators.starlark): corrected typo mentioning wrong func name (#12066)
  * chore: Resolve deprecated linter issues (#12051)
  * fix(inputs.zookeeper): add the ability to parse floats as floats (#12023)
  * test: add additional checks, waits in integration tests (#12056)
  * chore: Update golangci-lint Go version (#12055)
  * docs(inputs.mongodb): update supported versions (#12048)
  * chore(deps): bump testcontainers-go from 0.13.0 to 0.14.0 and address breaking change (#12039)
  * chore(deps): bump github.com/Shopify/sarama from 1.36.0 to 1.37.2 (#11980)
  * chore(deps): bump github.com/aliyun/alibaba-cloud-sdk-go (#12036)
  * chore(deps): bump github.com/aws/aws-sdk-go-v2/service/kinesis (#12037)
  * chore(deps): Bump cloud.google.com/go/bigquery from 1.40.0 to 1.42.0 (#11937)
  * chore(deps): bump github.com/yuin/goldmark from 1.4.13 to 1.5.2 (#12035)
  * chore(deps): bump github.com/signalfx/golib/v3 from 3.3.45 to 3.3.46 (#12034)
  * feat: run govulncheck nightly on master branch (#11977)
  * chore(deps): bump modernc.org/sqlite from 1.17.3 to 1.19.2 (#12030)
  * chore(deps): bump k8s.io/api from 0.25.2 to 0.25.3 (#12029)
  * chore(deps): bump k8s.io/api from 0.25.0 to 0.25.2 (#12001)
  * docs(inputs.tomcat): clean up fields (#12018)
  * fix(regression): Fixes problem with metrics not exposed by plugins. (#12016)
  * refactor: Prevent import from going the wrong way (#12004)
  * test: add dovecot integration test (#11996)
  * chore: Fix installgo_mac.sh using correct hash (#12002)
  * chore(deps): bump k8s.io/apimachinery from 0.25.1 to 0.25.2 (#11938)
  * chore: resolve linter issues for unhandled-error (#11969)
  * chore: Tool to update Telegraf to use new Go version (#11968)
  * test: add integration test for recovering after invalid data (#11994)
  * fix(inputs.syslog): print error when no error or message given (#11997)
  * chore: resolve linter issues for confusing-naming and confusing-results (#11956)
  * fix(parsers.json_v2): Remove BOM before parsing (#11926)
  * chore: Resolve linter issues for ineffassign, nilerr, gosimple... (#11966)
  * fix(inputs.opcua): Add metric tags to node (#11993)
  * chore(inputs.powerdns): Don't run  flaky test on Windows (#11982)
  * chore(inputs.cloud_pubsub_push): Don't run flaky test on Windows (#11984)
  * chore(ci): Migrate to scheduled pipeline (#11981)
  * chore: Resolve linter issues for plugins/common package (#11964)
  * chore(deps): bump github.com/aws/aws-sdk-go-v2/config (#11979)
  * chore(inputs.socket_listener): Reorganize test to be table-based. (#11970)
  * chore(deps): bump github.com/aws/aws-sdk-go-v2/service/cloudwatch (#11972)
  * docs: Update etc/telegraf.conf and etc/telegraf_windows.conf (#11965)
  * chore: Bump golangci-lint to 1.50.0 (#11957)
  * chore: update OpenTelemetry plugins to latest release (#11943)
  * fix: Setting `enable_tls` has incorrect default value (#11941)
  * chore: update to go1.19.2 (#11940)
  * chore(deps): bump github.com/aws/aws-sdk-go-v2/credentials from 1.12.5 to 1.12.21 (#11936)
  * chore(deps): Update github.com/hashicorp/consul/api from 1.14.0 to 1.15.2 (#11894)
  * chore(deps): update github.com/gofrs/uuid from 4.2.0+incompatible to 4.3.0+incompatible (#11935)
  * fix(inputs.modbus): Improve duplicate field checks (#11912)
  * chore(deps): update github.com/sensu/sensu-go/api/core/v2 from 2.14.0 to 2.15.0 (#11928)
  * chore: Resolve linter issues in config.go and config_test.go (#11929)
  * docs: add libvirt plugin to external input plugins list (#11828)
  * build(rpm): Allow building RPMs cross-OS (#11904)
  * chore(deps): Bump github.com/snowflakedb/gosnowflake from 1.6.2 to 1.6.13 (#11886)</changelog>
</package>
<package pkgid="413ef1f044fb3ac0005996a93ca0276c73f1da1ed3739f999d64c9c70f52c812" name="telegram-desktop" arch="aarch64">
  <version epoch="0" ver="4.0.2" rel="bp154.2.3.2"/>
  <changelog author="Xu Zhao &lt;i@xuzhao.net&gt;" date="1638878400">- Update to 3.2.8
  * Fix crash in opening shared media with another user.
  * Try out the new audio player with playlist shuffle and repeat.
  * Give a custom name to your desktop session to distinguish it
    in the sessions list.
- Update tg_owt</changelog>
  <changelog author="Xu Zhao &lt;i@xuzhao.net&gt;" date="1639224000">- Update to 3.3.0
  * Content creators can restrict the ability to save media and
    forward messages from their groups and channels.
  * Clear messages in one-on-one chats from a specific day or
    date range.
  * Comment as one of your channels in public groups and channel
    comments.
- Add tg_owt-packager.py</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1639310400">- Add tg_owt-packager.py to Source list in spec</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1640865600">- Update to 3.4.0
  * Send reactions to messages.
  * Group and Channel admins can enable reactions in their chat
    via '...' * menu &gt; Manage &gt; Reactions.
  * Select text when typing and choose 'Formatting &gt; Spoiler'
    in the context menu to hide some or all of the contents of
    a message.
  * Click on the spoiler in chat to reveal its hidden text.
  * Spoiler formatting hides text in chat, as well as in
    the chat list and notifications.
- Update tg_owt</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1640952000">- Update to 3.4.1
  * Bug fixes and other minor improvements.</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1640952001">- Update to 3.4.2
  * Bug fixes and other minor improvements.</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1641297600">- Update to 3.4.3
  * Bug fixes and other minor improvements.</changelog>
  <changelog author="Xu Zhao &lt;i@xuzhao.net&gt;" date="1643889600">- Update to 3.5.0
  * Use a new type of detailed stickers with smooth animations.
  * Create new sets by sending .webm videos to @stickers.
  * Bring your custom animated stickers from other apps.
  * See smaller, compact animations when reacting to messages.
  * See real-time animations in chat when a user reacts to your message.
  * React with additional emoji expressing love, appreciation,
    anger or surprise.
  * Tap the new button in chats to jump to your messages that have
    unseen reactions.
  * Watch the animations for unseen reactions play when you
    hit the button.
  * The app will warn you before closing if you are uploading
    photos or files to a chat.
  * Enjoy better screencast quality in video chats.
- Update tg_owt
- Rebase patches</changelog>
  <changelog author="Xu Zhao &lt;i@xuzhao.net&gt;" date="1643976000">- Add 0003-add-qt5-widgets-include.patch
  * Fix Qt5Widgets private header include issue.</changelog>
  <changelog author="Xu Zhao &lt;i@xuzhao.net&gt;" date="1644408000">- Update to 3.5.2
  * Fix a freeze in audio playback on Linux.
  * Fix a crash in screen sharing initialization on Linux.
- Remove 0003-add-qt5-widgets-include.patch
  * Bug fixed in upstream
- Add 0003-revert-webrtc-cmake-target-file.patch
  * Fix target "desktop-app::external_opus" not found error.</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1647172800">- Update to 3.6.0
  * Active and recently finished downloads pop up in bar in the
    bottom left corner, like they do in browsers.
  * View recently downloaded files in Settings &gt; Advanced
    &gt; Downloads.
  * Get an alert before closing the app if you have
    unfinished downloads.
  * Share a direct t.me link to your phone number that instantly
    opens a chat with you. Use the full number in
    international format, like t.me/+123456789
  * Manage Live Streams in your channels using external software
    like OBS Studio or XSplit Broadcaster. Choose "Stream With..."
    when staring a video chat or live stream - then copy your
    Stream Key and paste it into your streaming software.
- Update tg_owt</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1649419200">- Update to 3.6.1
  * Change volume for RTMP stream from the context menu.
  * Set a profile photo from your camera.
  * Improve RTMP stream full screen mode.
  * Improve edit account section design.
  * Fix switching personal account or channel in video chats.
  * Fix pinning chats in folders with 100 chats.
  * Fix YouTube timestamp links after 10 hours.
- Update tg_owt</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1650974400">- Update to version 3.7.3
  * Fix a crash in the pinned bar bot button refresh.
- Update to version 3.7.2
  * Fix mute period selector values.
  * Fix a crash in repeated context menu item selection.
  * Fix context menu item selection of systems without a compositor.
- Update to version 3.7.1
  * Hardware accelerated video decoding off by default.
  * Fix several crashes.
- Update to version 3.7.0
  * NO SUPPORT FOR QT5 ON LINUX ANYMORE! USE QT6!
  * Use any short music file or voice message as a notification sound.
  * Right click audio files in chats to add them to your list of
    sounds - or use 'Upload Sound' in the Notifications menu.
  * Click on Mute notifications &gt; Select sound in a chat's (...)
    menu to change its notification sound.
  * Set custom tones for notifications in Settings &gt; Notifications &gt; Play sound.
  * Click on Mute notifications in a chat's (...) menu to manage
    its notifications.
  * Choose 'Mute for...' to turn off notifications for a
    preset period, like 1 hour or 1 day.
  * Quickly configure Auto-Delete settings from any chat info page.
  * Click (...) to turn on Auto-Delete, then select a specific duration.
  * Replies are now preserved when forwarding messages,
    making forwarded conversations easier to read.
  * Bots can now open detailed pages directly in the chat.
  * Use these streamlined interfaces to buy real-world goods
    and services without leaving the app.
  * Open a bot's profile to add it to your group or channel.
  * Instantly configure a bot's rights and permissions when adding it.
  * Bots can send a new type of button that lets you add them to
    your group or channel.
- Added fix-unused-variable-error.patch</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.cf&gt;" date="1652184000">- Fixed requirements for Qt6 (boo#1199323).</changelog>
  <changelog author="marec &lt;marec@detebe.org&gt;" date="1654257600">- fix for leap 15.4</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1656072000">- Update tg_owt; this does not include pipewire anymore, therefore:
  * Add BuildRequires: pkgconfig(libpipewire-0.3)
- Remove patches no longer needed:
  * 0002-tg_owt-fix-name-confliction.patch
  * 0005-add-wayland-include-path.patch
  * fix-unused-variable-error.patch
- Add suport for Qt version 6
- Update to version 4.0.0
  * Premium: Send media and files each up to 4 GB in size.
  * Premium: Download media and files at the fastest possible speed,
    with no limits.
  * Premium: Double most of the limits in the app.
  * Premium: Get a new button next to any voice message to generate
    a transcript of its audio.
  * Premium: React with even more emoji, including :clown: and ?.
  * Premium: Send unique stickers with additional effects, updated
    monthly.
  * Premium: Set a default chat folder or enable tools to
    auto-archive and hide new chats.
  * Premium: Subscribers have a badge next to their name, showing
    they help support Telegram.
  * Premium: Show off your profile video that will be animated for
    everyone in chats and the chat list.
  * Premium: Sponsored Messages that are sometimes shown in public
    channels will no longer appear.
  * Enable join requests for your public groups ? no invite links
    required.
  * Users who open the group will see an Apply to Join Group button.
  * Once approved by an admin, users will be able to participate in
    the chat.
  * Bots that are integrated into the attachment menu can be programmed
    to work in groups and channels.
- Update to version 3.7.6
  * Settings &gt; Advanced &gt; Experimental adds an option to open chats
    in separate windows.
  * Fix possible crash in video chat reconnection.
  * Fix possible crash after account switch.
- Update to version 3.7.5
  * Improve cloud password management design.
  * Fix a crash in shared media search.
  * Fix audio recording on macOS.
- Update to version 3.7.4
  * More icons for chat folders.
  * Improve some more sections design.
  * Update the OpenAL library to 1.22.0.</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1656072001">- Update to version 4.0.1
  * Fix window title on Windows 7.
  * Bug fixes and other minor improvements.</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1656158400">- Update to version 4.0.2
  * Fix window title on Windows 7. (again)
  * Fix file chooser and global menu on macOS.
  * Crash fix and OpenAL check for PipeWire fix on Linux.</changelog>
  <changelog author="Xu Zhao &lt;i@xuzhao.net&gt;" date="1656244800">- Add 0002-use-bundled-rnnoise-expected-gsl-ranges-webrtc.patch
  * Fix the build on openSUSE 15.4
- Rename 0001-use-bundled-ranged-exptected-gsl.patch to
  0001-use-bundled-webrtc.patch
  * Use system provided ranged, gsl, and ranges library.</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1657454400">- Fix boo#1193516</changelog>
</package>
<package pkgid="d189c89ab2c41d65446d24e811dc4cefd56eee2d568a8a74b85610d6fbf4775c" name="telegram-desktop" arch="ppc64le">
  <version epoch="0" ver="4.0.2" rel="bp154.2.3.2"/>
  <changelog author="Xu Zhao &lt;i@xuzhao.net&gt;" date="1638878400">- Update to 3.2.8
  * Fix crash in opening shared media with another user.
  * Try out the new audio player with playlist shuffle and repeat.
  * Give a custom name to your desktop session to distinguish it
    in the sessions list.
- Update tg_owt</changelog>
  <changelog author="Xu Zhao &lt;i@xuzhao.net&gt;" date="1639224000">- Update to 3.3.0
  * Content creators can restrict the ability to save media and
    forward messages from their groups and channels.
  * Clear messages in one-on-one chats from a specific day or
    date range.
  * Comment as one of your channels in public groups and channel
    comments.
- Add tg_owt-packager.py</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1639310400">- Add tg_owt-packager.py to Source list in spec</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1640865600">- Update to 3.4.0
  * Send reactions to messages.
  * Group and Channel admins can enable reactions in their chat
    via '...' * menu &gt; Manage &gt; Reactions.
  * Select text when typing and choose 'Formatting &gt; Spoiler'
    in the context menu to hide some or all of the contents of
    a message.
  * Click on the spoiler in chat to reveal its hidden text.
  * Spoiler formatting hides text in chat, as well as in
    the chat list and notifications.
- Update tg_owt</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1640952000">- Update to 3.4.1
  * Bug fixes and other minor improvements.</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1640952001">- Update to 3.4.2
  * Bug fixes and other minor improvements.</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1641297600">- Update to 3.4.3
  * Bug fixes and other minor improvements.</changelog>
  <changelog author="Xu Zhao &lt;i@xuzhao.net&gt;" date="1643889600">- Update to 3.5.0
  * Use a new type of detailed stickers with smooth animations.
  * Create new sets by sending .webm videos to @stickers.
  * Bring your custom animated stickers from other apps.
  * See smaller, compact animations when reacting to messages.
  * See real-time animations in chat when a user reacts to your message.
  * React with additional emoji expressing love, appreciation,
    anger or surprise.
  * Tap the new button in chats to jump to your messages that have
    unseen reactions.
  * Watch the animations for unseen reactions play when you
    hit the button.
  * The app will warn you before closing if you are uploading
    photos or files to a chat.
  * Enjoy better screencast quality in video chats.
- Update tg_owt
- Rebase patches</changelog>
  <changelog author="Xu Zhao &lt;i@xuzhao.net&gt;" date="1643976000">- Add 0003-add-qt5-widgets-include.patch
  * Fix Qt5Widgets private header include issue.</changelog>
  <changelog author="Xu Zhao &lt;i@xuzhao.net&gt;" date="1644408000">- Update to 3.5.2
  * Fix a freeze in audio playback on Linux.
  * Fix a crash in screen sharing initialization on Linux.
- Remove 0003-add-qt5-widgets-include.patch
  * Bug fixed in upstream
- Add 0003-revert-webrtc-cmake-target-file.patch
  * Fix target "desktop-app::external_opus" not found error.</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1647172800">- Update to 3.6.0
  * Active and recently finished downloads pop up in bar in the
    bottom left corner, like they do in browsers.
  * View recently downloaded files in Settings &gt; Advanced
    &gt; Downloads.
  * Get an alert before closing the app if you have
    unfinished downloads.
  * Share a direct t.me link to your phone number that instantly
    opens a chat with you. Use the full number in
    international format, like t.me/+123456789
  * Manage Live Streams in your channels using external software
    like OBS Studio or XSplit Broadcaster. Choose "Stream With..."
    when staring a video chat or live stream - then copy your
    Stream Key and paste it into your streaming software.
- Update tg_owt</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1649419200">- Update to 3.6.1
  * Change volume for RTMP stream from the context menu.
  * Set a profile photo from your camera.
  * Improve RTMP stream full screen mode.
  * Improve edit account section design.
  * Fix switching personal account or channel in video chats.
  * Fix pinning chats in folders with 100 chats.
  * Fix YouTube timestamp links after 10 hours.
- Update tg_owt</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1650974400">- Update to version 3.7.3
  * Fix a crash in the pinned bar bot button refresh.
- Update to version 3.7.2
  * Fix mute period selector values.
  * Fix a crash in repeated context menu item selection.
  * Fix context menu item selection of systems without a compositor.
- Update to version 3.7.1
  * Hardware accelerated video decoding off by default.
  * Fix several crashes.
- Update to version 3.7.0
  * NO SUPPORT FOR QT5 ON LINUX ANYMORE! USE QT6!
  * Use any short music file or voice message as a notification sound.
  * Right click audio files in chats to add them to your list of
    sounds - or use 'Upload Sound' in the Notifications menu.
  * Click on Mute notifications &gt; Select sound in a chat's (...)
    menu to change its notification sound.
  * Set custom tones for notifications in Settings &gt; Notifications &gt; Play sound.
  * Click on Mute notifications in a chat's (...) menu to manage
    its notifications.
  * Choose 'Mute for...' to turn off notifications for a
    preset period, like 1 hour or 1 day.
  * Quickly configure Auto-Delete settings from any chat info page.
  * Click (...) to turn on Auto-Delete, then select a specific duration.
  * Replies are now preserved when forwarding messages,
    making forwarded conversations easier to read.
  * Bots can now open detailed pages directly in the chat.
  * Use these streamlined interfaces to buy real-world goods
    and services without leaving the app.
  * Open a bot's profile to add it to your group or channel.
  * Instantly configure a bot's rights and permissions when adding it.
  * Bots can send a new type of button that lets you add them to
    your group or channel.
- Added fix-unused-variable-error.patch</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.cf&gt;" date="1652184000">- Fixed requirements for Qt6 (boo#1199323).</changelog>
  <changelog author="marec &lt;marec@detebe.org&gt;" date="1654257600">- fix for leap 15.4</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1656072000">- Update tg_owt; this does not include pipewire anymore, therefore:
  * Add BuildRequires: pkgconfig(libpipewire-0.3)
- Remove patches no longer needed:
  * 0002-tg_owt-fix-name-confliction.patch
  * 0005-add-wayland-include-path.patch
  * fix-unused-variable-error.patch
- Add suport for Qt version 6
- Update to version 4.0.0
  * Premium: Send media and files each up to 4 GB in size.
  * Premium: Download media and files at the fastest possible speed,
    with no limits.
  * Premium: Double most of the limits in the app.
  * Premium: Get a new button next to any voice message to generate
    a transcript of its audio.
  * Premium: React with even more emoji, including :clown: and ?.
  * Premium: Send unique stickers with additional effects, updated
    monthly.
  * Premium: Set a default chat folder or enable tools to
    auto-archive and hide new chats.
  * Premium: Subscribers have a badge next to their name, showing
    they help support Telegram.
  * Premium: Show off your profile video that will be animated for
    everyone in chats and the chat list.
  * Premium: Sponsored Messages that are sometimes shown in public
    channels will no longer appear.
  * Enable join requests for your public groups ? no invite links
    required.
  * Users who open the group will see an Apply to Join Group button.
  * Once approved by an admin, users will be able to participate in
    the chat.
  * Bots that are integrated into the attachment menu can be programmed
    to work in groups and channels.
- Update to version 3.7.6
  * Settings &gt; Advanced &gt; Experimental adds an option to open chats
    in separate windows.
  * Fix possible crash in video chat reconnection.
  * Fix possible crash after account switch.
- Update to version 3.7.5
  * Improve cloud password management design.
  * Fix a crash in shared media search.
  * Fix audio recording on macOS.
- Update to version 3.7.4
  * More icons for chat folders.
  * Improve some more sections design.
  * Update the OpenAL library to 1.22.0.</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1656072001">- Update to version 4.0.1
  * Fix window title on Windows 7.
  * Bug fixes and other minor improvements.</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1656158400">- Update to version 4.0.2
  * Fix window title on Windows 7. (again)
  * Fix file chooser and global menu on macOS.
  * Crash fix and OpenAL check for PipeWire fix on Linux.</changelog>
  <changelog author="Xu Zhao &lt;i@xuzhao.net&gt;" date="1656244800">- Add 0002-use-bundled-rnnoise-expected-gsl-ranges-webrtc.patch
  * Fix the build on openSUSE 15.4
- Rename 0001-use-bundled-ranged-exptected-gsl.patch to
  0001-use-bundled-webrtc.patch
  * Use system provided ranged, gsl, and ranges library.</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1657454400">- Fix boo#1193516</changelog>
</package>
<package pkgid="7ba0beeae4e3c1c7826a040a49c84243b59638e48a73b43cd067ac38197b20ba" name="telegram-desktop" arch="src">
  <version epoch="0" ver="4.0.2" rel="bp154.2.3.2"/>
  <changelog author="Xu Zhao &lt;i@xuzhao.net&gt;" date="1638878400">- Update to 3.2.8
  * Fix crash in opening shared media with another user.
  * Try out the new audio player with playlist shuffle and repeat.
  * Give a custom name to your desktop session to distinguish it
    in the sessions list.
- Update tg_owt</changelog>
  <changelog author="Xu Zhao &lt;i@xuzhao.net&gt;" date="1639224000">- Update to 3.3.0
  * Content creators can restrict the ability to save media and
    forward messages from their groups and channels.
  * Clear messages in one-on-one chats from a specific day or
    date range.
  * Comment as one of your channels in public groups and channel
    comments.
- Add tg_owt-packager.py</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1639310400">- Add tg_owt-packager.py to Source list in spec</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1640865600">- Update to 3.4.0
  * Send reactions to messages.
  * Group and Channel admins can enable reactions in their chat
    via '...' * menu &gt; Manage &gt; Reactions.
  * Select text when typing and choose 'Formatting &gt; Spoiler'
    in the context menu to hide some or all of the contents of
    a message.
  * Click on the spoiler in chat to reveal its hidden text.
  * Spoiler formatting hides text in chat, as well as in
    the chat list and notifications.
- Update tg_owt</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1640952000">- Update to 3.4.1
  * Bug fixes and other minor improvements.</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1640952001">- Update to 3.4.2
  * Bug fixes and other minor improvements.</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1641297600">- Update to 3.4.3
  * Bug fixes and other minor improvements.</changelog>
  <changelog author="Xu Zhao &lt;i@xuzhao.net&gt;" date="1643889600">- Update to 3.5.0
  * Use a new type of detailed stickers with smooth animations.
  * Create new sets by sending .webm videos to @stickers.
  * Bring your custom animated stickers from other apps.
  * See smaller, compact animations when reacting to messages.
  * See real-time animations in chat when a user reacts to your message.
  * React with additional emoji expressing love, appreciation,
    anger or surprise.
  * Tap the new button in chats to jump to your messages that have
    unseen reactions.
  * Watch the animations for unseen reactions play when you
    hit the button.
  * The app will warn you before closing if you are uploading
    photos or files to a chat.
  * Enjoy better screencast quality in video chats.
- Update tg_owt
- Rebase patches</changelog>
  <changelog author="Xu Zhao &lt;i@xuzhao.net&gt;" date="1643976000">- Add 0003-add-qt5-widgets-include.patch
  * Fix Qt5Widgets private header include issue.</changelog>
  <changelog author="Xu Zhao &lt;i@xuzhao.net&gt;" date="1644408000">- Update to 3.5.2
  * Fix a freeze in audio playback on Linux.
  * Fix a crash in screen sharing initialization on Linux.
- Remove 0003-add-qt5-widgets-include.patch
  * Bug fixed in upstream
- Add 0003-revert-webrtc-cmake-target-file.patch
  * Fix target "desktop-app::external_opus" not found error.</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1647172800">- Update to 3.6.0
  * Active and recently finished downloads pop up in bar in the
    bottom left corner, like they do in browsers.
  * View recently downloaded files in Settings &gt; Advanced
    &gt; Downloads.
  * Get an alert before closing the app if you have
    unfinished downloads.
  * Share a direct t.me link to your phone number that instantly
    opens a chat with you. Use the full number in
    international format, like t.me/+123456789
  * Manage Live Streams in your channels using external software
    like OBS Studio or XSplit Broadcaster. Choose "Stream With..."
    when staring a video chat or live stream - then copy your
    Stream Key and paste it into your streaming software.
- Update tg_owt</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1649419200">- Update to 3.6.1
  * Change volume for RTMP stream from the context menu.
  * Set a profile photo from your camera.
  * Improve RTMP stream full screen mode.
  * Improve edit account section design.
  * Fix switching personal account or channel in video chats.
  * Fix pinning chats in folders with 100 chats.
  * Fix YouTube timestamp links after 10 hours.
- Update tg_owt</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1650974400">- Update to version 3.7.3
  * Fix a crash in the pinned bar bot button refresh.
- Update to version 3.7.2
  * Fix mute period selector values.
  * Fix a crash in repeated context menu item selection.
  * Fix context menu item selection of systems without a compositor.
- Update to version 3.7.1
  * Hardware accelerated video decoding off by default.
  * Fix several crashes.
- Update to version 3.7.0
  * NO SUPPORT FOR QT5 ON LINUX ANYMORE! USE QT6!
  * Use any short music file or voice message as a notification sound.
  * Right click audio files in chats to add them to your list of
    sounds - or use 'Upload Sound' in the Notifications menu.
  * Click on Mute notifications &gt; Select sound in a chat's (...)
    menu to change its notification sound.
  * Set custom tones for notifications in Settings &gt; Notifications &gt; Play sound.
  * Click on Mute notifications in a chat's (...) menu to manage
    its notifications.
  * Choose 'Mute for...' to turn off notifications for a
    preset period, like 1 hour or 1 day.
  * Quickly configure Auto-Delete settings from any chat info page.
  * Click (...) to turn on Auto-Delete, then select a specific duration.
  * Replies are now preserved when forwarding messages,
    making forwarded conversations easier to read.
  * Bots can now open detailed pages directly in the chat.
  * Use these streamlined interfaces to buy real-world goods
    and services without leaving the app.
  * Open a bot's profile to add it to your group or channel.
  * Instantly configure a bot's rights and permissions when adding it.
  * Bots can send a new type of button that lets you add them to
    your group or channel.
- Added fix-unused-variable-error.patch</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.cf&gt;" date="1652184000">- Fixed requirements for Qt6 (boo#1199323).</changelog>
  <changelog author="marec &lt;marec@detebe.org&gt;" date="1654257600">- fix for leap 15.4</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1656072000">- Update tg_owt; this does not include pipewire anymore, therefore:
  * Add BuildRequires: pkgconfig(libpipewire-0.3)
- Remove patches no longer needed:
  * 0002-tg_owt-fix-name-confliction.patch
  * 0005-add-wayland-include-path.patch
  * fix-unused-variable-error.patch
- Add suport for Qt version 6
- Update to version 4.0.0
  * Premium: Send media and files each up to 4 GB in size.
  * Premium: Download media and files at the fastest possible speed,
    with no limits.
  * Premium: Double most of the limits in the app.
  * Premium: Get a new button next to any voice message to generate
    a transcript of its audio.
  * Premium: React with even more emoji, including :clown: and ?.
  * Premium: Send unique stickers with additional effects, updated
    monthly.
  * Premium: Set a default chat folder or enable tools to
    auto-archive and hide new chats.
  * Premium: Subscribers have a badge next to their name, showing
    they help support Telegram.
  * Premium: Show off your profile video that will be animated for
    everyone in chats and the chat list.
  * Premium: Sponsored Messages that are sometimes shown in public
    channels will no longer appear.
  * Enable join requests for your public groups ? no invite links
    required.
  * Users who open the group will see an Apply to Join Group button.
  * Once approved by an admin, users will be able to participate in
    the chat.
  * Bots that are integrated into the attachment menu can be programmed
    to work in groups and channels.
- Update to version 3.7.6
  * Settings &gt; Advanced &gt; Experimental adds an option to open chats
    in separate windows.
  * Fix possible crash in video chat reconnection.
  * Fix possible crash after account switch.
- Update to version 3.7.5
  * Improve cloud password management design.
  * Fix a crash in shared media search.
  * Fix audio recording on macOS.
- Update to version 3.7.4
  * More icons for chat folders.
  * Improve some more sections design.
  * Update the OpenAL library to 1.22.0.</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1656072001">- Update to version 4.0.1
  * Fix window title on Windows 7.
  * Bug fixes and other minor improvements.</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1656158400">- Update to version 4.0.2
  * Fix window title on Windows 7. (again)
  * Fix file chooser and global menu on macOS.
  * Crash fix and OpenAL check for PipeWire fix on Linux.</changelog>
  <changelog author="Xu Zhao &lt;i@xuzhao.net&gt;" date="1656244800">- Add 0002-use-bundled-rnnoise-expected-gsl-ranges-webrtc.patch
  * Fix the build on openSUSE 15.4
- Rename 0001-use-bundled-ranged-exptected-gsl.patch to
  0001-use-bundled-webrtc.patch
  * Use system provided ranged, gsl, and ranges library.</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1657454400">- Fix boo#1193516</changelog>
</package>
<package pkgid="b08ab2c161856a083f01ae62a2e2c7b3bd758016d9b04913281ee10b7ab2212a" name="telegram-desktop" arch="x86_64">
  <version epoch="0" ver="4.0.2" rel="bp154.2.3.2"/>
  <changelog author="Xu Zhao &lt;i@xuzhao.net&gt;" date="1638878400">- Update to 3.2.8
  * Fix crash in opening shared media with another user.
  * Try out the new audio player with playlist shuffle and repeat.
  * Give a custom name to your desktop session to distinguish it
    in the sessions list.
- Update tg_owt</changelog>
  <changelog author="Xu Zhao &lt;i@xuzhao.net&gt;" date="1639224000">- Update to 3.3.0
  * Content creators can restrict the ability to save media and
    forward messages from their groups and channels.
  * Clear messages in one-on-one chats from a specific day or
    date range.
  * Comment as one of your channels in public groups and channel
    comments.
- Add tg_owt-packager.py</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1639310400">- Add tg_owt-packager.py to Source list in spec</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1640865600">- Update to 3.4.0
  * Send reactions to messages.
  * Group and Channel admins can enable reactions in their chat
    via '...' * menu &gt; Manage &gt; Reactions.
  * Select text when typing and choose 'Formatting &gt; Spoiler'
    in the context menu to hide some or all of the contents of
    a message.
  * Click on the spoiler in chat to reveal its hidden text.
  * Spoiler formatting hides text in chat, as well as in
    the chat list and notifications.
- Update tg_owt</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1640952000">- Update to 3.4.1
  * Bug fixes and other minor improvements.</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1640952001">- Update to 3.4.2
  * Bug fixes and other minor improvements.</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1641297600">- Update to 3.4.3
  * Bug fixes and other minor improvements.</changelog>
  <changelog author="Xu Zhao &lt;i@xuzhao.net&gt;" date="1643889600">- Update to 3.5.0
  * Use a new type of detailed stickers with smooth animations.
  * Create new sets by sending .webm videos to @stickers.
  * Bring your custom animated stickers from other apps.
  * See smaller, compact animations when reacting to messages.
  * See real-time animations in chat when a user reacts to your message.
  * React with additional emoji expressing love, appreciation,
    anger or surprise.
  * Tap the new button in chats to jump to your messages that have
    unseen reactions.
  * Watch the animations for unseen reactions play when you
    hit the button.
  * The app will warn you before closing if you are uploading
    photos or files to a chat.
  * Enjoy better screencast quality in video chats.
- Update tg_owt
- Rebase patches</changelog>
  <changelog author="Xu Zhao &lt;i@xuzhao.net&gt;" date="1643976000">- Add 0003-add-qt5-widgets-include.patch
  * Fix Qt5Widgets private header include issue.</changelog>
  <changelog author="Xu Zhao &lt;i@xuzhao.net&gt;" date="1644408000">- Update to 3.5.2
  * Fix a freeze in audio playback on Linux.
  * Fix a crash in screen sharing initialization on Linux.
- Remove 0003-add-qt5-widgets-include.patch
  * Bug fixed in upstream
- Add 0003-revert-webrtc-cmake-target-file.patch
  * Fix target "desktop-app::external_opus" not found error.</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1647172800">- Update to 3.6.0
  * Active and recently finished downloads pop up in bar in the
    bottom left corner, like they do in browsers.
  * View recently downloaded files in Settings &gt; Advanced
    &gt; Downloads.
  * Get an alert before closing the app if you have
    unfinished downloads.
  * Share a direct t.me link to your phone number that instantly
    opens a chat with you. Use the full number in
    international format, like t.me/+123456789
  * Manage Live Streams in your channels using external software
    like OBS Studio or XSplit Broadcaster. Choose "Stream With..."
    when staring a video chat or live stream - then copy your
    Stream Key and paste it into your streaming software.
- Update tg_owt</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1649419200">- Update to 3.6.1
  * Change volume for RTMP stream from the context menu.
  * Set a profile photo from your camera.
  * Improve RTMP stream full screen mode.
  * Improve edit account section design.
  * Fix switching personal account or channel in video chats.
  * Fix pinning chats in folders with 100 chats.
  * Fix YouTube timestamp links after 10 hours.
- Update tg_owt</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1650974400">- Update to version 3.7.3
  * Fix a crash in the pinned bar bot button refresh.
- Update to version 3.7.2
  * Fix mute period selector values.
  * Fix a crash in repeated context menu item selection.
  * Fix context menu item selection of systems without a compositor.
- Update to version 3.7.1
  * Hardware accelerated video decoding off by default.
  * Fix several crashes.
- Update to version 3.7.0
  * NO SUPPORT FOR QT5 ON LINUX ANYMORE! USE QT6!
  * Use any short music file or voice message as a notification sound.
  * Right click audio files in chats to add them to your list of
    sounds - or use 'Upload Sound' in the Notifications menu.
  * Click on Mute notifications &gt; Select sound in a chat's (...)
    menu to change its notification sound.
  * Set custom tones for notifications in Settings &gt; Notifications &gt; Play sound.
  * Click on Mute notifications in a chat's (...) menu to manage
    its notifications.
  * Choose 'Mute for...' to turn off notifications for a
    preset period, like 1 hour or 1 day.
  * Quickly configure Auto-Delete settings from any chat info page.
  * Click (...) to turn on Auto-Delete, then select a specific duration.
  * Replies are now preserved when forwarding messages,
    making forwarded conversations easier to read.
  * Bots can now open detailed pages directly in the chat.
  * Use these streamlined interfaces to buy real-world goods
    and services without leaving the app.
  * Open a bot's profile to add it to your group or channel.
  * Instantly configure a bot's rights and permissions when adding it.
  * Bots can send a new type of button that lets you add them to
    your group or channel.
- Added fix-unused-variable-error.patch</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.cf&gt;" date="1652184000">- Fixed requirements for Qt6 (boo#1199323).</changelog>
  <changelog author="marec &lt;marec@detebe.org&gt;" date="1654257600">- fix for leap 15.4</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1656072000">- Update tg_owt; this does not include pipewire anymore, therefore:
  * Add BuildRequires: pkgconfig(libpipewire-0.3)
- Remove patches no longer needed:
  * 0002-tg_owt-fix-name-confliction.patch
  * 0005-add-wayland-include-path.patch
  * fix-unused-variable-error.patch
- Add suport for Qt version 6
- Update to version 4.0.0
  * Premium: Send media and files each up to 4 GB in size.
  * Premium: Download media and files at the fastest possible speed,
    with no limits.
  * Premium: Double most of the limits in the app.
  * Premium: Get a new button next to any voice message to generate
    a transcript of its audio.
  * Premium: React with even more emoji, including :clown: and ?.
  * Premium: Send unique stickers with additional effects, updated
    monthly.
  * Premium: Set a default chat folder or enable tools to
    auto-archive and hide new chats.
  * Premium: Subscribers have a badge next to their name, showing
    they help support Telegram.
  * Premium: Show off your profile video that will be animated for
    everyone in chats and the chat list.
  * Premium: Sponsored Messages that are sometimes shown in public
    channels will no longer appear.
  * Enable join requests for your public groups ? no invite links
    required.
  * Users who open the group will see an Apply to Join Group button.
  * Once approved by an admin, users will be able to participate in
    the chat.
  * Bots that are integrated into the attachment menu can be programmed
    to work in groups and channels.
- Update to version 3.7.6
  * Settings &gt; Advanced &gt; Experimental adds an option to open chats
    in separate windows.
  * Fix possible crash in video chat reconnection.
  * Fix possible crash after account switch.
- Update to version 3.7.5
  * Improve cloud password management design.
  * Fix a crash in shared media search.
  * Fix audio recording on macOS.
- Update to version 3.7.4
  * More icons for chat folders.
  * Improve some more sections design.
  * Update the OpenAL library to 1.22.0.</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1656072001">- Update to version 4.0.1
  * Fix window title on Windows 7.
  * Bug fixes and other minor improvements.</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1656158400">- Update to version 4.0.2
  * Fix window title on Windows 7. (again)
  * Fix file chooser and global menu on macOS.
  * Crash fix and OpenAL check for PipeWire fix on Linux.</changelog>
  <changelog author="Xu Zhao &lt;i@xuzhao.net&gt;" date="1656244800">- Add 0002-use-bundled-rnnoise-expected-gsl-ranges-webrtc.patch
  * Fix the build on openSUSE 15.4
- Rename 0001-use-bundled-ranged-exptected-gsl.patch to
  0001-use-bundled-webrtc.patch
  * Use system provided ranged, gsl, and ranges library.</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1657454400">- Fix boo#1193516</changelog>
</package>
<package pkgid="56e8fb07ac729cd6d45068958660e537a562b0718505bd6b198cd7f8c4005e76" name="tor" arch="aarch64">
  <version epoch="0" ver="0.4.7.10" rel="bp154.2.6.1"/>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1611748800">- Restrict service permissions with systemd</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1612526400">- tor 0.4.4.7
  * https://blog.torproject.org/node/1990
  * Stop requiring a live consensus for v3 clients and services
  * Re-entry into the network is now denied at the Exit level
  * Fix undefined behavior on our Keccak library
  * Strip '\r' characters when reading text files on Unix platforms
  * Handle partial SOCKS5 messages correctly
- Add tor-practracker.patch to fix tests</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1613476800">- tor 0.4.5.6
  * https://lists.torproject.org/pipermail/tor-announce/2021-February/000214.html
  * Introduce a new MetricsPort HTTP interface
  * Support IPv6 in the torrc Address option
  * Add event-tracing library support for USDT and LTTng-UST
  * Try to read N of N bytes on a TLS connection
- Drop upstream tor-practracker.patch</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1615896000">- tor 0.4.5.7
  * https://lists.torproject.org/pipermail/tor-announce/2021-March/000216.html
  * Fix 2 denial of service security issues (boo#1183726)
    + Disable the dump_desc() function that we used to dump unparseable
    information to disk (CVE-2021-28089)
    + Fix a bug in appending detached signatures to a pending consensus
    document that could be used to crash a directory authority
    (CVE-2021-28090)
  * Ship geoip files based on the IPFire Location Database</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1619179200">- Fix logging issue due to systemd picking up stdout - boo#1181244
  Continue to log notices to syslog by default.
- actually build with lzma/zstd
- skip i586 tests (boo#1179331)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1619265600">- fix packaging warnings related to tor-master service</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1620734400">- tor 0.4.5.8
  * https://lists.torproject.org/pipermail/tor-announce/2021-May/000219.html
  * allow Linux sandbox with Glibc 2.33
  * work with autoconf 2.70+
  * several other minor features and bugfixes (see announcement)</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1623672000">- tor 0.4.5.9
  * Don't allow relays to spoof RELAY_END or RELAY_RESOLVED cell (CVE-2021-34548, boo#1187322)
  * Detect more failure conditions from the OpenSSL RNG code (boo#1187323)
  * Resist a hashtable-based CPU denial-of-service attack against relays (CVE-2021-34549, boo#1187324)
  * Fix an out-of-bounds memory access in v3 onion service descriptor parsing (CVE-2021-34550, boo#1187325)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1623844800">- tor 0.4.6.5
  * Add controller support for creating v3 onion services with
    client auth
  * When voting on a relay with a Sybil-like appearance, add the
    Sybil flag when clearing out the other flags. This lets a relay
    operator know why their relay hasn't been included in the
    consensus
  * Relays now report how overloaded they are
  * Add a new DoS subsystem to control the rate of client
    connections for relays
  * Relays now publish statistics about v3 onions services
  * Improve circuit timeout algorithm for client performance
- add tor-0.4.6.5-gcc7.patch to fix build with gcc7</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1625140800">- tor 0.4.6.6:
  * Fix a compilation error with gcc 7, drop tor-0.4.6.5-gcc7.patch
  * Enable the deterministic RNG for unit tests that covers the
    address set bloomfilter-based API's</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1625572800">- Add missing service_add_pre tor-master.service</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1629201600">- tor 0.4.6.7:
  * Fix a DoS via a remotely triggerable assertion failure
    (boo#1189489, TROVE-2021-007, CVE-2021-38385)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1629806400">- Reduce boilerplate generated by %service_*.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1636804800">- tor 0.4.6.8:
  * Improving reporting of general overload state for DNS timeout
    errors by relays
  * Regenerate fallback directories for October 2021
  * Bug fixes for onion services
  * CVE-2021-22929: do not log v2 onion services access attempt
    warnings on disk excessively (TROVE-2021-008, boo#1192658)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1639742400">- tor 0.4.6.9:
  * remove the DNS timeout metric from the overload general signal
  * regenerate fallback directories generated on December 15, 2021
  * Update the geoip files to match the IPFire Location Database,
    as retrieved on 2021/12/15
  * Reject IPv6-only DirPort</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1644148800">- tor 0.4.6.10
  * minor bugfixes and features
  * https://gitlab.torproject.org/tpo/core/tor/-/raw/release-0.4.6/ReleaseNotes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1651060800">- tor 0.4.7.7
  * New feature: Congestion control to improve traffic speed and
    stability on the network once a majority of Exit nodes upgrade
    boo#1198949
  * Directory authorities: improved handling of "MiddleOnly" relays
  * Improved mitigation against guard discovery attacks on clients
    and short-lived services
  * Improve observed performance under DNS load
  * Improve handling of overload state
  * end-of-life relays running version 0.4.2.x, 0.4.3.x,
    0.4.4.x and 0.4.5 alphas/rc, 0.3.5.x are now rejected
  * Onion service v2 addresses are no longer recognized</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1655380800">- tor 0.4.7.8
  * Fix a scenario where RTT estimation can become wedged, seriously
    degrading congestion control performance on all circuits. This
    impacts clients, onion services, and relays, and can be triggered
    remotely by a malicious endpoint.
    (TROVE-2022-001, CVE-2022-33903, boo#1200672)
  * Regenerate fallback directories generated on June 17, 2022.
  * Update the geoip files to match the IPFire Location Database, as
    retrieved on 2022/06/17.
  * Allow the rseq system call in the sandbox
  * logging bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660219200">- tor 0.4.7.9 (boo#1202336)
  * major fixes aimed at reducing memory pressure on relays
  * prevent a possible side-channel
  * major bugfix related to congestion control
  * major bugfix related to Vanguard L2 layer node selection</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660305600">- tor 0.4.7.10
  * IPFire location database did not have proper ARIN network
    allocations - affected circuit path selection and relay metrics</changelog>
</package>
<package pkgid="5abf1f4f238de871edcaa11681157264d9fbea3eb117cf8dc00b0cee86a830b5" name="tor" arch="i586">
  <version epoch="0" ver="0.4.7.10" rel="bp154.2.6.1"/>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1611748800">- Restrict service permissions with systemd</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1612526400">- tor 0.4.4.7
  * https://blog.torproject.org/node/1990
  * Stop requiring a live consensus for v3 clients and services
  * Re-entry into the network is now denied at the Exit level
  * Fix undefined behavior on our Keccak library
  * Strip '\r' characters when reading text files on Unix platforms
  * Handle partial SOCKS5 messages correctly
- Add tor-practracker.patch to fix tests</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1613476800">- tor 0.4.5.6
  * https://lists.torproject.org/pipermail/tor-announce/2021-February/000214.html
  * Introduce a new MetricsPort HTTP interface
  * Support IPv6 in the torrc Address option
  * Add event-tracing library support for USDT and LTTng-UST
  * Try to read N of N bytes on a TLS connection
- Drop upstream tor-practracker.patch</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1615896000">- tor 0.4.5.7
  * https://lists.torproject.org/pipermail/tor-announce/2021-March/000216.html
  * Fix 2 denial of service security issues (boo#1183726)
    + Disable the dump_desc() function that we used to dump unparseable
    information to disk (CVE-2021-28089)
    + Fix a bug in appending detached signatures to a pending consensus
    document that could be used to crash a directory authority
    (CVE-2021-28090)
  * Ship geoip files based on the IPFire Location Database</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1619179200">- Fix logging issue due to systemd picking up stdout - boo#1181244
  Continue to log notices to syslog by default.
- actually build with lzma/zstd
- skip i586 tests (boo#1179331)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1619265600">- fix packaging warnings related to tor-master service</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1620734400">- tor 0.4.5.8
  * https://lists.torproject.org/pipermail/tor-announce/2021-May/000219.html
  * allow Linux sandbox with Glibc 2.33
  * work with autoconf 2.70+
  * several other minor features and bugfixes (see announcement)</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1623672000">- tor 0.4.5.9
  * Don't allow relays to spoof RELAY_END or RELAY_RESOLVED cell (CVE-2021-34548, boo#1187322)
  * Detect more failure conditions from the OpenSSL RNG code (boo#1187323)
  * Resist a hashtable-based CPU denial-of-service attack against relays (CVE-2021-34549, boo#1187324)
  * Fix an out-of-bounds memory access in v3 onion service descriptor parsing (CVE-2021-34550, boo#1187325)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1623844800">- tor 0.4.6.5
  * Add controller support for creating v3 onion services with
    client auth
  * When voting on a relay with a Sybil-like appearance, add the
    Sybil flag when clearing out the other flags. This lets a relay
    operator know why their relay hasn't been included in the
    consensus
  * Relays now report how overloaded they are
  * Add a new DoS subsystem to control the rate of client
    connections for relays
  * Relays now publish statistics about v3 onions services
  * Improve circuit timeout algorithm for client performance
- add tor-0.4.6.5-gcc7.patch to fix build with gcc7</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1625140800">- tor 0.4.6.6:
  * Fix a compilation error with gcc 7, drop tor-0.4.6.5-gcc7.patch
  * Enable the deterministic RNG for unit tests that covers the
    address set bloomfilter-based API's</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1625572800">- Add missing service_add_pre tor-master.service</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1629201600">- tor 0.4.6.7:
  * Fix a DoS via a remotely triggerable assertion failure
    (boo#1189489, TROVE-2021-007, CVE-2021-38385)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1629806400">- Reduce boilerplate generated by %service_*.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1636804800">- tor 0.4.6.8:
  * Improving reporting of general overload state for DNS timeout
    errors by relays
  * Regenerate fallback directories for October 2021
  * Bug fixes for onion services
  * CVE-2021-22929: do not log v2 onion services access attempt
    warnings on disk excessively (TROVE-2021-008, boo#1192658)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1639742400">- tor 0.4.6.9:
  * remove the DNS timeout metric from the overload general signal
  * regenerate fallback directories generated on December 15, 2021
  * Update the geoip files to match the IPFire Location Database,
    as retrieved on 2021/12/15
  * Reject IPv6-only DirPort</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1644148800">- tor 0.4.6.10
  * minor bugfixes and features
  * https://gitlab.torproject.org/tpo/core/tor/-/raw/release-0.4.6/ReleaseNotes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1651060800">- tor 0.4.7.7
  * New feature: Congestion control to improve traffic speed and
    stability on the network once a majority of Exit nodes upgrade
    boo#1198949
  * Directory authorities: improved handling of "MiddleOnly" relays
  * Improved mitigation against guard discovery attacks on clients
    and short-lived services
  * Improve observed performance under DNS load
  * Improve handling of overload state
  * end-of-life relays running version 0.4.2.x, 0.4.3.x,
    0.4.4.x and 0.4.5 alphas/rc, 0.3.5.x are now rejected
  * Onion service v2 addresses are no longer recognized</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1655380800">- tor 0.4.7.8
  * Fix a scenario where RTT estimation can become wedged, seriously
    degrading congestion control performance on all circuits. This
    impacts clients, onion services, and relays, and can be triggered
    remotely by a malicious endpoint.
    (TROVE-2022-001, CVE-2022-33903, boo#1200672)
  * Regenerate fallback directories generated on June 17, 2022.
  * Update the geoip files to match the IPFire Location Database, as
    retrieved on 2022/06/17.
  * Allow the rseq system call in the sandbox
  * logging bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660219200">- tor 0.4.7.9 (boo#1202336)
  * major fixes aimed at reducing memory pressure on relays
  * prevent a possible side-channel
  * major bugfix related to congestion control
  * major bugfix related to Vanguard L2 layer node selection</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660305600">- tor 0.4.7.10
  * IPFire location database did not have proper ARIN network
    allocations - affected circuit path selection and relay metrics</changelog>
</package>
<package pkgid="3650e041b1608597f08d3811ef9f6161b534b5aaf0a0ab593443734063710932" name="tor" arch="ppc64le">
  <version epoch="0" ver="0.4.7.10" rel="bp154.2.6.1"/>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1611748800">- Restrict service permissions with systemd</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1612526400">- tor 0.4.4.7
  * https://blog.torproject.org/node/1990
  * Stop requiring a live consensus for v3 clients and services
  * Re-entry into the network is now denied at the Exit level
  * Fix undefined behavior on our Keccak library
  * Strip '\r' characters when reading text files on Unix platforms
  * Handle partial SOCKS5 messages correctly
- Add tor-practracker.patch to fix tests</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1613476800">- tor 0.4.5.6
  * https://lists.torproject.org/pipermail/tor-announce/2021-February/000214.html
  * Introduce a new MetricsPort HTTP interface
  * Support IPv6 in the torrc Address option
  * Add event-tracing library support for USDT and LTTng-UST
  * Try to read N of N bytes on a TLS connection
- Drop upstream tor-practracker.patch</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1615896000">- tor 0.4.5.7
  * https://lists.torproject.org/pipermail/tor-announce/2021-March/000216.html
  * Fix 2 denial of service security issues (boo#1183726)
    + Disable the dump_desc() function that we used to dump unparseable
    information to disk (CVE-2021-28089)
    + Fix a bug in appending detached signatures to a pending consensus
    document that could be used to crash a directory authority
    (CVE-2021-28090)
  * Ship geoip files based on the IPFire Location Database</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1619179200">- Fix logging issue due to systemd picking up stdout - boo#1181244
  Continue to log notices to syslog by default.
- actually build with lzma/zstd
- skip i586 tests (boo#1179331)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1619265600">- fix packaging warnings related to tor-master service</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1620734400">- tor 0.4.5.8
  * https://lists.torproject.org/pipermail/tor-announce/2021-May/000219.html
  * allow Linux sandbox with Glibc 2.33
  * work with autoconf 2.70+
  * several other minor features and bugfixes (see announcement)</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1623672000">- tor 0.4.5.9
  * Don't allow relays to spoof RELAY_END or RELAY_RESOLVED cell (CVE-2021-34548, boo#1187322)
  * Detect more failure conditions from the OpenSSL RNG code (boo#1187323)
  * Resist a hashtable-based CPU denial-of-service attack against relays (CVE-2021-34549, boo#1187324)
  * Fix an out-of-bounds memory access in v3 onion service descriptor parsing (CVE-2021-34550, boo#1187325)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1623844800">- tor 0.4.6.5
  * Add controller support for creating v3 onion services with
    client auth
  * When voting on a relay with a Sybil-like appearance, add the
    Sybil flag when clearing out the other flags. This lets a relay
    operator know why their relay hasn't been included in the
    consensus
  * Relays now report how overloaded they are
  * Add a new DoS subsystem to control the rate of client
    connections for relays
  * Relays now publish statistics about v3 onions services
  * Improve circuit timeout algorithm for client performance
- add tor-0.4.6.5-gcc7.patch to fix build with gcc7</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1625140800">- tor 0.4.6.6:
  * Fix a compilation error with gcc 7, drop tor-0.4.6.5-gcc7.patch
  * Enable the deterministic RNG for unit tests that covers the
    address set bloomfilter-based API's</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1625572800">- Add missing service_add_pre tor-master.service</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1629201600">- tor 0.4.6.7:
  * Fix a DoS via a remotely triggerable assertion failure
    (boo#1189489, TROVE-2021-007, CVE-2021-38385)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1629806400">- Reduce boilerplate generated by %service_*.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1636804800">- tor 0.4.6.8:
  * Improving reporting of general overload state for DNS timeout
    errors by relays
  * Regenerate fallback directories for October 2021
  * Bug fixes for onion services
  * CVE-2021-22929: do not log v2 onion services access attempt
    warnings on disk excessively (TROVE-2021-008, boo#1192658)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1639742400">- tor 0.4.6.9:
  * remove the DNS timeout metric from the overload general signal
  * regenerate fallback directories generated on December 15, 2021
  * Update the geoip files to match the IPFire Location Database,
    as retrieved on 2021/12/15
  * Reject IPv6-only DirPort</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1644148800">- tor 0.4.6.10
  * minor bugfixes and features
  * https://gitlab.torproject.org/tpo/core/tor/-/raw/release-0.4.6/ReleaseNotes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1651060800">- tor 0.4.7.7
  * New feature: Congestion control to improve traffic speed and
    stability on the network once a majority of Exit nodes upgrade
    boo#1198949
  * Directory authorities: improved handling of "MiddleOnly" relays
  * Improved mitigation against guard discovery attacks on clients
    and short-lived services
  * Improve observed performance under DNS load
  * Improve handling of overload state
  * end-of-life relays running version 0.4.2.x, 0.4.3.x,
    0.4.4.x and 0.4.5 alphas/rc, 0.3.5.x are now rejected
  * Onion service v2 addresses are no longer recognized</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1655380800">- tor 0.4.7.8
  * Fix a scenario where RTT estimation can become wedged, seriously
    degrading congestion control performance on all circuits. This
    impacts clients, onion services, and relays, and can be triggered
    remotely by a malicious endpoint.
    (TROVE-2022-001, CVE-2022-33903, boo#1200672)
  * Regenerate fallback directories generated on June 17, 2022.
  * Update the geoip files to match the IPFire Location Database, as
    retrieved on 2022/06/17.
  * Allow the rseq system call in the sandbox
  * logging bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660219200">- tor 0.4.7.9 (boo#1202336)
  * major fixes aimed at reducing memory pressure on relays
  * prevent a possible side-channel
  * major bugfix related to congestion control
  * major bugfix related to Vanguard L2 layer node selection</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660305600">- tor 0.4.7.10
  * IPFire location database did not have proper ARIN network
    allocations - affected circuit path selection and relay metrics</changelog>
</package>
<package pkgid="4de16db44e50f948c38d740ae86ca3e99b872a1da22cb7266b9f850e9de75f35" name="tor" arch="s390x">
  <version epoch="0" ver="0.4.7.10" rel="bp154.2.6.1"/>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1611748800">- Restrict service permissions with systemd</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1612526400">- tor 0.4.4.7
  * https://blog.torproject.org/node/1990
  * Stop requiring a live consensus for v3 clients and services
  * Re-entry into the network is now denied at the Exit level
  * Fix undefined behavior on our Keccak library
  * Strip '\r' characters when reading text files on Unix platforms
  * Handle partial SOCKS5 messages correctly
- Add tor-practracker.patch to fix tests</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1613476800">- tor 0.4.5.6
  * https://lists.torproject.org/pipermail/tor-announce/2021-February/000214.html
  * Introduce a new MetricsPort HTTP interface
  * Support IPv6 in the torrc Address option
  * Add event-tracing library support for USDT and LTTng-UST
  * Try to read N of N bytes on a TLS connection
- Drop upstream tor-practracker.patch</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1615896000">- tor 0.4.5.7
  * https://lists.torproject.org/pipermail/tor-announce/2021-March/000216.html
  * Fix 2 denial of service security issues (boo#1183726)
    + Disable the dump_desc() function that we used to dump unparseable
    information to disk (CVE-2021-28089)
    + Fix a bug in appending detached signatures to a pending consensus
    document that could be used to crash a directory authority
    (CVE-2021-28090)
  * Ship geoip files based on the IPFire Location Database</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1619179200">- Fix logging issue due to systemd picking up stdout - boo#1181244
  Continue to log notices to syslog by default.
- actually build with lzma/zstd
- skip i586 tests (boo#1179331)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1619265600">- fix packaging warnings related to tor-master service</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1620734400">- tor 0.4.5.8
  * https://lists.torproject.org/pipermail/tor-announce/2021-May/000219.html
  * allow Linux sandbox with Glibc 2.33
  * work with autoconf 2.70+
  * several other minor features and bugfixes (see announcement)</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1623672000">- tor 0.4.5.9
  * Don't allow relays to spoof RELAY_END or RELAY_RESOLVED cell (CVE-2021-34548, boo#1187322)
  * Detect more failure conditions from the OpenSSL RNG code (boo#1187323)
  * Resist a hashtable-based CPU denial-of-service attack against relays (CVE-2021-34549, boo#1187324)
  * Fix an out-of-bounds memory access in v3 onion service descriptor parsing (CVE-2021-34550, boo#1187325)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1623844800">- tor 0.4.6.5
  * Add controller support for creating v3 onion services with
    client auth
  * When voting on a relay with a Sybil-like appearance, add the
    Sybil flag when clearing out the other flags. This lets a relay
    operator know why their relay hasn't been included in the
    consensus
  * Relays now report how overloaded they are
  * Add a new DoS subsystem to control the rate of client
    connections for relays
  * Relays now publish statistics about v3 onions services
  * Improve circuit timeout algorithm for client performance
- add tor-0.4.6.5-gcc7.patch to fix build with gcc7</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1625140800">- tor 0.4.6.6:
  * Fix a compilation error with gcc 7, drop tor-0.4.6.5-gcc7.patch
  * Enable the deterministic RNG for unit tests that covers the
    address set bloomfilter-based API's</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1625572800">- Add missing service_add_pre tor-master.service</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1629201600">- tor 0.4.6.7:
  * Fix a DoS via a remotely triggerable assertion failure
    (boo#1189489, TROVE-2021-007, CVE-2021-38385)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1629806400">- Reduce boilerplate generated by %service_*.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1636804800">- tor 0.4.6.8:
  * Improving reporting of general overload state for DNS timeout
    errors by relays
  * Regenerate fallback directories for October 2021
  * Bug fixes for onion services
  * CVE-2021-22929: do not log v2 onion services access attempt
    warnings on disk excessively (TROVE-2021-008, boo#1192658)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1639742400">- tor 0.4.6.9:
  * remove the DNS timeout metric from the overload general signal
  * regenerate fallback directories generated on December 15, 2021
  * Update the geoip files to match the IPFire Location Database,
    as retrieved on 2021/12/15
  * Reject IPv6-only DirPort</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1644148800">- tor 0.4.6.10
  * minor bugfixes and features
  * https://gitlab.torproject.org/tpo/core/tor/-/raw/release-0.4.6/ReleaseNotes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1651060800">- tor 0.4.7.7
  * New feature: Congestion control to improve traffic speed and
    stability on the network once a majority of Exit nodes upgrade
    boo#1198949
  * Directory authorities: improved handling of "MiddleOnly" relays
  * Improved mitigation against guard discovery attacks on clients
    and short-lived services
  * Improve observed performance under DNS load
  * Improve handling of overload state
  * end-of-life relays running version 0.4.2.x, 0.4.3.x,
    0.4.4.x and 0.4.5 alphas/rc, 0.3.5.x are now rejected
  * Onion service v2 addresses are no longer recognized</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1655380800">- tor 0.4.7.8
  * Fix a scenario where RTT estimation can become wedged, seriously
    degrading congestion control performance on all circuits. This
    impacts clients, onion services, and relays, and can be triggered
    remotely by a malicious endpoint.
    (TROVE-2022-001, CVE-2022-33903, boo#1200672)
  * Regenerate fallback directories generated on June 17, 2022.
  * Update the geoip files to match the IPFire Location Database, as
    retrieved on 2022/06/17.
  * Allow the rseq system call in the sandbox
  * logging bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660219200">- tor 0.4.7.9 (boo#1202336)
  * major fixes aimed at reducing memory pressure on relays
  * prevent a possible side-channel
  * major bugfix related to congestion control
  * major bugfix related to Vanguard L2 layer node selection</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660305600">- tor 0.4.7.10
  * IPFire location database did not have proper ARIN network
    allocations - affected circuit path selection and relay metrics</changelog>
</package>
<package pkgid="39e6714e4771667288d44ced191aeaf8959173d2fb9cb70754c2db586163c61a" name="tor" arch="src">
  <version epoch="0" ver="0.4.7.10" rel="bp154.2.6.1"/>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1611748800">- Restrict service permissions with systemd</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1612526400">- tor 0.4.4.7
  * https://blog.torproject.org/node/1990
  * Stop requiring a live consensus for v3 clients and services
  * Re-entry into the network is now denied at the Exit level
  * Fix undefined behavior on our Keccak library
  * Strip '\r' characters when reading text files on Unix platforms
  * Handle partial SOCKS5 messages correctly
- Add tor-practracker.patch to fix tests</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1613476800">- tor 0.4.5.6
  * https://lists.torproject.org/pipermail/tor-announce/2021-February/000214.html
  * Introduce a new MetricsPort HTTP interface
  * Support IPv6 in the torrc Address option
  * Add event-tracing library support for USDT and LTTng-UST
  * Try to read N of N bytes on a TLS connection
- Drop upstream tor-practracker.patch</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1615896000">- tor 0.4.5.7
  * https://lists.torproject.org/pipermail/tor-announce/2021-March/000216.html
  * Fix 2 denial of service security issues (boo#1183726)
    + Disable the dump_desc() function that we used to dump unparseable
    information to disk (CVE-2021-28089)
    + Fix a bug in appending detached signatures to a pending consensus
    document that could be used to crash a directory authority
    (CVE-2021-28090)
  * Ship geoip files based on the IPFire Location Database</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1619179200">- Fix logging issue due to systemd picking up stdout - boo#1181244
  Continue to log notices to syslog by default.
- actually build with lzma/zstd
- skip i586 tests (boo#1179331)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1619265600">- fix packaging warnings related to tor-master service</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1620734400">- tor 0.4.5.8
  * https://lists.torproject.org/pipermail/tor-announce/2021-May/000219.html
  * allow Linux sandbox with Glibc 2.33
  * work with autoconf 2.70+
  * several other minor features and bugfixes (see announcement)</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1623672000">- tor 0.4.5.9
  * Don't allow relays to spoof RELAY_END or RELAY_RESOLVED cell (CVE-2021-34548, boo#1187322)
  * Detect more failure conditions from the OpenSSL RNG code (boo#1187323)
  * Resist a hashtable-based CPU denial-of-service attack against relays (CVE-2021-34549, boo#1187324)
  * Fix an out-of-bounds memory access in v3 onion service descriptor parsing (CVE-2021-34550, boo#1187325)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1623844800">- tor 0.4.6.5
  * Add controller support for creating v3 onion services with
    client auth
  * When voting on a relay with a Sybil-like appearance, add the
    Sybil flag when clearing out the other flags. This lets a relay
    operator know why their relay hasn't been included in the
    consensus
  * Relays now report how overloaded they are
  * Add a new DoS subsystem to control the rate of client
    connections for relays
  * Relays now publish statistics about v3 onions services
  * Improve circuit timeout algorithm for client performance
- add tor-0.4.6.5-gcc7.patch to fix build with gcc7</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1625140800">- tor 0.4.6.6:
  * Fix a compilation error with gcc 7, drop tor-0.4.6.5-gcc7.patch
  * Enable the deterministic RNG for unit tests that covers the
    address set bloomfilter-based API's</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1625572800">- Add missing service_add_pre tor-master.service</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1629201600">- tor 0.4.6.7:
  * Fix a DoS via a remotely triggerable assertion failure
    (boo#1189489, TROVE-2021-007, CVE-2021-38385)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1629806400">- Reduce boilerplate generated by %service_*.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1636804800">- tor 0.4.6.8:
  * Improving reporting of general overload state for DNS timeout
    errors by relays
  * Regenerate fallback directories for October 2021
  * Bug fixes for onion services
  * CVE-2021-22929: do not log v2 onion services access attempt
    warnings on disk excessively (TROVE-2021-008, boo#1192658)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1639742400">- tor 0.4.6.9:
  * remove the DNS timeout metric from the overload general signal
  * regenerate fallback directories generated on December 15, 2021
  * Update the geoip files to match the IPFire Location Database,
    as retrieved on 2021/12/15
  * Reject IPv6-only DirPort</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1644148800">- tor 0.4.6.10
  * minor bugfixes and features
  * https://gitlab.torproject.org/tpo/core/tor/-/raw/release-0.4.6/ReleaseNotes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1651060800">- tor 0.4.7.7
  * New feature: Congestion control to improve traffic speed and
    stability on the network once a majority of Exit nodes upgrade
    boo#1198949
  * Directory authorities: improved handling of "MiddleOnly" relays
  * Improved mitigation against guard discovery attacks on clients
    and short-lived services
  * Improve observed performance under DNS load
  * Improve handling of overload state
  * end-of-life relays running version 0.4.2.x, 0.4.3.x,
    0.4.4.x and 0.4.5 alphas/rc, 0.3.5.x are now rejected
  * Onion service v2 addresses are no longer recognized</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1655380800">- tor 0.4.7.8
  * Fix a scenario where RTT estimation can become wedged, seriously
    degrading congestion control performance on all circuits. This
    impacts clients, onion services, and relays, and can be triggered
    remotely by a malicious endpoint.
    (TROVE-2022-001, CVE-2022-33903, boo#1200672)
  * Regenerate fallback directories generated on June 17, 2022.
  * Update the geoip files to match the IPFire Location Database, as
    retrieved on 2022/06/17.
  * Allow the rseq system call in the sandbox
  * logging bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660219200">- tor 0.4.7.9 (boo#1202336)
  * major fixes aimed at reducing memory pressure on relays
  * prevent a possible side-channel
  * major bugfix related to congestion control
  * major bugfix related to Vanguard L2 layer node selection</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660305600">- tor 0.4.7.10
  * IPFire location database did not have proper ARIN network
    allocations - affected circuit path selection and relay metrics</changelog>
</package>
<package pkgid="b74a23c72d0141e163476f692437a48f320a14089034625135221a761524bf47" name="tor" arch="x86_64">
  <version epoch="0" ver="0.4.7.10" rel="bp154.2.6.1"/>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1611748800">- Restrict service permissions with systemd</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1612526400">- tor 0.4.4.7
  * https://blog.torproject.org/node/1990
  * Stop requiring a live consensus for v3 clients and services
  * Re-entry into the network is now denied at the Exit level
  * Fix undefined behavior on our Keccak library
  * Strip '\r' characters when reading text files on Unix platforms
  * Handle partial SOCKS5 messages correctly
- Add tor-practracker.patch to fix tests</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1613476800">- tor 0.4.5.6
  * https://lists.torproject.org/pipermail/tor-announce/2021-February/000214.html
  * Introduce a new MetricsPort HTTP interface
  * Support IPv6 in the torrc Address option
  * Add event-tracing library support for USDT and LTTng-UST
  * Try to read N of N bytes on a TLS connection
- Drop upstream tor-practracker.patch</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1615896000">- tor 0.4.5.7
  * https://lists.torproject.org/pipermail/tor-announce/2021-March/000216.html
  * Fix 2 denial of service security issues (boo#1183726)
    + Disable the dump_desc() function that we used to dump unparseable
    information to disk (CVE-2021-28089)
    + Fix a bug in appending detached signatures to a pending consensus
    document that could be used to crash a directory authority
    (CVE-2021-28090)
  * Ship geoip files based on the IPFire Location Database</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1619179200">- Fix logging issue due to systemd picking up stdout - boo#1181244
  Continue to log notices to syslog by default.
- actually build with lzma/zstd
- skip i586 tests (boo#1179331)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1619265600">- fix packaging warnings related to tor-master service</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1620734400">- tor 0.4.5.8
  * https://lists.torproject.org/pipermail/tor-announce/2021-May/000219.html
  * allow Linux sandbox with Glibc 2.33
  * work with autoconf 2.70+
  * several other minor features and bugfixes (see announcement)</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1623672000">- tor 0.4.5.9
  * Don't allow relays to spoof RELAY_END or RELAY_RESOLVED cell (CVE-2021-34548, boo#1187322)
  * Detect more failure conditions from the OpenSSL RNG code (boo#1187323)
  * Resist a hashtable-based CPU denial-of-service attack against relays (CVE-2021-34549, boo#1187324)
  * Fix an out-of-bounds memory access in v3 onion service descriptor parsing (CVE-2021-34550, boo#1187325)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1623844800">- tor 0.4.6.5
  * Add controller support for creating v3 onion services with
    client auth
  * When voting on a relay with a Sybil-like appearance, add the
    Sybil flag when clearing out the other flags. This lets a relay
    operator know why their relay hasn't been included in the
    consensus
  * Relays now report how overloaded they are
  * Add a new DoS subsystem to control the rate of client
    connections for relays
  * Relays now publish statistics about v3 onions services
  * Improve circuit timeout algorithm for client performance
- add tor-0.4.6.5-gcc7.patch to fix build with gcc7</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1625140800">- tor 0.4.6.6:
  * Fix a compilation error with gcc 7, drop tor-0.4.6.5-gcc7.patch
  * Enable the deterministic RNG for unit tests that covers the
    address set bloomfilter-based API's</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1625572800">- Add missing service_add_pre tor-master.service</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1629201600">- tor 0.4.6.7:
  * Fix a DoS via a remotely triggerable assertion failure
    (boo#1189489, TROVE-2021-007, CVE-2021-38385)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1629806400">- Reduce boilerplate generated by %service_*.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1636804800">- tor 0.4.6.8:
  * Improving reporting of general overload state for DNS timeout
    errors by relays
  * Regenerate fallback directories for October 2021
  * Bug fixes for onion services
  * CVE-2021-22929: do not log v2 onion services access attempt
    warnings on disk excessively (TROVE-2021-008, boo#1192658)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1639742400">- tor 0.4.6.9:
  * remove the DNS timeout metric from the overload general signal
  * regenerate fallback directories generated on December 15, 2021
  * Update the geoip files to match the IPFire Location Database,
    as retrieved on 2021/12/15
  * Reject IPv6-only DirPort</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1644148800">- tor 0.4.6.10
  * minor bugfixes and features
  * https://gitlab.torproject.org/tpo/core/tor/-/raw/release-0.4.6/ReleaseNotes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1651060800">- tor 0.4.7.7
  * New feature: Congestion control to improve traffic speed and
    stability on the network once a majority of Exit nodes upgrade
    boo#1198949
  * Directory authorities: improved handling of "MiddleOnly" relays
  * Improved mitigation against guard discovery attacks on clients
    and short-lived services
  * Improve observed performance under DNS load
  * Improve handling of overload state
  * end-of-life relays running version 0.4.2.x, 0.4.3.x,
    0.4.4.x and 0.4.5 alphas/rc, 0.3.5.x are now rejected
  * Onion service v2 addresses are no longer recognized</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1655380800">- tor 0.4.7.8
  * Fix a scenario where RTT estimation can become wedged, seriously
    degrading congestion control performance on all circuits. This
    impacts clients, onion services, and relays, and can be triggered
    remotely by a malicious endpoint.
    (TROVE-2022-001, CVE-2022-33903, boo#1200672)
  * Regenerate fallback directories generated on June 17, 2022.
  * Update the geoip files to match the IPFire Location Database, as
    retrieved on 2022/06/17.
  * Allow the rseq system call in the sandbox
  * logging bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660219200">- tor 0.4.7.9 (boo#1202336)
  * major fixes aimed at reducing memory pressure on relays
  * prevent a possible side-channel
  * major bugfix related to congestion control
  * major bugfix related to Vanguard L2 layer node selection</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660305600">- tor 0.4.7.10
  * IPFire location database did not have proper ARIN network
    allocations - affected circuit path selection and relay metrics</changelog>
</package>
<package pkgid="d375759a13959cb3951c84eaadfbf3619fa636d31c28e6f40e51c6f8b2199716" name="tor" arch="aarch64">
  <version epoch="0" ver="0.4.7.11" rel="bp154.2.9.1"/>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1612526400">- tor 0.4.4.7
  * https://blog.torproject.org/node/1990
  * Stop requiring a live consensus for v3 clients and services
  * Re-entry into the network is now denied at the Exit level
  * Fix undefined behavior on our Keccak library
  * Strip '\r' characters when reading text files on Unix platforms
  * Handle partial SOCKS5 messages correctly
- Add tor-practracker.patch to fix tests</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1613476800">- tor 0.4.5.6
  * https://lists.torproject.org/pipermail/tor-announce/2021-February/000214.html
  * Introduce a new MetricsPort HTTP interface
  * Support IPv6 in the torrc Address option
  * Add event-tracing library support for USDT and LTTng-UST
  * Try to read N of N bytes on a TLS connection
- Drop upstream tor-practracker.patch</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1615896000">- tor 0.4.5.7
  * https://lists.torproject.org/pipermail/tor-announce/2021-March/000216.html
  * Fix 2 denial of service security issues (boo#1183726)
    + Disable the dump_desc() function that we used to dump unparseable
    information to disk (CVE-2021-28089)
    + Fix a bug in appending detached signatures to a pending consensus
    document that could be used to crash a directory authority
    (CVE-2021-28090)
  * Ship geoip files based on the IPFire Location Database</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1619179200">- Fix logging issue due to systemd picking up stdout - boo#1181244
  Continue to log notices to syslog by default.
- actually build with lzma/zstd
- skip i586 tests (boo#1179331)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1619265600">- fix packaging warnings related to tor-master service</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1620734400">- tor 0.4.5.8
  * https://lists.torproject.org/pipermail/tor-announce/2021-May/000219.html
  * allow Linux sandbox with Glibc 2.33
  * work with autoconf 2.70+
  * several other minor features and bugfixes (see announcement)</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1623672000">- tor 0.4.5.9
  * Don't allow relays to spoof RELAY_END or RELAY_RESOLVED cell (CVE-2021-34548, boo#1187322)
  * Detect more failure conditions from the OpenSSL RNG code (boo#1187323)
  * Resist a hashtable-based CPU denial-of-service attack against relays (CVE-2021-34549, boo#1187324)
  * Fix an out-of-bounds memory access in v3 onion service descriptor parsing (CVE-2021-34550, boo#1187325)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1623844800">- tor 0.4.6.5
  * Add controller support for creating v3 onion services with
    client auth
  * When voting on a relay with a Sybil-like appearance, add the
    Sybil flag when clearing out the other flags. This lets a relay
    operator know why their relay hasn't been included in the
    consensus
  * Relays now report how overloaded they are
  * Add a new DoS subsystem to control the rate of client
    connections for relays
  * Relays now publish statistics about v3 onions services
  * Improve circuit timeout algorithm for client performance
- add tor-0.4.6.5-gcc7.patch to fix build with gcc7</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1625140800">- tor 0.4.6.6:
  * Fix a compilation error with gcc 7, drop tor-0.4.6.5-gcc7.patch
  * Enable the deterministic RNG for unit tests that covers the
    address set bloomfilter-based API's</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1625572800">- Add missing service_add_pre tor-master.service</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1629201600">- tor 0.4.6.7:
  * Fix a DoS via a remotely triggerable assertion failure
    (boo#1189489, TROVE-2021-007, CVE-2021-38385)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1629806400">- Reduce boilerplate generated by %service_*.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1636804800">- tor 0.4.6.8:
  * Improving reporting of general overload state for DNS timeout
    errors by relays
  * Regenerate fallback directories for October 2021
  * Bug fixes for onion services
  * CVE-2021-22929: do not log v2 onion services access attempt
    warnings on disk excessively (TROVE-2021-008, boo#1192658)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1639742400">- tor 0.4.6.9:
  * remove the DNS timeout metric from the overload general signal
  * regenerate fallback directories generated on December 15, 2021
  * Update the geoip files to match the IPFire Location Database,
    as retrieved on 2021/12/15
  * Reject IPv6-only DirPort</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1644148800">- tor 0.4.6.10
  * minor bugfixes and features
  * https://gitlab.torproject.org/tpo/core/tor/-/raw/release-0.4.6/ReleaseNotes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1651060800">- tor 0.4.7.7
  * New feature: Congestion control to improve traffic speed and
    stability on the network once a majority of Exit nodes upgrade
    boo#1198949
  * Directory authorities: improved handling of "MiddleOnly" relays
  * Improved mitigation against guard discovery attacks on clients
    and short-lived services
  * Improve observed performance under DNS load
  * Improve handling of overload state
  * end-of-life relays running version 0.4.2.x, 0.4.3.x,
    0.4.4.x and 0.4.5 alphas/rc, 0.3.5.x are now rejected
  * Onion service v2 addresses are no longer recognized</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1655380800">- tor 0.4.7.8
  * Fix a scenario where RTT estimation can become wedged, seriously
    degrading congestion control performance on all circuits. This
    impacts clients, onion services, and relays, and can be triggered
    remotely by a malicious endpoint.
    (TROVE-2022-001, CVE-2022-33903, boo#1200672)
  * Regenerate fallback directories generated on June 17, 2022.
  * Update the geoip files to match the IPFire Location Database, as
    retrieved on 2022/06/17.
  * Allow the rseq system call in the sandbox
  * logging bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660219200">- tor 0.4.7.9 (boo#1202336)
  * major fixes aimed at reducing memory pressure on relays
  * prevent a possible side-channel
  * major bugfix related to congestion control
  * major bugfix related to Vanguard L2 layer node selection</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660305600">- tor 0.4.7.10
  * IPFire location database did not have proper ARIN network
    allocations - affected circuit path selection and relay metrics</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1668081600">- tor 0.4.7.11:
  * Improve security of DNS cache by randomly clipping the TTL
    value (boo#1205307, TROVE-2021-009)
  * Improved defenses against network-wide DoS, multiple counters
    and metrics added to MetricsPorts
  * Apply circuit creation anti-DoS defenses if the outbound
    circuit max cell queue size is reached too many times. This
    introduces two new consensus parameters to control the queue
    size limit and number of times allowed to go over that limit.
  * Directory authority updates
  * IPFire database and geoip updates
  * Bump the maximum amount of CPU that can be used from 16 to 128.
    The NumCPUs torrc option overrides this hardcoded maximum.
  * onion service: set a higher circuit build timeout for opened
    client rendezvous circuit to avoid timeouts and retry load
  * Make the service retry a rendezvous if the circuit is being
    repurposed for measurements</changelog>
</package>
<package pkgid="731170c299e095d07034bcaf93708a3c3a96c79750772361a3ac5212616f6c65" name="tor" arch="i586">
  <version epoch="0" ver="0.4.7.11" rel="bp154.2.9.1"/>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1612526400">- tor 0.4.4.7
  * https://blog.torproject.org/node/1990
  * Stop requiring a live consensus for v3 clients and services
  * Re-entry into the network is now denied at the Exit level
  * Fix undefined behavior on our Keccak library
  * Strip '\r' characters when reading text files on Unix platforms
  * Handle partial SOCKS5 messages correctly
- Add tor-practracker.patch to fix tests</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1613476800">- tor 0.4.5.6
  * https://lists.torproject.org/pipermail/tor-announce/2021-February/000214.html
  * Introduce a new MetricsPort HTTP interface
  * Support IPv6 in the torrc Address option
  * Add event-tracing library support for USDT and LTTng-UST
  * Try to read N of N bytes on a TLS connection
- Drop upstream tor-practracker.patch</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1615896000">- tor 0.4.5.7
  * https://lists.torproject.org/pipermail/tor-announce/2021-March/000216.html
  * Fix 2 denial of service security issues (boo#1183726)
    + Disable the dump_desc() function that we used to dump unparseable
    information to disk (CVE-2021-28089)
    + Fix a bug in appending detached signatures to a pending consensus
    document that could be used to crash a directory authority
    (CVE-2021-28090)
  * Ship geoip files based on the IPFire Location Database</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1619179200">- Fix logging issue due to systemd picking up stdout - boo#1181244
  Continue to log notices to syslog by default.
- actually build with lzma/zstd
- skip i586 tests (boo#1179331)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1619265600">- fix packaging warnings related to tor-master service</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1620734400">- tor 0.4.5.8
  * https://lists.torproject.org/pipermail/tor-announce/2021-May/000219.html
  * allow Linux sandbox with Glibc 2.33
  * work with autoconf 2.70+
  * several other minor features and bugfixes (see announcement)</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1623672000">- tor 0.4.5.9
  * Don't allow relays to spoof RELAY_END or RELAY_RESOLVED cell (CVE-2021-34548, boo#1187322)
  * Detect more failure conditions from the OpenSSL RNG code (boo#1187323)
  * Resist a hashtable-based CPU denial-of-service attack against relays (CVE-2021-34549, boo#1187324)
  * Fix an out-of-bounds memory access in v3 onion service descriptor parsing (CVE-2021-34550, boo#1187325)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1623844800">- tor 0.4.6.5
  * Add controller support for creating v3 onion services with
    client auth
  * When voting on a relay with a Sybil-like appearance, add the
    Sybil flag when clearing out the other flags. This lets a relay
    operator know why their relay hasn't been included in the
    consensus
  * Relays now report how overloaded they are
  * Add a new DoS subsystem to control the rate of client
    connections for relays
  * Relays now publish statistics about v3 onions services
  * Improve circuit timeout algorithm for client performance
- add tor-0.4.6.5-gcc7.patch to fix build with gcc7</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1625140800">- tor 0.4.6.6:
  * Fix a compilation error with gcc 7, drop tor-0.4.6.5-gcc7.patch
  * Enable the deterministic RNG for unit tests that covers the
    address set bloomfilter-based API's</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1625572800">- Add missing service_add_pre tor-master.service</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1629201600">- tor 0.4.6.7:
  * Fix a DoS via a remotely triggerable assertion failure
    (boo#1189489, TROVE-2021-007, CVE-2021-38385)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1629806400">- Reduce boilerplate generated by %service_*.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1636804800">- tor 0.4.6.8:
  * Improving reporting of general overload state for DNS timeout
    errors by relays
  * Regenerate fallback directories for October 2021
  * Bug fixes for onion services
  * CVE-2021-22929: do not log v2 onion services access attempt
    warnings on disk excessively (TROVE-2021-008, boo#1192658)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1639742400">- tor 0.4.6.9:
  * remove the DNS timeout metric from the overload general signal
  * regenerate fallback directories generated on December 15, 2021
  * Update the geoip files to match the IPFire Location Database,
    as retrieved on 2021/12/15
  * Reject IPv6-only DirPort</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1644148800">- tor 0.4.6.10
  * minor bugfixes and features
  * https://gitlab.torproject.org/tpo/core/tor/-/raw/release-0.4.6/ReleaseNotes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1651060800">- tor 0.4.7.7
  * New feature: Congestion control to improve traffic speed and
    stability on the network once a majority of Exit nodes upgrade
    boo#1198949
  * Directory authorities: improved handling of "MiddleOnly" relays
  * Improved mitigation against guard discovery attacks on clients
    and short-lived services
  * Improve observed performance under DNS load
  * Improve handling of overload state
  * end-of-life relays running version 0.4.2.x, 0.4.3.x,
    0.4.4.x and 0.4.5 alphas/rc, 0.3.5.x are now rejected
  * Onion service v2 addresses are no longer recognized</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1655380800">- tor 0.4.7.8
  * Fix a scenario where RTT estimation can become wedged, seriously
    degrading congestion control performance on all circuits. This
    impacts clients, onion services, and relays, and can be triggered
    remotely by a malicious endpoint.
    (TROVE-2022-001, CVE-2022-33903, boo#1200672)
  * Regenerate fallback directories generated on June 17, 2022.
  * Update the geoip files to match the IPFire Location Database, as
    retrieved on 2022/06/17.
  * Allow the rseq system call in the sandbox
  * logging bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660219200">- tor 0.4.7.9 (boo#1202336)
  * major fixes aimed at reducing memory pressure on relays
  * prevent a possible side-channel
  * major bugfix related to congestion control
  * major bugfix related to Vanguard L2 layer node selection</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660305600">- tor 0.4.7.10
  * IPFire location database did not have proper ARIN network
    allocations - affected circuit path selection and relay metrics</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1668081600">- tor 0.4.7.11:
  * Improve security of DNS cache by randomly clipping the TTL
    value (boo#1205307, TROVE-2021-009)
  * Improved defenses against network-wide DoS, multiple counters
    and metrics added to MetricsPorts
  * Apply circuit creation anti-DoS defenses if the outbound
    circuit max cell queue size is reached too many times. This
    introduces two new consensus parameters to control the queue
    size limit and number of times allowed to go over that limit.
  * Directory authority updates
  * IPFire database and geoip updates
  * Bump the maximum amount of CPU that can be used from 16 to 128.
    The NumCPUs torrc option overrides this hardcoded maximum.
  * onion service: set a higher circuit build timeout for opened
    client rendezvous circuit to avoid timeouts and retry load
  * Make the service retry a rendezvous if the circuit is being
    repurposed for measurements</changelog>
</package>
<package pkgid="aa74ddd4305be239e9c11aee1106fbdd8b15b1d292f5d5ded2ec19d1405f0d55" name="tor" arch="ppc64le">
  <version epoch="0" ver="0.4.7.11" rel="bp154.2.9.1"/>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1612526400">- tor 0.4.4.7
  * https://blog.torproject.org/node/1990
  * Stop requiring a live consensus for v3 clients and services
  * Re-entry into the network is now denied at the Exit level
  * Fix undefined behavior on our Keccak library
  * Strip '\r' characters when reading text files on Unix platforms
  * Handle partial SOCKS5 messages correctly
- Add tor-practracker.patch to fix tests</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1613476800">- tor 0.4.5.6
  * https://lists.torproject.org/pipermail/tor-announce/2021-February/000214.html
  * Introduce a new MetricsPort HTTP interface
  * Support IPv6 in the torrc Address option
  * Add event-tracing library support for USDT and LTTng-UST
  * Try to read N of N bytes on a TLS connection
- Drop upstream tor-practracker.patch</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1615896000">- tor 0.4.5.7
  * https://lists.torproject.org/pipermail/tor-announce/2021-March/000216.html
  * Fix 2 denial of service security issues (boo#1183726)
    + Disable the dump_desc() function that we used to dump unparseable
    information to disk (CVE-2021-28089)
    + Fix a bug in appending detached signatures to a pending consensus
    document that could be used to crash a directory authority
    (CVE-2021-28090)
  * Ship geoip files based on the IPFire Location Database</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1619179200">- Fix logging issue due to systemd picking up stdout - boo#1181244
  Continue to log notices to syslog by default.
- actually build with lzma/zstd
- skip i586 tests (boo#1179331)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1619265600">- fix packaging warnings related to tor-master service</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1620734400">- tor 0.4.5.8
  * https://lists.torproject.org/pipermail/tor-announce/2021-May/000219.html
  * allow Linux sandbox with Glibc 2.33
  * work with autoconf 2.70+
  * several other minor features and bugfixes (see announcement)</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1623672000">- tor 0.4.5.9
  * Don't allow relays to spoof RELAY_END or RELAY_RESOLVED cell (CVE-2021-34548, boo#1187322)
  * Detect more failure conditions from the OpenSSL RNG code (boo#1187323)
  * Resist a hashtable-based CPU denial-of-service attack against relays (CVE-2021-34549, boo#1187324)
  * Fix an out-of-bounds memory access in v3 onion service descriptor parsing (CVE-2021-34550, boo#1187325)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1623844800">- tor 0.4.6.5
  * Add controller support for creating v3 onion services with
    client auth
  * When voting on a relay with a Sybil-like appearance, add the
    Sybil flag when clearing out the other flags. This lets a relay
    operator know why their relay hasn't been included in the
    consensus
  * Relays now report how overloaded they are
  * Add a new DoS subsystem to control the rate of client
    connections for relays
  * Relays now publish statistics about v3 onions services
  * Improve circuit timeout algorithm for client performance
- add tor-0.4.6.5-gcc7.patch to fix build with gcc7</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1625140800">- tor 0.4.6.6:
  * Fix a compilation error with gcc 7, drop tor-0.4.6.5-gcc7.patch
  * Enable the deterministic RNG for unit tests that covers the
    address set bloomfilter-based API's</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1625572800">- Add missing service_add_pre tor-master.service</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1629201600">- tor 0.4.6.7:
  * Fix a DoS via a remotely triggerable assertion failure
    (boo#1189489, TROVE-2021-007, CVE-2021-38385)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1629806400">- Reduce boilerplate generated by %service_*.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1636804800">- tor 0.4.6.8:
  * Improving reporting of general overload state for DNS timeout
    errors by relays
  * Regenerate fallback directories for October 2021
  * Bug fixes for onion services
  * CVE-2021-22929: do not log v2 onion services access attempt
    warnings on disk excessively (TROVE-2021-008, boo#1192658)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1639742400">- tor 0.4.6.9:
  * remove the DNS timeout metric from the overload general signal
  * regenerate fallback directories generated on December 15, 2021
  * Update the geoip files to match the IPFire Location Database,
    as retrieved on 2021/12/15
  * Reject IPv6-only DirPort</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1644148800">- tor 0.4.6.10
  * minor bugfixes and features
  * https://gitlab.torproject.org/tpo/core/tor/-/raw/release-0.4.6/ReleaseNotes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1651060800">- tor 0.4.7.7
  * New feature: Congestion control to improve traffic speed and
    stability on the network once a majority of Exit nodes upgrade
    boo#1198949
  * Directory authorities: improved handling of "MiddleOnly" relays
  * Improved mitigation against guard discovery attacks on clients
    and short-lived services
  * Improve observed performance under DNS load
  * Improve handling of overload state
  * end-of-life relays running version 0.4.2.x, 0.4.3.x,
    0.4.4.x and 0.4.5 alphas/rc, 0.3.5.x are now rejected
  * Onion service v2 addresses are no longer recognized</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1655380800">- tor 0.4.7.8
  * Fix a scenario where RTT estimation can become wedged, seriously
    degrading congestion control performance on all circuits. This
    impacts clients, onion services, and relays, and can be triggered
    remotely by a malicious endpoint.
    (TROVE-2022-001, CVE-2022-33903, boo#1200672)
  * Regenerate fallback directories generated on June 17, 2022.
  * Update the geoip files to match the IPFire Location Database, as
    retrieved on 2022/06/17.
  * Allow the rseq system call in the sandbox
  * logging bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660219200">- tor 0.4.7.9 (boo#1202336)
  * major fixes aimed at reducing memory pressure on relays
  * prevent a possible side-channel
  * major bugfix related to congestion control
  * major bugfix related to Vanguard L2 layer node selection</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660305600">- tor 0.4.7.10
  * IPFire location database did not have proper ARIN network
    allocations - affected circuit path selection and relay metrics</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1668081600">- tor 0.4.7.11:
  * Improve security of DNS cache by randomly clipping the TTL
    value (boo#1205307, TROVE-2021-009)
  * Improved defenses against network-wide DoS, multiple counters
    and metrics added to MetricsPorts
  * Apply circuit creation anti-DoS defenses if the outbound
    circuit max cell queue size is reached too many times. This
    introduces two new consensus parameters to control the queue
    size limit and number of times allowed to go over that limit.
  * Directory authority updates
  * IPFire database and geoip updates
  * Bump the maximum amount of CPU that can be used from 16 to 128.
    The NumCPUs torrc option overrides this hardcoded maximum.
  * onion service: set a higher circuit build timeout for opened
    client rendezvous circuit to avoid timeouts and retry load
  * Make the service retry a rendezvous if the circuit is being
    repurposed for measurements</changelog>
</package>
<package pkgid="0c1a258590407819bf8d879001db13303fdde09a4f899cbefad62f4c4b729618" name="tor" arch="s390x">
  <version epoch="0" ver="0.4.7.11" rel="bp154.2.9.1"/>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1612526400">- tor 0.4.4.7
  * https://blog.torproject.org/node/1990
  * Stop requiring a live consensus for v3 clients and services
  * Re-entry into the network is now denied at the Exit level
  * Fix undefined behavior on our Keccak library
  * Strip '\r' characters when reading text files on Unix platforms
  * Handle partial SOCKS5 messages correctly
- Add tor-practracker.patch to fix tests</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1613476800">- tor 0.4.5.6
  * https://lists.torproject.org/pipermail/tor-announce/2021-February/000214.html
  * Introduce a new MetricsPort HTTP interface
  * Support IPv6 in the torrc Address option
  * Add event-tracing library support for USDT and LTTng-UST
  * Try to read N of N bytes on a TLS connection
- Drop upstream tor-practracker.patch</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1615896000">- tor 0.4.5.7
  * https://lists.torproject.org/pipermail/tor-announce/2021-March/000216.html
  * Fix 2 denial of service security issues (boo#1183726)
    + Disable the dump_desc() function that we used to dump unparseable
    information to disk (CVE-2021-28089)
    + Fix a bug in appending detached signatures to a pending consensus
    document that could be used to crash a directory authority
    (CVE-2021-28090)
  * Ship geoip files based on the IPFire Location Database</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1619179200">- Fix logging issue due to systemd picking up stdout - boo#1181244
  Continue to log notices to syslog by default.
- actually build with lzma/zstd
- skip i586 tests (boo#1179331)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1619265600">- fix packaging warnings related to tor-master service</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1620734400">- tor 0.4.5.8
  * https://lists.torproject.org/pipermail/tor-announce/2021-May/000219.html
  * allow Linux sandbox with Glibc 2.33
  * work with autoconf 2.70+
  * several other minor features and bugfixes (see announcement)</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1623672000">- tor 0.4.5.9
  * Don't allow relays to spoof RELAY_END or RELAY_RESOLVED cell (CVE-2021-34548, boo#1187322)
  * Detect more failure conditions from the OpenSSL RNG code (boo#1187323)
  * Resist a hashtable-based CPU denial-of-service attack against relays (CVE-2021-34549, boo#1187324)
  * Fix an out-of-bounds memory access in v3 onion service descriptor parsing (CVE-2021-34550, boo#1187325)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1623844800">- tor 0.4.6.5
  * Add controller support for creating v3 onion services with
    client auth
  * When voting on a relay with a Sybil-like appearance, add the
    Sybil flag when clearing out the other flags. This lets a relay
    operator know why their relay hasn't been included in the
    consensus
  * Relays now report how overloaded they are
  * Add a new DoS subsystem to control the rate of client
    connections for relays
  * Relays now publish statistics about v3 onions services
  * Improve circuit timeout algorithm for client performance
- add tor-0.4.6.5-gcc7.patch to fix build with gcc7</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1625140800">- tor 0.4.6.6:
  * Fix a compilation error with gcc 7, drop tor-0.4.6.5-gcc7.patch
  * Enable the deterministic RNG for unit tests that covers the
    address set bloomfilter-based API's</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1625572800">- Add missing service_add_pre tor-master.service</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1629201600">- tor 0.4.6.7:
  * Fix a DoS via a remotely triggerable assertion failure
    (boo#1189489, TROVE-2021-007, CVE-2021-38385)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1629806400">- Reduce boilerplate generated by %service_*.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1636804800">- tor 0.4.6.8:
  * Improving reporting of general overload state for DNS timeout
    errors by relays
  * Regenerate fallback directories for October 2021
  * Bug fixes for onion services
  * CVE-2021-22929: do not log v2 onion services access attempt
    warnings on disk excessively (TROVE-2021-008, boo#1192658)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1639742400">- tor 0.4.6.9:
  * remove the DNS timeout metric from the overload general signal
  * regenerate fallback directories generated on December 15, 2021
  * Update the geoip files to match the IPFire Location Database,
    as retrieved on 2021/12/15
  * Reject IPv6-only DirPort</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1644148800">- tor 0.4.6.10
  * minor bugfixes and features
  * https://gitlab.torproject.org/tpo/core/tor/-/raw/release-0.4.6/ReleaseNotes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1651060800">- tor 0.4.7.7
  * New feature: Congestion control to improve traffic speed and
    stability on the network once a majority of Exit nodes upgrade
    boo#1198949
  * Directory authorities: improved handling of "MiddleOnly" relays
  * Improved mitigation against guard discovery attacks on clients
    and short-lived services
  * Improve observed performance under DNS load
  * Improve handling of overload state
  * end-of-life relays running version 0.4.2.x, 0.4.3.x,
    0.4.4.x and 0.4.5 alphas/rc, 0.3.5.x are now rejected
  * Onion service v2 addresses are no longer recognized</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1655380800">- tor 0.4.7.8
  * Fix a scenario where RTT estimation can become wedged, seriously
    degrading congestion control performance on all circuits. This
    impacts clients, onion services, and relays, and can be triggered
    remotely by a malicious endpoint.
    (TROVE-2022-001, CVE-2022-33903, boo#1200672)
  * Regenerate fallback directories generated on June 17, 2022.
  * Update the geoip files to match the IPFire Location Database, as
    retrieved on 2022/06/17.
  * Allow the rseq system call in the sandbox
  * logging bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660219200">- tor 0.4.7.9 (boo#1202336)
  * major fixes aimed at reducing memory pressure on relays
  * prevent a possible side-channel
  * major bugfix related to congestion control
  * major bugfix related to Vanguard L2 layer node selection</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660305600">- tor 0.4.7.10
  * IPFire location database did not have proper ARIN network
    allocations - affected circuit path selection and relay metrics</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1668081600">- tor 0.4.7.11:
  * Improve security of DNS cache by randomly clipping the TTL
    value (boo#1205307, TROVE-2021-009)
  * Improved defenses against network-wide DoS, multiple counters
    and metrics added to MetricsPorts
  * Apply circuit creation anti-DoS defenses if the outbound
    circuit max cell queue size is reached too many times. This
    introduces two new consensus parameters to control the queue
    size limit and number of times allowed to go over that limit.
  * Directory authority updates
  * IPFire database and geoip updates
  * Bump the maximum amount of CPU that can be used from 16 to 128.
    The NumCPUs torrc option overrides this hardcoded maximum.
  * onion service: set a higher circuit build timeout for opened
    client rendezvous circuit to avoid timeouts and retry load
  * Make the service retry a rendezvous if the circuit is being
    repurposed for measurements</changelog>
</package>
<package pkgid="8bb3ae3cdb35c2642d55b5339e6dfc96c27ea0c84abc4a413a76616954971e70" name="tor" arch="src">
  <version epoch="0" ver="0.4.7.11" rel="bp154.2.9.1"/>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1612526400">- tor 0.4.4.7
  * https://blog.torproject.org/node/1990
  * Stop requiring a live consensus for v3 clients and services
  * Re-entry into the network is now denied at the Exit level
  * Fix undefined behavior on our Keccak library
  * Strip '\r' characters when reading text files on Unix platforms
  * Handle partial SOCKS5 messages correctly
- Add tor-practracker.patch to fix tests</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1613476800">- tor 0.4.5.6
  * https://lists.torproject.org/pipermail/tor-announce/2021-February/000214.html
  * Introduce a new MetricsPort HTTP interface
  * Support IPv6 in the torrc Address option
  * Add event-tracing library support for USDT and LTTng-UST
  * Try to read N of N bytes on a TLS connection
- Drop upstream tor-practracker.patch</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1615896000">- tor 0.4.5.7
  * https://lists.torproject.org/pipermail/tor-announce/2021-March/000216.html
  * Fix 2 denial of service security issues (boo#1183726)
    + Disable the dump_desc() function that we used to dump unparseable
    information to disk (CVE-2021-28089)
    + Fix a bug in appending detached signatures to a pending consensus
    document that could be used to crash a directory authority
    (CVE-2021-28090)
  * Ship geoip files based on the IPFire Location Database</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1619179200">- Fix logging issue due to systemd picking up stdout - boo#1181244
  Continue to log notices to syslog by default.
- actually build with lzma/zstd
- skip i586 tests (boo#1179331)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1619265600">- fix packaging warnings related to tor-master service</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1620734400">- tor 0.4.5.8
  * https://lists.torproject.org/pipermail/tor-announce/2021-May/000219.html
  * allow Linux sandbox with Glibc 2.33
  * work with autoconf 2.70+
  * several other minor features and bugfixes (see announcement)</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1623672000">- tor 0.4.5.9
  * Don't allow relays to spoof RELAY_END or RELAY_RESOLVED cell (CVE-2021-34548, boo#1187322)
  * Detect more failure conditions from the OpenSSL RNG code (boo#1187323)
  * Resist a hashtable-based CPU denial-of-service attack against relays (CVE-2021-34549, boo#1187324)
  * Fix an out-of-bounds memory access in v3 onion service descriptor parsing (CVE-2021-34550, boo#1187325)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1623844800">- tor 0.4.6.5
  * Add controller support for creating v3 onion services with
    client auth
  * When voting on a relay with a Sybil-like appearance, add the
    Sybil flag when clearing out the other flags. This lets a relay
    operator know why their relay hasn't been included in the
    consensus
  * Relays now report how overloaded they are
  * Add a new DoS subsystem to control the rate of client
    connections for relays
  * Relays now publish statistics about v3 onions services
  * Improve circuit timeout algorithm for client performance
- add tor-0.4.6.5-gcc7.patch to fix build with gcc7</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1625140800">- tor 0.4.6.6:
  * Fix a compilation error with gcc 7, drop tor-0.4.6.5-gcc7.patch
  * Enable the deterministic RNG for unit tests that covers the
    address set bloomfilter-based API's</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1625572800">- Add missing service_add_pre tor-master.service</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1629201600">- tor 0.4.6.7:
  * Fix a DoS via a remotely triggerable assertion failure
    (boo#1189489, TROVE-2021-007, CVE-2021-38385)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1629806400">- Reduce boilerplate generated by %service_*.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1636804800">- tor 0.4.6.8:
  * Improving reporting of general overload state for DNS timeout
    errors by relays
  * Regenerate fallback directories for October 2021
  * Bug fixes for onion services
  * CVE-2021-22929: do not log v2 onion services access attempt
    warnings on disk excessively (TROVE-2021-008, boo#1192658)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1639742400">- tor 0.4.6.9:
  * remove the DNS timeout metric from the overload general signal
  * regenerate fallback directories generated on December 15, 2021
  * Update the geoip files to match the IPFire Location Database,
    as retrieved on 2021/12/15
  * Reject IPv6-only DirPort</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1644148800">- tor 0.4.6.10
  * minor bugfixes and features
  * https://gitlab.torproject.org/tpo/core/tor/-/raw/release-0.4.6/ReleaseNotes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1651060800">- tor 0.4.7.7
  * New feature: Congestion control to improve traffic speed and
    stability on the network once a majority of Exit nodes upgrade
    boo#1198949
  * Directory authorities: improved handling of "MiddleOnly" relays
  * Improved mitigation against guard discovery attacks on clients
    and short-lived services
  * Improve observed performance under DNS load
  * Improve handling of overload state
  * end-of-life relays running version 0.4.2.x, 0.4.3.x,
    0.4.4.x and 0.4.5 alphas/rc, 0.3.5.x are now rejected
  * Onion service v2 addresses are no longer recognized</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1655380800">- tor 0.4.7.8
  * Fix a scenario where RTT estimation can become wedged, seriously
    degrading congestion control performance on all circuits. This
    impacts clients, onion services, and relays, and can be triggered
    remotely by a malicious endpoint.
    (TROVE-2022-001, CVE-2022-33903, boo#1200672)
  * Regenerate fallback directories generated on June 17, 2022.
  * Update the geoip files to match the IPFire Location Database, as
    retrieved on 2022/06/17.
  * Allow the rseq system call in the sandbox
  * logging bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660219200">- tor 0.4.7.9 (boo#1202336)
  * major fixes aimed at reducing memory pressure on relays
  * prevent a possible side-channel
  * major bugfix related to congestion control
  * major bugfix related to Vanguard L2 layer node selection</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660305600">- tor 0.4.7.10
  * IPFire location database did not have proper ARIN network
    allocations - affected circuit path selection and relay metrics</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1668081600">- tor 0.4.7.11:
  * Improve security of DNS cache by randomly clipping the TTL
    value (boo#1205307, TROVE-2021-009)
  * Improved defenses against network-wide DoS, multiple counters
    and metrics added to MetricsPorts
  * Apply circuit creation anti-DoS defenses if the outbound
    circuit max cell queue size is reached too many times. This
    introduces two new consensus parameters to control the queue
    size limit and number of times allowed to go over that limit.
  * Directory authority updates
  * IPFire database and geoip updates
  * Bump the maximum amount of CPU that can be used from 16 to 128.
    The NumCPUs torrc option overrides this hardcoded maximum.
  * onion service: set a higher circuit build timeout for opened
    client rendezvous circuit to avoid timeouts and retry load
  * Make the service retry a rendezvous if the circuit is being
    repurposed for measurements</changelog>
</package>
<package pkgid="36b19fa10e058cac6f29580eeaf22d89080045038d78164429f42acb6ad7659f" name="tor" arch="x86_64">
  <version epoch="0" ver="0.4.7.11" rel="bp154.2.9.1"/>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1612526400">- tor 0.4.4.7
  * https://blog.torproject.org/node/1990
  * Stop requiring a live consensus for v3 clients and services
  * Re-entry into the network is now denied at the Exit level
  * Fix undefined behavior on our Keccak library
  * Strip '\r' characters when reading text files on Unix platforms
  * Handle partial SOCKS5 messages correctly
- Add tor-practracker.patch to fix tests</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1613476800">- tor 0.4.5.6
  * https://lists.torproject.org/pipermail/tor-announce/2021-February/000214.html
  * Introduce a new MetricsPort HTTP interface
  * Support IPv6 in the torrc Address option
  * Add event-tracing library support for USDT and LTTng-UST
  * Try to read N of N bytes on a TLS connection
- Drop upstream tor-practracker.patch</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1615896000">- tor 0.4.5.7
  * https://lists.torproject.org/pipermail/tor-announce/2021-March/000216.html
  * Fix 2 denial of service security issues (boo#1183726)
    + Disable the dump_desc() function that we used to dump unparseable
    information to disk (CVE-2021-28089)
    + Fix a bug in appending detached signatures to a pending consensus
    document that could be used to crash a directory authority
    (CVE-2021-28090)
  * Ship geoip files based on the IPFire Location Database</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1619179200">- Fix logging issue due to systemd picking up stdout - boo#1181244
  Continue to log notices to syslog by default.
- actually build with lzma/zstd
- skip i586 tests (boo#1179331)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1619265600">- fix packaging warnings related to tor-master service</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1620734400">- tor 0.4.5.8
  * https://lists.torproject.org/pipermail/tor-announce/2021-May/000219.html
  * allow Linux sandbox with Glibc 2.33
  * work with autoconf 2.70+
  * several other minor features and bugfixes (see announcement)</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1623672000">- tor 0.4.5.9
  * Don't allow relays to spoof RELAY_END or RELAY_RESOLVED cell (CVE-2021-34548, boo#1187322)
  * Detect more failure conditions from the OpenSSL RNG code (boo#1187323)
  * Resist a hashtable-based CPU denial-of-service attack against relays (CVE-2021-34549, boo#1187324)
  * Fix an out-of-bounds memory access in v3 onion service descriptor parsing (CVE-2021-34550, boo#1187325)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1623844800">- tor 0.4.6.5
  * Add controller support for creating v3 onion services with
    client auth
  * When voting on a relay with a Sybil-like appearance, add the
    Sybil flag when clearing out the other flags. This lets a relay
    operator know why their relay hasn't been included in the
    consensus
  * Relays now report how overloaded they are
  * Add a new DoS subsystem to control the rate of client
    connections for relays
  * Relays now publish statistics about v3 onions services
  * Improve circuit timeout algorithm for client performance
- add tor-0.4.6.5-gcc7.patch to fix build with gcc7</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1625140800">- tor 0.4.6.6:
  * Fix a compilation error with gcc 7, drop tor-0.4.6.5-gcc7.patch
  * Enable the deterministic RNG for unit tests that covers the
    address set bloomfilter-based API's</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1625572800">- Add missing service_add_pre tor-master.service</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1629201600">- tor 0.4.6.7:
  * Fix a DoS via a remotely triggerable assertion failure
    (boo#1189489, TROVE-2021-007, CVE-2021-38385)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1629806400">- Reduce boilerplate generated by %service_*.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1636804800">- tor 0.4.6.8:
  * Improving reporting of general overload state for DNS timeout
    errors by relays
  * Regenerate fallback directories for October 2021
  * Bug fixes for onion services
  * CVE-2021-22929: do not log v2 onion services access attempt
    warnings on disk excessively (TROVE-2021-008, boo#1192658)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1639742400">- tor 0.4.6.9:
  * remove the DNS timeout metric from the overload general signal
  * regenerate fallback directories generated on December 15, 2021
  * Update the geoip files to match the IPFire Location Database,
    as retrieved on 2021/12/15
  * Reject IPv6-only DirPort</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1644148800">- tor 0.4.6.10
  * minor bugfixes and features
  * https://gitlab.torproject.org/tpo/core/tor/-/raw/release-0.4.6/ReleaseNotes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1651060800">- tor 0.4.7.7
  * New feature: Congestion control to improve traffic speed and
    stability on the network once a majority of Exit nodes upgrade
    boo#1198949
  * Directory authorities: improved handling of "MiddleOnly" relays
  * Improved mitigation against guard discovery attacks on clients
    and short-lived services
  * Improve observed performance under DNS load
  * Improve handling of overload state
  * end-of-life relays running version 0.4.2.x, 0.4.3.x,
    0.4.4.x and 0.4.5 alphas/rc, 0.3.5.x are now rejected
  * Onion service v2 addresses are no longer recognized</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1655380800">- tor 0.4.7.8
  * Fix a scenario where RTT estimation can become wedged, seriously
    degrading congestion control performance on all circuits. This
    impacts clients, onion services, and relays, and can be triggered
    remotely by a malicious endpoint.
    (TROVE-2022-001, CVE-2022-33903, boo#1200672)
  * Regenerate fallback directories generated on June 17, 2022.
  * Update the geoip files to match the IPFire Location Database, as
    retrieved on 2022/06/17.
  * Allow the rseq system call in the sandbox
  * logging bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660219200">- tor 0.4.7.9 (boo#1202336)
  * major fixes aimed at reducing memory pressure on relays
  * prevent a possible side-channel
  * major bugfix related to congestion control
  * major bugfix related to Vanguard L2 layer node selection</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660305600">- tor 0.4.7.10
  * IPFire location database did not have proper ARIN network
    allocations - affected circuit path selection and relay metrics</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1668081600">- tor 0.4.7.11:
  * Improve security of DNS cache by randomly clipping the TTL
    value (boo#1205307, TROVE-2021-009)
  * Improved defenses against network-wide DoS, multiple counters
    and metrics added to MetricsPorts
  * Apply circuit creation anti-DoS defenses if the outbound
    circuit max cell queue size is reached too many times. This
    introduces two new consensus parameters to control the queue
    size limit and number of times allowed to go over that limit.
  * Directory authority updates
  * IPFire database and geoip updates
  * Bump the maximum amount of CPU that can be used from 16 to 128.
    The NumCPUs torrc option overrides this hardcoded maximum.
  * onion service: set a higher circuit build timeout for opened
    client rendezvous circuit to avoid timeouts and retry load
  * Make the service retry a rendezvous if the circuit is being
    repurposed for measurements</changelog>
</package>
<package pkgid="834c8d91ccab2176bbd1b450298fdd64b4c71dd234d88dc19c5edc4d2e3bb5ea" name="tor" arch="aarch64">
  <version epoch="0" ver="0.4.7.13" rel="bp154.2.12.1"/>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1615896000">- tor 0.4.5.7
  * https://lists.torproject.org/pipermail/tor-announce/2021-March/000216.html
  * Fix 2 denial of service security issues (boo#1183726)
    + Disable the dump_desc() function that we used to dump unparseable
    information to disk (CVE-2021-28089)
    + Fix a bug in appending detached signatures to a pending consensus
    document that could be used to crash a directory authority
    (CVE-2021-28090)
  * Ship geoip files based on the IPFire Location Database</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1619179200">- Fix logging issue due to systemd picking up stdout - boo#1181244
  Continue to log notices to syslog by default.
- actually build with lzma/zstd
- skip i586 tests (boo#1179331)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1619265600">- fix packaging warnings related to tor-master service</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1620734400">- tor 0.4.5.8
  * https://lists.torproject.org/pipermail/tor-announce/2021-May/000219.html
  * allow Linux sandbox with Glibc 2.33
  * work with autoconf 2.70+
  * several other minor features and bugfixes (see announcement)</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1623672000">- tor 0.4.5.9
  * Don't allow relays to spoof RELAY_END or RELAY_RESOLVED cell (CVE-2021-34548, boo#1187322)
  * Detect more failure conditions from the OpenSSL RNG code (boo#1187323)
  * Resist a hashtable-based CPU denial-of-service attack against relays (CVE-2021-34549, boo#1187324)
  * Fix an out-of-bounds memory access in v3 onion service descriptor parsing (CVE-2021-34550, boo#1187325)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1623844800">- tor 0.4.6.5
  * Add controller support for creating v3 onion services with
    client auth
  * When voting on a relay with a Sybil-like appearance, add the
    Sybil flag when clearing out the other flags. This lets a relay
    operator know why their relay hasn't been included in the
    consensus
  * Relays now report how overloaded they are
  * Add a new DoS subsystem to control the rate of client
    connections for relays
  * Relays now publish statistics about v3 onions services
  * Improve circuit timeout algorithm for client performance
- add tor-0.4.6.5-gcc7.patch to fix build with gcc7</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1625140800">- tor 0.4.6.6:
  * Fix a compilation error with gcc 7, drop tor-0.4.6.5-gcc7.patch
  * Enable the deterministic RNG for unit tests that covers the
    address set bloomfilter-based API's</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1625572800">- Add missing service_add_pre tor-master.service</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1629201600">- tor 0.4.6.7:
  * Fix a DoS via a remotely triggerable assertion failure
    (boo#1189489, TROVE-2021-007, CVE-2021-38385)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1629806400">- Reduce boilerplate generated by %service_*.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1636804800">- tor 0.4.6.8:
  * Improving reporting of general overload state for DNS timeout
    errors by relays
  * Regenerate fallback directories for October 2021
  * Bug fixes for onion services
  * CVE-2021-22929: do not log v2 onion services access attempt
    warnings on disk excessively (TROVE-2021-008, boo#1192658)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1639742400">- tor 0.4.6.9:
  * remove the DNS timeout metric from the overload general signal
  * regenerate fallback directories generated on December 15, 2021
  * Update the geoip files to match the IPFire Location Database,
    as retrieved on 2021/12/15
  * Reject IPv6-only DirPort</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1644148800">- tor 0.4.6.10
  * minor bugfixes and features
  * https://gitlab.torproject.org/tpo/core/tor/-/raw/release-0.4.6/ReleaseNotes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1651060800">- tor 0.4.7.7
  * New feature: Congestion control to improve traffic speed and
    stability on the network once a majority of Exit nodes upgrade
    boo#1198949
  * Directory authorities: improved handling of "MiddleOnly" relays
  * Improved mitigation against guard discovery attacks on clients
    and short-lived services
  * Improve observed performance under DNS load
  * Improve handling of overload state
  * end-of-life relays running version 0.4.2.x, 0.4.3.x,
    0.4.4.x and 0.4.5 alphas/rc, 0.3.5.x are now rejected
  * Onion service v2 addresses are no longer recognized</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1655380800">- tor 0.4.7.8
  * Fix a scenario where RTT estimation can become wedged, seriously
    degrading congestion control performance on all circuits. This
    impacts clients, onion services, and relays, and can be triggered
    remotely by a malicious endpoint.
    (TROVE-2022-001, CVE-2022-33903, boo#1200672)
  * Regenerate fallback directories generated on June 17, 2022.
  * Update the geoip files to match the IPFire Location Database, as
    retrieved on 2022/06/17.
  * Allow the rseq system call in the sandbox
  * logging bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660219200">- tor 0.4.7.9 (boo#1202336)
  * major fixes aimed at reducing memory pressure on relays
  * prevent a possible side-channel
  * major bugfix related to congestion control
  * major bugfix related to Vanguard L2 layer node selection</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660305600">- tor 0.4.7.10
  * IPFire location database did not have proper ARIN network
    allocations - affected circuit path selection and relay metrics</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1668081600">- tor 0.4.7.11:
  * Improve security of DNS cache by randomly clipping the TTL
    value (boo#1205307, TROVE-2021-009)
  * Improved defenses against network-wide DoS, multiple counters
    and metrics added to MetricsPorts
  * Apply circuit creation anti-DoS defenses if the outbound
    circuit max cell queue size is reached too many times. This
    introduces two new consensus parameters to control the queue
    size limit and number of times allowed to go over that limit.
  * Directory authority updates
  * IPFire database and geoip updates
  * Bump the maximum amount of CPU that can be used from 16 to 128.
    The NumCPUs torrc option overrides this hardcoded maximum.
  * onion service: set a higher circuit build timeout for opened
    client rendezvous circuit to avoid timeouts and retry load
  * Make the service retry a rendezvous if the circuit is being
    repurposed for measurements</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1670328000">- tor 0.4.7.12:
  * new key for moria1
  * new metrics are exported on the MetricsPort for the congestion
    control subsystem</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1673611200">- tor 0.4.7.13:
  * fix SafeSocks option to avoid DNS leaks (boo#1207110, TROVE-2022-002)
  * improve congestion control
  * fix relay channel handling</changelog>
</package>
<package pkgid="c1c73f9d84edddfc0ecd99a76274041e676fd3842addcbd8632efc9b156e2d06" name="tor" arch="i586">
  <version epoch="0" ver="0.4.7.13" rel="bp154.2.12.1"/>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1615896000">- tor 0.4.5.7
  * https://lists.torproject.org/pipermail/tor-announce/2021-March/000216.html
  * Fix 2 denial of service security issues (boo#1183726)
    + Disable the dump_desc() function that we used to dump unparseable
    information to disk (CVE-2021-28089)
    + Fix a bug in appending detached signatures to a pending consensus
    document that could be used to crash a directory authority
    (CVE-2021-28090)
  * Ship geoip files based on the IPFire Location Database</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1619179200">- Fix logging issue due to systemd picking up stdout - boo#1181244
  Continue to log notices to syslog by default.
- actually build with lzma/zstd
- skip i586 tests (boo#1179331)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1619265600">- fix packaging warnings related to tor-master service</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1620734400">- tor 0.4.5.8
  * https://lists.torproject.org/pipermail/tor-announce/2021-May/000219.html
  * allow Linux sandbox with Glibc 2.33
  * work with autoconf 2.70+
  * several other minor features and bugfixes (see announcement)</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1623672000">- tor 0.4.5.9
  * Don't allow relays to spoof RELAY_END or RELAY_RESOLVED cell (CVE-2021-34548, boo#1187322)
  * Detect more failure conditions from the OpenSSL RNG code (boo#1187323)
  * Resist a hashtable-based CPU denial-of-service attack against relays (CVE-2021-34549, boo#1187324)
  * Fix an out-of-bounds memory access in v3 onion service descriptor parsing (CVE-2021-34550, boo#1187325)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1623844800">- tor 0.4.6.5
  * Add controller support for creating v3 onion services with
    client auth
  * When voting on a relay with a Sybil-like appearance, add the
    Sybil flag when clearing out the other flags. This lets a relay
    operator know why their relay hasn't been included in the
    consensus
  * Relays now report how overloaded they are
  * Add a new DoS subsystem to control the rate of client
    connections for relays
  * Relays now publish statistics about v3 onions services
  * Improve circuit timeout algorithm for client performance
- add tor-0.4.6.5-gcc7.patch to fix build with gcc7</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1625140800">- tor 0.4.6.6:
  * Fix a compilation error with gcc 7, drop tor-0.4.6.5-gcc7.patch
  * Enable the deterministic RNG for unit tests that covers the
    address set bloomfilter-based API's</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1625572800">- Add missing service_add_pre tor-master.service</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1629201600">- tor 0.4.6.7:
  * Fix a DoS via a remotely triggerable assertion failure
    (boo#1189489, TROVE-2021-007, CVE-2021-38385)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1629806400">- Reduce boilerplate generated by %service_*.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1636804800">- tor 0.4.6.8:
  * Improving reporting of general overload state for DNS timeout
    errors by relays
  * Regenerate fallback directories for October 2021
  * Bug fixes for onion services
  * CVE-2021-22929: do not log v2 onion services access attempt
    warnings on disk excessively (TROVE-2021-008, boo#1192658)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1639742400">- tor 0.4.6.9:
  * remove the DNS timeout metric from the overload general signal
  * regenerate fallback directories generated on December 15, 2021
  * Update the geoip files to match the IPFire Location Database,
    as retrieved on 2021/12/15
  * Reject IPv6-only DirPort</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1644148800">- tor 0.4.6.10
  * minor bugfixes and features
  * https://gitlab.torproject.org/tpo/core/tor/-/raw/release-0.4.6/ReleaseNotes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1651060800">- tor 0.4.7.7
  * New feature: Congestion control to improve traffic speed and
    stability on the network once a majority of Exit nodes upgrade
    boo#1198949
  * Directory authorities: improved handling of "MiddleOnly" relays
  * Improved mitigation against guard discovery attacks on clients
    and short-lived services
  * Improve observed performance under DNS load
  * Improve handling of overload state
  * end-of-life relays running version 0.4.2.x, 0.4.3.x,
    0.4.4.x and 0.4.5 alphas/rc, 0.3.5.x are now rejected
  * Onion service v2 addresses are no longer recognized</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1655380800">- tor 0.4.7.8
  * Fix a scenario where RTT estimation can become wedged, seriously
    degrading congestion control performance on all circuits. This
    impacts clients, onion services, and relays, and can be triggered
    remotely by a malicious endpoint.
    (TROVE-2022-001, CVE-2022-33903, boo#1200672)
  * Regenerate fallback directories generated on June 17, 2022.
  * Update the geoip files to match the IPFire Location Database, as
    retrieved on 2022/06/17.
  * Allow the rseq system call in the sandbox
  * logging bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660219200">- tor 0.4.7.9 (boo#1202336)
  * major fixes aimed at reducing memory pressure on relays
  * prevent a possible side-channel
  * major bugfix related to congestion control
  * major bugfix related to Vanguard L2 layer node selection</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660305600">- tor 0.4.7.10
  * IPFire location database did not have proper ARIN network
    allocations - affected circuit path selection and relay metrics</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1668081600">- tor 0.4.7.11:
  * Improve security of DNS cache by randomly clipping the TTL
    value (boo#1205307, TROVE-2021-009)
  * Improved defenses against network-wide DoS, multiple counters
    and metrics added to MetricsPorts
  * Apply circuit creation anti-DoS defenses if the outbound
    circuit max cell queue size is reached too many times. This
    introduces two new consensus parameters to control the queue
    size limit and number of times allowed to go over that limit.
  * Directory authority updates
  * IPFire database and geoip updates
  * Bump the maximum amount of CPU that can be used from 16 to 128.
    The NumCPUs torrc option overrides this hardcoded maximum.
  * onion service: set a higher circuit build timeout for opened
    client rendezvous circuit to avoid timeouts and retry load
  * Make the service retry a rendezvous if the circuit is being
    repurposed for measurements</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1670328000">- tor 0.4.7.12:
  * new key for moria1
  * new metrics are exported on the MetricsPort for the congestion
    control subsystem</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1673611200">- tor 0.4.7.13:
  * fix SafeSocks option to avoid DNS leaks (boo#1207110, TROVE-2022-002)
  * improve congestion control
  * fix relay channel handling</changelog>
</package>
<package pkgid="ef886e4d6506e6e566ee5af106b4bd38842fc87373b15a10e6caa6e119ab0391" name="tor" arch="ppc64le">
  <version epoch="0" ver="0.4.7.13" rel="bp154.2.12.1"/>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1615896000">- tor 0.4.5.7
  * https://lists.torproject.org/pipermail/tor-announce/2021-March/000216.html
  * Fix 2 denial of service security issues (boo#1183726)
    + Disable the dump_desc() function that we used to dump unparseable
    information to disk (CVE-2021-28089)
    + Fix a bug in appending detached signatures to a pending consensus
    document that could be used to crash a directory authority
    (CVE-2021-28090)
  * Ship geoip files based on the IPFire Location Database</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1619179200">- Fix logging issue due to systemd picking up stdout - boo#1181244
  Continue to log notices to syslog by default.
- actually build with lzma/zstd
- skip i586 tests (boo#1179331)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1619265600">- fix packaging warnings related to tor-master service</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1620734400">- tor 0.4.5.8
  * https://lists.torproject.org/pipermail/tor-announce/2021-May/000219.html
  * allow Linux sandbox with Glibc 2.33
  * work with autoconf 2.70+
  * several other minor features and bugfixes (see announcement)</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1623672000">- tor 0.4.5.9
  * Don't allow relays to spoof RELAY_END or RELAY_RESOLVED cell (CVE-2021-34548, boo#1187322)
  * Detect more failure conditions from the OpenSSL RNG code (boo#1187323)
  * Resist a hashtable-based CPU denial-of-service attack against relays (CVE-2021-34549, boo#1187324)
  * Fix an out-of-bounds memory access in v3 onion service descriptor parsing (CVE-2021-34550, boo#1187325)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1623844800">- tor 0.4.6.5
  * Add controller support for creating v3 onion services with
    client auth
  * When voting on a relay with a Sybil-like appearance, add the
    Sybil flag when clearing out the other flags. This lets a relay
    operator know why their relay hasn't been included in the
    consensus
  * Relays now report how overloaded they are
  * Add a new DoS subsystem to control the rate of client
    connections for relays
  * Relays now publish statistics about v3 onions services
  * Improve circuit timeout algorithm for client performance
- add tor-0.4.6.5-gcc7.patch to fix build with gcc7</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1625140800">- tor 0.4.6.6:
  * Fix a compilation error with gcc 7, drop tor-0.4.6.5-gcc7.patch
  * Enable the deterministic RNG for unit tests that covers the
    address set bloomfilter-based API's</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1625572800">- Add missing service_add_pre tor-master.service</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1629201600">- tor 0.4.6.7:
  * Fix a DoS via a remotely triggerable assertion failure
    (boo#1189489, TROVE-2021-007, CVE-2021-38385)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1629806400">- Reduce boilerplate generated by %service_*.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1636804800">- tor 0.4.6.8:
  * Improving reporting of general overload state for DNS timeout
    errors by relays
  * Regenerate fallback directories for October 2021
  * Bug fixes for onion services
  * CVE-2021-22929: do not log v2 onion services access attempt
    warnings on disk excessively (TROVE-2021-008, boo#1192658)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1639742400">- tor 0.4.6.9:
  * remove the DNS timeout metric from the overload general signal
  * regenerate fallback directories generated on December 15, 2021
  * Update the geoip files to match the IPFire Location Database,
    as retrieved on 2021/12/15
  * Reject IPv6-only DirPort</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1644148800">- tor 0.4.6.10
  * minor bugfixes and features
  * https://gitlab.torproject.org/tpo/core/tor/-/raw/release-0.4.6/ReleaseNotes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1651060800">- tor 0.4.7.7
  * New feature: Congestion control to improve traffic speed and
    stability on the network once a majority of Exit nodes upgrade
    boo#1198949
  * Directory authorities: improved handling of "MiddleOnly" relays
  * Improved mitigation against guard discovery attacks on clients
    and short-lived services
  * Improve observed performance under DNS load
  * Improve handling of overload state
  * end-of-life relays running version 0.4.2.x, 0.4.3.x,
    0.4.4.x and 0.4.5 alphas/rc, 0.3.5.x are now rejected
  * Onion service v2 addresses are no longer recognized</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1655380800">- tor 0.4.7.8
  * Fix a scenario where RTT estimation can become wedged, seriously
    degrading congestion control performance on all circuits. This
    impacts clients, onion services, and relays, and can be triggered
    remotely by a malicious endpoint.
    (TROVE-2022-001, CVE-2022-33903, boo#1200672)
  * Regenerate fallback directories generated on June 17, 2022.
  * Update the geoip files to match the IPFire Location Database, as
    retrieved on 2022/06/17.
  * Allow the rseq system call in the sandbox
  * logging bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660219200">- tor 0.4.7.9 (boo#1202336)
  * major fixes aimed at reducing memory pressure on relays
  * prevent a possible side-channel
  * major bugfix related to congestion control
  * major bugfix related to Vanguard L2 layer node selection</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660305600">- tor 0.4.7.10
  * IPFire location database did not have proper ARIN network
    allocations - affected circuit path selection and relay metrics</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1668081600">- tor 0.4.7.11:
  * Improve security of DNS cache by randomly clipping the TTL
    value (boo#1205307, TROVE-2021-009)
  * Improved defenses against network-wide DoS, multiple counters
    and metrics added to MetricsPorts
  * Apply circuit creation anti-DoS defenses if the outbound
    circuit max cell queue size is reached too many times. This
    introduces two new consensus parameters to control the queue
    size limit and number of times allowed to go over that limit.
  * Directory authority updates
  * IPFire database and geoip updates
  * Bump the maximum amount of CPU that can be used from 16 to 128.
    The NumCPUs torrc option overrides this hardcoded maximum.
  * onion service: set a higher circuit build timeout for opened
    client rendezvous circuit to avoid timeouts and retry load
  * Make the service retry a rendezvous if the circuit is being
    repurposed for measurements</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1670328000">- tor 0.4.7.12:
  * new key for moria1
  * new metrics are exported on the MetricsPort for the congestion
    control subsystem</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1673611200">- tor 0.4.7.13:
  * fix SafeSocks option to avoid DNS leaks (boo#1207110, TROVE-2022-002)
  * improve congestion control
  * fix relay channel handling</changelog>
</package>
<package pkgid="ea9a4c4b7aeb91f27defedf18dfda822d9cd09930881b2a5e1dea79930441c4b" name="tor" arch="s390x">
  <version epoch="0" ver="0.4.7.13" rel="bp154.2.12.1"/>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1615896000">- tor 0.4.5.7
  * https://lists.torproject.org/pipermail/tor-announce/2021-March/000216.html
  * Fix 2 denial of service security issues (boo#1183726)
    + Disable the dump_desc() function that we used to dump unparseable
    information to disk (CVE-2021-28089)
    + Fix a bug in appending detached signatures to a pending consensus
    document that could be used to crash a directory authority
    (CVE-2021-28090)
  * Ship geoip files based on the IPFire Location Database</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1619179200">- Fix logging issue due to systemd picking up stdout - boo#1181244
  Continue to log notices to syslog by default.
- actually build with lzma/zstd
- skip i586 tests (boo#1179331)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1619265600">- fix packaging warnings related to tor-master service</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1620734400">- tor 0.4.5.8
  * https://lists.torproject.org/pipermail/tor-announce/2021-May/000219.html
  * allow Linux sandbox with Glibc 2.33
  * work with autoconf 2.70+
  * several other minor features and bugfixes (see announcement)</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1623672000">- tor 0.4.5.9
  * Don't allow relays to spoof RELAY_END or RELAY_RESOLVED cell (CVE-2021-34548, boo#1187322)
  * Detect more failure conditions from the OpenSSL RNG code (boo#1187323)
  * Resist a hashtable-based CPU denial-of-service attack against relays (CVE-2021-34549, boo#1187324)
  * Fix an out-of-bounds memory access in v3 onion service descriptor parsing (CVE-2021-34550, boo#1187325)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1623844800">- tor 0.4.6.5
  * Add controller support for creating v3 onion services with
    client auth
  * When voting on a relay with a Sybil-like appearance, add the
    Sybil flag when clearing out the other flags. This lets a relay
    operator know why their relay hasn't been included in the
    consensus
  * Relays now report how overloaded they are
  * Add a new DoS subsystem to control the rate of client
    connections for relays
  * Relays now publish statistics about v3 onions services
  * Improve circuit timeout algorithm for client performance
- add tor-0.4.6.5-gcc7.patch to fix build with gcc7</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1625140800">- tor 0.4.6.6:
  * Fix a compilation error with gcc 7, drop tor-0.4.6.5-gcc7.patch
  * Enable the deterministic RNG for unit tests that covers the
    address set bloomfilter-based API's</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1625572800">- Add missing service_add_pre tor-master.service</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1629201600">- tor 0.4.6.7:
  * Fix a DoS via a remotely triggerable assertion failure
    (boo#1189489, TROVE-2021-007, CVE-2021-38385)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1629806400">- Reduce boilerplate generated by %service_*.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1636804800">- tor 0.4.6.8:
  * Improving reporting of general overload state for DNS timeout
    errors by relays
  * Regenerate fallback directories for October 2021
  * Bug fixes for onion services
  * CVE-2021-22929: do not log v2 onion services access attempt
    warnings on disk excessively (TROVE-2021-008, boo#1192658)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1639742400">- tor 0.4.6.9:
  * remove the DNS timeout metric from the overload general signal
  * regenerate fallback directories generated on December 15, 2021
  * Update the geoip files to match the IPFire Location Database,
    as retrieved on 2021/12/15
  * Reject IPv6-only DirPort</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1644148800">- tor 0.4.6.10
  * minor bugfixes and features
  * https://gitlab.torproject.org/tpo/core/tor/-/raw/release-0.4.6/ReleaseNotes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1651060800">- tor 0.4.7.7
  * New feature: Congestion control to improve traffic speed and
    stability on the network once a majority of Exit nodes upgrade
    boo#1198949
  * Directory authorities: improved handling of "MiddleOnly" relays
  * Improved mitigation against guard discovery attacks on clients
    and short-lived services
  * Improve observed performance under DNS load
  * Improve handling of overload state
  * end-of-life relays running version 0.4.2.x, 0.4.3.x,
    0.4.4.x and 0.4.5 alphas/rc, 0.3.5.x are now rejected
  * Onion service v2 addresses are no longer recognized</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1655380800">- tor 0.4.7.8
  * Fix a scenario where RTT estimation can become wedged, seriously
    degrading congestion control performance on all circuits. This
    impacts clients, onion services, and relays, and can be triggered
    remotely by a malicious endpoint.
    (TROVE-2022-001, CVE-2022-33903, boo#1200672)
  * Regenerate fallback directories generated on June 17, 2022.
  * Update the geoip files to match the IPFire Location Database, as
    retrieved on 2022/06/17.
  * Allow the rseq system call in the sandbox
  * logging bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660219200">- tor 0.4.7.9 (boo#1202336)
  * major fixes aimed at reducing memory pressure on relays
  * prevent a possible side-channel
  * major bugfix related to congestion control
  * major bugfix related to Vanguard L2 layer node selection</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660305600">- tor 0.4.7.10
  * IPFire location database did not have proper ARIN network
    allocations - affected circuit path selection and relay metrics</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1668081600">- tor 0.4.7.11:
  * Improve security of DNS cache by randomly clipping the TTL
    value (boo#1205307, TROVE-2021-009)
  * Improved defenses against network-wide DoS, multiple counters
    and metrics added to MetricsPorts
  * Apply circuit creation anti-DoS defenses if the outbound
    circuit max cell queue size is reached too many times. This
    introduces two new consensus parameters to control the queue
    size limit and number of times allowed to go over that limit.
  * Directory authority updates
  * IPFire database and geoip updates
  * Bump the maximum amount of CPU that can be used from 16 to 128.
    The NumCPUs torrc option overrides this hardcoded maximum.
  * onion service: set a higher circuit build timeout for opened
    client rendezvous circuit to avoid timeouts and retry load
  * Make the service retry a rendezvous if the circuit is being
    repurposed for measurements</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1670328000">- tor 0.4.7.12:
  * new key for moria1
  * new metrics are exported on the MetricsPort for the congestion
    control subsystem</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1673611200">- tor 0.4.7.13:
  * fix SafeSocks option to avoid DNS leaks (boo#1207110, TROVE-2022-002)
  * improve congestion control
  * fix relay channel handling</changelog>
</package>
<package pkgid="58fa524554cf30001329a6360800e211fb73bda82f59697d03c72d0336ffa3ec" name="tor" arch="src">
  <version epoch="0" ver="0.4.7.13" rel="bp154.2.12.1"/>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1615896000">- tor 0.4.5.7
  * https://lists.torproject.org/pipermail/tor-announce/2021-March/000216.html
  * Fix 2 denial of service security issues (boo#1183726)
    + Disable the dump_desc() function that we used to dump unparseable
    information to disk (CVE-2021-28089)
    + Fix a bug in appending detached signatures to a pending consensus
    document that could be used to crash a directory authority
    (CVE-2021-28090)
  * Ship geoip files based on the IPFire Location Database</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1619179200">- Fix logging issue due to systemd picking up stdout - boo#1181244
  Continue to log notices to syslog by default.
- actually build with lzma/zstd
- skip i586 tests (boo#1179331)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1619265600">- fix packaging warnings related to tor-master service</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1620734400">- tor 0.4.5.8
  * https://lists.torproject.org/pipermail/tor-announce/2021-May/000219.html
  * allow Linux sandbox with Glibc 2.33
  * work with autoconf 2.70+
  * several other minor features and bugfixes (see announcement)</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1623672000">- tor 0.4.5.9
  * Don't allow relays to spoof RELAY_END or RELAY_RESOLVED cell (CVE-2021-34548, boo#1187322)
  * Detect more failure conditions from the OpenSSL RNG code (boo#1187323)
  * Resist a hashtable-based CPU denial-of-service attack against relays (CVE-2021-34549, boo#1187324)
  * Fix an out-of-bounds memory access in v3 onion service descriptor parsing (CVE-2021-34550, boo#1187325)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1623844800">- tor 0.4.6.5
  * Add controller support for creating v3 onion services with
    client auth
  * When voting on a relay with a Sybil-like appearance, add the
    Sybil flag when clearing out the other flags. This lets a relay
    operator know why their relay hasn't been included in the
    consensus
  * Relays now report how overloaded they are
  * Add a new DoS subsystem to control the rate of client
    connections for relays
  * Relays now publish statistics about v3 onions services
  * Improve circuit timeout algorithm for client performance
- add tor-0.4.6.5-gcc7.patch to fix build with gcc7</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1625140800">- tor 0.4.6.6:
  * Fix a compilation error with gcc 7, drop tor-0.4.6.5-gcc7.patch
  * Enable the deterministic RNG for unit tests that covers the
    address set bloomfilter-based API's</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1625572800">- Add missing service_add_pre tor-master.service</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1629201600">- tor 0.4.6.7:
  * Fix a DoS via a remotely triggerable assertion failure
    (boo#1189489, TROVE-2021-007, CVE-2021-38385)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1629806400">- Reduce boilerplate generated by %service_*.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1636804800">- tor 0.4.6.8:
  * Improving reporting of general overload state for DNS timeout
    errors by relays
  * Regenerate fallback directories for October 2021
  * Bug fixes for onion services
  * CVE-2021-22929: do not log v2 onion services access attempt
    warnings on disk excessively (TROVE-2021-008, boo#1192658)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1639742400">- tor 0.4.6.9:
  * remove the DNS timeout metric from the overload general signal
  * regenerate fallback directories generated on December 15, 2021
  * Update the geoip files to match the IPFire Location Database,
    as retrieved on 2021/12/15
  * Reject IPv6-only DirPort</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1644148800">- tor 0.4.6.10
  * minor bugfixes and features
  * https://gitlab.torproject.org/tpo/core/tor/-/raw/release-0.4.6/ReleaseNotes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1651060800">- tor 0.4.7.7
  * New feature: Congestion control to improve traffic speed and
    stability on the network once a majority of Exit nodes upgrade
    boo#1198949
  * Directory authorities: improved handling of "MiddleOnly" relays
  * Improved mitigation against guard discovery attacks on clients
    and short-lived services
  * Improve observed performance under DNS load
  * Improve handling of overload state
  * end-of-life relays running version 0.4.2.x, 0.4.3.x,
    0.4.4.x and 0.4.5 alphas/rc, 0.3.5.x are now rejected
  * Onion service v2 addresses are no longer recognized</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1655380800">- tor 0.4.7.8
  * Fix a scenario where RTT estimation can become wedged, seriously
    degrading congestion control performance on all circuits. This
    impacts clients, onion services, and relays, and can be triggered
    remotely by a malicious endpoint.
    (TROVE-2022-001, CVE-2022-33903, boo#1200672)
  * Regenerate fallback directories generated on June 17, 2022.
  * Update the geoip files to match the IPFire Location Database, as
    retrieved on 2022/06/17.
  * Allow the rseq system call in the sandbox
  * logging bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660219200">- tor 0.4.7.9 (boo#1202336)
  * major fixes aimed at reducing memory pressure on relays
  * prevent a possible side-channel
  * major bugfix related to congestion control
  * major bugfix related to Vanguard L2 layer node selection</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660305600">- tor 0.4.7.10
  * IPFire location database did not have proper ARIN network
    allocations - affected circuit path selection and relay metrics</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1668081600">- tor 0.4.7.11:
  * Improve security of DNS cache by randomly clipping the TTL
    value (boo#1205307, TROVE-2021-009)
  * Improved defenses against network-wide DoS, multiple counters
    and metrics added to MetricsPorts
  * Apply circuit creation anti-DoS defenses if the outbound
    circuit max cell queue size is reached too many times. This
    introduces two new consensus parameters to control the queue
    size limit and number of times allowed to go over that limit.
  * Directory authority updates
  * IPFire database and geoip updates
  * Bump the maximum amount of CPU that can be used from 16 to 128.
    The NumCPUs torrc option overrides this hardcoded maximum.
  * onion service: set a higher circuit build timeout for opened
    client rendezvous circuit to avoid timeouts and retry load
  * Make the service retry a rendezvous if the circuit is being
    repurposed for measurements</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1670328000">- tor 0.4.7.12:
  * new key for moria1
  * new metrics are exported on the MetricsPort for the congestion
    control subsystem</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1673611200">- tor 0.4.7.13:
  * fix SafeSocks option to avoid DNS leaks (boo#1207110, TROVE-2022-002)
  * improve congestion control
  * fix relay channel handling</changelog>
</package>
<package pkgid="512fd0452394023303a535406d412393e0f76ae01d6dab7a88b49b383d29958d" name="tor" arch="x86_64">
  <version epoch="0" ver="0.4.7.13" rel="bp154.2.12.1"/>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1615896000">- tor 0.4.5.7
  * https://lists.torproject.org/pipermail/tor-announce/2021-March/000216.html
  * Fix 2 denial of service security issues (boo#1183726)
    + Disable the dump_desc() function that we used to dump unparseable
    information to disk (CVE-2021-28089)
    + Fix a bug in appending detached signatures to a pending consensus
    document that could be used to crash a directory authority
    (CVE-2021-28090)
  * Ship geoip files based on the IPFire Location Database</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1619179200">- Fix logging issue due to systemd picking up stdout - boo#1181244
  Continue to log notices to syslog by default.
- actually build with lzma/zstd
- skip i586 tests (boo#1179331)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1619265600">- fix packaging warnings related to tor-master service</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1620734400">- tor 0.4.5.8
  * https://lists.torproject.org/pipermail/tor-announce/2021-May/000219.html
  * allow Linux sandbox with Glibc 2.33
  * work with autoconf 2.70+
  * several other minor features and bugfixes (see announcement)</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1623672000">- tor 0.4.5.9
  * Don't allow relays to spoof RELAY_END or RELAY_RESOLVED cell (CVE-2021-34548, boo#1187322)
  * Detect more failure conditions from the OpenSSL RNG code (boo#1187323)
  * Resist a hashtable-based CPU denial-of-service attack against relays (CVE-2021-34549, boo#1187324)
  * Fix an out-of-bounds memory access in v3 onion service descriptor parsing (CVE-2021-34550, boo#1187325)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1623844800">- tor 0.4.6.5
  * Add controller support for creating v3 onion services with
    client auth
  * When voting on a relay with a Sybil-like appearance, add the
    Sybil flag when clearing out the other flags. This lets a relay
    operator know why their relay hasn't been included in the
    consensus
  * Relays now report how overloaded they are
  * Add a new DoS subsystem to control the rate of client
    connections for relays
  * Relays now publish statistics about v3 onions services
  * Improve circuit timeout algorithm for client performance
- add tor-0.4.6.5-gcc7.patch to fix build with gcc7</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1625140800">- tor 0.4.6.6:
  * Fix a compilation error with gcc 7, drop tor-0.4.6.5-gcc7.patch
  * Enable the deterministic RNG for unit tests that covers the
    address set bloomfilter-based API's</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1625572800">- Add missing service_add_pre tor-master.service</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1629201600">- tor 0.4.6.7:
  * Fix a DoS via a remotely triggerable assertion failure
    (boo#1189489, TROVE-2021-007, CVE-2021-38385)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1629806400">- Reduce boilerplate generated by %service_*.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1636804800">- tor 0.4.6.8:
  * Improving reporting of general overload state for DNS timeout
    errors by relays
  * Regenerate fallback directories for October 2021
  * Bug fixes for onion services
  * CVE-2021-22929: do not log v2 onion services access attempt
    warnings on disk excessively (TROVE-2021-008, boo#1192658)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1639742400">- tor 0.4.6.9:
  * remove the DNS timeout metric from the overload general signal
  * regenerate fallback directories generated on December 15, 2021
  * Update the geoip files to match the IPFire Location Database,
    as retrieved on 2021/12/15
  * Reject IPv6-only DirPort</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1644148800">- tor 0.4.6.10
  * minor bugfixes and features
  * https://gitlab.torproject.org/tpo/core/tor/-/raw/release-0.4.6/ReleaseNotes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1651060800">- tor 0.4.7.7
  * New feature: Congestion control to improve traffic speed and
    stability on the network once a majority of Exit nodes upgrade
    boo#1198949
  * Directory authorities: improved handling of "MiddleOnly" relays
  * Improved mitigation against guard discovery attacks on clients
    and short-lived services
  * Improve observed performance under DNS load
  * Improve handling of overload state
  * end-of-life relays running version 0.4.2.x, 0.4.3.x,
    0.4.4.x and 0.4.5 alphas/rc, 0.3.5.x are now rejected
  * Onion service v2 addresses are no longer recognized</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1655380800">- tor 0.4.7.8
  * Fix a scenario where RTT estimation can become wedged, seriously
    degrading congestion control performance on all circuits. This
    impacts clients, onion services, and relays, and can be triggered
    remotely by a malicious endpoint.
    (TROVE-2022-001, CVE-2022-33903, boo#1200672)
  * Regenerate fallback directories generated on June 17, 2022.
  * Update the geoip files to match the IPFire Location Database, as
    retrieved on 2022/06/17.
  * Allow the rseq system call in the sandbox
  * logging bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660219200">- tor 0.4.7.9 (boo#1202336)
  * major fixes aimed at reducing memory pressure on relays
  * prevent a possible side-channel
  * major bugfix related to congestion control
  * major bugfix related to Vanguard L2 layer node selection</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660305600">- tor 0.4.7.10
  * IPFire location database did not have proper ARIN network
    allocations - affected circuit path selection and relay metrics</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1668081600">- tor 0.4.7.11:
  * Improve security of DNS cache by randomly clipping the TTL
    value (boo#1205307, TROVE-2021-009)
  * Improved defenses against network-wide DoS, multiple counters
    and metrics added to MetricsPorts
  * Apply circuit creation anti-DoS defenses if the outbound
    circuit max cell queue size is reached too many times. This
    introduces two new consensus parameters to control the queue
    size limit and number of times allowed to go over that limit.
  * Directory authority updates
  * IPFire database and geoip updates
  * Bump the maximum amount of CPU that can be used from 16 to 128.
    The NumCPUs torrc option overrides this hardcoded maximum.
  * onion service: set a higher circuit build timeout for opened
    client rendezvous circuit to avoid timeouts and retry load
  * Make the service retry a rendezvous if the circuit is being
    repurposed for measurements</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1670328000">- tor 0.4.7.12:
  * new key for moria1
  * new metrics are exported on the MetricsPort for the congestion
    control subsystem</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1673611200">- tor 0.4.7.13:
  * fix SafeSocks option to avoid DNS leaks (boo#1207110, TROVE-2022-002)
  * improve congestion control
  * fix relay channel handling</changelog>
</package>
<package pkgid="47b94f3f2c49e162541f0cf96a3dadbed77d04fc5161ff5e6521400960404aa8" name="tor" arch="aarch64">
  <version epoch="0" ver="0.4.7.8" rel="bp154.2.3.1"/>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1600171200">- tor 0.4.4.5
  * Improve guard selection
  * IPv6 improvements</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1605182400">- tor 0.4.4.6
  * Check channels+circuits on relays more thoroughly
    (TROVE-2020-005, boo#1178741)</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1611748800">- Restrict service permissions with systemd</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1612526400">- tor 0.4.4.7
  * https://blog.torproject.org/node/1990
  * Stop requiring a live consensus for v3 clients and services
  * Re-entry into the network is now denied at the Exit level
  * Fix undefined behavior on our Keccak library
  * Strip '\r' characters when reading text files on Unix platforms
  * Handle partial SOCKS5 messages correctly
- Add tor-practracker.patch to fix tests</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1613476800">- tor 0.4.5.6
  * https://lists.torproject.org/pipermail/tor-announce/2021-February/000214.html
  * Introduce a new MetricsPort HTTP interface
  * Support IPv6 in the torrc Address option
  * Add event-tracing library support for USDT and LTTng-UST
  * Try to read N of N bytes on a TLS connection
- Drop upstream tor-practracker.patch</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1615896000">- tor 0.4.5.7
  * https://lists.torproject.org/pipermail/tor-announce/2021-March/000216.html
  * Fix 2 denial of service security issues (boo#1183726)
    + Disable the dump_desc() function that we used to dump unparseable
    information to disk (CVE-2021-28089)
    + Fix a bug in appending detached signatures to a pending consensus
    document that could be used to crash a directory authority
    (CVE-2021-28090)
  * Ship geoip files based on the IPFire Location Database</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1619179200">- Fix logging issue due to systemd picking up stdout - boo#1181244
  Continue to log notices to syslog by default.
- actually build with lzma/zstd
- skip i586 tests (boo#1179331)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1619265600">- fix packaging warnings related to tor-master service</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1620734400">- tor 0.4.5.8
  * https://lists.torproject.org/pipermail/tor-announce/2021-May/000219.html
  * allow Linux sandbox with Glibc 2.33
  * work with autoconf 2.70+
  * several other minor features and bugfixes (see announcement)</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1623672000">- tor 0.4.5.9
  * Don't allow relays to spoof RELAY_END or RELAY_RESOLVED cell (CVE-2021-34548, boo#1187322)
  * Detect more failure conditions from the OpenSSL RNG code (boo#1187323)
  * Resist a hashtable-based CPU denial-of-service attack against relays (CVE-2021-34549, boo#1187324)
  * Fix an out-of-bounds memory access in v3 onion service descriptor parsing (CVE-2021-34550, boo#1187325)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1623844800">- tor 0.4.6.5
  * Add controller support for creating v3 onion services with
    client auth
  * When voting on a relay with a Sybil-like appearance, add the
    Sybil flag when clearing out the other flags. This lets a relay
    operator know why their relay hasn't been included in the
    consensus
  * Relays now report how overloaded they are
  * Add a new DoS subsystem to control the rate of client
    connections for relays
  * Relays now publish statistics about v3 onions services
  * Improve circuit timeout algorithm for client performance
- add tor-0.4.6.5-gcc7.patch to fix build with gcc7</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1625140800">- tor 0.4.6.6:
  * Fix a compilation error with gcc 7, drop tor-0.4.6.5-gcc7.patch
  * Enable the deterministic RNG for unit tests that covers the
    address set bloomfilter-based API's</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1625572800">- Add missing service_add_pre tor-master.service</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1629201600">- tor 0.4.6.7:
  * Fix a DoS via a remotely triggerable assertion failure
    (boo#1189489, TROVE-2021-007, CVE-2021-38385)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1629806400">- Reduce boilerplate generated by %service_*.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1636804800">- tor 0.4.6.8:
  * Improving reporting of general overload state for DNS timeout
    errors by relays
  * Regenerate fallback directories for October 2021
  * Bug fixes for onion services
  * CVE-2021-22929: do not log v2 onion services access attempt
    warnings on disk excessively (TROVE-2021-008, boo#1192658)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1639742400">- tor 0.4.6.9:
  * remove the DNS timeout metric from the overload general signal
  * regenerate fallback directories generated on December 15, 2021
  * Update the geoip files to match the IPFire Location Database,
    as retrieved on 2021/12/15
  * Reject IPv6-only DirPort</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1644148800">- tor 0.4.6.10
  * minor bugfixes and features
  * https://gitlab.torproject.org/tpo/core/tor/-/raw/release-0.4.6/ReleaseNotes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1651060800">- tor 0.4.7.7
  * New feature: Congestion control to improve traffic speed and
    stability on the network once a majority of Exit nodes upgrade
    boo#1198949
  * Directory authorities: improved handling of "MiddleOnly" relays
  * Improved mitigation against guard discovery attacks on clients
    and short-lived services
  * Improve observed performance under DNS load
  * Improve handling of overload state
  * end-of-life relays running version 0.4.2.x, 0.4.3.x,
    0.4.4.x and 0.4.5 alphas/rc, 0.3.5.x are now rejected
  * Onion service v2 addresses are no longer recognized</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1655380800">- tor 0.4.7.8
  * Fix a scenario where RTT estimation can become wedged, seriously
    degrading congestion control performance on all circuits. This
    impacts clients, onion services, and relays, and can be triggered
    remotely by a malicious endpoint.
    (TROVE-2022-001, CVE-2022-33903, boo#1200672)
  * Regenerate fallback directories generated on June 17, 2022.
  * Update the geoip files to match the IPFire Location Database, as
    retrieved on 2022/06/17.
  * Allow the rseq system call in the sandbox
  * logging bug fixes</changelog>
</package>
<package pkgid="4936e56f6d33b6856cbd27c88dca62cf3553fcccccc1c676f9c5d6baa09d4b32" name="tor" arch="i586">
  <version epoch="0" ver="0.4.7.8" rel="bp154.2.3.1"/>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1600171200">- tor 0.4.4.5
  * Improve guard selection
  * IPv6 improvements</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1605182400">- tor 0.4.4.6
  * Check channels+circuits on relays more thoroughly
    (TROVE-2020-005, boo#1178741)</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1611748800">- Restrict service permissions with systemd</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1612526400">- tor 0.4.4.7
  * https://blog.torproject.org/node/1990
  * Stop requiring a live consensus for v3 clients and services
  * Re-entry into the network is now denied at the Exit level
  * Fix undefined behavior on our Keccak library
  * Strip '\r' characters when reading text files on Unix platforms
  * Handle partial SOCKS5 messages correctly
- Add tor-practracker.patch to fix tests</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1613476800">- tor 0.4.5.6
  * https://lists.torproject.org/pipermail/tor-announce/2021-February/000214.html
  * Introduce a new MetricsPort HTTP interface
  * Support IPv6 in the torrc Address option
  * Add event-tracing library support for USDT and LTTng-UST
  * Try to read N of N bytes on a TLS connection
- Drop upstream tor-practracker.patch</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1615896000">- tor 0.4.5.7
  * https://lists.torproject.org/pipermail/tor-announce/2021-March/000216.html
  * Fix 2 denial of service security issues (boo#1183726)
    + Disable the dump_desc() function that we used to dump unparseable
    information to disk (CVE-2021-28089)
    + Fix a bug in appending detached signatures to a pending consensus
    document that could be used to crash a directory authority
    (CVE-2021-28090)
  * Ship geoip files based on the IPFire Location Database</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1619179200">- Fix logging issue due to systemd picking up stdout - boo#1181244
  Continue to log notices to syslog by default.
- actually build with lzma/zstd
- skip i586 tests (boo#1179331)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1619265600">- fix packaging warnings related to tor-master service</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1620734400">- tor 0.4.5.8
  * https://lists.torproject.org/pipermail/tor-announce/2021-May/000219.html
  * allow Linux sandbox with Glibc 2.33
  * work with autoconf 2.70+
  * several other minor features and bugfixes (see announcement)</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1623672000">- tor 0.4.5.9
  * Don't allow relays to spoof RELAY_END or RELAY_RESOLVED cell (CVE-2021-34548, boo#1187322)
  * Detect more failure conditions from the OpenSSL RNG code (boo#1187323)
  * Resist a hashtable-based CPU denial-of-service attack against relays (CVE-2021-34549, boo#1187324)
  * Fix an out-of-bounds memory access in v3 onion service descriptor parsing (CVE-2021-34550, boo#1187325)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1623844800">- tor 0.4.6.5
  * Add controller support for creating v3 onion services with
    client auth
  * When voting on a relay with a Sybil-like appearance, add the
    Sybil flag when clearing out the other flags. This lets a relay
    operator know why their relay hasn't been included in the
    consensus
  * Relays now report how overloaded they are
  * Add a new DoS subsystem to control the rate of client
    connections for relays
  * Relays now publish statistics about v3 onions services
  * Improve circuit timeout algorithm for client performance
- add tor-0.4.6.5-gcc7.patch to fix build with gcc7</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1625140800">- tor 0.4.6.6:
  * Fix a compilation error with gcc 7, drop tor-0.4.6.5-gcc7.patch
  * Enable the deterministic RNG for unit tests that covers the
    address set bloomfilter-based API's</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1625572800">- Add missing service_add_pre tor-master.service</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1629201600">- tor 0.4.6.7:
  * Fix a DoS via a remotely triggerable assertion failure
    (boo#1189489, TROVE-2021-007, CVE-2021-38385)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1629806400">- Reduce boilerplate generated by %service_*.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1636804800">- tor 0.4.6.8:
  * Improving reporting of general overload state for DNS timeout
    errors by relays
  * Regenerate fallback directories for October 2021
  * Bug fixes for onion services
  * CVE-2021-22929: do not log v2 onion services access attempt
    warnings on disk excessively (TROVE-2021-008, boo#1192658)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1639742400">- tor 0.4.6.9:
  * remove the DNS timeout metric from the overload general signal
  * regenerate fallback directories generated on December 15, 2021
  * Update the geoip files to match the IPFire Location Database,
    as retrieved on 2021/12/15
  * Reject IPv6-only DirPort</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1644148800">- tor 0.4.6.10
  * minor bugfixes and features
  * https://gitlab.torproject.org/tpo/core/tor/-/raw/release-0.4.6/ReleaseNotes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1651060800">- tor 0.4.7.7
  * New feature: Congestion control to improve traffic speed and
    stability on the network once a majority of Exit nodes upgrade
    boo#1198949
  * Directory authorities: improved handling of "MiddleOnly" relays
  * Improved mitigation against guard discovery attacks on clients
    and short-lived services
  * Improve observed performance under DNS load
  * Improve handling of overload state
  * end-of-life relays running version 0.4.2.x, 0.4.3.x,
    0.4.4.x and 0.4.5 alphas/rc, 0.3.5.x are now rejected
  * Onion service v2 addresses are no longer recognized</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1655380800">- tor 0.4.7.8
  * Fix a scenario where RTT estimation can become wedged, seriously
    degrading congestion control performance on all circuits. This
    impacts clients, onion services, and relays, and can be triggered
    remotely by a malicious endpoint.
    (TROVE-2022-001, CVE-2022-33903, boo#1200672)
  * Regenerate fallback directories generated on June 17, 2022.
  * Update the geoip files to match the IPFire Location Database, as
    retrieved on 2022/06/17.
  * Allow the rseq system call in the sandbox
  * logging bug fixes</changelog>
</package>
<package pkgid="1b2a2b2afcf50474ca111a8a4bbdce743666991029eb41d6c9f2cebcdac19723" name="tor" arch="ppc64le">
  <version epoch="0" ver="0.4.7.8" rel="bp154.2.3.1"/>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1600171200">- tor 0.4.4.5
  * Improve guard selection
  * IPv6 improvements</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1605182400">- tor 0.4.4.6
  * Check channels+circuits on relays more thoroughly
    (TROVE-2020-005, boo#1178741)</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1611748800">- Restrict service permissions with systemd</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1612526400">- tor 0.4.4.7
  * https://blog.torproject.org/node/1990
  * Stop requiring a live consensus for v3 clients and services
  * Re-entry into the network is now denied at the Exit level
  * Fix undefined behavior on our Keccak library
  * Strip '\r' characters when reading text files on Unix platforms
  * Handle partial SOCKS5 messages correctly
- Add tor-practracker.patch to fix tests</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1613476800">- tor 0.4.5.6
  * https://lists.torproject.org/pipermail/tor-announce/2021-February/000214.html
  * Introduce a new MetricsPort HTTP interface
  * Support IPv6 in the torrc Address option
  * Add event-tracing library support for USDT and LTTng-UST
  * Try to read N of N bytes on a TLS connection
- Drop upstream tor-practracker.patch</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1615896000">- tor 0.4.5.7
  * https://lists.torproject.org/pipermail/tor-announce/2021-March/000216.html
  * Fix 2 denial of service security issues (boo#1183726)
    + Disable the dump_desc() function that we used to dump unparseable
    information to disk (CVE-2021-28089)
    + Fix a bug in appending detached signatures to a pending consensus
    document that could be used to crash a directory authority
    (CVE-2021-28090)
  * Ship geoip files based on the IPFire Location Database</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1619179200">- Fix logging issue due to systemd picking up stdout - boo#1181244
  Continue to log notices to syslog by default.
- actually build with lzma/zstd
- skip i586 tests (boo#1179331)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1619265600">- fix packaging warnings related to tor-master service</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1620734400">- tor 0.4.5.8
  * https://lists.torproject.org/pipermail/tor-announce/2021-May/000219.html
  * allow Linux sandbox with Glibc 2.33
  * work with autoconf 2.70+
  * several other minor features and bugfixes (see announcement)</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1623672000">- tor 0.4.5.9
  * Don't allow relays to spoof RELAY_END or RELAY_RESOLVED cell (CVE-2021-34548, boo#1187322)
  * Detect more failure conditions from the OpenSSL RNG code (boo#1187323)
  * Resist a hashtable-based CPU denial-of-service attack against relays (CVE-2021-34549, boo#1187324)
  * Fix an out-of-bounds memory access in v3 onion service descriptor parsing (CVE-2021-34550, boo#1187325)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1623844800">- tor 0.4.6.5
  * Add controller support for creating v3 onion services with
    client auth
  * When voting on a relay with a Sybil-like appearance, add the
    Sybil flag when clearing out the other flags. This lets a relay
    operator know why their relay hasn't been included in the
    consensus
  * Relays now report how overloaded they are
  * Add a new DoS subsystem to control the rate of client
    connections for relays
  * Relays now publish statistics about v3 onions services
  * Improve circuit timeout algorithm for client performance
- add tor-0.4.6.5-gcc7.patch to fix build with gcc7</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1625140800">- tor 0.4.6.6:
  * Fix a compilation error with gcc 7, drop tor-0.4.6.5-gcc7.patch
  * Enable the deterministic RNG for unit tests that covers the
    address set bloomfilter-based API's</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1625572800">- Add missing service_add_pre tor-master.service</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1629201600">- tor 0.4.6.7:
  * Fix a DoS via a remotely triggerable assertion failure
    (boo#1189489, TROVE-2021-007, CVE-2021-38385)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1629806400">- Reduce boilerplate generated by %service_*.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1636804800">- tor 0.4.6.8:
  * Improving reporting of general overload state for DNS timeout
    errors by relays
  * Regenerate fallback directories for October 2021
  * Bug fixes for onion services
  * CVE-2021-22929: do not log v2 onion services access attempt
    warnings on disk excessively (TROVE-2021-008, boo#1192658)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1639742400">- tor 0.4.6.9:
  * remove the DNS timeout metric from the overload general signal
  * regenerate fallback directories generated on December 15, 2021
  * Update the geoip files to match the IPFire Location Database,
    as retrieved on 2021/12/15
  * Reject IPv6-only DirPort</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1644148800">- tor 0.4.6.10
  * minor bugfixes and features
  * https://gitlab.torproject.org/tpo/core/tor/-/raw/release-0.4.6/ReleaseNotes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1651060800">- tor 0.4.7.7
  * New feature: Congestion control to improve traffic speed and
    stability on the network once a majority of Exit nodes upgrade
    boo#1198949
  * Directory authorities: improved handling of "MiddleOnly" relays
  * Improved mitigation against guard discovery attacks on clients
    and short-lived services
  * Improve observed performance under DNS load
  * Improve handling of overload state
  * end-of-life relays running version 0.4.2.x, 0.4.3.x,
    0.4.4.x and 0.4.5 alphas/rc, 0.3.5.x are now rejected
  * Onion service v2 addresses are no longer recognized</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1655380800">- tor 0.4.7.8
  * Fix a scenario where RTT estimation can become wedged, seriously
    degrading congestion control performance on all circuits. This
    impacts clients, onion services, and relays, and can be triggered
    remotely by a malicious endpoint.
    (TROVE-2022-001, CVE-2022-33903, boo#1200672)
  * Regenerate fallback directories generated on June 17, 2022.
  * Update the geoip files to match the IPFire Location Database, as
    retrieved on 2022/06/17.
  * Allow the rseq system call in the sandbox
  * logging bug fixes</changelog>
</package>
<package pkgid="e1cbe4bafd662e5aa1f561ff5aaf510adb2865557a2ec0d461a0cab9df6c4bb6" name="tor" arch="s390x">
  <version epoch="0" ver="0.4.7.8" rel="bp154.2.3.1"/>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1600171200">- tor 0.4.4.5
  * Improve guard selection
  * IPv6 improvements</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1605182400">- tor 0.4.4.6
  * Check channels+circuits on relays more thoroughly
    (TROVE-2020-005, boo#1178741)</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1611748800">- Restrict service permissions with systemd</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1612526400">- tor 0.4.4.7
  * https://blog.torproject.org/node/1990
  * Stop requiring a live consensus for v3 clients and services
  * Re-entry into the network is now denied at the Exit level
  * Fix undefined behavior on our Keccak library
  * Strip '\r' characters when reading text files on Unix platforms
  * Handle partial SOCKS5 messages correctly
- Add tor-practracker.patch to fix tests</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1613476800">- tor 0.4.5.6
  * https://lists.torproject.org/pipermail/tor-announce/2021-February/000214.html
  * Introduce a new MetricsPort HTTP interface
  * Support IPv6 in the torrc Address option
  * Add event-tracing library support for USDT and LTTng-UST
  * Try to read N of N bytes on a TLS connection
- Drop upstream tor-practracker.patch</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1615896000">- tor 0.4.5.7
  * https://lists.torproject.org/pipermail/tor-announce/2021-March/000216.html
  * Fix 2 denial of service security issues (boo#1183726)
    + Disable the dump_desc() function that we used to dump unparseable
    information to disk (CVE-2021-28089)
    + Fix a bug in appending detached signatures to a pending consensus
    document that could be used to crash a directory authority
    (CVE-2021-28090)
  * Ship geoip files based on the IPFire Location Database</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1619179200">- Fix logging issue due to systemd picking up stdout - boo#1181244
  Continue to log notices to syslog by default.
- actually build with lzma/zstd
- skip i586 tests (boo#1179331)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1619265600">- fix packaging warnings related to tor-master service</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1620734400">- tor 0.4.5.8
  * https://lists.torproject.org/pipermail/tor-announce/2021-May/000219.html
  * allow Linux sandbox with Glibc 2.33
  * work with autoconf 2.70+
  * several other minor features and bugfixes (see announcement)</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1623672000">- tor 0.4.5.9
  * Don't allow relays to spoof RELAY_END or RELAY_RESOLVED cell (CVE-2021-34548, boo#1187322)
  * Detect more failure conditions from the OpenSSL RNG code (boo#1187323)
  * Resist a hashtable-based CPU denial-of-service attack against relays (CVE-2021-34549, boo#1187324)
  * Fix an out-of-bounds memory access in v3 onion service descriptor parsing (CVE-2021-34550, boo#1187325)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1623844800">- tor 0.4.6.5
  * Add controller support for creating v3 onion services with
    client auth
  * When voting on a relay with a Sybil-like appearance, add the
    Sybil flag when clearing out the other flags. This lets a relay
    operator know why their relay hasn't been included in the
    consensus
  * Relays now report how overloaded they are
  * Add a new DoS subsystem to control the rate of client
    connections for relays
  * Relays now publish statistics about v3 onions services
  * Improve circuit timeout algorithm for client performance
- add tor-0.4.6.5-gcc7.patch to fix build with gcc7</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1625140800">- tor 0.4.6.6:
  * Fix a compilation error with gcc 7, drop tor-0.4.6.5-gcc7.patch
  * Enable the deterministic RNG for unit tests that covers the
    address set bloomfilter-based API's</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1625572800">- Add missing service_add_pre tor-master.service</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1629201600">- tor 0.4.6.7:
  * Fix a DoS via a remotely triggerable assertion failure
    (boo#1189489, TROVE-2021-007, CVE-2021-38385)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1629806400">- Reduce boilerplate generated by %service_*.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1636804800">- tor 0.4.6.8:
  * Improving reporting of general overload state for DNS timeout
    errors by relays
  * Regenerate fallback directories for October 2021
  * Bug fixes for onion services
  * CVE-2021-22929: do not log v2 onion services access attempt
    warnings on disk excessively (TROVE-2021-008, boo#1192658)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1639742400">- tor 0.4.6.9:
  * remove the DNS timeout metric from the overload general signal
  * regenerate fallback directories generated on December 15, 2021
  * Update the geoip files to match the IPFire Location Database,
    as retrieved on 2021/12/15
  * Reject IPv6-only DirPort</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1644148800">- tor 0.4.6.10
  * minor bugfixes and features
  * https://gitlab.torproject.org/tpo/core/tor/-/raw/release-0.4.6/ReleaseNotes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1651060800">- tor 0.4.7.7
  * New feature: Congestion control to improve traffic speed and
    stability on the network once a majority of Exit nodes upgrade
    boo#1198949
  * Directory authorities: improved handling of "MiddleOnly" relays
  * Improved mitigation against guard discovery attacks on clients
    and short-lived services
  * Improve observed performance under DNS load
  * Improve handling of overload state
  * end-of-life relays running version 0.4.2.x, 0.4.3.x,
    0.4.4.x and 0.4.5 alphas/rc, 0.3.5.x are now rejected
  * Onion service v2 addresses are no longer recognized</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1655380800">- tor 0.4.7.8
  * Fix a scenario where RTT estimation can become wedged, seriously
    degrading congestion control performance on all circuits. This
    impacts clients, onion services, and relays, and can be triggered
    remotely by a malicious endpoint.
    (TROVE-2022-001, CVE-2022-33903, boo#1200672)
  * Regenerate fallback directories generated on June 17, 2022.
  * Update the geoip files to match the IPFire Location Database, as
    retrieved on 2022/06/17.
  * Allow the rseq system call in the sandbox
  * logging bug fixes</changelog>
</package>
<package pkgid="dcda7c873281b4f28e336d159243a1d36b0b7f7fb361f5ff9ad2be012e47beeb" name="tor" arch="src">
  <version epoch="0" ver="0.4.7.8" rel="bp154.2.3.1"/>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1600171200">- tor 0.4.4.5
  * Improve guard selection
  * IPv6 improvements</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1605182400">- tor 0.4.4.6
  * Check channels+circuits on relays more thoroughly
    (TROVE-2020-005, boo#1178741)</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1611748800">- Restrict service permissions with systemd</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1612526400">- tor 0.4.4.7
  * https://blog.torproject.org/node/1990
  * Stop requiring a live consensus for v3 clients and services
  * Re-entry into the network is now denied at the Exit level
  * Fix undefined behavior on our Keccak library
  * Strip '\r' characters when reading text files on Unix platforms
  * Handle partial SOCKS5 messages correctly
- Add tor-practracker.patch to fix tests</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1613476800">- tor 0.4.5.6
  * https://lists.torproject.org/pipermail/tor-announce/2021-February/000214.html
  * Introduce a new MetricsPort HTTP interface
  * Support IPv6 in the torrc Address option
  * Add event-tracing library support for USDT and LTTng-UST
  * Try to read N of N bytes on a TLS connection
- Drop upstream tor-practracker.patch</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1615896000">- tor 0.4.5.7
  * https://lists.torproject.org/pipermail/tor-announce/2021-March/000216.html
  * Fix 2 denial of service security issues (boo#1183726)
    + Disable the dump_desc() function that we used to dump unparseable
    information to disk (CVE-2021-28089)
    + Fix a bug in appending detached signatures to a pending consensus
    document that could be used to crash a directory authority
    (CVE-2021-28090)
  * Ship geoip files based on the IPFire Location Database</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1619179200">- Fix logging issue due to systemd picking up stdout - boo#1181244
  Continue to log notices to syslog by default.
- actually build with lzma/zstd
- skip i586 tests (boo#1179331)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1619265600">- fix packaging warnings related to tor-master service</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1620734400">- tor 0.4.5.8
  * https://lists.torproject.org/pipermail/tor-announce/2021-May/000219.html
  * allow Linux sandbox with Glibc 2.33
  * work with autoconf 2.70+
  * several other minor features and bugfixes (see announcement)</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1623672000">- tor 0.4.5.9
  * Don't allow relays to spoof RELAY_END or RELAY_RESOLVED cell (CVE-2021-34548, boo#1187322)
  * Detect more failure conditions from the OpenSSL RNG code (boo#1187323)
  * Resist a hashtable-based CPU denial-of-service attack against relays (CVE-2021-34549, boo#1187324)
  * Fix an out-of-bounds memory access in v3 onion service descriptor parsing (CVE-2021-34550, boo#1187325)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1623844800">- tor 0.4.6.5
  * Add controller support for creating v3 onion services with
    client auth
  * When voting on a relay with a Sybil-like appearance, add the
    Sybil flag when clearing out the other flags. This lets a relay
    operator know why their relay hasn't been included in the
    consensus
  * Relays now report how overloaded they are
  * Add a new DoS subsystem to control the rate of client
    connections for relays
  * Relays now publish statistics about v3 onions services
  * Improve circuit timeout algorithm for client performance
- add tor-0.4.6.5-gcc7.patch to fix build with gcc7</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1625140800">- tor 0.4.6.6:
  * Fix a compilation error with gcc 7, drop tor-0.4.6.5-gcc7.patch
  * Enable the deterministic RNG for unit tests that covers the
    address set bloomfilter-based API's</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1625572800">- Add missing service_add_pre tor-master.service</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1629201600">- tor 0.4.6.7:
  * Fix a DoS via a remotely triggerable assertion failure
    (boo#1189489, TROVE-2021-007, CVE-2021-38385)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1629806400">- Reduce boilerplate generated by %service_*.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1636804800">- tor 0.4.6.8:
  * Improving reporting of general overload state for DNS timeout
    errors by relays
  * Regenerate fallback directories for October 2021
  * Bug fixes for onion services
  * CVE-2021-22929: do not log v2 onion services access attempt
    warnings on disk excessively (TROVE-2021-008, boo#1192658)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1639742400">- tor 0.4.6.9:
  * remove the DNS timeout metric from the overload general signal
  * regenerate fallback directories generated on December 15, 2021
  * Update the geoip files to match the IPFire Location Database,
    as retrieved on 2021/12/15
  * Reject IPv6-only DirPort</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1644148800">- tor 0.4.6.10
  * minor bugfixes and features
  * https://gitlab.torproject.org/tpo/core/tor/-/raw/release-0.4.6/ReleaseNotes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1651060800">- tor 0.4.7.7
  * New feature: Congestion control to improve traffic speed and
    stability on the network once a majority of Exit nodes upgrade
    boo#1198949
  * Directory authorities: improved handling of "MiddleOnly" relays
  * Improved mitigation against guard discovery attacks on clients
    and short-lived services
  * Improve observed performance under DNS load
  * Improve handling of overload state
  * end-of-life relays running version 0.4.2.x, 0.4.3.x,
    0.4.4.x and 0.4.5 alphas/rc, 0.3.5.x are now rejected
  * Onion service v2 addresses are no longer recognized</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1655380800">- tor 0.4.7.8
  * Fix a scenario where RTT estimation can become wedged, seriously
    degrading congestion control performance on all circuits. This
    impacts clients, onion services, and relays, and can be triggered
    remotely by a malicious endpoint.
    (TROVE-2022-001, CVE-2022-33903, boo#1200672)
  * Regenerate fallback directories generated on June 17, 2022.
  * Update the geoip files to match the IPFire Location Database, as
    retrieved on 2022/06/17.
  * Allow the rseq system call in the sandbox
  * logging bug fixes</changelog>
</package>
<package pkgid="2991c63032e23d21eb4ac6af65fe734fbee5ae656523173959093260a821c7b8" name="tor" arch="x86_64">
  <version epoch="0" ver="0.4.7.8" rel="bp154.2.3.1"/>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1600171200">- tor 0.4.4.5
  * Improve guard selection
  * IPv6 improvements</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1605182400">- tor 0.4.4.6
  * Check channels+circuits on relays more thoroughly
    (TROVE-2020-005, boo#1178741)</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1611748800">- Restrict service permissions with systemd</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1612526400">- tor 0.4.4.7
  * https://blog.torproject.org/node/1990
  * Stop requiring a live consensus for v3 clients and services
  * Re-entry into the network is now denied at the Exit level
  * Fix undefined behavior on our Keccak library
  * Strip '\r' characters when reading text files on Unix platforms
  * Handle partial SOCKS5 messages correctly
- Add tor-practracker.patch to fix tests</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1613476800">- tor 0.4.5.6
  * https://lists.torproject.org/pipermail/tor-announce/2021-February/000214.html
  * Introduce a new MetricsPort HTTP interface
  * Support IPv6 in the torrc Address option
  * Add event-tracing library support for USDT and LTTng-UST
  * Try to read N of N bytes on a TLS connection
- Drop upstream tor-practracker.patch</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1615896000">- tor 0.4.5.7
  * https://lists.torproject.org/pipermail/tor-announce/2021-March/000216.html
  * Fix 2 denial of service security issues (boo#1183726)
    + Disable the dump_desc() function that we used to dump unparseable
    information to disk (CVE-2021-28089)
    + Fix a bug in appending detached signatures to a pending consensus
    document that could be used to crash a directory authority
    (CVE-2021-28090)
  * Ship geoip files based on the IPFire Location Database</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1619179200">- Fix logging issue due to systemd picking up stdout - boo#1181244
  Continue to log notices to syslog by default.
- actually build with lzma/zstd
- skip i586 tests (boo#1179331)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1619265600">- fix packaging warnings related to tor-master service</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1620734400">- tor 0.4.5.8
  * https://lists.torproject.org/pipermail/tor-announce/2021-May/000219.html
  * allow Linux sandbox with Glibc 2.33
  * work with autoconf 2.70+
  * several other minor features and bugfixes (see announcement)</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1623672000">- tor 0.4.5.9
  * Don't allow relays to spoof RELAY_END or RELAY_RESOLVED cell (CVE-2021-34548, boo#1187322)
  * Detect more failure conditions from the OpenSSL RNG code (boo#1187323)
  * Resist a hashtable-based CPU denial-of-service attack against relays (CVE-2021-34549, boo#1187324)
  * Fix an out-of-bounds memory access in v3 onion service descriptor parsing (CVE-2021-34550, boo#1187325)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1623844800">- tor 0.4.6.5
  * Add controller support for creating v3 onion services with
    client auth
  * When voting on a relay with a Sybil-like appearance, add the
    Sybil flag when clearing out the other flags. This lets a relay
    operator know why their relay hasn't been included in the
    consensus
  * Relays now report how overloaded they are
  * Add a new DoS subsystem to control the rate of client
    connections for relays
  * Relays now publish statistics about v3 onions services
  * Improve circuit timeout algorithm for client performance
- add tor-0.4.6.5-gcc7.patch to fix build with gcc7</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1625140800">- tor 0.4.6.6:
  * Fix a compilation error with gcc 7, drop tor-0.4.6.5-gcc7.patch
  * Enable the deterministic RNG for unit tests that covers the
    address set bloomfilter-based API's</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1625572800">- Add missing service_add_pre tor-master.service</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1629201600">- tor 0.4.6.7:
  * Fix a DoS via a remotely triggerable assertion failure
    (boo#1189489, TROVE-2021-007, CVE-2021-38385)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1629806400">- Reduce boilerplate generated by %service_*.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1636804800">- tor 0.4.6.8:
  * Improving reporting of general overload state for DNS timeout
    errors by relays
  * Regenerate fallback directories for October 2021
  * Bug fixes for onion services
  * CVE-2021-22929: do not log v2 onion services access attempt
    warnings on disk excessively (TROVE-2021-008, boo#1192658)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1639742400">- tor 0.4.6.9:
  * remove the DNS timeout metric from the overload general signal
  * regenerate fallback directories generated on December 15, 2021
  * Update the geoip files to match the IPFire Location Database,
    as retrieved on 2021/12/15
  * Reject IPv6-only DirPort</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1644148800">- tor 0.4.6.10
  * minor bugfixes and features
  * https://gitlab.torproject.org/tpo/core/tor/-/raw/release-0.4.6/ReleaseNotes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1651060800">- tor 0.4.7.7
  * New feature: Congestion control to improve traffic speed and
    stability on the network once a majority of Exit nodes upgrade
    boo#1198949
  * Directory authorities: improved handling of "MiddleOnly" relays
  * Improved mitigation against guard discovery attacks on clients
    and short-lived services
  * Improve observed performance under DNS load
  * Improve handling of overload state
  * end-of-life relays running version 0.4.2.x, 0.4.3.x,
    0.4.4.x and 0.4.5 alphas/rc, 0.3.5.x are now rejected
  * Onion service v2 addresses are no longer recognized</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1655380800">- tor 0.4.7.8
  * Fix a scenario where RTT estimation can become wedged, seriously
    degrading congestion control performance on all circuits. This
    impacts clients, onion services, and relays, and can be triggered
    remotely by a malicious endpoint.
    (TROVE-2022-001, CVE-2022-33903, boo#1200672)
  * Regenerate fallback directories generated on June 17, 2022.
  * Update the geoip files to match the IPFire Location Database, as
    retrieved on 2022/06/17.
  * Allow the rseq system call in the sandbox
  * logging bug fixes</changelog>
</package>
<package pkgid="b8a109b14ff58579127528dd32a3d5ad289104cc0f53be8172856dfe0b78cf2d" name="torbrowser-apparmor-profile" arch="noarch">
  <version epoch="0" ver="0.3.6" rel="bp154.2.3.1"/>
  <changelog author="badshah400@gmail.com" date="1470571200">- Update to version 0.2.6:
  + Fixed bug related to fallback to English feature that caused
    Settings to crash.</changelog>
  <changelog author="badshah400@gmail.com" date="1486468800">- Add Requires: python-Parsley to fix downloading through tor
  local server (boo#1023484).</changelog>
  <changelog author="badshah400@gmail.com" date="1486987200">- Update to version 0.2.7:
  * Updated Tor Browser signing key because they added a new
    subkey and verification was failing.
  * Updated AppArmor profiles.
  * Improved localization, and added Russian.
- Split out a %{name}-lang package with all the non_C language
  translations; remove useless top-level
  %{_datadir}/locale/%{name}.mo file.</changelog>
  <changelog author="badshah400@gmail.com" date="1498996800">- Update to version 0.2.8:
  * Update URL to check for latest version, which changed in Tor
    Browser 7.
  * Automatically refresh GPG keyring, to prevent signature
    verification false positives.
  * Improve GnuPG code by using GPGME if available.
  * Updated AppArmor profiles.
  * Added Czech, Hungarian localization.</changelog>
  <changelog author="badshah400@gmail.com" date="1517832000">- Update to versio 0.2.9:
  * Fixed crash issue related to Tor Browser 7.5 changing how the
    currently installed version number is stored
  * Updated list of Tor Project dist mirrors
  * Fixed edge case crash for when stdout isn't writable
  * Updated AppStream metadata
  * Updated AppArmor profiles
- Only run post[un] scripts for openSUSE &lt; 1500; these macros are
  void for newer versions, where rpm triggers automatically take
  care of the appropriate action.</changelog>
  <changelog author="badshah400@gmail.com" date="1537876800">- Update to version 0.3.0:
  * Switched from python2 to python3.
  * Switched from gtk2 to Qt5.
  * Switched from twisted to requests/socks.
  * Use QThreads for async.
  * Removed modem sound.
  * Only refresh gpg keyring on verification error, instead of
    every time.
  * Updated AppArmor profiles.
  * Updated available languages, and fixed locale detection bug.
  * Fixed false signature verification error related to twisted.
- Update dependencies in keeping with upstream changes (noted
  above).
- Replace python(2) wherever used by the corresponding python3
  equivalent macro/command.</changelog>
  <changelog author="badshah400@gmail.com" date="1541592000">- Update to version 0.3.1:
  * Ship with latest version of the Tor Browser Developers
    OpenPGP public key.
  * Fix bug where TBL window stays open after Tor Browser is
    launched.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1549886400">- Add Requires: python3-requests as application does not start
  without it (boo#1124868).
- Use %%license to install LICENSE file.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1563969600">- Update to version 0.3.2:
  * Switch to keys.openpgp.org when refreshing signing key,
    because SKS keyservers are broken
  * Use new Tor Browser logo</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1582891200">- Switch Parsley and PySocks requires to python3 versions.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1583928000">- Add torbrowser-launcher-apparmor-fixes.patch Fix apparmor file
  so that it doesn't hinder actually running the browser, patch
  taken from upstream commits
  (gh#micahflee/torbrowser-launcher#443, boo#1162284).
- Use %autosetup to set up build directory.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1600862400">- Add new key from upstream tor-browser as source and overwrite
  bundled key in tarball with this
  (gh#micahflee/torbrowser-launcher#481).
- Add torbrowser-launcher-version-check-fix.patch: Fix version
  checking with torbrowser 10.0+; patch taken from upstream PR
  (not yet merged) [gh#micahflee/torbrowser-launcher#499].
- Add further fixes to torbrowser-launcher-apparmor-fixes.patch
  to enable bundled libstdc++ to be mapped; fixes taken from
  pending upstream PR (gh#micahflee/torbrowser-launcher#503).</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1601121600">- Update Tor Browser public key from upstream (again).</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1602072000">- Update to version 0.3.3:
  * Switch to Web Key Directory to refresh signing key from
    torproject.org, because everything is broken.
  * Use proper version comparison now that Tor Browser 10.0 is
    out.
  * Fix DNS leak when downloading over Tor.
  * Various bug fixes, as well as AppData and AppArmor fixes.
- Drop tor-browser-developers.asc key: fixed by update.
- Drop patches incorporated or otherwise fixed upstream:
  * torbrowser-launcher-apparmor-fixes.patch.
  * torbrowser-launcher-version-check-fix.patch.
- New BuildRequires and Requires: python3-packaging,
  hicolor-icon-theme.
- New Requires: xmessage: one of zenity, kdialog, or xmessage is
  required and we choose xmessage as a minimal requirement in case
  neither of the first two are installed in the system already.
- Rename source file into %{name}-%{version} format.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1624104000">- Update to version 0.3.4:
  * Ship with latest version of the Tor Browser Developers OpenPGP
    public key.
  * Add several translations.
  * Various small bug fixes.
- Drop torbrowser-launcher-fix-distro-name.patch: distro name
  detection fixed upstream, thus hack no longer needed.
- Add torbrowser-launcher-pt_BR-po-file-end-string.patch: Fix
  missing quotation marks at the end of str line in pt_BR
  translation file; patch taken from upstream merge request
  [gh#micahflee/torbrowser-launcher#579].</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1639224000">- update to 0.3.5:
  * fix refreshing Tor Browser signing key in Flatpak package
- drop torbrowser-launcher-pt_BR-po-file-end-string.patch</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1641902400">- add python-rpm-macros</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1653393600">- Do not recommend lang package: the lang package has smarter
  supplements in place.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1661342400">- Add torbrowser-launcher-gui-move-argtype.patch: Ensure arguments
  to gui-move are integers, not floats (boo#1202693,
  gh#micahflee/torbrowser-launcher#599).</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1671019200">- Update to version 0.3.6:
  * Tor Browser 12.0 no longer uses locales, so the download URL
    and local path have changed
- Drop torbrowser-launcher-gui-move-argtype.patch: upstreamed.</changelog>
</package>
<package pkgid="a3d0f48621c5dcffc7ba372b4b6cc3d0087fadee949e12eeda121b82764a7afe" name="torbrowser-launcher" arch="noarch">
  <version epoch="0" ver="0.3.6" rel="bp154.2.3.1"/>
  <changelog author="badshah400@gmail.com" date="1470571200">- Update to version 0.2.6:
  + Fixed bug related to fallback to English feature that caused
    Settings to crash.</changelog>
  <changelog author="badshah400@gmail.com" date="1486468800">- Add Requires: python-Parsley to fix downloading through tor
  local server (boo#1023484).</changelog>
  <changelog author="badshah400@gmail.com" date="1486987200">- Update to version 0.2.7:
  * Updated Tor Browser signing key because they added a new
    subkey and verification was failing.
  * Updated AppArmor profiles.
  * Improved localization, and added Russian.
- Split out a %{name}-lang package with all the non_C language
  translations; remove useless top-level
  %{_datadir}/locale/%{name}.mo file.</changelog>
  <changelog author="badshah400@gmail.com" date="1498996800">- Update to version 0.2.8:
  * Update URL to check for latest version, which changed in Tor
    Browser 7.
  * Automatically refresh GPG keyring, to prevent signature
    verification false positives.
  * Improve GnuPG code by using GPGME if available.
  * Updated AppArmor profiles.
  * Added Czech, Hungarian localization.</changelog>
  <changelog author="badshah400@gmail.com" date="1517832000">- Update to versio 0.2.9:
  * Fixed crash issue related to Tor Browser 7.5 changing how the
    currently installed version number is stored
  * Updated list of Tor Project dist mirrors
  * Fixed edge case crash for when stdout isn't writable
  * Updated AppStream metadata
  * Updated AppArmor profiles
- Only run post[un] scripts for openSUSE &lt; 1500; these macros are
  void for newer versions, where rpm triggers automatically take
  care of the appropriate action.</changelog>
  <changelog author="badshah400@gmail.com" date="1537876800">- Update to version 0.3.0:
  * Switched from python2 to python3.
  * Switched from gtk2 to Qt5.
  * Switched from twisted to requests/socks.
  * Use QThreads for async.
  * Removed modem sound.
  * Only refresh gpg keyring on verification error, instead of
    every time.
  * Updated AppArmor profiles.
  * Updated available languages, and fixed locale detection bug.
  * Fixed false signature verification error related to twisted.
- Update dependencies in keeping with upstream changes (noted
  above).
- Replace python(2) wherever used by the corresponding python3
  equivalent macro/command.</changelog>
  <changelog author="badshah400@gmail.com" date="1541592000">- Update to version 0.3.1:
  * Ship with latest version of the Tor Browser Developers
    OpenPGP public key.
  * Fix bug where TBL window stays open after Tor Browser is
    launched.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1549886400">- Add Requires: python3-requests as application does not start
  without it (boo#1124868).
- Use %%license to install LICENSE file.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1563969600">- Update to version 0.3.2:
  * Switch to keys.openpgp.org when refreshing signing key,
    because SKS keyservers are broken
  * Use new Tor Browser logo</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1582891200">- Switch Parsley and PySocks requires to python3 versions.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1583928000">- Add torbrowser-launcher-apparmor-fixes.patch Fix apparmor file
  so that it doesn't hinder actually running the browser, patch
  taken from upstream commits
  (gh#micahflee/torbrowser-launcher#443, boo#1162284).
- Use %autosetup to set up build directory.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1600862400">- Add new key from upstream tor-browser as source and overwrite
  bundled key in tarball with this
  (gh#micahflee/torbrowser-launcher#481).
- Add torbrowser-launcher-version-check-fix.patch: Fix version
  checking with torbrowser 10.0+; patch taken from upstream PR
  (not yet merged) [gh#micahflee/torbrowser-launcher#499].
- Add further fixes to torbrowser-launcher-apparmor-fixes.patch
  to enable bundled libstdc++ to be mapped; fixes taken from
  pending upstream PR (gh#micahflee/torbrowser-launcher#503).</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1601121600">- Update Tor Browser public key from upstream (again).</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1602072000">- Update to version 0.3.3:
  * Switch to Web Key Directory to refresh signing key from
    torproject.org, because everything is broken.
  * Use proper version comparison now that Tor Browser 10.0 is
    out.
  * Fix DNS leak when downloading over Tor.
  * Various bug fixes, as well as AppData and AppArmor fixes.
- Drop tor-browser-developers.asc key: fixed by update.
- Drop patches incorporated or otherwise fixed upstream:
  * torbrowser-launcher-apparmor-fixes.patch.
  * torbrowser-launcher-version-check-fix.patch.
- New BuildRequires and Requires: python3-packaging,
  hicolor-icon-theme.
- New Requires: xmessage: one of zenity, kdialog, or xmessage is
  required and we choose xmessage as a minimal requirement in case
  neither of the first two are installed in the system already.
- Rename source file into %{name}-%{version} format.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1624104000">- Update to version 0.3.4:
  * Ship with latest version of the Tor Browser Developers OpenPGP
    public key.
  * Add several translations.
  * Various small bug fixes.
- Drop torbrowser-launcher-fix-distro-name.patch: distro name
  detection fixed upstream, thus hack no longer needed.
- Add torbrowser-launcher-pt_BR-po-file-end-string.patch: Fix
  missing quotation marks at the end of str line in pt_BR
  translation file; patch taken from upstream merge request
  [gh#micahflee/torbrowser-launcher#579].</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1639224000">- update to 0.3.5:
  * fix refreshing Tor Browser signing key in Flatpak package
- drop torbrowser-launcher-pt_BR-po-file-end-string.patch</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1641902400">- add python-rpm-macros</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1653393600">- Do not recommend lang package: the lang package has smarter
  supplements in place.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1661342400">- Add torbrowser-launcher-gui-move-argtype.patch: Ensure arguments
  to gui-move are integers, not floats (boo#1202693,
  gh#micahflee/torbrowser-launcher#599).</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1671019200">- Update to version 0.3.6:
  * Tor Browser 12.0 no longer uses locales, so the download URL
    and local path have changed
- Drop torbrowser-launcher-gui-move-argtype.patch: upstreamed.</changelog>
</package>
<package pkgid="920b778d0e82e4e2e14902c483e5401779012dbcf8018cca8419063aac97d9d8" name="torbrowser-launcher" arch="src">
  <version epoch="0" ver="0.3.6" rel="bp154.2.3.1"/>
  <changelog author="badshah400@gmail.com" date="1470571200">- Update to version 0.2.6:
  + Fixed bug related to fallback to English feature that caused
    Settings to crash.</changelog>
  <changelog author="badshah400@gmail.com" date="1486468800">- Add Requires: python-Parsley to fix downloading through tor
  local server (boo#1023484).</changelog>
  <changelog author="badshah400@gmail.com" date="1486987200">- Update to version 0.2.7:
  * Updated Tor Browser signing key because they added a new
    subkey and verification was failing.
  * Updated AppArmor profiles.
  * Improved localization, and added Russian.
- Split out a %{name}-lang package with all the non_C language
  translations; remove useless top-level
  %{_datadir}/locale/%{name}.mo file.</changelog>
  <changelog author="badshah400@gmail.com" date="1498996800">- Update to version 0.2.8:
  * Update URL to check for latest version, which changed in Tor
    Browser 7.
  * Automatically refresh GPG keyring, to prevent signature
    verification false positives.
  * Improve GnuPG code by using GPGME if available.
  * Updated AppArmor profiles.
  * Added Czech, Hungarian localization.</changelog>
  <changelog author="badshah400@gmail.com" date="1517832000">- Update to versio 0.2.9:
  * Fixed crash issue related to Tor Browser 7.5 changing how the
    currently installed version number is stored
  * Updated list of Tor Project dist mirrors
  * Fixed edge case crash for when stdout isn't writable
  * Updated AppStream metadata
  * Updated AppArmor profiles
- Only run post[un] scripts for openSUSE &lt; 1500; these macros are
  void for newer versions, where rpm triggers automatically take
  care of the appropriate action.</changelog>
  <changelog author="badshah400@gmail.com" date="1537876800">- Update to version 0.3.0:
  * Switched from python2 to python3.
  * Switched from gtk2 to Qt5.
  * Switched from twisted to requests/socks.
  * Use QThreads for async.
  * Removed modem sound.
  * Only refresh gpg keyring on verification error, instead of
    every time.
  * Updated AppArmor profiles.
  * Updated available languages, and fixed locale detection bug.
  * Fixed false signature verification error related to twisted.
- Update dependencies in keeping with upstream changes (noted
  above).
- Replace python(2) wherever used by the corresponding python3
  equivalent macro/command.</changelog>
  <changelog author="badshah400@gmail.com" date="1541592000">- Update to version 0.3.1:
  * Ship with latest version of the Tor Browser Developers
    OpenPGP public key.
  * Fix bug where TBL window stays open after Tor Browser is
    launched.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1549886400">- Add Requires: python3-requests as application does not start
  without it (boo#1124868).
- Use %%license to install LICENSE file.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1563969600">- Update to version 0.3.2:
  * Switch to keys.openpgp.org when refreshing signing key,
    because SKS keyservers are broken
  * Use new Tor Browser logo</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1582891200">- Switch Parsley and PySocks requires to python3 versions.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1583928000">- Add torbrowser-launcher-apparmor-fixes.patch Fix apparmor file
  so that it doesn't hinder actually running the browser, patch
  taken from upstream commits
  (gh#micahflee/torbrowser-launcher#443, boo#1162284).
- Use %autosetup to set up build directory.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1600862400">- Add new key from upstream tor-browser as source and overwrite
  bundled key in tarball with this
  (gh#micahflee/torbrowser-launcher#481).
- Add torbrowser-launcher-version-check-fix.patch: Fix version
  checking with torbrowser 10.0+; patch taken from upstream PR
  (not yet merged) [gh#micahflee/torbrowser-launcher#499].
- Add further fixes to torbrowser-launcher-apparmor-fixes.patch
  to enable bundled libstdc++ to be mapped; fixes taken from
  pending upstream PR (gh#micahflee/torbrowser-launcher#503).</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1601121600">- Update Tor Browser public key from upstream (again).</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1602072000">- Update to version 0.3.3:
  * Switch to Web Key Directory to refresh signing key from
    torproject.org, because everything is broken.
  * Use proper version comparison now that Tor Browser 10.0 is
    out.
  * Fix DNS leak when downloading over Tor.
  * Various bug fixes, as well as AppData and AppArmor fixes.
- Drop tor-browser-developers.asc key: fixed by update.
- Drop patches incorporated or otherwise fixed upstream:
  * torbrowser-launcher-apparmor-fixes.patch.
  * torbrowser-launcher-version-check-fix.patch.
- New BuildRequires and Requires: python3-packaging,
  hicolor-icon-theme.
- New Requires: xmessage: one of zenity, kdialog, or xmessage is
  required and we choose xmessage as a minimal requirement in case
  neither of the first two are installed in the system already.
- Rename source file into %{name}-%{version} format.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1624104000">- Update to version 0.3.4:
  * Ship with latest version of the Tor Browser Developers OpenPGP
    public key.
  * Add several translations.
  * Various small bug fixes.
- Drop torbrowser-launcher-fix-distro-name.patch: distro name
  detection fixed upstream, thus hack no longer needed.
- Add torbrowser-launcher-pt_BR-po-file-end-string.patch: Fix
  missing quotation marks at the end of str line in pt_BR
  translation file; patch taken from upstream merge request
  [gh#micahflee/torbrowser-launcher#579].</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1639224000">- update to 0.3.5:
  * fix refreshing Tor Browser signing key in Flatpak package
- drop torbrowser-launcher-pt_BR-po-file-end-string.patch</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1641902400">- add python-rpm-macros</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1653393600">- Do not recommend lang package: the lang package has smarter
  supplements in place.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1661342400">- Add torbrowser-launcher-gui-move-argtype.patch: Ensure arguments
  to gui-move are integers, not floats (boo#1202693,
  gh#micahflee/torbrowser-launcher#599).</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1671019200">- Update to version 0.3.6:
  * Tor Browser 12.0 no longer uses locales, so the download URL
    and local path have changed
- Drop torbrowser-launcher-gui-move-argtype.patch: upstreamed.</changelog>
</package>
<package pkgid="7d503d660c85e085f09ad086dbfd7191e342e707152874e572c8bc18ad00c7d5" name="torbrowser-launcher-lang" arch="noarch">
  <version epoch="0" ver="0.3.6" rel="bp154.2.3.1"/>
  <changelog author="badshah400@gmail.com" date="1470571200">- Update to version 0.2.6:
  + Fixed bug related to fallback to English feature that caused
    Settings to crash.</changelog>
  <changelog author="badshah400@gmail.com" date="1486468800">- Add Requires: python-Parsley to fix downloading through tor
  local server (boo#1023484).</changelog>
  <changelog author="badshah400@gmail.com" date="1486987200">- Update to version 0.2.7:
  * Updated Tor Browser signing key because they added a new
    subkey and verification was failing.
  * Updated AppArmor profiles.
  * Improved localization, and added Russian.
- Split out a %{name}-lang package with all the non_C language
  translations; remove useless top-level
  %{_datadir}/locale/%{name}.mo file.</changelog>
  <changelog author="badshah400@gmail.com" date="1498996800">- Update to version 0.2.8:
  * Update URL to check for latest version, which changed in Tor
    Browser 7.
  * Automatically refresh GPG keyring, to prevent signature
    verification false positives.
  * Improve GnuPG code by using GPGME if available.
  * Updated AppArmor profiles.
  * Added Czech, Hungarian localization.</changelog>
  <changelog author="badshah400@gmail.com" date="1517832000">- Update to versio 0.2.9:
  * Fixed crash issue related to Tor Browser 7.5 changing how the
    currently installed version number is stored
  * Updated list of Tor Project dist mirrors
  * Fixed edge case crash for when stdout isn't writable
  * Updated AppStream metadata
  * Updated AppArmor profiles
- Only run post[un] scripts for openSUSE &lt; 1500; these macros are
  void for newer versions, where rpm triggers automatically take
  care of the appropriate action.</changelog>
  <changelog author="badshah400@gmail.com" date="1537876800">- Update to version 0.3.0:
  * Switched from python2 to python3.
  * Switched from gtk2 to Qt5.
  * Switched from twisted to requests/socks.
  * Use QThreads for async.
  * Removed modem sound.
  * Only refresh gpg keyring on verification error, instead of
    every time.
  * Updated AppArmor profiles.
  * Updated available languages, and fixed locale detection bug.
  * Fixed false signature verification error related to twisted.
- Update dependencies in keeping with upstream changes (noted
  above).
- Replace python(2) wherever used by the corresponding python3
  equivalent macro/command.</changelog>
  <changelog author="badshah400@gmail.com" date="1541592000">- Update to version 0.3.1:
  * Ship with latest version of the Tor Browser Developers
    OpenPGP public key.
  * Fix bug where TBL window stays open after Tor Browser is
    launched.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1549886400">- Add Requires: python3-requests as application does not start
  without it (boo#1124868).
- Use %%license to install LICENSE file.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1563969600">- Update to version 0.3.2:
  * Switch to keys.openpgp.org when refreshing signing key,
    because SKS keyservers are broken
  * Use new Tor Browser logo</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1582891200">- Switch Parsley and PySocks requires to python3 versions.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1583928000">- Add torbrowser-launcher-apparmor-fixes.patch Fix apparmor file
  so that it doesn't hinder actually running the browser, patch
  taken from upstream commits
  (gh#micahflee/torbrowser-launcher#443, boo#1162284).
- Use %autosetup to set up build directory.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1600862400">- Add new key from upstream tor-browser as source and overwrite
  bundled key in tarball with this
  (gh#micahflee/torbrowser-launcher#481).
- Add torbrowser-launcher-version-check-fix.patch: Fix version
  checking with torbrowser 10.0+; patch taken from upstream PR
  (not yet merged) [gh#micahflee/torbrowser-launcher#499].
- Add further fixes to torbrowser-launcher-apparmor-fixes.patch
  to enable bundled libstdc++ to be mapped; fixes taken from
  pending upstream PR (gh#micahflee/torbrowser-launcher#503).</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1601121600">- Update Tor Browser public key from upstream (again).</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1602072000">- Update to version 0.3.3:
  * Switch to Web Key Directory to refresh signing key from
    torproject.org, because everything is broken.
  * Use proper version comparison now that Tor Browser 10.0 is
    out.
  * Fix DNS leak when downloading over Tor.
  * Various bug fixes, as well as AppData and AppArmor fixes.
- Drop tor-browser-developers.asc key: fixed by update.
- Drop patches incorporated or otherwise fixed upstream:
  * torbrowser-launcher-apparmor-fixes.patch.
  * torbrowser-launcher-version-check-fix.patch.
- New BuildRequires and Requires: python3-packaging,
  hicolor-icon-theme.
- New Requires: xmessage: one of zenity, kdialog, or xmessage is
  required and we choose xmessage as a minimal requirement in case
  neither of the first two are installed in the system already.
- Rename source file into %{name}-%{version} format.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1624104000">- Update to version 0.3.4:
  * Ship with latest version of the Tor Browser Developers OpenPGP
    public key.
  * Add several translations.
  * Various small bug fixes.
- Drop torbrowser-launcher-fix-distro-name.patch: distro name
  detection fixed upstream, thus hack no longer needed.
- Add torbrowser-launcher-pt_BR-po-file-end-string.patch: Fix
  missing quotation marks at the end of str line in pt_BR
  translation file; patch taken from upstream merge request
  [gh#micahflee/torbrowser-launcher#579].</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1639224000">- update to 0.3.5:
  * fix refreshing Tor Browser signing key in Flatpak package
- drop torbrowser-launcher-pt_BR-po-file-end-string.patch</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1641902400">- add python-rpm-macros</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1653393600">- Do not recommend lang package: the lang package has smarter
  supplements in place.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1661342400">- Add torbrowser-launcher-gui-move-argtype.patch: Ensure arguments
  to gui-move are integers, not floats (boo#1202693,
  gh#micahflee/torbrowser-launcher#599).</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1671019200">- Update to version 0.3.6:
  * Tor Browser 12.0 no longer uses locales, so the download URL
    and local path have changed
- Drop torbrowser-launcher-gui-move-argtype.patch: upstreamed.</changelog>
</package>
<package pkgid="1c25babcb0b82f747749c73979e34eb51e3ce02e84048cbb87ec97cb7f9f84b8" name="translate-toolkit" arch="src">
  <version epoch="0" ver="2.5.0" rel="bp154.2.3.1"/>
  <changelog author="elchevive@opensuse.org" date="1497614400">- add python-pycountry as Requires
- Update do 2.2.0
  * Avoid resolving external entities while parsing XML.
  * Improvements for Android, ts and resx formats.
  * Added support for PHP nested arrays.
  * Added Kabyle language</changelog>
  <changelog author="elchevive@opensuse.org" date="1498478400">- Update do 2.2.3
  * Added MinimalChecker and ReducedChecker checkers.
  * Fixed resolving of country names translations.
  * Refactored functions for resolving language/country names translation to be memory efficient.
  * Improvements for ts and subtitles formats.
  * Added ?preserveplaceholders argument to podebug.
  * Fixed Montenegrin language name.</changelog>
  <changelog author="elchevive@opensuse.org" date="1503921600">- Update do 2.2.4
  * Added support for nested and WebExtension JSON dialects.
  * po2txt no longer converts non-translatable strings.
  * Improvement for puncspace check.
  * Support for .xliff extension.</changelog>
  <changelog author="jmatejek@suse.com" date="1510660800">- drop unneeded requirement for python-utidy
- drop unneeded requirements for diff_match_patch
- switch to python3</changelog>
  <changelog author="astieger@suse.com" date="1514289600">- update to 2.2.5:
  * Fixed bug when adding new units to XLIFF store.
  * Added support for i18next JSON dialect.
  * Improved WebExtension JSON dialect support.</changelog>
  <changelog author="elchevive@opensuse.org" date="1521633600">- update to 2.3.0
  * Full rewrite of the PHP format greatly extending the support.
  * Added YAML format converters.
  * Major refactor of converters code.
- drop patch translate-toolkit-2.0.0-python-six.diff not needed
  on Leap 15.0</changelog>
  <changelog author="sbrabec@suse.com" date="1545134400">- Update to 2.3.1:
  * But fixes.
  * INI: Enabled support for Python3 provided.
  * Use backports.csv module on Python 2 to align the behavior
    with Python 3 and drop many hacks.
  * Removed deprecated getoutput, add new depreceations.
  * Code cleanup; many converterters refactored.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1547121600">- Make sure the documentation is generated properly
- Enable testsuite
- Add patches from debian for tests to pass:
  * sphinx-intersphinx.patch
  * test-pytest310.patch
  * xliff-xsd-no-network.patch</changelog>
  <changelog author="Luiz Fernando Ranghetti &lt;elchevive68@gmail.com&gt;" date="1548676800">- Correct the Source URL</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548676801">- Avoid mixing historic and modern option syntax for tar.
- Replace find -exec rm by just find -delete.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551873600">- Drop not needed lxml-doc dependency</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553860800">- Add patch to build with current pycountry:
  * pycountry.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Do not depend on strace, it is not really needed</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1562846400">- Update to 2.4.0:
  * Added new Flat XML format and converters.
  * Fixes for multiple formats.
- Remove merged patches:
  * pycountry.patch
  * test-pytest310.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1579694400">- Update to 2.5.0:
  * Fixes to work with new weblate</changelog>
  <changelog author="Ond?ej S&#xFA;kup &lt;mimi.vx@gmail.com&gt;" date="1583236800">- temporary disable TestYAMLResourceStore.test_empty_key because
  ruamel.yaml has different behaviour on empty keys from version
    0.16.6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@linux-m68k.org&gt;" date="1584532800">- test-mo-endian.patch: tell msgfmt to use correct endianness</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1588334400">- Swtich to multibuild to separate tests</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1589371200">- Clean up, rewrite to single-spec style, and use %pytest macro.
- We have to install, but remove afterwards, when in the test phase.
- Add versioned_executables.patch to use partially installed
  versioned executables.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591790400">- We need full python interpreter bsc#1172650, boo#1195269</changelog>
</package>
<package pkgid="1225ed86d29c78a48813391c13e560604d25c488d8465d6b7f77094dd0e328d9" name="translate-toolkit-devel-doc" arch="noarch">
  <version epoch="0" ver="2.5.0" rel="bp154.2.3.1"/>
  <changelog author="elchevive@opensuse.org" date="1497614400">- add python-pycountry as Requires
- Update do 2.2.0
  * Avoid resolving external entities while parsing XML.
  * Improvements for Android, ts and resx formats.
  * Added support for PHP nested arrays.
  * Added Kabyle language</changelog>
  <changelog author="elchevive@opensuse.org" date="1498478400">- Update do 2.2.3
  * Added MinimalChecker and ReducedChecker checkers.
  * Fixed resolving of country names translations.
  * Refactored functions for resolving language/country names translation to be memory efficient.
  * Improvements for ts and subtitles formats.
  * Added ?preserveplaceholders argument to podebug.
  * Fixed Montenegrin language name.</changelog>
  <changelog author="elchevive@opensuse.org" date="1503921600">- Update do 2.2.4
  * Added support for nested and WebExtension JSON dialects.
  * po2txt no longer converts non-translatable strings.
  * Improvement for puncspace check.
  * Support for .xliff extension.</changelog>
  <changelog author="jmatejek@suse.com" date="1510660800">- drop unneeded requirement for python-utidy
- drop unneeded requirements for diff_match_patch
- switch to python3</changelog>
  <changelog author="astieger@suse.com" date="1514289600">- update to 2.2.5:
  * Fixed bug when adding new units to XLIFF store.
  * Added support for i18next JSON dialect.
  * Improved WebExtension JSON dialect support.</changelog>
  <changelog author="elchevive@opensuse.org" date="1521633600">- update to 2.3.0
  * Full rewrite of the PHP format greatly extending the support.
  * Added YAML format converters.
  * Major refactor of converters code.
- drop patch translate-toolkit-2.0.0-python-six.diff not needed
  on Leap 15.0</changelog>
  <changelog author="sbrabec@suse.com" date="1545134400">- Update to 2.3.1:
  * But fixes.
  * INI: Enabled support for Python3 provided.
  * Use backports.csv module on Python 2 to align the behavior
    with Python 3 and drop many hacks.
  * Removed deprecated getoutput, add new depreceations.
  * Code cleanup; many converterters refactored.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1547121600">- Make sure the documentation is generated properly
- Enable testsuite
- Add patches from debian for tests to pass:
  * sphinx-intersphinx.patch
  * test-pytest310.patch
  * xliff-xsd-no-network.patch</changelog>
  <changelog author="Luiz Fernando Ranghetti &lt;elchevive68@gmail.com&gt;" date="1548676800">- Correct the Source URL</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548676801">- Avoid mixing historic and modern option syntax for tar.
- Replace find -exec rm by just find -delete.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551873600">- Drop not needed lxml-doc dependency</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553860800">- Add patch to build with current pycountry:
  * pycountry.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Do not depend on strace, it is not really needed</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1562846400">- Update to 2.4.0:
  * Added new Flat XML format and converters.
  * Fixes for multiple formats.
- Remove merged patches:
  * pycountry.patch
  * test-pytest310.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1579694400">- Update to 2.5.0:
  * Fixes to work with new weblate</changelog>
  <changelog author="Ond?ej S&#xFA;kup &lt;mimi.vx@gmail.com&gt;" date="1583236800">- temporary disable TestYAMLResourceStore.test_empty_key because
  ruamel.yaml has different behaviour on empty keys from version
    0.16.6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@linux-m68k.org&gt;" date="1584532800">- test-mo-endian.patch: tell msgfmt to use correct endianness</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1588334400">- Swtich to multibuild to separate tests</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1589371200">- Clean up, rewrite to single-spec style, and use %pytest macro.
- We have to install, but remove afterwards, when in the test phase.
- Add versioned_executables.patch to use partially installed
  versioned executables.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591790400">- We need full python interpreter bsc#1172650, boo#1195269</changelog>
</package>
<package pkgid="15521177e8a7e1b0433ed489a24c14fe984582d34a8a8fc498bcd720ea524845" name="translate-toolkit-test" arch="src">
  <version epoch="0" ver="2.5.0" rel="bp154.2.3.1"/>
  <changelog author="elchevive@opensuse.org" date="1497614400">- add python-pycountry as Requires
- Update do 2.2.0
  * Avoid resolving external entities while parsing XML.
  * Improvements for Android, ts and resx formats.
  * Added support for PHP nested arrays.
  * Added Kabyle language</changelog>
  <changelog author="elchevive@opensuse.org" date="1498478400">- Update do 2.2.3
  * Added MinimalChecker and ReducedChecker checkers.
  * Fixed resolving of country names translations.
  * Refactored functions for resolving language/country names translation to be memory efficient.
  * Improvements for ts and subtitles formats.
  * Added ?preserveplaceholders argument to podebug.
  * Fixed Montenegrin language name.</changelog>
  <changelog author="elchevive@opensuse.org" date="1503921600">- Update do 2.2.4
  * Added support for nested and WebExtension JSON dialects.
  * po2txt no longer converts non-translatable strings.
  * Improvement for puncspace check.
  * Support for .xliff extension.</changelog>
  <changelog author="jmatejek@suse.com" date="1510660800">- drop unneeded requirement for python-utidy
- drop unneeded requirements for diff_match_patch
- switch to python3</changelog>
  <changelog author="astieger@suse.com" date="1514289600">- update to 2.2.5:
  * Fixed bug when adding new units to XLIFF store.
  * Added support for i18next JSON dialect.
  * Improved WebExtension JSON dialect support.</changelog>
  <changelog author="elchevive@opensuse.org" date="1521633600">- update to 2.3.0
  * Full rewrite of the PHP format greatly extending the support.
  * Added YAML format converters.
  * Major refactor of converters code.
- drop patch translate-toolkit-2.0.0-python-six.diff not needed
  on Leap 15.0</changelog>
  <changelog author="sbrabec@suse.com" date="1545134400">- Update to 2.3.1:
  * But fixes.
  * INI: Enabled support for Python3 provided.
  * Use backports.csv module on Python 2 to align the behavior
    with Python 3 and drop many hacks.
  * Removed deprecated getoutput, add new depreceations.
  * Code cleanup; many converterters refactored.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1547121600">- Make sure the documentation is generated properly
- Enable testsuite
- Add patches from debian for tests to pass:
  * sphinx-intersphinx.patch
  * test-pytest310.patch
  * xliff-xsd-no-network.patch</changelog>
  <changelog author="Luiz Fernando Ranghetti &lt;elchevive68@gmail.com&gt;" date="1548676800">- Correct the Source URL</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548676801">- Avoid mixing historic and modern option syntax for tar.
- Replace find -exec rm by just find -delete.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551873600">- Drop not needed lxml-doc dependency</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553860800">- Add patch to build with current pycountry:
  * pycountry.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Do not depend on strace, it is not really needed</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1562846400">- Update to 2.4.0:
  * Added new Flat XML format and converters.
  * Fixes for multiple formats.
- Remove merged patches:
  * pycountry.patch
  * test-pytest310.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1579694400">- Update to 2.5.0:
  * Fixes to work with new weblate</changelog>
  <changelog author="Ond?ej S&#xFA;kup &lt;mimi.vx@gmail.com&gt;" date="1583236800">- temporary disable TestYAMLResourceStore.test_empty_key because
  ruamel.yaml has different behaviour on empty keys from version
    0.16.6</changelog>
  <changelog author="Andreas Schwab &lt;schwab@linux-m68k.org&gt;" date="1584532800">- test-mo-endian.patch: tell msgfmt to use correct endianness</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1588334400">- Swtich to multibuild to separate tests</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1589371200">- Clean up, rewrite to single-spec style, and use %pytest macro.
- We have to install, but remove afterwards, when in the test phase.
- Add versioned_executables.patch to use partially installed
  versioned executables.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591790400">- We need full python interpreter bsc#1172650, boo#1195269</changelog>
</package>
<package pkgid="af482cf39cb3c95e790dd1b17f748d065d17e478008677ffb732b6b75f7cb9ce" name="trivy" arch="aarch64">
  <version epoch="0" ver="0.28.0" rel="bp154.2.3.1"/>
  <changelog author="dmueller@suse.com" date="1640088000">- Update to version 0.21.3:
  * fix(docs): typo (#1488)
  * feat(plugin): Add option to update plugin (#1462)
  * fix: fixed skipFiles/skipDirs flags for relative path (#1482)
  * feat (plugin): add list and info command for plugin (#1452)
  * fix: set up a vulnerability severity (#1458)
  * chore: add arm64 deb package (#1480)
  * Link to trivy tutorial on Semaphore (#1449)
  * refactor(helm): externalize env vars to configMap (#1345)
  * docs: provide more information on scanning Google's GCR (#1426)
  * docs(misconfiguration): added instruction for misconfiguration detection (#1428)
  * Update git-repository.md (#1430)
  * fix(hooks): exclude unrelated lib types from system files filtering (#1431)
  * chore: run `go fmt` (#1429)
  * fix(sarif): change `help` field in the sarif template. (#1423)
  * Update fanal with cfsec version update (#1425)
  * Replace deprecated option in goreleaser (#1406)
  * feat(alpine): support 3.15 (#1422)
  * chore: test the helm chart in the PR and used the commit hash (#1414)
  * chore(deps): bump alpine from 3.14 to 3.15.0 (#1417)
  * chore(release): add ubuntu older versions to deploy script (#1416)</changelog>
  <changelog author="dmueller@suse.com" date="1640692800">- Update to version 0.22.0 (jsc#SLE-18339):
  * fix(java/pom): ignore unsupported requirements (#1514)
  * feat(cli): warning for root command (#1516)
  * BREAKING: disable JAR detection in fs/repo scanning (#1512)
  * feat(scan): support --offline-scan option (#1511)
  * fix: improve memory usage (#1509)
  * feat(java): support pom.xml (#1501)
  * docs: fixing rust link to security advisory (#1504)
  * Add missing IacMetdata (#1505)
  * feat(jar): add file path (#1498)
  * feat(rpm): support NDB (#1497)
  * feat: added misconfiguration field for html.tpl (#1444)</changelog>
  <changelog author="kastl@b1-systems.de" date="1643716800">- Update to version 0.23.0:
  * docs: add ACR navigator (#1651)
  * fix: update example Rego files and docs (#1628)
  * feat(option): show a link to GitHub Discussions for --light deprecation (#1650)
  * fix(sarif): fix the warning message (#1647)
  * refactor: migrate to prefixed buckets (#1644)
  * feat(mariner): add support for CBL-Mariner (#1640)
  * docs: commercial use available (#1641)
  * feat: support azure acr (#1611)
  * feat(os-pkg): add data sources (#1636)
  * feat(redhat): support build info in RHEL (#807)
  * fix: change links in pull_request_template to static URLs (#1634)
  * feat(lang-pkg): add data sources (#1625)
  * feat(detector): support custom detector (#1615)
  * docs(contribution): change role who should resolve comments (#1618)
  * docs: add PR template (#1602)
  * feat(rocky): support Rocky Linux (#1570)
  * Add the ability to set dockerhub credentials in the helm chart (#1569)
  * feat(cache): redis TLS support (#1297)
  * feat(java): add support for PAR files (#1599)
  * refactor(rust): move rust-advisory-db to OSV (#1591)
  * feat: log ignored vulnerabilities on debug (#1378)
  * chore(mod): hcl2json deps update (#1585)
  * fix(rpm): do not ignore installed files via third-party rpm (#1594)
  * feat(fs): allow scanning a single file (#1578)
  * refactor(python): drop Safety DB (#1580)
  * feat: added insecure tls skip to scan git repo (#1528)
  * Supress git clone output (#1590)
  * fix(alma): skip modular package because MODULARITYLABEL is not set (#1588)
  * feat(photon os): added EOL dates check (#1587)
  * docs: update supported os (#1586)
  * BREAKING: remove root command (#1579)
  * docs: add Rust to Language-specific Packages Table (#1577)
  * docs: update int doc for gitlab ci (#1575)
  * BREAKING: migrate the sarif template to Go code (#1437)
  * refactor: remove unused field (#1567)
  * chore(deps): bump helm/chart-testing-action from 2.1.0 to 2.2.0 (#1554)
  * docs: gitlab integration (#1381)
  * feat(alma): support AlmaLinux (#1238)
  * docs: added note about default template path when Trivy installed using rpm (#1551)
  * BREAKING: Trivy DB from GHCR (#1539)
  * feat(cli): Do not set default commands when a plugin is being run (#1549)
  * fix: add fingerprint field to codequality template (#1541)
  * fix(image): correct handling of uncompressed layers (#1544)
  * chore: helm chart app version 0.22.0 (#1535)
  * test(integration): use fixtures (#1532)</changelog>
  <changelog author="kastl@b1-systems.de" date="1645617600">- Update to version 0.24.0:
  * chore(deps): bump github.com/spf13/afero from 1.6.0 to 1.8.1 (#1708)
  * fix(option): warn list-all-pkgs only with the table format (#1755)
  * feat(option): warn "--list-all-pkgs" with "--format table" (#1632)
  * feat(report): add support for CycloneDX (#1081)
  * chore(deps): update the defsec and tfsec versions (#1747)
  * fix(scanner): fix skip of language-specific files when scanning rootf? (#1751)
  * chore(deps): bump github.com/google/wire from 0.4.0 to 0.5.0 (#1712)
  * feat(report): considering App.Writer when printing results (#1722)
  * chore(deps): replace `satori` version and skipping examples folder  (#1745)
  * build: add s390x container images (#1726)
  * feat(template) Add misconfigurations to junit report (#1724)
  * chore(deps): bump github.com/twitchtv/twirp (#1709)
  * feat(client): configure TLS InsecureSkipVerify for server connection (#1287)
  * fix(rpc): Supports RPC calls for new identifier CustomResource (#1605)
  * chore(deps): bump go.uber.org/zap from 1.20.0 to 1.21.0 (#1705)
  * chore(deps): bump github.com/caarlos0/env/v6 from 6.0.0 to 6.9.1 (#1707)
  * feat(helm): Parameterise ServiceAccount annotations (#1677)
  * chore(deps): bump github.com/hashicorp/go-getter from 1.5.2 to 1.5.11 (#1710)
  * chore(deps): bump github.com/cheggaaa/pb/v3 from 3.0.3 to 3.0.8 (#1704)
  * chore(deps): bump github.com/open-policy-agent/opa from 0.36.1 to 0.37.2 (#1711)
  * chore(dependabot): enable gomod monthly (#1699)
  * fix(gitlab tpl): escape double quote (#1635)
  * build: Make `make protoc` be consistent (#1682)
  * feat(purl): add generate purl package utilities (#1574)
  * refactor: move result structs under types (#1696)
  * feat(mariner): add support for CBL-Mariner 2.0 (#1694)
  * docs(gitlab-ci): fix Script in GitLab CI Example #1688
  * chore: Upgrade helm chart version (#1683)
  * chore(mod): update Go dependencies (#1681)
  * docs: fix typos in markdown docs (#1674)
  * docs: update documentation for image scanning of tar files to use a tag present on Docker Hub (#1671)
  * fix(repo): --no-progress suppresses git output (#1669)</changelog>
  <changelog author="kastl@b1-systems.de" date="1645963200">- Update to version 0.24.1:
  * fix(python): correct handling pip package names with a hyphen (#1771)
  * doc(docker): fix command to run trivy with docker on linux (#1761)
  * feat(helm): Add support for custom labels (#1767)
  * chore(helm): bump chart to trivy 0.24.0 (#1762)
  * docs: remove erroneous command (#1763)</changelog>
  <changelog author="kastl@b1-systems.de" date="1646308800">- Update to version 0.24.2:
  * fix(pom): keep an order of dependencies (#1784)
  * chore: bump up Go to 1.17 (#1781)
  * chore(deps): bump actions/setup-python from 2 to 3 (#1776)
  * chore(deps): bump golangci/golangci-lint-action from 2 to 3.1.0 (#1777)</changelog>
  <changelog author="kastl@b1-systems.de" date="1647432000">- Update to version 0.24.3:
  * chore(issue labels): added new labels (#1839)
  * refactor: clarify db update warning messages (#1808)
  * chore(ci): change trivy vulnerability scan for every day  (#1838)
  * feat(helm): make Trivy service name configurable (#1825)
  * chore(deps): updated sprig to version v3.2.2. (#1814)
  * chore(deps): updated testcontainers-go to version v0.12.0 (#1822)
  * docs: add packages.config for .NET (#1823)
  * build: sign container image (#1668)
  * chore(deps): bump github.com/CycloneDX/cyclonedx-go from 0.4.0 to 0.5.0 (#1778)
  * docs: fix Installation documentation (#1804)
  * fix(report): ensure json report got a final new line (#1797)
  * fix(terraform): resolve panics in defsec (#1811)
  * feat(docker): Label images based on OCI image spec (#1793)
  * fix(helm): indentation for ServiceAccount annotations (#1795)
  * fix(hcl): fix panic in hcl2json (#1791)
  * chore(helm): remove psp from helm manifest (#1315)
  * build: Replace `make protoc` with `for loop` to return an error (#1655)
  * fix: ASFF template to match ASFF schema (#1685)
  * feat(helm): Add support for server token (#1734)</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1647518400">- BuildRequire go1.17</changelog>
  <changelog author="kastl@b1-systems.de" date="1647604800">- Update to version 0.24.4:
  * fix(docker): Getting images without a tag (#1852)
  * docs(gitlab-ci): Use environment variables TRIVY_CACHE_DIR and TRIVY_NO_PROGRESS (#1801)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1647950400">- tie to go.17 as 1.18 became available</changelog>
  <changelog author="kastl@b1-systems.de" date="1648814400">- Update to version 0.25.0:
  * docs(filter vulnerabilities): fix link (#1880)
  * feat(template) Add misconfigurations to gitlab codequality report (#1756)
  * fix(rpc): add PkgPath field to client / server mode (#1643)
  * fix(vulnerabilities): fixed trivy-db vulns (#1883)
  * feat(cache): remove temporary cache after filesystem scanning (#1868)
  * feat(sbom): add a dedicated sbom command (#1799)
  * feat(cyclonedx): add vulnerabilities (#1832)
  * fix(option): hide false warning about remote options (#1865)
  * chore: bump up Go to 1.18 (#1862)
  * feat(filesystem): scan in client/server mode (#1829)
  * refactor(template): remove unused test (#1861)
  * fix(cli): json format for trivy version (#1854)
  * docs: change URL for tfsec-checks (#1857)</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1648814401">- Buildrequire go1.18 as upstream says in go.mod</changelog>
  <changelog author="kastl@b1-systems.de" date="1649160000">- Update to version 0.25.1:
  * fix(misconf): update defsec to resolve panics (#1935)
  * chore(deps): bump github.com/docker/docker (#1924)
  * docs: restructure the documentation (#1887)
  * chore(deps): bump github.com/urfave/cli/v2 from 2.3.0 to 2.4.0 (#1923)
  * chore(deps): bump actions/cache from 2 to 3.0.1 (#1920)
  * chore(deps): bump actions/checkout from 2 to 3 (#1916)
  * chore(deps): bump github.com/open-policy-agent/opa from 0.37.2 to 0.39.0 (#1921)
  * chore(deps): bump sigstore/cosign-installer from 2.0.0 to 2.1.0 (#1919)
  * chore(deps): bump helm/chart-testing-action from 2.2.0 to 2.2.1 (#1918)
  * chore(deps): bump golang from 1.17 to 1.18.0 (#1915)
  * Add trivy horizontal logo (#1932)
  * chore(deps): bump alpine from 3.15.0 to 3.15.3 (#1917)
  * chore(deps): bump github.com/go-redis/redis/v8 from 8.11.4 to 8.11.5 (#1925)
  * chore(deps): bump github.com/stretchr/testify from 1.7.0 to 1.7.1 (#1927)
  * feat(db): Add dbRepository flag to get advisory database from OCI registry (#1873)</changelog>
  <changelog author="kastl@b1-systems.de" date="1649246400">- Update to version 0.25.2:
  * fix(downloadDB): add flag to server command (#1942)</changelog>
  <changelog author="kastl@b1-systems.de" date="1649246401">- Update to version 0.25.3:
  * fix(downloadDB): add dbRepositoryFlag to repository and rootfs commands (#1956)
  * fix(misconf): update BurntSushi/toml for fix runtime error (#1948)
  * fix(misconf): Update fanal/defsec to resolve missing metadata issues (#1947)
  * feat(jar): allow setting Maven Central URL using environment variable (#1939)
  * chore(chart): update Trivy version in HelmChart to 0.25.0 (#1931)
  * chore(chart): remove version comments (#1933)</changelog>
  <changelog author="kastl@b1-systems.de" date="1649937600">- Update to version 0.25.4:
  * docs: move CONTRIBUTING.md to docs (#1971)
  * refactor(table): use file name instead package path (#1966)
  * fix(sbom): add --db-repository (#1964)
  * feat(table): add PkgPath in table result (#1960)
  * fix(pom): merge multiple pom imports in a good manner (#1959)</changelog>
  <changelog author="kastl@b1-systems.de" date="1650110400">- Update to version 0.26.0:
  * feat(alpine): warn mixing versions (#2000)
  * Update ASFF template (#1914)
  * chore(deps): replace `containerd/containerd` version to fix CVE-2022-23648 (#1994)
  * chore(deps): bump alpine from 3.15.3 to 3.15.4 (#1993)
  * test(go): add integration tests for gomod (#1989)
  * fix(python): fixed panic when scan .egg archive (#1992)
  * fix(go): set correct go modules type (#1990)
  * feat(alpine): support apk repositories (#1987)
  * docs: add CBL-Mariner (#1982)
  * docs(go): fix version (#1986)
  * feat(go): support go.mod in Go 1.17+ (#1985)
  * ci: fix URLs in the PR template (#1972)
  * ci: add semantic pull requests check (#1968)
  * docs(issue): added docs for wrong detection issues (#1961)</changelog>
  <changelog author="kastl@b1-systems.de" date="1650974400">- Update to version 0.27.0:
  * fix(go): fixed panic to scan gomod without version (#2038)
  * docs(mariner): confirm it works with Mariner 2.0 VM (#2036)
  * feat(secret): support enable rules (#2035)
  * chore: app version 26.0 (#2030)
  * docs(secret): add a demo movie (#2031)
  * feat: support cache TTL in Redis (#2021)
  * fix(go): skip system installed binaries (#2028)
  * fix(go): check if go.sum is nil (#2029)
  * feat: add secret scanning (#1901)
  * chore: gh publish only with push the tag release (#2025)
  * fix(fs): ignore permission errors (#2022)
  * test(mod): using correct module inside test go.mod (#2020)
  * feat(server): re-add proxy support for client/server communications (#1995)
  * fix(report): truncate a description before escaping in ASFF template (#2004)
  * fix(cloudformation): correct margin removal for empty lines (#2002)
  * fix(template): correct check of old sarif template files (#2003)</changelog>
  <changelog author="kastl@b1-systems.de" date="1651060800">- Update to version 0.27.1:
  * chore(deps): bump github.com/CycloneDX/cyclonedx-go from 0.5.0 to 0.5.1 (#1926)
  * refactor(fs): scanner options (#2050)
  * feat(secret): truncate long line (#2052)
  * docs: fix a broken bullets (#2042)
  * feat(ubuntu): add 22.04 approx eol date (#2044)
  * docs: update installation.md (#2027)
  * docs: add Containerfile (#2032)</changelog>
  <changelog author="dmueller@suse.com" date="1653307200">- Update to version 0.28.0 (bsc#1199760, CVE-2022-28946):
  * fix: remove Highlighted from json output (#2131)
  * fix: remove trivy-kubernetes replace (#2132)
  * docs: Add Operator docs under Kubernetes section (#2111)
  * fix(k8s): security-checks panic (#2127)
  * ci: added k8s scope (#2130)
  * docs: Update misconfig output in examples (#2128)
  * fix(misconf): Fix coloured output in Goland terminal (#2126)
  * docs(secret): Fix default value of --security-checks in docs (#2107)
  * refactor(report): move colorize function from trivy-db (#2122)
  * feat: k8s resource scanning (#2118)
  * chore: add CODEOWNERS (#2121)
  * feat(image): add `--server` option for remote scans (#1871)
  * refactor: k8s (#2116)
  * refactor: export useful APIs (#2108)
  * docs: fix k8s doc (#2114)
  * feat(kubernetes): Add report flag for summary (#2112)
  * fix: Remove problematic advanced rego policies (#2113)
  * feat(misconf): Add special output format for misconfigurations (#2100)
  * feat:  add k8s subcommand (#2065)
  * chore: fix make lint version (#2102)
  * fix(java): handle relative pom modules (#2101)
  * fix(misconf): Add missing links for non-rego misconfig results (#2094)
  * feat(misconf): Added fs.FS based scanning via latest defsec (#2084)
  * chore(deps): bump trivy-issue-action to v0.0.4 (#2091)
  * chore(deps): bump github.com/twitchtv/twirp (#2077)
  * chore(deps): bump github.com/urfave/cli/v2 from 2.4.0 to 2.5.1 (#2074)
  * chore(os): updated fanal version and alpine distroless test (#2086)
  * chore(deps): bump github.com/CycloneDX/cyclonedx-go from 0.5.1 to 0.5.2 (#2075)
  * chore(deps): bump github.com/samber/lo from 1.16.0 to 1.19.0 (#2076)
  * feat(report): add support for SPDX (#2059)
  * chore(deps): bump actions/setup-go from 2 to 3 (#2073)
  * chore(deps): bump actions/cache from 3.0.1 to 3.0.2 (#2071)
  * chore(deps): bump golang from 1.18.0 to 1.18.1 (#2069)
  * chore(deps): bump actions/stale from 4 to 5 (#2070)
  * chore(deps): bump sigstore/cosign-installer from 2.0.0 to 2.3.0 (#2072)
  * chore(deps): bump github.com/open-policy-agent/opa from 0.39.0 to 0.40.0 (#2079)
  * chore: app version 0.27.0 (#2046)
  * fix(misconf): added to skip conf files if their scanning is not enabled (#2066)
  * docs(secret) fix rule path in docs (#2061)
  * docs: change from go.sum to go.mod (#2056)</changelog>
</package>
<package pkgid="a6dbe06fd1f8aa82fbdd2d5fd1e5db1767ada209a69d5958de7c35f69e591aa3" name="trivy" arch="i586">
  <version epoch="0" ver="0.28.0" rel="bp154.2.3.1"/>
  <changelog author="dmueller@suse.com" date="1640088000">- Update to version 0.21.3:
  * fix(docs): typo (#1488)
  * feat(plugin): Add option to update plugin (#1462)
  * fix: fixed skipFiles/skipDirs flags for relative path (#1482)
  * feat (plugin): add list and info command for plugin (#1452)
  * fix: set up a vulnerability severity (#1458)
  * chore: add arm64 deb package (#1480)
  * Link to trivy tutorial on Semaphore (#1449)
  * refactor(helm): externalize env vars to configMap (#1345)
  * docs: provide more information on scanning Google's GCR (#1426)
  * docs(misconfiguration): added instruction for misconfiguration detection (#1428)
  * Update git-repository.md (#1430)
  * fix(hooks): exclude unrelated lib types from system files filtering (#1431)
  * chore: run `go fmt` (#1429)
  * fix(sarif): change `help` field in the sarif template. (#1423)
  * Update fanal with cfsec version update (#1425)
  * Replace deprecated option in goreleaser (#1406)
  * feat(alpine): support 3.15 (#1422)
  * chore: test the helm chart in the PR and used the commit hash (#1414)
  * chore(deps): bump alpine from 3.14 to 3.15.0 (#1417)
  * chore(release): add ubuntu older versions to deploy script (#1416)</changelog>
  <changelog author="dmueller@suse.com" date="1640692800">- Update to version 0.22.0 (jsc#SLE-18339):
  * fix(java/pom): ignore unsupported requirements (#1514)
  * feat(cli): warning for root command (#1516)
  * BREAKING: disable JAR detection in fs/repo scanning (#1512)
  * feat(scan): support --offline-scan option (#1511)
  * fix: improve memory usage (#1509)
  * feat(java): support pom.xml (#1501)
  * docs: fixing rust link to security advisory (#1504)
  * Add missing IacMetdata (#1505)
  * feat(jar): add file path (#1498)
  * feat(rpm): support NDB (#1497)
  * feat: added misconfiguration field for html.tpl (#1444)</changelog>
  <changelog author="kastl@b1-systems.de" date="1643716800">- Update to version 0.23.0:
  * docs: add ACR navigator (#1651)
  * fix: update example Rego files and docs (#1628)
  * feat(option): show a link to GitHub Discussions for --light deprecation (#1650)
  * fix(sarif): fix the warning message (#1647)
  * refactor: migrate to prefixed buckets (#1644)
  * feat(mariner): add support for CBL-Mariner (#1640)
  * docs: commercial use available (#1641)
  * feat: support azure acr (#1611)
  * feat(os-pkg): add data sources (#1636)
  * feat(redhat): support build info in RHEL (#807)
  * fix: change links in pull_request_template to static URLs (#1634)
  * feat(lang-pkg): add data sources (#1625)
  * feat(detector): support custom detector (#1615)
  * docs(contribution): change role who should resolve comments (#1618)
  * docs: add PR template (#1602)
  * feat(rocky): support Rocky Linux (#1570)
  * Add the ability to set dockerhub credentials in the helm chart (#1569)
  * feat(cache): redis TLS support (#1297)
  * feat(java): add support for PAR files (#1599)
  * refactor(rust): move rust-advisory-db to OSV (#1591)
  * feat: log ignored vulnerabilities on debug (#1378)
  * chore(mod): hcl2json deps update (#1585)
  * fix(rpm): do not ignore installed files via third-party rpm (#1594)
  * feat(fs): allow scanning a single file (#1578)
  * refactor(python): drop Safety DB (#1580)
  * feat: added insecure tls skip to scan git repo (#1528)
  * Supress git clone output (#1590)
  * fix(alma): skip modular package because MODULARITYLABEL is not set (#1588)
  * feat(photon os): added EOL dates check (#1587)
  * docs: update supported os (#1586)
  * BREAKING: remove root command (#1579)
  * docs: add Rust to Language-specific Packages Table (#1577)
  * docs: update int doc for gitlab ci (#1575)
  * BREAKING: migrate the sarif template to Go code (#1437)
  * refactor: remove unused field (#1567)
  * chore(deps): bump helm/chart-testing-action from 2.1.0 to 2.2.0 (#1554)
  * docs: gitlab integration (#1381)
  * feat(alma): support AlmaLinux (#1238)
  * docs: added note about default template path when Trivy installed using rpm (#1551)
  * BREAKING: Trivy DB from GHCR (#1539)
  * feat(cli): Do not set default commands when a plugin is being run (#1549)
  * fix: add fingerprint field to codequality template (#1541)
  * fix(image): correct handling of uncompressed layers (#1544)
  * chore: helm chart app version 0.22.0 (#1535)
  * test(integration): use fixtures (#1532)</changelog>
  <changelog author="kastl@b1-systems.de" date="1645617600">- Update to version 0.24.0:
  * chore(deps): bump github.com/spf13/afero from 1.6.0 to 1.8.1 (#1708)
  * fix(option): warn list-all-pkgs only with the table format (#1755)
  * feat(option): warn "--list-all-pkgs" with "--format table" (#1632)
  * feat(report): add support for CycloneDX (#1081)
  * chore(deps): update the defsec and tfsec versions (#1747)
  * fix(scanner): fix skip of language-specific files when scanning rootf? (#1751)
  * chore(deps): bump github.com/google/wire from 0.4.0 to 0.5.0 (#1712)
  * feat(report): considering App.Writer when printing results (#1722)
  * chore(deps): replace `satori` version and skipping examples folder  (#1745)
  * build: add s390x container images (#1726)
  * feat(template) Add misconfigurations to junit report (#1724)
  * chore(deps): bump github.com/twitchtv/twirp (#1709)
  * feat(client): configure TLS InsecureSkipVerify for server connection (#1287)
  * fix(rpc): Supports RPC calls for new identifier CustomResource (#1605)
  * chore(deps): bump go.uber.org/zap from 1.20.0 to 1.21.0 (#1705)
  * chore(deps): bump github.com/caarlos0/env/v6 from 6.0.0 to 6.9.1 (#1707)
  * feat(helm): Parameterise ServiceAccount annotations (#1677)
  * chore(deps): bump github.com/hashicorp/go-getter from 1.5.2 to 1.5.11 (#1710)
  * chore(deps): bump github.com/cheggaaa/pb/v3 from 3.0.3 to 3.0.8 (#1704)
  * chore(deps): bump github.com/open-policy-agent/opa from 0.36.1 to 0.37.2 (#1711)
  * chore(dependabot): enable gomod monthly (#1699)
  * fix(gitlab tpl): escape double quote (#1635)
  * build: Make `make protoc` be consistent (#1682)
  * feat(purl): add generate purl package utilities (#1574)
  * refactor: move result structs under types (#1696)
  * feat(mariner): add support for CBL-Mariner 2.0 (#1694)
  * docs(gitlab-ci): fix Script in GitLab CI Example #1688
  * chore: Upgrade helm chart version (#1683)
  * chore(mod): update Go dependencies (#1681)
  * docs: fix typos in markdown docs (#1674)
  * docs: update documentation for image scanning of tar files to use a tag present on Docker Hub (#1671)
  * fix(repo): --no-progress suppresses git output (#1669)</changelog>
  <changelog author="kastl@b1-systems.de" date="1645963200">- Update to version 0.24.1:
  * fix(python): correct handling pip package names with a hyphen (#1771)
  * doc(docker): fix command to run trivy with docker on linux (#1761)
  * feat(helm): Add support for custom labels (#1767)
  * chore(helm): bump chart to trivy 0.24.0 (#1762)
  * docs: remove erroneous command (#1763)</changelog>
  <changelog author="kastl@b1-systems.de" date="1646308800">- Update to version 0.24.2:
  * fix(pom): keep an order of dependencies (#1784)
  * chore: bump up Go to 1.17 (#1781)
  * chore(deps): bump actions/setup-python from 2 to 3 (#1776)
  * chore(deps): bump golangci/golangci-lint-action from 2 to 3.1.0 (#1777)</changelog>
  <changelog author="kastl@b1-systems.de" date="1647432000">- Update to version 0.24.3:
  * chore(issue labels): added new labels (#1839)
  * refactor: clarify db update warning messages (#1808)
  * chore(ci): change trivy vulnerability scan for every day  (#1838)
  * feat(helm): make Trivy service name configurable (#1825)
  * chore(deps): updated sprig to version v3.2.2. (#1814)
  * chore(deps): updated testcontainers-go to version v0.12.0 (#1822)
  * docs: add packages.config for .NET (#1823)
  * build: sign container image (#1668)
  * chore(deps): bump github.com/CycloneDX/cyclonedx-go from 0.4.0 to 0.5.0 (#1778)
  * docs: fix Installation documentation (#1804)
  * fix(report): ensure json report got a final new line (#1797)
  * fix(terraform): resolve panics in defsec (#1811)
  * feat(docker): Label images based on OCI image spec (#1793)
  * fix(helm): indentation for ServiceAccount annotations (#1795)
  * fix(hcl): fix panic in hcl2json (#1791)
  * chore(helm): remove psp from helm manifest (#1315)
  * build: Replace `make protoc` with `for loop` to return an error (#1655)
  * fix: ASFF template to match ASFF schema (#1685)
  * feat(helm): Add support for server token (#1734)</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1647518400">- BuildRequire go1.17</changelog>
  <changelog author="kastl@b1-systems.de" date="1647604800">- Update to version 0.24.4:
  * fix(docker): Getting images without a tag (#1852)
  * docs(gitlab-ci): Use environment variables TRIVY_CACHE_DIR and TRIVY_NO_PROGRESS (#1801)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1647950400">- tie to go.17 as 1.18 became available</changelog>
  <changelog author="kastl@b1-systems.de" date="1648814400">- Update to version 0.25.0:
  * docs(filter vulnerabilities): fix link (#1880)
  * feat(template) Add misconfigurations to gitlab codequality report (#1756)
  * fix(rpc): add PkgPath field to client / server mode (#1643)
  * fix(vulnerabilities): fixed trivy-db vulns (#1883)
  * feat(cache): remove temporary cache after filesystem scanning (#1868)
  * feat(sbom): add a dedicated sbom command (#1799)
  * feat(cyclonedx): add vulnerabilities (#1832)
  * fix(option): hide false warning about remote options (#1865)
  * chore: bump up Go to 1.18 (#1862)
  * feat(filesystem): scan in client/server mode (#1829)
  * refactor(template): remove unused test (#1861)
  * fix(cli): json format for trivy version (#1854)
  * docs: change URL for tfsec-checks (#1857)</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1648814401">- Buildrequire go1.18 as upstream says in go.mod</changelog>
  <changelog author="kastl@b1-systems.de" date="1649160000">- Update to version 0.25.1:
  * fix(misconf): update defsec to resolve panics (#1935)
  * chore(deps): bump github.com/docker/docker (#1924)
  * docs: restructure the documentation (#1887)
  * chore(deps): bump github.com/urfave/cli/v2 from 2.3.0 to 2.4.0 (#1923)
  * chore(deps): bump actions/cache from 2 to 3.0.1 (#1920)
  * chore(deps): bump actions/checkout from 2 to 3 (#1916)
  * chore(deps): bump github.com/open-policy-agent/opa from 0.37.2 to 0.39.0 (#1921)
  * chore(deps): bump sigstore/cosign-installer from 2.0.0 to 2.1.0 (#1919)
  * chore(deps): bump helm/chart-testing-action from 2.2.0 to 2.2.1 (#1918)
  * chore(deps): bump golang from 1.17 to 1.18.0 (#1915)
  * Add trivy horizontal logo (#1932)
  * chore(deps): bump alpine from 3.15.0 to 3.15.3 (#1917)
  * chore(deps): bump github.com/go-redis/redis/v8 from 8.11.4 to 8.11.5 (#1925)
  * chore(deps): bump github.com/stretchr/testify from 1.7.0 to 1.7.1 (#1927)
  * feat(db): Add dbRepository flag to get advisory database from OCI registry (#1873)</changelog>
  <changelog author="kastl@b1-systems.de" date="1649246400">- Update to version 0.25.2:
  * fix(downloadDB): add flag to server command (#1942)</changelog>
  <changelog author="kastl@b1-systems.de" date="1649246401">- Update to version 0.25.3:
  * fix(downloadDB): add dbRepositoryFlag to repository and rootfs commands (#1956)
  * fix(misconf): update BurntSushi/toml for fix runtime error (#1948)
  * fix(misconf): Update fanal/defsec to resolve missing metadata issues (#1947)
  * feat(jar): allow setting Maven Central URL using environment variable (#1939)
  * chore(chart): update Trivy version in HelmChart to 0.25.0 (#1931)
  * chore(chart): remove version comments (#1933)</changelog>
  <changelog author="kastl@b1-systems.de" date="1649937600">- Update to version 0.25.4:
  * docs: move CONTRIBUTING.md to docs (#1971)
  * refactor(table): use file name instead package path (#1966)
  * fix(sbom): add --db-repository (#1964)
  * feat(table): add PkgPath in table result (#1960)
  * fix(pom): merge multiple pom imports in a good manner (#1959)</changelog>
  <changelog author="kastl@b1-systems.de" date="1650110400">- Update to version 0.26.0:
  * feat(alpine): warn mixing versions (#2000)
  * Update ASFF template (#1914)
  * chore(deps): replace `containerd/containerd` version to fix CVE-2022-23648 (#1994)
  * chore(deps): bump alpine from 3.15.3 to 3.15.4 (#1993)
  * test(go): add integration tests for gomod (#1989)
  * fix(python): fixed panic when scan .egg archive (#1992)
  * fix(go): set correct go modules type (#1990)
  * feat(alpine): support apk repositories (#1987)
  * docs: add CBL-Mariner (#1982)
  * docs(go): fix version (#1986)
  * feat(go): support go.mod in Go 1.17+ (#1985)
  * ci: fix URLs in the PR template (#1972)
  * ci: add semantic pull requests check (#1968)
  * docs(issue): added docs for wrong detection issues (#1961)</changelog>
  <changelog author="kastl@b1-systems.de" date="1650974400">- Update to version 0.27.0:
  * fix(go): fixed panic to scan gomod without version (#2038)
  * docs(mariner): confirm it works with Mariner 2.0 VM (#2036)
  * feat(secret): support enable rules (#2035)
  * chore: app version 26.0 (#2030)
  * docs(secret): add a demo movie (#2031)
  * feat: support cache TTL in Redis (#2021)
  * fix(go): skip system installed binaries (#2028)
  * fix(go): check if go.sum is nil (#2029)
  * feat: add secret scanning (#1901)
  * chore: gh publish only with push the tag release (#2025)
  * fix(fs): ignore permission errors (#2022)
  * test(mod): using correct module inside test go.mod (#2020)
  * feat(server): re-add proxy support for client/server communications (#1995)
  * fix(report): truncate a description before escaping in ASFF template (#2004)
  * fix(cloudformation): correct margin removal for empty lines (#2002)
  * fix(template): correct check of old sarif template files (#2003)</changelog>
  <changelog author="kastl@b1-systems.de" date="1651060800">- Update to version 0.27.1:
  * chore(deps): bump github.com/CycloneDX/cyclonedx-go from 0.5.0 to 0.5.1 (#1926)
  * refactor(fs): scanner options (#2050)
  * feat(secret): truncate long line (#2052)
  * docs: fix a broken bullets (#2042)
  * feat(ubuntu): add 22.04 approx eol date (#2044)
  * docs: update installation.md (#2027)
  * docs: add Containerfile (#2032)</changelog>
  <changelog author="dmueller@suse.com" date="1653307200">- Update to version 0.28.0 (bsc#1199760, CVE-2022-28946):
  * fix: remove Highlighted from json output (#2131)
  * fix: remove trivy-kubernetes replace (#2132)
  * docs: Add Operator docs under Kubernetes section (#2111)
  * fix(k8s): security-checks panic (#2127)
  * ci: added k8s scope (#2130)
  * docs: Update misconfig output in examples (#2128)
  * fix(misconf): Fix coloured output in Goland terminal (#2126)
  * docs(secret): Fix default value of --security-checks in docs (#2107)
  * refactor(report): move colorize function from trivy-db (#2122)
  * feat: k8s resource scanning (#2118)
  * chore: add CODEOWNERS (#2121)
  * feat(image): add `--server` option for remote scans (#1871)
  * refactor: k8s (#2116)
  * refactor: export useful APIs (#2108)
  * docs: fix k8s doc (#2114)
  * feat(kubernetes): Add report flag for summary (#2112)
  * fix: Remove problematic advanced rego policies (#2113)
  * feat(misconf): Add special output format for misconfigurations (#2100)
  * feat:  add k8s subcommand (#2065)
  * chore: fix make lint version (#2102)
  * fix(java): handle relative pom modules (#2101)
  * fix(misconf): Add missing links for non-rego misconfig results (#2094)
  * feat(misconf): Added fs.FS based scanning via latest defsec (#2084)
  * chore(deps): bump trivy-issue-action to v0.0.4 (#2091)
  * chore(deps): bump github.com/twitchtv/twirp (#2077)
  * chore(deps): bump github.com/urfave/cli/v2 from 2.4.0 to 2.5.1 (#2074)
  * chore(os): updated fanal version and alpine distroless test (#2086)
  * chore(deps): bump github.com/CycloneDX/cyclonedx-go from 0.5.1 to 0.5.2 (#2075)
  * chore(deps): bump github.com/samber/lo from 1.16.0 to 1.19.0 (#2076)
  * feat(report): add support for SPDX (#2059)
  * chore(deps): bump actions/setup-go from 2 to 3 (#2073)
  * chore(deps): bump actions/cache from 3.0.1 to 3.0.2 (#2071)
  * chore(deps): bump golang from 1.18.0 to 1.18.1 (#2069)
  * chore(deps): bump actions/stale from 4 to 5 (#2070)
  * chore(deps): bump sigstore/cosign-installer from 2.0.0 to 2.3.0 (#2072)
  * chore(deps): bump github.com/open-policy-agent/opa from 0.39.0 to 0.40.0 (#2079)
  * chore: app version 0.27.0 (#2046)
  * fix(misconf): added to skip conf files if their scanning is not enabled (#2066)
  * docs(secret) fix rule path in docs (#2061)
  * docs: change from go.sum to go.mod (#2056)</changelog>
</package>
<package pkgid="478a438cbf134ceeb53ee7046740feaa98e7645952c1ce9bbbb8de952bfa0059" name="trivy" arch="s390x">
  <version epoch="0" ver="0.28.0" rel="bp154.2.3.1"/>
  <changelog author="dmueller@suse.com" date="1640088000">- Update to version 0.21.3:
  * fix(docs): typo (#1488)
  * feat(plugin): Add option to update plugin (#1462)
  * fix: fixed skipFiles/skipDirs flags for relative path (#1482)
  * feat (plugin): add list and info command for plugin (#1452)
  * fix: set up a vulnerability severity (#1458)
  * chore: add arm64 deb package (#1480)
  * Link to trivy tutorial on Semaphore (#1449)
  * refactor(helm): externalize env vars to configMap (#1345)
  * docs: provide more information on scanning Google's GCR (#1426)
  * docs(misconfiguration): added instruction for misconfiguration detection (#1428)
  * Update git-repository.md (#1430)
  * fix(hooks): exclude unrelated lib types from system files filtering (#1431)
  * chore: run `go fmt` (#1429)
  * fix(sarif): change `help` field in the sarif template. (#1423)
  * Update fanal with cfsec version update (#1425)
  * Replace deprecated option in goreleaser (#1406)
  * feat(alpine): support 3.15 (#1422)
  * chore: test the helm chart in the PR and used the commit hash (#1414)
  * chore(deps): bump alpine from 3.14 to 3.15.0 (#1417)
  * chore(release): add ubuntu older versions to deploy script (#1416)</changelog>
  <changelog author="dmueller@suse.com" date="1640692800">- Update to version 0.22.0 (jsc#SLE-18339):
  * fix(java/pom): ignore unsupported requirements (#1514)
  * feat(cli): warning for root command (#1516)
  * BREAKING: disable JAR detection in fs/repo scanning (#1512)
  * feat(scan): support --offline-scan option (#1511)
  * fix: improve memory usage (#1509)
  * feat(java): support pom.xml (#1501)
  * docs: fixing rust link to security advisory (#1504)
  * Add missing IacMetdata (#1505)
  * feat(jar): add file path (#1498)
  * feat(rpm): support NDB (#1497)
  * feat: added misconfiguration field for html.tpl (#1444)</changelog>
  <changelog author="kastl@b1-systems.de" date="1643716800">- Update to version 0.23.0:
  * docs: add ACR navigator (#1651)
  * fix: update example Rego files and docs (#1628)
  * feat(option): show a link to GitHub Discussions for --light deprecation (#1650)
  * fix(sarif): fix the warning message (#1647)
  * refactor: migrate to prefixed buckets (#1644)
  * feat(mariner): add support for CBL-Mariner (#1640)
  * docs: commercial use available (#1641)
  * feat: support azure acr (#1611)
  * feat(os-pkg): add data sources (#1636)
  * feat(redhat): support build info in RHEL (#807)
  * fix: change links in pull_request_template to static URLs (#1634)
  * feat(lang-pkg): add data sources (#1625)
  * feat(detector): support custom detector (#1615)
  * docs(contribution): change role who should resolve comments (#1618)
  * docs: add PR template (#1602)
  * feat(rocky): support Rocky Linux (#1570)
  * Add the ability to set dockerhub credentials in the helm chart (#1569)
  * feat(cache): redis TLS support (#1297)
  * feat(java): add support for PAR files (#1599)
  * refactor(rust): move rust-advisory-db to OSV (#1591)
  * feat: log ignored vulnerabilities on debug (#1378)
  * chore(mod): hcl2json deps update (#1585)
  * fix(rpm): do not ignore installed files via third-party rpm (#1594)
  * feat(fs): allow scanning a single file (#1578)
  * refactor(python): drop Safety DB (#1580)
  * feat: added insecure tls skip to scan git repo (#1528)
  * Supress git clone output (#1590)
  * fix(alma): skip modular package because MODULARITYLABEL is not set (#1588)
  * feat(photon os): added EOL dates check (#1587)
  * docs: update supported os (#1586)
  * BREAKING: remove root command (#1579)
  * docs: add Rust to Language-specific Packages Table (#1577)
  * docs: update int doc for gitlab ci (#1575)
  * BREAKING: migrate the sarif template to Go code (#1437)
  * refactor: remove unused field (#1567)
  * chore(deps): bump helm/chart-testing-action from 2.1.0 to 2.2.0 (#1554)
  * docs: gitlab integration (#1381)
  * feat(alma): support AlmaLinux (#1238)
  * docs: added note about default template path when Trivy installed using rpm (#1551)
  * BREAKING: Trivy DB from GHCR (#1539)
  * feat(cli): Do not set default commands when a plugin is being run (#1549)
  * fix: add fingerprint field to codequality template (#1541)
  * fix(image): correct handling of uncompressed layers (#1544)
  * chore: helm chart app version 0.22.0 (#1535)
  * test(integration): use fixtures (#1532)</changelog>
  <changelog author="kastl@b1-systems.de" date="1645617600">- Update to version 0.24.0:
  * chore(deps): bump github.com/spf13/afero from 1.6.0 to 1.8.1 (#1708)
  * fix(option): warn list-all-pkgs only with the table format (#1755)
  * feat(option): warn "--list-all-pkgs" with "--format table" (#1632)
  * feat(report): add support for CycloneDX (#1081)
  * chore(deps): update the defsec and tfsec versions (#1747)
  * fix(scanner): fix skip of language-specific files when scanning rootf? (#1751)
  * chore(deps): bump github.com/google/wire from 0.4.0 to 0.5.0 (#1712)
  * feat(report): considering App.Writer when printing results (#1722)
  * chore(deps): replace `satori` version and skipping examples folder  (#1745)
  * build: add s390x container images (#1726)
  * feat(template) Add misconfigurations to junit report (#1724)
  * chore(deps): bump github.com/twitchtv/twirp (#1709)
  * feat(client): configure TLS InsecureSkipVerify for server connection (#1287)
  * fix(rpc): Supports RPC calls for new identifier CustomResource (#1605)
  * chore(deps): bump go.uber.org/zap from 1.20.0 to 1.21.0 (#1705)
  * chore(deps): bump github.com/caarlos0/env/v6 from 6.0.0 to 6.9.1 (#1707)
  * feat(helm): Parameterise ServiceAccount annotations (#1677)
  * chore(deps): bump github.com/hashicorp/go-getter from 1.5.2 to 1.5.11 (#1710)
  * chore(deps): bump github.com/cheggaaa/pb/v3 from 3.0.3 to 3.0.8 (#1704)
  * chore(deps): bump github.com/open-policy-agent/opa from 0.36.1 to 0.37.2 (#1711)
  * chore(dependabot): enable gomod monthly (#1699)
  * fix(gitlab tpl): escape double quote (#1635)
  * build: Make `make protoc` be consistent (#1682)
  * feat(purl): add generate purl package utilities (#1574)
  * refactor: move result structs under types (#1696)
  * feat(mariner): add support for CBL-Mariner 2.0 (#1694)
  * docs(gitlab-ci): fix Script in GitLab CI Example #1688
  * chore: Upgrade helm chart version (#1683)
  * chore(mod): update Go dependencies (#1681)
  * docs: fix typos in markdown docs (#1674)
  * docs: update documentation for image scanning of tar files to use a tag present on Docker Hub (#1671)
  * fix(repo): --no-progress suppresses git output (#1669)</changelog>
  <changelog author="kastl@b1-systems.de" date="1645963200">- Update to version 0.24.1:
  * fix(python): correct handling pip package names with a hyphen (#1771)
  * doc(docker): fix command to run trivy with docker on linux (#1761)
  * feat(helm): Add support for custom labels (#1767)
  * chore(helm): bump chart to trivy 0.24.0 (#1762)
  * docs: remove erroneous command (#1763)</changelog>
  <changelog author="kastl@b1-systems.de" date="1646308800">- Update to version 0.24.2:
  * fix(pom): keep an order of dependencies (#1784)
  * chore: bump up Go to 1.17 (#1781)
  * chore(deps): bump actions/setup-python from 2 to 3 (#1776)
  * chore(deps): bump golangci/golangci-lint-action from 2 to 3.1.0 (#1777)</changelog>
  <changelog author="kastl@b1-systems.de" date="1647432000">- Update to version 0.24.3:
  * chore(issue labels): added new labels (#1839)
  * refactor: clarify db update warning messages (#1808)
  * chore(ci): change trivy vulnerability scan for every day  (#1838)
  * feat(helm): make Trivy service name configurable (#1825)
  * chore(deps): updated sprig to version v3.2.2. (#1814)
  * chore(deps): updated testcontainers-go to version v0.12.0 (#1822)
  * docs: add packages.config for .NET (#1823)
  * build: sign container image (#1668)
  * chore(deps): bump github.com/CycloneDX/cyclonedx-go from 0.4.0 to 0.5.0 (#1778)
  * docs: fix Installation documentation (#1804)
  * fix(report): ensure json report got a final new line (#1797)
  * fix(terraform): resolve panics in defsec (#1811)
  * feat(docker): Label images based on OCI image spec (#1793)
  * fix(helm): indentation for ServiceAccount annotations (#1795)
  * fix(hcl): fix panic in hcl2json (#1791)
  * chore(helm): remove psp from helm manifest (#1315)
  * build: Replace `make protoc` with `for loop` to return an error (#1655)
  * fix: ASFF template to match ASFF schema (#1685)
  * feat(helm): Add support for server token (#1734)</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1647518400">- BuildRequire go1.17</changelog>
  <changelog author="kastl@b1-systems.de" date="1647604800">- Update to version 0.24.4:
  * fix(docker): Getting images without a tag (#1852)
  * docs(gitlab-ci): Use environment variables TRIVY_CACHE_DIR and TRIVY_NO_PROGRESS (#1801)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1647950400">- tie to go.17 as 1.18 became available</changelog>
  <changelog author="kastl@b1-systems.de" date="1648814400">- Update to version 0.25.0:
  * docs(filter vulnerabilities): fix link (#1880)
  * feat(template) Add misconfigurations to gitlab codequality report (#1756)
  * fix(rpc): add PkgPath field to client / server mode (#1643)
  * fix(vulnerabilities): fixed trivy-db vulns (#1883)
  * feat(cache): remove temporary cache after filesystem scanning (#1868)
  * feat(sbom): add a dedicated sbom command (#1799)
  * feat(cyclonedx): add vulnerabilities (#1832)
  * fix(option): hide false warning about remote options (#1865)
  * chore: bump up Go to 1.18 (#1862)
  * feat(filesystem): scan in client/server mode (#1829)
  * refactor(template): remove unused test (#1861)
  * fix(cli): json format for trivy version (#1854)
  * docs: change URL for tfsec-checks (#1857)</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1648814401">- Buildrequire go1.18 as upstream says in go.mod</changelog>
  <changelog author="kastl@b1-systems.de" date="1649160000">- Update to version 0.25.1:
  * fix(misconf): update defsec to resolve panics (#1935)
  * chore(deps): bump github.com/docker/docker (#1924)
  * docs: restructure the documentation (#1887)
  * chore(deps): bump github.com/urfave/cli/v2 from 2.3.0 to 2.4.0 (#1923)
  * chore(deps): bump actions/cache from 2 to 3.0.1 (#1920)
  * chore(deps): bump actions/checkout from 2 to 3 (#1916)
  * chore(deps): bump github.com/open-policy-agent/opa from 0.37.2 to 0.39.0 (#1921)
  * chore(deps): bump sigstore/cosign-installer from 2.0.0 to 2.1.0 (#1919)
  * chore(deps): bump helm/chart-testing-action from 2.2.0 to 2.2.1 (#1918)
  * chore(deps): bump golang from 1.17 to 1.18.0 (#1915)
  * Add trivy horizontal logo (#1932)
  * chore(deps): bump alpine from 3.15.0 to 3.15.3 (#1917)
  * chore(deps): bump github.com/go-redis/redis/v8 from 8.11.4 to 8.11.5 (#1925)
  * chore(deps): bump github.com/stretchr/testify from 1.7.0 to 1.7.1 (#1927)
  * feat(db): Add dbRepository flag to get advisory database from OCI registry (#1873)</changelog>
  <changelog author="kastl@b1-systems.de" date="1649246400">- Update to version 0.25.2:
  * fix(downloadDB): add flag to server command (#1942)</changelog>
  <changelog author="kastl@b1-systems.de" date="1649246401">- Update to version 0.25.3:
  * fix(downloadDB): add dbRepositoryFlag to repository and rootfs commands (#1956)
  * fix(misconf): update BurntSushi/toml for fix runtime error (#1948)
  * fix(misconf): Update fanal/defsec to resolve missing metadata issues (#1947)
  * feat(jar): allow setting Maven Central URL using environment variable (#1939)
  * chore(chart): update Trivy version in HelmChart to 0.25.0 (#1931)
  * chore(chart): remove version comments (#1933)</changelog>
  <changelog author="kastl@b1-systems.de" date="1649937600">- Update to version 0.25.4:
  * docs: move CONTRIBUTING.md to docs (#1971)
  * refactor(table): use file name instead package path (#1966)
  * fix(sbom): add --db-repository (#1964)
  * feat(table): add PkgPath in table result (#1960)
  * fix(pom): merge multiple pom imports in a good manner (#1959)</changelog>
  <changelog author="kastl@b1-systems.de" date="1650110400">- Update to version 0.26.0:
  * feat(alpine): warn mixing versions (#2000)
  * Update ASFF template (#1914)
  * chore(deps): replace `containerd/containerd` version to fix CVE-2022-23648 (#1994)
  * chore(deps): bump alpine from 3.15.3 to 3.15.4 (#1993)
  * test(go): add integration tests for gomod (#1989)
  * fix(python): fixed panic when scan .egg archive (#1992)
  * fix(go): set correct go modules type (#1990)
  * feat(alpine): support apk repositories (#1987)
  * docs: add CBL-Mariner (#1982)
  * docs(go): fix version (#1986)
  * feat(go): support go.mod in Go 1.17+ (#1985)
  * ci: fix URLs in the PR template (#1972)
  * ci: add semantic pull requests check (#1968)
  * docs(issue): added docs for wrong detection issues (#1961)</changelog>
  <changelog author="kastl@b1-systems.de" date="1650974400">- Update to version 0.27.0:
  * fix(go): fixed panic to scan gomod without version (#2038)
  * docs(mariner): confirm it works with Mariner 2.0 VM (#2036)
  * feat(secret): support enable rules (#2035)
  * chore: app version 26.0 (#2030)
  * docs(secret): add a demo movie (#2031)
  * feat: support cache TTL in Redis (#2021)
  * fix(go): skip system installed binaries (#2028)
  * fix(go): check if go.sum is nil (#2029)
  * feat: add secret scanning (#1901)
  * chore: gh publish only with push the tag release (#2025)
  * fix(fs): ignore permission errors (#2022)
  * test(mod): using correct module inside test go.mod (#2020)
  * feat(server): re-add proxy support for client/server communications (#1995)
  * fix(report): truncate a description before escaping in ASFF template (#2004)
  * fix(cloudformation): correct margin removal for empty lines (#2002)
  * fix(template): correct check of old sarif template files (#2003)</changelog>
  <changelog author="kastl@b1-systems.de" date="1651060800">- Update to version 0.27.1:
  * chore(deps): bump github.com/CycloneDX/cyclonedx-go from 0.5.0 to 0.5.1 (#1926)
  * refactor(fs): scanner options (#2050)
  * feat(secret): truncate long line (#2052)
  * docs: fix a broken bullets (#2042)
  * feat(ubuntu): add 22.04 approx eol date (#2044)
  * docs: update installation.md (#2027)
  * docs: add Containerfile (#2032)</changelog>
  <changelog author="dmueller@suse.com" date="1653307200">- Update to version 0.28.0 (bsc#1199760, CVE-2022-28946):
  * fix: remove Highlighted from json output (#2131)
  * fix: remove trivy-kubernetes replace (#2132)
  * docs: Add Operator docs under Kubernetes section (#2111)
  * fix(k8s): security-checks panic (#2127)
  * ci: added k8s scope (#2130)
  * docs: Update misconfig output in examples (#2128)
  * fix(misconf): Fix coloured output in Goland terminal (#2126)
  * docs(secret): Fix default value of --security-checks in docs (#2107)
  * refactor(report): move colorize function from trivy-db (#2122)
  * feat: k8s resource scanning (#2118)
  * chore: add CODEOWNERS (#2121)
  * feat(image): add `--server` option for remote scans (#1871)
  * refactor: k8s (#2116)
  * refactor: export useful APIs (#2108)
  * docs: fix k8s doc (#2114)
  * feat(kubernetes): Add report flag for summary (#2112)
  * fix: Remove problematic advanced rego policies (#2113)
  * feat(misconf): Add special output format for misconfigurations (#2100)
  * feat:  add k8s subcommand (#2065)
  * chore: fix make lint version (#2102)
  * fix(java): handle relative pom modules (#2101)
  * fix(misconf): Add missing links for non-rego misconfig results (#2094)
  * feat(misconf): Added fs.FS based scanning via latest defsec (#2084)
  * chore(deps): bump trivy-issue-action to v0.0.4 (#2091)
  * chore(deps): bump github.com/twitchtv/twirp (#2077)
  * chore(deps): bump github.com/urfave/cli/v2 from 2.4.0 to 2.5.1 (#2074)
  * chore(os): updated fanal version and alpine distroless test (#2086)
  * chore(deps): bump github.com/CycloneDX/cyclonedx-go from 0.5.1 to 0.5.2 (#2075)
  * chore(deps): bump github.com/samber/lo from 1.16.0 to 1.19.0 (#2076)
  * feat(report): add support for SPDX (#2059)
  * chore(deps): bump actions/setup-go from 2 to 3 (#2073)
  * chore(deps): bump actions/cache from 3.0.1 to 3.0.2 (#2071)
  * chore(deps): bump golang from 1.18.0 to 1.18.1 (#2069)
  * chore(deps): bump actions/stale from 4 to 5 (#2070)
  * chore(deps): bump sigstore/cosign-installer from 2.0.0 to 2.3.0 (#2072)
  * chore(deps): bump github.com/open-policy-agent/opa from 0.39.0 to 0.40.0 (#2079)
  * chore: app version 0.27.0 (#2046)
  * fix(misconf): added to skip conf files if their scanning is not enabled (#2066)
  * docs(secret) fix rule path in docs (#2061)
  * docs: change from go.sum to go.mod (#2056)</changelog>
</package>
<package pkgid="1e9e6d19df49015e36e9497ab1b648f7485929bbf061ecf7adc8708d29e36c0e" name="trivy" arch="src">
  <version epoch="0" ver="0.28.0" rel="bp154.2.3.1"/>
  <changelog author="dmueller@suse.com" date="1640088000">- Update to version 0.21.3:
  * fix(docs): typo (#1488)
  * feat(plugin): Add option to update plugin (#1462)
  * fix: fixed skipFiles/skipDirs flags for relative path (#1482)
  * feat (plugin): add list and info command for plugin (#1452)
  * fix: set up a vulnerability severity (#1458)
  * chore: add arm64 deb package (#1480)
  * Link to trivy tutorial on Semaphore (#1449)
  * refactor(helm): externalize env vars to configMap (#1345)
  * docs: provide more information on scanning Google's GCR (#1426)
  * docs(misconfiguration): added instruction for misconfiguration detection (#1428)
  * Update git-repository.md (#1430)
  * fix(hooks): exclude unrelated lib types from system files filtering (#1431)
  * chore: run `go fmt` (#1429)
  * fix(sarif): change `help` field in the sarif template. (#1423)
  * Update fanal with cfsec version update (#1425)
  * Replace deprecated option in goreleaser (#1406)
  * feat(alpine): support 3.15 (#1422)
  * chore: test the helm chart in the PR and used the commit hash (#1414)
  * chore(deps): bump alpine from 3.14 to 3.15.0 (#1417)
  * chore(release): add ubuntu older versions to deploy script (#1416)</changelog>
  <changelog author="dmueller@suse.com" date="1640692800">- Update to version 0.22.0 (jsc#SLE-18339):
  * fix(java/pom): ignore unsupported requirements (#1514)
  * feat(cli): warning for root command (#1516)
  * BREAKING: disable JAR detection in fs/repo scanning (#1512)
  * feat(scan): support --offline-scan option (#1511)
  * fix: improve memory usage (#1509)
  * feat(java): support pom.xml (#1501)
  * docs: fixing rust link to security advisory (#1504)
  * Add missing IacMetdata (#1505)
  * feat(jar): add file path (#1498)
  * feat(rpm): support NDB (#1497)
  * feat: added misconfiguration field for html.tpl (#1444)</changelog>
  <changelog author="kastl@b1-systems.de" date="1643716800">- Update to version 0.23.0:
  * docs: add ACR navigator (#1651)
  * fix: update example Rego files and docs (#1628)
  * feat(option): show a link to GitHub Discussions for --light deprecation (#1650)
  * fix(sarif): fix the warning message (#1647)
  * refactor: migrate to prefixed buckets (#1644)
  * feat(mariner): add support for CBL-Mariner (#1640)
  * docs: commercial use available (#1641)
  * feat: support azure acr (#1611)
  * feat(os-pkg): add data sources (#1636)
  * feat(redhat): support build info in RHEL (#807)
  * fix: change links in pull_request_template to static URLs (#1634)
  * feat(lang-pkg): add data sources (#1625)
  * feat(detector): support custom detector (#1615)
  * docs(contribution): change role who should resolve comments (#1618)
  * docs: add PR template (#1602)
  * feat(rocky): support Rocky Linux (#1570)
  * Add the ability to set dockerhub credentials in the helm chart (#1569)
  * feat(cache): redis TLS support (#1297)
  * feat(java): add support for PAR files (#1599)
  * refactor(rust): move rust-advisory-db to OSV (#1591)
  * feat: log ignored vulnerabilities on debug (#1378)
  * chore(mod): hcl2json deps update (#1585)
  * fix(rpm): do not ignore installed files via third-party rpm (#1594)
  * feat(fs): allow scanning a single file (#1578)
  * refactor(python): drop Safety DB (#1580)
  * feat: added insecure tls skip to scan git repo (#1528)
  * Supress git clone output (#1590)
  * fix(alma): skip modular package because MODULARITYLABEL is not set (#1588)
  * feat(photon os): added EOL dates check (#1587)
  * docs: update supported os (#1586)
  * BREAKING: remove root command (#1579)
  * docs: add Rust to Language-specific Packages Table (#1577)
  * docs: update int doc for gitlab ci (#1575)
  * BREAKING: migrate the sarif template to Go code (#1437)
  * refactor: remove unused field (#1567)
  * chore(deps): bump helm/chart-testing-action from 2.1.0 to 2.2.0 (#1554)
  * docs: gitlab integration (#1381)
  * feat(alma): support AlmaLinux (#1238)
  * docs: added note about default template path when Trivy installed using rpm (#1551)
  * BREAKING: Trivy DB from GHCR (#1539)
  * feat(cli): Do not set default commands when a plugin is being run (#1549)
  * fix: add fingerprint field to codequality template (#1541)
  * fix(image): correct handling of uncompressed layers (#1544)
  * chore: helm chart app version 0.22.0 (#1535)
  * test(integration): use fixtures (#1532)</changelog>
  <changelog author="kastl@b1-systems.de" date="1645617600">- Update to version 0.24.0:
  * chore(deps): bump github.com/spf13/afero from 1.6.0 to 1.8.1 (#1708)
  * fix(option): warn list-all-pkgs only with the table format (#1755)
  * feat(option): warn "--list-all-pkgs" with "--format table" (#1632)
  * feat(report): add support for CycloneDX (#1081)
  * chore(deps): update the defsec and tfsec versions (#1747)
  * fix(scanner): fix skip of language-specific files when scanning rootf? (#1751)
  * chore(deps): bump github.com/google/wire from 0.4.0 to 0.5.0 (#1712)
  * feat(report): considering App.Writer when printing results (#1722)
  * chore(deps): replace `satori` version and skipping examples folder  (#1745)
  * build: add s390x container images (#1726)
  * feat(template) Add misconfigurations to junit report (#1724)
  * chore(deps): bump github.com/twitchtv/twirp (#1709)
  * feat(client): configure TLS InsecureSkipVerify for server connection (#1287)
  * fix(rpc): Supports RPC calls for new identifier CustomResource (#1605)
  * chore(deps): bump go.uber.org/zap from 1.20.0 to 1.21.0 (#1705)
  * chore(deps): bump github.com/caarlos0/env/v6 from 6.0.0 to 6.9.1 (#1707)
  * feat(helm): Parameterise ServiceAccount annotations (#1677)
  * chore(deps): bump github.com/hashicorp/go-getter from 1.5.2 to 1.5.11 (#1710)
  * chore(deps): bump github.com/cheggaaa/pb/v3 from 3.0.3 to 3.0.8 (#1704)
  * chore(deps): bump github.com/open-policy-agent/opa from 0.36.1 to 0.37.2 (#1711)
  * chore(dependabot): enable gomod monthly (#1699)
  * fix(gitlab tpl): escape double quote (#1635)
  * build: Make `make protoc` be consistent (#1682)
  * feat(purl): add generate purl package utilities (#1574)
  * refactor: move result structs under types (#1696)
  * feat(mariner): add support for CBL-Mariner 2.0 (#1694)
  * docs(gitlab-ci): fix Script in GitLab CI Example #1688
  * chore: Upgrade helm chart version (#1683)
  * chore(mod): update Go dependencies (#1681)
  * docs: fix typos in markdown docs (#1674)
  * docs: update documentation for image scanning of tar files to use a tag present on Docker Hub (#1671)
  * fix(repo): --no-progress suppresses git output (#1669)</changelog>
  <changelog author="kastl@b1-systems.de" date="1645963200">- Update to version 0.24.1:
  * fix(python): correct handling pip package names with a hyphen (#1771)
  * doc(docker): fix command to run trivy with docker on linux (#1761)
  * feat(helm): Add support for custom labels (#1767)
  * chore(helm): bump chart to trivy 0.24.0 (#1762)
  * docs: remove erroneous command (#1763)</changelog>
  <changelog author="kastl@b1-systems.de" date="1646308800">- Update to version 0.24.2:
  * fix(pom): keep an order of dependencies (#1784)
  * chore: bump up Go to 1.17 (#1781)
  * chore(deps): bump actions/setup-python from 2 to 3 (#1776)
  * chore(deps): bump golangci/golangci-lint-action from 2 to 3.1.0 (#1777)</changelog>
  <changelog author="kastl@b1-systems.de" date="1647432000">- Update to version 0.24.3:
  * chore(issue labels): added new labels (#1839)
  * refactor: clarify db update warning messages (#1808)
  * chore(ci): change trivy vulnerability scan for every day  (#1838)
  * feat(helm): make Trivy service name configurable (#1825)
  * chore(deps): updated sprig to version v3.2.2. (#1814)
  * chore(deps): updated testcontainers-go to version v0.12.0 (#1822)
  * docs: add packages.config for .NET (#1823)
  * build: sign container image (#1668)
  * chore(deps): bump github.com/CycloneDX/cyclonedx-go from 0.4.0 to 0.5.0 (#1778)
  * docs: fix Installation documentation (#1804)
  * fix(report): ensure json report got a final new line (#1797)
  * fix(terraform): resolve panics in defsec (#1811)
  * feat(docker): Label images based on OCI image spec (#1793)
  * fix(helm): indentation for ServiceAccount annotations (#1795)
  * fix(hcl): fix panic in hcl2json (#1791)
  * chore(helm): remove psp from helm manifest (#1315)
  * build: Replace `make protoc` with `for loop` to return an error (#1655)
  * fix: ASFF template to match ASFF schema (#1685)
  * feat(helm): Add support for server token (#1734)</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1647518400">- BuildRequire go1.17</changelog>
  <changelog author="kastl@b1-systems.de" date="1647604800">- Update to version 0.24.4:
  * fix(docker): Getting images without a tag (#1852)
  * docs(gitlab-ci): Use environment variables TRIVY_CACHE_DIR and TRIVY_NO_PROGRESS (#1801)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1647950400">- tie to go.17 as 1.18 became available</changelog>
  <changelog author="kastl@b1-systems.de" date="1648814400">- Update to version 0.25.0:
  * docs(filter vulnerabilities): fix link (#1880)
  * feat(template) Add misconfigurations to gitlab codequality report (#1756)
  * fix(rpc): add PkgPath field to client / server mode (#1643)
  * fix(vulnerabilities): fixed trivy-db vulns (#1883)
  * feat(cache): remove temporary cache after filesystem scanning (#1868)
  * feat(sbom): add a dedicated sbom command (#1799)
  * feat(cyclonedx): add vulnerabilities (#1832)
  * fix(option): hide false warning about remote options (#1865)
  * chore: bump up Go to 1.18 (#1862)
  * feat(filesystem): scan in client/server mode (#1829)
  * refactor(template): remove unused test (#1861)
  * fix(cli): json format for trivy version (#1854)
  * docs: change URL for tfsec-checks (#1857)</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1648814401">- Buildrequire go1.18 as upstream says in go.mod</changelog>
  <changelog author="kastl@b1-systems.de" date="1649160000">- Update to version 0.25.1:
  * fix(misconf): update defsec to resolve panics (#1935)
  * chore(deps): bump github.com/docker/docker (#1924)
  * docs: restructure the documentation (#1887)
  * chore(deps): bump github.com/urfave/cli/v2 from 2.3.0 to 2.4.0 (#1923)
  * chore(deps): bump actions/cache from 2 to 3.0.1 (#1920)
  * chore(deps): bump actions/checkout from 2 to 3 (#1916)
  * chore(deps): bump github.com/open-policy-agent/opa from 0.37.2 to 0.39.0 (#1921)
  * chore(deps): bump sigstore/cosign-installer from 2.0.0 to 2.1.0 (#1919)
  * chore(deps): bump helm/chart-testing-action from 2.2.0 to 2.2.1 (#1918)
  * chore(deps): bump golang from 1.17 to 1.18.0 (#1915)
  * Add trivy horizontal logo (#1932)
  * chore(deps): bump alpine from 3.15.0 to 3.15.3 (#1917)
  * chore(deps): bump github.com/go-redis/redis/v8 from 8.11.4 to 8.11.5 (#1925)
  * chore(deps): bump github.com/stretchr/testify from 1.7.0 to 1.7.1 (#1927)
  * feat(db): Add dbRepository flag to get advisory database from OCI registry (#1873)</changelog>
  <changelog author="kastl@b1-systems.de" date="1649246400">- Update to version 0.25.2:
  * fix(downloadDB): add flag to server command (#1942)</changelog>
  <changelog author="kastl@b1-systems.de" date="1649246401">- Update to version 0.25.3:
  * fix(downloadDB): add dbRepositoryFlag to repository and rootfs commands (#1956)
  * fix(misconf): update BurntSushi/toml for fix runtime error (#1948)
  * fix(misconf): Update fanal/defsec to resolve missing metadata issues (#1947)
  * feat(jar): allow setting Maven Central URL using environment variable (#1939)
  * chore(chart): update Trivy version in HelmChart to 0.25.0 (#1931)
  * chore(chart): remove version comments (#1933)</changelog>
  <changelog author="kastl@b1-systems.de" date="1649937600">- Update to version 0.25.4:
  * docs: move CONTRIBUTING.md to docs (#1971)
  * refactor(table): use file name instead package path (#1966)
  * fix(sbom): add --db-repository (#1964)
  * feat(table): add PkgPath in table result (#1960)
  * fix(pom): merge multiple pom imports in a good manner (#1959)</changelog>
  <changelog author="kastl@b1-systems.de" date="1650110400">- Update to version 0.26.0:
  * feat(alpine): warn mixing versions (#2000)
  * Update ASFF template (#1914)
  * chore(deps): replace `containerd/containerd` version to fix CVE-2022-23648 (#1994)
  * chore(deps): bump alpine from 3.15.3 to 3.15.4 (#1993)
  * test(go): add integration tests for gomod (#1989)
  * fix(python): fixed panic when scan .egg archive (#1992)
  * fix(go): set correct go modules type (#1990)
  * feat(alpine): support apk repositories (#1987)
  * docs: add CBL-Mariner (#1982)
  * docs(go): fix version (#1986)
  * feat(go): support go.mod in Go 1.17+ (#1985)
  * ci: fix URLs in the PR template (#1972)
  * ci: add semantic pull requests check (#1968)
  * docs(issue): added docs for wrong detection issues (#1961)</changelog>
  <changelog author="kastl@b1-systems.de" date="1650974400">- Update to version 0.27.0:
  * fix(go): fixed panic to scan gomod without version (#2038)
  * docs(mariner): confirm it works with Mariner 2.0 VM (#2036)
  * feat(secret): support enable rules (#2035)
  * chore: app version 26.0 (#2030)
  * docs(secret): add a demo movie (#2031)
  * feat: support cache TTL in Redis (#2021)
  * fix(go): skip system installed binaries (#2028)
  * fix(go): check if go.sum is nil (#2029)
  * feat: add secret scanning (#1901)
  * chore: gh publish only with push the tag release (#2025)
  * fix(fs): ignore permission errors (#2022)
  * test(mod): using correct module inside test go.mod (#2020)
  * feat(server): re-add proxy support for client/server communications (#1995)
  * fix(report): truncate a description before escaping in ASFF template (#2004)
  * fix(cloudformation): correct margin removal for empty lines (#2002)
  * fix(template): correct check of old sarif template files (#2003)</changelog>
  <changelog author="kastl@b1-systems.de" date="1651060800">- Update to version 0.27.1:
  * chore(deps): bump github.com/CycloneDX/cyclonedx-go from 0.5.0 to 0.5.1 (#1926)
  * refactor(fs): scanner options (#2050)
  * feat(secret): truncate long line (#2052)
  * docs: fix a broken bullets (#2042)
  * feat(ubuntu): add 22.04 approx eol date (#2044)
  * docs: update installation.md (#2027)
  * docs: add Containerfile (#2032)</changelog>
  <changelog author="dmueller@suse.com" date="1653307200">- Update to version 0.28.0 (bsc#1199760, CVE-2022-28946):
  * fix: remove Highlighted from json output (#2131)
  * fix: remove trivy-kubernetes replace (#2132)
  * docs: Add Operator docs under Kubernetes section (#2111)
  * fix(k8s): security-checks panic (#2127)
  * ci: added k8s scope (#2130)
  * docs: Update misconfig output in examples (#2128)
  * fix(misconf): Fix coloured output in Goland terminal (#2126)
  * docs(secret): Fix default value of --security-checks in docs (#2107)
  * refactor(report): move colorize function from trivy-db (#2122)
  * feat: k8s resource scanning (#2118)
  * chore: add CODEOWNERS (#2121)
  * feat(image): add `--server` option for remote scans (#1871)
  * refactor: k8s (#2116)
  * refactor: export useful APIs (#2108)
  * docs: fix k8s doc (#2114)
  * feat(kubernetes): Add report flag for summary (#2112)
  * fix: Remove problematic advanced rego policies (#2113)
  * feat(misconf): Add special output format for misconfigurations (#2100)
  * feat:  add k8s subcommand (#2065)
  * chore: fix make lint version (#2102)
  * fix(java): handle relative pom modules (#2101)
  * fix(misconf): Add missing links for non-rego misconfig results (#2094)
  * feat(misconf): Added fs.FS based scanning via latest defsec (#2084)
  * chore(deps): bump trivy-issue-action to v0.0.4 (#2091)
  * chore(deps): bump github.com/twitchtv/twirp (#2077)
  * chore(deps): bump github.com/urfave/cli/v2 from 2.4.0 to 2.5.1 (#2074)
  * chore(os): updated fanal version and alpine distroless test (#2086)
  * chore(deps): bump github.com/CycloneDX/cyclonedx-go from 0.5.1 to 0.5.2 (#2075)
  * chore(deps): bump github.com/samber/lo from 1.16.0 to 1.19.0 (#2076)
  * feat(report): add support for SPDX (#2059)
  * chore(deps): bump actions/setup-go from 2 to 3 (#2073)
  * chore(deps): bump actions/cache from 3.0.1 to 3.0.2 (#2071)
  * chore(deps): bump golang from 1.18.0 to 1.18.1 (#2069)
  * chore(deps): bump actions/stale from 4 to 5 (#2070)
  * chore(deps): bump sigstore/cosign-installer from 2.0.0 to 2.3.0 (#2072)
  * chore(deps): bump github.com/open-policy-agent/opa from 0.39.0 to 0.40.0 (#2079)
  * chore: app version 0.27.0 (#2046)
  * fix(misconf): added to skip conf files if their scanning is not enabled (#2066)
  * docs(secret) fix rule path in docs (#2061)
  * docs: change from go.sum to go.mod (#2056)</changelog>
</package>
<package pkgid="36ed455bcd4d1b9f5d9a3187de93513561916615387069b61d17fb418ef5f8cc" name="trivy" arch="x86_64">
  <version epoch="0" ver="0.28.0" rel="bp154.2.3.1"/>
  <changelog author="dmueller@suse.com" date="1640088000">- Update to version 0.21.3:
  * fix(docs): typo (#1488)
  * feat(plugin): Add option to update plugin (#1462)
  * fix: fixed skipFiles/skipDirs flags for relative path (#1482)
  * feat (plugin): add list and info command for plugin (#1452)
  * fix: set up a vulnerability severity (#1458)
  * chore: add arm64 deb package (#1480)
  * Link to trivy tutorial on Semaphore (#1449)
  * refactor(helm): externalize env vars to configMap (#1345)
  * docs: provide more information on scanning Google's GCR (#1426)
  * docs(misconfiguration): added instruction for misconfiguration detection (#1428)
  * Update git-repository.md (#1430)
  * fix(hooks): exclude unrelated lib types from system files filtering (#1431)
  * chore: run `go fmt` (#1429)
  * fix(sarif): change `help` field in the sarif template. (#1423)
  * Update fanal with cfsec version update (#1425)
  * Replace deprecated option in goreleaser (#1406)
  * feat(alpine): support 3.15 (#1422)
  * chore: test the helm chart in the PR and used the commit hash (#1414)
  * chore(deps): bump alpine from 3.14 to 3.15.0 (#1417)
  * chore(release): add ubuntu older versions to deploy script (#1416)</changelog>
  <changelog author="dmueller@suse.com" date="1640692800">- Update to version 0.22.0 (jsc#SLE-18339):
  * fix(java/pom): ignore unsupported requirements (#1514)
  * feat(cli): warning for root command (#1516)
  * BREAKING: disable JAR detection in fs/repo scanning (#1512)
  * feat(scan): support --offline-scan option (#1511)
  * fix: improve memory usage (#1509)
  * feat(java): support pom.xml (#1501)
  * docs: fixing rust link to security advisory (#1504)
  * Add missing IacMetdata (#1505)
  * feat(jar): add file path (#1498)
  * feat(rpm): support NDB (#1497)
  * feat: added misconfiguration field for html.tpl (#1444)</changelog>
  <changelog author="kastl@b1-systems.de" date="1643716800">- Update to version 0.23.0:
  * docs: add ACR navigator (#1651)
  * fix: update example Rego files and docs (#1628)
  * feat(option): show a link to GitHub Discussions for --light deprecation (#1650)
  * fix(sarif): fix the warning message (#1647)
  * refactor: migrate to prefixed buckets (#1644)
  * feat(mariner): add support for CBL-Mariner (#1640)
  * docs: commercial use available (#1641)
  * feat: support azure acr (#1611)
  * feat(os-pkg): add data sources (#1636)
  * feat(redhat): support build info in RHEL (#807)
  * fix: change links in pull_request_template to static URLs (#1634)
  * feat(lang-pkg): add data sources (#1625)
  * feat(detector): support custom detector (#1615)
  * docs(contribution): change role who should resolve comments (#1618)
  * docs: add PR template (#1602)
  * feat(rocky): support Rocky Linux (#1570)
  * Add the ability to set dockerhub credentials in the helm chart (#1569)
  * feat(cache): redis TLS support (#1297)
  * feat(java): add support for PAR files (#1599)
  * refactor(rust): move rust-advisory-db to OSV (#1591)
  * feat: log ignored vulnerabilities on debug (#1378)
  * chore(mod): hcl2json deps update (#1585)
  * fix(rpm): do not ignore installed files via third-party rpm (#1594)
  * feat(fs): allow scanning a single file (#1578)
  * refactor(python): drop Safety DB (#1580)
  * feat: added insecure tls skip to scan git repo (#1528)
  * Supress git clone output (#1590)
  * fix(alma): skip modular package because MODULARITYLABEL is not set (#1588)
  * feat(photon os): added EOL dates check (#1587)
  * docs: update supported os (#1586)
  * BREAKING: remove root command (#1579)
  * docs: add Rust to Language-specific Packages Table (#1577)
  * docs: update int doc for gitlab ci (#1575)
  * BREAKING: migrate the sarif template to Go code (#1437)
  * refactor: remove unused field (#1567)
  * chore(deps): bump helm/chart-testing-action from 2.1.0 to 2.2.0 (#1554)
  * docs: gitlab integration (#1381)
  * feat(alma): support AlmaLinux (#1238)
  * docs: added note about default template path when Trivy installed using rpm (#1551)
  * BREAKING: Trivy DB from GHCR (#1539)
  * feat(cli): Do not set default commands when a plugin is being run (#1549)
  * fix: add fingerprint field to codequality template (#1541)
  * fix(image): correct handling of uncompressed layers (#1544)
  * chore: helm chart app version 0.22.0 (#1535)
  * test(integration): use fixtures (#1532)</changelog>
  <changelog author="kastl@b1-systems.de" date="1645617600">- Update to version 0.24.0:
  * chore(deps): bump github.com/spf13/afero from 1.6.0 to 1.8.1 (#1708)
  * fix(option): warn list-all-pkgs only with the table format (#1755)
  * feat(option): warn "--list-all-pkgs" with "--format table" (#1632)
  * feat(report): add support for CycloneDX (#1081)
  * chore(deps): update the defsec and tfsec versions (#1747)
  * fix(scanner): fix skip of language-specific files when scanning rootf? (#1751)
  * chore(deps): bump github.com/google/wire from 0.4.0 to 0.5.0 (#1712)
  * feat(report): considering App.Writer when printing results (#1722)
  * chore(deps): replace `satori` version and skipping examples folder  (#1745)
  * build: add s390x container images (#1726)
  * feat(template) Add misconfigurations to junit report (#1724)
  * chore(deps): bump github.com/twitchtv/twirp (#1709)
  * feat(client): configure TLS InsecureSkipVerify for server connection (#1287)
  * fix(rpc): Supports RPC calls for new identifier CustomResource (#1605)
  * chore(deps): bump go.uber.org/zap from 1.20.0 to 1.21.0 (#1705)
  * chore(deps): bump github.com/caarlos0/env/v6 from 6.0.0 to 6.9.1 (#1707)
  * feat(helm): Parameterise ServiceAccount annotations (#1677)
  * chore(deps): bump github.com/hashicorp/go-getter from 1.5.2 to 1.5.11 (#1710)
  * chore(deps): bump github.com/cheggaaa/pb/v3 from 3.0.3 to 3.0.8 (#1704)
  * chore(deps): bump github.com/open-policy-agent/opa from 0.36.1 to 0.37.2 (#1711)
  * chore(dependabot): enable gomod monthly (#1699)
  * fix(gitlab tpl): escape double quote (#1635)
  * build: Make `make protoc` be consistent (#1682)
  * feat(purl): add generate purl package utilities (#1574)
  * refactor: move result structs under types (#1696)
  * feat(mariner): add support for CBL-Mariner 2.0 (#1694)
  * docs(gitlab-ci): fix Script in GitLab CI Example #1688
  * chore: Upgrade helm chart version (#1683)
  * chore(mod): update Go dependencies (#1681)
  * docs: fix typos in markdown docs (#1674)
  * docs: update documentation for image scanning of tar files to use a tag present on Docker Hub (#1671)
  * fix(repo): --no-progress suppresses git output (#1669)</changelog>
  <changelog author="kastl@b1-systems.de" date="1645963200">- Update to version 0.24.1:
  * fix(python): correct handling pip package names with a hyphen (#1771)
  * doc(docker): fix command to run trivy with docker on linux (#1761)
  * feat(helm): Add support for custom labels (#1767)
  * chore(helm): bump chart to trivy 0.24.0 (#1762)
  * docs: remove erroneous command (#1763)</changelog>
  <changelog author="kastl@b1-systems.de" date="1646308800">- Update to version 0.24.2:
  * fix(pom): keep an order of dependencies (#1784)
  * chore: bump up Go to 1.17 (#1781)
  * chore(deps): bump actions/setup-python from 2 to 3 (#1776)
  * chore(deps): bump golangci/golangci-lint-action from 2 to 3.1.0 (#1777)</changelog>
  <changelog author="kastl@b1-systems.de" date="1647432000">- Update to version 0.24.3:
  * chore(issue labels): added new labels (#1839)
  * refactor: clarify db update warning messages (#1808)
  * chore(ci): change trivy vulnerability scan for every day  (#1838)
  * feat(helm): make Trivy service name configurable (#1825)
  * chore(deps): updated sprig to version v3.2.2. (#1814)
  * chore(deps): updated testcontainers-go to version v0.12.0 (#1822)
  * docs: add packages.config for .NET (#1823)
  * build: sign container image (#1668)
  * chore(deps): bump github.com/CycloneDX/cyclonedx-go from 0.4.0 to 0.5.0 (#1778)
  * docs: fix Installation documentation (#1804)
  * fix(report): ensure json report got a final new line (#1797)
  * fix(terraform): resolve panics in defsec (#1811)
  * feat(docker): Label images based on OCI image spec (#1793)
  * fix(helm): indentation for ServiceAccount annotations (#1795)
  * fix(hcl): fix panic in hcl2json (#1791)
  * chore(helm): remove psp from helm manifest (#1315)
  * build: Replace `make protoc` with `for loop` to return an error (#1655)
  * fix: ASFF template to match ASFF schema (#1685)
  * feat(helm): Add support for server token (#1734)</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1647518400">- BuildRequire go1.17</changelog>
  <changelog author="kastl@b1-systems.de" date="1647604800">- Update to version 0.24.4:
  * fix(docker): Getting images without a tag (#1852)
  * docs(gitlab-ci): Use environment variables TRIVY_CACHE_DIR and TRIVY_NO_PROGRESS (#1801)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1647950400">- tie to go.17 as 1.18 became available</changelog>
  <changelog author="kastl@b1-systems.de" date="1648814400">- Update to version 0.25.0:
  * docs(filter vulnerabilities): fix link (#1880)
  * feat(template) Add misconfigurations to gitlab codequality report (#1756)
  * fix(rpc): add PkgPath field to client / server mode (#1643)
  * fix(vulnerabilities): fixed trivy-db vulns (#1883)
  * feat(cache): remove temporary cache after filesystem scanning (#1868)
  * feat(sbom): add a dedicated sbom command (#1799)
  * feat(cyclonedx): add vulnerabilities (#1832)
  * fix(option): hide false warning about remote options (#1865)
  * chore: bump up Go to 1.18 (#1862)
  * feat(filesystem): scan in client/server mode (#1829)
  * refactor(template): remove unused test (#1861)
  * fix(cli): json format for trivy version (#1854)
  * docs: change URL for tfsec-checks (#1857)</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1648814401">- Buildrequire go1.18 as upstream says in go.mod</changelog>
  <changelog author="kastl@b1-systems.de" date="1649160000">- Update to version 0.25.1:
  * fix(misconf): update defsec to resolve panics (#1935)
  * chore(deps): bump github.com/docker/docker (#1924)
  * docs: restructure the documentation (#1887)
  * chore(deps): bump github.com/urfave/cli/v2 from 2.3.0 to 2.4.0 (#1923)
  * chore(deps): bump actions/cache from 2 to 3.0.1 (#1920)
  * chore(deps): bump actions/checkout from 2 to 3 (#1916)
  * chore(deps): bump github.com/open-policy-agent/opa from 0.37.2 to 0.39.0 (#1921)
  * chore(deps): bump sigstore/cosign-installer from 2.0.0 to 2.1.0 (#1919)
  * chore(deps): bump helm/chart-testing-action from 2.2.0 to 2.2.1 (#1918)
  * chore(deps): bump golang from 1.17 to 1.18.0 (#1915)
  * Add trivy horizontal logo (#1932)
  * chore(deps): bump alpine from 3.15.0 to 3.15.3 (#1917)
  * chore(deps): bump github.com/go-redis/redis/v8 from 8.11.4 to 8.11.5 (#1925)
  * chore(deps): bump github.com/stretchr/testify from 1.7.0 to 1.7.1 (#1927)
  * feat(db): Add dbRepository flag to get advisory database from OCI registry (#1873)</changelog>
  <changelog author="kastl@b1-systems.de" date="1649246400">- Update to version 0.25.2:
  * fix(downloadDB): add flag to server command (#1942)</changelog>
  <changelog author="kastl@b1-systems.de" date="1649246401">- Update to version 0.25.3:
  * fix(downloadDB): add dbRepositoryFlag to repository and rootfs commands (#1956)
  * fix(misconf): update BurntSushi/toml for fix runtime error (#1948)
  * fix(misconf): Update fanal/defsec to resolve missing metadata issues (#1947)
  * feat(jar): allow setting Maven Central URL using environment variable (#1939)
  * chore(chart): update Trivy version in HelmChart to 0.25.0 (#1931)
  * chore(chart): remove version comments (#1933)</changelog>
  <changelog author="kastl@b1-systems.de" date="1649937600">- Update to version 0.25.4:
  * docs: move CONTRIBUTING.md to docs (#1971)
  * refactor(table): use file name instead package path (#1966)
  * fix(sbom): add --db-repository (#1964)
  * feat(table): add PkgPath in table result (#1960)
  * fix(pom): merge multiple pom imports in a good manner (#1959)</changelog>
  <changelog author="kastl@b1-systems.de" date="1650110400">- Update to version 0.26.0:
  * feat(alpine): warn mixing versions (#2000)
  * Update ASFF template (#1914)
  * chore(deps): replace `containerd/containerd` version to fix CVE-2022-23648 (#1994)
  * chore(deps): bump alpine from 3.15.3 to 3.15.4 (#1993)
  * test(go): add integration tests for gomod (#1989)
  * fix(python): fixed panic when scan .egg archive (#1992)
  * fix(go): set correct go modules type (#1990)
  * feat(alpine): support apk repositories (#1987)
  * docs: add CBL-Mariner (#1982)
  * docs(go): fix version (#1986)
  * feat(go): support go.mod in Go 1.17+ (#1985)
  * ci: fix URLs in the PR template (#1972)
  * ci: add semantic pull requests check (#1968)
  * docs(issue): added docs for wrong detection issues (#1961)</changelog>
  <changelog author="kastl@b1-systems.de" date="1650974400">- Update to version 0.27.0:
  * fix(go): fixed panic to scan gomod without version (#2038)
  * docs(mariner): confirm it works with Mariner 2.0 VM (#2036)
  * feat(secret): support enable rules (#2035)
  * chore: app version 26.0 (#2030)
  * docs(secret): add a demo movie (#2031)
  * feat: support cache TTL in Redis (#2021)
  * fix(go): skip system installed binaries (#2028)
  * fix(go): check if go.sum is nil (#2029)
  * feat: add secret scanning (#1901)
  * chore: gh publish only with push the tag release (#2025)
  * fix(fs): ignore permission errors (#2022)
  * test(mod): using correct module inside test go.mod (#2020)
  * feat(server): re-add proxy support for client/server communications (#1995)
  * fix(report): truncate a description before escaping in ASFF template (#2004)
  * fix(cloudformation): correct margin removal for empty lines (#2002)
  * fix(template): correct check of old sarif template files (#2003)</changelog>
  <changelog author="kastl@b1-systems.de" date="1651060800">- Update to version 0.27.1:
  * chore(deps): bump github.com/CycloneDX/cyclonedx-go from 0.5.0 to 0.5.1 (#1926)
  * refactor(fs): scanner options (#2050)
  * feat(secret): truncate long line (#2052)
  * docs: fix a broken bullets (#2042)
  * feat(ubuntu): add 22.04 approx eol date (#2044)
  * docs: update installation.md (#2027)
  * docs: add Containerfile (#2032)</changelog>
  <changelog author="dmueller@suse.com" date="1653307200">- Update to version 0.28.0 (bsc#1199760, CVE-2022-28946):
  * fix: remove Highlighted from json output (#2131)
  * fix: remove trivy-kubernetes replace (#2132)
  * docs: Add Operator docs under Kubernetes section (#2111)
  * fix(k8s): security-checks panic (#2127)
  * ci: added k8s scope (#2130)
  * docs: Update misconfig output in examples (#2128)
  * fix(misconf): Fix coloured output in Goland terminal (#2126)
  * docs(secret): Fix default value of --security-checks in docs (#2107)
  * refactor(report): move colorize function from trivy-db (#2122)
  * feat: k8s resource scanning (#2118)
  * chore: add CODEOWNERS (#2121)
  * feat(image): add `--server` option for remote scans (#1871)
  * refactor: k8s (#2116)
  * refactor: export useful APIs (#2108)
  * docs: fix k8s doc (#2114)
  * feat(kubernetes): Add report flag for summary (#2112)
  * fix: Remove problematic advanced rego policies (#2113)
  * feat(misconf): Add special output format for misconfigurations (#2100)
  * feat:  add k8s subcommand (#2065)
  * chore: fix make lint version (#2102)
  * fix(java): handle relative pom modules (#2101)
  * fix(misconf): Add missing links for non-rego misconfig results (#2094)
  * feat(misconf): Added fs.FS based scanning via latest defsec (#2084)
  * chore(deps): bump trivy-issue-action to v0.0.4 (#2091)
  * chore(deps): bump github.com/twitchtv/twirp (#2077)
  * chore(deps): bump github.com/urfave/cli/v2 from 2.4.0 to 2.5.1 (#2074)
  * chore(os): updated fanal version and alpine distroless test (#2086)
  * chore(deps): bump github.com/CycloneDX/cyclonedx-go from 0.5.1 to 0.5.2 (#2075)
  * chore(deps): bump github.com/samber/lo from 1.16.0 to 1.19.0 (#2076)
  * feat(report): add support for SPDX (#2059)
  * chore(deps): bump actions/setup-go from 2 to 3 (#2073)
  * chore(deps): bump actions/cache from 3.0.1 to 3.0.2 (#2071)
  * chore(deps): bump golang from 1.18.0 to 1.18.1 (#2069)
  * chore(deps): bump actions/stale from 4 to 5 (#2070)
  * chore(deps): bump sigstore/cosign-installer from 2.0.0 to 2.3.0 (#2072)
  * chore(deps): bump github.com/open-policy-agent/opa from 0.39.0 to 0.40.0 (#2079)
  * chore: app version 0.27.0 (#2046)
  * fix(misconf): added to skip conf files if their scanning is not enabled (#2066)
  * docs(secret) fix rule path in docs (#2061)
  * docs: change from go.sum to go.mod (#2056)</changelog>
</package>
<package pkgid="0feaf13031be183bb74c06719f42c78623fbf50f2a050ee5390b507b0398a8a4" name="trivy" arch="aarch64">
  <version epoch="0" ver="0.30.4" rel="bp154.2.6.1"/>
  <changelog author="kastl@b1-systems.de" date="1647604800">- Update to version 0.24.4:
  * fix(docker): Getting images without a tag (#1852)
  * docs(gitlab-ci): Use environment variables TRIVY_CACHE_DIR and TRIVY_NO_PROGRESS (#1801)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1647950400">- tie to go.17 as 1.18 became available</changelog>
  <changelog author="kastl@b1-systems.de" date="1648814400">- Update to version 0.25.0:
  * docs(filter vulnerabilities): fix link (#1880)
  * feat(template) Add misconfigurations to gitlab codequality report (#1756)
  * fix(rpc): add PkgPath field to client / server mode (#1643)
  * fix(vulnerabilities): fixed trivy-db vulns (#1883)
  * feat(cache): remove temporary cache after filesystem scanning (#1868)
  * feat(sbom): add a dedicated sbom command (#1799)
  * feat(cyclonedx): add vulnerabilities (#1832)
  * fix(option): hide false warning about remote options (#1865)
  * chore: bump up Go to 1.18 (#1862)
  * feat(filesystem): scan in client/server mode (#1829)
  * refactor(template): remove unused test (#1861)
  * fix(cli): json format for trivy version (#1854)
  * docs: change URL for tfsec-checks (#1857)</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1648814401">- Buildrequire go1.18 as upstream says in go.mod</changelog>
  <changelog author="kastl@b1-systems.de" date="1649160000">- Update to version 0.25.1:
  * fix(misconf): update defsec to resolve panics (#1935)
  * chore(deps): bump github.com/docker/docker (#1924)
  * docs: restructure the documentation (#1887)
  * chore(deps): bump github.com/urfave/cli/v2 from 2.3.0 to 2.4.0 (#1923)
  * chore(deps): bump actions/cache from 2 to 3.0.1 (#1920)
  * chore(deps): bump actions/checkout from 2 to 3 (#1916)
  * chore(deps): bump github.com/open-policy-agent/opa from 0.37.2 to 0.39.0 (#1921)
  * chore(deps): bump sigstore/cosign-installer from 2.0.0 to 2.1.0 (#1919)
  * chore(deps): bump helm/chart-testing-action from 2.2.0 to 2.2.1 (#1918)
  * chore(deps): bump golang from 1.17 to 1.18.0 (#1915)
  * Add trivy horizontal logo (#1932)
  * chore(deps): bump alpine from 3.15.0 to 3.15.3 (#1917)
  * chore(deps): bump github.com/go-redis/redis/v8 from 8.11.4 to 8.11.5 (#1925)
  * chore(deps): bump github.com/stretchr/testify from 1.7.0 to 1.7.1 (#1927)
  * feat(db): Add dbRepository flag to get advisory database from OCI registry (#1873)</changelog>
  <changelog author="kastl@b1-systems.de" date="1649246400">- Update to version 0.25.2:
  * fix(downloadDB): add flag to server command (#1942)</changelog>
  <changelog author="kastl@b1-systems.de" date="1649246401">- Update to version 0.25.3:
  * fix(downloadDB): add dbRepositoryFlag to repository and rootfs commands (#1956)
  * fix(misconf): update BurntSushi/toml for fix runtime error (#1948)
  * fix(misconf): Update fanal/defsec to resolve missing metadata issues (#1947)
  * feat(jar): allow setting Maven Central URL using environment variable (#1939)
  * chore(chart): update Trivy version in HelmChart to 0.25.0 (#1931)
  * chore(chart): remove version comments (#1933)</changelog>
  <changelog author="kastl@b1-systems.de" date="1649937600">- Update to version 0.25.4:
  * docs: move CONTRIBUTING.md to docs (#1971)
  * refactor(table): use file name instead package path (#1966)
  * fix(sbom): add --db-repository (#1964)
  * feat(table): add PkgPath in table result (#1960)
  * fix(pom): merge multiple pom imports in a good manner (#1959)</changelog>
  <changelog author="kastl@b1-systems.de" date="1650110400">- Update to version 0.26.0:
  * feat(alpine): warn mixing versions (#2000)
  * Update ASFF template (#1914)
  * chore(deps): replace `containerd/containerd` version to fix CVE-2022-23648 (#1994)
  * chore(deps): bump alpine from 3.15.3 to 3.15.4 (#1993)
  * test(go): add integration tests for gomod (#1989)
  * fix(python): fixed panic when scan .egg archive (#1992)
  * fix(go): set correct go modules type (#1990)
  * feat(alpine): support apk repositories (#1987)
  * docs: add CBL-Mariner (#1982)
  * docs(go): fix version (#1986)
  * feat(go): support go.mod in Go 1.17+ (#1985)
  * ci: fix URLs in the PR template (#1972)
  * ci: add semantic pull requests check (#1968)
  * docs(issue): added docs for wrong detection issues (#1961)</changelog>
  <changelog author="kastl@b1-systems.de" date="1650974400">- Update to version 0.27.0:
  * fix(go): fixed panic to scan gomod without version (#2038)
  * docs(mariner): confirm it works with Mariner 2.0 VM (#2036)
  * feat(secret): support enable rules (#2035)
  * chore: app version 26.0 (#2030)
  * docs(secret): add a demo movie (#2031)
  * feat: support cache TTL in Redis (#2021)
  * fix(go): skip system installed binaries (#2028)
  * fix(go): check if go.sum is nil (#2029)
  * feat: add secret scanning (#1901)
  * chore: gh publish only with push the tag release (#2025)
  * fix(fs): ignore permission errors (#2022)
  * test(mod): using correct module inside test go.mod (#2020)
  * feat(server): re-add proxy support for client/server communications (#1995)
  * fix(report): truncate a description before escaping in ASFF template (#2004)
  * fix(cloudformation): correct margin removal for empty lines (#2002)
  * fix(template): correct check of old sarif template files (#2003)</changelog>
  <changelog author="kastl@b1-systems.de" date="1651060800">- Update to version 0.27.1:
  * chore(deps): bump github.com/CycloneDX/cyclonedx-go from 0.5.0 to 0.5.1 (#1926)
  * refactor(fs): scanner options (#2050)
  * feat(secret): truncate long line (#2052)
  * docs: fix a broken bullets (#2042)
  * feat(ubuntu): add 22.04 approx eol date (#2044)
  * docs: update installation.md (#2027)
  * docs: add Containerfile (#2032)</changelog>
  <changelog author="dmueller@suse.com" date="1653307200">- Update to version 0.28.0 (bsc#1199760, CVE-2022-28946):
  * fix: remove Highlighted from json output (#2131)
  * fix: remove trivy-kubernetes replace (#2132)
  * docs: Add Operator docs under Kubernetes section (#2111)
  * fix(k8s): security-checks panic (#2127)
  * ci: added k8s scope (#2130)
  * docs: Update misconfig output in examples (#2128)
  * fix(misconf): Fix coloured output in Goland terminal (#2126)
  * docs(secret): Fix default value of --security-checks in docs (#2107)
  * refactor(report): move colorize function from trivy-db (#2122)
  * feat: k8s resource scanning (#2118)
  * chore: add CODEOWNERS (#2121)
  * feat(image): add `--server` option for remote scans (#1871)
  * refactor: k8s (#2116)
  * refactor: export useful APIs (#2108)
  * docs: fix k8s doc (#2114)
  * feat(kubernetes): Add report flag for summary (#2112)
  * fix: Remove problematic advanced rego policies (#2113)
  * feat(misconf): Add special output format for misconfigurations (#2100)
  * feat:  add k8s subcommand (#2065)
  * chore: fix make lint version (#2102)
  * fix(java): handle relative pom modules (#2101)
  * fix(misconf): Add missing links for non-rego misconfig results (#2094)
  * feat(misconf): Added fs.FS based scanning via latest defsec (#2084)
  * chore(deps): bump trivy-issue-action to v0.0.4 (#2091)
  * chore(deps): bump github.com/twitchtv/twirp (#2077)
  * chore(deps): bump github.com/urfave/cli/v2 from 2.4.0 to 2.5.1 (#2074)
  * chore(os): updated fanal version and alpine distroless test (#2086)
  * chore(deps): bump github.com/CycloneDX/cyclonedx-go from 0.5.1 to 0.5.2 (#2075)
  * chore(deps): bump github.com/samber/lo from 1.16.0 to 1.19.0 (#2076)
  * feat(report): add support for SPDX (#2059)
  * chore(deps): bump actions/setup-go from 2 to 3 (#2073)
  * chore(deps): bump actions/cache from 3.0.1 to 3.0.2 (#2071)
  * chore(deps): bump golang from 1.18.0 to 1.18.1 (#2069)
  * chore(deps): bump actions/stale from 4 to 5 (#2070)
  * chore(deps): bump sigstore/cosign-installer from 2.0.0 to 2.3.0 (#2072)
  * chore(deps): bump github.com/open-policy-agent/opa from 0.39.0 to 0.40.0 (#2079)
  * chore: app version 0.27.0 (#2046)
  * fix(misconf): added to skip conf files if their scanning is not enabled (#2066)
  * docs(secret) fix rule path in docs (#2061)
  * docs: change from go.sum to go.mod (#2056)</changelog>
  <changelog author="kastl@b1-systems.de" date="1655899200">- Update to version 0.29.0:
  * fix(lang): fix dependency graph in client server mode (#2336)
  * feat: allow expiration date for .trivyignore entries (#2332)
  * feat(lang): add dependency origin graph (#1970)
  * docs: update nix installation info (#2331)
  * feat: add rbac scanning support (#2328)
  * refactor: move WordPress module to another repository (#2329)
  * ci: add support for ppc64le (#2281)
  * feat: add support for WASM modules (#2195)
  * feat(secret): show recommendation for slow scanning (#2051)
  * fix(flag): remove --clear-cache flag client mode (#2301)
  * fix(java): added check for looping for variable evaluation in pom file (#2322)
  * BREAKING(k8s): change CLI API (#2186)
  * feat(alpine): add Alpine Linux 3.16 (#2319)
  * docs: bump trivy-operator to v0.0.7 (#2320)
  * ci: add `go mod tidy` check (#2314)
  * chore: run `go mod tidy` (#2313)
  * fix: do not exit if one resource is not found (#2311)
  * feat(cli): use stderr for all log messages (resolve #381) (#2289)
  * test: replace deprecated subcommand client in integration tests (#2308)
  * feat: add support for containerd (#2305)
  * fix(kubernetes): Support floats in manifest yaml (#2297)
  * docs(kubernetes): dead links (#2307)
  * chore: add license label (#2304)
  * feat(mariner): added support for CBL-Mariner Distroless v2.0 (#2293)
  * feat(helm): add pod annotations (#2272)
  * refactor: do not import defsec in fanal types package (#2292)
  * feat(report): Add misconfiguration support to ASFF report template (#2285)
  * test: use images in GHCR (#2275)
  * feat(helm): support pod annotations (#2265)
  * feat(misconf): Helm chart scanning (#2269)
  * docs: Update custom rego policy docs to reflect latest defsec/fanal changes (#2267)
  * fix: mask redis credentials when logging (#2264)
  * refactor: extract commands Runner interface (#2147)
  * chore(deps): bump alpine from 3.15.4 to 3.16.0 (#2234)
  * chore(deps): bump github.com/CycloneDX/cyclonedx-go from 0.5.2 to 0.6.0 (#2245)
  * docs: update operator release (#2263)
  * chore(deps): bump github.com/urfave/cli/v2 from 2.6.0 to 2.8.1 (#2243)
  * feat(redhat): added architecture check (#2172)
  * docs: updating links in the docs to work again (#2256)
  * docs: fix readme (#2251)
  * fix: fixed incorrect CycloneDX output format (#2255)
  * chore(deps): bump github.com/caarlos0/env/v6 from 6.9.1 to 6.9.3 (#2241)
  * chore(deps): bump github.com/samber/lo from 1.19.0 to 1.21.0 (#2242)
  * chore(deps): bump goreleaser/goreleaser-action from 2 to 3 (#2240)
  * chore(deps): bump docker/setup-buildx-action from 1 to 2 (#2238)
  * chore(deps): bump docker/setup-qemu-action from 1 to 2 (#2236)
  * chore(deps): bump golang from 1.18.1 to 1.18.2 (#2235)
  * chore(deps): bump golangci/golangci-lint-action from 3.1.0 to 3.2.0 (#2237)
  * chore(deps): bump docker/login-action from 1 to 2 (#2239)
  * chore(deps): bump github.com/hashicorp/go-getter from 1.5.11 to 1.6.1 (#2246)
  * refactor(deps): move dependencies to package (#2189)
  * fix(report): change github format version to required (#2229)
  * docs: update readme (#2110)
  * docs: added information about choosing advisory database (#2212)
  * chore: update trivy-kubernetes (#2224)
  * docs: clarifying parts of the k8s docs and updating links (#2222)
  * fix(k8s): timeout error logging (#2179)
  * chore(deps): updated fanal after fix AsymmetricPrivateKeys (#2214)
  * feat(k8s): add --context flag (#2171)
  * fix(k8s): properly instantiate TableWriter (#2175)
  * test: fixed integration tests after updating testcontainers to v0.13.0 (#2208)
  * chore: update labels (#2197)
  * fix(report): fixed panic if all misconf reports were removed in filter (#2188)
  * feat(k8s): scan secrets (#2178)
  * feat(report): GitHub Dependency Snapshots support (#1522)
  * feat(db): added insecure skip tls verify to download trivy db (#2140)
  * fix(redhat): always use vulns with fixed version if there is one (#2165)
  * chore(redhat): Add support for Red Hat UBI 9. (#2183)
  * fix(k8s): update trivy-kubernetes (#2163)
  * fix misconfig start line for code quality tpl (#2181)
  * fix: update docker/distribution from 2.8.0 to 2.8.1 (#2176)
  * docs(vuln): Include GitLab 15.0 integration (#2153)
  * docs: fix the operator version (#2167)
  * fix(k8s): summary report when when only vulns exit (#2146)
  * chore(deps): Update fanal to get defsec v0.58.2 (fixes false positives in ksv038) (#2156)
  * perf(misconf): Improve performance when scanning very large files (#2152)
  * docs(misconf): Update examples and docs to refer to builtin/defsec instead of appshield (#2150)
  * chore(deps): Update fanal (for less verbose code in misconf results) (#2151)
  * docs: fixed installation instruction for rhel/centos (#2143)</changelog>
  <changelog author="kastl@b1-systems.de" date="1655899201">- Update to version 0.29.1:
  * fix(report): add required fields to the SARIF template (#2341)
  * chore: fix spelling errors (#2352)
  * Omit Remediation if PrimaryURL is empty (#2006)
  * docs(repo): Link to installation documentation in readme shows 404 (#2348)
  * feat(alma): support for scanning of modular packages for AlmaLinux (#2347)</changelog>
  <changelog author="dmueller@suse.com" date="1657281600">- Update to version 0.29.2:
  * chore: skip Visual Studio Code project folder (#2379)
  * fix(helm): handle charts with templated names (#2374)
  * docs: redirect operator docs to trivy-operator repo (#2372)
  * fix(secret): use secret result when determining Failed status (#2370)
  * try removing libdb-dev
  * run integration tests in fanal
  * use same testing images in fanal
  * feat(helm): add support for trivy dbRepository (#2345)
  * fix: Fix failing test due to deref lint issue
  * test: Fix broken test
  * fix: Fix makefile when no previous named ref is visible in a shallow clone
  * chore: Fix linting issues in fanal
  * refactor: Fix fanal import paths and remove dotfiles
  * chore: bump defsec version v0.68.1</changelog>
  <changelog author="kastl@b1-systems.de" date="1657972800">- Update to version 0.30.0:
  * fix: separating multiple licenses from one line in dpkg copyright files (#2508)
  * fix: change a capital letter for `plugin uninstall` subcommand (#2519)
  * fix: k8s hide empty report when scanning resource (#2517)
  * refactor: fix comments (#2516)
  * fix: scan vendor dir (#2515)
  * feat: Add support for license scanning (#2418)
  * chore: add owners for secret scanning (#2485)
  * fix: remove dependency-tree flag for image subcommand (#2492)
  * fix(k8s): add shorthand for k8s namespace flag (#2495)
  * docs: add information about using multiple servers to troubleshooting (#2498)
  * ci: add pushing canary build images to registries (#2428)
  * chore(deps): bump github.com/open-policy-agent/opa from 0.41.0 to 0.42.0 (#2479)
  * feat(dotnet): add support for .Net core .deps.json files (#2487)
  * feat(amazon): add support for 2022 version (#2429)
  * Type correction bitnami chart (#2415)
  * chore(deps): bump github.com/owenrumney/go-sarif/v2 from 2.1.1 to 2.1.2 (#2449)
  * chore(deps): bump github.com/aquasecurity/table from 1.5.1 to 1.6.0 (#2446)
  * docs: add config file and update CLI references (#2489)
  * feat: add support for flag groups (#2488)
  * refactor: move from urfave/cli to spf13/cobra (#2458)
  * fix: Fix secrets output not containing file/lines (#2467)
  * fix: clear output with modules (#2478)
  * chore(deps): bump github.com/mailru/easyjson from 0.7.6 to 0.7.7 (#2448)
  * docs(cbl): distroless 1.0 supported (#2473)
  * fix: Fix example dockerfile rego policy (#2460)
  * fix(config): add helm to list of config analyzers (#2457)
  * feat: k8s resouces scan (#2395)
  * feat(sbom): add cyclonedx sbom scan (#2203)
  * chore(deps): bump wazero to latest main (#2436)
  * chore(deps): bump github.com/stretchr/testify from 1.7.3 to 1.8.0 (#2444)
  * chore(deps): bump github.com/alicebob/miniredis/v2 from 2.21.0 to 2.22.0 (#2445)
  * chore(deps): bump sigstore/cosign-installer from 2.3.0 to 2.4.1 (#2442)
  * chore(deps): bump actions/setup-python from 3 to 4 (#2441)
  * chore(deps): bump github.com/Azure/azure-sdk-for-go (#2450)
  * docs: remove links to removed content (#2431)
  * ci: added rpm build for rhel 9 (#2437)
  * fix(secret): remove space from asymmetric private key (#2434)
  * chore(deps): bump actions/cache from 3.0.2 to 3.0.4 (#2440)
  * chore(deps): bump helm/kind-action from 1.2.0 to 1.3.0 (#2439)
  * chore(deps): bump golang from 1.18.2 to 1.18.3 (#2438)
  * chore(deps): bump github.com/aws/aws-sdk-go from 1.44.25 to 1.44.46 (#2447)
  * test(integration): fix golden files for debian 9 (#2435)
  * fix(cli): fix version string in docs link when secret scanning is enabled (#2422)
  * refactor: move CycloneDX marshaling (#2420)
  * docs(nodejs): add docs about pnpm support (#2423)
  * docs: improve k8s usage documentation (#2425)
  * feat: Make secrets scanning output consistant (#2410)
  * ci: create canary build after main branch changes  (#1638)
  * fix(misconf): skip broken scans (#2396)
  * feat(nodejs): add pnpm support (#2414)
  * fix: Fix false positive for use of COS images (#2413)
  * eliminate nerdctl dependency (#2412)
  * Add EOL date for SUSE SLES 15.3, 15.4 and OpenSUSE 15.4 (#2403)
  * fix(go): no cast to lowercase go package names (#2401)
  * BREAKING(sbom): change 'trivy sbom' to scan SBOM (#2408)
  * fix(server): hot update the db from custom repository (#2406)
  * feat: added license parser for dpkg (#2381)
  * chore(helm): bump appVersion to latest release (#2397)
  * fix(misconf): Update defsec (v0.68.5) to fix docker rego duplicate key (#2400)
  * feat: extract stripe publishable and secret keys (#2392)
  * feat: rbac support k8s sub-command (#2339)
  * feat(ruby): drop platform strings from dependency versions bundled with bundler v2 (#2390)
  * docs: Updating README with new CLI command (#2359)
  * fix(misconf): Update defsec to v0.68.4 to resolve CF detection bug (#2383)
  * chore: add integration label and merge security label (#2316)</changelog>
  <changelog author="kastl@b1-systems.de" date="1658318400">- Update to version 0.30.1:
  * chore: remove a test repository (#2551)
  * fix(license): lazy loading of classifiers (#2547)
  * fix: CVE-2022-1996 in Trivy (#2499)
  * docs(sbom): add sbom attestation (#2527)
  * feat(rocky): set Rocky Linux 9 EOL (#2543)
  * docs: add attributes to the video tag to autoplay demo videos (#2538)
  * fix: yaml files with non-string chart name (#2534)
  * fix: skip dirs (#2530)
  * feat(repo): add support for branch, commit, &amp; tag (#2494)
  * fix: remove auto configure environment variables via viper (#2526)</changelog>
  <changelog author="kastl@b1-systems.de" date="1658404800">- Update to version 0.30.2:
  * fix(report): show the summary without results (#2548)
  * fix(cli): replace '-' to '_' for env vars (#2561)</changelog>
  <changelog author="kastl@b1-systems.de" date="1658836800">- Update to version 0.30.3:
  * fix(server): use a new db worker for hot updates (#2581)
  * docs: add trivy with download-db-only flag to Air-Gapped Environment (#2583)
  * docs: split commands to download db for different versions of oras (#2582)
  * feat(report): export exitcode for license checks (#2564)
  * fix: cli can use lowercase for severities (#2565)
  * fix: allow subcommands with TRIVY_RUN_AS_PLUGIN (#2577)
  * fix: add missing types in TypeOSes and TypeLanguages in analyzer (#2569)
  * fix: enable some features of the wasm runtime (#2575)
  * fix(k8s): no error logged if trivy can't get docker image in kubernetes mode (#2521)
  * docs(sbom): improve sbom attestation documentation (#2566)</changelog>
  <changelog author="kastl@b1-systems.de" date="1658923200">- Update to version 0.30.4:
  * fix: remove the first arg when running as a plugin (#2595)
  * fix: k8s controlplaner scanning (#2593)
  * fix(vuln): GitLab report template (#2578)</changelog>
</package>
<package pkgid="63cf68c8a14e75ec65f484fc381cdf0abb97522b15636ebb03b11552a8c1bc51" name="trivy" arch="i586">
  <version epoch="0" ver="0.30.4" rel="bp154.2.6.1"/>
  <changelog author="kastl@b1-systems.de" date="1647604800">- Update to version 0.24.4:
  * fix(docker): Getting images without a tag (#1852)
  * docs(gitlab-ci): Use environment variables TRIVY_CACHE_DIR and TRIVY_NO_PROGRESS (#1801)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1647950400">- tie to go.17 as 1.18 became available</changelog>
  <changelog author="kastl@b1-systems.de" date="1648814400">- Update to version 0.25.0:
  * docs(filter vulnerabilities): fix link (#1880)
  * feat(template) Add misconfigurations to gitlab codequality report (#1756)
  * fix(rpc): add PkgPath field to client / server mode (#1643)
  * fix(vulnerabilities): fixed trivy-db vulns (#1883)
  * feat(cache): remove temporary cache after filesystem scanning (#1868)
  * feat(sbom): add a dedicated sbom command (#1799)
  * feat(cyclonedx): add vulnerabilities (#1832)
  * fix(option): hide false warning about remote options (#1865)
  * chore: bump up Go to 1.18 (#1862)
  * feat(filesystem): scan in client/server mode (#1829)
  * refactor(template): remove unused test (#1861)
  * fix(cli): json format for trivy version (#1854)
  * docs: change URL for tfsec-checks (#1857)</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1648814401">- Buildrequire go1.18 as upstream says in go.mod</changelog>
  <changelog author="kastl@b1-systems.de" date="1649160000">- Update to version 0.25.1:
  * fix(misconf): update defsec to resolve panics (#1935)
  * chore(deps): bump github.com/docker/docker (#1924)
  * docs: restructure the documentation (#1887)
  * chore(deps): bump github.com/urfave/cli/v2 from 2.3.0 to 2.4.0 (#1923)
  * chore(deps): bump actions/cache from 2 to 3.0.1 (#1920)
  * chore(deps): bump actions/checkout from 2 to 3 (#1916)
  * chore(deps): bump github.com/open-policy-agent/opa from 0.37.2 to 0.39.0 (#1921)
  * chore(deps): bump sigstore/cosign-installer from 2.0.0 to 2.1.0 (#1919)
  * chore(deps): bump helm/chart-testing-action from 2.2.0 to 2.2.1 (#1918)
  * chore(deps): bump golang from 1.17 to 1.18.0 (#1915)
  * Add trivy horizontal logo (#1932)
  * chore(deps): bump alpine from 3.15.0 to 3.15.3 (#1917)
  * chore(deps): bump github.com/go-redis/redis/v8 from 8.11.4 to 8.11.5 (#1925)
  * chore(deps): bump github.com/stretchr/testify from 1.7.0 to 1.7.1 (#1927)
  * feat(db): Add dbRepository flag to get advisory database from OCI registry (#1873)</changelog>
  <changelog author="kastl@b1-systems.de" date="1649246400">- Update to version 0.25.2:
  * fix(downloadDB): add flag to server command (#1942)</changelog>
  <changelog author="kastl@b1-systems.de" date="1649246401">- Update to version 0.25.3:
  * fix(downloadDB): add dbRepositoryFlag to repository and rootfs commands (#1956)
  * fix(misconf): update BurntSushi/toml for fix runtime error (#1948)
  * fix(misconf): Update fanal/defsec to resolve missing metadata issues (#1947)
  * feat(jar): allow setting Maven Central URL using environment variable (#1939)
  * chore(chart): update Trivy version in HelmChart to 0.25.0 (#1931)
  * chore(chart): remove version comments (#1933)</changelog>
  <changelog author="kastl@b1-systems.de" date="1649937600">- Update to version 0.25.4:
  * docs: move CONTRIBUTING.md to docs (#1971)
  * refactor(table): use file name instead package path (#1966)
  * fix(sbom): add --db-repository (#1964)
  * feat(table): add PkgPath in table result (#1960)
  * fix(pom): merge multiple pom imports in a good manner (#1959)</changelog>
  <changelog author="kastl@b1-systems.de" date="1650110400">- Update to version 0.26.0:
  * feat(alpine): warn mixing versions (#2000)
  * Update ASFF template (#1914)
  * chore(deps): replace `containerd/containerd` version to fix CVE-2022-23648 (#1994)
  * chore(deps): bump alpine from 3.15.3 to 3.15.4 (#1993)
  * test(go): add integration tests for gomod (#1989)
  * fix(python): fixed panic when scan .egg archive (#1992)
  * fix(go): set correct go modules type (#1990)
  * feat(alpine): support apk repositories (#1987)
  * docs: add CBL-Mariner (#1982)
  * docs(go): fix version (#1986)
  * feat(go): support go.mod in Go 1.17+ (#1985)
  * ci: fix URLs in the PR template (#1972)
  * ci: add semantic pull requests check (#1968)
  * docs(issue): added docs for wrong detection issues (#1961)</changelog>
  <changelog author="kastl@b1-systems.de" date="1650974400">- Update to version 0.27.0:
  * fix(go): fixed panic to scan gomod without version (#2038)
  * docs(mariner): confirm it works with Mariner 2.0 VM (#2036)
  * feat(secret): support enable rules (#2035)
  * chore: app version 26.0 (#2030)
  * docs(secret): add a demo movie (#2031)
  * feat: support cache TTL in Redis (#2021)
  * fix(go): skip system installed binaries (#2028)
  * fix(go): check if go.sum is nil (#2029)
  * feat: add secret scanning (#1901)
  * chore: gh publish only with push the tag release (#2025)
  * fix(fs): ignore permission errors (#2022)
  * test(mod): using correct module inside test go.mod (#2020)
  * feat(server): re-add proxy support for client/server communications (#1995)
  * fix(report): truncate a description before escaping in ASFF template (#2004)
  * fix(cloudformation): correct margin removal for empty lines (#2002)
  * fix(template): correct check of old sarif template files (#2003)</changelog>
  <changelog author="kastl@b1-systems.de" date="1651060800">- Update to version 0.27.1:
  * chore(deps): bump github.com/CycloneDX/cyclonedx-go from 0.5.0 to 0.5.1 (#1926)
  * refactor(fs): scanner options (#2050)
  * feat(secret): truncate long line (#2052)
  * docs: fix a broken bullets (#2042)
  * feat(ubuntu): add 22.04 approx eol date (#2044)
  * docs: update installation.md (#2027)
  * docs: add Containerfile (#2032)</changelog>
  <changelog author="dmueller@suse.com" date="1653307200">- Update to version 0.28.0 (bsc#1199760, CVE-2022-28946):
  * fix: remove Highlighted from json output (#2131)
  * fix: remove trivy-kubernetes replace (#2132)
  * docs: Add Operator docs under Kubernetes section (#2111)
  * fix(k8s): security-checks panic (#2127)
  * ci: added k8s scope (#2130)
  * docs: Update misconfig output in examples (#2128)
  * fix(misconf): Fix coloured output in Goland terminal (#2126)
  * docs(secret): Fix default value of --security-checks in docs (#2107)
  * refactor(report): move colorize function from trivy-db (#2122)
  * feat: k8s resource scanning (#2118)
  * chore: add CODEOWNERS (#2121)
  * feat(image): add `--server` option for remote scans (#1871)
  * refactor: k8s (#2116)
  * refactor: export useful APIs (#2108)
  * docs: fix k8s doc (#2114)
  * feat(kubernetes): Add report flag for summary (#2112)
  * fix: Remove problematic advanced rego policies (#2113)
  * feat(misconf): Add special output format for misconfigurations (#2100)
  * feat:  add k8s subcommand (#2065)
  * chore: fix make lint version (#2102)
  * fix(java): handle relative pom modules (#2101)
  * fix(misconf): Add missing links for non-rego misconfig results (#2094)
  * feat(misconf): Added fs.FS based scanning via latest defsec (#2084)
  * chore(deps): bump trivy-issue-action to v0.0.4 (#2091)
  * chore(deps): bump github.com/twitchtv/twirp (#2077)
  * chore(deps): bump github.com/urfave/cli/v2 from 2.4.0 to 2.5.1 (#2074)
  * chore(os): updated fanal version and alpine distroless test (#2086)
  * chore(deps): bump github.com/CycloneDX/cyclonedx-go from 0.5.1 to 0.5.2 (#2075)
  * chore(deps): bump github.com/samber/lo from 1.16.0 to 1.19.0 (#2076)
  * feat(report): add support for SPDX (#2059)
  * chore(deps): bump actions/setup-go from 2 to 3 (#2073)
  * chore(deps): bump actions/cache from 3.0.1 to 3.0.2 (#2071)
  * chore(deps): bump golang from 1.18.0 to 1.18.1 (#2069)
  * chore(deps): bump actions/stale from 4 to 5 (#2070)
  * chore(deps): bump sigstore/cosign-installer from 2.0.0 to 2.3.0 (#2072)
  * chore(deps): bump github.com/open-policy-agent/opa from 0.39.0 to 0.40.0 (#2079)
  * chore: app version 0.27.0 (#2046)
  * fix(misconf): added to skip conf files if their scanning is not enabled (#2066)
  * docs(secret) fix rule path in docs (#2061)
  * docs: change from go.sum to go.mod (#2056)</changelog>
  <changelog author="kastl@b1-systems.de" date="1655899200">- Update to version 0.29.0:
  * fix(lang): fix dependency graph in client server mode (#2336)
  * feat: allow expiration date for .trivyignore entries (#2332)
  * feat(lang): add dependency origin graph (#1970)
  * docs: update nix installation info (#2331)
  * feat: add rbac scanning support (#2328)
  * refactor: move WordPress module to another repository (#2329)
  * ci: add support for ppc64le (#2281)
  * feat: add support for WASM modules (#2195)
  * feat(secret): show recommendation for slow scanning (#2051)
  * fix(flag): remove --clear-cache flag client mode (#2301)
  * fix(java): added check for looping for variable evaluation in pom file (#2322)
  * BREAKING(k8s): change CLI API (#2186)
  * feat(alpine): add Alpine Linux 3.16 (#2319)
  * docs: bump trivy-operator to v0.0.7 (#2320)
  * ci: add `go mod tidy` check (#2314)
  * chore: run `go mod tidy` (#2313)
  * fix: do not exit if one resource is not found (#2311)
  * feat(cli): use stderr for all log messages (resolve #381) (#2289)
  * test: replace deprecated subcommand client in integration tests (#2308)
  * feat: add support for containerd (#2305)
  * fix(kubernetes): Support floats in manifest yaml (#2297)
  * docs(kubernetes): dead links (#2307)
  * chore: add license label (#2304)
  * feat(mariner): added support for CBL-Mariner Distroless v2.0 (#2293)
  * feat(helm): add pod annotations (#2272)
  * refactor: do not import defsec in fanal types package (#2292)
  * feat(report): Add misconfiguration support to ASFF report template (#2285)
  * test: use images in GHCR (#2275)
  * feat(helm): support pod annotations (#2265)
  * feat(misconf): Helm chart scanning (#2269)
  * docs: Update custom rego policy docs to reflect latest defsec/fanal changes (#2267)
  * fix: mask redis credentials when logging (#2264)
  * refactor: extract commands Runner interface (#2147)
  * chore(deps): bump alpine from 3.15.4 to 3.16.0 (#2234)
  * chore(deps): bump github.com/CycloneDX/cyclonedx-go from 0.5.2 to 0.6.0 (#2245)
  * docs: update operator release (#2263)
  * chore(deps): bump github.com/urfave/cli/v2 from 2.6.0 to 2.8.1 (#2243)
  * feat(redhat): added architecture check (#2172)
  * docs: updating links in the docs to work again (#2256)
  * docs: fix readme (#2251)
  * fix: fixed incorrect CycloneDX output format (#2255)
  * chore(deps): bump github.com/caarlos0/env/v6 from 6.9.1 to 6.9.3 (#2241)
  * chore(deps): bump github.com/samber/lo from 1.19.0 to 1.21.0 (#2242)
  * chore(deps): bump goreleaser/goreleaser-action from 2 to 3 (#2240)
  * chore(deps): bump docker/setup-buildx-action from 1 to 2 (#2238)
  * chore(deps): bump docker/setup-qemu-action from 1 to 2 (#2236)
  * chore(deps): bump golang from 1.18.1 to 1.18.2 (#2235)
  * chore(deps): bump golangci/golangci-lint-action from 3.1.0 to 3.2.0 (#2237)
  * chore(deps): bump docker/login-action from 1 to 2 (#2239)
  * chore(deps): bump github.com/hashicorp/go-getter from 1.5.11 to 1.6.1 (#2246)
  * refactor(deps): move dependencies to package (#2189)
  * fix(report): change github format version to required (#2229)
  * docs: update readme (#2110)
  * docs: added information about choosing advisory database (#2212)
  * chore: update trivy-kubernetes (#2224)
  * docs: clarifying parts of the k8s docs and updating links (#2222)
  * fix(k8s): timeout error logging (#2179)
  * chore(deps): updated fanal after fix AsymmetricPrivateKeys (#2214)
  * feat(k8s): add --context flag (#2171)
  * fix(k8s): properly instantiate TableWriter (#2175)
  * test: fixed integration tests after updating testcontainers to v0.13.0 (#2208)
  * chore: update labels (#2197)
  * fix(report): fixed panic if all misconf reports were removed in filter (#2188)
  * feat(k8s): scan secrets (#2178)
  * feat(report): GitHub Dependency Snapshots support (#1522)
  * feat(db): added insecure skip tls verify to download trivy db (#2140)
  * fix(redhat): always use vulns with fixed version if there is one (#2165)
  * chore(redhat): Add support for Red Hat UBI 9. (#2183)
  * fix(k8s): update trivy-kubernetes (#2163)
  * fix misconfig start line for code quality tpl (#2181)
  * fix: update docker/distribution from 2.8.0 to 2.8.1 (#2176)
  * docs(vuln): Include GitLab 15.0 integration (#2153)
  * docs: fix the operator version (#2167)
  * fix(k8s): summary report when when only vulns exit (#2146)
  * chore(deps): Update fanal to get defsec v0.58.2 (fixes false positives in ksv038) (#2156)
  * perf(misconf): Improve performance when scanning very large files (#2152)
  * docs(misconf): Update examples and docs to refer to builtin/defsec instead of appshield (#2150)
  * chore(deps): Update fanal (for less verbose code in misconf results) (#2151)
  * docs: fixed installation instruction for rhel/centos (#2143)</changelog>
  <changelog author="kastl@b1-systems.de" date="1655899201">- Update to version 0.29.1:
  * fix(report): add required fields to the SARIF template (#2341)
  * chore: fix spelling errors (#2352)
  * Omit Remediation if PrimaryURL is empty (#2006)
  * docs(repo): Link to installation documentation in readme shows 404 (#2348)
  * feat(alma): support for scanning of modular packages for AlmaLinux (#2347)</changelog>
  <changelog author="dmueller@suse.com" date="1657281600">- Update to version 0.29.2:
  * chore: skip Visual Studio Code project folder (#2379)
  * fix(helm): handle charts with templated names (#2374)
  * docs: redirect operator docs to trivy-operator repo (#2372)
  * fix(secret): use secret result when determining Failed status (#2370)
  * try removing libdb-dev
  * run integration tests in fanal
  * use same testing images in fanal
  * feat(helm): add support for trivy dbRepository (#2345)
  * fix: Fix failing test due to deref lint issue
  * test: Fix broken test
  * fix: Fix makefile when no previous named ref is visible in a shallow clone
  * chore: Fix linting issues in fanal
  * refactor: Fix fanal import paths and remove dotfiles
  * chore: bump defsec version v0.68.1</changelog>
  <changelog author="kastl@b1-systems.de" date="1657972800">- Update to version 0.30.0:
  * fix: separating multiple licenses from one line in dpkg copyright files (#2508)
  * fix: change a capital letter for `plugin uninstall` subcommand (#2519)
  * fix: k8s hide empty report when scanning resource (#2517)
  * refactor: fix comments (#2516)
  * fix: scan vendor dir (#2515)
  * feat: Add support for license scanning (#2418)
  * chore: add owners for secret scanning (#2485)
  * fix: remove dependency-tree flag for image subcommand (#2492)
  * fix(k8s): add shorthand for k8s namespace flag (#2495)
  * docs: add information about using multiple servers to troubleshooting (#2498)
  * ci: add pushing canary build images to registries (#2428)
  * chore(deps): bump github.com/open-policy-agent/opa from 0.41.0 to 0.42.0 (#2479)
  * feat(dotnet): add support for .Net core .deps.json files (#2487)
  * feat(amazon): add support for 2022 version (#2429)
  * Type correction bitnami chart (#2415)
  * chore(deps): bump github.com/owenrumney/go-sarif/v2 from 2.1.1 to 2.1.2 (#2449)
  * chore(deps): bump github.com/aquasecurity/table from 1.5.1 to 1.6.0 (#2446)
  * docs: add config file and update CLI references (#2489)
  * feat: add support for flag groups (#2488)
  * refactor: move from urfave/cli to spf13/cobra (#2458)
  * fix: Fix secrets output not containing file/lines (#2467)
  * fix: clear output with modules (#2478)
  * chore(deps): bump github.com/mailru/easyjson from 0.7.6 to 0.7.7 (#2448)
  * docs(cbl): distroless 1.0 supported (#2473)
  * fix: Fix example dockerfile rego policy (#2460)
  * fix(config): add helm to list of config analyzers (#2457)
  * feat: k8s resouces scan (#2395)
  * feat(sbom): add cyclonedx sbom scan (#2203)
  * chore(deps): bump wazero to latest main (#2436)
  * chore(deps): bump github.com/stretchr/testify from 1.7.3 to 1.8.0 (#2444)
  * chore(deps): bump github.com/alicebob/miniredis/v2 from 2.21.0 to 2.22.0 (#2445)
  * chore(deps): bump sigstore/cosign-installer from 2.3.0 to 2.4.1 (#2442)
  * chore(deps): bump actions/setup-python from 3 to 4 (#2441)
  * chore(deps): bump github.com/Azure/azure-sdk-for-go (#2450)
  * docs: remove links to removed content (#2431)
  * ci: added rpm build for rhel 9 (#2437)
  * fix(secret): remove space from asymmetric private key (#2434)
  * chore(deps): bump actions/cache from 3.0.2 to 3.0.4 (#2440)
  * chore(deps): bump helm/kind-action from 1.2.0 to 1.3.0 (#2439)
  * chore(deps): bump golang from 1.18.2 to 1.18.3 (#2438)
  * chore(deps): bump github.com/aws/aws-sdk-go from 1.44.25 to 1.44.46 (#2447)
  * test(integration): fix golden files for debian 9 (#2435)
  * fix(cli): fix version string in docs link when secret scanning is enabled (#2422)
  * refactor: move CycloneDX marshaling (#2420)
  * docs(nodejs): add docs about pnpm support (#2423)
  * docs: improve k8s usage documentation (#2425)
  * feat: Make secrets scanning output consistant (#2410)
  * ci: create canary build after main branch changes  (#1638)
  * fix(misconf): skip broken scans (#2396)
  * feat(nodejs): add pnpm support (#2414)
  * fix: Fix false positive for use of COS images (#2413)
  * eliminate nerdctl dependency (#2412)
  * Add EOL date for SUSE SLES 15.3, 15.4 and OpenSUSE 15.4 (#2403)
  * fix(go): no cast to lowercase go package names (#2401)
  * BREAKING(sbom): change 'trivy sbom' to scan SBOM (#2408)
  * fix(server): hot update the db from custom repository (#2406)
  * feat: added license parser for dpkg (#2381)
  * chore(helm): bump appVersion to latest release (#2397)
  * fix(misconf): Update defsec (v0.68.5) to fix docker rego duplicate key (#2400)
  * feat: extract stripe publishable and secret keys (#2392)
  * feat: rbac support k8s sub-command (#2339)
  * feat(ruby): drop platform strings from dependency versions bundled with bundler v2 (#2390)
  * docs: Updating README with new CLI command (#2359)
  * fix(misconf): Update defsec to v0.68.4 to resolve CF detection bug (#2383)
  * chore: add integration label and merge security label (#2316)</changelog>
  <changelog author="kastl@b1-systems.de" date="1658318400">- Update to version 0.30.1:
  * chore: remove a test repository (#2551)
  * fix(license): lazy loading of classifiers (#2547)
  * fix: CVE-2022-1996 in Trivy (#2499)
  * docs(sbom): add sbom attestation (#2527)
  * feat(rocky): set Rocky Linux 9 EOL (#2543)
  * docs: add attributes to the video tag to autoplay demo videos (#2538)
  * fix: yaml files with non-string chart name (#2534)
  * fix: skip dirs (#2530)
  * feat(repo): add support for branch, commit, &amp; tag (#2494)
  * fix: remove auto configure environment variables via viper (#2526)</changelog>
  <changelog author="kastl@b1-systems.de" date="1658404800">- Update to version 0.30.2:
  * fix(report): show the summary without results (#2548)
  * fix(cli): replace '-' to '_' for env vars (#2561)</changelog>
  <changelog author="kastl@b1-systems.de" date="1658836800">- Update to version 0.30.3:
  * fix(server): use a new db worker for hot updates (#2581)
  * docs: add trivy with download-db-only flag to Air-Gapped Environment (#2583)
  * docs: split commands to download db for different versions of oras (#2582)
  * feat(report): export exitcode for license checks (#2564)
  * fix: cli can use lowercase for severities (#2565)
  * fix: allow subcommands with TRIVY_RUN_AS_PLUGIN (#2577)
  * fix: add missing types in TypeOSes and TypeLanguages in analyzer (#2569)
  * fix: enable some features of the wasm runtime (#2575)
  * fix(k8s): no error logged if trivy can't get docker image in kubernetes mode (#2521)
  * docs(sbom): improve sbom attestation documentation (#2566)</changelog>
  <changelog author="kastl@b1-systems.de" date="1658923200">- Update to version 0.30.4:
  * fix: remove the first arg when running as a plugin (#2595)
  * fix: k8s controlplaner scanning (#2593)
  * fix(vuln): GitLab report template (#2578)</changelog>
</package>
<package pkgid="a7b987f57b12bfcab6eaddaa4e5c72695c5aaa2629f3caffe6758f0cce490bfe" name="trivy" arch="s390x">
  <version epoch="0" ver="0.30.4" rel="bp154.2.6.1"/>
  <changelog author="kastl@b1-systems.de" date="1647604800">- Update to version 0.24.4:
  * fix(docker): Getting images without a tag (#1852)
  * docs(gitlab-ci): Use environment variables TRIVY_CACHE_DIR and TRIVY_NO_PROGRESS (#1801)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1647950400">- tie to go.17 as 1.18 became available</changelog>
  <changelog author="kastl@b1-systems.de" date="1648814400">- Update to version 0.25.0:
  * docs(filter vulnerabilities): fix link (#1880)
  * feat(template) Add misconfigurations to gitlab codequality report (#1756)
  * fix(rpc): add PkgPath field to client / server mode (#1643)
  * fix(vulnerabilities): fixed trivy-db vulns (#1883)
  * feat(cache): remove temporary cache after filesystem scanning (#1868)
  * feat(sbom): add a dedicated sbom command (#1799)
  * feat(cyclonedx): add vulnerabilities (#1832)
  * fix(option): hide false warning about remote options (#1865)
  * chore: bump up Go to 1.18 (#1862)
  * feat(filesystem): scan in client/server mode (#1829)
  * refactor(template): remove unused test (#1861)
  * fix(cli): json format for trivy version (#1854)
  * docs: change URL for tfsec-checks (#1857)</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1648814401">- Buildrequire go1.18 as upstream says in go.mod</changelog>
  <changelog author="kastl@b1-systems.de" date="1649160000">- Update to version 0.25.1:
  * fix(misconf): update defsec to resolve panics (#1935)
  * chore(deps): bump github.com/docker/docker (#1924)
  * docs: restructure the documentation (#1887)
  * chore(deps): bump github.com/urfave/cli/v2 from 2.3.0 to 2.4.0 (#1923)
  * chore(deps): bump actions/cache from 2 to 3.0.1 (#1920)
  * chore(deps): bump actions/checkout from 2 to 3 (#1916)
  * chore(deps): bump github.com/open-policy-agent/opa from 0.37.2 to 0.39.0 (#1921)
  * chore(deps): bump sigstore/cosign-installer from 2.0.0 to 2.1.0 (#1919)
  * chore(deps): bump helm/chart-testing-action from 2.2.0 to 2.2.1 (#1918)
  * chore(deps): bump golang from 1.17 to 1.18.0 (#1915)
  * Add trivy horizontal logo (#1932)
  * chore(deps): bump alpine from 3.15.0 to 3.15.3 (#1917)
  * chore(deps): bump github.com/go-redis/redis/v8 from 8.11.4 to 8.11.5 (#1925)
  * chore(deps): bump github.com/stretchr/testify from 1.7.0 to 1.7.1 (#1927)
  * feat(db): Add dbRepository flag to get advisory database from OCI registry (#1873)</changelog>
  <changelog author="kastl@b1-systems.de" date="1649246400">- Update to version 0.25.2:
  * fix(downloadDB): add flag to server command (#1942)</changelog>
  <changelog author="kastl@b1-systems.de" date="1649246401">- Update to version 0.25.3:
  * fix(downloadDB): add dbRepositoryFlag to repository and rootfs commands (#1956)
  * fix(misconf): update BurntSushi/toml for fix runtime error (#1948)
  * fix(misconf): Update fanal/defsec to resolve missing metadata issues (#1947)
  * feat(jar): allow setting Maven Central URL using environment variable (#1939)
  * chore(chart): update Trivy version in HelmChart to 0.25.0 (#1931)
  * chore(chart): remove version comments (#1933)</changelog>
  <changelog author="kastl@b1-systems.de" date="1649937600">- Update to version 0.25.4:
  * docs: move CONTRIBUTING.md to docs (#1971)
  * refactor(table): use file name instead package path (#1966)
  * fix(sbom): add --db-repository (#1964)
  * feat(table): add PkgPath in table result (#1960)
  * fix(pom): merge multiple pom imports in a good manner (#1959)</changelog>
  <changelog author="kastl@b1-systems.de" date="1650110400">- Update to version 0.26.0:
  * feat(alpine): warn mixing versions (#2000)
  * Update ASFF template (#1914)
  * chore(deps): replace `containerd/containerd` version to fix CVE-2022-23648 (#1994)
  * chore(deps): bump alpine from 3.15.3 to 3.15.4 (#1993)
  * test(go): add integration tests for gomod (#1989)
  * fix(python): fixed panic when scan .egg archive (#1992)
  * fix(go): set correct go modules type (#1990)
  * feat(alpine): support apk repositories (#1987)
  * docs: add CBL-Mariner (#1982)
  * docs(go): fix version (#1986)
  * feat(go): support go.mod in Go 1.17+ (#1985)
  * ci: fix URLs in the PR template (#1972)
  * ci: add semantic pull requests check (#1968)
  * docs(issue): added docs for wrong detection issues (#1961)</changelog>
  <changelog author="kastl@b1-systems.de" date="1650974400">- Update to version 0.27.0:
  * fix(go): fixed panic to scan gomod without version (#2038)
  * docs(mariner): confirm it works with Mariner 2.0 VM (#2036)
  * feat(secret): support enable rules (#2035)
  * chore: app version 26.0 (#2030)
  * docs(secret): add a demo movie (#2031)
  * feat: support cache TTL in Redis (#2021)
  * fix(go): skip system installed binaries (#2028)
  * fix(go): check if go.sum is nil (#2029)
  * feat: add secret scanning (#1901)
  * chore: gh publish only with push the tag release (#2025)
  * fix(fs): ignore permission errors (#2022)
  * test(mod): using correct module inside test go.mod (#2020)
  * feat(server): re-add proxy support for client/server communications (#1995)
  * fix(report): truncate a description before escaping in ASFF template (#2004)
  * fix(cloudformation): correct margin removal for empty lines (#2002)
  * fix(template): correct check of old sarif template files (#2003)</changelog>
  <changelog author="kastl@b1-systems.de" date="1651060800">- Update to version 0.27.1:
  * chore(deps): bump github.com/CycloneDX/cyclonedx-go from 0.5.0 to 0.5.1 (#1926)
  * refactor(fs): scanner options (#2050)
  * feat(secret): truncate long line (#2052)
  * docs: fix a broken bullets (#2042)
  * feat(ubuntu): add 22.04 approx eol date (#2044)
  * docs: update installation.md (#2027)
  * docs: add Containerfile (#2032)</changelog>
  <changelog author="dmueller@suse.com" date="1653307200">- Update to version 0.28.0 (bsc#1199760, CVE-2022-28946):
  * fix: remove Highlighted from json output (#2131)
  * fix: remove trivy-kubernetes replace (#2132)
  * docs: Add Operator docs under Kubernetes section (#2111)
  * fix(k8s): security-checks panic (#2127)
  * ci: added k8s scope (#2130)
  * docs: Update misconfig output in examples (#2128)
  * fix(misconf): Fix coloured output in Goland terminal (#2126)
  * docs(secret): Fix default value of --security-checks in docs (#2107)
  * refactor(report): move colorize function from trivy-db (#2122)
  * feat: k8s resource scanning (#2118)
  * chore: add CODEOWNERS (#2121)
  * feat(image): add `--server` option for remote scans (#1871)
  * refactor: k8s (#2116)
  * refactor: export useful APIs (#2108)
  * docs: fix k8s doc (#2114)
  * feat(kubernetes): Add report flag for summary (#2112)
  * fix: Remove problematic advanced rego policies (#2113)
  * feat(misconf): Add special output format for misconfigurations (#2100)
  * feat:  add k8s subcommand (#2065)
  * chore: fix make lint version (#2102)
  * fix(java): handle relative pom modules (#2101)
  * fix(misconf): Add missing links for non-rego misconfig results (#2094)
  * feat(misconf): Added fs.FS based scanning via latest defsec (#2084)
  * chore(deps): bump trivy-issue-action to v0.0.4 (#2091)
  * chore(deps): bump github.com/twitchtv/twirp (#2077)
  * chore(deps): bump github.com/urfave/cli/v2 from 2.4.0 to 2.5.1 (#2074)
  * chore(os): updated fanal version and alpine distroless test (#2086)
  * chore(deps): bump github.com/CycloneDX/cyclonedx-go from 0.5.1 to 0.5.2 (#2075)
  * chore(deps): bump github.com/samber/lo from 1.16.0 to 1.19.0 (#2076)
  * feat(report): add support for SPDX (#2059)
  * chore(deps): bump actions/setup-go from 2 to 3 (#2073)
  * chore(deps): bump actions/cache from 3.0.1 to 3.0.2 (#2071)
  * chore(deps): bump golang from 1.18.0 to 1.18.1 (#2069)
  * chore(deps): bump actions/stale from 4 to 5 (#2070)
  * chore(deps): bump sigstore/cosign-installer from 2.0.0 to 2.3.0 (#2072)
  * chore(deps): bump github.com/open-policy-agent/opa from 0.39.0 to 0.40.0 (#2079)
  * chore: app version 0.27.0 (#2046)
  * fix(misconf): added to skip conf files if their scanning is not enabled (#2066)
  * docs(secret) fix rule path in docs (#2061)
  * docs: change from go.sum to go.mod (#2056)</changelog>
  <changelog author="kastl@b1-systems.de" date="1655899200">- Update to version 0.29.0:
  * fix(lang): fix dependency graph in client server mode (#2336)
  * feat: allow expiration date for .trivyignore entries (#2332)
  * feat(lang): add dependency origin graph (#1970)
  * docs: update nix installation info (#2331)
  * feat: add rbac scanning support (#2328)
  * refactor: move WordPress module to another repository (#2329)
  * ci: add support for ppc64le (#2281)
  * feat: add support for WASM modules (#2195)
  * feat(secret): show recommendation for slow scanning (#2051)
  * fix(flag): remove --clear-cache flag client mode (#2301)
  * fix(java): added check for looping for variable evaluation in pom file (#2322)
  * BREAKING(k8s): change CLI API (#2186)
  * feat(alpine): add Alpine Linux 3.16 (#2319)
  * docs: bump trivy-operator to v0.0.7 (#2320)
  * ci: add `go mod tidy` check (#2314)
  * chore: run `go mod tidy` (#2313)
  * fix: do not exit if one resource is not found (#2311)
  * feat(cli): use stderr for all log messages (resolve #381) (#2289)
  * test: replace deprecated subcommand client in integration tests (#2308)
  * feat: add support for containerd (#2305)
  * fix(kubernetes): Support floats in manifest yaml (#2297)
  * docs(kubernetes): dead links (#2307)
  * chore: add license label (#2304)
  * feat(mariner): added support for CBL-Mariner Distroless v2.0 (#2293)
  * feat(helm): add pod annotations (#2272)
  * refactor: do not import defsec in fanal types package (#2292)
  * feat(report): Add misconfiguration support to ASFF report template (#2285)
  * test: use images in GHCR (#2275)
  * feat(helm): support pod annotations (#2265)
  * feat(misconf): Helm chart scanning (#2269)
  * docs: Update custom rego policy docs to reflect latest defsec/fanal changes (#2267)
  * fix: mask redis credentials when logging (#2264)
  * refactor: extract commands Runner interface (#2147)
  * chore(deps): bump alpine from 3.15.4 to 3.16.0 (#2234)
  * chore(deps): bump github.com/CycloneDX/cyclonedx-go from 0.5.2 to 0.6.0 (#2245)
  * docs: update operator release (#2263)
  * chore(deps): bump github.com/urfave/cli/v2 from 2.6.0 to 2.8.1 (#2243)
  * feat(redhat): added architecture check (#2172)
  * docs: updating links in the docs to work again (#2256)
  * docs: fix readme (#2251)
  * fix: fixed incorrect CycloneDX output format (#2255)
  * chore(deps): bump github.com/caarlos0/env/v6 from 6.9.1 to 6.9.3 (#2241)
  * chore(deps): bump github.com/samber/lo from 1.19.0 to 1.21.0 (#2242)
  * chore(deps): bump goreleaser/goreleaser-action from 2 to 3 (#2240)
  * chore(deps): bump docker/setup-buildx-action from 1 to 2 (#2238)
  * chore(deps): bump docker/setup-qemu-action from 1 to 2 (#2236)
  * chore(deps): bump golang from 1.18.1 to 1.18.2 (#2235)
  * chore(deps): bump golangci/golangci-lint-action from 3.1.0 to 3.2.0 (#2237)
  * chore(deps): bump docker/login-action from 1 to 2 (#2239)
  * chore(deps): bump github.com/hashicorp/go-getter from 1.5.11 to 1.6.1 (#2246)
  * refactor(deps): move dependencies to package (#2189)
  * fix(report): change github format version to required (#2229)
  * docs: update readme (#2110)
  * docs: added information about choosing advisory database (#2212)
  * chore: update trivy-kubernetes (#2224)
  * docs: clarifying parts of the k8s docs and updating links (#2222)
  * fix(k8s): timeout error logging (#2179)
  * chore(deps): updated fanal after fix AsymmetricPrivateKeys (#2214)
  * feat(k8s): add --context flag (#2171)
  * fix(k8s): properly instantiate TableWriter (#2175)
  * test: fixed integration tests after updating testcontainers to v0.13.0 (#2208)
  * chore: update labels (#2197)
  * fix(report): fixed panic if all misconf reports were removed in filter (#2188)
  * feat(k8s): scan secrets (#2178)
  * feat(report): GitHub Dependency Snapshots support (#1522)
  * feat(db): added insecure skip tls verify to download trivy db (#2140)
  * fix(redhat): always use vulns with fixed version if there is one (#2165)
  * chore(redhat): Add support for Red Hat UBI 9. (#2183)
  * fix(k8s): update trivy-kubernetes (#2163)
  * fix misconfig start line for code quality tpl (#2181)
  * fix: update docker/distribution from 2.8.0 to 2.8.1 (#2176)
  * docs(vuln): Include GitLab 15.0 integration (#2153)
  * docs: fix the operator version (#2167)
  * fix(k8s): summary report when when only vulns exit (#2146)
  * chore(deps): Update fanal to get defsec v0.58.2 (fixes false positives in ksv038) (#2156)
  * perf(misconf): Improve performance when scanning very large files (#2152)
  * docs(misconf): Update examples and docs to refer to builtin/defsec instead of appshield (#2150)
  * chore(deps): Update fanal (for less verbose code in misconf results) (#2151)
  * docs: fixed installation instruction for rhel/centos (#2143)</changelog>
  <changelog author="kastl@b1-systems.de" date="1655899201">- Update to version 0.29.1:
  * fix(report): add required fields to the SARIF template (#2341)
  * chore: fix spelling errors (#2352)
  * Omit Remediation if PrimaryURL is empty (#2006)
  * docs(repo): Link to installation documentation in readme shows 404 (#2348)
  * feat(alma): support for scanning of modular packages for AlmaLinux (#2347)</changelog>
  <changelog author="dmueller@suse.com" date="1657281600">- Update to version 0.29.2:
  * chore: skip Visual Studio Code project folder (#2379)
  * fix(helm): handle charts with templated names (#2374)
  * docs: redirect operator docs to trivy-operator repo (#2372)
  * fix(secret): use secret result when determining Failed status (#2370)
  * try removing libdb-dev
  * run integration tests in fanal
  * use same testing images in fanal
  * feat(helm): add support for trivy dbRepository (#2345)
  * fix: Fix failing test due to deref lint issue
  * test: Fix broken test
  * fix: Fix makefile when no previous named ref is visible in a shallow clone
  * chore: Fix linting issues in fanal
  * refactor: Fix fanal import paths and remove dotfiles
  * chore: bump defsec version v0.68.1</changelog>
  <changelog author="kastl@b1-systems.de" date="1657972800">- Update to version 0.30.0:
  * fix: separating multiple licenses from one line in dpkg copyright files (#2508)
  * fix: change a capital letter for `plugin uninstall` subcommand (#2519)
  * fix: k8s hide empty report when scanning resource (#2517)
  * refactor: fix comments (#2516)
  * fix: scan vendor dir (#2515)
  * feat: Add support for license scanning (#2418)
  * chore: add owners for secret scanning (#2485)
  * fix: remove dependency-tree flag for image subcommand (#2492)
  * fix(k8s): add shorthand for k8s namespace flag (#2495)
  * docs: add information about using multiple servers to troubleshooting (#2498)
  * ci: add pushing canary build images to registries (#2428)
  * chore(deps): bump github.com/open-policy-agent/opa from 0.41.0 to 0.42.0 (#2479)
  * feat(dotnet): add support for .Net core .deps.json files (#2487)
  * feat(amazon): add support for 2022 version (#2429)
  * Type correction bitnami chart (#2415)
  * chore(deps): bump github.com/owenrumney/go-sarif/v2 from 2.1.1 to 2.1.2 (#2449)
  * chore(deps): bump github.com/aquasecurity/table from 1.5.1 to 1.6.0 (#2446)
  * docs: add config file and update CLI references (#2489)
  * feat: add support for flag groups (#2488)
  * refactor: move from urfave/cli to spf13/cobra (#2458)
  * fix: Fix secrets output not containing file/lines (#2467)
  * fix: clear output with modules (#2478)
  * chore(deps): bump github.com/mailru/easyjson from 0.7.6 to 0.7.7 (#2448)
  * docs(cbl): distroless 1.0 supported (#2473)
  * fix: Fix example dockerfile rego policy (#2460)
  * fix(config): add helm to list of config analyzers (#2457)
  * feat: k8s resouces scan (#2395)
  * feat(sbom): add cyclonedx sbom scan (#2203)
  * chore(deps): bump wazero to latest main (#2436)
  * chore(deps): bump github.com/stretchr/testify from 1.7.3 to 1.8.0 (#2444)
  * chore(deps): bump github.com/alicebob/miniredis/v2 from 2.21.0 to 2.22.0 (#2445)
  * chore(deps): bump sigstore/cosign-installer from 2.3.0 to 2.4.1 (#2442)
  * chore(deps): bump actions/setup-python from 3 to 4 (#2441)
  * chore(deps): bump github.com/Azure/azure-sdk-for-go (#2450)
  * docs: remove links to removed content (#2431)
  * ci: added rpm build for rhel 9 (#2437)
  * fix(secret): remove space from asymmetric private key (#2434)
  * chore(deps): bump actions/cache from 3.0.2 to 3.0.4 (#2440)
  * chore(deps): bump helm/kind-action from 1.2.0 to 1.3.0 (#2439)
  * chore(deps): bump golang from 1.18.2 to 1.18.3 (#2438)
  * chore(deps): bump github.com/aws/aws-sdk-go from 1.44.25 to 1.44.46 (#2447)
  * test(integration): fix golden files for debian 9 (#2435)
  * fix(cli): fix version string in docs link when secret scanning is enabled (#2422)
  * refactor: move CycloneDX marshaling (#2420)
  * docs(nodejs): add docs about pnpm support (#2423)
  * docs: improve k8s usage documentation (#2425)
  * feat: Make secrets scanning output consistant (#2410)
  * ci: create canary build after main branch changes  (#1638)
  * fix(misconf): skip broken scans (#2396)
  * feat(nodejs): add pnpm support (#2414)
  * fix: Fix false positive for use of COS images (#2413)
  * eliminate nerdctl dependency (#2412)
  * Add EOL date for SUSE SLES 15.3, 15.4 and OpenSUSE 15.4 (#2403)
  * fix(go): no cast to lowercase go package names (#2401)
  * BREAKING(sbom): change 'trivy sbom' to scan SBOM (#2408)
  * fix(server): hot update the db from custom repository (#2406)
  * feat: added license parser for dpkg (#2381)
  * chore(helm): bump appVersion to latest release (#2397)
  * fix(misconf): Update defsec (v0.68.5) to fix docker rego duplicate key (#2400)
  * feat: extract stripe publishable and secret keys (#2392)
  * feat: rbac support k8s sub-command (#2339)
  * feat(ruby): drop platform strings from dependency versions bundled with bundler v2 (#2390)
  * docs: Updating README with new CLI command (#2359)
  * fix(misconf): Update defsec to v0.68.4 to resolve CF detection bug (#2383)
  * chore: add integration label and merge security label (#2316)</changelog>
  <changelog author="kastl@b1-systems.de" date="1658318400">- Update to version 0.30.1:
  * chore: remove a test repository (#2551)
  * fix(license): lazy loading of classifiers (#2547)
  * fix: CVE-2022-1996 in Trivy (#2499)
  * docs(sbom): add sbom attestation (#2527)
  * feat(rocky): set Rocky Linux 9 EOL (#2543)
  * docs: add attributes to the video tag to autoplay demo videos (#2538)
  * fix: yaml files with non-string chart name (#2534)
  * fix: skip dirs (#2530)
  * feat(repo): add support for branch, commit, &amp; tag (#2494)
  * fix: remove auto configure environment variables via viper (#2526)</changelog>
  <changelog author="kastl@b1-systems.de" date="1658404800">- Update to version 0.30.2:
  * fix(report): show the summary without results (#2548)
  * fix(cli): replace '-' to '_' for env vars (#2561)</changelog>
  <changelog author="kastl@b1-systems.de" date="1658836800">- Update to version 0.30.3:
  * fix(server): use a new db worker for hot updates (#2581)
  * docs: add trivy with download-db-only flag to Air-Gapped Environment (#2583)
  * docs: split commands to download db for different versions of oras (#2582)
  * feat(report): export exitcode for license checks (#2564)
  * fix: cli can use lowercase for severities (#2565)
  * fix: allow subcommands with TRIVY_RUN_AS_PLUGIN (#2577)
  * fix: add missing types in TypeOSes and TypeLanguages in analyzer (#2569)
  * fix: enable some features of the wasm runtime (#2575)
  * fix(k8s): no error logged if trivy can't get docker image in kubernetes mode (#2521)
  * docs(sbom): improve sbom attestation documentation (#2566)</changelog>
  <changelog author="kastl@b1-systems.de" date="1658923200">- Update to version 0.30.4:
  * fix: remove the first arg when running as a plugin (#2595)
  * fix: k8s controlplaner scanning (#2593)
  * fix(vuln): GitLab report template (#2578)</changelog>
</package>
<package pkgid="9ab2cc33abf297c56738e38de1dc979bd89572bdcf6718683fdaf5d2751292b5" name="trivy" arch="src">
  <version epoch="0" ver="0.30.4" rel="bp154.2.6.1"/>
  <changelog author="kastl@b1-systems.de" date="1647604800">- Update to version 0.24.4:
  * fix(docker): Getting images without a tag (#1852)
  * docs(gitlab-ci): Use environment variables TRIVY_CACHE_DIR and TRIVY_NO_PROGRESS (#1801)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1647950400">- tie to go.17 as 1.18 became available</changelog>
  <changelog author="kastl@b1-systems.de" date="1648814400">- Update to version 0.25.0:
  * docs(filter vulnerabilities): fix link (#1880)
  * feat(template) Add misconfigurations to gitlab codequality report (#1756)
  * fix(rpc): add PkgPath field to client / server mode (#1643)
  * fix(vulnerabilities): fixed trivy-db vulns (#1883)
  * feat(cache): remove temporary cache after filesystem scanning (#1868)
  * feat(sbom): add a dedicated sbom command (#1799)
  * feat(cyclonedx): add vulnerabilities (#1832)
  * fix(option): hide false warning about remote options (#1865)
  * chore: bump up Go to 1.18 (#1862)
  * feat(filesystem): scan in client/server mode (#1829)
  * refactor(template): remove unused test (#1861)
  * fix(cli): json format for trivy version (#1854)
  * docs: change URL for tfsec-checks (#1857)</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1648814401">- Buildrequire go1.18 as upstream says in go.mod</changelog>
  <changelog author="kastl@b1-systems.de" date="1649160000">- Update to version 0.25.1:
  * fix(misconf): update defsec to resolve panics (#1935)
  * chore(deps): bump github.com/docker/docker (#1924)
  * docs: restructure the documentation (#1887)
  * chore(deps): bump github.com/urfave/cli/v2 from 2.3.0 to 2.4.0 (#1923)
  * chore(deps): bump actions/cache from 2 to 3.0.1 (#1920)
  * chore(deps): bump actions/checkout from 2 to 3 (#1916)
  * chore(deps): bump github.com/open-policy-agent/opa from 0.37.2 to 0.39.0 (#1921)
  * chore(deps): bump sigstore/cosign-installer from 2.0.0 to 2.1.0 (#1919)
  * chore(deps): bump helm/chart-testing-action from 2.2.0 to 2.2.1 (#1918)
  * chore(deps): bump golang from 1.17 to 1.18.0 (#1915)
  * Add trivy horizontal logo (#1932)
  * chore(deps): bump alpine from 3.15.0 to 3.15.3 (#1917)
  * chore(deps): bump github.com/go-redis/redis/v8 from 8.11.4 to 8.11.5 (#1925)
  * chore(deps): bump github.com/stretchr/testify from 1.7.0 to 1.7.1 (#1927)
  * feat(db): Add dbRepository flag to get advisory database from OCI registry (#1873)</changelog>
  <changelog author="kastl@b1-systems.de" date="1649246400">- Update to version 0.25.2:
  * fix(downloadDB): add flag to server command (#1942)</changelog>
  <changelog author="kastl@b1-systems.de" date="1649246401">- Update to version 0.25.3:
  * fix(downloadDB): add dbRepositoryFlag to repository and rootfs commands (#1956)
  * fix(misconf): update BurntSushi/toml for fix runtime error (#1948)
  * fix(misconf): Update fanal/defsec to resolve missing metadata issues (#1947)
  * feat(jar): allow setting Maven Central URL using environment variable (#1939)
  * chore(chart): update Trivy version in HelmChart to 0.25.0 (#1931)
  * chore(chart): remove version comments (#1933)</changelog>
  <changelog author="kastl@b1-systems.de" date="1649937600">- Update to version 0.25.4:
  * docs: move CONTRIBUTING.md to docs (#1971)
  * refactor(table): use file name instead package path (#1966)
  * fix(sbom): add --db-repository (#1964)
  * feat(table): add PkgPath in table result (#1960)
  * fix(pom): merge multiple pom imports in a good manner (#1959)</changelog>
  <changelog author="kastl@b1-systems.de" date="1650110400">- Update to version 0.26.0:
  * feat(alpine): warn mixing versions (#2000)
  * Update ASFF template (#1914)
  * chore(deps): replace `containerd/containerd` version to fix CVE-2022-23648 (#1994)
  * chore(deps): bump alpine from 3.15.3 to 3.15.4 (#1993)
  * test(go): add integration tests for gomod (#1989)
  * fix(python): fixed panic when scan .egg archive (#1992)
  * fix(go): set correct go modules type (#1990)
  * feat(alpine): support apk repositories (#1987)
  * docs: add CBL-Mariner (#1982)
  * docs(go): fix version (#1986)
  * feat(go): support go.mod in Go 1.17+ (#1985)
  * ci: fix URLs in the PR template (#1972)
  * ci: add semantic pull requests check (#1968)
  * docs(issue): added docs for wrong detection issues (#1961)</changelog>
  <changelog author="kastl@b1-systems.de" date="1650974400">- Update to version 0.27.0:
  * fix(go): fixed panic to scan gomod without version (#2038)
  * docs(mariner): confirm it works with Mariner 2.0 VM (#2036)
  * feat(secret): support enable rules (#2035)
  * chore: app version 26.0 (#2030)
  * docs(secret): add a demo movie (#2031)
  * feat: support cache TTL in Redis (#2021)
  * fix(go): skip system installed binaries (#2028)
  * fix(go): check if go.sum is nil (#2029)
  * feat: add secret scanning (#1901)
  * chore: gh publish only with push the tag release (#2025)
  * fix(fs): ignore permission errors (#2022)
  * test(mod): using correct module inside test go.mod (#2020)
  * feat(server): re-add proxy support for client/server communications (#1995)
  * fix(report): truncate a description before escaping in ASFF template (#2004)
  * fix(cloudformation): correct margin removal for empty lines (#2002)
  * fix(template): correct check of old sarif template files (#2003)</changelog>
  <changelog author="kastl@b1-systems.de" date="1651060800">- Update to version 0.27.1:
  * chore(deps): bump github.com/CycloneDX/cyclonedx-go from 0.5.0 to 0.5.1 (#1926)
  * refactor(fs): scanner options (#2050)
  * feat(secret): truncate long line (#2052)
  * docs: fix a broken bullets (#2042)
  * feat(ubuntu): add 22.04 approx eol date (#2044)
  * docs: update installation.md (#2027)
  * docs: add Containerfile (#2032)</changelog>
  <changelog author="dmueller@suse.com" date="1653307200">- Update to version 0.28.0 (bsc#1199760, CVE-2022-28946):
  * fix: remove Highlighted from json output (#2131)
  * fix: remove trivy-kubernetes replace (#2132)
  * docs: Add Operator docs under Kubernetes section (#2111)
  * fix(k8s): security-checks panic (#2127)
  * ci: added k8s scope (#2130)
  * docs: Update misconfig output in examples (#2128)
  * fix(misconf): Fix coloured output in Goland terminal (#2126)
  * docs(secret): Fix default value of --security-checks in docs (#2107)
  * refactor(report): move colorize function from trivy-db (#2122)
  * feat: k8s resource scanning (#2118)
  * chore: add CODEOWNERS (#2121)
  * feat(image): add `--server` option for remote scans (#1871)
  * refactor: k8s (#2116)
  * refactor: export useful APIs (#2108)
  * docs: fix k8s doc (#2114)
  * feat(kubernetes): Add report flag for summary (#2112)
  * fix: Remove problematic advanced rego policies (#2113)
  * feat(misconf): Add special output format for misconfigurations (#2100)
  * feat:  add k8s subcommand (#2065)
  * chore: fix make lint version (#2102)
  * fix(java): handle relative pom modules (#2101)
  * fix(misconf): Add missing links for non-rego misconfig results (#2094)
  * feat(misconf): Added fs.FS based scanning via latest defsec (#2084)
  * chore(deps): bump trivy-issue-action to v0.0.4 (#2091)
  * chore(deps): bump github.com/twitchtv/twirp (#2077)
  * chore(deps): bump github.com/urfave/cli/v2 from 2.4.0 to 2.5.1 (#2074)
  * chore(os): updated fanal version and alpine distroless test (#2086)
  * chore(deps): bump github.com/CycloneDX/cyclonedx-go from 0.5.1 to 0.5.2 (#2075)
  * chore(deps): bump github.com/samber/lo from 1.16.0 to 1.19.0 (#2076)
  * feat(report): add support for SPDX (#2059)
  * chore(deps): bump actions/setup-go from 2 to 3 (#2073)
  * chore(deps): bump actions/cache from 3.0.1 to 3.0.2 (#2071)
  * chore(deps): bump golang from 1.18.0 to 1.18.1 (#2069)
  * chore(deps): bump actions/stale from 4 to 5 (#2070)
  * chore(deps): bump sigstore/cosign-installer from 2.0.0 to 2.3.0 (#2072)
  * chore(deps): bump github.com/open-policy-agent/opa from 0.39.0 to 0.40.0 (#2079)
  * chore: app version 0.27.0 (#2046)
  * fix(misconf): added to skip conf files if their scanning is not enabled (#2066)
  * docs(secret) fix rule path in docs (#2061)
  * docs: change from go.sum to go.mod (#2056)</changelog>
  <changelog author="kastl@b1-systems.de" date="1655899200">- Update to version 0.29.0:
  * fix(lang): fix dependency graph in client server mode (#2336)
  * feat: allow expiration date for .trivyignore entries (#2332)
  * feat(lang): add dependency origin graph (#1970)
  * docs: update nix installation info (#2331)
  * feat: add rbac scanning support (#2328)
  * refactor: move WordPress module to another repository (#2329)
  * ci: add support for ppc64le (#2281)
  * feat: add support for WASM modules (#2195)
  * feat(secret): show recommendation for slow scanning (#2051)
  * fix(flag): remove --clear-cache flag client mode (#2301)
  * fix(java): added check for looping for variable evaluation in pom file (#2322)
  * BREAKING(k8s): change CLI API (#2186)
  * feat(alpine): add Alpine Linux 3.16 (#2319)
  * docs: bump trivy-operator to v0.0.7 (#2320)
  * ci: add `go mod tidy` check (#2314)
  * chore: run `go mod tidy` (#2313)
  * fix: do not exit if one resource is not found (#2311)
  * feat(cli): use stderr for all log messages (resolve #381) (#2289)
  * test: replace deprecated subcommand client in integration tests (#2308)
  * feat: add support for containerd (#2305)
  * fix(kubernetes): Support floats in manifest yaml (#2297)
  * docs(kubernetes): dead links (#2307)
  * chore: add license label (#2304)
  * feat(mariner): added support for CBL-Mariner Distroless v2.0 (#2293)
  * feat(helm): add pod annotations (#2272)
  * refactor: do not import defsec in fanal types package (#2292)
  * feat(report): Add misconfiguration support to ASFF report template (#2285)
  * test: use images in GHCR (#2275)
  * feat(helm): support pod annotations (#2265)
  * feat(misconf): Helm chart scanning (#2269)
  * docs: Update custom rego policy docs to reflect latest defsec/fanal changes (#2267)
  * fix: mask redis credentials when logging (#2264)
  * refactor: extract commands Runner interface (#2147)
  * chore(deps): bump alpine from 3.15.4 to 3.16.0 (#2234)
  * chore(deps): bump github.com/CycloneDX/cyclonedx-go from 0.5.2 to 0.6.0 (#2245)
  * docs: update operator release (#2263)
  * chore(deps): bump github.com/urfave/cli/v2 from 2.6.0 to 2.8.1 (#2243)
  * feat(redhat): added architecture check (#2172)
  * docs: updating links in the docs to work again (#2256)
  * docs: fix readme (#2251)
  * fix: fixed incorrect CycloneDX output format (#2255)
  * chore(deps): bump github.com/caarlos0/env/v6 from 6.9.1 to 6.9.3 (#2241)
  * chore(deps): bump github.com/samber/lo from 1.19.0 to 1.21.0 (#2242)
  * chore(deps): bump goreleaser/goreleaser-action from 2 to 3 (#2240)
  * chore(deps): bump docker/setup-buildx-action from 1 to 2 (#2238)
  * chore(deps): bump docker/setup-qemu-action from 1 to 2 (#2236)
  * chore(deps): bump golang from 1.18.1 to 1.18.2 (#2235)
  * chore(deps): bump golangci/golangci-lint-action from 3.1.0 to 3.2.0 (#2237)
  * chore(deps): bump docker/login-action from 1 to 2 (#2239)
  * chore(deps): bump github.com/hashicorp/go-getter from 1.5.11 to 1.6.1 (#2246)
  * refactor(deps): move dependencies to package (#2189)
  * fix(report): change github format version to required (#2229)
  * docs: update readme (#2110)
  * docs: added information about choosing advisory database (#2212)
  * chore: update trivy-kubernetes (#2224)
  * docs: clarifying parts of the k8s docs and updating links (#2222)
  * fix(k8s): timeout error logging (#2179)
  * chore(deps): updated fanal after fix AsymmetricPrivateKeys (#2214)
  * feat(k8s): add --context flag (#2171)
  * fix(k8s): properly instantiate TableWriter (#2175)
  * test: fixed integration tests after updating testcontainers to v0.13.0 (#2208)
  * chore: update labels (#2197)
  * fix(report): fixed panic if all misconf reports were removed in filter (#2188)
  * feat(k8s): scan secrets (#2178)
  * feat(report): GitHub Dependency Snapshots support (#1522)
  * feat(db): added insecure skip tls verify to download trivy db (#2140)
  * fix(redhat): always use vulns with fixed version if there is one (#2165)
  * chore(redhat): Add support for Red Hat UBI 9. (#2183)
  * fix(k8s): update trivy-kubernetes (#2163)
  * fix misconfig start line for code quality tpl (#2181)
  * fix: update docker/distribution from 2.8.0 to 2.8.1 (#2176)
  * docs(vuln): Include GitLab 15.0 integration (#2153)
  * docs: fix the operator version (#2167)
  * fix(k8s): summary report when when only vulns exit (#2146)
  * chore(deps): Update fanal to get defsec v0.58.2 (fixes false positives in ksv038) (#2156)
  * perf(misconf): Improve performance when scanning very large files (#2152)
  * docs(misconf): Update examples and docs to refer to builtin/defsec instead of appshield (#2150)
  * chore(deps): Update fanal (for less verbose code in misconf results) (#2151)
  * docs: fixed installation instruction for rhel/centos (#2143)</changelog>
  <changelog author="kastl@b1-systems.de" date="1655899201">- Update to version 0.29.1:
  * fix(report): add required fields to the SARIF template (#2341)
  * chore: fix spelling errors (#2352)
  * Omit Remediation if PrimaryURL is empty (#2006)
  * docs(repo): Link to installation documentation in readme shows 404 (#2348)
  * feat(alma): support for scanning of modular packages for AlmaLinux (#2347)</changelog>
  <changelog author="dmueller@suse.com" date="1657281600">- Update to version 0.29.2:
  * chore: skip Visual Studio Code project folder (#2379)
  * fix(helm): handle charts with templated names (#2374)
  * docs: redirect operator docs to trivy-operator repo (#2372)
  * fix(secret): use secret result when determining Failed status (#2370)
  * try removing libdb-dev
  * run integration tests in fanal
  * use same testing images in fanal
  * feat(helm): add support for trivy dbRepository (#2345)
  * fix: Fix failing test due to deref lint issue
  * test: Fix broken test
  * fix: Fix makefile when no previous named ref is visible in a shallow clone
  * chore: Fix linting issues in fanal
  * refactor: Fix fanal import paths and remove dotfiles
  * chore: bump defsec version v0.68.1</changelog>
  <changelog author="kastl@b1-systems.de" date="1657972800">- Update to version 0.30.0:
  * fix: separating multiple licenses from one line in dpkg copyright files (#2508)
  * fix: change a capital letter for `plugin uninstall` subcommand (#2519)
  * fix: k8s hide empty report when scanning resource (#2517)
  * refactor: fix comments (#2516)
  * fix: scan vendor dir (#2515)
  * feat: Add support for license scanning (#2418)
  * chore: add owners for secret scanning (#2485)
  * fix: remove dependency-tree flag for image subcommand (#2492)
  * fix(k8s): add shorthand for k8s namespace flag (#2495)
  * docs: add information about using multiple servers to troubleshooting (#2498)
  * ci: add pushing canary build images to registries (#2428)
  * chore(deps): bump github.com/open-policy-agent/opa from 0.41.0 to 0.42.0 (#2479)
  * feat(dotnet): add support for .Net core .deps.json files (#2487)
  * feat(amazon): add support for 2022 version (#2429)
  * Type correction bitnami chart (#2415)
  * chore(deps): bump github.com/owenrumney/go-sarif/v2 from 2.1.1 to 2.1.2 (#2449)
  * chore(deps): bump github.com/aquasecurity/table from 1.5.1 to 1.6.0 (#2446)
  * docs: add config file and update CLI references (#2489)
  * feat: add support for flag groups (#2488)
  * refactor: move from urfave/cli to spf13/cobra (#2458)
  * fix: Fix secrets output not containing file/lines (#2467)
  * fix: clear output with modules (#2478)
  * chore(deps): bump github.com/mailru/easyjson from 0.7.6 to 0.7.7 (#2448)
  * docs(cbl): distroless 1.0 supported (#2473)
  * fix: Fix example dockerfile rego policy (#2460)
  * fix(config): add helm to list of config analyzers (#2457)
  * feat: k8s resouces scan (#2395)
  * feat(sbom): add cyclonedx sbom scan (#2203)
  * chore(deps): bump wazero to latest main (#2436)
  * chore(deps): bump github.com/stretchr/testify from 1.7.3 to 1.8.0 (#2444)
  * chore(deps): bump github.com/alicebob/miniredis/v2 from 2.21.0 to 2.22.0 (#2445)
  * chore(deps): bump sigstore/cosign-installer from 2.3.0 to 2.4.1 (#2442)
  * chore(deps): bump actions/setup-python from 3 to 4 (#2441)
  * chore(deps): bump github.com/Azure/azure-sdk-for-go (#2450)
  * docs: remove links to removed content (#2431)
  * ci: added rpm build for rhel 9 (#2437)
  * fix(secret): remove space from asymmetric private key (#2434)
  * chore(deps): bump actions/cache from 3.0.2 to 3.0.4 (#2440)
  * chore(deps): bump helm/kind-action from 1.2.0 to 1.3.0 (#2439)
  * chore(deps): bump golang from 1.18.2 to 1.18.3 (#2438)
  * chore(deps): bump github.com/aws/aws-sdk-go from 1.44.25 to 1.44.46 (#2447)
  * test(integration): fix golden files for debian 9 (#2435)
  * fix(cli): fix version string in docs link when secret scanning is enabled (#2422)
  * refactor: move CycloneDX marshaling (#2420)
  * docs(nodejs): add docs about pnpm support (#2423)
  * docs: improve k8s usage documentation (#2425)
  * feat: Make secrets scanning output consistant (#2410)
  * ci: create canary build after main branch changes  (#1638)
  * fix(misconf): skip broken scans (#2396)
  * feat(nodejs): add pnpm support (#2414)
  * fix: Fix false positive for use of COS images (#2413)
  * eliminate nerdctl dependency (#2412)
  * Add EOL date for SUSE SLES 15.3, 15.4 and OpenSUSE 15.4 (#2403)
  * fix(go): no cast to lowercase go package names (#2401)
  * BREAKING(sbom): change 'trivy sbom' to scan SBOM (#2408)
  * fix(server): hot update the db from custom repository (#2406)
  * feat: added license parser for dpkg (#2381)
  * chore(helm): bump appVersion to latest release (#2397)
  * fix(misconf): Update defsec (v0.68.5) to fix docker rego duplicate key (#2400)
  * feat: extract stripe publishable and secret keys (#2392)
  * feat: rbac support k8s sub-command (#2339)
  * feat(ruby): drop platform strings from dependency versions bundled with bundler v2 (#2390)
  * docs: Updating README with new CLI command (#2359)
  * fix(misconf): Update defsec to v0.68.4 to resolve CF detection bug (#2383)
  * chore: add integration label and merge security label (#2316)</changelog>
  <changelog author="kastl@b1-systems.de" date="1658318400">- Update to version 0.30.1:
  * chore: remove a test repository (#2551)
  * fix(license): lazy loading of classifiers (#2547)
  * fix: CVE-2022-1996 in Trivy (#2499)
  * docs(sbom): add sbom attestation (#2527)
  * feat(rocky): set Rocky Linux 9 EOL (#2543)
  * docs: add attributes to the video tag to autoplay demo videos (#2538)
  * fix: yaml files with non-string chart name (#2534)
  * fix: skip dirs (#2530)
  * feat(repo): add support for branch, commit, &amp; tag (#2494)
  * fix: remove auto configure environment variables via viper (#2526)</changelog>
  <changelog author="kastl@b1-systems.de" date="1658404800">- Update to version 0.30.2:
  * fix(report): show the summary without results (#2548)
  * fix(cli): replace '-' to '_' for env vars (#2561)</changelog>
  <changelog author="kastl@b1-systems.de" date="1658836800">- Update to version 0.30.3:
  * fix(server): use a new db worker for hot updates (#2581)
  * docs: add trivy with download-db-only flag to Air-Gapped Environment (#2583)
  * docs: split commands to download db for different versions of oras (#2582)
  * feat(report): export exitcode for license checks (#2564)
  * fix: cli can use lowercase for severities (#2565)
  * fix: allow subcommands with TRIVY_RUN_AS_PLUGIN (#2577)
  * fix: add missing types in TypeOSes and TypeLanguages in analyzer (#2569)
  * fix: enable some features of the wasm runtime (#2575)
  * fix(k8s): no error logged if trivy can't get docker image in kubernetes mode (#2521)
  * docs(sbom): improve sbom attestation documentation (#2566)</changelog>
  <changelog author="kastl@b1-systems.de" date="1658923200">- Update to version 0.30.4:
  * fix: remove the first arg when running as a plugin (#2595)
  * fix: k8s controlplaner scanning (#2593)
  * fix(vuln): GitLab report template (#2578)</changelog>
</package>
<package pkgid="da64ac40ebc98eab3304b827f9252ea243137b529004c0cfcfc36725f7fabb74" name="trivy" arch="x86_64">
  <version epoch="0" ver="0.30.4" rel="bp154.2.6.1"/>
  <changelog author="kastl@b1-systems.de" date="1647604800">- Update to version 0.24.4:
  * fix(docker): Getting images without a tag (#1852)
  * docs(gitlab-ci): Use environment variables TRIVY_CACHE_DIR and TRIVY_NO_PROGRESS (#1801)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1647950400">- tie to go.17 as 1.18 became available</changelog>
  <changelog author="kastl@b1-systems.de" date="1648814400">- Update to version 0.25.0:
  * docs(filter vulnerabilities): fix link (#1880)
  * feat(template) Add misconfigurations to gitlab codequality report (#1756)
  * fix(rpc): add PkgPath field to client / server mode (#1643)
  * fix(vulnerabilities): fixed trivy-db vulns (#1883)
  * feat(cache): remove temporary cache after filesystem scanning (#1868)
  * feat(sbom): add a dedicated sbom command (#1799)
  * feat(cyclonedx): add vulnerabilities (#1832)
  * fix(option): hide false warning about remote options (#1865)
  * chore: bump up Go to 1.18 (#1862)
  * feat(filesystem): scan in client/server mode (#1829)
  * refactor(template): remove unused test (#1861)
  * fix(cli): json format for trivy version (#1854)
  * docs: change URL for tfsec-checks (#1857)</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1648814401">- Buildrequire go1.18 as upstream says in go.mod</changelog>
  <changelog author="kastl@b1-systems.de" date="1649160000">- Update to version 0.25.1:
  * fix(misconf): update defsec to resolve panics (#1935)
  * chore(deps): bump github.com/docker/docker (#1924)
  * docs: restructure the documentation (#1887)
  * chore(deps): bump github.com/urfave/cli/v2 from 2.3.0 to 2.4.0 (#1923)
  * chore(deps): bump actions/cache from 2 to 3.0.1 (#1920)
  * chore(deps): bump actions/checkout from 2 to 3 (#1916)
  * chore(deps): bump github.com/open-policy-agent/opa from 0.37.2 to 0.39.0 (#1921)
  * chore(deps): bump sigstore/cosign-installer from 2.0.0 to 2.1.0 (#1919)
  * chore(deps): bump helm/chart-testing-action from 2.2.0 to 2.2.1 (#1918)
  * chore(deps): bump golang from 1.17 to 1.18.0 (#1915)
  * Add trivy horizontal logo (#1932)
  * chore(deps): bump alpine from 3.15.0 to 3.15.3 (#1917)
  * chore(deps): bump github.com/go-redis/redis/v8 from 8.11.4 to 8.11.5 (#1925)
  * chore(deps): bump github.com/stretchr/testify from 1.7.0 to 1.7.1 (#1927)
  * feat(db): Add dbRepository flag to get advisory database from OCI registry (#1873)</changelog>
  <changelog author="kastl@b1-systems.de" date="1649246400">- Update to version 0.25.2:
  * fix(downloadDB): add flag to server command (#1942)</changelog>
  <changelog author="kastl@b1-systems.de" date="1649246401">- Update to version 0.25.3:
  * fix(downloadDB): add dbRepositoryFlag to repository and rootfs commands (#1956)
  * fix(misconf): update BurntSushi/toml for fix runtime error (#1948)
  * fix(misconf): Update fanal/defsec to resolve missing metadata issues (#1947)
  * feat(jar): allow setting Maven Central URL using environment variable (#1939)
  * chore(chart): update Trivy version in HelmChart to 0.25.0 (#1931)
  * chore(chart): remove version comments (#1933)</changelog>
  <changelog author="kastl@b1-systems.de" date="1649937600">- Update to version 0.25.4:
  * docs: move CONTRIBUTING.md to docs (#1971)
  * refactor(table): use file name instead package path (#1966)
  * fix(sbom): add --db-repository (#1964)
  * feat(table): add PkgPath in table result (#1960)
  * fix(pom): merge multiple pom imports in a good manner (#1959)</changelog>
  <changelog author="kastl@b1-systems.de" date="1650110400">- Update to version 0.26.0:
  * feat(alpine): warn mixing versions (#2000)
  * Update ASFF template (#1914)
  * chore(deps): replace `containerd/containerd` version to fix CVE-2022-23648 (#1994)
  * chore(deps): bump alpine from 3.15.3 to 3.15.4 (#1993)
  * test(go): add integration tests for gomod (#1989)
  * fix(python): fixed panic when scan .egg archive (#1992)
  * fix(go): set correct go modules type (#1990)
  * feat(alpine): support apk repositories (#1987)
  * docs: add CBL-Mariner (#1982)
  * docs(go): fix version (#1986)
  * feat(go): support go.mod in Go 1.17+ (#1985)
  * ci: fix URLs in the PR template (#1972)
  * ci: add semantic pull requests check (#1968)
  * docs(issue): added docs for wrong detection issues (#1961)</changelog>
  <changelog author="kastl@b1-systems.de" date="1650974400">- Update to version 0.27.0:
  * fix(go): fixed panic to scan gomod without version (#2038)
  * docs(mariner): confirm it works with Mariner 2.0 VM (#2036)
  * feat(secret): support enable rules (#2035)
  * chore: app version 26.0 (#2030)
  * docs(secret): add a demo movie (#2031)
  * feat: support cache TTL in Redis (#2021)
  * fix(go): skip system installed binaries (#2028)
  * fix(go): check if go.sum is nil (#2029)
  * feat: add secret scanning (#1901)
  * chore: gh publish only with push the tag release (#2025)
  * fix(fs): ignore permission errors (#2022)
  * test(mod): using correct module inside test go.mod (#2020)
  * feat(server): re-add proxy support for client/server communications (#1995)
  * fix(report): truncate a description before escaping in ASFF template (#2004)
  * fix(cloudformation): correct margin removal for empty lines (#2002)
  * fix(template): correct check of old sarif template files (#2003)</changelog>
  <changelog author="kastl@b1-systems.de" date="1651060800">- Update to version 0.27.1:
  * chore(deps): bump github.com/CycloneDX/cyclonedx-go from 0.5.0 to 0.5.1 (#1926)
  * refactor(fs): scanner options (#2050)
  * feat(secret): truncate long line (#2052)
  * docs: fix a broken bullets (#2042)
  * feat(ubuntu): add 22.04 approx eol date (#2044)
  * docs: update installation.md (#2027)
  * docs: add Containerfile (#2032)</changelog>
  <changelog author="dmueller@suse.com" date="1653307200">- Update to version 0.28.0 (bsc#1199760, CVE-2022-28946):
  * fix: remove Highlighted from json output (#2131)
  * fix: remove trivy-kubernetes replace (#2132)
  * docs: Add Operator docs under Kubernetes section (#2111)
  * fix(k8s): security-checks panic (#2127)
  * ci: added k8s scope (#2130)
  * docs: Update misconfig output in examples (#2128)
  * fix(misconf): Fix coloured output in Goland terminal (#2126)
  * docs(secret): Fix default value of --security-checks in docs (#2107)
  * refactor(report): move colorize function from trivy-db (#2122)
  * feat: k8s resource scanning (#2118)
  * chore: add CODEOWNERS (#2121)
  * feat(image): add `--server` option for remote scans (#1871)
  * refactor: k8s (#2116)
  * refactor: export useful APIs (#2108)
  * docs: fix k8s doc (#2114)
  * feat(kubernetes): Add report flag for summary (#2112)
  * fix: Remove problematic advanced rego policies (#2113)
  * feat(misconf): Add special output format for misconfigurations (#2100)
  * feat:  add k8s subcommand (#2065)
  * chore: fix make lint version (#2102)
  * fix(java): handle relative pom modules (#2101)
  * fix(misconf): Add missing links for non-rego misconfig results (#2094)
  * feat(misconf): Added fs.FS based scanning via latest defsec (#2084)
  * chore(deps): bump trivy-issue-action to v0.0.4 (#2091)
  * chore(deps): bump github.com/twitchtv/twirp (#2077)
  * chore(deps): bump github.com/urfave/cli/v2 from 2.4.0 to 2.5.1 (#2074)
  * chore(os): updated fanal version and alpine distroless test (#2086)
  * chore(deps): bump github.com/CycloneDX/cyclonedx-go from 0.5.1 to 0.5.2 (#2075)
  * chore(deps): bump github.com/samber/lo from 1.16.0 to 1.19.0 (#2076)
  * feat(report): add support for SPDX (#2059)
  * chore(deps): bump actions/setup-go from 2 to 3 (#2073)
  * chore(deps): bump actions/cache from 3.0.1 to 3.0.2 (#2071)
  * chore(deps): bump golang from 1.18.0 to 1.18.1 (#2069)
  * chore(deps): bump actions/stale from 4 to 5 (#2070)
  * chore(deps): bump sigstore/cosign-installer from 2.0.0 to 2.3.0 (#2072)
  * chore(deps): bump github.com/open-policy-agent/opa from 0.39.0 to 0.40.0 (#2079)
  * chore: app version 0.27.0 (#2046)
  * fix(misconf): added to skip conf files if their scanning is not enabled (#2066)
  * docs(secret) fix rule path in docs (#2061)
  * docs: change from go.sum to go.mod (#2056)</changelog>
  <changelog author="kastl@b1-systems.de" date="1655899200">- Update to version 0.29.0:
  * fix(lang): fix dependency graph in client server mode (#2336)
  * feat: allow expiration date for .trivyignore entries (#2332)
  * feat(lang): add dependency origin graph (#1970)
  * docs: update nix installation info (#2331)
  * feat: add rbac scanning support (#2328)
  * refactor: move WordPress module to another repository (#2329)
  * ci: add support for ppc64le (#2281)
  * feat: add support for WASM modules (#2195)
  * feat(secret): show recommendation for slow scanning (#2051)
  * fix(flag): remove --clear-cache flag client mode (#2301)
  * fix(java): added check for looping for variable evaluation in pom file (#2322)
  * BREAKING(k8s): change CLI API (#2186)
  * feat(alpine): add Alpine Linux 3.16 (#2319)
  * docs: bump trivy-operator to v0.0.7 (#2320)
  * ci: add `go mod tidy` check (#2314)
  * chore: run `go mod tidy` (#2313)
  * fix: do not exit if one resource is not found (#2311)
  * feat(cli): use stderr for all log messages (resolve #381) (#2289)
  * test: replace deprecated subcommand client in integration tests (#2308)
  * feat: add support for containerd (#2305)
  * fix(kubernetes): Support floats in manifest yaml (#2297)
  * docs(kubernetes): dead links (#2307)
  * chore: add license label (#2304)
  * feat(mariner): added support for CBL-Mariner Distroless v2.0 (#2293)
  * feat(helm): add pod annotations (#2272)
  * refactor: do not import defsec in fanal types package (#2292)
  * feat(report): Add misconfiguration support to ASFF report template (#2285)
  * test: use images in GHCR (#2275)
  * feat(helm): support pod annotations (#2265)
  * feat(misconf): Helm chart scanning (#2269)
  * docs: Update custom rego policy docs to reflect latest defsec/fanal changes (#2267)
  * fix: mask redis credentials when logging (#2264)
  * refactor: extract commands Runner interface (#2147)
  * chore(deps): bump alpine from 3.15.4 to 3.16.0 (#2234)
  * chore(deps): bump github.com/CycloneDX/cyclonedx-go from 0.5.2 to 0.6.0 (#2245)
  * docs: update operator release (#2263)
  * chore(deps): bump github.com/urfave/cli/v2 from 2.6.0 to 2.8.1 (#2243)
  * feat(redhat): added architecture check (#2172)
  * docs: updating links in the docs to work again (#2256)
  * docs: fix readme (#2251)
  * fix: fixed incorrect CycloneDX output format (#2255)
  * chore(deps): bump github.com/caarlos0/env/v6 from 6.9.1 to 6.9.3 (#2241)
  * chore(deps): bump github.com/samber/lo from 1.19.0 to 1.21.0 (#2242)
  * chore(deps): bump goreleaser/goreleaser-action from 2 to 3 (#2240)
  * chore(deps): bump docker/setup-buildx-action from 1 to 2 (#2238)
  * chore(deps): bump docker/setup-qemu-action from 1 to 2 (#2236)
  * chore(deps): bump golang from 1.18.1 to 1.18.2 (#2235)
  * chore(deps): bump golangci/golangci-lint-action from 3.1.0 to 3.2.0 (#2237)
  * chore(deps): bump docker/login-action from 1 to 2 (#2239)
  * chore(deps): bump github.com/hashicorp/go-getter from 1.5.11 to 1.6.1 (#2246)
  * refactor(deps): move dependencies to package (#2189)
  * fix(report): change github format version to required (#2229)
  * docs: update readme (#2110)
  * docs: added information about choosing advisory database (#2212)
  * chore: update trivy-kubernetes (#2224)
  * docs: clarifying parts of the k8s docs and updating links (#2222)
  * fix(k8s): timeout error logging (#2179)
  * chore(deps): updated fanal after fix AsymmetricPrivateKeys (#2214)
  * feat(k8s): add --context flag (#2171)
  * fix(k8s): properly instantiate TableWriter (#2175)
  * test: fixed integration tests after updating testcontainers to v0.13.0 (#2208)
  * chore: update labels (#2197)
  * fix(report): fixed panic if all misconf reports were removed in filter (#2188)
  * feat(k8s): scan secrets (#2178)
  * feat(report): GitHub Dependency Snapshots support (#1522)
  * feat(db): added insecure skip tls verify to download trivy db (#2140)
  * fix(redhat): always use vulns with fixed version if there is one (#2165)
  * chore(redhat): Add support for Red Hat UBI 9. (#2183)
  * fix(k8s): update trivy-kubernetes (#2163)
  * fix misconfig start line for code quality tpl (#2181)
  * fix: update docker/distribution from 2.8.0 to 2.8.1 (#2176)
  * docs(vuln): Include GitLab 15.0 integration (#2153)
  * docs: fix the operator version (#2167)
  * fix(k8s): summary report when when only vulns exit (#2146)
  * chore(deps): Update fanal to get defsec v0.58.2 (fixes false positives in ksv038) (#2156)
  * perf(misconf): Improve performance when scanning very large files (#2152)
  * docs(misconf): Update examples and docs to refer to builtin/defsec instead of appshield (#2150)
  * chore(deps): Update fanal (for less verbose code in misconf results) (#2151)
  * docs: fixed installation instruction for rhel/centos (#2143)</changelog>
  <changelog author="kastl@b1-systems.de" date="1655899201">- Update to version 0.29.1:
  * fix(report): add required fields to the SARIF template (#2341)
  * chore: fix spelling errors (#2352)
  * Omit Remediation if PrimaryURL is empty (#2006)
  * docs(repo): Link to installation documentation in readme shows 404 (#2348)
  * feat(alma): support for scanning of modular packages for AlmaLinux (#2347)</changelog>
  <changelog author="dmueller@suse.com" date="1657281600">- Update to version 0.29.2:
  * chore: skip Visual Studio Code project folder (#2379)
  * fix(helm): handle charts with templated names (#2374)
  * docs: redirect operator docs to trivy-operator repo (#2372)
  * fix(secret): use secret result when determining Failed status (#2370)
  * try removing libdb-dev
  * run integration tests in fanal
  * use same testing images in fanal
  * feat(helm): add support for trivy dbRepository (#2345)
  * fix: Fix failing test due to deref lint issue
  * test: Fix broken test
  * fix: Fix makefile when no previous named ref is visible in a shallow clone
  * chore: Fix linting issues in fanal
  * refactor: Fix fanal import paths and remove dotfiles
  * chore: bump defsec version v0.68.1</changelog>
  <changelog author="kastl@b1-systems.de" date="1657972800">- Update to version 0.30.0:
  * fix: separating multiple licenses from one line in dpkg copyright files (#2508)
  * fix: change a capital letter for `plugin uninstall` subcommand (#2519)
  * fix: k8s hide empty report when scanning resource (#2517)
  * refactor: fix comments (#2516)
  * fix: scan vendor dir (#2515)
  * feat: Add support for license scanning (#2418)
  * chore: add owners for secret scanning (#2485)
  * fix: remove dependency-tree flag for image subcommand (#2492)
  * fix(k8s): add shorthand for k8s namespace flag (#2495)
  * docs: add information about using multiple servers to troubleshooting (#2498)
  * ci: add pushing canary build images to registries (#2428)
  * chore(deps): bump github.com/open-policy-agent/opa from 0.41.0 to 0.42.0 (#2479)
  * feat(dotnet): add support for .Net core .deps.json files (#2487)
  * feat(amazon): add support for 2022 version (#2429)
  * Type correction bitnami chart (#2415)
  * chore(deps): bump github.com/owenrumney/go-sarif/v2 from 2.1.1 to 2.1.2 (#2449)
  * chore(deps): bump github.com/aquasecurity/table from 1.5.1 to 1.6.0 (#2446)
  * docs: add config file and update CLI references (#2489)
  * feat: add support for flag groups (#2488)
  * refactor: move from urfave/cli to spf13/cobra (#2458)
  * fix: Fix secrets output not containing file/lines (#2467)
  * fix: clear output with modules (#2478)
  * chore(deps): bump github.com/mailru/easyjson from 0.7.6 to 0.7.7 (#2448)
  * docs(cbl): distroless 1.0 supported (#2473)
  * fix: Fix example dockerfile rego policy (#2460)
  * fix(config): add helm to list of config analyzers (#2457)
  * feat: k8s resouces scan (#2395)
  * feat(sbom): add cyclonedx sbom scan (#2203)
  * chore(deps): bump wazero to latest main (#2436)
  * chore(deps): bump github.com/stretchr/testify from 1.7.3 to 1.8.0 (#2444)
  * chore(deps): bump github.com/alicebob/miniredis/v2 from 2.21.0 to 2.22.0 (#2445)
  * chore(deps): bump sigstore/cosign-installer from 2.3.0 to 2.4.1 (#2442)
  * chore(deps): bump actions/setup-python from 3 to 4 (#2441)
  * chore(deps): bump github.com/Azure/azure-sdk-for-go (#2450)
  * docs: remove links to removed content (#2431)
  * ci: added rpm build for rhel 9 (#2437)
  * fix(secret): remove space from asymmetric private key (#2434)
  * chore(deps): bump actions/cache from 3.0.2 to 3.0.4 (#2440)
  * chore(deps): bump helm/kind-action from 1.2.0 to 1.3.0 (#2439)
  * chore(deps): bump golang from 1.18.2 to 1.18.3 (#2438)
  * chore(deps): bump github.com/aws/aws-sdk-go from 1.44.25 to 1.44.46 (#2447)
  * test(integration): fix golden files for debian 9 (#2435)
  * fix(cli): fix version string in docs link when secret scanning is enabled (#2422)
  * refactor: move CycloneDX marshaling (#2420)
  * docs(nodejs): add docs about pnpm support (#2423)
  * docs: improve k8s usage documentation (#2425)
  * feat: Make secrets scanning output consistant (#2410)
  * ci: create canary build after main branch changes  (#1638)
  * fix(misconf): skip broken scans (#2396)
  * feat(nodejs): add pnpm support (#2414)
  * fix: Fix false positive for use of COS images (#2413)
  * eliminate nerdctl dependency (#2412)
  * Add EOL date for SUSE SLES 15.3, 15.4 and OpenSUSE 15.4 (#2403)
  * fix(go): no cast to lowercase go package names (#2401)
  * BREAKING(sbom): change 'trivy sbom' to scan SBOM (#2408)
  * fix(server): hot update the db from custom repository (#2406)
  * feat: added license parser for dpkg (#2381)
  * chore(helm): bump appVersion to latest release (#2397)
  * fix(misconf): Update defsec (v0.68.5) to fix docker rego duplicate key (#2400)
  * feat: extract stripe publishable and secret keys (#2392)
  * feat: rbac support k8s sub-command (#2339)
  * feat(ruby): drop platform strings from dependency versions bundled with bundler v2 (#2390)
  * docs: Updating README with new CLI command (#2359)
  * fix(misconf): Update defsec to v0.68.4 to resolve CF detection bug (#2383)
  * chore: add integration label and merge security label (#2316)</changelog>
  <changelog author="kastl@b1-systems.de" date="1658318400">- Update to version 0.30.1:
  * chore: remove a test repository (#2551)
  * fix(license): lazy loading of classifiers (#2547)
  * fix: CVE-2022-1996 in Trivy (#2499)
  * docs(sbom): add sbom attestation (#2527)
  * feat(rocky): set Rocky Linux 9 EOL (#2543)
  * docs: add attributes to the video tag to autoplay demo videos (#2538)
  * fix: yaml files with non-string chart name (#2534)
  * fix: skip dirs (#2530)
  * feat(repo): add support for branch, commit, &amp; tag (#2494)
  * fix: remove auto configure environment variables via viper (#2526)</changelog>
  <changelog author="kastl@b1-systems.de" date="1658404800">- Update to version 0.30.2:
  * fix(report): show the summary without results (#2548)
  * fix(cli): replace '-' to '_' for env vars (#2561)</changelog>
  <changelog author="kastl@b1-systems.de" date="1658836800">- Update to version 0.30.3:
  * fix(server): use a new db worker for hot updates (#2581)
  * docs: add trivy with download-db-only flag to Air-Gapped Environment (#2583)
  * docs: split commands to download db for different versions of oras (#2582)
  * feat(report): export exitcode for license checks (#2564)
  * fix: cli can use lowercase for severities (#2565)
  * fix: allow subcommands with TRIVY_RUN_AS_PLUGIN (#2577)
  * fix: add missing types in TypeOSes and TypeLanguages in analyzer (#2569)
  * fix: enable some features of the wasm runtime (#2575)
  * fix(k8s): no error logged if trivy can't get docker image in kubernetes mode (#2521)
  * docs(sbom): improve sbom attestation documentation (#2566)</changelog>
  <changelog author="kastl@b1-systems.de" date="1658923200">- Update to version 0.30.4:
  * fix: remove the first arg when running as a plugin (#2595)
  * fix: k8s controlplaner scanning (#2593)
  * fix(vuln): GitLab report template (#2578)</changelog>
</package>
<package pkgid="89955383fe108598d0c96ec3dbcfd228dc6315960eb59c2cbc33846c82b9126c" name="tryton" arch="noarch">
  <version epoch="0" ver="6.0.17" rel="bp154.2.3.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1620302400">- initial build of Tryton 6.0 on OBS</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1627992000">- Version 6.0.4 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1631793600">- Version 6.0.5 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1638792000">- Version 6.0.10 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1641211200">- Version 6.0.11 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1642507200">- Version 6.0.12 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1643716800">- Version 6.0.13 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1645185600">- Version 6.0.14 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1647000000">- license string corrected</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1650283200">- Version 6.0.15 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1651924800">- Version 6.0.16 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1660824000">- Version 6.0.17 - Bugfix Release</changelog>
</package>
<package pkgid="9c77d4dc855f8ddb7c003ce371f877aa5690fdb68818dbc8012dc077ec7da454" name="tryton" arch="src">
  <version epoch="0" ver="6.0.17" rel="bp154.2.3.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1620302400">- initial build of Tryton 6.0 on OBS</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1627992000">- Version 6.0.4 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1631793600">- Version 6.0.5 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1638792000">- Version 6.0.10 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1641211200">- Version 6.0.11 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1642507200">- Version 6.0.12 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1643716800">- Version 6.0.13 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1645185600">- Version 6.0.14 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1647000000">- license string corrected</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1650283200">- Version 6.0.15 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1651924800">- Version 6.0.16 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1660824000">- Version 6.0.17 - Bugfix Release</changelog>
</package>
<package pkgid="4f1edfe86c8e7c2f3f5284ce24450d974537af53abbd1c7f3fe46a46b30a8797" name="tryton" arch="noarch">
  <version epoch="0" ver="6.0.19" rel="bp154.2.6.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1620302400">- initial build of Tryton 6.0 on OBS</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1627992000">- Version 6.0.4 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1631793600">- Version 6.0.5 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1638792000">- Version 6.0.10 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1641211200">- Version 6.0.11 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1642507200">- Version 6.0.12 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1643716800">- Version 6.0.13 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1645185600">- Version 6.0.14 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1647000000">- license string corrected</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1650283200">- Version 6.0.15 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1651924800">- Version 6.0.16 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1660824000">- Version 6.0.17 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1662552000">- Version 6.0.18 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1666094400">- Version 6.0.19 - Bugfix Release</changelog>
</package>
<package pkgid="c8d85d5084716720f7684748f98c8e58d6993fed3850e7d58243c9f2555335dd" name="tryton" arch="src">
  <version epoch="0" ver="6.0.19" rel="bp154.2.6.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1620302400">- initial build of Tryton 6.0 on OBS</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1627992000">- Version 6.0.4 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1631793600">- Version 6.0.5 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1638792000">- Version 6.0.10 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1641211200">- Version 6.0.11 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1642507200">- Version 6.0.12 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1643716800">- Version 6.0.13 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1645185600">- Version 6.0.14 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1647000000">- license string corrected</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1650283200">- Version 6.0.15 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1651924800">- Version 6.0.16 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1660824000">- Version 6.0.17 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1662552000">- Version 6.0.18 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1666094400">- Version 6.0.19 - Bugfix Release</changelog>
</package>
<package pkgid="5075f2b0905021dad20acc0731cb93d9716c4aedae90225a429f8d2325dcaa4f" name="tryton" arch="noarch">
  <version epoch="0" ver="6.0.21" rel="bp154.2.9.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1620302400">- initial build of Tryton 6.0 on OBS</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1627992000">- Version 6.0.4 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1631793600">- Version 6.0.5 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1638792000">- Version 6.0.10 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1641211200">- Version 6.0.11 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1642507200">- Version 6.0.12 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1643716800">- Version 6.0.13 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1645185600">- Version 6.0.14 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1647000000">- license string corrected</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1650283200">- Version 6.0.15 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1651924800">- Version 6.0.16 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1660824000">- Version 6.0.17 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1662552000">- Version 6.0.18 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1666094400">- Version 6.0.19 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1667736000">- Version 6.0.20 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1668772800">- Version 6.0.21 - Bugfix Release</changelog>
</package>
<package pkgid="affd9ebfea3c7869023dc2b59d1dc77564a4d124a96da005e381f48beaa27fcd" name="tryton" arch="src">
  <version epoch="0" ver="6.0.21" rel="bp154.2.9.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1620302400">- initial build of Tryton 6.0 on OBS</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1627992000">- Version 6.0.4 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1631793600">- Version 6.0.5 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1638792000">- Version 6.0.10 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1641211200">- Version 6.0.11 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1642507200">- Version 6.0.12 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1643716800">- Version 6.0.13 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1645185600">- Version 6.0.14 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1647000000">- license string corrected</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1650283200">- Version 6.0.15 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1651924800">- Version 6.0.16 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1660824000">- Version 6.0.17 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1662552000">- Version 6.0.18 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1666094400">- Version 6.0.19 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1667736000">- Version 6.0.20 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1668772800">- Version 6.0.21 - Bugfix Release</changelog>
</package>
<package pkgid="ccee391a991dd9b067f95e3fd8d13a640fbf3ce94e7d1c55346d04aedc5a1633" name="tryton" arch="noarch">
  <version epoch="0" ver="6.0.23" rel="bp154.2.12.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1620302400">- initial build of Tryton 6.0 on OBS</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1627992000">- Version 6.0.4 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1631793600">- Version 6.0.5 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1638792000">- Version 6.0.10 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1641211200">- Version 6.0.11 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1642507200">- Version 6.0.12 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1643716800">- Version 6.0.13 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1645185600">- Version 6.0.14 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1647000000">- license string corrected</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1650283200">- Version 6.0.15 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1651924800">- Version 6.0.16 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1660824000">- Version 6.0.17 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1662552000">- Version 6.0.18 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1666094400">- Version 6.0.19 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1667736000">- Version 6.0.20 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1668772800">- Version 6.0.21 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1672747200">- Version 6.0.22 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1673870400">- Version 6.0.23 - Bugfix Release</changelog>
</package>
<package pkgid="5f0a62f1b1715d8a9d4e809672c2562403edba05e9cb3f7250c01a95cabb11cc" name="tryton" arch="src">
  <version epoch="0" ver="6.0.23" rel="bp154.2.12.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1620302400">- initial build of Tryton 6.0 on OBS</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1627992000">- Version 6.0.4 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1631793600">- Version 6.0.5 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1638792000">- Version 6.0.10 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1641211200">- Version 6.0.11 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1642507200">- Version 6.0.12 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1643716800">- Version 6.0.13 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1645185600">- Version 6.0.14 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1647000000">- license string corrected</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1650283200">- Version 6.0.15 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1651924800">- Version 6.0.16 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1660824000">- Version 6.0.17 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1662552000">- Version 6.0.18 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1666094400">- Version 6.0.19 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1667736000">- Version 6.0.20 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1668772800">- Version 6.0.21 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1672747200">- Version 6.0.22 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1673870400">- Version 6.0.23 - Bugfix Release</changelog>
</package>
<package pkgid="cbdb2b923e291519215d827e699a1f380a3998195a9b8a25d50412aa08bf5d06" name="trytond" arch="noarch">
  <version epoch="0" ver="6.0.19" rel="bp154.2.3.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1613131200">- Version 5.0.33 - Security fix for https://bugs.tryton.org/issue10068</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1613390400">- fix_werkzeug.patch adjusted</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1613476800">- python3-passlib added</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1614427200">- add upstream signing key and validate source signature</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1617537600">- Version 5.0.34 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1619524800">- Parameter for webdav server added to trytond.conf</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1621166400">- Version 5.0.35 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1624017600">- Version 5.0.36 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1627387200">- fix_werkzeug_2.x.patch added for python-Werkzeug 2.x compatibility</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1635336000">- Update_changed_fields.diff added to force update of XML files</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1638792000">- Version 5.0.42 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1641211200">- Version 5.0.43 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1643716800">- Version 5.0.44 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1644667200">- Version bump to Tryton 6.0 series</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1645185600">- Version 6.0.15 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1646222400">- Version 6.0.16 - Security Bugfix Release
  * python3-defusedxml added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1646654400">- on special request of our facory check script, we add the patches between tryton 5 and 6:
  * revert_werkzeug_setup.patch is being deleted
  * Update_changed_fields_6.0.diff is being added
  * Update_changed_fields.diff is being deleted
  * fix_werkzeug.patch is being deleted</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1650283200">- Version 6.0.17
  * Werkzeug 2.0 compatibility added
  * fix_werkzeug_2.x.patch removed</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1650888000">- Version 6.0.18 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1654344000">- Version 6.0.19 - Bugfix Release</changelog>
</package>
<package pkgid="b1da3a20849f2ad8d3f3188ed8c5954eff624b36e58a997b0bc4068f3ebe9d9f" name="trytond" arch="src">
  <version epoch="0" ver="6.0.19" rel="bp154.2.3.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1613131200">- Version 5.0.33 - Security fix for https://bugs.tryton.org/issue10068</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1613390400">- fix_werkzeug.patch adjusted</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1613476800">- python3-passlib added</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1614427200">- add upstream signing key and validate source signature</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1617537600">- Version 5.0.34 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1619524800">- Parameter for webdav server added to trytond.conf</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1621166400">- Version 5.0.35 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1624017600">- Version 5.0.36 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1627387200">- fix_werkzeug_2.x.patch added for python-Werkzeug 2.x compatibility</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1635336000">- Update_changed_fields.diff added to force update of XML files</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1638792000">- Version 5.0.42 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1641211200">- Version 5.0.43 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1643716800">- Version 5.0.44 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1644667200">- Version bump to Tryton 6.0 series</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1645185600">- Version 6.0.15 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1646222400">- Version 6.0.16 - Security Bugfix Release
  * python3-defusedxml added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1646654400">- on special request of our facory check script, we add the patches between tryton 5 and 6:
  * revert_werkzeug_setup.patch is being deleted
  * Update_changed_fields_6.0.diff is being added
  * Update_changed_fields.diff is being deleted
  * fix_werkzeug.patch is being deleted</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1650283200">- Version 6.0.17
  * Werkzeug 2.0 compatibility added
  * fix_werkzeug_2.x.patch removed</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1650888000">- Version 6.0.18 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1654344000">- Version 6.0.19 - Bugfix Release</changelog>
</package>
<package pkgid="2e933ccce1288d7fac2418b5d2246b1f8645e1fb4aaadf8542d2f484d67cc93f" name="trytond" arch="noarch">
  <version epoch="0" ver="6.0.20" rel="bp154.2.6.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1613390400">- fix_werkzeug.patch adjusted</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1613476800">- python3-passlib added</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1614427200">- add upstream signing key and validate source signature</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1617537600">- Version 5.0.34 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1619524800">- Parameter for webdav server added to trytond.conf</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1621166400">- Version 5.0.35 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1624017600">- Version 5.0.36 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1627387200">- fix_werkzeug_2.x.patch added for python-Werkzeug 2.x compatibility</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1635336000">- Update_changed_fields.diff added to force update of XML files</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1638792000">- Version 5.0.42 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1641211200">- Version 5.0.43 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1643716800">- Version 5.0.44 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1644667200">- Version bump to Tryton 6.0 series</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1645185600">- Version 6.0.15 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1646222400">- Version 6.0.16 - Security Bugfix Release
  * python3-defusedxml added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1646654400">- on special request of our facory check script, we add the patches between tryton 5 and 6:
  * revert_werkzeug_setup.patch is being deleted
  * Update_changed_fields_6.0.diff is being added
  * Update_changed_fields.diff is being deleted
  * fix_werkzeug.patch is being deleted</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1650283200">- Version 6.0.17
  * Werkzeug 2.0 compatibility added
  * fix_werkzeug_2.x.patch removed</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1650888000">- Version 6.0.18 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1654344000">- Version 6.0.19 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1656849600">- Version 6.0.20 - Bugfix Release</changelog>
</package>
<package pkgid="a251cdabb33b6b40ee54ce81b28a30211067d48213c3bfedaa1500d918036a7f" name="trytond" arch="src">
  <version epoch="0" ver="6.0.20" rel="bp154.2.6.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1613390400">- fix_werkzeug.patch adjusted</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1613476800">- python3-passlib added</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1614427200">- add upstream signing key and validate source signature</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1617537600">- Version 5.0.34 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1619524800">- Parameter for webdav server added to trytond.conf</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1621166400">- Version 5.0.35 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1624017600">- Version 5.0.36 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1627387200">- fix_werkzeug_2.x.patch added for python-Werkzeug 2.x compatibility</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1635336000">- Update_changed_fields.diff added to force update of XML files</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1638792000">- Version 5.0.42 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1641211200">- Version 5.0.43 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1643716800">- Version 5.0.44 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1644667200">- Version bump to Tryton 6.0 series</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1645185600">- Version 6.0.15 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1646222400">- Version 6.0.16 - Security Bugfix Release
  * python3-defusedxml added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1646654400">- on special request of our facory check script, we add the patches between tryton 5 and 6:
  * revert_werkzeug_setup.patch is being deleted
  * Update_changed_fields_6.0.diff is being added
  * Update_changed_fields.diff is being deleted
  * fix_werkzeug.patch is being deleted</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1650283200">- Version 6.0.17
  * Werkzeug 2.0 compatibility added
  * fix_werkzeug_2.x.patch removed</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1650888000">- Version 6.0.18 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1654344000">- Version 6.0.19 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1656849600">- Version 6.0.20 - Bugfix Release</changelog>
</package>
<package pkgid="9c4d32d964b9929481886c426f23ea7d09c2904f9d23d57e7fc5ea7d9e4d63c4" name="trytond" arch="noarch">
  <version epoch="0" ver="6.0.21" rel="bp154.2.9.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1613476800">- python3-passlib added</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1614427200">- add upstream signing key and validate source signature</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1617537600">- Version 5.0.34 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1619524800">- Parameter for webdav server added to trytond.conf</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1621166400">- Version 5.0.35 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1624017600">- Version 5.0.36 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1627387200">- fix_werkzeug_2.x.patch added for python-Werkzeug 2.x compatibility</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1635336000">- Update_changed_fields.diff added to force update of XML files</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1638792000">- Version 5.0.42 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1641211200">- Version 5.0.43 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1643716800">- Version 5.0.44 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1644667200">- Version bump to Tryton 6.0 series</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1645185600">- Version 6.0.15 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1646222400">- Version 6.0.16 - Security Bugfix Release
  * python3-defusedxml added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1646654400">- on special request of our facory check script, we add the patches between tryton 5 and 6:
  * revert_werkzeug_setup.patch is being deleted
  * Update_changed_fields_6.0.diff is being added
  * Update_changed_fields.diff is being deleted
  * fix_werkzeug.patch is being deleted</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1650283200">- Version 6.0.17
  * Werkzeug 2.0 compatibility added
  * fix_werkzeug_2.x.patch removed</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1650888000">- Version 6.0.18 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1654344000">- Version 6.0.19 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1656849600">- Version 6.0.20 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1660824000">- Version 6.0.21 - Bugfix Release</changelog>
</package>
<package pkgid="b46fe6fd3198a14a12cc468b277d3b927666f0e7acaa2054708f0d79b2cfd3f2" name="trytond" arch="src">
  <version epoch="0" ver="6.0.21" rel="bp154.2.9.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1613476800">- python3-passlib added</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1614427200">- add upstream signing key and validate source signature</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1617537600">- Version 5.0.34 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1619524800">- Parameter for webdav server added to trytond.conf</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1621166400">- Version 5.0.35 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1624017600">- Version 5.0.36 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1627387200">- fix_werkzeug_2.x.patch added for python-Werkzeug 2.x compatibility</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1635336000">- Update_changed_fields.diff added to force update of XML files</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1638792000">- Version 5.0.42 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1641211200">- Version 5.0.43 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1643716800">- Version 5.0.44 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1644667200">- Version bump to Tryton 6.0 series</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1645185600">- Version 6.0.15 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1646222400">- Version 6.0.16 - Security Bugfix Release
  * python3-defusedxml added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1646654400">- on special request of our facory check script, we add the patches between tryton 5 and 6:
  * revert_werkzeug_setup.patch is being deleted
  * Update_changed_fields_6.0.diff is being added
  * Update_changed_fields.diff is being deleted
  * fix_werkzeug.patch is being deleted</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1650283200">- Version 6.0.17
  * Werkzeug 2.0 compatibility added
  * fix_werkzeug_2.x.patch removed</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1650888000">- Version 6.0.18 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1654344000">- Version 6.0.19 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1656849600">- Version 6.0.20 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1660824000">- Version 6.0.21 - Bugfix Release</changelog>
</package>
<package pkgid="c13f234478a7e9805d6b0d98d981c76050f577d78972a925be701871f39c627a" name="trytond" arch="noarch">
  <version epoch="0" ver="6.0.22" rel="bp154.2.12.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1617537600">- Version 5.0.34 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1619524800">- Parameter for webdav server added to trytond.conf</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1621166400">- Version 5.0.35 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1624017600">- Version 5.0.36 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1627387200">- fix_werkzeug_2.x.patch added for python-Werkzeug 2.x compatibility</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1635336000">- Update_changed_fields.diff added to force update of XML files</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1638792000">- Version 5.0.42 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1641211200">- Version 5.0.43 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1643716800">- Version 5.0.44 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1644667200">- Version bump to Tryton 6.0 series</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1645185600">- Version 6.0.15 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1646222400">- Version 6.0.16 - Security Bugfix Release
  * python3-defusedxml added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1646654400">- on special request of our facory check script, we add the patches between tryton 5 and 6:
  * revert_werkzeug_setup.patch is being deleted
  * Update_changed_fields_6.0.diff is being added
  * Update_changed_fields.diff is being deleted
  * fix_werkzeug.patch is being deleted</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1650283200">- Version 6.0.17
  * Werkzeug 2.0 compatibility added
  * fix_werkzeug_2.x.patch removed</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1650888000">- Version 6.0.18 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1654344000">- Version 6.0.19 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1656849600">- Version 6.0.20 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1660824000">- Version 6.0.21 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1665576000">- dependency on graphviz added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1666094400">- Version 6.0.22 - Bugfix Release</changelog>
</package>
<package pkgid="fe49f0dd455359977e50c6e577bb8757ceb4204d0c1b5d5b79a722a7ba6768c6" name="trytond" arch="src">
  <version epoch="0" ver="6.0.22" rel="bp154.2.12.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1617537600">- Version 5.0.34 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1619524800">- Parameter for webdav server added to trytond.conf</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1621166400">- Version 5.0.35 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1624017600">- Version 5.0.36 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1627387200">- fix_werkzeug_2.x.patch added for python-Werkzeug 2.x compatibility</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1635336000">- Update_changed_fields.diff added to force update of XML files</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1638792000">- Version 5.0.42 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1641211200">- Version 5.0.43 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1643716800">- Version 5.0.44 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1644667200">- Version bump to Tryton 6.0 series</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1645185600">- Version 6.0.15 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1646222400">- Version 6.0.16 - Security Bugfix Release
  * python3-defusedxml added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1646654400">- on special request of our facory check script, we add the patches between tryton 5 and 6:
  * revert_werkzeug_setup.patch is being deleted
  * Update_changed_fields_6.0.diff is being added
  * Update_changed_fields.diff is being deleted
  * fix_werkzeug.patch is being deleted</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1650283200">- Version 6.0.17
  * Werkzeug 2.0 compatibility added
  * fix_werkzeug_2.x.patch removed</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1650888000">- Version 6.0.18 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1654344000">- Version 6.0.19 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1656849600">- Version 6.0.20 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1660824000">- Version 6.0.21 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1665576000">- dependency on graphviz added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1666094400">- Version 6.0.22 - Bugfix Release</changelog>
</package>
<package pkgid="8add532b8f254712e0a15db7dd8b3bf2a0d84a415f4a78f666b3767d8528efa9" name="trytond" arch="noarch">
  <version epoch="0" ver="6.0.24" rel="bp154.2.15.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1621166400">- Version 5.0.35 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1624017600">- Version 5.0.36 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1627387200">- fix_werkzeug_2.x.patch added for python-Werkzeug 2.x compatibility</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1635336000">- Update_changed_fields.diff added to force update of XML files</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1638792000">- Version 5.0.42 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1641211200">- Version 5.0.43 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1643716800">- Version 5.0.44 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1644667200">- Version bump to Tryton 6.0 series</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1645185600">- Version 6.0.15 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1646222400">- Version 6.0.16 - Security Bugfix Release
  * python3-defusedxml added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1646654400">- on special request of our facory check script, we add the patches between tryton 5 and 6:
  * revert_werkzeug_setup.patch is being deleted
  * Update_changed_fields_6.0.diff is being added
  * Update_changed_fields.diff is being deleted
  * fix_werkzeug.patch is being deleted</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1650283200">- Version 6.0.17
  * Werkzeug 2.0 compatibility added
  * fix_werkzeug_2.x.patch removed</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1650888000">- Version 6.0.18 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1654344000">- Version 6.0.19 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1656849600">- Version 6.0.20 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1660824000">- Version 6.0.21 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1665576000">- dependency on graphviz added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1666094400">- Version 6.0.22 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1667736000">- Version 6.0.23 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1668772800">- Version 6.0.24 - Bugfix Release</changelog>
</package>
<package pkgid="3743a4f305029c7c3e5a39b5bc1c058deb4764184a2e9d3a54cbd16e531475e7" name="trytond" arch="src">
  <version epoch="0" ver="6.0.24" rel="bp154.2.15.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1621166400">- Version 5.0.35 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1624017600">- Version 5.0.36 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1627387200">- fix_werkzeug_2.x.patch added for python-Werkzeug 2.x compatibility</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1635336000">- Update_changed_fields.diff added to force update of XML files</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1638792000">- Version 5.0.42 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1641211200">- Version 5.0.43 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1643716800">- Version 5.0.44 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1644667200">- Version bump to Tryton 6.0 series</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1645185600">- Version 6.0.15 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1646222400">- Version 6.0.16 - Security Bugfix Release
  * python3-defusedxml added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1646654400">- on special request of our facory check script, we add the patches between tryton 5 and 6:
  * revert_werkzeug_setup.patch is being deleted
  * Update_changed_fields_6.0.diff is being added
  * Update_changed_fields.diff is being deleted
  * fix_werkzeug.patch is being deleted</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1650283200">- Version 6.0.17
  * Werkzeug 2.0 compatibility added
  * fix_werkzeug_2.x.patch removed</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1650888000">- Version 6.0.18 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1654344000">- Version 6.0.19 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1656849600">- Version 6.0.20 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1660824000">- Version 6.0.21 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1665576000">- dependency on graphviz added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1666094400">- Version 6.0.22 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1667736000">- Version 6.0.23 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1668772800">- Version 6.0.24 - Bugfix Release</changelog>
</package>
<package pkgid="5effb62ada820fa89a8e335959e88a35914e486128ac374d2b1837b316a27772" name="trytond" arch="noarch">
  <version epoch="0" ver="6.0.26" rel="bp154.2.18.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1627387200">- fix_werkzeug_2.x.patch added for python-Werkzeug 2.x compatibility</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1635336000">- Update_changed_fields.diff added to force update of XML files</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1638792000">- Version 5.0.42 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1641211200">- Version 5.0.43 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1643716800">- Version 5.0.44 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1644667200">- Version bump to Tryton 6.0 series</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1645185600">- Version 6.0.15 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1646222400">- Version 6.0.16 - Security Bugfix Release
  * python3-defusedxml added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1646654400">- on special request of our facory check script, we add the patches between tryton 5 and 6:
  * revert_werkzeug_setup.patch is being deleted
  * Update_changed_fields_6.0.diff is being added
  * Update_changed_fields.diff is being deleted
  * fix_werkzeug.patch is being deleted</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1650283200">- Version 6.0.17
  * Werkzeug 2.0 compatibility added
  * fix_werkzeug_2.x.patch removed</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1650888000">- Version 6.0.18 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1654344000">- Version 6.0.19 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1656849600">- Version 6.0.20 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1660824000">- Version 6.0.21 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1665576000">- dependency on graphviz added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1666094400">- Version 6.0.22 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1667736000">- Version 6.0.23 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1668772800">- Version 6.0.24 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1672747200">- Version 6.0.25 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1673870400">- Version 6.0.26 - Bugfix Release</changelog>
</package>
<package pkgid="a867675c59b9281b6259f83bab2bfd0dee16ebe60d417d11973d36a55d6f8b0c" name="trytond" arch="src">
  <version epoch="0" ver="6.0.26" rel="bp154.2.18.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1627387200">- fix_werkzeug_2.x.patch added for python-Werkzeug 2.x compatibility</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1635336000">- Update_changed_fields.diff added to force update of XML files</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1638792000">- Version 5.0.42 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1641211200">- Version 5.0.43 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1643716800">- Version 5.0.44 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1644667200">- Version bump to Tryton 6.0 series</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1645185600">- Version 6.0.15 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1646222400">- Version 6.0.16 - Security Bugfix Release
  * python3-defusedxml added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1646654400">- on special request of our facory check script, we add the patches between tryton 5 and 6:
  * revert_werkzeug_setup.patch is being deleted
  * Update_changed_fields_6.0.diff is being added
  * Update_changed_fields.diff is being deleted
  * fix_werkzeug.patch is being deleted</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1650283200">- Version 6.0.17
  * Werkzeug 2.0 compatibility added
  * fix_werkzeug_2.x.patch removed</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1650888000">- Version 6.0.18 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1654344000">- Version 6.0.19 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1656849600">- Version 6.0.20 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1660824000">- Version 6.0.21 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1665576000">- dependency on graphviz added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1666094400">- Version 6.0.22 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1667736000">- Version 6.0.23 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1668772800">- Version 6.0.24 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1672747200">- Version 6.0.25 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1673870400">- Version 6.0.26 - Bugfix Release</changelog>
</package>
<package pkgid="68278c92d95ac5ad59b8467e1f4cafb6c22a71a4bcc8c73e73bfc2412f96d6b9" name="trytond_account" arch="noarch">
  <version epoch="0" ver="6.0.11" rel="bp154.2.3.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1574337600">- version 5.0.9 (GNU Health 3.6 series)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1578657600">- Version 5.0.10 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1586001600">- Version 5.0.11 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1588334400">- Version 5.0.12 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1589630400">- Version 5.0.13 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1597924800">- Version 5.0.14 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1603195200">- Version 5.0.15 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1605096000">- Version 5.0.16 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1611489600">- Adaption to new python-macros</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1614427200">- add upstream signing key and validate source signature</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1621166400">- Version 5.0.17 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1624017600">- Version 5.0.18 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1638792000">- Version 5.0.19 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1641211200">- Version 5.0.20 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1643716800">- Version 5.0.21 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1644667200">- Version bump to Tryton 6.0 series</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1645185600">- Version 6.0.8 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1646222400">- Version 6.0.9 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1650283200">- Version 6.0.10 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1654344000">- Version 6.0.11 - Bugfix Release</changelog>
</package>
<package pkgid="2938b03c7ae9fbaf6a77db79bc2cd2ed4b12d64ef9165966de53eec6257913b3" name="trytond_account" arch="src">
  <version epoch="0" ver="6.0.11" rel="bp154.2.3.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1574337600">- version 5.0.9 (GNU Health 3.6 series)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1578657600">- Version 5.0.10 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1586001600">- Version 5.0.11 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1588334400">- Version 5.0.12 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1589630400">- Version 5.0.13 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1597924800">- Version 5.0.14 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1603195200">- Version 5.0.15 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1605096000">- Version 5.0.16 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1611489600">- Adaption to new python-macros</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1614427200">- add upstream signing key and validate source signature</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1621166400">- Version 5.0.17 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1624017600">- Version 5.0.18 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1638792000">- Version 5.0.19 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1641211200">- Version 5.0.20 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1643716800">- Version 5.0.21 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1644667200">- Version bump to Tryton 6.0 series</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1645185600">- Version 6.0.8 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1646222400">- Version 6.0.9 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1650283200">- Version 6.0.10 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1654344000">- Version 6.0.11 - Bugfix Release</changelog>
</package>
<package pkgid="f822c6ccbc8239e167d3b20e82abb9c450a65619733173697edfa0263798200d" name="trytond_account" arch="noarch">
  <version epoch="0" ver="6.0.12" rel="bp154.2.6.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1578657600">- Version 5.0.10 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1586001600">- Version 5.0.11 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1588334400">- Version 5.0.12 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1589630400">- Version 5.0.13 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1597924800">- Version 5.0.14 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1603195200">- Version 5.0.15 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1605096000">- Version 5.0.16 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1611489600">- Adaption to new python-macros</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1614427200">- add upstream signing key and validate source signature</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1621166400">- Version 5.0.17 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1624017600">- Version 5.0.18 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1638792000">- Version 5.0.19 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1641211200">- Version 5.0.20 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1643716800">- Version 5.0.21 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1644667200">- Version bump to Tryton 6.0 series</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1645185600">- Version 6.0.8 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1646222400">- Version 6.0.9 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1650283200">- Version 6.0.10 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1654344000">- Version 6.0.11 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1659614400">- Version 6.0.12 - Bugfix Release</changelog>
</package>
<package pkgid="cb04f897c4484caf7561d8295d011ec7aad31a7b6bb7e023de1eea579bd20f25" name="trytond_account" arch="src">
  <version epoch="0" ver="6.0.12" rel="bp154.2.6.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1578657600">- Version 5.0.10 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1586001600">- Version 5.0.11 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1588334400">- Version 5.0.12 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1589630400">- Version 5.0.13 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1597924800">- Version 5.0.14 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1603195200">- Version 5.0.15 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1605096000">- Version 5.0.16 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1611489600">- Adaption to new python-macros</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1614427200">- add upstream signing key and validate source signature</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1621166400">- Version 5.0.17 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1624017600">- Version 5.0.18 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1638792000">- Version 5.0.19 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1641211200">- Version 5.0.20 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1643716800">- Version 5.0.21 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1644667200">- Version bump to Tryton 6.0 series</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1645185600">- Version 6.0.8 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1646222400">- Version 6.0.9 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1650283200">- Version 6.0.10 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1654344000">- Version 6.0.11 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1659614400">- Version 6.0.12 - Bugfix Release</changelog>
</package>
<package pkgid="48d21576e8bcb3796727922cc9536460bfaa26566faa31140b9b161aa1d95e22" name="trytond_account" arch="noarch">
  <version epoch="0" ver="6.0.13" rel="bp154.2.9.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1586001600">- Version 5.0.11 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1588334400">- Version 5.0.12 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1589630400">- Version 5.0.13 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1597924800">- Version 5.0.14 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1603195200">- Version 5.0.15 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1605096000">- Version 5.0.16 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1611489600">- Adaption to new python-macros</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1614427200">- add upstream signing key and validate source signature</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1621166400">- Version 5.0.17 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1624017600">- Version 5.0.18 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1638792000">- Version 5.0.19 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1641211200">- Version 5.0.20 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1643716800">- Version 5.0.21 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1644667200">- Version bump to Tryton 6.0 series</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1645185600">- Version 6.0.8 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1646222400">- Version 6.0.9 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1650283200">- Version 6.0.10 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1654344000">- Version 6.0.11 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1659614400">- Version 6.0.12 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1660824000">- Version 6.0.13 - Bugfix Release</changelog>
</package>
<package pkgid="dba2c0a0a7a046b0f6bdec3c2ea1b479edd690c8cf127413debfe98754f7fa63" name="trytond_account" arch="src">
  <version epoch="0" ver="6.0.13" rel="bp154.2.9.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1586001600">- Version 5.0.11 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1588334400">- Version 5.0.12 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1589630400">- Version 5.0.13 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1597924800">- Version 5.0.14 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1603195200">- Version 5.0.15 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1605096000">- Version 5.0.16 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1611489600">- Adaption to new python-macros</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1614427200">- add upstream signing key and validate source signature</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1621166400">- Version 5.0.17 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1624017600">- Version 5.0.18 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1638792000">- Version 5.0.19 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1641211200">- Version 5.0.20 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1643716800">- Version 5.0.21 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1644667200">- Version bump to Tryton 6.0 series</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1645185600">- Version 6.0.8 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1646222400">- Version 6.0.9 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1650283200">- Version 6.0.10 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1654344000">- Version 6.0.11 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1659614400">- Version 6.0.12 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1660824000">- Version 6.0.13 - Bugfix Release</changelog>
</package>
<package pkgid="8a0e559e6512b6d20b56a6f450ab6df17b5b4d03470f859cac86cc57b8bc275c" name="trytond_account_invoice" arch="noarch">
  <version epoch="0" ver="6.0.7" rel="bp154.2.3.1"/>
  <changelog author="axel.braun@gmx.de" date="1526126400">- Version 4.2.6 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1542110400">- Version 4.2.7 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1542110401">- Version 4.6.5 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1574337600">- version 5.0.4 (GNU Health 3.6 series)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1575374400">- Version 5.0.5 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1578657600">- Version 5.0.6 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1580644800">- Version 5.0.7 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1586001600">- Version 5.0.8 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1597924800">- Version 5.0.9 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1603195200">- Version 5.0.10 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1611489600">- Adaption to new python macros</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1614427200">- add upstream signing key and validate source signature</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1614772800">- Version 5.0.11 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1621166400">- Version 5.0.12 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1624017600">- Version 5.0.13 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1638792000">- Version 5.0.15 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1644667200">- Version bump to Tryton 6.0 series</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1645185600">- Version 6.0.5 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1650283200">- Version 6.0.6 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1659614400">- Version 6.0.7 - Bugfix Release</changelog>
</package>
<package pkgid="fee789846af5aa9517efcee2a2ada5c4ebad67c4ff1973b5bc536a0465e7b49e" name="trytond_account_invoice" arch="src">
  <version epoch="0" ver="6.0.7" rel="bp154.2.3.1"/>
  <changelog author="axel.braun@gmx.de" date="1526126400">- Version 4.2.6 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1542110400">- Version 4.2.7 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1542110401">- Version 4.6.5 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1574337600">- version 5.0.4 (GNU Health 3.6 series)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1575374400">- Version 5.0.5 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1578657600">- Version 5.0.6 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1580644800">- Version 5.0.7 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1586001600">- Version 5.0.8 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1597924800">- Version 5.0.9 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1603195200">- Version 5.0.10 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1611489600">- Adaption to new python macros</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1614427200">- add upstream signing key and validate source signature</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1614772800">- Version 5.0.11 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1621166400">- Version 5.0.12 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1624017600">- Version 5.0.13 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1638792000">- Version 5.0.15 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1644667200">- Version bump to Tryton 6.0 series</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1645185600">- Version 6.0.5 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1650283200">- Version 6.0.6 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1659614400">- Version 6.0.7 - Bugfix Release</changelog>
</package>
<package pkgid="1247744ec6d0ae288aa646d8f3efc2e4f6bbfad58f7af9dcc09780de5cbe02a9" name="trytond_account_invoice_stock" arch="noarch">
  <version epoch="0" ver="6.0.1" rel="bp154.2.3.1"/>
  <changelog author="axel.braun@gmx.de" date="1429099200">- Tryton Release 3.6</changelog>
  <changelog author="axel.braun@gmx.de" date="1445256000">- Tryton Release 3.8</changelog>
  <changelog author="axel.braun@gmx.de" date="1462190400">- Tryton Release 4.0</changelog>
  <changelog author="axel.braun@gmx.de" date="1480334400">- Tryton Release 4.2</changelog>
  <changelog author="axel.braun@gmx.de" date="1509278400">- Version 4.6.0</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1574337600">- version 5.0.1 (GNU Health 3.6 series)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1586001600">- Version 5.0.2 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1588334400">- Version 5.0.3 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1611489600">- Adaption to new python macros</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1614427200">- add upstream signing key and validate source signature</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1624017600">- Version 5.0.4 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1644667200">- Version bump to Tryton 6.0 series</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1654344000">- Version 6.0.1 - Bugfix Release</changelog>
</package>
<package pkgid="4053dc29e888baf55e89a18b0e08423c2bc0c5d7f7b870be97e32df7affb42ba" name="trytond_account_invoice_stock" arch="src">
  <version epoch="0" ver="6.0.1" rel="bp154.2.3.1"/>
  <changelog author="axel.braun@gmx.de" date="1408536000">- initial build</changelog>
  <changelog author="axel.braun@gmx.de" date="1429099200">- Tryton Release 3.6</changelog>
  <changelog author="axel.braun@gmx.de" date="1445256000">- Tryton Release 3.8</changelog>
  <changelog author="axel.braun@gmx.de" date="1462190400">- Tryton Release 4.0</changelog>
  <changelog author="axel.braun@gmx.de" date="1480334400">- Tryton Release 4.2</changelog>
  <changelog author="axel.braun@gmx.de" date="1509278400">- Version 4.6.0</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1574337600">- version 5.0.1 (GNU Health 3.6 series)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1586001600">- Version 5.0.2 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1588334400">- Version 5.0.3 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1611489600">- Adaption to new python macros</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1614427200">- add upstream signing key and validate source signature</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1624017600">- Version 5.0.4 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1644667200">- Version bump to Tryton 6.0 series</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1654344000">- Version 6.0.1 - Bugfix Release</changelog>
</package>
<package pkgid="d2e612936f25465bb05def744efc2c8010db53e34feaa44436d89db6e90295f1" name="trytond_country" arch="noarch">
  <version epoch="0" ver="6.0.3" rel="bp154.2.3.1"/>
  <changelog author="axel.braun@gmx.de" date="1429099200">- Tryton Release 3.6</changelog>
  <changelog author="axel.braun@gmx.de" date="1445256000">- Tryton Release 3.8</changelog>
  <changelog author="axel.braun@gmx.de" date="1462190400">- Tryton Release 4.0</changelog>
  <changelog author="axel.braun@gmx.de" date="1480334400">- Tryton Release 4.2</changelog>
  <changelog author="axel.braun@gmx.de" date="1511956800">- Version 4.6.0</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1574337600">- version 5.0.1 (GNU Health 3.6 series)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1586001600">- Version 5.0.2 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1611489600">- Adaption to new python macros</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1614427200">- add upstream signing key and validate source signature</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1624017600">- Version 5.0.3 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1644667200">- Version bump to Tryton 6.0 series</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1646740800">- runtime dependency python-pycountry added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1646740801">- added pycountry.diff (https://bugs.tryton.org/issue11128 )
  build-conditions for TW added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1647259200">- revert_pycountry_limit.diff added
  fixes boo#1196857</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1647604800">- patches reorganized:
  pycountry.diff removed
  added:
  001_pycountry.diff
  002_support_pycountry_22.diff
  003_revert_pycountry_limit.diff</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1666094400">- Version 6.0.3 - Bugfix Release
  001_pycountry.diff adapted</changelog>
</package>
<package pkgid="aba7dc8812b9f0dcc7c27520d58c2debd98f131caae7cdc28df630f583aa9978" name="trytond_country" arch="src">
  <version epoch="0" ver="6.0.3" rel="bp154.2.3.1"/>
  <changelog author="axel.braun@gmx.de" date="1367496000">- initial build</changelog>
  <changelog author="axel.braun@gmx.de" date="1382702400">- new branch 3.0</changelog>
  <changelog author="axel.braun@gmx.de" date="1429099200">- Tryton Release 3.6</changelog>
  <changelog author="axel.braun@gmx.de" date="1445256000">- Tryton Release 3.8</changelog>
  <changelog author="axel.braun@gmx.de" date="1462190400">- Tryton Release 4.0</changelog>
  <changelog author="axel.braun@gmx.de" date="1480334400">- Tryton Release 4.2</changelog>
  <changelog author="axel.braun@gmx.de" date="1511956800">- Version 4.6.0</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1574337600">- version 5.0.1 (GNU Health 3.6 series)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1586001600">- Version 5.0.2 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1611489600">- Adaption to new python macros</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1614427200">- add upstream signing key and validate source signature</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1624017600">- Version 5.0.3 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1644667200">- Version bump to Tryton 6.0 series</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1646740800">- runtime dependency python-pycountry added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1646740801">- added pycountry.diff (https://bugs.tryton.org/issue11128 )
  build-conditions for TW added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1647259200">- revert_pycountry_limit.diff added
  fixes boo#1196857</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1647604800">- patches reorganized:
  pycountry.diff removed
  added:
  001_pycountry.diff
  002_support_pycountry_22.diff
  003_revert_pycountry_limit.diff</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1666094400">- Version 6.0.3 - Bugfix Release
  001_pycountry.diff adapted</changelog>
</package>
<package pkgid="bc7c01b7c984695f8d404f71d2a2b6e058d7caab196ef15da24fceaaeafd81ee" name="trytond_currency" arch="noarch">
  <version epoch="0" ver="6.0.3" rel="bp154.2.3.1"/>
  <changelog author="axel.braun@gmx.de" date="1429099200">- Tryton Release 3.6</changelog>
  <changelog author="axel.braun@gmx.de" date="1445256000">- Tryton Release 3.8</changelog>
  <changelog author="axel.braun@gmx.de" date="1462190400">- Tryton Release 4.0</changelog>
  <changelog author="axel.braun@gmx.de" date="1480334400">- Tryton Release 4.2</changelog>
  <changelog author="axel.braun@gmx.de" date="1504958400">- Version 4.2.1 - Bugfix Release</changelog>
  <changelog author="axel.braun@gmx.de" date="1526126400">- Version 4.2.2 - Bugfix Release</changelog>
  <changelog author="axel.braun@gmx.de" date="1526126401">- Version 4.6.1 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1566302400">- Version 4.6.2 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1574337600">- version 5.0.3 (GNU Health 3.6 series)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1586001600">- Version 5.0.4 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1611489600">- Adaption to new python macros</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1614427200">- add upstream signing key and validate source signature</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1620648000">- Version 5.0.5 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1624017600">- Version 5.0.6 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1644667200">- Version bump to Tryton 6.0 series</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1667736000">- Version 6.0.2 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1668772800">- Version 6.0.3 - Bugfix Release</changelog>
</package>
<package pkgid="df1e6cea686487ec9033d2088831f5145db804c6542f6cb4db33020ffb8af5a2" name="trytond_currency" arch="src">
  <version epoch="0" ver="6.0.3" rel="bp154.2.3.1"/>
  <changelog author="axel.braun@gmx.de" date="1367496000">- initial build</changelog>
  <changelog author="axel.braun@gmx.de" date="1382702400">- new branch 3.0</changelog>
  <changelog author="axel.braun@gmx.de" date="1429099200">- Tryton Release 3.6</changelog>
  <changelog author="axel.braun@gmx.de" date="1445256000">- Tryton Release 3.8</changelog>
  <changelog author="axel.braun@gmx.de" date="1462190400">- Tryton Release 4.0</changelog>
  <changelog author="axel.braun@gmx.de" date="1480334400">- Tryton Release 4.2</changelog>
  <changelog author="axel.braun@gmx.de" date="1504958400">- Version 4.2.1 - Bugfix Release</changelog>
  <changelog author="axel.braun@gmx.de" date="1526126400">- Version 4.2.2 - Bugfix Release</changelog>
  <changelog author="axel.braun@gmx.de" date="1526126401">- Version 4.6.1 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1566302400">- Version 4.6.2 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1574337600">- version 5.0.3 (GNU Health 3.6 series)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1586001600">- Version 5.0.4 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1611489600">- Adaption to new python macros</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1614427200">- add upstream signing key and validate source signature</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1620648000">- Version 5.0.5 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1624017600">- Version 5.0.6 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1644667200">- Version bump to Tryton 6.0 series</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1667736000">- Version 6.0.2 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1668772800">- Version 6.0.3 - Bugfix Release</changelog>
</package>
<package pkgid="814b6d729e49aa71db4fc2a770f38f898192356da4851cc288cbac0941d39c68" name="trytond_party" arch="noarch">
  <version epoch="0" ver="6.0.3" rel="bp154.2.3.1"/>
  <changelog author="axel.braun@gmx.de" date="1429099200">- Tryton Release 3.6</changelog>
  <changelog author="axel.braun@gmx.de" date="1445256000">- Tryton Release 3.8</changelog>
  <changelog author="axel.braun@gmx.de" date="1462190400">- Tryton Release 4.0</changelog>
  <changelog author="axel.braun@gmx.de" date="1480334400">- Tryton Release 4.2</changelog>
  <changelog author="axel.braun@gmx.de" date="1483704000">- Version 4.2.1</changelog>
  <changelog author="axel.braun@gmx.de" date="1485172800">- Version 4.2.2</changelog>
  <changelog author="axel.braun@gmx.de" date="1489147200">- Version 4.2.3</changelog>
  <changelog author="axel.braun@gmx.de" date="1498737600">- changed link to python3-python-stdnum</changelog>
  <changelog author="axel.braun@gmx.de" date="1499083200">- Version 4.2.4</changelog>
  <changelog author="axel.braun@gmx.de" date="1509278400">- Version 4.6.0</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1550664000">- Version 4.6.1 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1558094400">- Version 4.6.2 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1574337600">- version 5.0.2 (GNU Health 3.6 series)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1586001600">- Version 5.0.3 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1611489600">- Adaption to new python macros</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1614427200">- add upstream signing key and validate source signature</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1621166400">- Version 5.0.4 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1624017600">- Version 5.0.5 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1644667200">- Version bump to Tryton 6.0 series</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1654344000">- Version 6.0.3 - Bugfix Release</changelog>
</package>
<package pkgid="7a8ee0ef04a6acdacc34cafabd8347c0f9fc094733b50ff396a8f74b29089a09" name="trytond_party" arch="src">
  <version epoch="0" ver="6.0.3" rel="bp154.2.3.1"/>
  <changelog author="axel.braun@gmx.de" date="1429099200">- Tryton Release 3.6</changelog>
  <changelog author="axel.braun@gmx.de" date="1445256000">- Tryton Release 3.8</changelog>
  <changelog author="axel.braun@gmx.de" date="1462190400">- Tryton Release 4.0</changelog>
  <changelog author="axel.braun@gmx.de" date="1480334400">- Tryton Release 4.2</changelog>
  <changelog author="axel.braun@gmx.de" date="1483704000">- Version 4.2.1</changelog>
  <changelog author="axel.braun@gmx.de" date="1485172800">- Version 4.2.2</changelog>
  <changelog author="axel.braun@gmx.de" date="1489147200">- Version 4.2.3</changelog>
  <changelog author="axel.braun@gmx.de" date="1498737600">- changed link to python3-python-stdnum</changelog>
  <changelog author="axel.braun@gmx.de" date="1499083200">- Version 4.2.4</changelog>
  <changelog author="axel.braun@gmx.de" date="1509278400">- Version 4.6.0</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1550664000">- Version 4.6.1 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1558094400">- Version 4.6.2 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1574337600">- version 5.0.2 (GNU Health 3.6 series)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1586001600">- Version 5.0.3 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1611489600">- Adaption to new python macros</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1614427200">- add upstream signing key and validate source signature</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1621166400">- Version 5.0.4 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1624017600">- Version 5.0.5 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1644667200">- Version bump to Tryton 6.0 series</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1654344000">- Version 6.0.3 - Bugfix Release</changelog>
</package>
<package pkgid="bf046a4381716903b2676ab47581139ff49058a49633af4bad1d9461ca048fb7" name="trytond_purchase" arch="noarch">
  <version epoch="0" ver="6.0.7" rel="bp154.2.3.1"/>
  <changelog author="axel.braun@gmx.de" date="1504958400">- Version 4.2.2 - Bugfix Release</changelog>
  <changelog author="axel.braun@gmx.de" date="1510228800">- Version 4.2.3 - Bugfix Release</changelog>
  <changelog author="axel.braun@gmx.de" date="1519992000">- Version 4.2.4 - Bugfix Release</changelog>
  <changelog author="axel.braun@gmx.de" date="1526126400">- Version 4.2.5 - Bugfix Release</changelog>
  <changelog author="axel.braun@gmx.de" date="1531310400">- Version 4.2.6 - Bugfix Release (boo#1107771)</changelog>
  <changelog author="axel.braun@gmx.de" date="1531310401">- Version 4.6.4 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1550664000">- Version 4.6.5 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1574337600">- version 5.0.2 (GNU Health 3.6 series)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1586001600">- Version 5.0.3 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1589630400">- Version 5.0.4 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1593691200">- Version 5.0.5 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1611489600">- Adaption to new python macros</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1614427200">- add upstream signing key and validate source signature</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1614772800">- Version 5.0.6 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1624017600">- Version 5.0.7 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1638792000">- Version 5.0.9 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1644667200">- Version bump to Tryton 6.0 series</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1645185600">- Version 6.0.5 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1646222400">- Version 6.0.6 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1654344000">- Version 6.0.7 - Bugfix Release</changelog>
</package>
<package pkgid="7eaae99636d8816baaaf0df38aad9b7287b2d6957fbfc0e306abd286af285025" name="trytond_purchase" arch="src">
  <version epoch="0" ver="6.0.7" rel="bp154.2.3.1"/>
  <changelog author="axel.braun@gmx.de" date="1504958400">- Version 4.2.2 - Bugfix Release</changelog>
  <changelog author="axel.braun@gmx.de" date="1510228800">- Version 4.2.3 - Bugfix Release</changelog>
  <changelog author="axel.braun@gmx.de" date="1519992000">- Version 4.2.4 - Bugfix Release</changelog>
  <changelog author="axel.braun@gmx.de" date="1526126400">- Version 4.2.5 - Bugfix Release</changelog>
  <changelog author="axel.braun@gmx.de" date="1531310400">- Version 4.2.6 - Bugfix Release (boo#1107771)</changelog>
  <changelog author="axel.braun@gmx.de" date="1531310401">- Version 4.6.4 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1550664000">- Version 4.6.5 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1574337600">- version 5.0.2 (GNU Health 3.6 series)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1586001600">- Version 5.0.3 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1589630400">- Version 5.0.4 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1593691200">- Version 5.0.5 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1611489600">- Adaption to new python macros</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1614427200">- add upstream signing key and validate source signature</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1614772800">- Version 5.0.6 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1624017600">- Version 5.0.7 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1638792000">- Version 5.0.9 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1644667200">- Version bump to Tryton 6.0 series</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1645185600">- Version 6.0.5 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1646222400">- Version 6.0.6 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1654344000">- Version 6.0.7 - Bugfix Release</changelog>
</package>
<package pkgid="67d2e5252edc39c41d08ad033496c80b5bc1ca5bb9999690287638a74389a763" name="trytond_purchase" arch="noarch">
  <version epoch="0" ver="6.0.8" rel="bp154.2.6.1"/>
  <changelog author="axel.braun@gmx.de" date="1510228800">- Version 4.2.3 - Bugfix Release</changelog>
  <changelog author="axel.braun@gmx.de" date="1519992000">- Version 4.2.4 - Bugfix Release</changelog>
  <changelog author="axel.braun@gmx.de" date="1526126400">- Version 4.2.5 - Bugfix Release</changelog>
  <changelog author="axel.braun@gmx.de" date="1531310400">- Version 4.2.6 - Bugfix Release (boo#1107771)</changelog>
  <changelog author="axel.braun@gmx.de" date="1531310401">- Version 4.6.4 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1550664000">- Version 4.6.5 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1574337600">- version 5.0.2 (GNU Health 3.6 series)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1586001600">- Version 5.0.3 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1589630400">- Version 5.0.4 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1593691200">- Version 5.0.5 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1611489600">- Adaption to new python macros</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1614427200">- add upstream signing key and validate source signature</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1614772800">- Version 5.0.6 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1624017600">- Version 5.0.7 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1638792000">- Version 5.0.9 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1644667200">- Version bump to Tryton 6.0 series</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1645185600">- Version 6.0.5 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1646222400">- Version 6.0.6 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1654344000">- Version 6.0.7 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1659614400">- Version 6.0.8 - Bugfix Release</changelog>
</package>
<package pkgid="cddfdbfda177324559e53dbd5e80e87a8bb8c39e0ca71b8203fc1cd3c7f6985a" name="trytond_purchase" arch="src">
  <version epoch="0" ver="6.0.8" rel="bp154.2.6.1"/>
  <changelog author="axel.braun@gmx.de" date="1510228800">- Version 4.2.3 - Bugfix Release</changelog>
  <changelog author="axel.braun@gmx.de" date="1519992000">- Version 4.2.4 - Bugfix Release</changelog>
  <changelog author="axel.braun@gmx.de" date="1526126400">- Version 4.2.5 - Bugfix Release</changelog>
  <changelog author="axel.braun@gmx.de" date="1531310400">- Version 4.2.6 - Bugfix Release (boo#1107771)</changelog>
  <changelog author="axel.braun@gmx.de" date="1531310401">- Version 4.6.4 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1550664000">- Version 4.6.5 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1574337600">- version 5.0.2 (GNU Health 3.6 series)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1586001600">- Version 5.0.3 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1589630400">- Version 5.0.4 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1593691200">- Version 5.0.5 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1611489600">- Adaption to new python macros</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1614427200">- add upstream signing key and validate source signature</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1614772800">- Version 5.0.6 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1624017600">- Version 5.0.7 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1638792000">- Version 5.0.9 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1644667200">- Version bump to Tryton 6.0 series</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1645185600">- Version 6.0.5 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1646222400">- Version 6.0.6 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1654344000">- Version 6.0.7 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1659614400">- Version 6.0.8 - Bugfix Release</changelog>
</package>
<package pkgid="e6679fb9c5466a88f564c441464c2751bc34d073c6ab0c3ca84a1567106a5abc" name="trytond_purchase" arch="noarch">
  <version epoch="0" ver="6.0.9" rel="bp154.2.9.1"/>
  <changelog author="axel.braun@gmx.de" date="1519992000">- Version 4.2.4 - Bugfix Release</changelog>
  <changelog author="axel.braun@gmx.de" date="1526126400">- Version 4.2.5 - Bugfix Release</changelog>
  <changelog author="axel.braun@gmx.de" date="1531310400">- Version 4.2.6 - Bugfix Release (boo#1107771)</changelog>
  <changelog author="axel.braun@gmx.de" date="1531310401">- Version 4.6.4 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1550664000">- Version 4.6.5 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1574337600">- version 5.0.2 (GNU Health 3.6 series)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1586001600">- Version 5.0.3 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1589630400">- Version 5.0.4 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1593691200">- Version 5.0.5 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1611489600">- Adaption to new python macros</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1614427200">- add upstream signing key and validate source signature</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1614772800">- Version 5.0.6 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1624017600">- Version 5.0.7 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1638792000">- Version 5.0.9 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1644667200">- Version bump to Tryton 6.0 series</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1645185600">- Version 6.0.5 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1646222400">- Version 6.0.6 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1654344000">- Version 6.0.7 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1659614400">- Version 6.0.8 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1666094400">- Version 6.0.9 - Bugfix Release</changelog>
</package>
<package pkgid="966c7c25ebaddfa111e93b04d98ddb19feffd83f148f5560662ac57da23397e7" name="trytond_purchase" arch="src">
  <version epoch="0" ver="6.0.9" rel="bp154.2.9.1"/>
  <changelog author="axel.braun@gmx.de" date="1519992000">- Version 4.2.4 - Bugfix Release</changelog>
  <changelog author="axel.braun@gmx.de" date="1526126400">- Version 4.2.5 - Bugfix Release</changelog>
  <changelog author="axel.braun@gmx.de" date="1531310400">- Version 4.2.6 - Bugfix Release (boo#1107771)</changelog>
  <changelog author="axel.braun@gmx.de" date="1531310401">- Version 4.6.4 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1550664000">- Version 4.6.5 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1574337600">- version 5.0.2 (GNU Health 3.6 series)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1586001600">- Version 5.0.3 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1589630400">- Version 5.0.4 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1593691200">- Version 5.0.5 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1611489600">- Adaption to new python macros</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1614427200">- add upstream signing key and validate source signature</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1614772800">- Version 5.0.6 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1624017600">- Version 5.0.7 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1638792000">- Version 5.0.9 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1644667200">- Version bump to Tryton 6.0 series</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1645185600">- Version 6.0.5 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1646222400">- Version 6.0.6 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1654344000">- Version 6.0.7 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1659614400">- Version 6.0.8 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1666094400">- Version 6.0.9 - Bugfix Release</changelog>
</package>
<package pkgid="122f092e7ba04597ed5fbbf8e240403c6b4d8d1d06831c3bbcf061a5773c4857" name="trytond_purchase_request" arch="noarch">
  <version epoch="0" ver="6.0.2" rel="bp154.2.3.1"/>
  <changelog author="axel.braun@gmx.de" date="1470225600">- initial build on OBS
  Versio 4.0.2</changelog>
  <changelog author="axel.braun@gmx.de" date="1480334400">- Tryton Release 4.2</changelog>
  <changelog author="axel.braun@gmx.de" date="1499083200">- Version 4.2.1</changelog>
  <changelog author="axel.braun@gmx.de" date="1510228800">- Version 4.2.2 - Bugfix Release</changelog>
  <changelog author="axel.braun@gmx.de" date="1512475200">- Version 4.2.3 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1544443200">- Version 4.2.4 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1544443201">- Version 4.6.1 - bugfix release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1574337600">- version 5.0.2 (GNU Health 3.6 series)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1575374400">- Version 5.0.3 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1586001600">- Version 5.0.4 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1611489600">- Adaption to new python macros</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1614427200">- add upstream signing key and validate source signature</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1624017600">- Version 5.0.5 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1644667200">- Version bump to Tryton 6.0 series</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1646222400">- Version 6.0.1 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1673870400">- Version 6.0.2 - Bugfix Release</changelog>
</package>
<package pkgid="636bbc7e38014a3b1abfb61f08a00bd402dea75e68d6389d191aab6da464e812" name="trytond_purchase_request" arch="src">
  <version epoch="0" ver="6.0.2" rel="bp154.2.3.1"/>
  <changelog author="axel.braun@gmx.de" date="1470225600">- initial build on OBS
  Versio 4.0.2</changelog>
  <changelog author="axel.braun@gmx.de" date="1480334400">- Tryton Release 4.2</changelog>
  <changelog author="axel.braun@gmx.de" date="1499083200">- Version 4.2.1</changelog>
  <changelog author="axel.braun@gmx.de" date="1510228800">- Version 4.2.2 - Bugfix Release</changelog>
  <changelog author="axel.braun@gmx.de" date="1512475200">- Version 4.2.3 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1544443200">- Version 4.2.4 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1544443201">- Version 4.6.1 - bugfix release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1574337600">- version 5.0.2 (GNU Health 3.6 series)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1575374400">- Version 5.0.3 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1586001600">- Version 5.0.4 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1611489600">- Adaption to new python macros</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1614427200">- add upstream signing key and validate source signature</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1624017600">- Version 5.0.5 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1644667200">- Version bump to Tryton 6.0 series</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1646222400">- Version 6.0.1 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1673870400">- Version 6.0.2 - Bugfix Release</changelog>
</package>
<package pkgid="33191743ce0744aefd25eb8fe4cc700375c9498ebc7cd28b31be83c5908c4f8c" name="trytond_stock" arch="noarch">
  <version epoch="0" ver="6.0.14" rel="bp154.2.3.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1553428800">- Version 4.6.5 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1558094400">- Version 4.6.6 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1562932800">- Version 4.6.7 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1574337600">- version 5.0.7 (GNU Health 3.6 series)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1580644800">- Version 5.0.8 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1583841600">- Version 5.0.9 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1591272000">- Version 5.0.10 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1607083200">- Version 5.0.11 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1611489600">- Adaption to new python-macros</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1612267200">- Version 5.0.12 - Bugfix Release</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1614427200">- add upstream signing key and validate source signature</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1620648000">- Version 5.0.13 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1624017600">- Version 5.0.14 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1638792000">- Version 5.0.16 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1641211200">- Version 5.0.17 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1644667200">- Version bump to Tryton 6.0 series</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1645185600">- Version 6.0.11 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1646222400">- Version 6.0.12 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1650283200">- Version 6.0.13 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1654344000">- Version 6.0.14 - Bugfix Release</changelog>
</package>
<package pkgid="b10aab268e741ecd63919d7f2e913df1574016c41683842ceb14d0745953eb01" name="trytond_stock" arch="src">
  <version epoch="0" ver="6.0.14" rel="bp154.2.3.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1553428800">- Version 4.6.5 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1558094400">- Version 4.6.6 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1562932800">- Version 4.6.7 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1574337600">- version 5.0.7 (GNU Health 3.6 series)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1580644800">- Version 5.0.8 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1583841600">- Version 5.0.9 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1591272000">- Version 5.0.10 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1607083200">- Version 5.0.11 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1611489600">- Adaption to new python-macros</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1612267200">- Version 5.0.12 - Bugfix Release</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1614427200">- add upstream signing key and validate source signature</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1620648000">- Version 5.0.13 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1624017600">- Version 5.0.14 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1638792000">- Version 5.0.16 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1641211200">- Version 5.0.17 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1644667200">- Version bump to Tryton 6.0 series</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1645185600">- Version 6.0.11 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1646222400">- Version 6.0.12 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1650283200">- Version 6.0.13 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1654344000">- Version 6.0.14 - Bugfix Release</changelog>
</package>
<package pkgid="c4c0a956e8479bbd055ccc320ca22e2f2d47be46703175576a1b2d4aafd52e0d" name="trytond_stock" arch="noarch">
  <version epoch="0" ver="6.0.15" rel="bp154.2.6.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1558094400">- Version 4.6.6 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1562932800">- Version 4.6.7 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1574337600">- version 5.0.7 (GNU Health 3.6 series)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1580644800">- Version 5.0.8 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1583841600">- Version 5.0.9 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1591272000">- Version 5.0.10 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1607083200">- Version 5.0.11 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1611489600">- Adaption to new python-macros</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1612267200">- Version 5.0.12 - Bugfix Release</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1614427200">- add upstream signing key and validate source signature</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1620648000">- Version 5.0.13 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1624017600">- Version 5.0.14 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1638792000">- Version 5.0.16 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1641211200">- Version 5.0.17 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1644667200">- Version bump to Tryton 6.0 series</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1645185600">- Version 6.0.11 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1646222400">- Version 6.0.12 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1650283200">- Version 6.0.13 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1654344000">- Version 6.0.14 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1656849600">- Version 6.0.15 - Bugfix Release</changelog>
</package>
<package pkgid="762aa7a5174e3fccfe0d5d683debdbd5b9961857d6fa269de5350ac78a4a56a3" name="trytond_stock" arch="src">
  <version epoch="0" ver="6.0.15" rel="bp154.2.6.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1558094400">- Version 4.6.6 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1562932800">- Version 4.6.7 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1574337600">- version 5.0.7 (GNU Health 3.6 series)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1580644800">- Version 5.0.8 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1583841600">- Version 5.0.9 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1591272000">- Version 5.0.10 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1607083200">- Version 5.0.11 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1611489600">- Adaption to new python-macros</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1612267200">- Version 5.0.12 - Bugfix Release</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1614427200">- add upstream signing key and validate source signature</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1620648000">- Version 5.0.13 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1624017600">- Version 5.0.14 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1638792000">- Version 5.0.16 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1641211200">- Version 5.0.17 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1644667200">- Version bump to Tryton 6.0 series</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1645185600">- Version 6.0.11 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1646222400">- Version 6.0.12 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1650283200">- Version 6.0.13 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1654344000">- Version 6.0.14 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1656849600">- Version 6.0.15 - Bugfix Release</changelog>
</package>
<package pkgid="de8fa66b0d970681e07786dae6af96438bc3e0a6f9be8e74fc89a6553877c09d" name="trytond_stock" arch="noarch">
  <version epoch="0" ver="6.0.16" rel="bp154.2.9.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1562932800">- Version 4.6.7 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1574337600">- version 5.0.7 (GNU Health 3.6 series)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1580644800">- Version 5.0.8 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1583841600">- Version 5.0.9 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1591272000">- Version 5.0.10 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1607083200">- Version 5.0.11 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1611489600">- Adaption to new python-macros</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1612267200">- Version 5.0.12 - Bugfix Release</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1614427200">- add upstream signing key and validate source signature</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1620648000">- Version 5.0.13 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1624017600">- Version 5.0.14 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1638792000">- Version 5.0.16 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1641211200">- Version 5.0.17 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1644667200">- Version bump to Tryton 6.0 series</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1645185600">- Version 6.0.11 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1646222400">- Version 6.0.12 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1650283200">- Version 6.0.13 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1654344000">- Version 6.0.14 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1656849600">- Version 6.0.15 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1662552000">- Version 6.0.16 - Bugfix Release</changelog>
</package>
<package pkgid="8e329eca353fcf1cdecacc29a07d519cd794ddb08994cd9a33c4ce01d20ccf97" name="trytond_stock" arch="src">
  <version epoch="0" ver="6.0.16" rel="bp154.2.9.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1562932800">- Version 4.6.7 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1574337600">- version 5.0.7 (GNU Health 3.6 series)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1580644800">- Version 5.0.8 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1583841600">- Version 5.0.9 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1591272000">- Version 5.0.10 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1607083200">- Version 5.0.11 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1611489600">- Adaption to new python-macros</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1612267200">- Version 5.0.12 - Bugfix Release</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1614427200">- add upstream signing key and validate source signature</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1620648000">- Version 5.0.13 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1624017600">- Version 5.0.14 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1638792000">- Version 5.0.16 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1641211200">- Version 5.0.17 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1644667200">- Version bump to Tryton 6.0 series</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1645185600">- Version 6.0.11 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1646222400">- Version 6.0.12 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1650283200">- Version 6.0.13 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1654344000">- Version 6.0.14 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1656849600">- Version 6.0.15 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1662552000">- Version 6.0.16 - Bugfix Release</changelog>
</package>
<package pkgid="1a9cbde1e74b35839fedb757b3789eacf45a6ee30987cd2a508c27685f83de49" name="trytond_stock" arch="noarch">
  <version epoch="0" ver="6.0.17" rel="bp154.2.12.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1574337600">- version 5.0.7 (GNU Health 3.6 series)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1580644800">- Version 5.0.8 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1583841600">- Version 5.0.9 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1591272000">- Version 5.0.10 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1607083200">- Version 5.0.11 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1611489600">- Adaption to new python-macros</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1612267200">- Version 5.0.12 - Bugfix Release</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1614427200">- add upstream signing key and validate source signature</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1620648000">- Version 5.0.13 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1624017600">- Version 5.0.14 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1638792000">- Version 5.0.16 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1641211200">- Version 5.0.17 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1644667200">- Version bump to Tryton 6.0 series</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1645185600">- Version 6.0.11 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1646222400">- Version 6.0.12 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1650283200">- Version 6.0.13 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1654344000">- Version 6.0.14 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1656849600">- Version 6.0.15 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1662552000">- Version 6.0.16 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1666094400">- Version 6.0.17 - Bugfix Release</changelog>
</package>
<package pkgid="b6ae8be1741e8d3c8fe76bc4c0c7b0d15b054867ac4a5242c8c5171eaf200c78" name="trytond_stock" arch="src">
  <version epoch="0" ver="6.0.17" rel="bp154.2.12.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1574337600">- version 5.0.7 (GNU Health 3.6 series)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1580644800">- Version 5.0.8 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1583841600">- Version 5.0.9 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1591272000">- Version 5.0.10 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1607083200">- Version 5.0.11 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1611489600">- Adaption to new python-macros</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1612267200">- Version 5.0.12 - Bugfix Release</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1614427200">- add upstream signing key and validate source signature</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1620648000">- Version 5.0.13 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1624017600">- Version 5.0.14 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1638792000">- Version 5.0.16 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1641211200">- Version 5.0.17 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1644667200">- Version bump to Tryton 6.0 series</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1645185600">- Version 6.0.11 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1646222400">- Version 6.0.12 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1650283200">- Version 6.0.13 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1654344000">- Version 6.0.14 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1656849600">- Version 6.0.15 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1662552000">- Version 6.0.16 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1666094400">- Version 6.0.17 - Bugfix Release</changelog>
</package>
<package pkgid="9b6fa433a1c67d3209855350bc7a20fa2803d11b9254be95c8c72f0d33c2c8c5" name="trytond_stock" arch="noarch">
  <version epoch="0" ver="6.0.18" rel="bp154.2.15.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1580644800">- Version 5.0.8 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1583841600">- Version 5.0.9 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1591272000">- Version 5.0.10 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1607083200">- Version 5.0.11 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1611489600">- Adaption to new python-macros</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1612267200">- Version 5.0.12 - Bugfix Release</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1614427200">- add upstream signing key and validate source signature</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1620648000">- Version 5.0.13 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1624017600">- Version 5.0.14 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1638792000">- Version 5.0.16 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1641211200">- Version 5.0.17 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1644667200">- Version bump to Tryton 6.0 series</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1645185600">- Version 6.0.11 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1646222400">- Version 6.0.12 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1650283200">- Version 6.0.13 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1654344000">- Version 6.0.14 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1656849600">- Version 6.0.15 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1662552000">- Version 6.0.16 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1666094400">- Version 6.0.17 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1668772800">- Version 6.0.18 - Bugfix Release</changelog>
</package>
<package pkgid="2097d28c78eb3ddae8bb3a8cb47491ee301702ff1ba7119e6b67616c3e91ec0b" name="trytond_stock" arch="src">
  <version epoch="0" ver="6.0.18" rel="bp154.2.15.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1580644800">- Version 5.0.8 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1583841600">- Version 5.0.9 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1591272000">- Version 5.0.10 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1607083200">- Version 5.0.11 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1611489600">- Adaption to new python-macros</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1612267200">- Version 5.0.12 - Bugfix Release</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1614427200">- add upstream signing key and validate source signature</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1620648000">- Version 5.0.13 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1624017600">- Version 5.0.14 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1638792000">- Version 5.0.16 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1641211200">- Version 5.0.17 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1644667200">- Version bump to Tryton 6.0 series</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1645185600">- Version 6.0.11 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1646222400">- Version 6.0.12 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1650283200">- Version 6.0.13 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1654344000">- Version 6.0.14 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1656849600">- Version 6.0.15 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1662552000">- Version 6.0.16 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1666094400">- Version 6.0.17 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1668772800">- Version 6.0.18 - Bugfix Release</changelog>
</package>
<package pkgid="7257af8cd8271dc244576b0cd98cb5371af183fd064e85edbac3cb4c2c76396e" name="trytond_stock_supply" arch="noarch">
  <version epoch="0" ver="6.0.3" rel="bp154.2.3.1"/>
  <changelog author="axel.braun@gmx.de" date="1429099200">- Tryton Release 3.6</changelog>
  <changelog author="axel.braun@gmx.de" date="1445256000">- Tryton Release 3.8</changelog>
  <changelog author="axel.braun@gmx.de" date="1462190400">- Tryton Release 4.0</changelog>
  <changelog author="axel.braun@gmx.de" date="1480334400">- Tryton Release 4.2</changelog>
  <changelog author="axel.braun@gmx.de" date="1486468800">- Version 4.2.1</changelog>
  <changelog author="axel.braun@gmx.de" date="1534939200">- Version 4.2.2 - Bugfix Release (boo#1107771)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1544443200">- Version 4.2.3 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1544443201">- Version 4.6.2 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1558094400">- Version 4.6.3 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1573473600">- Version 4.6.4 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1574337600">- version 5.0.4 (GNU Health 3.6 series)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1586001600">- Version 5.0.5 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1592395200">- Version 5.0.6 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1611489600">- Adaption to new python-macros</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1614427200">- add upstream signing key and validate source signature</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1624017600">- Version 5.0.7 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1626955200">- Version 5.0.8 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1644667200">- Version bump to Tryton 6.0 series</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1650283200">- Version 6.0.2 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1654344000">- Version 6.0.3 - Bugfix Release</changelog>
</package>
<package pkgid="8d7d39a00f7faccc437d22f72d601e84ec3fae6cc82b66e6ea00537addd1ddc6" name="trytond_stock_supply" arch="src">
  <version epoch="0" ver="6.0.3" rel="bp154.2.3.1"/>
  <changelog author="axel.braun@gmx.de" date="1429099200">- Tryton Release 3.6</changelog>
  <changelog author="axel.braun@gmx.de" date="1445256000">- Tryton Release 3.8</changelog>
  <changelog author="axel.braun@gmx.de" date="1462190400">- Tryton Release 4.0</changelog>
  <changelog author="axel.braun@gmx.de" date="1480334400">- Tryton Release 4.2</changelog>
  <changelog author="axel.braun@gmx.de" date="1486468800">- Version 4.2.1</changelog>
  <changelog author="axel.braun@gmx.de" date="1534939200">- Version 4.2.2 - Bugfix Release (boo#1107771)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1544443200">- Version 4.2.3 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1544443201">- Version 4.6.2 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1558094400">- Version 4.6.3 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1573473600">- Version 4.6.4 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1574337600">- version 5.0.4 (GNU Health 3.6 series)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1586001600">- Version 5.0.5 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1592395200">- Version 5.0.6 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1611489600">- Adaption to new python-macros</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1614427200">- add upstream signing key and validate source signature</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1624017600">- Version 5.0.7 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1626955200">- Version 5.0.8 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1644667200">- Version bump to Tryton 6.0 series</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1650283200">- Version 6.0.2 - Bugfix Release</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1654344000">- Version 6.0.3 - Bugfix Release</changelog>
</package>
<package pkgid="d7ded48c40f68900d9adc303d12a73d9ab4484c4876885ec5896cf6cd395a2f9" name="tumbler" arch="aarch64">
  <version epoch="0" ver="4.16.1" rel="bp154.3.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1511006400">- add explicit libtumbler versioned dependency to tumbler</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1523188800">- update to version 0.2.1
  - Handle 0 mtime threshold on Cleanup DBus method. This fixes
    running across all thumbnails that was causing very high I/O
    bandwidth usage when a file with a thumbnail gets deleted. (On
    dbus Cleanup method). bxo#9231</changelog>
  <changelog author="Stefan Seyfried &lt;seife+obs@b1-systems.com&gt;" date="1537012800">- update to version 0.2.3
  - Test sparse files only for regular files (bxo#14693).
  - Fix uninitialized variable (bxo#14688)
  - Added check to avoid sparse files, that cause high cpu and
    memory load. (bxo#12259).
  - Use hash table to avoid scanning xdg user path twice when
    searching for desktop thumbnailers.
  - Close desktop thumbnailers directory when done from it.
  - Accept network paths in ffmpeg thumbnailer plugin.
  - Use pkg-config to find FreeType &gt; 2.9.1.
  - Translation Updates</changelog>
  <changelog author="Vinzenz Vietzke &lt;vinz@vinzv.de&gt;" date="1558094400">- Update to version 0.2.4
  - Check for sparse video files only on plugin side
  - Set Max file sizes
  - Add Fujifilm RAF support (bxo#14522)
  - Add more media types for audio cover thumbnails (bxo#12041)
  - Fix a typo in desktop-thumbnailer-provider.c (bxo#14925)
  - Update URLs in README and configure.ac
  - Fix g_type_class_add_private is deprecated
  - Bump glib version
  - Translation Updates
- Added bcond to build with sources from git master branch
- Switched to %autosetup for simpler maintenance
- Switch urls to https://
- Cleaned up spec file</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1559476800">- Replace pkgconfig(liopenraw-gnome-1.0) BuildRequires with
  libopenraw-devel: the .pc file changed name between 0.0.x and
  0.1.x. Requiring the generic -devel name is easier than following
  upstreams namechanges.
- In case we build against libopenraw-gnome-0.1, update the build
  system to look for the right pc file using sed.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1559736000">- Added OBS service file to fetch git master sources when needed</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1561896000">- Update to version 0.2.5
  * Translation updates
- Removed unneeded BuildRoot</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1564315200">- Update to version 0.2.6
  * Translation updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1565611200">- Update to version 0.2.7
  * Translation updates
- Cleaned up spec file</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1565956800">- Fixed sources in spec file</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1576929600">- Updated to version 0.2.8
  * Fix thumbnail orientation (bxo#15011)
  * prepend $XDG_DATA_HOME/thumbnailers/ to thumbnailers directory
    (bxo#15858)
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1584014400">- Add support for WebP and custom folder thumbnails
  * Folder thumbnailer:
    https://docs.xfce.org/xfce/thunar/tumbler#customized_thumbnailer_for_folders
  * WebP thumbnailer: bxo#12528</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1596715200">- Update to version 0.2.9
  * This release addresses the issue described in gxo#xfce/tumbler#28
    and partially solved by the previous release 0.2.28.
    The issue now is completely solved by adding the correct
    orientation handling when fallback code for generating jpeg
    thumbnail takes place.</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1598616000">- Update to version 0.3.0
  * Fix jpeg thumbnail orientation when fallback code is taken place
    (gxo#xfce/tumbler#28).
  * Use AC_CONFIG_MACRO_DIRS instead of AC_CONFIG_MACRO_DIR
  * Fix GTimeVal deprecation
  * Drop support of GLib &lt; 2.32
  * Use guint32 for request handle and fix its further occurrences of 0
  * Implement Excludes paths in tumbler.rc
  * Translation Updates</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1604232000">- Weak dependencies: Use Supplements tag as recommended
  tumbler-folder-thumbnailer/tumbler-webp-thumbnailer dependencies
  for main package</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1604318400">- Remove hard dependency to Thunar 1.8.2. We use "Suggests" instead
  to make sure the correct version is picked while keeping a soft
  dependency.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1605528000">- Update to version 0.3.1
  - New plugin for epub books, using libgepub thumbnailer plugin
  - Fix documentation URL
  - Add README.md and EXTRA_DIST
  - Add new icon needed for xfce4-about-dialog
  - Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1608724800">- Update to version 4.16.0
  - Remove GLIB_CHECK_VERSION IFDEFs which are obsolete after glib bump
  - bump glib (and gio, gthread, etc) minimum to 2.50.0
  - Adjust bug report URL
  - Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1634212800">- Add Recommends: ffmpegthumbnailer</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1667995200">- Update to version 4.16.1 (boo#1205210)
  * gst-thumbnailer: Add mime type check (gxo#xfce/tumbler#65)
  * desktop-thumbnailer: Guard against null path
  * Fix typo in gthread version (gxo#xfce/tumbler!14)
- Exclude RAW thumbnailer on Tumbleweed and Leap 15.5+ because
  tumbler does not yet support openraw 0.3
- Allow building against libgepub-0.7 (boo#1203644):
  * Adjust BuildRequires to work with libgepub-0.6 or libgepub-0.7.
  * Replace libgepub-0.6 occurences in configure script with
    libgepub-0.7 when libgepub 0.7 is present.</changelog>
</package>
<package pkgid="28d16240736c6fe1a0d64d3cc223fc123b880f486142272dd3be3d06db73e098" name="tumbler" arch="ppc64le">
  <version epoch="0" ver="4.16.1" rel="bp154.3.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1511006400">- add explicit libtumbler versioned dependency to tumbler</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1523188800">- update to version 0.2.1
  - Handle 0 mtime threshold on Cleanup DBus method. This fixes
    running across all thumbnails that was causing very high I/O
    bandwidth usage when a file with a thumbnail gets deleted. (On
    dbus Cleanup method). bxo#9231</changelog>
  <changelog author="Stefan Seyfried &lt;seife+obs@b1-systems.com&gt;" date="1537012800">- update to version 0.2.3
  - Test sparse files only for regular files (bxo#14693).
  - Fix uninitialized variable (bxo#14688)
  - Added check to avoid sparse files, that cause high cpu and
    memory load. (bxo#12259).
  - Use hash table to avoid scanning xdg user path twice when
    searching for desktop thumbnailers.
  - Close desktop thumbnailers directory when done from it.
  - Accept network paths in ffmpeg thumbnailer plugin.
  - Use pkg-config to find FreeType &gt; 2.9.1.
  - Translation Updates</changelog>
  <changelog author="Vinzenz Vietzke &lt;vinz@vinzv.de&gt;" date="1558094400">- Update to version 0.2.4
  - Check for sparse video files only on plugin side
  - Set Max file sizes
  - Add Fujifilm RAF support (bxo#14522)
  - Add more media types for audio cover thumbnails (bxo#12041)
  - Fix a typo in desktop-thumbnailer-provider.c (bxo#14925)
  - Update URLs in README and configure.ac
  - Fix g_type_class_add_private is deprecated
  - Bump glib version
  - Translation Updates
- Added bcond to build with sources from git master branch
- Switched to %autosetup for simpler maintenance
- Switch urls to https://
- Cleaned up spec file</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1559476800">- Replace pkgconfig(liopenraw-gnome-1.0) BuildRequires with
  libopenraw-devel: the .pc file changed name between 0.0.x and
  0.1.x. Requiring the generic -devel name is easier than following
  upstreams namechanges.
- In case we build against libopenraw-gnome-0.1, update the build
  system to look for the right pc file using sed.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1559736000">- Added OBS service file to fetch git master sources when needed</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1561896000">- Update to version 0.2.5
  * Translation updates
- Removed unneeded BuildRoot</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1564315200">- Update to version 0.2.6
  * Translation updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1565611200">- Update to version 0.2.7
  * Translation updates
- Cleaned up spec file</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1565956800">- Fixed sources in spec file</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1576929600">- Updated to version 0.2.8
  * Fix thumbnail orientation (bxo#15011)
  * prepend $XDG_DATA_HOME/thumbnailers/ to thumbnailers directory
    (bxo#15858)
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1584014400">- Add support for WebP and custom folder thumbnails
  * Folder thumbnailer:
    https://docs.xfce.org/xfce/thunar/tumbler#customized_thumbnailer_for_folders
  * WebP thumbnailer: bxo#12528</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1596715200">- Update to version 0.2.9
  * This release addresses the issue described in gxo#xfce/tumbler#28
    and partially solved by the previous release 0.2.28.
    The issue now is completely solved by adding the correct
    orientation handling when fallback code for generating jpeg
    thumbnail takes place.</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1598616000">- Update to version 0.3.0
  * Fix jpeg thumbnail orientation when fallback code is taken place
    (gxo#xfce/tumbler#28).
  * Use AC_CONFIG_MACRO_DIRS instead of AC_CONFIG_MACRO_DIR
  * Fix GTimeVal deprecation
  * Drop support of GLib &lt; 2.32
  * Use guint32 for request handle and fix its further occurrences of 0
  * Implement Excludes paths in tumbler.rc
  * Translation Updates</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1604232000">- Weak dependencies: Use Supplements tag as recommended
  tumbler-folder-thumbnailer/tumbler-webp-thumbnailer dependencies
  for main package</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1604318400">- Remove hard dependency to Thunar 1.8.2. We use "Suggests" instead
  to make sure the correct version is picked while keeping a soft
  dependency.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1605528000">- Update to version 0.3.1
  - New plugin for epub books, using libgepub thumbnailer plugin
  - Fix documentation URL
  - Add README.md and EXTRA_DIST
  - Add new icon needed for xfce4-about-dialog
  - Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1608724800">- Update to version 4.16.0
  - Remove GLIB_CHECK_VERSION IFDEFs which are obsolete after glib bump
  - bump glib (and gio, gthread, etc) minimum to 2.50.0
  - Adjust bug report URL
  - Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1634212800">- Add Recommends: ffmpegthumbnailer</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1667995200">- Update to version 4.16.1 (boo#1205210)
  * gst-thumbnailer: Add mime type check (gxo#xfce/tumbler#65)
  * desktop-thumbnailer: Guard against null path
  * Fix typo in gthread version (gxo#xfce/tumbler!14)
- Exclude RAW thumbnailer on Tumbleweed and Leap 15.5+ because
  tumbler does not yet support openraw 0.3
- Allow building against libgepub-0.7 (boo#1203644):
  * Adjust BuildRequires to work with libgepub-0.6 or libgepub-0.7.
  * Replace libgepub-0.6 occurences in configure script with
    libgepub-0.7 when libgepub 0.7 is present.</changelog>
</package>
<package pkgid="ca565103e4d7398f2fffb2be01a581e62233f7cd9c5aa3cf7518c517ae19c9d5" name="tumbler" arch="s390x">
  <version epoch="0" ver="4.16.1" rel="bp154.3.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1511006400">- add explicit libtumbler versioned dependency to tumbler</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1523188800">- update to version 0.2.1
  - Handle 0 mtime threshold on Cleanup DBus method. This fixes
    running across all thumbnails that was causing very high I/O
    bandwidth usage when a file with a thumbnail gets deleted. (On
    dbus Cleanup method). bxo#9231</changelog>
  <changelog author="Stefan Seyfried &lt;seife+obs@b1-systems.com&gt;" date="1537012800">- update to version 0.2.3
  - Test sparse files only for regular files (bxo#14693).
  - Fix uninitialized variable (bxo#14688)
  - Added check to avoid sparse files, that cause high cpu and
    memory load. (bxo#12259).
  - Use hash table to avoid scanning xdg user path twice when
    searching for desktop thumbnailers.
  - Close desktop thumbnailers directory when done from it.
  - Accept network paths in ffmpeg thumbnailer plugin.
  - Use pkg-config to find FreeType &gt; 2.9.1.
  - Translation Updates</changelog>
  <changelog author="Vinzenz Vietzke &lt;vinz@vinzv.de&gt;" date="1558094400">- Update to version 0.2.4
  - Check for sparse video files only on plugin side
  - Set Max file sizes
  - Add Fujifilm RAF support (bxo#14522)
  - Add more media types for audio cover thumbnails (bxo#12041)
  - Fix a typo in desktop-thumbnailer-provider.c (bxo#14925)
  - Update URLs in README and configure.ac
  - Fix g_type_class_add_private is deprecated
  - Bump glib version
  - Translation Updates
- Added bcond to build with sources from git master branch
- Switched to %autosetup for simpler maintenance
- Switch urls to https://
- Cleaned up spec file</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1559476800">- Replace pkgconfig(liopenraw-gnome-1.0) BuildRequires with
  libopenraw-devel: the .pc file changed name between 0.0.x and
  0.1.x. Requiring the generic -devel name is easier than following
  upstreams namechanges.
- In case we build against libopenraw-gnome-0.1, update the build
  system to look for the right pc file using sed.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1559736000">- Added OBS service file to fetch git master sources when needed</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1561896000">- Update to version 0.2.5
  * Translation updates
- Removed unneeded BuildRoot</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1564315200">- Update to version 0.2.6
  * Translation updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1565611200">- Update to version 0.2.7
  * Translation updates
- Cleaned up spec file</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1565956800">- Fixed sources in spec file</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1576929600">- Updated to version 0.2.8
  * Fix thumbnail orientation (bxo#15011)
  * prepend $XDG_DATA_HOME/thumbnailers/ to thumbnailers directory
    (bxo#15858)
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1584014400">- Add support for WebP and custom folder thumbnails
  * Folder thumbnailer:
    https://docs.xfce.org/xfce/thunar/tumbler#customized_thumbnailer_for_folders
  * WebP thumbnailer: bxo#12528</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1596715200">- Update to version 0.2.9
  * This release addresses the issue described in gxo#xfce/tumbler#28
    and partially solved by the previous release 0.2.28.
    The issue now is completely solved by adding the correct
    orientation handling when fallback code for generating jpeg
    thumbnail takes place.</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1598616000">- Update to version 0.3.0
  * Fix jpeg thumbnail orientation when fallback code is taken place
    (gxo#xfce/tumbler#28).
  * Use AC_CONFIG_MACRO_DIRS instead of AC_CONFIG_MACRO_DIR
  * Fix GTimeVal deprecation
  * Drop support of GLib &lt; 2.32
  * Use guint32 for request handle and fix its further occurrences of 0
  * Implement Excludes paths in tumbler.rc
  * Translation Updates</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1604232000">- Weak dependencies: Use Supplements tag as recommended
  tumbler-folder-thumbnailer/tumbler-webp-thumbnailer dependencies
  for main package</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1604318400">- Remove hard dependency to Thunar 1.8.2. We use "Suggests" instead
  to make sure the correct version is picked while keeping a soft
  dependency.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1605528000">- Update to version 0.3.1
  - New plugin for epub books, using libgepub thumbnailer plugin
  - Fix documentation URL
  - Add README.md and EXTRA_DIST
  - Add new icon needed for xfce4-about-dialog
  - Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1608724800">- Update to version 4.16.0
  - Remove GLIB_CHECK_VERSION IFDEFs which are obsolete after glib bump
  - bump glib (and gio, gthread, etc) minimum to 2.50.0
  - Adjust bug report URL
  - Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1634212800">- Add Recommends: ffmpegthumbnailer</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1667995200">- Update to version 4.16.1 (boo#1205210)
  * gst-thumbnailer: Add mime type check (gxo#xfce/tumbler#65)
  * desktop-thumbnailer: Guard against null path
  * Fix typo in gthread version (gxo#xfce/tumbler!14)
- Exclude RAW thumbnailer on Tumbleweed and Leap 15.5+ because
  tumbler does not yet support openraw 0.3
- Allow building against libgepub-0.7 (boo#1203644):
  * Adjust BuildRequires to work with libgepub-0.6 or libgepub-0.7.
  * Replace libgepub-0.6 occurences in configure script with
    libgepub-0.7 when libgepub 0.7 is present.</changelog>
</package>
<package pkgid="dbdc864fab8e19d18169e60a571f282a08fe1b6fece5d52f130d5975399bbe1f" name="tumbler" arch="src">
  <version epoch="0" ver="4.16.1" rel="bp154.3.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1511006400">- add explicit libtumbler versioned dependency to tumbler</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1523188800">- update to version 0.2.1
  - Handle 0 mtime threshold on Cleanup DBus method. This fixes
    running across all thumbnails that was causing very high I/O
    bandwidth usage when a file with a thumbnail gets deleted. (On
    dbus Cleanup method). bxo#9231</changelog>
  <changelog author="Stefan Seyfried &lt;seife+obs@b1-systems.com&gt;" date="1537012800">- update to version 0.2.3
  - Test sparse files only for regular files (bxo#14693).
  - Fix uninitialized variable (bxo#14688)
  - Added check to avoid sparse files, that cause high cpu and
    memory load. (bxo#12259).
  - Use hash table to avoid scanning xdg user path twice when
    searching for desktop thumbnailers.
  - Close desktop thumbnailers directory when done from it.
  - Accept network paths in ffmpeg thumbnailer plugin.
  - Use pkg-config to find FreeType &gt; 2.9.1.
  - Translation Updates</changelog>
  <changelog author="Vinzenz Vietzke &lt;vinz@vinzv.de&gt;" date="1558094400">- Update to version 0.2.4
  - Check for sparse video files only on plugin side
  - Set Max file sizes
  - Add Fujifilm RAF support (bxo#14522)
  - Add more media types for audio cover thumbnails (bxo#12041)
  - Fix a typo in desktop-thumbnailer-provider.c (bxo#14925)
  - Update URLs in README and configure.ac
  - Fix g_type_class_add_private is deprecated
  - Bump glib version
  - Translation Updates
- Added bcond to build with sources from git master branch
- Switched to %autosetup for simpler maintenance
- Switch urls to https://
- Cleaned up spec file</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1559476800">- Replace pkgconfig(liopenraw-gnome-1.0) BuildRequires with
  libopenraw-devel: the .pc file changed name between 0.0.x and
  0.1.x. Requiring the generic -devel name is easier than following
  upstreams namechanges.
- In case we build against libopenraw-gnome-0.1, update the build
  system to look for the right pc file using sed.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1559736000">- Added OBS service file to fetch git master sources when needed</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1561896000">- Update to version 0.2.5
  * Translation updates
- Removed unneeded BuildRoot</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1564315200">- Update to version 0.2.6
  * Translation updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1565611200">- Update to version 0.2.7
  * Translation updates
- Cleaned up spec file</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1565956800">- Fixed sources in spec file</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1576929600">- Updated to version 0.2.8
  * Fix thumbnail orientation (bxo#15011)
  * prepend $XDG_DATA_HOME/thumbnailers/ to thumbnailers directory
    (bxo#15858)
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1584014400">- Add support for WebP and custom folder thumbnails
  * Folder thumbnailer:
    https://docs.xfce.org/xfce/thunar/tumbler#customized_thumbnailer_for_folders
  * WebP thumbnailer: bxo#12528</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1596715200">- Update to version 0.2.9
  * This release addresses the issue described in gxo#xfce/tumbler#28
    and partially solved by the previous release 0.2.28.
    The issue now is completely solved by adding the correct
    orientation handling when fallback code for generating jpeg
    thumbnail takes place.</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1598616000">- Update to version 0.3.0
  * Fix jpeg thumbnail orientation when fallback code is taken place
    (gxo#xfce/tumbler#28).
  * Use AC_CONFIG_MACRO_DIRS instead of AC_CONFIG_MACRO_DIR
  * Fix GTimeVal deprecation
  * Drop support of GLib &lt; 2.32
  * Use guint32 for request handle and fix its further occurrences of 0
  * Implement Excludes paths in tumbler.rc
  * Translation Updates</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1604232000">- Weak dependencies: Use Supplements tag as recommended
  tumbler-folder-thumbnailer/tumbler-webp-thumbnailer dependencies
  for main package</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1604318400">- Remove hard dependency to Thunar 1.8.2. We use "Suggests" instead
  to make sure the correct version is picked while keeping a soft
  dependency.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1605528000">- Update to version 0.3.1
  - New plugin for epub books, using libgepub thumbnailer plugin
  - Fix documentation URL
  - Add README.md and EXTRA_DIST
  - Add new icon needed for xfce4-about-dialog
  - Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1608724800">- Update to version 4.16.0
  - Remove GLIB_CHECK_VERSION IFDEFs which are obsolete after glib bump
  - bump glib (and gio, gthread, etc) minimum to 2.50.0
  - Adjust bug report URL
  - Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1634212800">- Add Recommends: ffmpegthumbnailer</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1667995200">- Update to version 4.16.1 (boo#1205210)
  * gst-thumbnailer: Add mime type check (gxo#xfce/tumbler#65)
  * desktop-thumbnailer: Guard against null path
  * Fix typo in gthread version (gxo#xfce/tumbler!14)
- Exclude RAW thumbnailer on Tumbleweed and Leap 15.5+ because
  tumbler does not yet support openraw 0.3
- Allow building against libgepub-0.7 (boo#1203644):
  * Adjust BuildRequires to work with libgepub-0.6 or libgepub-0.7.
  * Replace libgepub-0.6 occurences in configure script with
    libgepub-0.7 when libgepub 0.7 is present.</changelog>
</package>
<package pkgid="a9001ba529626cd4b9217babccef1f0d73e1a0c1cb6c9f3e47e79bfbf7974557" name="tumbler" arch="x86_64">
  <version epoch="0" ver="4.16.1" rel="bp154.3.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1511006400">- add explicit libtumbler versioned dependency to tumbler</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1523188800">- update to version 0.2.1
  - Handle 0 mtime threshold on Cleanup DBus method. This fixes
    running across all thumbnails that was causing very high I/O
    bandwidth usage when a file with a thumbnail gets deleted. (On
    dbus Cleanup method). bxo#9231</changelog>
  <changelog author="Stefan Seyfried &lt;seife+obs@b1-systems.com&gt;" date="1537012800">- update to version 0.2.3
  - Test sparse files only for regular files (bxo#14693).
  - Fix uninitialized variable (bxo#14688)
  - Added check to avoid sparse files, that cause high cpu and
    memory load. (bxo#12259).
  - Use hash table to avoid scanning xdg user path twice when
    searching for desktop thumbnailers.
  - Close desktop thumbnailers directory when done from it.
  - Accept network paths in ffmpeg thumbnailer plugin.
  - Use pkg-config to find FreeType &gt; 2.9.1.
  - Translation Updates</changelog>
  <changelog author="Vinzenz Vietzke &lt;vinz@vinzv.de&gt;" date="1558094400">- Update to version 0.2.4
  - Check for sparse video files only on plugin side
  - Set Max file sizes
  - Add Fujifilm RAF support (bxo#14522)
  - Add more media types for audio cover thumbnails (bxo#12041)
  - Fix a typo in desktop-thumbnailer-provider.c (bxo#14925)
  - Update URLs in README and configure.ac
  - Fix g_type_class_add_private is deprecated
  - Bump glib version
  - Translation Updates
- Added bcond to build with sources from git master branch
- Switched to %autosetup for simpler maintenance
- Switch urls to https://
- Cleaned up spec file</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1559476800">- Replace pkgconfig(liopenraw-gnome-1.0) BuildRequires with
  libopenraw-devel: the .pc file changed name between 0.0.x and
  0.1.x. Requiring the generic -devel name is easier than following
  upstreams namechanges.
- In case we build against libopenraw-gnome-0.1, update the build
  system to look for the right pc file using sed.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1559736000">- Added OBS service file to fetch git master sources when needed</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1561896000">- Update to version 0.2.5
  * Translation updates
- Removed unneeded BuildRoot</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1564315200">- Update to version 0.2.6
  * Translation updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1565611200">- Update to version 0.2.7
  * Translation updates
- Cleaned up spec file</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1565956800">- Fixed sources in spec file</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1576929600">- Updated to version 0.2.8
  * Fix thumbnail orientation (bxo#15011)
  * prepend $XDG_DATA_HOME/thumbnailers/ to thumbnailers directory
    (bxo#15858)
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1584014400">- Add support for WebP and custom folder thumbnails
  * Folder thumbnailer:
    https://docs.xfce.org/xfce/thunar/tumbler#customized_thumbnailer_for_folders
  * WebP thumbnailer: bxo#12528</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1596715200">- Update to version 0.2.9
  * This release addresses the issue described in gxo#xfce/tumbler#28
    and partially solved by the previous release 0.2.28.
    The issue now is completely solved by adding the correct
    orientation handling when fallback code for generating jpeg
    thumbnail takes place.</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1598616000">- Update to version 0.3.0
  * Fix jpeg thumbnail orientation when fallback code is taken place
    (gxo#xfce/tumbler#28).
  * Use AC_CONFIG_MACRO_DIRS instead of AC_CONFIG_MACRO_DIR
  * Fix GTimeVal deprecation
  * Drop support of GLib &lt; 2.32
  * Use guint32 for request handle and fix its further occurrences of 0
  * Implement Excludes paths in tumbler.rc
  * Translation Updates</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1604232000">- Weak dependencies: Use Supplements tag as recommended
  tumbler-folder-thumbnailer/tumbler-webp-thumbnailer dependencies
  for main package</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1604318400">- Remove hard dependency to Thunar 1.8.2. We use "Suggests" instead
  to make sure the correct version is picked while keeping a soft
  dependency.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1605528000">- Update to version 0.3.1
  - New plugin for epub books, using libgepub thumbnailer plugin
  - Fix documentation URL
  - Add README.md and EXTRA_DIST
  - Add new icon needed for xfce4-about-dialog
  - Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1608724800">- Update to version 4.16.0
  - Remove GLIB_CHECK_VERSION IFDEFs which are obsolete after glib bump
  - bump glib (and gio, gthread, etc) minimum to 2.50.0
  - Adjust bug report URL
  - Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1634212800">- Add Recommends: ffmpegthumbnailer</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1667995200">- Update to version 4.16.1 (boo#1205210)
  * gst-thumbnailer: Add mime type check (gxo#xfce/tumbler#65)
  * desktop-thumbnailer: Guard against null path
  * Fix typo in gthread version (gxo#xfce/tumbler!14)
- Exclude RAW thumbnailer on Tumbleweed and Leap 15.5+ because
  tumbler does not yet support openraw 0.3
- Allow building against libgepub-0.7 (boo#1203644):
  * Adjust BuildRequires to work with libgepub-0.6 or libgepub-0.7.
  * Replace libgepub-0.6 occurences in configure script with
    libgepub-0.7 when libgepub 0.7 is present.</changelog>
</package>
<package pkgid="37fe2179029df646ce513df21bba357359cc1fcab2292ce2891bcb780cc010c4" name="tumbler-devel" arch="aarch64">
  <version epoch="0" ver="4.16.1" rel="bp154.3.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1511006400">- add explicit libtumbler versioned dependency to tumbler</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1523188800">- update to version 0.2.1
  - Handle 0 mtime threshold on Cleanup DBus method. This fixes
    running across all thumbnails that was causing very high I/O
    bandwidth usage when a file with a thumbnail gets deleted. (On
    dbus Cleanup method). bxo#9231</changelog>
  <changelog author="Stefan Seyfried &lt;seife+obs@b1-systems.com&gt;" date="1537012800">- update to version 0.2.3
  - Test sparse files only for regular files (bxo#14693).
  - Fix uninitialized variable (bxo#14688)
  - Added check to avoid sparse files, that cause high cpu and
    memory load. (bxo#12259).
  - Use hash table to avoid scanning xdg user path twice when
    searching for desktop thumbnailers.
  - Close desktop thumbnailers directory when done from it.
  - Accept network paths in ffmpeg thumbnailer plugin.
  - Use pkg-config to find FreeType &gt; 2.9.1.
  - Translation Updates</changelog>
  <changelog author="Vinzenz Vietzke &lt;vinz@vinzv.de&gt;" date="1558094400">- Update to version 0.2.4
  - Check for sparse video files only on plugin side
  - Set Max file sizes
  - Add Fujifilm RAF support (bxo#14522)
  - Add more media types for audio cover thumbnails (bxo#12041)
  - Fix a typo in desktop-thumbnailer-provider.c (bxo#14925)
  - Update URLs in README and configure.ac
  - Fix g_type_class_add_private is deprecated
  - Bump glib version
  - Translation Updates
- Added bcond to build with sources from git master branch
- Switched to %autosetup for simpler maintenance
- Switch urls to https://
- Cleaned up spec file</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1559476800">- Replace pkgconfig(liopenraw-gnome-1.0) BuildRequires with
  libopenraw-devel: the .pc file changed name between 0.0.x and
  0.1.x. Requiring the generic -devel name is easier than following
  upstreams namechanges.
- In case we build against libopenraw-gnome-0.1, update the build
  system to look for the right pc file using sed.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1559736000">- Added OBS service file to fetch git master sources when needed</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1561896000">- Update to version 0.2.5
  * Translation updates
- Removed unneeded BuildRoot</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1564315200">- Update to version 0.2.6
  * Translation updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1565611200">- Update to version 0.2.7
  * Translation updates
- Cleaned up spec file</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1565956800">- Fixed sources in spec file</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1576929600">- Updated to version 0.2.8
  * Fix thumbnail orientation (bxo#15011)
  * prepend $XDG_DATA_HOME/thumbnailers/ to thumbnailers directory
    (bxo#15858)
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1584014400">- Add support for WebP and custom folder thumbnails
  * Folder thumbnailer:
    https://docs.xfce.org/xfce/thunar/tumbler#customized_thumbnailer_for_folders
  * WebP thumbnailer: bxo#12528</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1596715200">- Update to version 0.2.9
  * This release addresses the issue described in gxo#xfce/tumbler#28
    and partially solved by the previous release 0.2.28.
    The issue now is completely solved by adding the correct
    orientation handling when fallback code for generating jpeg
    thumbnail takes place.</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1598616000">- Update to version 0.3.0
  * Fix jpeg thumbnail orientation when fallback code is taken place
    (gxo#xfce/tumbler#28).
  * Use AC_CONFIG_MACRO_DIRS instead of AC_CONFIG_MACRO_DIR
  * Fix GTimeVal deprecation
  * Drop support of GLib &lt; 2.32
  * Use guint32 for request handle and fix its further occurrences of 0
  * Implement Excludes paths in tumbler.rc
  * Translation Updates</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1604232000">- Weak dependencies: Use Supplements tag as recommended
  tumbler-folder-thumbnailer/tumbler-webp-thumbnailer dependencies
  for main package</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1604318400">- Remove hard dependency to Thunar 1.8.2. We use "Suggests" instead
  to make sure the correct version is picked while keeping a soft
  dependency.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1605528000">- Update to version 0.3.1
  - New plugin for epub books, using libgepub thumbnailer plugin
  - Fix documentation URL
  - Add README.md and EXTRA_DIST
  - Add new icon needed for xfce4-about-dialog
  - Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1608724800">- Update to version 4.16.0
  - Remove GLIB_CHECK_VERSION IFDEFs which are obsolete after glib bump
  - bump glib (and gio, gthread, etc) minimum to 2.50.0
  - Adjust bug report URL
  - Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1634212800">- Add Recommends: ffmpegthumbnailer</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1667995200">- Update to version 4.16.1 (boo#1205210)
  * gst-thumbnailer: Add mime type check (gxo#xfce/tumbler#65)
  * desktop-thumbnailer: Guard against null path
  * Fix typo in gthread version (gxo#xfce/tumbler!14)
- Exclude RAW thumbnailer on Tumbleweed and Leap 15.5+ because
  tumbler does not yet support openraw 0.3
- Allow building against libgepub-0.7 (boo#1203644):
  * Adjust BuildRequires to work with libgepub-0.6 or libgepub-0.7.
  * Replace libgepub-0.6 occurences in configure script with
    libgepub-0.7 when libgepub 0.7 is present.</changelog>
</package>
<package pkgid="5b948e13089463aa8be55ee8930da2f1163b299685bcdae265b6e6daa228478c" name="tumbler-devel" arch="ppc64le">
  <version epoch="0" ver="4.16.1" rel="bp154.3.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1511006400">- add explicit libtumbler versioned dependency to tumbler</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1523188800">- update to version 0.2.1
  - Handle 0 mtime threshold on Cleanup DBus method. This fixes
    running across all thumbnails that was causing very high I/O
    bandwidth usage when a file with a thumbnail gets deleted. (On
    dbus Cleanup method). bxo#9231</changelog>
  <changelog author="Stefan Seyfried &lt;seife+obs@b1-systems.com&gt;" date="1537012800">- update to version 0.2.3
  - Test sparse files only for regular files (bxo#14693).
  - Fix uninitialized variable (bxo#14688)
  - Added check to avoid sparse files, that cause high cpu and
    memory load. (bxo#12259).
  - Use hash table to avoid scanning xdg user path twice when
    searching for desktop thumbnailers.
  - Close desktop thumbnailers directory when done from it.
  - Accept network paths in ffmpeg thumbnailer plugin.
  - Use pkg-config to find FreeType &gt; 2.9.1.
  - Translation Updates</changelog>
  <changelog author="Vinzenz Vietzke &lt;vinz@vinzv.de&gt;" date="1558094400">- Update to version 0.2.4
  - Check for sparse video files only on plugin side
  - Set Max file sizes
  - Add Fujifilm RAF support (bxo#14522)
  - Add more media types for audio cover thumbnails (bxo#12041)
  - Fix a typo in desktop-thumbnailer-provider.c (bxo#14925)
  - Update URLs in README and configure.ac
  - Fix g_type_class_add_private is deprecated
  - Bump glib version
  - Translation Updates
- Added bcond to build with sources from git master branch
- Switched to %autosetup for simpler maintenance
- Switch urls to https://
- Cleaned up spec file</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1559476800">- Replace pkgconfig(liopenraw-gnome-1.0) BuildRequires with
  libopenraw-devel: the .pc file changed name between 0.0.x and
  0.1.x. Requiring the generic -devel name is easier than following
  upstreams namechanges.
- In case we build against libopenraw-gnome-0.1, update the build
  system to look for the right pc file using sed.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1559736000">- Added OBS service file to fetch git master sources when needed</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1561896000">- Update to version 0.2.5
  * Translation updates
- Removed unneeded BuildRoot</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1564315200">- Update to version 0.2.6
  * Translation updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1565611200">- Update to version 0.2.7
  * Translation updates
- Cleaned up spec file</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1565956800">- Fixed sources in spec file</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1576929600">- Updated to version 0.2.8
  * Fix thumbnail orientation (bxo#15011)
  * prepend $XDG_DATA_HOME/thumbnailers/ to thumbnailers directory
    (bxo#15858)
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1584014400">- Add support for WebP and custom folder thumbnails
  * Folder thumbnailer:
    https://docs.xfce.org/xfce/thunar/tumbler#customized_thumbnailer_for_folders
  * WebP thumbnailer: bxo#12528</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1596715200">- Update to version 0.2.9
  * This release addresses the issue described in gxo#xfce/tumbler#28
    and partially solved by the previous release 0.2.28.
    The issue now is completely solved by adding the correct
    orientation handling when fallback code for generating jpeg
    thumbnail takes place.</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1598616000">- Update to version 0.3.0
  * Fix jpeg thumbnail orientation when fallback code is taken place
    (gxo#xfce/tumbler#28).
  * Use AC_CONFIG_MACRO_DIRS instead of AC_CONFIG_MACRO_DIR
  * Fix GTimeVal deprecation
  * Drop support of GLib &lt; 2.32
  * Use guint32 for request handle and fix its further occurrences of 0
  * Implement Excludes paths in tumbler.rc
  * Translation Updates</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1604232000">- Weak dependencies: Use Supplements tag as recommended
  tumbler-folder-thumbnailer/tumbler-webp-thumbnailer dependencies
  for main package</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1604318400">- Remove hard dependency to Thunar 1.8.2. We use "Suggests" instead
  to make sure the correct version is picked while keeping a soft
  dependency.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1605528000">- Update to version 0.3.1
  - New plugin for epub books, using libgepub thumbnailer plugin
  - Fix documentation URL
  - Add README.md and EXTRA_DIST
  - Add new icon needed for xfce4-about-dialog
  - Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1608724800">- Update to version 4.16.0
  - Remove GLIB_CHECK_VERSION IFDEFs which are obsolete after glib bump
  - bump glib (and gio, gthread, etc) minimum to 2.50.0
  - Adjust bug report URL
  - Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1634212800">- Add Recommends: ffmpegthumbnailer</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1667995200">- Update to version 4.16.1 (boo#1205210)
  * gst-thumbnailer: Add mime type check (gxo#xfce/tumbler#65)
  * desktop-thumbnailer: Guard against null path
  * Fix typo in gthread version (gxo#xfce/tumbler!14)
- Exclude RAW thumbnailer on Tumbleweed and Leap 15.5+ because
  tumbler does not yet support openraw 0.3
- Allow building against libgepub-0.7 (boo#1203644):
  * Adjust BuildRequires to work with libgepub-0.6 or libgepub-0.7.
  * Replace libgepub-0.6 occurences in configure script with
    libgepub-0.7 when libgepub 0.7 is present.</changelog>
</package>
<package pkgid="c9b2fe0d09719e73514322c044ad0a50a07fc7bf703cbfdaec66fe1f1def7bbf" name="tumbler-devel" arch="s390x">
  <version epoch="0" ver="4.16.1" rel="bp154.3.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1511006400">- add explicit libtumbler versioned dependency to tumbler</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1523188800">- update to version 0.2.1
  - Handle 0 mtime threshold on Cleanup DBus method. This fixes
    running across all thumbnails that was causing very high I/O
    bandwidth usage when a file with a thumbnail gets deleted. (On
    dbus Cleanup method). bxo#9231</changelog>
  <changelog author="Stefan Seyfried &lt;seife+obs@b1-systems.com&gt;" date="1537012800">- update to version 0.2.3
  - Test sparse files only for regular files (bxo#14693).
  - Fix uninitialized variable (bxo#14688)
  - Added check to avoid sparse files, that cause high cpu and
    memory load. (bxo#12259).
  - Use hash table to avoid scanning xdg user path twice when
    searching for desktop thumbnailers.
  - Close desktop thumbnailers directory when done from it.
  - Accept network paths in ffmpeg thumbnailer plugin.
  - Use pkg-config to find FreeType &gt; 2.9.1.
  - Translation Updates</changelog>
  <changelog author="Vinzenz Vietzke &lt;vinz@vinzv.de&gt;" date="1558094400">- Update to version 0.2.4
  - Check for sparse video files only on plugin side
  - Set Max file sizes
  - Add Fujifilm RAF support (bxo#14522)
  - Add more media types for audio cover thumbnails (bxo#12041)
  - Fix a typo in desktop-thumbnailer-provider.c (bxo#14925)
  - Update URLs in README and configure.ac
  - Fix g_type_class_add_private is deprecated
  - Bump glib version
  - Translation Updates
- Added bcond to build with sources from git master branch
- Switched to %autosetup for simpler maintenance
- Switch urls to https://
- Cleaned up spec file</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1559476800">- Replace pkgconfig(liopenraw-gnome-1.0) BuildRequires with
  libopenraw-devel: the .pc file changed name between 0.0.x and
  0.1.x. Requiring the generic -devel name is easier than following
  upstreams namechanges.
- In case we build against libopenraw-gnome-0.1, update the build
  system to look for the right pc file using sed.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1559736000">- Added OBS service file to fetch git master sources when needed</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1561896000">- Update to version 0.2.5
  * Translation updates
- Removed unneeded BuildRoot</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1564315200">- Update to version 0.2.6
  * Translation updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1565611200">- Update to version 0.2.7
  * Translation updates
- Cleaned up spec file</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1565956800">- Fixed sources in spec file</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1576929600">- Updated to version 0.2.8
  * Fix thumbnail orientation (bxo#15011)
  * prepend $XDG_DATA_HOME/thumbnailers/ to thumbnailers directory
    (bxo#15858)
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1584014400">- Add support for WebP and custom folder thumbnails
  * Folder thumbnailer:
    https://docs.xfce.org/xfce/thunar/tumbler#customized_thumbnailer_for_folders
  * WebP thumbnailer: bxo#12528</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1596715200">- Update to version 0.2.9
  * This release addresses the issue described in gxo#xfce/tumbler#28
    and partially solved by the previous release 0.2.28.
    The issue now is completely solved by adding the correct
    orientation handling when fallback code for generating jpeg
    thumbnail takes place.</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1598616000">- Update to version 0.3.0
  * Fix jpeg thumbnail orientation when fallback code is taken place
    (gxo#xfce/tumbler#28).
  * Use AC_CONFIG_MACRO_DIRS instead of AC_CONFIG_MACRO_DIR
  * Fix GTimeVal deprecation
  * Drop support of GLib &lt; 2.32
  * Use guint32 for request handle and fix its further occurrences of 0
  * Implement Excludes paths in tumbler.rc
  * Translation Updates</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1604232000">- Weak dependencies: Use Supplements tag as recommended
  tumbler-folder-thumbnailer/tumbler-webp-thumbnailer dependencies
  for main package</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1604318400">- Remove hard dependency to Thunar 1.8.2. We use "Suggests" instead
  to make sure the correct version is picked while keeping a soft
  dependency.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1605528000">- Update to version 0.3.1
  - New plugin for epub books, using libgepub thumbnailer plugin
  - Fix documentation URL
  - Add README.md and EXTRA_DIST
  - Add new icon needed for xfce4-about-dialog
  - Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1608724800">- Update to version 4.16.0
  - Remove GLIB_CHECK_VERSION IFDEFs which are obsolete after glib bump
  - bump glib (and gio, gthread, etc) minimum to 2.50.0
  - Adjust bug report URL
  - Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1634212800">- Add Recommends: ffmpegthumbnailer</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1667995200">- Update to version 4.16.1 (boo#1205210)
  * gst-thumbnailer: Add mime type check (gxo#xfce/tumbler#65)
  * desktop-thumbnailer: Guard against null path
  * Fix typo in gthread version (gxo#xfce/tumbler!14)
- Exclude RAW thumbnailer on Tumbleweed and Leap 15.5+ because
  tumbler does not yet support openraw 0.3
- Allow building against libgepub-0.7 (boo#1203644):
  * Adjust BuildRequires to work with libgepub-0.6 or libgepub-0.7.
  * Replace libgepub-0.6 occurences in configure script with
    libgepub-0.7 when libgepub 0.7 is present.</changelog>
</package>
<package pkgid="824b5760c52328b3534b01dded7b96aac6ce55b4deb77efc5c4c80a1c4eb8494" name="tumbler-devel" arch="x86_64">
  <version epoch="0" ver="4.16.1" rel="bp154.3.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1511006400">- add explicit libtumbler versioned dependency to tumbler</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1523188800">- update to version 0.2.1
  - Handle 0 mtime threshold on Cleanup DBus method. This fixes
    running across all thumbnails that was causing very high I/O
    bandwidth usage when a file with a thumbnail gets deleted. (On
    dbus Cleanup method). bxo#9231</changelog>
  <changelog author="Stefan Seyfried &lt;seife+obs@b1-systems.com&gt;" date="1537012800">- update to version 0.2.3
  - Test sparse files only for regular files (bxo#14693).
  - Fix uninitialized variable (bxo#14688)
  - Added check to avoid sparse files, that cause high cpu and
    memory load. (bxo#12259).
  - Use hash table to avoid scanning xdg user path twice when
    searching for desktop thumbnailers.
  - Close desktop thumbnailers directory when done from it.
  - Accept network paths in ffmpeg thumbnailer plugin.
  - Use pkg-config to find FreeType &gt; 2.9.1.
  - Translation Updates</changelog>
  <changelog author="Vinzenz Vietzke &lt;vinz@vinzv.de&gt;" date="1558094400">- Update to version 0.2.4
  - Check for sparse video files only on plugin side
  - Set Max file sizes
  - Add Fujifilm RAF support (bxo#14522)
  - Add more media types for audio cover thumbnails (bxo#12041)
  - Fix a typo in desktop-thumbnailer-provider.c (bxo#14925)
  - Update URLs in README and configure.ac
  - Fix g_type_class_add_private is deprecated
  - Bump glib version
  - Translation Updates
- Added bcond to build with sources from git master branch
- Switched to %autosetup for simpler maintenance
- Switch urls to https://
- Cleaned up spec file</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1559476800">- Replace pkgconfig(liopenraw-gnome-1.0) BuildRequires with
  libopenraw-devel: the .pc file changed name between 0.0.x and
  0.1.x. Requiring the generic -devel name is easier than following
  upstreams namechanges.
- In case we build against libopenraw-gnome-0.1, update the build
  system to look for the right pc file using sed.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1559736000">- Added OBS service file to fetch git master sources when needed</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1561896000">- Update to version 0.2.5
  * Translation updates
- Removed unneeded BuildRoot</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1564315200">- Update to version 0.2.6
  * Translation updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1565611200">- Update to version 0.2.7
  * Translation updates
- Cleaned up spec file</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1565956800">- Fixed sources in spec file</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1576929600">- Updated to version 0.2.8
  * Fix thumbnail orientation (bxo#15011)
  * prepend $XDG_DATA_HOME/thumbnailers/ to thumbnailers directory
    (bxo#15858)
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1584014400">- Add support for WebP and custom folder thumbnails
  * Folder thumbnailer:
    https://docs.xfce.org/xfce/thunar/tumbler#customized_thumbnailer_for_folders
  * WebP thumbnailer: bxo#12528</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1596715200">- Update to version 0.2.9
  * This release addresses the issue described in gxo#xfce/tumbler#28
    and partially solved by the previous release 0.2.28.
    The issue now is completely solved by adding the correct
    orientation handling when fallback code for generating jpeg
    thumbnail takes place.</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1598616000">- Update to version 0.3.0
  * Fix jpeg thumbnail orientation when fallback code is taken place
    (gxo#xfce/tumbler#28).
  * Use AC_CONFIG_MACRO_DIRS instead of AC_CONFIG_MACRO_DIR
  * Fix GTimeVal deprecation
  * Drop support of GLib &lt; 2.32
  * Use guint32 for request handle and fix its further occurrences of 0
  * Implement Excludes paths in tumbler.rc
  * Translation Updates</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1604232000">- Weak dependencies: Use Supplements tag as recommended
  tumbler-folder-thumbnailer/tumbler-webp-thumbnailer dependencies
  for main package</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1604318400">- Remove hard dependency to Thunar 1.8.2. We use "Suggests" instead
  to make sure the correct version is picked while keeping a soft
  dependency.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1605528000">- Update to version 0.3.1
  - New plugin for epub books, using libgepub thumbnailer plugin
  - Fix documentation URL
  - Add README.md and EXTRA_DIST
  - Add new icon needed for xfce4-about-dialog
  - Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1608724800">- Update to version 4.16.0
  - Remove GLIB_CHECK_VERSION IFDEFs which are obsolete after glib bump
  - bump glib (and gio, gthread, etc) minimum to 2.50.0
  - Adjust bug report URL
  - Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1634212800">- Add Recommends: ffmpegthumbnailer</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1667995200">- Update to version 4.16.1 (boo#1205210)
  * gst-thumbnailer: Add mime type check (gxo#xfce/tumbler#65)
  * desktop-thumbnailer: Guard against null path
  * Fix typo in gthread version (gxo#xfce/tumbler!14)
- Exclude RAW thumbnailer on Tumbleweed and Leap 15.5+ because
  tumbler does not yet support openraw 0.3
- Allow building against libgepub-0.7 (boo#1203644):
  * Adjust BuildRequires to work with libgepub-0.6 or libgepub-0.7.
  * Replace libgepub-0.6 occurences in configure script with
    libgepub-0.7 when libgepub 0.7 is present.</changelog>
</package>
<package pkgid="3c9a340b7e9a71a0e8f9551166df00d6352308a14100ea657733ccb1b4487b0b" name="tumbler-doc" arch="noarch">
  <version epoch="0" ver="4.16.1" rel="bp154.3.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1511006400">- add explicit libtumbler versioned dependency to tumbler</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1523188800">- update to version 0.2.1
  - Handle 0 mtime threshold on Cleanup DBus method. This fixes
    running across all thumbnails that was causing very high I/O
    bandwidth usage when a file with a thumbnail gets deleted. (On
    dbus Cleanup method). bxo#9231</changelog>
  <changelog author="Stefan Seyfried &lt;seife+obs@b1-systems.com&gt;" date="1537012800">- update to version 0.2.3
  - Test sparse files only for regular files (bxo#14693).
  - Fix uninitialized variable (bxo#14688)
  - Added check to avoid sparse files, that cause high cpu and
    memory load. (bxo#12259).
  - Use hash table to avoid scanning xdg user path twice when
    searching for desktop thumbnailers.
  - Close desktop thumbnailers directory when done from it.
  - Accept network paths in ffmpeg thumbnailer plugin.
  - Use pkg-config to find FreeType &gt; 2.9.1.
  - Translation Updates</changelog>
  <changelog author="Vinzenz Vietzke &lt;vinz@vinzv.de&gt;" date="1558094400">- Update to version 0.2.4
  - Check for sparse video files only on plugin side
  - Set Max file sizes
  - Add Fujifilm RAF support (bxo#14522)
  - Add more media types for audio cover thumbnails (bxo#12041)
  - Fix a typo in desktop-thumbnailer-provider.c (bxo#14925)
  - Update URLs in README and configure.ac
  - Fix g_type_class_add_private is deprecated
  - Bump glib version
  - Translation Updates
- Added bcond to build with sources from git master branch
- Switched to %autosetup for simpler maintenance
- Switch urls to https://
- Cleaned up spec file</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1559476800">- Replace pkgconfig(liopenraw-gnome-1.0) BuildRequires with
  libopenraw-devel: the .pc file changed name between 0.0.x and
  0.1.x. Requiring the generic -devel name is easier than following
  upstreams namechanges.
- In case we build against libopenraw-gnome-0.1, update the build
  system to look for the right pc file using sed.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1559736000">- Added OBS service file to fetch git master sources when needed</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1561896000">- Update to version 0.2.5
  * Translation updates
- Removed unneeded BuildRoot</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1564315200">- Update to version 0.2.6
  * Translation updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1565611200">- Update to version 0.2.7
  * Translation updates
- Cleaned up spec file</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1565956800">- Fixed sources in spec file</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1576929600">- Updated to version 0.2.8
  * Fix thumbnail orientation (bxo#15011)
  * prepend $XDG_DATA_HOME/thumbnailers/ to thumbnailers directory
    (bxo#15858)
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1584014400">- Add support for WebP and custom folder thumbnails
  * Folder thumbnailer:
    https://docs.xfce.org/xfce/thunar/tumbler#customized_thumbnailer_for_folders
  * WebP thumbnailer: bxo#12528</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1596715200">- Update to version 0.2.9
  * This release addresses the issue described in gxo#xfce/tumbler#28
    and partially solved by the previous release 0.2.28.
    The issue now is completely solved by adding the correct
    orientation handling when fallback code for generating jpeg
    thumbnail takes place.</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1598616000">- Update to version 0.3.0
  * Fix jpeg thumbnail orientation when fallback code is taken place
    (gxo#xfce/tumbler#28).
  * Use AC_CONFIG_MACRO_DIRS instead of AC_CONFIG_MACRO_DIR
  * Fix GTimeVal deprecation
  * Drop support of GLib &lt; 2.32
  * Use guint32 for request handle and fix its further occurrences of 0
  * Implement Excludes paths in tumbler.rc
  * Translation Updates</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1604232000">- Weak dependencies: Use Supplements tag as recommended
  tumbler-folder-thumbnailer/tumbler-webp-thumbnailer dependencies
  for main package</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1604318400">- Remove hard dependency to Thunar 1.8.2. We use "Suggests" instead
  to make sure the correct version is picked while keeping a soft
  dependency.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1605528000">- Update to version 0.3.1
  - New plugin for epub books, using libgepub thumbnailer plugin
  - Fix documentation URL
  - Add README.md and EXTRA_DIST
  - Add new icon needed for xfce4-about-dialog
  - Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1608724800">- Update to version 4.16.0
  - Remove GLIB_CHECK_VERSION IFDEFs which are obsolete after glib bump
  - bump glib (and gio, gthread, etc) minimum to 2.50.0
  - Adjust bug report URL
  - Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1634212800">- Add Recommends: ffmpegthumbnailer</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1667995200">- Update to version 4.16.1 (boo#1205210)
  * gst-thumbnailer: Add mime type check (gxo#xfce/tumbler#65)
  * desktop-thumbnailer: Guard against null path
  * Fix typo in gthread version (gxo#xfce/tumbler!14)
- Exclude RAW thumbnailer on Tumbleweed and Leap 15.5+ because
  tumbler does not yet support openraw 0.3
- Allow building against libgepub-0.7 (boo#1203644):
  * Adjust BuildRequires to work with libgepub-0.6 or libgepub-0.7.
  * Replace libgepub-0.6 occurences in configure script with
    libgepub-0.7 when libgepub 0.7 is present.</changelog>
</package>
<package pkgid="6401db232660e3c6a4bf6264dc715641bc61c0b06d575a122212f3540c49209d" name="tumbler-folder-thumbnailer" arch="aarch64">
  <version epoch="0" ver="4.16.1" rel="bp154.3.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1511006400">- add explicit libtumbler versioned dependency to tumbler</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1523188800">- update to version 0.2.1
  - Handle 0 mtime threshold on Cleanup DBus method. This fixes
    running across all thumbnails that was causing very high I/O
    bandwidth usage when a file with a thumbnail gets deleted. (On
    dbus Cleanup method). bxo#9231</changelog>
  <changelog author="Stefan Seyfried &lt;seife+obs@b1-systems.com&gt;" date="1537012800">- update to version 0.2.3
  - Test sparse files only for regular files (bxo#14693).
  - Fix uninitialized variable (bxo#14688)
  - Added check to avoid sparse files, that cause high cpu and
    memory load. (bxo#12259).
  - Use hash table to avoid scanning xdg user path twice when
    searching for desktop thumbnailers.
  - Close desktop thumbnailers directory when done from it.
  - Accept network paths in ffmpeg thumbnailer plugin.
  - Use pkg-config to find FreeType &gt; 2.9.1.
  - Translation Updates</changelog>
  <changelog author="Vinzenz Vietzke &lt;vinz@vinzv.de&gt;" date="1558094400">- Update to version 0.2.4
  - Check for sparse video files only on plugin side
  - Set Max file sizes
  - Add Fujifilm RAF support (bxo#14522)
  - Add more media types for audio cover thumbnails (bxo#12041)
  - Fix a typo in desktop-thumbnailer-provider.c (bxo#14925)
  - Update URLs in README and configure.ac
  - Fix g_type_class_add_private is deprecated
  - Bump glib version
  - Translation Updates
- Added bcond to build with sources from git master branch
- Switched to %autosetup for simpler maintenance
- Switch urls to https://
- Cleaned up spec file</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1559476800">- Replace pkgconfig(liopenraw-gnome-1.0) BuildRequires with
  libopenraw-devel: the .pc file changed name between 0.0.x and
  0.1.x. Requiring the generic -devel name is easier than following
  upstreams namechanges.
- In case we build against libopenraw-gnome-0.1, update the build
  system to look for the right pc file using sed.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1559736000">- Added OBS service file to fetch git master sources when needed</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1561896000">- Update to version 0.2.5
  * Translation updates
- Removed unneeded BuildRoot</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1564315200">- Update to version 0.2.6
  * Translation updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1565611200">- Update to version 0.2.7
  * Translation updates
- Cleaned up spec file</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1565956800">- Fixed sources in spec file</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1576929600">- Updated to version 0.2.8
  * Fix thumbnail orientation (bxo#15011)
  * prepend $XDG_DATA_HOME/thumbnailers/ to thumbnailers directory
    (bxo#15858)
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1584014400">- Add support for WebP and custom folder thumbnails
  * Folder thumbnailer:
    https://docs.xfce.org/xfce/thunar/tumbler#customized_thumbnailer_for_folders
  * WebP thumbnailer: bxo#12528</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1596715200">- Update to version 0.2.9
  * This release addresses the issue described in gxo#xfce/tumbler#28
    and partially solved by the previous release 0.2.28.
    The issue now is completely solved by adding the correct
    orientation handling when fallback code for generating jpeg
    thumbnail takes place.</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1598616000">- Update to version 0.3.0
  * Fix jpeg thumbnail orientation when fallback code is taken place
    (gxo#xfce/tumbler#28).
  * Use AC_CONFIG_MACRO_DIRS instead of AC_CONFIG_MACRO_DIR
  * Fix GTimeVal deprecation
  * Drop support of GLib &lt; 2.32
  * Use guint32 for request handle and fix its further occurrences of 0
  * Implement Excludes paths in tumbler.rc
  * Translation Updates</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1604232000">- Weak dependencies: Use Supplements tag as recommended
  tumbler-folder-thumbnailer/tumbler-webp-thumbnailer dependencies
  for main package</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1604318400">- Remove hard dependency to Thunar 1.8.2. We use "Suggests" instead
  to make sure the correct version is picked while keeping a soft
  dependency.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1605528000">- Update to version 0.3.1
  - New plugin for epub books, using libgepub thumbnailer plugin
  - Fix documentation URL
  - Add README.md and EXTRA_DIST
  - Add new icon needed for xfce4-about-dialog
  - Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1608724800">- Update to version 4.16.0
  - Remove GLIB_CHECK_VERSION IFDEFs which are obsolete after glib bump
  - bump glib (and gio, gthread, etc) minimum to 2.50.0
  - Adjust bug report URL
  - Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1634212800">- Add Recommends: ffmpegthumbnailer</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1667995200">- Update to version 4.16.1 (boo#1205210)
  * gst-thumbnailer: Add mime type check (gxo#xfce/tumbler#65)
  * desktop-thumbnailer: Guard against null path
  * Fix typo in gthread version (gxo#xfce/tumbler!14)
- Exclude RAW thumbnailer on Tumbleweed and Leap 15.5+ because
  tumbler does not yet support openraw 0.3
- Allow building against libgepub-0.7 (boo#1203644):
  * Adjust BuildRequires to work with libgepub-0.6 or libgepub-0.7.
  * Replace libgepub-0.6 occurences in configure script with
    libgepub-0.7 when libgepub 0.7 is present.</changelog>
</package>
<package pkgid="51b7e671d3537b6c957732489e7aea084a279f9b17190673c907cb1c6604b990" name="tumbler-folder-thumbnailer" arch="ppc64le">
  <version epoch="0" ver="4.16.1" rel="bp154.3.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1511006400">- add explicit libtumbler versioned dependency to tumbler</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1523188800">- update to version 0.2.1
  - Handle 0 mtime threshold on Cleanup DBus method. This fixes
    running across all thumbnails that was causing very high I/O
    bandwidth usage when a file with a thumbnail gets deleted. (On
    dbus Cleanup method). bxo#9231</changelog>
  <changelog author="Stefan Seyfried &lt;seife+obs@b1-systems.com&gt;" date="1537012800">- update to version 0.2.3
  - Test sparse files only for regular files (bxo#14693).
  - Fix uninitialized variable (bxo#14688)
  - Added check to avoid sparse files, that cause high cpu and
    memory load. (bxo#12259).
  - Use hash table to avoid scanning xdg user path twice when
    searching for desktop thumbnailers.
  - Close desktop thumbnailers directory when done from it.
  - Accept network paths in ffmpeg thumbnailer plugin.
  - Use pkg-config to find FreeType &gt; 2.9.1.
  - Translation Updates</changelog>
  <changelog author="Vinzenz Vietzke &lt;vinz@vinzv.de&gt;" date="1558094400">- Update to version 0.2.4
  - Check for sparse video files only on plugin side
  - Set Max file sizes
  - Add Fujifilm RAF support (bxo#14522)
  - Add more media types for audio cover thumbnails (bxo#12041)
  - Fix a typo in desktop-thumbnailer-provider.c (bxo#14925)
  - Update URLs in README and configure.ac
  - Fix g_type_class_add_private is deprecated
  - Bump glib version
  - Translation Updates
- Added bcond to build with sources from git master branch
- Switched to %autosetup for simpler maintenance
- Switch urls to https://
- Cleaned up spec file</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1559476800">- Replace pkgconfig(liopenraw-gnome-1.0) BuildRequires with
  libopenraw-devel: the .pc file changed name between 0.0.x and
  0.1.x. Requiring the generic -devel name is easier than following
  upstreams namechanges.
- In case we build against libopenraw-gnome-0.1, update the build
  system to look for the right pc file using sed.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1559736000">- Added OBS service file to fetch git master sources when needed</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1561896000">- Update to version 0.2.5
  * Translation updates
- Removed unneeded BuildRoot</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1564315200">- Update to version 0.2.6
  * Translation updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1565611200">- Update to version 0.2.7
  * Translation updates
- Cleaned up spec file</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1565956800">- Fixed sources in spec file</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1576929600">- Updated to version 0.2.8
  * Fix thumbnail orientation (bxo#15011)
  * prepend $XDG_DATA_HOME/thumbnailers/ to thumbnailers directory
    (bxo#15858)
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1584014400">- Add support for WebP and custom folder thumbnails
  * Folder thumbnailer:
    https://docs.xfce.org/xfce/thunar/tumbler#customized_thumbnailer_for_folders
  * WebP thumbnailer: bxo#12528</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1596715200">- Update to version 0.2.9
  * This release addresses the issue described in gxo#xfce/tumbler#28
    and partially solved by the previous release 0.2.28.
    The issue now is completely solved by adding the correct
    orientation handling when fallback code for generating jpeg
    thumbnail takes place.</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1598616000">- Update to version 0.3.0
  * Fix jpeg thumbnail orientation when fallback code is taken place
    (gxo#xfce/tumbler#28).
  * Use AC_CONFIG_MACRO_DIRS instead of AC_CONFIG_MACRO_DIR
  * Fix GTimeVal deprecation
  * Drop support of GLib &lt; 2.32
  * Use guint32 for request handle and fix its further occurrences of 0
  * Implement Excludes paths in tumbler.rc
  * Translation Updates</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1604232000">- Weak dependencies: Use Supplements tag as recommended
  tumbler-folder-thumbnailer/tumbler-webp-thumbnailer dependencies
  for main package</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1604318400">- Remove hard dependency to Thunar 1.8.2. We use "Suggests" instead
  to make sure the correct version is picked while keeping a soft
  dependency.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1605528000">- Update to version 0.3.1
  - New plugin for epub books, using libgepub thumbnailer plugin
  - Fix documentation URL
  - Add README.md and EXTRA_DIST
  - Add new icon needed for xfce4-about-dialog
  - Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1608724800">- Update to version 4.16.0
  - Remove GLIB_CHECK_VERSION IFDEFs which are obsolete after glib bump
  - bump glib (and gio, gthread, etc) minimum to 2.50.0
  - Adjust bug report URL
  - Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1634212800">- Add Recommends: ffmpegthumbnailer</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1667995200">- Update to version 4.16.1 (boo#1205210)
  * gst-thumbnailer: Add mime type check (gxo#xfce/tumbler#65)
  * desktop-thumbnailer: Guard against null path
  * Fix typo in gthread version (gxo#xfce/tumbler!14)
- Exclude RAW thumbnailer on Tumbleweed and Leap 15.5+ because
  tumbler does not yet support openraw 0.3
- Allow building against libgepub-0.7 (boo#1203644):
  * Adjust BuildRequires to work with libgepub-0.6 or libgepub-0.7.
  * Replace libgepub-0.6 occurences in configure script with
    libgepub-0.7 when libgepub 0.7 is present.</changelog>
</package>
<package pkgid="a33d83a8a791f259fd23a9cbc3a50da2575c3e5b0b99ab6da815bfcd49fb0ba1" name="tumbler-folder-thumbnailer" arch="s390x">
  <version epoch="0" ver="4.16.1" rel="bp154.3.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1511006400">- add explicit libtumbler versioned dependency to tumbler</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1523188800">- update to version 0.2.1
  - Handle 0 mtime threshold on Cleanup DBus method. This fixes
    running across all thumbnails that was causing very high I/O
    bandwidth usage when a file with a thumbnail gets deleted. (On
    dbus Cleanup method). bxo#9231</changelog>
  <changelog author="Stefan Seyfried &lt;seife+obs@b1-systems.com&gt;" date="1537012800">- update to version 0.2.3
  - Test sparse files only for regular files (bxo#14693).
  - Fix uninitialized variable (bxo#14688)
  - Added check to avoid sparse files, that cause high cpu and
    memory load. (bxo#12259).
  - Use hash table to avoid scanning xdg user path twice when
    searching for desktop thumbnailers.
  - Close desktop thumbnailers directory when done from it.
  - Accept network paths in ffmpeg thumbnailer plugin.
  - Use pkg-config to find FreeType &gt; 2.9.1.
  - Translation Updates</changelog>
  <changelog author="Vinzenz Vietzke &lt;vinz@vinzv.de&gt;" date="1558094400">- Update to version 0.2.4
  - Check for sparse video files only on plugin side
  - Set Max file sizes
  - Add Fujifilm RAF support (bxo#14522)
  - Add more media types for audio cover thumbnails (bxo#12041)
  - Fix a typo in desktop-thumbnailer-provider.c (bxo#14925)
  - Update URLs in README and configure.ac
  - Fix g_type_class_add_private is deprecated
  - Bump glib version
  - Translation Updates
- Added bcond to build with sources from git master branch
- Switched to %autosetup for simpler maintenance
- Switch urls to https://
- Cleaned up spec file</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1559476800">- Replace pkgconfig(liopenraw-gnome-1.0) BuildRequires with
  libopenraw-devel: the .pc file changed name between 0.0.x and
  0.1.x. Requiring the generic -devel name is easier than following
  upstreams namechanges.
- In case we build against libopenraw-gnome-0.1, update the build
  system to look for the right pc file using sed.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1559736000">- Added OBS service file to fetch git master sources when needed</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1561896000">- Update to version 0.2.5
  * Translation updates
- Removed unneeded BuildRoot</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1564315200">- Update to version 0.2.6
  * Translation updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1565611200">- Update to version 0.2.7
  * Translation updates
- Cleaned up spec file</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1565956800">- Fixed sources in spec file</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1576929600">- Updated to version 0.2.8
  * Fix thumbnail orientation (bxo#15011)
  * prepend $XDG_DATA_HOME/thumbnailers/ to thumbnailers directory
    (bxo#15858)
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1584014400">- Add support for WebP and custom folder thumbnails
  * Folder thumbnailer:
    https://docs.xfce.org/xfce/thunar/tumbler#customized_thumbnailer_for_folders
  * WebP thumbnailer: bxo#12528</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1596715200">- Update to version 0.2.9
  * This release addresses the issue described in gxo#xfce/tumbler#28
    and partially solved by the previous release 0.2.28.
    The issue now is completely solved by adding the correct
    orientation handling when fallback code for generating jpeg
    thumbnail takes place.</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1598616000">- Update to version 0.3.0
  * Fix jpeg thumbnail orientation when fallback code is taken place
    (gxo#xfce/tumbler#28).
  * Use AC_CONFIG_MACRO_DIRS instead of AC_CONFIG_MACRO_DIR
  * Fix GTimeVal deprecation
  * Drop support of GLib &lt; 2.32
  * Use guint32 for request handle and fix its further occurrences of 0
  * Implement Excludes paths in tumbler.rc
  * Translation Updates</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1604232000">- Weak dependencies: Use Supplements tag as recommended
  tumbler-folder-thumbnailer/tumbler-webp-thumbnailer dependencies
  for main package</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1604318400">- Remove hard dependency to Thunar 1.8.2. We use "Suggests" instead
  to make sure the correct version is picked while keeping a soft
  dependency.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1605528000">- Update to version 0.3.1
  - New plugin for epub books, using libgepub thumbnailer plugin
  - Fix documentation URL
  - Add README.md and EXTRA_DIST
  - Add new icon needed for xfce4-about-dialog
  - Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1608724800">- Update to version 4.16.0
  - Remove GLIB_CHECK_VERSION IFDEFs which are obsolete after glib bump
  - bump glib (and gio, gthread, etc) minimum to 2.50.0
  - Adjust bug report URL
  - Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1634212800">- Add Recommends: ffmpegthumbnailer</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1667995200">- Update to version 4.16.1 (boo#1205210)
  * gst-thumbnailer: Add mime type check (gxo#xfce/tumbler#65)
  * desktop-thumbnailer: Guard against null path
  * Fix typo in gthread version (gxo#xfce/tumbler!14)
- Exclude RAW thumbnailer on Tumbleweed and Leap 15.5+ because
  tumbler does not yet support openraw 0.3
- Allow building against libgepub-0.7 (boo#1203644):
  * Adjust BuildRequires to work with libgepub-0.6 or libgepub-0.7.
  * Replace libgepub-0.6 occurences in configure script with
    libgepub-0.7 when libgepub 0.7 is present.</changelog>
</package>
<package pkgid="3b6ce69d78ddcbd093c16bdeb59b3a2d4ca4e22d94e31bbc4ef8d7b0009f2839" name="tumbler-folder-thumbnailer" arch="x86_64">
  <version epoch="0" ver="4.16.1" rel="bp154.3.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1511006400">- add explicit libtumbler versioned dependency to tumbler</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1523188800">- update to version 0.2.1
  - Handle 0 mtime threshold on Cleanup DBus method. This fixes
    running across all thumbnails that was causing very high I/O
    bandwidth usage when a file with a thumbnail gets deleted. (On
    dbus Cleanup method). bxo#9231</changelog>
  <changelog author="Stefan Seyfried &lt;seife+obs@b1-systems.com&gt;" date="1537012800">- update to version 0.2.3
  - Test sparse files only for regular files (bxo#14693).
  - Fix uninitialized variable (bxo#14688)
  - Added check to avoid sparse files, that cause high cpu and
    memory load. (bxo#12259).
  - Use hash table to avoid scanning xdg user path twice when
    searching for desktop thumbnailers.
  - Close desktop thumbnailers directory when done from it.
  - Accept network paths in ffmpeg thumbnailer plugin.
  - Use pkg-config to find FreeType &gt; 2.9.1.
  - Translation Updates</changelog>
  <changelog author="Vinzenz Vietzke &lt;vinz@vinzv.de&gt;" date="1558094400">- Update to version 0.2.4
  - Check for sparse video files only on plugin side
  - Set Max file sizes
  - Add Fujifilm RAF support (bxo#14522)
  - Add more media types for audio cover thumbnails (bxo#12041)
  - Fix a typo in desktop-thumbnailer-provider.c (bxo#14925)
  - Update URLs in README and configure.ac
  - Fix g_type_class_add_private is deprecated
  - Bump glib version
  - Translation Updates
- Added bcond to build with sources from git master branch
- Switched to %autosetup for simpler maintenance
- Switch urls to https://
- Cleaned up spec file</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1559476800">- Replace pkgconfig(liopenraw-gnome-1.0) BuildRequires with
  libopenraw-devel: the .pc file changed name between 0.0.x and
  0.1.x. Requiring the generic -devel name is easier than following
  upstreams namechanges.
- In case we build against libopenraw-gnome-0.1, update the build
  system to look for the right pc file using sed.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1559736000">- Added OBS service file to fetch git master sources when needed</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1561896000">- Update to version 0.2.5
  * Translation updates
- Removed unneeded BuildRoot</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1564315200">- Update to version 0.2.6
  * Translation updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1565611200">- Update to version 0.2.7
  * Translation updates
- Cleaned up spec file</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1565956800">- Fixed sources in spec file</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1576929600">- Updated to version 0.2.8
  * Fix thumbnail orientation (bxo#15011)
  * prepend $XDG_DATA_HOME/thumbnailers/ to thumbnailers directory
    (bxo#15858)
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1584014400">- Add support for WebP and custom folder thumbnails
  * Folder thumbnailer:
    https://docs.xfce.org/xfce/thunar/tumbler#customized_thumbnailer_for_folders
  * WebP thumbnailer: bxo#12528</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1596715200">- Update to version 0.2.9
  * This release addresses the issue described in gxo#xfce/tumbler#28
    and partially solved by the previous release 0.2.28.
    The issue now is completely solved by adding the correct
    orientation handling when fallback code for generating jpeg
    thumbnail takes place.</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1598616000">- Update to version 0.3.0
  * Fix jpeg thumbnail orientation when fallback code is taken place
    (gxo#xfce/tumbler#28).
  * Use AC_CONFIG_MACRO_DIRS instead of AC_CONFIG_MACRO_DIR
  * Fix GTimeVal deprecation
  * Drop support of GLib &lt; 2.32
  * Use guint32 for request handle and fix its further occurrences of 0
  * Implement Excludes paths in tumbler.rc
  * Translation Updates</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1604232000">- Weak dependencies: Use Supplements tag as recommended
  tumbler-folder-thumbnailer/tumbler-webp-thumbnailer dependencies
  for main package</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1604318400">- Remove hard dependency to Thunar 1.8.2. We use "Suggests" instead
  to make sure the correct version is picked while keeping a soft
  dependency.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1605528000">- Update to version 0.3.1
  - New plugin for epub books, using libgepub thumbnailer plugin
  - Fix documentation URL
  - Add README.md and EXTRA_DIST
  - Add new icon needed for xfce4-about-dialog
  - Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1608724800">- Update to version 4.16.0
  - Remove GLIB_CHECK_VERSION IFDEFs which are obsolete after glib bump
  - bump glib (and gio, gthread, etc) minimum to 2.50.0
  - Adjust bug report URL
  - Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1634212800">- Add Recommends: ffmpegthumbnailer</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1667995200">- Update to version 4.16.1 (boo#1205210)
  * gst-thumbnailer: Add mime type check (gxo#xfce/tumbler#65)
  * desktop-thumbnailer: Guard against null path
  * Fix typo in gthread version (gxo#xfce/tumbler!14)
- Exclude RAW thumbnailer on Tumbleweed and Leap 15.5+ because
  tumbler does not yet support openraw 0.3
- Allow building against libgepub-0.7 (boo#1203644):
  * Adjust BuildRequires to work with libgepub-0.6 or libgepub-0.7.
  * Replace libgepub-0.6 occurences in configure script with
    libgepub-0.7 when libgepub 0.7 is present.</changelog>
</package>
<package pkgid="07ddcab9393478eff9c61f4043eedfb0142745a1c4033785d91a766c36d89570" name="tumbler-lang" arch="noarch">
  <version epoch="0" ver="4.16.1" rel="bp154.3.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1511006400">- add explicit libtumbler versioned dependency to tumbler</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1523188800">- update to version 0.2.1
  - Handle 0 mtime threshold on Cleanup DBus method. This fixes
    running across all thumbnails that was causing very high I/O
    bandwidth usage when a file with a thumbnail gets deleted. (On
    dbus Cleanup method). bxo#9231</changelog>
  <changelog author="Stefan Seyfried &lt;seife+obs@b1-systems.com&gt;" date="1537012800">- update to version 0.2.3
  - Test sparse files only for regular files (bxo#14693).
  - Fix uninitialized variable (bxo#14688)
  - Added check to avoid sparse files, that cause high cpu and
    memory load. (bxo#12259).
  - Use hash table to avoid scanning xdg user path twice when
    searching for desktop thumbnailers.
  - Close desktop thumbnailers directory when done from it.
  - Accept network paths in ffmpeg thumbnailer plugin.
  - Use pkg-config to find FreeType &gt; 2.9.1.
  - Translation Updates</changelog>
  <changelog author="Vinzenz Vietzke &lt;vinz@vinzv.de&gt;" date="1558094400">- Update to version 0.2.4
  - Check for sparse video files only on plugin side
  - Set Max file sizes
  - Add Fujifilm RAF support (bxo#14522)
  - Add more media types for audio cover thumbnails (bxo#12041)
  - Fix a typo in desktop-thumbnailer-provider.c (bxo#14925)
  - Update URLs in README and configure.ac
  - Fix g_type_class_add_private is deprecated
  - Bump glib version
  - Translation Updates
- Added bcond to build with sources from git master branch
- Switched to %autosetup for simpler maintenance
- Switch urls to https://
- Cleaned up spec file</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1559476800">- Replace pkgconfig(liopenraw-gnome-1.0) BuildRequires with
  libopenraw-devel: the .pc file changed name between 0.0.x and
  0.1.x. Requiring the generic -devel name is easier than following
  upstreams namechanges.
- In case we build against libopenraw-gnome-0.1, update the build
  system to look for the right pc file using sed.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1559736000">- Added OBS service file to fetch git master sources when needed</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1561896000">- Update to version 0.2.5
  * Translation updates
- Removed unneeded BuildRoot</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1564315200">- Update to version 0.2.6
  * Translation updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1565611200">- Update to version 0.2.7
  * Translation updates
- Cleaned up spec file</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1565956800">- Fixed sources in spec file</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1576929600">- Updated to version 0.2.8
  * Fix thumbnail orientation (bxo#15011)
  * prepend $XDG_DATA_HOME/thumbnailers/ to thumbnailers directory
    (bxo#15858)
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1584014400">- Add support for WebP and custom folder thumbnails
  * Folder thumbnailer:
    https://docs.xfce.org/xfce/thunar/tumbler#customized_thumbnailer_for_folders
  * WebP thumbnailer: bxo#12528</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1596715200">- Update to version 0.2.9
  * This release addresses the issue described in gxo#xfce/tumbler#28
    and partially solved by the previous release 0.2.28.
    The issue now is completely solved by adding the correct
    orientation handling when fallback code for generating jpeg
    thumbnail takes place.</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1598616000">- Update to version 0.3.0
  * Fix jpeg thumbnail orientation when fallback code is taken place
    (gxo#xfce/tumbler#28).
  * Use AC_CONFIG_MACRO_DIRS instead of AC_CONFIG_MACRO_DIR
  * Fix GTimeVal deprecation
  * Drop support of GLib &lt; 2.32
  * Use guint32 for request handle and fix its further occurrences of 0
  * Implement Excludes paths in tumbler.rc
  * Translation Updates</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1604232000">- Weak dependencies: Use Supplements tag as recommended
  tumbler-folder-thumbnailer/tumbler-webp-thumbnailer dependencies
  for main package</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1604318400">- Remove hard dependency to Thunar 1.8.2. We use "Suggests" instead
  to make sure the correct version is picked while keeping a soft
  dependency.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1605528000">- Update to version 0.3.1
  - New plugin for epub books, using libgepub thumbnailer plugin
  - Fix documentation URL
  - Add README.md and EXTRA_DIST
  - Add new icon needed for xfce4-about-dialog
  - Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1608724800">- Update to version 4.16.0
  - Remove GLIB_CHECK_VERSION IFDEFs which are obsolete after glib bump
  - bump glib (and gio, gthread, etc) minimum to 2.50.0
  - Adjust bug report URL
  - Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1634212800">- Add Recommends: ffmpegthumbnailer</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1667995200">- Update to version 4.16.1 (boo#1205210)
  * gst-thumbnailer: Add mime type check (gxo#xfce/tumbler#65)
  * desktop-thumbnailer: Guard against null path
  * Fix typo in gthread version (gxo#xfce/tumbler!14)
- Exclude RAW thumbnailer on Tumbleweed and Leap 15.5+ because
  tumbler does not yet support openraw 0.3
- Allow building against libgepub-0.7 (boo#1203644):
  * Adjust BuildRequires to work with libgepub-0.6 or libgepub-0.7.
  * Replace libgepub-0.6 occurences in configure script with
    libgepub-0.7 when libgepub 0.7 is present.</changelog>
</package>
<package pkgid="dc1e8486ecc2c444b3d579d332b6b1878e27e695f1d39c2cf875ac50ad298d65" name="tumbler-webp-thumbnailer" arch="aarch64">
  <version epoch="0" ver="4.16.1" rel="bp154.3.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1511006400">- add explicit libtumbler versioned dependency to tumbler</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1523188800">- update to version 0.2.1
  - Handle 0 mtime threshold on Cleanup DBus method. This fixes
    running across all thumbnails that was causing very high I/O
    bandwidth usage when a file with a thumbnail gets deleted. (On
    dbus Cleanup method). bxo#9231</changelog>
  <changelog author="Stefan Seyfried &lt;seife+obs@b1-systems.com&gt;" date="1537012800">- update to version 0.2.3
  - Test sparse files only for regular files (bxo#14693).
  - Fix uninitialized variable (bxo#14688)
  - Added check to avoid sparse files, that cause high cpu and
    memory load. (bxo#12259).
  - Use hash table to avoid scanning xdg user path twice when
    searching for desktop thumbnailers.
  - Close desktop thumbnailers directory when done from it.
  - Accept network paths in ffmpeg thumbnailer plugin.
  - Use pkg-config to find FreeType &gt; 2.9.1.
  - Translation Updates</changelog>
  <changelog author="Vinzenz Vietzke &lt;vinz@vinzv.de&gt;" date="1558094400">- Update to version 0.2.4
  - Check for sparse video files only on plugin side
  - Set Max file sizes
  - Add Fujifilm RAF support (bxo#14522)
  - Add more media types for audio cover thumbnails (bxo#12041)
  - Fix a typo in desktop-thumbnailer-provider.c (bxo#14925)
  - Update URLs in README and configure.ac
  - Fix g_type_class_add_private is deprecated
  - Bump glib version
  - Translation Updates
- Added bcond to build with sources from git master branch
- Switched to %autosetup for simpler maintenance
- Switch urls to https://
- Cleaned up spec file</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1559476800">- Replace pkgconfig(liopenraw-gnome-1.0) BuildRequires with
  libopenraw-devel: the .pc file changed name between 0.0.x and
  0.1.x. Requiring the generic -devel name is easier than following
  upstreams namechanges.
- In case we build against libopenraw-gnome-0.1, update the build
  system to look for the right pc file using sed.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1559736000">- Added OBS service file to fetch git master sources when needed</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1561896000">- Update to version 0.2.5
  * Translation updates
- Removed unneeded BuildRoot</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1564315200">- Update to version 0.2.6
  * Translation updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1565611200">- Update to version 0.2.7
  * Translation updates
- Cleaned up spec file</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1565956800">- Fixed sources in spec file</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1576929600">- Updated to version 0.2.8
  * Fix thumbnail orientation (bxo#15011)
  * prepend $XDG_DATA_HOME/thumbnailers/ to thumbnailers directory
    (bxo#15858)
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1584014400">- Add support for WebP and custom folder thumbnails
  * Folder thumbnailer:
    https://docs.xfce.org/xfce/thunar/tumbler#customized_thumbnailer_for_folders
  * WebP thumbnailer: bxo#12528</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1596715200">- Update to version 0.2.9
  * This release addresses the issue described in gxo#xfce/tumbler#28
    and partially solved by the previous release 0.2.28.
    The issue now is completely solved by adding the correct
    orientation handling when fallback code for generating jpeg
    thumbnail takes place.</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1598616000">- Update to version 0.3.0
  * Fix jpeg thumbnail orientation when fallback code is taken place
    (gxo#xfce/tumbler#28).
  * Use AC_CONFIG_MACRO_DIRS instead of AC_CONFIG_MACRO_DIR
  * Fix GTimeVal deprecation
  * Drop support of GLib &lt; 2.32
  * Use guint32 for request handle and fix its further occurrences of 0
  * Implement Excludes paths in tumbler.rc
  * Translation Updates</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1604232000">- Weak dependencies: Use Supplements tag as recommended
  tumbler-folder-thumbnailer/tumbler-webp-thumbnailer dependencies
  for main package</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1604318400">- Remove hard dependency to Thunar 1.8.2. We use "Suggests" instead
  to make sure the correct version is picked while keeping a soft
  dependency.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1605528000">- Update to version 0.3.1
  - New plugin for epub books, using libgepub thumbnailer plugin
  - Fix documentation URL
  - Add README.md and EXTRA_DIST
  - Add new icon needed for xfce4-about-dialog
  - Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1608724800">- Update to version 4.16.0
  - Remove GLIB_CHECK_VERSION IFDEFs which are obsolete after glib bump
  - bump glib (and gio, gthread, etc) minimum to 2.50.0
  - Adjust bug report URL
  - Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1634212800">- Add Recommends: ffmpegthumbnailer</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1667995200">- Update to version 4.16.1 (boo#1205210)
  * gst-thumbnailer: Add mime type check (gxo#xfce/tumbler#65)
  * desktop-thumbnailer: Guard against null path
  * Fix typo in gthread version (gxo#xfce/tumbler!14)
- Exclude RAW thumbnailer on Tumbleweed and Leap 15.5+ because
  tumbler does not yet support openraw 0.3
- Allow building against libgepub-0.7 (boo#1203644):
  * Adjust BuildRequires to work with libgepub-0.6 or libgepub-0.7.
  * Replace libgepub-0.6 occurences in configure script with
    libgepub-0.7 when libgepub 0.7 is present.</changelog>
</package>
<package pkgid="16230126816c3678a147854b8d2870dd041109f828d43f9934d8d3eca54debac" name="tumbler-webp-thumbnailer" arch="ppc64le">
  <version epoch="0" ver="4.16.1" rel="bp154.3.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1511006400">- add explicit libtumbler versioned dependency to tumbler</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1523188800">- update to version 0.2.1
  - Handle 0 mtime threshold on Cleanup DBus method. This fixes
    running across all thumbnails that was causing very high I/O
    bandwidth usage when a file with a thumbnail gets deleted. (On
    dbus Cleanup method). bxo#9231</changelog>
  <changelog author="Stefan Seyfried &lt;seife+obs@b1-systems.com&gt;" date="1537012800">- update to version 0.2.3
  - Test sparse files only for regular files (bxo#14693).
  - Fix uninitialized variable (bxo#14688)
  - Added check to avoid sparse files, that cause high cpu and
    memory load. (bxo#12259).
  - Use hash table to avoid scanning xdg user path twice when
    searching for desktop thumbnailers.
  - Close desktop thumbnailers directory when done from it.
  - Accept network paths in ffmpeg thumbnailer plugin.
  - Use pkg-config to find FreeType &gt; 2.9.1.
  - Translation Updates</changelog>
  <changelog author="Vinzenz Vietzke &lt;vinz@vinzv.de&gt;" date="1558094400">- Update to version 0.2.4
  - Check for sparse video files only on plugin side
  - Set Max file sizes
  - Add Fujifilm RAF support (bxo#14522)
  - Add more media types for audio cover thumbnails (bxo#12041)
  - Fix a typo in desktop-thumbnailer-provider.c (bxo#14925)
  - Update URLs in README and configure.ac
  - Fix g_type_class_add_private is deprecated
  - Bump glib version
  - Translation Updates
- Added bcond to build with sources from git master branch
- Switched to %autosetup for simpler maintenance
- Switch urls to https://
- Cleaned up spec file</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1559476800">- Replace pkgconfig(liopenraw-gnome-1.0) BuildRequires with
  libopenraw-devel: the .pc file changed name between 0.0.x and
  0.1.x. Requiring the generic -devel name is easier than following
  upstreams namechanges.
- In case we build against libopenraw-gnome-0.1, update the build
  system to look for the right pc file using sed.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1559736000">- Added OBS service file to fetch git master sources when needed</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1561896000">- Update to version 0.2.5
  * Translation updates
- Removed unneeded BuildRoot</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1564315200">- Update to version 0.2.6
  * Translation updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1565611200">- Update to version 0.2.7
  * Translation updates
- Cleaned up spec file</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1565956800">- Fixed sources in spec file</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1576929600">- Updated to version 0.2.8
  * Fix thumbnail orientation (bxo#15011)
  * prepend $XDG_DATA_HOME/thumbnailers/ to thumbnailers directory
    (bxo#15858)
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1584014400">- Add support for WebP and custom folder thumbnails
  * Folder thumbnailer:
    https://docs.xfce.org/xfce/thunar/tumbler#customized_thumbnailer_for_folders
  * WebP thumbnailer: bxo#12528</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1596715200">- Update to version 0.2.9
  * This release addresses the issue described in gxo#xfce/tumbler#28
    and partially solved by the previous release 0.2.28.
    The issue now is completely solved by adding the correct
    orientation handling when fallback code for generating jpeg
    thumbnail takes place.</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1598616000">- Update to version 0.3.0
  * Fix jpeg thumbnail orientation when fallback code is taken place
    (gxo#xfce/tumbler#28).
  * Use AC_CONFIG_MACRO_DIRS instead of AC_CONFIG_MACRO_DIR
  * Fix GTimeVal deprecation
  * Drop support of GLib &lt; 2.32
  * Use guint32 for request handle and fix its further occurrences of 0
  * Implement Excludes paths in tumbler.rc
  * Translation Updates</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1604232000">- Weak dependencies: Use Supplements tag as recommended
  tumbler-folder-thumbnailer/tumbler-webp-thumbnailer dependencies
  for main package</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1604318400">- Remove hard dependency to Thunar 1.8.2. We use "Suggests" instead
  to make sure the correct version is picked while keeping a soft
  dependency.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1605528000">- Update to version 0.3.1
  - New plugin for epub books, using libgepub thumbnailer plugin
  - Fix documentation URL
  - Add README.md and EXTRA_DIST
  - Add new icon needed for xfce4-about-dialog
  - Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1608724800">- Update to version 4.16.0
  - Remove GLIB_CHECK_VERSION IFDEFs which are obsolete after glib bump
  - bump glib (and gio, gthread, etc) minimum to 2.50.0
  - Adjust bug report URL
  - Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1634212800">- Add Recommends: ffmpegthumbnailer</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1667995200">- Update to version 4.16.1 (boo#1205210)
  * gst-thumbnailer: Add mime type check (gxo#xfce/tumbler#65)
  * desktop-thumbnailer: Guard against null path
  * Fix typo in gthread version (gxo#xfce/tumbler!14)
- Exclude RAW thumbnailer on Tumbleweed and Leap 15.5+ because
  tumbler does not yet support openraw 0.3
- Allow building against libgepub-0.7 (boo#1203644):
  * Adjust BuildRequires to work with libgepub-0.6 or libgepub-0.7.
  * Replace libgepub-0.6 occurences in configure script with
    libgepub-0.7 when libgepub 0.7 is present.</changelog>
</package>
<package pkgid="25ebdb8d2a7336cea41f9da4a921a24d423b684a21ccc3dc68d1e3fcc53ab5c4" name="tumbler-webp-thumbnailer" arch="s390x">
  <version epoch="0" ver="4.16.1" rel="bp154.3.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1511006400">- add explicit libtumbler versioned dependency to tumbler</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1523188800">- update to version 0.2.1
  - Handle 0 mtime threshold on Cleanup DBus method. This fixes
    running across all thumbnails that was causing very high I/O
    bandwidth usage when a file with a thumbnail gets deleted. (On
    dbus Cleanup method). bxo#9231</changelog>
  <changelog author="Stefan Seyfried &lt;seife+obs@b1-systems.com&gt;" date="1537012800">- update to version 0.2.3
  - Test sparse files only for regular files (bxo#14693).
  - Fix uninitialized variable (bxo#14688)
  - Added check to avoid sparse files, that cause high cpu and
    memory load. (bxo#12259).
  - Use hash table to avoid scanning xdg user path twice when
    searching for desktop thumbnailers.
  - Close desktop thumbnailers directory when done from it.
  - Accept network paths in ffmpeg thumbnailer plugin.
  - Use pkg-config to find FreeType &gt; 2.9.1.
  - Translation Updates</changelog>
  <changelog author="Vinzenz Vietzke &lt;vinz@vinzv.de&gt;" date="1558094400">- Update to version 0.2.4
  - Check for sparse video files only on plugin side
  - Set Max file sizes
  - Add Fujifilm RAF support (bxo#14522)
  - Add more media types for audio cover thumbnails (bxo#12041)
  - Fix a typo in desktop-thumbnailer-provider.c (bxo#14925)
  - Update URLs in README and configure.ac
  - Fix g_type_class_add_private is deprecated
  - Bump glib version
  - Translation Updates
- Added bcond to build with sources from git master branch
- Switched to %autosetup for simpler maintenance
- Switch urls to https://
- Cleaned up spec file</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1559476800">- Replace pkgconfig(liopenraw-gnome-1.0) BuildRequires with
  libopenraw-devel: the .pc file changed name between 0.0.x and
  0.1.x. Requiring the generic -devel name is easier than following
  upstreams namechanges.
- In case we build against libopenraw-gnome-0.1, update the build
  system to look for the right pc file using sed.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1559736000">- Added OBS service file to fetch git master sources when needed</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1561896000">- Update to version 0.2.5
  * Translation updates
- Removed unneeded BuildRoot</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1564315200">- Update to version 0.2.6
  * Translation updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1565611200">- Update to version 0.2.7
  * Translation updates
- Cleaned up spec file</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1565956800">- Fixed sources in spec file</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1576929600">- Updated to version 0.2.8
  * Fix thumbnail orientation (bxo#15011)
  * prepend $XDG_DATA_HOME/thumbnailers/ to thumbnailers directory
    (bxo#15858)
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1584014400">- Add support for WebP and custom folder thumbnails
  * Folder thumbnailer:
    https://docs.xfce.org/xfce/thunar/tumbler#customized_thumbnailer_for_folders
  * WebP thumbnailer: bxo#12528</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1596715200">- Update to version 0.2.9
  * This release addresses the issue described in gxo#xfce/tumbler#28
    and partially solved by the previous release 0.2.28.
    The issue now is completely solved by adding the correct
    orientation handling when fallback code for generating jpeg
    thumbnail takes place.</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1598616000">- Update to version 0.3.0
  * Fix jpeg thumbnail orientation when fallback code is taken place
    (gxo#xfce/tumbler#28).
  * Use AC_CONFIG_MACRO_DIRS instead of AC_CONFIG_MACRO_DIR
  * Fix GTimeVal deprecation
  * Drop support of GLib &lt; 2.32
  * Use guint32 for request handle and fix its further occurrences of 0
  * Implement Excludes paths in tumbler.rc
  * Translation Updates</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1604232000">- Weak dependencies: Use Supplements tag as recommended
  tumbler-folder-thumbnailer/tumbler-webp-thumbnailer dependencies
  for main package</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1604318400">- Remove hard dependency to Thunar 1.8.2. We use "Suggests" instead
  to make sure the correct version is picked while keeping a soft
  dependency.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1605528000">- Update to version 0.3.1
  - New plugin for epub books, using libgepub thumbnailer plugin
  - Fix documentation URL
  - Add README.md and EXTRA_DIST
  - Add new icon needed for xfce4-about-dialog
  - Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1608724800">- Update to version 4.16.0
  - Remove GLIB_CHECK_VERSION IFDEFs which are obsolete after glib bump
  - bump glib (and gio, gthread, etc) minimum to 2.50.0
  - Adjust bug report URL
  - Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1634212800">- Add Recommends: ffmpegthumbnailer</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1667995200">- Update to version 4.16.1 (boo#1205210)
  * gst-thumbnailer: Add mime type check (gxo#xfce/tumbler#65)
  * desktop-thumbnailer: Guard against null path
  * Fix typo in gthread version (gxo#xfce/tumbler!14)
- Exclude RAW thumbnailer on Tumbleweed and Leap 15.5+ because
  tumbler does not yet support openraw 0.3
- Allow building against libgepub-0.7 (boo#1203644):
  * Adjust BuildRequires to work with libgepub-0.6 or libgepub-0.7.
  * Replace libgepub-0.6 occurences in configure script with
    libgepub-0.7 when libgepub 0.7 is present.</changelog>
</package>
<package pkgid="c9fd96599d72476010488563e4e103bb828698819ceb26ce6ff8ec74a59a4ae7" name="tumbler-webp-thumbnailer" arch="x86_64">
  <version epoch="0" ver="4.16.1" rel="bp154.3.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1511006400">- add explicit libtumbler versioned dependency to tumbler</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1523188800">- update to version 0.2.1
  - Handle 0 mtime threshold on Cleanup DBus method. This fixes
    running across all thumbnails that was causing very high I/O
    bandwidth usage when a file with a thumbnail gets deleted. (On
    dbus Cleanup method). bxo#9231</changelog>
  <changelog author="Stefan Seyfried &lt;seife+obs@b1-systems.com&gt;" date="1537012800">- update to version 0.2.3
  - Test sparse files only for regular files (bxo#14693).
  - Fix uninitialized variable (bxo#14688)
  - Added check to avoid sparse files, that cause high cpu and
    memory load. (bxo#12259).
  - Use hash table to avoid scanning xdg user path twice when
    searching for desktop thumbnailers.
  - Close desktop thumbnailers directory when done from it.
  - Accept network paths in ffmpeg thumbnailer plugin.
  - Use pkg-config to find FreeType &gt; 2.9.1.
  - Translation Updates</changelog>
  <changelog author="Vinzenz Vietzke &lt;vinz@vinzv.de&gt;" date="1558094400">- Update to version 0.2.4
  - Check for sparse video files only on plugin side
  - Set Max file sizes
  - Add Fujifilm RAF support (bxo#14522)
  - Add more media types for audio cover thumbnails (bxo#12041)
  - Fix a typo in desktop-thumbnailer-provider.c (bxo#14925)
  - Update URLs in README and configure.ac
  - Fix g_type_class_add_private is deprecated
  - Bump glib version
  - Translation Updates
- Added bcond to build with sources from git master branch
- Switched to %autosetup for simpler maintenance
- Switch urls to https://
- Cleaned up spec file</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1559476800">- Replace pkgconfig(liopenraw-gnome-1.0) BuildRequires with
  libopenraw-devel: the .pc file changed name between 0.0.x and
  0.1.x. Requiring the generic -devel name is easier than following
  upstreams namechanges.
- In case we build against libopenraw-gnome-0.1, update the build
  system to look for the right pc file using sed.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1559736000">- Added OBS service file to fetch git master sources when needed</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1561896000">- Update to version 0.2.5
  * Translation updates
- Removed unneeded BuildRoot</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1564315200">- Update to version 0.2.6
  * Translation updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1565611200">- Update to version 0.2.7
  * Translation updates
- Cleaned up spec file</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1565956800">- Fixed sources in spec file</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1576929600">- Updated to version 0.2.8
  * Fix thumbnail orientation (bxo#15011)
  * prepend $XDG_DATA_HOME/thumbnailers/ to thumbnailers directory
    (bxo#15858)
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1584014400">- Add support for WebP and custom folder thumbnails
  * Folder thumbnailer:
    https://docs.xfce.org/xfce/thunar/tumbler#customized_thumbnailer_for_folders
  * WebP thumbnailer: bxo#12528</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1596715200">- Update to version 0.2.9
  * This release addresses the issue described in gxo#xfce/tumbler#28
    and partially solved by the previous release 0.2.28.
    The issue now is completely solved by adding the correct
    orientation handling when fallback code for generating jpeg
    thumbnail takes place.</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1598616000">- Update to version 0.3.0
  * Fix jpeg thumbnail orientation when fallback code is taken place
    (gxo#xfce/tumbler#28).
  * Use AC_CONFIG_MACRO_DIRS instead of AC_CONFIG_MACRO_DIR
  * Fix GTimeVal deprecation
  * Drop support of GLib &lt; 2.32
  * Use guint32 for request handle and fix its further occurrences of 0
  * Implement Excludes paths in tumbler.rc
  * Translation Updates</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1604232000">- Weak dependencies: Use Supplements tag as recommended
  tumbler-folder-thumbnailer/tumbler-webp-thumbnailer dependencies
  for main package</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1604318400">- Remove hard dependency to Thunar 1.8.2. We use "Suggests" instead
  to make sure the correct version is picked while keeping a soft
  dependency.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1605528000">- Update to version 0.3.1
  - New plugin for epub books, using libgepub thumbnailer plugin
  - Fix documentation URL
  - Add README.md and EXTRA_DIST
  - Add new icon needed for xfce4-about-dialog
  - Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1608724800">- Update to version 4.16.0
  - Remove GLIB_CHECK_VERSION IFDEFs which are obsolete after glib bump
  - bump glib (and gio, gthread, etc) minimum to 2.50.0
  - Adjust bug report URL
  - Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1634212800">- Add Recommends: ffmpegthumbnailer</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1667995200">- Update to version 4.16.1 (boo#1205210)
  * gst-thumbnailer: Add mime type check (gxo#xfce/tumbler#65)
  * desktop-thumbnailer: Guard against null path
  * Fix typo in gthread version (gxo#xfce/tumbler!14)
- Exclude RAW thumbnailer on Tumbleweed and Leap 15.5+ because
  tumbler does not yet support openraw 0.3
- Allow building against libgepub-0.7 (boo#1203644):
  * Adjust BuildRequires to work with libgepub-0.6 or libgepub-0.7.
  * Replace libgepub-0.6 occurences in configure script with
    libgepub-0.7 when libgepub 0.7 is present.</changelog>
</package>
<package pkgid="23271c7058b03cb22212ea3cdeeab9ce3521412860370ea6a7aae83b9fe0d9f0" name="upx" arch="aarch64">
  <version epoch="0" ver="4.0.1" rel="bp154.4.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1416139200">- upx-endiantests.patch and lzma-x-endian.patch Correct
  endianness tests by only considering what the compiler says
  about target system and not a hardcoded architecture list.
  (drop upx-3.03_ia64-endianity.patch)
- build with hidden visibility.</changelog>
  <changelog author="jengelh@inai.de" date="1507291200">- Update to new upstream release 3.94
  * Add support for arm64-linux (aka aarch64).
  * Add support for --lzma compression on 64-bit PowerPC.
  * From 3.92:
  * Explicitly diagnose Go-language bad PT_LOAD.
- Resolve apply/merge conflict of upx-endiantests.patch
- Add 0001-Protect-against-bad-crafted-input.patch,
  0002-Protect-against-bad-crafted-input.patch [boo#1062059]</changelog>
  <changelog author="jengelh@inai.de" date="1511006400">- Add 0001-Mach-o-defend-against-bad-crafted-input.patch
  [CVE-2017-16869] [boo#1068681]</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1540728000">- Update to version 3.95
  * Flag --force-pie when ET_DYN main program is not marked as
    DF_1_PIE
  * Better compatibility with varying layout of address space on
    Linux
  * Support for 4 PT_LOAD layout in ELF generated by binutils-2.31
  * bug fixes, particularly better diagnosis of malformed input
  * bug fixes - see https://github.com/upx/upx/milestone/4
- Dropped 0001-Protect-against-bad-crafted-input.patch,
  0002-Protect-against-bad-crafted-input.patch and
  0001-Mach-o-defend-against-bad-crafted-input.patch (merged
  upstream)
- Drop lzma922.tar.bz2 (which wasn't being used in the first
  place) and lzma-x-endian.patch which no longer applies to
  the integrated lzma-sdk. The in-tree lzma-sdk is actually a fork
  from an older version but recommended by the author, see
  src/stub/src/c/Makevars.lzma
- Spec cleanup</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1540900800">- Trim bias from description.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1579780800">- Update to version 3.96
  * Bug fixes:
    [CVE-2019-1010048, boo#1141777]
    [CVE-2019-14296, boo#1143839]
    [CVE-2019-20021, boo#1159833]
    [CVE-2019-20053, boo#1159920]
    [CVE-2018-11243 partially - ticket 206 ONLY, boo#1094138]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1621425600">- Add 0001-Unpack-Phdrs-must-be-within-expansion-of-first-compr.patch
  [CVE-2020-24119] [boo#1186238]</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1622548800">- Add upstream change to fix build with GCC 11:
  * 0001-Silence-yet-some-more-compilation-warnings.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1667044800">- Update to release 4.0
  * Add support for EFI files
- Delete 0001-Silence-yet-some-more-compilation-warnings.patch,
  0001-Unpack-Phdrs-must-be-within-expansion-of-first-compr.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1668600000">- Update to release 4.0.1
  * Fix crash when a linux/armeb LZMA-packed binary unpacks itself.
  * Resolve "CantPackException: bad ElfXX_Shdrs" with
    staticly-linked programs.
  * Resolve "CantPackException: need DT_INIT;..." when attempting
    to re-compress an already packed binary.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1673784000">- Add 0001-invert_pt_dynamic-fix-thinko-PackLinuxElf64help1-ins.patch
  [boo#1207122] [CVE-2023-23457]</changelog>
</package>
<package pkgid="2a909c358ec32e75366800b614d95251649d216b37a0d42852d555623114cc71" name="upx" arch="ppc64le">
  <version epoch="0" ver="4.0.1" rel="bp154.4.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1416139200">- upx-endiantests.patch and lzma-x-endian.patch Correct
  endianness tests by only considering what the compiler says
  about target system and not a hardcoded architecture list.
  (drop upx-3.03_ia64-endianity.patch)
- build with hidden visibility.</changelog>
  <changelog author="jengelh@inai.de" date="1507291200">- Update to new upstream release 3.94
  * Add support for arm64-linux (aka aarch64).
  * Add support for --lzma compression on 64-bit PowerPC.
  * From 3.92:
  * Explicitly diagnose Go-language bad PT_LOAD.
- Resolve apply/merge conflict of upx-endiantests.patch
- Add 0001-Protect-against-bad-crafted-input.patch,
  0002-Protect-against-bad-crafted-input.patch [boo#1062059]</changelog>
  <changelog author="jengelh@inai.de" date="1511006400">- Add 0001-Mach-o-defend-against-bad-crafted-input.patch
  [CVE-2017-16869] [boo#1068681]</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1540728000">- Update to version 3.95
  * Flag --force-pie when ET_DYN main program is not marked as
    DF_1_PIE
  * Better compatibility with varying layout of address space on
    Linux
  * Support for 4 PT_LOAD layout in ELF generated by binutils-2.31
  * bug fixes, particularly better diagnosis of malformed input
  * bug fixes - see https://github.com/upx/upx/milestone/4
- Dropped 0001-Protect-against-bad-crafted-input.patch,
  0002-Protect-against-bad-crafted-input.patch and
  0001-Mach-o-defend-against-bad-crafted-input.patch (merged
  upstream)
- Drop lzma922.tar.bz2 (which wasn't being used in the first
  place) and lzma-x-endian.patch which no longer applies to
  the integrated lzma-sdk. The in-tree lzma-sdk is actually a fork
  from an older version but recommended by the author, see
  src/stub/src/c/Makevars.lzma
- Spec cleanup</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1540900800">- Trim bias from description.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1579780800">- Update to version 3.96
  * Bug fixes:
    [CVE-2019-1010048, boo#1141777]
    [CVE-2019-14296, boo#1143839]
    [CVE-2019-20021, boo#1159833]
    [CVE-2019-20053, boo#1159920]
    [CVE-2018-11243 partially - ticket 206 ONLY, boo#1094138]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1621425600">- Add 0001-Unpack-Phdrs-must-be-within-expansion-of-first-compr.patch
  [CVE-2020-24119] [boo#1186238]</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1622548800">- Add upstream change to fix build with GCC 11:
  * 0001-Silence-yet-some-more-compilation-warnings.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1667044800">- Update to release 4.0
  * Add support for EFI files
- Delete 0001-Silence-yet-some-more-compilation-warnings.patch,
  0001-Unpack-Phdrs-must-be-within-expansion-of-first-compr.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1668600000">- Update to release 4.0.1
  * Fix crash when a linux/armeb LZMA-packed binary unpacks itself.
  * Resolve "CantPackException: bad ElfXX_Shdrs" with
    staticly-linked programs.
  * Resolve "CantPackException: need DT_INIT;..." when attempting
    to re-compress an already packed binary.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1673784000">- Add 0001-invert_pt_dynamic-fix-thinko-PackLinuxElf64help1-ins.patch
  [boo#1207122] [CVE-2023-23457]</changelog>
</package>
<package pkgid="ad187b0adf9bdf37620a5d167604f322049df363ade594368799c8b04cb5092f" name="upx" arch="s390x">
  <version epoch="0" ver="4.0.1" rel="bp154.4.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1416139200">- upx-endiantests.patch and lzma-x-endian.patch Correct
  endianness tests by only considering what the compiler says
  about target system and not a hardcoded architecture list.
  (drop upx-3.03_ia64-endianity.patch)
- build with hidden visibility.</changelog>
  <changelog author="jengelh@inai.de" date="1507291200">- Update to new upstream release 3.94
  * Add support for arm64-linux (aka aarch64).
  * Add support for --lzma compression on 64-bit PowerPC.
  * From 3.92:
  * Explicitly diagnose Go-language bad PT_LOAD.
- Resolve apply/merge conflict of upx-endiantests.patch
- Add 0001-Protect-against-bad-crafted-input.patch,
  0002-Protect-against-bad-crafted-input.patch [boo#1062059]</changelog>
  <changelog author="jengelh@inai.de" date="1511006400">- Add 0001-Mach-o-defend-against-bad-crafted-input.patch
  [CVE-2017-16869] [boo#1068681]</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1540728000">- Update to version 3.95
  * Flag --force-pie when ET_DYN main program is not marked as
    DF_1_PIE
  * Better compatibility with varying layout of address space on
    Linux
  * Support for 4 PT_LOAD layout in ELF generated by binutils-2.31
  * bug fixes, particularly better diagnosis of malformed input
  * bug fixes - see https://github.com/upx/upx/milestone/4
- Dropped 0001-Protect-against-bad-crafted-input.patch,
  0002-Protect-against-bad-crafted-input.patch and
  0001-Mach-o-defend-against-bad-crafted-input.patch (merged
  upstream)
- Drop lzma922.tar.bz2 (which wasn't being used in the first
  place) and lzma-x-endian.patch which no longer applies to
  the integrated lzma-sdk. The in-tree lzma-sdk is actually a fork
  from an older version but recommended by the author, see
  src/stub/src/c/Makevars.lzma
- Spec cleanup</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1540900800">- Trim bias from description.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1579780800">- Update to version 3.96
  * Bug fixes:
    [CVE-2019-1010048, boo#1141777]
    [CVE-2019-14296, boo#1143839]
    [CVE-2019-20021, boo#1159833]
    [CVE-2019-20053, boo#1159920]
    [CVE-2018-11243 partially - ticket 206 ONLY, boo#1094138]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1621425600">- Add 0001-Unpack-Phdrs-must-be-within-expansion-of-first-compr.patch
  [CVE-2020-24119] [boo#1186238]</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1622548800">- Add upstream change to fix build with GCC 11:
  * 0001-Silence-yet-some-more-compilation-warnings.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1667044800">- Update to release 4.0
  * Add support for EFI files
- Delete 0001-Silence-yet-some-more-compilation-warnings.patch,
  0001-Unpack-Phdrs-must-be-within-expansion-of-first-compr.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1668600000">- Update to release 4.0.1
  * Fix crash when a linux/armeb LZMA-packed binary unpacks itself.
  * Resolve "CantPackException: bad ElfXX_Shdrs" with
    staticly-linked programs.
  * Resolve "CantPackException: need DT_INIT;..." when attempting
    to re-compress an already packed binary.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1673784000">- Add 0001-invert_pt_dynamic-fix-thinko-PackLinuxElf64help1-ins.patch
  [boo#1207122] [CVE-2023-23457]</changelog>
</package>
<package pkgid="6093420385e8aefb979df7e2972b9f0aae0bd7ea86c52afe0c3e7ae67fdcbf9d" name="upx" arch="src">
  <version epoch="0" ver="4.0.1" rel="bp154.4.3.1"/>
  <changelog author="prusnak@suse.cz" date="1255348800">- updated to 3.04</changelog>
  <changelog author="pgajdos@suse.cz" date="1282132800">- updated to 3.05 (see NEWS)</changelog>
  <changelog author="marix@marix.org" date="1284033600">- updated to 3.07
  * LZMA compression support</changelog>
  <changelog author="freespacer@gmx.de" date="1331208000">- updated to 3.08
  * optional LZMA compression</changelog>
  <changelog author="idonmez@suse.com" date="1364212800">- Update to version 3.09
  * New option --preserve-build-id for GNU ELF.
  * Allow zero-filled final page in PackUnix::canUnpack().
  * Bug fixes.</changelog>
  <changelog author="idonmez@suse.com" date="1364385600">- Actually enable LZMA support, this needs LZMA SDK</changelog>
  <changelog author="schwab@suse.de" date="1364731200">- upx-aarch64.patch: Support for AArch64</changelog>
  <changelog author="jengelh@inai.de" date="1385121600">- Update to new upstream release 3.91
  * Initial support for amd64-win64.pe
- Refresh upx-3.03_ia64-endianity.patch after fuzz</changelog>
  <changelog author="pgajdos@suse.com" date="1390219200">- fix build for factory</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1416139200">- upx-endiantests.patch and lzma-x-endian.patch Correct
  endianness tests by only considering what the compiler says
  about target system and not a hardcoded architecture list.
  (drop upx-3.03_ia64-endianity.patch)
- build with hidden visibility.</changelog>
  <changelog author="jengelh@inai.de" date="1507291200">- Update to new upstream release 3.94
  * Add support for arm64-linux (aka aarch64).
  * Add support for --lzma compression on 64-bit PowerPC.
  * From 3.92:
  * Explicitly diagnose Go-language bad PT_LOAD.
- Resolve apply/merge conflict of upx-endiantests.patch
- Add 0001-Protect-against-bad-crafted-input.patch,
  0002-Protect-against-bad-crafted-input.patch [boo#1062059]</changelog>
  <changelog author="jengelh@inai.de" date="1511006400">- Add 0001-Mach-o-defend-against-bad-crafted-input.patch
  [CVE-2017-16869] [boo#1068681]</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1540728000">- Update to version 3.95
  * Flag --force-pie when ET_DYN main program is not marked as
    DF_1_PIE
  * Better compatibility with varying layout of address space on
    Linux
  * Support for 4 PT_LOAD layout in ELF generated by binutils-2.31
  * bug fixes, particularly better diagnosis of malformed input
  * bug fixes - see https://github.com/upx/upx/milestone/4
- Dropped 0001-Protect-against-bad-crafted-input.patch,
  0002-Protect-against-bad-crafted-input.patch and
  0001-Mach-o-defend-against-bad-crafted-input.patch (merged
  upstream)
- Drop lzma922.tar.bz2 (which wasn't being used in the first
  place) and lzma-x-endian.patch which no longer applies to
  the integrated lzma-sdk. The in-tree lzma-sdk is actually a fork
  from an older version but recommended by the author, see
  src/stub/src/c/Makevars.lzma
- Spec cleanup</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1540900800">- Trim bias from description.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1579780800">- Update to version 3.96
  * Bug fixes:
    [CVE-2019-1010048, boo#1141777]
    [CVE-2019-14296, boo#1143839]
    [CVE-2019-20021, boo#1159833]
    [CVE-2019-20053, boo#1159920]
    [CVE-2018-11243 partially - ticket 206 ONLY, boo#1094138]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1621425600">- Add 0001-Unpack-Phdrs-must-be-within-expansion-of-first-compr.patch
  [CVE-2020-24119] [boo#1186238]</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1622548800">- Add upstream change to fix build with GCC 11:
  * 0001-Silence-yet-some-more-compilation-warnings.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1667044800">- Update to release 4.0
  * Add support for EFI files
- Delete 0001-Silence-yet-some-more-compilation-warnings.patch,
  0001-Unpack-Phdrs-must-be-within-expansion-of-first-compr.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1668600000">- Update to release 4.0.1
  * Fix crash when a linux/armeb LZMA-packed binary unpacks itself.
  * Resolve "CantPackException: bad ElfXX_Shdrs" with
    staticly-linked programs.
  * Resolve "CantPackException: need DT_INIT;..." when attempting
    to re-compress an already packed binary.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1673784000">- Add 0001-invert_pt_dynamic-fix-thinko-PackLinuxElf64help1-ins.patch
  [boo#1207122] [CVE-2023-23457]</changelog>
</package>
<package pkgid="f15fdfd7f4183917e5fa9fcaa68e637fb94a7d447fc4c3eec4bd55671b2c557f" name="upx" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="bp154.4.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1416139200">- upx-endiantests.patch and lzma-x-endian.patch Correct
  endianness tests by only considering what the compiler says
  about target system and not a hardcoded architecture list.
  (drop upx-3.03_ia64-endianity.patch)
- build with hidden visibility.</changelog>
  <changelog author="jengelh@inai.de" date="1507291200">- Update to new upstream release 3.94
  * Add support for arm64-linux (aka aarch64).
  * Add support for --lzma compression on 64-bit PowerPC.
  * From 3.92:
  * Explicitly diagnose Go-language bad PT_LOAD.
- Resolve apply/merge conflict of upx-endiantests.patch
- Add 0001-Protect-against-bad-crafted-input.patch,
  0002-Protect-against-bad-crafted-input.patch [boo#1062059]</changelog>
  <changelog author="jengelh@inai.de" date="1511006400">- Add 0001-Mach-o-defend-against-bad-crafted-input.patch
  [CVE-2017-16869] [boo#1068681]</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1540728000">- Update to version 3.95
  * Flag --force-pie when ET_DYN main program is not marked as
    DF_1_PIE
  * Better compatibility with varying layout of address space on
    Linux
  * Support for 4 PT_LOAD layout in ELF generated by binutils-2.31
  * bug fixes, particularly better diagnosis of malformed input
  * bug fixes - see https://github.com/upx/upx/milestone/4
- Dropped 0001-Protect-against-bad-crafted-input.patch,
  0002-Protect-against-bad-crafted-input.patch and
  0001-Mach-o-defend-against-bad-crafted-input.patch (merged
  upstream)
- Drop lzma922.tar.bz2 (which wasn't being used in the first
  place) and lzma-x-endian.patch which no longer applies to
  the integrated lzma-sdk. The in-tree lzma-sdk is actually a fork
  from an older version but recommended by the author, see
  src/stub/src/c/Makevars.lzma
- Spec cleanup</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1540900800">- Trim bias from description.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1579780800">- Update to version 3.96
  * Bug fixes:
    [CVE-2019-1010048, boo#1141777]
    [CVE-2019-14296, boo#1143839]
    [CVE-2019-20021, boo#1159833]
    [CVE-2019-20053, boo#1159920]
    [CVE-2018-11243 partially - ticket 206 ONLY, boo#1094138]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1621425600">- Add 0001-Unpack-Phdrs-must-be-within-expansion-of-first-compr.patch
  [CVE-2020-24119] [boo#1186238]</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1622548800">- Add upstream change to fix build with GCC 11:
  * 0001-Silence-yet-some-more-compilation-warnings.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1667044800">- Update to release 4.0
  * Add support for EFI files
- Delete 0001-Silence-yet-some-more-compilation-warnings.patch,
  0001-Unpack-Phdrs-must-be-within-expansion-of-first-compr.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1668600000">- Update to release 4.0.1
  * Fix crash when a linux/armeb LZMA-packed binary unpacks itself.
  * Resolve "CantPackException: bad ElfXX_Shdrs" with
    staticly-linked programs.
  * Resolve "CantPackException: need DT_INIT;..." when attempting
    to re-compress an already packed binary.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1673784000">- Add 0001-invert_pt_dynamic-fix-thinko-PackLinuxElf64help1-ins.patch
  [boo#1207122] [CVE-2023-23457]</changelog>
</package>
<package pkgid="2e60393d94341d4b3a8c0ea3feb0ef631406b4ceefa698cbd0760a6b21898a15" name="urlscan" arch="noarch">
  <version epoch="0" ver="0.9.9" rel="bp154.2.3.1"/>
  <changelog author="werner@suse.de" date="1486987200">- Inital package urlscan 0.8.3 which is an replacement for urlview</changelog>
  <changelog author="werner@suse.de" date="1489406400">- Reflect change in build system and/or rpmbuild now adding the package
  default documentation tree only as directory now</changelog>
  <changelog author="werner@suse.de" date="1499169600">- Update to version 0.8.6
  * Fix tag mismatch in setup.py
  * Fix #27 (URLs in markdown links)
  * Tweak email address recognition
  * Add ability to toggle context view
  * Cleanup, commenting, add keyboard hints in the header
  * Add shortening and toggling shortening of URLs
  * Restructure URLChooser for current urwid best practices
  * Update tlds list
  * Replace AttrWrap (deprecated) with AttrMap
  * Highlight selected URL. Fix #17
  * Implement #21 (Option to remove duplicate URLs)</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1544616000">- Move to python3 (boo#1119223)</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1544616001">- Update to version 0.9.1
  * Add incremental search feature. (#13)
  * Other misc bug fixes/enhancements (PR #74)
  * Fix crash when URL list not visible. Closes #68
  * Fix unescape bug. Closes #67
  * Bugfix in browser handling. Fixes #70
  * Fix crash caused by webbrowser module bug.
  * PEP8 fixes/modifications
  * Update tld list
  * Fix up arrow bug. Closes #66
  * Add optional config file for editing/adding palettes.
  * Simplify palette variable to only used values. Cycle through available palettes
  * Merge branch 'runtime_palette_switch' of
    https://github.com/machinedgod/urlscan into machinedgod-runtime_palette_switch
  * Fix crash when BROWSER not set. Closes #60, Fixes #63
  * Don't handle mouse events. Fixes #65.
  * Hitting 'b' key now switches palettes
  * Allow https URLs for images
  * Add #51. Execute arbitrary expression for URL in place of opening browser.
  * More fixes for #48. Refresh screen after text browser use
  * Fix #49. Deduplication display issue.
  * Fix #50. Detect and add ability to remove escape char \ from URLs.
  * Fix #48. Prevent loading thread from affecting screen when using
  * terminal browsers.
  * Add g/G as top/bottom keyboard shortcuts. Fix #47
  * Update minimum urwid version
  * Type number to jump to URL
  * Bugfix</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1549540800">- Update to version 0.9.2
  * Add shortcut to copy URL to clipboard (primary).
  * Add option to pipe URL into external command.</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1584100800">- Update to version 0.9.4
  * Remove Python 2 compatibility
- Update to version 0.9.3
  * Cycle through opening links with webbrowser module, xdg-open or --run argument
  * Add option to copy to primary selection or clipboard. Fix #87
  * Generate new config file using command line switch instead of keybinding
  * Allow remapping a key to open url in addition to space and enter
  * Show help menu with F1 and show dynamic keybindings
  * Allow editing key bindings in config.json. Fix #72.
- Set python flavour spec file macro to get the rpm pythin macros defined
- Remove egg information tree as we require python3-urwid</changelog>
  <changelog author="Martin Rey &lt;mrey@suse.com&gt;" date="1595937600">- Update to version 0.9.5
  * Change shebang to specifically call python3
  * Add --width flag to change displayed width. Closes #92.
  * Update tlds and copyright dates
  * Remove workaround for fixed python webbrowser bug (#94)
  * Add -R option to reverse URL/context output. Closes #90
  * Add --single option to quit after opening/copying first link.
    Closes #95
  * Support wl-clipboard. Resolve #88.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1620820800">- update to 0.9.6:
  * Python 3.6+ required
  * Convert to newer email.message.EmailMessage format for processing. Closes #98
  * Hopefully fix #105. Escapes every "&amp;" in the URL
  * Attempt --run-safe implementation
  * Fixes #106
  * Scan a selection of email headers for URLs. Closes #97.
  * Add option for custom regex. Closes #79.
  * Allow $ as an acceptable trailing character
  * Fix urwid reverse error. Thanks to @pavoljuhas. Closes #99</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1633694400">- update to 0.9.7:
  * User-option -W --whitespace-off: remove blank lines and ellipses
  * Update documentation for feature --whitespace-off
  * Correct regex example in urlscan.1
  * Sort and align docstrings</changelog>
  <changelog author="Avinesh Kumar &lt;avinesh.kumar@suse.com&gt;" date="1643544000">- update to version 0.9.9:
  * Bugfix in f-string
  * Updated setup.py after tagging previous version
- update in version 0.9.8:
  * Update TLD list
  * Fix #118, crash on navigating to non-existant line
  * Pylint fixes
  * Move to subprocess run instead of call and Popen
  * Switch to f-strings</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1659614400">- Do not remove egg info anymore as the pythonm3 interpreter
  does not work anymore without this information (boo#1202137)</changelog>
</package>
<package pkgid="f4999d17693f7e730754b764a1a212858fca74a2cd422290940c094f7873e0e1" name="urlscan" arch="src">
  <version epoch="0" ver="0.9.9" rel="bp154.2.3.1"/>
  <changelog author="werner@suse.de" date="1486987200">- Inital package urlscan 0.8.3 which is an replacement for urlview</changelog>
  <changelog author="werner@suse.de" date="1489406400">- Reflect change in build system and/or rpmbuild now adding the package
  default documentation tree only as directory now</changelog>
  <changelog author="werner@suse.de" date="1499169600">- Update to version 0.8.6
  * Fix tag mismatch in setup.py
  * Fix #27 (URLs in markdown links)
  * Tweak email address recognition
  * Add ability to toggle context view
  * Cleanup, commenting, add keyboard hints in the header
  * Add shortening and toggling shortening of URLs
  * Restructure URLChooser for current urwid best practices
  * Update tlds list
  * Replace AttrWrap (deprecated) with AttrMap
  * Highlight selected URL. Fix #17
  * Implement #21 (Option to remove duplicate URLs)</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1544616000">- Move to python3 (boo#1119223)</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1544616001">- Update to version 0.9.1
  * Add incremental search feature. (#13)
  * Other misc bug fixes/enhancements (PR #74)
  * Fix crash when URL list not visible. Closes #68
  * Fix unescape bug. Closes #67
  * Bugfix in browser handling. Fixes #70
  * Fix crash caused by webbrowser module bug.
  * PEP8 fixes/modifications
  * Update tld list
  * Fix up arrow bug. Closes #66
  * Add optional config file for editing/adding palettes.
  * Simplify palette variable to only used values. Cycle through available palettes
  * Merge branch 'runtime_palette_switch' of
    https://github.com/machinedgod/urlscan into machinedgod-runtime_palette_switch
  * Fix crash when BROWSER not set. Closes #60, Fixes #63
  * Don't handle mouse events. Fixes #65.
  * Hitting 'b' key now switches palettes
  * Allow https URLs for images
  * Add #51. Execute arbitrary expression for URL in place of opening browser.
  * More fixes for #48. Refresh screen after text browser use
  * Fix #49. Deduplication display issue.
  * Fix #50. Detect and add ability to remove escape char \ from URLs.
  * Fix #48. Prevent loading thread from affecting screen when using
  * terminal browsers.
  * Add g/G as top/bottom keyboard shortcuts. Fix #47
  * Update minimum urwid version
  * Type number to jump to URL
  * Bugfix</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1549540800">- Update to version 0.9.2
  * Add shortcut to copy URL to clipboard (primary).
  * Add option to pipe URL into external command.</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1584100800">- Update to version 0.9.4
  * Remove Python 2 compatibility
- Update to version 0.9.3
  * Cycle through opening links with webbrowser module, xdg-open or --run argument
  * Add option to copy to primary selection or clipboard. Fix #87
  * Generate new config file using command line switch instead of keybinding
  * Allow remapping a key to open url in addition to space and enter
  * Show help menu with F1 and show dynamic keybindings
  * Allow editing key bindings in config.json. Fix #72.
- Set python flavour spec file macro to get the rpm pythin macros defined
- Remove egg information tree as we require python3-urwid</changelog>
  <changelog author="Martin Rey &lt;mrey@suse.com&gt;" date="1595937600">- Update to version 0.9.5
  * Change shebang to specifically call python3
  * Add --width flag to change displayed width. Closes #92.
  * Update tlds and copyright dates
  * Remove workaround for fixed python webbrowser bug (#94)
  * Add -R option to reverse URL/context output. Closes #90
  * Add --single option to quit after opening/copying first link.
    Closes #95
  * Support wl-clipboard. Resolve #88.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1620820800">- update to 0.9.6:
  * Python 3.6+ required
  * Convert to newer email.message.EmailMessage format for processing. Closes #98
  * Hopefully fix #105. Escapes every "&amp;" in the URL
  * Attempt --run-safe implementation
  * Fixes #106
  * Scan a selection of email headers for URLs. Closes #97.
  * Add option for custom regex. Closes #79.
  * Allow $ as an acceptable trailing character
  * Fix urwid reverse error. Thanks to @pavoljuhas. Closes #99</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1633694400">- update to 0.9.7:
  * User-option -W --whitespace-off: remove blank lines and ellipses
  * Update documentation for feature --whitespace-off
  * Correct regex example in urlscan.1
  * Sort and align docstrings</changelog>
  <changelog author="Avinesh Kumar &lt;avinesh.kumar@suse.com&gt;" date="1643544000">- update to version 0.9.9:
  * Bugfix in f-string
  * Updated setup.py after tagging previous version
- update in version 0.9.8:
  * Update TLD list
  * Fix #118, crash on navigating to non-existant line
  * Pylint fixes
  * Move to subprocess run instead of call and Popen
  * Switch to f-strings</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1659614400">- Do not remove egg info anymore as the pythonm3 interpreter
  does not work anymore without this information (boo#1202137)</changelog>
</package>
<package pkgid="604a9d1fb1aaa517d2c64e0cf99d2adbdd63a55aec351d9cda47d3408b51f8de" name="varnish" arch="aarch64">
  <version epoch="0" ver="7.1.0" rel="bp154.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1474804800">- Update to new upstream release 5.0.0
- The varnishd "-u NNN" option, which may be remaining in
  /etc/sysconfig/varnish, has been replaced with "-j unix,user=NNN".
  * Varnish 5.0 changes some (mostly) internal APIs and adds some
  major new features over Varnish 4.1.
  * 5.0 supports jumping from the active VCL's vcl_recv{} to another
  VCL via a VCL label.
  * Very Experimental HTTP/2 support
  * We have added to the "directors" VMOD? an overhauled version of
  a director which was available as an out-of-tree VMOD under the
  name VSLP for a couple of years. It is basically a better hash
  director which uses consistent hashing to provide improved
  stability of backend node selection when the configuration and/or
  health state of backends changes.
  * Hit-For-Pass is now actually Hit-For-Miss
  * We have made the ban lurker even more efficient by example of
  some real live situations with tens of thousands of bans using
  inefficient regular expressions.
  * The waitinglist logic for ESI subrequests now uses condition
  variables to trigger immediate continuation of ESI processing
  when an object being waited for becomes available.
  * Backend PROXY protocol requests are now supported through the
  .proxy_header attribute of the backend definition.
  * VCL files are now also being searched for in
  /usr/share/varnish/vcl if not found in /etc/varnish.
  * The basic device detection vcl is now bundled with varnish.</changelog>
  <changelog author="dimstar@opensuse.org" date="1494936000">- BuildRequire python3-docutils instead of python-docutils.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1498219200">- Update to version 5.1.2:
  * Fix an endless loop in Backend Polling (#2295)
  * Fix a Chunked bug in tight workspaces (#2207, #2275)
  * Fix a bug relating to req.body when on waitinglist (#2266)
  * Handle EPIPE on broken TCP connections (#2267)
  * Work around the x86 arch's turbo-double FP format in parameter
    setup code. (#1875)
  * Fix race related to backend probe with proxy header (#2278)
  * Keep VCL temperature consistent between mgt/worker also when
    worker protests.
  * A lot of HTTP/2 fixes.
- Changes introduced by version 5.1.1:
  * Fix bug introduced by stubborn old bugger right before release
    5.1.0 was cut.
- Changes introduced by version 5.1.0:
  * Added varnishd command-line options -I, -x and -?, and
    tightened restrictions on permitted combinations of options.
  * More progress on support for HTTP/2.
  * Add ``return(fail)`` to almost all VCL subroutines.
  * Restored the old hit-for-pass, invoked with
    ``return(pass(DURATION))`` from
    ``vcl_backend_response``. hit-for-miss remains the default.
    Added the cache_hitmiss stat, and cache_hitpass only counts the
    new/old hit-for-pass cases. Restored HitPass to the Varnish
    log, and added HitMiss. Added the HFP prefix to TTL log entries
    to log a hit-for-pass duration.
  * Rolled back the fix for #1206. Client delivery decides solely
    whether to send a 304 client response, based on client request
    and response headers.
  * Added vtest.sh.
  * Added vxid as a lefthand side for VSL queries.
  * Added the setenv and write_body commands for Varnish test cases
    (VTCs). err_shell is deprecated. Also added the operators
  - cliexpect, -match and -hdrlen, and -reason replaces -msg.
    Added the ${bad_backend} macro.
  * varnishtest can be stopped with the TERM, INT and KILL signals,
    but not with HUP.
  * The fallback director has now an extra, optional parameter to
    keep using the current backend until it falls sick.
  * VMOD shared libraries are now copied to the workdir, to avoid
    problems when VMODs are updated via packaging systems.
  * Bump the VRT version to 6.0.
  * Export more symbols from libvarnishapi.so.
  * The size of the VSL log is limited to 4G-1b, placing upper
    bounds on the -l option and the vsl_space and vsm_space
    parameters.
  * Added parameters clock_step, thread_pool_reserve and
    ban_cutoff.
  * Parameters vcl_dir and vmod_dir are deprecated, use vcl_path
    and vmod_path instead.
  * All parameters are defined, even on platforms that don't
    support them. An unsupported parameter is documented as such in
    param.show. Setting such a parameter is not an error, but has
    no effect.
  * Clarified the interpretations of the + and - operators in VCL
    with operands of the various data types.
  * DURATION types may be used in boolean contexts.
  * INT, DURATION and REAL values can now be negative.
  * Response codes 1000 or greater may now be set in VCL
    internally. resp.status is delivered modulo 1000 in client
    responses.
  * IP addresses can be compared for equality in VCL.
  * Introduce the STEVEDORE data type, and the objects
    storage.SNAME in VCL. Added req.storage and beresp.storage;
    beresp.storage_hint is deprecated.
  * Retired the umem stevedore.
  * req.ttl is deprecated.
  * Added std.getenv() and std.late_100_continue().
  * The fetch_failed stat is incremented for any kind of fetch
    failure.
  * Added the stats n_test_gunzip and
    bans_lurker_obj_killed_cutoff.
  * Clarified the meanings of the %r, %{X}i and %{X}o formatters in
    varnishncsa.
- Add varnish-5.1.2-add-fallthrough-comments.patch to fix build
  with GCC 7 (boo#1041259).</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="jengelh@inai.de" date="1521460800">- Update to new upstream release 6.0.0
  * Added support for Unix Domain Sockets, both for clients and
    for backend servers. This brings a new level of the VCL
    language, version 4.1.
  * Always use HTTP/1.1 on backend connections for pass fetch.</changelog>
  <changelog author="jengelh@inai.de" date="1525262400">- Put %fillup back into %post</changelog>
  <changelog author="Samu Voutilainen &lt;smar@smar.fi&gt;" date="1553688000">- Updated to 6.2.0
  * Added a thread pool watchdog which will restart the worker
    process if scheduling tasks onto worker threads appears
    stuck. The new parameter "thread_pool_watchdog" configures
    it.
- Disabled error for clobbering, which caused bogus
  error in varnishtest</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566820800">- Add uninit.patch.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1567598400">- Update to release 6.2.1
  * Bugfix for CVE-2019-15892 [boo#1149382]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1568721600">- Update to release 6.3.0
  * The Host: header is folded to lower-case in the builtin_vcl.
  * Improved performance of shared memory statistics counters.
  * Synthetic objects created from vcl_backend_error {} now
    replace existing stale objects as ordinary backend fetches
    would (for details see changes.rst)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1582632000">- Update to release 6.3.2
  * Fix a denial of service vulnerability when using the proxy
    protocol version 2.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1584446400">- Update to release 6.4.0
  * The MAIN.sess_drop counter is gone.
  * backend "none" was added for "no backend".
  * The hash algorithm of the hash director was changed, so
    backend selection will change once only when upgrading.
  * It is now possible for VMOD authors to customize the
    connection pooling of a dynamic backend.
  * For more, see changes.rst.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1591704000">- Update Git-Web repository link
- Set CFLAGS+=-fcommon.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1592913600">- Disable LTO, this randomly fails during link stage.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1600344000">- Update to release 6.5.0
  * `PRIV_TOP` is now thread-safe to support parallel ESI
    implementations.
  * varnishstat's JSON output format (-j option) has been changed.
  * Behavior for 304-type responses was changed not to update the
    Content-Encoding response header of the stored object.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1601640000">- Update to release 6.5.1
  * Bump the VRT_MAJOR_VERSION number defined in the vrt.h</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1625400000">- update to 6.6.0:
  * The ban_cutoff parameter now refers to the overall length of
    the ban list, including completed bans, where before only
    non-completed (?active?) bans were counted towards ban_cutoff.
  * Body bytes accounting has been fixed to always represent the
    number of body bytes moved on the wire, exclusive of
    protocol-specific overhead like HTTP/1 chunked encoding or
    HTTP/2 framing.
  * The connection close reason has been fixed to properly report
    SC_RESP_CLOSE where previously only SC_REQ_CLOSE was reported.
  * Unless the new validate_headers feature is disabled, all newly
    set headers are now validated to contain only characters
    allowed by RFC7230.
  * The filter_re, keep_re and get_re functions from the bundled
    cookie vmod have been changed to take the VCL_REGEX type. This
    implies that their regular expression arguments now need to be
    literal, not e.g. string.
  * The interface for private pointers in VMODs has been changed,
    the VRT backend interface has been changed, many filter
    (VDP/VFP) related signatures have been changed, and the
    stevedore API has been changed. (Details thereto, see online
    changelog.)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1628251200">- Update to release 6.6.1
  * Fix an HTTP/2.0 request smuggling vulnerability. [bnc#1188470]</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1638360000">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * varnish.service
  * varnishlog.service</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1652702400">- Update to release 7.1.0 [boo#1195188] [CVE-2022-23959]
  * VCL: It is now possible to assign a BLOB value to a BODY
    variable, in addition to STRING as before.
  * VMOD: New STRING strftime(TIME time, STRING format) function
    for UTC formatting.</changelog>
</package>
<package pkgid="d74acb98d657fe93d923b2f6cf64887493dcfeb6e45c7a5d760eadfa1cfc0393" name="varnish" arch="i586">
  <version epoch="0" ver="7.1.0" rel="bp154.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1474804800">- Update to new upstream release 5.0.0
- The varnishd "-u NNN" option, which may be remaining in
  /etc/sysconfig/varnish, has been replaced with "-j unix,user=NNN".
  * Varnish 5.0 changes some (mostly) internal APIs and adds some
  major new features over Varnish 4.1.
  * 5.0 supports jumping from the active VCL's vcl_recv{} to another
  VCL via a VCL label.
  * Very Experimental HTTP/2 support
  * We have added to the "directors" VMOD? an overhauled version of
  a director which was available as an out-of-tree VMOD under the
  name VSLP for a couple of years. It is basically a better hash
  director which uses consistent hashing to provide improved
  stability of backend node selection when the configuration and/or
  health state of backends changes.
  * Hit-For-Pass is now actually Hit-For-Miss
  * We have made the ban lurker even more efficient by example of
  some real live situations with tens of thousands of bans using
  inefficient regular expressions.
  * The waitinglist logic for ESI subrequests now uses condition
  variables to trigger immediate continuation of ESI processing
  when an object being waited for becomes available.
  * Backend PROXY protocol requests are now supported through the
  .proxy_header attribute of the backend definition.
  * VCL files are now also being searched for in
  /usr/share/varnish/vcl if not found in /etc/varnish.
  * The basic device detection vcl is now bundled with varnish.</changelog>
  <changelog author="dimstar@opensuse.org" date="1494936000">- BuildRequire python3-docutils instead of python-docutils.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1498219200">- Update to version 5.1.2:
  * Fix an endless loop in Backend Polling (#2295)
  * Fix a Chunked bug in tight workspaces (#2207, #2275)
  * Fix a bug relating to req.body when on waitinglist (#2266)
  * Handle EPIPE on broken TCP connections (#2267)
  * Work around the x86 arch's turbo-double FP format in parameter
    setup code. (#1875)
  * Fix race related to backend probe with proxy header (#2278)
  * Keep VCL temperature consistent between mgt/worker also when
    worker protests.
  * A lot of HTTP/2 fixes.
- Changes introduced by version 5.1.1:
  * Fix bug introduced by stubborn old bugger right before release
    5.1.0 was cut.
- Changes introduced by version 5.1.0:
  * Added varnishd command-line options -I, -x and -?, and
    tightened restrictions on permitted combinations of options.
  * More progress on support for HTTP/2.
  * Add ``return(fail)`` to almost all VCL subroutines.
  * Restored the old hit-for-pass, invoked with
    ``return(pass(DURATION))`` from
    ``vcl_backend_response``. hit-for-miss remains the default.
    Added the cache_hitmiss stat, and cache_hitpass only counts the
    new/old hit-for-pass cases. Restored HitPass to the Varnish
    log, and added HitMiss. Added the HFP prefix to TTL log entries
    to log a hit-for-pass duration.
  * Rolled back the fix for #1206. Client delivery decides solely
    whether to send a 304 client response, based on client request
    and response headers.
  * Added vtest.sh.
  * Added vxid as a lefthand side for VSL queries.
  * Added the setenv and write_body commands for Varnish test cases
    (VTCs). err_shell is deprecated. Also added the operators
  - cliexpect, -match and -hdrlen, and -reason replaces -msg.
    Added the ${bad_backend} macro.
  * varnishtest can be stopped with the TERM, INT and KILL signals,
    but not with HUP.
  * The fallback director has now an extra, optional parameter to
    keep using the current backend until it falls sick.
  * VMOD shared libraries are now copied to the workdir, to avoid
    problems when VMODs are updated via packaging systems.
  * Bump the VRT version to 6.0.
  * Export more symbols from libvarnishapi.so.
  * The size of the VSL log is limited to 4G-1b, placing upper
    bounds on the -l option and the vsl_space and vsm_space
    parameters.
  * Added parameters clock_step, thread_pool_reserve and
    ban_cutoff.
  * Parameters vcl_dir and vmod_dir are deprecated, use vcl_path
    and vmod_path instead.
  * All parameters are defined, even on platforms that don't
    support them. An unsupported parameter is documented as such in
    param.show. Setting such a parameter is not an error, but has
    no effect.
  * Clarified the interpretations of the + and - operators in VCL
    with operands of the various data types.
  * DURATION types may be used in boolean contexts.
  * INT, DURATION and REAL values can now be negative.
  * Response codes 1000 or greater may now be set in VCL
    internally. resp.status is delivered modulo 1000 in client
    responses.
  * IP addresses can be compared for equality in VCL.
  * Introduce the STEVEDORE data type, and the objects
    storage.SNAME in VCL. Added req.storage and beresp.storage;
    beresp.storage_hint is deprecated.
  * Retired the umem stevedore.
  * req.ttl is deprecated.
  * Added std.getenv() and std.late_100_continue().
  * The fetch_failed stat is incremented for any kind of fetch
    failure.
  * Added the stats n_test_gunzip and
    bans_lurker_obj_killed_cutoff.
  * Clarified the meanings of the %r, %{X}i and %{X}o formatters in
    varnishncsa.
- Add varnish-5.1.2-add-fallthrough-comments.patch to fix build
  with GCC 7 (boo#1041259).</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="jengelh@inai.de" date="1521460800">- Update to new upstream release 6.0.0
  * Added support for Unix Domain Sockets, both for clients and
    for backend servers. This brings a new level of the VCL
    language, version 4.1.
  * Always use HTTP/1.1 on backend connections for pass fetch.</changelog>
  <changelog author="jengelh@inai.de" date="1525262400">- Put %fillup back into %post</changelog>
  <changelog author="Samu Voutilainen &lt;smar@smar.fi&gt;" date="1553688000">- Updated to 6.2.0
  * Added a thread pool watchdog which will restart the worker
    process if scheduling tasks onto worker threads appears
    stuck. The new parameter "thread_pool_watchdog" configures
    it.
- Disabled error for clobbering, which caused bogus
  error in varnishtest</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566820800">- Add uninit.patch.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1567598400">- Update to release 6.2.1
  * Bugfix for CVE-2019-15892 [boo#1149382]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1568721600">- Update to release 6.3.0
  * The Host: header is folded to lower-case in the builtin_vcl.
  * Improved performance of shared memory statistics counters.
  * Synthetic objects created from vcl_backend_error {} now
    replace existing stale objects as ordinary backend fetches
    would (for details see changes.rst)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1582632000">- Update to release 6.3.2
  * Fix a denial of service vulnerability when using the proxy
    protocol version 2.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1584446400">- Update to release 6.4.0
  * The MAIN.sess_drop counter is gone.
  * backend "none" was added for "no backend".
  * The hash algorithm of the hash director was changed, so
    backend selection will change once only when upgrading.
  * It is now possible for VMOD authors to customize the
    connection pooling of a dynamic backend.
  * For more, see changes.rst.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1591704000">- Update Git-Web repository link
- Set CFLAGS+=-fcommon.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1592913600">- Disable LTO, this randomly fails during link stage.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1600344000">- Update to release 6.5.0
  * `PRIV_TOP` is now thread-safe to support parallel ESI
    implementations.
  * varnishstat's JSON output format (-j option) has been changed.
  * Behavior for 304-type responses was changed not to update the
    Content-Encoding response header of the stored object.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1601640000">- Update to release 6.5.1
  * Bump the VRT_MAJOR_VERSION number defined in the vrt.h</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1625400000">- update to 6.6.0:
  * The ban_cutoff parameter now refers to the overall length of
    the ban list, including completed bans, where before only
    non-completed (?active?) bans were counted towards ban_cutoff.
  * Body bytes accounting has been fixed to always represent the
    number of body bytes moved on the wire, exclusive of
    protocol-specific overhead like HTTP/1 chunked encoding or
    HTTP/2 framing.
  * The connection close reason has been fixed to properly report
    SC_RESP_CLOSE where previously only SC_REQ_CLOSE was reported.
  * Unless the new validate_headers feature is disabled, all newly
    set headers are now validated to contain only characters
    allowed by RFC7230.
  * The filter_re, keep_re and get_re functions from the bundled
    cookie vmod have been changed to take the VCL_REGEX type. This
    implies that their regular expression arguments now need to be
    literal, not e.g. string.
  * The interface for private pointers in VMODs has been changed,
    the VRT backend interface has been changed, many filter
    (VDP/VFP) related signatures have been changed, and the
    stevedore API has been changed. (Details thereto, see online
    changelog.)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1628251200">- Update to release 6.6.1
  * Fix an HTTP/2.0 request smuggling vulnerability. [bnc#1188470]</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1638360000">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * varnish.service
  * varnishlog.service</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1652702400">- Update to release 7.1.0 [boo#1195188] [CVE-2022-23959]
  * VCL: It is now possible to assign a BLOB value to a BODY
    variable, in addition to STRING as before.
  * VMOD: New STRING strftime(TIME time, STRING format) function
    for UTC formatting.</changelog>
</package>
<package pkgid="879cc15f0dfce9cce625adbdaad8d3e52cf6681533b1675157c462319641e9ce" name="varnish" arch="ppc64le">
  <version epoch="0" ver="7.1.0" rel="bp154.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1474804800">- Update to new upstream release 5.0.0
- The varnishd "-u NNN" option, which may be remaining in
  /etc/sysconfig/varnish, has been replaced with "-j unix,user=NNN".
  * Varnish 5.0 changes some (mostly) internal APIs and adds some
  major new features over Varnish 4.1.
  * 5.0 supports jumping from the active VCL's vcl_recv{} to another
  VCL via a VCL label.
  * Very Experimental HTTP/2 support
  * We have added to the "directors" VMOD? an overhauled version of
  a director which was available as an out-of-tree VMOD under the
  name VSLP for a couple of years. It is basically a better hash
  director which uses consistent hashing to provide improved
  stability of backend node selection when the configuration and/or
  health state of backends changes.
  * Hit-For-Pass is now actually Hit-For-Miss
  * We have made the ban lurker even more efficient by example of
  some real live situations with tens of thousands of bans using
  inefficient regular expressions.
  * The waitinglist logic for ESI subrequests now uses condition
  variables to trigger immediate continuation of ESI processing
  when an object being waited for becomes available.
  * Backend PROXY protocol requests are now supported through the
  .proxy_header attribute of the backend definition.
  * VCL files are now also being searched for in
  /usr/share/varnish/vcl if not found in /etc/varnish.
  * The basic device detection vcl is now bundled with varnish.</changelog>
  <changelog author="dimstar@opensuse.org" date="1494936000">- BuildRequire python3-docutils instead of python-docutils.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1498219200">- Update to version 5.1.2:
  * Fix an endless loop in Backend Polling (#2295)
  * Fix a Chunked bug in tight workspaces (#2207, #2275)
  * Fix a bug relating to req.body when on waitinglist (#2266)
  * Handle EPIPE on broken TCP connections (#2267)
  * Work around the x86 arch's turbo-double FP format in parameter
    setup code. (#1875)
  * Fix race related to backend probe with proxy header (#2278)
  * Keep VCL temperature consistent between mgt/worker also when
    worker protests.
  * A lot of HTTP/2 fixes.
- Changes introduced by version 5.1.1:
  * Fix bug introduced by stubborn old bugger right before release
    5.1.0 was cut.
- Changes introduced by version 5.1.0:
  * Added varnishd command-line options -I, -x and -?, and
    tightened restrictions on permitted combinations of options.
  * More progress on support for HTTP/2.
  * Add ``return(fail)`` to almost all VCL subroutines.
  * Restored the old hit-for-pass, invoked with
    ``return(pass(DURATION))`` from
    ``vcl_backend_response``. hit-for-miss remains the default.
    Added the cache_hitmiss stat, and cache_hitpass only counts the
    new/old hit-for-pass cases. Restored HitPass to the Varnish
    log, and added HitMiss. Added the HFP prefix to TTL log entries
    to log a hit-for-pass duration.
  * Rolled back the fix for #1206. Client delivery decides solely
    whether to send a 304 client response, based on client request
    and response headers.
  * Added vtest.sh.
  * Added vxid as a lefthand side for VSL queries.
  * Added the setenv and write_body commands for Varnish test cases
    (VTCs). err_shell is deprecated. Also added the operators
  - cliexpect, -match and -hdrlen, and -reason replaces -msg.
    Added the ${bad_backend} macro.
  * varnishtest can be stopped with the TERM, INT and KILL signals,
    but not with HUP.
  * The fallback director has now an extra, optional parameter to
    keep using the current backend until it falls sick.
  * VMOD shared libraries are now copied to the workdir, to avoid
    problems when VMODs are updated via packaging systems.
  * Bump the VRT version to 6.0.
  * Export more symbols from libvarnishapi.so.
  * The size of the VSL log is limited to 4G-1b, placing upper
    bounds on the -l option and the vsl_space and vsm_space
    parameters.
  * Added parameters clock_step, thread_pool_reserve and
    ban_cutoff.
  * Parameters vcl_dir and vmod_dir are deprecated, use vcl_path
    and vmod_path instead.
  * All parameters are defined, even on platforms that don't
    support them. An unsupported parameter is documented as such in
    param.show. Setting such a parameter is not an error, but has
    no effect.
  * Clarified the interpretations of the + and - operators in VCL
    with operands of the various data types.
  * DURATION types may be used in boolean contexts.
  * INT, DURATION and REAL values can now be negative.
  * Response codes 1000 or greater may now be set in VCL
    internally. resp.status is delivered modulo 1000 in client
    responses.
  * IP addresses can be compared for equality in VCL.
  * Introduce the STEVEDORE data type, and the objects
    storage.SNAME in VCL. Added req.storage and beresp.storage;
    beresp.storage_hint is deprecated.
  * Retired the umem stevedore.
  * req.ttl is deprecated.
  * Added std.getenv() and std.late_100_continue().
  * The fetch_failed stat is incremented for any kind of fetch
    failure.
  * Added the stats n_test_gunzip and
    bans_lurker_obj_killed_cutoff.
  * Clarified the meanings of the %r, %{X}i and %{X}o formatters in
    varnishncsa.
- Add varnish-5.1.2-add-fallthrough-comments.patch to fix build
  with GCC 7 (boo#1041259).</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="jengelh@inai.de" date="1521460800">- Update to new upstream release 6.0.0
  * Added support for Unix Domain Sockets, both for clients and
    for backend servers. This brings a new level of the VCL
    language, version 4.1.
  * Always use HTTP/1.1 on backend connections for pass fetch.</changelog>
  <changelog author="jengelh@inai.de" date="1525262400">- Put %fillup back into %post</changelog>
  <changelog author="Samu Voutilainen &lt;smar@smar.fi&gt;" date="1553688000">- Updated to 6.2.0
  * Added a thread pool watchdog which will restart the worker
    process if scheduling tasks onto worker threads appears
    stuck. The new parameter "thread_pool_watchdog" configures
    it.
- Disabled error for clobbering, which caused bogus
  error in varnishtest</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566820800">- Add uninit.patch.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1567598400">- Update to release 6.2.1
  * Bugfix for CVE-2019-15892 [boo#1149382]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1568721600">- Update to release 6.3.0
  * The Host: header is folded to lower-case in the builtin_vcl.
  * Improved performance of shared memory statistics counters.
  * Synthetic objects created from vcl_backend_error {} now
    replace existing stale objects as ordinary backend fetches
    would (for details see changes.rst)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1582632000">- Update to release 6.3.2
  * Fix a denial of service vulnerability when using the proxy
    protocol version 2.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1584446400">- Update to release 6.4.0
  * The MAIN.sess_drop counter is gone.
  * backend "none" was added for "no backend".
  * The hash algorithm of the hash director was changed, so
    backend selection will change once only when upgrading.
  * It is now possible for VMOD authors to customize the
    connection pooling of a dynamic backend.
  * For more, see changes.rst.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1591704000">- Update Git-Web repository link
- Set CFLAGS+=-fcommon.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1592913600">- Disable LTO, this randomly fails during link stage.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1600344000">- Update to release 6.5.0
  * `PRIV_TOP` is now thread-safe to support parallel ESI
    implementations.
  * varnishstat's JSON output format (-j option) has been changed.
  * Behavior for 304-type responses was changed not to update the
    Content-Encoding response header of the stored object.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1601640000">- Update to release 6.5.1
  * Bump the VRT_MAJOR_VERSION number defined in the vrt.h</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1625400000">- update to 6.6.0:
  * The ban_cutoff parameter now refers to the overall length of
    the ban list, including completed bans, where before only
    non-completed (?active?) bans were counted towards ban_cutoff.
  * Body bytes accounting has been fixed to always represent the
    number of body bytes moved on the wire, exclusive of
    protocol-specific overhead like HTTP/1 chunked encoding or
    HTTP/2 framing.
  * The connection close reason has been fixed to properly report
    SC_RESP_CLOSE where previously only SC_REQ_CLOSE was reported.
  * Unless the new validate_headers feature is disabled, all newly
    set headers are now validated to contain only characters
    allowed by RFC7230.
  * The filter_re, keep_re and get_re functions from the bundled
    cookie vmod have been changed to take the VCL_REGEX type. This
    implies that their regular expression arguments now need to be
    literal, not e.g. string.
  * The interface for private pointers in VMODs has been changed,
    the VRT backend interface has been changed, many filter
    (VDP/VFP) related signatures have been changed, and the
    stevedore API has been changed. (Details thereto, see online
    changelog.)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1628251200">- Update to release 6.6.1
  * Fix an HTTP/2.0 request smuggling vulnerability. [bnc#1188470]</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1638360000">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * varnish.service
  * varnishlog.service</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1652702400">- Update to release 7.1.0 [boo#1195188] [CVE-2022-23959]
  * VCL: It is now possible to assign a BLOB value to a BODY
    variable, in addition to STRING as before.
  * VMOD: New STRING strftime(TIME time, STRING format) function
    for UTC formatting.</changelog>
</package>
<package pkgid="bac0cc7798395fa105a55fc86dc3295da63643108ed3cf9673f648024baf40e1" name="varnish" arch="s390x">
  <version epoch="0" ver="7.1.0" rel="bp154.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1474804800">- Update to new upstream release 5.0.0
- The varnishd "-u NNN" option, which may be remaining in
  /etc/sysconfig/varnish, has been replaced with "-j unix,user=NNN".
  * Varnish 5.0 changes some (mostly) internal APIs and adds some
  major new features over Varnish 4.1.
  * 5.0 supports jumping from the active VCL's vcl_recv{} to another
  VCL via a VCL label.
  * Very Experimental HTTP/2 support
  * We have added to the "directors" VMOD? an overhauled version of
  a director which was available as an out-of-tree VMOD under the
  name VSLP for a couple of years. It is basically a better hash
  director which uses consistent hashing to provide improved
  stability of backend node selection when the configuration and/or
  health state of backends changes.
  * Hit-For-Pass is now actually Hit-For-Miss
  * We have made the ban lurker even more efficient by example of
  some real live situations with tens of thousands of bans using
  inefficient regular expressions.
  * The waitinglist logic for ESI subrequests now uses condition
  variables to trigger immediate continuation of ESI processing
  when an object being waited for becomes available.
  * Backend PROXY protocol requests are now supported through the
  .proxy_header attribute of the backend definition.
  * VCL files are now also being searched for in
  /usr/share/varnish/vcl if not found in /etc/varnish.
  * The basic device detection vcl is now bundled with varnish.</changelog>
  <changelog author="dimstar@opensuse.org" date="1494936000">- BuildRequire python3-docutils instead of python-docutils.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1498219200">- Update to version 5.1.2:
  * Fix an endless loop in Backend Polling (#2295)
  * Fix a Chunked bug in tight workspaces (#2207, #2275)
  * Fix a bug relating to req.body when on waitinglist (#2266)
  * Handle EPIPE on broken TCP connections (#2267)
  * Work around the x86 arch's turbo-double FP format in parameter
    setup code. (#1875)
  * Fix race related to backend probe with proxy header (#2278)
  * Keep VCL temperature consistent between mgt/worker also when
    worker protests.
  * A lot of HTTP/2 fixes.
- Changes introduced by version 5.1.1:
  * Fix bug introduced by stubborn old bugger right before release
    5.1.0 was cut.
- Changes introduced by version 5.1.0:
  * Added varnishd command-line options -I, -x and -?, and
    tightened restrictions on permitted combinations of options.
  * More progress on support for HTTP/2.
  * Add ``return(fail)`` to almost all VCL subroutines.
  * Restored the old hit-for-pass, invoked with
    ``return(pass(DURATION))`` from
    ``vcl_backend_response``. hit-for-miss remains the default.
    Added the cache_hitmiss stat, and cache_hitpass only counts the
    new/old hit-for-pass cases. Restored HitPass to the Varnish
    log, and added HitMiss. Added the HFP prefix to TTL log entries
    to log a hit-for-pass duration.
  * Rolled back the fix for #1206. Client delivery decides solely
    whether to send a 304 client response, based on client request
    and response headers.
  * Added vtest.sh.
  * Added vxid as a lefthand side for VSL queries.
  * Added the setenv and write_body commands for Varnish test cases
    (VTCs). err_shell is deprecated. Also added the operators
  - cliexpect, -match and -hdrlen, and -reason replaces -msg.
    Added the ${bad_backend} macro.
  * varnishtest can be stopped with the TERM, INT and KILL signals,
    but not with HUP.
  * The fallback director has now an extra, optional parameter to
    keep using the current backend until it falls sick.
  * VMOD shared libraries are now copied to the workdir, to avoid
    problems when VMODs are updated via packaging systems.
  * Bump the VRT version to 6.0.
  * Export more symbols from libvarnishapi.so.
  * The size of the VSL log is limited to 4G-1b, placing upper
    bounds on the -l option and the vsl_space and vsm_space
    parameters.
  * Added parameters clock_step, thread_pool_reserve and
    ban_cutoff.
  * Parameters vcl_dir and vmod_dir are deprecated, use vcl_path
    and vmod_path instead.
  * All parameters are defined, even on platforms that don't
    support them. An unsupported parameter is documented as such in
    param.show. Setting such a parameter is not an error, but has
    no effect.
  * Clarified the interpretations of the + and - operators in VCL
    with operands of the various data types.
  * DURATION types may be used in boolean contexts.
  * INT, DURATION and REAL values can now be negative.
  * Response codes 1000 or greater may now be set in VCL
    internally. resp.status is delivered modulo 1000 in client
    responses.
  * IP addresses can be compared for equality in VCL.
  * Introduce the STEVEDORE data type, and the objects
    storage.SNAME in VCL. Added req.storage and beresp.storage;
    beresp.storage_hint is deprecated.
  * Retired the umem stevedore.
  * req.ttl is deprecated.
  * Added std.getenv() and std.late_100_continue().
  * The fetch_failed stat is incremented for any kind of fetch
    failure.
  * Added the stats n_test_gunzip and
    bans_lurker_obj_killed_cutoff.
  * Clarified the meanings of the %r, %{X}i and %{X}o formatters in
    varnishncsa.
- Add varnish-5.1.2-add-fallthrough-comments.patch to fix build
  with GCC 7 (boo#1041259).</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="jengelh@inai.de" date="1521460800">- Update to new upstream release 6.0.0
  * Added support for Unix Domain Sockets, both for clients and
    for backend servers. This brings a new level of the VCL
    language, version 4.1.
  * Always use HTTP/1.1 on backend connections for pass fetch.</changelog>
  <changelog author="jengelh@inai.de" date="1525262400">- Put %fillup back into %post</changelog>
  <changelog author="Samu Voutilainen &lt;smar@smar.fi&gt;" date="1553688000">- Updated to 6.2.0
  * Added a thread pool watchdog which will restart the worker
    process if scheduling tasks onto worker threads appears
    stuck. The new parameter "thread_pool_watchdog" configures
    it.
- Disabled error for clobbering, which caused bogus
  error in varnishtest</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566820800">- Add uninit.patch.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1567598400">- Update to release 6.2.1
  * Bugfix for CVE-2019-15892 [boo#1149382]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1568721600">- Update to release 6.3.0
  * The Host: header is folded to lower-case in the builtin_vcl.
  * Improved performance of shared memory statistics counters.
  * Synthetic objects created from vcl_backend_error {} now
    replace existing stale objects as ordinary backend fetches
    would (for details see changes.rst)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1582632000">- Update to release 6.3.2
  * Fix a denial of service vulnerability when using the proxy
    protocol version 2.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1584446400">- Update to release 6.4.0
  * The MAIN.sess_drop counter is gone.
  * backend "none" was added for "no backend".
  * The hash algorithm of the hash director was changed, so
    backend selection will change once only when upgrading.
  * It is now possible for VMOD authors to customize the
    connection pooling of a dynamic backend.
  * For more, see changes.rst.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1591704000">- Update Git-Web repository link
- Set CFLAGS+=-fcommon.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1592913600">- Disable LTO, this randomly fails during link stage.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1600344000">- Update to release 6.5.0
  * `PRIV_TOP` is now thread-safe to support parallel ESI
    implementations.
  * varnishstat's JSON output format (-j option) has been changed.
  * Behavior for 304-type responses was changed not to update the
    Content-Encoding response header of the stored object.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1601640000">- Update to release 6.5.1
  * Bump the VRT_MAJOR_VERSION number defined in the vrt.h</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1625400000">- update to 6.6.0:
  * The ban_cutoff parameter now refers to the overall length of
    the ban list, including completed bans, where before only
    non-completed (?active?) bans were counted towards ban_cutoff.
  * Body bytes accounting has been fixed to always represent the
    number of body bytes moved on the wire, exclusive of
    protocol-specific overhead like HTTP/1 chunked encoding or
    HTTP/2 framing.
  * The connection close reason has been fixed to properly report
    SC_RESP_CLOSE where previously only SC_REQ_CLOSE was reported.
  * Unless the new validate_headers feature is disabled, all newly
    set headers are now validated to contain only characters
    allowed by RFC7230.
  * The filter_re, keep_re and get_re functions from the bundled
    cookie vmod have been changed to take the VCL_REGEX type. This
    implies that their regular expression arguments now need to be
    literal, not e.g. string.
  * The interface for private pointers in VMODs has been changed,
    the VRT backend interface has been changed, many filter
    (VDP/VFP) related signatures have been changed, and the
    stevedore API has been changed. (Details thereto, see online
    changelog.)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1628251200">- Update to release 6.6.1
  * Fix an HTTP/2.0 request smuggling vulnerability. [bnc#1188470]</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1638360000">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * varnish.service
  * varnishlog.service</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1652702400">- Update to release 7.1.0 [boo#1195188] [CVE-2022-23959]
  * VCL: It is now possible to assign a BLOB value to a BODY
    variable, in addition to STRING as before.
  * VMOD: New STRING strftime(TIME time, STRING format) function
    for UTC formatting.</changelog>
</package>
<package pkgid="adf8020a00c2778f0a4338a4a8f4db3af771b44e9d74ec15a8e27378d1014e23" name="varnish" arch="src">
  <version epoch="0" ver="7.1.0" rel="bp154.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1474804800">- Update to new upstream release 5.0.0
- The varnishd "-u NNN" option, which may be remaining in
  /etc/sysconfig/varnish, has been replaced with "-j unix,user=NNN".
  * Varnish 5.0 changes some (mostly) internal APIs and adds some
  major new features over Varnish 4.1.
  * 5.0 supports jumping from the active VCL's vcl_recv{} to another
  VCL via a VCL label.
  * Very Experimental HTTP/2 support
  * We have added to the "directors" VMOD? an overhauled version of
  a director which was available as an out-of-tree VMOD under the
  name VSLP for a couple of years. It is basically a better hash
  director which uses consistent hashing to provide improved
  stability of backend node selection when the configuration and/or
  health state of backends changes.
  * Hit-For-Pass is now actually Hit-For-Miss
  * We have made the ban lurker even more efficient by example of
  some real live situations with tens of thousands of bans using
  inefficient regular expressions.
  * The waitinglist logic for ESI subrequests now uses condition
  variables to trigger immediate continuation of ESI processing
  when an object being waited for becomes available.
  * Backend PROXY protocol requests are now supported through the
  .proxy_header attribute of the backend definition.
  * VCL files are now also being searched for in
  /usr/share/varnish/vcl if not found in /etc/varnish.
  * The basic device detection vcl is now bundled with varnish.</changelog>
  <changelog author="dimstar@opensuse.org" date="1494936000">- BuildRequire python3-docutils instead of python-docutils.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1498219200">- Update to version 5.1.2:
  * Fix an endless loop in Backend Polling (#2295)
  * Fix a Chunked bug in tight workspaces (#2207, #2275)
  * Fix a bug relating to req.body when on waitinglist (#2266)
  * Handle EPIPE on broken TCP connections (#2267)
  * Work around the x86 arch's turbo-double FP format in parameter
    setup code. (#1875)
  * Fix race related to backend probe with proxy header (#2278)
  * Keep VCL temperature consistent between mgt/worker also when
    worker protests.
  * A lot of HTTP/2 fixes.
- Changes introduced by version 5.1.1:
  * Fix bug introduced by stubborn old bugger right before release
    5.1.0 was cut.
- Changes introduced by version 5.1.0:
  * Added varnishd command-line options -I, -x and -?, and
    tightened restrictions on permitted combinations of options.
  * More progress on support for HTTP/2.
  * Add ``return(fail)`` to almost all VCL subroutines.
  * Restored the old hit-for-pass, invoked with
    ``return(pass(DURATION))`` from
    ``vcl_backend_response``. hit-for-miss remains the default.
    Added the cache_hitmiss stat, and cache_hitpass only counts the
    new/old hit-for-pass cases. Restored HitPass to the Varnish
    log, and added HitMiss. Added the HFP prefix to TTL log entries
    to log a hit-for-pass duration.
  * Rolled back the fix for #1206. Client delivery decides solely
    whether to send a 304 client response, based on client request
    and response headers.
  * Added vtest.sh.
  * Added vxid as a lefthand side for VSL queries.
  * Added the setenv and write_body commands for Varnish test cases
    (VTCs). err_shell is deprecated. Also added the operators
  - cliexpect, -match and -hdrlen, and -reason replaces -msg.
    Added the ${bad_backend} macro.
  * varnishtest can be stopped with the TERM, INT and KILL signals,
    but not with HUP.
  * The fallback director has now an extra, optional parameter to
    keep using the current backend until it falls sick.
  * VMOD shared libraries are now copied to the workdir, to avoid
    problems when VMODs are updated via packaging systems.
  * Bump the VRT version to 6.0.
  * Export more symbols from libvarnishapi.so.
  * The size of the VSL log is limited to 4G-1b, placing upper
    bounds on the -l option and the vsl_space and vsm_space
    parameters.
  * Added parameters clock_step, thread_pool_reserve and
    ban_cutoff.
  * Parameters vcl_dir and vmod_dir are deprecated, use vcl_path
    and vmod_path instead.
  * All parameters are defined, even on platforms that don't
    support them. An unsupported parameter is documented as such in
    param.show. Setting such a parameter is not an error, but has
    no effect.
  * Clarified the interpretations of the + and - operators in VCL
    with operands of the various data types.
  * DURATION types may be used in boolean contexts.
  * INT, DURATION and REAL values can now be negative.
  * Response codes 1000 or greater may now be set in VCL
    internally. resp.status is delivered modulo 1000 in client
    responses.
  * IP addresses can be compared for equality in VCL.
  * Introduce the STEVEDORE data type, and the objects
    storage.SNAME in VCL. Added req.storage and beresp.storage;
    beresp.storage_hint is deprecated.
  * Retired the umem stevedore.
  * req.ttl is deprecated.
  * Added std.getenv() and std.late_100_continue().
  * The fetch_failed stat is incremented for any kind of fetch
    failure.
  * Added the stats n_test_gunzip and
    bans_lurker_obj_killed_cutoff.
  * Clarified the meanings of the %r, %{X}i and %{X}o formatters in
    varnishncsa.
- Add varnish-5.1.2-add-fallthrough-comments.patch to fix build
  with GCC 7 (boo#1041259).</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="jengelh@inai.de" date="1521460800">- Update to new upstream release 6.0.0
  * Added support for Unix Domain Sockets, both for clients and
    for backend servers. This brings a new level of the VCL
    language, version 4.1.
  * Always use HTTP/1.1 on backend connections for pass fetch.</changelog>
  <changelog author="jengelh@inai.de" date="1525262400">- Put %fillup back into %post</changelog>
  <changelog author="Samu Voutilainen &lt;smar@smar.fi&gt;" date="1553688000">- Updated to 6.2.0
  * Added a thread pool watchdog which will restart the worker
    process if scheduling tasks onto worker threads appears
    stuck. The new parameter "thread_pool_watchdog" configures
    it.
- Disabled error for clobbering, which caused bogus
  error in varnishtest</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566820800">- Add uninit.patch.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1567598400">- Update to release 6.2.1
  * Bugfix for CVE-2019-15892 [boo#1149382]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1568721600">- Update to release 6.3.0
  * The Host: header is folded to lower-case in the builtin_vcl.
  * Improved performance of shared memory statistics counters.
  * Synthetic objects created from vcl_backend_error {} now
    replace existing stale objects as ordinary backend fetches
    would (for details see changes.rst)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1582632000">- Update to release 6.3.2
  * Fix a denial of service vulnerability when using the proxy
    protocol version 2.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1584446400">- Update to release 6.4.0
  * The MAIN.sess_drop counter is gone.
  * backend "none" was added for "no backend".
  * The hash algorithm of the hash director was changed, so
    backend selection will change once only when upgrading.
  * It is now possible for VMOD authors to customize the
    connection pooling of a dynamic backend.
  * For more, see changes.rst.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1591704000">- Update Git-Web repository link
- Set CFLAGS+=-fcommon.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1592913600">- Disable LTO, this randomly fails during link stage.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1600344000">- Update to release 6.5.0
  * `PRIV_TOP` is now thread-safe to support parallel ESI
    implementations.
  * varnishstat's JSON output format (-j option) has been changed.
  * Behavior for 304-type responses was changed not to update the
    Content-Encoding response header of the stored object.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1601640000">- Update to release 6.5.1
  * Bump the VRT_MAJOR_VERSION number defined in the vrt.h</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1625400000">- update to 6.6.0:
  * The ban_cutoff parameter now refers to the overall length of
    the ban list, including completed bans, where before only
    non-completed (?active?) bans were counted towards ban_cutoff.
  * Body bytes accounting has been fixed to always represent the
    number of body bytes moved on the wire, exclusive of
    protocol-specific overhead like HTTP/1 chunked encoding or
    HTTP/2 framing.
  * The connection close reason has been fixed to properly report
    SC_RESP_CLOSE where previously only SC_REQ_CLOSE was reported.
  * Unless the new validate_headers feature is disabled, all newly
    set headers are now validated to contain only characters
    allowed by RFC7230.
  * The filter_re, keep_re and get_re functions from the bundled
    cookie vmod have been changed to take the VCL_REGEX type. This
    implies that their regular expression arguments now need to be
    literal, not e.g. string.
  * The interface for private pointers in VMODs has been changed,
    the VRT backend interface has been changed, many filter
    (VDP/VFP) related signatures have been changed, and the
    stevedore API has been changed. (Details thereto, see online
    changelog.)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1628251200">- Update to release 6.6.1
  * Fix an HTTP/2.0 request smuggling vulnerability. [bnc#1188470]</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1638360000">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * varnish.service
  * varnishlog.service</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1652702400">- Update to release 7.1.0 [boo#1195188] [CVE-2022-23959]
  * VCL: It is now possible to assign a BLOB value to a BODY
    variable, in addition to STRING as before.
  * VMOD: New STRING strftime(TIME time, STRING format) function
    for UTC formatting.</changelog>
</package>
<package pkgid="13bd0ed8f86aa45eb56a4ae7dc9d1d60ebce9296e984d99583cc7f543b0d624a" name="varnish" arch="x86_64">
  <version epoch="0" ver="7.1.0" rel="bp154.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1474804800">- Update to new upstream release 5.0.0
- The varnishd "-u NNN" option, which may be remaining in
  /etc/sysconfig/varnish, has been replaced with "-j unix,user=NNN".
  * Varnish 5.0 changes some (mostly) internal APIs and adds some
  major new features over Varnish 4.1.
  * 5.0 supports jumping from the active VCL's vcl_recv{} to another
  VCL via a VCL label.
  * Very Experimental HTTP/2 support
  * We have added to the "directors" VMOD? an overhauled version of
  a director which was available as an out-of-tree VMOD under the
  name VSLP for a couple of years. It is basically a better hash
  director which uses consistent hashing to provide improved
  stability of backend node selection when the configuration and/or
  health state of backends changes.
  * Hit-For-Pass is now actually Hit-For-Miss
  * We have made the ban lurker even more efficient by example of
  some real live situations with tens of thousands of bans using
  inefficient regular expressions.
  * The waitinglist logic for ESI subrequests now uses condition
  variables to trigger immediate continuation of ESI processing
  when an object being waited for becomes available.
  * Backend PROXY protocol requests are now supported through the
  .proxy_header attribute of the backend definition.
  * VCL files are now also being searched for in
  /usr/share/varnish/vcl if not found in /etc/varnish.
  * The basic device detection vcl is now bundled with varnish.</changelog>
  <changelog author="dimstar@opensuse.org" date="1494936000">- BuildRequire python3-docutils instead of python-docutils.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1498219200">- Update to version 5.1.2:
  * Fix an endless loop in Backend Polling (#2295)
  * Fix a Chunked bug in tight workspaces (#2207, #2275)
  * Fix a bug relating to req.body when on waitinglist (#2266)
  * Handle EPIPE on broken TCP connections (#2267)
  * Work around the x86 arch's turbo-double FP format in parameter
    setup code. (#1875)
  * Fix race related to backend probe with proxy header (#2278)
  * Keep VCL temperature consistent between mgt/worker also when
    worker protests.
  * A lot of HTTP/2 fixes.
- Changes introduced by version 5.1.1:
  * Fix bug introduced by stubborn old bugger right before release
    5.1.0 was cut.
- Changes introduced by version 5.1.0:
  * Added varnishd command-line options -I, -x and -?, and
    tightened restrictions on permitted combinations of options.
  * More progress on support for HTTP/2.
  * Add ``return(fail)`` to almost all VCL subroutines.
  * Restored the old hit-for-pass, invoked with
    ``return(pass(DURATION))`` from
    ``vcl_backend_response``. hit-for-miss remains the default.
    Added the cache_hitmiss stat, and cache_hitpass only counts the
    new/old hit-for-pass cases. Restored HitPass to the Varnish
    log, and added HitMiss. Added the HFP prefix to TTL log entries
    to log a hit-for-pass duration.
  * Rolled back the fix for #1206. Client delivery decides solely
    whether to send a 304 client response, based on client request
    and response headers.
  * Added vtest.sh.
  * Added vxid as a lefthand side for VSL queries.
  * Added the setenv and write_body commands for Varnish test cases
    (VTCs). err_shell is deprecated. Also added the operators
  - cliexpect, -match and -hdrlen, and -reason replaces -msg.
    Added the ${bad_backend} macro.
  * varnishtest can be stopped with the TERM, INT and KILL signals,
    but not with HUP.
  * The fallback director has now an extra, optional parameter to
    keep using the current backend until it falls sick.
  * VMOD shared libraries are now copied to the workdir, to avoid
    problems when VMODs are updated via packaging systems.
  * Bump the VRT version to 6.0.
  * Export more symbols from libvarnishapi.so.
  * The size of the VSL log is limited to 4G-1b, placing upper
    bounds on the -l option and the vsl_space and vsm_space
    parameters.
  * Added parameters clock_step, thread_pool_reserve and
    ban_cutoff.
  * Parameters vcl_dir and vmod_dir are deprecated, use vcl_path
    and vmod_path instead.
  * All parameters are defined, even on platforms that don't
    support them. An unsupported parameter is documented as such in
    param.show. Setting such a parameter is not an error, but has
    no effect.
  * Clarified the interpretations of the + and - operators in VCL
    with operands of the various data types.
  * DURATION types may be used in boolean contexts.
  * INT, DURATION and REAL values can now be negative.
  * Response codes 1000 or greater may now be set in VCL
    internally. resp.status is delivered modulo 1000 in client
    responses.
  * IP addresses can be compared for equality in VCL.
  * Introduce the STEVEDORE data type, and the objects
    storage.SNAME in VCL. Added req.storage and beresp.storage;
    beresp.storage_hint is deprecated.
  * Retired the umem stevedore.
  * req.ttl is deprecated.
  * Added std.getenv() and std.late_100_continue().
  * The fetch_failed stat is incremented for any kind of fetch
    failure.
  * Added the stats n_test_gunzip and
    bans_lurker_obj_killed_cutoff.
  * Clarified the meanings of the %r, %{X}i and %{X}o formatters in
    varnishncsa.
- Add varnish-5.1.2-add-fallthrough-comments.patch to fix build
  with GCC 7 (boo#1041259).</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="jengelh@inai.de" date="1521460800">- Update to new upstream release 6.0.0
  * Added support for Unix Domain Sockets, both for clients and
    for backend servers. This brings a new level of the VCL
    language, version 4.1.
  * Always use HTTP/1.1 on backend connections for pass fetch.</changelog>
  <changelog author="jengelh@inai.de" date="1525262400">- Put %fillup back into %post</changelog>
  <changelog author="Samu Voutilainen &lt;smar@smar.fi&gt;" date="1553688000">- Updated to 6.2.0
  * Added a thread pool watchdog which will restart the worker
    process if scheduling tasks onto worker threads appears
    stuck. The new parameter "thread_pool_watchdog" configures
    it.
- Disabled error for clobbering, which caused bogus
  error in varnishtest</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566820800">- Add uninit.patch.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1567598400">- Update to release 6.2.1
  * Bugfix for CVE-2019-15892 [boo#1149382]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1568721600">- Update to release 6.3.0
  * The Host: header is folded to lower-case in the builtin_vcl.
  * Improved performance of shared memory statistics counters.
  * Synthetic objects created from vcl_backend_error {} now
    replace existing stale objects as ordinary backend fetches
    would (for details see changes.rst)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1582632000">- Update to release 6.3.2
  * Fix a denial of service vulnerability when using the proxy
    protocol version 2.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1584446400">- Update to release 6.4.0
  * The MAIN.sess_drop counter is gone.
  * backend "none" was added for "no backend".
  * The hash algorithm of the hash director was changed, so
    backend selection will change once only when upgrading.
  * It is now possible for VMOD authors to customize the
    connection pooling of a dynamic backend.
  * For more, see changes.rst.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1591704000">- Update Git-Web repository link
- Set CFLAGS+=-fcommon.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1592913600">- Disable LTO, this randomly fails during link stage.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1600344000">- Update to release 6.5.0
  * `PRIV_TOP` is now thread-safe to support parallel ESI
    implementations.
  * varnishstat's JSON output format (-j option) has been changed.
  * Behavior for 304-type responses was changed not to update the
    Content-Encoding response header of the stored object.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1601640000">- Update to release 6.5.1
  * Bump the VRT_MAJOR_VERSION number defined in the vrt.h</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1625400000">- update to 6.6.0:
  * The ban_cutoff parameter now refers to the overall length of
    the ban list, including completed bans, where before only
    non-completed (?active?) bans were counted towards ban_cutoff.
  * Body bytes accounting has been fixed to always represent the
    number of body bytes moved on the wire, exclusive of
    protocol-specific overhead like HTTP/1 chunked encoding or
    HTTP/2 framing.
  * The connection close reason has been fixed to properly report
    SC_RESP_CLOSE where previously only SC_REQ_CLOSE was reported.
  * Unless the new validate_headers feature is disabled, all newly
    set headers are now validated to contain only characters
    allowed by RFC7230.
  * The filter_re, keep_re and get_re functions from the bundled
    cookie vmod have been changed to take the VCL_REGEX type. This
    implies that their regular expression arguments now need to be
    literal, not e.g. string.
  * The interface for private pointers in VMODs has been changed,
    the VRT backend interface has been changed, many filter
    (VDP/VFP) related signatures have been changed, and the
    stevedore API has been changed. (Details thereto, see online
    changelog.)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1628251200">- Update to release 6.6.1
  * Fix an HTTP/2.0 request smuggling vulnerability. [bnc#1188470]</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1638360000">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * varnish.service
  * varnishlog.service</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1652702400">- Update to release 7.1.0 [boo#1195188] [CVE-2022-23959]
  * VCL: It is now possible to assign a BLOB value to a BODY
    variable, in addition to STRING as before.
  * VMOD: New STRING strftime(TIME time, STRING format) function
    for UTC formatting.</changelog>
</package>
<package pkgid="e9ccd9f04b1de0c8f47d7982f6302fe7a4b7f920279cfc09bc95949693e8a0c9" name="varnish" arch="aarch64">
  <version epoch="0" ver="7.1.1" rel="bp154.2.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1494936000">- BuildRequire python3-docutils instead of python-docutils.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1498219200">- Update to version 5.1.2:
  * Fix an endless loop in Backend Polling (#2295)
  * Fix a Chunked bug in tight workspaces (#2207, #2275)
  * Fix a bug relating to req.body when on waitinglist (#2266)
  * Handle EPIPE on broken TCP connections (#2267)
  * Work around the x86 arch's turbo-double FP format in parameter
    setup code. (#1875)
  * Fix race related to backend probe with proxy header (#2278)
  * Keep VCL temperature consistent between mgt/worker also when
    worker protests.
  * A lot of HTTP/2 fixes.
- Changes introduced by version 5.1.1:
  * Fix bug introduced by stubborn old bugger right before release
    5.1.0 was cut.
- Changes introduced by version 5.1.0:
  * Added varnishd command-line options -I, -x and -?, and
    tightened restrictions on permitted combinations of options.
  * More progress on support for HTTP/2.
  * Add ``return(fail)`` to almost all VCL subroutines.
  * Restored the old hit-for-pass, invoked with
    ``return(pass(DURATION))`` from
    ``vcl_backend_response``. hit-for-miss remains the default.
    Added the cache_hitmiss stat, and cache_hitpass only counts the
    new/old hit-for-pass cases. Restored HitPass to the Varnish
    log, and added HitMiss. Added the HFP prefix to TTL log entries
    to log a hit-for-pass duration.
  * Rolled back the fix for #1206. Client delivery decides solely
    whether to send a 304 client response, based on client request
    and response headers.
  * Added vtest.sh.
  * Added vxid as a lefthand side for VSL queries.
  * Added the setenv and write_body commands for Varnish test cases
    (VTCs). err_shell is deprecated. Also added the operators
  - cliexpect, -match and -hdrlen, and -reason replaces -msg.
    Added the ${bad_backend} macro.
  * varnishtest can be stopped with the TERM, INT and KILL signals,
    but not with HUP.
  * The fallback director has now an extra, optional parameter to
    keep using the current backend until it falls sick.
  * VMOD shared libraries are now copied to the workdir, to avoid
    problems when VMODs are updated via packaging systems.
  * Bump the VRT version to 6.0.
  * Export more symbols from libvarnishapi.so.
  * The size of the VSL log is limited to 4G-1b, placing upper
    bounds on the -l option and the vsl_space and vsm_space
    parameters.
  * Added parameters clock_step, thread_pool_reserve and
    ban_cutoff.
  * Parameters vcl_dir and vmod_dir are deprecated, use vcl_path
    and vmod_path instead.
  * All parameters are defined, even on platforms that don't
    support them. An unsupported parameter is documented as such in
    param.show. Setting such a parameter is not an error, but has
    no effect.
  * Clarified the interpretations of the + and - operators in VCL
    with operands of the various data types.
  * DURATION types may be used in boolean contexts.
  * INT, DURATION and REAL values can now be negative.
  * Response codes 1000 or greater may now be set in VCL
    internally. resp.status is delivered modulo 1000 in client
    responses.
  * IP addresses can be compared for equality in VCL.
  * Introduce the STEVEDORE data type, and the objects
    storage.SNAME in VCL. Added req.storage and beresp.storage;
    beresp.storage_hint is deprecated.
  * Retired the umem stevedore.
  * req.ttl is deprecated.
  * Added std.getenv() and std.late_100_continue().
  * The fetch_failed stat is incremented for any kind of fetch
    failure.
  * Added the stats n_test_gunzip and
    bans_lurker_obj_killed_cutoff.
  * Clarified the meanings of the %r, %{X}i and %{X}o formatters in
    varnishncsa.
- Add varnish-5.1.2-add-fallthrough-comments.patch to fix build
  with GCC 7 (boo#1041259).</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="jengelh@inai.de" date="1521460800">- Update to new upstream release 6.0.0
  * Added support for Unix Domain Sockets, both for clients and
    for backend servers. This brings a new level of the VCL
    language, version 4.1.
  * Always use HTTP/1.1 on backend connections for pass fetch.</changelog>
  <changelog author="jengelh@inai.de" date="1525262400">- Put %fillup back into %post</changelog>
  <changelog author="Samu Voutilainen &lt;smar@smar.fi&gt;" date="1553688000">- Updated to 6.2.0
  * Added a thread pool watchdog which will restart the worker
    process if scheduling tasks onto worker threads appears
    stuck. The new parameter "thread_pool_watchdog" configures
    it.
- Disabled error for clobbering, which caused bogus
  error in varnishtest</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566820800">- Add uninit.patch.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1567598400">- Update to release 6.2.1
  * Bugfix for CVE-2019-15892 [boo#1149382]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1568721600">- Update to release 6.3.0
  * The Host: header is folded to lower-case in the builtin_vcl.
  * Improved performance of shared memory statistics counters.
  * Synthetic objects created from vcl_backend_error {} now
    replace existing stale objects as ordinary backend fetches
    would (for details see changes.rst)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1582632000">- Update to release 6.3.2
  * Fix a denial of service vulnerability when using the proxy
    protocol version 2.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1584446400">- Update to release 6.4.0
  * The MAIN.sess_drop counter is gone.
  * backend "none" was added for "no backend".
  * The hash algorithm of the hash director was changed, so
    backend selection will change once only when upgrading.
  * It is now possible for VMOD authors to customize the
    connection pooling of a dynamic backend.
  * For more, see changes.rst.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1591704000">- Update Git-Web repository link
- Set CFLAGS+=-fcommon.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1592913600">- Disable LTO, this randomly fails during link stage.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1600344000">- Update to release 6.5.0
  * `PRIV_TOP` is now thread-safe to support parallel ESI
    implementations.
  * varnishstat's JSON output format (-j option) has been changed.
  * Behavior for 304-type responses was changed not to update the
    Content-Encoding response header of the stored object.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1601640000">- Update to release 6.5.1
  * Bump the VRT_MAJOR_VERSION number defined in the vrt.h</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1625400000">- update to 6.6.0:
  * The ban_cutoff parameter now refers to the overall length of
    the ban list, including completed bans, where before only
    non-completed (?active?) bans were counted towards ban_cutoff.
  * Body bytes accounting has been fixed to always represent the
    number of body bytes moved on the wire, exclusive of
    protocol-specific overhead like HTTP/1 chunked encoding or
    HTTP/2 framing.
  * The connection close reason has been fixed to properly report
    SC_RESP_CLOSE where previously only SC_REQ_CLOSE was reported.
  * Unless the new validate_headers feature is disabled, all newly
    set headers are now validated to contain only characters
    allowed by RFC7230.
  * The filter_re, keep_re and get_re functions from the bundled
    cookie vmod have been changed to take the VCL_REGEX type. This
    implies that their regular expression arguments now need to be
    literal, not e.g. string.
  * The interface for private pointers in VMODs has been changed,
    the VRT backend interface has been changed, many filter
    (VDP/VFP) related signatures have been changed, and the
    stevedore API has been changed. (Details thereto, see online
    changelog.)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1628251200">- Update to release 6.6.1
  * Fix an HTTP/2.0 request smuggling vulnerability. [bnc#1188470]</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1638360000">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * varnish.service
  * varnishlog.service</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1652702400">- Update to release 7.1.0 [boo#1195188] [CVE-2022-23959]
  * VCL: It is now possible to assign a BLOB value to a BODY
    variable, in addition to STRING as before.
  * VMOD: New STRING strftime(TIME time, STRING format) function
    for UTC formatting.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1660305600">- Update to release 7.1.1 [boo#1202350] [CVE-2022-38150]
  * Resolve a denial of service attack involving reason phrases.</changelog>
</package>
<package pkgid="d471d2c2b142a8d54c2f70f40d7b15034188e78ce43041402569974daa4a3a96" name="varnish" arch="i586">
  <version epoch="0" ver="7.1.1" rel="bp154.2.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1494936000">- BuildRequire python3-docutils instead of python-docutils.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1498219200">- Update to version 5.1.2:
  * Fix an endless loop in Backend Polling (#2295)
  * Fix a Chunked bug in tight workspaces (#2207, #2275)
  * Fix a bug relating to req.body when on waitinglist (#2266)
  * Handle EPIPE on broken TCP connections (#2267)
  * Work around the x86 arch's turbo-double FP format in parameter
    setup code. (#1875)
  * Fix race related to backend probe with proxy header (#2278)
  * Keep VCL temperature consistent between mgt/worker also when
    worker protests.
  * A lot of HTTP/2 fixes.
- Changes introduced by version 5.1.1:
  * Fix bug introduced by stubborn old bugger right before release
    5.1.0 was cut.
- Changes introduced by version 5.1.0:
  * Added varnishd command-line options -I, -x and -?, and
    tightened restrictions on permitted combinations of options.
  * More progress on support for HTTP/2.
  * Add ``return(fail)`` to almost all VCL subroutines.
  * Restored the old hit-for-pass, invoked with
    ``return(pass(DURATION))`` from
    ``vcl_backend_response``. hit-for-miss remains the default.
    Added the cache_hitmiss stat, and cache_hitpass only counts the
    new/old hit-for-pass cases. Restored HitPass to the Varnish
    log, and added HitMiss. Added the HFP prefix to TTL log entries
    to log a hit-for-pass duration.
  * Rolled back the fix for #1206. Client delivery decides solely
    whether to send a 304 client response, based on client request
    and response headers.
  * Added vtest.sh.
  * Added vxid as a lefthand side for VSL queries.
  * Added the setenv and write_body commands for Varnish test cases
    (VTCs). err_shell is deprecated. Also added the operators
  - cliexpect, -match and -hdrlen, and -reason replaces -msg.
    Added the ${bad_backend} macro.
  * varnishtest can be stopped with the TERM, INT and KILL signals,
    but not with HUP.
  * The fallback director has now an extra, optional parameter to
    keep using the current backend until it falls sick.
  * VMOD shared libraries are now copied to the workdir, to avoid
    problems when VMODs are updated via packaging systems.
  * Bump the VRT version to 6.0.
  * Export more symbols from libvarnishapi.so.
  * The size of the VSL log is limited to 4G-1b, placing upper
    bounds on the -l option and the vsl_space and vsm_space
    parameters.
  * Added parameters clock_step, thread_pool_reserve and
    ban_cutoff.
  * Parameters vcl_dir and vmod_dir are deprecated, use vcl_path
    and vmod_path instead.
  * All parameters are defined, even on platforms that don't
    support them. An unsupported parameter is documented as such in
    param.show. Setting such a parameter is not an error, but has
    no effect.
  * Clarified the interpretations of the + and - operators in VCL
    with operands of the various data types.
  * DURATION types may be used in boolean contexts.
  * INT, DURATION and REAL values can now be negative.
  * Response codes 1000 or greater may now be set in VCL
    internally. resp.status is delivered modulo 1000 in client
    responses.
  * IP addresses can be compared for equality in VCL.
  * Introduce the STEVEDORE data type, and the objects
    storage.SNAME in VCL. Added req.storage and beresp.storage;
    beresp.storage_hint is deprecated.
  * Retired the umem stevedore.
  * req.ttl is deprecated.
  * Added std.getenv() and std.late_100_continue().
  * The fetch_failed stat is incremented for any kind of fetch
    failure.
  * Added the stats n_test_gunzip and
    bans_lurker_obj_killed_cutoff.
  * Clarified the meanings of the %r, %{X}i and %{X}o formatters in
    varnishncsa.
- Add varnish-5.1.2-add-fallthrough-comments.patch to fix build
  with GCC 7 (boo#1041259).</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="jengelh@inai.de" date="1521460800">- Update to new upstream release 6.0.0
  * Added support for Unix Domain Sockets, both for clients and
    for backend servers. This brings a new level of the VCL
    language, version 4.1.
  * Always use HTTP/1.1 on backend connections for pass fetch.</changelog>
  <changelog author="jengelh@inai.de" date="1525262400">- Put %fillup back into %post</changelog>
  <changelog author="Samu Voutilainen &lt;smar@smar.fi&gt;" date="1553688000">- Updated to 6.2.0
  * Added a thread pool watchdog which will restart the worker
    process if scheduling tasks onto worker threads appears
    stuck. The new parameter "thread_pool_watchdog" configures
    it.
- Disabled error for clobbering, which caused bogus
  error in varnishtest</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566820800">- Add uninit.patch.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1567598400">- Update to release 6.2.1
  * Bugfix for CVE-2019-15892 [boo#1149382]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1568721600">- Update to release 6.3.0
  * The Host: header is folded to lower-case in the builtin_vcl.
  * Improved performance of shared memory statistics counters.
  * Synthetic objects created from vcl_backend_error {} now
    replace existing stale objects as ordinary backend fetches
    would (for details see changes.rst)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1582632000">- Update to release 6.3.2
  * Fix a denial of service vulnerability when using the proxy
    protocol version 2.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1584446400">- Update to release 6.4.0
  * The MAIN.sess_drop counter is gone.
  * backend "none" was added for "no backend".
  * The hash algorithm of the hash director was changed, so
    backend selection will change once only when upgrading.
  * It is now possible for VMOD authors to customize the
    connection pooling of a dynamic backend.
  * For more, see changes.rst.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1591704000">- Update Git-Web repository link
- Set CFLAGS+=-fcommon.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1592913600">- Disable LTO, this randomly fails during link stage.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1600344000">- Update to release 6.5.0
  * `PRIV_TOP` is now thread-safe to support parallel ESI
    implementations.
  * varnishstat's JSON output format (-j option) has been changed.
  * Behavior for 304-type responses was changed not to update the
    Content-Encoding response header of the stored object.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1601640000">- Update to release 6.5.1
  * Bump the VRT_MAJOR_VERSION number defined in the vrt.h</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1625400000">- update to 6.6.0:
  * The ban_cutoff parameter now refers to the overall length of
    the ban list, including completed bans, where before only
    non-completed (?active?) bans were counted towards ban_cutoff.
  * Body bytes accounting has been fixed to always represent the
    number of body bytes moved on the wire, exclusive of
    protocol-specific overhead like HTTP/1 chunked encoding or
    HTTP/2 framing.
  * The connection close reason has been fixed to properly report
    SC_RESP_CLOSE where previously only SC_REQ_CLOSE was reported.
  * Unless the new validate_headers feature is disabled, all newly
    set headers are now validated to contain only characters
    allowed by RFC7230.
  * The filter_re, keep_re and get_re functions from the bundled
    cookie vmod have been changed to take the VCL_REGEX type. This
    implies that their regular expression arguments now need to be
    literal, not e.g. string.
  * The interface for private pointers in VMODs has been changed,
    the VRT backend interface has been changed, many filter
    (VDP/VFP) related signatures have been changed, and the
    stevedore API has been changed. (Details thereto, see online
    changelog.)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1628251200">- Update to release 6.6.1
  * Fix an HTTP/2.0 request smuggling vulnerability. [bnc#1188470]</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1638360000">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * varnish.service
  * varnishlog.service</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1652702400">- Update to release 7.1.0 [boo#1195188] [CVE-2022-23959]
  * VCL: It is now possible to assign a BLOB value to a BODY
    variable, in addition to STRING as before.
  * VMOD: New STRING strftime(TIME time, STRING format) function
    for UTC formatting.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1660305600">- Update to release 7.1.1 [boo#1202350] [CVE-2022-38150]
  * Resolve a denial of service attack involving reason phrases.</changelog>
</package>
<package pkgid="bc2ed77f75186d79ddf1c3539cd61bbabf334e83518927719fe7adb65d2a8fb8" name="varnish" arch="ppc64le">
  <version epoch="0" ver="7.1.1" rel="bp154.2.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1494936000">- BuildRequire python3-docutils instead of python-docutils.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1498219200">- Update to version 5.1.2:
  * Fix an endless loop in Backend Polling (#2295)
  * Fix a Chunked bug in tight workspaces (#2207, #2275)
  * Fix a bug relating to req.body when on waitinglist (#2266)
  * Handle EPIPE on broken TCP connections (#2267)
  * Work around the x86 arch's turbo-double FP format in parameter
    setup code. (#1875)
  * Fix race related to backend probe with proxy header (#2278)
  * Keep VCL temperature consistent between mgt/worker also when
    worker protests.
  * A lot of HTTP/2 fixes.
- Changes introduced by version 5.1.1:
  * Fix bug introduced by stubborn old bugger right before release
    5.1.0 was cut.
- Changes introduced by version 5.1.0:
  * Added varnishd command-line options -I, -x and -?, and
    tightened restrictions on permitted combinations of options.
  * More progress on support for HTTP/2.
  * Add ``return(fail)`` to almost all VCL subroutines.
  * Restored the old hit-for-pass, invoked with
    ``return(pass(DURATION))`` from
    ``vcl_backend_response``. hit-for-miss remains the default.
    Added the cache_hitmiss stat, and cache_hitpass only counts the
    new/old hit-for-pass cases. Restored HitPass to the Varnish
    log, and added HitMiss. Added the HFP prefix to TTL log entries
    to log a hit-for-pass duration.
  * Rolled back the fix for #1206. Client delivery decides solely
    whether to send a 304 client response, based on client request
    and response headers.
  * Added vtest.sh.
  * Added vxid as a lefthand side for VSL queries.
  * Added the setenv and write_body commands for Varnish test cases
    (VTCs). err_shell is deprecated. Also added the operators
  - cliexpect, -match and -hdrlen, and -reason replaces -msg.
    Added the ${bad_backend} macro.
  * varnishtest can be stopped with the TERM, INT and KILL signals,
    but not with HUP.
  * The fallback director has now an extra, optional parameter to
    keep using the current backend until it falls sick.
  * VMOD shared libraries are now copied to the workdir, to avoid
    problems when VMODs are updated via packaging systems.
  * Bump the VRT version to 6.0.
  * Export more symbols from libvarnishapi.so.
  * The size of the VSL log is limited to 4G-1b, placing upper
    bounds on the -l option and the vsl_space and vsm_space
    parameters.
  * Added parameters clock_step, thread_pool_reserve and
    ban_cutoff.
  * Parameters vcl_dir and vmod_dir are deprecated, use vcl_path
    and vmod_path instead.
  * All parameters are defined, even on platforms that don't
    support them. An unsupported parameter is documented as such in
    param.show. Setting such a parameter is not an error, but has
    no effect.
  * Clarified the interpretations of the + and - operators in VCL
    with operands of the various data types.
  * DURATION types may be used in boolean contexts.
  * INT, DURATION and REAL values can now be negative.
  * Response codes 1000 or greater may now be set in VCL
    internally. resp.status is delivered modulo 1000 in client
    responses.
  * IP addresses can be compared for equality in VCL.
  * Introduce the STEVEDORE data type, and the objects
    storage.SNAME in VCL. Added req.storage and beresp.storage;
    beresp.storage_hint is deprecated.
  * Retired the umem stevedore.
  * req.ttl is deprecated.
  * Added std.getenv() and std.late_100_continue().
  * The fetch_failed stat is incremented for any kind of fetch
    failure.
  * Added the stats n_test_gunzip and
    bans_lurker_obj_killed_cutoff.
  * Clarified the meanings of the %r, %{X}i and %{X}o formatters in
    varnishncsa.
- Add varnish-5.1.2-add-fallthrough-comments.patch to fix build
  with GCC 7 (boo#1041259).</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="jengelh@inai.de" date="1521460800">- Update to new upstream release 6.0.0
  * Added support for Unix Domain Sockets, both for clients and
    for backend servers. This brings a new level of the VCL
    language, version 4.1.
  * Always use HTTP/1.1 on backend connections for pass fetch.</changelog>
  <changelog author="jengelh@inai.de" date="1525262400">- Put %fillup back into %post</changelog>
  <changelog author="Samu Voutilainen &lt;smar@smar.fi&gt;" date="1553688000">- Updated to 6.2.0
  * Added a thread pool watchdog which will restart the worker
    process if scheduling tasks onto worker threads appears
    stuck. The new parameter "thread_pool_watchdog" configures
    it.
- Disabled error for clobbering, which caused bogus
  error in varnishtest</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566820800">- Add uninit.patch.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1567598400">- Update to release 6.2.1
  * Bugfix for CVE-2019-15892 [boo#1149382]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1568721600">- Update to release 6.3.0
  * The Host: header is folded to lower-case in the builtin_vcl.
  * Improved performance of shared memory statistics counters.
  * Synthetic objects created from vcl_backend_error {} now
    replace existing stale objects as ordinary backend fetches
    would (for details see changes.rst)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1582632000">- Update to release 6.3.2
  * Fix a denial of service vulnerability when using the proxy
    protocol version 2.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1584446400">- Update to release 6.4.0
  * The MAIN.sess_drop counter is gone.
  * backend "none" was added for "no backend".
  * The hash algorithm of the hash director was changed, so
    backend selection will change once only when upgrading.
  * It is now possible for VMOD authors to customize the
    connection pooling of a dynamic backend.
  * For more, see changes.rst.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1591704000">- Update Git-Web repository link
- Set CFLAGS+=-fcommon.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1592913600">- Disable LTO, this randomly fails during link stage.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1600344000">- Update to release 6.5.0
  * `PRIV_TOP` is now thread-safe to support parallel ESI
    implementations.
  * varnishstat's JSON output format (-j option) has been changed.
  * Behavior for 304-type responses was changed not to update the
    Content-Encoding response header of the stored object.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1601640000">- Update to release 6.5.1
  * Bump the VRT_MAJOR_VERSION number defined in the vrt.h</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1625400000">- update to 6.6.0:
  * The ban_cutoff parameter now refers to the overall length of
    the ban list, including completed bans, where before only
    non-completed (?active?) bans were counted towards ban_cutoff.
  * Body bytes accounting has been fixed to always represent the
    number of body bytes moved on the wire, exclusive of
    protocol-specific overhead like HTTP/1 chunked encoding or
    HTTP/2 framing.
  * The connection close reason has been fixed to properly report
    SC_RESP_CLOSE where previously only SC_REQ_CLOSE was reported.
  * Unless the new validate_headers feature is disabled, all newly
    set headers are now validated to contain only characters
    allowed by RFC7230.
  * The filter_re, keep_re and get_re functions from the bundled
    cookie vmod have been changed to take the VCL_REGEX type. This
    implies that their regular expression arguments now need to be
    literal, not e.g. string.
  * The interface for private pointers in VMODs has been changed,
    the VRT backend interface has been changed, many filter
    (VDP/VFP) related signatures have been changed, and the
    stevedore API has been changed. (Details thereto, see online
    changelog.)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1628251200">- Update to release 6.6.1
  * Fix an HTTP/2.0 request smuggling vulnerability. [bnc#1188470]</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1638360000">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * varnish.service
  * varnishlog.service</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1652702400">- Update to release 7.1.0 [boo#1195188] [CVE-2022-23959]
  * VCL: It is now possible to assign a BLOB value to a BODY
    variable, in addition to STRING as before.
  * VMOD: New STRING strftime(TIME time, STRING format) function
    for UTC formatting.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1660305600">- Update to release 7.1.1 [boo#1202350] [CVE-2022-38150]
  * Resolve a denial of service attack involving reason phrases.</changelog>
</package>
<package pkgid="cd79fd92b9c7fe384ef12352f31c3cfafc4187bb8e3c0626560a0c8376e62228" name="varnish" arch="s390x">
  <version epoch="0" ver="7.1.1" rel="bp154.2.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1494936000">- BuildRequire python3-docutils instead of python-docutils.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1498219200">- Update to version 5.1.2:
  * Fix an endless loop in Backend Polling (#2295)
  * Fix a Chunked bug in tight workspaces (#2207, #2275)
  * Fix a bug relating to req.body when on waitinglist (#2266)
  * Handle EPIPE on broken TCP connections (#2267)
  * Work around the x86 arch's turbo-double FP format in parameter
    setup code. (#1875)
  * Fix race related to backend probe with proxy header (#2278)
  * Keep VCL temperature consistent between mgt/worker also when
    worker protests.
  * A lot of HTTP/2 fixes.
- Changes introduced by version 5.1.1:
  * Fix bug introduced by stubborn old bugger right before release
    5.1.0 was cut.
- Changes introduced by version 5.1.0:
  * Added varnishd command-line options -I, -x and -?, and
    tightened restrictions on permitted combinations of options.
  * More progress on support for HTTP/2.
  * Add ``return(fail)`` to almost all VCL subroutines.
  * Restored the old hit-for-pass, invoked with
    ``return(pass(DURATION))`` from
    ``vcl_backend_response``. hit-for-miss remains the default.
    Added the cache_hitmiss stat, and cache_hitpass only counts the
    new/old hit-for-pass cases. Restored HitPass to the Varnish
    log, and added HitMiss. Added the HFP prefix to TTL log entries
    to log a hit-for-pass duration.
  * Rolled back the fix for #1206. Client delivery decides solely
    whether to send a 304 client response, based on client request
    and response headers.
  * Added vtest.sh.
  * Added vxid as a lefthand side for VSL queries.
  * Added the setenv and write_body commands for Varnish test cases
    (VTCs). err_shell is deprecated. Also added the operators
  - cliexpect, -match and -hdrlen, and -reason replaces -msg.
    Added the ${bad_backend} macro.
  * varnishtest can be stopped with the TERM, INT and KILL signals,
    but not with HUP.
  * The fallback director has now an extra, optional parameter to
    keep using the current backend until it falls sick.
  * VMOD shared libraries are now copied to the workdir, to avoid
    problems when VMODs are updated via packaging systems.
  * Bump the VRT version to 6.0.
  * Export more symbols from libvarnishapi.so.
  * The size of the VSL log is limited to 4G-1b, placing upper
    bounds on the -l option and the vsl_space and vsm_space
    parameters.
  * Added parameters clock_step, thread_pool_reserve and
    ban_cutoff.
  * Parameters vcl_dir and vmod_dir are deprecated, use vcl_path
    and vmod_path instead.
  * All parameters are defined, even on platforms that don't
    support them. An unsupported parameter is documented as such in
    param.show. Setting such a parameter is not an error, but has
    no effect.
  * Clarified the interpretations of the + and - operators in VCL
    with operands of the various data types.
  * DURATION types may be used in boolean contexts.
  * INT, DURATION and REAL values can now be negative.
  * Response codes 1000 or greater may now be set in VCL
    internally. resp.status is delivered modulo 1000 in client
    responses.
  * IP addresses can be compared for equality in VCL.
  * Introduce the STEVEDORE data type, and the objects
    storage.SNAME in VCL. Added req.storage and beresp.storage;
    beresp.storage_hint is deprecated.
  * Retired the umem stevedore.
  * req.ttl is deprecated.
  * Added std.getenv() and std.late_100_continue().
  * The fetch_failed stat is incremented for any kind of fetch
    failure.
  * Added the stats n_test_gunzip and
    bans_lurker_obj_killed_cutoff.
  * Clarified the meanings of the %r, %{X}i and %{X}o formatters in
    varnishncsa.
- Add varnish-5.1.2-add-fallthrough-comments.patch to fix build
  with GCC 7 (boo#1041259).</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="jengelh@inai.de" date="1521460800">- Update to new upstream release 6.0.0
  * Added support for Unix Domain Sockets, both for clients and
    for backend servers. This brings a new level of the VCL
    language, version 4.1.
  * Always use HTTP/1.1 on backend connections for pass fetch.</changelog>
  <changelog author="jengelh@inai.de" date="1525262400">- Put %fillup back into %post</changelog>
  <changelog author="Samu Voutilainen &lt;smar@smar.fi&gt;" date="1553688000">- Updated to 6.2.0
  * Added a thread pool watchdog which will restart the worker
    process if scheduling tasks onto worker threads appears
    stuck. The new parameter "thread_pool_watchdog" configures
    it.
- Disabled error for clobbering, which caused bogus
  error in varnishtest</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566820800">- Add uninit.patch.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1567598400">- Update to release 6.2.1
  * Bugfix for CVE-2019-15892 [boo#1149382]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1568721600">- Update to release 6.3.0
  * The Host: header is folded to lower-case in the builtin_vcl.
  * Improved performance of shared memory statistics counters.
  * Synthetic objects created from vcl_backend_error {} now
    replace existing stale objects as ordinary backend fetches
    would (for details see changes.rst)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1582632000">- Update to release 6.3.2
  * Fix a denial of service vulnerability when using the proxy
    protocol version 2.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1584446400">- Update to release 6.4.0
  * The MAIN.sess_drop counter is gone.
  * backend "none" was added for "no backend".
  * The hash algorithm of the hash director was changed, so
    backend selection will change once only when upgrading.
  * It is now possible for VMOD authors to customize the
    connection pooling of a dynamic backend.
  * For more, see changes.rst.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1591704000">- Update Git-Web repository link
- Set CFLAGS+=-fcommon.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1592913600">- Disable LTO, this randomly fails during link stage.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1600344000">- Update to release 6.5.0
  * `PRIV_TOP` is now thread-safe to support parallel ESI
    implementations.
  * varnishstat's JSON output format (-j option) has been changed.
  * Behavior for 304-type responses was changed not to update the
    Content-Encoding response header of the stored object.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1601640000">- Update to release 6.5.1
  * Bump the VRT_MAJOR_VERSION number defined in the vrt.h</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1625400000">- update to 6.6.0:
  * The ban_cutoff parameter now refers to the overall length of
    the ban list, including completed bans, where before only
    non-completed (?active?) bans were counted towards ban_cutoff.
  * Body bytes accounting has been fixed to always represent the
    number of body bytes moved on the wire, exclusive of
    protocol-specific overhead like HTTP/1 chunked encoding or
    HTTP/2 framing.
  * The connection close reason has been fixed to properly report
    SC_RESP_CLOSE where previously only SC_REQ_CLOSE was reported.
  * Unless the new validate_headers feature is disabled, all newly
    set headers are now validated to contain only characters
    allowed by RFC7230.
  * The filter_re, keep_re and get_re functions from the bundled
    cookie vmod have been changed to take the VCL_REGEX type. This
    implies that their regular expression arguments now need to be
    literal, not e.g. string.
  * The interface for private pointers in VMODs has been changed,
    the VRT backend interface has been changed, many filter
    (VDP/VFP) related signatures have been changed, and the
    stevedore API has been changed. (Details thereto, see online
    changelog.)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1628251200">- Update to release 6.6.1
  * Fix an HTTP/2.0 request smuggling vulnerability. [bnc#1188470]</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1638360000">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * varnish.service
  * varnishlog.service</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1652702400">- Update to release 7.1.0 [boo#1195188] [CVE-2022-23959]
  * VCL: It is now possible to assign a BLOB value to a BODY
    variable, in addition to STRING as before.
  * VMOD: New STRING strftime(TIME time, STRING format) function
    for UTC formatting.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1660305600">- Update to release 7.1.1 [boo#1202350] [CVE-2022-38150]
  * Resolve a denial of service attack involving reason phrases.</changelog>
</package>
<package pkgid="49b752550769f5f4220e025bf2c9dbe9a26c562ebdc3070b0c65ee001cc90eba" name="varnish" arch="src">
  <version epoch="0" ver="7.1.1" rel="bp154.2.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1494936000">- BuildRequire python3-docutils instead of python-docutils.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1498219200">- Update to version 5.1.2:
  * Fix an endless loop in Backend Polling (#2295)
  * Fix a Chunked bug in tight workspaces (#2207, #2275)
  * Fix a bug relating to req.body when on waitinglist (#2266)
  * Handle EPIPE on broken TCP connections (#2267)
  * Work around the x86 arch's turbo-double FP format in parameter
    setup code. (#1875)
  * Fix race related to backend probe with proxy header (#2278)
  * Keep VCL temperature consistent between mgt/worker also when
    worker protests.
  * A lot of HTTP/2 fixes.
- Changes introduced by version 5.1.1:
  * Fix bug introduced by stubborn old bugger right before release
    5.1.0 was cut.
- Changes introduced by version 5.1.0:
  * Added varnishd command-line options -I, -x and -?, and
    tightened restrictions on permitted combinations of options.
  * More progress on support for HTTP/2.
  * Add ``return(fail)`` to almost all VCL subroutines.
  * Restored the old hit-for-pass, invoked with
    ``return(pass(DURATION))`` from
    ``vcl_backend_response``. hit-for-miss remains the default.
    Added the cache_hitmiss stat, and cache_hitpass only counts the
    new/old hit-for-pass cases. Restored HitPass to the Varnish
    log, and added HitMiss. Added the HFP prefix to TTL log entries
    to log a hit-for-pass duration.
  * Rolled back the fix for #1206. Client delivery decides solely
    whether to send a 304 client response, based on client request
    and response headers.
  * Added vtest.sh.
  * Added vxid as a lefthand side for VSL queries.
  * Added the setenv and write_body commands for Varnish test cases
    (VTCs). err_shell is deprecated. Also added the operators
  - cliexpect, -match and -hdrlen, and -reason replaces -msg.
    Added the ${bad_backend} macro.
  * varnishtest can be stopped with the TERM, INT and KILL signals,
    but not with HUP.
  * The fallback director has now an extra, optional parameter to
    keep using the current backend until it falls sick.
  * VMOD shared libraries are now copied to the workdir, to avoid
    problems when VMODs are updated via packaging systems.
  * Bump the VRT version to 6.0.
  * Export more symbols from libvarnishapi.so.
  * The size of the VSL log is limited to 4G-1b, placing upper
    bounds on the -l option and the vsl_space and vsm_space
    parameters.
  * Added parameters clock_step, thread_pool_reserve and
    ban_cutoff.
  * Parameters vcl_dir and vmod_dir are deprecated, use vcl_path
    and vmod_path instead.
  * All parameters are defined, even on platforms that don't
    support them. An unsupported parameter is documented as such in
    param.show. Setting such a parameter is not an error, but has
    no effect.
  * Clarified the interpretations of the + and - operators in VCL
    with operands of the various data types.
  * DURATION types may be used in boolean contexts.
  * INT, DURATION and REAL values can now be negative.
  * Response codes 1000 or greater may now be set in VCL
    internally. resp.status is delivered modulo 1000 in client
    responses.
  * IP addresses can be compared for equality in VCL.
  * Introduce the STEVEDORE data type, and the objects
    storage.SNAME in VCL. Added req.storage and beresp.storage;
    beresp.storage_hint is deprecated.
  * Retired the umem stevedore.
  * req.ttl is deprecated.
  * Added std.getenv() and std.late_100_continue().
  * The fetch_failed stat is incremented for any kind of fetch
    failure.
  * Added the stats n_test_gunzip and
    bans_lurker_obj_killed_cutoff.
  * Clarified the meanings of the %r, %{X}i and %{X}o formatters in
    varnishncsa.
- Add varnish-5.1.2-add-fallthrough-comments.patch to fix build
  with GCC 7 (boo#1041259).</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="jengelh@inai.de" date="1521460800">- Update to new upstream release 6.0.0
  * Added support for Unix Domain Sockets, both for clients and
    for backend servers. This brings a new level of the VCL
    language, version 4.1.
  * Always use HTTP/1.1 on backend connections for pass fetch.</changelog>
  <changelog author="jengelh@inai.de" date="1525262400">- Put %fillup back into %post</changelog>
  <changelog author="Samu Voutilainen &lt;smar@smar.fi&gt;" date="1553688000">- Updated to 6.2.0
  * Added a thread pool watchdog which will restart the worker
    process if scheduling tasks onto worker threads appears
    stuck. The new parameter "thread_pool_watchdog" configures
    it.
- Disabled error for clobbering, which caused bogus
  error in varnishtest</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566820800">- Add uninit.patch.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1567598400">- Update to release 6.2.1
  * Bugfix for CVE-2019-15892 [boo#1149382]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1568721600">- Update to release 6.3.0
  * The Host: header is folded to lower-case in the builtin_vcl.
  * Improved performance of shared memory statistics counters.
  * Synthetic objects created from vcl_backend_error {} now
    replace existing stale objects as ordinary backend fetches
    would (for details see changes.rst)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1582632000">- Update to release 6.3.2
  * Fix a denial of service vulnerability when using the proxy
    protocol version 2.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1584446400">- Update to release 6.4.0
  * The MAIN.sess_drop counter is gone.
  * backend "none" was added for "no backend".
  * The hash algorithm of the hash director was changed, so
    backend selection will change once only when upgrading.
  * It is now possible for VMOD authors to customize the
    connection pooling of a dynamic backend.
  * For more, see changes.rst.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1591704000">- Update Git-Web repository link
- Set CFLAGS+=-fcommon.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1592913600">- Disable LTO, this randomly fails during link stage.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1600344000">- Update to release 6.5.0
  * `PRIV_TOP` is now thread-safe to support parallel ESI
    implementations.
  * varnishstat's JSON output format (-j option) has been changed.
  * Behavior for 304-type responses was changed not to update the
    Content-Encoding response header of the stored object.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1601640000">- Update to release 6.5.1
  * Bump the VRT_MAJOR_VERSION number defined in the vrt.h</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1625400000">- update to 6.6.0:
  * The ban_cutoff parameter now refers to the overall length of
    the ban list, including completed bans, where before only
    non-completed (?active?) bans were counted towards ban_cutoff.
  * Body bytes accounting has been fixed to always represent the
    number of body bytes moved on the wire, exclusive of
    protocol-specific overhead like HTTP/1 chunked encoding or
    HTTP/2 framing.
  * The connection close reason has been fixed to properly report
    SC_RESP_CLOSE where previously only SC_REQ_CLOSE was reported.
  * Unless the new validate_headers feature is disabled, all newly
    set headers are now validated to contain only characters
    allowed by RFC7230.
  * The filter_re, keep_re and get_re functions from the bundled
    cookie vmod have been changed to take the VCL_REGEX type. This
    implies that their regular expression arguments now need to be
    literal, not e.g. string.
  * The interface for private pointers in VMODs has been changed,
    the VRT backend interface has been changed, many filter
    (VDP/VFP) related signatures have been changed, and the
    stevedore API has been changed. (Details thereto, see online
    changelog.)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1628251200">- Update to release 6.6.1
  * Fix an HTTP/2.0 request smuggling vulnerability. [bnc#1188470]</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1638360000">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * varnish.service
  * varnishlog.service</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1652702400">- Update to release 7.1.0 [boo#1195188] [CVE-2022-23959]
  * VCL: It is now possible to assign a BLOB value to a BODY
    variable, in addition to STRING as before.
  * VMOD: New STRING strftime(TIME time, STRING format) function
    for UTC formatting.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1660305600">- Update to release 7.1.1 [boo#1202350] [CVE-2022-38150]
  * Resolve a denial of service attack involving reason phrases.</changelog>
</package>
<package pkgid="d6242f7e346ef7c0624209de0f74d3185350effe05af93c487fd89cdb1e6b8ba" name="varnish" arch="x86_64">
  <version epoch="0" ver="7.1.1" rel="bp154.2.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1494936000">- BuildRequire python3-docutils instead of python-docutils.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1498219200">- Update to version 5.1.2:
  * Fix an endless loop in Backend Polling (#2295)
  * Fix a Chunked bug in tight workspaces (#2207, #2275)
  * Fix a bug relating to req.body when on waitinglist (#2266)
  * Handle EPIPE on broken TCP connections (#2267)
  * Work around the x86 arch's turbo-double FP format in parameter
    setup code. (#1875)
  * Fix race related to backend probe with proxy header (#2278)
  * Keep VCL temperature consistent between mgt/worker also when
    worker protests.
  * A lot of HTTP/2 fixes.
- Changes introduced by version 5.1.1:
  * Fix bug introduced by stubborn old bugger right before release
    5.1.0 was cut.
- Changes introduced by version 5.1.0:
  * Added varnishd command-line options -I, -x and -?, and
    tightened restrictions on permitted combinations of options.
  * More progress on support for HTTP/2.
  * Add ``return(fail)`` to almost all VCL subroutines.
  * Restored the old hit-for-pass, invoked with
    ``return(pass(DURATION))`` from
    ``vcl_backend_response``. hit-for-miss remains the default.
    Added the cache_hitmiss stat, and cache_hitpass only counts the
    new/old hit-for-pass cases. Restored HitPass to the Varnish
    log, and added HitMiss. Added the HFP prefix to TTL log entries
    to log a hit-for-pass duration.
  * Rolled back the fix for #1206. Client delivery decides solely
    whether to send a 304 client response, based on client request
    and response headers.
  * Added vtest.sh.
  * Added vxid as a lefthand side for VSL queries.
  * Added the setenv and write_body commands for Varnish test cases
    (VTCs). err_shell is deprecated. Also added the operators
  - cliexpect, -match and -hdrlen, and -reason replaces -msg.
    Added the ${bad_backend} macro.
  * varnishtest can be stopped with the TERM, INT and KILL signals,
    but not with HUP.
  * The fallback director has now an extra, optional parameter to
    keep using the current backend until it falls sick.
  * VMOD shared libraries are now copied to the workdir, to avoid
    problems when VMODs are updated via packaging systems.
  * Bump the VRT version to 6.0.
  * Export more symbols from libvarnishapi.so.
  * The size of the VSL log is limited to 4G-1b, placing upper
    bounds on the -l option and the vsl_space and vsm_space
    parameters.
  * Added parameters clock_step, thread_pool_reserve and
    ban_cutoff.
  * Parameters vcl_dir and vmod_dir are deprecated, use vcl_path
    and vmod_path instead.
  * All parameters are defined, even on platforms that don't
    support them. An unsupported parameter is documented as such in
    param.show. Setting such a parameter is not an error, but has
    no effect.
  * Clarified the interpretations of the + and - operators in VCL
    with operands of the various data types.
  * DURATION types may be used in boolean contexts.
  * INT, DURATION and REAL values can now be negative.
  * Response codes 1000 or greater may now be set in VCL
    internally. resp.status is delivered modulo 1000 in client
    responses.
  * IP addresses can be compared for equality in VCL.
  * Introduce the STEVEDORE data type, and the objects
    storage.SNAME in VCL. Added req.storage and beresp.storage;
    beresp.storage_hint is deprecated.
  * Retired the umem stevedore.
  * req.ttl is deprecated.
  * Added std.getenv() and std.late_100_continue().
  * The fetch_failed stat is incremented for any kind of fetch
    failure.
  * Added the stats n_test_gunzip and
    bans_lurker_obj_killed_cutoff.
  * Clarified the meanings of the %r, %{X}i and %{X}o formatters in
    varnishncsa.
- Add varnish-5.1.2-add-fallthrough-comments.patch to fix build
  with GCC 7 (boo#1041259).</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="jengelh@inai.de" date="1521460800">- Update to new upstream release 6.0.0
  * Added support for Unix Domain Sockets, both for clients and
    for backend servers. This brings a new level of the VCL
    language, version 4.1.
  * Always use HTTP/1.1 on backend connections for pass fetch.</changelog>
  <changelog author="jengelh@inai.de" date="1525262400">- Put %fillup back into %post</changelog>
  <changelog author="Samu Voutilainen &lt;smar@smar.fi&gt;" date="1553688000">- Updated to 6.2.0
  * Added a thread pool watchdog which will restart the worker
    process if scheduling tasks onto worker threads appears
    stuck. The new parameter "thread_pool_watchdog" configures
    it.
- Disabled error for clobbering, which caused bogus
  error in varnishtest</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566820800">- Add uninit.patch.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1567598400">- Update to release 6.2.1
  * Bugfix for CVE-2019-15892 [boo#1149382]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1568721600">- Update to release 6.3.0
  * The Host: header is folded to lower-case in the builtin_vcl.
  * Improved performance of shared memory statistics counters.
  * Synthetic objects created from vcl_backend_error {} now
    replace existing stale objects as ordinary backend fetches
    would (for details see changes.rst)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1582632000">- Update to release 6.3.2
  * Fix a denial of service vulnerability when using the proxy
    protocol version 2.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1584446400">- Update to release 6.4.0
  * The MAIN.sess_drop counter is gone.
  * backend "none" was added for "no backend".
  * The hash algorithm of the hash director was changed, so
    backend selection will change once only when upgrading.
  * It is now possible for VMOD authors to customize the
    connection pooling of a dynamic backend.
  * For more, see changes.rst.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1591704000">- Update Git-Web repository link
- Set CFLAGS+=-fcommon.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1592913600">- Disable LTO, this randomly fails during link stage.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1600344000">- Update to release 6.5.0
  * `PRIV_TOP` is now thread-safe to support parallel ESI
    implementations.
  * varnishstat's JSON output format (-j option) has been changed.
  * Behavior for 304-type responses was changed not to update the
    Content-Encoding response header of the stored object.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1601640000">- Update to release 6.5.1
  * Bump the VRT_MAJOR_VERSION number defined in the vrt.h</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1625400000">- update to 6.6.0:
  * The ban_cutoff parameter now refers to the overall length of
    the ban list, including completed bans, where before only
    non-completed (?active?) bans were counted towards ban_cutoff.
  * Body bytes accounting has been fixed to always represent the
    number of body bytes moved on the wire, exclusive of
    protocol-specific overhead like HTTP/1 chunked encoding or
    HTTP/2 framing.
  * The connection close reason has been fixed to properly report
    SC_RESP_CLOSE where previously only SC_REQ_CLOSE was reported.
  * Unless the new validate_headers feature is disabled, all newly
    set headers are now validated to contain only characters
    allowed by RFC7230.
  * The filter_re, keep_re and get_re functions from the bundled
    cookie vmod have been changed to take the VCL_REGEX type. This
    implies that their regular expression arguments now need to be
    literal, not e.g. string.
  * The interface for private pointers in VMODs has been changed,
    the VRT backend interface has been changed, many filter
    (VDP/VFP) related signatures have been changed, and the
    stevedore API has been changed. (Details thereto, see online
    changelog.)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1628251200">- Update to release 6.6.1
  * Fix an HTTP/2.0 request smuggling vulnerability. [bnc#1188470]</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1638360000">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * varnish.service
  * varnishlog.service</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1652702400">- Update to release 7.1.0 [boo#1195188] [CVE-2022-23959]
  * VCL: It is now possible to assign a BLOB value to a BODY
    variable, in addition to STRING as before.
  * VMOD: New STRING strftime(TIME time, STRING format) function
    for UTC formatting.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1660305600">- Update to release 7.1.1 [boo#1202350] [CVE-2022-38150]
  * Resolve a denial of service attack involving reason phrases.</changelog>
</package>
<package pkgid="768862eec474089a7d49425baca7f9b123dde4860672555a69ee6f0f9a08eb7d" name="varnish" arch="aarch64">
  <version epoch="0" ver="7.2.1" rel="bp154.2.9.1"/>
  <changelog author="Samu Voutilainen &lt;smar@smar.fi&gt;" date="1553688000">- Updated to 6.2.0
  * Added a thread pool watchdog which will restart the worker
    process if scheduling tasks onto worker threads appears
    stuck. The new parameter "thread_pool_watchdog" configures
    it.
- Disabled error for clobbering, which caused bogus
  error in varnishtest</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566820800">- Add uninit.patch.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1567598400">- Update to release 6.2.1
  * Bugfix for CVE-2019-15892 [boo#1149382]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1568721600">- Update to release 6.3.0
  * The Host: header is folded to lower-case in the builtin_vcl.
  * Improved performance of shared memory statistics counters.
  * Synthetic objects created from vcl_backend_error {} now
    replace existing stale objects as ordinary backend fetches
    would (for details see changes.rst)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1582632000">- Update to release 6.3.2
  * Fix a denial of service vulnerability when using the proxy
    protocol version 2.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1584446400">- Update to release 6.4.0
  * The MAIN.sess_drop counter is gone.
  * backend "none" was added for "no backend".
  * The hash algorithm of the hash director was changed, so
    backend selection will change once only when upgrading.
  * It is now possible for VMOD authors to customize the
    connection pooling of a dynamic backend.
  * For more, see changes.rst.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1591704000">- Update Git-Web repository link
- Set CFLAGS+=-fcommon.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1592913600">- Disable LTO, this randomly fails during link stage.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1600344000">- Update to release 6.5.0
  * `PRIV_TOP` is now thread-safe to support parallel ESI
    implementations.
  * varnishstat's JSON output format (-j option) has been changed.
  * Behavior for 304-type responses was changed not to update the
    Content-Encoding response header of the stored object.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1601640000">- Update to release 6.5.1
  * Bump the VRT_MAJOR_VERSION number defined in the vrt.h</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1625400000">- update to 6.6.0:
  * The ban_cutoff parameter now refers to the overall length of
    the ban list, including completed bans, where before only
    non-completed (?active?) bans were counted towards ban_cutoff.
  * Body bytes accounting has been fixed to always represent the
    number of body bytes moved on the wire, exclusive of
    protocol-specific overhead like HTTP/1 chunked encoding or
    HTTP/2 framing.
  * The connection close reason has been fixed to properly report
    SC_RESP_CLOSE where previously only SC_REQ_CLOSE was reported.
  * Unless the new validate_headers feature is disabled, all newly
    set headers are now validated to contain only characters
    allowed by RFC7230.
  * The filter_re, keep_re and get_re functions from the bundled
    cookie vmod have been changed to take the VCL_REGEX type. This
    implies that their regular expression arguments now need to be
    literal, not e.g. string.
  * The interface for private pointers in VMODs has been changed,
    the VRT backend interface has been changed, many filter
    (VDP/VFP) related signatures have been changed, and the
    stevedore API has been changed. (Details thereto, see online
    changelog.)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1628251200">- Update to release 6.6.1
  * Fix an HTTP/2.0 request smuggling vulnerability. [bnc#1188470]</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1638360000">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * varnish.service
  * varnishlog.service</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1652702400">- Update to release 7.1.0 [boo#1195188] [CVE-2022-23959]
  * VCL: It is now possible to assign a BLOB value to a BODY
    variable, in addition to STRING as before.
  * VMOD: New STRING strftime(TIME time, STRING format) function
    for UTC formatting.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1660305600">- Update to release 7.1.1 [boo#1202350] [CVE-2022-38150]
  * Resolve a denial of service attack involving reason phrases.</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1663502400">- Fix logrotate
- Add service reload</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1663588800">- Fix varnish.service stop</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1663761600">- Make reload fail nicely on vcl syntax error
- Set TasksMax=16384 because default thread_pool_max is 5000</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1667044800">- update to 7.2.0:
  * Functions ``VRT_AddVDP()``, ``VRT_AddVFP()``,
    ``VRT_RemoveVDP()`` and ``VRT_RemoveVFP()`` are deprecated.
  * Cookie headers generated by vmod_cookie no longer have a
    spurious trailing semicolon at the end of the string. This
    could break VCL relying on the previous incorrect behavior.
  * The ``SessClose`` and ``BackendClose`` reason ``rx_body``,
    which previously output ``Failure receiving req.body``, has
    been rewritten to ``Failure receiving body``.
  * Prototypical Varnish Extensions (VEXT). Similar to VMODs, a
    VEXT is loaded by the cache process. Unlike VMODs that have
    the combined lifetime of all the VCLs that reference them, a
    VEXT has the lifetime of the cache process itself. There are
    no built-in extensions so far.
  * Duration parameters can optionally take a unit, with the same
    syntax as duration units in VCL.
  * Calls to ``VRT_CacheReqBody()`` and ``std.cache_req_body``
    from outside client vcl subs now fail properly instead of
    triggering an assertion failure.
  * New "B" string for the package branch in ``VCS_String()``.
    For the 7.2.0 version, it would yield the 7.2 branch.
  * The new ``vcc_feature`` bits parameter replaces previous
    ``vcc_*`` boolean parameters. The latter still exist as
    deprecated aliases.
  * The ``-k`` option from ``varnishlog`` is now supported by
    ``varnishncsa``.
  * New functions ``std.now()`` and ``std.timed_call()`` in
    vmod_std.
  * New ``MAIN.shm_bytes`` counter.
  * A ``req.http.via`` header is set before entering
    ``vcl_recv``. Via headers are generated using the
    ``server.identity`` value. It defaults to the host name and
    can be turned into a pseudonym with the ``varnishd -i``
    option. Via headers are appended in both directions, to work
    with other hops that may advertise themselves.
  * A ``resp.http.via`` header is no longer overwritten by
    varnish, but rather appended to.
  * The ``server.identity`` syntax is now limited to a "token" as
    defined in the HTTP grammar to be suitable for Via headers.
  * In ``varnishtest`` a Varnish instance will use its VTC
    instance name as its instance name (``varnishd -i``) by
    default for predictable Via headers in test cases.
  * VMOD and VEXT authors can use functions from ``vnum.h``.
  * Do not filter pseudo-headers as regular headers.
  * The termination rules for ``WRK_BgThread()`` were relaxed to
    allow VMODs to use it.
  * ``(struct worker).handling`` has been moved to the newly
    introduced ``struct wrk_vpi`` and replaced by a pointer to
    it, as well as ``(struct vrt_ctx).handling`` has been
    replaced by that pointer. ``struct wrk_vpi`` is for state at
    the interface between VRT and VGC and, in particular, is not
    const as ``struct vrt_ctx`` aka ``VRT_CTX``.
  * Panics now contain information about VCL source files and
    lines.
  * The ``Begin`` log record has a 4th field for subtasks like
    ESI sub-requests.
  * The ``-E`` option for log utilities now works as documented,
    with any type of sub-task based on the ``Begin[4]`` field.
    This covers ESI like before, and sub-tasks spawned by VMODs
    (provided that they log the new field).
  * No more ``req.http.transfer-encoding`` for ESI sub-requests.
  * The thread pool reserve is now limited to tasks that can be
    queued. A backend background fetch is no longer eligible for
    queueing. It would otherwise slow a grace hit down
    significantly when thread pools are saturated.
  * The unused ``fetch_no_thread`` counter was renamed to
    ``bgfetch_no_thread`` because regular backend fetch tasks are
    always scheduled.
  * The macros ``FEATURE()``, ``EXPERIMENT()``, ``DO_DEBUG()``,
    ``MGT_FEATURE()``, ``MGT_EXPERIMENT()``, ``MGT_DO_DEBUG()``
    and ``MGT_VCC_FEATURE()`` now return a boolean value (``0``
    or ``1``) instead of the (private) flag value.
  * A regression in the transport code led MAIN.client_req to be
    incremented for requests coming back from the waiting list,
    it was fixed.
- Delete varnish-5.1.2-add-fallthrough-comments.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1667995200">- Update to release 7.2.1
  * Attempts to mark well-known headers like Content-Length and
    Host hop-by-hop through a Connection-header will now cause a
    400 "Bad request" response.
    (VSV00010, CVE-2022-45059, boo#1205243)
  * Apply the same character set rules to HTTP/2 pseudo-headers
    as is done on the corresponding HTTP/1 request-line field
    parsing. (VSV00011, CVE-2022-45060, boo#1205242)</changelog>
</package>
<package pkgid="bab1b76a358bf69f6ea7b71fb33e72393280e4ca1a143405d93ea2784c6f1318" name="varnish" arch="i586">
  <version epoch="0" ver="7.2.1" rel="bp154.2.9.1"/>
  <changelog author="Samu Voutilainen &lt;smar@smar.fi&gt;" date="1553688000">- Updated to 6.2.0
  * Added a thread pool watchdog which will restart the worker
    process if scheduling tasks onto worker threads appears
    stuck. The new parameter "thread_pool_watchdog" configures
    it.
- Disabled error for clobbering, which caused bogus
  error in varnishtest</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566820800">- Add uninit.patch.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1567598400">- Update to release 6.2.1
  * Bugfix for CVE-2019-15892 [boo#1149382]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1568721600">- Update to release 6.3.0
  * The Host: header is folded to lower-case in the builtin_vcl.
  * Improved performance of shared memory statistics counters.
  * Synthetic objects created from vcl_backend_error {} now
    replace existing stale objects as ordinary backend fetches
    would (for details see changes.rst)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1582632000">- Update to release 6.3.2
  * Fix a denial of service vulnerability when using the proxy
    protocol version 2.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1584446400">- Update to release 6.4.0
  * The MAIN.sess_drop counter is gone.
  * backend "none" was added for "no backend".
  * The hash algorithm of the hash director was changed, so
    backend selection will change once only when upgrading.
  * It is now possible for VMOD authors to customize the
    connection pooling of a dynamic backend.
  * For more, see changes.rst.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1591704000">- Update Git-Web repository link
- Set CFLAGS+=-fcommon.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1592913600">- Disable LTO, this randomly fails during link stage.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1600344000">- Update to release 6.5.0
  * `PRIV_TOP` is now thread-safe to support parallel ESI
    implementations.
  * varnishstat's JSON output format (-j option) has been changed.
  * Behavior for 304-type responses was changed not to update the
    Content-Encoding response header of the stored object.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1601640000">- Update to release 6.5.1
  * Bump the VRT_MAJOR_VERSION number defined in the vrt.h</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1625400000">- update to 6.6.0:
  * The ban_cutoff parameter now refers to the overall length of
    the ban list, including completed bans, where before only
    non-completed (?active?) bans were counted towards ban_cutoff.
  * Body bytes accounting has been fixed to always represent the
    number of body bytes moved on the wire, exclusive of
    protocol-specific overhead like HTTP/1 chunked encoding or
    HTTP/2 framing.
  * The connection close reason has been fixed to properly report
    SC_RESP_CLOSE where previously only SC_REQ_CLOSE was reported.
  * Unless the new validate_headers feature is disabled, all newly
    set headers are now validated to contain only characters
    allowed by RFC7230.
  * The filter_re, keep_re and get_re functions from the bundled
    cookie vmod have been changed to take the VCL_REGEX type. This
    implies that their regular expression arguments now need to be
    literal, not e.g. string.
  * The interface for private pointers in VMODs has been changed,
    the VRT backend interface has been changed, many filter
    (VDP/VFP) related signatures have been changed, and the
    stevedore API has been changed. (Details thereto, see online
    changelog.)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1628251200">- Update to release 6.6.1
  * Fix an HTTP/2.0 request smuggling vulnerability. [bnc#1188470]</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1638360000">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * varnish.service
  * varnishlog.service</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1652702400">- Update to release 7.1.0 [boo#1195188] [CVE-2022-23959]
  * VCL: It is now possible to assign a BLOB value to a BODY
    variable, in addition to STRING as before.
  * VMOD: New STRING strftime(TIME time, STRING format) function
    for UTC formatting.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1660305600">- Update to release 7.1.1 [boo#1202350] [CVE-2022-38150]
  * Resolve a denial of service attack involving reason phrases.</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1663502400">- Fix logrotate
- Add service reload</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1663588800">- Fix varnish.service stop</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1663761600">- Make reload fail nicely on vcl syntax error
- Set TasksMax=16384 because default thread_pool_max is 5000</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1667044800">- update to 7.2.0:
  * Functions ``VRT_AddVDP()``, ``VRT_AddVFP()``,
    ``VRT_RemoveVDP()`` and ``VRT_RemoveVFP()`` are deprecated.
  * Cookie headers generated by vmod_cookie no longer have a
    spurious trailing semicolon at the end of the string. This
    could break VCL relying on the previous incorrect behavior.
  * The ``SessClose`` and ``BackendClose`` reason ``rx_body``,
    which previously output ``Failure receiving req.body``, has
    been rewritten to ``Failure receiving body``.
  * Prototypical Varnish Extensions (VEXT). Similar to VMODs, a
    VEXT is loaded by the cache process. Unlike VMODs that have
    the combined lifetime of all the VCLs that reference them, a
    VEXT has the lifetime of the cache process itself. There are
    no built-in extensions so far.
  * Duration parameters can optionally take a unit, with the same
    syntax as duration units in VCL.
  * Calls to ``VRT_CacheReqBody()`` and ``std.cache_req_body``
    from outside client vcl subs now fail properly instead of
    triggering an assertion failure.
  * New "B" string for the package branch in ``VCS_String()``.
    For the 7.2.0 version, it would yield the 7.2 branch.
  * The new ``vcc_feature`` bits parameter replaces previous
    ``vcc_*`` boolean parameters. The latter still exist as
    deprecated aliases.
  * The ``-k`` option from ``varnishlog`` is now supported by
    ``varnishncsa``.
  * New functions ``std.now()`` and ``std.timed_call()`` in
    vmod_std.
  * New ``MAIN.shm_bytes`` counter.
  * A ``req.http.via`` header is set before entering
    ``vcl_recv``. Via headers are generated using the
    ``server.identity`` value. It defaults to the host name and
    can be turned into a pseudonym with the ``varnishd -i``
    option. Via headers are appended in both directions, to work
    with other hops that may advertise themselves.
  * A ``resp.http.via`` header is no longer overwritten by
    varnish, but rather appended to.
  * The ``server.identity`` syntax is now limited to a "token" as
    defined in the HTTP grammar to be suitable for Via headers.
  * In ``varnishtest`` a Varnish instance will use its VTC
    instance name as its instance name (``varnishd -i``) by
    default for predictable Via headers in test cases.
  * VMOD and VEXT authors can use functions from ``vnum.h``.
  * Do not filter pseudo-headers as regular headers.
  * The termination rules for ``WRK_BgThread()`` were relaxed to
    allow VMODs to use it.
  * ``(struct worker).handling`` has been moved to the newly
    introduced ``struct wrk_vpi`` and replaced by a pointer to
    it, as well as ``(struct vrt_ctx).handling`` has been
    replaced by that pointer. ``struct wrk_vpi`` is for state at
    the interface between VRT and VGC and, in particular, is not
    const as ``struct vrt_ctx`` aka ``VRT_CTX``.
  * Panics now contain information about VCL source files and
    lines.
  * The ``Begin`` log record has a 4th field for subtasks like
    ESI sub-requests.
  * The ``-E`` option for log utilities now works as documented,
    with any type of sub-task based on the ``Begin[4]`` field.
    This covers ESI like before, and sub-tasks spawned by VMODs
    (provided that they log the new field).
  * No more ``req.http.transfer-encoding`` for ESI sub-requests.
  * The thread pool reserve is now limited to tasks that can be
    queued. A backend background fetch is no longer eligible for
    queueing. It would otherwise slow a grace hit down
    significantly when thread pools are saturated.
  * The unused ``fetch_no_thread`` counter was renamed to
    ``bgfetch_no_thread`` because regular backend fetch tasks are
    always scheduled.
  * The macros ``FEATURE()``, ``EXPERIMENT()``, ``DO_DEBUG()``,
    ``MGT_FEATURE()``, ``MGT_EXPERIMENT()``, ``MGT_DO_DEBUG()``
    and ``MGT_VCC_FEATURE()`` now return a boolean value (``0``
    or ``1``) instead of the (private) flag value.
  * A regression in the transport code led MAIN.client_req to be
    incremented for requests coming back from the waiting list,
    it was fixed.
- Delete varnish-5.1.2-add-fallthrough-comments.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1667995200">- Update to release 7.2.1
  * Attempts to mark well-known headers like Content-Length and
    Host hop-by-hop through a Connection-header will now cause a
    400 "Bad request" response.
    (VSV00010, CVE-2022-45059, boo#1205243)
  * Apply the same character set rules to HTTP/2 pseudo-headers
    as is done on the corresponding HTTP/1 request-line field
    parsing. (VSV00011, CVE-2022-45060, boo#1205242)</changelog>
</package>
<package pkgid="7c2ea9f4ce4e5d1a77ab55a2f71f812788411c31b0e8abf110510c07be6ce5a4" name="varnish" arch="ppc64le">
  <version epoch="0" ver="7.2.1" rel="bp154.2.9.1"/>
  <changelog author="Samu Voutilainen &lt;smar@smar.fi&gt;" date="1553688000">- Updated to 6.2.0
  * Added a thread pool watchdog which will restart the worker
    process if scheduling tasks onto worker threads appears
    stuck. The new parameter "thread_pool_watchdog" configures
    it.
- Disabled error for clobbering, which caused bogus
  error in varnishtest</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566820800">- Add uninit.patch.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1567598400">- Update to release 6.2.1
  * Bugfix for CVE-2019-15892 [boo#1149382]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1568721600">- Update to release 6.3.0
  * The Host: header is folded to lower-case in the builtin_vcl.
  * Improved performance of shared memory statistics counters.
  * Synthetic objects created from vcl_backend_error {} now
    replace existing stale objects as ordinary backend fetches
    would (for details see changes.rst)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1582632000">- Update to release 6.3.2
  * Fix a denial of service vulnerability when using the proxy
    protocol version 2.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1584446400">- Update to release 6.4.0
  * The MAIN.sess_drop counter is gone.
  * backend "none" was added for "no backend".
  * The hash algorithm of the hash director was changed, so
    backend selection will change once only when upgrading.
  * It is now possible for VMOD authors to customize the
    connection pooling of a dynamic backend.
  * For more, see changes.rst.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1591704000">- Update Git-Web repository link
- Set CFLAGS+=-fcommon.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1592913600">- Disable LTO, this randomly fails during link stage.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1600344000">- Update to release 6.5.0
  * `PRIV_TOP` is now thread-safe to support parallel ESI
    implementations.
  * varnishstat's JSON output format (-j option) has been changed.
  * Behavior for 304-type responses was changed not to update the
    Content-Encoding response header of the stored object.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1601640000">- Update to release 6.5.1
  * Bump the VRT_MAJOR_VERSION number defined in the vrt.h</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1625400000">- update to 6.6.0:
  * The ban_cutoff parameter now refers to the overall length of
    the ban list, including completed bans, where before only
    non-completed (?active?) bans were counted towards ban_cutoff.
  * Body bytes accounting has been fixed to always represent the
    number of body bytes moved on the wire, exclusive of
    protocol-specific overhead like HTTP/1 chunked encoding or
    HTTP/2 framing.
  * The connection close reason has been fixed to properly report
    SC_RESP_CLOSE where previously only SC_REQ_CLOSE was reported.
  * Unless the new validate_headers feature is disabled, all newly
    set headers are now validated to contain only characters
    allowed by RFC7230.
  * The filter_re, keep_re and get_re functions from the bundled
    cookie vmod have been changed to take the VCL_REGEX type. This
    implies that their regular expression arguments now need to be
    literal, not e.g. string.
  * The interface for private pointers in VMODs has been changed,
    the VRT backend interface has been changed, many filter
    (VDP/VFP) related signatures have been changed, and the
    stevedore API has been changed. (Details thereto, see online
    changelog.)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1628251200">- Update to release 6.6.1
  * Fix an HTTP/2.0 request smuggling vulnerability. [bnc#1188470]</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1638360000">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * varnish.service
  * varnishlog.service</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1652702400">- Update to release 7.1.0 [boo#1195188] [CVE-2022-23959]
  * VCL: It is now possible to assign a BLOB value to a BODY
    variable, in addition to STRING as before.
  * VMOD: New STRING strftime(TIME time, STRING format) function
    for UTC formatting.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1660305600">- Update to release 7.1.1 [boo#1202350] [CVE-2022-38150]
  * Resolve a denial of service attack involving reason phrases.</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1663502400">- Fix logrotate
- Add service reload</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1663588800">- Fix varnish.service stop</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1663761600">- Make reload fail nicely on vcl syntax error
- Set TasksMax=16384 because default thread_pool_max is 5000</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1667044800">- update to 7.2.0:
  * Functions ``VRT_AddVDP()``, ``VRT_AddVFP()``,
    ``VRT_RemoveVDP()`` and ``VRT_RemoveVFP()`` are deprecated.
  * Cookie headers generated by vmod_cookie no longer have a
    spurious trailing semicolon at the end of the string. This
    could break VCL relying on the previous incorrect behavior.
  * The ``SessClose`` and ``BackendClose`` reason ``rx_body``,
    which previously output ``Failure receiving req.body``, has
    been rewritten to ``Failure receiving body``.
  * Prototypical Varnish Extensions (VEXT). Similar to VMODs, a
    VEXT is loaded by the cache process. Unlike VMODs that have
    the combined lifetime of all the VCLs that reference them, a
    VEXT has the lifetime of the cache process itself. There are
    no built-in extensions so far.
  * Duration parameters can optionally take a unit, with the same
    syntax as duration units in VCL.
  * Calls to ``VRT_CacheReqBody()`` and ``std.cache_req_body``
    from outside client vcl subs now fail properly instead of
    triggering an assertion failure.
  * New "B" string for the package branch in ``VCS_String()``.
    For the 7.2.0 version, it would yield the 7.2 branch.
  * The new ``vcc_feature`` bits parameter replaces previous
    ``vcc_*`` boolean parameters. The latter still exist as
    deprecated aliases.
  * The ``-k`` option from ``varnishlog`` is now supported by
    ``varnishncsa``.
  * New functions ``std.now()`` and ``std.timed_call()`` in
    vmod_std.
  * New ``MAIN.shm_bytes`` counter.
  * A ``req.http.via`` header is set before entering
    ``vcl_recv``. Via headers are generated using the
    ``server.identity`` value. It defaults to the host name and
    can be turned into a pseudonym with the ``varnishd -i``
    option. Via headers are appended in both directions, to work
    with other hops that may advertise themselves.
  * A ``resp.http.via`` header is no longer overwritten by
    varnish, but rather appended to.
  * The ``server.identity`` syntax is now limited to a "token" as
    defined in the HTTP grammar to be suitable for Via headers.
  * In ``varnishtest`` a Varnish instance will use its VTC
    instance name as its instance name (``varnishd -i``) by
    default for predictable Via headers in test cases.
  * VMOD and VEXT authors can use functions from ``vnum.h``.
  * Do not filter pseudo-headers as regular headers.
  * The termination rules for ``WRK_BgThread()`` were relaxed to
    allow VMODs to use it.
  * ``(struct worker).handling`` has been moved to the newly
    introduced ``struct wrk_vpi`` and replaced by a pointer to
    it, as well as ``(struct vrt_ctx).handling`` has been
    replaced by that pointer. ``struct wrk_vpi`` is for state at
    the interface between VRT and VGC and, in particular, is not
    const as ``struct vrt_ctx`` aka ``VRT_CTX``.
  * Panics now contain information about VCL source files and
    lines.
  * The ``Begin`` log record has a 4th field for subtasks like
    ESI sub-requests.
  * The ``-E`` option for log utilities now works as documented,
    with any type of sub-task based on the ``Begin[4]`` field.
    This covers ESI like before, and sub-tasks spawned by VMODs
    (provided that they log the new field).
  * No more ``req.http.transfer-encoding`` for ESI sub-requests.
  * The thread pool reserve is now limited to tasks that can be
    queued. A backend background fetch is no longer eligible for
    queueing. It would otherwise slow a grace hit down
    significantly when thread pools are saturated.
  * The unused ``fetch_no_thread`` counter was renamed to
    ``bgfetch_no_thread`` because regular backend fetch tasks are
    always scheduled.
  * The macros ``FEATURE()``, ``EXPERIMENT()``, ``DO_DEBUG()``,
    ``MGT_FEATURE()``, ``MGT_EXPERIMENT()``, ``MGT_DO_DEBUG()``
    and ``MGT_VCC_FEATURE()`` now return a boolean value (``0``
    or ``1``) instead of the (private) flag value.
  * A regression in the transport code led MAIN.client_req to be
    incremented for requests coming back from the waiting list,
    it was fixed.
- Delete varnish-5.1.2-add-fallthrough-comments.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1667995200">- Update to release 7.2.1
  * Attempts to mark well-known headers like Content-Length and
    Host hop-by-hop through a Connection-header will now cause a
    400 "Bad request" response.
    (VSV00010, CVE-2022-45059, boo#1205243)
  * Apply the same character set rules to HTTP/2 pseudo-headers
    as is done on the corresponding HTTP/1 request-line field
    parsing. (VSV00011, CVE-2022-45060, boo#1205242)</changelog>
</package>
<package pkgid="13b507c8e831c3aacf110f6bd699d4f4716904ad8e6984976dff3eeac44e5579" name="varnish" arch="s390x">
  <version epoch="0" ver="7.2.1" rel="bp154.2.9.1"/>
  <changelog author="Samu Voutilainen &lt;smar@smar.fi&gt;" date="1553688000">- Updated to 6.2.0
  * Added a thread pool watchdog which will restart the worker
    process if scheduling tasks onto worker threads appears
    stuck. The new parameter "thread_pool_watchdog" configures
    it.
- Disabled error for clobbering, which caused bogus
  error in varnishtest</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566820800">- Add uninit.patch.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1567598400">- Update to release 6.2.1
  * Bugfix for CVE-2019-15892 [boo#1149382]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1568721600">- Update to release 6.3.0
  * The Host: header is folded to lower-case in the builtin_vcl.
  * Improved performance of shared memory statistics counters.
  * Synthetic objects created from vcl_backend_error {} now
    replace existing stale objects as ordinary backend fetches
    would (for details see changes.rst)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1582632000">- Update to release 6.3.2
  * Fix a denial of service vulnerability when using the proxy
    protocol version 2.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1584446400">- Update to release 6.4.0
  * The MAIN.sess_drop counter is gone.
  * backend "none" was added for "no backend".
  * The hash algorithm of the hash director was changed, so
    backend selection will change once only when upgrading.
  * It is now possible for VMOD authors to customize the
    connection pooling of a dynamic backend.
  * For more, see changes.rst.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1591704000">- Update Git-Web repository link
- Set CFLAGS+=-fcommon.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1592913600">- Disable LTO, this randomly fails during link stage.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1600344000">- Update to release 6.5.0
  * `PRIV_TOP` is now thread-safe to support parallel ESI
    implementations.
  * varnishstat's JSON output format (-j option) has been changed.
  * Behavior for 304-type responses was changed not to update the
    Content-Encoding response header of the stored object.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1601640000">- Update to release 6.5.1
  * Bump the VRT_MAJOR_VERSION number defined in the vrt.h</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1625400000">- update to 6.6.0:
  * The ban_cutoff parameter now refers to the overall length of
    the ban list, including completed bans, where before only
    non-completed (?active?) bans were counted towards ban_cutoff.
  * Body bytes accounting has been fixed to always represent the
    number of body bytes moved on the wire, exclusive of
    protocol-specific overhead like HTTP/1 chunked encoding or
    HTTP/2 framing.
  * The connection close reason has been fixed to properly report
    SC_RESP_CLOSE where previously only SC_REQ_CLOSE was reported.
  * Unless the new validate_headers feature is disabled, all newly
    set headers are now validated to contain only characters
    allowed by RFC7230.
  * The filter_re, keep_re and get_re functions from the bundled
    cookie vmod have been changed to take the VCL_REGEX type. This
    implies that their regular expression arguments now need to be
    literal, not e.g. string.
  * The interface for private pointers in VMODs has been changed,
    the VRT backend interface has been changed, many filter
    (VDP/VFP) related signatures have been changed, and the
    stevedore API has been changed. (Details thereto, see online
    changelog.)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1628251200">- Update to release 6.6.1
  * Fix an HTTP/2.0 request smuggling vulnerability. [bnc#1188470]</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1638360000">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * varnish.service
  * varnishlog.service</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1652702400">- Update to release 7.1.0 [boo#1195188] [CVE-2022-23959]
  * VCL: It is now possible to assign a BLOB value to a BODY
    variable, in addition to STRING as before.
  * VMOD: New STRING strftime(TIME time, STRING format) function
    for UTC formatting.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1660305600">- Update to release 7.1.1 [boo#1202350] [CVE-2022-38150]
  * Resolve a denial of service attack involving reason phrases.</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1663502400">- Fix logrotate
- Add service reload</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1663588800">- Fix varnish.service stop</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1663761600">- Make reload fail nicely on vcl syntax error
- Set TasksMax=16384 because default thread_pool_max is 5000</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1667044800">- update to 7.2.0:
  * Functions ``VRT_AddVDP()``, ``VRT_AddVFP()``,
    ``VRT_RemoveVDP()`` and ``VRT_RemoveVFP()`` are deprecated.
  * Cookie headers generated by vmod_cookie no longer have a
    spurious trailing semicolon at the end of the string. This
    could break VCL relying on the previous incorrect behavior.
  * The ``SessClose`` and ``BackendClose`` reason ``rx_body``,
    which previously output ``Failure receiving req.body``, has
    been rewritten to ``Failure receiving body``.
  * Prototypical Varnish Extensions (VEXT). Similar to VMODs, a
    VEXT is loaded by the cache process. Unlike VMODs that have
    the combined lifetime of all the VCLs that reference them, a
    VEXT has the lifetime of the cache process itself. There are
    no built-in extensions so far.
  * Duration parameters can optionally take a unit, with the same
    syntax as duration units in VCL.
  * Calls to ``VRT_CacheReqBody()`` and ``std.cache_req_body``
    from outside client vcl subs now fail properly instead of
    triggering an assertion failure.
  * New "B" string for the package branch in ``VCS_String()``.
    For the 7.2.0 version, it would yield the 7.2 branch.
  * The new ``vcc_feature`` bits parameter replaces previous
    ``vcc_*`` boolean parameters. The latter still exist as
    deprecated aliases.
  * The ``-k`` option from ``varnishlog`` is now supported by
    ``varnishncsa``.
  * New functions ``std.now()`` and ``std.timed_call()`` in
    vmod_std.
  * New ``MAIN.shm_bytes`` counter.
  * A ``req.http.via`` header is set before entering
    ``vcl_recv``. Via headers are generated using the
    ``server.identity`` value. It defaults to the host name and
    can be turned into a pseudonym with the ``varnishd -i``
    option. Via headers are appended in both directions, to work
    with other hops that may advertise themselves.
  * A ``resp.http.via`` header is no longer overwritten by
    varnish, but rather appended to.
  * The ``server.identity`` syntax is now limited to a "token" as
    defined in the HTTP grammar to be suitable for Via headers.
  * In ``varnishtest`` a Varnish instance will use its VTC
    instance name as its instance name (``varnishd -i``) by
    default for predictable Via headers in test cases.
  * VMOD and VEXT authors can use functions from ``vnum.h``.
  * Do not filter pseudo-headers as regular headers.
  * The termination rules for ``WRK_BgThread()`` were relaxed to
    allow VMODs to use it.
  * ``(struct worker).handling`` has been moved to the newly
    introduced ``struct wrk_vpi`` and replaced by a pointer to
    it, as well as ``(struct vrt_ctx).handling`` has been
    replaced by that pointer. ``struct wrk_vpi`` is for state at
    the interface between VRT and VGC and, in particular, is not
    const as ``struct vrt_ctx`` aka ``VRT_CTX``.
  * Panics now contain information about VCL source files and
    lines.
  * The ``Begin`` log record has a 4th field for subtasks like
    ESI sub-requests.
  * The ``-E`` option for log utilities now works as documented,
    with any type of sub-task based on the ``Begin[4]`` field.
    This covers ESI like before, and sub-tasks spawned by VMODs
    (provided that they log the new field).
  * No more ``req.http.transfer-encoding`` for ESI sub-requests.
  * The thread pool reserve is now limited to tasks that can be
    queued. A backend background fetch is no longer eligible for
    queueing. It would otherwise slow a grace hit down
    significantly when thread pools are saturated.
  * The unused ``fetch_no_thread`` counter was renamed to
    ``bgfetch_no_thread`` because regular backend fetch tasks are
    always scheduled.
  * The macros ``FEATURE()``, ``EXPERIMENT()``, ``DO_DEBUG()``,
    ``MGT_FEATURE()``, ``MGT_EXPERIMENT()``, ``MGT_DO_DEBUG()``
    and ``MGT_VCC_FEATURE()`` now return a boolean value (``0``
    or ``1``) instead of the (private) flag value.
  * A regression in the transport code led MAIN.client_req to be
    incremented for requests coming back from the waiting list,
    it was fixed.
- Delete varnish-5.1.2-add-fallthrough-comments.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1667995200">- Update to release 7.2.1
  * Attempts to mark well-known headers like Content-Length and
    Host hop-by-hop through a Connection-header will now cause a
    400 "Bad request" response.
    (VSV00010, CVE-2022-45059, boo#1205243)
  * Apply the same character set rules to HTTP/2 pseudo-headers
    as is done on the corresponding HTTP/1 request-line field
    parsing. (VSV00011, CVE-2022-45060, boo#1205242)</changelog>
</package>
<package pkgid="606f310ddf45605919877d3bd9430194e5c610e557000af7c989016867f8a6e6" name="varnish" arch="src">
  <version epoch="0" ver="7.2.1" rel="bp154.2.9.1"/>
  <changelog author="Samu Voutilainen &lt;smar@smar.fi&gt;" date="1553688000">- Updated to 6.2.0
  * Added a thread pool watchdog which will restart the worker
    process if scheduling tasks onto worker threads appears
    stuck. The new parameter "thread_pool_watchdog" configures
    it.
- Disabled error for clobbering, which caused bogus
  error in varnishtest</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566820800">- Add uninit.patch.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1567598400">- Update to release 6.2.1
  * Bugfix for CVE-2019-15892 [boo#1149382]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1568721600">- Update to release 6.3.0
  * The Host: header is folded to lower-case in the builtin_vcl.
  * Improved performance of shared memory statistics counters.
  * Synthetic objects created from vcl_backend_error {} now
    replace existing stale objects as ordinary backend fetches
    would (for details see changes.rst)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1582632000">- Update to release 6.3.2
  * Fix a denial of service vulnerability when using the proxy
    protocol version 2.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1584446400">- Update to release 6.4.0
  * The MAIN.sess_drop counter is gone.
  * backend "none" was added for "no backend".
  * The hash algorithm of the hash director was changed, so
    backend selection will change once only when upgrading.
  * It is now possible for VMOD authors to customize the
    connection pooling of a dynamic backend.
  * For more, see changes.rst.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1591704000">- Update Git-Web repository link
- Set CFLAGS+=-fcommon.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1592913600">- Disable LTO, this randomly fails during link stage.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1600344000">- Update to release 6.5.0
  * `PRIV_TOP` is now thread-safe to support parallel ESI
    implementations.
  * varnishstat's JSON output format (-j option) has been changed.
  * Behavior for 304-type responses was changed not to update the
    Content-Encoding response header of the stored object.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1601640000">- Update to release 6.5.1
  * Bump the VRT_MAJOR_VERSION number defined in the vrt.h</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1625400000">- update to 6.6.0:
  * The ban_cutoff parameter now refers to the overall length of
    the ban list, including completed bans, where before only
    non-completed (?active?) bans were counted towards ban_cutoff.
  * Body bytes accounting has been fixed to always represent the
    number of body bytes moved on the wire, exclusive of
    protocol-specific overhead like HTTP/1 chunked encoding or
    HTTP/2 framing.
  * The connection close reason has been fixed to properly report
    SC_RESP_CLOSE where previously only SC_REQ_CLOSE was reported.
  * Unless the new validate_headers feature is disabled, all newly
    set headers are now validated to contain only characters
    allowed by RFC7230.
  * The filter_re, keep_re and get_re functions from the bundled
    cookie vmod have been changed to take the VCL_REGEX type. This
    implies that their regular expression arguments now need to be
    literal, not e.g. string.
  * The interface for private pointers in VMODs has been changed,
    the VRT backend interface has been changed, many filter
    (VDP/VFP) related signatures have been changed, and the
    stevedore API has been changed. (Details thereto, see online
    changelog.)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1628251200">- Update to release 6.6.1
  * Fix an HTTP/2.0 request smuggling vulnerability. [bnc#1188470]</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1638360000">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * varnish.service
  * varnishlog.service</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1652702400">- Update to release 7.1.0 [boo#1195188] [CVE-2022-23959]
  * VCL: It is now possible to assign a BLOB value to a BODY
    variable, in addition to STRING as before.
  * VMOD: New STRING strftime(TIME time, STRING format) function
    for UTC formatting.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1660305600">- Update to release 7.1.1 [boo#1202350] [CVE-2022-38150]
  * Resolve a denial of service attack involving reason phrases.</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1663502400">- Fix logrotate
- Add service reload</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1663588800">- Fix varnish.service stop</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1663761600">- Make reload fail nicely on vcl syntax error
- Set TasksMax=16384 because default thread_pool_max is 5000</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1667044800">- update to 7.2.0:
  * Functions ``VRT_AddVDP()``, ``VRT_AddVFP()``,
    ``VRT_RemoveVDP()`` and ``VRT_RemoveVFP()`` are deprecated.
  * Cookie headers generated by vmod_cookie no longer have a
    spurious trailing semicolon at the end of the string. This
    could break VCL relying on the previous incorrect behavior.
  * The ``SessClose`` and ``BackendClose`` reason ``rx_body``,
    which previously output ``Failure receiving req.body``, has
    been rewritten to ``Failure receiving body``.
  * Prototypical Varnish Extensions (VEXT). Similar to VMODs, a
    VEXT is loaded by the cache process. Unlike VMODs that have
    the combined lifetime of all the VCLs that reference them, a
    VEXT has the lifetime of the cache process itself. There are
    no built-in extensions so far.
  * Duration parameters can optionally take a unit, with the same
    syntax as duration units in VCL.
  * Calls to ``VRT_CacheReqBody()`` and ``std.cache_req_body``
    from outside client vcl subs now fail properly instead of
    triggering an assertion failure.
  * New "B" string for the package branch in ``VCS_String()``.
    For the 7.2.0 version, it would yield the 7.2 branch.
  * The new ``vcc_feature`` bits parameter replaces previous
    ``vcc_*`` boolean parameters. The latter still exist as
    deprecated aliases.
  * The ``-k`` option from ``varnishlog`` is now supported by
    ``varnishncsa``.
  * New functions ``std.now()`` and ``std.timed_call()`` in
    vmod_std.
  * New ``MAIN.shm_bytes`` counter.
  * A ``req.http.via`` header is set before entering
    ``vcl_recv``. Via headers are generated using the
    ``server.identity`` value. It defaults to the host name and
    can be turned into a pseudonym with the ``varnishd -i``
    option. Via headers are appended in both directions, to work
    with other hops that may advertise themselves.
  * A ``resp.http.via`` header is no longer overwritten by
    varnish, but rather appended to.
  * The ``server.identity`` syntax is now limited to a "token" as
    defined in the HTTP grammar to be suitable for Via headers.
  * In ``varnishtest`` a Varnish instance will use its VTC
    instance name as its instance name (``varnishd -i``) by
    default for predictable Via headers in test cases.
  * VMOD and VEXT authors can use functions from ``vnum.h``.
  * Do not filter pseudo-headers as regular headers.
  * The termination rules for ``WRK_BgThread()`` were relaxed to
    allow VMODs to use it.
  * ``(struct worker).handling`` has been moved to the newly
    introduced ``struct wrk_vpi`` and replaced by a pointer to
    it, as well as ``(struct vrt_ctx).handling`` has been
    replaced by that pointer. ``struct wrk_vpi`` is for state at
    the interface between VRT and VGC and, in particular, is not
    const as ``struct vrt_ctx`` aka ``VRT_CTX``.
  * Panics now contain information about VCL source files and
    lines.
  * The ``Begin`` log record has a 4th field for subtasks like
    ESI sub-requests.
  * The ``-E`` option for log utilities now works as documented,
    with any type of sub-task based on the ``Begin[4]`` field.
    This covers ESI like before, and sub-tasks spawned by VMODs
    (provided that they log the new field).
  * No more ``req.http.transfer-encoding`` for ESI sub-requests.
  * The thread pool reserve is now limited to tasks that can be
    queued. A backend background fetch is no longer eligible for
    queueing. It would otherwise slow a grace hit down
    significantly when thread pools are saturated.
  * The unused ``fetch_no_thread`` counter was renamed to
    ``bgfetch_no_thread`` because regular backend fetch tasks are
    always scheduled.
  * The macros ``FEATURE()``, ``EXPERIMENT()``, ``DO_DEBUG()``,
    ``MGT_FEATURE()``, ``MGT_EXPERIMENT()``, ``MGT_DO_DEBUG()``
    and ``MGT_VCC_FEATURE()`` now return a boolean value (``0``
    or ``1``) instead of the (private) flag value.
  * A regression in the transport code led MAIN.client_req to be
    incremented for requests coming back from the waiting list,
    it was fixed.
- Delete varnish-5.1.2-add-fallthrough-comments.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1667995200">- Update to release 7.2.1
  * Attempts to mark well-known headers like Content-Length and
    Host hop-by-hop through a Connection-header will now cause a
    400 "Bad request" response.
    (VSV00010, CVE-2022-45059, boo#1205243)
  * Apply the same character set rules to HTTP/2 pseudo-headers
    as is done on the corresponding HTTP/1 request-line field
    parsing. (VSV00011, CVE-2022-45060, boo#1205242)</changelog>
</package>
<package pkgid="9235cfab2cf43029e60ed1683d9ec8fd8211d6e6cb480737e75935fdab0eaa1a" name="varnish" arch="x86_64">
  <version epoch="0" ver="7.2.1" rel="bp154.2.9.1"/>
  <changelog author="Samu Voutilainen &lt;smar@smar.fi&gt;" date="1553688000">- Updated to 6.2.0
  * Added a thread pool watchdog which will restart the worker
    process if scheduling tasks onto worker threads appears
    stuck. The new parameter "thread_pool_watchdog" configures
    it.
- Disabled error for clobbering, which caused bogus
  error in varnishtest</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566820800">- Add uninit.patch.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1567598400">- Update to release 6.2.1
  * Bugfix for CVE-2019-15892 [boo#1149382]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1568721600">- Update to release 6.3.0
  * The Host: header is folded to lower-case in the builtin_vcl.
  * Improved performance of shared memory statistics counters.
  * Synthetic objects created from vcl_backend_error {} now
    replace existing stale objects as ordinary backend fetches
    would (for details see changes.rst)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1582632000">- Update to release 6.3.2
  * Fix a denial of service vulnerability when using the proxy
    protocol version 2.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1584446400">- Update to release 6.4.0
  * The MAIN.sess_drop counter is gone.
  * backend "none" was added for "no backend".
  * The hash algorithm of the hash director was changed, so
    backend selection will change once only when upgrading.
  * It is now possible for VMOD authors to customize the
    connection pooling of a dynamic backend.
  * For more, see changes.rst.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1591704000">- Update Git-Web repository link
- Set CFLAGS+=-fcommon.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1592913600">- Disable LTO, this randomly fails during link stage.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1600344000">- Update to release 6.5.0
  * `PRIV_TOP` is now thread-safe to support parallel ESI
    implementations.
  * varnishstat's JSON output format (-j option) has been changed.
  * Behavior for 304-type responses was changed not to update the
    Content-Encoding response header of the stored object.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1601640000">- Update to release 6.5.1
  * Bump the VRT_MAJOR_VERSION number defined in the vrt.h</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1625400000">- update to 6.6.0:
  * The ban_cutoff parameter now refers to the overall length of
    the ban list, including completed bans, where before only
    non-completed (?active?) bans were counted towards ban_cutoff.
  * Body bytes accounting has been fixed to always represent the
    number of body bytes moved on the wire, exclusive of
    protocol-specific overhead like HTTP/1 chunked encoding or
    HTTP/2 framing.
  * The connection close reason has been fixed to properly report
    SC_RESP_CLOSE where previously only SC_REQ_CLOSE was reported.
  * Unless the new validate_headers feature is disabled, all newly
    set headers are now validated to contain only characters
    allowed by RFC7230.
  * The filter_re, keep_re and get_re functions from the bundled
    cookie vmod have been changed to take the VCL_REGEX type. This
    implies that their regular expression arguments now need to be
    literal, not e.g. string.
  * The interface for private pointers in VMODs has been changed,
    the VRT backend interface has been changed, many filter
    (VDP/VFP) related signatures have been changed, and the
    stevedore API has been changed. (Details thereto, see online
    changelog.)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1628251200">- Update to release 6.6.1
  * Fix an HTTP/2.0 request smuggling vulnerability. [bnc#1188470]</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1638360000">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * varnish.service
  * varnishlog.service</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1652702400">- Update to release 7.1.0 [boo#1195188] [CVE-2022-23959]
  * VCL: It is now possible to assign a BLOB value to a BODY
    variable, in addition to STRING as before.
  * VMOD: New STRING strftime(TIME time, STRING format) function
    for UTC formatting.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1660305600">- Update to release 7.1.1 [boo#1202350] [CVE-2022-38150]
  * Resolve a denial of service attack involving reason phrases.</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1663502400">- Fix logrotate
- Add service reload</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1663588800">- Fix varnish.service stop</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1663761600">- Make reload fail nicely on vcl syntax error
- Set TasksMax=16384 because default thread_pool_max is 5000</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1667044800">- update to 7.2.0:
  * Functions ``VRT_AddVDP()``, ``VRT_AddVFP()``,
    ``VRT_RemoveVDP()`` and ``VRT_RemoveVFP()`` are deprecated.
  * Cookie headers generated by vmod_cookie no longer have a
    spurious trailing semicolon at the end of the string. This
    could break VCL relying on the previous incorrect behavior.
  * The ``SessClose`` and ``BackendClose`` reason ``rx_body``,
    which previously output ``Failure receiving req.body``, has
    been rewritten to ``Failure receiving body``.
  * Prototypical Varnish Extensions (VEXT). Similar to VMODs, a
    VEXT is loaded by the cache process. Unlike VMODs that have
    the combined lifetime of all the VCLs that reference them, a
    VEXT has the lifetime of the cache process itself. There are
    no built-in extensions so far.
  * Duration parameters can optionally take a unit, with the same
    syntax as duration units in VCL.
  * Calls to ``VRT_CacheReqBody()`` and ``std.cache_req_body``
    from outside client vcl subs now fail properly instead of
    triggering an assertion failure.
  * New "B" string for the package branch in ``VCS_String()``.
    For the 7.2.0 version, it would yield the 7.2 branch.
  * The new ``vcc_feature`` bits parameter replaces previous
    ``vcc_*`` boolean parameters. The latter still exist as
    deprecated aliases.
  * The ``-k`` option from ``varnishlog`` is now supported by
    ``varnishncsa``.
  * New functions ``std.now()`` and ``std.timed_call()`` in
    vmod_std.
  * New ``MAIN.shm_bytes`` counter.
  * A ``req.http.via`` header is set before entering
    ``vcl_recv``. Via headers are generated using the
    ``server.identity`` value. It defaults to the host name and
    can be turned into a pseudonym with the ``varnishd -i``
    option. Via headers are appended in both directions, to work
    with other hops that may advertise themselves.
  * A ``resp.http.via`` header is no longer overwritten by
    varnish, but rather appended to.
  * The ``server.identity`` syntax is now limited to a "token" as
    defined in the HTTP grammar to be suitable for Via headers.
  * In ``varnishtest`` a Varnish instance will use its VTC
    instance name as its instance name (``varnishd -i``) by
    default for predictable Via headers in test cases.
  * VMOD and VEXT authors can use functions from ``vnum.h``.
  * Do not filter pseudo-headers as regular headers.
  * The termination rules for ``WRK_BgThread()`` were relaxed to
    allow VMODs to use it.
  * ``(struct worker).handling`` has been moved to the newly
    introduced ``struct wrk_vpi`` and replaced by a pointer to
    it, as well as ``(struct vrt_ctx).handling`` has been
    replaced by that pointer. ``struct wrk_vpi`` is for state at
    the interface between VRT and VGC and, in particular, is not
    const as ``struct vrt_ctx`` aka ``VRT_CTX``.
  * Panics now contain information about VCL source files and
    lines.
  * The ``Begin`` log record has a 4th field for subtasks like
    ESI sub-requests.
  * The ``-E`` option for log utilities now works as documented,
    with any type of sub-task based on the ``Begin[4]`` field.
    This covers ESI like before, and sub-tasks spawned by VMODs
    (provided that they log the new field).
  * No more ``req.http.transfer-encoding`` for ESI sub-requests.
  * The thread pool reserve is now limited to tasks that can be
    queued. A backend background fetch is no longer eligible for
    queueing. It would otherwise slow a grace hit down
    significantly when thread pools are saturated.
  * The unused ``fetch_no_thread`` counter was renamed to
    ``bgfetch_no_thread`` because regular backend fetch tasks are
    always scheduled.
  * The macros ``FEATURE()``, ``EXPERIMENT()``, ``DO_DEBUG()``,
    ``MGT_FEATURE()``, ``MGT_EXPERIMENT()``, ``MGT_DO_DEBUG()``
    and ``MGT_VCC_FEATURE()`` now return a boolean value (``0``
    or ``1``) instead of the (private) flag value.
  * A regression in the transport code led MAIN.client_req to be
    incremented for requests coming back from the waiting list,
    it was fixed.
- Delete varnish-5.1.2-add-fallthrough-comments.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1667995200">- Update to release 7.2.1
  * Attempts to mark well-known headers like Content-Length and
    Host hop-by-hop through a Connection-header will now cause a
    400 "Bad request" response.
    (VSV00010, CVE-2022-45059, boo#1205243)
  * Apply the same character set rules to HTTP/2 pseudo-headers
    as is done on the corresponding HTTP/1 request-line field
    parsing. (VSV00011, CVE-2022-45060, boo#1205242)</changelog>
</package>
<package pkgid="f9d87249f92613b1d3908a3c4d7971981b05c2a3d2aabc6456c1baf6d9e25225" name="varnish-devel" arch="aarch64">
  <version epoch="0" ver="7.1.0" rel="bp154.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1474804800">- Update to new upstream release 5.0.0
- The varnishd "-u NNN" option, which may be remaining in
  /etc/sysconfig/varnish, has been replaced with "-j unix,user=NNN".
  * Varnish 5.0 changes some (mostly) internal APIs and adds some
  major new features over Varnish 4.1.
  * 5.0 supports jumping from the active VCL's vcl_recv{} to another
  VCL via a VCL label.
  * Very Experimental HTTP/2 support
  * We have added to the "directors" VMOD? an overhauled version of
  a director which was available as an out-of-tree VMOD under the
  name VSLP for a couple of years. It is basically a better hash
  director which uses consistent hashing to provide improved
  stability of backend node selection when the configuration and/or
  health state of backends changes.
  * Hit-For-Pass is now actually Hit-For-Miss
  * We have made the ban lurker even more efficient by example of
  some real live situations with tens of thousands of bans using
  inefficient regular expressions.
  * The waitinglist logic for ESI subrequests now uses condition
  variables to trigger immediate continuation of ESI processing
  when an object being waited for becomes available.
  * Backend PROXY protocol requests are now supported through the
  .proxy_header attribute of the backend definition.
  * VCL files are now also being searched for in
  /usr/share/varnish/vcl if not found in /etc/varnish.
  * The basic device detection vcl is now bundled with varnish.</changelog>
  <changelog author="dimstar@opensuse.org" date="1494936000">- BuildRequire python3-docutils instead of python-docutils.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1498219200">- Update to version 5.1.2:
  * Fix an endless loop in Backend Polling (#2295)
  * Fix a Chunked bug in tight workspaces (#2207, #2275)
  * Fix a bug relating to req.body when on waitinglist (#2266)
  * Handle EPIPE on broken TCP connections (#2267)
  * Work around the x86 arch's turbo-double FP format in parameter
    setup code. (#1875)
  * Fix race related to backend probe with proxy header (#2278)
  * Keep VCL temperature consistent between mgt/worker also when
    worker protests.
  * A lot of HTTP/2 fixes.
- Changes introduced by version 5.1.1:
  * Fix bug introduced by stubborn old bugger right before release
    5.1.0 was cut.
- Changes introduced by version 5.1.0:
  * Added varnishd command-line options -I, -x and -?, and
    tightened restrictions on permitted combinations of options.
  * More progress on support for HTTP/2.
  * Add ``return(fail)`` to almost all VCL subroutines.
  * Restored the old hit-for-pass, invoked with
    ``return(pass(DURATION))`` from
    ``vcl_backend_response``. hit-for-miss remains the default.
    Added the cache_hitmiss stat, and cache_hitpass only counts the
    new/old hit-for-pass cases. Restored HitPass to the Varnish
    log, and added HitMiss. Added the HFP prefix to TTL log entries
    to log a hit-for-pass duration.
  * Rolled back the fix for #1206. Client delivery decides solely
    whether to send a 304 client response, based on client request
    and response headers.
  * Added vtest.sh.
  * Added vxid as a lefthand side for VSL queries.
  * Added the setenv and write_body commands for Varnish test cases
    (VTCs). err_shell is deprecated. Also added the operators
  - cliexpect, -match and -hdrlen, and -reason replaces -msg.
    Added the ${bad_backend} macro.
  * varnishtest can be stopped with the TERM, INT and KILL signals,
    but not with HUP.
  * The fallback director has now an extra, optional parameter to
    keep using the current backend until it falls sick.
  * VMOD shared libraries are now copied to the workdir, to avoid
    problems when VMODs are updated via packaging systems.
  * Bump the VRT version to 6.0.
  * Export more symbols from libvarnishapi.so.
  * The size of the VSL log is limited to 4G-1b, placing upper
    bounds on the -l option and the vsl_space and vsm_space
    parameters.
  * Added parameters clock_step, thread_pool_reserve and
    ban_cutoff.
  * Parameters vcl_dir and vmod_dir are deprecated, use vcl_path
    and vmod_path instead.
  * All parameters are defined, even on platforms that don't
    support them. An unsupported parameter is documented as such in
    param.show. Setting such a parameter is not an error, but has
    no effect.
  * Clarified the interpretations of the + and - operators in VCL
    with operands of the various data types.
  * DURATION types may be used in boolean contexts.
  * INT, DURATION and REAL values can now be negative.
  * Response codes 1000 or greater may now be set in VCL
    internally. resp.status is delivered modulo 1000 in client
    responses.
  * IP addresses can be compared for equality in VCL.
  * Introduce the STEVEDORE data type, and the objects
    storage.SNAME in VCL. Added req.storage and beresp.storage;
    beresp.storage_hint is deprecated.
  * Retired the umem stevedore.
  * req.ttl is deprecated.
  * Added std.getenv() and std.late_100_continue().
  * The fetch_failed stat is incremented for any kind of fetch
    failure.
  * Added the stats n_test_gunzip and
    bans_lurker_obj_killed_cutoff.
  * Clarified the meanings of the %r, %{X}i and %{X}o formatters in
    varnishncsa.
- Add varnish-5.1.2-add-fallthrough-comments.patch to fix build
  with GCC 7 (boo#1041259).</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="jengelh@inai.de" date="1521460800">- Update to new upstream release 6.0.0
  * Added support for Unix Domain Sockets, both for clients and
    for backend servers. This brings a new level of the VCL
    language, version 4.1.
  * Always use HTTP/1.1 on backend connections for pass fetch.</changelog>
  <changelog author="jengelh@inai.de" date="1525262400">- Put %fillup back into %post</changelog>
  <changelog author="Samu Voutilainen &lt;smar@smar.fi&gt;" date="1553688000">- Updated to 6.2.0
  * Added a thread pool watchdog which will restart the worker
    process if scheduling tasks onto worker threads appears
    stuck. The new parameter "thread_pool_watchdog" configures
    it.
- Disabled error for clobbering, which caused bogus
  error in varnishtest</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566820800">- Add uninit.patch.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1567598400">- Update to release 6.2.1
  * Bugfix for CVE-2019-15892 [boo#1149382]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1568721600">- Update to release 6.3.0
  * The Host: header is folded to lower-case in the builtin_vcl.
  * Improved performance of shared memory statistics counters.
  * Synthetic objects created from vcl_backend_error {} now
    replace existing stale objects as ordinary backend fetches
    would (for details see changes.rst)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1582632000">- Update to release 6.3.2
  * Fix a denial of service vulnerability when using the proxy
    protocol version 2.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1584446400">- Update to release 6.4.0
  * The MAIN.sess_drop counter is gone.
  * backend "none" was added for "no backend".
  * The hash algorithm of the hash director was changed, so
    backend selection will change once only when upgrading.
  * It is now possible for VMOD authors to customize the
    connection pooling of a dynamic backend.
  * For more, see changes.rst.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1591704000">- Update Git-Web repository link
- Set CFLAGS+=-fcommon.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1592913600">- Disable LTO, this randomly fails during link stage.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1600344000">- Update to release 6.5.0
  * `PRIV_TOP` is now thread-safe to support parallel ESI
    implementations.
  * varnishstat's JSON output format (-j option) has been changed.
  * Behavior for 304-type responses was changed not to update the
    Content-Encoding response header of the stored object.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1601640000">- Update to release 6.5.1
  * Bump the VRT_MAJOR_VERSION number defined in the vrt.h</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1625400000">- update to 6.6.0:
  * The ban_cutoff parameter now refers to the overall length of
    the ban list, including completed bans, where before only
    non-completed (?active?) bans were counted towards ban_cutoff.
  * Body bytes accounting has been fixed to always represent the
    number of body bytes moved on the wire, exclusive of
    protocol-specific overhead like HTTP/1 chunked encoding or
    HTTP/2 framing.
  * The connection close reason has been fixed to properly report
    SC_RESP_CLOSE where previously only SC_REQ_CLOSE was reported.
  * Unless the new validate_headers feature is disabled, all newly
    set headers are now validated to contain only characters
    allowed by RFC7230.
  * The filter_re, keep_re and get_re functions from the bundled
    cookie vmod have been changed to take the VCL_REGEX type. This
    implies that their regular expression arguments now need to be
    literal, not e.g. string.
  * The interface for private pointers in VMODs has been changed,
    the VRT backend interface has been changed, many filter
    (VDP/VFP) related signatures have been changed, and the
    stevedore API has been changed. (Details thereto, see online
    changelog.)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1628251200">- Update to release 6.6.1
  * Fix an HTTP/2.0 request smuggling vulnerability. [bnc#1188470]</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1638360000">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * varnish.service
  * varnishlog.service</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1652702400">- Update to release 7.1.0 [boo#1195188] [CVE-2022-23959]
  * VCL: It is now possible to assign a BLOB value to a BODY
    variable, in addition to STRING as before.
  * VMOD: New STRING strftime(TIME time, STRING format) function
    for UTC formatting.</changelog>
</package>
<package pkgid="06528f8b8ce0c4c287b228f3767db7f096b4925998ff005e2e9c50ea1988dc54" name="varnish-devel" arch="i586">
  <version epoch="0" ver="7.1.0" rel="bp154.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1474804800">- Update to new upstream release 5.0.0
- The varnishd "-u NNN" option, which may be remaining in
  /etc/sysconfig/varnish, has been replaced with "-j unix,user=NNN".
  * Varnish 5.0 changes some (mostly) internal APIs and adds some
  major new features over Varnish 4.1.
  * 5.0 supports jumping from the active VCL's vcl_recv{} to another
  VCL via a VCL label.
  * Very Experimental HTTP/2 support
  * We have added to the "directors" VMOD? an overhauled version of
  a director which was available as an out-of-tree VMOD under the
  name VSLP for a couple of years. It is basically a better hash
  director which uses consistent hashing to provide improved
  stability of backend node selection when the configuration and/or
  health state of backends changes.
  * Hit-For-Pass is now actually Hit-For-Miss
  * We have made the ban lurker even more efficient by example of
  some real live situations with tens of thousands of bans using
  inefficient regular expressions.
  * The waitinglist logic for ESI subrequests now uses condition
  variables to trigger immediate continuation of ESI processing
  when an object being waited for becomes available.
  * Backend PROXY protocol requests are now supported through the
  .proxy_header attribute of the backend definition.
  * VCL files are now also being searched for in
  /usr/share/varnish/vcl if not found in /etc/varnish.
  * The basic device detection vcl is now bundled with varnish.</changelog>
  <changelog author="dimstar@opensuse.org" date="1494936000">- BuildRequire python3-docutils instead of python-docutils.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1498219200">- Update to version 5.1.2:
  * Fix an endless loop in Backend Polling (#2295)
  * Fix a Chunked bug in tight workspaces (#2207, #2275)
  * Fix a bug relating to req.body when on waitinglist (#2266)
  * Handle EPIPE on broken TCP connections (#2267)
  * Work around the x86 arch's turbo-double FP format in parameter
    setup code. (#1875)
  * Fix race related to backend probe with proxy header (#2278)
  * Keep VCL temperature consistent between mgt/worker also when
    worker protests.
  * A lot of HTTP/2 fixes.
- Changes introduced by version 5.1.1:
  * Fix bug introduced by stubborn old bugger right before release
    5.1.0 was cut.
- Changes introduced by version 5.1.0:
  * Added varnishd command-line options -I, -x and -?, and
    tightened restrictions on permitted combinations of options.
  * More progress on support for HTTP/2.
  * Add ``return(fail)`` to almost all VCL subroutines.
  * Restored the old hit-for-pass, invoked with
    ``return(pass(DURATION))`` from
    ``vcl_backend_response``. hit-for-miss remains the default.
    Added the cache_hitmiss stat, and cache_hitpass only counts the
    new/old hit-for-pass cases. Restored HitPass to the Varnish
    log, and added HitMiss. Added the HFP prefix to TTL log entries
    to log a hit-for-pass duration.
  * Rolled back the fix for #1206. Client delivery decides solely
    whether to send a 304 client response, based on client request
    and response headers.
  * Added vtest.sh.
  * Added vxid as a lefthand side for VSL queries.
  * Added the setenv and write_body commands for Varnish test cases
    (VTCs). err_shell is deprecated. Also added the operators
  - cliexpect, -match and -hdrlen, and -reason replaces -msg.
    Added the ${bad_backend} macro.
  * varnishtest can be stopped with the TERM, INT and KILL signals,
    but not with HUP.
  * The fallback director has now an extra, optional parameter to
    keep using the current backend until it falls sick.
  * VMOD shared libraries are now copied to the workdir, to avoid
    problems when VMODs are updated via packaging systems.
  * Bump the VRT version to 6.0.
  * Export more symbols from libvarnishapi.so.
  * The size of the VSL log is limited to 4G-1b, placing upper
    bounds on the -l option and the vsl_space and vsm_space
    parameters.
  * Added parameters clock_step, thread_pool_reserve and
    ban_cutoff.
  * Parameters vcl_dir and vmod_dir are deprecated, use vcl_path
    and vmod_path instead.
  * All parameters are defined, even on platforms that don't
    support them. An unsupported parameter is documented as such in
    param.show. Setting such a parameter is not an error, but has
    no effect.
  * Clarified the interpretations of the + and - operators in VCL
    with operands of the various data types.
  * DURATION types may be used in boolean contexts.
  * INT, DURATION and REAL values can now be negative.
  * Response codes 1000 or greater may now be set in VCL
    internally. resp.status is delivered modulo 1000 in client
    responses.
  * IP addresses can be compared for equality in VCL.
  * Introduce the STEVEDORE data type, and the objects
    storage.SNAME in VCL. Added req.storage and beresp.storage;
    beresp.storage_hint is deprecated.
  * Retired the umem stevedore.
  * req.ttl is deprecated.
  * Added std.getenv() and std.late_100_continue().
  * The fetch_failed stat is incremented for any kind of fetch
    failure.
  * Added the stats n_test_gunzip and
    bans_lurker_obj_killed_cutoff.
  * Clarified the meanings of the %r, %{X}i and %{X}o formatters in
    varnishncsa.
- Add varnish-5.1.2-add-fallthrough-comments.patch to fix build
  with GCC 7 (boo#1041259).</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="jengelh@inai.de" date="1521460800">- Update to new upstream release 6.0.0
  * Added support for Unix Domain Sockets, both for clients and
    for backend servers. This brings a new level of the VCL
    language, version 4.1.
  * Always use HTTP/1.1 on backend connections for pass fetch.</changelog>
  <changelog author="jengelh@inai.de" date="1525262400">- Put %fillup back into %post</changelog>
  <changelog author="Samu Voutilainen &lt;smar@smar.fi&gt;" date="1553688000">- Updated to 6.2.0
  * Added a thread pool watchdog which will restart the worker
    process if scheduling tasks onto worker threads appears
    stuck. The new parameter "thread_pool_watchdog" configures
    it.
- Disabled error for clobbering, which caused bogus
  error in varnishtest</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566820800">- Add uninit.patch.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1567598400">- Update to release 6.2.1
  * Bugfix for CVE-2019-15892 [boo#1149382]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1568721600">- Update to release 6.3.0
  * The Host: header is folded to lower-case in the builtin_vcl.
  * Improved performance of shared memory statistics counters.
  * Synthetic objects created from vcl_backend_error {} now
    replace existing stale objects as ordinary backend fetches
    would (for details see changes.rst)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1582632000">- Update to release 6.3.2
  * Fix a denial of service vulnerability when using the proxy
    protocol version 2.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1584446400">- Update to release 6.4.0
  * The MAIN.sess_drop counter is gone.
  * backend "none" was added for "no backend".
  * The hash algorithm of the hash director was changed, so
    backend selection will change once only when upgrading.
  * It is now possible for VMOD authors to customize the
    connection pooling of a dynamic backend.
  * For more, see changes.rst.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1591704000">- Update Git-Web repository link
- Set CFLAGS+=-fcommon.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1592913600">- Disable LTO, this randomly fails during link stage.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1600344000">- Update to release 6.5.0
  * `PRIV_TOP` is now thread-safe to support parallel ESI
    implementations.
  * varnishstat's JSON output format (-j option) has been changed.
  * Behavior for 304-type responses was changed not to update the
    Content-Encoding response header of the stored object.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1601640000">- Update to release 6.5.1
  * Bump the VRT_MAJOR_VERSION number defined in the vrt.h</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1625400000">- update to 6.6.0:
  * The ban_cutoff parameter now refers to the overall length of
    the ban list, including completed bans, where before only
    non-completed (?active?) bans were counted towards ban_cutoff.
  * Body bytes accounting has been fixed to always represent the
    number of body bytes moved on the wire, exclusive of
    protocol-specific overhead like HTTP/1 chunked encoding or
    HTTP/2 framing.
  * The connection close reason has been fixed to properly report
    SC_RESP_CLOSE where previously only SC_REQ_CLOSE was reported.
  * Unless the new validate_headers feature is disabled, all newly
    set headers are now validated to contain only characters
    allowed by RFC7230.
  * The filter_re, keep_re and get_re functions from the bundled
    cookie vmod have been changed to take the VCL_REGEX type. This
    implies that their regular expression arguments now need to be
    literal, not e.g. string.
  * The interface for private pointers in VMODs has been changed,
    the VRT backend interface has been changed, many filter
    (VDP/VFP) related signatures have been changed, and the
    stevedore API has been changed. (Details thereto, see online
    changelog.)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1628251200">- Update to release 6.6.1
  * Fix an HTTP/2.0 request smuggling vulnerability. [bnc#1188470]</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1638360000">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * varnish.service
  * varnishlog.service</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1652702400">- Update to release 7.1.0 [boo#1195188] [CVE-2022-23959]
  * VCL: It is now possible to assign a BLOB value to a BODY
    variable, in addition to STRING as before.
  * VMOD: New STRING strftime(TIME time, STRING format) function
    for UTC formatting.</changelog>
</package>
<package pkgid="0723b605dfcb314adeb586169abde95f5ed86cc9a987bc58bcf4c5ec24b92bc7" name="varnish-devel" arch="ppc64le">
  <version epoch="0" ver="7.1.0" rel="bp154.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1474804800">- Update to new upstream release 5.0.0
- The varnishd "-u NNN" option, which may be remaining in
  /etc/sysconfig/varnish, has been replaced with "-j unix,user=NNN".
  * Varnish 5.0 changes some (mostly) internal APIs and adds some
  major new features over Varnish 4.1.
  * 5.0 supports jumping from the active VCL's vcl_recv{} to another
  VCL via a VCL label.
  * Very Experimental HTTP/2 support
  * We have added to the "directors" VMOD? an overhauled version of
  a director which was available as an out-of-tree VMOD under the
  name VSLP for a couple of years. It is basically a better hash
  director which uses consistent hashing to provide improved
  stability of backend node selection when the configuration and/or
  health state of backends changes.
  * Hit-For-Pass is now actually Hit-For-Miss
  * We have made the ban lurker even more efficient by example of
  some real live situations with tens of thousands of bans using
  inefficient regular expressions.
  * The waitinglist logic for ESI subrequests now uses condition
  variables to trigger immediate continuation of ESI processing
  when an object being waited for becomes available.
  * Backend PROXY protocol requests are now supported through the
  .proxy_header attribute of the backend definition.
  * VCL files are now also being searched for in
  /usr/share/varnish/vcl if not found in /etc/varnish.
  * The basic device detection vcl is now bundled with varnish.</changelog>
  <changelog author="dimstar@opensuse.org" date="1494936000">- BuildRequire python3-docutils instead of python-docutils.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1498219200">- Update to version 5.1.2:
  * Fix an endless loop in Backend Polling (#2295)
  * Fix a Chunked bug in tight workspaces (#2207, #2275)
  * Fix a bug relating to req.body when on waitinglist (#2266)
  * Handle EPIPE on broken TCP connections (#2267)
  * Work around the x86 arch's turbo-double FP format in parameter
    setup code. (#1875)
  * Fix race related to backend probe with proxy header (#2278)
  * Keep VCL temperature consistent between mgt/worker also when
    worker protests.
  * A lot of HTTP/2 fixes.
- Changes introduced by version 5.1.1:
  * Fix bug introduced by stubborn old bugger right before release
    5.1.0 was cut.
- Changes introduced by version 5.1.0:
  * Added varnishd command-line options -I, -x and -?, and
    tightened restrictions on permitted combinations of options.
  * More progress on support for HTTP/2.
  * Add ``return(fail)`` to almost all VCL subroutines.
  * Restored the old hit-for-pass, invoked with
    ``return(pass(DURATION))`` from
    ``vcl_backend_response``. hit-for-miss remains the default.
    Added the cache_hitmiss stat, and cache_hitpass only counts the
    new/old hit-for-pass cases. Restored HitPass to the Varnish
    log, and added HitMiss. Added the HFP prefix to TTL log entries
    to log a hit-for-pass duration.
  * Rolled back the fix for #1206. Client delivery decides solely
    whether to send a 304 client response, based on client request
    and response headers.
  * Added vtest.sh.
  * Added vxid as a lefthand side for VSL queries.
  * Added the setenv and write_body commands for Varnish test cases
    (VTCs). err_shell is deprecated. Also added the operators
  - cliexpect, -match and -hdrlen, and -reason replaces -msg.
    Added the ${bad_backend} macro.
  * varnishtest can be stopped with the TERM, INT and KILL signals,
    but not with HUP.
  * The fallback director has now an extra, optional parameter to
    keep using the current backend until it falls sick.
  * VMOD shared libraries are now copied to the workdir, to avoid
    problems when VMODs are updated via packaging systems.
  * Bump the VRT version to 6.0.
  * Export more symbols from libvarnishapi.so.
  * The size of the VSL log is limited to 4G-1b, placing upper
    bounds on the -l option and the vsl_space and vsm_space
    parameters.
  * Added parameters clock_step, thread_pool_reserve and
    ban_cutoff.
  * Parameters vcl_dir and vmod_dir are deprecated, use vcl_path
    and vmod_path instead.
  * All parameters are defined, even on platforms that don't
    support them. An unsupported parameter is documented as such in
    param.show. Setting such a parameter is not an error, but has
    no effect.
  * Clarified the interpretations of the + and - operators in VCL
    with operands of the various data types.
  * DURATION types may be used in boolean contexts.
  * INT, DURATION and REAL values can now be negative.
  * Response codes 1000 or greater may now be set in VCL
    internally. resp.status is delivered modulo 1000 in client
    responses.
  * IP addresses can be compared for equality in VCL.
  * Introduce the STEVEDORE data type, and the objects
    storage.SNAME in VCL. Added req.storage and beresp.storage;
    beresp.storage_hint is deprecated.
  * Retired the umem stevedore.
  * req.ttl is deprecated.
  * Added std.getenv() and std.late_100_continue().
  * The fetch_failed stat is incremented for any kind of fetch
    failure.
  * Added the stats n_test_gunzip and
    bans_lurker_obj_killed_cutoff.
  * Clarified the meanings of the %r, %{X}i and %{X}o formatters in
    varnishncsa.
- Add varnish-5.1.2-add-fallthrough-comments.patch to fix build
  with GCC 7 (boo#1041259).</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="jengelh@inai.de" date="1521460800">- Update to new upstream release 6.0.0
  * Added support for Unix Domain Sockets, both for clients and
    for backend servers. This brings a new level of the VCL
    language, version 4.1.
  * Always use HTTP/1.1 on backend connections for pass fetch.</changelog>
  <changelog author="jengelh@inai.de" date="1525262400">- Put %fillup back into %post</changelog>
  <changelog author="Samu Voutilainen &lt;smar@smar.fi&gt;" date="1553688000">- Updated to 6.2.0
  * Added a thread pool watchdog which will restart the worker
    process if scheduling tasks onto worker threads appears
    stuck. The new parameter "thread_pool_watchdog" configures
    it.
- Disabled error for clobbering, which caused bogus
  error in varnishtest</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566820800">- Add uninit.patch.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1567598400">- Update to release 6.2.1
  * Bugfix for CVE-2019-15892 [boo#1149382]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1568721600">- Update to release 6.3.0
  * The Host: header is folded to lower-case in the builtin_vcl.
  * Improved performance of shared memory statistics counters.
  * Synthetic objects created from vcl_backend_error {} now
    replace existing stale objects as ordinary backend fetches
    would (for details see changes.rst)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1582632000">- Update to release 6.3.2
  * Fix a denial of service vulnerability when using the proxy
    protocol version 2.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1584446400">- Update to release 6.4.0
  * The MAIN.sess_drop counter is gone.
  * backend "none" was added for "no backend".
  * The hash algorithm of the hash director was changed, so
    backend selection will change once only when upgrading.
  * It is now possible for VMOD authors to customize the
    connection pooling of a dynamic backend.
  * For more, see changes.rst.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1591704000">- Update Git-Web repository link
- Set CFLAGS+=-fcommon.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1592913600">- Disable LTO, this randomly fails during link stage.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1600344000">- Update to release 6.5.0
  * `PRIV_TOP` is now thread-safe to support parallel ESI
    implementations.
  * varnishstat's JSON output format (-j option) has been changed.
  * Behavior for 304-type responses was changed not to update the
    Content-Encoding response header of the stored object.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1601640000">- Update to release 6.5.1
  * Bump the VRT_MAJOR_VERSION number defined in the vrt.h</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1625400000">- update to 6.6.0:
  * The ban_cutoff parameter now refers to the overall length of
    the ban list, including completed bans, where before only
    non-completed (?active?) bans were counted towards ban_cutoff.
  * Body bytes accounting has been fixed to always represent the
    number of body bytes moved on the wire, exclusive of
    protocol-specific overhead like HTTP/1 chunked encoding or
    HTTP/2 framing.
  * The connection close reason has been fixed to properly report
    SC_RESP_CLOSE where previously only SC_REQ_CLOSE was reported.
  * Unless the new validate_headers feature is disabled, all newly
    set headers are now validated to contain only characters
    allowed by RFC7230.
  * The filter_re, keep_re and get_re functions from the bundled
    cookie vmod have been changed to take the VCL_REGEX type. This
    implies that their regular expression arguments now need to be
    literal, not e.g. string.
  * The interface for private pointers in VMODs has been changed,
    the VRT backend interface has been changed, many filter
    (VDP/VFP) related signatures have been changed, and the
    stevedore API has been changed. (Details thereto, see online
    changelog.)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1628251200">- Update to release 6.6.1
  * Fix an HTTP/2.0 request smuggling vulnerability. [bnc#1188470]</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1638360000">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * varnish.service
  * varnishlog.service</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1652702400">- Update to release 7.1.0 [boo#1195188] [CVE-2022-23959]
  * VCL: It is now possible to assign a BLOB value to a BODY
    variable, in addition to STRING as before.
  * VMOD: New STRING strftime(TIME time, STRING format) function
    for UTC formatting.</changelog>
</package>
<package pkgid="a55e112dd50fd04ab5b620492388cc2711b4e4a5a0451f2a0e2f8b65c8936afe" name="varnish-devel" arch="s390x">
  <version epoch="0" ver="7.1.0" rel="bp154.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1474804800">- Update to new upstream release 5.0.0
- The varnishd "-u NNN" option, which may be remaining in
  /etc/sysconfig/varnish, has been replaced with "-j unix,user=NNN".
  * Varnish 5.0 changes some (mostly) internal APIs and adds some
  major new features over Varnish 4.1.
  * 5.0 supports jumping from the active VCL's vcl_recv{} to another
  VCL via a VCL label.
  * Very Experimental HTTP/2 support
  * We have added to the "directors" VMOD? an overhauled version of
  a director which was available as an out-of-tree VMOD under the
  name VSLP for a couple of years. It is basically a better hash
  director which uses consistent hashing to provide improved
  stability of backend node selection when the configuration and/or
  health state of backends changes.
  * Hit-For-Pass is now actually Hit-For-Miss
  * We have made the ban lurker even more efficient by example of
  some real live situations with tens of thousands of bans using
  inefficient regular expressions.
  * The waitinglist logic for ESI subrequests now uses condition
  variables to trigger immediate continuation of ESI processing
  when an object being waited for becomes available.
  * Backend PROXY protocol requests are now supported through the
  .proxy_header attribute of the backend definition.
  * VCL files are now also being searched for in
  /usr/share/varnish/vcl if not found in /etc/varnish.
  * The basic device detection vcl is now bundled with varnish.</changelog>
  <changelog author="dimstar@opensuse.org" date="1494936000">- BuildRequire python3-docutils instead of python-docutils.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1498219200">- Update to version 5.1.2:
  * Fix an endless loop in Backend Polling (#2295)
  * Fix a Chunked bug in tight workspaces (#2207, #2275)
  * Fix a bug relating to req.body when on waitinglist (#2266)
  * Handle EPIPE on broken TCP connections (#2267)
  * Work around the x86 arch's turbo-double FP format in parameter
    setup code. (#1875)
  * Fix race related to backend probe with proxy header (#2278)
  * Keep VCL temperature consistent between mgt/worker also when
    worker protests.
  * A lot of HTTP/2 fixes.
- Changes introduced by version 5.1.1:
  * Fix bug introduced by stubborn old bugger right before release
    5.1.0 was cut.
- Changes introduced by version 5.1.0:
  * Added varnishd command-line options -I, -x and -?, and
    tightened restrictions on permitted combinations of options.
  * More progress on support for HTTP/2.
  * Add ``return(fail)`` to almost all VCL subroutines.
  * Restored the old hit-for-pass, invoked with
    ``return(pass(DURATION))`` from
    ``vcl_backend_response``. hit-for-miss remains the default.
    Added the cache_hitmiss stat, and cache_hitpass only counts the
    new/old hit-for-pass cases. Restored HitPass to the Varnish
    log, and added HitMiss. Added the HFP prefix to TTL log entries
    to log a hit-for-pass duration.
  * Rolled back the fix for #1206. Client delivery decides solely
    whether to send a 304 client response, based on client request
    and response headers.
  * Added vtest.sh.
  * Added vxid as a lefthand side for VSL queries.
  * Added the setenv and write_body commands for Varnish test cases
    (VTCs). err_shell is deprecated. Also added the operators
  - cliexpect, -match and -hdrlen, and -reason replaces -msg.
    Added the ${bad_backend} macro.
  * varnishtest can be stopped with the TERM, INT and KILL signals,
    but not with HUP.
  * The fallback director has now an extra, optional parameter to
    keep using the current backend until it falls sick.
  * VMOD shared libraries are now copied to the workdir, to avoid
    problems when VMODs are updated via packaging systems.
  * Bump the VRT version to 6.0.
  * Export more symbols from libvarnishapi.so.
  * The size of the VSL log is limited to 4G-1b, placing upper
    bounds on the -l option and the vsl_space and vsm_space
    parameters.
  * Added parameters clock_step, thread_pool_reserve and
    ban_cutoff.
  * Parameters vcl_dir and vmod_dir are deprecated, use vcl_path
    and vmod_path instead.
  * All parameters are defined, even on platforms that don't
    support them. An unsupported parameter is documented as such in
    param.show. Setting such a parameter is not an error, but has
    no effect.
  * Clarified the interpretations of the + and - operators in VCL
    with operands of the various data types.
  * DURATION types may be used in boolean contexts.
  * INT, DURATION and REAL values can now be negative.
  * Response codes 1000 or greater may now be set in VCL
    internally. resp.status is delivered modulo 1000 in client
    responses.
  * IP addresses can be compared for equality in VCL.
  * Introduce the STEVEDORE data type, and the objects
    storage.SNAME in VCL. Added req.storage and beresp.storage;
    beresp.storage_hint is deprecated.
  * Retired the umem stevedore.
  * req.ttl is deprecated.
  * Added std.getenv() and std.late_100_continue().
  * The fetch_failed stat is incremented for any kind of fetch
    failure.
  * Added the stats n_test_gunzip and
    bans_lurker_obj_killed_cutoff.
  * Clarified the meanings of the %r, %{X}i and %{X}o formatters in
    varnishncsa.
- Add varnish-5.1.2-add-fallthrough-comments.patch to fix build
  with GCC 7 (boo#1041259).</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="jengelh@inai.de" date="1521460800">- Update to new upstream release 6.0.0
  * Added support for Unix Domain Sockets, both for clients and
    for backend servers. This brings a new level of the VCL
    language, version 4.1.
  * Always use HTTP/1.1 on backend connections for pass fetch.</changelog>
  <changelog author="jengelh@inai.de" date="1525262400">- Put %fillup back into %post</changelog>
  <changelog author="Samu Voutilainen &lt;smar@smar.fi&gt;" date="1553688000">- Updated to 6.2.0
  * Added a thread pool watchdog which will restart the worker
    process if scheduling tasks onto worker threads appears
    stuck. The new parameter "thread_pool_watchdog" configures
    it.
- Disabled error for clobbering, which caused bogus
  error in varnishtest</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566820800">- Add uninit.patch.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1567598400">- Update to release 6.2.1
  * Bugfix for CVE-2019-15892 [boo#1149382]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1568721600">- Update to release 6.3.0
  * The Host: header is folded to lower-case in the builtin_vcl.
  * Improved performance of shared memory statistics counters.
  * Synthetic objects created from vcl_backend_error {} now
    replace existing stale objects as ordinary backend fetches
    would (for details see changes.rst)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1582632000">- Update to release 6.3.2
  * Fix a denial of service vulnerability when using the proxy
    protocol version 2.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1584446400">- Update to release 6.4.0
  * The MAIN.sess_drop counter is gone.
  * backend "none" was added for "no backend".
  * The hash algorithm of the hash director was changed, so
    backend selection will change once only when upgrading.
  * It is now possible for VMOD authors to customize the
    connection pooling of a dynamic backend.
  * For more, see changes.rst.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1591704000">- Update Git-Web repository link
- Set CFLAGS+=-fcommon.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1592913600">- Disable LTO, this randomly fails during link stage.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1600344000">- Update to release 6.5.0
  * `PRIV_TOP` is now thread-safe to support parallel ESI
    implementations.
  * varnishstat's JSON output format (-j option) has been changed.
  * Behavior for 304-type responses was changed not to update the
    Content-Encoding response header of the stored object.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1601640000">- Update to release 6.5.1
  * Bump the VRT_MAJOR_VERSION number defined in the vrt.h</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1625400000">- update to 6.6.0:
  * The ban_cutoff parameter now refers to the overall length of
    the ban list, including completed bans, where before only
    non-completed (?active?) bans were counted towards ban_cutoff.
  * Body bytes accounting has been fixed to always represent the
    number of body bytes moved on the wire, exclusive of
    protocol-specific overhead like HTTP/1 chunked encoding or
    HTTP/2 framing.
  * The connection close reason has been fixed to properly report
    SC_RESP_CLOSE where previously only SC_REQ_CLOSE was reported.
  * Unless the new validate_headers feature is disabled, all newly
    set headers are now validated to contain only characters
    allowed by RFC7230.
  * The filter_re, keep_re and get_re functions from the bundled
    cookie vmod have been changed to take the VCL_REGEX type. This
    implies that their regular expression arguments now need to be
    literal, not e.g. string.
  * The interface for private pointers in VMODs has been changed,
    the VRT backend interface has been changed, many filter
    (VDP/VFP) related signatures have been changed, and the
    stevedore API has been changed. (Details thereto, see online
    changelog.)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1628251200">- Update to release 6.6.1
  * Fix an HTTP/2.0 request smuggling vulnerability. [bnc#1188470]</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1638360000">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * varnish.service
  * varnishlog.service</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1652702400">- Update to release 7.1.0 [boo#1195188] [CVE-2022-23959]
  * VCL: It is now possible to assign a BLOB value to a BODY
    variable, in addition to STRING as before.
  * VMOD: New STRING strftime(TIME time, STRING format) function
    for UTC formatting.</changelog>
</package>
<package pkgid="6467fe696afe98a058c43f6906054a6b80f5839b4250589a5b99a7429f95d46e" name="varnish-devel" arch="x86_64">
  <version epoch="0" ver="7.1.0" rel="bp154.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1474804800">- Update to new upstream release 5.0.0
- The varnishd "-u NNN" option, which may be remaining in
  /etc/sysconfig/varnish, has been replaced with "-j unix,user=NNN".
  * Varnish 5.0 changes some (mostly) internal APIs and adds some
  major new features over Varnish 4.1.
  * 5.0 supports jumping from the active VCL's vcl_recv{} to another
  VCL via a VCL label.
  * Very Experimental HTTP/2 support
  * We have added to the "directors" VMOD? an overhauled version of
  a director which was available as an out-of-tree VMOD under the
  name VSLP for a couple of years. It is basically a better hash
  director which uses consistent hashing to provide improved
  stability of backend node selection when the configuration and/or
  health state of backends changes.
  * Hit-For-Pass is now actually Hit-For-Miss
  * We have made the ban lurker even more efficient by example of
  some real live situations with tens of thousands of bans using
  inefficient regular expressions.
  * The waitinglist logic for ESI subrequests now uses condition
  variables to trigger immediate continuation of ESI processing
  when an object being waited for becomes available.
  * Backend PROXY protocol requests are now supported through the
  .proxy_header attribute of the backend definition.
  * VCL files are now also being searched for in
  /usr/share/varnish/vcl if not found in /etc/varnish.
  * The basic device detection vcl is now bundled with varnish.</changelog>
  <changelog author="dimstar@opensuse.org" date="1494936000">- BuildRequire python3-docutils instead of python-docutils.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1498219200">- Update to version 5.1.2:
  * Fix an endless loop in Backend Polling (#2295)
  * Fix a Chunked bug in tight workspaces (#2207, #2275)
  * Fix a bug relating to req.body when on waitinglist (#2266)
  * Handle EPIPE on broken TCP connections (#2267)
  * Work around the x86 arch's turbo-double FP format in parameter
    setup code. (#1875)
  * Fix race related to backend probe with proxy header (#2278)
  * Keep VCL temperature consistent between mgt/worker also when
    worker protests.
  * A lot of HTTP/2 fixes.
- Changes introduced by version 5.1.1:
  * Fix bug introduced by stubborn old bugger right before release
    5.1.0 was cut.
- Changes introduced by version 5.1.0:
  * Added varnishd command-line options -I, -x and -?, and
    tightened restrictions on permitted combinations of options.
  * More progress on support for HTTP/2.
  * Add ``return(fail)`` to almost all VCL subroutines.
  * Restored the old hit-for-pass, invoked with
    ``return(pass(DURATION))`` from
    ``vcl_backend_response``. hit-for-miss remains the default.
    Added the cache_hitmiss stat, and cache_hitpass only counts the
    new/old hit-for-pass cases. Restored HitPass to the Varnish
    log, and added HitMiss. Added the HFP prefix to TTL log entries
    to log a hit-for-pass duration.
  * Rolled back the fix for #1206. Client delivery decides solely
    whether to send a 304 client response, based on client request
    and response headers.
  * Added vtest.sh.
  * Added vxid as a lefthand side for VSL queries.
  * Added the setenv and write_body commands for Varnish test cases
    (VTCs). err_shell is deprecated. Also added the operators
  - cliexpect, -match and -hdrlen, and -reason replaces -msg.
    Added the ${bad_backend} macro.
  * varnishtest can be stopped with the TERM, INT and KILL signals,
    but not with HUP.
  * The fallback director has now an extra, optional parameter to
    keep using the current backend until it falls sick.
  * VMOD shared libraries are now copied to the workdir, to avoid
    problems when VMODs are updated via packaging systems.
  * Bump the VRT version to 6.0.
  * Export more symbols from libvarnishapi.so.
  * The size of the VSL log is limited to 4G-1b, placing upper
    bounds on the -l option and the vsl_space and vsm_space
    parameters.
  * Added parameters clock_step, thread_pool_reserve and
    ban_cutoff.
  * Parameters vcl_dir and vmod_dir are deprecated, use vcl_path
    and vmod_path instead.
  * All parameters are defined, even on platforms that don't
    support them. An unsupported parameter is documented as such in
    param.show. Setting such a parameter is not an error, but has
    no effect.
  * Clarified the interpretations of the + and - operators in VCL
    with operands of the various data types.
  * DURATION types may be used in boolean contexts.
  * INT, DURATION and REAL values can now be negative.
  * Response codes 1000 or greater may now be set in VCL
    internally. resp.status is delivered modulo 1000 in client
    responses.
  * IP addresses can be compared for equality in VCL.
  * Introduce the STEVEDORE data type, and the objects
    storage.SNAME in VCL. Added req.storage and beresp.storage;
    beresp.storage_hint is deprecated.
  * Retired the umem stevedore.
  * req.ttl is deprecated.
  * Added std.getenv() and std.late_100_continue().
  * The fetch_failed stat is incremented for any kind of fetch
    failure.
  * Added the stats n_test_gunzip and
    bans_lurker_obj_killed_cutoff.
  * Clarified the meanings of the %r, %{X}i and %{X}o formatters in
    varnishncsa.
- Add varnish-5.1.2-add-fallthrough-comments.patch to fix build
  with GCC 7 (boo#1041259).</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="jengelh@inai.de" date="1521460800">- Update to new upstream release 6.0.0
  * Added support for Unix Domain Sockets, both for clients and
    for backend servers. This brings a new level of the VCL
    language, version 4.1.
  * Always use HTTP/1.1 on backend connections for pass fetch.</changelog>
  <changelog author="jengelh@inai.de" date="1525262400">- Put %fillup back into %post</changelog>
  <changelog author="Samu Voutilainen &lt;smar@smar.fi&gt;" date="1553688000">- Updated to 6.2.0
  * Added a thread pool watchdog which will restart the worker
    process if scheduling tasks onto worker threads appears
    stuck. The new parameter "thread_pool_watchdog" configures
    it.
- Disabled error for clobbering, which caused bogus
  error in varnishtest</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566820800">- Add uninit.patch.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1567598400">- Update to release 6.2.1
  * Bugfix for CVE-2019-15892 [boo#1149382]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1568721600">- Update to release 6.3.0
  * The Host: header is folded to lower-case in the builtin_vcl.
  * Improved performance of shared memory statistics counters.
  * Synthetic objects created from vcl_backend_error {} now
    replace existing stale objects as ordinary backend fetches
    would (for details see changes.rst)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1582632000">- Update to release 6.3.2
  * Fix a denial of service vulnerability when using the proxy
    protocol version 2.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1584446400">- Update to release 6.4.0
  * The MAIN.sess_drop counter is gone.
  * backend "none" was added for "no backend".
  * The hash algorithm of the hash director was changed, so
    backend selection will change once only when upgrading.
  * It is now possible for VMOD authors to customize the
    connection pooling of a dynamic backend.
  * For more, see changes.rst.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1591704000">- Update Git-Web repository link
- Set CFLAGS+=-fcommon.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1592913600">- Disable LTO, this randomly fails during link stage.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1600344000">- Update to release 6.5.0
  * `PRIV_TOP` is now thread-safe to support parallel ESI
    implementations.
  * varnishstat's JSON output format (-j option) has been changed.
  * Behavior for 304-type responses was changed not to update the
    Content-Encoding response header of the stored object.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1601640000">- Update to release 6.5.1
  * Bump the VRT_MAJOR_VERSION number defined in the vrt.h</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1625400000">- update to 6.6.0:
  * The ban_cutoff parameter now refers to the overall length of
    the ban list, including completed bans, where before only
    non-completed (?active?) bans were counted towards ban_cutoff.
  * Body bytes accounting has been fixed to always represent the
    number of body bytes moved on the wire, exclusive of
    protocol-specific overhead like HTTP/1 chunked encoding or
    HTTP/2 framing.
  * The connection close reason has been fixed to properly report
    SC_RESP_CLOSE where previously only SC_REQ_CLOSE was reported.
  * Unless the new validate_headers feature is disabled, all newly
    set headers are now validated to contain only characters
    allowed by RFC7230.
  * The filter_re, keep_re and get_re functions from the bundled
    cookie vmod have been changed to take the VCL_REGEX type. This
    implies that their regular expression arguments now need to be
    literal, not e.g. string.
  * The interface for private pointers in VMODs has been changed,
    the VRT backend interface has been changed, many filter
    (VDP/VFP) related signatures have been changed, and the
    stevedore API has been changed. (Details thereto, see online
    changelog.)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1628251200">- Update to release 6.6.1
  * Fix an HTTP/2.0 request smuggling vulnerability. [bnc#1188470]</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1638360000">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * varnish.service
  * varnishlog.service</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1652702400">- Update to release 7.1.0 [boo#1195188] [CVE-2022-23959]
  * VCL: It is now possible to assign a BLOB value to a BODY
    variable, in addition to STRING as before.
  * VMOD: New STRING strftime(TIME time, STRING format) function
    for UTC formatting.</changelog>
</package>
<package pkgid="ed0c353c57c01ab43cfe3baefede97c0782b653b2d89ef73542cbd91359a983c" name="varnish-devel" arch="aarch64">
  <version epoch="0" ver="7.1.1" rel="bp154.2.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1494936000">- BuildRequire python3-docutils instead of python-docutils.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1498219200">- Update to version 5.1.2:
  * Fix an endless loop in Backend Polling (#2295)
  * Fix a Chunked bug in tight workspaces (#2207, #2275)
  * Fix a bug relating to req.body when on waitinglist (#2266)
  * Handle EPIPE on broken TCP connections (#2267)
  * Work around the x86 arch's turbo-double FP format in parameter
    setup code. (#1875)
  * Fix race related to backend probe with proxy header (#2278)
  * Keep VCL temperature consistent between mgt/worker also when
    worker protests.
  * A lot of HTTP/2 fixes.
- Changes introduced by version 5.1.1:
  * Fix bug introduced by stubborn old bugger right before release
    5.1.0 was cut.
- Changes introduced by version 5.1.0:
  * Added varnishd command-line options -I, -x and -?, and
    tightened restrictions on permitted combinations of options.
  * More progress on support for HTTP/2.
  * Add ``return(fail)`` to almost all VCL subroutines.
  * Restored the old hit-for-pass, invoked with
    ``return(pass(DURATION))`` from
    ``vcl_backend_response``. hit-for-miss remains the default.
    Added the cache_hitmiss stat, and cache_hitpass only counts the
    new/old hit-for-pass cases. Restored HitPass to the Varnish
    log, and added HitMiss. Added the HFP prefix to TTL log entries
    to log a hit-for-pass duration.
  * Rolled back the fix for #1206. Client delivery decides solely
    whether to send a 304 client response, based on client request
    and response headers.
  * Added vtest.sh.
  * Added vxid as a lefthand side for VSL queries.
  * Added the setenv and write_body commands for Varnish test cases
    (VTCs). err_shell is deprecated. Also added the operators
  - cliexpect, -match and -hdrlen, and -reason replaces -msg.
    Added the ${bad_backend} macro.
  * varnishtest can be stopped with the TERM, INT and KILL signals,
    but not with HUP.
  * The fallback director has now an extra, optional parameter to
    keep using the current backend until it falls sick.
  * VMOD shared libraries are now copied to the workdir, to avoid
    problems when VMODs are updated via packaging systems.
  * Bump the VRT version to 6.0.
  * Export more symbols from libvarnishapi.so.
  * The size of the VSL log is limited to 4G-1b, placing upper
    bounds on the -l option and the vsl_space and vsm_space
    parameters.
  * Added parameters clock_step, thread_pool_reserve and
    ban_cutoff.
  * Parameters vcl_dir and vmod_dir are deprecated, use vcl_path
    and vmod_path instead.
  * All parameters are defined, even on platforms that don't
    support them. An unsupported parameter is documented as such in
    param.show. Setting such a parameter is not an error, but has
    no effect.
  * Clarified the interpretations of the + and - operators in VCL
    with operands of the various data types.
  * DURATION types may be used in boolean contexts.
  * INT, DURATION and REAL values can now be negative.
  * Response codes 1000 or greater may now be set in VCL
    internally. resp.status is delivered modulo 1000 in client
    responses.
  * IP addresses can be compared for equality in VCL.
  * Introduce the STEVEDORE data type, and the objects
    storage.SNAME in VCL. Added req.storage and beresp.storage;
    beresp.storage_hint is deprecated.
  * Retired the umem stevedore.
  * req.ttl is deprecated.
  * Added std.getenv() and std.late_100_continue().
  * The fetch_failed stat is incremented for any kind of fetch
    failure.
  * Added the stats n_test_gunzip and
    bans_lurker_obj_killed_cutoff.
  * Clarified the meanings of the %r, %{X}i and %{X}o formatters in
    varnishncsa.
- Add varnish-5.1.2-add-fallthrough-comments.patch to fix build
  with GCC 7 (boo#1041259).</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="jengelh@inai.de" date="1521460800">- Update to new upstream release 6.0.0
  * Added support for Unix Domain Sockets, both for clients and
    for backend servers. This brings a new level of the VCL
    language, version 4.1.
  * Always use HTTP/1.1 on backend connections for pass fetch.</changelog>
  <changelog author="jengelh@inai.de" date="1525262400">- Put %fillup back into %post</changelog>
  <changelog author="Samu Voutilainen &lt;smar@smar.fi&gt;" date="1553688000">- Updated to 6.2.0
  * Added a thread pool watchdog which will restart the worker
    process if scheduling tasks onto worker threads appears
    stuck. The new parameter "thread_pool_watchdog" configures
    it.
- Disabled error for clobbering, which caused bogus
  error in varnishtest</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566820800">- Add uninit.patch.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1567598400">- Update to release 6.2.1
  * Bugfix for CVE-2019-15892 [boo#1149382]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1568721600">- Update to release 6.3.0
  * The Host: header is folded to lower-case in the builtin_vcl.
  * Improved performance of shared memory statistics counters.
  * Synthetic objects created from vcl_backend_error {} now
    replace existing stale objects as ordinary backend fetches
    would (for details see changes.rst)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1582632000">- Update to release 6.3.2
  * Fix a denial of service vulnerability when using the proxy
    protocol version 2.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1584446400">- Update to release 6.4.0
  * The MAIN.sess_drop counter is gone.
  * backend "none" was added for "no backend".
  * The hash algorithm of the hash director was changed, so
    backend selection will change once only when upgrading.
  * It is now possible for VMOD authors to customize the
    connection pooling of a dynamic backend.
  * For more, see changes.rst.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1591704000">- Update Git-Web repository link
- Set CFLAGS+=-fcommon.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1592913600">- Disable LTO, this randomly fails during link stage.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1600344000">- Update to release 6.5.0
  * `PRIV_TOP` is now thread-safe to support parallel ESI
    implementations.
  * varnishstat's JSON output format (-j option) has been changed.
  * Behavior for 304-type responses was changed not to update the
    Content-Encoding response header of the stored object.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1601640000">- Update to release 6.5.1
  * Bump the VRT_MAJOR_VERSION number defined in the vrt.h</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1625400000">- update to 6.6.0:
  * The ban_cutoff parameter now refers to the overall length of
    the ban list, including completed bans, where before only
    non-completed (?active?) bans were counted towards ban_cutoff.
  * Body bytes accounting has been fixed to always represent the
    number of body bytes moved on the wire, exclusive of
    protocol-specific overhead like HTTP/1 chunked encoding or
    HTTP/2 framing.
  * The connection close reason has been fixed to properly report
    SC_RESP_CLOSE where previously only SC_REQ_CLOSE was reported.
  * Unless the new validate_headers feature is disabled, all newly
    set headers are now validated to contain only characters
    allowed by RFC7230.
  * The filter_re, keep_re and get_re functions from the bundled
    cookie vmod have been changed to take the VCL_REGEX type. This
    implies that their regular expression arguments now need to be
    literal, not e.g. string.
  * The interface for private pointers in VMODs has been changed,
    the VRT backend interface has been changed, many filter
    (VDP/VFP) related signatures have been changed, and the
    stevedore API has been changed. (Details thereto, see online
    changelog.)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1628251200">- Update to release 6.6.1
  * Fix an HTTP/2.0 request smuggling vulnerability. [bnc#1188470]</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1638360000">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * varnish.service
  * varnishlog.service</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1652702400">- Update to release 7.1.0 [boo#1195188] [CVE-2022-23959]
  * VCL: It is now possible to assign a BLOB value to a BODY
    variable, in addition to STRING as before.
  * VMOD: New STRING strftime(TIME time, STRING format) function
    for UTC formatting.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1660305600">- Update to release 7.1.1 [boo#1202350] [CVE-2022-38150]
  * Resolve a denial of service attack involving reason phrases.</changelog>
</package>
<package pkgid="07d6f83c03bedf29cbab259e572d94672e2669d663a368e045fffb12f35643eb" name="varnish-devel" arch="i586">
  <version epoch="0" ver="7.1.1" rel="bp154.2.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1494936000">- BuildRequire python3-docutils instead of python-docutils.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1498219200">- Update to version 5.1.2:
  * Fix an endless loop in Backend Polling (#2295)
  * Fix a Chunked bug in tight workspaces (#2207, #2275)
  * Fix a bug relating to req.body when on waitinglist (#2266)
  * Handle EPIPE on broken TCP connections (#2267)
  * Work around the x86 arch's turbo-double FP format in parameter
    setup code. (#1875)
  * Fix race related to backend probe with proxy header (#2278)
  * Keep VCL temperature consistent between mgt/worker also when
    worker protests.
  * A lot of HTTP/2 fixes.
- Changes introduced by version 5.1.1:
  * Fix bug introduced by stubborn old bugger right before release
    5.1.0 was cut.
- Changes introduced by version 5.1.0:
  * Added varnishd command-line options -I, -x and -?, and
    tightened restrictions on permitted combinations of options.
  * More progress on support for HTTP/2.
  * Add ``return(fail)`` to almost all VCL subroutines.
  * Restored the old hit-for-pass, invoked with
    ``return(pass(DURATION))`` from
    ``vcl_backend_response``. hit-for-miss remains the default.
    Added the cache_hitmiss stat, and cache_hitpass only counts the
    new/old hit-for-pass cases. Restored HitPass to the Varnish
    log, and added HitMiss. Added the HFP prefix to TTL log entries
    to log a hit-for-pass duration.
  * Rolled back the fix for #1206. Client delivery decides solely
    whether to send a 304 client response, based on client request
    and response headers.
  * Added vtest.sh.
  * Added vxid as a lefthand side for VSL queries.
  * Added the setenv and write_body commands for Varnish test cases
    (VTCs). err_shell is deprecated. Also added the operators
  - cliexpect, -match and -hdrlen, and -reason replaces -msg.
    Added the ${bad_backend} macro.
  * varnishtest can be stopped with the TERM, INT and KILL signals,
    but not with HUP.
  * The fallback director has now an extra, optional parameter to
    keep using the current backend until it falls sick.
  * VMOD shared libraries are now copied to the workdir, to avoid
    problems when VMODs are updated via packaging systems.
  * Bump the VRT version to 6.0.
  * Export more symbols from libvarnishapi.so.
  * The size of the VSL log is limited to 4G-1b, placing upper
    bounds on the -l option and the vsl_space and vsm_space
    parameters.
  * Added parameters clock_step, thread_pool_reserve and
    ban_cutoff.
  * Parameters vcl_dir and vmod_dir are deprecated, use vcl_path
    and vmod_path instead.
  * All parameters are defined, even on platforms that don't
    support them. An unsupported parameter is documented as such in
    param.show. Setting such a parameter is not an error, but has
    no effect.
  * Clarified the interpretations of the + and - operators in VCL
    with operands of the various data types.
  * DURATION types may be used in boolean contexts.
  * INT, DURATION and REAL values can now be negative.
  * Response codes 1000 or greater may now be set in VCL
    internally. resp.status is delivered modulo 1000 in client
    responses.
  * IP addresses can be compared for equality in VCL.
  * Introduce the STEVEDORE data type, and the objects
    storage.SNAME in VCL. Added req.storage and beresp.storage;
    beresp.storage_hint is deprecated.
  * Retired the umem stevedore.
  * req.ttl is deprecated.
  * Added std.getenv() and std.late_100_continue().
  * The fetch_failed stat is incremented for any kind of fetch
    failure.
  * Added the stats n_test_gunzip and
    bans_lurker_obj_killed_cutoff.
  * Clarified the meanings of the %r, %{X}i and %{X}o formatters in
    varnishncsa.
- Add varnish-5.1.2-add-fallthrough-comments.patch to fix build
  with GCC 7 (boo#1041259).</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="jengelh@inai.de" date="1521460800">- Update to new upstream release 6.0.0
  * Added support for Unix Domain Sockets, both for clients and
    for backend servers. This brings a new level of the VCL
    language, version 4.1.
  * Always use HTTP/1.1 on backend connections for pass fetch.</changelog>
  <changelog author="jengelh@inai.de" date="1525262400">- Put %fillup back into %post</changelog>
  <changelog author="Samu Voutilainen &lt;smar@smar.fi&gt;" date="1553688000">- Updated to 6.2.0
  * Added a thread pool watchdog which will restart the worker
    process if scheduling tasks onto worker threads appears
    stuck. The new parameter "thread_pool_watchdog" configures
    it.
- Disabled error for clobbering, which caused bogus
  error in varnishtest</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566820800">- Add uninit.patch.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1567598400">- Update to release 6.2.1
  * Bugfix for CVE-2019-15892 [boo#1149382]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1568721600">- Update to release 6.3.0
  * The Host: header is folded to lower-case in the builtin_vcl.
  * Improved performance of shared memory statistics counters.
  * Synthetic objects created from vcl_backend_error {} now
    replace existing stale objects as ordinary backend fetches
    would (for details see changes.rst)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1582632000">- Update to release 6.3.2
  * Fix a denial of service vulnerability when using the proxy
    protocol version 2.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1584446400">- Update to release 6.4.0
  * The MAIN.sess_drop counter is gone.
  * backend "none" was added for "no backend".
  * The hash algorithm of the hash director was changed, so
    backend selection will change once only when upgrading.
  * It is now possible for VMOD authors to customize the
    connection pooling of a dynamic backend.
  * For more, see changes.rst.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1591704000">- Update Git-Web repository link
- Set CFLAGS+=-fcommon.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1592913600">- Disable LTO, this randomly fails during link stage.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1600344000">- Update to release 6.5.0
  * `PRIV_TOP` is now thread-safe to support parallel ESI
    implementations.
  * varnishstat's JSON output format (-j option) has been changed.
  * Behavior for 304-type responses was changed not to update the
    Content-Encoding response header of the stored object.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1601640000">- Update to release 6.5.1
  * Bump the VRT_MAJOR_VERSION number defined in the vrt.h</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1625400000">- update to 6.6.0:
  * The ban_cutoff parameter now refers to the overall length of
    the ban list, including completed bans, where before only
    non-completed (?active?) bans were counted towards ban_cutoff.
  * Body bytes accounting has been fixed to always represent the
    number of body bytes moved on the wire, exclusive of
    protocol-specific overhead like HTTP/1 chunked encoding or
    HTTP/2 framing.
  * The connection close reason has been fixed to properly report
    SC_RESP_CLOSE where previously only SC_REQ_CLOSE was reported.
  * Unless the new validate_headers feature is disabled, all newly
    set headers are now validated to contain only characters
    allowed by RFC7230.
  * The filter_re, keep_re and get_re functions from the bundled
    cookie vmod have been changed to take the VCL_REGEX type. This
    implies that their regular expression arguments now need to be
    literal, not e.g. string.
  * The interface for private pointers in VMODs has been changed,
    the VRT backend interface has been changed, many filter
    (VDP/VFP) related signatures have been changed, and the
    stevedore API has been changed. (Details thereto, see online
    changelog.)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1628251200">- Update to release 6.6.1
  * Fix an HTTP/2.0 request smuggling vulnerability. [bnc#1188470]</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1638360000">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * varnish.service
  * varnishlog.service</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1652702400">- Update to release 7.1.0 [boo#1195188] [CVE-2022-23959]
  * VCL: It is now possible to assign a BLOB value to a BODY
    variable, in addition to STRING as before.
  * VMOD: New STRING strftime(TIME time, STRING format) function
    for UTC formatting.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1660305600">- Update to release 7.1.1 [boo#1202350] [CVE-2022-38150]
  * Resolve a denial of service attack involving reason phrases.</changelog>
</package>
<package pkgid="309f76b1554b747352039cdbaa42fdc4abb7cc5ac6caab309b590aeffd6e3fc7" name="varnish-devel" arch="ppc64le">
  <version epoch="0" ver="7.1.1" rel="bp154.2.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1494936000">- BuildRequire python3-docutils instead of python-docutils.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1498219200">- Update to version 5.1.2:
  * Fix an endless loop in Backend Polling (#2295)
  * Fix a Chunked bug in tight workspaces (#2207, #2275)
  * Fix a bug relating to req.body when on waitinglist (#2266)
  * Handle EPIPE on broken TCP connections (#2267)
  * Work around the x86 arch's turbo-double FP format in parameter
    setup code. (#1875)
  * Fix race related to backend probe with proxy header (#2278)
  * Keep VCL temperature consistent between mgt/worker also when
    worker protests.
  * A lot of HTTP/2 fixes.
- Changes introduced by version 5.1.1:
  * Fix bug introduced by stubborn old bugger right before release
    5.1.0 was cut.
- Changes introduced by version 5.1.0:
  * Added varnishd command-line options -I, -x and -?, and
    tightened restrictions on permitted combinations of options.
  * More progress on support for HTTP/2.
  * Add ``return(fail)`` to almost all VCL subroutines.
  * Restored the old hit-for-pass, invoked with
    ``return(pass(DURATION))`` from
    ``vcl_backend_response``. hit-for-miss remains the default.
    Added the cache_hitmiss stat, and cache_hitpass only counts the
    new/old hit-for-pass cases. Restored HitPass to the Varnish
    log, and added HitMiss. Added the HFP prefix to TTL log entries
    to log a hit-for-pass duration.
  * Rolled back the fix for #1206. Client delivery decides solely
    whether to send a 304 client response, based on client request
    and response headers.
  * Added vtest.sh.
  * Added vxid as a lefthand side for VSL queries.
  * Added the setenv and write_body commands for Varnish test cases
    (VTCs). err_shell is deprecated. Also added the operators
  - cliexpect, -match and -hdrlen, and -reason replaces -msg.
    Added the ${bad_backend} macro.
  * varnishtest can be stopped with the TERM, INT and KILL signals,
    but not with HUP.
  * The fallback director has now an extra, optional parameter to
    keep using the current backend until it falls sick.
  * VMOD shared libraries are now copied to the workdir, to avoid
    problems when VMODs are updated via packaging systems.
  * Bump the VRT version to 6.0.
  * Export more symbols from libvarnishapi.so.
  * The size of the VSL log is limited to 4G-1b, placing upper
    bounds on the -l option and the vsl_space and vsm_space
    parameters.
  * Added parameters clock_step, thread_pool_reserve and
    ban_cutoff.
  * Parameters vcl_dir and vmod_dir are deprecated, use vcl_path
    and vmod_path instead.
  * All parameters are defined, even on platforms that don't
    support them. An unsupported parameter is documented as such in
    param.show. Setting such a parameter is not an error, but has
    no effect.
  * Clarified the interpretations of the + and - operators in VCL
    with operands of the various data types.
  * DURATION types may be used in boolean contexts.
  * INT, DURATION and REAL values can now be negative.
  * Response codes 1000 or greater may now be set in VCL
    internally. resp.status is delivered modulo 1000 in client
    responses.
  * IP addresses can be compared for equality in VCL.
  * Introduce the STEVEDORE data type, and the objects
    storage.SNAME in VCL. Added req.storage and beresp.storage;
    beresp.storage_hint is deprecated.
  * Retired the umem stevedore.
  * req.ttl is deprecated.
  * Added std.getenv() and std.late_100_continue().
  * The fetch_failed stat is incremented for any kind of fetch
    failure.
  * Added the stats n_test_gunzip and
    bans_lurker_obj_killed_cutoff.
  * Clarified the meanings of the %r, %{X}i and %{X}o formatters in
    varnishncsa.
- Add varnish-5.1.2-add-fallthrough-comments.patch to fix build
  with GCC 7 (boo#1041259).</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="jengelh@inai.de" date="1521460800">- Update to new upstream release 6.0.0
  * Added support for Unix Domain Sockets, both for clients and
    for backend servers. This brings a new level of the VCL
    language, version 4.1.
  * Always use HTTP/1.1 on backend connections for pass fetch.</changelog>
  <changelog author="jengelh@inai.de" date="1525262400">- Put %fillup back into %post</changelog>
  <changelog author="Samu Voutilainen &lt;smar@smar.fi&gt;" date="1553688000">- Updated to 6.2.0
  * Added a thread pool watchdog which will restart the worker
    process if scheduling tasks onto worker threads appears
    stuck. The new parameter "thread_pool_watchdog" configures
    it.
- Disabled error for clobbering, which caused bogus
  error in varnishtest</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566820800">- Add uninit.patch.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1567598400">- Update to release 6.2.1
  * Bugfix for CVE-2019-15892 [boo#1149382]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1568721600">- Update to release 6.3.0
  * The Host: header is folded to lower-case in the builtin_vcl.
  * Improved performance of shared memory statistics counters.
  * Synthetic objects created from vcl_backend_error {} now
    replace existing stale objects as ordinary backend fetches
    would (for details see changes.rst)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1582632000">- Update to release 6.3.2
  * Fix a denial of service vulnerability when using the proxy
    protocol version 2.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1584446400">- Update to release 6.4.0
  * The MAIN.sess_drop counter is gone.
  * backend "none" was added for "no backend".
  * The hash algorithm of the hash director was changed, so
    backend selection will change once only when upgrading.
  * It is now possible for VMOD authors to customize the
    connection pooling of a dynamic backend.
  * For more, see changes.rst.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1591704000">- Update Git-Web repository link
- Set CFLAGS+=-fcommon.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1592913600">- Disable LTO, this randomly fails during link stage.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1600344000">- Update to release 6.5.0
  * `PRIV_TOP` is now thread-safe to support parallel ESI
    implementations.
  * varnishstat's JSON output format (-j option) has been changed.
  * Behavior for 304-type responses was changed not to update the
    Content-Encoding response header of the stored object.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1601640000">- Update to release 6.5.1
  * Bump the VRT_MAJOR_VERSION number defined in the vrt.h</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1625400000">- update to 6.6.0:
  * The ban_cutoff parameter now refers to the overall length of
    the ban list, including completed bans, where before only
    non-completed (?active?) bans were counted towards ban_cutoff.
  * Body bytes accounting has been fixed to always represent the
    number of body bytes moved on the wire, exclusive of
    protocol-specific overhead like HTTP/1 chunked encoding or
    HTTP/2 framing.
  * The connection close reason has been fixed to properly report
    SC_RESP_CLOSE where previously only SC_REQ_CLOSE was reported.
  * Unless the new validate_headers feature is disabled, all newly
    set headers are now validated to contain only characters
    allowed by RFC7230.
  * The filter_re, keep_re and get_re functions from the bundled
    cookie vmod have been changed to take the VCL_REGEX type. This
    implies that their regular expression arguments now need to be
    literal, not e.g. string.
  * The interface for private pointers in VMODs has been changed,
    the VRT backend interface has been changed, many filter
    (VDP/VFP) related signatures have been changed, and the
    stevedore API has been changed. (Details thereto, see online
    changelog.)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1628251200">- Update to release 6.6.1
  * Fix an HTTP/2.0 request smuggling vulnerability. [bnc#1188470]</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1638360000">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * varnish.service
  * varnishlog.service</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1652702400">- Update to release 7.1.0 [boo#1195188] [CVE-2022-23959]
  * VCL: It is now possible to assign a BLOB value to a BODY
    variable, in addition to STRING as before.
  * VMOD: New STRING strftime(TIME time, STRING format) function
    for UTC formatting.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1660305600">- Update to release 7.1.1 [boo#1202350] [CVE-2022-38150]
  * Resolve a denial of service attack involving reason phrases.</changelog>
</package>
<package pkgid="15928f059de5850e7507dea866efa8a333113eb5820d8be1e123ec8ab776cb94" name="varnish-devel" arch="s390x">
  <version epoch="0" ver="7.1.1" rel="bp154.2.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1494936000">- BuildRequire python3-docutils instead of python-docutils.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1498219200">- Update to version 5.1.2:
  * Fix an endless loop in Backend Polling (#2295)
  * Fix a Chunked bug in tight workspaces (#2207, #2275)
  * Fix a bug relating to req.body when on waitinglist (#2266)
  * Handle EPIPE on broken TCP connections (#2267)
  * Work around the x86 arch's turbo-double FP format in parameter
    setup code. (#1875)
  * Fix race related to backend probe with proxy header (#2278)
  * Keep VCL temperature consistent between mgt/worker also when
    worker protests.
  * A lot of HTTP/2 fixes.
- Changes introduced by version 5.1.1:
  * Fix bug introduced by stubborn old bugger right before release
    5.1.0 was cut.
- Changes introduced by version 5.1.0:
  * Added varnishd command-line options -I, -x and -?, and
    tightened restrictions on permitted combinations of options.
  * More progress on support for HTTP/2.
  * Add ``return(fail)`` to almost all VCL subroutines.
  * Restored the old hit-for-pass, invoked with
    ``return(pass(DURATION))`` from
    ``vcl_backend_response``. hit-for-miss remains the default.
    Added the cache_hitmiss stat, and cache_hitpass only counts the
    new/old hit-for-pass cases. Restored HitPass to the Varnish
    log, and added HitMiss. Added the HFP prefix to TTL log entries
    to log a hit-for-pass duration.
  * Rolled back the fix for #1206. Client delivery decides solely
    whether to send a 304 client response, based on client request
    and response headers.
  * Added vtest.sh.
  * Added vxid as a lefthand side for VSL queries.
  * Added the setenv and write_body commands for Varnish test cases
    (VTCs). err_shell is deprecated. Also added the operators
  - cliexpect, -match and -hdrlen, and -reason replaces -msg.
    Added the ${bad_backend} macro.
  * varnishtest can be stopped with the TERM, INT and KILL signals,
    but not with HUP.
  * The fallback director has now an extra, optional parameter to
    keep using the current backend until it falls sick.
  * VMOD shared libraries are now copied to the workdir, to avoid
    problems when VMODs are updated via packaging systems.
  * Bump the VRT version to 6.0.
  * Export more symbols from libvarnishapi.so.
  * The size of the VSL log is limited to 4G-1b, placing upper
    bounds on the -l option and the vsl_space and vsm_space
    parameters.
  * Added parameters clock_step, thread_pool_reserve and
    ban_cutoff.
  * Parameters vcl_dir and vmod_dir are deprecated, use vcl_path
    and vmod_path instead.
  * All parameters are defined, even on platforms that don't
    support them. An unsupported parameter is documented as such in
    param.show. Setting such a parameter is not an error, but has
    no effect.
  * Clarified the interpretations of the + and - operators in VCL
    with operands of the various data types.
  * DURATION types may be used in boolean contexts.
  * INT, DURATION and REAL values can now be negative.
  * Response codes 1000 or greater may now be set in VCL
    internally. resp.status is delivered modulo 1000 in client
    responses.
  * IP addresses can be compared for equality in VCL.
  * Introduce the STEVEDORE data type, and the objects
    storage.SNAME in VCL. Added req.storage and beresp.storage;
    beresp.storage_hint is deprecated.
  * Retired the umem stevedore.
  * req.ttl is deprecated.
  * Added std.getenv() and std.late_100_continue().
  * The fetch_failed stat is incremented for any kind of fetch
    failure.
  * Added the stats n_test_gunzip and
    bans_lurker_obj_killed_cutoff.
  * Clarified the meanings of the %r, %{X}i and %{X}o formatters in
    varnishncsa.
- Add varnish-5.1.2-add-fallthrough-comments.patch to fix build
  with GCC 7 (boo#1041259).</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="jengelh@inai.de" date="1521460800">- Update to new upstream release 6.0.0
  * Added support for Unix Domain Sockets, both for clients and
    for backend servers. This brings a new level of the VCL
    language, version 4.1.
  * Always use HTTP/1.1 on backend connections for pass fetch.</changelog>
  <changelog author="jengelh@inai.de" date="1525262400">- Put %fillup back into %post</changelog>
  <changelog author="Samu Voutilainen &lt;smar@smar.fi&gt;" date="1553688000">- Updated to 6.2.0
  * Added a thread pool watchdog which will restart the worker
    process if scheduling tasks onto worker threads appears
    stuck. The new parameter "thread_pool_watchdog" configures
    it.
- Disabled error for clobbering, which caused bogus
  error in varnishtest</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566820800">- Add uninit.patch.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1567598400">- Update to release 6.2.1
  * Bugfix for CVE-2019-15892 [boo#1149382]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1568721600">- Update to release 6.3.0
  * The Host: header is folded to lower-case in the builtin_vcl.
  * Improved performance of shared memory statistics counters.
  * Synthetic objects created from vcl_backend_error {} now
    replace existing stale objects as ordinary backend fetches
    would (for details see changes.rst)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1582632000">- Update to release 6.3.2
  * Fix a denial of service vulnerability when using the proxy
    protocol version 2.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1584446400">- Update to release 6.4.0
  * The MAIN.sess_drop counter is gone.
  * backend "none" was added for "no backend".
  * The hash algorithm of the hash director was changed, so
    backend selection will change once only when upgrading.
  * It is now possible for VMOD authors to customize the
    connection pooling of a dynamic backend.
  * For more, see changes.rst.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1591704000">- Update Git-Web repository link
- Set CFLAGS+=-fcommon.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1592913600">- Disable LTO, this randomly fails during link stage.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1600344000">- Update to release 6.5.0
  * `PRIV_TOP` is now thread-safe to support parallel ESI
    implementations.
  * varnishstat's JSON output format (-j option) has been changed.
  * Behavior for 304-type responses was changed not to update the
    Content-Encoding response header of the stored object.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1601640000">- Update to release 6.5.1
  * Bump the VRT_MAJOR_VERSION number defined in the vrt.h</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1625400000">- update to 6.6.0:
  * The ban_cutoff parameter now refers to the overall length of
    the ban list, including completed bans, where before only
    non-completed (?active?) bans were counted towards ban_cutoff.
  * Body bytes accounting has been fixed to always represent the
    number of body bytes moved on the wire, exclusive of
    protocol-specific overhead like HTTP/1 chunked encoding or
    HTTP/2 framing.
  * The connection close reason has been fixed to properly report
    SC_RESP_CLOSE where previously only SC_REQ_CLOSE was reported.
  * Unless the new validate_headers feature is disabled, all newly
    set headers are now validated to contain only characters
    allowed by RFC7230.
  * The filter_re, keep_re and get_re functions from the bundled
    cookie vmod have been changed to take the VCL_REGEX type. This
    implies that their regular expression arguments now need to be
    literal, not e.g. string.
  * The interface for private pointers in VMODs has been changed,
    the VRT backend interface has been changed, many filter
    (VDP/VFP) related signatures have been changed, and the
    stevedore API has been changed. (Details thereto, see online
    changelog.)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1628251200">- Update to release 6.6.1
  * Fix an HTTP/2.0 request smuggling vulnerability. [bnc#1188470]</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1638360000">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * varnish.service
  * varnishlog.service</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1652702400">- Update to release 7.1.0 [boo#1195188] [CVE-2022-23959]
  * VCL: It is now possible to assign a BLOB value to a BODY
    variable, in addition to STRING as before.
  * VMOD: New STRING strftime(TIME time, STRING format) function
    for UTC formatting.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1660305600">- Update to release 7.1.1 [boo#1202350] [CVE-2022-38150]
  * Resolve a denial of service attack involving reason phrases.</changelog>
</package>
<package pkgid="31931461dc2af5042d85fe16be60ebc10e36936e8f52bb849578e8c806fe14f3" name="varnish-devel" arch="x86_64">
  <version epoch="0" ver="7.1.1" rel="bp154.2.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1494936000">- BuildRequire python3-docutils instead of python-docutils.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1498219200">- Update to version 5.1.2:
  * Fix an endless loop in Backend Polling (#2295)
  * Fix a Chunked bug in tight workspaces (#2207, #2275)
  * Fix a bug relating to req.body when on waitinglist (#2266)
  * Handle EPIPE on broken TCP connections (#2267)
  * Work around the x86 arch's turbo-double FP format in parameter
    setup code. (#1875)
  * Fix race related to backend probe with proxy header (#2278)
  * Keep VCL temperature consistent between mgt/worker also when
    worker protests.
  * A lot of HTTP/2 fixes.
- Changes introduced by version 5.1.1:
  * Fix bug introduced by stubborn old bugger right before release
    5.1.0 was cut.
- Changes introduced by version 5.1.0:
  * Added varnishd command-line options -I, -x and -?, and
    tightened restrictions on permitted combinations of options.
  * More progress on support for HTTP/2.
  * Add ``return(fail)`` to almost all VCL subroutines.
  * Restored the old hit-for-pass, invoked with
    ``return(pass(DURATION))`` from
    ``vcl_backend_response``. hit-for-miss remains the default.
    Added the cache_hitmiss stat, and cache_hitpass only counts the
    new/old hit-for-pass cases. Restored HitPass to the Varnish
    log, and added HitMiss. Added the HFP prefix to TTL log entries
    to log a hit-for-pass duration.
  * Rolled back the fix for #1206. Client delivery decides solely
    whether to send a 304 client response, based on client request
    and response headers.
  * Added vtest.sh.
  * Added vxid as a lefthand side for VSL queries.
  * Added the setenv and write_body commands for Varnish test cases
    (VTCs). err_shell is deprecated. Also added the operators
  - cliexpect, -match and -hdrlen, and -reason replaces -msg.
    Added the ${bad_backend} macro.
  * varnishtest can be stopped with the TERM, INT and KILL signals,
    but not with HUP.
  * The fallback director has now an extra, optional parameter to
    keep using the current backend until it falls sick.
  * VMOD shared libraries are now copied to the workdir, to avoid
    problems when VMODs are updated via packaging systems.
  * Bump the VRT version to 6.0.
  * Export more symbols from libvarnishapi.so.
  * The size of the VSL log is limited to 4G-1b, placing upper
    bounds on the -l option and the vsl_space and vsm_space
    parameters.
  * Added parameters clock_step, thread_pool_reserve and
    ban_cutoff.
  * Parameters vcl_dir and vmod_dir are deprecated, use vcl_path
    and vmod_path instead.
  * All parameters are defined, even on platforms that don't
    support them. An unsupported parameter is documented as such in
    param.show. Setting such a parameter is not an error, but has
    no effect.
  * Clarified the interpretations of the + and - operators in VCL
    with operands of the various data types.
  * DURATION types may be used in boolean contexts.
  * INT, DURATION and REAL values can now be negative.
  * Response codes 1000 or greater may now be set in VCL
    internally. resp.status is delivered modulo 1000 in client
    responses.
  * IP addresses can be compared for equality in VCL.
  * Introduce the STEVEDORE data type, and the objects
    storage.SNAME in VCL. Added req.storage and beresp.storage;
    beresp.storage_hint is deprecated.
  * Retired the umem stevedore.
  * req.ttl is deprecated.
  * Added std.getenv() and std.late_100_continue().
  * The fetch_failed stat is incremented for any kind of fetch
    failure.
  * Added the stats n_test_gunzip and
    bans_lurker_obj_killed_cutoff.
  * Clarified the meanings of the %r, %{X}i and %{X}o formatters in
    varnishncsa.
- Add varnish-5.1.2-add-fallthrough-comments.patch to fix build
  with GCC 7 (boo#1041259).</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="jengelh@inai.de" date="1521460800">- Update to new upstream release 6.0.0
  * Added support for Unix Domain Sockets, both for clients and
    for backend servers. This brings a new level of the VCL
    language, version 4.1.
  * Always use HTTP/1.1 on backend connections for pass fetch.</changelog>
  <changelog author="jengelh@inai.de" date="1525262400">- Put %fillup back into %post</changelog>
  <changelog author="Samu Voutilainen &lt;smar@smar.fi&gt;" date="1553688000">- Updated to 6.2.0
  * Added a thread pool watchdog which will restart the worker
    process if scheduling tasks onto worker threads appears
    stuck. The new parameter "thread_pool_watchdog" configures
    it.
- Disabled error for clobbering, which caused bogus
  error in varnishtest</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566820800">- Add uninit.patch.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1567598400">- Update to release 6.2.1
  * Bugfix for CVE-2019-15892 [boo#1149382]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1568721600">- Update to release 6.3.0
  * The Host: header is folded to lower-case in the builtin_vcl.
  * Improved performance of shared memory statistics counters.
  * Synthetic objects created from vcl_backend_error {} now
    replace existing stale objects as ordinary backend fetches
    would (for details see changes.rst)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1582632000">- Update to release 6.3.2
  * Fix a denial of service vulnerability when using the proxy
    protocol version 2.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1584446400">- Update to release 6.4.0
  * The MAIN.sess_drop counter is gone.
  * backend "none" was added for "no backend".
  * The hash algorithm of the hash director was changed, so
    backend selection will change once only when upgrading.
  * It is now possible for VMOD authors to customize the
    connection pooling of a dynamic backend.
  * For more, see changes.rst.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1591704000">- Update Git-Web repository link
- Set CFLAGS+=-fcommon.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1592913600">- Disable LTO, this randomly fails during link stage.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1600344000">- Update to release 6.5.0
  * `PRIV_TOP` is now thread-safe to support parallel ESI
    implementations.
  * varnishstat's JSON output format (-j option) has been changed.
  * Behavior for 304-type responses was changed not to update the
    Content-Encoding response header of the stored object.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1601640000">- Update to release 6.5.1
  * Bump the VRT_MAJOR_VERSION number defined in the vrt.h</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1625400000">- update to 6.6.0:
  * The ban_cutoff parameter now refers to the overall length of
    the ban list, including completed bans, where before only
    non-completed (?active?) bans were counted towards ban_cutoff.
  * Body bytes accounting has been fixed to always represent the
    number of body bytes moved on the wire, exclusive of
    protocol-specific overhead like HTTP/1 chunked encoding or
    HTTP/2 framing.
  * The connection close reason has been fixed to properly report
    SC_RESP_CLOSE where previously only SC_REQ_CLOSE was reported.
  * Unless the new validate_headers feature is disabled, all newly
    set headers are now validated to contain only characters
    allowed by RFC7230.
  * The filter_re, keep_re and get_re functions from the bundled
    cookie vmod have been changed to take the VCL_REGEX type. This
    implies that their regular expression arguments now need to be
    literal, not e.g. string.
  * The interface for private pointers in VMODs has been changed,
    the VRT backend interface has been changed, many filter
    (VDP/VFP) related signatures have been changed, and the
    stevedore API has been changed. (Details thereto, see online
    changelog.)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1628251200">- Update to release 6.6.1
  * Fix an HTTP/2.0 request smuggling vulnerability. [bnc#1188470]</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1638360000">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * varnish.service
  * varnishlog.service</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1652702400">- Update to release 7.1.0 [boo#1195188] [CVE-2022-23959]
  * VCL: It is now possible to assign a BLOB value to a BODY
    variable, in addition to STRING as before.
  * VMOD: New STRING strftime(TIME time, STRING format) function
    for UTC formatting.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1660305600">- Update to release 7.1.1 [boo#1202350] [CVE-2022-38150]
  * Resolve a denial of service attack involving reason phrases.</changelog>
</package>
<package pkgid="c409a6dc2d243fed5e7c597ac610ad8cfddcf9999832e4d215effcfe620f99eb" name="varnish-devel" arch="aarch64">
  <version epoch="0" ver="7.2.1" rel="bp154.2.9.1"/>
  <changelog author="Samu Voutilainen &lt;smar@smar.fi&gt;" date="1553688000">- Updated to 6.2.0
  * Added a thread pool watchdog which will restart the worker
    process if scheduling tasks onto worker threads appears
    stuck. The new parameter "thread_pool_watchdog" configures
    it.
- Disabled error for clobbering, which caused bogus
  error in varnishtest</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566820800">- Add uninit.patch.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1567598400">- Update to release 6.2.1
  * Bugfix for CVE-2019-15892 [boo#1149382]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1568721600">- Update to release 6.3.0
  * The Host: header is folded to lower-case in the builtin_vcl.
  * Improved performance of shared memory statistics counters.
  * Synthetic objects created from vcl_backend_error {} now
    replace existing stale objects as ordinary backend fetches
    would (for details see changes.rst)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1582632000">- Update to release 6.3.2
  * Fix a denial of service vulnerability when using the proxy
    protocol version 2.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1584446400">- Update to release 6.4.0
  * The MAIN.sess_drop counter is gone.
  * backend "none" was added for "no backend".
  * The hash algorithm of the hash director was changed, so
    backend selection will change once only when upgrading.
  * It is now possible for VMOD authors to customize the
    connection pooling of a dynamic backend.
  * For more, see changes.rst.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1591704000">- Update Git-Web repository link
- Set CFLAGS+=-fcommon.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1592913600">- Disable LTO, this randomly fails during link stage.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1600344000">- Update to release 6.5.0
  * `PRIV_TOP` is now thread-safe to support parallel ESI
    implementations.
  * varnishstat's JSON output format (-j option) has been changed.
  * Behavior for 304-type responses was changed not to update the
    Content-Encoding response header of the stored object.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1601640000">- Update to release 6.5.1
  * Bump the VRT_MAJOR_VERSION number defined in the vrt.h</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1625400000">- update to 6.6.0:
  * The ban_cutoff parameter now refers to the overall length of
    the ban list, including completed bans, where before only
    non-completed (?active?) bans were counted towards ban_cutoff.
  * Body bytes accounting has been fixed to always represent the
    number of body bytes moved on the wire, exclusive of
    protocol-specific overhead like HTTP/1 chunked encoding or
    HTTP/2 framing.
  * The connection close reason has been fixed to properly report
    SC_RESP_CLOSE where previously only SC_REQ_CLOSE was reported.
  * Unless the new validate_headers feature is disabled, all newly
    set headers are now validated to contain only characters
    allowed by RFC7230.
  * The filter_re, keep_re and get_re functions from the bundled
    cookie vmod have been changed to take the VCL_REGEX type. This
    implies that their regular expression arguments now need to be
    literal, not e.g. string.
  * The interface for private pointers in VMODs has been changed,
    the VRT backend interface has been changed, many filter
    (VDP/VFP) related signatures have been changed, and the
    stevedore API has been changed. (Details thereto, see online
    changelog.)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1628251200">- Update to release 6.6.1
  * Fix an HTTP/2.0 request smuggling vulnerability. [bnc#1188470]</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1638360000">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * varnish.service
  * varnishlog.service</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1652702400">- Update to release 7.1.0 [boo#1195188] [CVE-2022-23959]
  * VCL: It is now possible to assign a BLOB value to a BODY
    variable, in addition to STRING as before.
  * VMOD: New STRING strftime(TIME time, STRING format) function
    for UTC formatting.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1660305600">- Update to release 7.1.1 [boo#1202350] [CVE-2022-38150]
  * Resolve a denial of service attack involving reason phrases.</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1663502400">- Fix logrotate
- Add service reload</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1663588800">- Fix varnish.service stop</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1663761600">- Make reload fail nicely on vcl syntax error
- Set TasksMax=16384 because default thread_pool_max is 5000</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1667044800">- update to 7.2.0:
  * Functions ``VRT_AddVDP()``, ``VRT_AddVFP()``,
    ``VRT_RemoveVDP()`` and ``VRT_RemoveVFP()`` are deprecated.
  * Cookie headers generated by vmod_cookie no longer have a
    spurious trailing semicolon at the end of the string. This
    could break VCL relying on the previous incorrect behavior.
  * The ``SessClose`` and ``BackendClose`` reason ``rx_body``,
    which previously output ``Failure receiving req.body``, has
    been rewritten to ``Failure receiving body``.
  * Prototypical Varnish Extensions (VEXT). Similar to VMODs, a
    VEXT is loaded by the cache process. Unlike VMODs that have
    the combined lifetime of all the VCLs that reference them, a
    VEXT has the lifetime of the cache process itself. There are
    no built-in extensions so far.
  * Duration parameters can optionally take a unit, with the same
    syntax as duration units in VCL.
  * Calls to ``VRT_CacheReqBody()`` and ``std.cache_req_body``
    from outside client vcl subs now fail properly instead of
    triggering an assertion failure.
  * New "B" string for the package branch in ``VCS_String()``.
    For the 7.2.0 version, it would yield the 7.2 branch.
  * The new ``vcc_feature`` bits parameter replaces previous
    ``vcc_*`` boolean parameters. The latter still exist as
    deprecated aliases.
  * The ``-k`` option from ``varnishlog`` is now supported by
    ``varnishncsa``.
  * New functions ``std.now()`` and ``std.timed_call()`` in
    vmod_std.
  * New ``MAIN.shm_bytes`` counter.
  * A ``req.http.via`` header is set before entering
    ``vcl_recv``. Via headers are generated using the
    ``server.identity`` value. It defaults to the host name and
    can be turned into a pseudonym with the ``varnishd -i``
    option. Via headers are appended in both directions, to work
    with other hops that may advertise themselves.
  * A ``resp.http.via`` header is no longer overwritten by
    varnish, but rather appended to.
  * The ``server.identity`` syntax is now limited to a "token" as
    defined in the HTTP grammar to be suitable for Via headers.
  * In ``varnishtest`` a Varnish instance will use its VTC
    instance name as its instance name (``varnishd -i``) by
    default for predictable Via headers in test cases.
  * VMOD and VEXT authors can use functions from ``vnum.h``.
  * Do not filter pseudo-headers as regular headers.
  * The termination rules for ``WRK_BgThread()`` were relaxed to
    allow VMODs to use it.
  * ``(struct worker).handling`` has been moved to the newly
    introduced ``struct wrk_vpi`` and replaced by a pointer to
    it, as well as ``(struct vrt_ctx).handling`` has been
    replaced by that pointer. ``struct wrk_vpi`` is for state at
    the interface between VRT and VGC and, in particular, is not
    const as ``struct vrt_ctx`` aka ``VRT_CTX``.
  * Panics now contain information about VCL source files and
    lines.
  * The ``Begin`` log record has a 4th field for subtasks like
    ESI sub-requests.
  * The ``-E`` option for log utilities now works as documented,
    with any type of sub-task based on the ``Begin[4]`` field.
    This covers ESI like before, and sub-tasks spawned by VMODs
    (provided that they log the new field).
  * No more ``req.http.transfer-encoding`` for ESI sub-requests.
  * The thread pool reserve is now limited to tasks that can be
    queued. A backend background fetch is no longer eligible for
    queueing. It would otherwise slow a grace hit down
    significantly when thread pools are saturated.
  * The unused ``fetch_no_thread`` counter was renamed to
    ``bgfetch_no_thread`` because regular backend fetch tasks are
    always scheduled.
  * The macros ``FEATURE()``, ``EXPERIMENT()``, ``DO_DEBUG()``,
    ``MGT_FEATURE()``, ``MGT_EXPERIMENT()``, ``MGT_DO_DEBUG()``
    and ``MGT_VCC_FEATURE()`` now return a boolean value (``0``
    or ``1``) instead of the (private) flag value.
  * A regression in the transport code led MAIN.client_req to be
    incremented for requests coming back from the waiting list,
    it was fixed.
- Delete varnish-5.1.2-add-fallthrough-comments.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1667995200">- Update to release 7.2.1
  * Attempts to mark well-known headers like Content-Length and
    Host hop-by-hop through a Connection-header will now cause a
    400 "Bad request" response.
    (VSV00010, CVE-2022-45059, boo#1205243)
  * Apply the same character set rules to HTTP/2 pseudo-headers
    as is done on the corresponding HTTP/1 request-line field
    parsing. (VSV00011, CVE-2022-45060, boo#1205242)</changelog>
</package>
<package pkgid="6f885947a78ce57dbd5de021557f1cc22b2df78445fc0c196d6a1f59bae79e06" name="varnish-devel" arch="i586">
  <version epoch="0" ver="7.2.1" rel="bp154.2.9.1"/>
  <changelog author="Samu Voutilainen &lt;smar@smar.fi&gt;" date="1553688000">- Updated to 6.2.0
  * Added a thread pool watchdog which will restart the worker
    process if scheduling tasks onto worker threads appears
    stuck. The new parameter "thread_pool_watchdog" configures
    it.
- Disabled error for clobbering, which caused bogus
  error in varnishtest</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566820800">- Add uninit.patch.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1567598400">- Update to release 6.2.1
  * Bugfix for CVE-2019-15892 [boo#1149382]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1568721600">- Update to release 6.3.0
  * The Host: header is folded to lower-case in the builtin_vcl.
  * Improved performance of shared memory statistics counters.
  * Synthetic objects created from vcl_backend_error {} now
    replace existing stale objects as ordinary backend fetches
    would (for details see changes.rst)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1582632000">- Update to release 6.3.2
  * Fix a denial of service vulnerability when using the proxy
    protocol version 2.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1584446400">- Update to release 6.4.0
  * The MAIN.sess_drop counter is gone.
  * backend "none" was added for "no backend".
  * The hash algorithm of the hash director was changed, so
    backend selection will change once only when upgrading.
  * It is now possible for VMOD authors to customize the
    connection pooling of a dynamic backend.
  * For more, see changes.rst.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1591704000">- Update Git-Web repository link
- Set CFLAGS+=-fcommon.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1592913600">- Disable LTO, this randomly fails during link stage.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1600344000">- Update to release 6.5.0
  * `PRIV_TOP` is now thread-safe to support parallel ESI
    implementations.
  * varnishstat's JSON output format (-j option) has been changed.
  * Behavior for 304-type responses was changed not to update the
    Content-Encoding response header of the stored object.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1601640000">- Update to release 6.5.1
  * Bump the VRT_MAJOR_VERSION number defined in the vrt.h</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1625400000">- update to 6.6.0:
  * The ban_cutoff parameter now refers to the overall length of
    the ban list, including completed bans, where before only
    non-completed (?active?) bans were counted towards ban_cutoff.
  * Body bytes accounting has been fixed to always represent the
    number of body bytes moved on the wire, exclusive of
    protocol-specific overhead like HTTP/1 chunked encoding or
    HTTP/2 framing.
  * The connection close reason has been fixed to properly report
    SC_RESP_CLOSE where previously only SC_REQ_CLOSE was reported.
  * Unless the new validate_headers feature is disabled, all newly
    set headers are now validated to contain only characters
    allowed by RFC7230.
  * The filter_re, keep_re and get_re functions from the bundled
    cookie vmod have been changed to take the VCL_REGEX type. This
    implies that their regular expression arguments now need to be
    literal, not e.g. string.
  * The interface for private pointers in VMODs has been changed,
    the VRT backend interface has been changed, many filter
    (VDP/VFP) related signatures have been changed, and the
    stevedore API has been changed. (Details thereto, see online
    changelog.)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1628251200">- Update to release 6.6.1
  * Fix an HTTP/2.0 request smuggling vulnerability. [bnc#1188470]</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1638360000">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * varnish.service
  * varnishlog.service</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1652702400">- Update to release 7.1.0 [boo#1195188] [CVE-2022-23959]
  * VCL: It is now possible to assign a BLOB value to a BODY
    variable, in addition to STRING as before.
  * VMOD: New STRING strftime(TIME time, STRING format) function
    for UTC formatting.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1660305600">- Update to release 7.1.1 [boo#1202350] [CVE-2022-38150]
  * Resolve a denial of service attack involving reason phrases.</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1663502400">- Fix logrotate
- Add service reload</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1663588800">- Fix varnish.service stop</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1663761600">- Make reload fail nicely on vcl syntax error
- Set TasksMax=16384 because default thread_pool_max is 5000</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1667044800">- update to 7.2.0:
  * Functions ``VRT_AddVDP()``, ``VRT_AddVFP()``,
    ``VRT_RemoveVDP()`` and ``VRT_RemoveVFP()`` are deprecated.
  * Cookie headers generated by vmod_cookie no longer have a
    spurious trailing semicolon at the end of the string. This
    could break VCL relying on the previous incorrect behavior.
  * The ``SessClose`` and ``BackendClose`` reason ``rx_body``,
    which previously output ``Failure receiving req.body``, has
    been rewritten to ``Failure receiving body``.
  * Prototypical Varnish Extensions (VEXT). Similar to VMODs, a
    VEXT is loaded by the cache process. Unlike VMODs that have
    the combined lifetime of all the VCLs that reference them, a
    VEXT has the lifetime of the cache process itself. There are
    no built-in extensions so far.
  * Duration parameters can optionally take a unit, with the same
    syntax as duration units in VCL.
  * Calls to ``VRT_CacheReqBody()`` and ``std.cache_req_body``
    from outside client vcl subs now fail properly instead of
    triggering an assertion failure.
  * New "B" string for the package branch in ``VCS_String()``.
    For the 7.2.0 version, it would yield the 7.2 branch.
  * The new ``vcc_feature`` bits parameter replaces previous
    ``vcc_*`` boolean parameters. The latter still exist as
    deprecated aliases.
  * The ``-k`` option from ``varnishlog`` is now supported by
    ``varnishncsa``.
  * New functions ``std.now()`` and ``std.timed_call()`` in
    vmod_std.
  * New ``MAIN.shm_bytes`` counter.
  * A ``req.http.via`` header is set before entering
    ``vcl_recv``. Via headers are generated using the
    ``server.identity`` value. It defaults to the host name and
    can be turned into a pseudonym with the ``varnishd -i``
    option. Via headers are appended in both directions, to work
    with other hops that may advertise themselves.
  * A ``resp.http.via`` header is no longer overwritten by
    varnish, but rather appended to.
  * The ``server.identity`` syntax is now limited to a "token" as
    defined in the HTTP grammar to be suitable for Via headers.
  * In ``varnishtest`` a Varnish instance will use its VTC
    instance name as its instance name (``varnishd -i``) by
    default for predictable Via headers in test cases.
  * VMOD and VEXT authors can use functions from ``vnum.h``.
  * Do not filter pseudo-headers as regular headers.
  * The termination rules for ``WRK_BgThread()`` were relaxed to
    allow VMODs to use it.
  * ``(struct worker).handling`` has been moved to the newly
    introduced ``struct wrk_vpi`` and replaced by a pointer to
    it, as well as ``(struct vrt_ctx).handling`` has been
    replaced by that pointer. ``struct wrk_vpi`` is for state at
    the interface between VRT and VGC and, in particular, is not
    const as ``struct vrt_ctx`` aka ``VRT_CTX``.
  * Panics now contain information about VCL source files and
    lines.
  * The ``Begin`` log record has a 4th field for subtasks like
    ESI sub-requests.
  * The ``-E`` option for log utilities now works as documented,
    with any type of sub-task based on the ``Begin[4]`` field.
    This covers ESI like before, and sub-tasks spawned by VMODs
    (provided that they log the new field).
  * No more ``req.http.transfer-encoding`` for ESI sub-requests.
  * The thread pool reserve is now limited to tasks that can be
    queued. A backend background fetch is no longer eligible for
    queueing. It would otherwise slow a grace hit down
    significantly when thread pools are saturated.
  * The unused ``fetch_no_thread`` counter was renamed to
    ``bgfetch_no_thread`` because regular backend fetch tasks are
    always scheduled.
  * The macros ``FEATURE()``, ``EXPERIMENT()``, ``DO_DEBUG()``,
    ``MGT_FEATURE()``, ``MGT_EXPERIMENT()``, ``MGT_DO_DEBUG()``
    and ``MGT_VCC_FEATURE()`` now return a boolean value (``0``
    or ``1``) instead of the (private) flag value.
  * A regression in the transport code led MAIN.client_req to be
    incremented for requests coming back from the waiting list,
    it was fixed.
- Delete varnish-5.1.2-add-fallthrough-comments.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1667995200">- Update to release 7.2.1
  * Attempts to mark well-known headers like Content-Length and
    Host hop-by-hop through a Connection-header will now cause a
    400 "Bad request" response.
    (VSV00010, CVE-2022-45059, boo#1205243)
  * Apply the same character set rules to HTTP/2 pseudo-headers
    as is done on the corresponding HTTP/1 request-line field
    parsing. (VSV00011, CVE-2022-45060, boo#1205242)</changelog>
</package>
<package pkgid="92f084e6e9dd83c016aa232fd1d8300df358d9afc7b41f5af61e8ca34476892d" name="varnish-devel" arch="ppc64le">
  <version epoch="0" ver="7.2.1" rel="bp154.2.9.1"/>
  <changelog author="Samu Voutilainen &lt;smar@smar.fi&gt;" date="1553688000">- Updated to 6.2.0
  * Added a thread pool watchdog which will restart the worker
    process if scheduling tasks onto worker threads appears
    stuck. The new parameter "thread_pool_watchdog" configures
    it.
- Disabled error for clobbering, which caused bogus
  error in varnishtest</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566820800">- Add uninit.patch.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1567598400">- Update to release 6.2.1
  * Bugfix for CVE-2019-15892 [boo#1149382]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1568721600">- Update to release 6.3.0
  * The Host: header is folded to lower-case in the builtin_vcl.
  * Improved performance of shared memory statistics counters.
  * Synthetic objects created from vcl_backend_error {} now
    replace existing stale objects as ordinary backend fetches
    would (for details see changes.rst)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1582632000">- Update to release 6.3.2
  * Fix a denial of service vulnerability when using the proxy
    protocol version 2.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1584446400">- Update to release 6.4.0
  * The MAIN.sess_drop counter is gone.
  * backend "none" was added for "no backend".
  * The hash algorithm of the hash director was changed, so
    backend selection will change once only when upgrading.
  * It is now possible for VMOD authors to customize the
    connection pooling of a dynamic backend.
  * For more, see changes.rst.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1591704000">- Update Git-Web repository link
- Set CFLAGS+=-fcommon.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1592913600">- Disable LTO, this randomly fails during link stage.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1600344000">- Update to release 6.5.0
  * `PRIV_TOP` is now thread-safe to support parallel ESI
    implementations.
  * varnishstat's JSON output format (-j option) has been changed.
  * Behavior for 304-type responses was changed not to update the
    Content-Encoding response header of the stored object.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1601640000">- Update to release 6.5.1
  * Bump the VRT_MAJOR_VERSION number defined in the vrt.h</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1625400000">- update to 6.6.0:
  * The ban_cutoff parameter now refers to the overall length of
    the ban list, including completed bans, where before only
    non-completed (?active?) bans were counted towards ban_cutoff.
  * Body bytes accounting has been fixed to always represent the
    number of body bytes moved on the wire, exclusive of
    protocol-specific overhead like HTTP/1 chunked encoding or
    HTTP/2 framing.
  * The connection close reason has been fixed to properly report
    SC_RESP_CLOSE where previously only SC_REQ_CLOSE was reported.
  * Unless the new validate_headers feature is disabled, all newly
    set headers are now validated to contain only characters
    allowed by RFC7230.
  * The filter_re, keep_re and get_re functions from the bundled
    cookie vmod have been changed to take the VCL_REGEX type. This
    implies that their regular expression arguments now need to be
    literal, not e.g. string.
  * The interface for private pointers in VMODs has been changed,
    the VRT backend interface has been changed, many filter
    (VDP/VFP) related signatures have been changed, and the
    stevedore API has been changed. (Details thereto, see online
    changelog.)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1628251200">- Update to release 6.6.1
  * Fix an HTTP/2.0 request smuggling vulnerability. [bnc#1188470]</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1638360000">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * varnish.service
  * varnishlog.service</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1652702400">- Update to release 7.1.0 [boo#1195188] [CVE-2022-23959]
  * VCL: It is now possible to assign a BLOB value to a BODY
    variable, in addition to STRING as before.
  * VMOD: New STRING strftime(TIME time, STRING format) function
    for UTC formatting.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1660305600">- Update to release 7.1.1 [boo#1202350] [CVE-2022-38150]
  * Resolve a denial of service attack involving reason phrases.</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1663502400">- Fix logrotate
- Add service reload</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1663588800">- Fix varnish.service stop</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1663761600">- Make reload fail nicely on vcl syntax error
- Set TasksMax=16384 because default thread_pool_max is 5000</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1667044800">- update to 7.2.0:
  * Functions ``VRT_AddVDP()``, ``VRT_AddVFP()``,
    ``VRT_RemoveVDP()`` and ``VRT_RemoveVFP()`` are deprecated.
  * Cookie headers generated by vmod_cookie no longer have a
    spurious trailing semicolon at the end of the string. This
    could break VCL relying on the previous incorrect behavior.
  * The ``SessClose`` and ``BackendClose`` reason ``rx_body``,
    which previously output ``Failure receiving req.body``, has
    been rewritten to ``Failure receiving body``.
  * Prototypical Varnish Extensions (VEXT). Similar to VMODs, a
    VEXT is loaded by the cache process. Unlike VMODs that have
    the combined lifetime of all the VCLs that reference them, a
    VEXT has the lifetime of the cache process itself. There are
    no built-in extensions so far.
  * Duration parameters can optionally take a unit, with the same
    syntax as duration units in VCL.
  * Calls to ``VRT_CacheReqBody()`` and ``std.cache_req_body``
    from outside client vcl subs now fail properly instead of
    triggering an assertion failure.
  * New "B" string for the package branch in ``VCS_String()``.
    For the 7.2.0 version, it would yield the 7.2 branch.
  * The new ``vcc_feature`` bits parameter replaces previous
    ``vcc_*`` boolean parameters. The latter still exist as
    deprecated aliases.
  * The ``-k`` option from ``varnishlog`` is now supported by
    ``varnishncsa``.
  * New functions ``std.now()`` and ``std.timed_call()`` in
    vmod_std.
  * New ``MAIN.shm_bytes`` counter.
  * A ``req.http.via`` header is set before entering
    ``vcl_recv``. Via headers are generated using the
    ``server.identity`` value. It defaults to the host name and
    can be turned into a pseudonym with the ``varnishd -i``
    option. Via headers are appended in both directions, to work
    with other hops that may advertise themselves.
  * A ``resp.http.via`` header is no longer overwritten by
    varnish, but rather appended to.
  * The ``server.identity`` syntax is now limited to a "token" as
    defined in the HTTP grammar to be suitable for Via headers.
  * In ``varnishtest`` a Varnish instance will use its VTC
    instance name as its instance name (``varnishd -i``) by
    default for predictable Via headers in test cases.
  * VMOD and VEXT authors can use functions from ``vnum.h``.
  * Do not filter pseudo-headers as regular headers.
  * The termination rules for ``WRK_BgThread()`` were relaxed to
    allow VMODs to use it.
  * ``(struct worker).handling`` has been moved to the newly
    introduced ``struct wrk_vpi`` and replaced by a pointer to
    it, as well as ``(struct vrt_ctx).handling`` has been
    replaced by that pointer. ``struct wrk_vpi`` is for state at
    the interface between VRT and VGC and, in particular, is not
    const as ``struct vrt_ctx`` aka ``VRT_CTX``.
  * Panics now contain information about VCL source files and
    lines.
  * The ``Begin`` log record has a 4th field for subtasks like
    ESI sub-requests.
  * The ``-E`` option for log utilities now works as documented,
    with any type of sub-task based on the ``Begin[4]`` field.
    This covers ESI like before, and sub-tasks spawned by VMODs
    (provided that they log the new field).
  * No more ``req.http.transfer-encoding`` for ESI sub-requests.
  * The thread pool reserve is now limited to tasks that can be
    queued. A backend background fetch is no longer eligible for
    queueing. It would otherwise slow a grace hit down
    significantly when thread pools are saturated.
  * The unused ``fetch_no_thread`` counter was renamed to
    ``bgfetch_no_thread`` because regular backend fetch tasks are
    always scheduled.
  * The macros ``FEATURE()``, ``EXPERIMENT()``, ``DO_DEBUG()``,
    ``MGT_FEATURE()``, ``MGT_EXPERIMENT()``, ``MGT_DO_DEBUG()``
    and ``MGT_VCC_FEATURE()`` now return a boolean value (``0``
    or ``1``) instead of the (private) flag value.
  * A regression in the transport code led MAIN.client_req to be
    incremented for requests coming back from the waiting list,
    it was fixed.
- Delete varnish-5.1.2-add-fallthrough-comments.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1667995200">- Update to release 7.2.1
  * Attempts to mark well-known headers like Content-Length and
    Host hop-by-hop through a Connection-header will now cause a
    400 "Bad request" response.
    (VSV00010, CVE-2022-45059, boo#1205243)
  * Apply the same character set rules to HTTP/2 pseudo-headers
    as is done on the corresponding HTTP/1 request-line field
    parsing. (VSV00011, CVE-2022-45060, boo#1205242)</changelog>
</package>
<package pkgid="c135bae336424386a2fab052b335639fa81eb28b70bc2a7e02d605041652cddc" name="varnish-devel" arch="s390x">
  <version epoch="0" ver="7.2.1" rel="bp154.2.9.1"/>
  <changelog author="Samu Voutilainen &lt;smar@smar.fi&gt;" date="1553688000">- Updated to 6.2.0
  * Added a thread pool watchdog which will restart the worker
    process if scheduling tasks onto worker threads appears
    stuck. The new parameter "thread_pool_watchdog" configures
    it.
- Disabled error for clobbering, which caused bogus
  error in varnishtest</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566820800">- Add uninit.patch.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1567598400">- Update to release 6.2.1
  * Bugfix for CVE-2019-15892 [boo#1149382]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1568721600">- Update to release 6.3.0
  * The Host: header is folded to lower-case in the builtin_vcl.
  * Improved performance of shared memory statistics counters.
  * Synthetic objects created from vcl_backend_error {} now
    replace existing stale objects as ordinary backend fetches
    would (for details see changes.rst)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1582632000">- Update to release 6.3.2
  * Fix a denial of service vulnerability when using the proxy
    protocol version 2.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1584446400">- Update to release 6.4.0
  * The MAIN.sess_drop counter is gone.
  * backend "none" was added for "no backend".
  * The hash algorithm of the hash director was changed, so
    backend selection will change once only when upgrading.
  * It is now possible for VMOD authors to customize the
    connection pooling of a dynamic backend.
  * For more, see changes.rst.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1591704000">- Update Git-Web repository link
- Set CFLAGS+=-fcommon.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1592913600">- Disable LTO, this randomly fails during link stage.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1600344000">- Update to release 6.5.0
  * `PRIV_TOP` is now thread-safe to support parallel ESI
    implementations.
  * varnishstat's JSON output format (-j option) has been changed.
  * Behavior for 304-type responses was changed not to update the
    Content-Encoding response header of the stored object.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1601640000">- Update to release 6.5.1
  * Bump the VRT_MAJOR_VERSION number defined in the vrt.h</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1625400000">- update to 6.6.0:
  * The ban_cutoff parameter now refers to the overall length of
    the ban list, including completed bans, where before only
    non-completed (?active?) bans were counted towards ban_cutoff.
  * Body bytes accounting has been fixed to always represent the
    number of body bytes moved on the wire, exclusive of
    protocol-specific overhead like HTTP/1 chunked encoding or
    HTTP/2 framing.
  * The connection close reason has been fixed to properly report
    SC_RESP_CLOSE where previously only SC_REQ_CLOSE was reported.
  * Unless the new validate_headers feature is disabled, all newly
    set headers are now validated to contain only characters
    allowed by RFC7230.
  * The filter_re, keep_re and get_re functions from the bundled
    cookie vmod have been changed to take the VCL_REGEX type. This
    implies that their regular expression arguments now need to be
    literal, not e.g. string.
  * The interface for private pointers in VMODs has been changed,
    the VRT backend interface has been changed, many filter
    (VDP/VFP) related signatures have been changed, and the
    stevedore API has been changed. (Details thereto, see online
    changelog.)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1628251200">- Update to release 6.6.1
  * Fix an HTTP/2.0 request smuggling vulnerability. [bnc#1188470]</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1638360000">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * varnish.service
  * varnishlog.service</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1652702400">- Update to release 7.1.0 [boo#1195188] [CVE-2022-23959]
  * VCL: It is now possible to assign a BLOB value to a BODY
    variable, in addition to STRING as before.
  * VMOD: New STRING strftime(TIME time, STRING format) function
    for UTC formatting.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1660305600">- Update to release 7.1.1 [boo#1202350] [CVE-2022-38150]
  * Resolve a denial of service attack involving reason phrases.</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1663502400">- Fix logrotate
- Add service reload</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1663588800">- Fix varnish.service stop</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1663761600">- Make reload fail nicely on vcl syntax error
- Set TasksMax=16384 because default thread_pool_max is 5000</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1667044800">- update to 7.2.0:
  * Functions ``VRT_AddVDP()``, ``VRT_AddVFP()``,
    ``VRT_RemoveVDP()`` and ``VRT_RemoveVFP()`` are deprecated.
  * Cookie headers generated by vmod_cookie no longer have a
    spurious trailing semicolon at the end of the string. This
    could break VCL relying on the previous incorrect behavior.
  * The ``SessClose`` and ``BackendClose`` reason ``rx_body``,
    which previously output ``Failure receiving req.body``, has
    been rewritten to ``Failure receiving body``.
  * Prototypical Varnish Extensions (VEXT). Similar to VMODs, a
    VEXT is loaded by the cache process. Unlike VMODs that have
    the combined lifetime of all the VCLs that reference them, a
    VEXT has the lifetime of the cache process itself. There are
    no built-in extensions so far.
  * Duration parameters can optionally take a unit, with the same
    syntax as duration units in VCL.
  * Calls to ``VRT_CacheReqBody()`` and ``std.cache_req_body``
    from outside client vcl subs now fail properly instead of
    triggering an assertion failure.
  * New "B" string for the package branch in ``VCS_String()``.
    For the 7.2.0 version, it would yield the 7.2 branch.
  * The new ``vcc_feature`` bits parameter replaces previous
    ``vcc_*`` boolean parameters. The latter still exist as
    deprecated aliases.
  * The ``-k`` option from ``varnishlog`` is now supported by
    ``varnishncsa``.
  * New functions ``std.now()`` and ``std.timed_call()`` in
    vmod_std.
  * New ``MAIN.shm_bytes`` counter.
  * A ``req.http.via`` header is set before entering
    ``vcl_recv``. Via headers are generated using the
    ``server.identity`` value. It defaults to the host name and
    can be turned into a pseudonym with the ``varnishd -i``
    option. Via headers are appended in both directions, to work
    with other hops that may advertise themselves.
  * A ``resp.http.via`` header is no longer overwritten by
    varnish, but rather appended to.
  * The ``server.identity`` syntax is now limited to a "token" as
    defined in the HTTP grammar to be suitable for Via headers.
  * In ``varnishtest`` a Varnish instance will use its VTC
    instance name as its instance name (``varnishd -i``) by
    default for predictable Via headers in test cases.
  * VMOD and VEXT authors can use functions from ``vnum.h``.
  * Do not filter pseudo-headers as regular headers.
  * The termination rules for ``WRK_BgThread()`` were relaxed to
    allow VMODs to use it.
  * ``(struct worker).handling`` has been moved to the newly
    introduced ``struct wrk_vpi`` and replaced by a pointer to
    it, as well as ``(struct vrt_ctx).handling`` has been
    replaced by that pointer. ``struct wrk_vpi`` is for state at
    the interface between VRT and VGC and, in particular, is not
    const as ``struct vrt_ctx`` aka ``VRT_CTX``.
  * Panics now contain information about VCL source files and
    lines.
  * The ``Begin`` log record has a 4th field for subtasks like
    ESI sub-requests.
  * The ``-E`` option for log utilities now works as documented,
    with any type of sub-task based on the ``Begin[4]`` field.
    This covers ESI like before, and sub-tasks spawned by VMODs
    (provided that they log the new field).
  * No more ``req.http.transfer-encoding`` for ESI sub-requests.
  * The thread pool reserve is now limited to tasks that can be
    queued. A backend background fetch is no longer eligible for
    queueing. It would otherwise slow a grace hit down
    significantly when thread pools are saturated.
  * The unused ``fetch_no_thread`` counter was renamed to
    ``bgfetch_no_thread`` because regular backend fetch tasks are
    always scheduled.
  * The macros ``FEATURE()``, ``EXPERIMENT()``, ``DO_DEBUG()``,
    ``MGT_FEATURE()``, ``MGT_EXPERIMENT()``, ``MGT_DO_DEBUG()``
    and ``MGT_VCC_FEATURE()`` now return a boolean value (``0``
    or ``1``) instead of the (private) flag value.
  * A regression in the transport code led MAIN.client_req to be
    incremented for requests coming back from the waiting list,
    it was fixed.
- Delete varnish-5.1.2-add-fallthrough-comments.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1667995200">- Update to release 7.2.1
  * Attempts to mark well-known headers like Content-Length and
    Host hop-by-hop through a Connection-header will now cause a
    400 "Bad request" response.
    (VSV00010, CVE-2022-45059, boo#1205243)
  * Apply the same character set rules to HTTP/2 pseudo-headers
    as is done on the corresponding HTTP/1 request-line field
    parsing. (VSV00011, CVE-2022-45060, boo#1205242)</changelog>
</package>
<package pkgid="35a8849d5638802f1a189829c6de8d27596782ca02ee6a0b4d08d5ba157e50f1" name="varnish-devel" arch="x86_64">
  <version epoch="0" ver="7.2.1" rel="bp154.2.9.1"/>
  <changelog author="Samu Voutilainen &lt;smar@smar.fi&gt;" date="1553688000">- Updated to 6.2.0
  * Added a thread pool watchdog which will restart the worker
    process if scheduling tasks onto worker threads appears
    stuck. The new parameter "thread_pool_watchdog" configures
    it.
- Disabled error for clobbering, which caused bogus
  error in varnishtest</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566820800">- Add uninit.patch.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1567598400">- Update to release 6.2.1
  * Bugfix for CVE-2019-15892 [boo#1149382]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1568721600">- Update to release 6.3.0
  * The Host: header is folded to lower-case in the builtin_vcl.
  * Improved performance of shared memory statistics counters.
  * Synthetic objects created from vcl_backend_error {} now
    replace existing stale objects as ordinary backend fetches
    would (for details see changes.rst)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1582632000">- Update to release 6.3.2
  * Fix a denial of service vulnerability when using the proxy
    protocol version 2.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1584446400">- Update to release 6.4.0
  * The MAIN.sess_drop counter is gone.
  * backend "none" was added for "no backend".
  * The hash algorithm of the hash director was changed, so
    backend selection will change once only when upgrading.
  * It is now possible for VMOD authors to customize the
    connection pooling of a dynamic backend.
  * For more, see changes.rst.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1591704000">- Update Git-Web repository link
- Set CFLAGS+=-fcommon.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1592913600">- Disable LTO, this randomly fails during link stage.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1600344000">- Update to release 6.5.0
  * `PRIV_TOP` is now thread-safe to support parallel ESI
    implementations.
  * varnishstat's JSON output format (-j option) has been changed.
  * Behavior for 304-type responses was changed not to update the
    Content-Encoding response header of the stored object.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1601640000">- Update to release 6.5.1
  * Bump the VRT_MAJOR_VERSION number defined in the vrt.h</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1625400000">- update to 6.6.0:
  * The ban_cutoff parameter now refers to the overall length of
    the ban list, including completed bans, where before only
    non-completed (?active?) bans were counted towards ban_cutoff.
  * Body bytes accounting has been fixed to always represent the
    number of body bytes moved on the wire, exclusive of
    protocol-specific overhead like HTTP/1 chunked encoding or
    HTTP/2 framing.
  * The connection close reason has been fixed to properly report
    SC_RESP_CLOSE where previously only SC_REQ_CLOSE was reported.
  * Unless the new validate_headers feature is disabled, all newly
    set headers are now validated to contain only characters
    allowed by RFC7230.
  * The filter_re, keep_re and get_re functions from the bundled
    cookie vmod have been changed to take the VCL_REGEX type. This
    implies that their regular expression arguments now need to be
    literal, not e.g. string.
  * The interface for private pointers in VMODs has been changed,
    the VRT backend interface has been changed, many filter
    (VDP/VFP) related signatures have been changed, and the
    stevedore API has been changed. (Details thereto, see online
    changelog.)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1628251200">- Update to release 6.6.1
  * Fix an HTTP/2.0 request smuggling vulnerability. [bnc#1188470]</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1638360000">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * varnish.service
  * varnishlog.service</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1652702400">- Update to release 7.1.0 [boo#1195188] [CVE-2022-23959]
  * VCL: It is now possible to assign a BLOB value to a BODY
    variable, in addition to STRING as before.
  * VMOD: New STRING strftime(TIME time, STRING format) function
    for UTC formatting.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1660305600">- Update to release 7.1.1 [boo#1202350] [CVE-2022-38150]
  * Resolve a denial of service attack involving reason phrases.</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1663502400">- Fix logrotate
- Add service reload</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1663588800">- Fix varnish.service stop</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1663761600">- Make reload fail nicely on vcl syntax error
- Set TasksMax=16384 because default thread_pool_max is 5000</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1667044800">- update to 7.2.0:
  * Functions ``VRT_AddVDP()``, ``VRT_AddVFP()``,
    ``VRT_RemoveVDP()`` and ``VRT_RemoveVFP()`` are deprecated.
  * Cookie headers generated by vmod_cookie no longer have a
    spurious trailing semicolon at the end of the string. This
    could break VCL relying on the previous incorrect behavior.
  * The ``SessClose`` and ``BackendClose`` reason ``rx_body``,
    which previously output ``Failure receiving req.body``, has
    been rewritten to ``Failure receiving body``.
  * Prototypical Varnish Extensions (VEXT). Similar to VMODs, a
    VEXT is loaded by the cache process. Unlike VMODs that have
    the combined lifetime of all the VCLs that reference them, a
    VEXT has the lifetime of the cache process itself. There are
    no built-in extensions so far.
  * Duration parameters can optionally take a unit, with the same
    syntax as duration units in VCL.
  * Calls to ``VRT_CacheReqBody()`` and ``std.cache_req_body``
    from outside client vcl subs now fail properly instead of
    triggering an assertion failure.
  * New "B" string for the package branch in ``VCS_String()``.
    For the 7.2.0 version, it would yield the 7.2 branch.
  * The new ``vcc_feature`` bits parameter replaces previous
    ``vcc_*`` boolean parameters. The latter still exist as
    deprecated aliases.
  * The ``-k`` option from ``varnishlog`` is now supported by
    ``varnishncsa``.
  * New functions ``std.now()`` and ``std.timed_call()`` in
    vmod_std.
  * New ``MAIN.shm_bytes`` counter.
  * A ``req.http.via`` header is set before entering
    ``vcl_recv``. Via headers are generated using the
    ``server.identity`` value. It defaults to the host name and
    can be turned into a pseudonym with the ``varnishd -i``
    option. Via headers are appended in both directions, to work
    with other hops that may advertise themselves.
  * A ``resp.http.via`` header is no longer overwritten by
    varnish, but rather appended to.
  * The ``server.identity`` syntax is now limited to a "token" as
    defined in the HTTP grammar to be suitable for Via headers.
  * In ``varnishtest`` a Varnish instance will use its VTC
    instance name as its instance name (``varnishd -i``) by
    default for predictable Via headers in test cases.
  * VMOD and VEXT authors can use functions from ``vnum.h``.
  * Do not filter pseudo-headers as regular headers.
  * The termination rules for ``WRK_BgThread()`` were relaxed to
    allow VMODs to use it.
  * ``(struct worker).handling`` has been moved to the newly
    introduced ``struct wrk_vpi`` and replaced by a pointer to
    it, as well as ``(struct vrt_ctx).handling`` has been
    replaced by that pointer. ``struct wrk_vpi`` is for state at
    the interface between VRT and VGC and, in particular, is not
    const as ``struct vrt_ctx`` aka ``VRT_CTX``.
  * Panics now contain information about VCL source files and
    lines.
  * The ``Begin`` log record has a 4th field for subtasks like
    ESI sub-requests.
  * The ``-E`` option for log utilities now works as documented,
    with any type of sub-task based on the ``Begin[4]`` field.
    This covers ESI like before, and sub-tasks spawned by VMODs
    (provided that they log the new field).
  * No more ``req.http.transfer-encoding`` for ESI sub-requests.
  * The thread pool reserve is now limited to tasks that can be
    queued. A backend background fetch is no longer eligible for
    queueing. It would otherwise slow a grace hit down
    significantly when thread pools are saturated.
  * The unused ``fetch_no_thread`` counter was renamed to
    ``bgfetch_no_thread`` because regular backend fetch tasks are
    always scheduled.
  * The macros ``FEATURE()``, ``EXPERIMENT()``, ``DO_DEBUG()``,
    ``MGT_FEATURE()``, ``MGT_EXPERIMENT()``, ``MGT_DO_DEBUG()``
    and ``MGT_VCC_FEATURE()`` now return a boolean value (``0``
    or ``1``) instead of the (private) flag value.
  * A regression in the transport code led MAIN.client_req to be
    incremented for requests coming back from the waiting list,
    it was fixed.
- Delete varnish-5.1.2-add-fallthrough-comments.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1667995200">- Update to release 7.2.1
  * Attempts to mark well-known headers like Content-Length and
    Host hop-by-hop through a Connection-header will now cause a
    400 "Bad request" response.
    (VSV00010, CVE-2022-45059, boo#1205243)
  * Apply the same character set rules to HTTP/2 pseudo-headers
    as is done on the corresponding HTTP/1 request-line field
    parsing. (VSV00011, CVE-2022-45060, boo#1205242)</changelog>
</package>
<package pkgid="b545d2024cf62f52073136f241873cfcc33fa5c95facb3e257a3d7079b51859a" name="vlc" arch="aarch64">
  <version epoch="0" ver="3.0.18" rel="bp154.2.3.1"/>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1616760000">- Add vlc-gcc11.patch: Fix build using gcc11 (boo#1181918).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1616760001">- Guard post scriptlets to only run %{_libdir}/vlc/vlc-cache-gen if
  it already (or still, in case of uninstall) exists.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1620129600">- Update to version 3.0.13:
  + Demux:
  - Adaptive: fix artefacts in HLS streams with wrong profiles/levels
  - Fix regression on some MP4 files for the audio track
  - Fix MPGA and ADTS probing in TS files
  - Fix Flac inside AVI files
  - Fix VP9/Webm artefacts when seeking
  + Codec:
  - Support SSA text scaling
  - Fix rotation on Android rotation
  - Fix WebVTT subtitles that start at 00:00
  + Access:
  - Update libnfs to support NFSv4
  - Improve SMB2 integration
  - Fix Blu-ray files using Unicode names on Windows
  - Disable mcast lookups on Android for RTSP playback
  + Video Output: Rework the D3D11 rendering wait, to fix
    choppiness on display
  + Interfaces:
  - Fix VLC getting stuck on close on X11 (#21875)
  - Improve RTL on preferences on macOS
  - Add mousewheel horizontal axis control
  - Fix crash on exit on macOS
  - Fix sizing of the fullscreen controls on macOS
  + Misc:
  - Improve MIDI fonts search on Linux
  - Update Soundcloud, Youtube, liveleak
  - Fix compilation with GCC11
  - Fix input-slave option for subtitles
  + Updated translations.
- Drop vlc-gcc11.patch: fixed upstream.
- Extend vlc-srto_tsbpddelay.patch: allow srt &gt;= 1.3 for openSUSE.</changelog>
  <changelog author="Fusion Future &lt;qydwhotmail@gmail.com&gt;" date="1624104000">- Update to version 3.0.16:
  + Video Output: Fix a D3D11 crash on Windows 8/8.1.
  + Access: Fix RTSP server timeout handling.
  + Interfaces: macOS: Add touchbar support.
  + Misc: Multiple settings improvements.
- Changes from version 3.0.15:
  + Core: Add Opus &amp; Alac wave format mappings.
  + Access: Fix opening DVD folders with non-ascii characters.
  + Demux:
  - Fix asf regression with broadcast streams.
  - MP4: Fix audio drop on seek.
  + Video Output:
  - Fix seek &amp; volume sliders overlapping with subtitles.
  - Fix delays when seeking with D3D11.
  + Text renderer: Improve freetype fonts outlining.
  + Misc: Fix GnuTLS support for Windows XP.
- Changes from version 3.0.14:
  + Core:
  - Fix double loading of slave input.
  - Fix an issue causing the auto-updater not to launch the new
    version installer.
- Add vlc-get-addr-by-ref-from-getConnectionEndpointAddress.patch:
  The maintainers of live555 changed connectionEndpointAddresss to
  getConnectionEndpointAddress, which now provides the address
  value by reference.
- Rebase vlc-srto_tsbpddelay.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1645531200">- Guard --enable-libplacebo configure parameter with is_opensuse:
  the buildrequires is also guarded the same way.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1645617600">- BuildRequires pkgconfig(smbclient) instead of smbclient-devel:
  smbclient-devel was merged into samba-devel, and we do not want
  to care for actual package names.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1646654400">- Update to version 3.0.17:
  + Core:
  * Fix a regression in parsing secondary source MRLs
  * Allow brackets in path part of URLs
  + Access:
  * Fix support for screen capture on macOS with avcapture
  * Fix closing of HTTP 1.x connections
  * Improve HTTP2 memory usage
  * Improve AVCapture module
  * Improve AudioCD support (audio/data mixed mode, musicbrainz)
  * Improve SMB compatibility by changing the read size
  * Several improvements on the SRT modules (including streamID)
  + Decoders/Packetizers:
  * Add support for DTS LBR
  * Fix some HEVC hardware decoding on Windows and crashes when aspect ratio changes
  * Fix hardware decoding for some AMD GPU drivers
  * Add support for new Fourcc for E-AC3, AV1, GeoVision
  * Fix crashes with VP9 streams
  * Fix styling issues with subs tx3g (mp4) tracks
  * Fix playback of live AV1 streams
  + Audio Output:
  * iOS/tvOS: add support for spatial audio
  * macOS: fix some channels ordering for &gt; 5.1 channels
  * Android: rework audio volume management
  + Video Output:
  * Fix a D3D11 crash when the stream changes aspect ratio
  + Demux:
  * Major overhaul of the adaptive streaming stack
  * Support for DAV video files
  * Add WebP image mapping
  * Fix missing audio start of Opus audio in MKV/WebM
  * Fix an infinite loop in MP4
  * Fix attachments extractions in ogg files
  * Support Uncompressed audio in mp4 (ISO/IEC 23003-5)
  * Fix some lip sync issue in rare MPEG-TS streams
  + Interface:
  * Qt/macOS: Fixup user provided URLs
  * Add safe area handling on macOS
  * Qt: improve preferences search
  * Qt: fix --no-mouse-events option
  + Misc:
  * Update YouTube script
  * Fix Icecast directory parsing which could lead to missing entries
  * Improve UPnP compatibility with some servers
- Drop vlc-srto_tsbpddelay.patch: fixed upstream.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1646913600">- Disable libnfs and soxr integration on suse_version &lt; 1500 (e.g
  SLE12).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1647691200">- Update to version 3.0.17.3:
  + This is a fixup release which fixes a regression that could
    cause a lack of audio for adaptive streaming playback. It is
    identical to 3.0.17.2 otherwise.
  + This updates contains various fixes and improvements:
  - Major adaptive streaming stack overhaul
  - Major codec updates
  - Many third party libraries update
  - Allow brackets in the path section of URLs
  - Better notch support for new macbooks
  - Add support for DAV video and Webp image formats
  - Improve AV1 live streaming support
  - Several SRT support improvements
  - Numerous crash fixes
  - Update youtube script
- Changes from version 3.0.17.2:
  + This is a fixup release which fixes youtube playback and
    contextual menus on integrated video for the Qt interface. It
    is identical to 3.0.17-1 otherwise.
- Changes from version 3.0.17-1:
  + This is a fixup release which bumps libflac to 1.3.4 in order
    to fix CVE-2020-0499 and CVE-2021-0561 on platforms for which
    we provide binary releases.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1650628800">- Update to version 3.0.17.4:
  + Service Discovery: Fix UPnP regression on Windows.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1653307200">- Add vlc-dav1d-1.0.patch: Fix build with dav1d 1.0. Upstream
  commits 2202c892 and d38ddd727.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1657108800">- Extend vlc-lua-5.3.patch: match upstream commit 0e0b070c26.
- Add 867.patch: support LUA 5.4 (boo#1200944).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1657713600">- Limit to Lua &lt; 5.4 (boo#1200944).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1659960000">- Also limit lua interpreter to &lt; 5.4 (boo#1200944).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1662552000">- Make vlc-vdpau supplement vlc, not vlc-noX: vdpau itself is based
  on top of the graphical stack.
- Move video_output/libegl_wl_plugin.so from vlc-noX to vlc: links
  GUI stack.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1667908800">- Limit to ffmpeg 4: we're also linking opencv3 which does not use
  ffmpeg 5.</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1668686400">- add vlc-caca-fix-to-0-99-beta20-version.patch: build with libcaca-0.99.beta20</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1669377600">- Update to version 3.0.18 (CVE-2022-41325, boo#1206142):
  + macOS: Fix audio device listing with non-latin names.
  + Misc: Fix rendering and performance issue with older GPUs.
  + Updated translations.
- Changes from version 3.0.18-rc2:
  + Codec/Demux:
  - Add support for Y16 chroma.
  - Fix build of gme plugin.
  + Lua:
  - Fix script for vocaroo.
  - Fix script for youtube to allow throttled playback.
  + Service Discovery: Fix UPnP regression on Windows.
  + Video Output: Fix video placement with caopengllayer.
  + Misc: Fix password search in kwallet module.
- Changes from version 3.0.18-rc:
  + Demux:
  - Major adaptive streaming update, notably for multiple
    timelies and webvtt.
  - Fix seeking with some fragmented MP4 files.
  - Add support for DVBSub inside MKV.
  - Fix some Flac files that could not be played.
  - Improve seeking in Ogg files.
  + Decoders:
  - Fix DxVA/D3D11 crashes on HEVC files with bogus references.
  - Fix libass storage size and crash.
  - Fix decoding errors on macOS hw decoding on some HEVC files.
  + Video Output:
  - Fix color regression with VAAPI/iOS and OpenGL output.
  - Fix some resizing issues with OpenGL on GLX/EGL/X11/XV.
  - Fix Direct3d9 texture stretching.
  - Fix 10-bit accelerated video filters on macOS.
  + Playlist: Avoid playlist liveloop on failed/tiny items
    (temporize EOS bursts).
  + Misc:
  - Misc fixes for the extension UI on macOS.
  - Improve SMBv1 and SMBv2 behaviours.
  - Improve FTP compatibility.
  - Support RISC-V.
  - Fix AVI muxing for Windows Media Player compatibility.
  - Fix seeking speed on macOS.
- Drop vlc-dav1d-1.0.patch and 867.patch: fixed upstream.
- Drop vlc-get-addr-by-ref-from-getConnectionEndpointAddress.patch:
  fixed upstream (commit 05445b74).
- Drop vlc-get-addr-by-ref-from-getConnectionEndpointAddress.patch:
  fixed upstream (commit b689202d).</changelog>
  <changelog author="Niklas Haas &lt;obs@haasn.xyz&gt;" date="1669377601">- Add vlc-libplacebo-5.patch: Backport fix for building with libplacebo v5</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1670846400">- Do not apply vlc.a52.patch if liba52 is &lt; 0.8.0
- Avoid ugly _FORTIFY_SOURCE redefinition warnings</changelog>
</package>
<package pkgid="af35b379bdc6935db1d49d5275dc07a85ee7d3829ea05ad514c73088532fca1e" name="vlc" arch="ppc64le">
  <version epoch="0" ver="3.0.18" rel="bp154.2.3.1"/>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1616760000">- Add vlc-gcc11.patch: Fix build using gcc11 (boo#1181918).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1616760001">- Guard post scriptlets to only run %{_libdir}/vlc/vlc-cache-gen if
  it already (or still, in case of uninstall) exists.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1620129600">- Update to version 3.0.13:
  + Demux:
  - Adaptive: fix artefacts in HLS streams with wrong profiles/levels
  - Fix regression on some MP4 files for the audio track
  - Fix MPGA and ADTS probing in TS files
  - Fix Flac inside AVI files
  - Fix VP9/Webm artefacts when seeking
  + Codec:
  - Support SSA text scaling
  - Fix rotation on Android rotation
  - Fix WebVTT subtitles that start at 00:00
  + Access:
  - Update libnfs to support NFSv4
  - Improve SMB2 integration
  - Fix Blu-ray files using Unicode names on Windows
  - Disable mcast lookups on Android for RTSP playback
  + Video Output: Rework the D3D11 rendering wait, to fix
    choppiness on display
  + Interfaces:
  - Fix VLC getting stuck on close on X11 (#21875)
  - Improve RTL on preferences on macOS
  - Add mousewheel horizontal axis control
  - Fix crash on exit on macOS
  - Fix sizing of the fullscreen controls on macOS
  + Misc:
  - Improve MIDI fonts search on Linux
  - Update Soundcloud, Youtube, liveleak
  - Fix compilation with GCC11
  - Fix input-slave option for subtitles
  + Updated translations.
- Drop vlc-gcc11.patch: fixed upstream.
- Extend vlc-srto_tsbpddelay.patch: allow srt &gt;= 1.3 for openSUSE.</changelog>
  <changelog author="Fusion Future &lt;qydwhotmail@gmail.com&gt;" date="1624104000">- Update to version 3.0.16:
  + Video Output: Fix a D3D11 crash on Windows 8/8.1.
  + Access: Fix RTSP server timeout handling.
  + Interfaces: macOS: Add touchbar support.
  + Misc: Multiple settings improvements.
- Changes from version 3.0.15:
  + Core: Add Opus &amp; Alac wave format mappings.
  + Access: Fix opening DVD folders with non-ascii characters.
  + Demux:
  - Fix asf regression with broadcast streams.
  - MP4: Fix audio drop on seek.
  + Video Output:
  - Fix seek &amp; volume sliders overlapping with subtitles.
  - Fix delays when seeking with D3D11.
  + Text renderer: Improve freetype fonts outlining.
  + Misc: Fix GnuTLS support for Windows XP.
- Changes from version 3.0.14:
  + Core:
  - Fix double loading of slave input.
  - Fix an issue causing the auto-updater not to launch the new
    version installer.
- Add vlc-get-addr-by-ref-from-getConnectionEndpointAddress.patch:
  The maintainers of live555 changed connectionEndpointAddresss to
  getConnectionEndpointAddress, which now provides the address
  value by reference.
- Rebase vlc-srto_tsbpddelay.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1645531200">- Guard --enable-libplacebo configure parameter with is_opensuse:
  the buildrequires is also guarded the same way.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1645617600">- BuildRequires pkgconfig(smbclient) instead of smbclient-devel:
  smbclient-devel was merged into samba-devel, and we do not want
  to care for actual package names.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1646654400">- Update to version 3.0.17:
  + Core:
  * Fix a regression in parsing secondary source MRLs
  * Allow brackets in path part of URLs
  + Access:
  * Fix support for screen capture on macOS with avcapture
  * Fix closing of HTTP 1.x connections
  * Improve HTTP2 memory usage
  * Improve AVCapture module
  * Improve AudioCD support (audio/data mixed mode, musicbrainz)
  * Improve SMB compatibility by changing the read size
  * Several improvements on the SRT modules (including streamID)
  + Decoders/Packetizers:
  * Add support for DTS LBR
  * Fix some HEVC hardware decoding on Windows and crashes when aspect ratio changes
  * Fix hardware decoding for some AMD GPU drivers
  * Add support for new Fourcc for E-AC3, AV1, GeoVision
  * Fix crashes with VP9 streams
  * Fix styling issues with subs tx3g (mp4) tracks
  * Fix playback of live AV1 streams
  + Audio Output:
  * iOS/tvOS: add support for spatial audio
  * macOS: fix some channels ordering for &gt; 5.1 channels
  * Android: rework audio volume management
  + Video Output:
  * Fix a D3D11 crash when the stream changes aspect ratio
  + Demux:
  * Major overhaul of the adaptive streaming stack
  * Support for DAV video files
  * Add WebP image mapping
  * Fix missing audio start of Opus audio in MKV/WebM
  * Fix an infinite loop in MP4
  * Fix attachments extractions in ogg files
  * Support Uncompressed audio in mp4 (ISO/IEC 23003-5)
  * Fix some lip sync issue in rare MPEG-TS streams
  + Interface:
  * Qt/macOS: Fixup user provided URLs
  * Add safe area handling on macOS
  * Qt: improve preferences search
  * Qt: fix --no-mouse-events option
  + Misc:
  * Update YouTube script
  * Fix Icecast directory parsing which could lead to missing entries
  * Improve UPnP compatibility with some servers
- Drop vlc-srto_tsbpddelay.patch: fixed upstream.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1646913600">- Disable libnfs and soxr integration on suse_version &lt; 1500 (e.g
  SLE12).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1647691200">- Update to version 3.0.17.3:
  + This is a fixup release which fixes a regression that could
    cause a lack of audio for adaptive streaming playback. It is
    identical to 3.0.17.2 otherwise.
  + This updates contains various fixes and improvements:
  - Major adaptive streaming stack overhaul
  - Major codec updates
  - Many third party libraries update
  - Allow brackets in the path section of URLs
  - Better notch support for new macbooks
  - Add support for DAV video and Webp image formats
  - Improve AV1 live streaming support
  - Several SRT support improvements
  - Numerous crash fixes
  - Update youtube script
- Changes from version 3.0.17.2:
  + This is a fixup release which fixes youtube playback and
    contextual menus on integrated video for the Qt interface. It
    is identical to 3.0.17-1 otherwise.
- Changes from version 3.0.17-1:
  + This is a fixup release which bumps libflac to 1.3.4 in order
    to fix CVE-2020-0499 and CVE-2021-0561 on platforms for which
    we provide binary releases.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1650628800">- Update to version 3.0.17.4:
  + Service Discovery: Fix UPnP regression on Windows.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1653307200">- Add vlc-dav1d-1.0.patch: Fix build with dav1d 1.0. Upstream
  commits 2202c892 and d38ddd727.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1657108800">- Extend vlc-lua-5.3.patch: match upstream commit 0e0b070c26.
- Add 867.patch: support LUA 5.4 (boo#1200944).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1657713600">- Limit to Lua &lt; 5.4 (boo#1200944).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1659960000">- Also limit lua interpreter to &lt; 5.4 (boo#1200944).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1662552000">- Make vlc-vdpau supplement vlc, not vlc-noX: vdpau itself is based
  on top of the graphical stack.
- Move video_output/libegl_wl_plugin.so from vlc-noX to vlc: links
  GUI stack.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1667908800">- Limit to ffmpeg 4: we're also linking opencv3 which does not use
  ffmpeg 5.</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1668686400">- add vlc-caca-fix-to-0-99-beta20-version.patch: build with libcaca-0.99.beta20</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1669377600">- Update to version 3.0.18 (CVE-2022-41325, boo#1206142):
  + macOS: Fix audio device listing with non-latin names.
  + Misc: Fix rendering and performance issue with older GPUs.
  + Updated translations.
- Changes from version 3.0.18-rc2:
  + Codec/Demux:
  - Add support for Y16 chroma.
  - Fix build of gme plugin.
  + Lua:
  - Fix script for vocaroo.
  - Fix script for youtube to allow throttled playback.
  + Service Discovery: Fix UPnP regression on Windows.
  + Video Output: Fix video placement with caopengllayer.
  + Misc: Fix password search in kwallet module.
- Changes from version 3.0.18-rc:
  + Demux:
  - Major adaptive streaming update, notably for multiple
    timelies and webvtt.
  - Fix seeking with some fragmented MP4 files.
  - Add support for DVBSub inside MKV.
  - Fix some Flac files that could not be played.
  - Improve seeking in Ogg files.
  + Decoders:
  - Fix DxVA/D3D11 crashes on HEVC files with bogus references.
  - Fix libass storage size and crash.
  - Fix decoding errors on macOS hw decoding on some HEVC files.
  + Video Output:
  - Fix color regression with VAAPI/iOS and OpenGL output.
  - Fix some resizing issues with OpenGL on GLX/EGL/X11/XV.
  - Fix Direct3d9 texture stretching.
  - Fix 10-bit accelerated video filters on macOS.
  + Playlist: Avoid playlist liveloop on failed/tiny items
    (temporize EOS bursts).
  + Misc:
  - Misc fixes for the extension UI on macOS.
  - Improve SMBv1 and SMBv2 behaviours.
  - Improve FTP compatibility.
  - Support RISC-V.
  - Fix AVI muxing for Windows Media Player compatibility.
  - Fix seeking speed on macOS.
- Drop vlc-dav1d-1.0.patch and 867.patch: fixed upstream.
- Drop vlc-get-addr-by-ref-from-getConnectionEndpointAddress.patch:
  fixed upstream (commit 05445b74).
- Drop vlc-get-addr-by-ref-from-getConnectionEndpointAddress.patch:
  fixed upstream (commit b689202d).</changelog>
  <changelog author="Niklas Haas &lt;obs@haasn.xyz&gt;" date="1669377601">- Add vlc-libplacebo-5.patch: Backport fix for building with libplacebo v5</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1670846400">- Do not apply vlc.a52.patch if liba52 is &lt; 0.8.0
- Avoid ugly _FORTIFY_SOURCE redefinition warnings</changelog>
</package>
<package pkgid="19cc37fd413e962677f6cbf2160d4bb6dd0ab370275aa506b091fa9f10264cd0" name="vlc" arch="src">
  <version epoch="0" ver="3.0.18" rel="bp154.2.3.1"/>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1616760000">- Add vlc-gcc11.patch: Fix build using gcc11 (boo#1181918).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1616760001">- Guard post scriptlets to only run %{_libdir}/vlc/vlc-cache-gen if
  it already (or still, in case of uninstall) exists.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1620129600">- Update to version 3.0.13:
  + Demux:
  - Adaptive: fix artefacts in HLS streams with wrong profiles/levels
  - Fix regression on some MP4 files for the audio track
  - Fix MPGA and ADTS probing in TS files
  - Fix Flac inside AVI files
  - Fix VP9/Webm artefacts when seeking
  + Codec:
  - Support SSA text scaling
  - Fix rotation on Android rotation
  - Fix WebVTT subtitles that start at 00:00
  + Access:
  - Update libnfs to support NFSv4
  - Improve SMB2 integration
  - Fix Blu-ray files using Unicode names on Windows
  - Disable mcast lookups on Android for RTSP playback
  + Video Output: Rework the D3D11 rendering wait, to fix
    choppiness on display
  + Interfaces:
  - Fix VLC getting stuck on close on X11 (#21875)
  - Improve RTL on preferences on macOS
  - Add mousewheel horizontal axis control
  - Fix crash on exit on macOS
  - Fix sizing of the fullscreen controls on macOS
  + Misc:
  - Improve MIDI fonts search on Linux
  - Update Soundcloud, Youtube, liveleak
  - Fix compilation with GCC11
  - Fix input-slave option for subtitles
  + Updated translations.
- Drop vlc-gcc11.patch: fixed upstream.
- Extend vlc-srto_tsbpddelay.patch: allow srt &gt;= 1.3 for openSUSE.</changelog>
  <changelog author="Fusion Future &lt;qydwhotmail@gmail.com&gt;" date="1624104000">- Update to version 3.0.16:
  + Video Output: Fix a D3D11 crash on Windows 8/8.1.
  + Access: Fix RTSP server timeout handling.
  + Interfaces: macOS: Add touchbar support.
  + Misc: Multiple settings improvements.
- Changes from version 3.0.15:
  + Core: Add Opus &amp; Alac wave format mappings.
  + Access: Fix opening DVD folders with non-ascii characters.
  + Demux:
  - Fix asf regression with broadcast streams.
  - MP4: Fix audio drop on seek.
  + Video Output:
  - Fix seek &amp; volume sliders overlapping with subtitles.
  - Fix delays when seeking with D3D11.
  + Text renderer: Improve freetype fonts outlining.
  + Misc: Fix GnuTLS support for Windows XP.
- Changes from version 3.0.14:
  + Core:
  - Fix double loading of slave input.
  - Fix an issue causing the auto-updater not to launch the new
    version installer.
- Add vlc-get-addr-by-ref-from-getConnectionEndpointAddress.patch:
  The maintainers of live555 changed connectionEndpointAddresss to
  getConnectionEndpointAddress, which now provides the address
  value by reference.
- Rebase vlc-srto_tsbpddelay.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1645531200">- Guard --enable-libplacebo configure parameter with is_opensuse:
  the buildrequires is also guarded the same way.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1645617600">- BuildRequires pkgconfig(smbclient) instead of smbclient-devel:
  smbclient-devel was merged into samba-devel, and we do not want
  to care for actual package names.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1646654400">- Update to version 3.0.17:
  + Core:
  * Fix a regression in parsing secondary source MRLs
  * Allow brackets in path part of URLs
  + Access:
  * Fix support for screen capture on macOS with avcapture
  * Fix closing of HTTP 1.x connections
  * Improve HTTP2 memory usage
  * Improve AVCapture module
  * Improve AudioCD support (audio/data mixed mode, musicbrainz)
  * Improve SMB compatibility by changing the read size
  * Several improvements on the SRT modules (including streamID)
  + Decoders/Packetizers:
  * Add support for DTS LBR
  * Fix some HEVC hardware decoding on Windows and crashes when aspect ratio changes
  * Fix hardware decoding for some AMD GPU drivers
  * Add support for new Fourcc for E-AC3, AV1, GeoVision
  * Fix crashes with VP9 streams
  * Fix styling issues with subs tx3g (mp4) tracks
  * Fix playback of live AV1 streams
  + Audio Output:
  * iOS/tvOS: add support for spatial audio
  * macOS: fix some channels ordering for &gt; 5.1 channels
  * Android: rework audio volume management
  + Video Output:
  * Fix a D3D11 crash when the stream changes aspect ratio
  + Demux:
  * Major overhaul of the adaptive streaming stack
  * Support for DAV video files
  * Add WebP image mapping
  * Fix missing audio start of Opus audio in MKV/WebM
  * Fix an infinite loop in MP4
  * Fix attachments extractions in ogg files
  * Support Uncompressed audio in mp4 (ISO/IEC 23003-5)
  * Fix some lip sync issue in rare MPEG-TS streams
  + Interface:
  * Qt/macOS: Fixup user provided URLs
  * Add safe area handling on macOS
  * Qt: improve preferences search
  * Qt: fix --no-mouse-events option
  + Misc:
  * Update YouTube script
  * Fix Icecast directory parsing which could lead to missing entries
  * Improve UPnP compatibility with some servers
- Drop vlc-srto_tsbpddelay.patch: fixed upstream.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1646913600">- Disable libnfs and soxr integration on suse_version &lt; 1500 (e.g
  SLE12).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1647691200">- Update to version 3.0.17.3:
  + This is a fixup release which fixes a regression that could
    cause a lack of audio for adaptive streaming playback. It is
    identical to 3.0.17.2 otherwise.
  + This updates contains various fixes and improvements:
  - Major adaptive streaming stack overhaul
  - Major codec updates
  - Many third party libraries update
  - Allow brackets in the path section of URLs
  - Better notch support for new macbooks
  - Add support for DAV video and Webp image formats
  - Improve AV1 live streaming support
  - Several SRT support improvements
  - Numerous crash fixes
  - Update youtube script
- Changes from version 3.0.17.2:
  + This is a fixup release which fixes youtube playback and
    contextual menus on integrated video for the Qt interface. It
    is identical to 3.0.17-1 otherwise.
- Changes from version 3.0.17-1:
  + This is a fixup release which bumps libflac to 1.3.4 in order
    to fix CVE-2020-0499 and CVE-2021-0561 on platforms for which
    we provide binary releases.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1650628800">- Update to version 3.0.17.4:
  + Service Discovery: Fix UPnP regression on Windows.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1653307200">- Add vlc-dav1d-1.0.patch: Fix build with dav1d 1.0. Upstream
  commits 2202c892 and d38ddd727.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1657108800">- Extend vlc-lua-5.3.patch: match upstream commit 0e0b070c26.
- Add 867.patch: support LUA 5.4 (boo#1200944).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1657713600">- Limit to Lua &lt; 5.4 (boo#1200944).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1659960000">- Also limit lua interpreter to &lt; 5.4 (boo#1200944).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1662552000">- Make vlc-vdpau supplement vlc, not vlc-noX: vdpau itself is based
  on top of the graphical stack.
- Move video_output/libegl_wl_plugin.so from vlc-noX to vlc: links
  GUI stack.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1667908800">- Limit to ffmpeg 4: we're also linking opencv3 which does not use
  ffmpeg 5.</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1668686400">- add vlc-caca-fix-to-0-99-beta20-version.patch: build with libcaca-0.99.beta20</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1669377600">- Update to version 3.0.18 (CVE-2022-41325, boo#1206142):
  + macOS: Fix audio device listing with non-latin names.
  + Misc: Fix rendering and performance issue with older GPUs.
  + Updated translations.
- Changes from version 3.0.18-rc2:
  + Codec/Demux:
  - Add support for Y16 chroma.
  - Fix build of gme plugin.
  + Lua:
  - Fix script for vocaroo.
  - Fix script for youtube to allow throttled playback.
  + Service Discovery: Fix UPnP regression on Windows.
  + Video Output: Fix video placement with caopengllayer.
  + Misc: Fix password search in kwallet module.
- Changes from version 3.0.18-rc:
  + Demux:
  - Major adaptive streaming update, notably for multiple
    timelies and webvtt.
  - Fix seeking with some fragmented MP4 files.
  - Add support for DVBSub inside MKV.
  - Fix some Flac files that could not be played.
  - Improve seeking in Ogg files.
  + Decoders:
  - Fix DxVA/D3D11 crashes on HEVC files with bogus references.
  - Fix libass storage size and crash.
  - Fix decoding errors on macOS hw decoding on some HEVC files.
  + Video Output:
  - Fix color regression with VAAPI/iOS and OpenGL output.
  - Fix some resizing issues with OpenGL on GLX/EGL/X11/XV.
  - Fix Direct3d9 texture stretching.
  - Fix 10-bit accelerated video filters on macOS.
  + Playlist: Avoid playlist liveloop on failed/tiny items
    (temporize EOS bursts).
  + Misc:
  - Misc fixes for the extension UI on macOS.
  - Improve SMBv1 and SMBv2 behaviours.
  - Improve FTP compatibility.
  - Support RISC-V.
  - Fix AVI muxing for Windows Media Player compatibility.
  - Fix seeking speed on macOS.
- Drop vlc-dav1d-1.0.patch and 867.patch: fixed upstream.
- Drop vlc-get-addr-by-ref-from-getConnectionEndpointAddress.patch:
  fixed upstream (commit 05445b74).
- Drop vlc-get-addr-by-ref-from-getConnectionEndpointAddress.patch:
  fixed upstream (commit b689202d).</changelog>
  <changelog author="Niklas Haas &lt;obs@haasn.xyz&gt;" date="1669377601">- Add vlc-libplacebo-5.patch: Backport fix for building with libplacebo v5</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1670846400">- Do not apply vlc.a52.patch if liba52 is &lt; 0.8.0
- Avoid ugly _FORTIFY_SOURCE redefinition warnings</changelog>
</package>
<package pkgid="0764923daf92122bd687374c71d79d8479a5b47b43d792a0879033e3512c9342" name="vlc" arch="x86_64">
  <version epoch="0" ver="3.0.18" rel="bp154.2.3.1"/>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1616760000">- Add vlc-gcc11.patch: Fix build using gcc11 (boo#1181918).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1616760001">- Guard post scriptlets to only run %{_libdir}/vlc/vlc-cache-gen if
  it already (or still, in case of uninstall) exists.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1620129600">- Update to version 3.0.13:
  + Demux:
  - Adaptive: fix artefacts in HLS streams with wrong profiles/levels
  - Fix regression on some MP4 files for the audio track
  - Fix MPGA and ADTS probing in TS files
  - Fix Flac inside AVI files
  - Fix VP9/Webm artefacts when seeking
  + Codec:
  - Support SSA text scaling
  - Fix rotation on Android rotation
  - Fix WebVTT subtitles that start at 00:00
  + Access:
  - Update libnfs to support NFSv4
  - Improve SMB2 integration
  - Fix Blu-ray files using Unicode names on Windows
  - Disable mcast lookups on Android for RTSP playback
  + Video Output: Rework the D3D11 rendering wait, to fix
    choppiness on display
  + Interfaces:
  - Fix VLC getting stuck on close on X11 (#21875)
  - Improve RTL on preferences on macOS
  - Add mousewheel horizontal axis control
  - Fix crash on exit on macOS
  - Fix sizing of the fullscreen controls on macOS
  + Misc:
  - Improve MIDI fonts search on Linux
  - Update Soundcloud, Youtube, liveleak
  - Fix compilation with GCC11
  - Fix input-slave option for subtitles
  + Updated translations.
- Drop vlc-gcc11.patch: fixed upstream.
- Extend vlc-srto_tsbpddelay.patch: allow srt &gt;= 1.3 for openSUSE.</changelog>
  <changelog author="Fusion Future &lt;qydwhotmail@gmail.com&gt;" date="1624104000">- Update to version 3.0.16:
  + Video Output: Fix a D3D11 crash on Windows 8/8.1.
  + Access: Fix RTSP server timeout handling.
  + Interfaces: macOS: Add touchbar support.
  + Misc: Multiple settings improvements.
- Changes from version 3.0.15:
  + Core: Add Opus &amp; Alac wave format mappings.
  + Access: Fix opening DVD folders with non-ascii characters.
  + Demux:
  - Fix asf regression with broadcast streams.
  - MP4: Fix audio drop on seek.
  + Video Output:
  - Fix seek &amp; volume sliders overlapping with subtitles.
  - Fix delays when seeking with D3D11.
  + Text renderer: Improve freetype fonts outlining.
  + Misc: Fix GnuTLS support for Windows XP.
- Changes from version 3.0.14:
  + Core:
  - Fix double loading of slave input.
  - Fix an issue causing the auto-updater not to launch the new
    version installer.
- Add vlc-get-addr-by-ref-from-getConnectionEndpointAddress.patch:
  The maintainers of live555 changed connectionEndpointAddresss to
  getConnectionEndpointAddress, which now provides the address
  value by reference.
- Rebase vlc-srto_tsbpddelay.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1645531200">- Guard --enable-libplacebo configure parameter with is_opensuse:
  the buildrequires is also guarded the same way.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1645617600">- BuildRequires pkgconfig(smbclient) instead of smbclient-devel:
  smbclient-devel was merged into samba-devel, and we do not want
  to care for actual package names.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1646654400">- Update to version 3.0.17:
  + Core:
  * Fix a regression in parsing secondary source MRLs
  * Allow brackets in path part of URLs
  + Access:
  * Fix support for screen capture on macOS with avcapture
  * Fix closing of HTTP 1.x connections
  * Improve HTTP2 memory usage
  * Improve AVCapture module
  * Improve AudioCD support (audio/data mixed mode, musicbrainz)
  * Improve SMB compatibility by changing the read size
  * Several improvements on the SRT modules (including streamID)
  + Decoders/Packetizers:
  * Add support for DTS LBR
  * Fix some HEVC hardware decoding on Windows and crashes when aspect ratio changes
  * Fix hardware decoding for some AMD GPU drivers
  * Add support for new Fourcc for E-AC3, AV1, GeoVision
  * Fix crashes with VP9 streams
  * Fix styling issues with subs tx3g (mp4) tracks
  * Fix playback of live AV1 streams
  + Audio Output:
  * iOS/tvOS: add support for spatial audio
  * macOS: fix some channels ordering for &gt; 5.1 channels
  * Android: rework audio volume management
  + Video Output:
  * Fix a D3D11 crash when the stream changes aspect ratio
  + Demux:
  * Major overhaul of the adaptive streaming stack
  * Support for DAV video files
  * Add WebP image mapping
  * Fix missing audio start of Opus audio in MKV/WebM
  * Fix an infinite loop in MP4
  * Fix attachments extractions in ogg files
  * Support Uncompressed audio in mp4 (ISO/IEC 23003-5)
  * Fix some lip sync issue in rare MPEG-TS streams
  + Interface:
  * Qt/macOS: Fixup user provided URLs
  * Add safe area handling on macOS
  * Qt: improve preferences search
  * Qt: fix --no-mouse-events option
  + Misc:
  * Update YouTube script
  * Fix Icecast directory parsing which could lead to missing entries
  * Improve UPnP compatibility with some servers
- Drop vlc-srto_tsbpddelay.patch: fixed upstream.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1646913600">- Disable libnfs and soxr integration on suse_version &lt; 1500 (e.g
  SLE12).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1647691200">- Update to version 3.0.17.3:
  + This is a fixup release which fixes a regression that could
    cause a lack of audio for adaptive streaming playback. It is
    identical to 3.0.17.2 otherwise.
  + This updates contains various fixes and improvements:
  - Major adaptive streaming stack overhaul
  - Major codec updates
  - Many third party libraries update
  - Allow brackets in the path section of URLs
  - Better notch support for new macbooks
  - Add support for DAV video and Webp image formats
  - Improve AV1 live streaming support
  - Several SRT support improvements
  - Numerous crash fixes
  - Update youtube script
- Changes from version 3.0.17.2:
  + This is a fixup release which fixes youtube playback and
    contextual menus on integrated video for the Qt interface. It
    is identical to 3.0.17-1 otherwise.
- Changes from version 3.0.17-1:
  + This is a fixup release which bumps libflac to 1.3.4 in order
    to fix CVE-2020-0499 and CVE-2021-0561 on platforms for which
    we provide binary releases.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1650628800">- Update to version 3.0.17.4:
  + Service Discovery: Fix UPnP regression on Windows.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1653307200">- Add vlc-dav1d-1.0.patch: Fix build with dav1d 1.0. Upstream
  commits 2202c892 and d38ddd727.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1657108800">- Extend vlc-lua-5.3.patch: match upstream commit 0e0b070c26.
- Add 867.patch: support LUA 5.4 (boo#1200944).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1657713600">- Limit to Lua &lt; 5.4 (boo#1200944).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1659960000">- Also limit lua interpreter to &lt; 5.4 (boo#1200944).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1662552000">- Make vlc-vdpau supplement vlc, not vlc-noX: vdpau itself is based
  on top of the graphical stack.
- Move video_output/libegl_wl_plugin.so from vlc-noX to vlc: links
  GUI stack.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1667908800">- Limit to ffmpeg 4: we're also linking opencv3 which does not use
  ffmpeg 5.</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1668686400">- add vlc-caca-fix-to-0-99-beta20-version.patch: build with libcaca-0.99.beta20</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1669377600">- Update to version 3.0.18 (CVE-2022-41325, boo#1206142):
  + macOS: Fix audio device listing with non-latin names.
  + Misc: Fix rendering and performance issue with older GPUs.
  + Updated translations.
- Changes from version 3.0.18-rc2:
  + Codec/Demux:
  - Add support for Y16 chroma.
  - Fix build of gme plugin.
  + Lua:
  - Fix script for vocaroo.
  - Fix script for youtube to allow throttled playback.
  + Service Discovery: Fix UPnP regression on Windows.
  + Video Output: Fix video placement with caopengllayer.
  + Misc: Fix password search in kwallet module.
- Changes from version 3.0.18-rc:
  + Demux:
  - Major adaptive streaming update, notably for multiple
    timelies and webvtt.
  - Fix seeking with some fragmented MP4 files.
  - Add support for DVBSub inside MKV.
  - Fix some Flac files that could not be played.
  - Improve seeking in Ogg files.
  + Decoders:
  - Fix DxVA/D3D11 crashes on HEVC files with bogus references.
  - Fix libass storage size and crash.
  - Fix decoding errors on macOS hw decoding on some HEVC files.
  + Video Output:
  - Fix color regression with VAAPI/iOS and OpenGL output.
  - Fix some resizing issues with OpenGL on GLX/EGL/X11/XV.
  - Fix Direct3d9 texture stretching.
  - Fix 10-bit accelerated video filters on macOS.
  + Playlist: Avoid playlist liveloop on failed/tiny items
    (temporize EOS bursts).
  + Misc:
  - Misc fixes for the extension UI on macOS.
  - Improve SMBv1 and SMBv2 behaviours.
  - Improve FTP compatibility.
  - Support RISC-V.
  - Fix AVI muxing for Windows Media Player compatibility.
  - Fix seeking speed on macOS.
- Drop vlc-dav1d-1.0.patch and 867.patch: fixed upstream.
- Drop vlc-get-addr-by-ref-from-getConnectionEndpointAddress.patch:
  fixed upstream (commit 05445b74).
- Drop vlc-get-addr-by-ref-from-getConnectionEndpointAddress.patch:
  fixed upstream (commit b689202d).</changelog>
  <changelog author="Niklas Haas &lt;obs@haasn.xyz&gt;" date="1669377601">- Add vlc-libplacebo-5.patch: Backport fix for building with libplacebo v5</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1670846400">- Do not apply vlc.a52.patch if liba52 is &lt; 0.8.0
- Avoid ugly _FORTIFY_SOURCE redefinition warnings</changelog>
</package>
<package pkgid="f329a49ec9db741a41a3cfab8efed5d8f2175c925c6319ffff44571fcea83cbe" name="vlc-codec-gstreamer" arch="aarch64">
  <version epoch="0" ver="3.0.18" rel="bp154.2.3.1"/>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1616760000">- Add vlc-gcc11.patch: Fix build using gcc11 (boo#1181918).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1616760001">- Guard post scriptlets to only run %{_libdir}/vlc/vlc-cache-gen if
  it already (or still, in case of uninstall) exists.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1620129600">- Update to version 3.0.13:
  + Demux:
  - Adaptive: fix artefacts in HLS streams with wrong profiles/levels
  - Fix regression on some MP4 files for the audio track
  - Fix MPGA and ADTS probing in TS files
  - Fix Flac inside AVI files
  - Fix VP9/Webm artefacts when seeking
  + Codec:
  - Support SSA text scaling
  - Fix rotation on Android rotation
  - Fix WebVTT subtitles that start at 00:00
  + Access:
  - Update libnfs to support NFSv4
  - Improve SMB2 integration
  - Fix Blu-ray files using Unicode names on Windows
  - Disable mcast lookups on Android for RTSP playback
  + Video Output: Rework the D3D11 rendering wait, to fix
    choppiness on display
  + Interfaces:
  - Fix VLC getting stuck on close on X11 (#21875)
  - Improve RTL on preferences on macOS
  - Add mousewheel horizontal axis control
  - Fix crash on exit on macOS
  - Fix sizing of the fullscreen controls on macOS
  + Misc:
  - Improve MIDI fonts search on Linux
  - Update Soundcloud, Youtube, liveleak
  - Fix compilation with GCC11
  - Fix input-slave option for subtitles
  + Updated translations.
- Drop vlc-gcc11.patch: fixed upstream.
- Extend vlc-srto_tsbpddelay.patch: allow srt &gt;= 1.3 for openSUSE.</changelog>
  <changelog author="Fusion Future &lt;qydwhotmail@gmail.com&gt;" date="1624104000">- Update to version 3.0.16:
  + Video Output: Fix a D3D11 crash on Windows 8/8.1.
  + Access: Fix RTSP server timeout handling.
  + Interfaces: macOS: Add touchbar support.
  + Misc: Multiple settings improvements.
- Changes from version 3.0.15:
  + Core: Add Opus &amp; Alac wave format mappings.
  + Access: Fix opening DVD folders with non-ascii characters.
  + Demux:
  - Fix asf regression with broadcast streams.
  - MP4: Fix audio drop on seek.
  + Video Output:
  - Fix seek &amp; volume sliders overlapping with subtitles.
  - Fix delays when seeking with D3D11.
  + Text renderer: Improve freetype fonts outlining.
  + Misc: Fix GnuTLS support for Windows XP.
- Changes from version 3.0.14:
  + Core:
  - Fix double loading of slave input.
  - Fix an issue causing the auto-updater not to launch the new
    version installer.
- Add vlc-get-addr-by-ref-from-getConnectionEndpointAddress.patch:
  The maintainers of live555 changed connectionEndpointAddresss to
  getConnectionEndpointAddress, which now provides the address
  value by reference.
- Rebase vlc-srto_tsbpddelay.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1645531200">- Guard --enable-libplacebo configure parameter with is_opensuse:
  the buildrequires is also guarded the same way.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1645617600">- BuildRequires pkgconfig(smbclient) instead of smbclient-devel:
  smbclient-devel was merged into samba-devel, and we do not want
  to care for actual package names.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1646654400">- Update to version 3.0.17:
  + Core:
  * Fix a regression in parsing secondary source MRLs
  * Allow brackets in path part of URLs
  + Access:
  * Fix support for screen capture on macOS with avcapture
  * Fix closing of HTTP 1.x connections
  * Improve HTTP2 memory usage
  * Improve AVCapture module
  * Improve AudioCD support (audio/data mixed mode, musicbrainz)
  * Improve SMB compatibility by changing the read size
  * Several improvements on the SRT modules (including streamID)
  + Decoders/Packetizers:
  * Add support for DTS LBR
  * Fix some HEVC hardware decoding on Windows and crashes when aspect ratio changes
  * Fix hardware decoding for some AMD GPU drivers
  * Add support for new Fourcc for E-AC3, AV1, GeoVision
  * Fix crashes with VP9 streams
  * Fix styling issues with subs tx3g (mp4) tracks
  * Fix playback of live AV1 streams
  + Audio Output:
  * iOS/tvOS: add support for spatial audio
  * macOS: fix some channels ordering for &gt; 5.1 channels
  * Android: rework audio volume management
  + Video Output:
  * Fix a D3D11 crash when the stream changes aspect ratio
  + Demux:
  * Major overhaul of the adaptive streaming stack
  * Support for DAV video files
  * Add WebP image mapping
  * Fix missing audio start of Opus audio in MKV/WebM
  * Fix an infinite loop in MP4
  * Fix attachments extractions in ogg files
  * Support Uncompressed audio in mp4 (ISO/IEC 23003-5)
  * Fix some lip sync issue in rare MPEG-TS streams
  + Interface:
  * Qt/macOS: Fixup user provided URLs
  * Add safe area handling on macOS
  * Qt: improve preferences search
  * Qt: fix --no-mouse-events option
  + Misc:
  * Update YouTube script
  * Fix Icecast directory parsing which could lead to missing entries
  * Improve UPnP compatibility with some servers
- Drop vlc-srto_tsbpddelay.patch: fixed upstream.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1646913600">- Disable libnfs and soxr integration on suse_version &lt; 1500 (e.g
  SLE12).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1647691200">- Update to version 3.0.17.3:
  + This is a fixup release which fixes a regression that could
    cause a lack of audio for adaptive streaming playback. It is
    identical to 3.0.17.2 otherwise.
  + This updates contains various fixes and improvements:
  - Major adaptive streaming stack overhaul
  - Major codec updates
  - Many third party libraries update
  - Allow brackets in the path section of URLs
  - Better notch support for new macbooks
  - Add support for DAV video and Webp image formats
  - Improve AV1 live streaming support
  - Several SRT support improvements
  - Numerous crash fixes
  - Update youtube script
- Changes from version 3.0.17.2:
  + This is a fixup release which fixes youtube playback and
    contextual menus on integrated video for the Qt interface. It
    is identical to 3.0.17-1 otherwise.
- Changes from version 3.0.17-1:
  + This is a fixup release which bumps libflac to 1.3.4 in order
    to fix CVE-2020-0499 and CVE-2021-0561 on platforms for which
    we provide binary releases.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1650628800">- Update to version 3.0.17.4:
  + Service Discovery: Fix UPnP regression on Windows.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1653307200">- Add vlc-dav1d-1.0.patch: Fix build with dav1d 1.0. Upstream
  commits 2202c892 and d38ddd727.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1657108800">- Extend vlc-lua-5.3.patch: match upstream commit 0e0b070c26.
- Add 867.patch: support LUA 5.4 (boo#1200944).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1657713600">- Limit to Lua &lt; 5.4 (boo#1200944).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1659960000">- Also limit lua interpreter to &lt; 5.4 (boo#1200944).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1662552000">- Make vlc-vdpau supplement vlc, not vlc-noX: vdpau itself is based
  on top of the graphical stack.
- Move video_output/libegl_wl_plugin.so from vlc-noX to vlc: links
  GUI stack.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1667908800">- Limit to ffmpeg 4: we're also linking opencv3 which does not use
  ffmpeg 5.</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1668686400">- add vlc-caca-fix-to-0-99-beta20-version.patch: build with libcaca-0.99.beta20</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1669377600">- Update to version 3.0.18 (CVE-2022-41325, boo#1206142):
  + macOS: Fix audio device listing with non-latin names.
  + Misc: Fix rendering and performance issue with older GPUs.
  + Updated translations.
- Changes from version 3.0.18-rc2:
  + Codec/Demux:
  - Add support for Y16 chroma.
  - Fix build of gme plugin.
  + Lua:
  - Fix script for vocaroo.
  - Fix script for youtube to allow throttled playback.
  + Service Discovery: Fix UPnP regression on Windows.
  + Video Output: Fix video placement with caopengllayer.
  + Misc: Fix password search in kwallet module.
- Changes from version 3.0.18-rc:
  + Demux:
  - Major adaptive streaming update, notably for multiple
    timelies and webvtt.
  - Fix seeking with some fragmented MP4 files.
  - Add support for DVBSub inside MKV.
  - Fix some Flac files that could not be played.
  - Improve seeking in Ogg files.
  + Decoders:
  - Fix DxVA/D3D11 crashes on HEVC files with bogus references.
  - Fix libass storage size and crash.
  - Fix decoding errors on macOS hw decoding on some HEVC files.
  + Video Output:
  - Fix color regression with VAAPI/iOS and OpenGL output.
  - Fix some resizing issues with OpenGL on GLX/EGL/X11/XV.
  - Fix Direct3d9 texture stretching.
  - Fix 10-bit accelerated video filters on macOS.
  + Playlist: Avoid playlist liveloop on failed/tiny items
    (temporize EOS bursts).
  + Misc:
  - Misc fixes for the extension UI on macOS.
  - Improve SMBv1 and SMBv2 behaviours.
  - Improve FTP compatibility.
  - Support RISC-V.
  - Fix AVI muxing for Windows Media Player compatibility.
  - Fix seeking speed on macOS.
- Drop vlc-dav1d-1.0.patch and 867.patch: fixed upstream.
- Drop vlc-get-addr-by-ref-from-getConnectionEndpointAddress.patch:
  fixed upstream (commit 05445b74).
- Drop vlc-get-addr-by-ref-from-getConnectionEndpointAddress.patch:
  fixed upstream (commit b689202d).</changelog>
  <changelog author="Niklas Haas &lt;obs@haasn.xyz&gt;" date="1669377601">- Add vlc-libplacebo-5.patch: Backport fix for building with libplacebo v5</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1670846400">- Do not apply vlc.a52.patch if liba52 is &lt; 0.8.0
- Avoid ugly _FORTIFY_SOURCE redefinition warnings</changelog>
</package>
<package pkgid="d2f8300b95ac7cc427a3ba004da0a3bdb150c94f1fd86d75e9e39bc376a752f8" name="vlc-codec-gstreamer" arch="ppc64le">
  <version epoch="0" ver="3.0.18" rel="bp154.2.3.1"/>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1616760000">- Add vlc-gcc11.patch: Fix build using gcc11 (boo#1181918).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1616760001">- Guard post scriptlets to only run %{_libdir}/vlc/vlc-cache-gen if
  it already (or still, in case of uninstall) exists.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1620129600">- Update to version 3.0.13:
  + Demux:
  - Adaptive: fix artefacts in HLS streams with wrong profiles/levels
  - Fix regression on some MP4 files for the audio track
  - Fix MPGA and ADTS probing in TS files
  - Fix Flac inside AVI files
  - Fix VP9/Webm artefacts when seeking
  + Codec:
  - Support SSA text scaling
  - Fix rotation on Android rotation
  - Fix WebVTT subtitles that start at 00:00
  + Access:
  - Update libnfs to support NFSv4
  - Improve SMB2 integration
  - Fix Blu-ray files using Unicode names on Windows
  - Disable mcast lookups on Android for RTSP playback
  + Video Output: Rework the D3D11 rendering wait, to fix
    choppiness on display
  + Interfaces:
  - Fix VLC getting stuck on close on X11 (#21875)
  - Improve RTL on preferences on macOS
  - Add mousewheel horizontal axis control
  - Fix crash on exit on macOS
  - Fix sizing of the fullscreen controls on macOS
  + Misc:
  - Improve MIDI fonts search on Linux
  - Update Soundcloud, Youtube, liveleak
  - Fix compilation with GCC11
  - Fix input-slave option for subtitles
  + Updated translations.
- Drop vlc-gcc11.patch: fixed upstream.
- Extend vlc-srto_tsbpddelay.patch: allow srt &gt;= 1.3 for openSUSE.</changelog>
  <changelog author="Fusion Future &lt;qydwhotmail@gmail.com&gt;" date="1624104000">- Update to version 3.0.16:
  + Video Output: Fix a D3D11 crash on Windows 8/8.1.
  + Access: Fix RTSP server timeout handling.
  + Interfaces: macOS: Add touchbar support.
  + Misc: Multiple settings improvements.
- Changes from version 3.0.15:
  + Core: Add Opus &amp; Alac wave format mappings.
  + Access: Fix opening DVD folders with non-ascii characters.
  + Demux:
  - Fix asf regression with broadcast streams.
  - MP4: Fix audio drop on seek.
  + Video Output:
  - Fix seek &amp; volume sliders overlapping with subtitles.
  - Fix delays when seeking with D3D11.
  + Text renderer: Improve freetype fonts outlining.
  + Misc: Fix GnuTLS support for Windows XP.
- Changes from version 3.0.14:
  + Core:
  - Fix double loading of slave input.
  - Fix an issue causing the auto-updater not to launch the new
    version installer.
- Add vlc-get-addr-by-ref-from-getConnectionEndpointAddress.patch:
  The maintainers of live555 changed connectionEndpointAddresss to
  getConnectionEndpointAddress, which now provides the address
  value by reference.
- Rebase vlc-srto_tsbpddelay.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1645531200">- Guard --enable-libplacebo configure parameter with is_opensuse:
  the buildrequires is also guarded the same way.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1645617600">- BuildRequires pkgconfig(smbclient) instead of smbclient-devel:
  smbclient-devel was merged into samba-devel, and we do not want
  to care for actual package names.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1646654400">- Update to version 3.0.17:
  + Core:
  * Fix a regression in parsing secondary source MRLs
  * Allow brackets in path part of URLs
  + Access:
  * Fix support for screen capture on macOS with avcapture
  * Fix closing of HTTP 1.x connections
  * Improve HTTP2 memory usage
  * Improve AVCapture module
  * Improve AudioCD support (audio/data mixed mode, musicbrainz)
  * Improve SMB compatibility by changing the read size
  * Several improvements on the SRT modules (including streamID)
  + Decoders/Packetizers:
  * Add support for DTS LBR
  * Fix some HEVC hardware decoding on Windows and crashes when aspect ratio changes
  * Fix hardware decoding for some AMD GPU drivers
  * Add support for new Fourcc for E-AC3, AV1, GeoVision
  * Fix crashes with VP9 streams
  * Fix styling issues with subs tx3g (mp4) tracks
  * Fix playback of live AV1 streams
  + Audio Output:
  * iOS/tvOS: add support for spatial audio
  * macOS: fix some channels ordering for &gt; 5.1 channels
  * Android: rework audio volume management
  + Video Output:
  * Fix a D3D11 crash when the stream changes aspect ratio
  + Demux:
  * Major overhaul of the adaptive streaming stack
  * Support for DAV video files
  * Add WebP image mapping
  * Fix missing audio start of Opus audio in MKV/WebM
  * Fix an infinite loop in MP4
  * Fix attachments extractions in ogg files
  * Support Uncompressed audio in mp4 (ISO/IEC 23003-5)
  * Fix some lip sync issue in rare MPEG-TS streams
  + Interface:
  * Qt/macOS: Fixup user provided URLs
  * Add safe area handling on macOS
  * Qt: improve preferences search
  * Qt: fix --no-mouse-events option
  + Misc:
  * Update YouTube script
  * Fix Icecast directory parsing which could lead to missing entries
  * Improve UPnP compatibility with some servers
- Drop vlc-srto_tsbpddelay.patch: fixed upstream.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1646913600">- Disable libnfs and soxr integration on suse_version &lt; 1500 (e.g
  SLE12).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1647691200">- Update to version 3.0.17.3:
  + This is a fixup release which fixes a regression that could
    cause a lack of audio for adaptive streaming playback. It is
    identical to 3.0.17.2 otherwise.
  + This updates contains various fixes and improvements:
  - Major adaptive streaming stack overhaul
  - Major codec updates
  - Many third party libraries update
  - Allow brackets in the path section of URLs
  - Better notch support for new macbooks
  - Add support for DAV video and Webp image formats
  - Improve AV1 live streaming support
  - Several SRT support improvements
  - Numerous crash fixes
  - Update youtube script
- Changes from version 3.0.17.2:
  + This is a fixup release which fixes youtube playback and
    contextual menus on integrated video for the Qt interface. It
    is identical to 3.0.17-1 otherwise.
- Changes from version 3.0.17-1:
  + This is a fixup release which bumps libflac to 1.3.4 in order
    to fix CVE-2020-0499 and CVE-2021-0561 on platforms for which
    we provide binary releases.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1650628800">- Update to version 3.0.17.4:
  + Service Discovery: Fix UPnP regression on Windows.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1653307200">- Add vlc-dav1d-1.0.patch: Fix build with dav1d 1.0. Upstream
  commits 2202c892 and d38ddd727.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1657108800">- Extend vlc-lua-5.3.patch: match upstream commit 0e0b070c26.
- Add 867.patch: support LUA 5.4 (boo#1200944).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1657713600">- Limit to Lua &lt; 5.4 (boo#1200944).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1659960000">- Also limit lua interpreter to &lt; 5.4 (boo#1200944).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1662552000">- Make vlc-vdpau supplement vlc, not vlc-noX: vdpau itself is based
  on top of the graphical stack.
- Move video_output/libegl_wl_plugin.so from vlc-noX to vlc: links
  GUI stack.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1667908800">- Limit to ffmpeg 4: we're also linking opencv3 which does not use
  ffmpeg 5.</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1668686400">- add vlc-caca-fix-to-0-99-beta20-version.patch: build with libcaca-0.99.beta20</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1669377600">- Update to version 3.0.18 (CVE-2022-41325, boo#1206142):
  + macOS: Fix audio device listing with non-latin names.
  + Misc: Fix rendering and performance issue with older GPUs.
  + Updated translations.
- Changes from version 3.0.18-rc2:
  + Codec/Demux:
  - Add support for Y16 chroma.
  - Fix build of gme plugin.
  + Lua:
  - Fix script for vocaroo.
  - Fix script for youtube to allow throttled playback.
  + Service Discovery: Fix UPnP regression on Windows.
  + Video Output: Fix video placement with caopengllayer.
  + Misc: Fix password search in kwallet module.
- Changes from version 3.0.18-rc:
  + Demux:
  - Major adaptive streaming update, notably for multiple
    timelies and webvtt.
  - Fix seeking with some fragmented MP4 files.
  - Add support for DVBSub inside MKV.
  - Fix some Flac files that could not be played.
  - Improve seeking in Ogg files.
  + Decoders:
  - Fix DxVA/D3D11 crashes on HEVC files with bogus references.
  - Fix libass storage size and crash.
  - Fix decoding errors on macOS hw decoding on some HEVC files.
  + Video Output:
  - Fix color regression with VAAPI/iOS and OpenGL output.
  - Fix some resizing issues with OpenGL on GLX/EGL/X11/XV.
  - Fix Direct3d9 texture stretching.
  - Fix 10-bit accelerated video filters on macOS.
  + Playlist: Avoid playlist liveloop on failed/tiny items
    (temporize EOS bursts).
  + Misc:
  - Misc fixes for the extension UI on macOS.
  - Improve SMBv1 and SMBv2 behaviours.
  - Improve FTP compatibility.
  - Support RISC-V.
  - Fix AVI muxing for Windows Media Player compatibility.
  - Fix seeking speed on macOS.
- Drop vlc-dav1d-1.0.patch and 867.patch: fixed upstream.
- Drop vlc-get-addr-by-ref-from-getConnectionEndpointAddress.patch:
  fixed upstream (commit 05445b74).
- Drop vlc-get-addr-by-ref-from-getConnectionEndpointAddress.patch:
  fixed upstream (commit b689202d).</changelog>
  <changelog author="Niklas Haas &lt;obs@haasn.xyz&gt;" date="1669377601">- Add vlc-libplacebo-5.patch: Backport fix for building with libplacebo v5</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1670846400">- Do not apply vlc.a52.patch if liba52 is &lt; 0.8.0
- Avoid ugly _FORTIFY_SOURCE redefinition warnings</changelog>
</package>
<package pkgid="0461f00841049efd1b7682ed05e503a5f75d51c48e6f37ef635fe660dff49591" name="vlc-codec-gstreamer" arch="x86_64">
  <version epoch="0" ver="3.0.18" rel="bp154.2.3.1"/>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1616760000">- Add vlc-gcc11.patch: Fix build using gcc11 (boo#1181918).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1616760001">- Guard post scriptlets to only run %{_libdir}/vlc/vlc-cache-gen if
  it already (or still, in case of uninstall) exists.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1620129600">- Update to version 3.0.13:
  + Demux:
  - Adaptive: fix artefacts in HLS streams with wrong profiles/levels
  - Fix regression on some MP4 files for the audio track
  - Fix MPGA and ADTS probing in TS files
  - Fix Flac inside AVI files
  - Fix VP9/Webm artefacts when seeking
  + Codec:
  - Support SSA text scaling
  - Fix rotation on Android rotation
  - Fix WebVTT subtitles that start at 00:00
  + Access:
  - Update libnfs to support NFSv4
  - Improve SMB2 integration
  - Fix Blu-ray files using Unicode names on Windows
  - Disable mcast lookups on Android for RTSP playback
  + Video Output: Rework the D3D11 rendering wait, to fix
    choppiness on display
  + Interfaces:
  - Fix VLC getting stuck on close on X11 (#21875)
  - Improve RTL on preferences on macOS
  - Add mousewheel horizontal axis control
  - Fix crash on exit on macOS
  - Fix sizing of the fullscreen controls on macOS
  + Misc:
  - Improve MIDI fonts search on Linux
  - Update Soundcloud, Youtube, liveleak
  - Fix compilation with GCC11
  - Fix input-slave option for subtitles
  + Updated translations.
- Drop vlc-gcc11.patch: fixed upstream.
- Extend vlc-srto_tsbpddelay.patch: allow srt &gt;= 1.3 for openSUSE.</changelog>
  <changelog author="Fusion Future &lt;qydwhotmail@gmail.com&gt;" date="1624104000">- Update to version 3.0.16:
  + Video Output: Fix a D3D11 crash on Windows 8/8.1.
  + Access: Fix RTSP server timeout handling.
  + Interfaces: macOS: Add touchbar support.
  + Misc: Multiple settings improvements.
- Changes from version 3.0.15:
  + Core: Add Opus &amp; Alac wave format mappings.
  + Access: Fix opening DVD folders with non-ascii characters.
  + Demux:
  - Fix asf regression with broadcast streams.
  - MP4: Fix audio drop on seek.
  + Video Output:
  - Fix seek &amp; volume sliders overlapping with subtitles.
  - Fix delays when seeking with D3D11.
  + Text renderer: Improve freetype fonts outlining.
  + Misc: Fix GnuTLS support for Windows XP.
- Changes from version 3.0.14:
  + Core:
  - Fix double loading of slave input.
  - Fix an issue causing the auto-updater not to launch the new
    version installer.
- Add vlc-get-addr-by-ref-from-getConnectionEndpointAddress.patch:
  The maintainers of live555 changed connectionEndpointAddresss to
  getConnectionEndpointAddress, which now provides the address
  value by reference.
- Rebase vlc-srto_tsbpddelay.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1645531200">- Guard --enable-libplacebo configure parameter with is_opensuse:
  the buildrequires is also guarded the same way.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1645617600">- BuildRequires pkgconfig(smbclient) instead of smbclient-devel:
  smbclient-devel was merged into samba-devel, and we do not want
  to care for actual package names.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1646654400">- Update to version 3.0.17:
  + Core:
  * Fix a regression in parsing secondary source MRLs
  * Allow brackets in path part of URLs
  + Access:
  * Fix support for screen capture on macOS with avcapture
  * Fix closing of HTTP 1.x connections
  * Improve HTTP2 memory usage
  * Improve AVCapture module
  * Improve AudioCD support (audio/data mixed mode, musicbrainz)
  * Improve SMB compatibility by changing the read size
  * Several improvements on the SRT modules (including streamID)
  + Decoders/Packetizers:
  * Add support for DTS LBR
  * Fix some HEVC hardware decoding on Windows and crashes when aspect ratio changes
  * Fix hardware decoding for some AMD GPU drivers
  * Add support for new Fourcc for E-AC3, AV1, GeoVision
  * Fix crashes with VP9 streams
  * Fix styling issues with subs tx3g (mp4) tracks
  * Fix playback of live AV1 streams
  + Audio Output:
  * iOS/tvOS: add support for spatial audio
  * macOS: fix some channels ordering for &gt; 5.1 channels
  * Android: rework audio volume management
  + Video Output:
  * Fix a D3D11 crash when the stream changes aspect ratio
  + Demux:
  * Major overhaul of the adaptive streaming stack
  * Support for DAV video files
  * Add WebP image mapping
  * Fix missing audio start of Opus audio in MKV/WebM
  * Fix an infinite loop in MP4
  * Fix attachments extractions in ogg files
  * Support Uncompressed audio in mp4 (ISO/IEC 23003-5)
  * Fix some lip sync issue in rare MPEG-TS streams
  + Interface:
  * Qt/macOS: Fixup user provided URLs
  * Add safe area handling on macOS
  * Qt: improve preferences search
  * Qt: fix --no-mouse-events option
  + Misc:
  * Update YouTube script
  * Fix Icecast directory parsing which could lead to missing entries
  * Improve UPnP compatibility with some servers
- Drop vlc-srto_tsbpddelay.patch: fixed upstream.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1646913600">- Disable libnfs and soxr integration on suse_version &lt; 1500 (e.g
  SLE12).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1647691200">- Update to version 3.0.17.3:
  + This is a fixup release which fixes a regression that could
    cause a lack of audio for adaptive streaming playback. It is
    identical to 3.0.17.2 otherwise.
  + This updates contains various fixes and improvements:
  - Major adaptive streaming stack overhaul
  - Major codec updates
  - Many third party libraries update
  - Allow brackets in the path section of URLs
  - Better notch support for new macbooks
  - Add support for DAV video and Webp image formats
  - Improve AV1 live streaming support
  - Several SRT support improvements
  - Numerous crash fixes
  - Update youtube script
- Changes from version 3.0.17.2:
  + This is a fixup release which fixes youtube playback and
    contextual menus on integrated video for the Qt interface. It
    is identical to 3.0.17-1 otherwise.
- Changes from version 3.0.17-1:
  + This is a fixup release which bumps libflac to 1.3.4 in order
    to fix CVE-2020-0499 and CVE-2021-0561 on platforms for which
    we provide binary releases.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1650628800">- Update to version 3.0.17.4:
  + Service Discovery: Fix UPnP regression on Windows.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1653307200">- Add vlc-dav1d-1.0.patch: Fix build with dav1d 1.0. Upstream
  commits 2202c892 and d38ddd727.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1657108800">- Extend vlc-lua-5.3.patch: match upstream commit 0e0b070c26.
- Add 867.patch: support LUA 5.4 (boo#1200944).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1657713600">- Limit to Lua &lt; 5.4 (boo#1200944).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1659960000">- Also limit lua interpreter to &lt; 5.4 (boo#1200944).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1662552000">- Make vlc-vdpau supplement vlc, not vlc-noX: vdpau itself is based
  on top of the graphical stack.
- Move video_output/libegl_wl_plugin.so from vlc-noX to vlc: links
  GUI stack.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1667908800">- Limit to ffmpeg 4: we're also linking opencv3 which does not use
  ffmpeg 5.</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1668686400">- add vlc-caca-fix-to-0-99-beta20-version.patch: build with libcaca-0.99.beta20</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1669377600">- Update to version 3.0.18 (CVE-2022-41325, boo#1206142):
  + macOS: Fix audio device listing with non-latin names.
  + Misc: Fix rendering and performance issue with older GPUs.
  + Updated translations.
- Changes from version 3.0.18-rc2:
  + Codec/Demux:
  - Add support for Y16 chroma.
  - Fix build of gme plugin.
  + Lua:
  - Fix script for vocaroo.
  - Fix script for youtube to allow throttled playback.
  + Service Discovery: Fix UPnP regression on Windows.
  + Video Output: Fix video placement with caopengllayer.
  + Misc: Fix password search in kwallet module.
- Changes from version 3.0.18-rc:
  + Demux:
  - Major adaptive streaming update, notably for multiple
    timelies and webvtt.
  - Fix seeking with some fragmented MP4 files.
  - Add support for DVBSub inside MKV.
  - Fix some Flac files that could not be played.
  - Improve seeking in Ogg files.
  + Decoders:
  - Fix DxVA/D3D11 crashes on HEVC files with bogus references.
  - Fix libass storage size and crash.
  - Fix decoding errors on macOS hw decoding on some HEVC files.
  + Video Output:
  - Fix color regression with VAAPI/iOS and OpenGL output.
  - Fix some resizing issues with OpenGL on GLX/EGL/X11/XV.
  - Fix Direct3d9 texture stretching.
  - Fix 10-bit accelerated video filters on macOS.
  + Playlist: Avoid playlist liveloop on failed/tiny items
    (temporize EOS bursts).
  + Misc:
  - Misc fixes for the extension UI on macOS.
  - Improve SMBv1 and SMBv2 behaviours.
  - Improve FTP compatibility.
  - Support RISC-V.
  - Fix AVI muxing for Windows Media Player compatibility.
  - Fix seeking speed on macOS.
- Drop vlc-dav1d-1.0.patch and 867.patch: fixed upstream.
- Drop vlc-get-addr-by-ref-from-getConnectionEndpointAddress.patch:
  fixed upstream (commit 05445b74).
- Drop vlc-get-addr-by-ref-from-getConnectionEndpointAddress.patch:
  fixed upstream (commit b689202d).</changelog>
  <changelog author="Niklas Haas &lt;obs@haasn.xyz&gt;" date="1669377601">- Add vlc-libplacebo-5.patch: Backport fix for building with libplacebo v5</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1670846400">- Do not apply vlc.a52.patch if liba52 is &lt; 0.8.0
- Avoid ugly _FORTIFY_SOURCE redefinition warnings</changelog>
</package>
<package pkgid="4b54d2dcf891aba9a7d9b9587ec8ea1af67ab8b09e8b269defe09f78a1ff73b7" name="vlc-devel" arch="aarch64">
  <version epoch="0" ver="3.0.18" rel="bp154.2.3.1"/>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1616760000">- Add vlc-gcc11.patch: Fix build using gcc11 (boo#1181918).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1616760001">- Guard post scriptlets to only run %{_libdir}/vlc/vlc-cache-gen if
  it already (or still, in case of uninstall) exists.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1620129600">- Update to version 3.0.13:
  + Demux:
  - Adaptive: fix artefacts in HLS streams with wrong profiles/levels
  - Fix regression on some MP4 files for the audio track
  - Fix MPGA and ADTS probing in TS files
  - Fix Flac inside AVI files
  - Fix VP9/Webm artefacts when seeking
  + Codec:
  - Support SSA text scaling
  - Fix rotation on Android rotation
  - Fix WebVTT subtitles that start at 00:00
  + Access:
  - Update libnfs to support NFSv4
  - Improve SMB2 integration
  - Fix Blu-ray files using Unicode names on Windows
  - Disable mcast lookups on Android for RTSP playback
  + Video Output: Rework the D3D11 rendering wait, to fix
    choppiness on display
  + Interfaces:
  - Fix VLC getting stuck on close on X11 (#21875)
  - Improve RTL on preferences on macOS
  - Add mousewheel horizontal axis control
  - Fix crash on exit on macOS
  - Fix sizing of the fullscreen controls on macOS
  + Misc:
  - Improve MIDI fonts search on Linux
  - Update Soundcloud, Youtube, liveleak
  - Fix compilation with GCC11
  - Fix input-slave option for subtitles
  + Updated translations.
- Drop vlc-gcc11.patch: fixed upstream.
- Extend vlc-srto_tsbpddelay.patch: allow srt &gt;= 1.3 for openSUSE.</changelog>
  <changelog author="Fusion Future &lt;qydwhotmail@gmail.com&gt;" date="1624104000">- Update to version 3.0.16:
  + Video Output: Fix a D3D11 crash on Windows 8/8.1.
  + Access: Fix RTSP server timeout handling.
  + Interfaces: macOS: Add touchbar support.
  + Misc: Multiple settings improvements.
- Changes from version 3.0.15:
  + Core: Add Opus &amp; Alac wave format mappings.
  + Access: Fix opening DVD folders with non-ascii characters.
  + Demux:
  - Fix asf regression with broadcast streams.
  - MP4: Fix audio drop on seek.
  + Video Output:
  - Fix seek &amp; volume sliders overlapping with subtitles.
  - Fix delays when seeking with D3D11.
  + Text renderer: Improve freetype fonts outlining.
  + Misc: Fix GnuTLS support for Windows XP.
- Changes from version 3.0.14:
  + Core:
  - Fix double loading of slave input.
  - Fix an issue causing the auto-updater not to launch the new
    version installer.
- Add vlc-get-addr-by-ref-from-getConnectionEndpointAddress.patch:
  The maintainers of live555 changed connectionEndpointAddresss to
  getConnectionEndpointAddress, which now provides the address
  value by reference.
- Rebase vlc-srto_tsbpddelay.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1645531200">- Guard --enable-libplacebo configure parameter with is_opensuse:
  the buildrequires is also guarded the same way.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1645617600">- BuildRequires pkgconfig(smbclient) instead of smbclient-devel:
  smbclient-devel was merged into samba-devel, and we do not want
  to care for actual package names.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1646654400">- Update to version 3.0.17:
  + Core:
  * Fix a regression in parsing secondary source MRLs
  * Allow brackets in path part of URLs
  + Access:
  * Fix support for screen capture on macOS with avcapture
  * Fix closing of HTTP 1.x connections
  * Improve HTTP2 memory usage
  * Improve AVCapture module
  * Improve AudioCD support (audio/data mixed mode, musicbrainz)
  * Improve SMB compatibility by changing the read size
  * Several improvements on the SRT modules (including streamID)
  + Decoders/Packetizers:
  * Add support for DTS LBR
  * Fix some HEVC hardware decoding on Windows and crashes when aspect ratio changes
  * Fix hardware decoding for some AMD GPU drivers
  * Add support for new Fourcc for E-AC3, AV1, GeoVision
  * Fix crashes with VP9 streams
  * Fix styling issues with subs tx3g (mp4) tracks
  * Fix playback of live AV1 streams
  + Audio Output:
  * iOS/tvOS: add support for spatial audio
  * macOS: fix some channels ordering for &gt; 5.1 channels
  * Android: rework audio volume management
  + Video Output:
  * Fix a D3D11 crash when the stream changes aspect ratio
  + Demux:
  * Major overhaul of the adaptive streaming stack
  * Support for DAV video files
  * Add WebP image mapping
  * Fix missing audio start of Opus audio in MKV/WebM
  * Fix an infinite loop in MP4
  * Fix attachments extractions in ogg files
  * Support Uncompressed audio in mp4 (ISO/IEC 23003-5)
  * Fix some lip sync issue in rare MPEG-TS streams
  + Interface:
  * Qt/macOS: Fixup user provided URLs
  * Add safe area handling on macOS
  * Qt: improve preferences search
  * Qt: fix --no-mouse-events option
  + Misc:
  * Update YouTube script
  * Fix Icecast directory parsing which could lead to missing entries
  * Improve UPnP compatibility with some servers
- Drop vlc-srto_tsbpddelay.patch: fixed upstream.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1646913600">- Disable libnfs and soxr integration on suse_version &lt; 1500 (e.g
  SLE12).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1647691200">- Update to version 3.0.17.3:
  + This is a fixup release which fixes a regression that could
    cause a lack of audio for adaptive streaming playback. It is
    identical to 3.0.17.2 otherwise.
  + This updates contains various fixes and improvements:
  - Major adaptive streaming stack overhaul
  - Major codec updates
  - Many third party libraries update
  - Allow brackets in the path section of URLs
  - Better notch support for new macbooks
  - Add support for DAV video and Webp image formats
  - Improve AV1 live streaming support
  - Several SRT support improvements
  - Numerous crash fixes
  - Update youtube script
- Changes from version 3.0.17.2:
  + This is a fixup release which fixes youtube playback and
    contextual menus on integrated video for the Qt interface. It
    is identical to 3.0.17-1 otherwise.
- Changes from version 3.0.17-1:
  + This is a fixup release which bumps libflac to 1.3.4 in order
    to fix CVE-2020-0499 and CVE-2021-0561 on platforms for which
    we provide binary releases.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1650628800">- Update to version 3.0.17.4:
  + Service Discovery: Fix UPnP regression on Windows.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1653307200">- Add vlc-dav1d-1.0.patch: Fix build with dav1d 1.0. Upstream
  commits 2202c892 and d38ddd727.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1657108800">- Extend vlc-lua-5.3.patch: match upstream commit 0e0b070c26.
- Add 867.patch: support LUA 5.4 (boo#1200944).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1657713600">- Limit to Lua &lt; 5.4 (boo#1200944).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1659960000">- Also limit lua interpreter to &lt; 5.4 (boo#1200944).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1662552000">- Make vlc-vdpau supplement vlc, not vlc-noX: vdpau itself is based
  on top of the graphical stack.
- Move video_output/libegl_wl_plugin.so from vlc-noX to vlc: links
  GUI stack.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1667908800">- Limit to ffmpeg 4: we're also linking opencv3 which does not use
  ffmpeg 5.</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1668686400">- add vlc-caca-fix-to-0-99-beta20-version.patch: build with libcaca-0.99.beta20</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1669377600">- Update to version 3.0.18 (CVE-2022-41325, boo#1206142):
  + macOS: Fix audio device listing with non-latin names.
  + Misc: Fix rendering and performance issue with older GPUs.
  + Updated translations.
- Changes from version 3.0.18-rc2:
  + Codec/Demux:
  - Add support for Y16 chroma.
  - Fix build of gme plugin.
  + Lua:
  - Fix script for vocaroo.
  - Fix script for youtube to allow throttled playback.
  + Service Discovery: Fix UPnP regression on Windows.
  + Video Output: Fix video placement with caopengllayer.
  + Misc: Fix password search in kwallet module.
- Changes from version 3.0.18-rc:
  + Demux:
  - Major adaptive streaming update, notably for multiple
    timelies and webvtt.
  - Fix seeking with some fragmented MP4 files.
  - Add support for DVBSub inside MKV.
  - Fix some Flac files that could not be played.
  - Improve seeking in Ogg files.
  + Decoders:
  - Fix DxVA/D3D11 crashes on HEVC files with bogus references.
  - Fix libass storage size and crash.
  - Fix decoding errors on macOS hw decoding on some HEVC files.
  + Video Output:
  - Fix color regression with VAAPI/iOS and OpenGL output.
  - Fix some resizing issues with OpenGL on GLX/EGL/X11/XV.
  - Fix Direct3d9 texture stretching.
  - Fix 10-bit accelerated video filters on macOS.
  + Playlist: Avoid playlist liveloop on failed/tiny items
    (temporize EOS bursts).
  + Misc:
  - Misc fixes for the extension UI on macOS.
  - Improve SMBv1 and SMBv2 behaviours.
  - Improve FTP compatibility.
  - Support RISC-V.
  - Fix AVI muxing for Windows Media Player compatibility.
  - Fix seeking speed on macOS.
- Drop vlc-dav1d-1.0.patch and 867.patch: fixed upstream.
- Drop vlc-get-addr-by-ref-from-getConnectionEndpointAddress.patch:
  fixed upstream (commit 05445b74).
- Drop vlc-get-addr-by-ref-from-getConnectionEndpointAddress.patch:
  fixed upstream (commit b689202d).</changelog>
  <changelog author="Niklas Haas &lt;obs@haasn.xyz&gt;" date="1669377601">- Add vlc-libplacebo-5.patch: Backport fix for building with libplacebo v5</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1670846400">- Do not apply vlc.a52.patch if liba52 is &lt; 0.8.0
- Avoid ugly _FORTIFY_SOURCE redefinition warnings</changelog>
</package>
<package pkgid="bfbe7ddc444c52398fbe82c276321fe4146c1b4155b489e4c4006f11e199a85d" name="vlc-devel" arch="ppc64le">
  <version epoch="0" ver="3.0.18" rel="bp154.2.3.1"/>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1616760000">- Add vlc-gcc11.patch: Fix build using gcc11 (boo#1181918).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1616760001">- Guard post scriptlets to only run %{_libdir}/vlc/vlc-cache-gen if
  it already (or still, in case of uninstall) exists.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1620129600">- Update to version 3.0.13:
  + Demux:
  - Adaptive: fix artefacts in HLS streams with wrong profiles/levels
  - Fix regression on some MP4 files for the audio track
  - Fix MPGA and ADTS probing in TS files
  - Fix Flac inside AVI files
  - Fix VP9/Webm artefacts when seeking
  + Codec:
  - Support SSA text scaling
  - Fix rotation on Android rotation
  - Fix WebVTT subtitles that start at 00:00
  + Access:
  - Update libnfs to support NFSv4
  - Improve SMB2 integration
  - Fix Blu-ray files using Unicode names on Windows
  - Disable mcast lookups on Android for RTSP playback
  + Video Output: Rework the D3D11 rendering wait, to fix
    choppiness on display
  + Interfaces:
  - Fix VLC getting stuck on close on X11 (#21875)
  - Improve RTL on preferences on macOS
  - Add mousewheel horizontal axis control
  - Fix crash on exit on macOS
  - Fix sizing of the fullscreen controls on macOS
  + Misc:
  - Improve MIDI fonts search on Linux
  - Update Soundcloud, Youtube, liveleak
  - Fix compilation with GCC11
  - Fix input-slave option for subtitles
  + Updated translations.
- Drop vlc-gcc11.patch: fixed upstream.
- Extend vlc-srto_tsbpddelay.patch: allow srt &gt;= 1.3 for openSUSE.</changelog>
  <changelog author="Fusion Future &lt;qydwhotmail@gmail.com&gt;" date="1624104000">- Update to version 3.0.16:
  + Video Output: Fix a D3D11 crash on Windows 8/8.1.
  + Access: Fix RTSP server timeout handling.
  + Interfaces: macOS: Add touchbar support.
  + Misc: Multiple settings improvements.
- Changes from version 3.0.15:
  + Core: Add Opus &amp; Alac wave format mappings.
  + Access: Fix opening DVD folders with non-ascii characters.
  + Demux:
  - Fix asf regression with broadcast streams.
  - MP4: Fix audio drop on seek.
  + Video Output:
  - Fix seek &amp; volume sliders overlapping with subtitles.
  - Fix delays when seeking with D3D11.
  + Text renderer: Improve freetype fonts outlining.
  + Misc: Fix GnuTLS support for Windows XP.
- Changes from version 3.0.14:
  + Core:
  - Fix double loading of slave input.
  - Fix an issue causing the auto-updater not to launch the new
    version installer.
- Add vlc-get-addr-by-ref-from-getConnectionEndpointAddress.patch:
  The maintainers of live555 changed connectionEndpointAddresss to
  getConnectionEndpointAddress, which now provides the address
  value by reference.
- Rebase vlc-srto_tsbpddelay.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1645531200">- Guard --enable-libplacebo configure parameter with is_opensuse:
  the buildrequires is also guarded the same way.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1645617600">- BuildRequires pkgconfig(smbclient) instead of smbclient-devel:
  smbclient-devel was merged into samba-devel, and we do not want
  to care for actual package names.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1646654400">- Update to version 3.0.17:
  + Core:
  * Fix a regression in parsing secondary source MRLs
  * Allow brackets in path part of URLs
  + Access:
  * Fix support for screen capture on macOS with avcapture
  * Fix closing of HTTP 1.x connections
  * Improve HTTP2 memory usage
  * Improve AVCapture module
  * Improve AudioCD support (audio/data mixed mode, musicbrainz)
  * Improve SMB compatibility by changing the read size
  * Several improvements on the SRT modules (including streamID)
  + Decoders/Packetizers:
  * Add support for DTS LBR
  * Fix some HEVC hardware decoding on Windows and crashes when aspect ratio changes
  * Fix hardware decoding for some AMD GPU drivers
  * Add support for new Fourcc for E-AC3, AV1, GeoVision
  * Fix crashes with VP9 streams
  * Fix styling issues with subs tx3g (mp4) tracks
  * Fix playback of live AV1 streams
  + Audio Output:
  * iOS/tvOS: add support for spatial audio
  * macOS: fix some channels ordering for &gt; 5.1 channels
  * Android: rework audio volume management
  + Video Output:
  * Fix a D3D11 crash when the stream changes aspect ratio
  + Demux:
  * Major overhaul of the adaptive streaming stack
  * Support for DAV video files
  * Add WebP image mapping
  * Fix missing audio start of Opus audio in MKV/WebM
  * Fix an infinite loop in MP4
  * Fix attachments extractions in ogg files
  * Support Uncompressed audio in mp4 (ISO/IEC 23003-5)
  * Fix some lip sync issue in rare MPEG-TS streams
  + Interface:
  * Qt/macOS: Fixup user provided URLs
  * Add safe area handling on macOS
  * Qt: improve preferences search
  * Qt: fix --no-mouse-events option
  + Misc:
  * Update YouTube script
  * Fix Icecast directory parsing which could lead to missing entries
  * Improve UPnP compatibility with some servers
- Drop vlc-srto_tsbpddelay.patch: fixed upstream.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1646913600">- Disable libnfs and soxr integration on suse_version &lt; 1500 (e.g
  SLE12).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1647691200">- Update to version 3.0.17.3:
  + This is a fixup release which fixes a regression that could
    cause a lack of audio for adaptive streaming playback. It is
    identical to 3.0.17.2 otherwise.
  + This updates contains various fixes and improvements:
  - Major adaptive streaming stack overhaul
  - Major codec updates
  - Many third party libraries update
  - Allow brackets in the path section of URLs
  - Better notch support for new macbooks
  - Add support for DAV video and Webp image formats
  - Improve AV1 live streaming support
  - Several SRT support improvements
  - Numerous crash fixes
  - Update youtube script
- Changes from version 3.0.17.2:
  + This is a fixup release which fixes youtube playback and
    contextual menus on integrated video for the Qt interface. It
    is identical to 3.0.17-1 otherwise.
- Changes from version 3.0.17-1:
  + This is a fixup release which bumps libflac to 1.3.4 in order
    to fix CVE-2020-0499 and CVE-2021-0561 on platforms for which
    we provide binary releases.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1650628800">- Update to version 3.0.17.4:
  + Service Discovery: Fix UPnP regression on Windows.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1653307200">- Add vlc-dav1d-1.0.patch: Fix build with dav1d 1.0. Upstream
  commits 2202c892 and d38ddd727.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1657108800">- Extend vlc-lua-5.3.patch: match upstream commit 0e0b070c26.
- Add 867.patch: support LUA 5.4 (boo#1200944).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1657713600">- Limit to Lua &lt; 5.4 (boo#1200944).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1659960000">- Also limit lua interpreter to &lt; 5.4 (boo#1200944).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1662552000">- Make vlc-vdpau supplement vlc, not vlc-noX: vdpau itself is based
  on top of the graphical stack.
- Move video_output/libegl_wl_plugin.so from vlc-noX to vlc: links
  GUI stack.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1667908800">- Limit to ffmpeg 4: we're also linking opencv3 which does not use
  ffmpeg 5.</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1668686400">- add vlc-caca-fix-to-0-99-beta20-version.patch: build with libcaca-0.99.beta20</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1669377600">- Update to version 3.0.18 (CVE-2022-41325, boo#1206142):
  + macOS: Fix audio device listing with non-latin names.
  + Misc: Fix rendering and performance issue with older GPUs.
  + Updated translations.
- Changes from version 3.0.18-rc2:
  + Codec/Demux:
  - Add support for Y16 chroma.
  - Fix build of gme plugin.
  + Lua:
  - Fix script for vocaroo.
  - Fix script for youtube to allow throttled playback.
  + Service Discovery: Fix UPnP regression on Windows.
  + Video Output: Fix video placement with caopengllayer.
  + Misc: Fix password search in kwallet module.
- Changes from version 3.0.18-rc:
  + Demux:
  - Major adaptive streaming update, notably for multiple
    timelies and webvtt.
  - Fix seeking with some fragmented MP4 files.
  - Add support for DVBSub inside MKV.
  - Fix some Flac files that could not be played.
  - Improve seeking in Ogg files.
  + Decoders:
  - Fix DxVA/D3D11 crashes on HEVC files with bogus references.
  - Fix libass storage size and crash.
  - Fix decoding errors on macOS hw decoding on some HEVC files.
  + Video Output:
  - Fix color regression with VAAPI/iOS and OpenGL output.
  - Fix some resizing issues with OpenGL on GLX/EGL/X11/XV.
  - Fix Direct3d9 texture stretching.
  - Fix 10-bit accelerated video filters on macOS.
  + Playlist: Avoid playlist liveloop on failed/tiny items
    (temporize EOS bursts).
  + Misc:
  - Misc fixes for the extension UI on macOS.
  - Improve SMBv1 and SMBv2 behaviours.
  - Improve FTP compatibility.
  - Support RISC-V.
  - Fix AVI muxing for Windows Media Player compatibility.
  - Fix seeking speed on macOS.
- Drop vlc-dav1d-1.0.patch and 867.patch: fixed upstream.
- Drop vlc-get-addr-by-ref-from-getConnectionEndpointAddress.patch:
  fixed upstream (commit 05445b74).
- Drop vlc-get-addr-by-ref-from-getConnectionEndpointAddress.patch:
  fixed upstream (commit b689202d).</changelog>
  <changelog author="Niklas Haas &lt;obs@haasn.xyz&gt;" date="1669377601">- Add vlc-libplacebo-5.patch: Backport fix for building with libplacebo v5</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1670846400">- Do not apply vlc.a52.patch if liba52 is &lt; 0.8.0
- Avoid ugly _FORTIFY_SOURCE redefinition warnings</changelog>
</package>
<package pkgid="ef77f1303783a32b201151c3511155d8b1df2391662aabf4a52142b5cbb34223" name="vlc-devel" arch="x86_64">
  <version epoch="0" ver="3.0.18" rel="bp154.2.3.1"/>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1616760000">- Add vlc-gcc11.patch: Fix build using gcc11 (boo#1181918).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1616760001">- Guard post scriptlets to only run %{_libdir}/vlc/vlc-cache-gen if
  it already (or still, in case of uninstall) exists.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1620129600">- Update to version 3.0.13:
  + Demux:
  - Adaptive: fix artefacts in HLS streams with wrong profiles/levels
  - Fix regression on some MP4 files for the audio track
  - Fix MPGA and ADTS probing in TS files
  - Fix Flac inside AVI files
  - Fix VP9/Webm artefacts when seeking
  + Codec:
  - Support SSA text scaling
  - Fix rotation on Android rotation
  - Fix WebVTT subtitles that start at 00:00
  + Access:
  - Update libnfs to support NFSv4
  - Improve SMB2 integration
  - Fix Blu-ray files using Unicode names on Windows
  - Disable mcast lookups on Android for RTSP playback
  + Video Output: Rework the D3D11 rendering wait, to fix
    choppiness on display
  + Interfaces:
  - Fix VLC getting stuck on close on X11 (#21875)
  - Improve RTL on preferences on macOS
  - Add mousewheel horizontal axis control
  - Fix crash on exit on macOS
  - Fix sizing of the fullscreen controls on macOS
  + Misc:
  - Improve MIDI fonts search on Linux
  - Update Soundcloud, Youtube, liveleak
  - Fix compilation with GCC11
  - Fix input-slave option for subtitles
  + Updated translations.
- Drop vlc-gcc11.patch: fixed upstream.
- Extend vlc-srto_tsbpddelay.patch: allow srt &gt;= 1.3 for openSUSE.</changelog>
  <changelog author="Fusion Future &lt;qydwhotmail@gmail.com&gt;" date="1624104000">- Update to version 3.0.16:
  + Video Output: Fix a D3D11 crash on Windows 8/8.1.
  + Access: Fix RTSP server timeout handling.
  + Interfaces: macOS: Add touchbar support.
  + Misc: Multiple settings improvements.
- Changes from version 3.0.15:
  + Core: Add Opus &amp; Alac wave format mappings.
  + Access: Fix opening DVD folders with non-ascii characters.
  + Demux:
  - Fix asf regression with broadcast streams.
  - MP4: Fix audio drop on seek.
  + Video Output:
  - Fix seek &amp; volume sliders overlapping with subtitles.
  - Fix delays when seeking with D3D11.
  + Text renderer: Improve freetype fonts outlining.
  + Misc: Fix GnuTLS support for Windows XP.
- Changes from version 3.0.14:
  + Core:
  - Fix double loading of slave input.
  - Fix an issue causing the auto-updater not to launch the new
    version installer.
- Add vlc-get-addr-by-ref-from-getConnectionEndpointAddress.patch:
  The maintainers of live555 changed connectionEndpointAddresss to
  getConnectionEndpointAddress, which now provides the address
  value by reference.
- Rebase vlc-srto_tsbpddelay.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1645531200">- Guard --enable-libplacebo configure parameter with is_opensuse:
  the buildrequires is also guarded the same way.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1645617600">- BuildRequires pkgconfig(smbclient) instead of smbclient-devel:
  smbclient-devel was merged into samba-devel, and we do not want
  to care for actual package names.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1646654400">- Update to version 3.0.17:
  + Core:
  * Fix a regression in parsing secondary source MRLs
  * Allow brackets in path part of URLs
  + Access:
  * Fix support for screen capture on macOS with avcapture
  * Fix closing of HTTP 1.x connections
  * Improve HTTP2 memory usage
  * Improve AVCapture module
  * Improve AudioCD support (audio/data mixed mode, musicbrainz)
  * Improve SMB compatibility by changing the read size
  * Several improvements on the SRT modules (including streamID)
  + Decoders/Packetizers:
  * Add support for DTS LBR
  * Fix some HEVC hardware decoding on Windows and crashes when aspect ratio changes
  * Fix hardware decoding for some AMD GPU drivers
  * Add support for new Fourcc for E-AC3, AV1, GeoVision
  * Fix crashes with VP9 streams
  * Fix styling issues with subs tx3g (mp4) tracks
  * Fix playback of live AV1 streams
  + Audio Output:
  * iOS/tvOS: add support for spatial audio
  * macOS: fix some channels ordering for &gt; 5.1 channels
  * Android: rework audio volume management
  + Video Output:
  * Fix a D3D11 crash when the stream changes aspect ratio
  + Demux:
  * Major overhaul of the adaptive streaming stack
  * Support for DAV video files
  * Add WebP image mapping
  * Fix missing audio start of Opus audio in MKV/WebM
  * Fix an infinite loop in MP4
  * Fix attachments extractions in ogg files
  * Support Uncompressed audio in mp4 (ISO/IEC 23003-5)
  * Fix some lip sync issue in rare MPEG-TS streams
  + Interface:
  * Qt/macOS: Fixup user provided URLs
  * Add safe area handling on macOS
  * Qt: improve preferences search
  * Qt: fix --no-mouse-events option
  + Misc:
  * Update YouTube script
  * Fix Icecast directory parsing which could lead to missing entries
  * Improve UPnP compatibility with some servers
- Drop vlc-srto_tsbpddelay.patch: fixed upstream.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1646913600">- Disable libnfs and soxr integration on suse_version &lt; 1500 (e.g
  SLE12).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1647691200">- Update to version 3.0.17.3:
  + This is a fixup release which fixes a regression that could
    cause a lack of audio for adaptive streaming playback. It is
    identical to 3.0.17.2 otherwise.
  + This updates contains various fixes and improvements:
  - Major adaptive streaming stack overhaul
  - Major codec updates
  - Many third party libraries update
  - Allow brackets in the path section of URLs
  - Better notch support for new macbooks
  - Add support for DAV video and Webp image formats
  - Improve AV1 live streaming support
  - Several SRT support improvements
  - Numerous crash fixes
  - Update youtube script
- Changes from version 3.0.17.2:
  + This is a fixup release which fixes youtube playback and
    contextual menus on integrated video for the Qt interface. It
    is identical to 3.0.17-1 otherwise.
- Changes from version 3.0.17-1:
  + This is a fixup release which bumps libflac to 1.3.4 in order
    to fix CVE-2020-0499 and CVE-2021-0561 on platforms for which
    we provide binary releases.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1650628800">- Update to version 3.0.17.4:
  + Service Discovery: Fix UPnP regression on Windows.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1653307200">- Add vlc-dav1d-1.0.patch: Fix build with dav1d 1.0. Upstream
  commits 2202c892 and d38ddd727.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1657108800">- Extend vlc-lua-5.3.patch: match upstream commit 0e0b070c26.
- Add 867.patch: support LUA 5.4 (boo#1200944).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1657713600">- Limit to Lua &lt; 5.4 (boo#1200944).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1659960000">- Also limit lua interpreter to &lt; 5.4 (boo#1200944).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1662552000">- Make vlc-vdpau supplement vlc, not vlc-noX: vdpau itself is based
  on top of the graphical stack.
- Move video_output/libegl_wl_plugin.so from vlc-noX to vlc: links
  GUI stack.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1667908800">- Limit to ffmpeg 4: we're also linking opencv3 which does not use
  ffmpeg 5.</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1668686400">- add vlc-caca-fix-to-0-99-beta20-version.patch: build with libcaca-0.99.beta20</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1669377600">- Update to version 3.0.18 (CVE-2022-41325, boo#1206142):
  + macOS: Fix audio device listing with non-latin names.
  + Misc: Fix rendering and performance issue with older GPUs.
  + Updated translations.
- Changes from version 3.0.18-rc2:
  + Codec/Demux:
  - Add support for Y16 chroma.
  - Fix build of gme plugin.
  + Lua:
  - Fix script for vocaroo.
  - Fix script for youtube to allow throttled playback.
  + Service Discovery: Fix UPnP regression on Windows.
  + Video Output: Fix video placement with caopengllayer.
  + Misc: Fix password search in kwallet module.
- Changes from version 3.0.18-rc:
  + Demux:
  - Major adaptive streaming update, notably for multiple
    timelies and webvtt.
  - Fix seeking with some fragmented MP4 files.
  - Add support for DVBSub inside MKV.
  - Fix some Flac files that could not be played.
  - Improve seeking in Ogg files.
  + Decoders:
  - Fix DxVA/D3D11 crashes on HEVC files with bogus references.
  - Fix libass storage size and crash.
  - Fix decoding errors on macOS hw decoding on some HEVC files.
  + Video Output:
  - Fix color regression with VAAPI/iOS and OpenGL output.
  - Fix some resizing issues with OpenGL on GLX/EGL/X11/XV.
  - Fix Direct3d9 texture stretching.
  - Fix 10-bit accelerated video filters on macOS.
  + Playlist: Avoid playlist liveloop on failed/tiny items
    (temporize EOS bursts).
  + Misc:
  - Misc fixes for the extension UI on macOS.
  - Improve SMBv1 and SMBv2 behaviours.
  - Improve FTP compatibility.
  - Support RISC-V.
  - Fix AVI muxing for Windows Media Player compatibility.
  - Fix seeking speed on macOS.
- Drop vlc-dav1d-1.0.patch and 867.patch: fixed upstream.
- Drop vlc-get-addr-by-ref-from-getConnectionEndpointAddress.patch:
  fixed upstream (commit 05445b74).
- Drop vlc-get-addr-by-ref-from-getConnectionEndpointAddress.patch:
  fixed upstream (commit b689202d).</changelog>
  <changelog author="Niklas Haas &lt;obs@haasn.xyz&gt;" date="1669377601">- Add vlc-libplacebo-5.patch: Backport fix for building with libplacebo v5</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1670846400">- Do not apply vlc.a52.patch if liba52 is &lt; 0.8.0
- Avoid ugly _FORTIFY_SOURCE redefinition warnings</changelog>
</package>
<package pkgid="5d21dacd3afd01f40797db98bdd3a32516fb12c6baf0425bd070bf9ed67d746e" name="vlc-jack" arch="aarch64">
  <version epoch="0" ver="3.0.18" rel="bp154.2.3.1"/>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1616760000">- Add vlc-gcc11.patch: Fix build using gcc11 (boo#1181918).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1616760001">- Guard post scriptlets to only run %{_libdir}/vlc/vlc-cache-gen if
  it already (or still, in case of uninstall) exists.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1620129600">- Update to version 3.0.13:
  + Demux:
  - Adaptive: fix artefacts in HLS streams with wrong profiles/levels
  - Fix regression on some MP4 files for the audio track
  - Fix MPGA and ADTS probing in TS files
  - Fix Flac inside AVI files
  - Fix VP9/Webm artefacts when seeking
  + Codec:
  - Support SSA text scaling
  - Fix rotation on Android rotation
  - Fix WebVTT subtitles that start at 00:00
  + Access:
  - Update libnfs to support NFSv4
  - Improve SMB2 integration
  - Fix Blu-ray files using Unicode names on Windows
  - Disable mcast lookups on Android for RTSP playback
  + Video Output: Rework the D3D11 rendering wait, to fix
    choppiness on display
  + Interfaces:
  - Fix VLC getting stuck on close on X11 (#21875)
  - Improve RTL on preferences on macOS
  - Add mousewheel horizontal axis control
  - Fix crash on exit on macOS
  - Fix sizing of the fullscreen controls on macOS
  + Misc:
  - Improve MIDI fonts search on Linux
  - Update Soundcloud, Youtube, liveleak
  - Fix compilation with GCC11
  - Fix input-slave option for subtitles
  + Updated translations.
- Drop vlc-gcc11.patch: fixed upstream.
- Extend vlc-srto_tsbpddelay.patch: allow srt &gt;= 1.3 for openSUSE.</changelog>
  <changelog author="Fusion Future &lt;qydwhotmail@gmail.com&gt;" date="1624104000">- Update to version 3.0.16:
  + Video Output: Fix a D3D11 crash on Windows 8/8.1.
  + Access: Fix RTSP server timeout handling.
  + Interfaces: macOS: Add touchbar support.
  + Misc: Multiple settings improvements.
- Changes from version 3.0.15:
  + Core: Add Opus &amp; Alac wave format mappings.
  + Access: Fix opening DVD folders with non-ascii characters.
  + Demux:
  - Fix asf regression with broadcast streams.
  - MP4: Fix audio drop on seek.
  + Video Output:
  - Fix seek &amp; volume sliders overlapping with subtitles.
  - Fix delays when seeking with D3D11.
  + Text renderer: Improve freetype fonts outlining.
  + Misc: Fix GnuTLS support for Windows XP.
- Changes from version 3.0.14:
  + Core:
  - Fix double loading of slave input.
  - Fix an issue causing the auto-updater not to launch the new
    version installer.
- Add vlc-get-addr-by-ref-from-getConnectionEndpointAddress.patch:
  The maintainers of live555 changed connectionEndpointAddresss to
  getConnectionEndpointAddress, which now provides the address
  value by reference.
- Rebase vlc-srto_tsbpddelay.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1645531200">- Guard --enable-libplacebo configure parameter with is_opensuse:
  the buildrequires is also guarded the same way.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1645617600">- BuildRequires pkgconfig(smbclient) instead of smbclient-devel:
  smbclient-devel was merged into samba-devel, and we do not want
  to care for actual package names.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1646654400">- Update to version 3.0.17:
  + Core:
  * Fix a regression in parsing secondary source MRLs
  * Allow brackets in path part of URLs
  + Access:
  * Fix support for screen capture on macOS with avcapture
  * Fix closing of HTTP 1.x connections
  * Improve HTTP2 memory usage
  * Improve AVCapture module
  * Improve AudioCD support (audio/data mixed mode, musicbrainz)
  * Improve SMB compatibility by changing the read size
  * Several improvements on the SRT modules (including streamID)
  + Decoders/Packetizers:
  * Add support for DTS LBR
  * Fix some HEVC hardware decoding on Windows and crashes when aspect ratio changes
  * Fix hardware decoding for some AMD GPU drivers
  * Add support for new Fourcc for E-AC3, AV1, GeoVision
  * Fix crashes with VP9 streams
  * Fix styling issues with subs tx3g (mp4) tracks
  * Fix playback of live AV1 streams
  + Audio Output:
  * iOS/tvOS: add support for spatial audio
  * macOS: fix some channels ordering for &gt; 5.1 channels
  * Android: rework audio volume management
  + Video Output:
  * Fix a D3D11 crash when the stream changes aspect ratio
  + Demux:
  * Major overhaul of the adaptive streaming stack
  * Support for DAV video files
  * Add WebP image mapping
  * Fix missing audio start of Opus audio in MKV/WebM
  * Fix an infinite loop in MP4
  * Fix attachments extractions in ogg files
  * Support Uncompressed audio in mp4 (ISO/IEC 23003-5)
  * Fix some lip sync issue in rare MPEG-TS streams
  + Interface:
  * Qt/macOS: Fixup user provided URLs
  * Add safe area handling on macOS
  * Qt: improve preferences search
  * Qt: fix --no-mouse-events option
  + Misc:
  * Update YouTube script
  * Fix Icecast directory parsing which could lead to missing entries
  * Improve UPnP compatibility with some servers
- Drop vlc-srto_tsbpddelay.patch: fixed upstream.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1646913600">- Disable libnfs and soxr integration on suse_version &lt; 1500 (e.g
  SLE12).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1647691200">- Update to version 3.0.17.3:
  + This is a fixup release which fixes a regression that could
    cause a lack of audio for adaptive streaming playback. It is
    identical to 3.0.17.2 otherwise.
  + This updates contains various fixes and improvements:
  - Major adaptive streaming stack overhaul
  - Major codec updates
  - Many third party libraries update
  - Allow brackets in the path section of URLs
  - Better notch support for new macbooks
  - Add support for DAV video and Webp image formats
  - Improve AV1 live streaming support
  - Several SRT support improvements
  - Numerous crash fixes
  - Update youtube script
- Changes from version 3.0.17.2:
  + This is a fixup release which fixes youtube playback and
    contextual menus on integrated video for the Qt interface. It
    is identical to 3.0.17-1 otherwise.
- Changes from version 3.0.17-1:
  + This is a fixup release which bumps libflac to 1.3.4 in order
    to fix CVE-2020-0499 and CVE-2021-0561 on platforms for which
    we provide binary releases.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1650628800">- Update to version 3.0.17.4:
  + Service Discovery: Fix UPnP regression on Windows.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1653307200">- Add vlc-dav1d-1.0.patch: Fix build with dav1d 1.0. Upstream
  commits 2202c892 and d38ddd727.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1657108800">- Extend vlc-lua-5.3.patch: match upstream commit 0e0b070c26.
- Add 867.patch: support LUA 5.4 (boo#1200944).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1657713600">- Limit to Lua &lt; 5.4 (boo#1200944).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1659960000">- Also limit lua interpreter to &lt; 5.4 (boo#1200944).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1662552000">- Make vlc-vdpau supplement vlc, not vlc-noX: vdpau itself is based
  on top of the graphical stack.
- Move video_output/libegl_wl_plugin.so from vlc-noX to vlc: links
  GUI stack.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1667908800">- Limit to ffmpeg 4: we're also linking opencv3 which does not use
  ffmpeg 5.</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1668686400">- add vlc-caca-fix-to-0-99-beta20-version.patch: build with libcaca-0.99.beta20</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1669377600">- Update to version 3.0.18 (CVE-2022-41325, boo#1206142):
  + macOS: Fix audio device listing with non-latin names.
  + Misc: Fix rendering and performance issue with older GPUs.
  + Updated translations.
- Changes from version 3.0.18-rc2:
  + Codec/Demux:
  - Add support for Y16 chroma.
  - Fix build of gme plugin.
  + Lua:
  - Fix script for vocaroo.
  - Fix script for youtube to allow throttled playback.
  + Service Discovery: Fix UPnP regression on Windows.
  + Video Output: Fix video placement with caopengllayer.
  + Misc: Fix password search in kwallet module.
- Changes from version 3.0.18-rc:
  + Demux:
  - Major adaptive streaming update, notably for multiple
    timelies and webvtt.
  - Fix seeking with some fragmented MP4 files.
  - Add support for DVBSub inside MKV.
  - Fix some Flac files that could not be played.
  - Improve seeking in Ogg files.
  + Decoders:
  - Fix DxVA/D3D11 crashes on HEVC files with bogus references.
  - Fix libass storage size and crash.
  - Fix decoding errors on macOS hw decoding on some HEVC files.
  + Video Output:
  - Fix color regression with VAAPI/iOS and OpenGL output.
  - Fix some resizing issues with OpenGL on GLX/EGL/X11/XV.
  - Fix Direct3d9 texture stretching.
  - Fix 10-bit accelerated video filters on macOS.
  + Playlist: Avoid playlist liveloop on failed/tiny items
    (temporize EOS bursts).
  + Misc:
  - Misc fixes for the extension UI on macOS.
  - Improve SMBv1 and SMBv2 behaviours.
  - Improve FTP compatibility.
  - Support RISC-V.
  - Fix AVI muxing for Windows Media Player compatibility.
  - Fix seeking speed on macOS.
- Drop vlc-dav1d-1.0.patch and 867.patch: fixed upstream.
- Drop vlc-get-addr-by-ref-from-getConnectionEndpointAddress.patch:
  fixed upstream (commit 05445b74).
- Drop vlc-get-addr-by-ref-from-getConnectionEndpointAddress.patch:
  fixed upstream (commit b689202d).</changelog>
  <changelog author="Niklas Haas &lt;obs@haasn.xyz&gt;" date="1669377601">- Add vlc-libplacebo-5.patch: Backport fix for building with libplacebo v5</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1670846400">- Do not apply vlc.a52.patch if liba52 is &lt; 0.8.0
- Avoid ugly _FORTIFY_SOURCE redefinition warnings</changelog>
</package>
<package pkgid="a90c4f313bc5cdf85dec00a98174c6ea59b24b7a81c1740c26595c41cc2f0f82" name="vlc-jack" arch="ppc64le">
  <version epoch="0" ver="3.0.18" rel="bp154.2.3.1"/>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1616760000">- Add vlc-gcc11.patch: Fix build using gcc11 (boo#1181918).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1616760001">- Guard post scriptlets to only run %{_libdir}/vlc/vlc-cache-gen if
  it already (or still, in case of uninstall) exists.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1620129600">- Update to version 3.0.13:
  + Demux:
  - Adaptive: fix artefacts in HLS streams with wrong profiles/levels
  - Fix regression on some MP4 files for the audio track
  - Fix MPGA and ADTS probing in TS files
  - Fix Flac inside AVI files
  - Fix VP9/Webm artefacts when seeking
  + Codec:
  - Support SSA text scaling
  - Fix rotation on Android rotation
  - Fix WebVTT subtitles that start at 00:00
  + Access:
  - Update libnfs to support NFSv4
  - Improve SMB2 integration
  - Fix Blu-ray files using Unicode names on Windows
  - Disable mcast lookups on Android for RTSP playback
  + Video Output: Rework the D3D11 rendering wait, to fix
    choppiness on display
  + Interfaces:
  - Fix VLC getting stuck on close on X11 (#21875)
  - Improve RTL on preferences on macOS
  - Add mousewheel horizontal axis control
  - Fix crash on exit on macOS
  - Fix sizing of the fullscreen controls on macOS
  + Misc:
  - Improve MIDI fonts search on Linux
  - Update Soundcloud, Youtube, liveleak
  - Fix compilation with GCC11
  - Fix input-slave option for subtitles
  + Updated translations.
- Drop vlc-gcc11.patch: fixed upstream.
- Extend vlc-srto_tsbpddelay.patch: allow srt &gt;= 1.3 for openSUSE.</changelog>
  <changelog author="Fusion Future &lt;qydwhotmail@gmail.com&gt;" date="1624104000">- Update to version 3.0.16:
  + Video Output: Fix a D3D11 crash on Windows 8/8.1.
  + Access: Fix RTSP server timeout handling.
  + Interfaces: macOS: Add touchbar support.
  + Misc: Multiple settings improvements.
- Changes from version 3.0.15:
  + Core: Add Opus &amp; Alac wave format mappings.
  + Access: Fix opening DVD folders with non-ascii characters.
  + Demux:
  - Fix asf regression with broadcast streams.
  - MP4: Fix audio drop on seek.
  + Video Output:
  - Fix seek &amp; volume sliders overlapping with subtitles.
  - Fix delays when seeking with D3D11.
  + Text renderer: Improve freetype fonts outlining.
  + Misc: Fix GnuTLS support for Windows XP.
- Changes from version 3.0.14:
  + Core:
  - Fix double loading of slave input.
  - Fix an issue causing the auto-updater not to launch the new
    version installer.
- Add vlc-get-addr-by-ref-from-getConnectionEndpointAddress.patch:
  The maintainers of live555 changed connectionEndpointAddresss to
  getConnectionEndpointAddress, which now provides the address
  value by reference.
- Rebase vlc-srto_tsbpddelay.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1645531200">- Guard --enable-libplacebo configure parameter with is_opensuse:
  the buildrequires is also guarded the same way.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1645617600">- BuildRequires pkgconfig(smbclient) instead of smbclient-devel:
  smbclient-devel was merged into samba-devel, and we do not want
  to care for actual package names.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1646654400">- Update to version 3.0.17:
  + Core:
  * Fix a regression in parsing secondary source MRLs
  * Allow brackets in path part of URLs
  + Access:
  * Fix support for screen capture on macOS with avcapture
  * Fix closing of HTTP 1.x connections
  * Improve HTTP2 memory usage
  * Improve AVCapture module
  * Improve AudioCD support (audio/data mixed mode, musicbrainz)
  * Improve SMB compatibility by changing the read size
  * Several improvements on the SRT modules (including streamID)
  + Decoders/Packetizers:
  * Add support for DTS LBR
  * Fix some HEVC hardware decoding on Windows and crashes when aspect ratio changes
  * Fix hardware decoding for some AMD GPU drivers
  * Add support for new Fourcc for E-AC3, AV1, GeoVision
  * Fix crashes with VP9 streams
  * Fix styling issues with subs tx3g (mp4) tracks
  * Fix playback of live AV1 streams
  + Audio Output:
  * iOS/tvOS: add support for spatial audio
  * macOS: fix some channels ordering for &gt; 5.1 channels
  * Android: rework audio volume management
  + Video Output:
  * Fix a D3D11 crash when the stream changes aspect ratio
  + Demux:
  * Major overhaul of the adaptive streaming stack
  * Support for DAV video files
  * Add WebP image mapping
  * Fix missing audio start of Opus audio in MKV/WebM
  * Fix an infinite loop in MP4
  * Fix attachments extractions in ogg files
  * Support Uncompressed audio in mp4 (ISO/IEC 23003-5)
  * Fix some lip sync issue in rare MPEG-TS streams
  + Interface:
  * Qt/macOS: Fixup user provided URLs
  * Add safe area handling on macOS
  * Qt: improve preferences search
  * Qt: fix --no-mouse-events option
  + Misc:
  * Update YouTube script
  * Fix Icecast directory parsing which could lead to missing entries
  * Improve UPnP compatibility with some servers
- Drop vlc-srto_tsbpddelay.patch: fixed upstream.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1646913600">- Disable libnfs and soxr integration on suse_version &lt; 1500 (e.g
  SLE12).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1647691200">- Update to version 3.0.17.3:
  + This is a fixup release which fixes a regression that could
    cause a lack of audio for adaptive streaming playback. It is
    identical to 3.0.17.2 otherwise.
  + This updates contains various fixes and improvements:
  - Major adaptive streaming stack overhaul
  - Major codec updates
  - Many third party libraries update
  - Allow brackets in the path section of URLs
  - Better notch support for new macbooks
  - Add support for DAV video and Webp image formats
  - Improve AV1 live streaming support
  - Several SRT support improvements
  - Numerous crash fixes
  - Update youtube script
- Changes from version 3.0.17.2:
  + This is a fixup release which fixes youtube playback and
    contextual menus on integrated video for the Qt interface. It
    is identical to 3.0.17-1 otherwise.
- Changes from version 3.0.17-1:
  + This is a fixup release which bumps libflac to 1.3.4 in order
    to fix CVE-2020-0499 and CVE-2021-0561 on platforms for which
    we provide binary releases.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1650628800">- Update to version 3.0.17.4:
  + Service Discovery: Fix UPnP regression on Windows.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1653307200">- Add vlc-dav1d-1.0.patch: Fix build with dav1d 1.0. Upstream
  commits 2202c892 and d38ddd727.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1657108800">- Extend vlc-lua-5.3.patch: match upstream commit 0e0b070c26.
- Add 867.patch: support LUA 5.4 (boo#1200944).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1657713600">- Limit to Lua &lt; 5.4 (boo#1200944).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1659960000">- Also limit lua interpreter to &lt; 5.4 (boo#1200944).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1662552000">- Make vlc-vdpau supplement vlc, not vlc-noX: vdpau itself is based
  on top of the graphical stack.
- Move video_output/libegl_wl_plugin.so from vlc-noX to vlc: links
  GUI stack.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1667908800">- Limit to ffmpeg 4: we're also linking opencv3 which does not use
  ffmpeg 5.</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1668686400">- add vlc-caca-fix-to-0-99-beta20-version.patch: build with libcaca-0.99.beta20</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1669377600">- Update to version 3.0.18 (CVE-2022-41325, boo#1206142):
  + macOS: Fix audio device listing with non-latin names.
  + Misc: Fix rendering and performance issue with older GPUs.
  + Updated translations.
- Changes from version 3.0.18-rc2:
  + Codec/Demux:
  - Add support for Y16 chroma.
  - Fix build of gme plugin.
  + Lua:
  - Fix script for vocaroo.
  - Fix script for youtube to allow throttled playback.
  + Service Discovery: Fix UPnP regression on Windows.
  + Video Output: Fix video placement with caopengllayer.
  + Misc: Fix password search in kwallet module.
- Changes from version 3.0.18-rc:
  + Demux:
  - Major adaptive streaming update, notably for multiple
    timelies and webvtt.
  - Fix seeking with some fragmented MP4 files.
  - Add support for DVBSub inside MKV.
  - Fix some Flac files that could not be played.
  - Improve seeking in Ogg files.
  + Decoders:
  - Fix DxVA/D3D11 crashes on HEVC files with bogus references.
  - Fix libass storage size and crash.
  - Fix decoding errors on macOS hw decoding on some HEVC files.
  + Video Output:
  - Fix color regression with VAAPI/iOS and OpenGL output.
  - Fix some resizing issues with OpenGL on GLX/EGL/X11/XV.
  - Fix Direct3d9 texture stretching.
  - Fix 10-bit accelerated video filters on macOS.
  + Playlist: Avoid playlist liveloop on failed/tiny items
    (temporize EOS bursts).
  + Misc:
  - Misc fixes for the extension UI on macOS.
  - Improve SMBv1 and SMBv2 behaviours.
  - Improve FTP compatibility.
  - Support RISC-V.
  - Fix AVI muxing for Windows Media Player compatibility.
  - Fix seeking speed on macOS.
- Drop vlc-dav1d-1.0.patch and 867.patch: fixed upstream.
- Drop vlc-get-addr-by-ref-from-getConnectionEndpointAddress.patch:
  fixed upstream (commit 05445b74).
- Drop vlc-get-addr-by-ref-from-getConnectionEndpointAddress.patch:
  fixed upstream (commit b689202d).</changelog>
  <changelog author="Niklas Haas &lt;obs@haasn.xyz&gt;" date="1669377601">- Add vlc-libplacebo-5.patch: Backport fix for building with libplacebo v5</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1670846400">- Do not apply vlc.a52.patch if liba52 is &lt; 0.8.0
- Avoid ugly _FORTIFY_SOURCE redefinition warnings</changelog>
</package>
<package pkgid="5ff38ecb66a6dc670f0ad1c987b7af50a2beeab58f50d7c4069c329e4545554b" name="vlc-jack" arch="x86_64">
  <version epoch="0" ver="3.0.18" rel="bp154.2.3.1"/>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1616760000">- Add vlc-gcc11.patch: Fix build using gcc11 (boo#1181918).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1616760001">- Guard post scriptlets to only run %{_libdir}/vlc/vlc-cache-gen if
  it already (or still, in case of uninstall) exists.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1620129600">- Update to version 3.0.13:
  + Demux:
  - Adaptive: fix artefacts in HLS streams with wrong profiles/levels
  - Fix regression on some MP4 files for the audio track
  - Fix MPGA and ADTS probing in TS files
  - Fix Flac inside AVI files
  - Fix VP9/Webm artefacts when seeking
  + Codec:
  - Support SSA text scaling
  - Fix rotation on Android rotation
  - Fix WebVTT subtitles that start at 00:00
  + Access:
  - Update libnfs to support NFSv4
  - Improve SMB2 integration
  - Fix Blu-ray files using Unicode names on Windows
  - Disable mcast lookups on Android for RTSP playback
  + Video Output: Rework the D3D11 rendering wait, to fix
    choppiness on display
  + Interfaces:
  - Fix VLC getting stuck on close on X11 (#21875)
  - Improve RTL on preferences on macOS
  - Add mousewheel horizontal axis control
  - Fix crash on exit on macOS
  - Fix sizing of the fullscreen controls on macOS
  + Misc:
  - Improve MIDI fonts search on Linux
  - Update Soundcloud, Youtube, liveleak
  - Fix compilation with GCC11
  - Fix input-slave option for subtitles
  + Updated translations.
- Drop vlc-gcc11.patch: fixed upstream.
- Extend vlc-srto_tsbpddelay.patch: allow srt &gt;= 1.3 for openSUSE.</changelog>
  <changelog author="Fusion Future &lt;qydwhotmail@gmail.com&gt;" date="1624104000">- Update to version 3.0.16:
  + Video Output: Fix a D3D11 crash on Windows 8/8.1.
  + Access: Fix RTSP server timeout handling.
  + Interfaces: macOS: Add touchbar support.
  + Misc: Multiple settings improvements.
- Changes from version 3.0.15:
  + Core: Add Opus &amp; Alac wave format mappings.
  + Access: Fix opening DVD folders with non-ascii characters.
  + Demux:
  - Fix asf regression with broadcast streams.
  - MP4: Fix audio drop on seek.
  + Video Output:
  - Fix seek &amp; volume sliders overlapping with subtitles.
  - Fix delays when seeking with D3D11.
  + Text renderer: Improve freetype fonts outlining.
  + Misc: Fix GnuTLS support for Windows XP.
- Changes from version 3.0.14:
  + Core:
  - Fix double loading of slave input.
  - Fix an issue causing the auto-updater not to launch the new
    version installer.
- Add vlc-get-addr-by-ref-from-getConnectionEndpointAddress.patch:
  The maintainers of live555 changed connectionEndpointAddresss to
  getConnectionEndpointAddress, which now provides the address
  value by reference.
- Rebase vlc-srto_tsbpddelay.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1645531200">- Guard --enable-libplacebo configure parameter with is_opensuse:
  the buildrequires is also guarded the same way.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1645617600">- BuildRequires pkgconfig(smbclient) instead of smbclient-devel:
  smbclient-devel was merged into samba-devel, and we do not want
  to care for actual package names.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1646654400">- Update to version 3.0.17:
  + Core:
  * Fix a regression in parsing secondary source MRLs
  * Allow brackets in path part of URLs
  + Access:
  * Fix support for screen capture on macOS with avcapture
  * Fix closing of HTTP 1.x connections
  * Improve HTTP2 memory usage
  * Improve AVCapture module
  * Improve AudioCD support (audio/data mixed mode, musicbrainz)
  * Improve SMB compatibility by changing the read size
  * Several improvements on the SRT modules (including streamID)
  + Decoders/Packetizers:
  * Add support for DTS LBR
  * Fix some HEVC hardware decoding on Windows and crashes when aspect ratio changes
  * Fix hardware decoding for some AMD GPU drivers
  * Add support for new Fourcc for E-AC3, AV1, GeoVision
  * Fix crashes with VP9 streams
  * Fix styling issues with subs tx3g (mp4) tracks
  * Fix playback of live AV1 streams
  + Audio Output:
  * iOS/tvOS: add support for spatial audio
  * macOS: fix some channels ordering for &gt; 5.1 channels
  * Android: rework audio volume management
  + Video Output:
  * Fix a D3D11 crash when the stream changes aspect ratio
  + Demux:
  * Major overhaul of the adaptive streaming stack
  * Support for DAV video files
  * Add WebP image mapping
  * Fix missing audio start of Opus audio in MKV/WebM
  * Fix an infinite loop in MP4
  * Fix attachments extractions in ogg files
  * Support Uncompressed audio in mp4 (ISO/IEC 23003-5)
  * Fix some lip sync issue in rare MPEG-TS streams
  + Interface:
  * Qt/macOS: Fixup user provided URLs
  * Add safe area handling on macOS
  * Qt: improve preferences search
  * Qt: fix --no-mouse-events option
  + Misc:
  * Update YouTube script
  * Fix Icecast directory parsing which could lead to missing entries
  * Improve UPnP compatibility with some servers
- Drop vlc-srto_tsbpddelay.patch: fixed upstream.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1646913600">- Disable libnfs and soxr integration on suse_version &lt; 1500 (e.g
  SLE12).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1647691200">- Update to version 3.0.17.3:
  + This is a fixup release which fixes a regression that could
    cause a lack of audio for adaptive streaming playback. It is
    identical to 3.0.17.2 otherwise.
  + This updates contains various fixes and improvements:
  - Major adaptive streaming stack overhaul
  - Major codec updates
  - Many third party libraries update
  - Allow brackets in the path section of URLs
  - Better notch support for new macbooks
  - Add support for DAV video and Webp image formats
  - Improve AV1 live streaming support
  - Several SRT support improvements
  - Numerous crash fixes
  - Update youtube script
- Changes from version 3.0.17.2:
  + This is a fixup release which fixes youtube playback and
    contextual menus on integrated video for the Qt interface. It
    is identical to 3.0.17-1 otherwise.
- Changes from version 3.0.17-1:
  + This is a fixup release which bumps libflac to 1.3.4 in order
    to fix CVE-2020-0499 and CVE-2021-0561 on platforms for which
    we provide binary releases.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1650628800">- Update to version 3.0.17.4:
  + Service Discovery: Fix UPnP regression on Windows.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1653307200">- Add vlc-dav1d-1.0.patch: Fix build with dav1d 1.0. Upstream
  commits 2202c892 and d38ddd727.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1657108800">- Extend vlc-lua-5.3.patch: match upstream commit 0e0b070c26.
- Add 867.patch: support LUA 5.4 (boo#1200944).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1657713600">- Limit to Lua &lt; 5.4 (boo#1200944).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1659960000">- Also limit lua interpreter to &lt; 5.4 (boo#1200944).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1662552000">- Make vlc-vdpau supplement vlc, not vlc-noX: vdpau itself is based
  on top of the graphical stack.
- Move video_output/libegl_wl_plugin.so from vlc-noX to vlc: links
  GUI stack.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1667908800">- Limit to ffmpeg 4: we're also linking opencv3 which does not use
  ffmpeg 5.</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1668686400">- add vlc-caca-fix-to-0-99-beta20-version.patch: build with libcaca-0.99.beta20</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1669377600">- Update to version 3.0.18 (CVE-2022-41325, boo#1206142):
  + macOS: Fix audio device listing with non-latin names.
  + Misc: Fix rendering and performance issue with older GPUs.
  + Updated translations.
- Changes from version 3.0.18-rc2:
  + Codec/Demux:
  - Add support for Y16 chroma.
  - Fix build of gme plugin.
  + Lua:
  - Fix script for vocaroo.
  - Fix script for youtube to allow throttled playback.
  + Service Discovery: Fix UPnP regression on Windows.
  + Video Output: Fix video placement with caopengllayer.
  + Misc: Fix password search in kwallet module.
- Changes from version 3.0.18-rc:
  + Demux:
  - Major adaptive streaming update, notably for multiple
    timelies and webvtt.
  - Fix seeking with some fragmented MP4 files.
  - Add support for DVBSub inside MKV.
  - Fix some Flac files that could not be played.
  - Improve seeking in Ogg files.
  + Decoders:
  - Fix DxVA/D3D11 crashes on HEVC files with bogus references.
  - Fix libass storage size and crash.
  - Fix decoding errors on macOS hw decoding on some HEVC files.
  + Video Output:
  - Fix color regression with VAAPI/iOS and OpenGL output.
  - Fix some resizing issues with OpenGL on GLX/EGL/X11/XV.
  - Fix Direct3d9 texture stretching.
  - Fix 10-bit accelerated video filters on macOS.
  + Playlist: Avoid playlist liveloop on failed/tiny items
    (temporize EOS bursts).
  + Misc:
  - Misc fixes for the extension UI on macOS.
  - Improve SMBv1 and SMBv2 behaviours.
  - Improve FTP compatibility.
  - Support RISC-V.
  - Fix AVI muxing for Windows Media Player compatibility.
  - Fix seeking speed on macOS.
- Drop vlc-dav1d-1.0.patch and 867.patch: fixed upstream.
- Drop vlc-get-addr-by-ref-from-getConnectionEndpointAddress.patch:
  fixed upstream (commit 05445b74).
- Drop vlc-get-addr-by-ref-from-getConnectionEndpointAddress.patch:
  fixed upstream (commit b689202d).</changelog>
  <changelog author="Niklas Haas &lt;obs@haasn.xyz&gt;" date="1669377601">- Add vlc-libplacebo-5.patch: Backport fix for building with libplacebo v5</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1670846400">- Do not apply vlc.a52.patch if liba52 is &lt; 0.8.0
- Avoid ugly _FORTIFY_SOURCE redefinition warnings</changelog>
</package>
<package pkgid="f59d4ae9bd7baf4faf89718a43b02a6f29073048d50597d4b12210b418901938" name="vlc-lang" arch="noarch">
  <version epoch="0" ver="3.0.18" rel="bp154.2.3.1"/>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1616760000">- Add vlc-gcc11.patch: Fix build using gcc11 (boo#1181918).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1616760001">- Guard post scriptlets to only run %{_libdir}/vlc/vlc-cache-gen if
  it already (or still, in case of uninstall) exists.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1620129600">- Update to version 3.0.13:
  + Demux:
  - Adaptive: fix artefacts in HLS streams with wrong profiles/levels
  - Fix regression on some MP4 files for the audio track
  - Fix MPGA and ADTS probing in TS files
  - Fix Flac inside AVI files
  - Fix VP9/Webm artefacts when seeking
  + Codec:
  - Support SSA text scaling
  - Fix rotation on Android rotation
  - Fix WebVTT subtitles that start at 00:00
  + Access:
  - Update libnfs to support NFSv4
  - Improve SMB2 integration
  - Fix Blu-ray files using Unicode names on Windows
  - Disable mcast lookups on Android for RTSP playback
  + Video Output: Rework the D3D11 rendering wait, to fix
    choppiness on display
  + Interfaces:
  - Fix VLC getting stuck on close on X11 (#21875)
  - Improve RTL on preferences on macOS
  - Add mousewheel horizontal axis control
  - Fix crash on exit on macOS
  - Fix sizing of the fullscreen controls on macOS
  + Misc:
  - Improve MIDI fonts search on Linux
  - Update Soundcloud, Youtube, liveleak
  - Fix compilation with GCC11
  - Fix input-slave option for subtitles
  + Updated translations.
- Drop vlc-gcc11.patch: fixed upstream.
- Extend vlc-srto_tsbpddelay.patch: allow srt &gt;= 1.3 for openSUSE.</changelog>
  <changelog author="Fusion Future &lt;qydwhotmail@gmail.com&gt;" date="1624104000">- Update to version 3.0.16:
  + Video Output: Fix a D3D11 crash on Windows 8/8.1.
  + Access: Fix RTSP server timeout handling.
  + Interfaces: macOS: Add touchbar support.
  + Misc: Multiple settings improvements.
- Changes from version 3.0.15:
  + Core: Add Opus &amp; Alac wave format mappings.
  + Access: Fix opening DVD folders with non-ascii characters.
  + Demux:
  - Fix asf regression with broadcast streams.
  - MP4: Fix audio drop on seek.
  + Video Output:
  - Fix seek &amp; volume sliders overlapping with subtitles.
  - Fix delays when seeking with D3D11.
  + Text renderer: Improve freetype fonts outlining.
  + Misc: Fix GnuTLS support for Windows XP.
- Changes from version 3.0.14:
  + Core:
  - Fix double loading of slave input.
  - Fix an issue causing the auto-updater not to launch the new
    version installer.
- Add vlc-get-addr-by-ref-from-getConnectionEndpointAddress.patch:
  The maintainers of live555 changed connectionEndpointAddresss to
  getConnectionEndpointAddress, which now provides the address
  value by reference.
- Rebase vlc-srto_tsbpddelay.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1645531200">- Guard --enable-libplacebo configure parameter with is_opensuse:
  the buildrequires is also guarded the same way.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1645617600">- BuildRequires pkgconfig(smbclient) instead of smbclient-devel:
  smbclient-devel was merged into samba-devel, and we do not want
  to care for actual package names.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1646654400">- Update to version 3.0.17:
  + Core:
  * Fix a regression in parsing secondary source MRLs
  * Allow brackets in path part of URLs
  + Access:
  * Fix support for screen capture on macOS with avcapture
  * Fix closing of HTTP 1.x connections
  * Improve HTTP2 memory usage
  * Improve AVCapture module
  * Improve AudioCD support (audio/data mixed mode, musicbrainz)
  * Improve SMB compatibility by changing the read size
  * Several improvements on the SRT modules (including streamID)
  + Decoders/Packetizers:
  * Add support for DTS LBR
  * Fix some HEVC hardware decoding on Windows and crashes when aspect ratio changes
  * Fix hardware decoding for some AMD GPU drivers
  * Add support for new Fourcc for E-AC3, AV1, GeoVision
  * Fix crashes with VP9 streams
  * Fix styling issues with subs tx3g (mp4) tracks
  * Fix playback of live AV1 streams
  + Audio Output:
  * iOS/tvOS: add support for spatial audio
  * macOS: fix some channels ordering for &gt; 5.1 channels
  * Android: rework audio volume management
  + Video Output:
  * Fix a D3D11 crash when the stream changes aspect ratio
  + Demux:
  * Major overhaul of the adaptive streaming stack
  * Support for DAV video files
  * Add WebP image mapping
  * Fix missing audio start of Opus audio in MKV/WebM
  * Fix an infinite loop in MP4
  * Fix attachments extractions in ogg files
  * Support Uncompressed audio in mp4 (ISO/IEC 23003-5)
  * Fix some lip sync issue in rare MPEG-TS streams
  + Interface:
  * Qt/macOS: Fixup user provided URLs
  * Add safe area handling on macOS
  * Qt: improve preferences search
  * Qt: fix --no-mouse-events option
  + Misc:
  * Update YouTube script
  * Fix Icecast directory parsing which could lead to missing entries
  * Improve UPnP compatibility with some servers
- Drop vlc-srto_tsbpddelay.patch: fixed upstream.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1646913600">- Disable libnfs and soxr integration on suse_version &lt; 1500 (e.g
  SLE12).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1647691200">- Update to version 3.0.17.3:
  + This is a fixup release which fixes a regression that could
    cause a lack of audio for adaptive streaming playback. It is
    identical to 3.0.17.2 otherwise.
  + This updates contains various fixes and improvements:
  - Major adaptive streaming stack overhaul
  - Major codec updates
  - Many third party libraries update
  - Allow brackets in the path section of URLs
  - Better notch support for new macbooks
  - Add support for DAV video and Webp image formats
  - Improve AV1 live streaming support
  - Several SRT support improvements
  - Numerous crash fixes
  - Update youtube script
- Changes from version 3.0.17.2:
  + This is a fixup release which fixes youtube playback and
    contextual menus on integrated video for the Qt interface. It
    is identical to 3.0.17-1 otherwise.
- Changes from version 3.0.17-1:
  + This is a fixup release which bumps libflac to 1.3.4 in order
    to fix CVE-2020-0499 and CVE-2021-0561 on platforms for which
    we provide binary releases.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1650628800">- Update to version 3.0.17.4:
  + Service Discovery: Fix UPnP regression on Windows.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1653307200">- Add vlc-dav1d-1.0.patch: Fix build with dav1d 1.0. Upstream
  commits 2202c892 and d38ddd727.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1657108800">- Extend vlc-lua-5.3.patch: match upstream commit 0e0b070c26.
- Add 867.patch: support LUA 5.4 (boo#1200944).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1657713600">- Limit to Lua &lt; 5.4 (boo#1200944).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1659960000">- Also limit lua interpreter to &lt; 5.4 (boo#1200944).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1662552000">- Make vlc-vdpau supplement vlc, not vlc-noX: vdpau itself is based
  on top of the graphical stack.
- Move video_output/libegl_wl_plugin.so from vlc-noX to vlc: links
  GUI stack.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1667908800">- Limit to ffmpeg 4: we're also linking opencv3 which does not use
  ffmpeg 5.</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1668686400">- add vlc-caca-fix-to-0-99-beta20-version.patch: build with libcaca-0.99.beta20</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1669377600">- Update to version 3.0.18 (CVE-2022-41325, boo#1206142):
  + macOS: Fix audio device listing with non-latin names.
  + Misc: Fix rendering and performance issue with older GPUs.
  + Updated translations.
- Changes from version 3.0.18-rc2:
  + Codec/Demux:
  - Add support for Y16 chroma.
  - Fix build of gme plugin.
  + Lua:
  - Fix script for vocaroo.
  - Fix script for youtube to allow throttled playback.
  + Service Discovery: Fix UPnP regression on Windows.
  + Video Output: Fix video placement with caopengllayer.
  + Misc: Fix password search in kwallet module.
- Changes from version 3.0.18-rc:
  + Demux:
  - Major adaptive streaming update, notably for multiple
    timelies and webvtt.
  - Fix seeking with some fragmented MP4 files.
  - Add support for DVBSub inside MKV.
  - Fix some Flac files that could not be played.
  - Improve seeking in Ogg files.
  + Decoders:
  - Fix DxVA/D3D11 crashes on HEVC files with bogus references.
  - Fix libass storage size and crash.
  - Fix decoding errors on macOS hw decoding on some HEVC files.
  + Video Output:
  - Fix color regression with VAAPI/iOS and OpenGL output.
  - Fix some resizing issues with OpenGL on GLX/EGL/X11/XV.
  - Fix Direct3d9 texture stretching.
  - Fix 10-bit accelerated video filters on macOS.
  + Playlist: Avoid playlist liveloop on failed/tiny items
    (temporize EOS bursts).
  + Misc:
  - Misc fixes for the extension UI on macOS.
  - Improve SMBv1 and SMBv2 behaviours.
  - Improve FTP compatibility.
  - Support RISC-V.
  - Fix AVI muxing for Windows Media Player compatibility.
  - Fix seeking speed on macOS.
- Drop vlc-dav1d-1.0.patch and 867.patch: fixed upstream.
- Drop vlc-get-addr-by-ref-from-getConnectionEndpointAddress.patch:
  fixed upstream (commit 05445b74).
- Drop vlc-get-addr-by-ref-from-getConnectionEndpointAddress.patch:
  fixed upstream (commit b689202d).</changelog>
  <changelog author="Niklas Haas &lt;obs@haasn.xyz&gt;" date="1669377601">- Add vlc-libplacebo-5.patch: Backport fix for building with libplacebo v5</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1670846400">- Do not apply vlc.a52.patch if liba52 is &lt; 0.8.0
- Avoid ugly _FORTIFY_SOURCE redefinition warnings</changelog>
</package>
<package pkgid="5945c163a72f35a4d6a03dfbfe4933f800648bae267cface9f8a46f645cebff7" name="vlc-noX" arch="aarch64">
  <version epoch="0" ver="3.0.18" rel="bp154.2.3.1"/>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1616760000">- Add vlc-gcc11.patch: Fix build using gcc11 (boo#1181918).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1616760001">- Guard post scriptlets to only run %{_libdir}/vlc/vlc-cache-gen if
  it already (or still, in case of uninstall) exists.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1620129600">- Update to version 3.0.13:
  + Demux:
  - Adaptive: fix artefacts in HLS streams with wrong profiles/levels
  - Fix regression on some MP4 files for the audio track
  - Fix MPGA and ADTS probing in TS files
  - Fix Flac inside AVI files
  - Fix VP9/Webm artefacts when seeking
  + Codec:
  - Support SSA text scaling
  - Fix rotation on Android rotation
  - Fix WebVTT subtitles that start at 00:00
  + Access:
  - Update libnfs to support NFSv4
  - Improve SMB2 integration
  - Fix Blu-ray files using Unicode names on Windows
  - Disable mcast lookups on Android for RTSP playback
  + Video Output: Rework the D3D11 rendering wait, to fix
    choppiness on display
  + Interfaces:
  - Fix VLC getting stuck on close on X11 (#21875)
  - Improve RTL on preferences on macOS
  - Add mousewheel horizontal axis control
  - Fix crash on exit on macOS
  - Fix sizing of the fullscreen controls on macOS
  + Misc:
  - Improve MIDI fonts search on Linux
  - Update Soundcloud, Youtube, liveleak
  - Fix compilation with GCC11
  - Fix input-slave option for subtitles
  + Updated translations.
- Drop vlc-gcc11.patch: fixed upstream.
- Extend vlc-srto_tsbpddelay.patch: allow srt &gt;= 1.3 for openSUSE.</changelog>
  <changelog author="Fusion Future &lt;qydwhotmail@gmail.com&gt;" date="1624104000">- Update to version 3.0.16:
  + Video Output: Fix a D3D11 crash on Windows 8/8.1.
  + Access: Fix RTSP server timeout handling.
  + Interfaces: macOS: Add touchbar support.
  + Misc: Multiple settings improvements.
- Changes from version 3.0.15:
  + Core: Add Opus &amp; Alac wave format mappings.
  + Access: Fix opening DVD folders with non-ascii characters.
  + Demux:
  - Fix asf regression with broadcast streams.
  - MP4: Fix audio drop on seek.
  + Video Output:
  - Fix seek &amp; volume sliders overlapping with subtitles.
  - Fix delays when seeking with D3D11.
  + Text renderer: Improve freetype fonts outlining.
  + Misc: Fix GnuTLS support for Windows XP.
- Changes from version 3.0.14:
  + Core:
  - Fix double loading of slave input.
  - Fix an issue causing the auto-updater not to launch the new
    version installer.
- Add vlc-get-addr-by-ref-from-getConnectionEndpointAddress.patch:
  The maintainers of live555 changed connectionEndpointAddresss to
  getConnectionEndpointAddress, which now provides the address
  value by reference.
- Rebase vlc-srto_tsbpddelay.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1645531200">- Guard --enable-libplacebo configure parameter with is_opensuse:
  the buildrequires is also guarded the same way.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1645617600">- BuildRequires pkgconfig(smbclient) instead of smbclient-devel:
  smbclient-devel was merged into samba-devel, and we do not want
  to care for actual package names.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1646654400">- Update to version 3.0.17:
  + Core:
  * Fix a regression in parsing secondary source MRLs
  * Allow brackets in path part of URLs
  + Access:
  * Fix support for screen capture on macOS with avcapture
  * Fix closing of HTTP 1.x connections
  * Improve HTTP2 memory usage
  * Improve AVCapture module
  * Improve AudioCD support (audio/data mixed mode, musicbrainz)
  * Improve SMB compatibility by changing the read size
  * Several improvements on the SRT modules (including streamID)
  + Decoders/Packetizers:
  * Add support for DTS LBR
  * Fix some HEVC hardware decoding on Windows and crashes when aspect ratio changes
  * Fix hardware decoding for some AMD GPU drivers
  * Add support for new Fourcc for E-AC3, AV1, GeoVision
  * Fix crashes with VP9 streams
  * Fix styling issues with subs tx3g (mp4) tracks
  * Fix playback of live AV1 streams
  + Audio Output:
  * iOS/tvOS: add support for spatial audio
  * macOS: fix some channels ordering for &gt; 5.1 channels
  * Android: rework audio volume management
  + Video Output:
  * Fix a D3D11 crash when the stream changes aspect ratio
  + Demux:
  * Major overhaul of the adaptive streaming stack
  * Support for DAV video files
  * Add WebP image mapping
  * Fix missing audio start of Opus audio in MKV/WebM
  * Fix an infinite loop in MP4
  * Fix attachments extractions in ogg files
  * Support Uncompressed audio in mp4 (ISO/IEC 23003-5)
  * Fix some lip sync issue in rare MPEG-TS streams
  + Interface:
  * Qt/macOS: Fixup user provided URLs
  * Add safe area handling on macOS
  * Qt: improve preferences search
  * Qt: fix --no-mouse-events option
  + Misc:
  * Update YouTube script
  * Fix Icecast directory parsing which could lead to missing entries
  * Improve UPnP compatibility with some servers
- Drop vlc-srto_tsbpddelay.patch: fixed upstream.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1646913600">- Disable libnfs and soxr integration on suse_version &lt; 1500 (e.g
  SLE12).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1647691200">- Update to version 3.0.17.3:
  + This is a fixup release which fixes a regression that could
    cause a lack of audio for adaptive streaming playback. It is
    identical to 3.0.17.2 otherwise.
  + This updates contains various fixes and improvements:
  - Major adaptive streaming stack overhaul
  - Major codec updates
  - Many third party libraries update
  - Allow brackets in the path section of URLs
  - Better notch support for new macbooks
  - Add support for DAV video and Webp image formats
  - Improve AV1 live streaming support
  - Several SRT support improvements
  - Numerous crash fixes
  - Update youtube script
- Changes from version 3.0.17.2:
  + This is a fixup release which fixes youtube playback and
    contextual menus on integrated video for the Qt interface. It
    is identical to 3.0.17-1 otherwise.
- Changes from version 3.0.17-1:
  + This is a fixup release which bumps libflac to 1.3.4 in order
    to fix CVE-2020-0499 and CVE-2021-0561 on platforms for which
    we provide binary releases.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1650628800">- Update to version 3.0.17.4:
  + Service Discovery: Fix UPnP regression on Windows.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1653307200">- Add vlc-dav1d-1.0.patch: Fix build with dav1d 1.0. Upstream
  commits 2202c892 and d38ddd727.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1657108800">- Extend vlc-lua-5.3.patch: match upstream commit 0e0b070c26.
- Add 867.patch: support LUA 5.4 (boo#1200944).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1657713600">- Limit to Lua &lt; 5.4 (boo#1200944).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1659960000">- Also limit lua interpreter to &lt; 5.4 (boo#1200944).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1662552000">- Make vlc-vdpau supplement vlc, not vlc-noX: vdpau itself is based
  on top of the graphical stack.
- Move video_output/libegl_wl_plugin.so from vlc-noX to vlc: links
  GUI stack.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1667908800">- Limit to ffmpeg 4: we're also linking opencv3 which does not use
  ffmpeg 5.</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1668686400">- add vlc-caca-fix-to-0-99-beta20-version.patch: build with libcaca-0.99.beta20</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1669377600">- Update to version 3.0.18 (CVE-2022-41325, boo#1206142):
  + macOS: Fix audio device listing with non-latin names.
  + Misc: Fix rendering and performance issue with older GPUs.
  + Updated translations.
- Changes from version 3.0.18-rc2:
  + Codec/Demux:
  - Add support for Y16 chroma.
  - Fix build of gme plugin.
  + Lua:
  - Fix script for vocaroo.
  - Fix script for youtube to allow throttled playback.
  + Service Discovery: Fix UPnP regression on Windows.
  + Video Output: Fix video placement with caopengllayer.
  + Misc: Fix password search in kwallet module.
- Changes from version 3.0.18-rc:
  + Demux:
  - Major adaptive streaming update, notably for multiple
    timelies and webvtt.
  - Fix seeking with some fragmented MP4 files.
  - Add support for DVBSub inside MKV.
  - Fix some Flac files that could not be played.
  - Improve seeking in Ogg files.
  + Decoders:
  - Fix DxVA/D3D11 crashes on HEVC files with bogus references.
  - Fix libass storage size and crash.
  - Fix decoding errors on macOS hw decoding on some HEVC files.
  + Video Output:
  - Fix color regression with VAAPI/iOS and OpenGL output.
  - Fix some resizing issues with OpenGL on GLX/EGL/X11/XV.
  - Fix Direct3d9 texture stretching.
  - Fix 10-bit accelerated video filters on macOS.
  + Playlist: Avoid playlist liveloop on failed/tiny items
    (temporize EOS bursts).
  + Misc:
  - Misc fixes for the extension UI on macOS.
  - Improve SMBv1 and SMBv2 behaviours.
  - Improve FTP compatibility.
  - Support RISC-V.
  - Fix AVI muxing for Windows Media Player compatibility.
  - Fix seeking speed on macOS.
- Drop vlc-dav1d-1.0.patch and 867.patch: fixed upstream.
- Drop vlc-get-addr-by-ref-from-getConnectionEndpointAddress.patch:
  fixed upstream (commit 05445b74).
- Drop vlc-get-addr-by-ref-from-getConnectionEndpointAddress.patch:
  fixed upstream (commit b689202d).</changelog>
  <changelog author="Niklas Haas &lt;obs@haasn.xyz&gt;" date="1669377601">- Add vlc-libplacebo-5.patch: Backport fix for building with libplacebo v5</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1670846400">- Do not apply vlc.a52.patch if liba52 is &lt; 0.8.0
- Avoid ugly _FORTIFY_SOURCE redefinition warnings</changelog>
</package>
<package pkgid="4170a97d1663e92f3e258b40a75e8f85eb892f43a4ba70edf82fc215b7c4e134" name="vlc-noX" arch="ppc64le">
  <version epoch="0" ver="3.0.18" rel="bp154.2.3.1"/>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1616760000">- Add vlc-gcc11.patch: Fix build using gcc11 (boo#1181918).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1616760001">- Guard post scriptlets to only run %{_libdir}/vlc/vlc-cache-gen if
  it already (or still, in case of uninstall) exists.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1620129600">- Update to version 3.0.13:
  + Demux:
  - Adaptive: fix artefacts in HLS streams with wrong profiles/levels
  - Fix regression on some MP4 files for the audio track
  - Fix MPGA and ADTS probing in TS files
  - Fix Flac inside AVI files
  - Fix VP9/Webm artefacts when seeking
  + Codec:
  - Support SSA text scaling
  - Fix rotation on Android rotation
  - Fix WebVTT subtitles that start at 00:00
  + Access:
  - Update libnfs to support NFSv4
  - Improve SMB2 integration
  - Fix Blu-ray files using Unicode names on Windows
  - Disable mcast lookups on Android for RTSP playback
  + Video Output: Rework the D3D11 rendering wait, to fix
    choppiness on display
  + Interfaces:
  - Fix VLC getting stuck on close on X11 (#21875)
  - Improve RTL on preferences on macOS
  - Add mousewheel horizontal axis control
  - Fix crash on exit on macOS
  - Fix sizing of the fullscreen controls on macOS
  + Misc:
  - Improve MIDI fonts search on Linux
  - Update Soundcloud, Youtube, liveleak
  - Fix compilation with GCC11
  - Fix input-slave option for subtitles
  + Updated translations.
- Drop vlc-gcc11.patch: fixed upstream.
- Extend vlc-srto_tsbpddelay.patch: allow srt &gt;= 1.3 for openSUSE.</changelog>
  <changelog author="Fusion Future &lt;qydwhotmail@gmail.com&gt;" date="1624104000">- Update to version 3.0.16:
  + Video Output: Fix a D3D11 crash on Windows 8/8.1.
  + Access: Fix RTSP server timeout handling.
  + Interfaces: macOS: Add touchbar support.
  + Misc: Multiple settings improvements.
- Changes from version 3.0.15:
  + Core: Add Opus &amp; Alac wave format mappings.
  + Access: Fix opening DVD folders with non-ascii characters.
  + Demux:
  - Fix asf regression with broadcast streams.
  - MP4: Fix audio drop on seek.
  + Video Output:
  - Fix seek &amp; volume sliders overlapping with subtitles.
  - Fix delays when seeking with D3D11.
  + Text renderer: Improve freetype fonts outlining.
  + Misc: Fix GnuTLS support for Windows XP.
- Changes from version 3.0.14:
  + Core:
  - Fix double loading of slave input.
  - Fix an issue causing the auto-updater not to launch the new
    version installer.
- Add vlc-get-addr-by-ref-from-getConnectionEndpointAddress.patch:
  The maintainers of live555 changed connectionEndpointAddresss to
  getConnectionEndpointAddress, which now provides the address
  value by reference.
- Rebase vlc-srto_tsbpddelay.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1645531200">- Guard --enable-libplacebo configure parameter with is_opensuse:
  the buildrequires is also guarded the same way.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1645617600">- BuildRequires pkgconfig(smbclient) instead of smbclient-devel:
  smbclient-devel was merged into samba-devel, and we do not want
  to care for actual package names.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1646654400">- Update to version 3.0.17:
  + Core:
  * Fix a regression in parsing secondary source MRLs
  * Allow brackets in path part of URLs
  + Access:
  * Fix support for screen capture on macOS with avcapture
  * Fix closing of HTTP 1.x connections
  * Improve HTTP2 memory usage
  * Improve AVCapture module
  * Improve AudioCD support (audio/data mixed mode, musicbrainz)
  * Improve SMB compatibility by changing the read size
  * Several improvements on the SRT modules (including streamID)
  + Decoders/Packetizers:
  * Add support for DTS LBR
  * Fix some HEVC hardware decoding on Windows and crashes when aspect ratio changes
  * Fix hardware decoding for some AMD GPU drivers
  * Add support for new Fourcc for E-AC3, AV1, GeoVision
  * Fix crashes with VP9 streams
  * Fix styling issues with subs tx3g (mp4) tracks
  * Fix playback of live AV1 streams
  + Audio Output:
  * iOS/tvOS: add support for spatial audio
  * macOS: fix some channels ordering for &gt; 5.1 channels
  * Android: rework audio volume management
  + Video Output:
  * Fix a D3D11 crash when the stream changes aspect ratio
  + Demux:
  * Major overhaul of the adaptive streaming stack
  * Support for DAV video files
  * Add WebP image mapping
  * Fix missing audio start of Opus audio in MKV/WebM
  * Fix an infinite loop in MP4
  * Fix attachments extractions in ogg files
  * Support Uncompressed audio in mp4 (ISO/IEC 23003-5)
  * Fix some lip sync issue in rare MPEG-TS streams
  + Interface:
  * Qt/macOS: Fixup user provided URLs
  * Add safe area handling on macOS
  * Qt: improve preferences search
  * Qt: fix --no-mouse-events option
  + Misc:
  * Update YouTube script
  * Fix Icecast directory parsing which could lead to missing entries
  * Improve UPnP compatibility with some servers
- Drop vlc-srto_tsbpddelay.patch: fixed upstream.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1646913600">- Disable libnfs and soxr integration on suse_version &lt; 1500 (e.g
  SLE12).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1647691200">- Update to version 3.0.17.3:
  + This is a fixup release which fixes a regression that could
    cause a lack of audio for adaptive streaming playback. It is
    identical to 3.0.17.2 otherwise.
  + This updates contains various fixes and improvements:
  - Major adaptive streaming stack overhaul
  - Major codec updates
  - Many third party libraries update
  - Allow brackets in the path section of URLs
  - Better notch support for new macbooks
  - Add support for DAV video and Webp image formats
  - Improve AV1 live streaming support
  - Several SRT support improvements
  - Numerous crash fixes
  - Update youtube script
- Changes from version 3.0.17.2:
  + This is a fixup release which fixes youtube playback and
    contextual menus on integrated video for the Qt interface. It
    is identical to 3.0.17-1 otherwise.
- Changes from version 3.0.17-1:
  + This is a fixup release which bumps libflac to 1.3.4 in order
    to fix CVE-2020-0499 and CVE-2021-0561 on platforms for which
    we provide binary releases.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1650628800">- Update to version 3.0.17.4:
  + Service Discovery: Fix UPnP regression on Windows.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1653307200">- Add vlc-dav1d-1.0.patch: Fix build with dav1d 1.0. Upstream
  commits 2202c892 and d38ddd727.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1657108800">- Extend vlc-lua-5.3.patch: match upstream commit 0e0b070c26.
- Add 867.patch: support LUA 5.4 (boo#1200944).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1657713600">- Limit to Lua &lt; 5.4 (boo#1200944).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1659960000">- Also limit lua interpreter to &lt; 5.4 (boo#1200944).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1662552000">- Make vlc-vdpau supplement vlc, not vlc-noX: vdpau itself is based
  on top of the graphical stack.
- Move video_output/libegl_wl_plugin.so from vlc-noX to vlc: links
  GUI stack.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1667908800">- Limit to ffmpeg 4: we're also linking opencv3 which does not use
  ffmpeg 5.</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1668686400">- add vlc-caca-fix-to-0-99-beta20-version.patch: build with libcaca-0.99.beta20</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1669377600">- Update to version 3.0.18 (CVE-2022-41325, boo#1206142):
  + macOS: Fix audio device listing with non-latin names.
  + Misc: Fix rendering and performance issue with older GPUs.
  + Updated translations.
- Changes from version 3.0.18-rc2:
  + Codec/Demux:
  - Add support for Y16 chroma.
  - Fix build of gme plugin.
  + Lua:
  - Fix script for vocaroo.
  - Fix script for youtube to allow throttled playback.
  + Service Discovery: Fix UPnP regression on Windows.
  + Video Output: Fix video placement with caopengllayer.
  + Misc: Fix password search in kwallet module.
- Changes from version 3.0.18-rc:
  + Demux:
  - Major adaptive streaming update, notably for multiple
    timelies and webvtt.
  - Fix seeking with some fragmented MP4 files.
  - Add support for DVBSub inside MKV.
  - Fix some Flac files that could not be played.
  - Improve seeking in Ogg files.
  + Decoders:
  - Fix DxVA/D3D11 crashes on HEVC files with bogus references.
  - Fix libass storage size and crash.
  - Fix decoding errors on macOS hw decoding on some HEVC files.
  + Video Output:
  - Fix color regression with VAAPI/iOS and OpenGL output.
  - Fix some resizing issues with OpenGL on GLX/EGL/X11/XV.
  - Fix Direct3d9 texture stretching.
  - Fix 10-bit accelerated video filters on macOS.
  + Playlist: Avoid playlist liveloop on failed/tiny items
    (temporize EOS bursts).
  + Misc:
  - Misc fixes for the extension UI on macOS.
  - Improve SMBv1 and SMBv2 behaviours.
  - Improve FTP compatibility.
  - Support RISC-V.
  - Fix AVI muxing for Windows Media Player compatibility.
  - Fix seeking speed on macOS.
- Drop vlc-dav1d-1.0.patch and 867.patch: fixed upstream.
- Drop vlc-get-addr-by-ref-from-getConnectionEndpointAddress.patch:
  fixed upstream (commit 05445b74).
- Drop vlc-get-addr-by-ref-from-getConnectionEndpointAddress.patch:
  fixed upstream (commit b689202d).</changelog>
  <changelog author="Niklas Haas &lt;obs@haasn.xyz&gt;" date="1669377601">- Add vlc-libplacebo-5.patch: Backport fix for building with libplacebo v5</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1670846400">- Do not apply vlc.a52.patch if liba52 is &lt; 0.8.0
- Avoid ugly _FORTIFY_SOURCE redefinition warnings</changelog>
</package>
<package pkgid="410afef7e1d10db3e20797eed4cde168a6203a2cacffa62c125d3adfcc16e309" name="vlc-noX" arch="x86_64">
  <version epoch="0" ver="3.0.18" rel="bp154.2.3.1"/>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1616760000">- Add vlc-gcc11.patch: Fix build using gcc11 (boo#1181918).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1616760001">- Guard post scriptlets to only run %{_libdir}/vlc/vlc-cache-gen if
  it already (or still, in case of uninstall) exists.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1620129600">- Update to version 3.0.13:
  + Demux:
  - Adaptive: fix artefacts in HLS streams with wrong profiles/levels
  - Fix regression on some MP4 files for the audio track
  - Fix MPGA and ADTS probing in TS files
  - Fix Flac inside AVI files
  - Fix VP9/Webm artefacts when seeking
  + Codec:
  - Support SSA text scaling
  - Fix rotation on Android rotation
  - Fix WebVTT subtitles that start at 00:00
  + Access:
  - Update libnfs to support NFSv4
  - Improve SMB2 integration
  - Fix Blu-ray files using Unicode names on Windows
  - Disable mcast lookups on Android for RTSP playback
  + Video Output: Rework the D3D11 rendering wait, to fix
    choppiness on display
  + Interfaces:
  - Fix VLC getting stuck on close on X11 (#21875)
  - Improve RTL on preferences on macOS
  - Add mousewheel horizontal axis control
  - Fix crash on exit on macOS
  - Fix sizing of the fullscreen controls on macOS
  + Misc:
  - Improve MIDI fonts search on Linux
  - Update Soundcloud, Youtube, liveleak
  - Fix compilation with GCC11
  - Fix input-slave option for subtitles
  + Updated translations.
- Drop vlc-gcc11.patch: fixed upstream.
- Extend vlc-srto_tsbpddelay.patch: allow srt &gt;= 1.3 for openSUSE.</changelog>
  <changelog author="Fusion Future &lt;qydwhotmail@gmail.com&gt;" date="1624104000">- Update to version 3.0.16:
  + Video Output: Fix a D3D11 crash on Windows 8/8.1.
  + Access: Fix RTSP server timeout handling.
  + Interfaces: macOS: Add touchbar support.
  + Misc: Multiple settings improvements.
- Changes from version 3.0.15:
  + Core: Add Opus &amp; Alac wave format mappings.
  + Access: Fix opening DVD folders with non-ascii characters.
  + Demux:
  - Fix asf regression with broadcast streams.
  - MP4: Fix audio drop on seek.
  + Video Output:
  - Fix seek &amp; volume sliders overlapping with subtitles.
  - Fix delays when seeking with D3D11.
  + Text renderer: Improve freetype fonts outlining.
  + Misc: Fix GnuTLS support for Windows XP.
- Changes from version 3.0.14:
  + Core:
  - Fix double loading of slave input.
  - Fix an issue causing the auto-updater not to launch the new
    version installer.
- Add vlc-get-addr-by-ref-from-getConnectionEndpointAddress.patch:
  The maintainers of live555 changed connectionEndpointAddresss to
  getConnectionEndpointAddress, which now provides the address
  value by reference.
- Rebase vlc-srto_tsbpddelay.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1645531200">- Guard --enable-libplacebo configure parameter with is_opensuse:
  the buildrequires is also guarded the same way.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1645617600">- BuildRequires pkgconfig(smbclient) instead of smbclient-devel:
  smbclient-devel was merged into samba-devel, and we do not want
  to care for actual package names.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1646654400">- Update to version 3.0.17:
  + Core:
  * Fix a regression in parsing secondary source MRLs
  * Allow brackets in path part of URLs
  + Access:
  * Fix support for screen capture on macOS with avcapture
  * Fix closing of HTTP 1.x connections
  * Improve HTTP2 memory usage
  * Improve AVCapture module
  * Improve AudioCD support (audio/data mixed mode, musicbrainz)
  * Improve SMB compatibility by changing the read size
  * Several improvements on the SRT modules (including streamID)
  + Decoders/Packetizers:
  * Add support for DTS LBR
  * Fix some HEVC hardware decoding on Windows and crashes when aspect ratio changes
  * Fix hardware decoding for some AMD GPU drivers
  * Add support for new Fourcc for E-AC3, AV1, GeoVision
  * Fix crashes with VP9 streams
  * Fix styling issues with subs tx3g (mp4) tracks
  * Fix playback of live AV1 streams
  + Audio Output:
  * iOS/tvOS: add support for spatial audio
  * macOS: fix some channels ordering for &gt; 5.1 channels
  * Android: rework audio volume management
  + Video Output:
  * Fix a D3D11 crash when the stream changes aspect ratio
  + Demux:
  * Major overhaul of the adaptive streaming stack
  * Support for DAV video files
  * Add WebP image mapping
  * Fix missing audio start of Opus audio in MKV/WebM
  * Fix an infinite loop in MP4
  * Fix attachments extractions in ogg files
  * Support Uncompressed audio in mp4 (ISO/IEC 23003-5)
  * Fix some lip sync issue in rare MPEG-TS streams
  + Interface:
  * Qt/macOS: Fixup user provided URLs
  * Add safe area handling on macOS
  * Qt: improve preferences search
  * Qt: fix --no-mouse-events option
  + Misc:
  * Update YouTube script
  * Fix Icecast directory parsing which could lead to missing entries
  * Improve UPnP compatibility with some servers
- Drop vlc-srto_tsbpddelay.patch: fixed upstream.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1646913600">- Disable libnfs and soxr integration on suse_version &lt; 1500 (e.g
  SLE12).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1647691200">- Update to version 3.0.17.3:
  + This is a fixup release which fixes a regression that could
    cause a lack of audio for adaptive streaming playback. It is
    identical to 3.0.17.2 otherwise.
  + This updates contains various fixes and improvements:
  - Major adaptive streaming stack overhaul
  - Major codec updates
  - Many third party libraries update
  - Allow brackets in the path section of URLs
  - Better notch support for new macbooks
  - Add support for DAV video and Webp image formats
  - Improve AV1 live streaming support
  - Several SRT support improvements
  - Numerous crash fixes
  - Update youtube script
- Changes from version 3.0.17.2:
  + This is a fixup release which fixes youtube playback and
    contextual menus on integrated video for the Qt interface. It
    is identical to 3.0.17-1 otherwise.
- Changes from version 3.0.17-1:
  + This is a fixup release which bumps libflac to 1.3.4 in order
    to fix CVE-2020-0499 and CVE-2021-0561 on platforms for which
    we provide binary releases.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1650628800">- Update to version 3.0.17.4:
  + Service Discovery: Fix UPnP regression on Windows.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1653307200">- Add vlc-dav1d-1.0.patch: Fix build with dav1d 1.0. Upstream
  commits 2202c892 and d38ddd727.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1657108800">- Extend vlc-lua-5.3.patch: match upstream commit 0e0b070c26.
- Add 867.patch: support LUA 5.4 (boo#1200944).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1657713600">- Limit to Lua &lt; 5.4 (boo#1200944).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1659960000">- Also limit lua interpreter to &lt; 5.4 (boo#1200944).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1662552000">- Make vlc-vdpau supplement vlc, not vlc-noX: vdpau itself is based
  on top of the graphical stack.
- Move video_output/libegl_wl_plugin.so from vlc-noX to vlc: links
  GUI stack.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1667908800">- Limit to ffmpeg 4: we're also linking opencv3 which does not use
  ffmpeg 5.</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1668686400">- add vlc-caca-fix-to-0-99-beta20-version.patch: build with libcaca-0.99.beta20</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1669377600">- Update to version 3.0.18 (CVE-2022-41325, boo#1206142):
  + macOS: Fix audio device listing with non-latin names.
  + Misc: Fix rendering and performance issue with older GPUs.
  + Updated translations.
- Changes from version 3.0.18-rc2:
  + Codec/Demux:
  - Add support for Y16 chroma.
  - Fix build of gme plugin.
  + Lua:
  - Fix script for vocaroo.
  - Fix script for youtube to allow throttled playback.
  + Service Discovery: Fix UPnP regression on Windows.
  + Video Output: Fix video placement with caopengllayer.
  + Misc: Fix password search in kwallet module.
- Changes from version 3.0.18-rc:
  + Demux:
  - Major adaptive streaming update, notably for multiple
    timelies and webvtt.
  - Fix seeking with some fragmented MP4 files.
  - Add support for DVBSub inside MKV.
  - Fix some Flac files that could not be played.
  - Improve seeking in Ogg files.
  + Decoders:
  - Fix DxVA/D3D11 crashes on HEVC files with bogus references.
  - Fix libass storage size and crash.
  - Fix decoding errors on macOS hw decoding on some HEVC files.
  + Video Output:
  - Fix color regression with VAAPI/iOS and OpenGL output.
  - Fix some resizing issues with OpenGL on GLX/EGL/X11/XV.
  - Fix Direct3d9 texture stretching.
  - Fix 10-bit accelerated video filters on macOS.
  + Playlist: Avoid playlist liveloop on failed/tiny items
    (temporize EOS bursts).
  + Misc:
  - Misc fixes for the extension UI on macOS.
  - Improve SMBv1 and SMBv2 behaviours.
  - Improve FTP compatibility.
  - Support RISC-V.
  - Fix AVI muxing for Windows Media Player compatibility.
  - Fix seeking speed on macOS.
- Drop vlc-dav1d-1.0.patch and 867.patch: fixed upstream.
- Drop vlc-get-addr-by-ref-from-getConnectionEndpointAddress.patch:
  fixed upstream (commit 05445b74).
- Drop vlc-get-addr-by-ref-from-getConnectionEndpointAddress.patch:
  fixed upstream (commit b689202d).</changelog>
  <changelog author="Niklas Haas &lt;obs@haasn.xyz&gt;" date="1669377601">- Add vlc-libplacebo-5.patch: Backport fix for building with libplacebo v5</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1670846400">- Do not apply vlc.a52.patch if liba52 is &lt; 0.8.0
- Avoid ugly _FORTIFY_SOURCE redefinition warnings</changelog>
</package>
<package pkgid="16f5c92b5259a6defa65120c5dc2527b40634c620501882a1c007d6ad7e9201e" name="vlc-opencv" arch="aarch64">
  <version epoch="0" ver="3.0.18" rel="bp154.2.3.1"/>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1616760000">- Add vlc-gcc11.patch: Fix build using gcc11 (boo#1181918).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1616760001">- Guard post scriptlets to only run %{_libdir}/vlc/vlc-cache-gen if
  it already (or still, in case of uninstall) exists.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1620129600">- Update to version 3.0.13:
  + Demux:
  - Adaptive: fix artefacts in HLS streams with wrong profiles/levels
  - Fix regression on some MP4 files for the audio track
  - Fix MPGA and ADTS probing in TS files
  - Fix Flac inside AVI files
  - Fix VP9/Webm artefacts when seeking
  + Codec:
  - Support SSA text scaling
  - Fix rotation on Android rotation
  - Fix WebVTT subtitles that start at 00:00
  + Access:
  - Update libnfs to support NFSv4
  - Improve SMB2 integration
  - Fix Blu-ray files using Unicode names on Windows
  - Disable mcast lookups on Android for RTSP playback
  + Video Output: Rework the D3D11 rendering wait, to fix
    choppiness on display
  + Interfaces:
  - Fix VLC getting stuck on close on X11 (#21875)
  - Improve RTL on preferences on macOS
  - Add mousewheel horizontal axis control
  - Fix crash on exit on macOS
  - Fix sizing of the fullscreen controls on macOS
  + Misc:
  - Improve MIDI fonts search on Linux
  - Update Soundcloud, Youtube, liveleak
  - Fix compilation with GCC11
  - Fix input-slave option for subtitles
  + Updated translations.
- Drop vlc-gcc11.patch: fixed upstream.
- Extend vlc-srto_tsbpddelay.patch: allow srt &gt;= 1.3 for openSUSE.</changelog>
  <changelog author="Fusion Future &lt;qydwhotmail@gmail.com&gt;" date="1624104000">- Update to version 3.0.16:
  + Video Output: Fix a D3D11 crash on Windows 8/8.1.
  + Access: Fix RTSP server timeout handling.
  + Interfaces: macOS: Add touchbar support.
  + Misc: Multiple settings improvements.
- Changes from version 3.0.15:
  + Core: Add Opus &amp; Alac wave format mappings.
  + Access: Fix opening DVD folders with non-ascii characters.
  + Demux:
  - Fix asf regression with broadcast streams.
  - MP4: Fix audio drop on seek.
  + Video Output:
  - Fix seek &amp; volume sliders overlapping with subtitles.
  - Fix delays when seeking with D3D11.
  + Text renderer: Improve freetype fonts outlining.
  + Misc: Fix GnuTLS support for Windows XP.
- Changes from version 3.0.14:
  + Core:
  - Fix double loading of slave input.
  - Fix an issue causing the auto-updater not to launch the new
    version installer.
- Add vlc-get-addr-by-ref-from-getConnectionEndpointAddress.patch:
  The maintainers of live555 changed connectionEndpointAddresss to
  getConnectionEndpointAddress, which now provides the address
  value by reference.
- Rebase vlc-srto_tsbpddelay.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1645531200">- Guard --enable-libplacebo configure parameter with is_opensuse:
  the buildrequires is also guarded the same way.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1645617600">- BuildRequires pkgconfig(smbclient) instead of smbclient-devel:
  smbclient-devel was merged into samba-devel, and we do not want
  to care for actual package names.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1646654400">- Update to version 3.0.17:
  + Core:
  * Fix a regression in parsing secondary source MRLs
  * Allow brackets in path part of URLs
  + Access:
  * Fix support for screen capture on macOS with avcapture
  * Fix closing of HTTP 1.x connections
  * Improve HTTP2 memory usage
  * Improve AVCapture module
  * Improve AudioCD support (audio/data mixed mode, musicbrainz)
  * Improve SMB compatibility by changing the read size
  * Several improvements on the SRT modules (including streamID)
  + Decoders/Packetizers:
  * Add support for DTS LBR
  * Fix some HEVC hardware decoding on Windows and crashes when aspect ratio changes
  * Fix hardware decoding for some AMD GPU drivers
  * Add support for new Fourcc for E-AC3, AV1, GeoVision
  * Fix crashes with VP9 streams
  * Fix styling issues with subs tx3g (mp4) tracks
  * Fix playback of live AV1 streams
  + Audio Output:
  * iOS/tvOS: add support for spatial audio
  * macOS: fix some channels ordering for &gt; 5.1 channels
  * Android: rework audio volume management
  + Video Output:
  * Fix a D3D11 crash when the stream changes aspect ratio
  + Demux:
  * Major overhaul of the adaptive streaming stack
  * Support for DAV video files
  * Add WebP image mapping
  * Fix missing audio start of Opus audio in MKV/WebM
  * Fix an infinite loop in MP4
  * Fix attachments extractions in ogg files
  * Support Uncompressed audio in mp4 (ISO/IEC 23003-5)
  * Fix some lip sync issue in rare MPEG-TS streams
  + Interface:
  * Qt/macOS: Fixup user provided URLs
  * Add safe area handling on macOS
  * Qt: improve preferences search
  * Qt: fix --no-mouse-events option
  + Misc:
  * Update YouTube script
  * Fix Icecast directory parsing which could lead to missing entries
  * Improve UPnP compatibility with some servers
- Drop vlc-srto_tsbpddelay.patch: fixed upstream.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1646913600">- Disable libnfs and soxr integration on suse_version &lt; 1500 (e.g
  SLE12).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1647691200">- Update to version 3.0.17.3:
  + This is a fixup release which fixes a regression that could
    cause a lack of audio for adaptive streaming playback. It is
    identical to 3.0.17.2 otherwise.
  + This updates contains various fixes and improvements:
  - Major adaptive streaming stack overhaul
  - Major codec updates
  - Many third party libraries update
  - Allow brackets in the path section of URLs
  - Better notch support for new macbooks
  - Add support for DAV video and Webp image formats
  - Improve AV1 live streaming support
  - Several SRT support improvements
  - Numerous crash fixes
  - Update youtube script
- Changes from version 3.0.17.2:
  + This is a fixup release which fixes youtube playback and
    contextual menus on integrated video for the Qt interface. It
    is identical to 3.0.17-1 otherwise.
- Changes from version 3.0.17-1:
  + This is a fixup release which bumps libflac to 1.3.4 in order
    to fix CVE-2020-0499 and CVE-2021-0561 on platforms for which
    we provide binary releases.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1650628800">- Update to version 3.0.17.4:
  + Service Discovery: Fix UPnP regression on Windows.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1653307200">- Add vlc-dav1d-1.0.patch: Fix build with dav1d 1.0. Upstream
  commits 2202c892 and d38ddd727.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1657108800">- Extend vlc-lua-5.3.patch: match upstream commit 0e0b070c26.
- Add 867.patch: support LUA 5.4 (boo#1200944).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1657713600">- Limit to Lua &lt; 5.4 (boo#1200944).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1659960000">- Also limit lua interpreter to &lt; 5.4 (boo#1200944).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1662552000">- Make vlc-vdpau supplement vlc, not vlc-noX: vdpau itself is based
  on top of the graphical stack.
- Move video_output/libegl_wl_plugin.so from vlc-noX to vlc: links
  GUI stack.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1667908800">- Limit to ffmpeg 4: we're also linking opencv3 which does not use
  ffmpeg 5.</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1668686400">- add vlc-caca-fix-to-0-99-beta20-version.patch: build with libcaca-0.99.beta20</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1669377600">- Update to version 3.0.18 (CVE-2022-41325, boo#1206142):
  + macOS: Fix audio device listing with non-latin names.
  + Misc: Fix rendering and performance issue with older GPUs.
  + Updated translations.
- Changes from version 3.0.18-rc2:
  + Codec/Demux:
  - Add support for Y16 chroma.
  - Fix build of gme plugin.
  + Lua:
  - Fix script for vocaroo.
  - Fix script for youtube to allow throttled playback.
  + Service Discovery: Fix UPnP regression on Windows.
  + Video Output: Fix video placement with caopengllayer.
  + Misc: Fix password search in kwallet module.
- Changes from version 3.0.18-rc:
  + Demux:
  - Major adaptive streaming update, notably for multiple
    timelies and webvtt.
  - Fix seeking with some fragmented MP4 files.
  - Add support for DVBSub inside MKV.
  - Fix some Flac files that could not be played.
  - Improve seeking in Ogg files.
  + Decoders:
  - Fix DxVA/D3D11 crashes on HEVC files with bogus references.
  - Fix libass storage size and crash.
  - Fix decoding errors on macOS hw decoding on some HEVC files.
  + Video Output:
  - Fix color regression with VAAPI/iOS and OpenGL output.
  - Fix some resizing issues with OpenGL on GLX/EGL/X11/XV.
  - Fix Direct3d9 texture stretching.
  - Fix 10-bit accelerated video filters on macOS.
  + Playlist: Avoid playlist liveloop on failed/tiny items
    (temporize EOS bursts).
  + Misc:
  - Misc fixes for the extension UI on macOS.
  - Improve SMBv1 and SMBv2 behaviours.
  - Improve FTP compatibility.
  - Support RISC-V.
  - Fix AVI muxing for Windows Media Player compatibility.
  - Fix seeking speed on macOS.
- Drop vlc-dav1d-1.0.patch and 867.patch: fixed upstream.
- Drop vlc-get-addr-by-ref-from-getConnectionEndpointAddress.patch:
  fixed upstream (commit 05445b74).
- Drop vlc-get-addr-by-ref-from-getConnectionEndpointAddress.patch:
  fixed upstream (commit b689202d).</changelog>
  <changelog author="Niklas Haas &lt;obs@haasn.xyz&gt;" date="1669377601">- Add vlc-libplacebo-5.patch: Backport fix for building with libplacebo v5</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1670846400">- Do not apply vlc.a52.patch if liba52 is &lt; 0.8.0
- Avoid ugly _FORTIFY_SOURCE redefinition warnings</changelog>
</package>
<package pkgid="e3b9ab39bd33d3c18ac94dc71b17095cc6b0c6b575cc512dc8b1e1fbe87d1da3" name="vlc-opencv" arch="ppc64le">
  <version epoch="0" ver="3.0.18" rel="bp154.2.3.1"/>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1616760000">- Add vlc-gcc11.patch: Fix build using gcc11 (boo#1181918).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1616760001">- Guard post scriptlets to only run %{_libdir}/vlc/vlc-cache-gen if
  it already (or still, in case of uninstall) exists.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1620129600">- Update to version 3.0.13:
  + Demux:
  - Adaptive: fix artefacts in HLS streams with wrong profiles/levels
  - Fix regression on some MP4 files for the audio track
  - Fix MPGA and ADTS probing in TS files
  - Fix Flac inside AVI files
  - Fix VP9/Webm artefacts when seeking
  + Codec:
  - Support SSA text scaling
  - Fix rotation on Android rotation
  - Fix WebVTT subtitles that start at 00:00
  + Access:
  - Update libnfs to support NFSv4
  - Improve SMB2 integration
  - Fix Blu-ray files using Unicode names on Windows
  - Disable mcast lookups on Android for RTSP playback
  + Video Output: Rework the D3D11 rendering wait, to fix
    choppiness on display
  + Interfaces:
  - Fix VLC getting stuck on close on X11 (#21875)
  - Improve RTL on preferences on macOS
  - Add mousewheel horizontal axis control
  - Fix crash on exit on macOS
  - Fix sizing of the fullscreen controls on macOS
  + Misc:
  - Improve MIDI fonts search on Linux
  - Update Soundcloud, Youtube, liveleak
  - Fix compilation with GCC11
  - Fix input-slave option for subtitles
  + Updated translations.
- Drop vlc-gcc11.patch: fixed upstream.
- Extend vlc-srto_tsbpddelay.patch: allow srt &gt;= 1.3 for openSUSE.</changelog>
  <changelog author="Fusion Future &lt;qydwhotmail@gmail.com&gt;" date="1624104000">- Update to version 3.0.16:
  + Video Output: Fix a D3D11 crash on Windows 8/8.1.
  + Access: Fix RTSP server timeout handling.
  + Interfaces: macOS: Add touchbar support.
  + Misc: Multiple settings improvements.
- Changes from version 3.0.15:
  + Core: Add Opus &amp; Alac wave format mappings.
  + Access: Fix opening DVD folders with non-ascii characters.
  + Demux:
  - Fix asf regression with broadcast streams.
  - MP4: Fix audio drop on seek.
  + Video Output:
  - Fix seek &amp; volume sliders overlapping with subtitles.
  - Fix delays when seeking with D3D11.
  + Text renderer: Improve freetype fonts outlining.
  + Misc: Fix GnuTLS support for Windows XP.
- Changes from version 3.0.14:
  + Core:
  - Fix double loading of slave input.
  - Fix an issue causing the auto-updater not to launch the new
    version installer.
- Add vlc-get-addr-by-ref-from-getConnectionEndpointAddress.patch:
  The maintainers of live555 changed connectionEndpointAddresss to
  getConnectionEndpointAddress, which now provides the address
  value by reference.
- Rebase vlc-srto_tsbpddelay.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1645531200">- Guard --enable-libplacebo configure parameter with is_opensuse:
  the buildrequires is also guarded the same way.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1645617600">- BuildRequires pkgconfig(smbclient) instead of smbclient-devel:
  smbclient-devel was merged into samba-devel, and we do not want
  to care for actual package names.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1646654400">- Update to version 3.0.17:
  + Core:
  * Fix a regression in parsing secondary source MRLs
  * Allow brackets in path part of URLs
  + Access:
  * Fix support for screen capture on macOS with avcapture
  * Fix closing of HTTP 1.x connections
  * Improve HTTP2 memory usage
  * Improve AVCapture module
  * Improve AudioCD support (audio/data mixed mode, musicbrainz)
  * Improve SMB compatibility by changing the read size
  * Several improvements on the SRT modules (including streamID)
  + Decoders/Packetizers:
  * Add support for DTS LBR
  * Fix some HEVC hardware decoding on Windows and crashes when aspect ratio changes
  * Fix hardware decoding for some AMD GPU drivers
  * Add support for new Fourcc for E-AC3, AV1, GeoVision
  * Fix crashes with VP9 streams
  * Fix styling issues with subs tx3g (mp4) tracks
  * Fix playback of live AV1 streams
  + Audio Output:
  * iOS/tvOS: add support for spatial audio
  * macOS: fix some channels ordering for &gt; 5.1 channels
  * Android: rework audio volume management
  + Video Output:
  * Fix a D3D11 crash when the stream changes aspect ratio
  + Demux:
  * Major overhaul of the adaptive streaming stack
  * Support for DAV video files
  * Add WebP image mapping
  * Fix missing audio start of Opus audio in MKV/WebM
  * Fix an infinite loop in MP4
  * Fix attachments extractions in ogg files
  * Support Uncompressed audio in mp4 (ISO/IEC 23003-5)
  * Fix some lip sync issue in rare MPEG-TS streams
  + Interface:
  * Qt/macOS: Fixup user provided URLs
  * Add safe area handling on macOS
  * Qt: improve preferences search
  * Qt: fix --no-mouse-events option
  + Misc:
  * Update YouTube script
  * Fix Icecast directory parsing which could lead to missing entries
  * Improve UPnP compatibility with some servers
- Drop vlc-srto_tsbpddelay.patch: fixed upstream.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1646913600">- Disable libnfs and soxr integration on suse_version &lt; 1500 (e.g
  SLE12).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1647691200">- Update to version 3.0.17.3:
  + This is a fixup release which fixes a regression that could
    cause a lack of audio for adaptive streaming playback. It is
    identical to 3.0.17.2 otherwise.
  + This updates contains various fixes and improvements:
  - Major adaptive streaming stack overhaul
  - Major codec updates
  - Many third party libraries update
  - Allow brackets in the path section of URLs
  - Better notch support for new macbooks
  - Add support for DAV video and Webp image formats
  - Improve AV1 live streaming support
  - Several SRT support improvements
  - Numerous crash fixes
  - Update youtube script
- Changes from version 3.0.17.2:
  + This is a fixup release which fixes youtube playback and
    contextual menus on integrated video for the Qt interface. It
    is identical to 3.0.17-1 otherwise.
- Changes from version 3.0.17-1:
  + This is a fixup release which bumps libflac to 1.3.4 in order
    to fix CVE-2020-0499 and CVE-2021-0561 on platforms for which
    we provide binary releases.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1650628800">- Update to version 3.0.17.4:
  + Service Discovery: Fix UPnP regression on Windows.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1653307200">- Add vlc-dav1d-1.0.patch: Fix build with dav1d 1.0. Upstream
  commits 2202c892 and d38ddd727.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1657108800">- Extend vlc-lua-5.3.patch: match upstream commit 0e0b070c26.
- Add 867.patch: support LUA 5.4 (boo#1200944).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1657713600">- Limit to Lua &lt; 5.4 (boo#1200944).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1659960000">- Also limit lua interpreter to &lt; 5.4 (boo#1200944).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1662552000">- Make vlc-vdpau supplement vlc, not vlc-noX: vdpau itself is based
  on top of the graphical stack.
- Move video_output/libegl_wl_plugin.so from vlc-noX to vlc: links
  GUI stack.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1667908800">- Limit to ffmpeg 4: we're also linking opencv3 which does not use
  ffmpeg 5.</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1668686400">- add vlc-caca-fix-to-0-99-beta20-version.patch: build with libcaca-0.99.beta20</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1669377600">- Update to version 3.0.18 (CVE-2022-41325, boo#1206142):
  + macOS: Fix audio device listing with non-latin names.
  + Misc: Fix rendering and performance issue with older GPUs.
  + Updated translations.
- Changes from version 3.0.18-rc2:
  + Codec/Demux:
  - Add support for Y16 chroma.
  - Fix build of gme plugin.
  + Lua:
  - Fix script for vocaroo.
  - Fix script for youtube to allow throttled playback.
  + Service Discovery: Fix UPnP regression on Windows.
  + Video Output: Fix video placement with caopengllayer.
  + Misc: Fix password search in kwallet module.
- Changes from version 3.0.18-rc:
  + Demux:
  - Major adaptive streaming update, notably for multiple
    timelies and webvtt.
  - Fix seeking with some fragmented MP4 files.
  - Add support for DVBSub inside MKV.
  - Fix some Flac files that could not be played.
  - Improve seeking in Ogg files.
  + Decoders:
  - Fix DxVA/D3D11 crashes on HEVC files with bogus references.
  - Fix libass storage size and crash.
  - Fix decoding errors on macOS hw decoding on some HEVC files.
  + Video Output:
  - Fix color regression with VAAPI/iOS and OpenGL output.
  - Fix some resizing issues with OpenGL on GLX/EGL/X11/XV.
  - Fix Direct3d9 texture stretching.
  - Fix 10-bit accelerated video filters on macOS.
  + Playlist: Avoid playlist liveloop on failed/tiny items
    (temporize EOS bursts).
  + Misc:
  - Misc fixes for the extension UI on macOS.
  - Improve SMBv1 and SMBv2 behaviours.
  - Improve FTP compatibility.
  - Support RISC-V.
  - Fix AVI muxing for Windows Media Player compatibility.
  - Fix seeking speed on macOS.
- Drop vlc-dav1d-1.0.patch and 867.patch: fixed upstream.
- Drop vlc-get-addr-by-ref-from-getConnectionEndpointAddress.patch:
  fixed upstream (commit 05445b74).
- Drop vlc-get-addr-by-ref-from-getConnectionEndpointAddress.patch:
  fixed upstream (commit b689202d).</changelog>
  <changelog author="Niklas Haas &lt;obs@haasn.xyz&gt;" date="1669377601">- Add vlc-libplacebo-5.patch: Backport fix for building with libplacebo v5</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1670846400">- Do not apply vlc.a52.patch if liba52 is &lt; 0.8.0
- Avoid ugly _FORTIFY_SOURCE redefinition warnings</changelog>
</package>
<package pkgid="3e61d251d251c8cc45ffb21c2ccd0103f120b52da8d8df41a71138cba2311c2a" name="vlc-opencv" arch="x86_64">
  <version epoch="0" ver="3.0.18" rel="bp154.2.3.1"/>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1616760000">- Add vlc-gcc11.patch: Fix build using gcc11 (boo#1181918).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1616760001">- Guard post scriptlets to only run %{_libdir}/vlc/vlc-cache-gen if
  it already (or still, in case of uninstall) exists.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1620129600">- Update to version 3.0.13:
  + Demux:
  - Adaptive: fix artefacts in HLS streams with wrong profiles/levels
  - Fix regression on some MP4 files for the audio track
  - Fix MPGA and ADTS probing in TS files
  - Fix Flac inside AVI files
  - Fix VP9/Webm artefacts when seeking
  + Codec:
  - Support SSA text scaling
  - Fix rotation on Android rotation
  - Fix WebVTT subtitles that start at 00:00
  + Access:
  - Update libnfs to support NFSv4
  - Improve SMB2 integration
  - Fix Blu-ray files using Unicode names on Windows
  - Disable mcast lookups on Android for RTSP playback
  + Video Output: Rework the D3D11 rendering wait, to fix
    choppiness on display
  + Interfaces:
  - Fix VLC getting stuck on close on X11 (#21875)
  - Improve RTL on preferences on macOS
  - Add mousewheel horizontal axis control
  - Fix crash on exit on macOS
  - Fix sizing of the fullscreen controls on macOS
  + Misc:
  - Improve MIDI fonts search on Linux
  - Update Soundcloud, Youtube, liveleak
  - Fix compilation with GCC11
  - Fix input-slave option for subtitles
  + Updated translations.
- Drop vlc-gcc11.patch: fixed upstream.
- Extend vlc-srto_tsbpddelay.patch: allow srt &gt;= 1.3 for openSUSE.</changelog>
  <changelog author="Fusion Future &lt;qydwhotmail@gmail.com&gt;" date="1624104000">- Update to version 3.0.16:
  + Video Output: Fix a D3D11 crash on Windows 8/8.1.
  + Access: Fix RTSP server timeout handling.
  + Interfaces: macOS: Add touchbar support.
  + Misc: Multiple settings improvements.
- Changes from version 3.0.15:
  + Core: Add Opus &amp; Alac wave format mappings.
  + Access: Fix opening DVD folders with non-ascii characters.
  + Demux:
  - Fix asf regression with broadcast streams.
  - MP4: Fix audio drop on seek.
  + Video Output:
  - Fix seek &amp; volume sliders overlapping with subtitles.
  - Fix delays when seeking with D3D11.
  + Text renderer: Improve freetype fonts outlining.
  + Misc: Fix GnuTLS support for Windows XP.
- Changes from version 3.0.14:
  + Core:
  - Fix double loading of slave input.
  - Fix an issue causing the auto-updater not to launch the new
    version installer.
- Add vlc-get-addr-by-ref-from-getConnectionEndpointAddress.patch:
  The maintainers of live555 changed connectionEndpointAddresss to
  getConnectionEndpointAddress, which now provides the address
  value by reference.
- Rebase vlc-srto_tsbpddelay.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1645531200">- Guard --enable-libplacebo configure parameter with is_opensuse:
  the buildrequires is also guarded the same way.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1645617600">- BuildRequires pkgconfig(smbclient) instead of smbclient-devel:
  smbclient-devel was merged into samba-devel, and we do not want
  to care for actual package names.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1646654400">- Update to version 3.0.17:
  + Core:
  * Fix a regression in parsing secondary source MRLs
  * Allow brackets in path part of URLs
  + Access:
  * Fix support for screen capture on macOS with avcapture
  * Fix closing of HTTP 1.x connections
  * Improve HTTP2 memory usage
  * Improve AVCapture module
  * Improve AudioCD support (audio/data mixed mode, musicbrainz)
  * Improve SMB compatibility by changing the read size
  * Several improvements on the SRT modules (including streamID)
  + Decoders/Packetizers:
  * Add support for DTS LBR
  * Fix some HEVC hardware decoding on Windows and crashes when aspect ratio changes
  * Fix hardware decoding for some AMD GPU drivers
  * Add support for new Fourcc for E-AC3, AV1, GeoVision
  * Fix crashes with VP9 streams
  * Fix styling issues with subs tx3g (mp4) tracks
  * Fix playback of live AV1 streams
  + Audio Output:
  * iOS/tvOS: add support for spatial audio
  * macOS: fix some channels ordering for &gt; 5.1 channels
  * Android: rework audio volume management
  + Video Output:
  * Fix a D3D11 crash when the stream changes aspect ratio
  + Demux:
  * Major overhaul of the adaptive streaming stack
  * Support for DAV video files
  * Add WebP image mapping
  * Fix missing audio start of Opus audio in MKV/WebM
  * Fix an infinite loop in MP4
  * Fix attachments extractions in ogg files
  * Support Uncompressed audio in mp4 (ISO/IEC 23003-5)
  * Fix some lip sync issue in rare MPEG-TS streams
  + Interface:
  * Qt/macOS: Fixup user provided URLs
  * Add safe area handling on macOS
  * Qt: improve preferences search
  * Qt: fix --no-mouse-events option
  + Misc:
  * Update YouTube script
  * Fix Icecast directory parsing which could lead to missing entries
  * Improve UPnP compatibility with some servers
- Drop vlc-srto_tsbpddelay.patch: fixed upstream.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1646913600">- Disable libnfs and soxr integration on suse_version &lt; 1500 (e.g
  SLE12).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1647691200">- Update to version 3.0.17.3:
  + This is a fixup release which fixes a regression that could
    cause a lack of audio for adaptive streaming playback. It is
    identical to 3.0.17.2 otherwise.
  + This updates contains various fixes and improvements:
  - Major adaptive streaming stack overhaul
  - Major codec updates
  - Many third party libraries update
  - Allow brackets in the path section of URLs
  - Better notch support for new macbooks
  - Add support for DAV video and Webp image formats
  - Improve AV1 live streaming support
  - Several SRT support improvements
  - Numerous crash fixes
  - Update youtube script
- Changes from version 3.0.17.2:
  + This is a fixup release which fixes youtube playback and
    contextual menus on integrated video for the Qt interface. It
    is identical to 3.0.17-1 otherwise.
- Changes from version 3.0.17-1:
  + This is a fixup release which bumps libflac to 1.3.4 in order
    to fix CVE-2020-0499 and CVE-2021-0561 on platforms for which
    we provide binary releases.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1650628800">- Update to version 3.0.17.4:
  + Service Discovery: Fix UPnP regression on Windows.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1653307200">- Add vlc-dav1d-1.0.patch: Fix build with dav1d 1.0. Upstream
  commits 2202c892 and d38ddd727.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1657108800">- Extend vlc-lua-5.3.patch: match upstream commit 0e0b070c26.
- Add 867.patch: support LUA 5.4 (boo#1200944).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1657713600">- Limit to Lua &lt; 5.4 (boo#1200944).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1659960000">- Also limit lua interpreter to &lt; 5.4 (boo#1200944).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1662552000">- Make vlc-vdpau supplement vlc, not vlc-noX: vdpau itself is based
  on top of the graphical stack.
- Move video_output/libegl_wl_plugin.so from vlc-noX to vlc: links
  GUI stack.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1667908800">- Limit to ffmpeg 4: we're also linking opencv3 which does not use
  ffmpeg 5.</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1668686400">- add vlc-caca-fix-to-0-99-beta20-version.patch: build with libcaca-0.99.beta20</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1669377600">- Update to version 3.0.18 (CVE-2022-41325, boo#1206142):
  + macOS: Fix audio device listing with non-latin names.
  + Misc: Fix rendering and performance issue with older GPUs.
  + Updated translations.
- Changes from version 3.0.18-rc2:
  + Codec/Demux:
  - Add support for Y16 chroma.
  - Fix build of gme plugin.
  + Lua:
  - Fix script for vocaroo.
  - Fix script for youtube to allow throttled playback.
  + Service Discovery: Fix UPnP regression on Windows.
  + Video Output: Fix video placement with caopengllayer.
  + Misc: Fix password search in kwallet module.
- Changes from version 3.0.18-rc:
  + Demux:
  - Major adaptive streaming update, notably for multiple
    timelies and webvtt.
  - Fix seeking with some fragmented MP4 files.
  - Add support for DVBSub inside MKV.
  - Fix some Flac files that could not be played.
  - Improve seeking in Ogg files.
  + Decoders:
  - Fix DxVA/D3D11 crashes on HEVC files with bogus references.
  - Fix libass storage size and crash.
  - Fix decoding errors on macOS hw decoding on some HEVC files.
  + Video Output:
  - Fix color regression with VAAPI/iOS and OpenGL output.
  - Fix some resizing issues with OpenGL on GLX/EGL/X11/XV.
  - Fix Direct3d9 texture stretching.
  - Fix 10-bit accelerated video filters on macOS.
  + Playlist: Avoid playlist liveloop on failed/tiny items
    (temporize EOS bursts).
  + Misc:
  - Misc fixes for the extension UI on macOS.
  - Improve SMBv1 and SMBv2 behaviours.
  - Improve FTP compatibility.
  - Support RISC-V.
  - Fix AVI muxing for Windows Media Player compatibility.
  - Fix seeking speed on macOS.
- Drop vlc-dav1d-1.0.patch and 867.patch: fixed upstream.
- Drop vlc-get-addr-by-ref-from-getConnectionEndpointAddress.patch:
  fixed upstream (commit 05445b74).
- Drop vlc-get-addr-by-ref-from-getConnectionEndpointAddress.patch:
  fixed upstream (commit b689202d).</changelog>
  <changelog author="Niklas Haas &lt;obs@haasn.xyz&gt;" date="1669377601">- Add vlc-libplacebo-5.patch: Backport fix for building with libplacebo v5</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1670846400">- Do not apply vlc.a52.patch if liba52 is &lt; 0.8.0
- Avoid ugly _FORTIFY_SOURCE redefinition warnings</changelog>
</package>
<package pkgid="8beb75d73b732e27c8a29d2312a018b2abfb95802facdb134ca8cf1683352004" name="vlc-qt" arch="aarch64">
  <version epoch="0" ver="3.0.18" rel="bp154.2.3.1"/>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1616760000">- Add vlc-gcc11.patch: Fix build using gcc11 (boo#1181918).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1616760001">- Guard post scriptlets to only run %{_libdir}/vlc/vlc-cache-gen if
  it already (or still, in case of uninstall) exists.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1620129600">- Update to version 3.0.13:
  + Demux:
  - Adaptive: fix artefacts in HLS streams with wrong profiles/levels
  - Fix regression on some MP4 files for the audio track
  - Fix MPGA and ADTS probing in TS files
  - Fix Flac inside AVI files
  - Fix VP9/Webm artefacts when seeking
  + Codec:
  - Support SSA text scaling
  - Fix rotation on Android rotation
  - Fix WebVTT subtitles that start at 00:00
  + Access:
  - Update libnfs to support NFSv4
  - Improve SMB2 integration
  - Fix Blu-ray files using Unicode names on Windows
  - Disable mcast lookups on Android for RTSP playback
  + Video Output: Rework the D3D11 rendering wait, to fix
    choppiness on display
  + Interfaces:
  - Fix VLC getting stuck on close on X11 (#21875)
  - Improve RTL on preferences on macOS
  - Add mousewheel horizontal axis control
  - Fix crash on exit on macOS
  - Fix sizing of the fullscreen controls on macOS
  + Misc:
  - Improve MIDI fonts search on Linux
  - Update Soundcloud, Youtube, liveleak
  - Fix compilation with GCC11
  - Fix input-slave option for subtitles
  + Updated translations.
- Drop vlc-gcc11.patch: fixed upstream.
- Extend vlc-srto_tsbpddelay.patch: allow srt &gt;= 1.3 for openSUSE.</changelog>
  <changelog author="Fusion Future &lt;qydwhotmail@gmail.com&gt;" date="1624104000">- Update to version 3.0.16:
  + Video Output: Fix a D3D11 crash on Windows 8/8.1.
  + Access: Fix RTSP server timeout handling.
  + Interfaces: macOS: Add touchbar support.
  + Misc: Multiple settings improvements.
- Changes from version 3.0.15:
  + Core: Add Opus &amp; Alac wave format mappings.
  + Access: Fix opening DVD folders with non-ascii characters.
  + Demux:
  - Fix asf regression with broadcast streams.
  - MP4: Fix audio drop on seek.
  + Video Output:
  - Fix seek &amp; volume sliders overlapping with subtitles.
  - Fix delays when seeking with D3D11.
  + Text renderer: Improve freetype fonts outlining.
  + Misc: Fix GnuTLS support for Windows XP.
- Changes from version 3.0.14:
  + Core:
  - Fix double loading of slave input.
  - Fix an issue causing the auto-updater not to launch the new
    version installer.
- Add vlc-get-addr-by-ref-from-getConnectionEndpointAddress.patch:
  The maintainers of live555 changed connectionEndpointAddresss to
  getConnectionEndpointAddress, which now provides the address
  value by reference.
- Rebase vlc-srto_tsbpddelay.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1645531200">- Guard --enable-libplacebo configure parameter with is_opensuse:
  the buildrequires is also guarded the same way.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1645617600">- BuildRequires pkgconfig(smbclient) instead of smbclient-devel:
  smbclient-devel was merged into samba-devel, and we do not want
  to care for actual package names.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1646654400">- Update to version 3.0.17:
  + Core:
  * Fix a regression in parsing secondary source MRLs
  * Allow brackets in path part of URLs
  + Access:
  * Fix support for screen capture on macOS with avcapture
  * Fix closing of HTTP 1.x connections
  * Improve HTTP2 memory usage
  * Improve AVCapture module
  * Improve AudioCD support (audio/data mixed mode, musicbrainz)
  * Improve SMB compatibility by changing the read size
  * Several improvements on the SRT modules (including streamID)
  + Decoders/Packetizers:
  * Add support for DTS LBR
  * Fix some HEVC hardware decoding on Windows and crashes when aspect ratio changes
  * Fix hardware decoding for some AMD GPU drivers
  * Add support for new Fourcc for E-AC3, AV1, GeoVision
  * Fix crashes with VP9 streams
  * Fix styling issues with subs tx3g (mp4) tracks
  * Fix playback of live AV1 streams
  + Audio Output:
  * iOS/tvOS: add support for spatial audio
  * macOS: fix some channels ordering for &gt; 5.1 channels
  * Android: rework audio volume management
  + Video Output:
  * Fix a D3D11 crash when the stream changes aspect ratio
  + Demux:
  * Major overhaul of the adaptive streaming stack
  * Support for DAV video files
  * Add WebP image mapping
  * Fix missing audio start of Opus audio in MKV/WebM
  * Fix an infinite loop in MP4
  * Fix attachments extractions in ogg files
  * Support Uncompressed audio in mp4 (ISO/IEC 23003-5)
  * Fix some lip sync issue in rare MPEG-TS streams
  + Interface:
  * Qt/macOS: Fixup user provided URLs
  * Add safe area handling on macOS
  * Qt: improve preferences search
  * Qt: fix --no-mouse-events option
  + Misc:
  * Update YouTube script
  * Fix Icecast directory parsing which could lead to missing entries
  * Improve UPnP compatibility with some servers
- Drop vlc-srto_tsbpddelay.patch: fixed upstream.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1646913600">- Disable libnfs and soxr integration on suse_version &lt; 1500 (e.g
  SLE12).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1647691200">- Update to version 3.0.17.3:
  + This is a fixup release which fixes a regression that could
    cause a lack of audio for adaptive streaming playback. It is
    identical to 3.0.17.2 otherwise.
  + This updates contains various fixes and improvements:
  - Major adaptive streaming stack overhaul
  - Major codec updates
  - Many third party libraries update
  - Allow brackets in the path section of URLs
  - Better notch support for new macbooks
  - Add support for DAV video and Webp image formats
  - Improve AV1 live streaming support
  - Several SRT support improvements
  - Numerous crash fixes
  - Update youtube script
- Changes from version 3.0.17.2:
  + This is a fixup release which fixes youtube playback and
    contextual menus on integrated video for the Qt interface. It
    is identical to 3.0.17-1 otherwise.
- Changes from version 3.0.17-1:
  + This is a fixup release which bumps libflac to 1.3.4 in order
    to fix CVE-2020-0499 and CVE-2021-0561 on platforms for which
    we provide binary releases.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1650628800">- Update to version 3.0.17.4:
  + Service Discovery: Fix UPnP regression on Windows.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1653307200">- Add vlc-dav1d-1.0.patch: Fix build with dav1d 1.0. Upstream
  commits 2202c892 and d38ddd727.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1657108800">- Extend vlc-lua-5.3.patch: match upstream commit 0e0b070c26.
- Add 867.patch: support LUA 5.4 (boo#1200944).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1657713600">- Limit to Lua &lt; 5.4 (boo#1200944).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1659960000">- Also limit lua interpreter to &lt; 5.4 (boo#1200944).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1662552000">- Make vlc-vdpau supplement vlc, not vlc-noX: vdpau itself is based
  on top of the graphical stack.
- Move video_output/libegl_wl_plugin.so from vlc-noX to vlc: links
  GUI stack.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1667908800">- Limit to ffmpeg 4: we're also linking opencv3 which does not use
  ffmpeg 5.</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1668686400">- add vlc-caca-fix-to-0-99-beta20-version.patch: build with libcaca-0.99.beta20</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1669377600">- Update to version 3.0.18 (CVE-2022-41325, boo#1206142):
  + macOS: Fix audio device listing with non-latin names.
  + Misc: Fix rendering and performance issue with older GPUs.
  + Updated translations.
- Changes from version 3.0.18-rc2:
  + Codec/Demux:
  - Add support for Y16 chroma.
  - Fix build of gme plugin.
  + Lua:
  - Fix script for vocaroo.
  - Fix script for youtube to allow throttled playback.
  + Service Discovery: Fix UPnP regression on Windows.
  + Video Output: Fix video placement with caopengllayer.
  + Misc: Fix password search in kwallet module.
- Changes from version 3.0.18-rc:
  + Demux:
  - Major adaptive streaming update, notably for multiple
    timelies and webvtt.
  - Fix seeking with some fragmented MP4 files.
  - Add support for DVBSub inside MKV.
  - Fix some Flac files that could not be played.
  - Improve seeking in Ogg files.
  + Decoders:
  - Fix DxVA/D3D11 crashes on HEVC files with bogus references.
  - Fix libass storage size and crash.
  - Fix decoding errors on macOS hw decoding on some HEVC files.
  + Video Output:
  - Fix color regression with VAAPI/iOS and OpenGL output.
  - Fix some resizing issues with OpenGL on GLX/EGL/X11/XV.
  - Fix Direct3d9 texture stretching.
  - Fix 10-bit accelerated video filters on macOS.
  + Playlist: Avoid playlist liveloop on failed/tiny items
    (temporize EOS bursts).
  + Misc:
  - Misc fixes for the extension UI on macOS.
  - Improve SMBv1 and SMBv2 behaviours.
  - Improve FTP compatibility.
  - Support RISC-V.
  - Fix AVI muxing for Windows Media Player compatibility.
  - Fix seeking speed on macOS.
- Drop vlc-dav1d-1.0.patch and 867.patch: fixed upstream.
- Drop vlc-get-addr-by-ref-from-getConnectionEndpointAddress.patch:
  fixed upstream (commit 05445b74).
- Drop vlc-get-addr-by-ref-from-getConnectionEndpointAddress.patch:
  fixed upstream (commit b689202d).</changelog>
  <changelog author="Niklas Haas &lt;obs@haasn.xyz&gt;" date="1669377601">- Add vlc-libplacebo-5.patch: Backport fix for building with libplacebo v5</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1670846400">- Do not apply vlc.a52.patch if liba52 is &lt; 0.8.0
- Avoid ugly _FORTIFY_SOURCE redefinition warnings</changelog>
</package>
<package pkgid="56fca59f1be2aefb2a3322bab44c689d25cd10a3664f46b5d9ec754a1f231dea" name="vlc-qt" arch="ppc64le">
  <version epoch="0" ver="3.0.18" rel="bp154.2.3.1"/>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1616760000">- Add vlc-gcc11.patch: Fix build using gcc11 (boo#1181918).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1616760001">- Guard post scriptlets to only run %{_libdir}/vlc/vlc-cache-gen if
  it already (or still, in case of uninstall) exists.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1620129600">- Update to version 3.0.13:
  + Demux:
  - Adaptive: fix artefacts in HLS streams with wrong profiles/levels
  - Fix regression on some MP4 files for the audio track
  - Fix MPGA and ADTS probing in TS files
  - Fix Flac inside AVI files
  - Fix VP9/Webm artefacts when seeking
  + Codec:
  - Support SSA text scaling
  - Fix rotation on Android rotation
  - Fix WebVTT subtitles that start at 00:00
  + Access:
  - Update libnfs to support NFSv4
  - Improve SMB2 integration
  - Fix Blu-ray files using Unicode names on Windows
  - Disable mcast lookups on Android for RTSP playback
  + Video Output: Rework the D3D11 rendering wait, to fix
    choppiness on display
  + Interfaces:
  - Fix VLC getting stuck on close on X11 (#21875)
  - Improve RTL on preferences on macOS
  - Add mousewheel horizontal axis control
  - Fix crash on exit on macOS
  - Fix sizing of the fullscreen controls on macOS
  + Misc:
  - Improve MIDI fonts search on Linux
  - Update Soundcloud, Youtube, liveleak
  - Fix compilation with GCC11
  - Fix input-slave option for subtitles
  + Updated translations.
- Drop vlc-gcc11.patch: fixed upstream.
- Extend vlc-srto_tsbpddelay.patch: allow srt &gt;= 1.3 for openSUSE.</changelog>
  <changelog author="Fusion Future &lt;qydwhotmail@gmail.com&gt;" date="1624104000">- Update to version 3.0.16:
  + Video Output: Fix a D3D11 crash on Windows 8/8.1.
  + Access: Fix RTSP server timeout handling.
  + Interfaces: macOS: Add touchbar support.
  + Misc: Multiple settings improvements.
- Changes from version 3.0.15:
  + Core: Add Opus &amp; Alac wave format mappings.
  + Access: Fix opening DVD folders with non-ascii characters.
  + Demux:
  - Fix asf regression with broadcast streams.
  - MP4: Fix audio drop on seek.
  + Video Output:
  - Fix seek &amp; volume sliders overlapping with subtitles.
  - Fix delays when seeking with D3D11.
  + Text renderer: Improve freetype fonts outlining.
  + Misc: Fix GnuTLS support for Windows XP.
- Changes from version 3.0.14:
  + Core:
  - Fix double loading of slave input.
  - Fix an issue causing the auto-updater not to launch the new
    version installer.
- Add vlc-get-addr-by-ref-from-getConnectionEndpointAddress.patch:
  The maintainers of live555 changed connectionEndpointAddresss to
  getConnectionEndpointAddress, which now provides the address
  value by reference.
- Rebase vlc-srto_tsbpddelay.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1645531200">- Guard --enable-libplacebo configure parameter with is_opensuse:
  the buildrequires is also guarded the same way.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1645617600">- BuildRequires pkgconfig(smbclient) instead of smbclient-devel:
  smbclient-devel was merged into samba-devel, and we do not want
  to care for actual package names.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1646654400">- Update to version 3.0.17:
  + Core:
  * Fix a regression in parsing secondary source MRLs
  * Allow brackets in path part of URLs
  + Access:
  * Fix support for screen capture on macOS with avcapture
  * Fix closing of HTTP 1.x connections
  * Improve HTTP2 memory usage
  * Improve AVCapture module
  * Improve AudioCD support (audio/data mixed mode, musicbrainz)
  * Improve SMB compatibility by changing the read size
  * Several improvements on the SRT modules (including streamID)
  + Decoders/Packetizers:
  * Add support for DTS LBR
  * Fix some HEVC hardware decoding on Windows and crashes when aspect ratio changes
  * Fix hardware decoding for some AMD GPU drivers
  * Add support for new Fourcc for E-AC3, AV1, GeoVision
  * Fix crashes with VP9 streams
  * Fix styling issues with subs tx3g (mp4) tracks
  * Fix playback of live AV1 streams
  + Audio Output:
  * iOS/tvOS: add support for spatial audio
  * macOS: fix some channels ordering for &gt; 5.1 channels
  * Android: rework audio volume management
  + Video Output:
  * Fix a D3D11 crash when the stream changes aspect ratio
  + Demux:
  * Major overhaul of the adaptive streaming stack
  * Support for DAV video files
  * Add WebP image mapping
  * Fix missing audio start of Opus audio in MKV/WebM
  * Fix an infinite loop in MP4
  * Fix attachments extractions in ogg files
  * Support Uncompressed audio in mp4 (ISO/IEC 23003-5)
  * Fix some lip sync issue in rare MPEG-TS streams
  + Interface:
  * Qt/macOS: Fixup user provided URLs
  * Add safe area handling on macOS
  * Qt: improve preferences search
  * Qt: fix --no-mouse-events option
  + Misc:
  * Update YouTube script
  * Fix Icecast directory parsing which could lead to missing entries
  * Improve UPnP compatibility with some servers
- Drop vlc-srto_tsbpddelay.patch: fixed upstream.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1646913600">- Disable libnfs and soxr integration on suse_version &lt; 1500 (e.g
  SLE12).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1647691200">- Update to version 3.0.17.3:
  + This is a fixup release which fixes a regression that could
    cause a lack of audio for adaptive streaming playback. It is
    identical to 3.0.17.2 otherwise.
  + This updates contains various fixes and improvements:
  - Major adaptive streaming stack overhaul
  - Major codec updates
  - Many third party libraries update
  - Allow brackets in the path section of URLs
  - Better notch support for new macbooks
  - Add support for DAV video and Webp image formats
  - Improve AV1 live streaming support
  - Several SRT support improvements
  - Numerous crash fixes
  - Update youtube script
- Changes from version 3.0.17.2:
  + This is a fixup release which fixes youtube playback and
    contextual menus on integrated video for the Qt interface. It
    is identical to 3.0.17-1 otherwise.
- Changes from version 3.0.17-1:
  + This is a fixup release which bumps libflac to 1.3.4 in order
    to fix CVE-2020-0499 and CVE-2021-0561 on platforms for which
    we provide binary releases.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1650628800">- Update to version 3.0.17.4:
  + Service Discovery: Fix UPnP regression on Windows.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1653307200">- Add vlc-dav1d-1.0.patch: Fix build with dav1d 1.0. Upstream
  commits 2202c892 and d38ddd727.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1657108800">- Extend vlc-lua-5.3.patch: match upstream commit 0e0b070c26.
- Add 867.patch: support LUA 5.4 (boo#1200944).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1657713600">- Limit to Lua &lt; 5.4 (boo#1200944).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1659960000">- Also limit lua interpreter to &lt; 5.4 (boo#1200944).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1662552000">- Make vlc-vdpau supplement vlc, not vlc-noX: vdpau itself is based
  on top of the graphical stack.
- Move video_output/libegl_wl_plugin.so from vlc-noX to vlc: links
  GUI stack.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1667908800">- Limit to ffmpeg 4: we're also linking opencv3 which does not use
  ffmpeg 5.</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1668686400">- add vlc-caca-fix-to-0-99-beta20-version.patch: build with libcaca-0.99.beta20</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1669377600">- Update to version 3.0.18 (CVE-2022-41325, boo#1206142):
  + macOS: Fix audio device listing with non-latin names.
  + Misc: Fix rendering and performance issue with older GPUs.
  + Updated translations.
- Changes from version 3.0.18-rc2:
  + Codec/Demux:
  - Add support for Y16 chroma.
  - Fix build of gme plugin.
  + Lua:
  - Fix script for vocaroo.
  - Fix script for youtube to allow throttled playback.
  + Service Discovery: Fix UPnP regression on Windows.
  + Video Output: Fix video placement with caopengllayer.
  + Misc: Fix password search in kwallet module.
- Changes from version 3.0.18-rc:
  + Demux:
  - Major adaptive streaming update, notably for multiple
    timelies and webvtt.
  - Fix seeking with some fragmented MP4 files.
  - Add support for DVBSub inside MKV.
  - Fix some Flac files that could not be played.
  - Improve seeking in Ogg files.
  + Decoders:
  - Fix DxVA/D3D11 crashes on HEVC files with bogus references.
  - Fix libass storage size and crash.
  - Fix decoding errors on macOS hw decoding on some HEVC files.
  + Video Output:
  - Fix color regression with VAAPI/iOS and OpenGL output.
  - Fix some resizing issues with OpenGL on GLX/EGL/X11/XV.
  - Fix Direct3d9 texture stretching.
  - Fix 10-bit accelerated video filters on macOS.
  + Playlist: Avoid playlist liveloop on failed/tiny items
    (temporize EOS bursts).
  + Misc:
  - Misc fixes for the extension UI on macOS.
  - Improve SMBv1 and SMBv2 behaviours.
  - Improve FTP compatibility.
  - Support RISC-V.
  - Fix AVI muxing for Windows Media Player compatibility.
  - Fix seeking speed on macOS.
- Drop vlc-dav1d-1.0.patch and 867.patch: fixed upstream.
- Drop vlc-get-addr-by-ref-from-getConnectionEndpointAddress.patch:
  fixed upstream (commit 05445b74).
- Drop vlc-get-addr-by-ref-from-getConnectionEndpointAddress.patch:
  fixed upstream (commit b689202d).</changelog>
  <changelog author="Niklas Haas &lt;obs@haasn.xyz&gt;" date="1669377601">- Add vlc-libplacebo-5.patch: Backport fix for building with libplacebo v5</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1670846400">- Do not apply vlc.a52.patch if liba52 is &lt; 0.8.0
- Avoid ugly _FORTIFY_SOURCE redefinition warnings</changelog>
</package>
<package pkgid="5aed4784066564e9f4f4d4d23571ebd92ea20771213017dbd52b255fce82eb97" name="vlc-qt" arch="x86_64">
  <version epoch="0" ver="3.0.18" rel="bp154.2.3.1"/>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1616760000">- Add vlc-gcc11.patch: Fix build using gcc11 (boo#1181918).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1616760001">- Guard post scriptlets to only run %{_libdir}/vlc/vlc-cache-gen if
  it already (or still, in case of uninstall) exists.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1620129600">- Update to version 3.0.13:
  + Demux:
  - Adaptive: fix artefacts in HLS streams with wrong profiles/levels
  - Fix regression on some MP4 files for the audio track
  - Fix MPGA and ADTS probing in TS files
  - Fix Flac inside AVI files
  - Fix VP9/Webm artefacts when seeking
  + Codec:
  - Support SSA text scaling
  - Fix rotation on Android rotation
  - Fix WebVTT subtitles that start at 00:00
  + Access:
  - Update libnfs to support NFSv4
  - Improve SMB2 integration
  - Fix Blu-ray files using Unicode names on Windows
  - Disable mcast lookups on Android for RTSP playback
  + Video Output: Rework the D3D11 rendering wait, to fix
    choppiness on display
  + Interfaces:
  - Fix VLC getting stuck on close on X11 (#21875)
  - Improve RTL on preferences on macOS
  - Add mousewheel horizontal axis control
  - Fix crash on exit on macOS
  - Fix sizing of the fullscreen controls on macOS
  + Misc:
  - Improve MIDI fonts search on Linux
  - Update Soundcloud, Youtube, liveleak
  - Fix compilation with GCC11
  - Fix input-slave option for subtitles
  + Updated translations.
- Drop vlc-gcc11.patch: fixed upstream.
- Extend vlc-srto_tsbpddelay.patch: allow srt &gt;= 1.3 for openSUSE.</changelog>
  <changelog author="Fusion Future &lt;qydwhotmail@gmail.com&gt;" date="1624104000">- Update to version 3.0.16:
  + Video Output: Fix a D3D11 crash on Windows 8/8.1.
  + Access: Fix RTSP server timeout handling.
  + Interfaces: macOS: Add touchbar support.
  + Misc: Multiple settings improvements.
- Changes from version 3.0.15:
  + Core: Add Opus &amp; Alac wave format mappings.
  + Access: Fix opening DVD folders with non-ascii characters.
  + Demux:
  - Fix asf regression with broadcast streams.
  - MP4: Fix audio drop on seek.
  + Video Output:
  - Fix seek &amp; volume sliders overlapping with subtitles.
  - Fix delays when seeking with D3D11.
  + Text renderer: Improve freetype fonts outlining.
  + Misc: Fix GnuTLS support for Windows XP.
- Changes from version 3.0.14:
  + Core:
  - Fix double loading of slave input.
  - Fix an issue causing the auto-updater not to launch the new
    version installer.
- Add vlc-get-addr-by-ref-from-getConnectionEndpointAddress.patch:
  The maintainers of live555 changed connectionEndpointAddresss to
  getConnectionEndpointAddress, which now provides the address
  value by reference.
- Rebase vlc-srto_tsbpddelay.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1645531200">- Guard --enable-libplacebo configure parameter with is_opensuse:
  the buildrequires is also guarded the same way.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1645617600">- BuildRequires pkgconfig(smbclient) instead of smbclient-devel:
  smbclient-devel was merged into samba-devel, and we do not want
  to care for actual package names.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1646654400">- Update to version 3.0.17:
  + Core:
  * Fix a regression in parsing secondary source MRLs
  * Allow brackets in path part of URLs
  + Access:
  * Fix support for screen capture on macOS with avcapture
  * Fix closing of HTTP 1.x connections
  * Improve HTTP2 memory usage
  * Improve AVCapture module
  * Improve AudioCD support (audio/data mixed mode, musicbrainz)
  * Improve SMB compatibility by changing the read size
  * Several improvements on the SRT modules (including streamID)
  + Decoders/Packetizers:
  * Add support for DTS LBR
  * Fix some HEVC hardware decoding on Windows and crashes when aspect ratio changes
  * Fix hardware decoding for some AMD GPU drivers
  * Add support for new Fourcc for E-AC3, AV1, GeoVision
  * Fix crashes with VP9 streams
  * Fix styling issues with subs tx3g (mp4) tracks
  * Fix playback of live AV1 streams
  + Audio Output:
  * iOS/tvOS: add support for spatial audio
  * macOS: fix some channels ordering for &gt; 5.1 channels
  * Android: rework audio volume management
  + Video Output:
  * Fix a D3D11 crash when the stream changes aspect ratio
  + Demux:
  * Major overhaul of the adaptive streaming stack
  * Support for DAV video files
  * Add WebP image mapping
  * Fix missing audio start of Opus audio in MKV/WebM
  * Fix an infinite loop in MP4
  * Fix attachments extractions in ogg files
  * Support Uncompressed audio in mp4 (ISO/IEC 23003-5)
  * Fix some lip sync issue in rare MPEG-TS streams
  + Interface:
  * Qt/macOS: Fixup user provided URLs
  * Add safe area handling on macOS
  * Qt: improve preferences search
  * Qt: fix --no-mouse-events option
  + Misc:
  * Update YouTube script
  * Fix Icecast directory parsing which could lead to missing entries
  * Improve UPnP compatibility with some servers
- Drop vlc-srto_tsbpddelay.patch: fixed upstream.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1646913600">- Disable libnfs and soxr integration on suse_version &lt; 1500 (e.g
  SLE12).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1647691200">- Update to version 3.0.17.3:
  + This is a fixup release which fixes a regression that could
    cause a lack of audio for adaptive streaming playback. It is
    identical to 3.0.17.2 otherwise.
  + This updates contains various fixes and improvements:
  - Major adaptive streaming stack overhaul
  - Major codec updates
  - Many third party libraries update
  - Allow brackets in the path section of URLs
  - Better notch support for new macbooks
  - Add support for DAV video and Webp image formats
  - Improve AV1 live streaming support
  - Several SRT support improvements
  - Numerous crash fixes
  - Update youtube script
- Changes from version 3.0.17.2:
  + This is a fixup release which fixes youtube playback and
    contextual menus on integrated video for the Qt interface. It
    is identical to 3.0.17-1 otherwise.
- Changes from version 3.0.17-1:
  + This is a fixup release which bumps libflac to 1.3.4 in order
    to fix CVE-2020-0499 and CVE-2021-0561 on platforms for which
    we provide binary releases.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1650628800">- Update to version 3.0.17.4:
  + Service Discovery: Fix UPnP regression on Windows.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1653307200">- Add vlc-dav1d-1.0.patch: Fix build with dav1d 1.0. Upstream
  commits 2202c892 and d38ddd727.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1657108800">- Extend vlc-lua-5.3.patch: match upstream commit 0e0b070c26.
- Add 867.patch: support LUA 5.4 (boo#1200944).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1657713600">- Limit to Lua &lt; 5.4 (boo#1200944).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1659960000">- Also limit lua interpreter to &lt; 5.4 (boo#1200944).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1662552000">- Make vlc-vdpau supplement vlc, not vlc-noX: vdpau itself is based
  on top of the graphical stack.
- Move video_output/libegl_wl_plugin.so from vlc-noX to vlc: links
  GUI stack.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1667908800">- Limit to ffmpeg 4: we're also linking opencv3 which does not use
  ffmpeg 5.</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1668686400">- add vlc-caca-fix-to-0-99-beta20-version.patch: build with libcaca-0.99.beta20</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1669377600">- Update to version 3.0.18 (CVE-2022-41325, boo#1206142):
  + macOS: Fix audio device listing with non-latin names.
  + Misc: Fix rendering and performance issue with older GPUs.
  + Updated translations.
- Changes from version 3.0.18-rc2:
  + Codec/Demux:
  - Add support for Y16 chroma.
  - Fix build of gme plugin.
  + Lua:
  - Fix script for vocaroo.
  - Fix script for youtube to allow throttled playback.
  + Service Discovery: Fix UPnP regression on Windows.
  + Video Output: Fix video placement with caopengllayer.
  + Misc: Fix password search in kwallet module.
- Changes from version 3.0.18-rc:
  + Demux:
  - Major adaptive streaming update, notably for multiple
    timelies and webvtt.
  - Fix seeking with some fragmented MP4 files.
  - Add support for DVBSub inside MKV.
  - Fix some Flac files that could not be played.
  - Improve seeking in Ogg files.
  + Decoders:
  - Fix DxVA/D3D11 crashes on HEVC files with bogus references.
  - Fix libass storage size and crash.
  - Fix decoding errors on macOS hw decoding on some HEVC files.
  + Video Output:
  - Fix color regression with VAAPI/iOS and OpenGL output.
  - Fix some resizing issues with OpenGL on GLX/EGL/X11/XV.
  - Fix Direct3d9 texture stretching.
  - Fix 10-bit accelerated video filters on macOS.
  + Playlist: Avoid playlist liveloop on failed/tiny items
    (temporize EOS bursts).
  + Misc:
  - Misc fixes for the extension UI on macOS.
  - Improve SMBv1 and SMBv2 behaviours.
  - Improve FTP compatibility.
  - Support RISC-V.
  - Fix AVI muxing for Windows Media Player compatibility.
  - Fix seeking speed on macOS.
- Drop vlc-dav1d-1.0.patch and 867.patch: fixed upstream.
- Drop vlc-get-addr-by-ref-from-getConnectionEndpointAddress.patch:
  fixed upstream (commit 05445b74).
- Drop vlc-get-addr-by-ref-from-getConnectionEndpointAddress.patch:
  fixed upstream (commit b689202d).</changelog>
  <changelog author="Niklas Haas &lt;obs@haasn.xyz&gt;" date="1669377601">- Add vlc-libplacebo-5.patch: Backport fix for building with libplacebo v5</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1670846400">- Do not apply vlc.a52.patch if liba52 is &lt; 0.8.0
- Avoid ugly _FORTIFY_SOURCE redefinition warnings</changelog>
</package>
<package pkgid="7b74a92a9d6e535290d63100b08eacb4bae839d24ef476d5f7c75e896531d13e" name="vlc-vdpau" arch="aarch64">
  <version epoch="0" ver="3.0.18" rel="bp154.2.3.1"/>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1616760000">- Add vlc-gcc11.patch: Fix build using gcc11 (boo#1181918).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1616760001">- Guard post scriptlets to only run %{_libdir}/vlc/vlc-cache-gen if
  it already (or still, in case of uninstall) exists.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1620129600">- Update to version 3.0.13:
  + Demux:
  - Adaptive: fix artefacts in HLS streams with wrong profiles/levels
  - Fix regression on some MP4 files for the audio track
  - Fix MPGA and ADTS probing in TS files
  - Fix Flac inside AVI files
  - Fix VP9/Webm artefacts when seeking
  + Codec:
  - Support SSA text scaling
  - Fix rotation on Android rotation
  - Fix WebVTT subtitles that start at 00:00
  + Access:
  - Update libnfs to support NFSv4
  - Improve SMB2 integration
  - Fix Blu-ray files using Unicode names on Windows
  - Disable mcast lookups on Android for RTSP playback
  + Video Output: Rework the D3D11 rendering wait, to fix
    choppiness on display
  + Interfaces:
  - Fix VLC getting stuck on close on X11 (#21875)
  - Improve RTL on preferences on macOS
  - Add mousewheel horizontal axis control
  - Fix crash on exit on macOS
  - Fix sizing of the fullscreen controls on macOS
  + Misc:
  - Improve MIDI fonts search on Linux
  - Update Soundcloud, Youtube, liveleak
  - Fix compilation with GCC11
  - Fix input-slave option for subtitles
  + Updated translations.
- Drop vlc-gcc11.patch: fixed upstream.
- Extend vlc-srto_tsbpddelay.patch: allow srt &gt;= 1.3 for openSUSE.</changelog>
  <changelog author="Fusion Future &lt;qydwhotmail@gmail.com&gt;" date="1624104000">- Update to version 3.0.16:
  + Video Output: Fix a D3D11 crash on Windows 8/8.1.
  + Access: Fix RTSP server timeout handling.
  + Interfaces: macOS: Add touchbar support.
  + Misc: Multiple settings improvements.
- Changes from version 3.0.15:
  + Core: Add Opus &amp; Alac wave format mappings.
  + Access: Fix opening DVD folders with non-ascii characters.
  + Demux:
  - Fix asf regression with broadcast streams.
  - MP4: Fix audio drop on seek.
  + Video Output:
  - Fix seek &amp; volume sliders overlapping with subtitles.
  - Fix delays when seeking with D3D11.
  + Text renderer: Improve freetype fonts outlining.
  + Misc: Fix GnuTLS support for Windows XP.
- Changes from version 3.0.14:
  + Core:
  - Fix double loading of slave input.
  - Fix an issue causing the auto-updater not to launch the new
    version installer.
- Add vlc-get-addr-by-ref-from-getConnectionEndpointAddress.patch:
  The maintainers of live555 changed connectionEndpointAddresss to
  getConnectionEndpointAddress, which now provides the address
  value by reference.
- Rebase vlc-srto_tsbpddelay.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1645531200">- Guard --enable-libplacebo configure parameter with is_opensuse:
  the buildrequires is also guarded the same way.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1645617600">- BuildRequires pkgconfig(smbclient) instead of smbclient-devel:
  smbclient-devel was merged into samba-devel, and we do not want
  to care for actual package names.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1646654400">- Update to version 3.0.17:
  + Core:
  * Fix a regression in parsing secondary source MRLs
  * Allow brackets in path part of URLs
  + Access:
  * Fix support for screen capture on macOS with avcapture
  * Fix closing of HTTP 1.x connections
  * Improve HTTP2 memory usage
  * Improve AVCapture module
  * Improve AudioCD support (audio/data mixed mode, musicbrainz)
  * Improve SMB compatibility by changing the read size
  * Several improvements on the SRT modules (including streamID)
  + Decoders/Packetizers:
  * Add support for DTS LBR
  * Fix some HEVC hardware decoding on Windows and crashes when aspect ratio changes
  * Fix hardware decoding for some AMD GPU drivers
  * Add support for new Fourcc for E-AC3, AV1, GeoVision
  * Fix crashes with VP9 streams
  * Fix styling issues with subs tx3g (mp4) tracks
  * Fix playback of live AV1 streams
  + Audio Output:
  * iOS/tvOS: add support for spatial audio
  * macOS: fix some channels ordering for &gt; 5.1 channels
  * Android: rework audio volume management
  + Video Output:
  * Fix a D3D11 crash when the stream changes aspect ratio
  + Demux:
  * Major overhaul of the adaptive streaming stack
  * Support for DAV video files
  * Add WebP image mapping
  * Fix missing audio start of Opus audio in MKV/WebM
  * Fix an infinite loop in MP4
  * Fix attachments extractions in ogg files
  * Support Uncompressed audio in mp4 (ISO/IEC 23003-5)
  * Fix some lip sync issue in rare MPEG-TS streams
  + Interface:
  * Qt/macOS: Fixup user provided URLs
  * Add safe area handling on macOS
  * Qt: improve preferences search
  * Qt: fix --no-mouse-events option
  + Misc:
  * Update YouTube script
  * Fix Icecast directory parsing which could lead to missing entries
  * Improve UPnP compatibility with some servers
- Drop vlc-srto_tsbpddelay.patch: fixed upstream.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1646913600">- Disable libnfs and soxr integration on suse_version &lt; 1500 (e.g
  SLE12).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1647691200">- Update to version 3.0.17.3:
  + This is a fixup release which fixes a regression that could
    cause a lack of audio for adaptive streaming playback. It is
    identical to 3.0.17.2 otherwise.
  + This updates contains various fixes and improvements:
  - Major adaptive streaming stack overhaul
  - Major codec updates
  - Many third party libraries update
  - Allow brackets in the path section of URLs
  - Better notch support for new macbooks
  - Add support for DAV video and Webp image formats
  - Improve AV1 live streaming support
  - Several SRT support improvements
  - Numerous crash fixes
  - Update youtube script
- Changes from version 3.0.17.2:
  + This is a fixup release which fixes youtube playback and
    contextual menus on integrated video for the Qt interface. It
    is identical to 3.0.17-1 otherwise.
- Changes from version 3.0.17-1:
  + This is a fixup release which bumps libflac to 1.3.4 in order
    to fix CVE-2020-0499 and CVE-2021-0561 on platforms for which
    we provide binary releases.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1650628800">- Update to version 3.0.17.4:
  + Service Discovery: Fix UPnP regression on Windows.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1653307200">- Add vlc-dav1d-1.0.patch: Fix build with dav1d 1.0. Upstream
  commits 2202c892 and d38ddd727.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1657108800">- Extend vlc-lua-5.3.patch: match upstream commit 0e0b070c26.
- Add 867.patch: support LUA 5.4 (boo#1200944).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1657713600">- Limit to Lua &lt; 5.4 (boo#1200944).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1659960000">- Also limit lua interpreter to &lt; 5.4 (boo#1200944).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1662552000">- Make vlc-vdpau supplement vlc, not vlc-noX: vdpau itself is based
  on top of the graphical stack.
- Move video_output/libegl_wl_plugin.so from vlc-noX to vlc: links
  GUI stack.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1667908800">- Limit to ffmpeg 4: we're also linking opencv3 which does not use
  ffmpeg 5.</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1668686400">- add vlc-caca-fix-to-0-99-beta20-version.patch: build with libcaca-0.99.beta20</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1669377600">- Update to version 3.0.18 (CVE-2022-41325, boo#1206142):
  + macOS: Fix audio device listing with non-latin names.
  + Misc: Fix rendering and performance issue with older GPUs.
  + Updated translations.
- Changes from version 3.0.18-rc2:
  + Codec/Demux:
  - Add support for Y16 chroma.
  - Fix build of gme plugin.
  + Lua:
  - Fix script for vocaroo.
  - Fix script for youtube to allow throttled playback.
  + Service Discovery: Fix UPnP regression on Windows.
  + Video Output: Fix video placement with caopengllayer.
  + Misc: Fix password search in kwallet module.
- Changes from version 3.0.18-rc:
  + Demux:
  - Major adaptive streaming update, notably for multiple
    timelies and webvtt.
  - Fix seeking with some fragmented MP4 files.
  - Add support for DVBSub inside MKV.
  - Fix some Flac files that could not be played.
  - Improve seeking in Ogg files.
  + Decoders:
  - Fix DxVA/D3D11 crashes on HEVC files with bogus references.
  - Fix libass storage size and crash.
  - Fix decoding errors on macOS hw decoding on some HEVC files.
  + Video Output:
  - Fix color regression with VAAPI/iOS and OpenGL output.
  - Fix some resizing issues with OpenGL on GLX/EGL/X11/XV.
  - Fix Direct3d9 texture stretching.
  - Fix 10-bit accelerated video filters on macOS.
  + Playlist: Avoid playlist liveloop on failed/tiny items
    (temporize EOS bursts).
  + Misc:
  - Misc fixes for the extension UI on macOS.
  - Improve SMBv1 and SMBv2 behaviours.
  - Improve FTP compatibility.
  - Support RISC-V.
  - Fix AVI muxing for Windows Media Player compatibility.
  - Fix seeking speed on macOS.
- Drop vlc-dav1d-1.0.patch and 867.patch: fixed upstream.
- Drop vlc-get-addr-by-ref-from-getConnectionEndpointAddress.patch:
  fixed upstream (commit 05445b74).
- Drop vlc-get-addr-by-ref-from-getConnectionEndpointAddress.patch:
  fixed upstream (commit b689202d).</changelog>
  <changelog author="Niklas Haas &lt;obs@haasn.xyz&gt;" date="1669377601">- Add vlc-libplacebo-5.patch: Backport fix for building with libplacebo v5</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1670846400">- Do not apply vlc.a52.patch if liba52 is &lt; 0.8.0
- Avoid ugly _FORTIFY_SOURCE redefinition warnings</changelog>
</package>
<package pkgid="423ec519c1aad594489114931fc71be8db2c4c5e26f2d4e44e23331fcbf5b5d6" name="vlc-vdpau" arch="ppc64le">
  <version epoch="0" ver="3.0.18" rel="bp154.2.3.1"/>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1616760000">- Add vlc-gcc11.patch: Fix build using gcc11 (boo#1181918).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1616760001">- Guard post scriptlets to only run %{_libdir}/vlc/vlc-cache-gen if
  it already (or still, in case of uninstall) exists.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1620129600">- Update to version 3.0.13:
  + Demux:
  - Adaptive: fix artefacts in HLS streams with wrong profiles/levels
  - Fix regression on some MP4 files for the audio track
  - Fix MPGA and ADTS probing in TS files
  - Fix Flac inside AVI files
  - Fix VP9/Webm artefacts when seeking
  + Codec:
  - Support SSA text scaling
  - Fix rotation on Android rotation
  - Fix WebVTT subtitles that start at 00:00
  + Access:
  - Update libnfs to support NFSv4
  - Improve SMB2 integration
  - Fix Blu-ray files using Unicode names on Windows
  - Disable mcast lookups on Android for RTSP playback
  + Video Output: Rework the D3D11 rendering wait, to fix
    choppiness on display
  + Interfaces:
  - Fix VLC getting stuck on close on X11 (#21875)
  - Improve RTL on preferences on macOS
  - Add mousewheel horizontal axis control
  - Fix crash on exit on macOS
  - Fix sizing of the fullscreen controls on macOS
  + Misc:
  - Improve MIDI fonts search on Linux
  - Update Soundcloud, Youtube, liveleak
  - Fix compilation with GCC11
  - Fix input-slave option for subtitles
  + Updated translations.
- Drop vlc-gcc11.patch: fixed upstream.
- Extend vlc-srto_tsbpddelay.patch: allow srt &gt;= 1.3 for openSUSE.</changelog>
  <changelog author="Fusion Future &lt;qydwhotmail@gmail.com&gt;" date="1624104000">- Update to version 3.0.16:
  + Video Output: Fix a D3D11 crash on Windows 8/8.1.
  + Access: Fix RTSP server timeout handling.
  + Interfaces: macOS: Add touchbar support.
  + Misc: Multiple settings improvements.
- Changes from version 3.0.15:
  + Core: Add Opus &amp; Alac wave format mappings.
  + Access: Fix opening DVD folders with non-ascii characters.
  + Demux:
  - Fix asf regression with broadcast streams.
  - MP4: Fix audio drop on seek.
  + Video Output:
  - Fix seek &amp; volume sliders overlapping with subtitles.
  - Fix delays when seeking with D3D11.
  + Text renderer: Improve freetype fonts outlining.
  + Misc: Fix GnuTLS support for Windows XP.
- Changes from version 3.0.14:
  + Core:
  - Fix double loading of slave input.
  - Fix an issue causing the auto-updater not to launch the new
    version installer.
- Add vlc-get-addr-by-ref-from-getConnectionEndpointAddress.patch:
  The maintainers of live555 changed connectionEndpointAddresss to
  getConnectionEndpointAddress, which now provides the address
  value by reference.
- Rebase vlc-srto_tsbpddelay.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1645531200">- Guard --enable-libplacebo configure parameter with is_opensuse:
  the buildrequires is also guarded the same way.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1645617600">- BuildRequires pkgconfig(smbclient) instead of smbclient-devel:
  smbclient-devel was merged into samba-devel, and we do not want
  to care for actual package names.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1646654400">- Update to version 3.0.17:
  + Core:
  * Fix a regression in parsing secondary source MRLs
  * Allow brackets in path part of URLs
  + Access:
  * Fix support for screen capture on macOS with avcapture
  * Fix closing of HTTP 1.x connections
  * Improve HTTP2 memory usage
  * Improve AVCapture module
  * Improve AudioCD support (audio/data mixed mode, musicbrainz)
  * Improve SMB compatibility by changing the read size
  * Several improvements on the SRT modules (including streamID)
  + Decoders/Packetizers:
  * Add support for DTS LBR
  * Fix some HEVC hardware decoding on Windows and crashes when aspect ratio changes
  * Fix hardware decoding for some AMD GPU drivers
  * Add support for new Fourcc for E-AC3, AV1, GeoVision
  * Fix crashes with VP9 streams
  * Fix styling issues with subs tx3g (mp4) tracks
  * Fix playback of live AV1 streams
  + Audio Output:
  * iOS/tvOS: add support for spatial audio
  * macOS: fix some channels ordering for &gt; 5.1 channels
  * Android: rework audio volume management
  + Video Output:
  * Fix a D3D11 crash when the stream changes aspect ratio
  + Demux:
  * Major overhaul of the adaptive streaming stack
  * Support for DAV video files
  * Add WebP image mapping
  * Fix missing audio start of Opus audio in MKV/WebM
  * Fix an infinite loop in MP4
  * Fix attachments extractions in ogg files
  * Support Uncompressed audio in mp4 (ISO/IEC 23003-5)
  * Fix some lip sync issue in rare MPEG-TS streams
  + Interface:
  * Qt/macOS: Fixup user provided URLs
  * Add safe area handling on macOS
  * Qt: improve preferences search
  * Qt: fix --no-mouse-events option
  + Misc:
  * Update YouTube script
  * Fix Icecast directory parsing which could lead to missing entries
  * Improve UPnP compatibility with some servers
- Drop vlc-srto_tsbpddelay.patch: fixed upstream.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1646913600">- Disable libnfs and soxr integration on suse_version &lt; 1500 (e.g
  SLE12).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1647691200">- Update to version 3.0.17.3:
  + This is a fixup release which fixes a regression that could
    cause a lack of audio for adaptive streaming playback. It is
    identical to 3.0.17.2 otherwise.
  + This updates contains various fixes and improvements:
  - Major adaptive streaming stack overhaul
  - Major codec updates
  - Many third party libraries update
  - Allow brackets in the path section of URLs
  - Better notch support for new macbooks
  - Add support for DAV video and Webp image formats
  - Improve AV1 live streaming support
  - Several SRT support improvements
  - Numerous crash fixes
  - Update youtube script
- Changes from version 3.0.17.2:
  + This is a fixup release which fixes youtube playback and
    contextual menus on integrated video for the Qt interface. It
    is identical to 3.0.17-1 otherwise.
- Changes from version 3.0.17-1:
  + This is a fixup release which bumps libflac to 1.3.4 in order
    to fix CVE-2020-0499 and CVE-2021-0561 on platforms for which
    we provide binary releases.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1650628800">- Update to version 3.0.17.4:
  + Service Discovery: Fix UPnP regression on Windows.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1653307200">- Add vlc-dav1d-1.0.patch: Fix build with dav1d 1.0. Upstream
  commits 2202c892 and d38ddd727.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1657108800">- Extend vlc-lua-5.3.patch: match upstream commit 0e0b070c26.
- Add 867.patch: support LUA 5.4 (boo#1200944).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1657713600">- Limit to Lua &lt; 5.4 (boo#1200944).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1659960000">- Also limit lua interpreter to &lt; 5.4 (boo#1200944).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1662552000">- Make vlc-vdpau supplement vlc, not vlc-noX: vdpau itself is based
  on top of the graphical stack.
- Move video_output/libegl_wl_plugin.so from vlc-noX to vlc: links
  GUI stack.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1667908800">- Limit to ffmpeg 4: we're also linking opencv3 which does not use
  ffmpeg 5.</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1668686400">- add vlc-caca-fix-to-0-99-beta20-version.patch: build with libcaca-0.99.beta20</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1669377600">- Update to version 3.0.18 (CVE-2022-41325, boo#1206142):
  + macOS: Fix audio device listing with non-latin names.
  + Misc: Fix rendering and performance issue with older GPUs.
  + Updated translations.
- Changes from version 3.0.18-rc2:
  + Codec/Demux:
  - Add support for Y16 chroma.
  - Fix build of gme plugin.
  + Lua:
  - Fix script for vocaroo.
  - Fix script for youtube to allow throttled playback.
  + Service Discovery: Fix UPnP regression on Windows.
  + Video Output: Fix video placement with caopengllayer.
  + Misc: Fix password search in kwallet module.
- Changes from version 3.0.18-rc:
  + Demux:
  - Major adaptive streaming update, notably for multiple
    timelies and webvtt.
  - Fix seeking with some fragmented MP4 files.
  - Add support for DVBSub inside MKV.
  - Fix some Flac files that could not be played.
  - Improve seeking in Ogg files.
  + Decoders:
  - Fix DxVA/D3D11 crashes on HEVC files with bogus references.
  - Fix libass storage size and crash.
  - Fix decoding errors on macOS hw decoding on some HEVC files.
  + Video Output:
  - Fix color regression with VAAPI/iOS and OpenGL output.
  - Fix some resizing issues with OpenGL on GLX/EGL/X11/XV.
  - Fix Direct3d9 texture stretching.
  - Fix 10-bit accelerated video filters on macOS.
  + Playlist: Avoid playlist liveloop on failed/tiny items
    (temporize EOS bursts).
  + Misc:
  - Misc fixes for the extension UI on macOS.
  - Improve SMBv1 and SMBv2 behaviours.
  - Improve FTP compatibility.
  - Support RISC-V.
  - Fix AVI muxing for Windows Media Player compatibility.
  - Fix seeking speed on macOS.
- Drop vlc-dav1d-1.0.patch and 867.patch: fixed upstream.
- Drop vlc-get-addr-by-ref-from-getConnectionEndpointAddress.patch:
  fixed upstream (commit 05445b74).
- Drop vlc-get-addr-by-ref-from-getConnectionEndpointAddress.patch:
  fixed upstream (commit b689202d).</changelog>
  <changelog author="Niklas Haas &lt;obs@haasn.xyz&gt;" date="1669377601">- Add vlc-libplacebo-5.patch: Backport fix for building with libplacebo v5</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1670846400">- Do not apply vlc.a52.patch if liba52 is &lt; 0.8.0
- Avoid ugly _FORTIFY_SOURCE redefinition warnings</changelog>
</package>
<package pkgid="5464bc7ef7054d4010a9959eafb34bcafe0eaec041d5e79ee4edc365c605238c" name="vlc-vdpau" arch="x86_64">
  <version epoch="0" ver="3.0.18" rel="bp154.2.3.1"/>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1616760000">- Add vlc-gcc11.patch: Fix build using gcc11 (boo#1181918).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1616760001">- Guard post scriptlets to only run %{_libdir}/vlc/vlc-cache-gen if
  it already (or still, in case of uninstall) exists.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1620129600">- Update to version 3.0.13:
  + Demux:
  - Adaptive: fix artefacts in HLS streams with wrong profiles/levels
  - Fix regression on some MP4 files for the audio track
  - Fix MPGA and ADTS probing in TS files
  - Fix Flac inside AVI files
  - Fix VP9/Webm artefacts when seeking
  + Codec:
  - Support SSA text scaling
  - Fix rotation on Android rotation
  - Fix WebVTT subtitles that start at 00:00
  + Access:
  - Update libnfs to support NFSv4
  - Improve SMB2 integration
  - Fix Blu-ray files using Unicode names on Windows
  - Disable mcast lookups on Android for RTSP playback
  + Video Output: Rework the D3D11 rendering wait, to fix
    choppiness on display
  + Interfaces:
  - Fix VLC getting stuck on close on X11 (#21875)
  - Improve RTL on preferences on macOS
  - Add mousewheel horizontal axis control
  - Fix crash on exit on macOS
  - Fix sizing of the fullscreen controls on macOS
  + Misc:
  - Improve MIDI fonts search on Linux
  - Update Soundcloud, Youtube, liveleak
  - Fix compilation with GCC11
  - Fix input-slave option for subtitles
  + Updated translations.
- Drop vlc-gcc11.patch: fixed upstream.
- Extend vlc-srto_tsbpddelay.patch: allow srt &gt;= 1.3 for openSUSE.</changelog>
  <changelog author="Fusion Future &lt;qydwhotmail@gmail.com&gt;" date="1624104000">- Update to version 3.0.16:
  + Video Output: Fix a D3D11 crash on Windows 8/8.1.
  + Access: Fix RTSP server timeout handling.
  + Interfaces: macOS: Add touchbar support.
  + Misc: Multiple settings improvements.
- Changes from version 3.0.15:
  + Core: Add Opus &amp; Alac wave format mappings.
  + Access: Fix opening DVD folders with non-ascii characters.
  + Demux:
  - Fix asf regression with broadcast streams.
  - MP4: Fix audio drop on seek.
  + Video Output:
  - Fix seek &amp; volume sliders overlapping with subtitles.
  - Fix delays when seeking with D3D11.
  + Text renderer: Improve freetype fonts outlining.
  + Misc: Fix GnuTLS support for Windows XP.
- Changes from version 3.0.14:
  + Core:
  - Fix double loading of slave input.
  - Fix an issue causing the auto-updater not to launch the new
    version installer.
- Add vlc-get-addr-by-ref-from-getConnectionEndpointAddress.patch:
  The maintainers of live555 changed connectionEndpointAddresss to
  getConnectionEndpointAddress, which now provides the address
  value by reference.
- Rebase vlc-srto_tsbpddelay.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1645531200">- Guard --enable-libplacebo configure parameter with is_opensuse:
  the buildrequires is also guarded the same way.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1645617600">- BuildRequires pkgconfig(smbclient) instead of smbclient-devel:
  smbclient-devel was merged into samba-devel, and we do not want
  to care for actual package names.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1646654400">- Update to version 3.0.17:
  + Core:
  * Fix a regression in parsing secondary source MRLs
  * Allow brackets in path part of URLs
  + Access:
  * Fix support for screen capture on macOS with avcapture
  * Fix closing of HTTP 1.x connections
  * Improve HTTP2 memory usage
  * Improve AVCapture module
  * Improve AudioCD support (audio/data mixed mode, musicbrainz)
  * Improve SMB compatibility by changing the read size
  * Several improvements on the SRT modules (including streamID)
  + Decoders/Packetizers:
  * Add support for DTS LBR
  * Fix some HEVC hardware decoding on Windows and crashes when aspect ratio changes
  * Fix hardware decoding for some AMD GPU drivers
  * Add support for new Fourcc for E-AC3, AV1, GeoVision
  * Fix crashes with VP9 streams
  * Fix styling issues with subs tx3g (mp4) tracks
  * Fix playback of live AV1 streams
  + Audio Output:
  * iOS/tvOS: add support for spatial audio
  * macOS: fix some channels ordering for &gt; 5.1 channels
  * Android: rework audio volume management
  + Video Output:
  * Fix a D3D11 crash when the stream changes aspect ratio
  + Demux:
  * Major overhaul of the adaptive streaming stack
  * Support for DAV video files
  * Add WebP image mapping
  * Fix missing audio start of Opus audio in MKV/WebM
  * Fix an infinite loop in MP4
  * Fix attachments extractions in ogg files
  * Support Uncompressed audio in mp4 (ISO/IEC 23003-5)
  * Fix some lip sync issue in rare MPEG-TS streams
  + Interface:
  * Qt/macOS: Fixup user provided URLs
  * Add safe area handling on macOS
  * Qt: improve preferences search
  * Qt: fix --no-mouse-events option
  + Misc:
  * Update YouTube script
  * Fix Icecast directory parsing which could lead to missing entries
  * Improve UPnP compatibility with some servers
- Drop vlc-srto_tsbpddelay.patch: fixed upstream.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1646913600">- Disable libnfs and soxr integration on suse_version &lt; 1500 (e.g
  SLE12).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1647691200">- Update to version 3.0.17.3:
  + This is a fixup release which fixes a regression that could
    cause a lack of audio for adaptive streaming playback. It is
    identical to 3.0.17.2 otherwise.
  + This updates contains various fixes and improvements:
  - Major adaptive streaming stack overhaul
  - Major codec updates
  - Many third party libraries update
  - Allow brackets in the path section of URLs
  - Better notch support for new macbooks
  - Add support for DAV video and Webp image formats
  - Improve AV1 live streaming support
  - Several SRT support improvements
  - Numerous crash fixes
  - Update youtube script
- Changes from version 3.0.17.2:
  + This is a fixup release which fixes youtube playback and
    contextual menus on integrated video for the Qt interface. It
    is identical to 3.0.17-1 otherwise.
- Changes from version 3.0.17-1:
  + This is a fixup release which bumps libflac to 1.3.4 in order
    to fix CVE-2020-0499 and CVE-2021-0561 on platforms for which
    we provide binary releases.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1650628800">- Update to version 3.0.17.4:
  + Service Discovery: Fix UPnP regression on Windows.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1653307200">- Add vlc-dav1d-1.0.patch: Fix build with dav1d 1.0. Upstream
  commits 2202c892 and d38ddd727.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1657108800">- Extend vlc-lua-5.3.patch: match upstream commit 0e0b070c26.
- Add 867.patch: support LUA 5.4 (boo#1200944).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1657713600">- Limit to Lua &lt; 5.4 (boo#1200944).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1659960000">- Also limit lua interpreter to &lt; 5.4 (boo#1200944).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1662552000">- Make vlc-vdpau supplement vlc, not vlc-noX: vdpau itself is based
  on top of the graphical stack.
- Move video_output/libegl_wl_plugin.so from vlc-noX to vlc: links
  GUI stack.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1667908800">- Limit to ffmpeg 4: we're also linking opencv3 which does not use
  ffmpeg 5.</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1668686400">- add vlc-caca-fix-to-0-99-beta20-version.patch: build with libcaca-0.99.beta20</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1669377600">- Update to version 3.0.18 (CVE-2022-41325, boo#1206142):
  + macOS: Fix audio device listing with non-latin names.
  + Misc: Fix rendering and performance issue with older GPUs.
  + Updated translations.
- Changes from version 3.0.18-rc2:
  + Codec/Demux:
  - Add support for Y16 chroma.
  - Fix build of gme plugin.
  + Lua:
  - Fix script for vocaroo.
  - Fix script for youtube to allow throttled playback.
  + Service Discovery: Fix UPnP regression on Windows.
  + Video Output: Fix video placement with caopengllayer.
  + Misc: Fix password search in kwallet module.
- Changes from version 3.0.18-rc:
  + Demux:
  - Major adaptive streaming update, notably for multiple
    timelies and webvtt.
  - Fix seeking with some fragmented MP4 files.
  - Add support for DVBSub inside MKV.
  - Fix some Flac files that could not be played.
  - Improve seeking in Ogg files.
  + Decoders:
  - Fix DxVA/D3D11 crashes on HEVC files with bogus references.
  - Fix libass storage size and crash.
  - Fix decoding errors on macOS hw decoding on some HEVC files.
  + Video Output:
  - Fix color regression with VAAPI/iOS and OpenGL output.
  - Fix some resizing issues with OpenGL on GLX/EGL/X11/XV.
  - Fix Direct3d9 texture stretching.
  - Fix 10-bit accelerated video filters on macOS.
  + Playlist: Avoid playlist liveloop on failed/tiny items
    (temporize EOS bursts).
  + Misc:
  - Misc fixes for the extension UI on macOS.
  - Improve SMBv1 and SMBv2 behaviours.
  - Improve FTP compatibility.
  - Support RISC-V.
  - Fix AVI muxing for Windows Media Player compatibility.
  - Fix seeking speed on macOS.
- Drop vlc-dav1d-1.0.patch and 867.patch: fixed upstream.
- Drop vlc-get-addr-by-ref-from-getConnectionEndpointAddress.patch:
  fixed upstream (commit 05445b74).
- Drop vlc-get-addr-by-ref-from-getConnectionEndpointAddress.patch:
  fixed upstream (commit b689202d).</changelog>
  <changelog author="Niklas Haas &lt;obs@haasn.xyz&gt;" date="1669377601">- Add vlc-libplacebo-5.patch: Backport fix for building with libplacebo v5</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1670846400">- Do not apply vlc.a52.patch if liba52 is &lt; 0.8.0
- Avoid ugly _FORTIFY_SOURCE redefinition warnings</changelog>
</package>
<package pkgid="147d92cad4167c5dafb3977cedb395fd4221bd025d13924aac916d1fa15ad1b9" name="vmaf" arch="src">
  <version epoch="0" ver="2.3.1" rel="bp154.2.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1602936000">- Initial package (version 1.5.3) for build.opensuse.org
- Add 0001-build-unbreak-x86-builds.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1603108800">- Add missing BuildRequires: pkg-config. This is still needed
  for rpm to pick up .pc and generate pkgconfig() symbols.</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1610020800">- Update to 2.1.0
  * New features:
  - Per-model feature overloading via new API
    vmaf_model_feature_overload().
  - Multiple unique configurations of the same feature extractor
    may be registered run at the same time.
  - --aom_ctc v1.0 preset, encompassing all metrics specified by
    the AOM CTC.
- Changes from 2.0.0
  * New features:
  - Add PSNR-HVS and CIEDE2000 metrics.
  - ci/actions: upload linux/macos artifacts (#738)
  - libvmaf/feature: deprecate daala_ssim (#735)
  - libvmaf: remove support for pkl models
  - libvmaf/psnr: rewrite using integer types, 2x speedup
  - vmaf: if no model is specified, enable v0.6.1 by default (#730)
  - libvmaf/x86: add AVX2/AVX-512 optimizations for adm, vif and
    motion
  - ci/actions: add xxd to build dependencies for Windows
  - libvmaf: add support for built-in models
  - libvmaf/integer_vif: use symmetrical mirroring on edges
  - Fix log2 by replacing log2f_approx with log2f
  - libvmaf_rc: provide a backwards compatible compute_vmaf(),
    link vmafossexec with libvmaf
  - libvmaf: add framework support for json models
  - libvmaf/libsvm: update libsvm to version 324
  - libvmaf/motion: add motion_force_zero to motion fex
  - return sha1 if Asset string is longer than 255
  - Add CID/iCID Matlab source code
  - build: unbreak x86 builds (Fixes: #374)
  - Add 12bit and 16bit support for python YUV reader; add tests.
  - Add PypsnrFeatureExtractor
  - Add processes to FeatureAssembler. (#662)
  * Fixed bugs:
  - fix motion flush for single frame input
  - Fixing the perf_metric for a single entry list input
- Drop 0001-build-unbreak-x86-builds.patch, because now in upstream.
- Remove data subpackage because models now build in.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1615204800">- update to 2.1.1:
  * Fixes a SSIM/MS-SSIM precision bug where a lossless comparison did not
    always result in a perfect 1.0 score. (#796).
  * Adds feature extractor options to clip the dB scores for both PSNR/SSIM.
  - -aom_ctc v1.0 has been updated to use these clipping options according to
    the AOM CTC. (#802).
- disable LTO build (fails at least since 2.1.0)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1625227200">- Update to release 2.2.0
  * Fixed a CIEDE-2000 precision issue, where cross-platform
    mismatches were seen.
  * Added function vmaf_feature_dictionary_free().</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Update to release 2.2.1
  * Fix a race condition in vmaf_thread_pool_wait().
  * Avoid chroma resampling for 420mpeg2 y4m input.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1634385600">- Update to release 2.3.0
  * Added Contrast Aware Multiscale Banding Index.
  * Added pixel format VMAF_PIX_FMT_YUV400P.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1649678400">- Update to release 2.3.1
  * CAMBI extensions: full reference, PQ eotf, up to 16 bit-depth
    support, max_log_contrast parameter.
  * CAMBI: option to output heatmaps.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1667995200">- Drop recommends on vmaf-data, the package is gone since vmaf 2.x.
  Build model data into the library, since `make install` does not
  do anything by default. [boo#1189023]</changelog>
</package>
<package pkgid="ff865311ed52f44e498c4a06405c97704ce1bdce088d03e9ca5b20e7dcd948e7" name="vmaf-devel" arch="aarch64">
  <version epoch="0" ver="2.3.1" rel="bp154.2.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1602936000">- Initial package (version 1.5.3) for build.opensuse.org
- Add 0001-build-unbreak-x86-builds.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1603108800">- Add missing BuildRequires: pkg-config. This is still needed
  for rpm to pick up .pc and generate pkgconfig() symbols.</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1610020800">- Update to 2.1.0
  * New features:
  - Per-model feature overloading via new API
    vmaf_model_feature_overload().
  - Multiple unique configurations of the same feature extractor
    may be registered run at the same time.
  - --aom_ctc v1.0 preset, encompassing all metrics specified by
    the AOM CTC.
- Changes from 2.0.0
  * New features:
  - Add PSNR-HVS and CIEDE2000 metrics.
  - ci/actions: upload linux/macos artifacts (#738)
  - libvmaf/feature: deprecate daala_ssim (#735)
  - libvmaf: remove support for pkl models
  - libvmaf/psnr: rewrite using integer types, 2x speedup
  - vmaf: if no model is specified, enable v0.6.1 by default (#730)
  - libvmaf/x86: add AVX2/AVX-512 optimizations for adm, vif and
    motion
  - ci/actions: add xxd to build dependencies for Windows
  - libvmaf: add support for built-in models
  - libvmaf/integer_vif: use symmetrical mirroring on edges
  - Fix log2 by replacing log2f_approx with log2f
  - libvmaf_rc: provide a backwards compatible compute_vmaf(),
    link vmafossexec with libvmaf
  - libvmaf: add framework support for json models
  - libvmaf/libsvm: update libsvm to version 324
  - libvmaf/motion: add motion_force_zero to motion fex
  - return sha1 if Asset string is longer than 255
  - Add CID/iCID Matlab source code
  - build: unbreak x86 builds (Fixes: #374)
  - Add 12bit and 16bit support for python YUV reader; add tests.
  - Add PypsnrFeatureExtractor
  - Add processes to FeatureAssembler. (#662)
  * Fixed bugs:
  - fix motion flush for single frame input
  - Fixing the perf_metric for a single entry list input
- Drop 0001-build-unbreak-x86-builds.patch, because now in upstream.
- Remove data subpackage because models now build in.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1615204800">- update to 2.1.1:
  * Fixes a SSIM/MS-SSIM precision bug where a lossless comparison did not
    always result in a perfect 1.0 score. (#796).
  * Adds feature extractor options to clip the dB scores for both PSNR/SSIM.
  - -aom_ctc v1.0 has been updated to use these clipping options according to
    the AOM CTC. (#802).
- disable LTO build (fails at least since 2.1.0)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1625227200">- Update to release 2.2.0
  * Fixed a CIEDE-2000 precision issue, where cross-platform
    mismatches were seen.
  * Added function vmaf_feature_dictionary_free().</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Update to release 2.2.1
  * Fix a race condition in vmaf_thread_pool_wait().
  * Avoid chroma resampling for 420mpeg2 y4m input.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1634385600">- Update to release 2.3.0
  * Added Contrast Aware Multiscale Banding Index.
  * Added pixel format VMAF_PIX_FMT_YUV400P.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1649678400">- Update to release 2.3.1
  * CAMBI extensions: full reference, PQ eotf, up to 16 bit-depth
    support, max_log_contrast parameter.
  * CAMBI: option to output heatmaps.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1667995200">- Drop recommends on vmaf-data, the package is gone since vmaf 2.x.
  Build model data into the library, since `make install` does not
  do anything by default. [boo#1189023]</changelog>
</package>
<package pkgid="d6ab66bb753d86e3f22c188af807dd7ea62d1004e4940dab3f7be4aa5a29697a" name="vmaf-devel" arch="i586">
  <version epoch="0" ver="2.3.1" rel="bp154.2.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1602936000">- Initial package (version 1.5.3) for build.opensuse.org
- Add 0001-build-unbreak-x86-builds.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1603108800">- Add missing BuildRequires: pkg-config. This is still needed
  for rpm to pick up .pc and generate pkgconfig() symbols.</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1610020800">- Update to 2.1.0
  * New features:
  - Per-model feature overloading via new API
    vmaf_model_feature_overload().
  - Multiple unique configurations of the same feature extractor
    may be registered run at the same time.
  - --aom_ctc v1.0 preset, encompassing all metrics specified by
    the AOM CTC.
- Changes from 2.0.0
  * New features:
  - Add PSNR-HVS and CIEDE2000 metrics.
  - ci/actions: upload linux/macos artifacts (#738)
  - libvmaf/feature: deprecate daala_ssim (#735)
  - libvmaf: remove support for pkl models
  - libvmaf/psnr: rewrite using integer types, 2x speedup
  - vmaf: if no model is specified, enable v0.6.1 by default (#730)
  - libvmaf/x86: add AVX2/AVX-512 optimizations for adm, vif and
    motion
  - ci/actions: add xxd to build dependencies for Windows
  - libvmaf: add support for built-in models
  - libvmaf/integer_vif: use symmetrical mirroring on edges
  - Fix log2 by replacing log2f_approx with log2f
  - libvmaf_rc: provide a backwards compatible compute_vmaf(),
    link vmafossexec with libvmaf
  - libvmaf: add framework support for json models
  - libvmaf/libsvm: update libsvm to version 324
  - libvmaf/motion: add motion_force_zero to motion fex
  - return sha1 if Asset string is longer than 255
  - Add CID/iCID Matlab source code
  - build: unbreak x86 builds (Fixes: #374)
  - Add 12bit and 16bit support for python YUV reader; add tests.
  - Add PypsnrFeatureExtractor
  - Add processes to FeatureAssembler. (#662)
  * Fixed bugs:
  - fix motion flush for single frame input
  - Fixing the perf_metric for a single entry list input
- Drop 0001-build-unbreak-x86-builds.patch, because now in upstream.
- Remove data subpackage because models now build in.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1615204800">- update to 2.1.1:
  * Fixes a SSIM/MS-SSIM precision bug where a lossless comparison did not
    always result in a perfect 1.0 score. (#796).
  * Adds feature extractor options to clip the dB scores for both PSNR/SSIM.
  - -aom_ctc v1.0 has been updated to use these clipping options according to
    the AOM CTC. (#802).
- disable LTO build (fails at least since 2.1.0)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1625227200">- Update to release 2.2.0
  * Fixed a CIEDE-2000 precision issue, where cross-platform
    mismatches were seen.
  * Added function vmaf_feature_dictionary_free().</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Update to release 2.2.1
  * Fix a race condition in vmaf_thread_pool_wait().
  * Avoid chroma resampling for 420mpeg2 y4m input.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1634385600">- Update to release 2.3.0
  * Added Contrast Aware Multiscale Banding Index.
  * Added pixel format VMAF_PIX_FMT_YUV400P.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1649678400">- Update to release 2.3.1
  * CAMBI extensions: full reference, PQ eotf, up to 16 bit-depth
    support, max_log_contrast parameter.
  * CAMBI: option to output heatmaps.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1667995200">- Drop recommends on vmaf-data, the package is gone since vmaf 2.x.
  Build model data into the library, since `make install` does not
  do anything by default. [boo#1189023]</changelog>
</package>
<package pkgid="0957a1c67b4a684868c6b2cc29eda4c5c6da55f6cde9a4a3c1ffc8057049b51e" name="vmaf-devel" arch="ppc64le">
  <version epoch="0" ver="2.3.1" rel="bp154.2.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1602936000">- Initial package (version 1.5.3) for build.opensuse.org
- Add 0001-build-unbreak-x86-builds.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1603108800">- Add missing BuildRequires: pkg-config. This is still needed
  for rpm to pick up .pc and generate pkgconfig() symbols.</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1610020800">- Update to 2.1.0
  * New features:
  - Per-model feature overloading via new API
    vmaf_model_feature_overload().
  - Multiple unique configurations of the same feature extractor
    may be registered run at the same time.
  - --aom_ctc v1.0 preset, encompassing all metrics specified by
    the AOM CTC.
- Changes from 2.0.0
  * New features:
  - Add PSNR-HVS and CIEDE2000 metrics.
  - ci/actions: upload linux/macos artifacts (#738)
  - libvmaf/feature: deprecate daala_ssim (#735)
  - libvmaf: remove support for pkl models
  - libvmaf/psnr: rewrite using integer types, 2x speedup
  - vmaf: if no model is specified, enable v0.6.1 by default (#730)
  - libvmaf/x86: add AVX2/AVX-512 optimizations for adm, vif and
    motion
  - ci/actions: add xxd to build dependencies for Windows
  - libvmaf: add support for built-in models
  - libvmaf/integer_vif: use symmetrical mirroring on edges
  - Fix log2 by replacing log2f_approx with log2f
  - libvmaf_rc: provide a backwards compatible compute_vmaf(),
    link vmafossexec with libvmaf
  - libvmaf: add framework support for json models
  - libvmaf/libsvm: update libsvm to version 324
  - libvmaf/motion: add motion_force_zero to motion fex
  - return sha1 if Asset string is longer than 255
  - Add CID/iCID Matlab source code
  - build: unbreak x86 builds (Fixes: #374)
  - Add 12bit and 16bit support for python YUV reader; add tests.
  - Add PypsnrFeatureExtractor
  - Add processes to FeatureAssembler. (#662)
  * Fixed bugs:
  - fix motion flush for single frame input
  - Fixing the perf_metric for a single entry list input
- Drop 0001-build-unbreak-x86-builds.patch, because now in upstream.
- Remove data subpackage because models now build in.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1615204800">- update to 2.1.1:
  * Fixes a SSIM/MS-SSIM precision bug where a lossless comparison did not
    always result in a perfect 1.0 score. (#796).
  * Adds feature extractor options to clip the dB scores for both PSNR/SSIM.
  - -aom_ctc v1.0 has been updated to use these clipping options according to
    the AOM CTC. (#802).
- disable LTO build (fails at least since 2.1.0)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1625227200">- Update to release 2.2.0
  * Fixed a CIEDE-2000 precision issue, where cross-platform
    mismatches were seen.
  * Added function vmaf_feature_dictionary_free().</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Update to release 2.2.1
  * Fix a race condition in vmaf_thread_pool_wait().
  * Avoid chroma resampling for 420mpeg2 y4m input.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1634385600">- Update to release 2.3.0
  * Added Contrast Aware Multiscale Banding Index.
  * Added pixel format VMAF_PIX_FMT_YUV400P.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1649678400">- Update to release 2.3.1
  * CAMBI extensions: full reference, PQ eotf, up to 16 bit-depth
    support, max_log_contrast parameter.
  * CAMBI: option to output heatmaps.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1667995200">- Drop recommends on vmaf-data, the package is gone since vmaf 2.x.
  Build model data into the library, since `make install` does not
  do anything by default. [boo#1189023]</changelog>
</package>
<package pkgid="c7e500929fd64d84c1640a3381c94e4d3977e7d8dc08d73ca2bb24b1d4e43791" name="vmaf-devel" arch="s390x">
  <version epoch="0" ver="2.3.1" rel="bp154.2.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1602936000">- Initial package (version 1.5.3) for build.opensuse.org
- Add 0001-build-unbreak-x86-builds.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1603108800">- Add missing BuildRequires: pkg-config. This is still needed
  for rpm to pick up .pc and generate pkgconfig() symbols.</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1610020800">- Update to 2.1.0
  * New features:
  - Per-model feature overloading via new API
    vmaf_model_feature_overload().
  - Multiple unique configurations of the same feature extractor
    may be registered run at the same time.
  - --aom_ctc v1.0 preset, encompassing all metrics specified by
    the AOM CTC.
- Changes from 2.0.0
  * New features:
  - Add PSNR-HVS and CIEDE2000 metrics.
  - ci/actions: upload linux/macos artifacts (#738)
  - libvmaf/feature: deprecate daala_ssim (#735)
  - libvmaf: remove support for pkl models
  - libvmaf/psnr: rewrite using integer types, 2x speedup
  - vmaf: if no model is specified, enable v0.6.1 by default (#730)
  - libvmaf/x86: add AVX2/AVX-512 optimizations for adm, vif and
    motion
  - ci/actions: add xxd to build dependencies for Windows
  - libvmaf: add support for built-in models
  - libvmaf/integer_vif: use symmetrical mirroring on edges
  - Fix log2 by replacing log2f_approx with log2f
  - libvmaf_rc: provide a backwards compatible compute_vmaf(),
    link vmafossexec with libvmaf
  - libvmaf: add framework support for json models
  - libvmaf/libsvm: update libsvm to version 324
  - libvmaf/motion: add motion_force_zero to motion fex
  - return sha1 if Asset string is longer than 255
  - Add CID/iCID Matlab source code
  - build: unbreak x86 builds (Fixes: #374)
  - Add 12bit and 16bit support for python YUV reader; add tests.
  - Add PypsnrFeatureExtractor
  - Add processes to FeatureAssembler. (#662)
  * Fixed bugs:
  - fix motion flush for single frame input
  - Fixing the perf_metric for a single entry list input
- Drop 0001-build-unbreak-x86-builds.patch, because now in upstream.
- Remove data subpackage because models now build in.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1615204800">- update to 2.1.1:
  * Fixes a SSIM/MS-SSIM precision bug where a lossless comparison did not
    always result in a perfect 1.0 score. (#796).
  * Adds feature extractor options to clip the dB scores for both PSNR/SSIM.
  - -aom_ctc v1.0 has been updated to use these clipping options according to
    the AOM CTC. (#802).
- disable LTO build (fails at least since 2.1.0)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1625227200">- Update to release 2.2.0
  * Fixed a CIEDE-2000 precision issue, where cross-platform
    mismatches were seen.
  * Added function vmaf_feature_dictionary_free().</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Update to release 2.2.1
  * Fix a race condition in vmaf_thread_pool_wait().
  * Avoid chroma resampling for 420mpeg2 y4m input.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1634385600">- Update to release 2.3.0
  * Added Contrast Aware Multiscale Banding Index.
  * Added pixel format VMAF_PIX_FMT_YUV400P.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1649678400">- Update to release 2.3.1
  * CAMBI extensions: full reference, PQ eotf, up to 16 bit-depth
    support, max_log_contrast parameter.
  * CAMBI: option to output heatmaps.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1667995200">- Drop recommends on vmaf-data, the package is gone since vmaf 2.x.
  Build model data into the library, since `make install` does not
  do anything by default. [boo#1189023]</changelog>
</package>
<package pkgid="964e93579648d04fd5478608e5aa2877ba52dda57abcc6bcc3c8879d8a59353a" name="vmaf-devel" arch="x86_64">
  <version epoch="0" ver="2.3.1" rel="bp154.2.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1602936000">- Initial package (version 1.5.3) for build.opensuse.org
- Add 0001-build-unbreak-x86-builds.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1603108800">- Add missing BuildRequires: pkg-config. This is still needed
  for rpm to pick up .pc and generate pkgconfig() symbols.</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1610020800">- Update to 2.1.0
  * New features:
  - Per-model feature overloading via new API
    vmaf_model_feature_overload().
  - Multiple unique configurations of the same feature extractor
    may be registered run at the same time.
  - --aom_ctc v1.0 preset, encompassing all metrics specified by
    the AOM CTC.
- Changes from 2.0.0
  * New features:
  - Add PSNR-HVS and CIEDE2000 metrics.
  - ci/actions: upload linux/macos artifacts (#738)
  - libvmaf/feature: deprecate daala_ssim (#735)
  - libvmaf: remove support for pkl models
  - libvmaf/psnr: rewrite using integer types, 2x speedup
  - vmaf: if no model is specified, enable v0.6.1 by default (#730)
  - libvmaf/x86: add AVX2/AVX-512 optimizations for adm, vif and
    motion
  - ci/actions: add xxd to build dependencies for Windows
  - libvmaf: add support for built-in models
  - libvmaf/integer_vif: use symmetrical mirroring on edges
  - Fix log2 by replacing log2f_approx with log2f
  - libvmaf_rc: provide a backwards compatible compute_vmaf(),
    link vmafossexec with libvmaf
  - libvmaf: add framework support for json models
  - libvmaf/libsvm: update libsvm to version 324
  - libvmaf/motion: add motion_force_zero to motion fex
  - return sha1 if Asset string is longer than 255
  - Add CID/iCID Matlab source code
  - build: unbreak x86 builds (Fixes: #374)
  - Add 12bit and 16bit support for python YUV reader; add tests.
  - Add PypsnrFeatureExtractor
  - Add processes to FeatureAssembler. (#662)
  * Fixed bugs:
  - fix motion flush for single frame input
  - Fixing the perf_metric for a single entry list input
- Drop 0001-build-unbreak-x86-builds.patch, because now in upstream.
- Remove data subpackage because models now build in.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1615204800">- update to 2.1.1:
  * Fixes a SSIM/MS-SSIM precision bug where a lossless comparison did not
    always result in a perfect 1.0 score. (#796).
  * Adds feature extractor options to clip the dB scores for both PSNR/SSIM.
  - -aom_ctc v1.0 has been updated to use these clipping options according to
    the AOM CTC. (#802).
- disable LTO build (fails at least since 2.1.0)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1625227200">- Update to release 2.2.0
  * Fixed a CIEDE-2000 precision issue, where cross-platform
    mismatches were seen.
  * Added function vmaf_feature_dictionary_free().</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Update to release 2.2.1
  * Fix a race condition in vmaf_thread_pool_wait().
  * Avoid chroma resampling for 420mpeg2 y4m input.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1634385600">- Update to release 2.3.0
  * Added Contrast Aware Multiscale Banding Index.
  * Added pixel format VMAF_PIX_FMT_YUV400P.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1649678400">- Update to release 2.3.1
  * CAMBI extensions: full reference, PQ eotf, up to 16 bit-depth
    support, max_log_contrast parameter.
  * CAMBI: option to output heatmaps.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1667995200">- Drop recommends on vmaf-data, the package is gone since vmaf 2.x.
  Build model data into the library, since `make install` does not
  do anything by default. [boo#1189023]</changelog>
</package>
<package pkgid="8fac4441e78061f524157cb3c9a4ff04043fcb5f9593d42e8250000eaa1aa8e3" name="vorta" arch="noarch">
  <version epoch="0" ver="0.8.3" rel="bp154.2.3.1"/>
  <changelog author="alarrosa@suse.com" date="1547726400">- Use %python3* macros to build and install
- Fix fdupes call
- Add desktop file and install application icon</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548244800">- Generalize description.</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1549540800">- Update to version 0.6.7
  * Separate light/dark settings for icon and theme.
    Fixes gh#borgbase/vorta#171
  * Ask for confirmation on delete (and small fixes)
    (gh#borgbase/vorta#176)
  * Show/Hide the main window in KDE when clicking on the tray icon
    (gh#borgbase/vorta#143)
  * Add debug tools for i18n UI layout checking (gh#borgbase/vorta#160)
  * Fix crash due to zombie processes (gh#borgbase/vorta#174)
  * Use ellipsis the Qt way in the archive table (gh#borgbase/vorta#169)
  * Fix Issue "Crash when cancelling "add new profile"
    gh#borgbase/vorta#168" (gh#borgbase/vorta#170)
- Update to version 0.6.6
  * Add light icons and dark stylesheet. Fixes gh#borgbase/vorta#151
    (gh#borgbase/vorta#155)
  * Implement feature to delete specific archive (gh#borgbase/vorta#164)
  * Programmatically detect theme color (for macOS) (gh#borgbase/vorta#150)
  * Add app name to tray menu and window title (gh#borgbase/vorta#153)
  * Improve archive mount feature. Fixes gh#borgbase/vorta#131. By @antlarr
    (gh#borgbase/vorta#156)
  * Translation-related improvements and German translation
    (gh#borgbase/vorta#146)
  * Skip sockets when reading private keys (gh#borgbase/vorta#147)
  * Remove leftover Sentry references. Fixes gh#borgbase/vorta#127
    (gh#borgbase/vorta#142)
  * Make the main window resizeable (gh#borgbase/vorta#130)
- Drop fix-umount.patch which was already merged upstream</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1549627200">- Set LANG to use UTF-8 and fix builds in Leap 15.1</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1551096000">- Update to version 0.6.10
  * Also set tray icon according to detected theme.
    Fixes gh#borgbase/vorta#199
  * Avoid deadlock when calling subprocess.Popen().
    Fixes gh#borgbase/vorta#187
  * Remove translation functions for Borg logging messages.
    Fixes gh#borgbase/vorta#197
  * Implement autostart for Linux
  * Add French and Italian translations
  * Update compressor selection: add zlib, add zstd,8, descriptions.
    Fixes gh#borgbase/vorta#145
  * Add tooltip to "add profile" button. Fixes gh#borgbase/vorta#183
- Update to version 0.6.8
  * Implement add profile button
  * Translation Bugfixes</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1551096001">- Add fix-qtoolbox-titles.patch to fix a problem with QToolBox tab
  titles being cut at a fixed width independently of the title text
  or tab width.</changelog>
  <changelog author="Frederik M&#xF6;llers &lt;frederik@die-sinlosen.de&gt;" date="1570017600">- Update to version 0.6.22
  * Remove keyring dependency and refactor keyrings
  * Allow for extra borg arguments per-repo
  * Reduce memory usage by removing main window from memory when closed
  * Prevent KeyError when reading KnownNetworks on macOS
  * Expand user path in python before setting BORG_RSH
  * Catch Keyboard interrupt when running in foreground mode
  * Make autostart for Linux more stable
  * Avoid duplicate files in Extract dialog, avoid passing None to shlex when parsing extra args
  * Changes vorta's default tray icon to white on GNOME
  * Workaround for jeepney DBus-lib and asyncio event loop.
    Fixes gh#borgbase/vorta#234
  * Fall back to saving passwords in the database, when no Gnome-Keyring is installed
  * Implement QtSingleApplication
    Implements gh#borgbase/vorta#243
  * Remove non-ASCII em-dash from Manifest.in
  * Re-enable mounting of whole repo
  * Get borg version and path on startup. Link to log folder
    Implements gh#borgbase/vorta#247
  * Add helper class to manage Borg version and supported features
    Implements gh#borgbase/vorta#250
  * Correctly set environment encoding (pyinstaller issue)
    Fixes gh#borgbase/vorta#220
  * Fix default white icon behaviour for Ubuntu GNOME
  * Don't delete item from sources if item==None
  * Fix issue when Borg binary is missing
    Fixes gh#borgbase/vorta#258
  * Add date-based log rotation
    Partially fixes last part of gh#borgbase/vorta#121
  * Remove unique constraint from Archive ID
    Fixes gh#borgbase/vorta#253
  * Adress an issue with sqlite when the archive table to be migrated is very large
  * Handle OSError 6 when trying to read a socket in .ssh
  * Pre-backup command runs before repository checks
  * Implement --version
    Fixes gh#borgbase/vorta#260
  * If BORG_PASSCOMMAND is found, unset BORG_PASSPHRASE
    Fixes gh#borgbase/vorta#272
  * Raise meaningful error when Borg version found is too old
    Fixes Fixes gh#borgbase/vorta#283
  * Ignore Python processes owned by other users when finding mount points
  * Implement borg diff
  * Include more links into appdata
  * Default opt-in for enable_notifications_success
  * Rename background-option to daemonize
  * Implement close-question for DEs without system tray
  * Fix autostart icon
  * Allow is_system_tray_available to be called with running event loop
  * Add option for starting Vorta in foreground</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1572523200">- Update to version 0.6.23
  * Move setting prune options to right place. Fixes gh#borgbase/vorta#339
  * Improvements to diff-feature.
  * Enable sorting of archive table columns.
  * Always mount with current user and read-only permissions</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1589803200">- Update to version 0.6.24
  * Add Czech and Finnish translations.
  * Simplify startup behavior. Run in foreground by default (used
    by Flatpak and macOS). Use --daemonize to start in background.</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1590494400">- Update to version 0.6.26
  * Fixes some issues when no known Wifis are available on macOS.
  * Starts with the correct window size for high-res displays on Linux.
  * Test- and linting fixes.
- Version 0.6.25 wasn't released by upstream.</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1612872000">- Update to version 0.7.2
  * Renable buttons on cancel. By @samuel-w (#772)
  * Allow pasting files/folders from file manager, set model
    defaults (#759)
  * Add option to disable exit dialog. By @samuel-w (#681)
  * Allow only one profile with --create. By @samuel-w (#744)
  * Improved password handling and transparency. By @samuel-w
    (#550)
  * Fix file selector dialog (#764)
  * Fix label colour not changing on dark mode change.
    By @samuel-w (#757)
  * Cleanup database at exit, use write-ahead logging.
    By @samuel-w (#696)
  * Sort files in Extract dialog alphabetically. By @samuel-w
    (#741)
  * Update check message on completion. By @samuel-w (#672)
  * Give error message on unmount failure. By @samuel-w (#668)
  * Improve exception handling. By @samuel-w (#628)
  * Ensure system keychain is unlocked before using it.
    By @samuel-w (#607)
  * Create backups from command line using existing profiles.
    By @samuel-w (#556)
  * Diff: better color of added and removed text.
    By @samuel-w (#649)
  * Add KWallet support. By @samuel-w (#540)
  * Correctly sort archives by size. By @samuel-w (#729)
  * Refactoring: remove last exec_, add tests, retain archive
    deletion message. By @samuel-w (#722)
  * Refactor add and rename to not use exec_. By @samuel-w (#721)
  * Improve autostart test. By @samuel-w (#720)
  * Limit network checking to only remote repos.
    By @samuel-w (#701)
  * Re-enable SSH host key checking for all operations except
    when adding repo (#717)
  * Add valid copyright header to Johan Rade's work.
    By @sten0 (#716)
  * Display number of files and sizes in source tab.
    By @XXXBold (#617)
  * Translate category labels for log output. By @samuel-w (#683)
  * Fix crash when window is closed while thread running.
    By @samuel-w (#685)
  * Reuse existing window when bringing to front. (#674)
  * Set icon through code (#676)
  * Show dialog on copy failure. By @samuel-w (#647)
  * Get keyring at runtime. By @samuel-w (#635)
  * Save correct window size. By @samuel-w (#661)
  * Properly catch DBusException. By @samuel-w (#670)
  * Set application name (#666)
  * Set all icons to same height (#660)
  * Replace Borg version with install method in bug report (#657)
  * Reduce icon memory usage. By @samuel-w (#656)
  * Cancel Borg thread at end of test. (#648)
- Update to version 0.7.1
  * Fix crash when GUI is opened via tray icon while a backup is
    running. By @samuel-w
  * Use single tray icon for light and dark themes. By @samuel-w
  * Use naked en locale instead of en_US. Fixes #623 (#626)
  * Remove 'Backup in progress' when re-opening window (#627)
    by @samuel-w
  * Avoid formatting date and time twice. Fixes #624 (#625)
  * Handle DBusException in NetworkManagerMonitor (#636)
    by @ktosiek
  * Initialize the network status monitor lazily (#634)
    by @ktosiek
- Update to version 0.7.0
  * Proper dark style support and removal of style hacks
  * Prevent duplicate repos from being added. Fixes #473
  * New setting to store previously selected profile. Fixes #241
  * Add error message when Borg binary is missing. Fixes #333
  * Notify of errors after system tray backup run. Fixes #105
  * Linux Desktop file: fix syntax, enhance Categories,
    add a Keyword. By @sten0
  * Fix parsing "changed link" lines. By @ktosiek
  * Add paste button for source paths. By @samuel-w
  * Prevent profiles from sharing the same name. Fixes #512.
    By @samuel-w
  * Add copy button for repository URLs/paths. Fixes #409.
    By @samuel-w
  * Move socket file from state-dir to tmp-dir. Fixes #513
  * Save main window state before closing. By @Hofer-Julian
  * Parse owner changes in borg diff results. By @ktosiek
  * Fix tests for PyQt 5.15 on Linux. By @samuel-w
  * Refactor Linux autostart by @samuel-w
  * Add correct icon for notifications on Linux. By @Hofer-Julian
  * Newer macOS deploy target for detecting dark mode. Fixes #575
  * Enable multiselection on source list by @XXXBold
  * Allow selection of multiple files by @samuel-w for #593
  * Prevent running backups on metered network. By @ktosiek
  * Add autosorting for source list. By @samuel-w
  * Use dt.now everywhere. By @samuel-w
  * Improved progress updates. By @SergioRAgostinho
- Remove patch which is not needed anymore:
  * fix-qtoolbox-titles.patch</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1614081600">- Update to version 0.7.3
  * Possible Breaking Changes
    + This removes the profile_slug from the default archive name
    and prefix. This change only applies to new backup profiles.
    So if you use the same repo for multiple projects on the
    same hostname, be sure to check your prune prefix as well.
    The new default archive name is:
    {hostname}-{now:%Y-%m-%d-%H%M%S}
  * New Features
    + Add mount option override checkbox. By @samuel-w (#682)
    + Add custom options to borg create command.
    By @samuel-w (#677)
    + Add rename action. By @samuel-w and @m3nu (#864)
    + Give option to break repository lock. By @samuel-w (#863)
  * Bugfixes
    + Remove support for deprecated macOS XML wifi list. (#868)
    + Catch more possible SSH key parsing errors. (#789)
    + Improve cancelling Borg process (#786)
    + Add QTimer to ensure background jobs are scheduled correctly.
    (#780)
    + Fix corrupted archive table list during refresh if sorting
    is enabled. By @rblenis (#784)
- Rebase patch:
  * fix-dependencies.patch</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1614513600">- update to 0.7.4:
  * Fix log table sorting.
  * Improve kwallet verification.
  * Remove failing SSH key check
  * Avoid segfault when quitting</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1618574400">- Update to version 0.7.5
  * Bug fixes and improvements
    + With this release you can disable the system keychain and
    just keep the repo passphrase in Vorta's settings DB
    (slightly less secure).
    + Also, keyring is now picked by assigning a score. So it will
    prioritized KWallet on KDE and Secret Storage on Gnome.
    + Use json mode to list archive files. By @rblenis (#885)
    Add untranslated strings. By @samuel-w (#902)</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1625572800">- Update to 0.7.7
  * New features:
    + Import/export settings (or bootstrap with default config)
    + Add support for 'diff --json-lines'
  * Bugfixes and refinements:
    + Alert when deleting last profile
    + Put folders first in diff/extract
    + Skip sizing folders on permission error
    + Called set_progress() on wrong class
    + Fix color for eye icon when masking password
    + Refuse to add inaccessible folders, warn on inaccessible files during backup
    + Open window on left-click on Linux
    + Fix issue #940 - KeyError in get_dict_from_list
    + Correctly rename profile in dropdown
    + Fix 'list --json-lines' command when only a single result line is output</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1630411200">- Update to 0.7.8:
  * Fix double call to on_user_click
  * Handle malformed .vorta-init.json on import</changelog>
  <changelog author="pgajdos@suse.com" date="1639137600">- pytest-runner is deprecated</changelog>
  <changelog author="Marcus Hann &lt;marcus@hhra.uk&gt;" date="1640779200">- Update to 0.8.2
  * Refactor Borg job scheduling. By @bastiencyr
  * Remove APScheduler dependency and use QTimer directly
  * Python 3.10 compatibility
- Update to 0.8.1
  * Use native threading module in job_manager. (#1096)
  * Fix next_job timer logic. By @jayeclark (#1100)
  * Remove jobs if scheduler setting is changed. (#1105)
  * Remove jobs before deleting profile (#1107)
  * Make sure correct sources are removed (#1110)
  * Address DB Locking issues (#1109)
  * Refactor: Split up vorta/models.py (#1112)
  * Notify on failed repo checks (#1113)
- Update to 0.8.0
  * Implement multiple queues. By @bastiencyr (#1045)
  * Show backup size with excludes applied. By @freder (#961)
  * Remove APScheduler dependency, Python 3.10 support (#1086)
  * Add tooltip containing path name. By @XXXBold (#1072)
  * Increases the maximum allowed number in prune keep. By @lstrz (#1089)
  * Always handle autosave setting when saving SettingsModel. By @phihos (#1093)</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1644235200">- Update to 0.8.3
  * Distinguish different errors in case borg check failed.
    By @real-yfprojects (#1163)
  * Close SVG files after reading. By @hroncok (#1135)
  * Shows folder sizes in diff view. By @skrap (#1156)
  * Ignore encoding errors in Wifi names (darwin) (#1158)
  * Upgrade llfuse for Flatpak (#1179)
  * Bump macOS updater to Sparkle 2.0 (#1186)
  * Minor test fixes (#1150, #1147, #1146)
- Rebase patch:
  * fix-dependencies.patch</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1666699200">- Add patch to fix vorta using datetime.fromisoformat which is not
  available in python3.6 (boo#1199080):
  * fix-fromisoformat.patch</changelog>
</package>
<package pkgid="fa4537433c2c0bcddb707dd39b32086f3166e9b7ee597d9bc59d115f3d3ab49c" name="vorta" arch="src">
  <version epoch="0" ver="0.8.3" rel="bp154.2.3.1"/>
  <changelog author="alarrosa@suse.com" date="1547726400">- Use %python3* macros to build and install
- Fix fdupes call
- Add desktop file and install application icon</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548244800">- Generalize description.</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1549540800">- Update to version 0.6.7
  * Separate light/dark settings for icon and theme.
    Fixes gh#borgbase/vorta#171
  * Ask for confirmation on delete (and small fixes)
    (gh#borgbase/vorta#176)
  * Show/Hide the main window in KDE when clicking on the tray icon
    (gh#borgbase/vorta#143)
  * Add debug tools for i18n UI layout checking (gh#borgbase/vorta#160)
  * Fix crash due to zombie processes (gh#borgbase/vorta#174)
  * Use ellipsis the Qt way in the archive table (gh#borgbase/vorta#169)
  * Fix Issue "Crash when cancelling "add new profile"
    gh#borgbase/vorta#168" (gh#borgbase/vorta#170)
- Update to version 0.6.6
  * Add light icons and dark stylesheet. Fixes gh#borgbase/vorta#151
    (gh#borgbase/vorta#155)
  * Implement feature to delete specific archive (gh#borgbase/vorta#164)
  * Programmatically detect theme color (for macOS) (gh#borgbase/vorta#150)
  * Add app name to tray menu and window title (gh#borgbase/vorta#153)
  * Improve archive mount feature. Fixes gh#borgbase/vorta#131. By @antlarr
    (gh#borgbase/vorta#156)
  * Translation-related improvements and German translation
    (gh#borgbase/vorta#146)
  * Skip sockets when reading private keys (gh#borgbase/vorta#147)
  * Remove leftover Sentry references. Fixes gh#borgbase/vorta#127
    (gh#borgbase/vorta#142)
  * Make the main window resizeable (gh#borgbase/vorta#130)
- Drop fix-umount.patch which was already merged upstream</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1549627200">- Set LANG to use UTF-8 and fix builds in Leap 15.1</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1551096000">- Update to version 0.6.10
  * Also set tray icon according to detected theme.
    Fixes gh#borgbase/vorta#199
  * Avoid deadlock when calling subprocess.Popen().
    Fixes gh#borgbase/vorta#187
  * Remove translation functions for Borg logging messages.
    Fixes gh#borgbase/vorta#197
  * Implement autostart for Linux
  * Add French and Italian translations
  * Update compressor selection: add zlib, add zstd,8, descriptions.
    Fixes gh#borgbase/vorta#145
  * Add tooltip to "add profile" button. Fixes gh#borgbase/vorta#183
- Update to version 0.6.8
  * Implement add profile button
  * Translation Bugfixes</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1551096001">- Add fix-qtoolbox-titles.patch to fix a problem with QToolBox tab
  titles being cut at a fixed width independently of the title text
  or tab width.</changelog>
  <changelog author="Frederik M&#xF6;llers &lt;frederik@die-sinlosen.de&gt;" date="1570017600">- Update to version 0.6.22
  * Remove keyring dependency and refactor keyrings
  * Allow for extra borg arguments per-repo
  * Reduce memory usage by removing main window from memory when closed
  * Prevent KeyError when reading KnownNetworks on macOS
  * Expand user path in python before setting BORG_RSH
  * Catch Keyboard interrupt when running in foreground mode
  * Make autostart for Linux more stable
  * Avoid duplicate files in Extract dialog, avoid passing None to shlex when parsing extra args
  * Changes vorta's default tray icon to white on GNOME
  * Workaround for jeepney DBus-lib and asyncio event loop.
    Fixes gh#borgbase/vorta#234
  * Fall back to saving passwords in the database, when no Gnome-Keyring is installed
  * Implement QtSingleApplication
    Implements gh#borgbase/vorta#243
  * Remove non-ASCII em-dash from Manifest.in
  * Re-enable mounting of whole repo
  * Get borg version and path on startup. Link to log folder
    Implements gh#borgbase/vorta#247
  * Add helper class to manage Borg version and supported features
    Implements gh#borgbase/vorta#250
  * Correctly set environment encoding (pyinstaller issue)
    Fixes gh#borgbase/vorta#220
  * Fix default white icon behaviour for Ubuntu GNOME
  * Don't delete item from sources if item==None
  * Fix issue when Borg binary is missing
    Fixes gh#borgbase/vorta#258
  * Add date-based log rotation
    Partially fixes last part of gh#borgbase/vorta#121
  * Remove unique constraint from Archive ID
    Fixes gh#borgbase/vorta#253
  * Adress an issue with sqlite when the archive table to be migrated is very large
  * Handle OSError 6 when trying to read a socket in .ssh
  * Pre-backup command runs before repository checks
  * Implement --version
    Fixes gh#borgbase/vorta#260
  * If BORG_PASSCOMMAND is found, unset BORG_PASSPHRASE
    Fixes gh#borgbase/vorta#272
  * Raise meaningful error when Borg version found is too old
    Fixes Fixes gh#borgbase/vorta#283
  * Ignore Python processes owned by other users when finding mount points
  * Implement borg diff
  * Include more links into appdata
  * Default opt-in for enable_notifications_success
  * Rename background-option to daemonize
  * Implement close-question for DEs without system tray
  * Fix autostart icon
  * Allow is_system_tray_available to be called with running event loop
  * Add option for starting Vorta in foreground</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1572523200">- Update to version 0.6.23
  * Move setting prune options to right place. Fixes gh#borgbase/vorta#339
  * Improvements to diff-feature.
  * Enable sorting of archive table columns.
  * Always mount with current user and read-only permissions</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1589803200">- Update to version 0.6.24
  * Add Czech and Finnish translations.
  * Simplify startup behavior. Run in foreground by default (used
    by Flatpak and macOS). Use --daemonize to start in background.</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1590494400">- Update to version 0.6.26
  * Fixes some issues when no known Wifis are available on macOS.
  * Starts with the correct window size for high-res displays on Linux.
  * Test- and linting fixes.
- Version 0.6.25 wasn't released by upstream.</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1612872000">- Update to version 0.7.2
  * Renable buttons on cancel. By @samuel-w (#772)
  * Allow pasting files/folders from file manager, set model
    defaults (#759)
  * Add option to disable exit dialog. By @samuel-w (#681)
  * Allow only one profile with --create. By @samuel-w (#744)
  * Improved password handling and transparency. By @samuel-w
    (#550)
  * Fix file selector dialog (#764)
  * Fix label colour not changing on dark mode change.
    By @samuel-w (#757)
  * Cleanup database at exit, use write-ahead logging.
    By @samuel-w (#696)
  * Sort files in Extract dialog alphabetically. By @samuel-w
    (#741)
  * Update check message on completion. By @samuel-w (#672)
  * Give error message on unmount failure. By @samuel-w (#668)
  * Improve exception handling. By @samuel-w (#628)
  * Ensure system keychain is unlocked before using it.
    By @samuel-w (#607)
  * Create backups from command line using existing profiles.
    By @samuel-w (#556)
  * Diff: better color of added and removed text.
    By @samuel-w (#649)
  * Add KWallet support. By @samuel-w (#540)
  * Correctly sort archives by size. By @samuel-w (#729)
  * Refactoring: remove last exec_, add tests, retain archive
    deletion message. By @samuel-w (#722)
  * Refactor add and rename to not use exec_. By @samuel-w (#721)
  * Improve autostart test. By @samuel-w (#720)
  * Limit network checking to only remote repos.
    By @samuel-w (#701)
  * Re-enable SSH host key checking for all operations except
    when adding repo (#717)
  * Add valid copyright header to Johan Rade's work.
    By @sten0 (#716)
  * Display number of files and sizes in source tab.
    By @XXXBold (#617)
  * Translate category labels for log output. By @samuel-w (#683)
  * Fix crash when window is closed while thread running.
    By @samuel-w (#685)
  * Reuse existing window when bringing to front. (#674)
  * Set icon through code (#676)
  * Show dialog on copy failure. By @samuel-w (#647)
  * Get keyring at runtime. By @samuel-w (#635)
  * Save correct window size. By @samuel-w (#661)
  * Properly catch DBusException. By @samuel-w (#670)
  * Set application name (#666)
  * Set all icons to same height (#660)
  * Replace Borg version with install method in bug report (#657)
  * Reduce icon memory usage. By @samuel-w (#656)
  * Cancel Borg thread at end of test. (#648)
- Update to version 0.7.1
  * Fix crash when GUI is opened via tray icon while a backup is
    running. By @samuel-w
  * Use single tray icon for light and dark themes. By @samuel-w
  * Use naked en locale instead of en_US. Fixes #623 (#626)
  * Remove 'Backup in progress' when re-opening window (#627)
    by @samuel-w
  * Avoid formatting date and time twice. Fixes #624 (#625)
  * Handle DBusException in NetworkManagerMonitor (#636)
    by @ktosiek
  * Initialize the network status monitor lazily (#634)
    by @ktosiek
- Update to version 0.7.0
  * Proper dark style support and removal of style hacks
  * Prevent duplicate repos from being added. Fixes #473
  * New setting to store previously selected profile. Fixes #241
  * Add error message when Borg binary is missing. Fixes #333
  * Notify of errors after system tray backup run. Fixes #105
  * Linux Desktop file: fix syntax, enhance Categories,
    add a Keyword. By @sten0
  * Fix parsing "changed link" lines. By @ktosiek
  * Add paste button for source paths. By @samuel-w
  * Prevent profiles from sharing the same name. Fixes #512.
    By @samuel-w
  * Add copy button for repository URLs/paths. Fixes #409.
    By @samuel-w
  * Move socket file from state-dir to tmp-dir. Fixes #513
  * Save main window state before closing. By @Hofer-Julian
  * Parse owner changes in borg diff results. By @ktosiek
  * Fix tests for PyQt 5.15 on Linux. By @samuel-w
  * Refactor Linux autostart by @samuel-w
  * Add correct icon for notifications on Linux. By @Hofer-Julian
  * Newer macOS deploy target for detecting dark mode. Fixes #575
  * Enable multiselection on source list by @XXXBold
  * Allow selection of multiple files by @samuel-w for #593
  * Prevent running backups on metered network. By @ktosiek
  * Add autosorting for source list. By @samuel-w
  * Use dt.now everywhere. By @samuel-w
  * Improved progress updates. By @SergioRAgostinho
- Remove patch which is not needed anymore:
  * fix-qtoolbox-titles.patch</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1614081600">- Update to version 0.7.3
  * Possible Breaking Changes
    + This removes the profile_slug from the default archive name
    and prefix. This change only applies to new backup profiles.
    So if you use the same repo for multiple projects on the
    same hostname, be sure to check your prune prefix as well.
    The new default archive name is:
    {hostname}-{now:%Y-%m-%d-%H%M%S}
  * New Features
    + Add mount option override checkbox. By @samuel-w (#682)
    + Add custom options to borg create command.
    By @samuel-w (#677)
    + Add rename action. By @samuel-w and @m3nu (#864)
    + Give option to break repository lock. By @samuel-w (#863)
  * Bugfixes
    + Remove support for deprecated macOS XML wifi list. (#868)
    + Catch more possible SSH key parsing errors. (#789)
    + Improve cancelling Borg process (#786)
    + Add QTimer to ensure background jobs are scheduled correctly.
    (#780)
    + Fix corrupted archive table list during refresh if sorting
    is enabled. By @rblenis (#784)
- Rebase patch:
  * fix-dependencies.patch</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1614513600">- update to 0.7.4:
  * Fix log table sorting.
  * Improve kwallet verification.
  * Remove failing SSH key check
  * Avoid segfault when quitting</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1618574400">- Update to version 0.7.5
  * Bug fixes and improvements
    + With this release you can disable the system keychain and
    just keep the repo passphrase in Vorta's settings DB
    (slightly less secure).
    + Also, keyring is now picked by assigning a score. So it will
    prioritized KWallet on KDE and Secret Storage on Gnome.
    + Use json mode to list archive files. By @rblenis (#885)
    Add untranslated strings. By @samuel-w (#902)</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1625572800">- Update to 0.7.7
  * New features:
    + Import/export settings (or bootstrap with default config)
    + Add support for 'diff --json-lines'
  * Bugfixes and refinements:
    + Alert when deleting last profile
    + Put folders first in diff/extract
    + Skip sizing folders on permission error
    + Called set_progress() on wrong class
    + Fix color for eye icon when masking password
    + Refuse to add inaccessible folders, warn on inaccessible files during backup
    + Open window on left-click on Linux
    + Fix issue #940 - KeyError in get_dict_from_list
    + Correctly rename profile in dropdown
    + Fix 'list --json-lines' command when only a single result line is output</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1630411200">- Update to 0.7.8:
  * Fix double call to on_user_click
  * Handle malformed .vorta-init.json on import</changelog>
  <changelog author="pgajdos@suse.com" date="1639137600">- pytest-runner is deprecated</changelog>
  <changelog author="Marcus Hann &lt;marcus@hhra.uk&gt;" date="1640779200">- Update to 0.8.2
  * Refactor Borg job scheduling. By @bastiencyr
  * Remove APScheduler dependency and use QTimer directly
  * Python 3.10 compatibility
- Update to 0.8.1
  * Use native threading module in job_manager. (#1096)
  * Fix next_job timer logic. By @jayeclark (#1100)
  * Remove jobs if scheduler setting is changed. (#1105)
  * Remove jobs before deleting profile (#1107)
  * Make sure correct sources are removed (#1110)
  * Address DB Locking issues (#1109)
  * Refactor: Split up vorta/models.py (#1112)
  * Notify on failed repo checks (#1113)
- Update to 0.8.0
  * Implement multiple queues. By @bastiencyr (#1045)
  * Show backup size with excludes applied. By @freder (#961)
  * Remove APScheduler dependency, Python 3.10 support (#1086)
  * Add tooltip containing path name. By @XXXBold (#1072)
  * Increases the maximum allowed number in prune keep. By @lstrz (#1089)
  * Always handle autosave setting when saving SettingsModel. By @phihos (#1093)</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1644235200">- Update to 0.8.3
  * Distinguish different errors in case borg check failed.
    By @real-yfprojects (#1163)
  * Close SVG files after reading. By @hroncok (#1135)
  * Shows folder sizes in diff view. By @skrap (#1156)
  * Ignore encoding errors in Wifi names (darwin) (#1158)
  * Upgrade llfuse for Flatpak (#1179)
  * Bump macOS updater to Sparkle 2.0 (#1186)
  * Minor test fixes (#1150, #1147, #1146)
- Rebase patch:
  * fix-dependencies.patch</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1666699200">- Add patch to fix vorta using datetime.fromisoformat which is not
  available in python3.6 (boo#1199080):
  * fix-fromisoformat.patch</changelog>
</package>
<package pkgid="c21a38960c9263267e26994fa7ff00e879f9460746defd1c1c065191f62e97dd" name="warewulf4" arch="aarch64">
  <version epoch="0" ver="4.3.0" rel="bp154.2.3.1"/>
  <changelog author="Christian Goll &lt;cgoll@suse.com&gt;" date="1626868800">- inital commit of warewulf4 which is a rewrite of warewulf in
  go thus the new name
  * including vector.tar.gz which are the deps
  * warewulf.conf is the SUSE specific configuration file
- patches with new functionality, might be included upstream
  * bash_completion.patch
  * build-position-independent-code.patch
  * install-creates-needed-dirs-and-checks-for-systemd.patch
  * LocalStateDir-is-configureable-to-meet-FHS.patch
  * added-wicked-xml-configuration.patch
  * added-configureable-ipmiinterface-used-by-ipmitool.patch
  * preserve-ownership-for-overlays.patch</changelog>
  <changelog author="Christian Goll &lt;cgoll@suse.com&gt;" date="1628596800">- updated to warewulf-v4.1.0 prerelease instead of HEAD</changelog>
  <changelog author="Christian Goll &lt;cgoll@suse.com&gt;" date="1630411200">- updating to actual HEAD on github, as this version incorporates
  some of the patches
- removed patches which are now in upstream:
  * bash_completion.patch
  * build-position-independent-code.patch
  * install-creates-needed-dirs-and-checks-for-systemd.patch
  * added-wicked-xml-configuration.patch
  * added-configureable-ipmiinterface-used-by-ipmitool.patch
  * preserve-ownership-for-overlays.patch
- added patch:
  * added-function-CopyUIDGID-for-file-file-ownerships.patch</changelog>
  <changelog author="Christian Goll &lt;cgoll@suse.com&gt;" date="1633348800">- updated to warewulf-v4.2.0rc1 with following new features:
  * bash_completion can add nodes, container and other stuff
  * kernels can now have arbitray names
  * using syslog instead of logfile
  * kernels get uncompresses on import
- Utilize sysuser infrastructure to set user/group warewulf</changelog>
  <changelog author="Christian Goll &lt;cgoll@suse.com&gt;" date="1634212800">- fixed permissions in overlays</changelog>
  <changelog author="Christian Goll &lt;cgoll@suse.com&gt;" date="1635422400">- updated to findal release 4.2.0 with following bugs fix
  * kernel modules are imported with the right path</changelog>
  <changelog author="Christian Goll &lt;cgoll@suse.com&gt;" date="1649937600">- update to v4.3.0rc2 with following major changes:
  * Provision interface is not tied to 'eth0' any more. The provision interface
    must be named 'default' now. The file `nodes.yaml' must be changed accordingly.
  * Creating of '/etc/exports' can now be disabled, so that wwctl configure -a
    wont overwrite a existing '/etc/exports'.
  * All configurations files for the host (/etc/exports, /etc/dhcpd.conf,
    /etc/hosts) are now populated from the
    (OVERLAYDIR/host/etc/{exports|dhcpd|hosts}.ww . Also other configuration
    files like prometheus.yml.ww or slurm.conf.ww which depend on the cluster
    nodes can be placed. Also the new templated functions {{ abort }},
    {{ IncludeBlock }} abd {{ no_backup }} are allowed now.
  * nodes and profiles can now have multiple system and runtime overlays, as a
    comma separated list.
  * The overlays of the profile and the nodes are combined.
  * Simple ipv6 support is now enabled. In warewulf.conf the option
    ipaddr6/Ipv6net must be set to enable ipv6. If enabled on of these options
    is set a node will get a derived ipv6 in the scheme ipv6net:ipaddr4. This
    address can also be overwritten for every node
  * Multiple files can now created from a single template.ww file with the {{ file FILENAME }}
    command in the template. The command is expanded to the magic template command
    {{ /* file FILENAME */}} which is picked up by wwctl and everything which comes after this
    magic comment will be written to the file FILENAME. This mechanism is leveraged in the
    configuration files for the network, see ifcfg.xml.ww and ifcgf.ww.
  * Networks can now have arbitrary keys value pairs in the profiles and on the node, so that
    things like bridges and mtu sizes can be set
  * The yaml format for nodes has now sub-keys for ipmi and kernel, old nodes.conf files have to
    to be changed accordingly
  * uids and gids of a container now get synced at import time, so that at least users with the
    same name have the same uid. This is not necessarily needed for warewulf, but services like
    munge.
  * backward compatibility for nodes.conf
  * added file:// uri for importing archived containers
- removed LocalStateDir-is-configureable-to-meet-FHS.patch as implemented upstream</changelog>
  <changelog author="Christian Goll &lt;cgoll@suse.com&gt;" date="1654862400">- update to 4.3.0rc6 what should the final release candidate
  * using compressed images again, as PXE else would fail</changelog>
  <changelog author="Christian Goll &lt;cgoll@suse.com&gt;" date="1655726400">- updated to 4.3.0
  * fixed bug which for single node profile set</changelog>
  <changelog author="Christian Goll &lt;cgoll@suse.com&gt;" date="1655812800">- fixed symlink dhcpd.conf collision</changelog>
</package>
<package pkgid="f35b145a3594fdc00df7d8e9e4a93610cf053398b900adb4342d6afd40d2168a" name="warewulf4" arch="src">
  <version epoch="0" ver="4.3.0" rel="bp154.2.3.1"/>
  <changelog author="Christian Goll &lt;cgoll@suse.com&gt;" date="1626868800">- inital commit of warewulf4 which is a rewrite of warewulf in
  go thus the new name
  * including vector.tar.gz which are the deps
  * warewulf.conf is the SUSE specific configuration file
- patches with new functionality, might be included upstream
  * bash_completion.patch
  * build-position-independent-code.patch
  * install-creates-needed-dirs-and-checks-for-systemd.patch
  * LocalStateDir-is-configureable-to-meet-FHS.patch
  * added-wicked-xml-configuration.patch
  * added-configureable-ipmiinterface-used-by-ipmitool.patch
  * preserve-ownership-for-overlays.patch</changelog>
  <changelog author="Christian Goll &lt;cgoll@suse.com&gt;" date="1628596800">- updated to warewulf-v4.1.0 prerelease instead of HEAD</changelog>
  <changelog author="Christian Goll &lt;cgoll@suse.com&gt;" date="1630411200">- updating to actual HEAD on github, as this version incorporates
  some of the patches
- removed patches which are now in upstream:
  * bash_completion.patch
  * build-position-independent-code.patch
  * install-creates-needed-dirs-and-checks-for-systemd.patch
  * added-wicked-xml-configuration.patch
  * added-configureable-ipmiinterface-used-by-ipmitool.patch
  * preserve-ownership-for-overlays.patch
- added patch:
  * added-function-CopyUIDGID-for-file-file-ownerships.patch</changelog>
  <changelog author="Christian Goll &lt;cgoll@suse.com&gt;" date="1633348800">- updated to warewulf-v4.2.0rc1 with following new features:
  * bash_completion can add nodes, container and other stuff
  * kernels can now have arbitray names
  * using syslog instead of logfile
  * kernels get uncompresses on import
- Utilize sysuser infrastructure to set user/group warewulf</changelog>
  <changelog author="Christian Goll &lt;cgoll@suse.com&gt;" date="1634212800">- fixed permissions in overlays</changelog>
  <changelog author="Christian Goll &lt;cgoll@suse.com&gt;" date="1635422400">- updated to findal release 4.2.0 with following bugs fix
  * kernel modules are imported with the right path</changelog>
  <changelog author="Christian Goll &lt;cgoll@suse.com&gt;" date="1649937600">- update to v4.3.0rc2 with following major changes:
  * Provision interface is not tied to 'eth0' any more. The provision interface
    must be named 'default' now. The file `nodes.yaml' must be changed accordingly.
  * Creating of '/etc/exports' can now be disabled, so that wwctl configure -a
    wont overwrite a existing '/etc/exports'.
  * All configurations files for the host (/etc/exports, /etc/dhcpd.conf,
    /etc/hosts) are now populated from the
    (OVERLAYDIR/host/etc/{exports|dhcpd|hosts}.ww . Also other configuration
    files like prometheus.yml.ww or slurm.conf.ww which depend on the cluster
    nodes can be placed. Also the new templated functions {{ abort }},
    {{ IncludeBlock }} abd {{ no_backup }} are allowed now.
  * nodes and profiles can now have multiple system and runtime overlays, as a
    comma separated list.
  * The overlays of the profile and the nodes are combined.
  * Simple ipv6 support is now enabled. In warewulf.conf the option
    ipaddr6/Ipv6net must be set to enable ipv6. If enabled on of these options
    is set a node will get a derived ipv6 in the scheme ipv6net:ipaddr4. This
    address can also be overwritten for every node
  * Multiple files can now created from a single template.ww file with the {{ file FILENAME }}
    command in the template. The command is expanded to the magic template command
    {{ /* file FILENAME */}} which is picked up by wwctl and everything which comes after this
    magic comment will be written to the file FILENAME. This mechanism is leveraged in the
    configuration files for the network, see ifcfg.xml.ww and ifcgf.ww.
  * Networks can now have arbitrary keys value pairs in the profiles and on the node, so that
    things like bridges and mtu sizes can be set
  * The yaml format for nodes has now sub-keys for ipmi and kernel, old nodes.conf files have to
    to be changed accordingly
  * uids and gids of a container now get synced at import time, so that at least users with the
    same name have the same uid. This is not necessarily needed for warewulf, but services like
    munge.
  * backward compatibility for nodes.conf
  * added file:// uri for importing archived containers
- removed LocalStateDir-is-configureable-to-meet-FHS.patch as implemented upstream</changelog>
  <changelog author="Christian Goll &lt;cgoll@suse.com&gt;" date="1654862400">- update to 4.3.0rc6 what should the final release candidate
  * using compressed images again, as PXE else would fail</changelog>
  <changelog author="Christian Goll &lt;cgoll@suse.com&gt;" date="1655726400">- updated to 4.3.0
  * fixed bug which for single node profile set</changelog>
  <changelog author="Christian Goll &lt;cgoll@suse.com&gt;" date="1655812800">- fixed symlink dhcpd.conf collision</changelog>
</package>
<package pkgid="215a0f1af36b27617ff4c12fa9a280d3b9caf47f0d1dd20a3e4693b35236c65c" name="warewulf4" arch="x86_64">
  <version epoch="0" ver="4.3.0" rel="bp154.2.3.1"/>
  <changelog author="Christian Goll &lt;cgoll@suse.com&gt;" date="1626868800">- inital commit of warewulf4 which is a rewrite of warewulf in
  go thus the new name
  * including vector.tar.gz which are the deps
  * warewulf.conf is the SUSE specific configuration file
- patches with new functionality, might be included upstream
  * bash_completion.patch
  * build-position-independent-code.patch
  * install-creates-needed-dirs-and-checks-for-systemd.patch
  * LocalStateDir-is-configureable-to-meet-FHS.patch
  * added-wicked-xml-configuration.patch
  * added-configureable-ipmiinterface-used-by-ipmitool.patch
  * preserve-ownership-for-overlays.patch</changelog>
  <changelog author="Christian Goll &lt;cgoll@suse.com&gt;" date="1628596800">- updated to warewulf-v4.1.0 prerelease instead of HEAD</changelog>
  <changelog author="Christian Goll &lt;cgoll@suse.com&gt;" date="1630411200">- updating to actual HEAD on github, as this version incorporates
  some of the patches
- removed patches which are now in upstream:
  * bash_completion.patch
  * build-position-independent-code.patch
  * install-creates-needed-dirs-and-checks-for-systemd.patch
  * added-wicked-xml-configuration.patch
  * added-configureable-ipmiinterface-used-by-ipmitool.patch
  * preserve-ownership-for-overlays.patch
- added patch:
  * added-function-CopyUIDGID-for-file-file-ownerships.patch</changelog>
  <changelog author="Christian Goll &lt;cgoll@suse.com&gt;" date="1633348800">- updated to warewulf-v4.2.0rc1 with following new features:
  * bash_completion can add nodes, container and other stuff
  * kernels can now have arbitray names
  * using syslog instead of logfile
  * kernels get uncompresses on import
- Utilize sysuser infrastructure to set user/group warewulf</changelog>
  <changelog author="Christian Goll &lt;cgoll@suse.com&gt;" date="1634212800">- fixed permissions in overlays</changelog>
  <changelog author="Christian Goll &lt;cgoll@suse.com&gt;" date="1635422400">- updated to findal release 4.2.0 with following bugs fix
  * kernel modules are imported with the right path</changelog>
  <changelog author="Christian Goll &lt;cgoll@suse.com&gt;" date="1649937600">- update to v4.3.0rc2 with following major changes:
  * Provision interface is not tied to 'eth0' any more. The provision interface
    must be named 'default' now. The file `nodes.yaml' must be changed accordingly.
  * Creating of '/etc/exports' can now be disabled, so that wwctl configure -a
    wont overwrite a existing '/etc/exports'.
  * All configurations files for the host (/etc/exports, /etc/dhcpd.conf,
    /etc/hosts) are now populated from the
    (OVERLAYDIR/host/etc/{exports|dhcpd|hosts}.ww . Also other configuration
    files like prometheus.yml.ww or slurm.conf.ww which depend on the cluster
    nodes can be placed. Also the new templated functions {{ abort }},
    {{ IncludeBlock }} abd {{ no_backup }} are allowed now.
  * nodes and profiles can now have multiple system and runtime overlays, as a
    comma separated list.
  * The overlays of the profile and the nodes are combined.
  * Simple ipv6 support is now enabled. In warewulf.conf the option
    ipaddr6/Ipv6net must be set to enable ipv6. If enabled on of these options
    is set a node will get a derived ipv6 in the scheme ipv6net:ipaddr4. This
    address can also be overwritten for every node
  * Multiple files can now created from a single template.ww file with the {{ file FILENAME }}
    command in the template. The command is expanded to the magic template command
    {{ /* file FILENAME */}} which is picked up by wwctl and everything which comes after this
    magic comment will be written to the file FILENAME. This mechanism is leveraged in the
    configuration files for the network, see ifcfg.xml.ww and ifcgf.ww.
  * Networks can now have arbitrary keys value pairs in the profiles and on the node, so that
    things like bridges and mtu sizes can be set
  * The yaml format for nodes has now sub-keys for ipmi and kernel, old nodes.conf files have to
    to be changed accordingly
  * uids and gids of a container now get synced at import time, so that at least users with the
    same name have the same uid. This is not necessarily needed for warewulf, but services like
    munge.
  * backward compatibility for nodes.conf
  * added file:// uri for importing archived containers
- removed LocalStateDir-is-configureable-to-meet-FHS.patch as implemented upstream</changelog>
  <changelog author="Christian Goll &lt;cgoll@suse.com&gt;" date="1654862400">- update to 4.3.0rc6 what should the final release candidate
  * using compressed images again, as PXE else would fail</changelog>
  <changelog author="Christian Goll &lt;cgoll@suse.com&gt;" date="1655726400">- updated to 4.3.0
  * fixed bug which for single node profile set</changelog>
  <changelog author="Christian Goll &lt;cgoll@suse.com&gt;" date="1655812800">- fixed symlink dhcpd.conf collision</changelog>
</package>
<package pkgid="70c5fec01503b946480f7fb209317e2f3dfa33824af50503edb15beb27abba4a" name="warewulf4-ipxe" arch="noarch">
  <version epoch="0" ver="4.3.0" rel="bp154.2.3.1"/>
  <changelog author="Christian Goll &lt;cgoll@suse.com&gt;" date="1626868800">- inital commit of warewulf4 which is a rewrite of warewulf in
  go thus the new name
  * including vector.tar.gz which are the deps
  * warewulf.conf is the SUSE specific configuration file
- patches with new functionality, might be included upstream
  * bash_completion.patch
  * build-position-independent-code.patch
  * install-creates-needed-dirs-and-checks-for-systemd.patch
  * LocalStateDir-is-configureable-to-meet-FHS.patch
  * added-wicked-xml-configuration.patch
  * added-configureable-ipmiinterface-used-by-ipmitool.patch
  * preserve-ownership-for-overlays.patch</changelog>
  <changelog author="Christian Goll &lt;cgoll@suse.com&gt;" date="1628596800">- updated to warewulf-v4.1.0 prerelease instead of HEAD</changelog>
  <changelog author="Christian Goll &lt;cgoll@suse.com&gt;" date="1630411200">- updating to actual HEAD on github, as this version incorporates
  some of the patches
- removed patches which are now in upstream:
  * bash_completion.patch
  * build-position-independent-code.patch
  * install-creates-needed-dirs-and-checks-for-systemd.patch
  * added-wicked-xml-configuration.patch
  * added-configureable-ipmiinterface-used-by-ipmitool.patch
  * preserve-ownership-for-overlays.patch
- added patch:
  * added-function-CopyUIDGID-for-file-file-ownerships.patch</changelog>
  <changelog author="Christian Goll &lt;cgoll@suse.com&gt;" date="1633348800">- updated to warewulf-v4.2.0rc1 with following new features:
  * bash_completion can add nodes, container and other stuff
  * kernels can now have arbitray names
  * using syslog instead of logfile
  * kernels get uncompresses on import
- Utilize sysuser infrastructure to set user/group warewulf</changelog>
  <changelog author="Christian Goll &lt;cgoll@suse.com&gt;" date="1634212800">- fixed permissions in overlays</changelog>
  <changelog author="Christian Goll &lt;cgoll@suse.com&gt;" date="1635422400">- updated to findal release 4.2.0 with following bugs fix
  * kernel modules are imported with the right path</changelog>
  <changelog author="Christian Goll &lt;cgoll@suse.com&gt;" date="1649937600">- update to v4.3.0rc2 with following major changes:
  * Provision interface is not tied to 'eth0' any more. The provision interface
    must be named 'default' now. The file `nodes.yaml' must be changed accordingly.
  * Creating of '/etc/exports' can now be disabled, so that wwctl configure -a
    wont overwrite a existing '/etc/exports'.
  * All configurations files for the host (/etc/exports, /etc/dhcpd.conf,
    /etc/hosts) are now populated from the
    (OVERLAYDIR/host/etc/{exports|dhcpd|hosts}.ww . Also other configuration
    files like prometheus.yml.ww or slurm.conf.ww which depend on the cluster
    nodes can be placed. Also the new templated functions {{ abort }},
    {{ IncludeBlock }} abd {{ no_backup }} are allowed now.
  * nodes and profiles can now have multiple system and runtime overlays, as a
    comma separated list.
  * The overlays of the profile and the nodes are combined.
  * Simple ipv6 support is now enabled. In warewulf.conf the option
    ipaddr6/Ipv6net must be set to enable ipv6. If enabled on of these options
    is set a node will get a derived ipv6 in the scheme ipv6net:ipaddr4. This
    address can also be overwritten for every node
  * Multiple files can now created from a single template.ww file with the {{ file FILENAME }}
    command in the template. The command is expanded to the magic template command
    {{ /* file FILENAME */}} which is picked up by wwctl and everything which comes after this
    magic comment will be written to the file FILENAME. This mechanism is leveraged in the
    configuration files for the network, see ifcfg.xml.ww and ifcgf.ww.
  * Networks can now have arbitrary keys value pairs in the profiles and on the node, so that
    things like bridges and mtu sizes can be set
  * The yaml format for nodes has now sub-keys for ipmi and kernel, old nodes.conf files have to
    to be changed accordingly
  * uids and gids of a container now get synced at import time, so that at least users with the
    same name have the same uid. This is not necessarily needed for warewulf, but services like
    munge.
  * backward compatibility for nodes.conf
  * added file:// uri for importing archived containers
- removed LocalStateDir-is-configureable-to-meet-FHS.patch as implemented upstream</changelog>
  <changelog author="Christian Goll &lt;cgoll@suse.com&gt;" date="1654862400">- update to 4.3.0rc6 what should the final release candidate
  * using compressed images again, as PXE else would fail</changelog>
  <changelog author="Christian Goll &lt;cgoll@suse.com&gt;" date="1655726400">- updated to 4.3.0
  * fixed bug which for single node profile set</changelog>
  <changelog author="Christian Goll &lt;cgoll@suse.com&gt;" date="1655812800">- fixed symlink dhcpd.conf collision</changelog>
</package>
<package pkgid="0aa85a60e0b42a7effd8d99cebb6f0be8a9768f4d8921321d75c287824e3473c" name="warewulf4-overlay" arch="aarch64">
  <version epoch="0" ver="4.3.0" rel="bp154.2.3.1"/>
  <changelog author="Christian Goll &lt;cgoll@suse.com&gt;" date="1626868800">- inital commit of warewulf4 which is a rewrite of warewulf in
  go thus the new name
  * including vector.tar.gz which are the deps
  * warewulf.conf is the SUSE specific configuration file
- patches with new functionality, might be included upstream
  * bash_completion.patch
  * build-position-independent-code.patch
  * install-creates-needed-dirs-and-checks-for-systemd.patch
  * LocalStateDir-is-configureable-to-meet-FHS.patch
  * added-wicked-xml-configuration.patch
  * added-configureable-ipmiinterface-used-by-ipmitool.patch
  * preserve-ownership-for-overlays.patch</changelog>
  <changelog author="Christian Goll &lt;cgoll@suse.com&gt;" date="1628596800">- updated to warewulf-v4.1.0 prerelease instead of HEAD</changelog>
  <changelog author="Christian Goll &lt;cgoll@suse.com&gt;" date="1630411200">- updating to actual HEAD on github, as this version incorporates
  some of the patches
- removed patches which are now in upstream:
  * bash_completion.patch
  * build-position-independent-code.patch
  * install-creates-needed-dirs-and-checks-for-systemd.patch
  * added-wicked-xml-configuration.patch
  * added-configureable-ipmiinterface-used-by-ipmitool.patch
  * preserve-ownership-for-overlays.patch
- added patch:
  * added-function-CopyUIDGID-for-file-file-ownerships.patch</changelog>
  <changelog author="Christian Goll &lt;cgoll@suse.com&gt;" date="1633348800">- updated to warewulf-v4.2.0rc1 with following new features:
  * bash_completion can add nodes, container and other stuff
  * kernels can now have arbitray names
  * using syslog instead of logfile
  * kernels get uncompresses on import
- Utilize sysuser infrastructure to set user/group warewulf</changelog>
  <changelog author="Christian Goll &lt;cgoll@suse.com&gt;" date="1634212800">- fixed permissions in overlays</changelog>
  <changelog author="Christian Goll &lt;cgoll@suse.com&gt;" date="1635422400">- updated to findal release 4.2.0 with following bugs fix
  * kernel modules are imported with the right path</changelog>
  <changelog author="Christian Goll &lt;cgoll@suse.com&gt;" date="1649937600">- update to v4.3.0rc2 with following major changes:
  * Provision interface is not tied to 'eth0' any more. The provision interface
    must be named 'default' now. The file `nodes.yaml' must be changed accordingly.
  * Creating of '/etc/exports' can now be disabled, so that wwctl configure -a
    wont overwrite a existing '/etc/exports'.
  * All configurations files for the host (/etc/exports, /etc/dhcpd.conf,
    /etc/hosts) are now populated from the
    (OVERLAYDIR/host/etc/{exports|dhcpd|hosts}.ww . Also other configuration
    files like prometheus.yml.ww or slurm.conf.ww which depend on the cluster
    nodes can be placed. Also the new templated functions {{ abort }},
    {{ IncludeBlock }} abd {{ no_backup }} are allowed now.
  * nodes and profiles can now have multiple system and runtime overlays, as a
    comma separated list.
  * The overlays of the profile and the nodes are combined.
  * Simple ipv6 support is now enabled. In warewulf.conf the option
    ipaddr6/Ipv6net must be set to enable ipv6. If enabled on of these options
    is set a node will get a derived ipv6 in the scheme ipv6net:ipaddr4. This
    address can also be overwritten for every node
  * Multiple files can now created from a single template.ww file with the {{ file FILENAME }}
    command in the template. The command is expanded to the magic template command
    {{ /* file FILENAME */}} which is picked up by wwctl and everything which comes after this
    magic comment will be written to the file FILENAME. This mechanism is leveraged in the
    configuration files for the network, see ifcfg.xml.ww and ifcgf.ww.
  * Networks can now have arbitrary keys value pairs in the profiles and on the node, so that
    things like bridges and mtu sizes can be set
  * The yaml format for nodes has now sub-keys for ipmi and kernel, old nodes.conf files have to
    to be changed accordingly
  * uids and gids of a container now get synced at import time, so that at least users with the
    same name have the same uid. This is not necessarily needed for warewulf, but services like
    munge.
  * backward compatibility for nodes.conf
  * added file:// uri for importing archived containers
- removed LocalStateDir-is-configureable-to-meet-FHS.patch as implemented upstream</changelog>
  <changelog author="Christian Goll &lt;cgoll@suse.com&gt;" date="1654862400">- update to 4.3.0rc6 what should the final release candidate
  * using compressed images again, as PXE else would fail</changelog>
  <changelog author="Christian Goll &lt;cgoll@suse.com&gt;" date="1655726400">- updated to 4.3.0
  * fixed bug which for single node profile set</changelog>
  <changelog author="Christian Goll &lt;cgoll@suse.com&gt;" date="1655812800">- fixed symlink dhcpd.conf collision</changelog>
</package>
<package pkgid="da76d7f695cd4912a605e1f40c277fb17ee71c4cb6ad4760270c9583370f0891" name="warewulf4-overlay" arch="x86_64">
  <version epoch="0" ver="4.3.0" rel="bp154.2.3.1"/>
  <changelog author="Christian Goll &lt;cgoll@suse.com&gt;" date="1626868800">- inital commit of warewulf4 which is a rewrite of warewulf in
  go thus the new name
  * including vector.tar.gz which are the deps
  * warewulf.conf is the SUSE specific configuration file
- patches with new functionality, might be included upstream
  * bash_completion.patch
  * build-position-independent-code.patch
  * install-creates-needed-dirs-and-checks-for-systemd.patch
  * LocalStateDir-is-configureable-to-meet-FHS.patch
  * added-wicked-xml-configuration.patch
  * added-configureable-ipmiinterface-used-by-ipmitool.patch
  * preserve-ownership-for-overlays.patch</changelog>
  <changelog author="Christian Goll &lt;cgoll@suse.com&gt;" date="1628596800">- updated to warewulf-v4.1.0 prerelease instead of HEAD</changelog>
  <changelog author="Christian Goll &lt;cgoll@suse.com&gt;" date="1630411200">- updating to actual HEAD on github, as this version incorporates
  some of the patches
- removed patches which are now in upstream:
  * bash_completion.patch
  * build-position-independent-code.patch
  * install-creates-needed-dirs-and-checks-for-systemd.patch
  * added-wicked-xml-configuration.patch
  * added-configureable-ipmiinterface-used-by-ipmitool.patch
  * preserve-ownership-for-overlays.patch
- added patch:
  * added-function-CopyUIDGID-for-file-file-ownerships.patch</changelog>
  <changelog author="Christian Goll &lt;cgoll@suse.com&gt;" date="1633348800">- updated to warewulf-v4.2.0rc1 with following new features:
  * bash_completion can add nodes, container and other stuff
  * kernels can now have arbitray names
  * using syslog instead of logfile
  * kernels get uncompresses on import
- Utilize sysuser infrastructure to set user/group warewulf</changelog>
  <changelog author="Christian Goll &lt;cgoll@suse.com&gt;" date="1634212800">- fixed permissions in overlays</changelog>
  <changelog author="Christian Goll &lt;cgoll@suse.com&gt;" date="1635422400">- updated to findal release 4.2.0 with following bugs fix
  * kernel modules are imported with the right path</changelog>
  <changelog author="Christian Goll &lt;cgoll@suse.com&gt;" date="1649937600">- update to v4.3.0rc2 with following major changes:
  * Provision interface is not tied to 'eth0' any more. The provision interface
    must be named 'default' now. The file `nodes.yaml' must be changed accordingly.
  * Creating of '/etc/exports' can now be disabled, so that wwctl configure -a
    wont overwrite a existing '/etc/exports'.
  * All configurations files for the host (/etc/exports, /etc/dhcpd.conf,
    /etc/hosts) are now populated from the
    (OVERLAYDIR/host/etc/{exports|dhcpd|hosts}.ww . Also other configuration
    files like prometheus.yml.ww or slurm.conf.ww which depend on the cluster
    nodes can be placed. Also the new templated functions {{ abort }},
    {{ IncludeBlock }} abd {{ no_backup }} are allowed now.
  * nodes and profiles can now have multiple system and runtime overlays, as a
    comma separated list.
  * The overlays of the profile and the nodes are combined.
  * Simple ipv6 support is now enabled. In warewulf.conf the option
    ipaddr6/Ipv6net must be set to enable ipv6. If enabled on of these options
    is set a node will get a derived ipv6 in the scheme ipv6net:ipaddr4. This
    address can also be overwritten for every node
  * Multiple files can now created from a single template.ww file with the {{ file FILENAME }}
    command in the template. The command is expanded to the magic template command
    {{ /* file FILENAME */}} which is picked up by wwctl and everything which comes after this
    magic comment will be written to the file FILENAME. This mechanism is leveraged in the
    configuration files for the network, see ifcfg.xml.ww and ifcgf.ww.
  * Networks can now have arbitrary keys value pairs in the profiles and on the node, so that
    things like bridges and mtu sizes can be set
  * The yaml format for nodes has now sub-keys for ipmi and kernel, old nodes.conf files have to
    to be changed accordingly
  * uids and gids of a container now get synced at import time, so that at least users with the
    same name have the same uid. This is not necessarily needed for warewulf, but services like
    munge.
  * backward compatibility for nodes.conf
  * added file:// uri for importing archived containers
- removed LocalStateDir-is-configureable-to-meet-FHS.patch as implemented upstream</changelog>
  <changelog author="Christian Goll &lt;cgoll@suse.com&gt;" date="1654862400">- update to 4.3.0rc6 what should the final release candidate
  * using compressed images again, as PXE else would fail</changelog>
  <changelog author="Christian Goll &lt;cgoll@suse.com&gt;" date="1655726400">- updated to 4.3.0
  * fixed bug which for single node profile set</changelog>
  <changelog author="Christian Goll &lt;cgoll@suse.com&gt;" date="1655812800">- fixed symlink dhcpd.conf collision</changelog>
</package>
<package pkgid="644ddbe449886c81befe76685499a091302fe64ef00261bc5014f7956dd4806e" name="warewulf4-slurm" arch="aarch64">
  <version epoch="0" ver="4.3.0" rel="bp154.2.3.1"/>
  <changelog author="Christian Goll &lt;cgoll@suse.com&gt;" date="1626868800">- inital commit of warewulf4 which is a rewrite of warewulf in
  go thus the new name
  * including vector.tar.gz which are the deps
  * warewulf.conf is the SUSE specific configuration file
- patches with new functionality, might be included upstream
  * bash_completion.patch
  * build-position-independent-code.patch
  * install-creates-needed-dirs-and-checks-for-systemd.patch
  * LocalStateDir-is-configureable-to-meet-FHS.patch
  * added-wicked-xml-configuration.patch
  * added-configureable-ipmiinterface-used-by-ipmitool.patch
  * preserve-ownership-for-overlays.patch</changelog>
  <changelog author="Christian Goll &lt;cgoll@suse.com&gt;" date="1628596800">- updated to warewulf-v4.1.0 prerelease instead of HEAD</changelog>
  <changelog author="Christian Goll &lt;cgoll@suse.com&gt;" date="1630411200">- updating to actual HEAD on github, as this version incorporates
  some of the patches
- removed patches which are now in upstream:
  * bash_completion.patch
  * build-position-independent-code.patch
  * install-creates-needed-dirs-and-checks-for-systemd.patch
  * added-wicked-xml-configuration.patch
  * added-configureable-ipmiinterface-used-by-ipmitool.patch
  * preserve-ownership-for-overlays.patch
- added patch:
  * added-function-CopyUIDGID-for-file-file-ownerships.patch</changelog>
  <changelog author="Christian Goll &lt;cgoll@suse.com&gt;" date="1633348800">- updated to warewulf-v4.2.0rc1 with following new features:
  * bash_completion can add nodes, container and other stuff
  * kernels can now have arbitray names
  * using syslog instead of logfile
  * kernels get uncompresses on import
- Utilize sysuser infrastructure to set user/group warewulf</changelog>
  <changelog author="Christian Goll &lt;cgoll@suse.com&gt;" date="1634212800">- fixed permissions in overlays</changelog>
  <changelog author="Christian Goll &lt;cgoll@suse.com&gt;" date="1635422400">- updated to findal release 4.2.0 with following bugs fix
  * kernel modules are imported with the right path</changelog>
  <changelog author="Christian Goll &lt;cgoll@suse.com&gt;" date="1649937600">- update to v4.3.0rc2 with following major changes:
  * Provision interface is not tied to 'eth0' any more. The provision interface
    must be named 'default' now. The file `nodes.yaml' must be changed accordingly.
  * Creating of '/etc/exports' can now be disabled, so that wwctl configure -a
    wont overwrite a existing '/etc/exports'.
  * All configurations files for the host (/etc/exports, /etc/dhcpd.conf,
    /etc/hosts) are now populated from the
    (OVERLAYDIR/host/etc/{exports|dhcpd|hosts}.ww . Also other configuration
    files like prometheus.yml.ww or slurm.conf.ww which depend on the cluster
    nodes can be placed. Also the new templated functions {{ abort }},
    {{ IncludeBlock }} abd {{ no_backup }} are allowed now.
  * nodes and profiles can now have multiple system and runtime overlays, as a
    comma separated list.
  * The overlays of the profile and the nodes are combined.
  * Simple ipv6 support is now enabled. In warewulf.conf the option
    ipaddr6/Ipv6net must be set to enable ipv6. If enabled on of these options
    is set a node will get a derived ipv6 in the scheme ipv6net:ipaddr4. This
    address can also be overwritten for every node
  * Multiple files can now created from a single template.ww file with the {{ file FILENAME }}
    command in the template. The command is expanded to the magic template command
    {{ /* file FILENAME */}} which is picked up by wwctl and everything which comes after this
    magic comment will be written to the file FILENAME. This mechanism is leveraged in the
    configuration files for the network, see ifcfg.xml.ww and ifcgf.ww.
  * Networks can now have arbitrary keys value pairs in the profiles and on the node, so that
    things like bridges and mtu sizes can be set
  * The yaml format for nodes has now sub-keys for ipmi and kernel, old nodes.conf files have to
    to be changed accordingly
  * uids and gids of a container now get synced at import time, so that at least users with the
    same name have the same uid. This is not necessarily needed for warewulf, but services like
    munge.
  * backward compatibility for nodes.conf
  * added file:// uri for importing archived containers
- removed LocalStateDir-is-configureable-to-meet-FHS.patch as implemented upstream</changelog>
  <changelog author="Christian Goll &lt;cgoll@suse.com&gt;" date="1654862400">- update to 4.3.0rc6 what should the final release candidate
  * using compressed images again, as PXE else would fail</changelog>
  <changelog author="Christian Goll &lt;cgoll@suse.com&gt;" date="1655726400">- updated to 4.3.0
  * fixed bug which for single node profile set</changelog>
  <changelog author="Christian Goll &lt;cgoll@suse.com&gt;" date="1655812800">- fixed symlink dhcpd.conf collision</changelog>
</package>
<package pkgid="4604c45088109399ee8f777a986ef1e3030759157ffa9f6226732f072b9df4e9" name="warewulf4-slurm" arch="x86_64">
  <version epoch="0" ver="4.3.0" rel="bp154.2.3.1"/>
  <changelog author="Christian Goll &lt;cgoll@suse.com&gt;" date="1626868800">- inital commit of warewulf4 which is a rewrite of warewulf in
  go thus the new name
  * including vector.tar.gz which are the deps
  * warewulf.conf is the SUSE specific configuration file
- patches with new functionality, might be included upstream
  * bash_completion.patch
  * build-position-independent-code.patch
  * install-creates-needed-dirs-and-checks-for-systemd.patch
  * LocalStateDir-is-configureable-to-meet-FHS.patch
  * added-wicked-xml-configuration.patch
  * added-configureable-ipmiinterface-used-by-ipmitool.patch
  * preserve-ownership-for-overlays.patch</changelog>
  <changelog author="Christian Goll &lt;cgoll@suse.com&gt;" date="1628596800">- updated to warewulf-v4.1.0 prerelease instead of HEAD</changelog>
  <changelog author="Christian Goll &lt;cgoll@suse.com&gt;" date="1630411200">- updating to actual HEAD on github, as this version incorporates
  some of the patches
- removed patches which are now in upstream:
  * bash_completion.patch
  * build-position-independent-code.patch
  * install-creates-needed-dirs-and-checks-for-systemd.patch
  * added-wicked-xml-configuration.patch
  * added-configureable-ipmiinterface-used-by-ipmitool.patch
  * preserve-ownership-for-overlays.patch
- added patch:
  * added-function-CopyUIDGID-for-file-file-ownerships.patch</changelog>
  <changelog author="Christian Goll &lt;cgoll@suse.com&gt;" date="1633348800">- updated to warewulf-v4.2.0rc1 with following new features:
  * bash_completion can add nodes, container and other stuff
  * kernels can now have arbitray names
  * using syslog instead of logfile
  * kernels get uncompresses on import
- Utilize sysuser infrastructure to set user/group warewulf</changelog>
  <changelog author="Christian Goll &lt;cgoll@suse.com&gt;" date="1634212800">- fixed permissions in overlays</changelog>
  <changelog author="Christian Goll &lt;cgoll@suse.com&gt;" date="1635422400">- updated to findal release 4.2.0 with following bugs fix
  * kernel modules are imported with the right path</changelog>
  <changelog author="Christian Goll &lt;cgoll@suse.com&gt;" date="1649937600">- update to v4.3.0rc2 with following major changes:
  * Provision interface is not tied to 'eth0' any more. The provision interface
    must be named 'default' now. The file `nodes.yaml' must be changed accordingly.
  * Creating of '/etc/exports' can now be disabled, so that wwctl configure -a
    wont overwrite a existing '/etc/exports'.
  * All configurations files for the host (/etc/exports, /etc/dhcpd.conf,
    /etc/hosts) are now populated from the
    (OVERLAYDIR/host/etc/{exports|dhcpd|hosts}.ww . Also other configuration
    files like prometheus.yml.ww or slurm.conf.ww which depend on the cluster
    nodes can be placed. Also the new templated functions {{ abort }},
    {{ IncludeBlock }} abd {{ no_backup }} are allowed now.
  * nodes and profiles can now have multiple system and runtime overlays, as a
    comma separated list.
  * The overlays of the profile and the nodes are combined.
  * Simple ipv6 support is now enabled. In warewulf.conf the option
    ipaddr6/Ipv6net must be set to enable ipv6. If enabled on of these options
    is set a node will get a derived ipv6 in the scheme ipv6net:ipaddr4. This
    address can also be overwritten for every node
  * Multiple files can now created from a single template.ww file with the {{ file FILENAME }}
    command in the template. The command is expanded to the magic template command
    {{ /* file FILENAME */}} which is picked up by wwctl and everything which comes after this
    magic comment will be written to the file FILENAME. This mechanism is leveraged in the
    configuration files for the network, see ifcfg.xml.ww and ifcgf.ww.
  * Networks can now have arbitrary keys value pairs in the profiles and on the node, so that
    things like bridges and mtu sizes can be set
  * The yaml format for nodes has now sub-keys for ipmi and kernel, old nodes.conf files have to
    to be changed accordingly
  * uids and gids of a container now get synced at import time, so that at least users with the
    same name have the same uid. This is not necessarily needed for warewulf, but services like
    munge.
  * backward compatibility for nodes.conf
  * added file:// uri for importing archived containers
- removed LocalStateDir-is-configureable-to-meet-FHS.patch as implemented upstream</changelog>
  <changelog author="Christian Goll &lt;cgoll@suse.com&gt;" date="1654862400">- update to 4.3.0rc6 what should the final release candidate
  * using compressed images again, as PXE else would fail</changelog>
  <changelog author="Christian Goll &lt;cgoll@suse.com&gt;" date="1655726400">- updated to 4.3.0
  * fixed bug which for single node profile set</changelog>
  <changelog author="Christian Goll &lt;cgoll@suse.com&gt;" date="1655812800">- fixed symlink dhcpd.conf collision</changelog>
</package>
<package pkgid="1a612008123628a372b020218932a07e7c2a8c7b2fa5adeb8bb0cc43a7929b1b" name="wdiff" arch="aarch64">
  <version epoch="0" ver="1.2.2" rel="bp154.2.1"/>
  <changelog author="aj@suse.de" date="1342526400">- Fix build with missing gets declaration (glibc 2.16)</changelog>
  <changelog author="pgajdos@suse.com" date="1344340800">- updated to 1.1.2:
  * Backport gnulib change to deal with removal of gets function.
    This is a build-time-only fix. (Mentioned in Fedora bug #821791)
  * Added Serbian translation.
  * Updated Danish and Vietnamese translations.
  * Work around a bug in the formatting of the man page.
    (Debian bug #669340)
  * Updated Czech, German, Spanish, Finnish, Dutch, Polish, Slovenian,
    Swedish and Ukrainian translations.
  * Fix several issue with the use of screen in the test suite.
  * Allow WDIFF_PAGER to override PAGER environment variable.
  * Do not autodetect less, so we don't auto-enable less-mode.
    This should improve things for UTF8 text. (Savannah bug #34224)
    Less-mode is considered deprecated, as it isn't fit for multi-byte
    encodings. Nevertheless it can still be enabled on the command line.
  * Introduces use of ngettext to allow correct handling of plural forms</changelog>
  <changelog author="pgajdos@suse.com" date="1364299200">- updated to 1.2.1:
  * Added Esperanto translation.
  * Updated Czech, German, Spanish, Finnish, Galician, Italian, Dutch,
    Polish, Slovenian, Serbian, Swedish, Ukrainian and Vietnamese
    translations.
  * Updated gnulib.
  * Recreated build system using recent versions of autotools.
    This will avoid security issues in "make distcheck" target.
    (CVE-2012-3386)</changelog>
  <changelog author="pgajdos@suse.com" date="1403524800">- updated to 1.2.2:
  * Updated Vietnamese, Swedish, Estonian, Chinese (traditional),
    Brazilian Portuguese and Russian translations.
  * Updated gnulib.
  * Used more recent autotools: autoconf 2.69 and automake 1.14.1.</changelog>
  <changelog author="mpluskal@suse.com" date="1430827200">- Cleanup spec file with spec-cleaner
- Use macro for language package
- Add gpg signature
- Fix infor requirements</changelog>
  <changelog author="mpluskal@suse.com" date="1430827201">- Update project and download url</changelog>
  <changelog author="mpluskal@suse.com" date="1458993600">- Enable experimental tools (same as in Fedora)
  * mdiff
  * wdiff2
  * unify
- Enable internal testsuite
- Small spec file improvements and cleanups</changelog>
  <changelog author="mpluskal@suse.com" date="1528459200">- Modernise spec file with spec-cleaner</changelog>
  <changelog author="Stephan Kulow &lt;coolo@suse.com&gt;" date="1617192000">- fix license to be GPL-3.0-or-later (see COPYING)</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1642075200">- Do not recommend lang package. The lang package has automatic
  locale tags that make it autoinstall on systems with matching
  language setting.</changelog>
</package>
<package pkgid="e8c593ad7535838dde4ecd4db1508997ab09a221281a7f9d623ac2f3bca93a16" name="wdiff" arch="i586">
  <version epoch="0" ver="1.2.2" rel="bp154.2.1"/>
  <changelog author="aj@suse.de" date="1342526400">- Fix build with missing gets declaration (glibc 2.16)</changelog>
  <changelog author="pgajdos@suse.com" date="1344340800">- updated to 1.1.2:
  * Backport gnulib change to deal with removal of gets function.
    This is a build-time-only fix. (Mentioned in Fedora bug #821791)
  * Added Serbian translation.
  * Updated Danish and Vietnamese translations.
  * Work around a bug in the formatting of the man page.
    (Debian bug #669340)
  * Updated Czech, German, Spanish, Finnish, Dutch, Polish, Slovenian,
    Swedish and Ukrainian translations.
  * Fix several issue with the use of screen in the test suite.
  * Allow WDIFF_PAGER to override PAGER environment variable.
  * Do not autodetect less, so we don't auto-enable less-mode.
    This should improve things for UTF8 text. (Savannah bug #34224)
    Less-mode is considered deprecated, as it isn't fit for multi-byte
    encodings. Nevertheless it can still be enabled on the command line.
  * Introduces use of ngettext to allow correct handling of plural forms</changelog>
  <changelog author="pgajdos@suse.com" date="1364299200">- updated to 1.2.1:
  * Added Esperanto translation.
  * Updated Czech, German, Spanish, Finnish, Galician, Italian, Dutch,
    Polish, Slovenian, Serbian, Swedish, Ukrainian and Vietnamese
    translations.
  * Updated gnulib.
  * Recreated build system using recent versions of autotools.
    This will avoid security issues in "make distcheck" target.
    (CVE-2012-3386)</changelog>
  <changelog author="pgajdos@suse.com" date="1403524800">- updated to 1.2.2:
  * Updated Vietnamese, Swedish, Estonian, Chinese (traditional),
    Brazilian Portuguese and Russian translations.
  * Updated gnulib.
  * Used more recent autotools: autoconf 2.69 and automake 1.14.1.</changelog>
  <changelog author="mpluskal@suse.com" date="1430827200">- Cleanup spec file with spec-cleaner
- Use macro for language package
- Add gpg signature
- Fix infor requirements</changelog>
  <changelog author="mpluskal@suse.com" date="1430827201">- Update project and download url</changelog>
  <changelog author="mpluskal@suse.com" date="1458993600">- Enable experimental tools (same as in Fedora)
  * mdiff
  * wdiff2
  * unify
- Enable internal testsuite
- Small spec file improvements and cleanups</changelog>
  <changelog author="mpluskal@suse.com" date="1528459200">- Modernise spec file with spec-cleaner</changelog>
  <changelog author="Stephan Kulow &lt;coolo@suse.com&gt;" date="1617192000">- fix license to be GPL-3.0-or-later (see COPYING)</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1642075200">- Do not recommend lang package. The lang package has automatic
  locale tags that make it autoinstall on systems with matching
  language setting.</changelog>
</package>
<package pkgid="7e04afd941a64bbaae83eef12acb69fdc5ba54868788834132d9c6a67ad82da3" name="wdiff" arch="ppc64le">
  <version epoch="0" ver="1.2.2" rel="bp154.2.1"/>
  <changelog author="aj@suse.de" date="1342526400">- Fix build with missing gets declaration (glibc 2.16)</changelog>
  <changelog author="pgajdos@suse.com" date="1344340800">- updated to 1.1.2:
  * Backport gnulib change to deal with removal of gets function.
    This is a build-time-only fix. (Mentioned in Fedora bug #821791)
  * Added Serbian translation.
  * Updated Danish and Vietnamese translations.
  * Work around a bug in the formatting of the man page.
    (Debian bug #669340)
  * Updated Czech, German, Spanish, Finnish, Dutch, Polish, Slovenian,
    Swedish and Ukrainian translations.
  * Fix several issue with the use of screen in the test suite.
  * Allow WDIFF_PAGER to override PAGER environment variable.
  * Do not autodetect less, so we don't auto-enable less-mode.
    This should improve things for UTF8 text. (Savannah bug #34224)
    Less-mode is considered deprecated, as it isn't fit for multi-byte
    encodings. Nevertheless it can still be enabled on the command line.
  * Introduces use of ngettext to allow correct handling of plural forms</changelog>
  <changelog author="pgajdos@suse.com" date="1364299200">- updated to 1.2.1:
  * Added Esperanto translation.
  * Updated Czech, German, Spanish, Finnish, Galician, Italian, Dutch,
    Polish, Slovenian, Serbian, Swedish, Ukrainian and Vietnamese
    translations.
  * Updated gnulib.
  * Recreated build system using recent versions of autotools.
    This will avoid security issues in "make distcheck" target.
    (CVE-2012-3386)</changelog>
  <changelog author="pgajdos@suse.com" date="1403524800">- updated to 1.2.2:
  * Updated Vietnamese, Swedish, Estonian, Chinese (traditional),
    Brazilian Portuguese and Russian translations.
  * Updated gnulib.
  * Used more recent autotools: autoconf 2.69 and automake 1.14.1.</changelog>
  <changelog author="mpluskal@suse.com" date="1430827200">- Cleanup spec file with spec-cleaner
- Use macro for language package
- Add gpg signature
- Fix infor requirements</changelog>
  <changelog author="mpluskal@suse.com" date="1430827201">- Update project and download url</changelog>
  <changelog author="mpluskal@suse.com" date="1458993600">- Enable experimental tools (same as in Fedora)
  * mdiff
  * wdiff2
  * unify
- Enable internal testsuite
- Small spec file improvements and cleanups</changelog>
  <changelog author="mpluskal@suse.com" date="1528459200">- Modernise spec file with spec-cleaner</changelog>
  <changelog author="Stephan Kulow &lt;coolo@suse.com&gt;" date="1617192000">- fix license to be GPL-3.0-or-later (see COPYING)</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1642075200">- Do not recommend lang package. The lang package has automatic
  locale tags that make it autoinstall on systems with matching
  language setting.</changelog>
</package>
<package pkgid="3443f58eaa6785cf7accd1c82f5b2a68fc557c923289b87959471709ee9c49d0" name="wdiff" arch="s390x">
  <version epoch="0" ver="1.2.2" rel="bp154.2.1"/>
  <changelog author="aj@suse.de" date="1342526400">- Fix build with missing gets declaration (glibc 2.16)</changelog>
  <changelog author="pgajdos@suse.com" date="1344340800">- updated to 1.1.2:
  * Backport gnulib change to deal with removal of gets function.
    This is a build-time-only fix. (Mentioned in Fedora bug #821791)
  * Added Serbian translation.
  * Updated Danish and Vietnamese translations.
  * Work around a bug in the formatting of the man page.
    (Debian bug #669340)
  * Updated Czech, German, Spanish, Finnish, Dutch, Polish, Slovenian,
    Swedish and Ukrainian translations.
  * Fix several issue with the use of screen in the test suite.
  * Allow WDIFF_PAGER to override PAGER environment variable.
  * Do not autodetect less, so we don't auto-enable less-mode.
    This should improve things for UTF8 text. (Savannah bug #34224)
    Less-mode is considered deprecated, as it isn't fit for multi-byte
    encodings. Nevertheless it can still be enabled on the command line.
  * Introduces use of ngettext to allow correct handling of plural forms</changelog>
  <changelog author="pgajdos@suse.com" date="1364299200">- updated to 1.2.1:
  * Added Esperanto translation.
  * Updated Czech, German, Spanish, Finnish, Galician, Italian, Dutch,
    Polish, Slovenian, Serbian, Swedish, Ukrainian and Vietnamese
    translations.
  * Updated gnulib.
  * Recreated build system using recent versions of autotools.
    This will avoid security issues in "make distcheck" target.
    (CVE-2012-3386)</changelog>
  <changelog author="pgajdos@suse.com" date="1403524800">- updated to 1.2.2:
  * Updated Vietnamese, Swedish, Estonian, Chinese (traditional),
    Brazilian Portuguese and Russian translations.
  * Updated gnulib.
  * Used more recent autotools: autoconf 2.69 and automake 1.14.1.</changelog>
  <changelog author="mpluskal@suse.com" date="1430827200">- Cleanup spec file with spec-cleaner
- Use macro for language package
- Add gpg signature
- Fix infor requirements</changelog>
  <changelog author="mpluskal@suse.com" date="1430827201">- Update project and download url</changelog>
  <changelog author="mpluskal@suse.com" date="1458993600">- Enable experimental tools (same as in Fedora)
  * mdiff
  * wdiff2
  * unify
- Enable internal testsuite
- Small spec file improvements and cleanups</changelog>
  <changelog author="mpluskal@suse.com" date="1528459200">- Modernise spec file with spec-cleaner</changelog>
  <changelog author="Stephan Kulow &lt;coolo@suse.com&gt;" date="1617192000">- fix license to be GPL-3.0-or-later (see COPYING)</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1642075200">- Do not recommend lang package. The lang package has automatic
  locale tags that make it autoinstall on systems with matching
  language setting.</changelog>
</package>
<package pkgid="8c7ab145d214905a462be4c54a44e66113a69ae2f0971ab7a2619b061a7a81d9" name="wdiff" arch="src">
  <version epoch="0" ver="1.2.2" rel="bp154.2.1"/>
  <changelog author="ro@suse.de" date="1098273600">- locale rename: no -&gt; nb</changelog>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="aj@suse.de" date="1175428800">- Add ncurses-devel to BuildRequires.</changelog>
  <changelog author="crrodriguez@suse.de" date="1203854400">- fix  file-not-in-lang warnings</changelog>
  <changelog author="jw@suse.de" date="1249387200">- updated to GNU wdiff 0.5.93,
- removed upstreamed/opbsoleted patches,
- rediffed -c patch by Hans Lermen.
- added linenumbers to -c output
- added -A -B -U options to simplify -w -x -y -z settings
- added dummy -L option for compat with diff.
- documentation updated.</changelog>
  <changelog author="mls@suse.de" date="1251288000">- make patch0 usage consistent</changelog>
  <changelog author="pgajdos@suse.cz" date="1282651200">- update to 0.6.3:
  * `wdiff -d' to read input from single unified diff, perhaps stdin.
  * Updated texinfo documentation taking experimental switch into account.
  * Experimental programs (mdiff &amp; friends) and a configure switch
  - -enable-experimental to control them.
  * Recent imports from gnulib, use of recent autotools.
  * Improved autodetection of termcap library like ncurses.
  * Reformatted translations, still a number of fuzzy translations.
  * Changed from CVS to bzr for source code version control.
  * Various bug fixes. See ChangeLog for a more exhaustive list.
  * Introduce --with-default-pager=PAGER configure switch.
  * Fix missing newline in info dir entry list.
  * Fix shell syntax in configure script
  * Updated gnulib and gettext, the latter to 0.18
  * Updated Dutch translation
  * Fixed a number of portability issues reported by maint.mk syntax checks
  * Updated Italian and Swedish translations
  * Updated gnulib</changelog>
  <changelog author="pgajdos@suse.cz" date="1290081600">- updated to 0.6.4:
  * Updated Catalan translations
  * Updated gnulib</changelog>
  <changelog author="pgajdos@novell.com" date="1306238400">- updated to 0.6.5:
  * Never initialize or deinitialize terminals, as we do no cursor
    movement
  * Deprecated --no-init-term (-K) command line option
  * Avoid relative path in man pages
  * Updated gnulib, might be particularly important for uClibc
    users</changelog>
  <changelog author="pgajdos@suse.com" date="1320062400">- updated to 1.0.1:
  * Updated Polish, Ukrainian, Slovenian, Dutch, Finnish, Swedish and
    Czech translations
  * Changed major version to 1 to reflect maturity of the package
  * Updated Dutch, French, Danish and Slovenian translations
  * Added Ukrainian translation
  * Improved error reporting in case a child process has problems
  * Added tests to the test suite
  * Updated gnulib</changelog>
  <changelog author="aj@suse.de" date="1342526400">- Fix build with missing gets declaration (glibc 2.16)</changelog>
  <changelog author="pgajdos@suse.com" date="1344340800">- updated to 1.1.2:
  * Backport gnulib change to deal with removal of gets function.
    This is a build-time-only fix. (Mentioned in Fedora bug #821791)
  * Added Serbian translation.
  * Updated Danish and Vietnamese translations.
  * Work around a bug in the formatting of the man page.
    (Debian bug #669340)
  * Updated Czech, German, Spanish, Finnish, Dutch, Polish, Slovenian,
    Swedish and Ukrainian translations.
  * Fix several issue with the use of screen in the test suite.
  * Allow WDIFF_PAGER to override PAGER environment variable.
  * Do not autodetect less, so we don't auto-enable less-mode.
    This should improve things for UTF8 text. (Savannah bug #34224)
    Less-mode is considered deprecated, as it isn't fit for multi-byte
    encodings. Nevertheless it can still be enabled on the command line.
  * Introduces use of ngettext to allow correct handling of plural forms</changelog>
  <changelog author="pgajdos@suse.com" date="1364299200">- updated to 1.2.1:
  * Added Esperanto translation.
  * Updated Czech, German, Spanish, Finnish, Galician, Italian, Dutch,
    Polish, Slovenian, Serbian, Swedish, Ukrainian and Vietnamese
    translations.
  * Updated gnulib.
  * Recreated build system using recent versions of autotools.
    This will avoid security issues in "make distcheck" target.
    (CVE-2012-3386)</changelog>
  <changelog author="pgajdos@suse.com" date="1403524800">- updated to 1.2.2:
  * Updated Vietnamese, Swedish, Estonian, Chinese (traditional),
    Brazilian Portuguese and Russian translations.
  * Updated gnulib.
  * Used more recent autotools: autoconf 2.69 and automake 1.14.1.</changelog>
  <changelog author="mpluskal@suse.com" date="1430827200">- Cleanup spec file with spec-cleaner
- Use macro for language package
- Add gpg signature
- Fix infor requirements</changelog>
  <changelog author="mpluskal@suse.com" date="1430827201">- Update project and download url</changelog>
  <changelog author="mpluskal@suse.com" date="1458993600">- Enable experimental tools (same as in Fedora)
  * mdiff
  * wdiff2
  * unify
- Enable internal testsuite
- Small spec file improvements and cleanups</changelog>
  <changelog author="mpluskal@suse.com" date="1528459200">- Modernise spec file with spec-cleaner</changelog>
  <changelog author="Stephan Kulow &lt;coolo@suse.com&gt;" date="1617192000">- fix license to be GPL-3.0-or-later (see COPYING)</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1642075200">- Do not recommend lang package. The lang package has automatic
  locale tags that make it autoinstall on systems with matching
  language setting.</changelog>
</package>
<package pkgid="3e98a7812cbb40f7e72e484fdd99be218b951020b20bbc284e906ccb4385c132" name="wdiff" arch="x86_64">
  <version epoch="0" ver="1.2.2" rel="bp154.2.1"/>
  <changelog author="aj@suse.de" date="1342526400">- Fix build with missing gets declaration (glibc 2.16)</changelog>
  <changelog author="pgajdos@suse.com" date="1344340800">- updated to 1.1.2:
  * Backport gnulib change to deal with removal of gets function.
    This is a build-time-only fix. (Mentioned in Fedora bug #821791)
  * Added Serbian translation.
  * Updated Danish and Vietnamese translations.
  * Work around a bug in the formatting of the man page.
    (Debian bug #669340)
  * Updated Czech, German, Spanish, Finnish, Dutch, Polish, Slovenian,
    Swedish and Ukrainian translations.
  * Fix several issue with the use of screen in the test suite.
  * Allow WDIFF_PAGER to override PAGER environment variable.
  * Do not autodetect less, so we don't auto-enable less-mode.
    This should improve things for UTF8 text. (Savannah bug #34224)
    Less-mode is considered deprecated, as it isn't fit for multi-byte
    encodings. Nevertheless it can still be enabled on the command line.
  * Introduces use of ngettext to allow correct handling of plural forms</changelog>
  <changelog author="pgajdos@suse.com" date="1364299200">- updated to 1.2.1:
  * Added Esperanto translation.
  * Updated Czech, German, Spanish, Finnish, Galician, Italian, Dutch,
    Polish, Slovenian, Serbian, Swedish, Ukrainian and Vietnamese
    translations.
  * Updated gnulib.
  * Recreated build system using recent versions of autotools.
    This will avoid security issues in "make distcheck" target.
    (CVE-2012-3386)</changelog>
  <changelog author="pgajdos@suse.com" date="1403524800">- updated to 1.2.2:
  * Updated Vietnamese, Swedish, Estonian, Chinese (traditional),
    Brazilian Portuguese and Russian translations.
  * Updated gnulib.
  * Used more recent autotools: autoconf 2.69 and automake 1.14.1.</changelog>
  <changelog author="mpluskal@suse.com" date="1430827200">- Cleanup spec file with spec-cleaner
- Use macro for language package
- Add gpg signature
- Fix infor requirements</changelog>
  <changelog author="mpluskal@suse.com" date="1430827201">- Update project and download url</changelog>
  <changelog author="mpluskal@suse.com" date="1458993600">- Enable experimental tools (same as in Fedora)
  * mdiff
  * wdiff2
  * unify
- Enable internal testsuite
- Small spec file improvements and cleanups</changelog>
  <changelog author="mpluskal@suse.com" date="1528459200">- Modernise spec file with spec-cleaner</changelog>
  <changelog author="Stephan Kulow &lt;coolo@suse.com&gt;" date="1617192000">- fix license to be GPL-3.0-or-later (see COPYING)</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1642075200">- Do not recommend lang package. The lang package has automatic
  locale tags that make it autoinstall on systems with matching
  language setting.</changelog>
</package>
<package pkgid="52e3ac0420e08ddab8f5b456a5cbc279f26ceb04cd71392c225e526050350bab" name="wdiff-lang" arch="noarch">
  <version epoch="0" ver="1.2.2" rel="bp154.2.1"/>
  <changelog author="aj@suse.de" date="1342526400">- Fix build with missing gets declaration (glibc 2.16)</changelog>
  <changelog author="pgajdos@suse.com" date="1344340800">- updated to 1.1.2:
  * Backport gnulib change to deal with removal of gets function.
    This is a build-time-only fix. (Mentioned in Fedora bug #821791)
  * Added Serbian translation.
  * Updated Danish and Vietnamese translations.
  * Work around a bug in the formatting of the man page.
    (Debian bug #669340)
  * Updated Czech, German, Spanish, Finnish, Dutch, Polish, Slovenian,
    Swedish and Ukrainian translations.
  * Fix several issue with the use of screen in the test suite.
  * Allow WDIFF_PAGER to override PAGER environment variable.
  * Do not autodetect less, so we don't auto-enable less-mode.
    This should improve things for UTF8 text. (Savannah bug #34224)
    Less-mode is considered deprecated, as it isn't fit for multi-byte
    encodings. Nevertheless it can still be enabled on the command line.
  * Introduces use of ngettext to allow correct handling of plural forms</changelog>
  <changelog author="pgajdos@suse.com" date="1364299200">- updated to 1.2.1:
  * Added Esperanto translation.
  * Updated Czech, German, Spanish, Finnish, Galician, Italian, Dutch,
    Polish, Slovenian, Serbian, Swedish, Ukrainian and Vietnamese
    translations.
  * Updated gnulib.
  * Recreated build system using recent versions of autotools.
    This will avoid security issues in "make distcheck" target.
    (CVE-2012-3386)</changelog>
  <changelog author="pgajdos@suse.com" date="1403524800">- updated to 1.2.2:
  * Updated Vietnamese, Swedish, Estonian, Chinese (traditional),
    Brazilian Portuguese and Russian translations.
  * Updated gnulib.
  * Used more recent autotools: autoconf 2.69 and automake 1.14.1.</changelog>
  <changelog author="mpluskal@suse.com" date="1430827200">- Cleanup spec file with spec-cleaner
- Use macro for language package
- Add gpg signature
- Fix infor requirements</changelog>
  <changelog author="mpluskal@suse.com" date="1430827201">- Update project and download url</changelog>
  <changelog author="mpluskal@suse.com" date="1458993600">- Enable experimental tools (same as in Fedora)
  * mdiff
  * wdiff2
  * unify
- Enable internal testsuite
- Small spec file improvements and cleanups</changelog>
  <changelog author="mpluskal@suse.com" date="1528459200">- Modernise spec file with spec-cleaner</changelog>
  <changelog author="Stephan Kulow &lt;coolo@suse.com&gt;" date="1617192000">- fix license to be GPL-3.0-or-later (see COPYING)</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1642075200">- Do not recommend lang package. The lang package has automatic
  locale tags that make it autoinstall on systems with matching
  language setting.</changelog>
</package>
<package pkgid="d80c409694888fe2d71b4b1ff43a8baaf187370f7f66118b196c483c933a10ea" name="withlock" arch="noarch">
  <version epoch="0" ver="0.5" rel="bp154.2.3.1"/>
  <changelog author="lrupp@suse.de" date="1258545600">- initial package, version 0.2</changelog>
  <changelog author="lars@linux-schulserver.de" date="1345723200">- updated to svn revision 5 which updates the year of Copyright,
  fixes a typo and add an URL to project page to the comment header
- add project URL
- require python
- specfile cleanup</changelog>
  <changelog author="cfarrell@suse.com" date="1346068800">- license update: Apache-2.0
  SPDX format</changelog>
  <changelog author="poeml@cmdline.net" date="1392033600">- withlock is now distributed as a tarball, which is generally
  easier for packaging on some platforms (at least Solaris). The
  only other change: updated copyright year.</changelog>
  <changelog author="poeml@cmdline.net" date="1395748800">- update to 0.3
  * At exit, unlink the lock file only if a lock was actually obtained.
    When waiting for a lock (using -w option) and timing out, the file
    was removed nevertheless. Thanks Bernhard Wiedemann for finding this
    bug and providing such a good test case, so the fix was easy.
    See https://bugzilla.novell.com/show_bug.cgi?id=864785</changelog>
  <changelog author="mcaj@suse.com" date="1408017600">- I wrote a patch got-lock.patch to fix the trouble with the got-lock variable.
  I was testing the withlock and still had there the lock file after a
  program already end with exit code 0. I have look on the code together
  with our Python expert mvidner@suse.cz and we found the got-lock variable
  isn't marked ad global variable.I`ll send this to poeml@cmdline.net
  after we test it on our servers.</changelog>
  <changelog author="poeml@cmdline.net" date="1434369600">- update to 0.4
- lockfile cleanup fix upstream (Thanks Martin Caj and Martin Vidner. Good
  Catch!) (cosmetical bug which didn't affect the locking strategy)
- man page added
- license file added
- use the now provided Makefile
- moved to github.com</changelog>
  <changelog author="munix9@googlemail.com" date="1570104000">- update to version 0.5
- modernize for Python 2 and 3 compatibility
  thanks to Patch by Jan Beran jberan|redhat.com
  (2.7 or newer; 0.4 for Python 2.4+2.5 is archived in attic/)
  Added: fix-use-python3.patch</changelog>
</package>
<package pkgid="165c568004b7e4f07741a4ca56b6e06a665b90f641b52408f4e824f54285a8bf" name="withlock" arch="src">
  <version epoch="0" ver="0.5" rel="bp154.2.3.1"/>
  <changelog author="lrupp@suse.de" date="1258545600">- initial package, version 0.2</changelog>
  <changelog author="lars@linux-schulserver.de" date="1345723200">- updated to svn revision 5 which updates the year of Copyright,
  fixes a typo and add an URL to project page to the comment header
- add project URL
- require python
- specfile cleanup</changelog>
  <changelog author="cfarrell@suse.com" date="1346068800">- license update: Apache-2.0
  SPDX format</changelog>
  <changelog author="poeml@cmdline.net" date="1392033600">- withlock is now distributed as a tarball, which is generally
  easier for packaging on some platforms (at least Solaris). The
  only other change: updated copyright year.</changelog>
  <changelog author="poeml@cmdline.net" date="1395748800">- update to 0.3
  * At exit, unlink the lock file only if a lock was actually obtained.
    When waiting for a lock (using -w option) and timing out, the file
    was removed nevertheless. Thanks Bernhard Wiedemann for finding this
    bug and providing such a good test case, so the fix was easy.
    See https://bugzilla.novell.com/show_bug.cgi?id=864785</changelog>
  <changelog author="mcaj@suse.com" date="1408017600">- I wrote a patch got-lock.patch to fix the trouble with the got-lock variable.
  I was testing the withlock and still had there the lock file after a
  program already end with exit code 0. I have look on the code together
  with our Python expert mvidner@suse.cz and we found the got-lock variable
  isn't marked ad global variable.I`ll send this to poeml@cmdline.net
  after we test it on our servers.</changelog>
  <changelog author="poeml@cmdline.net" date="1434369600">- update to 0.4
- lockfile cleanup fix upstream (Thanks Martin Caj and Martin Vidner. Good
  Catch!) (cosmetical bug which didn't affect the locking strategy)
- man page added
- license file added
- use the now provided Makefile
- moved to github.com</changelog>
  <changelog author="munix9@googlemail.com" date="1570104000">- update to version 0.5
- modernize for Python 2 and 3 compatibility
  thanks to Patch by Jan Beran jberan|redhat.com
  (2.7 or newer; 0.4 for Python 2.4+2.5 is archived in attic/)
  Added: fix-use-python3.patch</changelog>
</package>
<package pkgid="b22610f4866919ccccf073dd09282f5eb7ad8e88153b778f27ecb4160d3e5d61" name="xembedsniproxy" arch="aarch64">
  <version epoch="0" ver="5.24.4" rel="bp154.2.3.1"/>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1632312000">- Add patches from Plasma/5.23 branch:
  * 0001-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0002-shell-panel-Fix-ability-to-type-in-textfield.patch
  * 0003-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0004-PipeWire-Make-sure-thumbnails-properly-use-dmabuf-ag.patch
  * 0005-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0006-Klipper-Handle-incoming-UTF-8-mime-types.patch
  * 0007-Klipper-Guard-against-broken-data-fetches.patch
  * 0008-pipewire-Properly-compare-pipewire-versions-using-QV.patch
  * 0009-PipeWire-Include-defines-for-older-PipeWire-versions.patch
  * 0010-sddm-theme-fix-default-username-font-size.patch
- Add patch to fix XEmbed context menus (kde#442758)
  * 0011-Revert-xembed-adapt-to-changes-in-KNotifications.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1632484800">- Add patch to fix build with gpsd:
  * 0001-Fix-build-with-gpsd-3.23.1.patch
- Add patch to fix window thumbnails if dmabuf is not supported (kde#428284):
  * 0002-libtaskmanager-Don-t-request-dmabuf-if-not-supported.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1633608000">- Update to 5.23.0
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.0
- Changes since 5.22.90:
  * Revert "xembed: adapt to changes in KNotifications" (kde#442758)
  * sddm-theme: Fix using mouse movements to show the UI
  * [systemtray] Check for menuItemFactory.object existence (kde#443377)
  * applets/devicenotifier: Remove applet list item animations
  * sddm-theme: Fix use of needsPassword and related button layout
  * [klipper] Fix shortcut of OK button in the clipboard content edit dialog (kde#400623)
  * Fix Kickoff context menu actions for System Settings results (kde#442522)
  * klipper: Fix reading from plasma on wayland
  * Fix build with gpsd 3.23.1
  * Unbreak fontinst KCM (kde#442748)
  * Address regression in VT switching code (kde#442852)
  * libtaskmanager: Don't request dmabuf if not supported (kde#428284)
  * Port away from Kirigami.Units.devicePixelRatio
  * lookandfeel: don't nuke accent colour (kde#442812)
  * kcm/colors: Improve some bindings on accent colors
  * sddm-theme: fix default username font size
  * PipeWire: Include defines for older PipeWire versions
  * pipewire: Properly compare pipewire versions using QVersionNumber
  * [Klipper] Guard against broken data fetches
  * [Klipper] Handle incoming UTF-8 mime types (kde#424694)
  * PipeWire: Make sure thumbnails properly use dmabuf again
  * [shell/panel] Fix ability to type in textfield (kde#442557)
- Drop patches, now upstream:
  * 0001-Fix-build-with-gpsd-3.23.1.patch
  * 0001-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0002-libtaskmanager-Don-t-request-dmabuf-if-not-supported.patch
  * 0002-shell-panel-Fix-ability-to-type-in-textfield.patch
  * 0003-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0004-PipeWire-Make-sure-thumbnails-properly-use-dmabuf-ag.patch
  * 0005-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0006-Klipper-Handle-incoming-UTF-8-mime-types.patch
  * 0007-Klipper-Guard-against-broken-data-fetches.patch
  * 0008-pipewire-Properly-compare-pipewire-versions-using-QV.patch
  * 0009-PipeWire-Include-defines-for-older-PipeWire-versions.patch
  * 0010-sddm-theme-fix-default-username-font-size.patch
  * 0011-Revert-xembed-adapt-to-changes-in-KNotifications.patch
- Refresh 0001-Ignore-default-sddm-face-icons.patch
- Add new key + signature to plasma.keyring</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1634299200">- Add patch to show password input on the "Other" page in SDDM (kde#443737):
  * 0001-sddm-theme-fix-missing-password-field-on-Other-page.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1634644800">- Update to 5.23.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.1
- Changes since 5.23.0:
  * [freespacenotifier] impr: no notification for ro filesystems
  * kcms/colors: Don't apply header accent colors to non-Header color schemes (kde#443786)
  * [kcms/colors] Notify global settings change after saving
  * krdb: Fix removal of Xft.dpi from Xresources (kde#350039)
  * sddm-theme: fix missing password field on "Other" page (kde#443737)
  * pipewire: Report DRM_FORMAT_MOD_INVALID when no modifiers are offered
  * [digital-clock] Do not assign undefined when agenda is not visible (kde#443380)
- Drop patches, now upstream:
  * 0001-sddm-theme-fix-missing-password-field-on-Other-page.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1634817600">- Add back X11 root window properties until firefox is adjusted
  (boo#1191825):
  * 0001-Revert-Drop-setupX11-from-startplasma-waylandsession.patch
  * 0002-Revert-Drop-X11-root-properties-for-KDE-full-session.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1635249600">- Update to 5.23.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.2
- Changes since 5.23.1:
  * Hide KRunner window when pressing escape (kde#444240)
  * [applets/clipboard] Fix selecting clipboard entries with Enter
  * Set Qt.ImhNoPredictiveText for text fields that act as search fields
  * [shell] Ignore placeholder screens
- Add a version to BuildRequires: cmake(Breeze)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1636459200">- Update to 5.23.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.3
- Changes since 5.23.2:
  * fixed size hints to the osd
  * use implicit size to not cause binding loops (kde#422072)
  * wayland: don't create DesktopView for placeholder screen (kde#438839,kde#444801)
  * [startplasma] Detect systemd service in linked state
  * [Notifications] Fix grouping container side line
  * Disconnect watcher for xdgActivationTokenArrived (kde#444385)
  * interactiveconsole: Allow specifying mode from command line parameter</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1638273600">- Update to 5.23.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.4
- Changes since 5.23.3:
  * Lock &amp; login screens: Use RTL-friendly arrows when in RTL mode
  * [logout-greeter] Set window class name (kde#444898,kde#444899)
  * systemtray: Connect to StatusNotifierWatcher before initializing QDBusPendingReply
  * systemtray: Check if a service is already added before processing QDBusReply (kde#443961)
  * baloosearchruner: Emit DBus error when baloo is disabled (kde#445342)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1641297600">- Update to 5.23.5
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.5
- Changes since 5.23.4:
  * applets/systemtray: Follow panel opacity (kde#439025)
  * [webshortcutsrunner] Fix private browsing with some Firefoxes
  * [kcms/style] Don't call setNeedsSave when style config changes (kde#439297)
  * digital-clock: fix calendar popup contrast when opened from desktop (kde#446991)
  * [libnotificationmanager] Fix memory leak
  * [kcms/lookandfeel] Guard reading invalid first entry (kde#446100)
  * [Global Menu] Set translation domain
  * lookandfeel: Add missing check if list of files is empty (kde#439797)
  * [KSplash] Start with zero opacity
  * Fix Klipper Actions content truncation (kde#444365)
  * [klipper] Use full text for DBus return values (kde#446441)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1642075200">- Update to 5.23.90
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.90
- Too many changes to list here
- Rebase 0001-Use-qdbus-qt5.patch
- Replace xprop-kde-full-session.desktop with autostart file:
  * 0001-Revert-Drop-setupX11-from-startplasma-waylandsession.patch
  * 0002-Revert-Drop-X11-root-properties-for-KDE-full-session.patch
- Add patch to fix the upstream sddm theme background:
  * 0001-sddm-theme-Change-wallpaper-extension-so-that-it-poi.patch
- Add patch to fix screen sharing dialog (kde#448423):
  * 0001-systemdialogs-Remove-leftover-and-broken-components.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1642852800">- Add patch to fix initial focus in SDDM (kde#447817):
  * 0001-Make-SessionManagementScreen-a-FocusScope.patch
- Add patch to fix initial focus in the lockscreen:
  * 0001-Fix-initial-focus-in-LockScreenUi.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1644062400">- Update to 5.24.0
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.0
- Too many changes to list here
- Drop patches, now upstream:
  * 0001-sddm-theme-Change-wallpaper-extension-so-that-it-poi.patch
  * 0001-systemdialogs-Remove-leftover-and-broken-components.patch
  * 0001-Make-SessionManagementScreen-a-FocusScope.patch
  * 0001-Fix-initial-focus-in-LockScreenUi.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1644926400">- Update to 5.24.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.1
- Changes since 5.24.0:
  * Move to runtime check of valid font DPI (kde#449918)
  * applets/battery: adjust show/hide conditions for charge limits (kde#435931)
  * applets/systemtray: fix SNI context menu usage without libappindicator (kde#449870)
  * applets/notifications: Increase implicit size of standalone popup (kde#448383)
  * applets-digital/clock: Add workaround for QTBUG-83890 (kde#448387)
  * Clean up "empty" mimeType containg only whitespaces
  * dataengines/apps: Use KIO::ApplicationLauncherJob for starting KService
  * [containmentactions/applauncher] Use ApplicationLauncherJob instead of OpenUrlJob (kde#449900)
  * Desktop: Still show services with nodisplay=true set (kde#449243)
  * appstream runner: De-duplicate results from multiple sources (kde#448619)
  * Fix ksplash always using default theme. (kde#446966)
  * kcms/users: Fix missing template arguments before reply in FingerprintModel
  * De-duplicate 'Uninstall or manage addons' option in the context menu of Kickoff (kde#448564)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1645531200">- Update to 5.24.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.2
- Changes since 5.24.1:
  * applets/clipboard: Focus on the search field for the first time opening the applet
  * applets/clipboard: Make Up/Down arrow keys work in ClipboardPage (kde#448811,kde#450040)
  * applets/panelspacer: Fix optimal size calculation (kde#431668)
  * Fix overdraw on Wayland
  * PanelView: Do not crash when the state is transitioning (kde#373461)
  * Fix launch kscreen kcm in font kcm.
  * Don't install two copies of kcm_fontinst
  * Lock/login themes: stop adjusting shadows based on color scheme (kde#449985)
  * Top-align lock/login/logout screen action buttons (kde#450238)
  * [kcms/user] Set interactive auth flag for more calls (kde#450122)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1645704000">- Add patch to fix log output of some processes (boo#1196206):
  * 0001-startkde-Forward-stdout-stderr-of-started-processes.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1646654400">- Replace %_libdir/libexec with %_libexecdir (boo#1174075)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1646740800">- Update to 5.24.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.3
- Changes since 5.24.2:
  * kcms/colors: Implement radio button layouts better
  * kcms/colors: fix spacing between radio buttons and content
  * [Battery Monitor] Only show charge threshold hint for power supply batteries (kde#451161)
  * [Icons KCM] Give measure delegate a text
  * wallpapers: Sort BackgroundListModel by title
  * applets/digital-clock: Fix `Qt.formatDateTime` returns different date when minute changes (kde#436796)
  * applets/systray: align applet labels with differing line counts in hidden view (kde#438347)
  * Show panel config above other windows (kde#450794)
  * Use current accent colour to set ColorDialog object in colour picker
  * SystemDialog: Allow accepting the dialogs with the keyboard (kde#450223)
  * applets/systemtray: Do not open context menu on mouse pressed for SNI (kde#409768)
  * Revert "Fix overdraw on Wayland"
  * startkde: Forward stdout/stderr of started processes
  * SDDM theme: stop eliding people's names so aggressively (kde#450673)
  * applets/digital-clock: Word-wrap date string for desktop representation (kde#450632)
  * wrap completely the invariants timer in NDEBUG
  * ScreenPool as the source of truth of QScreen info
  * Always ensure there is an user selected (kde#450182)
  * Prevent panel going out of screen boundaries
  * applets/clipboard: Focus on text area when transition is done
  * applets/clipboard: Fix highlight after exiting edit mode
- Drop patches, now upstream:
  * 0001-startkde-Forward-stdout-stderr-of-started-processes.patch
- Restore compatibility with older kf5-filesystem</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1648555200">- Update to 5.24.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.4
- Changes since 5.24.3:
  * kcms/users: Adjust for padding in overlay sheet (kde#451031)
  * [Media Controller] Explicitly set slider "to" before setting "value"
  * [Notifications] Fix implicit size propagation in SelectableLabel
  * applets/kicker: Skip creating KService for non-desktop files or folders (kde#442970)
  * Fix sleep/suspend sometimes not working ... from ksmserver-logout-greeter, by making the DBus calls synchronous.
  * kicker/actionlist: Ensure we parse the args for the jumplist actions (kde#451418)
  * libtaskmanager: recompute active task when a task is removed
  * sddm/lockscreen: Fix weird behaviour
  * [Notifications] Limit notification heading line count</changelog>
  <changelog author="Fushan Wen &lt;qydwhotmail@gmail.com&gt;" date="1656590400">- Fix a potential crash when deleting a panel with a system tray applet
  (kde#453726)
  * 0001-applets-systemtray-disconnect-KConfigLoader-signal-w.patch
- Fix a potential crash on logout (kde#454159)
  * 0001-Avoid-crash-in-plasma-session-teardown.patch</changelog>
</package>
<package pkgid="2f0e6c7330e24c2b7646212b39d122098625a94397bb40660b5cd09f0f26a2e5" name="xembedsniproxy" arch="ppc64le">
  <version epoch="0" ver="5.24.4" rel="bp154.2.3.1"/>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1632312000">- Add patches from Plasma/5.23 branch:
  * 0001-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0002-shell-panel-Fix-ability-to-type-in-textfield.patch
  * 0003-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0004-PipeWire-Make-sure-thumbnails-properly-use-dmabuf-ag.patch
  * 0005-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0006-Klipper-Handle-incoming-UTF-8-mime-types.patch
  * 0007-Klipper-Guard-against-broken-data-fetches.patch
  * 0008-pipewire-Properly-compare-pipewire-versions-using-QV.patch
  * 0009-PipeWire-Include-defines-for-older-PipeWire-versions.patch
  * 0010-sddm-theme-fix-default-username-font-size.patch
- Add patch to fix XEmbed context menus (kde#442758)
  * 0011-Revert-xembed-adapt-to-changes-in-KNotifications.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1632484800">- Add patch to fix build with gpsd:
  * 0001-Fix-build-with-gpsd-3.23.1.patch
- Add patch to fix window thumbnails if dmabuf is not supported (kde#428284):
  * 0002-libtaskmanager-Don-t-request-dmabuf-if-not-supported.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1633608000">- Update to 5.23.0
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.0
- Changes since 5.22.90:
  * Revert "xembed: adapt to changes in KNotifications" (kde#442758)
  * sddm-theme: Fix using mouse movements to show the UI
  * [systemtray] Check for menuItemFactory.object existence (kde#443377)
  * applets/devicenotifier: Remove applet list item animations
  * sddm-theme: Fix use of needsPassword and related button layout
  * [klipper] Fix shortcut of OK button in the clipboard content edit dialog (kde#400623)
  * Fix Kickoff context menu actions for System Settings results (kde#442522)
  * klipper: Fix reading from plasma on wayland
  * Fix build with gpsd 3.23.1
  * Unbreak fontinst KCM (kde#442748)
  * Address regression in VT switching code (kde#442852)
  * libtaskmanager: Don't request dmabuf if not supported (kde#428284)
  * Port away from Kirigami.Units.devicePixelRatio
  * lookandfeel: don't nuke accent colour (kde#442812)
  * kcm/colors: Improve some bindings on accent colors
  * sddm-theme: fix default username font size
  * PipeWire: Include defines for older PipeWire versions
  * pipewire: Properly compare pipewire versions using QVersionNumber
  * [Klipper] Guard against broken data fetches
  * [Klipper] Handle incoming UTF-8 mime types (kde#424694)
  * PipeWire: Make sure thumbnails properly use dmabuf again
  * [shell/panel] Fix ability to type in textfield (kde#442557)
- Drop patches, now upstream:
  * 0001-Fix-build-with-gpsd-3.23.1.patch
  * 0001-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0002-libtaskmanager-Don-t-request-dmabuf-if-not-supported.patch
  * 0002-shell-panel-Fix-ability-to-type-in-textfield.patch
  * 0003-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0004-PipeWire-Make-sure-thumbnails-properly-use-dmabuf-ag.patch
  * 0005-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0006-Klipper-Handle-incoming-UTF-8-mime-types.patch
  * 0007-Klipper-Guard-against-broken-data-fetches.patch
  * 0008-pipewire-Properly-compare-pipewire-versions-using-QV.patch
  * 0009-PipeWire-Include-defines-for-older-PipeWire-versions.patch
  * 0010-sddm-theme-fix-default-username-font-size.patch
  * 0011-Revert-xembed-adapt-to-changes-in-KNotifications.patch
- Refresh 0001-Ignore-default-sddm-face-icons.patch
- Add new key + signature to plasma.keyring</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1634299200">- Add patch to show password input on the "Other" page in SDDM (kde#443737):
  * 0001-sddm-theme-fix-missing-password-field-on-Other-page.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1634644800">- Update to 5.23.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.1
- Changes since 5.23.0:
  * [freespacenotifier] impr: no notification for ro filesystems
  * kcms/colors: Don't apply header accent colors to non-Header color schemes (kde#443786)
  * [kcms/colors] Notify global settings change after saving
  * krdb: Fix removal of Xft.dpi from Xresources (kde#350039)
  * sddm-theme: fix missing password field on "Other" page (kde#443737)
  * pipewire: Report DRM_FORMAT_MOD_INVALID when no modifiers are offered
  * [digital-clock] Do not assign undefined when agenda is not visible (kde#443380)
- Drop patches, now upstream:
  * 0001-sddm-theme-fix-missing-password-field-on-Other-page.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1634817600">- Add back X11 root window properties until firefox is adjusted
  (boo#1191825):
  * 0001-Revert-Drop-setupX11-from-startplasma-waylandsession.patch
  * 0002-Revert-Drop-X11-root-properties-for-KDE-full-session.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1635249600">- Update to 5.23.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.2
- Changes since 5.23.1:
  * Hide KRunner window when pressing escape (kde#444240)
  * [applets/clipboard] Fix selecting clipboard entries with Enter
  * Set Qt.ImhNoPredictiveText for text fields that act as search fields
  * [shell] Ignore placeholder screens
- Add a version to BuildRequires: cmake(Breeze)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1636459200">- Update to 5.23.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.3
- Changes since 5.23.2:
  * fixed size hints to the osd
  * use implicit size to not cause binding loops (kde#422072)
  * wayland: don't create DesktopView for placeholder screen (kde#438839,kde#444801)
  * [startplasma] Detect systemd service in linked state
  * [Notifications] Fix grouping container side line
  * Disconnect watcher for xdgActivationTokenArrived (kde#444385)
  * interactiveconsole: Allow specifying mode from command line parameter</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1638273600">- Update to 5.23.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.4
- Changes since 5.23.3:
  * Lock &amp; login screens: Use RTL-friendly arrows when in RTL mode
  * [logout-greeter] Set window class name (kde#444898,kde#444899)
  * systemtray: Connect to StatusNotifierWatcher before initializing QDBusPendingReply
  * systemtray: Check if a service is already added before processing QDBusReply (kde#443961)
  * baloosearchruner: Emit DBus error when baloo is disabled (kde#445342)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1641297600">- Update to 5.23.5
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.5
- Changes since 5.23.4:
  * applets/systemtray: Follow panel opacity (kde#439025)
  * [webshortcutsrunner] Fix private browsing with some Firefoxes
  * [kcms/style] Don't call setNeedsSave when style config changes (kde#439297)
  * digital-clock: fix calendar popup contrast when opened from desktop (kde#446991)
  * [libnotificationmanager] Fix memory leak
  * [kcms/lookandfeel] Guard reading invalid first entry (kde#446100)
  * [Global Menu] Set translation domain
  * lookandfeel: Add missing check if list of files is empty (kde#439797)
  * [KSplash] Start with zero opacity
  * Fix Klipper Actions content truncation (kde#444365)
  * [klipper] Use full text for DBus return values (kde#446441)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1642075200">- Update to 5.23.90
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.90
- Too many changes to list here
- Rebase 0001-Use-qdbus-qt5.patch
- Replace xprop-kde-full-session.desktop with autostart file:
  * 0001-Revert-Drop-setupX11-from-startplasma-waylandsession.patch
  * 0002-Revert-Drop-X11-root-properties-for-KDE-full-session.patch
- Add patch to fix the upstream sddm theme background:
  * 0001-sddm-theme-Change-wallpaper-extension-so-that-it-poi.patch
- Add patch to fix screen sharing dialog (kde#448423):
  * 0001-systemdialogs-Remove-leftover-and-broken-components.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1642852800">- Add patch to fix initial focus in SDDM (kde#447817):
  * 0001-Make-SessionManagementScreen-a-FocusScope.patch
- Add patch to fix initial focus in the lockscreen:
  * 0001-Fix-initial-focus-in-LockScreenUi.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1644062400">- Update to 5.24.0
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.0
- Too many changes to list here
- Drop patches, now upstream:
  * 0001-sddm-theme-Change-wallpaper-extension-so-that-it-poi.patch
  * 0001-systemdialogs-Remove-leftover-and-broken-components.patch
  * 0001-Make-SessionManagementScreen-a-FocusScope.patch
  * 0001-Fix-initial-focus-in-LockScreenUi.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1644926400">- Update to 5.24.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.1
- Changes since 5.24.0:
  * Move to runtime check of valid font DPI (kde#449918)
  * applets/battery: adjust show/hide conditions for charge limits (kde#435931)
  * applets/systemtray: fix SNI context menu usage without libappindicator (kde#449870)
  * applets/notifications: Increase implicit size of standalone popup (kde#448383)
  * applets-digital/clock: Add workaround for QTBUG-83890 (kde#448387)
  * Clean up "empty" mimeType containg only whitespaces
  * dataengines/apps: Use KIO::ApplicationLauncherJob for starting KService
  * [containmentactions/applauncher] Use ApplicationLauncherJob instead of OpenUrlJob (kde#449900)
  * Desktop: Still show services with nodisplay=true set (kde#449243)
  * appstream runner: De-duplicate results from multiple sources (kde#448619)
  * Fix ksplash always using default theme. (kde#446966)
  * kcms/users: Fix missing template arguments before reply in FingerprintModel
  * De-duplicate 'Uninstall or manage addons' option in the context menu of Kickoff (kde#448564)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1645531200">- Update to 5.24.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.2
- Changes since 5.24.1:
  * applets/clipboard: Focus on the search field for the first time opening the applet
  * applets/clipboard: Make Up/Down arrow keys work in ClipboardPage (kde#448811,kde#450040)
  * applets/panelspacer: Fix optimal size calculation (kde#431668)
  * Fix overdraw on Wayland
  * PanelView: Do not crash when the state is transitioning (kde#373461)
  * Fix launch kscreen kcm in font kcm.
  * Don't install two copies of kcm_fontinst
  * Lock/login themes: stop adjusting shadows based on color scheme (kde#449985)
  * Top-align lock/login/logout screen action buttons (kde#450238)
  * [kcms/user] Set interactive auth flag for more calls (kde#450122)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1645704000">- Add patch to fix log output of some processes (boo#1196206):
  * 0001-startkde-Forward-stdout-stderr-of-started-processes.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1646654400">- Replace %_libdir/libexec with %_libexecdir (boo#1174075)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1646740800">- Update to 5.24.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.3
- Changes since 5.24.2:
  * kcms/colors: Implement radio button layouts better
  * kcms/colors: fix spacing between radio buttons and content
  * [Battery Monitor] Only show charge threshold hint for power supply batteries (kde#451161)
  * [Icons KCM] Give measure delegate a text
  * wallpapers: Sort BackgroundListModel by title
  * applets/digital-clock: Fix `Qt.formatDateTime` returns different date when minute changes (kde#436796)
  * applets/systray: align applet labels with differing line counts in hidden view (kde#438347)
  * Show panel config above other windows (kde#450794)
  * Use current accent colour to set ColorDialog object in colour picker
  * SystemDialog: Allow accepting the dialogs with the keyboard (kde#450223)
  * applets/systemtray: Do not open context menu on mouse pressed for SNI (kde#409768)
  * Revert "Fix overdraw on Wayland"
  * startkde: Forward stdout/stderr of started processes
  * SDDM theme: stop eliding people's names so aggressively (kde#450673)
  * applets/digital-clock: Word-wrap date string for desktop representation (kde#450632)
  * wrap completely the invariants timer in NDEBUG
  * ScreenPool as the source of truth of QScreen info
  * Always ensure there is an user selected (kde#450182)
  * Prevent panel going out of screen boundaries
  * applets/clipboard: Focus on text area when transition is done
  * applets/clipboard: Fix highlight after exiting edit mode
- Drop patches, now upstream:
  * 0001-startkde-Forward-stdout-stderr-of-started-processes.patch
- Restore compatibility with older kf5-filesystem</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1648555200">- Update to 5.24.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.4
- Changes since 5.24.3:
  * kcms/users: Adjust for padding in overlay sheet (kde#451031)
  * [Media Controller] Explicitly set slider "to" before setting "value"
  * [Notifications] Fix implicit size propagation in SelectableLabel
  * applets/kicker: Skip creating KService for non-desktop files or folders (kde#442970)
  * Fix sleep/suspend sometimes not working ... from ksmserver-logout-greeter, by making the DBus calls synchronous.
  * kicker/actionlist: Ensure we parse the args for the jumplist actions (kde#451418)
  * libtaskmanager: recompute active task when a task is removed
  * sddm/lockscreen: Fix weird behaviour
  * [Notifications] Limit notification heading line count</changelog>
  <changelog author="Fushan Wen &lt;qydwhotmail@gmail.com&gt;" date="1656590400">- Fix a potential crash when deleting a panel with a system tray applet
  (kde#453726)
  * 0001-applets-systemtray-disconnect-KConfigLoader-signal-w.patch
- Fix a potential crash on logout (kde#454159)
  * 0001-Avoid-crash-in-plasma-session-teardown.patch</changelog>
</package>
<package pkgid="82d214403b5eb33a02e7832025cecd05ed35934a08ade4e9093ac89e5412b8d0" name="xembedsniproxy" arch="x86_64">
  <version epoch="0" ver="5.24.4" rel="bp154.2.3.1"/>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1632312000">- Add patches from Plasma/5.23 branch:
  * 0001-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0002-shell-panel-Fix-ability-to-type-in-textfield.patch
  * 0003-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0004-PipeWire-Make-sure-thumbnails-properly-use-dmabuf-ag.patch
  * 0005-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0006-Klipper-Handle-incoming-UTF-8-mime-types.patch
  * 0007-Klipper-Guard-against-broken-data-fetches.patch
  * 0008-pipewire-Properly-compare-pipewire-versions-using-QV.patch
  * 0009-PipeWire-Include-defines-for-older-PipeWire-versions.patch
  * 0010-sddm-theme-fix-default-username-font-size.patch
- Add patch to fix XEmbed context menus (kde#442758)
  * 0011-Revert-xembed-adapt-to-changes-in-KNotifications.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1632484800">- Add patch to fix build with gpsd:
  * 0001-Fix-build-with-gpsd-3.23.1.patch
- Add patch to fix window thumbnails if dmabuf is not supported (kde#428284):
  * 0002-libtaskmanager-Don-t-request-dmabuf-if-not-supported.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1633608000">- Update to 5.23.0
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.0
- Changes since 5.22.90:
  * Revert "xembed: adapt to changes in KNotifications" (kde#442758)
  * sddm-theme: Fix using mouse movements to show the UI
  * [systemtray] Check for menuItemFactory.object existence (kde#443377)
  * applets/devicenotifier: Remove applet list item animations
  * sddm-theme: Fix use of needsPassword and related button layout
  * [klipper] Fix shortcut of OK button in the clipboard content edit dialog (kde#400623)
  * Fix Kickoff context menu actions for System Settings results (kde#442522)
  * klipper: Fix reading from plasma on wayland
  * Fix build with gpsd 3.23.1
  * Unbreak fontinst KCM (kde#442748)
  * Address regression in VT switching code (kde#442852)
  * libtaskmanager: Don't request dmabuf if not supported (kde#428284)
  * Port away from Kirigami.Units.devicePixelRatio
  * lookandfeel: don't nuke accent colour (kde#442812)
  * kcm/colors: Improve some bindings on accent colors
  * sddm-theme: fix default username font size
  * PipeWire: Include defines for older PipeWire versions
  * pipewire: Properly compare pipewire versions using QVersionNumber
  * [Klipper] Guard against broken data fetches
  * [Klipper] Handle incoming UTF-8 mime types (kde#424694)
  * PipeWire: Make sure thumbnails properly use dmabuf again
  * [shell/panel] Fix ability to type in textfield (kde#442557)
- Drop patches, now upstream:
  * 0001-Fix-build-with-gpsd-3.23.1.patch
  * 0001-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0002-libtaskmanager-Don-t-request-dmabuf-if-not-supported.patch
  * 0002-shell-panel-Fix-ability-to-type-in-textfield.patch
  * 0003-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0004-PipeWire-Make-sure-thumbnails-properly-use-dmabuf-ag.patch
  * 0005-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0006-Klipper-Handle-incoming-UTF-8-mime-types.patch
  * 0007-Klipper-Guard-against-broken-data-fetches.patch
  * 0008-pipewire-Properly-compare-pipewire-versions-using-QV.patch
  * 0009-PipeWire-Include-defines-for-older-PipeWire-versions.patch
  * 0010-sddm-theme-fix-default-username-font-size.patch
  * 0011-Revert-xembed-adapt-to-changes-in-KNotifications.patch
- Refresh 0001-Ignore-default-sddm-face-icons.patch
- Add new key + signature to plasma.keyring</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1634299200">- Add patch to show password input on the "Other" page in SDDM (kde#443737):
  * 0001-sddm-theme-fix-missing-password-field-on-Other-page.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1634644800">- Update to 5.23.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.1
- Changes since 5.23.0:
  * [freespacenotifier] impr: no notification for ro filesystems
  * kcms/colors: Don't apply header accent colors to non-Header color schemes (kde#443786)
  * [kcms/colors] Notify global settings change after saving
  * krdb: Fix removal of Xft.dpi from Xresources (kde#350039)
  * sddm-theme: fix missing password field on "Other" page (kde#443737)
  * pipewire: Report DRM_FORMAT_MOD_INVALID when no modifiers are offered
  * [digital-clock] Do not assign undefined when agenda is not visible (kde#443380)
- Drop patches, now upstream:
  * 0001-sddm-theme-fix-missing-password-field-on-Other-page.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1634817600">- Add back X11 root window properties until firefox is adjusted
  (boo#1191825):
  * 0001-Revert-Drop-setupX11-from-startplasma-waylandsession.patch
  * 0002-Revert-Drop-X11-root-properties-for-KDE-full-session.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1635249600">- Update to 5.23.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.2
- Changes since 5.23.1:
  * Hide KRunner window when pressing escape (kde#444240)
  * [applets/clipboard] Fix selecting clipboard entries with Enter
  * Set Qt.ImhNoPredictiveText for text fields that act as search fields
  * [shell] Ignore placeholder screens
- Add a version to BuildRequires: cmake(Breeze)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1636459200">- Update to 5.23.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.3
- Changes since 5.23.2:
  * fixed size hints to the osd
  * use implicit size to not cause binding loops (kde#422072)
  * wayland: don't create DesktopView for placeholder screen (kde#438839,kde#444801)
  * [startplasma] Detect systemd service in linked state
  * [Notifications] Fix grouping container side line
  * Disconnect watcher for xdgActivationTokenArrived (kde#444385)
  * interactiveconsole: Allow specifying mode from command line parameter</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1638273600">- Update to 5.23.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.4
- Changes since 5.23.3:
  * Lock &amp; login screens: Use RTL-friendly arrows when in RTL mode
  * [logout-greeter] Set window class name (kde#444898,kde#444899)
  * systemtray: Connect to StatusNotifierWatcher before initializing QDBusPendingReply
  * systemtray: Check if a service is already added before processing QDBusReply (kde#443961)
  * baloosearchruner: Emit DBus error when baloo is disabled (kde#445342)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1641297600">- Update to 5.23.5
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.5
- Changes since 5.23.4:
  * applets/systemtray: Follow panel opacity (kde#439025)
  * [webshortcutsrunner] Fix private browsing with some Firefoxes
  * [kcms/style] Don't call setNeedsSave when style config changes (kde#439297)
  * digital-clock: fix calendar popup contrast when opened from desktop (kde#446991)
  * [libnotificationmanager] Fix memory leak
  * [kcms/lookandfeel] Guard reading invalid first entry (kde#446100)
  * [Global Menu] Set translation domain
  * lookandfeel: Add missing check if list of files is empty (kde#439797)
  * [KSplash] Start with zero opacity
  * Fix Klipper Actions content truncation (kde#444365)
  * [klipper] Use full text for DBus return values (kde#446441)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1642075200">- Update to 5.23.90
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.90
- Too many changes to list here
- Rebase 0001-Use-qdbus-qt5.patch
- Replace xprop-kde-full-session.desktop with autostart file:
  * 0001-Revert-Drop-setupX11-from-startplasma-waylandsession.patch
  * 0002-Revert-Drop-X11-root-properties-for-KDE-full-session.patch
- Add patch to fix the upstream sddm theme background:
  * 0001-sddm-theme-Change-wallpaper-extension-so-that-it-poi.patch
- Add patch to fix screen sharing dialog (kde#448423):
  * 0001-systemdialogs-Remove-leftover-and-broken-components.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1642852800">- Add patch to fix initial focus in SDDM (kde#447817):
  * 0001-Make-SessionManagementScreen-a-FocusScope.patch
- Add patch to fix initial focus in the lockscreen:
  * 0001-Fix-initial-focus-in-LockScreenUi.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1644062400">- Update to 5.24.0
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.0
- Too many changes to list here
- Drop patches, now upstream:
  * 0001-sddm-theme-Change-wallpaper-extension-so-that-it-poi.patch
  * 0001-systemdialogs-Remove-leftover-and-broken-components.patch
  * 0001-Make-SessionManagementScreen-a-FocusScope.patch
  * 0001-Fix-initial-focus-in-LockScreenUi.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1644926400">- Update to 5.24.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.1
- Changes since 5.24.0:
  * Move to runtime check of valid font DPI (kde#449918)
  * applets/battery: adjust show/hide conditions for charge limits (kde#435931)
  * applets/systemtray: fix SNI context menu usage without libappindicator (kde#449870)
  * applets/notifications: Increase implicit size of standalone popup (kde#448383)
  * applets-digital/clock: Add workaround for QTBUG-83890 (kde#448387)
  * Clean up "empty" mimeType containg only whitespaces
  * dataengines/apps: Use KIO::ApplicationLauncherJob for starting KService
  * [containmentactions/applauncher] Use ApplicationLauncherJob instead of OpenUrlJob (kde#449900)
  * Desktop: Still show services with nodisplay=true set (kde#449243)
  * appstream runner: De-duplicate results from multiple sources (kde#448619)
  * Fix ksplash always using default theme. (kde#446966)
  * kcms/users: Fix missing template arguments before reply in FingerprintModel
  * De-duplicate 'Uninstall or manage addons' option in the context menu of Kickoff (kde#448564)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1645531200">- Update to 5.24.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.2
- Changes since 5.24.1:
  * applets/clipboard: Focus on the search field for the first time opening the applet
  * applets/clipboard: Make Up/Down arrow keys work in ClipboardPage (kde#448811,kde#450040)
  * applets/panelspacer: Fix optimal size calculation (kde#431668)
  * Fix overdraw on Wayland
  * PanelView: Do not crash when the state is transitioning (kde#373461)
  * Fix launch kscreen kcm in font kcm.
  * Don't install two copies of kcm_fontinst
  * Lock/login themes: stop adjusting shadows based on color scheme (kde#449985)
  * Top-align lock/login/logout screen action buttons (kde#450238)
  * [kcms/user] Set interactive auth flag for more calls (kde#450122)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1645704000">- Add patch to fix log output of some processes (boo#1196206):
  * 0001-startkde-Forward-stdout-stderr-of-started-processes.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1646654400">- Replace %_libdir/libexec with %_libexecdir (boo#1174075)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1646740800">- Update to 5.24.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.3
- Changes since 5.24.2:
  * kcms/colors: Implement radio button layouts better
  * kcms/colors: fix spacing between radio buttons and content
  * [Battery Monitor] Only show charge threshold hint for power supply batteries (kde#451161)
  * [Icons KCM] Give measure delegate a text
  * wallpapers: Sort BackgroundListModel by title
  * applets/digital-clock: Fix `Qt.formatDateTime` returns different date when minute changes (kde#436796)
  * applets/systray: align applet labels with differing line counts in hidden view (kde#438347)
  * Show panel config above other windows (kde#450794)
  * Use current accent colour to set ColorDialog object in colour picker
  * SystemDialog: Allow accepting the dialogs with the keyboard (kde#450223)
  * applets/systemtray: Do not open context menu on mouse pressed for SNI (kde#409768)
  * Revert "Fix overdraw on Wayland"
  * startkde: Forward stdout/stderr of started processes
  * SDDM theme: stop eliding people's names so aggressively (kde#450673)
  * applets/digital-clock: Word-wrap date string for desktop representation (kde#450632)
  * wrap completely the invariants timer in NDEBUG
  * ScreenPool as the source of truth of QScreen info
  * Always ensure there is an user selected (kde#450182)
  * Prevent panel going out of screen boundaries
  * applets/clipboard: Focus on text area when transition is done
  * applets/clipboard: Fix highlight after exiting edit mode
- Drop patches, now upstream:
  * 0001-startkde-Forward-stdout-stderr-of-started-processes.patch
- Restore compatibility with older kf5-filesystem</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1648555200">- Update to 5.24.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.4
- Changes since 5.24.3:
  * kcms/users: Adjust for padding in overlay sheet (kde#451031)
  * [Media Controller] Explicitly set slider "to" before setting "value"
  * [Notifications] Fix implicit size propagation in SelectableLabel
  * applets/kicker: Skip creating KService for non-desktop files or folders (kde#442970)
  * Fix sleep/suspend sometimes not working ... from ksmserver-logout-greeter, by making the DBus calls synchronous.
  * kicker/actionlist: Ensure we parse the args for the jumplist actions (kde#451418)
  * libtaskmanager: recompute active task when a task is removed
  * sddm/lockscreen: Fix weird behaviour
  * [Notifications] Limit notification heading line count</changelog>
  <changelog author="Fushan Wen &lt;qydwhotmail@gmail.com&gt;" date="1656590400">- Fix a potential crash when deleting a panel with a system tray applet
  (kde#453726)
  * 0001-applets-systemtray-disconnect-KConfigLoader-signal-w.patch
- Fix a potential crash on logout (kde#454159)
  * 0001-Avoid-crash-in-plasma-session-teardown.patch</changelog>
</package>
<package pkgid="465a597b439f6bbd426cd3d3d74b46699caecee85fd6c02ffea7b68198db2985" name="xlockmore" arch="aarch64">
  <version epoch="0" ver="5.68" rel="bp154.2.3.1"/>
  <changelog author="sbrabec@suse.cz" date="1422446400">- Update to version 5.45:
  * Prevent pyro2 from X error.
  * Fix pentomino undefined behavior.
  * dilemma, voters, wator size fix for neighbors = 6.
  * Proper crediting for High Life part of life mode.
  * A few new gliders and patterns for life and life3d.
- Enable Xinerama support (bsc#911133), gltt, xpm and ImageMagick
  support.</changelog>
  <changelog author="pgajdos@suse.com" date="1425988800">- removed GPL-2.0+ from license string [bnc#734014]</changelog>
  <changelog author="vcizek@suse.com" date="1425988801">- fix a crash in nose mode (bnc#882747)
  * added xlockmore-nose_mode_crash.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1486555200">- Drop esound-devel BuildRequires: the distro moved away from
  esound some years ago.
- Drop xlockmore-no-copy-dt-needed-entries.patch: as esd is no
  longer being built, we also don't need to link it anymore.</changelog>
  <changelog author="lnussel@suse.de" date="1490702400">- don't require pam-modules and unix2_chkpwd anymore. We use
  pam_unix noways which transparently manages access to /etc/shadow</changelog>
  <changelog author="sbrabec@suse.com" date="1493208000">- Update to version 5.53:
  * dclock fix for led bounce.
  * Install changes for fortune.
  * strange mode updates.
  * life3d updates.
  * messagefont fix.
  * Changed default message font.
  * spiral erase mode changed.
  * Fix for kumppa -speed 0.2.
  * new website at http://www.sillycycle.com
  * xmb fonts fix.
  * fixed xjack mode.
  * Updated language use.
- Refresh xlockmore-bitmaps.patch, xlockmore-ttf_dir.patch,
  xlockmore-extend-freetype-include-search.patch.
- Re-enable PAM (boo#1035688).
- Disable obsolete --enable-use-mb.</changelog>
  <changelog author="sbrabec@suse.com" date="1493380800">- Add a fix for double entering of password in non-English locales
  (boo#1035688, xlockmore-pam.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1496232000">- Update to version 5.54:
  * strange mode updates.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1513080000">- Remove unused build require on gltt-devel, this allows to drop
  gltt and ancient freetype 1.x too.</changelog>
  <changelog author="astieger@suse.com" date="1524484800">- remove dependency on gpg-offline, part of source services now</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1599739200">- update to 5.65:
  Fix from Jan Kratochvil and Adrian Reber, adrian AT lisas.de for Fedora.
    xlock -startCmd true... would core on Fedora, exit() replaced with
    _exit().
  Update for magick.c to use strncpy thanks to Jouk Jansen.
  Fix for hyper mode from original author, for potential but not
    likely memory leak and free(NULL) issue John Heidemann, johnh
    AT isi.edu.
  More buffer gcc warnings removed for dclock.c, image.c, and
    scrnsave.c.
  ras.c/magick.c gcc 10 fix from Adrian Reber, adrian AT lisas.de .
    VMS already handles this in make.com.
  Lots of spelling errors fixed due to codespell
    https://manpages.debian.org/testing/codespell/codespell.1.en.html
  A few more gl modes (molecule, invert) fixed up by
    EoflaOE ViceCity to run in xscreensaver.
  Added additional changes to solitaire and invert.  invert will
    build in xscreensaver with some coaxing, see README in
    xscreensaver directory.
  Removed buffer gcc warning about nose.c.
  Fix from brett.diamond AT gmail.com to get "xlock -help" from
    crashing.
  As a Blake's 7 fan, I had to add the Liberator to star mode.
  Same fix from Jouk Jansen and Adrian Reber, adrian AT lisas.de
    for juggler3d.cc in previous release.
  Change from Denys Vlasenko (thanks to Adrian Reber for pointing out)
    https://bugzilla.redhat.com/show_bug.cgi?id=874484
    This helps xlock's parent process to know xlock crashed.
  ico mode added truncated octahedron.
  Another gl mode, sierpinski3d, fixed up by EoflaOE ViceCity to run
    in xscreensaver.
  Updated references to website to https.  https://www.sillycycle.com
  A few more gl modes (incl. maze3d, pipe, sproingies) fixed up by
    EoflaOE ViceCity to run in xscreensaver.
  Thanks to tobik, ohartmann AT walstatt.org, and Jason Helfman,
    jgh AT FreeBSD.org for xglock fixes for "failed due to signal" for
    clang.
  Syncing with xscreensaver and many modes modified, more than
    half working there.  pacman and puzzle run but need some
    obvious work, others run too fast or flash on the screen.
    Various fixes from Jouk Jansen and EoflaOE ViceCity.
    Updated GL modes also, inaddition to overlap: biof, skewb, and
    fire (needs images). See xscreensaver/README for new directions.
  Updated in linux to build with modules, must have broken somewhere
    down the line.  imake build fixed too.
  bomb mode fixed for xlock.
  Syncing with xscreensaver.  Much has changed since last time this
    was done and much left to do.  Nonglx "a"'s and some "b"'s done
    so far.  Automata modes like ant.c should use automata.c and
    automata.h supplied by xlockmore.
    ball bat not working right there yet.  Also bouboule to do right will
    require changes to xlockmore files from xscreensaver.
    See new xscreensaver/README for instructions.
  While testing uncovered old security bug in anenome mode and fixed.
  life updates to use a more standard notation for nontotalistic cellular
    automata.
  ax_pthread.m4 needed for autoconf, added back in, oops.
  Removed VMS caddr_t fix from matrix.c, cage.c, gears.c, glplanet.c,
    invert.c, juggler3d.c, lament.c, moebius.c, molecule.c, morph3d.c,
    noof.c, pipes.c, rubik.c, sierpinski3d.c, skewb.c, stairs.c,
    superquadrics.c as no longer needed.  Thanks to Jouk Jansen.
  boxed and maze3d modes added thanks mainly to Jouk Jansen.
  boxed added to xlock95.scr.  xlock95 Makefile now builds to 64 bit.
  Thanks to Jason Helfman, jgh AT FreeBSD.org for sound installation fixes.
  Thanks to Tobias Kortkamp, for his patch for glock compile issue with
    CLANG 6.0.0.
  Fixing warnings using clang for back.xpm, nose.c, passwd.c.
  Fixing errors using g++ for deluxe.c, also various casting added.
  Fixing potential some buffer overruns pointed out in mingw in
    apollonian.c and hyper.c.
  Fixing potential error of using null pointer thanks again to mingw in
    xlock.c.
  pyro2 was not showing anything on screen due to it not finding font,
    changed it to default to mode_font if can not find.
  Thanks to Dave Odell, dmo2118 AT gmail.com for his fzort mode update to
    use the functions in xshm.c and fixes crash when running X11 over network.
  Note from Dave Odell:
    &lt;https://www.jwz.org/xscreensaver/xscreensaver-5.37.tar.gz&gt;. MI_INIT() is
    defined and documented in hacks/xlockmore.h, with related functions
    defined in hacks/xlockmore.c.  MI_INIT() currently takes three parameters:
    the ModeInfo *, the state array, and a function pointer for the new free
    hook. FWIW, it could instead be just the first two parameters, with the
    free hook being set up like the other ModeHooks; this would be a bit
    nicer, I think. But I was going for something that could be applied
    incrementally to individual screenhacks in XScreenSaver, and could -- in
    theory -- be brought back to xlockmore with minimal impact.
  ant mode resync'd with xscreensaver...  Thanks to David Odell redoing my
    sad attempt.
  - sound configuration changed around so it should work on more machines,
    now uses DEF_PLAY and play.sh by default.
  Thanks to Stanislav Brabec, sbrabec AT suse.cz for his "hack" to fix for
    PAM with non-English locales.  He notes to fix properly a "Password"
    prompt list should be obtained at the initial phase of authentication.
    Added PAM_PASSWORD_PROMPT for using old way.
  Fixed leak in scooter thanks to Valgrind.
- remove xlockmore-pam.patch (upstream/obsolete)</changelog>
  <changelog author="Wang Jun &lt;jgwang@suse.com&gt;" date="1605873600">- update to 5.66:
  GL mode atunnels, juggler3d, atlantis, lament, invert, solitaire, text3d,
    and text3d2 fixed up by EoflaOE ViceCity and myself to build in
    xscreensaver.
  bomb, helix, lightning, penrose, petal, scooter fixes for xscreensaver
    port (clear screen issue).  Clock fixed to run by changing a spot from
    "Clock" to "CLOCK".
  A few updates from xscreensaver-5.44/hacks/xlockmore.c for xscreensaver
    port.
  Duplicate resources and unloadable resources for xscreensaver port fixed
    by EoflaOE.
  Double free removed for xscreensaver port fixed by EoflaOE and myself.
  Removed some warnings in xscreensaver port in fzort, rubik, skewb, and
    sproingies.
  Xpm textures added to xscreensaver ports that need them.
  image, puzzle, decay, bat now work but use xscreensaver bitmap/pixmap
    in xscreensaver port.
  Bug fix in qix and toneclock for xscreensaver port, xlock was not
    affected by negative NRAND input.
  euler2d synced up with xscreensaver version.
  Change to fzort to use __asm__ instead of asm as its probably more
    likely to work.
  Fixed solitaire so deckPile changes just a little bit as it doles
    out cards.
  Updated bomb to use size 18 font when USE_MB is not set as it seems
    34 is not widely available anymore.
  pacman now has different colored ghosts (no green ghost) and also
    oscillating dress and eyes.  See README for a notice for this mode.
  Fixed some bad drawings in solitaire and pacman noticed on
    Windows side.
  Warnings removed for -Wstrict-prototypes -Wmissing-prototypes
  - Wdeclaration-after-statement</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1634385600">- update to 5.67:
  * Fixing specified bound equals destination size warning in iostuff.c.
  * Port updated for xscreensaver-6.01.  With help from EoflaOE ViceCity.
  * maze3d.c updated for VMS as CRTL now contains more standard functions</changelog>
  <changelog author="Avinesh Kumar &lt;avinesh.kumar@suse.com&gt;" date="1643112000">- update to 5.68:
  * Updated xscreensaver port for xscreensaver-6.02.
  * Various NetBsd install issues fixed including config.cygport.
  * pam vulnerabiliy patch added thanks to Elmar Hoffmann, elho AT elho.net.
    Card vulnerability may remain, see README.
  * module fixes for deluxe, eyes, starfish, swirl, text3d2, module use is
    still experimental.
  * biof mode removed again (though was not building by default).</changelog>
  <changelog author="Daniel Garcia &lt;daniel.garcia@suse.com&gt;" date="1671624000">- Install resource files in /usr/lib/X11/app-defeaults/XLock instead of
  /usr/share.
  Fixes bsc#1204597</changelog>
</package>
<package pkgid="76b45a18de3b7fc95d75471540cccd889922344662a4fde2bda7fc6929ddfd16" name="xlockmore" arch="i586">
  <version epoch="0" ver="5.68" rel="bp154.2.3.1"/>
  <changelog author="sbrabec@suse.cz" date="1422446400">- Update to version 5.45:
  * Prevent pyro2 from X error.
  * Fix pentomino undefined behavior.
  * dilemma, voters, wator size fix for neighbors = 6.
  * Proper crediting for High Life part of life mode.
  * A few new gliders and patterns for life and life3d.
- Enable Xinerama support (bsc#911133), gltt, xpm and ImageMagick
  support.</changelog>
  <changelog author="pgajdos@suse.com" date="1425988800">- removed GPL-2.0+ from license string [bnc#734014]</changelog>
  <changelog author="vcizek@suse.com" date="1425988801">- fix a crash in nose mode (bnc#882747)
  * added xlockmore-nose_mode_crash.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1486555200">- Drop esound-devel BuildRequires: the distro moved away from
  esound some years ago.
- Drop xlockmore-no-copy-dt-needed-entries.patch: as esd is no
  longer being built, we also don't need to link it anymore.</changelog>
  <changelog author="lnussel@suse.de" date="1490702400">- don't require pam-modules and unix2_chkpwd anymore. We use
  pam_unix noways which transparently manages access to /etc/shadow</changelog>
  <changelog author="sbrabec@suse.com" date="1493208000">- Update to version 5.53:
  * dclock fix for led bounce.
  * Install changes for fortune.
  * strange mode updates.
  * life3d updates.
  * messagefont fix.
  * Changed default message font.
  * spiral erase mode changed.
  * Fix for kumppa -speed 0.2.
  * new website at http://www.sillycycle.com
  * xmb fonts fix.
  * fixed xjack mode.
  * Updated language use.
- Refresh xlockmore-bitmaps.patch, xlockmore-ttf_dir.patch,
  xlockmore-extend-freetype-include-search.patch.
- Re-enable PAM (boo#1035688).
- Disable obsolete --enable-use-mb.</changelog>
  <changelog author="sbrabec@suse.com" date="1493380800">- Add a fix for double entering of password in non-English locales
  (boo#1035688, xlockmore-pam.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1496232000">- Update to version 5.54:
  * strange mode updates.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1513080000">- Remove unused build require on gltt-devel, this allows to drop
  gltt and ancient freetype 1.x too.</changelog>
  <changelog author="astieger@suse.com" date="1524484800">- remove dependency on gpg-offline, part of source services now</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1599739200">- update to 5.65:
  Fix from Jan Kratochvil and Adrian Reber, adrian AT lisas.de for Fedora.
    xlock -startCmd true... would core on Fedora, exit() replaced with
    _exit().
  Update for magick.c to use strncpy thanks to Jouk Jansen.
  Fix for hyper mode from original author, for potential but not
    likely memory leak and free(NULL) issue John Heidemann, johnh
    AT isi.edu.
  More buffer gcc warnings removed for dclock.c, image.c, and
    scrnsave.c.
  ras.c/magick.c gcc 10 fix from Adrian Reber, adrian AT lisas.de .
    VMS already handles this in make.com.
  Lots of spelling errors fixed due to codespell
    https://manpages.debian.org/testing/codespell/codespell.1.en.html
  A few more gl modes (molecule, invert) fixed up by
    EoflaOE ViceCity to run in xscreensaver.
  Added additional changes to solitaire and invert.  invert will
    build in xscreensaver with some coaxing, see README in
    xscreensaver directory.
  Removed buffer gcc warning about nose.c.
  Fix from brett.diamond AT gmail.com to get "xlock -help" from
    crashing.
  As a Blake's 7 fan, I had to add the Liberator to star mode.
  Same fix from Jouk Jansen and Adrian Reber, adrian AT lisas.de
    for juggler3d.cc in previous release.
  Change from Denys Vlasenko (thanks to Adrian Reber for pointing out)
    https://bugzilla.redhat.com/show_bug.cgi?id=874484
    This helps xlock's parent process to know xlock crashed.
  ico mode added truncated octahedron.
  Another gl mode, sierpinski3d, fixed up by EoflaOE ViceCity to run
    in xscreensaver.
  Updated references to website to https.  https://www.sillycycle.com
  A few more gl modes (incl. maze3d, pipe, sproingies) fixed up by
    EoflaOE ViceCity to run in xscreensaver.
  Thanks to tobik, ohartmann AT walstatt.org, and Jason Helfman,
    jgh AT FreeBSD.org for xglock fixes for "failed due to signal" for
    clang.
  Syncing with xscreensaver and many modes modified, more than
    half working there.  pacman and puzzle run but need some
    obvious work, others run too fast or flash on the screen.
    Various fixes from Jouk Jansen and EoflaOE ViceCity.
    Updated GL modes also, inaddition to overlap: biof, skewb, and
    fire (needs images). See xscreensaver/README for new directions.
  Updated in linux to build with modules, must have broken somewhere
    down the line.  imake build fixed too.
  bomb mode fixed for xlock.
  Syncing with xscreensaver.  Much has changed since last time this
    was done and much left to do.  Nonglx "a"'s and some "b"'s done
    so far.  Automata modes like ant.c should use automata.c and
    automata.h supplied by xlockmore.
    ball bat not working right there yet.  Also bouboule to do right will
    require changes to xlockmore files from xscreensaver.
    See new xscreensaver/README for instructions.
  While testing uncovered old security bug in anenome mode and fixed.
  life updates to use a more standard notation for nontotalistic cellular
    automata.
  ax_pthread.m4 needed for autoconf, added back in, oops.
  Removed VMS caddr_t fix from matrix.c, cage.c, gears.c, glplanet.c,
    invert.c, juggler3d.c, lament.c, moebius.c, molecule.c, morph3d.c,
    noof.c, pipes.c, rubik.c, sierpinski3d.c, skewb.c, stairs.c,
    superquadrics.c as no longer needed.  Thanks to Jouk Jansen.
  boxed and maze3d modes added thanks mainly to Jouk Jansen.
  boxed added to xlock95.scr.  xlock95 Makefile now builds to 64 bit.
  Thanks to Jason Helfman, jgh AT FreeBSD.org for sound installation fixes.
  Thanks to Tobias Kortkamp, for his patch for glock compile issue with
    CLANG 6.0.0.
  Fixing warnings using clang for back.xpm, nose.c, passwd.c.
  Fixing errors using g++ for deluxe.c, also various casting added.
  Fixing potential some buffer overruns pointed out in mingw in
    apollonian.c and hyper.c.
  Fixing potential error of using null pointer thanks again to mingw in
    xlock.c.
  pyro2 was not showing anything on screen due to it not finding font,
    changed it to default to mode_font if can not find.
  Thanks to Dave Odell, dmo2118 AT gmail.com for his fzort mode update to
    use the functions in xshm.c and fixes crash when running X11 over network.
  Note from Dave Odell:
    &lt;https://www.jwz.org/xscreensaver/xscreensaver-5.37.tar.gz&gt;. MI_INIT() is
    defined and documented in hacks/xlockmore.h, with related functions
    defined in hacks/xlockmore.c.  MI_INIT() currently takes three parameters:
    the ModeInfo *, the state array, and a function pointer for the new free
    hook. FWIW, it could instead be just the first two parameters, with the
    free hook being set up like the other ModeHooks; this would be a bit
    nicer, I think. But I was going for something that could be applied
    incrementally to individual screenhacks in XScreenSaver, and could -- in
    theory -- be brought back to xlockmore with minimal impact.
  ant mode resync'd with xscreensaver...  Thanks to David Odell redoing my
    sad attempt.
  - sound configuration changed around so it should work on more machines,
    now uses DEF_PLAY and play.sh by default.
  Thanks to Stanislav Brabec, sbrabec AT suse.cz for his "hack" to fix for
    PAM with non-English locales.  He notes to fix properly a "Password"
    prompt list should be obtained at the initial phase of authentication.
    Added PAM_PASSWORD_PROMPT for using old way.
  Fixed leak in scooter thanks to Valgrind.
- remove xlockmore-pam.patch (upstream/obsolete)</changelog>
  <changelog author="Wang Jun &lt;jgwang@suse.com&gt;" date="1605873600">- update to 5.66:
  GL mode atunnels, juggler3d, atlantis, lament, invert, solitaire, text3d,
    and text3d2 fixed up by EoflaOE ViceCity and myself to build in
    xscreensaver.
  bomb, helix, lightning, penrose, petal, scooter fixes for xscreensaver
    port (clear screen issue).  Clock fixed to run by changing a spot from
    "Clock" to "CLOCK".
  A few updates from xscreensaver-5.44/hacks/xlockmore.c for xscreensaver
    port.
  Duplicate resources and unloadable resources for xscreensaver port fixed
    by EoflaOE.
  Double free removed for xscreensaver port fixed by EoflaOE and myself.
  Removed some warnings in xscreensaver port in fzort, rubik, skewb, and
    sproingies.
  Xpm textures added to xscreensaver ports that need them.
  image, puzzle, decay, bat now work but use xscreensaver bitmap/pixmap
    in xscreensaver port.
  Bug fix in qix and toneclock for xscreensaver port, xlock was not
    affected by negative NRAND input.
  euler2d synced up with xscreensaver version.
  Change to fzort to use __asm__ instead of asm as its probably more
    likely to work.
  Fixed solitaire so deckPile changes just a little bit as it doles
    out cards.
  Updated bomb to use size 18 font when USE_MB is not set as it seems
    34 is not widely available anymore.
  pacman now has different colored ghosts (no green ghost) and also
    oscillating dress and eyes.  See README for a notice for this mode.
  Fixed some bad drawings in solitaire and pacman noticed on
    Windows side.
  Warnings removed for -Wstrict-prototypes -Wmissing-prototypes
  - Wdeclaration-after-statement</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1634385600">- update to 5.67:
  * Fixing specified bound equals destination size warning in iostuff.c.
  * Port updated for xscreensaver-6.01.  With help from EoflaOE ViceCity.
  * maze3d.c updated for VMS as CRTL now contains more standard functions</changelog>
  <changelog author="Avinesh Kumar &lt;avinesh.kumar@suse.com&gt;" date="1643112000">- update to 5.68:
  * Updated xscreensaver port for xscreensaver-6.02.
  * Various NetBsd install issues fixed including config.cygport.
  * pam vulnerabiliy patch added thanks to Elmar Hoffmann, elho AT elho.net.
    Card vulnerability may remain, see README.
  * module fixes for deluxe, eyes, starfish, swirl, text3d2, module use is
    still experimental.
  * biof mode removed again (though was not building by default).</changelog>
  <changelog author="Daniel Garcia &lt;daniel.garcia@suse.com&gt;" date="1671624000">- Install resource files in /usr/lib/X11/app-defeaults/XLock instead of
  /usr/share.
  Fixes bsc#1204597</changelog>
</package>
<package pkgid="fe3ddbbb75b022323f76a3c8428bfe8c3ba16e002547fcbabf7cf21540a41b7b" name="xlockmore" arch="ppc64le">
  <version epoch="0" ver="5.68" rel="bp154.2.3.1"/>
  <changelog author="sbrabec@suse.cz" date="1422446400">- Update to version 5.45:
  * Prevent pyro2 from X error.
  * Fix pentomino undefined behavior.
  * dilemma, voters, wator size fix for neighbors = 6.
  * Proper crediting for High Life part of life mode.
  * A few new gliders and patterns for life and life3d.
- Enable Xinerama support (bsc#911133), gltt, xpm and ImageMagick
  support.</changelog>
  <changelog author="pgajdos@suse.com" date="1425988800">- removed GPL-2.0+ from license string [bnc#734014]</changelog>
  <changelog author="vcizek@suse.com" date="1425988801">- fix a crash in nose mode (bnc#882747)
  * added xlockmore-nose_mode_crash.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1486555200">- Drop esound-devel BuildRequires: the distro moved away from
  esound some years ago.
- Drop xlockmore-no-copy-dt-needed-entries.patch: as esd is no
  longer being built, we also don't need to link it anymore.</changelog>
  <changelog author="lnussel@suse.de" date="1490702400">- don't require pam-modules and unix2_chkpwd anymore. We use
  pam_unix noways which transparently manages access to /etc/shadow</changelog>
  <changelog author="sbrabec@suse.com" date="1493208000">- Update to version 5.53:
  * dclock fix for led bounce.
  * Install changes for fortune.
  * strange mode updates.
  * life3d updates.
  * messagefont fix.
  * Changed default message font.
  * spiral erase mode changed.
  * Fix for kumppa -speed 0.2.
  * new website at http://www.sillycycle.com
  * xmb fonts fix.
  * fixed xjack mode.
  * Updated language use.
- Refresh xlockmore-bitmaps.patch, xlockmore-ttf_dir.patch,
  xlockmore-extend-freetype-include-search.patch.
- Re-enable PAM (boo#1035688).
- Disable obsolete --enable-use-mb.</changelog>
  <changelog author="sbrabec@suse.com" date="1493380800">- Add a fix for double entering of password in non-English locales
  (boo#1035688, xlockmore-pam.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1496232000">- Update to version 5.54:
  * strange mode updates.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1513080000">- Remove unused build require on gltt-devel, this allows to drop
  gltt and ancient freetype 1.x too.</changelog>
  <changelog author="astieger@suse.com" date="1524484800">- remove dependency on gpg-offline, part of source services now</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1599739200">- update to 5.65:
  Fix from Jan Kratochvil and Adrian Reber, adrian AT lisas.de for Fedora.
    xlock -startCmd true... would core on Fedora, exit() replaced with
    _exit().
  Update for magick.c to use strncpy thanks to Jouk Jansen.
  Fix for hyper mode from original author, for potential but not
    likely memory leak and free(NULL) issue John Heidemann, johnh
    AT isi.edu.
  More buffer gcc warnings removed for dclock.c, image.c, and
    scrnsave.c.
  ras.c/magick.c gcc 10 fix from Adrian Reber, adrian AT lisas.de .
    VMS already handles this in make.com.
  Lots of spelling errors fixed due to codespell
    https://manpages.debian.org/testing/codespell/codespell.1.en.html
  A few more gl modes (molecule, invert) fixed up by
    EoflaOE ViceCity to run in xscreensaver.
  Added additional changes to solitaire and invert.  invert will
    build in xscreensaver with some coaxing, see README in
    xscreensaver directory.
  Removed buffer gcc warning about nose.c.
  Fix from brett.diamond AT gmail.com to get "xlock -help" from
    crashing.
  As a Blake's 7 fan, I had to add the Liberator to star mode.
  Same fix from Jouk Jansen and Adrian Reber, adrian AT lisas.de
    for juggler3d.cc in previous release.
  Change from Denys Vlasenko (thanks to Adrian Reber for pointing out)
    https://bugzilla.redhat.com/show_bug.cgi?id=874484
    This helps xlock's parent process to know xlock crashed.
  ico mode added truncated octahedron.
  Another gl mode, sierpinski3d, fixed up by EoflaOE ViceCity to run
    in xscreensaver.
  Updated references to website to https.  https://www.sillycycle.com
  A few more gl modes (incl. maze3d, pipe, sproingies) fixed up by
    EoflaOE ViceCity to run in xscreensaver.
  Thanks to tobik, ohartmann AT walstatt.org, and Jason Helfman,
    jgh AT FreeBSD.org for xglock fixes for "failed due to signal" for
    clang.
  Syncing with xscreensaver and many modes modified, more than
    half working there.  pacman and puzzle run but need some
    obvious work, others run too fast or flash on the screen.
    Various fixes from Jouk Jansen and EoflaOE ViceCity.
    Updated GL modes also, inaddition to overlap: biof, skewb, and
    fire (needs images). See xscreensaver/README for new directions.
  Updated in linux to build with modules, must have broken somewhere
    down the line.  imake build fixed too.
  bomb mode fixed for xlock.
  Syncing with xscreensaver.  Much has changed since last time this
    was done and much left to do.  Nonglx "a"'s and some "b"'s done
    so far.  Automata modes like ant.c should use automata.c and
    automata.h supplied by xlockmore.
    ball bat not working right there yet.  Also bouboule to do right will
    require changes to xlockmore files from xscreensaver.
    See new xscreensaver/README for instructions.
  While testing uncovered old security bug in anenome mode and fixed.
  life updates to use a more standard notation for nontotalistic cellular
    automata.
  ax_pthread.m4 needed for autoconf, added back in, oops.
  Removed VMS caddr_t fix from matrix.c, cage.c, gears.c, glplanet.c,
    invert.c, juggler3d.c, lament.c, moebius.c, molecule.c, morph3d.c,
    noof.c, pipes.c, rubik.c, sierpinski3d.c, skewb.c, stairs.c,
    superquadrics.c as no longer needed.  Thanks to Jouk Jansen.
  boxed and maze3d modes added thanks mainly to Jouk Jansen.
  boxed added to xlock95.scr.  xlock95 Makefile now builds to 64 bit.
  Thanks to Jason Helfman, jgh AT FreeBSD.org for sound installation fixes.
  Thanks to Tobias Kortkamp, for his patch for glock compile issue with
    CLANG 6.0.0.
  Fixing warnings using clang for back.xpm, nose.c, passwd.c.
  Fixing errors using g++ for deluxe.c, also various casting added.
  Fixing potential some buffer overruns pointed out in mingw in
    apollonian.c and hyper.c.
  Fixing potential error of using null pointer thanks again to mingw in
    xlock.c.
  pyro2 was not showing anything on screen due to it not finding font,
    changed it to default to mode_font if can not find.
  Thanks to Dave Odell, dmo2118 AT gmail.com for his fzort mode update to
    use the functions in xshm.c and fixes crash when running X11 over network.
  Note from Dave Odell:
    &lt;https://www.jwz.org/xscreensaver/xscreensaver-5.37.tar.gz&gt;. MI_INIT() is
    defined and documented in hacks/xlockmore.h, with related functions
    defined in hacks/xlockmore.c.  MI_INIT() currently takes three parameters:
    the ModeInfo *, the state array, and a function pointer for the new free
    hook. FWIW, it could instead be just the first two parameters, with the
    free hook being set up like the other ModeHooks; this would be a bit
    nicer, I think. But I was going for something that could be applied
    incrementally to individual screenhacks in XScreenSaver, and could -- in
    theory -- be brought back to xlockmore with minimal impact.
  ant mode resync'd with xscreensaver...  Thanks to David Odell redoing my
    sad attempt.
  - sound configuration changed around so it should work on more machines,
    now uses DEF_PLAY and play.sh by default.
  Thanks to Stanislav Brabec, sbrabec AT suse.cz for his "hack" to fix for
    PAM with non-English locales.  He notes to fix properly a "Password"
    prompt list should be obtained at the initial phase of authentication.
    Added PAM_PASSWORD_PROMPT for using old way.
  Fixed leak in scooter thanks to Valgrind.
- remove xlockmore-pam.patch (upstream/obsolete)</changelog>
  <changelog author="Wang Jun &lt;jgwang@suse.com&gt;" date="1605873600">- update to 5.66:
  GL mode atunnels, juggler3d, atlantis, lament, invert, solitaire, text3d,
    and text3d2 fixed up by EoflaOE ViceCity and myself to build in
    xscreensaver.
  bomb, helix, lightning, penrose, petal, scooter fixes for xscreensaver
    port (clear screen issue).  Clock fixed to run by changing a spot from
    "Clock" to "CLOCK".
  A few updates from xscreensaver-5.44/hacks/xlockmore.c for xscreensaver
    port.
  Duplicate resources and unloadable resources for xscreensaver port fixed
    by EoflaOE.
  Double free removed for xscreensaver port fixed by EoflaOE and myself.
  Removed some warnings in xscreensaver port in fzort, rubik, skewb, and
    sproingies.
  Xpm textures added to xscreensaver ports that need them.
  image, puzzle, decay, bat now work but use xscreensaver bitmap/pixmap
    in xscreensaver port.
  Bug fix in qix and toneclock for xscreensaver port, xlock was not
    affected by negative NRAND input.
  euler2d synced up with xscreensaver version.
  Change to fzort to use __asm__ instead of asm as its probably more
    likely to work.
  Fixed solitaire so deckPile changes just a little bit as it doles
    out cards.
  Updated bomb to use size 18 font when USE_MB is not set as it seems
    34 is not widely available anymore.
  pacman now has different colored ghosts (no green ghost) and also
    oscillating dress and eyes.  See README for a notice for this mode.
  Fixed some bad drawings in solitaire and pacman noticed on
    Windows side.
  Warnings removed for -Wstrict-prototypes -Wmissing-prototypes
  - Wdeclaration-after-statement</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1634385600">- update to 5.67:
  * Fixing specified bound equals destination size warning in iostuff.c.
  * Port updated for xscreensaver-6.01.  With help from EoflaOE ViceCity.
  * maze3d.c updated for VMS as CRTL now contains more standard functions</changelog>
  <changelog author="Avinesh Kumar &lt;avinesh.kumar@suse.com&gt;" date="1643112000">- update to 5.68:
  * Updated xscreensaver port for xscreensaver-6.02.
  * Various NetBsd install issues fixed including config.cygport.
  * pam vulnerabiliy patch added thanks to Elmar Hoffmann, elho AT elho.net.
    Card vulnerability may remain, see README.
  * module fixes for deluxe, eyes, starfish, swirl, text3d2, module use is
    still experimental.
  * biof mode removed again (though was not building by default).</changelog>
  <changelog author="Daniel Garcia &lt;daniel.garcia@suse.com&gt;" date="1671624000">- Install resource files in /usr/lib/X11/app-defeaults/XLock instead of
  /usr/share.
  Fixes bsc#1204597</changelog>
</package>
<package pkgid="b4771337162f4da2e3f07696276cb6171ac99fd624eca04765061640fbc930eb" name="xlockmore" arch="s390x">
  <version epoch="0" ver="5.68" rel="bp154.2.3.1"/>
  <changelog author="sbrabec@suse.cz" date="1422446400">- Update to version 5.45:
  * Prevent pyro2 from X error.
  * Fix pentomino undefined behavior.
  * dilemma, voters, wator size fix for neighbors = 6.
  * Proper crediting for High Life part of life mode.
  * A few new gliders and patterns for life and life3d.
- Enable Xinerama support (bsc#911133), gltt, xpm and ImageMagick
  support.</changelog>
  <changelog author="pgajdos@suse.com" date="1425988800">- removed GPL-2.0+ from license string [bnc#734014]</changelog>
  <changelog author="vcizek@suse.com" date="1425988801">- fix a crash in nose mode (bnc#882747)
  * added xlockmore-nose_mode_crash.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1486555200">- Drop esound-devel BuildRequires: the distro moved away from
  esound some years ago.
- Drop xlockmore-no-copy-dt-needed-entries.patch: as esd is no
  longer being built, we also don't need to link it anymore.</changelog>
  <changelog author="lnussel@suse.de" date="1490702400">- don't require pam-modules and unix2_chkpwd anymore. We use
  pam_unix noways which transparently manages access to /etc/shadow</changelog>
  <changelog author="sbrabec@suse.com" date="1493208000">- Update to version 5.53:
  * dclock fix for led bounce.
  * Install changes for fortune.
  * strange mode updates.
  * life3d updates.
  * messagefont fix.
  * Changed default message font.
  * spiral erase mode changed.
  * Fix for kumppa -speed 0.2.
  * new website at http://www.sillycycle.com
  * xmb fonts fix.
  * fixed xjack mode.
  * Updated language use.
- Refresh xlockmore-bitmaps.patch, xlockmore-ttf_dir.patch,
  xlockmore-extend-freetype-include-search.patch.
- Re-enable PAM (boo#1035688).
- Disable obsolete --enable-use-mb.</changelog>
  <changelog author="sbrabec@suse.com" date="1493380800">- Add a fix for double entering of password in non-English locales
  (boo#1035688, xlockmore-pam.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1496232000">- Update to version 5.54:
  * strange mode updates.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1513080000">- Remove unused build require on gltt-devel, this allows to drop
  gltt and ancient freetype 1.x too.</changelog>
  <changelog author="astieger@suse.com" date="1524484800">- remove dependency on gpg-offline, part of source services now</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1599739200">- update to 5.65:
  Fix from Jan Kratochvil and Adrian Reber, adrian AT lisas.de for Fedora.
    xlock -startCmd true... would core on Fedora, exit() replaced with
    _exit().
  Update for magick.c to use strncpy thanks to Jouk Jansen.
  Fix for hyper mode from original author, for potential but not
    likely memory leak and free(NULL) issue John Heidemann, johnh
    AT isi.edu.
  More buffer gcc warnings removed for dclock.c, image.c, and
    scrnsave.c.
  ras.c/magick.c gcc 10 fix from Adrian Reber, adrian AT lisas.de .
    VMS already handles this in make.com.
  Lots of spelling errors fixed due to codespell
    https://manpages.debian.org/testing/codespell/codespell.1.en.html
  A few more gl modes (molecule, invert) fixed up by
    EoflaOE ViceCity to run in xscreensaver.
  Added additional changes to solitaire and invert.  invert will
    build in xscreensaver with some coaxing, see README in
    xscreensaver directory.
  Removed buffer gcc warning about nose.c.
  Fix from brett.diamond AT gmail.com to get "xlock -help" from
    crashing.
  As a Blake's 7 fan, I had to add the Liberator to star mode.
  Same fix from Jouk Jansen and Adrian Reber, adrian AT lisas.de
    for juggler3d.cc in previous release.
  Change from Denys Vlasenko (thanks to Adrian Reber for pointing out)
    https://bugzilla.redhat.com/show_bug.cgi?id=874484
    This helps xlock's parent process to know xlock crashed.
  ico mode added truncated octahedron.
  Another gl mode, sierpinski3d, fixed up by EoflaOE ViceCity to run
    in xscreensaver.
  Updated references to website to https.  https://www.sillycycle.com
  A few more gl modes (incl. maze3d, pipe, sproingies) fixed up by
    EoflaOE ViceCity to run in xscreensaver.
  Thanks to tobik, ohartmann AT walstatt.org, and Jason Helfman,
    jgh AT FreeBSD.org for xglock fixes for "failed due to signal" for
    clang.
  Syncing with xscreensaver and many modes modified, more than
    half working there.  pacman and puzzle run but need some
    obvious work, others run too fast or flash on the screen.
    Various fixes from Jouk Jansen and EoflaOE ViceCity.
    Updated GL modes also, inaddition to overlap: biof, skewb, and
    fire (needs images). See xscreensaver/README for new directions.
  Updated in linux to build with modules, must have broken somewhere
    down the line.  imake build fixed too.
  bomb mode fixed for xlock.
  Syncing with xscreensaver.  Much has changed since last time this
    was done and much left to do.  Nonglx "a"'s and some "b"'s done
    so far.  Automata modes like ant.c should use automata.c and
    automata.h supplied by xlockmore.
    ball bat not working right there yet.  Also bouboule to do right will
    require changes to xlockmore files from xscreensaver.
    See new xscreensaver/README for instructions.
  While testing uncovered old security bug in anenome mode and fixed.
  life updates to use a more standard notation for nontotalistic cellular
    automata.
  ax_pthread.m4 needed for autoconf, added back in, oops.
  Removed VMS caddr_t fix from matrix.c, cage.c, gears.c, glplanet.c,
    invert.c, juggler3d.c, lament.c, moebius.c, molecule.c, morph3d.c,
    noof.c, pipes.c, rubik.c, sierpinski3d.c, skewb.c, stairs.c,
    superquadrics.c as no longer needed.  Thanks to Jouk Jansen.
  boxed and maze3d modes added thanks mainly to Jouk Jansen.
  boxed added to xlock95.scr.  xlock95 Makefile now builds to 64 bit.
  Thanks to Jason Helfman, jgh AT FreeBSD.org for sound installation fixes.
  Thanks to Tobias Kortkamp, for his patch for glock compile issue with
    CLANG 6.0.0.
  Fixing warnings using clang for back.xpm, nose.c, passwd.c.
  Fixing errors using g++ for deluxe.c, also various casting added.
  Fixing potential some buffer overruns pointed out in mingw in
    apollonian.c and hyper.c.
  Fixing potential error of using null pointer thanks again to mingw in
    xlock.c.
  pyro2 was not showing anything on screen due to it not finding font,
    changed it to default to mode_font if can not find.
  Thanks to Dave Odell, dmo2118 AT gmail.com for his fzort mode update to
    use the functions in xshm.c and fixes crash when running X11 over network.
  Note from Dave Odell:
    &lt;https://www.jwz.org/xscreensaver/xscreensaver-5.37.tar.gz&gt;. MI_INIT() is
    defined and documented in hacks/xlockmore.h, with related functions
    defined in hacks/xlockmore.c.  MI_INIT() currently takes three parameters:
    the ModeInfo *, the state array, and a function pointer for the new free
    hook. FWIW, it could instead be just the first two parameters, with the
    free hook being set up like the other ModeHooks; this would be a bit
    nicer, I think. But I was going for something that could be applied
    incrementally to individual screenhacks in XScreenSaver, and could -- in
    theory -- be brought back to xlockmore with minimal impact.
  ant mode resync'd with xscreensaver...  Thanks to David Odell redoing my
    sad attempt.
  - sound configuration changed around so it should work on more machines,
    now uses DEF_PLAY and play.sh by default.
  Thanks to Stanislav Brabec, sbrabec AT suse.cz for his "hack" to fix for
    PAM with non-English locales.  He notes to fix properly a "Password"
    prompt list should be obtained at the initial phase of authentication.
    Added PAM_PASSWORD_PROMPT for using old way.
  Fixed leak in scooter thanks to Valgrind.
- remove xlockmore-pam.patch (upstream/obsolete)</changelog>
  <changelog author="Wang Jun &lt;jgwang@suse.com&gt;" date="1605873600">- update to 5.66:
  GL mode atunnels, juggler3d, atlantis, lament, invert, solitaire, text3d,
    and text3d2 fixed up by EoflaOE ViceCity and myself to build in
    xscreensaver.
  bomb, helix, lightning, penrose, petal, scooter fixes for xscreensaver
    port (clear screen issue).  Clock fixed to run by changing a spot from
    "Clock" to "CLOCK".
  A few updates from xscreensaver-5.44/hacks/xlockmore.c for xscreensaver
    port.
  Duplicate resources and unloadable resources for xscreensaver port fixed
    by EoflaOE.
  Double free removed for xscreensaver port fixed by EoflaOE and myself.
  Removed some warnings in xscreensaver port in fzort, rubik, skewb, and
    sproingies.
  Xpm textures added to xscreensaver ports that need them.
  image, puzzle, decay, bat now work but use xscreensaver bitmap/pixmap
    in xscreensaver port.
  Bug fix in qix and toneclock for xscreensaver port, xlock was not
    affected by negative NRAND input.
  euler2d synced up with xscreensaver version.
  Change to fzort to use __asm__ instead of asm as its probably more
    likely to work.
  Fixed solitaire so deckPile changes just a little bit as it doles
    out cards.
  Updated bomb to use size 18 font when USE_MB is not set as it seems
    34 is not widely available anymore.
  pacman now has different colored ghosts (no green ghost) and also
    oscillating dress and eyes.  See README for a notice for this mode.
  Fixed some bad drawings in solitaire and pacman noticed on
    Windows side.
  Warnings removed for -Wstrict-prototypes -Wmissing-prototypes
  - Wdeclaration-after-statement</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1634385600">- update to 5.67:
  * Fixing specified bound equals destination size warning in iostuff.c.
  * Port updated for xscreensaver-6.01.  With help from EoflaOE ViceCity.
  * maze3d.c updated for VMS as CRTL now contains more standard functions</changelog>
  <changelog author="Avinesh Kumar &lt;avinesh.kumar@suse.com&gt;" date="1643112000">- update to 5.68:
  * Updated xscreensaver port for xscreensaver-6.02.
  * Various NetBsd install issues fixed including config.cygport.
  * pam vulnerabiliy patch added thanks to Elmar Hoffmann, elho AT elho.net.
    Card vulnerability may remain, see README.
  * module fixes for deluxe, eyes, starfish, swirl, text3d2, module use is
    still experimental.
  * biof mode removed again (though was not building by default).</changelog>
  <changelog author="Daniel Garcia &lt;daniel.garcia@suse.com&gt;" date="1671624000">- Install resource files in /usr/lib/X11/app-defeaults/XLock instead of
  /usr/share.
  Fixes bsc#1204597</changelog>
</package>
<package pkgid="a3dcbbeb7e43c23cb9d915a695009a66212495ea88f70d5b3516e5c851c96181" name="xlockmore" arch="src">
  <version epoch="0" ver="5.68" rel="bp154.2.3.1"/>
  <changelog author="coolo@suse.com" date="1359720000">- update license to new format</changelog>
  <changelog author="dimstar@opensuse.org" date="1366632000">- Add libXdmcp-devel and libXt-devel BuildRequires: we include
  headers from the respective toolkits / libraries and as
  such it's only correct to BuildRequire the -devel package
  bringing these headers to us.</changelog>
  <changelog author="sbrabec@suse.cz" date="1374148800">- Update to version 5.43:
  * many fixes and improvements, see Revisions for more.
  * Fix potential crash (CVE-2013-4143, bnc#829859)
- Remove ancient Provides/Obsoletes.
- Verify GPG signature.</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1387108800">- Added xlockmore-extend-freetype-include-search.patch: search only
  for freetype.h, not the half path. Also, extended list of
  directories where could freetype be found
- Pass $(freetype-config --cflags) to exported CPPFLAGS for potential
  future changes of freetype headers (as xlockmore uses hardcoded
  paths instead of a saner buildsystem)</changelog>
  <changelog author="cougar@random.ee" date="1387195200">- Added "pam-modules" dependency: xlockmore uses /sbin/unix2_chkpwd
  for password check. Without this binary it is not possible
  to unlock your X Window System session.</changelog>
  <changelog author="sbrabec@suse.cz" date="1422446400">- Update to version 5.45:
  * Prevent pyro2 from X error.
  * Fix pentomino undefined behavior.
  * dilemma, voters, wator size fix for neighbors = 6.
  * Proper crediting for High Life part of life mode.
  * A few new gliders and patterns for life and life3d.
- Enable Xinerama support (bsc#911133), gltt, xpm and ImageMagick
  support.</changelog>
  <changelog author="pgajdos@suse.com" date="1425988800">- removed GPL-2.0+ from license string [bnc#734014]</changelog>
  <changelog author="vcizek@suse.com" date="1425988801">- fix a crash in nose mode (bnc#882747)
  * added xlockmore-nose_mode_crash.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1486555200">- Drop esound-devel BuildRequires: the distro moved away from
  esound some years ago.
- Drop xlockmore-no-copy-dt-needed-entries.patch: as esd is no
  longer being built, we also don't need to link it anymore.</changelog>
  <changelog author="lnussel@suse.de" date="1490702400">- don't require pam-modules and unix2_chkpwd anymore. We use
  pam_unix noways which transparently manages access to /etc/shadow</changelog>
  <changelog author="sbrabec@suse.com" date="1493208000">- Update to version 5.53:
  * dclock fix for led bounce.
  * Install changes for fortune.
  * strange mode updates.
  * life3d updates.
  * messagefont fix.
  * Changed default message font.
  * spiral erase mode changed.
  * Fix for kumppa -speed 0.2.
  * new website at http://www.sillycycle.com
  * xmb fonts fix.
  * fixed xjack mode.
  * Updated language use.
- Refresh xlockmore-bitmaps.patch, xlockmore-ttf_dir.patch,
  xlockmore-extend-freetype-include-search.patch.
- Re-enable PAM (boo#1035688).
- Disable obsolete --enable-use-mb.</changelog>
  <changelog author="sbrabec@suse.com" date="1493380800">- Add a fix for double entering of password in non-English locales
  (boo#1035688, xlockmore-pam.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1496232000">- Update to version 5.54:
  * strange mode updates.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1513080000">- Remove unused build require on gltt-devel, this allows to drop
  gltt and ancient freetype 1.x too.</changelog>
  <changelog author="astieger@suse.com" date="1524484800">- remove dependency on gpg-offline, part of source services now</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1599739200">- update to 5.65:
  Fix from Jan Kratochvil and Adrian Reber, adrian AT lisas.de for Fedora.
    xlock -startCmd true... would core on Fedora, exit() replaced with
    _exit().
  Update for magick.c to use strncpy thanks to Jouk Jansen.
  Fix for hyper mode from original author, for potential but not
    likely memory leak and free(NULL) issue John Heidemann, johnh
    AT isi.edu.
  More buffer gcc warnings removed for dclock.c, image.c, and
    scrnsave.c.
  ras.c/magick.c gcc 10 fix from Adrian Reber, adrian AT lisas.de .
    VMS already handles this in make.com.
  Lots of spelling errors fixed due to codespell
    https://manpages.debian.org/testing/codespell/codespell.1.en.html
  A few more gl modes (molecule, invert) fixed up by
    EoflaOE ViceCity to run in xscreensaver.
  Added additional changes to solitaire and invert.  invert will
    build in xscreensaver with some coaxing, see README in
    xscreensaver directory.
  Removed buffer gcc warning about nose.c.
  Fix from brett.diamond AT gmail.com to get "xlock -help" from
    crashing.
  As a Blake's 7 fan, I had to add the Liberator to star mode.
  Same fix from Jouk Jansen and Adrian Reber, adrian AT lisas.de
    for juggler3d.cc in previous release.
  Change from Denys Vlasenko (thanks to Adrian Reber for pointing out)
    https://bugzilla.redhat.com/show_bug.cgi?id=874484
    This helps xlock's parent process to know xlock crashed.
  ico mode added truncated octahedron.
  Another gl mode, sierpinski3d, fixed up by EoflaOE ViceCity to run
    in xscreensaver.
  Updated references to website to https.  https://www.sillycycle.com
  A few more gl modes (incl. maze3d, pipe, sproingies) fixed up by
    EoflaOE ViceCity to run in xscreensaver.
  Thanks to tobik, ohartmann AT walstatt.org, and Jason Helfman,
    jgh AT FreeBSD.org for xglock fixes for "failed due to signal" for
    clang.
  Syncing with xscreensaver and many modes modified, more than
    half working there.  pacman and puzzle run but need some
    obvious work, others run too fast or flash on the screen.
    Various fixes from Jouk Jansen and EoflaOE ViceCity.
    Updated GL modes also, inaddition to overlap: biof, skewb, and
    fire (needs images). See xscreensaver/README for new directions.
  Updated in linux to build with modules, must have broken somewhere
    down the line.  imake build fixed too.
  bomb mode fixed for xlock.
  Syncing with xscreensaver.  Much has changed since last time this
    was done and much left to do.  Nonglx "a"'s and some "b"'s done
    so far.  Automata modes like ant.c should use automata.c and
    automata.h supplied by xlockmore.
    ball bat not working right there yet.  Also bouboule to do right will
    require changes to xlockmore files from xscreensaver.
    See new xscreensaver/README for instructions.
  While testing uncovered old security bug in anenome mode and fixed.
  life updates to use a more standard notation for nontotalistic cellular
    automata.
  ax_pthread.m4 needed for autoconf, added back in, oops.
  Removed VMS caddr_t fix from matrix.c, cage.c, gears.c, glplanet.c,
    invert.c, juggler3d.c, lament.c, moebius.c, molecule.c, morph3d.c,
    noof.c, pipes.c, rubik.c, sierpinski3d.c, skewb.c, stairs.c,
    superquadrics.c as no longer needed.  Thanks to Jouk Jansen.
  boxed and maze3d modes added thanks mainly to Jouk Jansen.
  boxed added to xlock95.scr.  xlock95 Makefile now builds to 64 bit.
  Thanks to Jason Helfman, jgh AT FreeBSD.org for sound installation fixes.
  Thanks to Tobias Kortkamp, for his patch for glock compile issue with
    CLANG 6.0.0.
  Fixing warnings using clang for back.xpm, nose.c, passwd.c.
  Fixing errors using g++ for deluxe.c, also various casting added.
  Fixing potential some buffer overruns pointed out in mingw in
    apollonian.c and hyper.c.
  Fixing potential error of using null pointer thanks again to mingw in
    xlock.c.
  pyro2 was not showing anything on screen due to it not finding font,
    changed it to default to mode_font if can not find.
  Thanks to Dave Odell, dmo2118 AT gmail.com for his fzort mode update to
    use the functions in xshm.c and fixes crash when running X11 over network.
  Note from Dave Odell:
    &lt;https://www.jwz.org/xscreensaver/xscreensaver-5.37.tar.gz&gt;. MI_INIT() is
    defined and documented in hacks/xlockmore.h, with related functions
    defined in hacks/xlockmore.c.  MI_INIT() currently takes three parameters:
    the ModeInfo *, the state array, and a function pointer for the new free
    hook. FWIW, it could instead be just the first two parameters, with the
    free hook being set up like the other ModeHooks; this would be a bit
    nicer, I think. But I was going for something that could be applied
    incrementally to individual screenhacks in XScreenSaver, and could -- in
    theory -- be brought back to xlockmore with minimal impact.
  ant mode resync'd with xscreensaver...  Thanks to David Odell redoing my
    sad attempt.
  - sound configuration changed around so it should work on more machines,
    now uses DEF_PLAY and play.sh by default.
  Thanks to Stanislav Brabec, sbrabec AT suse.cz for his "hack" to fix for
    PAM with non-English locales.  He notes to fix properly a "Password"
    prompt list should be obtained at the initial phase of authentication.
    Added PAM_PASSWORD_PROMPT for using old way.
  Fixed leak in scooter thanks to Valgrind.
- remove xlockmore-pam.patch (upstream/obsolete)</changelog>
  <changelog author="Wang Jun &lt;jgwang@suse.com&gt;" date="1605873600">- update to 5.66:
  GL mode atunnels, juggler3d, atlantis, lament, invert, solitaire, text3d,
    and text3d2 fixed up by EoflaOE ViceCity and myself to build in
    xscreensaver.
  bomb, helix, lightning, penrose, petal, scooter fixes for xscreensaver
    port (clear screen issue).  Clock fixed to run by changing a spot from
    "Clock" to "CLOCK".
  A few updates from xscreensaver-5.44/hacks/xlockmore.c for xscreensaver
    port.
  Duplicate resources and unloadable resources for xscreensaver port fixed
    by EoflaOE.
  Double free removed for xscreensaver port fixed by EoflaOE and myself.
  Removed some warnings in xscreensaver port in fzort, rubik, skewb, and
    sproingies.
  Xpm textures added to xscreensaver ports that need them.
  image, puzzle, decay, bat now work but use xscreensaver bitmap/pixmap
    in xscreensaver port.
  Bug fix in qix and toneclock for xscreensaver port, xlock was not
    affected by negative NRAND input.
  euler2d synced up with xscreensaver version.
  Change to fzort to use __asm__ instead of asm as its probably more
    likely to work.
  Fixed solitaire so deckPile changes just a little bit as it doles
    out cards.
  Updated bomb to use size 18 font when USE_MB is not set as it seems
    34 is not widely available anymore.
  pacman now has different colored ghosts (no green ghost) and also
    oscillating dress and eyes.  See README for a notice for this mode.
  Fixed some bad drawings in solitaire and pacman noticed on
    Windows side.
  Warnings removed for -Wstrict-prototypes -Wmissing-prototypes
  - Wdeclaration-after-statement</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1634385600">- update to 5.67:
  * Fixing specified bound equals destination size warning in iostuff.c.
  * Port updated for xscreensaver-6.01.  With help from EoflaOE ViceCity.
  * maze3d.c updated for VMS as CRTL now contains more standard functions</changelog>
  <changelog author="Avinesh Kumar &lt;avinesh.kumar@suse.com&gt;" date="1643112000">- update to 5.68:
  * Updated xscreensaver port for xscreensaver-6.02.
  * Various NetBsd install issues fixed including config.cygport.
  * pam vulnerabiliy patch added thanks to Elmar Hoffmann, elho AT elho.net.
    Card vulnerability may remain, see README.
  * module fixes for deluxe, eyes, starfish, swirl, text3d2, module use is
    still experimental.
  * biof mode removed again (though was not building by default).</changelog>
  <changelog author="Daniel Garcia &lt;daniel.garcia@suse.com&gt;" date="1671624000">- Install resource files in /usr/lib/X11/app-defeaults/XLock instead of
  /usr/share.
  Fixes bsc#1204597</changelog>
</package>
<package pkgid="20f0940611b8793e56b500f7970283e436450de895f90b2e1777035a3a007626" name="xlockmore" arch="x86_64">
  <version epoch="0" ver="5.68" rel="bp154.2.3.1"/>
  <changelog author="sbrabec@suse.cz" date="1422446400">- Update to version 5.45:
  * Prevent pyro2 from X error.
  * Fix pentomino undefined behavior.
  * dilemma, voters, wator size fix for neighbors = 6.
  * Proper crediting for High Life part of life mode.
  * A few new gliders and patterns for life and life3d.
- Enable Xinerama support (bsc#911133), gltt, xpm and ImageMagick
  support.</changelog>
  <changelog author="pgajdos@suse.com" date="1425988800">- removed GPL-2.0+ from license string [bnc#734014]</changelog>
  <changelog author="vcizek@suse.com" date="1425988801">- fix a crash in nose mode (bnc#882747)
  * added xlockmore-nose_mode_crash.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1486555200">- Drop esound-devel BuildRequires: the distro moved away from
  esound some years ago.
- Drop xlockmore-no-copy-dt-needed-entries.patch: as esd is no
  longer being built, we also don't need to link it anymore.</changelog>
  <changelog author="lnussel@suse.de" date="1490702400">- don't require pam-modules and unix2_chkpwd anymore. We use
  pam_unix noways which transparently manages access to /etc/shadow</changelog>
  <changelog author="sbrabec@suse.com" date="1493208000">- Update to version 5.53:
  * dclock fix for led bounce.
  * Install changes for fortune.
  * strange mode updates.
  * life3d updates.
  * messagefont fix.
  * Changed default message font.
  * spiral erase mode changed.
  * Fix for kumppa -speed 0.2.
  * new website at http://www.sillycycle.com
  * xmb fonts fix.
  * fixed xjack mode.
  * Updated language use.
- Refresh xlockmore-bitmaps.patch, xlockmore-ttf_dir.patch,
  xlockmore-extend-freetype-include-search.patch.
- Re-enable PAM (boo#1035688).
- Disable obsolete --enable-use-mb.</changelog>
  <changelog author="sbrabec@suse.com" date="1493380800">- Add a fix for double entering of password in non-English locales
  (boo#1035688, xlockmore-pam.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1496232000">- Update to version 5.54:
  * strange mode updates.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1513080000">- Remove unused build require on gltt-devel, this allows to drop
  gltt and ancient freetype 1.x too.</changelog>
  <changelog author="astieger@suse.com" date="1524484800">- remove dependency on gpg-offline, part of source services now</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1599739200">- update to 5.65:
  Fix from Jan Kratochvil and Adrian Reber, adrian AT lisas.de for Fedora.
    xlock -startCmd true... would core on Fedora, exit() replaced with
    _exit().
  Update for magick.c to use strncpy thanks to Jouk Jansen.
  Fix for hyper mode from original author, for potential but not
    likely memory leak and free(NULL) issue John Heidemann, johnh
    AT isi.edu.
  More buffer gcc warnings removed for dclock.c, image.c, and
    scrnsave.c.
  ras.c/magick.c gcc 10 fix from Adrian Reber, adrian AT lisas.de .
    VMS already handles this in make.com.
  Lots of spelling errors fixed due to codespell
    https://manpages.debian.org/testing/codespell/codespell.1.en.html
  A few more gl modes (molecule, invert) fixed up by
    EoflaOE ViceCity to run in xscreensaver.
  Added additional changes to solitaire and invert.  invert will
    build in xscreensaver with some coaxing, see README in
    xscreensaver directory.
  Removed buffer gcc warning about nose.c.
  Fix from brett.diamond AT gmail.com to get "xlock -help" from
    crashing.
  As a Blake's 7 fan, I had to add the Liberator to star mode.
  Same fix from Jouk Jansen and Adrian Reber, adrian AT lisas.de
    for juggler3d.cc in previous release.
  Change from Denys Vlasenko (thanks to Adrian Reber for pointing out)
    https://bugzilla.redhat.com/show_bug.cgi?id=874484
    This helps xlock's parent process to know xlock crashed.
  ico mode added truncated octahedron.
  Another gl mode, sierpinski3d, fixed up by EoflaOE ViceCity to run
    in xscreensaver.
  Updated references to website to https.  https://www.sillycycle.com
  A few more gl modes (incl. maze3d, pipe, sproingies) fixed up by
    EoflaOE ViceCity to run in xscreensaver.
  Thanks to tobik, ohartmann AT walstatt.org, and Jason Helfman,
    jgh AT FreeBSD.org for xglock fixes for "failed due to signal" for
    clang.
  Syncing with xscreensaver and many modes modified, more than
    half working there.  pacman and puzzle run but need some
    obvious work, others run too fast or flash on the screen.
    Various fixes from Jouk Jansen and EoflaOE ViceCity.
    Updated GL modes also, inaddition to overlap: biof, skewb, and
    fire (needs images). See xscreensaver/README for new directions.
  Updated in linux to build with modules, must have broken somewhere
    down the line.  imake build fixed too.
  bomb mode fixed for xlock.
  Syncing with xscreensaver.  Much has changed since last time this
    was done and much left to do.  Nonglx "a"'s and some "b"'s done
    so far.  Automata modes like ant.c should use automata.c and
    automata.h supplied by xlockmore.
    ball bat not working right there yet.  Also bouboule to do right will
    require changes to xlockmore files from xscreensaver.
    See new xscreensaver/README for instructions.
  While testing uncovered old security bug in anenome mode and fixed.
  life updates to use a more standard notation for nontotalistic cellular
    automata.
  ax_pthread.m4 needed for autoconf, added back in, oops.
  Removed VMS caddr_t fix from matrix.c, cage.c, gears.c, glplanet.c,
    invert.c, juggler3d.c, lament.c, moebius.c, molecule.c, morph3d.c,
    noof.c, pipes.c, rubik.c, sierpinski3d.c, skewb.c, stairs.c,
    superquadrics.c as no longer needed.  Thanks to Jouk Jansen.
  boxed and maze3d modes added thanks mainly to Jouk Jansen.
  boxed added to xlock95.scr.  xlock95 Makefile now builds to 64 bit.
  Thanks to Jason Helfman, jgh AT FreeBSD.org for sound installation fixes.
  Thanks to Tobias Kortkamp, for his patch for glock compile issue with
    CLANG 6.0.0.
  Fixing warnings using clang for back.xpm, nose.c, passwd.c.
  Fixing errors using g++ for deluxe.c, also various casting added.
  Fixing potential some buffer overruns pointed out in mingw in
    apollonian.c and hyper.c.
  Fixing potential error of using null pointer thanks again to mingw in
    xlock.c.
  pyro2 was not showing anything on screen due to it not finding font,
    changed it to default to mode_font if can not find.
  Thanks to Dave Odell, dmo2118 AT gmail.com for his fzort mode update to
    use the functions in xshm.c and fixes crash when running X11 over network.
  Note from Dave Odell:
    &lt;https://www.jwz.org/xscreensaver/xscreensaver-5.37.tar.gz&gt;. MI_INIT() is
    defined and documented in hacks/xlockmore.h, with related functions
    defined in hacks/xlockmore.c.  MI_INIT() currently takes three parameters:
    the ModeInfo *, the state array, and a function pointer for the new free
    hook. FWIW, it could instead be just the first two parameters, with the
    free hook being set up like the other ModeHooks; this would be a bit
    nicer, I think. But I was going for something that could be applied
    incrementally to individual screenhacks in XScreenSaver, and could -- in
    theory -- be brought back to xlockmore with minimal impact.
  ant mode resync'd with xscreensaver...  Thanks to David Odell redoing my
    sad attempt.
  - sound configuration changed around so it should work on more machines,
    now uses DEF_PLAY and play.sh by default.
  Thanks to Stanislav Brabec, sbrabec AT suse.cz for his "hack" to fix for
    PAM with non-English locales.  He notes to fix properly a "Password"
    prompt list should be obtained at the initial phase of authentication.
    Added PAM_PASSWORD_PROMPT for using old way.
  Fixed leak in scooter thanks to Valgrind.
- remove xlockmore-pam.patch (upstream/obsolete)</changelog>
  <changelog author="Wang Jun &lt;jgwang@suse.com&gt;" date="1605873600">- update to 5.66:
  GL mode atunnels, juggler3d, atlantis, lament, invert, solitaire, text3d,
    and text3d2 fixed up by EoflaOE ViceCity and myself to build in
    xscreensaver.
  bomb, helix, lightning, penrose, petal, scooter fixes for xscreensaver
    port (clear screen issue).  Clock fixed to run by changing a spot from
    "Clock" to "CLOCK".
  A few updates from xscreensaver-5.44/hacks/xlockmore.c for xscreensaver
    port.
  Duplicate resources and unloadable resources for xscreensaver port fixed
    by EoflaOE.
  Double free removed for xscreensaver port fixed by EoflaOE and myself.
  Removed some warnings in xscreensaver port in fzort, rubik, skewb, and
    sproingies.
  Xpm textures added to xscreensaver ports that need them.
  image, puzzle, decay, bat now work but use xscreensaver bitmap/pixmap
    in xscreensaver port.
  Bug fix in qix and toneclock for xscreensaver port, xlock was not
    affected by negative NRAND input.
  euler2d synced up with xscreensaver version.
  Change to fzort to use __asm__ instead of asm as its probably more
    likely to work.
  Fixed solitaire so deckPile changes just a little bit as it doles
    out cards.
  Updated bomb to use size 18 font when USE_MB is not set as it seems
    34 is not widely available anymore.
  pacman now has different colored ghosts (no green ghost) and also
    oscillating dress and eyes.  See README for a notice for this mode.
  Fixed some bad drawings in solitaire and pacman noticed on
    Windows side.
  Warnings removed for -Wstrict-prototypes -Wmissing-prototypes
  - Wdeclaration-after-statement</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1634385600">- update to 5.67:
  * Fixing specified bound equals destination size warning in iostuff.c.
  * Port updated for xscreensaver-6.01.  With help from EoflaOE ViceCity.
  * maze3d.c updated for VMS as CRTL now contains more standard functions</changelog>
  <changelog author="Avinesh Kumar &lt;avinesh.kumar@suse.com&gt;" date="1643112000">- update to 5.68:
  * Updated xscreensaver port for xscreensaver-6.02.
  * Various NetBsd install issues fixed including config.cygport.
  * pam vulnerabiliy patch added thanks to Elmar Hoffmann, elho AT elho.net.
    Card vulnerability may remain, see README.
  * module fixes for deluxe, eyes, starfish, swirl, text3d2, module use is
    still experimental.
  * biof mode removed again (though was not building by default).</changelog>
  <changelog author="Daniel Garcia &lt;daniel.garcia@suse.com&gt;" date="1671624000">- Install resource files in /usr/lib/X11/app-defeaults/XLock instead of
  /usr/share.
  Fixes bsc#1204597</changelog>
</package>
<package pkgid="da12b1c04f687b17666bc6363b42e406159585c294cdbd3183d83d239afb9a1c" name="xournalpp" arch="aarch64">
  <version epoch="0" ver="1.1.1" rel="bp154.2.3.1"/>
  <changelog author="badshah400@gmail.com" date="1546171200">- Initial package (version 1.0.5).</changelog>
  <changelog author="badshah400@gmail.com" date="1548072000">- Update to version 1.0.7:
  * Fixes for HiDPI (gh#xournalpp/xournalpp#172).
  * Drop bundled mathtex, thereby fixing a licensing issue
    (mathtex is licensed under GPL-3.0,
    gh#xournalpp/xournalpp#771).
  * Other minor bug fixes.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548331200">- Remove future goals.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1548676800">- Drop unnecessary Requires(pre/post) on desktop-file-utils.</changelog>
  <changelog author="badshah400@gmail.com" date="1550577600">- Update to version 1.0.8:
  * Audio recording directly integrated, no VLC etc. needed.
  * LaTex use now vector graphics.
  * Multiple page layout.
  * Minor bug fixes.
- Add xournalpp-fix-horizontal-space.patch: fix adding horizontal
  space to document view from preferences; patch taken from
  upstream commit (gh#xournalpp/xournalpp#906).
- New upstream build dependencies: pkgconfig(portaudiocpp),
  pkgconfig(sndfile).</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1555502400">- Update to version 1.0.10:
  * Support for a new, future file format.
  * Lots of bug fixes and improvements.
- Drop xournalpp-fix-horizontal-space.patch: incorporated
  upstream.
- New BuildRequires: pkgconfig(libzip).</changelog>
  <changelog author="aloisio@gmx.com" date="1560600000">- Update to version 1.0.12
  * Added new experimental input system that should fix a lot of
    issues related to input handling (can be enabled from
    Preferences &gt; Input System).
  * Added experimental stroke filter (can be enabled in
    Preferences &gt; Drawing Area) to allow selections using drawing
    tool
  * Added ability to double click on selected objects (e.g. text
    fields and LaTeX) to begin editing them (only available with
    the new input system enabled)
  * Fixed some issues with selections
  * Fixed some issues involving autosaving
  * Improved LaTeX editor experience, as well as bug fixes
  * Fixed text editor copying and pasting to the wrong clipboard
  * Fixed many zoom issues while in presentation mode
  * Fixed some other miscellaneous issues
- Use package name in the tarball</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1576584000">- Update to version 1.0.16:
  * Fixed currently editing textboxes not exporting to PDF.
  * Fixed line tool breaking when snap-to-grid is disabled.
- Changes from version 1.0.15 and 1.0.14:
  * Fixed an issue where copying and pasting strokes would crash
    the program.
  * Text field bugfixes
  * Latex tool enhancements
  * Image tool bugfixes
  * Misc quality-of-life enhancements
  * New experimental floating toolbox
  * Improved input handling, bugfixes
  * Updated preferences window
  * Fixed some crashing issues
  * Refactoring and other non-user visible changes
  * Other misc features and bugfixes
- Add xournalpp-fix-desktop-categories.patch: Fix desktop
  categories with additional keywords to prevent "No sufficient
  Category definition" error from brp-desktop.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1582113600">- Update to version 1.0.17:
  - Fixed arrow tip scaling: now scales with thickness instead of
    length (gh#xournalpp/xournalpp#967).
  - Changed coordinate draw direction.
  - Fixed audio playback failures not showing error messages to
    the user (gh#xournalpp/xournalpp#1573).
  - Fixed text tool bold shortcut not working when capslock is
    enabled (gh#xournalpp/xournalpp#1583).
  - Fixed sidebar preview context menu "Move Page Up" and "Move
    Page Down" buttons not being disabled on the first and last
    page, respectively (gh#xournalpp/xournalpp#1637).
  - Fixed Enter keypress on the "Goto Page" (Ctrl-G) dialog not
    changing the page (gh#xournalpp/xournalpp#975).
  - Fixed missing Xournal++ icon errors on most of the dialog
    windows (gh#xournalpp/xournalpp#1667).
- Build translations during make stage.
- Use %cmake_build instead of obsolete %make_jobs.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1587902400">- Update to version 1.0.18:
  * Fixed a crash occurring when recent file entries are invalid
    (gh#xournalpp/xournalpp#1730)
  * Fixed translations not being built correctly, causing
    packaging issues (gh#xournalpp/xournalpp#1596)
  * Fixed background PDF outlines not being saved in exported PDF
    (only available when compiled with Cairo 1.16 or newer)
  * Fixed a deadlock occurring when a second PDF with an outline
    is opened (gh#xournalpp/xournalpp#1582).
  * Fixed the settings file being written to when it is parsed
    (gh#xournalpp/xournalpp#1074)
  * Fixed dark mode icons not loading properly
    (gh#xournalpp/xournalpp#1767)
  * Added missing dark mode icons (gh#xournalpp/xournalpp#1765)
  * Fixed crash in Export As ... on some page range options
    (gh#xournalpp/xournalpp#1790)
  * Fixed crash caused by custom colors in toolbar being "too
    close" (gh#xournalpp/xournalpp#1659)
- No longer need to build translations independently after
  running make.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1594900800">- Add Recommends tex(standalone.tex) instead of Requires:
  texlive-latex-bin, so that users can uninstall texlive packages
  should they not use this particular feature. The standalone pkg
  is required for the feature to work and it pulls in the right
  texlive dependencies as Recommends.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1600516800">- Add xournalpp-fix-exporting-pdf-with-references.patch: Fix PDF
  export when references exist in the document
  [gh#xournalpp/xournalpp#2236].</changelog>
  <changelog author="Markus Ebner &lt;info@ebner-markus.de&gt;" date="1606305600">- Update to version 1.0.19:
  * Changed select object algorithm to be more intuitive
  * Added ability for taps with Select Rectangle and Select Region
    to act like Select Object (gh#xournalpp/xournalpp#1980).
  * Improved document loading speed (gh#xournalpp/xournalpp#2002).
  * Added a --version command to print the Xournal++ version
  * Added a libgtk version display to the About dialog
  * Added a 16kHz sample rate to audio settings and fixed the 91kHz
    sample rate (gh#xournalpp/xournalpp#2092).
  * Added file version check for future compatibility
    (gh#xournalpp/xournalpp#1991).
  * Changed wording of new page template dialog to be less
    confusing (gh#xournalpp/xournalpp#1524).
  * Fixed behavior of "Attach file to the journal" option when
    choosing "Annotate PDF" (#1725, #2106). This now allows the
    background PDF and the annotation files to be renamed and moved
    as long as they 1) share the same file prefix; and 2) share the
    same relative path.
  * Fixed an issue where clicking the X on the replace file dialog
    would overwrite the file (gh#xournalpp/xournalpp#1983).
  * (libcairo &gt;= 1.16 only): Fixed PDF export crashing when the
    table of contents is empty (gh#xournalpp/xournalpp#2236)..
  * Fixed a bug where the PDF background would not update when
    loading a new document (gh#xournalpp/xournalpp#1964).
  * Fixed plugin window causing a crash on Ubuntu 16.04
  * Fixed a bug where the icon would not appear correctly on some
    desktop environments (gh#xournalpp/xournalpp#1892).
  * Fixed inconsistent ordering of button keybindings
    (gh#xournalpp/xournalpp#1961).
  * Fixed the Enter key not confirming PDF export settings
    (gh#xournalpp/xournalpp#1977).
  * Fixed exported PDF title (gh#xournalpp/xournalpp#2039).
  * Fixed a bug where different page backgrounds can cause PDFs to
    be exported with the wrong backgrounds
    (gh#xournalpp/xournalpp#2119).
  * Fixed a bug where the page number count would not be updated
    after deleting a page (gh#xournalpp/xournalpp#2134).
  * Fixed selection object tool not working correctly
    (gh#xournalpp/xournalpp#2081). / crashing
    (gh#xournalpp/xournalpp#2133). when there are multiple layers
- Drop xournalpp-fix-exporting-pdf-with-references.patch:
  incorporated upstream.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1608292800">- Update to version 1.0.20:
  * Fixed a regression with pdf files that could not be
    overwritten (gh#xournalpp/xournalpp#2355).
  * Fixed page layout update after inserting or deleting a page,
    changing the page layout or zooming
    (gh#xournalpp/xournalpp#1777, gh#xournalpp/xournalpp#2346,
    gh#xournalpp/xournalpp#2442).
  * Fixed incorrect rendering of pages after changing the page
    format (gh#xournalpp/xournalpp#2457).
  * Fixed blocked scrolling after saving a file
    (gh#xournalpp/xournalpp#2062).
  * Fixed presentation mode after startup
    (gh#xournalpp/xournalpp#2413).</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1613476800">- Add BuildRequires(lua) to enable building plugins.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1628078400">- Update to version 1.1.0:
  * Major release with many changes, see
    https://github.com/xournalpp/xournalpp/blob/1.1.0/CHANGELOG.md
- Drop xournalpp-fix-desktop-categories.patch: No longer needed.
- Force GCC 9 as the compiler for openSUSE Leap 15.x as builds
  require that as a minimum for proper c++17 support.
- Drop update-icon-cache.sh removal, no longer installed by
  upstream.
- Update BuildRequires with upstream.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1644840000">- Update to version 1.1.1:
  * Change the edge panning behavior when an element is selected,
    fixing the absurdly fast edge pan speed bug.
  * Fixed several crashing/freezing issues.
  * Fixed several bugs involving stroke input and rendering.
  * Fixed several bugs involving PDF rendering (in application) and export.
  * lots of bug fixes; for the full list, see
    https://github.com/xournalpp/xournalpp/blob/v1.1.1/CHANGELOG.md</changelog>
  <changelog author="postix@posteo.eu" date="1645531200">- Add Recommends tex(scontents.tex) :
  Required for LaTeX rendering using Xournalpp's default_template.tex</changelog>
</package>
<package pkgid="e303dde96bbc6b8f9f4bdd2ae4ec513e731c7febd0c0f5353ea08b3e4c05c0b5" name="xournalpp" arch="i586">
  <version epoch="0" ver="1.1.1" rel="bp154.2.3.1"/>
  <changelog author="badshah400@gmail.com" date="1546171200">- Initial package (version 1.0.5).</changelog>
  <changelog author="badshah400@gmail.com" date="1548072000">- Update to version 1.0.7:
  * Fixes for HiDPI (gh#xournalpp/xournalpp#172).
  * Drop bundled mathtex, thereby fixing a licensing issue
    (mathtex is licensed under GPL-3.0,
    gh#xournalpp/xournalpp#771).
  * Other minor bug fixes.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548331200">- Remove future goals.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1548676800">- Drop unnecessary Requires(pre/post) on desktop-file-utils.</changelog>
  <changelog author="badshah400@gmail.com" date="1550577600">- Update to version 1.0.8:
  * Audio recording directly integrated, no VLC etc. needed.
  * LaTex use now vector graphics.
  * Multiple page layout.
  * Minor bug fixes.
- Add xournalpp-fix-horizontal-space.patch: fix adding horizontal
  space to document view from preferences; patch taken from
  upstream commit (gh#xournalpp/xournalpp#906).
- New upstream build dependencies: pkgconfig(portaudiocpp),
  pkgconfig(sndfile).</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1555502400">- Update to version 1.0.10:
  * Support for a new, future file format.
  * Lots of bug fixes and improvements.
- Drop xournalpp-fix-horizontal-space.patch: incorporated
  upstream.
- New BuildRequires: pkgconfig(libzip).</changelog>
  <changelog author="aloisio@gmx.com" date="1560600000">- Update to version 1.0.12
  * Added new experimental input system that should fix a lot of
    issues related to input handling (can be enabled from
    Preferences &gt; Input System).
  * Added experimental stroke filter (can be enabled in
    Preferences &gt; Drawing Area) to allow selections using drawing
    tool
  * Added ability to double click on selected objects (e.g. text
    fields and LaTeX) to begin editing them (only available with
    the new input system enabled)
  * Fixed some issues with selections
  * Fixed some issues involving autosaving
  * Improved LaTeX editor experience, as well as bug fixes
  * Fixed text editor copying and pasting to the wrong clipboard
  * Fixed many zoom issues while in presentation mode
  * Fixed some other miscellaneous issues
- Use package name in the tarball</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1576584000">- Update to version 1.0.16:
  * Fixed currently editing textboxes not exporting to PDF.
  * Fixed line tool breaking when snap-to-grid is disabled.
- Changes from version 1.0.15 and 1.0.14:
  * Fixed an issue where copying and pasting strokes would crash
    the program.
  * Text field bugfixes
  * Latex tool enhancements
  * Image tool bugfixes
  * Misc quality-of-life enhancements
  * New experimental floating toolbox
  * Improved input handling, bugfixes
  * Updated preferences window
  * Fixed some crashing issues
  * Refactoring and other non-user visible changes
  * Other misc features and bugfixes
- Add xournalpp-fix-desktop-categories.patch: Fix desktop
  categories with additional keywords to prevent "No sufficient
  Category definition" error from brp-desktop.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1582113600">- Update to version 1.0.17:
  - Fixed arrow tip scaling: now scales with thickness instead of
    length (gh#xournalpp/xournalpp#967).
  - Changed coordinate draw direction.
  - Fixed audio playback failures not showing error messages to
    the user (gh#xournalpp/xournalpp#1573).
  - Fixed text tool bold shortcut not working when capslock is
    enabled (gh#xournalpp/xournalpp#1583).
  - Fixed sidebar preview context menu "Move Page Up" and "Move
    Page Down" buttons not being disabled on the first and last
    page, respectively (gh#xournalpp/xournalpp#1637).
  - Fixed Enter keypress on the "Goto Page" (Ctrl-G) dialog not
    changing the page (gh#xournalpp/xournalpp#975).
  - Fixed missing Xournal++ icon errors on most of the dialog
    windows (gh#xournalpp/xournalpp#1667).
- Build translations during make stage.
- Use %cmake_build instead of obsolete %make_jobs.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1587902400">- Update to version 1.0.18:
  * Fixed a crash occurring when recent file entries are invalid
    (gh#xournalpp/xournalpp#1730)
  * Fixed translations not being built correctly, causing
    packaging issues (gh#xournalpp/xournalpp#1596)
  * Fixed background PDF outlines not being saved in exported PDF
    (only available when compiled with Cairo 1.16 or newer)
  * Fixed a deadlock occurring when a second PDF with an outline
    is opened (gh#xournalpp/xournalpp#1582).
  * Fixed the settings file being written to when it is parsed
    (gh#xournalpp/xournalpp#1074)
  * Fixed dark mode icons not loading properly
    (gh#xournalpp/xournalpp#1767)
  * Added missing dark mode icons (gh#xournalpp/xournalpp#1765)
  * Fixed crash in Export As ... on some page range options
    (gh#xournalpp/xournalpp#1790)
  * Fixed crash caused by custom colors in toolbar being "too
    close" (gh#xournalpp/xournalpp#1659)
- No longer need to build translations independently after
  running make.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1594900800">- Add Recommends tex(standalone.tex) instead of Requires:
  texlive-latex-bin, so that users can uninstall texlive packages
  should they not use this particular feature. The standalone pkg
  is required for the feature to work and it pulls in the right
  texlive dependencies as Recommends.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1600516800">- Add xournalpp-fix-exporting-pdf-with-references.patch: Fix PDF
  export when references exist in the document
  [gh#xournalpp/xournalpp#2236].</changelog>
  <changelog author="Markus Ebner &lt;info@ebner-markus.de&gt;" date="1606305600">- Update to version 1.0.19:
  * Changed select object algorithm to be more intuitive
  * Added ability for taps with Select Rectangle and Select Region
    to act like Select Object (gh#xournalpp/xournalpp#1980).
  * Improved document loading speed (gh#xournalpp/xournalpp#2002).
  * Added a --version command to print the Xournal++ version
  * Added a libgtk version display to the About dialog
  * Added a 16kHz sample rate to audio settings and fixed the 91kHz
    sample rate (gh#xournalpp/xournalpp#2092).
  * Added file version check for future compatibility
    (gh#xournalpp/xournalpp#1991).
  * Changed wording of new page template dialog to be less
    confusing (gh#xournalpp/xournalpp#1524).
  * Fixed behavior of "Attach file to the journal" option when
    choosing "Annotate PDF" (#1725, #2106). This now allows the
    background PDF and the annotation files to be renamed and moved
    as long as they 1) share the same file prefix; and 2) share the
    same relative path.
  * Fixed an issue where clicking the X on the replace file dialog
    would overwrite the file (gh#xournalpp/xournalpp#1983).
  * (libcairo &gt;= 1.16 only): Fixed PDF export crashing when the
    table of contents is empty (gh#xournalpp/xournalpp#2236)..
  * Fixed a bug where the PDF background would not update when
    loading a new document (gh#xournalpp/xournalpp#1964).
  * Fixed plugin window causing a crash on Ubuntu 16.04
  * Fixed a bug where the icon would not appear correctly on some
    desktop environments (gh#xournalpp/xournalpp#1892).
  * Fixed inconsistent ordering of button keybindings
    (gh#xournalpp/xournalpp#1961).
  * Fixed the Enter key not confirming PDF export settings
    (gh#xournalpp/xournalpp#1977).
  * Fixed exported PDF title (gh#xournalpp/xournalpp#2039).
  * Fixed a bug where different page backgrounds can cause PDFs to
    be exported with the wrong backgrounds
    (gh#xournalpp/xournalpp#2119).
  * Fixed a bug where the page number count would not be updated
    after deleting a page (gh#xournalpp/xournalpp#2134).
  * Fixed selection object tool not working correctly
    (gh#xournalpp/xournalpp#2081). / crashing
    (gh#xournalpp/xournalpp#2133). when there are multiple layers
- Drop xournalpp-fix-exporting-pdf-with-references.patch:
  incorporated upstream.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1608292800">- Update to version 1.0.20:
  * Fixed a regression with pdf files that could not be
    overwritten (gh#xournalpp/xournalpp#2355).
  * Fixed page layout update after inserting or deleting a page,
    changing the page layout or zooming
    (gh#xournalpp/xournalpp#1777, gh#xournalpp/xournalpp#2346,
    gh#xournalpp/xournalpp#2442).
  * Fixed incorrect rendering of pages after changing the page
    format (gh#xournalpp/xournalpp#2457).
  * Fixed blocked scrolling after saving a file
    (gh#xournalpp/xournalpp#2062).
  * Fixed presentation mode after startup
    (gh#xournalpp/xournalpp#2413).</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1613476800">- Add BuildRequires(lua) to enable building plugins.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1628078400">- Update to version 1.1.0:
  * Major release with many changes, see
    https://github.com/xournalpp/xournalpp/blob/1.1.0/CHANGELOG.md
- Drop xournalpp-fix-desktop-categories.patch: No longer needed.
- Force GCC 9 as the compiler for openSUSE Leap 15.x as builds
  require that as a minimum for proper c++17 support.
- Drop update-icon-cache.sh removal, no longer installed by
  upstream.
- Update BuildRequires with upstream.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1644840000">- Update to version 1.1.1:
  * Change the edge panning behavior when an element is selected,
    fixing the absurdly fast edge pan speed bug.
  * Fixed several crashing/freezing issues.
  * Fixed several bugs involving stroke input and rendering.
  * Fixed several bugs involving PDF rendering (in application) and export.
  * lots of bug fixes; for the full list, see
    https://github.com/xournalpp/xournalpp/blob/v1.1.1/CHANGELOG.md</changelog>
  <changelog author="postix@posteo.eu" date="1645531200">- Add Recommends tex(scontents.tex) :
  Required for LaTeX rendering using Xournalpp's default_template.tex</changelog>
</package>
<package pkgid="09f04cc785b74f9f89084ee91cf6ef64620ae2a49e006b838546482f5ccfe69d" name="xournalpp" arch="ppc64le">
  <version epoch="0" ver="1.1.1" rel="bp154.2.3.1"/>
  <changelog author="badshah400@gmail.com" date="1546171200">- Initial package (version 1.0.5).</changelog>
  <changelog author="badshah400@gmail.com" date="1548072000">- Update to version 1.0.7:
  * Fixes for HiDPI (gh#xournalpp/xournalpp#172).
  * Drop bundled mathtex, thereby fixing a licensing issue
    (mathtex is licensed under GPL-3.0,
    gh#xournalpp/xournalpp#771).
  * Other minor bug fixes.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548331200">- Remove future goals.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1548676800">- Drop unnecessary Requires(pre/post) on desktop-file-utils.</changelog>
  <changelog author="badshah400@gmail.com" date="1550577600">- Update to version 1.0.8:
  * Audio recording directly integrated, no VLC etc. needed.
  * LaTex use now vector graphics.
  * Multiple page layout.
  * Minor bug fixes.
- Add xournalpp-fix-horizontal-space.patch: fix adding horizontal
  space to document view from preferences; patch taken from
  upstream commit (gh#xournalpp/xournalpp#906).
- New upstream build dependencies: pkgconfig(portaudiocpp),
  pkgconfig(sndfile).</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1555502400">- Update to version 1.0.10:
  * Support for a new, future file format.
  * Lots of bug fixes and improvements.
- Drop xournalpp-fix-horizontal-space.patch: incorporated
  upstream.
- New BuildRequires: pkgconfig(libzip).</changelog>
  <changelog author="aloisio@gmx.com" date="1560600000">- Update to version 1.0.12
  * Added new experimental input system that should fix a lot of
    issues related to input handling (can be enabled from
    Preferences &gt; Input System).
  * Added experimental stroke filter (can be enabled in
    Preferences &gt; Drawing Area) to allow selections using drawing
    tool
  * Added ability to double click on selected objects (e.g. text
    fields and LaTeX) to begin editing them (only available with
    the new input system enabled)
  * Fixed some issues with selections
  * Fixed some issues involving autosaving
  * Improved LaTeX editor experience, as well as bug fixes
  * Fixed text editor copying and pasting to the wrong clipboard
  * Fixed many zoom issues while in presentation mode
  * Fixed some other miscellaneous issues
- Use package name in the tarball</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1576584000">- Update to version 1.0.16:
  * Fixed currently editing textboxes not exporting to PDF.
  * Fixed line tool breaking when snap-to-grid is disabled.
- Changes from version 1.0.15 and 1.0.14:
  * Fixed an issue where copying and pasting strokes would crash
    the program.
  * Text field bugfixes
  * Latex tool enhancements
  * Image tool bugfixes
  * Misc quality-of-life enhancements
  * New experimental floating toolbox
  * Improved input handling, bugfixes
  * Updated preferences window
  * Fixed some crashing issues
  * Refactoring and other non-user visible changes
  * Other misc features and bugfixes
- Add xournalpp-fix-desktop-categories.patch: Fix desktop
  categories with additional keywords to prevent "No sufficient
  Category definition" error from brp-desktop.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1582113600">- Update to version 1.0.17:
  - Fixed arrow tip scaling: now scales with thickness instead of
    length (gh#xournalpp/xournalpp#967).
  - Changed coordinate draw direction.
  - Fixed audio playback failures not showing error messages to
    the user (gh#xournalpp/xournalpp#1573).
  - Fixed text tool bold shortcut not working when capslock is
    enabled (gh#xournalpp/xournalpp#1583).
  - Fixed sidebar preview context menu "Move Page Up" and "Move
    Page Down" buttons not being disabled on the first and last
    page, respectively (gh#xournalpp/xournalpp#1637).
  - Fixed Enter keypress on the "Goto Page" (Ctrl-G) dialog not
    changing the page (gh#xournalpp/xournalpp#975).
  - Fixed missing Xournal++ icon errors on most of the dialog
    windows (gh#xournalpp/xournalpp#1667).
- Build translations during make stage.
- Use %cmake_build instead of obsolete %make_jobs.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1587902400">- Update to version 1.0.18:
  * Fixed a crash occurring when recent file entries are invalid
    (gh#xournalpp/xournalpp#1730)
  * Fixed translations not being built correctly, causing
    packaging issues (gh#xournalpp/xournalpp#1596)
  * Fixed background PDF outlines not being saved in exported PDF
    (only available when compiled with Cairo 1.16 or newer)
  * Fixed a deadlock occurring when a second PDF with an outline
    is opened (gh#xournalpp/xournalpp#1582).
  * Fixed the settings file being written to when it is parsed
    (gh#xournalpp/xournalpp#1074)
  * Fixed dark mode icons not loading properly
    (gh#xournalpp/xournalpp#1767)
  * Added missing dark mode icons (gh#xournalpp/xournalpp#1765)
  * Fixed crash in Export As ... on some page range options
    (gh#xournalpp/xournalpp#1790)
  * Fixed crash caused by custom colors in toolbar being "too
    close" (gh#xournalpp/xournalpp#1659)
- No longer need to build translations independently after
  running make.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1594900800">- Add Recommends tex(standalone.tex) instead of Requires:
  texlive-latex-bin, so that users can uninstall texlive packages
  should they not use this particular feature. The standalone pkg
  is required for the feature to work and it pulls in the right
  texlive dependencies as Recommends.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1600516800">- Add xournalpp-fix-exporting-pdf-with-references.patch: Fix PDF
  export when references exist in the document
  [gh#xournalpp/xournalpp#2236].</changelog>
  <changelog author="Markus Ebner &lt;info@ebner-markus.de&gt;" date="1606305600">- Update to version 1.0.19:
  * Changed select object algorithm to be more intuitive
  * Added ability for taps with Select Rectangle and Select Region
    to act like Select Object (gh#xournalpp/xournalpp#1980).
  * Improved document loading speed (gh#xournalpp/xournalpp#2002).
  * Added a --version command to print the Xournal++ version
  * Added a libgtk version display to the About dialog
  * Added a 16kHz sample rate to audio settings and fixed the 91kHz
    sample rate (gh#xournalpp/xournalpp#2092).
  * Added file version check for future compatibility
    (gh#xournalpp/xournalpp#1991).
  * Changed wording of new page template dialog to be less
    confusing (gh#xournalpp/xournalpp#1524).
  * Fixed behavior of "Attach file to the journal" option when
    choosing "Annotate PDF" (#1725, #2106). This now allows the
    background PDF and the annotation files to be renamed and moved
    as long as they 1) share the same file prefix; and 2) share the
    same relative path.
  * Fixed an issue where clicking the X on the replace file dialog
    would overwrite the file (gh#xournalpp/xournalpp#1983).
  * (libcairo &gt;= 1.16 only): Fixed PDF export crashing when the
    table of contents is empty (gh#xournalpp/xournalpp#2236)..
  * Fixed a bug where the PDF background would not update when
    loading a new document (gh#xournalpp/xournalpp#1964).
  * Fixed plugin window causing a crash on Ubuntu 16.04
  * Fixed a bug where the icon would not appear correctly on some
    desktop environments (gh#xournalpp/xournalpp#1892).
  * Fixed inconsistent ordering of button keybindings
    (gh#xournalpp/xournalpp#1961).
  * Fixed the Enter key not confirming PDF export settings
    (gh#xournalpp/xournalpp#1977).
  * Fixed exported PDF title (gh#xournalpp/xournalpp#2039).
  * Fixed a bug where different page backgrounds can cause PDFs to
    be exported with the wrong backgrounds
    (gh#xournalpp/xournalpp#2119).
  * Fixed a bug where the page number count would not be updated
    after deleting a page (gh#xournalpp/xournalpp#2134).
  * Fixed selection object tool not working correctly
    (gh#xournalpp/xournalpp#2081). / crashing
    (gh#xournalpp/xournalpp#2133). when there are multiple layers
- Drop xournalpp-fix-exporting-pdf-with-references.patch:
  incorporated upstream.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1608292800">- Update to version 1.0.20:
  * Fixed a regression with pdf files that could not be
    overwritten (gh#xournalpp/xournalpp#2355).
  * Fixed page layout update after inserting or deleting a page,
    changing the page layout or zooming
    (gh#xournalpp/xournalpp#1777, gh#xournalpp/xournalpp#2346,
    gh#xournalpp/xournalpp#2442).
  * Fixed incorrect rendering of pages after changing the page
    format (gh#xournalpp/xournalpp#2457).
  * Fixed blocked scrolling after saving a file
    (gh#xournalpp/xournalpp#2062).
  * Fixed presentation mode after startup
    (gh#xournalpp/xournalpp#2413).</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1613476800">- Add BuildRequires(lua) to enable building plugins.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1628078400">- Update to version 1.1.0:
  * Major release with many changes, see
    https://github.com/xournalpp/xournalpp/blob/1.1.0/CHANGELOG.md
- Drop xournalpp-fix-desktop-categories.patch: No longer needed.
- Force GCC 9 as the compiler for openSUSE Leap 15.x as builds
  require that as a minimum for proper c++17 support.
- Drop update-icon-cache.sh removal, no longer installed by
  upstream.
- Update BuildRequires with upstream.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1644840000">- Update to version 1.1.1:
  * Change the edge panning behavior when an element is selected,
    fixing the absurdly fast edge pan speed bug.
  * Fixed several crashing/freezing issues.
  * Fixed several bugs involving stroke input and rendering.
  * Fixed several bugs involving PDF rendering (in application) and export.
  * lots of bug fixes; for the full list, see
    https://github.com/xournalpp/xournalpp/blob/v1.1.1/CHANGELOG.md</changelog>
  <changelog author="postix@posteo.eu" date="1645531200">- Add Recommends tex(scontents.tex) :
  Required for LaTeX rendering using Xournalpp's default_template.tex</changelog>
</package>
<package pkgid="ef124a968e0892d4128b18021772d05b6feeb232ca6a3762ca4b71de6593cdd0" name="xournalpp" arch="s390x">
  <version epoch="0" ver="1.1.1" rel="bp154.2.3.1"/>
  <changelog author="badshah400@gmail.com" date="1546171200">- Initial package (version 1.0.5).</changelog>
  <changelog author="badshah400@gmail.com" date="1548072000">- Update to version 1.0.7:
  * Fixes for HiDPI (gh#xournalpp/xournalpp#172).
  * Drop bundled mathtex, thereby fixing a licensing issue
    (mathtex is licensed under GPL-3.0,
    gh#xournalpp/xournalpp#771).
  * Other minor bug fixes.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548331200">- Remove future goals.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1548676800">- Drop unnecessary Requires(pre/post) on desktop-file-utils.</changelog>
  <changelog author="badshah400@gmail.com" date="1550577600">- Update to version 1.0.8:
  * Audio recording directly integrated, no VLC etc. needed.
  * LaTex use now vector graphics.
  * Multiple page layout.
  * Minor bug fixes.
- Add xournalpp-fix-horizontal-space.patch: fix adding horizontal
  space to document view from preferences; patch taken from
  upstream commit (gh#xournalpp/xournalpp#906).
- New upstream build dependencies: pkgconfig(portaudiocpp),
  pkgconfig(sndfile).</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1555502400">- Update to version 1.0.10:
  * Support for a new, future file format.
  * Lots of bug fixes and improvements.
- Drop xournalpp-fix-horizontal-space.patch: incorporated
  upstream.
- New BuildRequires: pkgconfig(libzip).</changelog>
  <changelog author="aloisio@gmx.com" date="1560600000">- Update to version 1.0.12
  * Added new experimental input system that should fix a lot of
    issues related to input handling (can be enabled from
    Preferences &gt; Input System).
  * Added experimental stroke filter (can be enabled in
    Preferences &gt; Drawing Area) to allow selections using drawing
    tool
  * Added ability to double click on selected objects (e.g. text
    fields and LaTeX) to begin editing them (only available with
    the new input system enabled)
  * Fixed some issues with selections
  * Fixed some issues involving autosaving
  * Improved LaTeX editor experience, as well as bug fixes
  * Fixed text editor copying and pasting to the wrong clipboard
  * Fixed many zoom issues while in presentation mode
  * Fixed some other miscellaneous issues
- Use package name in the tarball</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1576584000">- Update to version 1.0.16:
  * Fixed currently editing textboxes not exporting to PDF.
  * Fixed line tool breaking when snap-to-grid is disabled.
- Changes from version 1.0.15 and 1.0.14:
  * Fixed an issue where copying and pasting strokes would crash
    the program.
  * Text field bugfixes
  * Latex tool enhancements
  * Image tool bugfixes
  * Misc quality-of-life enhancements
  * New experimental floating toolbox
  * Improved input handling, bugfixes
  * Updated preferences window
  * Fixed some crashing issues
  * Refactoring and other non-user visible changes
  * Other misc features and bugfixes
- Add xournalpp-fix-desktop-categories.patch: Fix desktop
  categories with additional keywords to prevent "No sufficient
  Category definition" error from brp-desktop.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1582113600">- Update to version 1.0.17:
  - Fixed arrow tip scaling: now scales with thickness instead of
    length (gh#xournalpp/xournalpp#967).
  - Changed coordinate draw direction.
  - Fixed audio playback failures not showing error messages to
    the user (gh#xournalpp/xournalpp#1573).
  - Fixed text tool bold shortcut not working when capslock is
    enabled (gh#xournalpp/xournalpp#1583).
  - Fixed sidebar preview context menu "Move Page Up" and "Move
    Page Down" buttons not being disabled on the first and last
    page, respectively (gh#xournalpp/xournalpp#1637).
  - Fixed Enter keypress on the "Goto Page" (Ctrl-G) dialog not
    changing the page (gh#xournalpp/xournalpp#975).
  - Fixed missing Xournal++ icon errors on most of the dialog
    windows (gh#xournalpp/xournalpp#1667).
- Build translations during make stage.
- Use %cmake_build instead of obsolete %make_jobs.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1587902400">- Update to version 1.0.18:
  * Fixed a crash occurring when recent file entries are invalid
    (gh#xournalpp/xournalpp#1730)
  * Fixed translations not being built correctly, causing
    packaging issues (gh#xournalpp/xournalpp#1596)
  * Fixed background PDF outlines not being saved in exported PDF
    (only available when compiled with Cairo 1.16 or newer)
  * Fixed a deadlock occurring when a second PDF with an outline
    is opened (gh#xournalpp/xournalpp#1582).
  * Fixed the settings file being written to when it is parsed
    (gh#xournalpp/xournalpp#1074)
  * Fixed dark mode icons not loading properly
    (gh#xournalpp/xournalpp#1767)
  * Added missing dark mode icons (gh#xournalpp/xournalpp#1765)
  * Fixed crash in Export As ... on some page range options
    (gh#xournalpp/xournalpp#1790)
  * Fixed crash caused by custom colors in toolbar being "too
    close" (gh#xournalpp/xournalpp#1659)
- No longer need to build translations independently after
  running make.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1594900800">- Add Recommends tex(standalone.tex) instead of Requires:
  texlive-latex-bin, so that users can uninstall texlive packages
  should they not use this particular feature. The standalone pkg
  is required for the feature to work and it pulls in the right
  texlive dependencies as Recommends.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1600516800">- Add xournalpp-fix-exporting-pdf-with-references.patch: Fix PDF
  export when references exist in the document
  [gh#xournalpp/xournalpp#2236].</changelog>
  <changelog author="Markus Ebner &lt;info@ebner-markus.de&gt;" date="1606305600">- Update to version 1.0.19:
  * Changed select object algorithm to be more intuitive
  * Added ability for taps with Select Rectangle and Select Region
    to act like Select Object (gh#xournalpp/xournalpp#1980).
  * Improved document loading speed (gh#xournalpp/xournalpp#2002).
  * Added a --version command to print the Xournal++ version
  * Added a libgtk version display to the About dialog
  * Added a 16kHz sample rate to audio settings and fixed the 91kHz
    sample rate (gh#xournalpp/xournalpp#2092).
  * Added file version check for future compatibility
    (gh#xournalpp/xournalpp#1991).
  * Changed wording of new page template dialog to be less
    confusing (gh#xournalpp/xournalpp#1524).
  * Fixed behavior of "Attach file to the journal" option when
    choosing "Annotate PDF" (#1725, #2106). This now allows the
    background PDF and the annotation files to be renamed and moved
    as long as they 1) share the same file prefix; and 2) share the
    same relative path.
  * Fixed an issue where clicking the X on the replace file dialog
    would overwrite the file (gh#xournalpp/xournalpp#1983).
  * (libcairo &gt;= 1.16 only): Fixed PDF export crashing when the
    table of contents is empty (gh#xournalpp/xournalpp#2236)..
  * Fixed a bug where the PDF background would not update when
    loading a new document (gh#xournalpp/xournalpp#1964).
  * Fixed plugin window causing a crash on Ubuntu 16.04
  * Fixed a bug where the icon would not appear correctly on some
    desktop environments (gh#xournalpp/xournalpp#1892).
  * Fixed inconsistent ordering of button keybindings
    (gh#xournalpp/xournalpp#1961).
  * Fixed the Enter key not confirming PDF export settings
    (gh#xournalpp/xournalpp#1977).
  * Fixed exported PDF title (gh#xournalpp/xournalpp#2039).
  * Fixed a bug where different page backgrounds can cause PDFs to
    be exported with the wrong backgrounds
    (gh#xournalpp/xournalpp#2119).
  * Fixed a bug where the page number count would not be updated
    after deleting a page (gh#xournalpp/xournalpp#2134).
  * Fixed selection object tool not working correctly
    (gh#xournalpp/xournalpp#2081). / crashing
    (gh#xournalpp/xournalpp#2133). when there are multiple layers
- Drop xournalpp-fix-exporting-pdf-with-references.patch:
  incorporated upstream.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1608292800">- Update to version 1.0.20:
  * Fixed a regression with pdf files that could not be
    overwritten (gh#xournalpp/xournalpp#2355).
  * Fixed page layout update after inserting or deleting a page,
    changing the page layout or zooming
    (gh#xournalpp/xournalpp#1777, gh#xournalpp/xournalpp#2346,
    gh#xournalpp/xournalpp#2442).
  * Fixed incorrect rendering of pages after changing the page
    format (gh#xournalpp/xournalpp#2457).
  * Fixed blocked scrolling after saving a file
    (gh#xournalpp/xournalpp#2062).
  * Fixed presentation mode after startup
    (gh#xournalpp/xournalpp#2413).</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1613476800">- Add BuildRequires(lua) to enable building plugins.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1628078400">- Update to version 1.1.0:
  * Major release with many changes, see
    https://github.com/xournalpp/xournalpp/blob/1.1.0/CHANGELOG.md
- Drop xournalpp-fix-desktop-categories.patch: No longer needed.
- Force GCC 9 as the compiler for openSUSE Leap 15.x as builds
  require that as a minimum for proper c++17 support.
- Drop update-icon-cache.sh removal, no longer installed by
  upstream.
- Update BuildRequires with upstream.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1644840000">- Update to version 1.1.1:
  * Change the edge panning behavior when an element is selected,
    fixing the absurdly fast edge pan speed bug.
  * Fixed several crashing/freezing issues.
  * Fixed several bugs involving stroke input and rendering.
  * Fixed several bugs involving PDF rendering (in application) and export.
  * lots of bug fixes; for the full list, see
    https://github.com/xournalpp/xournalpp/blob/v1.1.1/CHANGELOG.md</changelog>
  <changelog author="postix@posteo.eu" date="1645531200">- Add Recommends tex(scontents.tex) :
  Required for LaTeX rendering using Xournalpp's default_template.tex</changelog>
</package>
<package pkgid="0ebb6399ab3f663e622cd52544c810ebfb03b7845a79b863206778e7a02e3852" name="xournalpp" arch="src">
  <version epoch="0" ver="1.1.1" rel="bp154.2.3.1"/>
  <changelog author="badshah400@gmail.com" date="1546171200">- Initial package (version 1.0.5).</changelog>
  <changelog author="badshah400@gmail.com" date="1548072000">- Update to version 1.0.7:
  * Fixes for HiDPI (gh#xournalpp/xournalpp#172).
  * Drop bundled mathtex, thereby fixing a licensing issue
    (mathtex is licensed under GPL-3.0,
    gh#xournalpp/xournalpp#771).
  * Other minor bug fixes.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548331200">- Remove future goals.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1548676800">- Drop unnecessary Requires(pre/post) on desktop-file-utils.</changelog>
  <changelog author="badshah400@gmail.com" date="1550577600">- Update to version 1.0.8:
  * Audio recording directly integrated, no VLC etc. needed.
  * LaTex use now vector graphics.
  * Multiple page layout.
  * Minor bug fixes.
- Add xournalpp-fix-horizontal-space.patch: fix adding horizontal
  space to document view from preferences; patch taken from
  upstream commit (gh#xournalpp/xournalpp#906).
- New upstream build dependencies: pkgconfig(portaudiocpp),
  pkgconfig(sndfile).</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1555502400">- Update to version 1.0.10:
  * Support for a new, future file format.
  * Lots of bug fixes and improvements.
- Drop xournalpp-fix-horizontal-space.patch: incorporated
  upstream.
- New BuildRequires: pkgconfig(libzip).</changelog>
  <changelog author="aloisio@gmx.com" date="1560600000">- Update to version 1.0.12
  * Added new experimental input system that should fix a lot of
    issues related to input handling (can be enabled from
    Preferences &gt; Input System).
  * Added experimental stroke filter (can be enabled in
    Preferences &gt; Drawing Area) to allow selections using drawing
    tool
  * Added ability to double click on selected objects (e.g. text
    fields and LaTeX) to begin editing them (only available with
    the new input system enabled)
  * Fixed some issues with selections
  * Fixed some issues involving autosaving
  * Improved LaTeX editor experience, as well as bug fixes
  * Fixed text editor copying and pasting to the wrong clipboard
  * Fixed many zoom issues while in presentation mode
  * Fixed some other miscellaneous issues
- Use package name in the tarball</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1576584000">- Update to version 1.0.16:
  * Fixed currently editing textboxes not exporting to PDF.
  * Fixed line tool breaking when snap-to-grid is disabled.
- Changes from version 1.0.15 and 1.0.14:
  * Fixed an issue where copying and pasting strokes would crash
    the program.
  * Text field bugfixes
  * Latex tool enhancements
  * Image tool bugfixes
  * Misc quality-of-life enhancements
  * New experimental floating toolbox
  * Improved input handling, bugfixes
  * Updated preferences window
  * Fixed some crashing issues
  * Refactoring and other non-user visible changes
  * Other misc features and bugfixes
- Add xournalpp-fix-desktop-categories.patch: Fix desktop
  categories with additional keywords to prevent "No sufficient
  Category definition" error from brp-desktop.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1582113600">- Update to version 1.0.17:
  - Fixed arrow tip scaling: now scales with thickness instead of
    length (gh#xournalpp/xournalpp#967).
  - Changed coordinate draw direction.
  - Fixed audio playback failures not showing error messages to
    the user (gh#xournalpp/xournalpp#1573).
  - Fixed text tool bold shortcut not working when capslock is
    enabled (gh#xournalpp/xournalpp#1583).
  - Fixed sidebar preview context menu "Move Page Up" and "Move
    Page Down" buttons not being disabled on the first and last
    page, respectively (gh#xournalpp/xournalpp#1637).
  - Fixed Enter keypress on the "Goto Page" (Ctrl-G) dialog not
    changing the page (gh#xournalpp/xournalpp#975).
  - Fixed missing Xournal++ icon errors on most of the dialog
    windows (gh#xournalpp/xournalpp#1667).
- Build translations during make stage.
- Use %cmake_build instead of obsolete %make_jobs.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1587902400">- Update to version 1.0.18:
  * Fixed a crash occurring when recent file entries are invalid
    (gh#xournalpp/xournalpp#1730)
  * Fixed translations not being built correctly, causing
    packaging issues (gh#xournalpp/xournalpp#1596)
  * Fixed background PDF outlines not being saved in exported PDF
    (only available when compiled with Cairo 1.16 or newer)
  * Fixed a deadlock occurring when a second PDF with an outline
    is opened (gh#xournalpp/xournalpp#1582).
  * Fixed the settings file being written to when it is parsed
    (gh#xournalpp/xournalpp#1074)
  * Fixed dark mode icons not loading properly
    (gh#xournalpp/xournalpp#1767)
  * Added missing dark mode icons (gh#xournalpp/xournalpp#1765)
  * Fixed crash in Export As ... on some page range options
    (gh#xournalpp/xournalpp#1790)
  * Fixed crash caused by custom colors in toolbar being "too
    close" (gh#xournalpp/xournalpp#1659)
- No longer need to build translations independently after
  running make.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1594900800">- Add Recommends tex(standalone.tex) instead of Requires:
  texlive-latex-bin, so that users can uninstall texlive packages
  should they not use this particular feature. The standalone pkg
  is required for the feature to work and it pulls in the right
  texlive dependencies as Recommends.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1600516800">- Add xournalpp-fix-exporting-pdf-with-references.patch: Fix PDF
  export when references exist in the document
  [gh#xournalpp/xournalpp#2236].</changelog>
  <changelog author="Markus Ebner &lt;info@ebner-markus.de&gt;" date="1606305600">- Update to version 1.0.19:
  * Changed select object algorithm to be more intuitive
  * Added ability for taps with Select Rectangle and Select Region
    to act like Select Object (gh#xournalpp/xournalpp#1980).
  * Improved document loading speed (gh#xournalpp/xournalpp#2002).
  * Added a --version command to print the Xournal++ version
  * Added a libgtk version display to the About dialog
  * Added a 16kHz sample rate to audio settings and fixed the 91kHz
    sample rate (gh#xournalpp/xournalpp#2092).
  * Added file version check for future compatibility
    (gh#xournalpp/xournalpp#1991).
  * Changed wording of new page template dialog to be less
    confusing (gh#xournalpp/xournalpp#1524).
  * Fixed behavior of "Attach file to the journal" option when
    choosing "Annotate PDF" (#1725, #2106). This now allows the
    background PDF and the annotation files to be renamed and moved
    as long as they 1) share the same file prefix; and 2) share the
    same relative path.
  * Fixed an issue where clicking the X on the replace file dialog
    would overwrite the file (gh#xournalpp/xournalpp#1983).
  * (libcairo &gt;= 1.16 only): Fixed PDF export crashing when the
    table of contents is empty (gh#xournalpp/xournalpp#2236)..
  * Fixed a bug where the PDF background would not update when
    loading a new document (gh#xournalpp/xournalpp#1964).
  * Fixed plugin window causing a crash on Ubuntu 16.04
  * Fixed a bug where the icon would not appear correctly on some
    desktop environments (gh#xournalpp/xournalpp#1892).
  * Fixed inconsistent ordering of button keybindings
    (gh#xournalpp/xournalpp#1961).
  * Fixed the Enter key not confirming PDF export settings
    (gh#xournalpp/xournalpp#1977).
  * Fixed exported PDF title (gh#xournalpp/xournalpp#2039).
  * Fixed a bug where different page backgrounds can cause PDFs to
    be exported with the wrong backgrounds
    (gh#xournalpp/xournalpp#2119).
  * Fixed a bug where the page number count would not be updated
    after deleting a page (gh#xournalpp/xournalpp#2134).
  * Fixed selection object tool not working correctly
    (gh#xournalpp/xournalpp#2081). / crashing
    (gh#xournalpp/xournalpp#2133). when there are multiple layers
- Drop xournalpp-fix-exporting-pdf-with-references.patch:
  incorporated upstream.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1608292800">- Update to version 1.0.20:
  * Fixed a regression with pdf files that could not be
    overwritten (gh#xournalpp/xournalpp#2355).
  * Fixed page layout update after inserting or deleting a page,
    changing the page layout or zooming
    (gh#xournalpp/xournalpp#1777, gh#xournalpp/xournalpp#2346,
    gh#xournalpp/xournalpp#2442).
  * Fixed incorrect rendering of pages after changing the page
    format (gh#xournalpp/xournalpp#2457).
  * Fixed blocked scrolling after saving a file
    (gh#xournalpp/xournalpp#2062).
  * Fixed presentation mode after startup
    (gh#xournalpp/xournalpp#2413).</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1613476800">- Add BuildRequires(lua) to enable building plugins.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1628078400">- Update to version 1.1.0:
  * Major release with many changes, see
    https://github.com/xournalpp/xournalpp/blob/1.1.0/CHANGELOG.md
- Drop xournalpp-fix-desktop-categories.patch: No longer needed.
- Force GCC 9 as the compiler for openSUSE Leap 15.x as builds
  require that as a minimum for proper c++17 support.
- Drop update-icon-cache.sh removal, no longer installed by
  upstream.
- Update BuildRequires with upstream.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1644840000">- Update to version 1.1.1:
  * Change the edge panning behavior when an element is selected,
    fixing the absurdly fast edge pan speed bug.
  * Fixed several crashing/freezing issues.
  * Fixed several bugs involving stroke input and rendering.
  * Fixed several bugs involving PDF rendering (in application) and export.
  * lots of bug fixes; for the full list, see
    https://github.com/xournalpp/xournalpp/blob/v1.1.1/CHANGELOG.md</changelog>
  <changelog author="postix@posteo.eu" date="1645531200">- Add Recommends tex(scontents.tex) :
  Required for LaTeX rendering using Xournalpp's default_template.tex</changelog>
</package>
<package pkgid="a0fea2720d774a15a5168ff6afc4592858e5768cf24facc0ba88e68123bbff4a" name="xournalpp" arch="x86_64">
  <version epoch="0" ver="1.1.1" rel="bp154.2.3.1"/>
  <changelog author="badshah400@gmail.com" date="1546171200">- Initial package (version 1.0.5).</changelog>
  <changelog author="badshah400@gmail.com" date="1548072000">- Update to version 1.0.7:
  * Fixes for HiDPI (gh#xournalpp/xournalpp#172).
  * Drop bundled mathtex, thereby fixing a licensing issue
    (mathtex is licensed under GPL-3.0,
    gh#xournalpp/xournalpp#771).
  * Other minor bug fixes.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548331200">- Remove future goals.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1548676800">- Drop unnecessary Requires(pre/post) on desktop-file-utils.</changelog>
  <changelog author="badshah400@gmail.com" date="1550577600">- Update to version 1.0.8:
  * Audio recording directly integrated, no VLC etc. needed.
  * LaTex use now vector graphics.
  * Multiple page layout.
  * Minor bug fixes.
- Add xournalpp-fix-horizontal-space.patch: fix adding horizontal
  space to document view from preferences; patch taken from
  upstream commit (gh#xournalpp/xournalpp#906).
- New upstream build dependencies: pkgconfig(portaudiocpp),
  pkgconfig(sndfile).</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1555502400">- Update to version 1.0.10:
  * Support for a new, future file format.
  * Lots of bug fixes and improvements.
- Drop xournalpp-fix-horizontal-space.patch: incorporated
  upstream.
- New BuildRequires: pkgconfig(libzip).</changelog>
  <changelog author="aloisio@gmx.com" date="1560600000">- Update to version 1.0.12
  * Added new experimental input system that should fix a lot of
    issues related to input handling (can be enabled from
    Preferences &gt; Input System).
  * Added experimental stroke filter (can be enabled in
    Preferences &gt; Drawing Area) to allow selections using drawing
    tool
  * Added ability to double click on selected objects (e.g. text
    fields and LaTeX) to begin editing them (only available with
    the new input system enabled)
  * Fixed some issues with selections
  * Fixed some issues involving autosaving
  * Improved LaTeX editor experience, as well as bug fixes
  * Fixed text editor copying and pasting to the wrong clipboard
  * Fixed many zoom issues while in presentation mode
  * Fixed some other miscellaneous issues
- Use package name in the tarball</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1576584000">- Update to version 1.0.16:
  * Fixed currently editing textboxes not exporting to PDF.
  * Fixed line tool breaking when snap-to-grid is disabled.
- Changes from version 1.0.15 and 1.0.14:
  * Fixed an issue where copying and pasting strokes would crash
    the program.
  * Text field bugfixes
  * Latex tool enhancements
  * Image tool bugfixes
  * Misc quality-of-life enhancements
  * New experimental floating toolbox
  * Improved input handling, bugfixes
  * Updated preferences window
  * Fixed some crashing issues
  * Refactoring and other non-user visible changes
  * Other misc features and bugfixes
- Add xournalpp-fix-desktop-categories.patch: Fix desktop
  categories with additional keywords to prevent "No sufficient
  Category definition" error from brp-desktop.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1582113600">- Update to version 1.0.17:
  - Fixed arrow tip scaling: now scales with thickness instead of
    length (gh#xournalpp/xournalpp#967).
  - Changed coordinate draw direction.
  - Fixed audio playback failures not showing error messages to
    the user (gh#xournalpp/xournalpp#1573).
  - Fixed text tool bold shortcut not working when capslock is
    enabled (gh#xournalpp/xournalpp#1583).
  - Fixed sidebar preview context menu "Move Page Up" and "Move
    Page Down" buttons not being disabled on the first and last
    page, respectively (gh#xournalpp/xournalpp#1637).
  - Fixed Enter keypress on the "Goto Page" (Ctrl-G) dialog not
    changing the page (gh#xournalpp/xournalpp#975).
  - Fixed missing Xournal++ icon errors on most of the dialog
    windows (gh#xournalpp/xournalpp#1667).
- Build translations during make stage.
- Use %cmake_build instead of obsolete %make_jobs.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1587902400">- Update to version 1.0.18:
  * Fixed a crash occurring when recent file entries are invalid
    (gh#xournalpp/xournalpp#1730)
  * Fixed translations not being built correctly, causing
    packaging issues (gh#xournalpp/xournalpp#1596)
  * Fixed background PDF outlines not being saved in exported PDF
    (only available when compiled with Cairo 1.16 or newer)
  * Fixed a deadlock occurring when a second PDF with an outline
    is opened (gh#xournalpp/xournalpp#1582).
  * Fixed the settings file being written to when it is parsed
    (gh#xournalpp/xournalpp#1074)
  * Fixed dark mode icons not loading properly
    (gh#xournalpp/xournalpp#1767)
  * Added missing dark mode icons (gh#xournalpp/xournalpp#1765)
  * Fixed crash in Export As ... on some page range options
    (gh#xournalpp/xournalpp#1790)
  * Fixed crash caused by custom colors in toolbar being "too
    close" (gh#xournalpp/xournalpp#1659)
- No longer need to build translations independently after
  running make.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1594900800">- Add Recommends tex(standalone.tex) instead of Requires:
  texlive-latex-bin, so that users can uninstall texlive packages
  should they not use this particular feature. The standalone pkg
  is required for the feature to work and it pulls in the right
  texlive dependencies as Recommends.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1600516800">- Add xournalpp-fix-exporting-pdf-with-references.patch: Fix PDF
  export when references exist in the document
  [gh#xournalpp/xournalpp#2236].</changelog>
  <changelog author="Markus Ebner &lt;info@ebner-markus.de&gt;" date="1606305600">- Update to version 1.0.19:
  * Changed select object algorithm to be more intuitive
  * Added ability for taps with Select Rectangle and Select Region
    to act like Select Object (gh#xournalpp/xournalpp#1980).
  * Improved document loading speed (gh#xournalpp/xournalpp#2002).
  * Added a --version command to print the Xournal++ version
  * Added a libgtk version display to the About dialog
  * Added a 16kHz sample rate to audio settings and fixed the 91kHz
    sample rate (gh#xournalpp/xournalpp#2092).
  * Added file version check for future compatibility
    (gh#xournalpp/xournalpp#1991).
  * Changed wording of new page template dialog to be less
    confusing (gh#xournalpp/xournalpp#1524).
  * Fixed behavior of "Attach file to the journal" option when
    choosing "Annotate PDF" (#1725, #2106). This now allows the
    background PDF and the annotation files to be renamed and moved
    as long as they 1) share the same file prefix; and 2) share the
    same relative path.
  * Fixed an issue where clicking the X on the replace file dialog
    would overwrite the file (gh#xournalpp/xournalpp#1983).
  * (libcairo &gt;= 1.16 only): Fixed PDF export crashing when the
    table of contents is empty (gh#xournalpp/xournalpp#2236)..
  * Fixed a bug where the PDF background would not update when
    loading a new document (gh#xournalpp/xournalpp#1964).
  * Fixed plugin window causing a crash on Ubuntu 16.04
  * Fixed a bug where the icon would not appear correctly on some
    desktop environments (gh#xournalpp/xournalpp#1892).
  * Fixed inconsistent ordering of button keybindings
    (gh#xournalpp/xournalpp#1961).
  * Fixed the Enter key not confirming PDF export settings
    (gh#xournalpp/xournalpp#1977).
  * Fixed exported PDF title (gh#xournalpp/xournalpp#2039).
  * Fixed a bug where different page backgrounds can cause PDFs to
    be exported with the wrong backgrounds
    (gh#xournalpp/xournalpp#2119).
  * Fixed a bug where the page number count would not be updated
    after deleting a page (gh#xournalpp/xournalpp#2134).
  * Fixed selection object tool not working correctly
    (gh#xournalpp/xournalpp#2081). / crashing
    (gh#xournalpp/xournalpp#2133). when there are multiple layers
- Drop xournalpp-fix-exporting-pdf-with-references.patch:
  incorporated upstream.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1608292800">- Update to version 1.0.20:
  * Fixed a regression with pdf files that could not be
    overwritten (gh#xournalpp/xournalpp#2355).
  * Fixed page layout update after inserting or deleting a page,
    changing the page layout or zooming
    (gh#xournalpp/xournalpp#1777, gh#xournalpp/xournalpp#2346,
    gh#xournalpp/xournalpp#2442).
  * Fixed incorrect rendering of pages after changing the page
    format (gh#xournalpp/xournalpp#2457).
  * Fixed blocked scrolling after saving a file
    (gh#xournalpp/xournalpp#2062).
  * Fixed presentation mode after startup
    (gh#xournalpp/xournalpp#2413).</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1613476800">- Add BuildRequires(lua) to enable building plugins.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1628078400">- Update to version 1.1.0:
  * Major release with many changes, see
    https://github.com/xournalpp/xournalpp/blob/1.1.0/CHANGELOG.md
- Drop xournalpp-fix-desktop-categories.patch: No longer needed.
- Force GCC 9 as the compiler for openSUSE Leap 15.x as builds
  require that as a minimum for proper c++17 support.
- Drop update-icon-cache.sh removal, no longer installed by
  upstream.
- Update BuildRequires with upstream.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1644840000">- Update to version 1.1.1:
  * Change the edge panning behavior when an element is selected,
    fixing the absurdly fast edge pan speed bug.
  * Fixed several crashing/freezing issues.
  * Fixed several bugs involving stroke input and rendering.
  * Fixed several bugs involving PDF rendering (in application) and export.
  * lots of bug fixes; for the full list, see
    https://github.com/xournalpp/xournalpp/blob/v1.1.1/CHANGELOG.md</changelog>
  <changelog author="postix@posteo.eu" date="1645531200">- Add Recommends tex(scontents.tex) :
  Required for LaTeX rendering using Xournalpp's default_template.tex</changelog>
</package>
<package pkgid="0468ce9f3ae2de17ff04b40ef7bb82ebb909dea0f5195661e7eb4ccb3b6fd823" name="xournalpp-lang" arch="noarch">
  <version epoch="0" ver="1.1.1" rel="bp154.2.3.1"/>
  <changelog author="badshah400@gmail.com" date="1546171200">- Initial package (version 1.0.5).</changelog>
  <changelog author="badshah400@gmail.com" date="1548072000">- Update to version 1.0.7:
  * Fixes for HiDPI (gh#xournalpp/xournalpp#172).
  * Drop bundled mathtex, thereby fixing a licensing issue
    (mathtex is licensed under GPL-3.0,
    gh#xournalpp/xournalpp#771).
  * Other minor bug fixes.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548331200">- Remove future goals.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1548676800">- Drop unnecessary Requires(pre/post) on desktop-file-utils.</changelog>
  <changelog author="badshah400@gmail.com" date="1550577600">- Update to version 1.0.8:
  * Audio recording directly integrated, no VLC etc. needed.
  * LaTex use now vector graphics.
  * Multiple page layout.
  * Minor bug fixes.
- Add xournalpp-fix-horizontal-space.patch: fix adding horizontal
  space to document view from preferences; patch taken from
  upstream commit (gh#xournalpp/xournalpp#906).
- New upstream build dependencies: pkgconfig(portaudiocpp),
  pkgconfig(sndfile).</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1555502400">- Update to version 1.0.10:
  * Support for a new, future file format.
  * Lots of bug fixes and improvements.
- Drop xournalpp-fix-horizontal-space.patch: incorporated
  upstream.
- New BuildRequires: pkgconfig(libzip).</changelog>
  <changelog author="aloisio@gmx.com" date="1560600000">- Update to version 1.0.12
  * Added new experimental input system that should fix a lot of
    issues related to input handling (can be enabled from
    Preferences &gt; Input System).
  * Added experimental stroke filter (can be enabled in
    Preferences &gt; Drawing Area) to allow selections using drawing
    tool
  * Added ability to double click on selected objects (e.g. text
    fields and LaTeX) to begin editing them (only available with
    the new input system enabled)
  * Fixed some issues with selections
  * Fixed some issues involving autosaving
  * Improved LaTeX editor experience, as well as bug fixes
  * Fixed text editor copying and pasting to the wrong clipboard
  * Fixed many zoom issues while in presentation mode
  * Fixed some other miscellaneous issues
- Use package name in the tarball</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1576584000">- Update to version 1.0.16:
  * Fixed currently editing textboxes not exporting to PDF.
  * Fixed line tool breaking when snap-to-grid is disabled.
- Changes from version 1.0.15 and 1.0.14:
  * Fixed an issue where copying and pasting strokes would crash
    the program.
  * Text field bugfixes
  * Latex tool enhancements
  * Image tool bugfixes
  * Misc quality-of-life enhancements
  * New experimental floating toolbox
  * Improved input handling, bugfixes
  * Updated preferences window
  * Fixed some crashing issues
  * Refactoring and other non-user visible changes
  * Other misc features and bugfixes
- Add xournalpp-fix-desktop-categories.patch: Fix desktop
  categories with additional keywords to prevent "No sufficient
  Category definition" error from brp-desktop.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1582113600">- Update to version 1.0.17:
  - Fixed arrow tip scaling: now scales with thickness instead of
    length (gh#xournalpp/xournalpp#967).
  - Changed coordinate draw direction.
  - Fixed audio playback failures not showing error messages to
    the user (gh#xournalpp/xournalpp#1573).
  - Fixed text tool bold shortcut not working when capslock is
    enabled (gh#xournalpp/xournalpp#1583).
  - Fixed sidebar preview context menu "Move Page Up" and "Move
    Page Down" buttons not being disabled on the first and last
    page, respectively (gh#xournalpp/xournalpp#1637).
  - Fixed Enter keypress on the "Goto Page" (Ctrl-G) dialog not
    changing the page (gh#xournalpp/xournalpp#975).
  - Fixed missing Xournal++ icon errors on most of the dialog
    windows (gh#xournalpp/xournalpp#1667).
- Build translations during make stage.
- Use %cmake_build instead of obsolete %make_jobs.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1587902400">- Update to version 1.0.18:
  * Fixed a crash occurring when recent file entries are invalid
    (gh#xournalpp/xournalpp#1730)
  * Fixed translations not being built correctly, causing
    packaging issues (gh#xournalpp/xournalpp#1596)
  * Fixed background PDF outlines not being saved in exported PDF
    (only available when compiled with Cairo 1.16 or newer)
  * Fixed a deadlock occurring when a second PDF with an outline
    is opened (gh#xournalpp/xournalpp#1582).
  * Fixed the settings file being written to when it is parsed
    (gh#xournalpp/xournalpp#1074)
  * Fixed dark mode icons not loading properly
    (gh#xournalpp/xournalpp#1767)
  * Added missing dark mode icons (gh#xournalpp/xournalpp#1765)
  * Fixed crash in Export As ... on some page range options
    (gh#xournalpp/xournalpp#1790)
  * Fixed crash caused by custom colors in toolbar being "too
    close" (gh#xournalpp/xournalpp#1659)
- No longer need to build translations independently after
  running make.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1594900800">- Add Recommends tex(standalone.tex) instead of Requires:
  texlive-latex-bin, so that users can uninstall texlive packages
  should they not use this particular feature. The standalone pkg
  is required for the feature to work and it pulls in the right
  texlive dependencies as Recommends.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1600516800">- Add xournalpp-fix-exporting-pdf-with-references.patch: Fix PDF
  export when references exist in the document
  [gh#xournalpp/xournalpp#2236].</changelog>
  <changelog author="Markus Ebner &lt;info@ebner-markus.de&gt;" date="1606305600">- Update to version 1.0.19:
  * Changed select object algorithm to be more intuitive
  * Added ability for taps with Select Rectangle and Select Region
    to act like Select Object (gh#xournalpp/xournalpp#1980).
  * Improved document loading speed (gh#xournalpp/xournalpp#2002).
  * Added a --version command to print the Xournal++ version
  * Added a libgtk version display to the About dialog
  * Added a 16kHz sample rate to audio settings and fixed the 91kHz
    sample rate (gh#xournalpp/xournalpp#2092).
  * Added file version check for future compatibility
    (gh#xournalpp/xournalpp#1991).
  * Changed wording of new page template dialog to be less
    confusing (gh#xournalpp/xournalpp#1524).
  * Fixed behavior of "Attach file to the journal" option when
    choosing "Annotate PDF" (#1725, #2106). This now allows the
    background PDF and the annotation files to be renamed and moved
    as long as they 1) share the same file prefix; and 2) share the
    same relative path.
  * Fixed an issue where clicking the X on the replace file dialog
    would overwrite the file (gh#xournalpp/xournalpp#1983).
  * (libcairo &gt;= 1.16 only): Fixed PDF export crashing when the
    table of contents is empty (gh#xournalpp/xournalpp#2236)..
  * Fixed a bug where the PDF background would not update when
    loading a new document (gh#xournalpp/xournalpp#1964).
  * Fixed plugin window causing a crash on Ubuntu 16.04
  * Fixed a bug where the icon would not appear correctly on some
    desktop environments (gh#xournalpp/xournalpp#1892).
  * Fixed inconsistent ordering of button keybindings
    (gh#xournalpp/xournalpp#1961).
  * Fixed the Enter key not confirming PDF export settings
    (gh#xournalpp/xournalpp#1977).
  * Fixed exported PDF title (gh#xournalpp/xournalpp#2039).
  * Fixed a bug where different page backgrounds can cause PDFs to
    be exported with the wrong backgrounds
    (gh#xournalpp/xournalpp#2119).
  * Fixed a bug where the page number count would not be updated
    after deleting a page (gh#xournalpp/xournalpp#2134).
  * Fixed selection object tool not working correctly
    (gh#xournalpp/xournalpp#2081). / crashing
    (gh#xournalpp/xournalpp#2133). when there are multiple layers
- Drop xournalpp-fix-exporting-pdf-with-references.patch:
  incorporated upstream.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1608292800">- Update to version 1.0.20:
  * Fixed a regression with pdf files that could not be
    overwritten (gh#xournalpp/xournalpp#2355).
  * Fixed page layout update after inserting or deleting a page,
    changing the page layout or zooming
    (gh#xournalpp/xournalpp#1777, gh#xournalpp/xournalpp#2346,
    gh#xournalpp/xournalpp#2442).
  * Fixed incorrect rendering of pages after changing the page
    format (gh#xournalpp/xournalpp#2457).
  * Fixed blocked scrolling after saving a file
    (gh#xournalpp/xournalpp#2062).
  * Fixed presentation mode after startup
    (gh#xournalpp/xournalpp#2413).</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1613476800">- Add BuildRequires(lua) to enable building plugins.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1628078400">- Update to version 1.1.0:
  * Major release with many changes, see
    https://github.com/xournalpp/xournalpp/blob/1.1.0/CHANGELOG.md
- Drop xournalpp-fix-desktop-categories.patch: No longer needed.
- Force GCC 9 as the compiler for openSUSE Leap 15.x as builds
  require that as a minimum for proper c++17 support.
- Drop update-icon-cache.sh removal, no longer installed by
  upstream.
- Update BuildRequires with upstream.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1644840000">- Update to version 1.1.1:
  * Change the edge panning behavior when an element is selected,
    fixing the absurdly fast edge pan speed bug.
  * Fixed several crashing/freezing issues.
  * Fixed several bugs involving stroke input and rendering.
  * Fixed several bugs involving PDF rendering (in application) and export.
  * lots of bug fixes; for the full list, see
    https://github.com/xournalpp/xournalpp/blob/v1.1.1/CHANGELOG.md</changelog>
  <changelog author="postix@posteo.eu" date="1645531200">- Add Recommends tex(scontents.tex) :
  Required for LaTeX rendering using Xournalpp's default_template.tex</changelog>
</package>
<package pkgid="6dfd5da2880092d6d36758ea094391b924aa0f37e3f556dc2531349153429e34" name="xtrabackup" arch="aarch64">
  <version epoch="0" ver="2.4.26" rel="bp154.2.3.1"/>
  <changelog author="astieger@suse.com" date="1468670400">- Percona XtraBackup 2.3.5, a bugfix release:
  * Backup process would fail if --throttle option was used
  * .ibd files for remote tablespaces were not copied back to the
    original location pointed by the .isl files.
  * Fix crash when called with insufficient parameters, like
    specifying the empty --defaults-file option
  * Change default value of --ftwrl-wait-query-type from "all" to
    "update"
  * Allow the datadir from my.cnf to override the one from
    SHOW VARIABLES
  * Fix failure on MariaDB if binary logs were in non-standard
    directory
- Includes changes from 2.3.4:
  * respect variables in backup-my.cnf without having to specify
  - -defaults-file=backup-my.cnf
  * abort the backup if innobackupex --rsync completed with error
  * Fix logging ouf GTID info with MariaDB 10
  * Fix silent skipping of extra arguments
  * Allow connections to servers using legacy auth with new option
  - -skip-secure-auth</changelog>
  <changelog author="astieger@suse.com" date="1484395200">- Percona XtraBackup 2.3.6, including one security fix:
  * CVE-2016-6225: xbcrypt encryption IV not being set properly
    (boo#1019858)
- New functionality:
  * now supports SHA256 passwords
  * new supports command options for secure connections
- Bugs fixed:
  * intermittent assertion failures when not correctly identifying
    server version
  * Safe slave backup algorithm performed too short delays between
    retries which could cause backups to fail on a busy servers
  * fix compilation warnings with gcc6
  * Backup would still succeed even if xtrabackup would fail to
    write the metadata
  * xbcloud now supports EMC ECS Swift API Authorization requests
  * backup failed with MariaDB 10.2 with the unsupported server
    version error message</changelog>
  <changelog author="astieger@suse.com" date="1487851200">- Percona XtraBackup 2.3.7
- New functionality:
  * new --remove-original option for removing the encrypted and
    compressed files once they?ve been decrypted/decompressed.
  * now supports -H, -h, -u and -p shortcuts for --hostname,
  - -datadir, --user and --password respectively.
- Bugs fixed:
  * used username set for the server in a configuration file even
    if a different user was defined in the user?s configuration file
  * Incremental backups did not include xtrabackup_binlog_info and
    xtrabackup_galera_info files
  * --move-back option did not always restore out-of-datadir
    tablespaces to their original directories
  * innobackupex and xtrabackup scripts were showing the password
    in the ps output when it was passed as a command line argument
    bsc#1026729
  * Incremental backup would fail with a path like ~/backup/inc_1
    because xtrabackup didn?t properly expand tilde</changelog>
  <changelog author="mrueckert@suse.de" date="1494417600">- update to 2.3.8
  - New Features
  - Percona XtraBackup now uses hardware accelerated
    implementation of crc32 where it is supported.
  - Percona XtraBackup has implemented new options: xtrabackup
  - -tables-exclude and xtrabackup --databases-exclude that work
    similar to xtrabackup --tables and xtrabackup --databases
    options, but exclude given names/paths from backup.
  - The xbstream binary now supports parallel extraction with the
  - -parallel option.
  - The xbstream binary now supports following new options:
  - -decrypt, --encrypt-threads, --encrypt-key, and
  - -encrypt-key-file. When --decrypt option is specified
    xbstream will automatically decrypt encrypted files when
    extracting input stream. Either --encrypt-key or
  - -encrypt-key-file options must be specified to provide
    encryption key, but not both. Option --encrypt-threads
    specifies the number of worker threads doing the encryption,
    default is 1.
  - Bugs fixed
  - xtrabackup would not create fresh InnoDB redo logs when
    preparing incremental backup. Bug fixed #1669592.
  - xtrabackup --export can now export tables that have more than
    31 index. Bug fixed #1089681.
  - Unrecognized character \x01; marked by &lt;-- HERE message could
    be seen if backups were taken with the version check enabled.
    Bug fixed #1651978.
- refreshed percona-xtrabackup-2.3.2-unbundle-jsnm.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1494417601">- enable building with system ssl</changelog>
  <changelog author="mrueckert@suse.de" date="1494417602">- dont build shared libs for now.</changelog>
  <changelog author="astieger@suse.com" date="1496404800">- fix build with gcc7 bsc#1041250:
  * percona-xtrabackup-2.3.8-gcc7-fallthrough.patch
  * percona-xtrabackup-2.3.8-gcc7-pointer-comparisons.patch</changelog>
  <changelog author="astieger@suse.com" date="1500465600">- Remove unused bundled libarchive windows build files with
  proprietary license keywords - bsc#1049458</changelog>
  <changelog author="astieger@suse.com" date="1502193600">- Percona Xtrabackup 2.3.9:
  * New --check-privileges option to check for system privileges
  * Fix crash during prepare stage if index compaction was enabled
  * Support building with OpenSSL 1.1
  * xbstream could run out of file descriptors while extracting
    backups which contains many tables
  * Fix determining use of master_auto_postion on a slave to avoid
    generating an invalid xtrabackup_slave_info file
  * Fix crash backing up MariaDB 10.2.x with --ftwrl-* options
  * Along with xtrabackup_checkpints file, xtrabackup now copies
    xtrabackup_info file into directory specified by --extra-lsndir
  * GTID position was not recorded when --binlog-info option was
    set to AUTO
  * bundled, patched libarchive updated to 3.3.1</changelog>
  <changelog author="astieger@suse.com" date="1502193601">- Percona XtraBackup 2.4.8:
  * Support MySQL 5.7, rebased to MySQL 5.7.13
  * Support for InnoDB tablespace encryption
    add --reencrypt-for-server-id option
  * Support SHA256 passwords (via SSL connection)
  * Support command options for secure connections
  * xbcrypt format changes, backups are incompatible with 2.3.x
  * Add --remove-original option to remove encrypted/compressed
    files after operations
  * Use hwardware accellerated crc32 implementaiton
  * Add options to exclude tables (--tables-exclude) and databases
    (--databases-exclude) from backup
  * xbstream now supports parallel extraction (--parallel)
  * xbstream now supports --decrypt, --encrypt-threads,
  - -encrypt-key, --encrypt-key-file for decryption
  * Add options for MDL locking (--lock-ddl, --lock-ddl-timeout,
  - -lock-ddl-per-table)
- packaging changes:
  * bundle boost 1.59.0
  * dropped patches:
    percona-xtrabackup-2.2.x-srv_buf_size.patch
    percona-xtrabackup-2.3.8-gcc7-fallthrough.patch
    percona-xtrabackup-2.3.8-gcc7-pointer-comparisons.patch</changelog>
  <changelog author="dmueller@suse.com" date="1511352000">- set default unix socket address to the mariadb socket location</changelog>
  <changelog author="astieger@suse.com" date="1512993600">- Percona XtraBackup 2.4.9:
  * xbcrypt now has an ability to decrypt files in parallel by
    specifying the number of threads with the xtrabackup
  - -encrypt-threads option
  * xtrabackup --copy-back option can now be used with xtrabackup
  - -parallel option to copy the user data files in parallel (redo
    logs and system tablespaces are copied in the main thread)
  * Various fixes to slave_info writing
  * Various fixes for crashes under certain circumstances</changelog>
  <changelog author="ro@suse.de" date="1521028800">- compile some files with -O0 to allow build on aarch64
- add percona-xtrabackup-2.4.9-aarch_buildfix.patch
- add _constraints file: min 6G mem, min 8G diskspace</changelog>
  <changelog author="astieger@suse.com" date="1522584000">- Percona XtraBackup 2.4.10:
  * Rebased to MySQL 5.7.19
  * Fix xbcrypt failure with --encrypt-key-file option
  * Fix lock-up on simultaneous usage of --lock-ddl and
  - -lock-ddl-per-table
  * Fix deadlock in prepare stage related to the maximum number
    of pending reads
  * Abort backup when encountering tablespaces with a corrupted
    first page instead of skipping
- Use %license (boo#1082318)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524744000">- Remove unneeded patch:
  * percona-xtrabackup-2.4.9-aarch_buildfix.patch</changelog>
  <changelog author="astieger@suse.com" date="1528286400">- Percona XtraBackup 2.4.11:
  * Add support for encrypted general tablespaces
  * Add support for backup on instqances using keyring_vault plugin</changelog>
  <changelog author="astieger@suse.com" date="1536840000">- Percona Xtrabackup 2.4.12:
  * now prints used arguments to standard output
  * --copy-back did not read which encryption plugin to use from
    plugin-load setting of the my.cnf configuration file
  * xbstream was exiting with zero return code when it failed to
    create one or more target files
  * xtrabackup_checkpoints files were encrypted during a backup,
    caused additional difficulties to take incremental backups</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1551182400">- Add gcc9-warning.patch (bsc#1125418).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557835200">- Disable LTO (boo#1135095).</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1668945600">- Percona Xtrabackup 2.4.26, the latest release of the 2.4 branch.
  It does not support MySQL 8.0.
  * xbcloud now supports Amazon S3, Microsoft Azure Cloud Storage,
    and gained retry on error and incremental backoff
  * enables updating the ib_buffer_pool file with the latest pages
    present in the buffer pool by setting the xtrabackup
  - -dump-innodb-buffer-pool option to ON
  * Add --backup-lock-timeout and --backup-lock-retry-count for
    configuring  the timeout for acquiring metadata locks
  * CVE-2020-10997: information exposure via cmd line output and
    table history (boo#1170644)
  * CVE-2020-29488: Changes in How Absolute Paths are Handled
    (boo#1205581)
- drop percona-xtrabackup-2.3.3-disable-version-check.patch
  and disable version check via a build time option
- drop percona-xtrabackup-2.3.2-unbundle-jsnm.patch</changelog>
</package>
<package pkgid="0135c6b9076bbbd61346a9d2f18dc84d0df8da294bf36ee5c85ad3fd65fad203" name="xtrabackup" arch="i586">
  <version epoch="0" ver="2.4.26" rel="bp154.2.3.1"/>
  <changelog author="astieger@suse.com" date="1468670400">- Percona XtraBackup 2.3.5, a bugfix release:
  * Backup process would fail if --throttle option was used
  * .ibd files for remote tablespaces were not copied back to the
    original location pointed by the .isl files.
  * Fix crash when called with insufficient parameters, like
    specifying the empty --defaults-file option
  * Change default value of --ftwrl-wait-query-type from "all" to
    "update"
  * Allow the datadir from my.cnf to override the one from
    SHOW VARIABLES
  * Fix failure on MariaDB if binary logs were in non-standard
    directory
- Includes changes from 2.3.4:
  * respect variables in backup-my.cnf without having to specify
  - -defaults-file=backup-my.cnf
  * abort the backup if innobackupex --rsync completed with error
  * Fix logging ouf GTID info with MariaDB 10
  * Fix silent skipping of extra arguments
  * Allow connections to servers using legacy auth with new option
  - -skip-secure-auth</changelog>
  <changelog author="astieger@suse.com" date="1484395200">- Percona XtraBackup 2.3.6, including one security fix:
  * CVE-2016-6225: xbcrypt encryption IV not being set properly
    (boo#1019858)
- New functionality:
  * now supports SHA256 passwords
  * new supports command options for secure connections
- Bugs fixed:
  * intermittent assertion failures when not correctly identifying
    server version
  * Safe slave backup algorithm performed too short delays between
    retries which could cause backups to fail on a busy servers
  * fix compilation warnings with gcc6
  * Backup would still succeed even if xtrabackup would fail to
    write the metadata
  * xbcloud now supports EMC ECS Swift API Authorization requests
  * backup failed with MariaDB 10.2 with the unsupported server
    version error message</changelog>
  <changelog author="astieger@suse.com" date="1487851200">- Percona XtraBackup 2.3.7
- New functionality:
  * new --remove-original option for removing the encrypted and
    compressed files once they?ve been decrypted/decompressed.
  * now supports -H, -h, -u and -p shortcuts for --hostname,
  - -datadir, --user and --password respectively.
- Bugs fixed:
  * used username set for the server in a configuration file even
    if a different user was defined in the user?s configuration file
  * Incremental backups did not include xtrabackup_binlog_info and
    xtrabackup_galera_info files
  * --move-back option did not always restore out-of-datadir
    tablespaces to their original directories
  * innobackupex and xtrabackup scripts were showing the password
    in the ps output when it was passed as a command line argument
    bsc#1026729
  * Incremental backup would fail with a path like ~/backup/inc_1
    because xtrabackup didn?t properly expand tilde</changelog>
  <changelog author="mrueckert@suse.de" date="1494417600">- update to 2.3.8
  - New Features
  - Percona XtraBackup now uses hardware accelerated
    implementation of crc32 where it is supported.
  - Percona XtraBackup has implemented new options: xtrabackup
  - -tables-exclude and xtrabackup --databases-exclude that work
    similar to xtrabackup --tables and xtrabackup --databases
    options, but exclude given names/paths from backup.
  - The xbstream binary now supports parallel extraction with the
  - -parallel option.
  - The xbstream binary now supports following new options:
  - -decrypt, --encrypt-threads, --encrypt-key, and
  - -encrypt-key-file. When --decrypt option is specified
    xbstream will automatically decrypt encrypted files when
    extracting input stream. Either --encrypt-key or
  - -encrypt-key-file options must be specified to provide
    encryption key, but not both. Option --encrypt-threads
    specifies the number of worker threads doing the encryption,
    default is 1.
  - Bugs fixed
  - xtrabackup would not create fresh InnoDB redo logs when
    preparing incremental backup. Bug fixed #1669592.
  - xtrabackup --export can now export tables that have more than
    31 index. Bug fixed #1089681.
  - Unrecognized character \x01; marked by &lt;-- HERE message could
    be seen if backups were taken with the version check enabled.
    Bug fixed #1651978.
- refreshed percona-xtrabackup-2.3.2-unbundle-jsnm.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1494417601">- enable building with system ssl</changelog>
  <changelog author="mrueckert@suse.de" date="1494417602">- dont build shared libs for now.</changelog>
  <changelog author="astieger@suse.com" date="1496404800">- fix build with gcc7 bsc#1041250:
  * percona-xtrabackup-2.3.8-gcc7-fallthrough.patch
  * percona-xtrabackup-2.3.8-gcc7-pointer-comparisons.patch</changelog>
  <changelog author="astieger@suse.com" date="1500465600">- Remove unused bundled libarchive windows build files with
  proprietary license keywords - bsc#1049458</changelog>
  <changelog author="astieger@suse.com" date="1502193600">- Percona Xtrabackup 2.3.9:
  * New --check-privileges option to check for system privileges
  * Fix crash during prepare stage if index compaction was enabled
  * Support building with OpenSSL 1.1
  * xbstream could run out of file descriptors while extracting
    backups which contains many tables
  * Fix determining use of master_auto_postion on a slave to avoid
    generating an invalid xtrabackup_slave_info file
  * Fix crash backing up MariaDB 10.2.x with --ftwrl-* options
  * Along with xtrabackup_checkpints file, xtrabackup now copies
    xtrabackup_info file into directory specified by --extra-lsndir
  * GTID position was not recorded when --binlog-info option was
    set to AUTO
  * bundled, patched libarchive updated to 3.3.1</changelog>
  <changelog author="astieger@suse.com" date="1502193601">- Percona XtraBackup 2.4.8:
  * Support MySQL 5.7, rebased to MySQL 5.7.13
  * Support for InnoDB tablespace encryption
    add --reencrypt-for-server-id option
  * Support SHA256 passwords (via SSL connection)
  * Support command options for secure connections
  * xbcrypt format changes, backups are incompatible with 2.3.x
  * Add --remove-original option to remove encrypted/compressed
    files after operations
  * Use hwardware accellerated crc32 implementaiton
  * Add options to exclude tables (--tables-exclude) and databases
    (--databases-exclude) from backup
  * xbstream now supports parallel extraction (--parallel)
  * xbstream now supports --decrypt, --encrypt-threads,
  - -encrypt-key, --encrypt-key-file for decryption
  * Add options for MDL locking (--lock-ddl, --lock-ddl-timeout,
  - -lock-ddl-per-table)
- packaging changes:
  * bundle boost 1.59.0
  * dropped patches:
    percona-xtrabackup-2.2.x-srv_buf_size.patch
    percona-xtrabackup-2.3.8-gcc7-fallthrough.patch
    percona-xtrabackup-2.3.8-gcc7-pointer-comparisons.patch</changelog>
  <changelog author="dmueller@suse.com" date="1511352000">- set default unix socket address to the mariadb socket location</changelog>
  <changelog author="astieger@suse.com" date="1512993600">- Percona XtraBackup 2.4.9:
  * xbcrypt now has an ability to decrypt files in parallel by
    specifying the number of threads with the xtrabackup
  - -encrypt-threads option
  * xtrabackup --copy-back option can now be used with xtrabackup
  - -parallel option to copy the user data files in parallel (redo
    logs and system tablespaces are copied in the main thread)
  * Various fixes to slave_info writing
  * Various fixes for crashes under certain circumstances</changelog>
  <changelog author="ro@suse.de" date="1521028800">- compile some files with -O0 to allow build on aarch64
- add percona-xtrabackup-2.4.9-aarch_buildfix.patch
- add _constraints file: min 6G mem, min 8G diskspace</changelog>
  <changelog author="astieger@suse.com" date="1522584000">- Percona XtraBackup 2.4.10:
  * Rebased to MySQL 5.7.19
  * Fix xbcrypt failure with --encrypt-key-file option
  * Fix lock-up on simultaneous usage of --lock-ddl and
  - -lock-ddl-per-table
  * Fix deadlock in prepare stage related to the maximum number
    of pending reads
  * Abort backup when encountering tablespaces with a corrupted
    first page instead of skipping
- Use %license (boo#1082318)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524744000">- Remove unneeded patch:
  * percona-xtrabackup-2.4.9-aarch_buildfix.patch</changelog>
  <changelog author="astieger@suse.com" date="1528286400">- Percona XtraBackup 2.4.11:
  * Add support for encrypted general tablespaces
  * Add support for backup on instqances using keyring_vault plugin</changelog>
  <changelog author="astieger@suse.com" date="1536840000">- Percona Xtrabackup 2.4.12:
  * now prints used arguments to standard output
  * --copy-back did not read which encryption plugin to use from
    plugin-load setting of the my.cnf configuration file
  * xbstream was exiting with zero return code when it failed to
    create one or more target files
  * xtrabackup_checkpoints files were encrypted during a backup,
    caused additional difficulties to take incremental backups</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1551182400">- Add gcc9-warning.patch (bsc#1125418).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557835200">- Disable LTO (boo#1135095).</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1668945600">- Percona Xtrabackup 2.4.26, the latest release of the 2.4 branch.
  It does not support MySQL 8.0.
  * xbcloud now supports Amazon S3, Microsoft Azure Cloud Storage,
    and gained retry on error and incremental backoff
  * enables updating the ib_buffer_pool file with the latest pages
    present in the buffer pool by setting the xtrabackup
  - -dump-innodb-buffer-pool option to ON
  * Add --backup-lock-timeout and --backup-lock-retry-count for
    configuring  the timeout for acquiring metadata locks
  * CVE-2020-10997: information exposure via cmd line output and
    table history (boo#1170644)
  * CVE-2020-29488: Changes in How Absolute Paths are Handled
    (boo#1205581)
- drop percona-xtrabackup-2.3.3-disable-version-check.patch
  and disable version check via a build time option
- drop percona-xtrabackup-2.3.2-unbundle-jsnm.patch</changelog>
</package>
<package pkgid="0b68b9ee315d21abff471e314dabbfd06ac46a4c02c2a313f678df6a630c4578" name="xtrabackup" arch="ppc64le">
  <version epoch="0" ver="2.4.26" rel="bp154.2.3.1"/>
  <changelog author="astieger@suse.com" date="1468670400">- Percona XtraBackup 2.3.5, a bugfix release:
  * Backup process would fail if --throttle option was used
  * .ibd files for remote tablespaces were not copied back to the
    original location pointed by the .isl files.
  * Fix crash when called with insufficient parameters, like
    specifying the empty --defaults-file option
  * Change default value of --ftwrl-wait-query-type from "all" to
    "update"
  * Allow the datadir from my.cnf to override the one from
    SHOW VARIABLES
  * Fix failure on MariaDB if binary logs were in non-standard
    directory
- Includes changes from 2.3.4:
  * respect variables in backup-my.cnf without having to specify
  - -defaults-file=backup-my.cnf
  * abort the backup if innobackupex --rsync completed with error
  * Fix logging ouf GTID info with MariaDB 10
  * Fix silent skipping of extra arguments
  * Allow connections to servers using legacy auth with new option
  - -skip-secure-auth</changelog>
  <changelog author="astieger@suse.com" date="1484395200">- Percona XtraBackup 2.3.6, including one security fix:
  * CVE-2016-6225: xbcrypt encryption IV not being set properly
    (boo#1019858)
- New functionality:
  * now supports SHA256 passwords
  * new supports command options for secure connections
- Bugs fixed:
  * intermittent assertion failures when not correctly identifying
    server version
  * Safe slave backup algorithm performed too short delays between
    retries which could cause backups to fail on a busy servers
  * fix compilation warnings with gcc6
  * Backup would still succeed even if xtrabackup would fail to
    write the metadata
  * xbcloud now supports EMC ECS Swift API Authorization requests
  * backup failed with MariaDB 10.2 with the unsupported server
    version error message</changelog>
  <changelog author="astieger@suse.com" date="1487851200">- Percona XtraBackup 2.3.7
- New functionality:
  * new --remove-original option for removing the encrypted and
    compressed files once they?ve been decrypted/decompressed.
  * now supports -H, -h, -u and -p shortcuts for --hostname,
  - -datadir, --user and --password respectively.
- Bugs fixed:
  * used username set for the server in a configuration file even
    if a different user was defined in the user?s configuration file
  * Incremental backups did not include xtrabackup_binlog_info and
    xtrabackup_galera_info files
  * --move-back option did not always restore out-of-datadir
    tablespaces to their original directories
  * innobackupex and xtrabackup scripts were showing the password
    in the ps output when it was passed as a command line argument
    bsc#1026729
  * Incremental backup would fail with a path like ~/backup/inc_1
    because xtrabackup didn?t properly expand tilde</changelog>
  <changelog author="mrueckert@suse.de" date="1494417600">- update to 2.3.8
  - New Features
  - Percona XtraBackup now uses hardware accelerated
    implementation of crc32 where it is supported.
  - Percona XtraBackup has implemented new options: xtrabackup
  - -tables-exclude and xtrabackup --databases-exclude that work
    similar to xtrabackup --tables and xtrabackup --databases
    options, but exclude given names/paths from backup.
  - The xbstream binary now supports parallel extraction with the
  - -parallel option.
  - The xbstream binary now supports following new options:
  - -decrypt, --encrypt-threads, --encrypt-key, and
  - -encrypt-key-file. When --decrypt option is specified
    xbstream will automatically decrypt encrypted files when
    extracting input stream. Either --encrypt-key or
  - -encrypt-key-file options must be specified to provide
    encryption key, but not both. Option --encrypt-threads
    specifies the number of worker threads doing the encryption,
    default is 1.
  - Bugs fixed
  - xtrabackup would not create fresh InnoDB redo logs when
    preparing incremental backup. Bug fixed #1669592.
  - xtrabackup --export can now export tables that have more than
    31 index. Bug fixed #1089681.
  - Unrecognized character \x01; marked by &lt;-- HERE message could
    be seen if backups were taken with the version check enabled.
    Bug fixed #1651978.
- refreshed percona-xtrabackup-2.3.2-unbundle-jsnm.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1494417601">- enable building with system ssl</changelog>
  <changelog author="mrueckert@suse.de" date="1494417602">- dont build shared libs for now.</changelog>
  <changelog author="astieger@suse.com" date="1496404800">- fix build with gcc7 bsc#1041250:
  * percona-xtrabackup-2.3.8-gcc7-fallthrough.patch
  * percona-xtrabackup-2.3.8-gcc7-pointer-comparisons.patch</changelog>
  <changelog author="astieger@suse.com" date="1500465600">- Remove unused bundled libarchive windows build files with
  proprietary license keywords - bsc#1049458</changelog>
  <changelog author="astieger@suse.com" date="1502193600">- Percona Xtrabackup 2.3.9:
  * New --check-privileges option to check for system privileges
  * Fix crash during prepare stage if index compaction was enabled
  * Support building with OpenSSL 1.1
  * xbstream could run out of file descriptors while extracting
    backups which contains many tables
  * Fix determining use of master_auto_postion on a slave to avoid
    generating an invalid xtrabackup_slave_info file
  * Fix crash backing up MariaDB 10.2.x with --ftwrl-* options
  * Along with xtrabackup_checkpints file, xtrabackup now copies
    xtrabackup_info file into directory specified by --extra-lsndir
  * GTID position was not recorded when --binlog-info option was
    set to AUTO
  * bundled, patched libarchive updated to 3.3.1</changelog>
  <changelog author="astieger@suse.com" date="1502193601">- Percona XtraBackup 2.4.8:
  * Support MySQL 5.7, rebased to MySQL 5.7.13
  * Support for InnoDB tablespace encryption
    add --reencrypt-for-server-id option
  * Support SHA256 passwords (via SSL connection)
  * Support command options for secure connections
  * xbcrypt format changes, backups are incompatible with 2.3.x
  * Add --remove-original option to remove encrypted/compressed
    files after operations
  * Use hwardware accellerated crc32 implementaiton
  * Add options to exclude tables (--tables-exclude) and databases
    (--databases-exclude) from backup
  * xbstream now supports parallel extraction (--parallel)
  * xbstream now supports --decrypt, --encrypt-threads,
  - -encrypt-key, --encrypt-key-file for decryption
  * Add options for MDL locking (--lock-ddl, --lock-ddl-timeout,
  - -lock-ddl-per-table)
- packaging changes:
  * bundle boost 1.59.0
  * dropped patches:
    percona-xtrabackup-2.2.x-srv_buf_size.patch
    percona-xtrabackup-2.3.8-gcc7-fallthrough.patch
    percona-xtrabackup-2.3.8-gcc7-pointer-comparisons.patch</changelog>
  <changelog author="dmueller@suse.com" date="1511352000">- set default unix socket address to the mariadb socket location</changelog>
  <changelog author="astieger@suse.com" date="1512993600">- Percona XtraBackup 2.4.9:
  * xbcrypt now has an ability to decrypt files in parallel by
    specifying the number of threads with the xtrabackup
  - -encrypt-threads option
  * xtrabackup --copy-back option can now be used with xtrabackup
  - -parallel option to copy the user data files in parallel (redo
    logs and system tablespaces are copied in the main thread)
  * Various fixes to slave_info writing
  * Various fixes for crashes under certain circumstances</changelog>
  <changelog author="ro@suse.de" date="1521028800">- compile some files with -O0 to allow build on aarch64
- add percona-xtrabackup-2.4.9-aarch_buildfix.patch
- add _constraints file: min 6G mem, min 8G diskspace</changelog>
  <changelog author="astieger@suse.com" date="1522584000">- Percona XtraBackup 2.4.10:
  * Rebased to MySQL 5.7.19
  * Fix xbcrypt failure with --encrypt-key-file option
  * Fix lock-up on simultaneous usage of --lock-ddl and
  - -lock-ddl-per-table
  * Fix deadlock in prepare stage related to the maximum number
    of pending reads
  * Abort backup when encountering tablespaces with a corrupted
    first page instead of skipping
- Use %license (boo#1082318)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524744000">- Remove unneeded patch:
  * percona-xtrabackup-2.4.9-aarch_buildfix.patch</changelog>
  <changelog author="astieger@suse.com" date="1528286400">- Percona XtraBackup 2.4.11:
  * Add support for encrypted general tablespaces
  * Add support for backup on instqances using keyring_vault plugin</changelog>
  <changelog author="astieger@suse.com" date="1536840000">- Percona Xtrabackup 2.4.12:
  * now prints used arguments to standard output
  * --copy-back did not read which encryption plugin to use from
    plugin-load setting of the my.cnf configuration file
  * xbstream was exiting with zero return code when it failed to
    create one or more target files
  * xtrabackup_checkpoints files were encrypted during a backup,
    caused additional difficulties to take incremental backups</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1551182400">- Add gcc9-warning.patch (bsc#1125418).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557835200">- Disable LTO (boo#1135095).</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1668945600">- Percona Xtrabackup 2.4.26, the latest release of the 2.4 branch.
  It does not support MySQL 8.0.
  * xbcloud now supports Amazon S3, Microsoft Azure Cloud Storage,
    and gained retry on error and incremental backoff
  * enables updating the ib_buffer_pool file with the latest pages
    present in the buffer pool by setting the xtrabackup
  - -dump-innodb-buffer-pool option to ON
  * Add --backup-lock-timeout and --backup-lock-retry-count for
    configuring  the timeout for acquiring metadata locks
  * CVE-2020-10997: information exposure via cmd line output and
    table history (boo#1170644)
  * CVE-2020-29488: Changes in How Absolute Paths are Handled
    (boo#1205581)
- drop percona-xtrabackup-2.3.3-disable-version-check.patch
  and disable version check via a build time option
- drop percona-xtrabackup-2.3.2-unbundle-jsnm.patch</changelog>
</package>
<package pkgid="dd561b9e2302d75079db17f10a1e92e02a5c4b734e37d5255fb51bafe271e334" name="xtrabackup" arch="s390x">
  <version epoch="0" ver="2.4.26" rel="bp154.2.3.1"/>
  <changelog author="astieger@suse.com" date="1468670400">- Percona XtraBackup 2.3.5, a bugfix release:
  * Backup process would fail if --throttle option was used
  * .ibd files for remote tablespaces were not copied back to the
    original location pointed by the .isl files.
  * Fix crash when called with insufficient parameters, like
    specifying the empty --defaults-file option
  * Change default value of --ftwrl-wait-query-type from "all" to
    "update"
  * Allow the datadir from my.cnf to override the one from
    SHOW VARIABLES
  * Fix failure on MariaDB if binary logs were in non-standard
    directory
- Includes changes from 2.3.4:
  * respect variables in backup-my.cnf without having to specify
  - -defaults-file=backup-my.cnf
  * abort the backup if innobackupex --rsync completed with error
  * Fix logging ouf GTID info with MariaDB 10
  * Fix silent skipping of extra arguments
  * Allow connections to servers using legacy auth with new option
  - -skip-secure-auth</changelog>
  <changelog author="astieger@suse.com" date="1484395200">- Percona XtraBackup 2.3.6, including one security fix:
  * CVE-2016-6225: xbcrypt encryption IV not being set properly
    (boo#1019858)
- New functionality:
  * now supports SHA256 passwords
  * new supports command options for secure connections
- Bugs fixed:
  * intermittent assertion failures when not correctly identifying
    server version
  * Safe slave backup algorithm performed too short delays between
    retries which could cause backups to fail on a busy servers
  * fix compilation warnings with gcc6
  * Backup would still succeed even if xtrabackup would fail to
    write the metadata
  * xbcloud now supports EMC ECS Swift API Authorization requests
  * backup failed with MariaDB 10.2 with the unsupported server
    version error message</changelog>
  <changelog author="astieger@suse.com" date="1487851200">- Percona XtraBackup 2.3.7
- New functionality:
  * new --remove-original option for removing the encrypted and
    compressed files once they?ve been decrypted/decompressed.
  * now supports -H, -h, -u and -p shortcuts for --hostname,
  - -datadir, --user and --password respectively.
- Bugs fixed:
  * used username set for the server in a configuration file even
    if a different user was defined in the user?s configuration file
  * Incremental backups did not include xtrabackup_binlog_info and
    xtrabackup_galera_info files
  * --move-back option did not always restore out-of-datadir
    tablespaces to their original directories
  * innobackupex and xtrabackup scripts were showing the password
    in the ps output when it was passed as a command line argument
    bsc#1026729
  * Incremental backup would fail with a path like ~/backup/inc_1
    because xtrabackup didn?t properly expand tilde</changelog>
  <changelog author="mrueckert@suse.de" date="1494417600">- update to 2.3.8
  - New Features
  - Percona XtraBackup now uses hardware accelerated
    implementation of crc32 where it is supported.
  - Percona XtraBackup has implemented new options: xtrabackup
  - -tables-exclude and xtrabackup --databases-exclude that work
    similar to xtrabackup --tables and xtrabackup --databases
    options, but exclude given names/paths from backup.
  - The xbstream binary now supports parallel extraction with the
  - -parallel option.
  - The xbstream binary now supports following new options:
  - -decrypt, --encrypt-threads, --encrypt-key, and
  - -encrypt-key-file. When --decrypt option is specified
    xbstream will automatically decrypt encrypted files when
    extracting input stream. Either --encrypt-key or
  - -encrypt-key-file options must be specified to provide
    encryption key, but not both. Option --encrypt-threads
    specifies the number of worker threads doing the encryption,
    default is 1.
  - Bugs fixed
  - xtrabackup would not create fresh InnoDB redo logs when
    preparing incremental backup. Bug fixed #1669592.
  - xtrabackup --export can now export tables that have more than
    31 index. Bug fixed #1089681.
  - Unrecognized character \x01; marked by &lt;-- HERE message could
    be seen if backups were taken with the version check enabled.
    Bug fixed #1651978.
- refreshed percona-xtrabackup-2.3.2-unbundle-jsnm.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1494417601">- enable building with system ssl</changelog>
  <changelog author="mrueckert@suse.de" date="1494417602">- dont build shared libs for now.</changelog>
  <changelog author="astieger@suse.com" date="1496404800">- fix build with gcc7 bsc#1041250:
  * percona-xtrabackup-2.3.8-gcc7-fallthrough.patch
  * percona-xtrabackup-2.3.8-gcc7-pointer-comparisons.patch</changelog>
  <changelog author="astieger@suse.com" date="1500465600">- Remove unused bundled libarchive windows build files with
  proprietary license keywords - bsc#1049458</changelog>
  <changelog author="astieger@suse.com" date="1502193600">- Percona Xtrabackup 2.3.9:
  * New --check-privileges option to check for system privileges
  * Fix crash during prepare stage if index compaction was enabled
  * Support building with OpenSSL 1.1
  * xbstream could run out of file descriptors while extracting
    backups which contains many tables
  * Fix determining use of master_auto_postion on a slave to avoid
    generating an invalid xtrabackup_slave_info file
  * Fix crash backing up MariaDB 10.2.x with --ftwrl-* options
  * Along with xtrabackup_checkpints file, xtrabackup now copies
    xtrabackup_info file into directory specified by --extra-lsndir
  * GTID position was not recorded when --binlog-info option was
    set to AUTO
  * bundled, patched libarchive updated to 3.3.1</changelog>
  <changelog author="astieger@suse.com" date="1502193601">- Percona XtraBackup 2.4.8:
  * Support MySQL 5.7, rebased to MySQL 5.7.13
  * Support for InnoDB tablespace encryption
    add --reencrypt-for-server-id option
  * Support SHA256 passwords (via SSL connection)
  * Support command options for secure connections
  * xbcrypt format changes, backups are incompatible with 2.3.x
  * Add --remove-original option to remove encrypted/compressed
    files after operations
  * Use hwardware accellerated crc32 implementaiton
  * Add options to exclude tables (--tables-exclude) and databases
    (--databases-exclude) from backup
  * xbstream now supports parallel extraction (--parallel)
  * xbstream now supports --decrypt, --encrypt-threads,
  - -encrypt-key, --encrypt-key-file for decryption
  * Add options for MDL locking (--lock-ddl, --lock-ddl-timeout,
  - -lock-ddl-per-table)
- packaging changes:
  * bundle boost 1.59.0
  * dropped patches:
    percona-xtrabackup-2.2.x-srv_buf_size.patch
    percona-xtrabackup-2.3.8-gcc7-fallthrough.patch
    percona-xtrabackup-2.3.8-gcc7-pointer-comparisons.patch</changelog>
  <changelog author="dmueller@suse.com" date="1511352000">- set default unix socket address to the mariadb socket location</changelog>
  <changelog author="astieger@suse.com" date="1512993600">- Percona XtraBackup 2.4.9:
  * xbcrypt now has an ability to decrypt files in parallel by
    specifying the number of threads with the xtrabackup
  - -encrypt-threads option
  * xtrabackup --copy-back option can now be used with xtrabackup
  - -parallel option to copy the user data files in parallel (redo
    logs and system tablespaces are copied in the main thread)
  * Various fixes to slave_info writing
  * Various fixes for crashes under certain circumstances</changelog>
  <changelog author="ro@suse.de" date="1521028800">- compile some files with -O0 to allow build on aarch64
- add percona-xtrabackup-2.4.9-aarch_buildfix.patch
- add _constraints file: min 6G mem, min 8G diskspace</changelog>
  <changelog author="astieger@suse.com" date="1522584000">- Percona XtraBackup 2.4.10:
  * Rebased to MySQL 5.7.19
  * Fix xbcrypt failure with --encrypt-key-file option
  * Fix lock-up on simultaneous usage of --lock-ddl and
  - -lock-ddl-per-table
  * Fix deadlock in prepare stage related to the maximum number
    of pending reads
  * Abort backup when encountering tablespaces with a corrupted
    first page instead of skipping
- Use %license (boo#1082318)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524744000">- Remove unneeded patch:
  * percona-xtrabackup-2.4.9-aarch_buildfix.patch</changelog>
  <changelog author="astieger@suse.com" date="1528286400">- Percona XtraBackup 2.4.11:
  * Add support for encrypted general tablespaces
  * Add support for backup on instqances using keyring_vault plugin</changelog>
  <changelog author="astieger@suse.com" date="1536840000">- Percona Xtrabackup 2.4.12:
  * now prints used arguments to standard output
  * --copy-back did not read which encryption plugin to use from
    plugin-load setting of the my.cnf configuration file
  * xbstream was exiting with zero return code when it failed to
    create one or more target files
  * xtrabackup_checkpoints files were encrypted during a backup,
    caused additional difficulties to take incremental backups</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1551182400">- Add gcc9-warning.patch (bsc#1125418).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557835200">- Disable LTO (boo#1135095).</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1668945600">- Percona Xtrabackup 2.4.26, the latest release of the 2.4 branch.
  It does not support MySQL 8.0.
  * xbcloud now supports Amazon S3, Microsoft Azure Cloud Storage,
    and gained retry on error and incremental backoff
  * enables updating the ib_buffer_pool file with the latest pages
    present in the buffer pool by setting the xtrabackup
  - -dump-innodb-buffer-pool option to ON
  * Add --backup-lock-timeout and --backup-lock-retry-count for
    configuring  the timeout for acquiring metadata locks
  * CVE-2020-10997: information exposure via cmd line output and
    table history (boo#1170644)
  * CVE-2020-29488: Changes in How Absolute Paths are Handled
    (boo#1205581)
- drop percona-xtrabackup-2.3.3-disable-version-check.patch
  and disable version check via a build time option
- drop percona-xtrabackup-2.3.2-unbundle-jsnm.patch</changelog>
</package>
<package pkgid="2a3a01e0ecdf127632d83d7ef0d417994aee41475032af4b0e8e90dd7c15836e" name="xtrabackup" arch="src">
  <version epoch="0" ver="2.4.26" rel="bp154.2.3.1"/>
  <changelog author="astieger@suse.com" date="1468670400">- Percona XtraBackup 2.3.5, a bugfix release:
  * Backup process would fail if --throttle option was used
  * .ibd files for remote tablespaces were not copied back to the
    original location pointed by the .isl files.
  * Fix crash when called with insufficient parameters, like
    specifying the empty --defaults-file option
  * Change default value of --ftwrl-wait-query-type from "all" to
    "update"
  * Allow the datadir from my.cnf to override the one from
    SHOW VARIABLES
  * Fix failure on MariaDB if binary logs were in non-standard
    directory
- Includes changes from 2.3.4:
  * respect variables in backup-my.cnf without having to specify
  - -defaults-file=backup-my.cnf
  * abort the backup if innobackupex --rsync completed with error
  * Fix logging ouf GTID info with MariaDB 10
  * Fix silent skipping of extra arguments
  * Allow connections to servers using legacy auth with new option
  - -skip-secure-auth</changelog>
  <changelog author="astieger@suse.com" date="1484395200">- Percona XtraBackup 2.3.6, including one security fix:
  * CVE-2016-6225: xbcrypt encryption IV not being set properly
    (boo#1019858)
- New functionality:
  * now supports SHA256 passwords
  * new supports command options for secure connections
- Bugs fixed:
  * intermittent assertion failures when not correctly identifying
    server version
  * Safe slave backup algorithm performed too short delays between
    retries which could cause backups to fail on a busy servers
  * fix compilation warnings with gcc6
  * Backup would still succeed even if xtrabackup would fail to
    write the metadata
  * xbcloud now supports EMC ECS Swift API Authorization requests
  * backup failed with MariaDB 10.2 with the unsupported server
    version error message</changelog>
  <changelog author="astieger@suse.com" date="1487851200">- Percona XtraBackup 2.3.7
- New functionality:
  * new --remove-original option for removing the encrypted and
    compressed files once they?ve been decrypted/decompressed.
  * now supports -H, -h, -u and -p shortcuts for --hostname,
  - -datadir, --user and --password respectively.
- Bugs fixed:
  * used username set for the server in a configuration file even
    if a different user was defined in the user?s configuration file
  * Incremental backups did not include xtrabackup_binlog_info and
    xtrabackup_galera_info files
  * --move-back option did not always restore out-of-datadir
    tablespaces to their original directories
  * innobackupex and xtrabackup scripts were showing the password
    in the ps output when it was passed as a command line argument
    bsc#1026729
  * Incremental backup would fail with a path like ~/backup/inc_1
    because xtrabackup didn?t properly expand tilde</changelog>
  <changelog author="mrueckert@suse.de" date="1494417600">- update to 2.3.8
  - New Features
  - Percona XtraBackup now uses hardware accelerated
    implementation of crc32 where it is supported.
  - Percona XtraBackup has implemented new options: xtrabackup
  - -tables-exclude and xtrabackup --databases-exclude that work
    similar to xtrabackup --tables and xtrabackup --databases
    options, but exclude given names/paths from backup.
  - The xbstream binary now supports parallel extraction with the
  - -parallel option.
  - The xbstream binary now supports following new options:
  - -decrypt, --encrypt-threads, --encrypt-key, and
  - -encrypt-key-file. When --decrypt option is specified
    xbstream will automatically decrypt encrypted files when
    extracting input stream. Either --encrypt-key or
  - -encrypt-key-file options must be specified to provide
    encryption key, but not both. Option --encrypt-threads
    specifies the number of worker threads doing the encryption,
    default is 1.
  - Bugs fixed
  - xtrabackup would not create fresh InnoDB redo logs when
    preparing incremental backup. Bug fixed #1669592.
  - xtrabackup --export can now export tables that have more than
    31 index. Bug fixed #1089681.
  - Unrecognized character \x01; marked by &lt;-- HERE message could
    be seen if backups were taken with the version check enabled.
    Bug fixed #1651978.
- refreshed percona-xtrabackup-2.3.2-unbundle-jsnm.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1494417601">- enable building with system ssl</changelog>
  <changelog author="mrueckert@suse.de" date="1494417602">- dont build shared libs for now.</changelog>
  <changelog author="astieger@suse.com" date="1496404800">- fix build with gcc7 bsc#1041250:
  * percona-xtrabackup-2.3.8-gcc7-fallthrough.patch
  * percona-xtrabackup-2.3.8-gcc7-pointer-comparisons.patch</changelog>
  <changelog author="astieger@suse.com" date="1500465600">- Remove unused bundled libarchive windows build files with
  proprietary license keywords - bsc#1049458</changelog>
  <changelog author="astieger@suse.com" date="1502193600">- Percona Xtrabackup 2.3.9:
  * New --check-privileges option to check for system privileges
  * Fix crash during prepare stage if index compaction was enabled
  * Support building with OpenSSL 1.1
  * xbstream could run out of file descriptors while extracting
    backups which contains many tables
  * Fix determining use of master_auto_postion on a slave to avoid
    generating an invalid xtrabackup_slave_info file
  * Fix crash backing up MariaDB 10.2.x with --ftwrl-* options
  * Along with xtrabackup_checkpints file, xtrabackup now copies
    xtrabackup_info file into directory specified by --extra-lsndir
  * GTID position was not recorded when --binlog-info option was
    set to AUTO
  * bundled, patched libarchive updated to 3.3.1</changelog>
  <changelog author="astieger@suse.com" date="1502193601">- Percona XtraBackup 2.4.8:
  * Support MySQL 5.7, rebased to MySQL 5.7.13
  * Support for InnoDB tablespace encryption
    add --reencrypt-for-server-id option
  * Support SHA256 passwords (via SSL connection)
  * Support command options for secure connections
  * xbcrypt format changes, backups are incompatible with 2.3.x
  * Add --remove-original option to remove encrypted/compressed
    files after operations
  * Use hwardware accellerated crc32 implementaiton
  * Add options to exclude tables (--tables-exclude) and databases
    (--databases-exclude) from backup
  * xbstream now supports parallel extraction (--parallel)
  * xbstream now supports --decrypt, --encrypt-threads,
  - -encrypt-key, --encrypt-key-file for decryption
  * Add options for MDL locking (--lock-ddl, --lock-ddl-timeout,
  - -lock-ddl-per-table)
- packaging changes:
  * bundle boost 1.59.0
  * dropped patches:
    percona-xtrabackup-2.2.x-srv_buf_size.patch
    percona-xtrabackup-2.3.8-gcc7-fallthrough.patch
    percona-xtrabackup-2.3.8-gcc7-pointer-comparisons.patch</changelog>
  <changelog author="dmueller@suse.com" date="1511352000">- set default unix socket address to the mariadb socket location</changelog>
  <changelog author="astieger@suse.com" date="1512993600">- Percona XtraBackup 2.4.9:
  * xbcrypt now has an ability to decrypt files in parallel by
    specifying the number of threads with the xtrabackup
  - -encrypt-threads option
  * xtrabackup --copy-back option can now be used with xtrabackup
  - -parallel option to copy the user data files in parallel (redo
    logs and system tablespaces are copied in the main thread)
  * Various fixes to slave_info writing
  * Various fixes for crashes under certain circumstances</changelog>
  <changelog author="ro@suse.de" date="1521028800">- compile some files with -O0 to allow build on aarch64
- add percona-xtrabackup-2.4.9-aarch_buildfix.patch
- add _constraints file: min 6G mem, min 8G diskspace</changelog>
  <changelog author="astieger@suse.com" date="1522584000">- Percona XtraBackup 2.4.10:
  * Rebased to MySQL 5.7.19
  * Fix xbcrypt failure with --encrypt-key-file option
  * Fix lock-up on simultaneous usage of --lock-ddl and
  - -lock-ddl-per-table
  * Fix deadlock in prepare stage related to the maximum number
    of pending reads
  * Abort backup when encountering tablespaces with a corrupted
    first page instead of skipping
- Use %license (boo#1082318)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524744000">- Remove unneeded patch:
  * percona-xtrabackup-2.4.9-aarch_buildfix.patch</changelog>
  <changelog author="astieger@suse.com" date="1528286400">- Percona XtraBackup 2.4.11:
  * Add support for encrypted general tablespaces
  * Add support for backup on instqances using keyring_vault plugin</changelog>
  <changelog author="astieger@suse.com" date="1536840000">- Percona Xtrabackup 2.4.12:
  * now prints used arguments to standard output
  * --copy-back did not read which encryption plugin to use from
    plugin-load setting of the my.cnf configuration file
  * xbstream was exiting with zero return code when it failed to
    create one or more target files
  * xtrabackup_checkpoints files were encrypted during a backup,
    caused additional difficulties to take incremental backups</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1551182400">- Add gcc9-warning.patch (bsc#1125418).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557835200">- Disable LTO (boo#1135095).</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1668945600">- Percona Xtrabackup 2.4.26, the latest release of the 2.4 branch.
  It does not support MySQL 8.0.
  * xbcloud now supports Amazon S3, Microsoft Azure Cloud Storage,
    and gained retry on error and incremental backoff
  * enables updating the ib_buffer_pool file with the latest pages
    present in the buffer pool by setting the xtrabackup
  - -dump-innodb-buffer-pool option to ON
  * Add --backup-lock-timeout and --backup-lock-retry-count for
    configuring  the timeout for acquiring metadata locks
  * CVE-2020-10997: information exposure via cmd line output and
    table history (boo#1170644)
  * CVE-2020-29488: Changes in How Absolute Paths are Handled
    (boo#1205581)
- drop percona-xtrabackup-2.3.3-disable-version-check.patch
  and disable version check via a build time option
- drop percona-xtrabackup-2.3.2-unbundle-jsnm.patch</changelog>
</package>
<package pkgid="fd4a99efcf32e0bc2fb3f49302167e5182384b7018af2f630dbafe0477a4fffe" name="xtrabackup" arch="x86_64">
  <version epoch="0" ver="2.4.26" rel="bp154.2.3.1"/>
  <changelog author="astieger@suse.com" date="1468670400">- Percona XtraBackup 2.3.5, a bugfix release:
  * Backup process would fail if --throttle option was used
  * .ibd files for remote tablespaces were not copied back to the
    original location pointed by the .isl files.
  * Fix crash when called with insufficient parameters, like
    specifying the empty --defaults-file option
  * Change default value of --ftwrl-wait-query-type from "all" to
    "update"
  * Allow the datadir from my.cnf to override the one from
    SHOW VARIABLES
  * Fix failure on MariaDB if binary logs were in non-standard
    directory
- Includes changes from 2.3.4:
  * respect variables in backup-my.cnf without having to specify
  - -defaults-file=backup-my.cnf
  * abort the backup if innobackupex --rsync completed with error
  * Fix logging ouf GTID info with MariaDB 10
  * Fix silent skipping of extra arguments
  * Allow connections to servers using legacy auth with new option
  - -skip-secure-auth</changelog>
  <changelog author="astieger@suse.com" date="1484395200">- Percona XtraBackup 2.3.6, including one security fix:
  * CVE-2016-6225: xbcrypt encryption IV not being set properly
    (boo#1019858)
- New functionality:
  * now supports SHA256 passwords
  * new supports command options for secure connections
- Bugs fixed:
  * intermittent assertion failures when not correctly identifying
    server version
  * Safe slave backup algorithm performed too short delays between
    retries which could cause backups to fail on a busy servers
  * fix compilation warnings with gcc6
  * Backup would still succeed even if xtrabackup would fail to
    write the metadata
  * xbcloud now supports EMC ECS Swift API Authorization requests
  * backup failed with MariaDB 10.2 with the unsupported server
    version error message</changelog>
  <changelog author="astieger@suse.com" date="1487851200">- Percona XtraBackup 2.3.7
- New functionality:
  * new --remove-original option for removing the encrypted and
    compressed files once they?ve been decrypted/decompressed.
  * now supports -H, -h, -u and -p shortcuts for --hostname,
  - -datadir, --user and --password respectively.
- Bugs fixed:
  * used username set for the server in a configuration file even
    if a different user was defined in the user?s configuration file
  * Incremental backups did not include xtrabackup_binlog_info and
    xtrabackup_galera_info files
  * --move-back option did not always restore out-of-datadir
    tablespaces to their original directories
  * innobackupex and xtrabackup scripts were showing the password
    in the ps output when it was passed as a command line argument
    bsc#1026729
  * Incremental backup would fail with a path like ~/backup/inc_1
    because xtrabackup didn?t properly expand tilde</changelog>
  <changelog author="mrueckert@suse.de" date="1494417600">- update to 2.3.8
  - New Features
  - Percona XtraBackup now uses hardware accelerated
    implementation of crc32 where it is supported.
  - Percona XtraBackup has implemented new options: xtrabackup
  - -tables-exclude and xtrabackup --databases-exclude that work
    similar to xtrabackup --tables and xtrabackup --databases
    options, but exclude given names/paths from backup.
  - The xbstream binary now supports parallel extraction with the
  - -parallel option.
  - The xbstream binary now supports following new options:
  - -decrypt, --encrypt-threads, --encrypt-key, and
  - -encrypt-key-file. When --decrypt option is specified
    xbstream will automatically decrypt encrypted files when
    extracting input stream. Either --encrypt-key or
  - -encrypt-key-file options must be specified to provide
    encryption key, but not both. Option --encrypt-threads
    specifies the number of worker threads doing the encryption,
    default is 1.
  - Bugs fixed
  - xtrabackup would not create fresh InnoDB redo logs when
    preparing incremental backup. Bug fixed #1669592.
  - xtrabackup --export can now export tables that have more than
    31 index. Bug fixed #1089681.
  - Unrecognized character \x01; marked by &lt;-- HERE message could
    be seen if backups were taken with the version check enabled.
    Bug fixed #1651978.
- refreshed percona-xtrabackup-2.3.2-unbundle-jsnm.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1494417601">- enable building with system ssl</changelog>
  <changelog author="mrueckert@suse.de" date="1494417602">- dont build shared libs for now.</changelog>
  <changelog author="astieger@suse.com" date="1496404800">- fix build with gcc7 bsc#1041250:
  * percona-xtrabackup-2.3.8-gcc7-fallthrough.patch
  * percona-xtrabackup-2.3.8-gcc7-pointer-comparisons.patch</changelog>
  <changelog author="astieger@suse.com" date="1500465600">- Remove unused bundled libarchive windows build files with
  proprietary license keywords - bsc#1049458</changelog>
  <changelog author="astieger@suse.com" date="1502193600">- Percona Xtrabackup 2.3.9:
  * New --check-privileges option to check for system privileges
  * Fix crash during prepare stage if index compaction was enabled
  * Support building with OpenSSL 1.1
  * xbstream could run out of file descriptors while extracting
    backups which contains many tables
  * Fix determining use of master_auto_postion on a slave to avoid
    generating an invalid xtrabackup_slave_info file
  * Fix crash backing up MariaDB 10.2.x with --ftwrl-* options
  * Along with xtrabackup_checkpints file, xtrabackup now copies
    xtrabackup_info file into directory specified by --extra-lsndir
  * GTID position was not recorded when --binlog-info option was
    set to AUTO
  * bundled, patched libarchive updated to 3.3.1</changelog>
  <changelog author="astieger@suse.com" date="1502193601">- Percona XtraBackup 2.4.8:
  * Support MySQL 5.7, rebased to MySQL 5.7.13
  * Support for InnoDB tablespace encryption
    add --reencrypt-for-server-id option
  * Support SHA256 passwords (via SSL connection)
  * Support command options for secure connections
  * xbcrypt format changes, backups are incompatible with 2.3.x
  * Add --remove-original option to remove encrypted/compressed
    files after operations
  * Use hwardware accellerated crc32 implementaiton
  * Add options to exclude tables (--tables-exclude) and databases
    (--databases-exclude) from backup
  * xbstream now supports parallel extraction (--parallel)
  * xbstream now supports --decrypt, --encrypt-threads,
  - -encrypt-key, --encrypt-key-file for decryption
  * Add options for MDL locking (--lock-ddl, --lock-ddl-timeout,
  - -lock-ddl-per-table)
- packaging changes:
  * bundle boost 1.59.0
  * dropped patches:
    percona-xtrabackup-2.2.x-srv_buf_size.patch
    percona-xtrabackup-2.3.8-gcc7-fallthrough.patch
    percona-xtrabackup-2.3.8-gcc7-pointer-comparisons.patch</changelog>
  <changelog author="dmueller@suse.com" date="1511352000">- set default unix socket address to the mariadb socket location</changelog>
  <changelog author="astieger@suse.com" date="1512993600">- Percona XtraBackup 2.4.9:
  * xbcrypt now has an ability to decrypt files in parallel by
    specifying the number of threads with the xtrabackup
  - -encrypt-threads option
  * xtrabackup --copy-back option can now be used with xtrabackup
  - -parallel option to copy the user data files in parallel (redo
    logs and system tablespaces are copied in the main thread)
  * Various fixes to slave_info writing
  * Various fixes for crashes under certain circumstances</changelog>
  <changelog author="ro@suse.de" date="1521028800">- compile some files with -O0 to allow build on aarch64
- add percona-xtrabackup-2.4.9-aarch_buildfix.patch
- add _constraints file: min 6G mem, min 8G diskspace</changelog>
  <changelog author="astieger@suse.com" date="1522584000">- Percona XtraBackup 2.4.10:
  * Rebased to MySQL 5.7.19
  * Fix xbcrypt failure with --encrypt-key-file option
  * Fix lock-up on simultaneous usage of --lock-ddl and
  - -lock-ddl-per-table
  * Fix deadlock in prepare stage related to the maximum number
    of pending reads
  * Abort backup when encountering tablespaces with a corrupted
    first page instead of skipping
- Use %license (boo#1082318)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524744000">- Remove unneeded patch:
  * percona-xtrabackup-2.4.9-aarch_buildfix.patch</changelog>
  <changelog author="astieger@suse.com" date="1528286400">- Percona XtraBackup 2.4.11:
  * Add support for encrypted general tablespaces
  * Add support for backup on instqances using keyring_vault plugin</changelog>
  <changelog author="astieger@suse.com" date="1536840000">- Percona Xtrabackup 2.4.12:
  * now prints used arguments to standard output
  * --copy-back did not read which encryption plugin to use from
    plugin-load setting of the my.cnf configuration file
  * xbstream was exiting with zero return code when it failed to
    create one or more target files
  * xtrabackup_checkpoints files were encrypted during a backup,
    caused additional difficulties to take incremental backups</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1551182400">- Add gcc9-warning.patch (bsc#1125418).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557835200">- Disable LTO (boo#1135095).</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1668945600">- Percona Xtrabackup 2.4.26, the latest release of the 2.4 branch.
  It does not support MySQL 8.0.
  * xbcloud now supports Amazon S3, Microsoft Azure Cloud Storage,
    and gained retry on error and incremental backoff
  * enables updating the ib_buffer_pool file with the latest pages
    present in the buffer pool by setting the xtrabackup
  - -dump-innodb-buffer-pool option to ON
  * Add --backup-lock-timeout and --backup-lock-retry-count for
    configuring  the timeout for acquiring metadata locks
  * CVE-2020-10997: information exposure via cmd line output and
    table history (boo#1170644)
  * CVE-2020-29488: Changes in How Absolute Paths are Handled
    (boo#1205581)
- drop percona-xtrabackup-2.3.3-disable-version-check.patch
  and disable version check via a build time option
- drop percona-xtrabackup-2.3.2-unbundle-jsnm.patch</changelog>
</package>
<package pkgid="1a503d70575768a7598331e546ae6de728d33c70d651d2173e3ea5bb37316a96" name="xtrabackup-test" arch="aarch64">
  <version epoch="0" ver="2.4.26" rel="bp154.2.3.1"/>
  <changelog author="astieger@suse.com" date="1468670400">- Percona XtraBackup 2.3.5, a bugfix release:
  * Backup process would fail if --throttle option was used
  * .ibd files for remote tablespaces were not copied back to the
    original location pointed by the .isl files.
  * Fix crash when called with insufficient parameters, like
    specifying the empty --defaults-file option
  * Change default value of --ftwrl-wait-query-type from "all" to
    "update"
  * Allow the datadir from my.cnf to override the one from
    SHOW VARIABLES
  * Fix failure on MariaDB if binary logs were in non-standard
    directory
- Includes changes from 2.3.4:
  * respect variables in backup-my.cnf without having to specify
  - -defaults-file=backup-my.cnf
  * abort the backup if innobackupex --rsync completed with error
  * Fix logging ouf GTID info with MariaDB 10
  * Fix silent skipping of extra arguments
  * Allow connections to servers using legacy auth with new option
  - -skip-secure-auth</changelog>
  <changelog author="astieger@suse.com" date="1484395200">- Percona XtraBackup 2.3.6, including one security fix:
  * CVE-2016-6225: xbcrypt encryption IV not being set properly
    (boo#1019858)
- New functionality:
  * now supports SHA256 passwords
  * new supports command options for secure connections
- Bugs fixed:
  * intermittent assertion failures when not correctly identifying
    server version
  * Safe slave backup algorithm performed too short delays between
    retries which could cause backups to fail on a busy servers
  * fix compilation warnings with gcc6
  * Backup would still succeed even if xtrabackup would fail to
    write the metadata
  * xbcloud now supports EMC ECS Swift API Authorization requests
  * backup failed with MariaDB 10.2 with the unsupported server
    version error message</changelog>
  <changelog author="astieger@suse.com" date="1487851200">- Percona XtraBackup 2.3.7
- New functionality:
  * new --remove-original option for removing the encrypted and
    compressed files once they?ve been decrypted/decompressed.
  * now supports -H, -h, -u and -p shortcuts for --hostname,
  - -datadir, --user and --password respectively.
- Bugs fixed:
  * used username set for the server in a configuration file even
    if a different user was defined in the user?s configuration file
  * Incremental backups did not include xtrabackup_binlog_info and
    xtrabackup_galera_info files
  * --move-back option did not always restore out-of-datadir
    tablespaces to their original directories
  * innobackupex and xtrabackup scripts were showing the password
    in the ps output when it was passed as a command line argument
    bsc#1026729
  * Incremental backup would fail with a path like ~/backup/inc_1
    because xtrabackup didn?t properly expand tilde</changelog>
  <changelog author="mrueckert@suse.de" date="1494417600">- update to 2.3.8
  - New Features
  - Percona XtraBackup now uses hardware accelerated
    implementation of crc32 where it is supported.
  - Percona XtraBackup has implemented new options: xtrabackup
  - -tables-exclude and xtrabackup --databases-exclude that work
    similar to xtrabackup --tables and xtrabackup --databases
    options, but exclude given names/paths from backup.
  - The xbstream binary now supports parallel extraction with the
  - -parallel option.
  - The xbstream binary now supports following new options:
  - -decrypt, --encrypt-threads, --encrypt-key, and
  - -encrypt-key-file. When --decrypt option is specified
    xbstream will automatically decrypt encrypted files when
    extracting input stream. Either --encrypt-key or
  - -encrypt-key-file options must be specified to provide
    encryption key, but not both. Option --encrypt-threads
    specifies the number of worker threads doing the encryption,
    default is 1.
  - Bugs fixed
  - xtrabackup would not create fresh InnoDB redo logs when
    preparing incremental backup. Bug fixed #1669592.
  - xtrabackup --export can now export tables that have more than
    31 index. Bug fixed #1089681.
  - Unrecognized character \x01; marked by &lt;-- HERE message could
    be seen if backups were taken with the version check enabled.
    Bug fixed #1651978.
- refreshed percona-xtrabackup-2.3.2-unbundle-jsnm.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1494417601">- enable building with system ssl</changelog>
  <changelog author="mrueckert@suse.de" date="1494417602">- dont build shared libs for now.</changelog>
  <changelog author="astieger@suse.com" date="1496404800">- fix build with gcc7 bsc#1041250:
  * percona-xtrabackup-2.3.8-gcc7-fallthrough.patch
  * percona-xtrabackup-2.3.8-gcc7-pointer-comparisons.patch</changelog>
  <changelog author="astieger@suse.com" date="1500465600">- Remove unused bundled libarchive windows build files with
  proprietary license keywords - bsc#1049458</changelog>
  <changelog author="astieger@suse.com" date="1502193600">- Percona Xtrabackup 2.3.9:
  * New --check-privileges option to check for system privileges
  * Fix crash during prepare stage if index compaction was enabled
  * Support building with OpenSSL 1.1
  * xbstream could run out of file descriptors while extracting
    backups which contains many tables
  * Fix determining use of master_auto_postion on a slave to avoid
    generating an invalid xtrabackup_slave_info file
  * Fix crash backing up MariaDB 10.2.x with --ftwrl-* options
  * Along with xtrabackup_checkpints file, xtrabackup now copies
    xtrabackup_info file into directory specified by --extra-lsndir
  * GTID position was not recorded when --binlog-info option was
    set to AUTO
  * bundled, patched libarchive updated to 3.3.1</changelog>
  <changelog author="astieger@suse.com" date="1502193601">- Percona XtraBackup 2.4.8:
  * Support MySQL 5.7, rebased to MySQL 5.7.13
  * Support for InnoDB tablespace encryption
    add --reencrypt-for-server-id option
  * Support SHA256 passwords (via SSL connection)
  * Support command options for secure connections
  * xbcrypt format changes, backups are incompatible with 2.3.x
  * Add --remove-original option to remove encrypted/compressed
    files after operations
  * Use hwardware accellerated crc32 implementaiton
  * Add options to exclude tables (--tables-exclude) and databases
    (--databases-exclude) from backup
  * xbstream now supports parallel extraction (--parallel)
  * xbstream now supports --decrypt, --encrypt-threads,
  - -encrypt-key, --encrypt-key-file for decryption
  * Add options for MDL locking (--lock-ddl, --lock-ddl-timeout,
  - -lock-ddl-per-table)
- packaging changes:
  * bundle boost 1.59.0
  * dropped patches:
    percona-xtrabackup-2.2.x-srv_buf_size.patch
    percona-xtrabackup-2.3.8-gcc7-fallthrough.patch
    percona-xtrabackup-2.3.8-gcc7-pointer-comparisons.patch</changelog>
  <changelog author="dmueller@suse.com" date="1511352000">- set default unix socket address to the mariadb socket location</changelog>
  <changelog author="astieger@suse.com" date="1512993600">- Percona XtraBackup 2.4.9:
  * xbcrypt now has an ability to decrypt files in parallel by
    specifying the number of threads with the xtrabackup
  - -encrypt-threads option
  * xtrabackup --copy-back option can now be used with xtrabackup
  - -parallel option to copy the user data files in parallel (redo
    logs and system tablespaces are copied in the main thread)
  * Various fixes to slave_info writing
  * Various fixes for crashes under certain circumstances</changelog>
  <changelog author="ro@suse.de" date="1521028800">- compile some files with -O0 to allow build on aarch64
- add percona-xtrabackup-2.4.9-aarch_buildfix.patch
- add _constraints file: min 6G mem, min 8G diskspace</changelog>
  <changelog author="astieger@suse.com" date="1522584000">- Percona XtraBackup 2.4.10:
  * Rebased to MySQL 5.7.19
  * Fix xbcrypt failure with --encrypt-key-file option
  * Fix lock-up on simultaneous usage of --lock-ddl and
  - -lock-ddl-per-table
  * Fix deadlock in prepare stage related to the maximum number
    of pending reads
  * Abort backup when encountering tablespaces with a corrupted
    first page instead of skipping
- Use %license (boo#1082318)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524744000">- Remove unneeded patch:
  * percona-xtrabackup-2.4.9-aarch_buildfix.patch</changelog>
  <changelog author="astieger@suse.com" date="1528286400">- Percona XtraBackup 2.4.11:
  * Add support for encrypted general tablespaces
  * Add support for backup on instqances using keyring_vault plugin</changelog>
  <changelog author="astieger@suse.com" date="1536840000">- Percona Xtrabackup 2.4.12:
  * now prints used arguments to standard output
  * --copy-back did not read which encryption plugin to use from
    plugin-load setting of the my.cnf configuration file
  * xbstream was exiting with zero return code when it failed to
    create one or more target files
  * xtrabackup_checkpoints files were encrypted during a backup,
    caused additional difficulties to take incremental backups</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1551182400">- Add gcc9-warning.patch (bsc#1125418).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557835200">- Disable LTO (boo#1135095).</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1668945600">- Percona Xtrabackup 2.4.26, the latest release of the 2.4 branch.
  It does not support MySQL 8.0.
  * xbcloud now supports Amazon S3, Microsoft Azure Cloud Storage,
    and gained retry on error and incremental backoff
  * enables updating the ib_buffer_pool file with the latest pages
    present in the buffer pool by setting the xtrabackup
  - -dump-innodb-buffer-pool option to ON
  * Add --backup-lock-timeout and --backup-lock-retry-count for
    configuring  the timeout for acquiring metadata locks
  * CVE-2020-10997: information exposure via cmd line output and
    table history (boo#1170644)
  * CVE-2020-29488: Changes in How Absolute Paths are Handled
    (boo#1205581)
- drop percona-xtrabackup-2.3.3-disable-version-check.patch
  and disable version check via a build time option
- drop percona-xtrabackup-2.3.2-unbundle-jsnm.patch</changelog>
</package>
<package pkgid="e90241f594a36c513c3ea299146c70ef136a467b8ec760015adc303dbb40cef6" name="xtrabackup-test" arch="i586">
  <version epoch="0" ver="2.4.26" rel="bp154.2.3.1"/>
  <changelog author="astieger@suse.com" date="1468670400">- Percona XtraBackup 2.3.5, a bugfix release:
  * Backup process would fail if --throttle option was used
  * .ibd files for remote tablespaces were not copied back to the
    original location pointed by the .isl files.
  * Fix crash when called with insufficient parameters, like
    specifying the empty --defaults-file option
  * Change default value of --ftwrl-wait-query-type from "all" to
    "update"
  * Allow the datadir from my.cnf to override the one from
    SHOW VARIABLES
  * Fix failure on MariaDB if binary logs were in non-standard
    directory
- Includes changes from 2.3.4:
  * respect variables in backup-my.cnf without having to specify
  - -defaults-file=backup-my.cnf
  * abort the backup if innobackupex --rsync completed with error
  * Fix logging ouf GTID info with MariaDB 10
  * Fix silent skipping of extra arguments
  * Allow connections to servers using legacy auth with new option
  - -skip-secure-auth</changelog>
  <changelog author="astieger@suse.com" date="1484395200">- Percona XtraBackup 2.3.6, including one security fix:
  * CVE-2016-6225: xbcrypt encryption IV not being set properly
    (boo#1019858)
- New functionality:
  * now supports SHA256 passwords
  * new supports command options for secure connections
- Bugs fixed:
  * intermittent assertion failures when not correctly identifying
    server version
  * Safe slave backup algorithm performed too short delays between
    retries which could cause backups to fail on a busy servers
  * fix compilation warnings with gcc6
  * Backup would still succeed even if xtrabackup would fail to
    write the metadata
  * xbcloud now supports EMC ECS Swift API Authorization requests
  * backup failed with MariaDB 10.2 with the unsupported server
    version error message</changelog>
  <changelog author="astieger@suse.com" date="1487851200">- Percona XtraBackup 2.3.7
- New functionality:
  * new --remove-original option for removing the encrypted and
    compressed files once they?ve been decrypted/decompressed.
  * now supports -H, -h, -u and -p shortcuts for --hostname,
  - -datadir, --user and --password respectively.
- Bugs fixed:
  * used username set for the server in a configuration file even
    if a different user was defined in the user?s configuration file
  * Incremental backups did not include xtrabackup_binlog_info and
    xtrabackup_galera_info files
  * --move-back option did not always restore out-of-datadir
    tablespaces to their original directories
  * innobackupex and xtrabackup scripts were showing the password
    in the ps output when it was passed as a command line argument
    bsc#1026729
  * Incremental backup would fail with a path like ~/backup/inc_1
    because xtrabackup didn?t properly expand tilde</changelog>
  <changelog author="mrueckert@suse.de" date="1494417600">- update to 2.3.8
  - New Features
  - Percona XtraBackup now uses hardware accelerated
    implementation of crc32 where it is supported.
  - Percona XtraBackup has implemented new options: xtrabackup
  - -tables-exclude and xtrabackup --databases-exclude that work
    similar to xtrabackup --tables and xtrabackup --databases
    options, but exclude given names/paths from backup.
  - The xbstream binary now supports parallel extraction with the
  - -parallel option.
  - The xbstream binary now supports following new options:
  - -decrypt, --encrypt-threads, --encrypt-key, and
  - -encrypt-key-file. When --decrypt option is specified
    xbstream will automatically decrypt encrypted files when
    extracting input stream. Either --encrypt-key or
  - -encrypt-key-file options must be specified to provide
    encryption key, but not both. Option --encrypt-threads
    specifies the number of worker threads doing the encryption,
    default is 1.
  - Bugs fixed
  - xtrabackup would not create fresh InnoDB redo logs when
    preparing incremental backup. Bug fixed #1669592.
  - xtrabackup --export can now export tables that have more than
    31 index. Bug fixed #1089681.
  - Unrecognized character \x01; marked by &lt;-- HERE message could
    be seen if backups were taken with the version check enabled.
    Bug fixed #1651978.
- refreshed percona-xtrabackup-2.3.2-unbundle-jsnm.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1494417601">- enable building with system ssl</changelog>
  <changelog author="mrueckert@suse.de" date="1494417602">- dont build shared libs for now.</changelog>
  <changelog author="astieger@suse.com" date="1496404800">- fix build with gcc7 bsc#1041250:
  * percona-xtrabackup-2.3.8-gcc7-fallthrough.patch
  * percona-xtrabackup-2.3.8-gcc7-pointer-comparisons.patch</changelog>
  <changelog author="astieger@suse.com" date="1500465600">- Remove unused bundled libarchive windows build files with
  proprietary license keywords - bsc#1049458</changelog>
  <changelog author="astieger@suse.com" date="1502193600">- Percona Xtrabackup 2.3.9:
  * New --check-privileges option to check for system privileges
  * Fix crash during prepare stage if index compaction was enabled
  * Support building with OpenSSL 1.1
  * xbstream could run out of file descriptors while extracting
    backups which contains many tables
  * Fix determining use of master_auto_postion on a slave to avoid
    generating an invalid xtrabackup_slave_info file
  * Fix crash backing up MariaDB 10.2.x with --ftwrl-* options
  * Along with xtrabackup_checkpints file, xtrabackup now copies
    xtrabackup_info file into directory specified by --extra-lsndir
  * GTID position was not recorded when --binlog-info option was
    set to AUTO
  * bundled, patched libarchive updated to 3.3.1</changelog>
  <changelog author="astieger@suse.com" date="1502193601">- Percona XtraBackup 2.4.8:
  * Support MySQL 5.7, rebased to MySQL 5.7.13
  * Support for InnoDB tablespace encryption
    add --reencrypt-for-server-id option
  * Support SHA256 passwords (via SSL connection)
  * Support command options for secure connections
  * xbcrypt format changes, backups are incompatible with 2.3.x
  * Add --remove-original option to remove encrypted/compressed
    files after operations
  * Use hwardware accellerated crc32 implementaiton
  * Add options to exclude tables (--tables-exclude) and databases
    (--databases-exclude) from backup
  * xbstream now supports parallel extraction (--parallel)
  * xbstream now supports --decrypt, --encrypt-threads,
  - -encrypt-key, --encrypt-key-file for decryption
  * Add options for MDL locking (--lock-ddl, --lock-ddl-timeout,
  - -lock-ddl-per-table)
- packaging changes:
  * bundle boost 1.59.0
  * dropped patches:
    percona-xtrabackup-2.2.x-srv_buf_size.patch
    percona-xtrabackup-2.3.8-gcc7-fallthrough.patch
    percona-xtrabackup-2.3.8-gcc7-pointer-comparisons.patch</changelog>
  <changelog author="dmueller@suse.com" date="1511352000">- set default unix socket address to the mariadb socket location</changelog>
  <changelog author="astieger@suse.com" date="1512993600">- Percona XtraBackup 2.4.9:
  * xbcrypt now has an ability to decrypt files in parallel by
    specifying the number of threads with the xtrabackup
  - -encrypt-threads option
  * xtrabackup --copy-back option can now be used with xtrabackup
  - -parallel option to copy the user data files in parallel (redo
    logs and system tablespaces are copied in the main thread)
  * Various fixes to slave_info writing
  * Various fixes for crashes under certain circumstances</changelog>
  <changelog author="ro@suse.de" date="1521028800">- compile some files with -O0 to allow build on aarch64
- add percona-xtrabackup-2.4.9-aarch_buildfix.patch
- add _constraints file: min 6G mem, min 8G diskspace</changelog>
  <changelog author="astieger@suse.com" date="1522584000">- Percona XtraBackup 2.4.10:
  * Rebased to MySQL 5.7.19
  * Fix xbcrypt failure with --encrypt-key-file option
  * Fix lock-up on simultaneous usage of --lock-ddl and
  - -lock-ddl-per-table
  * Fix deadlock in prepare stage related to the maximum number
    of pending reads
  * Abort backup when encountering tablespaces with a corrupted
    first page instead of skipping
- Use %license (boo#1082318)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524744000">- Remove unneeded patch:
  * percona-xtrabackup-2.4.9-aarch_buildfix.patch</changelog>
  <changelog author="astieger@suse.com" date="1528286400">- Percona XtraBackup 2.4.11:
  * Add support for encrypted general tablespaces
  * Add support for backup on instqances using keyring_vault plugin</changelog>
  <changelog author="astieger@suse.com" date="1536840000">- Percona Xtrabackup 2.4.12:
  * now prints used arguments to standard output
  * --copy-back did not read which encryption plugin to use from
    plugin-load setting of the my.cnf configuration file
  * xbstream was exiting with zero return code when it failed to
    create one or more target files
  * xtrabackup_checkpoints files were encrypted during a backup,
    caused additional difficulties to take incremental backups</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1551182400">- Add gcc9-warning.patch (bsc#1125418).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557835200">- Disable LTO (boo#1135095).</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1668945600">- Percona Xtrabackup 2.4.26, the latest release of the 2.4 branch.
  It does not support MySQL 8.0.
  * xbcloud now supports Amazon S3, Microsoft Azure Cloud Storage,
    and gained retry on error and incremental backoff
  * enables updating the ib_buffer_pool file with the latest pages
    present in the buffer pool by setting the xtrabackup
  - -dump-innodb-buffer-pool option to ON
  * Add --backup-lock-timeout and --backup-lock-retry-count for
    configuring  the timeout for acquiring metadata locks
  * CVE-2020-10997: information exposure via cmd line output and
    table history (boo#1170644)
  * CVE-2020-29488: Changes in How Absolute Paths are Handled
    (boo#1205581)
- drop percona-xtrabackup-2.3.3-disable-version-check.patch
  and disable version check via a build time option
- drop percona-xtrabackup-2.3.2-unbundle-jsnm.patch</changelog>
</package>
<package pkgid="2c141f9992ea73b6bfc520c4f774678a6d5c4124e0d2fe19b4dc9620df8a02c7" name="xtrabackup-test" arch="ppc64le">
  <version epoch="0" ver="2.4.26" rel="bp154.2.3.1"/>
  <changelog author="astieger@suse.com" date="1468670400">- Percona XtraBackup 2.3.5, a bugfix release:
  * Backup process would fail if --throttle option was used
  * .ibd files for remote tablespaces were not copied back to the
    original location pointed by the .isl files.
  * Fix crash when called with insufficient parameters, like
    specifying the empty --defaults-file option
  * Change default value of --ftwrl-wait-query-type from "all" to
    "update"
  * Allow the datadir from my.cnf to override the one from
    SHOW VARIABLES
  * Fix failure on MariaDB if binary logs were in non-standard
    directory
- Includes changes from 2.3.4:
  * respect variables in backup-my.cnf without having to specify
  - -defaults-file=backup-my.cnf
  * abort the backup if innobackupex --rsync completed with error
  * Fix logging ouf GTID info with MariaDB 10
  * Fix silent skipping of extra arguments
  * Allow connections to servers using legacy auth with new option
  - -skip-secure-auth</changelog>
  <changelog author="astieger@suse.com" date="1484395200">- Percona XtraBackup 2.3.6, including one security fix:
  * CVE-2016-6225: xbcrypt encryption IV not being set properly
    (boo#1019858)
- New functionality:
  * now supports SHA256 passwords
  * new supports command options for secure connections
- Bugs fixed:
  * intermittent assertion failures when not correctly identifying
    server version
  * Safe slave backup algorithm performed too short delays between
    retries which could cause backups to fail on a busy servers
  * fix compilation warnings with gcc6
  * Backup would still succeed even if xtrabackup would fail to
    write the metadata
  * xbcloud now supports EMC ECS Swift API Authorization requests
  * backup failed with MariaDB 10.2 with the unsupported server
    version error message</changelog>
  <changelog author="astieger@suse.com" date="1487851200">- Percona XtraBackup 2.3.7
- New functionality:
  * new --remove-original option for removing the encrypted and
    compressed files once they?ve been decrypted/decompressed.
  * now supports -H, -h, -u and -p shortcuts for --hostname,
  - -datadir, --user and --password respectively.
- Bugs fixed:
  * used username set for the server in a configuration file even
    if a different user was defined in the user?s configuration file
  * Incremental backups did not include xtrabackup_binlog_info and
    xtrabackup_galera_info files
  * --move-back option did not always restore out-of-datadir
    tablespaces to their original directories
  * innobackupex and xtrabackup scripts were showing the password
    in the ps output when it was passed as a command line argument
    bsc#1026729
  * Incremental backup would fail with a path like ~/backup/inc_1
    because xtrabackup didn?t properly expand tilde</changelog>
  <changelog author="mrueckert@suse.de" date="1494417600">- update to 2.3.8
  - New Features
  - Percona XtraBackup now uses hardware accelerated
    implementation of crc32 where it is supported.
  - Percona XtraBackup has implemented new options: xtrabackup
  - -tables-exclude and xtrabackup --databases-exclude that work
    similar to xtrabackup --tables and xtrabackup --databases
    options, but exclude given names/paths from backup.
  - The xbstream binary now supports parallel extraction with the
  - -parallel option.
  - The xbstream binary now supports following new options:
  - -decrypt, --encrypt-threads, --encrypt-key, and
  - -encrypt-key-file. When --decrypt option is specified
    xbstream will automatically decrypt encrypted files when
    extracting input stream. Either --encrypt-key or
  - -encrypt-key-file options must be specified to provide
    encryption key, but not both. Option --encrypt-threads
    specifies the number of worker threads doing the encryption,
    default is 1.
  - Bugs fixed
  - xtrabackup would not create fresh InnoDB redo logs when
    preparing incremental backup. Bug fixed #1669592.
  - xtrabackup --export can now export tables that have more than
    31 index. Bug fixed #1089681.
  - Unrecognized character \x01; marked by &lt;-- HERE message could
    be seen if backups were taken with the version check enabled.
    Bug fixed #1651978.
- refreshed percona-xtrabackup-2.3.2-unbundle-jsnm.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1494417601">- enable building with system ssl</changelog>
  <changelog author="mrueckert@suse.de" date="1494417602">- dont build shared libs for now.</changelog>
  <changelog author="astieger@suse.com" date="1496404800">- fix build with gcc7 bsc#1041250:
  * percona-xtrabackup-2.3.8-gcc7-fallthrough.patch
  * percona-xtrabackup-2.3.8-gcc7-pointer-comparisons.patch</changelog>
  <changelog author="astieger@suse.com" date="1500465600">- Remove unused bundled libarchive windows build files with
  proprietary license keywords - bsc#1049458</changelog>
  <changelog author="astieger@suse.com" date="1502193600">- Percona Xtrabackup 2.3.9:
  * New --check-privileges option to check for system privileges
  * Fix crash during prepare stage if index compaction was enabled
  * Support building with OpenSSL 1.1
  * xbstream could run out of file descriptors while extracting
    backups which contains many tables
  * Fix determining use of master_auto_postion on a slave to avoid
    generating an invalid xtrabackup_slave_info file
  * Fix crash backing up MariaDB 10.2.x with --ftwrl-* options
  * Along with xtrabackup_checkpints file, xtrabackup now copies
    xtrabackup_info file into directory specified by --extra-lsndir
  * GTID position was not recorded when --binlog-info option was
    set to AUTO
  * bundled, patched libarchive updated to 3.3.1</changelog>
  <changelog author="astieger@suse.com" date="1502193601">- Percona XtraBackup 2.4.8:
  * Support MySQL 5.7, rebased to MySQL 5.7.13
  * Support for InnoDB tablespace encryption
    add --reencrypt-for-server-id option
  * Support SHA256 passwords (via SSL connection)
  * Support command options for secure connections
  * xbcrypt format changes, backups are incompatible with 2.3.x
  * Add --remove-original option to remove encrypted/compressed
    files after operations
  * Use hwardware accellerated crc32 implementaiton
  * Add options to exclude tables (--tables-exclude) and databases
    (--databases-exclude) from backup
  * xbstream now supports parallel extraction (--parallel)
  * xbstream now supports --decrypt, --encrypt-threads,
  - -encrypt-key, --encrypt-key-file for decryption
  * Add options for MDL locking (--lock-ddl, --lock-ddl-timeout,
  - -lock-ddl-per-table)
- packaging changes:
  * bundle boost 1.59.0
  * dropped patches:
    percona-xtrabackup-2.2.x-srv_buf_size.patch
    percona-xtrabackup-2.3.8-gcc7-fallthrough.patch
    percona-xtrabackup-2.3.8-gcc7-pointer-comparisons.patch</changelog>
  <changelog author="dmueller@suse.com" date="1511352000">- set default unix socket address to the mariadb socket location</changelog>
  <changelog author="astieger@suse.com" date="1512993600">- Percona XtraBackup 2.4.9:
  * xbcrypt now has an ability to decrypt files in parallel by
    specifying the number of threads with the xtrabackup
  - -encrypt-threads option
  * xtrabackup --copy-back option can now be used with xtrabackup
  - -parallel option to copy the user data files in parallel (redo
    logs and system tablespaces are copied in the main thread)
  * Various fixes to slave_info writing
  * Various fixes for crashes under certain circumstances</changelog>
  <changelog author="ro@suse.de" date="1521028800">- compile some files with -O0 to allow build on aarch64
- add percona-xtrabackup-2.4.9-aarch_buildfix.patch
- add _constraints file: min 6G mem, min 8G diskspace</changelog>
  <changelog author="astieger@suse.com" date="1522584000">- Percona XtraBackup 2.4.10:
  * Rebased to MySQL 5.7.19
  * Fix xbcrypt failure with --encrypt-key-file option
  * Fix lock-up on simultaneous usage of --lock-ddl and
  - -lock-ddl-per-table
  * Fix deadlock in prepare stage related to the maximum number
    of pending reads
  * Abort backup when encountering tablespaces with a corrupted
    first page instead of skipping
- Use %license (boo#1082318)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524744000">- Remove unneeded patch:
  * percona-xtrabackup-2.4.9-aarch_buildfix.patch</changelog>
  <changelog author="astieger@suse.com" date="1528286400">- Percona XtraBackup 2.4.11:
  * Add support for encrypted general tablespaces
  * Add support for backup on instqances using keyring_vault plugin</changelog>
  <changelog author="astieger@suse.com" date="1536840000">- Percona Xtrabackup 2.4.12:
  * now prints used arguments to standard output
  * --copy-back did not read which encryption plugin to use from
    plugin-load setting of the my.cnf configuration file
  * xbstream was exiting with zero return code when it failed to
    create one or more target files
  * xtrabackup_checkpoints files were encrypted during a backup,
    caused additional difficulties to take incremental backups</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1551182400">- Add gcc9-warning.patch (bsc#1125418).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557835200">- Disable LTO (boo#1135095).</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1668945600">- Percona Xtrabackup 2.4.26, the latest release of the 2.4 branch.
  It does not support MySQL 8.0.
  * xbcloud now supports Amazon S3, Microsoft Azure Cloud Storage,
    and gained retry on error and incremental backoff
  * enables updating the ib_buffer_pool file with the latest pages
    present in the buffer pool by setting the xtrabackup
  - -dump-innodb-buffer-pool option to ON
  * Add --backup-lock-timeout and --backup-lock-retry-count for
    configuring  the timeout for acquiring metadata locks
  * CVE-2020-10997: information exposure via cmd line output and
    table history (boo#1170644)
  * CVE-2020-29488: Changes in How Absolute Paths are Handled
    (boo#1205581)
- drop percona-xtrabackup-2.3.3-disable-version-check.patch
  and disable version check via a build time option
- drop percona-xtrabackup-2.3.2-unbundle-jsnm.patch</changelog>
</package>
<package pkgid="ab66190a92b2232e7b6dbd11e57daf28cbda2b5919bc321d3492919edb4d8548" name="xtrabackup-test" arch="s390x">
  <version epoch="0" ver="2.4.26" rel="bp154.2.3.1"/>
  <changelog author="astieger@suse.com" date="1468670400">- Percona XtraBackup 2.3.5, a bugfix release:
  * Backup process would fail if --throttle option was used
  * .ibd files for remote tablespaces were not copied back to the
    original location pointed by the .isl files.
  * Fix crash when called with insufficient parameters, like
    specifying the empty --defaults-file option
  * Change default value of --ftwrl-wait-query-type from "all" to
    "update"
  * Allow the datadir from my.cnf to override the one from
    SHOW VARIABLES
  * Fix failure on MariaDB if binary logs were in non-standard
    directory
- Includes changes from 2.3.4:
  * respect variables in backup-my.cnf without having to specify
  - -defaults-file=backup-my.cnf
  * abort the backup if innobackupex --rsync completed with error
  * Fix logging ouf GTID info with MariaDB 10
  * Fix silent skipping of extra arguments
  * Allow connections to servers using legacy auth with new option
  - -skip-secure-auth</changelog>
  <changelog author="astieger@suse.com" date="1484395200">- Percona XtraBackup 2.3.6, including one security fix:
  * CVE-2016-6225: xbcrypt encryption IV not being set properly
    (boo#1019858)
- New functionality:
  * now supports SHA256 passwords
  * new supports command options for secure connections
- Bugs fixed:
  * intermittent assertion failures when not correctly identifying
    server version
  * Safe slave backup algorithm performed too short delays between
    retries which could cause backups to fail on a busy servers
  * fix compilation warnings with gcc6
  * Backup would still succeed even if xtrabackup would fail to
    write the metadata
  * xbcloud now supports EMC ECS Swift API Authorization requests
  * backup failed with MariaDB 10.2 with the unsupported server
    version error message</changelog>
  <changelog author="astieger@suse.com" date="1487851200">- Percona XtraBackup 2.3.7
- New functionality:
  * new --remove-original option for removing the encrypted and
    compressed files once they?ve been decrypted/decompressed.
  * now supports -H, -h, -u and -p shortcuts for --hostname,
  - -datadir, --user and --password respectively.
- Bugs fixed:
  * used username set for the server in a configuration file even
    if a different user was defined in the user?s configuration file
  * Incremental backups did not include xtrabackup_binlog_info and
    xtrabackup_galera_info files
  * --move-back option did not always restore out-of-datadir
    tablespaces to their original directories
  * innobackupex and xtrabackup scripts were showing the password
    in the ps output when it was passed as a command line argument
    bsc#1026729
  * Incremental backup would fail with a path like ~/backup/inc_1
    because xtrabackup didn?t properly expand tilde</changelog>
  <changelog author="mrueckert@suse.de" date="1494417600">- update to 2.3.8
  - New Features
  - Percona XtraBackup now uses hardware accelerated
    implementation of crc32 where it is supported.
  - Percona XtraBackup has implemented new options: xtrabackup
  - -tables-exclude and xtrabackup --databases-exclude that work
    similar to xtrabackup --tables and xtrabackup --databases
    options, but exclude given names/paths from backup.
  - The xbstream binary now supports parallel extraction with the
  - -parallel option.
  - The xbstream binary now supports following new options:
  - -decrypt, --encrypt-threads, --encrypt-key, and
  - -encrypt-key-file. When --decrypt option is specified
    xbstream will automatically decrypt encrypted files when
    extracting input stream. Either --encrypt-key or
  - -encrypt-key-file options must be specified to provide
    encryption key, but not both. Option --encrypt-threads
    specifies the number of worker threads doing the encryption,
    default is 1.
  - Bugs fixed
  - xtrabackup would not create fresh InnoDB redo logs when
    preparing incremental backup. Bug fixed #1669592.
  - xtrabackup --export can now export tables that have more than
    31 index. Bug fixed #1089681.
  - Unrecognized character \x01; marked by &lt;-- HERE message could
    be seen if backups were taken with the version check enabled.
    Bug fixed #1651978.
- refreshed percona-xtrabackup-2.3.2-unbundle-jsnm.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1494417601">- enable building with system ssl</changelog>
  <changelog author="mrueckert@suse.de" date="1494417602">- dont build shared libs for now.</changelog>
  <changelog author="astieger@suse.com" date="1496404800">- fix build with gcc7 bsc#1041250:
  * percona-xtrabackup-2.3.8-gcc7-fallthrough.patch
  * percona-xtrabackup-2.3.8-gcc7-pointer-comparisons.patch</changelog>
  <changelog author="astieger@suse.com" date="1500465600">- Remove unused bundled libarchive windows build files with
  proprietary license keywords - bsc#1049458</changelog>
  <changelog author="astieger@suse.com" date="1502193600">- Percona Xtrabackup 2.3.9:
  * New --check-privileges option to check for system privileges
  * Fix crash during prepare stage if index compaction was enabled
  * Support building with OpenSSL 1.1
  * xbstream could run out of file descriptors while extracting
    backups which contains many tables
  * Fix determining use of master_auto_postion on a slave to avoid
    generating an invalid xtrabackup_slave_info file
  * Fix crash backing up MariaDB 10.2.x with --ftwrl-* options
  * Along with xtrabackup_checkpints file, xtrabackup now copies
    xtrabackup_info file into directory specified by --extra-lsndir
  * GTID position was not recorded when --binlog-info option was
    set to AUTO
  * bundled, patched libarchive updated to 3.3.1</changelog>
  <changelog author="astieger@suse.com" date="1502193601">- Percona XtraBackup 2.4.8:
  * Support MySQL 5.7, rebased to MySQL 5.7.13
  * Support for InnoDB tablespace encryption
    add --reencrypt-for-server-id option
  * Support SHA256 passwords (via SSL connection)
  * Support command options for secure connections
  * xbcrypt format changes, backups are incompatible with 2.3.x
  * Add --remove-original option to remove encrypted/compressed
    files after operations
  * Use hwardware accellerated crc32 implementaiton
  * Add options to exclude tables (--tables-exclude) and databases
    (--databases-exclude) from backup
  * xbstream now supports parallel extraction (--parallel)
  * xbstream now supports --decrypt, --encrypt-threads,
  - -encrypt-key, --encrypt-key-file for decryption
  * Add options for MDL locking (--lock-ddl, --lock-ddl-timeout,
  - -lock-ddl-per-table)
- packaging changes:
  * bundle boost 1.59.0
  * dropped patches:
    percona-xtrabackup-2.2.x-srv_buf_size.patch
    percona-xtrabackup-2.3.8-gcc7-fallthrough.patch
    percona-xtrabackup-2.3.8-gcc7-pointer-comparisons.patch</changelog>
  <changelog author="dmueller@suse.com" date="1511352000">- set default unix socket address to the mariadb socket location</changelog>
  <changelog author="astieger@suse.com" date="1512993600">- Percona XtraBackup 2.4.9:
  * xbcrypt now has an ability to decrypt files in parallel by
    specifying the number of threads with the xtrabackup
  - -encrypt-threads option
  * xtrabackup --copy-back option can now be used with xtrabackup
  - -parallel option to copy the user data files in parallel (redo
    logs and system tablespaces are copied in the main thread)
  * Various fixes to slave_info writing
  * Various fixes for crashes under certain circumstances</changelog>
  <changelog author="ro@suse.de" date="1521028800">- compile some files with -O0 to allow build on aarch64
- add percona-xtrabackup-2.4.9-aarch_buildfix.patch
- add _constraints file: min 6G mem, min 8G diskspace</changelog>
  <changelog author="astieger@suse.com" date="1522584000">- Percona XtraBackup 2.4.10:
  * Rebased to MySQL 5.7.19
  * Fix xbcrypt failure with --encrypt-key-file option
  * Fix lock-up on simultaneous usage of --lock-ddl and
  - -lock-ddl-per-table
  * Fix deadlock in prepare stage related to the maximum number
    of pending reads
  * Abort backup when encountering tablespaces with a corrupted
    first page instead of skipping
- Use %license (boo#1082318)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524744000">- Remove unneeded patch:
  * percona-xtrabackup-2.4.9-aarch_buildfix.patch</changelog>
  <changelog author="astieger@suse.com" date="1528286400">- Percona XtraBackup 2.4.11:
  * Add support for encrypted general tablespaces
  * Add support for backup on instqances using keyring_vault plugin</changelog>
  <changelog author="astieger@suse.com" date="1536840000">- Percona Xtrabackup 2.4.12:
  * now prints used arguments to standard output
  * --copy-back did not read which encryption plugin to use from
    plugin-load setting of the my.cnf configuration file
  * xbstream was exiting with zero return code when it failed to
    create one or more target files
  * xtrabackup_checkpoints files were encrypted during a backup,
    caused additional difficulties to take incremental backups</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1551182400">- Add gcc9-warning.patch (bsc#1125418).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557835200">- Disable LTO (boo#1135095).</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1668945600">- Percona Xtrabackup 2.4.26, the latest release of the 2.4 branch.
  It does not support MySQL 8.0.
  * xbcloud now supports Amazon S3, Microsoft Azure Cloud Storage,
    and gained retry on error and incremental backoff
  * enables updating the ib_buffer_pool file with the latest pages
    present in the buffer pool by setting the xtrabackup
  - -dump-innodb-buffer-pool option to ON
  * Add --backup-lock-timeout and --backup-lock-retry-count for
    configuring  the timeout for acquiring metadata locks
  * CVE-2020-10997: information exposure via cmd line output and
    table history (boo#1170644)
  * CVE-2020-29488: Changes in How Absolute Paths are Handled
    (boo#1205581)
- drop percona-xtrabackup-2.3.3-disable-version-check.patch
  and disable version check via a build time option
- drop percona-xtrabackup-2.3.2-unbundle-jsnm.patch</changelog>
</package>
<package pkgid="30980e2bf9f591aa54469b448a7653d95f3730aa434c6604f5538a96673df7db" name="xtrabackup-test" arch="x86_64">
  <version epoch="0" ver="2.4.26" rel="bp154.2.3.1"/>
  <changelog author="astieger@suse.com" date="1468670400">- Percona XtraBackup 2.3.5, a bugfix release:
  * Backup process would fail if --throttle option was used
  * .ibd files for remote tablespaces were not copied back to the
    original location pointed by the .isl files.
  * Fix crash when called with insufficient parameters, like
    specifying the empty --defaults-file option
  * Change default value of --ftwrl-wait-query-type from "all" to
    "update"
  * Allow the datadir from my.cnf to override the one from
    SHOW VARIABLES
  * Fix failure on MariaDB if binary logs were in non-standard
    directory
- Includes changes from 2.3.4:
  * respect variables in backup-my.cnf without having to specify
  - -defaults-file=backup-my.cnf
  * abort the backup if innobackupex --rsync completed with error
  * Fix logging ouf GTID info with MariaDB 10
  * Fix silent skipping of extra arguments
  * Allow connections to servers using legacy auth with new option
  - -skip-secure-auth</changelog>
  <changelog author="astieger@suse.com" date="1484395200">- Percona XtraBackup 2.3.6, including one security fix:
  * CVE-2016-6225: xbcrypt encryption IV not being set properly
    (boo#1019858)
- New functionality:
  * now supports SHA256 passwords
  * new supports command options for secure connections
- Bugs fixed:
  * intermittent assertion failures when not correctly identifying
    server version
  * Safe slave backup algorithm performed too short delays between
    retries which could cause backups to fail on a busy servers
  * fix compilation warnings with gcc6
  * Backup would still succeed even if xtrabackup would fail to
    write the metadata
  * xbcloud now supports EMC ECS Swift API Authorization requests
  * backup failed with MariaDB 10.2 with the unsupported server
    version error message</changelog>
  <changelog author="astieger@suse.com" date="1487851200">- Percona XtraBackup 2.3.7
- New functionality:
  * new --remove-original option for removing the encrypted and
    compressed files once they?ve been decrypted/decompressed.
  * now supports -H, -h, -u and -p shortcuts for --hostname,
  - -datadir, --user and --password respectively.
- Bugs fixed:
  * used username set for the server in a configuration file even
    if a different user was defined in the user?s configuration file
  * Incremental backups did not include xtrabackup_binlog_info and
    xtrabackup_galera_info files
  * --move-back option did not always restore out-of-datadir
    tablespaces to their original directories
  * innobackupex and xtrabackup scripts were showing the password
    in the ps output when it was passed as a command line argument
    bsc#1026729
  * Incremental backup would fail with a path like ~/backup/inc_1
    because xtrabackup didn?t properly expand tilde</changelog>
  <changelog author="mrueckert@suse.de" date="1494417600">- update to 2.3.8
  - New Features
  - Percona XtraBackup now uses hardware accelerated
    implementation of crc32 where it is supported.
  - Percona XtraBackup has implemented new options: xtrabackup
  - -tables-exclude and xtrabackup --databases-exclude that work
    similar to xtrabackup --tables and xtrabackup --databases
    options, but exclude given names/paths from backup.
  - The xbstream binary now supports parallel extraction with the
  - -parallel option.
  - The xbstream binary now supports following new options:
  - -decrypt, --encrypt-threads, --encrypt-key, and
  - -encrypt-key-file. When --decrypt option is specified
    xbstream will automatically decrypt encrypted files when
    extracting input stream. Either --encrypt-key or
  - -encrypt-key-file options must be specified to provide
    encryption key, but not both. Option --encrypt-threads
    specifies the number of worker threads doing the encryption,
    default is 1.
  - Bugs fixed
  - xtrabackup would not create fresh InnoDB redo logs when
    preparing incremental backup. Bug fixed #1669592.
  - xtrabackup --export can now export tables that have more than
    31 index. Bug fixed #1089681.
  - Unrecognized character \x01; marked by &lt;-- HERE message could
    be seen if backups were taken with the version check enabled.
    Bug fixed #1651978.
- refreshed percona-xtrabackup-2.3.2-unbundle-jsnm.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1494417601">- enable building with system ssl</changelog>
  <changelog author="mrueckert@suse.de" date="1494417602">- dont build shared libs for now.</changelog>
  <changelog author="astieger@suse.com" date="1496404800">- fix build with gcc7 bsc#1041250:
  * percona-xtrabackup-2.3.8-gcc7-fallthrough.patch
  * percona-xtrabackup-2.3.8-gcc7-pointer-comparisons.patch</changelog>
  <changelog author="astieger@suse.com" date="1500465600">- Remove unused bundled libarchive windows build files with
  proprietary license keywords - bsc#1049458</changelog>
  <changelog author="astieger@suse.com" date="1502193600">- Percona Xtrabackup 2.3.9:
  * New --check-privileges option to check for system privileges
  * Fix crash during prepare stage if index compaction was enabled
  * Support building with OpenSSL 1.1
  * xbstream could run out of file descriptors while extracting
    backups which contains many tables
  * Fix determining use of master_auto_postion on a slave to avoid
    generating an invalid xtrabackup_slave_info file
  * Fix crash backing up MariaDB 10.2.x with --ftwrl-* options
  * Along with xtrabackup_checkpints file, xtrabackup now copies
    xtrabackup_info file into directory specified by --extra-lsndir
  * GTID position was not recorded when --binlog-info option was
    set to AUTO
  * bundled, patched libarchive updated to 3.3.1</changelog>
  <changelog author="astieger@suse.com" date="1502193601">- Percona XtraBackup 2.4.8:
  * Support MySQL 5.7, rebased to MySQL 5.7.13
  * Support for InnoDB tablespace encryption
    add --reencrypt-for-server-id option
  * Support SHA256 passwords (via SSL connection)
  * Support command options for secure connections
  * xbcrypt format changes, backups are incompatible with 2.3.x
  * Add --remove-original option to remove encrypted/compressed
    files after operations
  * Use hwardware accellerated crc32 implementaiton
  * Add options to exclude tables (--tables-exclude) and databases
    (--databases-exclude) from backup
  * xbstream now supports parallel extraction (--parallel)
  * xbstream now supports --decrypt, --encrypt-threads,
  - -encrypt-key, --encrypt-key-file for decryption
  * Add options for MDL locking (--lock-ddl, --lock-ddl-timeout,
  - -lock-ddl-per-table)
- packaging changes:
  * bundle boost 1.59.0
  * dropped patches:
    percona-xtrabackup-2.2.x-srv_buf_size.patch
    percona-xtrabackup-2.3.8-gcc7-fallthrough.patch
    percona-xtrabackup-2.3.8-gcc7-pointer-comparisons.patch</changelog>
  <changelog author="dmueller@suse.com" date="1511352000">- set default unix socket address to the mariadb socket location</changelog>
  <changelog author="astieger@suse.com" date="1512993600">- Percona XtraBackup 2.4.9:
  * xbcrypt now has an ability to decrypt files in parallel by
    specifying the number of threads with the xtrabackup
  - -encrypt-threads option
  * xtrabackup --copy-back option can now be used with xtrabackup
  - -parallel option to copy the user data files in parallel (redo
    logs and system tablespaces are copied in the main thread)
  * Various fixes to slave_info writing
  * Various fixes for crashes under certain circumstances</changelog>
  <changelog author="ro@suse.de" date="1521028800">- compile some files with -O0 to allow build on aarch64
- add percona-xtrabackup-2.4.9-aarch_buildfix.patch
- add _constraints file: min 6G mem, min 8G diskspace</changelog>
  <changelog author="astieger@suse.com" date="1522584000">- Percona XtraBackup 2.4.10:
  * Rebased to MySQL 5.7.19
  * Fix xbcrypt failure with --encrypt-key-file option
  * Fix lock-up on simultaneous usage of --lock-ddl and
  - -lock-ddl-per-table
  * Fix deadlock in prepare stage related to the maximum number
    of pending reads
  * Abort backup when encountering tablespaces with a corrupted
    first page instead of skipping
- Use %license (boo#1082318)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524744000">- Remove unneeded patch:
  * percona-xtrabackup-2.4.9-aarch_buildfix.patch</changelog>
  <changelog author="astieger@suse.com" date="1528286400">- Percona XtraBackup 2.4.11:
  * Add support for encrypted general tablespaces
  * Add support for backup on instqances using keyring_vault plugin</changelog>
  <changelog author="astieger@suse.com" date="1536840000">- Percona Xtrabackup 2.4.12:
  * now prints used arguments to standard output
  * --copy-back did not read which encryption plugin to use from
    plugin-load setting of the my.cnf configuration file
  * xbstream was exiting with zero return code when it failed to
    create one or more target files
  * xtrabackup_checkpoints files were encrypted during a backup,
    caused additional difficulties to take incremental backups</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1551182400">- Add gcc9-warning.patch (bsc#1125418).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557835200">- Disable LTO (boo#1135095).</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1668945600">- Percona Xtrabackup 2.4.26, the latest release of the 2.4 branch.
  It does not support MySQL 8.0.
  * xbcloud now supports Amazon S3, Microsoft Azure Cloud Storage,
    and gained retry on error and incremental backoff
  * enables updating the ib_buffer_pool file with the latest pages
    present in the buffer pool by setting the xtrabackup
  - -dump-innodb-buffer-pool option to ON
  * Add --backup-lock-timeout and --backup-lock-retry-count for
    configuring  the timeout for acquiring metadata locks
  * CVE-2020-10997: information exposure via cmd line output and
    table history (boo#1170644)
  * CVE-2020-29488: Changes in How Absolute Paths are Handled
    (boo#1205581)
- drop percona-xtrabackup-2.3.3-disable-version-check.patch
  and disable version check via a build time option
- drop percona-xtrabackup-2.3.2-unbundle-jsnm.patch</changelog>
</package>
</otherdata>